From 0555eef13a105dbfd3cd9e19f93d6ce1fd7a41c7 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sat, 20 Jul 2024 12:47:43 -0700
Subject: [PATCH 001/707] fix: prevent error when no file selected

---
 ietf/meeting/views.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 2948a2e715..253f2852ff 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -2790,7 +2790,8 @@ def clean_content(self):
     def clean_file(self):
         submission_method = self.cleaned_data.get("submission_method")
         if submission_method == "upload":
-            return super().clean_file()
+            if self.cleaned_data.get("file", None) is not None:
+                return super().clean_file()
         return None
 
     def clean(self):

From c7f6bdef0a9427f479b0db806423e8d2d3782bb5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sat, 20 Jul 2024 13:02:32 -0700
Subject: [PATCH 002/707] test: test missing file

---
 ietf/meeting/tests_views.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index d783ed9c75..db62fe6204 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -6246,6 +6246,12 @@ def test_upload_minutes_agenda(self):
             q = PyQuery(r.content)
             self.assertTrue(q('form input[type="checkbox"]'))
     
+            # test not submitting a file
+            r = self.client.post(url, dict(submission_method="upload"))
+            self.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            self.assertTrue(q("form .is-invalid"))
+    
             test_file = BytesIO(b'this is some text for a test')
             test_file.name = "not_really.json"
             r = self.client.post(url,dict(submission_method="upload",file=test_file))

From a86c62e133008e5fe2a5cce3b99a7329b53462b6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sat, 20 Jul 2024 15:17:43 -0700
Subject: [PATCH 003/707] fix: raw_id_fields for EventAdmin classes (#7711)

* fix: raw_id_fields for ReviewRequestDocEventAdmin

* fix: raw_id_fields for ReviewAssignmentDocEventAdmin

* fix: raw_id_fields for AddedMessageEventAdmin

* fix: raw_id_fields for SubmissionDocEventAdmin

* refactor: make inheritance clearer
---
 ietf/doc/admin.py | 44 +++++++++++++++++++++++++++-----------------
 1 file changed, 27 insertions(+), 17 deletions(-)

diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 3ad4bee2af..301d32d7cc 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -142,6 +142,13 @@ class DocumentActionHolderAdmin(admin.ModelAdmin):
 
 # events
 
+class DeletedEventAdmin(admin.ModelAdmin):
+    list_display = ['id', 'content_type', 'json', 'by', 'time']
+    list_filter = ['time']
+    raw_id_fields = ['content_type', 'by']
+admin.site.register(DeletedEvent, DeletedEventAdmin)
+
+
 class DocEventAdmin(admin.ModelAdmin):
     def event_type(self, obj):
         return str(obj.type)
@@ -159,39 +166,42 @@ def short_desc(self, obj):
 admin.site.register(StateDocEvent, DocEventAdmin)
 admin.site.register(ConsensusDocEvent, DocEventAdmin)
 admin.site.register(BallotDocEvent, DocEventAdmin)
+admin.site.register(IRSGBallotDocEvent, DocEventAdmin)
 admin.site.register(WriteupDocEvent, DocEventAdmin)
 admin.site.register(LastCallDocEvent, DocEventAdmin)
 admin.site.register(TelechatDocEvent, DocEventAdmin)
-admin.site.register(ReviewRequestDocEvent, DocEventAdmin)
-admin.site.register(ReviewAssignmentDocEvent, DocEventAdmin)
 admin.site.register(InitialReviewDocEvent, DocEventAdmin)
-admin.site.register(AddedMessageEvent, DocEventAdmin)
-admin.site.register(SubmissionDocEvent, DocEventAdmin)
 admin.site.register(EditedAuthorsDocEvent, DocEventAdmin)
 admin.site.register(IanaExpertDocEvent, DocEventAdmin)
 
-class DeletedEventAdmin(admin.ModelAdmin):
-    list_display = ['id', 'content_type', 'json', 'by', 'time']
-    list_filter = ['time']
-    raw_id_fields = ['content_type', 'by']
-admin.site.register(DeletedEvent, DeletedEventAdmin)
-
 class BallotPositionDocEventAdmin(DocEventAdmin):
-    raw_id_fields = ["doc", "by", "balloter", "ballot"]
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["balloter", "ballot"]
 admin.site.register(BallotPositionDocEvent, BallotPositionDocEventAdmin)
- 
-class IRSGBallotDocEventAdmin(DocEventAdmin):
-    raw_id_fields = ["doc", "by"]
-admin.site.register(IRSGBallotDocEvent, IRSGBallotDocEventAdmin)
 
 class BofreqEditorDocEventAdmin(DocEventAdmin):
-    raw_id_fields = ["doc", "by", "editors" ]
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["editors"]
 admin.site.register(BofreqEditorDocEvent, BofreqEditorDocEventAdmin)
     
 class BofreqResponsibleDocEventAdmin(DocEventAdmin):
-    raw_id_fields = ["doc", "by", "responsible" ]
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["responsible"]
 admin.site.register(BofreqResponsibleDocEvent, BofreqResponsibleDocEventAdmin)
     
+class ReviewRequestDocEventAdmin(DocEventAdmin):
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["review_request"]
+admin.site.register(ReviewRequestDocEvent, ReviewRequestDocEventAdmin)
+
+class ReviewAssignmentDocEventAdmin(DocEventAdmin):
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["review_assignment"]
+admin.site.register(ReviewAssignmentDocEvent, ReviewAssignmentDocEventAdmin)
+
+class AddedMessageEventAdmin(DocEventAdmin):
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["message"]
+admin.site.register(AddedMessageEvent, AddedMessageEventAdmin)
+
+class SubmissionDocEventAdmin(DocEventAdmin):
+    raw_id_fields = DocEventAdmin.raw_id_fields + ["submission"]
+admin.site.register(SubmissionDocEvent, SubmissionDocEventAdmin)
+
 class DocumentUrlAdmin(admin.ModelAdmin):
     list_display = ['id', 'doc', 'tag', 'url', 'desc', ]
     search_fields = ['doc__name', 'url', ]

From 97837569928580fdbe4a1f40c24e2554396f16ea Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Sat, 20 Jul 2024 17:23:32 -0500
Subject: [PATCH 004/707] Changed milestones to use RFC number if draft is
 published as RFC. (#7718)

Co-authored-by: Tero Kivinen <kivinen@iki.fi>
---
 ietf/templates/group/milestones.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/group/milestones.html b/ietf/templates/group/milestones.html
index 1f259743fe..df03d370fd 100644
--- a/ietf/templates/group/milestones.html
+++ b/ietf/templates/group/milestones.html
@@ -49,7 +49,7 @@ <h2 class="my-3">
                     <td>{{ milestone.desc|urlize_ietf_docs }}</td>
                     <td>
                         {% for d in milestone.docs.all %}
-                            <a href="{% url "ietf.doc.views_doc.document_main" name=d.name %}">{{ d.name }}</a>
+                            <a href="{% url "ietf.doc.views_doc.document_main" name=d.name %}">{% if d.became_rfc %}{{ d.became_rfc }} (was {% endif %}{{ d.name }}{% if d.became_rfc %}){% endif %}</a>
                             <br>
                         {% endfor %}
                     </td>

From 60a3976c3df04d658e63f391bcc2c367cc340dbc Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Sat, 20 Jul 2024 17:23:56 -0500
Subject: [PATCH 005/707] Fixed 'to' to 'review_to' and 'cc' to 'review_cc'.
 (#7710)

Co-authored-by: Tero Kivinen <kivinen@iki.fi>
---
 ietf/templates/doc/review/complete_review.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/doc/review/complete_review.html b/ietf/templates/doc/review/complete_review.html
index 2319c40fd0..f30c641e46 100644
--- a/ietf/templates/doc/review/complete_review.html
+++ b/ietf/templates/doc/review/complete_review.html
@@ -66,7 +66,7 @@ <h1>
         </p>
         <p>
             If you enter the review below, the review will be sent
-            to {% for addr in to %}{{ addr|linkify }}{% if not forloop.last %}, {% endif %}{% endfor %}{% if review_cc %}, with a CC to {% for addr in cc %}{{ addr|linkify }}{% if not forloop.last %}, {% endif %}{% endfor %}{% endif %}.
+            to {% for addr in review_to %}{{ addr|linkify }}{% if not forloop.last %}, {% endif %}{% endfor %}{% if review_cc %}, with a CC to {% for addr in review_cc %}{{ addr|linkify }}{% if not forloop.last %}, {% endif %}{% endfor %}{% endif %}.
         </p>
     {% elif assignment %}
         <p>

From c5ca0ea40575d93c0963480c410c2c278e9fa068 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Sat, 20 Jul 2024 15:24:14 -0700
Subject: [PATCH 006/707] fix: force choice of From address in Announcement
 form. Fixes #7679. (#7720)

---
 ietf/secr/announcement/forms.py | 7 +++++--
 ietf/secr/announcement/tests.py | 2 +-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/ietf/secr/announcement/forms.py b/ietf/secr/announcement/forms.py
index 3aacbfe622..3fe58bdaaa 100644
--- a/ietf/secr/announcement/forms.py
+++ b/ietf/secr/announcement/forms.py
@@ -42,8 +42,11 @@ def get_from_choices(user):
     nomcom_choices = get_nomcom_choices(user)
     if nomcom_choices:
         addresses = list(addresses) + nomcom_choices
-    
-    return list(zip(addresses, addresses))
+
+    choices = list(zip(addresses, addresses))
+    if len(choices) > 1:
+        choices.insert(0, ('', '(Choose an option)'))
+    return choices
 
 
 def get_nomcom_choices(user):
diff --git a/ietf/secr/announcement/tests.py b/ietf/secr/announcement/tests.py
index c50e997f97..c147c301b6 100644
--- a/ietf/secr/announcement/tests.py
+++ b/ietf/secr/announcement/tests.py
@@ -48,7 +48,7 @@ def test_main_announce_from(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#id_frm option')),3)
+        self.assertEqual(len(q('#id_frm option')),4)
 
         # IAB Chair
         self.client.login(username="iab-chair", password="iab-chair+password")

From 363c01e711495cdfe8338c1c1de90255c7083243 Mon Sep 17 00:00:00 2001
From: Lars Eggert <lars@eggert.org>
Date: Sun, 21 Jul 2024 03:14:40 +0300
Subject: [PATCH 007/707] fix: Explicitly set `executable_path` for Selenium
 (#7715)

* fix: Explicitly set `executable_path` for Selenium

So it finds `geckodriver` again.

* Minimize diff

* fix: use existing executable_name

Co-authored-by: Lars Eggert <lars@eggert.org>

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/utils/jstest.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/utils/jstest.py b/ietf/utils/jstest.py
index 07d6ed9dd0..157f97912b 100644
--- a/ietf/utils/jstest.py
+++ b/ietf/utils/jstest.py
@@ -30,7 +30,7 @@
     print("     "+skip_message)
 
 def start_web_driver():
-    service = Service(log_output=f"{executable_name}.log", service_args=['--log-no-truncate'])
+    service = Service(executable_path=f"/usr/bin/{executable_name}", log_output=f"{executable_name}.log", service_args=['--log-no-truncate'])
     options = Options()
     options.add_argument("--headless")
     os.environ["MOZ_REMOTE_SETTINGS_DEVTOOLS"] = "1"

From a3e4e634fce72ee1e9ef75f5f207408999f1a94b Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Mon, 22 Jul 2024 06:14:02 +1200
Subject: [PATCH 008/707] fix: Exclude replaced documents from IESG discusses
 (#7712)

* fix: Exclude replaced documents from IESG discusses

* test: Add checks for filtering replaced IESG drafts

* chore: Improve replaced draft filter

---------

Co-authored-by: Paul Selkirk <paul@painless-security.com>
---
 ietf/iesg/tests.py | 9 +++++++++
 ietf/iesg/views.py | 1 +
 2 files changed, 10 insertions(+)

diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 7211a6bc06..4579316f22 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -52,6 +52,15 @@ def test_feed(self):
         self.assertContains(r, draft.name)
         self.assertContains(r, escape(pos.balloter.plain_name()))
 
+        # Mark draft as replaced
+        draft.set_state(State.objects.get(type="draft", slug="repl"))
+
+        r = self.client.get(urlreverse("ietf.iesg.views.discusses"))
+        self.assertEqual(r.status_code, 200)
+
+        self.assertNotContains(r, draft.name)
+        self.assertNotContains(r, escape(pos.balloter.plain_name()))
+
     def test_milestones_needing_review(self):
         draft = WgDraftFactory()
         RoleFactory(name_id='ad',group=draft.group,person=Person.objects.get(user__username='ad'))
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index a219a6b5de..b67ef04a03 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -483,6 +483,7 @@ def discusses(request):
                                             models.Q(states__type__in=("statchg", "conflrev"),
                                                      states__slug__in=("iesgeval", "defer")),
                                             docevent__ballotpositiondocevent__pos__blocking=True)
+    possible_docs = possible_docs.exclude(states__in=State.objects.filter(type="draft", slug="repl"))
     possible_docs = possible_docs.select_related("stream", "group", "ad").distinct()
 
     docs = []

From aa36f481e13c99bc0865282a9e890e6b049cdb98 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Mon, 22 Jul 2024 06:15:33 +1200
Subject: [PATCH 009/707] chore: Add additional log messages to directauth()
 (#7716)

* chore: Add additional log messages to directauth()

* chore: Keep single log message for each successful response
---
 ietf/api/views.py | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/ietf/api/views.py b/ietf/api/views.py
index 6aaed4b6a9..62857bff54 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -429,6 +429,7 @@ def directauth(request):
                 data = None
 
         if raw_data is None or data is None:
+            log.log("Request body is either missing or invalid")
             return HttpResponse(json.dumps(dict(result="failure",reason="invalid post")), content_type='application/json')
 
         authtoken = data.get('authtoken', None)
@@ -436,9 +437,11 @@ def directauth(request):
         password = data.get('password', None)
 
         if any([item is None for item in (authtoken, username, password)]):
+            log.log("One or more mandatory fields are missing: authtoken, username, password")
             return HttpResponse(json.dumps(dict(result="failure",reason="invalid post")), content_type='application/json')
 
         if not is_valid_token("ietf.api.views.directauth", authtoken):
+            log.log("Auth token provided is invalid")
             return HttpResponse(json.dumps(dict(result="failure",reason="invalid authtoken")), content_type='application/json')
         
         user_query = User.objects.filter(username__iexact=username)
@@ -449,18 +452,20 @@ def directauth(request):
 
 
         # Note well that we are using user.username, not what was passed to the API.
-        if user_query.count() == 1 and authenticate(username = user_query.first().username, password = password):
+        user_count = user_query.count()
+        if user_count == 1 and authenticate(username = user_query.first().username, password = password):
             user = user_query.get()
             if user_query.filter(person__isnull=True).count() == 1: # Can't inspect user.person direclty here
-                log.log(f"Direct auth of personless user {user.pk}:{user.username}")
+                log.log(f"Direct auth success (personless user): {user.pk}:{user.username}")
             else:
-                log.log(f"Direct auth: {user.pk}:{user.person.plain_name()}")
+                log.log(f"Direct auth success: {user.pk}:{user.person.plain_name()}")
             return HttpResponse(json.dumps(dict(result="success")), content_type='application/json')
 
-        log.log(f"Direct auth failure: {username}")
+        log.log(f"Direct auth failure: {username} ({user_count} user(s) found)")
         return HttpResponse(json.dumps(dict(result="failure", reason="authentication failed")), content_type='application/json') 
 
     else:
+        log.log(f"Request must be POST: {request.method} received")
         return HttpResponse(status=405)
 
 

From d5ceb7b20d89ae0d5b8948c151f48c8ce4d546c9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 24 Jul 2024 14:20:18 -0700
Subject: [PATCH 010/707] fix: optional / for /person/merge/ URL (#7746)

---
 ietf/person/urls.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/person/urls.py b/ietf/person/urls.py
index f37d8b46cf..867646fe39 100644
--- a/ietf/person/urls.py
+++ b/ietf/person/urls.py
@@ -2,7 +2,7 @@
 from ietf.utils.urls import url
 
 urlpatterns = [
-    url(r'^merge/$', views.merge),
+    url(r'^merge/?$', views.merge),
     url(r'^search/(?P<model_name>(person|email))/$', views.ajax_select2_search),
     url(r'^(?P<personid>[0-9]+)/email.json$', ajax.person_email_json),
     url(r'^(?P<email_or_name>[^/]+)$', views.profile),

From b5ab4b66110ed0777dae170e87db9343876b2741 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 25 Jul 2024 15:31:53 -0700
Subject: [PATCH 011/707] chore: update test name fixture (#7751)

---
 ietf/name/fixtures/names.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 913c6c987e..3eb2c38d6f 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -3464,7 +3464,7 @@
       "parent_types": [],
       "req_subm_approval": true,
       "role_order": "[\n    \"chair\",\n    \"delegate\"\n]",
-      "session_purposes": "[\n    \"officehours\"\n]",
+      "session_purposes": "[\n    \"officehours\",\n    \"regular\"\n]",
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",

From 247361b7dd8550233991abaa289ca36241c8561f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 30 Jul 2024 20:55:07 -0300
Subject: [PATCH 012/707] ci: better access logs+redirect auth URLs+fix
 X-Request-Start header (#7700)

* fix: silence nginx healthcheck logs

* fix: nginx logs in JSON

* fix: typos in nginx conf

* refactor: repeat less nginx config

* fix: log more req headers from gunicorn

* fix: redirect auth->datatracker, not deny

* feat: log X-Forwarded-Proto
---
 ietf/utils/jsonlogger.py   |  8 ++++++++
 k8s/auth.yaml              |  3 +++
 k8s/datatracker.yaml       |  3 +++
 k8s/kustomization.yaml     |  1 +
 k8s/nginx-auth.conf        |  8 ++++++--
 k8s/nginx-datatracker.conf |  6 +++++-
 k8s/nginx-logging.conf     | 20 ++++++++++++++++++++
 7 files changed, 46 insertions(+), 3 deletions(-)
 create mode 100644 k8s/nginx-logging.conf

diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index a9eeb02ba9..9c7949fd58 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -24,3 +24,11 @@ def add_fields(self, log_record, record, message_dict):
         log_record.setdefault("user_agent", record.args["a"])
         log_record.setdefault("len_bytes", record.args["B"])
         log_record.setdefault("duration_ms", record.args["M"])
+        log_record.setdefault("host", record.args["{host}i"])
+        log_record.setdefault("x_request_start", record.args["{x-request-start}i"])
+        log_record.setdefault("x_real_ip", record.args["{x-real-ip}i"])
+        log_record.setdefault("x_forwarded_for", record.args["{x-forwarded-for}i"])
+        log_record.setdefault("x_forwarded_proto", record.args["{x-forwarded-proto}i"])
+        log_record.setdefault("cf_connecting_ip", record.args["{cf-connecting-ip}i"])
+        log_record.setdefault("cf_connecting_ipv6", record.args["{cf-connecting-ipv6}i"])
+        log_record.setdefault("cf_ray", record.args["{cf-ray}i"])
diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 66627ed450..c35cdc8ac2 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -80,6 +80,9 @@ spec:
           volumeMounts:
             - name: nginx-tmp
               mountPath: /tmp
+            - name: dt-cfg
+              mountPath: /etc/nginx/conf.d/00logging.conf
+              subPath: nginx-logging.conf
             - name: dt-cfg
               mountPath: /etc/nginx/conf.d/auth.conf
               subPath: nginx-auth.conf
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index 9e1ead1a90..a8a9675687 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -80,6 +80,9 @@ spec:
           volumeMounts:
             - name: nginx-tmp
               mountPath: /tmp
+            - name: dt-cfg
+              mountPath: /etc/nginx/conf.d/00logging.conf
+              subPath: nginx-logging.conf
             - name: dt-cfg
               mountPath: /etc/nginx/conf.d/datatracker.conf
               subPath: nginx-datatracker.conf
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index ba8b8a5826..4b79f00753 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -3,6 +3,7 @@ namePrefix: dt-
 configMapGenerator:
   - name: files-cfgmap
     files:
+      - nginx-logging.conf
       - nginx-auth.conf
       - nginx-datatracker.conf
       - settings_local.py
diff --git a/k8s/nginx-auth.conf b/k8s/nginx-auth.conf
index 4cbc8a0a51..6dd5d6ed56 100644
--- a/k8s/nginx-auth.conf
+++ b/k8s/nginx-auth.conf
@@ -2,9 +2,13 @@ server {
     listen 8080 default_server;
     server_name _;
 
+    # Replace default "main" formatter with the ietfjson formatter from nginx-logging.conf
+    access_log  /var/log/nginx/access.log  ietfjson;
+
     # Note that regex location matches take priority over non-regex "prefix" matches. Use regexes so that
     # our deny all rule does not squelch the other locations. 
     location ~ ^/health/nginx$ {
+        access_log off;
         return 200;
     }
 
@@ -19,14 +23,14 @@ server {
 
     # n.b. (?!...) is a negative lookahead group
     location ~ ^(/(?!(api/openid/|accounts/login/|accounts/logout/|accounts/reset/|person/.*/photo|group/groupmenu.json)).*) {
-        deny all;
+        return 302 https://datatracker.ietf.org$${keepempty}request_uri;
     }
 
     location / {
         add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' data: https://datatracker.ietf.org/ https://www.ietf.org/ http://ietf.org/ https://analytics.ietf.org https://static.ietf.org; frame-ancestors 'self' ietf.org *.ietf.org meetecho.com *.meetecho.com gather.town *.gather.town";
         proxy_set_header Host $${keepempty}host;
         proxy_set_header Connection close;
-        proxy_set_header X-Request-Start "t=${msec}";
+        proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $${keepempty}remote_addr;
         proxy_pass http://localhost:8000;
diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index 63c985463c..ff439fba6a 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -2,7 +2,11 @@ server {
     listen 8080 default_server;
     server_name _;
 
+    # Replace default "main" formatter with the ietfjson formatter from nginx-logging.conf
+    access_log  /var/log/nginx/access.log  ietfjson;
+
     location /health/nginx {
+        access_log off;
         return 200;
     }
 
@@ -15,7 +19,7 @@ server {
         add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' data: https://datatracker.ietf.org/ https://www.ietf.org/ http://ietf.org/ https://analytics.ietf.org https://static.ietf.org; frame-ancestors 'self' ietf.org *.ietf.org meetecho.com *.meetecho.com";
         proxy_set_header Host $${keepempty}host;
         proxy_set_header Connection close;
-        proxy_set_header X-Request-Start "t=${msec}";
+        proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $${keepempty}remote_addr;
         proxy_pass http://localhost:8000;
diff --git a/k8s/nginx-logging.conf b/k8s/nginx-logging.conf
new file mode 100644
index 0000000000..0938b0530e
--- /dev/null
+++ b/k8s/nginx-logging.conf
@@ -0,0 +1,20 @@
+# Define JSON log format - must be loaded before config that references it
+log_format  ietfjson  escape=json
+  '{'
+    '"time":"$${keepempty}time_iso8601",'
+    '"remote_ip":"$${keepempty}remote_addr",'
+    '"request":"$${keepempty}request",'
+    '"host":"$${keepempty}host",'
+    '"path":"$${keepempty}request_uri",'
+    '"method":"$${keepempty}request_method",'
+    '"status":"$${keepempty}status",'
+    '"len_bytes":"$${keepempty}body_bytes_sent",'
+    '"duration_ms":"$${keepempty}request_time",'
+    '"referer":"$${keepempty}http_referer",'
+    '"user_agent":"$${keepempty}http_user_agent",'
+    '"x_forwarded_for":"$${keepempty}http_x_forwarded_for",'
+    '"x_forwarded_proto":"$${keepempty}http_x_forwarded_proto",'
+    '"cf_connecting_ip":"$${keepempty}http_cf_connecting_ip",'
+    '"cf_connecting_ipv6":"$${keepempty}http_cf_connecting_ipv6",'
+    '"cf_ray":"$${keepempty}http_cf_ray"'
+  '}';

From fb1942a5386873eb48402fd274cc29c5877bf377 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Fri, 2 Aug 2024 07:25:03 +1200
Subject: [PATCH 013/707] fix: Sort RFCs by date (#7766)

* fix: Sort RFCs by date

* fix: concluded wgs and bofs date sort #7350
---
 ietf/static/js/list.js                     | 6 ++++--
 ietf/templates/group/concluded_groups.html | 8 ++++----
 ietf/templates/person/profile.html         | 2 +-
 3 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/ietf/static/js/list.js b/ietf/static/js/list.js
index d7e9dc944b..c16111ba63 100644
--- a/ietf/static/js/list.js
+++ b/ietf/static/js/list.js
@@ -5,8 +5,10 @@ import {
 function text_sort(a, b, options) {
 
     function prep(e, options) {
-        return $($.parseHTML(e.values()[options.valueName]))
-            .text()
+        const el = $($.parseHTML(e.values()[options.valueName]));
+        const cell_el = e.elm.querySelector(`.${options.valueName}`)
+        const sort_by_number = cell_el?.getAttribute('data-sort-number')
+        return sort_by_number ?? el.text()
             .trim()
             .replaceAll(/\s+/g, ' ');
     }
diff --git a/ietf/templates/group/concluded_groups.html b/ietf/templates/group/concluded_groups.html
index c748c2061b..725e8bd3cc 100644
--- a/ietf/templates/group/concluded_groups.html
+++ b/ietf/templates/group/concluded_groups.html
@@ -40,8 +40,8 @@ <h2 class="mt-5" id="{{ label|slugify }}">{{ label }}</h2>
                         <tr>
                             <th scope="col" data-sort="group">Group</th>
                             <th scope="col" data-sort="name">Name</th>
-                            <th scope="col" data-sort="date">Start</th>
-                            <th scope="col" data-sort="date">Concluded</th>
+                            <th scope="col" data-sort="date-start">Start</th>
+                            <th scope="col" data-sort="date-concluded">Concluded</th>
                         </tr>
                     </thead>
                     <tbody>
@@ -51,8 +51,8 @@ <h2 class="mt-5" id="{{ label|slugify }}">{{ label }}</h2>
                                     <a href="{{ g.about_url }}">{{ g.acronym }}</a>
                                 </td>
                                 <td>{{ g.name }}</td>
-                                <td>{{ g.start_date|date:"Y-m" }}</td>
-                                <td>{{ g.conclude_date|date:"Y-m" }}</td>
+                                <td data-sort-number="{{ g.start_date|date:"U" }}">{{ g.start_date|date:"Y-m" }}</td>
+                                <td data-sort-number="{{ g.conclude_date|date:"U" }}">{{ g.conclude_date|date:"Y-m" }}</td>
                             </tr>
                         {% endfor %}
                     </tbody>
diff --git a/ietf/templates/person/profile.html b/ietf/templates/person/profile.html
index 42e5d2e43a..1424f037a1 100644
--- a/ietf/templates/person/profile.html
+++ b/ietf/templates/person/profile.html
@@ -106,7 +106,7 @@ <h2 class="mt-5" id="rfcs-{{ forloop.counter }}">
                             <td>
                                 <a class="text-nowrap" href="{{ doc.get_absolute_url }}">RFC {{ doc.rfc_number }}</a>
                             </td>
-                            <td>{{ doc.pub_date|date:"b Y"|title }}</td>
+                            <td data-sort-number="{{ doc.pub_date|date:"U" }}">{{ doc.pub_date|date:"b Y"|title }}</td>
                             <td>{{ doc.title|urlize_ietf_docs }}</td>
                             <td class="text-end">
                                 {% with doc.referenced_by_rfcs_as_rfc_or_draft.count as refbycount %}

From 06677a9863b541d2e322b2ec5fd1032035c175fd Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 1 Aug 2024 17:23:35 -0300
Subject: [PATCH 014/707] fix: require login to pdfize (#7775)

* fix: require login to pdfize

* fix: suppress "pdfized" button when it won't work
---
 ietf/doc/views_doc.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 42898d2098..dfef40e558 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -265,6 +265,8 @@ def document_main(request, name, rev=None, document_html=False):
         can_change_stream = bool(can_edit or roles)
 
         file_urls, found_types = build_file_urls(doc)
+        if not request.user.is_authenticated:
+            file_urls = [fu for fu in file_urls if fu[0] != "pdfized"]
         content = doc.text_or_error() # pyflakes:ignore
         content = markup_txt.markup(maybe_split(content, split=split_content))
 
@@ -406,6 +408,8 @@ def document_main(request, name, rev=None, document_html=False):
         latest_revision = None
 
         file_urls, found_types = build_file_urls(doc)
+        if not request.user.is_authenticated:
+            file_urls = [fu for fu in file_urls if fu[0] != "pdfized"]
         content = doc.text_or_error() # pyflakes:ignore
         content = markup_txt.markup(maybe_split(content, split=split_content))
 
@@ -1039,6 +1043,8 @@ def document_html(request, name, rev=None):
         document_html=True,
     )
 
+
+@login_required
 def document_pdfized(request, name, rev=None, ext=None):
 
     found = fuzzy_find_documents(name, rev)

From d683920cecf2cd877bf4e3b3453de6b7494bed12 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 1 Aug 2024 18:33:49 -0300
Subject: [PATCH 015/707] test: log in before pdfize test (#7778)

---
 ietf/doc/tests.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index 5d0bb9c4f9..5e5b741fe5 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -3013,6 +3013,13 @@ def test_pdfized(self):
             with (Path(dir) / f'{draft.name}-{r:02d}.txt').open('w') as f:
                 f.write('text content')
 
+        self.assertTrue(
+            login_testing_unauthorized(
+                self,
+                PersonFactory().user.username,
+                urlreverse(self.view, kwargs={"name": draft.name}),
+            )
+        )
         self.should_succeed(dict(name=rfc.name))
         self.should_succeed(dict(name=draft.name))
         for r in range(0,2):

From 0b445a9f0985ed6a96569391b39cc1ef4a31a5d0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 5 Aug 2024 10:47:32 -0300
Subject: [PATCH 016/707] docs: fix email in README.md (#7784)

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 133d08f5e7..ee9865ba21 100644
--- a/README.md
+++ b/README.md
@@ -81,7 +81,7 @@ Many developers are using [VS Code](https://code.visualstudio.com/) and taking a
 
 If VS Code is not available to you, in your clone, type `cd docker; ./run`
 
-Once the containers are started, run the tests to make sure your checkout is a good place to start from (all tests should pass - if any fail, ask for help at tools-develop@). Inside the app container's shell type:
+Once the containers are started, run the tests to make sure your checkout is a good place to start from (all tests should pass - if any fail, ask for help at tools-help@). Inside the app container's shell type:
 ```sh
 ietf/manage.py test --settings=settings_test
 ```

From b13a606a247c8603e7494822c58ff5028ccce5f5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 5 Aug 2024 11:00:15 -0300
Subject: [PATCH 017/707] feat: recognize HTTPS via proxy (#7765)

* feat: set SECURE_PROXY_SSL_HEADER

* chore: update comment
---
 k8s/settings_local.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 6f0956d065..33ac4f1e38 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -17,6 +17,13 @@ def _multiline_to_list(s):
 # Default to "development". Production _must_ set DATATRACKER_SERVER_MODE="production" in the env!
 SERVER_MODE = os.environ.get("DATATRACKER_SERVER_MODE", "development")
 
+# Use X-Forwarded-Proto to determine request.is_secure(). This relies on CloudFlare overwriting the
+# value of the header if an incoming request sets it, which it does:
+# https://developers.cloudflare.com/fundamentals/reference/http-request-headers/#x-forwarded-proto
+# See also, especially the warnings:
+# https://docs.djangoproject.com/en/dev/ref/settings/#secure-proxy-ssl-header
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+
 # Secrets
 _SECRET_KEY = os.environ.get("DATATRACKER_DJANGO_SECRET_KEY", None)
 if _SECRET_KEY is not None:

From 8a5826a9414ddc53cb721b069e19bf96e2c2c71a Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Mon, 5 Aug 2024 10:48:48 -0400
Subject: [PATCH 018/707] fix: redundant word in banner for Legacy stream
 documents (#7207)

* fix: Remove redundant "stream stream" output

fix: Change "Legacy stream" to "Legacy"

chore: Add "stream" to stream.desc as needed

Fixes: #6902

* chore: Remove unused stream_desc parameter

The stream_desc key isn't used in template/doc/docuemnt_draft.html to
don't pass it in nor compute it

Fixes: #6902

* fix: migrate the legacy StreamName

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/views_doc.py                         |  8 +------
 ietf/name/fixtures/names.json                 |  2 +-
 .../0014_change_legacy_stream_desc.py         | 21 +++++++++++++++++++
 ietf/secr/templates/telechat/doc.html         |  2 +-
 .../doc/mail/last_call_announcement.txt       |  2 +-
 5 files changed, 25 insertions(+), 10 deletions(-)
 create mode 100644 ietf/name/migrations/0014_change_legacy_stream_desc.py

diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index dfef40e558..21c5eb235e 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -607,12 +607,7 @@ def document_main(request, name, rev=None, document_html=False):
         additional_urls = doc.documenturl_set.exclude(tag_id='auth48')
 
         # Stream description and name passing test
-        if doc.stream != None:
-            stream_desc = doc.stream.desc
-            stream = "draft-stream-" + doc.stream.slug
-        else:
-            stream_desc = "(None)"
-            stream = "(None)"
+        stream = ("draft-stream-" + doc.stream.slug) if doc.stream != None else "(None)"
 
         html = None
         js = None
@@ -651,7 +646,6 @@ def document_main(request, name, rev=None, document_html=False):
                                        revisions=simple_diff_revisions if document_html else revisions,
                                        snapshot=snapshot,
                                        stream=stream,
-                                       stream_desc=stream_desc,
                                        latest_revision=latest_revision,
                                        latest_rev=latest_rev,
                                        can_edit=can_edit,
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 3eb2c38d6f..59b367deb8 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -14058,7 +14058,7 @@
   },
   {
     "fields": {
-      "desc": "Legacy stream",
+      "desc": "Legacy",
       "name": "Legacy",
       "order": 6,
       "used": true
diff --git a/ietf/name/migrations/0014_change_legacy_stream_desc.py b/ietf/name/migrations/0014_change_legacy_stream_desc.py
new file mode 100644
index 0000000000..8297e86274
--- /dev/null
+++ b/ietf/name/migrations/0014_change_legacy_stream_desc.py
@@ -0,0 +1,21 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.db import migrations
+
+def forward(apps, schema_editor):
+    StreamName = apps.get_model("name", "StreamName")
+    StreamName.objects.filter(pk="legacy").update(desc="Legacy")
+
+def reverse(apps, schema_editor):
+    StreamName = apps.get_model("name", "StreamName")
+    StreamName.objects.filter(pk="legacy").update(desc="Legacy stream")
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("name", "0013_narrativeminutes"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse)
+    ]
diff --git a/ietf/secr/templates/telechat/doc.html b/ietf/secr/templates/telechat/doc.html
index 7891c1b1e7..6727e157f5 100644
--- a/ietf/secr/templates/telechat/doc.html
+++ b/ietf/secr/templates/telechat/doc.html
@@ -86,7 +86,7 @@ <h2 id="writeup">Ballot Writeup</h2>
                 <h2 id="downrefs">Downward References</h2>
                 {% for ref in downrefs %}
                     <p>Add {{ref.target.name}}
-                        ({{ref.target.std_level}} - {{ref.target.stream.desc}})
+                        ({{ref.target.std_level}} - {{ref.target.stream.desc}} stream)
                         to downref registry.<br>
                         {% if not ref.target.std_level %}
                             +++ Warning: The standards level has not been set yet!!!<br>
diff --git a/ietf/templates/doc/mail/last_call_announcement.txt b/ietf/templates/doc/mail/last_call_announcement.txt
index 8f15a8e2a6..5cf2e9c45b 100644
--- a/ietf/templates/doc/mail/last_call_announcement.txt
+++ b/ietf/templates/doc/mail/last_call_announcement.txt
@@ -33,7 +33,7 @@ No IPR declarations have been submitted directly on this I-D.
 {% if downrefs %}
 The document contains these normative downward references.
 See RFC 3967 for additional information: 
-{% for ref in downrefs %}    {{ref.target.name}}: {{ref.target.title}} ({{ref.target.std_level}} - {{ref.target.stream.desc}})
+{% for ref in downrefs %}    {{ref.target.name}}: {{ref.target.title}} ({{ref.target.std_level}} - {{ref.target.stream.desc}} stream)
 {% endfor %}{%endif%}
 
 {% endautoescape %}

From 16ac73d4b748de2ae1162452753a84bc3d6a0369 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 5 Aug 2024 12:18:01 -0300
Subject: [PATCH 019/707] fix: use BOF states in concluded_groups() (#7771)

* fix: use BOF states in concluded_groups()

* fix: handle events for older BOFs

These could be cleaned up in the database, but I think this
change does the right thing for the existing data.

* style: Black
---
 ietf/group/views.py | 79 +++++++++++++++++++++++++++++++++++++--------
 1 file changed, 65 insertions(+), 14 deletions(-)

diff --git a/ietf/group/views.py b/ietf/group/views.py
index f909a31b6d..e3fd7e80d9 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -334,35 +334,86 @@ def chartering_groups(request):
                   dict(charter_states=charter_states,
                        group_types=group_types))
 
+
 def concluded_groups(request):
     sections = OrderedDict()
 
-    sections['WGs'] = Group.objects.filter(type='wg', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['RGs'] = Group.objects.filter(type='rg', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['BOFs'] = Group.objects.filter(type='wg', state="bof-conc").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['AGs'] = Group.objects.filter(type='ag', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['RAGs'] = Group.objects.filter(type='rag', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['Directorates'] = Group.objects.filter(type='dir', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['Review teams'] = Group.objects.filter(type='review', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['Teams'] = Group.objects.filter(type='team', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
-    sections['Programs'] = Group.objects.filter(type='program', state="conclude").select_related("state", "charter").order_by("parent__name","acronym")
+    sections["WGs"] = (
+        Group.objects.filter(type="wg", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["RGs"] = (
+        Group.objects.filter(type="rg", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["BOFs"] = (
+        Group.objects.filter(type="wg", state="bof-conc")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["AGs"] = (
+        Group.objects.filter(type="ag", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["RAGs"] = (
+        Group.objects.filter(type="rag", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["Directorates"] = (
+        Group.objects.filter(type="dir", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["Review teams"] = (
+        Group.objects.filter(type="review", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["Teams"] = (
+        Group.objects.filter(type="team", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
+    sections["Programs"] = (
+        Group.objects.filter(type="program", state="conclude")
+        .select_related("state", "charter")
+        .order_by("parent__name", "acronym")
+    )
 
     for name, groups in sections.items():
-        
         # add start/conclusion date
         d = dict((g.pk, g) for g in groups)
 
         for g in groups:
             g.start_date = g.conclude_date = None
 
-        for e in ChangeStateGroupEvent.objects.filter(group__in=groups, state="active").order_by("-time"):
+        # Some older BOFs were created in the "active" state, so consider both "active" and "bof"
+        # ChangeStateGroupEvents when finding the start date. A group with _both_ "active" and "bof"
+        # events should not be in the "bof-conc" state so this shouldn't cause a problem (if it does,
+        # we'll need to clean up the data)
+        for e in ChangeStateGroupEvent.objects.filter(
+            group__in=groups,
+            state__in=["active", "bof"] if name == "BOFs" else ["active"],
+        ).order_by("-time"):
             d[e.group_id].start_date = e.time
 
-        for e in ChangeStateGroupEvent.objects.filter(group__in=groups, state="conclude").order_by("time"):
+        # Similarly, some older BOFs were concluded into the "conclude" state and the event was never
+        # fixed, so consider both "conclude" and "bof-conc" ChangeStateGroupEvents when finding the
+        # concluded date. A group with _both_ "conclude" and "bof-conc" events should not be in the
+        # "bof-conc" state so this shouldn't cause a problem (if it does, we'll need to clean up the
+        # data)
+        for e in ChangeStateGroupEvent.objects.filter(
+            group__in=groups,
+            state__in=["bof-conc", "conclude"] if name == "BOFs" else ["conclude"],
+        ).order_by("time"):
             d[e.group_id].conclude_date = e.time
 
-    return render(request, 'group/concluded_groups.html',
-                  dict(sections=sections))
+    return render(request, "group/concluded_groups.html", dict(sections=sections))
+
 
 def prepare_group_documents(request, group, clist):
     found_docs, meta = prepare_document_table(request, docs_tracked_by_community_list(clist), request.GET, max_results=500)

From 63d13074d1c6496223b85d1bd471db5211004d16 Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Mon, 5 Aug 2024 12:03:17 -0400
Subject: [PATCH 020/707] fix: use area-acronym-at-the-time in proceedings
 (#7723)

When generating IETF meeting proceedings, use the Area Acronym for each WG at the time of the meeting. Fixes #7706.
---
 ietf/meeting/views.py | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 253f2852ff..3e483b193b 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4131,6 +4131,13 @@ def _format_materials(items):
 
 def proceedings(request, num=None):
 
+    def area_and_group_acronyms_from_session(s):
+        area = s.group_parent_at_the_time()
+        if area == None:
+            area = s.group.parent
+        group = s.group_at_the_time()
+        return (area.acronym, group.acronym)
+
     meeting = get_meeting(num)
 
     # Early proceedings were hosted on www.ietf.org rather than the datatracker
@@ -4181,12 +4188,11 @@ def proceedings(request, num=None):
         .exclude(current_status='notmeet')
     )
 
-    ietf = sessions.filter(group__parent__type__slug = 'area').exclude(group__acronym='edu').order_by('group__parent__acronym', 'group__acronym')
+    ietf = sessions.filter(group__parent__type__slug = 'area').exclude(group__acronym__in=['edu','iepg','tools'])
+    ietf = list(ietf)
+    ietf.sort(key=lambda s: area_and_group_acronyms_from_session(s))
     ietf_areas = []
-    for area, area_sessions in itertools.groupby(
-            ietf,
-            key=lambda s: s.group.parent
-    ):
+    for area, area_sessions in itertools.groupby(ietf, key=lambda s: s.group_parent_at_the_time()):
         meeting_groups, not_meeting_groups = organize_proceedings_sessions(area_sessions)
         ietf_areas.append((area, meeting_groups, not_meeting_groups))
 

From 9ef7bff77c1208ed6c9504002aee3320856e6499 Mon Sep 17 00:00:00 2001
From: Jim Fenton <fenton@bluepopcorn.net>
Date: Tue, 6 Aug 2024 08:03:37 -0700
Subject: [PATCH 021/707] feat: Unify slide upload and proposal (#7787)

* attempt at optional approval

* Update of meeting slides propose/upload

* Fix tests and residual coding bugs

* Remove gratuitous blank lines
---
 ietf/meeting/forms.py                         |   7 +-
 ietf/meeting/tests_views.py                   |  45 ++++--
 ietf/meeting/urls.py                          |   1 -
 ietf/meeting/views.py                         | 130 +++++++-----------
 .../meeting/propose_session_slides.html       |  27 ----
 .../meeting/session_details_panel.html        |   2 +-
 ietf/templates/meeting/slides_approved.txt    |   2 +-
 .../meeting/upload_session_slides.html        |  12 +-
 8 files changed, 95 insertions(+), 131 deletions(-)
 delete mode 100644 ietf/templates/meeting/propose_session_slides.html

diff --git a/ietf/meeting/forms.py b/ietf/meeting/forms.py
index b31ffb6cd7..3b66d2cd29 100644
--- a/ietf/meeting/forms.py
+++ b/ietf/meeting/forms.py
@@ -489,9 +489,12 @@ class UploadAgendaForm(ApplyToAllFileUploadForm):
 class UploadSlidesForm(ApplyToAllFileUploadForm):
     doc_type = 'slides'
     title = forms.CharField(max_length=255)
+    approved = forms.BooleanField(label='Auto-approve', initial=True, required=False)
 
-    def __init__(self, session, *args, **kwargs):
-        super().__init__(*args, **kwargs)
+    def __init__(self, session, show_apply_to_all_checkbox, can_manage, *args, **kwargs):
+        super().__init__(show_apply_to_all_checkbox, *args, **kwargs)
+        if not can_manage:
+            self.fields.pop('approved')
         self.session = session
 
     def clean_title(self):
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index db62fe6204..da82afb329 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -6454,7 +6454,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertFalse(session1.presentations.filter(document__type_id='slides'))
         test_file = BytesIO(b'this is not really a slide')
         test_file.name = 'not_really.txt'
-        r = self.client.post(url,dict(file=test_file,title='a test slide file',apply_to_all=True))
+        r = self.client.post(url,dict(file=test_file,title='a test slide file',apply_to_all=True,approved=True))
         self.assertEqual(r.status_code, 302)
         self.assertEqual(session1.presentations.count(),1) 
         self.assertEqual(session2.presentations.count(),1) 
@@ -6477,7 +6477,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         url = urlreverse('ietf.meeting.views.upload_session_slides',kwargs={'num':session2.meeting.number,'session_id':session2.id})
         test_file = BytesIO(b'some other thing still not slidelike')
         test_file.name = 'also_not_really.txt'
-        r = self.client.post(url,dict(file=test_file,title='a different slide file',apply_to_all=False))
+        r = self.client.post(url,dict(file=test_file,title='a different slide file',apply_to_all=False,approved=True))
         self.assertEqual(r.status_code, 302)
         self.assertEqual(session1.presentations.count(),1)
         self.assertEqual(session2.presentations.count(),2)
@@ -6501,7 +6501,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertIn('Revise', str(q("title")))
         test_file = BytesIO(b'new content for the second slide deck')
         test_file.name = 'doesnotmatter.txt'
-        r = self.client.post(url,dict(file=test_file,title='rename the presentation',apply_to_all=False))
+        r = self.client.post(url,dict(file=test_file,title='rename the presentation',apply_to_all=False, approved=True))
         self.assertEqual(r.status_code, 302)
         self.assertEqual(session1.presentations.count(),1)
         self.assertEqual(session2.presentations.count(),2)
@@ -6597,7 +6597,7 @@ def test_propose_session_slides(self):
             newperson = PersonFactory()
             
             session_overview_url = urlreverse('ietf.meeting.views.session_details',kwargs={'num':session.meeting.number,'acronym':session.group.acronym})
-            propose_url = urlreverse('ietf.meeting.views.propose_session_slides', kwargs={'session_id':session.pk, 'num': session.meeting.number})    
+            upload_url = urlreverse('ietf.meeting.views.upload_session_slides', kwargs={'session_id':session.pk, 'num': session.meeting.number})    
 
             r = self.client.get(session_overview_url)
             self.assertEqual(r.status_code,200)
@@ -6612,13 +6612,13 @@ def test_propose_session_slides(self):
             self.assertTrue(q('.proposeslides'))
             self.client.logout()
 
-            login_testing_unauthorized(self,newperson.user.username,propose_url)
-            r = self.client.get(propose_url)
+            login_testing_unauthorized(self,newperson.user.username,upload_url)
+            r = self.client.get(upload_url)
             self.assertEqual(r.status_code,200)
             test_file = BytesIO(b'this is not really a slide')
             test_file.name = 'not_really.txt'
             empty_outbox()
-            r = self.client.post(propose_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
+            r = self.client.post(upload_url,dict(file=test_file,title='a test slide file',apply_to_all=True,approved=False))
             self.assertEqual(r.status_code, 302)
             session = Session.objects.get(pk=session.pk)
             self.assertEqual(session.slidesubmission_set.count(),1)
@@ -6639,6 +6639,25 @@ def test_propose_session_slides(self):
             self.assertEqual(len(q('.proposedslidelist p')), 2)
             self.client.logout()
 
+            login_testing_unauthorized(self,chair.user.username,upload_url)
+            r = self.client.get(upload_url)
+            self.assertEqual(r.status_code,200)
+            test_file = BytesIO(b'this is not really a slide either')
+            test_file.name = 'again_not_really.txt'
+            empty_outbox()
+            r = self.client.post(upload_url,dict(file=test_file,title='a selfapproved test slide file',apply_to_all=True,approved=True))
+            self.assertEqual(r.status_code, 302)
+            self.assertEqual(len(outbox),0)
+            self.assertEqual(session.slidesubmission_set.count(),2)
+            self.client.logout()
+
+            self.client.login(username=chair.user.username, password=chair.user.username+"+password")
+            r = self.client.get(session_overview_url)
+            self.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            self.assertEqual(len(q('.uploadslidelist p')), 0)
+            self.client.logout()
+
     def test_disapprove_proposed_slides(self):
         submission = SlideSubmissionFactory()
         submission.session.meeting.importantdate_set.create(name_id='revsub',date=date_today() + datetime.timedelta(days=20))
@@ -6759,12 +6778,12 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
         session.meeting.importantdate_set.create(name_id='revsub',date=date_today()+datetime.timedelta(days=20))
         newperson = PersonFactory()
         
-        propose_url = urlreverse('ietf.meeting.views.propose_session_slides', kwargs={'session_id':session.pk, 'num': session.meeting.number})          
+        upload_url = urlreverse('ietf.meeting.views.upload_session_slides', kwargs={'session_id':session.pk, 'num': session.meeting.number})          
         
-        login_testing_unauthorized(self,newperson.user.username,propose_url)
+        login_testing_unauthorized(self,newperson.user.username,upload_url)
         test_file = BytesIO(b'this is not really a slide')
         test_file.name = 'not_really.txt'
-        r = self.client.post(propose_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
+        r = self.client.post(upload_url,dict(file=test_file,title='a test slide file',apply_to_all=True,approved=False))
         self.assertEqual(r.status_code, 302)
         self.client.logout()
 
@@ -6787,15 +6806,15 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
         
         self.assertEqual(session.presentations.first().document.rev,'00')
 
-        login_testing_unauthorized(self,newperson.user.username,propose_url)
+        login_testing_unauthorized(self,newperson.user.username,upload_url)
         test_file = BytesIO(b'this is not really a slide, but it is another version of it')
         test_file.name = 'not_really.txt'
-        r = self.client.post(propose_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
+        r = self.client.post(upload_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
         self.assertEqual(r.status_code, 302)
 
         test_file = BytesIO(b'this is not really a slide, but it is third version of it')
         test_file.name = 'not_really.txt'
-        r = self.client.post(propose_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
+        r = self.client.post(upload_url,dict(file=test_file,title='a test slide file',apply_to_all=True))
         self.assertEqual(r.status_code, 302)
         self.client.logout()       
 
diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index 26d3d93b20..f2e65578ec 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -22,7 +22,6 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^session/(?P<session_id>\d+)/narrativeminutes$', views.upload_session_narrativeminutes),
     url(r'^session/(?P<session_id>\d+)/agenda$', views.upload_session_agenda),
     url(r'^session/(?P<session_id>\d+)/import/minutes$', views.import_session_minutes),
-    url(r'^session/(?P<session_id>\d+)/propose_slides$', views.propose_session_slides),
     url(r'^session/(?P<session_id>\d+)/slides(?:/%(name)s)?$' % settings.URL_REGEXPS, views.upload_session_slides),
     url(r'^session/(?P<session_id>\d+)/add_to_session$', views.ajax_add_slides_to_session),
     url(r'^session/(?P<session_id>\d+)/remove_from_session$', views.ajax_remove_slides_from_session),
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 3e483b193b..c3494a13ba 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -1702,7 +1702,7 @@ def api_get_session_materials(request, session_id=None):
 
     minutes = session.minutes()
     slides_actions = []
-    if can_manage_session_materials(request.user, session.group, session):
+    if can_manage_session_materials(request.user, session.group, session) or not session.is_material_submission_cutoff():
         slides_actions.append(
             {
                 "label": "Upload slides",
@@ -1712,16 +1712,6 @@ def api_get_session_materials(request, session_id=None):
                 ),
             }
         )
-    elif not session.is_material_submission_cutoff():
-        slides_actions.append(
-            {
-                "label": "Propose slides",
-                "url": reverse(
-                    "ietf.meeting.views.propose_session_slides",
-                    kwargs={"num": session.meeting.number, "session_id": session.pk},
-                ),
-            }
-        )
     else:
         pass  # no action available if it's past cutoff
 
@@ -2920,6 +2910,7 @@ def upload_session_agenda(request, session_id, num):
                   })
 
 
+@login_required
 def upload_session_slides(request, session_id, num, name=None):
     """Upload new or replacement slides for a session
     
@@ -2927,10 +2918,7 @@ def upload_session_slides(request, session_id, num, name=None):
     """
     # num is redundant, but we're dragging it along an artifact of where we are in the current URL structure
     session = get_object_or_404(Session, pk=session_id)
-    if not session.can_manage_materials(request.user):
-        permission_denied(
-            request, "You don't have permission to upload slides for this session."
-        )
+    can_manage = session.can_manage_materials(request.user)
     if session.is_material_submission_cutoff() and not has_role(
         request.user, "Secretariat"
     ):
@@ -2955,7 +2943,7 @@ def upload_session_slides(request, session_id, num, name=None):
 
     if request.method == "POST":
         form = UploadSlidesForm(
-            session, show_apply_to_all_checkbox, request.POST, request.FILES
+            session, show_apply_to_all_checkbox, can_manage, request.POST, request.FILES
         )
         if form.is_valid():
             file = request.FILES["file"]
@@ -2963,6 +2951,46 @@ def upload_session_slides(request, session_id, num, name=None):
             apply_to_all = session.type_id == "regular"
             if show_apply_to_all_checkbox:
                 apply_to_all = form.cleaned_data["apply_to_all"]
+            if can_manage:
+                approved = form.cleaned_data["approved"]
+            else:
+                approved = False
+
+            # Propose slides if not auto-approved
+            if not approved:
+                title = form.cleaned_data['title']
+                submission = SlideSubmission.objects.create(session = session, title = title, filename = '', apply_to_all = apply_to_all, submitter=request.user.person)
+
+                if session.meeting.type_id=='ietf':
+                    name = 'slides-%s-%s' % (session.meeting.number, 
+                                         session.group.acronym) 
+                    if not apply_to_all:
+                        name += '-%s' % (session.docname_token(),)
+                else:
+                    name = 'slides-%s-%s' % (session.meeting.number, session.docname_token())
+                name = name + '-' + slugify(title).replace('_', '-')[:128]
+                filename = '%s-ss%d%s'% (name, submission.id, ext)
+                destination = io.open(os.path.join(settings.SLIDE_STAGING_PATH, filename),'wb+')
+                for chunk in file.chunks():
+                    destination.write(chunk)
+                destination.close()
+
+                submission.filename = filename
+                submission.save()
+
+                (to, cc) = gather_address_lists('slides_proposed', group=session.group, proposer=request.user.person).as_strings()
+                msg_txt = render_to_string("meeting/slides_proposed.txt", {
+                        "to": to,
+                        "cc": cc,
+                        "submission": submission,
+                        "settings": settings,
+                     })
+                msg = infer_message(msg_txt)
+                msg.by = request.user.person
+                msg.save()
+                send_mail_message(request, msg)
+                messages.success(request, 'Successfully submitted proposed slides.')
+                return redirect('ietf.meeting.views.session_details',num=num,acronym=session.group.acronym)
 
             # Handle creation / update of the Document (but do not save yet)
             if doc is not None:
@@ -3076,7 +3104,7 @@ def upload_session_slides(request, session_id, num, name=None):
         initial = {}
         if doc is not None:
             initial = {"title": doc.title}
-        form = UploadSlidesForm(session, show_apply_to_all_checkbox, initial=initial)
+        form = UploadSlidesForm(session, show_apply_to_all_checkbox, can_manage, initial=initial)
 
     return render(
         request,
@@ -3085,77 +3113,12 @@ def upload_session_slides(request, session_id, num, name=None):
             "session": session,
             "session_number": session_number,
             "slides_sp": session.presentations.filter(document=doc).first() if doc else None,
+            "manage": session.can_manage_materials(request.user),
             "form": form,
         },
     )
 
 
-@login_required
-def propose_session_slides(request, session_id, num):
-    session = get_object_or_404(Session,pk=session_id)
-    if session.is_material_submission_cutoff() and not has_role(request.user, "Secretariat"):
-        permission_denied(request, "The materials cutoff for this session has passed. Contact the secretariat for further action.")
-
-    session_number = None
-    sessions = get_sessions(session.meeting.number,session.group.acronym)
-    show_apply_to_all_checkbox = len(sessions) > 1 if session.type_id == 'regular' else False
-    if len(sessions) > 1:
-       session_number = 1 + sessions.index(session)
-
-    
-    if request.method == 'POST':
-        form = UploadSlidesForm(session, show_apply_to_all_checkbox,request.POST,request.FILES)
-        if form.is_valid():
-            file = request.FILES['file']
-            _, ext = os.path.splitext(file.name)
-            apply_to_all = session.type_id == 'regular'
-            if show_apply_to_all_checkbox:
-                apply_to_all = form.cleaned_data['apply_to_all']
-            title = form.cleaned_data['title']
-
-            submission = SlideSubmission.objects.create(session = session, title = title, filename = '', apply_to_all = apply_to_all, submitter=request.user.person)
-
-            if session.meeting.type_id=='ietf':
-                name = 'slides-%s-%s' % (session.meeting.number, 
-                                         session.group.acronym) 
-                if not apply_to_all:
-                    name += '-%s' % (session.docname_token(),)
-            else:
-                name = 'slides-%s-%s' % (session.meeting.number, session.docname_token())
-            name = name + '-' + slugify(title).replace('_', '-')[:128]
-            filename = '%s-ss%d%s'% (name, submission.id, ext)
-            destination = io.open(os.path.join(settings.SLIDE_STAGING_PATH, filename),'wb+')
-            for chunk in file.chunks():
-                destination.write(chunk)
-            destination.close()
-
-            submission.filename = filename
-            submission.save()
-
-            (to, cc) = gather_address_lists('slides_proposed', group=session.group, proposer=request.user.person).as_strings()
-            msg_txt = render_to_string("meeting/slides_proposed.txt", {
-                    "to": to,
-                    "cc": cc,
-                    "submission": submission,
-                    "settings": settings,
-                 })
-            msg = infer_message(msg_txt)
-            msg.by = request.user.person
-            msg.save()
-            send_mail_message(request, msg)
-            messages.success(request, 'Successfully submitted proposed slides.')
-            return redirect('ietf.meeting.views.session_details',num=num,acronym=session.group.acronym)
-    else: 
-        initial = {}
-        form = UploadSlidesForm(session, show_apply_to_all_checkbox, initial=initial)
-
-    return render(request, "meeting/propose_session_slides.html", 
-                  {'session': session,
-                   'session_number': session_number,
-                   'form': form,
-                  })
-
-
 def remove_sessionpresentation(request, session_id, num, name):
     sp = get_object_or_404(
         SessionPresentation, session_id=session_id, document__name=name
@@ -5072,6 +5035,7 @@ def approve_proposed_slides(request, slidesubmission_id, num):
                     "cc": cc,
                     "submission": submission,
                     "settings": settings,
+                    "approver": request.user.person
                 })
                 send_mail_text(request, to, None, subject, body, cc=cc)
                 return redirect('ietf.meeting.views.session_details',num=num,acronym=acronym)
diff --git a/ietf/templates/meeting/propose_session_slides.html b/ietf/templates/meeting/propose_session_slides.html
deleted file mode 100644
index e5a0b451e6..0000000000
--- a/ietf/templates/meeting/propose_session_slides.html
+++ /dev/null
@@ -1,27 +0,0 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin static django_bootstrap5 tz %}
-{% block title %}Propose Slides for {{ session.meeting }} : {{ session.group.acronym }}{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>
-        Propose Slides for {{ session.meeting }}
-        <br>
-        <small class="text-body-secondary">{{ session.group.acronym }}
-            {% if session.name %}: {{ session.name }}{% endif %}
-        </small>
-    </h1>
-    {% if session_number %}
-        <h2 class="mt-3">
-            Session {{ session_number }} : {{ session.official_timeslotassignment.timeslot.time|timezone:session.meeting.time_zone|date:"D M-d-Y Hi" }}
-        </h2>
-    {% endif %}
-    <p class="alert alert-info my-3">
-        This form will allow you to propose a slide deck to the session chairs. After you upload your proposal, mail will be sent to the session chairs asking for their approval.
-    </p>
-    <form enctype="multipart/form-data" method="post">
-        {% csrf_token %}
-        {% bootstrap_form form %}
-        <button type="submit" class="btn btn-primary">Upload</button>
-    </form>
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index d053ba1c1c..1dcbded913 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -187,7 +187,7 @@ <h3 class="mt-4">Slides</h3>
             </a>
         {% elif request.user.is_authenticated and not session.is_material_submission_cutoff %}
             <a class="btn btn-primary proposeslides"
-               href="{% url 'ietf.meeting.views.propose_session_slides' session_id=session.pk num=session.meeting.number %}">
+               href="{% url 'ietf.meeting.views.upload_session_slides' session_id=session.pk num=session.meeting.number %}">
                 Propose slides
             </a>
         {% endif %}
diff --git a/ietf/templates/meeting/slides_approved.txt b/ietf/templates/meeting/slides_approved.txt
index db288ad853..61ffafcd18 100644
--- a/ietf/templates/meeting/slides_approved.txt
+++ b/ietf/templates/meeting/slides_approved.txt
@@ -1,4 +1,4 @@
-{% load ietf_filters %}{% autoescape off %}Your proposed slides have been approved for {{ submission.session.meeting }} : {{ submission.session.group.acronym }}{% if submission.session.name %} : {{submission.session.name}}{% endif %}
+{% load ietf_filters %}{% autoescape off %}Your proposed slides have been approved for {{ submission.session.meeting }} : {{ submission.session.group.acronym }}{% if submission.session.name %} : {{submission.session.name}}{% endif %} by {{approver}}
 
 Title: {{submission.title}}
 
diff --git a/ietf/templates/meeting/upload_session_slides.html b/ietf/templates/meeting/upload_session_slides.html
index 8e3e064df3..059ffae16f 100644
--- a/ietf/templates/meeting/upload_session_slides.html
+++ b/ietf/templates/meeting/upload_session_slides.html
@@ -17,15 +17,21 @@ <h1>
         {% else %}
             Upload new
         {% endif %}
-        slides for {{ session.meeting }}
-        <br>
+        slides for {{ session.meeting }}        <br>
         <small class="text-body-secondary">
             {{ session.group.acronym }}
             {% if session.name %}: {{ session.name }}{% endif %}
         </small>
     </h1>
     {% if session_number %}
-        <h2>Session {{ session_number }} : {{ session.official_timeslotassignment.timeslot.time|timezone:session.meeting.time_zone|date:"D M-d-Y Hi" }}</h2>
+        <h2 class="mt-3">
+            Session {{ session_number }} : {{ session.official_timeslotassignment.timeslot.time|timezone:session.meeting.time_zone|date:"D M-d-Y Hi" }}
+        </h2>
+    {% endif %}
+    {% if not manage %}
+    <p class="alert alert-info my-3">
+        This form will allow you to propose a slide deck to the session chairs. After you upload your proposal, mail will be sent to the session chairs asking for their approval.
+    </p>
     {% endif %}
     {% if slides_sp %}<h3>{{ slides_sp.document.name }}</h3>{% endif %}
     <form class="my-3" enctype="multipart/form-data" method="post">

From b90820eb7a74ecaa417df120229ca3f798602e69 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Thu, 8 Aug 2024 02:15:01 +1200
Subject: [PATCH 022/707] fix: Hide last modified field in agenda when
 unavailable (#7722)

* test: Update tests to check for Updated field in agenda.txt

* fix: Hide Updated in agenda.txt if too old

* test: Remove confusing tests on CSV agenda

* refactor: Make updated() return None when no valid timestamp found

* refactor: Remove walrus operator
---
 client/agenda/Agenda.vue          |  2 +-
 ietf/meeting/models.py            | 13 ++++----
 ietf/meeting/tests_views.py       | 50 ++++++++++++++++++++++++++++++-
 ietf/meeting/utils.py             |  3 +-
 ietf/templates/meeting/agenda.txt |  2 ++
 5 files changed, 61 insertions(+), 9 deletions(-)

diff --git a/client/agenda/Agenda.vue b/client/agenda/Agenda.vue
index 34a3751f23..40dae008a4 100644
--- a/client/agenda/Agenda.vue
+++ b/client/agenda/Agenda.vue
@@ -323,7 +323,7 @@ const meetingUpdated = computed(() => {
   if (!agendaStore.meeting.updated) { return false }
   
   const updatedDatetime = DateTime.fromISO(agendaStore.meeting.updated).setZone(agendaStore.timezone)
-  if (!updatedDatetime.isValid || updatedDatetime < DateTime.fromISO('1980-01-01')) {
+  if (!updatedDatetime.isValid) {
     return false
   }
   
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index dd6e2db6c5..fa1ad9d674 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -369,13 +369,14 @@ def vtimezone(self):
 
     def updated(self):
         # should be Meeting.modified, but we don't have that
-        min_time = pytz.utc.localize(datetime.datetime(1970, 1, 1, 0, 0, 0))
-        timeslots_updated = self.timeslot_set.aggregate(Max('modified'))["modified__max"] or min_time
-        sessions_updated = self.session_set.aggregate(Max('modified'))["modified__max"] or min_time
-        assignments_updated = min_time
+        timeslots_updated = self.timeslot_set.aggregate(Max('modified'))["modified__max"]
+        sessions_updated = self.session_set.aggregate(Max('modified'))["modified__max"]
+        assignments_updated = None
         if self.schedule:
-            assignments_updated = SchedTimeSessAssignment.objects.filter(schedule__in=[self.schedule, self.schedule.base if self.schedule else None]).aggregate(Max('modified'))["modified__max"] or min_time
-        return max(timeslots_updated, sessions_updated, assignments_updated)
+            assignments_updated = SchedTimeSessAssignment.objects.filter(schedule__in=[self.schedule, self.schedule.base if self.schedule else None]).aggregate(Max('modified'))["modified__max"]
+        dts = [timeslots_updated, sessions_updated, assignments_updated]
+        valid_only = [dt for dt in dts if dt is not None]
+        return max(valid_only) if valid_only else None
 
     @memoize
     def previous_meeting(self):
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index da82afb329..60eef96b2d 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -294,6 +294,8 @@ def test_meeting_agenda(self):
             (slot.time + slot.duration).astimezone(meeting.tz()).strftime("%H%M"),
         ))
         self.assertContains(r, f"shown in the {meeting.tz()} time zone")
+        updated = meeting.updated().astimezone(meeting.tz()).strftime("%Y-%m-%d %H:%M:%S %Z")
+        self.assertContains(r, f"Updated {updated}")
 
         # text, UTC
         r = self.client.get(urlreverse(
@@ -309,6 +311,16 @@ def test_meeting_agenda(self):
             (slot.time + slot.duration).astimezone(datetime.timezone.utc).strftime("%H%M"),
         ))
         self.assertContains(r, "shown in UTC")
+        updated = meeting.updated().astimezone(datetime.timezone.utc).strftime("%Y-%m-%d %H:%M:%S %Z")
+        self.assertContains(r, f"Updated {updated}")
+
+        # text, invalid updated (none)
+        with patch("ietf.meeting.models.Meeting.updated", return_value=None):
+            r = self.client.get(urlreverse(
+                "ietf.meeting.views.agenda_plain",
+                kwargs=dict(num=meeting.number, ext=".txt", utc="-utc"),
+            ))
+            self.assertNotContains(r, "Updated ")
 
         # future meeting, no agenda
         r = self.client.get(urlreverse("ietf.meeting.views.agenda_plain", kwargs=dict(num=future_meeting.number, ext=".txt")))
@@ -859,6 +871,24 @@ def test_important_dates_ical(self):
         for d in meeting.importantdate_set.all():
             self.assertContains(r, d.date.isoformat())
 
+        updated = meeting.updated()
+        self.assertIsNotNone(updated)
+        expected_updated = updated.astimezone(datetime.timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+        self.assertContains(r, f"DTSTAMP:{expected_updated}")
+        dtstamps_count = r.content.decode("utf-8").count(f"DTSTAMP:{expected_updated}")
+        self.assertEqual(dtstamps_count, meeting.importantdate_set.count())
+
+        # With default cached_updated, 1970-01-01
+        with patch("ietf.meeting.models.Meeting.updated", return_value=None):
+            r = self.client.get(url)
+            for d in meeting.importantdate_set.all():
+                self.assertContains(r, d.date.isoformat())
+
+            expected_updated = "19700101T000000Z"
+            self.assertContains(r, f"DTSTAMP:{expected_updated}")
+            dtstamps_count = r.content.decode("utf-8").count(f"DTSTAMP:{expected_updated}")
+            self.assertEqual(dtstamps_count, meeting.importantdate_set.count())
+
     def test_group_ical(self):
         meeting = make_meeting_test_data()
         s1 = Session.objects.filter(meeting=meeting, group__acronym="mars").first()
@@ -4952,7 +4982,23 @@ def test_upcoming_ical(self):
                                       expected_event_count=len(expected_event_summaries))
         self.assertNotContains(r, 'Remote instructions:')
 
-    def test_upcoming_ical_filter(self):
+        updated = meeting.updated()
+        self.assertIsNotNone(updated)
+        expected_updated = updated.astimezone(datetime.timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+        self.assertContains(r, f"DTSTAMP:{expected_updated}")
+
+        # With default cached_updated, 1970-01-01
+        with patch("ietf.meeting.models.Meeting.updated", return_value=None):
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+
+            self.assertEqual(meeting.type_id, "ietf")
+
+            expected_updated = "19700101T000000Z"
+            self.assertEqual(1, r.content.decode("utf-8").count(f"DTSTAMP:{expected_updated}"))
+
+    @patch("ietf.meeting.utils.preprocess_meeting_important_dates")
+    def test_upcoming_ical_filter(self, mock_preprocess_meeting_important_dates):
         # Just a quick check of functionality - details tested by test_js.InterimTests
         make_meeting_test_data(create_interims=True)
         url = urlreverse("ietf.meeting.views.upcoming_ical")
@@ -4974,6 +5020,8 @@ def test_upcoming_ical_filter(self):
                                       ],
                                       expected_event_count=2)
 
+        # Verify preprocess_meeting_important_dates isn't being called
+        mock_preprocess_meeting_important_dates.assert_not_called()
 
     def test_upcoming_json(self):
         make_meeting_test_data(create_interims=True)
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index a60d3b010a..470795811d 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -609,7 +609,8 @@ def bulk_create_timeslots(meeting, times, locations, other_props):
 
 def preprocess_meeting_important_dates(meetings):
     for m in meetings:
-        m.cached_updated = m.updated()
+        # cached_updated must be present, set it to 1970-01-01 if necessary
+        m.cached_updated = m.updated() or pytz.utc.localize(datetime.datetime(1970, 1, 1, 0, 0, 0))
         m.important_dates = m.importantdate_set.prefetch_related("name")
         for d in m.important_dates:
             d.midnight_cutoff = "UTC 23:59" in d.name.name
diff --git a/ietf/templates/meeting/agenda.txt b/ietf/templates/meeting/agenda.txt
index d00be80d14..7a49dde0c8 100644
--- a/ietf/templates/meeting/agenda.txt
+++ b/ietf/templates/meeting/agenda.txt
@@ -7,7 +7,9 @@
 {% filter center:72 %}{{ schedule.meeting.agenda_info_note|striptags|wordwrap:72|safe }}{% endfilter %}
 {% endif %}
 {% filter center:72 %}{{ schedule.meeting.date|date:"F j" }}-{% if schedule.meeting.date.month != schedule.meeting.end_date.month %}{{ schedule.meeting.end_date|date:"F " }}{% endif %}{{ schedule.meeting.end_date|date:"j, Y" }}{% endfilter %}
+{% if updated %}
 {% filter center:72 %}Updated {{ updated|date:"Y-m-d H:i:s T" }}{% endfilter %}
+{% endif %}
 
 {% filter center:72 %}IETF agendas are subject to change, up to and during the meeting.{% endfilter %}
 {% filter center:72 %}Times are shown in {% if display_timezone.lower == "utc" %}UTC{% else %}the {{ display_timezone }} time zone{% endif %}.{% endfilter %}

From 95a7e14ada82fd43eafed7218a28ba0554c81e69 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 7 Aug 2024 11:16:40 -0300
Subject: [PATCH 023/707] feat: dev mode admin + refactor api init (#7628)

* feat: style admin site in dev mode

* refactor: eliminate base_site.html

* fix: remove debug

* fix: commit missing __init__.py

* refactor: make method static; fix tests

* refactor: move api init to AppConfig.ready()

Avoids interacting with the app registry before
it's ready.
---
 ietf/admin/__init__.py         |  0
 ietf/admin/apps.py             |  6 +++++
 ietf/admin/sites.py            | 15 ++++++++++++
 ietf/api/__init__.py           | 43 ++++++++++++++--------------------
 ietf/api/__init__.pyi          |  1 +
 ietf/api/apps.py               | 15 ++++++++++++
 ietf/api/urls.py               |  1 +
 ietf/settings.py               |  2 +-
 ietf/templates/admin/base.html | 27 +++++++++++++++++++++
 ietf/urls.py                   |  2 --
 ietf/utils/tests.py            |  3 ++-
 11 files changed, 85 insertions(+), 30 deletions(-)
 create mode 100644 ietf/admin/__init__.py
 create mode 100644 ietf/admin/apps.py
 create mode 100644 ietf/admin/sites.py
 create mode 100644 ietf/api/apps.py
 create mode 100644 ietf/templates/admin/base.html

diff --git a/ietf/admin/__init__.py b/ietf/admin/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/ietf/admin/apps.py b/ietf/admin/apps.py
new file mode 100644
index 0000000000..20b762cfec
--- /dev/null
+++ b/ietf/admin/apps.py
@@ -0,0 +1,6 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+from django.contrib.admin import apps as admin_apps
+
+
+class AdminConfig(admin_apps.AdminConfig):
+    default_site = "ietf.admin.sites.AdminSite" 
diff --git a/ietf/admin/sites.py b/ietf/admin/sites.py
new file mode 100644
index 0000000000..69cb62ae20
--- /dev/null
+++ b/ietf/admin/sites.py
@@ -0,0 +1,15 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+from django.contrib.admin import AdminSite as _AdminSite
+from django.conf import settings
+from django.utils.safestring import mark_safe
+
+
+class AdminSite(_AdminSite):
+    site_title = "Datatracker admin"
+    
+    @staticmethod
+    def site_header():
+        if settings.SERVER_MODE == "production":
+            return "Datatracker administration"
+        else:
+            return mark_safe('Datatracker administration <span class="text-danger">&delta;</span>')
diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index 54b4b7424b..81f370121f 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -7,8 +7,10 @@
 
 from urllib.parse import urlencode
 
-from django.conf import settings
+from django.apps import apps as django_apps
 from django.core.exceptions import ObjectDoesNotExist
+from django.utils.module_loading import autodiscover_modules
+
 
 import debug                            # pyflakes:ignore
 
@@ -19,40 +21,29 @@
 from tastypie.exceptions import ApiFieldError
 from tastypie.fields import ApiField
 
+
 _api_list = []
 
-for _app in settings.INSTALLED_APPS:
-    _module_dict = globals()
-    if '.' in _app:
-        _root, _name = _app.split('.', 1)
-        if _root == 'ietf':
-            if not '.' in _name:
-                _api = Api(api_name=_name)
-                _module_dict[_name] = _api
-                _api_list.append((_name, _api))
+
+def populate_api_list():
+    for app_config in django_apps.get_app_configs():
+        _module_dict = globals()
+        if '.' in app_config.name:
+            _root, _name = app_config.name.split('.', 1)
+            if _root == 'ietf':
+                if not '.' in _name:
+                    _api = Api(api_name=_name)
+                    _module_dict[_name] = _api
+                    _api_list.append((_name, _api))
 
 def autodiscover():
     """
     Auto-discover INSTALLED_APPS resources.py modules and fail silently when
-    not present. This forces an import on them to register any admin bits they
+    not present. This forces an import on them to register any resources they
     may want.
     """
+    autodiscover_modules("resources")
 
-    from importlib import import_module
-    from django.conf import settings
-    from django.utils.module_loading import module_has_submodule
-
-    for app in settings.INSTALLED_APPS:
-        mod = import_module(app)
-        # Attempt to import the app's admin module.
-        try:
-            import_module('%s.resources' % (app, ))
-        except:
-            # Decide whether to bubble up this error. If the app just
-            # doesn't have an admin module, we can ignore the error
-            # attempting to import it, otherwise we want it to bubble up.
-            if module_has_submodule(mod, "resources"):
-                raise
 
 class ModelResource(tastypie.resources.ModelResource):
     def generate_cache_key(self, *args, **kwargs):
diff --git a/ietf/api/__init__.pyi b/ietf/api/__init__.pyi
index 63d9bc513b..ededea90a7 100644
--- a/ietf/api/__init__.pyi
+++ b/ietf/api/__init__.pyi
@@ -30,4 +30,5 @@ class Serializer(): ...
 class ToOneField(tastypie.fields.ToOneField): ...
 class TimedeltaField(tastypie.fields.ApiField): ...
 
+def populate_api_list() -> None: ...
 def autodiscover() -> None: ...
diff --git a/ietf/api/apps.py b/ietf/api/apps.py
new file mode 100644
index 0000000000..7eca094a62
--- /dev/null
+++ b/ietf/api/apps.py
@@ -0,0 +1,15 @@
+from django.apps import AppConfig
+from . import populate_api_list
+
+
+class ApiConfig(AppConfig):
+    name = "ietf.api"
+
+    def ready(self):
+        """Hook to do init after the app registry is fully populated
+        
+        Importing models or accessing the app registry is ok here, but do not
+        interact with the database. See        
+        https://docs.djangoproject.com/en/4.2/ref/applications/#django.apps.AppConfig.ready
+        """
+        populate_api_list()
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index fb2184a3f0..3c0fb872c9 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -11,6 +11,7 @@
 from ietf.submit import views as submit_views
 from ietf.utils.urls import url
 
+
 api.autodiscover()
 
 urlpatterns = [
diff --git a/ietf/settings.py b/ietf/settings.py
index 13b7506673..7572b15213 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -436,7 +436,7 @@ def skip_unreadable_post(record):
 
 INSTALLED_APPS = [
     # Django apps
-    'django.contrib.admin',
+    'ietf.admin',  # replaces django.contrib.admin
     'django.contrib.admindocs',
     'django.contrib.auth',
     'django.contrib.contenttypes',
diff --git a/ietf/templates/admin/base.html b/ietf/templates/admin/base.html
new file mode 100644
index 0000000000..9ca7377a54
--- /dev/null
+++ b/ietf/templates/admin/base.html
@@ -0,0 +1,27 @@
+{% extends 'admin/base.html' %}
+{% load static %}
+{% block extrastyle %}{{ block.super }}
+    {% if server_mode and server_mode != "production" %}
+        <style>
+            {# grab colors that match bootstrap so we don't have to import the css #}
+            html, :root{
+                --bs-danger-bg-subtle: #F8D7DAFF; 
+                --bs-danger-text-emphasis: #58151CFF;
+                --bs-danger: #DC3545FF;
+                --bs-secondary: #6C757DFF;
+                --bs-primary-text-emphasis: #052C65FF;
+            }
+            html[data-theme="light"], :root {
+                --primary: var(--bs-danger-bg-subtle);
+                --secondary: var(--bs-danger-bg-subtle);
+                --accent: var(--bs-danger-text-emphasis);
+                --primary-fg: var(--bs-primary-text-emphasis);
+                --link-fg: var(--bs-danger-text-emphasis);
+                --header-color: var(--bs-secondary);
+                --breadcrumbs-fg: var(--bs-secondary);
+                --breadcrumbs-link-fg: var(--link-fg);
+            }
+            span.text-danger { color: var(--bs-danger); }
+        </style>
+    {% endif %}
+{% endblock %}
diff --git a/ietf/urls.py b/ietf/urls.py
index 4b29a3aa81..90b161b530 100644
--- a/ietf/urls.py
+++ b/ietf/urls.py
@@ -20,8 +20,6 @@
 from ietf.utils.urls import url
 
 
-admin.autodiscover()
-
 # sometimes, this code gets called more than once, which is an
 # that seems impossible to work around.
 try:
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 476c257a38..d435583e89 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -36,6 +36,7 @@
 
 import debug                            # pyflakes:ignore
 
+from ietf.admin.sites import AdminSite
 from ietf.person.name import name_parts, unidecode_name
 from ietf.submit.tests import submission_file
 from ietf.utils.draft import PlaintextDraft, getmeta
@@ -325,7 +326,7 @@ def test_all_model_admins_exist(self):
         User.objects.create_superuser('admin', 'admin@example.org', 'admin+password')
         self.client.login(username='admin', password='admin+password')
         rtop = self.client.get("/admin/")
-        self.assertContains(rtop, 'Django administration')
+        self.assertContains(rtop, AdminSite.site_header())
         for name in self.apps:
             app_name = self.apps[name]
             self.assertContains(rtop, name)

From 1de41965bee819d85b5b76f6a2db5c2e5934a6b6 Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Wed, 7 Aug 2024 10:18:13 -0400
Subject: [PATCH 024/707] fix: add celery tasks for idnits2 and bibxml file
 generation (#7204)

* Add celery tasks for idnits2 and bibxml file generation

* Update tests_tasks.py

Fix typo: bad_vakue -> bad_value

* Update utils.py

Don't raise error inbibxml_for_all_drafts

* chore: fixup merge

* chore: more merge cleanup

* chore: one last merge cleanup

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/doc/tasks.py       |   2 +
 ietf/doc/tests_tasks.py | 119 ++++++++++++++++++++++------------------
 ietf/doc/utils.py       |   3 +-
 3 files changed, 70 insertions(+), 54 deletions(-)

diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 209db035a4..f1de459dd8 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -105,6 +105,8 @@ def generate_draft_bibxml_files_task(days=7, process_all=False):
     If process_all is False (the default), processes only docs with new revisions
     in the last specified number of days.
     """
+    if not process_all and days < 1:
+        raise ValueError("Must call with days >= 1 or process_all=True")
     ensure_draft_bibxml_path_exists()
     doc_events = NewRevisionDocEvent.objects.filter(
         type="new_revision",
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 51a8556e69..b75f58656b 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -22,8 +22,6 @@
 )
 
 class TaskTests(TestCase):
-    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ["DERIVED_DIR"]
-
     @mock.patch("ietf.doc.tasks.in_draft_expire_freeze")
     @mock.patch("ietf.doc.tasks.get_expired_drafts")
     @mock.patch("ietf.doc.tasks.expirable_drafts")
@@ -63,8 +61,8 @@ def test_expire_ids_task(
 
         # test that an exception is raised
         in_draft_expire_freeze_mock.side_effect = RuntimeError
-        with self.assertRaises(RuntimeError): (
-            expire_ids_task())
+        with self.assertRaises(RuntimeError):
+            expire_ids_task()
 
     @mock.patch("ietf.doc.tasks.send_expire_warning_for_draft")
     @mock.patch("ietf.doc.tasks.get_soon_to_expire_drafts")
@@ -98,37 +96,42 @@ def test_expire_last_calls_task(self, mock_get_expired, mock_expire):
         self.assertEqual(mock_expire.call_args_list[1], mock.call(docs[1]))
         self.assertEqual(mock_expire.call_args_list[2], mock.call(docs[2]))
 
-    @mock.patch("ietf.doc.tasks.generate_idnits2_rfc_status")
-    def test_generate_idnits2_rfc_status_task(self, mock_generate):
+
+class Idnits2SupportTests(TestCase):
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['DERIVED_DIR']
+
+    @mock.patch("ietf.doc.tasks.generate_idnits2_rfcs_obsoleted")
+    def test_generate_idnits2_rfcs_obsoleted_task(self, mock_generate):
         mock_generate.return_value = "dåtå"
-        generate_idnits2_rfc_status_task()
+        generate_idnits2_rfcs_obsoleted_task()
         self.assertEqual(mock_generate.call_count, 1)
         self.assertEqual(
             "dåtå".encode("utf8"),
-            (Path(settings.DERIVED_DIR) / "idnits2-rfc-status").read_bytes(),
+            (Path(settings.DERIVED_DIR) / "idnits2-rfcs-obsoleted").read_bytes(),
         )
-    
-    @mock.patch("ietf.doc.tasks.generate_idnits2_rfcs_obsoleted")
-    def test_generate_idnits2_rfcs_obsoleted_task(self, mock_generate):
+
+    @mock.patch("ietf.doc.tasks.generate_idnits2_rfc_status")
+    def test_generate_idnits2_rfc_status_task(self, mock_generate):
         mock_generate.return_value = "dåtå"
-        generate_idnits2_rfcs_obsoleted_task()
+        generate_idnits2_rfc_status_task()
         self.assertEqual(mock_generate.call_count, 1)
         self.assertEqual(
             "dåtå".encode("utf8"),
-            (Path(settings.DERIVED_DIR) / "idnits2-rfcs-obsoleted").read_bytes(),
+            (Path(settings.DERIVED_DIR) / "idnits2-rfc-status").read_bytes(),
         )
 
-    @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
-    @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
-    def test_generate_draft_bibxml_files_task(self, mock_create, mock_ensure_path):
+
+class BIBXMLSupportTests(TestCase):
+    def setUp(self):
+        super().setUp()
         now = timezone.now()
-        very_old_event = NewRevisionDocEventFactory(
+        self.very_old_event = NewRevisionDocEventFactory(
             time=now - datetime.timedelta(days=1000), rev="17"
         )
-        old_event = NewRevisionDocEventFactory(
+        self.old_event = NewRevisionDocEventFactory(
             time=now - datetime.timedelta(days=8), rev="03"
         )
-        young_event = NewRevisionDocEventFactory(
+        self.young_event = NewRevisionDocEventFactory(
             time=now - datetime.timedelta(days=6), rev="06"
         )
         # a couple that should always be ignored
@@ -141,62 +144,72 @@ def test_generate_draft_bibxml_files_task(self, mock_create, mock_ensure_path):
             rev="09",
             doc__type_id="rfc",
         )
-    
         # Get rid of the "00" events created by the factories -- they're just noise for this test
         NewRevisionDocEvent.objects.filter(rev="00").delete()
-    
-        # default args - look back 7 days
-        generate_draft_bibxml_files_task()
-        self.assertTrue(mock_ensure_path.called)
-        self.assertCountEqual(
-            mock_create.call_args_list, [mock.call(young_event.doc, young_event.rev)]
-        )
-        mock_create.reset_mock()
-        mock_ensure_path.reset_mock()
-    
-        # shorter lookback
-        generate_draft_bibxml_files_task(days=5)
-        self.assertTrue(mock_ensure_path.called)
-        self.assertCountEqual(mock_create.call_args_list, [])
-        mock_create.reset_mock()
-        mock_ensure_path.reset_mock()
-    
-        # longer lookback
-        generate_draft_bibxml_files_task(days=9)
+
+    @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
+    @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
+    def test_generate_bibxml_files_for_all_drafts_task(self, mock_create, mock_ensure_path):
+        generate_draft_bibxml_files_task(process_all=True)
         self.assertTrue(mock_ensure_path.called)
         self.assertCountEqual(
             mock_create.call_args_list,
             [
-                mock.call(young_event.doc, young_event.rev),
-                mock.call(old_event.doc, old_event.rev),
+                mock.call(self.young_event.doc, self.young_event.rev),
+                mock.call(self.old_event.doc, self.old_event.rev),
+                mock.call(self.very_old_event.doc, self.very_old_event.rev),
             ],
         )
         mock_create.reset_mock()
         mock_ensure_path.reset_mock()
-    
-        # everything
+
+        # everything should still be tried, even if there's an exception
+        mock_create.side_effect = RuntimeError
         generate_draft_bibxml_files_task(process_all=True)
         self.assertTrue(mock_ensure_path.called)
         self.assertCountEqual(
             mock_create.call_args_list,
             [
-                mock.call(young_event.doc, young_event.rev),
-                mock.call(old_event.doc, old_event.rev),
-                mock.call(very_old_event.doc, very_old_event.rev),
+                mock.call(self.young_event.doc, self.young_event.rev),
+                mock.call(self.old_event.doc, self.old_event.rev),
+                mock.call(self.very_old_event.doc, self.very_old_event.rev),
             ],
         )
+
+    @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
+    @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
+    def test_generate_bibxml_files_for_recent_drafts_task(self, mock_create, mock_ensure_path):
+        # default args - look back 7 days
+        generate_draft_bibxml_files_task()
+        self.assertTrue(mock_ensure_path.called)
+        self.assertCountEqual(
+            mock_create.call_args_list, [mock.call(self.young_event.doc, self.young_event.rev)]
+        )
         mock_create.reset_mock()
         mock_ensure_path.reset_mock()
-    
-        # everything should still be tried, even if there's an exception
-        mock_create.side_effect = RuntimeError
-        generate_draft_bibxml_files_task(process_all=True)
+
+        # shorter lookback
+        generate_draft_bibxml_files_task(days=5)
+        self.assertTrue(mock_ensure_path.called)
+        self.assertCountEqual(mock_create.call_args_list, [])
+        mock_create.reset_mock()
+        mock_ensure_path.reset_mock()
+
+        # longer lookback
+        generate_draft_bibxml_files_task(days=9)
         self.assertTrue(mock_ensure_path.called)
         self.assertCountEqual(
             mock_create.call_args_list,
             [
-                mock.call(young_event.doc, young_event.rev),
-                mock.call(old_event.doc, old_event.rev),
-                mock.call(very_old_event.doc, very_old_event.rev),
+                mock.call(self.young_event.doc, self.young_event.rev),
+                mock.call(self.old_event.doc, self.old_event.rev),
             ],
         )
+
+    @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
+    @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
+    def test_generate_bibxml_files_for_recent_drafts_task_with_bad_value(self, mock_create, mock_ensure_path):
+        with self.assertRaises(ValueError):
+            generate_draft_bibxml_files_task(days=0)
+        self.assertFalse(mock_create.called)
+        self.assertFalse(mock_ensure_path.called)
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index cd0fbb43b0..a98b46cb50 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2011-2020, All Rights Reserved
+# Copyright The IETF Trust 2011-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -1228,6 +1228,7 @@ def fuzzy_find_documents(name, rev=None):
     FoundDocuments = namedtuple('FoundDocuments', 'documents matched_name matched_rev')
     return FoundDocuments(docs, name, rev)
 
+
 def bibxml_for_draft(doc, rev=None):
 
     if rev is not None and rev != doc.rev:

From 7d6d7e1c4460bdbe00647b89f25363cdc4a600b2 Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Wed, 7 Aug 2024 11:12:40 -0400
Subject: [PATCH 025/707] Update session_details_panel.html (#7719)

Add rows for interim meeting recordings. Fixes #7699.
---
 ietf/templates/meeting/session_details_panel.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index 1dcbded913..808da1438d 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -320,7 +320,7 @@ <h3 class="mt-4">Notes and recordings</h3>
                 </tr>
             {% endif %}
             {# Recordings #}
-            {% if meeting.number|add:"0" >= 80 %}
+            {% if meeting.type.slug == 'interim' or meeting.number|add:"0" >= 80 %}
                 {% with session.recordings as recordings %}
                     {% if recordings %}
                         {# There's no guaranteed order, so this is a bit messy: #}
@@ -370,4 +370,4 @@ <h3 class="mt-4">Notes and recordings</h3>
         </table>
     {% endif %}
 {% endwith %}{% endwith %}
-{% endfor %}
\ No newline at end of file
+{% endfor %}

From 4b912d55a540735418007c4d4751ed753dea431f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 7 Aug 2024 12:14:39 -0300
Subject: [PATCH 026/707] fix: better handle "entered" agendas (#7721)

* fix: don't assume file has open method

The open method is specific to Django's uploaded
file classes, where it just calls seek(0)

* refactor: better upload/enter agenda abstraction
---
 ietf/meeting/utils.py | 22 ++++++++++++++--------
 ietf/meeting/views.py | 29 ++++++++++++++---------------
 2 files changed, 28 insertions(+), 23 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 470795811d..e3d8c830ee 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -727,7 +727,7 @@ def save_session_minutes_revision(session, file, ext, request, encoding=None, ap
 def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=None):
     """Accept an uploaded materials file
 
-    This function takes a file object, a filename and a meeting object and subdir as string.
+    This function takes a _binary mode_ file object, a filename and a meeting object and subdir as string.
     It saves the file to the appropriate directory, get_materials_path() + subdir.
     If the file is a zip file, it creates a new directory in 'slides', which is the basename of the
     zip file and unzips the file in the new directory.
@@ -749,9 +749,18 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
                 pass  # if the file is already gone, so be it
 
     with (path / filename).open('wb+') as destination:
+        # prep file for reading
+        if hasattr(file, "chunks"):
+            chunks = file.chunks()
+        else:
+            try:
+                file.seek(0)
+            except AttributeError:
+                pass
+            chunks = [file.read()]  # pretend we have chunks
+
         if filename.suffix in settings.MEETING_VALID_MIME_TYPE_EXTENSIONS['text/html']:
-            file.open()
-            text = file.read()
+            text = b"".join(chunks)
             if encoding:
                 try:
                     text = text.decode(encoding)
@@ -778,11 +787,8 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
                                      f"please check the resulting content.  "
                                  ))
         else:
-            if hasattr(file, 'chunks'):
-                for chunk in file.chunks():
-                    destination.write(chunk)
-            else:
-                destination.write(file.read())
+            for chunk in chunks:
+                destination.write(chunk)
 
     # unzip zipfile
     if is_zipfile:
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index c3494a13ba..cf7c67ac4b 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -33,6 +33,7 @@
 from django.contrib import messages
 from django.contrib.auth.decorators import login_required
 from django.core.exceptions import ValidationError
+from django.core.files.uploadedfile import SimpleUploadedFile
 from django.core.validators import URLValidator
 from django.urls import reverse,reverse_lazy
 from django.db.models import F, Max, Q
@@ -2795,6 +2796,17 @@ def require_field(f):
         elif submission_method == "enter":
             require_field("content")
 
+    def get_file(self):
+        """Get content as a file-like object"""
+        if self.cleaned_data.get("submission_method") == "upload":
+            return self.cleaned_data["file"]
+        else:
+            return SimpleUploadedFile(
+                name="uploaded.md",
+                content=self.cleaned_data["content"].encode("utf-8"),
+                content_type="text/markdown;charset=utf-8",
+            )
+
 def upload_session_agenda(request, session_id, num):
     # num is redundant, but we're dragging it along an artifact of where we are in the current URL structure
     session = get_object_or_404(Session,pk=session_id)
@@ -2815,21 +2827,8 @@ def upload_session_agenda(request, session_id, num):
     if request.method == 'POST':
         form = UploadOrEnterAgendaForm(show_apply_to_all_checkbox,request.POST,request.FILES)
         if form.is_valid():
-            submission_method = form.cleaned_data['submission_method']
-            if submission_method == "upload":
-                file = request.FILES['file']
-                _, ext = os.path.splitext(file.name)
-            else:
-                if agenda_sp:
-                    doc = agenda_sp.document
-                    _, ext = os.path.splitext(doc.uploaded_filename)
-                else:
-                    ext = ".md"
-                fd, name = tempfile.mkstemp(suffix=ext, text=True)
-                os.close(fd)
-                with open(name, "w") as file:
-                    file.write(form.cleaned_data['content'])
-                file = open(name, "rb")
+            file = form.get_file()
+            _, ext = os.path.splitext(file.name)
             apply_to_all = session.type.slug == 'regular'
             if show_apply_to_all_checkbox:
                 apply_to_all = form.cleaned_data['apply_to_all']

From f921cdba5d81fb2c1152ee13da31cde10c5d685a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 7 Aug 2024 12:37:26 -0300
Subject: [PATCH 027/707] fix: disable nginx body size check (#7803)

* fix: increase nginx client_max_body_size

* fix: entirely disable nginx body size check
---
 k8s/nginx-datatracker.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index ff439fba6a..5cbc22e6c7 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -23,5 +23,6 @@ server {
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $${keepempty}remote_addr;
         proxy_pass http://localhost:8000;
+        client_max_body_size 0;  # disable size check
     }
 }

From 0c8db80b184b7bf1c12f34b6022bb5d2f24e072e Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Wed, 7 Aug 2024 12:23:18 -0400
Subject: [PATCH 028/707] fix: Show recordings for interims (#7197)

* fix: Show recordings for interims

Add methods uses_notes(), has_recordings(), and uses_chat_logs() to the
meeting object (with semantically correct tests) and use them consistently
throughout.  List the recordings if the "meeting numnber" starts with
"interim"

Fixes: #6543

* style: Use "is not" and "is" for None comparisons

* None comparison and non-IETF meetings

style: Use "is not None" instead of "!="
For non-IETF meetings assume chat logs exist

* fix: Restore useNotes for JS fields

* fix: uses_notes->useNotes (in JavaScript)

Also add comment about meeting number field in tests

* Missed a uses_notes->useNotes edit

* fix: useNotes->usesNotes

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 client/agenda/AgendaScheduleList.vue            |  2 +-
 client/agenda/store.js                          |  4 ++--
 ietf/doc/views_doc.py                           | 14 +++++++-------
 ietf/meeting/models.py                          | 17 ++++++++++++++++-
 ietf/meeting/tests_views.py                     |  2 +-
 ietf/meeting/views.py                           |  4 +---
 ietf/templates/group/meetings-row.html          |  4 ++--
 .../meeting/interim_session_buttons.html        |  2 +-
 .../meeting/session_buttons_include.html        | 12 ++++++------
 .../meeting/session_details_panel.html          |  8 ++++----
 ietf/templates/meeting/upcoming.html            |  2 +-
 playwright/helpers/meeting.js                   |  2 +-
 12 files changed, 43 insertions(+), 30 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 9db763b74e..a6d2b9a5aa 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -296,7 +296,7 @@ const meetingEvents = computed(() => {
           color: 'red'
         })
       }
-      if (agendaStore.useNotes) {
+      if (agendaStore.usesNotes) {
         links.push({
           id: `lnk-${item.id}-note`,
           label: 'Notepad for note-takers',
diff --git a/client/agenda/store.js b/client/agenda/store.js
index 839d464c43..18c3e8c657 100644
--- a/client/agenda/store.js
+++ b/client/agenda/store.js
@@ -50,7 +50,7 @@ export const useAgendaStore = defineStore('agenda', {
     selectedCatSubs: [],
     settingsShown: false,
     timezone: DateTime.local().zoneName,
-    useNotes: false,
+    usesNotes: false,
     visibleDays: []
   }),
   getters: {
@@ -160,7 +160,7 @@ export const useAgendaStore = defineStore('agenda', {
         this.isCurrentMeeting = agendaData.isCurrentMeeting
         this.meeting = agendaData.meeting
         this.schedule = agendaData.schedule
-        this.useNotes = agendaData.useNotes
+        this.usesNotes = agendaData.usesNotes
 
         // -> Compute current info note hash
         this.infoNoteHash = murmur(agendaData.meeting.infoNote, 0).toString()
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 21c5eb235e..bd49275082 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -996,7 +996,7 @@ def document_raw_id(request, name, rev=None, ext=None):
     for t in possible_types:
         if os.path.exists(base_path + t):
             found_types[t]=base_path+t
-    if ext == None:
+    if ext is None:
         ext = 'txt'
     if not ext in found_types:
         raise Http404('dont have the file for that extension')
@@ -1227,7 +1227,7 @@ def document_bibtex(request, name, rev=None):
         raise Http404()
 
     # Make sure URL_REGEXPS did not grab too much for the rev number
-    if rev != None and len(rev) != 2:
+    if rev is not None and len(rev) != 2:
         mo = re.search(r"^(?P<m>[0-9]{1,2})-(?P<n>[0-9]{2})$", rev)
         if mo:
             name = name+"-"+mo.group(1)
@@ -1250,7 +1250,7 @@ def document_bibtex(request, name, rev=None):
         replaced_by = [d.name for d in doc.related_that("replaces")]
         draft_became_rfc = doc.became_rfc()
 
-        if rev != None and rev != doc.rev:
+        if rev is not None and rev != doc.rev:
             # find the entry in the history
             for h in doc.history_set.order_by("-time"):
                 if rev == h.rev:
@@ -1291,7 +1291,7 @@ def document_bibxml(request, name, rev=None):
         raise Http404()
 
     # Make sure URL_REGEXPS did not grab too much for the rev number
-    if rev != None and len(rev) != 2:
+    if rev is not None and len(rev) != 2:
         mo = re.search(r"^(?P<m>[0-9]{1,2})-(?P<n>[0-9]{2})$", rev)
         if mo:
             name = name+"-"+mo.group(1)
@@ -1439,7 +1439,7 @@ def document_referenced_by(request, name):
     if doc.type_id in ["bcp","std","fyi"]:
         for rfc in doc.contains():
             refs |= rfc.referenced_by()
-    full = ( request.GET.get('full') != None )
+    full = ( request.GET.get('full') is not None )
     numdocs = refs.count()
     if not full and numdocs>250:
        refs=refs[:250]
@@ -1459,7 +1459,7 @@ def document_ballot_content(request, doc, ballot_id, editable=True):
     augment_events_with_revision(doc, all_ballots)
 
     ballot = None
-    if ballot_id != None:
+    if ballot_id is not None:
         ballot_id = int(ballot_id)
         for b in all_ballots:
             if b.id == ballot_id:
@@ -1661,7 +1661,7 @@ def add_comment(request, name):
 
     login = request.user.person
 
-    if doc.type_id == "draft" and doc.group != None:
+    if doc.type_id == "draft" and doc.group is not None:
         can_add_comment = bool(has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair", "IANA", "RFC Editor")) or (
             request.user.is_authenticated and
             Role.objects.filter(name__in=("chair", "secr"),
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index fa1ad9d674..d8a069ef3c 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -383,7 +383,22 @@ def previous_meeting(self):
         return Meeting.objects.filter(type_id=self.type_id,date__lt=self.date).order_by('-date').first()
 
     def uses_notes(self):
-        return self.date>=datetime.date(2020,7,6)
+        if self.type_id != 'ietf':
+            return True
+        num = self.get_number()
+        return num is not None and num >= 108
+
+    def has_recordings(self):
+        if self.type_id != 'ietf':
+            return True
+        num = self.get_number()
+        return num is not None and num >= 80
+
+    def has_chat_logs(self):
+        if self.type_id != 'ietf':
+            return True;
+        num = self.get_number()
+        return num is not None and num >= 60
 
     def meeting_start(self):
         """Meeting-local midnight at the start of the meeting date"""
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 60eef96b2d..e4f62838de 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -259,7 +259,7 @@ def test_meeting_agenda(self):
                 },
                 "categories": rjson.get("categories"), # Just expect the value to exist
                 "isCurrentMeeting": True,
-                "useNotes": True,
+                "usesNotes": False, # make_meeting_test_data sets number=72
                 "schedule": rjson.get("schedule"), # Just expect the value to exist
                 "floors": []
             }
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index cf7c67ac4b..211cdec9a5 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -1617,7 +1617,6 @@ def agenda_plain(request, num=None, name=None, base=None, ext=None, owner=None,
                 "now": timezone.now().astimezone(meeting.tz()),
                 "display_timezone": display_timezone,
                 "is_current_meeting": is_current_meeting,
-                "use_notes": meeting.uses_notes(),
                 "cache_time": 150 if is_current_meeting else 3600,
             },
             content_type=mimetype[ext],
@@ -1692,7 +1691,7 @@ def api_get_agenda_data (request, num=None):
         },
         "categories": filter_organizer.get_filter_categories(),
         "isCurrentMeeting": is_current_meeting,
-        "useNotes": meeting.uses_notes(),
+        "usesNotes": meeting.uses_notes(),
         "schedule": list(map(agenda_extract_schedule, filtered_assignments)),
         "floors": list(map(agenda_extract_floorplan, floors))
     })
@@ -2489,7 +2488,6 @@ def session_details(request, num, acronym):
                     'can_manage_materials' : can_manage,
                     'can_view_request': can_view_request,
                     'thisweek': datetime_today()-datetime.timedelta(days=7),
-                    'use_notes': meeting.uses_notes(),
                   })
 
 class SessionDraftsForm(forms.Form):
diff --git a/ietf/templates/group/meetings-row.html b/ietf/templates/group/meetings-row.html
index 57c727eeae..3bbe1d425b 100644
--- a/ietf/templates/group/meetings-row.html
+++ b/ietf/templates/group/meetings-row.html
@@ -78,9 +78,9 @@
                 <div class="regular float-end">
                     {# see note in the included templates re: show_agenda parameter and required JS import #}
                     {% if s.meeting.type.slug == 'interim' %}
-                        {% include "meeting/interim_session_buttons.html" with show_agenda=False show_empty=False session=s meeting=s.meeting use_notes=s.meeting.use_notes %}
+                        {% include "meeting/interim_session_buttons.html" with show_agenda=False show_empty=False session=s meeting=s.meeting %}
                     {% else %}
-                        {% include "meeting/session_buttons_include.html" with show_agenda=False item=s.official_timeslotassignment session=s meeting=s.meeting use_notes=s.meeting.use_notes %}
+                        {% include "meeting/session_buttons_include.html" with show_agenda=False item=s.official_timeslotassignment session=s meeting=s.meeting %}
                     {% endif %}
                 </div>
             {% endif %}
diff --git a/ietf/templates/meeting/interim_session_buttons.html b/ietf/templates/meeting/interim_session_buttons.html
index 2f0951338d..a32f4345c9 100644
--- a/ietf/templates/meeting/interim_session_buttons.html
+++ b/ietf/templates/meeting/interim_session_buttons.html
@@ -34,7 +34,7 @@
             </a>
         {% endif %}
         {# notes #}
-        {% if use_notes %}
+        {% if session.agenda.uses_notes %}
             <a class="btn btn-outline-primary"
                href="{{ session.notes_url }}"
                aria-label="Notepad for note-takers"
diff --git a/ietf/templates/meeting/session_buttons_include.html b/ietf/templates/meeting/session_buttons_include.html
index 3dc9c45dcf..bb5144b45d 100644
--- a/ietf/templates/meeting/session_buttons_include.html
+++ b/ietf/templates/meeting/session_buttons_include.html
@@ -41,7 +41,7 @@
                     </a>
                 {% endif %}
                 {# Notes #}
-                {% if use_notes %}
+                {% if meeting.uses_notes %}
                     <a class="btn btn-outline-primary"
                         role="button"
                         href="{{ session.notes_url }}"
@@ -126,7 +126,7 @@
                     </a>
                 {% else %}
                     {# chat logs #}
-                    {% if meeting.number|add:"0" >= 60 %}
+                    {% if meeting.has_chat_logs %}
                         <a class="btn btn-outline-primary"
                             role="button"
                             href="{{session.chat_archive_url}}"
@@ -136,7 +136,7 @@
                         </a>
                     {% endif %}
                     {# Recordings #}
-                    {% if meeting.number|add:"0" >= 80 %}
+		    {% if meeting.has_recordings %}
                         {% with session.recordings as recordings %}
                             {% if recordings %}
                                 {# There's no guaranteed order, so this is a bit messy: #}
@@ -229,7 +229,7 @@
                         </li>
                     {% endif %}
                     {# Notes #}
-                    {% if use_notes %}
+                    {% if meeting.uses_notes %}
                         <li>
                             <a class="dropdown-item" href="{{ session.notes_url }}">
                                 <i class="bi bi-journal-text"></i> Notepad for note-takers
@@ -303,7 +303,7 @@
                         </li>
                     {% else %}
                         {# chat logs #}
-                        {% if meeting.number|add:"0" >= 60 %}
+			{% if meeting.has_chat_logs %}
                             <li>
                                 <a class="dropdown-item"
                                     href="session.chat_room_url">
@@ -312,7 +312,7 @@
                             </li>
                         {% endif %}
                         {# Recordings #}
-                        {% if meeting.number|add:"0" >= 80 %}
+                        {% if meeting.has_recordings %}
                             {% with session.recordings as recordings %}
                                 {% if recordings %}
                                     {# There's no guaranteed order, so this is a bit messy: #}
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index 808da1438d..52aeaaa8c1 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -9,7 +9,7 @@
                     {% if meeting.type.slug == 'interim' %}
                         {% include "meeting/interim_session_buttons.html" with show_agenda=False show_empty=False %}
                     {% else %}
-                        {% include "meeting/session_buttons_include.html" with show_agenda=False item=session.official_timeslotassignment use_notes=session.meeting.use_notes %}
+                        {% include "meeting/session_buttons_include.html" with show_agenda=False item=session.official_timeslotassignment %}
                     {% endif %}
                 </div>
             {% endif %}
@@ -230,7 +230,7 @@ <h3 class="mt-4">Meeting tools</h3>
         <table class="table table-sm table-striped meeting-tools"
                id="meeting_tools_{{ session.pk }}">
             <tbody>
-            {% if use_notes %}
+            {% if meeting.uses_notes %}
                 <tr>
                     <td>
                         <a href="{{ session.notes_url }}">
@@ -310,7 +310,7 @@ <h3 class="mt-4">Notes and recordings</h3>
         <table class="table table-sm table-striped meeting-tools"
                id="notes_and_recordings_{{ session.pk }}">
             <tbody>
-            {% if use_notes %}
+            {% if session.uses_notes %}
                 <tr>
                     <td>
                         <a href="{{ session.notes_url }}">
@@ -320,7 +320,7 @@ <h3 class="mt-4">Notes and recordings</h3>
                 </tr>
             {% endif %}
             {# Recordings #}
-            {% if meeting.type.slug == 'interim' or meeting.number|add:"0" >= 80 %}
+            {% if session.has_recordings %}
                 {% with session.recordings as recordings %}
                     {% if recordings %}
                         {# There's no guaranteed order, so this is a bit messy: #}
diff --git a/ietf/templates/meeting/upcoming.html b/ietf/templates/meeting/upcoming.html
index 802b1b03ca..13a27ed910 100644
--- a/ietf/templates/meeting/upcoming.html
+++ b/ietf/templates/meeting/upcoming.html
@@ -89,7 +89,7 @@ <h1>Upcoming Meetings</h1>
                                         <span class="badge rounded-pill text-bg-warning">Cancelled</span>
                                     </td>
                                 {% else %}
-                                    <td class="text-end">{% include "meeting/interim_session_buttons.html" with show_agenda=True use_notes=meeting.uses_notes %}</td>
+                                    <td class="text-end">{% include "meeting/interim_session_buttons.html" with show_agenda=True %}</td>
                                 {% endif %}
                             {% endwith %}
                         {% else %}
diff --git a/playwright/helpers/meeting.js b/playwright/helpers/meeting.js
index f07228b473..52bc331fd6 100644
--- a/playwright/helpers/meeting.js
+++ b/playwright/helpers/meeting.js
@@ -630,7 +630,7 @@ module.exports = {
       },
       categories,
       isCurrentMeeting: dateMode !== 'past',
-      useNotes: true,
+      usesNotes: true,
       schedule,
       floors
     }

From 30970749e30d89111bc58f4ef80c76ef88c70397 Mon Sep 17 00:00:00 2001
From: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
Date: Wed, 7 Aug 2024 20:25:08 +0200
Subject: [PATCH 029/707] fix: Send create user email for password resets where
 we have an email and person, but no user. (#7729)

* fix: Send create user email for password resets where we have an email and person, but no user account

This fixes https://github.com/ietf-tools/datatracker/issues/6458

* fix: create User straight away and use nomral password reset

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/ietfauth/tests.py | 18 ++++++++++++++++++
 ietf/ietfauth/views.py | 16 +++++++++++++---
 2 files changed, 31 insertions(+), 3 deletions(-)

diff --git a/ietf/ietfauth/tests.py b/ietf/ietfauth/tests.py
index 6a85c6eb13..722c1e8b6f 100644
--- a/ietf/ietfauth/tests.py
+++ b/ietf/ietfauth/tests.py
@@ -527,6 +527,24 @@ def test_reset_password_without_username(self):
         self.assertIn(secondary_address, to)
         self.assertNotIn(inactive_secondary_address, to)
 
+    def test_reset_password_without_user(self):
+        """Reset password using email address for person without a user account"""
+        url = urlreverse('ietf.ietfauth.views.password_reset')
+        email = EmailFactory()
+        person = email.person
+        # Remove the user object from the person to get a Email/Person without User:
+        person.user = None
+        person.save()
+        # Remove the remaining User record, since reset_password looks for that by username:
+        User.objects.filter(username__iexact=email.address).delete()
+        empty_outbox()
+        r = self.client.post(url, { 'username': email.address })
+        self.assertEqual(len(outbox), 1)
+        lastReceivedEmail = outbox[-1]
+        self.assertIn(email.address, lastReceivedEmail.get('To'))
+        self.assertTrue(lastReceivedEmail.get('Subject').startswith("Confirm password reset"))
+        self.assertContains(r, "Your password reset request has been successfully received", status_code=200)
+
     def test_review_overview(self):
         review_req = ReviewRequestFactory()
         assignment = ReviewAssignmentFactory(review_request=review_req,reviewer=EmailFactory(person__user__username='reviewer'))
diff --git a/ietf/ietfauth/views.py b/ietf/ietfauth/views.py
index 61c7b929b1..32bb5c92be 100644
--- a/ietf/ietfauth/views.py
+++ b/ietf/ietfauth/views.py
@@ -491,9 +491,19 @@ def password_reset(request):
             if not user:
                 # try to find user ID from the email address
                 email = Email.objects.filter(address=submitted_username).first()
-                if email and email.person and email.person.user:
-                    user = email.person.user
-
+                if email and email.person:
+                    if email.person.user:
+                        user = email.person.user
+                    else: 
+                        # Create a User record with this (conditioned by way of Email) username
+                        # Don't bother setting the name or email fields on User - rely on the
+                        # Person pointer.
+                        user = User.objects.create(
+                            username=email.address.lower(), 
+                            is_active=True,
+                        )
+                        email.person.user = user
+                        email.person.save()
             if user and user.person.email_set.filter(active=True).exists():
                 data = {
                     'username': user.username,

From e5e6c9bc89b227e2587a831c1a40d386147acb39 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Thu, 8 Aug 2024 06:36:21 +1200
Subject: [PATCH 030/707] feat: Site status message (#7659)

* Status WIP

* feat: Status

* fix: Status tests

* feat: status redirect

* chore: Status tests

* chore: Status tests

* feat: Status tests

* chore: Status playwright tests

* fix: PR feedback, mostly Vue and copyright dates

* fix: Status model migration tidy up

* chore: Status - one migration

* feat: status on doc/html pages

* chore: Resetting Status migration

* chore: removing unused FieldError

* fix: Update Status test to remove 'by'

* chore: fixing API test to exclude 'status'

* chore: fixing status_page test

* feat: Site Status PR feedback. URL coverage debugging

* Adding ietf.status to Tastypie omitted apps

* feat: Site Status PR feedback

* chore: correct copyright year on newly created files

* chore: repair merge damage

* chore: repair more merge damage

* fix: reconcile the api init refactor with ignoring apps

---------

Co-authored-by: Matthew Holloway <Matthew Holloway>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 client/Embedded.vue                    |   8 +-
 client/components/Status.vue           |  80 +++++++++++++++++
 client/index.html                      |   2 +
 client/shared/json-wrapper.js          |  20 +++++
 client/shared/local-storage-wrapper.js |  42 +++++++++
 client/shared/status-common.js         |   5 ++
 ietf/api/__init__.py                   |   6 +-
 ietf/api/tests.py                      |   1 +
 ietf/settings.py                       |   1 +
 ietf/static/css/ietf.scss              |   7 ++
 ietf/status/__init__.py                |   0
 ietf/status/admin.py                   |  19 ++++
 ietf/status/apps.py                    |   9 ++
 ietf/status/migrations/0001_initial.py |  75 ++++++++++++++++
 ietf/status/migrations/__init__.py     |   0
 ietf/status/models.py                  |  24 +++++
 ietf/status/tests.py                   | 120 +++++++++++++++++++++++++
 ietf/status/urls.py                    |  12 +++
 ietf/status/views.py                   |  46 ++++++++++
 ietf/templates/base.html               |   5 +-
 ietf/templates/base/status.html        |   2 +
 ietf/templates/doc/document_html.html  |   3 +
 ietf/templates/status/latest.html      |  18 ++++
 ietf/templates/status/status.html      |  15 ++++
 ietf/urls.py                           |   1 +
 playwright/tests/status/status.spec.js |  61 +++++++++++++
 26 files changed, 574 insertions(+), 8 deletions(-)
 create mode 100644 client/components/Status.vue
 create mode 100644 client/shared/json-wrapper.js
 create mode 100644 client/shared/local-storage-wrapper.js
 create mode 100644 client/shared/status-common.js
 create mode 100644 ietf/status/__init__.py
 create mode 100644 ietf/status/admin.py
 create mode 100644 ietf/status/apps.py
 create mode 100644 ietf/status/migrations/0001_initial.py
 create mode 100644 ietf/status/migrations/__init__.py
 create mode 100644 ietf/status/models.py
 create mode 100644 ietf/status/tests.py
 create mode 100644 ietf/status/urls.py
 create mode 100644 ietf/status/views.py
 create mode 100644 ietf/templates/base/status.html
 create mode 100644 ietf/templates/status/latest.html
 create mode 100644 ietf/templates/status/status.html
 create mode 100644 playwright/tests/status/status.spec.js

diff --git a/client/Embedded.vue b/client/Embedded.vue
index a0f0d2831e..80b105dc15 100644
--- a/client/Embedded.vue
+++ b/client/Embedded.vue
@@ -1,12 +1,13 @@
 <template lang="pug">
 n-theme
-  n-message-provider
-    component(:is='currentComponent', :component-id='props.componentId')
+  n-notification-provider
+    n-message-provider
+      component(:is='currentComponent', :component-id='props.componentId')
 </template>
 
 <script setup>
 import { defineAsyncComponent, markRaw, onMounted, ref } from 'vue'
-import { NMessageProvider } from 'naive-ui'
+import { NMessageProvider, NNotificationProvider } from 'naive-ui'
 
 import NTheme from './components/n-theme.vue'
 
@@ -15,6 +16,7 @@ import NTheme from './components/n-theme.vue'
 const availableComponents = {
   ChatLog: defineAsyncComponent(() => import('./components/ChatLog.vue')),
   Polls: defineAsyncComponent(() => import('./components/Polls.vue')),
+  Status: defineAsyncComponent(() => import('./components/Status.vue'))
 }
 
 // PROPS
diff --git a/client/components/Status.vue b/client/components/Status.vue
new file mode 100644
index 0000000000..4fded5bbe4
--- /dev/null
+++ b/client/components/Status.vue
@@ -0,0 +1,80 @@
+<script setup>
+  import { h, onMounted } from 'vue'
+  import { useNotification } from 'naive-ui'
+  import { localStorageWrapper } from '../shared/local-storage-wrapper'
+  import { JSONWrapper } from '../shared/json-wrapper'
+  import { STATUS_STORAGE_KEY, generateStatusTestId } from '../shared/status-common'
+
+  const getDismissedStatuses = () => {
+    const jsonString = localStorageWrapper.getItem(STATUS_STORAGE_KEY)
+    const jsonValue = JSONWrapper.parse(jsonString, [])
+    if(Array.isArray(jsonValue)) {
+      return jsonValue
+    }
+    return []
+  }
+
+  const dismissStatus = (id) => {
+    const dissmissed = [id, ...getDismissedStatuses()]
+    localStorageWrapper.setItem(STATUS_STORAGE_KEY, JSONWrapper.stringify(dissmissed))
+    return true
+  }
+
+  let notificationInstances = {} // keyed by status.id
+  let notification
+
+  const pollStatusAPI = () => {
+    fetch('/status/latest.json')
+        .then(resp => resp.json())
+        .then(status => {
+            if(status === null || status.hasMessage === false) {
+                console.debug("No status message")
+                return
+            }
+            const dismissedStatuses = getDismissedStatuses()
+            if(dismissedStatuses.includes(status.id)) {
+              console.debug(`Not showing site status ${status.id} because it was already dismissed. Dismissed Ids:`, dismissedStatuses)
+              return
+            }
+
+            const isSameStatusPage = Boolean(document.querySelector(`[data-status-id="${status.id}"]`))
+
+            if(isSameStatusPage) {
+              console.debug(`Not showing site status ${status.id} because we're on the target page`)
+              return
+            }
+
+            if(notificationInstances[status.id]) {
+              console.debug(`Not showing site status ${status.id} because it's already been displayed`)
+              return
+            }
+
+            notificationInstances[status.id] = notification.create({
+              title: status.title,
+              content: status.body,
+              meta: `${status.date}`,
+              action: () =>
+                h(
+                  'a',
+                  {
+                    'data-testid': generateStatusTestId(status.id),
+                    href: status.url,
+                    'aria-label': `Read more about ${status.title}`
+                  },
+                  "Read more"
+                ),
+              onClose: () => {
+                return dismissStatus(status.id)
+              }
+            })
+        })
+        .catch(e => {
+            console.error(e)
+        })
+  }
+  
+  onMounted(() => {
+      notification = useNotification()
+      pollStatusAPI(notification)
+  })
+</script>
diff --git a/client/index.html b/client/index.html
index 740c994329..75d6f77727 100644
--- a/client/index.html
+++ b/client/index.html
@@ -12,6 +12,7 @@
     <link href="https://static.ietf.org/fonts/noto-sans-mono/import.css" rel="stylesheet">
   </head>
   <body>
+    <div class="vue-embed" data-component="Status"></div>
     <div class="pt-3 container-fluid">
       <div class="row">
         <div class="col mx-lg-3" id="content">
@@ -20,5 +21,6 @@
       </div>
     </div>
     <script type="module" src="./main.js"></script>
+    <script type="module" src="./embedded.js"></script>
   </body>
 </html>
diff --git a/client/shared/json-wrapper.js b/client/shared/json-wrapper.js
new file mode 100644
index 0000000000..e080b5a479
--- /dev/null
+++ b/client/shared/json-wrapper.js
@@ -0,0 +1,20 @@
+export const JSONWrapper = {
+  parse(jsonString, defaultValue) {
+    if(typeof jsonString !== "string") {
+      return defaultValue
+    }
+    try {
+      return JSON.parse(jsonString);
+    } catch (e) {
+      console.error(e);
+    }
+    return defaultValue
+  },
+  stringify(data) {
+    try {
+      return JSON.stringify(data);
+    } catch (e) {
+      console.error(e)
+    }
+  },
+}
diff --git a/client/shared/local-storage-wrapper.js b/client/shared/local-storage-wrapper.js
new file mode 100644
index 0000000000..88cd3dc589
--- /dev/null
+++ b/client/shared/local-storage-wrapper.js
@@ -0,0 +1,42 @@
+
+/*
+ *  DEVELOPER NOTE
+ *
+ *  Some browsers can block storage (localStorage, sessionStorage)
+ *  access for privacy reasons, and all browsers can have storage
+ *  that's full, and then they throw exceptions.
+ *
+ *  See https://michalzalecki.com/why-using-localStorage-directly-is-a-bad-idea/
+ *
+ *  Exceptions can even be thrown when testing if localStorage
+ *  even exists. This can throw:
+ * 
+ *      if (window.localStorage)
+ *
+ *  Also localStorage/sessionStorage can be enabled after DOMContentLoaded
+ *  so we handle it gracefully.
+ *
+ *  1) we need to wrap all usage in try/catch
+ *  2) we need to defer actual usage of these until
+ *     necessary,
+ *    
+ */
+
+export const localStorageWrapper = {
+  getItem: (key) => {
+    try {
+      return localStorage.getItem(key)
+    } catch (e) {
+      console.error(e); 
+    }
+    return null;
+  },
+  setItem: (key, value) => {
+    try {
+      return localStorage.setItem(key, value)
+    } catch (e) {
+      console.error(e); 
+    }
+    return;
+  },
+}
diff --git a/client/shared/status-common.js b/client/shared/status-common.js
new file mode 100644
index 0000000000..6503bfbf63
--- /dev/null
+++ b/client/shared/status-common.js
@@ -0,0 +1,5 @@
+// Used in Playwright Status and components
+
+export const STATUS_STORAGE_KEY = "status-dismissed"
+
+export const generateStatusTestId = (id) => `status-${id}`
diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index 81f370121f..9fadab8e6f 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -21,14 +21,14 @@
 from tastypie.exceptions import ApiFieldError
 from tastypie.fields import ApiField
 
-
 _api_list = []
 
+OMITTED_APPS_APIS = ["ietf.status"]
 
 def populate_api_list():
+    _module_dict = globals()
     for app_config in django_apps.get_app_configs():
-        _module_dict = globals()
-        if '.' in app_config.name:
+        if '.' in app_config.name and app_config.name not in OMITTED_APPS_APIS:
             _root, _name = app_config.name.split('.', 1)
             if _root == 'ietf':
                 if not '.' in _name:
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index fd8eb52cd6..20c3e2cb44 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -48,6 +48,7 @@
     'ietf.secr.meetings',
     'ietf.secr.proceedings',
     'ietf.ipr',
+    'ietf.status',
 )
 
 class CustomApiTests(TestCase):
diff --git a/ietf/settings.py b/ietf/settings.py
index 7572b15213..db53efe0a5 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -479,6 +479,7 @@ def skip_unreadable_post(record):
     'ietf.release',
     'ietf.review',
     'ietf.stats',
+    'ietf.status',
     'ietf.submit',
     'ietf.sync',
     'ietf.utils',
diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index 5bd520f041..e2d5cb3959 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -1189,6 +1189,13 @@ blockquote {
     border-left: solid 1px var(--bs-body-color);
 }
 
+iframe.status {
+    background-color:transparent;
+    border:none;
+    width:100%;
+    height:3.5em;
+}
+
 .overflow-shadows {
     transition: box-shadow 0.5s;
 }
diff --git a/ietf/status/__init__.py b/ietf/status/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/ietf/status/admin.py b/ietf/status/admin.py
new file mode 100644
index 0000000000..f9c4e891a7
--- /dev/null
+++ b/ietf/status/admin.py
@@ -0,0 +1,19 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from datetime import datetime
+from django.contrib import admin
+from django.template.defaultfilters import slugify
+from .models import Status
+
+class StatusAdmin(admin.ModelAdmin):
+    list_display = ['title', 'body', 'active', 'date', 'by', 'page']
+    raw_id_fields = ['by']
+
+    def get_changeform_initial_data(self, request):
+        date = datetime.now()
+        return {
+            "slug": slugify(f"{date.year}-{date.month}-{date.day}-"),
+        }
+    
+admin.site.register(Status, StatusAdmin)
diff --git a/ietf/status/apps.py b/ietf/status/apps.py
new file mode 100644
index 0000000000..ba64a41afc
--- /dev/null
+++ b/ietf/status/apps.py
@@ -0,0 +1,9 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from django.apps import AppConfig
+
+
+class StatusConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "ietf.status"
diff --git a/ietf/status/migrations/0001_initial.py b/ietf/status/migrations/0001_initial.py
new file mode 100644
index 0000000000..5185189496
--- /dev/null
+++ b/ietf/status/migrations/0001_initial.py
@@ -0,0 +1,75 @@
+# Generated by Django 4.2.13 on 2024-07-21 22:47
+
+from django.db import migrations, models
+import django.db.models.deletion
+import django.utils.timezone
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ("person", "0002_alter_historicalperson_ascii_and_more"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="Status",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("date", models.DateTimeField(default=django.utils.timezone.now)),
+                ("slug", models.SlugField(unique=True)),
+                (
+                    "title",
+                    models.CharField(
+                        help_text="Your site status notification title.",
+                        max_length=255,
+                        verbose_name="Status title",
+                    ),
+                ),
+                (
+                    "body",
+                    models.CharField(
+                        help_text="Your site status notification body.",
+                        max_length=255,
+                        verbose_name="Status body",
+                    ),
+                ),
+                (
+                    "active",
+                    models.BooleanField(
+                        default=True,
+                        help_text="Only active messages will be shown.",
+                        verbose_name="Active?",
+                    ),
+                ),
+                (
+                    "page",
+                    models.TextField(
+                        blank=True,
+                        help_text="More detail shown after people click 'Read more'. If empty no 'read more' will be shown",
+                        null=True,
+                        verbose_name="More detail (markdown)",
+                    ),
+                ),
+                (
+                    "by",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE, to="person.person"
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name_plural": "statuses",
+            },
+        ),
+    ]
diff --git a/ietf/status/migrations/__init__.py b/ietf/status/migrations/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/ietf/status/models.py b/ietf/status/models.py
new file mode 100644
index 0000000000..b3f97d989e
--- /dev/null
+++ b/ietf/status/models.py
@@ -0,0 +1,24 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from django.utils import timezone
+from django.db import models
+from django.db.models import ForeignKey
+
+import debug                            # pyflakes:ignore
+
+class Status(models.Model):
+    name = 'Status'
+    
+    date = models.DateTimeField(default=timezone.now)
+    slug = models.SlugField(blank=False, null=False, unique=True)
+    title = models.CharField(max_length=255, verbose_name="Status title", help_text="Your site status notification title.")
+    body = models.CharField(max_length=255, verbose_name="Status body", help_text="Your site status notification body.", unique=False)    
+    active = models.BooleanField(default=True, verbose_name="Active?", help_text="Only active messages will be shown.")
+    by = ForeignKey('person.Person', on_delete=models.CASCADE)
+    page = models.TextField(blank=True, null=True, verbose_name="More detail (markdown)", help_text="More detail shown after people click 'Read more'. If empty no 'read more' will be shown")
+
+    def __str__(self):
+        return "{} {} {} {}".format(self.date, self.active, self.by, self.title)
+    class Meta:
+        verbose_name_plural = "statuses"
diff --git a/ietf/status/tests.py b/ietf/status/tests.py
new file mode 100644
index 0000000000..9c0dd9114e
--- /dev/null
+++ b/ietf/status/tests.py
@@ -0,0 +1,120 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+import debug    # pyflakes:ignore
+
+from django.urls import reverse as urlreverse
+from ietf.utils.test_utils import TestCase
+from ietf.person.models import Person
+from ietf.status.models import Status
+
+class StatusTests(TestCase):
+    def test_status_latest_html(self):
+        status = Status.objects.create(
+            title = "my title 1",
+            body = "my body 1",
+            active = True,
+            by = Person.objects.get(user__username='ad'),
+            slug = "2024-1-1-my-title-1"
+        )
+        status.save()
+
+        url = urlreverse('ietf.status.views.status_latest_html')
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, 'my title 1')
+        self.assertContains(r, 'my body 1')
+
+        status.delete()
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertNotContains(r, 'my title 1')
+        self.assertNotContains(r, 'my body 1')
+
+    def test_status_latest_json(self):
+        url = urlreverse('ietf.status.views.status_latest_json')
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        data = r.json()
+        self.assertFalse(data["hasMessage"])
+
+        status = Status.objects.create(
+            title = "my title 1",
+            body = "my body 1",
+            active = True,
+            by = Person.objects.get(user__username='ad'),
+            slug = "2024-1-1-my-title-1"
+        )
+        status.save()
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        data = r.json()
+        self.assertTrue(data["hasMessage"])
+        self.assertEqual(data["title"], "my title 1")
+        self.assertEqual(data["body"], "my body 1")
+        self.assertEqual(data["slug"], '2024-1-1-my-title-1')
+        self.assertEqual(data["url"], '/status/2024-1-1-my-title-1')
+
+        status.delete()
+
+    def test_status_latest_redirect(self):
+        url = urlreverse('ietf.status.views.status_latest_redirect')
+        r = self.client.get(url)
+        # without a Status it should return Not Found
+        self.assertEqual(r.status_code, 404)
+
+        status = Status.objects.create(
+            title = "my title 1",
+            body = "my body 1",
+            active = True,
+            by = Person.objects.get(user__username='ad'),
+            slug = "2024-1-1-my-title-1"
+        )
+        status.save()
+
+        r = self.client.get(url)
+        # with a Status it should redirect
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(r.headers["Location"], "/status/2024-1-1-my-title-1")
+        
+        status.delete()
+
+    def test_status_page(self):
+        slug = "2024-1-1-my-unique-slug"
+        r = self.client.get(f'/status/{slug}/')
+        # without a Status it should return Not Found
+        self.assertEqual(r.status_code, 404)
+
+        # status without `page` markdown should still 200
+        status = Status.objects.create(
+            title = "my title 1",
+            body = "my body 1",
+            active = True,
+            by = Person.objects.get(user__username='ad'),
+            slug = slug
+        )
+        status.save()
+
+        r = self.client.get(f'/status/{slug}/')
+        self.assertEqual(r.status_code, 200)
+        
+        status.delete()
+
+        test_string = 'a string that'
+        status = Status.objects.create(
+            title = "my title 1",
+            body = "my body 1",
+            active = True,
+            by = Person.objects.get(user__username='ad'),
+            slug = slug,
+            page = f"# {test_string}"
+        )
+        status.save()
+
+        r = self.client.get(f'/status/{slug}/')
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, test_string)
+        
+        status.delete()
diff --git a/ietf/status/urls.py b/ietf/status/urls.py
new file mode 100644
index 0000000000..060c0257e5
--- /dev/null
+++ b/ietf/status/urls.py
@@ -0,0 +1,12 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from ietf.status import views
+from ietf.utils.urls import url
+
+urlpatterns = [
+    url(r"^$", views.status_latest_redirect),
+    url(r"^latest$", views.status_latest_html),
+    url(r"^latest.json$", views.status_latest_json),
+    url(r"(?P<slug>.*)", views.status_page)
+]
diff --git a/ietf/status/views.py b/ietf/status/views.py
new file mode 100644
index 0000000000..9037d01dc2
--- /dev/null
+++ b/ietf/status/views.py
@@ -0,0 +1,46 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from django.urls import reverse as urlreverse
+from django.http import HttpResponseRedirect, HttpResponseNotFound, JsonResponse
+from ietf.utils import markdown
+from django.shortcuts import render, get_object_or_404
+from ietf.status.models import Status
+
+import debug                            # pyflakes:ignore
+
+def get_last_active_status():
+    status = Status.objects.filter(active=True).order_by("-date").first()
+    if status is None:
+        return { "hasMessage": False }
+
+    context = {
+        "hasMessage": True,
+        "id": status.id,
+        "slug": status.slug,
+        "title": status.title,
+        "body": status.body,
+        "url": urlreverse("ietf.status.views.status_page", kwargs={ "slug": status.slug }),
+        "date": status.date.isoformat()
+    }
+    return context
+
+def status_latest_html(request):
+    return render(request, "status/latest.html", context=get_last_active_status())
+
+def status_page(request, slug):
+    sanitised_slug = slug.rstrip("/")
+    status = get_object_or_404(Status, slug=sanitised_slug)
+    return render(request, "status/status.html", context={
+        'status': status,
+        'status_page_html': markdown.markdown(status.page or ""),
+    })
+
+def status_latest_json(request):
+    return JsonResponse(get_last_active_status())
+
+def status_latest_redirect(request):
+    context = get_last_active_status()
+    if context["hasMessage"] == True:
+        return HttpResponseRedirect(context["url"])
+    return HttpResponseNotFound()
diff --git a/ietf/templates/base.html b/ietf/templates/base.html
index f426d361ce..ceb1d2df08 100644
--- a/ietf/templates/base.html
+++ b/ietf/templates/base.html
@@ -34,6 +34,7 @@
     <body {% block bodyAttrs %}{% endblock %} class="navbar-offset position-relative"
           data-group-menu-data-url="{% url 'ietf.group.views.group_menu_data' %}">
         {% analytical_body_top %}
+        {% include "base/status.html" %}
         <a class="visually-hidden visually-hidden-focusable" href="#content">Skip to main content</a>
         <nav class="navbar navbar-expand-lg fixed-top {% if server_mode and server_mode != "production" %}bg-danger-subtle{% else %}bg-secondary-subtle{% endif %}">
             <div class="container-fluid">
@@ -85,7 +86,7 @@
             </div>
         </nav>
         {% block precontent %}{% endblock %}
-        <div class="pt-3 container-fluid">
+        <main class="pt-3 container-fluid" id="main">
             <div class="row">
                 {% if request.COOKIES.left_menu == "on" and not hide_menu %}
                     <div class="d-none d-md-block bg-light-subtle py-3 leftmenu small">
@@ -114,7 +115,7 @@
                     {% block content_end %}{% endblock %}
                 </div>
             </div>
-        </div>
+        </main>
         {% block footer %}
             <footer class="col-md-12 col-sm-12 border-top mt-5 py-5 bg-light-subtle text-center position-sticky">
                 <a href="https://www.ietf.org/" class="p-3">IETF</a>
diff --git a/ietf/templates/base/status.html b/ietf/templates/base/status.html
new file mode 100644
index 0000000000..33e1abf699
--- /dev/null
+++ b/ietf/templates/base/status.html
@@ -0,0 +1,2 @@
+<noscript><iframe class="status" title="Site status" src="/status/latest"></iframe></noscript>
+<div class="vue-embed" data-component="Status"></div>
\ No newline at end of file
diff --git a/ietf/templates/doc/document_html.html b/ietf/templates/doc/document_html.html
index 40223d0fd1..3eabe2ebb7 100644
--- a/ietf/templates/doc/document_html.html
+++ b/ietf/templates/doc/document_html.html
@@ -4,6 +4,7 @@
 {% load origin %}
 {% load static %}
 {% load ietf_filters textfilters %}
+{% load django_vite %}
 {% origin %}
 <html data-bs-theme="auto" lang="en">
     <head>
@@ -28,6 +29,7 @@
             {% if html %}
                 <link rel="stylesheet" href="{% static 'ietf/css/document_html_txt.css' %}">
             {% endif %}
+            {% vite_asset 'client/embedded.js' %}
             <script src="{% static 'ietf/js/document_html.js' %}"></script>
             <script src="{% static 'ietf/js/theme.js' %}"></script>
         {% endif %}
@@ -51,6 +53,7 @@
     </head>
     <body>
         {% analytical_body_top %}
+        {% include "base/status.html" %}
         <div class="btn-toolbar sidebar-toolbar position-fixed top-0 end-0 m-2 m-lg-3 d-print-none">
             <div class="dropdown">
                 <button class="btn btn-outline-secondary btn-sm me-1 dropdown-toggle d-flex align-items-center"
diff --git a/ietf/templates/status/latest.html b/ietf/templates/status/latest.html
new file mode 100644
index 0000000000..3ad54c9dc3
--- /dev/null
+++ b/ietf/templates/status/latest.html
@@ -0,0 +1,18 @@
+{% load origin %}
+{% load ietf_filters static %}
+{% origin %}
+<meta name="color-scheme" content="light dark">
+<style type="text/css">
+    {# this template doesn't inherit from base.html so it has its own styles #}
+    body {background:transparent;font-family:sans-serif}
+    h1{font-size:18px;display:inline}
+    p{font-size:14px;display:inline}
+    .unimportant{opacity:0.6}
+</style>
+<!-- This page is intended to be iframed, and is only for non-JavaScript browsers. -->
+{% if title %}
+    <h1>{{ title }}</h1>
+    <p>{{ body }} <a href="{{ url }}" target="_top" aria-label="read more about {{title}}">read more</a><br /><span class="unimportant">{{ date }}</span></p>
+{% else %}
+    <p class="unimportant">No site status message.</p>
+{% endif %}
diff --git a/ietf/templates/status/status.html b/ietf/templates/status/status.html
new file mode 100644
index 0000000000..18f64c49a8
--- /dev/null
+++ b/ietf/templates/status/status.html
@@ -0,0 +1,15 @@
+{% extends "base.html" %}
+{% load origin %}
+{% load ietf_filters static %}
+{% block content %}
+    {% origin %}
+    <h1 data-status-id="{{ status.id }}">
+        {% block title %} {{ status.title }} {% endblock %}
+        {% if status.active == False %}
+            <span class="badge bg-secondary">inactive</span>
+        {% endif %}
+    </h1>
+    <div>
+        {{ status_page_html }}
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/urls.py b/ietf/urls.py
index 90b161b530..e822b2042e 100644
--- a/ietf/urls.py
+++ b/ietf/urls.py
@@ -61,6 +61,7 @@
     url(r'^sitemap-(?P<section>.+).xml$', sitemap_views.sitemap, {'sitemaps': sitemaps}),
     url(r'^sitemap.xml$', sitemap_views.index, { 'sitemaps': sitemaps}),
     url(r'^stats/', include('ietf.stats.urls')),
+    url(r'^status/', include('ietf.status.urls')),
     url(r'^stream/', include(stream_urls)),
     url(r'^submit/', include('ietf.submit.urls')),
     url(r'^sync/', include('ietf.sync.urls')),
diff --git a/playwright/tests/status/status.spec.js b/playwright/tests/status/status.spec.js
new file mode 100644
index 0000000000..7b3b90bfa4
--- /dev/null
+++ b/playwright/tests/status/status.spec.js
@@ -0,0 +1,61 @@
+const {
+  test,
+  expect
+} = require('@playwright/test')
+const { STATUS_STORAGE_KEY, generateStatusTestId } = require('../../../client/shared/status-common.js')
+
+test.describe('site status', () => {
+  const noStatus = {
+    hasMessage: false
+  }
+
+  const status1 = {
+    hasMessage: true,
+    id: 1,
+    slug: '2024-7-9fdfdf-sdfsdf',
+    title: 'My status title',
+    body: 'My status body',
+    url: '/status/2024-7-9fdfdf-sdfsdf',
+    date: '2024-07-09T07:05:13+00:00',
+    by: 'Exile is a cool Amiga game'
+  }
+
+  test('Renders server status as Notification', async ({ page }) => {
+    await page.route('/status/latest.json', route => {
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify(status1)
+      })
+    })
+    await page.goto('/')
+    await expect(page.getByTestId(generateStatusTestId(status1.id)), 'should have status').toHaveCount(1)
+  })
+
+  test("Doesn't render dismissed server statuses", async ({ page }) => {
+    await page.route('/status/latest.json', route => {
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify(status1)
+      })
+    })
+    await page.goto('/')
+    await page.evaluate(({ key, value }) => localStorage.setItem(key, value), { key: STATUS_STORAGE_KEY, value: JSON.stringify([status1.id]) })
+    await expect(page.getByTestId(generateStatusTestId(status1.id)), 'should have status').toHaveCount(0)
+  })
+
+  test('Handles no server status', async ({ page }) => {
+    await page.route('/status/latest.json', route => {
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify(noStatus)
+      })
+    })
+
+    await page.goto('/')
+
+    await expect(page.getByTestId(generateStatusTestId(status1.id)), 'should have status').toHaveCount(0)
+  })
+})

From 1252cd2ac28ac4c6791731df0878f31e497885f1 Mon Sep 17 00:00:00 2001
From: Warren Kumari <wkumari@google.com>
Date: Thu, 8 Aug 2024 13:10:54 -0400
Subject: [PATCH 031/707] fix: badgeify "Serious Issues", "On the right track"
 review summaries. (#7809)

Addresses #7808
---
 ietf/doc/templatetags/ietf_filters.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index 35f9f91b43..5a8afd9956 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -856,10 +856,10 @@ def badgeify(blob):
     Add an appropriate bootstrap badge around "text", based on its contents.
     """
     config = [
-        (r"rejected|not ready", "danger", "x-lg"),
+        (r"rejected|not ready|serious issues", "danger", "x-lg"),
         (r"complete|accepted|ready", "success", ""),
         (r"has nits|almost ready", "info", "info-lg"),
-        (r"has issues", "warning", "exclamation-lg"),
+        (r"has issues|on the right track", "warning", "exclamation-lg"),
         (r"assigned", "info", "person-plus-fill"),
         (r"will not review|overtaken by events|withdrawn", "secondary", "dash-lg"),
         (r"no response", "warning", "question-lg"),

From ff8898186ba06072d0e226a6c88bb6e371cc3dee Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Sat, 10 Aug 2024 02:24:04 +1200
Subject: [PATCH 032/707] fix: Ballot return to url via url params rather than
 session (#7788)

* fix: #7287 ballot return params

* fix: Moving Ballot edit position ballot_edit_return_point from session to query param

* fix: tests for return_to_path param

* chore: removing Playwright tests until we can figure out a plan

* feat: return_to path utility refactoring

* fix: throw HTTP 400 in view rather than bubbling up a 500

* fix: return http400 rather than raising
---
 ietf/doc/tests_ballot.py                      | 30 +++++++++++++
 ietf/doc/views_ballot.py                      | 45 +++++++++++++------
 ietf/doc/views_doc.py                         |  5 ---
 ietf/iesg/views.py                            |  3 +-
 ietf/templates/doc/ballot_popup.html          |  2 +-
 .../doc/document_ballot_content.html          |  2 +-
 ietf/utils/http.py                            | 26 ++++++++++-
 playwright/package.json                       |  1 +
 8 files changed, 91 insertions(+), 23 deletions(-)

diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index 034ba6f4b2..2403b6ef5c 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -20,6 +20,7 @@
                                 BallotPositionDocEventFactory, BallotDocEventFactory, IRSGBallotDocEventFactory)
 from ietf.doc.templatetags.ietf_filters import can_defer
 from ietf.doc.utils import create_ballot_if_not_open
+from ietf.doc.views_ballot import parse_ballot_edit_return_point
 from ietf.doc.views_doc import document_ballot_content
 from ietf.group.models import Group, Role
 from ietf.group.factories import GroupFactory, RoleFactory, ReviewTeamFactory
@@ -1451,3 +1452,32 @@ def test_document_ballot_content_without_send_email_values(self):
         self._assertBallotMessage(q, balloters[0], 'No discuss send log available')
         self._assertBallotMessage(q, balloters[1], 'No comment send log available')
         self._assertBallotMessage(q, old_balloter, 'No ballot position send log available')
+
+class ReturnToUrlTests(TestCase):
+    def test_invalid_return_to_url(self):
+        self.assertRaises(
+            Exception,
+            lambda: parse_ballot_edit_return_point('/doc/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
+        )
+        self.assertRaises(
+            Exception,
+            lambda: parse_ballot_edit_return_point('/a-route-that-does-not-exist/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
+        )
+        self.assertRaises(
+            Exception,
+            lambda: parse_ballot_edit_return_point('https://example.com/phishing', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
+        )
+
+    def test_valid_default_return_to_url(self):
+        self.assertEqual(parse_ballot_edit_return_point(
+            None,
+            'draft-ietf-opsawg-ipfix-tcpo-v6eh',
+            '998718'
+        ), '/doc/draft-ietf-opsawg-ipfix-tcpo-v6eh/ballot/998718/')
+        
+    def test_valid_return_to_url(self):
+        self.assertEqual(parse_ballot_edit_return_point(
+            '/doc/draft-ietf-opsawg-ipfix-tcpo-v6eh/ballot/998718/',
+            'draft-ietf-opsawg-ipfix-tcpo-v6eh',
+            '998718'
+        ), '/doc/draft-ietf-opsawg-ipfix-tcpo-v6eh/ballot/998718/')
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 83ccb07be6..357bd2fa2f 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -8,13 +8,14 @@
 
 from django import forms
 from django.conf import settings
-from django.http import HttpResponse, HttpResponseRedirect, Http404
+from django.http import HttpResponse, HttpResponseRedirect, Http404, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.defaultfilters import striptags
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
 from django.views.decorators.csrf import csrf_exempt
 from django.utils.html import escape
+from urllib.parse import urlencode as urllib_urlencode
 
 import debug                            # pyflakes:ignore
 
@@ -39,6 +40,7 @@
 from ietf.name.models import BallotPositionName, DocTypeName
 from ietf.person.models import Person
 from ietf.utils.fields import ModelMultipleChoiceField
+from ietf.utils.http import validate_return_to_path
 from ietf.utils.mail import send_mail_text, send_mail_preformatted
 from ietf.utils.decorators import require_api_key
 from ietf.utils.response import permission_denied
@@ -185,11 +187,11 @@ def edit_position(request, name, ballot_id):
 
     balloter = login = request.user.person
 
-    if 'ballot_edit_return_point' in request.session:
-        return_to_url = request.session['ballot_edit_return_point']
-    else:
-        return_to_url = urlreverse("ietf.doc.views_doc.document_ballot", kwargs=dict(name=doc.name, ballot_id=ballot_id))
-
+    try:
+        return_to_url = parse_ballot_edit_return_point(request.GET.get('ballot_edit_return_point'), doc.name, ballot_id)
+    except ValueError:
+        return HttpResponseBadRequest('ballot_edit_return_point is invalid')
+    
     # if we're in the Secretariat, we can select a balloter to act as stand-in for
     if has_role(request.user, "Secretariat"):
         balloter_id = request.GET.get('balloter')
@@ -209,9 +211,14 @@ def edit_position(request, name, ballot_id):
             save_position(form, doc, ballot, balloter, login, send_mail)
 
             if send_mail:
-                qstr=""
+                query = {}
                 if request.GET.get('balloter'):
-                    qstr += "?balloter=%s" % request.GET.get('balloter')
+                    query['balloter'] = request.GET.get('balloter')
+                if request.GET.get('ballot_edit_return_point'):
+                    query['ballot_edit_return_point'] = request.GET.get('ballot_edit_return_point')
+                qstr = ""
+                if len(query) > 0:
+                    qstr = "?" + urllib_urlencode(query, safe='/')
                 return HttpResponseRedirect(urlreverse('ietf.doc.views_ballot.send_ballot_comment', kwargs=dict(name=doc.name, ballot_id=ballot_id)) + qstr)
             elif request.POST.get("Defer") and doc.stream.slug != "irtf":
                 return redirect('ietf.doc.views_ballot.defer_ballot', name=doc)
@@ -337,11 +344,11 @@ def send_ballot_comment(request, name, ballot_id):
 
     balloter = request.user.person
 
-    if 'ballot_edit_return_point' in request.session:
-        return_to_url = request.session['ballot_edit_return_point']
-    else:
-        return_to_url = urlreverse("ietf.doc.views_doc.document_ballot", kwargs=dict(name=doc.name, ballot_id=ballot_id))
-
+    try:
+        return_to_url = parse_ballot_edit_return_point(request.GET.get('ballot_edit_return_point'), doc.name, ballot_id)
+    except ValueError:
+        return HttpResponseBadRequest('ballot_edit_return_point is invalid')
+    
     if 'HTTP_REFERER' in request.META:
         back_url = request.META['HTTP_REFERER']
     else:
@@ -1302,3 +1309,15 @@ def rsab_ballot_status(request):
     # Possible TODO: add a menu item to show this? Maybe only if you're in rsab or an rswg chair?
     # There will be so few of these that the general community would follow them from the rswg docs page.
     # Maybe the view isn't actually needed at all...
+
+
+def parse_ballot_edit_return_point(path, doc_name, ballot_id):
+    get_default_path = lambda: urlreverse("ietf.doc.views_doc.document_ballot", kwargs=dict(name=doc_name, ballot_id=ballot_id))
+    allowed_path_handlers = {
+        "ietf.doc.views_doc.document_ballot",
+        "ietf.doc.views_doc.document_irsg_ballot",
+        "ietf.doc.views_doc.document_rsab_ballot",
+        "ietf.iesg.views.agenda",
+        "ietf.iesg.views.agenda_documents",
+    }
+    return validate_return_to_path(path, get_default_path, allowed_path_handlers)
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index bd49275082..0ef132c215 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1538,7 +1538,6 @@ def document_ballot(request, name, ballot_id=None):
     top = render_document_top(request, doc, ballot_tab, name)
 
     c = document_ballot_content(request, doc, ballot.id, editable=True)
-    request.session['ballot_edit_return_point'] = request.path_info
 
     return render(request, "doc/document_ballot.html",
                               dict(doc=doc,
@@ -1556,8 +1555,6 @@ def document_irsg_ballot(request, name, ballot_id=None):
 
     c = document_ballot_content(request, doc, ballot_id, editable=True)
 
-    request.session['ballot_edit_return_point'] = request.path_info
-
     return render(request, "doc/document_ballot.html",
                               dict(doc=doc,
                                    top=top,
@@ -1575,8 +1572,6 @@ def document_rsab_ballot(request, name, ballot_id=None):
 
     c = document_ballot_content(request, doc, ballot_id, editable=True)
 
-    request.session['ballot_edit_return_point'] = request.path_info
-
     return render(
         request,
         "doc/document_ballot.html",
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index b67ef04a03..a92d617ac5 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -209,7 +209,6 @@ def agenda(request, date=None):
                 urlreverse("ietf.iesg.views.telechat_agenda_content_view", kwargs={"section": "minutes"})
             ))
 
-    request.session['ballot_edit_return_point'] = request.path_info
     return render(request, "iesg/agenda.html", {
             "date": data["date"],
             "sections": sorted(data["sections"].items(), key=lambda x:[int(p) for p in x[0].split('.')]),
@@ -398,7 +397,7 @@ def agenda_documents(request):
                 "sections": sorted((num, section) for num, section in sections.items()
                                    if "2" <= num < "5")
                 })
-    request.session['ballot_edit_return_point'] = request.path_info
+    
     return render(request, 'iesg/agenda_documents.html', { 'telechats': telechats })
 
 def past_documents(request):
diff --git a/ietf/templates/doc/ballot_popup.html b/ietf/templates/doc/ballot_popup.html
index 2a04ffab69..2c0863ab6c 100644
--- a/ietf/templates/doc/ballot_popup.html
+++ b/ietf/templates/doc/ballot_popup.html
@@ -27,7 +27,7 @@
             {% if editable and user|has_role:"Area Director,Secretariat,IRSG Member,RSAB Member" %}
                 {% if user|can_ballot:doc %}
                     <a class="btn btn-primary"
-                       href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot_id %}">
+                       href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot_id %}?ballot_edit_return_point={{ request.path|urlencode }}">
                         Edit position
                     </a>
                 {% endif %}
diff --git a/ietf/templates/doc/document_ballot_content.html b/ietf/templates/doc/document_ballot_content.html
index 803ed84a36..e0feb78bc7 100644
--- a/ietf/templates/doc/document_ballot_content.html
+++ b/ietf/templates/doc/document_ballot_content.html
@@ -60,7 +60,7 @@
             </a>
             {% if user|can_ballot:doc %}
                 <a class="btn btn-primary"
-                   href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot.pk %}">
+                   href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot.pk %}?ballot_edit_return_point={{ request.path|urlencode }}">
                     Edit position
                 </a>
             {% endif %}
diff --git a/ietf/utils/http.py b/ietf/utils/http.py
index 6e6409e31f..cda51680ab 100644
--- a/ietf/utils/http.py
+++ b/ietf/utils/http.py
@@ -1,6 +1,8 @@
-# Copyright The IETF Trust 2023, All Rights Reserved
+# Copyright The IETF Trust 2023-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
 
+from django.urls import resolve as urlresolve, Resolver404
+
 def is_ajax(request):
     """Checks whether a request was an AJAX call
 
@@ -8,3 +10,25 @@ def is_ajax(request):
     exact reproduction of the deprecated method suggested there.
     """
     return request.headers.get("x-requested-with") == "XMLHttpRequest"
+
+def validate_return_to_path(path, get_default_path, allowed_path_handlers):
+    if path is None:
+        path = get_default_path()
+
+    # we need to ensure the path isn't used for attacks (eg phishing).
+    # `path` can be used in HttpResponseRedirect() which could redirect to Datatracker or offsite.
+    # Eg http://datatracker.ietf.org/...?ballot_edit_return_point=https://example.com/phish
+    # offsite links could be phishing attempts so let's reject them all, and require valid Datatracker
+    # routes
+    try:
+        # urlresolve will throw if the url doesn't match a route known to Django
+        match = urlresolve(path)                
+        # further restrict by whether it's in the list of valid routes to prevent
+        # (eg) redirecting to logout
+        if match.url_name not in allowed_path_handlers:
+            raise ValueError("Invalid return to path not among valid matches")
+        pass
+    except Resolver404:
+        raise ValueError("Invalid return to path doesn't match a route")
+
+    return path
diff --git a/playwright/package.json b/playwright/package.json
index 874faa824e..5e3ba94782 100644
--- a/playwright/package.json
+++ b/playwright/package.json
@@ -3,6 +3,7 @@
     "install-deps": "playwright install --with-deps",
     "test": "playwright test",
     "test:legacy": "playwright test -c playwright-legacy.config.js",
+    "test:legacy:visual": "playwright test -c playwright-legacy.config.js --headed --workers=1",
     "test:visual": "playwright test --headed --workers=1",
     "test:debug": "playwright test --debug"
   },

From 00d61432934a61e1a1c204fadb218874237d382c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 14 Aug 2024 13:43:21 -0300
Subject: [PATCH 033/707] fix: guard against missing ipr revisions (#7826)

* fix: guard against missing "revisions"

* test: add tests for DraftForm

Only testing the part relevant to this issue.

* test: clarify intentions

* chore: "document" -> "draft" in comments
---
 ietf/ipr/forms.py |  2 +-
 ietf/ipr/tests.py | 56 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 57 insertions(+), 1 deletion(-)

diff --git a/ietf/ipr/forms.py b/ietf/ipr/forms.py
index 8ea179789b..62d3f9c216 100644
--- a/ietf/ipr/forms.py
+++ b/ietf/ipr/forms.py
@@ -112,7 +112,7 @@ def clean(self):
         if not document:
             self.add_error("document", "Identifying the Internet-Draft or RFC for this disclosure is required.")
         elif not document.name.startswith("rfc"):
-            if revisions.strip() == "":
+            if revisions is None or revisions.strip() == "":
                 self.add_error("revisions", "Revisions of this Internet-Draft for which this disclosure is relevant must be specified.")
         return cleaned_data
 
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 3a91c9dfb7..5b6a5d5d58 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -28,9 +28,11 @@
 from ietf.ipr.factories import (
     HolderIprDisclosureFactory,
     GenericIprDisclosureFactory,
+    IprDisclosureBaseFactory,
     IprDocRelFactory,
     IprEventFactory
 )
+from ietf.ipr.forms import DraftForm
 from ietf.ipr.mail import (process_response_email, get_reply_to, get_update_submitter_emails,
     get_pseudo_submitter, get_holders, get_update_cc_addrs)
 from ietf.ipr.models import (IprDisclosureBase,GenericIprDisclosure,HolderIprDisclosure,
@@ -935,3 +937,57 @@ def test_no_revisions_message(self):
             no_revisions_message(iprdocrel),
             "No revisions for this Internet-Draft were specified in this disclosure. However, there is only one revision of this Internet-Draft."
         )
+
+
+class DraftFormTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        self.disclosure = IprDisclosureBaseFactory()
+        self.draft = WgDraftFactory()
+        self.rfc = RfcFactory()
+
+    def test_revisions_valid(self):
+        post_data = {
+            "document": str(self.draft.pk),
+            "disclosure": str(self.disclosure.pk),
+        }
+        # The revisions field is just a char field that allows descriptions of the applicable
+        # document revisions. It's usually just a rev or "00-02", but the form allows anything
+        # not empty. The secretariat will review the value before the disclosure is posted so
+        # minimal validation is ok here.
+        self.assertTrue(DraftForm(post_data | {"revisions": "00"}).is_valid())
+        self.assertTrue(DraftForm(post_data | {"revisions": "00-02"}).is_valid())
+        self.assertTrue(DraftForm(post_data | {"revisions": "01,03, 05"}).is_valid())
+        self.assertTrue(DraftForm(post_data | {"revisions": "all but 01"}).is_valid())
+        # RFC instead of draft - allow empty / missing revisions
+        post_data["document"] = str(self.rfc.pk)
+        self.assertTrue(DraftForm(post_data).is_valid())
+        self.assertTrue(DraftForm(post_data | {"revisions": ""}).is_valid())
+
+    def test_revisions_invalid(self):
+        missing_rev_error_msg = (
+            "Revisions of this Internet-Draft for which this disclosure is relevant must be specified."
+        )
+        null_char_error_msg = "Null characters are not allowed."
+        
+        post_data = {
+            "document": str(self.draft.pk),
+            "disclosure": str(self.disclosure.pk),
+        }
+        self.assertFormError(
+            DraftForm(post_data), "revisions", missing_rev_error_msg
+        )
+        self.assertFormError(
+            DraftForm(post_data | {"revisions": ""}), "revisions", missing_rev_error_msg
+        )
+        self.assertFormError(
+            DraftForm(post_data | {"revisions": "1\x00"}),
+            "revisions",
+            [null_char_error_msg, missing_rev_error_msg],
+        )
+        # RFC instead of draft still validates the revisions field
+        self.assertFormError(
+            DraftForm(post_data | {"document": str(self.rfc.pk), "revisions": "1\x00"}),
+            "revisions",
+            null_char_error_msg,
+        )

From bb0b3427167b91d434a2b751718df7ad7fa976f8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 15 Aug 2024 18:33:14 -0300
Subject: [PATCH 034/707] test: fix DraftFormTest setup (#7828)

* test: fix DraftFormTest setup

Tests were failing when the doc factories started
producing pks >= 10 because of an incorrect test
data structure.

* chore: improve comments
---
 ietf/ipr/tests.py | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 5b6a5d5d58..922ae272a9 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -943,12 +943,14 @@ class DraftFormTests(TestCase):
     def setUp(self):
         super().setUp()
         self.disclosure = IprDisclosureBaseFactory()
-        self.draft = WgDraftFactory()
+        self.draft = WgDraftFactory.create_batch(10)[-1]
         self.rfc = RfcFactory()
 
     def test_revisions_valid(self):
         post_data = {
-            "document": str(self.draft.pk),
+            # n.b., "document" is a SearchableDocumentField, which is a multiple choice field limited
+            # to a single choice. Its value must be an array of pks with one element.
+            "document": [str(self.draft.pk)],
             "disclosure": str(self.disclosure.pk),
         }
         # The revisions field is just a char field that allows descriptions of the applicable
@@ -960,7 +962,7 @@ def test_revisions_valid(self):
         self.assertTrue(DraftForm(post_data | {"revisions": "01,03, 05"}).is_valid())
         self.assertTrue(DraftForm(post_data | {"revisions": "all but 01"}).is_valid())
         # RFC instead of draft - allow empty / missing revisions
-        post_data["document"] = str(self.rfc.pk)
+        post_data["document"] = [str(self.rfc.pk)]
         self.assertTrue(DraftForm(post_data).is_valid())
         self.assertTrue(DraftForm(post_data | {"revisions": ""}).is_valid())
 
@@ -971,7 +973,9 @@ def test_revisions_invalid(self):
         null_char_error_msg = "Null characters are not allowed."
         
         post_data = {
-            "document": str(self.draft.pk),
+            # n.b., "document" is a SearchableDocumentField, which is a multiple choice field limited
+            # to a single choice. Its value must be an array of pks with one element.
+            "document": [str(self.draft.pk)],
             "disclosure": str(self.disclosure.pk),
         }
         self.assertFormError(
@@ -987,7 +991,7 @@ def test_revisions_invalid(self):
         )
         # RFC instead of draft still validates the revisions field
         self.assertFormError(
-            DraftForm(post_data | {"document": str(self.rfc.pk), "revisions": "1\x00"}),
+            DraftForm(post_data | {"document": [str(self.rfc.pk)], "revisions": "1\x00"}),
             "revisions",
             null_char_error_msg,
         )

From f53d1cae65e3462af485ac10a55e0ba7cf0a6828 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 21 Aug 2024 08:29:09 -0500
Subject: [PATCH 035/707] fix: remove unused notes field from
 SchedSessTimeAssignment model (#7832)

---
 ...0008_remove_schedtimesessassignment_notes.py | 17 +++++++++++++++++
 ietf/meeting/models.py                          |  3 +--
 ietf/meeting/resources.py                       |  1 -
 3 files changed, 18 insertions(+), 3 deletions(-)
 create mode 100644 ietf/meeting/migrations/0008_remove_schedtimesessassignment_notes.py

diff --git a/ietf/meeting/migrations/0008_remove_schedtimesessassignment_notes.py b/ietf/meeting/migrations/0008_remove_schedtimesessassignment_notes.py
new file mode 100644
index 0000000000..3c0b85fc22
--- /dev/null
+++ b/ietf/meeting/migrations/0008_remove_schedtimesessassignment_notes.py
@@ -0,0 +1,17 @@
+# Generated by Django 4.2.15 on 2024-08-16 13:49
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("meeting", "0007_attended_origin_attended_time"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="schedtimesessassignment",
+            name="notes",
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index d8a069ef3c..693cb99dfd 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -788,7 +788,6 @@ class SchedTimeSessAssignment(models.Model):
     schedule = ForeignKey('Schedule', null=False, blank=False, related_name='assignments')
     extendedfrom = ForeignKey('self', null=True, default=None, help_text="Timeslot this session is an extension of.")
     modified = models.DateTimeField(auto_now=True)
-    notes    = models.TextField(blank=True)
     badness  = models.IntegerField(default=0, blank=True, null=True)
     pinned   = models.BooleanField(default=False, help_text="Do not move session during automatic placement.")
 
@@ -1423,7 +1422,7 @@ class MeetingHost(models.Model):
                 validate_file_extension,
                 settings.MEETING_VALID_UPLOAD_EXTENSIONS['meetinghostlogo'],
             ),
-            WrappedValidator(
+   WrappedValidator(
                 validate_mime_type,
                 settings.MEETING_VALID_UPLOAD_MIME_TYPES['meetinghostlogo'],
                 True,
diff --git a/ietf/meeting/resources.py b/ietf/meeting/resources.py
index dc273c04cf..de9ca01476 100644
--- a/ietf/meeting/resources.py
+++ b/ietf/meeting/resources.py
@@ -269,7 +269,6 @@ class Meta:
         filtering = { 
             "id": ALL,
             "modified": ALL,
-            "notes": ALL,
             "badness": ALL,
             "pinned": ALL,
             "timeslot": ALL_WITH_RELATIONS,

From c323cdde036593244ddcec218c0ffcedda56e792 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 21 Aug 2024 08:32:06 -0500
Subject: [PATCH 036/707] fix: remove unused internal_comments from the
 DocumentInfo abstract model (#7833)

---
 ...e_dochistory_internal_comments_and_more.py | 21 +++++++++++++++++++
 ietf/doc/models.py                            |  1 -
 ietf/doc/resources.py                         |  2 --
 ietf/secr/static/css/custom.css               |  7 +------
 4 files changed, 22 insertions(+), 9 deletions(-)
 create mode 100644 ietf/doc/migrations/0022_remove_dochistory_internal_comments_and_more.py

diff --git a/ietf/doc/migrations/0022_remove_dochistory_internal_comments_and_more.py b/ietf/doc/migrations/0022_remove_dochistory_internal_comments_and_more.py
new file mode 100644
index 0000000000..ad27793a83
--- /dev/null
+++ b/ietf/doc/migrations/0022_remove_dochistory_internal_comments_and_more.py
@@ -0,0 +1,21 @@
+# Generated by Django 4.2.15 on 2024-08-16 16:43
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0021_narrativeminutes"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="dochistory",
+            name="internal_comments",
+        ),
+        migrations.RemoveField(
+            model_name="document",
+            name="internal_comments",
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index a103fca645..639e6ca857 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -122,7 +122,6 @@ class DocumentInfo(models.Model):
     external_url = models.URLField(blank=True)
     uploaded_filename = models.TextField(blank=True)
     note = models.TextField(blank=True)
-    internal_comments = models.TextField(blank=True)
     rfc_number = models.PositiveIntegerField(blank=True, null=True)  # only valid for type="rfc"
 
     def file_extension(self):
diff --git a/ietf/doc/resources.py b/ietf/doc/resources.py
index 6bb6ffa281..bba57013b9 100644
--- a/ietf/doc/resources.py
+++ b/ietf/doc/resources.py
@@ -130,7 +130,6 @@ class Meta:
             "external_url": ALL,
             "uploaded_filename": ALL,
             "note": ALL,
-            "internal_comments": ALL,
             "name": ALL,
             "type": ALL_WITH_RELATIONS,
             "stream": ALL_WITH_RELATIONS,
@@ -247,7 +246,6 @@ class Meta:
             "external_url": ALL,
             "uploaded_filename": ALL,
             "note": ALL,
-            "internal_comments": ALL,
             "name": ALL,
             "type": ALL_WITH_RELATIONS,
             "stream": ALL_WITH_RELATIONS,
diff --git a/ietf/secr/static/css/custom.css b/ietf/secr/static/css/custom.css
index 8816b3f13d..8a622cba5d 100644
--- a/ietf/secr/static/css/custom.css
+++ b/ietf/secr/static/css/custom.css
@@ -319,11 +319,6 @@ input.draft-file-input {
     width: 4em;
 }
 
-.draft-container #id_internal_comments {
-    height: 4em;
-    width: 40em;
-}
-
 .draft-container #id_abstract {
     height: 15em;
     width: 40em;
@@ -842,4 +837,4 @@ td, th, li, h2 {
 
 thead th {
     font-size: 12px;
-}
\ No newline at end of file
+}

From 9b4671c076d5393117abda5faf6256dd8dcdc62a Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Fri, 23 Aug 2024 02:25:03 +1200
Subject: [PATCH 037/707] fix: Install weasyprint as xml2rfc extra (#7845)

Since xml2rfc v3.23.0, WeasyPrint version is pinned.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 8187c1cebf..88b78e665b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -71,5 +71,5 @@ tqdm>=4.64.0
 Unidecode>=1.3.4
 urllib3>=2
 weasyprint>=59
-xml2rfc>=3.12.4
+xml2rfc[pdf]>=3.23.0
 xym>=0.6,<1.0

From 2230242b9b7c6f3c64a0e32d96ce6ac004dffe54 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 22 Aug 2024 12:34:52 -0300
Subject: [PATCH 038/707] refactor: speed up finalizing proceedings (#7846)

* chore: increase nginx proxy_read_timeout

* refactor: speed up bluesheet_data

The affiliation helper was extremely slow. Using
queryset annotation speeds it up by almost an order
of magnitude.

* chore: delint
---
 ietf/meeting/utils.py      | 31 ++++++++++++++++++++-----------
 k8s/nginx-auth.conf        |  4 ++++
 k8s/nginx-datatracker.conf |  4 ++++
 3 files changed, 28 insertions(+), 11 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index e3d8c830ee..b68a311f5d 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -12,7 +12,8 @@
 
 from django.conf import settings
 from django.contrib import messages
-from django.db.models import Q
+from django.db.models import OuterRef, Subquery, TextField, Q, Value
+from django.db.models.functions import Coalesce
 from django.template.loader import render_to_string
 from django.utils import timezone
 from django.utils.encoding import smart_str
@@ -149,19 +150,27 @@ def create_proceedings_templates(meeting):
 
 
 def bluesheet_data(session):
-    def affiliation(meeting, person):
-        # from OidcExtraScopeClaims.scope_registration()
-        email_list = person.email_set.values_list("address")
-        q = Q(person=person, meeting=meeting) | Q(email__in=email_list, meeting=meeting)
-        reg = MeetingRegistration.objects.filter(q).exclude(affiliation="").first()
-        return reg.affiliation if reg else ""
-
-    attendance = Attended.objects.filter(session=session).order_by("time")
-    meeting = session.meeting
+    attendance = (
+        Attended.objects.filter(session=session)
+        .annotate(
+            affiliation=Coalesce(
+                Subquery(
+                    MeetingRegistration.objects.filter(
+                        Q(meeting=session.meeting),
+                        Q(person=OuterRef("person")) | Q(email=OuterRef("person__email")),
+                    ).values("affiliation")[:1]
+                ),
+                Value(""),
+                output_field=TextField(),
+            )
+        ).distinct()
+        .order_by("time")
+    )
+
     return [
         {
             "name": attended.person.plain_name(),
-            "affiliation": affiliation(meeting, attended.person),
+            "affiliation": attended.affiliation,
         }
         for attended in attendance
     ]
diff --git a/k8s/nginx-auth.conf b/k8s/nginx-auth.conf
index 6dd5d6ed56..a38b8f50c7 100644
--- a/k8s/nginx-auth.conf
+++ b/k8s/nginx-auth.conf
@@ -34,5 +34,9 @@ server {
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $${keepempty}remote_addr;
         proxy_pass http://localhost:8000;
+        # Set timeouts longer than Cloudflare proxy limits
+        proxy_connect_timeout 60;  # nginx default (Cf = 15)
+        proxy_read_timeout 120;  # nginx default = 60 (Cf = 100) 
+        proxy_send_timeout 60;  # nginx default = 60 (Cf = 30)
     }
 }
diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index 5cbc22e6c7..7c0dc85fd0 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -23,6 +23,10 @@ server {
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_set_header X-Real-IP $${keepempty}remote_addr;
         proxy_pass http://localhost:8000;
+        # Set timeouts longer than Cloudflare proxy limits
+        proxy_connect_timeout 60;  # nginx default (Cf = 15)
+        proxy_read_timeout 120;  # nginx default = 60 (Cf = 100) 
+        proxy_send_timeout 60;  # nginx default = 60 (Cf = 30)
         client_max_body_size 0;  # disable size check
     }
 }

From af21347b67a5663b46c41d9c91f7e0ef4ef0b920 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Sat, 24 Aug 2024 10:50:31 +1200
Subject: [PATCH 039/707] fix: Dark mode bug, pinia store reset across Vite
 entry points (#7851)

---
 client/embedded.js                      | 4 ++--
 client/main.js                          | 4 ++--
 client/shared/create-pinia-singleton.js | 6 ++++++
 3 files changed, 10 insertions(+), 4 deletions(-)
 create mode 100644 client/shared/create-pinia-singleton.js

diff --git a/client/embedded.js b/client/embedded.js
index 3b104650cf..0509c0aecf 100644
--- a/client/embedded.js
+++ b/client/embedded.js
@@ -1,11 +1,11 @@
 import { createApp } from 'vue'
-import { createPinia } from 'pinia'
 import piniaPersist from 'pinia-plugin-persist'
 import Embedded from './Embedded.vue'
+import { createPiniaSingleton } from './shared/create-pinia-singleton'
 
 // Initialize store (Pinia)
 
-const pinia = createPinia()
+const pinia = createPiniaSingleton()
 pinia.use(piniaPersist)
 
 // Mount App
diff --git a/client/main.js b/client/main.js
index 0dc5cf32e0..3fbad907b1 100644
--- a/client/main.js
+++ b/client/main.js
@@ -1,14 +1,14 @@
 import { createApp } from 'vue'
-import { createPinia } from 'pinia'
 import piniaPersist from 'pinia-plugin-persist'
 import App from './App.vue'
 import router from './router'
+import { createPiniaSingleton } from './shared/create-pinia-singleton'
 
 const app = createApp(App, {})
 
 // Initialize store (Pinia)
 
-const pinia = createPinia()
+const pinia = createPiniaSingleton()
 pinia.use(piniaPersist)
 app.use(pinia)
 
diff --git a/client/shared/create-pinia-singleton.js b/client/shared/create-pinia-singleton.js
new file mode 100644
index 0000000000..f0013245a1
--- /dev/null
+++ b/client/shared/create-pinia-singleton.js
@@ -0,0 +1,6 @@
+import { createPinia } from 'pinia'
+
+export function createPiniaSingleton(){
+  window.pinia = window.pinia ?? createPinia()
+  return window.pinia
+}

From bece8fd71bb58e214acf1c02ba1ccbe000d23dd6 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Tue, 27 Aug 2024 01:03:15 +1200
Subject: [PATCH 040/707] feat: Agenda URL #hash scrolls to 'now' or specific
 day (#7772)

* feat: Agenda URL #now scroll to current event

* fix: agendaData date offset for dev purposes

* feat: scroll to day

* fix: Showing correct hostname in agenda modify log

* feat: mobile menu scroll to hash and general bug fixes

* fix: agenda mobile menu formatting and Playwright selectors

* fix: removing spurious ? mark

* chore: removing redundant agenda time setter in favour of agenda settings panel for debugging

* style: Update AgendaMobileBar.vue

* style: Update AgendaScheduleList.vue

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
---
 client/agenda/Agenda.vue                |  2 +-
 client/agenda/AgendaMobileBar.vue       | 54 +++++++++++++++++++++----
 client/agenda/AgendaQuickAccess.vue     | 10 ++---
 client/agenda/AgendaScheduleList.vue    | 29 ++++++++++++-
 client/agenda/store.js                  |  7 +++-
 playwright/tests/meeting/agenda.spec.js |  2 +-
 6 files changed, 85 insertions(+), 19 deletions(-)

diff --git a/client/agenda/Agenda.vue b/client/agenda/Agenda.vue
index 40dae008a4..99a46f4fe9 100644
--- a/client/agenda/Agenda.vue
+++ b/client/agenda/Agenda.vue
@@ -434,7 +434,7 @@ function reconnectScrollObservers () {
   scrollObserver.disconnect()
   visibleDays.length = 0
   for (const mDay of agendaStore.meetingDays) {
-    const el = document.getElementById(`agenda-day-${mDay.slug}`)
+    const el = document.getElementById(mDay.slug)
     el.dataset.dayId = mDay.slug.toString()
     el.dataset.dayTs = mDay.ts
     scrollObserver.observe(el)
diff --git a/client/agenda/AgendaMobileBar.vue b/client/agenda/AgendaMobileBar.vue
index 5d15e9e692..78af96e255 100644
--- a/client/agenda/AgendaMobileBar.vue
+++ b/client/agenda/AgendaMobileBar.vue
@@ -29,7 +29,6 @@
 
 <script setup>
 import { computed, h } from 'vue'
-
 import {
   NBadge,
   NDropdown,
@@ -51,21 +50,48 @@ const siteStore = useSiteStore()
 
 // Meeting Days
 
+function optionToLink(opts){
+  const { key, label, icon } = opts
+
+  return {
+    ...opts,
+    type: 'render',
+    render: () => h(
+      'a',
+      {
+        class: 'dropdown-link',
+        'data-testid': 'mobile-link',
+        href: `#${key}`
+      },
+      [
+        h(
+          'span',
+          icon()
+        ),
+        h(
+          'span',
+          label
+        )
+      ]
+    )
+  }
+}
+
 const jumpToDayOptions = computed(() => {
   const days = []
   if (agendaStore.isMeetingLive) {
-    days.push({
+    days.push(optionToLink({
       label: 'Jump to Now',
       key: 'now',
       icon: () => h('i', { class: 'bi bi-arrow-down-right-square text-red' })
-    })
+    }))
   }
   for (const day of agendaStore.meetingDays) {
-    days.push({
+    days.push(optionToLink({
       label: `Jump to ${day.label}`,
       key: day.slug,
       icon: () => h('i', { class: 'bi bi-arrow-down-right-square' })
-    })
+    }))
   }
   return days
 })
@@ -90,14 +116,13 @@ const downloadIcsOptions = [
 function jumpToDay (dayId) {
   if (dayId === 'now') {
     const lastEventId = agendaStore.findCurrentEventId()
-
     if (lastEventId) {
       document.getElementById(`agenda-rowid-${lastEventId}`)?.scrollIntoView(true)
     } else {
       message.warning('There is no event happening right now.')
     }
   } else {
-    document.getElementById(`agenda-day-${dayId}`)?.scrollIntoView(true)
+    document.getElementById(dayId)?.scrollIntoView(true)
   }
 }
 
@@ -162,4 +187,19 @@ function downloadIcs (key) {
     }
   }
 }
+
+.dropdown-link {
+  display: flex;
+  text-decoration:none;
+  gap: 0.2rem 0.5rem;
+  padding: 0.5em;
+  color: var(--bs-body-color);
+  
+  &:hover,
+  &:focus {
+    background-color: var(--bs-dark-bg-subtle);
+    text-decoration: underline;
+  }
+}
+
 </style>
diff --git a/client/agenda/AgendaQuickAccess.vue b/client/agenda/AgendaQuickAccess.vue
index 99adc1027e..b226d09c60 100644
--- a/client/agenda/AgendaQuickAccess.vue
+++ b/client/agenda/AgendaQuickAccess.vue
@@ -99,7 +99,7 @@
             li.nav-item(v-for='day of agendaStore.meetingDays')
               a.nav-link(
                 :class='agendaStore.dayIntersectId === day.slug ? `active` : ``'
-                :href='`#slot-` + day.slug'
+                :href='`#${day.slug}`'
                 @click='scrollToDay(day.slug, $event)'
                 )
                 i.bi.bi-arrow-right-short.d-none.d-xxl-inline.me-2
@@ -109,7 +109,6 @@
 <script setup>
 import { computed, h } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
-import { DateTime } from 'luxon'
 import {
   NAffix,
   NBadge,
@@ -200,14 +199,11 @@ function pickerDiscard () {
   }
 }
 
-function scrollToDay (dayId, ev) {
-  ev.preventDefault()
-  document.getElementById(`agenda-day-${dayId}`)?.scrollIntoView(true)
+function scrollToDay (daySlug, ev) {
+  document.getElementById(daySlug)?.scrollIntoView(true)
 }
 
 function scrollToNow (ev) {
-  ev.preventDefault()
-
   const lastEventId = agendaStore.findCurrentEventId()
 
   if (lastEventId) {
diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index a6d2b9a5aa..2869992579 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -24,7 +24,7 @@
           )
           //- ROW - DAY HEADING -----------------------
           template(v-if='item.displayType === `day`')
-            td(:id='`agenda-day-` + item.id', :colspan='pickerModeActive ? 6 : 5') {{item.date}}
+            td(:id='item.slug', :colspan='pickerModeActive ? 6 : 5') {{item.date}}
           //- ROW - SESSION HEADING -------------------
           template(v-else-if='item.displayType === `session-head`')
             td.agenda-table-cell-check(v-if='pickerModeActive') &nbsp;
@@ -200,7 +200,7 @@ import {
 
 import AgendaDetailsModal from './AgendaDetailsModal.vue'
 
-import { useAgendaStore } from './store'
+import { useAgendaStore, daySlugPrefix, daySlug } from './store'
 import { useSiteStore } from '../shared/store'
 import { getUrl } from '../shared/urls'
 
@@ -248,6 +248,7 @@ const meetingEvents = computed(() => {
     if (itemDate.toISODate() !== acc.lastDate) {
       acc.result.push({
         id: item.id,
+        slug: daySlug(item),
         key: `day-${itemDate.toISODate()}`,
         displayType: 'day',
         date: itemDate.toLocaleString(DateTime.DATE_HUGE),
@@ -575,6 +576,30 @@ function recalculateRedLine () {
   }
 }
 
+/**
+ * On page load when browser location hash contains '#now' or '#agenda-day-*' then scroll accordingly
+ */
+;(function scrollToHashInit() {
+  if (!window.location.hash) {
+    return
+  }
+  if (!(window.location.hash === "#now" || window.location.hash.startsWith(`#${daySlugPrefix}`))) {
+    return
+  }
+  const unsubscribe = agendaStore.$subscribe((_mutation, agendaStoreState) => {
+    if (agendaStoreState.schedule.length === 0) {
+      return
+    }
+    unsubscribe() // we only need to scroll once, so unsubscribe from future updates
+    if(window.location.hash === "#now") {
+      const lastEventId = agendaStore.findCurrentEventId()
+      document.getElementById(`agenda-rowid-${lastEventId}`)?.scrollIntoView(true)
+    } else if(window.location.hash.startsWith(`#${daySlugPrefix}`)) {
+      document.getElementById(window.location.hash.substring(1))?.scrollIntoView(true)
+    }
+  })
+})()
+
 // MOUNTED
 
 onMounted(() => {
diff --git a/client/agenda/store.js b/client/agenda/store.js
index 18c3e8c657..71c1219725 100644
--- a/client/agenda/store.js
+++ b/client/agenda/store.js
@@ -121,7 +121,7 @@ export const useAgendaStore = defineStore('agenda', {
     meetingDays () {
       const siteStore = useSiteStore()
       return uniqBy(this.scheduleAdjusted, 'adjustedStartDate').sort().map(s => ({
-        slug: s.id.toString(),
+        slug: daySlug(s),
         ts: s.adjustedStartDate,
         label: siteStore.viewport < 1350 ? DateTime.fromISO(s.adjustedStartDate).toFormat('ccc LLL d') : DateTime.fromISO(s.adjustedStartDate).toLocaleString(DateTime.DATE_HUGE)
       }))
@@ -292,3 +292,8 @@ function findFirstConferenceUrl (txt) {
   } catch (err) { }
   return null
 }
+
+export const daySlugPrefix = 'agenda-day-'
+export function daySlug(s) {
+  return `${daySlugPrefix}${s.adjustedStartDate}` // eg 'agenda-day-2024-08-13'
+}
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index 4bd870ebc9..109e1b3b81 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -1431,7 +1431,7 @@ test.describe('past - small screens', () => {
 
         // can open the jump to day dropdown
         await barBtnLocator.first().click()
-        const jumpDayDdnLocator = page.locator('.n-dropdown-menu > .n-dropdown-option')
+        const jumpDayDdnLocator = page.locator('.n-dropdown-menu [data-testid=mobile-link]')
         await expect(jumpDayDdnLocator).toHaveCount(7)
         for (let idx = 0; idx < 7; idx++) {
           const localDateTime = DateTime.fromISO(meetingData.meeting.startDate, { zone: meetingData.meeting.timezone })

From 715edafcdca16ea89797628d9cea2c3d2ee5ac36 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Thu, 29 Aug 2024 00:51:05 +1200
Subject: [PATCH 041/707] fix: return to ballotpopup (#7858)

* fix: return to ballotpopup

* fix: ballot position return to in modals

* fix: ballot return to test

* fix: ballot return to additional allow handlers

* fix: ballot return to handler syntax error in test
---
 ietf/doc/templatetags/ballot_icon.py | 13 +++++++++++--
 ietf/doc/tests_ballot.py             | 20 ++++++++------------
 ietf/doc/views_ballot.py             | 13 +++++++++++++
 ietf/doc/views_doc.py                | 10 +++++++++-
 ietf/templates/doc/ballot_popup.html |  2 +-
 5 files changed, 42 insertions(+), 16 deletions(-)

diff --git a/ietf/doc/templatetags/ballot_icon.py b/ietf/doc/templatetags/ballot_icon.py
index ebcc605cd5..5f59822c7b 100644
--- a/ietf/doc/templatetags/ballot_icon.py
+++ b/ietf/doc/templatetags/ballot_icon.py
@@ -96,9 +96,14 @@ def sort_key(t):
     positions = list(ballot.active_balloter_positions().items())
     positions.sort(key=sort_key)
 
+    request = context.get("request")
+    ballot_edit_return_point_param = f"ballot_edit_return_point={request.path}"
+
     right_click_string = ''
     if has_role(user, "Area Director"):
-        right_click_string = 'oncontextmenu="window.location.href=\'%s\';return false;"' %  urlreverse('ietf.doc.views_ballot.edit_position', kwargs=dict(name=doc.name, ballot_id=ballot.pk))
+        right_click_string = 'oncontextmenu="window.location.href=\'{}?{}\';return false;"'.format(
+            urlreverse('ietf.doc.views_ballot.edit_position', kwargs=dict(name=doc.name, ballot_id=ballot.pk)),
+            ballot_edit_return_point_param)
 
     my_blocking = False
     for i, (balloter, pos) in enumerate(positions):
@@ -113,10 +118,14 @@ def sort_key(t):
         typename = "RSAB"
     else:
         typename = "IESG"
+    
+    modal_url = "{}?{}".format(
+        urlreverse("ietf.doc.views_doc.ballot_popup", kwargs=dict(name=doc.name, ballot_id=ballot.pk)),
+        ballot_edit_return_point_param)
 
     res = ['<a %s href="%s" data-bs-toggle="modal" data-bs-target="#modal-%d" aria-label="%s positions" title="%s positions (click to show more)" class="ballot-icon"><table' % (
             right_click_string,
-            urlreverse("ietf.doc.views_doc.ballot_popup", kwargs=dict(name=doc.name, ballot_id=ballot.pk)),
+            modal_url,
             ballot.pk,
             typename,
             typename,)]
diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index 2403b6ef5c..d77e2ddc98 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -1455,18 +1455,14 @@ def test_document_ballot_content_without_send_email_values(self):
 
 class ReturnToUrlTests(TestCase):
     def test_invalid_return_to_url(self):
-        self.assertRaises(
-            Exception,
-            lambda: parse_ballot_edit_return_point('/doc/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
-        )
-        self.assertRaises(
-            Exception,
-            lambda: parse_ballot_edit_return_point('/a-route-that-does-not-exist/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
-        )
-        self.assertRaises(
-            Exception,
-            lambda: parse_ballot_edit_return_point('https://example.com/phishing', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718'),
-        )
+        with self.assertRaises(ValueError):
+            parse_ballot_edit_return_point('/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718')
+
+        with self.assertRaises(ValueError):
+            parse_ballot_edit_return_point('/a-route-that-does-not-exist/', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718')
+
+        with self.assertRaises(ValueError):
+            parse_ballot_edit_return_point('https://example.com/phishing', 'draft-ietf-opsawg-ipfix-tcpo-v6eh', '998718')
 
     def test_valid_default_return_to_url(self):
         self.assertEqual(parse_ballot_edit_return_point(
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 357bd2fa2f..8d9ab0b740 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -1314,10 +1314,23 @@ def rsab_ballot_status(request):
 def parse_ballot_edit_return_point(path, doc_name, ballot_id):
     get_default_path = lambda: urlreverse("ietf.doc.views_doc.document_ballot", kwargs=dict(name=doc_name, ballot_id=ballot_id))
     allowed_path_handlers = {
+        "ietf.community.views.view_list",
         "ietf.doc.views_doc.document_ballot",
         "ietf.doc.views_doc.document_irsg_ballot",
         "ietf.doc.views_doc.document_rsab_ballot",
+        "ietf.doc.views_ballot.irsg_ballot_status",
+        "ietf.doc.views_ballot.rsab_ballot_status",
+        "ietf.doc.views_search.search",
+        "ietf.doc.views_search.docs_for_ad",
+        "ietf.doc.views_search.drafts_in_last_call",
+        "ietf.doc.views_search.recent_drafts",
+        "ietf.group.views.chartering_groups",
+        "ietf.group.views.group_documents",
+        "ietf.group.views.stream_documents",
         "ietf.iesg.views.agenda",
         "ietf.iesg.views.agenda_documents",
+        "ietf.iesg.views.discusses",
+        "ietf.iesg.views.past_documents",
     }
     return validate_return_to_path(path, get_default_path, allowed_path_handlers)
+
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 0ef132c215..d12dd04181 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -43,7 +43,7 @@
 
 from django.core.cache import caches
 from django.db.models import Max
-from django.http import HttpResponse, Http404
+from django.http import HttpResponse, Http404, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
@@ -73,6 +73,7 @@
     role_required, is_individual_draft_author, can_request_rfc_publication)
 from ietf.name.models import StreamName, BallotPositionName
 from ietf.utils.history import find_history_active_at
+from ietf.doc.views_ballot import parse_ballot_edit_return_point
 from ietf.doc.forms import InvestigateForm, TelechatForm, NotifyForm, ActionHoldersForm, DocAuthorForm, DocAuthorChangeBasisForm
 from ietf.doc.mails import email_comment, email_remind_action_holders
 from ietf.mailtrigger.utils import gather_relevant_expansions
@@ -1586,11 +1587,18 @@ def ballot_popup(request, name, ballot_id):
     doc = get_object_or_404(Document, name=name)
     c = document_ballot_content(request, doc, ballot_id=ballot_id, editable=False)
     ballot = get_object_or_404(BallotDocEvent,id=ballot_id)
+    
+    try:
+        return_to_url = parse_ballot_edit_return_point(request.GET.get('ballot_edit_return_point'), name, ballot_id)
+    except ValueError:
+        return HttpResponseBadRequest('ballot_edit_return_point is invalid')
+    
     return render(request, "doc/ballot_popup.html",
                               dict(doc=doc,
                                    ballot_content=c,
                                    ballot_id=ballot_id,
                                    ballot_type_slug=ballot.ballot_type.slug,
+                                   ballot_edit_return_point=return_to_url,
                                    editable=True,
                                    ))
 
diff --git a/ietf/templates/doc/ballot_popup.html b/ietf/templates/doc/ballot_popup.html
index 2c0863ab6c..d2589cd54c 100644
--- a/ietf/templates/doc/ballot_popup.html
+++ b/ietf/templates/doc/ballot_popup.html
@@ -27,7 +27,7 @@
             {% if editable and user|has_role:"Area Director,Secretariat,IRSG Member,RSAB Member" %}
                 {% if user|can_ballot:doc %}
                     <a class="btn btn-primary"
-                       href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot_id %}?ballot_edit_return_point={{ request.path|urlencode }}">
+                       href="{% url "ietf.doc.views_ballot.edit_position" name=doc.name ballot_id=ballot_id %}?ballot_edit_return_point={{ ballot_edit_return_point|urlencode }}">
                         Edit position
                     </a>
                 {% endif %}

From 1f6db0fef1e92b38fbd756e71b2faad7e1595998 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 28 Aug 2024 14:17:14 -0500
Subject: [PATCH 042/707] feat: mark bofreqs as spam (#7869)

---
 ietf/doc/migrations/0023_bofreqspamstate.py | 30 +++++++++
 ietf/doc/tests_bofreq.py                    | 11 +++-
 ietf/name/fixtures/names.json               | 13 ++++
 ietf/templates/doc/bofreq/bof_requests.html | 68 +++++++++++----------
 4 files changed, 87 insertions(+), 35 deletions(-)
 create mode 100644 ietf/doc/migrations/0023_bofreqspamstate.py

diff --git a/ietf/doc/migrations/0023_bofreqspamstate.py b/ietf/doc/migrations/0023_bofreqspamstate.py
new file mode 100644
index 0000000000..dbbaf996e9
--- /dev/null
+++ b/ietf/doc/migrations/0023_bofreqspamstate.py
@@ -0,0 +1,30 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    State.objects.get_or_create(
+        type_id="bofreq",
+        slug="spam",
+        defaults={"name": "Spam", "desc": "The BOF request is spam", "order": 5},
+    )
+
+
+def reverse(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    Document = apps.get_model("doc", "Document")
+    assert not Document.objects.filter(
+        states__type="bofreq", states__slug="spam"
+    ).exists()
+    State.objects.filter(type_id="bofreq", slug="spam").delete()
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0022_remove_dochistory_internal_comments_and_more"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/doc/tests_bofreq.py b/ietf/doc/tests_bofreq.py
index 319ab778d6..2e27efd627 100644
--- a/ietf/doc/tests_bofreq.py
+++ b/ietf/doc/tests_bofreq.py
@@ -54,8 +54,8 @@ def test_show_bof_requests(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         for state in states:
-            self.assertEqual(len(q(f'#bofreqs-{state.slug}')), 1)
-            self.assertEqual(len(q(f'#bofreqs-{state.slug} tbody tr')), 3)
+            self.assertEqual(len(q(f'#bofreqs-{state.slug}')), 1 if state.slug!="spam" else 0)
+            self.assertEqual(len(q(f'#bofreqs-{state.slug} tbody tr')), 3 if state.slug!="spam" else 0)
         self.assertFalse(q('#start_button'))
         PersonFactory(user__username='nobody')
         self.client.login(username='nobody', password='nobody+password')
@@ -63,6 +63,13 @@ def test_show_bof_requests(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue(q('#start_button'))
+        self.client.logout()
+        self.client.login(username='secretary', password='secretary+password')
+        r = self.client.get(url)
+        q = PyQuery(r.content)
+        for state in states:
+            self.assertEqual(len(q(f'#bofreqs-{state.slug}')), 1)
+            self.assertEqual(len(q(f'#bofreqs-{state.slug} tbody tr')), 3)
 
 
     def test_bofreq_main_page(self):
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 59b367deb8..401767657d 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -2617,6 +2617,19 @@
     "model": "doc.state",
     "pk": 180
   },
+  {
+    "fields": {
+      "desc": "The BOF request is spam",
+      "name": "Spam",
+      "next_states": [],
+      "order": 5,
+      "slug": "spam",
+      "type": "bofreq",
+      "used": true
+    },
+    "model": "doc.state",
+    "pk": 182
+  },
   {
     "fields": {
       "label": "State"
diff --git a/ietf/templates/doc/bofreq/bof_requests.html b/ietf/templates/doc/bofreq/bof_requests.html
index 2a806b18a5..19c2e5dd13 100644
--- a/ietf/templates/doc/bofreq/bof_requests.html
+++ b/ietf/templates/doc/bofreq/bof_requests.html
@@ -1,7 +1,7 @@
 {% extends "base.html" %}
 {# Copyright The IETF Trust 2021 All Rights Reserved #}
 {% load origin %}
-{% load person_filters %}
+{% load person_filters ietf_filters %}
 {% load static %}
 {% block pagehead %}
     <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
@@ -26,40 +26,42 @@ <h1>BOF Requests</h1>
     {% else %}
         {% regroup reqs by get_state_slug as grouped_reqs %}
         {% for req_group in grouped_reqs %}
-            <h2 class="mt-5">{{ req_group.grouper|capfirst }} BOF Requests</h2>
-            <table id="bofreqs-{{ req_group.grouper }}"
-                   class="table table-sm table-striped tablesorter">
-                <thead>
-                    <tr>
-                        <th scope="col" data-sort="name">Name</th>
-                        <th scope="col" class="d-none d-sm-table-cell" data-sort="date">Date</th>
-                        <th scope="col" data-sort="title">Title</th>
-                        <th scope="col" data-sort="responsible">Responsible</th>
-                        <th scope="col" data-sort="editors">Editors</th>
-                    </tr>
-                </thead>
-                <tbody>
-                    {% for req in req_group.list %}
+            {% if req_group.grouper != "spam" or request.user|has_role:"Secretariat" %}
+                <h2 class="mt-5">{{ req_group.grouper|capfirst }} BOF Requests</h2>
+                <table id="bofreqs-{{ req_group.grouper }}"
+                    class="table table-sm table-striped tablesorter">
+                    <thead>
                         <tr>
-                            <td>
-                                <a href="{% url 'ietf.doc.views_doc.document_main' name=req.name %}">{{ req.name }}-{{ req.rev }}</a>
-                            </td>
-                            <td class="d-none d-sm-table-cell">{{ req.latest_revision_event.time|date:"Y-m-d" }}</td>
-                            <td>{{ req.title }}</td>
-                            <td>
-                                {% for person in req.responsible %}
-                                    {% person_link person %}{% if not forloop.last %},{% endif %}
-                                {% endfor %}
-                            </td>
-                            <td>
-                                {% for person in req.editors %}
-                                    {% person_link person %}{% if not forloop.last %},{% endif %}
-                                {% endfor %}
-                            </td>
+                            <th scope="col" data-sort="name">Name</th>
+                            <th scope="col" class="d-none d-sm-table-cell" data-sort="date">Date</th>
+                            <th scope="col" data-sort="title">Title</th>
+                            <th scope="col" data-sort="responsible">Responsible</th>
+                            <th scope="col" data-sort="editors">Editors</th>
                         </tr>
-                    {% endfor %}
-                </tbody>
-            </table>
+                    </thead>
+                    <tbody>
+                        {% for req in req_group.list %}
+                            <tr>
+                                <td>
+                                    <a href="{% url 'ietf.doc.views_doc.document_main' name=req.name %}">{{ req.name }}-{{ req.rev }}</a>
+                                </td>
+                                <td class="d-none d-sm-table-cell">{{ req.latest_revision_event.time|date:"Y-m-d" }}</td>
+                                <td>{{ req.title }}</td>
+                                <td>
+                                    {% for person in req.responsible %}
+                                        {% person_link person %}{% if not forloop.last %},{% endif %}
+                                    {% endfor %}
+                                </td>
+                                <td>
+                                    {% for person in req.editors %}
+                                        {% person_link person %}{% if not forloop.last %},{% endif %}
+                                    {% endfor %}
+                                </td>
+                            </tr>
+                        {% endfor %}
+                    </tbody>
+                </table>
+            {% endif %}
         {% endfor %}
     {% endif %}
 {% endblock %}

From 73968dca5f0ee2450080b585d6da162bdc870955 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 28 Aug 2024 14:17:36 -0500
Subject: [PATCH 043/707] fix: use rsab mailtrigger for To in ballot position
 email (#7868)

---
 ietf/doc/tests_ballot.py | 3 +++
 ietf/doc/views_ballot.py | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index d77e2ddc98..0c99ed281a 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -230,6 +230,9 @@ def test_cannot_edit_position_as_pre_ad(self):
         r = self.client.post(url, dict(position="discuss", discuss="Test discuss text"))
         self.assertEqual(r.status_code, 403)
         
+    # N.B. This test needs to be rewritten to exercise all types of ballots (iesg, irsg, rsab)
+    # and test against the output of the mailtriggers instead of looking for hardcoded values
+    # in the To and CC results. See #7864
     def test_send_ballot_comment(self):
         ad = Person.objects.get(user__username="ad")
         draft = WgDraftFactory(ad=ad,group__acronym='mars')
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 8d9ab0b740..2b7faac92b 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -323,6 +323,8 @@ def build_position_email(balloter, doc, pos):
 
     if doc.stream_id == "irtf":
         addrs = gather_address_lists('irsg_ballot_saved',doc=doc)
+    elif doc.stream_id == "editorial":
+        addrs = gather_address_lists('rsab_ballot_saved',doc=doc)
     else:
         addrs = gather_address_lists('iesg_ballot_saved',doc=doc)
 

From 17bd3124686c33c1089a179e32a2d57f4856a54a Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Thu, 29 Aug 2024 07:32:58 +1200
Subject: [PATCH 044/707] fix: Document type badges (#7760)

* fix: document type badge#7475

* chore: PR feedback (naming)

* fix: use type_id rather than str(type) for conditionals in templatetag

* fix: remove debugging CSS inline style dashed border

* fix: document type badge template tag passing context variables

* fix: context vars to document_type_badge

* fix: badge error logging

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/templatetags/document_type_badge.py  | 29 +++++++++++++++++++
 ietf/static/css/document_html.scss            |  5 ++++
 ietf/templates/doc/badge/doc-badge-draft.html | 16 ++++++++++
 ietf/templates/doc/badge/doc-badge-rfc.html   | 13 +++++++++
 ietf/templates/doc/document_html.html         | 10 ++-----
 ietf/templates/doc/document_info.html         | 19 ++----------
 6 files changed, 68 insertions(+), 24 deletions(-)
 create mode 100644 ietf/doc/templatetags/document_type_badge.py
 create mode 100644 ietf/templates/doc/badge/doc-badge-draft.html
 create mode 100644 ietf/templates/doc/badge/doc-badge-rfc.html

diff --git a/ietf/doc/templatetags/document_type_badge.py b/ietf/doc/templatetags/document_type_badge.py
new file mode 100644
index 0000000000..a82c606ff9
--- /dev/null
+++ b/ietf/doc/templatetags/document_type_badge.py
@@ -0,0 +1,29 @@
+# Copyright The IETF Trust 2015-2020, All Rights Reserved
+from django import template
+from django.conf import settings
+from django.template.loader import render_to_string
+from ietf.utils.log import log
+
+register = template.Library()
+
+
+@register.simple_tag
+def document_type_badge(doc, snapshot, submission, resurrected_by):
+    context = {"doc": doc, "snapshot": snapshot, "submission": submission, "resurrected_by": resurrected_by}
+    if doc.type_id == "rfc":
+        return render_to_string(
+            "doc/badge/doc-badge-rfc.html",
+            context,
+        )
+    elif doc.type_id == "draft":
+        return render_to_string(
+            "doc/badge/doc-badge-draft.html",
+            context,
+        )
+    else:
+        error_message = f"Unsupported document type {doc.type_id}."
+        if settings.SERVER_MODE != 'production':
+            raise ValueError(error_message)
+        else:
+            log(error_message)
+        return ""
diff --git a/ietf/static/css/document_html.scss b/ietf/static/css/document_html.scss
index 0b5a70f124..47ef8d64b4 100644
--- a/ietf/static/css/document_html.scss
+++ b/ietf/static/css/document_html.scss
@@ -320,6 +320,11 @@ tbody.meta tr {
     background-color: $danger;
 }
 
+.badge-generic {
+    color: white;
+    background-color: $danger;
+}
+
 #toc-nav {
     width: inherit;
     overscroll-behavior-y: none; // Prevent overscrolling from scrolling the main content
diff --git a/ietf/templates/doc/badge/doc-badge-draft.html b/ietf/templates/doc/badge/doc-badge-draft.html
new file mode 100644
index 0000000000..f7f66b6c5e
--- /dev/null
+++ b/ietf/templates/doc/badge/doc-badge-draft.html
@@ -0,0 +1,16 @@
+{% load origin %}
+{% load static %}
+{% load ietf_filters %}
+{% load person_filters %}
+{% origin %}
+{# Non-RFC #}
+
+{% if doc.became_rfc %} 
+    <div{% if document_html %} class="alert alert-warning small"{% endif %}>This is an older version of an Internet-Draft that was ultimately published as <a href="{% if document_html %}{% url 'ietf.doc.views_doc.document_html' name=doc.became_rfc.name %}{% else %}{% url 'ietf.doc.views_doc.document_main' name=doc.became_rfc.name %}{% endif %}">{{doc.became_rfc.name|prettystdname}}</a>.</div>
+{% elif snapshot and doc.rev != latest_rev  %}
+    <div{% if document_html %} class="alert alert-warning small p-2 mt-2"{% endif %}>This is an older version of an Internet-Draft whose latest revision state is "{{ doc.doc.get_state }}".</div>
+{% else %}
+    <span class="{% if doc.get_state_slug == 'active' %}text-success{% elif doc.get_state_slug == 'expired' or doc.get_state_slug == 'repl' %}text-danger{% endif %}">{% if snapshot and doc.rev == latest_rev %}{{ doc.doc.get_state }}{% else %}{{ doc.get_state }}{% endif %} Internet-Draft</span>
+    {% if submission %}({{ submission|safe }}){% endif %}
+    {% if resurrected_by %}- resurrect requested by {{ resurrected_by }}{% endif %}
+{% endif %}
\ No newline at end of file
diff --git a/ietf/templates/doc/badge/doc-badge-rfc.html b/ietf/templates/doc/badge/doc-badge-rfc.html
new file mode 100644
index 0000000000..780f14a54f
--- /dev/null
+++ b/ietf/templates/doc/badge/doc-badge-rfc.html
@@ -0,0 +1,13 @@
+{% load origin %}
+{% load static %}
+{% load ietf_filters %}
+{% load person_filters %}
+{% origin %}
+
+<span class="text-success">RFC
+    {% if not document_html %}
+    - {{ doc.std_level }}
+    {% else %}
+        <span class="badge rounded-pill badge-{% if not snapshot %}{{ doc|std_level_to_label_format }}{% else %}generic{% endif %}">{{ doc.std_level }}</span>
+    {% endif %}
+</span>
diff --git a/ietf/templates/doc/document_html.html b/ietf/templates/doc/document_html.html
index 3eabe2ebb7..a85b1f5310 100644
--- a/ietf/templates/doc/document_html.html
+++ b/ietf/templates/doc/document_html.html
@@ -4,6 +4,7 @@
 {% load origin %}
 {% load static %}
 {% load ietf_filters textfilters %}
+{% load document_type_badge %}
 {% load django_vite %}
 {% origin %}
 <html data-bs-theme="auto" lang="en">
@@ -107,6 +108,7 @@
                     {{ doc.name }}-{{ doc.rev }}
                 {% endif %}
                 <br class="d-sm-none">
+
                 <span class="ms-sm-3 badge rounded-pill badge-{% if not snapshot %}{{ doc|std_level_to_label_format }}{% else %}draft{% endif %}">
                     {% if not snapshot %}
                         {{ doc.std_level }}
@@ -185,13 +187,7 @@
                                     {{ doc.name }}-{{ doc.rev }}
                                 {% endif %}
                                 <br>
-                                <span class="badge rounded-pill badge-{% if not snapshot %}{{ doc|std_level_to_label_format }}{% else %}draft{% endif %}">
-                                    {% if not snapshot %}
-                                        {{ doc.std_level }}
-                                    {% else %}
-                                        Internet-Draft
-                                    {% endif %}
-                                </span>
+                                {% document_type_badge doc snapshot submission resurrected_by %}
                             </p>
                         </div>
                         {% if request.COOKIES.htmlconf and request.COOKIES.htmlconf != 'html' and html %}
diff --git a/ietf/templates/doc/document_info.html b/ietf/templates/doc/document_info.html
index 97cd49cf7e..71050f9d41 100644
--- a/ietf/templates/doc/document_info.html
+++ b/ietf/templates/doc/document_info.html
@@ -3,6 +3,7 @@
 {% load static %}
 {% load ietf_filters %}
 {% load person_filters %}
+{% load document_type_badge %}
 {% origin %}
 
 <tbody class="meta align-top {% if not document_html %} border-top{% endif %}">
@@ -11,14 +12,8 @@
         <th scope="row">{% if document_html %}Document type{% else %}Type{% endif %}</th>
         <td class="edit"></td>
         <td>
+            {% document_type_badge doc snapshot submission resurrected_by %}
             {% if doc.type_id == "rfc" %}
-                <span class="text-success">RFC
-                    {% if not document_html %}
-                    - {{ doc.std_level }}
-                    {% else %}
-                        <span class="badge rounded-pill badge-{% if not snapshot %}{{ doc|std_level_to_label_format }}{% else %}draft{% endif %}">{{ doc.std_level }}</span>
-                    {% endif %}
-                </span>
                 {% if doc.pub_date %}
                     {% if document_html %}<br>{% else %}({% endif %}{{ doc.pub_date|date:"F Y" }}{% if not document_html %}){% endif %}
                 {% else %}
@@ -59,16 +54,6 @@
                         {% if submission %}({{ submission|safe }}){% endif %}
                     </div>
                 {% endif %}
-            {% else %}
-                {% if doc.became_rfc %} 
-                   <div{% if document_html %} class="alert alert-warning small"{% endif %}>This is an older version of an Internet-Draft that was ultimately published as <a href="{% if document_html %}{% url 'ietf.doc.views_doc.document_html' name=doc.became_rfc.name %}{% else %}{% url 'ietf.doc.views_doc.document_main' name=doc.became_rfc.name %}{% endif %}">{{doc.became_rfc.name|prettystdname}}</a>.</div>
-                {% elif snapshot and doc.rev != latest_rev  %}
-                    <div{% if document_html %} class="alert alert-warning small p-2 mt-2"{% endif %}>This is an older version of an Internet-Draft whose latest revision state is "{{ doc.doc.get_state }}".</div>
-                 {% else %}
-                    <span class="{% if doc.get_state_slug == 'active' %}text-success{% elif doc.get_state_slug == 'expired' or doc.get_state_slug == 'repl' %}text-danger{% endif %}">{% if snapshot and doc.rev == latest_rev %}{{ doc.doc.get_state }}{% else %}{{ doc.get_state }}{% endif %} Internet-Draft</span>
-                    {% if submission %}({{ submission|safe }}){% endif %}
-                    {% if resurrected_by %}- resurrect requested by {{ resurrected_by }}{% endif %}
-                {% endif %}
             {% endif %}
             {% if doc.get_state_slug != "active" and doc.get_state_slug != "rfc" and doc.type_id != "rfc" %}
                 <div class="badge rounded-pill text-bg-warning{% if not document_html %} float-end{% endif %}">

From 23e5307d2e097ae32749f74788ad1eff59cd6042 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Wed, 4 Sep 2024 01:20:36 +1200
Subject: [PATCH 045/707] feat: Use meetecho-player.ietf.org for session
 recording (#7873)

---
 ietf/meeting/models.py                        | 15 ++++---
 ietf/meeting/tests_models.py                  | 44 +++++++++++++++++++
 ietf/settings.py                              |  2 +-
 .../meeting/interim_session_buttons.html      |  9 ++--
 4 files changed, 60 insertions(+), 10 deletions(-)

diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 693cb99dfd..3470679327 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1321,11 +1321,16 @@ def onsite_tool_url(self):
         return None
 
     def session_recording_url(self):
-        url = getattr(settings, "MEETECHO_SESSION_RECORDING_URL", "")
-        if self.meeting.type.slug == "ietf" and self.has_onsite_tool and url:
-            self.group.acronym_upper = self.group.acronym.upper()
-            return url.format(session=self)
-        return None
+        url_formatter = getattr(settings, "MEETECHO_SESSION_RECORDING_URL", "")
+        url = None
+        if url_formatter and self.video_stream_url:
+            if self.meeting.type.slug == "ietf" and self.has_onsite_tool:
+                session_label = f"IETF{self.meeting.number}-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+            else:
+                session_label = f"IETF-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+            url = url_formatter.format(session_label=session_label)
+
+        return url
 
 
 class SchedulingEvent(models.Model):
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index 0ccd462715..ff874100dc 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -146,3 +146,47 @@ def test_chat_room_name(self):
         self.assertEqual(session.chat_room_name(), 'plenary')
         session.chat_room = 'fnord'
         self.assertEqual(session.chat_room_name(), 'fnord')
+
+    def test_session_recording_url(self):
+        group_acronym = "foobar"
+        meeting_date = datetime.date.today()
+        meeting_number = 123
+
+        # IETF meeting
+        session = SessionFactory(
+            meeting__type_id='ietf',
+            meeting__date=meeting_date,
+            group__acronym=group_acronym,
+            meeting__number=meeting_number,
+        )
+        with override_settings():
+            if hasattr(settings, "MEETECHO_SESSION_RECORDING_URL"):
+                del settings.MEETECHO_SESSION_RECORDING_URL
+            self.assertIsNone(session.session_recording_url())
+
+            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com"
+            self.assertEqual(session.session_recording_url(), "http://player.example.com")
+
+            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
+            self.assertIn(f"IETF{meeting_number}-{group_acronym.upper()}", session.session_recording_url())
+            self.assertIn(f"{meeting_date.strftime('%Y%m%d')}", session.session_recording_url())
+            self.assertTrue(session.session_recording_url().startswith("http://player.example.com"))
+
+        # interim meeting
+        session = SessionFactory(
+            meeting__type_id='interim',
+            meeting__date=meeting_date,
+            group__acronym=group_acronym,
+        )
+        with override_settings():
+            if hasattr(settings, "MEETECHO_SESSION_RECORDING_URL"):
+                del settings.MEETECHO_SESSION_RECORDING_URL
+            self.assertIsNone(session.session_recording_url())
+
+            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com"
+            self.assertEqual(session.session_recording_url(), "http://player.example.com")
+
+            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
+            self.assertIn(f"IETF-{group_acronym.upper()}", session.session_recording_url())
+            self.assertIn(f"{meeting_date.strftime('%Y%m%d')}", session.session_recording_url())
+            self.assertTrue(session.session_recording_url().startswith("http://player.example.com"))
diff --git a/ietf/settings.py b/ietf/settings.py
index db53efe0a5..1bb7a122c3 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1174,7 +1174,7 @@ def skip_unreadable_post(record):
 MEETECHO_ONSITE_TOOL_URL = "https://meetings.conf.meetecho.com/onsite{session.meeting.number}/?session={session.pk}"
 MEETECHO_VIDEO_STREAM_URL = "https://meetings.conf.meetecho.com/ietf{session.meeting.number}/?session={session.pk}"
 MEETECHO_AUDIO_STREAM_URL = "https://mp3.conf.meetecho.com/ietf{session.meeting.number}/{session.pk}.m3u"
-MEETECHO_SESSION_RECORDING_URL = "https://www.meetecho.com/ietf{session.meeting.number}/recordings#{session.group.acronym_upper}"
+MEETECHO_SESSION_RECORDING_URL = "https://meetecho-player.ietf.org/playout/?session={session_label}"
 
 # Put the production SECRET_KEY in settings_local.py, and also any other
 # sensitive or site-specific changes.  DO NOT commit settings_local.py to svn.
diff --git a/ietf/templates/meeting/interim_session_buttons.html b/ietf/templates/meeting/interim_session_buttons.html
index a32f4345c9..23263b9859 100644
--- a/ietf/templates/meeting/interim_session_buttons.html
+++ b/ietf/templates/meeting/interim_session_buttons.html
@@ -146,17 +146,18 @@
                             {% endif %}
                         {% endwith %}
                     {% endfor %}
-                {% elif session.video_stream_url %}
+                {% elif show_empty  %}
+                    {# <i class="bi"></i> #}
+                {% endif %}
+                {% if session.session_recording_url %}
                     <a class="btn btn-outline-primary"
                        href="{{ session.session_recording_url }}"
                        aria-label="Meetecho session recording"
                        title="Meetecho session recording">
                         <i class="bi bi-file-slides"></i>
                     </a>
-                {% elif show_empty  %}
-                    {# <i class="bi"></i> #}
                 {% endif %}
             {% endwith %}
         {% endif %}
     </div>
-{% endwith %}
\ No newline at end of file
+{% endwith %}

From 061c89f3b559829d0d1e20ef6d81c33542906ff7 Mon Sep 17 00:00:00 2001
From: Seonghyeon Cho <seonghyeoncho96@gmail.com>
Date: Wed, 4 Sep 2024 00:46:34 +0900
Subject: [PATCH 046/707] fix: Missing button text for PostScript in RFC
 (#7889)

Resolves #7879

Signed-off-by: Seonghyeon Cho <seonghyeoncho96@gmail.com>
---
 ietf/doc/utils.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index a98b46cb50..74000e598b 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1046,6 +1046,8 @@ def build_file_urls(doc: Union[Document, DocHistory]):
 
         file_urls = []
         for t in found_types:
+            if t == "ps": # Postscript might have been submitted but should not be displayed in the list of URLs
+                continue
             label = "plain text" if t == "txt" else t
             file_urls.append((label, base + doc.name + "." + t))
 

From b6f8ede98a7c3f18210cc72907b7a5de2a68ef51 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 3 Sep 2024 19:24:26 -0300
Subject: [PATCH 047/707] feat: is_authenticated request logging + cleanup
 (#7893)

* chore: nginx log is s, not ms

* chore: log seconds from gunicorn too

* chore: drop X-Real-IP header / log

* style: Black

* style: single -> double quotes

* feat: add is-authenticated header

* feat: log is-authenticated header

* chore: update nginx-auth.conf to match
---
 ietf/middleware.py         | 46 ++++++++++++++++++++++++++++++--------
 ietf/settings.py           | 35 +++++++++++++++--------------
 ietf/utils/jsonlogger.py   |  4 ++--
 k8s/nginx-auth.conf        |  2 +-
 k8s/nginx-datatracker.conf |  2 +-
 k8s/nginx-logging.conf     |  2 +-
 6 files changed, 60 insertions(+), 31 deletions(-)

diff --git a/ietf/middleware.py b/ietf/middleware.py
index 48146abf5e..a4b7a0d24c 100644
--- a/ietf/middleware.py
+++ b/ietf/middleware.py
@@ -17,45 +17,61 @@ def sql_log_middleware(get_response):
     def sql_log(request):
         response = get_response(request)
         for q in connection.queries:
-            if re.match('(update|insert)', q['sql'], re.IGNORECASE):
-                log(q['sql'])
+            if re.match("(update|insert)", q["sql"], re.IGNORECASE):
+                log(q["sql"])
         return response
+
     return sql_log
 
+
 class SMTPExceptionMiddleware(object):
     def __init__(self, get_response):
         self.get_response = get_response
+
     def __call__(self, request):
         return self.get_response(request)
+
     def process_exception(self, request, exception):
         if isinstance(exception, smtplib.SMTPException):
             (extype, value, tb) = log_smtp_exception(exception)
-            return render(request, 'email_failed.html',
-                          {'exception': extype, 'args': value, 'traceback': "".join(tb)} )
+            return render(
+                request,
+                "email_failed.html",
+                {"exception": extype, "args": value, "traceback": "".join(tb)},
+            )
         return None
 
+
 class Utf8ExceptionMiddleware(object):
     def __init__(self, get_response):
         self.get_response = get_response
+
     def __call__(self, request):
         return self.get_response(request)
+
     def process_exception(self, request, exception):
         if isinstance(exception, OperationalError):
             extype, e, tb = exc_parts()
             if e.args[0] == 1366:
                 log("Database 4-byte utf8 exception: %s: %s" % (extype, e))
-                return render(request, 'utf8_4byte_failed.html',
-                              {'exception': extype, 'args': e.args, 'traceback': "".join(tb)} )
+                return render(
+                    request,
+                    "utf8_4byte_failed.html",
+                    {"exception": extype, "args": e.args, "traceback": "".join(tb)},
+                )
         return None
 
+
 def redirect_trailing_period_middleware(get_response):
     def redirect_trailing_period(request):
         response = get_response(request)
         if response.status_code == 404 and request.path.endswith("."):
             return HttpResponsePermanentRedirect(request.path.rstrip("."))
         return response
+
     return redirect_trailing_period
 
+
 def unicode_nfkc_normalization_middleware(get_response):
     def unicode_nfkc_normalization(request):
         """Do Unicode NFKC normalization to turn ligatures into individual characters.
@@ -65,9 +81,21 @@ def unicode_nfkc_normalization(request):
         There are probably other elements of a request which may need this normalization
         too, but let's put that in as it comes up, rather than guess ahead.
         """
-        request.META["PATH_INFO"] = unicodedata.normalize('NFKC', request.META["PATH_INFO"])
-        request.path_info = unicodedata.normalize('NFKC', request.path_info)
+        request.META["PATH_INFO"] = unicodedata.normalize(
+            "NFKC", request.META["PATH_INFO"]
+        )
+        request.path_info = unicodedata.normalize("NFKC", request.path_info)
         response = get_response(request)
         return response
+
     return unicode_nfkc_normalization
-        
+
+
+def is_authenticated_header_middleware(get_response):
+    """Middleware to add an is-authenticated header to the response"""
+    def add_header(request):
+        response = get_response(request)
+        response["X-Datatracker-Is-Authenticated"] = "yes" if request.user.is_authenticated else "no"
+        return response
+
+    return add_header
diff --git a/ietf/settings.py b/ietf/settings.py
index 1bb7a122c3..a1a7fee102 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -401,24 +401,25 @@ def skip_unreadable_post(record):
 
 
 MIDDLEWARE = [
-    'django.middleware.csrf.CsrfViewMiddleware',
-    'corsheaders.middleware.CorsMiddleware', # see docs on CORS_REPLACE_HTTPS_REFERER before using it
-    'django.middleware.common.CommonMiddleware',
-    'django.contrib.sessions.middleware.SessionMiddleware',
-    'django.contrib.auth.middleware.AuthenticationMiddleware',
-    'django.contrib.messages.middleware.MessageMiddleware',
-    'django.middleware.http.ConditionalGetMiddleware',
-    'simple_history.middleware.HistoryRequestMiddleware',
+    "django.middleware.csrf.CsrfViewMiddleware",
+    "corsheaders.middleware.CorsMiddleware", # see docs on CORS_REPLACE_HTTPS_REFERER before using it
+    "django.middleware.common.CommonMiddleware",
+    "django.contrib.sessions.middleware.SessionMiddleware",
+    "django.contrib.auth.middleware.AuthenticationMiddleware",
+    "django.contrib.messages.middleware.MessageMiddleware",
+    "django.middleware.http.ConditionalGetMiddleware",
+    "simple_history.middleware.HistoryRequestMiddleware",
     # comment in this to get logging of SQL insert and update statements:
-    #'ietf.middleware.sql_log_middleware',
-    'ietf.middleware.SMTPExceptionMiddleware',
-    'ietf.middleware.Utf8ExceptionMiddleware',
-    'ietf.middleware.redirect_trailing_period_middleware',
-    'django_referrer_policy.middleware.ReferrerPolicyMiddleware',
-    'django.middleware.clickjacking.XFrameOptionsMiddleware',
-    'django.middleware.security.SecurityMiddleware',
- #   'csp.middleware.CSPMiddleware',
-    'ietf.middleware.unicode_nfkc_normalization_middleware',
+    #"ietf.middleware.sql_log_middleware",
+    "ietf.middleware.SMTPExceptionMiddleware",
+    "ietf.middleware.Utf8ExceptionMiddleware",
+    "ietf.middleware.redirect_trailing_period_middleware",
+    "django_referrer_policy.middleware.ReferrerPolicyMiddleware",
+    "django.middleware.clickjacking.XFrameOptionsMiddleware",
+    "django.middleware.security.SecurityMiddleware",
+    #"csp.middleware.CSPMiddleware",
+    "ietf.middleware.unicode_nfkc_normalization_middleware",
+    "ietf.middleware.is_authenticated_header_middleware",
 ]
 
 ROOT_URLCONF = 'ietf.urls'
diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index 9c7949fd58..c383ba310f 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -23,12 +23,12 @@ def add_fields(self, log_record, record, message_dict):
         log_record.setdefault("referer", record.args["f"])
         log_record.setdefault("user_agent", record.args["a"])
         log_record.setdefault("len_bytes", record.args["B"])
-        log_record.setdefault("duration_ms", record.args["M"])
+        log_record.setdefault("duration_s", record.args["L"])  # decimal seconds
         log_record.setdefault("host", record.args["{host}i"])
         log_record.setdefault("x_request_start", record.args["{x-request-start}i"])
-        log_record.setdefault("x_real_ip", record.args["{x-real-ip}i"])
         log_record.setdefault("x_forwarded_for", record.args["{x-forwarded-for}i"])
         log_record.setdefault("x_forwarded_proto", record.args["{x-forwarded-proto}i"])
         log_record.setdefault("cf_connecting_ip", record.args["{cf-connecting-ip}i"])
         log_record.setdefault("cf_connecting_ipv6", record.args["{cf-connecting-ipv6}i"])
         log_record.setdefault("cf_ray", record.args["{cf-ray}i"])
+        log_record.setdefault("is_authenticated", record.args["{x-datatracker-is-authenticated}i"])
diff --git a/k8s/nginx-auth.conf b/k8s/nginx-auth.conf
index a38b8f50c7..95aa838064 100644
--- a/k8s/nginx-auth.conf
+++ b/k8s/nginx-auth.conf
@@ -32,7 +32,7 @@ server {
         proxy_set_header Connection close;
         proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
-        proxy_set_header X-Real-IP $${keepempty}remote_addr;
+        proxy_hide_header X-Datatracker-Is-Authenticated; # hide this from the outside world
         proxy_pass http://localhost:8000;
         # Set timeouts longer than Cloudflare proxy limits
         proxy_connect_timeout 60;  # nginx default (Cf = 15)
diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index 7c0dc85fd0..882d7563c2 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -21,7 +21,7 @@ server {
         proxy_set_header Connection close;
         proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
-        proxy_set_header X-Real-IP $${keepempty}remote_addr;
+        proxy_hide_header X-Datatracker-Is-Authenticated; # hide this from the outside world
         proxy_pass http://localhost:8000;
         # Set timeouts longer than Cloudflare proxy limits
         proxy_connect_timeout 60;  # nginx default (Cf = 15)
diff --git a/k8s/nginx-logging.conf b/k8s/nginx-logging.conf
index 0938b0530e..3c4ade4614 100644
--- a/k8s/nginx-logging.conf
+++ b/k8s/nginx-logging.conf
@@ -9,7 +9,7 @@ log_format  ietfjson  escape=json
     '"method":"$${keepempty}request_method",'
     '"status":"$${keepempty}status",'
     '"len_bytes":"$${keepempty}body_bytes_sent",'
-    '"duration_ms":"$${keepempty}request_time",'
+    '"duration_s":"$${keepempty}request_time",'
     '"referer":"$${keepempty}http_referer",'
     '"user_agent":"$${keepempty}http_user_agent",'
     '"x_forwarded_for":"$${keepempty}http_x_forwarded_for",'

From 36847428d5991c75cbc96799f68ff327af7b89f8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 4 Sep 2024 17:39:03 -0300
Subject: [PATCH 048/707] fix: label > 26 sessions per group (#7599)

* fix: label > 26 sessions correctly

* test: test new helper

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/meeting/models.py       | 21 ++++++++++++++++-----
 ietf/meeting/tests_models.py |  9 +++++++++
 2 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 3470679327..01b695bcea 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1205,19 +1205,30 @@ def special_request_token(self):
         else:
             return ""
 
+    @staticmethod
+    def _alpha_str(n: int):
+        """Convert integer to string of a-z characters (a, b, c, ..., aa, ab, ...)"""
+        chars = []
+        while True:
+            chars.append(string.ascii_lowercase[n % 26])
+            n //= 26
+            # for 2nd letter and beyond, 0 means end the string
+            if n == 0:
+                break
+            # beyond the first letter, no need to represent a 0, so decrement
+            n -= 1
+        return "".join(chars[::-1])
+
     def docname_token(self):
         sess_mtg = Session.objects.filter(meeting=self.meeting, group=self.group).order_by('pk')
         index = list(sess_mtg).index(self)
-        return 'sess%s' % (string.ascii_lowercase[index])
+        return f"sess{self._alpha_str(index)}"
 
     def docname_token_only_for_multiple(self):
         sess_mtg = Session.objects.filter(meeting=self.meeting, group=self.group).order_by('pk')
         if len(list(sess_mtg)) > 1:
             index = list(sess_mtg).index(self)
-            if index < 26:
-                token = 'sess%s' % (string.ascii_lowercase[index])
-            else:
-                token = 'sess%s%s' % (string.ascii_lowercase[index//26],string.ascii_lowercase[index%26])
+            token = f"sess{self._alpha_str(index)}"
             return token
         return None
         
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index ff874100dc..0a089ee9e8 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -10,6 +10,7 @@
 
 from ietf.group.factories import GroupFactory, GroupHistoryFactory
 from ietf.meeting.factories import MeetingFactory, SessionFactory, AttendedFactory, SessionPresentationFactory
+from ietf.meeting.models import Session
 from ietf.stats.factories import MeetingRegistrationFactory
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today, datetime_today
@@ -147,6 +148,14 @@ def test_chat_room_name(self):
         session.chat_room = 'fnord'
         self.assertEqual(session.chat_room_name(), 'fnord')
 
+    def test_alpha_str(self):
+        self.assertEqual(Session._alpha_str(0), "a")
+        self.assertEqual(Session._alpha_str(1), "b")
+        self.assertEqual(Session._alpha_str(25), "z")
+        self.assertEqual(Session._alpha_str(26), "aa")
+        self.assertEqual(Session._alpha_str(27 * 26 - 1), "zz")
+        self.assertEqual(Session._alpha_str(27 * 26), "aaa")
+
     def test_session_recording_url(self):
         group_acronym = "foobar"
         meeting_date = datetime.date.today()

From 2a6fd3e1969f52c65089c024e1188c8a07bcb4a3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 5 Sep 2024 12:39:35 -0300
Subject: [PATCH 049/707] ci: remove auth on port 8080 (#7903)

It's now on port 80
---
 k8s/auth.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index c35cdc8ac2..c92ed05163 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -144,9 +144,5 @@ spec:
       targetPort: http
       protocol: TCP
       name: http
-    - port: 8080
-      targetPort: http
-      protocol: TCP
-      name: http-old
   selector:
     app: auth

From cb25831a2a33a97d0b5cf0ee2a0ba29af51c887b Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 5 Sep 2024 10:43:43 -0500
Subject: [PATCH 050/707] feat: total ids, pre-pubreq counts and pages left to
 ballot on on the AD dashboard (#7813)

* feat: Total ids on IESG dashboard

* IESG I-D code comments

* Using Robert's query forIESG dashboard total_ids

* Hiding columns in later IESG Dashboard tables

* Changing IESG dashboard var name to match column table

* Updating IESG pre_pubreqquery

* IESG dashboard prepub req safeParser and graphs

* IESG dashboard fixing Playwright API usage

* IESG dashboard fixing Playwright API usage (2)

* Updating .gitignore for /geckodriver.log

* IESG ad test title

* feat: pages left to ballot on [WIP]

* Adding geckodriver.log to gitignore

* [WIP] pages left to ballot on

* integrating pages left to ballot on WIP

* Tests for ad pages remaining

* Setting states to test ballot items

* refactor ad_pages_left_to_ballot_on count logic

* WIP tests for pages left to ballot on

* chore: remove whitespace change

* fix: look into the BallotPositionDocEventObject

* chore: remove prints

* fix: restructure test

* style: fix js code styling

* fix: only show graph for ADs/Secretariat

---------

Co-authored-by: Matthew Holloway <Matthew Holloway>
Co-authored-by: holloway <matthew@holloway.co.nz>
Co-authored-by: Nicolas Giard <github@ngpixel.com>
Co-authored-by: Matthew Holloway <matthew@staff.ietf.org>
---
 .gitignore                                |   1 +
 ietf/doc/views_search.py                  |  23 +++
 ietf/iesg/tests.py                        |  68 +++++-
 ietf/iesg/utils.py                        |  22 +-
 ietf/iesg/views.py                        |   8 +-
 ietf/templates/doc/ad_list.html           | 241 +++++++++++++++-------
 ietf/templates/iesg/agenda_documents.html |   7 +-
 playwright/tests-legacy/docs/ad.spec.js   |  26 +++
 8 files changed, 307 insertions(+), 89 deletions(-)
 create mode 100644 playwright/tests-legacy/docs/ad.spec.js

diff --git a/.gitignore b/.gitignore
index c25e6b5bfe..84bc800e3b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,6 +17,7 @@ datatracker.sublime-workspace
 /docker/docker-compose.extend-custom.yml
 /env
 /ghostdriver.log
+/geckodriver.log
 /htmlcov
 /ietf/static/dist-neue
 /latest-coverage.json
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 2ef4ee83e6..528fb05a22 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -485,6 +485,29 @@ def _state_to_doc_type(state):
         )
         ad.buckets = copy.deepcopy(bucket_template)
 
+        # https://github.com/ietf-tools/datatracker/issues/4577
+        docs_via_group_ad = Document.objects.exclude(
+            group__acronym="none"
+        ).filter(
+            group__role__name="ad",
+            group__role__person=ad
+        ).filter(
+            states__type="draft-stream-ietf",
+            states__slug__in=["wg-doc","wg-lc","waiting-for-implementation","chair-w","writeupw"]
+        )
+
+        doc_for_ad = Document.objects.filter(ad=ad)
+
+        ad.pre_pubreq = (docs_via_group_ad | doc_for_ad).filter(
+            type="draft"
+        ).filter(
+            states__type="draft",
+            states__slug="active"
+        ).filter(
+            states__type="draft-iesg",
+            states__slug="idexists"
+        ).distinct().count()
+
         for doc in Document.objects.exclude(type_id="rfc").filter(ad=ad):
             dt = doc_type(doc)
             state = doc_state(doc)
diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 4579316f22..8438cb44dd 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -18,7 +18,7 @@
 
 from ietf.doc.models import DocEvent, BallotPositionDocEvent, TelechatDocEvent
 from ietf.doc.models import Document, State, RelatedDocument
-from ietf.doc.factories import WgDraftFactory, IndividualDraftFactory, ConflictReviewFactory, BaseDocumentFactory, CharterFactory, WgRfcFactory, IndividualRfcFactory
+from ietf.doc.factories import BallotDocEventFactory, BallotPositionDocEventFactory, TelechatDocEventFactory, WgDraftFactory, IndividualDraftFactory, ConflictReviewFactory, BaseDocumentFactory, CharterFactory, WgRfcFactory, IndividualRfcFactory
 from ietf.doc.utils import create_ballot_if_not_open
 from ietf.group.factories import RoleFactory, GroupFactory, DatedGroupMilestoneFactory, DatelessGroupMilestoneFactory
 from ietf.group.models import Group, GroupMilestone, Role
@@ -30,7 +30,6 @@
 from ietf.iesg.factories import IESGMgmtItemFactory, TelechatAgendaContentFactory
 from ietf.utils.timezone import date_today, DEADLINE_TZINFO
 
-
 class IESGTests(TestCase):
     def test_feed(self):
         draft = WgDraftFactory(states=[('draft','active'),('draft-iesg','iesg-eva')],ad=Person.objects.get(user__username='ad'))
@@ -509,12 +508,13 @@ def test_agenda_documents_txt(self):
     def test_agenda_documents(self):
         url = urlreverse("ietf.iesg.views.agenda_documents")
         r = self.client.get(url)
+
         self.assertEqual(r.status_code, 200)
 
         for k, d in self.telechat_docs.items():
             self.assertContains(r, d.name, msg_prefix="%s '%s' not in response" % (k, d.name, ))
-            self.assertContains(r, d.title, msg_prefix="%s '%s' title not in response" % (k, d.title, ))
-
+            self.assertContains(r, d.title, msg_prefix="%s '%s' not in response" % (k, d.title, ))
+    
     def test_past_documents(self):
         url = urlreverse("ietf.iesg.views.past_documents")
         # We haven't put any documents on past telechats, so this should be empty
@@ -589,6 +589,66 @@ def test_admin_change(self):
         draft = Document.objects.get(name="draft-ietf-mars-test")
         self.assertEqual(draft.telechat_date(),today)
 
+class IESGAgendaTelechatPagesTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        # make_immutable_test_data made a set of future telechats - only need one
+        # We'll take the "next" one
+        self.telechat_date = get_agenda_date()
+        # make_immutable_test_data made and area with only one ad - give it another
+        ad = Person.objects.get(user__username="ad")
+        adrole = Role.objects.get(person=ad, name="ad")
+        ad2 = RoleFactory(group=adrole.group, name_id="ad").person
+        self.ads=[ad,ad2]
+        
+        # Make some drafts
+        docs = [
+            WgDraftFactory(pages=2, states=[('draft-iesg','iesg-eva'),]),
+            IndividualDraftFactory(pages=20, states=[('draft-iesg','iesg-eva'),]),
+            WgDraftFactory(pages=200, states=[('draft-iesg','iesg-eva'),]),
+        ]
+        # Put them on the telechat
+        for doc in docs:
+            TelechatDocEventFactory(doc=doc, telechat_date=self.telechat_date)
+        # Give them ballots
+        ballots = [BallotDocEventFactory(doc=doc) for doc in docs]
+
+        # Give the "ad" Area-Director a discuss on one 
+        BallotPositionDocEventFactory(balloter=ad, doc=docs[0], pos_id="discuss", ballot=ballots[0])
+        # and a "norecord" position on another
+        BallotPositionDocEventFactory(balloter=ad, doc=docs[1], pos_id="norecord", ballot=ballots[1])
+        # Now "ad" should have 220 pages left to ballot on.
+        # Every other ad should have 222 pages left to ballot on.
+
+    def test_ad_pages_left_to_ballot_on(self):
+        url = urlreverse("ietf.iesg.views.agenda_documents")
+
+        # A non-AD user won't get "pages left"
+        response = self.client.get(url)
+        telechat = response.context["telechats"][0]
+        self.assertEqual(telechat["date"], self.telechat_date)
+        self.assertEqual(telechat["ad_pages_left_to_ballot_on"],0)
+        self.assertNotContains(response,"pages left to ballot on")
+
+        username=self.ads[0].user.username
+        self.assertTrue(self.client.login(username=username, password=f"{username}+password"))
+
+        response = self.client.get(url)
+        telechat = response.context["telechats"][0]
+        self.assertEqual(telechat["ad_pages_left_to_ballot_on"],220)
+        self.assertContains(response,"220 pages left to ballot on")
+
+        self.client.logout()
+        username=self.ads[1].user.username
+        self.assertTrue(self.client.login(username=username, password=f"{username}+password"))
+
+        response = self.client.get(url)
+        telechat = response.context["telechats"][0]
+        self.assertEqual(telechat["ad_pages_left_to_ballot_on"],222)
+
+
+
+
 class RescheduleOnAgendaTests(TestCase):
     def test_reschedule(self):
         draft = WgDraftFactory()
diff --git a/ietf/iesg/utils.py b/ietf/iesg/utils.py
index 3f4883798f..a56fa72cee 100644
--- a/ietf/iesg/utils.py
+++ b/ietf/iesg/utils.py
@@ -7,11 +7,11 @@
 from ietf.iesg.agenda import get_doc_section
 
 
-TelechatPageCount = namedtuple('TelechatPageCount',['for_approval','for_action','related'])
+TelechatPageCount = namedtuple('TelechatPageCount',['for_approval','for_action','related','ad_pages_left_to_ballot_on'])
 
-def telechat_page_count(date=None, docs=None):
+def telechat_page_count(date=None, docs=None, ad=None):
     if not date and not docs:
-        return TelechatPageCount(0, 0, 0)
+        return TelechatPageCount(0, 0, 0, 0)
 
     if not docs:
         candidates = Document.objects.filter(docevent__telechatdocevent__telechat_date=date).distinct() 
@@ -24,7 +24,18 @@ def telechat_page_count(date=None, docs=None):
 
     drafts = [d for d in for_approval if d.type_id == 'draft']
 
-    pages_for_approval = sum([d.pages or 0 for d in drafts])
+    ad_pages_left_to_ballot_on = 0
+    pages_for_approval = 0
+    
+    for draft in drafts:
+        pages_for_approval += draft.pages or 0
+        if ad:
+            ballot = draft.active_ballot()
+            if ballot:
+                positions = ballot.active_balloter_positions()
+                ad_position = positions[ad]
+                if ad_position is None or ad_position.pos_id == "norecord":
+                    ad_pages_left_to_ballot_on += draft.pages or 0
 
     pages_for_action = 0
     for d in for_action:
@@ -53,4 +64,5 @@ def telechat_page_count(date=None, docs=None):
     
     return TelechatPageCount(for_approval=pages_for_approval,
                              for_action=pages_for_action,
-                             related=related_pages)
+                             related=related_pages,
+                             ad_pages_left_to_ballot_on=ad_pages_left_to_ballot_on)
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index a92d617ac5..df02754f2e 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -360,6 +360,8 @@ def handle_reschedule_form(request, doc, dates, status):
     return form
 
 def agenda_documents(request):
+    ad = request.user.person if has_role(request.user, "Area Director") else None
+
     dates = list(TelechatDate.objects.active().order_by('date').values_list("date", flat=True)[:4])
 
     docs_by_date = dict((d, []) for d in dates)
@@ -389,11 +391,13 @@ def agenda_documents(request):
         # the search_result_row view to display them (which expects them)
         fill_in_document_table_attributes(docs_by_date[date], have_telechat_date=True)
         fill_in_agenda_docs(date, sections, docs_by_date[date])
-        pages = telechat_page_count(docs=docs_by_date[date]).for_approval
-
+        page_count = telechat_page_count(docs=docs_by_date[date], ad=ad)
+        pages = page_count.for_approval
+        
         telechats.append({
                 "date":     date,
                 "pages":    pages,
+                "ad_pages_left_to_ballot_on": page_count.ad_pages_left_to_ballot_on,
                 "sections": sorted((num, section) for num, section in sections.items()
                                    if "2" <= num < "5")
                 })
diff --git a/ietf/templates/doc/ad_list.html b/ietf/templates/doc/ad_list.html
index cfc8830e50..a73264c0f3 100644
--- a/ietf/templates/doc/ad_list.html
+++ b/ietf/templates/doc/ad_list.html
@@ -35,9 +35,12 @@ <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
             <thead class="wrap-anywhere">
                 <tr>
                     <th scope="col" data-sort="name">Area Director</th>
+                    {% if dt.type.1 == "Internet-Draft" %}
+                        <th scope="col" data-sort="pre-pubreq">Pre pubreq</th>
+                    {% endif %}                    
                     {% for state, state_name in dt.states %}
-                        <th scope="col" class="col-1" title=""
-                            data-sort="{{ state }}-num">
+                        <th scope="col" class="col-1" data-sort="{{ state }}-num"
+                        >
                             <a href="{% url 'ietf.doc.views_help.state_help' type='draft-iesg' %}#{{ state }}">
                                 {{ state_name|split:'/'|join:'/<wbr>' }}
                             </a>
@@ -51,6 +54,17 @@ <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
                         <td>
                             <a href="{{ ad.dashboard }}">{{ ad.name }}</a>
                         </td>
+                        {% if dt.type.1 == "Internet-Draft" %}
+                            <td
+                                class="col-1 align-bottom"
+                                data-sum="pre-pubreq"
+                                {% if user|has_role:"Area Director,Secretariat" %}
+                                    data-series-graph
+                                {% endif %}
+                            >
+                                {{ ad.pre_pubreq }}
+                            </td>
+                        {% endif %}            
                         {% for state, state_name in dt.states %}
                         <td class="col-1 align-bottom"
                             id="{{ dt.type.0 }}-{{ ad|slugify }}-{{ state }}">
@@ -63,6 +77,16 @@ <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
             <tfoot class="table-group-divider">
                 <tr>
                     <th scope="row">Sum</th>
+                    {% if dt.type.1 == "Internet-Draft" %}
+                        <td class="align-bottom">
+                            <div
+                                data-sum-result="pre-pubreq"
+                                {% if user|has_role:"Area Director,Secretariat" %}
+                                    data-series-graph
+                                {% endif %}
+                            ></div>
+                        </td>
+                    {% endif %}
                     {% for state, state_name in dt.states %}
                         <td class="align-bottom">
                             <div id="chart-{{ dt.type.0 }}-sum-{{ state }}"></div>
@@ -87,37 +111,151 @@ <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
     </script>
     <script src="{% static "ietf/js/highcharts.js" %}"></script>
     {{ data|json_script:"data" }}
+
     <script>
-        const data = JSON.parse(document.getElementById("data").textContent);
+        function highchartsConfigFactory({ element, ymax, series }){
+            return {
+                title: { text: undefined },
+                chart: {
+                    type: "line",
+                    animation: false,
+                    renderTo: element,
+                    panning: { enabled: false },
+                    spacing: [4, 0, 5, 0],
+                    height: "45%"
+                },
+                scrollbar: { enabled: false },
+                tooltip: { enabled: false },
+                navigator: { enabled: false },
+                exporting: { enabled: false },
+                legend: { enabled: false },
+                credits: { enabled: false },
+                xAxis: {
+                    title: { text: undefined},
+                    labels: { enabled: false },
+                    zoomEnabled: false,
+                    tickLength: 0
+                },
+                yAxis: {
+                    title: { text: undefined},
+                    zoomEnabled: false,
+                    tickLength: 0,
+                    labels: { x: -3 },
+                    min: 0,
+                    max: ymax,
+                    tickInterval: ymax
+                },
+                plotOptions: {
+                    series: {
+                        animation: false,
+                        dataLabels: {
+                            enabled: true,
+                            inside: true,
+                            padding: 0,
+                            formatter: function() {
+                                // only label the last
+                                // (= current-day) point in
+                                // the curve with today's
+                                // value
+                                if (this.point.index + 1 ==
+                                    this.series.points.length) {
+                                    return this.y
+                                }
+                                return undefined
+                            }
+                        }
+                    }
+                },
+                series: [{
+                    name: undefined,
+                    data: series,
+                    enableMouseTracking: false
+                }]
+            }
+        }
+    </script>
+
+    <script>
+        const GRAPH_BUFFER = 2;
+
+        function safeParseFloat(text) {
+            const trimNumber = text.trim()
+            if(!trimNumber.match(/^[0-9.]+$/)) {
+                console.warn(`Unable to parse "${trimNumber}" as a number.`)
+                return Number.NaN
+            }
+            return parseFloat(text)
+        }
+
+        Array.from(document.querySelectorAll("table"))
+            .filter(table => Boolean(table.querySelector("[data-sum]")))
+            .forEach(table => {
+                const sums = Array.from(table.querySelectorAll("[data-sum]")).reduce((
+                    sumsAccumulator,
+                    cell
+                ) => {                    
+                    const key = cell.dataset.sum
+                    const value = safeParseFloat(cell.textContent)
+                    if(key && !isNaN(value)) {
+                        sumsAccumulator[key] = (sumsAccumulator[key] || 0) + (value || 0)
+                    }
+                    return sumsAccumulator
+                }, {})
+
+                Array.from(table.querySelectorAll('[data-sum-result]')).forEach(result => {
+                    const key = result.dataset.sumResult
+                    const value = sums[key]
+
+                    if(value) {
+                        result.innerText = value
+                    }
+                })
+
+                Array.from(table.querySelectorAll('[data-series-graph]')).forEach(element => {
+                    const endValue = safeParseFloat(element.innerText)
+                    if(isNaN(endValue)) throw Error("Can't render Highcharts chart with non-numerical " + element.innerText)
+
+                    const ymax = Math.max(1, endValue + GRAPH_BUFFER)
+
+                    Highcharts.chart(
+                        highchartsConfigFactory({
+                            element,
+                            ymax,
+                            series: [endValue]
+                        })
+                    )
+                })
+            })
+    </script>
+    <script>
+        const data = JSON.parse(document.getElementById("data").textContent)
 
         Object.entries(data).forEach(([dt, ads]) => {
-            max = {};
+            max = {}
             Object.entries(ads).forEach(([ad, states]) => {
                 Object.entries(states).forEach(([state, buckets]) => {
-                    buckets.series = buckets.map((x) => x.length);
+                    buckets.series = buckets.map((x) => x.length)
                     if (ad != "sum") {
-                        max[state] = Math.max(...buckets.series,
-                                              max[state] ? max[state] : 0);
+                        max[state] = Math.max(...buckets.series, max[state] ? max[state] : 0)
                     }
-                });
-            });
+                })
+            })
 
             Object.entries(ads).forEach(([ad, states]) => {
                 Object.entries(states).forEach(([state, buckets]) => {
-                    const cell = `chart-${dt}-${ad}-${state}`;
+                    const cell = `chart-${dt}-${ad}-${state}`
 
                     // if there is only a single datapoint in the
                     // bucket, display it without a graph
                     if (buckets.series.length == 1) {
-                        document.getElementById(cell).innerHTML =
-                            buckets.series[0];
-                        return;
+                        document.getElementById(cell).innerHTML = buckets.series[0]
+                        return
                     }
 
                     // if a bucket has all zeroes, fake a Highcharts
                     // plot with HTML, to reduce the number of plot
                     // objects on the page
-                    if (buckets.series.every((x) => x == 0)) {
+                    if (buckets.series.every((x) => x === 0)) {
                         // document.getElementById(cell).innerHTML = `
                         //     <div class="position-relative">
                         //         <div class="position-absolute bottom-0 start-0">
@@ -128,71 +266,20 @@ <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
                         //         </div>
                         //     </div>
                         // `;
-                        return;
+                        return
                     }
 
                     // else actually create a graph
-                    const ymax = Math.max(1, ad != "sum" ? max[state] : Math.max(...buckets.series));
-                    Highcharts.chart({
-                        title: { text: undefined },
-                        chart: {
-                            type: "line",
-                            animation: false,
-                            renderTo: cell,
-                            panning: { enabled: false },
-                            spacing: [4, 0, 5, 0],
-                            height: "45%",
-                        },
-                        scrollbar: { enabled: false },
-                        tooltip: { enabled: false },
-                        navigator: { enabled: false },
-                        exporting: { enabled: false },
-                        legend: { enabled: false },
-                        credits: { enabled: false },
-                        xAxis: {
-                            title: { text: undefined},
-                            labels: { enabled: false },
-                            zoomEnabled: false,
-                            tickLength: 0,
-                        },
-                        yAxis: {
-                            title: { text: undefined},
-                            zoomEnabled: false,
-                            tickLength: 0,
-                            labels: { x: -3 },
-                            min: 0,
-                            max: ymax,
-                            tickInterval: ymax,
-                        },
-                        plotOptions: {
-                            series: {
-                                animation: false,
-                                dataLabels: {
-                                    enabled: true,
-                                    inside: true,
-                                    padding: 0,
-                                    formatter: function() {
-                                        // only label the last
-                                        // (= current-day) point in
-                                        // the curve with today's
-                                        // value
-                                        if (this.point.index + 1 ==
-                                            this.series.points.length) {
-                                            return this.y;
-                                        }
-                                        return undefined;
-                                    }
-                                }
-                            }
-                        },
-                        series: [{
-                            name: undefined,
-                            data: buckets.series,
-                            enableMouseTracking: false,
-                        }],
-                    });
-                });
-            });
-        });
+                    const ymax = Math.max(1, ad !== "sum" ? max[state] : Math.max(...buckets.series))
+                    Highcharts.chart(
+                        highchartsConfigFactory({
+                            element: cell,
+                            ymax,
+                            series: buckets.series
+                        })
+                    )
+                })
+            })
+        })
     </script>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/iesg/agenda_documents.html b/ietf/templates/iesg/agenda_documents.html
index 80dd9956fa..f732672df0 100644
--- a/ietf/templates/iesg/agenda_documents.html
+++ b/ietf/templates/iesg/agenda_documents.html
@@ -21,7 +21,12 @@ <h1>Documents on future IESG telechat agendas</h1>
             <h2>
                 IESG telechat {{ t.date }}
                 <br>
-                <small class="text-body-secondary">{{ t.pages }} page{{ t.pages|pluralize }}</small>
+                <small class="text-body-secondary">
+                    {{ t.pages }} page{{ t.pages|pluralize }}
+                    {% if t.ad_pages_left_to_ballot_on %}
+                        ({{ t.ad_pages_left_to_ballot_on }} pages left to ballot on)
+                    {% endif %}
+                </small>
             </h2>
             <div class="buttonlist">
                 <a class="btn btn-primary" role="button" href="{% url 'ietf.iesg.views.agenda' %}">
diff --git a/playwright/tests-legacy/docs/ad.spec.js b/playwright/tests-legacy/docs/ad.spec.js
new file mode 100644
index 0000000000..80b8b27cda
--- /dev/null
+++ b/playwright/tests-legacy/docs/ad.spec.js
@@ -0,0 +1,26 @@
+const { test, expect } = require('@playwright/test')
+const viewports = require('../../helpers/viewports')
+
+// ====================================================================
+// IESG Dashboard
+// ====================================================================
+
+test.describe('/doc/ad/', () => {
+  test.beforeEach(async ({ page }) => {
+    await page.setViewportSize({
+      width: viewports.desktop[0],
+      height: viewports.desktop[1]
+    })
+
+    await page.goto('/doc/ad/')
+  })
+
+  test('Pre pubreq', async ({ page }) => {
+    const tablesLocator = page.locator('table')
+    const tablesCount = await tablesLocator.count()
+    expect(tablesCount).toBeGreaterThan(0)
+    const firstTable = tablesLocator.nth(0)
+    const theadTexts = await firstTable.locator('thead').allInnerTexts()
+    expect(theadTexts.join('')).toContain('Pre pubreq')
+  })
+})

From d8d52eedbf6508d219fbabbfb0e9f36bc6ef0160 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 9 Sep 2024 12:00:54 -0300
Subject: [PATCH 051/707] feat: email ingestor api test endpoint (#7915)

* feat: email ingestor api test endpoint

* ci: add ingestion test token for sandbox

* chore: fix comments
---
 dev/deploy-to-container/settings_local.py |  6 ++
 ietf/api/tests.py                         | 97 ++++++++++++++++++++++-
 ietf/api/urls.py                          |  2 +
 ietf/api/views.py                         | 41 ++++++++--
 4 files changed, 138 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index 25eacc3004..ae698e20b6 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -71,5 +71,11 @@
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
 
+# No real secrets here, these are public testing values _only_
+APP_API_TOKENS = {
+  "ietf.api.views.ingest_email_test": ["ingestion-test-token"]
+}
+
+
 # OIDC configuration
 SITE_URL = 'https://__HOSTNAME__'
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 20c3e2cb44..4f2a7f7d3c 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1022,7 +1022,9 @@ def test_role_holder_addresses(self):
             sorted(e.address for e in emails),
         )
 
-    @override_settings(APP_API_TOKENS={"ietf.api.views.ingest_email": "valid-token"})
+    @override_settings(
+        APP_API_TOKENS={"ietf.api.views.ingest_email": "valid-token", "ietf.api.views.ingest_email_test": "test-token"}
+    )
     @mock.patch("ietf.api.views.iana_ingest_review_email")
     @mock.patch("ietf.api.views.ipr_ingest_response_email")
     @mock.patch("ietf.api.views.nomcom_ingest_feedback_email")
@@ -1032,29 +1034,47 @@ def test_ingest_email(
         mocks = {mock_nomcom_ingest, mock_ipr_ingest, mock_iana_ingest}
         empty_outbox()        
         url = urlreverse("ietf.api.views.ingest_email")
+        test_mode_url = urlreverse("ietf.api.views.ingest_email_test")
 
         # test various bad calls
         r = self.client.get(url)
         self.assertEqual(r.status_code, 403)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.get(test_mode_url)
+        self.assertEqual(r.status_code, 403)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.post(url)
         self.assertEqual(r.status_code, 403)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(test_mode_url)
+        self.assertEqual(r.status_code, 403)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
         self.assertEqual(r.status_code, 405)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.get(test_mode_url, headers={"X-Api-Key": "test-token"})
+        self.assertEqual(r.status_code, 405)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.post(url, headers={"X-Api-Key": "valid-token"})
         self.assertEqual(r.status_code, 415)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(test_mode_url, headers={"X-Api-Key": "test-token"})
+        self.assertEqual(r.status_code, 415)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.post(
             url, content_type="application/json", headers={"X-Api-Key": "valid-token"}
         )
         self.assertEqual(r.status_code, 400)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(
+            test_mode_url, content_type="application/json", headers={"X-Api-Key": "test-token"}
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.post(
             url,
@@ -1064,6 +1084,14 @@ def test_ingest_email(
         )
         self.assertEqual(r.status_code, 400)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(
+            test_mode_url,
+            "this is not JSON!",
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(any(m.called for m in mocks))
 
         r = self.client.post(
             url,
@@ -1073,6 +1101,14 @@ def test_ingest_email(
         )
         self.assertEqual(r.status_code, 400)
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(
+            test_mode_url,
+            {"json": "yes", "valid_schema": False},
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(any(m.called for m in mocks))
 
         # bad destination
         message_b64 = base64.b64encode(b"This is a message").decode()
@@ -1086,6 +1122,16 @@ def test_ingest_email(
         self.assertEqual(r.headers["Content-Type"], "application/json")
         self.assertEqual(json.loads(r.content), {"result": "bad_dest"})
         self.assertFalse(any(m.called for m in mocks))
+        r = self.client.post(
+            test_mode_url,
+            {"dest": "not-a-destination", "message": message_b64},
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.headers["Content-Type"], "application/json")
+        self.assertEqual(json.loads(r.content), {"result": "bad_dest"})
+        self.assertFalse(any(m.called for m in mocks))
 
         # test that valid requests call handlers appropriately
         r = self.client.post(
@@ -1102,6 +1148,19 @@ def test_ingest_email(
         self.assertFalse(any(m.called for m in (mocks - {mock_iana_ingest})))
         mock_iana_ingest.reset_mock()
         
+        # the test mode endpoint should _not_ call the handler
+        r = self.client.post(
+            test_mode_url,
+            {"dest": "iana-review", "message": message_b64},
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.headers["Content-Type"], "application/json")
+        self.assertEqual(json.loads(r.content), {"result": "ok"})
+        self.assertFalse(any(m.called for m in mocks))
+        mock_iana_ingest.reset_mock()
+        
         r = self.client.post(
             url,
             {"dest": "ipr-response", "message": message_b64},
@@ -1116,6 +1175,19 @@ def test_ingest_email(
         self.assertFalse(any(m.called for m in (mocks - {mock_ipr_ingest})))
         mock_ipr_ingest.reset_mock()
 
+        # the test mode endpoint should _not_ call the handler
+        r = self.client.post(
+            test_mode_url,
+            {"dest": "ipr-response", "message": message_b64},
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.headers["Content-Type"], "application/json")
+        self.assertEqual(json.loads(r.content), {"result": "ok"})
+        self.assertFalse(any(m.called for m in mocks))
+        mock_ipr_ingest.reset_mock()
+
         # bad nomcom-feedback dest
         for bad_nomcom_dest in [
             "nomcom-feedback",  # no suffix
@@ -1133,6 +1205,16 @@ def test_ingest_email(
             self.assertEqual(r.headers["Content-Type"], "application/json")
             self.assertEqual(json.loads(r.content), {"result": "bad_dest"})
             self.assertFalse(any(m.called for m in mocks))
+            r = self.client.post(
+                test_mode_url,
+                {"dest": bad_nomcom_dest, "message": message_b64},
+                content_type="application/json",
+                headers={"X-Api-Key": "test-token"},
+            )
+            self.assertEqual(r.status_code, 200)
+            self.assertEqual(r.headers["Content-Type"], "application/json")
+            self.assertEqual(json.loads(r.content), {"result": "bad_dest"})
+            self.assertFalse(any(m.called for m in mocks))
 
         # good nomcom-feedback dest
         random_year = randrange(100000)
@@ -1150,6 +1232,19 @@ def test_ingest_email(
         self.assertFalse(any(m.called for m in (mocks - {mock_nomcom_ingest})))
         mock_nomcom_ingest.reset_mock()
 
+        # the test mode endpoint should _not_ call the handler
+        r = self.client.post(
+            test_mode_url,
+            {"dest": f"nomcom-feedback-{random_year}", "message": message_b64},
+            content_type="application/json",
+            headers={"X-Api-Key": "test-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.headers["Content-Type"], "application/json")
+        self.assertEqual(json.loads(r.content), {"result": "ok"})
+        self.assertFalse(any(m.called for m in mocks))
+        mock_nomcom_ingest.reset_mock()
+
         # test that exceptions lead to email being sent - assumes that iana-review handling is representative
         mock_iana_ingest.side_effect = EmailIngestionError("Error: don't send email")
         r = self.client.post(
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 3c0fb872c9..396b3813d6 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -27,6 +27,8 @@
     url(r'^doc/draft-aliases/$', api_views.draft_aliases),
     # email ingestor
     url(r'email/$', api_views.ingest_email),
+    # email ingestor
+    url(r'email/test/$', api_views.ingest_email_test),
     # GDPR: export of personal information for the logged-in person
     url(r'^export/personal-information/$', api_views.PersonalInformationExportView.as_view()),
     # Email alias information for groups
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 62857bff54..f8662f9a0e 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -614,14 +614,16 @@ def as_emailmessage(self) -> Optional[EmailMessage]:
         return msg
 
 
-@requires_api_token
-@csrf_exempt
-def ingest_email(request):
-    """Ingest incoming email
+def ingest_email_handler(request, test_mode=False):
+    """Ingest incoming email - handler
     
     Returns a 4xx or 5xx status code if the HTTP request was invalid or something went
     wrong while processing it. If the request was valid, returns a 200. This may or may
     not indicate that the message was accepted.
+    
+    If test_mode is true, actual processing of a valid message will be skipped. In this
+    mode, a valid request with a valid destination will be treated as accepted. The
+    "bad_dest" error may still be returned.
     """
 
     def _http_err(code, text):
@@ -657,15 +659,18 @@ def _api_response(result):
     try:
         if dest == "iana-review":
             valid_dest = True
-            iana_ingest_review_email(message)
+            if not test_mode:
+                iana_ingest_review_email(message)
         elif dest == "ipr-response":
             valid_dest = True
-            ipr_ingest_response_email(message)
+            if not test_mode:
+                ipr_ingest_response_email(message)
         elif dest.startswith("nomcom-feedback-"):
             maybe_year = dest[len("nomcom-feedback-"):]
             if maybe_year.isdecimal():
                 valid_dest = True
-                nomcom_ingest_feedback_email(message, int(maybe_year))
+                if not test_mode:
+                    nomcom_ingest_feedback_email(message, int(maybe_year))
     except EmailIngestionError as err:
         error_email = err.as_emailmessage()
         if error_email is not None:
@@ -677,3 +682,25 @@ def _api_response(result):
         return _api_response("bad_dest")
 
     return _api_response("ok")
+
+
+@requires_api_token
+@csrf_exempt
+def ingest_email(request):
+    """Ingest incoming email
+
+    Hands off to ingest_email_handler() with test_mode=False. This allows @requires_api_token to
+    give the test endpoint a distinct token from the real one.
+    """
+    return ingest_email_handler(request, test_mode=False)
+
+
+@requires_api_token
+@csrf_exempt
+def ingest_email_test(request):
+    """Ingest incoming email test endpoint
+    
+    Hands off to ingest_email_handler() with test_mode=True. This allows @requires_api_token to
+    give the test endpoint a distinct token from the real one.
+    """
+    return ingest_email_handler(request, test_mode=True)

From 80599f29f0dacb9069f2963aa0714f91889d10db Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Wed, 11 Sep 2024 10:22:45 +1200
Subject: [PATCH 052/707] fix: Include missing related drafts in IPR searches
 (#7836)

* fix: Include missing related drafts in IPR searches

* refactor: extract drafts, sort docs

* chore: indent loop and conditionals to improve readability

* test: handle whitespaces added to IPR search result page

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/ipr/tests.py                         | 33 ++++++++++++++++++++
 ietf/ipr/views.py                         | 38 ++++++++++++++++++++---
 ietf/templates/ipr/search_doc_result.html | 19 +++++++++---
 3 files changed, 82 insertions(+), 8 deletions(-)

diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 922ae272a9..a65b0d6c6c 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -24,6 +24,7 @@
     RfcFactory,
     NewRevisionDocEventFactory
 )
+from ietf.doc.utils import prettify_std_name
 from ietf.group.factories import RoleFactory
 from ietf.ipr.factories import (
     HolderIprDisclosureFactory,
@@ -192,6 +193,38 @@ def test_search(self):
         r = self.client.get(url + "?submit=rfc&rfc=321")
         self.assertContains(r, ipr.title)
 
+        rfc_new = RfcFactory(rfc_number=322)
+        rfc_new.relateddocument_set.create(relationship_id="obs", target=rfc)
+
+        # find RFC 322 which obsoletes RFC 321 whose draft has IPR
+        r = self.client.get(url + "?submit=rfc&rfc=322")
+        self.assertContains(r, ipr.title)
+        self.assertContains(r, "Total number of IPR disclosures found: <b>1</b>")
+        self.assertContains(r, "Total number of documents searched: <b>3</b>.")
+        self.assertContains(
+            r,
+            f"""Results for <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a>
+                        ("{rfc_new.title}")""",
+        )
+        self.assertContains(
+            r,
+            f"""Results for <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a>
+                        ("{rfc.title}"), which
+                            
+                                was obsoleted by
+                                <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a>
+                                ("{rfc_new.title}")""",
+        )
+        self.assertContains(
+            r,
+            f"""Results for <a href="/doc/{draft.name}/">{prettify_std_name(draft.name)}</a>
+                        ("{draft.title}"), which
+                            
+                                became rfc
+                                <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a>
+                                ("{rfc.title}")""",
+        )
+
         # find by patent owner
         r = self.client.get(url + "?submit=holder&holder=%s" % ipr.holder_legal_name)
         self.assertContains(r, ipr.title)
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index a061232b8f..45fad9a2cc 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -689,11 +689,41 @@ def search(request):
                 if len(start) == 1:
                     first = start[0]
                     doc = first
-                    docs = related_docs(first)
-                    iprs = iprs_from_docs(docs,states=states)
+                    docs = set([first])
+                    docs.update(
+                        related_docs(
+                            first, relationship=("replaces", "obs"), reverse_relationship=()
+                        )
+                    )
+                    docs.update(
+                        set(
+                            [
+                                draft
+                                for drafts in [
+                                    related_docs(
+                                        d, relationship=(), reverse_relationship=("became_rfc",)
+                                    )
+                                    for d in docs
+                                ]
+                                for draft in drafts
+                            ]
+                        )
+                    )
+                    docs.discard(None)
+                    docs = sorted(
+                        docs,
+                        key=lambda d: (
+                            d.rfc_number if d.rfc_number is not None else 0,
+                            d.became_rfc().rfc_number if d.became_rfc() else 0,
+                        ),
+                        reverse=True,
+                    )
+                    iprs = iprs_from_docs(docs, states=states)
                     template = "ipr/search_doc_result.html"
-                    updated_docs = related_docs(first, ('updates',))
-                    related_iprs = list(set(iprs_from_docs(updated_docs, states=states)) - set(iprs))
+                    updated_docs = related_docs(first, ("updates",))
+                    related_iprs = list(
+                        set(iprs_from_docs(updated_docs, states=states)) - set(iprs)
+                    )
                 # multiple matches, select just one
                 elif start:
                     docs = start
diff --git a/ietf/templates/ipr/search_doc_result.html b/ietf/templates/ipr/search_doc_result.html
index dc7d8b95b5..b003a32108 100644
--- a/ietf/templates/ipr/search_doc_result.html
+++ b/ietf/templates/ipr/search_doc_result.html
@@ -54,16 +54,27 @@
             </tr>
         </thead>
 
-        {% for doc in docs %}
+        {% for d in docs %}
             <tbody>
                 <tr>
                     <th scope="col" class="table-info" colspan="3">
-                        Results for {{ doc.name|prettystdname|urlize_ietf_docs }} ("{{ doc.title }}"){% if not forloop.first %}{% if doc.related %}, which was {{ doc.relation|lower }} {{ doc.related.source|prettystdname|urlize_ietf_docs  }} ("{{ doc.related.source.title }}"){% endif %}{% endif %}
+                        Results for {{ d.name|prettystdname|urlize_ietf_docs }}
+                        ("{{ d.title }}"){% if d != doc and d.related %}, which
+                            {% if d == d.related.source %}
+                                {{ d.relation|lower }}
+                                {{ d.related.target|prettystdname|urlize_ietf_docs }}
+                                ("{{ d.related.target.title }}")
+                            {% else %}
+                                was {{ d.relation|lower }}
+                                {{ d.related.source|prettystdname|urlize_ietf_docs }}
+                                ("{{ d.related.source.title }}")
+                            {% endif %}
+                        {% endif %}
                     </th>
                 </tr>
             </tbody>
             <tbody>
-                {% with doc.iprdocrel_set.all as doc_iprs %}
+                {% with d.iprdocrel_set.all as doc_iprs %}
                     {% if doc_iprs %}
                         {% for ipr in doc_iprs %}
                             {% if ipr.disclosure.state_id in states %}
@@ -81,7 +92,7 @@
                             <td></td>
                             <td></td>
                             <td>
-                                No IPR disclosures have been submitted directly on {{ doc.name|prettystdname|urlize_ietf_docs }}{% if iprs %},
+                                No IPR disclosures have been submitted directly on {{ d.name|prettystdname|urlize_ietf_docs }}{% if iprs %},
                                     but there are disclosures on {% if docs|length == 2 %}a related document{% else %}related documents{% endif %}, listed on this page{% endif %}.
                             </td>
                         </tr>

From 13aa072a1e6f50f40a3b33a823408f8eae3b6914 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Sep 2024 13:46:03 -0300
Subject: [PATCH 053/707] chore(deps): pin importlib-metadata (#7927)

---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index 88b78e665b..c51ed9ac00 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -33,6 +33,7 @@ gunicorn>=20.1.0
 hashids>=1.3.1
 html2text>=2020.1.16    # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
+importlib-metadata<8.5.0  # indirect req of Markdown/inflect; https://github.com/ietf-tools/datatracker/issues/7924
 inflect>= 6.0.2
 jsonfield>=3.1.0    # for SubmissionCheck.  This is https://github.com/bradjasper/django-jsonfield/.
 jsonschema[format]>=4.2.1

From 8d608a1282bf84a8b5df0a9d12f16b25cf265f4b Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Fri, 13 Sep 2024 05:47:15 +1200
Subject: [PATCH 054/707] test: check HTML content with whitespace ignored
 (#7921)

---
 ietf/ipr/tests.py | 22 ++++++++--------------
 1 file changed, 8 insertions(+), 14 deletions(-)

diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index a65b0d6c6c..b08e359462 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -203,26 +203,20 @@ def test_search(self):
         self.assertContains(r, "Total number of documents searched: <b>3</b>.")
         self.assertContains(
             r,
-            f"""Results for <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a>
-                        ("{rfc_new.title}")""",
+            f'Results for <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a> ("{rfc_new.title}")',
+            html=True,
         )
         self.assertContains(
             r,
-            f"""Results for <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a>
-                        ("{rfc.title}"), which
-                            
-                                was obsoleted by
-                                <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a>
-                                ("{rfc_new.title}")""",
+            f'Results for <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a> ("{rfc.title}"), '
+            f'which was obsoleted by <a href="/doc/{rfc_new.name}/">{prettify_std_name(rfc_new.name)}</a> ("{rfc_new.title}")',
+            html=True,
         )
         self.assertContains(
             r,
-            f"""Results for <a href="/doc/{draft.name}/">{prettify_std_name(draft.name)}</a>
-                        ("{draft.title}"), which
-                            
-                                became rfc
-                                <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a>
-                                ("{rfc.title}")""",
+            f'Results for <a href="/doc/{draft.name}/">{prettify_std_name(draft.name)}</a> ("{draft.title}"), '
+            f'which became rfc <a href="/doc/{rfc.name}/">{prettify_std_name(rfc.name)}</a> ("{rfc.title}")',
+            html=True,
         )
 
         # find by patent owner

From f0f2b6d8b6a7a44f85047c42fefe89c8ca586f09 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Fri, 13 Sep 2024 05:47:53 +1200
Subject: [PATCH 055/707] test: Use timezone aware datetime (#7918)

* test: Use timezone aware datetime

* fixup! test: Use timezone aware datetime
---
 ietf/meeting/tests_models.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index 0a089ee9e8..f2949a7bb5 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -158,7 +158,7 @@ def test_alpha_str(self):
 
     def test_session_recording_url(self):
         group_acronym = "foobar"
-        meeting_date = datetime.date.today()
+        meeting_date = date_today()
         meeting_number = 123
 
         # IETF meeting

From b8c6cb34dd335de88740563eab6ebfbd362b49f4 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Fri, 13 Sep 2024 09:28:44 +1200
Subject: [PATCH 056/707] chore: Remove obsolete `version` attribute (#7931)

---
 docker-compose.yml               | 2 --
 docker/docker-compose.celery.yml | 4 ----
 docker/docker-compose.extend.yml | 2 --
 3 files changed, 8 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 413c04ff63..65b28f54fe 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
     app:
         build:
diff --git a/docker/docker-compose.celery.yml b/docker/docker-compose.celery.yml
index dedae2d004..b6cc3d09e8 100644
--- a/docker/docker-compose.celery.yml
+++ b/docker/docker-compose.celery.yml
@@ -1,7 +1,3 @@
-version: '2.4'
-# Use version 2.4 for mem_limit setting. Version 3+ uses deploy.resources.limits.memory
-# instead, but that only works for swarm with docker-compose 1.25.1.
-
 services:
   mq:
     image: rabbitmq:3-alpine
diff --git a/docker/docker-compose.extend.yml b/docker/docker-compose.extend.yml
index d055c976f4..0538c0d3e9 100644
--- a/docker/docker-compose.extend.yml
+++ b/docker/docker-compose.extend.yml
@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
     app:
         ports:

From 65547a7a9dfa51d60ab31b561590ff4b1aee7033 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 12 Sep 2024 17:04:12 -0500
Subject: [PATCH 057/707] fix: rectify mixed types in gathering mailtrigger
 recipients (#7932)

---
 ietf/mailtrigger/models.py | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/ietf/mailtrigger/models.py b/ietf/mailtrigger/models.py
index aea530083a..66b7139fa5 100644
--- a/ietf/mailtrigger/models.py
+++ b/ietf/mailtrigger/models.py
@@ -138,16 +138,16 @@ def gather_group_steering_group(self,**kwargs):
     def gather_stream_managers(self, **kwargs):
         addrs = []
         manager_map = dict(
-            ise  = '<rfc-ise@rfc-editor.org>',
-            irtf = '<irtf-chair@irtf.org>',
-            ietf = '<iesg@ietf.org>',
-            iab  = '<iab-chair@iab.org>',
+            ise  = ['<rfc-ise@rfc-editor.org>'],
+            irtf = ['<irtf-chair@irtf.org>'],
+            ietf = ['<iesg@ietf.org>'],
+            iab  = ['<iab-chair@iab.org>'],
             editorial = Role.objects.filter(group__acronym="rsab",name_id="chair").values_list("email__address", flat=True),
         )
         if 'streams' in kwargs:
             for stream in kwargs['streams']:
                 if stream in manager_map:
-                    addrs.append(manager_map[stream])
+                    addrs.extend(manager_map[stream])
         return addrs
 
     def gather_doc_stream_manager(self, **kwargs):
@@ -234,7 +234,7 @@ def gather_submission_submitter(self, **kwargs):
                 try:
                     submitter = Alias.objects.get(name=submission.submitter).person
                     if submitter and submitter.email():
-                        addrs.extend(["%s <%s>" % (submitter.name, submitter.email().address)])
+                        addrs.append(f"{submitter.name} <{submitter.email().address}>")
                 except (Alias.DoesNotExist, Alias.MultipleObjectsReturned):
                     pass
         return addrs

From f5c132a20a695915e288195b32191b318bd24b9b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 13 Sep 2024 18:42:51 -0300
Subject: [PATCH 058/707] refactor: helper for session recording URL; fix test
 (#7933)

* refactor: session recording URL label helper

* test: update tests, avoid tz dependence

* test: use date_today()
---
 ietf/meeting/models.py       | 14 ++++----
 ietf/meeting/tests_models.py | 67 +++++++++++++++++-------------------
 2 files changed, 39 insertions(+), 42 deletions(-)

diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 01b695bcea..e169077800 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1331,16 +1331,18 @@ def onsite_tool_url(self):
             return url.format(session=self)
         return None
 
+    def _session_recording_url_label(self):
+        if self.meeting.type.slug == "ietf" and self.has_onsite_tool:
+            session_label = f"IETF{self.meeting.number}-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+        else:
+            session_label = f"IETF-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+        return session_label
+
     def session_recording_url(self):
         url_formatter = getattr(settings, "MEETECHO_SESSION_RECORDING_URL", "")
         url = None
         if url_formatter and self.video_stream_url:
-            if self.meeting.type.slug == "ietf" and self.has_onsite_tool:
-                session_label = f"IETF{self.meeting.number}-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
-            else:
-                session_label = f"IETF-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
-            url = url_formatter.format(session_label=session_label)
-
+            url = url_formatter.format(session_label=self._session_recording_url_label())
         return url
 
 
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index f2949a7bb5..8457423c51 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -8,6 +8,7 @@
 from django.conf import settings
 from django.test import override_settings
 
+import ietf.meeting.models
 from ietf.group.factories import GroupFactory, GroupHistoryFactory
 from ietf.meeting.factories import MeetingFactory, SessionFactory, AttendedFactory, SessionPresentationFactory
 from ietf.meeting.models import Session
@@ -156,46 +157,40 @@ def test_alpha_str(self):
         self.assertEqual(Session._alpha_str(27 * 26 - 1), "zz")
         self.assertEqual(Session._alpha_str(27 * 26), "aaa")
 
-    def test_session_recording_url(self):
-        group_acronym = "foobar"
-        meeting_date = date_today()
-        meeting_number = 123
-
-        # IETF meeting
+    @patch.object(ietf.meeting.models.Session, "_session_recording_url_label", return_value="LABEL")
+    def test_session_recording_url(self, mock):
+        for session_type in ["ietf", "interim"]:
+            session = SessionFactory(meeting__type_id=session_type)
+            with override_settings():
+                if hasattr(settings, "MEETECHO_SESSION_RECORDING_URL"):
+                    del settings.MEETECHO_SESSION_RECORDING_URL
+                self.assertIsNone(session.session_recording_url())
+    
+                settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com"
+                self.assertEqual(session.session_recording_url(), "http://player.example.com")
+    
+                settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
+                self.assertEqual(session.session_recording_url(), "http://player.example.com?LABEL")
+
+    def test_session_recording_url_label_ietf(self):
         session = SessionFactory(
             meeting__type_id='ietf',
-            meeting__date=meeting_date,
-            group__acronym=group_acronym,
-            meeting__number=meeting_number,
+            meeting__date=date_today(),
+            meeting__number="123",
+            group__acronym="acro",
         )
-        with override_settings():
-            if hasattr(settings, "MEETECHO_SESSION_RECORDING_URL"):
-                del settings.MEETECHO_SESSION_RECORDING_URL
-            self.assertIsNone(session.session_recording_url())
-
-            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com"
-            self.assertEqual(session.session_recording_url(), "http://player.example.com")
-
-            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
-            self.assertIn(f"IETF{meeting_number}-{group_acronym.upper()}", session.session_recording_url())
-            self.assertIn(f"{meeting_date.strftime('%Y%m%d')}", session.session_recording_url())
-            self.assertTrue(session.session_recording_url().startswith("http://player.example.com"))
+        session_time = session.official_timeslotassignment().timeslot.time
+        self.assertEqual(
+            f"IETF123-ACRO-{session_time:%Y%m%d-%H%M}",  # n.b., time in label is UTC
+            session._session_recording_url_label())
 
-        # interim meeting
+    def test_session_recording_url_label_interim(self):
         session = SessionFactory(
             meeting__type_id='interim',
-            meeting__date=meeting_date,
-            group__acronym=group_acronym,
+            meeting__date=date_today(),
+            group__acronym="acro",
         )
-        with override_settings():
-            if hasattr(settings, "MEETECHO_SESSION_RECORDING_URL"):
-                del settings.MEETECHO_SESSION_RECORDING_URL
-            self.assertIsNone(session.session_recording_url())
-
-            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com"
-            self.assertEqual(session.session_recording_url(), "http://player.example.com")
-
-            settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
-            self.assertIn(f"IETF-{group_acronym.upper()}", session.session_recording_url())
-            self.assertIn(f"{meeting_date.strftime('%Y%m%d')}", session.session_recording_url())
-            self.assertTrue(session.session_recording_url().startswith("http://player.example.com"))
+        session_time = session.official_timeslotassignment().timeslot.time
+        self.assertEqual(
+            f"IETF-ACRO-{session_time:%Y%m%d-%H%M}",  # n.b., time in label is UTC
+            session._session_recording_url_label())

From 3b5058a51693c3bb4bf526a089f08c906f584499 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 16 Sep 2024 08:56:51 -0500
Subject: [PATCH 059/707] fix: start to reconcile internal inconsistencies wrt
 multiple from values (#7935)

---
 ietf/utils/mail.py  | 14 +++++++++++++-
 ietf/utils/tests.py | 12 ++++++------
 2 files changed, 19 insertions(+), 7 deletions(-)

diff --git a/ietf/utils/mail.py b/ietf/utils/mail.py
index e747c74778..4585fdb846 100644
--- a/ietf/utils/mail.py
+++ b/ietf/utils/mail.py
@@ -92,7 +92,17 @@ def send_smtp(msg, bcc=None):
     '''
     mark = time.time()
     add_headers(msg)
-    (fname, frm) = parseaddr(msg.get('From'))
+    # N.B. We have a disconnect with most of this code assuming a From header value will only
+    # have one address.
+    # The frm computed here is only used as the envelope from. 
+    # Previous code simply ran `parseaddr(msg.get('From'))`, getting lucky if the string returned
+    # from the get had more than one address in it. Python 3.9.20 changes the behavior of parseaddr
+    # and that erroneous use of the function no longer gets lucky.
+    # For the short term, to match behavior to date as closely as possible, if we get a message
+    # that has multiple addresses in the From header, we will use the first for the envelope from
+    from_tuples = getaddresses(msg.get_all('From', [settings.DEFAULT_FROM_EMAIL]))
+    assertion('len(from_tuples)==1', note=f"send_smtp received multiple From addresses: {from_tuples}")
+    _ , frm = from_tuples[0]
     addrlist = msg.get_all('To') + msg.get_all('Cc', [])
     if bcc:
         addrlist += [bcc]
@@ -446,6 +456,8 @@ def parse_preformatted(preformatted, extra=None, override=None):
         values = msg.get_all(key, [])
         if values:
             values = getaddresses(values)
+            if key=='From':
+                assertion('len(values)<2', note=f'parse_preformatted is constructing a From with multiple values: {values}')
             del msg[key]
             msg[key] = ',\n    '.join(formataddr(v) for v in values)
     for key in ['Subject', ]:
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index d435583e89..decdd778d9 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -53,7 +53,7 @@ class SendingMail(TestCase):
 
     def test_send_mail_preformatted(self):
         msg = """To: to1@example.com, to2@example.com
-From: from1@ietf.org, from2@ietf.org
+From: from1@ietf.org
 Cc: cc1@example.com, cc2@example.com
 Bcc: bcc1@example.com, bcc2@example.com
 Subject: subject
@@ -63,7 +63,7 @@ def test_send_mail_preformatted(self):
         send_mail_preformatted(None, msg, {}, {})
         recv = outbox[-1]
         self.assertSameEmail(recv['To'], '<to1@example.com>, <to2@example.com>')
-        self.assertSameEmail(recv['From'], 'from1@ietf.org, from2@ietf.org')
+        self.assertSameEmail(recv['From'], 'from1@ietf.org')
         self.assertSameEmail(recv['Cc'], 'cc1@example.com, cc2@example.com')
         self.assertSameEmail(recv['Bcc'], None)
         self.assertEqual(recv['Subject'], 'subject')
@@ -71,14 +71,14 @@ def test_send_mail_preformatted(self):
 
         override = {
             'To': 'oto1@example.net, oto2@example.net',
-            'From': 'ofrom1@ietf.org, ofrom2@ietf.org',
+            'From': 'ofrom1@ietf.org',
             'Cc': 'occ1@example.net, occ2@example.net',
             'Subject': 'osubject',
         }
         send_mail_preformatted(request=None, preformatted=msg, extra={}, override=override)
         recv = outbox[-1]
         self.assertSameEmail(recv['To'], '<oto1@example.net>, <oto2@example.net>')
-        self.assertSameEmail(recv['From'], 'ofrom1@ietf.org, ofrom2@ietf.org')
+        self.assertSameEmail(recv['From'], 'ofrom1@ietf.org')
         self.assertSameEmail(recv['Cc'], 'occ1@example.net, occ2@example.net')
         self.assertSameEmail(recv['Bcc'], None)
         self.assertEqual(recv['Subject'], 'osubject')
@@ -86,14 +86,14 @@ def test_send_mail_preformatted(self):
 
         override = {
             'To': ['<oto1@example.net>', 'oto2@example.net'],
-            'From': ['<ofrom1@ietf.org>', 'ofrom2@ietf.org'],
+            'From': ['<ofrom1@ietf.org>'],
             'Cc': ['<occ1@example.net>', 'occ2@example.net'],
             'Subject': 'osubject',
         }
         send_mail_preformatted(request=None, preformatted=msg, extra={}, override=override)
         recv = outbox[-1]
         self.assertSameEmail(recv['To'], '<oto1@example.net>, <oto2@example.net>')
-        self.assertSameEmail(recv['From'], '<ofrom1@ietf.org>, ofrom2@ietf.org')
+        self.assertSameEmail(recv['From'], '<ofrom1@ietf.org>')
         self.assertSameEmail(recv['Cc'], '<occ1@example.net>, occ2@example.net')
         self.assertSameEmail(recv['Bcc'], None)
         self.assertEqual(recv['Subject'], 'osubject')

From cc1eade4f8b2894adba41d658521b4b0d585e2a3 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 16 Sep 2024 08:57:05 -0500
Subject: [PATCH 060/707] fix: correct headers for charter evaluation email
 (#7937)

---
 ietf/templates/doc/charter/issue_ballot_mail.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/templates/doc/charter/issue_ballot_mail.txt b/ietf/templates/doc/charter/issue_ballot_mail.txt
index 12fc44bbbc..914935bb12 100644
--- a/ietf/templates/doc/charter/issue_ballot_mail.txt
+++ b/ietf/templates/doc/charter/issue_ballot_mail.txt
@@ -1,6 +1,6 @@
-{% load ietf_filters %}{% autoescape off %}To: {{ to }} {% if cc %}
-Cc: {{ cc }}
-{% endif %}From: IESG Secretary <iesg-secretary@ietf.org>
+{% load ietf_filters %}{% autoescape off %}To: {{ to }}{% if cc %}
+Cc: {{ cc }}{% endif %}
+From: IESG Secretary <iesg-secretary@ietf.org>
 Reply-To: IESG Secretary <iesg-secretary@ietf.org>
 Subject: Evaluation: {{ doc.name }}
 

From 9d583ab9eb056de5407ec88ba631a07b2d609879 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Tue, 17 Sep 2024 03:06:16 +1200
Subject: [PATCH 061/707] fix: Use email or name when building community list
 view (#7203)

* fix: Use email or name when building community list view

instead of email

* test: add test case

* chore: remove debug

* fix: use name in community list menu when no active email is found

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/community/tests.py                 | 13 ++++++++++---
 ietf/community/views.py                 |  1 +
 ietf/templates/community/list_menu.html |  8 ++++----
 ietf/templates/community/view_list.html |  2 +-
 4 files changed, 16 insertions(+), 8 deletions(-)

diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index d76347b70a..84e4370771 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -108,10 +108,8 @@ def email_or_name_set(self, person):
         return [e for e in Email.objects.filter(person=person)] + \
                [a for a in Alias.objects.filter(person=person)]
 
-    def test_view_list(self):
-        person = self.complex_person(user__username='plain')
+    def do_view_list_test(self, person):
         draft = WgDraftFactory()
-
         # without list
         for id in self.email_or_name_set(person):
             url = urlreverse(ietf.community.views.view_list, kwargs={ "email_or_name": id })
@@ -134,6 +132,15 @@ def test_view_list(self):
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             self.assertContains(r, draft.name)
 
+    def test_view_list(self):
+        person = self.complex_person(user__username='plain')
+        self.do_view_list_test(person)
+        
+    def test_view_list_without_active_email(self):
+        person = self.complex_person(user__username='plain')
+        person.email_set.update(active=False)
+        self.do_view_list_test(person)
+
     def test_manage_personal_list(self):
         person = self.complex_person(user__username='plain')
         ad = Person.objects.get(user__username='ad')
diff --git a/ietf/community/views.py b/ietf/community/views.py
index 4a28a391f0..78b8144d60 100644
--- a/ietf/community/views.py
+++ b/ietf/community/views.py
@@ -68,6 +68,7 @@ def view_list(request, email_or_name=None):
         'meta': meta,
         'can_manage_list': can_manage_community_list(request.user, clist),
         'subscribed': subscribed,
+        "email_or_name": email_or_name,
     })
 
 @login_required
diff --git a/ietf/templates/community/list_menu.html b/ietf/templates/community/list_menu.html
index 0552c76a45..009d01152d 100644
--- a/ietf/templates/community/list_menu.html
+++ b/ietf/templates/community/list_menu.html
@@ -3,18 +3,18 @@
     <div class="btn-group" role="group" aria-labelledby="list-feeds">
         <a class="btn btn-primary"
            title="Feed of all changes"
-           href="{% if clist.group %}{% url "ietf.community.views.feed" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.feed" email_or_name=clist.person.email_address %}{% endif %}">
+           href="{% if clist.group %}{% url "ietf.community.views.feed" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.feed" email_or_name=email_or_name %}{% endif %}">
             <i class="bi bi-rss"></i> All changes
         </a>
         <a class="btn btn-primary"
            title="Feed of only significant state changes"
-           href="{% if clist.group %}{% url "ietf.community.views.feed" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.feed" email_or_name=clist.person.email_address %}{% endif %}?significant=1">
+           href="{% if clist.group %}{% url "ietf.community.views.feed" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.feed" email_or_name=email_or_name %}{% endif %}?significant=1">
             <i class="bi bi-rss"></i> Significant
         </a>
     </div>
     {% if clist.pk != None %}
         <a class="btn btn-primary"
-           href="{% if clist.group %}{% url "ietf.community.views.subscription" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.subscription" email_or_name=clist.person.email_address %}{% endif %}">
+           href="{% if clist.group %}{% url "ietf.community.views.subscription" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.subscription" email_or_name=email_or_name %}{% endif %}">
             <i class="bi bi-envelope"></i>
             {% if subscribed %}
                 Change subscription
@@ -24,7 +24,7 @@
         </a>
     {% endif %}
     <a class="btn btn-primary"
-       href="{% if clist.group %}{% url "ietf.community.views.export_to_csv" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.export_to_csv" email_or_name=clist.person.email_address %}{% endif %}">
+       href="{% if clist.group %}{% url "ietf.community.views.export_to_csv" acronym=clist.group.acronym %}{% else %}{% url "ietf.community.views.export_to_csv" email_or_name=email_or_name %}{% endif %}">
         <i class="bi bi-file-ruled"></i> Export as CSV
     </a>
 </div>
diff --git a/ietf/templates/community/view_list.html b/ietf/templates/community/view_list.html
index 7ca9f52748..a543eaf7cf 100644
--- a/ietf/templates/community/view_list.html
+++ b/ietf/templates/community/view_list.html
@@ -12,7 +12,7 @@ <h1>{{ clist.long_name }}</h1>
     {% bootstrap_messages %}
     {% if can_manage_list %}
         <a class="btn btn-primary my-3"
-           href="{% url "ietf.community.views.manage_list" email_or_name=clist.person.email_address %}">
+           href="{% url "ietf.community.views.manage_list" email_or_name=email_or_name %}">
             <i class="bi bi-gear"></i>
             Manage list
         </a>

From d7be91f784e9fb77193b486fece4e1a0a2f70d9c Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 16 Sep 2024 10:28:13 -0500
Subject: [PATCH 062/707] fix: pin pydyf until weasyprint adjusts for its
 deprecations (#7945)

---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index c51ed9ac00..2e6e2714d7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -49,6 +49,7 @@ oic>=1.3    # Used only by tests
 Pillow>=9.1.0
 psycopg2>=2.9.6
 pyang>=2.5.3
+pydyf>0.8.0,<0.10.0 # until weasyprint adjusts for 0.10.0 and later
 pyflakes>=2.4.0
 pyopenssl>=22.0.0    # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency
 pyquery>=1.4.3

From 8362b45c8e94d5bf3585f27b2e821388d9b9fb14 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 17 Sep 2024 13:05:56 -0500
Subject: [PATCH 063/707] fix: optimize and debug has_role and
 can_manage_some_groups (#7949)

* fix: optimize can_manage_some_groups

* fix: improve cache key

* refactor: extra_role_qs to kwargs and bugfix to cache key

* fix: restrict groupman_role matches to active states

* chore: styling, decommenting, black
---
 ietf/group/utils.py    |  21 ++++--
 ietf/ietfauth/utils.py | 162 +++++++++++++++++++++++++++++------------
 2 files changed, 131 insertions(+), 52 deletions(-)

diff --git a/ietf/group/utils.py b/ietf/group/utils.py
index 68b618120b..dcf9d83e6f 100644
--- a/ietf/group/utils.py
+++ b/ietf/group/utils.py
@@ -2,6 +2,7 @@
 # -*- coding: utf-8 -*-
 import datetime
 
+from itertools import chain
 from pathlib import Path
 
 from django.db.models import Q
@@ -153,17 +154,23 @@ def can_manage_materials(user, group):
 def can_manage_session_materials(user, group, session):
     return has_role(user, 'Secretariat') or (group.has_role(user, group.features.matman_roles) and not session.is_material_submission_cutoff())
 
-# Maybe this should be cached...
 def can_manage_some_groups(user):
     if not user.is_authenticated:
         return False
+    authroles = set(
+        chain.from_iterable(
+            GroupFeatures.objects.values_list("groupman_authroles", flat=True)
+        )
+    )
+    extra_role_qs = dict()
     for gf in GroupFeatures.objects.all():
-        for authrole in gf.groupman_authroles:
-            if has_role(user, authrole):
-                return True
-            if Role.objects.filter(name__in=gf.groupman_roles, group__type_id=gf.type_id, person__user=user).exists():
-                return True
-    return False          
+        extra_role_qs[f"{gf.type_id} groupman roles"] = Q(
+            name__in=gf.groupman_roles,
+            group__type_id=gf.type_id,
+            group__state__in=["active", "bof", "proposed"],
+        )
+    return has_role(user, authroles, extra_role_qs=extra_role_qs)
+       
 
 def can_provide_status_update(user, group):
     if not group.features.acts_like_wg:
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index 6fa9cddbcb..d8bd67a4e0 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -38,9 +38,10 @@ def has_role(user, role_names, *args, **kwargs):
     """Determines whether user has any of the given standard roles
     given. Role names must be a list or, in case of a single value, a
     string."""
-    if not isinstance(role_names, (list, tuple)):
-        role_names = [ role_names ]
-    
+    extra_role_qs = kwargs.get("extra_role_qs", None)
+    if not isinstance(role_names, (list, tuple, set)):
+        role_names = [role_names]
+
     if not user or not user.is_authenticated:
         return False
 
@@ -48,7 +49,13 @@ def has_role(user, role_names, *args, **kwargs):
     if not hasattr(user, "roles_check_cache"):
         user.roles_check_cache = {}
 
-    key = frozenset(role_names)
+    keynames = set(role_names)
+    if extra_role_qs:
+        keynames.update(set(extra_role_qs.keys()))
+    year = kwargs.get("year", None)
+    if year is not None:
+        keynames.add(f"nomcomyear{year}")
+    key = frozenset(keynames)
     if key not in user.roles_check_cache:
         try:
             person = user.person
@@ -56,54 +63,119 @@ def has_role(user, role_names, *args, **kwargs):
             return False
 
         role_qs = {
-            "Area Director": Q(person=person, name__in=("pre-ad", "ad"), group__type="area", group__state="active"),
-            "Secretariat": Q(person=person, name="secr", group__acronym="secretariat"),
-            "IAB" : Q(person=person, name="member", group__acronym="iab"),
-            "IANA": Q(person=person, name="auth", group__acronym="iana"),
-            "RFC Editor": Q(person=person, name="auth", group__acronym="rpc"),
-            "ISE" : Q(person=person, name="chair", group__acronym="ise"),
-            "IAD": Q(person=person, name="admdir", group__acronym="ietf"),
-            "IETF Chair": Q(person=person, name="chair", group__acronym="ietf"),
-            "IETF Trust Chair": Q(person=person, name="chair", group__acronym="ietf-trust"),
-            "IRTF Chair": Q(person=person, name="chair", group__acronym="irtf"),
-            "RSAB Chair": Q(person=person, name="chair", group__acronym="rsab"),
-            "IAB Chair": Q(person=person, name="chair", group__acronym="iab"),
-            "IAB Executive Director": Q(person=person, name="execdir", group__acronym="iab"),
-            "IAB Group Chair": Q(person=person, name="chair", group__type="iab", group__state="active"),
-            "IAOC Chair": Q(person=person, name="chair", group__acronym="iaoc"),
-            "WG Chair": Q(person=person,name="chair", group__type="wg", group__state__in=["active","bof", "proposed"]),
-            "WG Secretary": Q(person=person,name="secr", group__type="wg", group__state__in=["active","bof", "proposed"]),
-            "RG Chair": Q(person=person,name="chair", group__type="rg", group__state__in=["active","proposed"]),
-            "RG Secretary": Q(person=person,name="secr", group__type="rg", group__state__in=["active","proposed"]),
-            "AG Secretary": Q(person=person,name="secr", group__type="ag", group__state__in=["active"]),
-            "RAG Secretary": Q(person=person,name="secr", group__type="rag", group__state__in=["active"]),
-            "Team Chair": Q(person=person,name="chair", group__type="team", group__state="active"),
-            "Program Lead": Q(person=person,name="lead", group__type="program", group__state="active"),
-            "Program Secretary": Q(person=person,name="secr", group__type="program", group__state="active"),
-            "Program Chair": Q(person=person,name="chair", group__type="program", group__state="active"),
-            "EDWG Chair": Q(person=person, name="chair", group__type="edwg", group__state="active"),
-            "Nomcom Chair": Q(person=person, name="chair", group__type="nomcom", group__acronym__icontains=kwargs.get('year', '0000')),
-            "Nomcom Advisor": Q(person=person, name="advisor", group__type="nomcom", group__acronym__icontains=kwargs.get('year', '0000')),
-            "Nomcom": Q(person=person, group__type="nomcom", group__acronym__icontains=kwargs.get('year', '0000')),
-            "Liaison Manager": Q(person=person,name="liaiman",group__type="sdo",group__state="active", ),
-            "Authorized Individual": Q(person=person,name="auth",group__type="sdo",group__state="active", ),
-            "Recording Manager": Q(person=person,name="recman",group__type="ietf",group__state="active", ),
-            "Reviewer": Q(person=person, name="reviewer", group__state="active"),
-            "Review Team Secretary": Q(person=person, name="secr", group__reviewteamsettings__isnull=False,group__state="active", ),
-            "IRSG Member": (Q(person=person, name="member", group__acronym="irsg") | Q(person=person, name="chair", group__acronym="irtf") | Q(person=person, name="atlarge", group__acronym="irsg")),
-            "RSAB Member": Q(person=person, name="member", group__acronym="rsab"), 
-            "Robot": Q(person=person, name="robot", group__acronym="secretariat"),
-            }
-
-        filter_expr = Q(pk__in=[])  # ensure empty set is returned if no other terms are added
+            "Area Director": Q(
+                name__in=("pre-ad", "ad"), group__type="area", group__state="active"
+            ),
+            "Secretariat": Q(name="secr", group__acronym="secretariat"),
+            "IAB": Q(name="member", group__acronym="iab"),
+            "IANA": Q(name="auth", group__acronym="iana"),
+            "RFC Editor": Q(name="auth", group__acronym="rpc"),
+            "ISE": Q(name="chair", group__acronym="ise"),
+            "IAD": Q(name="admdir", group__acronym="ietf"),
+            "IETF Chair": Q(name="chair", group__acronym="ietf"),
+            "IETF Trust Chair": Q(name="chair", group__acronym="ietf-trust"),
+            "IRTF Chair": Q(name="chair", group__acronym="irtf"),
+            "RSAB Chair": Q(name="chair", group__acronym="rsab"),
+            "IAB Chair": Q(name="chair", group__acronym="iab"),
+            "IAB Executive Director": Q(name="execdir", group__acronym="iab"),
+            "IAB Group Chair": Q(
+                name="chair", group__type="iab", group__state="active"
+            ),
+            "IAOC Chair": Q(name="chair", group__acronym="iaoc"),
+            "WG Chair": Q(
+                name="chair",
+                group__type="wg",
+                group__state__in=["active", "bof", "proposed"],
+            ),
+            "WG Secretary": Q(
+                name="secr",
+                group__type="wg",
+                group__state__in=["active", "bof", "proposed"],
+            ),
+            "RG Chair": Q(
+                name="chair", group__type="rg", group__state__in=["active", "proposed"]
+            ),
+            "RG Secretary": Q(
+                name="secr", group__type="rg", group__state__in=["active", "proposed"]
+            ),
+            "AG Secretary": Q(
+                name="secr", group__type="ag", group__state__in=["active"]
+            ),
+            "RAG Secretary": Q(
+                name="secr", group__type="rag", group__state__in=["active"]
+            ),
+            "Team Chair": Q(name="chair", group__type="team", group__state="active"),
+            "Program Lead": Q(
+                name="lead", group__type="program", group__state="active"
+            ),
+            "Program Secretary": Q(
+                name="secr", group__type="program", group__state="active"
+            ),
+            "Program Chair": Q(
+                name="chair", group__type="program", group__state="active"
+            ),
+            "EDWG Chair": Q(name="chair", group__type="edwg", group__state="active"),
+            "Nomcom Chair": Q(
+                name="chair",
+                group__type="nomcom",
+                group__acronym__icontains=kwargs.get("year", "0000"),
+            ),
+            "Nomcom Advisor": Q(
+                name="advisor",
+                group__type="nomcom",
+                group__acronym__icontains=kwargs.get("year", "0000"),
+            ),
+            "Nomcom": Q(
+                group__type="nomcom",
+                group__acronym__icontains=kwargs.get("year", "0000"),
+            ),
+            "Liaison Manager": Q(
+                name="liaiman",
+                group__type="sdo",
+                group__state="active",
+            ),
+            "Authorized Individual": Q(
+                name="auth",
+                group__type="sdo",
+                group__state="active",
+            ),
+            "Recording Manager": Q(
+                name="recman",
+                group__type="ietf",
+                group__state="active",
+            ),
+            "Reviewer": Q(name="reviewer", group__state="active"),
+            "Review Team Secretary": Q(
+                name="secr",
+                group__reviewteamsettings__isnull=False,
+                group__state="active",
+            ),
+            "IRSG Member": (
+                Q(name="member", group__acronym="irsg")
+                | Q(name="chair", group__acronym="irtf")
+                | Q(name="atlarge", group__acronym="irsg")
+            ),
+            "RSAB Member": Q(name="member", group__acronym="rsab"),
+            "Robot": Q(name="robot", group__acronym="secretariat"),
+        }
+
+        filter_expr = Q(
+            pk__in=[]
+        )  # ensure empty set is returned if no other terms are added
         for r in role_names:
             filter_expr |= role_qs[r]
+        if extra_role_qs:
+            for r in extra_role_qs:
+                filter_expr |= extra_role_qs[r]
 
-        user.roles_check_cache[key] = bool(Role.objects.filter(filter_expr).exists())
+        user.roles_check_cache[key] = bool(
+            Role.objects.filter(person=person).filter(filter_expr).exists()
+        )
 
     return user.roles_check_cache[key]
 
 
+
 # convenient decorator
 
 def passes_test_decorator(test_func, message):

From 97b719505ee162d0c55d57edbdd029f766c27a71 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 17 Sep 2024 13:06:10 -0500
Subject: [PATCH 064/707] test: focus on a helper rather than a whole view
 (#7951)

---
 ietf/meeting/tests_views.py | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index e4f62838de..f951eb682d 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -39,7 +39,7 @@
 from ietf.group.models import Group, Role, GroupFeatures
 from ietf.group.utils import can_manage_group
 from ietf.person.models import Person, PersonalApiKey
-from ietf.meeting.helpers import can_approve_interim_request, can_view_interim_request, preprocess_assignments_for_agenda
+from ietf.meeting.helpers import can_approve_interim_request, can_request_interim_meeting, can_view_interim_request, preprocess_assignments_for_agenda
 from ietf.meeting.helpers import send_interim_approval_request, AgendaKeywordTagger
 from ietf.meeting.helpers import send_interim_meeting_cancellation_notice, send_interim_session_cancellation_notice
 from ietf.meeting.helpers import send_interim_minutes_reminder, populate_important_dates, update_important_dates
@@ -7334,10 +7334,7 @@ def test_cannot_request_interim(self):
         for gf in GroupFeatures.objects.filter(has_meetings=True):
             for role_name in all_role_names - set(gf.groupman_roles):
                 role = RoleFactory(group__type_id=gf.type_id,name_id=role_name)
-                self.client.login(username=role.person.user.username, password=role.person.user.username+'+password')
-                r = self.client.get(url)
-                self.assertEqual(r.status_code, 403)
-                self.client.logout()
+                self.assertFalse(can_request_interim_meeting(role.person.user))
 
     def test_appears_on_upcoming(self):
         url = urlreverse('ietf.meeting.views.upcoming')

From c6389ba65fdefdce72661f3ee3d21f7d708da841 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 18 Sep 2024 16:02:00 -0300
Subject: [PATCH 065/707] fix: only send state change notifications once
 (#7953)

* feat: split state_change_event create / save

* refactor: avoid double-save in rfceditor.py

* feat: only send notifications on event creation

* test: update test_notification_signal_receiver()

* chore: update comment
---
 ietf/community/models.py |  5 ++++-
 ietf/community/tests.py  | 27 +++++++++++++++++----------
 ietf/doc/utils.py        | 25 ++++++++++++++++++++++---
 ietf/sync/rfceditor.py   | 13 +++++++------
 4 files changed, 50 insertions(+), 20 deletions(-)

diff --git a/ietf/community/models.py b/ietf/community/models.py
index b1295461d6..4d820eb0f1 100644
--- a/ietf/community/models.py
+++ b/ietf/community/models.py
@@ -104,12 +104,15 @@ def notify_events(sender, instance, **kwargs):
     if not isinstance(instance, DocEvent):
         return
 
+    if not kwargs.get("created", False):
+        return  # only notify on creation
+
     if instance.doc.type_id != 'draft':
         return
 
     if getattr(instance, "skip_community_list_notification", False):
         return
-
+    
     # kludge alert: queuing a celery task in response to a signal can cause unexpected attempts to
     # start a Celery task during tests. To prevent this, don't queue a celery task if we're running
     # tests.
diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 84e4370771..181e9e0fa6 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -17,6 +17,7 @@
 import ietf.community.views
 from ietf.group.models import Group
 from ietf.group.utils import setup_default_community_list_for_group
+from ietf.doc.factories import DocumentFactory
 from ietf.doc.models import State
 from ietf.doc.utils import add_state_change_event
 from ietf.person.models import Person, Email, Alias
@@ -439,39 +440,45 @@ def test_notification_signal_receiver(self, mock_notify_task):
         This implicitly tests that notify_events is hooked up to the post_save signal.
         """
         # Arbitrary model that's not a DocEvent
-        p = PersonFactory()
+        person = PersonFactory()
         mock_notify_task.reset_mock()  # clear any calls that resulted from the factories
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
-            p.save()
+            person.save()
         self.assertFalse(mock_notify_task.delay.called)
         
-        d = DocEventFactory()
-        mock_notify_task.reset_mock()  # clear any calls that resulted from the factories
+        # build a DocEvent that is not yet persisted
+        doc = DocumentFactory()
+        d = DocEventFactory.build(by=person, doc=doc)
+        # mock_notify_task.reset_mock()  # clear any calls that resulted from the factories
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             d.save()
-        self.assertEqual(mock_notify_task.delay.call_count, 1)
+        self.assertEqual(mock_notify_task.delay.call_count, 1, "notify_task should be run on creation of DocEvent")
         self.assertEqual(mock_notify_task.delay.call_args, mock.call(event_id = d.pk))
         
         mock_notify_task.reset_mock()
+        with override_settings(SERVER_MODE="not-test"):
+            d.save()
+        self.assertFalse(mock_notify_task.delay.called, "notify_task should not be run save of on existing DocEvent")
+        
+        mock_notify_task.reset_mock()
+        d = DocEventFactory.build(by=person, doc=doc)
         d.skip_community_list_notification = True
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             d.save()
-        self.assertFalse(mock_notify_task.delay.called)
+        self.assertFalse(mock_notify_task.delay.called, "notify_task should not run when skip_community_list_notification is set")
 
-        del(d.skip_community_list_notification)
-        d.doc.type_id="rfc"  # not "draft"
-        d.doc.save()
+        d = DocEventFactory.build(by=person, doc=DocumentFactory(type_id="rfc"))
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             d.save()
-        self.assertFalse(mock_notify_task.delay.called)
+        self.assertFalse(mock_notify_task.delay.called, "notify_task should not run on a document with type 'rfc'")
 
     @mock.patch("ietf.utils.mail.send_mail_text")
     def test_notify_event_to_subscribers(self, mock_send_mail_text):
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 74000e598b..97243a20d6 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -398,8 +398,12 @@ def get_unicode_document_content(key, filename, codec='utf-8', errors='ignore'):
 def tags_suffix(tags):
     return ("::" + "::".join(t.name for t in tags)) if tags else ""
 
-def add_state_change_event(doc, by, prev_state, new_state, prev_tags=None, new_tags=None, timestamp=None):
-    """Add doc event to explain that state change just happened."""
+
+def new_state_change_event(doc, by, prev_state, new_state, prev_tags=None, new_tags=None, timestamp=None):
+    """Create unsaved doc event to explain that state change just happened
+    
+    Returns None if no state change occurred.
+    """
     if prev_state and new_state:
         assert prev_state.type_id == new_state.type_id
 
@@ -419,7 +423,22 @@ def add_state_change_event(doc, by, prev_state, new_state, prev_tags=None, new_t
         e.desc += " from %s" % (prev_state.name + tags_suffix(prev_tags))
     if timestamp:
         e.time = timestamp
-    e.save()
+    return e  # not saved!
+
+
+def add_state_change_event(doc, by, prev_state, new_state, prev_tags=None, new_tags=None, timestamp=None):
+    """Add doc event to explain that state change just happened.
+    
+    Returns None if no state change occurred.
+    
+    Note: Creating a state change DocEvent will trigger notifications to be sent to people subscribed
+    to the doc via a CommunityList on its first save(). If you need to adjust the event (say, changing
+    its desc) before that notification is sent, use new_state_change_event() instead and save the
+    event after making your changes. 
+    """
+    e = new_state_change_event(doc, by, prev_state, new_state, prev_tags, new_tags, timestamp)
+    if e is not None:
+        e.save()
     return e
 
 
diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index d3371ea36c..6b3482f10d 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -21,7 +21,7 @@
 from ietf.doc.models import ( Document, State, StateType, DocEvent, DocRelationshipName,
     DocTagName, RelatedDocument, RelatedDocHistory )
 from ietf.doc.expire import move_draft_files_to_archive
-from ietf.doc.utils import add_state_change_event, prettify_std_name, update_action_holders
+from ietf.doc.utils import add_state_change_event, new_state_change_event, prettify_std_name, update_action_holders
 from ietf.group.models import Group
 from ietf.ipr.models import IprDocRel
 from ietf.name.models import StdLevelName, StreamName
@@ -202,11 +202,14 @@ def update_drafts_from_queue(drafts):
         if prev_state != next_state:
             d.set_state(next_state)
 
-            e = add_state_change_event(d, system, prev_state, next_state)
+            e = new_state_change_event(d, system, prev_state, next_state)  # unsaved
+            if e:
+                if auth48:
+                    e.desc = re.sub(r"(<b>.*</b>)", "<a href=\"%s\">\\1</a>" % auth48, e.desc)
+                e.save()
+                events.append(e)
 
             if auth48:
-                e.desc = re.sub(r"(<b>.*</b>)", "<a href=\"%s\">\\1</a>" % auth48, e.desc)
-                e.save()
                 # Create or update the auth48 URL whether or not this is a state expected to have one.
                 d.documenturl_set.update_or_create(
                     tag_id='auth48',  # look up existing based on this field
@@ -215,8 +218,6 @@ def update_drafts_from_queue(drafts):
             else:
                 # Remove any existing auth48 URL when an update does not have one.
                 d.documenturl_set.filter(tag_id='auth48').delete()
-            if e:
-                events.append(e)
 
             changed.add(name)
 

From 35074660dc18cb2ede7c209312dfb2ab32deb740 Mon Sep 17 00:00:00 2001
From: Lars Eggert <lars@eggert.org>
Date: Wed, 18 Sep 2024 12:08:01 -0700
Subject: [PATCH 066/707] chore: Prevent test suite artifact creation in work
 directory (#6438)

* chore: Prevent test suite artifact creation in work directory

Also remove a few other stale test assets while I'm here.

* Try and fix CI

* Change IDSUBMIT_REPOSITORY_PATH

* Make the dir

* test: clean up media/nomcom directories

* test: de-dup settings_temp_path_overrides

* chore: remove debug

* refactor: avoid premature import of test_utils

* refactor: drop useless lambda wrapper

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 dev/tests/settings_local.py          |     4 +-
 docker/configs/settings_local.py     |     4 +-
 docker/scripts/app-create-dirs.sh    |     8 +-
 ietf/meeting/tests_js.py             |    11 +-
 ietf/person/factories.py             |     7 +-
 ietf/settings_test.py                |    24 +-
 ietf/utils/test_utils.py             |    13 +-
 media/.gitignore                     |     1 -
 media/photo/nopictureavailable.jpg   |   Bin 1618 -> 0 bytes
 media/photo/profile-default.jpg      |   Bin 1397 -> 0 bytes
 test/data/profile-default.jpg        |   Bin 1397 -> 0 bytes
 test/data/youtube-discovery.json     | 10879 -------------------------
 test/data/youtube-playlistid.json    |     1 -
 test/data/youtube-playlistitems.json |     1 -
 test/lib/.gitignore                  |     1 -
 test/lib/README                      |     9 -
 test/media/floor/.gitignore          |     1 -
 test/media/photo/.gitignore          |     1 -
 18 files changed, 33 insertions(+), 10932 deletions(-)
 delete mode 100644 media/.gitignore
 delete mode 100644 media/photo/nopictureavailable.jpg
 delete mode 100644 media/photo/profile-default.jpg
 delete mode 100644 test/data/profile-default.jpg
 delete mode 100644 test/data/youtube-discovery.json
 delete mode 100644 test/data/youtube-playlistid.json
 delete mode 100644 test/data/youtube-playlistitems.json
 delete mode 100644 test/lib/.gitignore
 delete mode 100644 test/lib/README
 delete mode 100644 test/media/floor/.gitignore
 delete mode 100644 test/media/photo/.gitignore

diff --git a/dev/tests/settings_local.py b/dev/tests/settings_local.py
index 8b5d90b1ec..20941359d4 100644
--- a/dev/tests/settings_local.py
+++ b/dev/tests/settings_local.py
@@ -17,8 +17,8 @@
 }
 
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
-IDSUBMIT_REPOSITORY_PATH = "test/id/"
-IDSUBMIT_STAGING_PATH = "test/staging/"
+IDSUBMIT_REPOSITORY_PATH = "/assets/ietfdata/doc/draft/repository"
+IDSUBMIT_STAGING_PATH = "/assets/www6s/staging/"
 
 AGENDA_PATH = '/assets/www6s/proceedings/'
 MEETINGHOST_LOGO_PATH = AGENDA_PATH
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index bcd04898ea..5d9859c19b 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -8,7 +8,7 @@
 from ietf.settings_postgresqldb import DATABASES   # pyflakes:ignore
 
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
-IDSUBMIT_STAGING_PATH = "test/staging/"
+IDSUBMIT_STAGING_PATH = "/assets/www6s/staging/"
 
 AGENDA_PATH = '/assets/www6s/proceedings/'
 MEETINGHOST_LOGO_PATH = AGENDA_PATH
@@ -53,7 +53,7 @@
 FTP_DIR = '/assets/ftp'
 
 NOMCOM_PUBLIC_KEYS_DIR = 'data/nomcom_keys/public_keys/'
-SLIDE_STAGING_PATH = 'test/staging/'
+SLIDE_STAGING_PATH = '/assets/www6s/staging/'
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
 
diff --git a/docker/scripts/app-create-dirs.sh b/docker/scripts/app-create-dirs.sh
index b75c57767d..50431f4793 100755
--- a/docker/scripts/app-create-dirs.sh
+++ b/docker/scripts/app-create-dirs.sh
@@ -1,13 +1,6 @@
 #!/bin/bash
 
 for sub in \
-    test/id \
-    test/staging \
-    test/archive \
-    test/rfc \
-    test/media \
-    test/wiki/ietf \
-    data/nomcom_keys/public_keys \
     /assets/archive/id \
     /assets/collection \
     /assets/collection/draft-archive \
@@ -27,6 +20,7 @@ for sub in \
     /assets/ietfdata/derived \
     /assets/ietfdata/derived/bibxml \
     /assets/ietfdata/derived/bibxml/bibxml-ids \
+    /assets/ietfdata/doc/draft/repository \
     /assets/www6s \
     /assets/www6s/staging \
     /assets/www6s/wg-descriptions \
diff --git a/ietf/meeting/tests_js.py b/ietf/meeting/tests_js.py
index 6199ed7eb5..b15aa70e73 100644
--- a/ietf/meeting/tests_js.py
+++ b/ietf/meeting/tests_js.py
@@ -5,7 +5,7 @@
 import time
 import datetime
 import shutil
-import os
+import tempfile
 import re
 
 from django.utils import timezone
@@ -939,13 +939,8 @@ def tearDown(self):
     def tempdir(self, label):
         # Borrowed from  test_utils.TestCase
         slug = slugify(self.__class__.__name__.replace('.','-'))
-        dirname = "tmp-{label}-{slug}-dir".format(**locals())
-        if 'VIRTUAL_ENV' in os.environ:
-            dirname = os.path.join(os.environ['VIRTUAL_ENV'], dirname)
-        path = os.path.abspath(dirname)
-        if not os.path.exists(path):
-            os.mkdir(path)
-        return path
+        suffix = "-{label}-{slug}-dir".format(**locals())
+        return tempfile.mkdtemp(suffix=suffix)
 
     def displayed_interims(self, groups=None):
         sessions = add_event_info_to_session_qs(
diff --git a/ietf/person/factories.py b/ietf/person/factories.py
index 2247fa9b2b..2012483c0d 100644
--- a/ietf/person/factories.py
+++ b/ietf/person/factories.py
@@ -8,7 +8,7 @@
 import faker.config
 import os
 import random
-import shutil
+from PIL import Image
 
 from unidecode import unidecode
 from unicodedata import normalize
@@ -103,10 +103,9 @@ def default_photo(obj, create, extracted, **kwargs): # pylint: disable=no-self-a
             media_name = "%s/%s.jpg" % (settings.PHOTOS_DIRNAME, photo_name)
             obj.photo = media_name
             obj.photo_thumb = media_name
-            photosrc = os.path.join(settings.TEST_DATA_DIR, "profile-default.jpg")
             photodst = os.path.join(settings.PHOTOS_DIR,  photo_name + '.jpg')
-            if not os.path.exists(photodst):
-                shutil.copy(photosrc, photodst)
+            img = Image.new('RGB', (200, 200))
+            img.save(photodst)
             def delete_file(file):
                 os.unlink(file)
             atexit.register(delete_file, photodst)
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 024512a8db..94ca22c71b 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -9,9 +9,12 @@
 #   ./manage.py test --settings=settings_test doc.ChangeStateTestCase
 #
 
-import os 
+import atexit
+import os
+import shutil
+import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import TEST_CODE_COVERAGE_CHECKER, BASE_DIR, PHOTOS_DIRNAME
+from ietf.settings import TEST_CODE_COVERAGE_CHECKER
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -48,11 +51,20 @@ def __getitem__(self, item):
 if TEST_CODE_COVERAGE_CHECKER and not TEST_CODE_COVERAGE_CHECKER._started: # pyflakes:ignore
     TEST_CODE_COVERAGE_CHECKER.start()                          # pyflakes:ignore
 
-NOMCOM_PUBLIC_KEYS_DIR=os.path.abspath("tmp-nomcom-public-keys-dir")
 
-MEDIA_ROOT = os.path.join(os.path.dirname(BASE_DIR), 'test/media/') # pyflakes:ignore
-MEDIA_URL = '/test/media/'
-PHOTOS_DIR = MEDIA_ROOT + PHOTOS_DIRNAME                            # pyflakes:ignore
+def tempdir_with_cleanup(**kwargs):
+    """Utility to create a temporary dir and arrange cleanup"""
+    _dir = tempfile.mkdtemp(**kwargs)
+    atexit.register(shutil.rmtree, _dir)
+    return _dir
+
+
+NOMCOM_PUBLIC_KEYS_DIR = tempdir_with_cleanup(suffix="-nomcom-public-keys-dir")
+
+MEDIA_ROOT = tempdir_with_cleanup(suffix="-media")
+PHOTOS_DIRNAME = "photo"
+PHOTOS_DIR = os.path.join(MEDIA_ROOT, PHOTOS_DIRNAME)
+os.mkdir(PHOTOS_DIR)
 
 # Undo any developer-dependent middleware when running the tests
 MIDDLEWARE = [ c for c in MIDDLEWARE if not c in DEV_MIDDLEWARE ] # pyflakes:ignore
diff --git a/ietf/utils/test_utils.py b/ietf/utils/test_utils.py
index ba35665a8d..86c5a0c1c3 100644
--- a/ietf/utils/test_utils.py
+++ b/ietf/utils/test_utils.py
@@ -34,7 +34,7 @@
 # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 
-import os
+import tempfile
 import re
 import email
 import html5lib
@@ -239,13 +239,8 @@ def normalize(x):
 
     def tempdir(self, label):
         slug = slugify(self.__class__.__name__.replace('.','-'))
-        dirname = "tmp-{label}-{slug}-dir".format(**locals())
-        if 'VIRTUAL_ENV' in os.environ:
-            dirname = os.path.join(os.environ['VIRTUAL_ENV'], dirname)
-        path = os.path.abspath(dirname)
-        if not os.path.exists(path):
-            os.mkdir(path)
-        return path
+        suffix = "-{label}-{slug}-dir".format(**locals())
+        return tempfile.mkdtemp(suffix=suffix)
 
     def assertNoFormPostErrors(self, response, error_css_selector=".is-invalid"):
         """Try to fish out form errors, if none found at least check the
@@ -306,7 +301,7 @@ def setUp(self):
 
         # Replace settings paths with temporary directories.
         self._ietf_temp_dirs = {}  # trashed during tearDown, DO NOT put paths you care about in this
-        for setting in self.settings_temp_path_overrides:
+        for setting in set(self.settings_temp_path_overrides):
             self._ietf_temp_dirs[setting] = self.tempdir(slugify(setting))
         self._ietf_saved_context = django.test.utils.override_settings(**self._ietf_temp_dirs)
         self._ietf_saved_context.enable()
diff --git a/media/.gitignore b/media/.gitignore
deleted file mode 100644
index dfa8ca37ce..0000000000
--- a/media/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-/floor
diff --git a/media/photo/nopictureavailable.jpg b/media/photo/nopictureavailable.jpg
deleted file mode 100644
index 0895f9f57c74c6199a8eed323d71fe1caae52c9e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1618
zcmeH|+dmTu0LM3)<nCZ1%TOm}$keE53nO!%nY-LpE*YYu#N0NSa*b9<<D8DdBrJ+7
zcS`u2Qpq(dZA>k;R%}$~pEytF;rIK#{T{wAzdTR(6Uqv@3IG5=8S8}c`bFZuk(c|`
z37l)*0KhioXnT84ti3(dGco>jbnGbrz`CG-5FDjP&_s16MH=lH!^a-VId>PWyjQu@
z=THr+BV%?J5l6=&rVM#R@#nD{Psgk+J2z`Q96Zx3mMb;;pR{K}jlZf+qgdwG6!uO{
zK#ftX?-Wnom0Er|(y~0dqj~Ps=QLrJ;8yDAN09;$?@_%Uy+jiTuDEBa4d*1~7SWEG
z6jO7nwdHDjaS)T>I#(HlhvNAMf%EpgsUdG)&2BLo+Z`cV(6jpCtsn0y(u#mz?hr<j
zffqMQ^wG-!yT#$Wc8lZv<`*9>M7-%sLZuf(pZ);jyrh8$_!!!CwW8+(-yM}C7WZF=
zRJ+CS>v@ZRhFAVETiu)>2-{+idZKcKq`o`j<qQ;65EdjcIlPy<fa`auzshiw%5%<;
z$ZdM>rs<U>>S(#*nYoIlT6F;?h&jEzp3S)3_~5cZI+uzN!Z@b1aVzdKe9vS<ed)l>
zp5*@a!vSk+$Zg$u9f1|ALx~a+{?;0Iartn?NNNg3y74&0NlZ>;9Qm}A#uHNMrrV`|
zUoWF*^;2jWHIBAoE@!KG##v2PCq{P>n_+hKFO@*^_rauE-nfgBw$+5b3z)x=<yHLy
z(|RQ_v&mns0heFkF=hH_nZJ%37}HK;q~#zQvNG7ptvf)*HxA}@DY*H`suPWm%guu)
zqv|Lsa&XN?O`XdjHK(<Aal38Sj<U)}d)U2YTf@U4l=X*WtOLYcR5rLpS6avfzdW_t
zkP{T4flh~6$)JDNf&TWEGJX<{6_=ca0}WFy+qj8K^;$HDf{jV%Scj7~R<Ac7=UaN!
zRyxccVRcrA{;)jY8iaqtgsHS$G8)-00R?wS2Sb{JmS9%6HjYkJhws>W$U0vN7n?|9
zZokX;;JezMI27=_v&FS<CDt$LJVBQv_a6M^pYnmc0f_MI>IYv{$8`GBa&D6-*v3EJ
zOvRCT9kda%?xW*gfMJR#qFffNYaiKobFgca{ER$G9wYYz%akBTs@}5~%o6mILI%Y#
zLfwG*RB+19_Q)mr8K$#=QLNT(aAGfF0T%{e+ovQSVTYT{qBrs-V21gvV-S@H{f~Df
zL2NT0V4kE|M&!0dAb2k&l<kN3#JgFuZ8h@u*c0>15Z>P&`U-0duX!wbMXTYFc#XQ|
z30u|N*4pH1l8i(Oc~uwJ;<fxDVva21|MF-YUwKsPyvvKyaNQ=v0eZzUk9K$GrD4~?
zD17b|DPR{!FefS!Rl++}H3H2}+>|JFv(c+75;IOA3qaS)%o;L^+d2Mh`y9wxNS$h#
z?tzpzr76Cf__iW`vH`!4zB#cp)1SoTnr1$*LRLMQ7o2;II{u>p5Lu7`tY)MUJVUqQ
z0RR~Q7Gvvu0r;uZLZR=V=D^fd{(2^A2py^jjCW{&8()!)FE06#D%d1{JvP|QwXj+;
zY|r9f@H<mA@7~k>d}iV#4az7686bOo)NGF$DB2}c8==|f?7-9&`9RxkOH`QrTlKbV
z`4>C<)mn^VLF%_PTA;)elM04T`-rx~h4-~E#qPt|#gH%)8no*Fq5r@UKi@Jb9qAz3
erH0!=i&Q7I<(v2jXU|_>0l+%AWA537X8#0-_TYm6

diff --git a/media/photo/profile-default.jpg b/media/photo/profile-default.jpg
deleted file mode 100644
index d6b03e100415a0fa9effad25c793f33957929e2d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1397
zcmex=<NpH&0WUXCHwH#VMg|WcWcYuZ!I^=X2?RhSGZ3(_v48*v8yhPdCkGc7CkH1d
z7Y{!V7dIa_Cnv8UFCV{vfS>>ukC3pCfH06P05XITq?4J21E^7eo0A(TN+S4wfI*Oh
zA%!7@nNf*>Nsy6Qkn#T!25GQUnSsuQ0}gg37NE<3k~RVijLbkcb24+YLKHAEFfjuq
z*##916FG#0B^(2Tr#w_DY!neSG7m~hE-G2LQQ6pe;^vD$-6F__LQDsV3L;qr6}`p4
z!wfW8kXewyp5ekpK}JCV!P>Ier_+?rbWdKHE7*~#p#0QyQ}e|`{OR`!-(>uFVYbSi
z_fx^?Y8{@R=lZJ8ddOYb8nkom^=1i&%Z=CXH95KFgg%)Tdd($qGTX%sg3C5qe%w(L
z^&rfD#+(`RU43<LGlcpEDYL%c9wLyU{NeuQ;O~C-RNgq+FM6s{<gC1CYG3jV@0jbn
z+#dHh-e`9*DJdu^0SUdglP*Tq?+J|5eap9U{oE-ZnRm~5#J0TQdho%LX%kOAn`X7<
z#umva8HH4r1#%y`5Bz6vdHumL{2`BK*1?LZ$$Ynzc-v;qviz0tGR5A@y-+>>?GDyA
zi-2ZxuAlNP?sD`i&5v(aF-m8r{<J-~R*G-BQ>5D5cMQ!(_%4O9t>yW>v~RuU`$cX|
zNhwBKzKfkX{3pv!OW(o8g~bI(ur4nu_;qdjzj@35xu$7*Joy+ZYL<P=WgYL!n}Ncf
zzum+I|70|s04a9-u=C;9;Ew%%=YMT<)w*zg){2!yi~gh*$Z9KfF5Y`?X7hgr|AVeC
zI64|SI)KFPYuZP{<o5>L*YKNsA;djUZg*#P<Ao1a8R4!1@i&V8GvppMv$FoXEKyZA
z$H`5gY|FPT-vvrp%A5A8ntk$}x8lzGFUK-{tur50^v|hme0n@@_SOq^rzSbL#A;t&
zk~?efh3TBECQFy@KKM-5<WV!jQ{UbPbFWwkH5Gh!`WPL1*537&pftZM_Z)Yzm2Zn@
zMJ}KEImGLy>cpextM7Qv@%!X?FPsG&04%Owb|~v@3`+>FnaqFt^rGa3S*v`bS?p)t
z{lm7riGOx>%y+h}OD2^t@Ge=qSl7}bZX>^I`LVWW-yJWWU1nVBbGXC)w%mV)?1p>W
zc($GRqun4aTeC*o`+(G}lQT>@{t26#-`{$tTCA`6?BO4I$6IqZ-YWRJO-d``yOG)3
z!ry+@cPb`%eVHgAD99E+Gm^W_@Vs~NHnu2zy{pG6X8zT@`=dv8`CHz-zupCXGdwV3
zK2uCx-jTBF2V(qPjcZq=F>md^Q+xY(2G_?}>8pJgJJx=>l|Su;cBY!#ouKW3?`0SC
z9WrZ?pTA<e&FLrCi?@_)?_o>X5!f5^i+ygEl6=8`h6x3~;%6paa#b<1l3ZL;WO#I4
zc3bO`e3mj1nLt6t=$+;wfvIh>f^OH?15J<5GP!zWuK%7Dof+SF{+*FAPg}g<w(9n-
zD2bLp_RGa{&&ocJU7<52$UJh+`HySo1z)u~^Q^u%=hM6u+7t>-RVtd+rSaJ=Std8L
zR)nwIB=cNZd**v<rl;4^jsIk)Px%_p*;Cm2TsF@4*Pj=@ft?$LMQV<Hj$Sw0PQ%6o
Ol*}Pf4QI*!zX<?xt}tl;

diff --git a/test/data/profile-default.jpg b/test/data/profile-default.jpg
deleted file mode 100644
index d6b03e100415a0fa9effad25c793f33957929e2d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1397
zcmex=<NpH&0WUXCHwH#VMg|WcWcYuZ!I^=X2?RhSGZ3(_v48*v8yhPdCkGc7CkH1d
z7Y{!V7dIa_Cnv8UFCV{vfS>>ukC3pCfH06P05XITq?4J21E^7eo0A(TN+S4wfI*Oh
zA%!7@nNf*>Nsy6Qkn#T!25GQUnSsuQ0}gg37NE<3k~RVijLbkcb24+YLKHAEFfjuq
z*##916FG#0B^(2Tr#w_DY!neSG7m~hE-G2LQQ6pe;^vD$-6F__LQDsV3L;qr6}`p4
z!wfW8kXewyp5ekpK}JCV!P>Ier_+?rbWdKHE7*~#p#0QyQ}e|`{OR`!-(>uFVYbSi
z_fx^?Y8{@R=lZJ8ddOYb8nkom^=1i&%Z=CXH95KFgg%)Tdd($qGTX%sg3C5qe%w(L
z^&rfD#+(`RU43<LGlcpEDYL%c9wLyU{NeuQ;O~C-RNgq+FM6s{<gC1CYG3jV@0jbn
z+#dHh-e`9*DJdu^0SUdglP*Tq?+J|5eap9U{oE-ZnRm~5#J0TQdho%LX%kOAn`X7<
z#umva8HH4r1#%y`5Bz6vdHumL{2`BK*1?LZ$$Ynzc-v;qviz0tGR5A@y-+>>?GDyA
zi-2ZxuAlNP?sD`i&5v(aF-m8r{<J-~R*G-BQ>5D5cMQ!(_%4O9t>yW>v~RuU`$cX|
zNhwBKzKfkX{3pv!OW(o8g~bI(ur4nu_;qdjzj@35xu$7*Joy+ZYL<P=WgYL!n}Ncf
zzum+I|70|s04a9-u=C;9;Ew%%=YMT<)w*zg){2!yi~gh*$Z9KfF5Y`?X7hgr|AVeC
zI64|SI)KFPYuZP{<o5>L*YKNsA;djUZg*#P<Ao1a8R4!1@i&V8GvppMv$FoXEKyZA
z$H`5gY|FPT-vvrp%A5A8ntk$}x8lzGFUK-{tur50^v|hme0n@@_SOq^rzSbL#A;t&
zk~?efh3TBECQFy@KKM-5<WV!jQ{UbPbFWwkH5Gh!`WPL1*537&pftZM_Z)Yzm2Zn@
zMJ}KEImGLy>cpextM7Qv@%!X?FPsG&04%Owb|~v@3`+>FnaqFt^rGa3S*v`bS?p)t
z{lm7riGOx>%y+h}OD2^t@Ge=qSl7}bZX>^I`LVWW-yJWWU1nVBbGXC)w%mV)?1p>W
zc($GRqun4aTeC*o`+(G}lQT>@{t26#-`{$tTCA`6?BO4I$6IqZ-YWRJO-d``yOG)3
z!ry+@cPb`%eVHgAD99E+Gm^W_@Vs~NHnu2zy{pG6X8zT@`=dv8`CHz-zupCXGdwV3
zK2uCx-jTBF2V(qPjcZq=F>md^Q+xY(2G_?}>8pJgJJx=>l|Su;cBY!#ouKW3?`0SC
z9WrZ?pTA<e&FLrCi?@_)?_o>X5!f5^i+ygEl6=8`h6x3~;%6paa#b<1l3ZL;WO#I4
zc3bO`e3mj1nLt6t=$+;wfvIh>f^OH?15J<5GP!zWuK%7Dof+SF{+*FAPg}g<w(9n-
zD2bLp_RGa{&&ocJU7<52$UJh+`HySo1z)u~^Q^u%=hM6u+7t>-RVtd+rSaJ=Std8L
zR)nwIB=cNZd**v<rl;4^jsIk)Px%_p*;Cm2TsF@4*Pj=@ft?$LMQV<Hj$Sw0PQ%6o
Ol*}Pf4QI*!zX<?xt}tl;

diff --git a/test/data/youtube-discovery.json b/test/data/youtube-discovery.json
deleted file mode 100644
index 983e1650c2..0000000000
--- a/test/data/youtube-discovery.json
+++ /dev/null
@@ -1,10879 +0,0 @@
-{
- "kind": "discovery#restDescription",
- "etag": "\"YWOzh2SDasdU84ArJnpYek-OMdg/f81k8b4sv9uLeywfoj2KpL2xcPg\"",
- "discoveryVersion": "v1",
- "id": "youtube:v3",
- "name": "youtube",
- "canonicalName": "YouTube",
- "version": "v3",
- "revision": "20170130",
- "title": "YouTube Data API",
- "description": "Supports core YouTube features, such as uploading videos, creating and managing playlists, searching for content, and much more.",
- "ownerDomain": "google.com",
- "ownerName": "Google",
- "icons": {
-  "x16": "https://www.google.com/images/icons/product/youtube-16.png",
-  "x32": "https://www.google.com/images/icons/product/youtube-32.png"
- },
- "documentationLink": "https://developers.google.com/youtube/v3",
- "protocol": "rest",
- "baseUrl": "https://www.googleapis.com/youtube/v3/",
- "basePath": "/youtube/v3/",
- "rootUrl": "https://www.googleapis.com/",
- "servicePath": "youtube/v3/",
- "batchPath": "batch",
- "parameters": {
-  "alt": {
-   "type": "string",
-   "description": "Data format for the response.",
-   "default": "json",
-   "enum": [
-    "json"
-   ],
-   "enumDescriptions": [
-    "Responses with Content-Type of application/json"
-   ],
-   "location": "query"
-  },
-  "fields": {
-   "type": "string",
-   "description": "Selector specifying which fields to include in a partial response.",
-   "location": "query"
-  },
-  "key": {
-   "type": "string",
-   "description": "API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.",
-   "location": "query"
-  },
-  "oauth_token": {
-   "type": "string",
-   "description": "OAuth 2.0 token for the current user.",
-   "location": "query"
-  },
-  "prettyPrint": {
-   "type": "boolean",
-   "description": "Returns response with indentations and line breaks.",
-   "default": "true",
-   "location": "query"
-  },
-  "quotaUser": {
-   "type": "string",
-   "description": "Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. Overrides userIp if both are provided.",
-   "location": "query"
-  },
-  "userIp": {
-   "type": "string",
-   "description": "IP address of the site where the request originates. Use this if you want to enforce per-user limits.",
-   "location": "query"
-  }
- },
- "auth": {
-  "oauth2": {
-   "scopes": {
-    "https://www.googleapis.com/auth/youtube": {
-     "description": "Manage your YouTube account"
-    },
-    "https://www.googleapis.com/auth/youtube.force-ssl": {
-     "description": "Manage your YouTube account"
-    },
-    "https://www.googleapis.com/auth/youtube.readonly": {
-     "description": "View your YouTube account"
-    },
-    "https://www.googleapis.com/auth/youtube.upload": {
-     "description": "Manage your YouTube videos"
-    },
-    "https://www.googleapis.com/auth/youtubepartner": {
-     "description": "View and manage your assets and associated content on YouTube"
-    },
-    "https://www.googleapis.com/auth/youtubepartner-channel-audit": {
-     "description": "View private information of your YouTube channel relevant during the audit process with a YouTube partner"
-    }
-   }
-  }
- },
- "schemas": {
-  "AccessPolicy": {
-   "id": "AccessPolicy",
-   "type": "object",
-   "description": "Rights management policy for YouTube resources.",
-   "properties": {
-    "allowed": {
-     "type": "boolean",
-     "description": "The value of allowed indicates whether the access to the policy is allowed or denied by default."
-    },
-    "exception": {
-     "type": "array",
-     "description": "A list of region codes that identify countries where the default policy do not apply.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "Activity": {
-   "id": "Activity",
-   "type": "object",
-   "description": "An activity resource contains information about an action that a particular channel, or user, has taken on YouTube.The actions reported in activity feeds include rating a video, sharing a video, marking a video as a favorite, commenting on a video, uploading a video, and so forth. Each activity resource identifies the type of action, the channel associated with the action, and the resource(s) associated with the action, such as the video that was rated or uploaded.",
-   "properties": {
-    "contentDetails": {
-     "$ref": "ActivityContentDetails",
-     "description": "The contentDetails object contains information about the content associated with the activity. For example, if the snippet.type value is videoRated, then the contentDetails object's content identifies the rated video."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the activity."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#activity\".",
-     "default": "youtube#activity"
-    },
-    "snippet": {
-     "$ref": "ActivitySnippet",
-     "description": "The snippet object contains basic details about the activity, including the activity's type and group ID."
-    }
-   }
-  },
-  "ActivityContentDetails": {
-   "id": "ActivityContentDetails",
-   "type": "object",
-   "description": "Details about the content of an activity: the video that was shared, the channel that was subscribed to, etc.",
-   "properties": {
-    "bulletin": {
-     "$ref": "ActivityContentDetailsBulletin",
-     "description": "The bulletin object contains details about a channel bulletin post. This object is only present if the snippet.type is bulletin."
-    },
-    "channelItem": {
-     "$ref": "ActivityContentDetailsChannelItem",
-     "description": "The channelItem object contains details about a resource which was added to a channel. This property is only present if the snippet.type is channelItem."
-    },
-    "comment": {
-     "$ref": "ActivityContentDetailsComment",
-     "description": "The comment object contains information about a resource that received a comment. This property is only present if the snippet.type is comment."
-    },
-    "favorite": {
-     "$ref": "ActivityContentDetailsFavorite",
-     "description": "The favorite object contains information about a video that was marked as a favorite video. This property is only present if the snippet.type is favorite."
-    },
-    "like": {
-     "$ref": "ActivityContentDetailsLike",
-     "description": "The like object contains information about a resource that received a positive (like) rating. This property is only present if the snippet.type is like."
-    },
-    "playlistItem": {
-     "$ref": "ActivityContentDetailsPlaylistItem",
-     "description": "The playlistItem object contains information about a new playlist item. This property is only present if the snippet.type is playlistItem."
-    },
-    "promotedItem": {
-     "$ref": "ActivityContentDetailsPromotedItem",
-     "description": "The promotedItem object contains details about a resource which is being promoted. This property is only present if the snippet.type is promotedItem."
-    },
-    "recommendation": {
-     "$ref": "ActivityContentDetailsRecommendation",
-     "description": "The recommendation object contains information about a recommended resource. This property is only present if the snippet.type is recommendation."
-    },
-    "social": {
-     "$ref": "ActivityContentDetailsSocial",
-     "description": "The social object contains details about a social network post. This property is only present if the snippet.type is social."
-    },
-    "subscription": {
-     "$ref": "ActivityContentDetailsSubscription",
-     "description": "The subscription object contains information about a channel that a user subscribed to. This property is only present if the snippet.type is subscription."
-    },
-    "upload": {
-     "$ref": "ActivityContentDetailsUpload",
-     "description": "The upload object contains information about the uploaded video. This property is only present if the snippet.type is upload."
-    }
-   }
-  },
-  "ActivityContentDetailsBulletin": {
-   "id": "ActivityContentDetailsBulletin",
-   "type": "object",
-   "description": "Details about a channel bulletin post.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the resource associated with a bulletin post."
-    }
-   }
-  },
-  "ActivityContentDetailsChannelItem": {
-   "id": "ActivityContentDetailsChannelItem",
-   "type": "object",
-   "description": "Details about a resource which was added to a channel.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the resource that was added to the channel."
-    }
-   }
-  },
-  "ActivityContentDetailsComment": {
-   "id": "ActivityContentDetailsComment",
-   "type": "object",
-   "description": "Information about a resource that received a comment.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the resource associated with the comment."
-    }
-   }
-  },
-  "ActivityContentDetailsFavorite": {
-   "id": "ActivityContentDetailsFavorite",
-   "type": "object",
-   "description": "Information about a video that was marked as a favorite video.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the resource that was marked as a favorite."
-    }
-   }
-  },
-  "ActivityContentDetailsLike": {
-   "id": "ActivityContentDetailsLike",
-   "type": "object",
-   "description": "Information about a resource that received a positive (like) rating.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the rated resource."
-    }
-   }
-  },
-  "ActivityContentDetailsPlaylistItem": {
-   "id": "ActivityContentDetailsPlaylistItem",
-   "type": "object",
-   "description": "Information about a new playlist item.",
-   "properties": {
-    "playlistId": {
-     "type": "string",
-     "description": "The value that YouTube uses to uniquely identify the playlist."
-    },
-    "playlistItemId": {
-     "type": "string",
-     "description": "ID of the item within the playlist."
-    },
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information about the resource that was added to the playlist."
-    }
-   }
-  },
-  "ActivityContentDetailsPromotedItem": {
-   "id": "ActivityContentDetailsPromotedItem",
-   "type": "object",
-   "description": "Details about a resource which is being promoted.",
-   "properties": {
-    "adTag": {
-     "type": "string",
-     "description": "The URL the client should fetch to request a promoted item."
-    },
-    "clickTrackingUrl": {
-     "type": "string",
-     "description": "The URL the client should ping to indicate that the user clicked through on this promoted item."
-    },
-    "creativeViewUrl": {
-     "type": "string",
-     "description": "The URL the client should ping to indicate that the user was shown this promoted item."
-    },
-    "ctaType": {
-     "type": "string",
-     "description": "The type of call-to-action, a message to the user indicating action that can be taken.",
-     "enum": [
-      "unspecified",
-      "visitAdvertiserSite"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "customCtaButtonText": {
-     "type": "string",
-     "description": "The custom call-to-action button text. If specified, it will override the default button text for the cta_type."
-    },
-    "descriptionText": {
-     "type": "string",
-     "description": "The text description to accompany the promoted item."
-    },
-    "destinationUrl": {
-     "type": "string",
-     "description": "The URL the client should direct the user to, if the user chooses to visit the advertiser's website."
-    },
-    "forecastingUrl": {
-     "type": "array",
-     "description": "The list of forecasting URLs. The client should ping all of these URLs when a promoted item is not available, to indicate that a promoted item could have been shown.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "impressionUrl": {
-     "type": "array",
-     "description": "The list of impression URLs. The client should ping all of these URLs to indicate that the user was shown this promoted item.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the promoted video."
-    }
-   }
-  },
-  "ActivityContentDetailsRecommendation": {
-   "id": "ActivityContentDetailsRecommendation",
-   "type": "object",
-   "description": "Information that identifies the recommended resource.",
-   "properties": {
-    "reason": {
-     "type": "string",
-     "description": "The reason that the resource is recommended to the user.",
-     "enum": [
-      "unspecified",
-      "videoFavorited",
-      "videoLiked",
-      "videoWatched"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the recommended resource."
-    },
-    "seedResourceId": {
-     "$ref": "ResourceId",
-     "description": "The seedResourceId object contains information about the resource that caused the recommendation."
-    }
-   }
-  },
-  "ActivityContentDetailsSocial": {
-   "id": "ActivityContentDetailsSocial",
-   "type": "object",
-   "description": "Details about a social network post.",
-   "properties": {
-    "author": {
-     "type": "string",
-     "description": "The author of the social network post."
-    },
-    "imageUrl": {
-     "type": "string",
-     "description": "An image of the post's author."
-    },
-    "referenceUrl": {
-     "type": "string",
-     "description": "The URL of the social network post."
-    },
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object encapsulates information that identifies the resource associated with a social network post."
-    },
-    "type": {
-     "type": "string",
-     "description": "The name of the social network.",
-     "enum": [
-      "facebook",
-      "googlePlus",
-      "twitter",
-      "unspecified"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "ActivityContentDetailsSubscription": {
-   "id": "ActivityContentDetailsSubscription",
-   "type": "object",
-   "description": "Information about a channel that a user subscribed to.",
-   "properties": {
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The resourceId object contains information that identifies the resource that the user subscribed to."
-    }
-   }
-  },
-  "ActivityContentDetailsUpload": {
-   "id": "ActivityContentDetailsUpload",
-   "type": "object",
-   "description": "Information about the uploaded video.",
-   "properties": {
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the uploaded video."
-    }
-   }
-  },
-  "ActivityListResponse": {
-   "id": "ActivityListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of activities, or events, that match the request criteria.",
-     "items": {
-      "$ref": "Activity"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#activityListResponse\".",
-     "default": "youtube#activityListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "ActivitySnippet": {
-   "id": "ActivitySnippet",
-   "type": "object",
-   "description": "Basic details about an activity, including title, description, thumbnails, activity type and group.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel associated with the activity."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "Channel title for the channel responsible for this activity"
-    },
-    "description": {
-     "type": "string",
-     "description": "The description of the resource primarily associated with the activity.",
-     "annotations": {
-      "required": [
-       "youtube.activities.insert"
-      ]
-     }
-    },
-    "groupId": {
-     "type": "string",
-     "description": "The group ID associated with the activity. A group ID identifies user events that are associated with the same user and resource. For example, if a user rates a video and marks the same video as a favorite, the entries for those events would have the same group ID in the user's activity feed. In your user interface, you can avoid repetition by grouping events with the same groupId value."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the video was uploaded. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the resource that is primarily associated with the activity. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The title of the resource primarily associated with the activity."
-    },
-    "type": {
-     "type": "string",
-     "description": "The type of activity that the resource describes.",
-     "enum": [
-      "bulletin",
-      "channelItem",
-      "comment",
-      "favorite",
-      "like",
-      "playlistItem",
-      "promotedItem",
-      "recommendation",
-      "social",
-      "subscription",
-      "upload"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "Caption": {
-   "id": "Caption",
-   "type": "object",
-   "description": "A caption resource represents a YouTube caption track. A caption track is associated with exactly one YouTube video.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the caption track.",
-     "annotations": {
-      "required": [
-       "youtube.captions.update"
-      ]
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#caption\".",
-     "default": "youtube#caption"
-    },
-    "snippet": {
-     "$ref": "CaptionSnippet",
-     "description": "The snippet object contains basic details about the caption."
-    }
-   }
-  },
-  "CaptionListResponse": {
-   "id": "CaptionListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of captions that match the request criteria.",
-     "items": {
-      "$ref": "Caption"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#captionListResponse\".",
-     "default": "youtube#captionListResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "CaptionSnippet": {
-   "id": "CaptionSnippet",
-   "type": "object",
-   "description": "Basic details about a caption track, such as its language and name.",
-   "properties": {
-    "audioTrackType": {
-     "type": "string",
-     "description": "The type of audio track associated with the caption track.",
-     "enum": [
-      "commentary",
-      "descriptive",
-      "primary",
-      "unknown"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "failureReason": {
-     "type": "string",
-     "description": "The reason that YouTube failed to process the caption track. This property is only present if the state property's value is failed.",
-     "enum": [
-      "processingFailed",
-      "unknownFormat",
-      "unsupportedFormat"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "isAutoSynced": {
-     "type": "boolean",
-     "description": "Indicates whether YouTube synchronized the caption track to the audio track in the video. The value will be true if a sync was explicitly requested when the caption track was uploaded. For example, when calling the captions.insert or captions.update methods, you can set the sync parameter to true to instruct YouTube to sync the uploaded track to the video. If the value is false, YouTube uses the time codes in the uploaded caption track to determine when to display captions."
-    },
-    "isCC": {
-     "type": "boolean",
-     "description": "Indicates whether the track contains closed captions for the deaf and hard of hearing. The default value is false."
-    },
-    "isDraft": {
-     "type": "boolean",
-     "description": "Indicates whether the caption track is a draft. If the value is true, then the track is not publicly visible. The default value is false."
-    },
-    "isEasyReader": {
-     "type": "boolean",
-     "description": "Indicates whether caption track is formatted for \"easy reader,\" meaning it is at a third-grade level for language learners. The default value is false."
-    },
-    "isLarge": {
-     "type": "boolean",
-     "description": "Indicates whether the caption track uses large text for the vision-impaired. The default value is false."
-    },
-    "language": {
-     "type": "string",
-     "description": "The language of the caption track. The property value is a BCP-47 language tag.",
-     "annotations": {
-      "required": [
-       "youtube.captions.insert"
-      ]
-     }
-    },
-    "lastUpdated": {
-     "type": "string",
-     "description": "The date and time when the caption track was last updated. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "name": {
-     "type": "string",
-     "description": "The name of the caption track. The name is intended to be visible to the user as an option during playback.",
-     "annotations": {
-      "required": [
-       "youtube.captions.insert"
-      ]
-     }
-    },
-    "status": {
-     "type": "string",
-     "description": "The caption track's status.",
-     "enum": [
-      "failed",
-      "serving",
-      "syncing"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "trackKind": {
-     "type": "string",
-     "description": "The caption track's type.",
-     "enum": [
-      "ASR",
-      "forced",
-      "standard"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the video associated with the caption track.",
-     "annotations": {
-      "required": [
-       "youtube.captions.insert"
-      ]
-     }
-    }
-   }
-  },
-  "CdnSettings": {
-   "id": "CdnSettings",
-   "type": "object",
-   "description": "Brief description of the live stream cdn settings.",
-   "properties": {
-    "format": {
-     "type": "string",
-     "description": "The format of the video stream that you are sending to Youtube.",
-     "annotations": {
-      "required": [
-       "youtube.liveStreams.insert",
-       "youtube.liveStreams.update"
-      ]
-     }
-    },
-    "frameRate": {
-     "type": "string",
-     "description": "The frame rate of the inbound video data.",
-     "enum": [
-      "30fps",
-      "60fps"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "ingestionInfo": {
-     "$ref": "IngestionInfo",
-     "description": "The ingestionInfo object contains information that YouTube provides that you need to transmit your RTMP or HTTP stream to YouTube."
-    },
-    "ingestionType": {
-     "type": "string",
-     "description": "The method or protocol used to transmit the video stream.",
-     "enum": [
-      "dash",
-      "rtmp"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ],
-     "annotations": {
-      "required": [
-       "youtube.liveStreams.insert",
-       "youtube.liveStreams.update"
-      ]
-     }
-    },
-    "resolution": {
-     "type": "string",
-     "description": "The resolution of the inbound video data.",
-     "enum": [
-      "1080p",
-      "1440p",
-      "2160p",
-      "240p",
-      "360p",
-      "480p",
-      "720p"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "Channel": {
-   "id": "Channel",
-   "type": "object",
-   "description": "A channel resource contains information about a YouTube channel.",
-   "properties": {
-    "auditDetails": {
-     "$ref": "ChannelAuditDetails",
-     "description": "The auditionDetails object encapsulates channel data that is relevant for YouTube Partners during the audition process."
-    },
-    "brandingSettings": {
-     "$ref": "ChannelBrandingSettings",
-     "description": "The brandingSettings object encapsulates information about the branding of the channel."
-    },
-    "contentDetails": {
-     "$ref": "ChannelContentDetails",
-     "description": "The contentDetails object encapsulates information about the channel's content."
-    },
-    "contentOwnerDetails": {
-     "$ref": "ChannelContentOwnerDetails",
-     "description": "The contentOwnerDetails object encapsulates channel data that is relevant for YouTube Partners linked with the channel."
-    },
-    "conversionPings": {
-     "$ref": "ChannelConversionPings",
-     "description": "The conversionPings object encapsulates information about conversion pings that need to be respected by the channel."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel."
-    },
-    "invideoPromotion": {
-     "$ref": "InvideoPromotion",
-     "description": "The invideoPromotion object encapsulates information about promotion campaign associated with the channel."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#channel\".",
-     "default": "youtube#channel"
-    },
-    "localizations": {
-     "type": "object",
-     "description": "Localizations for different languages",
-     "additionalProperties": {
-      "$ref": "ChannelLocalization",
-      "description": "The language tag, using string since map_key require simple types."
-     }
-    },
-    "snippet": {
-     "$ref": "ChannelSnippet",
-     "description": "The snippet object contains basic details about the channel, such as its title, description, and thumbnail images."
-    },
-    "statistics": {
-     "$ref": "ChannelStatistics",
-     "description": "The statistics object encapsulates statistics for the channel."
-    },
-    "status": {
-     "$ref": "ChannelStatus",
-     "description": "The status object encapsulates information about the privacy status of the channel."
-    },
-    "topicDetails": {
-     "$ref": "ChannelTopicDetails",
-     "description": "The topicDetails object encapsulates information about Freebase topics associated with the channel."
-    }
-   }
-  },
-  "ChannelAuditDetails": {
-   "id": "ChannelAuditDetails",
-   "type": "object",
-   "description": "The auditDetails object encapsulates channel data that is relevant for YouTube Partners during the audit process.",
-   "properties": {
-    "communityGuidelinesGoodStanding": {
-     "type": "boolean",
-     "description": "Whether or not the channel respects the community guidelines."
-    },
-    "contentIdClaimsGoodStanding": {
-     "type": "boolean",
-     "description": "Whether or not the channel has any unresolved claims."
-    },
-    "copyrightStrikesGoodStanding": {
-     "type": "boolean",
-     "description": "Whether or not the channel has any copyright strikes."
-    },
-    "overallGoodStanding": {
-     "type": "boolean",
-     "description": "Describes the general state of the channel. This field will always show if there are any issues whatsoever with the channel. Currently this field represents the result of the logical and operation over the community guidelines good standing, the copyright strikes good standing and the content ID claims good standing, but this may change in the future."
-    }
-   }
-  },
-  "ChannelBannerResource": {
-   "id": "ChannelBannerResource",
-   "type": "object",
-   "description": "A channel banner returned as the response to a channel_banner.insert call.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#channelBannerResource\".",
-     "default": "youtube#channelBannerResource"
-    },
-    "url": {
-     "type": "string",
-     "description": "The URL of this banner image."
-    }
-   }
-  },
-  "ChannelBrandingSettings": {
-   "id": "ChannelBrandingSettings",
-   "type": "object",
-   "description": "Branding properties of a YouTube channel.",
-   "properties": {
-    "channel": {
-     "$ref": "ChannelSettings",
-     "description": "Branding properties for the channel view."
-    },
-    "hints": {
-     "type": "array",
-     "description": "Additional experimental branding properties.",
-     "items": {
-      "$ref": "PropertyValue"
-     }
-    },
-    "image": {
-     "$ref": "ImageSettings",
-     "description": "Branding properties for branding images."
-    },
-    "watch": {
-     "$ref": "WatchSettings",
-     "description": "Branding properties for the watch page."
-    }
-   }
-  },
-  "ChannelContentDetails": {
-   "id": "ChannelContentDetails",
-   "type": "object",
-   "description": "Details about the content of a channel.",
-   "properties": {
-    "relatedPlaylists": {
-     "type": "object",
-     "properties": {
-      "favorites": {
-       "type": "string",
-       "description": "The ID of the playlist that contains the channel\"s favorite videos. Use the  playlistItems.insert and  playlistItems.delete to add or remove items from that list."
-      },
-      "likes": {
-       "type": "string",
-       "description": "The ID of the playlist that contains the channel\"s liked videos. Use the   playlistItems.insert and  playlistItems.delete to add or remove items from that list."
-      },
-      "uploads": {
-       "type": "string",
-       "description": "The ID of the playlist that contains the channel\"s uploaded videos. Use the  videos.insert method to upload new videos and the videos.delete method to delete previously uploaded videos."
-      },
-      "watchHistory": {
-       "type": "string",
-       "description": "The ID of the playlist that contains the channel\"s watch history. Use the  playlistItems.insert and  playlistItems.delete to add or remove items from that list."
-      },
-      "watchLater": {
-       "type": "string",
-       "description": "The ID of the playlist that contains the channel\"s watch later playlist. Use the playlistItems.insert and  playlistItems.delete to add or remove items from that list."
-      }
-     }
-    }
-   }
-  },
-  "ChannelContentOwnerDetails": {
-   "id": "ChannelContentOwnerDetails",
-   "type": "object",
-   "description": "The contentOwnerDetails object encapsulates channel data that is relevant for YouTube Partners linked with the channel.",
-   "properties": {
-    "contentOwner": {
-     "type": "string",
-     "description": "The ID of the content owner linked to the channel."
-    },
-    "timeLinked": {
-     "type": "string",
-     "description": "The date and time of when the channel was linked to the content owner. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    }
-   }
-  },
-  "ChannelConversionPing": {
-   "id": "ChannelConversionPing",
-   "type": "object",
-   "description": "Pings that the app shall fire (authenticated by biscotti cookie). Each ping has a context, in which the app must fire the ping, and a url identifying the ping.",
-   "properties": {
-    "context": {
-     "type": "string",
-     "description": "Defines the context of the ping.",
-     "enum": [
-      "cview",
-      "subscribe",
-      "unsubscribe"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "conversionUrl": {
-     "type": "string",
-     "description": "The url (without the schema) that the player shall send the ping to. It's at caller's descretion to decide which schema to use (http vs https) Example of a returned url: //googleads.g.doubleclick.net/pagead/ viewthroughconversion/962985656/?data=path%3DtHe_path%3Btype%3D cview%3Butuid%3DGISQtTNGYqaYl4sKxoVvKA&labe=default The caller must append biscotti authentication (ms param in case of mobile, for example) to this ping."
-    }
-   }
-  },
-  "ChannelConversionPings": {
-   "id": "ChannelConversionPings",
-   "type": "object",
-   "description": "The conversionPings object encapsulates information about conversion pings that need to be respected by the channel.",
-   "properties": {
-    "pings": {
-     "type": "array",
-     "description": "Pings that the app shall fire (authenticated by biscotti cookie). Each ping has a context, in which the app must fire the ping, and a url identifying the ping.",
-     "items": {
-      "$ref": "ChannelConversionPing"
-     }
-    }
-   }
-  },
-  "ChannelListResponse": {
-   "id": "ChannelListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of channels that match the request criteria.",
-     "items": {
-      "$ref": "Channel"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#channelListResponse\".",
-     "default": "youtube#channelListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "ChannelLocalization": {
-   "id": "ChannelLocalization",
-   "type": "object",
-   "description": "Channel localization setting",
-   "properties": {
-    "description": {
-     "type": "string",
-     "description": "The localized strings for channel's description."
-    },
-    "title": {
-     "type": "string",
-     "description": "The localized strings for channel's title."
-    }
-   }
-  },
-  "ChannelProfileDetails": {
-   "id": "ChannelProfileDetails",
-   "type": "object",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The YouTube channel ID."
-    },
-    "channelUrl": {
-     "type": "string",
-     "description": "The channel's URL."
-    },
-    "displayName": {
-     "type": "string",
-     "description": "The channel's display name."
-    },
-    "profileImageUrl": {
-     "type": "string",
-     "description": "The channels's avatar URL."
-    }
-   }
-  },
-  "ChannelSection": {
-   "id": "ChannelSection",
-   "type": "object",
-   "properties": {
-    "contentDetails": {
-     "$ref": "ChannelSectionContentDetails",
-     "description": "The contentDetails object contains details about the channel section content, such as a list of playlists or channels featured in the section."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel section."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#channelSection\".",
-     "default": "youtube#channelSection"
-    },
-    "localizations": {
-     "type": "object",
-     "description": "Localizations for different languages",
-     "additionalProperties": {
-      "$ref": "ChannelSectionLocalization",
-      "description": "The language tag, using string since map_key require simple types."
-     }
-    },
-    "snippet": {
-     "$ref": "ChannelSectionSnippet",
-     "description": "The snippet object contains basic details about the channel section, such as its type, style and title."
-    },
-    "targeting": {
-     "$ref": "ChannelSectionTargeting",
-     "description": "The targeting object contains basic targeting settings about the channel section."
-    }
-   }
-  },
-  "ChannelSectionContentDetails": {
-   "id": "ChannelSectionContentDetails",
-   "type": "object",
-   "description": "Details about a channelsection, including playlists and channels.",
-   "properties": {
-    "channels": {
-     "type": "array",
-     "description": "The channel ids for type multiple_channels.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "playlists": {
-     "type": "array",
-     "description": "The playlist ids for type single_playlist and multiple_playlists. For singlePlaylist, only one playlistId is allowed.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "ChannelSectionListResponse": {
-   "id": "ChannelSectionListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of ChannelSections that match the request criteria.",
-     "items": {
-      "$ref": "ChannelSection"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#channelSectionListResponse\".",
-     "default": "youtube#channelSectionListResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "ChannelSectionLocalization": {
-   "id": "ChannelSectionLocalization",
-   "type": "object",
-   "description": "ChannelSection localization setting",
-   "properties": {
-    "title": {
-     "type": "string",
-     "description": "The localized strings for channel section's title."
-    }
-   }
-  },
-  "ChannelSectionSnippet": {
-   "id": "ChannelSectionSnippet",
-   "type": "object",
-   "description": "Basic details about a channel section, including title, style and position.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel that published the channel section."
-    },
-    "defaultLanguage": {
-     "type": "string",
-     "description": "The language of the channel section's default title and description."
-    },
-    "localized": {
-     "$ref": "ChannelSectionLocalization",
-     "description": "Localized title, read-only."
-    },
-    "position": {
-     "type": "integer",
-     "description": "The position of the channel section in the channel.",
-     "format": "uint32"
-    },
-    "style": {
-     "type": "string",
-     "description": "The style of the channel section.",
-     "enum": [
-      "channelsectionStyleUndefined",
-      "horizontalRow",
-      "verticalList"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "title": {
-     "type": "string",
-     "description": "The channel section's title for multiple_playlists and multiple_channels."
-    },
-    "type": {
-     "type": "string",
-     "description": "The type of the channel section.",
-     "enum": [
-      "allPlaylists",
-      "channelsectionTypeUndefined",
-      "completedEvents",
-      "likedPlaylists",
-      "likes",
-      "liveEvents",
-      "multipleChannels",
-      "multiplePlaylists",
-      "popularUploads",
-      "postedPlaylists",
-      "postedVideos",
-      "recentActivity",
-      "recentPosts",
-      "recentUploads",
-      "singlePlaylist",
-      "subscriptions",
-      "upcomingEvents"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "ChannelSectionTargeting": {
-   "id": "ChannelSectionTargeting",
-   "type": "object",
-   "description": "ChannelSection targeting setting.",
-   "properties": {
-    "countries": {
-     "type": "array",
-     "description": "The country the channel section is targeting.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "languages": {
-     "type": "array",
-     "description": "The language the channel section is targeting.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "regions": {
-     "type": "array",
-     "description": "The region the channel section is targeting.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "ChannelSettings": {
-   "id": "ChannelSettings",
-   "type": "object",
-   "description": "Branding properties for the channel view.",
-   "properties": {
-    "country": {
-     "type": "string",
-     "description": "The country of the channel."
-    },
-    "defaultLanguage": {
-     "type": "string"
-    },
-    "defaultTab": {
-     "type": "string",
-     "description": "Which content tab users should see when viewing the channel."
-    },
-    "description": {
-     "type": "string",
-     "description": "Specifies the channel description."
-    },
-    "featuredChannelsTitle": {
-     "type": "string",
-     "description": "Title for the featured channels tab."
-    },
-    "featuredChannelsUrls": {
-     "type": "array",
-     "description": "The list of featured channels.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "keywords": {
-     "type": "string",
-     "description": "Lists keywords associated with the channel, comma-separated."
-    },
-    "moderateComments": {
-     "type": "boolean",
-     "description": "Whether user-submitted comments left on the channel page need to be approved by the channel owner to be publicly visible."
-    },
-    "profileColor": {
-     "type": "string",
-     "description": "A prominent color that can be rendered on this channel page."
-    },
-    "showBrowseView": {
-     "type": "boolean",
-     "description": "Whether the tab to browse the videos should be displayed."
-    },
-    "showRelatedChannels": {
-     "type": "boolean",
-     "description": "Whether related channels should be proposed."
-    },
-    "title": {
-     "type": "string",
-     "description": "Specifies the channel title."
-    },
-    "trackingAnalyticsAccountId": {
-     "type": "string",
-     "description": "The ID for a Google Analytics account to track and measure traffic to the channels."
-    },
-    "unsubscribedTrailer": {
-     "type": "string",
-     "description": "The trailer of the channel, for users that are not subscribers."
-    }
-   }
-  },
-  "ChannelSnippet": {
-   "id": "ChannelSnippet",
-   "type": "object",
-   "description": "Basic details about a channel, including title, description and thumbnails. Next available id: 15.",
-   "properties": {
-    "country": {
-     "type": "string",
-     "description": "The country of the channel."
-    },
-    "customUrl": {
-     "type": "string",
-     "description": "The custom url of the channel."
-    },
-    "defaultLanguage": {
-     "type": "string",
-     "description": "The language of the channel's default title and description."
-    },
-    "description": {
-     "type": "string",
-     "description": "The description of the channel."
-    },
-    "localized": {
-     "$ref": "ChannelLocalization",
-     "description": "Localized title and description, read-only."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the channel was created. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the channel. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The channel's title."
-    }
-   }
-  },
-  "ChannelStatistics": {
-   "id": "ChannelStatistics",
-   "type": "object",
-   "description": "Statistics about a channel: number of subscribers, number of videos in the channel, etc.",
-   "properties": {
-    "commentCount": {
-     "type": "string",
-     "description": "The number of comments for the channel.",
-     "format": "uint64"
-    },
-    "hiddenSubscriberCount": {
-     "type": "boolean",
-     "description": "Whether or not the number of subscribers is shown for this user."
-    },
-    "subscriberCount": {
-     "type": "string",
-     "description": "The number of subscribers that the channel has.",
-     "format": "uint64"
-    },
-    "videoCount": {
-     "type": "string",
-     "description": "The number of videos uploaded to the channel.",
-     "format": "uint64"
-    },
-    "viewCount": {
-     "type": "string",
-     "description": "The number of times the channel has been viewed.",
-     "format": "uint64"
-    }
-   }
-  },
-  "ChannelStatus": {
-   "id": "ChannelStatus",
-   "type": "object",
-   "description": "JSON template for the status part of a channel.",
-   "properties": {
-    "isLinked": {
-     "type": "boolean",
-     "description": "If true, then the user is linked to either a YouTube username or G+ account. Otherwise, the user doesn't have a public YouTube identity."
-    },
-    "longUploadsStatus": {
-     "type": "string",
-     "description": "The long uploads status of this channel. See",
-     "enum": [
-      "allowed",
-      "disallowed",
-      "eligible",
-      "longUploadsUnspecified"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "privacyStatus": {
-     "type": "string",
-     "description": "Privacy status of the channel.",
-     "enum": [
-      "private",
-      "public",
-      "unlisted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "ChannelTopicDetails": {
-   "id": "ChannelTopicDetails",
-   "type": "object",
-   "description": "Freebase topic information related to the channel.",
-   "properties": {
-    "topicCategories": {
-     "type": "array",
-     "description": "A list of Wikipedia URLs that describe the channel's content.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "topicIds": {
-     "type": "array",
-     "description": "A list of Freebase topic IDs associated with the channel. You can retrieve information about each topic using the Freebase Topic API.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "Comment": {
-   "id": "Comment",
-   "type": "object",
-   "description": "A comment represents a single YouTube comment.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the comment."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#comment\".",
-     "default": "youtube#comment"
-    },
-    "snippet": {
-     "$ref": "CommentSnippet",
-     "description": "The snippet object contains basic details about the comment."
-    }
-   }
-  },
-  "CommentListResponse": {
-   "id": "CommentListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of comments that match the request criteria.",
-     "items": {
-      "$ref": "Comment"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#commentListResponse\".",
-     "default": "youtube#commentListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "CommentSnippet": {
-   "id": "CommentSnippet",
-   "type": "object",
-   "description": "Basic details about a comment, such as its author and text.",
-   "properties": {
-    "authorChannelId": {
-     "type": "any",
-     "description": "The id of the author's YouTube channel, if any."
-    },
-    "authorChannelUrl": {
-     "type": "string",
-     "description": "Link to the author's YouTube channel, if any."
-    },
-    "authorDisplayName": {
-     "type": "string",
-     "description": "The name of the user who posted the comment."
-    },
-    "authorProfileImageUrl": {
-     "type": "string",
-     "description": "The URL for the avatar of the user who posted the comment."
-    },
-    "canRate": {
-     "type": "boolean",
-     "description": "Whether the current viewer can rate this comment."
-    },
-    "channelId": {
-     "type": "string",
-     "description": "The id of the corresponding YouTube channel. In case of a channel comment this is the channel the comment refers to. In case of a video comment it's the video's channel."
-    },
-    "likeCount": {
-     "type": "integer",
-     "description": "The total number of likes this comment has received.",
-     "format": "uint32"
-    },
-    "moderationStatus": {
-     "type": "string",
-     "description": "The comment's moderation status. Will not be set if the comments were requested through the id filter.",
-     "enum": [
-      "heldForReview",
-      "likelySpam",
-      "published",
-      "rejected"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "parentId": {
-     "type": "string",
-     "description": "The unique id of the parent comment, only set for replies."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time when the comment was orignally published. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "textDisplay": {
-     "type": "string",
-     "description": "The comment's text. The format is either plain text or HTML dependent on what has been requested. Even the plain text representation may differ from the text originally posted in that it may replace video links with video titles etc."
-    },
-    "textOriginal": {
-     "type": "string",
-     "description": "The comment's original raw text as initially posted or last updated. The original text will only be returned if it is accessible to the viewer, which is only guaranteed if the viewer is the comment's author."
-    },
-    "updatedAt": {
-     "type": "string",
-     "description": "The date and time when was last updated . The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID of the video the comment refers to, if any."
-    },
-    "viewerRating": {
-     "type": "string",
-     "description": "The rating the viewer has given to this comment. For the time being this will never return RATE_TYPE_DISLIKE and instead return RATE_TYPE_NONE. This may change in the future.",
-     "enum": [
-      "dislike",
-      "like",
-      "none",
-      "unspecified"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "CommentThread": {
-   "id": "CommentThread",
-   "type": "object",
-   "description": "A comment thread represents information that applies to a top level comment and all its replies. It can also include the top level comment itself and some of the replies.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the comment thread."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#commentThread\".",
-     "default": "youtube#commentThread"
-    },
-    "replies": {
-     "$ref": "CommentThreadReplies",
-     "description": "The replies object contains a limited number of replies (if any) to the top level comment found in the snippet."
-    },
-    "snippet": {
-     "$ref": "CommentThreadSnippet",
-     "description": "The snippet object contains basic details about the comment thread and also the top level comment."
-    }
-   }
-  },
-  "CommentThreadListResponse": {
-   "id": "CommentThreadListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of comment threads that match the request criteria.",
-     "items": {
-      "$ref": "CommentThread"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#commentThreadListResponse\".",
-     "default": "youtube#commentThreadListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "CommentThreadReplies": {
-   "id": "CommentThreadReplies",
-   "type": "object",
-   "description": "Comments written in (direct or indirect) reply to the top level comment.",
-   "properties": {
-    "comments": {
-     "type": "array",
-     "description": "A limited number of replies. Unless the number of replies returned equals total_reply_count in the snippet the returned replies are only a subset of the total number of replies.",
-     "items": {
-      "$ref": "Comment"
-     }
-    }
-   }
-  },
-  "CommentThreadSnippet": {
-   "id": "CommentThreadSnippet",
-   "type": "object",
-   "description": "Basic details about a comment thread.",
-   "properties": {
-    "canReply": {
-     "type": "boolean",
-     "description": "Whether the current viewer of the thread can reply to it. This is viewer specific - other viewers may see a different value for this field."
-    },
-    "channelId": {
-     "type": "string",
-     "description": "The YouTube channel the comments in the thread refer to or the channel with the video the comments refer to. If video_id isn't set the comments refer to the channel itself."
-    },
-    "isPublic": {
-     "type": "boolean",
-     "description": "Whether the thread (and therefore all its comments) is visible to all YouTube users."
-    },
-    "topLevelComment": {
-     "$ref": "Comment",
-     "description": "The top level comment of this thread."
-    },
-    "totalReplyCount": {
-     "type": "integer",
-     "description": "The total number of replies (not including the top level comment).",
-     "format": "uint32"
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID of the video the comments refer to, if any. No video_id implies a channel discussion comment."
-    }
-   }
-  },
-  "ContentRating": {
-   "id": "ContentRating",
-   "type": "object",
-   "description": "Ratings schemes. The country-specific ratings are mostly for movies and shows. NEXT_ID: 69",
-   "properties": {
-    "acbRating": {
-     "type": "string",
-     "description": "The video's Australian Classification Board (ACB) or Australian Communications and Media Authority (ACMA) rating. ACMA ratings are used to classify children's television programming.",
-     "enum": [
-      "acbC",
-      "acbE",
-      "acbG",
-      "acbM",
-      "acbMa15plus",
-      "acbP",
-      "acbPg",
-      "acbR18plus",
-      "acbUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "agcomRating": {
-     "type": "string",
-     "description": "The video's rating from Italy's Autorità per le Garanzie nelle Comunicazioni (AGCOM).",
-     "enum": [
-      "agcomT",
-      "agcomUnrated",
-      "agcomVm14",
-      "agcomVm18"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "anatelRating": {
-     "type": "string",
-     "description": "The video's Anatel (Asociación Nacional de Televisión) rating for Chilean television.",
-     "enum": [
-      "anatelA",
-      "anatelF",
-      "anatelI",
-      "anatelI10",
-      "anatelI12",
-      "anatelI7",
-      "anatelR",
-      "anatelUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "bbfcRating": {
-     "type": "string",
-     "description": "The video's British Board of Film Classification (BBFC) rating.",
-     "enum": [
-      "bbfc12",
-      "bbfc12a",
-      "bbfc15",
-      "bbfc18",
-      "bbfcPg",
-      "bbfcR18",
-      "bbfcU",
-      "bbfcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "bfvcRating": {
-     "type": "string",
-     "description": "The video's rating from Thailand's Board of Film and Video Censors.",
-     "enum": [
-      "bfvc13",
-      "bfvc15",
-      "bfvc18",
-      "bfvc20",
-      "bfvcB",
-      "bfvcE",
-      "bfvcG",
-      "bfvcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "bmukkRating": {
-     "type": "string",
-     "description": "The video's rating from the Austrian Board of Media Classification (Bundesministerium für Unterricht, Kunst und Kultur).",
-     "enum": [
-      "bmukk10",
-      "bmukk12",
-      "bmukk14",
-      "bmukk16",
-      "bmukk6",
-      "bmukk8",
-      "bmukkAa",
-      "bmukkUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "catvRating": {
-     "type": "string",
-     "description": "Rating system for Canadian TV - Canadian TV Classification System The video's rating from the Canadian Radio-Television and Telecommunications Commission (CRTC) for Canadian English-language broadcasts. For more information, see the Canadian Broadcast Standards Council website.",
-     "enum": [
-      "catv14plus",
-      "catv18plus",
-      "catvC",
-      "catvC8",
-      "catvG",
-      "catvPg",
-      "catvUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "catvfrRating": {
-     "type": "string",
-     "description": "The video's rating from the Canadian Radio-Television and Telecommunications Commission (CRTC) for Canadian French-language broadcasts. For more information, see the Canadian Broadcast Standards Council website.",
-     "enum": [
-      "catvfr13plus",
-      "catvfr16plus",
-      "catvfr18plus",
-      "catvfr8plus",
-      "catvfrG",
-      "catvfrUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cbfcRating": {
-     "type": "string",
-     "description": "The video's Central Board of Film Certification (CBFC - India) rating.",
-     "enum": [
-      "cbfcA",
-      "cbfcS",
-      "cbfcU",
-      "cbfcUA",
-      "cbfcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cccRating": {
-     "type": "string",
-     "description": "The video's Consejo de Calificación Cinematográfica (Chile) rating.",
-     "enum": [
-      "ccc14",
-      "ccc18",
-      "ccc18s",
-      "ccc18v",
-      "ccc6",
-      "cccTe",
-      "cccUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cceRating": {
-     "type": "string",
-     "description": "The video's rating from Portugal's Comissão de Classificação de Espect´culos.",
-     "enum": [
-      "cceM12",
-      "cceM14",
-      "cceM16",
-      "cceM18",
-      "cceM4",
-      "cceM6",
-      "cceUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "chfilmRating": {
-     "type": "string",
-     "description": "The video's rating in Switzerland.",
-     "enum": [
-      "chfilm0",
-      "chfilm12",
-      "chfilm16",
-      "chfilm18",
-      "chfilm6",
-      "chfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "chvrsRating": {
-     "type": "string",
-     "description": "The video's Canadian Home Video Rating System (CHVRS) rating.",
-     "enum": [
-      "chvrs14a",
-      "chvrs18a",
-      "chvrsE",
-      "chvrsG",
-      "chvrsPg",
-      "chvrsR",
-      "chvrsUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cicfRating": {
-     "type": "string",
-     "description": "The video's rating from the Commission de Contrôle des Films (Belgium).",
-     "enum": [
-      "cicfE",
-      "cicfKntEna",
-      "cicfKtEa",
-      "cicfUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cnaRating": {
-     "type": "string",
-     "description": "The video's rating from Romania's CONSILIUL NATIONAL AL AUDIOVIZUALULUI (CNA).",
-     "enum": [
-      "cna12",
-      "cna15",
-      "cna18",
-      "cna18plus",
-      "cnaAp",
-      "cnaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cncRating": {
-     "type": "string",
-     "description": "Rating system in France - Commission de classification cinematographique",
-     "enum": [
-      "cnc10",
-      "cnc12",
-      "cnc16",
-      "cnc18",
-      "cncE",
-      "cncT",
-      "cncUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "csaRating": {
-     "type": "string",
-     "description": "The video's rating from France's Conseil supérieur de l?audiovisuel, which rates broadcast content.",
-     "enum": [
-      "csa10",
-      "csa12",
-      "csa16",
-      "csa18",
-      "csaInterdiction",
-      "csaT",
-      "csaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "cscfRating": {
-     "type": "string",
-     "description": "The video's rating from Luxembourg's Commission de surveillance de la classification des films (CSCF).",
-     "enum": [
-      "cscf12",
-      "cscf16",
-      "cscf18",
-      "cscf6",
-      "cscf9",
-      "cscfA",
-      "cscfAl",
-      "cscfUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "czfilmRating": {
-     "type": "string",
-     "description": "The video's rating in the Czech Republic.",
-     "enum": [
-      "czfilm12",
-      "czfilm14",
-      "czfilm18",
-      "czfilmU",
-      "czfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "djctqRating": {
-     "type": "string",
-     "description": "The video's Departamento de Justiça, Classificação, Qualificação e Títulos (DJCQT - Brazil) rating.",
-     "enum": [
-      "djctq10",
-      "djctq12",
-      "djctq14",
-      "djctq16",
-      "djctq18",
-      "djctqL",
-      "djctqUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "djctqRatingReasons": {
-     "type": "array",
-     "description": "Reasons that explain why the video received its DJCQT (Brazil) rating.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "djctqCriminalActs",
-       "djctqDrugs",
-       "djctqExplicitSex",
-       "djctqExtremeViolence",
-       "djctqIllegalDrugs",
-       "djctqImpactingContent",
-       "djctqInappropriateLanguage",
-       "djctqLegalDrugs",
-       "djctqNudity",
-       "djctqSex",
-       "djctqSexualContent",
-       "djctqViolence"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "ecbmctRating": {
-     "type": "string",
-     "description": "Rating system in Turkey - Evaluation and Classification Board of the Ministry of Culture and Tourism",
-     "enum": [
-      "ecbmct13a",
-      "ecbmct13plus",
-      "ecbmct15a",
-      "ecbmct15plus",
-      "ecbmct18plus",
-      "ecbmct7a",
-      "ecbmct7plus",
-      "ecbmctG",
-      "ecbmctUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "eefilmRating": {
-     "type": "string",
-     "description": "The video's rating in Estonia.",
-     "enum": [
-      "eefilmK12",
-      "eefilmK14",
-      "eefilmK16",
-      "eefilmK6",
-      "eefilmL",
-      "eefilmMs12",
-      "eefilmMs6",
-      "eefilmPere",
-      "eefilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "egfilmRating": {
-     "type": "string",
-     "description": "The video's rating in Egypt.",
-     "enum": [
-      "egfilm18",
-      "egfilmBn",
-      "egfilmGn",
-      "egfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "eirinRating": {
-     "type": "string",
-     "description": "The video's Eirin (映倫) rating. Eirin is the Japanese rating system.",
-     "enum": [
-      "eirinG",
-      "eirinPg12",
-      "eirinR15plus",
-      "eirinR18plus",
-      "eirinUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "fcbmRating": {
-     "type": "string",
-     "description": "The video's rating from Malaysia's Film Censorship Board.",
-     "enum": [
-      "fcbm18",
-      "fcbm18pa",
-      "fcbm18pl",
-      "fcbm18sg",
-      "fcbm18sx",
-      "fcbmP13",
-      "fcbmPg13",
-      "fcbmU",
-      "fcbmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "fcoRating": {
-     "type": "string",
-     "description": "The video's rating from Hong Kong's Office for Film, Newspaper and Article Administration.",
-     "enum": [
-      "fcoI",
-      "fcoIi",
-      "fcoIia",
-      "fcoIib",
-      "fcoIii",
-      "fcoUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "fmocRating": {
-     "type": "string",
-     "description": "This property has been deprecated. Use the contentDetails.contentRating.cncRating instead.",
-     "enum": [
-      "fmoc10",
-      "fmoc12",
-      "fmoc16",
-      "fmoc18",
-      "fmocE",
-      "fmocU",
-      "fmocUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "fpbRating": {
-     "type": "string",
-     "description": "The video's rating from South Africa's Film and Publication Board.",
-     "enum": [
-      "fpb10",
-      "fpb1012Pg",
-      "fpb13",
-      "fpb16",
-      "fpb18",
-      "fpb79Pg",
-      "fpbA",
-      "fpbPg",
-      "fpbUnrated",
-      "fpbX18",
-      "fpbXx"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "fpbRatingReasons": {
-     "type": "array",
-     "description": "Reasons that explain why the video received its FPB (South Africa) rating.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "fpbBlasphemy",
-       "fpbCriminalTechniques",
-       "fpbDrugs",
-       "fpbHorror",
-       "fpbImitativeActsTechniques",
-       "fpbLanguage",
-       "fpbNudity",
-       "fpbPrejudice",
-       "fpbSex",
-       "fpbSexualViolence",
-       "fpbViolence"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "fskRating": {
-     "type": "string",
-     "description": "The video's Freiwillige Selbstkontrolle der Filmwirtschaft (FSK - Germany) rating.",
-     "enum": [
-      "fsk0",
-      "fsk12",
-      "fsk16",
-      "fsk18",
-      "fsk6",
-      "fskUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "grfilmRating": {
-     "type": "string",
-     "description": "The video's rating in Greece.",
-     "enum": [
-      "grfilmE",
-      "grfilmK",
-      "grfilmK12",
-      "grfilmK13",
-      "grfilmK15",
-      "grfilmK17",
-      "grfilmK18",
-      "grfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "icaaRating": {
-     "type": "string",
-     "description": "The video's Instituto de la Cinematografía y de las Artes Audiovisuales (ICAA - Spain) rating.",
-     "enum": [
-      "icaa12",
-      "icaa13",
-      "icaa16",
-      "icaa18",
-      "icaa7",
-      "icaaApta",
-      "icaaUnrated",
-      "icaaX"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "ifcoRating": {
-     "type": "string",
-     "description": "The video's Irish Film Classification Office (IFCO - Ireland) rating. See the IFCO website for more information.",
-     "enum": [
-      "ifco12",
-      "ifco12a",
-      "ifco15",
-      "ifco15a",
-      "ifco16",
-      "ifco18",
-      "ifcoG",
-      "ifcoPg",
-      "ifcoUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "ilfilmRating": {
-     "type": "string",
-     "description": "The video's rating in Israel.",
-     "enum": [
-      "ilfilm12",
-      "ilfilm16",
-      "ilfilm18",
-      "ilfilmAa",
-      "ilfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "incaaRating": {
-     "type": "string",
-     "description": "The video's INCAA (Instituto Nacional de Cine y Artes Audiovisuales - Argentina) rating.",
-     "enum": [
-      "incaaAtp",
-      "incaaC",
-      "incaaSam13",
-      "incaaSam16",
-      "incaaSam18",
-      "incaaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "kfcbRating": {
-     "type": "string",
-     "description": "The video's rating from the Kenya Film Classification Board.",
-     "enum": [
-      "kfcb16plus",
-      "kfcbG",
-      "kfcbPg",
-      "kfcbR",
-      "kfcbUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "kijkwijzerRating": {
-     "type": "string",
-     "description": "voor de Classificatie van Audiovisuele Media (Netherlands).",
-     "enum": [
-      "kijkwijzer12",
-      "kijkwijzer16",
-      "kijkwijzer18",
-      "kijkwijzer6",
-      "kijkwijzer9",
-      "kijkwijzerAl",
-      "kijkwijzerUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "kmrbRating": {
-     "type": "string",
-     "description": "The video's Korea Media Rating Board (영상물등급위원회) rating. The KMRB rates videos in South Korea.",
-     "enum": [
-      "kmrb12plus",
-      "kmrb15plus",
-      "kmrbAll",
-      "kmrbR",
-      "kmrbTeenr",
-      "kmrbUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "lsfRating": {
-     "type": "string",
-     "description": "The video's rating from Indonesia's Lembaga Sensor Film.",
-     "enum": [
-      "lsf13",
-      "lsf17",
-      "lsf21",
-      "lsfA",
-      "lsfBo",
-      "lsfD",
-      "lsfR",
-      "lsfSu",
-      "lsfUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mccaaRating": {
-     "type": "string",
-     "description": "The video's rating from Malta's Film Age-Classification Board.",
-     "enum": [
-      "mccaa12",
-      "mccaa12a",
-      "mccaa14",
-      "mccaa15",
-      "mccaa16",
-      "mccaa18",
-      "mccaaPg",
-      "mccaaU",
-      "mccaaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mccypRating": {
-     "type": "string",
-     "description": "The video's rating from the Danish Film Institute's (Det Danske Filminstitut) Media Council for Children and Young People.",
-     "enum": [
-      "mccyp11",
-      "mccyp15",
-      "mccyp7",
-      "mccypA",
-      "mccypUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mcstRating": {
-     "type": "string",
-     "description": "The video's rating system for Vietnam - MCST",
-     "enum": [
-      "mcst0",
-      "mcst16plus",
-      "mcstC13",
-      "mcstC16",
-      "mcstC18",
-      "mcstGPg",
-      "mcstP",
-      "mcstUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mdaRating": {
-     "type": "string",
-     "description": "The video's rating from Singapore's Media Development Authority (MDA) and, specifically, it's Board of Film Censors (BFC).",
-     "enum": [
-      "mdaG",
-      "mdaM18",
-      "mdaNc16",
-      "mdaPg",
-      "mdaPg13",
-      "mdaR21",
-      "mdaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "medietilsynetRating": {
-     "type": "string",
-     "description": "The video's rating from Medietilsynet, the Norwegian Media Authority.",
-     "enum": [
-      "medietilsynet11",
-      "medietilsynet12",
-      "medietilsynet15",
-      "medietilsynet18",
-      "medietilsynet6",
-      "medietilsynet7",
-      "medietilsynet9",
-      "medietilsynetA",
-      "medietilsynetUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mekuRating": {
-     "type": "string",
-     "description": "The video's rating from Finland's Kansallinen Audiovisuaalinen Instituutti (National Audiovisual Institute).",
-     "enum": [
-      "meku12",
-      "meku16",
-      "meku18",
-      "meku7",
-      "mekuS",
-      "mekuUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mibacRating": {
-     "type": "string",
-     "description": "The video's rating from the Ministero dei Beni e delle Attività Culturali e del Turismo (Italy).",
-     "enum": [
-      "mibacT",
-      "mibacUnrated",
-      "mibacVap",
-      "mibacVm12",
-      "mibacVm14",
-      "mibacVm18"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mocRating": {
-     "type": "string",
-     "description": "The video's Ministerio de Cultura (Colombia) rating.",
-     "enum": [
-      "moc12",
-      "moc15",
-      "moc18",
-      "moc7",
-      "mocBanned",
-      "mocE",
-      "mocT",
-      "mocUnrated",
-      "mocX"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "moctwRating": {
-     "type": "string",
-     "description": "The video's rating from Taiwan's Ministry of Culture (文化部).",
-     "enum": [
-      "moctwG",
-      "moctwP",
-      "moctwPg",
-      "moctwR",
-      "moctwR12",
-      "moctwR15",
-      "moctwUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mpaaRating": {
-     "type": "string",
-     "description": "The video's Motion Picture Association of America (MPAA) rating.",
-     "enum": [
-      "mpaaG",
-      "mpaaNc17",
-      "mpaaPg",
-      "mpaaPg13",
-      "mpaaR",
-      "mpaaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "mtrcbRating": {
-     "type": "string",
-     "description": "The video's rating from the Movie and Television Review and Classification Board (Philippines).",
-     "enum": [
-      "mtrcbG",
-      "mtrcbPg",
-      "mtrcbR13",
-      "mtrcbR16",
-      "mtrcbR18",
-      "mtrcbUnrated",
-      "mtrcbX"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "nbcRating": {
-     "type": "string",
-     "description": "The video's rating from the Maldives National Bureau of Classification.",
-     "enum": [
-      "nbc12plus",
-      "nbc15plus",
-      "nbc18plus",
-      "nbc18plusr",
-      "nbcG",
-      "nbcPg",
-      "nbcPu",
-      "nbcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "nbcplRating": {
-     "type": "string",
-     "description": "The video's rating in Poland.",
-     "enum": [
-      "nbcpl18plus",
-      "nbcplI",
-      "nbcplIi",
-      "nbcplIii",
-      "nbcplIv",
-      "nbcplUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "nfrcRating": {
-     "type": "string",
-     "description": "The video's rating from the Bulgarian National Film Center.",
-     "enum": [
-      "nfrcA",
-      "nfrcB",
-      "nfrcC",
-      "nfrcD",
-      "nfrcUnrated",
-      "nfrcX"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "nfvcbRating": {
-     "type": "string",
-     "description": "The video's rating from Nigeria's National Film and Video Censors Board.",
-     "enum": [
-      "nfvcb12",
-      "nfvcb12a",
-      "nfvcb15",
-      "nfvcb18",
-      "nfvcbG",
-      "nfvcbPg",
-      "nfvcbRe",
-      "nfvcbUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "nkclvRating": {
-     "type": "string",
-     "description": "The video's rating from the Nacionãlais Kino centrs (National Film Centre of Latvia).",
-     "enum": [
-      "nkclv12plus",
-      "nkclv18plus",
-      "nkclv7plus",
-      "nkclvU",
-      "nkclvUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "oflcRating": {
-     "type": "string",
-     "description": "The video's Office of Film and Literature Classification (OFLC - New Zealand) rating.",
-     "enum": [
-      "oflcG",
-      "oflcM",
-      "oflcPg",
-      "oflcR13",
-      "oflcR15",
-      "oflcR16",
-      "oflcR18",
-      "oflcRp13",
-      "oflcRp16",
-      "oflcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "pefilmRating": {
-     "type": "string",
-     "description": "The video's rating in Peru.",
-     "enum": [
-      "pefilm14",
-      "pefilm18",
-      "pefilmPg",
-      "pefilmPt",
-      "pefilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "rcnofRating": {
-     "type": "string",
-     "description": "The video's rating from the Hungarian Nemzeti Filmiroda, the Rating Committee of the National Office of Film.",
-     "enum": [
-      "rcnofI",
-      "rcnofIi",
-      "rcnofIii",
-      "rcnofIv",
-      "rcnofUnrated",
-      "rcnofV",
-      "rcnofVi"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "resorteviolenciaRating": {
-     "type": "string",
-     "description": "The video's rating in Venezuela.",
-     "enum": [
-      "resorteviolenciaA",
-      "resorteviolenciaB",
-      "resorteviolenciaC",
-      "resorteviolenciaD",
-      "resorteviolenciaE",
-      "resorteviolenciaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "rtcRating": {
-     "type": "string",
-     "description": "The video's General Directorate of Radio, Television and Cinematography (Mexico) rating.",
-     "enum": [
-      "rtcA",
-      "rtcAa",
-      "rtcB",
-      "rtcB15",
-      "rtcC",
-      "rtcD",
-      "rtcUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "rteRating": {
-     "type": "string",
-     "description": "The video's rating from Ireland's Raidió Teilifís Éireann.",
-     "enum": [
-      "rteCh",
-      "rteGa",
-      "rteMa",
-      "rtePs",
-      "rteUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "russiaRating": {
-     "type": "string",
-     "description": "The video's National Film Registry of the Russian Federation (MKRF - Russia) rating.",
-     "enum": [
-      "russia0",
-      "russia12",
-      "russia16",
-      "russia18",
-      "russia6",
-      "russiaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "skfilmRating": {
-     "type": "string",
-     "description": "The video's rating in Slovakia.",
-     "enum": [
-      "skfilmG",
-      "skfilmP2",
-      "skfilmP5",
-      "skfilmP8",
-      "skfilmUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "smaisRating": {
-     "type": "string",
-     "description": "The video's rating in Iceland.",
-     "enum": [
-      "smais12",
-      "smais14",
-      "smais16",
-      "smais18",
-      "smais7",
-      "smaisL",
-      "smaisUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "smsaRating": {
-     "type": "string",
-     "description": "The video's rating from Statens medieråd (Sweden's National Media Council).",
-     "enum": [
-      "smsa11",
-      "smsa15",
-      "smsa7",
-      "smsaA",
-      "smsaUnrated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "tvpgRating": {
-     "type": "string",
-     "description": "The video's TV Parental Guidelines (TVPG) rating.",
-     "enum": [
-      "pg14",
-      "tvpgG",
-      "tvpgMa",
-      "tvpgPg",
-      "tvpgUnrated",
-      "tvpgY",
-      "tvpgY7",
-      "tvpgY7Fv"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "ytRating": {
-     "type": "string",
-     "description": "A rating that YouTube uses to identify age-restricted content.",
-     "enum": [
-      "ytAgeRestricted"
-     ],
-     "enumDescriptions": [
-      ""
-     ]
-    }
-   }
-  },
-  "FanFundingEvent": {
-   "id": "FanFundingEvent",
-   "type": "object",
-   "description": "A fanFundingEvent resource represents a fan funding event on a YouTube channel. Fan funding events occur when a user gives one-time monetary support to the channel owner.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the fan funding event."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#fanFundingEvent\".",
-     "default": "youtube#fanFundingEvent"
-    },
-    "snippet": {
-     "$ref": "FanFundingEventSnippet",
-     "description": "The snippet object contains basic details about the fan funding event."
-    }
-   }
-  },
-  "FanFundingEventListResponse": {
-   "id": "FanFundingEventListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of fan funding events that match the request criteria.",
-     "items": {
-      "$ref": "FanFundingEvent"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#fanFundingEventListResponse\".",
-     "default": "youtube#fanFundingEventListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "FanFundingEventSnippet": {
-   "id": "FanFundingEventSnippet",
-   "type": "object",
-   "properties": {
-    "amountMicros": {
-     "type": "string",
-     "description": "The amount of funding in micros of fund_currency. e.g., 1 is represented",
-     "format": "uint64"
-    },
-    "channelId": {
-     "type": "string",
-     "description": "Channel id where the funding event occurred."
-    },
-    "commentText": {
-     "type": "string",
-     "description": "The text contents of the comment left by the user."
-    },
-    "createdAt": {
-     "type": "string",
-     "description": "The date and time when the funding occurred. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "currency": {
-     "type": "string",
-     "description": "The currency in which the fund was made. ISO 4217."
-    },
-    "displayString": {
-     "type": "string",
-     "description": "A rendered string that displays the fund amount and currency (e.g., \"$1.00\"). The string is rendered for the given language."
-    },
-    "supporterDetails": {
-     "$ref": "ChannelProfileDetails",
-     "description": "Details about the supporter. Only filled if the event was made public by the user."
-    }
-   }
-  },
-  "GeoPoint": {
-   "id": "GeoPoint",
-   "type": "object",
-   "description": "Geographical coordinates of a point, in WGS84.",
-   "properties": {
-    "altitude": {
-     "type": "number",
-     "description": "Altitude above the reference ellipsoid, in meters.",
-     "format": "double"
-    },
-    "latitude": {
-     "type": "number",
-     "description": "Latitude in degrees.",
-     "format": "double"
-    },
-    "longitude": {
-     "type": "number",
-     "description": "Longitude in degrees.",
-     "format": "double"
-    }
-   }
-  },
-  "GuideCategory": {
-   "id": "GuideCategory",
-   "type": "object",
-   "description": "A guideCategory resource identifies a category that YouTube algorithmically assigns based on a channel's content or other indicators, such as the channel's popularity. The list is similar to video categories, with the difference being that a video's uploader can assign a video category but only YouTube can assign a channel category.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the guide category."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#guideCategory\".",
-     "default": "youtube#guideCategory"
-    },
-    "snippet": {
-     "$ref": "GuideCategorySnippet",
-     "description": "The snippet object contains basic details about the category, such as its title."
-    }
-   }
-  },
-  "GuideCategoryListResponse": {
-   "id": "GuideCategoryListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of categories that can be associated with YouTube channels. In this map, the category ID is the map key, and its value is the corresponding guideCategory resource.",
-     "items": {
-      "$ref": "GuideCategory"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#guideCategoryListResponse\".",
-     "default": "youtube#guideCategoryListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "GuideCategorySnippet": {
-   "id": "GuideCategorySnippet",
-   "type": "object",
-   "description": "Basic details about a guide category.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "default": "UCBR8-60-B28hp2BmDPdntcQ"
-    },
-    "title": {
-     "type": "string",
-     "description": "Description of the guide category."
-    }
-   }
-  },
-  "I18nLanguage": {
-   "id": "I18nLanguage",
-   "type": "object",
-   "description": "An i18nLanguage resource identifies a UI language currently supported by YouTube.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the i18n language."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#i18nLanguage\".",
-     "default": "youtube#i18nLanguage"
-    },
-    "snippet": {
-     "$ref": "I18nLanguageSnippet",
-     "description": "The snippet object contains basic details about the i18n language, such as language code and human-readable name."
-    }
-   }
-  },
-  "I18nLanguageListResponse": {
-   "id": "I18nLanguageListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of supported i18n languages. In this map, the i18n language ID is the map key, and its value is the corresponding i18nLanguage resource.",
-     "items": {
-      "$ref": "I18nLanguage"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#i18nLanguageListResponse\".",
-     "default": "youtube#i18nLanguageListResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "I18nLanguageSnippet": {
-   "id": "I18nLanguageSnippet",
-   "type": "object",
-   "description": "Basic details about an i18n language, such as language code and human-readable name.",
-   "properties": {
-    "hl": {
-     "type": "string",
-     "description": "A short BCP-47 code that uniquely identifies a language."
-    },
-    "name": {
-     "type": "string",
-     "description": "The human-readable name of the language in the language itself."
-    }
-   }
-  },
-  "I18nRegion": {
-   "id": "I18nRegion",
-   "type": "object",
-   "description": "A i18nRegion resource identifies a region where YouTube is available.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the i18n region."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#i18nRegion\".",
-     "default": "youtube#i18nRegion"
-    },
-    "snippet": {
-     "$ref": "I18nRegionSnippet",
-     "description": "The snippet object contains basic details about the i18n region, such as region code and human-readable name."
-    }
-   }
-  },
-  "I18nRegionListResponse": {
-   "id": "I18nRegionListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of regions where YouTube is available. In this map, the i18n region ID is the map key, and its value is the corresponding i18nRegion resource.",
-     "items": {
-      "$ref": "I18nRegion"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#i18nRegionListResponse\".",
-     "default": "youtube#i18nRegionListResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "I18nRegionSnippet": {
-   "id": "I18nRegionSnippet",
-   "type": "object",
-   "description": "Basic details about an i18n region, such as region code and human-readable name.",
-   "properties": {
-    "gl": {
-     "type": "string",
-     "description": "The region code as a 2-letter ISO country code."
-    },
-    "name": {
-     "type": "string",
-     "description": "The human-readable name of the region."
-    }
-   }
-  },
-  "ImageSettings": {
-   "id": "ImageSettings",
-   "type": "object",
-   "description": "Branding properties for images associated with the channel.",
-   "properties": {
-    "backgroundImageUrl": {
-     "$ref": "LocalizedProperty",
-     "description": "The URL for the background image shown on the video watch page. The image should be 1200px by 615px, with a maximum file size of 128k."
-    },
-    "bannerExternalUrl": {
-     "type": "string",
-     "description": "This is used only in update requests; if it's set, we use this URL to generate all of the above banner URLs."
-    },
-    "bannerImageUrl": {
-     "type": "string",
-     "description": "Banner image. Desktop size (1060x175)."
-    },
-    "bannerMobileExtraHdImageUrl": {
-     "type": "string",
-     "description": "Banner image. Mobile size high resolution (1440x395)."
-    },
-    "bannerMobileHdImageUrl": {
-     "type": "string",
-     "description": "Banner image. Mobile size high resolution (1280x360)."
-    },
-    "bannerMobileImageUrl": {
-     "type": "string",
-     "description": "Banner image. Mobile size (640x175)."
-    },
-    "bannerMobileLowImageUrl": {
-     "type": "string",
-     "description": "Banner image. Mobile size low resolution (320x88)."
-    },
-    "bannerMobileMediumHdImageUrl": {
-     "type": "string",
-     "description": "Banner image. Mobile size medium/high resolution (960x263)."
-    },
-    "bannerTabletExtraHdImageUrl": {
-     "type": "string",
-     "description": "Banner image. Tablet size extra high resolution (2560x424)."
-    },
-    "bannerTabletHdImageUrl": {
-     "type": "string",
-     "description": "Banner image. Tablet size high resolution (2276x377)."
-    },
-    "bannerTabletImageUrl": {
-     "type": "string",
-     "description": "Banner image. Tablet size (1707x283)."
-    },
-    "bannerTabletLowImageUrl": {
-     "type": "string",
-     "description": "Banner image. Tablet size low resolution (1138x188)."
-    },
-    "bannerTvHighImageUrl": {
-     "type": "string",
-     "description": "Banner image. TV size high resolution (1920x1080)."
-    },
-    "bannerTvImageUrl": {
-     "type": "string",
-     "description": "Banner image. TV size extra high resolution (2120x1192)."
-    },
-    "bannerTvLowImageUrl": {
-     "type": "string",
-     "description": "Banner image. TV size low resolution (854x480)."
-    },
-    "bannerTvMediumImageUrl": {
-     "type": "string",
-     "description": "Banner image. TV size medium resolution (1280x720)."
-    },
-    "largeBrandedBannerImageImapScript": {
-     "$ref": "LocalizedProperty",
-     "description": "The image map script for the large banner image."
-    },
-    "largeBrandedBannerImageUrl": {
-     "$ref": "LocalizedProperty",
-     "description": "The URL for the 854px by 70px image that appears below the video player in the expanded video view of the video watch page."
-    },
-    "smallBrandedBannerImageImapScript": {
-     "$ref": "LocalizedProperty",
-     "description": "The image map script for the small banner image."
-    },
-    "smallBrandedBannerImageUrl": {
-     "$ref": "LocalizedProperty",
-     "description": "The URL for the 640px by 70px banner image that appears below the video player in the default view of the video watch page."
-    },
-    "trackingImageUrl": {
-     "type": "string",
-     "description": "The URL for a 1px by 1px tracking pixel that can be used to collect statistics for views of the channel or video pages."
-    },
-    "watchIconImageUrl": {
-     "type": "string",
-     "description": "The URL for the image that appears above the top-left corner of the video player. This is a 25-pixel-high image with a flexible width that cannot exceed 170 pixels."
-    }
-   }
-  },
-  "IngestionInfo": {
-   "id": "IngestionInfo",
-   "type": "object",
-   "description": "Describes information necessary for ingesting an RTMP or an HTTP stream.",
-   "properties": {
-    "backupIngestionAddress": {
-     "type": "string",
-     "description": "The backup ingestion URL that you should use to stream video to YouTube. You have the option of simultaneously streaming the content that you are sending to the ingestionAddress to this URL."
-    },
-    "ingestionAddress": {
-     "type": "string",
-     "description": "The primary ingestion URL that you should use to stream video to YouTube. You must stream video to this URL.\n\nDepending on which application or tool you use to encode your video stream, you may need to enter the stream URL and stream name separately or you may need to concatenate them in the following format:\n\nSTREAM_URL/STREAM_NAME"
-    },
-    "streamName": {
-     "type": "string",
-     "description": "The HTTP or RTMP stream name that YouTube assigns to the video stream."
-    }
-   }
-  },
-  "InvideoBranding": {
-   "id": "InvideoBranding",
-   "type": "object",
-   "properties": {
-    "imageBytes": {
-     "type": "string",
-     "format": "byte"
-    },
-    "imageUrl": {
-     "type": "string"
-    },
-    "position": {
-     "$ref": "InvideoPosition"
-    },
-    "targetChannelId": {
-     "type": "string"
-    },
-    "timing": {
-     "$ref": "InvideoTiming"
-    }
-   }
-  },
-  "InvideoPosition": {
-   "id": "InvideoPosition",
-   "type": "object",
-   "description": "Describes the spatial position of a visual widget inside a video. It is a union of various position types, out of which only will be set one.",
-   "properties": {
-    "cornerPosition": {
-     "type": "string",
-     "description": "Describes in which corner of the video the visual widget will appear.",
-     "enum": [
-      "bottomLeft",
-      "bottomRight",
-      "topLeft",
-      "topRight"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "type": {
-     "type": "string",
-     "description": "Defines the position type.",
-     "enum": [
-      "corner"
-     ],
-     "enumDescriptions": [
-      ""
-     ]
-    }
-   }
-  },
-  "InvideoPromotion": {
-   "id": "InvideoPromotion",
-   "type": "object",
-   "description": "Describes an invideo promotion campaign consisting of multiple promoted items. A campaign belongs to a single channel_id.",
-   "properties": {
-    "defaultTiming": {
-     "$ref": "InvideoTiming",
-     "description": "The default temporal position within the video where the promoted item will be displayed. Can be overriden by more specific timing in the item."
-    },
-    "items": {
-     "type": "array",
-     "description": "List of promoted items in decreasing priority.",
-     "items": {
-      "$ref": "PromotedItem"
-     }
-    },
-    "position": {
-     "$ref": "InvideoPosition",
-     "description": "The spatial position within the video where the promoted item will be displayed."
-    },
-    "useSmartTiming": {
-     "type": "boolean",
-     "description": "Indicates whether the channel's promotional campaign uses \"smart timing.\" This feature attempts to show promotions at a point in the video when they are more likely to be clicked and less likely to disrupt the viewing experience. This feature also picks up a single promotion to show on each video."
-    }
-   }
-  },
-  "InvideoTiming": {
-   "id": "InvideoTiming",
-   "type": "object",
-   "description": "Describes a temporal position of a visual widget inside a video.",
-   "properties": {
-    "durationMs": {
-     "type": "string",
-     "description": "Defines the duration in milliseconds for which the promotion should be displayed. If missing, the client should use the default.",
-     "format": "uint64"
-    },
-    "offsetMs": {
-     "type": "string",
-     "description": "Defines the time at which the promotion will appear. Depending on the value of type the value of the offsetMs field will represent a time offset from the start or from the end of the video, expressed in milliseconds.",
-     "format": "uint64"
-    },
-    "type": {
-     "type": "string",
-     "description": "Describes a timing type. If the value is offsetFromStart, then the offsetMs field represents an offset from the start of the video. If the value is offsetFromEnd, then the offsetMs field represents an offset from the end of the video.",
-     "enum": [
-      "offsetFromEnd",
-      "offsetFromStart"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LanguageTag": {
-   "id": "LanguageTag",
-   "type": "object",
-   "properties": {
-    "value": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveBroadcast": {
-   "id": "LiveBroadcast",
-   "type": "object",
-   "description": "A liveBroadcast resource represents an event that will be streamed, via live video, on YouTube.",
-   "properties": {
-    "contentDetails": {
-     "$ref": "LiveBroadcastContentDetails",
-     "description": "The contentDetails object contains information about the event's video content, such as whether the content can be shown in an embedded video player or if it will be archived and therefore available for viewing after the event has concluded."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the broadcast.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveBroadcast\".",
-     "default": "youtube#liveBroadcast"
-    },
-    "snippet": {
-     "$ref": "LiveBroadcastSnippet",
-     "description": "The snippet object contains basic details about the event, including its title, description, start time, and end time."
-    },
-    "statistics": {
-     "$ref": "LiveBroadcastStatistics",
-     "description": "The statistics object contains info about the event's current stats. These include concurrent viewers and total chat count. Statistics can change (in either direction) during the lifetime of an event. Statistics are only returned while the event is live."
-    },
-    "status": {
-     "$ref": "LiveBroadcastStatus",
-     "description": "The status object contains information about the event's status."
-    },
-    "topicDetails": {
-     "$ref": "LiveBroadcastTopicDetails"
-    }
-   }
-  },
-  "LiveBroadcastContentDetails": {
-   "id": "LiveBroadcastContentDetails",
-   "type": "object",
-   "description": "Detailed settings of a broadcast.",
-   "properties": {
-    "boundStreamId": {
-     "type": "string",
-     "description": "This value uniquely identifies the live stream bound to the broadcast."
-    },
-    "boundStreamLastUpdateTimeMs": {
-     "type": "string",
-     "description": "The date and time that the live stream referenced by boundStreamId was last updated.",
-     "format": "date-time"
-    },
-    "closedCaptionsType": {
-     "type": "string",
-     "enum": [
-      "closedCaptionsDisabled",
-      "closedCaptionsEmbedded",
-      "closedCaptionsHttpPost"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "enableClosedCaptions": {
-     "type": "boolean",
-     "description": "This setting indicates whether HTTP POST closed captioning is enabled for this broadcast. The ingestion URL of the closed captions is returned through the liveStreams API. This is mutually exclusive with using the closed_captions_type property, and is equivalent to setting closed_captions_type to CLOSED_CAPTIONS_HTTP_POST."
-    },
-    "enableContentEncryption": {
-     "type": "boolean",
-     "description": "This setting indicates whether YouTube should enable content encryption for the broadcast.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "enableDvr": {
-     "type": "boolean",
-     "description": "This setting determines whether viewers can access DVR controls while watching the video. DVR controls enable the viewer to control the video playback experience by pausing, rewinding, or fast forwarding content. The default value for this property is true.\n\n\n\nImportant: You must set the value to true and also set the enableArchive property's value to true if you want to make playback available immediately after the broadcast ends.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "enableEmbed": {
-     "type": "boolean",
-     "description": "This setting indicates whether the broadcast video can be played in an embedded player. If you choose to archive the video (using the enableArchive property), this setting will also apply to the archived video.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "enableLowLatency": {
-     "type": "boolean",
-     "description": "Indicates whether this broadcast has low latency enabled."
-    },
-    "monitorStream": {
-     "$ref": "MonitorStreamInfo",
-     "description": "The monitorStream object contains information about the monitor stream, which the broadcaster can use to review the event content before the broadcast stream is shown publicly."
-    },
-    "projection": {
-     "type": "string",
-     "description": "The projection format of this broadcast. This defaults to rectangular.",
-     "enum": [
-      "360",
-      "rectangular"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "recordFromStart": {
-     "type": "boolean",
-     "description": "Automatically start recording after the event goes live. The default value for this property is true.\n\n\n\nImportant: You must also set the enableDvr property's value to true if you want the playback to be available immediately after the broadcast ends. If you set this property's value to true but do not also set the enableDvr property to true, there may be a delay of around one day before the archived video will be available for playback.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "startWithSlate": {
-     "type": "boolean",
-     "description": "This setting indicates whether the broadcast should automatically begin with an in-stream slate when you update the broadcast's status to live. After updating the status, you then need to send a liveCuepoints.insert request that sets the cuepoint's eventState to end to remove the in-stream slate and make your broadcast stream visible to viewers.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    }
-   }
-  },
-  "LiveBroadcastListResponse": {
-   "id": "LiveBroadcastListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of broadcasts that match the request criteria.",
-     "items": {
-      "$ref": "LiveBroadcast"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveBroadcastListResponse\".",
-     "default": "youtube#liveBroadcastListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "LiveBroadcastSnippet": {
-   "id": "LiveBroadcastSnippet",
-   "type": "object",
-   "properties": {
-    "actualEndTime": {
-     "type": "string",
-     "description": "The date and time that the broadcast actually ended. This information is only available once the broadcast's state is complete. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "actualStartTime": {
-     "type": "string",
-     "description": "The date and time that the broadcast actually started. This information is only available once the broadcast's state is live. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel that is publishing the broadcast."
-    },
-    "description": {
-     "type": "string",
-     "description": "The broadcast's description. As with the title, you can set this field by modifying the broadcast resource or by setting the description field of the corresponding video resource."
-    },
-    "isDefaultBroadcast": {
-     "type": "boolean"
-    },
-    "liveChatId": {
-     "type": "string",
-     "description": "The id of the live chat for this broadcast."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the broadcast was added to YouTube's live broadcast schedule. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "scheduledEndTime": {
-     "type": "string",
-     "description": "The date and time that the broadcast is scheduled to end. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "scheduledStartTime": {
-     "type": "string",
-     "description": "The date and time that the broadcast is scheduled to start. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.insert",
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the broadcast. For each nested object in this object, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The broadcast's title. Note that the broadcast represents exactly one YouTube video. You can set this field by modifying the broadcast resource or by setting the title field of the corresponding video resource.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.insert",
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    }
-   }
-  },
-  "LiveBroadcastStatistics": {
-   "id": "LiveBroadcastStatistics",
-   "type": "object",
-   "description": "Statistics about the live broadcast. These represent a snapshot of the values at the time of the request. Statistics are only returned for live broadcasts.",
-   "properties": {
-    "concurrentViewers": {
-     "type": "string",
-     "description": "The number of viewers currently watching the broadcast. The property and its value will be present if the broadcast has current viewers and the broadcast owner has not hidden the viewcount for the video. Note that YouTube stops tracking the number of concurrent viewers for a broadcast when the broadcast ends. So, this property would not identify the number of viewers watching an archived video of a live broadcast that already ended.",
-     "format": "uint64"
-    },
-    "totalChatCount": {
-     "type": "string",
-     "description": "The total number of live chat messages currently on the broadcast. The property and its value will be present if the broadcast is public, has the live chat feature enabled, and has at least one message. Note that this field will not be filled after the broadcast ends. So this property would not identify the number of chat messages for an archived video of a completed live broadcast.",
-     "format": "uint64"
-    }
-   }
-  },
-  "LiveBroadcastStatus": {
-   "id": "LiveBroadcastStatus",
-   "type": "object",
-   "properties": {
-    "lifeCycleStatus": {
-     "type": "string",
-     "description": "The broadcast's status. The status can be updated using the API's liveBroadcasts.transition method.",
-     "enum": [
-      "abandoned",
-      "complete",
-      "completeStarting",
-      "created",
-      "live",
-      "liveStarting",
-      "ready",
-      "reclaimed",
-      "revoked",
-      "testStarting",
-      "testing"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "liveBroadcastPriority": {
-     "type": "string",
-     "description": "Priority of the live broadcast event (internal state).",
-     "enum": [
-      "high",
-      "low",
-      "normal"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "privacyStatus": {
-     "type": "string",
-     "description": "The broadcast's privacy status. Note that the broadcast represents exactly one YouTube video, so the privacy settings are identical to those supported for videos. In addition, you can set this field by modifying the broadcast resource or by setting the privacyStatus field of the corresponding video resource.",
-     "enum": [
-      "private",
-      "public",
-      "unlisted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ],
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.insert",
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "recordingStatus": {
-     "type": "string",
-     "description": "The broadcast's recording status.",
-     "enum": [
-      "notRecording",
-      "recorded",
-      "recording"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LiveBroadcastTopic": {
-   "id": "LiveBroadcastTopic",
-   "type": "object",
-   "properties": {
-    "snippet": {
-     "$ref": "LiveBroadcastTopicSnippet",
-     "description": "Information about the topic matched."
-    },
-    "type": {
-     "type": "string",
-     "description": "The type of the topic.",
-     "enum": [
-      "videoGame"
-     ],
-     "enumDescriptions": [
-      ""
-     ]
-    },
-    "unmatched": {
-     "type": "boolean",
-     "description": "If this flag is set it means that we have not been able to match the topic title and type provided to a known entity."
-    }
-   }
-  },
-  "LiveBroadcastTopicDetails": {
-   "id": "LiveBroadcastTopicDetails",
-   "type": "object",
-   "properties": {
-    "topics": {
-     "type": "array",
-     "items": {
-      "$ref": "LiveBroadcastTopic"
-     }
-    }
-   }
-  },
-  "LiveBroadcastTopicSnippet": {
-   "id": "LiveBroadcastTopicSnippet",
-   "type": "object",
-   "properties": {
-    "name": {
-     "type": "string",
-     "description": "The name of the topic."
-    },
-    "releaseDate": {
-     "type": "string",
-     "description": "The date at which the topic was released. Filled for types: videoGame"
-    }
-   }
-  },
-  "LiveChatBan": {
-   "id": "LiveChatBan",
-   "type": "object",
-   "description": "A liveChatBan resource represents a ban for a YouTube live chat.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the ban."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveChatBan\".",
-     "default": "youtube#liveChatBan"
-    },
-    "snippet": {
-     "$ref": "LiveChatBanSnippet",
-     "description": "The snippet object contains basic details about the ban."
-    }
-   }
-  },
-  "LiveChatBanSnippet": {
-   "id": "LiveChatBanSnippet",
-   "type": "object",
-   "properties": {
-    "banDurationSeconds": {
-     "type": "string",
-     "description": "The duration of a ban, only filled if the ban has type TEMPORARY.",
-     "format": "uint64"
-    },
-    "bannedUserDetails": {
-     "$ref": "ChannelProfileDetails"
-    },
-    "liveChatId": {
-     "type": "string",
-     "description": "The chat this ban is pertinent to."
-    },
-    "type": {
-     "type": "string",
-     "description": "The type of ban.",
-     "enum": [
-      "permanent",
-      "temporary"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LiveChatFanFundingEventDetails": {
-   "id": "LiveChatFanFundingEventDetails",
-   "type": "object",
-   "properties": {
-    "amountDisplayString": {
-     "type": "string",
-     "description": "A rendered string that displays the fund amount and currency to the user."
-    },
-    "amountMicros": {
-     "type": "string",
-     "description": "The amount of the fund.",
-     "format": "uint64"
-    },
-    "currency": {
-     "type": "string",
-     "description": "The currency in which the fund was made."
-    },
-    "userComment": {
-     "type": "string",
-     "description": "The comment added by the user to this fan funding event."
-    }
-   }
-  },
-  "LiveChatMessage": {
-   "id": "LiveChatMessage",
-   "type": "object",
-   "description": "A liveChatMessage resource represents a chat message in a YouTube Live Chat.",
-   "properties": {
-    "authorDetails": {
-     "$ref": "LiveChatMessageAuthorDetails",
-     "description": "The authorDetails object contains basic details about the user that posted this message."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the message."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveChatMessage\".",
-     "default": "youtube#liveChatMessage"
-    },
-    "snippet": {
-     "$ref": "LiveChatMessageSnippet",
-     "description": "The snippet object contains basic details about the message."
-    }
-   }
-  },
-  "LiveChatMessageAuthorDetails": {
-   "id": "LiveChatMessageAuthorDetails",
-   "type": "object",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The YouTube channel ID."
-    },
-    "channelUrl": {
-     "type": "string",
-     "description": "The channel's URL."
-    },
-    "displayName": {
-     "type": "string",
-     "description": "The channel's display name."
-    },
-    "isChatModerator": {
-     "type": "boolean",
-     "description": "Whether the author is a moderator of the live chat."
-    },
-    "isChatOwner": {
-     "type": "boolean",
-     "description": "Whether the author is the owner of the live chat."
-    },
-    "isChatSponsor": {
-     "type": "boolean",
-     "description": "Whether the author is a sponsor of the live chat."
-    },
-    "isVerified": {
-     "type": "boolean",
-     "description": "Whether the author's identity has been verified by YouTube."
-    },
-    "profileImageUrl": {
-     "type": "string",
-     "description": "The channels's avatar URL."
-    }
-   }
-  },
-  "LiveChatMessageDeletedDetails": {
-   "id": "LiveChatMessageDeletedDetails",
-   "type": "object",
-   "properties": {
-    "deletedMessageId": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveChatMessageListResponse": {
-   "id": "LiveChatMessageListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of live chat messages.",
-     "items": {
-      "$ref": "LiveChatMessage"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveChatMessageListResponse\".",
-     "default": "youtube#liveChatMessageListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "offlineAt": {
-     "type": "string",
-     "description": "The date and time when the underlying stream went offline. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "pollingIntervalMillis": {
-     "type": "integer",
-     "description": "The amount of time the client should wait before polling again.",
-     "format": "uint32"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "LiveChatMessageRetractedDetails": {
-   "id": "LiveChatMessageRetractedDetails",
-   "type": "object",
-   "properties": {
-    "retractedMessageId": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveChatMessageSnippet": {
-   "id": "LiveChatMessageSnippet",
-   "type": "object",
-   "properties": {
-    "authorChannelId": {
-     "type": "string",
-     "description": "The ID of the user that authored this message, this field is not always filled. textMessageEvent - the user that wrote the message fanFundingEvent - the user that funded the broadcast newSponsorEvent - the user that just became a sponsor messageDeletedEvent - the moderator that took the action messageRetractedEvent - the author that retracted their message userBannedEvent - the moderator that took the action superChatEvent - the user that made the purchase"
-    },
-    "displayMessage": {
-     "type": "string",
-     "description": "Contains a string that can be displayed to the user. If this field is not present the message is silent, at the moment only messages of type TOMBSTONE and CHAT_ENDED_EVENT are silent."
-    },
-    "fanFundingEventDetails": {
-     "$ref": "LiveChatFanFundingEventDetails",
-     "description": "Details about the funding event, this is only set if the type is 'fanFundingEvent'."
-    },
-    "hasDisplayContent": {
-     "type": "boolean",
-     "description": "Whether the message has display content that should be displayed to users."
-    },
-    "liveChatId": {
-     "type": "string"
-    },
-    "messageDeletedDetails": {
-     "$ref": "LiveChatMessageDeletedDetails"
-    },
-    "messageRetractedDetails": {
-     "$ref": "LiveChatMessageRetractedDetails"
-    },
-    "pollClosedDetails": {
-     "$ref": "LiveChatPollClosedDetails"
-    },
-    "pollEditedDetails": {
-     "$ref": "LiveChatPollEditedDetails"
-    },
-    "pollOpenedDetails": {
-     "$ref": "LiveChatPollOpenedDetails"
-    },
-    "pollVotedDetails": {
-     "$ref": "LiveChatPollVotedDetails"
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time when the message was orignally published. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "superChatDetails": {
-     "$ref": "LiveChatSuperChatDetails",
-     "description": "Details about the Super Chat event, this is only set if the type is 'superChatEvent'."
-    },
-    "textMessageDetails": {
-     "$ref": "LiveChatTextMessageDetails",
-     "description": "Details about the text message, this is only set if the type is 'textMessageEvent'."
-    },
-    "type": {
-     "type": "string",
-     "description": "The type of message, this will always be present, it determines the contents of the message as well as which fields will be present.",
-     "enum": [
-      "chatEndedEvent",
-      "fanFundingEvent",
-      "messageDeletedEvent",
-      "messageRetractedEvent",
-      "newSponsorEvent",
-      "pollClosedEvent",
-      "pollEditedEvent",
-      "pollOpenedEvent",
-      "pollVotedEvent",
-      "sponsorOnlyModeEndedEvent",
-      "sponsorOnlyModeStartedEvent",
-      "superChatEvent",
-      "textMessageEvent",
-      "tombstone",
-      "userBannedEvent"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "userBannedDetails": {
-     "$ref": "LiveChatUserBannedMessageDetails"
-    }
-   }
-  },
-  "LiveChatModerator": {
-   "id": "LiveChatModerator",
-   "type": "object",
-   "description": "A liveChatModerator resource represents a moderator for a YouTube live chat. A chat moderator has the ability to ban/unban users from a chat, remove message, etc.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the moderator."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveChatModerator\".",
-     "default": "youtube#liveChatModerator"
-    },
-    "snippet": {
-     "$ref": "LiveChatModeratorSnippet",
-     "description": "The snippet object contains basic details about the moderator."
-    }
-   }
-  },
-  "LiveChatModeratorListResponse": {
-   "id": "LiveChatModeratorListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of moderators that match the request criteria.",
-     "items": {
-      "$ref": "LiveChatModerator"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveChatModeratorListResponse\".",
-     "default": "youtube#liveChatModeratorListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "LiveChatModeratorSnippet": {
-   "id": "LiveChatModeratorSnippet",
-   "type": "object",
-   "properties": {
-    "liveChatId": {
-     "type": "string",
-     "description": "The ID of the live chat this moderator can act on."
-    },
-    "moderatorDetails": {
-     "$ref": "ChannelProfileDetails",
-     "description": "Details about the moderator."
-    }
-   }
-  },
-  "LiveChatPollClosedDetails": {
-   "id": "LiveChatPollClosedDetails",
-   "type": "object",
-   "properties": {
-    "pollId": {
-     "type": "string",
-     "description": "The id of the poll that was closed."
-    }
-   }
-  },
-  "LiveChatPollEditedDetails": {
-   "id": "LiveChatPollEditedDetails",
-   "type": "object",
-   "properties": {
-    "id": {
-     "type": "string"
-    },
-    "items": {
-     "type": "array",
-     "items": {
-      "$ref": "LiveChatPollItem"
-     }
-    },
-    "prompt": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveChatPollItem": {
-   "id": "LiveChatPollItem",
-   "type": "object",
-   "properties": {
-    "description": {
-     "type": "string",
-     "description": "Plain text description of the item."
-    },
-    "itemId": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveChatPollOpenedDetails": {
-   "id": "LiveChatPollOpenedDetails",
-   "type": "object",
-   "properties": {
-    "id": {
-     "type": "string"
-    },
-    "items": {
-     "type": "array",
-     "items": {
-      "$ref": "LiveChatPollItem"
-     }
-    },
-    "prompt": {
-     "type": "string"
-    }
-   }
-  },
-  "LiveChatPollVotedDetails": {
-   "id": "LiveChatPollVotedDetails",
-   "type": "object",
-   "properties": {
-    "itemId": {
-     "type": "string",
-     "description": "The poll item the user chose."
-    },
-    "pollId": {
-     "type": "string",
-     "description": "The poll the user voted on."
-    }
-   }
-  },
-  "LiveChatSuperChatDetails": {
-   "id": "LiveChatSuperChatDetails",
-   "type": "object",
-   "properties": {
-    "amountDisplayString": {
-     "type": "string",
-     "description": "A rendered string that displays the fund amount and currency to the user."
-    },
-    "amountMicros": {
-     "type": "string",
-     "description": "The amount purchased by the user, in micros (1,750,000 micros = 1.75).",
-     "format": "uint64"
-    },
-    "currency": {
-     "type": "string",
-     "description": "The currency in which the purchase was made."
-    },
-    "tier": {
-     "type": "integer",
-     "description": "The tier in which the amount belongs to. Lower amounts belong to lower tiers. Starts at 1.",
-     "format": "uint32"
-    },
-    "userComment": {
-     "type": "string",
-     "description": "The comment added by the user to this Super Chat event."
-    }
-   }
-  },
-  "LiveChatTextMessageDetails": {
-   "id": "LiveChatTextMessageDetails",
-   "type": "object",
-   "properties": {
-    "messageText": {
-     "type": "string",
-     "description": "The user's message."
-    }
-   }
-  },
-  "LiveChatUserBannedMessageDetails": {
-   "id": "LiveChatUserBannedMessageDetails",
-   "type": "object",
-   "properties": {
-    "banDurationSeconds": {
-     "type": "string",
-     "description": "The duration of the ban. This property is only present if the banType is temporary.",
-     "format": "uint64"
-    },
-    "banType": {
-     "type": "string",
-     "description": "The type of ban.",
-     "enum": [
-      "permanent",
-      "temporary"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "bannedUserDetails": {
-     "$ref": "ChannelProfileDetails",
-     "description": "The details of the user that was banned."
-    }
-   }
-  },
-  "LiveStream": {
-   "id": "LiveStream",
-   "type": "object",
-   "description": "A live stream describes a live ingestion point.",
-   "properties": {
-    "cdn": {
-     "$ref": "CdnSettings",
-     "description": "The cdn object defines the live stream's content delivery network (CDN) settings. These settings provide details about the manner in which you stream your content to YouTube."
-    },
-    "contentDetails": {
-     "$ref": "LiveStreamContentDetails",
-     "description": "The content_details object contains information about the stream, including the closed captions ingestion URL."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the stream.",
-     "annotations": {
-      "required": [
-       "youtube.liveStreams.update"
-      ]
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveStream\".",
-     "default": "youtube#liveStream"
-    },
-    "snippet": {
-     "$ref": "LiveStreamSnippet",
-     "description": "The snippet object contains basic details about the stream, including its channel, title, and description."
-    },
-    "status": {
-     "$ref": "LiveStreamStatus",
-     "description": "The status object contains information about live stream's status."
-    }
-   }
-  },
-  "LiveStreamConfigurationIssue": {
-   "id": "LiveStreamConfigurationIssue",
-   "type": "object",
-   "properties": {
-    "description": {
-     "type": "string",
-     "description": "The long-form description of the issue and how to resolve it."
-    },
-    "reason": {
-     "type": "string",
-     "description": "The short-form reason for this issue."
-    },
-    "severity": {
-     "type": "string",
-     "description": "How severe this issue is to the stream.",
-     "enum": [
-      "error",
-      "info",
-      "warning"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "type": {
-     "type": "string",
-     "description": "The kind of error happening.",
-     "enum": [
-      "audioBitrateHigh",
-      "audioBitrateLow",
-      "audioBitrateMismatch",
-      "audioCodec",
-      "audioCodecMismatch",
-      "audioSampleRate",
-      "audioSampleRateMismatch",
-      "audioStereoMismatch",
-      "audioTooManyChannels",
-      "badContainer",
-      "bitrateHigh",
-      "bitrateLow",
-      "frameRateHigh",
-      "framerateMismatch",
-      "gopMismatch",
-      "gopSizeLong",
-      "gopSizeOver",
-      "gopSizeShort",
-      "interlacedVideo",
-      "multipleAudioStreams",
-      "multipleVideoStreams",
-      "noAudioStream",
-      "noVideoStream",
-      "openGop",
-      "resolutionMismatch",
-      "videoBitrateMismatch",
-      "videoCodec",
-      "videoCodecMismatch",
-      "videoIngestionStarved",
-      "videoInterlaceMismatch",
-      "videoProfileMismatch",
-      "videoResolutionSuboptimal",
-      "videoResolutionUnsupported"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LiveStreamContentDetails": {
-   "id": "LiveStreamContentDetails",
-   "type": "object",
-   "description": "Detailed settings of a stream.",
-   "properties": {
-    "closedCaptionsIngestionUrl": {
-     "type": "string",
-     "description": "The ingestion URL where the closed captions of this stream are sent."
-    },
-    "isReusable": {
-     "type": "boolean",
-     "description": "Indicates whether the stream is reusable, which means that it can be bound to multiple broadcasts. It is common for broadcasters to reuse the same stream for many different broadcasts if those broadcasts occur at different times.\n\nIf you set this value to false, then the stream will not be reusable, which means that it can only be bound to one broadcast. Non-reusable streams differ from reusable streams in the following ways:  \n- A non-reusable stream can only be bound to one broadcast. \n- A non-reusable stream might be deleted by an automated process after the broadcast ends. \n- The  liveStreams.list method does not list non-reusable streams if you call the method and set the mine parameter to true. The only way to use that method to retrieve the resource for a non-reusable stream is to use the id parameter to identify the stream."
-    }
-   }
-  },
-  "LiveStreamHealthStatus": {
-   "id": "LiveStreamHealthStatus",
-   "type": "object",
-   "properties": {
-    "configurationIssues": {
-     "type": "array",
-     "description": "The configurations issues on this stream",
-     "items": {
-      "$ref": "LiveStreamConfigurationIssue"
-     }
-    },
-    "lastUpdateTimeSeconds": {
-     "type": "string",
-     "description": "The last time this status was updated (in seconds)",
-     "format": "uint64"
-    },
-    "status": {
-     "type": "string",
-     "description": "The status code of this stream",
-     "enum": [
-      "bad",
-      "good",
-      "noData",
-      "ok",
-      "revoked"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LiveStreamListResponse": {
-   "id": "LiveStreamListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of live streams that match the request criteria.",
-     "items": {
-      "$ref": "LiveStream"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#liveStreamListResponse\".",
-     "default": "youtube#liveStreamListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "LiveStreamSnippet": {
-   "id": "LiveStreamSnippet",
-   "type": "object",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel that is transmitting the stream."
-    },
-    "description": {
-     "type": "string",
-     "description": "The stream's description. The value cannot be longer than 10000 characters."
-    },
-    "isDefaultStream": {
-     "type": "boolean"
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the stream was created. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "title": {
-     "type": "string",
-     "description": "The stream's title. The value must be between 1 and 128 characters long.",
-     "annotations": {
-      "required": [
-       "youtube.liveStreams.insert",
-       "youtube.liveStreams.update"
-      ]
-     }
-    }
-   }
-  },
-  "LiveStreamStatus": {
-   "id": "LiveStreamStatus",
-   "type": "object",
-   "description": "Brief description of the live stream status.",
-   "properties": {
-    "healthStatus": {
-     "$ref": "LiveStreamHealthStatus",
-     "description": "The health status of the stream."
-    },
-    "streamStatus": {
-     "type": "string",
-     "enum": [
-      "active",
-      "created",
-      "error",
-      "inactive",
-      "ready"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "LocalizedProperty": {
-   "id": "LocalizedProperty",
-   "type": "object",
-   "properties": {
-    "default": {
-     "type": "string"
-    },
-    "defaultLanguage": {
-     "$ref": "LanguageTag",
-     "description": "The language of the default property."
-    },
-    "localized": {
-     "type": "array",
-     "items": {
-      "$ref": "LocalizedString"
-     }
-    }
-   }
-  },
-  "LocalizedString": {
-   "id": "LocalizedString",
-   "type": "object",
-   "properties": {
-    "language": {
-     "type": "string"
-    },
-    "value": {
-     "type": "string"
-    }
-   }
-  },
-  "MonitorStreamInfo": {
-   "id": "MonitorStreamInfo",
-   "type": "object",
-   "description": "Settings and Info of the monitor stream",
-   "properties": {
-    "broadcastStreamDelayMs": {
-     "type": "integer",
-     "description": "If you have set the enableMonitorStream property to true, then this property determines the length of the live broadcast delay.",
-     "format": "uint32",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    },
-    "embedHtml": {
-     "type": "string",
-     "description": "HTML code that embeds a player that plays the monitor stream."
-    },
-    "enableMonitorStream": {
-     "type": "boolean",
-     "description": "This value determines whether the monitor stream is enabled for the broadcast. If the monitor stream is enabled, then YouTube will broadcast the event content on a special stream intended only for the broadcaster's consumption. The broadcaster can use the stream to review the event content and also to identify the optimal times to insert cuepoints.\n\nYou need to set this value to true if you intend to have a broadcast delay for your event.\n\nNote: This property cannot be updated once the broadcast is in the testing or live state.",
-     "annotations": {
-      "required": [
-       "youtube.liveBroadcasts.update"
-      ]
-     }
-    }
-   }
-  },
-  "PageInfo": {
-   "id": "PageInfo",
-   "type": "object",
-   "description": "Paging details for lists of resources, including total number of items available and number of resources returned in a single page.",
-   "properties": {
-    "resultsPerPage": {
-     "type": "integer",
-     "description": "The number of results included in the API response.",
-     "format": "int32"
-    },
-    "totalResults": {
-     "type": "integer",
-     "description": "The total number of results in the result set.",
-     "format": "int32"
-    }
-   }
-  },
-  "Playlist": {
-   "id": "Playlist",
-   "type": "object",
-   "description": "A playlist resource represents a YouTube playlist. A playlist is a collection of videos that can be viewed sequentially and shared with other users. A playlist can contain up to 200 videos, and YouTube does not limit the number of playlists that each user creates. By default, playlists are publicly visible to other users, but playlists can be public or private.\n\nYouTube also uses playlists to identify special collections of videos for a channel, such as:  \n- uploaded videos \n- favorite videos \n- positively rated (liked) videos \n- watch history \n- watch later  To be more specific, these lists are associated with a channel, which is a collection of a person, group, or company's videos, playlists, and other YouTube information. You can retrieve the playlist IDs for each of these lists from the  channel resource for a given channel.\n\nYou can then use the   playlistItems.list method to retrieve any of those lists. You can also add or remove items from those lists by calling the   playlistItems.insert and   playlistItems.delete methods.",
-   "properties": {
-    "contentDetails": {
-     "$ref": "PlaylistContentDetails",
-     "description": "The contentDetails object contains information like video count."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the playlist."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#playlist\".",
-     "default": "youtube#playlist"
-    },
-    "localizations": {
-     "type": "object",
-     "description": "Localizations for different languages",
-     "additionalProperties": {
-      "$ref": "PlaylistLocalization",
-      "description": "The language tag, using string since map_key require simple types."
-     }
-    },
-    "player": {
-     "$ref": "PlaylistPlayer",
-     "description": "The player object contains information that you would use to play the playlist in an embedded player."
-    },
-    "snippet": {
-     "$ref": "PlaylistSnippet",
-     "description": "The snippet object contains basic details about the playlist, such as its title and description."
-    },
-    "status": {
-     "$ref": "PlaylistStatus",
-     "description": "The status object contains status information for the playlist."
-    }
-   }
-  },
-  "PlaylistContentDetails": {
-   "id": "PlaylistContentDetails",
-   "type": "object",
-   "properties": {
-    "itemCount": {
-     "type": "integer",
-     "description": "The number of videos in the playlist.",
-     "format": "uint32"
-    }
-   }
-  },
-  "PlaylistItem": {
-   "id": "PlaylistItem",
-   "type": "object",
-   "description": "A playlistItem resource identifies another resource, such as a video, that is included in a playlist. In addition, the playlistItem  resource contains details about the included resource that pertain specifically to how that resource is used in that playlist.\n\nYouTube uses playlists to identify special collections of videos for a channel, such as:  \n- uploaded videos \n- favorite videos \n- positively rated (liked) videos \n- watch history \n- watch later  To be more specific, these lists are associated with a channel, which is a collection of a person, group, or company's videos, playlists, and other YouTube information.\n\nYou can retrieve the playlist IDs for each of these lists from the  channel resource  for a given channel. You can then use the   playlistItems.list method to retrieve any of those lists. You can also add or remove items from those lists by calling the   playlistItems.insert and   playlistItems.delete methods. For example, if a user gives a positive rating to a video, you would insert that video into the liked videos playlist for that user's channel.",
-   "properties": {
-    "contentDetails": {
-     "$ref": "PlaylistItemContentDetails",
-     "description": "The contentDetails object is included in the resource if the included item is a YouTube video. The object contains additional information about the video."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the playlist item."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#playlistItem\".",
-     "default": "youtube#playlistItem"
-    },
-    "snippet": {
-     "$ref": "PlaylistItemSnippet",
-     "description": "The snippet object contains basic details about the playlist item, such as its title and position in the playlist."
-    },
-    "status": {
-     "$ref": "PlaylistItemStatus",
-     "description": "The status object contains information about the playlist item's privacy status."
-    }
-   }
-  },
-  "PlaylistItemContentDetails": {
-   "id": "PlaylistItemContentDetails",
-   "type": "object",
-   "properties": {
-    "endAt": {
-     "type": "string",
-     "description": "The time, measured in seconds from the start of the video, when the video should stop playing. (The playlist owner can specify the times when the video should start and stop playing when the video is played in the context of the playlist.) By default, assume that the video.endTime is the end of the video."
-    },
-    "note": {
-     "type": "string",
-     "description": "A user-generated note for this item."
-    },
-    "startAt": {
-     "type": "string",
-     "description": "The time, measured in seconds from the start of the video, when the video should start playing. (The playlist owner can specify the times when the video should start and stop playing when the video is played in the context of the playlist.) The default value is 0."
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify a video. To retrieve the video resource, set the id query parameter to this value in your API request."
-    },
-    "videoPublishedAt": {
-     "type": "string",
-     "description": "The date and time that the video was published to YouTube. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    }
-   }
-  },
-  "PlaylistItemListResponse": {
-   "id": "PlaylistItemListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of playlist items that match the request criteria.",
-     "items": {
-      "$ref": "PlaylistItem"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#playlistItemListResponse\".",
-     "default": "youtube#playlistItemListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "PlaylistItemSnippet": {
-   "id": "PlaylistItemSnippet",
-   "type": "object",
-   "description": "Basic details about a playlist, including title, description and thumbnails.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the user that added the item to the playlist."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "Channel title for the channel that the playlist item belongs to."
-    },
-    "description": {
-     "type": "string",
-     "description": "The item's description."
-    },
-    "playlistId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the playlist that the playlist item is in.",
-     "annotations": {
-      "required": [
-       "youtube.playlistItems.insert",
-       "youtube.playlistItems.update"
-      ]
-     }
-    },
-    "position": {
-     "type": "integer",
-     "description": "The order in which the item appears in the playlist. The value uses a zero-based index, so the first item has a position of 0, the second item has a position of 1, and so forth.",
-     "format": "uint32"
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the item was added to the playlist. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The id object contains information that can be used to uniquely identify the resource that is included in the playlist as the playlist item.",
-     "annotations": {
-      "required": [
-       "youtube.playlistItems.insert",
-       "youtube.playlistItems.update"
-      ]
-     }
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the playlist item. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The item's title."
-    }
-   }
-  },
-  "PlaylistItemStatus": {
-   "id": "PlaylistItemStatus",
-   "type": "object",
-   "description": "Information about the playlist item's privacy status.",
-   "properties": {
-    "privacyStatus": {
-     "type": "string",
-     "description": "This resource's privacy status.",
-     "enum": [
-      "private",
-      "public",
-      "unlisted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "PlaylistListResponse": {
-   "id": "PlaylistListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of playlists that match the request criteria.",
-     "items": {
-      "$ref": "Playlist"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#playlistListResponse\".",
-     "default": "youtube#playlistListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "PlaylistLocalization": {
-   "id": "PlaylistLocalization",
-   "type": "object",
-   "description": "Playlist localization setting",
-   "properties": {
-    "description": {
-     "type": "string",
-     "description": "The localized strings for playlist's description."
-    },
-    "title": {
-     "type": "string",
-     "description": "The localized strings for playlist's title."
-    }
-   }
-  },
-  "PlaylistPlayer": {
-   "id": "PlaylistPlayer",
-   "type": "object",
-   "properties": {
-    "embedHtml": {
-     "type": "string",
-     "description": "An \u003ciframe\u003e tag that embeds a player that will play the playlist."
-    }
-   }
-  },
-  "PlaylistSnippet": {
-   "id": "PlaylistSnippet",
-   "type": "object",
-   "description": "Basic details about a playlist, including title, description and thumbnails.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel that published the playlist."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "The channel title of the channel that the video belongs to."
-    },
-    "defaultLanguage": {
-     "type": "string",
-     "description": "The language of the playlist's default title and description."
-    },
-    "description": {
-     "type": "string",
-     "description": "The playlist's description."
-    },
-    "localized": {
-     "$ref": "PlaylistLocalization",
-     "description": "Localized title and description, read-only."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the playlist was created. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "tags": {
-     "type": "array",
-     "description": "Keyword tags associated with the playlist.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the playlist. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The playlist's title.",
-     "annotations": {
-      "required": [
-       "youtube.playlists.insert",
-       "youtube.playlists.update"
-      ]
-     }
-    }
-   }
-  },
-  "PlaylistStatus": {
-   "id": "PlaylistStatus",
-   "type": "object",
-   "properties": {
-    "privacyStatus": {
-     "type": "string",
-     "description": "The playlist's privacy status.",
-     "enum": [
-      "private",
-      "public",
-      "unlisted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "PromotedItem": {
-   "id": "PromotedItem",
-   "type": "object",
-   "description": "Describes a single promoted item.",
-   "properties": {
-    "customMessage": {
-     "type": "string",
-     "description": "A custom message to display for this promotion. This field is currently ignored unless the promoted item is a website."
-    },
-    "id": {
-     "$ref": "PromotedItemId",
-     "description": "Identifies the promoted item."
-    },
-    "promotedByContentOwner": {
-     "type": "boolean",
-     "description": "If true, the content owner's name will be used when displaying the promotion. This field can only be set when the update is made on behalf of the content owner."
-    },
-    "timing": {
-     "$ref": "InvideoTiming",
-     "description": "The temporal position within the video where the promoted item will be displayed. If present, it overrides the default timing."
-    }
-   }
-  },
-  "PromotedItemId": {
-   "id": "PromotedItemId",
-   "type": "object",
-   "description": "Describes a single promoted item id. It is a union of various possible types.",
-   "properties": {
-    "recentlyUploadedBy": {
-     "type": "string",
-     "description": "If type is recentUpload, this field identifies the channel from which to take the recent upload. If missing, the channel is assumed to be the same channel for which the invideoPromotion is set."
-    },
-    "type": {
-     "type": "string",
-     "description": "Describes the type of the promoted item.",
-     "enum": [
-      "recentUpload",
-      "video",
-      "website"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "videoId": {
-     "type": "string",
-     "description": "If the promoted item represents a video, this field represents the unique YouTube ID identifying it. This field will be present only if type has the value video."
-    },
-    "websiteUrl": {
-     "type": "string",
-     "description": "If the promoted item represents a website, this field represents the url pointing to the website. This field will be present only if type has the value website."
-    }
-   }
-  },
-  "PropertyValue": {
-   "id": "PropertyValue",
-   "type": "object",
-   "description": "A pair Property / Value.",
-   "properties": {
-    "property": {
-     "type": "string",
-     "description": "A property."
-    },
-    "value": {
-     "type": "string",
-     "description": "The property's value."
-    }
-   }
-  },
-  "ResourceId": {
-   "id": "ResourceId",
-   "type": "object",
-   "description": "A resource id is a generic reference that points to another YouTube resource.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the referred resource, if that resource is a channel. This property is only present if the resourceId.kind value is youtube#channel."
-    },
-    "kind": {
-     "type": "string",
-     "description": "The type of the API resource."
-    },
-    "playlistId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the referred resource, if that resource is a playlist. This property is only present if the resourceId.kind value is youtube#playlist."
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the referred resource, if that resource is a video. This property is only present if the resourceId.kind value is youtube#video."
-    }
-   }
-  },
-  "SearchListResponse": {
-   "id": "SearchListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of results that match the search criteria.",
-     "items": {
-      "$ref": "SearchResult"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#searchListResponse\".",
-     "default": "youtube#searchListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "regionCode": {
-     "type": "string"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "SearchResult": {
-   "id": "SearchResult",
-   "type": "object",
-   "description": "A search result contains information about a YouTube video, channel, or playlist that matches the search parameters specified in an API request. While a search result points to a uniquely identifiable resource, like a video, it does not have its own persistent data.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "$ref": "ResourceId",
-     "description": "The id object contains information that can be used to uniquely identify the resource that matches the search request."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#searchResult\".",
-     "default": "youtube#searchResult"
-    },
-    "snippet": {
-     "$ref": "SearchResultSnippet",
-     "description": "The snippet object contains basic details about a search result, such as its title or description. For example, if the search result is a video, then the title will be the video's title and the description will be the video's description."
-    }
-   }
-  },
-  "SearchResultSnippet": {
-   "id": "SearchResultSnippet",
-   "type": "object",
-   "description": "Basic details about a search result, including title, description and thumbnails of the item referenced by the search result.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The value that YouTube uses to uniquely identify the channel that published the resource that the search result identifies."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "The title of the channel that published the resource that the search result identifies."
-    },
-    "description": {
-     "type": "string",
-     "description": "A description of the search result."
-    },
-    "liveBroadcastContent": {
-     "type": "string",
-     "description": "It indicates if the resource (video or channel) has upcoming/active live broadcast content. Or it's \"none\" if there is not any upcoming/active live broadcasts.",
-     "enum": [
-      "live",
-      "none",
-      "upcoming"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The creation date and time of the resource that the search result identifies. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the search result. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The title of the search result."
-    }
-   }
-  },
-  "Sponsor": {
-   "id": "Sponsor",
-   "type": "object",
-   "description": "A sponsor resource represents a sponsor for a YouTube channel. A sponsor provides recurring monetary support to a creator and receives special benefits.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the sponsor."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#sponsor\".",
-     "default": "youtube#sponsor"
-    },
-    "snippet": {
-     "$ref": "SponsorSnippet",
-     "description": "The snippet object contains basic details about the sponsor."
-    }
-   }
-  },
-  "SponsorListResponse": {
-   "id": "SponsorListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of sponsors that match the request criteria.",
-     "items": {
-      "$ref": "Sponsor"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#sponsorListResponse\".",
-     "default": "youtube#sponsorListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "SponsorSnippet": {
-   "id": "SponsorSnippet",
-   "type": "object",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The id of the channel being sponsored."
-    },
-    "sponsorDetails": {
-     "$ref": "ChannelProfileDetails",
-     "description": "Details about the sponsor."
-    },
-    "sponsorSince": {
-     "type": "string",
-     "description": "The date and time when the user became a sponsor. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    }
-   }
-  },
-  "Subscription": {
-   "id": "Subscription",
-   "type": "object",
-   "description": "A subscription resource contains information about a YouTube user subscription. A subscription notifies a user when new videos are added to a channel or when another user takes one of several actions on YouTube, such as uploading a video, rating a video, or commenting on a video.",
-   "properties": {
-    "contentDetails": {
-     "$ref": "SubscriptionContentDetails",
-     "description": "The contentDetails object contains basic statistics about the subscription."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the subscription."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#subscription\".",
-     "default": "youtube#subscription"
-    },
-    "snippet": {
-     "$ref": "SubscriptionSnippet",
-     "description": "The snippet object contains basic details about the subscription, including its title and the channel that the user subscribed to."
-    },
-    "subscriberSnippet": {
-     "$ref": "SubscriptionSubscriberSnippet",
-     "description": "The subscriberSnippet object contains basic details about the sbuscriber."
-    }
-   }
-  },
-  "SubscriptionContentDetails": {
-   "id": "SubscriptionContentDetails",
-   "type": "object",
-   "description": "Details about the content to witch a subscription refers.",
-   "properties": {
-    "activityType": {
-     "type": "string",
-     "description": "The type of activity this subscription is for (only uploads, everything).",
-     "enum": [
-      "all",
-      "uploads"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "newItemCount": {
-     "type": "integer",
-     "description": "The number of new items in the subscription since its content was last read.",
-     "format": "uint32"
-    },
-    "totalItemCount": {
-     "type": "integer",
-     "description": "The approximate number of items that the subscription points to.",
-     "format": "uint32"
-    }
-   }
-  },
-  "SubscriptionListResponse": {
-   "id": "SubscriptionListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of subscriptions that match the request criteria.",
-     "items": {
-      "$ref": "Subscription"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#subscriptionListResponse\".",
-     "default": "youtube#subscriptionListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "SubscriptionSnippet": {
-   "id": "SubscriptionSnippet",
-   "type": "object",
-   "description": "Basic details about a subscription, including title, description and thumbnails of the subscribed item.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the subscriber's channel."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "Channel title for the channel that the subscription belongs to."
-    },
-    "description": {
-     "type": "string",
-     "description": "The subscription's details."
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the subscription was created. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "resourceId": {
-     "$ref": "ResourceId",
-     "description": "The id object contains information about the channel that the user subscribed to.",
-     "annotations": {
-      "required": [
-       "youtube.subscriptions.insert"
-      ]
-     }
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the video. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The subscription's title."
-    }
-   }
-  },
-  "SubscriptionSubscriberSnippet": {
-   "id": "SubscriptionSubscriberSnippet",
-   "type": "object",
-   "description": "Basic details about a subscription's subscriber including title, description, channel ID and thumbnails.",
-   "properties": {
-    "channelId": {
-     "type": "string",
-     "description": "The channel ID of the subscriber."
-    },
-    "description": {
-     "type": "string",
-     "description": "The description of the subscriber."
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "Thumbnails for this subscriber."
-    },
-    "title": {
-     "type": "string",
-     "description": "The title of the subscriber."
-    }
-   }
-  },
-  "SuperChatEvent": {
-   "id": "SuperChatEvent",
-   "type": "object",
-   "description": "A superChatEvent resource represents a Super Chat purchase on a YouTube channel.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube assigns to uniquely identify the Super Chat event."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#superChatEvent\".",
-     "default": "youtube#superChatEvent"
-    },
-    "snippet": {
-     "$ref": "SuperChatEventSnippet",
-     "description": "The snippet object contains basic details about the Super Chat event."
-    }
-   }
-  },
-  "SuperChatEventListResponse": {
-   "id": "SuperChatEventListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of Super Chat purchases that match the request criteria.",
-     "items": {
-      "$ref": "SuperChatEvent"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#superChatEventListResponse\".",
-     "default": "youtube#superChatEventListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "SuperChatEventSnippet": {
-   "id": "SuperChatEventSnippet",
-   "type": "object",
-   "properties": {
-    "amountMicros": {
-     "type": "string",
-     "description": "The purchase amount, in micros of the purchase currency. e.g., 1 is represented as 1000000.",
-     "format": "uint64"
-    },
-    "channelId": {
-     "type": "string",
-     "description": "Channel id where the event occurred."
-    },
-    "commentText": {
-     "type": "string",
-     "description": "The text contents of the comment left by the user."
-    },
-    "createdAt": {
-     "type": "string",
-     "description": "The date and time when the event occurred. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "currency": {
-     "type": "string",
-     "description": "The currency in which the purchase was made. ISO 4217."
-    },
-    "displayString": {
-     "type": "string",
-     "description": "A rendered string that displays the purchase amount and currency (e.g., \"$1.00\"). The string is rendered for the given language."
-    },
-    "messageType": {
-     "type": "integer",
-     "description": "The tier for the paid message, which is based on the amount of money spent to purchase the message.",
-     "format": "uint32"
-    },
-    "supporterDetails": {
-     "$ref": "ChannelProfileDetails",
-     "description": "Details about the supporter."
-    }
-   }
-  },
-  "Thumbnail": {
-   "id": "Thumbnail",
-   "type": "object",
-   "description": "A thumbnail is an image representing a YouTube resource.",
-   "properties": {
-    "height": {
-     "type": "integer",
-     "description": "(Optional) Height of the thumbnail image.",
-     "format": "uint32"
-    },
-    "url": {
-     "type": "string",
-     "description": "The thumbnail image's URL."
-    },
-    "width": {
-     "type": "integer",
-     "description": "(Optional) Width of the thumbnail image.",
-     "format": "uint32"
-    }
-   }
-  },
-  "ThumbnailDetails": {
-   "id": "ThumbnailDetails",
-   "type": "object",
-   "description": "Internal representation of thumbnails for a YouTube resource.",
-   "properties": {
-    "default": {
-     "$ref": "Thumbnail",
-     "description": "The default image for this resource."
-    },
-    "high": {
-     "$ref": "Thumbnail",
-     "description": "The high quality image for this resource."
-    },
-    "maxres": {
-     "$ref": "Thumbnail",
-     "description": "The maximum resolution quality image for this resource."
-    },
-    "medium": {
-     "$ref": "Thumbnail",
-     "description": "The medium quality image for this resource."
-    },
-    "standard": {
-     "$ref": "Thumbnail",
-     "description": "The standard quality image for this resource."
-    }
-   }
-  },
-  "ThumbnailSetResponse": {
-   "id": "ThumbnailSetResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of thumbnails.",
-     "items": {
-      "$ref": "ThumbnailDetails"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#thumbnailSetResponse\".",
-     "default": "youtube#thumbnailSetResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "TokenPagination": {
-   "id": "TokenPagination",
-   "type": "object",
-   "description": "Stub token pagination template to suppress results."
-  },
-  "Video": {
-   "id": "Video",
-   "type": "object",
-   "description": "A video resource represents a YouTube video.",
-   "properties": {
-    "ageGating": {
-     "$ref": "VideoAgeGating",
-     "description": "Age restriction details related to a video. This data can only be retrieved by the video owner."
-    },
-    "contentDetails": {
-     "$ref": "VideoContentDetails",
-     "description": "The contentDetails object contains information about the video content, including the length of the video and its aspect ratio."
-    },
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "fileDetails": {
-     "$ref": "VideoFileDetails",
-     "description": "The fileDetails object encapsulates information about the video file that was uploaded to YouTube, including the file's resolution, duration, audio and video codecs, stream bitrates, and more. This data can only be retrieved by the video owner."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the video.",
-     "annotations": {
-      "required": [
-       "youtube.videos.update"
-      ]
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#video\".",
-     "default": "youtube#video"
-    },
-    "liveStreamingDetails": {
-     "$ref": "VideoLiveStreamingDetails",
-     "description": "The liveStreamingDetails object contains metadata about a live video broadcast. The object will only be present in a video resource if the video is an upcoming, live, or completed live broadcast."
-    },
-    "localizations": {
-     "type": "object",
-     "description": "List with all localizations.",
-     "additionalProperties": {
-      "$ref": "VideoLocalization",
-      "description": "The language tag, using string since map_key require simple types."
-     }
-    },
-    "monetizationDetails": {
-     "$ref": "VideoMonetizationDetails",
-     "description": "The monetizationDetails object encapsulates information about the monetization status of the video."
-    },
-    "player": {
-     "$ref": "VideoPlayer",
-     "description": "The player object contains information that you would use to play the video in an embedded player."
-    },
-    "processingDetails": {
-     "$ref": "VideoProcessingDetails",
-     "description": "The processingProgress object encapsulates information about YouTube's progress in processing the uploaded video file. The properties in the object identify the current processing status and an estimate of the time remaining until YouTube finishes processing the video. This part also indicates whether different types of data or content, such as file details or thumbnail images, are available for the video.\n\nThe processingProgress object is designed to be polled so that the video uploaded can track the progress that YouTube has made in processing the uploaded video file. This data can only be retrieved by the video owner."
-    },
-    "projectDetails": {
-     "$ref": "VideoProjectDetails",
-     "description": "The projectDetails object contains information about the project specific video metadata."
-    },
-    "recordingDetails": {
-     "$ref": "VideoRecordingDetails",
-     "description": "The recordingDetails object encapsulates information about the location, date and address where the video was recorded."
-    },
-    "snippet": {
-     "$ref": "VideoSnippet",
-     "description": "The snippet object contains basic details about the video, such as its title, description, and category."
-    },
-    "statistics": {
-     "$ref": "VideoStatistics",
-     "description": "The statistics object contains statistics about the video."
-    },
-    "status": {
-     "$ref": "VideoStatus",
-     "description": "The status object contains information about the video's uploading, processing, and privacy statuses."
-    },
-    "suggestions": {
-     "$ref": "VideoSuggestions",
-     "description": "The suggestions object encapsulates suggestions that identify opportunities to improve the video quality or the metadata for the uploaded video. This data can only be retrieved by the video owner."
-    },
-    "topicDetails": {
-     "$ref": "VideoTopicDetails",
-     "description": "The topicDetails object encapsulates information about Freebase topics associated with the video."
-    }
-   }
-  },
-  "VideoAbuseReport": {
-   "id": "VideoAbuseReport",
-   "type": "object",
-   "properties": {
-    "comments": {
-     "type": "string",
-     "description": "Additional comments regarding the abuse report."
-    },
-    "language": {
-     "type": "string",
-     "description": "The language that the content was viewed in."
-    },
-    "reasonId": {
-     "type": "string",
-     "description": "The high-level, or primary, reason that the content is abusive. The value is an abuse report reason ID."
-    },
-    "secondaryReasonId": {
-     "type": "string",
-     "description": "The specific, or secondary, reason that this content is abusive (if available). The value is an abuse report reason ID that is a valid secondary reason for the primary reason."
-    },
-    "videoId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the video."
-    }
-   }
-  },
-  "VideoAbuseReportReason": {
-   "id": "VideoAbuseReportReason",
-   "type": "object",
-   "description": "A videoAbuseReportReason resource identifies a reason that a video could be reported as abusive. Video abuse report reasons are used with video.ReportAbuse.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID of this abuse report reason."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoAbuseReportReason\".",
-     "default": "youtube#videoAbuseReportReason"
-    },
-    "snippet": {
-     "$ref": "VideoAbuseReportReasonSnippet",
-     "description": "The snippet object contains basic details about the abuse report reason."
-    }
-   }
-  },
-  "VideoAbuseReportReasonListResponse": {
-   "id": "VideoAbuseReportReasonListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of valid abuse reasons that are used with video.ReportAbuse.",
-     "items": {
-      "$ref": "VideoAbuseReportReason"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoAbuseReportReasonListResponse\".",
-     "default": "youtube#videoAbuseReportReasonListResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "VideoAbuseReportReasonSnippet": {
-   "id": "VideoAbuseReportReasonSnippet",
-   "type": "object",
-   "description": "Basic details about a video category, such as its localized title.",
-   "properties": {
-    "label": {
-     "type": "string",
-     "description": "The localized label belonging to this abuse report reason."
-    },
-    "secondaryReasons": {
-     "type": "array",
-     "description": "The secondary reasons associated with this reason, if any are available. (There might be 0 or more.)",
-     "items": {
-      "$ref": "VideoAbuseReportSecondaryReason"
-     }
-    }
-   }
-  },
-  "VideoAbuseReportSecondaryReason": {
-   "id": "VideoAbuseReportSecondaryReason",
-   "type": "object",
-   "properties": {
-    "id": {
-     "type": "string",
-     "description": "The ID of this abuse report secondary reason."
-    },
-    "label": {
-     "type": "string",
-     "description": "The localized label for this abuse report secondary reason."
-    }
-   }
-  },
-  "VideoAgeGating": {
-   "id": "VideoAgeGating",
-   "type": "object",
-   "properties": {
-    "alcoholContent": {
-     "type": "boolean",
-     "description": "Indicates whether or not the video has alcoholic beverage content. Only users of legal purchasing age in a particular country, as identified by ICAP, can view the content."
-    },
-    "restricted": {
-     "type": "boolean",
-     "description": "Age-restricted trailers. For redband trailers and adult-rated video-games. Only users aged 18+ can view the content. The the field is true the content is restricted to viewers aged 18+. Otherwise The field won't be present."
-    },
-    "videoGameRating": {
-     "type": "string",
-     "description": "Video game rating, if any.",
-     "enum": [
-      "anyone",
-      "m15Plus",
-      "m16Plus",
-      "m17Plus"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "VideoCategory": {
-   "id": "VideoCategory",
-   "type": "object",
-   "description": "A videoCategory resource identifies a category that has been or could be associated with uploaded videos.",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "id": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the video category."
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoCategory\".",
-     "default": "youtube#videoCategory"
-    },
-    "snippet": {
-     "$ref": "VideoCategorySnippet",
-     "description": "The snippet object contains basic details about the video category, including its title."
-    }
-   }
-  },
-  "VideoCategoryListResponse": {
-   "id": "VideoCategoryListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of video categories that can be associated with YouTube videos. In this map, the video category ID is the map key, and its value is the corresponding videoCategory resource.",
-     "items": {
-      "$ref": "VideoCategory"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoCategoryListResponse\".",
-     "default": "youtube#videoCategoryListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "VideoCategorySnippet": {
-   "id": "VideoCategorySnippet",
-   "type": "object",
-   "description": "Basic details about a video category, such as its localized title.",
-   "properties": {
-    "assignable": {
-     "type": "boolean"
-    },
-    "channelId": {
-     "type": "string",
-     "description": "The YouTube channel that created the video category.",
-     "default": "UCBR8-60-B28hp2BmDPdntcQ"
-    },
-    "title": {
-     "type": "string",
-     "description": "The video category's title."
-    }
-   }
-  },
-  "VideoContentDetails": {
-   "id": "VideoContentDetails",
-   "type": "object",
-   "description": "Details about the content of a YouTube Video.",
-   "properties": {
-    "caption": {
-     "type": "string",
-     "description": "The value of captions indicates whether the video has captions or not.",
-     "enum": [
-      "false",
-      "true"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "contentRating": {
-     "$ref": "ContentRating",
-     "description": "Specifies the ratings that the video received under various rating schemes."
-    },
-    "countryRestriction": {
-     "$ref": "AccessPolicy",
-     "description": "The countryRestriction object contains information about the countries where a video is (or is not) viewable."
-    },
-    "definition": {
-     "type": "string",
-     "description": "The value of definition indicates whether the video is available in high definition or only in standard definition.",
-     "enum": [
-      "hd",
-      "sd"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "dimension": {
-     "type": "string",
-     "description": "The value of dimension indicates whether the video is available in 3D or in 2D."
-    },
-    "duration": {
-     "type": "string",
-     "description": "The length of the video. The tag value is an ISO 8601 duration in the format PT#M#S, in which the letters PT indicate that the value specifies a period of time, and the letters M and S refer to length in minutes and seconds, respectively. The # characters preceding the M and S letters are both integers that specify the number of minutes (or seconds) of the video. For example, a value of PT15M51S indicates that the video is 15 minutes and 51 seconds long."
-    },
-    "hasCustomThumbnail": {
-     "type": "boolean",
-     "description": "Indicates whether the video uploader has provided a custom thumbnail image for the video. This property is only visible to the video uploader."
-    },
-    "licensedContent": {
-     "type": "boolean",
-     "description": "The value of is_license_content indicates whether the video is licensed content."
-    },
-    "projection": {
-     "type": "string",
-     "description": "Specifies the projection format of the video.",
-     "enum": [
-      "360",
-      "rectangular"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "regionRestriction": {
-     "$ref": "VideoContentDetailsRegionRestriction",
-     "description": "The regionRestriction object contains information about the countries where a video is (or is not) viewable. The object will contain either the contentDetails.regionRestriction.allowed property or the contentDetails.regionRestriction.blocked property."
-    }
-   }
-  },
-  "VideoContentDetailsRegionRestriction": {
-   "id": "VideoContentDetailsRegionRestriction",
-   "type": "object",
-   "description": "DEPRECATED Region restriction of the video.",
-   "properties": {
-    "allowed": {
-     "type": "array",
-     "description": "A list of region codes that identify countries where the video is viewable. If this property is present and a country is not listed in its value, then the video is blocked from appearing in that country. If this property is present and contains an empty list, the video is blocked in all countries.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "blocked": {
-     "type": "array",
-     "description": "A list of region codes that identify countries where the video is blocked. If this property is present and a country is not listed in its value, then the video is viewable in that country. If this property is present and contains an empty list, the video is viewable in all countries.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "VideoFileDetails": {
-   "id": "VideoFileDetails",
-   "type": "object",
-   "description": "Describes original video file properties, including technical details about audio and video streams, but also metadata information like content length, digitization time, or geotagging information.",
-   "properties": {
-    "audioStreams": {
-     "type": "array",
-     "description": "A list of audio streams contained in the uploaded video file. Each item in the list contains detailed metadata about an audio stream.",
-     "items": {
-      "$ref": "VideoFileDetailsAudioStream"
-     }
-    },
-    "bitrateBps": {
-     "type": "string",
-     "description": "The uploaded video file's combined (video and audio) bitrate in bits per second.",
-     "format": "uint64"
-    },
-    "container": {
-     "type": "string",
-     "description": "The uploaded video file's container format."
-    },
-    "creationTime": {
-     "type": "string",
-     "description": "The date and time when the uploaded video file was created. The value is specified in ISO 8601 format. Currently, the following ISO 8601 formats are supported:  \n- Date only: YYYY-MM-DD \n- Naive time: YYYY-MM-DDTHH:MM:SS \n- Time with timezone: YYYY-MM-DDTHH:MM:SS+HH:MM"
-    },
-    "durationMs": {
-     "type": "string",
-     "description": "The length of the uploaded video in milliseconds.",
-     "format": "uint64"
-    },
-    "fileName": {
-     "type": "string",
-     "description": "The uploaded file's name. This field is present whether a video file or another type of file was uploaded."
-    },
-    "fileSize": {
-     "type": "string",
-     "description": "The uploaded file's size in bytes. This field is present whether a video file or another type of file was uploaded.",
-     "format": "uint64"
-    },
-    "fileType": {
-     "type": "string",
-     "description": "The uploaded file's type as detected by YouTube's video processing engine. Currently, YouTube only processes video files, but this field is present whether a video file or another type of file was uploaded.",
-     "enum": [
-      "archive",
-      "audio",
-      "document",
-      "image",
-      "other",
-      "project",
-      "video"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "videoStreams": {
-     "type": "array",
-     "description": "A list of video streams contained in the uploaded video file. Each item in the list contains detailed metadata about a video stream.",
-     "items": {
-      "$ref": "VideoFileDetailsVideoStream"
-     }
-    }
-   }
-  },
-  "VideoFileDetailsAudioStream": {
-   "id": "VideoFileDetailsAudioStream",
-   "type": "object",
-   "description": "Information about an audio stream.",
-   "properties": {
-    "bitrateBps": {
-     "type": "string",
-     "description": "The audio stream's bitrate, in bits per second.",
-     "format": "uint64"
-    },
-    "channelCount": {
-     "type": "integer",
-     "description": "The number of audio channels that the stream contains.",
-     "format": "uint32"
-    },
-    "codec": {
-     "type": "string",
-     "description": "The audio codec that the stream uses."
-    },
-    "vendor": {
-     "type": "string",
-     "description": "A value that uniquely identifies a video vendor. Typically, the value is a four-letter vendor code."
-    }
-   }
-  },
-  "VideoFileDetailsVideoStream": {
-   "id": "VideoFileDetailsVideoStream",
-   "type": "object",
-   "description": "Information about a video stream.",
-   "properties": {
-    "aspectRatio": {
-     "type": "number",
-     "description": "The video content's display aspect ratio, which specifies the aspect ratio in which the video should be displayed.",
-     "format": "double"
-    },
-    "bitrateBps": {
-     "type": "string",
-     "description": "The video stream's bitrate, in bits per second.",
-     "format": "uint64"
-    },
-    "codec": {
-     "type": "string",
-     "description": "The video codec that the stream uses."
-    },
-    "frameRateFps": {
-     "type": "number",
-     "description": "The video stream's frame rate, in frames per second.",
-     "format": "double"
-    },
-    "heightPixels": {
-     "type": "integer",
-     "description": "The encoded video content's height in pixels.",
-     "format": "uint32"
-    },
-    "rotation": {
-     "type": "string",
-     "description": "The amount that YouTube needs to rotate the original source content to properly display the video.",
-     "enum": [
-      "clockwise",
-      "counterClockwise",
-      "none",
-      "other",
-      "upsideDown"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "vendor": {
-     "type": "string",
-     "description": "A value that uniquely identifies a video vendor. Typically, the value is a four-letter vendor code."
-    },
-    "widthPixels": {
-     "type": "integer",
-     "description": "The encoded video content's width in pixels. You can calculate the video's encoding aspect ratio as width_pixels / height_pixels.",
-     "format": "uint32"
-    }
-   }
-  },
-  "VideoGetRatingResponse": {
-   "id": "VideoGetRatingResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of ratings that match the request criteria.",
-     "items": {
-      "$ref": "VideoRating"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoGetRatingResponse\".",
-     "default": "youtube#videoGetRatingResponse"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "VideoListResponse": {
-   "id": "VideoListResponse",
-   "type": "object",
-   "properties": {
-    "etag": {
-     "type": "string",
-     "description": "Etag of this resource."
-    },
-    "eventId": {
-     "type": "string",
-     "description": "Serialized EventId of the request which produced this response."
-    },
-    "items": {
-     "type": "array",
-     "description": "A list of videos that match the request criteria.",
-     "items": {
-      "$ref": "Video"
-     }
-    },
-    "kind": {
-     "type": "string",
-     "description": "Identifies what kind of resource this is. Value: the fixed string \"youtube#videoListResponse\".",
-     "default": "youtube#videoListResponse"
-    },
-    "nextPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the next page in the result set."
-    },
-    "pageInfo": {
-     "$ref": "PageInfo"
-    },
-    "prevPageToken": {
-     "type": "string",
-     "description": "The token that can be used as the value of the pageToken parameter to retrieve the previous page in the result set."
-    },
-    "tokenPagination": {
-     "$ref": "TokenPagination"
-    },
-    "visitorId": {
-     "type": "string",
-     "description": "The visitorId identifies the visitor."
-    }
-   }
-  },
-  "VideoLiveStreamingDetails": {
-   "id": "VideoLiveStreamingDetails",
-   "type": "object",
-   "description": "Details about the live streaming metadata.",
-   "properties": {
-    "activeLiveChatId": {
-     "type": "string",
-     "description": "The ID of the currently active live chat attached to this video. This field is filled only if the video is a currently live broadcast that has live chat. Once the broadcast transitions to complete this field will be removed and the live chat closed down. For persistent broadcasts that live chat id will no longer be tied to this video but rather to the new video being displayed at the persistent page."
-    },
-    "actualEndTime": {
-     "type": "string",
-     "description": "The time that the broadcast actually ended. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format. This value will not be available until the broadcast is over.",
-     "format": "date-time"
-    },
-    "actualStartTime": {
-     "type": "string",
-     "description": "The time that the broadcast actually started. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format. This value will not be available until the broadcast begins.",
-     "format": "date-time"
-    },
-    "concurrentViewers": {
-     "type": "string",
-     "description": "The number of viewers currently watching the broadcast. The property and its value will be present if the broadcast has current viewers and the broadcast owner has not hidden the viewcount for the video. Note that YouTube stops tracking the number of concurrent viewers for a broadcast when the broadcast ends. So, this property would not identify the number of viewers watching an archived video of a live broadcast that already ended.",
-     "format": "uint64"
-    },
-    "scheduledEndTime": {
-     "type": "string",
-     "description": "The time that the broadcast is scheduled to end. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format. If the value is empty or the property is not present, then the broadcast is scheduled to continue indefinitely.",
-     "format": "date-time"
-    },
-    "scheduledStartTime": {
-     "type": "string",
-     "description": "The time that the broadcast is scheduled to begin. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    }
-   }
-  },
-  "VideoLocalization": {
-   "id": "VideoLocalization",
-   "type": "object",
-   "description": "Localized versions of certain video properties (e.g. title).",
-   "properties": {
-    "description": {
-     "type": "string",
-     "description": "Localized version of the video's description."
-    },
-    "title": {
-     "type": "string",
-     "description": "Localized version of the video's title."
-    }
-   }
-  },
-  "VideoMonetizationDetails": {
-   "id": "VideoMonetizationDetails",
-   "type": "object",
-   "description": "Details about monetization of a YouTube Video.",
-   "properties": {
-    "access": {
-     "$ref": "AccessPolicy",
-     "description": "The value of access indicates whether the video can be monetized or not."
-    }
-   }
-  },
-  "VideoPlayer": {
-   "id": "VideoPlayer",
-   "type": "object",
-   "description": "Player to be used for a video playback.",
-   "properties": {
-    "embedHeight": {
-     "type": "string",
-     "format": "int64"
-    },
-    "embedHtml": {
-     "type": "string",
-     "description": "An \u003ciframe\u003e tag that embeds a player that will play the video."
-    },
-    "embedWidth": {
-     "type": "string",
-     "description": "The embed width",
-     "format": "int64"
-    }
-   }
-  },
-  "VideoProcessingDetails": {
-   "id": "VideoProcessingDetails",
-   "type": "object",
-   "description": "Describes processing status and progress and availability of some other Video resource parts.",
-   "properties": {
-    "editorSuggestionsAvailability": {
-     "type": "string",
-     "description": "This value indicates whether video editing suggestions, which might improve video quality or the playback experience, are available for the video. You can retrieve these suggestions by requesting the suggestions part in your videos.list() request."
-    },
-    "fileDetailsAvailability": {
-     "type": "string",
-     "description": "This value indicates whether file details are available for the uploaded video. You can retrieve a video's file details by requesting the fileDetails part in your videos.list() request."
-    },
-    "processingFailureReason": {
-     "type": "string",
-     "description": "The reason that YouTube failed to process the video. This property will only have a value if the processingStatus property's value is failed.",
-     "enum": [
-      "other",
-      "streamingFailed",
-      "transcodeFailed",
-      "uploadFailed"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "processingIssuesAvailability": {
-     "type": "string",
-     "description": "This value indicates whether the video processing engine has generated suggestions that might improve YouTube's ability to process the the video, warnings that explain video processing problems, or errors that cause video processing problems. You can retrieve these suggestions by requesting the suggestions part in your videos.list() request."
-    },
-    "processingProgress": {
-     "$ref": "VideoProcessingDetailsProcessingProgress",
-     "description": "The processingProgress object contains information about the progress YouTube has made in processing the video. The values are really only relevant if the video's processing status is processing."
-    },
-    "processingStatus": {
-     "type": "string",
-     "description": "The video's processing status. This value indicates whether YouTube was able to process the video or if the video is still being processed.",
-     "enum": [
-      "failed",
-      "processing",
-      "succeeded",
-      "terminated"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "tagSuggestionsAvailability": {
-     "type": "string",
-     "description": "This value indicates whether keyword (tag) suggestions are available for the video. Tags can be added to a video's metadata to make it easier for other users to find the video. You can retrieve these suggestions by requesting the suggestions part in your videos.list() request."
-    },
-    "thumbnailsAvailability": {
-     "type": "string",
-     "description": "This value indicates whether thumbnail images have been generated for the video."
-    }
-   }
-  },
-  "VideoProcessingDetailsProcessingProgress": {
-   "id": "VideoProcessingDetailsProcessingProgress",
-   "type": "object",
-   "description": "Video processing progress and completion time estimate.",
-   "properties": {
-    "partsProcessed": {
-     "type": "string",
-     "description": "The number of parts of the video that YouTube has already processed. You can estimate the percentage of the video that YouTube has already processed by calculating:\n100 * parts_processed / parts_total\n\nNote that since the estimated number of parts could increase without a corresponding increase in the number of parts that have already been processed, it is possible that the calculated progress could periodically decrease while YouTube processes a video.",
-     "format": "uint64"
-    },
-    "partsTotal": {
-     "type": "string",
-     "description": "An estimate of the total number of parts that need to be processed for the video. The number may be updated with more precise estimates while YouTube processes the video.",
-     "format": "uint64"
-    },
-    "timeLeftMs": {
-     "type": "string",
-     "description": "An estimate of the amount of time, in millseconds, that YouTube needs to finish processing the video.",
-     "format": "uint64"
-    }
-   }
-  },
-  "VideoProjectDetails": {
-   "id": "VideoProjectDetails",
-   "type": "object",
-   "description": "Project specific details about the content of a YouTube Video.",
-   "properties": {
-    "tags": {
-     "type": "array",
-     "description": "A list of project tags associated with the video during the upload.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "VideoRating": {
-   "id": "VideoRating",
-   "type": "object",
-   "properties": {
-    "rating": {
-     "type": "string",
-     "enum": [
-      "dislike",
-      "like",
-      "none",
-      "unspecified"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "videoId": {
-     "type": "string"
-    }
-   }
-  },
-  "VideoRecordingDetails": {
-   "id": "VideoRecordingDetails",
-   "type": "object",
-   "description": "Recording information associated with the video.",
-   "properties": {
-    "location": {
-     "$ref": "GeoPoint",
-     "description": "The geolocation information associated with the video."
-    },
-    "locationDescription": {
-     "type": "string",
-     "description": "The text description of the location where the video was recorded."
-    },
-    "recordingDate": {
-     "type": "string",
-     "description": "The date and time when the video was recorded. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sssZ) format.",
-     "format": "date-time"
-    }
-   }
-  },
-  "VideoSnippet": {
-   "id": "VideoSnippet",
-   "type": "object",
-   "description": "Basic details about a video, including title, description, uploader, thumbnails and category.",
-   "properties": {
-    "categoryId": {
-     "type": "string",
-     "description": "The YouTube video category associated with the video."
-    },
-    "channelId": {
-     "type": "string",
-     "description": "The ID that YouTube uses to uniquely identify the channel that the video was uploaded to."
-    },
-    "channelTitle": {
-     "type": "string",
-     "description": "Channel title for the channel that the video belongs to."
-    },
-    "defaultAudioLanguage": {
-     "type": "string",
-     "description": "The default_audio_language property specifies the language spoken in the video's default audio track."
-    },
-    "defaultLanguage": {
-     "type": "string",
-     "description": "The language of the videos's default snippet."
-    },
-    "description": {
-     "type": "string",
-     "description": "The video's description."
-    },
-    "liveBroadcastContent": {
-     "type": "string",
-     "description": "Indicates if the video is an upcoming/active live broadcast. Or it's \"none\" if the video is not an upcoming/active live broadcast.",
-     "enum": [
-      "live",
-      "none",
-      "upcoming"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "localized": {
-     "$ref": "VideoLocalization",
-     "description": "Localized snippet selected with the hl parameter. If no such localization exists, this field is populated with the default snippet. (Read-only)"
-    },
-    "publishedAt": {
-     "type": "string",
-     "description": "The date and time that the video was uploaded. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "tags": {
-     "type": "array",
-     "description": "A list of keyword tags associated with the video. Tags may contain spaces.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "thumbnails": {
-     "$ref": "ThumbnailDetails",
-     "description": "A map of thumbnail images associated with the video. For each object in the map, the key is the name of the thumbnail image, and the value is an object that contains other information about the thumbnail."
-    },
-    "title": {
-     "type": "string",
-     "description": "The video's title."
-    }
-   }
-  },
-  "VideoStatistics": {
-   "id": "VideoStatistics",
-   "type": "object",
-   "description": "Statistics about the video, such as the number of times the video was viewed or liked.",
-   "properties": {
-    "commentCount": {
-     "type": "string",
-     "description": "The number of comments for the video.",
-     "format": "uint64"
-    },
-    "dislikeCount": {
-     "type": "string",
-     "description": "The number of users who have indicated that they disliked the video by giving it a negative rating.",
-     "format": "uint64"
-    },
-    "favoriteCount": {
-     "type": "string",
-     "description": "The number of users who currently have the video marked as a favorite video.",
-     "format": "uint64"
-    },
-    "likeCount": {
-     "type": "string",
-     "description": "The number of users who have indicated that they liked the video by giving it a positive rating.",
-     "format": "uint64"
-    },
-    "viewCount": {
-     "type": "string",
-     "description": "The number of times the video has been viewed.",
-     "format": "uint64"
-    }
-   }
-  },
-  "VideoStatus": {
-   "id": "VideoStatus",
-   "type": "object",
-   "description": "Basic details about a video category, such as its localized title.",
-   "properties": {
-    "embeddable": {
-     "type": "boolean",
-     "description": "This value indicates if the video can be embedded on another website."
-    },
-    "failureReason": {
-     "type": "string",
-     "description": "This value explains why a video failed to upload. This property is only present if the uploadStatus property indicates that the upload failed.",
-     "enum": [
-      "codec",
-      "conversion",
-      "emptyFile",
-      "invalidFile",
-      "tooSmall",
-      "uploadAborted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "license": {
-     "type": "string",
-     "description": "The video's license.",
-     "enum": [
-      "creativeCommon",
-      "youtube"
-     ],
-     "enumDescriptions": [
-      "",
-      ""
-     ]
-    },
-    "privacyStatus": {
-     "type": "string",
-     "description": "The video's privacy status.",
-     "enum": [
-      "private",
-      "public",
-      "unlisted"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      ""
-     ]
-    },
-    "publicStatsViewable": {
-     "type": "boolean",
-     "description": "This value indicates if the extended video statistics on the watch page can be viewed by everyone. Note that the view count, likes, etc will still be visible if this is disabled."
-    },
-    "publishAt": {
-     "type": "string",
-     "description": "The date and time when the video is scheduled to publish. It can be set only if the privacy status of the video is private. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-     "format": "date-time"
-    },
-    "rejectionReason": {
-     "type": "string",
-     "description": "This value explains why YouTube rejected an uploaded video. This property is only present if the uploadStatus property indicates that the upload was rejected.",
-     "enum": [
-      "claim",
-      "copyright",
-      "duplicate",
-      "inappropriate",
-      "legal",
-      "length",
-      "termsOfUse",
-      "trademark",
-      "uploaderAccountClosed",
-      "uploaderAccountSuspended"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    },
-    "uploadStatus": {
-     "type": "string",
-     "description": "The status of the uploaded video.",
-     "enum": [
-      "deleted",
-      "failed",
-      "processed",
-      "rejected",
-      "uploaded"
-     ],
-     "enumDescriptions": [
-      "",
-      "",
-      "",
-      "",
-      ""
-     ]
-    }
-   }
-  },
-  "VideoSuggestions": {
-   "id": "VideoSuggestions",
-   "type": "object",
-   "description": "Specifies suggestions on how to improve video content, including encoding hints, tag suggestions, and editor suggestions.",
-   "properties": {
-    "editorSuggestions": {
-     "type": "array",
-     "description": "A list of video editing operations that might improve the video quality or playback experience of the uploaded video.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "audioQuietAudioSwap",
-       "videoAutoLevels",
-       "videoCrop",
-       "videoStabilize"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "processingErrors": {
-     "type": "array",
-     "description": "A list of errors that will prevent YouTube from successfully processing the uploaded video video. These errors indicate that, regardless of the video's current processing status, eventually, that status will almost certainly be failed.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "archiveFile",
-       "audioFile",
-       "docFile",
-       "imageFile",
-       "notAVideoFile",
-       "projectFile",
-       "unsupportedSpatialAudioLayout"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "processingHints": {
-     "type": "array",
-     "description": "A list of suggestions that may improve YouTube's ability to process the video.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "nonStreamableMov",
-       "sendBestQualityVideo",
-       "spatialAudio",
-       "sphericalVideo",
-       "vrVideo"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "processingWarnings": {
-     "type": "array",
-     "description": "A list of reasons why YouTube may have difficulty transcoding the uploaded video or that might result in an erroneous transcoding. These warnings are generated before YouTube actually processes the uploaded video file. In addition, they identify issues that are unlikely to cause the video processing to fail but that might cause problems such as sync issues, video artifacts, or a missing audio track.",
-     "items": {
-      "type": "string",
-      "enum": [
-       "hasEditlist",
-       "inconsistentResolution",
-       "problematicAudioCodec",
-       "problematicVideoCodec",
-       "unknownAudioCodec",
-       "unknownContainer",
-       "unknownVideoCodec",
-       "unsupportedSphericalProjectionType",
-       "unsupportedVrStereoMode"
-      ],
-      "enumDescriptions": [
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       "",
-       ""
-      ]
-     }
-    },
-    "tagSuggestions": {
-     "type": "array",
-     "description": "A list of keyword tags that could be added to the video's metadata to increase the likelihood that users will locate your video when searching or browsing on YouTube.",
-     "items": {
-      "$ref": "VideoSuggestionsTagSuggestion"
-     }
-    }
-   }
-  },
-  "VideoSuggestionsTagSuggestion": {
-   "id": "VideoSuggestionsTagSuggestion",
-   "type": "object",
-   "description": "A single tag suggestion with it's relevance information.",
-   "properties": {
-    "categoryRestricts": {
-     "type": "array",
-     "description": "A set of video categories for which the tag is relevant. You can use this information to display appropriate tag suggestions based on the video category that the video uploader associates with the video. By default, tag suggestions are relevant for all categories if there are no restricts defined for the keyword.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "tag": {
-     "type": "string",
-     "description": "The keyword tag suggested for the video."
-    }
-   }
-  },
-  "VideoTopicDetails": {
-   "id": "VideoTopicDetails",
-   "type": "object",
-   "description": "Freebase topic information related to the video.",
-   "properties": {
-    "relevantTopicIds": {
-     "type": "array",
-     "description": "Similar to topic_id, except that these topics are merely relevant to the video. These are topics that may be mentioned in, or appear in the video. You can retrieve information about each topic using Freebase Topic API.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "topicCategories": {
-     "type": "array",
-     "description": "A list of Wikipedia URLs that provide a high-level description of the video's content.",
-     "items": {
-      "type": "string"
-     }
-    },
-    "topicIds": {
-     "type": "array",
-     "description": "A list of Freebase topic IDs that are centrally associated with the video. These are topics that are centrally featured in the video, and it can be said that the video is mainly about each of these. You can retrieve information about each topic using the Freebase Topic API.",
-     "items": {
-      "type": "string"
-     }
-    }
-   }
-  },
-  "WatchSettings": {
-   "id": "WatchSettings",
-   "type": "object",
-   "description": "Branding properties for the watch. All deprecated.",
-   "properties": {
-    "backgroundColor": {
-     "type": "string",
-     "description": "The text color for the video watch page's branded area."
-    },
-    "featuredPlaylistId": {
-     "type": "string",
-     "description": "An ID that uniquely identifies a playlist that displays next to the video player."
-    },
-    "textColor": {
-     "type": "string",
-     "description": "The background color for the video watch page's branded area."
-    }
-   }
-  }
- },
- "resources": {
-  "activities": {
-   "methods": {
-    "insert": {
-     "id": "youtube.activities.insert",
-     "path": "activities",
-     "httpMethod": "POST",
-     "description": "Posts a bulletin for a specific channel. (The user submitting the request must be authorized to act on the channel's behalf.)\n\nNote: Even though an activity resource can contain information about actions like a user rating a video or marking a video as a favorite, you need to use other API methods to generate those activity resources. For example, you would use the API's videos.rate() method to rate a video and the playlistItems.insert() method to mark a video as a favorite.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Activity"
-     },
-     "response": {
-      "$ref": "Activity"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.activities.list",
-     "path": "activities",
-     "httpMethod": "GET",
-     "description": "Returns a list of channel activity events that match the request criteria. For example, you can retrieve events associated with a particular channel, events associated with the user's subscriptions and Google+ friends, or the YouTube home page feed, which is customized for each user.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter specifies a unique YouTube channel ID. The API will then return a list of that channel's activities.",
-       "location": "query"
-      },
-      "home": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve the activity feed that displays on the YouTube home page for the currently authenticated user.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve a feed of the authenticated user's activities.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more activity resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in an activity resource, the snippet property contains other properties that identify the type of activity, a display title for the activity, and so forth. If you set part=snippet, the API response will also contain all of those nested properties.",
-       "required": true,
-       "location": "query"
-      },
-      "publishedAfter": {
-       "type": "string",
-       "description": "The publishedAfter parameter specifies the earliest date and time that an activity could have occurred for that activity to be included in the API response. If the parameter value specifies a day, but not a time, then any activities that occurred that day will be included in the result set. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-       "format": "date-time",
-       "location": "query"
-      },
-      "publishedBefore": {
-       "type": "string",
-       "description": "The publishedBefore parameter specifies the date and time before which an activity must have occurred for that activity to be included in the API response. If the parameter value specifies a day, but not a time, then any activities that occurred that day will be excluded from the result set. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sZ) format.",
-       "format": "date-time",
-       "location": "query"
-      },
-      "regionCode": {
-       "type": "string",
-       "description": "The regionCode parameter instructs the API to return results for the specified country. The parameter value is an ISO 3166-1 alpha-2 country code. YouTube uses this value when the authorized user's previous activity on YouTube does not provide enough information to generate the activity feed.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "ActivityListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "captions": {
-   "methods": {
-    "delete": {
-     "id": "youtube.captions.delete",
-     "path": "captions",
-     "httpMethod": "DELETE",
-     "description": "Deletes a specified caption track.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter identifies the caption track that is being deleted. The value is a caption track ID as identified by the id property in a caption resource.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOf": {
-       "type": "string",
-       "description": "ID of the Google+ Page for the channel that the request is be on behalf of",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "download": {
-     "id": "youtube.captions.download",
-     "path": "captions/{id}",
-     "httpMethod": "GET",
-     "description": "Downloads a caption track. The caption track is returned in its original format unless the request specifies a value for the tfmt parameter and in its original language unless the request specifies a value for the tlang parameter.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter identifies the caption track that is being retrieved. The value is a caption track ID as identified by the id property in a caption resource.",
-       "required": true,
-       "location": "path"
-      },
-      "onBehalfOf": {
-       "type": "string",
-       "description": "ID of the Google+ Page for the channel that the request is be on behalf of",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "tfmt": {
-       "type": "string",
-       "description": "The tfmt parameter specifies that the caption track should be returned in a specific format. If the parameter is not included in the request, the track is returned in its original format.",
-       "enum": [
-        "sbv",
-        "scc",
-        "srt",
-        "ttml",
-        "vtt"
-       ],
-       "enumDescriptions": [
-        "SubViewer subtitle.",
-        "Scenarist Closed Caption format.",
-        "SubRip subtitle.",
-        "Timed Text Markup Language caption.",
-        "Web Video Text Tracks caption."
-       ],
-       "location": "query"
-      },
-      "tlang": {
-       "type": "string",
-       "description": "The tlang parameter specifies that the API response should return a translation of the specified caption track. The parameter value is an ISO 639-1 two-letter language code that identifies the desired caption language. The translation is generated by using machine translation, such as Google Translate.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaDownload": true
-    },
-    "insert": {
-     "id": "youtube.captions.insert",
-     "path": "captions",
-     "httpMethod": "POST",
-     "description": "Uploads a caption track.",
-     "parameters": {
-      "onBehalfOf": {
-       "type": "string",
-       "description": "ID of the Google+ Page for the channel that the request is be on behalf of",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the caption resource parts that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "sync": {
-       "type": "boolean",
-       "description": "The sync parameter indicates whether YouTube should automatically synchronize the caption file with the audio track of the video. If you set the value to true, YouTube will disregard any time codes that are in the uploaded caption file and generate new time codes for the captions.\n\nYou should set the sync parameter to true if you are uploading a transcript, which has no time codes, or if you suspect the time codes in your file are incorrect and want YouTube to try to fix them.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Caption"
-     },
-     "response": {
-      "$ref": "Caption"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "*/*",
-       "application/octet-stream",
-       "text/xml"
-      ],
-      "maxSize": "100MB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/captions"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/captions"
-       }
-      }
-     }
-    },
-    "list": {
-     "id": "youtube.captions.list",
-     "path": "captions",
-     "httpMethod": "GET",
-     "description": "Returns a list of caption tracks that are associated with a specified video. Note that the API response does not contain the actual captions and that the captions.download method provides the ability to retrieve a caption track.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of IDs that identify the caption resources that should be retrieved. Each ID must identify a caption track associated with the specified video.",
-       "location": "query"
-      },
-      "onBehalfOf": {
-       "type": "string",
-       "description": "ID of the Google+ Page for the channel that the request is on behalf of.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more caption resource parts that the API response will include. The part names that you can include in the parameter value are id and snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "videoId": {
-       "type": "string",
-       "description": "The videoId parameter specifies the YouTube video ID of the video for which the API should return caption tracks.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part",
-      "videoId"
-     ],
-     "response": {
-      "$ref": "CaptionListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "update": {
-     "id": "youtube.captions.update",
-     "path": "captions",
-     "httpMethod": "PUT",
-     "description": "Updates a caption track. When updating a caption track, you can change the track's draft status, upload a new caption file for the track, or both.",
-     "parameters": {
-      "onBehalfOf": {
-       "type": "string",
-       "description": "ID of the Google+ Page for the channel that the request is be on behalf of",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include. Set the property value to snippet if you are updating the track's draft status. Otherwise, set the property value to id.",
-       "required": true,
-       "location": "query"
-      },
-      "sync": {
-       "type": "boolean",
-       "description": "Note: The API server only processes the parameter value if the request contains an updated caption file.\n\nThe sync parameter indicates whether YouTube should automatically synchronize the caption file with the audio track of the video. If you set the value to true, YouTube will automatically synchronize the caption track with the audio track.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Caption"
-     },
-     "response": {
-      "$ref": "Caption"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "*/*",
-       "application/octet-stream",
-       "text/xml"
-      ],
-      "maxSize": "100MB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/captions"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/captions"
-       }
-      }
-     }
-    }
-   }
-  },
-  "channelBanners": {
-   "methods": {
-    "insert": {
-     "id": "youtube.channelBanners.insert",
-     "path": "channelBanners/insert",
-     "httpMethod": "POST",
-     "description": "Uploads a channel banner image to YouTube. This method represents the first two steps in a three-step process to update the banner image for a channel:\n\n- Call the channelBanners.insert method to upload the binary image data to YouTube. The image must have a 16:9 aspect ratio and be at least 2120x1192 pixels.\n- Extract the url property's value from the response that the API returns for step 1.\n- Call the channels.update method to update the channel's branding settings. Set the brandingSettings.image.bannerExternalUrl property's value to the URL obtained in step 2.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "request": {
-      "$ref": "ChannelBannerResource"
-     },
-     "response": {
-      "$ref": "ChannelBannerResource"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.upload"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "application/octet-stream",
-       "image/jpeg",
-       "image/png"
-      ],
-      "maxSize": "6MB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/channelBanners/insert"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/channelBanners/insert"
-       }
-      }
-     }
-    }
-   }
-  },
-  "channelSections": {
-   "methods": {
-    "delete": {
-     "id": "youtube.channelSections.delete",
-     "path": "channelSections",
-     "httpMethod": "DELETE",
-     "description": "Deletes a channelSection.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube channelSection ID for the resource that is being deleted. In a channelSection resource, the id property specifies the YouTube channelSection ID.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "insert": {
-     "id": "youtube.channelSections.insert",
-     "path": "channelSections",
-     "httpMethod": "POST",
-     "description": "Adds a channelSection for the authenticated user's channel.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part names that you can include in the parameter value are snippet and contentDetails.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "ChannelSection"
-     },
-     "response": {
-      "$ref": "ChannelSection"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "list": {
-     "id": "youtube.channelSections.list",
-     "path": "channelSections",
-     "httpMethod": "GET",
-     "description": "Returns channelSection resources that match the API request criteria.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter specifies a YouTube channel ID. The API will only return that channel's channelSections.",
-       "location": "query"
-      },
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter indicates that the snippet.localized property values in the returned channelSection resources should be in the specified language if localized values for that language are available. For example, if the API request specifies hl=de, the snippet.localized properties in the API response will contain German titles if German titles are available. Channel owners can provide localized channel section titles using either the channelSections.insert or channelSections.update method.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube channelSection ID(s) for the resource(s) that are being retrieved. In a channelSection resource, the id property specifies the YouTube channelSection ID.",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve a feed of the authenticated user's channelSections.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more channelSection resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, and contentDetails.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a channelSection resource, the snippet property contains other properties, such as a display title for the channelSection. If you set part=snippet, the API response will also contain all of those nested properties.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "ChannelSectionListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "update": {
-     "id": "youtube.channelSections.update",
-     "path": "channelSections",
-     "httpMethod": "PUT",
-     "description": "Update a channelSection.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part names that you can include in the parameter value are snippet and contentDetails.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "ChannelSection"
-     },
-     "response": {
-      "$ref": "ChannelSection"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "channels": {
-   "methods": {
-    "list": {
-     "id": "youtube.channels.list",
-     "path": "channels",
-     "httpMethod": "GET",
-     "description": "Returns a collection of zero or more channel resources that match the request criteria.",
-     "parameters": {
-      "categoryId": {
-       "type": "string",
-       "description": "The categoryId parameter specifies a YouTube guide category, thereby requesting YouTube channels associated with that category.",
-       "location": "query"
-      },
-      "forUsername": {
-       "type": "string",
-       "description": "The forUsername parameter specifies a YouTube username, thereby requesting the channel associated with that username.",
-       "location": "query"
-      },
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter should be used for filter out the properties that are not in the given language. Used for the brandingSettings part.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube channel ID(s) for the resource(s) that are being retrieved. In a channel resource, the id property specifies the channel's YouTube channel ID.",
-       "location": "query"
-      },
-      "managedByMe": {
-       "type": "boolean",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nSet this parameter's value to true to instruct the API to only return channels managed by the content owner that the onBehalfOfContentOwner parameter specifies. The user must be authenticated as a CMS account linked to the specified content owner and onBehalfOfContentOwner must be provided.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to instruct the API to only return channels owned by the authenticated user.",
-       "location": "query"
-      },
-      "mySubscribers": {
-       "type": "boolean",
-       "description": "Use the subscriptions.list method and its mySubscribers parameter to retrieve a list of subscribers to the authenticated user's channel.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more channel resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a channel resource, the contentDetails property contains other properties, such as the uploads properties. As such, if you set part=contentDetails, the API response will also contain all of those nested properties.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "ChannelListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner",
-      "https://www.googleapis.com/auth/youtubepartner-channel-audit"
-     ]
-    },
-    "update": {
-     "id": "youtube.channels.update",
-     "path": "channels",
-     "httpMethod": "PUT",
-     "description": "Updates a channel's metadata. Note that this method currently only supports updates to the channel resource's brandingSettings and invideoPromotion objects and their child properties.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "The onBehalfOfContentOwner parameter indicates that the authenticated user is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with needs to be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe API currently only allows the parameter value to be set to either brandingSettings or invideoPromotion. (You cannot update both of those parts with a single request.)\n\nNote that this method overrides the existing values for all of the mutable properties that are contained in any parts that the parameter value specifies.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Channel"
-     },
-     "response": {
-      "$ref": "Channel"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "commentThreads": {
-   "methods": {
-    "insert": {
-     "id": "youtube.commentThreads.insert",
-     "path": "commentThreads",
-     "httpMethod": "POST",
-     "description": "Creates a new top-level comment. To add a reply to an existing comment, use the comments.insert method instead.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter identifies the properties that the API response will include. Set the parameter value to snippet. The snippet part has a quota cost of 2 units.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "CommentThread"
-     },
-     "response": {
-      "$ref": "CommentThread"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.commentThreads.list",
-     "path": "commentThreads",
-     "httpMethod": "GET",
-     "description": "Returns a list of comment threads that match the API request parameters.",
-     "parameters": {
-      "allThreadsRelatedToChannelId": {
-       "type": "string",
-       "description": "The allThreadsRelatedToChannelId parameter instructs the API to return all comment threads associated with the specified channel. The response can include comments about the channel or about the channel's videos.",
-       "location": "query"
-      },
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter instructs the API to return comment threads containing comments about the specified channel. (The response will not include comments left on videos that the channel uploaded.)",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of comment thread IDs for the resources that should be retrieved.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "default": "20",
-       "format": "uint32",
-       "minimum": "1",
-       "maximum": "100",
-       "location": "query"
-      },
-      "moderationStatus": {
-       "type": "string",
-       "description": "Set this parameter to limit the returned comment threads to a particular moderation state.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "default": "MODERATION_STATUS_PUBLISHED",
-       "enum": [
-        "heldForReview",
-        "likelySpam",
-        "published"
-       ],
-       "enumDescriptions": [
-        "Retrieve comment threads that are awaiting review by a moderator. A comment thread can be included in the response if the top-level comment or at least one of the replies to that comment are awaiting review.",
-        "Retrieve comment threads classified as likely to be spam. A comment thread can be included in the response if the top-level comment or at least one of the replies to that comment is considered likely to be spam.",
-        "Retrieve threads of published comments. This is the default value. A comment thread can be included in the response if its top-level comment has been published."
-       ],
-       "location": "query"
-      },
-      "order": {
-       "type": "string",
-       "description": "The order parameter specifies the order in which the API response should list comment threads. Valid values are: \n- time - Comment threads are ordered by time. This is the default behavior.\n- relevance - Comment threads are ordered by relevance.Note: This parameter is not supported for use in conjunction with the id parameter.",
-       "default": "true",
-       "enum": [
-        "relevance",
-        "time"
-       ],
-       "enumDescriptions": [
-        "Order by relevance.",
-        "Order by time."
-       ],
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken property identifies the next page of the result that can be retrieved.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more commentThread resource properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      },
-      "searchTerms": {
-       "type": "string",
-       "description": "The searchTerms parameter instructs the API to limit the API response to only contain comments that contain the specified search terms.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "location": "query"
-      },
-      "textFormat": {
-       "type": "string",
-       "description": "Set this parameter's value to html or plainText to instruct the API to return the comments left by users in html formatted or in plain text.",
-       "default": "FORMAT_HTML",
-       "enum": [
-        "html",
-        "plainText"
-       ],
-       "enumDescriptions": [
-        "Returns the comments in HTML format. This is the default value.",
-        "Returns the comments in plain text format."
-       ],
-       "location": "query"
-      },
-      "videoId": {
-       "type": "string",
-       "description": "The videoId parameter instructs the API to return comment threads associated with the specified video ID.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "CommentThreadListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "update": {
-     "id": "youtube.commentThreads.update",
-     "path": "commentThreads",
-     "httpMethod": "PUT",
-     "description": "Modifies the top-level comment in a comment thread.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of commentThread resource properties that the API response will include. You must at least include the snippet part in the parameter value since that part contains all of the properties that the API request can update.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "CommentThread"
-     },
-     "response": {
-      "$ref": "CommentThread"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    }
-   }
-  },
-  "comments": {
-   "methods": {
-    "delete": {
-     "id": "youtube.comments.delete",
-     "path": "comments",
-     "httpMethod": "DELETE",
-     "description": "Deletes a comment.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the comment ID for the resource that is being deleted.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.comments.insert",
-     "path": "comments",
-     "httpMethod": "POST",
-     "description": "Creates a reply to an existing comment. Note: To create a top-level comment, use the commentThreads.insert method.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter identifies the properties that the API response will include. Set the parameter value to snippet. The snippet part has a quota cost of 2 units.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Comment"
-     },
-     "response": {
-      "$ref": "Comment"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.comments.list",
-     "path": "comments",
-     "httpMethod": "GET",
-     "description": "Returns a list of comments that match the API request parameters.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of comment IDs for the resources that are being retrieved. In a comment resource, the id property specifies the comment's ID.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "default": "20",
-       "format": "uint32",
-       "minimum": "1",
-       "maximum": "100",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken property identifies the next page of the result that can be retrieved.\n\nNote: This parameter is not supported for use in conjunction with the id parameter.",
-       "location": "query"
-      },
-      "parentId": {
-       "type": "string",
-       "description": "The parentId parameter specifies the ID of the comment for which replies should be retrieved.\n\nNote: YouTube currently supports replies only for top-level comments. However, replies to replies may be supported in the future.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more comment resource properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      },
-      "textFormat": {
-       "type": "string",
-       "description": "This parameter indicates whether the API should return comments formatted as HTML or as plain text.",
-       "default": "FORMAT_HTML",
-       "enum": [
-        "html",
-        "plainText"
-       ],
-       "enumDescriptions": [
-        "Returns the comments in HTML format. This is the default value.",
-        "Returns the comments in plain text format."
-       ],
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "CommentListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "markAsSpam": {
-     "id": "youtube.comments.markAsSpam",
-     "path": "comments/markAsSpam",
-     "httpMethod": "POST",
-     "description": "Expresses the caller's opinion that one or more comments should be flagged as spam.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of IDs of comments that the caller believes should be classified as spam.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "setModerationStatus": {
-     "id": "youtube.comments.setModerationStatus",
-     "path": "comments/setModerationStatus",
-     "httpMethod": "POST",
-     "description": "Sets the moderation status of one or more comments. The API request must be authorized by the owner of the channel or video associated with the comments.",
-     "parameters": {
-      "banAuthor": {
-       "type": "boolean",
-       "description": "The banAuthor parameter lets you indicate that you want to automatically reject any additional comments written by the comment's author. Set the parameter value to true to ban the author.\n\nNote: This parameter is only valid if the moderationStatus parameter is also set to rejected.",
-       "default": "false",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of IDs that identify the comments for which you are updating the moderation status.",
-       "required": true,
-       "location": "query"
-      },
-      "moderationStatus": {
-       "type": "string",
-       "description": "Identifies the new moderation status of the specified comments.",
-       "required": true,
-       "enum": [
-        "heldForReview",
-        "published",
-        "rejected"
-       ],
-       "enumDescriptions": [
-        "Marks a comment as awaiting review by a moderator.",
-        "Clears a comment for public display.",
-        "Rejects a comment as being unfit for display. This action also effectively hides all replies to the rejected comment.\n\nNote: The API does not currently provide a way to list or otherwise discover rejected comments. However, you can change the moderation status of a rejected comment if you still know its ID. If you were to change the moderation status of a rejected comment, the comment replies would subsequently be discoverable again as well."
-       ],
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id",
-      "moderationStatus"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "update": {
-     "id": "youtube.comments.update",
-     "path": "comments",
-     "httpMethod": "PUT",
-     "description": "Modifies a comment.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter identifies the properties that the API response will include. You must at least include the snippet part in the parameter value since that part contains all of the properties that the API request can update.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Comment"
-     },
-     "response": {
-      "$ref": "Comment"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    }
-   }
-  },
-  "fanFundingEvents": {
-   "methods": {
-    "list": {
-     "id": "youtube.fanFundingEvents.list",
-     "path": "fanFundingEvents",
-     "httpMethod": "GET",
-     "description": "Lists fan funding events for a channel.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter instructs the API to retrieve localized resource metadata for a specific application language that the YouTube website supports. The parameter value must be a language code included in the list returned by the i18nLanguages.list method.\n\nIf localized resource details are available in that language, the resource's snippet.localized object will contain the localized values. However, if localized details are not available, the snippet.localized object will contain resource details in the resource's default language.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the fanFundingEvent resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "FanFundingEventListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "guideCategories": {
-   "methods": {
-    "list": {
-     "id": "youtube.guideCategories.list",
-     "path": "guideCategories",
-     "httpMethod": "GET",
-     "description": "Returns a list of categories that can be associated with YouTube channels.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter specifies the language that will be used for text values in the API response.",
-       "default": "en-US",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube channel category ID(s) for the resource(s) that are being retrieved. In a guideCategory resource, the id property specifies the YouTube channel category ID.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the guideCategory resource properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "regionCode": {
-       "type": "string",
-       "description": "The regionCode parameter instructs the API to return the list of guide categories available in the specified country. The parameter value is an ISO 3166-1 alpha-2 country code.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "GuideCategoryListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "i18nLanguages": {
-   "methods": {
-    "list": {
-     "id": "youtube.i18nLanguages.list",
-     "path": "i18nLanguages",
-     "httpMethod": "GET",
-     "description": "Returns a list of application languages that the YouTube website supports.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter specifies the language that should be used for text values in the API response.",
-       "default": "en_US",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the i18nLanguage resource properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "I18nLanguageListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "i18nRegions": {
-   "methods": {
-    "list": {
-     "id": "youtube.i18nRegions.list",
-     "path": "i18nRegions",
-     "httpMethod": "GET",
-     "description": "Returns a list of content regions that the YouTube website supports.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter specifies the language that should be used for text values in the API response.",
-       "default": "en_US",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the i18nRegion resource properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "I18nRegionListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "liveBroadcasts": {
-   "methods": {
-    "bind": {
-     "id": "youtube.liveBroadcasts.bind",
-     "path": "liveBroadcasts/bind",
-     "httpMethod": "POST",
-     "description": "Binds a YouTube broadcast to a stream or removes an existing binding between a broadcast and a stream. A broadcast can only be bound to one video stream, though a video stream may be bound to more than one broadcast.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the unique ID of the broadcast that is being bound to a video stream.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more liveBroadcast resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, contentDetails, and status.",
-       "required": true,
-       "location": "query"
-      },
-      "streamId": {
-       "type": "string",
-       "description": "The streamId parameter specifies the unique ID of the video stream that is being bound to a broadcast. If this parameter is omitted, the API will remove any existing binding between the broadcast and a video stream.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id",
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveBroadcast"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "control": {
-     "id": "youtube.liveBroadcasts.control",
-     "path": "liveBroadcasts/control",
-     "httpMethod": "POST",
-     "description": "Controls the settings for a slate that can be displayed in the broadcast stream.",
-     "parameters": {
-      "displaySlate": {
-       "type": "boolean",
-       "description": "The displaySlate parameter specifies whether the slate is being enabled or disabled.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube live broadcast ID that uniquely identifies the broadcast in which the slate is being updated.",
-       "required": true,
-       "location": "query"
-      },
-      "offsetTimeMs": {
-       "type": "string",
-       "description": "The offsetTimeMs parameter specifies a positive time offset when the specified slate change will occur. The value is measured in milliseconds from the beginning of the broadcast's monitor stream, which is the time that the testing phase for the broadcast began. Even though it is specified in milliseconds, the value is actually an approximation, and YouTube completes the requested action as closely as possible to that time.\n\nIf you do not specify a value for this parameter, then YouTube performs the action as soon as possible. See the Getting started guide for more details.\n\nImportant: You should only specify a value for this parameter if your broadcast stream is delayed.",
-       "format": "uint64",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more liveBroadcast resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, contentDetails, and status.",
-       "required": true,
-       "location": "query"
-      },
-      "walltime": {
-       "type": "string",
-       "description": "The walltime parameter specifies the wall clock time at which the specified slate change will occur. The value is specified in ISO 8601 (YYYY-MM-DDThh:mm:ss.sssZ) format.",
-       "format": "date-time",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id",
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveBroadcast"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "delete": {
-     "id": "youtube.liveBroadcasts.delete",
-     "path": "liveBroadcasts",
-     "httpMethod": "DELETE",
-     "description": "Deletes a broadcast.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube live broadcast ID for the resource that is being deleted.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.liveBroadcasts.insert",
-     "path": "liveBroadcasts",
-     "httpMethod": "POST",
-     "description": "Creates a broadcast.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part properties that you can include in the parameter value are id, snippet, contentDetails, and status.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveBroadcast"
-     },
-     "response": {
-      "$ref": "LiveBroadcast"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.liveBroadcasts.list",
-     "path": "liveBroadcasts",
-     "httpMethod": "GET",
-     "description": "Returns a list of YouTube broadcasts that match the API request parameters.",
-     "parameters": {
-      "broadcastStatus": {
-       "type": "string",
-       "description": "The broadcastStatus parameter filters the API response to only include broadcasts with the specified status.",
-       "enum": [
-        "active",
-        "all",
-        "completed",
-        "upcoming"
-       ],
-       "enumDescriptions": [
-        "Return current live broadcasts.",
-        "Return all broadcasts.",
-        "Return broadcasts that have already ended.",
-        "Return broadcasts that have not yet started."
-       ],
-       "location": "query"
-      },
-      "broadcastType": {
-       "type": "string",
-       "description": "The broadcastType parameter filters the API response to only include broadcasts with the specified type. This is only compatible with the mine filter for now.",
-       "default": "BROADCAST_TYPE_FILTER_EVENT",
-       "enum": [
-        "all",
-        "event",
-        "persistent"
-       ],
-       "enumDescriptions": [
-        "Return all broadcasts.",
-        "Return only scheduled event broadcasts.",
-        "Return only persistent broadcasts."
-       ],
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of YouTube broadcast IDs that identify the broadcasts being retrieved. In a liveBroadcast resource, the id property specifies the broadcast's ID.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "The mine parameter can be used to instruct the API to only return broadcasts owned by the authenticated user. Set the parameter value to true to only retrieve your own broadcasts.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more liveBroadcast resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, contentDetails, and status.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveBroadcastListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    },
-    "transition": {
-     "id": "youtube.liveBroadcasts.transition",
-     "path": "liveBroadcasts/transition",
-     "httpMethod": "POST",
-     "description": "Changes the status of a YouTube live broadcast and initiates any processes associated with the new status. For example, when you transition a broadcast's status to testing, YouTube starts to transmit video to that broadcast's monitor stream. Before calling this method, you should confirm that the value of the status.streamStatus property for the stream bound to your broadcast is active.",
-     "parameters": {
-      "broadcastStatus": {
-       "type": "string",
-       "description": "The broadcastStatus parameter identifies the state to which the broadcast is changing. Note that to transition a broadcast to either the testing or live state, the status.streamStatus must be active for the stream that the broadcast is bound to.",
-       "required": true,
-       "enum": [
-        "complete",
-        "live",
-        "testing"
-       ],
-       "enumDescriptions": [
-        "The broadcast is over. YouTube stops transmitting video.",
-        "The broadcast is visible to its audience. YouTube transmits video to the broadcast's monitor stream and its broadcast stream.",
-        "Start testing the broadcast. YouTube transmits video to the broadcast's monitor stream. Note that you can only transition a broadcast to the testing state if its contentDetails.monitorStream.enableMonitorStream property is set to true."
-       ],
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the unique ID of the broadcast that is transitioning to another status.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more liveBroadcast resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, contentDetails, and status.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "broadcastStatus",
-      "id",
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveBroadcast"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "update": {
-     "id": "youtube.liveBroadcasts.update",
-     "path": "liveBroadcasts",
-     "httpMethod": "PUT",
-     "description": "Updates a broadcast. For example, you could modify the broadcast settings defined in the liveBroadcast resource's contentDetails object.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part properties that you can include in the parameter value are id, snippet, contentDetails, and status.\n\nNote that this method will override the existing values for all of the mutable properties that are contained in any parts that the parameter value specifies. For example, a broadcast's privacy status is defined in the status part. As such, if your request is updating a private or unlisted broadcast, and the request's part parameter value includes the status part, the broadcast's privacy setting will be updated to whatever value the request body specifies. If the request body does not specify a value, the existing privacy setting will be removed and the broadcast will revert to the default privacy setting.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveBroadcast"
-     },
-     "response": {
-      "$ref": "LiveBroadcast"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    }
-   }
-  },
-  "liveChatBans": {
-   "methods": {
-    "delete": {
-     "id": "youtube.liveChatBans.delete",
-     "path": "liveChat/bans",
-     "httpMethod": "DELETE",
-     "description": "Removes a chat ban.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter identifies the chat ban to remove. The value uniquely identifies both the ban and the chat.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.liveChatBans.insert",
-     "path": "liveChat/bans",
-     "httpMethod": "POST",
-     "description": "Adds a new ban to the chat.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response returns. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveChatBan"
-     },
-     "response": {
-      "$ref": "LiveChatBan"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    }
-   }
-  },
-  "liveChatMessages": {
-   "methods": {
-    "delete": {
-     "id": "youtube.liveChatMessages.delete",
-     "path": "liveChat/messages",
-     "httpMethod": "DELETE",
-     "description": "Deletes a chat message.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube chat message ID of the resource that is being deleted.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.liveChatMessages.insert",
-     "path": "liveChat/messages",
-     "httpMethod": "POST",
-     "description": "Adds a message to a live chat.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes. It identifies the properties that the write operation will set as well as the properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveChatMessage"
-     },
-     "response": {
-      "$ref": "LiveChatMessage"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.liveChatMessages.list",
-     "path": "liveChat/messages",
-     "httpMethod": "GET",
-     "description": "Lists live chat messages for a specific chat.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter instructs the API to retrieve localized resource metadata for a specific application language that the YouTube website supports. The parameter value must be a language code included in the list returned by the i18nLanguages.list method.\n\nIf localized resource details are available in that language, the resource's snippet.localized object will contain the localized values. However, if localized details are not available, the snippet.localized object will contain resource details in the resource's default language.",
-       "location": "query"
-      },
-      "liveChatId": {
-       "type": "string",
-       "description": "The liveChatId parameter specifies the ID of the chat whose messages will be returned.",
-       "required": true,
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of messages that should be returned in the result set.",
-       "default": "500",
-       "format": "uint32",
-       "minimum": "200",
-       "maximum": "2000",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken property identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the liveChatComment resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "profileImageSize": {
-       "type": "integer",
-       "description": "The profileImageSize parameter specifies the size of the user profile pictures that should be returned in the result set. Default: 88.",
-       "format": "uint32",
-       "minimum": "16",
-       "maximum": "720",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "liveChatId",
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveChatMessageListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "liveChatModerators": {
-   "methods": {
-    "delete": {
-     "id": "youtube.liveChatModerators.delete",
-     "path": "liveChat/moderators",
-     "httpMethod": "DELETE",
-     "description": "Removes a chat moderator.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter identifies the chat moderator to remove. The value uniquely identifies both the moderator and the chat.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.liveChatModerators.insert",
-     "path": "liveChat/moderators",
-     "httpMethod": "POST",
-     "description": "Adds a new moderator for the chat.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response returns. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveChatModerator"
-     },
-     "response": {
-      "$ref": "LiveChatModerator"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.liveChatModerators.list",
-     "path": "liveChat/moderators",
-     "httpMethod": "GET",
-     "description": "Lists moderators for a live chat.",
-     "parameters": {
-      "liveChatId": {
-       "type": "string",
-       "description": "The liveChatId parameter specifies the YouTube live chat for which the API should return moderators.",
-       "required": true,
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the liveChatModerator resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "liveChatId",
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveChatModeratorListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "liveStreams": {
-   "methods": {
-    "delete": {
-     "id": "youtube.liveStreams.delete",
-     "path": "liveStreams",
-     "httpMethod": "DELETE",
-     "description": "Deletes a video stream.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube live stream ID for the resource that is being deleted.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "insert": {
-     "id": "youtube.liveStreams.insert",
-     "path": "liveStreams",
-     "httpMethod": "POST",
-     "description": "Creates a video stream. The stream enables you to send your video to YouTube, which can then broadcast the video to your audience.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part properties that you can include in the parameter value are id, snippet, cdn, and status.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveStream"
-     },
-     "response": {
-      "$ref": "LiveStream"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    },
-    "list": {
-     "id": "youtube.liveStreams.list",
-     "path": "liveStreams",
-     "httpMethod": "GET",
-     "description": "Returns a list of video streams that match the API request parameters.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of YouTube stream IDs that identify the streams being retrieved. In a liveStream resource, the id property specifies the stream's ID.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "The mine parameter can be used to instruct the API to only return streams owned by the authenticated user. Set the parameter value to true to only retrieve your own streams.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more liveStream resource properties that the API response will include. The part names that you can include in the parameter value are id, snippet, cdn, and status.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "LiveStreamListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    },
-    "update": {
-     "id": "youtube.liveStreams.update",
-     "path": "liveStreams",
-     "httpMethod": "PUT",
-     "description": "Updates a video stream. If the properties that you want to change cannot be updated, then you need to create a new stream with the proper settings.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nThe part properties that you can include in the parameter value are id, snippet, cdn, and status.\n\nNote that this method will override the existing values for all of the mutable properties that are contained in any parts that the parameter value specifies. If the request body does not specify a value for a mutable property, the existing value for that property will be removed.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "LiveStream"
-     },
-     "response": {
-      "$ref": "LiveStream"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl"
-     ]
-    }
-   }
-  },
-  "playlistItems": {
-   "methods": {
-    "delete": {
-     "id": "youtube.playlistItems.delete",
-     "path": "playlistItems",
-     "httpMethod": "DELETE",
-     "description": "Deletes a playlist item.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube playlist item ID for the playlist item that is being deleted. In a playlistItem resource, the id property specifies the playlist item's ID.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "insert": {
-     "id": "youtube.playlistItems.insert",
-     "path": "playlistItems",
-     "httpMethod": "POST",
-     "description": "Adds a resource to a playlist.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "PlaylistItem"
-     },
-     "response": {
-      "$ref": "PlaylistItem"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "list": {
-     "id": "youtube.playlistItems.list",
-     "path": "playlistItems",
-     "httpMethod": "GET",
-     "description": "Returns a collection of playlist items that match the API request parameters. You can retrieve all of the playlist items in a specified playlist or retrieve one or more playlist items by their unique IDs.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of one or more unique playlist item IDs.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more playlistItem resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a playlistItem resource, the snippet property contains numerous fields, including the title, description, position, and resourceId properties. As such, if you set part=snippet, the API response will contain all of those properties.",
-       "required": true,
-       "location": "query"
-      },
-      "playlistId": {
-       "type": "string",
-       "description": "The playlistId parameter specifies the unique ID of the playlist for which you want to retrieve playlist items. Note that even though this is an optional parameter, every request to retrieve playlist items must specify a value for either the id parameter or the playlistId parameter.",
-       "location": "query"
-      },
-      "videoId": {
-       "type": "string",
-       "description": "The videoId parameter specifies that the request should return only the playlist items that contain the specified video.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "PlaylistItemListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsSubscription": true
-    },
-    "update": {
-     "id": "youtube.playlistItems.update",
-     "path": "playlistItems",
-     "httpMethod": "PUT",
-     "description": "Modifies a playlist item. For example, you could update the item's position in the playlist.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nNote that this method will override the existing values for all of the mutable properties that are contained in any parts that the parameter value specifies. For example, a playlist item can specify a start time and end time, which identify the times portion of the video that should play when users watch the video in the playlist. If your request is updating a playlist item that sets these values, and the request's part parameter value includes the contentDetails part, the playlist item's start and end times will be updated to whatever value the request body specifies. If the request body does not specify values, the existing start and end times will be removed and replaced with the default settings.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "PlaylistItem"
-     },
-     "response": {
-      "$ref": "PlaylistItem"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "playlists": {
-   "methods": {
-    "delete": {
-     "id": "youtube.playlists.delete",
-     "path": "playlists",
-     "httpMethod": "DELETE",
-     "description": "Deletes a playlist.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube playlist ID for the playlist that is being deleted. In a playlist resource, the id property specifies the playlist's ID.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "insert": {
-     "id": "youtube.playlists.insert",
-     "path": "playlists",
-     "httpMethod": "POST",
-     "description": "Creates a playlist.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Playlist"
-     },
-     "response": {
-      "$ref": "Playlist"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "list": {
-     "id": "youtube.playlists.list",
-     "path": "playlists",
-     "httpMethod": "GET",
-     "description": "Returns a collection of playlists that match the API request parameters. For example, you can retrieve all playlists that the authenticated user owns, or you can retrieve one or more playlists by their unique IDs.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "This value indicates that the API should only return the specified channel's playlists.",
-       "location": "query"
-      },
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter should be used for filter out the properties that are not in the given language. Used for the snippet part.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube playlist ID(s) for the resource(s) that are being retrieved. In a playlist resource, the id property specifies the playlist's YouTube playlist ID.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to instruct the API to only return playlists owned by the authenticated user.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more playlist resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a playlist resource, the snippet property contains properties like author, title, description, tags, and timeCreated. As such, if you set part=snippet, the API response will contain all of those properties.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "PlaylistListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "update": {
-     "id": "youtube.playlists.update",
-     "path": "playlists",
-     "httpMethod": "PUT",
-     "description": "Modifies a playlist. For example, you could change a playlist's title, description, or privacy status.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nNote that this method will override the existing values for mutable properties that are contained in any parts that the request body specifies. For example, a playlist's description is contained in the snippet part, which must be included in the request body. If the request does not specify a value for the snippet.description property, the playlist's existing description will be deleted.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Playlist"
-     },
-     "response": {
-      "$ref": "Playlist"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "search": {
-   "methods": {
-    "list": {
-     "id": "youtube.search.list",
-     "path": "search",
-     "httpMethod": "GET",
-     "description": "Returns a collection of search results that match the query parameters specified in the API request. By default, a search result set identifies matching video, channel, and playlist resources, but you can also configure queries to only retrieve a specific type of resource.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter indicates that the API response should only contain resources created by the channel",
-       "location": "query"
-      },
-      "channelType": {
-       "type": "string",
-       "description": "The channelType parameter lets you restrict a search to a particular type of channel.",
-       "enum": [
-        "any",
-        "show"
-       ],
-       "enumDescriptions": [
-        "Return all channels.",
-        "Only retrieve shows."
-       ],
-       "location": "query"
-      },
-      "eventType": {
-       "type": "string",
-       "description": "The eventType parameter restricts a search to broadcast events. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "completed",
-        "live",
-        "upcoming"
-       ],
-       "enumDescriptions": [
-        "Only include completed broadcasts.",
-        "Only include active broadcasts.",
-        "Only include upcoming broadcasts."
-       ],
-       "location": "query"
-      },
-      "forContentOwner": {
-       "type": "boolean",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe forContentOwner parameter restricts the search to only retrieve resources owned by the content owner specified by the onBehalfOfContentOwner parameter. The user must be authenticated using a CMS account linked to the specified content owner and onBehalfOfContentOwner must be provided.",
-       "location": "query"
-      },
-      "forDeveloper": {
-       "type": "boolean",
-       "description": "The forDeveloper parameter restricts the search to only retrieve videos uploaded via the developer's application or website. The API server uses the request's authorization credentials to identify the developer. Therefore, a developer can restrict results to videos uploaded through the developer's own app or website but not to videos uploaded through other apps or sites.",
-       "location": "query"
-      },
-      "forMine": {
-       "type": "boolean",
-       "description": "The forMine parameter restricts the search to only retrieve videos owned by the authenticated user. If you set this parameter to true, then the type parameter's value must also be set to video.",
-       "location": "query"
-      },
-      "location": {
-       "type": "string",
-       "description": "The location parameter, in conjunction with the locationRadius parameter, defines a circular geographic area and also restricts a search to videos that specify, in their metadata, a geographic location that falls within that area. The parameter value is a string that specifies latitude/longitude coordinates e.g. (37.42307,-122.08427).\n\n\n- The location parameter value identifies the point at the center of the area.\n- The locationRadius parameter specifies the maximum distance that the location associated with a video can be from that point for the video to still be included in the search results.The API returns an error if your request specifies a value for the location parameter but does not also specify a value for the locationRadius parameter.",
-       "location": "query"
-      },
-      "locationRadius": {
-       "type": "string",
-       "description": "The locationRadius parameter, in conjunction with the location parameter, defines a circular geographic area.\n\nThe parameter value must be a floating point number followed by a measurement unit. Valid measurement units are m, km, ft, and mi. For example, valid parameter values include 1500m, 5km, 10000ft, and 0.75mi. The API does not support locationRadius parameter values larger than 1000 kilometers.\n\nNote: See the definition of the location parameter for more information.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "order": {
-       "type": "string",
-       "description": "The order parameter specifies the method that will be used to order resources in the API response.",
-       "default": "SEARCH_SORT_RELEVANCE",
-       "enum": [
-        "date",
-        "rating",
-        "relevance",
-        "title",
-        "videoCount",
-        "viewCount"
-       ],
-       "enumDescriptions": [
-        "Resources are sorted in reverse chronological order based on the date they were created.",
-        "Resources are sorted from highest to lowest rating.",
-        "Resources are sorted based on their relevance to the search query. This is the default value for this parameter.",
-        "Resources are sorted alphabetically by title.",
-        "Channels are sorted in descending order of their number of uploaded videos.",
-        "Resources are sorted from highest to lowest number of views."
-       ],
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more search resource properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "publishedAfter": {
-       "type": "string",
-       "description": "The publishedAfter parameter indicates that the API response should only contain resources created after the specified time. The value is an RFC 3339 formatted date-time value (1970-01-01T00:00:00Z).",
-       "format": "date-time",
-       "location": "query"
-      },
-      "publishedBefore": {
-       "type": "string",
-       "description": "The publishedBefore parameter indicates that the API response should only contain resources created before the specified time. The value is an RFC 3339 formatted date-time value (1970-01-01T00:00:00Z).",
-       "format": "date-time",
-       "location": "query"
-      },
-      "q": {
-       "type": "string",
-       "description": "The q parameter specifies the query term to search for.\n\nYour request can also use the Boolean NOT (-) and OR (|) operators to exclude videos or to find videos that are associated with one of several search terms. For example, to search for videos matching either \"boating\" or \"sailing\", set the q parameter value to boating|sailing. Similarly, to search for videos matching either \"boating\" or \"sailing\" but not \"fishing\", set the q parameter value to boating|sailing -fishing. Note that the pipe character must be URL-escaped when it is sent in your API request. The URL-escaped value for the pipe character is %7C.",
-       "location": "query"
-      },
-      "regionCode": {
-       "type": "string",
-       "description": "The regionCode parameter instructs the API to return search results for the specified country. The parameter value is an ISO 3166-1 alpha-2 country code.",
-       "location": "query"
-      },
-      "relatedToVideoId": {
-       "type": "string",
-       "description": "The relatedToVideoId parameter retrieves a list of videos that are related to the video that the parameter value identifies. The parameter value must be set to a YouTube video ID and, if you are using this parameter, the type parameter must be set to video.",
-       "location": "query"
-      },
-      "relevanceLanguage": {
-       "type": "string",
-       "description": "The relevanceLanguage parameter instructs the API to return search results that are most relevant to the specified language. The parameter value is typically an ISO 639-1 two-letter language code. However, you should use the values zh-Hans for simplified Chinese and zh-Hant for traditional Chinese. Please note that results in other languages will still be returned if they are highly relevant to the search query term.",
-       "location": "query"
-      },
-      "safeSearch": {
-       "type": "string",
-       "description": "The safeSearch parameter indicates whether the search results should include restricted content as well as standard content.",
-       "enum": [
-        "moderate",
-        "none",
-        "strict"
-       ],
-       "enumDescriptions": [
-        "YouTube will filter some content from search results and, at the least, will filter content that is restricted in your locale. Based on their content, search results could be removed from search results or demoted in search results. This is the default parameter value.",
-        "YouTube will not filter the search result set.",
-        "YouTube will try to exclude all restricted content from the search result set. Based on their content, search results could be removed from search results or demoted in search results."
-       ],
-       "location": "query"
-      },
-      "topicId": {
-       "type": "string",
-       "description": "The topicId parameter indicates that the API response should only contain resources associated with the specified topic. The value identifies a Freebase topic ID.",
-       "location": "query"
-      },
-      "type": {
-       "type": "string",
-       "description": "The type parameter restricts a search query to only retrieve a particular type of resource. The value is a comma-separated list of resource types.",
-       "default": "video,channel,playlist",
-       "location": "query"
-      },
-      "videoCaption": {
-       "type": "string",
-       "description": "The videoCaption parameter indicates whether the API should filter video search results based on whether they have captions. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "closedCaption",
-        "none"
-       ],
-       "enumDescriptions": [
-        "Do not filter results based on caption availability.",
-        "Only include videos that have captions.",
-        "Only include videos that do not have captions."
-       ],
-       "location": "query"
-      },
-      "videoCategoryId": {
-       "type": "string",
-       "description": "The videoCategoryId parameter filters video search results based on their category. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "location": "query"
-      },
-      "videoDefinition": {
-       "type": "string",
-       "description": "The videoDefinition parameter lets you restrict a search to only include either high definition (HD) or standard definition (SD) videos. HD videos are available for playback in at least 720p, though higher resolutions, like 1080p, might also be available. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "high",
-        "standard"
-       ],
-       "enumDescriptions": [
-        "Return all videos, regardless of their resolution.",
-        "Only retrieve HD videos.",
-        "Only retrieve videos in standard definition."
-       ],
-       "location": "query"
-      },
-      "videoDimension": {
-       "type": "string",
-       "description": "The videoDimension parameter lets you restrict a search to only retrieve 2D or 3D videos. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "2d",
-        "3d",
-        "any"
-       ],
-       "enumDescriptions": [
-        "Restrict search results to exclude 3D videos.",
-        "Restrict search results to only include 3D videos.",
-        "Include both 3D and non-3D videos in returned results. This is the default value."
-       ],
-       "location": "query"
-      },
-      "videoDuration": {
-       "type": "string",
-       "description": "The videoDuration parameter filters video search results based on their duration. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "long",
-        "medium",
-        "short"
-       ],
-       "enumDescriptions": [
-        "Do not filter video search results based on their duration. This is the default value.",
-        "Only include videos longer than 20 minutes.",
-        "Only include videos that are between four and 20 minutes long (inclusive).",
-        "Only include videos that are less than four minutes long."
-       ],
-       "location": "query"
-      },
-      "videoEmbeddable": {
-       "type": "string",
-       "description": "The videoEmbeddable parameter lets you to restrict a search to only videos that can be embedded into a webpage. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "true"
-       ],
-       "enumDescriptions": [
-        "Return all videos, embeddable or not.",
-        "Only retrieve embeddable videos."
-       ],
-       "location": "query"
-      },
-      "videoLicense": {
-       "type": "string",
-       "description": "The videoLicense parameter filters search results to only include videos with a particular license. YouTube lets video uploaders choose to attach either the Creative Commons license or the standard YouTube license to each of their videos. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "creativeCommon",
-        "youtube"
-       ],
-       "enumDescriptions": [
-        "Return all videos, regardless of which license they have, that match the query parameters.",
-        "Only return videos that have a Creative Commons license. Users can reuse videos with this license in other videos that they create. Learn more.",
-        "Only return videos that have the standard YouTube license."
-       ],
-       "location": "query"
-      },
-      "videoSyndicated": {
-       "type": "string",
-       "description": "The videoSyndicated parameter lets you to restrict a search to only videos that can be played outside youtube.com. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "true"
-       ],
-       "enumDescriptions": [
-        "Return all videos, syndicated or not.",
-        "Only retrieve syndicated videos."
-       ],
-       "location": "query"
-      },
-      "videoType": {
-       "type": "string",
-       "description": "The videoType parameter lets you restrict a search to a particular type of videos. If you specify a value for this parameter, you must also set the type parameter's value to video.",
-       "enum": [
-        "any",
-        "episode",
-        "movie"
-       ],
-       "enumDescriptions": [
-        "Return all videos.",
-        "Only retrieve episodes of shows.",
-        "Only retrieve movies."
-       ],
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "SearchListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "sponsors": {
-   "methods": {
-    "list": {
-     "id": "youtube.sponsors.list",
-     "path": "sponsors",
-     "httpMethod": "GET",
-     "description": "Lists sponsors for a channel.",
-     "parameters": {
-      "filter": {
-       "type": "string",
-       "description": "The filter parameter specifies which channel sponsors to return.",
-       "default": "POLL_NEWEST",
-       "enum": [
-        "all",
-        "newest"
-       ],
-       "enumDescriptions": [
-        "Return all sponsors, from newest to oldest.",
-        "Return the most recent sponsors, from newest to oldest."
-       ],
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the sponsor resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "SponsorListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "subscriptions": {
-   "methods": {
-    "delete": {
-     "id": "youtube.subscriptions.delete",
-     "path": "subscriptions",
-     "httpMethod": "DELETE",
-     "description": "Deletes a subscription.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube subscription ID for the resource that is being deleted. In a subscription resource, the id property specifies the YouTube subscription ID.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "insert": {
-     "id": "youtube.subscriptions.insert",
-     "path": "subscriptions",
-     "httpMethod": "POST",
-     "description": "Adds a subscription for the authenticated user's channel.",
-     "parameters": {
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Subscription"
-     },
-     "response": {
-      "$ref": "Subscription"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "list": {
-     "id": "youtube.subscriptions.list",
-     "path": "subscriptions",
-     "httpMethod": "GET",
-     "description": "Returns subscription resources that match the API request criteria.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter specifies a YouTube channel ID. The API will only return that channel's subscriptions.",
-       "location": "query"
-      },
-      "forChannelId": {
-       "type": "string",
-       "description": "The forChannelId parameter specifies a comma-separated list of channel IDs. The API response will then only contain subscriptions matching those channels.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube subscription ID(s) for the resource(s) that are being retrieved. In a subscription resource, the id property specifies the YouTube subscription ID.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "mine": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve a feed of the authenticated user's subscriptions.",
-       "location": "query"
-      },
-      "myRecentSubscribers": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve a feed of the subscribers of the authenticated user in reverse chronological order (newest first).",
-       "location": "query"
-      },
-      "mySubscribers": {
-       "type": "boolean",
-       "description": "Set this parameter's value to true to retrieve a feed of the subscribers of the authenticated user in no particular order.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "order": {
-       "type": "string",
-       "description": "The order parameter specifies the method that will be used to sort resources in the API response.",
-       "default": "SUBSCRIPTION_ORDER_RELEVANCE",
-       "enum": [
-        "alphabetical",
-        "relevance",
-        "unread"
-       ],
-       "enumDescriptions": [
-        "Sort alphabetically.",
-        "Sort by relevance.",
-        "Sort by order of activity."
-       ],
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more subscription resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a subscription resource, the snippet property contains other properties, such as a display title for the subscription. If you set part=snippet, the API response will also contain all of those nested properties.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "SubscriptionListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "superChatEvents": {
-   "methods": {
-    "list": {
-     "id": "youtube.superChatEvents.list",
-     "path": "superChatEvents",
-     "httpMethod": "GET",
-     "description": "Lists Super Chat events for a channel.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter instructs the API to retrieve localized resource metadata for a specific application language that the YouTube website supports. The parameter value must be a language code included in the list returned by the i18nLanguages.list method.\n\nIf localized resource details are available in that language, the resource's snippet.localized object will contain the localized values. However, if localized details are not available, the snippet.localized object will contain resource details in the resource's default language.",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "0",
-       "maximum": "50",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the superChatEvent resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "SuperChatEventListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "thumbnails": {
-   "methods": {
-    "set": {
-     "id": "youtube.thumbnails.set",
-     "path": "thumbnails/set",
-     "httpMethod": "POST",
-     "description": "Uploads a custom video thumbnail to YouTube and sets it for a video.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "videoId": {
-       "type": "string",
-       "description": "The videoId parameter specifies a YouTube video ID for which the custom video thumbnail is being provided.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "videoId"
-     ],
-     "response": {
-      "$ref": "ThumbnailSetResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.upload",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "application/octet-stream",
-       "image/jpeg",
-       "image/png"
-      ],
-      "maxSize": "2MB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/thumbnails/set"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/thumbnails/set"
-       }
-      }
-     }
-    }
-   }
-  },
-  "videoAbuseReportReasons": {
-   "methods": {
-    "list": {
-     "id": "youtube.videoAbuseReportReasons.list",
-     "path": "videoAbuseReportReasons",
-     "httpMethod": "GET",
-     "description": "Returns a list of abuse reasons that can be used for reporting abusive videos.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter specifies the language that should be used for text values in the API response.",
-       "default": "en_US",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the videoCategory resource parts that the API response will include. Supported values are id and snippet.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "VideoAbuseReportReasonListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly"
-     ]
-    }
-   }
-  },
-  "videoCategories": {
-   "methods": {
-    "list": {
-     "id": "youtube.videoCategories.list",
-     "path": "videoCategories",
-     "httpMethod": "GET",
-     "description": "Returns a list of categories that can be associated with YouTube videos.",
-     "parameters": {
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter specifies the language that should be used for text values in the API response.",
-       "default": "en_US",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of video category IDs for the resources that you are retrieving.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies the videoCategory resource properties that the API response will include. Set the parameter value to snippet.",
-       "required": true,
-       "location": "query"
-      },
-      "regionCode": {
-       "type": "string",
-       "description": "The regionCode parameter instructs the API to return the list of video categories available in the specified country. The parameter value is an ISO 3166-1 alpha-2 country code.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "VideoCategoryListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "videos": {
-   "methods": {
-    "delete": {
-     "id": "youtube.videos.delete",
-     "path": "videos",
-     "httpMethod": "DELETE",
-     "description": "Deletes a YouTube video.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube video ID for the resource that is being deleted. In a video resource, the id property specifies the video's ID.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "getRating": {
-     "id": "youtube.videos.getRating",
-     "path": "videos/getRating",
-     "httpMethod": "GET",
-     "description": "Retrieves the ratings that the authorized user gave to a list of specified videos.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube video ID(s) for the resource(s) for which you are retrieving rating data. In a video resource, the id property specifies the video's ID.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id"
-     ],
-     "response": {
-      "$ref": "VideoGetRatingResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "insert": {
-     "id": "youtube.videos.insert",
-     "path": "videos",
-     "httpMethod": "POST",
-     "description": "Uploads a video to YouTube and optionally sets the video's metadata.",
-     "parameters": {
-      "autoLevels": {
-       "type": "boolean",
-       "description": "The autoLevels parameter indicates whether YouTube should automatically enhance the video's lighting and color.",
-       "location": "query"
-      },
-      "notifySubscribers": {
-       "type": "boolean",
-       "description": "The notifySubscribers parameter indicates whether YouTube should send a notification about the new video to users who subscribe to the video's channel. A parameter value of True indicates that subscribers will be notified of newly uploaded videos. However, a channel owner who is uploading many videos might prefer to set the value to False to avoid sending a notification about each new video to the channel's subscribers.",
-       "default": "true",
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "onBehalfOfContentOwnerChannel": {
-       "type": "string",
-       "description": "This parameter can only be used in a properly authorized request. Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwnerChannel parameter specifies the YouTube channel ID of the channel to which a video is being added. This parameter is required when a request specifies a value for the onBehalfOfContentOwner parameter, and it can only be used in conjunction with that parameter. In addition, the request must be authorized using a CMS account that is linked to the content owner that the onBehalfOfContentOwner parameter specifies. Finally, the channel that the onBehalfOfContentOwnerChannel parameter value specifies must be linked to the content owner that the onBehalfOfContentOwner parameter specifies.\n\nThis parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and perform actions on behalf of the channel specified in the parameter value, without having to provide authentication credentials for each separate channel.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nNote that not all parts contain properties that can be set when inserting or updating a video. For example, the statistics object encapsulates statistics that YouTube calculates for a video and does not contain values that you can set or modify. If the parameter value specifies a part that does not contain mutable values, that part will still be included in the API response.",
-       "required": true,
-       "location": "query"
-      },
-      "stabilize": {
-       "type": "boolean",
-       "description": "The stabilize parameter indicates whether YouTube should adjust the video to remove shaky camera motions.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Video"
-     },
-     "response": {
-      "$ref": "Video"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.upload",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "application/octet-stream",
-       "video/*"
-      ],
-      "maxSize": "64GB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/videos"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/videos"
-       }
-      }
-     }
-    },
-    "list": {
-     "id": "youtube.videos.list",
-     "path": "videos",
-     "httpMethod": "GET",
-     "description": "Returns a list of videos that match the API request parameters.",
-     "parameters": {
-      "chart": {
-       "type": "string",
-       "description": "The chart parameter identifies the chart that you want to retrieve.",
-       "enum": [
-        "mostPopular"
-       ],
-       "enumDescriptions": [
-        "Return the most popular videos for the specified content region and video category."
-       ],
-       "location": "query"
-      },
-      "hl": {
-       "type": "string",
-       "description": "The hl parameter instructs the API to retrieve localized resource metadata for a specific application language that the YouTube website supports. The parameter value must be a language code included in the list returned by the i18nLanguages.list method.\n\nIf localized resource details are available in that language, the resource's snippet.localized object will contain the localized values. However, if localized details are not available, the snippet.localized object will contain resource details in the resource's default language.",
-       "location": "query"
-      },
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies a comma-separated list of the YouTube video ID(s) for the resource(s) that are being retrieved. In a video resource, the id property specifies the video's ID.",
-       "location": "query"
-      },
-      "locale": {
-       "type": "string",
-       "description": "DEPRECATED",
-       "location": "query"
-      },
-      "maxHeight": {
-       "type": "integer",
-       "description": "The maxHeight parameter specifies a maximum height of the embedded player. If maxWidth is provided, maxHeight may not be reached in order to not violate the width request.",
-       "format": "uint32",
-       "minimum": "72",
-       "maximum": "8192",
-       "location": "query"
-      },
-      "maxResults": {
-       "type": "integer",
-       "description": "The maxResults parameter specifies the maximum number of items that should be returned in the result set.\n\nNote: This parameter is supported for use in conjunction with the myRating and chart parameters, but it is not supported for use in conjunction with the id parameter.",
-       "default": "5",
-       "format": "uint32",
-       "minimum": "1",
-       "maximum": "50",
-       "location": "query"
-      },
-      "maxWidth": {
-       "type": "integer",
-       "description": "The maxWidth parameter specifies a maximum width of the embedded player. If maxHeight is provided, maxWidth may not be reached in order to not violate the height request.",
-       "format": "uint32",
-       "minimum": "72",
-       "maximum": "8192",
-       "location": "query"
-      },
-      "myRating": {
-       "type": "string",
-       "description": "Set this parameter's value to like or dislike to instruct the API to only return videos liked or disliked by the authenticated user.",
-       "enum": [
-        "dislike",
-        "like"
-       ],
-       "enumDescriptions": [
-        "Returns only videos disliked by the authenticated user.",
-        "Returns only video liked by the authenticated user."
-       ],
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "pageToken": {
-       "type": "string",
-       "description": "The pageToken parameter identifies a specific page in the result set that should be returned. In an API response, the nextPageToken and prevPageToken properties identify other pages that could be retrieved.\n\nNote: This parameter is supported for use in conjunction with the myRating and chart parameters, but it is not supported for use in conjunction with the id parameter.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter specifies a comma-separated list of one or more video resource properties that the API response will include.\n\nIf the parameter identifies a property that contains child properties, the child properties will be included in the response. For example, in a video resource, the snippet property contains the channelId, title, description, tags, and categoryId properties. As such, if you set part=snippet, the API response will contain all of those properties.",
-       "required": true,
-       "location": "query"
-      },
-      "regionCode": {
-       "type": "string",
-       "description": "The regionCode parameter instructs the API to select a video chart available in the specified region. This parameter can only be used in conjunction with the chart parameter. The parameter value is an ISO 3166-1 alpha-2 country code.",
-       "location": "query"
-      },
-      "videoCategoryId": {
-       "type": "string",
-       "description": "The videoCategoryId parameter identifies the video category for which the chart should be retrieved. This parameter can only be used in conjunction with the chart parameter. By default, charts are not restricted to a particular category.",
-       "default": "0",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "response": {
-      "$ref": "VideoListResponse"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.readonly",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "rate": {
-     "id": "youtube.videos.rate",
-     "path": "videos/rate",
-     "httpMethod": "POST",
-     "description": "Add a like or dislike rating to a video or remove a rating from a video.",
-     "parameters": {
-      "id": {
-       "type": "string",
-       "description": "The id parameter specifies the YouTube video ID of the video that is being rated or having its rating removed.",
-       "required": true,
-       "location": "query"
-      },
-      "rating": {
-       "type": "string",
-       "description": "Specifies the rating to record.",
-       "required": true,
-       "enum": [
-        "dislike",
-        "like",
-        "none"
-       ],
-       "enumDescriptions": [
-        "Records that the authenticated user disliked the video.",
-        "Records that the authenticated user liked the video.",
-        "Removes any rating that the authenticated user had previously set for the video."
-       ],
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "id",
-      "rating"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "reportAbuse": {
-     "id": "youtube.videos.reportAbuse",
-     "path": "videos/reportAbuse",
-     "httpMethod": "POST",
-     "description": "Report abuse for a video.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "request": {
-      "$ref": "VideoAbuseReport"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    },
-    "update": {
-     "id": "youtube.videos.update",
-     "path": "videos",
-     "httpMethod": "PUT",
-     "description": "Updates a video's metadata.",
-     "parameters": {
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The actual CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      },
-      "part": {
-       "type": "string",
-       "description": "The part parameter serves two purposes in this operation. It identifies the properties that the write operation will set as well as the properties that the API response will include.\n\nNote that this method will override the existing values for all of the mutable properties that are contained in any parts that the parameter value specifies. For example, a video's privacy setting is contained in the status part. As such, if your request is updating a private video, and the request's part parameter value includes the status part, the video's privacy setting will be updated to whatever value the request body specifies. If the request body does not specify a value, the existing privacy setting will be removed and the video will revert to the default privacy setting.\n\nIn addition, not all parts contain properties that can be set when inserting or updating a video. For example, the statistics object encapsulates statistics that YouTube calculates for a video and does not contain values that you can set or modify. If the parameter value specifies a part that does not contain mutable values, that part will still be included in the API response.",
-       "required": true,
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "part"
-     ],
-     "request": {
-      "$ref": "Video"
-     },
-     "response": {
-      "$ref": "Video"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  },
-  "watermarks": {
-   "methods": {
-    "set": {
-     "id": "youtube.watermarks.set",
-     "path": "watermarks/set",
-     "httpMethod": "POST",
-     "description": "Uploads a watermark image to YouTube and sets it for a channel.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter specifies the YouTube channel ID for which the watermark is being provided.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "channelId"
-     ],
-     "request": {
-      "$ref": "InvideoBranding"
-     },
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtube.upload",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ],
-     "supportsMediaUpload": true,
-     "mediaUpload": {
-      "accept": [
-       "application/octet-stream",
-       "image/jpeg",
-       "image/png"
-      ],
-      "maxSize": "10MB",
-      "protocols": {
-       "simple": {
-        "multipart": true,
-        "path": "/upload/youtube/v3/watermarks/set"
-       },
-       "resumable": {
-        "multipart": true,
-        "path": "/resumable/upload/youtube/v3/watermarks/set"
-       }
-      }
-     }
-    },
-    "unset": {
-     "id": "youtube.watermarks.unset",
-     "path": "watermarks/unset",
-     "httpMethod": "POST",
-     "description": "Deletes a channel's watermark image.",
-     "parameters": {
-      "channelId": {
-       "type": "string",
-       "description": "The channelId parameter specifies the YouTube channel ID for which the watermark is being unset.",
-       "required": true,
-       "location": "query"
-      },
-      "onBehalfOfContentOwner": {
-       "type": "string",
-       "description": "Note: This parameter is intended exclusively for YouTube content partners.\n\nThe onBehalfOfContentOwner parameter indicates that the request's authorization credentials identify a YouTube CMS user who is acting on behalf of the content owner specified in the parameter value. This parameter is intended for YouTube content partners that own and manage many different YouTube channels. It allows content owners to authenticate once and get access to all their video and channel data, without having to provide authentication credentials for each individual channel. The CMS account that the user authenticates with must be linked to the specified YouTube content owner.",
-       "location": "query"
-      }
-     },
-     "parameterOrder": [
-      "channelId"
-     ],
-     "scopes": [
-      "https://www.googleapis.com/auth/youtube",
-      "https://www.googleapis.com/auth/youtube.force-ssl",
-      "https://www.googleapis.com/auth/youtubepartner"
-     ]
-    }
-   }
-  }
- }
-}
diff --git a/test/data/youtube-playlistid.json b/test/data/youtube-playlistid.json
deleted file mode 100644
index b69205f434..0000000000
--- a/test/data/youtube-playlistid.json
+++ /dev/null
@@ -1 +0,0 @@
-{"regionCode": "US", "kind": "youtube#searchListResponse", "etag": "\"m2yskBQFythfE4irbTIeOgYYfBU/eoV8llUEbIu5LXnwqBaLOkOK0Hg\"", "pageInfo": {"resultsPerPage": 1, "totalResults": 1}, "items": [{"snippet": {"thumbnails": {"default": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/default.jpg", "width": 120, "height": 90}, "high": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/hqdefault.jpg", "width": 480, "height": 360}, "medium": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/mqdefault.jpg", "width": 320, "height": 180}}, "title": "IETF98", "channelId": "UC8dtK9njBLdFnBahHFp0eZQ", "publishedAt": "2017-03-30T12:41:04.000Z", "liveBroadcastContent": "none", "channelTitle": "IETF - Internet Engineering Task Force", "description": "Videos from the IETF 98 Meeting held in Chicago, Illinois, United States 26-31 March 2017."}, "kind": "youtube#searchResult", "etag": "\"m2yskBQFythfE4irbTIeOgYYfBU/X3dbZGRvgpvedtOP0KLGhZLg5UI\"", "id": {"kind": "youtube#playlist", "playlistId": "PLC86T-test"}}]}
diff --git a/test/data/youtube-playlistitems.json b/test/data/youtube-playlistitems.json
deleted file mode 100644
index 4b42e3d21b..0000000000
--- a/test/data/youtube-playlistitems.json
+++ /dev/null
@@ -1 +0,0 @@
-{"items": [{"snippet": {"playlistId": "PLC86T-6ZTP5jo6kIuqdyeYYhsKv9sUwG1", "thumbnails": {"default": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/default.jpg", "width": 120, "height": 90}, "high": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/hqdefault.jpg", "width": 480, "height": 360}, "medium": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/mqdefault.jpg", "width": 320, "height": 180}, "maxres": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/maxresdefault.jpg", "width": 1280, "height": 720}, "standard": {"url": "https://i.ytimg.com/vi/lhYWB5FFkg4/sddefault.jpg", "width": 640, "height": 480}}, "title": "IETF98 Wrap Up", "resourceId": {"kind": "youtube#video", "videoId": "lhYWB5FFkg4"}, "channelId": "UC8dtK9njBLdFnBahHFp0eZQ", "publishedAt": "2017-04-06T13:32:39.000Z", "channelTitle": "IETF - Internet Engineering Task Force", "position": 0, "description": "Jari Arkko and Alissa Cooper recap some highlights the IETF 98 meeting held 26-31 March 2017 in Chicago, Illinois, United States"}, "kind": "youtube#playlistItem", "etag": "\"m2yskBQFythfE4irbTIeOgYYfBU/eW_De3gQF2fRzN_rPBbX-kY7oBI\"", "id": "UExDODZULTZaVFA1am82a0l1cWR5ZVlZaHNLdjlzVXdHMS40OTQ5QjlEMDgzN0FBNUIw"}, {"snippet": {"playlistId": "PLC86T-6ZTP5jo6kIuqdyeYYhsKv9sUwG1", "thumbnails": {"default": {"url": "https://i.ytimg.com/vi/lPSTcBITbvs/default.jpg", "width": 120, "height": 90}, "high": {"url": "https://i.ytimg.com/vi/lPSTcBITbvs/hqdefault.jpg", "width": 480, "height": 360}, "medium": {"url": "https://i.ytimg.com/vi/lPSTcBITbvs/mqdefault.jpg", "width": 320, "height": 180}}, "title": "IETF 98 - QUIC Tutorial", "resourceId": {"kind": "youtube#video", "videoId": "lPSTcBITbvs"}, "channelId": "UC8dtK9njBLdFnBahHFp0eZQ", "publishedAt": "2017-03-30T12:41:35.000Z", "channelTitle": "IETF - Internet Engineering Task Force", "position": 1, "description": "A tutorial about the new QUIC protocol"}, "kind": "youtube#playlistItem", "etag": "\"m2yskBQFythfE4irbTIeOgYYfBU/GhKVt6zTuEpFavgtf9GWlWuzX9s\"", "id": "UExDODZULTZaVFA1am82a0l1cWR5ZVlZaHNLdjlzVXdHMS41NkI0NEY2RDEwNTU3Q0M2"}], "kind": "youtube#playlistItemListResponse", "etag": "\"m2yskBQFythfE4irbTIeOgYYfBU/jlFue-jZVpFMOuLUXQZH4Y0Lh3Y\"", "pageInfo": {"resultsPerPage": 2, "totalResults": 110}}
diff --git a/test/lib/.gitignore b/test/lib/.gitignore
deleted file mode 100644
index 330b0c2b64..0000000000
--- a/test/lib/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-/django
diff --git a/test/lib/README b/test/lib/README
deleted file mode 100644
index 2dda507f05..0000000000
--- a/test/lib/README
+++ /dev/null
@@ -1,9 +0,0 @@
-This directory will be used to set up packages used for testing if they need any
-special handling which should not be applied to the system-wide setup.
-
-For instance, many of the tests to be run on the Django application should be run
-with a standard Django environment; but there are some Django test features which
-are broken in 0.9.6, and need patching in order to do the testing, like the ability
-to create a test database to run unit tests, according to this issue and patch:
-http://code.djangoproject.com/changeset/5106
-
diff --git a/test/media/floor/.gitignore b/test/media/floor/.gitignore
deleted file mode 100644
index 33662f5545..0000000000
--- a/test/media/floor/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-/*
diff --git a/test/media/photo/.gitignore b/test/media/photo/.gitignore
deleted file mode 100644
index 33662f5545..0000000000
--- a/test/media/photo/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-/*

From 32057f335aa711095fb0907612496430fa61412a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 18 Sep 2024 18:37:02 -0300
Subject: [PATCH 067/707] feat: allow blanket IPR disclosures (#7934)

* refactor: avoid shadowing type()

* style: Black

* feat: is_blanket_disclosure field

* feat: add field to form

* feat: js to mark field required/not required

* feat: blanket disclosure = royalty-free license

* feat: manage licensing radio buttons

* fix: adjust wording/format of disclosure page

* fix: point at RFC 8179 in checkbox label

* test: test blanket disclosure licensing restrictions

* fix: conditionally render is_blanket_disclosure

* test: refactor test case

* test: patent details optional for blanket ipr
---
 ietf/ipr/forms.py                             |  21 ++++
 ...lderiprdisclosure_is_blanket_disclosure.py |  16 +++
 ietf/ipr/models.py                            |  34 ++++--
 ietf/ipr/tests.py                             |  78 +++++++++++--
 ietf/ipr/urls.py                              |   2 +-
 ietf/ipr/views.py                             | 110 +++++++++++-------
 ietf/static/js/ipr-edit.js                    |  67 ++++++++++-
 ietf/templates/ipr/details_edit.html          |  16 ++-
 8 files changed, 275 insertions(+), 69 deletions(-)
 create mode 100644 ietf/ipr/migrations/0004_holderiprdisclosure_is_blanket_disclosure.py

diff --git a/ietf/ipr/forms.py b/ietf/ipr/forms.py
index 62d3f9c216..dac34bddf6 100644
--- a/ietf/ipr/forms.py
+++ b/ietf/ipr/forms.py
@@ -338,7 +338,19 @@ def clean(self):
 
         return cleaned_data
 
+
 class HolderIprDisclosureForm(IprDisclosureFormBase):
+    is_blanket_disclosure = forms.BooleanField(
+        label=mark_safe(
+            'This is a blanket IPR disclosure '
+            '(see Section 5.4.3 of <a href="https://www.ietf.org/rfc/rfc8179.txt">RFC 8179</a>)'
+        ),
+        help_text="In satisfaction of its disclosure obligations, Patent Holder commits to license all of "
+                  "IPR (as defined in RFC 8179) that would have required disclosure under RFC 8179 on a "
+                  "royalty-free (and otherwise reasonable and non-discriminatory) basis. Patent Holder "
+                  "confirms that all other terms and conditions are described in this IPR disclosure.",
+        required=False,
+    )
     licensing = CustomModelChoiceField(IprLicenseTypeName.objects.all(),
         widget=forms.RadioSelect,empty_label=None)
 
@@ -356,6 +368,15 @@ def __init__(self, *args, **kwargs):
         else:
             # entering new disclosure
             self.fields['licensing'].queryset = IprLicenseTypeName.objects.exclude(slug='none-selected')
+        
+        if self.data.get("is_blanket_disclosure", False):
+            # for a blanket disclosure, patent details are not required
+            self.fields["patent_number"].required = False
+            self.fields["patent_inventor"].required = False
+            self.fields["patent_title"].required = False
+            self.fields["patent_date"].required = False
+            # n.b., self.fields["patent_notes"] is never required
+
             
     def clean(self):
         cleaned_data = super(HolderIprDisclosureForm, self).clean()
diff --git a/ietf/ipr/migrations/0004_holderiprdisclosure_is_blanket_disclosure.py b/ietf/ipr/migrations/0004_holderiprdisclosure_is_blanket_disclosure.py
new file mode 100644
index 0000000000..66282b3cd5
--- /dev/null
+++ b/ietf/ipr/migrations/0004_holderiprdisclosure_is_blanket_disclosure.py
@@ -0,0 +1,16 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("ipr", "0003_alter_iprdisclosurebase_docs"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="holderiprdisclosure",
+            name="is_blanket_disclosure",
+            field=models.BooleanField(default=False),
+        ),
+    ]
diff --git a/ietf/ipr/models.py b/ietf/ipr/models.py
index 693f19abe9..2d81eb4b42 100644
--- a/ietf/ipr/models.py
+++ b/ietf/ipr/models.py
@@ -3,6 +3,7 @@
 
 
 from django.conf import settings
+from django.core.exceptions import ValidationError
 from django.db import models
 from django.urls import reverse
 from django.utils import timezone
@@ -124,17 +125,30 @@ def is_thirdparty(self):
 
 
 class HolderIprDisclosure(IprDisclosureBase):
-    ietfer_name              = models.CharField(max_length=255, blank=True) # "Whose Personal Belief Triggered..."
-    ietfer_contact_email     = models.EmailField(blank=True)
-    ietfer_contact_info      = models.TextField(blank=True)
-    patent_info              = models.TextField()
-    has_patent_pending       = models.BooleanField(default=False)
-    holder_contact_email     = models.EmailField()
-    holder_contact_name      = models.CharField(max_length=255)
-    holder_contact_info      = models.TextField(blank=True, help_text="Address, phone, etc.")
-    licensing                = ForeignKey(IprLicenseTypeName)
-    licensing_comments       = models.TextField(blank=True)
+    ietfer_name = models.CharField(
+        max_length=255, blank=True
+    )  # "Whose Personal Belief Triggered..."
+    ietfer_contact_email = models.EmailField(blank=True)
+    ietfer_contact_info = models.TextField(blank=True)
+    patent_info = models.TextField()
+    has_patent_pending = models.BooleanField(default=False)
+    holder_contact_email = models.EmailField()
+    holder_contact_name = models.CharField(max_length=255)
+    holder_contact_info = models.TextField(blank=True, help_text="Address, phone, etc.")
+    licensing = ForeignKey(IprLicenseTypeName)
+    licensing_comments = models.TextField(blank=True)
     submitter_claims_all_terms_disclosed = models.BooleanField(default=False)
+    is_blanket_disclosure = models.BooleanField(default=False)
+    
+    def clean(self):
+        if self.is_blanket_disclosure:
+            # If the IprLicenseTypeName does not exist, we have a serious problem and a 500 response is ok,
+            # so not handling failure of the `get()`
+            royalty_free_licensing = IprLicenseTypeName.objects.get(slug="royalty-free")
+            if self.licensing_id != royalty_free_licensing.pk:
+                raise ValidationError(
+                    f'Must select "{royalty_free_licensing.desc}" for a blanket IPR disclosure.')
+
 
 class ThirdPartyIprDisclosure(IprDisclosureBase):
     ietfer_name              = models.CharField(max_length=255) # "Whose Personal Belief Triggered..."
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index b08e359462..3c70567fd8 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -33,7 +33,7 @@
     IprDocRelFactory,
     IprEventFactory
 )
-from ietf.ipr.forms import DraftForm
+from ietf.ipr.forms import DraftForm, HolderIprDisclosureForm
 from ietf.ipr.mail import (process_response_email, get_reply_to, get_update_submitter_emails,
     get_pseudo_submitter, get_holders, get_update_cc_addrs)
 from ietf.ipr.models import (IprDisclosureBase,GenericIprDisclosure,HolderIprDisclosure,
@@ -272,16 +272,16 @@ def test_sitemap(self):
 
     def test_new_generic(self):
         """Ensure new-generic redirects to new-general"""
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "generic" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "generic" })
         r = self.client.get(url)
         self.assertEqual(r.status_code,302)
-        self.assertEqual(urlparse(r["Location"]).path, urlreverse("ietf.ipr.views.new", kwargs={ "type": "general"}))
+        self.assertEqual(urlparse(r["Location"]).path, urlreverse("ietf.ipr.views.new", kwargs={ "_type": "general"}))
 
 
     def test_new_general(self):
         """Add a new general disclosure.  Note: submitter does not need to be logged in.
         """
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "general" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "general" })
 
         # invalid post
         r = self.client.post(url, {
@@ -319,7 +319,7 @@ def test_new_specific(self):
         """
         draft = WgDraftFactory()
         rfc = WgRfcFactory()
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "specific" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "specific" })
 
         # successful post
         empty_outbox()
@@ -375,7 +375,7 @@ def test_new_specific(self):
     def test_new_specific_no_revision(self):
         draft = WgDraftFactory()
         rfc = WgRfcFactory()
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "specific" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "specific" })
 
         # successful post
         empty_outbox()
@@ -409,7 +409,7 @@ def test_new_thirdparty(self):
         """
         draft = WgDraftFactory()
         rfc = WgRfcFactory()
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "third-party" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "third-party" })
 
         # successful post
         empty_outbox()
@@ -456,7 +456,7 @@ def test_edit(self):
         r = self.client.get(url)
         self.assertContains(r, original_ipr.holder_legal_name)
 
-        #url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "specific" })
+        #url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "specific" })
         # successful post
         empty_outbox()
         post_data = {
@@ -503,7 +503,7 @@ def test_update(self):
         r = self.client.get(url)
         self.assertContains(r, original_ipr.title)
 
-        #url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "specific" })
+        #url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "specific" })
         # successful post
         empty_outbox()
         r = self.client.post(url, {
@@ -543,7 +543,7 @@ def test_update(self):
 
     def test_update_bad_post(self):
         draft = WgDraftFactory()
-        url = urlreverse("ietf.ipr.views.new", kwargs={ "type": "specific" })
+        url = urlreverse("ietf.ipr.views.new", kwargs={ "_type": "specific" })
 
         empty_outbox()
         r = self.client.post(url, {
@@ -1022,3 +1022,61 @@ def test_revisions_invalid(self):
             "revisions",
             null_char_error_msg,
         )
+
+
+class HolderIprDisclosureFormTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        # Checkboxes that are False are left out of the Form data, not sent back at all. These are
+        # commented out - if they were checked, their value would be "on".
+        self.data = {
+            "holder_legal_name": "Test Legal",
+            "holder_contact_name": "Test Holder",
+            "holder_contact_email": "test@holder.com",
+            "holder_contact_info": "555-555-0100",
+            "ietfer_name": "Test Participant",
+            "ietfer_contact_info": "555-555-0101",
+            "iprdocrel_set-TOTAL_FORMS": 2,
+            "iprdocrel_set-INITIAL_FORMS": 0,
+            "iprdocrel_set-0-document": "1234",  # fake id - validates but won't save()
+            "iprdocrel_set-0-revisions": '00',
+            "iprdocrel_set-1-document": "4567",  # fake id - validates but won't save()
+            # "is_blanket_disclosure": "on", 
+            "patent_number": "SE12345678901",
+            "patent_inventor": "A. Nonymous",
+            "patent_title": "A method of transferring bits",
+            "patent_date": "2000-01-01",
+            # "has_patent_pending": "on",
+            "licensing": "reasonable",
+            "submitter_name": "Test Holder",
+            "submitter_email": "test@holder.com",
+        }
+        
+    def test_blanket_disclosure_licensing_restrictions(self):
+        """when is_blanket_disclosure is True only royalty-free licensing is valid
+        
+        Most of the form functionality is tested via the views in IprTests above. More thorough testing
+        of validation ought to move here so we don't have to exercise the whole Django plumbing repeatedly.
+        """       
+        self.assertTrue(HolderIprDisclosureForm(data=self.data).is_valid())       
+        self.data["is_blanket_disclosure"] = "on"
+        self.assertFalse(HolderIprDisclosureForm(data=self.data).is_valid())       
+        self.data["licensing"] = "royalty-free"
+        self.assertTrue(HolderIprDisclosureForm(data=self.data).is_valid())       
+
+    def test_patent_details_required_unless_blanket(self):
+        self.assertTrue(HolderIprDisclosureForm(data=self.data).is_valid())
+        patent_fields = ["patent_number", "patent_inventor", "patent_title", "patent_date"]
+        # any of the fields being missing should invalidate the form
+        for pf in patent_fields:
+            val = self.data.pop(pf)
+            self.assertFalse(HolderIprDisclosureForm(data=self.data).is_valid())
+            self.data[pf] = val
+
+        # should be optional if is_blanket_disclosure is True
+        self.data["is_blanket_disclosure"] = "on"
+        self.data["licensing"] = "royalty-free"  # also needed for a blanket disclosure
+        for pf in patent_fields:
+            val = self.data.pop(pf)
+            self.assertTrue(HolderIprDisclosureForm(data=self.data).is_valid())
+            self.data[pf] = val
diff --git a/ietf/ipr/urls.py b/ietf/ipr/urls.py
index 6f7b2d4080..2b6abee31c 100644
--- a/ietf/ipr/urls.py
+++ b/ietf/ipr/urls.py
@@ -25,6 +25,6 @@
     url(r'^(?P<id>\d+)/state/$', views.state),
     url(r'^update/$', RedirectView.as_view(url=reverse_lazy('ietf.ipr.views.showlist'), permanent=True)),
     url(r'^update/(?P<id>\d+)/$', views.update),
-    url(r'^new-(?P<type>(specific|generic|general|third-party))/$', views.new),
+    url(r'^new-(?P<_type>(specific|generic|general|third-party))/$', views.new),
     url(r'^search/$', views.search),
 ]
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 45fad9a2cc..0347c4d78d 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -475,28 +475,34 @@ def by_draft_recursive_txt(request):
     return HttpResponse(content, content_type="text/plain; charset=%s"%settings.DEFAULT_CHARSET)
 
 
-def new(request, type, updates=None):
+def new(request, _type, updates=None):
     """Submit a new IPR Disclosure.  If the updates field != None, this disclosure
     updates one or more other disclosures."""
     # Note that URL patterns won't ever send updates - updates is only non-null when called from code
 
     # This odd construct flipping generic and general allows the URLs to say 'general' while having a minimal impact on the code.
     # A cleanup to change the code to switch on type 'general' should follow.
-    if type == 'generic' and updates: # Only happens when called directly from the updates view
+    if (
+        _type == "generic" and updates
+    ):  # Only happens when called directly from the updates view
         pass
-    elif type == 'generic':
-        return HttpResponseRedirect(urlreverse('ietf.ipr.views.new',kwargs=dict(type='general')))
-    elif type == 'general':
-        type = 'generic'
+    elif _type == "generic":
+        return HttpResponseRedirect(
+            urlreverse("ietf.ipr.views.new", kwargs=dict(_type="general"))
+        )
+    elif _type == "general":
+        _type = "generic"
     else:
         pass
 
     # 1 to show initially + the template
-    DraftFormset = inlineformset_factory(IprDisclosureBase, IprDocRel, form=DraftForm, can_delete=False, extra=1 + 1)
+    DraftFormset = inlineformset_factory(
+        IprDisclosureBase, IprDocRel, form=DraftForm, can_delete=False, extra=1 + 1
+    )
 
-    if request.method == 'POST':
-        form = ipr_form_mapping[type](request.POST)
-        if type != 'generic':
+    if request.method == "POST":
+        form = ipr_form_mapping[_type](request.POST)
+        if _type != "generic":
             draft_formset = DraftFormset(request.POST, instance=IprDisclosureBase())
         else:
             draft_formset = None
@@ -505,72 +511,92 @@ def new(request, type, updates=None):
             person = Person.objects.get(name="(System)")
         else:
             person = request.user.person
-            
+
         # check formset validity
-        if type != 'generic':
+        if _type != "generic":
             valid_formsets = draft_formset.is_valid()
         else:
             valid_formsets = True
-            
+
         if form.is_valid() and valid_formsets:
-            if 'updates' in form.cleaned_data:
-                updates = form.cleaned_data['updates']
-                del form.cleaned_data['updates']
+            if "updates" in form.cleaned_data:
+                updates = form.cleaned_data["updates"]
+                del form.cleaned_data["updates"]
             disclosure = form.save(commit=False)
             disclosure.by = person
-            disclosure.state = IprDisclosureStateName.objects.get(slug='pending')
+            disclosure.state = IprDisclosureStateName.objects.get(slug="pending")
             disclosure.save()
-            
-            if type != 'generic':
+
+            if _type != "generic":
                 draft_formset = DraftFormset(request.POST, instance=disclosure)
                 draft_formset.save()
 
             set_disclosure_title(disclosure)
             disclosure.save()
-            
+
             if updates:
                 for ipr in updates:
-                    RelatedIpr.objects.create(source=disclosure,target=ipr,relationship_id='updates')
-                
+                    RelatedIpr.objects.create(
+                        source=disclosure, target=ipr, relationship_id="updates"
+                    )
+
             # create IprEvent
             IprEvent.objects.create(
-                type_id='submitted',
+                type_id="submitted",
                 by=person,
                 disclosure=disclosure,
-                desc="Disclosure Submitted")
+                desc="Disclosure Submitted",
+            )
 
             # send email notification
-            (to, cc) = gather_address_lists('ipr_disclosure_submitted')
-            send_mail(request, to, ('IPR Submitter App', 'ietf-ipr@ietf.org'),
-                'New IPR Submission Notification',
+            (to, cc) = gather_address_lists("ipr_disclosure_submitted")
+            send_mail(
+                request,
+                to,
+                ("IPR Submitter App", "ietf-ipr@ietf.org"),
+                "New IPR Submission Notification",
                 "ipr/new_update_email.txt",
-                {"ipr": disclosure,},
-                cc=cc)
-            
+                {
+                    "ipr": disclosure,
+                },
+                cc=cc,
+            )
+
             return render(request, "ipr/submitted.html")
 
     else:
         if updates:
             original = IprDisclosureBase(id=updates).get_child()
             initial = model_to_dict(original)
-            initial.update({'updates':str(updates), })
-            patent_info = text_to_dict(initial.get('patent_info', ''))
+            initial.update(
+                {
+                    "updates": str(updates),
+                }
+            )
+            patent_info = text_to_dict(initial.get("patent_info", ""))
             if list(patent_info.keys()):
-                patent_dict = dict([ ('patent_'+k.lower(), v) for k,v in list(patent_info.items()) ])
+                patent_dict = dict(
+                    [("patent_" + k.lower(), v) for k, v in list(patent_info.items())]
+                )
             else:
-                patent_dict = {'patent_notes': initial.get('patent_info', '')}
+                patent_dict = {"patent_notes": initial.get("patent_info", "")}
             initial.update(patent_dict)
-            form = ipr_form_mapping[type](initial=initial)
+            form = ipr_form_mapping[_type](initial=initial)
         else:
-            form = ipr_form_mapping[type]()
-        disclosure = IprDisclosureBase()    # dummy disclosure for inlineformset
+            form = ipr_form_mapping[_type]()
+        disclosure = IprDisclosureBase()  # dummy disclosure for inlineformset
         draft_formset = DraftFormset(instance=disclosure)
 
-    return render(request, "ipr/details_edit.html",  {
-        'form': form,
-        'draft_formset':draft_formset,
-        'type':type,
-    })
+    return render(
+        request,
+        "ipr/details_edit.html",
+        {
+            "form": form,
+            "draft_formset": draft_formset,
+            "type": _type,
+        },
+    )
+
 
 @role_required('Secretariat',)
 def notify(request, id, type):
diff --git a/ietf/static/js/ipr-edit.js b/ietf/static/js/ipr-edit.js
index 9af5b03591..9d07503791 100644
--- a/ietf/static/js/ipr-edit.js
+++ b/ietf/static/js/ipr-edit.js
@@ -69,4 +69,69 @@ $(document)
             form.find(".draft-row")
                 .each(updateRevisions);
         }, 10);
-    });
\ No newline at end of file
+
+        // Manage fields that depend on the Blanket IPR Disclosure choice
+        const blanketCheckbox = document.getElementById('id_is_blanket_disclosure') 
+        if (blanketCheckbox) {
+            const patentDetailInputs = [
+                // The ids are from the HolderIprDisclosureForm and its base form class,
+                // intentionally excluding patent_notes because it's never required
+                'id_patent_number',
+                'id_patent_inventor',
+                'id_patent_title',
+                'id_patent_date'
+            ].map((id) => document.getElementById(id))
+            const patentDetailRowDivs = patentDetailInputs.map(
+                (elt) => elt.closest('div.row')
+            )
+            const royaltyFreeLicensingRadio = document.querySelector(
+                '#id_licensing input[value="royalty-free"]'
+            )
+            let lastSelectedLicensingRadio
+            const otherLicensingRadios = document.querySelectorAll(
+                '#id_licensing input:not([value="royalty-free"])'
+            ) 
+            
+            const handleBlanketCheckboxChange = () => {
+                const isBlanket = blanketCheckbox.checked
+                // Update required fields
+                for (elt of patentDetailInputs) {
+                    // disable the input element
+                    elt.required = !isBlanket
+                }
+                for (elt of patentDetailRowDivs) {
+                    // update the styling on the row that indicates required field
+                    if (isBlanket) {
+                        elt.classList.remove('required')
+                    } else {
+                        elt.classList.add('required')
+                    }
+                }
+                // Update licensing selection
+                if (isBlanket) {
+                    lastSelectedLicensingRadio = document.querySelector(
+                        '#id_licensing input:checked'
+                    )
+                    royaltyFreeLicensingRadio.checked = true
+                    otherLicensingRadios
+                        .forEach(
+                            (elt) => elt.setAttribute('disabled', '')
+                        )
+                } else {
+                    royaltyFreeLicensingRadio.checked = false
+                    if (lastSelectedLicensingRadio) {
+                        lastSelectedLicensingRadio.checked = true
+                    }
+                    otherLicensingRadios
+                        .forEach(
+                            (elt) => elt.removeAttribute('disabled')
+                        )
+                }
+            }
+            handleBlanketCheckboxChange()
+            blanketCheckbox.addEventListener(
+                'change', 
+                (evt) => handleBlanketCheckboxChange()
+            )
+        }
+    });
diff --git a/ietf/templates/ipr/details_edit.html b/ietf/templates/ipr/details_edit.html
index 7caf28f1a7..1aadb5bb3d 100644
--- a/ietf/templates/ipr/details_edit.html
+++ b/ietf/templates/ipr/details_edit.html
@@ -32,7 +32,7 @@ <h1>The Patent Disclosure and Licensing Declaration Template for Third Party IPR
             regarding an IETF document or contribution when the person letting the
             IETF know about the patent has no relationship with the patent owners.
             Click
-            <a href="{% url 'ietf.ipr.views.new' type='specific' %}">here</a>
+            <a href="{% url 'ietf.ipr.views.new' 'specific' %}">here</a>
             if you want to disclose information about patents or patent
             applications where you do have a relationship to the patent owners or
             patent applicants.
@@ -121,12 +121,11 @@ <h2 class="mt-4">
         {% endif %}
         {% if type != "generic" %}
             <h2 class="mt-4">{% cycle section %}. IETF document or other contribution to which this IPR disclosure relates</h2>
-            <p class="form-text">
+            <p>
                 If an Internet-Draft or RFC includes multiple parts and it is not
                 reasonably apparent which part of such Internet-Draft or RFC is alleged
-                to be covered by the patent information disclosed in Section
-                V(A) or V(B), please identify the sections of
-                the Internet-Draft or RFC that are alleged to be so
+                to be covered by the patent information disclosed in Section V,
+                please identify the sections of the Internet-Draft or RFC that are alleged to be so
                 covered.
             </p>
             {{ draft_formset.management_form }}
@@ -154,6 +153,13 @@ <h2 class="mt-4">
             <small>i.e., patents or patent applications required to be disclosed by Section 5 of RFC8179</small>
         </h2>
         {% if form.patent_number %}
+            {% if form.is_blanket_disclosure %}
+                <p>
+                    This IPR disclosure must either identify a specific patent or patents in sections V(A) and V(B)
+                    below, or be made as a blanket IPR disclosure. 
+                </p>
+                {% bootstrap_field form.is_blanket_disclosure layout='horizontal' %}
+            {% endif %}
             <p>
                 A. For granted patents or published pending patent applications,
                 please provide the following information:

From 25fd4fce5dc6101435e287d5515ed12d638f6490 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 23 Sep 2024 09:41:18 -0500
Subject: [PATCH 068/707] fix: show correct time for cancelled sessions.
 (#7958)

---
 ietf/templates/group/meetings-row.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/group/meetings-row.html b/ietf/templates/group/meetings-row.html
index 3bbe1d425b..25605ec0f1 100644
--- a/ietf/templates/group/meetings-row.html
+++ b/ietf/templates/group/meetings-row.html
@@ -18,7 +18,7 @@
                 <div class="badge rounded-pill text-bg-secondary">{{ s.current_status_name }}</div>
                 {% if s.current_status == "canceled" %}
                     {% with timeslot=s.official_timeslotassignment.timeslot %}
-                        <span class="text-decoration-line-through text-secondary session-time date me-3" data-start-utc="{{ timeslot.time|utc|date:'Y-m-d' }}" data-end-utc="{{ timeslot.end_time|utc|date:'Y-m-d' }}"></span>
+                        <span class="text-decoration-line-through text-secondary session-time date me-3" data-start-utc="{{ timeslot.time|utc|date:'Y-m-d H:i' }}" data-end-utc="{{ timeslot.end_time|utc|date:'Y-m-d H:i' }}"></span>
                     {% endwith %}
                 {% endif %}
             {% endif %}

From 06b9df10ee77b061fbde53d54acab77dab953f90 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 23 Sep 2024 10:09:50 -0500
Subject: [PATCH 069/707] feat: warn about materials for cancelled sessions
 (#7959)

* feat: warn about materials for cancelled sessions

* fix: handle viewing a DocHistory material object
---
 ietf/doc/tests.py                         | 11 +++++++++++
 ietf/doc/views_doc.py                     |  8 ++++++++
 ietf/templates/doc/document_material.html |  3 +++
 3 files changed, 22 insertions(+)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index 5e5b741fe5..f5f715162d 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -1683,6 +1683,17 @@ def test_document_material(self):
 
         r = self.client.get(urlreverse("ietf.doc.views_doc.document_main", kwargs=dict(name=doc.name)))
         self.assertEqual(r.status_code, 200)
+        self.assertNotContains(r, "The session for this document was cancelled.")
+
+        SchedulingEvent.objects.create(
+            session=session,
+            status_id='canceled',
+            by = Person.objects.get(user__username="marschairman"), 
+        )
+
+        r = self.client.get(urlreverse("ietf.doc.views_doc.document_main", kwargs=dict(name=doc.name)))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "The session for this document was cancelled.")
 
     def test_document_ballot(self):
         doc = IndividualDraftFactory()
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index d12dd04181..aad45920c6 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -870,6 +870,13 @@ def document_main(request, name, rev=None, document_html=False):
                     and doc.group.features.has_nonsession_materials
                     and doc.type_id in doc.group.features.material_types
             )
+
+        session_statusid = None
+        actual_doc = doc if isinstance(doc,Document) else doc.doc
+        if actual_doc.session_set.count() == 1:
+            if actual_doc.session_set.get().schedulingevent_set.exists():
+                session_statusid = actual_doc.session_set.get().schedulingevent_set.order_by("-time").first().status_id
+
         return render(request, "doc/document_material.html",
                                   dict(doc=doc,
                                        top=top,
@@ -882,6 +889,7 @@ def document_main(request, name, rev=None, document_html=False):
                                        can_upload = can_upload,
                                        other_types=other_types,
                                        presentations=presentations,
+                                       session_statusid=session_statusid,
                                        ))
 
 
diff --git a/ietf/templates/doc/document_material.html b/ietf/templates/doc/document_material.html
index 7537082df9..cf6dd1ab64 100644
--- a/ietf/templates/doc/document_material.html
+++ b/ietf/templates/doc/document_material.html
@@ -153,6 +153,9 @@
             </a>
         {% endif %}
     </p>
+    {% if session_statusid == "canceled" %}
+       <div class="alert alert-warning">The session for this document was cancelled.</div>
+    {% endif %}
     <div id="materials-content" class="card mt-5">
         <div class="card-header">{{ doc.name }}-{{ doc.rev }}</div>
         <div class="card-body{% if content_is_html %} text-break{% endif %}">

From 5581dc79e1c6f6f07b680b7be47ec2d3811d8f39 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Sep 2024 12:46:00 -0300
Subject: [PATCH 070/707] feat: doc mgrs can edit/remind action holders (#7971)

* feat: doc mgrs can edit/remind action holders

* test: test docman_roles, not "chair"
---
 ietf/doc/tests.py                      | 12 ++++++++-
 ietf/doc/tests_draft.py                | 27 +++++++++++++++++---
 ietf/doc/views_doc.py                  | 34 +++++++++++++++++++++++---
 ietf/templates/doc/document_draft.html |  4 +--
 4 files changed, 67 insertions(+), 10 deletions(-)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index f5f715162d..e3534ba725 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -59,7 +59,7 @@
 from ietf.meeting.factories import ( MeetingFactory, SessionFactory, SessionPresentationFactory,
      ProceedingsMaterialFactory )
 
-from ietf.name.models import SessionStatusName, BallotPositionName, DocTypeName
+from ietf.name.models import SessionStatusName, BallotPositionName, DocTypeName, RoleName
 from ietf.person.models import Person
 from ietf.person.factories import PersonFactory, EmailFactory
 from ietf.utils.mail import outbox, empty_outbox
@@ -1450,6 +1450,14 @@ def test_document_draft_action_holders_buttons(self, mock_method):
         """Buttons for action holders should be shown when AD or secretary"""
         draft = WgDraftFactory()
         draft.action_holders.set([PersonFactory()])
+        other_group = GroupFactory(type_id=draft.group.type_id)
+
+        # create a test RoleName and put it in the docman_roles for the document group
+        RoleName.objects.create(slug="wrangler", name="Wrangler", used=True)
+        draft.group.features.docman_roles.append("wrangler")
+        draft.group.features.save()
+        wrangler = RoleFactory(group=draft.group, name_id="wrangler").person
+        wrangler_of_other_group = RoleFactory(group=other_group, name_id="wrangler").person
 
         url = urlreverse('ietf.doc.views_doc.document_main', kwargs=dict(name=draft.name))
         edit_ah_url = urlreverse('ietf.doc.views_doc.edit_action_holders', kwargs=dict(name=draft.name))
@@ -1482,6 +1490,8 @@ def _run_test(username=None, expect_buttons=False):
 
         _run_test(None, False)
         _run_test('plain', False)
+        _run_test(wrangler_of_other_group.user.username, False)
+        _run_test(wrangler.user.username, True)
         _run_test('ad', True)
         _run_test('secretary', True)
 
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index cc22e22139..dcb71bdf69 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -26,7 +26,7 @@
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
 from ietf.doc.views_draft import AdoptDraftForm
-from ietf.name.models import StreamName, DocTagName
+from ietf.name.models import StreamName, DocTagName, RoleName
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.group.models import Group, Role
 from ietf.person.factories import PersonFactory, EmailFactory
@@ -935,6 +935,7 @@ def setUp(self):
         super().setUp()
         doc = WgDraftFactory(group__acronym='mars',shepherd=PersonFactory(user__username='plain',name='Plain Man').email_set.first())
         self.docname = doc.name
+        self.doc_group = doc.group
 
     def test_doc_change_stream(self):
         url = urlreverse('ietf.doc.views_draft.change_stream', kwargs=dict(name=self.docname))
@@ -1319,8 +1320,10 @@ def do_doc_change_action_holders_test(self, username):
         RoleFactory(name_id='techadv', person=PersonFactory(), group=doc.group)
         RoleFactory(name_id='editor', person=PersonFactory(), group=doc.group)
         RoleFactory(name_id='secr', person=PersonFactory(), group=doc.group)
-        
+        some_other_chair = RoleFactory(name_id="chair").person
+
         url = urlreverse('ietf.doc.views_doc.edit_action_holders', kwargs=dict(name=doc.name))
+        login_testing_unauthorized(self, some_other_chair.user.username, url)  # other chair can't edit action holders
         login_testing_unauthorized(self, username, url)
         
         r = self.client.get(url)
@@ -1363,6 +1366,14 @@ def _test_changing_ah(action_holders, reason):
         _test_changing_ah(doc.authors(), 'authors can do it, too')
         _test_changing_ah([], 'clear it back out')
 
+    def test_doc_change_action_holders_as_doc_manager(self):
+        # create a test RoleName and put it in the docman_roles for the document group
+        RoleName.objects.create(slug="wrangler", name="Wrangler", used=True)
+        self.doc_group.features.docman_roles.append("wrangler")
+        self.doc_group.features.save()
+        wrangler = RoleFactory(group=self.doc_group, name_id="wrangler").person
+        self.do_doc_change_action_holders_test(wrangler.user.username)
+
     def test_doc_change_action_holders_as_secretary(self):
         self.do_doc_change_action_holders_test('secretary')
 
@@ -1372,9 +1383,11 @@ def test_doc_change_action_holders_as_ad(self):
     def do_doc_remind_action_holders_test(self, username):
         doc = Document.objects.get(name=self.docname)
         doc.action_holders.set(PersonFactory.create_batch(3))
-        
+        some_other_chair = RoleFactory(name_id="chair").person
+    
         url = urlreverse('ietf.doc.views_doc.remind_action_holders', kwargs=dict(name=doc.name))
         
+        login_testing_unauthorized(self, some_other_chair.user.username, url)  # other chair can't send reminder
         login_testing_unauthorized(self, username, url)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -1401,6 +1414,14 @@ def do_doc_remind_action_holders_test(self, username):
         self.client.post(url)
         self.assertEqual(len(outbox), 1)  # still 1
 
+    def test_doc_remind_action_holders_as_doc_manager(self):
+        # create a test RoleName and put it in the docman_roles for the document group
+        RoleName.objects.create(slug="wrangler", name="Wrangler", used=True)
+        self.doc_group.features.docman_roles.append("wrangler")
+        self.doc_group.features.save()
+        wrangler = RoleFactory(group=self.doc_group, name_id="wrangler").person
+        self.do_doc_remind_action_holders_test(wrangler.user.username)
+
     def test_doc_remind_action_holders_as_ad(self):
         self.do_doc_remind_action_holders_test('ad')
 
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index aad45920c6..02d59f0df3 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -42,6 +42,7 @@
 from pathlib import Path
 
 from django.core.cache import caches
+from django.core.exceptions import PermissionDenied
 from django.db.models import Max
 from django.http import HttpResponse, Http404, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404, redirect
@@ -403,6 +404,10 @@ def document_main(request, name, rev=None, document_html=False):
 
         can_edit_replaces = has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair", "WG Chair", "RG Chair", "WG Secretary", "RG Secretary"))
 
+        can_edit_action_holders = can_edit or (
+            request.user.is_authenticated and group.has_role(request.user, group.features.docman_roles)
+        )
+
         is_author = request.user.is_authenticated and doc.documentauthor_set.filter(person__user=request.user).exists()
         can_view_possibly_replaces = can_edit_replaces or is_author
 
@@ -660,6 +665,7 @@ def document_main(request, name, rev=None, document_html=False):
                                        can_edit_iana_state=can_edit_iana_state,
                                        can_edit_consensus=can_edit_consensus,
                                        can_edit_replaces=can_edit_replaces,
+                                       can_edit_action_holders=can_edit_action_holders,
                                        can_view_possibly_replaces=can_view_possibly_replaces,
                                        can_request_review=can_request_review,
                                        can_submit_unsolicited_review_for_teams=can_submit_unsolicited_review_for_teams,
@@ -1871,11 +1877,21 @@ def add_fields(self, form, index):
         })
 
 
-@role_required('Area Director', 'Secretariat')
+@login_required
 def edit_action_holders(request, name):
     """Change the set of action holders for a doc"""
     doc = get_object_or_404(Document, name=name)
-    
+
+    can_edit = has_role(request.user, ("Area Director", "Secretariat")) or (
+        doc.group and doc.group.has_role(request.user, doc.group.features.docman_roles)
+    )
+    if not can_edit:
+        # Keep the list of roles in this message up-to-date with the can_edit logic
+        message = "Restricted to roles: Area Director, Secretariat"
+        if doc.group and doc.group.acronym != "none":
+            message += f", and document managers for the {doc.group.acronym} group"
+        raise PermissionDenied(message)
+
     if request.method == 'POST':
         form = ActionHoldersForm(request.POST)
         if form.is_valid():
@@ -1985,10 +2001,20 @@ class ReminderEmailForm(forms.Form):
         strip=True,
     )
 
-@role_required('Area Director', 'Secretariat')
+@login_required
 def remind_action_holders(request, name):
     doc = get_object_or_404(Document, name=name)
-    
+
+    can_edit = has_role(request.user, ("Area Director", "Secretariat")) or (
+        doc.group and doc.group.has_role(request.user, doc.group.features.docman_roles)
+    )
+    if not can_edit:
+        # Keep the list of roles in this message up-to-date with the can_edit logic
+        message = "Restricted to roles: Area Director, Secretariat"
+        if doc.group and doc.group.acronym != "none":
+            message += f", and document managers for the {doc.group.acronym} group"
+        raise PermissionDenied(message)
+
     if request.method == 'POST':
         form = ReminderEmailForm(request.POST)
         if form.is_valid():
diff --git a/ietf/templates/doc/document_draft.html b/ietf/templates/doc/document_draft.html
index befbc759f1..d5ea074422 100644
--- a/ietf/templates/doc/document_draft.html
+++ b/ietf/templates/doc/document_draft.html
@@ -304,7 +304,7 @@
                             Action Holder{{ doc.documentactionholder_set.all|pluralize }}
                         </th>
                         <td class="edit">
-                            {% if can_edit %}
+                            {% if can_edit_action_holders %}
                                 <a class="btn btn-primary btn-sm"
                                    href="{% url 'ietf.doc.views_doc.edit_action_holders' name=doc.name %}">
                                     Edit
@@ -319,7 +319,7 @@
                                             {% person_link action_holder.person title=action_holder.role_for_doc %} {{ action_holder|action_holder_badge }}
                                         </div>
                                     {% endfor %}
-                                    {% if can_edit %}
+                                    {% if can_edit_action_holders %}
                                         <a class="btn btn-primary btn-sm mt-3"
                                            href="{% url "ietf.doc.views_doc.remind_action_holders" name=doc.name %}">
                                             <i class="bi bi-envelope">

From 5ea4cc13bb908cec98290069b74bdc11eb7a7f24 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Wed, 25 Sep 2024 03:53:08 +1200
Subject: [PATCH 071/707] feat: change theme dynamically when system
 preferences change (#7956)

---
 client/App.vue | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/client/App.vue b/client/App.vue
index 2a6c5e6e98..7750674296 100644
--- a/client/App.vue
+++ b/client/App.vue
@@ -30,17 +30,24 @@ const appContainer = ref(null)
 // Set user theme
 // --------------------------------------------------------------------
 
-const desiredTheme = window.localStorage?.getItem('theme')
-if (desiredTheme === 'dark') {
-  siteStore.theme = 'dark'
-} else if (desiredTheme === 'light') {
-  siteStore.theme = 'light'
-} else if (window.matchMedia("(prefers-color-scheme: dark)").matches) {
-  siteStore.theme = 'dark'
-} else {
-  siteStore.theme = 'light'
+function updateTheme() {
+  const desiredTheme = window.localStorage?.getItem('theme')
+  if (desiredTheme === 'dark') {
+    siteStore.theme = 'dark'
+  } else if (desiredTheme === 'light') {
+    siteStore.theme = 'light'
+  } else if (window.matchMedia("(prefers-color-scheme: dark)").matches) {
+    siteStore.theme = 'dark'
+  } else {
+    siteStore.theme = 'light'
+  }
 }
 
+updateTheme()
+
+// this change event fires for either light or dark changes
+window.matchMedia('(prefers-color-scheme: dark)').addEventListener('change', updateTheme)
+
 // --------------------------------------------------------------------
 // Handle browser resize
 // --------------------------------------------------------------------

From fbcfa19add42c4ea525a844763ae3fbb9d495239 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Sep 2024 14:13:12 -0300
Subject: [PATCH 072/707] feat: remove "AD is watching" state (#7960)

* feat: remove "AD is watching" state

* chore: update names.json

* refactor: use idexists state, not dead

* fix: remove guidance to use watching state

* chore: remove references to 'watching' state

* feat: remove create_in_state from edit_info view

* test: update test

* style: Black + move class closer to use

* refactor: remove lint

* fix: restore missing admonition

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/expire.py                            |   4 +-
 .../0024_remove_ad_is_watching_states.py      | 121 ++++++++++
 ietf/doc/templatetags/ballot_icon.py          |   2 +-
 ietf/doc/tests_ballot.py                      |   2 +-
 ietf/doc/tests_draft.py                       |  86 +++----
 ietf/doc/views_ballot.py                      |   4 +-
 ietf/doc/views_doc.py                         |   2 +-
 ietf/doc/views_draft.py                       | 222 +++++++++++-------
 ietf/doc/views_search.py                      |   2 +-
 ietf/group/views.py                           |   2 +-
 ietf/idindex/index.py                         |   2 +-
 ietf/name/fixtures/names.json                 |   2 +-
 ietf/templates/doc/draft/change_state.html    |   6 +-
 13 files changed, 311 insertions(+), 146 deletions(-)
 create mode 100644 ietf/doc/migrations/0024_remove_ad_is_watching_states.py

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 1650b4ddf5..681ca963a3 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -34,8 +34,8 @@ def expirable_drafts(queryset=None):
 
     # Populate this first time through (but after django has been set up)
     if nonexpirable_states is None:
-        # all IESG states except I-D Exists, AD Watching, and Dead block expiry
-        nonexpirable_states = list(State.objects.filter(used=True, type="draft-iesg").exclude(slug__in=("idexists","watching", "dead")))
+        # all IESG states except I-D Exists and Dead block expiry
+        nonexpirable_states = list(State.objects.filter(used=True, type="draft-iesg").exclude(slug__in=("idexists", "dead")))
         # sent to RFC Editor and RFC Published block expiry (the latter
         # shouldn't be possible for an active draft, though)
         nonexpirable_states += list(State.objects.filter(used=True, type__in=("draft-stream-iab", "draft-stream-irtf", "draft-stream-ise"), slug__in=("rfc-edit", "pub")))
diff --git a/ietf/doc/migrations/0024_remove_ad_is_watching_states.py b/ietf/doc/migrations/0024_remove_ad_is_watching_states.py
new file mode 100644
index 0000000000..0c0fb0ad25
--- /dev/null
+++ b/ietf/doc/migrations/0024_remove_ad_is_watching_states.py
@@ -0,0 +1,121 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.db import migrations
+
+
+def get_helper(DocHistory, RelatedDocument, RelatedDocHistory, DocumentAuthor, DocHistoryAuthor):
+    """Dependency injection wrapper"""
+
+    def save_document_in_history(doc):
+        """Save a snapshot of document and related objects in the database.
+        
+        Local copy of ietf.doc.utils.save_document_in_history() to avoid depending on the
+        code base in a migration.
+        """
+    
+        def get_model_fields_as_dict(obj):
+            return dict((field.name, getattr(obj, field.name))
+                        for field in obj._meta.fields
+                        if field is not obj._meta.pk)
+    
+        # copy fields
+        fields = get_model_fields_as_dict(doc)
+        fields["doc"] = doc
+        fields["name"] = doc.name
+    
+        dochist = DocHistory(**fields)
+        dochist.save()
+    
+        # copy many to many
+        for field in doc._meta.many_to_many:
+            if field.remote_field.through and field.remote_field.through._meta.auto_created:
+                hist_field = getattr(dochist, field.name)
+                hist_field.clear()
+                hist_field.set(getattr(doc, field.name).all())
+    
+        # copy remaining tricky many to many
+        def transfer_fields(obj, HistModel):
+            mfields = get_model_fields_as_dict(item)
+            # map doc -> dochist
+            for k, v in mfields.items():
+                if v == doc:
+                    mfields[k] = dochist
+            HistModel.objects.create(**mfields)
+    
+        for item in RelatedDocument.objects.filter(source=doc):
+            transfer_fields(item, RelatedDocHistory)
+    
+        for item in DocumentAuthor.objects.filter(document=doc):
+            transfer_fields(item, DocHistoryAuthor)
+    
+        return dochist
+    
+    return save_document_in_history
+
+
+def forward(apps, schema_editor):
+    """Mark watching draft-iesg state unused after removing it from Documents"""
+    StateDocEvent = apps.get_model("doc", "StateDocEvent")
+    Document = apps.get_model("doc", "Document")
+    State = apps.get_model("doc", "State")
+    StateType = apps.get_model("doc", "StateType")
+    Person = apps.get_model("person", "Person")
+    
+    save_document_in_history = get_helper(
+        DocHistory=apps.get_model("doc", "DocHistory"),
+        RelatedDocument=apps.get_model("doc", "RelatedDocument"),
+        RelatedDocHistory=apps.get_model("doc", "RelatedDocHistory"),
+        DocumentAuthor=apps.get_model("doc", "DocumentAuthor"),
+        DocHistoryAuthor=apps.get_model("doc", "DocHistoryAuthor"),
+    )
+
+    draft_iesg_state_type = StateType.objects.get(slug="draft-iesg")
+    idexists_state = State.objects.get(type=draft_iesg_state_type, slug="idexists")
+    watching_state = State.objects.get(type=draft_iesg_state_type, slug="watching")
+    system_person = Person.objects.get(name="(System)")
+
+    # Remove state from documents that currently have it
+    for doc in Document.objects.filter(states=watching_state):
+        assert doc.type_id == "draft"
+        doc.states.remove(watching_state)
+        doc.states.add(idexists_state)
+        e = StateDocEvent.objects.create(
+            type="changed_state",
+            by=system_person,
+            doc=doc,
+            rev=doc.rev,
+            desc=f"{draft_iesg_state_type.label} changed to <b>{idexists_state.name}</b> from {watching_state.name}",
+            state_type=draft_iesg_state_type,
+            state=idexists_state,
+        )
+        doc.time = e.time
+        doc.save()
+        save_document_in_history(doc)
+    assert not Document.objects.filter(states=watching_state).exists()
+
+    # Mark state as unused
+    watching_state.used = False
+    watching_state.save()
+
+
+def reverse(apps, schema_editor):
+    """Mark watching draft-iesg state as used
+    
+    Does not try to re-apply the state to Documents modified by the forward migration. This
+    could be done in theory, but would either require dangerous history rewriting or add a
+    lot of history junk.
+    """
+    State = apps.get_model("doc", "State")
+    StateType = apps.get_model("doc", "StateType")
+    State.objects.filter(
+        type=StateType.objects.get(slug="draft-iesg"), slug="watching"
+    ).update(used=True)
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0023_bofreqspamstate"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/doc/templatetags/ballot_icon.py b/ietf/doc/templatetags/ballot_icon.py
index 5f59822c7b..a94c145007 100644
--- a/ietf/doc/templatetags/ballot_icon.py
+++ b/ietf/doc/templatetags/ballot_icon.py
@@ -184,7 +184,7 @@ def state_age_colored(doc):
         if not iesg_state:
             return ""
 
-        if iesg_state in ["dead", "watching", "pub", "idexists"]:
+        if iesg_state in ["dead", "pub", "idexists"]:
             return ""
         try:
             state_datetime = (
diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index 0c99ed281a..f95ba8812b 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -559,7 +559,7 @@ def test_issue_ballot_warn_if_early(self):
         q = PyQuery(r.content)
         self.assertFalse(q('[class=text-danger]:contains("not completed IETF Last Call")'))
 
-        for state_slug in ["lc", "watching", "ad-eval"]:
+        for state_slug in ["lc", "ad-eval"]:
             draft.set_state(State.objects.get(type="draft-iesg",slug=state_slug))
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200)
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index dcb71bdf69..09a7b38999 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -26,7 +26,7 @@
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
 from ietf.doc.views_draft import AdoptDraftForm
-from ietf.name.models import StreamName, DocTagName, RoleName
+from ietf.name.models import DocTagName, RoleName
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.group.models import Group, Role
 from ietf.person.factories import PersonFactory, EmailFactory
@@ -471,69 +471,61 @@ def test_edit_telechat_date(self):
         self.assertIn("may not leave enough time", get_payload_text(outbox[-1]))
 
     def test_start_iesg_process_on_draft(self):
-
         draft = WgDraftFactory(
             name="draft-ietf-mars-test2",
-            group__acronym='mars',
+            group__acronym="mars",
             intended_std_level_id="ps",
-            authors=[Person.objects.get(user__username='ad')],
-            )
-        
-        url = urlreverse('ietf.doc.views_draft.edit_info', kwargs=dict(name=draft.name))
+            authors=[Person.objects.get(user__username="ad")],
+        )
+
+        url = urlreverse("ietf.doc.views_draft.edit_info", kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
         # normal get
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('form select[name=intended_std_level]')), 1)
-        self.assertEqual("", q('form textarea[name=notify]')[0].value.strip())
+        self.assertEqual(len(q("form select[name=intended_std_level]")), 1)
+        self.assertEqual("", q("form textarea[name=notify]")[0].value.strip())
 
-        # add
-        events_before = draft.docevent_set.count()
+        events_before = list(draft.docevent_set.values_list("id", flat=True))
         mailbox_before = len(outbox)
 
         ad = Person.objects.get(name="Areað Irector")
 
-        r = self.client.post(url,
-                             dict(intended_std_level=str(draft.intended_std_level_id),
-                                  ad=ad.pk,
-                                  create_in_state=State.objects.get(used=True, type="draft-iesg", slug="watching").pk,
-                                  notify="test@example.com",
-                                  telechat_date="",
-                                  ))
+        r = self.client.post(
+            url,
+            dict(
+                intended_std_level=str(draft.intended_std_level_id),
+                ad=ad.pk,
+                notify="test@example.com",
+                telechat_date="",
+            ),
+        )
         self.assertEqual(r.status_code, 302)
 
         draft = Document.objects.get(name=draft.name)
-        self.assertEqual(draft.get_state_slug("draft-iesg"), "watching")
+        self.assertEqual(draft.get_state_slug("draft-iesg"), "pub-req")
+        self.assertEqual(draft.get_state_slug("draft-stream-ietf"), "sub-pub")
         self.assertEqual(draft.ad, ad)
-        self.assertTrue(not draft.latest_event(TelechatDocEvent, type="scheduled_for_telechat"))
-        self.assertEqual(draft.docevent_set.count(), events_before + 4)
-        self.assertCountEqual(draft.action_holders.all(), [draft.ad])
-        events = list(draft.docevent_set.order_by('time', 'id'))
-        self.assertEqual(events[-4].type, "started_iesg_process")
-        self.assertEqual(len(outbox), mailbox_before+1)
-        self.assertTrue('IESG processing' in outbox[-1]['Subject'])
-        self.assertTrue('draft-ietf-mars-test2@' in outbox[-1]['To']) 
-
-        # Redo, starting in publication requested to make sure WG state is also set
-        draft.set_state(State.objects.get(type_id='draft-iesg', slug='idexists'))
-        draft.set_state(State.objects.get(type='draft-stream-ietf',slug='writeupw'))
-        draft.stream = StreamName.objects.get(slug='ietf')
-        draft.action_holders.clear()
-        draft.save_with_history([DocEvent.objects.create(doc=draft, rev=draft.rev, type="changed_stream", by=Person.objects.get(user__username="secretary"), desc="Test")])
-        r = self.client.post(url,
-                             dict(intended_std_level=str(draft.intended_std_level_id),
-                                  ad=ad.pk,
-                                  create_in_state=State.objects.get(used=True, type="draft-iesg", slug="pub-req").pk,
-                                  notify="test@example.com",
-                                  telechat_date="",
-                                  ))
-        self.assertEqual(r.status_code, 302)
-        draft = Document.objects.get(name=draft.name)
-        self.assertEqual(draft.get_state_slug('draft-iesg'),'pub-req')
-        self.assertEqual(draft.get_state_slug('draft-stream-ietf'),'sub-pub')
+        self.assertTrue(
+            not draft.latest_event(TelechatDocEvent, type="scheduled_for_telechat")
+        )
+        # check that the expected events were created (don't insist on ordering)
+        self.assertCountEqual(
+            draft.docevent_set.exclude(id__in=events_before).values_list("type", flat=True),
+            [
+                "changed_action_holders",  # action holders set to AD
+                "changed_document",  # WG state set to sub-pub
+                "changed_document",  # AD set
+                "changed_document",  # state change notice email set
+                "started_iesg_process",  # IESG state is now pub-req
+            ],
+        )
         self.assertCountEqual(draft.action_holders.all(), [draft.ad])
+        self.assertEqual(len(outbox), mailbox_before + 1)
+        self.assertTrue("IESG processing" in outbox[-1]["Subject"])
+        self.assertTrue("draft-ietf-mars-test2@" in outbox[-1]["To"])
 
     def test_edit_consensus(self):
         draft = WgDraftFactory()
@@ -750,10 +742,6 @@ def test_expire_drafts(self):
 
         self.assertEqual(len(list(get_expired_drafts())), 1)
 
-        draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="watching"))
-
-        self.assertEqual(len(list(get_expired_drafts())), 1)
-
         draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="iesg-eva"))
 
         self.assertEqual(len(list(get_expired_drafts())), 0)
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 2b7faac92b..4ff40d2268 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -641,7 +641,7 @@ def ballot_writeupnotes(request, name):
                 existing.save()
 
             if "issue_ballot" in request.POST and not ballot_already_approved:
-                if prev_state.slug in ['watching', 'writeupw', 'goaheadw']:
+                if prev_state.slug in ['writeupw', 'goaheadw']:
                     new_state = State.objects.get(used=True, type="draft-iesg", slug='iesg-eva')
                     prev_tags = doc.tags.filter(slug__in=IESG_SUBSTATE_TAGS)
                     doc.set_state(new_state)
@@ -708,7 +708,7 @@ def ballot_writeupnotes(request, name):
                                    back_url=doc.get_absolute_url(),
                                    ballot_issued=bool(doc.latest_event(type="sent_ballot_announcement")),
                                    warn_lc = not doc.docevent_set.filter(lastcalldocevent__expires__date__lt=date_today(DEADLINE_TZINFO)).exists(),
-                                   warn_unexpected_state= prev_state if bool(prev_state.slug in ['watching', 'ad-eval', 'lc']) else None,
+                                   warn_unexpected_state= prev_state if bool(prev_state.slug in ['ad-eval', 'lc']) else None,
                                    ballot_writeup_form=form,
                                    need_intended_status=need_intended_status,
                                    ))
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 02d59f0df3..915dcebde5 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -587,7 +587,7 @@ def document_main(request, name, rev=None, document_html=False):
         if doc.get_state_slug() not in ["rfc", "expired"] and doc.stream_id in ("ietf",) and not snapshot:
             if iesg_state_slug == 'idexists' and can_edit:
                 actions.append(("Begin IESG Processing", urlreverse('ietf.doc.views_draft.edit_info', kwargs=dict(name=doc.name)) + "?new=1"))
-            elif can_edit_stream_info and (iesg_state_slug in ('idexists','watching')):
+            elif can_edit_stream_info and (iesg_state_slug == 'idexists'):
                 actions.append(("Submit to IESG for Publication", urlreverse('ietf.doc.views_draft.to_iesg', kwargs=dict(name=doc.name))))
 
         if request.user.is_authenticated and hasattr(request.user, "person"):
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index 30175491da..d709aedd42 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -487,40 +487,6 @@ def change_intention(request, name):
                                    doc=doc,
                                    ))
 
-class EditInfoForm(forms.Form):
-    intended_std_level = forms.ModelChoiceField(IntendedStdLevelName.objects.filter(used=True), empty_label="(None)", required=True, label="Intended RFC status")
-    area = forms.ModelChoiceField(Group.objects.filter(type="area", state="active"), empty_label="(None - individual submission)", required=False, label="Assigned to area")
-    ad = forms.ModelChoiceField(Person.objects.filter(role__name="ad", role__group__state="active",role__group__type='area').order_by('name'), label="Responsible AD", empty_label="(None)", required=True)
-    create_in_state = forms.ModelChoiceField(State.objects.filter(used=True, type="draft-iesg", slug__in=("pub-req", "watching")), empty_label=None, required=False)
-    notify = forms.CharField(
-        widget=forms.Textarea,
-        max_length=1023,
-        label="Notice emails",
-        help_text="Separate email addresses with commas.",
-        required=False,
-    )
-    telechat_date = forms.TypedChoiceField(coerce=lambda x: datetime.datetime.strptime(x, '%Y-%m-%d').date(), empty_value=None, required=False, widget=forms.Select(attrs={'onchange':'make_bold()'}))
-    returning_item = forms.BooleanField(required=False)
-
-    def __init__(self, *args, **kwargs):
-        super(self.__class__, self).__init__(*args, **kwargs)
-
-        # if previous AD is now ex-AD, append that person to the list
-        ad_pk = self.initial.get('ad')
-        choices = self.fields['ad'].choices
-        if ad_pk and ad_pk not in [pk for pk, name in choices]:
-            self.fields['ad'].choices = list(choices) + [("", "-------"), (ad_pk, Person.objects.get(pk=ad_pk).plain_name())]
-        
-        # telechat choices
-        dates = [d.date for d in TelechatDate.objects.active().order_by('date')]
-        init = kwargs['initial']['telechat_date']
-        if init and init not in dates:
-            dates.insert(0, init)
-
-        self.fields['telechat_date'].choices = [("", "(not on agenda)")] + [(d, d.strftime("%Y-%m-%d")) for d in dates]
-
-        # returning item is rendered non-standard
-        self.standard_fields = [x for x in self.visible_fields() if x.name not in ('returning_item',)]
 
 def to_iesg(request,name):
     """ Submit an IETF stream document to the IESG for publication """ 
@@ -619,7 +585,71 @@ def doc_event(type, by, doc, desc):
                                    notify=notify,
                                   ))
 
-@role_required('Area Director','Secretariat')
+class EditInfoForm(forms.Form):
+    intended_std_level = forms.ModelChoiceField(
+        IntendedStdLevelName.objects.filter(used=True),
+        empty_label="(None)",
+        required=True,
+        label="Intended RFC status",
+    )
+    area = forms.ModelChoiceField(
+        Group.objects.filter(type="area", state="active"),
+        empty_label="(None - individual submission)",
+        required=False,
+        label="Assigned to area",
+    )
+    ad = forms.ModelChoiceField(
+        Person.objects.filter(
+            role__name="ad", role__group__state="active", role__group__type="area"
+        ).order_by("name"),
+        label="Responsible AD",
+        empty_label="(None)",
+        required=True,
+    )
+    notify = forms.CharField(
+        widget=forms.Textarea,
+        max_length=1023,
+        label="Notice emails",
+        help_text="Separate email addresses with commas.",
+        required=False,
+    )
+    telechat_date = forms.TypedChoiceField(
+        coerce=lambda x: datetime.datetime.strptime(x, "%Y-%m-%d").date(),
+        empty_value=None,
+        required=False,
+        widget=forms.Select(attrs={"onchange": "make_bold()"}),
+    )
+    returning_item = forms.BooleanField(required=False)
+
+    def __init__(self, *args, **kwargs):
+        super(self.__class__, self).__init__(*args, **kwargs)
+
+        # if previous AD is now ex-AD, append that person to the list
+        ad_pk = self.initial.get("ad")
+        choices = self.fields["ad"].choices
+        if ad_pk and ad_pk not in [pk for pk, name in choices]:
+            self.fields["ad"].choices = list(choices) + [
+                ("", "-------"),
+                (ad_pk, Person.objects.get(pk=ad_pk).plain_name()),
+            ]
+
+        # telechat choices
+        dates = [d.date for d in TelechatDate.objects.active().order_by("date")]
+        init = kwargs["initial"]["telechat_date"]
+        if init and init not in dates:
+            dates.insert(0, init)
+
+        self.fields["telechat_date"].choices = [("", "(not on agenda)")] + [
+            (d, d.strftime("%Y-%m-%d")) for d in dates
+        ]
+
+        # returning item is rendered non-standard
+        self.standard_fields = [
+            x for x in self.visible_fields() if x.name not in ("returning_item",)
+        ]
+
+
+@role_required("Area Director", "Secretariat")
 def edit_info(request, name):
     """Edit various Internet-Draft attributes, notifying parties as
     necessary and logging changes as document events."""
@@ -628,7 +658,8 @@ def edit_info(request, name):
         raise Http404
 
     new_document = False
-    if doc.get_state_slug("draft-iesg") == "idexists": # FIXME: should probably receive "new document" as argument to view instead of this
+    # FIXME: should probably receive "new document" as argument to view instead of this
+    if doc.get_state_slug("draft-iesg") == "idexists":
         new_document = True
         doc.notify = get_initial_notify(doc)
 
@@ -636,34 +667,45 @@ def edit_info(request, name):
     initial_telechat_date = e.telechat_date if e else None
     initial_returning_item = bool(e and e.returning_item)
 
-    if request.method == 'POST':
-        form = EditInfoForm(request.POST,
-                            initial=dict(ad=doc.ad_id,
-                                         telechat_date=initial_telechat_date))
+    if request.method == "POST":
+        form = EditInfoForm(
+            request.POST,
+            initial=dict(ad=doc.ad_id, telechat_date=initial_telechat_date),
+        )
         if form.is_valid():
             by = request.user.person
+            pubreq_state = State.objects.get(type="draft-iesg", slug="pub-req")
 
             r = form.cleaned_data
             events = []
 
             if new_document:
-                doc.set_state(r['create_in_state'])
+                doc.set_state(pubreq_state)
 
                 # Is setting the WG state here too much of a hidden side-effect?
-                if r['create_in_state'].slug=='pub-req':
-                    if doc.stream and doc.stream.slug=='ietf' and doc.group and doc.group.type_id == 'wg':
-                        submitted_state = State.objects.get(type='draft-stream-ietf',slug='sub-pub')
-                        doc.set_state(submitted_state)
-                        e = DocEvent()
-                        e.type = "changed_document"
-                        e.by = by
-                        e.doc = doc
-                        e.rev = doc.rev
-                        e.desc = "Working group state set to %s" % submitted_state.name
-                        e.save()
-                        events.append(e)
+                if (
+                    doc.stream
+                    and doc.stream.slug == "ietf"
+                    and doc.group
+                    and doc.group.type_id == "wg"
+                ):
+                    submitted_state = State.objects.get(
+                        type="draft-stream-ietf", slug="sub-pub"
+                    )
+                    doc.set_state(submitted_state)
+                    e = DocEvent()
+                    e.type = "changed_document"
+                    e.by = by
+                    e.doc = doc
+                    e.rev = doc.rev
+                    e.desc = "Working group state set to %s" % submitted_state.name
+                    e.save()
+                    events.append(e)
 
-                replaces = Document.objects.filter(targets_related__source=doc, targets_related__relationship="replaces")
+                replaces = Document.objects.filter(
+                    targets_related__source=doc,
+                    targets_related__relationship="replaces",
+                )
                 if replaces:
                     # this should perhaps be somewhere else, e.g. the
                     # place where the replace relationship is established?
@@ -672,7 +714,10 @@ def edit_info(request, name):
                     e.by = Person.objects.get(name="(System)")
                     e.doc = doc
                     e.rev = doc.rev
-                    e.desc = "Earlier history may be found in the Comment Log for <a href=\"%s\">%s</a>" % (replaces[0], replaces[0].get_absolute_url())
+                    e.desc = (
+                        'Earlier history may be found in the Comment Log for <a href="%s">%s</a>'
+                        % (replaces[0], replaces[0].get_absolute_url())
+                    )
                     e.save()
                     events.append(e)
 
@@ -681,7 +726,10 @@ def edit_info(request, name):
                 e.by = by
                 e.doc = doc
                 e.rev = doc.rev
-                e.desc = "Document is now in IESG state <b>%s</b>" % doc.get_state("draft-iesg").name
+                e.desc = (
+                    "Document is now in IESG state <b>%s</b>"
+                    % doc.get_state("draft-iesg").name
+                )
                 e.save()
                 events.append(e)
 
@@ -691,9 +739,9 @@ def desc(attr, new, old):
                 entry = "%(attr)s changed to <b>%(new)s</b> from <b>%(old)s</b>"
                 if new_document:
                     entry = "%(attr)s changed to <b>%(new)s</b>"
-                
+
                 return entry % dict(attr=attr, new=new, old=old)
-            
+
             def diff(attr, name):
                 v = getattr(doc, attr)
                 if r[attr] != v:
@@ -701,9 +749,9 @@ def diff(attr, name):
                     setattr(doc, attr, r[attr])
 
             # update the attributes, keeping track of what we're doing
-            diff('intended_std_level', "Intended Status")
-            diff('ad', "Responsible AD")
-            diff('notify', "State Change Notice email list")
+            diff("intended_std_level", "Intended Status")
+            diff("ad", "Responsible AD")
+            diff("notify", "State Change Notice email list")
 
             if doc.group.type_id in ("individ", "area"):
                 if not r["area"]:
@@ -717,12 +765,16 @@ def diff(attr, name):
                     doc.group = r["area"]
 
             for c in changes:
-                events.append(DocEvent.objects.create(doc=doc, rev=doc.rev, by=by, desc=c, type="changed_document"))
+                events.append(
+                    DocEvent.objects.create(
+                        doc=doc, rev=doc.rev, by=by, desc=c, type="changed_document"
+                    )
+                )
 
             # Todo - chase this
-            e = update_telechat(request, doc, by,
-                                r['telechat_date'], r['returning_item'])
-
+            e = update_telechat(
+                request, doc, by, r["telechat_date"], r["returning_item"]
+            )
             if e:
                 events.append(e)
 
@@ -730,40 +782,44 @@ def diff(attr, name):
 
             if new_document:
                 # If we created a new doc, update the action holders as though it
-                # started in idexists and moved to its create_in_state. Do this
+                # started in idexists and moved to pub-req. Do this
                 # after the doc has been updated so, e.g., doc.ad is set.
                 update_action_holders(
                     doc,
-                    State.objects.get(type='draft-iesg', slug='idexists'),
-                    r['create_in_state']
+                    State.objects.get(type="draft-iesg", slug="idexists"),
+                    pubreq_state,
                 )
 
             if changes:
                 email_iesg_processing_document(request, doc, changes)
-                
+
             return HttpResponseRedirect(doc.get_absolute_url())
     else:
-        init = dict(intended_std_level=doc.intended_std_level_id,
-                    area=doc.group_id,
-                    ad=doc.ad_id,
-                    notify=doc.notify,
-                    telechat_date=initial_telechat_date,
-                    returning_item=initial_returning_item,
-                    )
+        init = dict(
+            intended_std_level=doc.intended_std_level_id,
+            area=doc.group_id,
+            ad=doc.ad_id,
+            notify=doc.notify,
+            telechat_date=initial_telechat_date,
+            returning_item=initial_returning_item,
+        )
 
         form = EditInfoForm(initial=init)
 
     # optionally filter out some fields
-    if not new_document:
-        form.standard_fields = [x for x in form.standard_fields if x.name != "create_in_state"]
     if doc.group.type_id not in ("individ", "area"):
         form.standard_fields = [x for x in form.standard_fields if x.name != "area"]
 
-    return render(request, 'doc/draft/edit_info.html',
-                              dict(doc=doc,
-                                   form=form,
-                                   user=request.user,
-                                   ballot_issued=doc.latest_event(type="sent_ballot_announcement")))
+    return render(
+        request,
+        "doc/draft/edit_info.html",
+        dict(
+            doc=doc,
+            form=form,
+            user=request.user,
+            ballot_issued=doc.latest_event(type="sent_ballot_announcement"),
+        ),
+    )
 
 @role_required('Area Director','Secretariat')
 def request_resurrect(request, name):
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 528fb05a22..4fa3b2560c 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -757,7 +757,7 @@ def drafts_in_last_call(request):
     })
 
 def drafts_in_iesg_process(request):
-    states = State.objects.filter(type="draft-iesg").exclude(slug__in=('idexists', 'pub', 'dead', 'watching', 'rfcqueue'))
+    states = State.objects.filter(type="draft-iesg").exclude(slug__in=('idexists', 'pub', 'dead', 'rfcqueue'))
     title = "Documents in IESG process"
 
     grouped_docs = []
diff --git a/ietf/group/views.py b/ietf/group/views.py
index e3fd7e80d9..71986384e0 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -731,7 +731,7 @@ def dependencies(request, acronym, group_type=None):
             {
                 "id": x.became_rfc().name if x.became_rfc() else x.name,
                 "rfc": x.type_id == "rfc" or x.became_rfc() is not None,
-                "post-wg": x.get_state_slug("draft-iesg") not in ["idexists", "watching", "dead"],
+                "post-wg": x.get_state_slug("draft-iesg") not in ["idexists", "dead"],
                 "expired": x.get_state_slug("draft") == "expired",
                 "replaced": x.get_state_slug("draft") == "repl",
                 "group": x.group.acronym if x.group and x.group.acronym != "none" else "",
diff --git a/ietf/idindex/index.py b/ietf/idindex/index.py
index 11c4521485..4f021c0dc7 100644
--- a/ietf/idindex/index.py
+++ b/ietf/idindex/index.py
@@ -51,7 +51,7 @@ def add_line(f1, f2, f3, f4):
         res.append(f1 + "\t" + f2 + "\t" + f3 + "\t" + f4)
 
 
-    inactive_states = ["idexists", "pub", "watching", "dead"]
+    inactive_states = ["idexists", "pub", "dead"]
 
     excludes = list(State.objects.filter(type="draft", slug__in=["rfc","repl"]))
     includes = list(State.objects.filter(type="draft-iesg").exclude(slug__in=inactive_states))
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 401767657d..8f1262b4cf 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -312,7 +312,7 @@
       "order": 42,
       "slug": "watching",
       "type": "draft-iesg",
-      "used": true
+      "used": false
     },
     "model": "doc.state",
     "pk": 11
diff --git a/ietf/templates/doc/draft/change_state.html b/ietf/templates/doc/draft/change_state.html
index 3515c290e1..1cae8358a4 100644
--- a/ietf/templates/doc/draft/change_state.html
+++ b/ietf/templates/doc/draft/change_state.html
@@ -12,9 +12,9 @@ <h1>
     </h1>
     {% if state.slug == "dead" %}
         <p class="alert alert-warning my-3">
-           This document is in IESG state "Dead". It is unusual to change
-           this to anything other than "AD is watching", and this should
-           never be used as a replacement for Begin IESG Processing.
+            This document is in IESG state "Dead". It is unusual to change this to
+            anything other than "I-D Exists" and this should never be used as a
+            replacement for Begin IESG Processing.
         </p>
     {% endif %}
     <a class="btn btn-info my-3"

From a345673c0d4f9c5bade059ea2ba22142a1904a90 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Wed, 2 Oct 2024 04:24:21 +1300
Subject: [PATCH 073/707] build: Install fonts from xml2rfc-fonts (#6300)

* build: Install fonts from xml2rfc-fonts

Fixes #6294

* fixup! build: Install fonts from xml2rfc-fonts
---
 docker/base.Dockerfile | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 4a307c6c62..e2465f33c2 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -125,6 +125,15 @@ ENV LC_ALL en_US.UTF-8
 ADD https://raw.githubusercontent.com/ietf-tools/idnits-mirror/main/idnits /usr/local/bin/
 RUN chmod +rx /usr/local/bin/idnits
 
+# Install required fonts
+RUN mkdir -p /tmp/fonts && \
+    wget -q -O /tmp/fonts.tar.gz https://github.com/ietf-tools/xml2rfc-fonts/archive/refs/tags/3.22.0.tar.gz && \
+    tar zxf /tmp/fonts.tar.gz -C /tmp/fonts && \
+    mv /tmp/fonts/*/noto/* /usr/local/share/fonts/ && \
+    mv /tmp/fonts/*/roboto_mono/* /usr/local/share/fonts/ && \
+    rm -rf /tmp/fonts.tar.gz /tmp/fonts/ && \
+    fc-cache -f
+
 # Turn off rsyslog kernel logging (doesn't work in Docker)
 RUN sed -i '/imklog/s/^/#/' /etc/rsyslog.conf
 

From b34bbe59ad93726872105a1ed18fec6114f89502 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Thu, 3 Oct 2024 05:44:52 +1300
Subject: [PATCH 074/707] fix: hide rounded pill if session has no purpose
 specified (#7997)

---
 ietf/meeting/tests_views.py          | 32 ++++++++++++++++++++++++++++
 ietf/templates/meeting/requests.html |  2 +-
 2 files changed, 33 insertions(+), 1 deletion(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index f951eb682d..642edcb9b4 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -7173,6 +7173,20 @@ def test_meeting_requests(self):
             status_id='schedw',
             add_to_schedule=False,
         )
+        session_with_none_purpose = SessionFactory(
+            meeting=meeting,
+            group__parent=area,
+            purpose_id="none",
+            status_id="schedw",
+            add_to_schedule=False,
+        )
+        tutorial_session = SessionFactory(
+            meeting=meeting,
+            group__parent=area,
+            purpose_id="tutorial",
+            status_id="schedw",
+            add_to_schedule=False,
+        )
         def _sreq_edit_link(sess):
             return urlreverse(
                 'ietf.secr.sreq.views.edit',
@@ -7211,6 +7225,8 @@ def _sreq_edit_link(sess):
         self.assertContains(r, _sreq_edit_link(proposed_wg_session))  # link to the session request
         self.assertContains(r, rg_session.group.acronym)
         self.assertContains(r, _sreq_edit_link(rg_session))  # link to the session request
+        self.assertContains(r, session_with_none_purpose.group.acronym)
+        self.assertContains(r, tutorial_session.group.acronym)
         # check headings - note that the special types (has_meetings, etc) do not have a group parent
         # so they show up in 'other'
         q = PyQuery(r.content)
@@ -7218,6 +7234,22 @@ def _sreq_edit_link(sess):
         self.assertEqual(len(q('h2#other-groups')), 1)
         self.assertEqual(len(q('h2#irtf')), 1)  # rg group has irtf group as parent
 
+        # check rounded pills
+        self.assertNotContains(  # no rounded pill for sessions with regular purpose
+            r,
+            '<span class="badge rounded-pill text-bg-info">Regular</span>',
+            html=True,
+        )
+        self.assertNotContains(  # no rounded pill for session with no purpose specified
+            r,
+            '<span class="badge rounded-pill text-bg-info">None</span>',
+            html=True,
+        )
+        self.assertContains(  # rounded pill for session with non-regular purpose
+            r,
+            '<span class="badge rounded-pill text-bg-info">Tutorial</span>',
+            html=True,
+        )
 
     def test_request_minutes(self):
         meeting = MeetingFactory(type_id='ietf')
diff --git a/ietf/templates/meeting/requests.html b/ietf/templates/meeting/requests.html
index 18d8c5cf8c..3008ceb662 100644
--- a/ietf/templates/meeting/requests.html
+++ b/ietf/templates/meeting/requests.html
@@ -154,7 +154,7 @@ <h2 class="mt-5" id="{% firstof area.grouper.acronym "other-groups" %}">
                             <a href="{% url "ietf.secr.sreq.views.edit" num=meeting.number acronym=session.group.acronym %}">
                                 {{ session.group.acronym }}
                             </a>
-                            {% if session.purpose_id != "regular" %}
+                            {% if session.purpose_id != "regular" and session.purpose_id != "none" %}
                                 <br><span class="badge rounded-pill text-bg-info">{{session.purpose}}</span>
                             {% endif %}
                             {% if session.joint_with_groups.count %}joint with {{ session.joint_with_groups_acronyms|join:' ' }}{% endif %}

From 364dec3e33cc0df8804d1792584c4ac97336cba6 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Thu, 3 Oct 2024 11:37:49 +1300
Subject: [PATCH 075/707] fix: fix wg anchor tags (case-sensitive) (#7995)

* fix: fix wg anchor tags in areas page

* fix: fix wg anchor tags in IESG agenda page

* test: ensure wg anchor tags to be all uppercase

* test: improve tests
---
 ietf/group/tests_info.py                |  6 ++++++
 ietf/iesg/tests.py                      | 14 ++++++++++++++
 ietf/templates/group/active_areas.html  |  2 +-
 ietf/templates/iesg/agenda_charter.html |  2 +-
 ietf/templates/iesg/agenda_doc.html     |  2 +-
 5 files changed, 23 insertions(+), 3 deletions(-)

diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 561f542f42..95fe9aa2e5 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -87,6 +87,12 @@ def test_active_groups(self):
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200)
             self.assertContains(r, g.acronym)
+            if t == "area":
+                q = PyQuery(r.content)
+                wg_url = urlreverse("ietf.group.views.active_groups", kwargs=dict(group_type="wg"))
+                href = f"{wg_url}#{g.acronym.upper()}"
+                self.assertEqual(q(f"h2#id-{g.acronym} a").attr("href"), href)
+                self.assertEqual(q(f'h2#id-{g.acronym} a[href="{href}"]').text(), f"({g.acronym.upper()})")
 
         url = urlreverse('ietf.group.views.active_groups', kwargs=dict())
         r = self.client.get(url)
diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 8438cb44dd..42e838ebdf 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -404,6 +404,8 @@ def test_agenda(self):
 
         self.assertContains(r, action_items.text)
 
+        q = PyQuery(r.content)
+
         for k, d in self.telechat_docs.items():
             if d.type_id == "charter":
                 self.assertContains(r, d.group.name, msg_prefix="%s '%s' not in response" % (k, d.group.name))
@@ -412,6 +414,18 @@ def test_agenda(self):
                 self.assertContains(r, d.name, msg_prefix="%s '%s' not in response" % (k, d.name))
                 self.assertContains(r, d.title, msg_prefix="%s '%s' title not in response" % (k, d.title))
 
+            if d.type_id in ["charter", "draft"]:
+                if d.group.parent is None:
+                    continue
+                wg_url = urlreverse("ietf.group.views.active_groups", kwargs=dict(group_type="wg"))
+                href = f"{wg_url}#{d.group.parent.acronym.upper()}"
+                texts = [elem.text.strip() for elem in q(f'a[href="{href}"]')]
+                self.assertGreater(len(texts), 0)
+                if d.type_id == "charter":
+                    self.assertTrue(any(t == d.group.parent.acronym.upper() for t in texts))
+                elif d.type_id == "draft":
+                    self.assertTrue(any(t == f"({d.group.parent.acronym.upper()})" for t in texts))
+
         for i, mi in enumerate(self.mgmt_items, start=1):
             s = "6." + str(i)
             self.assertContains(r, s, msg_prefix="Section '%s' not in response" % s)
diff --git a/ietf/templates/group/active_areas.html b/ietf/templates/group/active_areas.html
index 63637889ea..8355d13bbc 100644
--- a/ietf/templates/group/active_areas.html
+++ b/ietf/templates/group/active_areas.html
@@ -65,7 +65,7 @@ <h1>Areas</h1>
     {% for area in areas %}
         <h2 class="mt-5" id="id-{{ area.acronym|slugify }}">
             {{ area.name }}
-            <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ area.acronym }}">({{ area.acronym|upper }})</a>
+            <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ area.acronym|upper }}">({{ area.acronym|upper }})</a>
         </h2>
         {% if area.description %}
             <p>
diff --git a/ietf/templates/iesg/agenda_charter.html b/ietf/templates/iesg/agenda_charter.html
index 20bd23e06f..b4124914db 100644
--- a/ietf/templates/iesg/agenda_charter.html
+++ b/ietf/templates/iesg/agenda_charter.html
@@ -24,7 +24,7 @@
         <div class="row">
             <div class="col-3 text-end fw-bold">Area</div>
             <div class="col">
-                <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ doc.group.parent.acronym }}">
+                <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ doc.group.parent.acronym|upper }}">
                     {{ doc.group.parent.acronym|upper }}</a>
                 ({% person_link doc.ad %})
             </div>
diff --git a/ietf/templates/iesg/agenda_doc.html b/ietf/templates/iesg/agenda_doc.html
index ae78d96d60..87051fda26 100644
--- a/ietf/templates/iesg/agenda_doc.html
+++ b/ietf/templates/iesg/agenda_doc.html
@@ -37,7 +37,7 @@
             <div class="col-3 text-end fw-bold">Token</div>
             <div class="col">
                 {% person_link doc.ad %}
-                <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ doc.group.parent.acronym }}">
+                <a href="{% url 'ietf.group.views.active_groups' group_type='wg' %}#{{ doc.group.parent.acronym|upper }}">
                     ({{ doc.group.parent.acronym|upper }})
                 </a>
             </div>

From 6aff818b72c9e2e94d3432288ec366ce7f16b86a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 9 Oct 2024 12:56:00 -0300
Subject: [PATCH 076/707] feat: remove deprecated /api/submit/ endpoint (#8017)

* feat: remove deprecated /api/submit endpoint

* chore: remove unused imports

* test: test api_submit_tombstone view
---
 ietf/api/urls.py                           |   2 +-
 ietf/submit/forms.py                       | 273 +--------------------
 ietf/submit/tests.py                       | 143 +----------
 ietf/submit/views.py                       | 107 +-------
 ietf/templates/api/index.html              |   2 +-
 ietf/templates/submit/api_submit_info.html |  57 +----
 6 files changed, 27 insertions(+), 557 deletions(-)

diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 396b3813d6..48525dfda2 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -59,7 +59,7 @@
     # Email alias listing
     url(r'^person/email/$', api_views.active_email_list),
     # Draft submission API
-    url(r'^submit/?$', submit_views.api_submit),
+    url(r'^submit/?$', submit_views.api_submit_tombstone),
     # Draft upload API
     url(r'^submission/?$', submit_views.api_submission),
     # Draft submission state API
diff --git a/ietf/submit/forms.py b/ietf/submit/forms.py
index 4e5644b36e..2781d3365a 100644
--- a/ietf/submit/forms.py
+++ b/ietf/submit/forms.py
@@ -2,19 +2,16 @@
 # -*- coding: utf-8 -*-
 
 
-import io
 import os
 import re
 import datetime
 import email
 import sys
 import tempfile
-import xml2rfc
 from contextlib import ExitStack
 
 from email.utils import formataddr
 from typing import Tuple
-from unidecode import unidecode
 
 from django import forms
 from django.conf import settings
@@ -37,10 +34,8 @@
 from ietf.submit.utils import validate_submission_name, validate_submission_rev, validate_submission_document_date, remote_ip
 from ietf.submit.parsers.plain_parser import PlainParser
 from ietf.submit.parsers.xml_parser import XMLParser
-from ietf.utils import log
 from ietf.utils.draft import PlaintextDraft
 from ietf.utils.fields import ModelMultipleChoiceField
-from ietf.utils.text import normalize_text
 from ietf.utils.timezone import date_today
 from ietf.utils.xmldraft import InvalidXMLError, XMLDraft, XMLParseError
 
@@ -371,273 +366,6 @@ def deduce_group(name):
             return None
 
 
-class DeprecatedSubmissionBaseUploadForm(SubmissionBaseUploadForm):
-    def clean(self):
-        def format_messages(where, e, log):
-            out = log.write_out.getvalue().splitlines()
-            err = log.write_err.getvalue().splitlines()
-            m = str(e)
-            if m:
-                m = [ m ]
-            else:
-                import traceback
-                typ, val, tb = sys.exc_info()
-                m = traceback.format_exception(typ, val, tb)
-                m = [ l.replace('\n ', ':\n ') for l in m ]
-            msgs = [s for s in (["Error from xml2rfc (%s):" % (where,)] + m + out +  err) if s]
-            return msgs
-
-        if self.shutdown and not has_role(self.request.user, "Secretariat"):
-            raise forms.ValidationError(self.cutoff_warning)
-
-        for ext in self.formats:
-            f = self.cleaned_data.get(ext, None)
-            if not f:
-                continue
-            self.file_types.append('.%s' % ext)
-        if not ('.txt' in self.file_types or '.xml' in self.file_types):
-            if not self.errors:
-                raise forms.ValidationError('Unexpected submission file types; found %s, but %s is required' % (', '.join(self.file_types), ' or '.join(self.base_formats)))
-
-        #debug.show('self.cleaned_data["xml"]')
-        if self.cleaned_data.get('xml'):
-            #if not self.cleaned_data.get('txt'):
-            xml_file = self.cleaned_data.get('xml')
-            file_name = {}
-            xml2rfc.log.write_out = io.StringIO()   # open(os.devnull, "w")
-            xml2rfc.log.write_err = io.StringIO()   # open(os.devnull, "w")
-            tfn = None
-            with ExitStack() as stack:
-                @stack.callback
-                def cleanup():  # called when context exited, even in case of exception
-                    if tfn is not None:
-                        os.unlink(tfn)
-
-                # We need to write the xml file to disk in order to hand it
-                # over to the xml parser.  XXX FIXME: investigate updating
-                # xml2rfc to be able to work with file handles to in-memory
-                # files.
-                name, ext = os.path.splitext(os.path.basename(xml_file.name))
-                with tempfile.NamedTemporaryFile(prefix=name+'-',
-                                                 suffix='.xml',
-                                                 mode='wb+',
-                                                 delete=False) as tf:
-                    tfn = tf.name
-                    for chunk in xml_file.chunks():
-                        tf.write(chunk)
-
-                parser = xml2rfc.XmlRfcParser(str(tfn), quiet=True)
-                # --- Parse the xml ---
-                try:
-                    self.xmltree = parser.parse(remove_comments=False)
-                    # If we have v2, run it through v2v3. Keep track of the submitted version, though.
-                    self.xmlroot = self.xmltree.getroot()
-                    self.xml_version = self.xmlroot.get('version', '2')
-                    if self.xml_version == '2':
-                        v2v3 = xml2rfc.V2v3XmlWriter(self.xmltree)
-                        self.xmltree.tree = v2v3.convert2to3()
-                        self.xmlroot = self.xmltree.getroot()  # update to the new root
-
-                    draftname = self.xmlroot.attrib.get('docName')
-                    if draftname is None:
-                        self.add_error('xml', "No docName attribute found in the xml root element")
-                    name_error = validate_submission_name(draftname)
-                    if name_error:
-                        self.add_error('xml', name_error) # This is a critical and immediate failure - do not proceed with other validation.
-                    else:
-                        revmatch = re.search("-[0-9][0-9]$", draftname)
-                        if revmatch:
-                            self.revision = draftname[-2:]
-                            self.filename = draftname[:-3]
-                        else:
-                            self.revision = None
-                            self.filename = draftname
-                        self.title = self.xmlroot.findtext('front/title').strip()
-                        if type(self.title) is str:
-                            self.title = unidecode(self.title)
-                        self.title = normalize_text(self.title)
-                        self.abstract = (self.xmlroot.findtext('front/abstract') or '').strip()
-                        if type(self.abstract) is str:
-                            self.abstract = unidecode(self.abstract)
-                        author_info = self.xmlroot.findall('front/author')
-                        for author in author_info:
-                            info = {
-                                "name": author.attrib.get('fullname'),
-                                "email": author.findtext('address/email'),
-                                "affiliation": author.findtext('organization'),
-                            }
-                            elem = author.find('address/postal/country')
-                            if elem != None:
-                                ascii_country = elem.get('ascii', None)
-                                info['country'] = ascii_country if ascii_country else elem.text
-
-                            for item in info:
-                                if info[item]:
-                                    info[item] = info[item].strip()
-                            self.authors.append(info)
-
-                        # --- Prep the xml ---
-                        file_name['xml'] = os.path.join(settings.IDSUBMIT_STAGING_PATH, '%s-%s%s' % (self.filename, self.revision, ext))
-                        try:
-                            prep = xml2rfc.PrepToolWriter(self.xmltree, quiet=True, liberal=True, keep_pis=[xml2rfc.V3_PI_TARGET])
-                            prep.options.accept_prepped = True
-                            self.xmltree.tree = prep.prep()
-                            if self.xmltree.tree == None:
-                                self.add_error('xml', "Error from xml2rfc (prep): %s" % prep.errors)
-                        except Exception as e:
-                                msgs = format_messages('prep', e, xml2rfc.log)
-                                self.add_error('xml', msgs)
-
-                        # --- Convert to txt ---
-                        if not ('txt' in self.cleaned_data and self.cleaned_data['txt']):
-                            file_name['txt'] = os.path.join(settings.IDSUBMIT_STAGING_PATH, '%s-%s.txt' % (self.filename, self.revision))
-                            try:
-                                writer = xml2rfc.TextWriter(self.xmltree, quiet=True)
-                                writer.options.accept_prepped = True
-                                writer.write(file_name['txt'])
-                                log.log("In %s: xml2rfc %s generated %s from %s (version %s)" %
-                                        (   os.path.dirname(file_name['xml']),
-                                            xml2rfc.__version__,
-                                            os.path.basename(file_name['txt']),
-                                            os.path.basename(file_name['xml']),
-                                            self.xml_version))
-                            except Exception as e:
-                                msgs = format_messages('txt', e, xml2rfc.log)
-                                log.log('\n'.join(msgs))
-                                self.add_error('xml', msgs)
-
-                        # --- Convert to html ---
-                        try:
-                            file_name['html'] = os.path.join(settings.IDSUBMIT_STAGING_PATH, '%s-%s.html' % (self.filename, self.revision))
-                            writer = xml2rfc.HtmlWriter(self.xmltree, quiet=True)
-                            writer.write(file_name['html'])
-                            self.file_types.append('.html')
-                            log.log("In %s: xml2rfc %s generated %s from %s (version %s)" %
-                                (   os.path.dirname(file_name['xml']),
-                                    xml2rfc.__version__,
-                                    os.path.basename(file_name['html']),
-                                    os.path.basename(file_name['xml']),
-                                    self.xml_version))
-                        except Exception as e:
-                            msgs = format_messages('html', e, xml2rfc.log)
-                            self.add_error('xml', msgs)
-
-                except Exception as e:
-                    try:
-                        msgs = format_messages('txt', e, xml2rfc.log)
-                        log.log('\n'.join(msgs))
-                        self.add_error('xml', msgs)
-                    except Exception:
-                        self.add_error('xml', "An exception occurred when trying to process the XML file: %s" % e)
-
-        # The following errors are likely noise if we have previous field
-        # errors:
-        if self.errors:
-            raise forms.ValidationError('')
-
-        if self.cleaned_data.get('txt'):
-            # try to parse it
-            txt_file = self.cleaned_data['txt']
-            txt_file.seek(0)
-            bytes = txt_file.read()
-            txt_file.seek(0)
-            try:
-                text = bytes.decode(PlainParser.encoding)
-                self.parsed_draft = PlaintextDraft(text, txt_file.name)
-                if self.filename == None:
-                    self.filename = self.parsed_draft.filename
-                elif self.filename != self.parsed_draft.filename:
-                    self.add_error('txt', "Inconsistent name information: xml:%s, txt:%s" % (self.filename, self.parsed_draft.filename))
-                if self.revision == None:
-                    self.revision = self.parsed_draft.revision
-                elif self.revision != self.parsed_draft.revision:
-                    self.add_error('txt', "Inconsistent revision information: xml:%s, txt:%s" % (self.revision, self.parsed_draft.revision))
-                if self.title == None:
-                    self.title = self.parsed_draft.get_title()
-                elif self.title != self.parsed_draft.get_title():
-                    self.add_error('txt', "Inconsistent title information: xml:%s, txt:%s" % (self.title, self.parsed_draft.get_title()))
-            except (UnicodeDecodeError, LookupError) as e:
-                self.add_error('txt', 'Failed decoding the uploaded file: "%s"' % str(e))
-
-        rev_error = validate_submission_rev(self.filename, self.revision)
-        if rev_error:
-            raise forms.ValidationError(rev_error)
-
-        # The following errors are likely noise if we have previous field
-        # errors:
-        if self.errors:
-            raise forms.ValidationError('')
-
-        if not self.filename:
-            raise forms.ValidationError("Could not extract a valid Internet-Draft name from the upload.  "
-                "To fix this in a text upload, please make sure that the full Internet-Draft name including "
-                "revision number appears centered on its own line below the document title on the "
-                "first page.  In an xml upload, please make sure that the top-level <rfc/> "
-                "element has a docName attribute which provides the full Internet-Draft name including "
-                "revision number.")
-
-        if not self.revision:
-            raise forms.ValidationError("Could not extract a valid Internet-Draft revision from the upload.  "
-                "To fix this in a text upload, please make sure that the full Internet-Draft name including "
-                "revision number appears centered on its own line below the document title on the "
-                "first page.  In an xml upload, please make sure that the top-level <rfc/> "
-                "element has a docName attribute which provides the full Internet-Draft name including "
-                "revision number.")
-
-        if not self.title:
-            raise forms.ValidationError("Could not extract a valid title from the upload")
-
-        if self.cleaned_data.get('txt') or self.cleaned_data.get('xml'):
-            # check group
-            self.group = self.deduce_group(self.filename)
-
-            # check existing
-            existing = Submission.objects.filter(name=self.filename, rev=self.revision).exclude(state__in=("posted", "cancel", "waiting-for-draft"))
-            if existing:
-                raise forms.ValidationError(mark_safe('A submission with same name and revision is currently being processed. <a href="%s">Check the status here.</a>' % urlreverse("ietf.submit.views.submission_status", kwargs={ 'submission_id': existing[0].pk })))
-
-            # cut-off
-            if self.revision == '00' and self.in_first_cut_off:
-                raise forms.ValidationError(mark_safe(self.cutoff_warning))
-
-            # check thresholds
-            today = date_today()
-
-            self.check_submissions_thresholds(
-                "for the Internet-Draft %s" % self.filename,
-                dict(name=self.filename, rev=self.revision, submission_date=today),
-                settings.IDSUBMIT_MAX_DAILY_SAME_DRAFT_NAME, settings.IDSUBMIT_MAX_DAILY_SAME_DRAFT_NAME_SIZE,
-            )
-            self.check_submissions_thresholds(
-                "for the same submitter",
-                dict(remote_ip=self.remote_ip, submission_date=today),
-                settings.IDSUBMIT_MAX_DAILY_SAME_SUBMITTER, settings.IDSUBMIT_MAX_DAILY_SAME_SUBMITTER_SIZE,
-            )
-            if self.group:
-                self.check_submissions_thresholds(
-                    "for the group \"%s\"" % (self.group.acronym),
-                    dict(group=self.group, submission_date=today),
-                    settings.IDSUBMIT_MAX_DAILY_SAME_GROUP, settings.IDSUBMIT_MAX_DAILY_SAME_GROUP_SIZE,
-                )
-            self.check_submissions_thresholds(
-                "across all submitters",
-                dict(submission_date=today),
-                settings.IDSUBMIT_MAX_DAILY_SUBMISSIONS, settings.IDSUBMIT_MAX_DAILY_SUBMISSIONS_SIZE,
-            )
-
-        return super().clean()
-
-
-class DeprecatedSubmissionAutoUploadForm(DeprecatedSubmissionBaseUploadForm):
-    """Full-service upload form, replaced by the asynchronous version"""
-    user = forms.EmailField(required=True)
-
-    def __init__(self, request, *args, **kwargs):
-        super(DeprecatedSubmissionAutoUploadForm, self).__init__(request, *args, **kwargs)
-        self.formats = ['xml', ]
-        self.base_formats = ['xml', ]
-
-
 class SubmissionManualUploadForm(SubmissionBaseUploadForm):
     txt = forms.FileField(label='.txt format', required=False)
     formats = SubmissionBaseUploadForm.formats + ('txt',)
@@ -676,6 +404,7 @@ def clean_txt(self):
                 )
         return txt_file
 
+
 class SubmissionAutoUploadForm(SubmissionBaseUploadForm):
     user = forms.EmailField(required=True)
     replaces = forms.CharField(required=False, max_length=1000, strip=True)
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index b48168f8a6..ed28c7ef02 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -44,7 +44,7 @@
 from ietf.meeting.factories import MeetingFactory
 from ietf.name.models import DraftSubmissionStateName, FormalLanguageName
 from ietf.person.models import Person
-from ietf.person.factories import UserFactory, PersonFactory, EmailFactory
+from ietf.person.factories import UserFactory, PersonFactory
 from ietf.submit.factories import SubmissionFactory, SubmissionExtResourceFactory
 from ietf.submit.forms import SubmissionBaseUploadForm, SubmissionAutoUploadForm
 from ietf.submit.models import Submission, Preapproval, SubmissionExtResource
@@ -2345,6 +2345,12 @@ def setUp(self):
         super().setUp()
         MeetingFactory(type_id='ietf', date=date_today()+datetime.timedelta(days=60))
 
+    def test_api_submit_tombstone(self):
+        """Tombstone for obsolete API endpoint should return 410 Gone"""
+        url = urlreverse("ietf.submit.views.api_submit_tombstone")
+        self.assertEqual(self.client.get(url).status_code, 410)
+        self.assertEqual(self.client.post(url).status_code, 410)
+
     def test_upload_draft(self):
         """api_submission accepts a submission and queues it for processing"""
         url = urlreverse('ietf.submit.views.api_submission')
@@ -3191,141 +3197,6 @@ def test_cancel_stale_submissions(self):
             self.assertEqual(subm.state_id, "cancel")
             self.assertEqual(subm.submissionevent_set.count(), 2)
 
-
-class ApiSubmitTests(BaseSubmitTestCase):
-    def setUp(self):
-        super().setUp()
-        # break early in case of missing configuration
-        self.assertTrue(os.path.exists(settings.IDSUBMIT_IDNITS_BINARY))
-        MeetingFactory(type_id='ietf', date=date_today()+datetime.timedelta(days=60))
-
-    def do_post_submission(self, rev, author=None, name=None, group=None, email=None, title=None, year=None):
-        url = urlreverse('ietf.submit.views.api_submit')
-        if author is None:
-            author = PersonFactory()
-        if name is None:
-            slug = re.sub('[^a-z0-9-]+', '', author.ascii_parts()[3].lower())
-            name = 'draft-%s-foo' % slug
-        if email is None:
-            email = author.user.username
-        # submit
-        data = {}
-        data['xml'], author = submission_file(f'{name}-{rev}', f'{name}-{rev}.xml', group, "test_submission.xml", author=author, email=email, title=title, year=year)
-        data['user'] = email
-        r = self.client.post(url, data)
-        return r, author, name
-
-    def test_api_submit_info(self):
-        url = urlreverse('ietf.submit.views.api_submit')
-        r = self.client.get(url)
-        expected = "A simplified Internet-Draft submission interface, intended for automation"
-        self.assertContains(r, expected, status_code=200)
-
-    def test_api_submit_bad_method(self):
-        url = urlreverse('ietf.submit.views.api_submit')
-        r = self.client.put(url)
-        self.assertEqual(r.status_code, 405)
-
-    def test_api_submit_ok(self):
-        r, author, name = self.do_post_submission('00')
-        expected = "Upload of %s OK, confirmation requests sent to:\n  %s" % (name, author.formatted_email().replace('\n',''))
-        self.assertContains(r, expected, status_code=200)
-
-    def test_api_submit_secondary_email_active(self):
-        person = PersonFactory()
-        email = EmailFactory(person=person)
-        r, author, name = self.do_post_submission('00', author=person, email=email.address)
-        for expected in [
-                "Upload of %s OK, confirmation requests sent to:" % (name, ),
-                author.formatted_email().replace('\n',''),
-            ]:
-            self.assertContains(r, expected, status_code=200)
-
-    def test_api_submit_secondary_email_inactive(self):
-        person = PersonFactory()
-        prim = person.email()
-        prim.primary = True
-        prim.save()
-        email = EmailFactory(person=person, active=False)
-        r, author, name = self.do_post_submission('00', author=person, email=email.address)
-        expected = "No such user: %s" % email.address
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_no_user(self):
-        email='nonexistant.user@example.org'
-        r, author, name = self.do_post_submission('00', email=email)
-        expected = "No such user: %s" % email
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_no_person(self):
-        user = UserFactory()
-        email = user.username
-        r, author, name = self.do_post_submission('00', email=email)
-        expected = "No person with username %s" % email
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_wrong_revision(self):
-        r, author, name = self.do_post_submission('01')
-        expected = "Invalid revision (revision 00 is expected)"
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_update_existing_submissiondocevent_rev(self):
-        draft, _ = create_draft_submission_with_rev_mismatch(rev='01')
-        r, _, __ = self.do_post_submission(rev='01', name=draft.name)
-        expected = "Submission failed"
-        self.assertContains(r, expected, status_code=409)
-
-    def test_api_submit_update_later_submissiondocevent_rev(self):
-        draft, _ = create_draft_submission_with_rev_mismatch(rev='02')
-        r, _, __ = self.do_post_submission(rev='01', name=draft.name)
-        expected = "Submission failed"
-        self.assertContains(r, expected, status_code=409)
-
-    def test_api_submit_pending_submission(self):
-        r, author, name = self.do_post_submission('00')
-        expected = "Upload of"
-        self.assertContains(r, expected, status_code=200)
-        r, author, name = self.do_post_submission('00', author=author, name=name)
-        expected = "A submission with same name and revision is currently being processed"
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_no_title(self):
-        r, author, name = self.do_post_submission('00', title=" ")
-        expected = "Could not extract a valid title from the upload"
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_failed_idnits(self):
-        # `year` on the next line must be leap year or this test will fail every Feb 29
-        r, author, name = self.do_post_submission('00', year="2012")
-        expected = "Document date must be within 3 days of submission date"
-        self.assertContains(r, expected, status_code=400)
-
-    def test_api_submit_keeps_extresources(self):
-        """API submit should not disturb doc external resources
-        
-        Tests that the submission inherits the existing doc's docextresource_set.
-        Relies on separate testing that Submission external_resources will be
-        handled appropriately.
-        """
-        draft = WgDraftFactory()
-
-        # add an external resource
-        self.assertEqual(draft.docextresource_set.count(), 0)
-        extres = draft.docextresource_set.create(
-            name_id='faq',
-            display_name='this is a display name',
-            value='https://example.com/faq-for-test.html',
-        )
-        
-        r, _, __ = self.do_post_submission('01', name=draft.name)
-        self.assertEqual(r.status_code, 200)
-        # draft = Document.objects.get(pk=draft.pk)  # update the draft
-        sub = Submission.objects.get(name=draft.name)
-        self.assertEqual(
-            [str(r) for r in sub.external_resources.all()],
-            [str(extres)],
-        )
-
         
 class RefsTests(BaseSubmitTestCase):
 
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index 6f23ba49d4..3f745741e4 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -1,7 +1,5 @@
 # Copyright The IETF Trust 2011-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
-
-
 import re
 import datetime
 
@@ -29,17 +27,15 @@
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.person.models import Email
 from ietf.submit.forms import (SubmissionAutoUploadForm, AuthorForm, SubmitterForm, EditSubmissionForm,
-                               PreapprovalForm, ReplacesForm,
-                               DeprecatedSubmissionAutoUploadForm, SubmissionManualUploadForm)
+                               PreapprovalForm, ReplacesForm, SubmissionManualUploadForm)
 from ietf.submit.mail import send_full_url, send_manual_post_request
 from ietf.submit.models import (Submission, Preapproval, SubmissionExtResource,
     DraftSubmissionStateName )
 from ietf.submit.tasks import process_uploaded_submission_task, process_and_accept_uploaded_submission_task, poke
 from ietf.submit.utils import ( approvable_submissions_for_user, preapprovals_for_user,
     recently_approved_by_user, validate_submission, create_submission_event, docevent_from_submission,
-    post_submission, cancel_submission, rename_submission_files, remove_submission_files, get_draft_meta,
-    get_submission, fill_in_submission, apply_checkers, save_files, clear_existing_files,
-    check_submission_revision_consistency, accept_submission, accept_submission_requires_group_approval,
+    post_submission, cancel_submission, rename_submission_files, remove_submission_files,
+    get_submission, save_files, clear_existing_files, accept_submission, accept_submission_requires_group_approval,
     accept_submission_requires_prev_auth_approval, update_submission_external_resources)
 from ietf.stats.utils import clean_country_name
 from ietf.utils.accesstoken import generate_access_token
@@ -187,97 +183,14 @@ def api_submission_status(request, submission_id):
 
 
 @csrf_exempt
-def api_submit(request):
-    "Automated submission entrypoint"
-    submission = None
-    def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
-
-    if request.method == 'GET':
-        return render(request, 'submit/api_submit_info.html')
-    elif request.method == 'POST':
-        exception = None
-        try:
-            form = DeprecatedSubmissionAutoUploadForm(request, data=request.POST, files=request.FILES)
-            if form.is_valid():
-                log('got valid submission form for %s' % form.filename)
-                username = form.cleaned_data['user']
-                user = User.objects.filter(username__iexact=username)
-                if user.count() == 0:
-                    # See if a secondary login was being used
-                    email = Email.objects.filter(address=username, active=True)
-                    # The error messages don't talk about 'email', as the field we're
-                    # looking at is still the 'username' field.
-                    if email.count() == 0:
-                        return err(400, "No such user: %s" % username)
-                    elif email.count() > 1:
-                        return err(500, "Multiple matching accounts for %s" % username)
-                    email = email.first()
-                    if not hasattr(email, 'person'):
-                        return err(400, "No person matches %s" % username)
-                    person = email.person
-                    if not hasattr(person, 'user'):
-                        return err(400, "No user matches: %s" % username)
-                    user = person.user
-                elif user.count() > 1:
-                    return err(500, "Multiple matching accounts for %s" % username)
-                else:
-                    user = user.first()
-                if not hasattr(user, 'person'):
-                    return err(400, "No person with username %s" % username)
-
-                saved_files = save_files(form)
-                authors, abstract, file_name, file_size = get_draft_meta(form, saved_files)
-                for a in authors:
-                    if not a['email']:
-                        raise ValidationError("Missing email address for author %s" % a)
-
-                submission = get_submission(form)
-                fill_in_submission(form, submission, authors, abstract, file_size)
-                apply_checkers(submission, file_name)
-
-                create_submission_event(request, submission, desc="Uploaded submission via api_submit")
-
-                errors = validate_submission(submission)
-                if errors:
-                    raise ValidationError(errors)
-
-                # must do this after validate_submission() or data needed for check may be invalid
-                if check_submission_revision_consistency(submission):
-                    return err( 409, "Submission failed due to a document revision inconsistency error "
-                                     "in the database. Please contact the secretariat for assistance.")
-
-                errors = [ c.message for c in submission.checks.all() if c.passed==False ]
-                if errors:
-                    raise ValidationError(errors)
-
-                if not username.lower() in [ a['email'].lower() for a in authors ]:
-                    raise ValidationError('Submitter %s is not one of the document authors' % user.username)
-
-                submission.submitter = user.person.formatted_email()
-                sent_to = accept_submission(submission, request)
+def api_submit_tombstone(request):
+    """Tombstone for removed automated submission entrypoint"""
+    return render(
+        request, 
+        'submit/api_submit_info.html',
+        status=410,  # Gone
+    )
 
-                return HttpResponse(
-                    "Upload of %s OK, confirmation requests sent to:\n  %s" % (submission.name, ',\n  '.join(sent_to)),
-                    content_type="text/plain")
-            else:
-                raise ValidationError(form.errors)
-        except IOError as e:
-            exception = e
-            return err(500, "IO Error: %s" % str(e))
-        except ValidationError as e:
-            exception = e
-            return err(400, "Validation Error: %s" % str(e))
-        except Exception as e:
-            exception = e
-            raise
-            return err(500, "Exception: %s" % str(e))
-        finally:
-            if exception and submission:
-                remove_submission_files(submission)
-                submission.delete()
-    else:
-        return err(405, "Method not allowed")
 
 def tool_instructions(request):
     return render(request, 'submit/tool_instructions.html', {'selected': 'instructions'})
diff --git a/ietf/templates/api/index.html b/ietf/templates/api/index.html
index 8373a387f9..e21a50101a 100644
--- a/ietf/templates/api/index.html
+++ b/ietf/templates/api/index.html
@@ -9,7 +9,7 @@ <h2 id="framework">Framework API</h2>
         <p>
             This section describes the autogenerated read-only API towards the database tables.  See also
             the
-            <a href="{% url 'ietf.submit.views.api_submit' %}">Internet-Draft submission API description</a>
+            <a href="{% url 'ietf.submit.views.api_submission' %}">Internet-Draft submission API description</a>
             and the
             <a href="#iesg-position-api">IESG ballot position API description</a>
         </p>
diff --git a/ietf/templates/submit/api_submit_info.html b/ietf/templates/submit/api_submit_info.html
index cd0d52410b..75fc1abfc2 100644
--- a/ietf/templates/submit/api_submit_info.html
+++ b/ietf/templates/submit/api_submit_info.html
@@ -1,56 +1,13 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2015-2022, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2024, All Rights Reserved #}
 {% load origin ietf_filters %}
-{% block title %}I-D submission API instructions{% endblock %}
+{% block title %}Obsolete I-D submission API notice{% endblock %}
 {% block content %}
     {% origin %}
-    <h1 class="mb-3">Internet-Draft submission API instructions</h1>
+    <h1 class="mb-3">Obsolete Internet-Draft submission API notice</h1>
     <p>
-        Note: API endpoint described here is known to have a slow response time or to fail
-        due to timeout for some Internet-Draft submissions, particularly those with large file sizes.
-        It is recommended to use the <a href="{% url 'ietf.submit.views.api_submission' %}">new API endpoint</a>
-        instead for increased reliability.
+        The API endpoint previously available here is obsolete and is no longer supported.
+        Please use the <a href="{% url 'ietf.submit.views.api_submission' %}">new API endpoint</a>
+        instead.
     </p>
-    <p>
-        A simplified Internet-Draft submission interface, intended for automation,
-        is available at <code>{% absurl 'ietf.submit.views.api_submit' %}</code>.
-    </p>
-    <p>
-        The interface accepts only XML uploads that can be processed on the server, and
-        requires the user to have a datatracker account.  A successful submit still requires
-        the same email confirmation round-trip as submissions done through the regular
-        <a href="{% url 'ietf.submit.views.upload_submission' %}">submission tool</a>.
-    </p>
-    <p>
-        This interface does not provide all the options which the regular submission tool does.
-        Some limitations:
-    </p>
-    <ul>
-        <li>Only XML-only uploads are supported, not text or combined.</li>
-        <li>Document replacement information cannot be supplied.</li>
-        <li>
-            The server expects <code>multipart/form-data</code>, supported by <code>curl</code> but <b>not</b> by <code>wget</code>.
-        </li>
-    </ul>
-    <p>
-        It takes two parameters:
-    </p>
-    <ul>
-        <li>
-            <code>user</code> which is the user login
-        </li>
-        <li>
-            <code>xml</code>, which is the submitted file
-        </li>
-    </ul>
-    <p>
-        It returns an appropriate http result code, and a brief explanatory text message.
-    </p>
-    <p>
-        Here is an example:
-    </p>
-    <pre class="border p-3">
-$ curl -S -F "user=user.name@example.com" -F "xml=@~/draft-user-example.xml" {% absurl 'ietf.submit.views.api_submit' %}
-Upload of draft-user-example OK, confirmation requests sent to:
-User Name &lt;user.name@example.com&gt;</pre>
-{% endblock %}
\ No newline at end of file
+{% endblock %}

From a6d15c98ba213fc37078957ae343c7f21b58cb97 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 9 Oct 2024 13:04:54 -0300
Subject: [PATCH 077/707] test: fill in milestone descriptions (#8002)

* test: fill in milestone descriptions

If "Next" or "Last" appear in the descriptions, the
selectors used by the tests get confused.

* test: avoid fragile selectors
---
 ietf/iesg/tests.py | 58 +++++++++++++++++++++++++++++++++++-----------
 1 file changed, 44 insertions(+), 14 deletions(-)

diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 42e838ebdf..86910bc0ce 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -87,9 +87,18 @@ def test_milestones_needing_review_ordering(self):
             group=dated_group,
             person=Person.objects.get(user__username='ad'),
         )
-        dated_milestones = DatedGroupMilestoneFactory.create_batch(
-            2, group=dated_group, state_id="review"
-        )
+        dated_milestones = [
+            DatedGroupMilestoneFactory(
+                group=dated_group,
+                state_id="review",
+                desc="This is the description of one dated group milestone",
+            ),
+            DatedGroupMilestoneFactory(
+                group=dated_group,
+                state_id="review",
+                desc="This is the description of another dated group milestone",
+            ),
+        ]
         dated_milestones[0].due -= datetime.timedelta(days=1)  # make this one earlier
         dated_milestones[0].save()
 
@@ -99,9 +108,18 @@ def test_milestones_needing_review_ordering(self):
             group=dateless_group,
             person=Person.objects.get(user__username='ad'),
         )
-        dateless_milestones = DatelessGroupMilestoneFactory.create_batch(
-            2, group=dateless_group, state_id="review"
-        )
+        dateless_milestones = [
+            DatelessGroupMilestoneFactory(
+                group=dateless_group,
+                state_id="review",
+                desc="This is the description of one dateless group milestone",
+            ),
+            DatelessGroupMilestoneFactory(
+                group=dateless_group,
+                state_id="review",
+                desc="This is the description of another dateless group milestone",
+            ),
+        ]
 
         url = urlreverse("ietf.iesg.views.milestones_needing_review")
         self.client.login(username="ad", password="ad+password")
@@ -111,17 +129,29 @@ def test_milestones_needing_review_ordering(self):
         
         # check order-by-date
         dated_tbody = pq(f'td:contains("{dated_milestones[0].desc}")').closest("tbody")
-        next_td = dated_tbody.find('td:contains("Next")')
-        self.assertEqual(next_td.siblings()[0].text.strip(), dated_milestones[0].desc)
-        last_td = dated_tbody.find('td:contains("Last")')
-        self.assertEqual(last_td.siblings()[0].text.strip(), dated_milestones[1].desc)
+        rows = list(dated_tbody.items("tr"))  # keep as pyquery objects
+        self.assertTrue(rows[0].find('td:first:contains("Last")'))  # Last milestone shown first
+        self.assertFalse(rows[0].find('td:first:contains("Next")'))
+        self.assertTrue(rows[0].find(f'td:contains("{dated_milestones[1].desc}")'))
+        self.assertFalse(rows[0].find(f'td:contains("{dated_milestones[0].desc}")'))
+
+        self.assertFalse(rows[1].find('td:first:contains("Last")'))  # Last milestone shown first
+        self.assertTrue(rows[1].find('td:first:contains("Next")'))
+        self.assertFalse(rows[1].find(f'td:contains("{dated_milestones[1].desc}")'))
+        self.assertTrue(rows[1].find(f'td:contains("{dated_milestones[0].desc}")'))
 
         # check order-by-order
         dateless_tbody = pq(f'td:contains("{dateless_milestones[0].desc}")').closest("tbody")
-        next_td = dateless_tbody.find('td:contains("Next")')
-        self.assertEqual(next_td.siblings()[0].text.strip(), dateless_milestones[0].desc)
-        last_td = dateless_tbody.find('td:contains("Last")')
-        self.assertEqual(last_td.siblings()[0].text.strip(), dateless_milestones[1].desc)
+        rows = list(dateless_tbody.items("tr"))  # keep as pyquery objects
+        self.assertTrue(rows[0].find('td:first:contains("Last")'))  # Last milestone shown first
+        self.assertFalse(rows[0].find('td:first:contains("Next")'))
+        self.assertTrue(rows[0].find(f'td:contains("{dateless_milestones[1].desc}")'))
+        self.assertFalse(rows[0].find(f'td:contains("{dateless_milestones[0].desc}")'))
+
+        self.assertFalse(rows[1].find('td:first:contains("Last")'))  # Last milestone shown first
+        self.assertTrue(rows[1].find('td:first:contains("Next")'))
+        self.assertFalse(rows[1].find(f'td:contains("{dateless_milestones[1].desc}")'))
+        self.assertTrue(rows[1].find(f'td:contains("{dateless_milestones[0].desc}")'))
 
 
     def test_review_decisions(self):

From f7e0a67095df4f89739a38ff5d288be739d8c238 Mon Sep 17 00:00:00 2001
From: Sangho Na <sangho@nsh.nz>
Date: Thu, 10 Oct 2024 08:49:05 +1300
Subject: [PATCH 078/707] fix: turn off automatic escaping in session request
 templates (#8007)

* fix: turn off automatic escaping in session request templates

* test: ensure no unwanted escaping in session request emails

* test: use PersonFactory to create test users

* test: minor refactoring
---
 ietf/secr/sreq/tests.py                       | 56 ++++++++++++++++++-
 .../sreq/session_cancel_notification.txt      |  5 +-
 .../sreq/session_request_notification.txt     |  4 +-
 3 files changed, 59 insertions(+), 6 deletions(-)

diff --git a/ietf/secr/sreq/tests.py b/ietf/secr/sreq/tests.py
index 7fb13f1796..847b993e1c 100644
--- a/ietf/secr/sreq/tests.py
+++ b/ietf/secr/sreq/tests.py
@@ -13,9 +13,10 @@
 from ietf.meeting.models import Session, ResourceAssociation, SchedulingEvent, Constraint
 from ietf.meeting.factories import MeetingFactory, SessionFactory
 from ietf.name.models import ConstraintName, TimerangeName
+from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
 from ietf.secr.sreq.forms import SessionForm
-from ietf.utils.mail import outbox, empty_outbox, get_payload_text
+from ietf.utils.mail import outbox, empty_outbox, get_payload_text, send_mail
 from ietf.utils.timezone import date_today
 
 
@@ -78,6 +79,32 @@ def test_cancel(self):
         self.assertRedirects(r,reverse('ietf.secr.sreq.views.main'))
         self.assertEqual(SchedulingEvent.objects.filter(session=session).order_by('-id')[0].status_id, 'deleted')
 
+    def test_cancel_notification_msg(self):
+        to = "<iesg-secretary@ietf.org>"
+        subject = "Dummy subject"
+        template = "sreq/session_cancel_notification.txt"
+        meeting = MeetingFactory(type_id="ietf", date=date_today())
+        requester = PersonFactory(name="James O'Rourke", user__username="jimorourke")
+        context = {"meeting": meeting, "requester": requester}
+        cc = "cc.a@example.com, cc.b@example.com"
+        bcc = "bcc@example.com"
+
+        msg = send_mail(
+            None,
+            to,
+            None,
+            subject,
+            template,
+            context,
+            cc=cc,
+            bcc=bcc,
+        )
+        self.assertEqual(requester.name, "James O'Rourke")  # note ' (single quote) in the name
+        self.assertIn(
+            f"A request to cancel a meeting session has just been submitted by {requester.name}.",
+            get_payload_text(msg),
+        )
+
     def test_edit(self):
         meeting = MeetingFactory(type_id='ietf', date=date_today())
         mars = RoleFactory(name_id='chair', person__user__username='marschairman', group__acronym='mars').group
@@ -701,6 +728,33 @@ def test_request_notification(self):
         self.assertNotIn('1 Hour, 1 Hour, 1 Hour', notification_payload)
         self.assertNotIn('The third session requires your approval', notification_payload)
 
+    def test_request_notification_msg(self):
+        to = "<iesg-secretary@ietf.org>"
+        subject = "Dummy subject"
+        template = "sreq/session_request_notification.txt"
+        header = "A new"
+        meeting = MeetingFactory(type_id="ietf", date=date_today())
+        requester = PersonFactory(name="James O'Rourke", user__username="jimorourke")
+        context = {"header": header, "meeting": meeting, "requester": requester}
+        cc = "cc.a@example.com, cc.b@example.com"
+        bcc = "bcc@example.com"
+
+        msg = send_mail(
+            None,
+            to,
+            None,
+            subject,
+            template,
+            context,
+            cc=cc,
+            bcc=bcc,
+        )
+        self.assertEqual(requester.name, "James O'Rourke")  # note ' (single quote) in the name
+        self.assertIn(
+            f"{header} meeting session request has just been submitted by {requester.name}.",
+            get_payload_text(msg),
+        )
+
     def test_request_notification_third_session(self):
         meeting = MeetingFactory(type_id='ietf', date=date_today())
         ad = Person.objects.get(user__username='ad')
diff --git a/ietf/secr/templates/sreq/session_cancel_notification.txt b/ietf/secr/templates/sreq/session_cancel_notification.txt
index 3e6dd43f69..8aee6c89db 100644
--- a/ietf/secr/templates/sreq/session_cancel_notification.txt
+++ b/ietf/secr/templates/sreq/session_cancel_notification.txt
@@ -1,4 +1,3 @@
-{% load ams_filters %}
-
-A request to cancel a meeting session has just been submitted by {{ requester }}.
+{% autoescape off %}{% load ams_filters %}
 
+A request to cancel a meeting session has just been submitted by {{ requester }}.{% endautoescape %}
diff --git a/ietf/secr/templates/sreq/session_request_notification.txt b/ietf/secr/templates/sreq/session_request_notification.txt
index a41f202447..75f2cbbae4 100644
--- a/ietf/secr/templates/sreq/session_request_notification.txt
+++ b/ietf/secr/templates/sreq/session_request_notification.txt
@@ -1,5 +1,5 @@
-{% load ams_filters %}
+{% autoescape off %}{% load ams_filters %}
 
 {% filter wordwrap:78 %}{{ header }} meeting session request has just been submitted by {{ requester }}.{% endfilter %}
 
-{% include "includes/session_info.txt" %}
+{% include "includes/session_info.txt" %}{% endautoescape %}

From 148fa2f9f62d04fd11d2bac74c5ec1727a13a91b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 10 Oct 2024 14:23:25 -0300
Subject: [PATCH 079/707] fix: decode header fields for alert msg (#8034)

* style: Black

* chore: type hints

* refactor: % to f-string

* refactor: helper to decode header values

* fix: decode header fields for pop-up msg

* test: add tests

* fix: use truthiness check

We want to suppress empty strings, too...

* refactor: use f-string for time formatting

* test: clarify side_effect intention
---
 ietf/utils/mail.py  |  68 ++++++++++++++++-----
 ietf/utils/tests.py | 143 +++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 195 insertions(+), 16 deletions(-)

diff --git a/ietf/utils/mail.py b/ietf/utils/mail.py
index 4585fdb846..5417161451 100644
--- a/ietf/utils/mail.py
+++ b/ietf/utils/mail.py
@@ -19,11 +19,13 @@
 from email.header import Header, decode_header
 from email import message_from_bytes, message_from_string
 from email import charset as Charset
+from typing import Optional
 
 from django.conf import settings
 from django.contrib import messages
 from django.core.exceptions import ImproperlyConfigured, ValidationError
 from django.core.validators import validate_email
+from django.http import HttpRequest
 from django.template.loader import render_to_string
 from django.template import Context,RequestContext
 from django.utils import timezone
@@ -64,6 +66,18 @@ def add_headers(msg):
         msg['From'] = settings.DEFAULT_FROM_EMAIL
     return msg
 
+
+def decode_header_value(value: str) -> str:
+    """Decode a header value
+    
+    Easier-to-use wrapper around email.message.decode_header()
+    """
+    return "".join(
+        part.decode(charset if charset else "utf-8") if isinstance(part, bytes) else part
+        for part, charset in decode_header(value)
+    )
+
+
 class SMTPSomeRefusedRecipients(smtplib.SMTPException):
 
     def __init__(self, message, original_msg, refusals):
@@ -251,8 +265,7 @@ def parseaddr(addr):
 
     """
 
-    addr = ''.join( [ ( s.decode(m) if m else s.decode()) if isinstance(s, bytes) else s for (s,m) in decode_header(addr) ] )
-    name, addr = simple_parseaddr(addr)
+    name, addr = simple_parseaddr(decode_header_value(addr))
     return name, addr
 
 def excludeaddrs(addrlist, exlist):
@@ -330,18 +343,45 @@ def condition_message(to, frm, subject, msg, cc, extra):
         msg['Message-ID'] = make_msgid()
 
 
-def show_that_mail_was_sent(request,leadline,msg,bcc):
-        if request and request.user:
-            from ietf.ietfauth.utils import has_role
-            if has_role(request.user,['Area Director','Secretariat','IANA','RFC Editor','ISE','IAD','IRTF Chair','WG Chair','RG Chair','WG Secretary','RG Secretary']):
-                info =  "%s at %s %s\n" % (leadline,timezone.now().strftime("%Y-%m-%d %H:%M:%S"),settings.TIME_ZONE)
-                info += "Subject: %s\n" % force_str(msg.get('Subject','[no subject]'))
-                info += "To: %s\n" % msg.get('To','[no to]')
-                if msg.get('Cc'):
-                    info += "Cc: %s\n" % msg.get('Cc')
-                if bcc:
-                    info += "Bcc: %s\n" % bcc
-                messages.info(request,info,extra_tags='preformatted',fail_silently=True)
+def show_that_mail_was_sent(request: HttpRequest, leadline: str, msg: Message, bcc: Optional[str]):
+    if request and request.user:
+        from ietf.ietfauth.utils import has_role
+
+        if has_role(
+            request.user,
+            [
+                "Area Director",
+                "Secretariat",
+                "IANA",
+                "RFC Editor",
+                "ISE",
+                "IAD",
+                "IRTF Chair",
+                "WG Chair",
+                "RG Chair",
+                "WG Secretary",
+                "RG Secretary",
+            ],
+        ):
+            subject = decode_header_value(msg.get("Subject", "[no subject]"))
+            _to = decode_header_value(msg.get("To", "[no to]"))
+            info_lines = [
+                f"{leadline} at {timezone.now():%Y-%m-%d %H:%M:%S %Z}",
+                f"Subject: {subject}",
+                f"To: {_to}",
+            ]
+            cc = msg.get("Cc", None)
+            if cc:
+                info_lines.append(f"Cc: {decode_header_value(cc)}")
+            if bcc:
+                info_lines.append(f"Bcc: {decode_header_value(bcc)}")
+            messages.info(
+                request,
+                "\n".join(info_lines),
+                extra_tags="preformatted",
+                fail_silently=True,
+            )
+
 
 def save_as_message(request, msg, bcc):
     by = ((request and request.user and not request.user.is_anonymous and request.user.person)
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index decdd778d9..0a1986a608 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -11,10 +11,11 @@
 import shutil
 import types
 
-from mock import patch
+from mock import call, patch
 from pyquery import PyQuery
 from typing import Dict, List       # pyflakes:ignore
 
+from email.message import Message
 from email.mime.image import MIMEImage
 from email.mime.multipart import MIMEMultipart
 from email.mime.text import MIMEText
@@ -32,6 +33,7 @@
 from django.template.defaulttags import URLNode
 from django.template.loader import get_template, render_to_string
 from django.templatetags.static import StaticNode
+from django.test import RequestFactory
 from django.urls import reverse as urlreverse
 
 import debug                            # pyflakes:ignore
@@ -42,7 +44,15 @@
 from ietf.utils.draft import PlaintextDraft, getmeta
 from ietf.utils.fields import SearchableField
 from ietf.utils.log import unreachable, assertion
-from ietf.utils.mail import send_mail_preformatted, send_mail_text, send_mail_mime, outbox, get_payload_text
+from ietf.utils.mail import (
+    send_mail_preformatted,
+    send_mail_text,
+    send_mail_mime,
+    outbox,
+    get_payload_text,
+    decode_header_value,
+    show_that_mail_was_sent,
+)
 from ietf.utils.test_runner import get_template_paths, set_coverage_checking
 from ietf.utils.test_utils import TestCase, unicontent
 from ietf.utils.text import parse_unicode
@@ -109,6 +119,135 @@ def test_send_mail_preformatted(self):
         recv = outbox[-1]
         self.assertEqual(recv['Fuzz'], 'bucket, monger')
 
+
+class MailUtilsTests(TestCase):
+    def test_decode_header_value(self):
+        self.assertEqual(
+            decode_header_value("cake"),
+            "cake",
+            "decodes simple string value",
+        )
+        self.assertEqual(
+            decode_header_value("=?utf-8?b?8J+Ogg==?="),
+            "\U0001f382",
+            "decodes single utf-8-encoded part",
+        )
+        self.assertEqual(
+            decode_header_value("=?utf-8?b?8J+Ogg==?= = =?macintosh?b?jYxrjg==?="),
+            "\U0001f382 = çåké",
+            "decodes a value with non-utf-8 encodings",
+        )
+
+    # Patch in a side_effect so we can distinguish values that came from decode_header_value.
+    @patch("ietf.utils.mail.decode_header_value", side_effect=lambda s: f"decoded-{s}")
+    @patch("ietf.utils.mail.messages")
+    def test_show_that_mail_was_sent(self, mock_messages, mock_decode_header_value):
+        request = RequestFactory().get("/some/path")
+        request.user = object()  # just needs to exist
+        msg = Message()
+        msg["To"] = "to-value"
+        msg["Subject"] = "subject-value"
+        msg["Cc"] = "cc-value"
+        with patch("ietf.ietfauth.utils.has_role", return_value=True):
+            show_that_mail_was_sent(request, "mail was sent", msg, "bcc-value")
+        self.assertCountEqual(
+            mock_decode_header_value.call_args_list,
+            [call("to-value"), call("subject-value"), call("cc-value"), call("bcc-value")],
+        )
+        self.assertEqual(mock_messages.info.call_args[0][0], request)
+        self.assertIn("mail was sent", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-subject-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-to-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-cc-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-bcc-value", mock_messages.info.call_args[0][1])
+        mock_messages.reset_mock()
+        mock_decode_header_value.reset_mock()
+
+        # no bcc
+        with patch("ietf.ietfauth.utils.has_role", return_value=True):
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertCountEqual(
+            mock_decode_header_value.call_args_list,
+            [call("to-value"), call("subject-value"), call("cc-value")],
+        )
+        self.assertEqual(mock_messages.info.call_args[0][0], request)
+        self.assertIn("mail was sent", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-subject-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-to-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-cc-value", mock_messages.info.call_args[0][1])
+        # Note: here and below - when using assertNotIn(), leaving off the "decoded-" prefix
+        # proves that neither the original value nor the decoded value appear.
+        self.assertNotIn("bcc-value", mock_messages.info.call_args[0][1])
+        mock_messages.reset_mock()
+        mock_decode_header_value.reset_mock()
+
+        # no cc
+        del msg["Cc"]
+        with patch("ietf.ietfauth.utils.has_role", return_value=True):
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertCountEqual(
+            mock_decode_header_value.call_args_list,
+            [call("to-value"), call("subject-value")],
+        )
+        self.assertEqual(mock_messages.info.call_args[0][0], request)
+        self.assertIn("mail was sent", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-subject-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-to-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("cc-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("bcc-value", mock_messages.info.call_args[0][1])
+        mock_messages.reset_mock()
+        mock_decode_header_value.reset_mock()
+
+        # no to
+        del msg["To"]
+        with patch("ietf.ietfauth.utils.has_role", return_value=True):
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertCountEqual(
+            mock_decode_header_value.call_args_list,
+            [call("[no to]"), call("subject-value")],
+        )
+        self.assertEqual(mock_messages.info.call_args[0][0], request)
+        self.assertIn("mail was sent", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-subject-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-[no to]", mock_messages.info.call_args[0][1])
+        self.assertNotIn("to-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("cc-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("bcc-value", mock_messages.info.call_args[0][1])
+        mock_messages.reset_mock()
+        mock_decode_header_value.reset_mock()
+
+        # no subject
+        del msg["Subject"]
+        with patch("ietf.ietfauth.utils.has_role", return_value=True):
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertCountEqual(
+            mock_decode_header_value.call_args_list,
+            [call("[no to]"), call("[no subject]")],
+        )
+        self.assertEqual(mock_messages.info.call_args[0][0], request)
+        self.assertIn("mail was sent", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-[no subject]", mock_messages.info.call_args[0][1])
+        self.assertNotIn("subject-value", mock_messages.info.call_args[0][1])
+        self.assertIn("decoded-[no to]", mock_messages.info.call_args[0][1])
+        self.assertNotIn("to-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("cc-value", mock_messages.info.call_args[0][1])
+        self.assertNotIn("bcc-value", mock_messages.info.call_args[0][1])
+        mock_messages.reset_mock()
+        mock_decode_header_value.reset_mock()
+        
+        # user does not have role
+        with patch("ietf.ietfauth.utils.has_role", return_value=False):
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertFalse(mock_messages.called)
+        
+        # no user
+        request.user = None
+        with patch("ietf.ietfauth.utils.has_role", return_value=True) as mock_has_role:
+            show_that_mail_was_sent(request, "mail was sent", msg, None)
+        self.assertFalse(mock_messages.called)
+        self.assertFalse(mock_has_role.called)
+
+
 class TestSMTPServer(TestCase):
 
     def test_address_rejected(self):

From 83f5fc8d1adbad3da99bb95dbbc15110be69e166 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 11 Oct 2024 12:24:35 -0500
Subject: [PATCH 080/707] fix: add exception to last<->first name swap (#8043)

---
 ietf/person/name.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/person/name.py b/ietf/person/name.py
index dc57f58f4b..0dbeaa9b99 100644
--- a/ietf/person/name.py
+++ b/ietf/person/name.py
@@ -59,7 +59,7 @@ def name_parts(name):
         last = parts[0]
     if len(parts) >= 2:
         # Handle reverse-order names with uppercase surname correctly
-        if len(first)>1 and re.search("^[A-Z-]+$", first):
+        if len(first)>1 and re.search("^[A-Z-]+$", first) and first != "JP":
             first, last = last, first.capitalize()
     # Handle exception for RFC Editor
     if (prefix, first, middle, last, suffix) == ('', 'Editor', '', 'Rfc', ''):

From 2d2e879bd15e2cfb71dbaf9c05a29edf01883343 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 14 Oct 2024 12:22:19 -0300
Subject: [PATCH 081/707] fix: versioned href for slides URL (#8040)

---
 ietf/meeting/views.py        |  2 +-
 ietf/utils/meetecho.py       | 14 ++++++--------
 ietf/utils/tests_meetecho.py |  8 ++++----
 3 files changed, 11 insertions(+), 13 deletions(-)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 211cdec9a5..6e6c4dfe23 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -1840,7 +1840,7 @@ def agenda_extract_slide(item):
         "id": item.id,
         "title": item.title,
         "rev": item.rev,
-        "url": item.get_versionless_href(),
+        "url": item.get_href(),
         "ext": item.file_extension(),
     }
 
diff --git a/ietf/utils/meetecho.py b/ietf/utils/meetecho.py
index 2f5f146766..0dbf75736a 100644
--- a/ietf/utils/meetecho.py
+++ b/ietf/utils/meetecho.py
@@ -481,12 +481,10 @@ def delete_conference(self, conf: Conference):
 class SlidesManager(Manager):
     """Interface between Datatracker models and Meetecho API
     
-    Note: The URL we send comes from get_versionless_href(). This should match what we use as the
-    URL in api_get_session_materials(). Additionally, it _must_ give the right result for a Document
-    instance that has not yet been persisted to the database. This is because upload_session_slides()
-    (as of 2024-03-07) SessionPresentations before saving its updated Documents. This means, for
-    example, using get_absolute_url() will cause bugs. (We should refactor upload_session_slides() to
-    avoid this requirement.) 
+    Note: the URL sent for a slide deck comes from DocumentInfo.get_href() and includes the revision
+    of the slides being sent. Be sure that 1) the URL matches what api_get_session_materials() returns
+    for the slides; and 2) the URL is valid if it is fetched immediately - possibly even before the call
+    to SlidesManager.add() or send_update() returns.
     """
 
     def __init__(self, api_config):
@@ -521,7 +519,7 @@ def add(self, session: "Session", slides: "Document", order: int):
             deck={
                 "id": slides.pk,
                 "title": slides.title,
-                "url": slides.get_versionless_href(),  # see above note re: get_versionless_href()
+                "url": slides.get_href(),
                 "rev": slides.rev,
                 "order": order,
             }
@@ -575,7 +573,7 @@ def send_update(self, session: "Session"):
                 {
                     "id": deck.document.pk,
                     "title": deck.document.title,
-                    "url": deck.document.get_versionless_href(),  # see note above re: get_versionless_href()
+                    "url": deck.document.get_href(),
                     "rev": deck.document.rev,
                     "order": deck.order,
                 }
diff --git a/ietf/utils/tests_meetecho.py b/ietf/utils/tests_meetecho.py
index 1aef5894e2..a10ac68c27 100644
--- a/ietf/utils/tests_meetecho.py
+++ b/ietf/utils/tests_meetecho.py
@@ -558,7 +558,7 @@ def test_add(self, mock_add, mock_wg_token):
                 deck={
                     "id": slides_doc.pk,
                     "title": slides_doc.title,
-                    "url": slides_doc.get_versionless_href(),
+                    "url": slides_doc.get_href(session.meeting),
                     "rev": slides_doc.rev,
                     "order": 13,
                 },
@@ -597,7 +597,7 @@ def test_delete(self, mock_delete, mock_update, mock_wg_token):
                     {
                         "id": slides_doc.pk,
                         "title": slides_doc.title,
-                        "url": slides_doc.get_versionless_href(),
+                        "url": slides_doc.get_href(session.meeting),
                         "rev": slides_doc.rev,
                         "order": 1,
                     },
@@ -635,7 +635,7 @@ def test_revise(self, mock_add, mock_delete, mock_wg_token):
                 deck={
                     "id": slides_doc.pk,
                     "title": slides_doc.title,
-                    "url": slides_doc.get_versionless_href(),
+                    "url": slides_doc.get_href(slides.session.meeting),
                     "rev": slides_doc.rev,
                     "order": 23,
                 },
@@ -660,7 +660,7 @@ def test_send_update(self, mock_send_update, mock_wg_token):
                     {
                         "id": slides.document_id,
                         "title": slides.document.title,
-                        "url": slides.document.get_versionless_href(),
+                        "url": slides.document.get_href(slides.session.meeting),
                         "rev": slides.document.rev,
                         "order": 0,
                     }

From 166340842ed3e4927cd8dd174aecdce8a4df50aa Mon Sep 17 00:00:00 2001
From: Martin Thomson <mt@lowentropy.net>
Date: Tue, 15 Oct 2024 07:24:49 +1100
Subject: [PATCH 082/707] fix: Set overflow-y to clip for pre (#8047)

Browsers treat an overflow: auto directive as a request to make an
element scrollable, even if the element does not need it.
This results in scrolling being confined to that element sometimes,
such as when a document is scrolled using a mouse wheel
if the document scrolls the pointer into that element.
The result is that scrolling can be "trapped" on an element that
doesn't really need to scroll.

This disables vertical scrolling for those pre elements that might
trap scrolling in this way.
---
 ietf/static/css/document_html_txt.scss | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/static/css/document_html_txt.scss b/ietf/static/css/document_html_txt.scss
index b0fec7c4d6..a5991056c9 100644
--- a/ietf/static/css/document_html_txt.scss
+++ b/ietf/static/css/document_html_txt.scss
@@ -344,7 +344,7 @@ div:is(.artwork, .sourcecode) pre {
   flex: 0 0 content;
   margin: 0;
   max-width: 72ch;
-  overflow: auto;
+  overflow: auto clip;
 }
 div:is(.artwork, .sourcecode) .pilcrow {
   flex: 0 0 1ch;

From 68ceea9c060fa0f13bef2b9efe225b41bc6ff519 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Wed, 16 Oct 2024 08:38:02 +1300
Subject: [PATCH 083/707] chore: Bypass Firefox for Playwright test due to
 flakiness (#8050)

---
 playwright/tests/status/status.spec.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/playwright/tests/status/status.spec.js b/playwright/tests/status/status.spec.js
index 7b3b90bfa4..daef7a88f1 100644
--- a/playwright/tests/status/status.spec.js
+++ b/playwright/tests/status/status.spec.js
@@ -20,6 +20,10 @@ test.describe('site status', () => {
     by: 'Exile is a cool Amiga game'
   }
 
+  test.beforeEach(({ browserName }) => {
+    test.skip(browserName === 'firefox', 'bypassing flaky tests on Firefox')
+  })
+
   test('Renders server status as Notification', async ({ page }) => {
     await page.route('/status/latest.json', route => {
       route.fulfill({

From 34363040cd47d2f7ee407b56f84a44bf256c2af2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 15:58:14 -0400
Subject: [PATCH 084/707] build(deps): bump appleboy/ssh-action from 1.0.3 to
 1.1.0 (#8019)

Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action) from 1.0.3 to 1.1.0.
- [Release notes](https://github.com/appleboy/ssh-action/releases)
- [Changelog](https://github.com/appleboy/ssh-action/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/appleboy/ssh-action/compare/029f5b4aeeeb58fdfe1410a5d17f967dacf36262...25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1)

---
updated-dependencies:
- dependency-name: appleboy/ssh-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests-az.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index bfd1fdd584..3f828430a9 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -38,7 +38,7 @@ jobs:
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
     - name: Remote SSH into VM
-      uses: appleboy/ssh-action@029f5b4aeeeb58fdfe1410a5d17f967dacf36262
+      uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

From c37fec2f1c665cae18d0e96418d6617e0722521b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 15:58:52 -0400
Subject: [PATCH 085/707] build(deps): bump codecov/codecov-action from 4.5.0
 to 4.6.0 (#8020)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 616ffdcc63..64db03db09 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -59,7 +59,7 @@ jobs:
         path: geckodriver.log
 
     - name: Upload Coverage Results to Codecov
-      uses: codecov/codecov-action@v4.5.0
+      uses: codecov/codecov-action@v4.6.0
       with:
         files: coverage.xml
         

From 39ba425089a2ec9b24b5c8ac8b07a57ded62f911 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 15:59:22 -0400
Subject: [PATCH 086/707] build(deps): bump the npm group across 1 directory
 with 2 updates (#8021)

Bumps the npm group with 2 updates in the /dev/coverage-action directory: [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) and [luxon](https://github.com/moment/luxon).


Updates `@actions/core` from 1.10.1 to 1.11.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `luxon` from 3.4.4 to 3.5.0
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/3.4.4...3.5.0)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: luxon
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/coverage-action/package-lock.json | 75 ++++++++++++++++-----------
 dev/coverage-action/package.json      |  4 +-
 2 files changed, 46 insertions(+), 33 deletions(-)

diff --git a/dev/coverage-action/package-lock.json b/dev/coverage-action/package-lock.json
index 8c9b97e026..f23a9b66c7 100644
--- a/dev/coverage-action/package-lock.json
+++ b/dev/coverage-action/package-lock.json
@@ -9,19 +9,27 @@
       "version": "1.0.0",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "@actions/core": "1.10.1",
+        "@actions/core": "1.11.1",
         "@actions/github": "6.0.0",
         "lodash": "4.17.21",
-        "luxon": "3.4.4"
+        "luxon": "3.5.0"
       }
     },
     "node_modules/@actions/core": {
-      "version": "1.10.1",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.1.tgz",
-      "integrity": "sha512-3lBR9EDAY+iYIpTnTIXmWcNbX3T2kCkAEQGIQx4NVQ0575nk2k3GRZDTPQG+vVtS2izSLmINlxXf0uLtnrTP+g==",
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
       "dependencies": {
-        "@actions/http-client": "^2.0.1",
-        "uuid": "^8.3.2"
+        "@actions/exec": "^1.1.1",
+        "@actions/http-client": "^2.0.1"
+      }
+    },
+    "node_modules/@actions/exec": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
+      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
+      "dependencies": {
+        "@actions/io": "^1.0.1"
       }
     },
     "node_modules/@actions/github": {
@@ -44,6 +52,11 @@
         "undici": "^5.25.4"
       }
     },
+    "node_modules/@actions/io": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
+    },
     "node_modules/@fastify/busboy": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.0.0.tgz",
@@ -196,9 +209,9 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "node_modules/luxon": {
-      "version": "3.4.4",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.4.4.tgz",
-      "integrity": "sha512-zobTr7akeGHnv7eBOXcRgMeCP6+uyYsczwmeRCauvpvaAltgNyTbLH/+VaEAPUeWBT+1GuNmz4wC/6jtQzbbVA==",
+      "version": "3.5.0",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
+      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ==",
       "engines": {
         "node": ">=12"
       }
@@ -235,14 +248,6 @@
       "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz",
       "integrity": "sha512-isyNax3wXoKaulPDZWHQqbmIx1k2tb9fb3GGDBRxCscfYV2Ch7WxPArBsFEG8s/safwXTT7H4QGhaIkTp9447w=="
     },
-    "node_modules/uuid": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-      "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-      "bin": {
-        "uuid": "dist/bin/uuid"
-      }
-    },
     "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
@@ -251,12 +256,20 @@
   },
   "dependencies": {
     "@actions/core": {
-      "version": "1.10.1",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.1.tgz",
-      "integrity": "sha512-3lBR9EDAY+iYIpTnTIXmWcNbX3T2kCkAEQGIQx4NVQ0575nk2k3GRZDTPQG+vVtS2izSLmINlxXf0uLtnrTP+g==",
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
+      "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
       "requires": {
-        "@actions/http-client": "^2.0.1",
-        "uuid": "^8.3.2"
+        "@actions/exec": "^1.1.1",
+        "@actions/http-client": "^2.0.1"
+      }
+    },
+    "@actions/exec": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
+      "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
+      "requires": {
+        "@actions/io": "^1.0.1"
       }
     },
     "@actions/github": {
@@ -279,6 +292,11 @@
         "undici": "^5.25.4"
       }
     },
+    "@actions/io": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
+    },
     "@fastify/busboy": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.0.0.tgz",
@@ -395,9 +413,9 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "luxon": {
-      "version": "3.4.4",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.4.4.tgz",
-      "integrity": "sha512-zobTr7akeGHnv7eBOXcRgMeCP6+uyYsczwmeRCauvpvaAltgNyTbLH/+VaEAPUeWBT+1GuNmz4wC/6jtQzbbVA=="
+      "version": "3.5.0",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
+      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ=="
     },
     "once": {
       "version": "1.4.0",
@@ -425,11 +443,6 @@
       "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz",
       "integrity": "sha512-isyNax3wXoKaulPDZWHQqbmIx1k2tb9fb3GGDBRxCscfYV2Ch7WxPArBsFEG8s/safwXTT7H4QGhaIkTp9447w=="
     },
-    "uuid": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
-      "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg=="
-    },
     "wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
diff --git a/dev/coverage-action/package.json b/dev/coverage-action/package.json
index 0a8794d2a2..1d03fe3dab 100644
--- a/dev/coverage-action/package.json
+++ b/dev/coverage-action/package.json
@@ -6,9 +6,9 @@
   "author": "IETF Trust",
   "license": "BSD-3-Clause",
   "dependencies": {
-    "@actions/core": "1.10.1",
+    "@actions/core": "1.11.1",
     "@actions/github": "6.0.0",
     "lodash": "4.17.21",
-    "luxon": "3.4.4"
+    "luxon": "3.5.0"
   }
 }

From b1b14024e3a3291c334b867f8a5e5cd8842f0fec Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 16:00:38 -0400
Subject: [PATCH 087/707] chore(deps): bump slackapi/slack-github-action from
 1.26.0 to 1.27.0 (#7885)

Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.26.0 to 1.27.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8f88c7c22e..3887661cac 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -335,7 +335,7 @@ jobs:
     steps:      
     - name: Notify on Slack (Success)
       if: ${{ !contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v1.26.0
+      uses: slackapi/slack-github-action@v1.27.0
       with:
         channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
         payload: |
@@ -358,7 +358,7 @@ jobs:
         SLACK_BOT_TOKEN: ${{ secrets.SLACK_GH_BOT }}
     - name: Notify on Slack (Failure)
       if: ${{ contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v1.26.0
+      uses: slackapi/slack-github-action@v1.27.0
       with:
         channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
         payload: |

From 51f96eb952160997292af32998467e9f90c40782 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 16:01:15 -0400
Subject: [PATCH 088/707] chore(deps): bump tar in /dev/deploy-to-container in
 the npm group (#7793)

Bumps the npm group in /dev/deploy-to-container with 1 update: [tar](https://github.com/isaacs/node-tar).


Updates `tar` from 7.4.0 to 7.4.3
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.4.0...v7.4.3)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 14 +++++++-------
 dev/deploy-to-container/package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index 7b86986d56..f636a45f05 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -11,7 +11,7 @@
         "nanoid": "5.0.7",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
-        "tar": "^7.4.0",
+        "tar": "^7.4.3",
         "yargs": "^17.7.2"
       },
       "engines": {
@@ -788,9 +788,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.4.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.0.tgz",
-      "integrity": "sha512-XQs0S8fuAkQWuqhDeCdMlJXDX80D7EOVLDPVFkna9yQfzS+PHKgfxcei0jf6/+QAWcjqrnC8uM3fSAnrQl+XYg==",
+      "version": "7.4.3",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
+      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
@@ -1503,9 +1503,9 @@
       }
     },
     "tar": {
-      "version": "7.4.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.0.tgz",
-      "integrity": "sha512-XQs0S8fuAkQWuqhDeCdMlJXDX80D7EOVLDPVFkna9yQfzS+PHKgfxcei0jf6/+QAWcjqrnC8uM3fSAnrQl+XYg==",
+      "version": "7.4.3",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
+      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
       "requires": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 2f582dd2a7..be77fa5cce 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -7,7 +7,7 @@
     "nanoid": "5.0.7",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",
-    "tar": "^7.4.0",
+    "tar": "^7.4.3",
     "yargs": "^17.7.2"
   },
   "engines": {

From db4ff66fbd3950c280ac9334a8718d6de4f10a5b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 16:02:08 -0400
Subject: [PATCH 089/707] chore(deps): bump the npm group across 1 directory
 with 2 updates (#7789)

Bumps the npm group with 2 updates in the /dev/diff directory: [luxon](https://github.com/moment/luxon) and [tar](https://github.com/isaacs/node-tar).


Updates `luxon` from 3.4.4 to 3.5.0
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/3.4.4...3.5.0)

Updates `tar` from 7.4.0 to 7.4.3
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.4.0...v7.4.3)

---
updated-dependencies:
- dependency-name: luxon
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: tar
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/diff/package-lock.json | 28 ++++++++++++++--------------
 dev/diff/package.json      |  4 ++--
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/dev/diff/package-lock.json b/dev/diff/package-lock.json
index 3500ccec48..87aaf3f16f 100644
--- a/dev/diff/package-lock.json
+++ b/dev/diff/package-lock.json
@@ -15,9 +15,9 @@
         "keypress": "^0.2.1",
         "listr2": "^6.6.1",
         "lodash-es": "^4.17.21",
-        "luxon": "^3.4.4",
+        "luxon": "^3.5.0",
         "pretty-bytes": "^6.1.1",
-        "tar": "^7.4.0",
+        "tar": "^7.4.3",
         "yargs": "^17.7.2"
       },
       "engines": {
@@ -1060,9 +1060,9 @@
       }
     },
     "node_modules/luxon": {
-      "version": "3.4.4",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.4.4.tgz",
-      "integrity": "sha512-zobTr7akeGHnv7eBOXcRgMeCP6+uyYsczwmeRCauvpvaAltgNyTbLH/+VaEAPUeWBT+1GuNmz4wC/6jtQzbbVA==",
+      "version": "3.5.0",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
+      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ==",
       "engines": {
         "node": ">=12"
       }
@@ -1493,9 +1493,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.4.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.0.tgz",
-      "integrity": "sha512-XQs0S8fuAkQWuqhDeCdMlJXDX80D7EOVLDPVFkna9yQfzS+PHKgfxcei0jf6/+QAWcjqrnC8uM3fSAnrQl+XYg==",
+      "version": "7.4.3",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
+      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
@@ -2410,9 +2410,9 @@
       "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ=="
     },
     "luxon": {
-      "version": "3.4.4",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.4.4.tgz",
-      "integrity": "sha512-zobTr7akeGHnv7eBOXcRgMeCP6+uyYsczwmeRCauvpvaAltgNyTbLH/+VaEAPUeWBT+1GuNmz4wC/6jtQzbbVA=="
+      "version": "3.5.0",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
+      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ=="
     },
     "mimic-fn": {
       "version": "2.1.0",
@@ -2691,9 +2691,9 @@
       }
     },
     "tar": {
-      "version": "7.4.0",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.0.tgz",
-      "integrity": "sha512-XQs0S8fuAkQWuqhDeCdMlJXDX80D7EOVLDPVFkna9yQfzS+PHKgfxcei0jf6/+QAWcjqrnC8uM3fSAnrQl+XYg==",
+      "version": "7.4.3",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
+      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
       "requires": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
diff --git a/dev/diff/package.json b/dev/diff/package.json
index 1b5540e346..4e0e1be8f4 100644
--- a/dev/diff/package.json
+++ b/dev/diff/package.json
@@ -11,9 +11,9 @@
     "keypress": "^0.2.1",
     "listr2": "^6.6.1",
     "lodash-es": "^4.17.21",
-    "luxon": "^3.4.4",
+    "luxon": "^3.5.0",
     "pretty-bytes": "^6.1.1",
-    "tar": "^7.4.0",
+    "tar": "^7.4.3",
     "yargs": "^17.7.2"
   },
   "engines": {

From a338df16f23322b43fc57c5379d0807e61e12984 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 16 Oct 2024 13:36:54 -0300
Subject: [PATCH 090/707] fix: 404 instead of 300 for ambiguous email_or_person
 (#8004)

* fix: 404 on CommunityList name collision

* fix: 404 on ambiuous person for photo() view

* test: update tests

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/community/tests.py |  4 +--
 ietf/community/views.py | 54 ++++++++++++-----------------------------
 ietf/person/tests.py    |  4 +--
 ietf/person/views.py    |  2 +-
 4 files changed, 19 insertions(+), 45 deletions(-)

diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 181e9e0fa6..5329267d8e 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -95,9 +95,7 @@ def test_view_list_duplicates(self):
 
         url = urlreverse(ietf.community.views.view_list, kwargs={ "email_or_name": person.plain_name()})
         r = self.client.get(url)
-        self.assertEqual(r.status_code, 300)
-        self.assertIn("bazquux@example.com", r.content.decode())
-        self.assertIn("foobar@example.com", r.content.decode())
+        self.assertEqual(r.status_code, 404)
 
     def complex_person(self, *args, **kwargs):
         person = PersonFactory(*args, **kwargs)
diff --git a/ietf/community/views.py b/ietf/community/views.py
index 78b8144d60..923ec556f3 100644
--- a/ietf/community/views.py
+++ b/ietf/community/views.py
@@ -28,11 +28,14 @@
 from ietf.utils.http import is_ajax
 from ietf.utils.response import permission_denied
 
-class MultiplePersonError(Exception):
-    """More than one Person record matches the given email or name"""
-    pass
 
 def lookup_community_list(request, email_or_name=None, acronym=None):
+    """Finds a CommunityList for a person or group
+    
+    Instantiates an unsaved CommunityList if one is not found.
+    
+    If the person or group cannot be found and uniquely identified, raises an Http404 exception
+    """
     assert email_or_name or acronym
 
     if acronym:
@@ -44,19 +47,14 @@ def lookup_community_list(request, email_or_name=None, acronym=None):
             if hasattr(request.user, 'person') and request.user.person in persons:
                 person = request.user.person
             else:
-                raise MultiplePersonError("\r\n".join([p.user.username for p in persons]))
+                raise Http404(f"Unable to identify the CommunityList for {email_or_name}")
         else:
             person = persons[0]
         clist = CommunityList.objects.filter(person=person).first() or CommunityList(person=person)
-
     return clist
 
 def view_list(request, email_or_name=None):
-    try:
-        clist = lookup_community_list(request, email_or_name)
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
-
+    clist = lookup_community_list(request, email_or_name)  # may raise Http404
     docs = docs_tracked_by_community_list(clist)
     docs, meta = prepare_document_table(request, docs, request.GET)
 
@@ -76,10 +74,7 @@ def view_list(request, email_or_name=None):
 def manage_list(request, email_or_name=None, acronym=None):
     # we need to be a bit careful because clist may not exist in the
     # database so we can't call related stuff on it yet
-    try:
-        clist = lookup_community_list(request, email_or_name, acronym)
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
+    clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
 
     if not can_manage_community_list(request.user, clist):
         permission_denied(request, "You do not have permission to access this view")
@@ -166,10 +161,7 @@ def track_document(request, name, email_or_name=None, acronym=None):
     doc = get_object_or_404(Document, name=name)
 
     if request.method == "POST":
-        try:
-            clist = lookup_community_list(request, email_or_name, acronym)
-        except MultiplePersonError as err:
-            return HttpResponse(str(err), status=300)
+        clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
         if not can_manage_community_list(request.user, clist):
             permission_denied(request, "You do not have permission to access this view")
 
@@ -191,10 +183,7 @@ def track_document(request, name, email_or_name=None, acronym=None):
 @login_required
 def untrack_document(request, name, email_or_name=None, acronym=None):
     doc = get_object_or_404(Document, name=name)
-    try:
-        clist = lookup_community_list(request, email_or_name, acronym)
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
+    clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
     if not can_manage_community_list(request.user, clist):
         permission_denied(request, "You do not have permission to access this view")
 
@@ -214,11 +203,7 @@ def untrack_document(request, name, email_or_name=None, acronym=None):
 
 @ignore_view_kwargs("group_type")
 def export_to_csv(request, email_or_name=None, acronym=None):
-    try:
-        clist = lookup_community_list(request, email_or_name, acronym)
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
-
+    clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
     response = HttpResponse(content_type='text/csv')
 
     if clist.group:
@@ -259,11 +244,7 @@ def export_to_csv(request, email_or_name=None, acronym=None):
 
 @ignore_view_kwargs("group_type")
 def feed(request, email_or_name=None, acronym=None):
-    try:
-        clist = lookup_community_list(request, email_or_name, acronym)
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
-
+    clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
     significant = request.GET.get('significant', '') == '1'
 
     documents = docs_tracked_by_community_list(clist).values_list('pk', flat=True)
@@ -299,12 +280,9 @@ def feed(request, email_or_name=None, acronym=None):
 @login_required
 @ignore_view_kwargs("group_type")
 def subscription(request, email_or_name=None, acronym=None):
-    try:
-        clist = lookup_community_list(request, email_or_name, acronym)
-        if clist.pk is None:
-            raise Http404
-    except MultiplePersonError as err:
-        return HttpResponse(str(err), status=300)
+    clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
+    if clist.pk is None:
+        raise Http404
 
     person = request.user.person
 
diff --git a/ietf/person/tests.py b/ietf/person/tests.py
index 9da201b707..61d9b0ed70 100644
--- a/ietf/person/tests.py
+++ b/ietf/person/tests.py
@@ -173,9 +173,7 @@ def test_person_photo_duplicates(self):
 
         url = urlreverse("ietf.person.views.photo", kwargs={ "email_or_name": person.plain_name()})
         r = self.client.get(url)
-        self.assertEqual(r.status_code, 300)
-        self.assertIn("bazquux@example.com", r.content.decode())
-        self.assertIn("foobar@example.com", r.content.decode())
+        self.assertEqual(r.status_code, 404)
 
     def test_name_methods(self):
         person = PersonFactory(name="Dr. Jens F. Möller", )
diff --git a/ietf/person/views.py b/ietf/person/views.py
index 6d9daf4a81..bb1fa79f84 100644
--- a/ietf/person/views.py
+++ b/ietf/person/views.py
@@ -76,7 +76,7 @@ def profile(request, email_or_name):
 def photo(request, email_or_name):
     persons = lookup_persons(email_or_name)
     if len(persons) > 1:
-        return HttpResponse(r"\r\n".join([p.user.username for p in persons]), status=300)
+        raise Http404("No photo found")
     person = persons[0]
     if not person.photo:
         raise Http404("No photo found")

From de2e66ede3396e40baf6e20caf3f85736c9d50aa Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 17 Oct 2024 18:23:13 -0300
Subject: [PATCH 091/707] feat: report xml2rfc errors for submissions (#8000)

* feat: capture xml2rfc output on exception

* fix: chain exception properly

* feat: log xml2rfc stderr/stdout

May want to pass these back to the submitter, but
let's watch them to see what sorts of sanitizing we
should do first.

* Revert "feat: log xml2rfc stderr/stdout"

This reverts commit 959c54d30733a4a3df7ed0250fef347ed6f03a08.

* feat: log xml2rfc stderr/stdout

This time without reformatting all the imports

* feat: path sanitization for submission errors

* fix: parentheses in regex

* test: test SubmissionError sanitization

* style: consolidate imports

* fix: apply sanitization to all args

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/submit/tests.py |  38 +++++++++++--
 ietf/submit/utils.py | 128 +++++++++++++++++++++++++++++++++++++------
 2 files changed, 144 insertions(+), 22 deletions(-)

diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index ed28c7ef02..21ed6672df 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -27,11 +27,6 @@
 from django.utils.encoding import force_str
 import debug                            # pyflakes:ignore
 
-from ietf.submit.utils import (expirable_submissions, expire_submission, find_submission_filenames,
-                               post_submission, validate_submission_name, validate_submission_rev,
-                               process_and_accept_uploaded_submission, SubmissionError, process_submission_text,
-                               process_submission_xml, process_uploaded_submission, 
-                               process_and_validate_submission)
 from ietf.doc.factories import (DocumentFactory, WgDraftFactory, IndividualDraftFactory,
                                 ReviewFactory, WgRfcFactory)
 from ietf.doc.models import ( Document, DocEvent, State,
@@ -49,7 +44,12 @@
 from ietf.submit.forms import SubmissionBaseUploadForm, SubmissionAutoUploadForm
 from ietf.submit.models import Submission, Preapproval, SubmissionExtResource
 from ietf.submit.tasks import cancel_stale_submissions, process_and_accept_uploaded_submission_task
-from ietf.submit.utils import apply_yang_checker_to_draft, run_all_yang_model_checks
+from ietf.submit.utils import (expirable_submissions, expire_submission, find_submission_filenames,
+                               post_submission, validate_submission_name, validate_submission_rev,
+                               process_and_accept_uploaded_submission, SubmissionError, process_submission_text,
+                               process_submission_xml, process_uploaded_submission, 
+                               process_and_validate_submission, apply_yang_checker_to_draft, 
+                               run_all_yang_model_checks)
 from ietf.utils import tool_version
 from ietf.utils.accesstoken import generate_access_token
 from ietf.utils.mail import outbox, get_payload_text
@@ -3384,3 +3384,29 @@ def test_apply_yang_checker_to_draft(self):
         apply_yang_checker_to_draft(checker, draft)
         self.assertEqual(checker.check_file_txt.call_args, mock.call(draft.get_file_name()))
 
+
+@override_settings(IDSUBMIT_REPOSITORY_PATH="/some/path/", IDSUBMIT_STAGING_PATH="/some/other/path")
+class SubmissionErrorTests(TestCase):
+    def test_sanitize_message(self):
+        sanitized = SubmissionError.sanitize_message(
+            "This refers to /some/path/with-a-file\n"
+            "and also /some/other/path/with-a-different-file isn't that neat?\n"
+            "and has /some/path//////with-slashes"
+        )
+        self.assertEqual(
+            sanitized,
+            "This refers to **/with-a-file\n"
+            "and also **/with-a-different-file isn't that neat?\n"
+            "and has **/with-slashes"
+        )
+    
+    @mock.patch.object(SubmissionError, "sanitize_message")
+    def test_submissionerror(self, mock_sanitize_message):
+        SubmissionError()
+        self.assertFalse(mock_sanitize_message.called)
+        SubmissionError("hi", "there")
+        self.assertTrue(mock_sanitize_message.called)
+        self.assertCountEqual(
+            mock_sanitize_message.call_args_list,
+            [mock.call("hi"), mock.call("there")],
+        )
diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index c814b84657..e6cbcb12f7 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -17,6 +17,7 @@
 from shutil import move
 from typing import Optional, Union  # pyflakes:ignore
 from unidecode import unidecode
+from xml2rfc import RfcWriterError
 from xym import xym
 
 from django.conf import settings
@@ -918,8 +919,51 @@ def accept_submission_requires_group_approval(submission):
 
 
 class SubmissionError(Exception):
-    """Exception for errors during submission processing"""
-    pass
+    """Exception for errors during submission processing
+    
+    Sanitizes paths appearing in exception messages.
+    """
+    def __init__(self, *args):
+        if len(args) > 0:
+            args = (self.sanitize_message(arg) for arg in args)
+        super().__init__(*args)
+
+    @staticmethod
+    def sanitize_message(msg):
+        # Paths likely to appear in submission-related errors
+        paths = [
+            p for p in (
+                getattr(settings, "ALL_ID_DOWNLOAD_DIR", None),
+                getattr(settings, "BIBXML_BASE_PATH", None),
+                getattr(settings, "DERIVED_DIR", None),
+                getattr(settings, "FTP_DIR", None),
+                getattr(settings, "IDSUBMIT_REPOSITORY_PATH", None),
+                getattr(settings, "IDSUBMIT_STAGING_PATH", None),
+                getattr(settings, "INTERNET_ALL_DRAFTS_ARCHIVE_DIR", None),
+                getattr(settings, "INTERNET_DRAFT_PATH", None),
+                getattr(settings, "INTERNET_DRAFT_ARCHIVE_DIR", None),
+                getattr(settings, "INTERNET_DRAFT_PDF_PATH", None),
+                getattr(settings, "RFC_PATH", None),
+                getattr(settings, "SUBMIT_YANG_CATALOG_MODEL_DIR", None),
+                getattr(settings, "SUBMIT_YANG_DRAFT_MODEL_DIR", None),
+                getattr(settings, "SUBMIT_YANG_IANA_MODEL_DIR", None),
+                getattr(settings, "SUBMIT_YANG_RFC_MODEL_DIR", None),
+                "/tmp/",
+            ) if p is not None
+        ]
+        return re.sub(fr"({'|'.join(paths)})/*", "**/", msg)
+
+
+class XmlRfcError(SubmissionError):
+    """SubmissionError caused by xml2rfc
+    
+    Includes the output from xml2rfc, if any, in xml2rfc_stdout / xml2rfc_stderr
+    """
+    def __init__(self, *args, xml2rfc_stdout: str, xml2rfc_stderr: str):
+        super().__init__(*args)
+        self.xml2rfc_stderr = xml2rfc_stderr
+        self.xml2rfc_stdout = xml2rfc_stdout
+
 
 class InconsistentRevisionError(SubmissionError):
     """SubmissionError caused by an inconsistent revision"""
@@ -937,27 +981,55 @@ def render_missing_formats(submission):
     If a txt file already exists, leaves it in place. Overwrites an existing html file
     if there is one.
     """
-    xml2rfc.log.write_out = io.StringIO()   # open(os.devnull, "w")
-    xml2rfc.log.write_err = io.StringIO()   # open(os.devnull, "w")
+    # Capture stdio/stdout from xml2rfc
+    xml2rfc_stdout = io.StringIO()
+    xml2rfc_stderr = io.StringIO()
+    xml2rfc.log.write_out = xml2rfc_stdout
+    xml2rfc.log.write_err = xml2rfc_stderr
     xml_path = staging_path(submission.name, submission.rev, '.xml')
     parser = xml2rfc.XmlRfcParser(str(xml_path), quiet=True)
-    # --- Parse the xml ---
-    xmltree = parser.parse(remove_comments=False)
+    try:
+        # --- Parse the xml ---
+        xmltree = parser.parse(remove_comments=False)
+    except Exception as err:
+        raise XmlRfcError(
+            "Error parsing XML",
+            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+        ) from err
     # If we have v2, run it through v2v3. Keep track of the submitted version, though.
     xmlroot = xmltree.getroot()
     xml_version = xmlroot.get('version', '2')
     if xml_version == '2':
         v2v3 = xml2rfc.V2v3XmlWriter(xmltree)
-        xmltree.tree = v2v3.convert2to3()
+        try:
+            xmltree.tree = v2v3.convert2to3()
+        except Exception as err:
+            raise XmlRfcError(
+                "Error converting v2 XML to v3",
+                xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+                xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+            ) from err
 
     # --- Prep the xml ---
     today = date_today()
     prep = xml2rfc.PrepToolWriter(xmltree, quiet=True, liberal=True, keep_pis=[xml2rfc.V3_PI_TARGET])
     prep.options.accept_prepped = True
     prep.options.date = today
-    xmltree.tree = prep.prep()
-    if xmltree.tree == None:
-        raise SubmissionError(f'Error from xml2rfc (prep): {prep.errors}')
+    try:
+        xmltree.tree = prep.prep()
+    except RfcWriterError:
+        raise XmlRfcError(
+            f"Error during xml2rfc prep: {prep.errors}",
+            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+        )
+    except Exception as err:
+        raise XmlRfcError(
+            "Unexpected error during xml2rfc prep",
+            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+        ) from err
 
     # --- Convert to txt ---
     txt_path = staging_path(submission.name, submission.rev, '.txt')
@@ -965,7 +1037,14 @@ def render_missing_formats(submission):
         writer = xml2rfc.TextWriter(xmltree, quiet=True)
         writer.options.accept_prepped = True
         writer.options.date = today
-        writer.write(txt_path)
+        try:
+            writer.write(txt_path)
+        except Exception as err:
+            raise XmlRfcError(
+                "Error generating text format from XML",
+            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+            ) from err
         log.log(
             'In %s: xml2rfc %s generated %s from %s (version %s)' % (
                 str(xml_path.parent),
@@ -980,7 +1059,14 @@ def render_missing_formats(submission):
     html_path = staging_path(submission.name, submission.rev, '.html')
     writer = xml2rfc.HtmlWriter(xmltree, quiet=True)
     writer.options.date = today
-    writer.write(str(html_path))
+    try:
+        writer.write(str(html_path))
+    except Exception as err:
+        raise XmlRfcError(
+            "Error generating HTML format from XML",
+            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
+            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+        ) from err
     log.log(
         'In %s: xml2rfc %s generated %s from %s (version %s)' % (
             str(xml_path.parent),
@@ -1263,7 +1349,7 @@ def process_submission_text(filename, revision):
 def process_and_validate_submission(submission):
     """Process and validate a submission
 
-    Raises SubmissionError if an error is encountered.
+    Raises SubmissionError or a subclass if an error is encountered.
     """
     if len(set(submission.file_types.split(",")).intersection({".xml", ".txt"})) == 0:
         raise SubmissionError("Require XML and/or text format to process an Internet-Draft submission.")
@@ -1273,7 +1359,16 @@ def process_and_validate_submission(submission):
         # Parse XML first, if we have it
         if ".xml" in submission.file_types:
             xml_metadata = process_submission_xml(submission.name, submission.rev)
-            render_missing_formats(submission)  # makes HTML and text, unless text was uploaded
+            try:
+                render_missing_formats(submission)  # makes HTML and text, unless text was uploaded
+            except XmlRfcError as err:
+                # log stdio/stderr
+                log.log(
+                    f"xml2rfc failure when rendering missing formats for {submission.name}-{submission.rev}:\n"
+                    f">> stdout:\n{err.xml2rfc_stdout}\n"
+                    f">> stderr:\n{err.xml2rfc_stderr}"
+                )
+                raise
         # Parse text, whether uploaded or generated from XML
         text_metadata = process_submission_text(submission.name, submission.rev)
 
@@ -1332,11 +1427,11 @@ def process_and_validate_submission(submission):
             raise SubmissionError('Checks failed: ' + ' / '.join(errors))
     except SubmissionError:
         raise  # pass SubmissionErrors up the stack
-    except Exception:
+    except Exception as err:
         # convert other exceptions into SubmissionErrors
         log.log(f'Unexpected exception while processing submission {submission.pk}.')
         log.log(traceback.format_exc())
-        raise SubmissionError('A system error occurred while processing the submission.')
+        raise SubmissionError('A system error occurred while processing the submission.') from err
 
 
 def submitter_is_author(submission):
@@ -1428,6 +1523,7 @@ def process_uploaded_submission(submission):
         create_submission_event(None, submission, desc="Uploaded submission (diverted to manual process)")
         send_manual_post_request(None, submission, errors=dict(consistency=str(consistency_error)))
     except SubmissionError as err:
+        # something generic went wrong
         submission.refresh_from_db()  # guard against incomplete changes in submission validation / processing
         cancel_submission(submission)  # changes Submission.state
         create_submission_event(None, submission, f"Submission rejected: {err}")

From 9c56ba9a0a53b6b92aa1cc0ac97764e976bf1463 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 17 Oct 2024 18:23:34 -0300
Subject: [PATCH 092/707] fix: drop, not bounce, uninteresting ipr emails
 (#8057)

* fix: drop, not bounce, uninteresting ipr emails

* chore: log to address

* chore: unused import
---
 ietf/ipr/mail.py                              | 35 +++++++----
 ietf/ipr/management/commands/process_email.py |  4 +-
 ietf/ipr/tests.py                             | 59 +++++++++++++------
 ietf/ipr/utils.py                             | 13 ++--
 4 files changed, 72 insertions(+), 39 deletions(-)

diff --git a/ietf/ipr/mail.py b/ietf/ipr/mail.py
index 842426d820..167b11956c 100644
--- a/ietf/ipr/mail.py
+++ b/ietf/ipr/mail.py
@@ -171,31 +171,44 @@ def message_from_message(message,by=None):
     )
     return msg
 
+
+class UndeliverableIprResponseError(Exception):
+    """Response email could not be delivered and should be treated as an error"""
+
+
 def process_response_email(msg):
-    """Saves an incoming message.  msg=string.  Message "To" field is expected to
-    be in the format ietf-ipr+[identifier]@ietf.org.  Expect to find a message with
-    a matching value in the reply_to field, associated to an IPR disclosure through
-    IprEvent.  Create a Message object for the incoming message and associate it to
-    the original message via new IprEvent"""
+    """Save an incoming IPR response email message
+    
+    Message "To" field is expected to be in the format ietf-ipr+[identifier]@ietf.org. If
+    the address or identifier is missing, the message will be silently dropped.
+
+    Expect to find a message with a matching value in the reply_to field, associated to an
+    IPR disclosure through IprEvent. If it cannot be matched, raises UndeliverableIprResponseError 
+    
+    Creates a Message object for the incoming message and associates it to
+    the original message via new IprEvent
+    """
     message = message_from_bytes(force_bytes(msg))
     to = message.get('To', '')
 
     # exit if this isn't a response we're interested in (with plus addressing)
-    local,domain = get_base_ipr_request_address().split('@')
+    local, domain = get_base_ipr_request_address().split('@')
     if not re.match(r'^{}\+[a-zA-Z0-9_\-]{}@{}'.format(local,'{16}',domain),to):
-        return None
-    
+        _from = message.get("From", "<unknown>")
+        log(f"Ignoring IPR email without a message identifier from {_from} to {to}")
+        return
+
     try:
         to_message = Message.objects.get(reply_to=to)
     except Message.DoesNotExist:
         log('Error finding matching message ({})'.format(to))
-        return None
+        raise UndeliverableIprResponseError(f"Unable to find message matching {to}")
 
     try:
         disclosure = to_message.msgevents.first().disclosure
     except:
         log('Error processing message ({})'.format(to))
-        return None
+        raise UndeliverableIprResponseError("Error processing message for {to}")
 
     ietf_message = message_from_message(message)
     IprEvent.objects.create(
@@ -207,4 +220,4 @@ def process_response_email(msg):
     )
     
     log("Received IPR email from %s" % ietf_message.frm)
-    return ietf_message
+
diff --git a/ietf/ipr/management/commands/process_email.py b/ietf/ipr/management/commands/process_email.py
index 0b15fb0651..616cade5c4 100644
--- a/ietf/ipr/management/commands/process_email.py
+++ b/ietf/ipr/management/commands/process_email.py
@@ -9,7 +9,7 @@
 from django.core.management import CommandError
 
 from ietf.utils.management.base import EmailOnFailureCommand
-from ietf.ipr.mail import process_response_email
+from ietf.ipr.mail import process_response_email, UndeliverableIprResponseError
 
 import debug                            # pyflakes:ignore
 
@@ -31,7 +31,7 @@ def handle(self, *args, **options):
             self.msg_bytes = sys.stdin.buffer.read()
         try:
             process_response_email(self.msg_bytes)
-        except ValueError as e:
+        except (ValueError, UndeliverableIprResponseError) as e:
             raise CommandError(e)
 
     failure_subject = 'Error during ipr email processing'
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 3c70567fd8..d72018f10b 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -4,6 +4,7 @@
 
 import datetime
 import mock
+import re
 
 from pyquery import PyQuery
 from urllib.parse import quote, urlparse
@@ -35,9 +36,9 @@
 )
 from ietf.ipr.forms import DraftForm, HolderIprDisclosureForm
 from ietf.ipr.mail import (process_response_email, get_reply_to, get_update_submitter_emails,
-    get_pseudo_submitter, get_holders, get_update_cc_addrs)
-from ietf.ipr.models import (IprDisclosureBase,GenericIprDisclosure,HolderIprDisclosure,
-    ThirdPartyIprDisclosure)
+                           get_pseudo_submitter, get_holders, get_update_cc_addrs, UndeliverableIprResponseError)
+from ietf.ipr.models import (IprDisclosureBase, GenericIprDisclosure, HolderIprDisclosure,
+                             ThirdPartyIprDisclosure, IprEvent)
 from ietf.ipr.templatetags.ipr_filters import no_revisions_message
 from ietf.ipr.utils import get_genitive, get_ipr_summary, ingest_response_email
 from ietf.mailtrigger.utils import gather_address_lists
@@ -712,7 +713,7 @@ def test_notify_generic(self):
         )
         self.assertIn(f'{settings.IDTRACKER_BASE_URL}{urlreverse("ietf.ipr.views.showlist")}', get_payload_text(outbox[1]).replace('\n',' '))
 
-    def send_ipr_email_helper(self):
+    def send_ipr_email_helper(self) -> tuple[str, IprEvent, HolderIprDisclosure]:
         ipr = HolderIprDisclosureFactory()
         url = urlreverse('ietf.ipr.views.email',kwargs={ "id": ipr.id })
         self.client.login(username="secretary", password="secretary+password")
@@ -730,10 +731,11 @@ def send_ipr_email_helper(self):
         q = Message.objects.filter(reply_to=data['reply_to'])
         self.assertEqual(q.count(),1)
         event = q[0].msgevents.first()
+        assert event is not None
         self.assertTrue(event.response_past_due())
         self.assertEqual(len(outbox), 1)
         self.assertTrue('joe@test.com' in outbox[0]['To'])
-        return data['reply_to'], event
+        return data['reply_to'], event, ipr
 
     uninteresting_ipr_message_strings = [
         ("To: {to}\nCc: {cc}\nFrom: joe@test.com\nDate: {date}\nSubject: test\n"),
@@ -747,34 +749,46 @@ def send_ipr_email_helper(self):
 
     def test_process_response_email(self):
         # first send a mail
-        reply_to, event = self.send_ipr_email_helper()
+        reply_to, event, _ = self.send_ipr_email_helper()
 
         # test process response uninteresting messages
         addrs = gather_address_lists('ipr_disclosure_submitted').as_strings()
         for message_string in self.uninteresting_ipr_message_strings:
-            result = process_response_email(
+            process_response_email(
                 message_string.format(
                     to=addrs.to,
                     cc=addrs.cc,
                     date=timezone.now().ctime()
                 )
             )
-            self.assertIsNone(result)
-        
+
         # test process response
         message_string = """To: {}
 From: joe@test.com
 Date: {}
 Subject: test
 """.format(reply_to, timezone.now().ctime())
-        result = process_response_email(message_string)
-
-        self.assertIsInstance(result, Message)
+        process_response_email(message_string)
         self.assertFalse(event.response_past_due())
 
+        # test with an unmatchable message identifier
+        bad_reply_to = re.sub(
+            r"\+.{16}@",
+            '+0123456789abcdef@',
+            reply_to,
+        )
+        self.assertNotEqual(reply_to, bad_reply_to)
+        message_string = f"""To: {bad_reply_to}
+        From: joe@test.com
+        Date: {timezone.now().ctime()}
+        Subject: test
+        """
+        with self.assertRaises(UndeliverableIprResponseError):
+            process_response_email(message_string)
+
     def test_process_response_email_with_invalid_encoding(self):
         """Interesting emails with invalid encoding should be handled"""
-        reply_to, _ = self.send_ipr_email_helper()
+        reply_to, _, disclosure = self.send_ipr_email_helper()
         # test process response
         message_string = """To: {}
 From: joe@test.com
@@ -782,8 +796,8 @@ def test_process_response_email_with_invalid_encoding(self):
 Subject: test
 """.format(reply_to, timezone.now().ctime())
         message_bytes = message_string.encode('utf8') + b'\nInvalid stuff: \xfe\xff\n'
-        result = process_response_email(message_bytes)
-        self.assertIsInstance(result, Message)
+        process_response_email(message_bytes)
+        result = IprEvent.objects.filter(disclosure=disclosure).first().message  # newest
         # \ufffd is a rhombus character with an inverse ?, used to replace invalid characters
         self.assertEqual(result.body, 'Invalid stuff: \ufffd\ufffd\n\n',  # not sure where the extra \n is from
                          'Invalid characters should be replaced with \ufffd characters')
@@ -798,8 +812,7 @@ def test_process_response_email_uninteresting_with_invalid_encoding(self):
                                 cc=addrs.cc,
                                 date=timezone.now().ctime(),
             ).encode('utf8') + b'\nInvalid stuff: \xfe\xff\n'
-            result = process_response_email(message_bytes)
-            self.assertIsNone(result)
+            process_response_email(message_bytes)
 
     @override_settings(ADMINS=(("Some Admin", "admin@example.com"),))
     @mock.patch("ietf.ipr.utils.process_response_email")
@@ -816,8 +829,8 @@ def test_ingest_response_email(self, mock_process_response_email):
         self.assertEqual(mock_process_response_email.call_args, mock.call(message))
         mock_process_response_email.reset_mock()
         
-        mock_process_response_email.side_effect = None
-        mock_process_response_email.return_value = None  # rejected message
+        mock_process_response_email.side_effect = UndeliverableIprResponseError
+        mock_process_response_email.return_value = None
         with self.assertRaises(EmailIngestionError) as context:
             ingest_response_email(message)
         self.assertIsNone(context.exception.as_emailmessage())  # should not send an email on a clean rejection
@@ -825,6 +838,14 @@ def test_ingest_response_email(self, mock_process_response_email):
         self.assertEqual(mock_process_response_email.call_args, mock.call(message))
         mock_process_response_email.reset_mock()
 
+        mock_process_response_email.side_effect = None
+        mock_process_response_email.return_value = None  # ignored message
+        ingest_response_email(message)  # should not raise an exception
+        self.assertIsNone(context.exception.as_emailmessage())  # should not send an email on ignored message
+        self.assertTrue(mock_process_response_email.called)
+        self.assertEqual(mock_process_response_email.call_args, mock.call(message))
+        mock_process_response_email.reset_mock()
+
         # successful operation
         mock_process_response_email.return_value = MessageFactory()
         ingest_response_email(message)
diff --git a/ietf/ipr/utils.py b/ietf/ipr/utils.py
index 42d485ccad..8f0b9cf3f2 100644
--- a/ietf/ipr/utils.py
+++ b/ietf/ipr/utils.py
@@ -3,7 +3,7 @@
 
 from textwrap import dedent
 
-from ietf.ipr.mail import process_response_email
+from ietf.ipr.mail import process_response_email, UndeliverableIprResponseError
 from ietf.ipr.models import IprDocRel
 
 import debug                            # pyflakes:ignore
@@ -92,7 +92,11 @@ def generate_draft_recursive_txt():
 def ingest_response_email(message: bytes):
     from ietf.api.views import EmailIngestionError  # avoid circular import
     try:
-        result = process_response_email(message)
+        process_response_email(message)
+    except UndeliverableIprResponseError:
+        # Message was rejected due to some problem the sender can fix, so bounce but don't send
+        # an email to the admins
+        raise EmailIngestionError("IPR response rejected", email_body=None)
     except Exception as err:
         # Message was rejected due to an unhandled exception. This is likely something
         # the admins need to address, so send them a copy of the email.
@@ -106,8 +110,3 @@ def ingest_response_email(message: bytes):
             email_original_message=message,
             email_attach_traceback=True,
         ) from err
-
-    if result is None:
-        # Message was rejected due to some problem the sender can fix, so bounce but don't send
-        # an email to the admins
-        raise EmailIngestionError("IPR response rejected", email_body=None)

From 9303aaf5f7d1722f727ded1372f04ae11043dcce Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 21:07:51 -0400
Subject: [PATCH 093/707] ci: Update build.yml

---
 .github/workflows/build.yml | 125 ++++++++++++++++++++++++++++++------
 1 file changed, 105 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3887661cac..1ab42ae80a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -234,31 +234,116 @@ jobs:
         docker-compose.yml
         EOL
 
-    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
-    
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+    - name: Launch build VM
+      id: azlaunch
+      run: |
+        echo "Authenticating to Azure..."
+        az login --service-principal -u ${{ secrets.AZ_BUILD_APP_ID }} -p ${{ secrets.AZ_BUILD_PWD }} --tenant ${{ secrets.AZ_BUILD_TENANT_ID }}
+        echo "Creating VM..."
+        vminfo=$(az vm create \
+          --resource-group ghaDatatracker \
+          --name tmpGhaBuildVM \
+          --image Ubuntu2404 \
+          --admin-username azureuser \
+          --generate-ssh-keys \
+          --priority Spot \
+          --size Standard_D8as_v6 \
+          --max-price -1 \
+          --os-disk-size-gb 30 \
+          --eviction-policy Delete \
+          --nic-delete-option Delete \
+          --output tsv \
+          --query "publicIpAddress")
+        echo "ipaddr=$vminfo" >> "$GITHUB_OUTPUT"
+        echo "VM Public IP: $vminfo"
+        cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
+        ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
-    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+    - name: Copy build files
+      uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634
       with:
-        registry: ghcr.io
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
+        host: ${{ steps.azlaunch.outputs.ipaddr }}
+        port: 22
+        username: azureuser
+        key_path: ${{ github.workspace }}/prvkey.key
+        source: "${{ github.workspace }},!${{ github.workspace }}/.git,!${{ github.workspace }}/prvkey.key"
+        target: /workspace
 
-    - name: Build Release Docker Image
-      uses: docker/build-push-action@v6
+    - name: Remote SSH into Build VM
+      uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
       env:
-        DOCKER_BUILD_SUMMARY: false
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GITHUB_ACTOR: ${{ github.actor }}
+        PKG_VERSION: ${{ env.PKG_VERSION }}
       with:
-        context: .
-        file: dev/build/Dockerfile
-        platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
-        push: true
-        tags: ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
-        cache-from: type=gha
-        cache-to: type=gha,mode=max
+        host: ${{ steps.azlaunch.outputs.ipaddr }}
+        port: 22
+        username: azureuser
+        command_timeout: 60m
+        key_path: ${{ github.workspace }}/prvkey.key
+        envs: GITHUB_TOKEN
+        script_stop: true
+        script: |
+          export DEBIAN_FRONTEND=noninteractive
+          lsb_release -a
+          sudo apt-get update
+          sudo apt-get upgrade -y
+          
+          echo "Installing Docker..."
+          curl -fsSL https://get.docker.com -o get-docker.sh
+          sudo sh get-docker.sh
+
+          echo "Login to ghcr.io..."
+          echo $GITHUB_TOKEN | docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
+          
+          echo "Building Images..."
+          cd /workspace
+          ls
+
+    - name: Destroy Build VM + resources
+      if: always()
+      shell: pwsh
+      run: |
+        echo "Destroying VM..."        
+        az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
+
+        $resourceOrderRemovalOrder = [ordered]@{
+            "Microsoft.Compute/virtualMachines" = 0
+            "Microsoft.Compute/disks" = 1
+            "Microsoft.Network/networkInterfaces" = 2
+            "Microsoft.Network/publicIpAddresses" = 3
+            "Microsoft.Network/networkSecurityGroups" = 4
+            "Microsoft.Network/virtualNetworks" = 5
+        }
+        echo "Fetching remaining resources..."
+        $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
+
+        $orderedResources = $resources 
+            | Sort-Object @{
+                Expression = {$resourceOrderRemovalOrder[$_.type]}
+                Descending = $False
+            }
+
+        echo "Deleting remaining resources..."
+        $orderedResources | ForEach-Object {
+            az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
+        }
+
+        echo "Logout from Azure..."
+        az logout
+
+    # - name: Build Release Docker Image
+    #   uses: docker/build-push-action@v6
+    #   env:
+    #     DOCKER_BUILD_SUMMARY: false
+    #   with:
+    #     context: .
+    #     file: dev/build/Dockerfile
+    #     platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
+    #     push: true
+    #     tags: ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
+    #     cache-from: type=gha
+    #     cache-to: type=gha,mode=max
         
     - name: Update CHANGELOG
       id: changelog

From 5c2369362d7474d9e62de10b2a9bedbf44e691ed Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 21:12:46 -0400
Subject: [PATCH 094/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1ab42ae80a..07aca3794c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -243,7 +243,7 @@ jobs:
         vminfo=$(az vm create \
           --resource-group ghaDatatracker \
           --name tmpGhaBuildVM \
-          --image Ubuntu2404 \
+          --image Ubuntu2204 \
           --admin-username azureuser \
           --generate-ssh-keys \
           --priority Spot \

From bbfbb25844d412a227d2b801714eb86c61a77ba7 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 21:46:58 -0400
Subject: [PATCH 095/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 07aca3794c..158ce19107 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -247,7 +247,7 @@ jobs:
           --admin-username azureuser \
           --generate-ssh-keys \
           --priority Spot \
-          --size Standard_D8as_v6 \
+          --size Standard_D8as_v5 \
           --max-price -1 \
           --os-disk-size-gb 30 \
           --eviction-policy Delete \

From 453ddc87ecfb3f9f668adb085d1f9558780c9b50 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:15:27 -0400
Subject: [PATCH 096/707] ci: Update build.yml

---
 .github/workflows/build.yml | 188 +++++++++++++++++++-----------------
 1 file changed, 101 insertions(+), 87 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 158ce19107..55c9b0a1b2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -156,83 +156,6 @@ jobs:
       with:
         fetch-depth: 1
         fetch-tags: false
-        
-    - name: Setup Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: '16'
-    
-    - name: Setup Python
-      uses: actions/setup-python@v5
-      with:
-        python-version: '3.x'
-        
-    - name: Download a Coverage Results
-      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.1.8
-      with:
-        name: coverage
-
-    - name: Make Release Build
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        BROWSERSLIST_IGNORE_OLD_DATA: 1
-      run: |
-        echo "PKG_VERSION: $PKG_VERSION"
-        echo "GITHUB_SHA: $GITHUB_SHA"
-        echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
-        echo "Running frontend build script..."
-        echo "Compiling native node packages..."
-        yarn rebuild
-        echo "Packaging static assets..."
-        yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
-        yarn legacy:build
-        echo "Setting version $PKG_VERSION..."
-        sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
-        sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
-        sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
-
-    - name: Set Production Flags
-      if: ${{ env.SHOULD_DEPLOY == 'true' }}
-      run: |
-        echo "Setting production flags in settings.py..."
-        sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
-        
-    - name: Make Release Tarball
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        echo "Build release tarball..."
-        mkdir -p /home/runner/work/release
-        tar -czf /home/runner/work/release/release.tar.gz -X dev/build/exclude-patterns.txt .
-
-    - name: Collect + Push Statics
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
-        AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
-        AWS_DEFAULT_REGION: auto
-        AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
-      run: |
-        echo "Collecting statics..."
-        docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
-        echo "Pushing statics..."
-        cd static
-        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
-
-    - name: Augment dockerignore for docker image build
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        cat >> .dockerignore <<EOL
-        .devcontainer
-        .github
-        .vscode
-        k8s
-        playwright
-        svn-history
-        docker-compose.yml
-        EOL
 
     - name: Launch build VM
       id: azlaunch
@@ -259,22 +182,33 @@ jobs:
         cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
-    - name: Copy build files
-      uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634
-      with:
-        host: ${{ steps.azlaunch.outputs.ipaddr }}
-        port: 22
-        username: azureuser
-        key_path: ${{ github.workspace }}/prvkey.key
-        source: "${{ github.workspace }},!${{ github.workspace }}/.git,!${{ github.workspace }}/prvkey.key"
-        target: /workspace
+    # - name: Copy build files
+    #   uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634
+    #   with:
+    #     host: ${{ steps.azlaunch.outputs.ipaddr }}
+    #     port: 22
+    #     username: azureuser
+    #     key_path: ${{ github.workspace }}/prvkey.key
+    #     source: "${{ github.workspace }},!${{ github.workspace }}/.git,!${{ github.workspace }}/prvkey.key"
+    #     target: /workspace
 
     - name: Remote SSH into Build VM
       uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         GITHUB_ACTOR: ${{ github.actor }}
+        GITHUB_SHA: ${{ github.sha }}
+        GITHUB_REF_NAME: ${{ github.ref_name }}
+        GITHUB_RUN_ID: ${{ github.run_id }}
+        AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
+        AWS_DEFAULT_REGION: auto
+        AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
         PKG_VERSION: ${{ env.PKG_VERSION }}
+        SHOULD_DEPLOY: ${{ env.SHOULD_DEPLOY }}
+        SKIP_TESTS: ${{ github.event.inputs.skiptests }}
+        DEBIAN_FRONTEND: noninteractive
+        BROWSERSLIST_IGNORE_OLD_DATA: 1
       with:
         host: ${{ steps.azlaunch.outputs.ipaddr }}
         port: 22
@@ -295,10 +229,90 @@ jobs:
 
           echo "Login to ghcr.io..."
           echo $GITHUB_TOKEN | docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
+
+          echo "Installing GH CLI..."
+          (type -p wget >/dev/null || (sudo apt update && sudo apt-get install wget -y)) \
+          	&& sudo mkdir -p -m 755 /etc/apt/keyrings \
+          	&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
+          	&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+          	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
+          	&& sudo apt update \
+          	&& sudo apt install gh -y
+
+          echo "Installing AWS CLI..."
+          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
+          unzip awscliv2.zip
+          sudo ./aws/install
+
+          echo "Install Node.js..."
+          curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh
+          sudo bash nodesource_setup.sh
+          sudo apt-get install -y nodejs
+          sudo corepack enable
+
+          echo "Install Python 3.x..."
+          sudo apt-get install python3 python3-dev -y
+          python3 --version
+
+          echo "Clone project..."
+          sudo mkdir -p /workspace
+          sudo chown azureuser /workspace
+          cd /workspace
+          gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags
+          cd datatracker
+
+          if [ "$SHOULD_DEPLOY" = false ] || [ "$GITHUB_REF_NAME" = release ] ; then
+            echo "Downloading coverage..."
+            gh run download $GITHUB_RUN_ID -n coverage
+          fi
+
+          echo "Building project..."
+          echo "PKG_VERSION: $PKG_VERSION"
+          echo "GITHUB_SHA: $GITHUB_SHA"
+          echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
+          echo "Running frontend build script..."
+          echo "Compiling native node packages..."
+          yarn rebuild
+          echo "Packaging static assets..."
+          yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
+          yarn legacy:build
+          echo "Setting version $PKG_VERSION..."
+          sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
+          sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
+          sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
+
+          if [ "$SHOULD_DEPLOY" = true ] ; then
+            echo "Setting production flags in settings.py..."
+            sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
+          fi
+
+          echo "Build release tarball..."
+          mkdir -p /workspace/release
+          tar -czf /workspace/release.tar.gz -X dev/build/exclude-patterns.txt .
+
+          echo "Collecting statics..."
+          docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
+          
+          echo "Pushing statics..."
+          cd static
+          aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
+          cd ..
+
+          echo "Augment dockerignore for docker image build..."
+          cat >> .dockerignore <<EOL
+          .devcontainer
+          .github
+          .vscode
+          k8s
+          playwright
+          svn-history
+          docker-compose.yml
+          EOL
           
           echo "Building Images..."
-          cd /workspace
           ls
+          echo "Error!" 1>&2
+          exit 64
 
     - name: Destroy Build VM + resources
       if: always()

From a074cd4b85f6584e63fa7491cfd0d464bb83279e Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:25:14 -0400
Subject: [PATCH 097/707] ci: Update build.yml

---
 .github/workflows/build.yml | 35 +++++++++++++++++++++++++++++++----
 1 file changed, 31 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 55c9b0a1b2..cc7b622036 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -222,15 +222,21 @@ jobs:
           lsb_release -a
           sudo apt-get update
           sudo apt-get upgrade -y
-          
+
+          echo "=========================================================================="
           echo "Installing Docker..."
+          echo "=========================================================================="
           curl -fsSL https://get.docker.com -o get-docker.sh
           sudo sh get-docker.sh
 
+          echo "=========================================================================="
           echo "Login to ghcr.io..."
-          echo $GITHUB_TOKEN | docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
+          echo "=========================================================================="
+          echo $GITHUB_TOKEN | sudo docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
 
+          echo "=========================================================================="
           echo "Installing GH CLI..."
+          echo "=========================================================================="
           (type -p wget >/dev/null || (sudo apt update && sudo apt-get install wget -y)) \
           	&& sudo mkdir -p -m 755 /etc/apt/keyrings \
           	&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
@@ -239,22 +245,30 @@ jobs:
           	&& sudo apt update \
           	&& sudo apt install gh -y
 
+          echo "=========================================================================="
           echo "Installing AWS CLI..."
+          echo "=========================================================================="
           curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
           unzip awscliv2.zip
           sudo ./aws/install
 
+          echo "=========================================================================="
           echo "Install Node.js..."
+          echo "=========================================================================="
           curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh
           sudo bash nodesource_setup.sh
           sudo apt-get install -y nodejs
           sudo corepack enable
 
+          echo "=========================================================================="
           echo "Install Python 3.x..."
+          echo "=========================================================================="
           sudo apt-get install python3 python3-dev -y
           python3 --version
 
+          echo "=========================================================================="
           echo "Clone project..."
+          echo "=========================================================================="
           sudo mkdir -p /workspace
           sudo chown azureuser /workspace
           cd /workspace
@@ -262,11 +276,15 @@ jobs:
           cd datatracker
 
           if [ "$SHOULD_DEPLOY" = false ] || [ "$GITHUB_REF_NAME" = release ] ; then
+            echo "=========================================================================="
             echo "Downloading coverage..."
+            echo "=========================================================================="
             gh run download $GITHUB_RUN_ID -n coverage
           fi
 
+          echo "=========================================================================="
           echo "Building project..."
+          echo "=========================================================================="
           echo "PKG_VERSION: $PKG_VERSION"
           echo "GITHUB_SHA: $GITHUB_SHA"
           echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
@@ -282,23 +300,30 @@ jobs:
           sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
 
           if [ "$SHOULD_DEPLOY" = true ] ; then
+            echo "=========================================================================="
             echo "Setting production flags in settings.py..."
+            echo "=========================================================================="
             sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
           fi
 
+          echo "=========================================================================="
           echo "Build release tarball..."
+          echo "=========================================================================="
           mkdir -p /workspace/release
           tar -czf /workspace/release.tar.gz -X dev/build/exclude-patterns.txt .
 
+          echo "=========================================================================="
           echo "Collecting statics..."
+          echo "=========================================================================="
           docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
-          
           echo "Pushing statics..."
           cd static
           aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
           cd ..
 
+          echo "=========================================================================="
           echo "Augment dockerignore for docker image build..."
+          echo "=========================================================================="
           cat >> .dockerignore <<EOL
           .devcontainer
           .github
@@ -308,8 +333,10 @@ jobs:
           svn-history
           docker-compose.yml
           EOL
-          
+
+          echo "=========================================================================="
           echo "Building Images..."
+          echo "=========================================================================="
           ls
           echo "Error!" 1>&2
           exit 64

From a104360ace7ce04944cb603ddf4eff5adf47663d Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:31:50 -0400
Subject: [PATCH 098/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cc7b622036..3c7cf523c1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -215,7 +215,7 @@ jobs:
         username: azureuser
         command_timeout: 60m
         key_path: ${{ github.workspace }}/prvkey.key
-        envs: GITHUB_TOKEN
+        envs: GITHUB_TOKEN,GITHUB_ACTOR,GITHUB_SHA,GITHUB_REF_NAME,GITHUB_RUN_ID,AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_DEFAULT_REGION,AWS_ENDPOINT_URL,PKG_VERSION,SHOULD_DEPLOY,SKIP_TESTS,DEBIAN_FRONTEND,BROWSERSLIST_IGNORE_OLD_DATA
         script_stop: true
         script: |
           export DEBIAN_FRONTEND=noninteractive

From 60553adee4303ffb95f1a4a238d7d72e4805fe68 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:37:43 -0400
Subject: [PATCH 099/707] ci: Update build.yml

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3c7cf523c1..877e7dc95a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -222,6 +222,7 @@ jobs:
           lsb_release -a
           sudo apt-get update
           sudo apt-get upgrade -y
+          sudo apt-get install wget unzip curl -y
 
           echo "=========================================================================="
           echo "Installing Docker..."
@@ -237,8 +238,7 @@ jobs:
           echo "=========================================================================="
           echo "Installing GH CLI..."
           echo "=========================================================================="
-          (type -p wget >/dev/null || (sudo apt update && sudo apt-get install wget -y)) \
-          	&& sudo mkdir -p -m 755 /etc/apt/keyrings \
+          sudo mkdir -p -m 755 /etc/apt/keyrings \
           	&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
           	&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
           	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \

From b324d75583efab775d68141567ca2ddf7bcb75c8 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:46:56 -0400
Subject: [PATCH 100/707] ci: Update build.yml

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 877e7dc95a..4eb03f4604 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -275,7 +275,7 @@ jobs:
           gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags
           cd datatracker
 
-          if [ "$SHOULD_DEPLOY" = false ] || [ "$GITHUB_REF_NAME" = release ] ; then
+          if [ "$SHOULD_DEPLOY" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then
             echo "=========================================================================="
             echo "Downloading coverage..."
             echo "=========================================================================="
@@ -299,7 +299,7 @@ jobs:
           sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
           sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
 
-          if [ "$SHOULD_DEPLOY" = true ] ; then
+          if [ "$SHOULD_DEPLOY" = "true" ] ; then
             echo "=========================================================================="
             echo "Setting production flags in settings.py..."
             echo "=========================================================================="

From 400bbca958442926917d1df49dd5fb8b0b2f27f9 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 17 Oct 2024 23:56:15 -0400
Subject: [PATCH 101/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4eb03f4604..0d4e7932d4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -275,7 +275,7 @@ jobs:
           gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags
           cd datatracker
 
-          if [ "$SHOULD_DEPLOY" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then
+          if [ "$SKIP_TESTS" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then
             echo "=========================================================================="
             echo "Downloading coverage..."
             echo "=========================================================================="

From ebc7cde351afcfb1869af92749c046354523c39a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 00:04:37 -0400
Subject: [PATCH 102/707] ci: Update build.yml

---
 .github/workflows/build.yml | 64 ++++++++++++++++++-------------------
 1 file changed, 32 insertions(+), 32 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0d4e7932d4..e69b4e31c2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -258,7 +258,7 @@ jobs:
           curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh
           sudo bash nodesource_setup.sh
           sudo apt-get install -y nodejs
-          sudo corepack enable
+          corepack enable
 
           echo "=========================================================================="
           echo "Install Python 3.x..."
@@ -341,37 +341,37 @@ jobs:
           echo "Error!" 1>&2
           exit 64
 
-    - name: Destroy Build VM + resources
-      if: always()
-      shell: pwsh
-      run: |
-        echo "Destroying VM..."        
-        az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
-
-        $resourceOrderRemovalOrder = [ordered]@{
-            "Microsoft.Compute/virtualMachines" = 0
-            "Microsoft.Compute/disks" = 1
-            "Microsoft.Network/networkInterfaces" = 2
-            "Microsoft.Network/publicIpAddresses" = 3
-            "Microsoft.Network/networkSecurityGroups" = 4
-            "Microsoft.Network/virtualNetworks" = 5
-        }
-        echo "Fetching remaining resources..."
-        $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
-
-        $orderedResources = $resources 
-            | Sort-Object @{
-                Expression = {$resourceOrderRemovalOrder[$_.type]}
-                Descending = $False
-            }
-
-        echo "Deleting remaining resources..."
-        $orderedResources | ForEach-Object {
-            az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
-        }
-
-        echo "Logout from Azure..."
-        az logout
+    # - name: Destroy Build VM + resources
+    #   if: always()
+    #   shell: pwsh
+    #   run: |
+    #     echo "Destroying VM..."        
+    #     az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
+
+    #     $resourceOrderRemovalOrder = [ordered]@{
+    #         "Microsoft.Compute/virtualMachines" = 0
+    #         "Microsoft.Compute/disks" = 1
+    #         "Microsoft.Network/networkInterfaces" = 2
+    #         "Microsoft.Network/publicIpAddresses" = 3
+    #         "Microsoft.Network/networkSecurityGroups" = 4
+    #         "Microsoft.Network/virtualNetworks" = 5
+    #     }
+    #     echo "Fetching remaining resources..."
+    #     $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
+
+    #     $orderedResources = $resources 
+    #         | Sort-Object @{
+    #             Expression = {$resourceOrderRemovalOrder[$_.type]}
+    #             Descending = $False
+    #         }
+
+    #     echo "Deleting remaining resources..."
+    #     $orderedResources | ForEach-Object {
+    #         az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
+    #     }
+
+    #     echo "Logout from Azure..."
+    #     az logout
 
     # - name: Build Release Docker Image
     #   uses: docker/build-push-action@v6

From 324e09af5ae375d0d80908818ad2686854168b84 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 00:12:49 -0400
Subject: [PATCH 103/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e69b4e31c2..92f4e93b5b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -258,7 +258,7 @@ jobs:
           curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh
           sudo bash nodesource_setup.sh
           sudo apt-get install -y nodejs
-          corepack enable
+          sudo corepack enable
 
           echo "=========================================================================="
           echo "Install Python 3.x..."

From aa36fca2805f144f45a4ebd7e4d2813a239ca2e1 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 00:27:00 -0400
Subject: [PATCH 104/707] ci: Update build.yml

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 92f4e93b5b..c3112c460e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -255,7 +255,7 @@ jobs:
           echo "=========================================================================="
           echo "Install Node.js..."
           echo "=========================================================================="
-          curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh
+          curl -fsSL https://deb.nodesource.com/setup_18.x -o nodesource_setup.sh
           sudo bash nodesource_setup.sh
           sudo apt-get install -y nodejs
           sudo corepack enable

From dce23818b6d11e8ddddee32c83c84cb38b45d762 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 00:33:56 -0400
Subject: [PATCH 105/707] ci: Update build.yml

---
 .github/workflows/build.yml | 64 ++++++++++++++++++-------------------
 1 file changed, 32 insertions(+), 32 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c3112c460e..f54ab43aa2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -315,7 +315,7 @@ jobs:
           echo "=========================================================================="
           echo "Collecting statics..."
           echo "=========================================================================="
-          docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
+          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
           echo "Pushing statics..."
           cd static
           aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
@@ -341,37 +341,37 @@ jobs:
           echo "Error!" 1>&2
           exit 64
 
-    # - name: Destroy Build VM + resources
-    #   if: always()
-    #   shell: pwsh
-    #   run: |
-    #     echo "Destroying VM..."        
-    #     az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
-
-    #     $resourceOrderRemovalOrder = [ordered]@{
-    #         "Microsoft.Compute/virtualMachines" = 0
-    #         "Microsoft.Compute/disks" = 1
-    #         "Microsoft.Network/networkInterfaces" = 2
-    #         "Microsoft.Network/publicIpAddresses" = 3
-    #         "Microsoft.Network/networkSecurityGroups" = 4
-    #         "Microsoft.Network/virtualNetworks" = 5
-    #     }
-    #     echo "Fetching remaining resources..."
-    #     $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
-
-    #     $orderedResources = $resources 
-    #         | Sort-Object @{
-    #             Expression = {$resourceOrderRemovalOrder[$_.type]}
-    #             Descending = $False
-    #         }
-
-    #     echo "Deleting remaining resources..."
-    #     $orderedResources | ForEach-Object {
-    #         az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
-    #     }
-
-    #     echo "Logout from Azure..."
-    #     az logout
+    - name: Destroy Build VM + resources
+      if: always()
+      shell: pwsh
+      run: |
+        echo "Destroying VM..."        
+        az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
+
+        $resourceOrderRemovalOrder = [ordered]@{
+            "Microsoft.Compute/virtualMachines" = 0
+            "Microsoft.Compute/disks" = 1
+            "Microsoft.Network/networkInterfaces" = 2
+            "Microsoft.Network/publicIpAddresses" = 3
+            "Microsoft.Network/networkSecurityGroups" = 4
+            "Microsoft.Network/virtualNetworks" = 5
+        }
+        echo "Fetching remaining resources..."
+        $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
+
+        $orderedResources = $resources 
+            | Sort-Object @{
+                Expression = {$resourceOrderRemovalOrder[$_.type]}
+                Descending = $False
+            }
+
+        echo "Deleting remaining resources..."
+        $orderedResources | ForEach-Object {
+            az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
+        }
+
+        echo "Logout from Azure..."
+        az logout
 
     # - name: Build Release Docker Image
     #   uses: docker/build-push-action@v6

From d9d191fba56a77297cb20c5cbd634406fff79b12 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 00:57:31 -0400
Subject: [PATCH 106/707] ci: Update build.yml

---
 .github/workflows/build.yml | 38 ++++++++++++-------------------------
 1 file changed, 12 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f54ab43aa2..48113ffb30 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -182,16 +182,6 @@ jobs:
         cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
-    # - name: Copy build files
-    #   uses: appleboy/scp-action@917f8b81dfc1ccd331fef9e2d61bdc6c8be94634
-    #   with:
-    #     host: ${{ steps.azlaunch.outputs.ipaddr }}
-    #     port: 22
-    #     username: azureuser
-    #     key_path: ${{ github.workspace }}/prvkey.key
-    #     source: "${{ github.workspace }},!${{ github.workspace }}/.git,!${{ github.workspace }}/prvkey.key"
-    #     target: /workspace
-
     - name: Remote SSH into Build VM
       uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
       env:
@@ -337,9 +327,12 @@ jobs:
           echo "=========================================================================="
           echo "Building Images..."
           echo "=========================================================================="
-          ls
-          echo "Error!" 1>&2
-          exit 64
+          sudo docker buildx build --file dev/build/Dockerfile --platform linux/amd64,linux/arm64 --tag ghcr.io/ietf-tools/datatracker:$PKG_VERSION --push .
+
+    - name: Fetch release tarball
+      run: |
+        mkdir -p /home/runner/work/release
+        scp -i ${{ github.workspace }}/prvkey.key azureuser@${{ steps.azlaunch.outputs.ipaddr }}:/workspace/release.tar.gz /home/runner/work/release/release.tar.gz
 
     - name: Destroy Build VM + resources
       if: always()
@@ -372,19 +365,6 @@ jobs:
 
         echo "Logout from Azure..."
         az logout
-
-    # - name: Build Release Docker Image
-    #   uses: docker/build-push-action@v6
-    #   env:
-    #     DOCKER_BUILD_SUMMARY: false
-    #   with:
-    #     context: .
-    #     file: dev/build/Dockerfile
-    #     platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
-    #     push: true
-    #     tags: ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
-    #     cache-from: type=gha
-    #     cache-to: type=gha,mode=max
         
     - name: Update CHANGELOG
       id: changelog
@@ -396,6 +376,12 @@ jobs:
         toTag: ${{ env.TO_TAG }}
         writeToFile: false
 
+    - name: Download Coverage Results
+      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
+      uses: actions/download-artifact@v4.1.8
+      with:
+        name: coverage
+
     - name: Prepare Coverage Action
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
       working-directory: ./dev/coverage-action

From 8b417470fd0697f95bb4e809b87b6f84a355c020 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 01:07:21 -0400
Subject: [PATCH 107/707] ci: Update build.yml

---
 .github/workflows/build.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 48113ffb30..3a7779494a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -219,6 +219,10 @@ jobs:
           echo "=========================================================================="
           curl -fsSL https://get.docker.com -o get-docker.sh
           sudo sh get-docker.sh
+          sudo docker buildx create \
+            --name container-builder \
+            --driver docker-container \
+            --bootstrap --use
 
           echo "=========================================================================="
           echo "Login to ghcr.io..."

From d26bd5f4204c48743ca363adfd0d9036cc910d6a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 01:37:58 -0400
Subject: [PATCH 108/707] ci: Update build.yml

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3a7779494a..104b29c3fe 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -336,6 +336,7 @@ jobs:
     - name: Fetch release tarball
       run: |
         mkdir -p /home/runner/work/release
+        chmod 0600 ${{ github.workspace }}/prvkey.key
         scp -i ${{ github.workspace }}/prvkey.key azureuser@${{ steps.azlaunch.outputs.ipaddr }}:/workspace/release.tar.gz /home/runner/work/release/release.tar.gz
 
     - name: Destroy Build VM + resources

From 9873439cdcc12e50a283e3db763b575bedd53adb Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Oct 2024 04:06:34 -0400
Subject: [PATCH 109/707] ci: Update build.yml

---
 .github/workflows/build.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 104b29c3fe..756600cc1e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -170,9 +170,10 @@ jobs:
           --admin-username azureuser \
           --generate-ssh-keys \
           --priority Spot \
-          --size Standard_D8as_v5 \
+          --size Standard_D8ads_v5 \
           --max-price -1 \
-          --os-disk-size-gb 30 \
+          --ephemeral-os-disk \
+          --os-disk-size-gb 100 \
           --eviction-policy Delete \
           --nic-delete-option Delete \
           --output tsv \

From 888101005148703bc06df73265cd310ed7b1e178 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 21 Oct 2024 16:45:36 -0500
Subject: [PATCH 110/707] feat: explicit names for meetecho recordings (#8062)

* feat: explicit names for meetecho recordings

* fix: better regex and kebab-styled-endpoint-name

* fix: spaces around comparison operator
---
 ietf/api/tests.py                             | 66 ++++++++++++++++++-
 ietf/api/urls.py                              |  4 +-
 .../0009_session_meetecho_recording_name.py   | 20 ++++++
 ietf/meeting/models.py                        | 15 +++--
 ietf/meeting/tests_models.py                  |  6 +-
 ietf/meeting/views.py                         | 39 +++++++++++
 6 files changed, 143 insertions(+), 7 deletions(-)
 create mode 100644 ietf/meeting/migrations/0009_session_meetecho_recording_name.py

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 4f2a7f7d3c..97e928dc51 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2015-2020, All Rights Reserved
+# Copyright The IETF Trust 2015-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
 import base64
 import datetime
@@ -222,6 +222,70 @@ def test_api_set_session_video_url(self):
         event = doc.latest_event()
         self.assertEqual(event.by, recman)
 
+    def test_api_set_meetecho_recording_name(self):
+        url = urlreverse("ietf.meeting.views.api_set_meetecho_recording_name")
+        recmanrole = RoleFactory(group__type_id="ietf", name_id="recman")
+        recman = recmanrole.person
+        meeting = MeetingFactory(type_id="ietf")
+        session = SessionFactory(group__type_id="wg", meeting=meeting)
+        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        name = "testname"
+
+        # error cases
+        r = self.client.post(url, {})
+        self.assertContains(r, "Missing apikey parameter", status_code=400)
+
+        badrole = RoleFactory(group__type_id="ietf", name_id="ad")
+        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badrole.person.user.last_login = timezone.now()
+        badrole.person.user.save()
+        r = self.client.post(url, {"apikey": badapikey.hash()})
+        self.assertContains(r, "Restricted to role: Recording Manager", status_code=403)
+
+        r = self.client.post(url, {"apikey": apikey.hash()})
+        self.assertContains(r, "Too long since last regular login", status_code=400)
+        recman.user.last_login = timezone.now()
+        recman.user.save()
+
+        r = self.client.get(url, {"apikey": apikey.hash()})
+        self.assertContains(r, "Method not allowed", status_code=405)
+
+        r = self.client.post(url, {"apikey": apikey.hash()})
+        self.assertContains(r, "Missing session_id parameter", status_code=400)
+
+        r = self.client.post(url, {"apikey": apikey.hash(), "session_id": session.pk})
+        self.assertContains(r, "Missing name parameter", status_code=400)
+
+        bad_pk = int(Session.objects.order_by("-pk").first().pk) + 1
+        r = self.client.post(
+            url,
+            {
+                "apikey": apikey.hash(),
+                "session_id": bad_pk,
+                "name": name,
+            },
+        )
+        self.assertContains(r, "Session not found", status_code=400)
+
+        r = self.client.post(
+            url,
+            {
+                "apikey": apikey.hash(),
+                "session_id": "foo",
+                "name": name,
+            },
+        )
+        self.assertContains(r, "Invalid session_id", status_code=400)
+
+        r = self.client.post(
+            url, {"apikey": apikey.hash(), "session_id": session.pk, "name": name}
+        )
+        self.assertContains(r, "Done", status_code=200)
+
+        session.refresh_from_db()
+        self.assertEqual(session.meetecho_recording_name, name)
+
+
     def test_api_add_session_attendees_deprecated(self):
         # Deprecated test - should be removed when we stop accepting a simple list of user PKs in
         # the add_session_attendees() view
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 48525dfda2..431ad5c5d4 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2017, All Rights Reserved
+# Copyright The IETF Trust 2017-2024, All Rights Reserved
 
 from django.conf import settings
 from django.urls import include
@@ -39,6 +39,8 @@
     url(r'^iesg/position', views_ballot.api_set_position),
     # Let Meetecho set session video URLs
     url(r'^meeting/session/video/url$', meeting_views.api_set_session_video_url),
+    # Let Meetecho tell us the name of its recordings
+    url(r'^meeting/session/recording-name$', meeting_views.api_set_meetecho_recording_name),
     # Meeting agenda + floorplan data
     url(r'^meeting/(?P<num>[A-Za-z0-9._+-]+)/agenda-data$', meeting_views.api_get_agenda_data),
     # Meeting session materials
diff --git a/ietf/meeting/migrations/0009_session_meetecho_recording_name.py b/ietf/meeting/migrations/0009_session_meetecho_recording_name.py
new file mode 100644
index 0000000000..79ca4919a3
--- /dev/null
+++ b/ietf/meeting/migrations/0009_session_meetecho_recording_name.py
@@ -0,0 +1,20 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("meeting", "0008_remove_schedtimesessassignment_notes"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="session",
+            name="meetecho_recording_name",
+            field=models.CharField(
+                blank=True, help_text="Name of the meetecho recording", max_length=64
+            ),
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index e169077800..8c6fb97413 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1042,6 +1042,7 @@ class Session(models.Model):
     on_agenda = models.BooleanField(default=True, help_text='Is this session visible on the meeting agenda?')
     has_onsite_tool = models.BooleanField(default=False, help_text="Does this session use the officially supported onsite and remote tooling?")
     chat_room = models.CharField(blank=True, max_length=32, help_text='Name of Zulip stream, if different from group acronym')
+    meetecho_recording_name = models.CharField(blank=True, max_length=64, help_text="Name of the meetecho recording")
 
     tombstone_for = models.ForeignKey('Session', blank=True, null=True, help_text="This session is the tombstone for a session that was rescheduled", on_delete=models.CASCADE)
 
@@ -1332,17 +1333,23 @@ def onsite_tool_url(self):
         return None
 
     def _session_recording_url_label(self):
+        otsa = self.official_timeslotassignment()
+        if otsa is None:
+            return None
         if self.meeting.type.slug == "ietf" and self.has_onsite_tool:
-            session_label = f"IETF{self.meeting.number}-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+            session_label = f"IETF{self.meeting.number}-{self.group.acronym.upper()}-{otsa.timeslot.time.strftime('%Y%m%d-%H%M')}"
         else:
-            session_label = f"IETF-{self.group.acronym.upper()}-{self.official_timeslotassignment().timeslot.time.strftime('%Y%m%d-%H%M')}"
+            session_label = f"IETF-{self.group.acronym.upper()}-{otsa.timeslot.time.strftime('%Y%m%d-%H%M')}"
         return session_label
 
     def session_recording_url(self):
         url_formatter = getattr(settings, "MEETECHO_SESSION_RECORDING_URL", "")
         url = None
-        if url_formatter and self.video_stream_url:
-            url = url_formatter.format(session_label=self._session_recording_url_label())
+        name = self.meetecho_recording_name
+        if name is None or name.strip() == "":
+            name = self._session_recording_url_label()
+        if url_formatter.strip() != "" and name is not None:
+            url = url_formatter.format(session_label=name)
         return url
 
 
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index 8457423c51..03b706e1d7 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2021, All Rights Reserved
+# Copyright The IETF Trust 2021-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
 """Tests of models in the Meeting application"""
 import datetime
@@ -172,6 +172,10 @@ def test_session_recording_url(self, mock):
                 settings.MEETECHO_SESSION_RECORDING_URL = "http://player.example.com?{session_label}"
                 self.assertEqual(session.session_recording_url(), "http://player.example.com?LABEL")
 
+                session.meetecho_recording_name="actualname"
+                session.save()
+                self.assertEqual(session.session_recording_url(), "http://player.example.com?actualname")
+
     def test_session_recording_url_label_ietf(self):
         session = SessionFactory(
             meeting__type_id='ietf',
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 6e6c4dfe23..bce6ccd1bf 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4270,6 +4270,45 @@ class OldUploadRedirect(RedirectView):
     def get_redirect_url(self, **kwargs):
         return reverse_lazy('ietf.meeting.views.session_details',kwargs=self.kwargs)
 
+
+@require_api_key
+@role_required("Recording Manager")
+@csrf_exempt
+def api_set_meetecho_recording_name(request):
+    """Set name for meetecho recording
+
+    parameters:
+        apikey: the poster's personal API key
+        session_id: id of the session to update
+        name: the name to use for the recording at meetecho player
+    """
+    def err(code, text):
+        return HttpResponse(text, status=code, content_type='text/plain')
+
+    if request.method != "POST":
+        return HttpResponseNotAllowed(
+            content="Method not allowed", content_type="text/plain", permitted_methods=('POST',)
+        )
+
+    session_id = request.POST.get('session_id', None)
+    if session_id is None:
+        return err(400, 'Missing session_id parameter')
+    name = request.POST.get('name', None)
+    if name is None:
+        return err(400, 'Missing name parameter')
+
+    try:
+        session = Session.objects.get(pk=session_id)
+    except Session.DoesNotExist:
+        return err(400, f"Session not found with session_id '{session_id}'")
+    except ValueError:
+        return err(400, "Invalid session_id: {session_id}")
+
+    session.meetecho_recording_name = name
+    session.save()
+
+    return HttpResponse("Done", status=200, content_type='text/plain')
+
 @require_api_key
 @role_required('Recording Manager')
 @csrf_exempt

From 1e193377df7cca32656c6bb062cea0a5ac3680f3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 21 Oct 2024 18:48:51 -0300
Subject: [PATCH 111/707] ci: replace nginx default.conf (#8063)

* ci: squash nginx default.conf

* ci: replace nginx default.conf for auth
---
 k8s/auth.yaml        | 2 +-
 k8s/datatracker.yaml | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index c92ed05163..2bdb064447 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -84,7 +84,7 @@ spec:
               mountPath: /etc/nginx/conf.d/00logging.conf
               subPath: nginx-logging.conf
             - name: dt-cfg
-              mountPath: /etc/nginx/conf.d/auth.conf
+              mountPath: /etc/nginx/conf.d/default.conf
               subPath: nginx-auth.conf
         # -----------------------------------------------------
         # ScoutAPM Container
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index a8a9675687..3d9e86a29d 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -84,7 +84,8 @@ spec:
               mountPath: /etc/nginx/conf.d/00logging.conf
               subPath: nginx-logging.conf
             - name: dt-cfg
-              mountPath: /etc/nginx/conf.d/datatracker.conf
+              # Replaces the original default.conf
+              mountPath: /etc/nginx/conf.d/default.conf
               subPath: nginx-datatracker.conf
         # -----------------------------------------------------
         # ScoutAPM Container

From c26ba974baa50a8f95e0b112f7cab90d007f3302 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 22 Oct 2024 12:51:16 -0300
Subject: [PATCH 112/707] refactor: use form for search_submission (#8065)

* refactor: use form for search_submission

* chore: remove lint

* style: Black
---
 ietf/submit/forms.py                         | 10 +++
 ietf/submit/views.py                         | 93 ++++++++++++++------
 ietf/templates/submit/search_submission.html |  8 +-
 3 files changed, 77 insertions(+), 34 deletions(-)

diff --git a/ietf/submit/forms.py b/ietf/submit/forms.py
index 2781d3365a..bed87b77c2 100644
--- a/ietf/submit/forms.py
+++ b/ietf/submit/forms.py
@@ -659,3 +659,13 @@ def __init__(self, *args, **kwargs):
         self.fields['frm'].label='From'
         self.fields['frm'].widget.attrs['readonly'] = True
         self.fields['reply_to'].widget.attrs['readonly'] = True
+
+
+class SubmissionSearchForm(forms.Form):
+    """Form used for search_submission"""
+
+    name = forms.CharField(max_length=255, required=True, label="I-D name")
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        self.fields["name"].widget.attrs["placeholder"] = "draft-..."
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index 3f745741e4..f710bdeb0c 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -26,17 +26,47 @@
 from ietf.ietfauth.utils import has_role, role_required
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.person.models import Email
-from ietf.submit.forms import (SubmissionAutoUploadForm, AuthorForm, SubmitterForm, EditSubmissionForm,
-                               PreapprovalForm, ReplacesForm, SubmissionManualUploadForm)
+from ietf.submit.forms import (
+    SubmissionAutoUploadForm,
+    AuthorForm,
+    SubmitterForm,
+    EditSubmissionForm,
+    PreapprovalForm,
+    ReplacesForm,
+    SubmissionManualUploadForm,
+    SubmissionSearchForm,
+)
 from ietf.submit.mail import send_full_url, send_manual_post_request
-from ietf.submit.models import (Submission, Preapproval, SubmissionExtResource,
-    DraftSubmissionStateName )
-from ietf.submit.tasks import process_uploaded_submission_task, process_and_accept_uploaded_submission_task, poke
-from ietf.submit.utils import ( approvable_submissions_for_user, preapprovals_for_user,
-    recently_approved_by_user, validate_submission, create_submission_event, docevent_from_submission,
-    post_submission, cancel_submission, rename_submission_files, remove_submission_files,
-    get_submission, save_files, clear_existing_files, accept_submission, accept_submission_requires_group_approval,
-    accept_submission_requires_prev_auth_approval, update_submission_external_resources)
+from ietf.submit.models import (
+    Submission,
+    Preapproval,
+    SubmissionExtResource,
+    DraftSubmissionStateName,
+)
+from ietf.submit.tasks import (
+    process_uploaded_submission_task,
+    process_and_accept_uploaded_submission_task,
+    poke,
+)
+from ietf.submit.utils import (
+    approvable_submissions_for_user,
+    preapprovals_for_user,
+    recently_approved_by_user,
+    validate_submission,
+    create_submission_event,
+    docevent_from_submission,
+    post_submission,
+    cancel_submission,
+    rename_submission_files,
+    remove_submission_files,
+    get_submission,
+    save_files,
+    clear_existing_files,
+    accept_submission,
+    accept_submission_requires_group_approval,
+    accept_submission_requires_prev_auth_approval,
+    update_submission_external_resources,
+)
 from ietf.stats.utils import clean_country_name
 from ietf.utils.accesstoken import generate_access_token
 from ietf.utils.log import log
@@ -195,24 +225,33 @@ def api_submit_tombstone(request):
 def tool_instructions(request):
     return render(request, 'submit/tool_instructions.html', {'selected': 'instructions'})
 
+
 def search_submission(request):
-    error = None
-    name = None
-    if request.method == 'POST':
-        name = request.POST.get('name', '')
-        submission = Submission.objects.filter(name=name).order_by('-pk').first()
-        if submission:
-            return redirect(submission_status, submission_id=submission.pk)
-        else:
-            if re.search(r'-\d\d$', name):
-                submission = Submission.objects.filter(name=name[:-3]).order_by('-pk').first()
-                if submission:
-                    return redirect(submission_status, submission_id=submission.pk)
-        error = 'No valid submission found for %s' % name
-    return render(request, 'submit/search_submission.html',
-                              {'selected': 'status',
-                               'error': error,
-                               'name': name})
+    if request.method == "POST":
+        form = SubmissionSearchForm(request.POST)
+        if form.is_valid():
+            name = form.cleaned_data["name"]
+            submission = Submission.objects.filter(name=name).order_by("-pk").first()
+            if submission:
+                return redirect(submission_status, submission_id=submission.pk)
+            else:
+                if re.search(r"-\d\d$", name):
+                    submission = (
+                        Submission.objects.filter(name=name[:-3])
+                        .order_by("-pk")
+                        .first()
+                    )
+                    if submission:
+                        return redirect(submission_status, submission_id=submission.pk)
+            form.add_error(None, f"No valid submission found for {name}")
+    else:
+        form = SubmissionSearchForm()
+    return render(
+        request,
+        "submit/search_submission.html",
+        {"selected": "status", "form": form},
+    )
+
 
 def can_edit_submission(user, submission, access_token):
     key_matched = access_token and submission.access_token() == access_token
diff --git a/ietf/templates/submit/search_submission.html b/ietf/templates/submit/search_submission.html
index 3f827abbea..807d6d7d86 100644
--- a/ietf/templates/submit/search_submission.html
+++ b/ietf/templates/submit/search_submission.html
@@ -12,14 +12,8 @@
     <form method="post">
         {% csrf_token %}
         <div class="mb-3">
-            <label class="form-label" for="name">I-D name</label>
-            <input type="text" class="form-control" id="name" name="name" placeholder="draft-..." required>
+            {% bootstrap_form form %}
         </div>
-        {% if error %}
-            <p class="alert alert-danger my-3">
-                {{ error }}
-            </p>
-        {% endif %}
         <button class="btn btn-primary" type="submit">See status</button>
     </form>
 {% endblock %}
\ No newline at end of file

From 2947e286f66880c17f26293cf1f02e83ab7e7e65 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 23 Oct 2024 04:51:11 -0400
Subject: [PATCH 113/707] docs: Update LICENSE

---
 LICENSE | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/LICENSE b/LICENSE
index c180fa3f9f..dc6e0c5663 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,6 +1,6 @@
 BSD 3-Clause License
 
-Copyright (c) 2008-2023, The IETF Trust
+Copyright (c) 2008-2024, The IETF Trust
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

From 3130ecd9f56f6b9b0de25b1e832e8d80c50a3c2d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 25 Oct 2024 10:52:09 -0300
Subject: [PATCH 114/707] fix: add recording-name api key endpoint; appauth url
 fix (#8081)

* fix: add endpoint option for recording-name

* chore: migration

* test: validate PersonalApiKey when used in tests

* fix: limit /api/appauth URLs as intended

* test: fix tests

* chore: fix lint

* test: PersonalApiKey create -> factory

* chore: remove unused import
---
 ietf/api/tests.py                             | 87 ++++++++++---------
 ietf/api/urls.py                              |  2 +-
 ietf/api/views.py                             |  4 +-
 ietf/doc/tests_ballot.py                      |  6 +-
 ietf/ietfauth/tests.py                        | 13 +--
 ietf/meeting/tests_views.py                   |  6 +-
 ietf/person/factories.py                      | 16 +++-
 .../0003_alter_personalapikey_endpoint.py     | 42 +++++++++
 ietf/person/models.py                         |  1 +
 9 files changed, 118 insertions(+), 59 deletions(-)
 create mode 100644 ietf/person/migrations/0003_alter_personalapikey_endpoint.py

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 97e928dc51..7dc9c42cc8 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -33,9 +33,8 @@
 from ietf.meeting.models import Session
 from ietf.nomcom.models import Volunteer
 from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
-from ietf.person.factories import PersonFactory, random_faker, EmailFactory
+from ietf.person.factories import PersonFactory, random_faker, EmailFactory, PersonalApiKeyFactory
 from ietf.person.models import Email, User
-from ietf.person.models import PersonalApiKey
 from ietf.stats.models import MeetingRegistration
 from ietf.utils.mail import empty_outbox, outbox, get_payload_text
 from ietf.utils.models import DumpInfo
@@ -71,7 +70,7 @@ def test_deprecated_api_set_session_video_url(self):
         meeting = MeetingFactory(type_id='ietf')
         session = SessionFactory(group__type_id='wg', meeting=meeting)
         group = session.group
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
         video = 'https://foo.example.com/bar/beer/'
 
         # error cases
@@ -79,7 +78,7 @@ def test_deprecated_api_set_session_video_url(self):
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole  = RoleFactory(group__type_id='ietf', name_id='ad')
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {'apikey': badapikey.hash()} )
@@ -151,7 +150,7 @@ def test_api_set_session_video_url(self):
         recman = recmanrole.person
         meeting = MeetingFactory(type_id="ietf")
         session = SessionFactory(group__type_id="wg", meeting=meeting)
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
         video = "https://foo.example.com/bar/beer/"
 
         # error cases
@@ -159,7 +158,7 @@ def test_api_set_session_video_url(self):
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole = RoleFactory(group__type_id="ietf", name_id="ad")
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {"apikey": badapikey.hash()})
@@ -228,7 +227,7 @@ def test_api_set_meetecho_recording_name(self):
         recman = recmanrole.person
         meeting = MeetingFactory(type_id="ietf")
         session = SessionFactory(group__type_id="wg", meeting=meeting)
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
         name = "testname"
 
         # error cases
@@ -236,7 +235,7 @@ def test_api_set_meetecho_recording_name(self):
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole = RoleFactory(group__type_id="ietf", name_id="ad")
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {"apikey": badapikey.hash()})
@@ -295,10 +294,10 @@ def test_api_add_session_attendees_deprecated(self):
         recman = recmanrole.person
         meeting = MeetingFactory(type_id='ietf')
         session = SessionFactory(group__type_id='wg', meeting=meeting)  
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
 
         badrole  = RoleFactory(group__type_id='ietf', name_id='ad')
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
 
@@ -361,10 +360,10 @@ def test_api_add_session_attendees(self):
         recman = recmanrole.person
         meeting = MeetingFactory(type_id="ietf")
         session = SessionFactory(group__type_id="wg", meeting=meeting)
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
 
         badrole = RoleFactory(group__type_id="ietf", name_id="ad")
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
 
@@ -517,8 +516,8 @@ def test_api_upload_polls_and_chatlog(self):
             ),
         ):
             url = urlreverse(f"ietf.meeting.views.api_upload_{type_id}")
-            apikey = PersonalApiKey.objects.create(endpoint=url, person=recmanrole.person)
-            badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+            apikey = PersonalApiKeyFactory(endpoint=url, person=recmanrole.person)
+            badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
 
             r = self.client.post(url, {})
             self.assertContains(r, "Missing apikey parameter", status_code=400)
@@ -562,7 +561,7 @@ def test_deprecated_api_upload_bluesheet(self):
         meeting = MeetingFactory(type_id='ietf')
         session = SessionFactory(group__type_id='wg', meeting=meeting)
         group = session.group
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
 
         people = [
             {"name": "Andrea Andreotti", "affiliation": "Azienda"},
@@ -579,7 +578,7 @@ def test_deprecated_api_upload_bluesheet(self):
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole = RoleFactory(group__type_id='ietf', name_id='ad')
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {'apikey': badapikey.hash()})
@@ -654,7 +653,7 @@ def test_api_upload_bluesheet(self):
         meeting = MeetingFactory(type_id="ietf")
         session = SessionFactory(group__type_id="wg", meeting=meeting)
         group = session.group
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
 
         people = [
             {"name": "Andrea Andreotti", "affiliation": "Azienda"},
@@ -671,7 +670,7 @@ def test_api_upload_bluesheet(self):
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole = RoleFactory(group__type_id="ietf", name_id="ad")
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {"apikey": badapikey.hash()})
@@ -781,14 +780,14 @@ def test_api_v2_person_export_view(self):
         url = urlreverse('ietf.api.views.ApiV2PersonExportView')
         robot = PersonFactory(user__is_staff=True)
         RoleFactory(name_id='robot', person=robot, email=robot.email(), group__acronym='secretariat')
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=robot)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=robot)
 
         # error cases
         r = self.client.post(url, {})
         self.assertContains(r, "Missing apikey parameter", status_code=400)
 
         badrole = RoleFactory(group__type_id='ietf', name_id='ad')
-        badapikey = PersonalApiKey.objects.create(endpoint=url, person=badrole.person)
+        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
         badrole.person.user.last_login = timezone.now()
         badrole.person.user.save()
         r = self.client.post(url, {'apikey': badapikey.hash()})
@@ -827,7 +826,7 @@ def test_api_new_meeting_registration(self):
         oidcp = PersonFactory(user__is_staff=True)
         # Make sure 'oidcp' has an acceptable role
         RoleFactory(name_id='robot', person=oidcp, email=oidcp.email(), group__acronym='secretariat')
-        key = PersonalApiKey.objects.create(person=oidcp, endpoint=url)
+        key = PersonalApiKeyFactory(person=oidcp, endpoint=url)
         reg['apikey'] = key.hash()
         #
         # Test valid POST
@@ -911,7 +910,7 @@ def test_api_new_meeting_registration_nomcom_volunteer(self):
         oidcp = PersonFactory(user__is_staff=True)
         # Make sure 'oidcp' has an acceptable role
         RoleFactory(name_id='robot', person=oidcp, email=oidcp.email(), group__acronym='secretariat')
-        key = PersonalApiKey.objects.create(person=oidcp, endpoint=url)
+        key = PersonalApiKeyFactory(person=oidcp, endpoint=url)
         reg['apikey'] = key.hash()
 
         # first test is_nomcom_volunteer False
@@ -945,28 +944,30 @@ def test_api_version(self):
 
 
     def test_api_appauth(self):
-        url = urlreverse('ietf.api.views.app_auth')
-        person = PersonFactory()
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=person)
-
-        self.client.login(username=person.user.username,password=f'{person.user.username}+password')
-        self.client.logout()
-
-        # error cases
-        # missing apikey
-        r = self.client.post(url, {})
-        self.assertContains(r, 'Missing apikey parameter', status_code=400)
-
-        # invalid apikey
-        r = self.client.post(url, {'apikey': 'foobar'})
-        self.assertContains(r, 'Invalid apikey', status_code=403)
-
-        # working case
-        r = self.client.post(url, {'apikey': apikey.hash()})
-        self.assertEqual(r.status_code, 200)
-        jsondata = r.json()
-        self.assertEqual(jsondata['success'], True)
+        for app in ["authortools", "bibxml"]:
+            url = urlreverse('ietf.api.views.app_auth', kwargs={"app": app})
+            person = PersonFactory()
+            apikey = PersonalApiKeyFactory(endpoint=url, person=person)
     
+            self.client.login(username=person.user.username,password=f'{person.user.username}+password')
+            self.client.logout()
+    
+            # error cases
+            # missing apikey
+            r = self.client.post(url, {})
+            self.assertContains(r, 'Missing apikey parameter', status_code=400)
+    
+            # invalid apikey
+            r = self.client.post(url, {'apikey': 'foobar'})
+            self.assertContains(r, 'Invalid apikey', status_code=403)
+    
+            # working case
+            r = self.client.post(url, {'apikey': apikey.hash()})
+            self.assertEqual(r.status_code, 200)
+            jsondata = r.json()
+            self.assertEqual(jsondata['success'], True)
+            self.client.logout()
+
     def test_api_get_session_matherials_no_agenda_meeting_url(self):
         meeting = MeetingFactory(type_id='ietf')
         session = SessionFactory(meeting=meeting)
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 431ad5c5d4..6846e32747 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -69,7 +69,7 @@
     # Datatracker version
     url(r'^version/?$', api_views.version),
     # Application authentication API key
-    url(r'^appauth/[authortools|bibxml]', api_views.app_auth),
+    url(r'^appauth/(?P<app>authortools|bibxml)$', api_views.app_auth),
     # latest versions
     url(r'^rfcdiff-latest-json/%(name)s(?:-%(rev)s)?(\.txt|\.html)?/?$' % settings.URL_REGEXPS, api_views.rfcdiff_latest_json),
     url(r'^rfcdiff-latest-json/(?P<name>[Rr][Ff][Cc] [0-9]+?)(\.txt|\.html)?/?$', api_views.rfcdiff_latest_json),
diff --git a/ietf/api/views.py b/ietf/api/views.py
index f8662f9a0e..df67cffd56 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -30,7 +30,7 @@
 from tastypie.utils.mime import determine_format, build_content_type
 from textwrap import dedent
 from traceback import format_exception, extract_tb
-from typing import Iterable, Optional
+from typing import Iterable, Optional, Literal
 
 import ietf
 from ietf.api import _api_list
@@ -251,7 +251,7 @@ def version(request):
 
 @require_api_key
 @csrf_exempt
-def app_auth(request):
+def app_auth(request, app: Literal["authortools", "bibxml"]):
     return HttpResponse(
             json.dumps({'success': True}),
             content_type='application/json')
diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index f95ba8812b..c7362b58e2 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -27,8 +27,8 @@
 from ietf.ipr.factories import HolderIprDisclosureFactory
 from ietf.name.models import BallotPositionName
 from ietf.iesg.models import TelechatDate
-from ietf.person.models import Person, PersonalApiKey
-from ietf.person.factories import PersonFactory
+from ietf.person.models import Person
+from ietf.person.factories import PersonFactory, PersonalApiKeyFactory
 from ietf.person.utils import get_active_ads
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
@@ -111,7 +111,7 @@ def test_api_set_position(self):
         create_ballot_if_not_open(None, draft, ad, 'approve')
         ad.user.last_login = timezone.now()
         ad.user.save()
-        apikey = PersonalApiKey.objects.create(endpoint=url, person=ad)
+        apikey = PersonalApiKeyFactory(endpoint=url, person=ad)
 
         # vote
         events_before = draft.docevent_set.count()
diff --git a/ietf/ietfauth/tests.py b/ietf/ietfauth/tests.py
index 722c1e8b6f..fed764e8bd 100644
--- a/ietf/ietfauth/tests.py
+++ b/ietf/ietfauth/tests.py
@@ -35,7 +35,7 @@
 from ietf.meeting.factories import MeetingFactory
 from ietf.nomcom.factories import NomComFactory
 from ietf.person.factories import PersonFactory, EmailFactory, UserFactory, PersonalApiKeyFactory
-from ietf.person.models import Person, Email, PersonalApiKey
+from ietf.person.models import Person, Email
 from ietf.person.tasks import send_apikey_usage_emails_task
 from ietf.review.factories import ReviewRequestFactory, ReviewAssignmentFactory
 from ietf.review.models import ReviewWish, UnavailablePeriod
@@ -788,9 +788,8 @@ def test_apikey_errors(self):
             self.assertContains(r, 'Invalid apikey', status_code=403)
 
             # invalid apikey (invalidated api key)
-            unauthorized_url = urlreverse('ietf.api.views.app_auth')
-            invalidated_apikey = PersonalApiKey.objects.create(
-                        endpoint=unauthorized_url, person=person, valid=False)
+            unauthorized_url = urlreverse('ietf.api.views.app_auth', kwargs={'app': 'authortools'})
+            invalidated_apikey = PersonalApiKeyFactory(endpoint=unauthorized_url, person=person, valid=False)
             r = self.client.post(unauthorized_url, {'apikey': invalidated_apikey.hash()})
             self.assertContains(r, 'Invalid apikey', status_code=403)
 
@@ -803,7 +802,11 @@ def test_apikey_errors(self):
             person.user.save()
 
             # endpoint mismatch
-            key2 = PersonalApiKey.objects.create(person=person, endpoint='/')
+            key2 = PersonalApiKeyFactory(
+                person=person,
+                endpoint='/',
+                validate_model=False,  # allow invalid endpoint
+            )
             r = self.client.post(key.endpoint, {'apikey':key2.hash(), 'dummy':'dummy',})
             self.assertContains(r, 'Apikey endpoint mismatch', status_code=400)
             key2.delete()
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 642edcb9b4..0d291f12bc 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -38,7 +38,7 @@
 from ietf.doc.models import Document, NewRevisionDocEvent
 from ietf.group.models import Group, Role, GroupFeatures
 from ietf.group.utils import can_manage_group
-from ietf.person.models import Person, PersonalApiKey
+from ietf.person.models import Person
 from ietf.meeting.helpers import can_approve_interim_request, can_request_interim_meeting, can_view_interim_request, preprocess_assignments_for_agenda
 from ietf.meeting.helpers import send_interim_approval_request, AgendaKeywordTagger
 from ietf.meeting.helpers import send_interim_meeting_cancellation_notice, send_interim_session_cancellation_notice
@@ -56,7 +56,7 @@
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, unicontent
 from ietf.utils.timezone import date_today, time_now
 
-from ietf.person.factories import PersonFactory
+from ietf.person.factories import PersonFactory, PersonalApiKeyFactory
 from ietf.group.factories import GroupFactory, GroupEventFactory, RoleFactory
 from ietf.meeting.factories import (SessionFactory, ScheduleFactory,
     SessionPresentationFactory, MeetingFactory, FloorPlanFactory,
@@ -8743,7 +8743,7 @@ def test_session_attendance(self):
         add_attendees_url = urlreverse('ietf.meeting.views.api_add_session_attendees')
         recmanrole = RoleFactory(group__type_id='ietf', name_id='recman', person__user__last_login=timezone.now())
         recman = recmanrole.person
-        apikey = PersonalApiKey.objects.create(endpoint=add_attendees_url, person=recman)
+        apikey = PersonalApiKeyFactory(endpoint=add_attendees_url, person=recman)
         attendees = [person.user.pk for person in persons]
         self.client.login(username='recman', password='recman+password')
         r = self.client.post(add_attendees_url, {'apikey':apikey.hash(), 'attended':f'{{"session_id":{session.pk},"attendees":{attendees}}}'})
diff --git a/ietf/person/factories.py b/ietf/person/factories.py
index 2012483c0d..45de554766 100644
--- a/ietf/person/factories.py
+++ b/ietf/person/factories.py
@@ -158,10 +158,22 @@ class Meta:
 
 class PersonalApiKeyFactory(factory.django.DjangoModelFactory):
     person = factory.SubFactory(PersonFactory)
-    endpoint = FuzzyChoice(PERSON_API_KEY_ENDPOINTS)
-
+    endpoint = FuzzyChoice(v for v, n in PERSON_API_KEY_ENDPOINTS)
+    
     class Meta:
         model = PersonalApiKey
+        skip_postgeneration_save = True
+
+    @factory.post_generation
+    def validate_model(obj, create, extracted, **kwargs):
+        """Validate the model after creation
+        
+        Passing validate_model=False will disable the validation.
+        """
+        do_clean =  True if extracted is None else extracted
+        if do_clean:
+            obj.full_clean()
+
 
 class PersonApiKeyEventFactory(factory.django.DjangoModelFactory):
     key = factory.SubFactory(PersonalApiKeyFactory)
diff --git a/ietf/person/migrations/0003_alter_personalapikey_endpoint.py b/ietf/person/migrations/0003_alter_personalapikey_endpoint.py
new file mode 100644
index 0000000000..202af4b101
--- /dev/null
+++ b/ietf/person/migrations/0003_alter_personalapikey_endpoint.py
@@ -0,0 +1,42 @@
+# Generated by Django 4.2.16 on 2024-10-24 21:39
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("person", "0002_alter_historicalperson_ascii_and_more"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="personalapikey",
+            name="endpoint",
+            field=models.CharField(
+                choices=[
+                    ("/api/appauth/authortools", "/api/appauth/authortools"),
+                    ("/api/appauth/bibxml", "/api/appauth/bibxml"),
+                    ("/api/iesg/position", "/api/iesg/position"),
+                    (
+                        "/api/meeting/session/recording-name",
+                        "/api/meeting/session/recording-name",
+                    ),
+                    (
+                        "/api/meeting/session/video/url",
+                        "/api/meeting/session/video/url",
+                    ),
+                    ("/api/notify/meeting/bluesheet", "/api/notify/meeting/bluesheet"),
+                    (
+                        "/api/notify/meeting/registration",
+                        "/api/notify/meeting/registration",
+                    ),
+                    ("/api/notify/session/attendees", "/api/notify/session/attendees"),
+                    ("/api/notify/session/chatlog", "/api/notify/session/chatlog"),
+                    ("/api/notify/session/polls", "/api/notify/session/polls"),
+                    ("/api/v2/person/person", "/api/v2/person/person"),
+                ],
+                max_length=128,
+            ),
+        ),
+    ]
diff --git a/ietf/person/models.py b/ietf/person/models.py
index 0c25152361..85989acfc1 100644
--- a/ietf/person/models.py
+++ b/ietf/person/models.py
@@ -376,6 +376,7 @@ def salt():
     ("/api/iesg/position", "/api/iesg/position", "Area Director"),
     ("/api/v2/person/person", "/api/v2/person/person", "Robot"),
     ("/api/meeting/session/video/url", "/api/meeting/session/video/url", "Recording Manager"),
+    ("/api/meeting/session/recording-name", "/api/meeting/session/recording-name", "Recording Manager"),
     ("/api/notify/meeting/registration", "/api/notify/meeting/registration", "Robot"),
     ("/api/notify/meeting/bluesheet", "/api/notify/meeting/bluesheet", "Recording Manager"),
     ("/api/notify/session/attendees", "/api/notify/session/attendees", "Recording Manager"),

From 6e33097f2269544c3b41064424552a5b2ed58ff8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 25 Oct 2024 10:52:27 -0300
Subject: [PATCH 115/707] chore: remove pyzmail (#8078)

Unused since a00dfc0c2771661d23b7ea413c0f324149abfb2f
---
 pyzmail/__init__.py            |  21 -
 pyzmail/generate.py            | 529 ---------------------
 pyzmail/parse.py               | 817 ---------------------------------
 pyzmail/tests/__init__.py      |   0
 pyzmail/tests/test_both.py     |  99 ----
 pyzmail/tests/test_generate.py |  30 --
 pyzmail/tests/test_parse.py    | 290 ------------
 pyzmail/tests/test_send.py     |  77 ----
 pyzmail/tests/test_utils.py    |  24 -
 pyzmail/utils.py               | 155 -------
 pyzmail/version.py             |   1 -
 11 files changed, 2043 deletions(-)
 delete mode 100644 pyzmail/__init__.py
 delete mode 100644 pyzmail/generate.py
 delete mode 100644 pyzmail/parse.py
 delete mode 100644 pyzmail/tests/__init__.py
 delete mode 100644 pyzmail/tests/test_both.py
 delete mode 100644 pyzmail/tests/test_generate.py
 delete mode 100644 pyzmail/tests/test_parse.py
 delete mode 100644 pyzmail/tests/test_send.py
 delete mode 100644 pyzmail/tests/test_utils.py
 delete mode 100644 pyzmail/utils.py
 delete mode 100644 pyzmail/version.py

diff --git a/pyzmail/__init__.py b/pyzmail/__init__.py
deleted file mode 100644
index f6c8854abc..0000000000
--- a/pyzmail/__init__.py
+++ /dev/null
@@ -1,21 +0,0 @@
-#
-# pyzmail/__init__.py
-# (c) Alain Spineux <alain.spineux@gmail.com>
-# http://www.magiksys.net/pyzmail
-# Released under LGPL
-
-from . import utils
-from .generate import compose_mail, send_mail, send_mail2
-from .parse import email_address_re, PyzMessage, PzMessage, decode_text
-from .parse import message_from_string, message_from_file
-from .parse import message_from_bytes, message_from_binary_file # python >= 3.2
-from .version import __version__
-
-# to help epydoc to display functions available from top of the package
-__all__= [ 'compose_mail', 'send_mail', 'send_mail2', 'email_address_re', \
-           'PyzMessage', 'PzMessage', 'decode_text', '__version__', 
-           'utils', 'generate', 'parse', 'version',
-           'message_from_string','message_from_file',
-           'message_from_binary_file', 'message_from_bytes', # python >= 3.2
-           ]
-
diff --git a/pyzmail/generate.py b/pyzmail/generate.py
deleted file mode 100644
index 2ad1f62246..0000000000
--- a/pyzmail/generate.py
+++ /dev/null
@@ -1,529 +0,0 @@
-#
-# pyzmail/generate.py
-# (c) Alain Spineux <alain.spineux@gmail.com>
-# http://www.magiksys.net/pyzmail
-# Released under LGPL
-
-"""
-Useful functions to compose and send emails.
-
-For short:
-
->>> payload, mail_from, rcpt_to, msg_id=compose_mail((u'Me', 'me@foo.com'),
-... [(u'Him', 'him@bar.com')], u'the subject', 'iso-8859-1', ('Hello world', 'us-ascii'),
-... attachments=[('attached', 'text', 'plain', 'text.txt', 'us-ascii')])
-... #doctest: +SKIP
->>> error=send_mail(payload, mail_from, rcpt_to, 'localhost', smtp_port=25)
-... #doctest: +SKIP
-"""
-
-import os, sys
-import time
-import base64
-import smtplib, socket
-import email
-import email.encoders
-import email.header
-import email.utils
-import email.mime
-import email.mime.base
-import email.mime.text
-import email.mime.image
-import email.mime.multipart
-
-from . import utils
-
-def format_addresses(addresses, header_name=None, charset=None):
-    """
-    Convert a list of addresses into a MIME-compliant header for a From, To, Cc,
-    or any other I{address} related field. 
-    This mixes the use of email.utils.formataddr() and email.header.Header().
-    
-    @type addresses: list
-    @param addresses: list of addresses, can be a mix of string a tuple  of the form 
-        C{[ 'address@domain', (u'Name', 'name@domain'), ...]}. 
-        If C{u'Name'} contains non us-ascii characters, it must be a 
-        unicode string or encoded using the I{charset} argument.
-    @type header_name: string or None
-    @keyword header_name: the name of the header. Its length is used to limit 
-        the length of the first line of the header according the RFC's 
-        requirements. (not very important, but it's better to match the 
-        requirements when possible)
-    @type charset: str
-    @keyword charset: the encoding charset for non unicode I{name} and a B{hint}
-        for encoding of unicode string. In other words,
-        if the I{name} of an address in a byte string containing non 
-        I{us-ascii} characters, then C{name.decode(charset)}
-        must generate the expected result. If a unicode string
-        is used instead, charset will be tried to encode the
-        string, if it fail, I{utf-8} will be used.
-        With B{Python 3.x} I{charset} is no more a hint and an exception will
-        be raised instead of using I{utf-8} has a fall back.
-    @rtype: str    
-    @return: the encoded list of formated addresses separated by commas, 
-    ready to use as I{Header} value.
-
-    >>> print format_addresses([('John', 'john@foo.com') ], 'From', 'us-ascii').encode()
-    John <john@foo.com>
-    >>> print format_addresses([(u'l\\xe9o', 'leo@foo.com') ], 'To', 'iso-8859-1').encode()
-    =?iso-8859-1?q?l=E9o?= <leo@foo.com>
-    >>> print format_addresses([(u'l\\xe9o', 'leo@foo.com') ], 'To', 'us-ascii').encode() 
-    ... # don't work in 3.X because charset is more than a hint 
-    ... #doctest: +SKIP
-    =?utf-8?q?l=C3=A9o?= <leo@foo.com>
-    >>> # because u'l\xe9o' cannot be encoded into us-ascii, utf8 is used instead
-    >>> print format_addresses([('No\\xe9', 'noe@f.com'), (u'M\\u0101ori', 'maori@b.com')  ], 'Cc', 'iso-8859-1').encode()
-    ... # don't work in 3.X because charset is more than a hint 
-    ... #doctest: +SKIP
-    =?iso-8859-1?q?No=E9?= <noe@f.com> , =?utf-8?b?TcSBb3Jp?= <maori@b.com>
-    >>> # 'No\xe9' is already encoded into iso-8859-1, but u'M\\u0101ori' cannot be encoded into iso-8859-1 
-    >>> # then utf8 is used here
-    >>> print format_addresses(['a@bar.com', ('John', 'john@foo.com') ], 'From', 'us-ascii').encode()
-    a@bar.com , John <john@foo.com>
-    """
-    header=email.header.Header(charset=charset, header_name=header_name)
-    for i, address in enumerate(addresses):
-        if i!=0:
-            # add separator between addresses
-            header.append(',', charset='us-ascii') 
-
-        try:
-            name, addr=address
-        except ValueError:
-            # address is not a tuple, their is no name, only email address
-            header.append(address, charset='us-ascii') 
-        else:
-            # check if address name is a unicode or byte string in "pure" us-ascii
-            if utils.is_usascii(name):
-                # name is a us-ascii byte string, i can use formataddr
-                formated_addr=email.utils.formataddr((name, addr))
-                # us-ascii must be used and not default 'charset'  
-                header.append(formated_addr, charset='us-ascii')
-            else:
-                # this is not as "pure" us-ascii string
-                # Header will use "RFC2047" to encode the address name
-                # if name is byte string, charset will be used to decode it first
-                header.append(name)
-                # here us-ascii must be used and not default 'charset'  
-                header.append('<%s>' % (addr,), charset='us-ascii') 
-                    
-    return header
-
-
-def build_mail(text, html=None, attachments=None, embeddeds=None):
-    """
-    Generate the core of the email message regarding the parameters.
-    The structure of the MIME email may vary, but the general one is as follow::
-
-        multipart/mixed (only if attachments are included)
-         |
-         +-- multipart/related (only if embedded contents are included) 
-         |    |
-         |    +-- multipart/alternative (only if text AND html are available)
-         |    |    |
-         |    |    +-- text/plain (text version of the message)
-         |    |    +-- text/html  (html version of the message)
-         |    |     
-         |    +-- image/gif  (where to include embedded contents)
-         |
-         +-- application/msword (where to add attachments)
-
-    @param text: the text version of the message, under the form of a tuple:
-        C{(encoded_content, encoding)} where I{encoded_content} is a byte string
-        encoded using I{encoding}.
-        I{text} can be None if the message has no text version. 
-    @type text: tuple or None
-    @keyword html: the HTML version of the message, under the form of a tuple:
-        C{(encoded_content, encoding)} where I{encoded_content} is a byte string
-        encoded using I{encoding}
-        I{html} can be None if the message has no HTML version. 
-    @type html: tuple or None
-    @keyword attachments: the list of attachments to include into the mail, in the
-        form [(data, maintype, subtype, filename, charset), ..] where :
-            - I{data} : is the raw data, or a I{charset} encoded string for 'text'
-            content. 
-            - I{maintype} : is a MIME main type like : 'text', 'image', 'application' ....
-            - I{subtype} : is a MIME sub type of the above I{maintype} for example :
-            'plain', 'png', 'msword' for respectively 'text/plain', 'image/png',
-            'application/msword'.
-            - I{filename} this is the filename of the attachment, it must be a
-            'us-ascii' string or a tuple of the form
-            C{(encoding, language, encoded_filename)} 
-            following the RFC2231 requirement, for example 
-            C{('iso-8859-1', 'fr', u'r\\xe9pertoir.png'.encode('iso-8859-1'))}
-            - I{charset} : if I{maintype} is 'text', then I{data} must be encoded
-            using this I{charset}. It can be None for non 'text' content.
-    @type attachments: list
-    @keyword embeddeds: is a list of documents embedded inside the HTML or text 
-        version of the message. It is similar to the I{attachments} list,  
-        but I{filename} is replaced by I{content_id} that is related to
-        the B{cid} reference into the HTML or text version of the message.
-    @type embeddeds: list
-    @rtype: inherit from email.Message 
-    @return: the message in a MIME object 
-
-    >>> mail=build_mail(('Hello world', 'us-ascii'), attachments=[('attached', 'text', 'plain', 'text.txt', 'us-ascii')])
-    >>> mail.set_boundary('===limit1==')
-    >>> print mail.as_string(unixfrom=False)    
-    Content-Type: multipart/mixed; boundary="===limit1=="
-    MIME-Version: 1.0
-    <BLANKLINE>
-    --===limit1==
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    <BLANKLINE>
-    Hello world
-    --===limit1==
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    Content-Disposition: attachment; filename="text.txt"
-    <BLANKLINE>
-    attached
-    --===limit1==--
-    """
-
-    if attachments is None:
-        attachments = []
-    if embeddeds is None:
-        embeddeds = []
-
-    main=text_part=html_part=None
-    if text:
-        content, charset=text
-        main=text_part=email.mime.text.MIMEText(content, 'plain', charset)
-    
-    if html:
-        content, charset=html
-        main=html_part=email.mime.text.MIMEText(content, 'html', charset)
-        
-    if not text_part and not html_part:
-        main=text_part=email.mime.text.MIMEText('', 'plain', 'us-ascii')
-    elif text_part and html_part:
-        # need to create a multipart/alternative to include text and html version
-        main=email.mime.multipart.MIMEMultipart('alternative', None, [text_part, html_part])
-    
-    if embeddeds:
-        related=email.mime.multipart.MIMEMultipart('related')
-        related.attach(main)
-        for part in embeddeds:
-            if not isinstance(part, email.mime.base.MIMEBase):
-                data, maintype, subtype, content_id, charset=part
-                if (maintype=='text'):
-                    part=email.mime.text.MIMEText(data, subtype, charset)
-                else:
-                    part=email.mime.base.MIMEBase(maintype, subtype)
-                    part.set_payload(data)
-                    email.encoders.encode_base64(part)
-                part.add_header('Content-ID', '<'+content_id+'>')
-                part.add_header('Content-Disposition', 'inline')
-            related.attach(part)
-        main=related
-            
-    if attachments:
-        mixed=email.mime.multipart.MIMEMultipart('mixed')
-        mixed.attach(main)
-        for part in attachments:
-            if not isinstance(part, email.mime.base.MIMEBase):
-                data, maintype, subtype, filename, charset=part
-                if (maintype=='text'):
-                    part=email.mime.text.MIMEText(data, subtype, charset)
-                else:
-                    part=email.mime.base.MIMEBase(maintype, subtype)
-                    part.set_payload(data)
-                    email.encoders.encode_base64(part)
-                part.add_header('Content-Disposition', 'attachment', filename=filename)
-            mixed.attach(part)
-        main=mixed
-        
-    return main
-
-def complete_mail(message, sender, recipients, subject, default_charset, cc=None, bcc=None, message_id_string=None, date=None, headers=None):
-    """
-    Fill in the From, To, Cc, Subject, Date and Message-Id I{headers} of 
-    one existing message regarding the parameters.
-
-    @type message:email.Message 
-    @param message: the message to fill in
-    @type sender: tuple
-    @param sender: a tuple of the form (u'Sender Name', 'sender.address@domain.com')
-    @type recipients: list
-    @param recipients: a list of addresses. Address can be tuple or string like
-    expected by L{format_addresses()}, for example: C{[ 'address@dmain.com', 
-    (u'Recipient Name', 'recipient.address@domain.com'), ... ]}
-    @type subject: str
-    @param subject: The subject of the message, can be a unicode string or a
-    string encoded using I{default_charset} encoding. Prefert unicode to
-    byte string here.
-    @type default_charset: str  
-    @param default_charset: The default charset for this email. Arguments
-    that are non unicode string are supposed to be encoded using this charset. 
-    This I{charset} will be used has an hint when encoding mail content. 
-    @type cc: list
-    @keyword cc: The I{carbone copy} addresses. Same format as the I{recipients}
-    argument.
-    @type bcc: list
-    @keyword bcc: The I{blind carbone copy} addresses. Same format as the I{recipients}
-    argument.
-    @type message_id_string: str or None
-    @keyword message_id_string: if None, don't append any I{Message-ID} to the 
-    mail, let the SMTP do the job, else use the string to generate a unique 
-    I{ID} using C{email.utils.make_msgid()}. The generated value is 
-    returned as last argument. For example use the name of your application.
-    @type date: int or None
-    @keyword date: utc time in second from the epoch or None. If None then
-    use curent time C{time.time()} instead.
-    @type headers: list of tuple
-    @keyword headers: a list of C{(field, value)} tuples to fill in the mail 
-    header fields. Values are encoded using I{default_charset}.
-    @rtype: tuple
-    @return: B{(payload, mail_from, rcpt_to, msg_id)}
-        - I{payload} (str) is the content of the email, generated from the message
-        - I{mail_from} (str) is the address of the sender to pass to the SMTP host
-        - I{rcpt_to} (list) is a list of the recipients addresses to pass to the SMTP host
-        of the form C{[ 'a@b.com', c@d.com', ]}. This combine all recipients, 
-        I{carbone copy} addresses and I{blind carbone copy} addresses.
-        - I{msg_id} (None or str) None if message_id_string==None else the generated value for 
-        the message-id. If not None, this I{Message-ID} is already written 
-        into the payload.
-        
-    >>> import email.mime.text
-    >>> msg=email.mime.text.MIMEText('The text.', 'plain', 'us-ascii')
-    >>> # I could use build_mail() instead
-    >>> payload, mail_from, rcpt_to, msg_id=complete_mail(msg, ('Me', 'me@foo.com'),
-    ... [ ('Him', 'him@bar.com'), ], 'Non unicode subject', 'iso-8859-1',
-    ... cc=['her@bar.com',], date=1313558269, headers=[('User-Agent', u'pyzmail'), ])
-    >>> print payload
-    ... # 3.X encode  User-Agent: using 'iso-8859-1' even if it contains only us-asccii
-    ... # doctest: +ELLIPSIS  
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    From: Me <me@foo.com>
-    To: Him <him@bar.com>
-    Cc: her@bar.com
-    Subject: =?iso-8859-1?q?Non_unicode_subject?=
-    Date: ...
-    User-Agent: ...pyzmail...
-    <BLANKLINE>
-    The text.
-    >>> print 'mail_from=%r rcpt_to=%r' % (mail_from, rcpt_to)
-    mail_from='me@foo.com' rcpt_to=['him@bar.com', 'her@bar.com']
-    """
-    def getaddr(address):
-        if isinstance(address, tuple):
-            return address[1]
-        else:
-            return address
-
-    if cc is None:
-        cc=[]
-    if bcc is None:
-        bcc=[]
-    if headers is None:
-        headers=[]
-
-    mail_from=getaddr(sender[1])
-    rcpt_to=list(map(getaddr, recipients))
-    rcpt_to.extend(list(map(getaddr, cc)))
-    rcpt_to.extend(list(map(getaddr, bcc)))
-
-    message['From'] = format_addresses([ sender, ], header_name='from', charset=default_charset)
-    if recipients:
-        message['To'] = format_addresses(recipients, header_name='to', charset=default_charset)
-    if cc:
-        message['Cc'] = format_addresses(cc, header_name='cc', charset=default_charset)
-    message['Subject'] = email.header.Header(subject, default_charset)
-    if date:
-        utc_from_epoch=date
-    else:
-        utc_from_epoch=time.time()
-    message['Date'] = email.utils.formatdate(utc_from_epoch, localtime=True)
-    
-    if message_id_string:
-        msg_id=message['Message-Id']=email.utils.make_msgid(message_id_string)
-    else:
-        msg_id=None
-        
-    for field, value in headers:
-        message[field]=email.header.Header(value, default_charset)
-
-    payload=message.as_string()
-    
-    return payload, mail_from, rcpt_to, msg_id
-
-def compose_mail(sender, recipients, subject, default_charset, text, html=None, attachments=None, embeddeds=None, cc=None, bcc=None, message_id_string=None, date=None, headers=None):
-    """
-    Compose an email regarding the arguments. Call L{build_mail()} and 
-    L{complete_mail()} at once.
-    
-    Read the B{parameters} descriptions of both functions L{build_mail()} and L{complete_mail()}. 
-    
-    Returned value is the same as for L{build_mail()} and L{complete_mail()}.
-    You can pass the returned values to L{send_mail()} or L{send_mail2()}.
-
-    @rtype: tuple
-    @return: B{(payload, mail_from, rcpt_to, msg_id)}
-
-    >>> payload, mail_from, rcpt_to, msg_id=compose_mail((u'Me', 'me@foo.com'), [(u'Him', 'him@bar.com')], u'the subject', 'iso-8859-1', ('Hello world', 'us-ascii'), attachments=[('attached', 'text', 'plain', 'text.txt', 'us-ascii')])
-    """
-    if attachments is None:
-        attachments=[]
-    if embeddeds is None:
-        embeddeds=[]
-    if cc is None:
-        cc=[]
-    if bcc is None:
-        bcc = []
-    if headers is None:
-        headers=[]
-
-    message=build_mail(text, html, attachments, embeddeds)
-    return complete_mail(message, sender, recipients, subject, default_charset, cc, bcc, message_id_string, date, headers)
-        
-
-def send_mail2(payload, mail_from, rcpt_to, smtp_host, smtp_port=25, smtp_mode='normal', smtp_login=None, smtp_password=None):
-    """
-    Send the message to a SMTP host. Look at the L{send_mail()} documentation.
-    L{send_mail()} call this function and catch all exceptions to convert them
-    into a user friendly error message. The returned value 
-    is always a dictionary. It can be empty if all recipients have been
-    accepted. 
-
-    @rtype: dict
-    @return: This function return the value returnd by C{smtplib.SMTP.sendmail()}
-    or raise the same exceptions.  
-    
-    This method will return normally if the mail is accepted for at least one 
-    recipient. Otherwise it will raise an exception. That is, if this 
-    method does not raise an exception, then someone should get your mail. 
-    If this method does not raise an exception, it returns a dictionary, 
-    with one entry for each recipient that was refused. Each entry contains a
-    tuple of the SMTP error code and the accompanying error message sent by the server.
-    
-    @raise smtplib.SMTPException: Look at the standard C{smtplib.SMTP.sendmail()} documentation.
-    
-    """
-    if smtp_mode=='ssl':
-        smtp=smtplib.SMTP_SSL(smtp_host, smtp_port)
-    else:
-        smtp=smtplib.SMTP(smtp_host, smtp_port)
-        if smtp_mode=='tls':
-            smtp.starttls()
-            
-    if smtp_login and smtp_password:
-        if sys.version_info<(3, 0):
-            # python 2.x  
-            # login and password must be encoded 
-            # because HMAC used in CRAM_MD5 require non unicode string
-            smtp.login(smtp_login.encode('utf-8'), smtp_password.encode('utf-8'))
-        else:
-            #python 3.x
-            smtp.login(smtp_login, smtp_password)
-    try:
-        ret=smtp.sendmail(mail_from, rcpt_to, payload)
-    finally:
-        try:
-            smtp.quit()
-        except Exception as e:
-            pass
-            
-    return ret
-
-def send_mail(payload, mail_from, rcpt_to, smtp_host, smtp_port=25, smtp_mode='normal', smtp_login=None, smtp_password=None):
-    """
-    Send the message to a SMTP host. Handle SSL, TLS and authentication.
-    I{payload}, I{mail_from} and I{rcpt_to} can come from values returned by
-    L{complete_mail()}. This function call L{send_mail2()} but catch all
-    exceptions and return friendly error message instead. 
-     
-    @type payload: str
-    @param payload: the mail content.
-    @type mail_from: str
-    @param mail_from: the sender address, for example: C{'me@domain.com'}.
-    @type rcpt_to: list
-    @param rcpt_to: The list of the recipient addresses in the form 
-    C{[ 'a@b.com', c@d.com', ]}. No names here, only email addresses.
-    @type smtp_host: str
-    @param smtp_host: the IP address or the name of the SMTP host.
-    @type smtp_port: int
-    @keyword smtp_port: the port to connect to on the SMTP host. Default is C{25}.
-    @type smtp_mode: str
-    @keyword smtp_mode: the way to connect to the SMTP host, can be:  
-                      C{'normal'}, C{'ssl'} or C{'tls'}. default is C{'normal'}
-    @type smtp_login: str or None
-    @keyword smtp_login: If authentication is required, this is the login. 
-                       Be carefull to I{UTF8} encode your login if it contains
-                       non I{us-ascii} characters.
-    @type smtp_password: str or None
-    @keyword smtp_password: If authentication is required, this is the password.
-                          Be carefull to I{UTF8} encode your password if it 
-                          contains non I{us-ascii} characters.
-
-    @rtype: dict or str
-    @return: This function return a dictionary of failed recipients 
-    or a string with an error message. 
-    
-    If all recipients have been accepted the dictionary is empty. If the
-    returned value is a string, none of the recipients will get the message.
-    
-    The dictionary is exactly of the same sort as 
-    smtplib.SMTP.sendmail() returns with one entry for each recipient that 
-    was refused. Each entry contains a tuple of the SMTP error code and 
-    the accompanying error message sent by the server. 
-    
-    Example:
-    
-    >>> send_mail('Subject: hello\\n\\nmessage', 'a@foo.com', [ 'b@bar.com', ], 'localhost') #doctest: +SKIP
-    {}
-    
-    Here is how to use the returned value::
-        if isinstance(ret, dict):
-          if ret:
-            print 'failed' recipients:
-            for recipient, (code, msg) in ret.iteritems():
-                print 'code=%d recipient=%s\terror=%s' % (code, recipient, msg)
-          else:
-            print 'success'
-        else:
-          print 'Error:', ret
-
-    To use your GMail account to send your mail::
-        smtp_host='smtp.gmail.com'
-        smtp_port=587
-        smtp_mode='tls'
-        smtp_login='your.gmail.addresse@gmail.com'
-        smtp_password='your.gmail.password'
-        
-    Use your GMail address for the sender ! 
-
-    """
-
-    error=dict()
-    try:
-        ret=send_mail2(payload, mail_from, rcpt_to, smtp_host, smtp_port, smtp_mode, smtp_login, smtp_password)
-    except (socket.error, ) as e:
-        error='server %s:%s not responding: %s' % (smtp_host, smtp_port, e)
-    except smtplib.SMTPAuthenticationError as e:
-        error='authentication error: %s' % (e, )
-    except smtplib.SMTPRecipientsRefused as e:
-        # code, error=e.recipients[recipient_addr]
-        error='all recipients refused: '+', '.join(list(e.recipients.keys()))
-    except smtplib.SMTPSenderRefused as e:
-        # e.sender, e.smtp_code, e.smtp_error
-        error='sender refused: %s' % (e.sender, )
-    except smtplib.SMTPDataError as e:
-        error='SMTP protocol mismatch: %s' % (e, )
-    except smtplib.SMTPHeloError as e:
-        error="server didn't reply properly to the HELO greeting: %s" % (e, )
-    except smtplib.SMTPException as e:
-        error='SMTP error: %s' % (e, )
-#    except Exception, e:
-#        raise # unknown error
-    else:
-        # failed addresses and error messages
-        error=ret
-        
-    return error
-
diff --git a/pyzmail/parse.py b/pyzmail/parse.py
deleted file mode 100644
index 9f86c37177..0000000000
--- a/pyzmail/parse.py
+++ /dev/null
@@ -1,817 +0,0 @@
-#
-# pyzmail/parse.py
-# (c) Alain Spineux <alain.spineux@gmail.com>
-# http://www.magiksys.net/pyzmail
-# Released under LGPL
-
-"""
-Useful functions to parse emails
-
-@var email_address_re: a regex that match well formed email address (from perlfaq9)
-@undocumented: atom_rfc2822
-@undocumented: atom_posfix_restricted
-@undocumented: atom
-@undocumented: dot_atom
-@undocumented: local
-@undocumented: domain_lit
-@undocumented: domain
-@undocumented: addr_spec
-"""
-
-import re
-import io
-import email
-import email.errors
-import email.header
-import email.message
-import mimetypes
-
-from .utils import *
-
-# email address REGEX matching the RFC 2822 spec from perlfaq9
-#    my $atom       = qr{[a-zA-Z0-9_!#\$\%&'*+/=?\^`{}~|\-]+};
-#    my $dot_atom   = qr{$atom(?:\.$atom)*};
-#    my $quoted     = qr{"(?:\\[^\r\n]|[^\\"])*"};
-#    my $local      = qr{(?:$dot_atom|$quoted)};
-#    my $domain_lit = qr{\[(?:\\\S|[\x21-\x5a\x5e-\x7e])*\]};
-#    my $domain     = qr{(?:$dot_atom|$domain_lit)};
-#    my $addr_spec  = qr{$local\@$domain};
-# 
-# Python's translation
-atom_rfc2822=r"[a-zA-Z0-9_!#\$\%&'*+/=?\^`{}~|\-]+"
-atom_posfix_restricted=r"[a-zA-Z0-9_#\$&'*+/=?\^`{}~|\-]+" # without '!' and '%'
-atom=atom_rfc2822
-dot_atom=atom  +  r"(?:\."  +  atom  +  ")*"
-quoted=r'"(?:\\[^\r\n]|[^\\"])*"'
-local="(?:"  +  dot_atom  +  "|"  +  quoted  +  ")"
-domain_lit=r"\[(?:\\\S|[\x21-\x5a\x5e-\x7e])*\]"
-domain="(?:"  +  dot_atom  +  "|"  +  domain_lit  +  ")"
-addr_spec=local  +  "@"  +  domain
-# and the result
-email_address_re=re.compile('^'+addr_spec+'$')
-
-class MailPart:
-    """
-    Data related to a mail part (aka message content, attachment or  
-    embedded content in an email)
-    
-    @type charset: str or None
-    @ivar charset: the encoding of the I{get_payload()} content if I{type} is 'text/*'
-    and charset has been specified in the message
-    @type content_id: str or None
-    @ivar content_id: the MIME Content-ID if specified in the message.
-    @type description: str or None
-    @ivar description: the MIME Content-Description if specified in the message.
-    @type disposition: str or None
-    @ivar disposition: C{None}, C{'inline'} or C{'attachment'} depending
-    the MIME Content-Disposition value
-    @type filename: unicode or None
-    @ivar filename: the name of the file, if specified in the message. 
-    @type part: inherit from email.mime.base.MIMEBase
-    @ivar part: the related part inside the message.
-    @type is_body: str or None
-    @ivar is_body: None if this part is not the mail content itself (an 
-        attachment or embedded content), C{'text/plain'} if this part is the 
-        text content or C{'text/html'} if this part is the HTML version. 
-    @type sanitized_filename: str or None
-    @ivar sanitized_filename: This field is filled by L{PyzMessage} to store 
-    a valid unique filename related or not with the original filename.
-    @type type: str
-    @ivar type: the MIME type, like 'text/plain', 'image/png', 'application/msword' ...
-    """
-            
-    def __init__(self, part, filename=None, type=None, charset=None, content_id=None, description=None, disposition=None, sanitized_filename=None, is_body=None):
-        """
-        Create an mail part and initialize all attributes
-        """
-        self.part=part          # original python part
-        self.filename=filename  # filename in unicode (if any) 
-        self.type=type          # the mime-type
-        self.charset=charset    # the charset (if any) 
-        self.description=description    # if any 
-        self.disposition=disposition    # 'inline', 'attachment' or None
-        self.sanitized_filename=sanitized_filename # cleanup your filename here (TODO)  
-        self.is_body=is_body        # usually in (None, 'text/plain' or 'text/html')
-        self.content_id=content_id  # if any
-        if self.content_id:
-            # strip '<>' to ease search and replace in "root" content (TODO) 
-            if self.content_id.startswith('<') and self.content_id.endswith('>'):
-                self.content_id=self.content_id[1:-1]
-
-    def get_payload(self):
-        """
-        decode and return part payload. if I{type} is 'text/*' and I{charset} 
-        not C{None}, be careful to take care of the text encoding. Use 
-        something like C{part.get_payload().decode(part.charset)}
-        """
-        
-        payload=None
-        if self.type.startswith('message/'): 
-            # I don't use msg.as_string() because I want to use mangle_from_=False
-            if sys.version_info<(3, 0):
-                # python 2.x  
-                from email.generator import Generator
-                fp = io.StringIO()
-                g = Generator(fp, mangle_from_=False)
-                g.flatten(self.part, unixfrom=False)
-                payload=fp.getvalue()
-            else:
-                # support only for python >= 3.2
-                from email.generator import BytesGenerator
-                import io
-                fp = io.BytesIO()
-                g = BytesGenerator(fp, mangle_from_=False)
-                g.flatten(self.part, unixfrom=False)
-                payload=fp.getvalue()
-                
-        else:
-            payload=self.part.get_payload(decode=True)
-        return payload
-                        
-    def __repr__(self):
-        st='MailPart<'
-        if self.is_body:
-            st+='*'
-        st+=self.type
-        if self.charset:
-            st+=' charset='+self.charset
-        if self.filename:
-            st+=' filename='+self.filename
-        if self.content_id:
-            st+=' content_id='+self.content_id
-        st+=' len=%d' % (len(self.get_payload()), )
-        st+='>'
-        return st
-
-
-
-_line_end_re=re.compile('\r\n|\n\r|\n|\r')
-
-def _friendly_header(header):
-    """
-    Convert header returned by C{email.message.Message.get()} into a 
-    user friendly string. 
-
-    Py3k C{email.message.Message.get()} return C{header.Header()} with charset 
-    set to C{charset.UNKNOWN8BIT} when the header contains invalid characters, 
-    else it return I{str} as  Python 2.X does   
-    
-    @type header: str or email.header.Header
-    @param header: the header to convert into a user friendly string
-    
-    @rtype: str
-    @returns: the converter header 
-    """
-    
-    save=header
-    if isinstance(header, email.header.Header):
-        header=str(header)
-        
-    return re.sub(_line_end_re, ' ', header)
-        
-def decode_mail_header(value, default_charset='us-ascii'):
-    """
-    Decode a header value into a unicode string. 
-    Works like a more smarter python 
-    C{u"".join(email.header.decode_header()} function
-    
-    @type value: str
-    @param value: the value of the header. 
-    @type default_charset: str
-    @keyword default_charset: if one charset used in the header (multiple charset 
-    can be mixed) is unknown, then use this charset instead.  
-    
-    >>> decode_mail_header('=?iso-8859-1?q?Courrier_=E8lectronique_en_Fran=E7ais?=')
-    u'Courrier \\xe8lectronique en Fran\\xe7ais'
-    """
-
-#    value=_friendly_header(value)
-    try:
-        headers=email.header.decode_header(value)
-    except email.errors.HeaderParseError:
-        # this can append in email.base64mime.decode(), for example for this value:
-        # '=?UTF-8?B?15HXmdeh15jXqNeVINeY15DXpteUINeTJ9eV16jXlSDXkdeg15XXldeUINem15PXpywg15TXptei16bXldei15nXnSDXqdecINek15zXmdeZ?==?UTF-8?B?157XldeR15nXnCwg157Xldek16Ig157Xl9eV15wg15HXodeV15bXnyDXk9ec15DXnCDXldeh15gg157Xl9eR16rXldeqINep15wg15HXmdeQ?==?UTF-8?B?15zXmNeZ?='
-        # then return a sanitized ascii string
-        # TODO: some improvements are possible here, but a failure here is
-        # unlikely
-        return value.encode('us-ascii', 'replace').decode('us-ascii')
-    else:
-        for i, (text, charset) in enumerate(headers):
-            # python 3.x
-            # email.header.decode_header('a') -> [('a', None)]
-            # email.header.decode_header('a =?ISO-8859-1?Q?foo?= b')
-            # --> [(b'a', None), (b'foo', 'iso-8859-1'), (b'b', None)]
-            # in Py3 text is sometime str and sometime byte :-(
-            # python 2.x
-            # email.header.decode_header('a') -> [('a', None)]
-            # email.header.decode_header('a =?ISO-8859-1?Q?foo?= b')
-            # --> [('a', None), ('foo', 'iso-8859-1'), ('b', None)]
-            if (charset is None and sys.version_info>=(3, 0)):
-                # Py3
-                if isinstance(text, str):
-                    # convert Py3 string into bytes string to be sure their is no 
-                    # non us-ascii chars and because next line expect byte string
-                    text=text.encode('us-ascii', 'replace')
-            try:
-                headers[i]=text.decode(charset or 'us-ascii', 'replace')
-            except LookupError:
-                # if the charset is unknown, force default 
-                headers[i]=text.decode(default_charset, 'replace')
-
-        return "".join(headers)
-    
-def get_mail_addresses(message, header_name):
-    """
-    retrieve all email addresses from one message header
-
-    @type message: email.message.Message
-    @param message: the email message
-    @type header_name: str
-    @param header_name: the name of the header, can be 'from', 'to', 'cc' or 
-    any other header containing one or more email addresses
-    @rtype: list
-    @returns: a list of the addresses in the form of tuples 
-    C{[(u'Name', 'addresse@domain.com'), ...]}
-
-    >>> import email
-    >>> import email.mime.text
-    >>> msg=email.mime.text.MIMEText('The text.', 'plain', 'us-ascii')
-    >>> msg['From']=email.email.utils.formataddr(('Me', 'me@foo.com'))
-    >>> msg['To']=email.email.utils.formataddr(('A', 'a@foo.com'))+', '+email.email.utils.formataddr(('B', 'b@foo.com'))
-    >>> print msg.as_string(unixfrom=False)
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    From: Me <me@foo.com>
-    To: A <a@foo.com>, B <b@foo.com>
-    <BLANKLINE>
-    The text.
-    >>> get_mail_addresses(msg, 'from')
-    [(u'Me', 'me@foo.com')]
-    >>> get_mail_addresses(msg, 'to')
-    [(u'A', 'a@foo.com'), (u'B', 'b@foo.com')]
-    """ 
-    addrs=email.utils.getaddresses([ _friendly_header(h) for h in message.get_all(header_name, [])])
-    for i, (addr_name, addr) in enumerate(addrs):
-        if not addr_name and addr:
-            # only one string! Is it the address or the  address name ?
-            # use the same for both and see later
-            addr_name=addr
-            
-        if is_usascii(addr):
-            # address must be ascii only and must match address regex
-            if not email_address_re.match(addr):
-                addr=''
-        else:
-            addr=''
-        addrs[i]=(decode_mail_header(addr_name), addr)
-    return addrs
-
-def get_filename(part):
-    """
-    Find the filename of a mail part. Many MUA send attachments with the 
-    filename in the I{name} parameter of the I{Content-type} header instead 
-    of in the I{filename} parameter of the I{Content-Disposition} header.
-    
-    @type part: inherit from email.mime.base.MIMEBase
-    @param part: the mail part 
-    @rtype: None or unicode
-    @returns: the filename or None if not found
-    
-    >>> import email.mime.image
-    >>> attach=email.mime.image.MIMEImage('data', 'png')
-    >>> attach.add_header('Content-Disposition', 'attachment', filename='image.png')
-    >>> get_filename(attach)
-    u'image.png'
-    >>> print attach.as_string(unixfrom=False)
-    Content-Type: image/png
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: base64
-    Content-Disposition: attachment; filename="image.png"
-    <BLANKLINE>
-    ZGF0YQ==
-    >>> import email.mime.text
-    >>> attach=email.mime.text.MIMEText('The text.', 'plain', 'us-ascii')
-    >>> attach.add_header('Content-Disposition', 'attachment', filename=('iso-8859-1', 'fr', u'Fran\\xe7ais.txt'.encode('iso-8859-1')))
-    >>> get_filename(attach)
-    u'Fran\\xe7ais.txt'
-    >>> print attach.as_string(unixfrom=False)
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    Content-Disposition: attachment; filename*="iso-8859-1'fr'Fran%E7ais.txt"
-    <BLANKLINE>
-    The text.
-    """
-    filename=part.get_param('filename', None, 'content-disposition')
-    if not filename:
-        filename=part.get_param('name', None) # default is 'content-type'
-        
-    if filename:
-        if isinstance(filename, tuple):
-            # RFC 2231 must be used to encode parameters inside MIME header
-            filename=email.utils.collapse_rfc2231_value(filename).strip()
-        else:
-            # But a lot of MUA erroneously use RFC 2047 instead of RFC 2231
-            # in fact anybody missuse RFC2047 here !!!
-            filename=decode_mail_header(filename)
-        
-    return filename
-
-def _search_message_content(contents, part):
-    """
-    recursive search of message content (text or HTML) inside 
-    the structure of the email. Used by L{search_message_content()}
-    
-    @type contents: dict
-    @param contents: contents already found in parents or brothers I{parts}. 
-    The dictionary will be completed as and when. key is the MIME type of the part.  
-    @type part: inherit email.mime.base.MIMEBase
-    @param part: the part of the mail to look inside recursively.    
-    """
-    type=part.get_content_type()
-    if part.is_multipart(): # type.startswith('multipart/'):
-        # explore only True 'multipart/*' 
-        # because 'messages/rfc822' are 'multipart/*' too but
-        # must not be explored here 
-        if type=='multipart/related':
-            # the first part or the one pointed by start 
-            start=part.get_param('start', None)
-            related_type=part.get_param('type', None)
-            for i, subpart in enumerate(part.get_payload()):
-                if (not start and i==0) or (start and start==subpart.get('Content-Id')):
-                    _search_message_content(contents, subpart)
-                    return
-        elif type=='multipart/alternative':
-            # all parts are candidates and latest is the best
-            for subpart in part.get_payload():
-                _search_message_content(contents, subpart)
-        elif type in ('multipart/report',  'multipart/signed'):
-            # only the first part is candidate
-            try:
-                subpart=part.get_payload()[0]
-            except IndexError:
-                return
-            else:
-                _search_message_content(contents, subpart)
-                return
-
-        elif type=='multipart/encrypted':
-            # the second part is the good one, but we need to de-crypt it 
-            # using the first part. Do nothing
-            return
-            
-        else: 
-            # unknown types must be handled as 'multipart/mixed'
-            # This is the peace of code that could probably be improved, 
-            # I use a heuristic : if not already found, use first valid non 
-            # 'attachment' parts found
-            for subpart in part.get_payload():
-                tmp_contents=dict()
-                _search_message_content(tmp_contents, subpart)
-                for k, v in tmp_contents.items():
-                    if not subpart.get_param('attachment', None, 'content-disposition')=='':
-                        # if not an attachment, initiate value if not already found
-                        contents.setdefault(k, v)
-            return
-    else:
-        contents[part.get_content_type().lower()]=part
-        return
-    
-    return
-
-def search_message_content(mail):
-    """
-    search of message content (text or HTML) inside 
-    the structure of the mail. This function is used by L{get_mail_parts()}
-    to set the C{is_body} part of the L{MailPart}s
-    
-    @type mail: inherit from email.message.Message
-    @param mail: the message to search in.
-    @rtype: dict
-    @returns: a dictionary of the form C{{'text/plain': text_part, 'text/html': html_part}}
-    where text_part and html_part inherite from C{email.mime.text.MIMEText} 
-    and are respectively the I{text} and I{HTML} version of the message content. 
-    One part can be missing. The dictionay can aven be empty if none of the
-    parts math the requirements to be considered as the content.     
-    """
-    contents=dict()
-    _search_message_content(contents, mail)
-    return contents
-
-def get_mail_parts(msg):
-    """
-    return a list of all parts of the message as a list of L{MailPart}.
-    Retrieve parts attributes to fill in L{MailPart} object.
-    
-    @type msg: inherit email.message.Message
-    @param msg: the message
-    @rtype: list
-    @returns: list of mail parts
-
-    >>> import email.mime.multipart
-    >>> msg=email.mime.multipart.MIMEMultipart(boundary='===limit1==')
-    >>> import email.mime.text
-    >>> txt=email.mime.text.MIMEText('The text.', 'plain', 'us-ascii')
-    >>> msg.attach(txt)
-    >>> import email.mime.image
-    >>> image=email.mime.image.MIMEImage('data', 'png')
-    >>> image.add_header('Content-Disposition', 'attachment', filename='image.png')
-    >>> msg.attach(image)
-    >>> print msg.as_string(unixfrom=False)    
-    Content-Type: multipart/mixed; boundary="===limit1=="
-    MIME-Version: 1.0
-    <BLANKLINE>
-    --===limit1==
-    Content-Type: text/plain; charset="us-ascii"
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: 7bit
-    <BLANKLINE>
-    The text.
-    --===limit1==
-    Content-Type: image/png
-    MIME-Version: 1.0
-    Content-Transfer-Encoding: base64
-    Content-Disposition: attachment; filename="image.png"
-    <BLANKLINE>
-    ZGF0YQ==
-    --===limit1==--
-    >>> parts=get_mail_parts(msg)
-    >>> parts
-    [MailPart<*text/plain charset=us-ascii len=9>, MailPart<image/png filename=image.png len=4>]
-    >>> # the star "*" means this is the mail content, not an attachment 
-    >>> parts[0].get_payload().decode(parts[0].charset)
-    u'The text.'
-    >>> parts[1].filename, len(parts[1].get_payload())
-    (u'image.png', 4)
-
-    """
-    mailparts=[]
-
-    # retrieve messages of the email
-    contents=search_message_content(msg)
-    # reverse contents dict
-    parts=dict((v,k) for k, v in contents.items())
-
-    # organize the stack to handle deep first search
-    stack=[ msg, ]
-    while stack:
-        part=stack.pop(0)
-        type=part.get_content_type()
-        if type.startswith('message/'): 
-            # ('message/delivery-status', 'message/rfc822', 'message/disposition-notification'):
-            # I don't want to explore the tree deeper her and just save source using msg.as_string()
-            # but I don't use msg.as_string() because I want to use mangle_from_=False 
-            filename='message.eml'
-            mailparts.append(MailPart(part, filename=filename, type=type, charset=part.get_param('charset'), description=part.get('Content-Description')))
-        elif part.is_multipart():
-            # insert new parts at the beginning of the stack (deep first search)
-            stack[:0]=part.get_payload()
-        else:
-            charset=part.get_param('charset')
-            filename=get_filename(part)
-                
-            disposition=None
-            if part.get_param('inline', None, 'content-disposition')=='':
-                disposition='inline'
-            elif part.get_param('attachment', None, 'content-disposition')=='':
-                disposition='attachment'
-                
-            mailparts.append(MailPart(part, filename=filename, type=type, charset=charset, content_id=part.get('Content-Id'), description=part.get('Content-Description'), disposition=disposition, is_body=parts.get(part, False)))
-
-    return mailparts
-
-
-def decode_text(payload, charset, default_charset):
-    """
-    Try to decode text content by trying multiple charset until success.
-    First try I{charset}, else try I{default_charset} finally
-    try popular charsets in order : ascii, utf-8, utf-16, windows-1252, cp850
-    If all fail then use I{default_charset} and replace wrong characters
-    
-    @type payload: str
-    @param payload: the content to decode
-    @type charset: str or None
-    @param charset: the first charset to try if != C{None}
-    @type default_charset: str or None
-    @param default_charset: the second charset to try if != C{None}
-    
-    @rtype: tuple
-    @returns: a tuple of the form C{(payload, charset)}
-        - I{payload}: this is the decoded payload if charset is not None and
-        payload is a unicode string
-        - I{charset}: the charset that was used to decode I{payload} If charset is
-        C{None} then something goes wrong: if I{payload} is unicode then
-        invalid characters have been replaced and the used charset is I{default_charset}
-        else, if I{payload} is still byte string then nothing has been done. 
-             
-     
-    """
-    for chset in [ charset, default_charset, 'ascii', 'utf-8', 'utf-16', 'windows-1252', 'cp850' ]:
-        if chset:
-            try: 
-                return payload.decode(chset), chset
-            except UnicodeError:
-                pass
-
-    if default_charset:
-        return payload.decode(chset, 'replace'), None 
-
-    return payload, None
-
-class PyzMessage(email.message.Message):
-    """
-    Inherit from email.message.Message. Combine L{get_mail_parts()},
-    L{get_mail_addresses()} and L{decode_mail_header()} into a
-    B{convenient} object to access mail contents and attributes.
-    This class also B{sanitize} part filenames.
-    
-    @type mailparts: list of L{MailPart}
-    @ivar mailparts: list of L{MailPart} objects composing the email, I{text_part}
-    and I{html_part} are part of this list as are other attachements and embedded
-    contents.
-    @type text_part: L{MailPart} or None
-    @ivar text_part: the L{MailPart} object that contains the I{text}
-    version of the message, None if the mail has not I{text} content.
-    @type html_part: L{MailPart} or None
-    @ivar html_part: the L{MailPart} object that contains the I{HTML}
-    version of the message, None if the mail has not I{HTML} content.
-
-    @note: Sample:
-    
-    >>> raw='''Content-Type: text/plain; charset="us-ascii"
-    ... MIME-Version: 1.0
-    ... Content-Transfer-Encoding: 7bit
-    ... Subject: The subject
-    ... From: Me <me@foo.com>
-    ... To: A <a@foo.com>, B <b@foo.com>
-    ...  
-    ... The text.
-    ... '''
-    >>> msg=PyzMessage.factory(raw)
-    >>> print 'Subject: %r' % (msg.get_subject(), )
-    Subject: u'The subject'
-    >>> print 'From: %r' % (msg.get_address('from'), )
-    From: (u'Me', 'me@foo.com')
-    >>> print 'To: %r' % (msg.get_addresses('to'), )
-    To: [(u'A', 'a@foo.com'), (u'B', 'b@foo.com')]
-    >>> print 'Cc: %r' % (msg.get_addresses('cc'), )
-    Cc: []
-    >>> for mailpart in msg.mailparts:
-    ...   print '    %sfilename=%r sanitized_filename=%r type=%s charset=%s desc=%s size=%d' % ('*'if mailpart.is_body else ' ', mailpart.filename, mailpart.sanitized_filename, mailpart.type, mailpart.charset, mailpart.part.get('Content-Description'), 0 if mailpart.get_payload()==None else len(mailpart.get_payload()))
-    ...   if mailpart.is_body=='text/plain':
-    ...     payload, used_charset=decode_text(mailpart.get_payload(), mailpart.charset, None) 
-    ...     print '        >', payload.split('\\n')[0]
-    ...
-        *filename=None sanitized_filename='text.txt' type=text/plain charset=us-ascii desc=None size=10
-            > The text.
-    """
-
-    @staticmethod
-    def smart_parser(input):
-        """
-        Use the appropriate parser and return a email.message.Message object
-        (this is not a L{PyzMessage} object)
-        
-        @type input: string, file, bytes, binary_file or  email.message.Message
-        @param input: the source of the message
-        @rtype: email.message.Message
-        @returns: the message
-        """
-        if isinstance(input, email.message.Message):
-            return input
-        
-        if sys.version_info<(3, 0):
-            # python 2.x 
-            if isinstance(input, str):
-                return email.message_from_string(input)
-            elif hasattr(input, 'read') and hasattr(input, 'readline'):
-                return email.message_from_file(input)
-            else:
-                raise ValueError('input must be a string, a file or a Message')
-        else:
-            # python 3.x 
-            if isinstance(input, str):
-                return email.message_from_string(input)
-            elif isinstance(input, bytes):
-                # python >= 3.2 only
-                return email.message_from_bytes(input)
-            elif hasattr(input, 'read') and hasattr(input, 'readline'):
-                if hasattr(input, 'encoding'):
-                    # python >= 3.2 only
-                    return email.message_from_file(input)
-                else:
-                    return email.message_from_binary_file(input)
-            else:
-                raise ValueError('input must be a string a bytes, a file or a Message')
-    
-    @staticmethod
-    def factory(input):
-        """
-        Use the appropriate parser and return a L{PyzMessage} object
-        see L{smart_parser}
-        @type input: string, file, bytes, binary_file or  email.message.Message
-        @param input: the source of the message
-        @rtype: L{PyzMessage}
-        @returns: the L{PyzMessage} message
-        """
-        return PyzMessage(PyzMessage.smart_parser(input))
-        
-    
-    def __init__(self, message):
-        """
-        Initialize the object with data coming from I{message}. 
-        
-        @type message: inherit email.message.Message
-        @param message: The message
-        """
-        if not isinstance(message, email.message.Message):
-            raise ValueError("message must inherit from email.message.Message use PyzMessage.factory() instead")
-        self.__dict__.update(message.__dict__)  
-
-        self.mailparts=get_mail_parts(self)
-        self.text_part=None
-        self.html_part=None
-        
-        filenames=[]
-        for part in self.mailparts:
-            ext=mimetypes.guess_extension(part.type)
-            if not ext:
-                 # default to .bin
-                ext='.bin'
-            elif ext=='.ksh':
-                # guess_extension() is not very accurate, .txt is more
-                # appropriate than .ksh 
-                ext='.txt'
-            
-            sanitized_filename=sanitize_filename(part.filename, part.type.split('/', 1)[0], ext)
-            sanitized_filename=handle_filename_collision(sanitized_filename, filenames)
-            filenames.append(sanitized_filename.lower())
-            part.sanitized_filename=sanitized_filename
-            
-            if part.is_body=='text/plain': 
-                self.text_part=part
-                
-            if part.is_body=='text/html': 
-                self.html_part=part
-    
-    def get_addresses(self, name):
-        """
-        return the I{name} header value as an list of addresses tuple as 
-        returned by L{get_mail_addresses()}
-        
-        @type name: str
-        @param name: the name of the header to read value from: 'to', 'cc' are
-        valid I{name} here.
-        @rtype: tuple
-        @returns: a tuple of the form C{('Sender Name', 'sender.address@domain.com')}
-        or C{('', '')} if no header match that I{name}.
-        """ 
-        return get_mail_addresses(self, name)
-    
-    def get_address(self, name):
-        """
-        return the I{name} header value as an address tuple as returned by 
-        L{get_mail_addresses()} 
-
-        @type name: str
-        @param name: the name of the header to read value from: : C{'from'} can
-        be used to return the sender address. 
-        @rtype: list of tuple
-        @returns: a list of tuple of the form C{[('Recipient Name', 'recipient.address@domain.com'), ...]}
-        or an empty list if no header match that I{name}.
-        """ 
-        value=get_mail_addresses(self, name)
-        if value:
-            return value[0]
-        else:
-            return ('', '')
-    
-    def get_subject(self, default=''):
-        """
-        return the RFC2047 decoded subject.
-        
-        @type default: any
-        @param default: The value to return if the message has no I{Subject}
-        @rtype: unicode
-        @returns: the subject or C{default}
-        """
-        return self.get_decoded_header('subject', default)
-
-    def get_decoded_header(self, name, default=''):
-        """
-        return decoded header I{name} using RFC2047. Always use this function 
-        to access header, because any header can contain invalid characters 
-        and this function sanitize the string and avoid unicode exception later
-        in your program. 
-        EVEN for date, I already saw a "Center box bar horizontal" instead
-        of a minus character. 
-
-        @type name: str
-        @param name: the name of the header to read value from.
-        @type default: any
-        @param default: The value to return if the I{name} field don't exist
-        in this message.
-        @rtype: unicode
-        @returns: the value of the header having that I{name} or C{default} if no
-        header have that name.
-        """
-        value=self.get(name)
-        if value==None:
-            value=default
-        else:
-            value=decode_mail_header(value)
-        return value
-    
-class PzMessage(PyzMessage):
-    """
-    Old name and interface for PyzMessage. 
-    B{Deprecated}
-    """
-
-    def __init__(self, input):
-        """
-        Initialize the object with data coming from I{input}. 
-        
-        @type input: str or file or email.message.Message
-        @param input: used as the raw content for the email, can be a string,  
-        a file object or an email.message.Message object. 
-        """
-        PyzMessage.__init__(self, self.smart_parser(input))
-        
-
-def message_from_string(s, *args, **kws):
-    """
-    Parse a string into a L{PyzMessage} object model.
-    @type s: str
-    @param s: the input string 
-    @rtype: L{PyzMessage}
-    @return: the L{PyzMessage} object
-    """
-    return PyzMessage(email.message_from_string(s, *args, **kws))
-
-def message_from_file(fp, *args, **kws):
-    """
-    Read a file and parse its contents into a L{PyzMessage} object model.
-    @type fp: text_file
-    @param fp: the input file (must be open in text mode if Python >= 3.0)
-    @rtype: L{PyzMessage}
-    @return: the L{PyzMessage} object
-    """
-    return PyzMessage(email.message_from_file(fp, *args, **kws))
-
-def message_from_bytes(s, *args, **kws):
-    """
-    Parse a bytes string into a L{PyzMessage} object model.
-    B{(Python >= 3.2)}
-    @type s: bytes
-    @param s: the input bytes string 
-    @rtype: L{PyzMessage}
-    @return: the L{PyzMessage} object
-    """
-    return PyzMessage(email.message_from_bytes(s, *args, **kws))
-
-def message_from_binary_file(fp, *args, **kws):
-    """
-    Read a binary file and parse its contents into a L{PyzMessage} object model.
-    B{(Python >= 3.2)}
-    @type fp: binary_file
-    @param fp: the input file, must be open in binary mode 
-    @rtype: L{PyzMessage}
-    @return: the L{PyzMessage} object
-    """
-    return PyzMessage(email.message_from_binary_file(fp, *args, **kws))
-
-
-if __name__ == "__main__":
-    import sys
-
-    if len(sys.argv)<=1:
-        print('usage : %s filename' % sys.argv[0])
-        print('read an email from file and display a resume of its content')
-        sys.exit(1)
-        
-    msg=PyzMessage.factory(open(sys.argv[1], 'rb'))
-    
-    print('Subject: %r' % (msg.get_subject(), ))
-    print('From: %r' % (msg.get_address('from'), ))
-    print('To: %r' % (msg.get_addresses('to'), ))
-    print('Cc: %r' % (msg.get_addresses('cc'), ))
-    print('Date: %r' % (msg.get_decoded_header('date', ''), ))
-    print('Message-Id: %r' % (msg.get_decoded_header('message-id', ''), ))
-    
-    for mailpart in msg.mailparts:
-        # dont forget to be careful to sanitize 'filename' and be carefull
-        # for filename collision, to before to save :
-        print('   %sfilename=%r type=%s charset=%s desc=%s size=%d' % ('*'if mailpart.is_body else ' ', mailpart.filename, mailpart.type, mailpart.charset, mailpart.part.get('Content-Description'), 0 if mailpart.get_payload()==None else len(mailpart.get_payload())))
-
-        if mailpart.is_body=='text/plain':
-            # print first 3 lines
-            payload, used_charset=decode_text(mailpart.get_payload(), mailpart.charset, None) 
-            for line in payload.split('\n')[:3]:
-                # be careful console can be unable to display unicode characters
-                if line:
-                    print('       >', line)
-
-        
-
diff --git a/pyzmail/tests/__init__.py b/pyzmail/tests/__init__.py
deleted file mode 100644
index e69de29bb2..0000000000
diff --git a/pyzmail/tests/test_both.py b/pyzmail/tests/test_both.py
deleted file mode 100644
index 2607ed8d7f..0000000000
--- a/pyzmail/tests/test_both.py
+++ /dev/null
@@ -1,99 +0,0 @@
-import unittest
-import pyzmail
-from pyzmail.generate import *
-from pyzmail.parse import *
-
-class TestBoth(unittest.TestCase):
-
-    def setUp(self):
-        pass
-    
-    def test_compose_and_parse(self):
-        """test generate and parse"""
-        
-        sender=('Me', 'me@foo.com')
-        recipients=[('Him', 'him@bar.com'), 'just@me.com']
-        subject='Le sujet en Fran\xe7ais'
-        text_content='Bonjour aux Fran\xe7ais'
-        prefered_encoding='iso-8859-1'
-        text_encoding='iso-8859-1'
-        attachments=[('attached content', 'text', 'plain', 'textfile1.txt', 'us-ascii'),
-                     ('Fran\xe7ais', 'text', 'plain', 'textfile2.txt', 'iso-8859-1'),
-                     ('Fran\xe7ais', 'text', 'plain', 'textfile3.txt', 'iso-8859-1'),
-                     (b'image', 'image', 'jpg', 'imagefile.jpg', None),
-                     ]
-        embeddeds=[('embedded content', 'text', 'plain', 'embedded', 'us-ascii'),
-                   (b'picture', 'image', 'png', 'picture', None),
-                   ]
-        headers=[ ('X-extra', 'extra value'), ('X-extra2', "Seconde ent\xe8te"), ('X-extra3', 'last extra'),]
-        
-        message_id_string='pyzmail'
-        date=1313558269
-        
-        payload, mail_from, rcpt_to, msg_id=pyzmail.compose_mail(\
-            sender, \
-            recipients, \
-            subject, \
-            prefered_encoding, \
-            (text_content, text_encoding), \
-            html=None, \
-            attachments=attachments, \
-            embeddeds=embeddeds, \
-            headers=headers, \
-            message_id_string=message_id_string, \
-            date=date\
-            )
-        
-        msg=PyzMessage.factory(payload)
-        
-        self.assertEqual(sender, msg.get_address('from'))
-        self.assertEqual(recipients[0], msg.get_addresses('to')[0])
-        self.assertEqual(recipients[1], msg.get_addresses('to')[1][1])
-        self.assertEqual(subject, msg.get_subject())
-        self.assertEqual(subject, msg.get_decoded_header('subject'))
-        
-        # try to handle different timezone carefully
-        mail_date=list(email.utils.parsedate(msg.get_decoded_header('date')))
-        self.assertEqual(mail_date[:6], list(time.localtime(date))[:6])
-        
-        self.assertNotEqual(msg.get('message-id').find(message_id_string), -1)
-        for name, value in headers:
-            self.assertEqual(value, msg.get_decoded_header(name))
-        
-        for mailpart in msg.mailparts:
-            if mailpart.is_body:
-                self.assertEqual(mailpart.content_id, None)
-                self.assertEqual(mailpart.filename, None)
-                self.assertEqual(type(mailpart.sanitized_filename), str)
-                if mailpart.type=='text/plain':
-                    self.assertEqual(mailpart.get_payload(), text_content.encode(text_encoding))
-                else:
-                    self.fail('found unknown body part')
-            else:
-                if mailpart.filename:
-                    lst=attachments
-                    self.assertEqual(mailpart.filename, mailpart.sanitized_filename)
-                    self.assertEqual(mailpart.content_id, None)
-                elif mailpart.content_id:
-                    lst=embeddeds
-                    self.assertEqual(mailpart.filename, None)
-                else:
-                    self.fail('found unknown part')
-                    
-                found=False
-                for attach in lst:
-                    found=(mailpart.filename and attach[3]==mailpart.filename) \
-                        or (mailpart.content_id and attach[3]==mailpart.content_id)
-                    if found:
-                        break
-                        
-                if found:
-                    self.assertEqual(mailpart.type, attach[1]+'/'+attach[2])
-                    payload=mailpart.get_payload()
-                    if attach[1]=='text' and attach[4] and isinstance(attach[0], str):
-                        payload=payload.decode(attach[4])
-                    self.assertEqual(payload, attach[0])
-                else:
-                    self.fail('found unknown attachment')
-
-
diff --git a/pyzmail/tests/test_generate.py b/pyzmail/tests/test_generate.py
deleted file mode 100644
index 7afdebc593..0000000000
--- a/pyzmail/tests/test_generate.py
+++ /dev/null
@@ -1,30 +0,0 @@
-import unittest, doctest
-import pyzmail
-from pyzmail.generate import *
-
-class TestGenerate(unittest.TestCase):
-
-    def setUp(self):
-        pass
-    
-    def test_format_addresses(self):
-        """test format_addresse"""
-        self.assertEqual('foo@example.com', str(format_addresses([ 'foo@example.com', ])))
-        self.assertEqual('Foo <foo@example.com>', str(format_addresses([ ('Foo', 'foo@example.com'), ])))
-        # notice the space around the comma
-        self.assertEqual('foo@example.com , bar@example.com', str(format_addresses([ 'foo@example.com', 'bar@example.com'])))
-        # notice the space around the comma
-        self.assertEqual('Foo <foo@example.com> , Bar <bar@example.com>', str(format_addresses([ ('Foo', 'foo@example.com'), ( 'Bar', 'bar@example.com')])))
-
-# Add doctest 
-def load_tests(loader, tests, ignore):
-    # this works with python 2.7 and 3.x
-    tests.addTests(doctest.DocTestSuite(pyzmail.generate))
-    return tests
-
-def additional_tests():
-    # Add doctest for python 2.6 and below
-    if sys.version_info<(2, 7):
-        return doctest.DocTestSuite(pyzmail.generate)
-    else:
-        return unittest.TestSuite()
diff --git a/pyzmail/tests/test_parse.py b/pyzmail/tests/test_parse.py
deleted file mode 100644
index f7a5adb9e2..0000000000
--- a/pyzmail/tests/test_parse.py
+++ /dev/null
@@ -1,290 +0,0 @@
-import unittest, doctest
-import pyzmail
-from pyzmail.parse import *
-
-
-class Msg:
-    """mimic a email.Message"""
-    def __init__(self, value):
-        self.value=value
-        
-    def get_all(self, header_name, default):
-        if self.value:
-            return [self.value, ]
-        else:
-            return []
-
-class TestParse(unittest.TestCase):
-
-    def setUp(self):
-        pass
-    
-    def test_decode_mail_header(self):
-        """test decode_mail_header()"""
-        self.assertEqual(decode_mail_header(''), '')
-        self.assertEqual(decode_mail_header('hello'), 'hello')
-        self.assertEqual(decode_mail_header('hello '), 'hello ')
-        self.assertEqual(decode_mail_header('=?iso-8859-1?q?Courrier_=E8lectronique_Fran=E7ais?='), 'Courrier \xe8lectronique Fran\xe7ais')
-        self.assertEqual(decode_mail_header('=?utf8?q?Courrier_=C3=A8lectronique_Fran=C3=A7ais?='), 'Courrier \xe8lectronique Fran\xe7ais')
-        self.assertEqual(decode_mail_header('=?utf-8?b?RnJhbsOnYWlz?='), 'Fran\xe7ais')
-        self.assertEqual(decode_mail_header('=?iso-8859-1?q?Courrier_=E8lectronique_?= =?utf8?q?Fran=C3=A7ais?='), 'Courrier \xe8lectronique Fran\xe7ais')
-        self.assertEqual(decode_mail_header('=?iso-8859-1?q?Courrier_=E8lectronique_?= =?utf-8?b?RnJhbsOnYWlz?='), 'Courrier \xe8lectronique Fran\xe7ais')
-        self.assertEqual(decode_mail_header('h_subject_q_iso_8858_1 : =?ISO-8859-1?Q?Fran=E7ais=E20accentu=E9?= !'), 'h_subject_q_iso_8858_1 :Fran\xe7ais\xe20accentu\xe9!')
-   
-    def test_get_mail_addresses(self):
-        """test get_mail_addresses()"""
-        self.assertEqual([ ('foo@example.com', 'foo@example.com') ], get_mail_addresses(Msg('foo@example.com'), 'to'))
-        self.assertEqual([ ('Foo', 'foo@example.com'), ], get_mail_addresses(Msg('Foo <foo@example.com>'), 'to'))
-        # notice the space around the comma
-        self.assertEqual([ ('foo@example.com', 'foo@example.com'), ('bar@example.com', 'bar@example.com')], get_mail_addresses(Msg('foo@example.com , bar@example.com'), 'to'))
-        self.assertEqual([ ('Foo', 'foo@example.com'), ( 'Bar', 'bar@example.com')], get_mail_addresses(Msg('Foo <foo@example.com> , Bar <bar@example.com>'), 'to'))
-        self.assertEqual([ ('Foo', 'foo@example.com'), ('bar@example.com', 'bar@example.com')], get_mail_addresses(Msg('Foo <foo@example.com> , bar@example.com'), 'to'))
-        self.assertEqual([ ('Mr Foo', 'foo@example.com'), ('bar@example.com', 'bar@example.com')], get_mail_addresses(Msg('Mr\nFoo <foo@example.com> , bar@example.com'), 'to'))
-        
-        self.assertEqual([ ('Beno\xeet', 'benoit@example.com')], get_mail_addresses(Msg('=?utf-8?q?Beno=C3=AEt?= <benoit@example.com>'), 'to'))
-        
-        # address already encoded into utf8 (bad)
-        address='Ant\xf3nio Foo <a.foo@example.com>'.encode('utf8')
-        if sys.version_info<(3, 0):
-            self.assertEqual([('Ant\ufffd\ufffdnio Foo', 'a.foo@example.com')], get_mail_addresses(Msg(address), 'to'))
-        else:
-            # Python 3.2 return header when surrogate characters are used in header
-            self.assertEqual([('Ant??nio Foo', 'a.foo@example.com'), ], get_mail_addresses(Msg(email.header.Header(address, charset=email.charset.UNKNOWN8BIT, header_name='to')), 'to'))
-        
-    def test_get_filename(self):
-        """test get_filename()"""
-        import email.mime.image
-
-        filename='Fran\xe7ais.png'
-        if sys.version_info<(3, 0):
-            encoded_filename=filename.encode('iso-8859-1')
-        else:
-            encoded_filename=filename
-               
-        payload=b'data'
-        attach=email.mime.image.MIMEImage(payload, 'png')
-        attach.add_header('Content-Disposition', 'attachment', filename='image.png')
-        self.assertEqual('image.png', get_filename(attach))
-
-        attach=email.mime.image.MIMEImage(payload, 'png')
-        attach.add_header('Content-Disposition', 'attachment', filename=('iso-8859-1', 'fr', encoded_filename))
-        self.assertEqual('Fran\xe7ais.png', get_filename(attach))
-        
-        attach=email.mime.image.MIMEImage(payload, 'png')
-        attach.set_param('name', 'image.png')
-        self.assertEqual('image.png', get_filename(attach))
-
-        attach=email.mime.image.MIMEImage(payload, 'png')
-        attach.set_param('name', ('iso-8859-1', 'fr', encoded_filename))
-        self.assertEqual('Fran\xe7ais.png', get_filename(attach))
-
-        attach=email.mime.image.MIMEImage(payload, 'png')
-        attach.add_header('Content-Disposition', 'attachment', filename='image.png')
-        attach.set_param('name', 'image_wrong.png')
-        self.assertEqual('image.png', get_filename(attach))
-
-    def test_get_mailparts(self):
-        """test get_mailparts()"""
-        import email.mime.multipart
-        import email.mime.text
-        import email.mime.image
-        msg=email.mime.multipart.MIMEMultipart(boundary='===limit1==')
-        txt=email.mime.text.MIMEText('The text.', 'plain', 'us-ascii')
-        msg.attach(txt)
-        image=email.mime.image.MIMEImage(b'data', 'png')
-        image.add_header('Content-Disposition', 'attachment', filename='image.png')
-        image.add_header('Content-Description', 'the description')
-        image.add_header('Content-ID', '<this.is.the.normaly.unique.contentid>')
-        msg.attach(image)
-        
-        raw=msg.as_string(unixfrom=False)
-        expected_raw="""Content-Type: multipart/mixed; boundary="===limit1=="
-MIME-Version: 1.0
-
---===limit1==
-Content-Type: text/plain; charset="us-ascii"
-MIME-Version: 1.0
-Content-Transfer-Encoding: 7bit
-
-The text.
---===limit1==
-Content-Type: image/png
-MIME-Version: 1.0
-Content-Transfer-Encoding: base64
-Content-Disposition: attachment; filename="image.png"
-Content-Description: the description
-Content-ID: <this.is.the.normaly.unique.contentid>
-
-ZGF0YQ==<HERE1>
---===limit1==--"""
-    
-        if sys.version_info<(3, 0):
-            expected_raw=expected_raw.replace('<HERE1>','')
-        else:
-            expected_raw=expected_raw.replace('<HERE1>','\n')
-
-        self.assertEqual(raw, expected_raw)
-        
-        parts=get_mail_parts(msg)
-        # [MailPart<*text/plain charset=us-ascii len=9>, MailPart<image/png filename=image.png len=4>]
-
-        self.assertEqual(len(parts), 2)
-
-        self.assertEqual(parts[0].type, 'text/plain')
-        self.assertEqual(parts[0].is_body, 'text/plain') # not a error, is_body must be type 
-        self.assertEqual(parts[0].charset, 'us-ascii')
-        self.assertEqual(parts[0].get_payload().decode(parts[0].charset), 'The text.')
-
-        self.assertEqual(parts[1].type, 'image/png')
-        self.assertEqual(parts[1].is_body, False)
-        self.assertEqual(parts[1].charset, None)
-        self.assertEqual(parts[1].filename, 'image.png')
-        self.assertEqual(parts[1].description, 'the description')
-        self.assertEqual(parts[1].content_id, 'this.is.the.normaly.unique.contentid')
-        self.assertEqual(parts[1].get_payload(), b'data')
-
-    
-    raw_1='''Content-Type: text/plain; charset="us-ascii"
-MIME-Version: 1.0
-Content-Transfer-Encoding: 7bit
-Subject: simple test
-From: Me <me@foo.com>
-To: A <a@foo.com>, B <b@foo.com>
-Cc: C <c@foo.com>, d@foo.com
-User-Agent: pyzmail
-
-The text.
-'''
-
-    def check_message_1(self, msg):
-        self.assertEqual(msg.get_subject(), 'simple test')
-        self.assertEqual(msg.get_decoded_header('subject'), 'simple test')
-        self.assertEqual(msg.get_decoded_header('User-Agent'), 'pyzmail')
-        self.assertEqual(msg.get('User-Agent'), 'pyzmail')
-        self.assertEqual(msg.get_address('from'), ('Me', 'me@foo.com'))
-        self.assertEqual(msg.get_addresses('to'), [('A', 'a@foo.com'), ('B', 'b@foo.com')])
-        self.assertEqual(msg.get_addresses('cc'), [('C', 'c@foo.com'), ('d@foo.com', 'd@foo.com')])
-        self.assertEqual(len(msg.mailparts), 1)
-        self.assertEqual(msg.text_part, msg.mailparts[0])
-        self.assertEqual(msg.html_part, None)
-
-    # use 8bits encoding and 2 different charsets ! python 3.0 & 3.1 are not eable to parse this sample 
-    raw_2=b"""From: sender@domain.com
-To: recipient@domain.com
-Date: Tue, 7 Jun 2011 16:32:17 +0200
-Subject: contains 8bits attachments using different encoding
-Content-Type: multipart/mixed; boundary=mixed
-
---mixed
-Content-Type: text/plain; charset="us-ascii"
-MIME-Version: 1.0
-Content-Transfer-Encoding: 7bit
-
-body
---mixed
-Content-Type: text/plain; charset="windows-1252"
-MIME-Version: 1.0
-Content-Transfer-Encoding: 8bit
-Content-Disposition: attachment; filename="file1.txt"
-
-bo\xeete mail = mailbox
---mixed
-Content-Type: text/plain; charset="utf-8"
-MIME-Version: 1.0
-Content-Transfer-Encoding: 8bit
-Content-Disposition: attachment; filename="file2.txt"
-
-bo\xc3\xaete mail = mailbox
---mixed--
-"""
-    
-    def check_message_2(self, msg):
-        self.assertEqual(msg.get_subject(), 'contains 8bits attachments using different encoding')
-    
-        body, file1, file2=msg.mailparts
-
-        self.assertEqual('file1.txt', file1.filename)
-        self.assertEqual('file2.txt', file2.filename)
-        self.assertEqual('windows-1252', file1.charset)
-        self.assertEqual('utf-8', file2.charset)
-        content=b'bo\xeete mail = mailbox'.decode("windows-1252")
-        content1=file1.get_payload().decode(file1.charset)
-        content2=file2.get_payload().decode(file2.charset)
-        self.assertEqual(content, content1)
-        self.assertEqual(content, content2)
-
-    # this one contain non us-ascii chars in the header 
-    # py 2x and py3k return different value here  
-    raw_3=b'Content-Type: text/plain; charset="us-ascii"\n' \
-          b'MIME-Version: 1.0\n' \
-          b'Content-Transfer-Encoding: 7bit\n' \
-          + 'Subject: Beno\xeet & Ant\xf3nio\n'.encode('utf8') +\
-          b'From: =?utf-8?q?Beno=C3=AEt?= <benoit@example.com>\n' \
-          + 'To: Ant\xf3nio Foo <a.foo@example.com>\n'.encode('utf8') \
-          + 'Cc: Beno\xeet <benoit@foo.com>, d@foo.com\n'.encode('utf8') +\
-          b'User-Agent: pyzmail\n' \
-          b'\n' \
-          b'The text.\n'
-
-    def check_message_3(self, msg):
-        subject='Beno\ufffd\ufffdt & Ant\ufffd\ufffdnio' #  if sys.version_info<(3, 0) else u'Beno??t & Ant??nio'
-        self.assertEqual(msg.get_subject(), subject)
-        self.assertEqual(msg.get_decoded_header('subject'), subject)
-        self.assertEqual(msg.get_decoded_header('User-Agent'), 'pyzmail')
-        self.assertEqual(msg.get('User-Agent'), 'pyzmail')
-        self.assertEqual(msg.get_address('from'), ('Beno\xeet', 'benoit@example.com'))
-
-        to=msg.get_addresses('to')
-        self.assertEqual(to[0][1], 'a.foo@example.com')
-        self.assertEqual(to[0][0], 'Ant\ufffd\ufffdnio Foo' if sys.version_info<(3, 0) else 'Ant??nio Foo')
-        
-        cc=msg.get_addresses('cc')
-        self.assertEqual(cc[0][1], 'benoit@foo.com')
-        self.assertEqual(cc[0][0], 'Beno\ufffd\ufffdt' if sys.version_info<(3, 0) else 'Beno??t')
-        self.assertEqual(cc[1], ('d@foo.com', 'd@foo.com'))
-        
-        self.assertEqual(len(msg.mailparts), 1)
-        self.assertEqual(msg.text_part, msg.mailparts[0])
-        self.assertEqual(msg.html_part, None)
-
-
-    def check_pyzmessage_factories(self, input, check):
-        """test PyzMessage from different sources"""
-        if isinstance(input, bytes) and sys.version_info>=(3, 2):
-            check(PyzMessage.factory(input))
-            check(message_from_bytes(input))
-
-            import io
-            check(PyzMessage.factory(io.BytesIO(input)))
-            check(message_from_binary_file(io.BytesIO(input)))
-
-        if isinstance(input, str):
-
-            check(PyzMessage.factory(input))
-            check(message_from_string(input))
-
-            import io
-            check(PyzMessage.factory(io.StringIO(input)))
-            check(message_from_file(io.StringIO(input)))
-        
-    def test_pyzmessage_factories(self):
-        """test PyzMessage class different sources"""
-        self.check_pyzmessage_factories(self.raw_1, self.check_message_1)
-        self.check_pyzmessage_factories(self.raw_2, self.check_message_2)
-        self.check_pyzmessage_factories(self.raw_3, self.check_message_3)
-
-
-# Add doctest 
-def load_tests(loader, tests, ignore):
-    # this works with python 2.7 and 3.x
-    if sys.version_info<(3, 0): 
-        tests.addTests(doctest.DocTestSuite(pyzmail.parse))
-    return tests
-
-def additional_tests():
-    # Add doctest for python 2.6 and below
-    if sys.version_info<(2, 7):
-        return doctest.DocTestSuite(pyzmail.parse)
-    else:
-        return unittest.TestSuite()
-
diff --git a/pyzmail/tests/test_send.py b/pyzmail/tests/test_send.py
deleted file mode 100644
index 554f8549a4..0000000000
--- a/pyzmail/tests/test_send.py
+++ /dev/null
@@ -1,77 +0,0 @@
-import threading, smtpd, asyncore, socket, smtplib, time
-import unittest
-import pyzmail
-from pyzmail.generate import *
-
-
-smtpd_addr='127.0.0.1' 
-smtpd_port=32525
-smtp_bad_port=smtpd_port-1
-
-smtp_mode='normal'
-smtp_login=None
-smtp_password=None
-    
-
-class SMTPServer(smtpd.SMTPServer):
-    def __init__(self, localaddr, remoteaddr, received):
-        smtpd.SMTPServer.__init__(self, localaddr, remoteaddr)
-        self.set_reuse_addr()
-        # put the received mail into received list 
-        self.received=received
-        
-    def process_message(self, peer, mail_from, rcpt_to, data):
-        ret=None
-        if mail_from.startswith('data_error'):
-            ret='552 Requested mail action aborted: exceeded storage allocation'
-        self.received.append((ret, peer, mail_from, rcpt_to, data))
-        return ret
-
-class TestSend(unittest.TestCase):
-
-    def setUp(self):
-        self.received=[]
-        self.smtp_server=SMTPServer((smtpd_addr, smtpd_port), None, self.received)
-
-        def asyncloop():
-            # check every sec if all channel are close
-            asyncore.loop(1)
-
-                    
-        self.payload, self.mail_from, self.rcpt_to, self.msg_id=compose_mail(('Me', 'me@foo.com'), [('Him', 'him@bar.com')], 'the subject', 'iso-8859-1', ('Hello world', 'us-ascii'))
-
-        # start the server after having built the payload, to handle failure in 
-        # the code above
-        self.smtpd_thread=threading.Thread(target=asyncloop)
-        self.smtpd_thread.daemon=True
-        self.smtpd_thread.start()
-
-
-    def tearDown(self):
-        self.smtp_server.close()
-        self.smtpd_thread.join()
-        
-    def test_simple_send(self):
-        """simple send"""
-        ret=send_mail(self.payload, self.mail_from, self.rcpt_to, smtpd_addr, smtpd_port, smtp_mode=smtp_mode, smtp_login=smtp_login, smtp_password=smtp_password)
-        self.assertEqual(ret, dict())
-        (ret, peer, mail_from, rcpt_to, payload)=self.received[0]
-        self.assertEqual(self.payload, payload)
-        self.assertEqual(self.mail_from, mail_from)
-        self.assertEqual(self.rcpt_to, rcpt_to)
-        self.assertEqual('127.0.0.1', peer[0])
-
-    def test_send_to_a_wrong_port(self):
-        """send to a wrong port"""
-        self.smtp_server.close()
-        ret=send_mail(self.payload, self.mail_from, self.rcpt_to, smtpd_addr, smtpd_port, smtp_mode=smtp_mode, smtp_login=smtp_login, smtp_password=smtp_password)
-        self.assertEqual(type(ret), str)
-
-    def test_send_data_error(self):
-        """smtp server return error code"""
-        ret=send_mail(self.payload, 'data_error@foo.com', self.rcpt_to, smtpd_addr, smtp_bad_port, smtp_mode=smtp_mode, smtp_login=smtp_login, smtp_password=smtp_password)
-        self.assertEqual(type(ret), str)
-
-if __name__ == '__main__':
-    unittest.main()
-
diff --git a/pyzmail/tests/test_utils.py b/pyzmail/tests/test_utils.py
deleted file mode 100644
index e03d07d0d9..0000000000
--- a/pyzmail/tests/test_utils.py
+++ /dev/null
@@ -1,24 +0,0 @@
-import unittest, doctest
-import pyzmail
-from pyzmail.utils import *
-
-class TestUtils(unittest.TestCase):
-
-    def setUp(self):
-        pass
-    
-    def test_nothing(self):
-        pass
-
-# Add doctest 
-def load_tests(loader, tests, ignore):
-    # this works with python 2.7 and 3.x
-    tests.addTests(doctest.DocTestSuite(pyzmail.utils))
-    return tests
-
-def additional_tests():
-    # Add doctest for python 2.6 and below
-    if sys.version_info<(2, 7):
-        return doctest.DocTestSuite(pyzmail.utils)
-    else:
-        return unittest.TestSuite()
diff --git a/pyzmail/utils.py b/pyzmail/utils.py
deleted file mode 100644
index 436e2a4c34..0000000000
--- a/pyzmail/utils.py
+++ /dev/null
@@ -1,155 +0,0 @@
-#
-# pyzmail/utils.py
-# (c) Alain Spineux <alain.spineux@gmail.com>
-# http://www.magiksys.net/pyzmail
-# Released under LGPL
-
-"""
-Various functions used by other modules
-@var invalid_chars_in_filename: a mix of characters not permitted in most used filesystems
-@var invalid_windows_name: a list of unauthorized filenames under Windows
-"""
-
-import sys
-
-invalid_chars_in_filename=b'\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f' \
-                          b'\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f' \
-                          b'<>:"/\\|?*%\''
-
-invalid_windows_name=[b'CON', b'PRN', b'AUX', b'NUL', b'COM1', b'COM2', b'COM3', 
-                      b'COM4', b'COM5', b'COM6', b'COM7', b'COM8', b'COM9', 
-                      b'LPT1', b'LPT2', b'LPT3', b'LPT4', b'LPT5', b'LPT6', b'LPT7',
-                      b'LPT8', b'LPT9' ]
-
-def sanitize_filename(filename, alt_name, alt_ext):
-    """
-    Convert the given filename into a name that should work on all 
-    platform. Remove non us-ascii characters, and drop invalid filename.
-    Use the I{alternative} filename if needed.
-    
-    @type filename: unicode or None
-    @param filename: the originale filename or None. Can be unicode.
-    @type alt_name: str
-    @param alt_name: the alternative filename if filename is None or useless
-    @type alt_ext: str
-    @param alt_ext: the alternative filename extension (including the '.')
-
-    @rtype: str
-    @returns: a valid filename.
-     
-    >>> sanitize_filename('document.txt', 'file', '.txt')
-    'document.txt'
-    >>> sanitize_filename('number1.txt', 'file', '.txt')
-    'number1.txt'
-    >>> sanitize_filename(None, 'file', '.txt')
-    'file.txt'
-    >>> sanitize_filename(u'R\\xe9pertoir.txt', 'file', '.txt')
-    'Rpertoir.txt'
-    >>> # the '\\xe9' has been removed
-    >>> sanitize_filename(u'\\xe9\\xe6.html', 'file', '.txt')
-    'file.html'
-    >>> # all non us-ascii characters have been removed, the alternative name
-    >>> # has been used the replace empty string. The originale extention
-    >>> # is still valid  
-    >>> sanitize_filename(u'COM1.txt', 'file', '.txt')
-    'COM1A.txt'
-    >>> # if name match an invalid name or assimilated then a A is added
-    """
-    
-    if not filename:
-        return alt_name+alt_ext
-
-    if ((sys.version_info<(3, 0) and isinstance(filename, str)) or \
-        (sys.version_info>=(3, 0) and isinstance(filename, str))):
-        filename=filename.encode('ascii', 'ignore')
-    
-    filename=filename.translate(None, invalid_chars_in_filename)
-    filename=filename.strip()
-        
-    upper=filename.upper()
-    for name in invalid_windows_name:
-        if upper==name:
-            filename=filename+b'A'
-            break
-        if upper.startswith(name+b'.'):
-            filename=filename[:len(name)]+b'A'+filename[len(name):]
-            break
-
-    if sys.version_info>=(3, 0):
-        # back to string
-        filename=filename.decode('us-ascii')
-
-    if filename.rfind('.')==0:
-        filename=alt_name+filename
-
-    return filename
-
-def handle_filename_collision(filename, filenames):
-    """
-    Avoid filename collision, add a sequence number to the name when required.
-    'file.txt' will be renamed into 'file-01.txt' then 'file-02.txt' ... 
-    until their is no more collision. The file is not added to the list.
-     
-    Windows don't make the difference between lower and upper case. To avoid
-    "case" collision, the function compare C{filename.lower()} to the list.
-    If you provide a list in lower case only, then any collisions will be avoided.     
-    
-    @type filename: str
-    @param filename: the filename
-    @type filenames: list or set
-    @param filenames: a list of filenames. 
-
-    @rtype: str
-    @returns: the I{filename} or the appropriately I{indexed} I{filename} 
-     
-    >>> handle_filename_collision('file.txt', [ ])
-    'file.txt'
-    >>> handle_filename_collision('file.txt', [ 'file.txt' ])
-    'file-01.txt'
-    >>> handle_filename_collision('file.txt', [ 'file.txt', 'file-01.txt',])
-    'file-02.txt'
-    >>> handle_filename_collision('foo', [ 'foo',])
-    'foo-01'
-    >>> handle_filename_collision('foo', [ 'foo', 'foo-01',])
-    'foo-02'
-    >>> handle_filename_collision('FOO', [ 'foo', 'foo-01',])
-    'FOO-02'
-    """
-    if filename.lower() in filenames:
-        try:
-            basename, ext=filename.rsplit('.', 1)
-            ext='.'+ext
-        except ValueError:
-            basename, ext=filename, '' 
-
-        i=1
-        while True:
-            filename='%s-%02d%s' % (basename, i, ext)
-            if filename.lower() not in filenames:
-                break
-            i+=1
-        
-    return filename
-
-def is_usascii(value):
-    """"
-    test if string contains us-ascii characters only
-    
-    >>> is_usascii('foo')
-    True
-    >>> is_usascii(u'foo')
-    True
-    >>> is_usascii(u'Fran\xe7ais')
-    False
-    >>> is_usascii('bad\x81')
-    False
-    """
-    try:
-        # if value is byte string, it will be decoded first using us-ascii
-        # and will generate UnicodeEncodeError, this is fine too
-        value.encode('us-ascii')
-    except UnicodeError:
-        return False
-    
-    return True
- 
\ No newline at end of file
diff --git a/pyzmail/version.py b/pyzmail/version.py
deleted file mode 100644
index 03e1b0c6dc..0000000000
--- a/pyzmail/version.py
+++ /dev/null
@@ -1 +0,0 @@
-__version__='1.0.3'

From 94f95c0ebacdd1c3a1f4748b8a45b9f7305bbab7 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 28 Oct 2024 11:57:06 -0500
Subject: [PATCH 116/707] fix: correct label for objectively false ipr
 disclosures (#8101)

---
 ietf/ipr/tests.py                 | 26 ++++++++++++++++++++++----
 ietf/templates/ipr/ipr_table.html |  7 +++++--
 2 files changed, 27 insertions(+), 6 deletions(-)

diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index d72018f10b..67be278dbb 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -32,7 +32,8 @@
     GenericIprDisclosureFactory,
     IprDisclosureBaseFactory,
     IprDocRelFactory,
-    IprEventFactory
+    IprEventFactory,
+    ThirdPartyIprDisclosureFactory
 )
 from ietf.ipr.forms import DraftForm, HolderIprDisclosureForm
 from ietf.ipr.mail import (process_response_email, get_reply_to, get_update_submitter_emails,
@@ -104,9 +105,26 @@ def test_get_update_submitter_emails(self):
         self.assertTrue(messages[0].startswith('To: %s' % ipr.submitter_email))
         
     def test_showlist(self):
-        ipr = HolderIprDisclosureFactory()
-        r = self.client.get(urlreverse("ietf.ipr.views.showlist"))
-        self.assertContains(r, ipr.title)
+        for disc_factory_type in (HolderIprDisclosureFactory, GenericIprDisclosureFactory, ThirdPartyIprDisclosureFactory):
+            ipr = disc_factory_type(state_id="removed")
+            r = self.client.get(urlreverse("ietf.ipr.views.showlist"))
+            self.assertContains(r, ipr.title)
+            self.assertContains(r, "removed at the request of the submitter")
+            self.assertNotContains(r, "removed as objectively false")
+            ipr.state_id="posted"
+            ipr.save()
+            r = self.client.get(urlreverse("ietf.ipr.views.showlist"))
+            self.assertContains(r, ipr.title)
+            self.assertNotContains(r, "removed at the request of the submitter")
+            self.assertNotContains(r, "removed as objectively false")
+            ipr.state_id="removed_objfalse"
+            ipr.save()
+            r = self.client.get(urlreverse("ietf.ipr.views.showlist"))
+            self.assertContains(r, ipr.title)
+            self.assertNotContains(r, "removed at the request of the submitter")
+            self.assertContains(r, "removed as objectively false")
+            ipr.delete()
+
 
     def test_show_posted(self):
         ipr = HolderIprDisclosureFactory()
diff --git a/ietf/templates/ipr/ipr_table.html b/ietf/templates/ipr/ipr_table.html
index ce3982c987..d8247ea587 100644
--- a/ietf/templates/ipr/ipr_table.html
+++ b/ietf/templates/ipr/ipr_table.html
@@ -39,10 +39,13 @@
                                     </small>
                                 {% endif %}
                             {% endfor %}
-                        {% else %}
+                        {% elif ipr.state_id == 'removed' %}
                             <div>{{ ipr.title }}</div>
                             <small><i>This IPR disclosure was removed at the request of the submitter.</i></small>
-                        {% endif %}
+                        {% elif ipr.state_id == 'removed_objfalse' %}
+                            <div>{{ ipr.title }}</div>
+                            <small><i>This IPR disclosure was removed as objectively false.</i></small>
+                        {% endif %} {# Intentionally not emitting anything for any other states #}
                     </td>
                     {% if administrative_list == 'pending' %}
                         {% with ipr.get_latest_event_msgout as latest_msgout %}

From 8ec185cbb9b984aa526fffd620b347d5c094a0ce Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 28 Oct 2024 17:24:14 -0300
Subject: [PATCH 117/707] ci: fixed base image for prod (#8103)

---
 dev/build/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index e7cc510bc7..bede86fac9 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:latest
+FROM ghcr.io/ietf-tools/datatracker-app-base:2024102800
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive

From 50d4dc61fe9a6a8bb78e4af71f45b41081b396a5 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 28 Oct 2024 22:10:40 -0400
Subject: [PATCH 118/707] ci: Update build-base-app.yml with image versioning

---
 .github/workflows/build-base-app.yml | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 3995b4b49b..3cea907fdd 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -14,12 +14,17 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       packages: write
 
     steps:
     - uses: actions/checkout@v4
 
+    - name: Set Version
+      run: |
+        printf -v CURDATE '%(%Y%m%d%H%M)' -1
+        echo "IMGVERSION=$CURDATE" >> $GITHUB_OUTPUT
+
     - name: Set up QEMU
       uses: docker/setup-qemu-action@v3
     
@@ -42,4 +47,17 @@ jobs:
         file: docker/base.Dockerfile
         platforms: linux/amd64,linux/arm64
         push: true
-        tags: ghcr.io/ietf-tools/datatracker-app-base:latest
+        tags: |
+          ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}
+          ghcr.io/ietf-tools/datatracker-app-base:latest
+
+    - name: Update version references
+      run: |
+        sed -i "1s/.*/FROM ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
+
+    - name: Commit CHANGELOG.md
+      uses: stefanzweifel/git-auto-commit-action@v5
+      with:
+        branch: main
+        commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'
+        file_pattern: dev/build/Dockerfile

From 88dfeff3f765b79d6086362cbdd250e889fe0815 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 28 Oct 2024 22:40:12 -0400
Subject: [PATCH 119/707] ci: read target base image from TARGET_BASE file

---
 .github/workflows/build-base-app.yml |  5 +++--
 .github/workflows/build.yml          | 10 +++++++++-
 .github/workflows/tests.yml          |  9 +++++++--
 3 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 3cea907fdd..f5bcc49033 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -23,7 +23,7 @@ jobs:
     - name: Set Version
       run: |
         printf -v CURDATE '%(%Y%m%d%H%M)' -1
-        echo "IMGVERSION=$CURDATE" >> $GITHUB_OUTPUT
+        echo "IMGVERSION=$CURDATE" >> $GITHUB_ENV
 
     - name: Set up QEMU
       uses: docker/setup-qemu-action@v3
@@ -54,10 +54,11 @@ jobs:
     - name: Update version references
       run: |
         sed -i "1s/.*/FROM ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
+        echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
 
     - name: Commit CHANGELOG.md
       uses: stefanzweifel/git-auto-commit-action@v5
       with:
         branch: main
         commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'
-        file_pattern: dev/build/Dockerfile
+        file_pattern: dev/build/Dockerfile dev/build/TARGET_BASE
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 756600cc1e..6041fe474b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -63,6 +63,7 @@ jobs:
       pkg_version: ${{ steps.buildvars.outputs.pkg_version }}
       from_tag: ${{ steps.semver.outputs.nextStrict }}
       to_tag: ${{ steps.semver.outputs.current }}
+      base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
 
     steps:   
     - uses: actions/checkout@v4
@@ -122,6 +123,11 @@ jobs:
           echo "::notice::Non-production build ${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER created using branch $GITHUB_REF_NAME"
         fi
 
+    - name: Get Base Image Target Version
+      id: baseimgversion
+      run: |
+        echo "base_image_version=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
+
   # -----------------------------------------------------------------
   # TESTS
   # -----------------------------------------------------------------
@@ -133,6 +139,7 @@ jobs:
     needs: [prepare]
     with:
       ignoreLowerCoverage: ${{ github.event.inputs.ignoreLowerCoverage == 'true' }}
+      targetBaseVersion: ${{ needs.prepare.outputs.base_image_version }}
 
   # -----------------------------------------------------------------
   # RELEASE
@@ -200,6 +207,7 @@ jobs:
         SKIP_TESTS: ${{ github.event.inputs.skiptests }}
         DEBIAN_FRONTEND: noninteractive
         BROWSERSLIST_IGNORE_OLD_DATA: 1
+        TARGETBASE: ${{ needs.prepare.outputs.base_image_version }}
       with:
         host: ${{ steps.azlaunch.outputs.ipaddr }}
         port: 22
@@ -310,7 +318,7 @@ jobs:
           echo "=========================================================================="
           echo "Collecting statics..."
           echo "=========================================================================="
-          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:latest sh dev/build/collectstatics.sh
+          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:$TARGETBASE sh dev/build/collectstatics.sh
           echo "Pushing statics..."
           cd static
           aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 64db03db09..7da7ec897f 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -8,12 +8,17 @@ on:
         default: false
         required: true
         type: boolean
+      targetBaseVersion:
+        description: 'Target Base Image Version'
+        default: latest
+        required: true
+        type: string
 
 jobs:
   tests-python:
     name: Python Tests
     runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:latest
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ github.event.inputs.targetBaseVersion }}
     
     services:
       db:
@@ -114,7 +119,7 @@ jobs:
   tests-playwright-legacy:
     name: Playwright Legacy Tests
     runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:latest
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ github.event.inputs.targetBaseVersion }}
     strategy:
       fail-fast: false
       matrix:

From d1cffe7a145f61d366404574ab0aeac82eb148a9 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 28 Oct 2024 22:45:07 -0400
Subject: [PATCH 120/707] ci: fix base image version command

---
 .github/workflows/build-base-app.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index f5bcc49033..0c3d07a378 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -22,7 +22,7 @@ jobs:
 
     - name: Set Version
       run: |
-        printf -v CURDATE '%(%Y%m%d%H%M)' -1
+        printf -v CURDATE '%(%Y%m%dT%H%M)T' -1
         echo "IMGVERSION=$CURDATE" >> $GITHUB_ENV
 
     - name: Set up QEMU

From 96060fcf6f863e4bcb117db6cd95a9ef5f918f1a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 28 Oct 2024 22:59:29 -0400
Subject: [PATCH 121/707] ci: fix build-base-app workflow

---
 .github/workflows/build-base-app.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 0c3d07a378..11958dda72 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -53,7 +53,7 @@ jobs:
 
     - name: Update version references
       run: |
-        sed -i "1s/.*/FROM ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
+        sed -i "1s/.*/FROM ghcr.io\/ietf-tools\/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
         echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
 
     - name: Commit CHANGELOG.md

From 8a4d02026853a8118e4472e766447bf8bcae8952 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 28 Oct 2024 23:27:30 -0400
Subject: [PATCH 122/707] ci: use build account to push base image changes

---
 .github/workflows/build-base-app.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 11958dda72..609b641ef9 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -19,6 +19,8 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.GH_COMMON_TOKEN }}
 
     - name: Set Version
       run: |

From b926178e62e030db126f7aa291ca86e921d20af1 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 29 Oct 2024 11:18:31 -0500
Subject: [PATCH 123/707] fix: quicker calculation of status from draft text
 (#8111)

* fix: quicker calculation of status from draft text

* chore: remove unused import

* fix: only read a small prefix of draft text when needed
---
 ietf/doc/models.py    | 15 +++++++++++----
 ietf/doc/views_doc.py | 11 +++++------
 ietf/utils/draft.py   | 18 ++++++++++++++++++
 3 files changed, 34 insertions(+), 10 deletions(-)

diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 639e6ca857..077502db11 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -530,7 +530,7 @@ def replaces(self):
     def replaced_by(self):
         return set([ r.document for r in self.related_that("replaces") ])
 
-    def text(self):
+    def text(self, size = -1):
         path = self.get_file_name()
         root, ext =  os.path.splitext(path)
         txtpath = root+'.txt'
@@ -538,14 +538,21 @@ def text(self):
             path = txtpath
         try:
             with io.open(path, 'rb') as file:
-                raw = file.read()
+                raw = file.read(size)
         except IOError:
             return None
+        text = None
         try:
             text = raw.decode('utf-8')
         except UnicodeDecodeError:
-            text = raw.decode('latin-1')
-        #
+            for back in range(1,4):
+                try:
+                    text = raw[:-back].decode('utf-8')
+                    break
+                except UnicodeDecodeError:
+                    pass
+            if text is None:
+                text = raw.decode('latin-1')
         return text
 
     def text_or_error(self):
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 915dcebde5..50c60aefc5 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -84,7 +84,7 @@
 from ietf.review.utils import can_request_review_of_doc, review_assignments_to_list_for_docs, review_requests_to_list_for_docs
 from ietf.review.utils import no_review_from_teams_on_doc
 from ietf.utils import markup_txt, log, markdown
-from ietf.utils.draft import PlaintextDraft
+from ietf.utils.draft import get_status_from_draft_text
 from ietf.utils.meetecho import MeetechoAPIError, SlidesManager
 from ietf.utils.response import permission_denied
 from ietf.utils.text import maybe_split
@@ -2261,12 +2261,11 @@ def idnits2_state(request, name, rev=None):
     elif doc.intended_std_level:
         doc.deststatus = doc.intended_std_level.name
     else:
-        text = doc.text()
+         # 10000 is a conservative prefix on number of utf-8 encoded bytes to 
+         # cover at least the first 10 lines of characters
+        text = doc.text(size=10000)
         if text:
-            parsed_draft = PlaintextDraft(
-                text=doc.text(), source=name, name_from_source=False
-            )
-            doc.deststatus = parsed_draft.get_status()
+            doc.deststatus = get_status_from_draft_text(text)
         else:
             doc.deststatus = "Unknown"
     return render(
diff --git a/ietf/utils/draft.py b/ietf/utils/draft.py
index a1e79760ea..50add5abba 100755
--- a/ietf/utils/draft.py
+++ b/ietf/utils/draft.py
@@ -131,6 +131,24 @@ def acronym_match(s, l):
     #_debug(" s:%s; l:%s => %s; %s" % (s, l, acronym, s==acronym)) 
     return s == acronym
 
+def get_status_from_draft_text(text):
+
+    # Take prefix to shortcut work over very large drafts
+    # 5000 is conservatively much more than a full page of characters and we
+    # only want the first 10 lines.
+    text = text.strip()[:5000] # Take prefix to shortcut work over very large drafts 
+    text = re.sub(".\x08", "", text)    # Get rid of inkribbon backspace-emphasis
+    text = text.replace("\r\n", "\n")   # Convert DOS to unix
+    text = text.replace("\r", "\n")     # Convert MAC to unix
+    lines = text.split("\n")[:10]
+    status = None
+    for line in lines:
+        status_match = re.search(r"^\s*Intended [Ss]tatus:\s*(.*?)   ", line)
+        if status_match:
+            status = status_match.group(1)
+            break
+    return status
+
 class Draft:
     """Base class for drafts
 

From 0d43663e9bb99b45ee779b469f4c38ca14cfb208 Mon Sep 17 00:00:00 2001
From: NGPixel <NGPixel@users.noreply.github.com>
Date: Tue, 29 Oct 2024 16:43:21 +0000
Subject: [PATCH 124/707] ci: update base image target version to 20241029T1632

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)
 create mode 100644 dev/build/TARGET_BASE

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index bede86fac9..728b37156c 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:2024102800
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241029T1632
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
new file mode 100644
index 0000000000..2f8aac20f9
--- /dev/null
+++ b/dev/build/TARGET_BASE
@@ -0,0 +1 @@
+20241029T1632

From 5f685f45fb5f94f714a9c7a650d111d2e2bc16eb Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 12:52:18 -0400
Subject: [PATCH 125/707] ci: fix tests.yml workflow

---
 .github/workflows/tests.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 7da7ec897f..4e0b31fb14 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -18,7 +18,7 @@ jobs:
   tests-python:
     name: Python Tests
     runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:${{ github.event.inputs.targetBaseVersion }}
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
     
     services:
       db:
@@ -48,7 +48,7 @@ jobs:
           exit 1
         fi
         echo "Running tests..."
-        if [[ "x${{ github.event.inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then
+        if [[ "x${{ inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then
           echo "Lower coverage failures will be ignored."
           HOME=/root ./ietf/manage.py test -v2 --validate-html-harder --settings=settings_test --ignore-lower-coverage
         else
@@ -119,7 +119,7 @@ jobs:
   tests-playwright-legacy:
     name: Playwright Legacy Tests
     runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:${{ github.event.inputs.targetBaseVersion }}
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
     strategy:
       fail-fast: false
       matrix:

From dd3b9bd2f9f7fe6b558df3be500447a6ac609a29 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 14:06:57 -0400
Subject: [PATCH 126/707] ci: Update build.yml workflow to support parallel
 builds

---
 .github/workflows/build.yml | 58 ++++++++++++++++++++++---------------
 1 file changed, 34 insertions(+), 24 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6041fe474b..2e38e125d3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -166,13 +166,15 @@ jobs:
 
     - name: Launch build VM
       id: azlaunch
+      timeout-minutes: 10
       run: |
         echo "Authenticating to Azure..."
         az login --service-principal -u ${{ secrets.AZ_BUILD_APP_ID }} -p ${{ secrets.AZ_BUILD_PWD }} --tenant ${{ secrets.AZ_BUILD_TENANT_ID }}
+        
         echo "Creating VM..."
         vminfo=$(az vm create \
           --resource-group ghaDatatracker \
-          --name tmpGhaBuildVM \
+          --name tmpGhaBuildVM-${{ github.run_number }} \
           --image Ubuntu2204 \
           --admin-username azureuser \
           --generate-ssh-keys \
@@ -183,11 +185,19 @@ jobs:
           --os-disk-size-gb 100 \
           --eviction-policy Delete \
           --nic-delete-option Delete \
+          --os-disk-delete-option Delete \
           --output tsv \
           --query "publicIpAddress")
         echo "ipaddr=$vminfo" >> "$GITHUB_OUTPUT"
         echo "VM Public IP: $vminfo"
         cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
+        
+        echo "Fetching SSH host public keys..."
+        until ssh-keyscan -t rsa $vminfo 2> /dev/null
+        do
+          echo "Will try again in 5 seconds..."
+          sleep 5
+        done
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
     - name: Remote SSH into Build VM
@@ -353,29 +363,29 @@ jobs:
       shell: pwsh
       run: |
         echo "Destroying VM..."        
-        az vm delete -g ghaDatatracker -n tmpGhaBuildVM --yes --force-deletion true
-
-        $resourceOrderRemovalOrder = [ordered]@{
-            "Microsoft.Compute/virtualMachines" = 0
-            "Microsoft.Compute/disks" = 1
-            "Microsoft.Network/networkInterfaces" = 2
-            "Microsoft.Network/publicIpAddresses" = 3
-            "Microsoft.Network/networkSecurityGroups" = 4
-            "Microsoft.Network/virtualNetworks" = 5
-        }
-        echo "Fetching remaining resources..."
-        $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
-
-        $orderedResources = $resources 
-            | Sort-Object @{
-                Expression = {$resourceOrderRemovalOrder[$_.type]}
-                Descending = $False
-            }
-
-        echo "Deleting remaining resources..."
-        $orderedResources | ForEach-Object {
-            az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
-        }
+        az vm delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }} --yes --force-deletion true
+
+        # $resourceOrderRemovalOrder = [ordered]@{
+        #     "Microsoft.Compute/virtualMachines" = 0
+        #     "Microsoft.Compute/disks" = 1
+        #     "Microsoft.Network/networkInterfaces" = 2
+        #     "Microsoft.Network/publicIpAddresses" = 3
+        #     "Microsoft.Network/networkSecurityGroups" = 4
+        #     "Microsoft.Network/virtualNetworks" = 5
+        # }
+        # echo "Fetching remaining resources..."
+        # $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
+
+        # $orderedResources = $resources 
+        #     | Sort-Object @{
+        #         Expression = {$resourceOrderRemovalOrder[$_.type]}
+        #         Descending = $False
+        #     }
+
+        # echo "Deleting remaining resources..."
+        # $orderedResources | ForEach-Object {
+        #     az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
+        # }
 
         echo "Logout from Azure..."
         az logout

From e530e0af6aa2a4fe60e77a015e1969cc642abd55 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 15:24:56 -0400
Subject: [PATCH 127/707] ci: add disable selenium toggle to build workflow

---
 .github/workflows/build.yml | 1 +
 .github/workflows/tests.yml | 9 +++++++++
 2 files changed, 10 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2e38e125d3..71730ebb52 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -139,6 +139,7 @@ jobs:
     needs: [prepare]
     with:
       ignoreLowerCoverage: ${{ github.event.inputs.ignoreLowerCoverage == 'true' }}
+      skipSelenium: true
       targetBaseVersion: ${{ needs.prepare.outputs.base_image_version }}
 
   # -----------------------------------------------------------------
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4e0b31fb14..682300f2ab 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -8,6 +8,11 @@ on:
         default: false
         required: true
         type: boolean
+      skipSelenium:
+        description: 'Skip Selenium Tests'
+        default: false
+        required: true
+        type: boolean
       targetBaseVersion:
         description: 'Target Base Image Version'
         default: latest
@@ -47,6 +52,10 @@ jobs:
           echo "Model changes without migrations found."
           exit 1
         fi
+        if [[ "x${{ inputs.skipSelenium }}" == "xtrue" ]]; then
+          echo "Disable selenium tests..."
+          sudo rm /usr/bin/geckodriver
+        fi
         echo "Running tests..."
         if [[ "x${{ inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then
           echo "Lower coverage failures will be ignored."

From 0e392af870dea31496074aec0d26b1b838f337b7 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 15:32:14 -0400
Subject: [PATCH 128/707] ci: remove sudo from tests workflow

---
 .github/workflows/tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 682300f2ab..7ad3c82364 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -54,7 +54,7 @@ jobs:
         fi
         if [[ "x${{ inputs.skipSelenium }}" == "xtrue" ]]; then
           echo "Disable selenium tests..."
-          sudo rm /usr/bin/geckodriver
+          rm /usr/bin/geckodriver
         fi
         echo "Running tests..."
         if [[ "x${{ inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then

From 84f2affad9b211545f5e72f708f12db2ee5d461a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 16:07:05 -0400
Subject: [PATCH 129/707] ci: Update build.yml workflow

---
 .github/workflows/build.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 71730ebb52..96ba962a78 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -158,6 +158,7 @@ jobs:
       PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
       FROM_TAG: ${{needs.prepare.outputs.from_tag}}
       TO_TAG: ${{needs.prepare.outputs.to_tag}}
+      TARGET_BASE: ${{needs.prepare.outputs.base_image_version}}
 
     steps:
     - uses: actions/checkout@v4
@@ -218,7 +219,7 @@ jobs:
         SKIP_TESTS: ${{ github.event.inputs.skiptests }}
         DEBIAN_FRONTEND: noninteractive
         BROWSERSLIST_IGNORE_OLD_DATA: 1
-        TARGETBASE: ${{ needs.prepare.outputs.base_image_version }}
+        TARGET_BASE: ${{ env.TARGET_BASE }}
       with:
         host: ${{ steps.azlaunch.outputs.ipaddr }}
         port: 22
@@ -329,7 +330,7 @@ jobs:
           echo "=========================================================================="
           echo "Collecting statics..."
           echo "=========================================================================="
-          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:$TARGETBASE sh dev/build/collectstatics.sh
+          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:$TARGET_BASE sh dev/build/collectstatics.sh
           echo "Pushing statics..."
           cd static
           aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors

From 01700ab37bef2a40a7abf0a810841263badc0513 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 16:16:45 -0400
Subject: [PATCH 130/707] ci: fix build workflow

---
 .github/workflows/build.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 96ba962a78..d613328312 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -330,7 +330,8 @@ jobs:
           echo "=========================================================================="
           echo "Collecting statics..."
           echo "=========================================================================="
-          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:$TARGET_BASE sh dev/build/collectstatics.sh
+          echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }}"
+          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
           echo "Pushing statics..."
           cd static
           aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors

From d13b47064f9c592603a82a9f31d0d6cb2f7b5b4f Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 22:47:31 -0400
Subject: [PATCH 131/707] docs: update dev/tests/debug.sh

---
 dev/tests/debug.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dev/tests/debug.sh b/dev/tests/debug.sh
index 8ed28371ae..d87c504bb9 100644
--- a/dev/tests/debug.sh
+++ b/dev/tests/debug.sh
@@ -3,7 +3,7 @@
 # This script recreate the same environment used during tests on GitHub Actions
 # and drops you into a terminal at the point where the actual tests would be run.
 #
-# Refer to https://github.com/ietf-tools/datatracker/blob/main/.github/workflows/build.yml#L141-L155
+# Refer to https://github.com/ietf-tools/datatracker/blob/main/.github/workflows/tests.yml#L47-L66
 # for the commands to run next.
 #
 # Simply type "exit" + ENTER to exit and shutdown this test environment.

From 11fd2a560123070e9dea91e9a13bd28ad2fa412e Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 29 Oct 2024 23:55:47 -0400
Subject: [PATCH 132/707] ci: Update build.yml workflow

---
 .github/workflows/build.yml | 32 +++++++-------------------------
 1 file changed, 7 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d613328312..bf340c5233 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -363,33 +363,15 @@ jobs:
 
     - name: Destroy Build VM + resources
       if: always()
-      shell: pwsh
       run: |
-        echo "Destroying VM..."        
+        echo "Terminate VM..."        
         az vm delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }} --yes --force-deletion true
-
-        # $resourceOrderRemovalOrder = [ordered]@{
-        #     "Microsoft.Compute/virtualMachines" = 0
-        #     "Microsoft.Compute/disks" = 1
-        #     "Microsoft.Network/networkInterfaces" = 2
-        #     "Microsoft.Network/publicIpAddresses" = 3
-        #     "Microsoft.Network/networkSecurityGroups" = 4
-        #     "Microsoft.Network/virtualNetworks" = 5
-        # }
-        # echo "Fetching remaining resources..."
-        # $resources = az resource list --resource-group ghaDatatracker | ConvertFrom-Json
-
-        # $orderedResources = $resources 
-        #     | Sort-Object @{
-        #         Expression = {$resourceOrderRemovalOrder[$_.type]}
-        #         Descending = $False
-        #     }
-
-        # echo "Deleting remaining resources..."
-        # $orderedResources | ForEach-Object {
-        #     az resource delete --resource-group ghaDatatracker --ids $_.id --verbose
-        # }
-
+        echo "Delete Public IP..."
+        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}PublicIP --resource-type "Microsoft.Network/publicIPAddresses"
+        echo "Delete Network Security Group..."
+        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}NSG --resource-type "Microsoft.Network/networkSecurityGroups"
+        echo "Delete Virtual Network..."
+        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}VNET --resource-type "Microsoft.Network/virtualNetworks"
         echo "Logout from Azure..."
         az logout
         

From 1b4f481fbe32847eb81b6ae9a746b022f8c78ae3 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 30 Oct 2024 18:56:32 -0400
Subject: [PATCH 133/707] ci: fix tests.yml workflow

---
 .github/workflows/tests.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 7ad3c82364..bb767513c9 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -11,12 +11,12 @@ on:
       skipSelenium:
         description: 'Skip Selenium Tests'
         default: false
-        required: true
+        required: false
         type: boolean
       targetBaseVersion:
         description: 'Target Base Image Version'
         default: latest
-        required: true
+        required: false
         type: string
 
 jobs:

From 087bf1e77c7e677e3db402737d686ab5b1c6ec75 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sun, 3 Nov 2024 14:34:16 +0000
Subject: [PATCH 134/707] fix: prefer PDF in (+refactor) materials_document
 view (#8136)

* fix: prefer PDF in materials_document(); refactor

* style: Black

* refactor: split urls entry into simpler pair

It seems Django cannot reverse a URL pattern that uses "|" to
combine options when one inclues a named variable and the other
does not.

* test: test extension choice

* fix: fix test failures

* refactor: get rid of io.open()

* refactor: reunite url patterns

Adds option for a trailing "/" when using an extension,
which was not previously supported but should be somewhere
between harmless and a feature.
---
 ietf/meeting/tests_views.py | 57 +++++++++++++++++++++++++++++++++++--
 ietf/meeting/urls.py        |  2 +-
 ietf/meeting/views.py       | 54 +++++++++++++++++++++--------------
 3 files changed, 88 insertions(+), 25 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 0d291f12bc..d227708aa0 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -125,8 +125,12 @@ def tearDown(self):
         settings.MEETINGHOST_LOGO_PATH = self.saved_meetinghost_logo_path
         super().tearDown()
 
-    def write_materials_file(self, meeting, doc, content, charset="utf-8"):
-        path = os.path.join(self.materials_dir, "%s/%s/%s" % (meeting.number, doc.type_id, doc.uploaded_filename))
+    def write_materials_file(self, meeting, doc, content, charset="utf-8", with_ext=None):
+        if with_ext is None:
+            filename = doc.uploaded_filename
+        else:
+            filename = Path(doc.uploaded_filename).with_suffix(with_ext)
+        path = os.path.join(self.materials_dir, "%s/%s/%s" % (meeting.number, doc.type_id, filename))
 
         dirname = os.path.dirname(path)
         if not os.path.exists(dirname):
@@ -753,7 +757,56 @@ def test_materials_has_edit_links(self):
         )
         self.assertEqual(len(q(f'a[href^="{edit_url}#session"]')), 1, f'Link to session_details page for {acro}')
 
+    def test_materials_document_extension_choice(self):
+        def _url(**kwargs):
+            return urlreverse("ietf.meeting.views.materials_document", kwargs=kwargs)
+
+        presentation = SessionPresentationFactory(
+            document__rev="00",
+            document__name="slides-whatever",
+            document__uploaded_filename="slides-whatever-00.txt",
+            document__type_id="slides",
+            document__states=(("reuse_policy", "single"),)
+        )
+        session = presentation.session
+        meeting = session.meeting
+        # This is not a realistic set of files to exist, but is useful for testing. Normally,
+        # we'd have _either_ txt, pdf, or pptx + pdf.
+        self.write_materials_file(meeting, presentation.document, "Hi I'm a txt", with_ext=".txt")
+        self.write_materials_file(meeting, presentation.document, "Hi I'm a pptx", with_ext=".pptx")
+
+        # with no rev, prefers the uploaded_filename
+        r = self.client.get(_url(document="slides-whatever", num=meeting.number))  # no rev
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.content.decode(), "Hi I'm a txt")
+        
+        # with a rev, prefers pptx because it comes first alphabetically
+        r = self.client.get(_url(document="slides-whatever-00", num=meeting.number))
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.content.decode(), "Hi I'm a pptx")
 
+        # now create a pdf
+        self.write_materials_file(meeting, presentation.document, "Hi I'm a pdf", with_ext=".pdf")
+
+        # with no rev, still prefers uploaded_filename
+        r = self.client.get(_url(document="slides-whatever", num=meeting.number))  # no rev
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.content.decode(), "Hi I'm a txt")
+
+        # pdf should be preferred with a rev
+        r = self.client.get(_url(document="slides-whatever-00", num=meeting.number))
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.content.decode(), "Hi I'm a pdf")
+        
+        # and explicit extensions should, of course, be respected
+        for ext in ["pdf", "pptx", "txt"]:
+            r = self.client.get(_url(document="slides-whatever-00", num=meeting.number, ext=f".{ext}"))
+            self.assertEqual(r.status_code, 200)
+            self.assertEqual(r.content.decode(), f"Hi I'm a {ext}")
+        
+        # and 404 should come up if the ext is not found
+        r = self.client.get(_url(document="slides-whatever-00", num=meeting.number, ext=".docx"))
+        self.assertEqual(r.status_code, 404)
 
     def test_materials_editable_groups(self):
         meeting = make_meeting_test_data()
diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index f2e65578ec..42a5de623c 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -83,7 +83,7 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^week-view(?:.html)?/?$', AgendaRedirectView.as_view(pattern_name='agenda', permanent=True)),
     url(r'^materials(?:.html)?/?$', views.materials),
     url(r'^request_minutes/?$', views.request_minutes),
-    url(r'^materials/%(document)s((?P<ext>\.[a-z0-9]+)|/)?$' % settings.URL_REGEXPS, views.materials_document),
+    url(r'^materials/%(document)s(?P<ext>\.[a-z0-9]+)?/?$' % settings.URL_REGEXPS, views.materials_document),
     url(r'^session/?$', views.materials_editable_groups),
     url(r'^proceedings(?:.html)?/?$', views.proceedings),
     url(r'^proceedings(?:.html)?/finalize/?$', views.finalize_proceedings),
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index bce6ccd1bf..64fe73f484 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4,7 +4,6 @@
 
 import csv
 import datetime
-import glob
 import io
 import itertools
 import json
@@ -20,6 +19,7 @@
 from collections import OrderedDict, Counter, deque, defaultdict, namedtuple
 from functools import partialmethod
 import jsonschema
+from pathlib import Path
 from urllib.parse import parse_qs, unquote, urlencode, urlsplit, urlunsplit
 from tempfile import mkstemp
 from wsgiref.handlers import format_date_time
@@ -250,7 +250,14 @@ def _get_materials_doc(meeting, name):
 
 @cache_page(1 * 60)
 def materials_document(request, document, num=None, ext=None):
-    meeting=get_meeting(num,type_in=['ietf','interim'])
+    """Materials document view
+
+    :param request: Django request
+    :param document: Name of document without an extension
+    :param num: meeting number
+    :param ext: extension including preceding '.'
+    """
+    meeting = get_meeting(num, type_in=["ietf", "interim"])
     num = meeting.number
     try:
         doc, rev = _get_materials_doc(meeting=meeting, name=document)
@@ -258,32 +265,34 @@ def materials_document(request, document, num=None, ext=None):
         raise Http404("No such document for meeting %s" % num)
 
     if not rev:
-        filename = doc.get_file_name()
+        filename = Path(doc.get_file_name())
     else:
-        filename = os.path.join(doc.get_file_path(), document)
+        filename = Path(doc.get_file_path()) / document
     if ext:
-        if not filename.endswith(ext):
-            name, _ = os.path.splitext(filename)
-            filename = name + ext
-    else:
-        filenames = glob.glob(filename+'.*')
-        if filenames:
-            filename = filenames[0]
-    _, basename = os.path.split(filename)
-    if not os.path.exists(filename):
-        raise Http404("File not found: %s" % filename)
+        filename = filename.with_suffix(ext)
+    elif filename.suffix == "":
+        # If we don't already have an extension, try to add one
+        ext_choices = {
+            # Construct a map from suffix to full filename
+            fn.suffix: fn
+            for fn in sorted(filename.parent.glob(filename.stem + ".*"))
+        }
+        if len(ext_choices) > 0:
+            if ".pdf" in ext_choices:
+                filename = ext_choices[".pdf"]
+            else:
+                filename = list(ext_choices.values())[0]
+    if not filename.exists():
+        raise Http404(f"File not found: {filename}")
 
     old_proceedings_format = meeting.number.isdigit() and int(meeting.number) <= 96
     if settings.MEETING_MATERIALS_SERVE_LOCALLY or old_proceedings_format:
-        with io.open(filename, 'rb') as file:
-            bytes = file.read()
-        
+        bytes = filename.read_bytes()
         mtype, chset = get_mime_type(bytes)
         content_type = "%s; charset=%s" % (mtype, chset)
 
-        file_ext = os.path.splitext(filename)
-        if len(file_ext) == 2 and file_ext[1] == '.md' and mtype == 'text/plain':
-            sorted_accept = sort_accept_tuple(request.META.get('HTTP_ACCEPT'))
+        if filename.suffix == ".md" and mtype == "text/plain":
+            sorted_accept = sort_accept_tuple(request.META.get("HTTP_ACCEPT"))
             for atype in sorted_accept:
                 if atype[0] == "text/markdown":
                     content_type = content_type.replace("plain", "markdown", 1)
@@ -293,7 +302,7 @@ def materials_document(request, document, num=None, ext=None):
                         "minimal.html",
                         {
                             "content": markdown.markdown(bytes.decode(encoding=chset)),
-                            "title": basename,
+                            "title": filename.name,
                         },
                     )
                     content_type = content_type.replace("plain", "html", 1)
@@ -302,11 +311,12 @@ def materials_document(request, document, num=None, ext=None):
                     break
 
         response = HttpResponse(bytes, content_type=content_type)
-        response['Content-Disposition'] = 'inline; filename="%s"' % basename
+        response["Content-Disposition"] = f'inline; filename="{filename.name}"'
         return response
     else:
         return HttpResponseRedirect(redirect_to=doc.get_href(meeting=meeting))
 
+
 @login_required
 def materials_editable_groups(request, num=None):
     meeting = get_meeting(num)

From deb58a1a632fe2a4e40e16e2a869f977da881e3e Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Sun, 3 Nov 2024 16:23:29 +0000
Subject: [PATCH 135/707] fix: disallow header wrapping (#8134)

---
 ietf/templates/base.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/base.html b/ietf/templates/base.html
index ceb1d2df08..aa44955527 100644
--- a/ietf/templates/base.html
+++ b/ietf/templates/base.html
@@ -46,7 +46,7 @@
                     {% endif %}
                 </a>
                 <div class="collapse navbar-collapse" id="navbar-collapse">
-                    <ul class="nav navbar-nav">
+                    <ul class="nav navbar-nav flex-nowrap">
                         {% include "base/menu.html" with flavor="top" %}
                     </ul>
                 </div>

From 19d80ffc833ba05e351f170b22e04ebe1aa6e493 Mon Sep 17 00:00:00 2001
From: Tero Kivinen <kivinen@iki.fi>
Date: Sun, 3 Nov 2024 18:29:53 +0200
Subject: [PATCH 136/707] fix: fix statistics for RFCs to show properly.
 (#8139)

---
 ietf/stats/views.py | 27 +++++++++++++++++----------
 1 file changed, 17 insertions(+), 10 deletions(-)

diff --git a/ietf/stats/views.py b/ietf/stats/views.py
index 23e90ea23c..ea73d9f4fc 100644
--- a/ietf/stats/views.py
+++ b/ietf/stats/views.py
@@ -596,14 +596,17 @@ def build_document_stats_url(stats_type_override=Ellipsis, get_overrides=None):
 
         elif any(stats_type == t[0] for t in possible_yearly_stats_types):
 
-            person_filters = Q(documentauthor__document__type="draft")
-
             # filter persons
             rfc_state = State.objects.get(type="rfc", slug="published")
             if document_type == "rfc":
+                person_filters = Q(documentauthor__document__type="rfc")
                 person_filters &= Q(documentauthor__document__states=rfc_state)
             elif document_type == "draft":
+                person_filters = Q(documentauthor__document__type="draft")
                 person_filters &= ~Q(documentauthor__document__states=rfc_state)
+            else:
+                person_filters = Q(documentauthor__document__type="rfc")
+                person_filters |= Q(documentauthor__document__type="draft")
 
             doc_years = defaultdict(set)
 
@@ -625,8 +628,8 @@ def build_document_stats_url(stats_type_override=Ellipsis, get_overrides=None):
                         ).values_list("source", flat=True)[:1]
                     )
                 )
-                .values_list("draft", "time")
-                .order_by("draft")
+                .values_list("doc", "time")
+                .order_by("doc")
             )
 
             for doc_id, time in rfcevent_qs.iterator():
@@ -663,9 +666,11 @@ def build_document_stats_url(stats_type_override=Ellipsis, get_overrides=None):
                 for name, affiliation, doc in name_affiliation_doc_set:
                     a = aliases.get(affiliation, affiliation)
                     if a:
-                        for year in doc_years.get(doc):
-                            if years_from <= year <= years_to:
-                                bins[(year, a)].add(name)
+                        years = doc_years.get(doc)
+                        if years:
+                            for year in years:
+                                if years_from <= year <= years_to:
+                                    bins[(year, a)].add(name)
 
                 add_labeled_top_series_from_bins(chart_data, bins, limit=8)
 
@@ -724,9 +729,11 @@ def build_document_stats_url(stats_type_override=Ellipsis, get_overrides=None):
                     continent_name = country_to_continent.get(country_name, "")
 
                     if continent_name:
-                        for year in doc_years.get(doc):
-                            if years_from <= year <= years_to:
-                                bins[(year, continent_name)].add(name)
+                        years = doc_years.get(doc)
+                        if years:
+                            for year in years:
+                                if years_from <= year <= years_to:
+                                    bins[(year, continent_name)].add(name)
 
                 add_labeled_top_series_from_bins(chart_data, bins, limit=8)
 

From 7a5b152c5e7e5da7780705c6a3d51f16b51bb79a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Nov 2024 15:24:35 +0000
Subject: [PATCH 137/707] feat: async refresh of agenda data (#8146)

---
 ietf/meeting/tasks.py       | 12 ++++++++++++
 ietf/meeting/tests_views.py | 27 ++++++++++++++++-----------
 ietf/meeting/views.py       | 33 ++++++++++++++++++++++++++-------
 3 files changed, 54 insertions(+), 18 deletions(-)
 create mode 100644 ietf/meeting/tasks.py

diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
new file mode 100644
index 0000000000..43cbb0a75f
--- /dev/null
+++ b/ietf/meeting/tasks.py
@@ -0,0 +1,12 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+#
+# Celery task definitions
+#
+from celery import shared_task
+
+from .views import generate_agenda_data
+
+
+@shared_task
+def agenda_data_refresh():
+    generate_agenda_data(force_refresh=True)
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index d227708aa0..4f83cf0cd7 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -26,6 +26,7 @@
 from django.urls import reverse as urlreverse
 from django.conf import settings
 from django.contrib.auth.models import User
+from django.core.serializers.json import DjangoJSONEncoder
 from django.test import Client, override_settings
 from django.db.models import F, Max
 from django.http import QueryDict, FileResponse
@@ -49,7 +50,7 @@
 from ietf.meeting.utils import add_event_info_to_session_qs, participants_for_meeting
 from ietf.meeting.utils import create_recording, get_next_sequence, bluesheet_data
 from ietf.meeting.views import session_draft_list, parse_agenda_filter_params, sessions_post_save, agenda_extract_schedule
-from ietf.meeting.views import get_summary_by_area, get_summary_by_type, get_summary_by_purpose
+from ietf.meeting.views import get_summary_by_area, get_summary_by_type, get_summary_by_purpose, generate_agenda_data
 from ietf.name.models import SessionStatusName, ImportantDateName, RoleName, ProceedingsMaterialTypeName
 from ietf.utils.decorators import skip_coverage
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
@@ -245,30 +246,34 @@ def test_meeting_agenda(self):
 
         # Agenda API tests
         # -> Meeting data
-        r = self.client.get(urlreverse("ietf.meeting.views.api_get_agenda_data", kwargs=dict(num=meeting.number)))
-        self.assertEqual(r.status_code, 200)  
-        rjson = json.loads(r.content.decode("utf8"))
-        self.assertJSONEqual(
-            r.content.decode("utf8"),
+        # First, check that the generation function does the right thing
+        generated_data = generate_agenda_data(meeting.number)
+        self.assertEqual(
+            generated_data,
             {
                 "meeting": {
                     "number": meeting.number,
                     "city": meeting.city,
                     "startDate": meeting.date.isoformat(),
                     "endDate": meeting.end_date().isoformat(),
-                    "updated": rjson.get("meeting").get("updated"), # Just expect the value to exist
+                    "updated": generated_data.get("meeting").get("updated"),  # Just expect the value to exist
                     "timezone": meeting.time_zone,
                     "infoNote": meeting.agenda_info_note,
                     "warningNote": meeting.agenda_warning_note
                 },
-                "categories": rjson.get("categories"), # Just expect the value to exist
+                "categories": generated_data.get("categories"),  # Just expect the value to exist
                 "isCurrentMeeting": True,
-                "usesNotes": False, # make_meeting_test_data sets number=72
-                "schedule": rjson.get("schedule"), # Just expect the value to exist
+                "usesNotes": False,  # make_meeting_test_data sets number=72
+                "schedule": generated_data.get("schedule"),  # Just expect the value to exist
                 "floors": []
             }
         )
-        # -> Session Materials
+        with patch("ietf.meeting.views.generate_agenda_data", return_value=generated_data):
+            r = self.client.get(urlreverse("ietf.meeting.views.api_get_agenda_data", kwargs=dict(num=meeting.number)))
+        self.assertEqual(r.status_code, 200)  
+        # json.dumps using the DjangoJSONEncoder to handle timestamps consistently
+        self.assertJSONEqual(r.content.decode("utf8"), json.dumps(generated_data, cls=DjangoJSONEncoder))
+        # -> Session MaterialM
         r = self.client.get(urlreverse("ietf.meeting.views.api_get_session_materials", kwargs=dict(session_id=session.id)))
         self.assertEqual(r.status_code, 200)  
         rjson = json.loads(r.content.decode("utf8"))
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 64fe73f484..628125776f 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -25,6 +25,7 @@
 from wsgiref.handlers import format_date_time
 
 from django import forms
+from django.core.cache import caches
 from django.shortcuts import render, redirect, get_object_or_404
 from django.http import (HttpResponse, HttpResponseRedirect, HttpResponseForbidden,
                          HttpResponseNotFound, Http404, HttpResponseBadRequest,
@@ -1657,8 +1658,16 @@ def agenda(request, num=None, name=None, base=None, ext=None, owner=None, utc=""
         }
     })
 
-@cache_page(5 * 60)
-def api_get_agenda_data (request, num=None):
+
+def generate_agenda_data(num=None, force_refresh=False):
+    """Generate data for the api_get_agenda_data endpoint
+    
+    :num: meeting number
+    :force_refresh: True to force a refresh of the cache
+    """
+    cache = caches["default"]
+    cache_timeout = 6 * 60
+
     meeting = get_ietf_meeting(num)
     if meeting is None:
         raise Http404("No such full IETF meeting")
@@ -1667,6 +1676,12 @@ def api_get_agenda_data (request, num=None):
     else:
         pass
 
+    cache_key = f"generate_agenda_data_{meeting.number}"
+    if not force_refresh:
+        cached_value = cache.get(cache_key)
+        if cached_value is not None:
+            return cached_value
+
     # Select the schedule to show
     schedule = get_schedule(meeting, None)
 
@@ -1685,10 +1700,8 @@ def api_get_agenda_data (request, num=None):
 
     # Get Floor Plans
     floors = FloorPlan.objects.filter(meeting=meeting).order_by('order')
-
-    #debug.show('all([(item.acronym,item.session.order_number,item.session.order_in_meeting()) for item in filtered_assignments])')
-
-    return JsonResponse({
+    
+    result = {
         "meeting": {
             "number": schedule.meeting.number,
             "city": schedule.meeting.city,
@@ -1704,7 +1717,13 @@ def api_get_agenda_data (request, num=None):
         "usesNotes": meeting.uses_notes(),
         "schedule": list(map(agenda_extract_schedule, filtered_assignments)),
         "floors": list(map(agenda_extract_floorplan, floors))
-    })
+    }
+    cache.set(cache_key, result, timeout=cache_timeout)
+    return result
+
+
+def api_get_agenda_data(request, num=None):
+    return JsonResponse(generate_agenda_data(num, force_refresh=False))
 
 
 def api_get_session_materials(request, session_id=None):

From 7293e10a640a81851b0f3b12493f55f0f03114f7 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Nov 2024 16:46:23 +0000
Subject: [PATCH 138/707] feat: log start of gunicorn request (#8154)

* feat: log start of gunicorn request

* feat: add query string
---
 dev/build/gunicorn.conf.py | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 48661ef77d..89d3dd58d3 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -47,3 +47,18 @@
         }
     }
 }
+
+def pre_request(worker, req):
+    client_ip = "-"
+    cf_ray = "-"
+    for (header, value) in req.headers:
+        header = header.lower()
+        if header == "cf-connecting-ip":
+            client_ip = value
+        elif header == "cf-ray":
+            cf_ray = value
+    if req.query:
+        path = f"{req.path}?{req.query}"
+    else:
+        path = req.path
+    worker.log.info(f"gunicorn starting to process {req.method} {path} (client_ip={client_ip}, cf_ray={cf_ray})")

From de494790b643f1875e125c149459f7bbadf245a0 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Tue, 5 Nov 2024 15:03:21 +0000
Subject: [PATCH 139/707] fix: Selenium tests via scroll_and_click (#8150)

* fix: selenium tests scroll_and_click

* fix: reduce default timeout to 5 seconds

* fix: also use scroll_and_click on test_upcoming_materials_modal

* fix: remove conditional check on restoring scroll CSS

* fix: restore conditional check on restoring scroll CSS

* chore: code comments and adding jstest.py to coverage ignore
---
 ietf/meeting/tests_js.py | 17 +++++++---------
 ietf/settings.py         |  1 +
 ietf/utils/jstest.py     | 44 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 52 insertions(+), 10 deletions(-)

diff --git a/ietf/meeting/tests_js.py b/ietf/meeting/tests_js.py
index b15aa70e73..a184a7c6d0 100644
--- a/ietf/meeting/tests_js.py
+++ b/ietf/meeting/tests_js.py
@@ -249,7 +249,9 @@ def test_edit_meeting_schedule(self):
         self.assertTrue(s1_element.is_displayed())  # should still be displayed
         self.assertIn('hidden-parent', s1_element.get_attribute('class'),
                       'Session should be hidden when parent disabled')
-        s1_element.click()  # try to select
+        
+        self.scroll_and_click((By.CSS_SELECTOR, '#session{}'.format(s1.pk)))
+
         self.assertNotIn('selected', s1_element.get_attribute('class'),
                          'Session should not be selectable when parent disabled')
 
@@ -299,9 +301,9 @@ def test_edit_meeting_schedule(self):
                         'Session s1 should have moved to second meeting day')
 
         # swap timeslot column - put session in a differently-timed timeslot
-        self.driver.find_element(By.CSS_SELECTOR,
+        self.scroll_and_click((By.CSS_SELECTOR,
             '.day .swap-timeslot-col[data-timeslot-pk="{}"]'.format(slot1b.pk)
-        ).click()  # open modal on the second timeslot for room1
+        ))  # open modal on the second timeslot for room1
         self.assertTrue(self.driver.find_element(By.CSS_SELECTOR, "#swap-timeslot-col-modal").is_displayed())
         self.driver.find_element(By.CSS_SELECTOR,
             '#swap-timeslot-col-modal input[name="target_timeslot"][value="{}"]'.format(slot4.pk)
@@ -1373,13 +1375,8 @@ def test_upcoming_materials_modal(self):
         self.assertFalse(modal_div.is_displayed())
 
         # Click the 'materials' button
-        open_modal_button = self.wait.until(
-            expected_conditions.element_to_be_clickable(
-                (By.CSS_SELECTOR, '[data-bs-target="#modal-%s"]' % slug)
-            ),
-            'Modal open button not found or not clickable',
-        )
-        open_modal_button.click()
+        open_modal_button_locator = (By.CSS_SELECTOR, '[data-bs-target="#modal-%s"]' % slug)
+        self.scroll_and_click(open_modal_button_locator)
         self.wait.until(
             expected_conditions.visibility_of(modal_div),
             'Modal did not become visible after clicking open button',
diff --git a/ietf/settings.py b/ietf/settings.py
index a1a7fee102..0c57d87d11 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -598,6 +598,7 @@ def skip_unreadable_post(record):
     "ietf/review/import_from_review_tool.py",
     "ietf/utils/patch.py",
     "ietf/utils/test_data.py",
+    "ietf/utils/jstest.py",
 ]
 
 # These are code line regex patterns
diff --git a/ietf/utils/jstest.py b/ietf/utils/jstest.py
index 157f97912b..215d78d65f 100644
--- a/ietf/utils/jstest.py
+++ b/ietf/utils/jstest.py
@@ -12,6 +12,8 @@
     from selenium import webdriver
     from selenium.webdriver.firefox.service import Service
     from selenium.webdriver.firefox.options import Options
+    from selenium.webdriver.support.ui import WebDriverWait
+    from selenium.webdriver.support import expected_conditions
     from selenium.webdriver.common.by import By
 except ImportError as e:
     skip_selenium = True
@@ -87,6 +89,48 @@ def scroll_to_element(self, element):
         # actions = ActionChains(self.driver)
         # actions.move_to_element(element).perform()
 
+    def scroll_and_click(self, element_locator, timeout_seconds=5):
+        """
+        Selenium has restrictions around clicking elements outside the viewport, so
+        this wrapper encapsulates the boilerplate of forcing scrolling and clicking.
+
+        :param element_locator: A two item tuple of a Selenium locator eg `(By.CSS_SELECTOR, '#something')`
+        """
+
+        # so that we can restore the state of the webpage after clicking
+        original_html_scroll_behaviour_to_restore = self.driver.execute_script('return document.documentElement.style.scrollBehavior')
+        original_html_overflow_to_restore = self.driver.execute_script('return document.documentElement.style.overflow')
+
+        original_body_scroll_behaviour_to_restore = self.driver.execute_script('return document.body.style.scrollBehavior')
+        original_body_overflow_to_restore = self.driver.execute_script('return document.body.style.overflow')
+
+        self.driver.execute_script('document.documentElement.style.scrollBehavior = "auto"')
+        self.driver.execute_script('document.documentElement.style.overflow = "auto"')
+
+        self.driver.execute_script('document.body.style.scrollBehavior = "auto"')
+        self.driver.execute_script('document.body.style.overflow = "auto"')
+
+        element = self.driver.find_element(element_locator[0], element_locator[1])
+        self.scroll_to_element(element)
+
+        # Note that Selenium itself seems to have multiple definitions of 'clickable'.
+        # You might expect that the following wait for the 'element_to_be_clickable'
+        # would confirm that the following .click() would succeed but it doesn't.
+        # That's why the preceeding code attempts to force scrolling to bring the
+        # element into the viewport to allow clicking.
+        WebDriverWait(self.driver, timeout_seconds).until(expected_conditions.element_to_be_clickable(element_locator))
+
+        element.click()
+
+        if original_html_scroll_behaviour_to_restore:
+            self.driver.execute_script(f'document.documentElement.style.scrollBehavior = "{original_html_scroll_behaviour_to_restore}"')
+        if original_html_overflow_to_restore:
+            self.driver.execute_script(f'document.documentElement.style.overflow = "{original_html_overflow_to_restore}"')
+
+        if original_body_scroll_behaviour_to_restore:
+            self.driver.execute_script(f'document.body.style.scrollBehavior = "{original_body_scroll_behaviour_to_restore}"')
+        if original_body_overflow_to_restore:
+            self.driver.execute_script(f'document.body.style.overflow = "{original_body_overflow_to_restore}"')
 
 class presence_of_element_child_by_css_selector:
     """Wait for presence of a child of a WebElement matching a CSS selector

From 7b749f1623212411717de9567581b53b61c46aa3 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Wed, 6 Nov 2024 08:42:54 +0000
Subject: [PATCH 140/707] fix: Agenda mobile goto now (#8160)

* fix: agenda mobile goto now

* fix: manually close the dropdown
---
 client/agenda/AgendaMobileBar.vue | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/client/agenda/AgendaMobileBar.vue b/client/agenda/AgendaMobileBar.vue
index 78af96e255..63611e21c2 100644
--- a/client/agenda/AgendaMobileBar.vue
+++ b/client/agenda/AgendaMobileBar.vue
@@ -3,11 +3,13 @@
   n-dropdown(
     :options='jumpToDayOptions'
     size='huge'
+    :show='isDropdownOpenRef'
     :show-arrow='true'
     trigger='click'
     @select='jumpToDay'
+    @clickoutside='handleCloseDropdown'
     )
-    button
+    button(@click='handleOpenDropdown')
       i.bi.bi-arrow-down-circle
   button(@click='agendaStore.$patch({ filterShown: true })')
     i.bi.bi-funnel
@@ -28,7 +30,7 @@
 </template>
 
 <script setup>
-import { computed, h } from 'vue'
+import { computed, h, ref } from 'vue'
 import {
   NBadge,
   NDropdown,
@@ -61,7 +63,8 @@ function optionToLink(opts){
       {
         class: 'dropdown-link',
         'data-testid': 'mobile-link',
-        href: `#${key}`
+        href: `#${key}`,
+        onClick: () => jumpToDay(key)
       },
       [
         h(
@@ -77,6 +80,12 @@ function optionToLink(opts){
   }
 }
 
+const isDropdownOpenRef = ref(false)
+
+const handleOpenDropdown = () => isDropdownOpenRef.value = true
+
+const handleCloseDropdown = () => isDropdownOpenRef.value = false
+
 const jumpToDayOptions = computed(() => {
   const days = []
   if (agendaStore.isMeetingLive) {
@@ -124,6 +133,7 @@ function jumpToDay (dayId) {
   } else {
     document.getElementById(dayId)?.scrollIntoView(true)
   }
+  isDropdownOpenRef.value = false
 }
 
 function downloadIcs (key) {

From afbe6aa429bbc1499e1d6ba54e19359fa7ccccff Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 6 Nov 2024 08:49:54 +0000
Subject: [PATCH 141/707] fix: queue tasks in on_commit hook (#8149)

* fix: dispatch tasks in on_commit hook

* test: fix test
---
 ietf/community/models.py |  7 +++++--
 ietf/community/tests.py  |  4 +++-
 ietf/sync/views.py       | 21 +++++++++++++++++----
 3 files changed, 25 insertions(+), 7 deletions(-)

diff --git a/ietf/community/models.py b/ietf/community/models.py
index 4d820eb0f1..834f596355 100644
--- a/ietf/community/models.py
+++ b/ietf/community/models.py
@@ -3,7 +3,7 @@
 
 
 from django.conf import settings
-from django.db import models
+from django.db import models, transaction
 from django.db.models import signals
 from django.urls import reverse as urlreverse
 
@@ -117,7 +117,10 @@ def notify_events(sender, instance, **kwargs):
     # start a Celery task during tests. To prevent this, don't queue a celery task if we're running
     # tests.
     if settings.SERVER_MODE != "test":
-        notify_event_to_subscribers_task.delay(event_id=instance.pk)
+        # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+        transaction.on_commit(
+            lambda: notify_event_to_subscribers_task.delay(event_id=instance.pk)
+        )
 
 
 signals.post_save.connect(notify_events)
diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 5329267d8e..743242f11b 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -431,8 +431,10 @@ def test_subscription_for_group(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
+    # Mock out the on_commit call so we can tell whether the task was actually queued
+    @mock.patch("ietf.submit.views.transaction.on_commit", side_effect=lambda x: x())
     @mock.patch("ietf.community.models.notify_event_to_subscribers_task")
-    def test_notification_signal_receiver(self, mock_notify_task):
+    def test_notification_signal_receiver(self, mock_notify_task, mock_on_commit):
         """Saving a DocEvent should notify subscribers
         
         This implicitly tests that notify_events is hooked up to the post_save signal.
diff --git a/ietf/sync/views.py b/ietf/sync/views.py
index a2b5f62427..1b7ff2a36c 100644
--- a/ietf/sync/views.py
+++ b/ietf/sync/views.py
@@ -8,6 +8,7 @@
 from django.conf import settings
 from django.contrib.auth.models import User
 from django.contrib.contenttypes.models import ContentType
+from django.db import transaction
 from django.http import HttpResponse, HttpResponseRedirect, Http404
 from django.shortcuts import render
 from django.utils import timezone
@@ -79,16 +80,28 @@ def notify(request, org, notification):
     if request.method == "POST":
         if notification == "index":
             log("Queuing RFC Editor index sync from notify view POST")
-            tasks.rfc_editor_index_update_task.delay()
+            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            transaction.on_commit(
+                lambda: tasks.rfc_editor_index_update_task.delay()
+            )
         elif notification == "queue":
             log("Queuing RFC Editor queue sync from notify view POST")
-            tasks.rfc_editor_queue_updates_task.delay()
+            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            transaction.on_commit(
+                lambda: tasks.rfc_editor_queue_updates_task.delay()
+            )
         elif notification == "changes":
             log("Queuing IANA changes sync from notify view POST")
-            tasks.iana_changes_update_task.delay()
+            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            transaction.on_commit(
+                lambda: tasks.iana_changes_update_task.delay()
+            )
         elif notification == "protocols":
             log("Queuing IANA protocols sync from notify view POST")
-            tasks.iana_protocols_update_task.delay()
+            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            transaction.on_commit(
+                lambda: tasks.iana_protocols_update_task.delay()
+            )
 
         return HttpResponse("OK", content_type="text/plain; charset=%s"%settings.DEFAULT_CHARSET)
 

From 5348aefef927ec452a9df4e0d9a119126a0ab94d Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Wed, 6 Nov 2024 08:52:04 +0000
Subject: [PATCH 142/707] feat: show existing recordings on materials page
 (#8102)

* feat: show existing recordings on materials page

* chore: notes and recordings tests WIP

* chore: test session recordings

* feat: label all session recording urls as meetecho
---
 ietf/meeting/tests_views.py                   | 34 ++++++++
 .../meeting/session_details_panel.html        | 87 +++++++++----------
 2 files changed, 77 insertions(+), 44 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 4f83cf0cd7..0ab7afbdfa 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -407,6 +407,40 @@ def test_meeting_agenda(self):
         r = self.client.get(urlreverse('floor-plan', kwargs=dict(num=meeting.number)))
         self.assertEqual(r.status_code, 200)
 
+    def test_session_recordings_via_factories(self):
+        session = SessionFactory(meeting__type_id="ietf")
+        self.assertEqual(session.meetecho_recording_name, "")
+        self.assertEqual(len(session.recordings()), 0)
+        url = urlreverse("ietf.meeting.views.session_details", kwargs=dict(num=session.meeting.number, acronym=session.group.acronym))
+        r = self.client.get(url)
+        q = PyQuery(r.content)
+        # debug.show("q('#notes_and_recordings_1')")
+        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 1)
+        link = q("#notes_and_recordings_1 tr a")
+        self.assertEqual(len(link), 1)
+        self.assertEqual(link[0].attrib['href'], str(session.session_recording_url()))
+
+        session.meetecho_recording_name = 'my_test_session_name'
+        session.save()
+        r = self.client.get(url)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 1)
+        links = q("#notes_and_recordings_1 tr a")
+        self.assertEqual(len(links), 1)
+        self.assertEqual(links[0].attrib['href'], session.session_recording_url())
+
+        new_recording_url = "https://www.youtube.com/watch?v=jNQXAC9IVRw"
+        new_recording_title = "Me at the zoo"
+        create_recording(session, new_recording_url, new_recording_title)
+        r = self.client.get(url)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 2)
+        links = q("#notes_and_recordings_1 tr a")
+        self.assertEqual(len(links), 2)
+        self.assertEqual(links[0].attrib['href'], new_recording_url)
+        self.assertIn(new_recording_title, links[0].text_content())
+        #debug.show("q('#notes_and_recordings_1')")
+
     def test_agenda_ical_next_meeting_type(self):
         # start with no upcoming IETF meetings, just an interim
         MeetingFactory(
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index 52aeaaa8c1..a0f5884b9d 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -320,51 +320,50 @@ <h3 class="mt-4">Notes and recordings</h3>
                 </tr>
             {% endif %}
             {# Recordings #}
-            {% if session.has_recordings %}
-                {% with session.recordings as recordings %}
-                    {% if recordings %}
-                        {# There's no guaranteed order, so this is a bit messy: #}
-                        {# First, the audio recordings, if any #}
-                        {% for r in recordings %}
-                            {% if r.get_href and 'audio' in r.get_href %}
-                                <tr>
-                                    <td>
-                                        <a href="{{ r.get_href }}"><i class="bi bi-file-play"></i> {{ r.title }}</a>
-                                    </td>
-                                </tr>
-                            {% endif %}
-                        {% endfor %}
-                        {# Then the youtube recordings #}
-                        {% for r in recordings %}
-                            {% if r.get_href and 'youtu' in r.get_href %}
-                                <tr>
-                                    <td>
-                                        <a href="{{ r.get_href }}"><i class="bi bi-file-slides"></i> {{ r.title }}</a>
-                                    </td>
-                                </tr>
-                            {% endif %}
-                        {% endfor %}
-                        {# Finally, any other recordings #}
-                        {% for r in recordings %}
-                            {% if r.get_href and not 'audio' in r.get_href and not 'youtu' in r.get_href %}
-                                <tr>
-                                    <td>
-                                        <a href="{{ r.get_href }}"><i class="bi bi-file-play"></i> {{ r.title }}</a>
-                                    </td>
-                                </tr>
-                            {% endif %}
-                        {% endfor %}
-                    {% endif %}
-                {% endwith %}
-                {% if session.video_stream_url %}
-                    <tr>
-                        <td>
-                            <a href="{{ session.session_recording_url }}">
-                                <i class="bi bi-file-slides"></i> Session recording
-                            </a>
-                        </td>
-                    </tr>
+            {% with session.recordings as recordings %}
+                {% if recordings %}
+                    {# There's no guaranteed order, so this is a bit messy: #}
+                    {# First, the audio recordings, if any #}
+                    {% for r in recordings %}
+                        {% if r.get_href and 'audio' in r.get_href %}
+                            <tr>
+                                <td>
+                                    <a href="{{ r.get_href }}"><i class="bi bi-file-play"></i> {{ r.title }}</a>
+                                </td>
+                            </tr>
+                        {% endif %}
+                    {% endfor %}
+                    {# Then the youtube recordings #}
+                    {% for r in recordings %}
+                        {% if r.get_href and 'youtu' in r.get_href %}
+                            <tr>
+                                <td>
+                                    <a href="{{ r.get_href }}"><i class="bi bi-file-slides"></i> {{ r.title }}</a>
+                                </td>
+                            </tr>
+                        {% endif %}
+                    {% endfor %}
+                    {# Finally, any other recordings #}
+                    {% for r in recordings %}
+                        {% if r.get_href and not 'audio' in r.get_href and not 'youtu' in r.get_href %}
+                            <tr>
+                                <td>
+                                    <a href="{{ r.get_href }}"><i class="bi bi-file-play"></i> {{ r.title }}</a>
+                                </td>
+                            </tr>
+                        {% endif %}
+                    {% endfor %}
                 {% endif %}
+            {% endwith %}
+            {% if session.session_recording_url %}
+                <tr>
+                    <td>
+                        <a href="{{ session.session_recording_url }}">
+                            <i class="bi bi-file-slides"></i>
+                            Meetecho session recording
+                        </a>
+                    </td>
+                </tr>
             {% endif %}
             </tbody>
         </table>

From 701e8a50164cfd824707c29c6fd1dac2a85e0b9d Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 6 Nov 2024 07:42:44 -0500
Subject: [PATCH 143/707] ci: fix build.yml clone branch

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bf340c5233..405a793266 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -287,7 +287,7 @@ jobs:
           sudo mkdir -p /workspace
           sudo chown azureuser /workspace
           cd /workspace
-          gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags
+          gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags --branch ${{ github.ref_name }}
           cd datatracker
 
           if [ "$SKIP_TESTS" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then

From 277f1aafeb169068295d69c974bc312971a8fa7e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 6 Nov 2024 16:38:37 +0000
Subject: [PATCH 144/707] fix: search for correct ids in test (#8168)

---
 ietf/meeting/tests_views.py | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 0ab7afbdfa..afc72da9f7 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -414,9 +414,9 @@ def test_session_recordings_via_factories(self):
         url = urlreverse("ietf.meeting.views.session_details", kwargs=dict(num=session.meeting.number, acronym=session.group.acronym))
         r = self.client.get(url)
         q = PyQuery(r.content)
-        # debug.show("q('#notes_and_recordings_1')")
-        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 1)
-        link = q("#notes_and_recordings_1 tr a")
+        # debug.show("q(f'#notes_and_recordings_{session.pk}')")
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 1)
+        link = q(f"#notes_and_recordings_{session.pk} tr a")
         self.assertEqual(len(link), 1)
         self.assertEqual(link[0].attrib['href'], str(session.session_recording_url()))
 
@@ -424,8 +424,8 @@ def test_session_recordings_via_factories(self):
         session.save()
         r = self.client.get(url)
         q = PyQuery(r.content)
-        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 1)
-        links = q("#notes_and_recordings_1 tr a")
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 1)
+        links = q(f"#notes_and_recordings_{session.pk} tr a")
         self.assertEqual(len(links), 1)
         self.assertEqual(links[0].attrib['href'], session.session_recording_url())
 
@@ -434,12 +434,12 @@ def test_session_recordings_via_factories(self):
         create_recording(session, new_recording_url, new_recording_title)
         r = self.client.get(url)
         q = PyQuery(r.content)
-        self.assertEqual(len(q("#notes_and_recordings_1 tr")), 2)
-        links = q("#notes_and_recordings_1 tr a")
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 2)
+        links = q(f"#notes_and_recordings_{session.pk} tr a")
         self.assertEqual(len(links), 2)
         self.assertEqual(links[0].attrib['href'], new_recording_url)
         self.assertIn(new_recording_title, links[0].text_content())
-        #debug.show("q('#notes_and_recordings_1')")
+        #debug.show("q(f'#notes_and_recordings_{session_pk}')")
 
     def test_agenda_ical_next_meeting_type(self):
         # start with no upcoming IETF meetings, just an interim

From 8c787b54f9246663ddd1bfc7b4a2faee2fb7d459 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 7 Nov 2024 17:41:36 +0000
Subject: [PATCH 145/707] fix: control test meeting date to be in the past
 (#8177)

---
 ietf/meeting/tests_views.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index afc72da9f7..0647da52ab 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -408,7 +408,7 @@ def test_meeting_agenda(self):
         self.assertEqual(r.status_code, 200)
 
     def test_session_recordings_via_factories(self):
-        session = SessionFactory(meeting__type_id="ietf")
+        session = SessionFactory(meeting__type_id="ietf", meeting__date=date_today()-datetime.timedelta(days=180))
         self.assertEqual(session.meetecho_recording_name, "")
         self.assertEqual(len(session.recordings()), 0)
         url = urlreverse("ietf.meeting.views.session_details", kwargs=dict(num=session.meeting.number, acronym=session.group.acronym))

From a35aa67c703f00a5ea5b6bca68f4bb2129872b93 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 8 Nov 2024 11:55:47 +0000
Subject: [PATCH 146/707] chore: clarify transaction-related comments (#8180)

---
 ietf/community/models.py |  2 +-
 ietf/submit/tests.py     |  4 ++--
 ietf/submit/views.py     |  6 ++++--
 ietf/sync/views.py       | 12 ++++++++----
 4 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/ietf/community/models.py b/ietf/community/models.py
index 834f596355..0407730107 100644
--- a/ietf/community/models.py
+++ b/ietf/community/models.py
@@ -117,7 +117,7 @@ def notify_events(sender, instance, **kwargs):
     # start a Celery task during tests. To prevent this, don't queue a celery task if we're running
     # tests.
     if settings.SERVER_MODE != "test":
-        # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+        # Wrap in on_commit in case a transaction is open
         transaction.on_commit(
             lambda: notify_event_to_subscribers_task.delay(event_id=instance.pk)
         )
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 21ed6672df..6a56839177 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -2334,8 +2334,8 @@ def test_cancel_preapproval(self):
         self.assertEqual(len(Preapproval.objects.filter(name=preapproval.name)), 0)
 
 
-# Transaction.on_commit() requires use of TransactionTestCase, but that has a performance penalty. Replace it
-# with a no-op for testing purposes.
+# Transaction.on_commit() interacts badly with TestCase's transaction behavior. Replace it
+# with a pass-through for testing purposes.
 @mock.patch.object(transaction, 'on_commit', lambda x: x())
 @override_settings(IDTRACKER_BASE_URL='https://datatracker.example.com')
 class ApiSubmissionTests(BaseSubmitTestCase):
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index f710bdeb0c..2b9b55c00e 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -90,7 +90,8 @@ def upload_submission(request):
             clear_existing_files(form)
             save_files(form)
             create_submission_event(request, submission, desc="Uploaded submission")
-            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            # Wrap in on_commit in case a transaction is open
+            # (As of 2024-11-08, this only runs in a transaction during tests)
             transaction.on_commit(
                 lambda: process_uploaded_submission_task.delay(submission.pk)
             )
@@ -166,7 +167,8 @@ def err(code, error, messages=None):
                 save_files(form)
                 create_submission_event(request, submission, desc="Uploaded submission through API")
 
-                # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+                # Wrap in on_commit in case a transaction is open
+                # (As of 2024-11-08, this only runs in a transaction during tests)
                 transaction.on_commit(
                     lambda: process_and_accept_uploaded_submission_task.delay(submission.pk)
                 )
diff --git a/ietf/sync/views.py b/ietf/sync/views.py
index 1b7ff2a36c..62306c6fc1 100644
--- a/ietf/sync/views.py
+++ b/ietf/sync/views.py
@@ -80,25 +80,29 @@ def notify(request, org, notification):
     if request.method == "POST":
         if notification == "index":
             log("Queuing RFC Editor index sync from notify view POST")
-            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            # Wrap in on_commit in case a transaction is open
+            # (As of 2024-11-08, this only runs in a transaction during tests)
             transaction.on_commit(
                 lambda: tasks.rfc_editor_index_update_task.delay()
             )
         elif notification == "queue":
             log("Queuing RFC Editor queue sync from notify view POST")
-            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            # Wrap in on_commit in case a transaction is open
+            # (As of 2024-11-08, this only runs in a transaction during tests)
             transaction.on_commit(
                 lambda: tasks.rfc_editor_queue_updates_task.delay()
             )
         elif notification == "changes":
             log("Queuing IANA changes sync from notify view POST")
-            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            # Wrap in on_commit in case a transaction is open
+            # (As of 2024-11-08, this only runs in a transaction during tests)
             transaction.on_commit(
                 lambda: tasks.iana_changes_update_task.delay()
             )
         elif notification == "protocols":
             log("Queuing IANA protocols sync from notify view POST")
-            # Wrap in on_commit so the delayed task cannot start until the view is done with the DB
+            # Wrap in on_commit in case a transaction is open
+            # (As of 2024-11-08, this only runs in a transaction during tests)
             transaction.on_commit(
                 lambda: tasks.iana_protocols_update_task.delay()
             )

From b4fd3bfbb7e8f56ab20297d0cbb3437d91f739a4 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 13 Nov 2024 09:51:43 -0600
Subject: [PATCH 147/707] chore: remove dead code (#8207)

* chore: remove dead SYNC_BIN_PATH

* chore: remove unused Status class name attribute

* chore: remove unused import
---
 ietf/status/models.py | 1 -
 ietf/sync/views.py    | 3 ---
 2 files changed, 4 deletions(-)

diff --git a/ietf/status/models.py b/ietf/status/models.py
index b3f97d989e..c551920275 100644
--- a/ietf/status/models.py
+++ b/ietf/status/models.py
@@ -8,7 +8,6 @@
 import debug                            # pyflakes:ignore
 
 class Status(models.Model):
-    name = 'Status'
     
     date = models.DateTimeField(default=timezone.now)
     slug = models.SlugField(blank=False, null=False, unique=True)
diff --git a/ietf/sync/views.py b/ietf/sync/views.py
index 62306c6fc1..bd539d4e18 100644
--- a/ietf/sync/views.py
+++ b/ietf/sync/views.py
@@ -2,7 +2,6 @@
 # -*- coding: utf-8 -*-
 
 import datetime
-import os
 import json
 
 from django.conf import settings
@@ -23,8 +22,6 @@
 from ietf.utils.response import permission_denied
 
 
-SYNC_BIN_PATH = os.path.abspath(os.path.join(os.path.dirname(os.path.abspath(__file__)), "../bin"))
-
 #@role_required('Secretariat', 'IANA', 'RFC Editor')
 def discrepancies(request):
     sections = find_discrepancies()

From a70171dfd9354be46a28d6bc8d632df5bf07287f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 13 Nov 2024 12:51:04 -0400
Subject: [PATCH 148/707] chore: remove more dead code (#8208)

* chore: remove unused settings

* chore: remove unused ietf.utils.aliases / config
---
 ietf/settings.py      |  9 +----
 ietf/utils/aliases.py | 82 -------------------------------------------
 2 files changed, 1 insertion(+), 90 deletions(-)
 delete mode 100644 ietf/utils/aliases.py

diff --git a/ietf/settings.py b/ietf/settings.py
index 0c57d87d11..30f4b367c6 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -744,8 +744,6 @@ def skip_unreadable_post(record):
 IANA_SYNC_CHANGES_URL = "https://datatracker.iana.org:4443/data-tracker/changes"
 IANA_SYNC_PROTOCOLS_URL = "https://www.iana.org/protocols/"
 
-RFC_TEXT_RSYNC_SOURCE="ftp.rfc-editor.org::rfcs-text-only"
-
 RFC_EDITOR_SYNC_PASSWORD="secret"
 RFC_EDITOR_SYNC_NOTIFICATION_URL = "https://www.rfc-editor.org/parser/parser.php"
 RFC_EDITOR_GROUP_NOTIFICATION_EMAIL = "webmaster@rfc-editor.org"
@@ -972,7 +970,6 @@ def skip_unreadable_post(record):
 # ==============================================================================
 
 
-RSYNC_BINARY = '/usr/bin/rsync'
 YANGLINT_BINARY = '/usr/bin/yanglint'
 DE_GFM_BINARY = '/usr/bin/de-gfm.ruby2.5'
 
@@ -1014,7 +1011,6 @@ def skip_unreadable_post(record):
 # CHAT_ARCHIVE_URL_PATTERN = 'https://www.ietf.org/jabber/logs/{chat_room_name}?C=M;O=D'
 
 PYFLAKES_DEFAULT_ARGS= ["ietf", ]
-VULTURE_DEFAULT_ARGS= ["ietf", ]
 
 # Automatic Scheduling
 #
@@ -1062,8 +1058,6 @@ def skip_unreadable_post(record):
 TEST_DATA_DIR = os.path.abspath(BASE_DIR + "/../test/data")
 
 
-POSTCONFIRM_PATH   = "/a/postconfirm/wrapper"
-
 USER_PREFERENCE_DEFAULTS = {
     "expires_soon"  : "14",
     "new_enough"    : "14",
@@ -1078,6 +1072,7 @@ def skip_unreadable_post(record):
     "@ietf.org$",
 ]
 
+# Configuration for django-markup
 MARKUP_SETTINGS = {
     'restructuredtext': {
         'settings_overrides': {
@@ -1091,8 +1086,6 @@ def skip_unreadable_post(record):
     }
 }
 
-MAILMAN_LIB_DIR = '/usr/lib/mailman'
-
 # This is the number of seconds required between subscribing to an ietf
 # mailing list and datatracker account creation being accepted
 LIST_ACCOUNT_DELAY = 60*60*25           # 25 hours
diff --git a/ietf/utils/aliases.py b/ietf/utils/aliases.py
deleted file mode 100644
index 9f9aebc0b9..0000000000
--- a/ietf/utils/aliases.py
+++ /dev/null
@@ -1,82 +0,0 @@
-#!/usr/bin/env python
-# Copyright The IETF Trust 2013-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
-# -*- Python -*-
-#
-# $Id: aliasutil.py $
-#
-# Author: Markus Stenberg <mstenber@cisco.com>
-#
-
-
-"""
-
-Mailing list alias dumping utilities
-
-"""
-
-
-from django.conf import settings
-from ietf.utils.log import log
-
-import debug                            # pyflakes:ignore
-
-def rewrite_email_address(email):
-    """ Prettify the email address (and if it's empty, skip it by
-    returning None). """
-    if not email:
-        return
-    email = email.strip()
-    if not email:
-        return
-    if email[0]=='<' and email[-1] == '>':
-        email = email[1:-1]
-    # If it doesn't look like email, skip
-    if '@' not in email and '?' not in email:
-        return
-    return email
-
-def rewrite_address_list(l):
-    """ This utility function makes sure there is exactly one instance
-    of an address within the result list, and preserves order
-    (although it may not be relevant to start with) """
-    h = {}
-    for address in l:
-        #address = address.strip()
-        if address in h: continue
-        h[address] = True
-        yield address
-
-def dump_sublist(afile, vfile, alias, adomains, vdomain, emails):
-    if not emails:
-        return emails
-    # Nones in the list should be skipped
-    emails = [_f for _f in emails if _f]
-
-    # Make sure emails are sane and eliminate the Nones again for
-    # non-sane ones
-    emails = [rewrite_email_address(e) for e in emails]
-    emails = [_f for _f in emails if _f]
-
-    # And we'll eliminate the duplicates too but preserve order
-    emails = list(rewrite_address_list(emails))
-    if not emails:
-        return emails
-    try:
-        filtername  = 'xfilter-%s' % (alias, )  # in aliases, --> | expandname
-        expandname  = 'expand-%s' % (alias, )   # in virtual, --> email list
-
-        for domain in adomains:
-            aliasaddr   = '%s@%s' % (alias, domain) # in virtual, --> filtername
-            vfile.write('%-64s  %s\n' % (aliasaddr, filtername))
-        afile.write('%-64s  "|%s filter %s %s"\n' % (filtername+':', settings.POSTCONFIRM_PATH, expandname, vdomain))
-        vfile.write('%-64s  %s\n' % ("%s@%s"%(expandname, vdomain), ', '.join(emails)))
-
-    except UnicodeEncodeError:
-        # If there's unicode in email address, something is badly
-        # wrong and we just silently punt
-        # XXX - is there better approach?
-        log('Error encoding email address for an %s alias: %s' % (alias, repr(emails)))
-        return []
-    return emails
-

From 7905b8db611dacb1389a13f33146fd019c723907 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 14 Nov 2024 01:53:55 -0500
Subject: [PATCH 149/707] ci: Update build.yml to use GHA larger runner

---
 .github/workflows/build.yml | 289 ++++++++++++------------------------
 1 file changed, 91 insertions(+), 198 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 405a793266..67f24ba76f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -149,7 +149,8 @@ jobs:
     name: Make Release
     if: ${{ !failure() && !cancelled() }}
     needs: [tests, prepare]
-    runs-on: ubuntu-latest
+    runs-on:
+      group: hperf-8c32r
     permissions:
       contents: write
       packages: write
@@ -166,215 +167,107 @@ jobs:
         fetch-depth: 1
         fetch-tags: false
 
-    - name: Launch build VM
-      id: azlaunch
-      timeout-minutes: 10
+    - name: Setup Node.js environment
+      uses: actions/setup-node@v4
+      with:
+        node-version: 18.x
+
+    - name: Setup Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.x"
+
+    - name: Download a Coverage Results
+      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
+      uses: actions/download-artifact@v4.1.8
+      with:
+        name: coverage
+
+    - name: Make Release Build
+      env:
+        DEBIAN_FRONTEND: noninteractive
+        BROWSERSLIST_IGNORE_OLD_DATA: 1
       run: |
-        echo "Authenticating to Azure..."
-        az login --service-principal -u ${{ secrets.AZ_BUILD_APP_ID }} -p ${{ secrets.AZ_BUILD_PWD }} --tenant ${{ secrets.AZ_BUILD_TENANT_ID }}
-        
-        echo "Creating VM..."
-        vminfo=$(az vm create \
-          --resource-group ghaDatatracker \
-          --name tmpGhaBuildVM-${{ github.run_number }} \
-          --image Ubuntu2204 \
-          --admin-username azureuser \
-          --generate-ssh-keys \
-          --priority Spot \
-          --size Standard_D8ads_v5 \
-          --max-price -1 \
-          --ephemeral-os-disk \
-          --os-disk-size-gb 100 \
-          --eviction-policy Delete \
-          --nic-delete-option Delete \
-          --os-disk-delete-option Delete \
-          --output tsv \
-          --query "publicIpAddress")
-        echo "ipaddr=$vminfo" >> "$GITHUB_OUTPUT"
-        echo "VM Public IP: $vminfo"
-        cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
+        echo "PKG_VERSION: $PKG_VERSION"
+        echo "GITHUB_SHA: $GITHUB_SHA"
+        echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
+        echo "Running frontend build script..."
+        echo "Compiling native node packages..."
+        yarn rebuild
+        echo "Packaging static assets..."
+        yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
+        yarn legacy:build
+        echo "Setting version $PKG_VERSION..."
+        sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
+        sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
+        sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
+
+    - name: Set Production Flags
+      if: ${{ env.SHOULD_DEPLOY == 'true' }}
+      run: |
+        echo "Setting production flags in settings.py..."
+        sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
         
-        echo "Fetching SSH host public keys..."
-        until ssh-keyscan -t rsa $vminfo 2> /dev/null
-        do
-          echo "Will try again in 5 seconds..."
-          sleep 5
-        done
-        ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
+    - name: Make Release Tarball
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      run: |
+        echo "Build release tarball..."
+        mkdir -p /home/runner/work/release
+        tar -czf /home/runner/work/release/release.tar.gz -X dev/build/exclude-patterns.txt .
 
-    - name: Remote SSH into Build VM
-      uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
+    - name: Collect + Push Statics
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        GITHUB_ACTOR: ${{ github.actor }}
-        GITHUB_SHA: ${{ github.sha }}
-        GITHUB_REF_NAME: ${{ github.ref_name }}
-        GITHUB_RUN_ID: ${{ github.run_id }}
+        DEBIAN_FRONTEND: noninteractive
         AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
         AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
         AWS_DEFAULT_REGION: auto
         AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
-        PKG_VERSION: ${{ env.PKG_VERSION }}
-        SHOULD_DEPLOY: ${{ env.SHOULD_DEPLOY }}
-        SKIP_TESTS: ${{ github.event.inputs.skiptests }}
+      run: |
+        echo "Collecting statics..."
+        echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }}"
+        docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
+        echo "Pushing statics..."
+        cd static
+        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
+
+    - name: Augment dockerignore for docker image build
+      env:
         DEBIAN_FRONTEND: noninteractive
-        BROWSERSLIST_IGNORE_OLD_DATA: 1
-        TARGET_BASE: ${{ env.TARGET_BASE }}
+      run: |
+        cat >> .dockerignore <<EOL
+        .devcontainer
+        .github
+        .vscode
+        k8s
+        playwright
+        svn-history
+        docker-compose.yml
+        EOL
+
+    - name: Setup Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v3
       with:
-        host: ${{ steps.azlaunch.outputs.ipaddr }}
-        port: 22
-        username: azureuser
-        command_timeout: 60m
-        key_path: ${{ github.workspace }}/prvkey.key
-        envs: GITHUB_TOKEN,GITHUB_ACTOR,GITHUB_SHA,GITHUB_REF_NAME,GITHUB_RUN_ID,AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY,AWS_DEFAULT_REGION,AWS_ENDPOINT_URL,PKG_VERSION,SHOULD_DEPLOY,SKIP_TESTS,DEBIAN_FRONTEND,BROWSERSLIST_IGNORE_OLD_DATA
-        script_stop: true
-        script: |
-          export DEBIAN_FRONTEND=noninteractive
-          lsb_release -a
-          sudo apt-get update
-          sudo apt-get upgrade -y
-          sudo apt-get install wget unzip curl -y
-
-          echo "=========================================================================="
-          echo "Installing Docker..."
-          echo "=========================================================================="
-          curl -fsSL https://get.docker.com -o get-docker.sh
-          sudo sh get-docker.sh
-          sudo docker buildx create \
-            --name container-builder \
-            --driver docker-container \
-            --bootstrap --use
-
-          echo "=========================================================================="
-          echo "Login to ghcr.io..."
-          echo "=========================================================================="
-          echo $GITHUB_TOKEN | sudo docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
-
-          echo "=========================================================================="
-          echo "Installing GH CLI..."
-          echo "=========================================================================="
-          sudo mkdir -p -m 755 /etc/apt/keyrings \
-          	&& wget -qO- https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg > /dev/null \
-          	&& sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
-          	&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null \
-          	&& sudo apt update \
-          	&& sudo apt install gh -y
-
-          echo "=========================================================================="
-          echo "Installing AWS CLI..."
-          echo "=========================================================================="
-          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
-          unzip awscliv2.zip
-          sudo ./aws/install
-
-          echo "=========================================================================="
-          echo "Install Node.js..."
-          echo "=========================================================================="
-          curl -fsSL https://deb.nodesource.com/setup_18.x -o nodesource_setup.sh
-          sudo bash nodesource_setup.sh
-          sudo apt-get install -y nodejs
-          sudo corepack enable
-
-          echo "=========================================================================="
-          echo "Install Python 3.x..."
-          echo "=========================================================================="
-          sudo apt-get install python3 python3-dev -y
-          python3 --version
-
-          echo "=========================================================================="
-          echo "Clone project..."
-          echo "=========================================================================="
-          sudo mkdir -p /workspace
-          sudo chown azureuser /workspace
-          cd /workspace
-          gh repo clone ietf-tools/datatracker -- --depth=1 --no-tags --branch ${{ github.ref_name }}
-          cd datatracker
-
-          if [ "$SKIP_TESTS" = "false" ] || [ "$GITHUB_REF_NAME" = "release" ] ; then
-            echo "=========================================================================="
-            echo "Downloading coverage..."
-            echo "=========================================================================="
-            gh run download $GITHUB_RUN_ID -n coverage
-          fi
-
-          echo "=========================================================================="
-          echo "Building project..."
-          echo "=========================================================================="
-          echo "PKG_VERSION: $PKG_VERSION"
-          echo "GITHUB_SHA: $GITHUB_SHA"
-          echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
-          echo "Running frontend build script..."
-          echo "Compiling native node packages..."
-          yarn rebuild
-          echo "Packaging static assets..."
-          yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
-          yarn legacy:build
-          echo "Setting version $PKG_VERSION..."
-          sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
-          sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
-          sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
 
-          if [ "$SHOULD_DEPLOY" = "true" ] ; then
-            echo "=========================================================================="
-            echo "Setting production flags in settings.py..."
-            echo "=========================================================================="
-            sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
-          fi
-
-          echo "=========================================================================="
-          echo "Build release tarball..."
-          echo "=========================================================================="
-          mkdir -p /workspace/release
-          tar -czf /workspace/release.tar.gz -X dev/build/exclude-patterns.txt .
-
-          echo "=========================================================================="
-          echo "Collecting statics..."
-          echo "=========================================================================="
-          echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }}"
-          sudo docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
-          echo "Pushing statics..."
-          cd static
-          aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
-          cd ..
-
-          echo "=========================================================================="
-          echo "Augment dockerignore for docker image build..."
-          echo "=========================================================================="
-          cat >> .dockerignore <<EOL
-          .devcontainer
-          .github
-          .vscode
-          k8s
-          playwright
-          svn-history
-          docker-compose.yml
-          EOL
-
-          echo "=========================================================================="
-          echo "Building Images..."
-          echo "=========================================================================="
-          sudo docker buildx build --file dev/build/Dockerfile --platform linux/amd64,linux/arm64 --tag ghcr.io/ietf-tools/datatracker:$PKG_VERSION --push .
-
-    - name: Fetch release tarball
-      run: |
-        mkdir -p /home/runner/work/release
-        chmod 0600 ${{ github.workspace }}/prvkey.key
-        scp -i ${{ github.workspace }}/prvkey.key azureuser@${{ steps.azlaunch.outputs.ipaddr }}:/workspace/release.tar.gz /home/runner/work/release/release.tar.gz
+    - name: Build Images
+      uses: docker/build-push-action@v6
+      env:
+        DOCKER_BUILD_SUMMARY: false
+      with:
+        context: .
+        file: dev/build/Dockerfile
+        platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
+        push: true
+        tags: ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
+        cache-from: type=gha
+        cache-to: type=gha,mode=max
 
-    - name: Destroy Build VM + resources
-      if: always()
-      run: |
-        echo "Terminate VM..."        
-        az vm delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }} --yes --force-deletion true
-        echo "Delete Public IP..."
-        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}PublicIP --resource-type "Microsoft.Network/publicIPAddresses"
-        echo "Delete Network Security Group..."
-        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}NSG --resource-type "Microsoft.Network/networkSecurityGroups"
-        echo "Delete Virtual Network..."
-        az resource delete -g ghaDatatracker -n tmpGhaBuildVM-${{ github.run_number }}VNET --resource-type "Microsoft.Network/virtualNetworks"
-        echo "Logout from Azure..."
-        az logout
-        
     - name: Update CHANGELOG
       id: changelog
       uses: Requarks/changelog-action@v1

From 84a5aa3805eb8933ebb6a4441a9a10ba5a7dce04 Mon Sep 17 00:00:00 2001
From: NGPixel <NGPixel@users.noreply.github.com>
Date: Thu, 14 Nov 2024 20:05:03 +0000
Subject: [PATCH 150/707] ci: update base image target version to 20241114T1954

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 728b37156c..c9f91163ce 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241029T1632
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241114T1954
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 2f8aac20f9..7bbb32355d 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241029T1632
+20241114T1954

From 901fdd8d44cfe071d5184bcace4d7dbf1e093d37 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 14 Nov 2024 17:21:48 -0400
Subject: [PATCH 151/707] chore: remove newrevisiondocevent stats view (#8210)

* refactor: update node, eslint, neostandard + fix esm (#8083)

* chore: update dependencies

* fix: eslint + neostandard

* fix: add corepack prompt env var to init script

* docs: Update README.md

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* chore: remove newrevisiondocevent stats view

Not functional anyway

* chore: fix lint

* chore: remove unused template

* Revert "refactor: update node, eslint, neostandard + fix esm (#8083)"

This reverts commit 649879efd745470f6e0cc6768d889f45640e1505.

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/tests.py                       | 54 -------------------------
 ietf/doc/urls.py                        |  4 --
 ietf/doc/views_stats.py                 | 50 +----------------------
 ietf/templates/doc/stats/highstock.html | 29 -------------
 4 files changed, 1 insertion(+), 136 deletions(-)
 delete mode 100644 ietf/templates/doc/stats/highstock.html

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index e3534ba725..a1f9f8da2b 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -2739,60 +2739,6 @@ def test_get_related_meeting(self):
                 self.assertIsNone(doc.get_related_meeting(), f'{doc.type.slug} should not be related to meeting')
 
 class ChartTests(ResourceTestCaseMixin, TestCase):
-    def test_search_chart_conf(self):
-        doc = IndividualDraftFactory()
-
-        conf_url = urlreverse('ietf.doc.views_stats.chart_conf_newrevisiondocevent')
-
-        # No qurey arguments; expect an empty json object
-        r = self.client.get(conf_url)
-        self.assertValidJSONResponse(r)
-        self.assertEqual(unicontent(r), '{}')
-
-        # No match
-        r = self.client.get(conf_url + '?activedrafts=on&name=thisisnotadocumentname')
-        self.assertValidJSONResponse(r)
-        d = r.json()
-        self.assertEqual(d['chart']['type'], settings.CHART_TYPE_COLUMN_OPTIONS['chart']['type'])
-
-        r = self.client.get(conf_url + '?activedrafts=on&name=%s'%doc.name[6:12])
-        self.assertValidJSONResponse(r)
-        d = r.json()
-        self.assertEqual(d['chart']['type'], settings.CHART_TYPE_COLUMN_OPTIONS['chart']['type'])
-        self.assertEqual(len(d['series'][0]['data']), 0)
-
-    def test_search_chart_data(self):
-        doc = IndividualDraftFactory()
-
-        data_url = urlreverse('ietf.doc.views_stats.chart_data_newrevisiondocevent')
-
-        # No qurey arguments; expect an empty json list
-        r = self.client.get(data_url)
-        self.assertValidJSONResponse(r)
-        self.assertEqual(unicontent(r), '[]')
-
-        # No match
-        r = self.client.get(data_url + '?activedrafts=on&name=thisisnotadocumentname')
-        self.assertValidJSONResponse(r)
-        d = r.json()
-        self.assertEqual(unicontent(r), '[]')
-
-        r = self.client.get(data_url + '?activedrafts=on&name=%s'%doc.name[6:12])
-        self.assertValidJSONResponse(r)
-        d = r.json()
-        self.assertEqual(len(d), 1)
-        self.assertEqual(len(d[0]), 2)
-
-    def test_search_chart(self):
-        doc = IndividualDraftFactory()
-
-        chart_url = urlreverse('ietf.doc.views_stats.chart_newrevisiondocevent')
-        r = self.client.get(chart_url)
-        self.assertEqual(r.status_code, 200)
-
-        r = self.client.get(chart_url + '?activedrafts=on&name=%s'%doc.name[6:12])
-        self.assertEqual(r.status_code, 200)
-        
     def test_personal_chart(self):
         person = PersonFactory.create()
         IndividualDraftFactory.create(
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 7d930f7f40..6e2f03a3dc 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -68,10 +68,6 @@
     ),
     url(r'^investigate/?$', views_doc.investigate),
 
-
-    url(r'^stats/newrevisiondocevent/?$', views_stats.chart_newrevisiondocevent),
-    url(r'^stats/newrevisiondocevent/conf/?$', views_stats.chart_conf_newrevisiondocevent),
-    url(r'^stats/newrevisiondocevent/data/?$', views_stats.chart_data_newrevisiondocevent),
     url(r'^stats/person/(?P<id>[0-9]+)/drafts/conf/?$', views_stats.chart_conf_person_drafts),
     url(r'^stats/person/(?P<id>[0-9]+)/drafts/data/?$', views_stats.chart_data_person_drafts),
 
diff --git a/ietf/doc/views_stats.py b/ietf/doc/views_stats.py
index cefc7e152b..0bbf0b91c5 100644
--- a/ietf/doc/views_stats.py
+++ b/ietf/doc/views_stats.py
@@ -4,20 +4,15 @@
 import datetime
 
 from django.conf import settings
-from django.core.cache import cache
-from django.urls import reverse as urlreverse
 from django.db.models.aggregates import Count
 from django.db.models.functions import TruncDate
-from django.http import JsonResponse, HttpResponseBadRequest
-from django.shortcuts import render
+from django.http import JsonResponse
 from django.views.decorators.cache import cache_page
 
 import debug                            # pyflakes:ignore
 
 from ietf.doc.models import DocEvent
 from ietf.doc.templatetags.ietf_filters import comma_separated_list
-from ietf.doc.utils import get_search_cache_key
-from ietf.doc.views_search import SearchForm, retrieve_search_results
 from ietf.name.models import DocTypeName
 from ietf.person.models import Person
 from ietf.utils.timezone import date_today
@@ -113,49 +108,6 @@ def make_title(queryargs):
         title += ' with name matching "%s"' % name
     return title
 
-def chart_newrevisiondocevent(request):
-    return render(request, "doc/stats/highstock.html", {
-            "title": "Document Statistics",
-            "confurl": urlreverse("ietf.doc.views_stats.chart_conf_newrevisiondocevent"),
-            "dataurl": urlreverse("ietf.doc.views_stats.chart_data_newrevisiondocevent"),
-            "queryargs": request.GET.urlencode(),
-            }
-        )
-
-#@cache_page(60*15)
-def chart_data_newrevisiondocevent(request):
-    queryargs = request.GET
-    if queryargs:
-        cache_key = get_search_cache_key(queryargs)
-        results = cache.get(cache_key)
-        if not results:
-            form = SearchForm(queryargs)
-            if not form.is_valid():
-                return HttpResponseBadRequest("form not valid: %s" % form.errors)
-            results = retrieve_search_results(form)
-            if results.exists():
-                cache.set(cache_key, results)
-        if results.exists():
-            data = model_to_timeline_data(DocEvent, doc__in=results, type='new_revision')
-        else:
-            data = []
-    else:
-        data = []
-    return JsonResponse(data, safe=False)
-
-
-@cache_page(60*15)
-def chart_conf_newrevisiondocevent(request):
-    queryargs = request.GET
-    if queryargs:
-        conf = copy.deepcopy(settings.CHART_TYPE_COLUMN_OPTIONS)
-        conf['title']['text'] = make_title(queryargs)
-        conf['series'][0]['name'] = "Submitted %s" % get_doctypes(queryargs, pluralize=True).lower(),
-    else:
-        conf = {}
-    return JsonResponse(conf)
-
-
 @cache_page(60*15)
 def chart_conf_person_drafts(request, id):
     person = Person.objects.filter(id=id).first()
diff --git a/ietf/templates/doc/stats/highstock.html b/ietf/templates/doc/stats/highstock.html
deleted file mode 100644
index 6719a3b9eb..0000000000
--- a/ietf/templates/doc/stats/highstock.html
+++ /dev/null
@@ -1,29 +0,0 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% load static %}
-{% load ietf_filters %}
-{% block pagehead %}
-    <link rel="stylesheet" href="{% static "ietf/css/highcharts.css" %}">
-{% endblock %}
-{% block js %}
-    <script src="{% static 'ietf/js/highstock.js' %}"></script>
-    <script>
-        $(function () {
-            var chart;
-            $.getJSON('{{ confurl }}?{{ queryargs }}', function (conf) {
-                chart = Highcharts.stockChart('chart', conf);
-                chart.showLoading();
-                $.getJSON('{{ dataurl }}?{{ queryargs }}', function (data) {
-                    chart.series[0].setData(data);
-                    chart.hideLoading();
-                });
-            });
-        });
-    </script>
-{% endblock %}
-{% block title %}Document Statistics{% endblock %}
-{% block content %}
-    {% origin %}
-    <div id="chart"></div>
-{% endblock %}
\ No newline at end of file

From b65a37b6e8f6cfe105cd89c61c7046fff9d21523 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 14 Nov 2024 18:05:38 -0400
Subject: [PATCH 152/707] feat: POST for document search requests (#8206)

* refactor: doc search via POST (WIP)

Changes the search view to use a POST instead of a GET. Refactors cache key computation to use cleaned data.

Still todo:
 * refactor frontpage view to match
 * refactor menubar search (?)
 * refactor stats view that uses SearchForm
 * revive or drop the "backwards compatibility" branch

* feat: convert GET search to POST

Still todo:
 * refactor frontpage view to match
 * refactor menubar search (?)
 * refactor stats view that uses SearchForm

* fix: revert frontpage changes, search works

Still todo:
 * refactor stats view that uses SearchForm

* fix: define vars in all branches

* refactor: update stats use of SearchForm

* chore: improve message

* fix: remove lint

* chore: comments re: QuerySetAny

* test: test query string search params

* style: Black

* test: refactor test_search()

* test: refactor test_search_became_rfc()

* test: use scroll_and_click helper
---
 ietf/api/serializer.py                     |   1 +
 ietf/doc/tests.py                          | 155 +++++++++++++++------
 ietf/doc/tests_js.py                       |   4 +-
 ietf/doc/utils.py                          |  11 +-
 ietf/doc/views_search.py                   | 109 ++++++++++-----
 ietf/liaisons/forms.py                     |   1 +
 ietf/liaisons/widgets.py                   |   1 +
 ietf/templates/doc/search/search_form.html |   2 +
 8 files changed, 197 insertions(+), 87 deletions(-)

diff --git a/ietf/api/serializer.py b/ietf/api/serializer.py
index 27f194c5b5..ca34ea649e 100644
--- a/ietf/api/serializer.py
+++ b/ietf/api/serializer.py
@@ -146,6 +146,7 @@ def end_object(self, obj):
                                 field_value = None
                         else:
                             field_value = field
+                        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
                         if isinstance(field_value, QuerySetAny) or isinstance(field_value, list):
                             self._current[name] = dict([ (rel.pk, self.expand_related(rel, name)) for rel in field_value ])
                         else:
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index a1f9f8da2b..fa655cb884 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -71,96 +71,163 @@
 
 
 class SearchTests(TestCase):
-    def test_search(self):
+    def test_search_handles_querystring_parameters(self):
+        """Search parameters via querystring should not actually search"""
+        url = urlreverse("ietf.doc.views_search.search")
+        r = self.client.get(url + "?name=some-document-name&oldDrafts=on")
+        # Check that we got a valid response and that the warning about query string parameters is shown.
+        self.assertContains(
+            r,
+            "Searching via the URL query string is no longer supported.",
+            status_code=200,
+        )
+        # Check that the form was filled in correctly (not an exhaustive check, but different from the
+        # form defaults)
+        pq = PyQuery(r.content)
+        self.assertEqual(
+            pq("form#search_form input#id_name").attr("value"),
+            "some-document-name",
+            "The name field should be set in the SearchForm",
+        )
+        self.assertEqual(
+            pq("form#search_form input#id_olddrafts").attr("checked"),
+            "checked",
+            "The old drafts checkbox should be selected in the SearchForm",
+        )
+        self.assertIsNone(
+            pq("form#search_form input#id_rfcs").attr("checked"),
+            "The RFCs checkbox should not be selected in the SearchForm",
+        )
+        self.assertIsNone(
+            pq("form#search_form input#id_activedrafts").attr("checked"),
+            "The active drafts checkbox should not be selected in the SearchForm",
+        )
 
-        draft = WgDraftFactory(name='draft-ietf-mars-test',group=GroupFactory(acronym='mars',parent=Group.objects.get(acronym='farfut')),authors=[PersonFactory()],ad=PersonFactory())
+    def test_search(self):
+        draft = WgDraftFactory(
+            name="draft-ietf-mars-test",
+            group=GroupFactory(acronym="mars", parent=Group.objects.get(acronym="farfut")),
+            authors=[PersonFactory()],
+            ad=PersonFactory(),
+        )
         rfc = WgRfcFactory()
         draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="pub-req"))
-        old_draft = IndividualDraftFactory(name='draft-foo-mars-test',authors=[PersonFactory()],title="Optimizing Martian Network Topologies")
+        old_draft = IndividualDraftFactory(
+            name="draft-foo-mars-test",
+            authors=[PersonFactory()],
+            title="Optimizing Martian Network Topologies",
+        )
         old_draft.set_state(State.objects.get(used=True, type="draft", slug="expired"))
-
-        base_url = urlreverse('ietf.doc.views_search.search')
-
+    
+        url = urlreverse("ietf.doc.views_search.search")
+    
         # only show form, no search yet
-        r = self.client.get(base_url)
+        r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-
+    
         # no match
-        r = self.client.get(base_url + "?activedrafts=on&name=thisisnotadocumentname")
+        r = self.client.post(url, {"activedrafts": "on", "name": "thisisnotadocumentname"})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-
-        r = self.client.get(base_url + "?rfcs=on&name=xyzzy")
+    
+        r = self.client.post(url, {"rfcs": "on", "name": "xyzzy"})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-
-        r = self.client.get(base_url + "?olddrafts=on&name=bar")
+    
+        r = self.client.post(url, {"olddrafts": "on", "name": "bar"})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-
-        r = self.client.get(base_url + "?olddrafts=on&name=foo")
+    
+        r = self.client.post(url, {"olddrafts": "on", "name": "foo"})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "draft-foo-mars-test")
-
-        r = self.client.get(base_url + "?olddrafts=on&name=FoO")  # mixed case
+    
+        r = self.client.post(url, {"olddrafts": "on", "name": "FoO"})  # mixed case
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "draft-foo-mars-test")
-
+    
         # find by RFC
-        r = self.client.get(base_url + "?rfcs=on&name=%s" % rfc.name)
+        r = self.client.post(url, {"rfcs": "on", "name": rfc.name})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
-
+    
         # find by active/inactive
-
+    
         draft.set_state(State.objects.get(type="draft", slug="active"))
-        r = self.client.get(base_url + "?activedrafts=on&name=%s" % draft.name)
+        r = self.client.post(url, {"activedrafts": "on", "name": draft.name})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         draft.set_state(State.objects.get(type="draft", slug="expired"))
-        r = self.client.get(base_url + "?olddrafts=on&name=%s" % draft.name)
+        r = self.client.post(url, {"olddrafts": "on", "name": draft.name})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-        
+    
         draft.set_state(State.objects.get(type="draft", slug="active"))
-
+    
         # find by title
-        r = self.client.get(base_url + "?activedrafts=on&name=%s" % draft.title.split()[0])
+        r = self.client.post(url, {"activedrafts": "on", "name": draft.title.split()[0]})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by author
-        r = self.client.get(base_url + "?activedrafts=on&by=author&author=%s" % draft.documentauthor_set.first().person.name_parts()[1])
+        r = self.client.post(
+            url,
+            {
+                "activedrafts": "on",
+                "by": "author",
+                "author": draft.documentauthor_set.first().person.name_parts()[1],
+            },
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by group
-        r = self.client.get(base_url + "?activedrafts=on&by=group&group=%s" % draft.group.acronym)
+        r = self.client.post(
+            url,
+            {"activedrafts": "on", "by": "group", "group": draft.group.acronym},
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
-        r = self.client.get(base_url + "?activedrafts=on&by=group&group=%s" % draft.group.acronym.swapcase())
+    
+        r = self.client.post(
+            url,
+            {"activedrafts": "on", "by": "group", "group": draft.group.acronym.swapcase()},
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by area
-        r = self.client.get(base_url + "?activedrafts=on&by=area&area=%s" % draft.group.parent_id)
+        r = self.client.post(
+            url,
+            {"activedrafts": "on", "by": "area", "area": draft.group.parent_id},
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by area
-        r = self.client.get(base_url + "?activedrafts=on&by=area&area=%s" % draft.group.parent_id)
+        r = self.client.post(
+            url,
+            {"activedrafts": "on", "by": "area", "area": draft.group.parent_id},
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by AD
-        r = self.client.get(base_url + "?activedrafts=on&by=ad&ad=%s" % draft.ad_id)
+        r = self.client.post(url, {"activedrafts": "on", "by": "ad", "ad": draft.ad_id})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-
+    
         # find by IESG state
-        r = self.client.get(base_url + "?activedrafts=on&by=state&state=%s&substate=" % draft.get_state("draft-iesg").pk)
+        r = self.client.post(
+            url,
+            {
+                "activedrafts": "on",
+                "by": "state",
+                "state": draft.get_state("draft-iesg").pk,
+                "substate": "",
+            },
+        )
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
 
@@ -169,15 +236,15 @@ def test_search_became_rfc(self):
         rfc = WgRfcFactory()
         draft.set_state(State.objects.get(type="draft", slug="rfc"))
         draft.relateddocument_set.create(relationship_id="became_rfc", target=rfc)
-        base_url = urlreverse('ietf.doc.views_search.search')
+        url = urlreverse("ietf.doc.views_search.search")
 
         # find by RFC
-        r = self.client.get(base_url + f"?rfcs=on&name={rfc.name}")
+        r = self.client.post(url, {"rfcs": "on", "name": rfc.name})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
 
         # find by draft
-        r = self.client.get(base_url + f"?activedrafts=on&rfcs=on&name={draft.name}")
+        r = self.client.post(url, {"activedrafts": "on", "rfcs": "on", "name": draft.name})
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
 
diff --git a/ietf/doc/tests_js.py b/ietf/doc/tests_js.py
index acd74c4a0b..9a5aad13b9 100644
--- a/ietf/doc/tests_js.py
+++ b/ietf/doc/tests_js.py
@@ -92,10 +92,8 @@ def _read_author_form(form_elt):
         self.assertEqual(len(author_forms), 1)
 
         # get the "add author" button so we can add blank author forms
-        add_author_button = self.driver.find_element(By.ID, 'add-author-button')
         for index, auth in enumerate(authors):
-            self.scroll_to_element(add_author_button)  # Can only click if it's in view!
-            add_author_button.click()  # Create a new form. Automatically scrolls to it.
+            self.scroll_and_click((By.ID, 'add-author-button'))  # Create new form. Automatically scrolls to it.
             author_forms = authors_list.find_elements(By.CLASS_NAME, 'author-panel')
             authors_added = index + 1
             self.assertEqual(len(author_forms), authors_added + 1)  # Started with 1 author, hence +1
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 97243a20d6..9b2570d8ba 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -3,9 +3,7 @@
 
 
 import datetime
-import hashlib
 import io
-import json
 import math
 import os
 import re
@@ -348,6 +346,7 @@ def augment_events_with_revision(doc, events):
     """Take a set of events for doc and add a .rev attribute with the
     revision they refer to by checking NewRevisionDocEvents."""
 
+    # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
     if isinstance(events, QuerySetAny):
         qs = events.filter(newrevisiondocevent__isnull=False)
     else:
@@ -1047,12 +1046,8 @@ def get_replaces_tree(doc):
     return sorted(history, key=lambda x: x['published'])
 
 
-def get_search_cache_key(params):
-    from ietf.doc.views_search import SearchForm
-    fields = set(SearchForm.base_fields) - set(['sort',])
-    kwargs = dict([ (k,v) for (k,v) in list(params.items()) if k in fields ])
-    key = "doc:document:search:" + hashlib.sha512(json.dumps(kwargs, sort_keys=True).encode('utf-8')).hexdigest()
-    return key
+def get_search_cache_key(key_fragment):
+    return f"doc:document:search:{key_fragment}"
 
 
 def build_file_urls(doc: Union[Document, DocHistory]):
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 4fa3b2560c..7b71dd77bd 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -37,6 +37,8 @@
 import re
 import datetime
 import copy
+import hashlib
+import json
 import operator
 
 from collections import defaultdict
@@ -44,16 +46,17 @@
 
 from django import forms
 from django.conf import settings
+from django.contrib import messages
 from django.core.cache import cache, caches
 from django.urls import reverse as urlreverse
 from django.db.models import Q
-from django.http import Http404, HttpResponseBadRequest, HttpResponse, HttpResponseRedirect, QueryDict
+from django.http import Http404, HttpResponseBadRequest, HttpResponse, HttpResponseRedirect
 from django.shortcuts import render
 from django.utils import timezone
 from django.utils.html import strip_tags
 from django.utils.cache import _generate_cache_key # type: ignore
 from django.utils.text import slugify
-
+from django_stubs_ext import QuerySetAny
 
 import debug                            # pyflakes:ignore
 
@@ -145,6 +148,29 @@ def clean(self):
             q['irtfstate'] = None
         return q
 
+    def cache_key_fragment(self):
+        """Hash a bound form to get a value for use in a cache key
+        
+        Raises a ValueError if the form is not valid.
+        """
+        def _serialize_value(val):
+            # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
+            if isinstance(val, QuerySetAny):
+                return [item.pk for item in val]
+            else:
+                return getattr(val, "pk", val)  # use pk if present, else value
+    
+        if not self.is_valid():
+            raise ValueError(f"SearchForm invalid: {self.errors}")
+        contents = {
+            field_name: _serialize_value(field_value)
+            for field_name, field_value in self.cleaned_data.items() 
+            if field_name != "sort" and field_value is not None
+        }
+        contents_json = json.dumps(contents, sort_keys=True)
+        return hashlib.sha512(contents_json.encode("utf-8")).hexdigest()
+
+
 def retrieve_search_results(form, all_types=False):
     """Takes a validated SearchForm and return the results."""
 
@@ -256,45 +282,64 @@ def retrieve_search_results(form, all_types=False):
 
     return docs
 
+
 def search(request):
-    if request.GET:
-        # backwards compatibility
-        get_params = request.GET.copy()
-        if 'activeDrafts' in request.GET:
-            get_params['activedrafts'] = request.GET['activeDrafts']
-        if 'oldDrafts' in request.GET:
-            get_params['olddrafts'] = request.GET['oldDrafts']
-        if 'subState' in request.GET:
-            get_params['substate'] = request.GET['subState']
-
-        form = SearchForm(get_params)
-        if not form.is_valid():
-            return HttpResponseBadRequest("form not valid: %s" % form.errors)
-
-        cache_key = get_search_cache_key(get_params)
-        cached_val = cache.get(cache_key)
-        if cached_val:
-            [results, meta] = cached_val
-        else:
-            results = retrieve_search_results(form)
-            results, meta = prepare_document_table(request, results, get_params)
-            cache.set(cache_key, [results, meta]) # for settings.CACHE_MIDDLEWARE_SECONDS
-            log(f"Search results computed for {get_params}")
-        meta['searching'] = True
+    """Search for a draft"""
+    # defaults for results / meta
+    results = []
+    meta = {"by": None, "searching": False}
+
+    if request.method == "POST":
+        form = SearchForm(data=request.POST)
+        if form.is_valid():
+            cache_key = get_search_cache_key(form.cache_key_fragment())
+            cached_val = cache.get(cache_key)
+            if cached_val:
+                [results, meta] = cached_val
+            else:
+                results = retrieve_search_results(form)
+                results, meta = prepare_document_table(
+                    request, results, form.cleaned_data
+                )
+                cache.set(
+                    cache_key, [results, meta]
+                )  # for settings.CACHE_MIDDLEWARE_SECONDS
+                log(f"Search results computed for {form.cleaned_data}")
+            meta["searching"] = True
     else:
-        form = SearchForm()
-        results = []
-        meta = { 'by': None, 'searching': False }
-        get_params = QueryDict('')
+        if request.GET:
+            # backwards compatibility - fill in the form
+            get_params = request.GET.copy()
+            if "activeDrafts" in request.GET:
+                get_params["activedrafts"] = request.GET["activeDrafts"]
+            if "oldDrafts" in request.GET:
+                get_params["olddrafts"] = request.GET["oldDrafts"]
+            if "subState" in request.GET:
+                get_params["substate"] = request.GET["subState"]
+            form = SearchForm(data=get_params)
+            messages.error(
+                request,
+                (
+                    "Searching via the URL query string is no longer supported. "
+                    "The form below has been filled in with the parameters from your request. "
+                    'To execute your search, please click "Search".'
+                ),
+            )
+        else:
+            form = SearchForm()
 
-    return render(request, 'doc/search/search.html', {
-        'form':form, 'docs':results, 'meta':meta, 'queryargs':get_params.urlencode() },
+    return render(
+        request,
+        "doc/search/search.html",
+        context={"form": form, "docs": results, "meta": meta},
     )
 
+
 def frontpage(request):
     form = SearchForm()
     return render(request, 'doc/frontpage.html', {'form':form})
 
+
 def search_for_name(request, name):
     def find_unique(n):
         exact = Document.objects.filter(name__iexact=n).first()
diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index 1d91041b25..a75028bf79 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -203,6 +203,7 @@ def get_results(self):
 class CustomModelMultipleChoiceField(ModelMultipleChoiceField):
     '''If value is a QuerySet, return it as is (for use in widget.render)'''
     def prepare_value(self, value):
+        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
         if isinstance(value, QuerySetAny):
             return value
         if (hasattr(value, '__iter__') and
diff --git a/ietf/liaisons/widgets.py b/ietf/liaisons/widgets.py
index 74368e83f2..3d4f2d13a5 100644
--- a/ietf/liaisons/widgets.py
+++ b/ietf/liaisons/widgets.py
@@ -35,6 +35,7 @@ def render(self, name, value, **kwargs):
         html = '<div id="id_%s">' % name
         html += '<span class="d-none showAttachmentsEmpty form-control widget">No files attached</span>'
         html += '<div class="attachedFiles form-control widget">'
+        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
         if value and isinstance(value, QuerySetAny):
             for attachment in value:
                 html += '<a class="initialAttach" href="%s">%s</a>&nbsp' % (conditional_escape(attachment.document.get_href()), conditional_escape(attachment.document.title))
diff --git a/ietf/templates/doc/search/search_form.html b/ietf/templates/doc/search/search_form.html
index d4f463ec66..6c91894c8c 100644
--- a/ietf/templates/doc/search/search_form.html
+++ b/ietf/templates/doc/search/search_form.html
@@ -4,8 +4,10 @@
 {% load widget_tweaks %}
 {% load ietf_filters %}
 <form id="search_form"
+      method="post"
       class="form-horizontal"
       action="{% url 'ietf.doc.views_search.search' %}">
+    {% csrf_token %}
     <!-- [html-validate-disable-block input-missing-label -- labelled via aria-label] -->
     <div class="input-group search_field">
         {{ form.name|add_class:"form-control"|attr:"placeholder:Document name/title/RFC number"|attr:"aria-label:Document name/title/RFC number" }}

From c89646ef8d00d23cd9914f457ee5114900307a3e Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Thu, 14 Nov 2024 22:59:05 +0000
Subject: [PATCH 153/707] feat: Agenda proposed badge (#8164)

---
 client/agenda/AgendaScheduleList.vue | 28 ++++++++++++++++++++++++++--
 ietf/meeting/views.py                |  1 +
 2 files changed, 27 insertions(+), 2 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 2869992579..0cac7e39ee 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -83,6 +83,14 @@
                 template(#trigger)
                   span.badge.is-bof BoF
                 span #[a(href='https://www.ietf.org/how/bofs/', target='_blank') Birds of a Feather] sessions (BoFs) are initial discussions about a particular topic of interest to the IETF community.
+              n-popover(
+                v-if='item.isProposed'
+                trigger='hover'
+                :width='250'
+                )
+                template(#trigger)
+                  span.badge.is-proposed Proposed
+                span #[a(href='https://www.ietf.org/process/wgs/', target='_blank') Proposed WGs] are groups in the process of being chartered. If the charter is not approved by the IESG before the IETF meeting, the session may be canceled.
               .agenda-table-note(v-if='item.note')
                 i.bi.bi-arrow-return-right.me-1
                 span {{item.note}}
@@ -468,6 +476,7 @@ const meetingEvents = computed(() => {
       // groupParentName: item.groupParent?.name,
       icon,
       isBoF: item.isBoF,
+      isProposed: item.isProposed,
       isSessionEvent: item.type === 'regular',
       links,
       location: item.location,
@@ -1012,10 +1021,25 @@ onBeforeUnmount(() => {
         word-wrap: break-word;
       }
 
-      .badge.is-bof {
-        background-color: $teal-500;
+      .badge {
         margin: 0 8px;
 
+        &.is-bof {
+          background-color: $teal-500;
+
+          @at-root .theme-dark & {
+            background-color: $teal-700;
+          }
+        }
+
+        &.is-proposed {
+          background-color: $gray-500;
+
+          @at-root .theme-dark & {
+            background-color: $gray-700;
+          }
+        }
+
         @media screen and (max-width: $bs5-break-md) {
           width: 30px;
           display: block;
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 628125776f..a195e74ce3 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -1786,6 +1786,7 @@ def agenda_extract_schedule (item):
         "type": item.session.type.slug,
         "purpose": item.session.purpose.slug,
         "isBoF": item.session.group_at_the_time().state_id == "bof",
+        "isProposed": item.session.group_at_the_time().state_id == "proposed",
         "filterKeywords": item.filter_keywords,
         "groupAcronym": item.session.group_at_the_time().acronym,
         "groupName": item.session.group_at_the_time().name,

From 8bc51e3cc2db645033974b2805e268a18b098ab8 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Fri, 15 Nov 2024 18:16:34 +0000
Subject: [PATCH 154/707] feat: important dates page: autoid-n to IETFn (#8175)

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/templates/meeting/important-dates.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/meeting/important-dates.html b/ietf/templates/meeting/important-dates.html
index 1d41b4a7f0..568276f566 100644
--- a/ietf/templates/meeting/important-dates.html
+++ b/ietf/templates/meeting/important-dates.html
@@ -19,7 +19,7 @@ <h1>Important Dates</h1>
     </a>
     {% for meeting in meetings %}
         {% if meeting.show_important_dates %}
-            <h2 class="mt-5">
+            <h2 class="mt-5" id="IETF{{ meeting.number }}">
                 IETF {{ meeting.number }}
                 <br>
                 <small class="text-body-secondary">{{ meeting.date }}, {{ meeting.city }}, {{ meeting.country }}</small>

From b07d4dbebc34e6b9abc589899a9290b02791e8aa Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Fri, 15 Nov 2024 18:18:09 +0000
Subject: [PATCH 155/707] feat: add group leadership list (#8135)

* feat: add Group Leadership list

* fix: only offer export to staff

* fix: fix export button conditional

* fix: improve tests. black format

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/group/tests.py                        | 47 ++++++++++++++++++++++
 ietf/group/urls.py                         |  4 +-
 ietf/group/views.py                        | 43 ++++++++++++++++++++
 ietf/templates/group/group_leadership.html | 34 ++++++++++++++++
 4 files changed, 127 insertions(+), 1 deletion(-)
 create mode 100644 ietf/templates/group/group_leadership.html

diff --git a/ietf/group/tests.py b/ietf/group/tests.py
index 130c68b3fc..31f8cc45b5 100644
--- a/ietf/group/tests.py
+++ b/ietf/group/tests.py
@@ -65,6 +65,53 @@ def test_stream_edit(self):
         self.assertTrue(Role.objects.filter(name="delegate", group__acronym=stream_acronym, email__address="ad2@ietf.org"))
 
 
+class GroupLeadershipTests(TestCase):
+    def test_leadership_wg(self):
+        # setup various group states
+        bof_role = RoleFactory(
+            group__type_id="wg", group__state_id="bof", name_id="chair"
+        )
+        proposed_role = RoleFactory(
+            group__type_id="wg", group__state_id="proposed", name_id="chair"
+        )
+        active_role = RoleFactory(
+            group__type_id="wg", group__state_id="active", name_id="chair"
+        )
+        conclude_role = RoleFactory(
+            group__type_id="wg", group__state_id="conclude", name_id="chair"
+        )
+        url = urlreverse(
+            "ietf.group.views.group_leadership", kwargs={"group_type": "wg"}
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "Group Leadership")
+        self.assertContains(r, bof_role.person.last_name())
+        self.assertContains(r, proposed_role.person.last_name())
+        self.assertContains(r, active_role.person.last_name())
+        self.assertNotContains(r, conclude_role.person.last_name())
+
+    def test_leadership_wg_csv(self):
+        url = urlreverse(
+            "ietf.group.views.group_leadership_csv", kwargs={"group_type": "wg"}
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r["Content-Type"], "text/csv")
+        self.assertContains(r, "Chairman, Sops")
+
+    def test_leadership_rg(self):
+        role = RoleFactory(group__type_id="rg", name_id="chair")
+        url = urlreverse(
+            "ietf.group.views.group_leadership", kwargs={"group_type": "rg"}
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "Group Leadership")
+        self.assertContains(r, role.person.last_name())
+        self.assertNotContains(r, "Chairman, Sops")
+
+
 class GroupStatsTests(TestCase):
     def setUp(self):
         super().setUp()
diff --git a/ietf/group/urls.py b/ietf/group/urls.py
index b2af8d9e2b..1824564c4d 100644
--- a/ietf/group/urls.py
+++ b/ietf/group/urls.py
@@ -57,7 +57,9 @@
 
 
 group_urls = [
-    url(r'^$', views.active_groups), 
+    url(r'^$', views.active_groups),
+    url(r'^leadership/(?P<group_type>(wg|rg))/$', views.group_leadership),
+    url(r'^leadership/(?P<group_type>(wg|rg))/csv/$', views.group_leadership_csv),
     url(r'^groupstats.json', views.group_stats_data, None, 'ietf.group.views.group_stats_data'),
     url(r'^groupmenu.json', views.group_menu_data, None, 'ietf.group.views.group_menu_data'),
     url(r'^chartering/$', views.chartering_groups),
diff --git a/ietf/group/views.py b/ietf/group/views.py
index 71986384e0..f30569d230 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -35,6 +35,7 @@
 
 
 import copy
+import csv
 import datetime
 import itertools
 import math
@@ -437,6 +438,48 @@ def prepare_group_documents(request, group, clist):
 
     return docs, meta, docs_related, meta_related
 
+
+def get_leadership(group_type):
+    people = Person.objects.filter(
+        role__name__slug="chair",
+        role__group__type=group_type,
+        role__group__state__slug__in=("active", "bof", "proposed"),
+    ).distinct()
+    leaders = []
+    for person in people:
+        parts = person.name_parts()
+        groups = [
+            r.group.acronym
+            for r in person.role_set.filter(
+                name__slug="chair",
+                group__type=group_type,
+                group__state__slug__in=("active", "bof", "proposed"),
+            )
+        ]
+        entry = {"name": "%s, %s" % (parts[3], parts[1]), "groups": ", ".join(groups)}
+        leaders.append(entry)
+    return sorted(leaders, key=lambda a: a["name"])
+
+
+def group_leadership(request, group_type=None):
+    context = {}
+    context["leaders"] = get_leadership(group_type)
+    context["group_type"] = group_type
+    return render(request, "group/group_leadership.html", context)
+
+
+def group_leadership_csv(request, group_type=None):
+    leaders = get_leadership(group_type)
+    response = HttpResponse(content_type="text/csv")
+    response["Content-Disposition"] = (
+        f'attachment; filename="group_leadership_{group_type}.csv"'
+    )
+    writer = csv.writer(response, dialect=csv.excel, delimiter=str(","))
+    writer.writerow(["Name", "Groups"])
+    for leader in leaders:
+        writer.writerow([leader["name"], leader["groups"]])
+    return response
+
 def group_home(request, acronym, group_type=None):
     group = get_group_or_404(acronym, group_type)
     kwargs = dict(acronym=group.acronym)
diff --git a/ietf/templates/group/group_leadership.html b/ietf/templates/group/group_leadership.html
new file mode 100644
index 0000000000..644be3e150
--- /dev/null
+++ b/ietf/templates/group/group_leadership.html
@@ -0,0 +1,34 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2024, All Rights Reserved #}
+{% load origin static person_filters ietf_filters %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static 'ietf/css/list.css' %}">
+{% endblock %}
+{% block title %}Group Leadership{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>Group Leadership ({{ group_type }})</h1>
+    {% if user|has_role:"Secretariat" %}
+        <div class="text-end">
+            <a class="btn btn-primary" href="{% url 'ietf.group.views.group_leadership_csv' group_type=group_type %}">
+            <i class="bi bi-file-ruled"></i> Export as CSV
+            </a>
+        </div>
+    {% endif %}
+    <table class="table table-sm table-striped">
+        <thead>
+            <tr>
+                <th scope="col">Leader</th>
+                <th scope="col">Groups</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for leader in leaders %}
+                <tr>
+                    <td>{{ leader.name }}</td>
+                    <td>{{ leader.groups }}</td>
+                </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+{% endblock %}

From 6608c9d530b62d10c88d637f949a00fb5fea4526 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 18 Nov 2024 10:53:50 -0400
Subject: [PATCH 156/707] refactor: eliminate single-use helper (#8226)

---
 ietf/doc/utils.py        | 4 ----
 ietf/doc/views_search.py | 4 ++--
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 9b2570d8ba..a30430829a 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1046,10 +1046,6 @@ def get_replaces_tree(doc):
     return sorted(history, key=lambda x: x['published'])
 
 
-def get_search_cache_key(key_fragment):
-    return f"doc:document:search:{key_fragment}"
-
-
 def build_file_urls(doc: Union[Document, DocHistory]):
     if doc.type_id == "rfc":
         base_path = os.path.join(settings.RFC_PATH, doc.name + ".")
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 7b71dd77bd..0f1937efb3 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -65,7 +65,7 @@
     IESG_BALLOT_ACTIVE_STATES, IESG_STATCHG_CONFLREV_ACTIVE_STATES,
     IESG_CHARTER_ACTIVE_STATES )
 from ietf.doc.fields import select2_id_doc_name_json
-from ietf.doc.utils import get_search_cache_key, augment_events_with_revision, needed_ballot_positions
+from ietf.doc.utils import augment_events_with_revision, needed_ballot_positions
 from ietf.group.models import Group
 from ietf.idindex.index import active_drafts_index_by_group
 from ietf.name.models import DocTagName, DocTypeName, StreamName
@@ -292,7 +292,7 @@ def search(request):
     if request.method == "POST":
         form = SearchForm(data=request.POST)
         if form.is_valid():
-            cache_key = get_search_cache_key(form.cache_key_fragment())
+            cache_key = f"doc:document:search:{form.cache_key_fragment()}"
             cached_val = cache.get(cache_key)
             if cached_val:
                 [results, meta] = cached_val

From 48f339194c69d8d62736fbb3d1f54316a4b2f9ff Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 18 Nov 2024 10:41:40 -0600
Subject: [PATCH 157/707] chore: remove unused merge-person-records (#8227)

---
 ietf/bin/merge-person-records | 65 -----------------------------------
 1 file changed, 65 deletions(-)
 delete mode 100755 ietf/bin/merge-person-records

diff --git a/ietf/bin/merge-person-records b/ietf/bin/merge-person-records
deleted file mode 100755
index 155e5755f6..0000000000
--- a/ietf/bin/merge-person-records
+++ /dev/null
@@ -1,65 +0,0 @@
-#!/usr/bin/env python
-# -*- coding: utf-8 -*-
-# -*- Python -*-
-#
-'''
-This script merges two Person records into one.  It determines which record is the target
-based on most current User record (last_login) unless -f (force) option is used to
-force SOURCE TARGET as specified on the command line.  The order of operations is
-important.  We must complete all source.save() operations before moving the aliases to
-the target, this is to avoid extra "Possible duplicate Person" emails going out, if the
-Person is saved without an alias the Person.save() creates another one, which then
-conflicts with the moved one.
-'''
-
-# Set PYTHONPATH and load environment variables for standalone script -----------------
-import os, sys
-basedir = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
-sys.path = [ basedir ] + sys.path
-os.environ["DJANGO_SETTINGS_MODULE"] = "ietf.settings"
-
-virtualenv_activation = os.path.join(basedir, "env", "bin", "activate_this.py")
-if os.path.exists(virtualenv_activation):
-    execfile(virtualenv_activation, dict(__file__=virtualenv_activation))
-
-import django
-django.setup()
-# -------------------------------------------------------------------------------------
-
-import argparse
-from django.contrib import admin
-from ietf.person.models import Person
-from ietf.person.utils import (merge_persons, send_merge_notification, handle_users,
-    determine_merge_order)
-
-
-def main():
-    parser = argparse.ArgumentParser()
-    parser.add_argument("source_id",type=int)
-    parser.add_argument("target_id",type=int)
-    parser.add_argument('-f','--force', help='force merge order',action='store_true')
-    parser.add_argument('-v','--verbose', help='verbose output',action='store_true')
-    args = parser.parse_args()
-
-    source = Person.objects.get(pk=args.source_id)
-    target = Person.objects.get(pk=args.target_id)
-
-    # set merge order
-    if not args.force:
-        source,target = determine_merge_order(source,target)
-
-    # confirm
-    print "Merging person {}({}) to {}({})".format(source.ascii,source.pk,target.ascii,target.pk)
-    print handle_users(source,target,check_only=True)
-    response = raw_input('Ok to continue y/n? ')
-    if response.lower() != 'y':
-        sys.exit()
-
-    # perform merge
-    success, changes = merge_persons(source, target, verbose=args.verbose)
-
-    # send email notification
-    send_merge_notification(target,changes)
-
-if __name__ == "__main__":
-    main()

From 1d7be8c98ce6f6fe420440d01bbe70a843253e6d Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 18 Nov 2024 12:48:47 -0600
Subject: [PATCH 158/707] chore: remove dead activate_this branches (#8228)

---
 ietf/bin/expire-ids         | 4 ----
 ietf/bin/iana-review-email  | 4 ----
 ietf/bin/notify-expirations | 4 ----
 3 files changed, 12 deletions(-)

diff --git a/ietf/bin/expire-ids b/ietf/bin/expire-ids
index 98ee8d75fe..bb0b94ee61 100755
--- a/ietf/bin/expire-ids
+++ b/ietf/bin/expire-ids
@@ -13,10 +13,6 @@ basedir = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
 sys.path = [ basedir ] + sys.path
 os.environ["DJANGO_SETTINGS_MODULE"] = "ietf.settings"
 
-virtualenv_activation = os.path.join(basedir, "env", "bin", "activate_this.py")
-if os.path.exists(virtualenv_activation):
-    execfile(virtualenv_activation, dict(__file__=virtualenv_activation))
-
 syslog.openlog(os.path.basename(__file__), syslog.LOG_PID, syslog.LOG_USER)
 
 import django
diff --git a/ietf/bin/iana-review-email b/ietf/bin/iana-review-email
index 5c7a7183b9..27aee4015e 100755
--- a/ietf/bin/iana-review-email
+++ b/ietf/bin/iana-review-email
@@ -8,10 +8,6 @@ basedir = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
 sys.path = [ basedir ] + sys.path
 os.environ["DJANGO_SETTINGS_MODULE"] = "ietf.settings"
 
-virtualenv_activation = os.path.join(basedir, "env", "bin", "activate_this.py")
-if os.path.exists(virtualenv_activation):
-    execfile(virtualenv_activation, dict(__file__=virtualenv_activation))
-
 syslog.openlog(os.path.basename(__file__), syslog.LOG_PID, syslog.LOG_USER)
 
 import django
diff --git a/ietf/bin/notify-expirations b/ietf/bin/notify-expirations
index 0270c13765..fc2fd86a31 100755
--- a/ietf/bin/notify-expirations
+++ b/ietf/bin/notify-expirations
@@ -7,10 +7,6 @@ basedir = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
 sys.path = [ basedir ] + sys.path
 os.environ["DJANGO_SETTINGS_MODULE"] = "ietf.settings"
 
-virtualenv_activation = os.path.join(basedir, "env", "bin", "activate_this.py")
-if os.path.exists(virtualenv_activation):
-    execfile(virtualenv_activation, dict(__file__=virtualenv_activation))
-
 import django
 django.setup()
 

From fd816c4f415accd6ebb693b7e0033a2d8cf99487 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 18 Nov 2024 13:57:33 -0600
Subject: [PATCH 159/707] chore: remove unused activate_this code branch
 (#8230)

---
 ietf/bin/expire-submissions | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/ietf/bin/expire-submissions b/ietf/bin/expire-submissions
index 22db38322d..113a53ddfa 100755
--- a/ietf/bin/expire-submissions
+++ b/ietf/bin/expire-submissions
@@ -8,10 +8,6 @@ basedir = os.path.abspath(os.path.join(os.path.dirname(__file__), "../.."))
 sys.path = [ basedir ] + sys.path
 os.environ["DJANGO_SETTINGS_MODULE"] = "ietf.settings"
 
-virtualenv_activation = os.path.join(basedir, "env", "bin", "activate_this.py")
-if os.path.exists(virtualenv_activation):
-    execfile(virtualenv_activation, dict(__file__=virtualenv_activation))
-
 syslog.openlog(os.path.basename(__file__), syslog.LOG_PID, syslog.LOG_USER)
 
 import django

From 952bc90ee0e3a6a4f773dd1a6125dd7da9f97979 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 19 Nov 2024 08:07:49 -0600
Subject: [PATCH 160/707] fix: follow replaces when building list for diff
 control (#8234)

---
 ietf/doc/tests.py     | 14 ++++++++++++++
 ietf/doc/views_doc.py |  8 ++++----
 2 files changed, 18 insertions(+), 4 deletions(-)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index fa655cb884..abac10a5e9 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -5,6 +5,7 @@
 import os
 import datetime
 import io
+from django.http import HttpRequest
 import lxml
 import bibtexparser
 import mock
@@ -52,6 +53,7 @@
     generate_idnits2_rfcs_obsoleted,
     get_doc_email_aliases,
 )
+from ietf.doc.views_doc import get_diff_revisions
 from ietf.group.models import Group, Role
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.ipr.factories import HolderIprDisclosureFactory
@@ -1954,6 +1956,18 @@ def test_writeup(self):
         self.assertContains(r, notes.text)
         self.assertContains(r, rfced_note.text)
 
+    def test_diff_revisions(self):
+        ind_doc = IndividualDraftFactory(create_revisions=range(2))
+        wg_doc = WgDraftFactory(
+            relations=[("replaces", ind_doc)], create_revisions=range(2)
+        )
+        diff_revisions = get_diff_revisions(HttpRequest(), wg_doc.name, wg_doc)
+        self.assertEqual(len(diff_revisions), 4)
+        self.assertEqual(
+            [t[3] for t in diff_revisions],
+            [f"{n}-{v:02d}" for n in [wg_doc.name, ind_doc.name] for v in [1, 0]],
+        )
+
     def test_history(self):
         doc = IndividualDraftFactory()
 
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 50c60aefc5..9f7cf12bcb 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1133,10 +1133,10 @@ def get_diff_revisions(request, name, doc):
 
     diff_documents = [doc]
     diff_documents.extend(
-        Document.objects.filter(
-            relateddocument__source=doc,
-            relateddocument__relationship="replaces",
-        )
+        [
+            r.target
+            for r in RelatedDocument.objects.filter(source=doc, relationship="replaces")
+        ]
     )
     if doc.came_from_draft():
         diff_documents.append(doc.came_from_draft())

From 71f52bc964b2bd1e19116f1ed601871d4666a280 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 19 Nov 2024 15:01:20 -0500
Subject: [PATCH 161/707] fix: move future meetings button in group meetings
 page to the left (#8239)

---
 ietf/templates/group/meetings.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/group/meetings.html b/ietf/templates/group/meetings.html
index 8acc688cc1..deaea1e675 100644
--- a/ietf/templates/group/meetings.html
+++ b/ietf/templates/group/meetings.html
@@ -40,7 +40,7 @@ <h2 class="mt-5" id="inprogressmeets">Meetings in progress</h2>
     {% if future %}
         <h2 class="mt-5" id="futuremeets">
             Future Meetings
-            <a class="float-end"
+            <a class="ms-2"
                aria-label="icalendar entry for all scheduled future {{ group.acronym }} meetings"
                title="icalendar entry for all scheduled future {{ group.acronym }} meetings"
                href="{% url 'ietf.meeting.views.upcoming_ical' %}?show={{ group.acronym }}">
@@ -174,4 +174,4 @@ <h2 class="mt-5" id="farpastmeets">Meetings more than four years ago</h2>
             ietf_timezone.initialize('local');
     });
     </script>
-{% endblock %}
\ No newline at end of file
+{% endblock %}

From bdf503a73ba42ea1fe514ecfd8c00ad12638b120 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 19 Nov 2024 15:06:56 -0600
Subject: [PATCH 162/707] fix: show meetecho recordings for groups with more
 than one session (#8238)

---
 ietf/meeting/views.py                         |  1 +
 ietf/templates/meeting/group_proceedings.html | 13 +++++++------
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index a195e74ce3..f386f8932f 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4105,6 +4105,7 @@ def _format_materials(items):
                 'minutes': _format_materials((s, s.minutes()) for s in ss),
                 'bluesheets': _format_materials((s, s.bluesheets()) for s in ss),
                 'recordings': _format_materials((s, s.recordings()) for s in ss),
+                'meetecho_recordings': _format_materials((s, [s.session_recording_url()]) for s in ss),
                 'chatlogs': _format_materials((s, s.chatlogs()) for s in ss),
                 'slides': _format_materials((s, s.slides()) for s in ss),
                 'drafts': _format_materials((s, s.drafts()) for s in ss),
diff --git a/ietf/templates/meeting/group_proceedings.html b/ietf/templates/meeting/group_proceedings.html
index 95d6dc5da9..496fa92263 100644
--- a/ietf/templates/meeting/group_proceedings.html
+++ b/ietf/templates/meeting/group_proceedings.html
@@ -88,12 +88,13 @@ <h1>{{ entry.group }}</h1>
               </a>
               <br>
           {% endfor %}
-            {% if entry.session.video_stream_url %}
-                <a href="{{ entry.session.session_recording_url }}">
-                    Session recording
-                </a>
-                <br>
-            {% endif %}
+          {% for rec in entry.meetecho_recordings %}
+              <a href="{{ rec.material }}">
+                  Session recording 
+                  {% if rec.time %}{{ rec.time|date:"D G:i"}}{% endif %}
+              </a>
+              <br>
+          {% endfor%}
         </td>
         {# slides #}
         <td>

From 70b8c856774c6916550455dab20ddd8162b42b18 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 19 Nov 2024 16:13:54 -0500
Subject: [PATCH 163/707] ci: Update tests.yml workflow

---
 .github/workflows/tests.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index bb767513c9..4708119875 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -73,9 +73,10 @@ jobs:
         path: geckodriver.log
 
     - name: Upload Coverage Results to Codecov
-      uses: codecov/codecov-action@v4.6.0
+      uses: codecov/codecov-action@v5
       with:
         files: coverage.xml
+        token: ${{ secrets.CODECOV_TOKEN }}
         
     - name: Convert Coverage Results
       if: ${{ always() }}

From 0027db42ebf4a86487a9a4b61c8be7f5dfa8faa8 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 19 Nov 2024 16:15:38 -0500
Subject: [PATCH 164/707] ci: Update tests.yml workflow

---
 .github/workflows/tests.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4708119875..8eb6adc953 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -75,6 +75,7 @@ jobs:
     - name: Upload Coverage Results to Codecov
       uses: codecov/codecov-action@v5
       with:
+        disable_search: true
         files: coverage.xml
         token: ${{ secrets.CODECOV_TOKEN }}
         

From 15b95da9a11abc52ea9c51fa8e5c5f4767b10b1d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 19 Nov 2024 16:24:03 -0500
Subject: [PATCH 165/707] chore(deps): bump appleboy/ssh-action from 1.1.0 to
 1.2.0 (#8221)

Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/appleboy/ssh-action/releases)
- [Changelog](https://github.com/appleboy/ssh-action/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/appleboy/ssh-action/compare/25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1...7eaf76671a0d7eec5d98ee897acda4f968735a17)

---
updated-dependencies:
- dependency-name: appleboy/ssh-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests-az.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index 3f828430a9..6d53a121aa 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -38,7 +38,7 @@ jobs:
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
     - name: Remote SSH into VM
-      uses: appleboy/ssh-action@25ce8cbbcb08177468c7ff7ec5cbfa236f9341e1
+      uses: appleboy/ssh-action@7eaf76671a0d7eec5d98ee897acda4f968735a17
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

From c3e0d28cad7dc8d7974665880f47bcb320f3a18c Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 19 Nov 2024 20:31:02 -0500
Subject: [PATCH 166/707] ci: Update build.yml workflow

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 67f24ba76f..0dd6058607 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -137,6 +137,7 @@ jobs:
     uses: ./.github/workflows/tests.yml
     if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
     needs: [prepare]
+    secrets: inherit
     with:
       ignoreLowerCoverage: ${{ github.event.inputs.ignoreLowerCoverage == 'true' }}
       skipSelenium: true

From 51a76c603d193f4b09b76e6d19b5bc2b64125690 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 20 Nov 2024 11:40:23 -0600
Subject: [PATCH 167/707] fix: removew assumption about what pks tests
 milestones get (#8243)

---
 ietf/group/tests_info.py | 61 +++++++++++++++++++++-------------------
 1 file changed, 32 insertions(+), 29 deletions(-)

diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 95fe9aa2e5..35c8b2b0b7 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -1431,7 +1431,7 @@ def create_test_milestones(self):
         RoleFactory(group=group,name_id='chair',person=PersonFactory(user__username='marschairman'))
         draft = WgDraftFactory(group=group)
 
-        m1 = GroupMilestone.objects.create(id=1,
+        m1 = GroupMilestone.objects.create(
                                            group=group,
                                            desc="Test 1",
                                            due=date_today(DEADLINE_TZINFO),
@@ -1439,7 +1439,7 @@ def create_test_milestones(self):
                                            state_id="active")
         m1.docs.set([draft])
 
-        m2 = GroupMilestone.objects.create(id=2,
+        m2 = GroupMilestone.objects.create(
                                            group=group,
                                            desc="Test 2",
                                            due=date_today(DEADLINE_TZINFO),
@@ -1580,13 +1580,14 @@ def test_accept_milestone(self):
         events_before = group.groupevent_set.count()
 
         # add
-        r = self.client.post(url, { 'prefix': "m1",
-                                    'm1-id': m1.id,
-                                    'm1-desc': m1.desc,
-                                    'm1-due': m1.due.strftime("%B %Y"),
-                                    'm1-resolved': m1.resolved,
-                                    'm1-docs': pklist(m1.docs),
-                                    'm1-review': "accept",
+        mstr = f"m{m1.id}"
+        r = self.client.post(url, { 'prefix': mstr,
+                                    f'{mstr}-id': m1.id,
+                                    f'{mstr}-desc': m1.desc,
+                                    f'{mstr}-due': m1.due.strftime("%B %Y"),
+                                    f'{mstr}-resolved': m1.resolved,
+                                    f'{mstr}-docs': pklist(m1.docs),
+                                    f'{mstr}-review': "accept",
                                     'action': "save",
                                     })
         self.assertEqual(r.status_code, 302)
@@ -1606,13 +1607,14 @@ def test_delete_milestone(self):
         events_before = group.groupevent_set.count()
 
         # delete
-        r = self.client.post(url, { 'prefix': "m1",
-                                    'm1-id': m1.id,
-                                    'm1-desc': m1.desc,
-                                    'm1-due': m1.due.strftime("%B %Y"),
-                                    'm1-resolved': "",
-                                    'm1-docs': pklist(m1.docs),
-                                    'm1-delete': "checked",
+        mstr = f"m{m1.id}"
+        r = self.client.post(url, { 'prefix': mstr,
+                                    f'{mstr}-id': m1.id,
+                                    f'{mstr}-desc': m1.desc,
+                                    f'{mstr}-due': m1.due.strftime("%B %Y"),
+                                    f'{mstr}-resolved': "",
+                                    f'{mstr}-docs': pklist(m1.docs),
+                                    f'{mstr}-delete': "checked",
                                     'action': "save",
                                     })
         self.assertEqual(r.status_code, 302)
@@ -1635,13 +1637,14 @@ def test_edit_milestone(self):
 
         due = self.last_day_of_month(date_today(DEADLINE_TZINFO) + datetime.timedelta(days=365))
 
+        mstr = f"m{m1.id}"
         # faulty post
-        r = self.client.post(url, { 'prefix': "m1",
-                                    'm1-id': m1.id,
-                                    'm1-desc': "", # no description
-                                    'm1-due': due.strftime("%B %Y"),
-                                    'm1-resolved': "",
-                                    'm1-docs': doc_pks,
+        r = self.client.post(url, { 'prefix': mstr,
+                                    f'{mstr}-id': m1.id,
+                                    f'{mstr}-desc': "", # no description
+                                    f'{mstr}-due': due.strftime("%B %Y"),
+                                    f'{mstr}-resolved': "",
+                                    f'{mstr}-docs': doc_pks,
                                     'action': "save",
                                     })
         self.assertEqual(r.status_code, 200)
@@ -1653,13 +1656,13 @@ def test_edit_milestone(self):
 
         # edit
         mailbox_before = len(outbox)
-        r = self.client.post(url, { 'prefix': "m1",
-                                    'm1-id': m1.id,
-                                    'm1-desc': "Test 2 - changed",
-                                    'm1-due': due.strftime("%B %Y"),
-                                    'm1-resolved': "Done",
-                                    'm1-resolved_checkbox': "checked",
-                                    'm1-docs': doc_pks,
+        r = self.client.post(url, { 'prefix': mstr,
+                                    f'{mstr}-id': m1.id,
+                                    f'{mstr}-desc': "Test 2 - changed",
+                                    f'{mstr}-due': due.strftime("%B %Y"),
+                                    f'{mstr}-resolved': "Done",
+                                    f'{mstr}-resolved_checkbox': "checked",
+                                    f'{mstr}-docs': doc_pks,
                                     'action': "save",
                                     })
         self.assertEqual(r.status_code, 302)

From 7c025c9f2bbff6c229ec7b7befcdd2534bb84900 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 20 Nov 2024 12:59:39 -0500
Subject: [PATCH 168/707] chore(deps): bump nanoid in /dev/deploy-to-container
 in the npm group (#8098)

Bumps the npm group in /dev/deploy-to-container with 1 update: [nanoid](https://github.com/ai/nanoid).


Updates `nanoid` from 5.0.7 to 5.0.8
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.0.7...5.0.8)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 14 +++++++-------
 dev/deploy-to-container/package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index f636a45f05..d787f6aa9e 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -8,7 +8,7 @@
       "dependencies": {
         "dockerode": "^4.0.2",
         "fs-extra": "^11.2.0",
-        "nanoid": "5.0.7",
+        "nanoid": "5.0.8",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
         "tar": "^7.4.3",
@@ -546,9 +546,9 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.7.tgz",
-      "integrity": "sha512-oLxFY2gd2IqnjcYyOXD8XGCftpGtZP2AbHbOkthDkvRywH5ayNtPVy9YlOPcHckXzbLTCHpkb7FB+yuxKV13pQ==",
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.8.tgz",
+      "integrity": "sha512-TcJPw+9RV9dibz1hHUzlLVy8N4X9TnwirAjrU08Juo6BNKggzVfP2ZJ/3ZUSq15Xl5i85i+Z89XBO90pB2PghQ==",
       "funding": [
         {
           "type": "github",
@@ -1346,9 +1346,9 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.7.tgz",
-      "integrity": "sha512-oLxFY2gd2IqnjcYyOXD8XGCftpGtZP2AbHbOkthDkvRywH5ayNtPVy9YlOPcHckXzbLTCHpkb7FB+yuxKV13pQ=="
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.8.tgz",
+      "integrity": "sha512-TcJPw+9RV9dibz1hHUzlLVy8N4X9TnwirAjrU08Juo6BNKggzVfP2ZJ/3ZUSq15Xl5i85i+Z89XBO90pB2PghQ=="
     },
     "nanoid-dictionary": {
       "version": "5.0.0-beta.1",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index be77fa5cce..530d1f3b8b 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -4,7 +4,7 @@
   "dependencies": {
     "dockerode": "^4.0.2",
     "fs-extra": "^11.2.0",
-    "nanoid": "5.0.7",
+    "nanoid": "5.0.8",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",
     "tar": "^7.4.3",

From 3c42d98c5d759045fbb0535fd187969600eb4b22 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 20 Nov 2024 13:09:28 -0500
Subject: [PATCH 169/707] ci: Update build.yml workflow

---
 .github/workflows/build.yml | 60 ++++++++++++++-----------------------
 1 file changed, 22 insertions(+), 38 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0dd6058607..f1044223dc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -350,50 +350,34 @@ jobs:
     steps:      
     - name: Notify on Slack (Success)
       if: ${{ !contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v1.27.0
+      uses: slackapi/slack-github-action@v2
       with:
-        channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+        token: ${{ secrets.SLACK_GH_BOT }}
+        method: chat.postMessage
         payload: |
-          {
-            "text": "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }} - <@${{ secrets.SLACK_UID_RJSPARKS }}>",
-            "attachments": [
-              {
-                "color": "28a745",
-                "fields": [
-                  {
-                    "title": "Status",
-                    "short": true,
-                    "value": "Completed"
-                  }
-                ]
-              }
-            ]
-          }
-      env:
-        SLACK_BOT_TOKEN: ${{ secrets.SLACK_GH_BOT }}
+          channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+          text: "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }}"
+          attachments:
+            - color: "28a745"
+              fields:
+                - title: "Status"
+                  short: true
+                  value: "Completed"
     - name: Notify on Slack (Failure)
       if: ${{ contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v1.27.0
+      uses: slackapi/slack-github-action@v2
       with:
-        channel-id: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+        token: ${{ secrets.SLACK_GH_BOT }}
+        method: chat.postMessage
         payload: |
-          {
-            "text": "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }} - <@${{ secrets.SLACK_UID_RJSPARKS }}>",
-            "attachments": [
-              {
-                "color": "a82929",
-                "fields": [
-                  {
-                    "title": "Status",
-                    "short": true,
-                    "value": "Failed"
-                  }
-                ]
-              }
-            ]
-          }
-      env:
-        SLACK_BOT_TOKEN: ${{ secrets.SLACK_GH_BOT }}
+          channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+          text: "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }}"
+          attachments:
+            - color: "a82929"
+              fields:
+                - title: "Status"
+                  short: true
+                  value: "Failed"
         
   # -----------------------------------------------------------------
   # SANDBOX

From bdf753e05250129475c3310fa60cc31240028932 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 20 Nov 2024 17:48:00 -0500
Subject: [PATCH 170/707] chore: set gitattributes for normalizing line endings
 (#8245)

* chore: add proper .gitattributes

* chore: normalize file endings

* chore: fix .gitattributes

* chore: normalize file endings (2)
---
 .gitattributes                                | 282 ++++++++++++-
 dev/build/settings_local_collectstatics.py    |  16 +-
 dev/tests/docker-compose.debug.yml            |  64 +--
 docker/configs/pgadmin-servers.json           |  44 +-
 ietf/dbtemplate/fixtures/nomcom_templates.xml | 380 +++++++++---------
 ietf/secr/static/js/dynamic_inlines.js        | 142 +++----
 k8s/README.md                                 |   8 +-
 k8s/kustomization.yaml                        |  32 +-
 k8s/memcached.yaml                            | 160 ++++----
 k8s/secrets.yaml                              | 164 ++++----
 10 files changed, 785 insertions(+), 507 deletions(-)

diff --git a/.gitattributes b/.gitattributes
index 937c0eb379..62f4aae432 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,280 @@
-/.yarn/releases/** binary
-/.yarn/plugins/** binary
+# Auto detect text files and perform LF normalization
+* text=auto
+
+# ---------------------------------------------------
+# Python Projects
+# ---------------------------------------------------
+
+# Source files
+*.pxd    text diff=python
+*.py     text diff=python
+*.py3    text diff=python
+*.pyw    text diff=python
+*.pyx    text diff=python
+*.pyz    text diff=python
+*.pyi    text diff=python
+
+# Binary files
+*.db     binary
+*.p      binary
+*.pkl    binary
+*.pickle binary
+*.pyc    binary export-ignore
+*.pyo    binary export-ignore
+*.pyd    binary
+
+# Jupyter notebook
+*.ipynb  text eol=lf
+
+# ---------------------------------------------------
+# Web Projects
+# ---------------------------------------------------
+
+# Source code
+*.bash            text eol=lf
+*.bat             text eol=crlf
+*.cmd             text eol=crlf
+*.coffee          text
+*.css             text diff=css
+*.htm             text diff=html
+*.html            text diff=html
+*.inc             text
+*.ini             text
+*.js              text
+*.mjs             text
+*.cjs             text
+*.json            text
+*.jsx             text
+*.less            text
+*.ls              text
+*.map             text -diff
+*.od              text
+*.onlydata        text
+*.php             text diff=php
+*.pl              text
+*.ps1             text eol=crlf
+*.py              text diff=python
+*.rb              text diff=ruby
+*.sass            text
+*.scm             text
+*.scss            text diff=css
+*.sh              text eol=lf
+.husky/*          text eol=lf
+*.sql             text
+*.styl            text
+*.tag             text
+*.ts              text
+*.tsx             text
+*.xml             text
+*.xhtml           text diff=html
+
+# Docker
+Dockerfile        text
+
+# Documentation
+*.ipynb           text eol=lf
+*.markdown        text diff=markdown
+*.md              text diff=markdown
+*.mdwn            text diff=markdown
+*.mdown           text diff=markdown
+*.mkd             text diff=markdown
+*.mkdn            text diff=markdown
+*.mdtxt           text
+*.mdtext          text
+*.txt             text
+AUTHORS           text
+CHANGELOG         text
+CHANGES           text
+CONTRIBUTING      text
+COPYING           text
+copyright         text
+*COPYRIGHT*       text
+INSTALL           text
+license           text
+LICENSE           text
+NEWS              text
+readme            text
+*README*          text
+TODO              text
+
+# Templates
+*.dot             text
+*.ejs             text
+*.erb             text
+*.haml            text
+*.handlebars      text
+*.hbs             text
+*.hbt             text
+*.jade            text
+*.latte           text
+*.mustache        text
+*.njk             text
+*.phtml           text
+*.pug             text
+*.svelte          text
+*.tmpl            text
+*.tpl             text
+*.twig            text
+*.vue             text
+
+# Configs
+*.cnf             text
+*.conf            text
+*.config          text
+.editorconfig     text
+.env              text
+.gitattributes    text
+.gitconfig        text
+.htaccess         text
+*.lock            text -diff
+package.json      text eol=lf
+package-lock.json text eol=lf -diff
+pnpm-lock.yaml    text eol=lf -diff
+.prettierrc       text
+yarn.lock         text -diff
+*.toml            text
+*.yaml            text
+*.yml             text
+browserslist      text
+Makefile          text
+makefile          text
+# Fixes syntax highlighting on GitHub to allow comments
+tsconfig.json     linguist-language=JSON-with-Comments
+
+# Heroku
+Procfile          text
+
+# Graphics
+*.ai              binary
+*.bmp             binary
+*.eps             binary
+*.gif             binary
+*.gifv            binary
+*.ico             binary
+*.jng             binary
+*.jp2             binary
+*.jpg             binary
+*.jpeg            binary
+*.jpx             binary
+*.jxr             binary
+*.pdf             binary
+*.png             binary
+*.psb             binary
+*.psd             binary
+*.svg             text
+*.svgz            binary
+*.tif             binary
+*.tiff            binary
+*.wbmp            binary
+*.webp            binary
+
+# Audio
+*.kar             binary
+*.m4a             binary
+*.mid             binary
+*.midi            binary
+*.mp3             binary
+*.ogg             binary
+*.ra              binary
+
+# Video
+*.3gpp            binary
+*.3gp             binary
+*.as              binary
+*.asf             binary
+*.asx             binary
+*.avi             binary
+*.fla             binary
+*.flv             binary
+*.m4v             binary
+*.mng             binary
+*.mov             binary
+*.mp4             binary
+*.mpeg            binary
+*.mpg             binary
+*.ogv             binary
+*.swc             binary
+*.swf             binary
+*.webm            binary
+
+# Archives
+*.7z              binary
+*.gz              binary
+*.jar             binary
+*.rar             binary
+*.tar             binary
+*.zip             binary
+
+# Fonts
+*.ttf             binary
+*.eot             binary
+*.otf             binary
+*.woff            binary
+*.woff2           binary
+
+# Executables
+*.exe             binary
+*.pyc             binary
+# Prevents massive diffs caused by vendored, minified files
+**/.yarn/releases/**   binary
+**/.yarn/plugins/**    binary
+
+# RC files (like .babelrc or .eslintrc)
+*.*rc             text
+
+# Ignore files (like .npmignore or .gitignore)
+*.*ignore         text
+
+# Prevents massive diffs from built files
+dist/*            binary
+
+# ---------------------------------------------------
+# Common
+# ---------------------------------------------------
+
+# Documents
+*.bibtex   text diff=bibtex
+*.doc      diff=astextplain
+*.DOC      diff=astextplain
+*.docx     diff=astextplain
+*.DOCX     diff=astextplain
+*.dot      diff=astextplain
+*.DOT      diff=astextplain
+*.pdf      diff=astextplain
+*.PDF      diff=astextplain
+*.rtf      diff=astextplain
+*.RTF      diff=astextplain
+*.md       text diff=markdown
+*.mdx      text diff=markdown
+*.tex      text diff=tex
+*.adoc     text
+*.textile  text
+*.mustache text
+*.csv      text eol=crlf
+*.tab      text
+*.tsv      text
+*.txt      text
+*.sql      text
+*.epub     diff=astextplain
+
+# Text files where line endings should be preserved
+*.patch    -text
+
+# ---------------------------------------------------
+# Vzic specific
+# ---------------------------------------------------
+
+*.pl text diff=perl
+*.pm text diff=perl
+
+# C/C++
+*.c     text diff=cpp
+*.cc    text diff=cpp
+*.cxx   text diff=cpp
+*.cpp   text diff=cpp
+*.cpi   text diff=cpp
+*.c++   text diff=cpp
+*.hpp   text diff=cpp
+*.h     text diff=cpp
+*.h++   text diff=cpp
+*.hh    text diff=cpp
\ No newline at end of file
diff --git a/dev/build/settings_local_collectstatics.py b/dev/build/settings_local_collectstatics.py
index 016b3f934a..ccb4b33979 100644
--- a/dev/build/settings_local_collectstatics.py
+++ b/dev/build/settings_local_collectstatics.py
@@ -1,8 +1,8 @@
-# Copyright The IETF Trust 2007-2019, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-from ietf import __version__
-from ietf.settings import *                                          # pyflakes:ignore
-
-STATIC_URL = "https://static.ietf.org/dt/%s/"%__version__
-STATIC_ROOT = os.path.abspath(BASE_DIR + "/../static/")
+# Copyright The IETF Trust 2007-2019, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+from ietf import __version__
+from ietf.settings import *                                          # pyflakes:ignore
+
+STATIC_URL = "https://static.ietf.org/dt/%s/"%__version__
+STATIC_ROOT = os.path.abspath(BASE_DIR + "/../static/")
diff --git a/dev/tests/docker-compose.debug.yml b/dev/tests/docker-compose.debug.yml
index 6362ef072e..8d939e0ea2 100644
--- a/dev/tests/docker-compose.debug.yml
+++ b/dev/tests/docker-compose.debug.yml
@@ -1,32 +1,32 @@
-# This docker-compose replicates the test workflow happening on GitHub during a PR / build check.
-# To be used from the debug.sh script.
-
-version: '3.8'
-
-services:
-    app:
-        image: ghcr.io/ietf-tools/datatracker-app-base:latest
-        command: -f /dev/null
-        working_dir: /__w/datatracker/datatracker
-        entrypoint: tail
-        hostname: app
-        volumes:
-            - /var/run/docker.sock:/var/run/docker.sock
-        environment:
-            CI: 'true'
-            GITHUB_ACTIONS: 'true'
-            HOME: /github/home
-        deploy:    
-            resources:
-                limits:
-                    cpus: '2'
-                    memory: '7GB'
-
-    db:
-        image: ghcr.io/ietf-tools/datatracker-db:latest
-        restart: unless-stopped
-        volumes:
-            - postgresdb-data:/var/lib/postgresql/data
-
-volumes:
-    postgresdb-data:
+# This docker-compose replicates the test workflow happening on GitHub during a PR / build check.
+# To be used from the debug.sh script.
+
+version: '3.8'
+
+services:
+    app:
+        image: ghcr.io/ietf-tools/datatracker-app-base:latest
+        command: -f /dev/null
+        working_dir: /__w/datatracker/datatracker
+        entrypoint: tail
+        hostname: app
+        volumes:
+            - /var/run/docker.sock:/var/run/docker.sock
+        environment:
+            CI: 'true'
+            GITHUB_ACTIONS: 'true'
+            HOME: /github/home
+        deploy:    
+            resources:
+                limits:
+                    cpus: '2'
+                    memory: '7GB'
+
+    db:
+        image: ghcr.io/ietf-tools/datatracker-db:latest
+        restart: unless-stopped
+        volumes:
+            - postgresdb-data:/var/lib/postgresql/data
+
+volumes:
+    postgresdb-data:
diff --git a/docker/configs/pgadmin-servers.json b/docker/configs/pgadmin-servers.json
index 8b1c181d13..b4458af923 100644
--- a/docker/configs/pgadmin-servers.json
+++ b/docker/configs/pgadmin-servers.json
@@ -1,22 +1,22 @@
-{
-  "Servers": {
-      "1": {
-          "Name": "Local Dev",
-          "Group": "Servers",
-          "Host": "db",
-          "Port": 5432,
-          "MaintenanceDB": "postgres",
-          "Username": "django",
-          "UseSSHTunnel": 0,
-          "TunnelPort": "22",
-          "TunnelAuthentication": 0,
-          "KerberosAuthentication": false,
-          "ConnectionParameters": {
-              "sslmode": "prefer",
-              "connect_timeout": 10,
-              "sslcert": "<STORAGE_DIR>/.postgresql/postgresql.crt",
-              "sslkey": "<STORAGE_DIR>/.postgresql/postgresql.key"
-          }
-      }
-  }
-}
+{
+  "Servers": {
+      "1": {
+          "Name": "Local Dev",
+          "Group": "Servers",
+          "Host": "db",
+          "Port": 5432,
+          "MaintenanceDB": "postgres",
+          "Username": "django",
+          "UseSSHTunnel": 0,
+          "TunnelPort": "22",
+          "TunnelAuthentication": 0,
+          "KerberosAuthentication": false,
+          "ConnectionParameters": {
+              "sslmode": "prefer",
+              "connect_timeout": 10,
+              "sslcert": "<STORAGE_DIR>/.postgresql/postgresql.crt",
+              "sslkey": "<STORAGE_DIR>/.postgresql/postgresql.key"
+          }
+      }
+  }
+}
diff --git a/ietf/dbtemplate/fixtures/nomcom_templates.xml b/ietf/dbtemplate/fixtures/nomcom_templates.xml
index abf0cb58f6..e7065b84cd 100644
--- a/ietf/dbtemplate/fixtures/nomcom_templates.xml
+++ b/ietf/dbtemplate/fixtures/nomcom_templates.xml
@@ -1,190 +1,190 @@
-<?xml version="1.0" encoding="utf-8"?>
-<django-objects version="1.0">
-    <object pk="1" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/home.rst</field>
-        <field type="CharField" name="title">Home page of group</field>
-        <field type="TextField" name="variables"></field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
-        <field type="TextField" name="content">Home page
-=========
-
-This is the home page of the nomcom group.</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="2" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/inexistent_person.txt</field>
-        <field type="CharField" name="title">Email sent to chair of nomcom and secretariat when Email and Person are created if some of them don't exist</field>
-        <field type="TextField" name="variables">$email: Newly created email
-$fullname: Fullname of the new person
-$person_id: Id of the new Person object
-$group: Name of the group</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hello,
-
-A new person with name $fullname and email $email has been created. The new Person object has the following id: '$person_id'.
-
-Please, check if there is some more action nedeed.</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="3" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/new_nominee.txt</field>
-        <field type="CharField" name="title">Email sent to nominees when they are nominated</field>
-        <field type="TextField" name="variables">$nominee: Full name of the nominee
-$position: Name of the position
-$domain: Server domain
-$accept_url: Url hash to accept nominations
-$decline_url: Url hash to decline nominations</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hi,
-
-You have been nominated for the position of $position.
-
-The NomCom would appreciate receiving an indication of whether or not you accept this nomination to stand for consideration as a candidate for this position.
-
-You can accept the nomination via web going to the following link https://$domain$accept_url or decline the nomination going the following link https://$domain$decline_url
-
-If you accept, you will need to fill out a questionnaire.  You will receive the questionnaire by email.
-
-Best regards,
-</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="4" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/new_nomination.txt</field>
-        <field type="CharField" name="title">Email sent to nominators and secretariat when the nominators make the nominations</field>
-        <field type="TextField" name="variables">$nominator: Full name of the nominator
-$nominator_email: Email of the nominator
-$nominee: Full name of the nominee
-$nominee_email: Email of the nominee
-$position: Nomination position</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">A new nomination have been received.
-
-Nominator: $nominator ($nominator_email)
-Nominee: $nominee ($nominee_email)
-Position: $position</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="5" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/position/questionnaire.txt</field>
-        <field type="CharField" name="title">Questionnaire sent to the nomine</field>
-        <field type="TextField" name="variables">$position: Position</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Enter here the questionnaire for the position $position:
-
-Questionnaire</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="6" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/position/requirements</field>
-        <field type="CharField" name="title">Position requirements</field>
-        <field type="TextField" name="variables">$position: Position</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
-        <field type="TextField" name="content">These are the requirements for the position $position:
-
-Requirements.</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="7" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/position/header_questionnaire.txt</field>
-        <field type="CharField" name="title">Header of the email that contains the questionnaire sent to the nomine</field>
-        <field type="TextField" name="variables">$nominee: Full name of the nomine
-$position: Position</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hi $nominee, this is the questionnaire for the position $position:
-
-</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="8" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/nomination_accept_reminder.txt</field>
-        <field type="CharField" name="title">Email sent to nominees asking them to accept (or decline) the nominations.</field>
-        <field type="TextField" name="variables">$positions: Nomination positions</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hi,
-
-You have been nominated for the position of $position.
-
-The NomCom would appreciate receiving an indication of whether or not you accept this nomination to stand for consideration as a candidate for this position.
-
-You can accept the nomination via web going to the following link https://$domain$accept_url or decline the nomination going the following link https://$domain$decline_url
-
-If you accept, you will need to fill out a questionnaire.
-
-Best regards,</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="9" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/nomination_receipt.txt</field>
-        <field type="CharField" name="title">Email sent to nominator to get a confirmation mail containing feedback in cleartext</field>
-        <field type="TextField" name="variables">$nominee: Full name of the nominee
-$position: Name of the position
-$domain: Server domain
-$accept_url: Url hash to accept nominations
-$decline_url: Url hash to decline nominations</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hi,
-
-Your nomination of $nominee for the position of
-$position has been received and registered.
-
-The following comments have also been registered:
-
---------------------------------------------------------------------------
-$comments
---------------------------------------------------------------------------
-
-Thank you,</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="10" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/feedback_receipt.txt</field>
-        <field type="CharField" name="title">Email sent to feedback author to get a confirmation mail containing feedback in cleartext</field>
-        <field type="TextField" name="variables">$nominee: Full name of the nominee
-$position: Nomination position
-$comments: Comments on this candidate</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">Hi,
-
-Your input regarding $about has been received and registered.
-
-The following comments have been registered:
-
---------------------------------------------------------------------------
-$comments
---------------------------------------------------------------------------
-
-Thank you,</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="11" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/email/questionnaire_reminder.txt</field>
-        <field type="CharField" name="title">Email sent to nominees reminding them to complete a questionnaire</field>
-        <field type="TextField" name="variables">$positions: Nomination positions</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
-        <field type="TextField" name="content">
-Thank you for accepting your nomination for the position of $position.
-
-Please remember to complete and return the questionnaire for this position at your earliest opportunity.
-The questionnaire is repeated below for your convenience.
-
---------</field>
-        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
-    </object>
-    <object pk="12" model="dbtemplate.dbtemplate">
-      <field type="CharField" name="path">/nomcom/defaults/topic/description</field>
-      <field type="CharField" name="title">Description of Topic</field>
-      <field type="TextField" name="variables">$topic: Topic'</field>
-      <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
-      <field type="TextField" name="content">This is a description of the topic "$topic"
-
-Describe the topic and add any information/instructions for the responder here.
-</field>
-    </object>
-    <object pk="13" model="dbtemplate.dbtemplate">
-        <field type="CharField" name="path">/nomcom/defaults/iesg_requirements</field>
-        <field type="CharField" name="title">Generic IESG Requirements</field>
-        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
-        <field type="TextField" name="content">Generic IESG Requirements Yo!</field>
-    </object>
-</django-objects>
+<?xml version="1.0" encoding="utf-8"?>
+<django-objects version="1.0">
+    <object pk="1" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/home.rst</field>
+        <field type="CharField" name="title">Home page of group</field>
+        <field type="TextField" name="variables"></field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
+        <field type="TextField" name="content">Home page
+=========
+
+This is the home page of the nomcom group.</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="2" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/inexistent_person.txt</field>
+        <field type="CharField" name="title">Email sent to chair of nomcom and secretariat when Email and Person are created if some of them don't exist</field>
+        <field type="TextField" name="variables">$email: Newly created email
+$fullname: Fullname of the new person
+$person_id: Id of the new Person object
+$group: Name of the group</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hello,
+
+A new person with name $fullname and email $email has been created. The new Person object has the following id: '$person_id'.
+
+Please, check if there is some more action nedeed.</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="3" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/new_nominee.txt</field>
+        <field type="CharField" name="title">Email sent to nominees when they are nominated</field>
+        <field type="TextField" name="variables">$nominee: Full name of the nominee
+$position: Name of the position
+$domain: Server domain
+$accept_url: Url hash to accept nominations
+$decline_url: Url hash to decline nominations</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hi,
+
+You have been nominated for the position of $position.
+
+The NomCom would appreciate receiving an indication of whether or not you accept this nomination to stand for consideration as a candidate for this position.
+
+You can accept the nomination via web going to the following link https://$domain$accept_url or decline the nomination going the following link https://$domain$decline_url
+
+If you accept, you will need to fill out a questionnaire.  You will receive the questionnaire by email.
+
+Best regards,
+</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="4" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/new_nomination.txt</field>
+        <field type="CharField" name="title">Email sent to nominators and secretariat when the nominators make the nominations</field>
+        <field type="TextField" name="variables">$nominator: Full name of the nominator
+$nominator_email: Email of the nominator
+$nominee: Full name of the nominee
+$nominee_email: Email of the nominee
+$position: Nomination position</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">A new nomination have been received.
+
+Nominator: $nominator ($nominator_email)
+Nominee: $nominee ($nominee_email)
+Position: $position</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="5" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/position/questionnaire.txt</field>
+        <field type="CharField" name="title">Questionnaire sent to the nomine</field>
+        <field type="TextField" name="variables">$position: Position</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Enter here the questionnaire for the position $position:
+
+Questionnaire</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="6" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/position/requirements</field>
+        <field type="CharField" name="title">Position requirements</field>
+        <field type="TextField" name="variables">$position: Position</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
+        <field type="TextField" name="content">These are the requirements for the position $position:
+
+Requirements.</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="7" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/position/header_questionnaire.txt</field>
+        <field type="CharField" name="title">Header of the email that contains the questionnaire sent to the nomine</field>
+        <field type="TextField" name="variables">$nominee: Full name of the nomine
+$position: Position</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hi $nominee, this is the questionnaire for the position $position:
+
+</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="8" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/nomination_accept_reminder.txt</field>
+        <field type="CharField" name="title">Email sent to nominees asking them to accept (or decline) the nominations.</field>
+        <field type="TextField" name="variables">$positions: Nomination positions</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hi,
+
+You have been nominated for the position of $position.
+
+The NomCom would appreciate receiving an indication of whether or not you accept this nomination to stand for consideration as a candidate for this position.
+
+You can accept the nomination via web going to the following link https://$domain$accept_url or decline the nomination going the following link https://$domain$decline_url
+
+If you accept, you will need to fill out a questionnaire.
+
+Best regards,</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="9" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/nomination_receipt.txt</field>
+        <field type="CharField" name="title">Email sent to nominator to get a confirmation mail containing feedback in cleartext</field>
+        <field type="TextField" name="variables">$nominee: Full name of the nominee
+$position: Name of the position
+$domain: Server domain
+$accept_url: Url hash to accept nominations
+$decline_url: Url hash to decline nominations</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hi,
+
+Your nomination of $nominee for the position of
+$position has been received and registered.
+
+The following comments have also been registered:
+
+--------------------------------------------------------------------------
+$comments
+--------------------------------------------------------------------------
+
+Thank you,</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="10" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/feedback_receipt.txt</field>
+        <field type="CharField" name="title">Email sent to feedback author to get a confirmation mail containing feedback in cleartext</field>
+        <field type="TextField" name="variables">$nominee: Full name of the nominee
+$position: Nomination position
+$comments: Comments on this candidate</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">Hi,
+
+Your input regarding $about has been received and registered.
+
+The following comments have been registered:
+
+--------------------------------------------------------------------------
+$comments
+--------------------------------------------------------------------------
+
+Thank you,</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="11" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/email/questionnaire_reminder.txt</field>
+        <field type="CharField" name="title">Email sent to nominees reminding them to complete a questionnaire</field>
+        <field type="TextField" name="variables">$positions: Nomination positions</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">plain</field>
+        <field type="TextField" name="content">
+Thank you for accepting your nomination for the position of $position.
+
+Please remember to complete and return the questionnaire for this position at your earliest opportunity.
+The questionnaire is repeated below for your convenience.
+
+--------</field>
+        <field to="group.group" name="group" rel="ManyToOneRel"><None></None></field>
+    </object>
+    <object pk="12" model="dbtemplate.dbtemplate">
+      <field type="CharField" name="path">/nomcom/defaults/topic/description</field>
+      <field type="CharField" name="title">Description of Topic</field>
+      <field type="TextField" name="variables">$topic: Topic'</field>
+      <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
+      <field type="TextField" name="content">This is a description of the topic "$topic"
+
+Describe the topic and add any information/instructions for the responder here.
+</field>
+    </object>
+    <object pk="13" model="dbtemplate.dbtemplate">
+        <field type="CharField" name="path">/nomcom/defaults/iesg_requirements</field>
+        <field type="CharField" name="title">Generic IESG Requirements</field>
+        <field to="name.dbtemplatetypename" name="type" rel="ManyToOneRel">rst</field>
+        <field type="TextField" name="content">Generic IESG Requirements Yo!</field>
+    </object>
+</django-objects>
diff --git a/ietf/secr/static/js/dynamic_inlines.js b/ietf/secr/static/js/dynamic_inlines.js
index a1abc2d0e5..d0753a3a63 100644
--- a/ietf/secr/static/js/dynamic_inlines.js
+++ b/ietf/secr/static/js/dynamic_inlines.js
@@ -1,71 +1,71 @@
-/* Following functions based off code written by Arne Brodowski
-http://www.arnebrodowski.de/blog/507-Add-and-remove-Django-Admin-Inlines-with-JavaScript.html
-
-2012-02-01 customized for new Rolodex.  Email formset doesn't have an id field, rather a "address"
-field as primary key.  Also for some reason the "active" boolean field doesn't get saved properly
-if the checkbox input has an empty "value" argument.
-*/
-import $ from 'jquery';
-
-function increment_form_ids(el, to, name) {
-    var from = to-1
-    $(':input', $(el)).each(function(i,e){
-        var old_name = $(e).attr('name')
-        var old_id = $(e).attr('id')
-        $(e).attr('name', old_name.replace(from, to))
-        $(e).attr('id', old_id.replace(from, to))
-        if ($(e).attr('type') != 'checkbox') {
-           $(e).val('')
-        }
-    })
-}
-
-function add_inline_form(name) {
-    if (name=="email") {
-        var first = $('#id_'+name+'-0-address').parents('.inline-related')
-    }
-    else {
-        var first = $('#id_'+name+'-0-id').parents('.inline-related')
-    }
-    // check to see if this is a stacked or tabular inline
-    if (first.hasClass("tabular")) {
-        var field_table = first.parent().find('table > tbody')
-        const children = field_table.children('tr.dynamic-inline')
-        var count = children.length
-        const last = $(children[count-1])
-        var copy = last.clone(true)
-        copy.removeClass("row1 row2")
-        copy.find("input[name$='address']").attr("readonly", false)
-        copy.addClass("row"+((count % 2) ? 2 : 1))
-        copy.insertAfter(last)
-        increment_form_ids($(copy), count, name)
-    }
-    else {
-        var last = $(first).parent().children('.last-related')
-        var copy = $(last).clone(true)
-        var count = $(first).parent().children('.inline-related').length
-        $(last).removeClass('last-related')
-        var header = $('h3', copy)
-        header.html(header.html().replace("#"+count, "#"+(count+1)))
-        $(last).after(copy)
-        increment_form_ids($(first).parents('.inline-group').children('.last-related'), count, name)
-    }
-    $('input#id_'+name+'-TOTAL_FORMS').val(count+1)
-    return false;
-}
-
-// Add all the "Add Another" links to the bottom of each inline group
-$(function() {
-    var html_template = '<ul class="tools">'+
-        '<li>'+
-            '<a id="addlink-{{prefix}}" class="addlink" href="#">'+
-            'Add another</a>'+
-        '</li>'+
-    '</ul>'
-    $('.inline-group').each(function(i) {
-        //prefix is in the name of the input fields before the "-"
-        var prefix = $("input[type='hidden'][name!='csrfmiddlewaretoken']", this).attr("name").split("-")[0];
-        $(this).append(html_template.replace("{{prefix}}", prefix));
-        $('#addlink-' + prefix).on('click', () => add_inline_form(prefix));
-    })
-})
+/* Following functions based off code written by Arne Brodowski
+http://www.arnebrodowski.de/blog/507-Add-and-remove-Django-Admin-Inlines-with-JavaScript.html
+
+2012-02-01 customized for new Rolodex.  Email formset doesn't have an id field, rather a "address"
+field as primary key.  Also for some reason the "active" boolean field doesn't get saved properly
+if the checkbox input has an empty "value" argument.
+*/
+import $ from 'jquery';
+
+function increment_form_ids(el, to, name) {
+    var from = to-1
+    $(':input', $(el)).each(function(i,e){
+        var old_name = $(e).attr('name')
+        var old_id = $(e).attr('id')
+        $(e).attr('name', old_name.replace(from, to))
+        $(e).attr('id', old_id.replace(from, to))
+        if ($(e).attr('type') != 'checkbox') {
+           $(e).val('')
+        }
+    })
+}
+
+function add_inline_form(name) {
+    if (name=="email") {
+        var first = $('#id_'+name+'-0-address').parents('.inline-related')
+    }
+    else {
+        var first = $('#id_'+name+'-0-id').parents('.inline-related')
+    }
+    // check to see if this is a stacked or tabular inline
+    if (first.hasClass("tabular")) {
+        var field_table = first.parent().find('table > tbody')
+        const children = field_table.children('tr.dynamic-inline')
+        var count = children.length
+        const last = $(children[count-1])
+        var copy = last.clone(true)
+        copy.removeClass("row1 row2")
+        copy.find("input[name$='address']").attr("readonly", false)
+        copy.addClass("row"+((count % 2) ? 2 : 1))
+        copy.insertAfter(last)
+        increment_form_ids($(copy), count, name)
+    }
+    else {
+        var last = $(first).parent().children('.last-related')
+        var copy = $(last).clone(true)
+        var count = $(first).parent().children('.inline-related').length
+        $(last).removeClass('last-related')
+        var header = $('h3', copy)
+        header.html(header.html().replace("#"+count, "#"+(count+1)))
+        $(last).after(copy)
+        increment_form_ids($(first).parents('.inline-group').children('.last-related'), count, name)
+    }
+    $('input#id_'+name+'-TOTAL_FORMS').val(count+1)
+    return false;
+}
+
+// Add all the "Add Another" links to the bottom of each inline group
+$(function() {
+    var html_template = '<ul class="tools">'+
+        '<li>'+
+            '<a id="addlink-{{prefix}}" class="addlink" href="#">'+
+            'Add another</a>'+
+        '</li>'+
+    '</ul>'
+    $('.inline-group').each(function(i) {
+        //prefix is in the name of the input fields before the "-"
+        var prefix = $("input[type='hidden'][name!='csrfmiddlewaretoken']", this).attr("name").split("-")[0];
+        $(this).append(html_template.replace("{{prefix}}", prefix));
+        $('#addlink-' + prefix).on('click', () => add_inline_form(prefix));
+    })
+})
diff --git a/k8s/README.md b/k8s/README.md
index 73b5978675..3966101ab8 100644
--- a/k8s/README.md
+++ b/k8s/README.md
@@ -1,5 +1,5 @@
-# Kustomize deployment
-
-## Run locally
-
+# Kustomize deployment
+
+## Run locally
+
 The `secrets.yaml` file is provided as a reference only and must be referenced manually in the `kustomization.yaml` file.
\ No newline at end of file
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index 4b79f00753..2b623da2bd 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -1,16 +1,16 @@
-namespace: datatracker
-namePrefix: dt-
-configMapGenerator:
-  - name: files-cfgmap
-    files:
-      - nginx-logging.conf
-      - nginx-auth.conf
-      - nginx-datatracker.conf
-      - settings_local.py
-resources:
-  - auth.yaml
-  - beat.yaml
-  - celery.yaml
-  - datatracker.yaml
-  - memcached.yaml
-  - rabbitmq.yaml
+namespace: datatracker
+namePrefix: dt-
+configMapGenerator:
+  - name: files-cfgmap
+    files:
+      - nginx-logging.conf
+      - nginx-auth.conf
+      - nginx-datatracker.conf
+      - settings_local.py
+resources:
+  - auth.yaml
+  - beat.yaml
+  - celery.yaml
+  - datatracker.yaml
+  - memcached.yaml
+  - rabbitmq.yaml
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
index 4b362c88c1..5a4c9f0aed 100644
--- a/k8s/memcached.yaml
+++ b/k8s/memcached.yaml
@@ -1,80 +1,80 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: memcached
-spec:
-  replicas: 1
-  revisionHistoryLimit: 2
-  selector:
-    matchLabels:
-      app: memcached
-  template:
-    metadata:
-      labels:
-        app: memcached
-    spec:
-      securityContext:
-        runAsNonRoot: true
-      containers:
-        # -----------------------------------------------------
-        # Memcached
-        # -----------------------------------------------------
-        - image: "memcached:1.6-alpine"
-          imagePullPolicy: IfNotPresent
-          args: ["-m", "1024"]
-          name: memcached
-          ports:
-            - name: memcached
-              containerPort: 11211
-              protocol: TCP
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            # memcached image sets up uid/gid 11211
-            runAsUser: 11211
-            runAsGroup: 11211
-        # -----------------------------------------------------
-        # Memcached Exporter for Prometheus
-        # -----------------------------------------------------
-        - image: "quay.io/prometheus/memcached-exporter:v0.14.3"
-          imagePullPolicy: IfNotPresent
-          name: memcached-exporter
-          ports:
-            - name: metrics
-              containerPort: 9150
-              protocol: TCP
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            runAsUser: 65534  # nobody
-            runAsGroup: 65534  # nobody
-      dnsPolicy: ClusterFirst
-      restartPolicy: Always
-      terminationGracePeriodSeconds: 30
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: memcached
-  annotations:
-    k8s.grafana.com/scrape: "true"  # this is not a bool
-    k8s.grafana.com/metrics.portName: "metrics"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 11211
-      targetPort: memcached
-      protocol: TCP
-      name: memcached
-    - port: 9150
-      targetPort: metrics
-      protocol: TCP
-      name: metrics
-  selector:
-    app: memcached
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: memcached
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: memcached
+  template:
+    metadata:
+      labels:
+        app: memcached
+    spec:
+      securityContext:
+        runAsNonRoot: true
+      containers:
+        # -----------------------------------------------------
+        # Memcached
+        # -----------------------------------------------------
+        - image: "memcached:1.6-alpine"
+          imagePullPolicy: IfNotPresent
+          args: ["-m", "1024"]
+          name: memcached
+          ports:
+            - name: memcached
+              containerPort: 11211
+              protocol: TCP
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            # memcached image sets up uid/gid 11211
+            runAsUser: 11211
+            runAsGroup: 11211
+        # -----------------------------------------------------
+        # Memcached Exporter for Prometheus
+        # -----------------------------------------------------
+        - image: "quay.io/prometheus/memcached-exporter:v0.14.3"
+          imagePullPolicy: IfNotPresent
+          name: memcached-exporter
+          ports:
+            - name: metrics
+              containerPort: 9150
+              protocol: TCP
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsUser: 65534  # nobody
+            runAsGroup: 65534  # nobody
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 30
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: memcached
+  annotations:
+    k8s.grafana.com/scrape: "true"  # this is not a bool
+    k8s.grafana.com/metrics.portName: "metrics"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 11211
+      targetPort: memcached
+      protocol: TCP
+      name: memcached
+    - port: 9150
+      targetPort: metrics
+      protocol: TCP
+      name: metrics
+  selector:
+    app: memcached
diff --git a/k8s/secrets.yaml b/k8s/secrets.yaml
index 4e76a86a53..ba90af9c2a 100644
--- a/k8s/secrets.yaml
+++ b/k8s/secrets.yaml
@@ -1,83 +1,83 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: secrets-env
-type: Opaque
-stringData:
-  DATATRACKER_SERVER_MODE: "development"  # development for staging, production for production
-  DATATRACKER_ADMINS: |-
-    Robert Sparks <rjsparks@nostrum.com>
-    Ryan Cross <rcross@amsl.com>
-    Kesara Rathnayake <kesara@staff.ietf.org>
-    Jennifer Richards <jennifer@staff.ietf.org>
-    Nicolas Giard <nick@staff.ietf.org>
-  DATATRACKER_ALLOWED_HOSTS: ".ietf.org"  # newline-separated list also allowed
-  # DATATRACKER_DATATRACKER_DEBUG: "false"
-  
-  # DB access details - needs to be filled in
-  # DATATRACKER_DB_HOST: "db"
-  # DATATRACKER_DB_PORT: "5432"
-  # DATATRACKER_DB_NAME: "datatracker"
-  # DATATRACKER_DB_USER: "django"  # secret
-  # DATATRACKER_DB_PASS: "RkTkDPFnKpko"  # secret
-  # DATATRACKER_DB_CONN_MAX_AGE: "0"  # connection per request if not set, no limit if set to "None"
-  # DATATRACKER_DB_CONN_HEALTH_CHECKS: "false"
-  
-  DATATRACKER_DJANGO_SECRET_KEY: "PDwXboUq!=hPjnrtG2=ge#N$Dwy+wn@uivrugwpic8mxyPfHk"  # secret
-
-  # Set this to point testing / staging at the production statics server until we
-  # sort that out
-  # DATATRACKER_STATIC_URL: "https://static.ietf.org/dt/12.10.0/"
-  
-  # DATATRACKER_EMAIL_DEBUG: "true"
-  
-  # Outgoing email details
-  # DATATRACKER_EMAIL_HOST: "localhost"  # defaults to localhost
-  # DATATRACKER_EMAIL_PORT: "2025"  # defaults to 2025
-
-  # The value here is the default from settings.py (i.e., not actually secret)
-  DATATRACKER_NOMCOM_APP_SECRET_B64: "m9pzMezVoFNJfsvU9XSZxGnXnwup6P5ZgCQeEnROOoQ="  # secret
-
-  DATATRACKER_IANA_SYNC_PASSWORD: "this-is-the-iana-sync-password"  # secret
-  DATATRACKER_RFC_EDITOR_SYNC_PASSWORD: "this-is-the-rfc-editor-sync-password"  # secret
-  DATATRACKER_YOUTUBE_API_KEY: "this-is-the-youtube-api-key"  # secret
-  DATATRACKER_GITHUB_BACKUP_API_KEY: "this-is-the-github-backup-api-key"  # secret
-
-  # API key configuration
-  DATATRACKER_API_KEY_TYPE: "ES265"
-  # secret - value here is the default from settings.py (i.e., not actually secret)
-  DATATRACKER_API_PUBLIC_KEY_PEM_B64: |-
-    Ci0tLS0tQkVHSU4gUFVCTElDIEtFWS0tLS0tCk1Ga3dFd1lIS29aSXpqMENBUVlJS
-    29aSXpqMERBUWNEUWdBRXFWb2pzYW9mREpTY3VNSk4rdHNodW15Tk01TUUKZ2Fyel
-    ZQcWtWb3ZtRjZ5RTdJSi9kdjRGY1YrUUtDdEovck9TOGUzNlk4WkFFVll1dWtoZXM
-    weVoxdz09Ci0tLS0tRU5EIFBVQkxJQyBLRVktLS0tLQo=
-  # secret - value here is the default from settings.py (i.e., not actually secret)
-  DATATRACKER_API_PRIVATE_KEY_PEM_B64: |- 
-    Ci0tLS0tQkVHSU4gUFJJVkFURSBLRVktLS0tLQpNSUdIQWdFQU1CTUdCeXFHU000O
-    UFnRUdDQ3FHU000OUF3RUhCRzB3YXdJQkFRUWdvSTZMSmtvcEtxOFhySGk5ClFxR1
-    F2RTRBODNURllqcUx6KzhnVUxZZWNzcWhSQU5DQUFTcFdpT3hxaDhNbEp5NHdrMzY
-    yeUc2Ykkwemt3U0IKcXZOVStxUldpK1lYcklUc2duOTIvZ1Z4WDVBb0swbitzNUx4
-    N2ZwanhrQVJWaTY2U0Y2elRKblgKLS0tLS1FTkQgUFJJVkFURSBLRVktLS0tLQo=
-
-  #DATATRACKER_REGISTRATION_API_KEY: "some-key"  # secret"
-
-  # DATATRACKER_MEETECHO_API_BASE: "https://meetings.conf.meetecho.com/api/v1/"
-  DATATRACKER_MEETECHO_CLIENT_ID: "this-is-the-meetecho-client-id"  # secret
-  DATATRACKER_MEETECHO_CLIENT_SECRET: "this-is-the-meetecho-client-secret"  # secret
-
-  # DATATRACKER_MATOMO_SITE_ID: "7"  # must be present to enable Matomo
-  # DATATRACKER_MATOMO_DOMAIN_PATH: "analytics.ietf.org"
-
-  CELERY_PASSWORD: "this-is-a-secret"  # secret
-
-  # Only one of these may be set
-  # DATATRACKER_APP_API_TOKENS_JSON_B64: "e30K"  # secret
-  # DATATRACKER_APP_API_TOKENS_JSON: "{}"  # secret 
-
-  # use this to override default - one entry per line
-  # DATATRACKER_CSRF_TRUSTED_ORIGINS: |-
-  #   https://datatracker.staging.ietf.org
-
-  # Scout configuration
-  DATATRACKER_SCOUT_KEY: "this-is-the-scout-key"
+apiVersion: v1
+kind: Secret
+metadata:
+  name: secrets-env
+type: Opaque
+stringData:
+  DATATRACKER_SERVER_MODE: "development"  # development for staging, production for production
+  DATATRACKER_ADMINS: |-
+    Robert Sparks <rjsparks@nostrum.com>
+    Ryan Cross <rcross@amsl.com>
+    Kesara Rathnayake <kesara@staff.ietf.org>
+    Jennifer Richards <jennifer@staff.ietf.org>
+    Nicolas Giard <nick@staff.ietf.org>
+  DATATRACKER_ALLOWED_HOSTS: ".ietf.org"  # newline-separated list also allowed
+  # DATATRACKER_DATATRACKER_DEBUG: "false"
+  
+  # DB access details - needs to be filled in
+  # DATATRACKER_DB_HOST: "db"
+  # DATATRACKER_DB_PORT: "5432"
+  # DATATRACKER_DB_NAME: "datatracker"
+  # DATATRACKER_DB_USER: "django"  # secret
+  # DATATRACKER_DB_PASS: "RkTkDPFnKpko"  # secret
+  # DATATRACKER_DB_CONN_MAX_AGE: "0"  # connection per request if not set, no limit if set to "None"
+  # DATATRACKER_DB_CONN_HEALTH_CHECKS: "false"
+  
+  DATATRACKER_DJANGO_SECRET_KEY: "PDwXboUq!=hPjnrtG2=ge#N$Dwy+wn@uivrugwpic8mxyPfHk"  # secret
+
+  # Set this to point testing / staging at the production statics server until we
+  # sort that out
+  # DATATRACKER_STATIC_URL: "https://static.ietf.org/dt/12.10.0/"
+  
+  # DATATRACKER_EMAIL_DEBUG: "true"
+  
+  # Outgoing email details
+  # DATATRACKER_EMAIL_HOST: "localhost"  # defaults to localhost
+  # DATATRACKER_EMAIL_PORT: "2025"  # defaults to 2025
+
+  # The value here is the default from settings.py (i.e., not actually secret)
+  DATATRACKER_NOMCOM_APP_SECRET_B64: "m9pzMezVoFNJfsvU9XSZxGnXnwup6P5ZgCQeEnROOoQ="  # secret
+
+  DATATRACKER_IANA_SYNC_PASSWORD: "this-is-the-iana-sync-password"  # secret
+  DATATRACKER_RFC_EDITOR_SYNC_PASSWORD: "this-is-the-rfc-editor-sync-password"  # secret
+  DATATRACKER_YOUTUBE_API_KEY: "this-is-the-youtube-api-key"  # secret
+  DATATRACKER_GITHUB_BACKUP_API_KEY: "this-is-the-github-backup-api-key"  # secret
+
+  # API key configuration
+  DATATRACKER_API_KEY_TYPE: "ES265"
+  # secret - value here is the default from settings.py (i.e., not actually secret)
+  DATATRACKER_API_PUBLIC_KEY_PEM_B64: |-
+    Ci0tLS0tQkVHSU4gUFVCTElDIEtFWS0tLS0tCk1Ga3dFd1lIS29aSXpqMENBUVlJS
+    29aSXpqMERBUWNEUWdBRXFWb2pzYW9mREpTY3VNSk4rdHNodW15Tk01TUUKZ2Fyel
+    ZQcWtWb3ZtRjZ5RTdJSi9kdjRGY1YrUUtDdEovck9TOGUzNlk4WkFFVll1dWtoZXM
+    weVoxdz09Ci0tLS0tRU5EIFBVQkxJQyBLRVktLS0tLQo=
+  # secret - value here is the default from settings.py (i.e., not actually secret)
+  DATATRACKER_API_PRIVATE_KEY_PEM_B64: |- 
+    Ci0tLS0tQkVHSU4gUFJJVkFURSBLRVktLS0tLQpNSUdIQWdFQU1CTUdCeXFHU000O
+    UFnRUdDQ3FHU000OUF3RUhCRzB3YXdJQkFRUWdvSTZMSmtvcEtxOFhySGk5ClFxR1
+    F2RTRBODNURllqcUx6KzhnVUxZZWNzcWhSQU5DQUFTcFdpT3hxaDhNbEp5NHdrMzY
+    yeUc2Ykkwemt3U0IKcXZOVStxUldpK1lYcklUc2duOTIvZ1Z4WDVBb0swbitzNUx4
+    N2ZwanhrQVJWaTY2U0Y2elRKblgKLS0tLS1FTkQgUFJJVkFURSBLRVktLS0tLQo=
+
+  #DATATRACKER_REGISTRATION_API_KEY: "some-key"  # secret"
+
+  # DATATRACKER_MEETECHO_API_BASE: "https://meetings.conf.meetecho.com/api/v1/"
+  DATATRACKER_MEETECHO_CLIENT_ID: "this-is-the-meetecho-client-id"  # secret
+  DATATRACKER_MEETECHO_CLIENT_SECRET: "this-is-the-meetecho-client-secret"  # secret
+
+  # DATATRACKER_MATOMO_SITE_ID: "7"  # must be present to enable Matomo
+  # DATATRACKER_MATOMO_DOMAIN_PATH: "analytics.ietf.org"
+
+  CELERY_PASSWORD: "this-is-a-secret"  # secret
+
+  # Only one of these may be set
+  # DATATRACKER_APP_API_TOKENS_JSON_B64: "e30K"  # secret
+  # DATATRACKER_APP_API_TOKENS_JSON: "{}"  # secret 
+
+  # use this to override default - one entry per line
+  # DATATRACKER_CSRF_TRUSTED_ORIGINS: |-
+  #   https://datatracker.staging.ietf.org
+
+  # Scout configuration
+  DATATRACKER_SCOUT_KEY: "this-is-the-scout-key"
   DATATRACKER_SCOUT_NAME: "StagingDatatracker"
\ No newline at end of file

From d09d17c338656c7a880c203af4f721830ffbb77f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Nov 2024 12:06:09 -0400
Subject: [PATCH 171/707] chore(deps): pin django-tastypie version (#8252)

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 2e6e2714d7..5c80d5301e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,7 +21,7 @@ django-oidc-provider>=0.8.1    # 0.8 dropped Django 2 support
 django-referrer-policy>=1.0
 django-simple-history>=3.0.0
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
-django-tastypie>=0.14.5    # Version must be locked in sync with version of Django
+django-tastypie>=0.14.7,<0.15.0    # Version must be locked in sync with version of Django
 django-vite>=2.0.2,<3
 django-widget-tweaks>=1.4.12
 djlint>=1.0.0    # To auto-indent templates via "djlint --profile django --reformat"

From a9e50573753fcc7fcd86c5baba86588a1de86155 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Nov 2024 18:57:58 -0400
Subject: [PATCH 172/707] chore: crlf -> lf (#8255)

---
 .github/workflows/build-base-app.yml | 132 +++++-----
 .github/workflows/tests.yml          | 374 +++++++++++++--------------
 2 files changed, 253 insertions(+), 253 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 609b641ef9..c8f66a22b7 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -1,66 +1,66 @@
-name: Build Base App Docker Image
-
-on:
-  push:
-    branches:
-      - 'main'
-    paths:
-      - 'docker/base.Dockerfile'
-      - 'requirements.txt'
-
-  workflow_dispatch:
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      packages: write
-
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        token: ${{ secrets.GH_COMMON_TOKEN }}
-
-    - name: Set Version
-      run: |
-        printf -v CURDATE '%(%Y%m%dT%H%M)T' -1
-        echo "IMGVERSION=$CURDATE" >> $GITHUB_ENV
-
-    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
-    
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-
-    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
-      with:
-        registry: ghcr.io
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Docker Build & Push
-      uses: docker/build-push-action@v6
-      env:
-        DOCKER_BUILD_NO_SUMMARY: true
-      with:
-        context: .
-        file: docker/base.Dockerfile
-        platforms: linux/amd64,linux/arm64
-        push: true
-        tags: |
-          ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}
-          ghcr.io/ietf-tools/datatracker-app-base:latest
-
-    - name: Update version references
-      run: |
-        sed -i "1s/.*/FROM ghcr.io\/ietf-tools\/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
-        echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
-
-    - name: Commit CHANGELOG.md
-      uses: stefanzweifel/git-auto-commit-action@v5
-      with:
-        branch: main
-        commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'
-        file_pattern: dev/build/Dockerfile dev/build/TARGET_BASE
+name: Build Base App Docker Image
+
+on:
+  push:
+    branches:
+      - 'main'
+    paths:
+      - 'docker/base.Dockerfile'
+      - 'requirements.txt'
+
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.GH_COMMON_TOKEN }}
+
+    - name: Set Version
+      run: |
+        printf -v CURDATE '%(%Y%m%dT%H%M)T' -1
+        echo "IMGVERSION=$CURDATE" >> $GITHUB_ENV
+
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+    
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Docker Build & Push
+      uses: docker/build-push-action@v6
+      env:
+        DOCKER_BUILD_NO_SUMMARY: true
+      with:
+        context: .
+        file: docker/base.Dockerfile
+        platforms: linux/amd64,linux/arm64
+        push: true
+        tags: |
+          ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}
+          ghcr.io/ietf-tools/datatracker-app-base:latest
+
+    - name: Update version references
+      run: |
+        sed -i "1s/.*/FROM ghcr.io\/ietf-tools\/datatracker-app-base:${{ env.IMGVERSION }}/" dev/build/Dockerfile
+        echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
+
+    - name: Commit CHANGELOG.md
+      uses: stefanzweifel/git-auto-commit-action@v5
+      with:
+        branch: main
+        commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'
+        file_pattern: dev/build/Dockerfile dev/build/TARGET_BASE
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8eb6adc953..5457415f59 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -1,187 +1,187 @@
-name: Reusable Tests Workflow
-
-on:
-  workflow_call:
-    inputs:
-      ignoreLowerCoverage:
-        description: 'Ignore Lower Coverage'
-        default: false
-        required: true
-        type: boolean
-      skipSelenium:
-        description: 'Skip Selenium Tests'
-        default: false
-        required: false
-        type: boolean
-      targetBaseVersion:
-        description: 'Target Base Image Version'
-        default: latest
-        required: false
-        type: string
-
-jobs:
-  tests-python:
-    name: Python Tests
-    runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
-    
-    services:
-      db:
-        image: ghcr.io/ietf-tools/datatracker-db:latest
-    
-    steps:
-    - uses: actions/checkout@v4
-    
-    - name: Prepare for tests
-      run: |
-        chmod +x ./dev/tests/prepare.sh
-        sh ./dev/tests/prepare.sh
-        
-    - name: Ensure DB is ready
-      run: |
-        /usr/local/bin/wait-for db:5432 -- echo "DB ready"
-        
-    - name: Run all tests
-      shell: bash
-      run: |
-        echo "Running checks..."
-        ./ietf/manage.py check
-        ./ietf/manage.py migrate --fake-initial
-        echo "Validating migrations..."
-        if ! ( ietf/manage.py makemigrations --dry-run --check --verbosity 3 ) ; then
-          echo "Model changes without migrations found."
-          exit 1
-        fi
-        if [[ "x${{ inputs.skipSelenium }}" == "xtrue" ]]; then
-          echo "Disable selenium tests..."
-          rm /usr/bin/geckodriver
-        fi
-        echo "Running tests..."
-        if [[ "x${{ inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then
-          echo "Lower coverage failures will be ignored."
-          HOME=/root ./ietf/manage.py test -v2 --validate-html-harder --settings=settings_test --ignore-lower-coverage
-        else
-          HOME=/root ./ietf/manage.py test -v2 --validate-html-harder --settings=settings_test
-        fi
-        coverage xml
-
-    - name: Upload geckodriver.log
-      uses: actions/upload-artifact@v4
-      if: ${{ failure() }}
-      with:
-        name: geckodriverlog
-        path: geckodriver.log
-
-    - name: Upload Coverage Results to Codecov
-      uses: codecov/codecov-action@v5
-      with:
-        disable_search: true
-        files: coverage.xml
-        token: ${{ secrets.CODECOV_TOKEN }}
-        
-    - name: Convert Coverage Results
-      if: ${{ always() }}
-      run: |
-        mv latest-coverage.json coverage.json
-        
-    - name: Upload Coverage Results as Build Artifact
-      uses: actions/upload-artifact@v4
-      if: ${{ always() }}
-      with:
-        name: coverage
-        path: coverage.json
-
-  tests-playwright:
-    name: Playwright Tests
-    runs-on: macos-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        project: [chromium, firefox]
-    
-    steps:
-    - uses: actions/checkout@v4
-
-    - uses: actions/setup-node@v4
-      with:
-        node-version: '18'
-
-    - name: Run all tests
-      run: |
-        echo "Installing dependencies..."
-        yarn
-        echo "Installing Playwright..."
-        cd playwright
-        mkdir test-results
-        npm ci
-        npx playwright install --with-deps ${{ matrix.project }}
-        echo "Running tests..."
-        npx playwright test --project=${{ matrix.project }}
-        
-    - name: Upload Report
-      uses: actions/upload-artifact@v4
-      if: ${{ always() }}
-      continue-on-error: true
-      with:
-        name: playwright-results-${{ matrix.project }}
-        path: playwright/test-results/
-        if-no-files-found: ignore
-
-  tests-playwright-legacy:
-    name: Playwright Legacy Tests
-    runs-on: ubuntu-latest
-    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
-    strategy:
-      fail-fast: false
-      matrix:
-        project: [chromium, firefox]
-    
-    services:
-      db:
-        image: ghcr.io/ietf-tools/datatracker-db:latest
-    
-    steps:
-    - uses: actions/checkout@v4
-    
-    - name: Prepare for tests
-      run: |
-        chmod +x ./dev/tests/prepare.sh
-        sh ./dev/tests/prepare.sh
-        
-    - name: Ensure DB is ready
-      run: |
-        /usr/local/bin/wait-for db:5432 -- echo "DB ready"
-        
-    - name: Start Datatracker
-      run: |
-        echo "Running checks..."
-        ./ietf/manage.py check
-        ./ietf/manage.py migrate --fake-initial
-        echo "Starting datatracker..."
-        ./ietf/manage.py runserver 0.0.0.0:8000 --settings=settings_local &
-        echo "Waiting for datatracker to be ready..."
-        /usr/local/bin/wait-for localhost:8000 -- echo "Datatracker ready"
-
-    - name: Run all tests
-      env:
-        # Required to get firefox to run as root:
-        HOME: ""
-      run: |
-        echo "Installing dependencies..."
-        yarn
-        echo "Installing Playwright..."
-        cd playwright
-        mkdir test-results
-        npm ci
-        npx playwright install --with-deps ${{ matrix.project }}
-        echo "Running tests..."
-        npx playwright test --project=${{ matrix.project }} -c playwright-legacy.config.js
-        
-    - name: Upload Report
-      uses: actions/upload-artifact@v4
-      if: ${{ always() }}
-      continue-on-error: true
-      with:
-        name: playwright-legacy-results-${{ matrix.project }}
-        path: playwright/test-results/
-        if-no-files-found: ignore
+name: Reusable Tests Workflow
+
+on:
+  workflow_call:
+    inputs:
+      ignoreLowerCoverage:
+        description: 'Ignore Lower Coverage'
+        default: false
+        required: true
+        type: boolean
+      skipSelenium:
+        description: 'Skip Selenium Tests'
+        default: false
+        required: false
+        type: boolean
+      targetBaseVersion:
+        description: 'Target Base Image Version'
+        default: latest
+        required: false
+        type: string
+
+jobs:
+  tests-python:
+    name: Python Tests
+    runs-on: ubuntu-latest
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
+    
+    services:
+      db:
+        image: ghcr.io/ietf-tools/datatracker-db:latest
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Prepare for tests
+      run: |
+        chmod +x ./dev/tests/prepare.sh
+        sh ./dev/tests/prepare.sh
+        
+    - name: Ensure DB is ready
+      run: |
+        /usr/local/bin/wait-for db:5432 -- echo "DB ready"
+        
+    - name: Run all tests
+      shell: bash
+      run: |
+        echo "Running checks..."
+        ./ietf/manage.py check
+        ./ietf/manage.py migrate --fake-initial
+        echo "Validating migrations..."
+        if ! ( ietf/manage.py makemigrations --dry-run --check --verbosity 3 ) ; then
+          echo "Model changes without migrations found."
+          exit 1
+        fi
+        if [[ "x${{ inputs.skipSelenium }}" == "xtrue" ]]; then
+          echo "Disable selenium tests..."
+          rm /usr/bin/geckodriver
+        fi
+        echo "Running tests..."
+        if [[ "x${{ inputs.ignoreLowerCoverage }}" == "xtrue" ]]; then
+          echo "Lower coverage failures will be ignored."
+          HOME=/root ./ietf/manage.py test -v2 --validate-html-harder --settings=settings_test --ignore-lower-coverage
+        else
+          HOME=/root ./ietf/manage.py test -v2 --validate-html-harder --settings=settings_test
+        fi
+        coverage xml
+
+    - name: Upload geckodriver.log
+      uses: actions/upload-artifact@v4
+      if: ${{ failure() }}
+      with:
+        name: geckodriverlog
+        path: geckodriver.log
+
+    - name: Upload Coverage Results to Codecov
+      uses: codecov/codecov-action@v5
+      with:
+        disable_search: true
+        files: coverage.xml
+        token: ${{ secrets.CODECOV_TOKEN }}
+        
+    - name: Convert Coverage Results
+      if: ${{ always() }}
+      run: |
+        mv latest-coverage.json coverage.json
+        
+    - name: Upload Coverage Results as Build Artifact
+      uses: actions/upload-artifact@v4
+      if: ${{ always() }}
+      with:
+        name: coverage
+        path: coverage.json
+
+  tests-playwright:
+    name: Playwright Tests
+    runs-on: macos-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        project: [chromium, firefox]
+    
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: '18'
+
+    - name: Run all tests
+      run: |
+        echo "Installing dependencies..."
+        yarn
+        echo "Installing Playwright..."
+        cd playwright
+        mkdir test-results
+        npm ci
+        npx playwright install --with-deps ${{ matrix.project }}
+        echo "Running tests..."
+        npx playwright test --project=${{ matrix.project }}
+        
+    - name: Upload Report
+      uses: actions/upload-artifact@v4
+      if: ${{ always() }}
+      continue-on-error: true
+      with:
+        name: playwright-results-${{ matrix.project }}
+        path: playwright/test-results/
+        if-no-files-found: ignore
+
+  tests-playwright-legacy:
+    name: Playwright Legacy Tests
+    runs-on: ubuntu-latest
+    container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}
+    strategy:
+      fail-fast: false
+      matrix:
+        project: [chromium, firefox]
+    
+    services:
+      db:
+        image: ghcr.io/ietf-tools/datatracker-db:latest
+    
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Prepare for tests
+      run: |
+        chmod +x ./dev/tests/prepare.sh
+        sh ./dev/tests/prepare.sh
+        
+    - name: Ensure DB is ready
+      run: |
+        /usr/local/bin/wait-for db:5432 -- echo "DB ready"
+        
+    - name: Start Datatracker
+      run: |
+        echo "Running checks..."
+        ./ietf/manage.py check
+        ./ietf/manage.py migrate --fake-initial
+        echo "Starting datatracker..."
+        ./ietf/manage.py runserver 0.0.0.0:8000 --settings=settings_local &
+        echo "Waiting for datatracker to be ready..."
+        /usr/local/bin/wait-for localhost:8000 -- echo "Datatracker ready"
+
+    - name: Run all tests
+      env:
+        # Required to get firefox to run as root:
+        HOME: ""
+      run: |
+        echo "Installing dependencies..."
+        yarn
+        echo "Installing Playwright..."
+        cd playwright
+        mkdir test-results
+        npm ci
+        npx playwright install --with-deps ${{ matrix.project }}
+        echo "Running tests..."
+        npx playwright test --project=${{ matrix.project }} -c playwright-legacy.config.js
+        
+    - name: Upload Report
+      uses: actions/upload-artifact@v4
+      if: ${{ always() }}
+      continue-on-error: true
+      with:
+        name: playwright-legacy-results-${{ matrix.project }}
+        path: playwright/test-results/
+        if-no-files-found: ignore

From 3074be8ccf634af7690615a684dad3cc4501759c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Nov 2024 18:06:37 -0400
Subject: [PATCH 173/707] ci: tag feature branch release images

---
 .github/workflows/build.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f1044223dc..46cb150e05 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -256,6 +256,10 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
+    - name: Add feature-latest tag
+      if: ${{ startsWith(github.ref_name, 'feat/') }}
+      run: echo "FEATURE_LATEST_TAG=$(echo $GITHUB_REF_NAME | tr / -)" >> $GITHUB_ENV
+
     - name: Build Images
       uses: docker/build-push-action@v6
       env:
@@ -265,7 +269,9 @@ jobs:
         file: dev/build/Dockerfile
         platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
         push: true
-        tags: ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
+        tags: |
+          ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
+          ${{ env.FEATURE_LATEST_TAG && format('ghcr.io/ietf-tools/datatracker:{0}-latest', env.FEATURE_LATEST_TAG) || null }}
         cache-from: type=gha
         cache-to: type=gha,mode=max
 

From 394e32e022aa99e07c93823f7ad53679815a6124 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 22 Nov 2024 10:13:53 -0400
Subject: [PATCH 174/707] fix: lock session requests for new meetings (#8251)

* fix: lock session requests for new meetings

* fix: lint
---
 ietf/secr/meetings/tests.py | 4 ++++
 ietf/secr/meetings/views.py | 7 +++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/ietf/secr/meetings/tests.py b/ietf/secr/meetings/tests.py
index a241d2b5eb..08c792ce1e 100644
--- a/ietf/secr/meetings/tests.py
+++ b/ietf/secr/meetings/tests.py
@@ -82,6 +82,10 @@ def test_add_meeting(self):
             [cn.slug for cn in new_meeting.group_conflict_types.all()],
             post_data['group_conflict_types'],
         )
+        self.assertEqual(
+            new_meeting.session_request_lock_message, 
+            "Session requests for this meeting have not yet opened.",
+        )
 
     def test_add_meeting_default_conflict_types(self):
         """Add meeting should default to same conflict types as previous meeting"""
diff --git a/ietf/secr/meetings/views.py b/ietf/secr/meetings/views.py
index 8afcf5a11e..47f7b7ffa5 100644
--- a/ietf/secr/meetings/views.py
+++ b/ietf/secr/meetings/views.py
@@ -17,7 +17,7 @@
 from ietf.ietfauth.utils import role_required
 from ietf.utils.mail import send_mail
 from ietf.meeting.forms import duration_string
-from ietf.meeting.helpers import get_meeting, make_materials_directories, populate_important_dates
+from ietf.meeting.helpers import make_materials_directories, populate_important_dates
 from ietf.meeting.models import Meeting, Session, Room, TimeSlot, SchedTimeSessAssignment, Schedule, SchedulingEvent
 from ietf.meeting.utils import add_event_info_to_session_qs
 from ietf.name.models import SessionStatusName
@@ -223,9 +223,8 @@ def add(request):
             )
             meeting.schedule = schedule
 
-            # we want to carry session request lock status over from previous meeting
-            previous_meeting = get_meeting( int(meeting.number) - 1 )
-            meeting.session_request_lock_message = previous_meeting.session_request_lock_message
+            # Create meeting with session requests locked
+            meeting.session_request_lock_message = "Session requests for this meeting have not yet opened."
             meeting.save()
 
             populate_important_dates(meeting)

From 622ded5d2b4db9d4bf948af0e1d0890edaa8bb33 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 22 Nov 2024 12:38:36 -0400
Subject: [PATCH 175/707] fix: ensure csrf cookie for searches (#8260)

Needed on views that include search_form.html in their responses.
---
 ietf/doc/views_search.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 0f1937efb3..f4ad247ff0 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -56,6 +56,7 @@
 from django.utils.html import strip_tags
 from django.utils.cache import _generate_cache_key # type: ignore
 from django.utils.text import slugify
+from django.views.decorators.csrf import ensure_csrf_cookie
 from django_stubs_ext import QuerySetAny
 
 import debug                            # pyflakes:ignore
@@ -283,6 +284,7 @@ def retrieve_search_results(form, all_types=False):
     return docs
 
 
+@ensure_csrf_cookie
 def search(request):
     """Search for a draft"""
     # defaults for results / meta
@@ -335,6 +337,7 @@ def search(request):
     )
 
 
+@ensure_csrf_cookie
 def frontpage(request):
     form = SearchForm()
     return render(request, 'doc/frontpage.html', {'form':form})

From 9681d9f9786772e3b83a27661444b0c4af0b54f0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 22 Nov 2024 15:30:54 -0400
Subject: [PATCH 176/707] fix: revert POST for document search requests (#8263)

* Revert "fix: ensure csrf cookie for searches (#8260)"

This reverts commit 622ded5d2b4db9d4bf948af0e1d0890edaa8bb33.

* Revert "refactor: eliminate single-use helper (#8226)"

This reverts commit 6608c9d530b62d10c88d637f949a00fb5fea4526.

* Revert "feat: POST for document search requests (#8206)"

This reverts commit b65a37b6e8f6cfe105cd89c61c7046fff9d21523.

* test: add back test fix

* refactor: eliminate single-use helper
---
 ietf/api/serializer.py                     |   1 -
 ietf/doc/tests.py                          | 155 ++++++---------------
 ietf/doc/views_search.py                   | 120 ++++++----------
 ietf/liaisons/forms.py                     |   1 -
 ietf/liaisons/widgets.py                   |   1 -
 ietf/templates/doc/search/search_form.html |   2 -
 6 files changed, 84 insertions(+), 196 deletions(-)

diff --git a/ietf/api/serializer.py b/ietf/api/serializer.py
index ca34ea649e..27f194c5b5 100644
--- a/ietf/api/serializer.py
+++ b/ietf/api/serializer.py
@@ -146,7 +146,6 @@ def end_object(self, obj):
                                 field_value = None
                         else:
                             field_value = field
-                        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
                         if isinstance(field_value, QuerySetAny) or isinstance(field_value, list):
                             self._current[name] = dict([ (rel.pk, self.expand_related(rel, name)) for rel in field_value ])
                         else:
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index abac10a5e9..f0c8e30626 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -73,163 +73,96 @@
 
 
 class SearchTests(TestCase):
-    def test_search_handles_querystring_parameters(self):
-        """Search parameters via querystring should not actually search"""
-        url = urlreverse("ietf.doc.views_search.search")
-        r = self.client.get(url + "?name=some-document-name&oldDrafts=on")
-        # Check that we got a valid response and that the warning about query string parameters is shown.
-        self.assertContains(
-            r,
-            "Searching via the URL query string is no longer supported.",
-            status_code=200,
-        )
-        # Check that the form was filled in correctly (not an exhaustive check, but different from the
-        # form defaults)
-        pq = PyQuery(r.content)
-        self.assertEqual(
-            pq("form#search_form input#id_name").attr("value"),
-            "some-document-name",
-            "The name field should be set in the SearchForm",
-        )
-        self.assertEqual(
-            pq("form#search_form input#id_olddrafts").attr("checked"),
-            "checked",
-            "The old drafts checkbox should be selected in the SearchForm",
-        )
-        self.assertIsNone(
-            pq("form#search_form input#id_rfcs").attr("checked"),
-            "The RFCs checkbox should not be selected in the SearchForm",
-        )
-        self.assertIsNone(
-            pq("form#search_form input#id_activedrafts").attr("checked"),
-            "The active drafts checkbox should not be selected in the SearchForm",
-        )
-
     def test_search(self):
-        draft = WgDraftFactory(
-            name="draft-ietf-mars-test",
-            group=GroupFactory(acronym="mars", parent=Group.objects.get(acronym="farfut")),
-            authors=[PersonFactory()],
-            ad=PersonFactory(),
-        )
+
+        draft = WgDraftFactory(name='draft-ietf-mars-test',group=GroupFactory(acronym='mars',parent=Group.objects.get(acronym='farfut')),authors=[PersonFactory()],ad=PersonFactory())
         rfc = WgRfcFactory()
         draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="pub-req"))
-        old_draft = IndividualDraftFactory(
-            name="draft-foo-mars-test",
-            authors=[PersonFactory()],
-            title="Optimizing Martian Network Topologies",
-        )
+        old_draft = IndividualDraftFactory(name='draft-foo-mars-test',authors=[PersonFactory()],title="Optimizing Martian Network Topologies")
         old_draft.set_state(State.objects.get(used=True, type="draft", slug="expired"))
-    
-        url = urlreverse("ietf.doc.views_search.search")
-    
+
+        base_url = urlreverse('ietf.doc.views_search.search')
+
         # only show form, no search yet
-        r = self.client.get(url)
+        r = self.client.get(base_url)
         self.assertEqual(r.status_code, 200)
-    
+
         # no match
-        r = self.client.post(url, {"activedrafts": "on", "name": "thisisnotadocumentname"})
+        r = self.client.get(base_url + "?activedrafts=on&name=thisisnotadocumentname")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-    
-        r = self.client.post(url, {"rfcs": "on", "name": "xyzzy"})
+
+        r = self.client.get(base_url + "?rfcs=on&name=xyzzy")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-    
-        r = self.client.post(url, {"olddrafts": "on", "name": "bar"})
+
+        r = self.client.get(base_url + "?olddrafts=on&name=bar")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "No documents match")
-    
-        r = self.client.post(url, {"olddrafts": "on", "name": "foo"})
+
+        r = self.client.get(base_url + "?olddrafts=on&name=foo")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "draft-foo-mars-test")
-    
-        r = self.client.post(url, {"olddrafts": "on", "name": "FoO"})  # mixed case
+
+        r = self.client.get(base_url + "?olddrafts=on&name=FoO")  # mixed case
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, "draft-foo-mars-test")
-    
+
         # find by RFC
-        r = self.client.post(url, {"rfcs": "on", "name": rfc.name})
+        r = self.client.get(base_url + "?rfcs=on&name=%s" % rfc.name)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
-    
+
         # find by active/inactive
-    
+
         draft.set_state(State.objects.get(type="draft", slug="active"))
-        r = self.client.post(url, {"activedrafts": "on", "name": draft.name})
+        r = self.client.get(base_url + "?activedrafts=on&name=%s" % draft.name)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         draft.set_state(State.objects.get(type="draft", slug="expired"))
-        r = self.client.post(url, {"olddrafts": "on", "name": draft.name})
+        r = self.client.get(base_url + "?olddrafts=on&name=%s" % draft.name)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+        
         draft.set_state(State.objects.get(type="draft", slug="active"))
-    
+
         # find by title
-        r = self.client.post(url, {"activedrafts": "on", "name": draft.title.split()[0]})
+        r = self.client.get(base_url + "?activedrafts=on&name=%s" % draft.title.split()[0])
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by author
-        r = self.client.post(
-            url,
-            {
-                "activedrafts": "on",
-                "by": "author",
-                "author": draft.documentauthor_set.first().person.name_parts()[1],
-            },
-        )
+        r = self.client.get(base_url + "?activedrafts=on&by=author&author=%s" % draft.documentauthor_set.first().person.name_parts()[1])
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by group
-        r = self.client.post(
-            url,
-            {"activedrafts": "on", "by": "group", "group": draft.group.acronym},
-        )
+        r = self.client.get(base_url + "?activedrafts=on&by=group&group=%s" % draft.group.acronym)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
-        r = self.client.post(
-            url,
-            {"activedrafts": "on", "by": "group", "group": draft.group.acronym.swapcase()},
-        )
+
+        r = self.client.get(base_url + "?activedrafts=on&by=group&group=%s" % draft.group.acronym.swapcase())
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by area
-        r = self.client.post(
-            url,
-            {"activedrafts": "on", "by": "area", "area": draft.group.parent_id},
-        )
+        r = self.client.get(base_url + "?activedrafts=on&by=area&area=%s" % draft.group.parent_id)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by area
-        r = self.client.post(
-            url,
-            {"activedrafts": "on", "by": "area", "area": draft.group.parent_id},
-        )
+        r = self.client.get(base_url + "?activedrafts=on&by=area&area=%s" % draft.group.parent_id)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by AD
-        r = self.client.post(url, {"activedrafts": "on", "by": "ad", "ad": draft.ad_id})
+        r = self.client.get(base_url + "?activedrafts=on&by=ad&ad=%s" % draft.ad_id)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
-    
+
         # find by IESG state
-        r = self.client.post(
-            url,
-            {
-                "activedrafts": "on",
-                "by": "state",
-                "state": draft.get_state("draft-iesg").pk,
-                "substate": "",
-            },
-        )
+        r = self.client.get(base_url + "?activedrafts=on&by=state&state=%s&substate=" % draft.get_state("draft-iesg").pk)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, draft.title)
 
@@ -238,15 +171,15 @@ def test_search_became_rfc(self):
         rfc = WgRfcFactory()
         draft.set_state(State.objects.get(type="draft", slug="rfc"))
         draft.relateddocument_set.create(relationship_id="became_rfc", target=rfc)
-        url = urlreverse("ietf.doc.views_search.search")
+        base_url = urlreverse('ietf.doc.views_search.search')
 
         # find by RFC
-        r = self.client.post(url, {"rfcs": "on", "name": rfc.name})
+        r = self.client.get(base_url + f"?rfcs=on&name={rfc.name}")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
 
         # find by draft
-        r = self.client.post(url, {"activedrafts": "on", "rfcs": "on", "name": draft.name})
+        r = self.client.get(base_url + f"?activedrafts=on&rfcs=on&name={draft.name}")
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, rfc.title)
 
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index f4ad247ff0..9e9b5e88dd 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -33,12 +33,11 @@
 # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-
+import hashlib
+import json
 import re
 import datetime
 import copy
-import hashlib
-import json
 import operator
 
 from collections import defaultdict
@@ -46,18 +45,16 @@
 
 from django import forms
 from django.conf import settings
-from django.contrib import messages
 from django.core.cache import cache, caches
 from django.urls import reverse as urlreverse
 from django.db.models import Q
-from django.http import Http404, HttpResponseBadRequest, HttpResponse, HttpResponseRedirect
+from django.http import Http404, HttpResponseBadRequest, HttpResponse, HttpResponseRedirect, QueryDict
 from django.shortcuts import render
 from django.utils import timezone
 from django.utils.html import strip_tags
 from django.utils.cache import _generate_cache_key # type: ignore
 from django.utils.text import slugify
-from django.views.decorators.csrf import ensure_csrf_cookie
-from django_stubs_ext import QuerySetAny
+
 
 import debug                            # pyflakes:ignore
 
@@ -149,29 +146,6 @@ def clean(self):
             q['irtfstate'] = None
         return q
 
-    def cache_key_fragment(self):
-        """Hash a bound form to get a value for use in a cache key
-        
-        Raises a ValueError if the form is not valid.
-        """
-        def _serialize_value(val):
-            # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
-            if isinstance(val, QuerySetAny):
-                return [item.pk for item in val]
-            else:
-                return getattr(val, "pk", val)  # use pk if present, else value
-    
-        if not self.is_valid():
-            raise ValueError(f"SearchForm invalid: {self.errors}")
-        contents = {
-            field_name: _serialize_value(field_value)
-            for field_name, field_value in self.cleaned_data.items() 
-            if field_name != "sort" and field_value is not None
-        }
-        contents_json = json.dumps(contents, sort_keys=True)
-        return hashlib.sha512(contents_json.encode("utf-8")).hexdigest()
-
-
 def retrieve_search_results(form, all_types=False):
     """Takes a validated SearchForm and return the results."""
 
@@ -284,65 +258,51 @@ def retrieve_search_results(form, all_types=False):
     return docs
 
 
-@ensure_csrf_cookie
 def search(request):
-    """Search for a draft"""
-    # defaults for results / meta
-    results = []
-    meta = {"by": None, "searching": False}
-
-    if request.method == "POST":
-        form = SearchForm(data=request.POST)
-        if form.is_valid():
-            cache_key = f"doc:document:search:{form.cache_key_fragment()}"
-            cached_val = cache.get(cache_key)
-            if cached_val:
-                [results, meta] = cached_val
-            else:
-                results = retrieve_search_results(form)
-                results, meta = prepare_document_table(
-                    request, results, form.cleaned_data
-                )
-                cache.set(
-                    cache_key, [results, meta]
-                )  # for settings.CACHE_MIDDLEWARE_SECONDS
-                log(f"Search results computed for {form.cleaned_data}")
-            meta["searching"] = True
-    else:
-        if request.GET:
-            # backwards compatibility - fill in the form
-            get_params = request.GET.copy()
-            if "activeDrafts" in request.GET:
-                get_params["activedrafts"] = request.GET["activeDrafts"]
-            if "oldDrafts" in request.GET:
-                get_params["olddrafts"] = request.GET["oldDrafts"]
-            if "subState" in request.GET:
-                get_params["substate"] = request.GET["subState"]
-            form = SearchForm(data=get_params)
-            messages.error(
-                request,
-                (
-                    "Searching via the URL query string is no longer supported. "
-                    "The form below has been filled in with the parameters from your request. "
-                    'To execute your search, please click "Search".'
-                ),
-            )
+    def _get_cache_key(params):
+        fields = set(SearchForm.base_fields) - {'sort'}
+        kwargs = dict([(k, v) for (k, v) in list(params.items()) if k in fields])
+        key = "doc:document:search:" + hashlib.sha512(json.dumps(kwargs, sort_keys=True).encode('utf-8')).hexdigest()
+        return key
+
+    if request.GET:
+        # backwards compatibility
+        get_params = request.GET.copy()
+        if 'activeDrafts' in request.GET:
+            get_params['activedrafts'] = request.GET['activeDrafts']
+        if 'oldDrafts' in request.GET:
+            get_params['olddrafts'] = request.GET['oldDrafts']
+        if 'subState' in request.GET:
+            get_params['substate'] = request.GET['subState']
+
+        form = SearchForm(get_params)
+        if not form.is_valid():
+            return HttpResponseBadRequest("form not valid: %s" % form.errors)
+
+        cache_key = _get_cache_key(get_params)
+        cached_val = cache.get(cache_key)
+        if cached_val:
+            [results, meta] = cached_val
         else:
-            form = SearchForm()
+            results = retrieve_search_results(form)
+            results, meta = prepare_document_table(request, results, get_params)
+            cache.set(cache_key, [results, meta]) # for settings.CACHE_MIDDLEWARE_SECONDS
+            log(f"Search results computed for {get_params}")
+        meta['searching'] = True
+    else:
+        form = SearchForm()
+        results = []
+        meta = { 'by': None, 'searching': False }
+        get_params = QueryDict('')
 
-    return render(
-        request,
-        "doc/search/search.html",
-        context={"form": form, "docs": results, "meta": meta},
+    return render(request, 'doc/search/search.html', {
+        'form':form, 'docs':results, 'meta':meta, 'queryargs':get_params.urlencode() },
     )
 
-
-@ensure_csrf_cookie
 def frontpage(request):
     form = SearchForm()
     return render(request, 'doc/frontpage.html', {'form':form})
 
-
 def search_for_name(request, name):
     def find_unique(n):
         exact = Document.objects.filter(name__iexact=n).first()
diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index a75028bf79..1d91041b25 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -203,7 +203,6 @@ def get_results(self):
 class CustomModelMultipleChoiceField(ModelMultipleChoiceField):
     '''If value is a QuerySet, return it as is (for use in widget.render)'''
     def prepare_value(self, value):
-        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
         if isinstance(value, QuerySetAny):
             return value
         if (hasattr(value, '__iter__') and
diff --git a/ietf/liaisons/widgets.py b/ietf/liaisons/widgets.py
index 3d4f2d13a5..74368e83f2 100644
--- a/ietf/liaisons/widgets.py
+++ b/ietf/liaisons/widgets.py
@@ -35,7 +35,6 @@ def render(self, name, value, **kwargs):
         html = '<div id="id_%s">' % name
         html += '<span class="d-none showAttachmentsEmpty form-control widget">No files attached</span>'
         html += '<div class="attachedFiles form-control widget">'
-        # Need QuerySetAny instead of QuerySet until django-stubs 5.0.1
         if value and isinstance(value, QuerySetAny):
             for attachment in value:
                 html += '<a class="initialAttach" href="%s">%s</a>&nbsp' % (conditional_escape(attachment.document.get_href()), conditional_escape(attachment.document.title))
diff --git a/ietf/templates/doc/search/search_form.html b/ietf/templates/doc/search/search_form.html
index 6c91894c8c..d4f463ec66 100644
--- a/ietf/templates/doc/search/search_form.html
+++ b/ietf/templates/doc/search/search_form.html
@@ -4,10 +4,8 @@
 {% load widget_tweaks %}
 {% load ietf_filters %}
 <form id="search_form"
-      method="post"
       class="form-horizontal"
       action="{% url 'ietf.doc.views_search.search' %}">
-    {% csrf_token %}
     <!-- [html-validate-disable-block input-missing-label -- labelled via aria-label] -->
     <div class="input-group search_field">
         {{ form.name|add_class:"form-control"|attr:"placeholder:Document name/title/RFC number"|attr:"aria-label:Document name/title/RFC number" }}

From ff5b2e12f390162796135c7b9cd17c80934fb55a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 22 Nov 2024 18:54:15 -0400
Subject: [PATCH 177/707] chore: fix is_authenticated logging (#8266)

"o" instead of "i" to check response headers
---
 ietf/utils/jsonlogger.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index c383ba310f..b02cd7af2b 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -31,4 +31,4 @@ def add_fields(self, log_record, record, message_dict):
         log_record.setdefault("cf_connecting_ip", record.args["{cf-connecting-ip}i"])
         log_record.setdefault("cf_connecting_ipv6", record.args["{cf-connecting-ipv6}i"])
         log_record.setdefault("cf_ray", record.args["{cf-ray}i"])
-        log_record.setdefault("is_authenticated", record.args["{x-datatracker-is-authenticated}i"])
+        log_record.setdefault("is_authenticated", record.args["{x-datatracker-is-authenticated}o"])

From a45f10c0ce6cbfbc6061049532056892605fa036 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Mon, 25 Nov 2024 15:42:05 +0000
Subject: [PATCH 178/707] fix: increase timeout from 5s to 15s for playwright
 status tests (#8267)

---
 playwright/tests/status/status.spec.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/playwright/tests/status/status.spec.js b/playwright/tests/status/status.spec.js
index daef7a88f1..c70617e2fd 100644
--- a/playwright/tests/status/status.spec.js
+++ b/playwright/tests/status/status.spec.js
@@ -20,7 +20,8 @@ test.describe('site status', () => {
     by: 'Exile is a cool Amiga game'
   }
 
-  test.beforeEach(({ browserName }) => {
+  test.beforeEach(({ page, browserName }) => {
+    page.setDefaultTimeout(15 * 1000) // increase default timeout
     test.skip(browserName === 'firefox', 'bypassing flaky tests on Firefox')
   })
 

From 4b5760240417cac57801b5dc7b47296f94cf9ac3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 25 Nov 2024 14:51:44 -0400
Subject: [PATCH 179/707] chore: log in-flight request lists on worker term
 (#8272)

* chore: log in-flight request lists on worker term

* style: Black

* chore: suppress empty in-flight logs

* chore: use list consistently
---
 dev/build/gunicorn.conf.py | 70 ++++++++++++++++++++++++++++++++------
 1 file changed, 59 insertions(+), 11 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 89d3dd58d3..cabbee0b1e 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -12,26 +12,25 @@
             "level": "INFO",
             "handlers": ["console"],
             "propagate": False,
-            "qualname": "gunicorn.error"
+            "qualname": "gunicorn.error",
         },
-
         "gunicorn.access": {
             "level": "INFO",
             "handlers": ["access_console"],
             "propagate": False,
-            "qualname": "gunicorn.access"
-        }
+            "qualname": "gunicorn.access",
+        },
     },
     "handlers": {
         "console": {
             "class": "logging.StreamHandler",
             "formatter": "json",
-            "stream": "ext://sys.stdout"
+            "stream": "ext://sys.stdout",
         },
         "access_console": {
             "class": "logging.StreamHandler",
             "formatter": "access_json",
-            "stream": "ext://sys.stdout"
+            "stream": "ext://sys.stdout",
         },
     },
     "formatters": {
@@ -44,14 +43,29 @@
             "class": "ietf.utils.jsonlogger.GunicornRequestJsonFormatter",
             "style": "{",
             "format": "{asctime}{levelname}{message}{name}{process}",
-        }
-    }
+        },
+    },
 }
 
-def pre_request(worker, req):
+# Track in-flight requests and emit a list of what was happeningwhen a worker is terminated.
+# For the default sync worker, there will only be one request per PID, but allow for the
+# possibility of multiple requests in case we switch to a different worker class.
+#
+# This dict is only visible within a single worker, but key by pid to guarantee no conflicts.
+#
+# Use a list rather than a set to allow for the possibility of overlapping identical requests.
+in_flight_by_pid: dict[str, list[str]] = {}  # pid -> list of in-flight requests
+
+
+def _describe_request(req):
+    """Generate a consistent description of a request
+
+    The return value is used identify in-flight requests, so it must not vary between the
+    start and end of handling a request. E.g., do not include a timestamp.
+    """
     client_ip = "-"
     cf_ray = "-"
-    for (header, value) in req.headers:
+    for header, value in req.headers:
         header = header.lower()
         if header == "cf-connecting-ip":
             client_ip = value
@@ -61,4 +75,38 @@ def pre_request(worker, req):
         path = f"{req.path}?{req.query}"
     else:
         path = req.path
-    worker.log.info(f"gunicorn starting to process {req.method} {path} (client_ip={client_ip}, cf_ray={cf_ray})")
+    return f"{req.method} {path} (client_ip={client_ip}, cf_ray={cf_ray})"
+
+
+def pre_request(worker, req):
+    """Log the start of a request and add it to the in-flight list"""
+    request_description = _describe_request(req)
+    worker.log.info(f"gunicorn starting to process {request_description}")
+    in_flight = in_flight_by_pid.setdefault(worker.pid, [])
+    in_flight.append(request_description)
+
+
+def worker_abort(worker):
+    """Emit an error log if any requests were in-flight"""
+    in_flight = in_flight_by_pid.get(worker.pid, [])
+    if len(in_flight) > 0:
+        worker.log.error(
+            f"Aborted worker {worker.pid} with in-flight requests: {', '.join(in_flight)}"
+        )
+
+
+def worker_int(worker):
+    """Emit an error log if any requests were in-flight"""
+    in_flight = in_flight_by_pid.get(worker.pid, [])
+    if len(in_flight) > 0:
+        worker.log.error(
+            f"Interrupted worker {worker.pid} with in-flight requests: {', '.join(in_flight)}"
+        )
+
+
+def post_request(worker, req, environ, resp):
+    """Remove request from in-flight list when we finish handling it"""
+    request_description = _describe_request(req)
+    in_flight = in_flight_by_pid.get(worker.pid, [])
+    if request_description in in_flight:
+        in_flight.remove(request_description)

From 5bb79bb7ca05d4660a5f21c704cb58c0e1668b37 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 26 Nov 2024 09:23:30 -0400
Subject: [PATCH 180/707] ci: fix comment in settings_local.py

---
 k8s/settings_local.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 33ac4f1e38..a63a02e536 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -82,7 +82,7 @@ def _multiline_to_list(s):
 # Set DEBUG if DATATRACKER_DEBUG env var is the word "true"
 DEBUG = os.environ.get("DATATRACKER_DEBUG", "false").lower() == "true"
 
-# DATATRACKER_ALLOWED_HOSTS env var is a comma-separated list of allowed hosts
+# DATATRACKER_ALLOWED_HOSTS env var is a newline-separated list of allowed hosts
 _allowed_hosts_str = os.environ.get("DATATRACKER_ALLOWED_HOSTS", None)
 if _allowed_hosts_str is not None:
     ALLOWED_HOSTS = _multiline_to_list(_allowed_hosts_str)

From 35e3433c2a75fa6452161dd8028df943b3e8167b Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 26 Nov 2024 19:15:50 -0600
Subject: [PATCH 181/707] fix: use lxml 5 (#8279)

---
 requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 5c80d5301e..91647729be 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -39,7 +39,8 @@ jsonfield>=3.1.0    # for SubmissionCheck.  This is https://github.com/bradjaspe
 jsonschema[format]>=4.2.1
 jwcrypto>=1.2    # for signed notifications - this is aspirational, and is not really used.
 logging_tree>=1.9    # Used only by the showloggers management command
-lxml>=4.8.0,<5
+lxml>=5.3.0    # lxml[html_clean] fails on some architectures
+lxml_html_clean>=0.4.1
 markdown>=3.3.6
 types-markdown>=3.3.6
 mock>=4.0.3    # Used only by tests, of course

From 15f3ebd2d5092a91e2feb6673212744384325b8b Mon Sep 17 00:00:00 2001
From: rjsparks <rjsparks@users.noreply.github.com>
Date: Wed, 27 Nov 2024 01:27:15 +0000
Subject: [PATCH 182/707] ci: update base image target version to 20241127T0116

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index c9f91163ce..ef77fef58f 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241114T1954
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241127T0116
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 7bbb32355d..6420933c22 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241114T1954
+20241127T0116

From c18900a8e693e5704ae6a0336dba25388ced5896 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Wed, 27 Nov 2024 14:20:24 +1100
Subject: [PATCH 183/707] feat: Expose important library versions (#7713)

* feat: Expose important library versions

Update `/api/version` to include

```
"other": {
    "xml2rfc": "<version>",
    "weasyprint": "<version>"
},
```

Fixes #3415

* fix: Use importlib

* chore: Reomve additional newline

* fix: Expose libraries that are important for document submission

* fix: Rename IMPORTANT_LIBRARIES as ADVERTISE_VERSIONS
---
 ietf/api/tests.py | 2 ++
 ietf/api/views.py | 8 ++++++++
 ietf/settings.py  | 2 ++
 3 files changed, 12 insertions(+)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 7dc9c42cc8..a8d6ac4e57 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -936,6 +936,8 @@ def test_api_version(self):
         r = self.client.get(url)
         data = r.json()
         self.assertEqual(data['version'], ietf.__version__+ietf.__patch__)
+        for lib in settings.ADVERTISE_VERSIONS:
+            self.assertIn(lib, data['other'])
         self.assertEqual(data['dumptime'], "2022-08-31 07:10:01 +0000")
         DumpInfo.objects.update(tz='PST8PDT')
         r = self.client.get(url)
diff --git a/ietf/api/views.py b/ietf/api/views.py
index df67cffd56..3e56757528 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -23,6 +23,7 @@
 from django.views.decorators.gzip import gzip_page
 from django.views.generic.detail import DetailView
 from email.message import EmailMessage
+from importlib.metadata import version as metadata_version
 from jwcrypto.jwk import JWK
 from tastypie.exceptions import BadRequest
 from tastypie.serializers import Serializer
@@ -240,9 +241,16 @@ def version(request):
         if dumpinfo.tz != "UTC":
             dumpdate = pytz.timezone(dumpinfo.tz).localize(dumpinfo.date.replace(tzinfo=None))
     dumptime = dumpdate.strftime('%Y-%m-%d %H:%M:%S %z') if dumpinfo else None
+
+    # important libraries
+    __version_extra__ = {}
+    for lib in settings.ADVERTISE_VERSIONS:
+        __version_extra__[lib] = metadata_version(lib)
+
     return HttpResponse(
             json.dumps({
                         'version': ietf.__version__+ietf.__patch__,
+                        'other': __version_extra__,
                         'dumptime': dumptime,
                     }),
                 content_type='application/json',
diff --git a/ietf/settings.py b/ietf/settings.py
index 30f4b367c6..368f61c6e6 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1273,6 +1273,8 @@ def skip_unreadable_post(record):
 
 PUBLISH_IPR_STATES = ['posted', 'removed', 'removed_objfalse']
 
+ADVERTISE_VERSIONS = ["markdown", "pyang", "rfc2html", "xml2rfc"]
+
 # We provide a secret key only for test and development modes.  It's
 # absolutely vital that django fails to start in production mode unless a
 # secret key has been provided elsewhere, not in this file which is

From c58490bb36ed6c548e064ce3ab4e7c42fd48f0a5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 27 Nov 2024 16:54:28 -0400
Subject: [PATCH 184/707] feat: django-rest-framework + Person/Email API
 (#8256)

* feat: django-rest-framework + Person/Email API (#8233)

* chore: djangorestframework -> requirements.txt

* chore: auth/perm/schema classes for drf

* chore: settings for drf and friends

* chore: comment that api/serializer.py is not DRF

* feat: URL router for DRF

* feat: simple api/v3/person/{id} endpoint

* fix: actually working demo endpoint

* chore: no auth for PersonViewSet

* ci: params in ci-run-tests.yml

* Revert "ci: params in ci-run-tests.yml"

This reverts commit 03808ddf94afe42b7382ddd3730959987389612b.

* feat: email addresses for person API

* feat: email update api (WIP)

* fix: working Email API endpoint

* chore: annotate address format in api schema

* chore: api adjustments

* feat: expose SpectacularAPIView

At least for now...

* chore: better schema_path_prefix

* feat: permissions for DRF API

* refactor: use permissions classes

* refactor: extract NewEmailForm validation for reuse

* refactor: ietfauth.validators module

* refactor: send new email conf req via helper

* feat: API call to issue new address request

* chore: move datatracker DRF api to /api/core/

* fix: unused import

* fix: lint

* test: drf URL names + API tests (#8248)

* refactor: better drf URL naming

* test: test person-detail view

* test: permissions

* test: add_email tests + stubs

* test: test email update

* test: test 404 vs 403

* fix: fix permissions

* test: test email partial update

* test: assert we have a nonexistent PK

* chore: disable DRF api for now

* chore: fix git inanity

* fix: lint

* test: disable tests of disabled code

* test: more lint
---
 ietf/api/apps.py            |   4 +
 ietf/api/authentication.py  |  19 +++
 ietf/api/permissions.py     |  39 +++++
 ietf/api/routers.py         |  16 ++
 ietf/api/schema.py          |  20 +++
 ietf/api/serializer.py      |   5 +-
 ietf/api/tests_core.py      | 289 ++++++++++++++++++++++++++++++++++++
 ietf/api/urls.py            |  14 +-
 ietf/ietfauth/forms.py      |  27 +---
 ietf/ietfauth/utils.py      |  49 +++++-
 ietf/ietfauth/validators.py |  34 +++++
 ietf/ietfauth/views.py      |  27 +---
 ietf/person/api.py          |  45 ++++++
 ietf/person/serializers.py  |  39 +++++
 ietf/settings.py            |  73 +++++++++
 requirements.txt            |   3 +
 16 files changed, 650 insertions(+), 53 deletions(-)
 create mode 100644 ietf/api/authentication.py
 create mode 100644 ietf/api/permissions.py
 create mode 100644 ietf/api/routers.py
 create mode 100644 ietf/api/schema.py
 create mode 100644 ietf/api/tests_core.py
 create mode 100644 ietf/ietfauth/validators.py
 create mode 100644 ietf/person/api.py
 create mode 100644 ietf/person/serializers.py

diff --git a/ietf/api/apps.py b/ietf/api/apps.py
index 7eca094a62..4549e0d7f2 100644
--- a/ietf/api/apps.py
+++ b/ietf/api/apps.py
@@ -12,4 +12,8 @@ def ready(self):
         interact with the database. See        
         https://docs.djangoproject.com/en/4.2/ref/applications/#django.apps.AppConfig.ready
         """
+        # Populate our API list now that the app registry is set up
         populate_api_list()
+
+        # Import drf-spectacular extensions 
+        import ietf.api.schema  # pyflakes: ignore
diff --git a/ietf/api/authentication.py b/ietf/api/authentication.py
new file mode 100644
index 0000000000..dfab0d72b8
--- /dev/null
+++ b/ietf/api/authentication.py
@@ -0,0 +1,19 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+#
+from rest_framework import authentication
+from django.contrib.auth.models import AnonymousUser
+
+
+class ApiKeyAuthentication(authentication.BaseAuthentication):
+    """API-Key header authentication"""
+
+    def authenticate(self, request):
+        """Extract the authentication token, if present
+        
+        This does not validate the token, it just arranges for it to be available in request.auth.
+        It's up to a Permissions class to validate it for the appropriate endpoint.
+        """
+        token = request.META.get("HTTP_X_API_KEY", None)
+        if token is None:
+            return None
+        return AnonymousUser(), token  # available as request.user and request.auth
diff --git a/ietf/api/permissions.py b/ietf/api/permissions.py
new file mode 100644
index 0000000000..8f7fdd026f
--- /dev/null
+++ b/ietf/api/permissions.py
@@ -0,0 +1,39 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+#
+from rest_framework import permissions
+from ietf.api.ietf_utils import is_valid_token
+
+
+class HasApiKey(permissions.BasePermission):
+    """Permissions class that validates a token using is_valid_token
+    
+    The view class must indicate the relevant endpoint by setting `api_key_endpoint`.
+    Must be used with an Authentication class that puts a token in request.auth.
+    """
+    def has_permission(self, request, view):
+        endpoint = getattr(view, "api_key_endpoint", None)
+        auth_token = getattr(request, "auth", None)
+        if endpoint is not None and auth_token is not None:
+            return is_valid_token(endpoint, auth_token)
+        return False
+
+
+class IsOwnPerson(permissions.BasePermission):
+    """Permission to access own Person object"""
+    def has_object_permission(self, request, view, obj):
+        if not (request.user.is_authenticated and hasattr(request.user, "person")):
+            return False
+        return obj == request.user.person
+
+
+class BelongsToOwnPerson(permissions.BasePermission):
+    """Permission to access objects associated with own Person
+    
+    Requires that the object have a "person" field that indicates ownership.
+    """
+    def has_object_permission(self, request, view, obj):
+        if not (request.user.is_authenticated and hasattr(request.user, "person")):
+            return False
+        return (
+            hasattr(obj, "person") and obj.person == request.user.person
+        )
diff --git a/ietf/api/routers.py b/ietf/api/routers.py
new file mode 100644
index 0000000000..745ddaa811
--- /dev/null
+++ b/ietf/api/routers.py
@@ -0,0 +1,16 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""Custom django-rest-framework routers"""
+from django.core.exceptions import ImproperlyConfigured
+from rest_framework import routers
+
+class PrefixedSimpleRouter(routers.SimpleRouter):
+    """SimpleRouter that adds a dot-separated prefix to its basename"""
+    def __init__(self, name_prefix="", *args, **kwargs):
+        self.name_prefix = name_prefix
+        if len(self.name_prefix) == 0 or self.name_prefix[-1] == ".":
+            raise ImproperlyConfigured("Cannot use a name_prefix that is empty or ends with '.'")
+        super().__init__(*args, **kwargs)
+
+    def get_default_basename(self, viewset):
+        basename = super().get_default_basename(viewset)
+        return f"{self.name_prefix}.{basename}"
diff --git a/ietf/api/schema.py b/ietf/api/schema.py
new file mode 100644
index 0000000000..7340149685
--- /dev/null
+++ b/ietf/api/schema.py
@@ -0,0 +1,20 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+#
+from drf_spectacular.extensions import OpenApiAuthenticationExtension
+
+
+class ApiKeyAuthenticationScheme(OpenApiAuthenticationExtension):
+    """Authentication scheme extension for the ApiKeyAuthentication
+
+    Used by drf-spectacular when rendering the OpenAPI schema
+    """
+    target_class = "ietf.api.authentication.ApiKeyAuthentication"
+    name = "apiKeyAuth"
+
+    def get_security_definition(self, auto_schema):
+        return {
+            "type": "apiKey",
+            "description": "Shared secret in the X-Api-Key header",
+            "name": "X-Api-Key",
+            "in": "header",
+        }
diff --git a/ietf/api/serializer.py b/ietf/api/serializer.py
index 27f194c5b5..d5bca430e0 100644
--- a/ietf/api/serializer.py
+++ b/ietf/api/serializer.py
@@ -1,6 +1,9 @@
-# Copyright The IETF Trust 2018-2020, All Rights Reserved
+# Copyright The IETF Trust 2018-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
+"""Serialization utilities
 
+This is _not_ for django-rest-framework!
+"""
 
 import hashlib
 import json
diff --git a/ietf/api/tests_core.py b/ietf/api/tests_core.py
new file mode 100644
index 0000000000..7e45deac8a
--- /dev/null
+++ b/ietf/api/tests_core.py
@@ -0,0 +1,289 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""Core API tests"""
+from unittest.mock import patch
+# from unittest.mock import patch, call
+
+from django.urls import reverse as urlreverse, NoReverseMatch
+from rest_framework.test import APIClient
+
+# from ietf.person.factories import PersonFactory, EmailFactory
+# from ietf.person.models import Person
+from ietf.utils.test_utils import TestCase
+
+
+class CoreApiTestCase(TestCase):
+    client_class = APIClient
+
+
+class PersonTests(CoreApiTestCase):
+    # Tests disabled until we activate the DRF URLs in api/urls.py
+    
+    def test_person_detail(self):
+        with self.assertRaises(NoReverseMatch, msg="Re-enable test when this view is enabled"):
+            urlreverse("ietf.api.core_api.person-detail", kwargs={"pk": 1})
+
+        # person = PersonFactory()
+        # other_person = PersonFactory()
+        # url = urlreverse("ietf.api.core_api.person-detail", kwargs={"pk": person.pk})
+        # bad_pk = person.pk + 10000
+        # if Person.objects.filter(pk=bad_pk).exists():
+        #     bad_pk += 10000  # if this doesn't get us clear, something is wrong...
+        #     self.assertFalse(
+        #         Person.objects.filter(pk=bad_pk).exists(),
+        #         "Failed to find a non-existent person pk",
+        #     )
+        # bad_url = urlreverse("ietf.api.core_api.person-detail", kwargs={"pk": bad_pk})
+        # r = self.client.get(bad_url, format="json")
+        # self.assertEqual(r.status_code, 403, "Must be logged in preferred to 404")
+        # r = self.client.get(url, format="json")
+        # self.assertEqual(r.status_code, 403, "Must be logged in")
+        # self.client.login(
+        #     username=other_person.user.username,
+        #     password=other_person.user.username + "+password",
+        # )
+        # r = self.client.get(bad_url, format="json")
+        # self.assertEqual(r.status_code, 404)
+        # r = self.client.get(url, format="json")
+        # self.assertEqual(r.status_code, 403, "Can only retrieve self")
+        # self.client.login(
+        #     username=person.user.username, password=person.user.username + "+password"
+        # )
+        # r = self.client.get(url, format="json")
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(
+        #     r.data,
+        #     {
+        #         "id": person.pk,
+        #         "name": person.name,
+        #         "emails": [
+        #             {
+        #                 "person": person.pk,
+        #                 "address": email.address,
+        #                 "primary": email.primary,
+        #                 "active": email.active,
+        #                 "origin": email.origin,
+        #             }
+        #             for email in person.email_set.all()
+        #         ],
+        #     },
+        # )
+
+    @patch("ietf.person.api.send_new_email_confirmation_request")
+    def test_add_email(self, send_confirmation_mock):
+        with self.assertRaises(NoReverseMatch, msg="Re-enable this test when this view is enabled"):
+            urlreverse("ietf.api.core_api.person-email", kwargs={"pk": 1})
+            
+        # email = EmailFactory(address="old@example.org")
+        # person = email.person
+        # other_person = PersonFactory()
+        # url = urlreverse("ietf.api.core_api.person-email", kwargs={"pk": person.pk})
+        # post_data = {"address": "new@example.org"}
+        # 
+        # r = self.client.post(url, data=post_data, format="json")
+        # self.assertEqual(r.status_code, 403, "Must be logged in")
+        # self.assertFalse(send_confirmation_mock.called)
+        # 
+        # self.client.login(
+        #     username=other_person.user.username,
+        #     password=other_person.user.username + "+password",
+        # )
+        # r = self.client.post(url, data=post_data, format="json")
+        # self.assertEqual(r.status_code, 403, "Can only retrieve self")
+        # self.assertFalse(send_confirmation_mock.called)
+        # 
+        # self.client.login(
+        #     username=person.user.username, password=person.user.username + "+password"
+        # )
+        # r = self.client.post(url, data=post_data, format="json")
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(r.data, {"address": "new@example.org"})
+        # self.assertTrue(send_confirmation_mock.called)
+        # self.assertEqual(
+        #     send_confirmation_mock.call_args, call(person, "new@example.org")
+        # )
+
+
+class EmailTests(CoreApiTestCase):
+    def test_email_update(self):
+        with self.assertRaises(NoReverseMatch, msg="Re-enable this test when the view is enabled"):
+            urlreverse(
+                "ietf.api.core_api.email-detail", kwargs={"pk": "original@example.org"}
+            )
+
+        # email = EmailFactory(
+        #     address="original@example.org", primary=False, active=True, origin="factory"
+        # )
+        # person = email.person
+        # other_person = PersonFactory()
+        # url = urlreverse(
+        #     "ietf.api.core_api.email-detail", kwargs={"pk": "original@example.org"}
+        # )
+        # bad_url = urlreverse(
+        #     "ietf.api.core_api.email-detail",
+        #     kwargs={"pk": "not-original@example.org"},
+        # )
+        # 
+        # r = self.client.put(
+        #     bad_url, data={"primary": True, "active": False}, format="json"
+        # )
+        # self.assertEqual(r.status_code, 403, "Must be logged in preferred to 404")
+        # r = self.client.put(url, data={"primary": True, "active": False}, format="json")
+        # self.assertEqual(r.status_code, 403, "Must be logged in")
+        # 
+        # self.client.login(
+        #     username=other_person.user.username,
+        #     password=other_person.user.username + "+password",
+        # )
+        # r = self.client.put(
+        #     bad_url, data={"primary": True, "active": False}, format="json"
+        # )
+        # self.assertEqual(r.status_code, 404, "No such address")
+        # r = self.client.put(url, data={"primary": True, "active": False}, format="json")
+        # self.assertEqual(r.status_code, 403, "Can only access own addresses")
+        # 
+        # self.client.login(
+        #     username=person.user.username, password=person.user.username + "+password"
+        # )
+        # r = self.client.put(url, data={"primary": True, "active": False}, format="json")
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(
+        #     r.data,
+        #     {
+        #         "person": person.pk,
+        #         "address": "original@example.org",
+        #         "primary": True,
+        #         "active": False,
+        #         "origin": "factory",
+        #     },
+        # )
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertFalse(email.active)
+        # self.assertEqual(email.origin, "factory")
+        # 
+        # # address / origin should be immutable
+        # r = self.client.put(
+        #     url,
+        #     data={
+        #         "address": "modified@example.org",
+        #         "primary": True,
+        #         "active": False,
+        #         "origin": "hacker",
+        #     },
+        #     format="json",
+        # )
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(
+        #     r.data,
+        #     {
+        #         "person": person.pk,
+        #         "address": "original@example.org",
+        #         "primary": True,
+        #         "active": False,
+        #         "origin": "factory",
+        #     },
+        # )
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertFalse(email.active)
+        # self.assertEqual(email.origin, "factory")
+
+    def test_email_partial_update(self):
+        with self.assertRaises(NoReverseMatch, msg="Re-enable this test when the view is enabled"):
+            urlreverse(
+                "ietf.api.core_api.email-detail", kwargs={"pk": "original@example.org"}
+            )
+
+        # email = EmailFactory(
+        #     address="original@example.org", primary=False, active=True, origin="factory"
+        # )
+        # person = email.person
+        # other_person = PersonFactory()
+        # url = urlreverse(
+        #     "ietf.api.core_api.email-detail", kwargs={"pk": "original@example.org"}
+        # )
+        # bad_url = urlreverse(
+        #     "ietf.api.core_api.email-detail",
+        #     kwargs={"pk": "not-original@example.org"},
+        # )
+        # 
+        # r = self.client.patch(
+        #     bad_url, data={"primary": True}, format="json"
+        # )
+        # self.assertEqual(r.status_code, 403, "Must be logged in preferred to 404")
+        # r = self.client.patch(url, data={"primary": True}, format="json")
+        # self.assertEqual(r.status_code, 403, "Must be logged in")
+        # 
+        # self.client.login(
+        #     username=other_person.user.username,
+        #     password=other_person.user.username + "+password",
+        # )
+        # r = self.client.patch(
+        #     bad_url, data={"primary": True}, format="json"
+        # )
+        # self.assertEqual(r.status_code, 404, "No such address")
+        # r = self.client.patch(url, data={"primary": True}, format="json")
+        # self.assertEqual(r.status_code, 403, "Can only access own addresses")
+        # 
+        # self.client.login(
+        #     username=person.user.username, password=person.user.username + "+password"
+        # )
+        # r = self.client.patch(url, data={"primary": True}, format="json")
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(
+        #     r.data,
+        #     {
+        #         "person": person.pk,
+        #         "address": "original@example.org",
+        #         "primary": True,
+        #         "active": True,
+        #         "origin": "factory",
+        #     },
+        # )
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertTrue(email.active)
+        # self.assertEqual(email.origin, "factory")
+        # 
+        # r = self.client.patch(url, data={"active": False}, format="json")
+        # self.assertEqual(r.status_code, 200)
+        # self.assertEqual(
+        #     r.data,
+        #     {
+        #         "person": person.pk,
+        #         "address": "original@example.org",
+        #         "primary": True,
+        #         "active": False,
+        #         "origin": "factory",
+        #     },
+        # )
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertFalse(email.active)
+        # self.assertEqual(email.origin, "factory")
+        # 
+        # r = self.client.patch(url, data={"address": "modified@example.org"}, format="json")
+        # self.assertEqual(r.status_code, 200)  # extra fields allowed, but ignored
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertFalse(email.active)
+        # self.assertEqual(email.origin, "factory")
+        # 
+        # r = self.client.patch(url, data={"origin": "hacker"}, format="json")
+        # self.assertEqual(r.status_code, 200)  # extra fields allowed, but ignored
+        # email.refresh_from_db()
+        # self.assertEqual(email.person, person)
+        # self.assertEqual(email.address, "original@example.org")
+        # self.assertTrue(email.primary)
+        # self.assertFalse(email.active)
+        # self.assertEqual(email.origin, "factory")
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 6846e32747..a9aaaf5805 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -5,12 +5,21 @@
 from django.views.generic import TemplateView
 
 from ietf import api
-from ietf.api import views as api_views
 from ietf.doc import views_ballot
 from ietf.meeting import views as meeting_views
 from ietf.submit import views as submit_views
 from ietf.utils.urls import url
 
+from . import views as api_views
+
+# DRF API routing - disabled until we plan to use it
+# from drf_spectacular.views import SpectacularAPIView
+# from django.urls import path
+# from ietf.person import api as person_api
+# from .routers import PrefixedSimpleRouter 
+# core_router = PrefixedSimpleRouter(name_prefix="ietf.api.core_api")  # core api router
+# core_router.register("email", person_api.EmailViewSet)
+# core_router.register("person", person_api.PersonViewSet)
 
 api.autodiscover()
 
@@ -21,6 +30,9 @@
     url(r'^v1/?$', api_views.top_level),
     # For mailarchive use, requires secretariat role
     url(r'^v2/person/person', api_views.ApiV2PersonExportView.as_view()),
+    # --- DRF API ---
+    # path("core/", include(core_router.urls)),
+    # path("schema/", SpectacularAPIView.as_view()),
     #
     # --- Custom API endpoints, sorted alphabetically ---
     # Email alias information for drafts
diff --git a/ietf/ietfauth/forms.py b/ietf/ietfauth/forms.py
index 9b8ee22e0b..a70f7b6ca1 100644
--- a/ietf/ietfauth/forms.py
+++ b/ietf/ietfauth/forms.py
@@ -6,17 +6,15 @@
 from unidecode import unidecode
 
 from django import forms
-from django.conf import settings
 from django.core.exceptions import ValidationError
 from django.db import models
 from django.contrib.auth.models import User
 
-import debug                            # pyflakes:ignore
-
 from ietf.person.models import Person, Email
 from ietf.mailinglists.models import Allowlisted
 from ietf.utils.text import isascii
 
+from .validators import prevent_at_symbol, prevent_system_name, prevent_anonymous_name, is_allowed_address
 from .widgets import PasswordStrengthInput, PasswordConfirmationInput
 
 
@@ -53,19 +51,6 @@ def ascii_cleaner(supposedly_ascii):
         raise forms.ValidationError("Only unaccented Latin characters are allowed.")
     return supposedly_ascii
 
-def prevent_at_symbol(name):
-    if "@" in name:
-        raise forms.ValidationError("Please fill in name - this looks like an email address (@ is not allowed in names).")
-
-def prevent_system_name(name):
-    name_without_spaces = name.replace(" ", "").replace("\t", "")
-    if "(system)" in name_without_spaces.lower():
-        raise forms.ValidationError("Please pick another name - this name is reserved.")
-
-def prevent_anonymous_name(name):
-    name_without_spaces = name.replace(" ", "").replace("\t", "")
-    if "anonymous" in name_without_spaces.lower():
-        raise forms.ValidationError("Please pick another name - this name is reserved.")
 
 class PersonPasswordForm(forms.ModelForm, PasswordForm):
 
@@ -156,15 +141,7 @@ def clean(self):
 
 
 class NewEmailForm(forms.Form):
-    new_email = forms.EmailField(label="New email address", required=False)
-
-    def clean_new_email(self):
-        email = self.cleaned_data.get("new_email", "")
-        for pat in settings.EXCLUDED_PERSONAL_EMAIL_REGEX_PATTERNS:
-            if re.search(pat, email):
-                raise ValidationError("This email address is not valid in a datatracker account")
-
-        return email
+    new_email = forms.EmailField(label="New email address", required=False, validators=[is_allowed_address])
 
 
 class RoleEmailForm(forms.Form):
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index d8bd67a4e0..b4c6da14ea 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -12,6 +12,8 @@
 
 from django.conf import settings
 from django.contrib.auth import REDIRECT_FIELD_NAME
+from django.contrib.sites.models import Site
+from django.core import signing
 from django.core.exceptions import PermissionDenied
 from django.db.models import Q
 from django.http import HttpResponseRedirect
@@ -20,9 +22,10 @@
 import debug                            # pyflakes:ignore
 
 from ietf.group.models import Role, GroupFeatures
-from ietf.person.models import Person
+from ietf.person.models import Email, Person
 from ietf.person.utils import get_dots
 from ietf.doc.utils_bofreq import bofreq_editors
+from ietf.utils.mail import send_mail
 
 def user_is_person(user, person):
     """Test whether user is associated with person."""
@@ -394,3 +397,47 @@ def can_request_rfc_publication(user, doc):
         return False # See the docstring
     else:
         return False
+
+
+def send_new_email_confirmation_request(person: Person, address: str):
+    """Request confirmation of a new email address
+    
+    If the email address is already in use, sends an alert to it. If not, sends a confirmation request.
+    By design, does not indicate which was sent. This is intended to make it a bit harder to scrape addresses
+    with a mindless bot.
+    """
+    auth = signing.dumps([person.user.username, address], salt="add_email")
+    domain = Site.objects.get_current().domain
+    from_email = settings.DEFAULT_FROM_EMAIL
+
+    existing = Email.objects.filter(address=address).first()
+    if existing:
+        subject = f"Attempt to add your email address by {person.name}"
+        send_mail(
+            None,
+            address,
+            from_email,
+            subject,
+            "registration/add_email_exists_email.txt",
+            {
+                "domain": domain,
+                "email": address,
+                "person": person,
+            },
+        )
+    else:
+        subject = f"Confirm email address for {person.name}"
+        send_mail(
+            None,
+            address,
+            from_email,
+            subject,
+            "registration/add_email_email.txt",
+            {
+                "domain": domain,
+                "auth": auth,
+                "email": address,
+                "person": person,
+                "expire": settings.DAYS_TO_EXPIRE_REGISTRATION_LINK,
+            },
+        )
diff --git a/ietf/ietfauth/validators.py b/ietf/ietfauth/validators.py
new file mode 100644
index 0000000000..84684f34d5
--- /dev/null
+++ b/ietf/ietfauth/validators.py
@@ -0,0 +1,34 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+import re
+
+from django import forms
+from django.conf import settings
+from django.core.exceptions import ValidationError
+
+
+def prevent_at_symbol(name):
+    if "@" in name:
+        raise forms.ValidationError(
+            "Please fill in name - this looks like an email address (@ is not allowed in names)."
+        )
+
+
+def prevent_system_name(name):
+    name_without_spaces = name.replace(" ", "").replace("\t", "")
+    if "(system)" in name_without_spaces.lower():
+        raise forms.ValidationError("Please pick another name - this name is reserved.")
+
+
+def prevent_anonymous_name(name):
+    name_without_spaces = name.replace(" ", "").replace("\t", "")
+    if "anonymous" in name_without_spaces.lower():
+        raise forms.ValidationError("Please pick another name - this name is reserved.")
+
+
+def is_allowed_address(value):
+    """Validate that an address complies with datatracker requirements"""
+    for pat in settings.EXCLUDED_PERSONAL_EMAIL_REGEX_PATTERNS:
+        if re.search(pat, value):
+            raise ValidationError(
+                "This email address is not valid in a datatracker account"
+            )
diff --git a/ietf/ietfauth/views.py b/ietf/ietfauth/views.py
index 32bb5c92be..23f66ce824 100644
--- a/ietf/ietfauth/views.py
+++ b/ietf/ietfauth/views.py
@@ -65,7 +65,7 @@
 from ietf.ietfauth.forms import ( RegistrationForm, PasswordForm, ResetPasswordForm, TestEmailForm,
                                 ChangePasswordForm, get_person_form, RoleEmailForm,
                                 NewEmailForm, ChangeUsernameForm, PersonPasswordForm)
-from ietf.ietfauth.utils import has_role
+from ietf.ietfauth.utils import has_role, send_new_email_confirmation_request
 from ietf.name.models import ExtResourceName
 from ietf.nomcom.models import NomCom
 from ietf.person.models import Person, Email, Alias, PersonalApiKey, PERSON_API_KEY_VALUES
@@ -297,31 +297,8 @@ def profile(request):
                 to_email = f.cleaned_data["new_email"]
                 if not to_email:
                     continue
-
                 email_confirmations.append(to_email)
-
-                auth = django.core.signing.dumps([person.user.username, to_email], salt="add_email")
-
-                domain = Site.objects.get_current().domain
-                from_email = settings.DEFAULT_FROM_EMAIL
-
-                existing = Email.objects.filter(address=to_email).first()
-                if existing:
-                    subject = 'Attempt to add your email address by %s' % person.name
-                    send_mail(request, to_email, from_email, subject, 'registration/add_email_exists_email.txt', {
-                        'domain': domain,
-                        'email': to_email,
-                        'person': person,
-                    })
-                else:
-                    subject = 'Confirm email address for %s' % person.name
-                    send_mail(request, to_email, from_email, subject, 'registration/add_email_email.txt', {
-                        'domain': domain,
-                        'auth': auth,
-                        'email': to_email,
-                        'person': person,
-                        'expire': settings.DAYS_TO_EXPIRE_REGISTRATION_LINK,
-                    })
+                send_new_email_confirmation_request(person, to_email)
 
             for r in roles:
                 e = r.email_form.cleaned_data["email"]
diff --git a/ietf/person/api.py b/ietf/person/api.py
new file mode 100644
index 0000000000..960785a3d4
--- /dev/null
+++ b/ietf/person/api.py
@@ -0,0 +1,45 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""DRF API Views"""
+from rest_framework import mixins, viewsets
+from rest_framework.decorators import action
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+
+from ietf.api.permissions import BelongsToOwnPerson, IsOwnPerson
+from ietf.ietfauth.utils import send_new_email_confirmation_request
+
+from .models import Email, Person
+from .serializers import NewEmailSerializer, EmailSerializer, PersonSerializer
+
+
+class EmailViewSet(mixins.UpdateModelMixin, viewsets.GenericViewSet):
+    """Email viewset
+    
+    Only allows updating an existing email for now.
+    """
+    permission_classes = [IsAuthenticated & BelongsToOwnPerson]
+    queryset = Email.objects.all()
+    serializer_class = EmailSerializer
+    lookup_value_regex = '.+@.+'  # allow @-sign in the pk
+
+
+class PersonViewSet(mixins.RetrieveModelMixin, viewsets.GenericViewSet):
+    """Person viewset"""
+    permission_classes = [IsAuthenticated & IsOwnPerson]
+    queryset = Person.objects.all()
+    serializer_class = PersonSerializer
+
+    @action(detail=True, methods=["post"], serializer_class=NewEmailSerializer)
+    def email(self, request, pk=None):
+        """Add an email address for this Person
+        
+        Always succeeds if the email address is valid. Causes a confirmation email to be sent to the
+        requested address and completion of that handshake will actually add the email address. If the
+        address already exists, an alert will be sent instead of the confirmation email.
+        """
+        person = self.get_object()
+        serializer = self.get_serializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        # This may or may not actually send a confirmation, but doesn't reveal that to the user.
+        send_new_email_confirmation_request(person, serializer.validated_data["address"])
+        return Response(serializer.data)
diff --git a/ietf/person/serializers.py b/ietf/person/serializers.py
new file mode 100644
index 0000000000..023d77d4bc
--- /dev/null
+++ b/ietf/person/serializers.py
@@ -0,0 +1,39 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""DRF Serializers"""
+
+from rest_framework import serializers
+
+from ietf.ietfauth.validators import is_allowed_address
+
+from .models import Email, Person
+
+
+class EmailSerializer(serializers.ModelSerializer):
+    """Email serializer for read/update"""
+
+    address = serializers.EmailField(read_only=True)
+
+    class Meta:
+        model = Email
+        fields = [
+            "person",
+            "address",
+            "primary",
+            "active",
+            "origin",
+        ]
+        read_only_fields = ["person", "address", "origin"]
+
+
+class NewEmailSerializer(serializers.Serializer):
+    """Serialize a new email address request"""
+    address = serializers.EmailField(validators=[is_allowed_address])
+
+
+class PersonSerializer(serializers.ModelSerializer):
+    """Person serializer"""
+    emails = EmailSerializer(many=True, source="email_set")
+
+    class Meta:
+        model = Person
+        fields = ["id", "name", "emails"]
diff --git a/ietf/settings.py b/ietf/settings.py
index 368f61c6e6..6990037585 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -455,6 +455,9 @@ def skip_unreadable_post(record):
     'corsheaders',
     'django_markup',
     'oidc_provider',
+    'drf_spectacular',
+    'drf_standardized_errors',
+    'rest_framework',
     'simple_history',
     'tastypie',
     'widget_tweaks',
@@ -550,6 +553,76 @@ def skip_unreadable_post(record):
         '::1',
 )
 
+# django-rest-framework configuration
+REST_FRAMEWORK = {
+    "DEFAULT_AUTHENTICATION_CLASSES": [
+        "ietf.api.authentication.ApiKeyAuthentication",
+        "rest_framework.authentication.SessionAuthentication",
+    ],
+    "DEFAULT_PERMISSION_CLASSES": [
+        "ietf.api.permissions.HasApiKey",
+    ],
+    "DEFAULT_RENDERER_CLASSES": [
+        "rest_framework.renderers.JSONRenderer",
+    ],
+    "DEFAULT_PARSER_CLASSES": [
+        "rest_framework.parsers.JSONParser",
+    ],
+    "DEFAULT_SCHEMA_CLASS": "drf_standardized_errors.openapi.AutoSchema",
+    "EXCEPTION_HANDLER": "drf_standardized_errors.handler.exception_handler",
+}
+
+# DRF OpenApi schema settings
+SPECTACULAR_SETTINGS = {
+    "TITLE": "Datatracker API",
+    "DESCRIPTION": "Datatracker API",
+    "VERSION": "1.0.0",
+    "SCHEMA_PATH_PREFIX": "/api/",
+    "COMPONENT_SPLIT_REQUEST": True,
+    "COMPONENT_NO_READ_ONLY_REQUIRED": True,
+    "SERVERS": [
+        {"url": "http://localhost:8000", "description": "local dev server"},
+        {"url": "https://datatracker.ietf.org", "description": "production server"},
+    ],
+    # The following settings are needed for drf-standardized-errors
+    "ENUM_NAME_OVERRIDES": {
+        "ValidationErrorEnum": "drf_standardized_errors.openapi_serializers.ValidationErrorEnum.choices",
+        "ClientErrorEnum": "drf_standardized_errors.openapi_serializers.ClientErrorEnum.choices",
+        "ServerErrorEnum": "drf_standardized_errors.openapi_serializers.ServerErrorEnum.choices",
+        "ErrorCode401Enum": "drf_standardized_errors.openapi_serializers.ErrorCode401Enum.choices",
+        "ErrorCode403Enum": "drf_standardized_errors.openapi_serializers.ErrorCode403Enum.choices",
+        "ErrorCode404Enum": "drf_standardized_errors.openapi_serializers.ErrorCode404Enum.choices",
+        "ErrorCode405Enum": "drf_standardized_errors.openapi_serializers.ErrorCode405Enum.choices",
+        "ErrorCode406Enum": "drf_standardized_errors.openapi_serializers.ErrorCode406Enum.choices",
+        "ErrorCode415Enum": "drf_standardized_errors.openapi_serializers.ErrorCode415Enum.choices",
+        "ErrorCode429Enum": "drf_standardized_errors.openapi_serializers.ErrorCode429Enum.choices",
+        "ErrorCode500Enum": "drf_standardized_errors.openapi_serializers.ErrorCode500Enum.choices",
+    },
+    "POSTPROCESSING_HOOKS": ["drf_standardized_errors.openapi_hooks.postprocess_schema_enums"],
+}
+
+# DRF Standardized Errors settings
+DRF_STANDARDIZED_ERRORS = {
+    # enable the standardized errors when DEBUG=True for unhandled exceptions.
+    # By default, this is set to False so you're able to view the traceback in
+    # the terminal and get more information about the exception.
+    "ENABLE_IN_DEBUG_FOR_UNHANDLED_EXCEPTIONS": False,
+    # ONLY the responses that correspond to these status codes will appear
+    # in the API schema.
+    "ALLOWED_ERROR_STATUS_CODES": [
+        "400",
+        # "401",
+        # "403",
+        "404",
+        # "405",
+        # "406",
+        # "415",
+        # "429",
+        # "500",
+    ],
+
+}
+
 # no slash at end
 IDTRACKER_BASE_URL = "https://datatracker.ietf.org"
 RFCDIFF_BASE_URL = "https://author-tools.ietf.org/iddiff"
diff --git a/requirements.txt b/requirements.txt
index 91647729be..f974113d8f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24,8 +24,11 @@ django-stubs>=4.2.7,<5    # The django-stubs version used determines the the myp
 django-tastypie>=0.14.7,<0.15.0    # Version must be locked in sync with version of Django
 django-vite>=2.0.2,<3
 django-widget-tweaks>=1.4.12
+djangorestframework>=3.15,<4
 djlint>=1.0.0    # To auto-indent templates via "djlint --profile django --reformat"
 docutils>=0.18.1    # Used only by dbtemplates for RestructuredText
+drf-spectacular>=0.27
+drf-standardized-errors[openapi] >= 0.14
 types-docutils>=0.18.1
 factory-boy>=3.3
 github3.py>=3.2.0

From e5b6e330b18ad24f029266715186b4f8efc3c25d Mon Sep 17 00:00:00 2001
From: rjsparks <rjsparks@users.noreply.github.com>
Date: Wed, 27 Nov 2024 21:05:52 +0000
Subject: [PATCH 185/707] ci: update base image target version to 20241127T2054

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index ef77fef58f..7af27e7d13 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241127T0116
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241127T2054
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 6420933c22..e4b05ed700 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241127T0116
+20241127T2054

From f76137eaae3dee819d62e9592f9360d4241e7098 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 5 Dec 2024 10:31:09 -0400
Subject: [PATCH 186/707] fix: disable raw/include in RST (#8300)

* fix: disable raw/include in RST

* fix: suppress warnings
---
 ietf/settings.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ietf/settings.py b/ietf/settings.py
index 6990037585..cf8abe9f4d 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1149,11 +1149,14 @@ def skip_unreadable_post(record):
 MARKUP_SETTINGS = {
     'restructuredtext': {
         'settings_overrides': {
+            'report_level': 3,  # error (3) or severe (4) only
             'initial_header_level': 3,
             'doctitle_xform': False,
             'footnote_references': 'superscript',
             'trim_footnote_reference_space': True,
             'default_reference_context': 'view',
+            'raw_enabled': False,  # critical for security
+            'file_insertion_enabled': False,  # critical for security
             'link_base': ''
         }
     }

From b39b80fe1a3f218ed0cb25dc7bdb520a89454ebf Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 5 Dec 2024 08:46:14 -0600
Subject: [PATCH 187/707] fix: test file existence using metadata (#8292)

* fix: test file existance using metadata

* fix: use Path more

* fix: don't read the file to see if it exists

* fix: more conservative error handling

* chore: remove unused import
---
 ietf/doc/models.py | 18 ++++++++++++++----
 ietf/doc/tests.py  | 15 +++++++++++++++
 ietf/doc/utils.py  |  2 +-
 3 files changed, 30 insertions(+), 5 deletions(-)

diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 077502db11..03698c80c3 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -4,7 +4,6 @@
 
 import datetime
 import logging
-import io
 import os
 
 import django.db
@@ -530,16 +529,27 @@ def replaces(self):
     def replaced_by(self):
         return set([ r.document for r in self.related_that("replaces") ])
 
-    def text(self, size = -1):
+    def _text_path(self):
         path = self.get_file_name()
         root, ext =  os.path.splitext(path)
         txtpath = root+'.txt'
         if ext != '.txt' and os.path.exists(txtpath):
             path = txtpath
+        return path
+    
+    def text_exists(self):
+        path = Path(self._text_path())
+        return path.exists()
+
+    def text(self, size = -1):
+        path = Path(self._text_path())
+        if not path.exists():
+            return None
         try:
-            with io.open(path, 'rb') as file:
+            with path.open('rb') as file:
                 raw = file.read(size)
-        except IOError:
+        except IOError as e:
+            log.log(f"Error reading text for {path}: {e}")
             return None
         text = None
         try:
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index f0c8e30626..0630fcd8d4 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -3318,3 +3318,18 @@ def test_investigate(self):
             self.assertEqual(r.status_code, 200)
             q = PyQuery(r.content)
             self.assertEqual(len(q("#id_name_fragment.is-invalid")), 1)
+
+class LogIOErrorTests(TestCase):
+
+    def test_doc_text_io_error(self):
+
+        d = IndividualDraftFactory()
+
+        with mock.patch("ietf.doc.models.Path") as path_cls_mock:
+            with mock.patch("ietf.doc.models.log.log") as log_mock:
+                path_cls_mock.return_value.exists.return_value = True
+                path_cls_mock.return_value.open.return_value.__enter__.return_value.read.side_effect = IOError("Bad things happened")
+                text = d.text()
+                self.assertIsNone(text)
+                self.assertTrue(log_mock.called)
+                self.assertIn("Bad things happened", log_mock.call_args[0][0])
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index a30430829a..b2bc0997b1 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1081,7 +1081,7 @@ def build_file_urls(doc: Union[Document, DocHistory]):
             label = "plain text" if t == "txt" else t
             file_urls.append((label, base + doc.name + "-" + doc.rev + "." + t))
 
-        if doc.text():
+        if doc.text_exists():
             file_urls.append(("htmlized", urlreverse('ietf.doc.views_doc.document_html', kwargs=dict(name=doc.name, rev=doc.rev))))
             file_urls.append(("pdfized", urlreverse('ietf.doc.views_doc.document_pdfized', kwargs=dict(name=doc.name, rev=doc.rev))))
         file_urls.append(("bibtex", urlreverse('ietf.doc.views_doc.document_bibtex',kwargs=dict(name=doc.name,rev=doc.rev))))

From 64c5ef16bd96cd8f2cc960a0224cfa502663c7ac Mon Sep 17 00:00:00 2001
From: Greg Wood <ghwood@ietf.org>
Date: Thu, 5 Dec 2024 09:50:07 -0500
Subject: [PATCH 188/707] fix: clarify replace wording (#8244)

* Clarify "Replace" in I-D submission form

Update help text In the "Replacement Information" section of
the "Status" tab

* refactor: update node, eslint, neostandard + fix esm (#8083)

* chore: update dependencies

* fix: eslint + neostandard

* fix: add corepack prompt env var to init script

* docs: Update README.md

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* ci: update base image target version to 20241114T1703

* ci: fix tests.yml workflow

* fix: clarify "Replace" in I-D submission form #8205

update quote syntax issue on previous update help text In the "Replacement Information" section of the "Status" tab to fix #8059

* Revert "refactor: update node, eslint, neostandard + fix esm (#8083)"

This reverts commit 649879efd745470f6e0cc6768d889f45640e1505.

* Revert "ci: update base image target version to 20241114T1703"

This reverts commit f11144017ed788bc7a38a1d028127434f0d50eb4.

* Revert "ci: fix tests.yml workflow"

This reverts commit 39231321c49291565a39608b98740e098c74dda7.

* Update forms.py

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
Co-authored-by: NGPixel <NGPixel@users.noreply.github.com>
---
 ietf/submit/forms.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/submit/forms.py b/ietf/submit/forms.py
index bed87b77c2..183e081242 100644
--- a/ietf/submit/forms.py
+++ b/ietf/submit/forms.py
@@ -502,7 +502,7 @@ def clean_name(self):
         return name
 
 class ReplacesForm(forms.Form):
-    replaces = SearchableDocumentsField(required=False, help_text="Any Internet-Drafts that this document replaces (approval required for replacing an Internet-Draft you are not the author of)")
+    replaces = SearchableDocumentsField(required=False, help_text='Do not enter anything here if you are only submitting the next version of your Internet-Draft. Only enter items here if this submission is intended to replace an I-D with a different name. A typical use of this field is to note what individual I-Ds are replaced by a new -00 Working group I-D. Note that additional approval will be required to replace an I-D for which you are not an author.')
 
     def __init__(self, *args, **kwargs):
         self.name = kwargs.pop("name")

From 167752ba765e3ca740ee26b5beca268fc9a5c4aa Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 6 Dec 2024 13:17:55 -0400
Subject: [PATCH 189/707] feat: log ASN (#8309)

* feat: log ip_src_asnum in nginx

* feat: log asn from gunicorn
---
 dev/build/gunicorn.conf.py | 5 ++++-
 ietf/utils/jsonlogger.py   | 1 +
 k8s/nginx-logging.conf     | 7 +++++--
 3 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index cabbee0b1e..6666a0d37d 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -64,18 +64,21 @@ def _describe_request(req):
     start and end of handling a request. E.g., do not include a timestamp.
     """
     client_ip = "-"
+    asn = "-"
     cf_ray = "-"
     for header, value in req.headers:
         header = header.lower()
         if header == "cf-connecting-ip":
             client_ip = value
+        elif header == "x-ip-src-asnum":
+            asn = value
         elif header == "cf-ray":
             cf_ray = value
     if req.query:
         path = f"{req.path}?{req.query}"
     else:
         path = req.path
-    return f"{req.method} {path} (client_ip={client_ip}, cf_ray={cf_ray})"
+    return f"{req.method} {path} (client_ip={client_ip}, asn={asn}, cf_ray={cf_ray})"
 
 
 def pre_request(worker, req):
diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index b02cd7af2b..6502cab0cb 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -31,4 +31,5 @@ def add_fields(self, log_record, record, message_dict):
         log_record.setdefault("cf_connecting_ip", record.args["{cf-connecting-ip}i"])
         log_record.setdefault("cf_connecting_ipv6", record.args["{cf-connecting-ipv6}i"])
         log_record.setdefault("cf_ray", record.args["{cf-ray}i"])
+        log_record.setdefault("asn", record.args["{x-ip-src-asnum}i"])
         log_record.setdefault("is_authenticated", record.args["{x-datatracker-is-authenticated}o"])
diff --git a/k8s/nginx-logging.conf b/k8s/nginx-logging.conf
index 3c4ade4614..0bc7deca81 100644
--- a/k8s/nginx-logging.conf
+++ b/k8s/nginx-logging.conf
@@ -1,4 +1,6 @@
-# Define JSON log format - must be loaded before config that references it
+# Define JSON log format - must be loaded before config that references it.
+# Note that each line is fully enclosed in single quotes. Commas in arrays are
+# intentionally inside the single quotes.
 log_format  ietfjson  escape=json
   '{'
     '"time":"$${keepempty}time_iso8601",'
@@ -16,5 +18,6 @@ log_format  ietfjson  escape=json
     '"x_forwarded_proto":"$${keepempty}http_x_forwarded_proto",'
     '"cf_connecting_ip":"$${keepempty}http_cf_connecting_ip",'
     '"cf_connecting_ipv6":"$${keepempty}http_cf_connecting_ipv6",'
-    '"cf_ray":"$${keepempty}http_cf_ray"'
+    '"cf_ray":"$${keepempty}http_cf_ray",'
+    '"asn":"$${keepempty}http_x_ip_src_asnum"'
   '}';

From 3055d17eb1c8f91a2152142bfce975b6dd2e82c1 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 9 Dec 2024 10:33:03 -0600
Subject: [PATCH 190/707] fix: remove unreliable statistics (#8307)

---
 ietf/settings.py                              |   4 +-
 ietf/stats/tests.py                           | 127 +--
 ietf/stats/views.py                           | 894 +-----------------
 ietf/templates/stats/document_stats.html      |  86 --
 .../document_stats_author_affiliation.html    | 113 ---
 .../document_stats_author_citations.html      |  72 --
 .../document_stats_author_continent.html      |  69 --
 .../stats/document_stats_author_country.html  | 136 ---
 .../document_stats_author_documents.html      |  69 --
 .../stats/document_stats_author_hindex.html   |  83 --
 .../stats/document_stats_authors.html         |  68 --
 .../stats/document_stats_format.html          |  63 --
 .../stats/document_stats_formlang.html        |  63 --
 .../templates/stats/document_stats_pages.html |  62 --
 .../templates/stats/document_stats_words.html |  62 --
 .../stats/document_stats_yearly.html          |  52 -
 .../includes/number_with_details_cell.html    |  15 -
 ietf/templates/stats/index.html               |   9 +-
 ietf/templates/stats/meeting_stats.html       |  35 -
 .../stats/meeting_stats_continent.html        |  61 --
 .../stats/meeting_stats_country.html          |  97 --
 .../stats/meeting_stats_overview.html         | 160 ----
 22 files changed, 18 insertions(+), 2382 deletions(-)
 delete mode 100644 ietf/templates/stats/document_stats.html
 delete mode 100644 ietf/templates/stats/document_stats_author_affiliation.html
 delete mode 100644 ietf/templates/stats/document_stats_author_citations.html
 delete mode 100644 ietf/templates/stats/document_stats_author_continent.html
 delete mode 100644 ietf/templates/stats/document_stats_author_country.html
 delete mode 100644 ietf/templates/stats/document_stats_author_documents.html
 delete mode 100644 ietf/templates/stats/document_stats_author_hindex.html
 delete mode 100644 ietf/templates/stats/document_stats_authors.html
 delete mode 100644 ietf/templates/stats/document_stats_format.html
 delete mode 100644 ietf/templates/stats/document_stats_formlang.html
 delete mode 100644 ietf/templates/stats/document_stats_pages.html
 delete mode 100644 ietf/templates/stats/document_stats_words.html
 delete mode 100644 ietf/templates/stats/document_stats_yearly.html
 delete mode 100644 ietf/templates/stats/includes/number_with_details_cell.html
 delete mode 100644 ietf/templates/stats/meeting_stats.html
 delete mode 100644 ietf/templates/stats/meeting_stats_continent.html
 delete mode 100644 ietf/templates/stats/meeting_stats_country.html
 delete mode 100644 ietf/templates/stats/meeting_stats_overview.html

diff --git a/ietf/settings.py b/ietf/settings.py
index cf8abe9f4d..7c3dc7fa16 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -809,8 +809,8 @@ def skip_unreadable_post(record):
 SESSION_REQUEST_FROM_EMAIL = 'IETF Meeting Session Request Tool <session-request@ietf.org>' 
 
 SECRETARIAT_SUPPORT_EMAIL = "support@ietf.org"
-SECRETARIAT_ACTION_EMAIL = "ietf-action@ietf.org"
-SECRETARIAT_INFO_EMAIL = "ietf-info@ietf.org"
+SECRETARIAT_ACTION_EMAIL = SECRETARIAT_SUPPORT_EMAIL
+SECRETARIAT_INFO_EMAIL = SECRETARIAT_SUPPORT_EMAIL
 
 # Put real password in settings_local.py
 IANA_SYNC_PASSWORD = "secret"
diff --git a/ietf/stats/tests.py b/ietf/stats/tests.py
index f0e8a19c4a..47027277be 100644
--- a/ietf/stats/tests.py
+++ b/ietf/stats/tests.py
@@ -13,22 +13,16 @@
 import debug    # pyflakes:ignore
 
 from django.urls import reverse as urlreverse
-from django.utils import timezone
 
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase
 import ietf.stats.views
 
-from ietf.submit.models import Submission
-from ietf.doc.factories import WgDraftFactory, WgRfcFactory
-from ietf.doc.models import Document, State, RelatedDocument, NewRevisionDocEvent, DocumentAuthor
+
 from ietf.group.factories import RoleFactory
-from ietf.meeting.factories import MeetingFactory, AttendedFactory
+from ietf.meeting.factories import MeetingFactory
 from ietf.person.factories import PersonFactory
-from ietf.person.models import Person, Email
-from ietf.name.models import FormalLanguageName, DocRelationshipName, CountryName
 from ietf.review.factories import ReviewRequestFactory, ReviewerSettingsFactory, ReviewAssignmentFactory
-from ietf.stats.models import MeetingRegistration, CountryAlias
-from ietf.stats.factories import MeetingRegistrationFactory
+from ietf.stats.models import MeetingRegistration
 from ietf.stats.tasks import fetch_meeting_attendance_task
 from ietf.stats.utils import get_meeting_registration_data, FetchStats, fetch_attendance_from_meetings
 from ietf.utils.timezone import date_today
@@ -41,121 +35,14 @@ def test_stats_index(self):
         self.assertEqual(r.status_code, 200)
 
     def test_document_stats(self):
-        WgRfcFactory()
-        draft = WgDraftFactory()
-        DocumentAuthor.objects.create(
-            document=draft,
-            person=Person.objects.get(email__address="aread@example.org"),
-            email=Email.objects.get(address="aread@example.org"),
-            country="Germany",
-            affiliation="IETF",
-            order=1
-        )
-
-        # create some data for the statistics
-        Submission.objects.create(
-            authors=[ { "name": "Some Body", "email": "somebody@example.com", "affiliation": "Some Inc.", "country": "US" }],
-            pages=30,
-            rev=draft.rev,
-            words=4000,
-            draft=draft,
-            file_types=".txt",
-            state_id="posted",
-        )
-
-        draft.formal_languages.add(FormalLanguageName.objects.get(slug="xml"))
-        Document.objects.filter(pk=draft.pk).update(words=4000)
-        # move it back so it shows up in the yearly summaries
-        NewRevisionDocEvent.objects.filter(doc=draft, rev=draft.rev).update(
-            time=timezone.now() - datetime.timedelta(days=500))
-
-        referencing_draft = Document.objects.create(
-            name="draft-ietf-mars-referencing",
-            type_id="draft",
-            title="Referencing",
-            stream_id="ietf",
-            abstract="Test",
-            rev="00",
-            pages=2,
-            words=100
-            )
-        referencing_draft.set_state(State.objects.get(used=True, type="draft", slug="active"))
-        RelatedDocument.objects.create(
-            source=referencing_draft,
-            target=draft,
-            relationship=DocRelationshipName.objects.get(slug="refinfo")
-        )
-        NewRevisionDocEvent.objects.create(
-            type="new_revision",
-            by=Person.objects.get(name="(System)"),
-            doc=referencing_draft,
-            desc="New revision available",
-            rev=referencing_draft.rev,
-            time=timezone.now() - datetime.timedelta(days=1000)
-        )
+        r = self.client.get(urlreverse("ietf.stats.views.document_stats"))
+        self.assertRedirects(r, urlreverse("ietf.stats.views.stats_index"))
 
 
-        # check redirect
-        url = urlreverse(ietf.stats.views.document_stats)
-
-        authors_url = urlreverse(ietf.stats.views.document_stats, kwargs={ "stats_type": "authors" })
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 302)
-        self.assertTrue(authors_url in r["Location"])
-
-        # check various stats types
-        for stats_type in ["authors", "pages", "words", "format", "formlang",
-                           "author/documents", "author/affiliation", "author/country",
-                           "author/continent", "author/citations", "author/hindex",
-                           "yearly/affiliation", "yearly/country", "yearly/continent"]:
-            for document_type in ["", "rfc", "draft"]:
-                for time_choice in ["", "5y"]:
-                    url = urlreverse(ietf.stats.views.document_stats, kwargs={ "stats_type": stats_type })
-                    r = self.client.get(url, {
-                        "type": document_type,
-                        "time": time_choice,
-                    })
-                    self.assertEqual(r.status_code, 200)
-                    q = PyQuery(r.content)
-                    self.assertTrue(q('#chart'))
-                    if not stats_type.startswith("yearly"):
-                        self.assertTrue(q('table.stats-data'))
-
     def test_meeting_stats(self):
-        # create some data for the statistics
-        meeting = MeetingFactory(type_id='ietf', date=date_today(), number="96")
-        MeetingRegistrationFactory(first_name='John', last_name='Smith', country_code='US', email="john.smith@example.us", meeting=meeting, attended=True)
-        CountryAlias.objects.get_or_create(alias="US", country=CountryName.objects.get(slug="US"))
-        p = MeetingRegistrationFactory(first_name='Jaume', last_name='Guillaume', country_code='FR', email="jaume.guillaume@example.fr", meeting=meeting, attended=False).person
-        CountryAlias.objects.get_or_create(alias="FR", country=CountryName.objects.get(slug="FR"))
-        AttendedFactory(session__meeting=meeting,person=p)
-        # check redirect
-        url = urlreverse(ietf.stats.views.meeting_stats)
-
-        authors_url = urlreverse(ietf.stats.views.meeting_stats, kwargs={ "stats_type": "overview" })
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 302)
-        self.assertTrue(authors_url in r["Location"])
-
-        # check various stats types
-        for stats_type in ["overview", "country", "continent"]:
-            url = urlreverse(ietf.stats.views.meeting_stats, kwargs={ "stats_type": stats_type })
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('#chart'))
-            if stats_type == "overview":
-                self.assertTrue(q('table.stats-data'))
+        r = self.client.get(urlreverse("ietf.stats.views.meeting_stats"))
+        self.assertRedirects(r, urlreverse("ietf.stats.views.stats_index"))
 
-        for stats_type in ["country", "continent"]:
-            url = urlreverse(ietf.stats.views.meeting_stats, kwargs={ "stats_type": stats_type, "num": meeting.number })
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('#chart'))
-            self.assertTrue(q('table.stats-data'))
                 
     def test_known_country_list(self):
         # check redirect
diff --git a/ietf/stats/views.py b/ietf/stats/views.py
index ea73d9f4fc..504d84e86d 100644
--- a/ietf/stats/views.py
+++ b/ietf/stats/views.py
@@ -2,25 +2,18 @@
 # -*- coding: utf-8 -*-
 
 
-import os
 import calendar
 import datetime
-import email.utils
 import itertools
 import json
 import dateutil.relativedelta
 from collections import defaultdict
 
-from django.conf import settings
 from django.contrib.auth.decorators import login_required
-from django.core.cache import cache
-from django.db.models import Count, Q, Subquery, OuterRef
 from django.http import HttpResponseRedirect
-from django.shortcuts import get_object_or_404, render
+from django.shortcuts import render
 from django.urls import reverse as urlreverse
-from django.utils import timezone
-from django.utils.safestring import mark_safe
-from django.utils.text import slugify
+
 
 import debug                            # pyflakes:ignore
 
@@ -29,18 +22,12 @@
                                ReviewAssignmentData,
                                sum_period_review_assignment_stats,
                                sum_raw_review_assignment_aggregations)
-from ietf.submit.models import Submission
 from ietf.group.models import Role, Group
 from ietf.person.models import Person
-from ietf.name.models import ReviewResultName, CountryName, DocRelationshipName, ReviewAssignmentStateName
-from ietf.person.name import plain_name
-from ietf.doc.models import Document, RelatedDocument, State, DocEvent
-from ietf.meeting.models import Meeting
-from ietf.stats.models import MeetingRegistration, CountryAlias
-from ietf.stats.utils import get_aliased_affiliations, get_aliased_countries, compute_hirsch_index
+from ietf.name.models import ReviewResultName, CountryName, ReviewAssignmentStateName
 from ietf.ietfauth.utils import has_role
 from ietf.utils.response import permission_denied
-from ietf.utils.timezone import date_today, DEADLINE_TZINFO, RPC_TZINFO
+from ietf.utils.timezone import date_today, DEADLINE_TZINFO
 
 
 def stats_index(request):
@@ -135,632 +122,8 @@ def add_labeled_top_series_from_bins(chart_data, bins, limit):
         })
 
 def document_stats(request, stats_type=None):
-    def build_document_stats_url(stats_type_override=Ellipsis, get_overrides=None):
-        if get_overrides is None:
-            get_overrides={}
-        kwargs = {
-            "stats_type": stats_type if stats_type_override is Ellipsis else stats_type_override,
-        }
-
-        return urlreverse(document_stats, kwargs={ k: v for k, v in kwargs.items() if v is not None }) + generate_query_string(request.GET, get_overrides)
-
-    # the length limitation is to keep the key shorter than memcached's limit
-    # of 250 after django has added the key_prefix and key_version parameters
-    cache_key = ("stats:document_stats:%s:%s" % (stats_type, slugify(request.META.get('QUERY_STRING',''))))[:228]
-    data = cache.get(cache_key)
-    if not data:
-        names_limit = settings.STATS_NAMES_LIMIT
-        # statistics types
-        possible_document_stats_types = add_url_to_choices([
-            ("authors", "Number of authors"),
-            ("pages", "Pages"),
-            ("words", "Words"),
-            ("format", "Format"),
-            ("formlang", "Formal languages"),
-        ], lambda slug: build_document_stats_url(stats_type_override=slug))
-
-        possible_author_stats_types = add_url_to_choices([
-            ("author/documents", "Number of documents"),
-            ("author/affiliation", "Affiliation"),
-            ("author/country", "Country"),
-            ("author/continent", "Continent"),
-            ("author/citations", "Citations"),
-            ("author/hindex", "h-index"),
-        ], lambda slug: build_document_stats_url(stats_type_override=slug))
-
-        possible_yearly_stats_types = add_url_to_choices([
-            ("yearly/affiliation", "Affiliation"),
-            ("yearly/country", "Country"),
-            ("yearly/continent", "Continent"),
-        ], lambda slug: build_document_stats_url(stats_type_override=slug))
-
-
-        if not stats_type:
-            return HttpResponseRedirect(build_document_stats_url(stats_type_override=possible_document_stats_types[0][0]))
-
-
-        possible_document_types = add_url_to_choices([
-            ("", "All"),
-            ("rfc", "RFCs"),
-            ("draft", "Internet-Drafts"),
-        ], lambda slug: build_document_stats_url(get_overrides={ "type": slug }))
-
-        document_type = get_choice(request, "type", possible_document_types) or ""
-
-
-        possible_time_choices = add_url_to_choices([
-            ("", "All time"),
-            ("5y", "Past 5 years"),
-        ], lambda slug: build_document_stats_url(get_overrides={ "time": slug }))
-
-        time_choice = request.GET.get("time") or ""
-
-        from_time = None
-        if "y" in time_choice:
-            try:
-                y = int(time_choice.rstrip("y"))
-                from_time = timezone.now() - dateutil.relativedelta.relativedelta(years=y)
-            except ValueError:
-                pass
-
-        chart_data = []
-        table_data = []
-        stats_title = ""
-        template_name = stats_type.replace("/", "_")
-        bin_size = 1
-        alias_data = []
-        eu_countries = None
-
-
-        if any(stats_type == t[0] for t in possible_document_stats_types):
-            # filter documents
-            document_filters = Q(type__in=["draft","rfc"]) # TODO - review lots of "rfc is a draft" assumptions below
-
-            rfc_state = State.objects.get(type="rfc", slug="published")
-            if document_type == "rfc":
-                document_filters &= Q(states=rfc_state)
-            elif document_type == "draft":
-                document_filters &= ~Q(states=rfc_state)
-
-            if from_time:
-                # this is actually faster than joining in the database,
-                # despite the round-trip back and forth
-                docs_within_time_constraint = list(Document.objects.filter(
-                    type="draft",
-                    docevent__time__gte=from_time,
-                    docevent__type__in=["published_rfc", "new_revision"],
-                ).values_list("pk",flat=True))
-
-                document_filters &= Q(pk__in=docs_within_time_constraint)
-
-            document_qs = Document.objects.filter(document_filters)
-
-            if document_type == "rfc":
-                doc_label = "RFC"
-            elif document_type == "draft":
-                doc_label = "draft"
-            else:
-                doc_label = "document"
-
-            total_docs = document_qs.values_list("name").distinct().count()
-
-            if stats_type == "authors":
-                stats_title = "Number of authors for each {}".format(doc_label)
-
-                bins = defaultdict(set)
-
-                for name, author_count in document_qs.values_list("name").annotate(Count("documentauthor")).values_list("name","documentauthor__count"):
-                    bins[author_count or 0].add(name)
-
-                series_data = []
-                for author_count, names in sorted(bins.items(), key=lambda t: t[0]):
-                    percentage = len(names) * 100.0 / (total_docs or 1)
-                    series_data.append((author_count, percentage))
-                    table_data.append((author_count, percentage, len(names), list(names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "pages":
-                stats_title = "Number of pages for each {}".format(doc_label)
-
-                bins = defaultdict(set)
-
-                for name, pages in document_qs.values_list("name", "pages"):
-                    bins[pages or 0].add(name)
-
-                series_data = []
-                for pages, names in sorted(bins.items(), key=lambda t: t[0]):
-                    percentage = len(names) * 100.0 / (total_docs or 1)
-                    if pages is not None:
-                        series_data.append((pages, len(names)))
-                        table_data.append((pages, percentage, len(names), list(names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "words":
-                stats_title = "Number of words for each {}".format(doc_label)
-
-                bin_size = 500
-
-                bins = defaultdict(set)
-
-                for name, words in document_qs.values_list("name", "words"):
-                    bins[put_into_bin(words, bin_size)].add(name)
-
-                series_data = []
-                for (value, words), names in sorted(bins.items(), key=lambda t: t[0][0]):
-                    percentage = len(names) * 100.0 / (total_docs or 1)
-                    if words is not None:
-                        series_data.append((value, len(names)))
-
-                    table_data.append((words, percentage, len(names), list(names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "format":
-                stats_title = "Submission formats for each {}".format(doc_label)
-
-                bins = defaultdict(set)
-
-                # on new documents, we should have a Submission row with the file types
-                submission_types = {}
-
-                for doc_name, file_types in Submission.objects.values_list("draft", "file_types").order_by("submission_date", "id"):
-                    submission_types[doc_name] = file_types
-
-                doc_names_with_missing_types = {}
-                for doc_name, doc_type, rev in document_qs.values_list("name", "type_id", "rev"):
-                    types = submission_types.get(doc_name)
-                    if types:
-                        for dot_ext in types.split(","):
-                            bins[dot_ext.lstrip(".").upper()].add(doc_name)
-
-                    else:
-
-                        if doc_type == "rfc":
-                            filename = doc_name
-                        else:
-                            filename = doc_name + "-" + rev
-
-                        doc_names_with_missing_types[filename] = doc_name
-
-                # look up the remaining documents on disk
-                for filename in itertools.chain(os.listdir(settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR), os.listdir(settings.RFC_PATH)):
-                    t = filename.split(".", 1)
-                    if len(t) != 2:
-                        continue
-
-                    basename, ext = t
-                    ext = ext.lower()
-                    if not any(ext==allowlisted_ext for allowlisted_ext in settings.DOCUMENT_FORMAT_ALLOWLIST):
-                        continue
-
-                    name = doc_names_with_missing_types.get(basename)
-
-                    if name:
-                        bins[ext.upper()].add(name)
-
-                series_data = []
-                for fmt, names in sorted(bins.items(), key=lambda t: t[0]):
-                    percentage = len(names) * 100.0 / (total_docs or 1)
-                    series_data.append((fmt, len(names)))
-
-                    table_data.append((fmt, percentage, len(names), list(names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "formlang":
-                stats_title = "Formal languages used for each {}".format(doc_label)
-
-                bins = defaultdict(set)
-
-                for name, formal_language_name in document_qs.values_list("name", "formal_languages__name"):
-                    bins[formal_language_name or ""].add(name)
-
-                series_data = []
-                for formal_language, names in sorted(bins.items(), key=lambda t: t[0]):
-                    percentage = len(names) * 100.0 / (total_docs or 1)
-                    if formal_language is not None:
-                        series_data.append((formal_language, len(names)))
-                        table_data.append((formal_language, percentage, len(names), list(names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-        elif any(stats_type == t[0] for t in possible_author_stats_types):
-            person_filters = Q(documentauthor__document__type="draft")
-
-            # filter persons
-            rfc_state = State.objects.get(type="rfc", slug="published")
-            if document_type == "rfc":
-                person_filters &= Q(documentauthor__document__states=rfc_state)
-            elif document_type == "draft":
-                person_filters &= ~Q(documentauthor__document__states=rfc_state)
-
-            if from_time:
-                # this is actually faster than joining in the database,
-                # despite the round-trip back and forth
-                docs_within_time_constraint = set(Document.objects.filter(
-                    type="draft",
-                    docevent__time__gte=from_time,
-                    docevent__type__in=["published_rfc", "new_revision"],
-                ).values_list("pk"))
-
-                person_filters &= Q(documentauthor__document__in=docs_within_time_constraint)
-
-            person_qs = Person.objects.filter(person_filters)
-
-            if document_type == "rfc":
-                doc_label = "RFC"
-            elif document_type == "draft":
-                doc_label = "draft"
-            else:
-                doc_label = "document"
-
-            if stats_type == "author/documents":
-                stats_title = "Number of {}s per author".format(doc_label)
-
-                bins = defaultdict(set)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                for name, document_count in person_qs.values_list("name").annotate(Count("documentauthor")):
-                    bins[document_count or 0].add(name)
-
-                total_persons = count_bins(bins)
-
-                series_data = []
-                for document_count, names in sorted(bins.items(), key=lambda t: t[0]):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    series_data.append((document_count, percentage))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((document_count, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "author/affiliation":
-                stats_title = "Number of {} authors per affiliation".format(doc_label)
-
-                bins = defaultdict(set)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                # Since people don't write the affiliation names in the
-                # same way, and we don't want to go back and edit them
-                # either, we transform them here.
-
-                name_affiliation_set = {
-                    (name, affiliation)
-                    for name, affiliation in person_qs.values_list("name", "documentauthor__affiliation")
-                }
-
-                aliases = get_aliased_affiliations(affiliation for _, affiliation in name_affiliation_set)
-
-                for name, affiliation in name_affiliation_set:
-                    bins[aliases.get(affiliation, affiliation)].add(name)
-
-                prune_unknown_bin_with_known(bins)
-                total_persons = count_bins(bins)
-
-                series_data = []
-                for affiliation, names in sorted(bins.items(), key=lambda t: t[0].lower()):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    if affiliation:
-                        series_data.append((affiliation, len(names)))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((affiliation, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                series_data.sort(key=lambda t: t[1], reverse=True)
-                series_data = series_data[:30]
-
-                chart_data.append({ "data": series_data })
-
-                for alias, name in sorted(aliases.items(), key=lambda t: t[1]):
-                    alias_data.append((name, alias))
-
-            elif stats_type == "author/country":
-                stats_title = "Number of {} authors per country".format(doc_label)
-
-                bins = defaultdict(set)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                # Since people don't write the country names in the
-                # same way, and we don't want to go back and edit them
-                # either, we transform them here.
-
-                name_country_set = {
-                    (name, country)
-                    for name, country in person_qs.values_list("name", "documentauthor__country")
-                }
-
-                aliases = get_aliased_countries(country for _, country in name_country_set)
-
-                countries = { c.name: c for c in CountryName.objects.all() }
-                eu_name = "EU"
-                eu_countries = { c for c in countries.values() if c.in_eu }
-
-                for name, country in name_country_set:
-                    country_name = aliases.get(country, country)
-                    bins[country_name].add(name)
-
-                    c = countries.get(country_name)
-                    if c and c.in_eu:
-                        bins[eu_name].add(name)
-
-                prune_unknown_bin_with_known(bins)
-                total_persons = count_bins(bins)
+    return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
 
-                series_data = []
-                for country, names in sorted(bins.items(), key=lambda t: t[0].lower()):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    if country:
-                        series_data.append((country, len(names)))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((country, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                series_data.sort(key=lambda t: t[1], reverse=True)
-                series_data = series_data[:30]
-
-                chart_data.append({ "data": series_data })
-
-                for alias, country_name in aliases.items():
-                    alias_data.append((country_name, alias, countries.get(country_name)))
-
-                alias_data.sort()
-
-            elif stats_type == "author/continent":
-                stats_title = "Number of {} authors per continent".format(doc_label)
-
-                bins = defaultdict(set)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                name_country_set = {
-                    (name, country)
-                    for name, country in person_qs.values_list("name", "documentauthor__country")
-                }
-
-                aliases = get_aliased_countries(country for _, country in name_country_set)
-
-                country_to_continent = dict(CountryName.objects.values_list("name", "continent__name"))
-
-                for name, country in name_country_set:
-                    country_name = aliases.get(country, country)
-                    continent_name = country_to_continent.get(country_name, "")
-                    bins[continent_name].add(name)
-
-                prune_unknown_bin_with_known(bins)
-                total_persons = count_bins(bins)
-
-                series_data = []
-                for continent, names in sorted(bins.items(), key=lambda t: t[0].lower()):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    if continent:
-                        series_data.append((continent, len(names)))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((continent, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                series_data.sort(key=lambda t: t[1], reverse=True)
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "author/citations":
-                stats_title = "Number of citations of {}s written by author".format(doc_label)
-
-                bins = defaultdict(set)
-
-                cite_relationships = list(DocRelationshipName.objects.filter(slug__in=['refnorm', 'refinfo', 'refunk', 'refold']))
-                person_filters &= Q(documentauthor__document__relateddocument__relationship__in=cite_relationships)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                for name, citations in person_qs.values_list("name").annotate(Count("documentauthor__document__relateddocument")):
-                    bins[citations or 0].add(name)
-
-                total_persons = count_bins(bins)
-
-                series_data = []
-                for citations, names in sorted(bins.items(), key=lambda t: t[0], reverse=True):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    series_data.append((citations, percentage))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((citations, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                chart_data.append({ "data": sorted(series_data, key=lambda t: t[0]) })
-
-            elif stats_type == "author/hindex":
-                stats_title = "h-index for {}s written by author".format(doc_label)
-
-                bins = defaultdict(set)
-
-                cite_relationships = list(DocRelationshipName.objects.filter(slug__in=['refnorm', 'refinfo', 'refunk', 'refold']))
-                person_filters &= Q(documentauthor__document__relateddocument__relationship__in=cite_relationships)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                values = person_qs.values_list("name", "documentauthor__document").annotate(Count("documentauthor__document__relateddocument"))
-                for name, ts in itertools.groupby(values.order_by("name"), key=lambda t: t[0]):
-                    h_index = compute_hirsch_index([citations for _, document, citations in ts])
-                    bins[h_index or 0].add(name)
-
-                total_persons = count_bins(bins)
-
-                series_data = []
-                for citations, names in sorted(bins.items(), key=lambda t: t[0], reverse=True):
-                    percentage = len(names) * 100.0 / (total_persons or 1)
-                    series_data.append((citations, percentage))
-                    plain_names = sorted([ plain_name(n) for n in names ])
-                    table_data.append((citations, percentage, len(plain_names), list(plain_names)[:names_limit]))
-
-                chart_data.append({ "data": sorted(series_data, key=lambda t: t[0]) })
-
-        elif any(stats_type == t[0] for t in possible_yearly_stats_types):
-
-            # filter persons
-            rfc_state = State.objects.get(type="rfc", slug="published")
-            if document_type == "rfc":
-                person_filters = Q(documentauthor__document__type="rfc")
-                person_filters &= Q(documentauthor__document__states=rfc_state)
-            elif document_type == "draft":
-                person_filters = Q(documentauthor__document__type="draft")
-                person_filters &= ~Q(documentauthor__document__states=rfc_state)
-            else:
-                person_filters = Q(documentauthor__document__type="rfc")
-                person_filters |= Q(documentauthor__document__type="draft")
-
-            doc_years = defaultdict(set)
-
-            draftevent_qs = DocEvent.objects.filter(
-                doc__type="draft",
-                type = "new_revision",
-            ).values_list("doc","time").order_by("doc")
-
-            for doc_id, time in draftevent_qs.iterator():
-                # RPC_TZINFO is used to match the timezone handling in Document.pub_date()
-                doc_years[doc_id].add(time.astimezone(RPC_TZINFO).year)
-
-            rfcevent_qs = (
-                DocEvent.objects.filter(doc__type="rfc", type="published_rfc")
-                .annotate(
-                    draft=Subquery(
-                        RelatedDocument.objects.filter(
-                            target=OuterRef("doc__pk"), relationship_id="became_rfc"
-                        ).values_list("source", flat=True)[:1]
-                    )
-                )
-                .values_list("doc", "time")
-                .order_by("doc")
-            )
-
-            for doc_id, time in rfcevent_qs.iterator():
-                doc_years[doc_id].add(time.astimezone(RPC_TZINFO).year)
-
-            person_qs = Person.objects.filter(person_filters)
-
-            if document_type == "rfc":
-                doc_label = "RFC"
-            elif document_type == "draft":
-                doc_label = "draft"
-            else:
-                doc_label = "document"
-
-            template_name = "yearly"
-
-            years_from = from_time.year if from_time else 1
-            years_to = timezone.now().year - 1
-
-
-            if stats_type == "yearly/affiliation":
-                stats_title = "Number of {} authors per affiliation over the years".format(doc_label)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                name_affiliation_doc_set = {
-                    (name, affiliation, doc)
-                    for name, affiliation, doc in person_qs.values_list("name", "documentauthor__affiliation", "documentauthor__document")
-                }
-
-                aliases = get_aliased_affiliations(affiliation for _, affiliation, _ in name_affiliation_doc_set)
-
-                bins = defaultdict(set)
-                for name, affiliation, doc in name_affiliation_doc_set:
-                    a = aliases.get(affiliation, affiliation)
-                    if a:
-                        years = doc_years.get(doc)
-                        if years:
-                            for year in years:
-                                if years_from <= year <= years_to:
-                                    bins[(year, a)].add(name)
-
-                add_labeled_top_series_from_bins(chart_data, bins, limit=8)
-
-            elif stats_type == "yearly/country":
-                stats_title = "Number of {} authors per country over the years".format(doc_label)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                name_country_doc_set = {
-                    (name, country, doc)
-                    for name, country, doc in person_qs.values_list("name", "documentauthor__country", "documentauthor__document")
-                }
-
-                aliases = get_aliased_countries(country for _, country, _ in name_country_doc_set)
-
-                countries = { c.name: c for c in CountryName.objects.all() }
-                eu_name = "EU"
-                eu_countries = { c for c in countries.values() if c.in_eu }
-
-                bins = defaultdict(set)
-
-                for name, country, doc in name_country_doc_set:
-                    country_name = aliases.get(country, country)
-                    c = countries.get(country_name)
-
-                    years = doc_years.get(doc)
-                    if country_name and years:
-                        for year in years:
-                            if years_from <= year <= years_to:
-                                bins[(year, country_name)].add(name)
-
-                                if c and c.in_eu:
-                                    bins[(year, eu_name)].add(name)
-
-                add_labeled_top_series_from_bins(chart_data, bins, limit=8)
-
-
-            elif stats_type == "yearly/continent":
-                stats_title = "Number of {} authors per continent".format(doc_label)
-
-                person_qs = Person.objects.filter(person_filters)
-
-                name_country_doc_set = {
-                    (name, country, doc)
-                    for name, country, doc in person_qs.values_list("name", "documentauthor__country", "documentauthor__document")
-                }
-
-                aliases = get_aliased_countries(country for _, country, _ in name_country_doc_set)
-
-                country_to_continent = dict(CountryName.objects.values_list("name", "continent__name"))
-
-                bins = defaultdict(set)
-
-                for name, country, doc in name_country_doc_set:
-                    country_name = aliases.get(country, country)
-                    continent_name = country_to_continent.get(country_name, "")
-
-                    if continent_name:
-                        years = doc_years.get(doc)
-                        if years:
-                            for year in years:
-                                if years_from <= year <= years_to:
-                                    bins[(year, continent_name)].add(name)
-
-                add_labeled_top_series_from_bins(chart_data, bins, limit=8)
-
-        data = {
-            "chart_data": mark_safe(json.dumps(chart_data)),
-            "table_data": table_data,
-            "stats_title": stats_title,
-            "possible_document_stats_types": possible_document_stats_types,
-            "possible_author_stats_types": possible_author_stats_types,
-            "possible_yearly_stats_types": possible_yearly_stats_types,
-            "stats_type": stats_type,
-            "possible_document_types": possible_document_types,
-            "document_type": document_type,
-            "possible_time_choices": possible_time_choices,
-            "time_choice": time_choice,
-            "doc_label": doc_label,
-            "bin_size": bin_size,
-            "show_aliases_url": build_document_stats_url(get_overrides={ "showaliases": "1" }),
-            "hide_aliases_url": build_document_stats_url(get_overrides={ "showaliases": None }),
-            "alias_data": alias_data,
-            "eu_countries": sorted(eu_countries or [], key=lambda c: c.name),
-            "content_template": "stats/document_stats_{}.html".format(template_name),
-        }
-        # Logs are full of these, but nobody is using them
-        # log("Cache miss for '%s'.  Data size: %sk" % (cache_key, len(str(data))/1000))
-        cache.set(cache_key, data, 24*60*60)
-    return render(request, "stats/document_stats.html", data)
 
 def known_countries_list(request, stats_type=None, acronym=None):
     countries = CountryName.objects.prefetch_related("countryalias_set")
@@ -774,252 +137,7 @@ def known_countries_list(request, stats_type=None, acronym=None):
     })
 
 def meeting_stats(request, num=None, stats_type=None):
-    meeting = None
-    if num is not None:
-        meeting = get_object_or_404(Meeting, number=num, type="ietf")
-
-    def build_meeting_stats_url(number=None, stats_type_override=Ellipsis, get_overrides=None):
-        if get_overrides is None:
-            get_overrides = {}
-        kwargs = {
-            "stats_type": stats_type if stats_type_override is Ellipsis else stats_type_override,
-        }
-
-        if number is not None:
-            kwargs["num"] = number
-
-        return urlreverse(meeting_stats, kwargs={ k: v for k, v in kwargs.items() if v is not None }) + generate_query_string(request.GET, get_overrides)
-
-    cache_key = ("stats:meeting_stats:%s:%s:%s" % (num, stats_type, slugify(request.META.get('QUERY_STRING',''))))[:228]
-    data = cache.get(cache_key)
-    if not data:
-        names_limit = settings.STATS_NAMES_LIMIT
-        # statistics types
-        if meeting:
-            possible_stats_types = add_url_to_choices([
-                ("country", "Country"),
-                ("continent", "Continent"),
-            ], lambda slug: build_meeting_stats_url(number=meeting.number, stats_type_override=slug))
-        else:
-            possible_stats_types = add_url_to_choices([
-                ("overview", "Overview"),
-                ("country", "Country"),
-                ("continent", "Continent"),
-            ], lambda slug: build_meeting_stats_url(number=None, stats_type_override=slug))
-
-        if not stats_type:
-            return HttpResponseRedirect(build_meeting_stats_url(number=num, stats_type_override=possible_stats_types[0][0]))
-
-        chart_data = []
-        piechart_data = []
-        table_data = []
-        stats_title = ""
-        template_name = stats_type
-        bin_size = 1
-        eu_countries = None
-
-        def get_country_mapping(attendees):
-            return {
-                alias.alias: alias.country
-                for alias in CountryAlias.objects.filter(alias__in=set(r.country_code for r in attendees)).select_related("country", "country__continent")
-                if alias.alias.isupper()
-            }
-
-        def reg_name(r):
-            return email.utils.formataddr(((r.first_name + " " + r.last_name).strip(), r.email))
-
-        if meeting and any(stats_type == t[0] for t in possible_stats_types):
-            attendees = MeetingRegistration.objects.filter(
-                meeting=meeting,
-                reg_type__in=['onsite', 'remote']
-            ).filter(
-                Q( attended=True) | Q( checkedin=True )
-            )
-
-            if stats_type == "country":
-                stats_title = "Number of attendees for {} {} per country".format(meeting.type.name, meeting.number)
-
-                bins = defaultdict(set)
-
-                country_mapping = get_country_mapping(attendees)
-
-                eu_name = "EU"
-                eu_countries = set(CountryName.objects.filter(in_eu=True))
-
-                for r in attendees:
-                    name = reg_name(r)
-                    c = country_mapping.get(r.country_code)
-                    bins[c.name if c else ""].add(name)
-
-                    if c and c.in_eu:
-                        bins[eu_name].add(name)
-
-                prune_unknown_bin_with_known(bins)
-                total_attendees = count_bins(bins)
-
-                series_data = []
-                for country, names in sorted(bins.items(), key=lambda t: t[0].lower()):
-                    percentage = len(names) * 100.0 / (total_attendees or 1)
-                    if country:
-                        series_data.append((country, len(names)))
-                    table_data.append((country, percentage, len(names), list(names)[:names_limit]))
-
-                    if country and country != eu_name:
-                        piechart_data.append({ "name": country, "y": percentage })
-
-                series_data.sort(key=lambda t: t[1], reverse=True)
-                series_data = series_data[:20]
-
-                piechart_data.sort(key=lambda d: d["y"], reverse=True)
-                pie_cut_off = 8
-                piechart_data = piechart_data[:pie_cut_off] + [{ "name": "Other", "y": sum(d["y"] for d in piechart_data[pie_cut_off:])}]
-
-                chart_data.append({ "data": series_data })
-
-            elif stats_type == "continent":
-                stats_title = "Number of attendees for {} {} per continent".format(meeting.type.name, meeting.number)
-
-                bins = defaultdict(set)
-
-                country_mapping = get_country_mapping(attendees)
-
-                for r in attendees:
-                    name = reg_name(r)
-                    c = country_mapping.get(r.country_code)
-                    bins[c.continent.name if c else ""].add(name)
-
-                prune_unknown_bin_with_known(bins)
-                total_attendees = count_bins(bins)
-
-                series_data = []
-                for continent, names in sorted(bins.items(), key=lambda t: t[0].lower()):
-                    percentage = len(names) * 100.0 / (total_attendees or 1)
-                    if continent:
-                        series_data.append((continent, len(names)))
-                    table_data.append((continent, percentage, len(names), list(names)[:names_limit]))
-
-                series_data.sort(key=lambda t: t[1], reverse=True)
-
-                chart_data.append({ "data": series_data })
-
-
-        elif not meeting and any(stats_type == t[0] for t in possible_stats_types):
-            template_name = "overview"
-
-            attendees = MeetingRegistration.objects.filter(
-                meeting__type="ietf",
-                attended=True,
-                reg_type__in=['onsite', 'remote']
-            ).filter(
-                Q( attended=True) | Q( checkedin=True )  
-            ).select_related('meeting')
-
-            if stats_type == "overview":
-                stats_title = "Number of attendees per meeting"
-
-                continents = {}
-                
-                meetings = Meeting.objects.filter(type='ietf', date__lte=date_today()).order_by('number')
-                for m in meetings:
-                    country = CountryName.objects.get(slug=m.country)
-                    continents[country.continent.name] = country.continent.name
-
-                bins = defaultdict(set)
-
-                for r in attendees:
-                    meeting_number = int(r.meeting.number)
-                    name = reg_name(r)
-                    bins[meeting_number].add(name)
-
-                series_data = {}
-                for continent in list(continents.keys()):
-                    series_data[continent] = []
-
-                for m in meetings:
-                    country = CountryName.objects.get(slug=m.country)
-                    url = build_meeting_stats_url(number=m.number,
-                                                  stats_type_override="country")
-                    for continent in list(continents.keys()):
-                        if continent == country.continent.name:
-                            d = {
-                                "name": "IETF {} - {}, {}".format(int(m.number), m.city, country),
-                                "x": int(m.number),
-                                "y": m.attendees,
-                                "date": m.date.strftime("%d %b %Y"),
-                                "url": url,
-                                }
-                        else:
-                            d = {
-                                "x": int(m.number),
-                                "y": 0,
-                                }
-                        series_data[continent].append(d)
-                    table_data.append((m, url,
-                                       m.attendees, country))
-
-                for continent in list(continents.keys()):
-#                    series_data[continent].sort(key=lambda t: t[0]["x"])
-                    chart_data.append( { "name": continent,
-                                         "data": series_data[continent] })
-                    
-                table_data.sort(key=lambda t: int(t[0].number), reverse=True)
-
-            elif stats_type == "country":
-                stats_title = "Number of attendees per country across meetings"
-
-                country_mapping = get_country_mapping(attendees)
-
-                eu_name = "EU"
-                eu_countries = set(CountryName.objects.filter(in_eu=True))
-
-                bins = defaultdict(set)
-
-                for r in attendees:
-                    meeting_number = int(r.meeting.number)
-                    name = reg_name(r)
-                    c = country_mapping.get(r.country_code)
-
-                    if c:
-                        bins[(meeting_number, c.name)].add(name)
-                        if c.in_eu:
-                            bins[(meeting_number, eu_name)].add(name)
-
-                add_labeled_top_series_from_bins(chart_data, bins, limit=8)
-
-
-            elif stats_type == "continent":
-                stats_title = "Number of attendees per continent across meetings"
-
-                country_mapping = get_country_mapping(attendees)
-
-                bins = defaultdict(set)
-
-                for r in attendees:
-                    meeting_number = int(r.meeting.number)
-                    name = reg_name(r)
-                    c = country_mapping.get(r.country_code)
-
-                    if c:
-                        bins[(meeting_number, c.continent.name)].add(name)
-
-                add_labeled_top_series_from_bins(chart_data, bins, limit=8)
-        data = {
-            "chart_data": mark_safe(json.dumps(chart_data)),
-            "piechart_data": mark_safe(json.dumps(piechart_data)),
-            "table_data": table_data,
-            "stats_title": stats_title,
-            "possible_stats_types": possible_stats_types,
-            "stats_type": stats_type,
-            "bin_size": bin_size,
-            "meeting": meeting,
-            "eu_countries": sorted(eu_countries or [], key=lambda c: c.name),
-            "content_template": "stats/meeting_stats_{}.html".format(template_name),
-        }
-        # Logs are full of these, but nobody is using them...
-        # log("Cache miss for '%s'.  Data size: %sk" % (cache_key, len(str(data))/1000))
-        cache.set(cache_key, data, 24*60*60)
-    #
-    return render(request, "stats/meeting_stats.html", data)
+    return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
 
 
 @login_required
diff --git a/ietf/templates/stats/document_stats.html b/ietf/templates/stats/document_stats.html
deleted file mode 100644
index 4e66bed37e..0000000000
--- a/ietf/templates/stats/document_stats.html
+++ /dev/null
@@ -1,86 +0,0 @@
-{% extends "base.html" %}
-{% load origin %}
-{% load ietf_filters static %}
-{% block title %}{{ stats_title }}{% endblock %}
-{% block pagehead %}
-    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
-    <link rel="stylesheet" href="{% static "ietf/css/highcharts.css" %}">
-{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>Internet-Draft and RFC statistics</h1>
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Documents:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_document_stats_types %}
-                <a class="btn btn-outline-primary
-                          {% if slug == stats_type %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Authors:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_author_stats_types %}
-                <a class="btn btn-outline-primary
-                          {% if slug == stats_type %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Yearly:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_yearly_stats_types %}
-                <a class="btn btn-outline-primary
-                          {% if slug == stats_type %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <h2>Options</h2>
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Document type:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_document_types %}
-                <a class="btn btn-outline-primary
-                          {% if slug == document_type %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Time:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_time_choices %}
-                <a class="btn btn-outline-primary
-                          {% if slug == time_choice %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <div class="alert alert-info my-3">
-        <b>Please Note:</b> The author information in the datatracker about RFCs
-        with numbers lower than about 1300 and Internet-Drafts from before 2001 is
-        unreliable and in many cases absent.  For this reason, statistics on these
-        pages does not show correct author stats for corpus selections that involve such
-        documents.
-    </div>
-    {% include content_template %}
-{% endblock %}
-{% block js %}
-    <script src="{% static 'ietf/js/highcharts.js' %}"></script>
-    <script src="{% static 'ietf/js/stats.js' %}"></script>
-    <script src="{% static "ietf/js/list.js" %}"></script>
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_author_affiliation.html b/ietf/templates/stats/document_stats_author_affiliation.html
deleted file mode 100644
index 9c798cb924..0000000000
--- a/ietf/templates/stats/document_stats_author_affiliation.html
+++ /dev/null
@@ -1,113 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Affiliation'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of authors'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="affiliation">Affiliation</th>
-            <th scope="col" data-sort="percent">Percentage of authors</th>
-            <th scope="col" data-sort="count">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for affiliation, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ affiliation|default:"(unknown)" }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
-<p>
-    The statistics are based entirely on the author affiliation
-    provided with each Internet-Draft. Since this may vary across documents, an
-    author may be counted with more than one affiliation, making the
-    total sum more than 100%.
-</p>
-<h2>Affiliation Aliases</h2>
-<p>
-    In generating the above statistics, some heuristics have been
-    applied to determine the affiliations of each author.
-</p>
-{% if request.GET.showaliases %}
-    <p>
-        <a href="{{ hide_aliases_url }}" class="btn btn-primary">Hide generated aliases</a>
-    </p>
-    {% if request.user.is_staff %}
-        <p>
-            Note: since you're an admin, you can
-            <a href="{% url "admin:stats_affiliationalias_add" %}">add an extra known alias</a>
-            or see the
-            <a href="{% url "admin:stats_affiliationalias_changelist" %}">existing known aliases</a>
-            and
-            <a href="{% url "admin:stats_affiliationignoredending_changelist" %}">generally ignored endings</a>.
-        </p>
-    {% endif %}
-    {% if alias_data %}
-        <table class="table table-sm table-striped tablesorter">
-            <thead>
-                <tr>
-                    <th scope="col" data-sort="affiliation">Affiliation</th>
-                    <th scope="col" data-sort="alias">Alias</th>
-                </tr>
-            </thead>
-            {% if alias_data %}
-                <tbody>
-                    {% for name, alias in alias_data %}
-                        <tr>
-                            <td>{{ name|default:"(unknown)" }}</td>
-                            <td>{{ alias }}</td>
-                        </tr>
-                    {% endfor %}
-                </tbody>
-            {% endif %}
-        </table>
-    {% endif %}
-{% else %}
-    <p>
-        <a href="{{ show_aliases_url }}" class="btn btn-primary">Show generated aliases</a>
-    </p>
-{% endif %}
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_author_citations.html b/ietf/templates/stats/document_stats_author_citations.html
deleted file mode 100644
index ae89335fae..0000000000
--- a/ietf/templates/stats/document_stats_author_citations.html
+++ /dev/null
@@ -1,72 +0,0 @@
-{% load origin %}{% origin %}
-<div id="chart"></div>
-
-<script>
-    var chartConf = {
-        chart: {
-            type: 'area'
-        },
-        plotOptions: {
-            area: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            title: {
-                text: 'Number of citations of {{ doc_label }}s by author'
-            },
-            max: 500
-        },
-        yAxis: {
-            title: {
-                text: 'Percentage of authors'
-            },
-            labels: {
-                formatter: function () {
-                    return this.value + '%';
-                }
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + ' ' + (this.x == 1 ? "citation" : 'citations') + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y.toFixed(1) + '%';
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-
-<h2>Data</h2>
-
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">Citations</th>
-            <th scope="col" data-sort="percent">Percentage of authors</th>
-            <th scope="col" data-sort="authors">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for citations, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ citations }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" with content_limit=10 %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
-
-<p>Note that the citation counts do not exclude self-references.</p>
diff --git a/ietf/templates/stats/document_stats_author_continent.html b/ietf/templates/stats/document_stats_author_continent.html
deleted file mode 100644
index 5554ac341e..0000000000
--- a/ietf/templates/stats/document_stats_author_continent.html
+++ /dev/null
@@ -1,69 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Continent'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of authors'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="continent">Continent</th>
-            <th scope="col" data-sort="percent">Percentage of authors</th>
-            <th scope="col" data-sort="count">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for continent, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ continent|default:"(unknown)" }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
-<p>
-    The statistics are based entirely on the author addresses provided
-    with each Internet-Draft. Since this varies across documents, a traveling
-    author may be counted in more than country, making the total sum
-    more than 100%.
-</p>
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_author_country.html b/ietf/templates/stats/document_stats_author_country.html
deleted file mode 100644
index 72299cc397..0000000000
--- a/ietf/templates/stats/document_stats_author_country.html
+++ /dev/null
@@ -1,136 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Country'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of authors'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="country">Country</th>
-            <th scope="col" class="text-end" data-sort="percent">Percentage of authors</th>
-            <th scope="col" class="text-end" data-sort="authors">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for country, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ country|default:"(unknown)" }}</td>
-                    <td class="text-end">{{ percentage|floatformat:2 }}%</td>
-                    <td class="text-end">{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
-<p>
-    The statistics are based entirely on the author addresses provided
-    with each Internet-Draft. Since this varies across documents, a traveling
-    author may be counted in more than country, making the total sum
-    more than 100%.
-</p>
-<p>
-    In case no country information is found for an author in the time
-    period, the author is counted as (unknown).
-</p>
-<p>
-    EU (European Union) is not a country, but has been added for reference, as the sum of
-    all current EU member countries:
-    {% for c in eu_countries %}
-        {{ c.name }}{% if not forloop.last %},{% endif %}
-    {% endfor %}
-    .
-</p>
-<h2>Country Aliases</h2>
-<p>
-    In generating the above statistics, some heuristics have been
-    applied to figure out which country each author is from.
-</p>
-{% if request.GET.showaliases %}
-    <p>
-        <a href="{{ hide_aliases_url }}" class="btn btn-primary">Hide generated aliases</a>
-    </p>
-    {% if request.user.is_staff %}
-        <p class="alert alert-info my-3">
-            Note: since you're an admin, some extra links are visible. You
-            can either correct a document author entry directly in case the
-            information is obviously missing or add an alias if an unknown
-            <a href="{% url "admin:name_countryname_changelist" %}">country name</a>
-            is being used.
-        </p>
-    {% endif %}
-    {% if alias_data %}
-        <table class="table table-sm table-striped tablesorter">
-            <thead>
-                <th scope="col" data-sort="country">Country</th>
-                <th scope="col" data-sort="alias">Alias</th>
-            </thead>
-            {% if alias_data %}
-                <tbody>
-                {% for name, alias, country in alias_data %}
-                    <tr>
-                        <td>
-                            {% if country and request.user.is_staff %}
-                                <a href="{% url "admin:name_countryname_change" country.pk %}">{{ name|default:"(unknown)" }}</a>
-                            {% else %}
-                                {{ name|default:"(unknown)" }}
-                            {% endif %}
-                        </td>
-                        <td>
-                            {{ alias }}
-                            {% if request.user.is_staff and name != "EU" %}
-                                <a class="float-end btn btn-primary btn-sm"
-                                   href="{% url "admin:doc_documentauthor_changelist" %}?country={{ alias|urlencode }}">
-                                    Matching authors
-                                </a>
-                            {% endif %}
-                        </td>
-                    </tr>
-                {% endfor %}
-                </tbody>
-            {% endif %}
-        </table>
-    {% endif %}
-{% else %}
-    <p>
-        <a href="{{ show_aliases_url }}" class="btn btn-primary">Show generated aliases</a>
-    </p>
-{% endif %}
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_author_documents.html b/ietf/templates/stats/document_stats_author_documents.html
deleted file mode 100644
index 28e33e6737..0000000000
--- a/ietf/templates/stats/document_stats_author_documents.html
+++ /dev/null
@@ -1,69 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            tickInterval: 1,
-            title: {
-                text: 'Author of number of {{ doc_label }}s'
-            },
-            max: 20
-        },
-        yAxis: {
-            title: {
-                text: 'Percentage of authors'
-            },
-            labels: {
-                formatter: function () {
-                    return this.value + '%';
-                }
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + ' ' + (this.x == 1 ? "{{ doc_label }}" : '{{ doc_label }}s') + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y.toFixed(1) + '%';
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">Documents</th>
-            <th scope="col" data-sort="percent">Percentage of authors</th>
-            <th scope="col" data-sort="count">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for document_count, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ document_count }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" with content_limit=10 %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
diff --git a/ietf/templates/stats/document_stats_author_hindex.html b/ietf/templates/stats/document_stats_author_hindex.html
deleted file mode 100644
index ab3215d355..0000000000
--- a/ietf/templates/stats/document_stats_author_hindex.html
+++ /dev/null
@@ -1,83 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            tickInterval: 1,
-            title: {
-                text: 'h-index of {{ doc_label }}s by author'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Percentage of authors'
-            },
-            labels: {
-                formatter: function () {
-                    return this.value + '%';
-                }
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + ' h-index ' + this.x + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y.toFixed(1) + '%';
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">h-index</th>
-            <th scope="col" data-sort="percent">Percentage of authors</th>
-            <th scope="col" data-sort="Authors">Authors</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for h_index, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ h_index }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" with content_limit=25 %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
-<p>
-    Hirsch index or h-index is a
-    <a href="https://www.wikipedia.org/wiki/H-index">
-        measure of the
-        productivity and impact of the publications of an author
-    </a>.
-    An
-    author with an h-index of 5 has had 5 publications each cited at
-    least 5 times - to increase the index to 6, the 5 publications plus
-    1 more would have to have been cited at least 6 times, each. Thus a
-    high h-index requires many highly-cited publications.
-</p>
-<p>
-    Note that the h-index calculations do not exclude self-references.
-</p>
diff --git a/ietf/templates/stats/document_stats_authors.html b/ietf/templates/stats/document_stats_authors.html
deleted file mode 100644
index 5c1bbbdf4c..0000000000
--- a/ietf/templates/stats/document_stats_authors.html
+++ /dev/null
@@ -1,68 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            tickInterval: 1,
-            title: {
-                text: 'Number of authors'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Percentage of {{ doc_label }}s'
-            },
-            labels: {
-                formatter: function () {
-                    return this.value + '%';
-                }
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + ' ' + (this.x == 1 ? "author" : 'authors') + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y.toFixed(1) + '%';
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h3>Data</h3>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">Authors</th>
-            <th scope="col" data-sort="percent">Percentage of {{ doc_label }}s</th>
-            <th scope="col" data-sort="count">{{ doc_label|capfirst }}s</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for author_count, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ author_count }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
diff --git a/ietf/templates/stats/document_stats_format.html b/ietf/templates/stats/document_stats_format.html
deleted file mode 100644
index 32c25fe378..0000000000
--- a/ietf/templates/stats/document_stats_format.html
+++ /dev/null
@@ -1,63 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Format'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of {{ doc_label }}s'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="format">Format</th>
-            <th scope="col" data-sort="percent">Percentage of {{ doc_label }}s</th>
-            <th scope="col" data-sort="label">{{ doc_label|capfirst }}s</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for pages, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ pages }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_formlang.html b/ietf/templates/stats/document_stats_formlang.html
deleted file mode 100644
index 217d79e3ef..0000000000
--- a/ietf/templates/stats/document_stats_formlang.html
+++ /dev/null
@@ -1,63 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Formal language'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of {{ doc_label }}s'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="formal">Formal language</th>
-            <th scope="col" data-sort="percent">Percentage of {{ doc_label }}s</th>
-            <th scope="col" data-sort="count">{{ doc_label|capfirst }}s</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for formal_language, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ formal_language }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
\ No newline at end of file
diff --git a/ietf/templates/stats/document_stats_pages.html b/ietf/templates/stats/document_stats_pages.html
deleted file mode 100644
index 73231b0e90..0000000000
--- a/ietf/templates/stats/document_stats_pages.html
+++ /dev/null
@@ -1,62 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'line'
-        },
-        plotOptions: {
-            line: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            title: {
-                text: 'Number of pages'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of {{ doc_label }}s'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + ' ' + (this.x == 1 ? "page" : 'pages') + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">Pages</th>
-            <th scope="col" data-sort="percent">Percentage of {{ doc_label }}s</th>
-            <th scope="col" data-sort="count">{{ doc_label|capfirst }}s</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for pages, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ pages }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
diff --git a/ietf/templates/stats/document_stats_words.html b/ietf/templates/stats/document_stats_words.html
deleted file mode 100644
index 4e8c15e937..0000000000
--- a/ietf/templates/stats/document_stats_words.html
+++ /dev/null
@@ -1,62 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'line'
-        },
-        plotOptions: {
-            line: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            title: {
-                text: 'Number of words'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of {{ doc_label }}s'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + ' - ' + (this.x + {{ bin_size }} - 1) + ' ' + (this.x == 1 ? "word" : 'words') + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped tablesorter stats-data">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="num">Words</th>
-            <th scope="col" data-sort="percent">Percentage of {{ doc_label }}s</th>
-            <th scope="col" data-sort="count">{{ doc_label|capfirst }}s</th>
-        </tr>
-    </thead>
-    {% if table_data %}
-        <tbody>
-            {% for pages, percentage, count, names in table_data %}
-                <tr>
-                    <td>{{ pages }}</td>
-                    <td>{{ percentage|floatformat:2 }}%</td>
-                    <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    {% endif %}
-</table>
diff --git a/ietf/templates/stats/document_stats_yearly.html b/ietf/templates/stats/document_stats_yearly.html
deleted file mode 100644
index b819255ced..0000000000
--- a/ietf/templates/stats/document_stats_yearly.html
+++ /dev/null
@@ -1,52 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'line',
-        },
-        plotOptions: {
-            line: {
-                marker: {
-                    enabled: false
-                },
-                animation: false
-            }
-        },
-        legend: {
-            align: "right",
-            verticalAlign: "middle",
-            layout: "vertical",
-            enabled: true
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            tickInterval: 1,
-            title: {
-                text: 'Year'
-            }
-        },
-        yAxis: {
-            min: 0,
-            title: {
-                text: 'Authors active in year'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.x + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + this.series.name + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
\ No newline at end of file
diff --git a/ietf/templates/stats/includes/number_with_details_cell.html b/ietf/templates/stats/includes/number_with_details_cell.html
deleted file mode 100644
index a5e88113ca..0000000000
--- a/ietf/templates/stats/includes/number_with_details_cell.html
+++ /dev/null
@@ -1,15 +0,0 @@
-{% load person_filters %}
-{% if content_limit and count <= content_limit %}
-    {% for n in names %}
-        {% with n|person_by_name as person %}
-            {% if person %}
-                {% person_link person %}
-            {% else %}
-                {{ n }}
-            {% endif %}
-            <br>
-        {% endwith %}
-    {% endfor %}
-{% else %}
-    {{ count }}
-{% endif %}
\ No newline at end of file
diff --git a/ietf/templates/stats/index.html b/ietf/templates/stats/index.html
index 1c5026013c..2000168525 100644
--- a/ietf/templates/stats/index.html
+++ b/ietf/templates/stats/index.html
@@ -10,15 +10,12 @@ <h1>
         Statistics on...
     </p>
     <ul>
-        <li>
-            <a href="{% url "ietf.stats.views.document_stats" %}">Internet-Drafts and RFCs (authors, countries, formats, ...)</a>
-        </li>
-        <li>
-            <a href="{% url "ietf.stats.views.meeting_stats" %}">Meeting attendance</a>
-        </li>
         <li>
             <a rel="nofollow" href="{% url "ietf.stats.views.review_stats" %}">Reviews of Internet-Drafts in review teams</a>
             (requires login)
         </li>
     </ul>
+    <p>
+        Statistics on meetings and authorship are not currently available.
+    </p>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/stats/meeting_stats.html b/ietf/templates/stats/meeting_stats.html
deleted file mode 100644
index 606caffde0..0000000000
--- a/ietf/templates/stats/meeting_stats.html
+++ /dev/null
@@ -1,35 +0,0 @@
-{% extends "base.html" %}
-{% load origin %}
-{% load ietf_filters static django_bootstrap5 %}
-{% block title %}{{ stats_title }}{% endblock %}
-{% block pagehead %}
-    <link rel="stylesheet" href="{% static 'ietf/css/list.css' %}">
-    <link rel="stylesheet" href="{% static "ietf/css/highcharts.css" %}">
-{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>Meeting Statistics</h1>
-    {% if meeting %}
-        <p>
-            <a href="{% url "ietf.stats.views.meeting_stats" %}">&laquo; Back to overview</a>
-        </p>
-    {% endif %}
-    <div class="row my-3">
-        <label class="fw-bold col-sm-2 col-form-label">Attendees:</label>
-        <div class="btn-group col-sm-10">
-            {% for slug, label, url in possible_stats_types %}
-                <a class="btn btn-outline-primary
-                          {% if slug == stats_type %}
-                              active
-                          {% endif %}"
-                   href="{{ url }}">{{ label }}</a>
-            {% endfor %}
-        </div>
-    </div>
-    <div class="document-stats">{% include content_template %}</div>
-{% endblock %}
-{% block js %}
-    <script src="{% static 'ietf/js/highcharts.js' %}"></script>
-    <script src="{% static 'ietf/js/stats.js' %}"></script>
-    <script src="{% static "ietf/js/list.js" %}"></script>
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/stats/meeting_stats_continent.html b/ietf/templates/stats/meeting_stats_continent.html
deleted file mode 100644
index 42ca03a409..0000000000
--- a/ietf/templates/stats/meeting_stats_continent.html
+++ /dev/null
@@ -1,61 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Continent'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of attendees'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm table-striped stats-data tablesorter">
-    <thead>
-        <tr>
-            <th scope="col" data-sort="continent">Continent</th>
-            <th scope="col" data-sort="percent">Percentage of attendees</th>
-            <th scope="col" data-sort="count">Attendees</th>
-        </tr>
-    </thead>
-    <tbody>
-        {% for continent, percentage, count, names in table_data %}
-            <tr>
-                <td>{{ continent|default:"(unknown)" }}</td>
-                <td>{{ percentage|floatformat:2 }}%</td>
-                <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-            </tr>
-        {% endfor %}
-    </tbody>
-</table>
diff --git a/ietf/templates/stats/meeting_stats_country.html b/ietf/templates/stats/meeting_stats_country.html
deleted file mode 100644
index cebbad3c9f..0000000000
--- a/ietf/templates/stats/meeting_stats_country.html
+++ /dev/null
@@ -1,97 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart"></div>
-<script>
-    var chartConf = {
-        chart: {
-            type: 'column'
-        },
-        plotOptions: {
-            column: {
-                animation: false
-            }
-        },
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            type: "category",
-            title: {
-                text: 'Country'
-            }
-        },
-        yAxis: {
-            title: {
-                text: 'Number of attendees'
-            }
-        },
-        tooltip: {
-            formatter: function () {
-                var s = '<b>' + this.points[0].key + '</b>';
-
-                $.each(this.points, function () {
-                    s += '<br>' + chartConf.yAxis.title.text + ': ' + this.y;
-                });
-
-                return s;
-            },
-            shared: true
-        },
-        series: {{ chart_data }}
-    };
-</script>
-<div id="pie-chart"></div>
-<script>
-    var pieChartConf = {
-        chart: {
-            type: 'pie'
-        },
-        plotOptions: {
-            pie: {
-                animation: false,
-                dataLabels: {
-                    enabled: true,
-                    format: "{point.name}: {point.percentage:.1f}%"
-                },
-                enableMouseTracking: false
-            }
-        },
-        title: {
-            text: "Countries at IETF {{ meeting.number }}"
-        },
-        tooltip: {
-        },
-        series: [ {
-            name: "Countries",
-            colorByPoint: true,
-            data: {{ piechart_data }}
-        }]
-    };
-</script>
-<h2>Data</h2>
-<table class="table table-sm stats-data tablesorter">
-    <thead>
-        <tr>
-            <th scope="col">Country</th>
-            <th scope="col">Percentage of attendees</th>
-            <th scope="col">Attendees</th>
-        </tr>
-    </thead>
-    <tbody>
-        {% for country, percentage, count, names in table_data %}
-            <tr>
-                <td>{{ country|default:"(unknown)" }}</td>
-                <td>{{ percentage|floatformat:2 }}%</td>
-                <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-            </tr>
-        {% endfor %}
-    </tbody>
-</table>
-<p>
-    EU (European Union) is not a country, but has been added for reference, as the sum of
-    all current EU member countries:
-    {% for c in eu_countries %}
-        {{ c.name }}{% if not forloop.last %},{% endif %}
-    {% endfor %}
-    .
-</p>
\ No newline at end of file
diff --git a/ietf/templates/stats/meeting_stats_overview.html b/ietf/templates/stats/meeting_stats_overview.html
deleted file mode 100644
index 1136e458b8..0000000000
--- a/ietf/templates/stats/meeting_stats_overview.html
+++ /dev/null
@@ -1,160 +0,0 @@
-{% load origin %}
-{% origin %}
-<div id="chart" class="chart-{{ stats_type }}"></div>
-<script>
-    var chartConf = {
-
-        {% if stats_type == "overview" %}
-
-            chart: {
-                type: 'column',
-            },
-            colors: [ 'blue', 'red', 'cyan', 'orange', 'black',
-                'green', 'yellow' ],
-            plotOptions: {
-                series: {
-                    stacking: 'normal',
-                    point: {
-                        events: {
-                            click: function () {
-                                location.href = this.options.url;
-                            }
-                        }
-                    },
-                },
-                column: {
-                    marker: {
-                        enabled: false
-                    },
-                    animation: false
-                }
-            },
-            tooltip: {
-                formatter: function () {
-                    var s = '<b>' + this.point.name + '</b>';
-                    s += '<br>' + this.point.date;
-                    s += '<br>' + this.series.name + '<br> Attendees: ' + this.y;
-                    return s;
-                },
-                shared: false
-            },
-            legend: {
-                title: {
-                    text: "Continent of the venue",
-                },
-                borderWidth: 1,
-                align: "center",
-                verticalAlign: "bottom",
-                layout: "horizontal",
-                enabled: true
-            },
-
-
-        {% else %}
-
-            chart: {
-                type: 'line',
-            },
-            plotOptions: {
-                line: {
-                    marker: {
-                        enabled: false
-                    },
-                    animation: false
-                }
-            },
-            tooltip: {
-                formatter: function () {
-                    var s = '<b>' + "IETF " + this.x + '</b>';
-
-                    $.each(this.points, function () {
-                        s += '<br>' + this.series.name + ': ' + this.y;
-                    });
-
-                    return s;
-                },
-                shared: true
-            },
-            legend: {
-                align: "right",
-                verticalAlign: "middle",
-                layout: "vertical",
-                enabled: true
-            },
-
-
-        {% endif %}
-
-        title: {
-            text: '{{ stats_title|escapejs }}'
-        },
-        xAxis: {
-            tickInterval: 1,
-            title: {
-                text: 'Meeting'
-            }
-        },
-        yAxis: {
-            min: 0,
-            title: {
-                text: 'Attendees at meeting'
-            }
-        },
-        exporting: {
-            buttons: {
-                contextButton: {
-                    menuItems: [
-                        'printChart',
-                        'separator',
-                        'downloadPNG',
-                        'downloadJPEG',
-                        'downloadSVG',
-                        'separator',
-                        'downloadCSV'
-                    ]
-                }
-            }
-        },
-        series: {{ chart_data }}
-    };
-</script>
-{% if table_data %}
-    <h2>Data</h2>
-    <table class="table table-sm table-striped stats-data tablesorter">
-        <thead>
-            <tr>
-                <th scope="col" data-sort="num">Meeting</th>
-                <th scope="col" data-sort="date">Date</th>
-                <th scope="col" data-sort="city">City</th>
-                <th scope="col" data-sort="country">Country</th>
-                <th scope="col" data-sort="continent">Continent</th>
-                <th scope="col" data-sort="count">Attendees</th>
-            </tr>
-        </thead>
-        <tbody>
-            {% for meeting, url, count, country in table_data %}
-                <tr>
-                    {% if meeting.get_number > 71 %}
-                        <td>
-                            <a href="{{ url }}">{{ meeting.number }}</a>
-                        </td>
-                        <td>{{ meeting.date }}</td>
-                        <td>
-                            <a href="{{ url }}">{{ meeting.city }}</a>
-                        </td>
-                        <td>{{ country.name }}</td>
-                        <td>{{ country.continent }}</td>
-                        <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                    {% else %}
-                        <td>{{ meeting.number }}</td>
-                        <td>{{ meeting.date }}</td>
-                        <td>{{ meeting.city }}</td>
-                        <td>{{ country.name }}</td>
-                        <td>{{ country.continent }}</td>
-                        <td>{% include "stats/includes/number_with_details_cell.html" %}</td>
-                    {% endif %}
-                </tr>
-            {% endfor %}
-        </tbody>
-    </table>
-{% endif %}

From 2ec7a71edfad24176034a1aa6a46ce66ddfb396b Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 9 Dec 2024 10:34:53 -0600
Subject: [PATCH 191/707] chore: remove unused setting from various
 settings_local templates (#8311)

---
 dev/deploy-to-container/settings_local.py | 1 -
 dev/diff/settings_local.py                | 1 -
 dev/tests/settings_local.py               | 1 -
 docker/configs/settings_local.py          | 1 -
 4 files changed, 4 deletions(-)

diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index ae698e20b6..07bf0a7511 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -40,7 +40,6 @@
 
 SUBMIT_YANG_CATALOG_MODEL_DIR = '/assets/ietf-ftp/yang/catalogmod/'
 SUBMIT_YANG_DRAFT_MODEL_DIR = '/assets/ietf-ftp/yang/draftmod/'
-SUBMIT_YANG_INVAL_MODEL_DIR = '/assets/ietf-ftp/yang/invalmod/'
 SUBMIT_YANG_IANA_MODEL_DIR = '/assets/ietf-ftp/yang/ianamod/'
 SUBMIT_YANG_RFC_MODEL_DIR   = '/assets/ietf-ftp/yang/rfcmod/'
 
diff --git a/dev/diff/settings_local.py b/dev/diff/settings_local.py
index 774c7797cf..6bcee46b61 100644
--- a/dev/diff/settings_local.py
+++ b/dev/diff/settings_local.py
@@ -37,7 +37,6 @@
 
 SUBMIT_YANG_CATALOG_MODEL_DIR = '/assets/ietf-ftp/yang/catalogmod/'
 SUBMIT_YANG_DRAFT_MODEL_DIR = '/assets/ietf-ftp/yang/draftmod/'
-SUBMIT_YANG_INVAL_MODEL_DIR = '/assets/ietf-ftp/yang/invalmod/'
 SUBMIT_YANG_IANA_MODEL_DIR = '/assets/ietf-ftp/yang/ianamod/'
 SUBMIT_YANG_RFC_MODEL_DIR   = '/assets/ietf-ftp/yang/rfcmod/'
 
diff --git a/dev/tests/settings_local.py b/dev/tests/settings_local.py
index 20941359d4..afadb3760b 100644
--- a/dev/tests/settings_local.py
+++ b/dev/tests/settings_local.py
@@ -36,7 +36,6 @@
 
 SUBMIT_YANG_CATALOG_MODEL_DIR = '/assets/ietf-ftp/yang/catalogmod/'
 SUBMIT_YANG_DRAFT_MODEL_DIR = '/assets/ietf-ftp/yang/draftmod/'
-SUBMIT_YANG_INVAL_MODEL_DIR = '/assets/ietf-ftp/yang/invalmod/'
 SUBMIT_YANG_IANA_MODEL_DIR = '/assets/ietf-ftp/yang/ianamod/'
 SUBMIT_YANG_RFC_MODEL_DIR   = '/assets/ietf-ftp/yang/rfcmod/'
 
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index 5d9859c19b..a1c19c80cf 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -26,7 +26,6 @@
 
 SUBMIT_YANG_CATALOG_MODEL_DIR = '/assets/ietf-ftp/yang/catalogmod/'
 SUBMIT_YANG_DRAFT_MODEL_DIR = '/assets/ietf-ftp/yang/draftmod/'
-SUBMIT_YANG_INVAL_MODEL_DIR = '/assets/ietf-ftp/yang/invalmod/'
 SUBMIT_YANG_IANA_MODEL_DIR = '/assets/ietf-ftp/yang/ianamod/'
 SUBMIT_YANG_RFC_MODEL_DIR   = '/assets/ietf-ftp/yang/rfcmod/'
 

From 6f1c308ab3142a8f52df6d417767cb583d38a957 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 9 Dec 2024 14:56:09 -0400
Subject: [PATCH 192/707] chore: drop unused cf-connecting-ipv6 header (#8319)

Only used in certain configurations of Pseudo IPv4.
---
 ietf/utils/jsonlogger.py | 1 -
 k8s/nginx-logging.conf   | 1 -
 2 files changed, 2 deletions(-)

diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index 6502cab0cb..1fc453ad9e 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -29,7 +29,6 @@ def add_fields(self, log_record, record, message_dict):
         log_record.setdefault("x_forwarded_for", record.args["{x-forwarded-for}i"])
         log_record.setdefault("x_forwarded_proto", record.args["{x-forwarded-proto}i"])
         log_record.setdefault("cf_connecting_ip", record.args["{cf-connecting-ip}i"])
-        log_record.setdefault("cf_connecting_ipv6", record.args["{cf-connecting-ipv6}i"])
         log_record.setdefault("cf_ray", record.args["{cf-ray}i"])
         log_record.setdefault("asn", record.args["{x-ip-src-asnum}i"])
         log_record.setdefault("is_authenticated", record.args["{x-datatracker-is-authenticated}o"])
diff --git a/k8s/nginx-logging.conf b/k8s/nginx-logging.conf
index 0bc7deca81..673d7a29ab 100644
--- a/k8s/nginx-logging.conf
+++ b/k8s/nginx-logging.conf
@@ -17,7 +17,6 @@ log_format  ietfjson  escape=json
     '"x_forwarded_for":"$${keepempty}http_x_forwarded_for",'
     '"x_forwarded_proto":"$${keepempty}http_x_forwarded_proto",'
     '"cf_connecting_ip":"$${keepempty}http_cf_connecting_ip",'
-    '"cf_connecting_ipv6":"$${keepempty}http_cf_connecting_ipv6",'
     '"cf_ray":"$${keepempty}http_cf_ray",'
     '"asn":"$${keepempty}http_x_ip_src_asnum"'
   '}';

From 8e325829a36515344800ef64b850f1a5af2f5160 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 10 Dec 2024 09:57:08 -0600
Subject: [PATCH 193/707] chore: pin django-oidc-provider until we can adapt to
 changes in 0.8.3 (#8320)

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index f974113d8f..66397091ad 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ django-csp>=3.7
 django-cors-headers>=3.11.0
 django-debug-toolbar>=3.2.4
 django-markup>=1.5    # Limited use - need to reconcile against direct use of markdown
-django-oidc-provider>=0.8.1    # 0.8 dropped Django 2 support
+django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
 django-referrer-policy>=1.0
 django-simple-history>=3.0.0
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below

From 6b77807c05145230c337809322ffa96606c140fd Mon Sep 17 00:00:00 2001
From: rjsparks <rjsparks@users.noreply.github.com>
Date: Tue, 10 Dec 2024 16:08:48 +0000
Subject: [PATCH 194/707] ci: update base image target version to 20241210T1557

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 7af27e7d13..bab7c1fab3 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241127T2054
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241210T1557
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index e4b05ed700..bca669bb51 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241127T2054
+20241210T1557

From 9b372a31b4c70a031bb20a1cb2ee8189551d01ce Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Dec 2024 13:40:49 -0400
Subject: [PATCH 195/707] chore: update import for python-json-logger (#8330)

The "jsonlogger" module became "json" in 3.1.0
---
 ietf/utils/jsonlogger.py | 4 ++--
 requirements.txt         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/utils/jsonlogger.py b/ietf/utils/jsonlogger.py
index 1fc453ad9e..589132977d 100644
--- a/ietf/utils/jsonlogger.py
+++ b/ietf/utils/jsonlogger.py
@@ -1,9 +1,9 @@
 # Copyright The IETF Trust 2024, All Rights Reserved
-from pythonjsonlogger import jsonlogger
+from pythonjsonlogger.json import JsonFormatter
 import time
 
 
-class DatatrackerJsonFormatter(jsonlogger.JsonFormatter):
+class DatatrackerJsonFormatter(JsonFormatter):
     converter = time.gmtime  # use UTC
     default_msec_format = "%s.%03d"  # '.' instead of ','
 
diff --git a/requirements.txt b/requirements.txt
index 66397091ad..ec5fc60b5f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -59,7 +59,7 @@ pyopenssl>=22.0.0    # Used by urllib3.contrib, which is used by PyQuery but not
 pyquery>=1.4.3
 python-dateutil>=2.8.2
 types-python-dateutil>=2.8.2
-python-json-logger>=2.0.7
+python-json-logger>=3.1.0
 python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
 pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=1.6    # from TastyPie

From a2f27d3d516e6914d947f013198bba2f19ece402 Mon Sep 17 00:00:00 2001
From: rjsparks <rjsparks@users.noreply.github.com>
Date: Thu, 12 Dec 2024 17:53:09 +0000
Subject: [PATCH 196/707] ci: update base image target version to 20241212T1741

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index bab7c1fab3..a923bf693f 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241210T1557
+FROM ghcr.io/ietf-tools/datatracker-app-base:20241212T1741
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index bca669bb51..b5d33714f2 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241210T1557
+20241212T1741

From 70ab7112165ffa1e686649311bb14b51721d6f77 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Dec 2024 18:48:44 -0400
Subject: [PATCH 197/707] refactor: separate concerns / rename notify_events
 (#8328)

* refactor: separate signal receiver from work

* test: split test to match code structure

* test: fix test

* refactor: reorg signals in community app
---
 ietf/community/apps.py                        | 12 ++++
 ietf/community/models.py                      | 35 +---------
 ietf/community/signals.py                     | 44 ++++++++++++
 ietf/community/tests.py                       | 67 ++++++++++---------
 ietf/utils/management/commands/loadrelated.py |  4 +-
 5 files changed, 96 insertions(+), 66 deletions(-)
 create mode 100644 ietf/community/apps.py
 create mode 100644 ietf/community/signals.py

diff --git a/ietf/community/apps.py b/ietf/community/apps.py
new file mode 100644
index 0000000000..ab0a6d6054
--- /dev/null
+++ b/ietf/community/apps.py
@@ -0,0 +1,12 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.apps import AppConfig
+
+
+class CommunityConfig(AppConfig):
+    name = "ietf.community"
+
+    def ready(self):
+        """Initialize the app after the registry is populated"""
+        # implicitly connects @receiver-decorated signals
+        from . import signals  # pyflakes: ignore
diff --git a/ietf/community/models.py b/ietf/community/models.py
index 0407730107..6945918f9a 100644
--- a/ietf/community/models.py
+++ b/ietf/community/models.py
@@ -1,19 +1,14 @@
 # Copyright The IETF Trust 2012-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-
-from django.conf import settings
-from django.db import models, transaction
-from django.db.models import signals
+from django.db import models
 from django.urls import reverse as urlreverse
 
-from ietf.doc.models import Document, DocEvent, State
+from ietf.doc.models import Document, State
 from ietf.group.models import Group
 from ietf.person.models import Person, Email
 from ietf.utils.models import ForeignKey
 
-from .tasks import notify_event_to_subscribers_task
-
 
 class CommunityList(models.Model):
     person = ForeignKey(Person, blank=True, null=True)
@@ -98,29 +93,3 @@ class EmailSubscription(models.Model):
 
     def __str__(self):
         return "%s to %s (%s changes)" % (self.email, self.community_list, self.notify_on)
-
-
-def notify_events(sender, instance, **kwargs):
-    if not isinstance(instance, DocEvent):
-        return
-
-    if not kwargs.get("created", False):
-        return  # only notify on creation
-
-    if instance.doc.type_id != 'draft':
-        return
-
-    if getattr(instance, "skip_community_list_notification", False):
-        return
-    
-    # kludge alert: queuing a celery task in response to a signal can cause unexpected attempts to
-    # start a Celery task during tests. To prevent this, don't queue a celery task if we're running
-    # tests.
-    if settings.SERVER_MODE != "test":
-        # Wrap in on_commit in case a transaction is open
-        transaction.on_commit(
-            lambda: notify_event_to_subscribers_task.delay(event_id=instance.pk)
-        )
-
-
-signals.post_save.connect(notify_events)
diff --git a/ietf/community/signals.py b/ietf/community/signals.py
new file mode 100644
index 0000000000..20ee761129
--- /dev/null
+++ b/ietf/community/signals.py
@@ -0,0 +1,44 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+from django.conf import settings
+from django.db import transaction
+from django.db.models.signals import post_save
+from django.dispatch import receiver
+
+from ietf.doc.models import DocEvent
+from .tasks import notify_event_to_subscribers_task
+
+
+def notify_of_event(event: DocEvent):
+    """Send subscriber notification emails for a 'draft'-related DocEvent
+
+    If the event is attached to a draft of type 'doc', queues a task to send notification emails to
+    community list subscribers. No emails will be sent when SERVER_MODE is 'test'.
+    """
+    if event.doc.type_id != "draft":
+        return
+
+    if getattr(event, "skip_community_list_notification", False):
+        return
+
+    # kludge alert: queuing a celery task in response to a signal can cause unexpected attempts to
+    # start a Celery task during tests. To prevent this, don't queue a celery task if we're running
+    # tests.
+    if settings.SERVER_MODE != "test":
+        # Wrap in on_commit in case a transaction is open
+        transaction.on_commit(
+            lambda: notify_event_to_subscribers_task.delay(event_id=event.pk)
+        )
+
+
+# dispatch_uid ensures only a single signal receiver binding is made
+@receiver(post_save, dispatch_uid="notify_of_events_receiver_uid")
+def notify_of_events_receiver(sender, instance, **kwargs):
+    """Call notify_of_event after saving a new DocEvent"""
+    if not isinstance(instance, DocEvent):
+        return
+
+    if not kwargs.get("created", False):
+        return  # only notify on creation
+
+    notify_of_event(instance)
diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 743242f11b..9bd7789958 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -1,7 +1,6 @@
 # Copyright The IETF Trust 2016-2023, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-
 import mock
 from pyquery import PyQuery
 
@@ -11,6 +10,7 @@
 import debug                            # pyflakes:ignore
 
 from ietf.community.models import CommunityList, SearchRule, EmailSubscription
+from ietf.community.signals import notify_of_event
 from ietf.community.utils import docs_matching_community_list_rule, community_list_rules_matching_doc
 from ietf.community.utils import reset_name_contains_index_for_rule, notify_event_to_subscribers
 from ietf.community.tasks import notify_event_to_subscribers_task
@@ -431,53 +431,58 @@ def test_subscription_for_group(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
-    # Mock out the on_commit call so we can tell whether the task was actually queued
-    @mock.patch("ietf.submit.views.transaction.on_commit", side_effect=lambda x: x())
-    @mock.patch("ietf.community.models.notify_event_to_subscribers_task")
-    def test_notification_signal_receiver(self, mock_notify_task, mock_on_commit):
-        """Saving a DocEvent should notify subscribers
+    @mock.patch("ietf.community.signals.notify_of_event")
+    def test_notification_signal_receiver(self, mock_notify_of_event):
+        """Saving a newly created DocEvent should notify subscribers
         
-        This implicitly tests that notify_events is hooked up to the post_save signal.
+        This implicitly tests that notify_of_event_receiver is hooked up to the post_save signal.
         """
         # Arbitrary model that's not a DocEvent
-        person = PersonFactory()
-        mock_notify_task.reset_mock()  # clear any calls that resulted from the factories
-        # be careful overriding SERVER_MODE - we do it here because the method
-        # under test does not make this call when in "test" mode
-        with override_settings(SERVER_MODE="not-test"):
-            person.save()
-        self.assertFalse(mock_notify_task.delay.called)
-        
+        person = PersonFactory.build()  # builds but does not save...
+        mock_notify_of_event.reset_mock()  # clear any calls that resulted from the factories
+        person.save()
+        self.assertFalse(mock_notify_of_event.called)
+    
         # build a DocEvent that is not yet persisted
         doc = DocumentFactory()
-        d = DocEventFactory.build(by=person, doc=doc)
-        # mock_notify_task.reset_mock()  # clear any calls that resulted from the factories
+        event = DocEventFactory.build(by=person, doc=doc)  # builds but does not save...
+        mock_notify_of_event.reset_mock()  # clear any calls that resulted from the factories
+        event.save()
+        self.assertEqual(mock_notify_of_event.call_count, 1, "notify_task should be run on creation of DocEvent")
+        self.assertEqual(mock_notify_of_event.call_args, mock.call(event))
+
+        # save the existing DocEvent and see that no notification is sent    
+        mock_notify_of_event.reset_mock()
+        event.save()
+        self.assertFalse(mock_notify_of_event.called, "notify_task should not be run save of on existing DocEvent")
+
+    # Mock out the on_commit call so we can tell whether the task was actually queued
+    @mock.patch("ietf.submit.views.transaction.on_commit", side_effect=lambda x: x())
+    @mock.patch("ietf.community.signals.notify_event_to_subscribers_task")
+    def test_notify_of_event(self, mock_notify_task, mock_on_commit):
+        """The community notification task should be called as intended"""
+        person = PersonFactory()  # builds but does not save...
+        doc = DocumentFactory()
+        event = DocEventFactory(by=person, doc=doc)
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
-            d.save()
-        self.assertEqual(mock_notify_task.delay.call_count, 1, "notify_task should be run on creation of DocEvent")
-        self.assertEqual(mock_notify_task.delay.call_args, mock.call(event_id = d.pk))
-        
-        mock_notify_task.reset_mock()
-        with override_settings(SERVER_MODE="not-test"):
-            d.save()
-        self.assertFalse(mock_notify_task.delay.called, "notify_task should not be run save of on existing DocEvent")
-        
+            notify_of_event(event)
+        self.assertTrue(mock_notify_task.delay.called, "notify_task should run for a DocEvent on a draft")
         mock_notify_task.reset_mock()
-        d = DocEventFactory.build(by=person, doc=doc)
-        d.skip_community_list_notification = True
+
+        event.skip_community_list_notification = True
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
-            d.save()
+            notify_of_event(event)
         self.assertFalse(mock_notify_task.delay.called, "notify_task should not run when skip_community_list_notification is set")
 
-        d = DocEventFactory.build(by=person, doc=DocumentFactory(type_id="rfc"))
+        event = DocEventFactory.build(by=person, doc=DocumentFactory(type_id="rfc"))
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
-            d.save()
+            notify_of_event(event)
         self.assertFalse(mock_notify_task.delay.called, "notify_task should not run on a document with type 'rfc'")
 
     @mock.patch("ietf.utils.mail.send_mail_text")
diff --git a/ietf/utils/management/commands/loadrelated.py b/ietf/utils/management/commands/loadrelated.py
index da9d00d5dc..d8ae19dc77 100644
--- a/ietf/utils/management/commands/loadrelated.py
+++ b/ietf/utils/management/commands/loadrelated.py
@@ -23,7 +23,7 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.community.models import notify_events
+from ietf.community.signals import notify_of_events_receiver
 
 class Command(loaddata.Command):
     help = ("""
@@ -62,7 +62,7 @@ def handle(self, *args, **options):
         #
         self.serialization_formats = serializers.get_public_serializer_formats()
         #
-        post_save.disconnect(notify_events)
+        post_save.disconnect(notify_of_events_receiver())
         #
         connection = connections[self.using]
         self.fixture_count = 0

From c747e972017142c81af5162207155ca31df7aeba Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 13 Dec 2024 11:48:19 -0600
Subject: [PATCH 198/707] fix: keep draft-iesg state on expiration. Update
 action holders. (#8321)

* fix: keep draft-iesg state on expiration. Update action holders

* feat: task to repair docs in dead because expiry

* fix: restore all to-date flows through update_action_holders

* fix: Fetch the System user following more regular conventions

* fix: better signal test
---
 ietf/doc/expire.py      | 62 +++++++++++++++++++++--------
 ietf/doc/tasks.py       |  6 +++
 ietf/doc/tests_draft.py | 86 ++++++++++++++++++++++++++++++++++++++---
 ietf/doc/tests_tasks.py |  7 ++++
 ietf/doc/utils.py       | 82 ++++++++++++++++++++++-----------------
 ietf/doc/views_draft.py |  3 +-
 6 files changed, 186 insertions(+), 60 deletions(-)

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 681ca963a3..0581c9a03f 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -3,6 +3,8 @@
 # expiry of Internet-Drafts
 
 
+import debug    # pyflakes:ignore
+
 from django.conf import settings
 from django.utils import timezone
 
@@ -11,12 +13,12 @@
 
 from typing import List, Optional      # pyflakes:ignore
 
+from ietf.doc.utils import new_state_change_event, update_action_holders
 from ietf.utils import log
 from ietf.utils.mail import send_mail
-from ietf.doc.models import Document, DocEvent, State, IESG_SUBSTATE_TAGS
+from ietf.doc.models import Document, DocEvent, State, StateDocEvent
 from ietf.person.models import Person 
 from ietf.meeting.models import Meeting
-from ietf.doc.utils import add_state_change_event, update_action_holders
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.utils.timezone import date_today, datetime_today, DEADLINE_TZINFO
 
@@ -161,24 +163,11 @@ def expire_draft(doc):
 
     events = []
 
-    # change the state
-    if doc.latest_event(type='started_iesg_process'):
-        new_state = State.objects.get(used=True, type="draft-iesg", slug="dead")
-        prev_state = doc.get_state(new_state.type_id)
-        prev_tags = doc.tags.filter(slug__in=IESG_SUBSTATE_TAGS)
-        if new_state != prev_state:
-            doc.set_state(new_state)
-            doc.tags.remove(*prev_tags)
-            e = add_state_change_event(doc, system, prev_state, new_state, prev_tags=prev_tags, new_tags=[])
-            if e:
-                events.append(e)
-            e = update_action_holders(doc, prev_state, new_state, prev_tags=prev_tags, new_tags=[])
-            if e:
-                events.append(e)
-
     events.append(DocEvent.objects.create(doc=doc, rev=doc.rev, by=system, type="expired_document", desc="Document has expired"))
 
+    prev_draft_state=doc.get_state("draft")
     doc.set_state(State.objects.get(used=True, type="draft", slug="expired"))
+    events.append(update_action_holders(doc, prev_draft_state, doc.get_state("draft"),[],[]))
     doc.save_with_history(events)
 
 def clean_up_draft_files():
@@ -238,3 +227,42 @@ def move_file_to(subdir):
         except Document.DoesNotExist:
             # All uses of this past 2014 seem related to major system failures.
             move_file_to("unknown_ids")
+
+
+def repair_dead_on_expire():
+    by = Person.objects.get(name="(System)")
+    id_exists = State.objects.get(type="draft-iesg", slug="idexists")
+    dead = State.objects.get(type="draft-iesg", slug="dead")
+    dead_drafts = Document.objects.filter(
+        states__type="draft-iesg", states__slug="dead", type_id="draft"
+    )
+    for d in dead_drafts:
+        dead_event = d.latest_event(
+            StateDocEvent, state_type="draft-iesg", state__slug="dead"
+        )
+        if dead_event is not None:
+            if d.docevent_set.filter(type="expired_document").exists():
+                closest_expiry = min(
+                    [
+                        abs(e.time - dead_event.time)
+                        for e in d.docevent_set.filter(type="expired_document")
+                    ]
+                )
+                if closest_expiry.total_seconds() < 60:
+                    d.set_state(id_exists)
+                    events = []
+                    e = DocEvent(
+                        doc=d,
+                        rev=d.rev,
+                        type="added_comment",
+                        by=by,
+                        desc="IESG Dead state was set due only to document expiry - changing IESG state to ID-Exists",
+                    )
+                    e.skip_community_list_notification = True
+                    e.save()
+                    events.append(e)
+                    e = new_state_change_event(d, by, dead, id_exists)
+                    e.skip_community_list_notification = True
+                    e.save()
+                    events.append(e)
+                    d.save_with_history(events)
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index f1de459dd8..b7f89e1f9b 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -18,6 +18,7 @@
     in_draft_expire_freeze,
     get_expired_drafts,
     expirable_drafts,
+    repair_dead_on_expire,
     send_expire_notice_for_draft,
     expire_draft,
     clean_up_draft_files,
@@ -61,6 +62,11 @@ def expire_ids_task():
         raise
 
 
+@shared_task
+def repair_dead_on_expire_task():
+    repair_dead_on_expire()
+
+
 @shared_task
 def notify_expirations_task(notify_days=14):
     for doc in get_soon_to_expire_drafts(notify_days):
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 09a7b38999..84959625c9 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -19,10 +19,10 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.doc.expire import get_expired_drafts, send_expire_notice_for_draft, expire_draft
-from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, WgDraftFactory, RgDraftFactory, DocEventFactory
+from ietf.doc.expire import expirable_drafts, get_expired_drafts, repair_dead_on_expire, send_expire_notice_for_draft, expire_draft
+from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, StateDocEventFactory, WgDraftFactory, RgDraftFactory, DocEventFactory
 from ietf.doc.models import ( Document, DocReminder, DocEvent,
-    ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, TelechatDocEvent, 
+    ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, StateDocEvent, TelechatDocEvent, 
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
 from ietf.doc.views_draft import AdoptDraftForm
@@ -36,7 +36,7 @@
 from ietf.utils.test_utils import login_testing_unauthorized
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
 from ietf.utils.test_utils import TestCase
-from ietf.utils.timezone import date_today, datetime_from_date, DEADLINE_TZINFO
+from ietf.utils.timezone import date_today, datetime_today, datetime_from_date, DEADLINE_TZINFO
 
 
 class ChangeStateTests(TestCase):
@@ -763,13 +763,16 @@ def test_expire_drafts(self):
         txt = "%s-%s.txt" % (draft.name, draft.rev)
         self.write_draft_file(txt, 5000)
 
+        self.assertFalse(expirable_drafts(Document.objects.filter(pk=draft.pk)).exists())
+        draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="idexists"))
+        self.assertTrue(expirable_drafts(Document.objects.filter(pk=draft.pk)).exists())
         expire_draft(draft)
 
         draft = Document.objects.get(name=draft.name)
         self.assertEqual(draft.get_state_slug(), "expired")
-        self.assertEqual(draft.get_state_slug("draft-iesg"), "dead")
+        self.assertEqual(draft.get_state_slug("draft-iesg"), "idexists")
         self.assertTrue(draft.latest_event(type="expired_document"))
-        self.assertCountEqual(draft.action_holders.all(), [])
+        self.assertEqual(draft.action_holders.count(), 0)
         self.assertIn('Removed all action holders', draft.latest_event(type='changed_action_holders').desc)
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
@@ -842,6 +845,77 @@ def test_clean_up_draft_files(self):
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
 
+    @mock.patch("ietf.community.signals.notify_of_event")
+    def test_repair_dead_on_expire(self, mock_notify):
+
+        # Create a draft in iesg idexists - ensure it doesn't get new docevents.
+        # Create a draft in iesg dead with no expires within the window - ensure it doesn't get new docevents and its state doesn't change.
+        # Create a draft in iesg dead with an expiry in the window - ensure it gets the right doc events, iesg state changes, draft state doesn't change.
+        last_year = datetime_today() - datetime.timedelta(days=365)
+
+        not_dead = WgDraftFactory(name="draft-not-dead")
+        not_dead_event_count = not_dead.docevent_set.count()
+
+        dead_not_from_expires = WgDraftFactory(name="draft-dead-not-from-expiring")
+        dead_not_from_expires.set_state(
+            State.objects.get(type="draft-iesg", slug="dead")
+        )
+        StateDocEventFactory(
+            doc=dead_not_from_expires, state=("draft-iesg", "dead"), time=last_year
+        )
+        DocEventFactory(
+            doc=dead_not_from_expires,
+            type="expired_document",
+            time=last_year + datetime.timedelta(days=1),
+        )
+        dead_not_from_expires_event_count = dead_not_from_expires.docevent_set.count()
+
+        dead_from_expires = []
+        dead_from_expires_event_count = dict()
+        for delta in [-5, 5]:
+            d = WgDraftFactory(
+                name=f"draft-dead-from-expiring-just-{'before' if delta<0 else 'after'}"
+            )
+            d.set_state(State.objects.get(type="draft-iesg", slug="dead"))
+            StateDocEventFactory(doc=d, state=("draft-iesg", "dead"), time=last_year)
+            DocEventFactory(
+                doc=d,
+                type="expired_document",
+                time=last_year + datetime.timedelta(seconds=delta),
+            )
+            dead_from_expires.append(d)
+            dead_from_expires_event_count[d] = d.docevent_set.count()
+
+        notified_during_factory_work = mock_notify.call_count
+        for call_args in mock_notify.call_args_list:
+            e = call_args.args[0]
+            self.assertTrue(isinstance(e,DocEvent))
+            self.assertFalse(hasattr(e,"skip_community_list_notification"))
+
+        repair_dead_on_expire()
+
+        self.assertEqual(not_dead.docevent_set.count(), not_dead_event_count)
+        self.assertEqual(
+            dead_not_from_expires.docevent_set.count(),
+            dead_not_from_expires_event_count,
+        )
+        for d in dead_from_expires:
+            self.assertEqual(
+                d.docevent_set.count(), dead_from_expires_event_count[d] + 2
+            )
+            self.assertIn(
+                "due only to document expiry", d.latest_event(type="added_comment").desc
+            )
+            self.assertEqual(
+                d.latest_event(StateDocEvent).desc,
+                "IESG state changed to <b>I-D Exists</b> from Dead",
+            )
+        self.assertEqual(mock_notify.call_count, 4+notified_during_factory_work)
+        for call_args in mock_notify.call_args_list[-4:]:
+            e = call_args.args[0]
+            self.assertTrue(isinstance(e,DocEvent))
+            self.assertTrue(hasattr(e,"skip_community_list_notification"))
+            self.assertTrue(e.skip_community_list_notification)
 
 class ExpireLastCallTests(TestCase):
     def test_expire_last_call(self):
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index b75f58656b..135b52f604 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -1,4 +1,6 @@
 # Copyright The IETF Trust 2024, All Rights Reserved
+
+import debug    # pyflakes:ignore
 import datetime
 import mock
 
@@ -19,6 +21,7 @@
     generate_idnits2_rfcs_obsoleted_task,
     generate_idnits2_rfc_status_task,
     notify_expirations_task,
+    repair_dead_on_expire_task,
 )
 
 class TaskTests(TestCase):
@@ -96,6 +99,10 @@ def test_expire_last_calls_task(self, mock_get_expired, mock_expire):
         self.assertEqual(mock_expire.call_args_list[1], mock.call(docs[1]))
         self.assertEqual(mock_expire.call_args_list[2], mock.call(docs[2]))
 
+    @mock.patch("ietf.doc.tasks.repair_dead_on_expire")
+    def test_repair_dead_on_expire_task(self, mock_repair):
+        repair_dead_on_expire_task()
+        self.assertEqual(mock_repair.call_count, 1)
 
 class Idnits2SupportTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['DERIVED_DIR']
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index b2bc0997b1..ff19dfbde6 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -491,8 +491,9 @@ def update_action_holders(doc, prev_state=None, new_state=None, prev_tags=None,
     
     Returns an event describing the change which should be passed to doc.save_with_history()
     
-    Only cares about draft-iesg state changes. Places where other state types are updated
-    may not call this method. If you add rules for updating action holders on other state
+    Only cares about draft-iesg state changes and draft expiration. 
+    Places where other state types are updated may not call this method. 
+    If you add rules for updating action holders on other state
     types, be sure this is called in the places that change that state.
     """
     # Should not call this with different state types
@@ -511,41 +512,50 @@ def update_action_holders(doc, prev_state=None, new_state=None, prev_tags=None,
     
     # Remember original list of action holders to later check if it changed
     prev_set = list(doc.action_holders.all())
-    
-    # Update the action holders. To get this right for people with more
-    # than one relationship to the document, do removals first, then adds.
-    # Remove outdated action holders
-    iesg_state_changed = (prev_state != new_state) and (getattr(new_state, "type_id", None) == "draft-iesg") 
-    if iesg_state_changed:
-        # Clear the action_holders list on a state change. This will reset the age of any that get added back.
+
+    if new_state and new_state.type_id=="draft" and new_state.slug=="expired":
         doc.action_holders.clear()
-    if tags.removed("need-rev"):
-        # Removed the 'need-rev' tag - drop authors from the action holders list
-        DocumentActionHolder.objects.filter(document=doc, person__in=doc.authors()).delete()
-    elif tags.added("need-rev"):
-        # Remove the AD if we're asking for a new revision
-        DocumentActionHolder.objects.filter(document=doc, person=doc.ad).delete()
-
-    # Add new action holders
-    if doc.ad:
-        # AD is an action holder unless specified otherwise for the new state
-        if iesg_state_changed and new_state.slug not in DocumentActionHolder.CLEAR_ACTION_HOLDERS_STATES:
-            doc.action_holders.add(doc.ad)
-        # If AD follow-up is needed, make sure they are an action holder 
-        if tags.added("ad-f-up"):
-            doc.action_holders.add(doc.ad)
-    # Authors get the action if a revision is needed
-    if tags.added("need-rev"):
-        for auth in doc.authors():
-            doc.action_holders.add(auth)
-
-    # Now create an event if we changed the set
-    return add_action_holder_change_event(
-        doc, 
-        Person.objects.get(name='(System)'), 
-        prev_set,
-        reason='IESG state changed',
-    )
+        return add_action_holder_change_event(
+            doc, 
+            Person.objects.get(name='(System)'), 
+            prev_set,
+            reason='draft expired',
+        )
+    else:
+        # Update the action holders. To get this right for people with more
+        # than one relationship to the document, do removals first, then adds.
+        # Remove outdated action holders
+        iesg_state_changed = (prev_state != new_state) and (getattr(new_state, "type_id", None) == "draft-iesg") 
+        if iesg_state_changed:
+            # Clear the action_holders list on a state change. This will reset the age of any that get added back.
+            doc.action_holders.clear()
+        if tags.removed("need-rev"):
+            # Removed the 'need-rev' tag - drop authors from the action holders list
+            DocumentActionHolder.objects.filter(document=doc, person__in=doc.authors()).delete()
+        elif tags.added("need-rev"):
+            # Remove the AD if we're asking for a new revision
+            DocumentActionHolder.objects.filter(document=doc, person=doc.ad).delete()
+
+        # Add new action holders
+        if doc.ad:
+            # AD is an action holder unless specified otherwise for the new state
+            if iesg_state_changed and new_state.slug not in DocumentActionHolder.CLEAR_ACTION_HOLDERS_STATES:
+                doc.action_holders.add(doc.ad)
+            # If AD follow-up is needed, make sure they are an action holder 
+            if tags.added("ad-f-up"):
+                doc.action_holders.add(doc.ad)
+        # Authors get the action if a revision is needed
+        if tags.added("need-rev"):
+            for auth in doc.authors():
+                doc.action_holders.add(auth)
+
+        # Now create an event if we changed the set
+        return add_action_holder_change_event(
+            doc, 
+            Person.objects.get(name='(System)'), 
+            prev_set,
+            reason='IESG state changed',
+        )
 
 
 def update_documentauthors(doc, new_docauthors, by=None, basis=None):
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index d709aedd42..34104b2005 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -95,7 +95,8 @@ def change_state(request, name):
     and logging the change as a comment."""
     doc = get_object_or_404(Document, name=name)
 
-    if (not doc.latest_event(type="started_iesg_process")) or doc.get_state_slug() == "expired":
+    # Steer ADs towards "Begin IESG Processing"
+    if doc.get_state_slug("draft-iesg")=="idexists" and not has_role(request.user,"Secretariat"):
         raise Http404
 
     login = request.user.person

From 981f7aea3e3641356de92207f2529622764e8828 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 13 Dec 2024 15:14:13 -0600
Subject: [PATCH 199/707] chore: remove unused setting (#8336)

---
 ietf/settings.py            | 1 -
 test/settings_local_test.py | 1 -
 2 files changed, 2 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 7c3dc7fa16..4e678b3808 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -750,7 +750,6 @@ def skip_unreadable_post(record):
 STATUS_CHANGE_PATH = '/a/ietfdata/doc/status-change'
 AGENDA_PATH = '/a/www/www6s/proceedings/'
 MEETINGHOST_LOGO_PATH = AGENDA_PATH  # put these in the same place as other proceedings files
-IPR_DOCUMENT_PATH = '/a/www/ietf-ftp/ietf/IPR/'
 # Move drafts to this directory when they expire
 INTERNET_DRAFT_ARCHIVE_DIR = '/a/ietfdata/doc/draft/collection/draft-archive/'
 # The following directory contains copies of all drafts - it used to be
diff --git a/test/settings_local_test.py b/test/settings_local_test.py
index 06d810e4af..7097f76459 100644
--- a/test/settings_local_test.py
+++ b/test/settings_local_test.py
@@ -5,6 +5,5 @@
 
 SERVER_MODE = 'test'
 
-IPR_DOCUMENT_PATH = '/home/ietf/adm/IPR/'
 
 SITE_ID = 1

From d59e102c9f57893a18d56246dc8a8e8fb5414f32 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 13 Dec 2024 15:17:01 -0600
Subject: [PATCH 200/707] fix: cleanup ftp copy of repository on move to
 archive (#8335)

---
 ietf/doc/expire.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 0581c9a03f..63955d091a 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -150,10 +150,17 @@ def move_file(f):
                     pass
                 else:
                     raise
+    
+    def remove_ftp_copy(f):
+        mark = Path(settings.FTP_DIR) / "internet-drafts" / f
+        if mark.exists():
+            mark.unlink()
+
 
     src_dir = Path(settings.INTERNET_DRAFT_PATH)
     for file in src_dir.glob("%s-%s.*" % (doc.name, rev)):
         move_file(str(file.name))
+        remove_ftp_copy(str(file.name))
 
 def expire_draft(doc):
     # clean up files

From 98b251487dfa685f0b318e6a02b47a84f6f65876 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Dec 2024 19:15:44 -0500
Subject: [PATCH 201/707] chore(deps): bump nanoid in /dev/deploy-to-container
 in the npm group (#8293)

Bumps the npm group in /dev/deploy-to-container with 1 update: [nanoid](https://github.com/ai/nanoid).


Updates `nanoid` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.0.8...5.0.9)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 14 +++++++-------
 dev/deploy-to-container/package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index d787f6aa9e..08b6eb6c62 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -8,7 +8,7 @@
       "dependencies": {
         "dockerode": "^4.0.2",
         "fs-extra": "^11.2.0",
-        "nanoid": "5.0.8",
+        "nanoid": "5.0.9",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
         "tar": "^7.4.3",
@@ -546,9 +546,9 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.0.8",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.8.tgz",
-      "integrity": "sha512-TcJPw+9RV9dibz1hHUzlLVy8N4X9TnwirAjrU08Juo6BNKggzVfP2ZJ/3ZUSq15Xl5i85i+Z89XBO90pB2PghQ==",
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.9.tgz",
+      "integrity": "sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==",
       "funding": [
         {
           "type": "github",
@@ -1346,9 +1346,9 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.0.8",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.8.tgz",
-      "integrity": "sha512-TcJPw+9RV9dibz1hHUzlLVy8N4X9TnwirAjrU08Juo6BNKggzVfP2ZJ/3ZUSq15Xl5i85i+Z89XBO90pB2PghQ=="
+      "version": "5.0.9",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.9.tgz",
+      "integrity": "sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q=="
     },
     "nanoid-dictionary": {
       "version": "5.0.0-beta.1",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 530d1f3b8b..8f16279cea 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -4,7 +4,7 @@
   "dependencies": {
     "dockerode": "^4.0.2",
     "fs-extra": "^11.2.0",
-    "nanoid": "5.0.8",
+    "nanoid": "5.0.9",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",
     "tar": "^7.4.3",

From 4a1d29e86ca7bf1d5fca42f1061769c5383ff859 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 16 Dec 2024 09:51:33 -0500
Subject: [PATCH 202/707] feat: add wiki button to agenda list for hackathon
 sessions (#8133)

* feat: add wiki button to agenda list for hackathon sessions

* fix: update client/agenda/AgendaScheduleList.vue

Co-authored-by: Matthew Holloway <matthew@holloway.co.nz>

* fix: broken tests

---------

Co-authored-by: Matthew Holloway <matthew@holloway.co.nz>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 client/agenda/AgendaScheduleList.vue    | 14 +++++++++++-
 client/shared/urls.json                 |  1 +
 ietf/templates/meeting/agenda.html      |  2 +-
 playwright/tests/meeting/agenda.spec.js | 30 ++++++++++++++++++-------
 4 files changed, 37 insertions(+), 10 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 0cac7e39ee..e7c14797ee 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -284,6 +284,7 @@ const meetingEvents = computed(() => {
     const purposesWithoutLinks = ['admin', 'closed_meeting', 'officehours', 'social']
     if (item.flags.showAgenda || (typesWithLinks.includes(item.type) && !purposesWithoutLinks.includes(item.purpose))) {
       if (item.flags.agenda) {
+        // -> Meeting Materials
         links.push({
           id: `lnk-${item.id}-tar`,
           label: 'Download meeting materials as .tar archive',
@@ -305,7 +306,18 @@ const meetingEvents = computed(() => {
           color: 'red'
         })
       }
-      if (agendaStore.usesNotes) {
+      // -> Point to Wiki for Hackathon sessions, HedgeDocs otherwise
+      if (item.name.toLowerCase().includes('hackathon')) {
+        links.push({
+          id: `lnk-${item.id}-wiki`,
+          label: 'Wiki',
+          icon: 'book',
+          href: getUrl('hackathonWiki', {
+            meetingNumber: agendaStore.meeting.number
+          }),
+          color: 'blue'
+        })
+      } else if (agendaStore.usesNotes) {
         links.push({
           id: `lnk-${item.id}-note`,
           label: 'Notepad for note-takers',
diff --git a/client/shared/urls.json b/client/shared/urls.json
index 285caa07d2..15410d68df 100644
--- a/client/shared/urls.json
+++ b/client/shared/urls.json
@@ -1,5 +1,6 @@
 {
   "bofDefinition": "https://www.ietf.org/how/bofs/",
+  "hackathonWiki": "https://wiki.ietf.org/meeting/{meetingNumber}/hackathon",
   "meetingCalIcs": "/meeting/{meetingNumber}/agenda.ics",
   "meetingDetails": "/meeting/{meetingNumber}/session/{eventAcronym}/",
   "meetingMaterialsPdf": "/meeting/{meetingNumber}/agenda/{eventAcronym}-drafts.pdf",
diff --git a/ietf/templates/meeting/agenda.html b/ietf/templates/meeting/agenda.html
index f3228aa5ad..089141bde8 100644
--- a/ietf/templates/meeting/agenda.html
+++ b/ietf/templates/meeting/agenda.html
@@ -101,7 +101,7 @@
     <div id="app"></div>
     <div id="app-loading">
         <div id="app-loading-footer">
-            <a class="btn btn-light text-body-secondary mb-3" href="/meeting/{{ meetingData.meetingNumber }}/agenda.txt"><small>Switch to text-only version &#11166;</small></a>
+            <a class="btn btn-light text-body-secondary mb-3" href="/meeting/{{ meetingData.meetingNumber }}/agenda.txt"><small>Switch to text-only version &raquo;</small></a>
         </div>
     </div>
 {% endblock %}
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index 109e1b3b81..d31dbd5c2c 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -286,10 +286,17 @@ test.describe('past - desktop', () => {
               // No meeting materials yet warning badge
               await expect(eventButtons.locator('.no-meeting-materials')).toBeVisible()
             }
-            // Notepad button
-            const hedgeDocLink = `https://notes.ietf.org/notes-ietf-${meetingData.meeting.number}-${event.type === 'plenary' ? 'plenary' : event.acronym}`
-            await expect(eventButtons.locator(`#btn-lnk-${event.id}-note`)).toHaveAttribute('href', hedgeDocLink)
-            await expect(eventButtons.locator(`#btn-lnk-${event.id}-note > i.bi`)).toBeVisible()
+            if (event.name.toLowerCase().includes('hackathon')) {
+              // Hackathon Wiki button
+              const hackathonWikiLink = `https://wiki.ietf.org/meeting/${meetingData.meeting.number}/hackathon`
+              await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki`)).toHaveAttribute('href', hackathonWikiLink)
+              await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki > i.bi`)).toBeVisible()
+            } else {
+              // Notepad button
+              const hedgeDocLink = `https://notes.ietf.org/notes-ietf-${meetingData.meeting.number}-${event.type === 'plenary' ? 'plenary' : event.acronym}`
+              await expect(eventButtons.locator(`#btn-lnk-${event.id}-note`)).toHaveAttribute('href', hedgeDocLink)
+              await expect(eventButtons.locator(`#btn-lnk-${event.id}-note > i.bi`)).toBeVisible()
+            }
             // Chat logs
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-logs`)).toHaveAttribute('href', event.links.chatArchive)
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-logs > i.bi`)).toBeVisible()
@@ -1162,10 +1169,17 @@ test.describe('future - desktop', () => {
             // No meeting materials yet warning badge
             await expect(eventButtons.locator('.no-meeting-materials')).toBeVisible()
           }
-          // Notepad button
-          const hedgeDocLink = `https://notes.ietf.org/notes-ietf-${meetingData.meeting.number}-${event.type === 'plenary' ? 'plenary' : event.acronym}`
-          await expect(eventButtons.locator(`#btn-lnk-${event.id}-note`)).toHaveAttribute('href', hedgeDocLink)
-          await expect(eventButtons.locator(`#btn-lnk-${event.id}-note > i.bi`)).toBeVisible()
+          if (event.name.toLowerCase().includes('hackathon')) {
+            // Hackathon Wiki button
+            const hackathonWikiLink = `https://wiki.ietf.org/meeting/${meetingData.meeting.number}/hackathon`
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki`)).toHaveAttribute('href', hackathonWikiLink)
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki > i.bi`)).toBeVisible()
+          } else {
+            // Notepad button
+            const hedgeDocLink = `https://notes.ietf.org/notes-ietf-${meetingData.meeting.number}-${event.type === 'plenary' ? 'plenary' : event.acronym}`
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-note`)).toHaveAttribute('href', hedgeDocLink)
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-note > i.bi`)).toBeVisible()
+          }
           // Chat room
           await expect(eventButtons.locator(`#btn-lnk-${event.id}-room`)).toHaveAttribute('href', event.links.chat)
           await expect(eventButtons.locator(`#btn-lnk-${event.id}-room > i.bi`)).toBeVisible()

From 171e50b1cd2f57bd9c4b099e1d33e3444d127834 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 17 Dec 2024 11:08:35 -0500
Subject: [PATCH 203/707] fix: homepage logo width (#8338)

* fix: homepage logo width

* fix: make Robert happy
---
 ietf/static/css/ietf.scss | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index e2d5cb3959..f1f2b94a19 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -236,9 +236,13 @@ th,
 
 // Helper to constrain the size of the main logo
 .ietflogo {
-    width: 75%;
+    width: 100%;
     max-width: 300px;
 }
+.ietflogo > img {
+    min-width: 100px;
+    width: 100%;
+}
 
 // Make revision numbers pagination items fixed-width
 .revision-list {

From 427045d45687f242228ed830b51a5c21dc005eb4 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 17 Dec 2024 15:09:44 -0400
Subject: [PATCH 204/707] chore: remove unused method (#8341)

* chore: remove unused method

* chore: adjust another comment
---
 ietf/submit/utils.py | 69 ++------------------------------------------
 1 file changed, 2 insertions(+), 67 deletions(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index e6cbcb12f7..5906785048 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -770,70 +770,6 @@ def save_files(form):
         log.log("saved file %s" % name)
     return file_name
 
-def get_draft_meta(form, saved_files):
-    authors = []
-    file_name = saved_files
-
-    if form.cleaned_data['xml']:
-        # Some meta-information, such as the page-count, can only
-        # be retrieved from the generated text file.  Provide a
-        # parsed draft object to get at that kind of information.
-        file_name['txt'] = os.path.join(settings.IDSUBMIT_STAGING_PATH, '%s-%s.txt' % (form.filename, form.revision))
-        file_size = os.stat(file_name['txt']).st_size
-        with io.open(file_name['txt']) as txt_file:
-            form.parsed_draft = PlaintextDraft(txt_file.read(), txt_file.name)
-    else:
-        file_size = form.cleaned_data['txt'].size
-
-    if form.authors:
-        authors = form.authors
-    else:
-        # If we don't have an xml file, try to extract the
-        # relevant information from the text file
-        for author in form.parsed_draft.get_author_list():
-            full_name, first_name, middle_initial, last_name, name_suffix, email, country, company = author
-
-            name = full_name.replace("\n", "").replace("\r", "").replace("<", "").replace(">", "").strip()
-
-            if email:
-                try:
-                    validate_email(email)
-                except ValidationError:
-                    email = ""
-
-            def turn_into_unicode(s):
-                if s is None:
-                    return ""
-
-                if isinstance(s, str):
-                    return s
-                else:
-                    try:
-                        return s.decode("utf-8")
-                    except UnicodeDecodeError:
-                        try:
-                            return s.decode("latin-1")
-                        except UnicodeDecodeError:
-                            return ""
-
-            name = turn_into_unicode(name)
-            email = turn_into_unicode(email)
-            company = turn_into_unicode(company)
-
-            authors.append({
-                "name": name,
-                "email": email,
-                "affiliation": company,
-                "country": country
-            })
-
-    if form.abstract:
-        abstract = form.abstract
-    else:
-        abstract = form.parsed_draft.get_abstract()
-
-    return authors, abstract, file_name, file_size
-
 
 def get_submission(form):
     # See if there is a Submission in state waiting-for-draft
@@ -1272,8 +1208,7 @@ def process_submission_xml(filename, revision):
 def _turn_into_unicode(s: Optional[Union[str, bytes]]):
     """Decode a possibly null string-like item as a string
     
-    Copied from ietf.submit.utils.get_draft_meta(), would be nice to
-    ditch this.
+    Would be nice to ditch this.
     """
     if s is None:
         return ""
@@ -1317,7 +1252,7 @@ def process_submission_text(filename, revision):
     if title:
         title = _normalize_title(title)
 
-    # Drops \r, \n, <, >. Based on get_draft_meta() behavior
+    # Translation taable drops \r, \n, <, >.
     trans_table = str.maketrans("", "", "\r\n<>")
     authors = [
         {

From fdd378390f60ee666d47815940a7cede38d23dc1 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 19 Dec 2024 12:06:38 -0600
Subject: [PATCH 205/707] feat: copy the 1wg files to so... many... places...
 (#8347)

---
 ietf/group/tasks.py      | 35 ++++++++++++++++++++---------------
 ietf/group/tests_info.py |  2 ++
 ietf/settings.py         |  2 ++
 3 files changed, 24 insertions(+), 15 deletions(-)

diff --git a/ietf/group/tasks.py b/ietf/group/tasks.py
index f19246fb55..8b4c994ba1 100644
--- a/ietf/group/tasks.py
+++ b/ietf/group/tasks.py
@@ -43,23 +43,28 @@ def generate_wg_charters_files_task():
         encoding="utf8",
     )
 
-    charter_copy_dest = getattr(settings, "CHARTER_COPY_PATH", None)
-    if charter_copy_dest is not None:
-        if not Path(charter_copy_dest).is_dir():
-            log.log(
-                f"Error copying 1wg-charter files to {charter_copy_dest}: it does not exist or is not a directory"
-            )
-        else:
-            try:
-                shutil.copy2(charters_file, charter_copy_dest)
-            except IOError as err:
-                log.log(f"Error copying {charters_file} to {charter_copy_dest}: {err}")
-            try:
-                shutil.copy2(charters_by_acronym_file, charter_copy_dest)
-            except IOError as err:
+    charter_copy_dests = [
+        getattr(settings, "CHARTER_COPY_PATH", None), 
+        getattr(settings, "CHARTER_COPY_OTHER_PATH", None),
+        getattr(settings, "CHARTER_COPY_THIRD_PATH", None),
+    ]
+    for charter_copy_dest in charter_copy_dests:
+        if charter_copy_dest is not None:
+            if not Path(charter_copy_dest).is_dir():
                 log.log(
-                    f"Error copying {charters_by_acronym_file} to {charter_copy_dest}: {err}"
+                    f"Error copying 1wg-charter files to {charter_copy_dest}: it does not exist or is not a directory"
                 )
+            else:
+                try:
+                    shutil.copy2(charters_file, charter_copy_dest)
+                except IOError as err:
+                    log.log(f"Error copying {charters_file} to {charter_copy_dest}: {err}")
+                try:
+                    shutil.copy2(charters_by_acronym_file, charter_copy_dest)
+                except IOError as err:
+                    log.log(
+                        f"Error copying {charters_by_acronym_file} to {charter_copy_dest}: {err}"
+                    )
 
 
 @shared_task
diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 35c8b2b0b7..32d919c779 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -62,6 +62,8 @@ class GroupPagesTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + [
         "CHARTER_PATH",
         "CHARTER_COPY_PATH",
+        "CHARTER_COPY_OTHER_PATH", # Note: not explicitly testing use of 
+        "CHARTER_COPY_THIRD_PATH", #       either of these settings
         "GROUP_SUMMARY_PATH",
     ]
 
diff --git a/ietf/settings.py b/ietf/settings.py
index 4e678b3808..efd04c6068 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -744,6 +744,8 @@ def skip_unreadable_post(record):
 RFC_PATH = '/a/www/ietf-ftp/rfc/'
 CHARTER_PATH = '/a/ietfdata/doc/charter/'
 CHARTER_COPY_PATH = '/a/www/ietf-ftp/ietf'  # copy 1wg-charters files here if set
+CHARTER_COPY_OTHER_PATH = '/a/www/ftp/ietf'
+CHARTER_COPY_THIRD_PATH = '/a/www/ftp/charter'
 GROUP_SUMMARY_PATH = '/a/www/ietf-ftp/ietf'
 BOFREQ_PATH = '/a/ietfdata/doc/bofreq/'
 CONFLICT_REVIEW_PATH = '/a/ietfdata/doc/conflict-review'

From d25af5e71bcb75b4b4ba61d41c3e7655b9975a57 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 19 Dec 2024 18:01:33 -0600
Subject: [PATCH 206/707] fix: clean ftp copy of repository when cleaning
 repository (#8354)

---
 ietf/doc/expire.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 63955d091a..57af2ad91f 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -213,11 +213,11 @@ def splitext(fn):
 
         def move_file_to(subdir):
             # Similar to move_draft_files_to_archive
-            # ghostlinkd would keep this in the combined all archive since it would
-            # be sourced from a different place. But when ghostlinkd is removed, nothing
-            # new is needed here - the file will already exist in the combined archive
             shutil.move(path,
                         os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, subdir, basename))
+            mark = Path(settings.FTP_DIR) / "internet-drafts" / basename
+            if mark.exists():
+                mark.unlink()
 
         try:
             doc = Document.objects.get(name=filename, rev=revision)

From 8cadc6988f1bb815c2d35578b146ddc2c1daea6a Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 20 Dec 2024 08:50:53 -0600
Subject: [PATCH 207/707] chore: remove obviated manual INSTALL instructions
 (#8355)

---
 dev/INSTALL | 157 ----------------------------------------------------
 1 file changed, 157 deletions(-)
 delete mode 100644 dev/INSTALL

diff --git a/dev/INSTALL b/dev/INSTALL
deleted file mode 100644
index 9a8004010d..0000000000
--- a/dev/INSTALL
+++ /dev/null
@@ -1,157 +0,0 @@
-==============================================================================
-			       IETF Datatracker
-==============================================================================
-
-------------------------------------------------------------------------------
-     Installation Instructions
-------------------------------------------------------------------------------
-
-General Instructions for Deployment of a New Release
-====================================================
-
- 0. Prepare to hold different roles at different stages of the instructions below.
-    You will need to be root, wwwrun, and some user in group docker. 
-    Consider using separate shells for the wwwrun and other roles. These instructions 
-    are written assuming you will only use one shell.
-
- 1. Make a directory to hold the new release as wwwrun::
-      sudo su - -s /bin/bash wwwrun
-      mkdir /a/www/ietf-datatracker/${releasenumber}
-      cd /a/www/ietf-datatracker/${releasenumber}
-
- 2. Fetch the release tarball from github 
-    (see https://github.com/ietf-tools/datatracker/releases)::
-
-      wget https://github.com/ietf-tools/datatracker/releases/download/${releasenumber}/release.tar.gz
-      tar xzvf release.tar.gz
-  
- 3. Copy ietf/settings_local.py from previous release::
-
-      cp ../web/ietf/settings_local.py ietf/
-
- 4. Setup a new virtual environment and install requirements::
-
-      python3.9 -mvenv env
-      source env/bin/activate
-      pip install -r requirements.txt
-      pip freeze > frozen-requirements.txt
-
-    (The pip freeze command records the exact versions of the Python libraries that pip installed.
-     This is used by the celery docker container to ensure it uses the same library versions as
-     the datatracker service.)
-
- 5. Move static files into place for CDN (/a/www/www6s/lib/dt):
-
-      ietf/manage.py collectstatic
-
- 6. Run system checks (which patches the just installed modules)::
-
-      ietf/manage.py check
-
- 7. Switch to the docker directory and update images as a user in group docker:
-
-      exit
-      cd /a/docker/datatracker
-      docker image tag ghcr.io/ietf-tools/datatracker-celery:latest datatracker-celery-fallback
-      docker image tag ghcr.io/ietf-tools/datatracker-mq:latest datatracker-mq-fallback
-      docker-compose pull
-
- 8. Stop and remove the async task containers:
-    Wait for this to finish cleanly. Usually this will only be a few seconds, but it may take up 
-    to about 10 minutes for the 'down' command to complete if a long-running task is in progress.
-
-      docker-compose down
-
- 9. Stop the datatracker and remove the web link so cron or other applications 
-    don't run code in the older deployment. 
-
-      sudo systemctl stop datatracker.socket datatracker.service
-      rm /a/www/ietf-datatracker/web
-
- 10. Return to the release directory and run migrations as wwwrun:
-
-      sudo su - -s /bin/bash wwwrun
-      cd /a/www/ietf-datatracker/${releasenumber}
-      ietf/manage.py migrate
-
-      Take note if any migrations were executed.
- 
- 11. Back out one directory level, then re-point the 'web' symlink::
-
-      cd ..
-      ln -s ${releasenumber} web
-
- 12. Start the datatracker service (it is no longer necessary to restart apache) ::
-
-      exit 
-      sudo systemctl start datatracker.service datatracker.socket
-
- 13. Start async task worker and message broker:
-
-      cd /a/docker/datatracker
-      bash startcommand
-
- 14. Verify operation:
-
-      http://datatracker.ietf.org/
-
- 15. If install failed and there were no migrations at step 9, revert web symlink and docker update and repeat the
-     restart in steps 11 and 12. To revert the docker update:
-
-          cd /a/docker/datatracker
-          docker-compose down
-          docker image rm ghcr.io/ietf-tools/datatracker-celery:latest ghcr.io/ietf-tools/datatracker-mq:latest
-          docker image tag datatracker-celery-fallback ghcr.io/ietf-tools/datatracker-celery:latest
-          docker image tag datatracker-mq-fallback ghcr.io/ietf-tools/datatracker-mq:latest
-          cd -
-
-     If there were migrations at step 10, they will need to be reversed before the restart at step 12.
-     If it's not obvious what to do to reverse the migrations, contact the dev team.
-
- 
-Patching a Production Release
-=============================
-
-Sometimes it can prove necessary to patch an existing release.
-The following process should be used:
-
- 1. Code and test the patch on an copy of the release with any
-    previously applied patches put in place.
-
- 2. Produce a patch file, named with date and subject::
-
-      $ git diff > 2013-03-25-ballot-calculation.patch
-
- 3. Move the patch file to the production server, and place it in 
-    '/a/www/ietf-datatracker/patches/'
-
- 4. Make a recursive copy of the production code to a new directory, named with a patch number.  
-
-      /a/www/ietf-datatracker $ rsync -a web/ ${releasenumber}.p1/
-
- 5. Apply the patch::
-
-      /a/www/ietf-datatracker $ cd ${releasenumber}.p1/      
-      /a/www/ietf-datatracker/${releasnumber}.p1 $ patch -p1 \
-			< ../patches/2013-03-25-ballot-calculation.patch
-
-    This must not produce any messages about failing to apply any chunks;
-    if it does, go back to 1. and figure out why.
-
- 6. Edit ``.../ietf/__init__.py`` in the new patched release to indicate the patch
-    version in the ``__patch__`` string.
-
- 7. Stop the async task container (this may take a few minutes if tasks are in progress):
-
-      cd /a/docker/datatracker
-      docker-compose down
-
- 8. Change the 'web' symlink, reload etc. as described in
-    `General Instructions for Deployment of a New Release`_.
-
- 9. Start async task worker:
-
-      cd /a/docker/datatracker
-      bash startcommand
-
-

From 8b7fa1199a72133fd3dd87d148a48cf08ad033e8 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 20 Dec 2024 08:53:12 -0600
Subject: [PATCH 208/707] chore: remove single-use repair_dead_on_expire task
 (#8348)

* chore: remove single-use repair_dead_on_expire task

* fix: remove repair_dead_on_expire

* chore: remove abandoned imports
---
 ietf/doc/expire.py      | 42 ++--------------------
 ietf/doc/tasks.py       |  6 ----
 ietf/doc/tests_draft.py | 79 +++--------------------------------------
 ietf/doc/tests_tasks.py |  5 ---
 4 files changed, 6 insertions(+), 126 deletions(-)

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 57af2ad91f..98554bae0e 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -13,10 +13,10 @@
 
 from typing import List, Optional      # pyflakes:ignore
 
-from ietf.doc.utils import new_state_change_event, update_action_holders
+from ietf.doc.utils import update_action_holders
 from ietf.utils import log
 from ietf.utils.mail import send_mail
-from ietf.doc.models import Document, DocEvent, State, StateDocEvent
+from ietf.doc.models import Document, DocEvent, State
 from ietf.person.models import Person 
 from ietf.meeting.models import Meeting
 from ietf.mailtrigger.utils import gather_address_lists
@@ -235,41 +235,3 @@ def move_file_to(subdir):
             # All uses of this past 2014 seem related to major system failures.
             move_file_to("unknown_ids")
 
-
-def repair_dead_on_expire():
-    by = Person.objects.get(name="(System)")
-    id_exists = State.objects.get(type="draft-iesg", slug="idexists")
-    dead = State.objects.get(type="draft-iesg", slug="dead")
-    dead_drafts = Document.objects.filter(
-        states__type="draft-iesg", states__slug="dead", type_id="draft"
-    )
-    for d in dead_drafts:
-        dead_event = d.latest_event(
-            StateDocEvent, state_type="draft-iesg", state__slug="dead"
-        )
-        if dead_event is not None:
-            if d.docevent_set.filter(type="expired_document").exists():
-                closest_expiry = min(
-                    [
-                        abs(e.time - dead_event.time)
-                        for e in d.docevent_set.filter(type="expired_document")
-                    ]
-                )
-                if closest_expiry.total_seconds() < 60:
-                    d.set_state(id_exists)
-                    events = []
-                    e = DocEvent(
-                        doc=d,
-                        rev=d.rev,
-                        type="added_comment",
-                        by=by,
-                        desc="IESG Dead state was set due only to document expiry - changing IESG state to ID-Exists",
-                    )
-                    e.skip_community_list_notification = True
-                    e.save()
-                    events.append(e)
-                    e = new_state_change_event(d, by, dead, id_exists)
-                    e.skip_community_list_notification = True
-                    e.save()
-                    events.append(e)
-                    d.save_with_history(events)
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index b7f89e1f9b..f1de459dd8 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -18,7 +18,6 @@
     in_draft_expire_freeze,
     get_expired_drafts,
     expirable_drafts,
-    repair_dead_on_expire,
     send_expire_notice_for_draft,
     expire_draft,
     clean_up_draft_files,
@@ -62,11 +61,6 @@ def expire_ids_task():
         raise
 
 
-@shared_task
-def repair_dead_on_expire_task():
-    repair_dead_on_expire()
-
-
 @shared_task
 def notify_expirations_task(notify_days=14):
     for doc in get_soon_to_expire_drafts(notify_days):
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 84959625c9..2405806682 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -19,10 +19,10 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.doc.expire import expirable_drafts, get_expired_drafts, repair_dead_on_expire, send_expire_notice_for_draft, expire_draft
-from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, StateDocEventFactory, WgDraftFactory, RgDraftFactory, DocEventFactory
+from ietf.doc.expire import expirable_drafts, get_expired_drafts, send_expire_notice_for_draft, expire_draft
+from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, WgDraftFactory, RgDraftFactory, DocEventFactory
 from ietf.doc.models import ( Document, DocReminder, DocEvent,
-    ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, StateDocEvent, TelechatDocEvent, 
+    ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, TelechatDocEvent, 
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
 from ietf.doc.views_draft import AdoptDraftForm
@@ -36,7 +36,7 @@
 from ietf.utils.test_utils import login_testing_unauthorized
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
 from ietf.utils.test_utils import TestCase
-from ietf.utils.timezone import date_today, datetime_today, datetime_from_date, DEADLINE_TZINFO
+from ietf.utils.timezone import date_today, datetime_from_date, DEADLINE_TZINFO
 
 
 class ChangeStateTests(TestCase):
@@ -845,77 +845,6 @@ def test_clean_up_draft_files(self):
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
 
-    @mock.patch("ietf.community.signals.notify_of_event")
-    def test_repair_dead_on_expire(self, mock_notify):
-
-        # Create a draft in iesg idexists - ensure it doesn't get new docevents.
-        # Create a draft in iesg dead with no expires within the window - ensure it doesn't get new docevents and its state doesn't change.
-        # Create a draft in iesg dead with an expiry in the window - ensure it gets the right doc events, iesg state changes, draft state doesn't change.
-        last_year = datetime_today() - datetime.timedelta(days=365)
-
-        not_dead = WgDraftFactory(name="draft-not-dead")
-        not_dead_event_count = not_dead.docevent_set.count()
-
-        dead_not_from_expires = WgDraftFactory(name="draft-dead-not-from-expiring")
-        dead_not_from_expires.set_state(
-            State.objects.get(type="draft-iesg", slug="dead")
-        )
-        StateDocEventFactory(
-            doc=dead_not_from_expires, state=("draft-iesg", "dead"), time=last_year
-        )
-        DocEventFactory(
-            doc=dead_not_from_expires,
-            type="expired_document",
-            time=last_year + datetime.timedelta(days=1),
-        )
-        dead_not_from_expires_event_count = dead_not_from_expires.docevent_set.count()
-
-        dead_from_expires = []
-        dead_from_expires_event_count = dict()
-        for delta in [-5, 5]:
-            d = WgDraftFactory(
-                name=f"draft-dead-from-expiring-just-{'before' if delta<0 else 'after'}"
-            )
-            d.set_state(State.objects.get(type="draft-iesg", slug="dead"))
-            StateDocEventFactory(doc=d, state=("draft-iesg", "dead"), time=last_year)
-            DocEventFactory(
-                doc=d,
-                type="expired_document",
-                time=last_year + datetime.timedelta(seconds=delta),
-            )
-            dead_from_expires.append(d)
-            dead_from_expires_event_count[d] = d.docevent_set.count()
-
-        notified_during_factory_work = mock_notify.call_count
-        for call_args in mock_notify.call_args_list:
-            e = call_args.args[0]
-            self.assertTrue(isinstance(e,DocEvent))
-            self.assertFalse(hasattr(e,"skip_community_list_notification"))
-
-        repair_dead_on_expire()
-
-        self.assertEqual(not_dead.docevent_set.count(), not_dead_event_count)
-        self.assertEqual(
-            dead_not_from_expires.docevent_set.count(),
-            dead_not_from_expires_event_count,
-        )
-        for d in dead_from_expires:
-            self.assertEqual(
-                d.docevent_set.count(), dead_from_expires_event_count[d] + 2
-            )
-            self.assertIn(
-                "due only to document expiry", d.latest_event(type="added_comment").desc
-            )
-            self.assertEqual(
-                d.latest_event(StateDocEvent).desc,
-                "IESG state changed to <b>I-D Exists</b> from Dead",
-            )
-        self.assertEqual(mock_notify.call_count, 4+notified_during_factory_work)
-        for call_args in mock_notify.call_args_list[-4:]:
-            e = call_args.args[0]
-            self.assertTrue(isinstance(e,DocEvent))
-            self.assertTrue(hasattr(e,"skip_community_list_notification"))
-            self.assertTrue(e.skip_community_list_notification)
 
 class ExpireLastCallTests(TestCase):
     def test_expire_last_call(self):
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 135b52f604..67997acd85 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -21,7 +21,6 @@
     generate_idnits2_rfcs_obsoleted_task,
     generate_idnits2_rfc_status_task,
     notify_expirations_task,
-    repair_dead_on_expire_task,
 )
 
 class TaskTests(TestCase):
@@ -99,10 +98,6 @@ def test_expire_last_calls_task(self, mock_get_expired, mock_expire):
         self.assertEqual(mock_expire.call_args_list[1], mock.call(docs[1]))
         self.assertEqual(mock_expire.call_args_list[2], mock.call(docs[2]))
 
-    @mock.patch("ietf.doc.tasks.repair_dead_on_expire")
-    def test_repair_dead_on_expire_task(self, mock_repair):
-        repair_dead_on_expire_task()
-        self.assertEqual(mock_repair.call_count, 1)
 
 class Idnits2SupportTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['DERIVED_DIR']

From 7d464fcc558a0e03a535e23bb0dd01f6e7a8dabd Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 9 Jan 2025 11:23:20 -0600
Subject: [PATCH 209/707] fix: keep the ftp dir in sync when the datatracker
 creates artifacts (#8401)

* chore: fix typo in log message

* fix: write new conflict reviews to the ftp directory

* fix: log exception description

* chore: avoid reusing a name for mypy

* fix: write non-meeting-related slides to ftp/slides

* fix: write status changes to ftp dir

* fix: copy draft yang modules to the ftp dir

the last commit above (see #8401) has no tests :(. There aren't tests of this yang scaffolding to add to. Adding a set of tests should be an independent larger effort.
---
 ietf/doc/tests_conflict_review.py | 14 +++++++++++---
 ietf/doc/tests_material.py        | 13 +++++++++++--
 ietf/doc/tests_status_change.py   | 17 +++++++++++++----
 ietf/doc/utils_charter.py         |  6 +++---
 ietf/doc/views_conflict_review.py | 14 ++++++++++++--
 ietf/doc/views_material.py        | 16 ++++++++++++++--
 ietf/doc/views_status_change.py   | 23 +++++++++++++++++------
 ietf/submit/checkers.py           | 10 ++++++++++
 ietf/submit/utils.py              |  4 ++++
 9 files changed, 95 insertions(+), 22 deletions(-)

diff --git a/ietf/doc/tests_conflict_review.py b/ietf/doc/tests_conflict_review.py
index 485f5655eb..d2f94922b2 100644
--- a/ietf/doc/tests_conflict_review.py
+++ b/ietf/doc/tests_conflict_review.py
@@ -4,6 +4,7 @@
 
 import io
 import os
+from pathlib import Path
 
 from pyquery import PyQuery
 from textwrap import wrap
@@ -387,7 +388,7 @@ def setUp(self):
 
 
 class ConflictReviewSubmitTests(TestCase):
-    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['CONFLICT_REVIEW_PATH']
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['CONFLICT_REVIEW_PATH','FTP_PATH']
     def test_initial_submission(self):
         doc = Document.objects.get(name='conflict-review-imaginary-irtf-submission')
         url = urlreverse('ietf.doc.views_conflict_review.submit',kwargs=dict(name=doc.name))
@@ -403,9 +404,15 @@ def test_initial_submission(self):
         # Right now, nothing to test - we let people put whatever the web browser will let them put into that textbox
 
         # sane post using textbox
-        path = os.path.join(settings.CONFLICT_REVIEW_PATH, '%s-%s.txt' % (doc.name, doc.rev))
+        basename = f"{doc.name}-{doc.rev}.txt"
+        path = Path(settings.CONFLICT_REVIEW_PATH) / basename
+        ftp_dir = Path(settings.FTP_DIR) / "conflict-reviews"
+        if not ftp_dir.exists():
+            ftp_dir.mkdir()
+        ftp_path = ftp_dir / basename
         self.assertEqual(doc.rev,'00')
-        self.assertFalse(os.path.exists(path))
+        self.assertFalse(path.exists())
+        self.assertFalse(ftp_path.exists())
         r = self.client.post(url,dict(content="Some initial review text\n",submit_response="1"))
         self.assertEqual(r.status_code,302)
         doc = Document.objects.get(name='conflict-review-imaginary-irtf-submission')
@@ -413,6 +420,7 @@ def test_initial_submission(self):
         with io.open(path) as f:
             self.assertEqual(f.read(),"Some initial review text\n")
             f.close()
+        self.assertTrue(ftp_path.exists())
         self.assertTrue( "submission-00" in doc.latest_event(NewRevisionDocEvent).desc)
 
     def test_subsequent_submission(self):
diff --git a/ietf/doc/tests_material.py b/ietf/doc/tests_material.py
index 065ff09a98..aaea8fec3d 100644
--- a/ietf/doc/tests_material.py
+++ b/ietf/doc/tests_material.py
@@ -28,7 +28,7 @@
 
 
 class GroupMaterialTests(TestCase):
-    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['AGENDA_PATH']
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['AGENDA_PATH', 'FTP_DIR']
     def setUp(self):
         super().setUp()
         self.materials_dir = self.tempdir("materials")
@@ -37,6 +37,10 @@ def setUp(self):
             self.slides_dir.mkdir()
         self.saved_document_path_pattern = settings.DOCUMENT_PATH_PATTERN
         settings.DOCUMENT_PATH_PATTERN = self.materials_dir + "/{doc.type_id}/"
+        self.assertTrue(Path(settings.FTP_DIR).exists())
+        ftp_slides_dir = Path(settings.FTP_DIR) / "slides"
+        if not ftp_slides_dir.exists():
+            ftp_slides_dir.mkdir()
 
         self.meeting_slides_dir = Path(settings.AGENDA_PATH) / "42" / "slides"
         if not self.meeting_slides_dir.exists():
@@ -112,7 +116,12 @@ def test_upload_slides(self):
         self.assertEqual(doc.title, "Test File - with fancy title")
         self.assertEqual(doc.get_state_slug(), "active")
 
-        with io.open(os.path.join(self.materials_dir, "slides", doc.name + "-" + doc.rev + ".pdf")) as f:
+        basename=f"{doc.name}-{doc.rev}.pdf"
+        filepath=Path(self.materials_dir) / "slides" / basename
+        with filepath.open() as f:
+            self.assertEqual(f.read(), content)
+        ftp_filepath=Path(settings.FTP_DIR) / "slides" / basename
+        with ftp_filepath.open() as f:
             self.assertEqual(f.read(), content)
 
         # check that posting same name is prevented
diff --git a/ietf/doc/tests_status_change.py b/ietf/doc/tests_status_change.py
index bec48ed4ef..bd4da4c092 100644
--- a/ietf/doc/tests_status_change.py
+++ b/ietf/doc/tests_status_change.py
@@ -4,6 +4,7 @@
 
 import io
 import os
+from pathlib import Path
 
 import debug    # pyflakes:ignore
 
@@ -540,7 +541,7 @@ def setUp(self):
         DocumentFactory(type_id='statchg',name='status-change-imaginary-mid-review',notify='notify@example.org')
 
 class StatusChangeSubmitTests(TestCase):
-    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['STATUS_CHANGE_PATH']
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['STATUS_CHANGE_PATH', 'FTP_PATH']
     def test_initial_submission(self):
         doc = Document.objects.get(name='status-change-imaginary-mid-review')
         url = urlreverse('ietf.doc.views_status_change.submit',kwargs=dict(name=doc.name))
@@ -556,14 +557,19 @@ def test_initial_submission(self):
         # Right now, nothing to test - we let people put whatever the web browser will let them put into that textbox
 
         # sane post using textbox
-        path = os.path.join(settings.STATUS_CHANGE_PATH, '%s-%s.txt' % (doc.name, doc.rev))
         self.assertEqual(doc.rev,'00')
-        self.assertFalse(os.path.exists(path))
+        basename = f"{doc.name}-{doc.rev}.txt"
+        filepath = Path(settings.STATUS_CHANGE_PATH) / basename
+        ftp_filepath = Path(settings.FTP_DIR) / "status-changes" / basename
+        self.assertFalse(filepath.exists())
+        self.assertFalse(ftp_filepath.exists())
         r = self.client.post(url,dict(content="Some initial review text\n",submit_response="1"))
         self.assertEqual(r.status_code,302)
         doc = Document.objects.get(name='status-change-imaginary-mid-review')
         self.assertEqual(doc.rev,'00')
-        with io.open(path) as f:
+        with filepath.open() as f:
+            self.assertEqual(f.read(),"Some initial review text\n")
+        with ftp_filepath.open() as f:
             self.assertEqual(f.read(),"Some initial review text\n")
         self.assertTrue( "mid-review-00" in doc.latest_event(NewRevisionDocEvent).desc)
 
@@ -628,3 +634,6 @@ def test_subsequent_submission(self):
     def setUp(self):
         super().setUp()
         DocumentFactory(type_id='statchg',name='status-change-imaginary-mid-review',notify='notify@example.org')
+        ftp_subdir=Path(settings.FTP_DIR)/"status-changes"
+        if not ftp_subdir.exists():
+            ftp_subdir.mkdir()
diff --git a/ietf/doc/utils_charter.py b/ietf/doc/utils_charter.py
index b29d1e303c..287ce8cece 100644
--- a/ietf/doc/utils_charter.py
+++ b/ietf/doc/utils_charter.py
@@ -112,10 +112,10 @@ def fix_charter_revision_after_approval(charter, by):
     )
     try:
         os.link(new, ftp_filepath)
-    except IOError:
+    except IOError as ex:
         log(
-            "There was an error creating a harlink at %s pointing to %s"
-            % (ftp_filepath, new)
+            "There was an error creating a hardlink at %s pointing to %s: %s"
+            % (ftp_filepath, new, ex)
         )
 
     events = []
diff --git a/ietf/doc/views_conflict_review.py b/ietf/doc/views_conflict_review.py
index ec5a18c7a2..e55661ccdf 100644
--- a/ietf/doc/views_conflict_review.py
+++ b/ietf/doc/views_conflict_review.py
@@ -5,6 +5,7 @@
 import datetime
 import io
 import os
+from pathlib import Path
 
 from django import forms
 from django.shortcuts import render, get_object_or_404, redirect
@@ -181,12 +182,21 @@ def clean_txt(self):
         return get_cleaned_text_file_content(self.cleaned_data["txt"])
 
     def save(self, review):
-        filename = os.path.join(settings.CONFLICT_REVIEW_PATH, '%s-%s.txt' % (review.name, review.rev))
-        with io.open(filename, 'w', encoding='utf-8') as destination:
+        basename = f"{review.name}-{review.rev}.txt"
+        filepath = Path(settings.CONFLICT_REVIEW_PATH) / basename
+        with filepath.open('w', encoding='utf-8') as destination:
             if self.cleaned_data['txt']:
                 destination.write(self.cleaned_data['txt'])
             else:
                 destination.write(self.cleaned_data['content'])
+        ftp_filepath = Path(settings.FTP_DIR) / "conflict-reviews" / basename
+        try:
+            os.link(filepath, ftp_filepath) # Path.hardlink_to is not available until 3.10
+        except IOError as e:
+            log.log(
+                "There was an error creating a hardlink at %s pointing to %s: %s"
+                % (ftp_filepath, filepath, e)
+            )
 
 #This is very close to submit on charter - can we get better reuse?
 @role_required('Area Director','Secretariat')
diff --git a/ietf/doc/views_material.py b/ietf/doc/views_material.py
index b646ecf2fc..361bf5f1e2 100644
--- a/ietf/doc/views_material.py
+++ b/ietf/doc/views_material.py
@@ -3,8 +3,8 @@
 
 
 # views for managing group materials (slides, ...)
-import io
 import os
+from pathlib import Path
 import re
 
 from django import forms
@@ -162,9 +162,21 @@ def edit_material(request, name=None, acronym=None, action=None, doc_type=None):
                 f = form.cleaned_data["material"]
                 file_ext = os.path.splitext(f.name)[1]
 
-                with io.open(os.path.join(doc.get_file_path(), doc.name + "-" + doc.rev + file_ext), 'wb+') as dest:
+                basename = f"{doc.name}-{doc.rev}{file_ext}" # Note the lack of a . before file_ext - see os.path.splitext
+                filepath = Path(doc.get_file_path()) / basename
+                with filepath.open('wb+') as dest:
                     for chunk in f.chunks():
                         dest.write(chunk)
+                if not doc.meeting_related():
+                    log.assertion('doc.type_id == "slides"')
+                    ftp_filepath = Path(settings.FTP_DIR) / doc.type_id / basename
+                    try:
+                        os.link(filepath, ftp_filepath) # Path.hardlink is not available until 3.10
+                    except IOError as ex:
+                        log.log(
+                            "There was an error creating a hardlink at %s pointing to %s: %s"
+                            % (ftp_filepath, filepath, ex)
+                        )
 
             if prev_rev != doc.rev:
                 e = NewRevisionDocEvent(type="new_revision", doc=doc, rev=doc.rev)
diff --git a/ietf/doc/views_status_change.py b/ietf/doc/views_status_change.py
index 9034971ebf..33b822348a 100644
--- a/ietf/doc/views_status_change.py
+++ b/ietf/doc/views_status_change.py
@@ -5,6 +5,7 @@
 import datetime
 import io
 import os
+from pathlib import Path
 import re
 
 from typing import Dict             # pyflakes:ignore
@@ -33,6 +34,7 @@
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.name.models import DocRelationshipName, StdLevelName
 from ietf.person.models import Person
+from ietf.utils.log import log
 from ietf.utils.mail import send_mail_preformatted
 from ietf.utils.textupload import get_cleaned_text_file_content
 from ietf.utils.timezone import date_today, DEADLINE_TZINFO
@@ -154,12 +156,21 @@ def clean_txt(self):
         return get_cleaned_text_file_content(self.cleaned_data["txt"])
 
     def save(self, doc):
-       filename = os.path.join(settings.STATUS_CHANGE_PATH, '%s-%s.txt' % (doc.name, doc.rev))
-       with io.open(filename, 'w', encoding='utf-8') as destination:
-           if self.cleaned_data['txt']:
-               destination.write(self.cleaned_data['txt'])
-           else:
-               destination.write(self.cleaned_data['content'])
+        basename = f"{doc.name}-{doc.rev}.txt"
+        filename = Path(settings.STATUS_CHANGE_PATH) / basename
+        with io.open(filename, 'w', encoding='utf-8') as destination:
+            if self.cleaned_data['txt']:
+                destination.write(self.cleaned_data['txt'])
+            else:
+                destination.write(self.cleaned_data['content'])
+        try:
+            ftp_filename = Path(settings.FTP_DIR) / "status-changes" / basename
+            os.link(filename, ftp_filename) # Path.hardlink is not available until 3.10
+        except IOError as ex:
+            log(
+                "There was an error creating a hardlink at %s pointing to %s: %s"
+                % (ftp_filename, filename, ex)
+            )
 
 #This is very close to submit on charter - can we get better reuse?
 @role_required('Area Director','Secretariat')
diff --git a/ietf/submit/checkers.py b/ietf/submit/checkers.py
index d29e2a2355..89908748a7 100644
--- a/ietf/submit/checkers.py
+++ b/ietf/submit/checkers.py
@@ -4,6 +4,7 @@
 
 import io
 import os
+from pathlib import Path
 import re
 import shutil
 import sys
@@ -280,6 +281,15 @@ def check_file_txt(self, path):
 
             dest = os.path.join(settings.SUBMIT_YANG_DRAFT_MODEL_DIR, model)
             shutil.move(path, dest)
+            ftp_dest = Path(settings.FTP_DIR) / "yang" / "draftmod" / model
+            try:
+                os.link(dest, ftp_dest)
+            except IOError as ex:
+                log(
+                    "There was an error creating a hardlink at %s pointing to %s: %s"
+                    % (ftp_dest, dest, ex)
+                )
+
 
             # summary result
             results.append({
diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 5906785048..16cccc9b59 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -8,6 +8,7 @@
 import os
 import pathlib
 import re
+import subprocess
 import sys
 import time
 import traceback
@@ -1596,3 +1597,6 @@ def active(dirent):
                         modfile.unlink()
         except UnicodeDecodeError as e:
             log.log(f"Error processing {item.name}: {e}")
+
+    ftp_moddir = Path(settings.FTP_DIR) / "yang" / "draftmod"
+    subprocess.call(("/usr/bin/rsync", "-aq", "--delete", moddir, ftp_moddir))

From e5c4a9f2983a8d47842ad3e7a76167364fd2081d Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 9 Jan 2025 13:07:51 -0600
Subject: [PATCH 210/707] feat: additional filesystem monitoring (#8405)

* feat: additional filesystem monitoring

* chore: rename setting for tmp directory

* fix: restructure path to new endpoint

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 dev/deploy-to-container/settings_local.py |  1 +
 dev/diff/settings_local.py                |  1 +
 dev/tests/settings_local.py               |  1 +
 docker/configs/settings_local.py          |  1 +
 docker/scripts/app-create-dirs.sh         |  1 +
 ietf/api/tests.py                         |  8 ++++++++
 ietf/api/urls.py                          |  2 ++
 ietf/api/views.py                         | 20 +++++++++++++++++++-
 ietf/settings.py                          |  1 +
 9 files changed, 35 insertions(+), 1 deletion(-)

diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index 07bf0a7511..0a991ae9fe 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -64,6 +64,7 @@
 BIBXML_BASE_PATH = '/assets/ietfdata/derived/bibxml'
 IDSUBMIT_REPOSITORY_PATH = INTERNET_DRAFT_PATH
 FTP_DIR = '/assets/ftp'
+NFS_METRICS_TMP_DIR = '/assets/tmp'
 
 NOMCOM_PUBLIC_KEYS_DIR = 'data/nomcom_keys/public_keys/'
 SLIDE_STAGING_PATH = '/test/staging/'
diff --git a/dev/diff/settings_local.py b/dev/diff/settings_local.py
index 6bcee46b61..95d1e481c9 100644
--- a/dev/diff/settings_local.py
+++ b/dev/diff/settings_local.py
@@ -60,6 +60,7 @@
 INTERNET_ALL_DRAFTS_ARCHIVE_DIR = '/assets/ietf-ftp/internet-drafts/'
 BIBXML_BASE_PATH = '/assets/ietfdata/derived/bibxml'
 FTP_DIR = '/assets/ftp'
+NFS_METRICS_TMP_DIR = '/assets/tmp'
 
 NOMCOM_PUBLIC_KEYS_DIR = 'data/nomcom_keys/public_keys/'
 SLIDE_STAGING_PATH = 'test/staging/'
diff --git a/dev/tests/settings_local.py b/dev/tests/settings_local.py
index afadb3760b..7b10bee06a 100644
--- a/dev/tests/settings_local.py
+++ b/dev/tests/settings_local.py
@@ -59,6 +59,7 @@
 INTERNET_ALL_DRAFTS_ARCHIVE_DIR = '/assets/ietf-ftp/internet-drafts/'
 BIBXML_BASE_PATH = '/assets/ietfdata/derived/bibxml'
 FTP_DIR = '/assets/ftp'
+NFS_METRICS_TMP_DIR = '/assets/tmp'
 
 NOMCOM_PUBLIC_KEYS_DIR = 'data/nomcom_keys/public_keys/'
 SLIDE_STAGING_PATH = 'test/staging/'
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index a1c19c80cf..5df5d15e82 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -50,6 +50,7 @@
 BIBXML_BASE_PATH = '/assets/ietfdata/derived/bibxml'
 IDSUBMIT_REPOSITORY_PATH = INTERNET_DRAFT_PATH
 FTP_DIR = '/assets/ftp'
+NFS_METRICS_TMP_DIR = '/assets/tmp'
 
 NOMCOM_PUBLIC_KEYS_DIR = 'data/nomcom_keys/public_keys/'
 SLIDE_STAGING_PATH = '/assets/www6s/staging/'
diff --git a/docker/scripts/app-create-dirs.sh b/docker/scripts/app-create-dirs.sh
index 50431f4793..3eb328a280 100755
--- a/docker/scripts/app-create-dirs.sh
+++ b/docker/scripts/app-create-dirs.sh
@@ -29,6 +29,7 @@ for sub in \
     /assets/www6/iesg \
     /assets/www6/iesg/evaluation \
     /assets/media/photo \
+    /assets/tmp \
     /assets/ftp \
     /assets/ftp/charter \
     /assets/ftp/internet-drafts \
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index a8d6ac4e57..6e7fb374fe 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -970,6 +970,14 @@ def test_api_appauth(self):
             self.assertEqual(jsondata['success'], True)
             self.client.logout()
 
+    @override_settings(APP_API_TOKENS={"ietf.api.views.nfs_metrics": ["valid-token"]})
+    def test_api_nfs_metrics(self):
+        url = urlreverse("ietf.api.views.nfs_metrics")
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, 'nfs_latency_seconds{operation="write"}')
+
     def test_api_get_session_matherials_no_agenda_meeting_url(self):
         meeting = MeetingFactory(type_id='ietf')
         session = SessionFactory(meeting=meeting)
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index a9aaaf5805..b0dbaf91ce 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -82,6 +82,8 @@
     url(r'^version/?$', api_views.version),
     # Application authentication API key
     url(r'^appauth/(?P<app>authortools|bibxml)$', api_views.app_auth),
+    # NFS metrics endpoint
+    url(r'^metrics/nfs/?$', api_views.nfs_metrics),
     # latest versions
     url(r'^rfcdiff-latest-json/%(name)s(?:-%(rev)s)?(\.txt|\.html)?/?$' % settings.URL_REGEXPS, api_views.rfcdiff_latest_json),
     url(r'^rfcdiff-latest-json/(?P<name>[Rr][Ff][Cc] [0-9]+?)(\.txt|\.html)?/?$', api_views.rfcdiff_latest_json),
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 3e56757528..2fd9d2730f 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -3,7 +3,10 @@
 
 import base64
 import binascii
+import datetime
 import json
+from pathlib import Path
+from tempfile import NamedTemporaryFile
 import jsonschema
 import pytz
 import re
@@ -264,7 +267,22 @@ def app_auth(request, app: Literal["authortools", "bibxml"]):
             json.dumps({'success': True}),
             content_type='application/json')
 
-
+@requires_api_token
+@csrf_exempt
+def nfs_metrics(request):
+    with NamedTemporaryFile(dir=settings.NFS_METRICS_TMP_DIR,delete=False) as fp:
+        fp.close()
+        mark = datetime.datetime.now()
+        with open(fp.name, mode="w") as f:
+            f.write("whyioughta"*1024)
+        write_latency = (datetime.datetime.now() - mark).total_seconds()
+        mark = datetime.datetime.now()
+        with open(fp.name, "r") as f:
+            _=f.read()
+        read_latency = (datetime.datetime.now() - mark).total_seconds()
+        Path(f.name).unlink()
+    response=f'nfs_latency_seconds{{operation="write"}} {write_latency}\nnfs_latency_seconds{{operation="read"}} {read_latency}\n'
+    return HttpResponse(response)
 
 def find_doc_for_rfcdiff(name, rev):
     """rfcdiff lookup heuristics
diff --git a/ietf/settings.py b/ietf/settings.py
index efd04c6068..b452864be6 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -761,6 +761,7 @@ def skip_unreadable_post(record):
 DERIVED_DIR = '/a/ietfdata/derived'
 FTP_DIR = '/a/ftp'
 ALL_ID_DOWNLOAD_DIR = '/a/www/www6s/download'
+NFS_METRICS_TMP_DIR = '/a/tmp'
 
 DOCUMENT_FORMAT_ALLOWLIST = ["txt", "ps", "pdf", "xml", "html", ]
 

From e108a3ca2c81b31c23775bba2f443bd1d2d15d23 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 10 Jan 2025 15:05:44 -0500
Subject: [PATCH 211/707] chore(k8s): add inter-pod affinity

---
 k8s/auth.yaml      | 10 ++++++++++
 k8s/beat.yaml      | 10 ++++++++++
 k8s/celery.yaml    | 10 ++++++++++
 k8s/memcached.yaml | 10 ++++++++++
 k8s/rabbitmq.yaml  | 10 ++++++++++
 5 files changed, 50 insertions(+)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 2bdb064447..392e306b54 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -15,6 +15,16 @@ spec:
       labels:
         app: auth
     spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/beat.yaml b/k8s/beat.yaml
index 72d74e11e4..9a8fe2f0a4 100644
--- a/k8s/beat.yaml
+++ b/k8s/beat.yaml
@@ -17,6 +17,16 @@ spec:
       labels:
         app: beat
     spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/celery.yaml b/k8s/celery.yaml
index 10f58f0161..15f3bf0c7c 100644
--- a/k8s/celery.yaml
+++ b/k8s/celery.yaml
@@ -17,6 +17,16 @@ spec:
       labels:
         app: celery
     spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
index 5a4c9f0aed..8f73f3d0d5 100644
--- a/k8s/memcached.yaml
+++ b/k8s/memcached.yaml
@@ -13,6 +13,16 @@ spec:
       labels:
         app: memcached
     spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/rabbitmq.yaml b/k8s/rabbitmq.yaml
index b016b3a5ab..3cab7ff565 100644
--- a/k8s/rabbitmq.yaml
+++ b/k8s/rabbitmq.yaml
@@ -13,6 +13,16 @@ spec:
       labels:
         app: rabbitmq
     spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:

From e1af5e7049f272556bcc5974c5f2d3c81fab9721 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 10 Jan 2025 19:02:47 -0400
Subject: [PATCH 212/707] chore: remove dumprelated.py and loadrelated.py
 (#8412)

* fix: correctly disconnect post_save signal

* chore: remove dumprelated.py and loadrelated.py

These have not been used in quite some time and would need
a careful review before trusting. Taking them out to avoid
accidents.
---
 ietf/utils/management/commands/dumprelated.py | 209 ------------------
 ietf/utils/management/commands/loadrelated.py | 129 -----------
 2 files changed, 338 deletions(-)
 delete mode 100644 ietf/utils/management/commands/dumprelated.py
 delete mode 100644 ietf/utils/management/commands/loadrelated.py

diff --git a/ietf/utils/management/commands/dumprelated.py b/ietf/utils/management/commands/dumprelated.py
deleted file mode 100644
index 66fbb33bf1..0000000000
--- a/ietf/utils/management/commands/dumprelated.py
+++ /dev/null
@@ -1,209 +0,0 @@
-# Copyright The IETF Trust 2018-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-
-import io
-import warnings
-from collections import OrderedDict
-
-from django.apps import apps
-from django.contrib.admin.utils import NestedObjects
-from django.core import serializers
-from django.core.management.base import BaseCommand, CommandError
-from django.core.management.utils import parse_apps_and_model_labels
-from django.db import DEFAULT_DB_ALIAS, router
-
-import debug                            # pyflakes:ignore
-debug.debug = True
-
-class ProxyModelWarning(Warning):
-    pass
-
-
-class Command(BaseCommand):
-    help = (
-        "Output a database object and its related objects as a fixture of the given format "
-    )
-
-    def add_arguments(self, parser):
-        parser.add_argument(
-            'args', metavar='app_label.ModelName', nargs=1,
-            help='Specifies the app_label.ModelName for which to dump objects given by --pks',
-        )
-        parser.add_argument(
-            '--format', default='json', dest='format',
-            help='Specifies the output serialization format for fixtures.',
-        )
-        parser.add_argument(
-            '--indent', default=None, dest='indent', type=int,
-            help='Specifies the indent level to use when pretty-printing output.',
-        )
-        parser.add_argument(
-            '--database', action='store', dest='database',
-            default=DEFAULT_DB_ALIAS,
-            help='Nominates a specific database to dump fixtures from. '
-                 'Defaults to the "default" database.',
-        )
-        parser.add_argument(
-            '-e', '--exclude', dest='exclude', action='append', default=[],
-            help='An app_label or app_label.ModelName to exclude '
-                 '(use multiple --exclude to exclude multiple apps/models).',
-        )
-        parser.add_argument(
-            '--natural-foreign', action='store_true', dest='use_natural_foreign_keys', default=False,
-            help='Use natural foreign keys if they are available.',
-        )
-        parser.add_argument(
-            '--natural-primary', action='store_true', dest='use_natural_primary_keys', default=False,
-            help='Use natural primary keys if they are available.',
-        )
-        parser.add_argument(
-            '-o', '--output', default=None, dest='output',
-            help='Specifies file to which the output is written.'
-        )
-        parser.add_argument(
-            '--pks', dest='primary_keys', required=True,
-            help="Only dump objects with given primary keys. Accepts a comma-separated "
-                 "list of keys. This option only works when you specify one model.",
-        )
-
-    def handle(self, *app_labels, **options):
-        format = options['format']
-        indent = options['indent']
-        using = options['database']
-        excludes = options['exclude']
-        output = options['output']
-        show_traceback = options['traceback']
-        use_natural_foreign_keys = options['use_natural_foreign_keys']
-        use_natural_primary_keys = options['use_natural_primary_keys']
-        pks = options['primary_keys']
-
-        if pks:
-            primary_keys = [pk.strip() for pk in pks.split(',')]
-        else:
-            primary_keys = []
-
-        excluded_models, excluded_apps = parse_apps_and_model_labels(excludes)
-
-        if len(app_labels) == 0:
-            if primary_keys:
-                raise CommandError("You can only use --pks option with one model")
-            app_list = OrderedDict(
-                (app_config, None) for app_config in apps.get_app_configs()
-                if app_config.models_module is not None and app_config not in excluded_apps
-            )
-        else:
-            if len(app_labels) > 1 and primary_keys:
-                raise CommandError("You can only use --pks option with one model")
-            app_list = OrderedDict()
-            for label in app_labels:
-                try:
-                    app_label, model_label = label.split('.')
-                    try:
-                        app_config = apps.get_app_config(app_label)
-                    except LookupError as e:
-                        raise CommandError(str(e))
-                    if app_config.models_module is None or app_config in excluded_apps:
-                        continue
-                    try:
-                        model = app_config.get_model(model_label)
-                    except LookupError:
-                        raise CommandError("Unknown model: %s.%s" % (app_label, model_label))
-
-                    app_list_value = app_list.setdefault(app_config, [])
-
-                    # We may have previously seen a "all-models" request for
-                    # this app (no model qualifier was given). In this case
-                    # there is no need adding specific models to the list.
-                    if app_list_value is not None:
-                        if model not in app_list_value:
-                            app_list_value.append(model)
-                except ValueError:
-                    if primary_keys:
-                        raise CommandError("You can only use --pks option with one model")
-                    # This is just an app - no model qualifier
-                    app_label = label
-                    try:
-                        app_config = apps.get_app_config(app_label)
-                    except LookupError as e:
-                        raise CommandError(str(e))
-                    if app_config.models_module is None or app_config in excluded_apps:
-                        continue
-                    app_list[app_config] = None
-
-        # Check that the serialization format exists; this is a shortcut to
-        # avoid collating all the objects and _then_ failing.
-        if format not in serializers.get_public_serializer_formats():
-            try:
-                serializers.get_serializer(format)
-            except serializers.SerializerDoesNotExist:
-                pass
-
-            raise CommandError("Unknown serialization format: %s" % format)
-
-        def flatten(l):
-            if isinstance(l, list):
-                for el in l:
-                    if isinstance(el, list):
-                        for sub in flatten(el):
-                            yield sub
-                    else:
-                        yield el
-            else:
-                yield l
-
-        def get_objects(count_only=False):
-            """
-            Collate the objects to be serialized. If count_only is True, just
-            count the number of objects to be serialized.
-            """
-            models = serializers.sort_dependencies(list(app_list.items()))
-            for model in models:
-                if model in excluded_models:
-                    continue
-                if model._meta.proxy and model._meta.proxy_for_model not in models:
-                    warnings.warn(
-                        "%s is a proxy model and won't be serialized." % model._meta.label,
-                        category=ProxyModelWarning,
-                    )
-                if not model._meta.proxy and router.allow_migrate_model(using, model):
-                    objects = model._default_manager
-
-                    queryset = objects.using(using).order_by(model._meta.pk.name)
-                    if primary_keys:
-                        queryset = queryset.filter(pk__in=primary_keys)
-                    if count_only:
-                        yield queryset.order_by().count()
-                    else:
-                        for obj in queryset.iterator():
-                            collector = NestedObjects(using=using)
-                            collector.collect([obj,])
-                            object_list = list(flatten(collector.nested()))
-                            object_list.reverse()
-                            for o in object_list:
-                                yield o
-
-        try:
-            self.stdout.ending = None
-            progress_output = None
-            object_count = 0
-            # If dumpdata is outputting to stdout, there is no way to display progress
-            if (output and self.stdout.isatty() and options['verbosity'] > 0):
-                progress_output = self.stdout
-                object_count = sum(get_objects(count_only=True))
-            stream = io.open(output, 'w') if output else None
-            try:
-                serializers.serialize(
-                    format, get_objects(), indent=indent,
-                    use_natural_foreign_keys=use_natural_foreign_keys,
-                    use_natural_primary_keys=use_natural_primary_keys,
-                    stream=stream or self.stdout, progress_output=progress_output,
-                    object_count=object_count,
-                )
-            finally:
-                if stream:
-                    stream.close()
-        except Exception as e:
-            if show_traceback:
-                raise
-            raise CommandError("Unable to serialize database: %s" % e)
diff --git a/ietf/utils/management/commands/loadrelated.py b/ietf/utils/management/commands/loadrelated.py
deleted file mode 100644
index d8ae19dc77..0000000000
--- a/ietf/utils/management/commands/loadrelated.py
+++ /dev/null
@@ -1,129 +0,0 @@
-# Copyright The IETF Trust 2018-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-
-import gzip
-import os
-#import sys
-import tqdm
-import zipfile
-
-try:
-    import bz2
-    has_bz2 = True
-except ImportError:
-    has_bz2 = False
-
-from django.core.exceptions import ObjectDoesNotExist
-from django.core import serializers
-from django.db import DEFAULT_DB_ALIAS, DatabaseError, IntegrityError, connections
-from django.db.models.signals import post_save
-from django.utils.encoding import force_str
-import django.core.management.commands.loaddata as loaddata
-
-import debug                            # pyflakes:ignore
-
-from ietf.community.signals import notify_of_events_receiver
-
-class Command(loaddata.Command):
-    help = ("""
-
-        Load a fixture of related objects to the database.  The fixture is expected
-        to contain a set of related objects, created with the 'dumprelated' management
-        command.  It differs from the 'loaddata' command in that it silently ignores
-        attempts to load duplicate entries, and continues loading subsequent entries.
-
-        """)
-
-    def add_arguments(self, parser):
-        parser.add_argument('args', metavar='fixture', nargs='+', help='Fixture files.')
-        parser.add_argument(
-            '--database', action='store', dest='database', default=DEFAULT_DB_ALIAS,
-            help='Nominates a specific database to load fixtures into. Defaults to the "default" database.',
-        )
-        parser.add_argument(
-            '--ignorenonexistent', '-i', action='store_true', dest='ignore', default=False,
-            help='Ignores entries in the serialized data for fields that do not '
-                 'currently exist on the model.',
-        )
-
-    def handle(self, *args, **options):
-        self.ignore = options['ignore']
-        self.using = options['database']
-        self.verbosity = options['verbosity']
-        #
-        self.compression_formats = {
-            None: (open, 'rb'),
-            'gz': (gzip.GzipFile, 'rb'),
-            'zip': (SingleZipReader, 'r'),
-        }
-        if has_bz2:
-            self.compression_formats['bz2'] = (bz2.BZ2File, 'r')
-        #
-        self.serialization_formats = serializers.get_public_serializer_formats()
-        #
-        post_save.disconnect(notify_of_events_receiver())
-        #
-        connection = connections[self.using]
-        self.fixture_count = 0
-        self.loaded_object_count = 0
-        self.fixture_object_count = 0
-        #
-        for arg in args:
-            fixture_file = arg
-            self.stdout.write("Loading objects from %s" % fixture_file)
-            _, ser_fmt, cmp_fmt = self.parse_name(os.path.basename(fixture_file))
-            open_method, mode = self.compression_formats[cmp_fmt]
-            fixture = open_method(fixture_file, mode)
-            objects_in_fixture = 0
-            self.stdout.write("Getting object count...\b\b\b", ending='')
-            self.stdout.flush()
-            for o in serializers.deserialize(ser_fmt, fixture, using=self.using, ignorenonexistent=self.ignore,):
-                objects_in_fixture += 1
-            self.stdout.write(" %d" % objects_in_fixture)
-            #
-            fixture = open_method(fixture_file, mode)
-            self.fixture_count += 1
-            objects = serializers.deserialize(ser_fmt, fixture, using=self.using, ignorenonexistent=self.ignore,)
-            with connection.constraint_checks_disabled():
-                for obj in tqdm.tqdm(objects, total=objects_in_fixture):
-                    try:
-                        obj.save(using=self.using)
-                        self.loaded_object_count += 1
-                    except (DatabaseError, IntegrityError, ObjectDoesNotExist, AttributeError) as e:
-                        error_msg = force_str(e)
-                        if "Duplicate entry" in error_msg:
-                            pass
-                        else:
-                            self.stderr.write("Could not load %(app_label)s.%(object_name)s(pk=%(pk)s): %(error_msg)s" % {
-                                'app_label': obj.object._meta.app_label,
-                                'object_name': obj.object._meta.object_name,
-                                'pk': obj.object.pk,
-                                'error_msg': error_msg,
-                            }, )
-            self.fixture_object_count += objects_in_fixture
-
-        if self.verbosity >= 1:
-            if self.fixture_object_count == self.loaded_object_count:
-                self.stdout.write(
-                    "Installed %d object(s) from %d fixture(s)"
-                    % (self.loaded_object_count, self.fixture_count)
-                )
-            else:
-                self.stdout.write(
-                    "Installed %d object(s) (of %d) from %d fixture(s)"
-                    % (self.loaded_object_count, self.fixture_object_count, self.fixture_count)
-                )
-
-        
-class SingleZipReader(zipfile.ZipFile):
-
-    def __init__(self, *args, **kwargs):
-        zipfile.ZipFile.__init__(self, *args, **kwargs)
-        if len(self.namelist()) != 1:
-            raise ValueError("Zip-compressed fixtures must contain one file.")
-
-    def read(self):
-        return zipfile.ZipFile.read(self, self.namelist()[0])
-
-

From 56985d105651b7d0ca30345dcb8472c5975f787b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jan 2025 15:01:32 -0500
Subject: [PATCH 213/707] chore(deps): bump ncipollo/release-action from 1.14.0
 to 1.15.0 (#8420)

Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/ncipollo/release-action/releases)
- [Commits](https://github.com/ncipollo/release-action/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: ncipollo/release-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 46cb150e05..4771adde97 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -97,7 +97,7 @@ jobs:
         echo "IS_RELEASE=true" >> $GITHUB_ENV
         
     - name: Create Draft Release
-      uses: ncipollo/release-action@v1.14.0
+      uses: ncipollo/release-action@v1.15.0
       if: ${{ github.ref_name == 'release' }}
       with:
         prerelease: true
@@ -311,7 +311,7 @@ jobs:
         histCoveragePath: historical-coverage.json
         
     - name: Create Release
-      uses: ncipollo/release-action@v1.14.0
+      uses: ncipollo/release-action@v1.15.0
       if: ${{ env.SHOULD_DEPLOY == 'true' }}
       with:
         allowUpdates: true
@@ -324,7 +324,7 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Update Baseline Coverage
-      uses: ncipollo/release-action@v1.14.0
+      uses: ncipollo/release-action@v1.15.0
       if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
       with:
         allowUpdates: true

From 135f759b3065e66c45862e9f6ad832084edb3c76 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jan 2025 15:02:45 -0500
Subject: [PATCH 214/707] chore(deps): bump dockerode in
 /dev/deploy-to-container in the npm group (#8393)

Bumps the npm group in /dev/deploy-to-container with 1 update: [dockerode](https://github.com/apocas/dockerode).


Updates `dockerode` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.2...v4.0.3)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 394 +++++++++++++++++++---
 dev/deploy-to-container/package.json      |   2 +-
 2 files changed, 340 insertions(+), 56 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index 08b6eb6c62..86cb1f732f 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -6,7 +6,7 @@
     "": {
       "name": "deploy-to-container",
       "dependencies": {
-        "dockerode": "^4.0.2",
+        "dockerode": "^4.0.3",
         "fs-extra": "^11.2.0",
         "nanoid": "5.0.9",
         "nanoid-dictionary": "5.0.0-beta.1",
@@ -23,6 +23,35 @@
       "resolved": "https://registry.npmjs.org/@balena/dockerignore/-/dockerignore-1.0.2.tgz",
       "integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q=="
     },
+    "node_modules/@grpc/grpc-js": {
+      "version": "1.12.5",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.12.5.tgz",
+      "integrity": "sha512-d3iiHxdpg5+ZcJ6jnDSOT8Z0O0VMVGy34jAnYLUX8yd36b1qn8f1TwOA/Lc7TsOh03IkPJ38eGI5qD2EjNkoEA==",
+      "dependencies": {
+        "@grpc/proto-loader": "^0.7.13",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      },
+      "engines": {
+        "node": ">=12.10.0"
+      }
+    },
+    "node_modules/@grpc/proto-loader": {
+      "version": "0.7.13",
+      "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.13.tgz",
+      "integrity": "sha512-AiXO/bfe9bmxBjxxtYxFAXGZvMaN5s8kO+jBHAJCON8rJoB5YS/D6X7ZNc6XQkuHNmyl4CYaMI1fJ/Gn27RGGw==",
+      "dependencies": {
+        "lodash.camelcase": "^4.3.0",
+        "long": "^5.0.0",
+        "protobufjs": "^7.2.5",
+        "yargs": "^17.7.2"
+      },
+      "bin": {
+        "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -123,6 +152,15 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@js-sdsl/ordered-map": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+      "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/js-sdsl"
+      }
+    },
     "node_modules/@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -132,6 +170,68 @@
         "node": ">=14"
       }
     },
+    "node_modules/@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ=="
+    },
+    "node_modules/@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg=="
+    },
+    "node_modules/@protobufjs/codegen": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz",
+      "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg=="
+    },
+    "node_modules/@protobufjs/eventemitter": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+      "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q=="
+    },
+    "node_modules/@protobufjs/fetch": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+      "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.1",
+        "@protobufjs/inquire": "^1.1.0"
+      }
+    },
+    "node_modules/@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ=="
+    },
+    "node_modules/@protobufjs/inquire": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz",
+      "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q=="
+    },
+    "node_modules/@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA=="
+    },
+    "node_modules/@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw=="
+    },
+    "node_modules/@protobufjs/utf8": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz",
+      "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw=="
+    },
+    "node_modules/@types/node": {
+      "version": "22.10.5",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.5.tgz",
+      "integrity": "sha512-F8Q+SeGimwOo86fiovQh8qiXfFEh2/ocYv7tU5pJ3EXMSSxk1Joj5wefpFK2fHTf/N6HKGSxIDBT9f3gCxXPkQ==",
+      "dependencies": {
+        "undici-types": "~6.20.0"
+      }
+    },
     "node_modules/ansi-regex": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
@@ -246,14 +346,14 @@
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
     },
     "node_modules/cpu-features": {
-      "version": "0.0.9",
-      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.9.tgz",
-      "integrity": "sha512-AKjgn2rP2yJyfbepsmLfiYcmtNn/2eUvocUyM/09yB0YDiz39HteK/5/T4Onf0pmdYDMgkBoGvRLvEguzyL7wQ==",
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
       "hasInstallScript": true,
       "optional": true,
       "dependencies": {
         "buildcheck": "~0.0.6",
-        "nan": "^2.17.0"
+        "nan": "^2.19.0"
       },
       "engines": {
         "node": ">=10.0.0"
@@ -273,11 +373,11 @@
       }
     },
     "node_modules/debug": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz",
-      "integrity": "sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==",
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
+      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
       "dependencies": {
-        "ms": "2.1.2"
+        "ms": "^2.1.3"
       },
       "engines": {
         "node": ">=6.0"
@@ -289,9 +389,9 @@
       }
     },
     "node_modules/docker-modem": {
-      "version": "5.0.3",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.3.tgz",
-      "integrity": "sha512-89zhop5YVhcPEt5FpUFGr3cDyceGhq/F9J+ZndQ4KfqNvfbJpPMfgeixFgUj5OjCYAboElqODxY5Z1EBsSa6sg==",
+      "version": "5.0.5",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.5.tgz",
+      "integrity": "sha512-Cxw8uEcvNTRmsQuGqzzfiCnfGgf96tVJItLh8taOX0miTcIBALKH5TckCSuZbpbjP7uhAl81dOL9sxfa6HgCIg==",
       "dependencies": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -303,13 +403,17 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.2.tgz",
-      "integrity": "sha512-9wM1BVpVMFr2Pw3eJNXrYYt6DT9k0xMcsSCjtPvyQ+xa1iPg/Mo3T/gUcwI0B2cczqCeCYRPF8yFYDwtFXT0+w==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.3.tgz",
+      "integrity": "sha512-QSXJFcBQNaGZO6U3qWW4B7p8yRIJn/dWmvL2AQWfO/bjptBBO6QYdVkYSYFz9qoivP2jsOHZfmXMAfrK0BMKyg==",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
-        "docker-modem": "^5.0.3",
-        "tar-fs": "~2.0.1"
+        "@grpc/grpc-js": "^1.11.1",
+        "@grpc/proto-loader": "^0.7.13",
+        "docker-modem": "^5.0.5",
+        "protobufjs": "^7.3.2",
+        "tar-fs": "~2.0.1",
+        "uuid": "^10.0.0"
       },
       "engines": {
         "node": ">= 8.0"
@@ -473,6 +577,16 @@
         "graceful-fs": "^4.1.6"
       }
     },
+    "node_modules/lodash.camelcase": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA=="
+    },
+    "node_modules/long": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
+      "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg=="
+    },
     "node_modules/lru-cache": {
       "version": "10.2.2",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
@@ -535,14 +649,14 @@
       "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A=="
     },
     "node_modules/ms": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "node_modules/nan": {
-      "version": "2.18.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.18.0.tgz",
-      "integrity": "sha512-W7tfG7vMOGtD30sHoZSSc/JVYiyDPEyQVso/Zz+/uQd0B0L46gtC+pHha5FFMRpil6fm/AoEcRWyOVi4+E/f8w==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
+      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
       "optional": true
     },
     "node_modules/nanoid": {
@@ -598,6 +712,29 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/protobufjs": {
+      "version": "7.4.0",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
+      "integrity": "sha512-mRUWCc3KUU4w1jU8sGxICXH/gNS94DvI1gxqDvBzhj1JpcsimQkYiOJfwsPUykUI5ZaspFbSgmBLER8IrQ3tqw==",
+      "hasInstallScript": true,
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.4",
+        "@protobufjs/eventemitter": "^1.1.0",
+        "@protobufjs/fetch": "^1.1.0",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/inquire": "^1.1.0",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.0",
+        "@types/node": ">=13.7.0",
+        "long": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/pump": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -713,9 +850,9 @@
       "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
     },
     "node_modules/ssh2": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.15.0.tgz",
-      "integrity": "sha512-C0PHgX4h6lBxYx7hcXwu3QWdh4tg6tZZsTfXcdvc5caW/EMxaB4H9dWsl7qk+F7LAW762hp8VbXOX7x4xUYvEw==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
+      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
       "hasInstallScript": true,
       "dependencies": {
         "asn1": "^0.2.6",
@@ -725,8 +862,8 @@
         "node": ">=10.16.0"
       },
       "optionalDependencies": {
-        "cpu-features": "~0.0.9",
-        "nan": "^2.18.0"
+        "cpu-features": "~0.0.10",
+        "nan": "^2.20.0"
       }
     },
     "node_modules/string_decoder": {
@@ -875,6 +1012,11 @@
       "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
       "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA=="
     },
+    "node_modules/undici-types": {
+      "version": "6.20.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz",
+      "integrity": "sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg=="
+    },
     "node_modules/universalify": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz",
@@ -888,6 +1030,18 @@
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="
     },
+    "node_modules/uuid": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
+      "bin": {
+        "uuid": "dist/bin/uuid"
+      }
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
@@ -988,6 +1142,26 @@
       "resolved": "https://registry.npmjs.org/@balena/dockerignore/-/dockerignore-1.0.2.tgz",
       "integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q=="
     },
+    "@grpc/grpc-js": {
+      "version": "1.12.5",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.12.5.tgz",
+      "integrity": "sha512-d3iiHxdpg5+ZcJ6jnDSOT8Z0O0VMVGy34jAnYLUX8yd36b1qn8f1TwOA/Lc7TsOh03IkPJ38eGI5qD2EjNkoEA==",
+      "requires": {
+        "@grpc/proto-loader": "^0.7.13",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      }
+    },
+    "@grpc/proto-loader": {
+      "version": "0.7.13",
+      "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.13.tgz",
+      "integrity": "sha512-AiXO/bfe9bmxBjxxtYxFAXGZvMaN5s8kO+jBHAJCON8rJoB5YS/D6X7ZNc6XQkuHNmyl4CYaMI1fJ/Gn27RGGw==",
+      "requires": {
+        "lodash.camelcase": "^4.3.0",
+        "long": "^5.0.0",
+        "protobufjs": "^7.2.5",
+        "yargs": "^17.7.2"
+      }
+    },
     "@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -1054,12 +1228,79 @@
         "minipass": "^7.0.4"
       }
     },
+    "@js-sdsl/ordered-map": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+      "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw=="
+    },
     "@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
       "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
       "optional": true
     },
+    "@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ=="
+    },
+    "@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg=="
+    },
+    "@protobufjs/codegen": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz",
+      "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg=="
+    },
+    "@protobufjs/eventemitter": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+      "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q=="
+    },
+    "@protobufjs/fetch": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+      "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+      "requires": {
+        "@protobufjs/aspromise": "^1.1.1",
+        "@protobufjs/inquire": "^1.1.0"
+      }
+    },
+    "@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ=="
+    },
+    "@protobufjs/inquire": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz",
+      "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q=="
+    },
+    "@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA=="
+    },
+    "@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw=="
+    },
+    "@protobufjs/utf8": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz",
+      "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw=="
+    },
+    "@types/node": {
+      "version": "22.10.5",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.5.tgz",
+      "integrity": "sha512-F8Q+SeGimwOo86fiovQh8qiXfFEh2/ocYv7tU5pJ3EXMSSxk1Joj5wefpFK2fHTf/N6HKGSxIDBT9f3gCxXPkQ==",
+      "requires": {
+        "undici-types": "~6.20.0"
+      }
+    },
     "ansi-regex": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
@@ -1142,13 +1383,13 @@
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
     },
     "cpu-features": {
-      "version": "0.0.9",
-      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.9.tgz",
-      "integrity": "sha512-AKjgn2rP2yJyfbepsmLfiYcmtNn/2eUvocUyM/09yB0YDiz39HteK/5/T4Onf0pmdYDMgkBoGvRLvEguzyL7wQ==",
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
       "optional": true,
       "requires": {
         "buildcheck": "~0.0.6",
-        "nan": "^2.17.0"
+        "nan": "^2.19.0"
       }
     },
     "cross-spawn": {
@@ -1162,17 +1403,17 @@
       }
     },
     "debug": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz",
-      "integrity": "sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==",
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
+      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
       "requires": {
-        "ms": "2.1.2"
+        "ms": "^2.1.3"
       }
     },
     "docker-modem": {
-      "version": "5.0.3",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.3.tgz",
-      "integrity": "sha512-89zhop5YVhcPEt5FpUFGr3cDyceGhq/F9J+ZndQ4KfqNvfbJpPMfgeixFgUj5OjCYAboElqODxY5Z1EBsSa6sg==",
+      "version": "5.0.5",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.5.tgz",
+      "integrity": "sha512-Cxw8uEcvNTRmsQuGqzzfiCnfGgf96tVJItLh8taOX0miTcIBALKH5TckCSuZbpbjP7uhAl81dOL9sxfa6HgCIg==",
       "requires": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -1181,13 +1422,17 @@
       }
     },
     "dockerode": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.2.tgz",
-      "integrity": "sha512-9wM1BVpVMFr2Pw3eJNXrYYt6DT9k0xMcsSCjtPvyQ+xa1iPg/Mo3T/gUcwI0B2cczqCeCYRPF8yFYDwtFXT0+w==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.3.tgz",
+      "integrity": "sha512-QSXJFcBQNaGZO6U3qWW4B7p8yRIJn/dWmvL2AQWfO/bjptBBO6QYdVkYSYFz9qoivP2jsOHZfmXMAfrK0BMKyg==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
-        "docker-modem": "^5.0.3",
-        "tar-fs": "~2.0.1"
+        "@grpc/grpc-js": "^1.11.1",
+        "@grpc/proto-loader": "^0.7.13",
+        "docker-modem": "^5.0.5",
+        "protobufjs": "^7.3.2",
+        "tar-fs": "~2.0.1",
+        "uuid": "^10.0.0"
       }
     },
     "eastasianwidth": {
@@ -1297,6 +1542,16 @@
         "universalify": "^2.0.0"
       }
     },
+    "lodash.camelcase": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA=="
+    },
+    "long": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
+      "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg=="
+    },
     "lru-cache": {
       "version": "10.2.2",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
@@ -1335,14 +1590,14 @@
       "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A=="
     },
     "ms": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "nan": {
-      "version": "2.18.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.18.0.tgz",
-      "integrity": "sha512-W7tfG7vMOGtD30sHoZSSc/JVYiyDPEyQVso/Zz+/uQd0B0L46gtC+pHha5FFMRpil6fm/AoEcRWyOVi4+E/f8w==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
+      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
       "optional": true
     },
     "nanoid": {
@@ -1377,6 +1632,25 @@
         "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
       }
     },
+    "protobufjs": {
+      "version": "7.4.0",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
+      "integrity": "sha512-mRUWCc3KUU4w1jU8sGxICXH/gNS94DvI1gxqDvBzhj1JpcsimQkYiOJfwsPUykUI5ZaspFbSgmBLER8IrQ3tqw==",
+      "requires": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.4",
+        "@protobufjs/eventemitter": "^1.1.0",
+        "@protobufjs/fetch": "^1.1.0",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/inquire": "^1.1.0",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.0",
+        "@types/node": ">=13.7.0",
+        "long": "^5.0.0"
+      }
+    },
     "pump": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -1448,14 +1722,14 @@
       "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
     },
     "ssh2": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.15.0.tgz",
-      "integrity": "sha512-C0PHgX4h6lBxYx7hcXwu3QWdh4tg6tZZsTfXcdvc5caW/EMxaB4H9dWsl7qk+F7LAW762hp8VbXOX7x4xUYvEw==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
+      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
       "requires": {
         "asn1": "^0.2.6",
         "bcrypt-pbkdf": "^1.0.2",
-        "cpu-features": "~0.0.9",
-        "nan": "^2.18.0"
+        "cpu-features": "~0.0.10",
+        "nan": "^2.20.0"
       }
     },
     "string_decoder": {
@@ -1571,6 +1845,11 @@
       "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
       "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA=="
     },
+    "undici-types": {
+      "version": "6.20.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz",
+      "integrity": "sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg=="
+    },
     "universalify": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz",
@@ -1581,6 +1860,11 @@
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="
     },
+    "uuid": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ=="
+    },
     "which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 8f16279cea..53a362b9d0 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -2,7 +2,7 @@
   "name": "deploy-to-container",
   "type": "module",
   "dependencies": {
-    "dockerode": "^4.0.2",
+    "dockerode": "^4.0.3",
     "fs-extra": "^11.2.0",
     "nanoid": "5.0.9",
     "nanoid-dictionary": "5.0.0-beta.1",

From 1ffd205ef065ec5cd5fd66ddea55e2a702650579 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 14 Jan 2025 08:48:55 -0600
Subject: [PATCH 215/707] fix: rsync to the correct dest (#8421)

---
 ietf/submit/utils.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 16cccc9b59..49f28c4196 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -1598,5 +1598,7 @@ def active(dirent):
         except UnicodeDecodeError as e:
             log.log(f"Error processing {item.name}: {e}")
 
-    ftp_moddir = Path(settings.FTP_DIR) / "yang" / "draftmod"
+    ftp_moddir = Path(settings.FTP_DIR) / "yang" / "draftmod/"
+    if not moddir.endswith("/"):
+        moddir += "/"
     subprocess.call(("/usr/bin/rsync", "-aq", "--delete", moddir, ftp_moddir))

From d1d33e7ad50d6c7625541c0966023c2cdfe77c16 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Thu, 16 Jan 2025 20:44:55 +0000
Subject: [PATCH 216/707] ci: update base image target version to 20250116T2033

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index a923bf693f..2f35125564 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20241212T1741
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250116T2033
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index b5d33714f2..fd2d539a9e 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20241212T1741
+20250116T2033

From df27ba9934c15b02ad93ec3c6eb02ee0705730b4 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 16 Jan 2025 16:21:42 -0500
Subject: [PATCH 217/707] ci: Update ci-run-tests.yml

---
 .github/workflows/ci-run-tests.yml | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci-run-tests.yml b/.github/workflows/ci-run-tests.yml
index 9121bf8aea..278bd8af2f 100644
--- a/.github/workflows/ci-run-tests.yml
+++ b/.github/workflows/ci-run-tests.yml
@@ -13,7 +13,34 @@ on:
       - 'package.json'
 
 jobs:
+  # -----------------------------------------------------------------
+  # PREPARE
+  # -----------------------------------------------------------------
+  prepare:
+    name: Prepare
+    runs-on: ubuntu-latest
+    outputs:
+      base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
+
+    steps:   
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 1
+        fetch-tags: false
+
+    - name: Get Base Image Target Version
+      id: baseimgversion
+      run: |
+        echo "base_image_version=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
+
+  # -----------------------------------------------------------------
+  # TESTS
+  # -----------------------------------------------------------------
   tests:
+    name: Run Tests
     uses: ./.github/workflows/tests.yml
+    needs: [prepare]
     with:
-      ignoreLowerCoverage: false
\ No newline at end of file
+      ignoreLowerCoverage: false
+      skipSelenium: true
+      targetBaseVersion: ${{ needs.prepare.outputs.base_image_version }}

From c848a5a00bebef2662d0e189fe0f230333a71229 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 17 Jan 2025 11:16:15 -0400
Subject: [PATCH 218/707] feat: async investigate_fragment task; celery results
 backend (#8428)

* feat: investigate docs asynchronously

* refactor: move script to its own js file

* fix: adjust polling interval/duration

* test: test new task

* fix: extra tag/fix whitespace

* style: restore whitespace (I hope)

* style: black/standard styling

* test: fix test of investigate view

* test: improve/delint tests
---
 ietf/doc/forms.py                   |   1 +
 ietf/doc/tasks.py                   |   9 ++
 ietf/doc/tests.py                   | 134 +++++++++++++++--
 ietf/doc/tests_tasks.py             |  13 ++
 ietf/doc/views_doc.py               |  65 ++++++++-
 ietf/settings.py                    |  15 +-
 ietf/static/js/investigate.js       |  53 +++++++
 ietf/templates/doc/investigate.html | 218 +++++++++++++++-------------
 package.json                        |   1 +
 requirements.txt                    |   1 +
 10 files changed, 386 insertions(+), 124 deletions(-)
 create mode 100644 ietf/static/js/investigate.js

diff --git a/ietf/doc/forms.py b/ietf/doc/forms.py
index f77b218318..8a1e9ecb98 100644
--- a/ietf/doc/forms.py
+++ b/ietf/doc/forms.py
@@ -276,6 +276,7 @@ class InvestigateForm(forms.Form):
         ),
         min_length=8,
     )
+    task_id = forms.CharField(required=False, widget=forms.HiddenInput)
 
     def clean_name_fragment(self):
         disallowed_characters = ["%", "/", "\\", "*"]
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index f1de459dd8..6eb901e6c7 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -31,6 +31,7 @@
     generate_idnits2_rfcs_obsoleted,
     update_or_create_draft_bibxml_file,
     ensure_draft_bibxml_path_exists,
+    investigate_fragment,
 )
 
 
@@ -119,3 +120,11 @@ def generate_draft_bibxml_files_task(days=7, process_all=False):
             update_or_create_draft_bibxml_file(event.doc, event.rev)
         except Exception as err:
             log.log(f"Error generating bibxml for {event.doc.name}-{event.rev}: {err}")
+
+
+@shared_task(ignore_result=False)
+def investigate_fragment_task(name_fragment: str):
+    return {
+        "name_fragment": name_fragment,
+        "results": investigate_fragment(name_fragment),
+    }
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index 0630fcd8d4..f5af7bb48b 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -3280,7 +3280,8 @@ def test_investigate_fragment(self):
             "draft-this-should-not-be-possible-00.txt",
         )
 
-    def test_investigate(self):
+    def test_investigate_get(self):
+        """GET with no querystring should retrieve the investigate UI"""
         url = urlreverse("ietf.doc.views_doc.investigate")
         login_testing_unauthorized(self, "secretary", url)
         r = self.client.get(url)
@@ -3288,36 +3289,143 @@ def test_investigate(self):
         q = PyQuery(r.content)
         self.assertEqual(len(q("form#investigate")), 1)
         self.assertEqual(len(q("div#results")), 0)
-        r = self.client.post(url, dict(name_fragment="this-is-not-found"))
+
+    @mock.patch("ietf.doc.views_doc.AsyncResult")
+    def test_investgate_get_task_id(self, mock_asyncresult):
+        """GET with querystring should lookup task status"""
+        url = urlreverse("ietf.doc.views_doc.investigate")
+        login_testing_unauthorized(self, "secretary", url)
+        mock_asyncresult.return_value.ready.return_value = True
+        r = self.client.get(url + "?id=a-task-id")
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.json(), {"status": "ready"})
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+        mock_asyncresult.reset_mock()
+
+        mock_asyncresult.return_value.ready.return_value = False
+        r = self.client.get(url + "?id=a-task-id")
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.json(), {"status": "notready"})
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+
+    @mock.patch("ietf.doc.views_doc.investigate_fragment_task")
+    def test_investigate_post(self, mock_investigate_fragment_task):
+        """POST with a name_fragment and no task_id should start a celery task"""
+        url = urlreverse("ietf.doc.views_doc.investigate")
+        login_testing_unauthorized(self, "secretary", url)
+
+        # test some invalid cases
+        r = self.client.post(url, {"name_fragment": "short"})  # limit is >= 8 characters
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
+        self.assertEqual(len(q("#id_name_fragment.is-invalid")), 1)
+        self.assertFalse(mock_investigate_fragment_task.delay.called)
+        for char in ["*", "%", "/", "\\"]:
+            r = self.client.post(url, {"name_fragment": f"bad{char}character"})
+            self.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            self.assertEqual(len(q("#id_name_fragment.is-invalid")), 1)
+            self.assertFalse(mock_investigate_fragment_task.delay.called)
+        
+        # now a valid one
+        mock_investigate_fragment_task.delay.return_value.id = "a-task-id"
+        r = self.client.post(url, {"name_fragment": "this-is-a-valid-fragment"})
+        self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_investigate_fragment_task.delay.called)
+        self.assertEqual(mock_investigate_fragment_task.delay.call_args, mock.call("this-is-a-valid-fragment"))
+        self.assertEqual(r.json(), {"id": "a-task-id"})
+
+    @mock.patch("ietf.doc.views_doc.AsyncResult")
+    def test_investigate_post_task_id(self, mock_asyncresult):
+        """POST with name_fragment and task_id should retrieve results"""
+        url = urlreverse("ietf.doc.views_doc.investigate")
+        login_testing_unauthorized(self, "secretary", url)
+
+        # First, test a non-successful result - this could be a failure or non-existent task id
+        mock_result = mock_asyncresult.return_value
+        mock_result.successful.return_value = False
+        r = self.client.post(url, {"name_fragment": "some-fragment", "task_id": "a-task-id"})
+        self.assertContains(r, "The investigation task failed.", status_code=200)
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+        self.assertFalse(mock_result.get.called)
+        mock_asyncresult.reset_mock()
+        q = PyQuery(r.content)
+        self.assertEqual(q("#id_name_fragment").val(), "some-fragment")
+        self.assertEqual(q("#id_task_id").val(), "a-task-id")
+
+        # now the various successful result mixes
+        mock_result = mock_asyncresult.return_value
+        mock_result.successful.return_value = True
+        mock_result.get.return_value = {
+            "name_fragment": "different-fragment",
+            "results": {
+                "can_verify": set(),
+                "unverifiable_collections": set(),
+                "unexpected": set(),
+            }
+        }
+        r = self.client.post(url, {"name_fragment": "some-fragment", "task_id": "a-task-id"})
+        self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+        mock_asyncresult.reset_mock()
+        q = PyQuery(r.content)
+        self.assertEqual(q("#id_name_fragment").val(), "different-fragment", "name_fragment should be reset")
+        self.assertEqual(q("#id_task_id").val(), "", "task_id should be cleared")
         self.assertEqual(len(q("div#results")), 1)
         self.assertEqual(len(q("table#authenticated")), 0)
         self.assertEqual(len(q("table#unverifiable")), 0)
         self.assertEqual(len(q("table#unexpected")), 0)
-        r = self.client.post(url, dict(name_fragment="mixed-provenance"))
+
+        # This file was created in setUp. It allows the view to render properly
+        # but its location / content don't matter for this test otherwise.
+        a_file_that_exists = Path(settings.INTERNET_DRAFT_PATH) / "draft-this-is-active-00.txt"
+
+        mock_result.get.return_value = {
+            "name_fragment": "different-fragment",
+            "results": {
+                "can_verify": {a_file_that_exists},
+                "unverifiable_collections": {a_file_that_exists},
+                "unexpected": set(),
+            }
+        }
+        r = self.client.post(url, {"name_fragment": "some-fragment", "task_id": "a-task-id"})
         self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+        mock_asyncresult.reset_mock()
         q = PyQuery(r.content)
+        self.assertEqual(q("#id_name_fragment").val(), "different-fragment", "name_fragment should be reset")
+        self.assertEqual(q("#id_task_id").val(), "", "task_id should be cleared")
         self.assertEqual(len(q("div#results")), 1)
         self.assertEqual(len(q("table#authenticated")), 1)
         self.assertEqual(len(q("table#unverifiable")), 1)
         self.assertEqual(len(q("table#unexpected")), 0)
-        r = self.client.post(url, dict(name_fragment="not-be-possible"))
+
+        mock_result.get.return_value = {
+            "name_fragment": "different-fragment",
+            "results": {
+                "can_verify": set(),
+                "unverifiable_collections": set(),
+                "unexpected": {a_file_that_exists},
+            }
+        }
+        r = self.client.post(url, {"name_fragment": "some-fragment", "task_id": "a-task-id"})
         self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_asyncresult.called)
+        self.assertEqual(mock_asyncresult.call_args, mock.call("a-task-id"))
+        mock_asyncresult.reset_mock()
         q = PyQuery(r.content)
+        self.assertEqual(q("#id_name_fragment").val(), "different-fragment", "name_fragment should be reset")
+        self.assertEqual(q("#id_task_id").val(), "", "task_id should be cleared")
         self.assertEqual(len(q("div#results")), 1)
         self.assertEqual(len(q("table#authenticated")), 0)
         self.assertEqual(len(q("table#unverifiable")), 0)
         self.assertEqual(len(q("table#unexpected")), 1)
-        r = self.client.post(url, dict(name_fragment="short"))
-        self.assertEqual(r.status_code, 200)
-        q = PyQuery(r.content)
-        self.assertEqual(len(q("#id_name_fragment.is-invalid")), 1)
-        for char in ["*", "%", "/", "\\"]:
-            r = self.client.post(url, dict(name_fragment=f"bad{char}character"))
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertEqual(len(q("#id_name_fragment.is-invalid")), 1)
+
 
 class LogIOErrorTests(TestCase):
 
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 67997acd85..8a6ffa8be1 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -20,6 +20,7 @@
     generate_draft_bibxml_files_task,
     generate_idnits2_rfcs_obsoleted_task,
     generate_idnits2_rfc_status_task,
+    investigate_fragment_task,
     notify_expirations_task,
 )
 
@@ -98,6 +99,18 @@ def test_expire_last_calls_task(self, mock_get_expired, mock_expire):
         self.assertEqual(mock_expire.call_args_list[1], mock.call(docs[1]))
         self.assertEqual(mock_expire.call_args_list[2], mock.call(docs[2]))
 
+    def test_investigate_fragment_task(self):
+        investigation_results = object()  # singleton
+        with mock.patch(
+            "ietf.doc.tasks.investigate_fragment", return_value=investigation_results
+        ) as mock_inv:
+            retval = investigate_fragment_task("some fragment")
+        self.assertTrue(mock_inv.called)
+        self.assertEqual(mock_inv.call_args, mock.call("some fragment"))
+        self.assertEqual(
+            retval, {"name_fragment": "some fragment", "results": investigation_results}
+        )
+
 
 class Idnits2SupportTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['DERIVED_DIR']
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 9f7cf12bcb..591a72d907 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -41,10 +41,11 @@
 
 from pathlib import Path
 
+from celery.result import AsyncResult
 from django.core.cache import caches
 from django.core.exceptions import PermissionDenied
 from django.db.models import Max
-from django.http import HttpResponse, Http404, HttpResponseBadRequest
+from django.http import HttpResponse, Http404, HttpResponseBadRequest, JsonResponse
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
@@ -59,8 +60,9 @@
     ConsensusDocEvent, NewRevisionDocEvent, TelechatDocEvent, WriteupDocEvent, IanaExpertDocEvent,
     IESG_BALLOT_ACTIVE_STATES, STATUSCHANGE_RELATIONS, DocumentActionHolder, DocumentAuthor,
     RelatedDocument, RelatedDocHistory)
+from ietf.doc.tasks import investigate_fragment_task
 from ietf.doc.utils import (augment_events_with_revision,
-    can_adopt_draft, can_unadopt_draft, get_chartering_type, get_tags_for_stream_id, investigate_fragment,
+    can_adopt_draft, can_unadopt_draft, get_chartering_type, get_tags_for_stream_id,
     needed_ballot_positions, nice_consensus, update_telechat, has_same_ballot,
     get_initial_notify, make_notify_changed_event, make_rev_history, default_consensus,
     add_events_message_info, get_unicode_document_content,
@@ -2275,16 +2277,67 @@ def idnits2_state(request, name, rev=None):
         content_type="text/plain;charset=utf-8",
     )
 
+
 @role_required("Secretariat")
 def investigate(request):
+    """Investigate a fragment
+
+    A plain GET with no querystring returns the UI page.
+
+    POST with the task_id field empty starts an async task and returns a JSON response with
+    the ID needed to monitor the task for results.
+
+    GET with a querystring parameter "id" will poll the status of the async task and return "ready"
+    or "notready".
+
+    POST with the task_id field set to the id of a "ready" task will return its results or an error
+    if the task failed or the id is invalid (expired, never exited, etc).
+    """
     results = None
+    # Start an investigation or retrieve a result on a POST
     if request.method == "POST":
         form = InvestigateForm(request.POST)
         if form.is_valid():
-            name_fragment = form.cleaned_data["name_fragment"]
-            results = investigate_fragment(name_fragment)
+            task_id = form.cleaned_data["task_id"]
+            if task_id:
+                # Ignore the rest of the form and retrieve the result
+                task_result = AsyncResult(task_id)
+                if task_result.successful():
+                    retval = task_result.get()
+                    results = retval["results"]
+                    form.data = form.data.copy()
+                    form.data["name_fragment"] = retval[
+                        "name_fragment"
+                    ]  # ensure consistency
+                    del form.data["task_id"]  # do not request the task result again
+                else:
+                    form.add_error(
+                        None,
+                        "The investigation task failed. Please try again and ask for help if this recurs.",
+                    )
+                # Falls through to the render at the end!
+            else:
+                name_fragment = form.cleaned_data["name_fragment"]
+                task_result = investigate_fragment_task.delay(name_fragment)
+                return JsonResponse({"id": task_result.id})
     else:
-        form = InvestigateForm()
+        task_id = request.GET.get("id", None)
+        if task_id is not None:
+            # Check status if we got the "id" parameter
+            task_result = AsyncResult(task_id)
+            return JsonResponse(
+                {"status": "ready" if task_result.ready() else "notready"}
+            )
+        else:
+            # Serve up an empty form
+            form = InvestigateForm()
+
+    # If we get here, it is just a plain GET - serve the UI
     return render(
-        request, "doc/investigate.html", context=dict(form=form, results=results)
+        request,
+        "doc/investigate.html",
+        context={
+            "form": form,
+            "results": results,
+        },
     )
diff --git a/ietf/settings.py b/ietf/settings.py
index b452864be6..a1dc9ffe21 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -452,6 +452,7 @@ def skip_unreadable_post(record):
     'django_vite',
     'django_bootstrap5',
     'django_celery_beat',
+    'django_celery_results',
     'corsheaders',
     'django_markup',
     'oidc_provider',
@@ -1226,7 +1227,9 @@ def skip_unreadable_post(record):
 # https://docs.celeryq.dev/en/stable/userguide/tasks.html#rpc-result-backend-rabbitmq-qpid
 # Results can be retrieved only once and only by the caller of the task. Results will be
 # lost if the message broker restarts.
-CELERY_RESULT_BACKEND = 'rpc://'  # sends a msg via the msg broker
+CELERY_RESULT_BACKEND = 'django-cache'  # use a Django cache for results
+CELERY_CACHE_BACKEND = 'celery-results'  # which Django cache to use
+CELERY_RESULT_EXPIRES = datetime.timedelta(minutes=5)  # how long are results valid? (Default is 1 day)
 CELERY_TASK_IGNORE_RESULT = True  # ignore results unless specifically enabled for a task
 
 # Meetecho API setup: Uncomment this and provide real credentials to enable
@@ -1309,6 +1312,11 @@ def skip_unreadable_post(record):
                     "MAX_ENTRIES": 5000,
                 },
             },
+            "celery-results": {
+                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                "KEY_PREFIX": "ietf:celery",
+            },
         }
     else:
         CACHES = {
@@ -1347,6 +1355,11 @@ def skip_unreadable_post(record):
                     "MAX_ENTRIES": 5000,
                 },
             },
+            "celery-results": {
+                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+                "LOCATION": "app:11211",
+                "KEY_PREFIX": "ietf:celery",
+            },
         }
 
 PUBLISH_IPR_STATES = ['posted', 'removed', 'removed_objfalse']
diff --git a/ietf/static/js/investigate.js b/ietf/static/js/investigate.js
new file mode 100644
index 0000000000..b22e099b1e
--- /dev/null
+++ b/ietf/static/js/investigate.js
@@ -0,0 +1,53 @@
+// Copyright The IETF Trust 2025, All Rights Reserved
+document.addEventListener('DOMContentLoaded', () => {
+    const investigateForm = document.forms['investigate']
+    investigateForm.addEventListener('submit', (event) => {
+        // Intercept submission unless we've filled in the task_id field
+        if (!investigateForm.elements['id_task_id'].value) {
+            event.preventDefault()
+            runInvestigation()
+        }
+    })
+
+    const runInvestigation = async () => {
+        // Submit the request
+        const response = await fetch('', {
+            method: investigateForm.method, body: new FormData(investigateForm)
+        })
+        if (!response.ok) {
+            loadResultsFromTask('bogus-task-id') // bad task id will generate an error from Django
+        }
+        const taskId = (await response.json()).id
+        // Poll for completion of the investigation up to 18*10 = 180 seconds 
+        waitForResults(taskId, 18)
+    }
+
+    const waitForResults = async (taskId, retries) => {
+        // indicate that investigation is in progress
+        document.getElementById('spinner').classList.remove('d-none')
+        document.getElementById('investigate-button').disabled = true
+        investigateForm.elements['id_name_fragment'].disabled = true
+
+        const response = await fetch('?' + new URLSearchParams({ id: taskId }))
+        if (!response.ok) {
+            loadResultsFromTask('bogus-task-id') // bad task id will generate an error from Django
+        }
+        const result = await response.json()
+        if (result.status !== 'ready' && retries > 0) {
+            // 10 seconds per retry
+            setTimeout(waitForResults, 10000, taskId, retries - 1)
+        } else {
+            /* Either the response is ready or we timed out waiting. In either case, submit
+               the task_id via POST and let Django display an error if it's not ready. Before
+               submitting, re-enable the form fields so the POST is valid. Other in-progress
+               indicators will be reset when the POST response is loaded. */
+            loadResultsFromTask(taskId)
+        }
+    }
+
+    const loadResultsFromTask = (taskId) => {
+        investigateForm.elements['id_name_fragment'].disabled = false
+        investigateForm.elements['id_task_id'].value = taskId
+        investigateForm.submit()
+    }
+})
diff --git a/ietf/templates/doc/investigate.html b/ietf/templates/doc/investigate.html
index bdcf644406..436a8ce91a 100644
--- a/ietf/templates/doc/investigate.html
+++ b/ietf/templates/doc/investigate.html
@@ -6,112 +6,122 @@
     <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
 {% endblock %}
 {% block content %}
-  {% origin %}
-  <h1>Investigate</h1>
-  <form id="investigate" method="post">
-    {% csrf_token %}
-    {% bootstrap_form form %}
-    <button class="btn btn-primary" type="submit">Investigate</button>
-  </form>
-  {% if results %}
-    <div id="results">
-      {% if results.can_verify %}
-        <h2>These can be authenticated</h2>
-        <table id="authenticated" class="table table-sm table-striped tablesorter">
-          <thead>
-            <tr>
-              <th scope="col" data-sort="name">Name</th>
-              <th scope="col" data-sort="modified">Last Modified On</th>
-              <th scope="col" data-sort="link">Link</th>
-              <th scope="col" data-sort="source">Source</th>
-            </tr>
-          </thead>
-          <tbody>
-            {% for path in results.can_verify %}
-              {% with url=path|url_for_path %}
-                <tr>
-                    <td>{{path.name}}</td>
-                    <td>
-                        {% if path|mtime_is_epoch %}
-                          Timestamp has been lost (is Unix Epoch)
-                        {% else %}
-                          {{path|mtime|date:"DATETIME_FORMAT"}}
-                        {% endif %}
-                    </td>
-                    <td><a href="{{url}}">{{url}}</a></td>
-                    <td>{{path}}</td>
-                </tr>
-              {% endwith %}
-            {% endfor %}
-          </tbody>
-        </table>
-      {% else %}
-      <h2>Nothing with this name fragment can be authenticated</h2>
-      {% endif %}
-      <hr>
-      {% if results.unverifiable_collections %}
-        <h2>These are in the archive, but cannot be authenticated</h2>
-        <table id="unverifiable" class="table table-sm table-striped tablesorter">
-          <thead>
-            <tr>
-              <th scope="col" data-sort="name">Name</th>
-              <th scope="col" data-sort="modified">Last Modified On</th>
-              <th scope="col" data-sort="link">Link</th>
-              <th scope="col" data-sort="source">Source</th>
-            </tr>
-          </thead>
-          <tbody>
-            {% for path in results.unverifiable_collections %}
-              {% with url=path|url_for_path %}
-              <tr>
-                <td>{{path.name}}</td>
-                <td>
-                    {% if path|mtime_is_epoch %}
-                      Timestamp has been lost (is Unix Epoch)
-                    {% else %}
-                      {{path|mtime|date:"DATETIME_FORMAT"}}
-                    {% endif %}
-                </td>
-                <td><a href="{{url}}">{{url}}</a></td>
-                <td>{{path}}</td>
-              </tr>
-              {% endwith %}
-            {% endfor %}
-          </tbody>
-        </table>
-      {% endif %}
-      {% if results.unexpected %}
-        <h2>These are unexpected and we do not know what their origin is. These cannot be authenticated</h2>
-        <table id="unexpected" class="table table-sm table-striped tablesorter">
-          <thead>
-            <tr>
-              <th scope="col" data-sort="name">Name</th>
-              <th scope="col" data-sort="modified">Last Modified On</th>
-              <th scope="col" data-sort="link">Link</th>
-            </tr>
-          </thead>
-          <tbody>
-            {% for path in results.unexpected %}
-              {% with url=path|url_for_path %}
-              <tr>
-                <td>{{path.name}}</td>
-                <td>
-                    {% if path|mtime_is_epoch %}
-                      Timestamp has been lost (is Unix Epoch)
-                    {% else %}
-                      {{path|mtime|date:"DATETIME_FORMAT"}}
-                    {% endif %}
-                </td>
-                <td><a href="{{url}}">{{url}}</a></td>
-              </tr>
-              {% endwith %}
-            {% endfor %}
-          </tbody>
-        </table>
-      {% endif %}
+    {% origin %}
+    <h1>Investigate</h1>
+    <div class="mb-3">
+        <form id="investigate" method="post">
+            {% csrf_token %}
+            {% bootstrap_form form %}
+            <button class="btn btn-primary" type="submit" id="investigate-button">
+            <span id="spinner"
+                  class="spinner-border spinner-border-sm d-none"
+                  role="status"
+                  aria-hidden="true">
+            </span>
+                Investigate
+            </button>
+        </form>
     </div>
-  {% endif %}
+    {% if results %}
+        <div id="results">
+            {% if results.can_verify %}
+                <h2>These can be authenticated</h2>
+                <table id="authenticated" class="table table-sm table-striped tablesorter">
+                    <thead>
+                    <tr>
+                        <th scope="col" data-sort="name">Name</th>
+                        <th scope="col" data-sort="modified">Last Modified On</th>
+                        <th scope="col" data-sort="link">Link</th>
+                        <th scope="col" data-sort="source">Source</th>
+                    </tr>
+                    </thead>
+                    <tbody>
+                    {% for path in results.can_verify %}
+                        {% with url=path|url_for_path %}
+                            <tr>
+                                <td>{{ path.name }}</td>
+                                <td>
+                                    {% if path|mtime_is_epoch %}
+                                        Timestamp has been lost (is Unix Epoch)
+                                    {% else %}
+                                        {{ path|mtime|date:"DATETIME_FORMAT" }}
+                                    {% endif %}
+                                </td>
+                                <td><a href="{{ url }}">{{ url }}</a></td>
+                                <td>{{ path }}</td>
+                            </tr>
+                        {% endwith %}
+                    {% endfor %}
+                    </tbody>
+                </table>
+            {% else %}
+                <h2>Nothing with this name fragment can be authenticated</h2>
+            {% endif %}
+            <hr>
+            {% if results.unverifiable_collections %}
+                <h2>These are in the archive, but cannot be authenticated</h2>
+                <table id="unverifiable" class="table table-sm table-striped tablesorter">
+                    <thead>
+                    <tr>
+                        <th scope="col" data-sort="name">Name</th>
+                        <th scope="col" data-sort="modified">Last Modified On</th>
+                        <th scope="col" data-sort="link">Link</th>
+                        <th scope="col" data-sort="source">Source</th>
+                    </tr>
+                    </thead>
+                    <tbody>
+                    {% for path in results.unverifiable_collections %}
+                        {% with url=path|url_for_path %}
+                            <tr>
+                                <td>{{ path.name }}</td>
+                                <td>
+                                    {% if path|mtime_is_epoch %}
+                                        Timestamp has been lost (is Unix Epoch)
+                                    {% else %}
+                                        {{ path|mtime|date:"DATETIME_FORMAT" }}
+                                    {% endif %}
+                                </td>
+                                <td><a href="{{ url }}">{{ url }}</a></td>
+                                <td>{{ path }}</td>
+                            </tr>
+                        {% endwith %}
+                    {% endfor %}
+                    </tbody>
+                </table>
+            {% endif %}
+            {% if results.unexpected %}
+                <h2>These are unexpected and we do not know what their origin is. These cannot be authenticated</h2>
+                <table id="unexpected" class="table table-sm table-striped tablesorter">
+                    <thead>
+                    <tr>
+                        <th scope="col" data-sort="name">Name</th>
+                        <th scope="col" data-sort="modified">Last Modified On</th>
+                        <th scope="col" data-sort="link">Link</th>
+                    </tr>
+                    </thead>
+                    <tbody>
+                    {% for path in results.unexpected %}
+                        {% with url=path|url_for_path %}
+                            <tr>
+                                <td>{{ path.name }}</td>
+                                <td>
+                                    {% if path|mtime_is_epoch %}
+                                        Timestamp has been lost (is Unix Epoch)
+                                    {% else %}
+                                        {{ path|mtime|date:"DATETIME_FORMAT" }}
+                                    {% endif %}
+                                </td>
+                                <td><a href="{{ url }}">{{ url }}</a></td>
+                            </tr>
+                        {% endwith %}
+                    {% endfor %}
+                    </tbody>
+                </table>
+            {% endif %}
+        </div>
+    {% endif %}
 {% endblock %}
 {% block js %}
     <script src="{% static "ietf/js/list.js" %}"></script>
+    <script src="{% static "ietf/js/investigate.js" %}"></script>
 {% endblock %}
\ No newline at end of file
diff --git a/package.json b/package.json
index afcabd13ed..b3d36b349c 100644
--- a/package.json
+++ b/package.json
@@ -132,6 +132,7 @@
         "ietf/static/js/highcharts.js",
         "ietf/static/js/highstock.js",
         "ietf/static/js/ietf.js",
+        "ietf/static/js/investigate.js",
         "ietf/static/js/ipr-edit.js",
         "ietf/static/js/ipr-search.js",
         "ietf/static/js/js-cookie.js",
diff --git a/requirements.txt b/requirements.txt
index ec5fc60b5f..ae8b06faee 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,6 +13,7 @@ Django>4.2,<5
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
 django-celery-beat>=2.3.0
+django-celery-results>=2.5.1
 django-csp>=3.7
 django-cors-headers>=3.11.0
 django-debug-toolbar>=3.2.4

From 03d6d598ed7fb9172a68f7dfd7925951a0e78cf3 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Fri, 17 Jan 2025 15:28:12 +0000
Subject: [PATCH 219/707] ci: update base image target version to 20250117T1516

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 2f35125564..59fbd0cc1b 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250116T2033
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250117T1516
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index fd2d539a9e..fb0f6385f8 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250116T2033
+20250117T1516

From ad56d42d9c6858457f7a36856e7c071d7d41f5e0 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 17 Jan 2025 12:35:26 -0600
Subject: [PATCH 220/707] ci: dev/test blobstore image (#8431)

* ci: dev/test blobstore image

* chore: removed QEMU step
---
 .github/workflows/build-devblobstore.yml | 47 ++++++++++++++++++++++++
 docker/devblobstore.Dockerfile           |  9 +++++
 2 files changed, 56 insertions(+)
 create mode 100644 .github/workflows/build-devblobstore.yml
 create mode 100644 docker/devblobstore.Dockerfile

diff --git a/.github/workflows/build-devblobstore.yml b/.github/workflows/build-devblobstore.yml
new file mode 100644
index 0000000000..2d8214b448
--- /dev/null
+++ b/.github/workflows/build-devblobstore.yml
@@ -0,0 +1,47 @@
+name: Build Dev/Test Blobstore Docker Image
+
+on:
+  push:
+    branches:
+      - 'main'
+    paths:
+      - '.github/workflows/build-devblobstore.yml'
+
+  workflow_dispatch: 
+
+env:
+  MINIO_VERSION: latest
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Docker Build & Push
+      uses: docker/build-push-action@v6
+      env:
+        DOCKER_BUILD_NO_SUMMARY: true
+      with:
+        context: .
+        file: docker/devblobstore.Dockerfile
+        platforms: linux/amd64,linux/arm64
+        push: true
+        build-args: MINIO_VERSION=${{ env.MINIO_VERSION }}
+        tags: |
+          ghcr.io/ietf-tools/datatracker-devblobstore:${{ env.MINIO_VERSION }}
+          ghcr.io/ietf-tools/datatracker-devblobstore:latest
diff --git a/docker/devblobstore.Dockerfile b/docker/devblobstore.Dockerfile
new file mode 100644
index 0000000000..40bfbd0e96
--- /dev/null
+++ b/docker/devblobstore.Dockerfile
@@ -0,0 +1,9 @@
+ARG MINIO_VERSION=latest
+FROM quay.io/minio/minio:${MINIO_VERSION}
+LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
+
+ENV MINIO_ROOT_USER=minio_root
+ENV MINIO_ROOT_PASSWORD=minio_pass
+ENV MINIO_DEFAULT_BUCKETS=defaultbucket
+
+CMD ["server", "--console-address", ":9001", "/data"]

From 65a96948dc8545e3b15f791c9c855fc7c64d03bf Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 20 Jan 2025 11:59:18 -0400
Subject: [PATCH 221/707] fix: map "Editorial" -> StreamName (#8442)

---
 ietf/sync/rfceditor.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index 6b3482f10d..889317cdcf 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -373,6 +373,7 @@ def update_docs_from_rfc_index(
         "INDEPENDENT": StreamName.objects.get(slug="ise"),
         "IRTF": StreamName.objects.get(slug="irtf"),
         "IAB": StreamName.objects.get(slug="iab"),
+        "Editorial": StreamName.objects.get(slug="editorial"),
         "Legacy": StreamName.objects.get(slug="legacy"),
     }
 

From 3ec94225e36d8caa6ee3c516499874455d51b088 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 21 Jan 2025 10:59:40 -0400
Subject: [PATCH 222/707] chore: remove deprecated_api_upload_bluesheet method
 (#8443)

* chore: remove deprecated_api_upload_bluesheet()

* test: remove test of removed method
---
 ietf/api/tests.py     | 92 -------------------------------------------
 ietf/meeting/views.py | 64 ------------------------------
 2 files changed, 156 deletions(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 6e7fb374fe..d195f49b94 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -554,98 +554,6 @@ def test_api_upload_polls_and_chatlog(self):
             newdoccontent = get_unicode_document_content(newdoc.name, Path(session.meeting.get_materials_path()) / type_id / newdoc.uploaded_filename)
             self.assertEqual(json.loads(content), json.loads(newdoccontent))
 
-    def test_deprecated_api_upload_bluesheet(self):
-        url = urlreverse('ietf.meeting.views.api_upload_bluesheet')
-        recmanrole = RoleFactory(group__type_id='ietf', name_id='recman')
-        recman = recmanrole.person
-        meeting = MeetingFactory(type_id='ietf')
-        session = SessionFactory(group__type_id='wg', meeting=meeting)
-        group = session.group
-        apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
-
-        people = [
-            {"name": "Andrea Andreotti", "affiliation": "Azienda"},
-            {"name": "Bosse Bernadotte", "affiliation": "Bolag"},
-            {"name": "Charles Charlemagne", "affiliation": "Compagnie"},
-        ]
-        for i in range(3):
-            faker = random_faker()
-            people.append(dict(name=faker.name(), affiliation=faker.company()))
-        bluesheet = json.dumps(people)
-
-        # error cases
-        r = self.client.post(url, {})
-        self.assertContains(r, "Missing apikey parameter", status_code=400)
-
-        badrole = RoleFactory(group__type_id='ietf', name_id='ad')
-        badapikey = PersonalApiKeyFactory(endpoint=url, person=badrole.person)
-        badrole.person.user.last_login = timezone.now()
-        badrole.person.user.save()
-        r = self.client.post(url, {'apikey': badapikey.hash()})
-        self.assertContains(r, "Restricted to roles: Recording Manager, Secretariat", status_code=403)
-
-        r = self.client.post(url, {'apikey': apikey.hash()})
-        self.assertContains(r, "Too long since last regular login", status_code=400)
-        recman.user.last_login = timezone.now()
-        recman.user.save()
-
-        r = self.client.get(url, {'apikey': apikey.hash()})
-        self.assertContains(r, "Method not allowed", status_code=405)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'group': group.acronym})
-        self.assertContains(r, "Missing meeting parameter", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, })
-        self.assertContains(r, "Missing group parameter", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym})
-        self.assertContains(r, "Missing item parameter", status_code=400)
-
-        r = self.client.post(url,
-                             {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym, 'item': '1'})
-        self.assertContains(r, "Missing bluesheet parameter", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': '1', 'group': group.acronym,
-                                   'item': '1', 'bluesheet': bluesheet, })
-        self.assertContains(r, "No sessions found for meeting", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': 'bogous',
-                                   'item': '1', 'bluesheet': bluesheet, })
-        self.assertContains(r, "No sessions found in meeting '%s' for group 'bogous'" % meeting.number, status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym,
-                                   'item': '1', 'bluesheet': "foobar", })
-        self.assertContains(r, "Invalid json value: 'foobar'", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym,
-                                   'item': '5', 'bluesheet': bluesheet, })
-        self.assertContains(r, "No item '5' found in list of sessions for group", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym,
-                                   'item': 'foo', 'bluesheet': bluesheet, })
-        self.assertContains(r, "Expected a numeric value for 'item', found 'foo'", status_code=400)
-
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym,
-                                   'item': '1', 'bluesheet': bluesheet, })
-        self.assertContains(r, "Done", status_code=200)
-
-        # Submit again, with slightly different content, as an updated version
-        people[1]['affiliation'] = 'Bolaget AB'
-        bluesheet = json.dumps(people)
-        r = self.client.post(url, {'apikey': apikey.hash(), 'meeting': meeting.number, 'group': group.acronym,
-                                   'item': '1', 'bluesheet': bluesheet, })
-        self.assertContains(r, "Done", status_code=200)
-
-        bluesheet = session.presentations.filter(document__type__slug='bluesheets').first().document
-        # We've submitted an update; check that the rev is right
-        self.assertEqual(bluesheet.rev, '01')
-        # Check the content
-        with open(bluesheet.get_file_name()) as file:
-            text = file.read()
-            for p in people:
-                self.assertIn(p['name'], html.unescape(text))
-                self.assertIn(p['affiliation'], html.unescape(text))
-
     def test_api_upload_bluesheet(self):
         url = urlreverse("ietf.meeting.views.api_upload_bluesheet")
         recmanrole = RoleFactory(group__type_id="ietf", name_id="recman")
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index f386f8932f..feb14f730b 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4666,11 +4666,6 @@ def err(code, text):
             content="Method not allowed", content_type="text/plain", permitted_methods=('POST',)
         )
 
-    # Temporary: fall back to deprecated interface if we have old-style parameters.
-    # Do away with this once meetecho is using the new pk-based interface.
-    if any(k in request.POST for k in ['meeting', 'group', 'item']):
-        return deprecated_api_upload_bluesheet(request)
-
     session_id = request.POST.get('session_id', None)
     if session_id is None:
         return err(400, 'Missing session_id parameter')
@@ -4707,65 +4702,6 @@ def err(code, text):
     return HttpResponse("Done", status=200, content_type='text/plain')
 
 
-def deprecated_api_upload_bluesheet(request):
-    def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
-    if request.method == 'POST':
-        # parameters:
-        #   apikey: the poster's personal API key
-        #   meeting: number as string, i.e., '101', or 'interim-2018-quic-02'
-        #   group: acronym or special, i.e., 'quic' or 'plenary'
-        #   item: '1', '2', '3' (the group's first, second, third etc.
-        #                           session during the week)
-        #   bluesheet: json blob with
-        #       [{'name': 'Name', 'affiliation': 'Organization', }, ...]
-        for item in ['meeting', 'group', 'item', 'bluesheet',]:
-            value = request.POST.get(item)
-            if not value:
-                return err(400, "Missing %s parameter" % item)
-        number = request.POST.get('meeting')
-        sessions = Session.objects.filter(meeting__number=number)
-        if not sessions.exists():
-            return err(400, "No sessions found for meeting '%s'" % (number, ))
-        acronym = request.POST.get('group')
-        sessions = sessions.filter(group__acronym=acronym)
-        if not sessions.exists():
-            return err(400, "No sessions found in meeting '%s' for group '%s'" % (number, acronym))
-        session_times = [ (s.official_timeslotassignment().timeslot.time, s.id, s) for s in sessions if s.official_timeslotassignment() ]
-        session_times.sort()
-        item = request.POST.get('item')
-        if not item.isdigit():
-            return err(400, "Expected a numeric value for 'item', found '%s'" % (item, ))
-        n = int(item)-1              # change 1-based to 0-based
-        try:
-            time, __, session = session_times[n]
-        except IndexError:
-            return err(400, "No item '%s' found in list of sessions for group" % (item, ))
-        bjson = request.POST.get('bluesheet')
-        try:
-            data = json.loads(bjson)
-        except json.decoder.JSONDecodeError:
-            return err(400, "Invalid json value: '%s'" % (bjson, ))
-
-        text = render_to_string('meeting/bluesheet.txt', {
-                'data': data,
-                'session': session,
-            })
-
-        fd, name = tempfile.mkstemp(suffix=".txt", text=True)
-        os.close(fd)
-        with open(name, "w") as file:
-            file.write(text)
-        with open(name, "br") as file:
-            save_err = save_bluesheet(request, session, file)
-        if save_err:
-            return err(400, save_err)
-    else:
-        return err(405, "Method not allowed")
-
-    return HttpResponse("Done", status=200, content_type='text/plain')
-
-
 def important_dates(request, num=None, output_format=None):
     assert num is None or num.isdigit()
     preview_roles = ['Area Director', 'Secretariat', 'IETF Chair', 'IAD', ]

From ba1ba6c6258f3e9150898b1090cffc6d5ee0bed9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 21 Jan 2025 12:17:41 -0400
Subject: [PATCH 223/707] test: fix test_api_upload_bluesheet (#8446)

* test: fix test_api_upload_bluesheet

* chore: delint
---
 ietf/api/tests.py | 17 +----------------
 1 file changed, 1 insertion(+), 16 deletions(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index d195f49b94..d9af457e95 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -560,7 +560,6 @@ def test_api_upload_bluesheet(self):
         recman = recmanrole.person
         meeting = MeetingFactory(type_id="ietf")
         session = SessionFactory(group__type_id="wg", meeting=meeting)
-        group = session.group
         apikey = PersonalApiKeyFactory(endpoint=url, person=recman)
 
         people = [
@@ -600,18 +599,6 @@ def test_api_upload_bluesheet(self):
         r = self.client.post(url, {"apikey": apikey.hash(), "session_id": session.pk})
         self.assertContains(r, "Missing bluesheet parameter", status_code=400)
 
-        r = self.client.post(
-            url,
-            {
-                "apikey": apikey.hash(),
-                "meeting": meeting.number,
-                "group": group.acronym,
-                "item": "1",
-                "bluesheet": "foobar",
-            },
-        )
-        self.assertContains(r, "Invalid json value: 'foobar'", status_code=400)
-
         bad_session_pk = int(Session.objects.order_by("-pk").first().pk) + 1
         r = self.client.post(
             url,
@@ -650,9 +637,7 @@ def test_api_upload_bluesheet(self):
             url,
             {
                 "apikey": apikey.hash(),
-                "meeting": meeting.number,
-                "group": group.acronym,
-                "item": "1",
+                "session_id": session.pk,
                 "bluesheet": bluesheet,
             },
         )

From 233e23f40ab7cb863d5992c411345e4ca9c10416 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 21 Jan 2025 10:19:15 -0600
Subject: [PATCH 224/707] fix: correct ftp dir path (#8433)

---
 ietf/settings.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index a1dc9ffe21..7fd4308bb0 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -745,8 +745,8 @@ def skip_unreadable_post(record):
 RFC_PATH = '/a/www/ietf-ftp/rfc/'
 CHARTER_PATH = '/a/ietfdata/doc/charter/'
 CHARTER_COPY_PATH = '/a/www/ietf-ftp/ietf'  # copy 1wg-charters files here if set
-CHARTER_COPY_OTHER_PATH = '/a/www/ftp/ietf'
-CHARTER_COPY_THIRD_PATH = '/a/www/ftp/charter'
+CHARTER_COPY_OTHER_PATH = '/a/ftp/ietf'
+CHARTER_COPY_THIRD_PATH = '/a/ftp/charter'
 GROUP_SUMMARY_PATH = '/a/www/ietf-ftp/ietf'
 BOFREQ_PATH = '/a/ietfdata/doc/bofreq/'
 CONFLICT_REVIEW_PATH = '/a/ietfdata/doc/conflict-review'

From 1c4820db46f89fbc31535906ca3da2d56360738f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 21 Jan 2025 14:42:57 -0400
Subject: [PATCH 225/707] ci: celery-results cache for k8s (#8450)

---
 k8s/settings_local.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index a63a02e536..f266ffcd62 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -272,6 +272,11 @@ def _multiline_to_list(s):
             "MAX_ENTRIES": 5000,
         },
     },
+    "celery-results": {
+        "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+        "KEY_PREFIX": "ietf:celery",
+    },
 }
 
 _csrf_trusted_origins_str = os.environ.get("DATATRACKER_CSRF_TRUSTED_ORIGINS")

From 9a72cc0d6ab6e951eb14f077da36b46d7dca9b6a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 22 Jan 2025 13:52:09 -0400
Subject: [PATCH 226/707] fix: increase investigate time; more feedback (#8457)

---
 ietf/static/js/investigate.js       |  6 +++---
 ietf/templates/doc/investigate.html | 12 +++++++-----
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/ietf/static/js/investigate.js b/ietf/static/js/investigate.js
index b22e099b1e..ee1c545147 100644
--- a/ietf/static/js/investigate.js
+++ b/ietf/static/js/investigate.js
@@ -18,13 +18,13 @@ document.addEventListener('DOMContentLoaded', () => {
             loadResultsFromTask('bogus-task-id') // bad task id will generate an error from Django
         }
         const taskId = (await response.json()).id
-        // Poll for completion of the investigation up to 18*10 = 180 seconds 
-        waitForResults(taskId, 18)
+        // Poll for completion of the investigation up to 60*10 = 600 seconds 
+        waitForResults(taskId, 60)
     }
 
     const waitForResults = async (taskId, retries) => {
         // indicate that investigation is in progress
-        document.getElementById('spinner').classList.remove('d-none')
+        document.querySelectorAll('.investigation-indicator').forEach(elt => elt.classList.remove('d-none'))
         document.getElementById('investigate-button').disabled = true
         investigateForm.elements['id_name_fragment'].disabled = true
 
diff --git a/ietf/templates/doc/investigate.html b/ietf/templates/doc/investigate.html
index 436a8ce91a..8b613117d5 100644
--- a/ietf/templates/doc/investigate.html
+++ b/ietf/templates/doc/investigate.html
@@ -13,13 +13,15 @@ <h1>Investigate</h1>
             {% csrf_token %}
             {% bootstrap_form form %}
             <button class="btn btn-primary" type="submit" id="investigate-button">
-            <span id="spinner"
-                  class="spinner-border spinner-border-sm d-none"
-                  role="status"
-                  aria-hidden="true">
-            </span>
+                <span class="spinner-border spinner-border-sm investigation-indicator d-none"
+                      role="status"
+                      aria-hidden="true">
+                </span>
                 Investigate
             </button>
+            <div class="alert alert-info mt-3 d-none investigation-indicator">
+                Please be patient, processing may take several minutes.
+            </div>
         </form>
     </div>
     {% if results %}

From 266d5bed3c2e0d2004b12e9d02dbc209f8295cad Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 22 Jan 2025 14:19:21 -0400
Subject: [PATCH 227/707] feat: cache file investigation results (#8459)

* feat: cache result of investigate_fragment

* test: test caching
---
 ietf/doc/tests.py | 37 +++++++++++++++++++++++++++
 ietf/doc/utils.py | 65 +++++++++++++++++++++++++++++++----------------
 2 files changed, 80 insertions(+), 22 deletions(-)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index f5af7bb48b..d74688f3f6 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -5,6 +5,8 @@
 import os
 import datetime
 import io
+from hashlib import sha384
+
 from django.http import HttpRequest
 import lxml
 import bibtexparser
@@ -3280,6 +3282,41 @@ def test_investigate_fragment(self):
             "draft-this-should-not-be-possible-00.txt",
         )
 
+    @mock.patch("ietf.doc.utils.caches")
+    def test_investigate_fragment_cache(self, mock_caches):
+        """investigate_fragment should cache its result"""
+        mock_default_cache = mock_caches["default"]
+        mock_default_cache.get.return_value = None  # disable cache
+        result = investigate_fragment("this-is-active")
+        self.assertEqual(len(result["can_verify"]), 1)
+        self.assertEqual(len(result["unverifiable_collections"]), 0)
+        self.assertEqual(len(result["unexpected"]), 0)
+        self.assertEqual(
+            list(result["can_verify"])[0].name, "draft-this-is-active-00.txt"
+        )
+        self.assertTrue(mock_default_cache.get.called)
+        self.assertTrue(mock_default_cache.set.called)
+        expected_key = f"investigate_fragment:{sha384(b'this-is-active').hexdigest()}"
+        self.assertEqual(mock_default_cache.set.call_args.kwargs["key"], expected_key)
+        cached_value = mock_default_cache.set.call_args.kwargs["value"]  # hang on to this
+        mock_default_cache.reset_mock()
+
+        # Check that a cached value is used
+        mock_default_cache.get.return_value = cached_value
+        with mock.patch("ietf.doc.utils.Path") as mock_path:
+            result = investigate_fragment("this-is-active")
+        # Check that we got the same results
+        self.assertEqual(len(result["can_verify"]), 1)
+        self.assertEqual(len(result["unverifiable_collections"]), 0)
+        self.assertEqual(len(result["unexpected"]), 0)
+        self.assertEqual(
+            list(result["can_verify"])[0].name, "draft-this-is-active-00.txt"
+        )
+        # And that we used the cache
+        self.assertFalse(mock_path.called)  # a proxy for "did the method do any real work"
+        self.assertTrue(mock_default_cache.get.called)
+        self.assertEqual(mock_default_cache.get.call_args, mock.call(expected_key))
+
     def test_investigate_get(self):
         """GET with no querystring should retrieve the investigate UI"""
         url = urlreverse("ietf.doc.views_doc.investigate")
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index ff19dfbde6..53307526a1 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -11,12 +11,14 @@
 
 from collections import defaultdict, namedtuple, Counter
 from dataclasses import dataclass
+from hashlib import sha384
 from pathlib import Path
 from typing import Iterator, Optional, Union
 from zoneinfo import ZoneInfo
 
 from django.conf import settings
 from django.contrib import messages
+from django.core.cache import caches
 from django.db.models import OuterRef
 from django.forms import ValidationError
 from django.http import Http404
@@ -1459,29 +1461,48 @@ def get_doc_email_aliases(name: Optional[str] = None):
     return sorted(aliases, key=lambda a: (a["doc_name"]))
 
 
-def investigate_fragment(name_fragment):
-    can_verify = set()
-    for root in [settings.INTERNET_DRAFT_PATH, settings.INTERNET_DRAFT_ARCHIVE_DIR]:
-        can_verify.update(list(Path(root).glob(f"*{name_fragment}*")))
-    archive_verifiable_names = set([p.name for p in can_verify])
-    # Can also verify drafts in proceedings directories
-    can_verify.update(list(Path(settings.AGENDA_PATH).glob(f"**/*{name_fragment}*")))
-
-    # N.B. This reflects the assumption that the internet draft archive dir is in the
-    # a directory with other collections (at /a/ietfdata/draft/collections as this is written)
-    unverifiable_collections = set([
-        p for p in
-        Path(settings.INTERNET_DRAFT_ARCHIVE_DIR).parent.glob(f"**/*{name_fragment}*")
-        if p.name not in archive_verifiable_names
-    ])
+def investigate_fragment(name_fragment: str):
+    cache = caches["default"]
+    # Ensure name_fragment does not interact badly with the cache key handling
+    name_digest = sha384(name_fragment.encode("utf8")).hexdigest()
+    cache_key = f"investigate_fragment:{name_digest}"
+    cached_result = cache.get(cache_key)
+    if cached_result is not None:
+        can_verify = cached_result["can_verify"]
+        unverifiable_collections = cached_result["unverifiable_collections"]
+        unexpected = cached_result["unexpected"]
+    else:
+        can_verify = set()
+        for root in [settings.INTERNET_DRAFT_PATH, settings.INTERNET_DRAFT_ARCHIVE_DIR]:
+            can_verify.update(list(Path(root).glob(f"*{name_fragment}*")))
+        archive_verifiable_names = set([p.name for p in can_verify])
+        # Can also verify drafts in proceedings directories
+        can_verify.update(list(Path(settings.AGENDA_PATH).glob(f"**/*{name_fragment}*")))
     
-    unverifiable_collections.difference_update(can_verify)
-
-    expected_names = set([p.name for p in can_verify.union(unverifiable_collections)])
-    maybe_unexpected = list(
-        Path(settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR).glob(f"*{name_fragment}*")
-    )
-    unexpected = [p for p in maybe_unexpected if p.name not in expected_names]
+        # N.B. This reflects the assumption that the internet draft archive dir is in the
+        # a directory with other collections (at /a/ietfdata/draft/collections as this is written)
+        unverifiable_collections = set([
+            p for p in
+            Path(settings.INTERNET_DRAFT_ARCHIVE_DIR).parent.glob(f"**/*{name_fragment}*")
+            if p.name not in archive_verifiable_names
+        ])
+        
+        unverifiable_collections.difference_update(can_verify)
+    
+        expected_names = set([p.name for p in can_verify.union(unverifiable_collections)])
+        maybe_unexpected = list(
+            Path(settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR).glob(f"*{name_fragment}*")
+        )
+        unexpected = [p for p in maybe_unexpected if p.name not in expected_names]
+        cache.set(
+            key=cache_key,
+            timeout=3600,  # 1 hour
+            value={
+                "can_verify": can_verify,
+                "unverifiable_collections": unverifiable_collections,
+                "unexpected": unexpected,
+            }
+        )
 
     return dict(
         can_verify=can_verify,

From d202ebbb91e206985a776c317d54c72e3aacf402 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 22 Jan 2025 15:07:06 -0400
Subject: [PATCH 228/707] refactor: single def of dict structure (#8460)

---
 ietf/doc/utils.py | 29 +++++++++--------------------
 1 file changed, 9 insertions(+), 20 deletions(-)

diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 53307526a1..10fe9ff2d7 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1466,12 +1466,8 @@ def investigate_fragment(name_fragment: str):
     # Ensure name_fragment does not interact badly with the cache key handling
     name_digest = sha384(name_fragment.encode("utf8")).hexdigest()
     cache_key = f"investigate_fragment:{name_digest}"
-    cached_result = cache.get(cache_key)
-    if cached_result is not None:
-        can_verify = cached_result["can_verify"]
-        unverifiable_collections = cached_result["unverifiable_collections"]
-        unexpected = cached_result["unexpected"]
-    else:
+    result = cache.get(cache_key)
+    if result is None:
         can_verify = set()
         for root in [settings.INTERNET_DRAFT_PATH, settings.INTERNET_DRAFT_ARCHIVE_DIR]:
             can_verify.update(list(Path(root).glob(f"*{name_fragment}*")))
@@ -1494,21 +1490,14 @@ def investigate_fragment(name_fragment: str):
             Path(settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR).glob(f"*{name_fragment}*")
         )
         unexpected = [p for p in maybe_unexpected if p.name not in expected_names]
-        cache.set(
-            key=cache_key,
-            timeout=3600,  # 1 hour
-            value={
-                "can_verify": can_verify,
-                "unverifiable_collections": unverifiable_collections,
-                "unexpected": unexpected,
-            }
+        result = dict(
+            can_verify=can_verify,
+            unverifiable_collections=unverifiable_collections,
+            unexpected=unexpected,
         )
-
-    return dict(
-        can_verify=can_verify,
-        unverifiable_collections=unverifiable_collections,
-        unexpected=unexpected,
-    )
+        # 1 hour caching
+        cache.set(key=cache_key, timeout=3600, value=result)
+    return result
 
 
 def update_or_create_draft_bibxml_file(doc, rev):

From ac88f73439fa1d240fbee9d7856eb3a49c0f9201 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 24 Jan 2025 10:30:02 -0600
Subject: [PATCH 229/707] chore: remove unreachable code (#8464)

---
 ietf/meeting/utils.py | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index b68a311f5d..b17c84f313 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -738,15 +738,10 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
 
     This function takes a _binary mode_ file object, a filename and a meeting object and subdir as string.
     It saves the file to the appropriate directory, get_materials_path() + subdir.
-    If the file is a zip file, it creates a new directory in 'slides', which is the basename of the
-    zip file and unzips the file in the new directory.
     """
     filename = Path(filename)
-    is_zipfile = filename.suffix == '.zip'
 
     path = Path(meeting.get_materials_path()) / subdir
-    if is_zipfile:
-        path = path / filename.stem
     path.mkdir(parents=True, exist_ok=True)
 
     # agendas and minutes can only have one file instance so delete file if it already exists
@@ -799,10 +794,6 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
             for chunk in chunks:
                 destination.write(chunk)
 
-    # unzip zipfile
-    if is_zipfile:
-        subprocess.call(['unzip', filename], cwd=path)
-
     return None
 
 def new_doc_for_session(type_id, session):

From 56f723a3bcd27adaf66e04c93ea53a58e8227197 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Sat, 25 Jan 2025 15:05:01 -0600
Subject: [PATCH 230/707] chore: remove unreachable code (#8465)

---
 ietf/meeting/utils.py | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index b17c84f313..cfe7adfae7 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -744,14 +744,6 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
     path = Path(meeting.get_materials_path()) / subdir
     path.mkdir(parents=True, exist_ok=True)
 
-    # agendas and minutes can only have one file instance so delete file if it already exists
-    if subdir in ('agenda', 'minutes'):
-        for f in path.glob(f'{filename.stem}.*'):
-            try:
-                f.unlink()
-            except FileNotFoundError:
-                pass  # if the file is already gone, so be it
-
     with (path / filename).open('wb+') as destination:
         # prep file for reading
         if hasattr(file, "chunks"):

From e91bda7e5e21fc7cbd7de500e8d66141bb6900c6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Jan 2025 13:28:19 -0400
Subject: [PATCH 231/707] feat: consolidate HTML sanitizing (#8471)

* refactor: isolate bleach code

* refactor: move html fns to html.py

* refactor: lose the bleach.py module; refactor

* refactor: sanitize_document -> clean_html

Drops <meta charset="utf-8"> addition after cleaning.

* fix: disambiguate import

* feat: restore <meta charset="utf-8"> tag

* chore: comments

* chore(deps): drop lxml_html_clean package

* refactor: on second thought, no meta charset

* refactor: sanitize_fragment -> clean_html

* test: remove check for charset

* chore: fix lint
---
 ietf/doc/templatetags/ietf_filters.py  |  15 ++--
 ietf/meeting/tests_views.py            |   3 +-
 ietf/meeting/utils.py                  |   6 +-
 ietf/utils/html.py                     | 115 ++++++++++++++-----------
 ietf/utils/markdown.py                 |  12 +--
 ietf/utils/templatetags/textfilters.py |   4 +-
 ietf/utils/text.py                     |  66 ++++++--------
 requirements.txt                       |   3 +-
 8 files changed, 110 insertions(+), 114 deletions(-)

diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index 5a8afd9956..e1a80a26b2 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -26,10 +26,11 @@
 from ietf.doc.models import BallotDocEvent, Document
 from ietf.doc.models import ConsensusDocEvent
 from ietf.ietfauth.utils import can_request_rfc_publication as utils_can_request_rfc_publication
-from ietf.utils.html import sanitize_fragment
 from ietf.utils import log
 from ietf.doc.utils import prettify_std_name
-from ietf.utils.text import wordwrap, fill, wrap_text_if_unwrapped, bleach_linker, bleach_cleaner, validate_url
+from ietf.utils.html import clean_html
+from ietf.utils.text import wordwrap, fill, wrap_text_if_unwrapped, linkify
+from ietf.utils.validators import validate_url
 
 register = template.Library()
 
@@ -98,7 +99,7 @@ def sanitize(value):
     attributes to those deemed acceptable.  See ietf/utils/html.py
     for the details.
     """
-    return mark_safe(sanitize_fragment(value))
+    return mark_safe(clean_html(value))
 
 
 # For use with ballot view
@@ -446,16 +447,16 @@ def ad_area(user):
 @register.filter
 def format_history_text(text, trunc_words=25):
     """Run history text through some cleaning and add ellipsis if it's too long."""
-    full = mark_safe(bleach_cleaner.clean(text))
-    full = bleach_linker.linkify(urlize_ietf_docs(full))
+    full = mark_safe(clean_html(text))
+    full = linkify(urlize_ietf_docs(full))
 
     return format_snippet(full, trunc_words)
 
 @register.filter
 def format_snippet(text, trunc_words=25): 
     # urlize if there aren't already links present
-    text = bleach_linker.linkify(text)
-    full = keep_spacing(collapsebr(linebreaksbr(mark_safe(sanitize_fragment(text)))))
+    text = linkify(text)
+    full = keep_spacing(collapsebr(linebreaksbr(mark_safe(clean_html(text)))))
     snippet = truncatewords_html(full, trunc_words)
     if snippet != full:
         return mark_safe('<div class="snippet">%s<button type="button" aria-label="Expand" class="btn btn-sm btn-primary show-all"><i class="bi bi-caret-down"></i></button></div><div class="d-none full">%s</div>' % (snippet, full))
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 0647da52ab..b52f8de9b2 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -6423,8 +6423,7 @@ def test_upload_minutes_agenda(self):
             text = doc.text()
             self.assertIn('Some text', text)
             self.assertNotIn('<section>', text)
-            self.assertIn('charset="utf-8"', text)
-
+        
             # txt upload
             test_file = BytesIO(b'This is some text for a test, with the word\nvirtual at the beginning of a line.')
             test_file.name = "some.txt"
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index cfe7adfae7..4f800980c3 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -30,7 +30,7 @@
 from ietf.name.models import SessionStatusName, ConstraintName, DocTypeName
 from ietf.person.models import Person
 from ietf.stats.models import MeetingRegistration
-from ietf.utils.html import sanitize_document
+from ietf.utils.html import clean_html
 from ietf.utils.log import log
 from ietf.utils.timezone import date_today
 
@@ -773,8 +773,8 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
                     return "Failure trying to save '%s'. Hint: Try to upload as UTF-8: %s..." % (filename, str(e)[:120])
             # Whole file sanitization; add back what's missing from a complete
             # document (sanitize will remove these).
-            clean = sanitize_document(text)
-            destination.write(clean.encode('utf8'))
+            clean = clean_html(text)
+            destination.write(clean.encode("utf8"))
             if request and clean != text:
                 messages.warning(request,
                                  (
diff --git a/ietf/utils/html.py b/ietf/utils/html.py
index 9d0cd7c84f..3f3efe2f37 100644
--- a/ietf/utils/html.py
+++ b/ietf/utils/html.py
@@ -5,11 +5,7 @@
 
 
 import bleach
-import copy
 import html2text
-import lxml.etree
-import lxml.html
-import lxml.html.clean
 
 import debug                            # pyflakes:ignore
 
@@ -17,62 +13,66 @@
 from django.utils.functional import keep_lazy
 
 from ietf.utils.mime import get_mime_type
-from ietf.utils.text import bleach_cleaner, tags as acceptable_tags
 
-acceptable_protocols = ['http', 'https', 'mailto', 'xmpp', ]
 
-def unescape(text):
-    """
-    Returns the given text with ampersands, quotes and angle brackets decoded
-    for use in URLs.
+# Allow the protocols/tags/attributes we specifically want, plus anything that bleach declares
+# to be safe. As of 2025-01-27, the explicit lists for protocols and tags are a strict superset
+# of bleach's defaults.
+acceptable_protocols = bleach.sanitizer.ALLOWED_PROTOCOLS.union(
+    {"http", "https", "mailto", "ftp", "xmpp"}
+)
+acceptable_tags = bleach.sanitizer.ALLOWED_TAGS.union(
+    {
+        # fmt: off
+        "a", "abbr", "acronym", "address", "b", "big",
+        "blockquote", "body", "br", "caption", "center", "cite", "code", "col",
+        "colgroup", "dd", "del", "dfn", "dir", "div", "dl", "dt", "em", "font",
+        "h1", "h2", "h3", "h4", "h5", "h6", "head", "hr", "html", "i", "ins", "kbd",
+        "li", "ol", "p", "pre", "q", "s", "samp", "small", "span", "strike", "style",
+        "strong", "sub", "sup", "table", "title", "tbody", "td", "tfoot", "th", "thead",
+        "tr", "tt", "u", "ul", "var"
+        # fmt: on
+    }
+)
+acceptable_attributes = bleach.sanitizer.ALLOWED_ATTRIBUTES | {
+    "*": ["id"],
+    "ol": ["start"],
+}
+
+
+# Instantiate sanitizer classes
+_bleach_cleaner = bleach.sanitizer.Cleaner(
+    tags=acceptable_tags,
+    attributes=acceptable_attributes,
+    protocols=acceptable_protocols,
+    strip=True,
+)
+
+
+_liberal_bleach_cleaner = bleach.sanitizer.Cleaner(
+    tags=acceptable_tags.union({"img", "figure", "figcaption"}),
+    attributes=acceptable_attributes | {"img": ["src", "alt"]},
+    protocols=acceptable_protocols,
+    strip=True,
+)
+
+
+def clean_html(text: str):
+    """Clean the HTML in a string"""
+    return _bleach_cleaner.clean(text)
+
+
+def liberal_clean_html(text: str):
+    """More permissively clean the HTML in a string"""
+    return _liberal_bleach_cleaner.clean(text)
 
-    This function undoes what django.utils.html.escape() does
-    """
-    return text.replace('&amp;', '&').replace('&#39;', "'").replace('&quot;', '"').replace('&gt;', '>').replace('&lt;', '<' )
 
 @keep_lazy(str)
 def remove_tags(html, tags):
     """Returns the given HTML sanitized, and with the given tags removed."""
-    allowed = set(acceptable_tags) - set([ t.lower() for t in tags ])
+    allowed = acceptable_tags - set(t.lower() for t in tags)
     return bleach.clean(html, tags=allowed, strip=True)
 
-# ----------------------------------------------------------------------
-# Html fragment cleaning
-
-def sanitize_fragment(html):
-    return bleach_cleaner.clean(html)
-
-# ----------------------------------------------------------------------
-# Page cleaning
-
-
-class Cleaner(lxml.html.clean.Cleaner):
-    charset = 'utf-8'
-    def __init__(self, charset='utf-8', **kw):
-        self.charset = charset
-        super(Cleaner, self).__init__(**kw)
-        
-    # Copied from lxml 4.2.0 and modified to insert charset meta:
-    def clean_html(self, html):
-        result_type = type(html)
-        if isinstance(html, (str, bytes)):
-            doc = lxml.html.fromstring(html)
-        else:
-            doc = copy.deepcopy(html)
-        self(doc)
-        head = doc.find('head')
-        if head != None:
-            meta = lxml.etree.Element('meta', charset=self.charset)
-            meta.tail = '\n'
-            head.insert(0, meta)
-        return lxml.html._transform_result(result_type, doc)
-
-# We will be saving as utf-8 later, so set that in the meta tag.
-lxml_cleaner = Cleaner(allow_tags=acceptable_tags, remove_unknown_tags=None, style=False, page_structure=False, charset='utf-8')
-
-def sanitize_document(html):
-    return lxml_cleaner.clean_html(html)
-
 
 # ----------------------------------------------------------------------
 # Text field cleaning
@@ -86,4 +86,15 @@ def clean_text_field(text):
     else:
         raise forms.ValidationError("Unexpected text field mime type: %s" % mime_type)
     return text
-    
+
+
+def unescape(text):
+    """
+    Returns the given text with ampersands, quotes and angle brackets decoded
+    for use in URLs.
+
+    This function undoes what django.utils.html.escape() does
+    """
+    return text.replace('&amp;', '&').replace('&#39;', "'").replace('&quot;', '"').replace('&gt;', '>').replace('&lt;', '<' )
+
+
diff --git a/ietf/utils/markdown.py b/ietf/utils/markdown.py
index 446d348959..0b522685b2 100644
--- a/ietf/utils/markdown.py
+++ b/ietf/utils/markdown.py
@@ -12,13 +12,15 @@
 from django.utils.safestring import mark_safe
 
 from ietf.doc.templatetags.ietf_filters import urlize_ietf_docs
-from ietf.utils.text import bleach_cleaner, liberal_bleach_cleaner, bleach_linker
+from .html import clean_html, liberal_clean_html
+from .text import linkify
+
 
 
 class LinkifyExtension(Extension):
     """
     Simple Markdown extension inspired by https://github.com/daGrevis/mdx_linkify,
-    but using our bleach_linker directly. Doing the linkification on the converted
+    but using our own linker directly. Doing the linkification on the converted
     Markdown output introduces artifacts.
     """
 
@@ -31,12 +33,12 @@ def extendMarkdown(self, md):
 
 class LinkifyPostprocessor(Postprocessor):
     def run(self, text):
-        return urlize_ietf_docs(bleach_linker.linkify(text))
+        return urlize_ietf_docs(linkify(text))
 
 
 def markdown(text):
     return mark_safe(
-        bleach_cleaner.clean(
+        clean_html(
             python_markdown.markdown(
                 text,
                 extensions=[
@@ -52,7 +54,7 @@ def markdown(text):
 
 def liberal_markdown(text):
     return mark_safe(
-        liberal_bleach_cleaner.clean(
+        liberal_clean_html(
             python_markdown.markdown(
                 text,
                 extensions=[
diff --git a/ietf/utils/templatetags/textfilters.py b/ietf/utils/templatetags/textfilters.py
index 70b94cf673..3b240740e0 100644
--- a/ietf/utils/templatetags/textfilters.py
+++ b/ietf/utils/templatetags/textfilters.py
@@ -11,7 +11,7 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.utils.text import xslugify as _xslugify, texescape, bleach_linker
+from ietf.utils.text import linkify as _linkify, xslugify as _xslugify, texescape
 
 register = template.Library()
 
@@ -74,7 +74,7 @@ def texescape_filter(value):
 @register.filter
 @stringfilter
 def linkify(value):
-    text = mark_safe(bleach_linker.linkify(value))
+    text = mark_safe(_linkify(value))
     return text
 
 @register.filter
diff --git a/ietf/utils/text.py b/ietf/utils/text.py
index 2fba113d01..4e5d5b6cd5 100644
--- a/ietf/utils/text.py
+++ b/ietf/utils/text.py
@@ -1,17 +1,15 @@
 # Copyright The IETF Trust 2016-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-
-import bleach  # type: ignore
-import copy
+import bleach
 import email
 import re
 import textwrap
 import tlds
 import unicodedata
 
-from django.core.validators import URLValidator
 from django.core.exceptions import ValidationError
+from django.core.validators import URLValidator
 from django.utils.functional import keep_lazy
 from django.utils.safestring import mark_safe
 
@@ -19,66 +17,52 @@
 
 from .texescape import init as texescape_init, tex_escape_map
 
-tlds_sorted = sorted(tlds.tld_set, key=len, reverse=True)
-protocols = set(bleach.sanitizer.ALLOWED_PROTOCOLS)
-protocols.add("ftp")  # we still have some ftp links
-protocols.add("xmpp")  # we still have some xmpp links
-
-tags = set(bleach.sanitizer.ALLOWED_TAGS).union(
-    {
-        # fmt: off
-        'a', 'abbr', 'acronym', 'address', 'b', 'big',
-        'blockquote', 'body', 'br', 'caption', 'center', 'cite', 'code', 'col',
-        'colgroup', 'dd', 'del', 'dfn', 'dir', 'div', 'dl', 'dt', 'em', 'font',
-        'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'head', 'hr', 'html', 'i', 'ins', 'kbd',
-        'li', 'ol', 'p', 'pre', 'q', 's', 'samp', 'small', 'span', 'strike', 'style',
-        'strong', 'sub', 'sup', 'table', 'title', 'tbody', 'td', 'tfoot', 'th', 'thead',
-        'tr', 'tt', 'u', 'ul', 'var'
-        # fmt: on
-    }
-)
+# Sort in reverse so substrings are considered later - e.g., so ".co" comes after ".com".
+tlds_sorted = sorted(tlds.tld_set, reverse=True)
 
-attributes = copy.copy(bleach.sanitizer.ALLOWED_ATTRIBUTES)
-attributes["*"] = ["id"]
-attributes["ol"] = ["start"]
+# Protocols we're interested in auto-linking. See also ietf.utils.html.acceptable_protocols,
+# which is protocols we allow people to include explicitly  in sanitized html. 
+linkable_protocols = ["http", "https", "mailto", "ftp", "xmpp"]
 
-bleach_cleaner = bleach.sanitizer.Cleaner(
-    tags=tags, attributes=attributes, protocols=protocols, strip=True
-)
-
-liberal_tags = copy.copy(tags)
-liberal_attributes = copy.copy(attributes)
-liberal_tags.update(["img","figure","figcaption"])
-liberal_attributes["img"] = ["src","alt"]
 
-liberal_bleach_cleaner = bleach.sanitizer.Cleaner(
-    tags=liberal_tags, attributes=liberal_attributes, protocols=protocols, strip=True
-)
-
-validate_url = URLValidator()
+_validate_url = URLValidator() 
 
 
 def check_url_validity(attrs, new=False):
+    """Callback for bleach linkify
+    
+    :param attrs: dict of attributes of the <a> tag
+    :param new: boolean - True if the link is new; False if <a> was found in text
+    :return: new dict of attributes for the link, or None to block link creation 
+
+    Attributes are namespaced, so normally look like `(None, "SomeAttribute")`.
+    This includes as the keys in the `attrs` argument, so `attrs[(None, "href")]`
+    would be the value of the href attribute.  
+    """
     if (None, "href") not in attrs:
         # rfc2html creates a tags without href
         return attrs
     url = attrs[(None, "href")]
     try:
         if url.startswith("http"):
-            validate_url(url)
+            _validate_url(url)
     except ValidationError:
         return None
     return attrs
 
 
-bleach_linker = bleach.Linker(
+_bleach_linker = bleach.Linker(
     callbacks=[check_url_validity],
-    url_re=bleach.linkifier.build_url_re(tlds=tlds_sorted, protocols=protocols),
+    url_re=bleach.linkifier.build_url_re(tlds=tlds_sorted, protocols=linkable_protocols),
     email_re=bleach.linkifier.build_email_re(tlds=tlds_sorted),  # type: ignore
     parse_email=True,
 )
 
 
+def linkify(text):
+    return _bleach_linker.linkify(text)
+
+
 @keep_lazy(str)
 def xslugify(value):
     """
diff --git a/requirements.txt b/requirements.txt
index ae8b06faee..073a6bfa0a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -43,8 +43,7 @@ jsonfield>=3.1.0    # for SubmissionCheck.  This is https://github.com/bradjaspe
 jsonschema[format]>=4.2.1
 jwcrypto>=1.2    # for signed notifications - this is aspirational, and is not really used.
 logging_tree>=1.9    # Used only by the showloggers management command
-lxml>=5.3.0    # lxml[html_clean] fails on some architectures
-lxml_html_clean>=0.4.1
+lxml>=5.3.0
 markdown>=3.3.6
 types-markdown>=3.3.6
 mock>=4.0.3    # Used only by tests, of course

From 826f4d87478c41d7909bfb1eb1558455e14e37b9 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Tue, 28 Jan 2025 17:39:50 +0000
Subject: [PATCH 232/707] ci: update base image target version to 20250128T1728

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 59fbd0cc1b..852ba43c80 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250117T1516
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250128T1728
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index fb0f6385f8..fbc9426744 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250117T1516
+20250128T1728

From d3bf0a37dccfbd7ca3aa8c5190ceaf96c33813fb Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 29 Jan 2025 15:11:12 -0400
Subject: [PATCH 233/707] refactor: don't template inside <script> (#8480)

---
 ietf/static/js/complete-review.js              |  4 +++-
 ietf/templates/doc/review/complete_review.html | 16 +++++++---------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/ietf/static/js/complete-review.js b/ietf/static/js/complete-review.js
index a359dac237..3a58ba9700 100644
--- a/ietf/static/js/complete-review.js
+++ b/ietf/static/js/complete-review.js
@@ -24,6 +24,8 @@ $(document)
             .before(mailArchiveSearchTemplate);
 
         var mailArchiveSearch = form.find(".mail-archive-search");
+        const isReviewer = mailArchiveSearch.data('isReviewer');
+        const searchMailArchiveUrl = mailArchiveSearch.data('searchMailArchiveUrl');
 
         var retrievingData = null;
 
@@ -190,4 +192,4 @@ $(document)
             form.find("[name=review_submission][value=link]")
                 .trigger("click");
         }
-    });
\ No newline at end of file
+    });
diff --git a/ietf/templates/doc/review/complete_review.html b/ietf/templates/doc/review/complete_review.html
index f30c641e46..091f30532e 100644
--- a/ietf/templates/doc/review/complete_review.html
+++ b/ietf/templates/doc/review/complete_review.html
@@ -94,7 +94,13 @@ <h1>
         {% endif %}
         <div class="template d-none">
             {% if mail_archive_query_urls %}
-                <div class="mail-archive-search">
+                <div class="mail-archive-search"
+                    {% if assignment %}
+                     data-search-mail-archive-url="{% url "ietf.doc.views_review.search_mail_archive" name=doc.name assignment_id=assignment.pk %}"
+                    {% else %}
+                     data-search-mail-archive-url="{% url "ietf.doc.views_review.search_mail_archive" name=doc.name acronym=team.acronym %}"
+                    {% endif %}
+                     data-is-reviewer="{{ is_reviewer|yesno:"true,false" }}">
                     <div class="offset-md-2 col-md-10">
                         <label for="mail-archive-subjects" class="form-label">Search {{team.list_email}} mail archive subjects for:</label>
                         <div class="input-group mb-3">
@@ -144,13 +150,5 @@ <h1>
 {% endblock %}
 {% block js %}
     <script src="{% static 'ietf/js/datepicker.js' %}"></script>
-    <script>
-        {% if assignment %}
-            var searchMailArchiveUrl = "{% url "ietf.doc.views_review.search_mail_archive" name=doc.name assignment_id=assignment.pk %}";
-        {% else %}
-            var searchMailArchiveUrl = "{% url "ietf.doc.views_review.search_mail_archive" name=doc.name acronym=team.acronym %}";
-        {% endif %}
-        var isReviewer = {{ is_reviewer|yesno:'true,false' }};
-    </script>
     <script src="{% static 'ietf/js/complete-review.js' %}"></script>
 {% endblock %}
\ No newline at end of file

From da858725fd43b42255fa867fc2aa2abbec429299 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 30 Jan 2025 12:21:15 -0400
Subject: [PATCH 234/707] fix: guard against KeyError (#8485)

---
 ietf/iesg/utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/iesg/utils.py b/ietf/iesg/utils.py
index a56fa72cee..56571dc753 100644
--- a/ietf/iesg/utils.py
+++ b/ietf/iesg/utils.py
@@ -33,7 +33,7 @@ def telechat_page_count(date=None, docs=None, ad=None):
             ballot = draft.active_ballot()
             if ballot:
                 positions = ballot.active_balloter_positions()
-                ad_position = positions[ad]
+                ad_position = positions.get(ad, None)
                 if ad_position is None or ad_position.pos_id == "norecord":
                     ad_pages_left_to_ballot_on += draft.pages or 0
 

From a1c3a940e82d205a7c6e9e22b7974df39039dfca Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 30 Jan 2025 12:22:42 -0500
Subject: [PATCH 235/707] ci: pin aws cli version because AWS broke things

---
 .github/workflows/build.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4771adde97..a14ea73e9b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -178,6 +178,11 @@ jobs:
       with:
         python-version: "3.x"
 
+    - name: Setup AWS CLI
+      uses: unfor19/install-aws-cli-action@v1
+      with:
+        version: 2.22.35
+
     - name: Download a Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
       uses: actions/download-artifact@v4.1.8

From db7d3074da79734707db9e5475295bc3d65c810d Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@holloway.co.nz>
Date: Sat, 1 Feb 2025 05:28:39 +1300
Subject: [PATCH 236/707] feat: Add session recordings (#8218)

* feat: add session recordings

* feat: add session recordings

* feat: deleting recordings

* feat: deleting recordings and initial form values

* feat: use meeting date rather than today for initial title field. Fix delete recording

* feat: confirm delete recordings modal. fix server utils delete recording

* fix: removing debug console.log

* feat: change button name from 'Ok' to 'Delete' for confirm deletion to be clearer

* feat: UTC time in string and delete modal text

* fix: django html validation tests

* fix: django html validation tests

* fix: django html validation tests

* refactor: Work with SessionPresentations

* fix: better ordering

* chore: drop rev, hide table when empty

* test: test delete_recordings method

* fix: debug delete_recordings

* test: test add_session_recordings view

* fix: better permissions handling

* fix: only delete recordings for selected session

* refactor: inline script -> js module

* chore: remove accidental import

*shakes fist at pycharm*

* fix: consistent timestamp format

plus slight rephrase

* style: Black

* chore: remove comment

* test: update test to match

* fix: reversible url pattern for materials

Tests were perturbed in a way that led to a test
getting an interim instead of an IETF meeting.
This exposed a bug reversing the URL for the
materials_document() view. This splits it into
two patterns that are equivalent to the original.

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/meeting/tests_views.py                   | 156 +++++++++++++++++-
 ietf/meeting/urls.py                          |   4 +-
 ietf/meeting/utils.py                         |  22 ++-
 ietf/meeting/views.py                         |  88 +++++++++-
 ietf/settings.py                              |   3 +
 ietf/static/js/add_session_recordings.js      |  30 ++++
 .../meeting/add_session_recordings.html       |  78 +++++++++
 .../meeting/session_details_panel.html        |   8 +
 package.json                                  |   1 +
 9 files changed, 385 insertions(+), 5 deletions(-)
 create mode 100644 ietf/static/js/add_session_recordings.js
 create mode 100644 ietf/templates/meeting/add_session_recordings.html

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index b52f8de9b2..3e948f8386 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -48,7 +48,7 @@
 from ietf.meeting.test_data import make_meeting_test_data, make_interim_meeting, make_interim_test_data
 from ietf.meeting.utils import condition_slide_order
 from ietf.meeting.utils import add_event_info_to_session_qs, participants_for_meeting
-from ietf.meeting.utils import create_recording, get_next_sequence, bluesheet_data
+from ietf.meeting.utils import create_recording, delete_recording, get_next_sequence, bluesheet_data
 from ietf.meeting.views import session_draft_list, parse_agenda_filter_params, sessions_post_save, agenda_extract_schedule
 from ietf.meeting.views import get_summary_by_area, get_summary_by_type, get_summary_by_purpose, generate_agenda_data
 from ietf.name.models import SessionStatusName, ImportantDateName, RoleName, ProceedingsMaterialTypeName
@@ -441,6 +441,48 @@ def test_session_recordings_via_factories(self):
         self.assertIn(new_recording_title, links[0].text_content())
         #debug.show("q(f'#notes_and_recordings_{session_pk}')")
 
+    def test_delete_recordings(self):
+        # No user specified, active recording state
+        sp = SessionPresentationFactory(
+            document__type_id="recording",
+            document__external_url="https://example.com/some-recording",
+            document__states=[("recording", "active")],
+        )
+        doc = sp.document
+        doc.docevent_set.all().delete()  # clear this out
+        delete_recording(sp)
+        self.assertFalse(SessionPresentation.objects.filter(pk=sp.pk).exists())
+        self.assertEqual(doc.get_state("recording").slug, "deleted", "recording state updated")
+        self.assertEqual(doc.docevent_set.count(), 1, "one event added")
+        event = doc.docevent_set.first()
+        self.assertEqual(event.type, "changed_state", "event is a changed_state event")
+        self.assertEqual(event.by.name, "(System)", "system user is responsible")
+
+        # Specified user, no recording state
+        sp = SessionPresentationFactory(
+            document__type_id="recording",
+            document__external_url="https://example.com/some-recording",
+            document__states=[],
+        )
+        doc = sp.document
+        doc.docevent_set.all().delete()  # clear this out
+        user = PersonFactory()  # naming matches the methods - user is a Person, not a User
+        delete_recording(sp, user=user)
+        self.assertFalse(SessionPresentation.objects.filter(pk=sp.pk).exists())
+        self.assertEqual(doc.get_state("recording").slug, "deleted", "recording state updated")
+        self.assertEqual(doc.docevent_set.count(), 1, "one event added")
+        event = doc.docevent_set.first()
+        self.assertEqual(event.type, "changed_state", "event is a changed_state event")
+        self.assertEqual(event.by, user, "user is responsible")
+
+        # Document is not a recording
+        sp = SessionPresentationFactory(
+            document__type_id="draft",
+            document__external_url="https://example.com/some-recording",
+        )
+        with self.assertRaises(ValueError):
+            delete_recording(sp)
+
     def test_agenda_ical_next_meeting_type(self):
         # start with no upcoming IETF meetings, just an interim
         MeetingFactory(
@@ -7363,6 +7405,118 @@ def test_request_minutes(self):
         self.assertEqual(r.status_code,302)
         self.assertEqual(len(outbox),1)
 
+    @override_settings(YOUTUBE_DOMAINS=["youtube.com"])
+    def test_add_session_recordings(self):
+        session = SessionFactory(meeting__type_id="ietf")
+        url = urlreverse(
+            "ietf.meeting.views.add_session_recordings", 
+            kwargs={"session_id": session.pk, "num": session.meeting.number},
+        )
+        # does not fully validate authorization for non-secretariat users :-(
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        pq = PyQuery(r.content)
+        title_input = pq("input#id_title")
+        self.assertIsNotNone(title_input)
+        self.assertEqual(
+            title_input.attr.value,
+            "Video recording of {acro} for {timestamp}".format(
+                acro=session.group.acronym,
+                timestamp=session.official_timeslotassignment().timeslot.utc_start_time().strftime(
+                    "%Y-%m-%d %H:%M"
+                ),
+            ),
+        )
+        
+        with patch("ietf.meeting.views.create_recording") as mock_create:
+            r = self.client.post(
+                url,
+                data={
+                    "title": "This is my video title",
+                    "url": "",
+                }
+            )
+        self.assertFalse(mock_create.called)
+        
+        with patch("ietf.meeting.views.create_recording") as mock_create:
+            r = self.client.post(
+                url,
+                data={
+                    "title": "This is my video title",
+                    "url": "https://yubtub.com/this-is-not-a-youtube-video",
+                }
+            )
+        self.assertFalse(mock_create.called)
+
+        with patch("ietf.meeting.views.create_recording") as mock_create:
+            r = self.client.post(
+                url,
+                data={
+                    "title": "This is my video title",
+                    "url": "https://youtube.com/finally-a-video",
+                }
+            )
+        self.assertTrue(mock_create.called)
+        self.assertEqual(
+            mock_create.call_args, 
+            call(
+                session, 
+                "https://youtube.com/finally-a-video",
+                title="This is my video title",
+                user=Person.objects.get(user__username="secretary"),
+            ),
+        )
+
+        # CAN delete session presentation for this session
+        sp = SessionPresentationFactory(
+            session=session,
+            document__type_id="recording",
+            document__external_url="https://example.com/some-video",
+        )
+        with patch("ietf.meeting.views.delete_recording") as mock_delete:
+            r = self.client.post(
+                url,
+                data={
+                    "delete": str(sp.pk),
+                }
+            )
+        self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_delete.called)
+        self.assertEqual(mock_delete.call_args, call(sp))
+        
+        # ValueError message from delete_recording does not reach the user
+        sp = SessionPresentationFactory(
+            session=session,
+            document__type_id="recording",
+            document__external_url="https://example.com/some-video",
+        )
+        with patch("ietf.meeting.views.delete_recording", side_effect=ValueError("oh joy!")) as mock_delete:
+            r = self.client.post(
+                url,
+                data={
+                    "delete": str(sp.pk),
+                }
+            )
+        self.assertTrue(mock_delete.called)
+        self.assertNotContains(r, "oh joy!", status_code=200)
+        
+        # CANNOT delete session presentation for a different session
+        sp_for_other_session = SessionPresentationFactory(
+            document__type_id="recording",
+            document__external_url="https://example.com/some-other-video",
+        )
+        with patch("ietf.meeting.views.delete_recording") as mock_delete:
+            r = self.client.post(
+                url,
+                data={
+                    "delete": str(sp_for_other_session.pk),
+                }
+            )
+        self.assertEqual(r.status_code, 404)
+        self.assertFalse(mock_delete.called)
+
+
+
 class HasMeetingsTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['AGENDA_PATH']
 
diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index 42a5de623c..5da24ddb6f 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -16,6 +16,7 @@ def get_redirect_url(self, *args, **kwargs):
 safe_for_all_meeting_types = [
     url(r'^session/(?P<acronym>[-a-z0-9]+)/?$',  views.session_details),
     url(r'^session/(?P<session_id>\d+)/drafts$',  views.add_session_drafts),
+    url(r'^session/(?P<session_id>\d+)/recordings$', views.add_session_recordings),
     url(r'^session/(?P<session_id>\d+)/attendance$', views.session_attendance),
     url(r'^session/(?P<session_id>\d+)/bluesheets$', views.upload_session_bluesheets),
     url(r'^session/(?P<session_id>\d+)/minutes$', views.upload_session_minutes),
@@ -63,7 +64,8 @@ def get_redirect_url(self, *args, **kwargs):
 type_interim_patterns = [
     url(r'^agenda/(?P<acronym>[A-Za-z0-9-]+)-drafts.pdf$', views.session_draft_pdf),
     url(r'^agenda/(?P<acronym>[A-Za-z0-9-]+)-drafts.tgz$', views.session_draft_tarfile),
-    url(r'^materials/%(document)s((?P<ext>\.[a-z0-9]+)|/)?$' % settings.URL_REGEXPS, views.materials_document),
+    url(r'^materials/%(document)s(?P<ext>\.[a-z0-9]+)$' % settings.URL_REGEXPS, views.materials_document),
+    url(r'^materials/%(document)s/?$' % settings.URL_REGEXPS, views.materials_document),
     url(r'^agenda.json$', views.agenda_json)
 ]
 
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 4f800980c3..e231cbed87 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -23,7 +23,7 @@
 from ietf.dbtemplate.models import DBTemplate
 from ietf.meeting.models import (Session, SchedulingEvent, TimeSlot,
     Constraint, SchedTimeSessAssignment, SessionPresentation, Attended)
-from ietf.doc.models import Document, State, NewRevisionDocEvent
+from ietf.doc.models import Document, State, NewRevisionDocEvent, StateDocEvent
 from ietf.doc.models import DocEvent
 from ietf.group.models import Group
 from ietf.group.utils import can_manage_materials
@@ -853,6 +853,26 @@ def create_recording(session, url, title=None, user=None):
 
     return doc
 
+def delete_recording(session_presentation, user=None):
+    """Delete a session recording"""
+    document = session_presentation.document
+    if document.type_id != "recording":
+        raise ValueError(f"Document {document.pk} is not a recording (type_id={document.type_id})")
+    recording_state = document.get_state("recording")
+    deleted_state = State.objects.get(type_id="recording", slug="deleted")
+    if recording_state != deleted_state:
+        # Update the recording state and create a history event 
+        document.set_state(deleted_state)
+        StateDocEvent.objects.create(
+            type="changed_state",
+            by=user or Person.objects.get(name="(System)"),
+            doc=document,
+            rev=document.rev,
+            state_type=deleted_state.type,
+            state=deleted_state,
+        )
+    session_presentation.delete()
+
 def get_next_sequence(group, meeting, type):
     '''
     Returns the next sequence number to use for a document of type = type.
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index feb14f730b..2f2464028b 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -20,7 +20,7 @@
 from functools import partialmethod
 import jsonschema
 from pathlib import Path
-from urllib.parse import parse_qs, unquote, urlencode, urlsplit, urlunsplit
+from urllib.parse import parse_qs, unquote, urlencode, urlsplit, urlunsplit, urlparse
 from tempfile import mkstemp
 from wsgiref.handlers import format_date_time
 
@@ -86,7 +86,7 @@
 from ietf.meeting.utils import swap_meeting_schedule_timeslot_assignments, bulk_create_timeslots
 from ietf.meeting.utils import preprocess_meeting_important_dates
 from ietf.meeting.utils import new_doc_for_session, write_doc_for_session
-from ietf.meeting.utils import get_activity_stats, post_process, create_recording
+from ietf.meeting.utils import get_activity_stats, post_process, create_recording, delete_recording
 from ietf.meeting.utils import participants_for_meeting, generate_bluesheet, bluesheet_data, save_bluesheet
 from ietf.message.utils import infer_message
 from ietf.name.models import SlideSubmissionStatusName, ProceedingsMaterialTypeName, SessionPurposeName
@@ -103,6 +103,7 @@
 from ietf.utils.response import permission_denied
 from ietf.utils.text import xslugify
 from ietf.utils.timezone import datetime_today, date_today
+from ietf.settings import YOUTUBE_DOMAINS
 
 from .forms import (InterimMeetingModelForm, InterimAnnounceForm, InterimSessionModelForm,
     InterimCancelForm, InterimSessionInlineFormSet, RequestMinutesForm,
@@ -2568,6 +2569,89 @@ def add_session_drafts(request, session_id, num):
                     'form': form,
                   })
 
+class SessionRecordingsForm(forms.Form):
+    title = forms.CharField(max_length=255)
+    url = forms.URLField(label="URL of the recording (YouTube only)")
+
+    def clean_url(self):
+        url = self.cleaned_data['url']
+        parsed_url = urlparse(url)
+        if parsed_url.hostname not in YOUTUBE_DOMAINS:
+            raise forms.ValidationError("Must be a YouTube URL")
+        return url
+
+
+def add_session_recordings(request, session_id, num):
+    # num is redundant, but we're dragging it along an artifact of where we are in the current URL structure
+    session = get_object_or_404(Session, pk=session_id)
+    if not session.can_manage_materials(request.user):
+        permission_denied(
+            request, "You don't have permission to manage recordings for this session."
+        )
+    if session.is_material_submission_cutoff() and not has_role(
+        request.user, "Secretariat"
+    ):
+        raise Http404
+
+    session_number = None
+    official_timeslotassignment = session.official_timeslotassignment()
+    assertion("official_timeslotassignment is not None")
+    initial = {
+        "title": "Video recording of {acronym} for {timestamp}".format(
+            acronym=session.group.acronym,
+            timestamp=official_timeslotassignment.timeslot.utc_start_time().strftime(
+                "%Y-%m-%d %H:%M"
+            ),
+        )
+    }
+
+    # find session number if WG has more than one session at the meeting
+    sessions = get_sessions(session.meeting.number, session.group.acronym)
+    if len(sessions) > 1:
+        session_number = 1 + sessions.index(session)
+
+    presentations = session.presentations.filter(
+        document__in=session.get_material("recording", only_one=False),
+    ).order_by("document__title", "document__external_url")
+
+    if request.method == "POST":
+        pk_to_delete = request.POST.get("delete", None)
+        if pk_to_delete is not None:
+            session_presentation = get_object_or_404(presentations, pk=pk_to_delete)
+            try:
+                delete_recording(session_presentation)
+            except ValueError as err:
+                log(f"Error deleting recording from session {session.pk}: {err}")
+                messages.error(
+                    request,
+                    "Unable to delete this recording. Please contact the secretariat for assistance.",
+                )
+            form = SessionRecordingsForm(initial=initial)
+        else:
+            form = SessionRecordingsForm(request.POST)
+            if form.is_valid():
+                title = form.cleaned_data["title"]
+                url = form.cleaned_data["url"]
+                create_recording(session, url, title=title, user=request.user.person)
+                return redirect(
+                    "ietf.meeting.views.session_details",
+                    num=session.meeting.number,
+                    acronym=session.group.acronym,
+                )
+    else:
+        form = SessionRecordingsForm(initial=initial)
+
+    return render(
+        request,
+        "meeting/add_session_recordings.html",
+        {
+            "session": session,
+            "session_number": session_number,
+            "already_linked": presentations,
+            "form": form,
+        },
+    )
+
 
 def session_attendance(request, session_id, num):
     """Session attendance view
diff --git a/ietf/settings.py b/ietf/settings.py
index 7fd4308bb0..125127ba15 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1397,3 +1397,6 @@ def skip_unreadable_post(record):
     CSRF_TRUSTED_ORIGINS += ['http://localhost:8000', 'http://127.0.0.1:8000', 'http://[::1]:8000']
     SESSION_COOKIE_SECURE = False
     SESSION_COOKIE_SAMESITE = 'Lax'
+
+
+YOUTUBE_DOMAINS = ['www.youtube.com', 'youtube.com', 'youtu.be', 'm.youtube.com', 'youtube-nocookie.com', 'www.youtube-nocookie.com']
diff --git a/ietf/static/js/add_session_recordings.js b/ietf/static/js/add_session_recordings.js
new file mode 100644
index 0000000000..c1c5932a48
--- /dev/null
+++ b/ietf/static/js/add_session_recordings.js
@@ -0,0 +1,30 @@
+// Copyright The IETF Trust 2024-2025, All Rights Reserved
+document.addEventListener('DOMContentLoaded', () => {
+    const form = document.getElementById('delete_recordings_form')
+    const dialog = document.getElementById('delete_confirm_dialog')
+    const dialog_link = document.getElementById('delete_confirm_link')
+    const dialog_submit = document.getElementById('delete_confirm_submit')
+    const dialog_cancel = document.getElementById('delete_confirm_cancel')
+
+    dialog.style.maxWidth = '30vw'
+
+    form.addEventListener('submit', (e) => {
+        e.preventDefault()
+        dialog_submit.value = e.submitter.value
+        const recording_link = e.submitter.closest('tr').querySelector('a')
+        dialog_link.setAttribute('href', recording_link.getAttribute('href'))
+        dialog_link.textContent = recording_link.textContent
+        dialog.showModal()
+    })
+
+    dialog_cancel.addEventListener('click', (e) => {
+        e.preventDefault()
+        dialog.close()
+    })
+
+    document.addEventListener('keydown', (e) => {
+        if (dialog.open && e.key === 'Escape') {
+            dialog.close()
+        }
+    })
+})
diff --git a/ietf/templates/meeting/add_session_recordings.html b/ietf/templates/meeting/add_session_recordings.html
new file mode 100644
index 0000000000..4f21e8f4d0
--- /dev/null
+++ b/ietf/templates/meeting/add_session_recordings.html
@@ -0,0 +1,78 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{% load origin static django_bootstrap5 %}
+{% block title %}Add I-Ds to {{ session.meeting }} : {{ session.group.acronym }}{% endblock %}
+{% block pagehead %}{{ form.media.css }}{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Add Recordings to {{ session.meeting }}
+        {% if session_number %}: Session {{ session_number }}{% endif %}
+        <br>
+        <small class="text-body-secondary">{{ session.group.acronym }}
+            {% if session.name %}: {{ session.name }}{% endif %}
+        </small>
+    </h1>
+    {% if session.is_material_submission_cutoff %}
+        <div class="alert alert-warning my-3">
+            The deadline for submission corrections has passed. This may affect published proceedings.
+        </div>
+    {% endif %}
+    {% if already_linked|length > 0 %}
+        <h2 class="mt-5">Recordings already linked to this session</h2>
+        <form method="post" id="delete_recordings_form">
+            {% csrf_token %}
+            <table class="table table-sm table-striped">
+                <thead>
+                <tr>
+                    <th scope="col">Title</th>
+                    <th scope="col">URL</th>
+                    <th scope="col">Delete</th>
+                </tr>
+                </thead>
+                <tbody>
+                {% for sp in already_linked %}{% with recording_doc=sp.document %}
+                    <tr>
+                        <td>{{ recording_doc.title }}</td>
+                        <td><a href="{{ recording_doc.external_url }}">{{ recording_doc.external_url }}</a></td>
+                        <td>
+                            <button type="submit"
+                                    aria-label="Delete {{ recording_doc.title }}"
+                                    class="btn btn-danger"
+                                    name="delete"
+                                    value="{{ sp.pk }}">
+                                Delete
+                            </button>
+                        </td>
+                    </tr>
+                {% endwith %}{% endfor %}
+                </tbody>
+            </table>
+        </form>
+    {% endif %}
+    <dialog id="delete_confirm_dialog">
+        <p>Really delete the link to <a href="#" id="delete_confirm_link">(default)</a>?</p>
+        <form method="post" class="d-flex justify-content-between">
+            {% csrf_token %}
+            <button class="btn btn-secondary" type="button" id="delete_confirm_cancel">Cancel</button>
+            <button class="btn btn-danger" type="submit" name="delete" id="delete_confirm_submit">Delete</button>
+        </form>
+    </dialog>
+    <h2 class="mt-5">Add a recording to this session</h2>
+    <form method="post">
+        {% csrf_token %}
+        {% bootstrap_form form %}
+        <button class="btn btn-{% if session.is_material_submission_cutoff %}warning{% else %}primary{% endif %}"
+                type="submit">
+            Add recording
+        </button>
+        <a class="btn btn-secondary float-end"
+           href="{% url 'ietf.meeting.views.session_details' num=session.meeting.number acronym=session.group.acronym %}">
+            Back
+        </a>
+    </form>
+{% endblock %}
+{% block js %}
+    {{ form.media.js }}
+    <script src="{% static 'ietf/js/add_session_recordings.js' %}"></script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index a0f5884b9d..9b7a192f05 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -368,5 +368,13 @@ <h3 class="mt-4">Notes and recordings</h3>
             </tbody>
         </table>
     {% endif %}
+
+    {% if can_manage_materials %}
+        <a class="btn btn-primary"
+            href="{% url 'ietf.meeting.views.add_session_recordings' session_id=session.pk num=session.meeting.number %}">
+            Link additional recordings to session
+        </a>
+    {% endif %}
+
 {% endwith %}{% endwith %}
 {% endfor %}
diff --git a/package.json b/package.json
index b3d36b349c..6d1591ca15 100644
--- a/package.json
+++ b/package.json
@@ -111,6 +111,7 @@
         "ietf/static/images/irtf-logo-card.png",
         "ietf/static/images/irtf-logo-white.svg",
         "ietf/static/images/irtf-logo.svg",
+        "ietf/static/js/add_session_recordings.js",
         "ietf/static/js/agenda_filter.js",
         "ietf/static/js/agenda_materials.js",
         "ietf/static/js/complete-review.js",

From 83448cd7f2a96587711f990e8a63e6cacc05e095 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 31 Jan 2025 10:36:15 -0600
Subject: [PATCH 237/707] chore: remove unused code (#8490)

---
 .../commands/generate_draft_recursive_txt.py  | 17 -----------
 ietf/ipr/tests.py                             |  6 ----
 ietf/ipr/urls.py                              |  2 --
 ietf/ipr/utils.py                             | 25 ----------------
 ietf/ipr/views.py                             | 29 -------------------
 5 files changed, 79 deletions(-)
 delete mode 100644 ietf/ipr/management/commands/generate_draft_recursive_txt.py

diff --git a/ietf/ipr/management/commands/generate_draft_recursive_txt.py b/ietf/ipr/management/commands/generate_draft_recursive_txt.py
deleted file mode 100644
index 2c61a7604f..0000000000
--- a/ietf/ipr/management/commands/generate_draft_recursive_txt.py
+++ /dev/null
@@ -1,17 +0,0 @@
-# Copyright The IETF Trust 2014-2021, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-
-from django.core.management.base import BaseCommand, CommandError
-
-from ietf.ipr.utils import generate_draft_recursive_txt
-
-
-class Command(BaseCommand):
-    help = ("Generate machine-readable list of IPR disclosures by Internet-Draft name (recursive)")
-
-    def handle(self, *args, **options):
-        try:
-            generate_draft_recursive_txt()
-        except (ValueError, IOError) as e:
-            raise CommandError(e)
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 67be278dbb..beb4d7fc1c 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -161,12 +161,6 @@ def test_ipr_history(self):
         r = self.client.get(urlreverse("ietf.ipr.views.history", kwargs=dict(id=ipr.pk)))
         self.assertContains(r, ipr.title)
 
-    def test_iprs_for_drafts(self):
-        draft=WgDraftFactory()
-        ipr = HolderIprDisclosureFactory(docs=[draft,])
-        r = self.client.get(urlreverse("ietf.ipr.views.by_draft_txt"))
-        self.assertContains(r, draft.name)
-        self.assertContains(r, str(ipr.pk))
 
     def test_about(self):
         r = self.client.get(urlreverse("ietf.ipr.views.about"))
diff --git a/ietf/ipr/urls.py b/ietf/ipr/urls.py
index 2b6abee31c..84ed04a66b 100644
--- a/ietf/ipr/urls.py
+++ b/ietf/ipr/urls.py
@@ -12,8 +12,6 @@
     url(r'^admin/$', RedirectView.as_view(url=reverse_lazy('ietf.ipr.views.admin',kwargs={'state':'pending'}), permanent=True)),
     url(r'^admin/(?P<state>pending|removed|parked)/$', views.admin),
     url(r'^ajax/search/$', views.ajax_search),
-    url(r'^by-draft/$', views.by_draft_txt),
-    url(r'^by-draft-recursive/$', views.by_draft_recursive_txt),
     url(r'^(?P<id>\d+)/$', views.show),
     url(r'^(?P<id>\d+)/addcomment/$', views.add_comment),
     url(r'^(?P<id>\d+)/addemail/$', views.add_email),
diff --git a/ietf/ipr/utils.py b/ietf/ipr/utils.py
index 8f0b9cf3f2..7e569a1d1d 100644
--- a/ietf/ipr/utils.py
+++ b/ietf/ipr/utils.py
@@ -4,7 +4,6 @@
 from textwrap import dedent
 
 from ietf.ipr.mail import process_response_email, UndeliverableIprResponseError
-from ietf.ipr.models import IprDocRel
 
 import debug                            # pyflakes:ignore
 
@@ -64,30 +63,6 @@ def related_docs(doc, relationship=('replaces', 'obs'), reverse_relationship=("b
     return list(set(results))
 
 
-def generate_draft_recursive_txt():
-    docipr = {}
-
-    for o in IprDocRel.objects.filter(disclosure__state='posted').select_related('document'):
-        doc = o.document
-        name = doc.name
-        related_set = set(doc) | set(doc.all_related_that_doc(('obs', 'replaces')))
-        for related in related_set:
-            name = related.name
-            if name.startswith("rfc"):
-                name = name.upper()
-            if not name in docipr:
-                docipr[name] = []
-            docipr[name].append(o.disclosure_id)
-
-    lines = [ "# Machine-readable list of IPR disclosures by Internet-Draft name" ]
-    for name, iprs in docipr.items():
-        lines.append(name + "\t" + "\t".join(str(ipr_id) for ipr_id in sorted(iprs)))
-
-    data = '\n'.join(lines)
-    filename = '/a/ietfdata/derived/ipr_draft_recursive.txt'
-    with open(filename, 'w') as f:
-        f.write(data)
-
     
 def ingest_response_email(message: bytes):
     from ietf.api.views import EmailIngestionError  # avoid circular import
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 0347c4d78d..24453df2d2 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -445,35 +445,6 @@ def history(request, id):
         'selected_tab_entry':'history'
     })
 
-def by_draft_txt(request):
-    docipr = {}
-
-    for o in IprDocRel.objects.filter(disclosure__state='posted').select_related('document'):
-        name = o.document.name
-        if name.startswith("rfc"):
-            name = name.upper()
-
-        if not name in docipr:
-            docipr[name] = []
-
-        docipr[name].append(o.disclosure_id)
-
-    lines = [ "# Machine-readable list of IPR disclosures by draft name" ]
-    for name, iprs in docipr.items():
-        lines.append(name + "\t" + "\t".join(str(ipr_id) for ipr_id in sorted(iprs)))
-
-    return HttpResponse("\n".join(lines), content_type="text/plain; charset=%s"%settings.DEFAULT_CHARSET)
-
-def by_draft_recursive_txt(request):
-    """Returns machine-readable list of IPR disclosures by draft name, recursive.
-    NOTE: this view is expensive and should be removed _after_ tools.ietf.org is retired,
-    including util function and management commands that generate the content for
-    this view."""
-
-    with open('/a/ietfdata/derived/ipr_draft_recursive.txt') as f:
-        content = f.read()
-    return HttpResponse(content, content_type="text/plain; charset=%s"%settings.DEFAULT_CHARSET)
-
 
 def new(request, _type, updates=None):
     """Submit a new IPR Disclosure.  If the updates field != None, this disclosure

From f85878c2e8acf6643288cfdf71ce1d97e26c8a0e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 31 Jan 2025 15:51:24 -0600
Subject: [PATCH 238/707] fix: avoid writing a file (#8491)

---
 ietf/meeting/utils.py | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index e231cbed87..6e681fdc31 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -5,13 +5,13 @@
 import os
 import pytz
 import subprocess
-import tempfile
 
 from collections import defaultdict
 from pathlib import Path
 
 from django.conf import settings
 from django.contrib import messages
+from django.core.files.base import ContentFile
 from django.db.models import OuterRef, Subquery, TextField, Q, Value
 from django.db.models.functions import Coalesce
 from django.template.loader import render_to_string
@@ -225,12 +225,7 @@ def generate_bluesheet(request, session):
             'session': session,
             'data': data,
         })
-    fd, name = tempfile.mkstemp(suffix=".txt", text=True)
-    os.close(fd)
-    with open(name, "w") as file:
-        file.write(text)
-    with open(name, "br") as file:
-        return save_bluesheet(request, session, file)
+    return save_bluesheet(request, session, ContentFile(text.encode("utf-8"), name="unusednamepartsothereisanextension.txt"))
 
 
 def finalize(request, meeting):

From e0b1fd29ee8cfdcb4825e8a5891ad9c598ea56f6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 18:04:24 -0500
Subject: [PATCH 239/707] chore(deps): bump the /dev/deploy-to-container npm
 dependencies (#8440)

Bumps the npm group in /dev/deploy-to-container with 2 updates: [dockerode](https://github.com/apocas/dockerode) and [fs-extra](https://github.com/jprichardson/node-fs-extra).


Updates `dockerode` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.3...v4.0.4)

Updates `fs-extra` from 11.2.0 to 11.3.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.2.0...11.3.0)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: fs-extra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 63 +++++++++++++----------
 dev/deploy-to-container/package.json      |  4 +-
 2 files changed, 39 insertions(+), 28 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index 86cb1f732f..03327083b1 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -6,8 +6,8 @@
     "": {
       "name": "deploy-to-container",
       "dependencies": {
-        "dockerode": "^4.0.3",
-        "fs-extra": "^11.2.0",
+        "dockerode": "^4.0.4",
+        "fs-extra": "^11.3.0",
         "nanoid": "5.0.9",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
@@ -258,6 +258,7 @@
       "version": "0.2.6",
       "resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
       "integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
+      "license": "MIT",
       "dependencies": {
         "safer-buffer": "~2.1.0"
       }
@@ -290,6 +291,7 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
       "integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
+      "license": "BSD-3-Clause",
       "dependencies": {
         "tweetnacl": "^0.14.3"
       }
@@ -376,6 +378,7 @@
       "version": "4.4.0",
       "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
       "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
+      "license": "MIT",
       "dependencies": {
         "ms": "^2.1.3"
       },
@@ -389,9 +392,10 @@
       }
     },
     "node_modules/docker-modem": {
-      "version": "5.0.5",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.5.tgz",
-      "integrity": "sha512-Cxw8uEcvNTRmsQuGqzzfiCnfGgf96tVJItLh8taOX0miTcIBALKH5TckCSuZbpbjP7uhAl81dOL9sxfa6HgCIg==",
+      "version": "5.0.6",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
+      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
+      "license": "Apache-2.0",
       "dependencies": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -403,14 +407,15 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.3.tgz",
-      "integrity": "sha512-QSXJFcBQNaGZO6U3qWW4B7p8yRIJn/dWmvL2AQWfO/bjptBBO6QYdVkYSYFz9qoivP2jsOHZfmXMAfrK0BMKyg==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
+      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "license": "Apache-2.0",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
-        "docker-modem": "^5.0.5",
+        "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
         "tar-fs": "~2.0.1",
         "uuid": "^10.0.0"
@@ -466,9 +471,10 @@
       "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "node_modules/fs-extra": {
-      "version": "11.2.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.2.0.tgz",
-      "integrity": "sha512-PmDi3uwK5nFuXh7XDTlVnS17xJS7vW36is2+w3xcv8SVxiB4NyATf4ctkVY5bkSjX0Y4nbvZCq1/EjtEyr9ktw==",
+      "version": "11.3.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
+      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
+      "license": "MIT",
       "dependencies": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
@@ -651,12 +657,14 @@
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
-      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
     },
     "node_modules/nan": {
       "version": "2.22.0",
       "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
       "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
+      "license": "MIT",
       "optional": true
     },
     "node_modules/nanoid": {
@@ -804,7 +812,8 @@
     "node_modules/safer-buffer": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
-      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
     },
     "node_modules/shebang-command": {
       "version": "2.0.0",
@@ -847,7 +856,8 @@
     "node_modules/split-ca": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/split-ca/-/split-ca-1.0.1.tgz",
-      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
+      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ==",
+      "license": "ISC"
     },
     "node_modules/ssh2": {
       "version": "1.16.0",
@@ -1010,7 +1020,8 @@
     "node_modules/tweetnacl": {
       "version": "0.14.5",
       "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
-      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA=="
+      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
+      "license": "Unlicense"
     },
     "node_modules/undici-types": {
       "version": "6.20.0",
@@ -1411,9 +1422,9 @@
       }
     },
     "docker-modem": {
-      "version": "5.0.5",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.5.tgz",
-      "integrity": "sha512-Cxw8uEcvNTRmsQuGqzzfiCnfGgf96tVJItLh8taOX0miTcIBALKH5TckCSuZbpbjP7uhAl81dOL9sxfa6HgCIg==",
+      "version": "5.0.6",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
+      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
       "requires": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -1422,14 +1433,14 @@
       }
     },
     "dockerode": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.3.tgz",
-      "integrity": "sha512-QSXJFcBQNaGZO6U3qWW4B7p8yRIJn/dWmvL2AQWfO/bjptBBO6QYdVkYSYFz9qoivP2jsOHZfmXMAfrK0BMKyg==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
+      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
-        "docker-modem": "^5.0.5",
+        "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
         "tar-fs": "~2.0.1",
         "uuid": "^10.0.0"
@@ -1473,9 +1484,9 @@
       "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "fs-extra": {
-      "version": "11.2.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.2.0.tgz",
-      "integrity": "sha512-PmDi3uwK5nFuXh7XDTlVnS17xJS7vW36is2+w3xcv8SVxiB4NyATf4ctkVY5bkSjX0Y4nbvZCq1/EjtEyr9ktw==",
+      "version": "11.3.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
+      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
       "requires": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 53a362b9d0..1f54745ebf 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -2,8 +2,8 @@
   "name": "deploy-to-container",
   "type": "module",
   "dependencies": {
-    "dockerode": "^4.0.3",
-    "fs-extra": "^11.2.0",
+    "dockerode": "^4.0.4",
+    "fs-extra": "^11.3.0",
     "nanoid": "5.0.9",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",

From 373623da426867c32610e41f4444725fddc6b173 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 18:05:24 -0500
Subject: [PATCH 240/707] chore(deps): bump the /dev/diff npm dependencies
 (#8439)

Bumps the npm group with 3 updates in the /dev/diff directory: [chalk](https://github.com/chalk/chalk), [dockerode](https://github.com/apocas/dockerode) and [fs-extra](https://github.com/jprichardson/node-fs-extra).


Updates `chalk` from 5.3.0 to 5.4.1
- [Release notes](https://github.com/chalk/chalk/releases)
- [Commits](https://github.com/chalk/chalk/compare/v5.3.0...v5.4.1)

Updates `dockerode` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.2...v4.0.4)

Updates `fs-extra` from 11.2.0 to 11.3.0
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.2.0...11.3.0)

---
updated-dependencies:
- dependency-name: chalk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: dockerode
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: fs-extra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/diff/package-lock.json | 407 +++++++++++++++++++++++++++++++------
 dev/diff/package.json      |   6 +-
 2 files changed, 348 insertions(+), 65 deletions(-)

diff --git a/dev/diff/package-lock.json b/dev/diff/package-lock.json
index 87aaf3f16f..4e92d2a6e0 100644
--- a/dev/diff/package-lock.json
+++ b/dev/diff/package-lock.json
@@ -6,11 +6,11 @@
     "": {
       "name": "diff",
       "dependencies": {
-        "chalk": "^5.3.0",
-        "dockerode": "^4.0.2",
+        "chalk": "^5.4.1",
+        "dockerode": "^4.0.4",
         "enquirer": "^2.4.1",
         "extract-zip": "^2.0.1",
-        "fs-extra": "^11.2.0",
+        "fs-extra": "^11.3.0",
         "got": "^13.0.0",
         "keypress": "^0.2.1",
         "listr2": "^6.6.1",
@@ -29,6 +29,37 @@
       "resolved": "https://registry.npmjs.org/@balena/dockerignore/-/dockerignore-1.0.2.tgz",
       "integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q=="
     },
+    "node_modules/@grpc/grpc-js": {
+      "version": "1.12.5",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.12.5.tgz",
+      "integrity": "sha512-d3iiHxdpg5+ZcJ6jnDSOT8Z0O0VMVGy34jAnYLUX8yd36b1qn8f1TwOA/Lc7TsOh03IkPJ38eGI5qD2EjNkoEA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@grpc/proto-loader": "^0.7.13",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      },
+      "engines": {
+        "node": ">=12.10.0"
+      }
+    },
+    "node_modules/@grpc/proto-loader": {
+      "version": "0.7.13",
+      "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.13.tgz",
+      "integrity": "sha512-AiXO/bfe9bmxBjxxtYxFAXGZvMaN5s8kO+jBHAJCON8rJoB5YS/D6X7ZNc6XQkuHNmyl4CYaMI1fJ/Gn27RGGw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "lodash.camelcase": "^4.3.0",
+        "long": "^5.0.0",
+        "protobufjs": "^7.2.5",
+        "yargs": "^17.7.2"
+      },
+      "bin": {
+        "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -129,6 +160,16 @@
         "node": ">=18.0.0"
       }
     },
+    "node_modules/@js-sdsl/ordered-map": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+      "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/js-sdsl"
+      }
+    },
     "node_modules/@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -138,6 +179,70 @@
         "node": ">=14"
       }
     },
+    "node_modules/@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/codegen": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz",
+      "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/eventemitter": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+      "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/fetch": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+      "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.1",
+        "@protobufjs/inquire": "^1.1.0"
+      }
+    },
+    "node_modules/@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/inquire": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz",
+      "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@protobufjs/utf8": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz",
+      "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==",
+      "license": "BSD-3-Clause"
+    },
     "node_modules/@sindresorhus/is": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-5.3.0.tgz",
@@ -168,8 +273,7 @@
     "node_modules/@types/node": {
       "version": "18.6.5",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-18.6.5.tgz",
-      "integrity": "sha512-Xjt5ZGUa5WusGZJ4WJPbOT8QOqp6nDynVFRKcUt32bOgvXEoc6o085WNkYTMO7ifAj2isEfQQ2cseE+wT6jsRw==",
-      "optional": true
+      "integrity": "sha512-Xjt5ZGUa5WusGZJ4WJPbOT8QOqp6nDynVFRKcUt32bOgvXEoc6o085WNkYTMO7ifAj2isEfQQ2cseE+wT6jsRw=="
     },
     "node_modules/@types/yauzl": {
       "version": "2.10.0",
@@ -228,6 +332,7 @@
       "version": "0.2.6",
       "resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
       "integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
+      "license": "MIT",
       "dependencies": {
         "safer-buffer": "~2.1.0"
       }
@@ -260,6 +365,7 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
       "integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
+      "license": "BSD-3-Clause",
       "dependencies": {
         "tweetnacl": "^0.14.3"
       }
@@ -315,9 +421,10 @@
       }
     },
     "node_modules/chalk": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.3.0.tgz",
-      "integrity": "sha512-dLitG79d+GV1Nb/VYcCDFivJeK1hiukt9QjRNVOsUtTy1rR1YJsmpGGTZ3qJos+uw7WmWF4wUwBd9jxjocFC2w==",
+      "version": "5.4.1",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.4.1.tgz",
+      "integrity": "sha512-zgVZuo2WcZgfUEmsn6eO3kINexW8RAE4maiQ8QNs8CtpPCSyMiYsULR3HQYkm3w8FIA3SberyMJMSldGsW+U3w==",
+      "license": "MIT",
       "engines": {
         "node": "^12.17.0 || ^14.13 || >=16.0.0"
       },
@@ -440,14 +547,14 @@
       "integrity": "sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w=="
     },
     "node_modules/cpu-features": {
-      "version": "0.0.9",
-      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.9.tgz",
-      "integrity": "sha512-AKjgn2rP2yJyfbepsmLfiYcmtNn/2eUvocUyM/09yB0YDiz39HteK/5/T4Onf0pmdYDMgkBoGvRLvEguzyL7wQ==",
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
       "hasInstallScript": true,
       "optional": true,
       "dependencies": {
         "buildcheck": "~0.0.6",
-        "nan": "^2.17.0"
+        "nan": "^2.19.0"
       },
       "engines": {
         "node": ">=10.0.0"
@@ -516,9 +623,10 @@
       }
     },
     "node_modules/docker-modem": {
-      "version": "5.0.3",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.3.tgz",
-      "integrity": "sha512-89zhop5YVhcPEt5FpUFGr3cDyceGhq/F9J+ZndQ4KfqNvfbJpPMfgeixFgUj5OjCYAboElqODxY5Z1EBsSa6sg==",
+      "version": "5.0.6",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
+      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
+      "license": "Apache-2.0",
       "dependencies": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -530,13 +638,18 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.2.tgz",
-      "integrity": "sha512-9wM1BVpVMFr2Pw3eJNXrYYt6DT9k0xMcsSCjtPvyQ+xa1iPg/Mo3T/gUcwI0B2cczqCeCYRPF8yFYDwtFXT0+w==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
+      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "license": "Apache-2.0",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
-        "docker-modem": "^5.0.3",
-        "tar-fs": "~2.0.1"
+        "@grpc/grpc-js": "^1.11.1",
+        "@grpc/proto-loader": "^0.7.13",
+        "docker-modem": "^5.0.6",
+        "protobufjs": "^7.3.2",
+        "tar-fs": "~2.0.1",
+        "uuid": "^10.0.0"
       },
       "engines": {
         "node": ">= 8.0"
@@ -666,9 +779,10 @@
       "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "node_modules/fs-extra": {
-      "version": "11.2.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.2.0.tgz",
-      "integrity": "sha512-PmDi3uwK5nFuXh7XDTlVnS17xJS7vW36is2+w3xcv8SVxiB4NyATf4ctkVY5bkSjX0Y4nbvZCq1/EjtEyr9ktw==",
+      "version": "11.3.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
+      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
+      "license": "MIT",
       "dependencies": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
@@ -949,6 +1063,12 @@
       "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
       "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw=="
     },
+    "node_modules/lodash.camelcase": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==",
+      "license": "MIT"
+    },
     "node_modules/log-update": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/log-update/-/log-update-5.0.1.tgz",
@@ -1040,6 +1160,12 @@
         "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
+    "node_modules/long": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
+      "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg==",
+      "license": "Apache-2.0"
+    },
     "node_modules/lowercase-keys": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-3.0.0.tgz",
@@ -1145,9 +1271,10 @@
       "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
     },
     "node_modules/nan": {
-      "version": "2.18.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.18.0.tgz",
-      "integrity": "sha512-W7tfG7vMOGtD30sHoZSSc/JVYiyDPEyQVso/Zz+/uQd0B0L46gtC+pHha5FFMRpil6fm/AoEcRWyOVi4+E/f8w==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
+      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
+      "license": "MIT",
       "optional": true
     },
     "node_modules/normalize-url": {
@@ -1230,6 +1357,30 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/protobufjs": {
+      "version": "7.4.0",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
+      "integrity": "sha512-mRUWCc3KUU4w1jU8sGxICXH/gNS94DvI1gxqDvBzhj1JpcsimQkYiOJfwsPUykUI5ZaspFbSgmBLER8IrQ3tqw==",
+      "hasInstallScript": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.4",
+        "@protobufjs/eventemitter": "^1.1.0",
+        "@protobufjs/fetch": "^1.1.0",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/inquire": "^1.1.0",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.0",
+        "@types/node": ">=13.7.0",
+        "long": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
     "node_modules/pump": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -1349,7 +1500,8 @@
     "node_modules/safer-buffer": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
-      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
     },
     "node_modules/shebang-command": {
       "version": "2.0.0",
@@ -1415,12 +1567,13 @@
     "node_modules/split-ca": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/split-ca/-/split-ca-1.0.1.tgz",
-      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
+      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ==",
+      "license": "ISC"
     },
     "node_modules/ssh2": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.15.0.tgz",
-      "integrity": "sha512-C0PHgX4h6lBxYx7hcXwu3QWdh4tg6tZZsTfXcdvc5caW/EMxaB4H9dWsl7qk+F7LAW762hp8VbXOX7x4xUYvEw==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
+      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
       "hasInstallScript": true,
       "dependencies": {
         "asn1": "^0.2.6",
@@ -1430,8 +1583,8 @@
         "node": ">=10.16.0"
       },
       "optionalDependencies": {
-        "cpu-features": "~0.0.9",
-        "nan": "^2.18.0"
+        "cpu-features": "~0.0.10",
+        "nan": "^2.20.0"
       }
     },
     "node_modules/string_decoder": {
@@ -1578,7 +1731,8 @@
     "node_modules/tweetnacl": {
       "version": "0.14.5",
       "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
-      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA=="
+      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
+      "license": "Unlicense"
     },
     "node_modules/type-fest": {
       "version": "1.4.0",
@@ -1604,6 +1758,19 @@
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="
     },
+    "node_modules/uuid": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
+      "license": "MIT",
+      "bin": {
+        "uuid": "dist/bin/uuid"
+      }
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
@@ -1713,6 +1880,26 @@
       "resolved": "https://registry.npmjs.org/@balena/dockerignore/-/dockerignore-1.0.2.tgz",
       "integrity": "sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q=="
     },
+    "@grpc/grpc-js": {
+      "version": "1.12.5",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.12.5.tgz",
+      "integrity": "sha512-d3iiHxdpg5+ZcJ6jnDSOT8Z0O0VMVGy34jAnYLUX8yd36b1qn8f1TwOA/Lc7TsOh03IkPJ38eGI5qD2EjNkoEA==",
+      "requires": {
+        "@grpc/proto-loader": "^0.7.13",
+        "@js-sdsl/ordered-map": "^4.4.2"
+      }
+    },
+    "@grpc/proto-loader": {
+      "version": "0.7.13",
+      "resolved": "https://registry.npmjs.org/@grpc/proto-loader/-/proto-loader-0.7.13.tgz",
+      "integrity": "sha512-AiXO/bfe9bmxBjxxtYxFAXGZvMaN5s8kO+jBHAJCON8rJoB5YS/D6X7ZNc6XQkuHNmyl4CYaMI1fJ/Gn27RGGw==",
+      "requires": {
+        "lodash.camelcase": "^4.3.0",
+        "long": "^5.0.0",
+        "protobufjs": "^7.2.5",
+        "yargs": "^17.7.2"
+      }
+    },
     "@isaacs/cliui": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -1779,12 +1966,71 @@
         "minipass": "^7.0.4"
       }
     },
+    "@js-sdsl/ordered-map": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
+      "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw=="
+    },
     "@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
       "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
       "optional": true
     },
+    "@protobufjs/aspromise": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
+      "integrity": "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ=="
+    },
+    "@protobufjs/base64": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/base64/-/base64-1.1.2.tgz",
+      "integrity": "sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg=="
+    },
+    "@protobufjs/codegen": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/@protobufjs/codegen/-/codegen-2.0.4.tgz",
+      "integrity": "sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg=="
+    },
+    "@protobufjs/eventemitter": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/eventemitter/-/eventemitter-1.1.0.tgz",
+      "integrity": "sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q=="
+    },
+    "@protobufjs/fetch": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/fetch/-/fetch-1.1.0.tgz",
+      "integrity": "sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==",
+      "requires": {
+        "@protobufjs/aspromise": "^1.1.1",
+        "@protobufjs/inquire": "^1.1.0"
+      }
+    },
+    "@protobufjs/float": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/float/-/float-1.0.2.tgz",
+      "integrity": "sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ=="
+    },
+    "@protobufjs/inquire": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/inquire/-/inquire-1.1.0.tgz",
+      "integrity": "sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q=="
+    },
+    "@protobufjs/path": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/@protobufjs/path/-/path-1.1.2.tgz",
+      "integrity": "sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA=="
+    },
+    "@protobufjs/pool": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/pool/-/pool-1.1.0.tgz",
+      "integrity": "sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw=="
+    },
+    "@protobufjs/utf8": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@protobufjs/utf8/-/utf8-1.1.0.tgz",
+      "integrity": "sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw=="
+    },
     "@sindresorhus/is": {
       "version": "5.3.0",
       "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-5.3.0.tgz",
@@ -1806,8 +2052,7 @@
     "@types/node": {
       "version": "18.6.5",
       "resolved": "https://registry.npmjs.org/@types/node/-/node-18.6.5.tgz",
-      "integrity": "sha512-Xjt5ZGUa5WusGZJ4WJPbOT8QOqp6nDynVFRKcUt32bOgvXEoc6o085WNkYTMO7ifAj2isEfQQ2cseE+wT6jsRw==",
-      "optional": true
+      "integrity": "sha512-Xjt5ZGUa5WusGZJ4WJPbOT8QOqp6nDynVFRKcUt32bOgvXEoc6o085WNkYTMO7ifAj2isEfQQ2cseE+wT6jsRw=="
     },
     "@types/yauzl": {
       "version": "2.10.0",
@@ -1909,9 +2154,9 @@
       }
     },
     "chalk": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.3.0.tgz",
-      "integrity": "sha512-dLitG79d+GV1Nb/VYcCDFivJeK1hiukt9QjRNVOsUtTy1rR1YJsmpGGTZ3qJos+uw7WmWF4wUwBd9jxjocFC2w=="
+      "version": "5.4.1",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-5.4.1.tgz",
+      "integrity": "sha512-zgVZuo2WcZgfUEmsn6eO3kINexW8RAE4maiQ8QNs8CtpPCSyMiYsULR3HQYkm3w8FIA3SberyMJMSldGsW+U3w=="
     },
     "chownr": {
       "version": "1.1.4",
@@ -1994,13 +2239,13 @@
       "integrity": "sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w=="
     },
     "cpu-features": {
-      "version": "0.0.9",
-      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.9.tgz",
-      "integrity": "sha512-AKjgn2rP2yJyfbepsmLfiYcmtNn/2eUvocUyM/09yB0YDiz39HteK/5/T4Onf0pmdYDMgkBoGvRLvEguzyL7wQ==",
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
+      "integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
       "optional": true,
       "requires": {
         "buildcheck": "~0.0.6",
-        "nan": "^2.17.0"
+        "nan": "^2.19.0"
       }
     },
     "cross-spawn": {
@@ -2042,9 +2287,9 @@
       "integrity": "sha512-4tvttepXG1VaYGrRibk5EwJd1t4udunSOVMdLSAL6mId1ix438oPwPZMALY41FCijukO1L0twNcGsdzS7dHgDg=="
     },
     "docker-modem": {
-      "version": "5.0.3",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.3.tgz",
-      "integrity": "sha512-89zhop5YVhcPEt5FpUFGr3cDyceGhq/F9J+ZndQ4KfqNvfbJpPMfgeixFgUj5OjCYAboElqODxY5Z1EBsSa6sg==",
+      "version": "5.0.6",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
+      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
       "requires": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -2053,13 +2298,17 @@
       }
     },
     "dockerode": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.2.tgz",
-      "integrity": "sha512-9wM1BVpVMFr2Pw3eJNXrYYt6DT9k0xMcsSCjtPvyQ+xa1iPg/Mo3T/gUcwI0B2cczqCeCYRPF8yFYDwtFXT0+w==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
+      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
-        "docker-modem": "^5.0.3",
-        "tar-fs": "~2.0.1"
+        "@grpc/grpc-js": "^1.11.1",
+        "@grpc/proto-loader": "^0.7.13",
+        "docker-modem": "^5.0.6",
+        "protobufjs": "^7.3.2",
+        "tar-fs": "~2.0.1",
+        "uuid": "^10.0.0"
       }
     },
     "eastasianwidth": {
@@ -2155,9 +2404,9 @@
       "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "fs-extra": {
-      "version": "11.2.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.2.0.tgz",
-      "integrity": "sha512-PmDi3uwK5nFuXh7XDTlVnS17xJS7vW36is2+w3xcv8SVxiB4NyATf4ctkVY5bkSjX0Y4nbvZCq1/EjtEyr9ktw==",
+      "version": "11.3.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
+      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
       "requires": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
@@ -2342,6 +2591,11 @@
       "resolved": "https://registry.npmjs.org/lodash-es/-/lodash-es-4.17.21.tgz",
       "integrity": "sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw=="
     },
+    "lodash.camelcase": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz",
+      "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA=="
+    },
     "log-update": {
       "version": "5.0.1",
       "resolved": "https://registry.npmjs.org/log-update/-/log-update-5.0.1.tgz",
@@ -2399,6 +2653,11 @@
         }
       }
     },
+    "long": {
+      "version": "5.2.4",
+      "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
+      "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg=="
+    },
     "lowercase-keys": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-3.0.0.tgz",
@@ -2462,9 +2721,9 @@
       "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
     },
     "nan": {
-      "version": "2.18.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.18.0.tgz",
-      "integrity": "sha512-W7tfG7vMOGtD30sHoZSSc/JVYiyDPEyQVso/Zz+/uQd0B0L46gtC+pHha5FFMRpil6fm/AoEcRWyOVi4+E/f8w==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
+      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
       "optional": true
     },
     "normalize-url": {
@@ -2517,6 +2776,25 @@
       "resolved": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-6.1.1.tgz",
       "integrity": "sha512-mQUvGU6aUFQ+rNvTIAcZuWGRT9a6f6Yrg9bHs4ImKF+HZCEK+plBvnAZYSIQztknZF2qnzNtr6F8s0+IuptdlQ=="
     },
+    "protobufjs": {
+      "version": "7.4.0",
+      "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
+      "integrity": "sha512-mRUWCc3KUU4w1jU8sGxICXH/gNS94DvI1gxqDvBzhj1JpcsimQkYiOJfwsPUykUI5ZaspFbSgmBLER8IrQ3tqw==",
+      "requires": {
+        "@protobufjs/aspromise": "^1.1.2",
+        "@protobufjs/base64": "^1.1.2",
+        "@protobufjs/codegen": "^2.0.4",
+        "@protobufjs/eventemitter": "^1.1.0",
+        "@protobufjs/fetch": "^1.1.0",
+        "@protobufjs/float": "^1.0.2",
+        "@protobufjs/inquire": "^1.1.0",
+        "@protobufjs/path": "^1.1.2",
+        "@protobufjs/pool": "^1.1.0",
+        "@protobufjs/utf8": "^1.1.0",
+        "@types/node": ">=13.7.0",
+        "long": "^5.0.0"
+      }
+    },
     "pump": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
@@ -2636,14 +2914,14 @@
       "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
     },
     "ssh2": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.15.0.tgz",
-      "integrity": "sha512-C0PHgX4h6lBxYx7hcXwu3QWdh4tg6tZZsTfXcdvc5caW/EMxaB4H9dWsl7qk+F7LAW762hp8VbXOX7x4xUYvEw==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
+      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
       "requires": {
         "asn1": "^0.2.6",
         "bcrypt-pbkdf": "^1.0.2",
-        "cpu-features": "~0.0.9",
-        "nan": "^2.18.0"
+        "cpu-features": "~0.0.10",
+        "nan": "^2.20.0"
       }
     },
     "string_decoder": {
@@ -2774,6 +3052,11 @@
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
       "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw=="
     },
+    "uuid": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
+      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ=="
+    },
     "which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
diff --git a/dev/diff/package.json b/dev/diff/package.json
index 4e0e1be8f4..875e242d3d 100644
--- a/dev/diff/package.json
+++ b/dev/diff/package.json
@@ -2,11 +2,11 @@
   "name": "diff",
   "type": "module",
   "dependencies": {
-    "chalk": "^5.3.0",
-    "dockerode": "^4.0.2",
+    "chalk": "^5.4.1",
+    "dockerode": "^4.0.4",
     "enquirer": "^2.4.1",
     "extract-zip": "^2.0.1",
-    "fs-extra": "^11.2.0",
+    "fs-extra": "^11.3.0",
     "got": "^13.0.0",
     "keypress": "^0.2.1",
     "listr2": "^6.6.1",

From 1fbedd7df17c2b123c64cf6cd17898ef2663bedb Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 5 Feb 2025 16:31:35 -0400
Subject: [PATCH 241/707] chore: typing fixes for factory-boy 3.3.3 (#8501)

* chore: typing fixes for factory-boy 3.3.3

* chore: more comments
---
 ietf/doc/factories.py       | 13 ++++++++-----
 ietf/ipr/tests.py           |  2 +-
 ietf/meeting/tests_views.py |  3 ++-
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/ietf/doc/factories.py b/ietf/doc/factories.py
index 50fba50c42..19aa9ecc9c 100644
--- a/ietf/doc/factories.py
+++ b/ietf/doc/factories.py
@@ -7,7 +7,7 @@
 import factory.fuzzy
 import datetime
 
-from typing import Optional         # pyflakes:ignore
+from typing import Any  # pyflakes:ignore
 
 from django.conf import settings
 from django.utils import timezone
@@ -37,13 +37,16 @@ class Meta:
         model = Document
         skip_postgeneration_save = True
 
+    # n.b., a few attributes are typed as Any so mypy won't complain when we override in subclasses
     title = factory.Faker('sentence',nb_words=5)
-    abstract = factory.Faker('paragraph', nb_sentences=5)
+    abstract: Any = factory.Faker('paragraph', nb_sentences=5)
     rev = '00'
-    std_level_id = None                 # type: Optional[str]
+    std_level_id: Any = None
     intended_std_level_id = None
     time = timezone.now()
-    expires = factory.LazyAttribute(lambda o: o.time+datetime.timedelta(days=settings.INTERNET_DRAFT_DAYS_TO_EXPIRE))
+    expires: Any = factory.LazyAttribute(
+        lambda o: o.time+datetime.timedelta(days=settings.INTERNET_DRAFT_DAYS_TO_EXPIRE)
+    )
     pages = factory.fuzzy.FuzzyInteger(2,400)
 
 
@@ -282,7 +285,7 @@ class Meta:
 
     type = 'added_comment'
     by = factory.SubFactory('ietf.person.factories.PersonFactory')
-    doc = factory.SubFactory(DocumentFactory)
+    doc: Any = factory.SubFactory(DocumentFactory)  # `Any` to appease mypy when a subclass overrides doc
     desc = factory.Faker('sentence',nb_words=6)
 
     @factory.lazy_attribute
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index beb4d7fc1c..e0d00b5d1a 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -726,7 +726,7 @@ def test_notify_generic(self):
         self.assertIn(f'{settings.IDTRACKER_BASE_URL}{urlreverse("ietf.ipr.views.showlist")}', get_payload_text(outbox[1]).replace('\n',' '))
 
     def send_ipr_email_helper(self) -> tuple[str, IprEvent, HolderIprDisclosure]:
-        ipr = HolderIprDisclosureFactory()
+        ipr = HolderIprDisclosureFactory.create()  # call create() explicitly so mypy sees correct type
         url = urlreverse('ietf.ipr.views.email',kwargs={ "id": ipr.id })
         self.client.login(username="secretary", password="secretary+password")
         yesterday = date_today() - datetime.timedelta(1)
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 3e948f8386..94f06dc89c 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -2124,7 +2124,8 @@ def create_timeslots_url(meeting):
     @staticmethod
     def create_bare_meeting(number=120) -> Meeting:
         """Create a basic IETF meeting"""
-        return MeetingFactory(
+        # Call create() explicitly so mypy sees the correct type
+        return MeetingFactory.create(
             type_id='ietf',
             number=number,
             date=date_today() + datetime.timedelta(days=10),

From 060320d766803e479d860832a2ae9ebeb5a9d4d3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 5 Feb 2025 18:29:32 -0400
Subject: [PATCH 242/707] feat: keep proceedings cache up to date via celery
 (#8449)

* refactor: better control proceedings caching

* refactor: move methods from views to utils

* chore: revert accidental settings change

* fix: eliminate circular import

get_schedule() with name=None should perhaps be an anti-pattern

* feat: task to recompute proceedings daily

* chore: proceedings cache lifetime = 1 day

* fix: ensure finalization is immediately reflected

* chore: update beat comments in docker-compose

* style: undo a couple whitespace changes

* test: update / refactor tests

* test: test task

* refactor: disallow positional arg to task

* refactor: add trivial test of old task
---
 docker-compose.yml                            |   1 +
 ietf/meeting/tasks.py                         |  32 ++
 ietf/meeting/tests_tasks.py                   |  51 +++
 ietf/meeting/tests_views.py                   |  91 ++++-
 ietf/meeting/utils.py                         | 171 +++++++-
 ietf/meeting/views.py                         | 157 +-------
 ietf/templates/meeting/proceedings.html       | 380 ++++++++----------
 .../meeting/proceedings_wrapper.html          |  27 ++
 8 files changed, 542 insertions(+), 368 deletions(-)
 create mode 100644 ietf/meeting/tests_tasks.py
 create mode 100644 ietf/templates/meeting/proceedings_wrapper.html

diff --git a/docker-compose.yml b/docker-compose.yml
index 65b28f54fe..9988b10c2e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -101,6 +101,7 @@ services:
 #        stop_grace_period: 1m
 #        volumes:
 #            - .:/workspace
+#            - app-assets:/assets
 
 volumes:
     postgresdb-data:
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index 43cbb0a75f..2b7c2fca91 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -3,10 +3,42 @@
 # Celery task definitions
 #
 from celery import shared_task
+from django.utils import timezone
 
+from ietf.utils import log
+from .models import Meeting
+from .utils import generate_proceedings_content
 from .views import generate_agenda_data
 
 
 @shared_task
 def agenda_data_refresh():
     generate_agenda_data(force_refresh=True)
+
+
+@shared_task
+def proceedings_content_refresh_task(*, all=False):
+    """Refresh meeting proceedings cache
+
+    If `all` is `False`, then refreshes the cache for meetings whose numbers modulo
+    24 equal the current hour number (0-23). Scheduling the task once per hour will
+    then result in all proceedings being recomputed daily, with no more than two per
+    hour (now) or a few per hour in the next decade. That keeps the computation time
+    to under a couple minutes on our current production system.
+
+    If `all` is True, refreshes all meetings
+    """
+    now = timezone.now()
+
+    for meeting in Meeting.objects.filter(type_id="ietf").order_by("number"):
+        if meeting.proceedings_format_version == 1:
+            continue  # skip v1 proceedings, they're stored externally
+        num = meeting.get_number()  # convert str -> int
+        if num is None:
+            log.log(
+                f"Not refreshing proceedings for meeting {meeting.number}: "
+                f"type is 'ietf' but get_number() returned None"
+            )
+        elif all or (num % 24 == now.hour):
+            log.log(f"Refreshing proceedings for meeting {meeting.number}...")
+            generate_proceedings_content(meeting, force_refresh=True)
diff --git a/ietf/meeting/tests_tasks.py b/ietf/meeting/tests_tasks.py
new file mode 100644
index 0000000000..c026a99835
--- /dev/null
+++ b/ietf/meeting/tests_tasks.py
@@ -0,0 +1,51 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+import datetime
+from mock import patch, call
+from ietf.utils.test_utils import TestCase
+from .factories import MeetingFactory
+from .tasks import proceedings_content_refresh_task, agenda_data_refresh
+
+
+class TaskTests(TestCase):
+    @patch("ietf.meeting.tasks.generate_agenda_data")
+    def test_agenda_data_refresh(self, mock_generate):
+        agenda_data_refresh()
+        self.assertTrue(mock_generate.called)
+        self.assertEqual(mock_generate.call_args, call(force_refresh=True))
+
+    @patch("ietf.meeting.tasks.generate_proceedings_content")
+    def test_proceedings_content_refresh_task(self, mock_generate):
+        # Generate a couple of meetings
+        meeting120 = MeetingFactory(type_id="ietf", number="120")  # 24 * 5
+        meeting127 = MeetingFactory(type_id="ietf", number="127")  # 24 * 5 + 7
+        
+        # Times to be returned
+        now_utc = datetime.datetime.now(tz=datetime.timezone.utc)
+        hour_00_utc = now_utc.replace(hour=0)
+        hour_01_utc = now_utc.replace(hour=1)
+        hour_07_utc = now_utc.replace(hour=7)
+
+        # hour 00 - should call meeting with number % 24 == 0
+        with patch("ietf.meeting.tasks.timezone.now", return_value=hour_00_utc):
+            proceedings_content_refresh_task()
+        self.assertEqual(mock_generate.call_count, 1)
+        self.assertEqual(mock_generate.call_args, call(meeting120, force_refresh=True))
+        mock_generate.reset_mock()
+    
+        # hour 01 - should call no meetings
+        with patch("ietf.meeting.tasks.timezone.now", return_value=hour_01_utc):
+            proceedings_content_refresh_task()
+        self.assertEqual(mock_generate.call_count, 0)
+    
+        # hour 07 - should call meeting with number % 24 == 0
+        with patch("ietf.meeting.tasks.timezone.now", return_value=hour_07_utc):
+            proceedings_content_refresh_task()
+        self.assertEqual(mock_generate.call_count, 1)
+        self.assertEqual(mock_generate.call_args, call(meeting127, force_refresh=True))
+        mock_generate.reset_mock()
+        
+        # With all=True, all should be called regardless of time. Reuse hour_01_utc which called none before
+        with patch("ietf.meeting.tasks.timezone.now", return_value=hour_01_utc):
+            proceedings_content_refresh_task(all=True)
+        self.assertEqual(mock_generate.call_count, 2)
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 94f06dc89c..581725dbc8 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -32,6 +32,7 @@
 from django.http import QueryDict, FileResponse
 from django.template import Context, Template
 from django.utils import timezone
+from django.utils.safestring import mark_safe
 from django.utils.text import slugify
 
 import debug           # pyflakes:ignore
@@ -46,7 +47,7 @@
 from ietf.meeting.helpers import send_interim_minutes_reminder, populate_important_dates, update_important_dates
 from ietf.meeting.models import Session, TimeSlot, Meeting, SchedTimeSessAssignment, Schedule, SessionPresentation, SlideSubmission, SchedulingEvent, Room, Constraint, ConstraintName
 from ietf.meeting.test_data import make_meeting_test_data, make_interim_meeting, make_interim_test_data
-from ietf.meeting.utils import condition_slide_order
+from ietf.meeting.utils import condition_slide_order, generate_proceedings_content
 from ietf.meeting.utils import add_event_info_to_session_qs, participants_for_meeting
 from ietf.meeting.utils import create_recording, delete_recording, get_next_sequence, bluesheet_data
 from ietf.meeting.views import session_draft_list, parse_agenda_filter_params, sessions_post_save, agenda_extract_schedule
@@ -8296,8 +8297,7 @@ def _proceedings_file():
         path = Path(settings.BASE_DIR) / 'meeting/test_procmat.pdf'
         return path.open('rb')
 
-    def _assertMeetingHostsDisplayed(self, response, meeting):
-        pq = PyQuery(response.content)
+    def _assertMeetingHostsDisplayed(self, pq: PyQuery, meeting):
         host_divs = pq('div.host-logo')
         self.assertEqual(len(host_divs), meeting.meetinghosts.count(), 'Should have a logo for every meeting host')
         self.assertEqual(
@@ -8313,12 +8313,11 @@ def _assertMeetingHostsDisplayed(self, response, meeting):
             'Correct image and name for each host should appear in the correct order'
         )
 
-    def _assertProceedingsMaterialsDisplayed(self, response, meeting):
+    def _assertProceedingsMaterialsDisplayed(self, pq: PyQuery, meeting):
         """Checks that all (and only) active materials are linked with correct href and title"""
         expected_materials = [
             m for m in meeting.proceedings_materials.order_by('type__order') if m.active()
         ]
-        pq = PyQuery(response.content)
         links = pq('div.proceedings-material a')
         self.assertEqual(len(links), len(expected_materials), 'Should have an entry for each active ProceedingsMaterial')
         self.assertEqual(
@@ -8327,9 +8326,8 @@ def _assertProceedingsMaterialsDisplayed(self, response, meeting):
             'Correct title and link for each ProceedingsMaterial should appear in the correct order'
         )
 
-    def _assertGroupSessions(self, response, meeting):
+    def _assertGroupSessions(self,  pq: PyQuery):
         """Checks that group/sessions are present"""
-        pq = PyQuery(response.content)
         sections = ["plenaries", "gen", "iab", "editorial", "irtf", "training"]
         for section in sections:
             self.assertEqual(len(pq(f"#{section}")), 1, f"{section} section should exists in proceedings")
@@ -8337,10 +8335,9 @@ def _assertGroupSessions(self, response, meeting):
     def test_proceedings(self):
         """Proceedings should be displayed correctly
 
-        Currently only tests that the view responds with a 200 response code and checks the ProceedingsMaterials
-        at the top of the proceedings. Ought to actually test the display of the individual group/session
-        materials as well.
+        Proceedings contents are tested in detail when testing generate_proceedings_content.
         """
+        # number must be >97 (settings.PROCEEDINGS_VERSION_CHANGES)
         meeting = make_meeting_test_data(meeting=MeetingFactory(type_id='ietf', number='100'))
         session = Session.objects.filter(meeting=meeting, group__acronym="mars").first()
         GroupEventFactory(group=session.group,type='status_update')
@@ -8365,16 +8362,72 @@ def test_proceedings(self):
         self._create_proceedings_materials(meeting)
 
         url = urlreverse("ietf.meeting.views.proceedings", kwargs=dict(num=meeting.number))
-        r = self.client.get(url)
+        cached_content = mark_safe("<p>Fake proceedings content</p>")
+        with patch("ietf.meeting.views.generate_proceedings_content") as mock_gpc:
+            mock_gpc.return_value = cached_content
+            r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
+        self.assertIn(cached_content, r.content.decode())
+        self.assertTemplateUsed(r, "meeting/proceedings_wrapper.html")
+        self.assertTemplateNotUsed(r, "meeting/proceedings.html")
 
+        # These are rendered in proceedings_wrapper.html, so test them here
         if len(meeting.city) > 0:
             self.assertContains(r, meeting.city)
         if len(meeting.venue_name) > 0:
             self.assertContains(r, meeting.venue_name)
+        self._assertMeetingHostsDisplayed(PyQuery(r.content), meeting)
+
+    @patch("ietf.meeting.utils.caches")
+    def test_generate_proceedings_content(self, mock_caches):
+        # number must be >97 (settings.PROCEEDINGS_VERSION_CHANGES)
+        meeting = make_meeting_test_data(meeting=MeetingFactory(type_id='ietf', number='100'))
+
+        # First, check that by default a value in the cache is used without doing any other computation 
+        mock_default_cache = mock_caches["default"]
+        mock_default_cache.get.return_value = "a cached value"
+        result = generate_proceedings_content(meeting)
+        self.assertEqual(result, "a cached value")
+        self.assertFalse(mock_default_cache.set.called)
+        self.assertTrue(mock_default_cache.get.called)
+        cache_key = mock_default_cache.get.call_args.args[0]
+        mock_default_cache.get.reset_mock()
+    
+        # Now set up for actual computation of the proceedings content.
+        session = Session.objects.filter(meeting=meeting, group__acronym="mars").first()
+        GroupEventFactory(group=session.group,type='status_update')
+        SessionPresentationFactory(document__type_id='recording',session=session)
+        SessionPresentationFactory(document__type_id='recording',session=session,document__title="Audio recording for tests")
+
+        # Add various group sessions
+        groups = []
+        parent_groups = [
+                GroupFactory.create(type_id="area", acronym="gen"),
+                GroupFactory.create(acronym="iab"),
+                GroupFactory.create(acronym="irtf"),
+                ]
+        for parent in parent_groups:
+            groups.append(GroupFactory.create(parent=parent))
+        for acronym in ["rsab", "edu"]:
+            groups.append(GroupFactory.create(acronym=acronym))
+        for group in groups:
+            SessionFactory(meeting=meeting, group=group)
+
+        self.write_materials_files(meeting, session)
+        self._create_proceedings_materials(meeting)
+
+        # Now "empty" the mock cache and see that we compute the expected proceedings content.
+        mock_default_cache.get.return_value = None
+        proceedings_content = generate_proceedings_content(meeting)
+        self.assertTrue(mock_default_cache.get.called)
+        self.assertEqual(mock_default_cache.get.call_args.args[0], cache_key, "same cache key each time")
+        self.assertTrue(mock_default_cache.set.called)
+        self.assertEqual(mock_default_cache.set.call_args, call(cache_key, proceedings_content, timeout=86400))
+        mock_default_cache.get.reset_mock()
+        mock_default_cache.set.reset_mock()
 
         # standard items on every proceedings
-        pq = PyQuery(r.content)
+        pq = PyQuery(proceedings_content)
         self.assertNotEqual(
             pq('a[href="{}"]'.format(
                 urlreverse('ietf.meeting.views.proceedings_overview', kwargs=dict(num=meeting.number)))
@@ -8405,9 +8458,17 @@ def test_proceedings(self):
         )
 
         # configurable contents
-        self._assertMeetingHostsDisplayed(r, meeting)
-        self._assertProceedingsMaterialsDisplayed(r, meeting)
-        self._assertGroupSessions(r, meeting)
+        self._assertProceedingsMaterialsDisplayed(pq, meeting)
+        self._assertGroupSessions(pq)
+
+        # Finally, repeat the first cache test, but now with force_refresh=True. The cached value
+        # should be ignored and we should recompute the proceedings as before.
+        mock_default_cache.get.return_value = "a cached value"
+        result = generate_proceedings_content(meeting, force_refresh=True)
+        self.assertEqual(result, proceedings_content)  # should have recomputed the same thing
+        self.assertFalse(mock_default_cache.get.called, "don't bother reading cache when force_refresh is True")
+        self.assertTrue(mock_default_cache.set.called)
+        self.assertEqual(mock_default_cache.set.call_args, call(cache_key, proceedings_content, timeout=86400))
 
     def test_named_session(self):
         """Session with a name should appear separately in the proceedings"""
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 6e681fdc31..92bae5ac23 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -3,6 +3,8 @@
 import datetime
 import itertools
 import os
+from hashlib import sha384
+
 import pytz
 import subprocess
 
@@ -11,8 +13,9 @@
 
 from django.conf import settings
 from django.contrib import messages
+from django.core.cache import caches
 from django.core.files.base import ContentFile
-from django.db.models import OuterRef, Subquery, TextField, Q, Value
+from django.db.models import OuterRef, Subquery, TextField, Q, Value, Max
 from django.db.models.functions import Coalesce
 from django.template.loader import render_to_string
 from django.utils import timezone
@@ -995,3 +998,169 @@ def participants_for_meeting(meeting):
     sessions = meeting.session_set.filter(Q(type='plenary') | Q(group__type__in=['wg', 'rg']))
     attended = Attended.objects.filter(session__in=sessions).values_list('person', flat=True).distinct()
     return (checked_in, attended)
+
+
+def generate_proceedings_content(meeting, force_refresh=False):
+    """Render proceedings content for a meeting and update cache
+    
+    :meeting: meeting whose proceedings should be rendered
+    :force_refresh: true to force regeneration and cache refresh
+    """
+    cache = caches["default"]
+    cache_version = Document.objects.filter(session__meeting__number=meeting.number).aggregate(Max('time'))["time__max"]
+    # Include proceedings_final in the bare_key so we'll always reflect that accurately, even at the cost of
+    # a recomputation in the view
+    bare_key = f"proceedings.{meeting.number}.{cache_version}.final={meeting.proceedings_final}"
+    cache_key = sha384(bare_key.encode("utf8")).hexdigest()
+    if not force_refresh:
+        cached_content = cache.get(cache_key, None)
+        if cached_content is not None:
+            return cached_content
+
+    def area_and_group_acronyms_from_session(s):
+        area = s.group_parent_at_the_time()
+        if area == None:
+            area = s.group.parent
+        group = s.group_at_the_time()
+        return (area.acronym, group.acronym)
+
+    schedule = meeting.schedule
+    sessions  = (
+        meeting.session_set.with_current_status()
+        .filter(Q(timeslotassignments__schedule__in=[schedule, schedule.base if schedule else None])
+                | Q(current_status='notmeet'))
+        .select_related()
+        .order_by('-current_status')
+    )
+
+    plenaries, _ = organize_proceedings_sessions(
+        sessions.filter(name__icontains='plenary')
+        .exclude(current_status='notmeet')
+    )
+    irtf_meeting, irtf_not_meeting = organize_proceedings_sessions(
+        sessions.filter(group__parent__acronym = 'irtf').order_by('group__acronym')
+    )
+    # per Colin (datatracker #5010) - don't report not meeting rags
+    irtf_not_meeting = [item for item in irtf_not_meeting if item["group"].type_id != "rag"]
+    irtf = {"meeting_groups":irtf_meeting, "not_meeting_groups":irtf_not_meeting}
+
+    training, _ = organize_proceedings_sessions(
+        sessions.filter(group__acronym__in=['edu','iaoc'], type_id__in=['regular', 'other',])
+        .exclude(current_status='notmeet')
+    )
+    iab, _ = organize_proceedings_sessions(
+        sessions.filter(group__parent__acronym = 'iab')
+        .exclude(current_status='notmeet')
+    )
+    editorial, _ = organize_proceedings_sessions(
+        sessions.filter(group__acronym__in=['rsab','rswg'])
+        .exclude(current_status='notmeet')
+    )
+
+    ietf = sessions.filter(group__parent__type__slug = 'area').exclude(group__acronym__in=['edu','iepg','tools'])
+    ietf = list(ietf)
+    ietf.sort(key=lambda s: area_and_group_acronyms_from_session(s))
+    ietf_areas = []
+    for area, area_sessions in itertools.groupby(ietf, key=lambda s: s.group_parent_at_the_time()):
+        meeting_groups, not_meeting_groups = organize_proceedings_sessions(area_sessions)
+        ietf_areas.append((area, meeting_groups, not_meeting_groups))
+
+    with timezone.override(meeting.tz()):
+        rendered_content = render_to_string(
+            "meeting/proceedings.html", 
+            {
+                'meeting': meeting,
+                'plenaries': plenaries,
+                'training': training,
+                'irtf': irtf,
+                'iab': iab,
+                'editorial': editorial,
+                'ietf_areas': ietf_areas,
+                'meetinghost_logo': {
+                    'max_height': settings.MEETINGHOST_LOGO_MAX_DISPLAY_HEIGHT,
+                    'max_width': settings.MEETINGHOST_LOGO_MAX_DISPLAY_WIDTH,
+                }
+            },
+        )
+    cache.set(
+        cache_key,
+        rendered_content,
+        timeout=86400,  # one day, in seconds
+    )
+    return rendered_content
+
+
+def organize_proceedings_sessions(sessions):
+    # Collect sessions by Group, then bin by session name (including sessions with blank names).
+    # If all of a group's sessions are 'notmeet', the processed data goes in not_meeting_sessions.
+    # Otherwise, the data goes in meeting_sessions.
+    meeting_groups = []
+    not_meeting_groups = []
+    for group_acronym, group_sessions in itertools.groupby(sessions, key=lambda s: s.group.acronym):
+        by_name = {}
+        is_meeting = False
+        all_canceled = True
+        group = None
+        for s in sorted(
+                group_sessions,
+                key=lambda gs: (
+                        gs.official_timeslotassignment().timeslot.time
+                        if gs.official_timeslotassignment() else datetime.datetime(datetime.MAXYEAR, 1, 1)
+                ),
+        ):
+            group = s.group
+            if s.current_status != 'notmeet':
+                is_meeting = True
+            if s.current_status != 'canceled':
+                all_canceled = False
+            by_name.setdefault(s.name, [])
+            if s.current_status != 'notmeet' or s.presentations.exists():
+                by_name[s.name].append(s)  # for notmeet, only include sessions with materials
+        for sess_name, ss in by_name.items():
+            session = ss[0] if ss else None
+            def _format_materials(items):
+                """Format session/material for template
+
+                Input is a list of (session, materials) pairs. The materials value can be a single value or a list.
+                """
+                material_times = {}  # key is material, value is first timestamp it appeared
+                for s, mats in items:
+                    tsa = s.official_timeslotassignment()
+                    timestamp = tsa.timeslot.time if tsa else None
+                    if not isinstance(mats, list):
+                        mats = [mats]
+                    for mat in mats:
+                        if mat and mat not in material_times:
+                            material_times[mat] = timestamp
+                n_mats = len(material_times)
+                result = []
+                if n_mats == 1:
+                    result.append({'material': list(material_times)[0]})  # no 'time' when only a single material
+                elif n_mats > 1:
+                    for mat, timestamp in material_times.items():
+                        result.append({'material': mat, 'time': timestamp})
+                return result
+
+            entry = {
+                'group': group,
+                'name': sess_name,
+                'session': session,
+                'canceled': all_canceled,
+                'has_materials': s.presentations.exists(),
+                'agendas': _format_materials((s, s.agenda()) for s in ss),
+                'minutes': _format_materials((s, s.minutes()) for s in ss),
+                'bluesheets': _format_materials((s, s.bluesheets()) for s in ss),
+                'recordings': _format_materials((s, s.recordings()) for s in ss),
+                'meetecho_recordings': _format_materials((s, [s.session_recording_url()]) for s in ss),
+                'chatlogs': _format_materials((s, s.chatlogs()) for s in ss),
+                'slides': _format_materials((s, s.slides()) for s in ss),
+                'drafts': _format_materials((s, s.drafts()) for s in ss),
+                'last_update': session.last_update if hasattr(session, 'last_update') else None
+            }
+            if session and session.meeting.type_id == 'ietf' and not session.meeting.proceedings_final:
+                entry['attendances'] = _format_materials((s, s) for s in ss if Attended.objects.filter(session=s).exists())
+            if is_meeting:
+                meeting_groups.append(entry)
+            else:
+                not_meeting_groups.append(entry)
+    return meeting_groups, not_meeting_groups
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 2f2464028b..1226e30d60 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -75,7 +75,13 @@
 from ietf.meeting.helpers import send_interim_approval
 from ietf.meeting.helpers import send_interim_approval_request
 from ietf.meeting.helpers import send_interim_announcement_request, sessions_post_cancel
-from ietf.meeting.utils import finalize, sort_accept_tuple, condition_slide_order
+from ietf.meeting.utils import (
+    condition_slide_order,
+    finalize,
+    generate_proceedings_content,
+    organize_proceedings_sessions,
+    sort_accept_tuple,
+)
 from ietf.meeting.utils import add_event_info_to_session_qs
 from ietf.meeting.utils import session_time_for_sorting
 from ietf.meeting.utils import session_requested_by, SaveMaterialsError
@@ -4128,93 +4134,10 @@ def upcoming_json(request):
     response = HttpResponse(json.dumps(data, indent=2, sort_keys=False), content_type='application/json;charset=%s'%settings.DEFAULT_CHARSET)
     return response
 
-def organize_proceedings_sessions(sessions):
-    # Collect sessions by Group, then bin by session name (including sessions with blank names).
-    # If all of a group's sessions are 'notmeet', the processed data goes in not_meeting_sessions.
-    # Otherwise, the data goes in meeting_sessions.
-    meeting_groups = []
-    not_meeting_groups = []
-    for group_acronym, group_sessions in itertools.groupby(sessions, key=lambda s: s.group.acronym):
-        by_name = {}
-        is_meeting = False
-        all_canceled = True
-        group = None
-        for s in sorted(
-                group_sessions,
-                key=lambda gs: (
-                        gs.official_timeslotassignment().timeslot.time
-                        if gs.official_timeslotassignment() else datetime.datetime(datetime.MAXYEAR, 1, 1)
-                ),
-        ):
-            group = s.group
-            if s.current_status != 'notmeet':
-                is_meeting = True
-            if s.current_status != 'canceled':
-                all_canceled = False
-            by_name.setdefault(s.name, [])
-            if s.current_status != 'notmeet' or s.presentations.exists():
-                by_name[s.name].append(s)  # for notmeet, only include sessions with materials
-        for sess_name, ss in by_name.items():
-            session = ss[0] if ss else None
-            def _format_materials(items):
-                """Format session/material for template
-
-                Input is a list of (session, materials) pairs. The materials value can be a single value or a list.
-                """
-                material_times = {}  # key is material, value is first timestamp it appeared
-                for s, mats in items:
-                    tsa = s.official_timeslotassignment()
-                    timestamp = tsa.timeslot.time if tsa else None
-                    if not isinstance(mats, list):
-                        mats = [mats]
-                    for mat in mats:
-                        if mat and mat not in material_times:
-                            material_times[mat] = timestamp
-                n_mats = len(material_times)
-                result = []
-                if n_mats == 1:
-                    result.append({'material': list(material_times)[0]})  # no 'time' when only a single material
-                elif n_mats > 1:
-                    for mat, timestamp in material_times.items():
-                        result.append({'material': mat, 'time': timestamp})
-                return result
-
-            entry = {
-                'group': group,
-                'name': sess_name,
-                'session': session,
-                'canceled': all_canceled,
-                'has_materials': s.presentations.exists(),
-                'agendas': _format_materials((s, s.agenda()) for s in ss),
-                'minutes': _format_materials((s, s.minutes()) for s in ss),
-                'bluesheets': _format_materials((s, s.bluesheets()) for s in ss),
-                'recordings': _format_materials((s, s.recordings()) for s in ss),
-                'meetecho_recordings': _format_materials((s, [s.session_recording_url()]) for s in ss),
-                'chatlogs': _format_materials((s, s.chatlogs()) for s in ss),
-                'slides': _format_materials((s, s.slides()) for s in ss),
-                'drafts': _format_materials((s, s.drafts()) for s in ss),
-                'last_update': session.last_update if hasattr(session, 'last_update') else None
-            }
-            if session and session.meeting.type_id == 'ietf' and not session.meeting.proceedings_final:
-                entry['attendances'] = _format_materials((s, s) for s in ss if Attended.objects.filter(session=s).exists())
-            if is_meeting:
-                meeting_groups.append(entry)
-            else:
-                not_meeting_groups.append(entry)
-    return meeting_groups, not_meeting_groups
-
 
 def proceedings(request, num=None):
-
-    def area_and_group_acronyms_from_session(s):
-        area = s.group_parent_at_the_time()
-        if area == None:
-            area = s.group.parent
-        group = s.group_at_the_time()
-        return (area.acronym, group.acronym)
-
     meeting = get_meeting(num)
-
+    
     # Early proceedings were hosted on www.ietf.org rather than the datatracker
     if meeting.proceedings_format_version == 1:
         return HttpResponseRedirect(settings.PROCEEDINGS_V1_BASE_URL.format(meeting=meeting))
@@ -4225,72 +4148,12 @@ def area_and_group_acronyms_from_session(s):
             kwargs['num'] = num
         return redirect('ietf.meeting.views.materials', **kwargs)
 
-    begin_date = meeting.get_submission_start_date()
-    cut_off_date = meeting.get_submission_cut_off_date()
-    cor_cut_off_date = meeting.get_submission_correction_date()
-    today_utc = date_today(datetime.timezone.utc)
-
-    schedule = get_schedule(meeting, None)
-    sessions  = (
-        meeting.session_set.with_current_status()
-        .filter(Q(timeslotassignments__schedule__in=[schedule, schedule.base if schedule else None])
-                | Q(current_status='notmeet'))
-        .select_related()
-        .order_by('-current_status')
-    )
-
-    plenaries, _ = organize_proceedings_sessions(
-        sessions.filter(name__icontains='plenary')
-        .exclude(current_status='notmeet')
-    )
-    irtf_meeting, irtf_not_meeting = organize_proceedings_sessions(
-        sessions.filter(group__parent__acronym = 'irtf').order_by('group__acronym')
-    )
-    # per Colin (datatracker #5010) - don't report not meeting rags
-    irtf_not_meeting = [item for item in irtf_not_meeting if item["group"].type_id != "rag"]
-    irtf = {"meeting_groups":irtf_meeting, "not_meeting_groups":irtf_not_meeting}
-
-    training, _ = organize_proceedings_sessions(
-        sessions.filter(group__acronym__in=['edu','iaoc'], type_id__in=['regular', 'other',])
-        .exclude(current_status='notmeet')
-    )
-    iab, _ = organize_proceedings_sessions(
-        sessions.filter(group__parent__acronym = 'iab')
-        .exclude(current_status='notmeet')
-    )
-    editorial, _ = organize_proceedings_sessions(
-        sessions.filter(group__acronym__in=['rsab','rswg'])
-        .exclude(current_status='notmeet')
-    )
-
-    ietf = sessions.filter(group__parent__type__slug = 'area').exclude(group__acronym__in=['edu','iepg','tools'])
-    ietf = list(ietf)
-    ietf.sort(key=lambda s: area_and_group_acronyms_from_session(s))
-    ietf_areas = []
-    for area, area_sessions in itertools.groupby(ietf, key=lambda s: s.group_parent_at_the_time()):
-        meeting_groups, not_meeting_groups = organize_proceedings_sessions(area_sessions)
-        ietf_areas.append((area, meeting_groups, not_meeting_groups))
-
-    cache_version = Document.objects.filter(session__meeting__number=meeting.number).aggregate(Max('time'))["time__max"]
 
     with timezone.override(meeting.tz()):
-        return render(request, "meeting/proceedings.html", {
+        return render(request, "meeting/proceedings_wrapper.html", {
             'meeting': meeting,
-            'plenaries': plenaries,
-            'training': training,
-            'irtf': irtf,
-            'iab': iab,
-            'editorial': editorial,
-            'ietf_areas': ietf_areas,
-            'cut_off_date': cut_off_date,
-            'cor_cut_off_date': cor_cut_off_date,
-            'submission_started': today_utc > begin_date,
-            'cache_version': cache_version,
             'attendance': meeting.get_attendance(),
-            'meetinghost_logo': {
-                'max_height': settings.MEETINGHOST_LOGO_MAX_DISPLAY_HEIGHT,
-                'max_width': settings.MEETINGHOST_LOGO_MAX_DISPLAY_WIDTH,
-            }
+            'proceedings_content': generate_proceedings_content(meeting),
         })
 
 @role_required('Secretariat')
diff --git a/ietf/templates/meeting/proceedings.html b/ietf/templates/meeting/proceedings.html
index b5d4a6198a..0aa8197fe9 100644
--- a/ietf/templates/meeting/proceedings.html
+++ b/ietf/templates/meeting/proceedings.html
@@ -1,184 +1,160 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% load ietf_filters static %}
-{% block pagehead %}
-    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
-{% endblock %}
-{% block title %}
-    IETF {{ meeting.number }}
-    {% if not meeting.proceedings_final %}Draft{% endif %}
-    Proceedings
-{% endblock %}
-{% block content %}
-    {% origin %}
-    {% include 'meeting/proceedings/title.html' with meeting=meeting attendance=attendance only %}
-    {% if user|has_role:"Secretariat" and not meeting.proceedings_final %}
-        <a class="btn btn-warning finalize-button"
-           href="{% url 'ietf.meeting.views.finalize_proceedings' num=meeting.number %}">
-            Finalize proceedings
-        </a>
-    {% endif %}
-    {# cache for 15 minutes, as long as there's no proceedings activity. takes 4-8 seconds to generate. #}
-    {% load cache %}
-    {% cache 900 ietf_meeting_proceedings meeting.number cache_version %}
-    {% include 'meeting/proceedings/introduction.html' with meeting=meeting only %}
-    <!-- Plenaries -->
-    {% if plenaries %}
-        <h2 class="mt-5" id="plenaries">Plenaries</h2>
-        <table class="table table-sm table-striped tablesorter">
-            <thead>
-                <tr>
-                    <th scope="col" data-sort="group">Group</th>
-                    <th scope="col" data-sort="artifacts">Artifacts</th>
-                    <th scope="col" data-sort="recordings">Recordings</th>
-                    <th scope="col" data-sort="slides">Slides</th>
-                    <th scope="col" data-sort="drafts">Internet-Drafts</th>
-                </tr>
-            </thead>
-            <tbody>
-                {% for entry in plenaries %}
-                    {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                {% endfor %}
-            </tbody>
-        </table>
-    {% endif %}
-    <!-- Working groups -->
-    {% for area, meeting_groups, not_meeting_groups in ietf_areas %}
-        <h2 class="mt-5" id="{{ area.acronym }}">
-            {{ area.acronym|upper }} <small class="text-body-secondary">{{ area.name }}</small>
-        </h2>
-        {% if meeting_groups %}
-            <table class="table table-sm table-striped tablesorter">
-                <thead>
-                    <tr>
-                        <th scope="col" data-sort="group">Group</th>
-                        <th scope="col" data-sort="artifacts">Artifacts</th>
-                        <th scope="col" data-sort="recordings">Recordings</th>
-                        <th scope="col" data-sort="slides">Slides</th>
-                        <th scope="col" data-sort="drafts">Internet-Drafts</th>
-                    </tr>
-                </thead>
-                <tbody>
-                    {% for entry in meeting_groups %}
-                        {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                    {% endfor %}
-                </tbody>
-            </table>
-        {% endif %}
-        {% if not_meeting_groups %}
-            <p>
-                {{ area.name }} groups not meeting:
-                {% for entry in not_meeting_groups %}
-                    {% if entry.name == "" %}{# do not show named sessions in this list #}
-                        <a href="{% url 'ietf.group.views.group_home' acronym=entry.group.acronym %}">
-                            {{ entry.group.acronym }}
-                        </a>{% if not forloop.last %},{% endif %}
-                    {% endif %}
-                {% endfor %}
-            </p>
-            <table class="table table-sm table-striped">
-                <thead>
-                    <tr>
-                        <th scope="col"></th>
-                        <th scope="col"></th>
-                        <th scope="col"></th>
-                        <th scope="col"></th>
-                        <th scope="col"></th>
-                    </tr>
-                </thead>
-                <tbody>
-                    {% for entry in not_meeting_groups %}{% if entry.has_materials %}
-                        {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                    {% endif %}{% endfor %}
-                </tbody>
-            </table>
-        {% endif %}
-    {% endfor %}
-    <!-- Training Sessions -->
-    {% if training %}
-        <h2 class="mt-5" id="training">Training</h2>
+{% include 'meeting/proceedings/introduction.html' with meeting=meeting only %}
+<!-- Plenaries -->
+{% if plenaries %}
+    <h2 class="mt-5" id="plenaries">Plenaries</h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+        <tr>
+            <th scope="col" data-sort="group">Group</th>
+            <th scope="col" data-sort="artifacts">Artifacts</th>
+            <th scope="col" data-sort="recordings">Recordings</th>
+            <th scope="col" data-sort="slides">Slides</th>
+            <th scope="col" data-sort="drafts">Internet-Drafts</th>
+        </tr>
+        </thead>
+        <tbody>
+        {% for entry in plenaries %}
+            {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+        {% endfor %}
+        </tbody>
+    </table>
+{% endif %}
+<!-- Working groups -->
+{% for area, meeting_groups, not_meeting_groups in ietf_areas %}
+    <h2 class="mt-5" id="{{ area.acronym }}">
+        {{ area.acronym|upper }} <small class="text-body-secondary">{{ area.name }}</small>
+    </h2>
+    {% if meeting_groups %}
         <table class="table table-sm table-striped tablesorter">
             <thead>
-                <tr>
-                    <th scope="col" data-sort="group">Group</th>
-                    <th scope="col" data-sort="artifacts">Artifacts</th>
-                    <th scope="col" data-sort="recordings">Recordings</th>
-                    <th scope="col" data-sort="slides">Slides</th>
-                    <th scope="col" data-sort="drafts">Internet-Drafts</th>
-                </tr>
+            <tr>
+                <th scope="col" data-sort="group">Group</th>
+                <th scope="col" data-sort="artifacts">Artifacts</th>
+                <th scope="col" data-sort="recordings">Recordings</th>
+                <th scope="col" data-sort="slides">Slides</th>
+                <th scope="col" data-sort="drafts">Internet-Drafts</th>
+            </tr>
             </thead>
             <tbody>
-                {% for entry in training %}
-                        {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=False only %}
-                {% endfor %}
+            {% for entry in meeting_groups %}
+                {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+            {% endfor %}
             </tbody>
         </table>
     {% endif %}
-    <!-- IAB Sessions -->
-    {% if iab %}
-        <h2 class="mt-5" id="iab">
-            IAB <small class="text-body-secondary">Internet Architecture Board</small>
-        </h2>
-        <table class="table table-sm table-striped tablesorter">
+    {% if not_meeting_groups %}
+        <p>
+            {{ area.name }} groups not meeting:
+            {% for entry in not_meeting_groups %}
+                {% if entry.name == "" %}{# do not show named sessions in this list #}
+                    <a href="{% url 'ietf.group.views.group_home' acronym=entry.group.acronym %}">
+                        {{ entry.group.acronym }}
+                    </a>{% if not forloop.last %},{% endif %}
+                {% endif %}
+            {% endfor %}
+        </p>
+        <table class="table table-sm table-striped">
             <thead>
-                <tr>
-                    <th scope="col" data-sort="group">
-                        Group
-                    </th>
-                    <th scope="col" data-sort="artifacts">
-                        Artifacts
-                    </th>
-                    <th scope="col" data-sort="recordings">
-                        Recordings
-                    </th>
-                    <th scope="col" data-sort="slides">
-                        Slides
-                    </th>
-                    <th scope="col" data-sort="drafts">
-                        Internet-Drafts
-                    </th>
-                </tr>
+            <tr>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+            </tr>
             </thead>
             <tbody>
-                {% for entry in iab %}
-                    {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                {% endfor %}
+            {% for entry in not_meeting_groups %}{% if entry.has_materials %}
+                {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+            {% endif %}{% endfor %}
             </tbody>
         </table>
     {% endif %}
-    <!-- IRTF Sessions -->
-    {% if irtf.meeting_groups  %}
-        <h2 class="mt-5" id="irtf">
-            IRTF <small class="text-body-secondary">Internet Research Task Force</small>
-        </h2>
-        <table class="table table-sm table-striped tablesorter">
-            <thead>
-                <tr>
-                    <th scope="col" data-sort="group">
-                        Group
-                    </th>
-                    <th scope="col" data-sort="artifacts">
-                        Artifacts
-                    </th>
-                    <th scope="col" data-sort="recordings">
-                        Recordings
-                    </th>
-                    <th scope="col" data-sort="slides">
-                        Slides
-                    </th>
-                    <th scope="col" data-sort="drafts">
-                        Internet-Drafts
-                    </th>
-                </tr>
-            </thead>
-            <tbody>
-                {% for entry in irtf.meeting_groups %}
-                    {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                {% endfor %}
-            </tbody>
-        </table>
-        {% if irtf.not_meeting_groups %}
+{% endfor %}
+<!-- Training Sessions -->
+{% if training %}
+    <h2 class="mt-5" id="training">Training</h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+        <tr>
+            <th scope="col" data-sort="group">Group</th>
+            <th scope="col" data-sort="artifacts">Artifacts</th>
+            <th scope="col" data-sort="recordings">Recordings</th>
+            <th scope="col" data-sort="slides">Slides</th>
+            <th scope="col" data-sort="drafts">Internet-Drafts</th>
+        </tr>
+        </thead>
+        <tbody>
+        {% for entry in training %}
+            {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=False only %}
+        {% endfor %}
+        </tbody>
+    </table>
+{% endif %}
+<!-- IAB Sessions -->
+{% if iab %}
+    <h2 class="mt-5" id="iab">
+        IAB <small class="text-body-secondary">Internet Architecture Board</small>
+    </h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+        <tr>
+            <th scope="col" data-sort="group">
+                Group
+            </th>
+            <th scope="col" data-sort="artifacts">
+                Artifacts
+            </th>
+            <th scope="col" data-sort="recordings">
+                Recordings
+            </th>
+            <th scope="col" data-sort="slides">
+                Slides
+            </th>
+            <th scope="col" data-sort="drafts">
+                Internet-Drafts
+            </th>
+        </tr>
+        </thead>
+        <tbody>
+        {% for entry in iab %}
+            {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+        {% endfor %}
+        </tbody>
+    </table>
+{% endif %}
+<!-- IRTF Sessions -->
+{% if irtf.meeting_groups %}
+    <h2 class="mt-5" id="irtf">
+        IRTF <small class="text-body-secondary">Internet Research Task Force</small>
+    </h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+        <tr>
+            <th scope="col" data-sort="group">
+                Group
+            </th>
+            <th scope="col" data-sort="artifacts">
+                Artifacts
+            </th>
+            <th scope="col" data-sort="recordings">
+                Recordings
+            </th>
+            <th scope="col" data-sort="slides">
+                Slides
+            </th>
+            <th scope="col" data-sort="drafts">
+                Internet-Drafts
+            </th>
+        </tr>
+        </thead>
+        <tbody>
+        {% for entry in irtf.meeting_groups %}
+            {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+        {% endfor %}
+        </tbody>
+    </table>
+    {% if irtf.not_meeting_groups %}
         <p>
             IRTF groups not meeting:
             {% for entry in irtf.not_meeting_groups %}
@@ -191,18 +167,18 @@ <h2 class="mt-5" id="irtf">
         </p>
         <table class="table table-sm table-striped">
             <thead>
-                <tr>
-                    <th scope="col"></th>
-                    <th scope="col"></th>
-                    <th scope="col"></th>
-                    <th scope="col"></th>
-                    <th scope="col"></th>
-                </tr>
+            <tr>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+                <th scope="col"></th>
+            </tr>
             </thead>
             <tbody>
-                {% for entry in irtf.not_meeting %}{% if entry.has_materials %}
-                    {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                {% endif %}{% endfor %}
+            {% for entry in irtf.not_meeting %}{% if entry.has_materials %}
+                {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+            {% endif %}{% endfor %}
             </tbody>
         </table>
     {% endif %}
@@ -211,35 +187,29 @@ <h2 class="mt-5" id="irtf">
         <h2 class="mt-5" id="editorial">Editorial Stream</h2>
         <table class="table table-sm table-striped tablesorter">
             <thead>
-                <tr>
-                    <th scope="col" data-sort="group">
-                        Group
-                    </th>
-                    <th scope="col" data-sort="artifacts">
-                        Artifacts
-                    </th>
-                    <th scope="col" data-sort="recordings">
-                        Recordings
-                    </th>
-                    <th scope="col" data-sort="slides">
-                        Slides
-                    </th>
-                    <th scope="col" data-sort="drafts">
-                        Internet-Drafts
-                    </th>
-                </tr>
+            <tr>
+                <th scope="col" data-sort="group">
+                    Group
+                </th>
+                <th scope="col" data-sort="artifacts">
+                    Artifacts
+                </th>
+                <th scope="col" data-sort="recordings">
+                    Recordings
+                </th>
+                <th scope="col" data-sort="slides">
+                    Slides
+                </th>
+                <th scope="col" data-sort="drafts">
+                    Internet-Drafts
+                </th>
+            </tr>
             </thead>
             <tbody>
-                {% for entry in editorial %}
-                    {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
-                {% endfor %}
+            {% for entry in editorial %}
+                {% include "meeting/group_proceedings.html" with entry=entry meeting=meeting show_agenda=True only %}
+            {% endfor %}
             </tbody>
         </table>
     {% endif %}
-    {% endif %}
-{% endcache %}
-{% endblock %}
-{% block js %}
-    <script src="{% static "ietf/js/list.js" %}">
-    </script>
-{% endblock %}
+{% endif %}
diff --git a/ietf/templates/meeting/proceedings_wrapper.html b/ietf/templates/meeting/proceedings_wrapper.html
new file mode 100644
index 0000000000..a20291a693
--- /dev/null
+++ b/ietf/templates/meeting/proceedings_wrapper.html
@@ -0,0 +1,27 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{% load origin %}
+{% load ietf_filters static %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
+{% endblock %}
+{% block title %}
+    IETF {{ meeting.number }}
+    {% if not meeting.proceedings_final %}Draft{% endif %}
+    Proceedings
+{% endblock %}
+{% block content %}
+    {% origin %}
+    {% include 'meeting/proceedings/title.html' with meeting=meeting attendance=attendance only %}
+    {% if user|has_role:"Secretariat" and not meeting.proceedings_final %}
+        <a class="btn btn-warning finalize-button"
+           href="{% url 'ietf.meeting.views.finalize_proceedings' num=meeting.number %}">
+            Finalize proceedings
+        </a>
+    {% endif %}
+    {{ proceedings_content }}
+{% endblock %}
+{% block js %}
+    <script src="{% static "ietf/js/list.js" %}">
+    </script>
+{% endblock %}

From ed19b54d8a39fca72a292181bdb2c12e9b63a5b6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 6 Feb 2025 14:35:07 -0400
Subject: [PATCH 243/707] fix: deal with "GMT" time zone in iCalendar files
 (#8506)

* fix: omit vtimezone when None

* fix: fix ics time format for tz=GMT
---
 ietf/doc/templatetags/ietf_filters.py |  5 ++++-
 ietf/templates/meeting/agenda.ics     | 10 +++++-----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index e1a80a26b2..86507eeaaa 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -533,11 +533,14 @@ def ics_date_time(dt, tzname):
     >>> ics_date_time(datetime.datetime(2022,1,2,3,4,5), 'UTC')
     ':20220102T030405Z'
 
+    >>> ics_date_time(datetime.datetime(2022,1,2,3,4,5), 'GmT')
+    ':20220102T030405Z'
+
     >>> ics_date_time(datetime.datetime(2022,1,2,3,4,5), 'America/Los_Angeles')
     ';TZID=America/Los_Angeles:20220102T030405'
     """
     timestamp = dt.strftime('%Y%m%dT%H%M%S')
-    if tzname.lower() == 'utc':
+    if tzname.lower() in ('gmt', 'utc'):
         return f':{timestamp}Z'
     else:
         return f';TZID={ics_esc(tzname)}:{timestamp}'
diff --git a/ietf/templates/meeting/agenda.ics b/ietf/templates/meeting/agenda.ics
index 72b7ab806c..8bc8222bbe 100644
--- a/ietf/templates/meeting/agenda.ics
+++ b/ietf/templates/meeting/agenda.ics
@@ -1,15 +1,15 @@
-{% load humanize tz %}{% autoescape off %}{% timezone schedule.meeting.tz %}{% load ietf_filters textfilters %}{% load cache %}{% cache 1800 ietf_meeting_agenda_ics schedule.meeting.number request.path request.GET %}BEGIN:VCALENDAR
+{% load humanize tz %}{% autoescape off %}{% timezone schedule.meeting.tz %}{% with tzname=schedule.meeting.time_zone|lower %}{% load ietf_filters textfilters %}{% load cache %}{% cache 1800 ietf_meeting_agenda_ics schedule.meeting.number request.path request.GET %}BEGIN:VCALENDAR
 VERSION:2.0
 METHOD:PUBLISH
 PRODID:-//IETF//datatracker.ietf.org ical agenda//EN
-{{schedule.meeting.vtimezone}}{% for item in assignments %}BEGIN:VEVENT
+{% if tzname != "utc" and tzname != "gmt" %}{% firstof schedule.meeting.vtimezone "" %}{% endif %}{% for item in assignments %}BEGIN:VEVENT
 UID:ietf-{{schedule.meeting.number}}-{{item.timeslot.pk}}-{{item.session.group.acronym}}
 SUMMARY:{% if item.session.name %}{{item.session.name|ics_esc}}{% else %}{{item.session.group_at_the_time.acronym|lower}} - {{item.session.group_at_the_time.name}}{%endif%}{% if item.session.agenda_note %} ({{item.session.agenda_note}}){% endif %}
 {% if item.timeslot.show_location %}LOCATION:{{item.timeslot.get_location}}
 {% endif %}STATUS:{{item.session.ical_status}}
 CLASS:PUBLIC
-DTSTART{% ics_date_time item.timeslot.local_start_time schedule.meeting.time_zone %}
-DTEND{% ics_date_time item.timeslot.local_end_time schedule.meeting.time_zone %}
+DTSTART{% ics_date_time item.timeslot.local_start_time tzname %}
+DTEND{% ics_date_time item.timeslot.local_end_time tzname %}
 DTSTAMP{% ics_date_time item.timeslot.modified|utc 'utc' %}{% if item.session.agenda %}
 URL:{{item.session.agenda.get_versionless_href}}{% endif %}
 DESCRIPTION:{{item.timeslot.name|ics_esc}}\n{% if item.session.agenda_note %}
@@ -29,4 +29,4 @@ DESCRIPTION:{{item.timeslot.name|ics_esc}}\n{% if item.session.agenda_note %}
  \n{# link agenda for ietf meetings #}
  See in schedule: {% absurl 'agenda' num=schedule.meeting.number %}#row-{{ item.slug }}\n{% endif %}
 END:VEVENT
-{% endfor %}END:VCALENDAR{% endcache %}{% endtimezone %}{% endautoescape %}
+{% endfor %}END:VCALENDAR{% endcache %}{% endwith %}{% endtimezone %}{% endautoescape %}

From d1ec7378da3ecb66d3e492219db75fda69681df4 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 14 Feb 2025 18:14:03 -0500
Subject: [PATCH 244/707] fix: use groupAcronym to determine hackathon icon in
 agenda (#8540)

* fix: use groupAcronym to determine hackathon icon in agenda

* test: fix agenda tests related to hackathon
---
 client/agenda/AgendaScheduleList.vue    | 4 ++--
 playwright/helpers/meeting.js           | 2 +-
 playwright/tests/meeting/agenda.spec.js | 6 +++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index e7c14797ee..905677b4da 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -307,7 +307,7 @@ const meetingEvents = computed(() => {
         })
       }
       // -> Point to Wiki for Hackathon sessions, HedgeDocs otherwise
-      if (item.name.toLowerCase().includes('hackathon')) {
+      if (item.groupAcronym === 'hackathon') {
         links.push({
           id: `lnk-${item.id}-wiki`,
           label: 'Wiki',
@@ -461,7 +461,7 @@ const meetingEvents = computed(() => {
       case 'other':
         if (item.name.toLowerCase().indexOf('office hours') >= 0) {
           icon = 'bi-building'
-        } else if (item.name.toLowerCase().indexOf('hackathon') >= 0) {
+        } else if (item.groupAcronym === 'hackathon') {
           icon = 'bi-command bi-pink'
         }
         break
diff --git a/playwright/helpers/meeting.js b/playwright/helpers/meeting.js
index 52bc331fd6..9722ffc68b 100644
--- a/playwright/helpers/meeting.js
+++ b/playwright/helpers/meeting.js
@@ -395,7 +395,7 @@ module.exports = {
         name: 'Hackathon Kickoff',
         startDateTime: day1.set({ hour: 10, minute: 30 }),
         duration: '30m',
-        ...findAreaGroup('hackathon-kickoff', categories[2]),
+        ...findAreaGroup('hackathon', categories[2]),
         showAgenda: true,
         hasAgenda: true,
         hasRecordings: true,
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index d31dbd5c2c..e6c6e17031 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -238,7 +238,7 @@ test.describe('past - desktop', () => {
       // Name column
       // -----------
       // Event icon
-      if (['break', 'plenary'].includes(event.type) || (event.type === 'other' && ['office hours', 'hackathon'].some(s => event.name.toLowerCase().indexOf(s) >= 0))) {
+      if (['break', 'plenary'].includes(event.type) || (event.type === 'other' && event.name.toLowerCase().indexOf('office hours') >= 0)) {
         await expect(row.locator('.agenda-table-cell-name > i.bi')).toBeVisible()
       }
       // Name link
@@ -286,7 +286,7 @@ test.describe('past - desktop', () => {
               // No meeting materials yet warning badge
               await expect(eventButtons.locator('.no-meeting-materials')).toBeVisible()
             }
-            if (event.name.toLowerCase().includes('hackathon')) {
+            if (event.groupAcronym === 'hackathon') {
               // Hackathon Wiki button
               const hackathonWikiLink = `https://wiki.ietf.org/meeting/${meetingData.meeting.number}/hackathon`
               await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki`)).toHaveAttribute('href', hackathonWikiLink)
@@ -1169,7 +1169,7 @@ test.describe('future - desktop', () => {
             // No meeting materials yet warning badge
             await expect(eventButtons.locator('.no-meeting-materials')).toBeVisible()
           }
-          if (event.name.toLowerCase().includes('hackathon')) {
+          if (event.groupAcronym === 'hackathon') {
             // Hackathon Wiki button
             const hackathonWikiLink = `https://wiki.ietf.org/meeting/${meetingData.meeting.number}/hackathon`
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-wiki`)).toHaveAttribute('href', hackathonWikiLink)

From 853de88546b25d1a59477e31580014351c9f0913 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Sat, 15 Feb 2025 12:30:24 +1300
Subject: [PATCH 245/707] feat: CSS other-session-selected. Fixes #8525 (#8529)

---
 ietf/static/css/ietf.scss | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index f1f2b94a19..aee93dcfe1 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -695,8 +695,8 @@ td.position-empty {
 }
 
 .edit-meeting-schedule .session.other-session-selected {
-    outline: var(--bs-info) solid 0.2em;
-    /* width matches margin on .session */
+    outline: 0.3em solid var(--bs-info);
+    box-shadow: 0 0 1em var(--bs-info);
     z-index: 2;
     /* render above timeslot outlines */
 }

From 04952d58fa05f8b47884f621d9c1c510df0eb9a6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 18 Feb 2025 12:33:33 -0400
Subject: [PATCH 246/707] fix: remove all staging files for submission (#8535)

---
 ietf/submit/utils.py | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 49f28c4196..fe52f1c774 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -671,20 +671,16 @@ def move_files_to_repository(submission):
             raise ValueError("Intended to move '%s' to '%s', but found source and destination missing.")
 
 
-def remove_staging_files(name, rev, exts=None):
-    """Remove staging files corresponding to a submission
-    
-    exts is a list of extensions to be removed. If None, defaults to settings.IDSUBMIT_FILE_TYPES.
-    """
-    if exts is None:
-        exts = [f'.{ext}' for ext in settings.IDSUBMIT_FILE_TYPES]
+def remove_staging_files(name, rev):
+    """Remove staging files corresponding to a submission"""
     basename = pathlib.Path(settings.IDSUBMIT_STAGING_PATH) / f'{name}-{rev}' 
+    exts = [f'.{ext}' for ext in settings.IDSUBMIT_FILE_TYPES]
     for ext in exts:
         basename.with_suffix(ext).unlink(missing_ok=True)
 
 
 def remove_submission_files(submission):
-    remove_staging_files(submission.name, submission.rev, submission.file_types.split(','))
+    remove_staging_files(submission.name, submission.rev)
 
 
 def approvable_submissions_for_user(user):

From e71272fd2f2047d092fca76ad56b1ebe7899a27c Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 19 Feb 2025 15:09:17 -0600
Subject: [PATCH 247/707] chore: mark a function unreachable (#8553)

---
 ietf/submit/utils.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index fe52f1c774..f19f2384c8 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -646,6 +646,7 @@ def cancel_submission(submission):
 
 
 def rename_submission_files(submission, prev_rev, new_rev):
+    log.unreachable("2025-2-19")
     for ext in settings.IDSUBMIT_FILE_TYPES:
         staging_path = Path(settings.IDSUBMIT_STAGING_PATH) 
         source = staging_path / f"{submission.name}-{prev_rev}.{ext}"

From 997239a2eaf70d39a95c1bb465f4106c2ab1d544 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 19 Feb 2025 17:41:10 -0600
Subject: [PATCH 248/707] feat: write objects to blob storage (#8557)

* feat: basic blobstore infrastructure for dev

* refactor: (broken) attempt to put minio console behind nginx

* feat: initialize blobstore with boto3

* fix: abandon attempt to proxy minio. Use docker compose instead.

* feat: beginning of blob writes

* feat: storage utilities

* feat: test buckets

* chore: black

* chore: remove unused import

* chore: avoid f string when not needed

* fix: inform all settings files about blobstores

* fix: declare types for some settings

* ci: point to new target base

* ci: adjust test workflow

* fix: give the tests debug environment a blobstore

* fix: "better" name declarations

* ci: use devblobstore container

* chore: identify places to write to blobstorage

* chore: remove unreachable code

* feat: store materials

* feat: store statements

* feat: store status changes

* feat: store liaison attachments

* feat: store agendas provided with Interim session requests

* chore: capture TODOs

* feat: store polls and chatlogs

* chore: remove unneeded TODO

* feat: store drafts on submit and post

* fix: handle storage during doc expiration and resurrection

* fix: mirror an unlink

* chore: add/refine TODOs

* feat: store slide submissions

* fix: structure slide test correctly

* fix: correct sense of existence check

* feat: store some indexes

* feat: BlobShadowFileSystemStorage

* feat: shadow floorplans / host logos to the blob

* chore: remove unused import

* feat: strip path from blob shadow names

* feat: shadow photos / thumbs

* refactor: combine photo and photothumb blob kinds

The photos / thumbs were already dropped in the same
directory, so let's not add a distinction at this point.

* style: whitespace

* refactor: use kwargs consistently

* chore: migrations

* refactor: better deconstruct(); rebuild migrations

* fix: use new class in mack patch

* chore: add TODO

* feat: store group index documents

* chore: identify more TODO

* feat: store reviews

* fix: repair merge

* chore: remove unnecessary TODO

* feat: StoredObject metadata

* fix: deburr some debugging code

* fix: only set the deleted timestamp once

* chore: correct typo

* fix: get_or_create vs get and test

* fix: avoid the questionable is_seekable helper

* chore: capture future design consideration

* chore: blob store cfg for k8s

* chore: black

* chore: copyright

* ci: bucket name prefix option + run Black

Adds/uses DATATRACKER_BLOB_STORE_BUCKET_PREFIX option. Other changes
are just Black styling.

* ci: fix typo in bucket name expression

* chore: parameters in app-configure-blobstore

Allows use with other blob stores.

* ci: remove verify=False option

* fix: don't return value from __init__

* feat: option to log timing of S3Storage calls

* chore: units

* fix: deleted->null when storing a file

* style: Black

* feat: log as JSON; refactor to share code; handle exceptions

* ci: add ietf_log_blob_timing option for k8s

* test: --no-manage-blobstore option for running tests

* test: use blob store settings from env, if set

* test: actually set a couple more storage opts

* feat: offswitch (#8541)

* feat: offswitch

* fix: apply ENABLE_BLOBSTORAGE to BlobShadowFileSystemStorage behavior

* chore: log timing of blob reads

* chore: import Config from botocore.config

* chore(deps): import boto3-stubs / botocore

botocore is implicitly imported, but make it explicit
since we refer to it directly

* chore: drop type annotation that mypy loudly ignores

* refactor: add storage methods via mixin

Shares code between Document and DocHistory without
putting it in the base DocumentInfo class, which
lacks the name field. Also makes mypy happy.

* feat: add timeout / retry limit to boto client

* ci: let k8s config the timeouts via env

* chore: repair merge resolution typo

* chore: tweak settings imports

* chore: simplify k8s/settings_local.py imports

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 .devcontainer/docker-compose.extend.yml       |   4 +
 .github/workflows/tests.yml                   |   2 +
 README.md                                     |  17 ++
 dev/deploy-to-container/settings_local.py     |  23 ++-
 dev/diff/settings_local.py                    |  23 ++-
 dev/tests/docker-compose.debug.yml            |   3 +
 dev/tests/settings_local.py                   |  23 ++-
 docker-compose.yml                            |  10 +
 docker/app.Dockerfile                         |   4 +-
 docker/configs/settings_local.py              |  27 ++-
 docker/docker-compose.extend.yml              |   4 +
 docker/scripts/app-configure-blobstore.py     |  28 +++
 docker/scripts/app-init.sh                    |   5 +
 ietf/api/tests.py                             |   5 +
 ietf/doc/admin.py                             |   8 +-
 ietf/doc/expire.py                            |  14 ++
 ...ject_storedobject_unique_name_per_store.py |  66 ++++++
 ietf/doc/models.py                            |  85 +++++++-
 ietf/doc/resources.py                         |  25 ++-
 ietf/doc/storage_backends.py                  | 192 ++++++++++++++++++
 ietf/doc/storage_utils.py                     | 103 ++++++++++
 ietf/doc/tasks.py                             |   4 +-
 ietf/doc/tests_bofreq.py                      |   3 +
 ietf/doc/tests_charter.py                     |   6 +
 ietf/doc/tests_conflict_review.py             |   2 +
 ietf/doc/tests_draft.py                       |  13 ++
 ietf/doc/tests_material.py                    |   6 +
 ietf/doc/tests_review.py                      |   5 +
 ietf/doc/tests_statement.py                   |  17 ++
 ietf/doc/tests_status_change.py               |  18 +-
 ietf/doc/utils.py                             |   2 +-
 ietf/doc/views_bofreq.py                      |   2 +
 ietf/doc/views_charter.py                     |   8 +-
 ietf/doc/views_conflict_review.py             |   6 +-
 ietf/doc/views_draft.py                       |   6 +
 ietf/doc/views_material.py                    |   2 +
 ietf/doc/views_review.py                      |   1 +
 ietf/doc/views_statement.py                   |  13 +-
 ietf/doc/views_status_change.py               |   6 +-
 ietf/group/tasks.py                           |  11 +
 ietf/group/tests_info.py                      |  35 ++--
 ietf/idindex/tasks.py                         |   4 +
 ietf/idindex/tests.py                         |   5 +
 ietf/liaisons/forms.py                        |   2 +
 ietf/liaisons/tests.py                        |  38 +++-
 ietf/meeting/factories.py                     |   5 +
 ietf/meeting/forms.py                         |   1 +
 ietf/meeting/helpers.py                       |   5 +
 ..._floorplan_image_alter_meetinghost_logo.py |  56 +++++
 ietf/meeting/models.py                        |  15 +-
 ietf/meeting/tests_views.py                   | 126 ++++++++++--
 ietf/meeting/utils.py                         |  17 +-
 ietf/meeting/views.py                         |  17 +-
 ietf/nomcom/models.py                         |   1 +
 ...r_person_photo_alter_person_photo_thumb.py |  38 ++++
 ietf/person/models.py                         |  16 +-
 ietf/settings.py                              |  38 ++++
 ietf/settings_test.py                         |  30 ++-
 ietf/submit/tests.py                          |  94 ++++++++-
 ietf/submit/utils.py                          |  20 +-
 ietf/utils/storage.py                         |  56 ++++-
 ietf/utils/test_runner.py                     |  70 ++++++-
 k8s/settings_local.py                         | 103 ++++++++--
 requirements.txt                              |   6 +-
 64 files changed, 1484 insertions(+), 116 deletions(-)
 create mode 100755 docker/scripts/app-configure-blobstore.py
 create mode 100644 ietf/doc/migrations/0025_storedobject_storedobject_unique_name_per_store.py
 create mode 100644 ietf/doc/storage_backends.py
 create mode 100644 ietf/doc/storage_utils.py
 create mode 100644 ietf/meeting/migrations/0010_alter_floorplan_image_alter_meetinghost_logo.py
 create mode 100644 ietf/person/migrations/0004_alter_person_photo_alter_person_photo_thumb.py

diff --git a/.devcontainer/docker-compose.extend.yml b/.devcontainer/docker-compose.extend.yml
index fa9a412cf2..286eefb29c 100644
--- a/.devcontainer/docker-compose.extend.yml
+++ b/.devcontainer/docker-compose.extend.yml
@@ -14,6 +14,10 @@ services:
             # - datatracker-vscode-ext:/root/.vscode-server/extensions
         # Runs app on the same network as the database container, allows "forwardPorts" in devcontainer.json function.
         network_mode: service:db
+    blobstore:
+        ports:
+            - '9000'
+            - '9001'
 
 volumes:
     datatracker-vscode-ext:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 5457415f59..f10c1db9a3 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -28,6 +28,8 @@ jobs:
     services:
       db:
         image: ghcr.io/ietf-tools/datatracker-db:latest
+      blobstore:
+        image: ghcr.io/ietf-tools/datatracker-devblobstore:latest
     
     steps:
     - uses: actions/checkout@v4
diff --git a/README.md b/README.md
index ee9865ba21..0ece0eb03b 100644
--- a/README.md
+++ b/README.md
@@ -106,6 +106,23 @@ Nightly database dumps of the datatracker are available as Docker images: `ghcr.
 
 > Note that to update the database in your dev environment to the latest version, you should run the `docker/cleandb` script.
 
+### Blob storage for dev/test
+
+The dev and test environments use [minio](https://github.com/minio/minio) to provide local blob storage. See the settings files for how the app container communicates with the blobstore container. If you need to work with minio directly from outside the containers (to interact with its api or console), use `docker compose` from the top level directory of your clone to expose it at an ephemeral port.
+
+```
+$ docker compose port blobstore 9001
+0.0.0.0:<some ephemeral port>
+
+$ curl -I http://localhost:<some ephemeral port>
+HTTP/1.1 200 OK
+...
+```
+
+
+The minio container exposes the minio api at port 9000 and the minio console at port 9001
+
+
 ### Frontend Development
 
 #### Intro
diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index 0a991ae9fe..e878206bd5 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -1,7 +1,9 @@
 # Copyright The IETF Trust 2007-2019, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-from ietf.settings import *                                          # pyflakes:ignore
+from ietf.settings import *   # pyflakes:ignore
+from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -79,3 +81,22 @@
 
 # OIDC configuration
 SITE_URL = 'https://__HOSTNAME__'
+
+for storagename in MORE_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url="http://blobstore:9000",
+            access_key="minio_root",
+            secret_key="minio_pass",
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            verify=False,
+            bucket_name=f"test-{storagename}",
+        ),
+    }
diff --git a/dev/diff/settings_local.py b/dev/diff/settings_local.py
index 95d1e481c9..9e0806a8a6 100644
--- a/dev/diff/settings_local.py
+++ b/dev/diff/settings_local.py
@@ -1,7 +1,9 @@
 # Copyright The IETF Trust 2007-2019, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-from ietf.settings import *                                          # pyflakes:ignore
+from ietf.settings import *  # pyflakes:ignore
+from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -66,3 +68,22 @@
 SLIDE_STAGING_PATH = 'test/staging/'
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
+
+for storagename in MORE_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url="http://blobstore:9000",
+            access_key="minio_root",
+            secret_key="minio_pass",
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            verify=False,
+            bucket_name=f"test-{storagename}",
+        ),
+    }
diff --git a/dev/tests/docker-compose.debug.yml b/dev/tests/docker-compose.debug.yml
index 8d939e0ea2..8117b92375 100644
--- a/dev/tests/docker-compose.debug.yml
+++ b/dev/tests/docker-compose.debug.yml
@@ -28,5 +28,8 @@ services:
         volumes:
             - postgresdb-data:/var/lib/postgresql/data
 
+    blobstore:
+      image: ghcr.io/ietf-tools/datatracker-devblobstore:latest
+
 volumes:
     postgresdb-data:
diff --git a/dev/tests/settings_local.py b/dev/tests/settings_local.py
index 7b10bee06a..f2166053a7 100644
--- a/dev/tests/settings_local.py
+++ b/dev/tests/settings_local.py
@@ -1,7 +1,9 @@
 # Copyright The IETF Trust 2007-2019, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-from ietf.settings import *                                          # pyflakes:ignore
+from ietf.settings import *  # pyflakes:ignore
+from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -65,3 +67,22 @@
 SLIDE_STAGING_PATH = 'test/staging/'
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
+
+for storagename in MORE_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url="http://blobstore:9000",
+            access_key="minio_root",
+            secret_key="minio_pass",
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            verify=False,
+            bucket_name=f"test-{storagename}",
+        ),
+    }
diff --git a/docker-compose.yml b/docker-compose.yml
index 9988b10c2e..30ce8ba4d2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -15,6 +15,7 @@ services:
         depends_on:
             - db
             - mq
+            - blobstore
 
         ipc: host
 
@@ -83,6 +84,14 @@ services:
             - .:/workspace
             - app-assets:/assets
 
+    blobstore:
+        image: ghcr.io/ietf-tools/datatracker-devblobstore:latest
+        restart: unless-stopped
+        volumes:
+            - "minio-data:/data"
+
+
+
 #  Celery Beat is a periodic task runner. It is not normally needed for development,
 #  but can be enabled by uncommenting the following.
 #
@@ -106,3 +115,4 @@ services:
 volumes:
     postgresdb-data:
     app-assets:
+    minio-data:
diff --git a/docker/app.Dockerfile b/docker/app.Dockerfile
index b7dd44b6f1..fee3833733 100644
--- a/docker/app.Dockerfile
+++ b/docker/app.Dockerfile
@@ -43,8 +43,8 @@ RUN rm -rf /tmp/library-scripts
 # Copy the startup file
 COPY docker/scripts/app-init.sh /docker-init.sh
 COPY docker/scripts/app-start.sh /docker-start.sh
-RUN sed -i 's/\r$//' /docker-init.sh && chmod +x /docker-init.sh
-RUN sed -i 's/\r$//' /docker-start.sh && chmod +x /docker-start.sh
+RUN sed -i 's/\r$//' /docker-init.sh && chmod +rx /docker-init.sh
+RUN sed -i 's/\r$//' /docker-start.sh && chmod +rx /docker-start.sh
 
 # Fix user UID / GID to match host
 RUN groupmod --gid $USER_GID $USERNAME \
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index 5df5d15e82..46833451c1 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -1,11 +1,13 @@
-# Copyright The IETF Trust 2007-2019, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-from ietf.settings import *                                          # pyflakes:ignore
+from ietf.settings import *  # pyflakes:ignore
+from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
-from ietf.settings_postgresqldb import DATABASES   # pyflakes:ignore
+from ietf.settings_postgresqldb import DATABASES  # pyflakes:ignore
 
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
 IDSUBMIT_STAGING_PATH = "/assets/www6s/staging/"
@@ -37,6 +39,25 @@
 # DEV_TEMPLATE_CONTEXT_PROCESSORS = [
 #    'ietf.context_processors.sql_debug',
 # ]
+for storagename in MORE_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url="http://blobstore:9000",
+            access_key="minio_root",
+            secret_key="minio_pass",
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            verify=False,
+            bucket_name=storagename,
+        ),
+    }
+
 
 DOCUMENT_PATH_PATTERN = '/assets/ietfdata/doc/{doc.type_id}/'
 INTERNET_DRAFT_PATH = '/assets/ietf-ftp/internet-drafts/'
diff --git a/docker/docker-compose.extend.yml b/docker/docker-compose.extend.yml
index 0538c0d3e9..a69a453110 100644
--- a/docker/docker-compose.extend.yml
+++ b/docker/docker-compose.extend.yml
@@ -16,6 +16,10 @@ services:
     pgadmin:
         ports:
             - '5433'
+    blobstore:
+        ports:
+            - '9000'
+            - '9001'
     celery:
         volumes:
             - .:/workspace
diff --git a/docker/scripts/app-configure-blobstore.py b/docker/scripts/app-configure-blobstore.py
new file mode 100755
index 0000000000..7b5ce962eb
--- /dev/null
+++ b/docker/scripts/app-configure-blobstore.py
@@ -0,0 +1,28 @@
+#!/usr/bin/env python
+# Copyright The IETF Trust 2024, All Rights Reserved
+
+import boto3
+import os
+import sys
+
+from ietf.settings import MORE_STORAGE_NAMES
+
+
+def init_blobstore():
+    blobstore = boto3.resource(
+        "s3",
+        endpoint_url=os.environ.get("BLOB_STORE_ENDPOINT_URL", "http://blobstore:9000"),
+        aws_access_key_id=os.environ.get("BLOB_STORE_ACCESS_KEY", "minio_root"),
+        aws_secret_access_key=os.environ.get("BLOB_STORE_SECRET_KEY", "minio_pass"),
+        aws_session_token=None,
+        config=botocore.config.Config(signature_version="s3v4"),
+        verify=False,
+    )
+    for bucketname in MORE_STORAGE_NAMES:
+        blobstore.create_bucket(
+            Bucket=f"{os.environ.get('BLOB_STORE_BUCKET_PREFIX', '')}{bucketname}".strip()
+        )
+
+
+if __name__ == "__main__":
+    sys.exit(init_blobstore())
diff --git a/docker/scripts/app-init.sh b/docker/scripts/app-init.sh
index b96b88f1f5..e970398ac2 100755
--- a/docker/scripts/app-init.sh
+++ b/docker/scripts/app-init.sh
@@ -73,6 +73,11 @@ echo "Creating data directories..."
 chmod +x ./docker/scripts/app-create-dirs.sh
 ./docker/scripts/app-create-dirs.sh
 
+# Configure the development blobstore
+
+echo "Configuring blobstore..."
+PYTHONPATH=/workspace python ./docker/scripts/app-configure-blobstore.py
+
 # Download latest coverage results file
 
 echo "Downloading latest coverage results file..."
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index d9af457e95..ac0b37a608 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -25,6 +25,7 @@
 import debug                            # pyflakes:ignore
 
 import ietf
+from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils import get_unicode_document_content
 from ietf.doc.models import RelatedDocument, State
 from ietf.doc.factories import IndividualDraftFactory, WgDraftFactory, WgRfcFactory
@@ -553,6 +554,10 @@ def test_api_upload_polls_and_chatlog(self):
             newdoc = session.presentations.get(document__type_id=type_id).document
             newdoccontent = get_unicode_document_content(newdoc.name, Path(session.meeting.get_materials_path()) / type_id / newdoc.uploaded_filename)
             self.assertEqual(json.loads(content), json.loads(newdoccontent))
+            self.assertEqual(
+                json.loads(retrieve_str(type_id, newdoc.uploaded_filename)),
+                json.loads(content)
+            )
 
     def test_api_upload_bluesheet(self):
         url = urlreverse("ietf.meeting.views.api_upload_bluesheet")
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 301d32d7cc..db3b24b2d2 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -12,7 +12,7 @@
     TelechatDocEvent, BallotPositionDocEvent, ReviewRequestDocEvent, InitialReviewDocEvent,
     AddedMessageEvent, SubmissionDocEvent, DeletedEvent, EditedAuthorsDocEvent, DocumentURL,
     ReviewAssignmentDocEvent, IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
-    BofreqEditorDocEvent, BofreqResponsibleDocEvent )
+    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject )
 
 from ietf.utils.validators import validate_external_resource_value
 
@@ -218,3 +218,9 @@ class DocExtResourceAdmin(admin.ModelAdmin):
     search_fields = ['doc__name', 'value', 'display_name', 'name__slug',]
     raw_id_fields = ['doc', ]
 admin.site.register(DocExtResource, DocExtResourceAdmin)
+
+class StoredObjectAdmin(admin.ModelAdmin):
+    list_display = ['store', 'name', 'modified', 'deleted']
+    list_filter = ['deleted']
+    search_fields = ['store', 'name', 'doc_name', 'doc_rev', 'deleted']
+admin.site.register(StoredObject, StoredObjectAdmin)
diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index 98554bae0e..bf8523aa98 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -13,6 +13,7 @@
 
 from typing import List, Optional      # pyflakes:ignore
 
+from ietf.doc.storage_utils import exists_in_storage, remove_from_storage
 from ietf.doc.utils import update_action_holders
 from ietf.utils import log
 from ietf.utils.mail import send_mail
@@ -156,11 +157,17 @@ def remove_ftp_copy(f):
         if mark.exists():
             mark.unlink()
 
+    def remove_from_active_draft_storage(file):
+        # Assumes the glob will never find a file with no suffix
+        ext = file.suffix[1:]
+        remove_from_storage("active-draft", f"{ext}/{file.name}", warn_if_missing=False)
 
+    # Note that the object is already in the "draft" storage.
     src_dir = Path(settings.INTERNET_DRAFT_PATH)
     for file in src_dir.glob("%s-%s.*" % (doc.name, rev)):
         move_file(str(file.name))
         remove_ftp_copy(str(file.name))
+        remove_from_active_draft_storage(file)
 
 def expire_draft(doc):
     # clean up files
@@ -218,6 +225,13 @@ def move_file_to(subdir):
             mark = Path(settings.FTP_DIR) / "internet-drafts" / basename
             if mark.exists():
                 mark.unlink()
+            if ext:
+                # Note that we're not moving these strays anywhere - the assumption
+                # is that the active-draft blobstore will not get strays.
+                # See, however, the note about "major system failures" at "unknown_ids"
+                blobname = f"{ext[1:]}/{basename}"
+                if exists_in_storage("active-draft", blobname):
+                    remove_from_storage("active-draft", blobname)
 
         try:
             doc = Document.objects.get(name=filename, rev=revision)
diff --git a/ietf/doc/migrations/0025_storedobject_storedobject_unique_name_per_store.py b/ietf/doc/migrations/0025_storedobject_storedobject_unique_name_per_store.py
new file mode 100644
index 0000000000..e948ca3011
--- /dev/null
+++ b/ietf/doc/migrations/0025_storedobject_storedobject_unique_name_per_store.py
@@ -0,0 +1,66 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0024_remove_ad_is_watching_states"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="StoredObject",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("store", models.CharField(max_length=256)),
+                ("name", models.CharField(max_length=1024)),
+                ("sha384", models.CharField(max_length=96)),
+                ("len", models.PositiveBigIntegerField()),
+                (
+                    "store_created",
+                    models.DateTimeField(
+                        help_text="The instant the object ws first placed in the store"
+                    ),
+                ),
+                (
+                    "created",
+                    models.DateTimeField(
+                        help_text="Instant object became known. May not be the same as the storage's created value for the instance. It will hold ctime for objects imported from older disk storage"
+                    ),
+                ),
+                (
+                    "modified",
+                    models.DateTimeField(
+                        help_text="Last instant object was modified. May not be the same as the storage's modified value for the instance. It will hold mtime for objects imported from older disk storage unless they've actually been overwritten more recently"
+                    ),
+                ),
+                ("doc_name", models.CharField(blank=True, max_length=255, null=True)),
+                ("doc_rev", models.CharField(blank=True, max_length=16, null=True)),
+                ("deleted", models.DateTimeField(null=True)),
+            ],
+            options={
+                "indexes": [
+                    models.Index(
+                        fields=["doc_name", "doc_rev"],
+                        name="doc_storedo_doc_nam_d04465_idx",
+                    )
+                ],
+            },
+        ),
+        migrations.AddConstraint(
+            model_name="storedobject",
+            constraint=models.UniqueConstraint(
+                fields=("store", "name"), name="unique_name_per_store"
+            ),
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 03698c80c3..55da70972c 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -9,14 +9,16 @@
 import django.db
 import rfc2html
 
+from io import BufferedReader
 from pathlib import Path
 from lxml import etree
-from typing import Optional, TYPE_CHECKING
+from typing import Optional, Protocol, TYPE_CHECKING, Union
 from weasyprint import HTML as wpHTML
 from weasyprint.text.fonts import FontConfiguration
 
 from django.db import models
 from django.core import checks
+from django.core.files.base import File
 from django.core.cache import caches
 from django.core.validators import URLValidator, RegexValidator
 from django.urls import reverse as urlreverse
@@ -30,6 +32,11 @@
 import debug                            # pyflakes:ignore
 
 from ietf.group.models import Group
+from ietf.doc.storage_utils import (
+    store_str as utils_store_str,
+    store_bytes as utils_store_bytes,
+    store_file as utils_store_file
+)
 from ietf.name.models import ( DocTypeName, DocTagName, StreamName, IntendedStdLevelName, StdLevelName,
     DocRelationshipName, DocReminderTypeName, BallotPositionName, ReviewRequestStateName, ReviewAssignmentStateName, FormalLanguageName,
     DocUrlTagName, ExtResourceName)
@@ -714,10 +721,52 @@ def referenced_by_rfcs_as_rfc_or_draft(self):
         if self.type_id == "rfc" and self.came_from_draft():
             refs_to |= self.came_from_draft().referenced_by_rfcs()
         return refs_to
-
+    
     class Meta:
         abstract = True
 
+
+class HasNameRevAndTypeIdProtocol(Protocol):
+    """Typing Protocol describing a class that has name, rev, and type_id properties"""
+    @property
+    def name(self) -> str: ...
+    @property
+    def rev(self) -> str: ...
+    @property
+    def type_id(self) -> str: ...
+
+
+class StorableMixin:
+    """Mixin that adds storage helpers to a DocumentInfo subclass"""
+    def store_str(
+        self: HasNameRevAndTypeIdProtocol,
+        name: str,
+        content: str,
+        allow_overwrite: bool = False
+    ) -> None:
+        return utils_store_str(self.type_id, name, content, allow_overwrite, self.name, self.rev)
+
+    def store_bytes(
+        self: HasNameRevAndTypeIdProtocol,
+        name: str,
+        content: bytes,
+        allow_overwrite: bool = False,
+        doc_name: Optional[str] = None,
+        doc_rev: Optional[str] = None
+    ) -> None:
+        return utils_store_bytes(self.type_id, name, content, allow_overwrite, self.name, self.rev)
+
+    def store_file(
+        self: HasNameRevAndTypeIdProtocol,
+        name: str,
+        file: Union[File, BufferedReader],
+        allow_overwrite: bool = False,
+        doc_name: Optional[str] = None,
+        doc_rev: Optional[str] = None
+    ) -> None:
+        return utils_store_file(self.type_id, name, file, allow_overwrite, self.name, self.rev)
+
+
 STATUSCHANGE_RELATIONS = ('tops','tois','tohist','toinf','tobcp','toexp')
 
 class RelatedDocument(models.Model):
@@ -870,7 +919,7 @@ def role_for_doc(self):
     'invalid'
 )
 
-class Document(DocumentInfo):
+class Document(StorableMixin, DocumentInfo):
     name = models.CharField(max_length=255, validators=[validate_docname,], unique=True)           # immutable
     
     action_holders = models.ManyToManyField(Person, through=DocumentActionHolder, blank=True)
@@ -1192,7 +1241,7 @@ class DocHistoryAuthor(DocumentAuthorInfo):
     def __str__(self):
         return u"%s %s (%s)" % (self.document.doc.name, self.person, self.order)
 
-class DocHistory(DocumentInfo):
+class DocHistory(StorableMixin, DocumentInfo):
     doc = ForeignKey(Document, related_name="history_set")
 
     name = models.CharField(max_length=255)
@@ -1538,3 +1587,31 @@ class BofreqEditorDocEvent(DocEvent):
 class BofreqResponsibleDocEvent(DocEvent):
     """ Capture the responsible leadership (IAB and IESG members) for a BOF Request """
     responsible = models.ManyToManyField('person.Person', blank=True)
+
+class StoredObject(models.Model):
+    """Hold metadata about objects placed in object storage"""
+
+    store = models.CharField(max_length=256)
+    name = models.CharField(max_length=1024, null=False, blank=False) # N.B. the 1024 limit on name comes from S3
+    sha384 = models.CharField(max_length=96)
+    len = models.PositiveBigIntegerField()
+    store_created = models.DateTimeField(help_text="The instant the object ws first placed in the store")
+    created = models.DateTimeField(
+        null=False,
+        help_text="Instant object became known. May not be the same as the storage's created value for the instance. It will hold ctime for objects imported from older disk storage"
+    )
+    modified = models.DateTimeField(
+        null=False,
+        help_text="Last instant object was modified. May not be the same as the storage's modified value for the instance. It will hold mtime for objects imported from older disk storage unless they've actually been overwritten more recently"
+    )
+    doc_name = models.CharField(max_length=255, null=True, blank=True)
+    doc_rev = models.CharField(max_length=16, null=True, blank=True)
+    deleted = models.DateTimeField(null=True)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(fields=['store', 'name'], name='unique_name_per_store'),
+        ]
+        indexes = [
+            models.Index(fields=["doc_name", "doc_rev"]),
+        ]
diff --git a/ietf/doc/resources.py b/ietf/doc/resources.py
index bba57013b9..157a3ad556 100644
--- a/ietf/doc/resources.py
+++ b/ietf/doc/resources.py
@@ -18,7 +18,7 @@
     RelatedDocHistory, BallotPositionDocEvent, AddedMessageEvent, SubmissionDocEvent,
     ReviewRequestDocEvent, ReviewAssignmentDocEvent, EditedAuthorsDocEvent, DocumentURL,
     IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder, 
-    BofreqEditorDocEvent,BofreqResponsibleDocEvent)
+    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject)
 
 from ietf.name.resources import BallotPositionNameResource, DocTypeNameResource
 class BallotTypeResource(ModelResource):
@@ -842,3 +842,26 @@ class Meta:
             "responsible": ALL_WITH_RELATIONS,
         }
 api.doc.register(BofreqResponsibleDocEventResource())
+
+
+class StoredObjectResource(ModelResource):
+    class Meta:
+        queryset = StoredObject.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'storedobject'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "store": ALL,
+            "name": ALL,
+            "sha384": ALL,
+            "len": ALL,
+            "store_created": ALL,
+            "created": ALL,
+            "modified": ALL,
+            "doc_name": ALL,
+            "doc_rev": ALL,
+            "deleted": ALL,
+        }
+api.doc.register(StoredObjectResource())
diff --git a/ietf/doc/storage_backends.py b/ietf/doc/storage_backends.py
new file mode 100644
index 0000000000..5eeab040e5
--- /dev/null
+++ b/ietf/doc/storage_backends.py
@@ -0,0 +1,192 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+import debug  # pyflakes:ignore
+import json
+
+from contextlib import contextmanager
+from hashlib import sha384
+from io import BufferedReader
+from storages.backends.s3 import S3Storage
+from typing import Optional, Union
+
+from django.core.files.base import File
+
+from ietf.doc.models import StoredObject
+from ietf.utils.log import log
+from ietf.utils.timezone import timezone
+
+
+@contextmanager
+def maybe_log_timing(enabled, op, **kwargs):
+    """If enabled, log elapsed time and additional data from kwargs
+
+    Emits log even if an exception occurs
+    """
+    before = timezone.now()
+    exception = None
+    try:
+        yield
+    except Exception as err:
+        exception = err
+        raise
+    finally:
+        if enabled:
+            dt = timezone.now() - before
+            log(
+                json.dumps(
+                    {
+                        "log": "S3Storage_timing",
+                        "seconds": dt.total_seconds(),
+                        "op": op,
+                        "exception": "" if exception is None else repr(exception),
+                        **kwargs,
+                    }
+                )
+            )
+
+
+# TODO-BLOBSTORE
+# Consider overriding save directly so that
+# we capture metadata for, e.g., ImageField objects
+class CustomS3Storage(S3Storage):
+
+    def __init__(self, **settings):
+        self.in_flight_custom_metadata = {}  # type is Dict[str, Dict[str, str]]
+        super().__init__(**settings)
+
+    def get_default_settings(self):
+        # add a default for the ietf_log_blob_timing boolean
+        return super().get_default_settings() | {"ietf_log_blob_timing": False}
+
+    def _save(self, name, content):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing, "_save", bucket_name=self.bucket_name, name=name
+        ):
+            return super()._save(name, content)
+
+    def _open(self, name, mode="rb"):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing,
+            "_open",
+            bucket_name=self.bucket_name,
+            name=name,
+            mode=mode,
+        ):
+            return super()._open(name, mode)
+
+    def delete(self, name):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing, "delete", bucket_name=self.bucket_name, name=name
+        ):
+            super().delete(name)
+
+    def store_file(
+        self,
+        kind: str,
+        name: str,
+        file: Union[File, BufferedReader],
+        allow_overwrite: bool = False,
+        doc_name: Optional[str] = None,
+        doc_rev: Optional[str] = None,
+    ):
+        is_new = not self.exists_in_storage(kind, name)
+        # debug.show('f"Asked to store {name} in {kind}: is_new={is_new}, allow_overwrite={allow_overwrite}"')
+        if not allow_overwrite and not is_new:
+            log(f"Failed to save {kind}:{name} - name already exists in store")
+            debug.show('f"Failed to save {kind}:{name} - name already exists in store"')
+            # raise Exception("Not ignoring overwrite attempts while testing")
+        else:
+            try:
+                new_name = self.save(name, file)
+                now = timezone.now()
+                record, created = StoredObject.objects.get_or_create(
+                    store=kind,
+                    name=name,
+                    defaults=dict(
+                        sha384=self.in_flight_custom_metadata[name]["sha384"],
+                        len=int(self.in_flight_custom_metadata[name]["len"]),
+                        store_created=now,
+                        created=now,
+                        modified=now,
+                        doc_name=doc_name,  # Note that these are assumed to be invariant
+                        doc_rev=doc_rev,  # for a given name
+                    ),
+                )
+                if not created:
+                    record.sha384 = self.in_flight_custom_metadata[name]["sha384"]
+                    record.len = int(self.in_flight_custom_metadata[name]["len"])
+                    record.modified = now
+                    record.deleted = None
+                    record.save()
+                if new_name != name:
+                    complaint = f"Error encountered saving '{name}' - results stored in '{new_name}' instead."
+                    log(complaint)
+                    debug.show("complaint")
+                    # Note that we are otherwise ignoring this condition - it should become an error later.
+            except Exception as e:
+                # Log and then swallow the exception while we're learning.
+                # Don't let failure pass so quietly when these are the autoritative bits.
+                complaint = f"Failed to save {kind}:{name}"
+                log(complaint, e)
+                debug.show('f"{complaint}: {e}"')
+            finally:
+                del self.in_flight_custom_metadata[name]
+        return None
+
+    def exists_in_storage(self, kind: str, name: str) -> bool:
+        try:
+            # open is realized with a HEAD
+            # See https://github.com/jschneier/django-storages/blob/b79ea310201e7afd659fe47e2882fe59aae5b517/storages/backends/s3.py#L528
+            with self.open(name):
+                return True
+        except FileNotFoundError:
+            return False
+
+    def remove_from_storage(
+        self, kind: str, name: str, warn_if_missing: bool = True
+    ) -> None:
+        now = timezone.now()
+        try:
+            with self.open(name):
+                pass
+            self.delete(name)
+            # debug.show('f"deleted {name} from {kind} storage"')
+        except FileNotFoundError:
+            if warn_if_missing:
+                complaint = (
+                    f"WARNING: Asked to delete non-existent {name} from {kind} storage"
+                )
+                log(complaint)
+                debug.show("complaint")
+        existing_record = StoredObject.objects.filter(store=kind, name=name)
+        if not existing_record.exists() and warn_if_missing:
+            complaint = f"WARNING: Asked to delete {name} from {kind} storage, but there was no matching StorageObject"
+            log(complaint)
+            debug.show("complaint")
+        else:
+            # Note that existing_record is a queryset that will have one matching object
+            existing_record.filter(deleted__isnull=True).update(deleted=now)
+
+    def _get_write_parameters(self, name, content=None):
+        # debug.show('f"getting write parameters for {name}"')
+        params = super()._get_write_parameters(name, content)
+        if "Metadata" not in params:
+            params["Metadata"] = {}
+        try:
+            content.seek(0)
+        except AttributeError:  # TODO-BLOBSTORE
+            debug.say("Encountered Non-Seekable content")
+            raise NotImplementedError("cannot handle unseekable content")
+        content_bytes = content.read()
+        if not isinstance(
+            content_bytes, bytes
+        ):  # TODO-BLOBSTORE: This is sketch-development only -remove before committing
+            raise Exception(f"Expected bytes - got {type(content_bytes)}")
+        content.seek(0)
+        metadata = {
+            "len": f"{len(content_bytes)}",
+            "sha384": f"{sha384(content_bytes).hexdigest()}",
+        }
+        params["Metadata"].update(metadata)
+        self.in_flight_custom_metadata[name] = metadata
+        return params
diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
new file mode 100644
index 0000000000..4f0516339a
--- /dev/null
+++ b/ietf/doc/storage_utils.py
@@ -0,0 +1,103 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from io import BufferedReader
+from typing import Optional, Union
+import debug  # pyflakes ignore
+
+from django.conf import settings
+from django.core.files.base import ContentFile, File
+from django.core.files.storage import storages
+
+
+# TODO-BLOBSTORE (Future, maybe after leaving 3.9) : add a return type
+def _get_storage(kind: str):
+
+    if kind in settings.MORE_STORAGE_NAMES:
+        # TODO-BLOBSTORE - add a checker that verifies configuration will only return CustomS3Storages
+        return storages[kind]
+    else:
+        debug.say(f"Got into not-implemented looking for {kind}")
+        raise NotImplementedError(f"Don't know how to store {kind}")
+
+
+def exists_in_storage(kind: str, name: str) -> bool:
+    if settings.ENABLE_BLOBSTORAGE:
+        store = _get_storage(kind)
+        return store.exists_in_storage(kind, name)
+    else:
+        return False
+
+
+def remove_from_storage(kind: str, name: str, warn_if_missing: bool = True) -> None:
+    if settings.ENABLE_BLOBSTORAGE:
+        store = _get_storage(kind)
+        store.remove_from_storage(kind, name, warn_if_missing)
+    return None
+
+
+# TODO-BLOBSTORE: Try to refactor `kind` out of the signature of the methods already on the custom store (which knows its kind)
+def store_file(
+    kind: str,
+    name: str,
+    file: Union[File, BufferedReader],
+    allow_overwrite: bool = False,
+    doc_name: Optional[str] = None,
+    doc_rev: Optional[str] = None,
+) -> None:
+    # debug.show('f"asked to store {name} into {kind}"')
+    if settings.ENABLE_BLOBSTORAGE:
+        store = _get_storage(kind)
+        store.store_file(kind, name, file, allow_overwrite, doc_name, doc_rev)
+    return None
+
+
+def store_bytes(
+    kind: str,
+    name: str,
+    content: bytes,
+    allow_overwrite: bool = False,
+    doc_name: Optional[str] = None,
+    doc_rev: Optional[str] = None,
+) -> None:
+    if settings.ENABLE_BLOBSTORAGE:
+        store_file(kind, name, ContentFile(content), allow_overwrite)
+    return None
+
+
+def store_str(
+    kind: str,
+    name: str,
+    content: str,
+    allow_overwrite: bool = False,
+    doc_name: Optional[str] = None,
+    doc_rev: Optional[str] = None,
+) -> None:
+    if settings.ENABLE_BLOBSTORAGE:
+        content_bytes = content.encode("utf-8")
+        store_bytes(kind, name, content_bytes, allow_overwrite)
+    return None
+
+
+def retrieve_bytes(kind: str, name: str) -> bytes:
+    from ietf.doc.storage_backends import maybe_log_timing
+    content = b""
+    if settings.ENABLE_BLOBSTORAGE:
+        store = _get_storage(kind)
+        with store.open(name) as f:
+            with maybe_log_timing(
+                hasattr(store, "ietf_log_blob_timing") and store.ietf_log_blob_timing,
+                "read",
+                bucket_name=store.bucket_name if hasattr(store, "bucket_name") else "",
+                name=name,
+            ):
+                content = f.read()
+    return content
+
+
+def retrieve_str(kind: str, name: str) -> str:
+    content = ""
+    if settings.ENABLE_BLOBSTORAGE:
+        content_bytes = retrieve_bytes(kind, name)
+        # TODO-BLOBSTORE: try to decode all the different ways doc.text() does
+        content = content_bytes.decode("utf-8")
+    return content
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 6eb901e6c7..e24c58e1e7 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -84,7 +84,7 @@ def generate_idnits2_rfc_status_task():
     outpath = Path(settings.DERIVED_DIR) / "idnits2-rfc-status"
     blob = generate_idnits2_rfc_status()
     try:
-        outpath.write_text(blob, encoding="utf8")
+        outpath.write_text(blob, encoding="utf8") # TODO-BLOBSTORE
     except Exception as e:
         log.log(f"failed to write idnits2-rfc-status: {e}")
 
@@ -94,7 +94,7 @@ def generate_idnits2_rfcs_obsoleted_task():
     outpath = Path(settings.DERIVED_DIR) / "idnits2-rfcs-obsoleted"
     blob = generate_idnits2_rfcs_obsoleted()
     try:
-        outpath.write_text(blob, encoding="utf8")
+        outpath.write_text(blob, encoding="utf8") # TODO-BLOBSTORE
     except Exception as e:
         log.log(f"failed to write idnits2-rfcs-obsoleted: {e}")
 
diff --git a/ietf/doc/tests_bofreq.py b/ietf/doc/tests_bofreq.py
index 2e27efd627..6a7c9393ef 100644
--- a/ietf/doc/tests_bofreq.py
+++ b/ietf/doc/tests_bofreq.py
@@ -16,6 +16,7 @@
 from django.template.loader import render_to_string
 from django.utils import timezone
 
+from ietf.doc.storage_utils import retrieve_str
 from ietf.group.factories import RoleFactory
 from ietf.doc.factories import BofreqFactory, NewRevisionDocEventFactory
 from ietf.doc.models import State, Document, NewRevisionDocEvent
@@ -340,6 +341,7 @@ def test_submit(self):
                         doc = reload_db_objects(doc)
                         self.assertEqual('%02d'%(int(rev)+1) ,doc.rev)
                         self.assertEqual(f'# {username}', doc.text())
+                        self.assertEqual(f'# {username}', retrieve_str('bofreq',doc.get_base_name()))
                         self.assertEqual(docevent_count+1, doc.docevent_set.count())
                         self.assertEqual(1, len(outbox))
                         rev = doc.rev
@@ -379,6 +381,7 @@ def test_start_new_bofreq(self):
                     self.assertEqual(list(bofreq_editors(bofreq)), [nobody])
                     self.assertEqual(bofreq.latest_event(NewRevisionDocEvent).rev, '00')
                     self.assertEqual(bofreq.text_or_error(), 'some stuff')
+                    self.assertEqual(retrieve_str('bofreq',bofreq.get_base_name()), 'some stuff')
                     self.assertEqual(len(outbox),1)
         finally:
             os.unlink(file.name)
diff --git a/ietf/doc/tests_charter.py b/ietf/doc/tests_charter.py
index e0207fe842..62e49559e2 100644
--- a/ietf/doc/tests_charter.py
+++ b/ietf/doc/tests_charter.py
@@ -16,6 +16,7 @@
 from ietf.doc.factories import CharterFactory, NewRevisionDocEventFactory, TelechatDocEventFactory
 from ietf.doc.models import ( Document, State, BallotDocEvent, BallotType, NewRevisionDocEvent,
     TelechatDocEvent, WriteupDocEvent )
+from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils_charter import ( next_revision, default_review_text, default_action_text,
     charter_name_for_group )
 from ietf.doc.utils import close_open_ballots
@@ -519,6 +520,11 @@ def test_submit_charter(self):
         ftp_charter_path = Path(settings.FTP_DIR) / "charter" / charter_path.name
         self.assertTrue(ftp_charter_path.exists())
         self.assertTrue(charter_path.samefile(ftp_charter_path))
+        blobstore_contents = retrieve_str("charter", charter.get_base_name())
+        self.assertEqual(
+            blobstore_contents,
+            "Windows line\nMac line\nUnix line\n" + utf_8_snippet.decode("utf-8"),
+        )        
 
 
     def test_submit_initial_charter(self):
diff --git a/ietf/doc/tests_conflict_review.py b/ietf/doc/tests_conflict_review.py
index d2f94922b2..791db17f5a 100644
--- a/ietf/doc/tests_conflict_review.py
+++ b/ietf/doc/tests_conflict_review.py
@@ -16,6 +16,7 @@
 
 from ietf.doc.factories import IndividualDraftFactory, ConflictReviewFactory, RgDraftFactory
 from ietf.doc.models import Document, DocEvent, NewRevisionDocEvent, BallotPositionDocEvent, TelechatDocEvent, State, DocTagName
+from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils import create_ballot_if_not_open
 from ietf.doc.views_conflict_review import default_approval_text
 from ietf.group.models import Person
@@ -422,6 +423,7 @@ def test_initial_submission(self):
             f.close()
         self.assertTrue(ftp_path.exists())
         self.assertTrue( "submission-00" in doc.latest_event(NewRevisionDocEvent).desc)
+        self.assertEqual(retrieve_str("conflrev",basename), "Some initial review text\n")
 
     def test_subsequent_submission(self):
         doc = Document.objects.get(name='conflict-review-imaginary-irtf-submission')
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 2405806682..4753c4ff0c 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -24,6 +24,7 @@
 from ietf.doc.models import ( Document, DocReminder, DocEvent,
     ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, TelechatDocEvent, 
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
+from ietf.doc.storage_utils import exists_in_storage, store_str
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
 from ietf.doc.views_draft import AdoptDraftForm
 from ietf.name.models import DocTagName, RoleName
@@ -577,6 +578,11 @@ def setUp(self):
     def write_draft_file(self, name, size):
         with (Path(settings.INTERNET_DRAFT_PATH) / name).open('w') as f:
             f.write("a" * size)
+        _, ext = os.path.splitext(name)
+        if ext:
+            ext=ext[1:]
+            store_str("active-draft", f"{ext}/{name}", "a"*size, allow_overwrite=True)
+            store_str("draft", f"{ext}/{name}", "a"*size, allow_overwrite=True)
 
 
 class ResurrectTests(DraftFileMixin, TestCase):
@@ -649,6 +655,7 @@ def test_resurrect(self):
         # ensure file restored from archive directory
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
+        self.assertTrue(exists_in_storage("active-draft",f"txt/{txt}"))
 
 
 class ExpireIDsTests(DraftFileMixin, TestCase):
@@ -775,6 +782,7 @@ def test_expire_drafts(self):
         self.assertEqual(draft.action_holders.count(), 0)
         self.assertIn('Removed all action holders', draft.latest_event(type='changed_action_holders').desc)
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
+        self.assertFalse(exists_in_storage("active-draft", f"txt/{txt}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
 
         draft.delete()
@@ -798,6 +806,7 @@ def test_clean_up_draft_files(self):
         clean_up_draft_files()
         
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, unknown)))
+        self.assertFalse(exists_in_storage("active-draft", f"txt/{unknown}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, "unknown_ids", unknown)))
 
         
@@ -808,6 +817,7 @@ def test_clean_up_draft_files(self):
         clean_up_draft_files()
         
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, malformed)))
+        self.assertFalse(exists_in_storage("active-draft", f"txt/{malformed}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, "unknown_ids", malformed)))
 
         
@@ -822,9 +832,11 @@ def test_clean_up_draft_files(self):
         clean_up_draft_files()
         
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
+        self.assertFalse(exists_in_storage("active-draft", f"txt/{txt}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
 
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, pdf)))
+        self.assertFalse(exists_in_storage("active-draft", f"pdf/{pdf}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, pdf)))
 
         # expire draft
@@ -843,6 +855,7 @@ def test_clean_up_draft_files(self):
         clean_up_draft_files()
         
         self.assertTrue(not os.path.exists(os.path.join(settings.INTERNET_DRAFT_PATH, txt)))
+        self.assertFalse(exists_in_storage("active-draft", f"txt/{txt}"))
         self.assertTrue(os.path.exists(os.path.join(settings.INTERNET_DRAFT_ARCHIVE_DIR, txt)))
 
 
diff --git a/ietf/doc/tests_material.py b/ietf/doc/tests_material.py
index aaea8fec3d..c87341c95b 100644
--- a/ietf/doc/tests_material.py
+++ b/ietf/doc/tests_material.py
@@ -18,6 +18,7 @@
 from django.utils import timezone
 
 from ietf.doc.models import Document, State, NewRevisionDocEvent
+from ietf.doc.storage_utils import retrieve_str
 from ietf.group.factories import RoleFactory
 from ietf.group.models import Group
 from ietf.meeting.factories import MeetingFactory, SessionFactory, SessionPresentationFactory
@@ -123,6 +124,9 @@ def test_upload_slides(self):
         ftp_filepath=Path(settings.FTP_DIR) / "slides" / basename
         with ftp_filepath.open() as f:
             self.assertEqual(f.read(), content)
+        # This test is very sloppy wrt the actual file content.
+        # Working with/around that for the moment.
+        self.assertEqual(retrieve_str("slides", basename), content)
 
         # check that posting same name is prevented
         test_file.seek(0)
@@ -237,4 +241,6 @@ def test_revise(self, mock_slides_manager_cls):
 
         with io.open(os.path.join(doc.get_file_path(), doc.name + "-" + doc.rev + ".txt")) as f:
             self.assertEqual(f.read(), content)
+        self.assertEqual(retrieve_str("slides", f"{doc.name}-{doc.rev}.txt"), content)
+
 
diff --git a/ietf/doc/tests_review.py b/ietf/doc/tests_review.py
index a956fd3287..e93bc02181 100644
--- a/ietf/doc/tests_review.py
+++ b/ietf/doc/tests_review.py
@@ -20,6 +20,7 @@
 
 import debug                            # pyflakes:ignore
 
+from ietf.doc.storage_utils import retrieve_str
 import ietf.review.mailarch
 
 from ietf.doc.factories import ( NewRevisionDocEventFactory, IndividualDraftFactory, WgDraftFactory,
@@ -63,6 +64,10 @@ def verify_review_files_were_written(self, assignment, expected_content = "This
         review_file = Path(self.review_subdir) / f"{assignment.review.name}.txt"
         content = review_file.read_text()
         self.assertEqual(content, expected_content)
+        self.assertEqual(
+            retrieve_str("review", review_file.name),
+            expected_content
+        )
         review_ftp_file = Path(settings.FTP_DIR) / "review" / review_file.name
         self.assertTrue(review_file.samefile(review_ftp_file))
 
diff --git a/ietf/doc/tests_statement.py b/ietf/doc/tests_statement.py
index 2071018b10..fea42b97d6 100644
--- a/ietf/doc/tests_statement.py
+++ b/ietf/doc/tests_statement.py
@@ -14,6 +14,7 @@
 
 from ietf.doc.factories import StatementFactory, DocEventFactory
 from ietf.doc.models import Document, State, NewRevisionDocEvent
+from ietf.doc.storage_utils import retrieve_str
 from ietf.group.models import Group
 from ietf.person.factories import PersonFactory
 from ietf.utils.mail import outbox, empty_outbox
@@ -185,8 +186,16 @@ def test_submit(self):
                 self.assertEqual("%02d" % (int(rev) + 1), doc.rev)
                 if postdict["statement_submission"] == "enter":
                     self.assertEqual(f"# {username}", doc.text())
+                    self.assertEqual(
+                        retrieve_str("statement", f"{doc.name}-{doc.rev}.md"),
+                        f"# {username}"
+                    )
                 else:
                     self.assertEqual("not valid pdf", doc.text())
+                    self.assertEqual(
+                        retrieve_str("statement", f"{doc.name}-{doc.rev}.pdf"),
+                        "not valid pdf"
+                    )
                 self.assertEqual(docevent_count + 1, doc.docevent_set.count())
                 self.assertEqual(0, len(outbox))
                 rev = doc.rev
@@ -255,8 +264,16 @@ def test_start_new_statement(self):
             self.assertIsNotNone(statement.history_set.last().latest_event(type="published_statement"))
             if postdict["statement_submission"] == "enter":
                 self.assertEqual(statement.text_or_error(), "some stuff")
+                self.assertEqual(
+                    retrieve_str("statement", statement.uploaded_filename),
+                    "some stuff"
+                )
             else:
                 self.assertTrue(statement.uploaded_filename.endswith("pdf"))
+                self.assertEqual(
+                    retrieve_str("statement", f"{statement.name}-{statement.rev}.pdf"),
+                    "not valid pdf"
+                )
             self.assertEqual(len(outbox), 0)
 
         existing_statement = StatementFactory()
diff --git a/ietf/doc/tests_status_change.py b/ietf/doc/tests_status_change.py
index bd4da4c092..cbdc1a049a 100644
--- a/ietf/doc/tests_status_change.py
+++ b/ietf/doc/tests_status_change.py
@@ -19,6 +19,7 @@
     WgRfcFactory, DocEventFactory, WgDraftFactory )
 from ietf.doc.models import ( Document, State, DocEvent,
     BallotPositionDocEvent, NewRevisionDocEvent, TelechatDocEvent, WriteupDocEvent )
+from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils import create_ballot_if_not_open
 from ietf.doc.views_status_change import default_approval_text
 from ietf.group.models import Person
@@ -71,7 +72,7 @@ def test_start_review(self):
             statchg_relation_row_blah="tois")
         )
         self.assertEqual(r.status_code, 302)
-        status_change = Document.objects.get(name='status-change-imaginary-new')        
+        status_change = Document.objects.get(name='status-change-imaginary-new')
         self.assertEqual(status_change.get_state('statchg').slug,'adrev')
         self.assertEqual(status_change.rev,'00')
         self.assertEqual(status_change.ad.name,'Areað Irector')
@@ -563,6 +564,8 @@ def test_initial_submission(self):
         ftp_filepath = Path(settings.FTP_DIR) / "status-changes" / basename
         self.assertFalse(filepath.exists())
         self.assertFalse(ftp_filepath.exists())
+        with self.assertRaises(FileNotFoundError):
+            retrieve_str("statchg",basename)
         r = self.client.post(url,dict(content="Some initial review text\n",submit_response="1"))
         self.assertEqual(r.status_code,302)
         doc = Document.objects.get(name='status-change-imaginary-mid-review')
@@ -571,6 +574,10 @@ def test_initial_submission(self):
             self.assertEqual(f.read(),"Some initial review text\n")
         with ftp_filepath.open() as f:
             self.assertEqual(f.read(),"Some initial review text\n")
+        self.assertEqual(
+            retrieve_str("statchg", basename),
+            "Some initial review text\n"
+        )
         self.assertTrue( "mid-review-00" in doc.latest_event(NewRevisionDocEvent).desc)
 
     def test_subsequent_submission(self):
@@ -607,7 +614,8 @@ def test_subsequent_submission(self):
         self.assertContains(r, "does not appear to be a text file")
 
         # sane post uploading a file
-        test_file = StringIO("This is a new proposal.")
+        test_content = "This is a new proposal."
+        test_file = StringIO(test_content)
         test_file.name = "unnamed"
         r = self.client.post(url,dict(txt=test_file,submit_response="1"))
         self.assertEqual(r.status_code, 302)
@@ -615,8 +623,12 @@ def test_subsequent_submission(self):
         self.assertEqual(doc.rev,'01')
         path = os.path.join(settings.STATUS_CHANGE_PATH, '%s-%s.txt' % (doc.name, doc.rev))
         with io.open(path) as f:
-            self.assertEqual(f.read(),"This is a new proposal.")
+            self.assertEqual(f.read(), test_content)
             f.close()
+        self.assertEqual(
+            retrieve_str("statchg", f"{doc.name}-{doc.rev}.txt"),
+            test_content
+        )
         self.assertTrue( "mid-review-01" in doc.latest_event(NewRevisionDocEvent).desc)
 
         # verify reset text button works
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 10fe9ff2d7..3ddd904c75 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1510,7 +1510,7 @@ def update_or_create_draft_bibxml_file(doc, rev):
         existing_bibxml = ""
     if normalized_bibxml.strip() != existing_bibxml.strip():
         log.log(f"Writing {ref_rev_file_path}")
-        ref_rev_file_path.write_text(normalized_bibxml, encoding="utf8")
+        ref_rev_file_path.write_text(normalized_bibxml, encoding="utf8") # TODO-BLOBSTORE
 
 
 def ensure_draft_bibxml_path_exists():
diff --git a/ietf/doc/views_bofreq.py b/ietf/doc/views_bofreq.py
index 3bd10287b2..71cbe30491 100644
--- a/ietf/doc/views_bofreq.py
+++ b/ietf/doc/views_bofreq.py
@@ -101,6 +101,7 @@ def submit(request, name):
                 content = form.cleaned_data['bofreq_content']
             with io.open(bofreq.get_file_name(), 'w', encoding='utf-8') as destination:
                 destination.write(content)
+            bofreq.store_str(bofreq.get_base_name(), content)
             email_bofreq_new_revision(request, bofreq)
             return redirect('ietf.doc.views_doc.document_main', name=bofreq.name)
 
@@ -175,6 +176,7 @@ def new_bof_request(request):
                 content = form.cleaned_data['bofreq_content']
             with io.open(bofreq.get_file_name(), 'w', encoding='utf-8') as destination:
                 destination.write(content)
+            bofreq.store_str(bofreq.get_base_name(), content)
             email_bofreq_new_revision(request, bofreq)
             return redirect('ietf.doc.views_doc.document_main', name=bofreq.name)
 
diff --git a/ietf/doc/views_charter.py b/ietf/doc/views_charter.py
index f8748d2126..e899f59227 100644
--- a/ietf/doc/views_charter.py
+++ b/ietf/doc/views_charter.py
@@ -441,9 +441,10 @@ def submit(request, name, option=None):
             )  # update rev
             with charter_filename.open("w", encoding="utf-8") as destination:
                 if form.cleaned_data["txt"]:
-                    destination.write(form.cleaned_data["txt"])
+                    content=form.cleaned_data["txt"]
                 else:
-                    destination.write(form.cleaned_data["content"])
+                    content=form.cleaned_data["content"]
+                destination.write(content)
             # Also provide a copy to the legacy ftp source directory, which is served by rsync
             # This replaces the hardlink copy that ghostlink has made in the past
             # Still using a hardlink as long as these are on the same filesystem.
@@ -454,7 +455,8 @@ def submit(request, name, option=None):
                 log(
                     "There was an error creating a hardlink at %s pointing to %s"
                     % (ftp_filename, charter_filename)
-                )     
+                )
+            charter.store_str(charter_filename.name, content)     
 
 
             if option in ["initcharter", "recharter"] and charter.ad == None:
diff --git a/ietf/doc/views_conflict_review.py b/ietf/doc/views_conflict_review.py
index e55661ccdf..159f1340a4 100644
--- a/ietf/doc/views_conflict_review.py
+++ b/ietf/doc/views_conflict_review.py
@@ -186,9 +186,10 @@ def save(self, review):
         filepath = Path(settings.CONFLICT_REVIEW_PATH) / basename
         with filepath.open('w', encoding='utf-8') as destination:
             if self.cleaned_data['txt']:
-                destination.write(self.cleaned_data['txt'])
+                content = self.cleaned_data['txt']
             else:
-                destination.write(self.cleaned_data['content'])
+                content = self.cleaned_data['content']
+            destination.write(content)
         ftp_filepath = Path(settings.FTP_DIR) / "conflict-reviews" / basename
         try:
             os.link(filepath, ftp_filepath) # Path.hardlink_to is not available until 3.10
@@ -197,6 +198,7 @@ def save(self, review):
                 "There was an error creating a hardlink at %s pointing to %s: %s"
                 % (ftp_filepath, filepath, e)
             )
+        review.store_str(basename, content)
 
 #This is very close to submit on charter - can we get better reuse?
 @role_required('Area Director','Secretariat')
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index 34104b2005..c80537afb3 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -32,6 +32,7 @@
     generate_publication_request, email_adopted, email_intended_status_changed,
     email_iesg_processing_document, email_ad_approved_doc,
     email_iana_expert_review_state_changed )
+from ietf.doc.storage_utils import retrieve_bytes, store_bytes
 from ietf.doc.utils import ( add_state_change_event, can_adopt_draft, can_unadopt_draft,
     get_tags_for_stream_id, nice_consensus, update_action_holders,
     update_reminder, update_telechat, make_notify_changed_event, get_initial_notify,
@@ -897,6 +898,11 @@ def restore_draft_file(request, draft):
         except shutil.Error as ex:
             messages.warning(request, 'There was an error restoring the Internet-Draft file: {} ({})'.format(file, ex))
             log.log("  Exception %s when attempting to move %s" % (ex, file))
+        _, ext = os.path.splitext(os.path.basename(file))
+        if ext:
+            ext = ext[1:]
+            blobname = f"{ext}/{basename}.{ext}"
+            store_bytes("active-draft", blobname, retrieve_bytes("draft", blobname))
 
 
 class ShepherdWriteupUploadForm(forms.Form):
diff --git a/ietf/doc/views_material.py b/ietf/doc/views_material.py
index 361bf5f1e2..6f8b8a8f12 100644
--- a/ietf/doc/views_material.py
+++ b/ietf/doc/views_material.py
@@ -167,6 +167,8 @@ def edit_material(request, name=None, acronym=None, action=None, doc_type=None):
                 with filepath.open('wb+') as dest:
                     for chunk in f.chunks():
                         dest.write(chunk)
+                f.seek(0)
+                doc.store_file(basename, f)
                 if not doc.meeting_related():
                     log.assertion('doc.type_id == "slides"')
                     ftp_filepath = Path(settings.FTP_DIR) / doc.type_id / basename
diff --git a/ietf/doc/views_review.py b/ietf/doc/views_review.py
index bb9e56742d..1f23c435fa 100644
--- a/ietf/doc/views_review.py
+++ b/ietf/doc/views_review.py
@@ -805,6 +805,7 @@ def complete_review(request, name, assignment_id=None, acronym=None):
 
             review_path = Path(review.get_file_path()) / f"{review.name}.txt"
             review_path.write_text(content)
+            review.store_str(f"{review.name}.txt", content, allow_overwrite=True) # We have a bug that review revisions dont create a new version!
             review_ftp_path = Path(settings.FTP_DIR) / "review" / review_path.name
             # See https://github.com/ietf-tools/datatracker/issues/6941 - when that's
             # addressed, making this link should not be conditional
diff --git a/ietf/doc/views_statement.py b/ietf/doc/views_statement.py
index bf9f47ddfe..9dc8c8ad69 100644
--- a/ietf/doc/views_statement.py
+++ b/ietf/doc/views_statement.py
@@ -137,12 +137,15 @@ def submit(request, name):
                 mode="wb" if writing_pdf else "w"
             ) as destination:
                 if writing_pdf:
-                    for chunk in form.cleaned_data["statement_file"].chunks():
+                    f = form.cleaned_data["statement_file"]
+                    for chunk in f.chunks():
                         destination.write(chunk)
+                    f.seek(0)
+                    statement.store_file(statement.uploaded_filename, f)
                 else:
                     destination.write(markdown_content)
+                    statement.store_str(statement.uploaded_filename, markdown_content)
             return redirect("ietf.doc.views_doc.document_main", name=statement.name)
-
     else:
         if statement.uploaded_filename.endswith("pdf"):
             text = CONST_PDF_REV_NOTICE
@@ -254,10 +257,14 @@ def new_statement(request):
                 mode="wb" if writing_pdf else "w"
             ) as destination:
                 if writing_pdf:
-                    for chunk in form.cleaned_data["statement_file"].chunks():
+                    f = form.cleaned_data["statement_file"]
+                    for chunk in f.chunks():
                         destination.write(chunk)
+                        f.seek(0)
+                        statement.store_file(statement.uploaded_filename, f)
                 else:
                     destination.write(markdown_content)
+                    statement.store_str(statement.uploaded_filename, markdown_content)
             return redirect("ietf.doc.views_doc.document_main", name=statement.name)
 
     else:
diff --git a/ietf/doc/views_status_change.py b/ietf/doc/views_status_change.py
index 33b822348a..2bccc213c4 100644
--- a/ietf/doc/views_status_change.py
+++ b/ietf/doc/views_status_change.py
@@ -160,9 +160,11 @@ def save(self, doc):
         filename = Path(settings.STATUS_CHANGE_PATH) / basename
         with io.open(filename, 'w', encoding='utf-8') as destination:
             if self.cleaned_data['txt']:
-                destination.write(self.cleaned_data['txt'])
+                content = self.cleaned_data['txt']
             else:
-                destination.write(self.cleaned_data['content'])
+                content = self.cleaned_data['content']
+            destination.write(content)
+            doc.store_str(basename, content)
         try:
             ftp_filename = Path(settings.FTP_DIR) / "status-changes" / basename
             os.link(filename, ftp_filename) # Path.hardlink is not available until 3.10
diff --git a/ietf/group/tasks.py b/ietf/group/tasks.py
index 8b4c994ba1..693aafb385 100644
--- a/ietf/group/tasks.py
+++ b/ietf/group/tasks.py
@@ -10,6 +10,7 @@
 from django.conf import settings
 from django.template.loader import render_to_string
 
+from ietf.doc.storage_utils import store_file
 from ietf.utils import log
 
 from .models import Group
@@ -43,6 +44,11 @@ def generate_wg_charters_files_task():
         encoding="utf8",
     )
 
+    with charters_file.open("rb") as f:
+        store_file("indexes", "1wg-charters.txt", f, allow_overwrite=True)
+    with charters_by_acronym_file.open("rb") as f:
+        store_file("indexes", "1wg-charters-by-acronym.txt", f, allow_overwrite=True)
+
     charter_copy_dests = [
         getattr(settings, "CHARTER_COPY_PATH", None), 
         getattr(settings, "CHARTER_COPY_OTHER_PATH", None),
@@ -102,3 +108,8 @@ def generate_wg_summary_files_task():
         ),
         encoding="utf8",
     )
+
+    with summary_file.open("rb") as f:
+        store_file("indexes", "1wg-summary.txt", f, allow_overwrite=True)
+    with summary_by_acronym_file.open("rb") as f:
+        store_file("indexes", "1wg-summary-by-acronym.txt", f, allow_overwrite=True)
diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 32d919c779..aaf937ee43 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -29,6 +29,7 @@
 from ietf.community.utils import reset_name_contains_index_for_rule
 from ietf.doc.factories import WgDraftFactory, IndividualDraftFactory, CharterFactory, BallotDocEventFactory
 from ietf.doc.models import Document, DocEvent, State
+from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils_charter import charter_name_for_group
 from ietf.group.admin import GroupForm as AdminGroupForm
 from ietf.group.factories import (GroupFactory, RoleFactory, GroupEventFactory, 
@@ -303,20 +304,26 @@ def test_generate_wg_summary_files_task(self):
 
         generate_wg_summary_files_task()
 
-        summary_by_area_contents = (
-            Path(settings.GROUP_SUMMARY_PATH) / "1wg-summary.txt"
-        ).read_text(encoding="utf8")
-        self.assertIn(group.parent.name, summary_by_area_contents)
-        self.assertIn(group.acronym, summary_by_area_contents)
-        self.assertIn(group.name, summary_by_area_contents)
-        self.assertIn(chair.address, summary_by_area_contents)
-
-        summary_by_acronym_contents = (
-            Path(settings.GROUP_SUMMARY_PATH) / "1wg-summary-by-acronym.txt"
-        ).read_text(encoding="utf8")
-        self.assertIn(group.acronym, summary_by_acronym_contents)
-        self.assertIn(group.name, summary_by_acronym_contents)
-        self.assertIn(chair.address, summary_by_acronym_contents)
+        for summary_by_area_contents in [
+            (
+                Path(settings.GROUP_SUMMARY_PATH) / "1wg-summary.txt"
+            ).read_text(encoding="utf8"),
+            retrieve_str("indexes", "1wg-summary.txt")
+        ]:
+            self.assertIn(group.parent.name, summary_by_area_contents)
+            self.assertIn(group.acronym, summary_by_area_contents)
+            self.assertIn(group.name, summary_by_area_contents)
+            self.assertIn(chair.address, summary_by_area_contents)
+
+        for summary_by_acronym_contents in [
+            (
+                Path(settings.GROUP_SUMMARY_PATH) / "1wg-summary-by-acronym.txt"
+            ).read_text(encoding="utf8"),
+            retrieve_str("indexes", "1wg-summary-by-acronym.txt")
+        ]:
+            self.assertIn(group.acronym, summary_by_acronym_contents)
+            self.assertIn(group.name, summary_by_acronym_contents)
+            self.assertIn(chair.address, summary_by_acronym_contents)
 
     def test_chartering_groups(self):
         group = CharterFactory(group__type_id='wg',group__parent=GroupFactory(type_id='area'),states=[('charter','intrev')]).group
diff --git a/ietf/idindex/tasks.py b/ietf/idindex/tasks.py
index 5e7e193bba..2f5f1871d7 100644
--- a/ietf/idindex/tasks.py
+++ b/ietf/idindex/tasks.py
@@ -15,6 +15,8 @@
 
 from django.conf import settings
 
+from ietf.doc.storage_utils import store_file
+
 from .index import all_id_txt, all_id2_txt, id_index_txt
 
 
@@ -38,6 +40,8 @@ def move_into_place(self, src_path: Path, dest_path: Path, hardlink_dirs: List[P
             target = path / dest_path.name
             target.unlink(missing_ok=True)
             os.link(dest_path, target) # until python>=3.10
+        with dest_path.open("rb") as f:
+            store_file("indexes", dest_path.name, f, allow_overwrite=True)
 
     def cleanup(self):
         for tf_path in self.cleanup_list:
diff --git a/ietf/idindex/tests.py b/ietf/idindex/tests.py
index 44abf805f0..5cc7a7b3bb 100644
--- a/ietf/idindex/tests.py
+++ b/ietf/idindex/tests.py
@@ -15,6 +15,7 @@
 
 from ietf.doc.factories import WgDraftFactory, RfcFactory
 from ietf.doc.models import Document, RelatedDocument, State, LastCallDocEvent, NewRevisionDocEvent
+from ietf.doc.storage_utils import retrieve_str
 from ietf.group.factories import GroupFactory
 from ietf.name.models import DocRelationshipName
 from ietf.idindex.index import all_id_txt, all_id2_txt, id_index_txt
@@ -203,5 +204,9 @@ def test_temp_file_manager(self):
                 self.assertFalse(path2.exists())  # left behind
                 # check destination contents and permissions
                 self.assertEqual(dest.read_text(), "yay")
+                self.assertEqual(
+                    retrieve_str("indexes", "yay.txt"),
+                    "yay"
+                )
                 self.assertEqual(dest.stat().st_mode & 0o777, 0o644)
                 self.assertTrue(dest.samefile(other_path / "yay.txt"))
diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index 1d91041b25..1af29044b3 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -379,6 +379,8 @@ def save_attachments(self):
             attach_file = io.open(os.path.join(settings.LIAISON_ATTACH_PATH, attach.name + extension), 'wb')
             attach_file.write(attached_file.read())
             attach_file.close()
+            attached_file.seek(0)
+            attach.store_file(attach.uploaded_filename, attached_file)
 
             if not self.is_new:
                 # create modified event
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index a0186f6a01..1742687f14 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -19,6 +19,7 @@
 from io import StringIO
 from pyquery import PyQuery
 
+from ietf.doc.storage_utils import retrieve_str
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized
 from ietf.utils.mail import outbox
 
@@ -414,7 +415,8 @@ def test_edit_liaison(self):
 
         # edit
         attachments_before = liaison.attachments.count()
-        test_file = StringIO("hello world")
+        test_content = "hello world"
+        test_file = StringIO(test_content)
         test_file.name = "unnamed"
         r = self.client.post(url,
                              dict(from_groups=str(from_group.pk),
@@ -452,9 +454,12 @@ def test_edit_liaison(self):
         self.assertEqual(attachment.title, "attachment")
         with (Path(settings.LIAISON_ATTACH_PATH) / attachment.uploaded_filename).open() as f:
             written_content = f.read()
+        self.assertEqual(written_content, test_content)
+        self.assertEqual(
+            retrieve_str(attachment.type_id, attachment.uploaded_filename),
+            test_content,
+        )
 
-        test_file.seek(0)
-        self.assertEqual(written_content, test_file.read())
 
     def test_incoming_access(self):
         '''Ensure only Secretariat, Liaison Managers, and Authorized Individuals
@@ -704,7 +709,8 @@ def test_add_incoming_liaison(self):
 
         # add new
         mailbox_before = len(outbox)
-        test_file = StringIO("hello world")
+        test_content = "hello world"
+        test_file = StringIO(test_content)
         test_file.name = "unnamed"
         from_groups = [ str(g.pk) for g in Group.objects.filter(type="sdo") ]
         to_group = Group.objects.get(acronym="mars")
@@ -756,6 +762,11 @@ def test_add_incoming_liaison(self):
         self.assertEqual(attachment.title, "attachment")
         with (Path(settings.LIAISON_ATTACH_PATH) / attachment.uploaded_filename).open() as f:
             written_content = f.read()
+        self.assertEqual(written_content, test_content)
+        self.assertEqual(
+            retrieve_str(attachment.type_id, attachment.uploaded_filename),
+            test_content
+        )
 
         test_file.seek(0)
         self.assertEqual(written_content, test_file.read())
@@ -783,7 +794,8 @@ def test_add_outgoing_liaison(self):
 
         # add new
         mailbox_before = len(outbox)
-        test_file = StringIO("hello world")
+        test_content = "hello world"
+        test_file = StringIO(test_content)
         test_file.name = "unnamed"
         from_group = Group.objects.get(acronym="mars")
         to_group = Group.objects.filter(type="sdo")[0]
@@ -835,9 +847,11 @@ def test_add_outgoing_liaison(self):
         self.assertEqual(attachment.title, "attachment")
         with (Path(settings.LIAISON_ATTACH_PATH) / attachment.uploaded_filename).open() as f:
             written_content = f.read()
-
-        test_file.seek(0)
-        self.assertEqual(written_content, test_file.read())
+        self.assertEqual(written_content, test_content)
+        self.assertEqual(
+            retrieve_str(attachment.type_id, attachment.uploaded_filename),
+            test_content
+        )
 
         self.assertEqual(len(outbox), mailbox_before + 1)
         self.assertTrue("Liaison Statement" in outbox[-1]["Subject"])
@@ -882,7 +896,8 @@ def test_liaison_add_attachment(self):
 
 
         # get minimum edit post data
-        file = StringIO('dummy file')
+        test_data = "dummy file"
+        file = StringIO(test_data)
         file.name = "upload.txt"
         post_data = dict(
             from_groups = ','.join([ str(x.pk) for x in liaison.from_groups.all() ]),
@@ -909,6 +924,11 @@ def test_liaison_add_attachment(self):
         self.assertEqual(liaison.attachments.count(),1)
         event = liaison.liaisonstatementevent_set.order_by('id').last()
         self.assertTrue(event.desc.startswith('Added attachment'))
+        attachment = liaison.attachments.get()
+        self.assertEqual(
+            retrieve_str(attachment.type_id, attachment.uploaded_filename),
+            test_data
+        )
 
     def test_liaison_edit_attachment(self):
 
diff --git a/ietf/meeting/factories.py b/ietf/meeting/factories.py
index 69c1f0421b..eb36e9e756 100644
--- a/ietf/meeting/factories.py
+++ b/ietf/meeting/factories.py
@@ -9,6 +9,7 @@
 from django.core.files.base import ContentFile
 from django.db.models import Q
 
+from ietf.doc.storage_utils import store_str
 from ietf.meeting.models import (Attended, Meeting, Session, SchedulingEvent, Schedule,
     TimeSlot, SessionPresentation, FloorPlan, Room, SlideSubmission, Constraint,
     MeetingHost, ProceedingsMaterial)
@@ -239,6 +240,10 @@ class Meta:
     make_file = factory.PostGeneration(
                     lambda obj, create, extracted, **kwargs: open(obj.staged_filepath(),'a').close()
                 )
+    
+    store_submission = factory.PostGeneration(
+        lambda obj, create, extracted, **kwargs: store_str("staging", obj.filename, "")
+    )
 
 class ConstraintFactory(factory.django.DjangoModelFactory):
     class Meta:
diff --git a/ietf/meeting/forms.py b/ietf/meeting/forms.py
index 3b66d2cd29..e1d1e90b8d 100644
--- a/ietf/meeting/forms.py
+++ b/ietf/meeting/forms.py
@@ -361,6 +361,7 @@ def save_agenda(self):
             os.makedirs(directory)
         with io.open(path, "w", encoding='utf-8') as file:
             file.write(self.cleaned_data['agenda'])
+        doc.store_str(doc.uploaded_filename, self.cleaned_data['agenda'])
 
 
 class InterimAnnounceForm(forms.ModelForm):
diff --git a/ietf/meeting/helpers.py b/ietf/meeting/helpers.py
index 7f1c85990e..39d271ae6b 100644
--- a/ietf/meeting/helpers.py
+++ b/ietf/meeting/helpers.py
@@ -649,6 +649,11 @@ def read_session_file(type, num, doc):
 def read_agenda_file(num, doc):
     return read_session_file('agenda', num, doc)
 
+# TODO-BLOBSTORE: this is _yet another_ draft derived variant created when users
+# ask for drafts from the meeting agenda page. Consider whether to refactor this
+# now to not call out to external binaries, and consider whether we need this extra
+# format at all in the draft blobstore. if so, it would probably be stored under 
+# something like plainpdf/ 
 def convert_draft_to_pdf(doc_name):
     inpath = os.path.join(settings.IDSUBMIT_REPOSITORY_PATH, doc_name + ".txt")
     outpath = os.path.join(settings.INTERNET_DRAFT_PDF_PATH, doc_name + ".pdf")
diff --git a/ietf/meeting/migrations/0010_alter_floorplan_image_alter_meetinghost_logo.py b/ietf/meeting/migrations/0010_alter_floorplan_image_alter_meetinghost_logo.py
new file mode 100644
index 0000000000..594a1a4048
--- /dev/null
+++ b/ietf/meeting/migrations/0010_alter_floorplan_image_alter_meetinghost_logo.py
@@ -0,0 +1,56 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.meeting.models
+import ietf.utils.fields
+import ietf.utils.storage
+import ietf.utils.validators
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("meeting", "0009_session_meetecho_recording_name"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="floorplan",
+            name="image",
+            field=models.ImageField(
+                blank=True,
+                default=None,
+                storage=ietf.utils.storage.BlobShadowFileSystemStorage(
+                    kind="", location=None
+                ),
+                upload_to=ietf.meeting.models.floorplan_path,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="meetinghost",
+            name="logo",
+            field=ietf.utils.fields.MissingOkImageField(
+                height_field="logo_height",
+                storage=ietf.utils.storage.BlobShadowFileSystemStorage(
+                    kind="", location=None
+                ),
+                upload_to=ietf.meeting.models._host_upload_path,
+                validators=[
+                    ietf.utils.validators.MaxImageSizeValidator(400, 400),
+                    ietf.utils.validators.WrappedValidator(
+                        ietf.utils.validators.validate_file_size, True
+                    ),
+                    ietf.utils.validators.WrappedValidator(
+                        ietf.utils.validators.validate_file_extension,
+                        [".png", ".jpg", ".jpeg"],
+                    ),
+                    ietf.utils.validators.WrappedValidator(
+                        ietf.utils.validators.validate_mime_type,
+                        ["image/jpeg", "image/png"],
+                        True,
+                    ),
+                ],
+                width_field="logo_width",
+            ),
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 8c6fb97413..5284420731 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -39,7 +39,7 @@
 from ietf.person.models import Person
 from ietf.utils.decorators import memoize
 from ietf.utils.history import find_history_replacements_active_at, find_history_active_at
-from ietf.utils.storage import NoLocationMigrationFileSystemStorage
+from ietf.utils.storage import BlobShadowFileSystemStorage
 from ietf.utils.text import xslugify
 from ietf.utils.timezone import datetime_from_date, date_today
 from ietf.utils.models import ForeignKey
@@ -527,7 +527,12 @@ class FloorPlan(models.Model):
     modified= models.DateTimeField(auto_now=True)
     meeting = ForeignKey(Meeting)
     order   = models.SmallIntegerField()
-    image   = models.ImageField(storage=NoLocationMigrationFileSystemStorage(), upload_to=floorplan_path, blank=True, default=None)
+    image   = models.ImageField(
+        storage=BlobShadowFileSystemStorage(kind="floorplan"),
+        upload_to=floorplan_path,
+        blank=True,
+        default=None,
+    )
     #
     class Meta:
         ordering = ['-id',]
@@ -1431,8 +1436,12 @@ class MeetingHost(models.Model):
     """Meeting sponsor"""
     meeting = ForeignKey(Meeting, related_name='meetinghosts')
     name = models.CharField(max_length=255, blank=False)
+    # TODO-BLOBSTORE - capture these logos and look for other ImageField like model fields.
     logo = MissingOkImageField(
-        storage=NoLocationMigrationFileSystemStorage(location=settings.MEETINGHOST_LOGO_PATH),
+        storage=BlobShadowFileSystemStorage(
+            kind="meetinghostlogo",
+            location=settings.MEETINGHOST_LOGO_PATH,
+        ),
         upload_to=_host_upload_path,
         width_field='logo_width',
         height_field='logo_height',
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 581725dbc8..848c9b7723 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -38,6 +38,7 @@
 import debug           # pyflakes:ignore
 
 from ietf.doc.models import Document, NewRevisionDocEvent
+from ietf.doc.storage_utils import exists_in_storage, remove_from_storage, retrieve_bytes, retrieve_str
 from ietf.group.models import Group, Role, GroupFeatures
 from ietf.group.utils import can_manage_group
 from ietf.person.models import Person
@@ -55,6 +56,7 @@
 from ietf.name.models import SessionStatusName, ImportantDateName, RoleName, ProceedingsMaterialTypeName
 from ietf.utils.decorators import skip_coverage
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
+from ietf.utils.test_runner import TestBlobstoreManager
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, unicontent
 from ietf.utils.timezone import date_today, time_now
 
@@ -112,7 +114,7 @@ def setUp(self):
         # files will upload to the locations specified in settings.py.
         # Note that this will affect any use of the storage class in
         # meeting.models - i.e., FloorPlan.image and MeetingHost.logo
-        self.patcher = patch('ietf.meeting.models.NoLocationMigrationFileSystemStorage.base_location',
+        self.patcher = patch('ietf.meeting.models.BlobShadowFileSystemStorage.base_location',
                              new_callable=PropertyMock)
         mocked = self.patcher.start()
         mocked.return_value = self.storage_dir
@@ -5228,6 +5230,7 @@ def test_interim_request_options(self):
 
     def do_interim_request_single_virtual(self, emails_expected):
         make_meeting_test_data()
+        TestBlobstoreManager().emptyTestBlobstores()
         group = Group.objects.get(acronym='mars')
         date = date_today() + datetime.timedelta(days=30)
         time = time_now().replace(microsecond=0,second=0)
@@ -5278,6 +5281,12 @@ def do_interim_request_single_virtual(self, emails_expected):
         doc = session.materials.first()
         path = os.path.join(doc.get_file_path(),doc.filename_with_rev())
         self.assertTrue(os.path.exists(path))
+        with Path(path).open() as f:
+            self.assertEqual(f.read(), agenda)
+        self.assertEqual(
+            retrieve_str("agenda",doc.uploaded_filename),
+            agenda
+        )
         # check notices to secretariat and chairs
         self.assertEqual(len(outbox), length_before + emails_expected)
         return meeting
@@ -5299,6 +5308,7 @@ def test_interim_request_single_virtual_settings_approval_not_required(self):
 
     def test_interim_request_single_in_person(self):
         make_meeting_test_data()
+        TestBlobstoreManager().emptyTestBlobstores()
         group = Group.objects.get(acronym='mars')
         date = date_today() + datetime.timedelta(days=30)
         time = time_now().replace(microsecond=0,second=0)
@@ -5345,6 +5355,10 @@ def test_interim_request_single_in_person(self):
         timeslot = session.official_timeslotassignment().timeslot
         self.assertEqual(timeslot.time,dt)
         self.assertEqual(timeslot.duration,duration)
+        self.assertEqual(
+            retrieve_str("agenda",session.agenda().uploaded_filename),
+            agenda
+        )
 
     def test_interim_request_multi_day(self):
         make_meeting_test_data()
@@ -5412,6 +5426,11 @@ def test_interim_request_multi_day(self):
         self.assertEqual(timeslot.time,dt2)
         self.assertEqual(timeslot.duration,duration)
         self.assertEqual(session.agenda_note,agenda_note)
+        for session in meeting.session_set.all():
+            self.assertEqual(
+                retrieve_str("agenda",session.agenda().uploaded_filename),
+                agenda
+            )
 
     def test_interim_request_multi_day_non_consecutive(self):
         make_meeting_test_data()
@@ -5474,6 +5493,7 @@ def test_interim_request_multi_day_cancel(self):
 
     def test_interim_request_series(self):
         make_meeting_test_data()
+        TestBlobstoreManager().emptyTestBlobstores()
         meeting_count_before = Meeting.objects.filter(type='interim').count()
         date = date_today() + datetime.timedelta(days=30)
         if (date.month, date.day) == (12, 31):
@@ -5561,6 +5581,11 @@ def test_interim_request_series(self):
         self.assertEqual(timeslot.time,dt2)
         self.assertEqual(timeslot.duration,duration)
         self.assertEqual(session.agenda_note,agenda_note)
+        for session in meeting.session_set.all():
+            self.assertEqual(
+                retrieve_str("agenda",session.agenda().uploaded_filename),
+                agenda
+            )
 
 
     # test_interim_pending subsumed by test_appears_on_pending
@@ -6099,6 +6124,7 @@ def strfdelta(self, tdelta, fmt):
     def test_interim_request_edit_agenda_updates_doc(self):
         """Updating the agenda through the request edit form should update the doc correctly"""
         make_interim_test_data()
+        TestBlobstoreManager().emptyTestBlobstores()
         meeting = add_event_info_to_session_qs(Session.objects.filter(meeting__type='interim', group__acronym='mars')).filter(current_status='sched').first().meeting
         group = meeting.session_set.first().group
         url = urlreverse('ietf.meeting.views.interim_request_edit', kwargs={'number': meeting.number})
@@ -6134,6 +6160,10 @@ def test_interim_request_edit_agenda_updates_doc(self):
         self.assertNotEqual(agenda_doc.uploaded_filename, uploaded_filename_before, 'Uploaded filename should be updated')
         with (Path(agenda_doc.get_file_path()) / agenda_doc.uploaded_filename).open() as f:
             self.assertEqual(f.read(), 'modified agenda contents', 'New agenda contents should be saved')
+        self.assertEqual(
+            retrieve_str(agenda_doc.type_id, agenda_doc.uploaded_filename),
+            "modified agenda contents"
+        )
 
     def test_interim_request_details_permissions(self):
         make_interim_test_data()
@@ -6354,12 +6384,14 @@ def test_upload_bluesheets(self):
         q = PyQuery(r.content)
         self.assertIn('Upload', str(q("title")))
         self.assertFalse(session.presentations.exists())
-        test_file = StringIO('%PDF-1.4\n%âãÏÓ\nthis is some text for a test')
+        test_content = '%PDF-1.4\n%âãÏÓ\nthis is some text for a test'
+        test_file = StringIO(test_content)
         test_file.name = "not_really.pdf"
         r = self.client.post(url,dict(file=test_file))
         self.assertEqual(r.status_code, 302)
         bs_doc = session.presentations.filter(document__type_id='bluesheets').first().document
         self.assertEqual(bs_doc.rev,'00')
+        self.assertEqual(retrieve_str("bluesheets", f"{bs_doc.name}-{bs_doc.rev}.pdf"), test_content)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
@@ -6389,12 +6421,14 @@ def test_upload_bluesheets_interim(self):
         q = PyQuery(r.content)
         self.assertIn('Upload', str(q("title")))
         self.assertFalse(session.presentations.exists())
-        test_file = StringIO('%PDF-1.4\n%âãÏÓ\nthis is some text for a test')
+        test_content = '%PDF-1.4\n%âãÏÓ\nthis is some text for a test'
+        test_file = StringIO(test_content)
         test_file.name = "not_really.pdf"
         r = self.client.post(url,dict(file=test_file))
         self.assertEqual(r.status_code, 302)
         bs_doc = session.presentations.filter(document__type_id='bluesheets').first().document
         self.assertEqual(bs_doc.rev,'00')
+        self.assertEqual(retrieve_str("bluesheets", f"{bs_doc.name}-{bs_doc.rev}.pdf"), test_content)
 
     def test_upload_bluesheets_interim_chair_access(self):
         make_meeting_test_data()
@@ -6467,27 +6501,36 @@ def test_upload_minutes_agenda(self):
             text = doc.text()
             self.assertIn('Some text', text)
             self.assertNotIn('<section>', text)
-        
+            text = retrieve_str(doctype, f"{doc.name}-{doc.rev}.html")
+            self.assertIn('Some text', text)
+            self.assertNotIn('<section>', text)
+
             # txt upload
-            test_file = BytesIO(b'This is some text for a test, with the word\nvirtual at the beginning of a line.')
+            test_bytes = b'This is some text for a test, with the word\nvirtual at the beginning of a line.'
+            test_file = BytesIO(test_bytes)
             test_file.name = "some.txt"
             r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=False))
             self.assertEqual(r.status_code, 302)
             doc = session.presentations.filter(document__type_id=doctype).first().document
             self.assertEqual(doc.rev,'01')
             self.assertFalse(session2.presentations.filter(document__type_id=doctype))
+            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+            self.assertEqual(retrieved_bytes, test_bytes)
     
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200)
             q = PyQuery(r.content)
             self.assertIn('Revise', str(q("Title")))
-            test_file = BytesIO(b'this is some different text for a test')
+            test_bytes = b'this is some different text for a test'
+            test_file = BytesIO(test_bytes)
             test_file.name = "also_some.txt"
             r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=True))
             self.assertEqual(r.status_code, 302)
             doc = Document.objects.get(pk=doc.pk)
             self.assertEqual(doc.rev,'02')
             self.assertTrue(session2.presentations.filter(document__type_id=doctype))
+            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+            self.assertEqual(retrieved_bytes, test_bytes)
 
             # Test bad encoding
             test_file = BytesIO('<html><h1>Title</h1><section>Some\x93text</section></html>'.encode('latin1'))
@@ -6540,12 +6583,15 @@ def test_upload_minutes_agenda_interim(self):
             q = PyQuery(r.content)
             self.assertIn('Upload', str(q("title")))
             self.assertFalse(session.presentations.filter(document__type_id=doctype))
-            test_file = BytesIO(b'this is some text for a test')
+            test_bytes = b'this is some text for a test'
+            test_file = BytesIO(test_bytes)
             test_file.name = "not_really.txt"
             r = self.client.post(url,dict(submission_method="upload",file=test_file))
             self.assertEqual(r.status_code, 302)
             doc = session.presentations.filter(document__type_id=doctype).first().document
             self.assertEqual(doc.rev,'00')
+            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+            self.assertEqual(retrieved_bytes, test_bytes)
 
             # Verify that we don't have dead links
             url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
@@ -6567,12 +6613,15 @@ def test_upload_narrativeminutes(self):
             q = PyQuery(r.content)
             self.assertIn('Upload', str(q("title")))
             self.assertFalse(session.presentations.filter(document__type_id=doctype))
-            test_file = BytesIO(b'this is some text for a test')
+            test_bytes = b'this is some text for a test'
+            test_file = BytesIO(test_bytes)
             test_file.name = "not_really.txt"
             r = self.client.post(url,dict(submission_method="upload",file=test_file))
             self.assertEqual(r.status_code, 302)
             doc = session.presentations.filter(document__type_id=doctype).first().document
             self.assertEqual(doc.rev,'00')
+            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+            self.assertEqual(retrieved_bytes, test_bytes)
 
             # Verify that we don't have dead links
             url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
@@ -6597,18 +6646,22 @@ def test_enter_agenda(self):
         self.assertRedirects(r, redirect_url)
         doc = session.presentations.filter(document__type_id='agenda').first().document
         self.assertEqual(doc.rev,'00')
+        self.assertEqual(retrieve_str("agenda",f"{doc.name}-{doc.rev}.md"), test_text)
 
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertIn('Revise', str(q("Title")))
 
-        test_file = BytesIO(b'Upload after enter')
+        test_bytes = b'Upload after enter'
+        test_file = BytesIO(test_bytes)
         test_file.name = "some.txt"
         r = self.client.post(url,dict(submission_method="upload",file=test_file))
         self.assertRedirects(r, redirect_url)
         doc = Document.objects.get(pk=doc.pk)
         self.assertEqual(doc.rev,'01')
+        retrieved_bytes = retrieve_bytes("agenda", f"{doc.name}-{doc.rev}.txt")
+        self.assertEqual(retrieved_bytes, test_bytes)
 
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -6620,6 +6673,8 @@ def test_enter_agenda(self):
         self.assertRedirects(r, redirect_url)
         doc = Document.objects.get(pk=doc.pk)
         self.assertEqual(doc.rev,'02')
+        self.assertEqual(retrieve_str("agenda",f"{doc.name}-{doc.rev}.md"), test_text)
+
 
     @override_settings(MEETECHO_API_CONFIG="fake settings")  # enough to trigger API calls
     @patch("ietf.meeting.views.SlidesManager")
@@ -6635,7 +6690,8 @@ def test_upload_slides(self, mock_slides_manager_cls):
         q = PyQuery(r.content)
         self.assertIn('Upload', str(q("title")))
         self.assertFalse(session1.presentations.filter(document__type_id='slides'))
-        test_file = BytesIO(b'this is not really a slide')
+        test_bytes = b'this is not really a slide'
+        test_file = BytesIO(test_bytes)
         test_file.name = 'not_really.txt'
         r = self.client.post(url,dict(file=test_file,title='a test slide file',apply_to_all=True,approved=True))
         self.assertEqual(r.status_code, 302)
@@ -6647,6 +6703,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
         self.assertEqual(mock_slides_manager_cls.return_value.add.call_count, 2)
+        self.assertEqual(retrieve_bytes("slides", f"{sp.document.name}-{sp.document.rev}.txt"), test_bytes)
         # don't care which order they were called in, just that both sessions were updated
         self.assertCountEqual(
             mock_slides_manager_cls.return_value.add.call_args_list,
@@ -6658,7 +6715,8 @@ def test_upload_slides(self, mock_slides_manager_cls):
         mock_slides_manager_cls.reset_mock()
 
         url = urlreverse('ietf.meeting.views.upload_session_slides',kwargs={'num':session2.meeting.number,'session_id':session2.id})
-        test_file = BytesIO(b'some other thing still not slidelike')
+        test_bytes = b'some other thing still not slidelike'
+        test_file = BytesIO(test_bytes)
         test_file.name = 'also_not_really.txt'
         r = self.client.post(url,dict(file=test_file,title='a different slide file',apply_to_all=False,approved=True))
         self.assertEqual(r.status_code, 302)
@@ -6671,6 +6729,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
         self.assertEqual(mock_slides_manager_cls.return_value.add.call_count, 1)
+        self.assertEqual(retrieve_bytes("slides", f"{sp.document.name}-{sp.document.rev}.txt"), test_bytes)
         self.assertEqual(
             mock_slides_manager_cls.return_value.add.call_args,
             call(session=session2, slides=sp.document, order=2),
@@ -6682,7 +6741,8 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertTrue(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertIn('Revise', str(q("title")))
-        test_file = BytesIO(b'new content for the second slide deck')
+        test_bytes = b'new content for the second slide deck'
+        test_file = BytesIO(test_bytes)
         test_file.name = 'doesnotmatter.txt'
         r = self.client.post(url,dict(file=test_file,title='rename the presentation',apply_to_all=False, approved=True))
         self.assertEqual(r.status_code, 302)
@@ -6692,6 +6752,7 @@ def test_upload_slides(self, mock_slides_manager_cls):
         self.assertEqual(replacement_sp.rev,'01')
         self.assertEqual(replacement_sp.document.rev,'01')
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
+        self.assertEqual(retrieve_bytes("slides", f"{replacement_sp.document.name}-{replacement_sp.document.rev}.txt"), test_bytes)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
         self.assertEqual(mock_slides_manager_cls.return_value.revise.call_count, 1)
         self.assertEqual(
@@ -6771,7 +6832,6 @@ def test_remove_sessionpresentation(self, mock_slides_manager_cls):
         self.assertEqual(2, agenda.docevent_set.count())
         self.assertFalse(mock_slides_manager_cls.called)
 
-
     def test_propose_session_slides(self):
         for type_id in ['ietf','interim']:
             session = SessionFactory(meeting__type_id=type_id)
@@ -6798,7 +6858,8 @@ def test_propose_session_slides(self):
             login_testing_unauthorized(self,newperson.user.username,upload_url)
             r = self.client.get(upload_url)
             self.assertEqual(r.status_code,200)
-            test_file = BytesIO(b'this is not really a slide')
+            test_bytes = b'this is not really a slide'
+            test_file = BytesIO(test_bytes)
             test_file.name = 'not_really.txt'
             empty_outbox()
             r = self.client.post(upload_url,dict(file=test_file,title='a test slide file',apply_to_all=True,approved=False))
@@ -6806,6 +6867,10 @@ def test_propose_session_slides(self):
             session = Session.objects.get(pk=session.pk)
             self.assertEqual(session.slidesubmission_set.count(),1)
             self.assertEqual(len(outbox),1)
+            self.assertEqual(
+                retrieve_bytes("staging", session.slidesubmission_set.get().filename),
+                test_bytes
+            )
 
             r = self.client.get(session_overview_url)
             self.assertEqual(r.status_code, 200)
@@ -6825,13 +6890,20 @@ def test_propose_session_slides(self):
             login_testing_unauthorized(self,chair.user.username,upload_url)
             r = self.client.get(upload_url)
             self.assertEqual(r.status_code,200)
-            test_file = BytesIO(b'this is not really a slide either')
+            test_bytes = b'this is not really a slide either'
+            test_file = BytesIO(test_bytes)
             test_file.name = 'again_not_really.txt'
             empty_outbox()
             r = self.client.post(upload_url,dict(file=test_file,title='a selfapproved test slide file',apply_to_all=True,approved=True))
             self.assertEqual(r.status_code, 302)
             self.assertEqual(len(outbox),0)
             self.assertEqual(session.slidesubmission_set.count(),2)
+            sp = session.presentations.get(document__title__contains="selfapproved")
+            self.assertFalse(exists_in_storage("staging", sp.document.uploaded_filename))
+            self.assertEqual(
+                retrieve_bytes("slides", sp.document.uploaded_filename),
+                test_bytes
+            )
             self.client.logout()
 
             self.client.login(username=chair.user.username, password=chair.user.username+"+password")
@@ -6854,6 +6926,8 @@ def test_disapprove_proposed_slides(self):
         self.assertEqual(r.status_code,302)
         self.assertEqual(SlideSubmission.objects.filter(status__slug = 'rejected').count(), 1)
         self.assertEqual(SlideSubmission.objects.filter(status__slug = 'pending').count(), 0)
+        if submission.filename is not None and submission.filename != "":
+            self.assertFalse(exists_in_storage("staging", submission.filename))
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         self.assertRegex(r.content.decode(), r"These\s+slides\s+have\s+already\s+been\s+rejected")
@@ -6872,6 +6946,7 @@ def test_approve_proposed_slides(self, mock_slides_manager_cls):
         r = self.client.get(url)
         self.assertEqual(r.status_code,200)
         empty_outbox()
+        self.assertTrue(exists_in_storage("staging", submission.filename))
         r = self.client.post(url,dict(title='different title',approve='approve'))
         self.assertEqual(r.status_code,302)
         self.assertEqual(SlideSubmission.objects.filter(status__slug = 'pending').count(), 0)
@@ -6881,6 +6956,8 @@ def test_approve_proposed_slides(self, mock_slides_manager_cls):
         self.assertIsNotNone(submission.doc)
         self.assertEqual(session.presentations.count(),1)
         self.assertEqual(session.presentations.first().document.title,'different title')
+        self.assertTrue(exists_in_storage("slides", submission.doc.uploaded_filename))
+        self.assertFalse(exists_in_storage("staging", submission.filename))
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
         self.assertEqual(mock_slides_manager_cls.return_value.add.call_count, 1)
@@ -6900,6 +6977,7 @@ def test_approve_proposed_slides(self, mock_slides_manager_cls):
     @override_settings(MEETECHO_API_CONFIG="fake settings")  # enough to trigger API calls
     @patch("ietf.meeting.views.SlidesManager")
     def test_approve_proposed_slides_multisession_apply_one(self, mock_slides_manager_cls):
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SlideSubmissionFactory(session__meeting__type_id='ietf')
         session1 = submission.session
         session2 = SessionFactory(group=submission.session.group, meeting=submission.session.meeting)
@@ -6928,6 +7006,7 @@ def test_approve_proposed_slides_multisession_apply_one(self, mock_slides_manage
     @override_settings(MEETECHO_API_CONFIG="fake settings")  # enough to trigger API calls
     @patch("ietf.meeting.views.SlidesManager")
     def test_approve_proposed_slides_multisession_apply_all(self, mock_slides_manager_cls):
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SlideSubmissionFactory(session__meeting__type_id='ietf')
         session1 = submission.session
         session2 = SessionFactory(group=submission.session.group, meeting=submission.session.meeting)
@@ -6972,12 +7051,15 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
 
         submission = SlideSubmission.objects.get(session=session)
 
+        self.assertTrue(exists_in_storage("staging", submission.filename))
         approve_url = urlreverse('ietf.meeting.views.approve_proposed_slides', kwargs={'slidesubmission_id':submission.pk,'num':submission.session.meeting.number})
         login_testing_unauthorized(self, chair.user.username, approve_url)
         r = self.client.post(approve_url,dict(title=submission.title,approve='approve'))
         submission.refresh_from_db()
         self.assertEqual(r.status_code,302)
         self.client.logout()
+        self.assertFalse(exists_in_storage("staging", submission.filename))
+        self.assertTrue(exists_in_storage("slides", submission.doc.uploaded_filename))
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
         self.assertEqual(mock_slides_manager_cls.return_value.add.call_count, 1)
@@ -7003,11 +7085,16 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
 
         (first_submission, second_submission) = SlideSubmission.objects.filter(session=session, status__slug = 'pending').order_by('id')
 
+        self.assertTrue(exists_in_storage("staging", first_submission.filename))
+        self.assertTrue(exists_in_storage("staging", second_submission.filename))
         approve_url = urlreverse('ietf.meeting.views.approve_proposed_slides', kwargs={'slidesubmission_id':second_submission.pk,'num':second_submission.session.meeting.number})
         login_testing_unauthorized(self, chair.user.username, approve_url)
         r = self.client.post(approve_url,dict(title=submission.title,approve='approve'))
         first_submission.refresh_from_db()
         second_submission.refresh_from_db()
+        self.assertTrue(exists_in_storage("staging", first_submission.filename))
+        self.assertFalse(exists_in_storage("staging", second_submission.filename))
+        self.assertTrue(exists_in_storage("slides", second_submission.doc.uploaded_filename))
         self.assertEqual(r.status_code,302)
         self.assertEqual(mock_slides_manager_cls.call_count, 1)
         self.assertEqual(mock_slides_manager_cls.call_args, call(api_config="fake settings"))
@@ -7024,6 +7111,7 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
         self.assertEqual(r.status_code,302)
         self.client.logout()
         self.assertFalse(mock_slides_manager_cls.called)
+        self.assertFalse(exists_in_storage("staging", first_submission.filename))
 
         self.assertEqual(SlideSubmission.objects.filter(status__slug = 'pending').count(),0)
         self.assertEqual(SlideSubmission.objects.filter(status__slug = 'rejected').count(),1)
@@ -7114,6 +7202,10 @@ def test_imports_previewed_text(self):
         minutes_path = Path(self.meeting.get_materials_path()) / 'minutes'
         with (minutes_path / self.session.minutes().uploaded_filename).open() as f:
             self.assertEqual(f.read(), 'original markdown text')
+        self.assertEqual(
+            retrieve_str("minutes", self.session.minutes().uploaded_filename),
+            'original markdown text'
+        )
 
     def test_refuses_identical_import(self):
         """Should not be able to import text identical to the current revision"""
@@ -7173,7 +7265,9 @@ def test_handles_missing_previous_revision_file(self):
         # remove the file uploaded for the first rev
         minutes_docs = self.session.presentations.filter(document__type='minutes')
         self.assertEqual(minutes_docs.count(), 1)
-        Path(minutes_docs.first().document.get_file_name()).unlink()
+        to_remove = Path(minutes_docs.first().document.get_file_name())
+        to_remove.unlink()
+        remove_from_storage("minutes", to_remove.name)
 
         self.assertEqual(r.status_code, 302)
         with requests_mock.Mocker() as mock:
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 92bae5ac23..9603278399 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -24,6 +24,7 @@
 import debug                            # pyflakes:ignore
 
 from ietf.dbtemplate.models import DBTemplate
+from ietf.doc.storage_utils import store_bytes, store_str
 from ietf.meeting.models import (Session, SchedulingEvent, TimeSlot,
     Constraint, SchedTimeSessAssignment, SessionPresentation, Attended)
 from ietf.doc.models import Document, State, NewRevisionDocEvent, StateDocEvent
@@ -772,7 +773,12 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
             # Whole file sanitization; add back what's missing from a complete
             # document (sanitize will remove these).
             clean = clean_html(text)
-            destination.write(clean.encode("utf8"))
+            clean_bytes = clean.encode('utf8')
+            destination.write(clean_bytes)
+            # Assumes contents of subdir are always document type ids
+            # TODO-BLOBSTORE: see if we can refactor this so that the connection to the document isn't lost
+            # In the meantime, consider faking it by parsing filename (shudder).
+            store_bytes(subdir, filename.name, clean_bytes)
             if request and clean != text:
                 messages.warning(request,
                                  (
@@ -783,6 +789,11 @@ def handle_upload_file(file, filename, meeting, subdir, request=None, encoding=N
         else:
             for chunk in chunks:
                 destination.write(chunk)
+            file.seek(0)
+            if hasattr(file, "chunks"):
+                chunks = file.chunks()
+            # TODO-BLOBSTORE: See above question about refactoring
+            store_bytes(subdir, filename.name, b"".join(chunks))
 
     return None
 
@@ -809,13 +820,15 @@ def new_doc_for_session(type_id, session):
     session.presentations.create(document=doc,rev='00')
     return doc
 
+# TODO-BLOBSTORE - consider adding doc to this signature and factoring away type_id
 def write_doc_for_session(session, type_id, filename, contents):
     filename = Path(filename)
     path = Path(session.meeting.get_materials_path()) / type_id
     path.mkdir(parents=True, exist_ok=True)
     with open(path / filename, "wb") as file:
         file.write(contents.encode('utf-8'))
-    return
+    store_str(type_id, filename.name, contents)
+    return None
 
 def create_recording(session, url, title=None, user=None):
     '''
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 1226e30d60..3fa605ed7e 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -52,6 +52,7 @@
 
 from ietf.doc.fields import SearchableDocumentsField
 from ietf.doc.models import Document, State, DocEvent, NewRevisionDocEvent
+from ietf.doc.storage_utils import remove_from_storage, retrieve_bytes, store_file
 from ietf.group.models import Group
 from ietf.group.utils import can_manage_session_materials, can_manage_some_groups, can_manage_group
 from ietf.person.models import Person, User
@@ -3091,6 +3092,8 @@ def upload_session_slides(request, session_id, num, name=None):
                 for chunk in file.chunks():
                     destination.write(chunk)
                 destination.close()
+                file.seek(0)
+                store_file("staging", filename, file)
 
                 submission.filename = filename
                 submission.save()
@@ -4645,7 +4648,6 @@ def err(code, text):
         save_err = save_bluesheet(request, session, file)
     if save_err:
         return err(400, save_err)
-
     return HttpResponse("Done", status=200, content_type='text/plain')
 
 
@@ -4957,6 +4959,8 @@ def approve_proposed_slides(request, slidesubmission_id, num):
                 if not os.path.exists(path):
                     os.makedirs(path)
                 shutil.move(submission.staged_filepath(), os.path.join(path, target_filename))
+                doc.store_bytes(target_filename, retrieve_bytes("staging", submission.filename))
+                remove_from_storage("staging", submission.filename)
                 post_process(doc)
                 DocEvent.objects.create(type="approved_slides", doc=doc, rev=doc.rev, by=request.user.person, desc="Slides approved")
 
@@ -4994,11 +4998,14 @@ def approve_proposed_slides(request, slidesubmission_id, num):
                 # in a SlideSubmission object without a file.  Handle
                 # this case and keep processing the 'disapprove' even if
                 # the filename doesn't exist.
-                try:
-                    if submission.filename != None and submission.filename != '':
+
+                if submission.filename != None and submission.filename != '':
+                    try:
                         os.unlink(submission.staged_filepath())
-                except (FileNotFoundError, IsADirectoryError):
-                    pass
+                    except (FileNotFoundError, IsADirectoryError):
+                        pass
+                    remove_from_storage("staging", submission.filename)
+
                 acronym = submission.session.group.acronym
                 submission.status = SlideSubmissionStatusName.objects.get(slug='rejected')
                 submission.save()
diff --git a/ietf/nomcom/models.py b/ietf/nomcom/models.py
index 2ed1124c5c..c206e467bd 100644
--- a/ietf/nomcom/models.py
+++ b/ietf/nomcom/models.py
@@ -42,6 +42,7 @@ class ReminderDates(models.Model):
 
 
 class NomCom(models.Model):
+    # TODO-BLOBSTORE: migrate this to a database field instead of a FileField and update code accordingly
     public_key = models.FileField(storage=NoLocationMigrationFileSystemStorage(location=settings.NOMCOM_PUBLIC_KEYS_DIR),
                                   upload_to=upload_path_handler, blank=True, null=True)
 
diff --git a/ietf/person/migrations/0004_alter_person_photo_alter_person_photo_thumb.py b/ietf/person/migrations/0004_alter_person_photo_alter_person_photo_thumb.py
new file mode 100644
index 0000000000..f34382fa70
--- /dev/null
+++ b/ietf/person/migrations/0004_alter_person_photo_alter_person_photo_thumb.py
@@ -0,0 +1,38 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.utils.storage
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("person", "0003_alter_personalapikey_endpoint"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="person",
+            name="photo",
+            field=models.ImageField(
+                blank=True,
+                default=None,
+                storage=ietf.utils.storage.BlobShadowFileSystemStorage(
+                    kind="", location=None
+                ),
+                upload_to="photo",
+            ),
+        ),
+        migrations.AlterField(
+            model_name="person",
+            name="photo_thumb",
+            field=models.ImageField(
+                blank=True,
+                default=None,
+                storage=ietf.utils.storage.BlobShadowFileSystemStorage(
+                    kind="", location=None
+                ),
+                upload_to="photo",
+            ),
+        ),
+    ]
diff --git a/ietf/person/models.py b/ietf/person/models.py
index 85989acfc1..93364478ae 100644
--- a/ietf/person/models.py
+++ b/ietf/person/models.py
@@ -29,7 +29,7 @@
 from ietf.name.models import ExtResourceName
 from ietf.person.name import name_parts, initials, plain_name
 from ietf.utils.mail import send_mail_preformatted
-from ietf.utils.storage import NoLocationMigrationFileSystemStorage
+from ietf.utils.storage import BlobShadowFileSystemStorage
 from ietf.utils.mail import formataddr
 from ietf.person.name import unidecode_name
 from ietf.utils import log
@@ -60,8 +60,18 @@ class Person(models.Model):
     pronouns_selectable = jsonfield.JSONCharField("Pronouns", max_length=120, blank=True, null=True, default=list )
     pronouns_freetext = models.CharField(" ", max_length=30, null=True, blank=True, help_text="Optionally provide your personal pronouns. These will be displayed on your public profile page and alongside your name in Meetecho and, in future, other systems. Select any number of the checkboxes OR provide a custom string up to 30 characters.")
     biography = models.TextField(blank=True, help_text="Short biography for use on leadership pages. Use plain text or reStructuredText markup.")
-    photo = models.ImageField(storage=NoLocationMigrationFileSystemStorage(), upload_to=settings.PHOTOS_DIRNAME, blank=True, default=None)
-    photo_thumb = models.ImageField(storage=NoLocationMigrationFileSystemStorage(), upload_to=settings.PHOTOS_DIRNAME, blank=True, default=None)
+    photo = models.ImageField(
+        storage=BlobShadowFileSystemStorage(kind="photo"),
+        upload_to=settings.PHOTOS_DIRNAME,
+        blank=True,
+        default=None,
+    )
+    photo_thumb = models.ImageField(
+        storage=BlobShadowFileSystemStorage(kind="photo"),
+        upload_to=settings.PHOTOS_DIRNAME,
+        blank=True,
+        default=None,
+    )
     name_from_draft = models.CharField("Full Name (from submission)", null=True, max_length=255, editable=False, help_text="Name as found in an Internet-Draft submission.")
 
     def __str__(self):
diff --git a/ietf/settings.py b/ietf/settings.py
index 125127ba15..faee42237c 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -183,6 +183,12 @@
 # Server-side static.ietf.org URL (used in pdfized)
 STATIC_IETF_ORG_INTERNAL = STATIC_IETF_ORG
 
+ENABLE_BLOBSTORAGE = True
+
+BLOBSTORAGE_MAX_ATTEMPTS = 1
+BLOBSTORAGE_CONNECT_TIMEOUT = 2
+BLOBSTORAGE_READ_TIMEOUT = 2
+
 WSGI_APPLICATION = "ietf.wsgi.application"
 
 AUTHENTICATION_BACKENDS = ( 'ietf.ietfauth.backends.CaseInsensitiveModelBackend', )
@@ -736,6 +742,38 @@ def skip_unreadable_post(record):
     "schedule_name": r"(?P<name>[A-Za-z0-9-:_]+)",
 }
 
+STORAGES: dict[str, Any] = {
+    "default": {"BACKEND": "django.core.files.storage.FileSystemStorage"},
+    "staticfiles": {"BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage"},
+}
+
+# settings_local will need to configure storages for these names
+MORE_STORAGE_NAMES: list[str] = [
+    "bofreq",
+    "charter",
+    "conflrev",
+    "active-draft",
+    "draft",
+    "slides",
+    "minutes",
+    "agenda",
+    "bluesheets",
+    "procmaterials",
+    "narrativeminutes",
+    "statement",
+    "statchg",
+    "liai-att",
+    "chatlog",
+    "polls",
+    "staging",
+    "bibxml-ids",
+    "indexes",
+    "floorplan",
+    "meetinghostlogo",
+    "photo",
+    "review",
+]
+
 # Override this in settings_local.py if needed
 # *_PATH variables ends with a slash/ .
 
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 94ca22c71b..fe77152d42 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -14,7 +14,8 @@
 import shutil
 import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import TEST_CODE_COVERAGE_CHECKER
+from ietf.settings import STORAGES, TEST_CODE_COVERAGE_CHECKER, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -105,3 +106,30 @@ def tempdir_with_cleanup(**kwargs):
         'level': 'INFO',
     },
 }
+
+# Configure storages for the blob store - use env settings if present. See the --no-manage-blobstore test option.
+_blob_store_endpoint_url = os.environ.get("DATATRACKER_BLOB_STORE_ENDPOINT_URL", "http://blobstore:9000")
+_blob_store_access_key = os.environ.get("DATATRACKER_BLOB_STORE_ACCESS_KEY", "minio_root")
+_blob_store_secret_key = os.environ.get("DATATRACKER_BLOB_STORE_SECRET_KEY", "minio_pass")
+_blob_store_bucket_prefix = os.environ.get("DATATRACKER_BLOB_STORE_BUCKET_PREFIX", "test-")
+_blob_store_enable_profiling = (
+    os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
+)
+for storagename in MORE_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url=_blob_store_endpoint_url,
+            access_key=_blob_store_access_key,
+            secret_key=_blob_store_secret_key,
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            bucket_name=f"{_blob_store_bucket_prefix}{storagename}",
+            ietf_log_blob_timing=_blob_store_enable_profiling,
+        ),
+    }
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 6a56839177..9a993480cd 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -31,6 +31,7 @@
                                 ReviewFactory, WgRfcFactory)
 from ietf.doc.models import ( Document, DocEvent, State,
     BallotPositionDocEvent, DocumentAuthor, SubmissionDocEvent )
+from ietf.doc.storage_utils import exists_in_storage, retrieve_str, store_str
 from ietf.doc.utils import create_ballot_if_not_open, can_edit_docextresources, update_action_holders
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.group.models import Group
@@ -53,6 +54,7 @@
 from ietf.utils import tool_version
 from ietf.utils.accesstoken import generate_access_token
 from ietf.utils.mail import outbox, get_payload_text
+from ietf.utils.test_runner import TestBlobstoreManager
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase
 from ietf.utils.timezone import date_today
 from ietf.utils.draft import PlaintextDraft
@@ -355,6 +357,7 @@ def verify_bibxml_ids_creation(self, draft):
 
     def submit_new_wg(self, formats):
         # submit new -> supply submitter info -> approve
+        TestBlobstoreManager().emptyTestBlobstores()
         GroupFactory(type_id='wg',acronym='ames')
         mars = GroupFactory(type_id='wg', acronym='mars')
         RoleFactory(name_id='chair', group=mars, person__user__username='marschairman')
@@ -428,6 +431,13 @@ def submit_new_wg(self, formats):
         self.assertTrue(draft.latest_event(type="added_suggested_replaces"))
         self.assertTrue(not os.path.exists(os.path.join(self.staging_dir, "%s-%s.txt" % (name, rev))))
         self.assertTrue(os.path.exists(os.path.join(self.repository_dir, "%s-%s.txt" % (name, rev))))
+        check_ext = ["xml", "txt", "html"] if "xml" in formats else ["txt"]
+        for ext in check_ext:
+            basename=f"{name}-{rev}.{ext}"
+            extname=f"{ext}/{basename}"
+            self.assertFalse(exists_in_storage("staging", basename))
+            self.assertTrue(exists_in_storage("active-draft", extname))
+            self.assertTrue(exists_in_storage("draft", extname))            
         self.assertEqual(draft.type_id, "draft")
         self.assertEqual(draft.stream_id, "ietf")
         self.assertTrue(draft.expires >= timezone.now() + datetime.timedelta(days=settings.INTERNET_DRAFT_DAYS_TO_EXPIRE - 1))
@@ -535,6 +545,7 @@ def test_submit_new_wg_as_author_bad_submitter(self):
 
     def submit_new_concluded_wg_as_author(self, group_state_id='conclude'):
         """A new concluded WG submission by a logged-in author needs AD approval"""
+        TestBlobstoreManager().emptyTestBlobstores()
         mars = GroupFactory(type_id='wg', acronym='mars', state_id=group_state_id)
         draft = WgDraftFactory(group=mars)
         setup_default_community_list_for_group(draft.group)
@@ -580,6 +591,7 @@ def test_submit_new_wg_with_extresources(self):
 
     def submit_existing(self, formats, change_authors=True, group_type='wg', stream_type='ietf'):
         # submit new revision of existing -> supply submitter info -> prev authors confirm
+        TestBlobstoreManager().emptyTestBlobstores()
 
         def _assert_authors_are_action_holders(draft, expect=True):
             for author in draft.authors():
@@ -771,6 +783,13 @@ def inspect_docevents(docevents, event_delta, event_type, be_in_desc, by_name):
         self.assertTrue(os.path.exists(os.path.join(self.archive_dir, "%s-%s.txt" % (name, old_rev))))
         self.assertTrue(not os.path.exists(os.path.join(self.staging_dir, "%s-%s.txt" % (name, rev))))
         self.assertTrue(os.path.exists(os.path.join(self.repository_dir, "%s-%s.txt" % (name, rev))))
+        check_ext = ["xml", "txt", "html"] if "xml" in formats else ["txt"]
+        for ext in check_ext:
+            basename=f"{name}-{rev}.{ext}"
+            extname=f"{ext}/{basename}"
+            self.assertFalse(exists_in_storage("staging", basename))
+            self.assertTrue(exists_in_storage("active-draft", extname))
+            self.assertTrue(exists_in_storage("draft", extname))  
         self.assertEqual(draft.type_id, "draft")
         if stream_type == 'ietf':
             self.assertEqual(draft.stream_id, "ietf")
@@ -909,6 +928,7 @@ def test_submit_existing_iab_with_extresources(self):
 
     def submit_new_individual(self, formats):
         # submit new -> supply submitter info -> confirm
+        TestBlobstoreManager().emptyTestBlobstores()
 
         name = "draft-authorname-testing-tests"
         rev = "00"
@@ -971,7 +991,13 @@ def submit_new_individual(self, formats):
                 self.assertTrue(variant_path.samefile(variant_ftp_path))
                 variant_all_archive_path = Path(settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR) / variant_path.name
                 self.assertTrue(variant_path.samefile(variant_all_archive_path))
-
+        check_ext = ["xml", "txt", "html"] if "xml" in formats else ["txt"]
+        for ext in check_ext:
+            basename=f"{name}-{rev}.{ext}"
+            extname=f"{ext}/{basename}"
+            self.assertFalse(exists_in_storage("staging", basename))
+            self.assertTrue(exists_in_storage("active-draft", extname))
+            self.assertTrue(exists_in_storage("draft", extname))  
 
 
     def test_submit_new_individual_txt(self):
@@ -988,6 +1014,7 @@ def test_submit_new_individual_txt_xml(self):
         self.submit_new_individual(["txt", "xml"])
 
     def submit_new_draft_no_org_or_address(self, formats):
+        TestBlobstoreManager().emptyTestBlobstores()
         name = 'draft-testing-no-org-or-address'
 
         author = PersonFactory()
@@ -1078,6 +1105,7 @@ def _assert_extresource_change_event(self, doc, is_present=True):
             self.assertIsNone(event, 'External resource change event was unexpectedly created')
 
     def submit_new_draft_with_extresources(self, group):
+        TestBlobstoreManager().emptyTestBlobstores()
         name = 'draft-testing-with-extresources'
 
         status_url, author = self.do_submission(name, rev='00', group=group)
@@ -1107,6 +1135,7 @@ def test_submit_new_individual_with_extresources(self):
 
     def submit_new_individual_logged_in(self, formats):
         # submit new -> supply submitter info -> done
+        TestBlobstoreManager().emptyTestBlobstores()
 
         name = "draft-authorname-testing-logged-in"
         rev = "00"
@@ -1250,6 +1279,7 @@ def submit_existing_with_extresources(self, group_type, stream_type='ietf'):
         
         Unlike some other tests in this module, does not confirm draft if this would be required.
         """
+        TestBlobstoreManager().emptyTestBlobstores()
         orig_draft: Document = DocumentFactory(  # type: ignore[annotation-unchecked]
             type_id='draft',
             group=GroupFactory(type_id=group_type) if group_type else None,
@@ -1290,6 +1320,7 @@ def test_submit_update_individual_with_extresources(self):
 
     def submit_new_individual_replacing_wg(self, logged_in=False, group_state_id='active', notify_ad=False):
         """Chair of an active WG should be notified if individual draft is proposed to replace a WG draft"""
+        TestBlobstoreManager().emptyTestBlobstores()
         name = "draft-authorname-testing-tests"
         rev = "00"
         group = None
@@ -1416,6 +1447,7 @@ def test_cancel_submission(self):
         # cancel
         r = self.client.post(status_url, dict(action=action))
         self.assertTrue(not os.path.exists(os.path.join(self.staging_dir, "%s-%s.txt" % (name, rev))))
+        self.assertFalse(exists_in_storage("staging",f"{name}-{rev}.txt"))
 
     def test_edit_submission_and_force_post(self):
         # submit -> edit
@@ -1605,16 +1637,21 @@ def test_submit_all_file_types(self):
         self.assertEqual(Submission.objects.filter(name=name).count(), 1)
 
         self.assertTrue(os.path.exists(os.path.join(self.staging_dir, "%s-%s.txt" % (name, rev))))
+        self.assertTrue(exists_in_storage("staging",f"{name}-{rev}.txt"))
         fd = io.open(os.path.join(self.staging_dir, "%s-%s.txt" % (name, rev)))
         txt_contents = fd.read()
         fd.close()
         self.assertTrue(name in txt_contents)
         self.assertTrue(os.path.exists(os.path.join(self.staging_dir, "%s-%s.xml" % (name, rev))))
+        self.assertTrue(exists_in_storage("staging",f"{name}-{rev}.txt"))
         fd = io.open(os.path.join(self.staging_dir, "%s-%s.xml" % (name, rev)))
         xml_contents = fd.read()
         fd.close()
         self.assertTrue(name in xml_contents)
         self.assertTrue('<?xml version="1.0" encoding="UTF-8"?>' in xml_contents)
+        xml_contents = retrieve_str("staging", f"{name}-{rev}.xml")
+        self.assertTrue(name in xml_contents)
+        self.assertTrue('<?xml version="1.0" encoding="UTF-8"?>' in xml_contents)       
 
     def test_expire_submissions(self):
         s = Submission.objects.create(name="draft-ietf-mars-foo",
@@ -1901,6 +1938,7 @@ def do_wg_approval_auth_test(self, state, chair_can_approve=False):
         
         Assumes approval allowed by AD and secretary and, optionally, chair of WG
         """
+        TestBlobstoreManager().emptyTestBlobstores()
         class _SubmissionFactory:
             """Helper class to generate fresh submissions"""
             def __init__(self, author, state):
@@ -2750,6 +2788,7 @@ class AsyncSubmissionTests(BaseSubmitTestCase):
     """Tests of async submission-related tasks"""
     def test_process_and_accept_uploaded_submission(self):
         """process_and_accept_uploaded_submission should properly process a submission"""
+        TestBlobstoreManager().emptyTestBlobstores()
         _today = date_today()
         xml, author = submission_file('draft-somebody-test-00', 'draft-somebody-test-00.xml', None, 'test_submission.xml')
         xml_data = xml.read()
@@ -2765,10 +2804,13 @@ def test_process_and_accept_uploaded_submission(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
+        store_str("staging", "draft-somebody-test-00.xml", xml_data)
         txt_path = xml_path.with_suffix('.txt')
         self.assertFalse(txt_path.exists())
         html_path = xml_path.with_suffix('.html')
         self.assertFalse(html_path.exists())
+        for ext in ["txt", "html"]:
+            self.assertFalse(exists_in_storage("staging",f"draft-somebody-test-00.{ext}"))
         process_and_accept_uploaded_submission(submission)
 
         submission = Submission.objects.get(pk=submission.pk)  # refresh
@@ -2784,6 +2826,8 @@ def test_process_and_accept_uploaded_submission(self):
         # at least test that these were created
         self.assertTrue(txt_path.exists())
         self.assertTrue(html_path.exists())
+        for ext in ["txt", "html"]:
+            self.assertTrue(exists_in_storage("staging", f"draft-somebody-test-00.{ext}"))
         self.assertEqual(submission.file_size, os.stat(txt_path).st_size)
         self.assertIn('Completed submission validation checks', submission.submissionevent_set.last().desc)
 
@@ -2798,6 +2842,7 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         txt.close()
 
         # submitter is not an author
+        TestBlobstoreManager().emptyTestBlobstores()
         submitter = PersonFactory()
         submission = SubmissionFactory(
             name='draft-somebody-test',
@@ -2809,12 +2854,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
+        store_str("staging", "draft-somebody-test-00.xml", xml_data)
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('not one of the document authors', submission.submissionevent_set.last().desc)
 
         # author has no email address in XML
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='00',
@@ -2825,12 +2872,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(re.sub(r'<email>.*</email>', '', xml_data))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r'<email>.*</email>', '', xml_data))
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('Email address not found for all authors', submission.submissionevent_set.last().desc)
 
         # no title
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='00',
@@ -2841,12 +2890,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(re.sub(r'<title>.*</title>', '<title></title>', xml_data))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r'<title>.*</title>', '<title></title>', xml_data))
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('Could not extract a valid title', submission.submissionevent_set.last().desc)
 
         # draft name mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-different-name',
             rev='00',
@@ -2857,12 +2908,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-different-name-00.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
+        store_str("staging", "draft-different-name-00.xml", xml_data)
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('Submission rejected: XML Internet-Draft filename', submission.submissionevent_set.last().desc)
 
         # rev mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='01',
@@ -2873,12 +2926,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-01.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
+        store_str("staging", "draft-somebody-test-01.xml", xml_data)
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('Submission rejected: XML Internet-Draft revision', submission.submissionevent_set.last().desc)
 
         # not xml
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='00',
@@ -2889,12 +2944,14 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         txt_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.txt'
         with txt_path.open('w') as f:
             f.write(txt_data)
+        store_str("staging", "draft-somebody-test-00.txt", txt_data)
         process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
         self.assertEqual(submission.state_id, 'cancel')
         self.assertIn('Only XML Internet-Draft submissions', submission.submissionevent_set.last().desc)
 
         # wrong state
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='00',
@@ -2903,8 +2960,9 @@ def test_process_and_accept_uploaded_submission_invalid(self):
             state_id='uploaded',
         )
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
-        with xml_path.open('w') as f:
+        with xml_path.open('w') as f: # Why is this state being written if the thing that uses it is mocked out?
             f.write(xml_data)
+        store_str("staging", "draft-somebody-test-00.xml", xml_data)
         with mock.patch('ietf.submit.utils.process_submission_xml') as mock_proc_xml:
             process_and_accept_uploaded_submission(submission)
         submission = Submission.objects.get(pk=submission.pk)  # refresh
@@ -2912,6 +2970,7 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         self.assertEqual(submission.state_id, 'uploaded', 'State should not be changed')
 
         # failed checker
+        TestBlobstoreManager().emptyTestBlobstores()
         submission = SubmissionFactory(
             name='draft-somebody-test',
             rev='00',
@@ -2922,6 +2981,7 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
+        store_str("staging", "draft-somebody-test-00.xml", xml_data)
         with mock.patch(
                 'ietf.submit.utils.apply_checkers',
                 side_effect = lambda _, __: submission.checks.create(
@@ -2958,6 +3018,7 @@ def test_process_and_accept_uploaded_submission_task_ignores_invalid_id(self, mo
         self.assertEqual(mock_method.call_count, 0)
 
     def test_process_submission_xml(self):
+        TestBlobstoreManager().emptyTestBlobstores()
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / "draft-somebody-test-00.xml"
         xml, _ = submission_file(
             "draft-somebody-test-00",
@@ -2968,6 +3029,7 @@ def test_process_submission_xml(self):
         )
         xml_contents = xml.read()
         xml_path.write_text(xml_contents)
+        store_str("staging", "draft-somebody-test-00.xml", xml_contents)
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["filename"], "draft-somebody-test")
         self.assertEqual(output["rev"], "00")
@@ -2983,23 +3045,32 @@ def test_process_submission_xml(self):
         self.assertEqual(output["xml_version"], "3")
 
         # Should behave on missing or partial <date> elements
+        TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date.+>", "", xml_contents))  # strip <date...> entirely
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date.+>", "", xml_contents))
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], None)
 
+        TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date year=.+ month", "<date month", xml_contents))  # remove year
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date year=.+ month", "<date month", xml_contents))
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
+        TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"(<date.+) month=.+day=(.+>)", r"\1 day=\2", xml_contents))  # remove month
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"(<date.+) month=.+day=(.+>)", r"\1 day=\2", xml_contents))
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
+        TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date(.+) day=.+>", r"<date\1>", xml_contents))  # remove day
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date(.+) day=.+>", r"<date\1>", xml_contents))
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
         # name mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         xml, _ = submission_file(
             "draft-somebody-wrong-name-00",  # name that appears in the file
             "draft-somebody-test-00.xml",
@@ -3008,10 +3079,13 @@ def test_process_submission_xml(self):
             title="Correct Draft Title",
         )
         xml_path.write_text(xml.read())
+        xml.seek(0)
+        store_str("staging", "draft-somebody-test-00.xml", xml.read())
         with self.assertRaisesMessage(SubmissionError, "disagrees with submission filename"):
             process_submission_xml("draft-somebody-test", "00")
 
         # rev mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         xml, _ = submission_file(
             "draft-somebody-test-01",  # name that appears in the file
             "draft-somebody-test-00.xml",
@@ -3020,10 +3094,13 @@ def test_process_submission_xml(self):
             title="Correct Draft Title",
         )
         xml_path.write_text(xml.read())
+        xml.seek(0)
+        store_str("staging", "draft-somebody-test-00.xml", xml.read())
         with self.assertRaisesMessage(SubmissionError, "disagrees with submission revision"):
             process_submission_xml("draft-somebody-test", "00")
 
         # missing title
+        TestBlobstoreManager().emptyTestBlobstores()
         xml, _ = submission_file(
             "draft-somebody-test-00",  # name that appears in the file
             "draft-somebody-test-00.xml",
@@ -3032,10 +3109,13 @@ def test_process_submission_xml(self):
             title="",
         )
         xml_path.write_text(xml.read())
+        xml.seek(0)
+        store_str("staging", "draft-somebody-test-00.xml", xml.read())
         with self.assertRaisesMessage(SubmissionError, "Could not extract a valid title"):
             process_submission_xml("draft-somebody-test", "00")
 
     def test_process_submission_text(self):
+        TestBlobstoreManager().emptyTestBlobstores()
         txt_path = Path(settings.IDSUBMIT_STAGING_PATH) / "draft-somebody-test-00.txt"
         txt, _ = submission_file(
             "draft-somebody-test-00",
@@ -3045,6 +3125,8 @@ def test_process_submission_text(self):
             title="Correct Draft Title",
         )
         txt_path.write_text(txt.read())
+        txt.seek(0)
+        store_str("staging", "draft-somebody-test-00.txt", txt.read())
         output = process_submission_text("draft-somebody-test", "00")
         self.assertEqual(output["filename"], "draft-somebody-test")
         self.assertEqual(output["rev"], "00")
@@ -3060,6 +3142,7 @@ def test_process_submission_text(self):
         self.assertIsNone(output["xml_version"])
 
         # name mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         txt, _ = submission_file(
             "draft-somebody-wrong-name-00",  # name that appears in the file
             "draft-somebody-test-00.txt",
@@ -3069,11 +3152,14 @@ def test_process_submission_text(self):
         )
         with txt_path.open('w') as fd:
             fd.write(txt.read())
+        txt.seek(0)
+        store_str("staging", "draft-somebody-test-00.txt", txt.read())
         txt.close()
         with self.assertRaisesMessage(SubmissionError, 'disagrees with submission filename'):
             process_submission_text("draft-somebody-test", "00")
 
         # rev mismatch
+        TestBlobstoreManager().emptyTestBlobstores()
         txt, _ = submission_file(
             "draft-somebody-test-01",  # name that appears in the file
             "draft-somebody-test-00.txt",
@@ -3083,6 +3169,8 @@ def test_process_submission_text(self):
         )
         with txt_path.open('w') as fd:
             fd.write(txt.read())
+        txt.seek(0)
+        store_str("staging", "draft-somebody-test-00.txt", txt.read())
         txt.close()
         with self.assertRaisesMessage(SubmissionError, 'disagrees with submission revision'):
             process_submission_text("draft-somebody-test", "00")
@@ -3221,6 +3309,7 @@ def test_find_submission_filenames(self):
         path = Path(self.staging_dir)
         for ext in ['txt', 'xml', 'pdf', 'md']:
             (path / f'{draft.name}-{draft.rev}.{ext}').touch()
+            store_str("staging", f"{draft.name}-{draft.rev}.{ext}", "")
         files = find_submission_filenames(draft)
         self.assertCountEqual(
             files,
@@ -3280,6 +3369,7 @@ def test_validate_submission_rev(self):
         new_wg_doc = WgDraftFactory(rev='01', relations=[('replaces',old_wg_doc)])
         path = Path(self.archive_dir) / f'{new_wg_doc.name}-{new_wg_doc.rev}.txt'
         path.touch()
+        store_str("staging", f"{new_wg_doc.name}-{new_wg_doc.rev}.txt", "")
 
         bad_revs = (None, '', '2', 'aa', '00', '01', '100', '002', u'öö')
         for rev in bad_revs:
diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index f19f2384c8..3e06f45c54 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -36,6 +36,7 @@
     DocumentAuthor, AddedMessageEvent )
 from ietf.doc.models import NewRevisionDocEvent
 from ietf.doc.models import RelatedDocument, DocRelationshipName, DocExtResource
+from ietf.doc.storage_utils import remove_from_storage, retrieve_bytes, store_bytes, store_file, store_str
 from ietf.doc.utils import (add_state_change_event, rebuild_reference_relations,
     set_replaces_for_document, prettify_std_name, update_doc_extresources, 
     can_edit_docextresources, update_documentauthors, update_action_holders,
@@ -455,6 +456,7 @@ def post_submission(request, submission, approved_doc_desc, approved_subm_desc):
         from ietf.doc.expire import move_draft_files_to_archive
         move_draft_files_to_archive(draft, prev_rev)
 
+    submission.draft = draft
     move_files_to_repository(submission)
     submission.state = DraftSubmissionStateName.objects.get(slug="posted")
     log.log(f"{submission.name}: moved files")
@@ -488,7 +490,6 @@ def post_submission(request, submission, approved_doc_desc, approved_subm_desc):
     if new_possibly_replaces:
         send_review_possibly_replaces_request(request, draft, submitter_info)
 
-    submission.draft = draft
     submission.save()
 
     create_submission_event(request, submission, approved_subm_desc)
@@ -498,6 +499,7 @@ def post_submission(request, submission, approved_doc_desc, approved_subm_desc):
     ref_rev_file_name = os.path.join(os.path.join(settings.BIBXML_BASE_PATH, 'bibxml-ids'), 'reference.I-D.%s-%s.xml' % (draft.name, draft.rev ))
     with io.open(ref_rev_file_name, "w", encoding='utf-8') as f:
         f.write(ref_text)
+    store_str("bibxml-ids", f"reference.I-D.{draft.name}-{draft.rev}.txt", ref_text) # TODO-BLOBSTORE verify with test
 
     log.log(f"{submission.name}: done")
     
@@ -666,6 +668,12 @@ def move_files_to_repository(submission):
             ftp_dest = Path(settings.FTP_DIR) / "internet-drafts" / dest.name
             os.link(dest, all_archive_dest)
             os.link(dest, ftp_dest)
+            # Shadow what's happening to the fs in the blobstores. When the stores become
+            # authoritative, the source and dest checks will need to apply to the stores instead.
+            content_bytes = retrieve_bytes("staging", fname)
+            store_bytes("active-draft", f"{ext}/{fname}", content_bytes)
+            submission.draft.store_bytes(f"{ext}/{fname}", content_bytes)
+            remove_from_storage("staging", fname)
         elif dest.exists():
             log.log("Intended to move '%s' to '%s', but found source missing while destination exists.")
         elif f".{ext}" in submission.file_types.split(','):
@@ -678,6 +686,7 @@ def remove_staging_files(name, rev):
     exts = [f'.{ext}' for ext in settings.IDSUBMIT_FILE_TYPES]
     for ext in exts:
         basename.with_suffix(ext).unlink(missing_ok=True)
+        remove_from_storage("staging", basename.with_suffix(ext).name, warn_if_missing=False)
 
 
 def remove_submission_files(submission):
@@ -766,6 +775,8 @@ def save_files(form):
             for chunk in f.chunks():
                 destination.write(chunk)
         log.log("saved file %s" % name)
+        f.seek(0)
+        store_file("staging", f"{form.filename}-{form.revision}.{ext}", f)
     return file_name
 
 
@@ -988,6 +999,10 @@ def render_missing_formats(submission):
                 xml_version,
             )
         )
+        # When the blobstores become autoritative - the guard at the
+        # containing if statement needs to be based on the store
+        with Path(txt_path).open("rb") as f:
+            store_file("staging", f"{submission.name}-{submission.rev}.txt", f)
 
     # --- Convert to html ---
     html_path = staging_path(submission.name, submission.rev, '.html')
@@ -1010,6 +1025,8 @@ def render_missing_formats(submission):
             xml_version,
         )
     )
+    with Path(html_path).open("rb") as f:
+        store_file("staging", f"{submission.name}-{submission.rev}.html", f)
 
 
 def accept_submission(submission: Submission, request: Optional[HttpRequest] = None, autopost=False):
@@ -1361,6 +1378,7 @@ def process_and_validate_submission(submission):
     except SubmissionError:
         raise  # pass SubmissionErrors up the stack
     except Exception as err:
+        # (this is a good point to just `raise err` when diagnosing Submission test failures)
         # convert other exceptions into SubmissionErrors
         log.log(f'Unexpected exception while processing submission {submission.pk}.')
         log.log(traceback.format_exc())
diff --git a/ietf/utils/storage.py b/ietf/utils/storage.py
index 0aa02cab86..9f41f3d50f 100644
--- a/ietf/utils/storage.py
+++ b/ietf/utils/storage.py
@@ -1,8 +1,56 @@
+# Copyright The IETF Trust 2020-2025, All Rights Reserved
+"""Django Storage classes"""
+from pathlib import Path
+
+from django.conf import settings
 from django.core.files.storage import FileSystemStorage
+from ietf.doc.storage_utils import store_file
+from .log import log
+
 
 class NoLocationMigrationFileSystemStorage(FileSystemStorage):
 
-    def deconstruct(obj):               # pylint: disable=no-self-argument
-        path, args, kwargs = FileSystemStorage.deconstruct(obj)
-        kwargs["location"] = None
-        return (path, args, kwargs)
+    def deconstruct(self):
+        path, args, kwargs = super().deconstruct()
+        kwargs["location"] = None  # don't record location in migrations
+        return path, args, kwargs
+
+
+class BlobShadowFileSystemStorage(NoLocationMigrationFileSystemStorage):
+    """FileSystemStorage that shadows writes to the blob store as well
+
+    Strips directories from the filename when naming the blob.
+    """
+
+    def __init__(
+        self,
+        *,  # disallow positional arguments
+        kind: str,
+        location=None,
+        base_url=None,
+        file_permissions_mode=None,
+        directory_permissions_mode=None,
+    ):
+        self.kind = kind
+        super().__init__(
+            location, base_url, file_permissions_mode, directory_permissions_mode
+        )
+
+    def save(self, name, content, max_length=None):
+        # Write content to the filesystem - this deals with chunks, etc...
+        saved_name = super().save(name, content, max_length)
+
+        if settings.ENABLE_BLOBSTORAGE:
+            # Retrieve the content and write to the blob store
+            blob_name = Path(saved_name).name  # strips path
+            try:
+                with self.open(saved_name, "rb") as f:
+                    store_file(self.kind, blob_name, f, allow_overwrite=True)
+            except Exception as err:
+                log(f"Failed to shadow {saved_name} at {self.kind}:{blob_name}: {err}")
+        return saved_name  # includes the path!
+
+    def deconstruct(self):
+        path, args, kwargs = super().deconstruct()
+        kwargs["kind"] = ""  # don't record "kind" in migrations
+        return path, args, kwargs
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index 49d53e1e1d..3c89a2d01c 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -48,6 +48,8 @@
 import subprocess
 import tempfile
 import copy
+import boto3
+import botocore.config
 import factory.random
 import urllib3
 import warnings
@@ -85,6 +87,8 @@
 from ietf.utils.test_smtpserver import SMTPTestServerDriver
 from ietf.utils.test_utils import TestCase
 
+from mypy_boto3_s3.service_resource import Bucket
+
 
 loaded_templates = set()
 visited_urls = set()
@@ -722,9 +726,25 @@ def add_arguments(cls, parser):
         parser.add_argument('--rerun-until-failure',
             action='store_true', dest='rerun', default=False,
             help='Run the indicated tests in a loop until a failure occurs. ' )
-
-    def __init__(self, ignore_lower_coverage=False, skip_coverage=False, save_version_coverage=None, html_report=None, permit_mixed_migrations=None, show_logging=None, validate_html=None, validate_html_harder=None, rerun=None, **kwargs):
-        #
+        parser.add_argument('--no-manage-blobstore', action='store_false', dest='manage_blobstore',
+                            help='Disable creating/deleting test buckets in the blob store.'
+                                 'When this argument is used, a set of buckets with "test-" prefixed to their '
+                                 'names must already exist.')
+
+    def __init__(
+        self,
+        ignore_lower_coverage=False,
+        skip_coverage=False,
+        save_version_coverage=None,
+        html_report=None,
+        permit_mixed_migrations=None,
+        show_logging=None,
+        validate_html=None,
+        validate_html_harder=None,
+        rerun=None,
+        manage_blobstore=True,
+        **kwargs
+    ):    #
         self.ignore_lower_coverage = ignore_lower_coverage
         self.check_coverage = not skip_coverage
         self.save_version_coverage = save_version_coverage
@@ -752,6 +772,8 @@ def __init__(self, ignore_lower_coverage=False, skip_coverage=False, save_versio
         # contains parent classes to later subclasses, the parent classes will determine the ordering, so use the most
         # specific classes necessary to get the right ordering:
         self.reorder_by = (PyFlakesTestCase, MyPyTest,) + self.reorder_by + (StaticLiveServerTestCase, TemplateTagTest, CoverageTest,)
+        #self.buckets = set()
+        self.blobstoremanager = TestBlobstoreManager() if manage_blobstore else None
 
     def setup_test_environment(self, **kwargs):
         global template_coverage_collection
@@ -936,6 +958,9 @@ def setup_test_environment(self, **kwargs):
                 print(" (extra pedantically)")
                 self.vnu = start_vnu_server()
 
+        if self.blobstoremanager is not None:
+            self.blobstoremanager.createTestBlobstores()
+        
         super(IetfTestRunner, self).setup_test_environment(**kwargs)
 
     def teardown_test_environment(self, **kwargs):
@@ -966,6 +991,9 @@ def teardown_test_environment(self, **kwargs):
             if self.vnu:
                 self.vnu.terminate()
 
+        if self.blobstoremanager is not None:
+            self.blobstoremanager.destroyTestBlobstores()
+
         super(IetfTestRunner, self).teardown_test_environment(**kwargs)
 
     def validate(self, testcase):
@@ -1220,3 +1248,39 @@ def tearDown(self):
         for k, v in self.replaced_settings.items():
             setattr(settings, k, v)
         super().tearDown()
+
+class TestBlobstoreManager():
+    # N.B. buckets and blobstore are intentional Class-level attributes
+    buckets: set[Bucket] = set()
+
+    blobstore = boto3.resource("s3",
+        endpoint_url="http://blobstore:9000",
+        aws_access_key_id="minio_root",
+        aws_secret_access_key="minio_pass",
+        aws_session_token=None,
+        config = botocore.config.Config(signature_version="s3v4"),
+        #config=botocore.config.Config(signature_version=botocore.UNSIGNED),
+        verify=False
+    )
+
+    def createTestBlobstores(self):
+        for storagename in settings.MORE_STORAGE_NAMES:
+            bucketname = f"test-{storagename}"
+            try:
+                bucket = self.blobstore.create_bucket(Bucket=bucketname)
+                self.buckets.add(bucket)
+            except self.blobstore.meta.client.exceptions.BucketAlreadyOwnedByYou:
+                bucket = self.blobstore.Bucket(bucketname)
+                self.buckets.add(bucket)
+
+    def destroyTestBlobstores(self):
+        self.emptyTestBlobstores(destroy=True)
+
+    def emptyTestBlobstores(self, destroy=False):
+        # debug.show('f"Asked to empty test blobstores with destroy={destroy}"')
+        for bucket in self.buckets:
+            bucket.objects.delete()
+            if destroy:
+                bucket.delete()
+        if destroy:
+            self.buckets = set()
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index f266ffcd62..912607f466 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -6,7 +6,9 @@
 import json
 
 from ietf import __release_hash__
-from ietf.settings import *                                          # pyflakes:ignore
+from ietf.settings import *  # pyflakes:ignore
+from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+import botocore.config
 
 
 def _multiline_to_list(s):
@@ -29,7 +31,7 @@ def _multiline_to_list(s):
 if _SECRET_KEY is not None:
     SECRET_KEY = _SECRET_KEY
 else:
-    raise RuntimeError("DATATRACKER_DJANGO_SECRET_KEY must be set")    
+    raise RuntimeError("DATATRACKER_DJANGO_SECRET_KEY must be set")
 
 _NOMCOM_APP_SECRET_B64 = os.environ.get("DATATRACKER_NOMCOM_APP_SECRET_B64", None)
 if _NOMCOM_APP_SECRET_B64 is not None:
@@ -41,7 +43,7 @@ def _multiline_to_list(s):
 if _IANA_SYNC_PASSWORD is not None:
     IANA_SYNC_PASSWORD = _IANA_SYNC_PASSWORD
 else:
-    raise RuntimeError("DATATRACKER_IANA_SYNC_PASSWORD must be set")    
+    raise RuntimeError("DATATRACKER_IANA_SYNC_PASSWORD must be set")
 
 _RFC_EDITOR_SYNC_PASSWORD = os.environ.get("DATATRACKER_RFC_EDITOR_SYNC_PASSWORD", None)
 if _RFC_EDITOR_SYNC_PASSWORD is not None:
@@ -59,25 +61,25 @@ def _multiline_to_list(s):
 if _GITHUB_BACKUP_API_KEY is not None:
     GITHUB_BACKUP_API_KEY = _GITHUB_BACKUP_API_KEY
 else:
-    raise RuntimeError("DATATRACKER_GITHUB_BACKUP_API_KEY must be set")    
+    raise RuntimeError("DATATRACKER_GITHUB_BACKUP_API_KEY must be set")
 
 _API_KEY_TYPE = os.environ.get("DATATRACKER_API_KEY_TYPE", None)
 if _API_KEY_TYPE is not None:
     API_KEY_TYPE = _API_KEY_TYPE
 else:
-    raise RuntimeError("DATATRACKER_API_KEY_TYPE must be set")    
+    raise RuntimeError("DATATRACKER_API_KEY_TYPE must be set")
 
 _API_PUBLIC_KEY_PEM_B64 = os.environ.get("DATATRACKER_API_PUBLIC_KEY_PEM_B64", None)
 if _API_PUBLIC_KEY_PEM_B64 is not None:
     API_PUBLIC_KEY_PEM = b64decode(_API_PUBLIC_KEY_PEM_B64)
 else:
-    raise RuntimeError("DATATRACKER_API_PUBLIC_KEY_PEM_B64 must be set")    
+    raise RuntimeError("DATATRACKER_API_PUBLIC_KEY_PEM_B64 must be set")
 
 _API_PRIVATE_KEY_PEM_B64 = os.environ.get("DATATRACKER_API_PRIVATE_KEY_PEM_B64", None)
 if _API_PRIVATE_KEY_PEM_B64 is not None:
     API_PRIVATE_KEY_PEM = b64decode(_API_PRIVATE_KEY_PEM_B64)
 else:
-    raise RuntimeError("DATATRACKER_API_PRIVATE_KEY_PEM_B64 must be set")    
+    raise RuntimeError("DATATRACKER_API_PRIVATE_KEY_PEM_B64 must be set")
 
 # Set DEBUG if DATATRACKER_DEBUG env var is the word "true"
 DEBUG = os.environ.get("DATATRACKER_DEBUG", "false").lower() == "true"
@@ -102,7 +104,9 @@ def _multiline_to_list(s):
 # Configure persistent connections. A setting of 0 is Django's default.
 _conn_max_age = os.environ.get("DATATRACKER_DB_CONN_MAX_AGE", "0")
 # A string "none" means unlimited age.
-DATABASES["default"]["CONN_MAX_AGE"] = None if _conn_max_age.lower() == "none" else int(_conn_max_age)
+DATABASES["default"]["CONN_MAX_AGE"] = (
+    None if _conn_max_age.lower() == "none" else int(_conn_max_age)
+)
 # Enable connection health checks if DATATRACKER_DB_CONN_HEALTH_CHECK is the string "true"
 _conn_health_checks = bool(
     os.environ.get("DATATRACKER_DB_CONN_HEALTH_CHECKS", "false").lower() == "true"
@@ -114,9 +118,11 @@ def _multiline_to_list(s):
 if _admins_str is not None:
     ADMINS = [parseaddr(admin) for admin in _multiline_to_list(_admins_str)]
 else:
-    raise RuntimeError("DATATRACKER_ADMINS must be set")    
+    raise RuntimeError("DATATRACKER_ADMINS must be set")
 
-USING_DEBUG_EMAIL_SERVER = os.environ.get("DATATRACKER_EMAIL_DEBUG", "false").lower() == "true"
+USING_DEBUG_EMAIL_SERVER = (
+    os.environ.get("DATATRACKER_EMAIL_DEBUG", "false").lower() == "true"
+)
 EMAIL_HOST = os.environ.get("DATATRACKER_EMAIL_HOST", "localhost")
 EMAIL_PORT = int(os.environ.get("DATATRACKER_EMAIL_PORT", "2025"))
 
@@ -126,7 +132,7 @@ def _multiline_to_list(s):
 CELERY_BROKER_URL = "amqp://datatracker:{password}@{host}/{queue}".format(
     host=os.environ.get("RABBITMQ_HOSTNAME", "dt-rabbitmq"),
     password=_celery_password,
-    queue=os.environ.get("RABBITMQ_QUEUE", "dt")
+    queue=os.environ.get("RABBITMQ_QUEUE", "dt"),
 )
 
 IANA_SYNC_USERNAME = "ietfsync"
@@ -140,10 +146,10 @@ def _multiline_to_list(s):
     raise RuntimeError("DATATRACKER_REGISTRATION_API_KEY must be set")
 STATS_REGISTRATION_ATTENDEES_JSON_URL = f"https://registration.ietf.org/{{number}}/attendees/?apikey={_registration_api_key}"
 
-#FIRST_CUTOFF_DAYS = 12
-#SECOND_CUTOFF_DAYS = 12
-#SUBMISSION_CUTOFF_DAYS = 26
-#SUBMISSION_CORRECTION_DAYS = 57
+# FIRST_CUTOFF_DAYS = 12
+# SECOND_CUTOFF_DAYS = 12
+# SUBMISSION_CUTOFF_DAYS = 26
+# SUBMISSION_CORRECTION_DAYS = 57
 MEETING_MATERIALS_SUBMISSION_CUTOFF_DAYS = 26
 MEETING_MATERIALS_SUBMISSION_CORRECTION_DAYS = 54
 
@@ -155,7 +161,7 @@ def _multiline_to_list(s):
 if _MEETECHO_CLIENT_ID is not None and _MEETECHO_CLIENT_SECRET is not None:
     MEETECHO_API_CONFIG = {
         "api_base": os.environ.get(
-            "DATATRACKER_MEETECHO_API_BASE", 
+            "DATATRACKER_MEETECHO_API_BASE",
             "https://meetings.conf.meetecho.com/api/v1/",
         ),
         "client_id": _MEETECHO_CLIENT_ID,
@@ -173,7 +179,9 @@ def _multiline_to_list(s):
         raise RuntimeError(
             "Only one of DATATRACKER_APP_API_TOKENS_JSON and DATATRACKER_APP_API_TOKENS_JSON_B64 may be set"
         )
-    _APP_API_TOKENS_JSON = b64decode(os.environ.get("DATATRACKER_APP_API_TOKENS_JSON_B64"))
+    _APP_API_TOKENS_JSON = b64decode(
+        os.environ.get("DATATRACKER_APP_API_TOKENS_JSON_B64")
+    )
 else:
     _APP_API_TOKENS_JSON = os.environ.get("DATATRACKER_APP_API_TOKENS_JSON", None)
 
@@ -189,7 +197,9 @@ def _multiline_to_list(s):
 
 # Leave DATATRACKER_MATOMO_SITE_ID unset to disable Matomo reporting
 if "DATATRACKER_MATOMO_SITE_ID" in os.environ:
-    MATOMO_DOMAIN_PATH = os.environ.get("DATATRACKER_MATOMO_DOMAIN_PATH", "analytics.ietf.org")
+    MATOMO_DOMAIN_PATH = os.environ.get(
+        "DATATRACKER_MATOMO_DOMAIN_PATH", "analytics.ietf.org"
+    )
     MATOMO_SITE_ID = os.environ.get("DATATRACKER_MATOMO_SITE_ID")
     MATOMO_DISABLE_COOKIES = True
 
@@ -197,9 +207,13 @@ def _multiline_to_list(s):
 _SCOUT_KEY = os.environ.get("DATATRACKER_SCOUT_KEY", None)
 if _SCOUT_KEY is not None:
     if SERVER_MODE == "production":
-        PROD_PRE_APPS = ["scout_apm.django", ]
+        PROD_PRE_APPS = [
+            "scout_apm.django",
+        ]
     else:
-        DEV_PRE_APPS = ["scout_apm.django", ]
+        DEV_PRE_APPS = [
+            "scout_apm.django",
+        ]
     SCOUT_MONITOR = True
     SCOUT_KEY = _SCOUT_KEY
     SCOUT_NAME = os.environ.get("DATATRACKER_SCOUT_NAME", "Datatracker")
@@ -216,16 +230,17 @@ def _multiline_to_list(s):
 STATIC_URL = os.environ.get("DATATRACKER_STATIC_URL", None)
 if STATIC_URL is None:
     from ietf import __version__
+
     STATIC_URL = f"https://static.ietf.org/dt/{__version__}/"
 
 # Set these to the same as "production" in settings.py, whether production mode or not
 MEDIA_ROOT = "/a/www/www6s/lib/dt/media/"
-MEDIA_URL  = "https://www.ietf.org/lib/dt/media/"
+MEDIA_URL = "https://www.ietf.org/lib/dt/media/"
 PHOTOS_DIRNAME = "photo"
 PHOTOS_DIR = MEDIA_ROOT + PHOTOS_DIRNAME
 
 # Normally only set for debug, but needed until we have a real FS
-DJANGO_VITE_MANIFEST_PATH = os.path.join(BASE_DIR, 'static/dist-neue/manifest.json')
+DJANGO_VITE_MANIFEST_PATH = os.path.join(BASE_DIR, "static/dist-neue/manifest.json")
 
 # Binaries that are different in the docker image
 DE_GFM_BINARY = "/usr/local/bin/de-gfm"
@@ -235,6 +250,7 @@ def _multiline_to_list(s):
 MEMCACHED_HOST = os.environ.get("DT_MEMCACHED_SERVICE_HOST", "127.0.0.1")
 MEMCACHED_PORT = os.environ.get("DT_MEMCACHED_SERVICE_PORT", "11211")
 from ietf import __version__
+
 CACHES = {
     "default": {
         "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
@@ -285,3 +301,46 @@ def _multiline_to_list(s):
 
 # Console logs as JSON instead of plain when running in k8s
 LOGGING["handlers"]["console"]["formatter"] = "json"
+
+# Configure storages for the blob store
+_blob_store_endpoint_url = os.environ.get("DATATRACKER_BLOB_STORE_ENDPOINT_URL")
+_blob_store_access_key = os.environ.get("DATATRACKER_BLOB_STORE_ACCESS_KEY")
+_blob_store_secret_key = os.environ.get("DATATRACKER_BLOB_STORE_SECRET_KEY")
+if None in (_blob_store_endpoint_url, _blob_store_access_key, _blob_store_secret_key):
+    raise RuntimeError(
+        "All of DATATRACKER_BLOB_STORE_ENDPOINT_URL, DATATRACKER_BLOB_STORE_ACCESS_KEY, "
+        "and DATATRACKER_BLOB_STORE_SECRET_KEY must be set"
+    )
+_blob_store_bucket_prefix = os.environ.get(
+    "DATATRACKER_BLOB_STORE_BUCKET_PREFIX", ""
+)
+_blob_store_enable_profiling = (
+    os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
+)
+_blob_store_max_attempts = (
+    os.environ.get("DATATRACKER_BLOB_STORE_MAX_ATTEMPTS", BLOBSTORAGE_MAX_ATTEMPTS)
+)
+_blob_store_connect_timeout = (
+    os.environ.get("DATATRACKER_BLOB_STORE_CONNECT_TIMEOUT", BLOBSTORAGE_CONNECT_TIMEOUT)
+)
+_blob_store_read_timeout = (
+    os.environ.get("DATATRACKER_BLOB_STORE_READ_TIMEOUT", BLOBSTORAGE_READ_TIMEOUT)
+)
+for storage_name in MORE_STORAGE_NAMES:
+    STORAGES[storage_name] = {
+        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+        "OPTIONS": dict(
+            endpoint_url=_blob_store_endpoint_url,
+            access_key=_blob_store_access_key,
+            secret_key=_blob_store_secret_key,
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=_blob_store_connect_timeout,
+                read_timeout=_blob_store_read_timeout,
+                retries={"total_max_attempts": _blob_store_max_attempts},
+            ),
+            bucket_name=f"{_blob_store_bucket_prefix}{storage_name}".strip(),
+            ietf_log_blob_timing=_blob_store_enable_profiling,
+        ),
+    }
diff --git a/requirements.txt b/requirements.txt
index 073a6bfa0a..66a785e929 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,6 +6,9 @@ beautifulsoup4>=4.11.1    # Only used in tests
 bibtexparser>=1.2.0    # Only used in tests
 bleach>=6
 types-bleach>=6
+boto3>=1.35,<1.36
+boto3-stubs[s3]>=1.35,<1.36
+botocore>=1.35,<1.36
 celery>=5.2.6
 coverage>=4.5.4,<5.0    # Coverage 5.x moves from a json database to SQLite.  Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views
 defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
@@ -21,6 +24,7 @@ django-markup>=1.5    # Limited use - need to reconcile against direct use of ma
 django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
 django-referrer-policy>=1.0
 django-simple-history>=3.0.0
+django-storages>=1.14.4
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
 django-tastypie>=0.14.7,<0.15.0    # Version must be locked in sync with version of Django
 django-vite>=2.0.2,<3
@@ -75,7 +79,7 @@ tblib>=1.7.0    # So that the django test runner provides tracebacks
 tlds>=2022042700    # Used to teach bleach about which TLDs currently exist
 tqdm>=4.64.0
 Unidecode>=1.3.4
-urllib3>=2
+urllib3>=1.26,<2
 weasyprint>=59
 xml2rfc[pdf]>=3.23.0
 xym>=0.6,<1.0

From be7ad9acabca649cd77374e3aea574dfdcebc7d8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 19 Feb 2025 21:42:07 -0400
Subject: [PATCH 249/707] ci: cast env vars to correct types (#8558)

---
 k8s/settings_local.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 912607f466..a0e197b7f5 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -317,13 +317,13 @@ def _multiline_to_list(s):
 _blob_store_enable_profiling = (
     os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
 )
-_blob_store_max_attempts = (
+_blob_store_max_attempts = int(
     os.environ.get("DATATRACKER_BLOB_STORE_MAX_ATTEMPTS", BLOBSTORAGE_MAX_ATTEMPTS)
 )
-_blob_store_connect_timeout = (
+_blob_store_connect_timeout = float(
     os.environ.get("DATATRACKER_BLOB_STORE_CONNECT_TIMEOUT", BLOBSTORAGE_CONNECT_TIMEOUT)
 )
-_blob_store_read_timeout = (
+_blob_store_read_timeout = float(
     os.environ.get("DATATRACKER_BLOB_STORE_READ_TIMEOUT", BLOBSTORAGE_READ_TIMEOUT)
 )
 for storage_name in MORE_STORAGE_NAMES:

From 2f8b9c3cfa157ed14d19b372c877eaed3beb6391 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 20 Feb 2025 13:12:43 -0400
Subject: [PATCH 250/707] fix: ignore exceptions from blobstore ops (#8565)

* fix: ignore exceptions from to blobstore ops

* fix: log repr(err) instead of just err
---
 ietf/doc/storage_utils.py | 67 +++++++++++++++++++++++++++------------
 ietf/utils/storage.py     |  6 ++--
 2 files changed, 49 insertions(+), 24 deletions(-)

diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 4f0516339a..1bc2aa293c 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -8,6 +8,8 @@
 from django.core.files.base import ContentFile, File
 from django.core.files.storage import storages
 
+from ietf.utils.log import log
+
 
 # TODO-BLOBSTORE (Future, maybe after leaving 3.9) : add a return type
 def _get_storage(kind: str):
@@ -22,16 +24,22 @@ def _get_storage(kind: str):
 
 def exists_in_storage(kind: str, name: str) -> bool:
     if settings.ENABLE_BLOBSTORAGE:
-        store = _get_storage(kind)
-        return store.exists_in_storage(kind, name)
+        try:
+            store = _get_storage(kind)
+            return store.exists_in_storage(kind, name)
+        except Exception as err:
+            log(f"Blobstore Error: Failed to test existence of {kind}:{name}: {repr(err)}")
     else:
         return False
 
 
 def remove_from_storage(kind: str, name: str, warn_if_missing: bool = True) -> None:
     if settings.ENABLE_BLOBSTORAGE:
-        store = _get_storage(kind)
-        store.remove_from_storage(kind, name, warn_if_missing)
+        try:
+            store = _get_storage(kind)
+            store.remove_from_storage(kind, name, warn_if_missing)
+        except Exception as err:
+            log(f"Blobstore Error: Failed to remove {kind}:{name}: {repr(err)}")
     return None
 
 
@@ -46,8 +54,11 @@ def store_file(
 ) -> None:
     # debug.show('f"asked to store {name} into {kind}"')
     if settings.ENABLE_BLOBSTORAGE:
-        store = _get_storage(kind)
-        store.store_file(kind, name, file, allow_overwrite, doc_name, doc_rev)
+        try:
+            store = _get_storage(kind)
+            store.store_file(kind, name, file, allow_overwrite, doc_name, doc_rev)
+        except Exception as err:
+            log(f"Blobstore Error: Failed to store file {kind}:{name}: {repr(err)}")
     return None
 
 
@@ -60,7 +71,11 @@ def store_bytes(
     doc_rev: Optional[str] = None,
 ) -> None:
     if settings.ENABLE_BLOBSTORAGE:
-        store_file(kind, name, ContentFile(content), allow_overwrite)
+        try:
+            store_file(kind, name, ContentFile(content), allow_overwrite)
+        except Exception as err:
+            # n.b., not likely to get an exception here because store_file or store_bytes will catch it
+            log(f"Blobstore Error: Failed to store bytes to {kind}:{name}: {repr(err)}")
     return None
 
 
@@ -73,8 +88,12 @@ def store_str(
     doc_rev: Optional[str] = None,
 ) -> None:
     if settings.ENABLE_BLOBSTORAGE:
-        content_bytes = content.encode("utf-8")
-        store_bytes(kind, name, content_bytes, allow_overwrite)
+        try:
+            content_bytes = content.encode("utf-8")
+            store_bytes(kind, name, content_bytes, allow_overwrite)
+        except Exception as err:
+            # n.b., not likely to get an exception here because store_file or store_bytes will catch it
+            log(f"Blobstore Error: Failed to store string to {kind}:{name}: {repr(err)}")
     return None
 
 
@@ -82,22 +101,28 @@ def retrieve_bytes(kind: str, name: str) -> bytes:
     from ietf.doc.storage_backends import maybe_log_timing
     content = b""
     if settings.ENABLE_BLOBSTORAGE:
-        store = _get_storage(kind)
-        with store.open(name) as f:
-            with maybe_log_timing(
-                hasattr(store, "ietf_log_blob_timing") and store.ietf_log_blob_timing,
-                "read",
-                bucket_name=store.bucket_name if hasattr(store, "bucket_name") else "",
-                name=name,
-            ):
-                content = f.read()
+        try:
+            store = _get_storage(kind)
+            with store.open(name) as f:
+                with maybe_log_timing(
+                    hasattr(store, "ietf_log_blob_timing") and store.ietf_log_blob_timing,
+                    "read",
+                    bucket_name=store.bucket_name if hasattr(store, "bucket_name") else "",
+                    name=name,
+                ):
+                    content = f.read()
+        except Exception as err:
+            log(f"Blobstore Error: Failed to read bytes from {kind}:{name}: {repr(err)}")
     return content
 
 
 def retrieve_str(kind: str, name: str) -> str:
     content = ""
     if settings.ENABLE_BLOBSTORAGE:
-        content_bytes = retrieve_bytes(kind, name)
-        # TODO-BLOBSTORE: try to decode all the different ways doc.text() does
-        content = content_bytes.decode("utf-8")
+        try:
+            content_bytes = retrieve_bytes(kind, name)
+            # TODO-BLOBSTORE: try to decode all the different ways doc.text() does
+            content = content_bytes.decode("utf-8")
+        except Exception as err:
+            log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
     return content
diff --git a/ietf/utils/storage.py b/ietf/utils/storage.py
index 9f41f3d50f..42fcf884aa 100644
--- a/ietf/utils/storage.py
+++ b/ietf/utils/storage.py
@@ -41,13 +41,13 @@ def save(self, name, content, max_length=None):
         saved_name = super().save(name, content, max_length)
 
         if settings.ENABLE_BLOBSTORAGE:
-            # Retrieve the content and write to the blob store
-            blob_name = Path(saved_name).name  # strips path
             try:
+                # Retrieve the content and write to the blob store
+                blob_name = Path(saved_name).name  # strips path
                 with self.open(saved_name, "rb") as f:
                     store_file(self.kind, blob_name, f, allow_overwrite=True)
             except Exception as err:
-                log(f"Failed to shadow {saved_name} at {self.kind}:{blob_name}: {err}")
+                log(f"Blobstore Error: Failed to shadow {saved_name} at {self.kind}:{blob_name}: {repr(err)}")
         return saved_name  # includes the path!
 
     def deconstruct(self):

From aeba63bb41a02bab3f4ef043d5ac8d5e38e24b80 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 20 Feb 2025 13:13:44 -0600
Subject: [PATCH 251/707] chore: ensure proper return type (#8566)

* chore: ensure proper return type

* test: comment out (intentionally) failing assertion

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/doc/storage_utils.py       | 3 +--
 ietf/doc/tests_status_change.py | 5 +++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 1bc2aa293c..012efc9071 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -29,8 +29,7 @@ def exists_in_storage(kind: str, name: str) -> bool:
             return store.exists_in_storage(kind, name)
         except Exception as err:
             log(f"Blobstore Error: Failed to test existence of {kind}:{name}: {repr(err)}")
-    else:
-        return False
+    return False
 
 
 def remove_from_storage(kind: str, name: str, warn_if_missing: bool = True) -> None:
diff --git a/ietf/doc/tests_status_change.py b/ietf/doc/tests_status_change.py
index cbdc1a049a..da1a4f1906 100644
--- a/ietf/doc/tests_status_change.py
+++ b/ietf/doc/tests_status_change.py
@@ -564,8 +564,9 @@ def test_initial_submission(self):
         ftp_filepath = Path(settings.FTP_DIR) / "status-changes" / basename
         self.assertFalse(filepath.exists())
         self.assertFalse(ftp_filepath.exists())
-        with self.assertRaises(FileNotFoundError):
-            retrieve_str("statchg",basename)
+        # TODO-BLOBSTORE: next assert is disabled because we currently suppress all exceptions 
+        # with self.assertRaises(FileNotFoundError):
+        #     retrieve_str("statchg",basename)
         r = self.client.post(url,dict(content="Some initial review text\n",submit_response="1"))
         self.assertEqual(r.status_code,302)
         doc = Document.objects.get(name='status-change-imaginary-mid-review')

From 041fa83d21ce7d8320e09a2a08f9c0b7577f6fba Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 20 Feb 2025 16:45:22 -0400
Subject: [PATCH 252/707] chore: handle errors in app-configure-blobstore.py
 (#8567)

---
 docker/scripts/app-configure-blobstore.py | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/docker/scripts/app-configure-blobstore.py b/docker/scripts/app-configure-blobstore.py
index 7b5ce962eb..ae87bf1afe 100755
--- a/docker/scripts/app-configure-blobstore.py
+++ b/docker/scripts/app-configure-blobstore.py
@@ -2,6 +2,8 @@
 # Copyright The IETF Trust 2024, All Rights Reserved
 
 import boto3
+import botocore.config
+import botocore.exceptions
 import os
 import sys
 
@@ -16,13 +18,19 @@ def init_blobstore():
         aws_secret_access_key=os.environ.get("BLOB_STORE_SECRET_KEY", "minio_pass"),
         aws_session_token=None,
         config=botocore.config.Config(signature_version="s3v4"),
-        verify=False,
     )
     for bucketname in MORE_STORAGE_NAMES:
-        blobstore.create_bucket(
-            Bucket=f"{os.environ.get('BLOB_STORE_BUCKET_PREFIX', '')}{bucketname}".strip()
-        )
-
+        try:
+            blobstore.create_bucket(
+                Bucket=f"{os.environ.get('BLOB_STORE_BUCKET_PREFIX', '')}{bucketname}".strip()
+            )
+        except botocore.exceptions.ClientError as err:
+            if err.response["Error"]["Code"] == "BucketAlreadyExists":
+                print(f"Bucket {bucketname} already exists")
+            else:
+                print(f"Error creating {bucketname}: {err.response['Error']['Code']}")
+        else:
+            print(f"Bucket {bucketname} created")
 
 if __name__ == "__main__":
     sys.exit(init_blobstore())

From fb310e5ce209ca3ce1b5e557e8beb795d9b75a02 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 21 Feb 2025 11:49:16 -0400
Subject: [PATCH 253/707] feat: useful error when submission has inconsistent
 date (#8576)

* chore: handle errors in app-configure-blobstore.py

* feat: sensible error for inconsistent <date>
---
 ietf/submit/utils.py   |  9 +++++++--
 ietf/utils/xmldraft.py | 15 ++++++++++++++-
 2 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 3e06f45c54..61274c0116 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -58,7 +58,7 @@
 from ietf.utils.mail import is_valid_email
 from ietf.utils.text import parse_unicode, normalize_text
 from ietf.utils.timezone import date_today
-from ietf.utils.xmldraft import XMLDraft
+from ietf.utils.xmldraft import InvalidMetadataError, XMLDraft
 from ietf.person.name import unidecode_name
 
 
@@ -1201,6 +1201,11 @@ def process_submission_xml(filename, revision):
     if not title:
         raise SubmissionError("Could not extract a valid title from the XML")
     
+    try:
+        document_date = xml_draft.get_creation_date()
+    except InvalidMetadataError as err:
+        raise SubmissionError(str(err)) from err
+
     return {
         "filename": xml_draft.filename,
         "rev": xml_draft.revision,
@@ -1210,7 +1215,7 @@ def process_submission_xml(filename, revision):
             for auth in xml_draft.get_author_list()
         ],
         "abstract": None,  # not supported from XML
-        "document_date": xml_draft.get_creation_date(),
+        "document_date": document_date,
         "pages": None,  # not supported from XML
         "words": None,  # not supported from XML
         "first_two_pages": None,  # not supported from XML
diff --git a/ietf/utils/xmldraft.py b/ietf/utils/xmldraft.py
index c39c4d0a06..73baf917d8 100644
--- a/ietf/utils/xmldraft.py
+++ b/ietf/utils/xmldraft.py
@@ -159,7 +159,16 @@ def parse_creation_date(date_elt):
                 day = today.day
             else:
                 day = 15
-        return datetime.date(year, month, day)
+        try:
+            creation_date = datetime.date(year, month, day)
+        except Exception:
+            raise InvalidMetadataError(
+                "The <date> element in the <front> section specified an incomplete date "
+                "that was not consistent with today's date. If you specify only a year, "
+                "it must be the four-digit current year. To use today's date, omit the "
+                "date tag or use <date/>."
+            )
+        return creation_date
 
     def get_creation_date(self):
         return self.parse_creation_date(self.xmlroot.find("front/date"))
@@ -269,3 +278,7 @@ def parser_msgs(self):
 class InvalidXMLError(Exception):
     """File is not valid XML"""
     pass
+
+
+class InvalidMetadataError(Exception):
+    """XML is well-formed but has invalid metadata"""

From 183cd995aa289632f194bff8b4b9c9b32a042200 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 21 Feb 2025 14:17:56 -0400
Subject: [PATCH 254/707] fix: maintain original TZID letter case (#8577)

---
 ietf/meeting/tests_views.py       | 15 ++++++++++++++-
 ietf/templates/meeting/agenda.ics |  2 +-
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 848c9b7723..519f5f7c2d 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -385,7 +385,20 @@ def test_meeting_agenda(self):
         assert_ical_response_is_valid(self, r)
         self.assertContains(r, "BEGIN:VTIMEZONE")
         self.assertContains(r, "END:VTIMEZONE")
-
+        self.assertContains(r, meeting.time_zone, msg_prefix="time_zone should appear in its original case")
+        self.assertNotEqual(
+            meeting.time_zone,
+            meeting.time_zone.lower(),
+            "meeting needs a mixed-case tz for this test",
+        )
+        self.assertNotContains(r, meeting.time_zone.lower(), msg_prefix="time_zone should not be lower-cased")
+        self.assertNotEqual(
+            meeting.time_zone,
+            meeting.time_zone.upper(),
+            "meeting needs a mixed-case tz for this test",
+        )
+        self.assertNotContains(r, meeting.time_zone.upper(), msg_prefix="time_zone should not be upper-cased")
+    
         # iCal, single group
         r = self.client.get(ical_url + "?show=" + session.group.parent.acronym.upper())
         assert_ical_response_is_valid(self, r)
diff --git a/ietf/templates/meeting/agenda.ics b/ietf/templates/meeting/agenda.ics
index 8bc8222bbe..eb83dd479a 100644
--- a/ietf/templates/meeting/agenda.ics
+++ b/ietf/templates/meeting/agenda.ics
@@ -1,4 +1,4 @@
-{% load humanize tz %}{% autoescape off %}{% timezone schedule.meeting.tz %}{% with tzname=schedule.meeting.time_zone|lower %}{% load ietf_filters textfilters %}{% load cache %}{% cache 1800 ietf_meeting_agenda_ics schedule.meeting.number request.path request.GET %}BEGIN:VCALENDAR
+{% load humanize tz %}{% autoescape off %}{% timezone schedule.meeting.tz %}{% with tzname=schedule.meeting.time_zone %}{% load ietf_filters textfilters %}{% load cache %}{% cache 1800 ietf_meeting_agenda_ics schedule.meeting.number request.path request.GET %}BEGIN:VCALENDAR
 VERSION:2.0
 METHOD:PUBLISH
 PRODID:-//IETF//datatracker.ietf.org ical agenda//EN

From a9a8f9ba0116aea7480e83a2dfc133196cf9280f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 21 Feb 2025 20:08:12 -0400
Subject: [PATCH 255/707] chore(deps): remove pydyf pin, update weasyprint req
 (#8580)

* chore(deps): remove pydyf pin, update weasyprint req

* chore(deps): drop pdf extra from xml2rfc dep

This should come back when we use xml2rfc for PDF generation
---
 requirements.txt | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 66a785e929..d8b6e0742f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -57,7 +57,7 @@ oic>=1.3    # Used only by tests
 Pillow>=9.1.0
 psycopg2>=2.9.6
 pyang>=2.5.3
-pydyf>0.8.0,<0.10.0 # until weasyprint adjusts for 0.10.0 and later
+pydyf>0.8.0
 pyflakes>=2.4.0
 pyopenssl>=22.0.0    # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency
 pyquery>=1.4.3
@@ -80,6 +80,6 @@ tlds>=2022042700    # Used to teach bleach about which TLDs currently exist
 tqdm>=4.64.0
 Unidecode>=1.3.4
 urllib3>=1.26,<2
-weasyprint>=59
-xml2rfc[pdf]>=3.23.0
+weasyprint>=64.1
+xml2rfc>=3.23.0
 xym>=0.6,<1.0

From cb8ef96f364c3e76d6726f12889d534ab1b49a66 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 3 Mar 2025 11:21:39 -0400
Subject: [PATCH 256/707] fix: more submission date feedback; refactor xml2rfc
 log capture (#8621)

* feat: catch and report any <date> parsing error

* refactor: error handling in a more testable way

* fix: no bare `except`

* test: exception cases for test_parse_creation_date

* fix: explicitly reject non-numeric day/year

* test: suppress xml2rfc output in test

* refactor: context manager to capture xml2rfc output

* refactor: more capture_xml2rfc_output usage

* fix: capture_xml2rfc_output exception handling
---
 ietf/submit/utils.py   | 162 ++++++++++++++++++++---------------------
 ietf/utils/tests.py    | 107 ++++++++++++++++++++++++++-
 ietf/utils/xmldraft.py |  66 ++++++++++++-----
 3 files changed, 232 insertions(+), 103 deletions(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 61274c0116..a0c7dd8511 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -58,7 +58,7 @@
 from ietf.utils.mail import is_valid_email
 from ietf.utils.text import parse_unicode, normalize_text
 from ietf.utils.timezone import date_today
-from ietf.utils.xmldraft import InvalidMetadataError, XMLDraft
+from ietf.utils.xmldraft import InvalidMetadataError, XMLDraft, capture_xml2rfc_output
 from ietf.person.name import unidecode_name
 
 
@@ -926,105 +926,101 @@ def render_missing_formats(submission):
     If a txt file already exists, leaves it in place. Overwrites an existing html file
     if there is one.
     """
-    # Capture stdio/stdout from xml2rfc
-    xml2rfc_stdout = io.StringIO()
-    xml2rfc_stderr = io.StringIO()
-    xml2rfc.log.write_out = xml2rfc_stdout
-    xml2rfc.log.write_err = xml2rfc_stderr
-    xml_path = staging_path(submission.name, submission.rev, '.xml')
-    parser = xml2rfc.XmlRfcParser(str(xml_path), quiet=True)
-    try:
-        # --- Parse the xml ---
-        xmltree = parser.parse(remove_comments=False)
-    except Exception as err:
-        raise XmlRfcError(
-            "Error parsing XML",
-            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
-        ) from err
-    # If we have v2, run it through v2v3. Keep track of the submitted version, though.
-    xmlroot = xmltree.getroot()
-    xml_version = xmlroot.get('version', '2')
-    if xml_version == '2':
-        v2v3 = xml2rfc.V2v3XmlWriter(xmltree)
+    with capture_xml2rfc_output() as xml2rfc_logs:
+        xml_path = staging_path(submission.name, submission.rev, '.xml')
+        parser = xml2rfc.XmlRfcParser(str(xml_path), quiet=True)
         try:
-            xmltree.tree = v2v3.convert2to3()
+            # --- Parse the xml ---
+            xmltree = parser.parse(remove_comments=False)
         except Exception as err:
             raise XmlRfcError(
-                "Error converting v2 XML to v3",
-                xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-                xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+                "Error parsing XML",
+                xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
             ) from err
-
-    # --- Prep the xml ---
-    today = date_today()
-    prep = xml2rfc.PrepToolWriter(xmltree, quiet=True, liberal=True, keep_pis=[xml2rfc.V3_PI_TARGET])
-    prep.options.accept_prepped = True
-    prep.options.date = today
-    try:
-        xmltree.tree = prep.prep()
-    except RfcWriterError:
-        raise XmlRfcError(
-            f"Error during xml2rfc prep: {prep.errors}",
-            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
-        )
-    except Exception as err:
-        raise XmlRfcError(
-            "Unexpected error during xml2rfc prep",
-            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
-        ) from err
-
-    # --- Convert to txt ---
-    txt_path = staging_path(submission.name, submission.rev, '.txt')
-    if not txt_path.exists():
-        writer = xml2rfc.TextWriter(xmltree, quiet=True)
-        writer.options.accept_prepped = True
+        # If we have v2, run it through v2v3. Keep track of the submitted version, though.
+        xmlroot = xmltree.getroot()
+        xml_version = xmlroot.get('version', '2')
+        if xml_version == '2':
+            v2v3 = xml2rfc.V2v3XmlWriter(xmltree)
+            try:
+                xmltree.tree = v2v3.convert2to3()
+            except Exception as err:
+                raise XmlRfcError(
+                    "Error converting v2 XML to v3",
+                    xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                    xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
+                ) from err
+    
+        # --- Prep the xml ---
+        today = date_today()
+        prep = xml2rfc.PrepToolWriter(xmltree, quiet=True, liberal=True, keep_pis=[xml2rfc.V3_PI_TARGET])
+        prep.options.accept_prepped = True
+        prep.options.date = today
+        try:
+            xmltree.tree = prep.prep()
+        except RfcWriterError:
+            raise XmlRfcError(
+                f"Error during xml2rfc prep: {prep.errors}",
+                xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
+            )
+        except Exception as err:
+            raise XmlRfcError(
+                "Unexpected error during xml2rfc prep",
+                xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
+            ) from err
+    
+        # --- Convert to txt ---
+        txt_path = staging_path(submission.name, submission.rev, '.txt')
+        if not txt_path.exists():
+            writer = xml2rfc.TextWriter(xmltree, quiet=True)
+            writer.options.accept_prepped = True
+            writer.options.date = today
+            try:
+                writer.write(txt_path)
+            except Exception as err:
+                raise XmlRfcError(
+                    "Error generating text format from XML",
+                    xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                    xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
+                ) from err
+            log.log(
+                'In %s: xml2rfc %s generated %s from %s (version %s)' % (
+                    str(xml_path.parent),
+                    xml2rfc.__version__,
+                    txt_path.name,
+                    xml_path.name,
+                    xml_version,
+                )
+            )
+            # When the blobstores become autoritative - the guard at the
+            # containing if statement needs to be based on the store
+            with Path(txt_path).open("rb") as f:
+                store_file("staging", f"{submission.name}-{submission.rev}.txt", f)
+    
+        # --- Convert to html ---
+        html_path = staging_path(submission.name, submission.rev, '.html')
+        writer = xml2rfc.HtmlWriter(xmltree, quiet=True)
         writer.options.date = today
         try:
-            writer.write(txt_path)
+            writer.write(str(html_path))
         except Exception as err:
             raise XmlRfcError(
-                "Error generating text format from XML",
-            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
+                "Error generating HTML format from XML",
+                xml2rfc_stdout=xml2rfc_logs["stdout"].getvalue(),
+                xml2rfc_stderr=xml2rfc_logs["stderr"].getvalue(),
             ) from err
         log.log(
             'In %s: xml2rfc %s generated %s from %s (version %s)' % (
                 str(xml_path.parent),
                 xml2rfc.__version__,
-                txt_path.name,
+                html_path.name,
                 xml_path.name,
                 xml_version,
             )
         )
-        # When the blobstores become autoritative - the guard at the
-        # containing if statement needs to be based on the store
-        with Path(txt_path).open("rb") as f:
-            store_file("staging", f"{submission.name}-{submission.rev}.txt", f)
-
-    # --- Convert to html ---
-    html_path = staging_path(submission.name, submission.rev, '.html')
-    writer = xml2rfc.HtmlWriter(xmltree, quiet=True)
-    writer.options.date = today
-    try:
-        writer.write(str(html_path))
-    except Exception as err:
-        raise XmlRfcError(
-            "Error generating HTML format from XML",
-            xml2rfc_stdout=xml2rfc_stdout.getvalue(),
-            xml2rfc_stderr=xml2rfc_stderr.getvalue(),
-        ) from err
-    log.log(
-        'In %s: xml2rfc %s generated %s from %s (version %s)' % (
-            str(xml_path.parent),
-            xml2rfc.__version__,
-            html_path.name,
-            xml_path.name,
-            xml_version,
-        )
-    )
     with Path(html_path).open("rb") as f:
         store_file("staging", f"{submission.name}-{submission.rev}.html", f)
 
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 0a1986a608..2dd861cd11 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -23,6 +23,8 @@
 from importlib import import_module
 from textwrap import dedent
 from tempfile import mkdtemp
+from xml2rfc import log as xml2rfc_log
+from xml2rfc.util.date import extract_date as xml2rfc_extract_date
 
 from django.apps import apps
 from django.contrib.auth.models import User
@@ -57,7 +59,7 @@
 from ietf.utils.test_utils import TestCase, unicontent
 from ietf.utils.text import parse_unicode
 from ietf.utils.timezone import timezone_not_near_midnight
-from ietf.utils.xmldraft import XMLDraft
+from ietf.utils.xmldraft import XMLDraft, InvalidMetadataError, capture_xml2rfc_output
 
 class SendingMail(TestCase):
 
@@ -544,7 +546,7 @@ def test_get_refs_v2(self):
     def test_parse_creation_date(self):
         # override date_today to avoid skew when test runs around midnight
         today = datetime.date.today()
-        with patch("ietf.utils.xmldraft.date_today", return_value=today):
+        with capture_xml2rfc_output(), patch("ietf.utils.xmldraft.date_today", return_value=today):
             # Note: using a dict as a stand-in for XML elements, which rely on the get() method
             self.assertEqual(
                 XMLDraft.parse_creation_date({"year": "2022", "month": "11", "day": "24"}),
@@ -590,6 +592,74 @@ def test_parse_creation_date(self):
                 ),
                 datetime.date(today.year, 1 if today.month != 1 else 2, 15),
             )
+            # Some exeception-inducing conditions
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError if a year-only date is not current",
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": str(today.year - 1),
+                        "month": "",
+                        "day": "",
+                    }
+                )
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError for a non-numeric year"
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": "two thousand twenty-five",
+                        "month": "2",
+                        "day": "28",
+                    }
+                )
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError for an invalid month"
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": "2024",
+                        "month": "13",
+                        "day": "28",
+                    }
+                )
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError for a misspelled month"
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": "2024",
+                        "month": "Oktobur",
+                        "day": "28",
+                    }
+                )
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError for an invalid day"
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": "2024",
+                        "month": "feb",
+                        "day": "31",
+                    }
+                )
+            with self.assertRaises(
+                InvalidMetadataError,
+                msg="raise an InvalidMetadataError for a non-numeric day"
+            ):
+                XMLDraft.parse_creation_date(
+                    {
+                        "year": "2024",
+                        "month": "feb",
+                        "day": "twenty-four",
+                    }
+                )
+
 
     def test_parse_docname(self):
         with self.assertRaises(ValueError) as cm:
@@ -671,6 +741,39 @@ def test_render_author_name(self):
             "J. Q.",
         )
 
+    def test_capture_xml2rfc_output(self):
+        """capture_xml2rfc_output reroutes and captures xml2rfc logs"""
+        orig_write_out = xml2rfc_log.write_out
+        orig_write_err = xml2rfc_log.write_err
+        with capture_xml2rfc_output() as outer_log_streams:  # ensure no output
+            # such meta! very Inception!
+            with capture_xml2rfc_output() as inner_log_streams:
+                # arbitrary xml2rfc method that triggers a log, nothing special otherwise
+                xml2rfc_extract_date({"year": "fish"}, datetime.date(2025,3,1))
+            self.assertNotEqual(inner_log_streams, outer_log_streams)
+            self.assertEqual(xml2rfc_log.write_out, outer_log_streams["stdout"], "out stream should be restored")
+            self.assertEqual(xml2rfc_log.write_err, outer_log_streams["stderr"], "err stream should be restored")
+        self.assertEqual(xml2rfc_log.write_out, orig_write_out, "original out stream should be restored")
+        self.assertEqual(xml2rfc_log.write_err, orig_write_err, "original err stream should be restored")
+
+        # don't happen to get any output on stdout and not paranoid enough to force some, just test stderr
+        self.assertGreater(len(inner_log_streams["stderr"].getvalue()), 0, "want output on inner streams")
+        self.assertEqual(len(outer_log_streams["stdout"].getvalue()), 0, "no output on outer streams")
+        self.assertEqual(len(outer_log_streams["stderr"].getvalue()), 0, "no output on outer streams")
+
+    def test_capture_xml2rfc_output_exception_handling(self):
+        """capture_xml2rfc_output restores streams after an exception"""
+        orig_write_out = xml2rfc_log.write_out
+        orig_write_err = xml2rfc_log.write_err
+        with capture_xml2rfc_output() as outer_log_streams:  # ensure no output
+            with self.assertRaises(RuntimeError), capture_xml2rfc_output() as inner_log_streams:
+                raise RuntimeError("nooo")
+            self.assertNotEqual(inner_log_streams, outer_log_streams)
+            self.assertEqual(xml2rfc_log.write_out, outer_log_streams["stdout"], "out stream should be restored")
+            self.assertEqual(xml2rfc_log.write_err, outer_log_streams["stderr"], "err stream should be restored")
+        self.assertEqual(xml2rfc_log.write_out, orig_write_out, "original out stream should be restored")
+        self.assertEqual(xml2rfc_log.write_err, orig_write_err, "original err stream should be restored")
+
 
 class NameTests(TestCase):
 
diff --git a/ietf/utils/xmldraft.py b/ietf/utils/xmldraft.py
index 73baf917d8..3ac9a269c7 100644
--- a/ietf/utils/xmldraft.py
+++ b/ietf/utils/xmldraft.py
@@ -7,7 +7,7 @@
 
 import debug  # pyflakes: ignore
 
-from contextlib import ExitStack
+from contextlib import contextmanager
 from lxml.etree import XMLSyntaxError
 from xml2rfc.util.date import augment_date, extract_date
 from ietf.utils.timezone import date_today
@@ -15,6 +15,21 @@
 from .draft import Draft
 
 
+@contextmanager
+def capture_xml2rfc_output():
+    orig_write_out = xml2rfc.log.write_out
+    orig_write_err = xml2rfc.log.write_err
+    parser_out = io.StringIO()
+    parser_err = io.StringIO()
+    xml2rfc.log.write_out = parser_out
+    xml2rfc.log.write_err = parser_err
+    try:
+        yield {"stdout": parser_out, "stderr": parser_err}
+    finally:
+        xml2rfc.log.write_out = orig_write_out
+        xml2rfc.log.write_err = orig_write_err
+
+
 class XMLDraft(Draft):
     """Draft from XML source
 
@@ -38,27 +53,18 @@ def parse_xml(filename):
         Converts to xml2rfc v3 schema, then returns the root of the v3 tree and the original
         xml version.
         """
-        orig_write_out = xml2rfc.log.write_out
-        orig_write_err = xml2rfc.log.write_err
-        parser_out = io.StringIO()
-        parser_err = io.StringIO()
-
-        with ExitStack() as stack:
-            @stack.callback
-            def cleanup():  # called when context exited, even if there's an exception
-                xml2rfc.log.write_out = orig_write_out
-                xml2rfc.log.write_err = orig_write_err
-
-            xml2rfc.log.write_out = parser_out
-            xml2rfc.log.write_err = parser_err
 
+        with capture_xml2rfc_output() as parser_logs:
             parser = xml2rfc.XmlRfcParser(filename, quiet=True)
             try:
                 tree = parser.parse()
             except XMLSyntaxError:
                 raise InvalidXMLError()
             except Exception as e:
-                raise XMLParseError(parser_out.getvalue(), parser_err.getvalue()) from e
+                raise XMLParseError(
+                    parser_logs["stdout"].getvalue(),
+                    parser_logs["stderr"].getvalue(),
+                ) from e
 
             xml_version = tree.getroot().get('version', '2')
             if xml_version == '2':
@@ -147,10 +153,31 @@ def get_title(self):
     def parse_creation_date(date_elt):
         if date_elt is None:
             return None
+
         today = date_today()
-        # ths mimics handling of date elements in the xml2rfc text/html writers
-        year, month, day = extract_date(date_elt, today)
-        year, month, day = augment_date(year, month, day, today)
+
+        # Outright reject non-numeric year / day (xml2rfc's extract_date does not do this)
+        # (n.b., "year" can be non-numeric in a <reference> section per RFC 7991)
+        year = date_elt.get("year")
+        day = date_elt.get("day")
+        non_numeric_year = year and not year.isdigit()
+        non_numeric_day = day and not day.isdigit()
+        if non_numeric_day or non_numeric_year:
+            raise InvalidMetadataError(
+                "Unable to parse the <date> element in the <front> section: "
+                "year and day must be numeric values if specified."
+            )
+
+        try:
+            # ths mimics handling of date elements in the xml2rfc text/html writers
+            year, month, day = extract_date(date_elt, today)
+            year, month, day = augment_date(year, month, day, today)
+        except Exception as err:
+            # Give a generic error if anything goes wrong so far...
+            raise InvalidMetadataError(
+                "Unable to parse the <date> element in the <front> section."
+            ) from err
+
         if not day:
             # Must choose a day for a datetime.date. Per RFC 7991 sect 2.17, we use
             # today's date if it is consistent with the rest of the date. Otherwise,
@@ -159,9 +186,12 @@ def parse_creation_date(date_elt):
                 day = today.day
             else:
                 day = 15
+
         try:
             creation_date = datetime.date(year, month, day)
         except Exception:
+            # If everything went well, we should have had a valid datetime, but we didn't.
+            # The parsing _worked_ but not in a way that we can go forward with.
             raise InvalidMetadataError(
                 "The <date> element in the <front> section specified an incomplete date "
                 "that was not consistent with today's date. If you specify only a year, "

From 232a861f8ae52e1026d59d7088f07211acd166a5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 3 Mar 2025 14:51:14 -0400
Subject: [PATCH 257/707] chore: config gunicorn secure_scheme_headers (#8632)

* chore: config gunicorn secure_scheme_headers

* chore: typo in comment
---
 dev/build/gunicorn.conf.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 6666a0d37d..032d95ee0d 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -1,5 +1,11 @@
 # Copyright The IETF Trust 2024, All Rights Reserved
 
+# Configure security scheme headers for forwarded requests. Cloudflare sets X-Forwarded-Proto 
+# for us. Don't trust any of the other similar headers. Only trust the header if it's coming
+# from localhost, as all legitimate traffic will reach gunicorn via co-located nginx.
+secure_scheme_headers = {"X-FORWARDED-PROTO": "https"}
+forwarded_allow_ips = "127.0.0.1, ::1"  # this is the default 
+
 # Log as JSON on stdout (to distinguish from Django's logs on stderr)
 #
 # This is applied as an update to gunicorn's glogging.CONFIG_DEFAULTS.

From 554182ef8ab33947ca8d9ee904a5d5472d3c57f8 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 4 Mar 2025 11:42:04 -0600
Subject: [PATCH 258/707] feat: run the docker container as dev (#8606)

* feat: run the docker container as dev

* fix: $@ -> $*

Old bug, but might as well fix it now

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 dev/celery/docker-init.sh | 13 ++++++---
 docker-compose.yml        |  4 ++-
 docker/celery.Dockerfile  | 60 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 72 insertions(+), 5 deletions(-)
 create mode 100644 docker/celery.Dockerfile

diff --git a/dev/celery/docker-init.sh b/dev/celery/docker-init.sh
index 4fd1f1294f..9940dfd7d0 100755
--- a/dev/celery/docker-init.sh
+++ b/dev/celery/docker-init.sh
@@ -49,11 +49,16 @@ if [[ -n "${CELERY_GID}" ]]; then
 fi
 
 run_as_celery_uid () {
-  SU_OPTS=()
-  if [[ -n "${CELERY_GROUP}" ]]; then
-    SU_OPTS+=("-g" "${CELERY_GROUP}")
+  IAM=$(whoami)
+  if [ "${IAM}" = "${CELERY_USERNAME:-root}" ]; then
+    SU_OPTS=()
+    if [[ -n "${CELERY_GROUP}" ]]; then
+      SU_OPTS+=("-g" "${CELERY_GROUP}")
+    fi
+    su "${SU_OPTS[@]}" "${CELERY_USERNAME:-root}" -s /bin/sh -c "$*"
+  else
+    /bin/sh -c "$*"
   fi
-  su "${SU_OPTS[@]}" "${CELERY_USERNAME:-root}" -s /bin/sh -c "$@"
 }
 
 log_term_timing_msgs () {
diff --git a/docker-compose.yml b/docker-compose.yml
index 30ce8ba4d2..9910c02a99 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -67,7 +67,9 @@ services:
         restart: unless-stopped
 
     celery:
-        image: ghcr.io/ietf-tools/datatracker-celery:latest
+        build:
+            context: .
+            dockerfile: docker/celery.Dockerfile
         init: true
         environment:
             CELERY_APP: ietf
diff --git a/docker/celery.Dockerfile b/docker/celery.Dockerfile
new file mode 100644
index 0000000000..e44200398c
--- /dev/null
+++ b/docker/celery.Dockerfile
@@ -0,0 +1,60 @@
+FROM ghcr.io/ietf-tools/datatracker-celery:latest
+LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install needed packages and setup non-root user.
+ARG USERNAME=dev
+ARG USER_UID=1000
+ARG USER_GID=$USER_UID
+COPY docker/scripts/app-setup-debian.sh /tmp/library-scripts/docker-setup-debian.sh
+RUN sed -i 's/\r$//' /tmp/library-scripts/docker-setup-debian.sh && chmod +x /tmp/library-scripts/docker-setup-debian.sh
+
+# Add Postgresql Apt Repository to get 14    
+RUN echo "deb http://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list
+RUN wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
+
+RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get install -y --no-install-recommends postgresql-client-14 pgloader \
+    # Remove imagemagick due to https://security-tracker.debian.org/tracker/CVE-2019-10131
+    && apt-get purge -y imagemagick imagemagick-6-common \
+    # Install common packages, non-root user
+    # Syntax: ./docker-setup-debian.sh [install zsh flag] [username] [user UID] [user GID] [upgrade packages flag] [install Oh My Zsh! flag] [Add non-free packages]
+    && bash /tmp/library-scripts/docker-setup-debian.sh "true" "${USERNAME}" "${USER_UID}" "${USER_GID}" "false" "true" "true"
+
+# Setup default python tools in a venv via pipx to avoid conflicts
+ENV PIPX_HOME=/usr/local/py-utils \
+    PIPX_BIN_DIR=/usr/local/py-utils/bin
+ENV PATH=${PATH}:${PIPX_BIN_DIR}
+COPY docker/scripts/app-setup-python.sh /tmp/library-scripts/docker-setup-python.sh
+RUN sed -i 's/\r$//' /tmp/library-scripts/docker-setup-python.sh && chmod +x /tmp/library-scripts/docker-setup-python.sh
+RUN bash /tmp/library-scripts/docker-setup-python.sh "none" "/usr/local" "${PIPX_HOME}" "${USERNAME}"
+
+# Remove library scripts for final image
+RUN rm -rf /tmp/library-scripts
+
+# Copy the startup file
+COPY dev/celery/docker-init.sh /docker-init.sh
+RUN sed -i 's/\r$//' /docker-init.sh && \
+    chmod +x /docker-init.sh
+
+ENTRYPOINT [ "/docker-init.sh" ]
+
+# Fix user UID / GID to match host
+RUN groupmod --gid $USER_GID $USERNAME \
+    && usermod --uid $USER_UID --gid $USER_GID $USERNAME \
+    && chown -R $USER_UID:$USER_GID /home/$USERNAME \
+    || exit 0
+
+# Switch to local dev user
+USER dev:dev
+
+# Install current datatracker python dependencies
+COPY requirements.txt /tmp/pip-tmp/
+RUN pip3 --disable-pip-version-check --no-cache-dir install --user --no-warn-script-location -r /tmp/pip-tmp/requirements.txt
+RUN pip3 --disable-pip-version-check --no-cache-dir install --user --no-warn-script-location watchdog[watchmedo]
+
+RUN sudo rm -rf /tmp/pip-tmp
+
+VOLUME [ "/assets" ]
+

From cf6340443f7437ac23ff65c981741335a0911363 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Sat, 8 Mar 2025 00:56:14 -0500
Subject: [PATCH 259/707] docs: Update README.md

---
 README.md | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 0ece0eb03b..abebb7ca02 100644
--- a/README.md
+++ b/README.md
@@ -44,6 +44,7 @@
 
 This project is following the standard **Git Feature Workflow** development model. Learn about all the various steps of the development workflow, from creating a fork to submitting a pull request, in the [Contributing](https://github.com/ietf-tools/.github/blob/main/CONTRIBUTING.md) guide.
 
+> [!TIP]  
 > Make sure to read the [Styleguides](https://github.com/ietf-tools/.github/blob/main/CONTRIBUTING.md#styleguides) section to ensure a cohesive code format across the project.
 
 You can submit bug reports, enhancement and new feature requests in the [discussions](https://github.com/ietf-tools/datatracker/discussions) area. Accepted tickets will be converted to issues.
@@ -52,7 +53,8 @@ You can submit bug reports, enhancement and new feature requests in the [discuss
 
 Click the <kbd>Fork</kbd> button in the top-right corner of the repository to create a personal copy that you can work on.
 
-> Note that some GitHub Actions might be enabled by default in your fork. You should disable them by going to **Settings** > **Actions** > **General** and selecting **Disable actions** (then Save).
+> [!NOTE]  
+> Some GitHub Actions might be enabled by default in your fork. You should disable them by going to **Settings** > **Actions** > **General** and selecting **Disable actions** (then Save).
 
 #### Git Cloning Tips
 
@@ -104,7 +106,8 @@ Read the [Docker Dev Environment](docker/README.md) guide to get started.
 
 Nightly database dumps of the datatracker are available as Docker images: `ghcr.io/ietf-tools/datatracker-db:latest`  
 
-> Note that to update the database in your dev environment to the latest version, you should run the `docker/cleandb` script.
+> [!TIP]  
+> In order to update the database in your dev environment to the latest version, you should run the `docker/cleandb` script.
 
 ### Blob storage for dev/test
 
@@ -248,6 +251,7 @@ From a datatracker container, run the command:
 ./ietf/manage.py test --settings=settings_test
 ```
 
+> [!TIP]  
 > You can limit the run to specific tests using the `--pattern` argument.
 
 ### Frontend Tests
@@ -257,11 +261,13 @@ Frontend tests are done via Playwright. There're 2 different type of tests:
 - Tests that test Vue pages / components and run natively without any external dependency.
 - Tests that require a running datatracker instance to test against (usually legacy views).
 
+> [!IMPORTANT]  
 > Make sure you have Node.js 16.x or later installed on your machine.
 
 #### Run Vue Tests
 
-> :warning: All commands below **MUST** be run from the `./playwright` directory, unless noted otherwise.
+> [!WARNING]  
+> All commands below **MUST** be run from the `./playwright` directory, unless noted otherwise.
 
 1. Run **once** to install dependencies on your system:
     ```sh
@@ -294,7 +300,8 @@ Frontend tests are done via Playwright. There're 2 different type of tests:
 
 First, you need to start a datatracker instance (dev or prod), ideally from a docker container, exposing the 8000 port.
 
-> :warning: All commands below **MUST** be run from the `./playwright` directory.
+> [!WARNING]  
+> All commands below **MUST** be run from the `./playwright` directory.
 
 1. Run **once** to install dependencies on your system:
 ```sh

From cf21c4129a3d083980297dcaa82b5fd58bf447f6 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Sat, 8 Mar 2025 00:59:26 -0500
Subject: [PATCH 260/707] docs: Update README.md

---
 docker/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker/README.md b/docker/README.md
index 14fcc38995..f2161a173f 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -4,11 +4,12 @@
 
 1. [Set up Docker](https://docs.docker.com/get-started/) on your preferred platform. On Windows, it is highly recommended to use the [WSL 2 *(Windows Subsystem for Linux)*](https://docs.docker.com/desktop/windows/wsl/) backend.
 
+> [!IMPORTANT]  
 > See the [IETF Tools Windows Dev guide](https://github.com/ietf-tools/.github/blob/main/docs/windows-dev.md) on how to get started when using Windows.
 
 2. On Linux, you must [install Docker Compose manually](https://docs.docker.com/compose/install/linux/#install-the-plugin-manually) and not install Docker Desktop. On Mac and Windows install Docker Desktop which already includes Docker Compose.
 
-2. If you have a copy of the datatracker code checked out already, simply `cd` to the top-level directory.
+3. If you have a copy of the datatracker code checked out already, simply `cd` to the top-level directory.
 
    If not, check out a datatracker branch as usual. We'll check out `main` below, but you can use any branch:
 
@@ -18,7 +19,7 @@
     git checkout main
     ```
 
-3. Follow the instructions for your preferred editor:
+4. Follow the instructions for your preferred editor:
     - [Visual Studio Code](#using-visual-studio-code)
     - [Other Editors / Generic](#using-other-editors--generic)
 
@@ -189,7 +190,6 @@ The content of the source files will be copied into the target `.ics` files. Mak
 
 Because including all assets in the image would significantly increase the file size, they are not included by default. You can however fetch them by running the **Fetch assets via rsync** task in VS Code or run manually the script `docker/scripts/app-rsync-extras.sh`
 
-
 ### Linux file permissions leaking to the host system
 
 If on the host filesystem you have permissions that look like this,

From 06158c05c77b89434197a626d7cfcf04b8b1e14a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 10 Mar 2025 16:28:20 -0400
Subject: [PATCH 261/707] chore: Remove deprecated version from
 docker-compose.extend.yml

---
 .devcontainer/docker-compose.extend.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.devcontainer/docker-compose.extend.yml b/.devcontainer/docker-compose.extend.yml
index 286eefb29c..a92f42bc6d 100644
--- a/.devcontainer/docker-compose.extend.yml
+++ b/.devcontainer/docker-compose.extend.yml
@@ -1,5 +1,3 @@
-version: '3.8'
-
 services:
     app:
         environment:

From 887ec11f3916d19da04dd939a0aa2edd697f91fd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 15 Mar 2025 00:43:17 -0400
Subject: [PATCH 262/707] chore(deps): bump ncipollo/release-action from 1.15.0
 to 1.16.0 (#8594)

Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/ncipollo/release-action/releases)
- [Commits](https://github.com/ncipollo/release-action/compare/v1.15.0...v1.16.0)

---
updated-dependencies:
- dependency-name: ncipollo/release-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a14ea73e9b..9f621e16b7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -97,7 +97,7 @@ jobs:
         echo "IS_RELEASE=true" >> $GITHUB_ENV
         
     - name: Create Draft Release
-      uses: ncipollo/release-action@v1.15.0
+      uses: ncipollo/release-action@v1.16.0
       if: ${{ github.ref_name == 'release' }}
       with:
         prerelease: true
@@ -316,7 +316,7 @@ jobs:
         histCoveragePath: historical-coverage.json
         
     - name: Create Release
-      uses: ncipollo/release-action@v1.15.0
+      uses: ncipollo/release-action@v1.16.0
       if: ${{ env.SHOULD_DEPLOY == 'true' }}
       with:
         allowUpdates: true
@@ -329,7 +329,7 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Update Baseline Coverage
-      uses: ncipollo/release-action@v1.15.0
+      uses: ncipollo/release-action@v1.16.0
       if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
       with:
         allowUpdates: true

From e56c6cae272cb482a6d33f1f7e24c7ba8a48361d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 15 Mar 2025 00:43:47 -0400
Subject: [PATCH 263/707] chore(deps): bump actions/download-artifact from
 4.1.8 to 4.1.9 (#8628)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.8 to 4.1.9.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4.1.8...v4.1.9)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9f621e16b7..123bd5c65a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -185,7 +185,7 @@ jobs:
 
     - name: Download a Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.1.8
+      uses: actions/download-artifact@v4.1.9
       with:
         name: coverage
 
@@ -292,7 +292,7 @@ jobs:
 
     - name: Download Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.1.8
+      uses: actions/download-artifact@v4.1.9
       with:
         name: coverage
 
@@ -407,7 +407,7 @@ jobs:
     - uses: actions/checkout@v4
         
     - name: Download a Release Artifact
-      uses: actions/download-artifact@v4.1.8
+      uses: actions/download-artifact@v4.1.9
       with:
         name: release-${{ env.PKG_VERSION }}
         

From 9db109f692d8592c5407ea82d2c2790eb6006263 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 15 Mar 2025 00:44:18 -0400
Subject: [PATCH 264/707] chore(deps): bump appleboy/ssh-action from 1.2.0 to
 1.2.2 (#8650)

Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action) from 1.2.0 to 1.2.2.
- [Release notes](https://github.com/appleboy/ssh-action/releases)
- [Changelog](https://github.com/appleboy/ssh-action/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/appleboy/ssh-action/compare/7eaf76671a0d7eec5d98ee897acda4f968735a17...2ead5e36573f08b82fbfce1504f1a4b05a647c6f)

---
updated-dependencies:
- dependency-name: appleboy/ssh-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests-az.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index 6d53a121aa..8553563a19 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -38,7 +38,7 @@ jobs:
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
     - name: Remote SSH into VM
-      uses: appleboy/ssh-action@7eaf76671a0d7eec5d98ee897acda4f968735a17
+      uses: appleboy/ssh-action@2ead5e36573f08b82fbfce1504f1a4b05a647c6f
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

From 227b44bfa25036e7d4fea86a72405beb4e53e2ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 15 Mar 2025 00:45:42 -0400
Subject: [PATCH 265/707] chore(deps): bump nanoid (#8649)

Bumps the npm group with 1 update in the /dev/deploy-to-container directory: [nanoid](https://github.com/ai/nanoid).


Updates `nanoid` from 5.0.9 to 5.1.3
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.0.9...5.1.3)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 15 ++++++++-------
 dev/deploy-to-container/package.json      |  2 +-
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index 03327083b1..c4f675527e 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -8,7 +8,7 @@
       "dependencies": {
         "dockerode": "^4.0.4",
         "fs-extra": "^11.3.0",
-        "nanoid": "5.0.9",
+        "nanoid": "5.1.3",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
         "tar": "^7.4.3",
@@ -668,15 +668,16 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.9.tgz",
-      "integrity": "sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q==",
+      "version": "5.1.3",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.3.tgz",
+      "integrity": "sha512-zAbEOEr7u2CbxwoMRlz/pNSpRP0FdAU4pRaYunCdEezWohXFs+a0Xw7RfkKaezMsmSM1vttcLthJtwRnVtOfHQ==",
       "funding": [
         {
           "type": "github",
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "bin": {
         "nanoid": "bin/nanoid.js"
       },
@@ -1612,9 +1613,9 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.0.9.tgz",
-      "integrity": "sha512-Aooyr6MXU6HpvvWXKoVoXwKMs/KyVakWwg7xQfv5/S/RIgJMy0Ifa45H9qqYy7pTCszrHzP21Uk4PZq2HpEM8Q=="
+      "version": "5.1.3",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.3.tgz",
+      "integrity": "sha512-zAbEOEr7u2CbxwoMRlz/pNSpRP0FdAU4pRaYunCdEezWohXFs+a0Xw7RfkKaezMsmSM1vttcLthJtwRnVtOfHQ=="
     },
     "nanoid-dictionary": {
       "version": "5.0.0-beta.1",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 1f54745ebf..8772c568c8 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -4,7 +4,7 @@
   "dependencies": {
     "dockerode": "^4.0.4",
     "fs-extra": "^11.3.0",
-    "nanoid": "5.0.9",
+    "nanoid": "5.1.3",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",
     "tar": "^7.4.3",

From 968820de34bdf6d0c1fd69b921ed490da725b941 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sat, 15 Mar 2025 14:45:04 +0700
Subject: [PATCH 266/707] feat: celery task + admin to resend Messages (#8661)

* feat: Message re-send task

* feat: admin action to queue redelivery

* feat: MessageAdmin list_filters

* feat: show sent status

* feat: better date filtering

* chore: remove send-by-date task

Adds complexity and risk - the improved Messages admin lets us do most of what it did without the opportunity for accidentally resending huge ranges

* chore: fill in empty docstring

* style: black

* fix: unused import

* feat: better logging

* chore: mypy lint

* test: test retry_send_messages_by_pk_task

* test: test retry_send_messages
---
 ietf/message/admin.py          | 79 +++++++++++++++++++++++++++++++---
 ietf/message/tasks.py          | 24 ++++++++++-
 ietf/message/tests.py          | 59 +++++++++++++++++++++++--
 ietf/message/utils.py          | 36 ++++++++++++++--
 ietf/settings.py               |  1 +
 ietf/templates/admin/base.html |  1 +
 requirements.txt               |  1 +
 7 files changed, 187 insertions(+), 14 deletions(-)

diff --git a/ietf/message/admin.py b/ietf/message/admin.py
index c2564c04b9..250e1eb596 100644
--- a/ietf/message/admin.py
+++ b/ietf/message/admin.py
@@ -1,32 +1,99 @@
-from django.contrib import admin
+# Copyright The IETF Trust 2012-2025, All Rights Reserved
+from django.contrib import admin, messages
+from django.db.models import QuerySet
+from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
 
 from ietf.message.models import Message, MessageAttachment, SendQueue, AnnouncementFrom
+from ietf.message.tasks import retry_send_messages_by_pk_task
+
+
+class MessageSentStatusListFilter(admin.SimpleListFilter):
+    """Filter Messages by whether or not they were sent"""
+
+    title = "status"
+    parameter_name = "status"
+
+    def lookups(self, request, model_admin):
+        return [
+            ("sent", "Sent"),
+            ("unsent", "Not sent"),
+        ]
+
+    def queryset(self, request, queryset):
+        if self.value() == "unsent":
+            return queryset.filter(sent__isnull=True)
+        elif self.value() == "sent":
+            return queryset.filter(sent__isnull=False)
+
 
 class MessageAdmin(admin.ModelAdmin):
-    list_display = ["subject", "by", "time", "groups"]
+    list_display = ["sent_status", "subject", "by", "time", "groups"]
     search_fields = ["subject", "body"]
     raw_id_fields = ["by", "related_groups", "related_docs"]
+    list_filter = [
+        MessageSentStatusListFilter,
+        ("time", DateRangeQuickSelectListFilterBuilder()),
+    ]
     ordering = ["-time"]
+    actions = ["retry_send"]
 
     def groups(self, instance):
         return ", ".join(g.acronym for g in instance.related_groups.all())
+
+    @admin.display(description="Sent", boolean=True)
+    def sent_status(self, instance):
+        return instance.sent is not None
+
+    @admin.action(description="Send selected messages if unsent")
+    def retry_send(self, request, queryset: QuerySet[Message]):
+        try:
+            retry_send_messages_by_pk_task.delay(
+                message_pks=list(queryset.values_list("pk", flat=True)),
+                resend=False,
+            )
+        except Exception as err:
+            self.message_user(
+                request,
+                f"Error: {repr(err)}",
+                messages.ERROR,
+            )
+        else:
+            self.message_user(request, "Messages queued for delivery", messages.SUCCESS)
+
+
 admin.site.register(Message, MessageAdmin)
 
+
 class MessageAttachmentAdmin(admin.ModelAdmin):
-    list_display = ['id', 'message', 'filename', 'removed',]
-    raw_id_fields = ['message']
+    list_display = [
+        "id",
+        "message",
+        "filename",
+        "removed",
+    ]
+    raw_id_fields = ["message"]
+
+
 admin.site.register(MessageAttachment, MessageAttachmentAdmin)
 
+
 class SendQueueAdmin(admin.ModelAdmin):
     list_display = ["time", "by", "message", "send_at", "sent_at"]
     list_filter = ["time", "send_at", "sent_at"]
     search_fields = ["message__body"]
     raw_id_fields = ["by", "message"]
     ordering = ["-time"]
+
+
 admin.site.register(SendQueue, SendQueueAdmin)
 
+
 class AnnouncementFromAdmin(admin.ModelAdmin):
-    list_display = ['name', 'group', 'address', ]
-admin.site.register(AnnouncementFrom, AnnouncementFromAdmin)
+    list_display = [
+        "name",
+        "group",
+        "address",
+    ]
 
 
+admin.site.register(AnnouncementFrom, AnnouncementFromAdmin)
diff --git a/ietf/message/tasks.py b/ietf/message/tasks.py
index efd776b9d8..1fdff7bea4 100644
--- a/ietf/message/tasks.py
+++ b/ietf/message/tasks.py
@@ -5,8 +5,8 @@
 from celery import shared_task
 from smtplib import SMTPException
 
-from ietf.message.utils import send_scheduled_message_from_send_queue
-from ietf.message.models import SendQueue
+from ietf.message.utils import send_scheduled_message_from_send_queue, retry_send_messages
+from ietf.message.models import SendQueue, Message
 from ietf.utils import log
 from ietf.utils.mail import log_smtp_exception, send_error_email
 
@@ -25,3 +25,23 @@ def send_scheduled_mail_task():
         except SMTPException as e:
             log_smtp_exception(e)
             send_error_email(e)
+
+
+@shared_task
+def retry_send_messages_by_pk_task(message_pks: list, resend=False):
+    """Task to retry sending Messages by PK
+    
+    Sends Messages whose PK is included in the list.
+    Only previously unsent messages are sent unless `resend` is true.
+    """
+    log.log(
+        "retry_send_messages_by_pk_task: "
+        "retrying send of Message PKs [{}] (resend={})".format(
+            ", ".join(str(pk) for pk in message_pks),
+            resend,
+        )
+    )
+    retry_send_messages(
+        messages=Message.objects.filter(pk__in=message_pks),
+        resend=resend,
+    )
diff --git a/ietf/message/tests.py b/ietf/message/tests.py
index 7fbd29167c..a677d5477e 100644
--- a/ietf/message/tests.py
+++ b/ietf/message/tests.py
@@ -11,10 +11,10 @@
 import debug                            # pyflakes:ignore
 
 from ietf.group.factories import GroupFactory
-from ietf.message.factories import SendQueueFactory
+from ietf.message.factories import MessageFactory, SendQueueFactory
 from ietf.message.models import Message, SendQueue
-from ietf.message.tasks import send_scheduled_mail_task
-from ietf.message.utils import send_scheduled_message_from_send_queue
+from ietf.message.tasks import send_scheduled_mail_task, retry_send_messages_by_pk_task
+from ietf.message.utils import send_scheduled_message_from_send_queue, retry_send_messages
 from ietf.person.models import Person
 from ietf.utils.mail import outbox, send_mail_text, send_mail_message, get_payload_text
 from ietf.utils.test_utils import TestCase
@@ -133,6 +133,44 @@ def test_send_mime_announcement(self):
         self.assertTrue(SendQueue.objects.get(id=q.id).sent_at)
 
 
+class UtilsTests(TestCase):
+    @mock.patch("ietf.message.utils.send_mail_message")
+    def test_retry_send_messages(self, mock_send_mail_message):
+        sent_message = MessageFactory(sent=timezone.now())
+        unsent_messages = MessageFactory.create_batch(2, sent=None)
+        
+        # Send the sent message and one of the unsent messages
+        retry_send_messages(
+            Message.objects.filter(pk__in=[
+                sent_message.pk,
+                unsent_messages[0].pk,
+            ]),
+            resend=False,
+        )
+        self.assertEqual(mock_send_mail_message.call_count, 1)
+        self.assertEqual(
+            mock_send_mail_message.call_args.args[1],
+            unsent_messages[0],
+        )
+        
+        mock_send_mail_message.reset_mock()
+        # Once again, send the sent message and one of the unsent messages 
+        # (we can use the same one because our mock prevented it from having
+        # its status updated to sent)
+        retry_send_messages(
+            Message.objects.filter(pk__in=[
+                sent_message.pk,
+                unsent_messages[0].pk,
+            ]),
+            resend=True,
+        )
+        self.assertEqual(mock_send_mail_message.call_count, 2)
+        self.assertCountEqual(
+            [call_args.args[1] for call_args in mock_send_mail_message.call_args_list],
+            [sent_message, unsent_messages[0]],
+        )
+
+
 class TaskTests(TestCase):
     @mock.patch("ietf.message.tasks.log_smtp_exception")
     @mock.patch("ietf.message.tasks.send_scheduled_message_from_send_queue")
@@ -150,3 +188,18 @@ def test_send_scheduled_mail_task(self, mock_send_message, mock_log_smtp_excepti
         self.assertEqual(mock_send_message.call_count, 1)
         self.assertEqual(mock_send_message.call_args[0], (not_yet_sent,))
         self.assertTrue(mock_log_smtp_exception.called)
+
+    @mock.patch("ietf.message.tasks.retry_send_messages")
+    def test_retry_send_messages_by_pk_task(self, mock_retry_send):
+        msgs = MessageFactory.create_batch(3)
+        MessageFactory()  # an extra message that won't be resent
+
+        retry_send_messages_by_pk_task([msg.pk for msg in msgs], resend=False)
+        called_with_messages = mock_retry_send.call_args.kwargs["messages"]
+        self.assertCountEqual(msgs, called_with_messages)
+        self.assertFalse(mock_retry_send.call_args.kwargs["resend"])
+
+        retry_send_messages_by_pk_task([msg.pk for msg in msgs], resend=True)
+        called_with_messages = mock_retry_send.call_args.kwargs["messages"]
+        self.assertCountEqual(msgs, called_with_messages)
+        self.assertTrue(mock_retry_send.call_args.kwargs["resend"])
diff --git a/ietf/message/utils.py b/ietf/message/utils.py
index 2601eccab8..74448ca7c9 100644
--- a/ietf/message/utils.py
+++ b/ietf/message/utils.py
@@ -1,13 +1,17 @@
 # Copyright The IETF Trust 2012-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 
+import email
+import email.utils
+import re
+import smtplib
 
-import re, email
-
+from django.db.models import QuerySet
 from django.utils import timezone
 from django.utils.encoding import force_str
 
-from ietf.utils.mail import send_mail_text, send_mail_mime
+from ietf.utils import log
+from ietf.utils.mail import send_mail_text, send_mail_mime, send_mail_message
 from ietf.message.models import Message
 
 first_dot_on_line_re = re.compile(r'^\.', re.MULTILINE)
@@ -58,3 +62,29 @@ def send_scheduled_message_from_send_queue(queue_item):
 
     queue_item.message.sent = queue_item.sent_at
     queue_item.message.save()
+
+
+def retry_send_messages(messages: QuerySet[Message], resend=False):
+    """Attempt delivery of Messages"""
+    if not resend:
+        # only include sent messages on explicit request
+        for already_sent in messages.filter(sent__isnull=False):
+            assert already_sent.sent is not None  # appease mypy type checking
+            log.log(
+                f"retry_send_messages: skipping {already_sent.pk} "
+                f"(already sent {already_sent.sent.isoformat(timespec='milliseconds')})"
+            )
+        messages = messages.filter(sent__isnull=True)
+    for msg in messages:
+        to = ",".join(a[1] for a in email.utils.getaddresses([msg.to]))
+        try:
+            send_mail_message(None, msg)
+            log.log(
+                f'retry_send_messages: '
+                f'sent {msg.pk} {msg.frm} -> {to} "{msg.subject.strip()}"'
+            )
+        except smtplib.SMTPException as e:
+            log.log(
+                f'retry_send_messages: '
+                f'Failure {e}:  {msg.pk}  {msg.frm} -> {to}  "{msg.subject.strip()}"'
+            )
diff --git a/ietf/settings.py b/ietf/settings.py
index faee42237c..1fe5f48229 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -465,6 +465,7 @@ def skip_unreadable_post(record):
     'drf_spectacular',
     'drf_standardized_errors',
     'rest_framework',
+    'rangefilter',
     'simple_history',
     'tastypie',
     'widget_tweaks',
diff --git a/ietf/templates/admin/base.html b/ietf/templates/admin/base.html
index 9ca7377a54..d48891dfc4 100644
--- a/ietf/templates/admin/base.html
+++ b/ietf/templates/admin/base.html
@@ -20,6 +20,7 @@
                 --header-color: var(--bs-secondary);
                 --breadcrumbs-fg: var(--bs-secondary);
                 --breadcrumbs-link-fg: var(--link-fg);
+                .calendar caption { background-color: var(--secondary);}
             }
             span.text-danger { color: var(--bs-danger); }
         </style>
diff --git a/requirements.txt b/requirements.txt
index d8b6e0742f..8bd906c220 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,6 +13,7 @@ celery>=5.2.6
 coverage>=4.5.4,<5.0    # Coverage 5.x moves from a json database to SQLite.  Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views
 defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
 Django>4.2,<5
+django-admin-rangefilter>=0.13.2
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
 django-celery-beat>=2.3.0

From 48211414dfc992e4a51f0d2de9183eab5c44dad0 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Sat, 15 Mar 2025 07:58:06 +0000
Subject: [PATCH 267/707] ci: update base image target version to 20250315T0745

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 852ba43c80..2b02a091c5 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250128T1728
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250315T0745
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index fbc9426744..e6f490b168 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250128T1728
+20250315T0745

From 200d2bd164224694c0524e734ea6e46b62f3998a Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Sat, 15 Mar 2025 04:23:35 -0400
Subject: [PATCH 268/707] fix(review_info template): display correct date for
 I-D to be reviewed

---
 ietf/templates/doc/review/request_info.html | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/doc/review/request_info.html b/ietf/templates/doc/review/request_info.html
index ee46916b43..9ad126d59e 100644
--- a/ietf/templates/doc/review/request_info.html
+++ b/ietf/templates/doc/review/request_info.html
@@ -96,7 +96,7 @@
                 </td>
             </tr>
         {% endif %}
-        {% if doc.time %}
+        {% if review_req.doc.time %}
             <tr>
                 <th scope="row">
                 </th>
@@ -104,7 +104,10 @@
                     I-D last updated
                 </th>
                 <td>
-                    {{ doc.time|date:"Y-m-d" }}
+                    {{ review_req.doc.time|date:"Y-m-d" }}
+                    {% if review_req.doc.pub_date %}
+                        <span class="text-body-secondary">(Latest revision {{ review_req.doc.pub_date|date:"Y-m-d" }})</span>
+                    {% endif %}
                 </td>
             </tr>
         {% endif %}

From 603938a9b6438ce78caea13272e61c0e15546478 Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Sat, 15 Mar 2025 05:19:12 -0400
Subject: [PATCH 269/707] chore: Add IETF to "Last Call Expired" email Subject
 (#8675)

No need to change the test.
Fixes: #8526
---
 ietf/doc/mails.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/doc/mails.py b/ietf/doc/mails.py
index c1e2074bc0..ddecbb6b54 100644
--- a/ietf/doc/mails.py
+++ b/ietf/doc/mails.py
@@ -568,7 +568,7 @@ def email_last_call_expired(doc):
     send_mail(None,
               addrs.to,
               "DraftTracker Mail System <iesg-secretary@ietf.org>",
-              "Last Call Expired: %s" % doc.file_tag(),
+              "IETF Last Call Expired: %s" % doc.file_tag(),
               "doc/mail/change_notice.txt",
               dict(text=text,
                    doc=doc,

From 9eb5b2fa8e25c68ec927b82008d61c8e38be354c Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Sat, 15 Mar 2025 05:23:16 -0400
Subject: [PATCH 270/707] fix(agenda): always render session row if rendering a
 new date row when filtering (#8672)

---
 client/agenda/AgendaScheduleList.vue | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 905677b4da..ab0f6e0184 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -253,6 +253,7 @@ const meetingEvents = computed(() => {
 
     // -> Add date row
     const itemDate = DateTime.fromISO(item.adjustedStartDate)
+    let willRenderDateRow = false
     if (itemDate.toISODate() !== acc.lastDate) {
       acc.result.push({
         id: item.id,
@@ -262,12 +263,13 @@ const meetingEvents = computed(() => {
         date: itemDate.toLocaleString(DateTime.DATE_HUGE),
         cssClasses: 'agenda-table-display-day'
       })
+      willRenderDateRow = true
     }
     acc.lastDate = itemDate.toISODate()
 
     // -> Add session header row
     const typeName = `${item.type}-${item.slotName}`
-    if (item.type === 'regular' && acc.lastTypeName !== typeName) {
+    if (item.type === 'regular' && (acc.lastTypeName !== typeName || willRenderDateRow)) {
       acc.result.push({
         key: `sesshd-${item.id}`,
         displayType: 'session-head',

From 4bf1b938724abb775a5e9532740934dfa9a4dc40 Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Sat, 15 Mar 2025 05:38:23 -0400
Subject: [PATCH 271/707] fix: Set Review Type Name for IETF Last Call (#8678)

---
 ietf/name/fixtures/names.json               |  4 ++--
 ietf/name/migrations/0015_last_call_name.py | 22 +++++++++++++++++++++
 2 files changed, 24 insertions(+), 2 deletions(-)
 create mode 100644 ietf/name/migrations/0015_last_call_name.py

diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 8f1262b4cf..96273fbc35 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -2628,7 +2628,7 @@
       "used": true
     },
     "model": "doc.state",
-    "pk": 182
+    "pk": 181
   },
   {
     "fields": {
@@ -13210,7 +13210,7 @@
   {
     "fields": {
       "desc": "",
-      "name": "Last Call",
+      "name": "IETF Last Call",
       "order": 2,
       "used": true
     },
diff --git a/ietf/name/migrations/0015_last_call_name.py b/ietf/name/migrations/0015_last_call_name.py
new file mode 100644
index 0000000000..ac210a274f
--- /dev/null
+++ b/ietf/name/migrations/0015_last_call_name.py
@@ -0,0 +1,22 @@
+# Copyright 2025, IETF Trust
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    ReviewTypeName = apps.get_model("name", "ReviewTypeName")
+    ReviewTypeName.objects.filter(slug="lc").update(name="IETF Last Call")
+
+def reverse(apps, schema_editor):
+    ReviewTypeName = apps.get_model("name", "ReviewTypeName")
+    ReviewTypeName.objects.filter(slug="lc").update(name="Last Call")
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("name", "0014_change_legacy_stream_desc"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse)
+    ]

From 44bb285836e032acb15d38febc82f4495a6dd9e8 Mon Sep 17 00:00:00 2001
From: Jim Fenton <fenton@bluepopcorn.net>
Date: Sun, 16 Mar 2025 14:37:56 +0700
Subject: [PATCH 272/707] fix: use correct variable to decide to show meeting
 notes (#8674)

* fix: use correct variable to decide to show session notes

* Correct number of lines for selftests

* fix: adjust test to match

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/meeting/tests_views.py                   | 28 +++++++++++--------
 .../meeting/session_details_panel.html        |  2 +-
 2 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 519f5f7c2d..59d7e49f7f 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -424,37 +424,41 @@ def test_meeting_agenda(self):
         self.assertEqual(r.status_code, 200)
 
     def test_session_recordings_via_factories(self):
-        session = SessionFactory(meeting__type_id="ietf", meeting__date=date_today()-datetime.timedelta(days=180))
+        session = SessionFactory(meeting__type_id="ietf", meeting__date=date_today()-datetime.timedelta(days=180), meeting__number=str(random.randint(108,150)))
         self.assertEqual(session.meetecho_recording_name, "")
         self.assertEqual(len(session.recordings()), 0)
         url = urlreverse("ietf.meeting.views.session_details", kwargs=dict(num=session.meeting.number, acronym=session.group.acronym))
         r = self.client.get(url)
         q = PyQuery(r.content)
         # debug.show("q(f'#notes_and_recordings_{session.pk}')")
-        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 1)
-        link = q(f"#notes_and_recordings_{session.pk} tr a")
-        self.assertEqual(len(link), 1)
-        self.assertEqual(link[0].attrib['href'], str(session.session_recording_url()))
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 2)
+        links = q(f"#notes_and_recordings_{session.pk} tr a")
+        self.assertEqual(len(links), 2)
+        self.assertEqual(links[0].attrib['href'], str(session.notes_url()))
+        self.assertEqual(links[1].attrib['href'], str(session.session_recording_url()))
 
         session.meetecho_recording_name = 'my_test_session_name'
         session.save()
         r = self.client.get(url)
         q = PyQuery(r.content)
-        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 1)
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 2)
         links = q(f"#notes_and_recordings_{session.pk} tr a")
-        self.assertEqual(len(links), 1)
-        self.assertEqual(links[0].attrib['href'], session.session_recording_url())
+        self.assertEqual(len(links), 2)
+        self.assertEqual(links[0].attrib['href'], str(session.notes_url()))
+        self.assertEqual(links[1].attrib['href'], str(session.session_recording_url()))
 
         new_recording_url = "https://www.youtube.com/watch?v=jNQXAC9IVRw"
         new_recording_title = "Me at the zoo"
         create_recording(session, new_recording_url, new_recording_title)
         r = self.client.get(url)
         q = PyQuery(r.content)
-        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 2)
+        self.assertEqual(len(q(f"#notes_and_recordings_{session.pk} tr")), 3)
         links = q(f"#notes_and_recordings_{session.pk} tr a")
-        self.assertEqual(len(links), 2)
-        self.assertEqual(links[0].attrib['href'], new_recording_url)
-        self.assertIn(new_recording_title, links[0].text_content())
+        self.assertEqual(len(links), 3)
+        self.assertEqual(links[0].attrib['href'], str(session.notes_url()))
+        self.assertEqual(links[1].attrib['href'], new_recording_url)
+        self.assertIn(new_recording_title, links[1].text_content())
+        self.assertEqual(links[2].attrib['href'], str(session.session_recording_url()))
         #debug.show("q(f'#notes_and_recordings_{session_pk}')")
 
     def test_delete_recordings(self):
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index 9b7a192f05..87d9e3d672 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -310,7 +310,7 @@ <h3 class="mt-4">Notes and recordings</h3>
         <table class="table table-sm table-striped meeting-tools"
                id="notes_and_recordings_{{ session.pk }}">
             <tbody>
-            {% if session.uses_notes %}
+            {% if meeting.uses_notes %}
                 <tr>
                     <td>
                         <a href="{{ session.notes_url }}">

From 2cb2ad15ba8500acb79b8dc62fd1903ad127a385 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Mar 2025 17:09:38 -0400
Subject: [PATCH 273/707] chore(deps): bump nanoid in /dev/deploy-to-container
 in the npm group (#8689)

Bumps the npm group in /dev/deploy-to-container with 1 update: [nanoid](https://github.com/ai/nanoid).


Updates `nanoid` from 5.1.3 to 5.1.4
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.1.3...5.1.4)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 14 +++++++-------
 dev/deploy-to-container/package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index c4f675527e..f4ce2c367c 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -8,7 +8,7 @@
       "dependencies": {
         "dockerode": "^4.0.4",
         "fs-extra": "^11.3.0",
-        "nanoid": "5.1.3",
+        "nanoid": "5.1.4",
         "nanoid-dictionary": "5.0.0-beta.1",
         "slugify": "1.6.6",
         "tar": "^7.4.3",
@@ -668,9 +668,9 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.3.tgz",
-      "integrity": "sha512-zAbEOEr7u2CbxwoMRlz/pNSpRP0FdAU4pRaYunCdEezWohXFs+a0Xw7RfkKaezMsmSM1vttcLthJtwRnVtOfHQ==",
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.4.tgz",
+      "integrity": "sha512-GTFcMIDgR7tqji/LpSY8rtg464VnJl/j6ypoehYnuGb+Y8qZUdtKB8WVCXon0UEZgFDbuUxpIl//6FHLHgXSNA==",
       "funding": [
         {
           "type": "github",
@@ -1613,9 +1613,9 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.1.3",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.3.tgz",
-      "integrity": "sha512-zAbEOEr7u2CbxwoMRlz/pNSpRP0FdAU4pRaYunCdEezWohXFs+a0Xw7RfkKaezMsmSM1vttcLthJtwRnVtOfHQ=="
+      "version": "5.1.4",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.4.tgz",
+      "integrity": "sha512-GTFcMIDgR7tqji/LpSY8rtg464VnJl/j6ypoehYnuGb+Y8qZUdtKB8WVCXon0UEZgFDbuUxpIl//6FHLHgXSNA=="
     },
     "nanoid-dictionary": {
       "version": "5.0.0-beta.1",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 8772c568c8..eb8cb9012a 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -4,7 +4,7 @@
   "dependencies": {
     "dockerode": "^4.0.4",
     "fs-extra": "^11.3.0",
-    "nanoid": "5.1.3",
+    "nanoid": "5.1.4",
     "nanoid-dictionary": "5.0.0-beta.1",
     "slugify": "1.6.6",
     "tar": "^7.4.3",

From 8af0dc457f4dda714046b6151a722e7d20b1a55d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 18 Mar 2025 08:30:52 +0700
Subject: [PATCH 274/707] fix: add doc to raw_id_fields for
 SlideSubmissionAdmin (#8687)

---
 ietf/meeting/admin.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/meeting/admin.py b/ietf/meeting/admin.py
index e975dd38a6..b7e56c7b77 100644
--- a/ietf/meeting/admin.py
+++ b/ietf/meeting/admin.py
@@ -189,7 +189,7 @@ class ImportantDateAdmin(admin.ModelAdmin):
 class SlideSubmissionAdmin(admin.ModelAdmin):
     model = SlideSubmission
     list_display = ['session', 'submitter', 'title']
-    raw_id_fields = ['submitter', 'session']
+    raw_id_fields = ['submitter', 'session', 'doc']
 
 admin.site.register(SlideSubmission, SlideSubmissionAdmin)
 

From 563fcee3a80d5036c9c490a794f31a78bd7a8e90 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 18 Mar 2025 14:53:38 +0700
Subject: [PATCH 275/707] fix: approve slides link for all pending submissions
 (#8692)

* test: slide approval links shown for all sessions

* fix: suggest pending slides for all sessions

* refactor: flatten logic

* refactor: avoid extra exists() query

* test: update test comment

* test: only pending slides suggested for approval

* style: Black

* test: temp path override for SessionDetailsTests
---
 ietf/meeting/tests_views.py                 | 80 +++++++++++++++++++++
 ietf/meeting/views.py                       | 14 ++--
 ietf/templates/meeting/session_details.html | 34 +++++----
 3 files changed, 104 insertions(+), 24 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 59d7e49f7f..111584cc56 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -4527,6 +4527,7 @@ def test_persistent_enabled_timeslot_types(self):
 
 
 class SessionDetailsTests(TestCase):
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['SLIDE_STAGING_PATH']
 
     def test_session_details(self):
 
@@ -4659,6 +4660,85 @@ def test_add_session_drafts(self):
         q = PyQuery(r.content)
         self.assertEqual(1,len(q(".alert-warning:contains('may affect published proceedings')")))
 
+    def test_proposed_slides_for_approval(self):
+        # This test overlaps somewhat with MaterialsTests of proposed slides handling. The focus
+        # here is on the display of slides, not the approval action.
+        group = GroupFactory()
+        meeting = MeetingFactory(
+            type_id="ietf", date=date_today() + datetime.timedelta(days=10)
+        )
+        sessions = SessionFactory.create_batch(
+            2,
+            group=group,
+            meeting=meeting,
+        )
+    
+        # slides submission _not_ in the `pending` state
+        do_not_show = [
+            SlideSubmissionFactory(
+                session=sessions[0],
+                title="already approved",
+                status_id="approved",
+            ),
+            SlideSubmissionFactory(
+                session=sessions[1],
+                title="already rejected",
+                status_id="rejected",
+            ),
+        ]
+    
+        # pending submissions
+        first_session_pending = SlideSubmissionFactory(
+            session=sessions[0], title="first session title"
+        )
+        second_session_pending = SlideSubmissionFactory(
+            session=sessions[1], title="second session title"
+        )
+    
+        # and their approval URLs
+        def _approval_url(slidesub):
+            return urlreverse(
+                "ietf.meeting.views.approve_proposed_slides",
+                kwargs={"slidesubmission_id": slidesub.pk, "num": meeting.number},
+            )
+    
+        first_approval_url = _approval_url(first_session_pending)
+        second_approval_url = _approval_url(second_session_pending)
+        do_not_show_urls = [_approval_url(ss) for ss in do_not_show]
+    
+        # Retrieve the URL as a group chair
+        url = urlreverse(
+            "ietf.meeting.views.session_details",
+            kwargs={
+                "num": meeting.number,
+                "acronym": group.acronym,
+            },
+        )
+        chair = RoleFactory(group=group, name_id="chair").person
+        self.client.login(
+            username=chair.user.username, password=f"{chair.user.username}+password"
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        pq = PyQuery(r.content)
+        self.assertEqual(
+            len(pq(f'a[href="{first_approval_url}"]')),
+            1,
+            "first session proposed slides should be linked for approval",
+        )
+        self.assertEqual(
+            len(pq(f'a[href="{second_approval_url}"]')),
+            1,
+            "second session proposed slides should be linked for approval",
+        )
+        for no_show_url in do_not_show_urls:
+            self.assertEqual(
+                len(pq(f'a[href="{no_show_url}"]')),
+                0,
+                "second session proposed slides should be linked for approval",
+            )
+        
+
 class EditScheduleListTests(TestCase):
     def setUp(self):
         super().setUp()
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 3fa605ed7e..d02ae40902 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -2509,12 +2509,14 @@ def session_details(request, num, acronym):
     scheduled_sessions = [s for s in sessions if s.current_status == 'sched']
     unscheduled_sessions = [s for s in sessions if s.current_status != 'sched']
 
-    pending_suggestions = None
-    if request.user.is_authenticated:
-        if can_manage:
-            pending_suggestions = session.slidesubmission_set.filter(status__slug='pending')
-        else:
-            pending_suggestions = session.slidesubmission_set.filter(status__slug='pending', submitter=request.user.person)
+    # Start with all the pending suggestions for all the group's sessions
+    pending_suggestions = SlideSubmission.objects.filter(session__in=sessions, status__slug='pending')
+    if can_manage:
+        pass  # keep the full set
+    elif hasattr(request.user, "person"):
+        pending_suggestions = pending_suggestions.filter(submitter=request.user.person)
+    else:
+        pending_suggestions = SlideSubmission.objects.none()
 
     return render(request, "meeting/session_details.html",
                   { 'scheduled_sessions':scheduled_sessions ,
diff --git a/ietf/templates/meeting/session_details.html b/ietf/templates/meeting/session_details.html
index 571715b4b4..55fa3d3857 100644
--- a/ietf/templates/meeting/session_details.html
+++ b/ietf/templates/meeting/session_details.html
@@ -31,30 +31,28 @@ <h2 class="mt-3">Scheduled Sessions</h2>
     {% include 'meeting/session_details_panel.html' with sessions=scheduled_sessions %}
     <h2 class="mt-3">Unscheduled Sessions</h2>
     {% include 'meeting/session_details_panel.html' with sessions=unscheduled_sessions %}
-    {% if pending_suggestions %}
-        <h2 class="mt-3">
+    {% for s in pending_suggestions %}
+        {% if forloop.first %}<h2 class="mt-3">
             {% if can_manage_materials %}
                 Proposed slides awaiting your approval
             {% else %}
                 Your proposed slides awaiting chair approval
             {% endif %}
         </h2>
-        <div class="proposedslidelist">
-            {% for s in pending_suggestions %}
-                {% if can_manage_materials %}
-                    <p>
-                        <a href="{% url "ietf.meeting.views.approve_proposed_slides" slidesubmission_id=s.pk num=s.session.meeting.number %}">
-                            {{ s.submitter }} - {{ s.title }} ({{ s.time }})
-                        </a>
-                    </p>
-                {% else %}
-                    <p>
-                        {{ s.title }} ({{ s.time }})
-                    </p>
-                {% endif %}
-            {% endfor %}
-        </div>
-    {% endif %}
+        <div class="proposedslidelist">{% endif %}
+            {% if can_manage_materials %}
+                <p>
+                    <a href="{% url "ietf.meeting.views.approve_proposed_slides" slidesubmission_id=s.pk num=s.session.meeting.number %}">
+                        {{ s.submitter }} - {{ s.title }} ({{ s.time }})
+                    </a>
+                </p>
+            {% else %}
+                <p>
+                    {{ s.title }} ({{ s.time }})
+                </p>
+            {% endif %}
+        {% if forloop.last %}</div>{% endif %}
+    {% endfor %}
 {% endblock %}
 {% block js %}
     <script src="{% static 'ietf/js/list.js' %}"></script>

From 73abdcc29798850a86ddeabdd65b824adcc62eb6 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Tue, 18 Mar 2025 22:25:10 -0400
Subject: [PATCH 276/707] feat(agenda): add preliminary date when no agenda
 available (#8690)

* feat(meetings): add preliminary agenda date when no agenda available

* test: adapt test for additional field for preliminary agenda date

---------

Co-authored-by: Rudi Matz <rudi@staff.ieft.org>
---
 client/agenda/AgendaScheduleList.vue | 1 +
 ietf/meeting/tests_views.py          | 5 +++--
 ietf/meeting/views.py                | 8 ++++++--
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index ab0f6e0184..369025d5da 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -15,6 +15,7 @@
           td(:colspan='pickerModeActive ? 6 : 5')
             i.bi.bi-exclamation-triangle.me-2
             span(v-if='agendaStore.searchVisible && agendaStore.searchText') No event matching your search query.
+            span(v-else-if='agendaStore.meeting.prelimAgendaDate') A preliminary agenda is expected to be released on {{ agendaStore.meeting.prelimAgendaDate }}
             span(v-else) Nothing to display
         tr(
           v-for='item of meetingEvents'
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 111584cc56..0f91986f77 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -233,6 +233,7 @@ def test_meeting_agenda(self):
         session.save()
         slot = TimeSlot.objects.get(sessionassignments__session=session,sessionassignments__schedule=meeting.schedule)
         meeting.timeslot_set.filter(type_id="break").update(show_location=False)
+        meeting.importantdate_set.create(name_id='prelimagenda',date=date_today() + datetime.timedelta(days=20))
         #
         self.write_materials_files(meeting, session)
         #
@@ -262,7 +263,8 @@ def test_meeting_agenda(self):
                     "updated": generated_data.get("meeting").get("updated"),  # Just expect the value to exist
                     "timezone": meeting.time_zone,
                     "infoNote": meeting.agenda_info_note,
-                    "warningNote": meeting.agenda_warning_note
+                    "warningNote": meeting.agenda_warning_note,
+                    "prelimAgendaDate": (date_today() + datetime.timedelta(days=20)).isoformat()
                 },
                 "categories": generated_data.get("categories"),  # Just expect the value to exist
                 "isCurrentMeeting": True,
@@ -9341,4 +9343,3 @@ def test_bluesheet_data(self):
                 {"name": attended_with_affil.person.plain_name(), "affiliation": "Somewhere"},
             ]
         )
-
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index d02ae40902..6a73059d92 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -59,7 +59,7 @@
 from ietf.ietfauth.utils import role_required, has_role, user_is_person
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.meeting.models import Meeting, Session, Schedule, FloorPlan, SessionPresentation, TimeSlot, SlideSubmission, Attended
-from ietf.meeting.models import SessionStatusName, SchedulingEvent, SchedTimeSessAssignment, Room, TimeSlotTypeName
+from ietf.meeting.models import ImportantDate, SessionStatusName, SchedulingEvent, SchedTimeSessAssignment, Room, TimeSlotTypeName
 from ietf.meeting.forms import ( CustomDurationField, SwapDaysForm, SwapTimeslotsForm, ImportMinutesForm,
                                  TimeSlotCreateForm, TimeSlotEditForm, SessionCancelForm, SessionEditForm )
 from ietf.meeting.helpers import get_person_by_email, get_schedule_by_name
@@ -1709,6 +1709,9 @@ def generate_agenda_data(num=None, force_refresh=False):
     # Get Floor Plans
     floors = FloorPlan.objects.filter(meeting=meeting).order_by('order')
     
+    # Get Preliminary Agenda Date
+    prelimAgendaDate = ImportantDate.objects.filter(name_id="prelimagenda", meeting=meeting).first()
+
     result = {
         "meeting": {
             "number": schedule.meeting.number,
@@ -1718,7 +1721,8 @@ def generate_agenda_data(num=None, force_refresh=False):
             "updated": updated,
             "timezone": meeting.time_zone,
             "infoNote": schedule.meeting.agenda_info_note,
-            "warningNote": schedule.meeting.agenda_warning_note
+            "warningNote": schedule.meeting.agenda_warning_note,
+            "prelimAgendaDate": prelimAgendaDate.date.isoformat() if prelimAgendaDate else ""
         },
         "categories": filter_organizer.get_filter_categories(),
         "isCurrentMeeting": is_current_meeting,

From 3356505dc89e2a372f54c3ed1da472c3a11bc6de Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Wed, 19 Mar 2025 15:28:17 +1300
Subject: [PATCH 277/707] fix(agenda): Agenda 'now' fallback to next event if
 there is no current event (#8693)

* fix: agenda now fallback to next event if there is no current event

* chore: agenda goto now PR feedback

* chore: simplifying 'agenda goto now' next event logic

* chore: simplifying 'agenda goto now' nextEvent var
---
 client/agenda/AgendaMobileBar.vue    |  8 ++++----
 client/agenda/AgendaQuickAccess.vue  |  8 ++++----
 client/agenda/AgendaScheduleList.vue | 16 ++++++++++------
 client/agenda/store.js               | 22 ++++++++++++++++++++++
 4 files changed, 40 insertions(+), 14 deletions(-)

diff --git a/client/agenda/AgendaMobileBar.vue b/client/agenda/AgendaMobileBar.vue
index 63611e21c2..43480bedd3 100644
--- a/client/agenda/AgendaMobileBar.vue
+++ b/client/agenda/AgendaMobileBar.vue
@@ -124,11 +124,11 @@ const downloadIcsOptions = [
 
 function jumpToDay (dayId) {
   if (dayId === 'now') {
-    const lastEventId = agendaStore.findCurrentEventId()
-    if (lastEventId) {
-      document.getElementById(`agenda-rowid-${lastEventId}`)?.scrollIntoView(true)
+    const nowEventId = agendaStore.findNowEventId()
+    if (nowEventId) {
+      document.getElementById(`agenda-rowid-${nowEventId}`)?.scrollIntoView(true)
     } else {
-      message.warning('There is no event happening right now.')
+      message.warning('There is no event happening right now or in the future.')
     }
   } else {
     document.getElementById(dayId)?.scrollIntoView(true)
diff --git a/client/agenda/AgendaQuickAccess.vue b/client/agenda/AgendaQuickAccess.vue
index b226d09c60..c9412f6663 100644
--- a/client/agenda/AgendaQuickAccess.vue
+++ b/client/agenda/AgendaQuickAccess.vue
@@ -204,12 +204,12 @@ function scrollToDay (daySlug, ev) {
 }
 
 function scrollToNow (ev) {
-  const lastEventId = agendaStore.findCurrentEventId()
+  const nowEventId = agendaStore.findNowEventId()
 
-  if (lastEventId) {
-    document.getElementById(`agenda-rowid-${lastEventId}`)?.scrollIntoView(true)
+  if (nowEventId) {
+    document.getElementById(`agenda-rowid-${nowEventId}`)?.scrollIntoView(true)
   } else {
-    message.warning('There is no event happening right now.')
+    message.warning('There is no event happening right now or in the future.')
   }
 }
 
diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 369025d5da..5a971c25cf 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -591,10 +591,10 @@ function renderLinkLabel (opt) {
 
 function recalculateRedLine () {
   state.currentMinute = DateTime.local().minute
-  const lastEventId = agendaStore.findCurrentEventId()
+  const currentEventId = agendaStore.findCurrentEventId()
 
-  if (lastEventId) {
-    state.redhandOffset = document.getElementById(`agenda-rowid-${lastEventId}`)?.offsetTop || 0
+  if (currentEventId) {
+    state.redhandOffset = document.getElementById(`agenda-rowid-${currentEventId}`)?.offsetTop || 0
   } else {
     state.redhandOffset = 0
   }
@@ -615,9 +615,13 @@ function recalculateRedLine () {
       return
     }
     unsubscribe() // we only need to scroll once, so unsubscribe from future updates
-    if(window.location.hash === "#now") {
-      const lastEventId = agendaStore.findCurrentEventId()
-      document.getElementById(`agenda-rowid-${lastEventId}`)?.scrollIntoView(true)
+    if (window.location.hash === "#now") {
+      const nowEventId = agendaStore.findNowEvent()
+      if (nowEventId) {
+        document.getElementById(`agenda-rowid-${nowEventId}`)?.scrollIntoView(true)
+      } else {
+        message.warning('There is no event happening right now or in the future.')
+      }
     } else if(window.location.hash.startsWith(`#${daySlugPrefix}`)) {
       document.getElementById(window.location.hash.substring(1))?.scrollIntoView(true)
     }
diff --git a/client/agenda/store.js b/client/agenda/store.js
index 71c1219725..359c5fbf05 100644
--- a/client/agenda/store.js
+++ b/client/agenda/store.js
@@ -230,6 +230,28 @@ export const useAgendaStore = defineStore('agenda', {
 
       return lastEvent.id || null
     },
+    findNowEventId () {
+      const currentEventId = this.findCurrentEventId()
+      
+      if (currentEventId) {
+        return currentEventId
+      }
+
+      // if there isn't a current event then instead find the next event
+
+      const current = (this.nowDebugDiff ? DateTime.local().minus(this.nowDebugDiff) : DateTime.local()).setZone(this.timezone)
+
+      // -> Find next event after current time
+      let nextEventId = undefined
+      for(const sh of this.scheduleAdjusted) {
+        if (sh.adjustedStart > current) {
+          nextEventId = sh.id
+          break
+        }
+      }
+
+      return nextEventId || null
+    },
     hideLoadingScreen () {
       // -> Hide loading screen
       const loadingRef = document.querySelector('#app-loading')

From c3a296fdb559b015f8e4d457f56fea137e10cf37 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 19 Mar 2025 04:56:59 -0400
Subject: [PATCH 278/707] fix(agenda): handle calendar view events that spread
 across multiple days (#8685)

---
 client/agenda/AgendaScheduleCalendar.vue | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/client/agenda/AgendaScheduleCalendar.vue b/client/agenda/AgendaScheduleCalendar.vue
index 9b56b7f5a7..6701ddabd7 100644
--- a/client/agenda/AgendaScheduleCalendar.vue
+++ b/client/agenda/AgendaScheduleCalendar.vue
@@ -187,6 +187,7 @@ function refreshData () {
   let earliestDate = DateTime.fromISO('2200-01-01')
   let latestDate = DateTime.fromISO('1990-01-01')
   let nowDate = DateTime.now()
+  let hasCrossDayEvents = false
 
   calendarOptions.events = agendaStore.scheduleAdjusted.map(ev => {
     // -> Determine boundaries
@@ -202,6 +203,9 @@ function refreshData () {
     if (ev.adjustedEnd < latestDate) {
       latestDate = ev.adjustedEnd
     }
+    if (ev.adjustedStart.day !== ev.adjustedEnd.day) {
+      hasCrossDayEvents = true
+    }
     // -> Build event object
     return {
       id: ev.id,
@@ -214,8 +218,8 @@ function refreshData () {
   })
 
   // -> Display settings
-  calendarOptions.slotMinTime = `${earliestHour.toString().padStart(2, '0')}:00:00`
-  calendarOptions.slotMaxTime = `${latestHour.toString().padStart(2, '0')}:00:00`
+  calendarOptions.slotMinTime = hasCrossDayEvents ? '00:00:00' : `${earliestHour.toString().padStart(2, '0')}:00:00`
+  calendarOptions.slotMaxTime = hasCrossDayEvents ? '23:59:59' : `${latestHour.toString().padStart(2, '0')}:00:00`
   calendarOptions.validRange.start = earliestDate.minus({ days: 1 }).toISODate()
   calendarOptions.validRange.end = latestDate.plus({ days: 1 }).toISODate()
   // calendarOptions.scrollTime = `${earliestHour.toString().padStart(2, '0')}:00:00`

From fde8136df53b3b9d2666674e16e15a7edf7e0ed1 Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Wed, 19 Mar 2025 05:06:47 -0400
Subject: [PATCH 279/707] chore: Add draft name to review-completed email
 (#8676)

* chore: Add draft name to review-completed email

Fixes: #7866

* fix: typo

* fix: show title and add test

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/tests_review.py                   | 5 ++++-
 ietf/templates/review/completed_review.txt | 4 +++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/ietf/doc/tests_review.py b/ietf/doc/tests_review.py
index e93bc02181..13ddbc22ba 100644
--- a/ietf/doc/tests_review.py
+++ b/ietf/doc/tests_review.py
@@ -902,7 +902,10 @@ def test_complete_review_enter_content(self):
 
         self.assertEqual(len(outbox), 1)
         self.assertIn(assignment.review_request.team.list_email, outbox[0]["To"])
-        self.assertIn("This is a review", get_payload_text(outbox[0]))
+        payload = get_payload_text(outbox[0])
+        self.assertIn("This is a review", payload)
+        self.assertIn(f"Document: {assignment.review_request.doc.name}", payload)
+        self.assertIn(f"Title: {assignment.review_request.doc.title}", payload)
 
         self.assertIn(settings.MAILING_LIST_ARCHIVE_URL, assignment.review.external_url)
 
diff --git a/ietf/templates/review/completed_review.txt b/ietf/templates/review/completed_review.txt
index bdbe321ca1..7d10d8bf13 100644
--- a/ietf/templates/review/completed_review.txt
+++ b/ietf/templates/review/completed_review.txt
@@ -1,7 +1,9 @@
 {% load ietf_filters %}{% autoescape off %}{% filter maybewordwrap:80 %}{% if assignment.state_id == "part-completed" %}
 Review is partially done. Another assignment may be needed to complete it.
 
-{% endif %}Reviewer: {{ assignment.reviewer.person }}
+{% endif %}Document: {{ assignment.review_request.doc.name }}
+Title: {{ assignment.review_request.doc.title }}
+Reviewer: {{ assignment.reviewer.person }}
 Review result: {{ assignment.result.name }}
 
 {{ content }}

From 2d974ed09b8e9ff93805fb06cfa65ab6f814e261 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Fri, 21 Mar 2025 13:45:27 +1300
Subject: [PATCH 280/707] feat(agenda): Agenda meeting materials in overflow
 menu (#8698)

* feat: agenda meeting materials in overflow menu

* chore: fixing agenda meeting materials tests

* chore: fix agenda meeting material tests

* chore: fixing agenda meeting materials test

* fix: changing to -mat suffix rather than -meeting-materials

* fix: agenda meeting materials lnk -> btn

* fix: click handler on agenda meeting materials
---
 client/agenda/AgendaScheduleList.vue    | 60 ++++++++++++++++++++-----
 playwright/tests/meeting/agenda.spec.js |  8 ++--
 2 files changed, 52 insertions(+), 16 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 5a971c25cf..1e50df5fb4 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -121,20 +121,12 @@
                     :options='item.links'
                     key-field='id'
                     :render-icon='renderLinkIcon'
-                    :render-label='renderLinkLabel'
+                    :render-label='renderLink'
                     )
                     n-button(size='tiny')
                       i.bi.bi-three-dots
                 .agenda-table-cell-links-buttons(v-else-if='item.links && item.links.length > 0')
-                    template(v-if='item.flags.agenda')
-                      n-popover
-                        template(#trigger)
-                          i.bi.bi-collection(
-                            :id='`btn-lnk-` + item.key + `-mat`'
-                            @click='showMaterials(item.key)'
-                            )
-                        span Show meeting materials
-                    template(v-else-if='item.type === `regular`')
+                    template(v-if='!item.flags.agenda && item.type === `regular`')
                       n-popover
                         template(#trigger)
                           i.no-meeting-materials
@@ -143,7 +135,16 @@
                         span No meeting materials yet.
                     n-popover(v-for='lnk of item.links', :key='lnk.id')
                       template(#trigger)
+                        button(
+                          v-if="lnk.click"
+                          type="button"
+                          :id='`btn-` + lnk.id'
+                          @click='lnk.click'
+                          :aria-label='lnk.label'
+                          :class='`border-0 bg-transparent text-` + lnk.color'
+                          ): i.bi(:class='`bi-` + lnk.icon')
                         a(
+                          v-else
                           :id='`btn-` + lnk.id'
                           :href='lnk.href'
                           :aria-label='lnk.label'
@@ -281,13 +282,28 @@ const meetingEvents = computed(() => {
     }
     acc.lastTypeName = typeName
 
-    // -> Populate event links
+    // 
+    /**
+     * -> Populate event menu items
+     * 
+     * links is an array of either,
+     * 1. { href: "...",        click: undefined, ...sharedProps }
+     * 2. { click: () => {...}, href: undefined,  ...sharedProps }
+     */
     const links = []
     const typesWithLinks = ['regular', 'plenary', 'other']
     const purposesWithoutLinks = ['admin', 'closed_meeting', 'officehours', 'social']
     if (item.flags.showAgenda || (typesWithLinks.includes(item.type) && !purposesWithoutLinks.includes(item.purpose))) {
       if (item.flags.agenda) {
         // -> Meeting Materials
+        links.push({
+          id: `btn-${item.id}-mat`,
+          label: 'Show meeting materials',
+          icon: 'collection',
+          href: undefined,
+          click: () => showMaterials(item.id),
+          color: 'black'
+        })
         links.push({
           id: `lnk-${item.id}-tar`,
           label: 'Download meeting materials as .tar archive',
@@ -585,7 +601,11 @@ function renderLinkIcon (opt) {
   return h('i', { class: `bi bi-${opt.icon} text-${opt.color}` })
 }
 
-function renderLinkLabel (opt) {
+function renderLink (opt) {
+  if (opt.click) {
+    return h('button', { type: 'button', class: 'overflow-button', onClick: opt.click }, opt.label)
+  }
+
   return h('a', { href: opt.href, target: '_blank' }, opt.label)
 }
 
@@ -1564,6 +1584,22 @@ onBeforeUnmount(() => {
   }
 }
 
+.overflow-button {
+  font-size: inherit;
+  padding: 0;
+  border: 0;
+  background: transparent;
+
+  &:before {
+    content: "";
+    position: absolute;
+    left: 0;
+    right: 0;
+    top: 0;
+    bottom: 0;
+  }
+}
+
 @keyframes fadeInAnim {
   0% {
     opacity: 0;
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index e6c6e17031..b7e3df5718 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -275,7 +275,7 @@ test.describe('past - desktop', () => {
             const eventButtons = row.locator('.agenda-table-cell-links > .agenda-table-cell-links-buttons')
             if (event.flags.agenda) {
               // Show meeting materials button
-              await expect(eventButtons.locator('i.bi.bi-collection')).toBeVisible()
+              await expect(eventButtons.locator(`#btn-btn-${event.id}-mat`)).toBeVisible()
               // ZIP materials button
               await expect(eventButtons.locator(`#btn-lnk-${event.id}-tar`)).toHaveAttribute('href', `/meeting/${meetingData.meeting.number}/agenda/${event.acronym}-drafts.tgz`)
               await expect(eventButtons.locator(`#btn-lnk-${event.id}-tar > i.bi`)).toBeVisible()
@@ -425,7 +425,7 @@ test.describe('past - desktop', () => {
       })
     })
     // Open dialog
-    await page.locator(`#agenda-rowid-${event.id} #btn-lnk-${event.id}-mat`).click()
+    await page.locator(`#agenda-rowid-${event.id} #btn-btn-${event.id}-mat`).click()
     await expect(page.locator('.agenda-eventdetails')).toBeVisible()
     // Header
     await expect(page.locator('.agenda-eventdetails .n-card-header__main > .detail-header > .bi')).toBeVisible()
@@ -507,7 +507,7 @@ test.describe('past - desktop', () => {
       })
     })
     // Open dialog
-    await page.locator(`#btn-lnk-${event.id}-mat`).click()
+    await page.locator(`#btn-btn-${event.id}-mat`).click()
     await expect(page.locator('.agenda-eventdetails')).toBeVisible()
     // Slides Tab
     await page.locator('.agenda-eventdetails .detail-nav > a').nth(1).click()
@@ -1158,7 +1158,7 @@ test.describe('future - desktop', () => {
         if (event.flags.showAgenda || (['regular', 'plenary', 'other'].includes(event.type) && !['admin', 'closed_meeting', 'officehours', 'social'].includes(event.purpose))) {
           if (event.flags.agenda) {
             // Show meeting materials button
-            await expect(eventButtons.locator('i.bi.bi-collection')).toBeVisible()
+            await expect(eventButtons.locator(`#btn-btn-${event.id}-mat`)).toBeVisible()
             // ZIP materials button
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-tar`)).toHaveAttribute('href', `/meeting/${meetingData.meeting.number}/agenda/${event.acronym}-drafts.tgz`)
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-tar > i.bi`)).toBeVisible()

From 27ea6234a8b0b74062c0a57e849e316087c849f3 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 21 Mar 2025 04:43:33 -0400
Subject: [PATCH 281/707] feat(agenda): keep video client + onsite tool buttons
 for plenary for rest of day (#8706)

---
 client/agenda/AgendaScheduleList.vue    |  17 ++++
 playwright/helpers/common.js            |  24 ++++++
 playwright/helpers/meeting.js           |   3 +
 playwright/tests/meeting/agenda.spec.js | 102 ++++++++++++++++++++----
 4 files changed, 129 insertions(+), 17 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 1e50df5fb4..86c91bed85 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -464,6 +464,23 @@ const meetingEvents = computed(() => {
               color: 'purple'
             })
           }
+          // -> Keep showing video client / on-site tool for Plenary until end of day, in case it goes over the planned time range
+          if (item.type === 'plenary' && item.adjustedEnd.day === current.day) {
+            links.push({
+              id: `lnk-${item.id}-video`,
+              label: 'Full Client with Video',
+              icon: 'camera-video',
+              href: item.links.videoStream,
+              color: 'purple'
+            })
+            links.push({
+              id: `lnk-${item.id}-onsitetool`,
+              label: 'Onsite tool',
+              icon: 'telephone-outbound',
+              href: item.links.onsiteTool,
+              color: 'teal'
+            })
+          }
         }
       }
     }
diff --git a/playwright/helpers/common.js b/playwright/helpers/common.js
index 5ba39ba022..c4dd7e2640 100644
--- a/playwright/helpers/common.js
+++ b/playwright/helpers/common.js
@@ -13,5 +13,29 @@ module.exports = {
 
       return rect.top < bottom && rect.top > 0 - rect.height
     })
+  },
+  /**
+   * Override page DateTime with a new value
+   *
+   * @param {Object} page Page object
+   * @param {Object} dateTimeOverride New DateTime object
+   */
+  overridePageDateTime: async (page, dateTimeOverride) => {
+    await page.addInitScript(`{
+      // Extend Date constructor to default to fixed time
+      Date = class extends Date {
+        constructor(...args) {
+          if (args.length === 0) {
+            super(${dateTimeOverride.toMillis()});
+          } else {
+            super(...args);
+          }
+        }
+      }
+      // Override Date.now() to start from fixed time
+      const __DateNowOffset = ${dateTimeOverride.toMillis()} - Date.now();
+      const __DateNow = Date.now;
+      Date.now = () => __DateNow() + __DateNowOffset;
+    }`)
   }
 }
diff --git a/playwright/helpers/meeting.js b/playwright/helpers/meeting.js
index 9722ffc68b..634ca2e8c6 100644
--- a/playwright/helpers/meeting.js
+++ b/playwright/helpers/meeting.js
@@ -609,6 +609,9 @@ module.exports = {
             startDateTime: curDay.set({ hour: 17, minute: 30 }),
             duration: '2h',
             type: 'plenary',
+            showAgenda: true,
+            hasAgenda: true,
+            hasRecordings: true,
             ...findAreaGroup('ietf-plenary', categories[2])
           }, floors))
         }
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index b7e3df5718..412a3fe9b8 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -1213,7 +1213,7 @@ test.describe('future - desktop', () => {
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-remotecallin`)).toHaveAttribute('href', remoteCallInUrl)
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-remotecallin > i.bi`)).toBeVisible()
           }
-          // calendar
+          // Calendar
           if (event.links.calendar) {
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-calendar`)).toHaveAttribute('href', event.links.calendar)
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-calendar > i.bi`)).toBeVisible()
@@ -1278,22 +1278,7 @@ test.describe('live - desktop', () => {
     })
 
     // Override Date in page to fixed time
-    await page.addInitScript(`{
-      // Extend Date constructor to default to fixed time
-      Date = class extends Date {
-        constructor(...args) {
-          if (args.length === 0) {
-            super(${currentTime.toMillis()});
-          } else {
-            super(...args);
-          }
-        }
-      }
-      // Override Date.now() to start from fixed time
-      const __DateNowOffset = ${currentTime.toMillis()} - Date.now();
-      const __DateNow = Date.now;
-      Date.now = () => __DateNow() + __DateNowOffset;
-    }`)
+    await commonHelper.overridePageDateTime(page, currentTime)
 
     // Visit agenda page and await Meeting Data API call to complete
     await Promise.all([
@@ -1348,6 +1333,89 @@ test.describe('live - desktop', () => {
   })
 })
 
+// ====================================================================
+// AGENDA (live meeting) | DESKTOP viewport | Plenary Extended Time Buttons
+// ====================================================================
+
+test.describe('live - desktop - plenary extended time buttons', () => {
+  let meetingData
+  let plenarySessionId
+
+  test.beforeAll(async () => {
+    // Generate meeting data
+    meetingData = meetingHelper.generateAgendaResponse({ dateMode: 'current' })
+    plenarySessionId = meetingData.schedule.find(s => s.type === 'plenary').id
+  })
+
+  test.beforeEach(async ({ page }) => {
+    // Intercept Meeting Data API
+    await page.route(`**/api/meeting/${meetingData.meeting.number}/agenda-data`, route => {
+      route.fulfill({
+        status: 200,
+        contentType: 'application/json',
+        body: JSON.stringify(meetingData)
+      })
+    })
+
+    await page.setViewportSize({
+      width: viewports.desktop[0],
+      height: viewports.desktop[1]
+    })
+  })
+
+  // -> BUTTONS PRESENT AFTER EVENT, SAME DAY
+
+  test('same day - after event', async ({ page }) => {
+    // Override Date in page to fixed time
+    const currentTime = DateTime.fromISO('2022-02-01T13:45:15', { zone: 'Asia/Tokyo' }).plus({ days: 1 }).set({ hour: 20, minute: 30 })
+    await commonHelper.overridePageDateTime(page, currentTime)
+
+    // Visit agenda page and await Meeting Data API call to complete
+    await Promise.all([
+      page.waitForResponse(`**/api/meeting/${meetingData.meeting.number}/agenda-data`),
+      page.goto(`/meeting/${meetingData.meeting.number}/agenda`)
+    ])
+
+    // Wait for page to be ready
+    await page.locator('.agenda h1').waitFor({ state: 'visible' })
+    await setTimeout(500)
+
+    // Check for plenary event
+    await expect(page.locator('.agenda .agenda-table-display-event.agenda-table-type-plenary')).toBeVisible()
+    await page.locator('.agenda .agenda-table-display-event.agenda-table-type-plenary').scrollIntoViewIfNeeded()
+
+    // Check for full video client + on-site tool
+    await expect(page.locator(`.agenda .agenda-table-display-event.agenda-table-type-plenary .agenda-table-cell-links-buttons a#btn-lnk-${plenarySessionId}-video`)).toBeVisible()
+    await expect(page.locator(`.agenda .agenda-table-display-event.agenda-table-type-plenary .agenda-table-cell-links-buttons a#btn-lnk-${plenarySessionId}-onsitetool`)).toBeVisible()
+  })
+
+  // -> BUTTONS NO LONGER PRESENT AFTER EVENT, NEXT DAY
+
+  test('next day - after event', async ({ page }) => {
+    // Override Date in page to fixed time
+    const currentTime = DateTime.fromISO('2022-02-01T13:45:15', { zone: 'Asia/Tokyo' }).plus({ days: 2 }).set({ hour: 2, minute: 30 })
+    await commonHelper.overridePageDateTime(page, currentTime)
+
+    // Visit agenda page and await Meeting Data API call to complete
+    await Promise.all([
+      page.waitForResponse(`**/api/meeting/${meetingData.meeting.number}/agenda-data`),
+      page.goto(`/meeting/${meetingData.meeting.number}/agenda`)
+    ])
+
+    // Wait for page to be ready
+    await page.locator('.agenda h1').waitFor({ state: 'visible' })
+    await setTimeout(500)
+
+    // Check for plenary event
+    await expect(page.locator('.agenda .agenda-table-display-event.agenda-table-type-plenary')).toBeVisible()
+    await page.locator('.agenda .agenda-table-display-event.agenda-table-type-plenary').scrollIntoViewIfNeeded()
+
+    // Check for full video client + on-site tool
+    await expect(page.locator(`.agenda .agenda-table-display-event.agenda-table-type-plenary .agenda-table-cell-links-buttons a#btn-lnk-${plenarySessionId}-video`)).not.toBeVisible()
+    await expect(page.locator(`.agenda .agenda-table-display-event.agenda-table-type-plenary .agenda-table-cell-links-buttons a#btn-lnk-${plenarySessionId}-onsitetool`)).not.toBeVisible()
+  })
+})
+
 // ====================================================================
 // AGENDA (past meeting) | SMALL DESKTOP/TABLET/MOBILE viewports
 // ====================================================================

From ed2059a5813130cbf31ce77c0978a35751addc6c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 21 Mar 2025 15:45:26 +0700
Subject: [PATCH 282/707] fix: add blank=true to SlideSubmission.doc (#8688)

Allows admin to save an instance with a null doc reference, which was already permitted.
---
 .../0011_alter_slidesubmission_doc.py         | 26 +++++++++++++++++++
 ietf/meeting/models.py                        |  2 +-
 2 files changed, 27 insertions(+), 1 deletion(-)
 create mode 100644 ietf/meeting/migrations/0011_alter_slidesubmission_doc.py

diff --git a/ietf/meeting/migrations/0011_alter_slidesubmission_doc.py b/ietf/meeting/migrations/0011_alter_slidesubmission_doc.py
new file mode 100644
index 0000000000..b9cbc58e99
--- /dev/null
+++ b/ietf/meeting/migrations/0011_alter_slidesubmission_doc.py
@@ -0,0 +1,26 @@
+# Generated by Django 4.2.19 on 2025-03-17 09:37
+
+from django.db import migrations
+import django.db.models.deletion
+import ietf.utils.models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0025_storedobject_storedobject_unique_name_per_store"),
+        ("meeting", "0010_alter_floorplan_image_alter_meetinghost_logo"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="slidesubmission",
+            name="doc",
+            field=ietf.utils.models.ForeignKey(
+                blank=True,
+                null=True,
+                on_delete=django.db.models.deletion.SET_NULL,
+                to="doc.document",
+            ),
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 5284420731..84d151c310 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1385,7 +1385,7 @@ class SlideSubmission(models.Model):
     apply_to_all = models.BooleanField(default=False)
     submitter = ForeignKey(Person)
     status      = ForeignKey(SlideSubmissionStatusName, null=True, default='pending', on_delete=models.SET_NULL)
-    doc         = ForeignKey(Document, null=True, on_delete=models.SET_NULL)
+    doc         = ForeignKey(Document, blank=True, null=True, on_delete=models.SET_NULL)
 
     def staged_filepath(self):
         return os.path.join(settings.SLIDE_STAGING_PATH , self.filename)

From 37b4448b3d390b102b7e14890880bcfd1e965bcc Mon Sep 17 00:00:00 2001
From: Benson Muite <bkmgit@users.noreply.github.com>
Date: Fri, 21 Mar 2025 11:52:18 +0300
Subject: [PATCH 283/707] fix: Clarify legacy description in RFC banner (#8424)
 (#8670)

---
 ietf/templates/doc/disclaimer.html | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/doc/disclaimer.html b/ietf/templates/doc/disclaimer.html
index 31ce6c397e..db4c42ed68 100644
--- a/ietf/templates/doc/disclaimer.html
+++ b/ietf/templates/doc/disclaimer.html
@@ -3,12 +3,18 @@
 {% load ietf_filters %}
 {% origin %}
 {% if doc.type_id == "rfc" %}
-    {% if doc.stream.slug != "ietf" and doc.std_level.slug|default:"unk" not in "bcp,ds,ps,std"|split:"," %}
+    {% if doc.stream.slug != "ietf" and doc.stream.desc != "Legacy" and doc.std_level.slug|default:"unk" not in "bcp,ds,ps,std"|split:"," %}
         <div class="alert alert-warning {% if document_html %}small p-2 mt-2{% endif %}" role="alert">
             This RFC was published on the {{ doc.stream.desc }} stream.
             This RFC is <strong>not endorsed by the IETF</strong> and has <strong>no formal standing</strong> in the
             <a href="{% url 'ietf.doc.views_doc.document_main' name='rfc2026' %}">IETF standards process</a>.
         </div>
+    {% elif doc.stream.slug != "ietf" and doc.stream.desc == "Legacy" and doc.std_level.slug|default:"unk" not in "bcp,ds,ps,std"|split:"," %}	
+        <div class="alert alert-warning {% if document_html %}small p-2 mt-2{% endif %}" role="alert">
+            This RFC is labeled as "{{ doc.stream.desc }}"; it was published before a formal source was recorded.
+            This RFC is <strong>not endorsed by the IETF</strong> and has <strong>no formal standing</strong> in the
+            <a href="{% url 'ietf.doc.views_doc.document_main' name='rfc2026' %}">IETF standards process</a>.
+        </div>
     {% endif %}
 {% elif doc|is_in_stream %}
     {% if doc.stream.slug != "ietf" and doc.std_level.slug|default:"unk" not in "bcp,ds,ps,std"|split:"," %}
@@ -25,4 +31,4 @@
         This I-D is <strong>not endorsed by the IETF</strong> and has <strong>no formal standing</strong> in the
         <a href="{% url 'ietf.doc.views_doc.document_main' name='rfc2026' %}">IETF standards process</a>.
     </div>
-{% endif %}
\ No newline at end of file
+{% endif %}

From 8fec17282f5dc7ef28355990e2f74bff2a309002 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 21 Mar 2025 19:30:40 -0400
Subject: [PATCH 284/707] ci: Update build-base-app.yml

---
 .github/workflows/build-base-app.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index c8f66a22b7..5f0a0d11b8 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -51,7 +51,7 @@ jobs:
         push: true
         tags: |
           ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}
-          ghcr.io/ietf-tools/datatracker-app-base:latest
+          ${{ github.ref == 'refs/heads/main' && 'ghcr.io/ietf-tools/datatracker-app-base:latest' || '' }}
 
     - name: Update version references
       run: |
@@ -61,6 +61,6 @@ jobs:
     - name: Commit CHANGELOG.md
       uses: stefanzweifel/git-auto-commit-action@v5
       with:
-        branch: main
+        branch: ${{ github.ref_name }}
         commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'
         file_pattern: dev/build/Dockerfile dev/build/TARGET_BASE

From 6da36da3fde2721d3885001e4a4174c85579db8e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 27 Mar 2025 00:29:48 +0700
Subject: [PATCH 285/707] chore: bump rabbitmq to 3.13 (#8603)

* ci: param for rabbitmq_version

* ci: drop latest tagging from datatracker-mq

* chore: bump rabbitmq to 3.13

* Revert "ci: drop latest tagging from datatracker-mq"

This reverts commit 58cea207c7300727f9cfc19a57859ab16c3b2c01.
---
 .github/workflows/build-mq-broker.yml | 15 +++++++++------
 k8s/rabbitmq.yaml                     |  2 +-
 2 files changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index 8c6f1e6ae1..85c27c23cc 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -8,10 +8,13 @@ on:
       - 'dev/mq/**'
       - '.github/workflows/build-mq-broker.yml'
 
-  workflow_dispatch: 
-
-env:
-  RABBITMQ_VERSION: 3.12-alpine
+  workflow_dispatch:
+    inputs:
+      rabbitmq_version:
+        description: 'RabbitMQ Version'
+        default: '3.13-alpine'
+        required: true
+        type: string
 
 jobs:
   publish:
@@ -45,7 +48,7 @@ jobs:
         file: dev/mq/Dockerfile
         platforms: linux/amd64,linux/arm64
         push: true
-        build-args: RABBITMQ_VERSION=${{ env.RABBITMQ_VERSION }}
+        build-args: RABBITMQ_VERSION=${{ inputs.rabbitmq_version }}
         tags: |
-          ghcr.io/ietf-tools/datatracker-mq:${{ env.RABBITMQ_VERSION }}
+          ghcr.io/ietf-tools/datatracker-mq:${{ inputs.rabbitmq_version }}
           ghcr.io/ietf-tools/datatracker-mq:latest
diff --git a/k8s/rabbitmq.yaml b/k8s/rabbitmq.yaml
index 3cab7ff565..0c8f0705b5 100644
--- a/k8s/rabbitmq.yaml
+++ b/k8s/rabbitmq.yaml
@@ -29,7 +29,7 @@ spec:
         # -----------------------------------------------------
         # RabbitMQ Container
         # -----------------------------------------------------
-        - image: "ghcr.io/ietf-tools/datatracker-mq:3.12-alpine"
+        - image: "ghcr.io/ietf-tools/datatracker-mq:3.13-alpine"
           imagePullPolicy: Always
           name: rabbitmq
           ports:

From 9dd25b9aee2ccb565d74d55d90c67bf8388c910e Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Fri, 28 Mar 2025 04:07:53 +1300
Subject: [PATCH 286/707] chore: vite sourcemap (#8719)

---
 vite.config.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/vite.config.js b/vite.config.js
index 41a2cb02e0..bde2b9ed57 100644
--- a/vite.config.js
+++ b/vite.config.js
@@ -16,7 +16,8 @@ export default defineConfig(({ command, mode }) => {
           main: 'client/main.js',
           embedded: 'client/embedded.js'
         }
-      }
+      },
+      sourcemap: true
     },
     cacheDir: '.vite',
     plugins: [

From 7e9a46af63da0e45f3ea0e4ccfda69875b282190 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 27 Mar 2025 13:59:24 -0500
Subject: [PATCH 287/707] feat: move base containers to bookworm (#8710)

---
 docker/base.Dockerfile             | 17 ++++++++++-------
 docker/scripts/app-setup-debian.sh | 16 +++-------------
 ietf/submit/tests.py               |  4 ++--
 3 files changed, 15 insertions(+), 22 deletions(-)

diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index e2465f33c2..f364456c7a 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.9-bullseye
+FROM python:3.9-bookworm
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -14,6 +14,9 @@ RUN apt-get install -y --no-install-recommends ca-certificates curl gnupg \
     && mkdir -p /etc/apt/keyrings\
     && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
 RUN echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list
+RUN echo "Package: nodejs" >> /etc/apt/preferences.d/preferences && \
+    echo "Pin: origin deb.nodesource.com" >> /etc/apt/preferences.d/preferences && \
+    echo "Pin-Priority: 1001" >> /etc/apt/preferences.d/preferences
 
 # Add Docker Source
 RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
@@ -56,12 +59,13 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libmagic-dev \
 	libmariadb-dev \
 	libmemcached-tools \
+	libyang2-tools \
 	locales \
 	make \
 	mariadb-client \
 	memcached \
 	nano \
-	netcat \
+	netcat-traditional \
 	nodejs \
 	pgloader \
 	pigz \
@@ -77,7 +81,6 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	wget \
 	xauth \
 	xvfb \
-	yang-tools \
 	zsh
 
 # Install kramdown-rfc2629 (ruby)
@@ -106,11 +109,11 @@ RUN apt-get autoremove -y && apt-get clean -y && rm -rf /var/lib/apt/lists/* /va
 ENV DBUS_SESSION_BUS_ADDRESS=/dev/null
 
 # avoid million NPM install messages
-ENV npm_config_loglevel warn
+ENV npm_config_loglevel=warn
 # allow installing when the main user is root
-ENV npm_config_unsafe_perm true
+ENV npm_config_unsafe_perm=true
 # disable NPM funding messages
-ENV npm_config_fund false
+ENV npm_config_fund=false
 
 # Set locale to en_US.UTF-8
 RUN echo "LC_ALL=en_US.UTF-8" >> /etc/environment && \
@@ -119,7 +122,7 @@ RUN echo "LC_ALL=en_US.UTF-8" >> /etc/environment && \
     dpkg-reconfigure locales && \
     locale-gen en_US.UTF-8 && \
     update-locale LC_ALL en_US.UTF-8
-ENV LC_ALL en_US.UTF-8
+ENV LC_ALL=en_US.UTF-8
 
 # Install idnits
 ADD https://raw.githubusercontent.com/ietf-tools/idnits-mirror/main/idnits /usr/local/bin/
diff --git a/docker/scripts/app-setup-debian.sh b/docker/scripts/app-setup-debian.sh
index ddfc351995..ea9cc3fb87 100644
--- a/docker/scripts/app-setup-debian.sh
+++ b/docker/scripts/app-setup-debian.sh
@@ -10,7 +10,6 @@
 # Syntax: ./common-debian.sh [install zsh flag] [username] [user UID] [user GID] [upgrade packages flag] [install Oh My Zsh! flag] [Add non-free packages]
 
 set -e
-
 INSTALL_ZSH=${1:-"true"}
 USERNAME=${2:-"automatic"}
 USER_UID=${3:-"automatic"}
@@ -116,18 +115,9 @@ if [ "${PACKAGES_ALREADY_INSTALLED}" != "true" ]; then
     # Needed for adding manpages-posix and manpages-posix-dev which are non-free packages in Debian
     if [ "${ADD_NON_FREE_PACKAGES}" = "true" ]; then
         # Bring in variables from /etc/os-release like VERSION_CODENAME
-        . /etc/os-release
-        sed -i -E "s/deb http:\/\/(deb|httpredir)\.debian\.org\/debian ${VERSION_CODENAME} main/deb http:\/\/\1\.debian\.org\/debian ${VERSION_CODENAME} main contrib non-free/" /etc/apt/sources.list
-        sed -i -E "s/deb-src http:\/\/(deb|httredir)\.debian\.org\/debian ${VERSION_CODENAME} main/deb http:\/\/\1\.debian\.org\/debian ${VERSION_CODENAME} main contrib non-free/" /etc/apt/sources.list
-        sed -i -E "s/deb http:\/\/(deb|httpredir)\.debian\.org\/debian ${VERSION_CODENAME}-updates main/deb http:\/\/\1\.debian\.org\/debian ${VERSION_CODENAME}-updates main contrib non-free/" /etc/apt/sources.list
-        sed -i -E "s/deb-src http:\/\/(deb|httpredir)\.debian\.org\/debian ${VERSION_CODENAME}-updates main/deb http:\/\/\1\.debian\.org\/debian ${VERSION_CODENAME}-updates main contrib non-free/" /etc/apt/sources.list
-        sed -i "s/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}\/updates main/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}\/updates main contrib non-free/" /etc/apt/sources.list
-        sed -i "s/deb-src http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}\/updates main/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}\/updates main contrib non-free/" /etc/apt/sources.list
-        sed -i "s/deb http:\/\/deb\.debian\.org\/debian ${VERSION_CODENAME}-backports main/deb http:\/\/deb\.debian\.org\/debian ${VERSION_CODENAME}-backports main contrib non-free/" /etc/apt/sources.list 
-        sed -i "s/deb-src http:\/\/deb\.debian\.org\/debian ${VERSION_CODENAME}-backports main/deb http:\/\/deb\.debian\.org\/debian ${VERSION_CODENAME}-backports main contrib non-free/" /etc/apt/sources.list
-        # Handle bullseye location for security https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html
-        sed -i "s/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}-security main/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}-security main contrib non-free/" /etc/apt/sources.list
-        sed -i "s/deb-src http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}-security main/deb http:\/\/security\.debian\.org\/debian-security ${VERSION_CODENAME}-security main contrib non-free/" /etc/apt/sources.list
+        .  /etc/os-release
+        sed -i -E "s/Components: main/Components: main contrib non-free/" /etc/apt/sources.list.d/debian.sources
+
         echo "Running apt-get update..."
         apt-get update
         package_list="${package_list} manpages-posix manpages-posix-dev"
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 9a993480cd..6b1c998e76 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -1888,7 +1888,7 @@ def test_submit_invalid_yang(self):
         r = self.client.get(status_url)
         q = PyQuery(r.content)
         #
-        self.assertContains(r, 'The yang validation returned 1 error')
+        self.assertContains(r, 'The yang validation returned 3 errors')
         #
         m = q('#yang-validation-message').text()
         for command in ['xym', 'pyang', 'yanglint']:
@@ -1898,7 +1898,7 @@ def test_submit_invalid_yang(self):
         self.assertIn("draft-yang-testing-invalid-00.txt", m)
         self.assertIn("error: syntax error: illegal keyword: ;", m)
         if settings.SUBMIT_YANGLINT_COMMAND and os.path.exists(settings.YANGLINT_BINARY):
-            self.assertIn("No validation errors", m)
+            self.assertIn('libyang err : Parsing module "ietf-yang-metadata" failed.', m)
 
     def submit_conflicting_submissiondocevent_rev(self, new_rev='01', existing_rev='01'):
         """Test submitting a rev when an equal or later SubmissionDocEvent rev exists

From 431c475060778ccaaf611e0de7a9bcc0c3b93c42 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Thu, 27 Mar 2025 19:12:31 +0000
Subject: [PATCH 288/707] ci: update base image target version to 20250327T1859

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 2b02a091c5..cc55c92881 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250315T0745
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250327T1859
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index e6f490b168..50e8bfd839 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250315T0745
+20250327T1859

From 752bc2103146b534e1bb6188c7d54d11f07ba885 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Thu, 27 Mar 2025 18:19:30 -0400
Subject: [PATCH 289/707] feat: highlight unexpected state in AD dashboard
 (#8738)

* feat: highlight unexpected state in AD dashboard

* test: add tests for is_unexpected_wg_state

* test: improve tests using WgDraftFactory
---
 ietf/doc/templatetags/ietf_filters.py         | 13 +++++++++++++
 ietf/doc/templatetags/tests_ietf_filters.py   | 16 ++++++++++++++++
 ietf/templates/doc/search/status_columns.html |  4 ++++
 3 files changed, 33 insertions(+)

diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index 86507eeaaa..d4adf96a27 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -480,6 +480,19 @@ def state(doc, slug):
         slug = "%s-stream-%s" % (doc.type_id, doc.stream_id)
     return doc.get_state(slug)
 
+
+@register.filter
+def is_unexpected_wg_state(doc):
+    """Returns a flag indicating whether the document has an unexpected wg state."""
+    if not doc.type_id == "draft":
+        return False
+
+    draft_iesg_state = doc.get_state("draft-iesg")
+    draft_stream_state = doc.get_state("draft-stream-ietf")
+
+    return draft_iesg_state.slug != "idexists" and draft_stream_state is not None and draft_stream_state.slug != "sub-pub"
+
+
 @register.filter
 def statehelp(state):
     "Output help icon with tooltip for state."
diff --git a/ietf/doc/templatetags/tests_ietf_filters.py b/ietf/doc/templatetags/tests_ietf_filters.py
index f018b7d9b3..b5130849ea 100644
--- a/ietf/doc/templatetags/tests_ietf_filters.py
+++ b/ietf/doc/templatetags/tests_ietf_filters.py
@@ -14,12 +14,14 @@
     ConflictReviewFactory,
     BofreqFactory,
     StatementFactory,
+    RfcFactory,
 )
 from ietf.doc.models import DocEvent
 from ietf.doc.templatetags.ietf_filters import (
     urlize_ietf_docs,
     is_valid_url,
     is_in_stream,
+    is_unexpected_wg_state,
 )
 from ietf.person.models import Person
 from ietf.utils.test_utils import TestCase
@@ -174,3 +176,17 @@ def test_urlize_ietf_docs(self):
         for input, output in cases:
             # debug.show("(input, urlize_ietf_docs(input), output)")
             self.assertEqual(urlize_ietf_docs(input), output)
+    
+    def test_is_unexpected_wg_state(self):
+        """
+        Test that the unexpected_wg_state function works correctly
+        """
+        # test documents with expected wg states
+        self.assertFalse(is_unexpected_wg_state(RfcFactory()))
+        self.assertFalse(is_unexpected_wg_state(WgDraftFactory (states=[('draft-stream-ietf', 'sub-pub')])))
+        self.assertFalse(is_unexpected_wg_state(WgDraftFactory (states=[('draft-iesg', 'idexists')])))
+        self.assertFalse(is_unexpected_wg_state(WgDraftFactory (states=[('draft-stream-ietf', 'wg-cand'), ('draft-iesg','idexists')])))
+
+        # test documents with unexpected wg states due to invalid combination of states
+        self.assertTrue(is_unexpected_wg_state(WgDraftFactory (states=[('draft-stream-ietf', 'wg-cand'), ('draft-iesg','lc-req')])))
+        self.assertTrue(is_unexpected_wg_state(WgDraftFactory (states=[('draft-stream-ietf', 'chair-w'), ('draft-iesg','pub-req')])))
diff --git a/ietf/templates/doc/search/status_columns.html b/ietf/templates/doc/search/status_columns.html
index 15f284fd12..5ba41bb9c4 100644
--- a/ietf/templates/doc/search/status_columns.html
+++ b/ietf/templates/doc/search/status_columns.html
@@ -78,6 +78,10 @@
                 {% person_link action_holder.person title=action_holder.role_for_doc %}{% if action_holder|action_holder_badge %} {{ action_holder|action_holder_badge }}{% endif %}{% if not forloop.last %},{% endif %}
             {% endfor %}
         {% endif %}
+        {% if doc|is_unexpected_wg_state %}
+            <br>
+            <span class="badge rounded-pill text-bg-warning">Unexpected WG state</span>
+        {% endif %}
     {% else %}
         {# RFC #}
         {{ doc.std_level|safe }} RFC

From aa2a3217a7006c05292650bb0d75b0243d2cc67b Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 28 Mar 2025 10:59:56 -0400
Subject: [PATCH 290/707] fix(agenda): strikethrough cancelled and rescheduled
 events (#8694)

* fix(agenda): strikethrough cancelled and rescheduled events

* fix(agenda): rescheduled + canceled badges width on mobile

* fix(agenda): use em for canceled / rescheduled badge on mobile

* fix: deleting badge width/display:block CSS

---------

Co-authored-by: Matthew Holloway <matthew@staff.ietf.org>
---
 client/agenda/AgendaDetailsModal.vue     |  1 -
 client/agenda/AgendaScheduleCalendar.vue |  1 -
 client/agenda/AgendaScheduleList.vue     | 12 ++++++++++--
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/client/agenda/AgendaDetailsModal.vue b/client/agenda/AgendaDetailsModal.vue
index 037e32f9cb..2582bf2159 100644
--- a/client/agenda/AgendaDetailsModal.vue
+++ b/client/agenda/AgendaDetailsModal.vue
@@ -327,7 +327,6 @@ async function fetchSessionMaterials () {
     border-radius: 5px;
 
     .badge {
-      width: 30px;
       font-size: .7em;
       background-color: $yellow-200;
       border-bottom: 1px solid $yellow-500;
diff --git a/client/agenda/AgendaScheduleCalendar.vue b/client/agenda/AgendaScheduleCalendar.vue
index 6701ddabd7..9863296341 100644
--- a/client/agenda/AgendaScheduleCalendar.vue
+++ b/client/agenda/AgendaScheduleCalendar.vue
@@ -330,7 +330,6 @@ function close () {
     }
 
     .badge {
-      width: 30px;
       font-size: .7em;
       border: 1px solid #CCC;
       text-transform: uppercase;
diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index 86c91bed85..d38c7842eb 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -1097,8 +1097,6 @@ onBeforeUnmount(() => {
         }
 
         @media screen and (max-width: $bs5-break-md) {
-          width: 30px;
-          display: block;
           margin: 2px 0 0 0;
         }
       }
@@ -1321,6 +1319,11 @@ onBeforeUnmount(() => {
 
     &.agenda-table-cell-room {
       border-right: 1px solid darken($red-100, 5%) !important;
+      text-decoration: line-through;
+    }
+
+    &.agenda-table-cell-name > a, &.agenda-table-cell-name > span {
+      text-decoration: line-through;
     }
 
     &:last-child {
@@ -1348,6 +1351,11 @@ onBeforeUnmount(() => {
 
     &.agenda-table-cell-room {
       border-right: 1px solid darken($orange-100, 5%) !important;
+      text-decoration: line-through;
+    }
+
+    &.agenda-table-cell-name > a, &.agenda-table-cell-name > span {
+      text-decoration: line-through;
     }
 
     &:last-child {

From 527db359e3836a587ba67432b814004b75635022 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 1 Apr 2025 09:03:59 -0400
Subject: [PATCH 291/707] chore: fix line ending for
 .github/ISSUE_TEMPLATE/config.yml

---
 .github/ISSUE_TEMPLATE/config.yml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index 5e27af9fed..320614b17e 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,8 +1,8 @@
-blank_issues_enabled: false
-contact_links:
-  - name: Help and questions
-    url: https://github.com/ietf-tools/datatracker/discussions/categories/help-questions
-    about: Need help? Have a question on setting up the project or its usage?
-  - name: Discuss new ideas
-    url: https://github.com/ietf-tools/datatracker/discussions/categories/ideas
-    about: Submit ideas for new features or improvements to be discussed.
+blank_issues_enabled: false
+contact_links:
+  - name: Help and questions
+    url: https://github.com/ietf-tools/datatracker/discussions/categories/help-questions
+    about: Need help? Have a question on setting up the project or its usage?
+  - name: Discuss new ideas
+    url: https://github.com/ietf-tools/datatracker/discussions/categories/ideas
+    about: Submit ideas for new features or improvements to be discussed.

From 9957cf190a4a61369f97e0224e0bb2ae6ed9c8be Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Tue, 1 Apr 2025 14:35:04 -0400
Subject: [PATCH 292/707] feat: block iesg ballot for docs from outside streams
 (#8761)

* feat: block iesg ballot for docs from outside streams

* test: correct failing irsg test

* feat: improve/simplify tests and condition

* test: filter out pyflakes tests related to globals
---
 ietf/doc/tests_ballot.py      | 29 +++++++++++++++++++++++------
 ietf/doc/tests_irsg_ballot.py |  2 +-
 ietf/doc/views_ballot.py      |  5 ++++-
 ietf/utils/test_runner.py     |  9 ++++++++-
 4 files changed, 36 insertions(+), 9 deletions(-)

diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index c7362b58e2..ec23f3d491 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -17,7 +17,7 @@
 from ietf.doc.models import (Document, State, DocEvent,
                              BallotPositionDocEvent, LastCallDocEvent, WriteupDocEvent, TelechatDocEvent)
 from ietf.doc.factories import (DocumentFactory, IndividualDraftFactory, IndividualRfcFactory, WgDraftFactory,
-                                BallotPositionDocEventFactory, BallotDocEventFactory, IRSGBallotDocEventFactory)
+                                BallotPositionDocEventFactory, BallotDocEventFactory, IRSGBallotDocEventFactory, RgDraftFactory)
 from ietf.doc.templatetags.ietf_filters import can_defer
 from ietf.doc.utils import create_ballot_if_not_open
 from ietf.doc.views_ballot import parse_ballot_edit_return_point
@@ -360,7 +360,7 @@ def test_request_last_call(self):
         self.assertTrue('aread@' in outbox[-1]['Cc'])
 
     def test_edit_ballot_writeup(self):
-        draft = IndividualDraftFactory(states=[('draft','active'),('draft-iesg','iesg-eva')])
+        draft = IndividualDraftFactory(states=[('draft','active'),('draft-iesg','iesg-eva')], stream_id='ietf')
         url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
@@ -390,8 +390,25 @@ def test_edit_ballot_writeup(self):
         self.assertTrue("This is a simple test" in d.latest_event(WriteupDocEvent, type="changed_ballot_writeup_text").text)
         self.assertTrue('iesg-eva' == d.get_state_slug('draft-iesg'))
 
+    def test_edit_ballot_writeup_unauthorized_stream(self):
+        # Test that accessing a document from unauthorized (irtf) stream returns a 404 error
+        draft = RgDraftFactory()
+        url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=draft.name))
+        login_testing_unauthorized(self, "ad", url)
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+
+    def test_edit_ballot_writeup_invalid_name(self):
+        # Test that accessing a non-existent document returns a 404 error
+        url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name="invalid_name"))
+        login_testing_unauthorized(self, "ad", url)
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+
     def test_edit_ballot_writeup_already_approved(self):
-        draft = IndividualDraftFactory(states=[('draft','active'),('draft-iesg','approved')])
+        draft = IndividualDraftFactory(states=[('draft','active'),('draft-iesg','approved')], stream_id='ietf')
         url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
@@ -465,7 +482,7 @@ def test_edit_ballot_rfceditornote(self):
     def test_issue_ballot(self):
         ad = Person.objects.get(user__username="ad")
         for case in ('none','past','future'):
-            draft = IndividualDraftFactory(ad=ad)
+            draft = IndividualDraftFactory(ad=ad, stream_id='ietf')
             if case in ('past','future'):
                 LastCallDocEvent.objects.create(
                     by=Person.objects.get(name='(System)'),
@@ -504,7 +521,7 @@ def test_issue_ballot(self):
 
     def test_issue_ballot_auto_state_change(self):
         ad = Person.objects.get(user__username="ad")
-        draft = IndividualDraftFactory(ad=ad, states=[('draft','active'),('draft-iesg','writeupw')])
+        draft = IndividualDraftFactory(ad=ad, states=[('draft','active'),('draft-iesg','writeupw')], stream_id='ietf')
         url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
@@ -528,7 +545,7 @@ def test_issue_ballot_auto_state_change(self):
 
     def test_issue_ballot_warn_if_early(self):
         ad = Person.objects.get(user__username="ad")
-        draft = IndividualDraftFactory(ad=ad, states=[('draft','active'),('draft-iesg','lc')])
+        draft = IndividualDraftFactory(ad=ad, states=[('draft','active'),('draft-iesg','lc')], stream_id='ietf')
         url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
diff --git a/ietf/doc/tests_irsg_ballot.py b/ietf/doc/tests_irsg_ballot.py
index 92752e48c4..aa62d8aaf9 100644
--- a/ietf/doc/tests_irsg_ballot.py
+++ b/ietf/doc/tests_irsg_ballot.py
@@ -288,7 +288,7 @@ def test_edit_ballot_position_permissions(self):
 
     def test_iesg_ballot_no_irsg_actions(self):
         ad = Person.objects.get(user__username="ad")
-        wg_draft = IndividualDraftFactory(ad=ad)
+        wg_draft = IndividualDraftFactory(ad=ad, stream_id='ietf')
         irsgmember = get_active_irsg()[0]
 
         url = urlreverse('ietf.doc.views_ballot.ballot_writeupnotes', kwargs=dict(name=wg_draft.name))
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 4ff40d2268..9e2a417933 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -611,6 +611,10 @@ def clean_ballot_writeup(self):
 def ballot_writeupnotes(request, name):
     """Editing of ballot write-up and notes"""
     doc = get_object_or_404(Document, name=name)
+
+    if doc.stream_id is None or doc.stream_id != 'ietf':
+        raise Http404("The requested operation is not allowed for this document.")
+
     prev_state = doc.get_state("draft-iesg")
 
     login = request.user.person
@@ -1335,4 +1339,3 @@ def parse_ballot_edit_return_point(path, doc_name, ballot_id):
         "ietf.iesg.views.past_documents",
     }
     return validate_return_to_path(path, get_default_path, allowed_path_handlers)
-
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index 3c89a2d01c..6b6f282c49 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -263,7 +263,14 @@ def pyflakes_test(self):
         path = os.path.join(settings.BASE_DIR)
         warnings = []
         warnings = pyflakes.checkPaths([path], verbosity=0)
-        self.assertEqual([], [str(w) for w in warnings])
+
+        # Filter out warnings about unused global variables
+        filtered_warnings = [
+            w for w in warnings
+            if not re.search(r"`global \w+` is unused: name is never assigned in scope", str(w))
+        ]
+
+        self.assertEqual([], [str(w) for w in filtered_warnings])
 
 class MyPyTest(TestCase):
 

From 48f97c68406a158a4d4bf5da58e9168d12a5f92e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 1 Apr 2025 16:12:33 -0300
Subject: [PATCH 293/707] chore: fix/refactor code near unneeded global
 declarations (#8765)

* refactor: unused vars in draft.py

* refactor: unwrap/simplify random_faker() prep

* chore: types/globals in test_runner.py

* chore: drop unneeded globals
---
 ietf/doc/templatetags/wg_menu.py |  2 --
 ietf/person/factories.py         | 26 ++++++++++++++------------
 ietf/utils/draft.py              |  8 +-------
 ietf/utils/patch.py              |  3 +--
 ietf/utils/test_runner.py        | 31 ++++++++++++++-----------------
 5 files changed, 30 insertions(+), 40 deletions(-)

diff --git a/ietf/doc/templatetags/wg_menu.py b/ietf/doc/templatetags/wg_menu.py
index 76bf7eb4d0..3e8d209448 100644
--- a/ietf/doc/templatetags/wg_menu.py
+++ b/ietf/doc/templatetags/wg_menu.py
@@ -62,8 +62,6 @@
 
 @register.simple_tag
 def wg_menu(flavor):
-    global parents
-
     for p in parents:
         p.short_name = parent_short_names.get(p.acronym) or p.name
         if p.short_name.endswith(" Area"):
diff --git a/ietf/person/factories.py b/ietf/person/factories.py
index 45de554766..98756f26c8 100644
--- a/ietf/person/factories.py
+++ b/ietf/person/factories.py
@@ -26,20 +26,22 @@
 
 fake = faker.Factory.create()
 
-def setup():
-    global acceptable_fakers
-    # The transliteration of some Arabic and Devanagari names introduces
-    # non-alphabetic characters that don't work with the draft author
-    # extraction code, and also don't seem to match the way people with Arabic
-    # names romanize Arabic names.  Exclude those locales from name generation
-    # in order to avoid test failures.
-    locales = set( [ l for l in faker.config.AVAILABLE_LOCALES if not (l.startswith('ar_') or l.startswith('sg_') or l=='fr_QC') ] )
-    acceptable_fakers = [faker.Faker(locale) for locale in locales]
-setup()
+# The transliteration of some Arabic and Devanagari names introduces
+# non-alphabetic characters that don't work with the draft author
+# extraction code, and also don't seem to match the way people with Arabic
+# names romanize Arabic names.  Exclude those locales from name generation
+# in order to avoid test failures.
+_acceptable_fakers = [
+    faker.Faker(locale)
+    for locale in set(faker.config.AVAILABLE_LOCALES)
+    if not (locale.startswith('ar_') or locale.startswith('sg_') or locale == 'fr_QC')
+]
+
 
 def random_faker():
-    global acceptable_fakers
-    return random.sample(acceptable_fakers, 1)[0]
+    """Helper to get a random faker acceptable for User names"""
+    return random.sample(_acceptable_fakers, 1)[0]
+
 
 class UserFactory(factory.django.DjangoModelFactory):
     class Meta:
diff --git a/ietf/utils/draft.py b/ietf/utils/draft.py
index 50add5abba..53d3d40811 100755
--- a/ietf/utils/draft.py
+++ b/ietf/utils/draft.py
@@ -65,7 +65,6 @@
 opt_debug = False
 opt_timestamp = False
 opt_trace = False
-opt_authorinfo = False
 opt_attributes = False
 # Don't forget to add the option variable to the globals list in _main below
 
@@ -1332,8 +1331,6 @@ def getmeta(fn):
 
 # ----------------------------------------------------------------------
 def _output(docname, fields, outfile=sys.stdout):
-    global company_domain
-
     if opt_attributes:
         def outputkey(key, fields):
             field = fields[key]
@@ -1373,9 +1370,8 @@ def _printmeta(fn, outfile=sys.stdout):
 # Main
 # ----------------------------------------------------------------------
 
-company_domain = {}                     # type: Dict[str, str]
 def _main(outfile=sys.stdout):
-    global opt_debug, opt_timestamp, opt_trace, opt_authorinfo, files, company_domain, opt_attributes
+    global opt_debug, opt_timestamp, opt_trace, files, opt_attributes
     # set default values, if any
     # ----------------------------------------------------------------------
     # Option processing
@@ -1423,8 +1419,6 @@ def _main(outfile=sys.stdout):
         elif opt in ["-T", "--trace"]: # Emit trace information while working
             opt_trace = True
 
-    company_domain = {}
- 
     if not files:
         files = [ "-" ]
 
diff --git a/ietf/utils/patch.py b/ietf/utils/patch.py
index 9de2270ebb..fd3e4a165d 100644
--- a/ietf/utils/patch.py
+++ b/ietf/utils/patch.py
@@ -87,8 +87,7 @@ def createLock(self):
 debugmode = False
 
 def setdebug():
-  global debugmode, streamhandler
-
+  global debugmode
   debugmode = True
   loglevel = logging.DEBUG
   logformat = "%(levelname)8s %(message)s"
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index 6b6f282c49..a77377ffb5 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -53,9 +53,10 @@
 import factory.random
 import urllib3
 import warnings
-from urllib.parse import urlencode
 
 from fnmatch import fnmatch
+from typing import Callable, Optional
+from urllib.parse import urlencode
 
 from coverage.report import Reporter
 from coverage.results import Numbers
@@ -90,11 +91,11 @@
 from mypy_boto3_s3.service_resource import Bucket
 
 
-loaded_templates = set()
-visited_urls = set()
-test_database_name = None
-old_destroy = None
-old_create = None
+loaded_templates: set[str] = set()
+visited_urls: set[str] = set()
+test_database_name: Optional[str] = None
+old_destroy: Optional[Callable] = None
+old_create: Optional[Callable] = None
 
 template_coverage_collection = None
 code_coverage_collection = None
@@ -230,10 +231,12 @@ def load_and_run_fixtures(verbosity):
             fn()
 
 def safe_create_test_db(self, verbosity, *args, **kwargs):
-    global test_database_name, old_create
+    if old_create is None:
+        raise RuntimeError("old_create has not been set, cannot proceed")
     keepdb = kwargs.get('keepdb', False)
     if not keepdb:
         print("     Creating test database...")
+    global test_database_name
     test_database_name = old_create(self, 0, *args, **kwargs)
 
     if settings.GLOBAL_TEST_FIXTURES:
@@ -243,8 +246,9 @@ def safe_create_test_db(self, verbosity, *args, **kwargs):
     return test_database_name
 
 def safe_destroy_test_db(*args, **kwargs):
+    if old_destroy is None:
+        raise RuntimeError("old_destroy has not been set, cannot proceed")
     sys.stdout.write('\n')
-    global test_database_name, old_destroy
     keepdb = kwargs.get('keepdb', False)
     if not keepdb:
         if settings.DATABASES["default"]["NAME"] != test_database_name:
@@ -358,15 +362,13 @@ class TemplateCoverageLoader(BaseLoader):
     is_usable = True
 
     def get_template(self, template_name, skip=None):
-        global template_coverage_collection, loaded_templates
-        if template_coverage_collection == True:
+        if template_coverage_collection:
             loaded_templates.add(str(template_name))
         raise TemplateDoesNotExist(template_name)
 
 def record_urls_middleware(get_response):
     def record_urls(request):
-        global url_coverage_collection, visited_urls
-        if url_coverage_collection == True:
+        if url_coverage_collection:
             visited_urls.add(request.path)
         return get_response(request)
     return record_urls
@@ -532,7 +534,6 @@ def report_test_result(self, test):
                             ( test, test_coverage*100, latest_coverage_version, master_coverage*100, ))
 
     def template_coverage_test(self):
-        global loaded_templates
         if self.runner.check_coverage:
             apps = [ app.split('.')[-1] for app in self.runner.test_apps ]
             all = get_template_paths(apps)
@@ -760,7 +761,6 @@ def __init__(
         self.show_logging = show_logging
         self.rerun = rerun
         self.test_labels = None
-        global validation_settings
         validation_settings["validate_html"] = self if validate_html else None
         validation_settings["validate_html_harder"] = self if validate_html and validate_html_harder else None
         validation_settings["show_logging"] = show_logging
@@ -783,9 +783,6 @@ def __init__(
         self.blobstoremanager = TestBlobstoreManager() if manage_blobstore else None
 
     def setup_test_environment(self, **kwargs):
-        global template_coverage_collection
-        global url_coverage_collection
-
         ietf.utils.mail.test_mode = True
         ietf.utils.mail.SMTP_ADDR['ip4'] = '127.0.0.1'
         ietf.utils.mail.SMTP_ADDR['port'] = 2025

From 48bee8a58381e5caa6cf5d6b56bd58eff614a918 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 1 Apr 2025 17:19:30 -0300
Subject: [PATCH 294/707] chore: update libreoffice install for bookworm
 (#8768)

---
 dev/build/Dockerfile | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index cc55c92881..c25298d652 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -10,9 +10,8 @@ RUN groupadd -g 1000 datatracker && \
 RUN apt-get purge -y imagemagick imagemagick-6-common
 
 # Install libreoffice (needed via PPT2PDF_COMMAND)
-RUN echo "deb http://deb.debian.org/debian bullseye-backports main" > /etc/apt/sources.list.d/bullseye-backports.list && \
-    apt-get update && \
-    apt-get -qyt bullseye-backports install libreoffice-nogui
+RUN apt-get update && \
+    apt-get -qy install libreoffice-nogui
 
 COPY . .
 COPY ./dev/build/start.sh ./start.sh

From 15ef59133a0e8b62158836b697d9413dc395228f Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@staff.ietf.org>
Date: Thu, 3 Apr 2025 05:10:22 +1300
Subject: [PATCH 295/707] chore: libreoffice flags for resilience (#8769)

---
 ietf/settings.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 1fe5f48229..33a2f976d9 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1103,7 +1103,12 @@ def skip_unreadable_post(record):
 
 DATATRACKER_MAX_UPLOAD_SIZE = 40960000
 PPT2PDF_COMMAND = [
-    "/usr/bin/soffice", "--headless", "--convert-to", "pdf:writer_globaldocument_pdf_Export", "--outdir"
+    "/usr/bin/soffice",
+    "--headless", # no GUI
+    "--safe-mode", # use a new libreoffice profile every time (ensures no reliance on accumulated profile config)
+    "--norestore", # don't attempt to restore files after a previous crash (ensures that one crash won't block future conversions until UI intervention)
+    "--convert-to", "pdf:writer_globaldocument_pdf_Export",
+    "--outdir"
 ]
 
 STATS_REGISTRATION_ATTENDEES_JSON_URL = 'https://registration.ietf.org/{number}/attendees/'

From afa79dc55b16463d56b531bb1b6b06fbbeb12ace Mon Sep 17 00:00:00 2001
From: Jim Fenton <fenton@bluepopcorn.net>
Date: Wed, 2 Apr 2025 09:10:38 -0700
Subject: [PATCH 296/707] feat: Warn if uploading minutes before session end
 (#8700)

* Warn if uploading minutes before sessionn end

* Remove extraneous btn-primary for session future

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* fix: guard against unscheduled sessions

* fix: test addition of warning

* fix: another guard against unscheduled sessions

* feat: test future warning on session details pannel

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/meeting/tests_views.py                   | 286 ++++++++++--------
 ietf/meeting/views.py                         |   6 +
 .../meeting/session_details_panel.html        |   2 +-
 .../meeting/upload_session_minutes.html       |   5 +
 4 files changed, 168 insertions(+), 131 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 0f91986f77..a93a26b981 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -6541,110 +6541,130 @@ def test_upload_bluesheets_interim_chair_access(self):
         self.assertIn('Upload', str(q("title")))
         
 
-    def test_upload_minutes_agenda(self):
-        for doctype in ('minutes','agenda'):
-            session = SessionFactory(meeting__type_id='ietf')
-            if doctype == 'minutes':
-                url = urlreverse('ietf.meeting.views.upload_session_minutes',kwargs={'num':session.meeting.number,'session_id':session.id})
-            else:
-                url = urlreverse('ietf.meeting.views.upload_session_agenda',kwargs={'num':session.meeting.number,'session_id':session.id})
-            self.client.logout()
-            login_testing_unauthorized(self,"secretary",url)
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertIn('Upload', str(q("Title")))
-            self.assertFalse(session.presentations.exists())
-            self.assertFalse(q('form input[type="checkbox"]'))
-    
-            session2 = SessionFactory(meeting=session.meeting,group=session.group)
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('form input[type="checkbox"]'))
-    
-            # test not submitting a file
-            r = self.client.post(url, dict(submission_method="upload"))
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q("form .is-invalid"))
-    
-            test_file = BytesIO(b'this is some text for a test')
-            test_file.name = "not_really.json"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('form .is-invalid'))
-    
-            test_file = BytesIO(b'this is some text for a test'*1510000)
-            test_file.name = "not_really.pdf"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('form .is-invalid'))
-    
-            test_file = BytesIO(b'<html><frameset><frame src="foo.html"></frame><frame src="bar.html"></frame></frameset></html>')
-            test_file.name = "not_really.html"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertTrue(q('form .is-invalid'))
-
-            # Test html sanitization
-            test_file = BytesIO(b'<html><head><title>Title</title></head><body><h1>Title</h1><section>Some text</section></body></html>')
-            test_file.name = "some.html"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertEqual(r.status_code, 302)
-            doc = session.presentations.filter(document__type_id=doctype).first().document
-            self.assertEqual(doc.rev,'00')
-            text = doc.text()
-            self.assertIn('Some text', text)
-            self.assertNotIn('<section>', text)
-            text = retrieve_str(doctype, f"{doc.name}-{doc.rev}.html")
-            self.assertIn('Some text', text)
-            self.assertNotIn('<section>', text)
-
-            # txt upload
-            test_bytes = b'This is some text for a test, with the word\nvirtual at the beginning of a line.'
-            test_file = BytesIO(test_bytes)
-            test_file.name = "some.txt"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=False))
-            self.assertEqual(r.status_code, 302)
-            doc = session.presentations.filter(document__type_id=doctype).first().document
-            self.assertEqual(doc.rev,'01')
-            self.assertFalse(session2.presentations.filter(document__type_id=doctype))
-            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
-            self.assertEqual(retrieved_bytes, test_bytes)
-    
+    def test_label_future_sessions(self):
+        self.client.login(username='secretary', password='secretary+password')
+        for future in (True, False):
+            mtg_date = date_today()+datetime.timedelta(days=180 if future else -180)
+            session = SessionFactory(meeting__type_id='ietf', meeting__date=mtg_date)
+            # Verify future warning shows on the session details panel
+            url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
             r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertIn('Revise', str(q("Title")))
-            test_bytes = b'this is some different text for a test'
-            test_file = BytesIO(test_bytes)
-            test_file.name = "also_some.txt"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=True))
-            self.assertEqual(r.status_code, 302)
-            doc = Document.objects.get(pk=doc.pk)
-            self.assertEqual(doc.rev,'02')
-            self.assertTrue(session2.presentations.filter(document__type_id=doctype))
-            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
-            self.assertEqual(retrieved_bytes, test_bytes)
-
-            # Test bad encoding
-            test_file = BytesIO('<html><h1>Title</h1><section>Some\x93text</section></html>'.encode('latin1'))
-            test_file.name = "some.html"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertContains(r, 'Could not identify the file encoding')
-            doc = Document.objects.get(pk=doc.pk)
-            self.assertEqual(doc.rev,'02')
+            self.assertTrue(r.status_code==200)
+            if future:
+                self.assertContains(r, "Session has not ended yet")
+            else:
+                self.assertNotContains(r, "Session has not ended yet")
 
-            # Verify that we don't have dead links
-            url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
-            top = '/meeting/%s/' % session.meeting.number
-            self.requests_mock.get(f'{session.notes_url()}/download', text='markdown notes')
-            self.requests_mock.get(f'{session.notes_url()}/info', text=json.dumps({'title': 'title', 'updatetime': '2021-12-01T17:11:00z'}))
-            self.crawl_materials(url=url, top=top)
+    def test_upload_minutes_agenda(self):
+        for doctype in ('minutes','agenda'):
+            for future in (True, False):
+                mtg_date = date_today()+datetime.timedelta(days=180 if future else -180)
+                session = SessionFactory(meeting__type_id='ietf', meeting__date=mtg_date)
+                if doctype == 'minutes':
+                    url = urlreverse('ietf.meeting.views.upload_session_minutes',kwargs={'num':session.meeting.number,'session_id':session.id})
+                else:
+                    url = urlreverse('ietf.meeting.views.upload_session_agenda',kwargs={'num':session.meeting.number,'session_id':session.id})
+                self.client.logout()
+                login_testing_unauthorized(self,"secretary",url)
+                r = self.client.get(url)
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertIn('Upload', str(q("Title")))
+                self.assertFalse(session.presentations.exists())
+                self.assertFalse(q('form input[type="checkbox"]'))
+                if future and doctype == "minutes":
+                    self.assertContains(r, "Session has not ended yet")
+                else:
+                    self.assertNotContains(r, "Session has not ended yet")
+        
+                session2 = SessionFactory(meeting=session.meeting,group=session.group)
+                r = self.client.get(url)
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertTrue(q('form input[type="checkbox"]'))
+        
+                # test not submitting a file
+                r = self.client.post(url, dict(submission_method="upload"))
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertTrue(q("form .is-invalid"))
+        
+                test_file = BytesIO(b'this is some text for a test')
+                test_file.name = "not_really.json"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertTrue(q('form .is-invalid'))
+        
+                test_file = BytesIO(b'this is some text for a test'*1510000)
+                test_file.name = "not_really.pdf"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertTrue(q('form .is-invalid'))
+        
+                test_file = BytesIO(b'<html><frameset><frame src="foo.html"></frame><frame src="bar.html"></frame></frameset></html>')
+                test_file.name = "not_really.html"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertTrue(q('form .is-invalid'))
+
+                # Test html sanitization
+                test_file = BytesIO(b'<html><head><title>Title</title></head><body><h1>Title</h1><section>Some text</section></body></html>')
+                test_file.name = "some.html"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertEqual(r.status_code, 302)
+                doc = session.presentations.filter(document__type_id=doctype).first().document
+                self.assertEqual(doc.rev,'00')
+                text = doc.text()
+                self.assertIn('Some text', text)
+                self.assertNotIn('<section>', text)
+                text = retrieve_str(doctype, f"{doc.name}-{doc.rev}.html")
+                self.assertIn('Some text', text)
+                self.assertNotIn('<section>', text)
+
+                # txt upload
+                test_bytes = b'This is some text for a test, with the word\nvirtual at the beginning of a line.'
+                test_file = BytesIO(test_bytes)
+                test_file.name = "some.txt"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=False))
+                self.assertEqual(r.status_code, 302)
+                doc = session.presentations.filter(document__type_id=doctype).first().document
+                self.assertEqual(doc.rev,'01')
+                self.assertFalse(session2.presentations.filter(document__type_id=doctype))
+                retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+                self.assertEqual(retrieved_bytes, test_bytes)
+        
+                r = self.client.get(url)
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertIn('Revise', str(q("Title")))
+                test_bytes = b'this is some different text for a test'
+                test_file = BytesIO(test_bytes)
+                test_file.name = "also_some.txt"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file,apply_to_all=True))
+                self.assertEqual(r.status_code, 302)
+                doc = Document.objects.get(pk=doc.pk)
+                self.assertEqual(doc.rev,'02')
+                self.assertTrue(session2.presentations.filter(document__type_id=doctype))
+                retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+                self.assertEqual(retrieved_bytes, test_bytes)
+
+                # Test bad encoding
+                test_file = BytesIO('<html><h1>Title</h1><section>Some\x93text</section></html>'.encode('latin1'))
+                test_file.name = "some.html"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertContains(r, 'Could not identify the file encoding')
+                doc = Document.objects.get(pk=doc.pk)
+                self.assertEqual(doc.rev,'02')
+
+                # Verify that we don't have dead links
+                url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
+                top = '/meeting/%s/' % session.meeting.number
+                self.requests_mock.get(f'{session.notes_url()}/download', text='markdown notes')
+                self.requests_mock.get(f'{session.notes_url()}/info', text=json.dumps({'title': 'title', 'updatetime': '2021-12-01T17:11:00z'}))
+                self.crawl_materials(url=url, top=top)
 
     def test_upload_minutes_agenda_unscheduled(self):
         for doctype in ('minutes','agenda'):
@@ -6661,6 +6681,7 @@ def test_upload_minutes_agenda_unscheduled(self):
             self.assertIn('Upload', str(q("Title")))
             self.assertFalse(session.presentations.exists())
             self.assertFalse(q('form input[type="checkbox"]'))
+            self.assertNotContains(r, "Session has not ended yet")
 
             test_file = BytesIO(b'this is some text for a test')
             test_file.name = "not_really.txt"
@@ -6669,35 +6690,40 @@ def test_upload_minutes_agenda_unscheduled(self):
 
     @override_settings(MEETING_MATERIALS_SERVE_LOCALLY=True)
     def test_upload_minutes_agenda_interim(self):
-        session=SessionFactory(meeting__type_id='interim')
         for doctype in ('minutes','agenda'):
-            if doctype=='minutes':
-                url = urlreverse('ietf.meeting.views.upload_session_minutes',kwargs={'num':session.meeting.number,'session_id':session.id})
-            else:
-                url = urlreverse('ietf.meeting.views.upload_session_agenda',kwargs={'num':session.meeting.number,'session_id':session.id})
-            self.client.logout()
-            login_testing_unauthorized(self,"secretary",url)
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            q = PyQuery(r.content)
-            self.assertIn('Upload', str(q("title")))
-            self.assertFalse(session.presentations.filter(document__type_id=doctype))
-            test_bytes = b'this is some text for a test'
-            test_file = BytesIO(test_bytes)
-            test_file.name = "not_really.txt"
-            r = self.client.post(url,dict(submission_method="upload",file=test_file))
-            self.assertEqual(r.status_code, 302)
-            doc = session.presentations.filter(document__type_id=doctype).first().document
-            self.assertEqual(doc.rev,'00')
-            retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
-            self.assertEqual(retrieved_bytes, test_bytes)
-
-            # Verify that we don't have dead links
-            url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
-            top = '/meeting/%s/' % session.meeting.number
-            self.requests_mock.get(f'{session.notes_url()}/download', text='markdown notes')
-            self.requests_mock.get(f'{session.notes_url()}/info', text=json.dumps({'title': 'title', 'updatetime': '2021-12-01T17:11:00z'}))
-            self.crawl_materials(url=url, top=top)
+            for future in (True, False):
+                session=SessionFactory(meeting__type_id='interim', meeting__date = date_today()+datetime.timedelta(days=180 if future else -180))
+                if doctype=='minutes':
+                    url = urlreverse('ietf.meeting.views.upload_session_minutes',kwargs={'num':session.meeting.number,'session_id':session.id})
+                else:
+                    url = urlreverse('ietf.meeting.views.upload_session_agenda',kwargs={'num':session.meeting.number,'session_id':session.id})
+                self.client.logout()
+                login_testing_unauthorized(self,"secretary",url)
+                r = self.client.get(url)
+                self.assertEqual(r.status_code, 200)
+                q = PyQuery(r.content)
+                self.assertIn('Upload', str(q("title")))
+                self.assertFalse(session.presentations.filter(document__type_id=doctype))
+                if future and doctype == "minutes":
+                    self.assertContains(r, "Session has not ended yet")
+                else:
+                    self.assertNotContains(r, "Session has not ended yet")
+                test_bytes = b'this is some text for a test'
+                test_file = BytesIO(test_bytes)
+                test_file.name = "not_really.txt"
+                r = self.client.post(url,dict(submission_method="upload",file=test_file))
+                self.assertEqual(r.status_code, 302)
+                doc = session.presentations.filter(document__type_id=doctype).first().document
+                self.assertEqual(doc.rev,'00')
+                retrieved_bytes = retrieve_bytes(doctype, f"{doc.name}-{doc.rev}.txt")
+                self.assertEqual(retrieved_bytes, test_bytes)
+
+                # Verify that we don't have dead links
+                url = urlreverse('ietf.meeting.views.session_details', kwargs={'num':session.meeting.number, 'acronym': session.group.acronym})
+                top = '/meeting/%s/' % session.meeting.number
+                self.requests_mock.get(f'{session.notes_url()}/download', text='markdown notes')
+                self.requests_mock.get(f'{session.notes_url()}/info', text=json.dumps({'title': 'title', 'updatetime': '2021-12-01T17:11:00z'}))
+                self.crawl_materials(url=url, top=top)
 
     @override_settings(MEETING_MATERIALS_SERVE_LOCALLY=True)
     def test_upload_narrativeminutes(self):
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 6a73059d92..722bf829e1 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -2522,6 +2522,8 @@ def session_details(request, num, acronym):
     else:
         pending_suggestions = SlideSubmission.objects.none()
 
+    tsa = session.official_timeslotassignment()
+    future = tsa is not None and timezone.now() < tsa.timeslot.end_time()
     return render(request, "meeting/session_details.html",
                   { 'scheduled_sessions':scheduled_sessions ,
                     'unscheduled_sessions':unscheduled_sessions , 
@@ -2532,6 +2534,7 @@ def session_details(request, num, acronym):
                     'can_manage_materials' : can_manage,
                     'can_view_request': can_view_request,
                     'thisweek': datetime_today()-datetime.timedelta(days=7),
+                    'future': future,
                   })
 
 class SessionDraftsForm(forms.Form):
@@ -2823,11 +2826,14 @@ def upload_session_minutes(request, session_id, num):
     else:
         form = UploadMinutesForm(show_apply_to_all_checkbox)
 
+    tsa = session.official_timeslotassignment()
+    future = tsa is not None and timezone.now() < tsa.timeslot.end_time()
     return render(request, "meeting/upload_session_minutes.html", 
                   {'session': session,
                    'session_number': session_number,
                    'minutes_sp' : minutes_sp,
                    'form': form,
+                   'future': future,
                   })
 
 @role_required("Secretariat")
diff --git a/ietf/templates/meeting/session_details_panel.html b/ietf/templates/meeting/session_details_panel.html
index 87d9e3d672..7c52ac0b4a 100644
--- a/ietf/templates/meeting/session_details_panel.html
+++ b/ietf/templates/meeting/session_details_panel.html
@@ -109,7 +109,7 @@ <h3 class="mt-4">Agenda, Minutes, and Bluesheets</h3>
                 </a>
             {% endif %}
             {% if not session.type_counter.minutes %}
-                <a class="btn btn-primary" href="{% url 'ietf.meeting.views.import_session_minutes' num=session.meeting.number session_id=session.pk %}">Import minutes from notes.ietf.org</a>
+                <a class="btn {% if future %}btn-warning" title="Session has not ended yet{% else %}btn-primary{% endif %}" href="{% url 'ietf.meeting.views.import_session_minutes' num=session.meeting.number session_id=session.pk %}">Import minutes from notes.ietf.org</a>
                 <a class="btn btn-primary"
                    href="{% url 'ietf.meeting.views.upload_session_minutes' session_id=session.pk num=session.meeting.number %}">
                     Upload minutes
diff --git a/ietf/templates/meeting/upload_session_minutes.html b/ietf/templates/meeting/upload_session_minutes.html
index 30eadda277..324440681f 100644
--- a/ietf/templates/meeting/upload_session_minutes.html
+++ b/ietf/templates/meeting/upload_session_minutes.html
@@ -26,6 +26,11 @@ <h1>
     {% if session_number %}
         <h2>Session {{ session_number }} : {{ session.official_timeslotassignment.timeslot.time|timezone:session.meeting.time_zone|date:"D M-d-Y Hi" }}</h2>
     {% endif %}
+    {% if future %}
+    <p class="alert alert-warning my-3">
+        Caution: Session has not ended yet
+    </p>
+    {% endif %}
     <form enctype="multipart/form-data" method="post" class="my-3">
         {% csrf_token %}
         {% bootstrap_form form %}

From c70e67dc917dea9fe0347575811d5ab02ef91ce8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 2 Apr 2025 13:11:08 -0300
Subject: [PATCH 297/707] chore: unpin importlib-metadata (#8762)

---
 requirements.txt | 1 -
 1 file changed, 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 8bd906c220..cd93f448e2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -42,7 +42,6 @@ gunicorn>=20.1.0
 hashids>=1.3.1
 html2text>=2020.1.16    # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
-importlib-metadata<8.5.0  # indirect req of Markdown/inflect; https://github.com/ietf-tools/datatracker/issues/7924
 inflect>= 6.0.2
 jsonfield>=3.1.0    # for SubmissionCheck.  This is https://github.com/bradjasper/django-jsonfield/.
 jsonschema[format]>=4.2.1

From b95bbe670fb1f3506ef156034fd5107c1dca3365 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Wed, 2 Apr 2025 16:24:20 +0000
Subject: [PATCH 298/707] ci: update base image target version to 20250402T1611

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index c25298d652..cd0a70667c 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250327T1859
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250402T1611
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 50e8bfd839..1195fc9a0b 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250327T1859
+20250402T1611

From 2b7d4ad414e61b001cab30703a270929852a6b57 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 4 Apr 2025 02:19:43 -0400
Subject: [PATCH 299/707] ci: add update staging DB step to deploy workflow

---
 .github/workflows/build.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 123bd5c65a..36439aa6cf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -444,6 +444,19 @@ jobs:
       PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
       
     steps:
+      - name: Refresh Staging DB
+        uses: the-actions-org/workflow-dispatch@v4
+        with:
+          workflow: update-staging-db.yml
+          repo: ietf-tools/infra-k8s
+          ref: main
+          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
+          inputs: '{ "sourceDb":"datatracker" }'
+          wait-for-completion: true
+          wait-for-completion-timeout: 5m
+          wait-for-completion-interval: 20s
+          display-workflow-run-url: false
+
       - name: Deploy to staging
         uses: the-actions-org/workflow-dispatch@v4
         with:

From f9ca03086493a00ca188cb4cd949ba1831fd452a Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Tue, 8 Apr 2025 20:24:00 -0400
Subject: [PATCH 300/707] fix: unexpected chatlog links (#8774)

* fix: unexpected chatlog links

* fix: separate handling of polls and chatlogs
---
 ietf/meeting/tests_views.py                   | 38 +++++++++++++++++++
 ietf/meeting/views.py                         |  8 +++-
 .../meeting/session_buttons_include.html      | 11 +++---
 3 files changed, 51 insertions(+), 6 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index a93a26b981..dfb414b61b 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -7736,6 +7736,44 @@ def test_add_session_recordings(self):
         self.assertEqual(r.status_code, 404)
         self.assertFalse(mock_delete.called)
 
+    def test_show_chatlog_links(self):
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        session = SessionFactory(meeting=meeting)
+        doc_name = 'chatlog-72-mars-197001010000'
+        SessionPresentation.objects.create(session=session,document=DocumentFactory(type_id='chatlog', name=doc_name))
+
+        session_url = urlreverse('ietf.meeting.views.session_details', 
+                                 kwargs={'num':meeting.number, 'acronym':session.group.acronym})
+
+        r = self.client.get(session_url)
+
+        self.assertEqual(r.status_code, 200)
+
+        q = PyQuery(r.content)
+
+        # Find the chatlog link in the desktop view
+        link_chatlog_box = q(f'a[title="Chat logs for {session.group.acronym}"]')
+        self.assertTrue(link_chatlog_box, 'Expected <a> element with title "Chat logs for {group.acronym}" not found.')
+        self.assertEqual(link_chatlog_box.attr('href'), '/doc/'+ doc_name)
+
+        # Find the chatlog link in the mobile view
+        link_chatlog_list = q('li:contains("Chat logs")')
+        self.assertTrue(link_chatlog_list, 'Expected <li> element containing "Chat logs" not found.')
+        self.assertEqual(link_chatlog_list.find('a').attr('href'), '/doc/'+ doc_name)
+
+    def test_hide_chatlog_links(self):
+        # mock meeting and session, but no chatlog document
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        session = SessionFactory(meeting=meeting)
+
+        session_url = urlreverse('ietf.meeting.views.session_details', 
+                                 kwargs={'num':meeting.number, 'acronym':session.group.acronym})
+
+        r = self.client.get(session_url)
+
+        self.assertEqual(r.status_code, 200)
+        # validate no links for chat logs exist
+        self.assertNotContains(r, 'Chat logs')
 
 
 class HasMeetingsTests(TestCase):
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 722bf829e1..591b934b58 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -23,6 +23,7 @@
 from urllib.parse import parse_qs, unquote, urlencode, urlsplit, urlunsplit, urlparse
 from tempfile import mkstemp
 from wsgiref.handlers import format_date_time
+from itertools import chain
 
 from django import forms
 from django.core.cache import caches
@@ -2496,7 +2497,12 @@ def session_details(request, num, acronym):
         session.filtered_artifacts.sort(key=lambda d:artifact_types.index(d.document.type.slug))
         session.filtered_slides    = session.presentations.filter(document__type__slug='slides').order_by('order')
         session.filtered_drafts    = session.presentations.filter(document__type__slug='draft')
-        session.filtered_chatlog_and_polls = session.presentations.filter(document__type__slug__in=('chatlog', 'polls')).order_by('document__type__slug')
+        
+        filtered_polls = session.presentations.filter(document__type__slug=('polls'))
+        filtered_chatlogs = session.presentations.filter(document__type__slug=('chatlog'))
+        session.filtered_chatlog_and_polls = chain(filtered_chatlogs, filtered_polls)
+        session.chatlog = filtered_chatlogs.first()
+
         # TODO FIXME Deleted materials shouldn't be in the presentations
         for qs in [session.filtered_artifacts,session.filtered_slides,session.filtered_drafts]:
             qs = [p for p in qs if p.document.get_state_slug(p.document.type_id)!='deleted']
diff --git a/ietf/templates/meeting/session_buttons_include.html b/ietf/templates/meeting/session_buttons_include.html
index bb5144b45d..b1fd92ba5b 100644
--- a/ietf/templates/meeting/session_buttons_include.html
+++ b/ietf/templates/meeting/session_buttons_include.html
@@ -2,7 +2,8 @@
 {% load origin %}
 {% load static %}
 {% load textfilters tz %}
-{% load ietf_filters %}
+{% load ietf_filters session_filters %}
+
 {% origin %}
 {% if item and item|should_show_agenda_session_buttons %}
     {% with slug=item.slug session=item.session timeslot=item.timeslot %}
@@ -126,10 +127,10 @@
                     </a>
                 {% else %}
                     {# chat logs #}
-                    {% if meeting.has_chat_logs %}
+                    {% if meeting.has_chat_logs and session.chatlog %}
                         <a class="btn btn-outline-primary"
                             role="button"
-                            href="{{session.chat_archive_url}}"
+                            href="/doc/{{ session.chatlog.document.name }}"
                             aria-label="Chat logs for {{ session.chat_room_name }}"
                             title="Chat logs for {{ session.chat_room_name }}">
                             <i class="bi bi-file-text"></i>
@@ -303,10 +304,10 @@
                         </li>
                     {% else %}
                         {# chat logs #}
-			{% if meeting.has_chat_logs %}
+			            {% if meeting.has_chat_logs and session.chatlog %}
                             <li>
                                 <a class="dropdown-item"
-                                    href="session.chat_room_url">
+                                    href="/doc/{{ session.chatlog.document.name }}">
                                     <i class="bi bi-file-text"></i> Chat logs
                                 </a>
                             </li>

From a728cf2440ab5f4acc88714023d3b2e2f834018b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 8 Apr 2025 21:24:22 -0300
Subject: [PATCH 301/707] test: fix apparent typo / tautological test (#8773)

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/api/tests.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index ac0b37a608..7cc56c2d0a 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1440,7 +1440,7 @@ def test_api_top_level(self):
         resource_list = r.json()
 
         for name in self.apps:
-            if not name in self.apps:
+            if not name in resource_list:
                 sys.stderr.write("Expected a REST API resource for %s, but didn't find one\n" % name)
 
         for name in self.apps:

From 0348dbd865b99692235c2f6e5a75a8064f8113a1 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Tue, 15 Apr 2025 07:37:40 -0700
Subject: [PATCH 302/707] feat: new meeting registration implementation (#8408)

* feat: new meeting registration implementation

* fix: use on_delete=models.PROTECT for certain FKs

* fix: convert outlier reg_types,ticket_types on initial migration

* fix: fix initial migration mistake

* fix: remove management command. add task

* fix: move migration 0010 to 0011 to resolve conflict

* fix: add missing migration for model changes

* fix: add reg type names for unknown

* fix: change migration to use 'unknown'. Add test function

* fix: merge migrations

* fix: rename test_migrate_registrations to check_migrate_registrations

* fix: update names.json

* fix: fix migration issue and add task

* fix: fix broken migration dependency
---
 ietf/api/tests.py                             | 193 +++++++++++++++++-
 ietf/api/urls.py                              |   1 +
 ietf/api/views.py                             | 143 ++++++++++++-
 ietf/meeting/admin.py                         |  32 ++-
 ietf/meeting/factories.py                     |  28 ++-
 .../0011_registration_registrationticket.py   |  90 ++++++++
 ietf/meeting/models.py                        |  41 +++-
 ietf/meeting/resources.py                     |  43 +++-
 ietf/meeting/tasks.py                         |  17 ++
 ietf/meeting/tests_utils.py                   |  91 +++++++++
 ietf/meeting/utils.py                         | 109 +++++++++-
 ietf/name/admin.py                            |   4 +
 ietf/name/fixtures/names.json                 | 140 +++++++++++++
 ...ancetypename_registrationtickettypename.py |  47 +++++
 .../migrations/0017_populate_new_reg_names.py |  39 ++++
 ietf/name/models.py                           |   5 +-
 ietf/name/resources.py                        |  32 ++-
 17 files changed, 1045 insertions(+), 10 deletions(-)
 create mode 100644 ietf/meeting/migrations/0011_registration_registrationticket.py
 create mode 100644 ietf/meeting/tests_utils.py
 create mode 100644 ietf/name/migrations/0016_attendancetypename_registrationtickettypename.py
 create mode 100644 ietf/name/migrations/0017_populate_new_reg_names.py

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 7cc56c2d0a..23e9ff0103 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1,6 +1,7 @@
 # Copyright The IETF Trust 2015-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
 import base64
+import copy
 import datetime
 import json
 import html
@@ -31,7 +32,7 @@
 from ietf.doc.factories import IndividualDraftFactory, WgDraftFactory, WgRfcFactory
 from ietf.group.factories import RoleFactory
 from ietf.meeting.factories import MeetingFactory, SessionFactory
-from ietf.meeting.models import Session
+from ietf.meeting.models import Session, Registration
 from ietf.nomcom.models import Volunteer
 from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
 from ietf.person.factories import PersonFactory, random_faker, EmailFactory, PersonalApiKeyFactory
@@ -828,6 +829,196 @@ def test_api_new_meeting_registration_nomcom_volunteer(self):
         self.assertEqual(volunteer.nomcom, nomcom)
         self.assertEqual(volunteer.origin, 'registration')
 
+    @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})
+    def test_api_new_meeting_registration_v2(self):
+        meeting = MeetingFactory(type_id='ietf')
+        person = PersonFactory()
+        regs = [
+            {
+                'affiliation': "Alguma Corporação",
+                'country_code': 'PT',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'onsite',
+                'ticket_type': 'week_pass',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            }
+        ]
+
+        url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
+        #
+        # Test invalid key
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "invalid-token"})
+        self.assertEqual(r.status_code, 403)
+        #
+        # Test invalid data
+        bad_regs = copy.deepcopy(regs)
+        del(bad_regs[0]['email'])
+        r = self.client.post(url, data=json.dumps(bad_regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 400)
+        #
+        # Test valid POST
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        #
+        # Check record
+        reg = regs[0]
+        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        self.assertEqual(objects.count(), 1)
+        obj = objects[0]
+        for key in ['affiliation', 'country_code', 'first_name', 'last_name', 'checkedin']:
+            self.assertEqual(getattr(obj, key), False if key=='checkedin' else reg.get(key) , "Bad data for field '%s'" % key)
+        self.assertEqual(obj.tickets.count(), 1)
+        ticket = obj.tickets.first()
+        self.assertEqual(ticket.ticket_type.slug, regs[0]['ticket_type'])
+        self.assertEqual(ticket.attendance_type.slug, regs[0]['reg_type'])
+        self.assertEqual(obj.person, person)
+        #
+        # Test update (switch to remote)
+        regs = [
+            {
+                'affiliation': "Alguma Corporação",
+                'country_code': 'PT',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'remote',
+                'ticket_type': 'week_pass',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            }
+        ]
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        self.assertEqual(objects.count(), 1)
+        obj = objects[0]
+        self.assertEqual(obj.tickets.count(), 1)
+        ticket = obj.tickets.first()
+        self.assertEqual(ticket.ticket_type.slug, regs[0]['ticket_type'])
+        self.assertEqual(ticket.attendance_type.slug, regs[0]['reg_type'])
+        #
+        # Test multiple
+        regs = [
+            {
+                'affiliation': "Alguma Corporação",
+                'country_code': 'PT',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'onsite',
+                'ticket_type': 'one_day',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            },
+
+            {
+                'affiliation': "Alguma Corporação",
+                'country_code': 'PT',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'remote',
+                'ticket_type': 'week_pass',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            }
+        ]
+
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        self.assertEqual(objects.count(), 1)
+        obj = objects[0]
+        self.assertEqual(obj.tickets.count(), 2)
+        self.assertEqual(obj.tickets.filter(attendance_type__slug='onsite').count(), 1)
+        self.assertEqual(obj.tickets.filter(attendance_type__slug='remote').count(), 1)
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})
+    def test_api_new_meeting_registration_v2_cancelled(self):
+        meeting = MeetingFactory(type_id='ietf')
+        person = PersonFactory()
+        regs = [
+            {
+                'affiliation': "Acme",
+                'country_code': 'US',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'onsite',
+                'ticket_type': 'week_pass',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            }
+        ]
+        url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
+        self.assertEqual(Registration.objects.count(), 0)
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        self.assertEqual(Registration.objects.count(), 1)
+        regs[0]['cancelled'] = True
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        self.assertEqual(Registration.objects.count(), 0)
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})    
+    def test_api_new_meeting_registration_v2_nomcom(self):
+        meeting = MeetingFactory(type_id='ietf')
+        person = PersonFactory()
+        regs = [
+            {
+                'affiliation': "Acme",
+                'country_code': 'US',
+                'email': person.email().address,
+                'first_name': person.first_name(),
+                'last_name': person.last_name(),
+                'meeting': str(meeting.number),
+                'reg_type': 'onsite',
+                'ticket_type': 'week_pass',
+                'checkedin': False,
+                'is_nomcom_volunteer': False,
+                'cancelled': False,
+            }
+        ]
+
+        url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
+        now = datetime.datetime.now()
+        if now.month > 10:
+            year = now.year + 1
+        else:
+            year = now.year
+        # create appropriate group and nomcom objects
+        nomcom = NomComFactory.create(is_accepting_volunteers=True, **nomcom_kwargs_for_year(year))
+
+        # first test is_nomcom_volunteer False
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        # assert no Volunteers exists
+        self.assertEqual(Volunteer.objects.count(), 0)
+
+        # test is_nomcom_volunteer True
+        regs[0]['is_nomcom_volunteer'] = True
+        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        self.assertContains(r, "Success", status_code=202)
+        # assert Volunteer exists
+        self.assertEqual(Volunteer.objects.count(), 1)
+        volunteer = Volunteer.objects.last()
+        self.assertEqual(volunteer.person, person)
+        self.assertEqual(volunteer.nomcom, nomcom)
+        self.assertEqual(volunteer.origin, 'registration')
+
     def test_api_version(self):
         DumpInfo.objects.create(date=timezone.datetime(2022,8,31,7,10,1,tzinfo=datetime.timezone.utc), host='testapi.example.com',tz='UTC')
         url = urlreverse('ietf.api.views.version')
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index b0dbaf91ce..2fcaba6094 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -66,6 +66,7 @@
     # Let MeetEcho upload session polls
     url(r'^notify/session/polls/?$', meeting_views.api_upload_polls),    
     # Let the registration system notify us about registrations
+    url(r'^notify/meeting/registration/v2/?', api_views.api_new_meeting_registration_v2),
     url(r'^notify/meeting/registration/?', api_views.api_new_meeting_registration),
     # OpenID authentication provider
     url(r'^openid/$', TemplateView.as_view(template_name='api/openid-issuer.html'), name='ietf.api.urls.oidc_issuer'),
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 2fd9d2730f..4cc3560627 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -45,7 +45,7 @@
 from ietf.ietfauth.utils import role_required
 from ietf.ietfauth.views import send_account_creation_email
 from ietf.ipr.utils import ingest_response_email as ipr_ingest_response_email
-from ietf.meeting.models import Meeting
+from ietf.meeting.models import Meeting, Registration
 from ietf.nomcom.models import Volunteer, NomCom
 from ietf.nomcom.utils import ingest_feedback_email as nomcom_ingest_feedback_email
 from ietf.person.models import Person, Email
@@ -236,6 +236,147 @@ def err(code, text):
         return HttpResponse(status=405)
 
 
+_new_registration_json_validator = jsonschema.Draft202012Validator(
+    schema={
+        "type": "array",
+        "items": {
+            "type": "object",
+            "properties": {
+                "meeting": {"type": "string"},
+                "first_name": {"type": "string"},
+                "last_name": {"type": "string"},
+                "affiliation": {"type": "string"},
+                "country_code": {"type": "string"},
+                "email": {"type": "string"},
+                "reg_type": {"type": "string"},
+                "ticket_type": {"type": "string"},
+                "checkedin": {"type": "boolean"},
+                "is_nomcom_volunteer": {"type": "boolean"},
+                "cancelled": {"type": "boolean"},
+            },
+            "required": ["meeting", "first_name", "last_name", "affiliation", "country_code", "email", "reg_type", "ticket_type", "checkedin", "is_nomcom_volunteer", "cancelled"],
+            "additionalProperties": "false"
+        }
+    }
+)
+
+
+@requires_api_token
+@csrf_exempt
+def api_new_meeting_registration_v2(request):
+    '''REST API to notify the datatracker about a new meeting registration'''
+    def _http_err(code, text):
+        return HttpResponse(text, status=code, content_type="text/plain")
+
+    def _api_response(result):
+        return JsonResponse(data={"result": result})
+
+    if request.method != "POST":
+        return _http_err(405, "Method not allowed")
+
+    if request.content_type != "application/json":
+        return _http_err(415, "Content-Type must be application/json")
+
+    # Validate
+    try:
+        payload = json.loads(request.body)
+        _new_registration_json_validator.validate(payload)
+    except json.decoder.JSONDecodeError as err:
+        return _http_err(400, f"JSON parse error at line {err.lineno} col {err.colno}: {err.msg}")
+    except jsonschema.exceptions.ValidationError as err:
+        return _http_err(400, f"JSON schema error at {err.json_path}: {err.message}")
+    except Exception:
+        return _http_err(400, "Invalid request format")
+
+    # Validate consistency
+    # - if receive multiple records they should be for same meeting, same person (email)
+    if len(payload) > 1:
+        if len(set([r['meeting'] for r in payload])) != 1:
+            return _http_err(400, "Different meeting values")
+        if len(set([r['email'] for r in payload])) != 1:
+            return _http_err(400, "Different email values")
+
+    # Validate meeting
+    number = payload[0]['meeting']
+    try:
+        meeting = Meeting.objects.get(number=number)
+    except Meeting.DoesNotExist:
+        return _http_err(400, "Invalid meeting value: '%s'" % (number, ))
+
+    # Validate email
+    email = payload[0]['email']
+    try:
+        validate_email(email)
+    except ValidationError:
+        return _http_err(400, "Invalid email value: '%s'" % (email, ))
+
+    # get person
+    person = Person.objects.filter(email__address=email).first()
+    if not person:
+        log.log(f"api_new_meeting_registration_v2 no Person found for {email}")
+
+    registration = payload[0]
+    # handle cancelled
+    if registration['cancelled']:
+        if len(payload) > 1:
+            return _http_err(400, "Error. Received cancelled registration notification with more than one record. ({})".format(email))
+        try:
+            obj = Registration.objects.get(meeting=meeting, email=email)
+        except Registration.DoesNotExist:
+            return _http_err(400, "Error. Received cancelled registration notification for non-existing registration. ({})".format(email))
+        if obj.tickets.count() == 1:
+            obj.delete()
+        else:
+            obj.tickets.filter(
+                attendance_type__slug=registration.reg_type,
+                ticket_type__slug=registration.ticket_type).delete()
+        return HttpResponse('Success', status=202, content_type='text/plain')
+
+    # create or update MeetingRegistration
+    update_fields = ['first_name', 'last_name', 'affiliation', 'country_code', 'checkedin', 'is_nomcom_volunteer']
+    try:
+        reg = Registration.objects.get(meeting=meeting, email=email)
+        for key, value in registration.items():
+            if key in update_fields:
+                setattr(reg, key, value)
+        reg.save()
+    except Registration.DoesNotExist:
+        reg = Registration.objects.create(
+            meeting_id=meeting.pk,
+            person=person,
+            email=email,
+            first_name=registration['first_name'],
+            last_name=registration['last_name'],
+            affiliation=registration['affiliation'],
+            country_code=registration['country_code'],
+            checkedin=registration['checkedin'])
+
+    # handle registration tickets
+    reg.tickets.all().delete()
+    for registration in payload:
+        reg.tickets.create(
+            attendance_type_id=registration['reg_type'],
+            ticket_type_id=registration['ticket_type'],
+        )
+        # handle nomcom volunteer
+        if registration['is_nomcom_volunteer'] and person:
+            try:
+                nomcom = NomCom.objects.get(is_accepting_volunteers=True)
+            except (NomCom.DoesNotExist, NomCom.MultipleObjectsReturned):
+                nomcom = None
+            if nomcom:
+                Volunteer.objects.get_or_create(
+                    nomcom=nomcom,
+                    person=person,
+                    defaults={
+                        "affiliation": registration["affiliation"],
+                        "origin": "registration"
+                    }
+                )
+
+    return HttpResponse('Success', status=202, content_type='text/plain')
+
+
 def version(request):
     dumpdate = None
     dumpinfo = DumpInfo.objects.order_by('-date').first()
diff --git a/ietf/meeting/admin.py b/ietf/meeting/admin.py
index b7e56c7b77..5d6adb7294 100644
--- a/ietf/meeting/admin.py
+++ b/ietf/meeting/admin.py
@@ -7,7 +7,7 @@
 from ietf.meeting.models import (Attended, Meeting, Room, Session, TimeSlot, Constraint, Schedule,
     SchedTimeSessAssignment, ResourceAssociation, FloorPlan, UrlResource,
     SessionPresentation, ImportantDate, SlideSubmission, SchedulingEvent, BusinessConstraint,
-    ProceedingsMaterial, MeetingHost)
+    ProceedingsMaterial, MeetingHost, Registration, RegistrationTicket)
 
 
 class UrlResourceAdmin(admin.ModelAdmin):
@@ -213,3 +213,33 @@ class AttendedAdmin(admin.ModelAdmin):
     search_fields = ["person__name", "session__group__acronym", "session__meeting__number", "session__name", "session__purpose__name"]
     raw_id_fields= ["person", "session"]
 admin.site.register(Attended, AttendedAdmin)
+
+class MeetingFilter(admin.SimpleListFilter):
+    title = 'Meeting Filter'
+    parameter_name = 'meeting_id'
+
+    def lookups(self, request, model_admin):
+        # Your queryset to limit choices
+        choices = Meeting.objects.filter(type='ietf').values_list('id', 'number')
+        return choices
+
+    def queryset(self, request, queryset):
+        if self.value():
+            return queryset.filter(meeting__id=self.value())
+        return queryset
+class RegistrationAdmin(admin.ModelAdmin):
+    model = Registration
+    # list_filter = [('meeting', Meeting.objects.filter(type='ietf')), ]
+    list_filter = [MeetingFilter, ]
+    list_display = ['meeting', 'first_name', 'last_name', 'affiliation', 'country_code', 'person', 'email', ]
+    search_fields = ['meeting__number', 'first_name', 'last_name', 'affiliation', 'country_code', 'email', ]
+    raw_id_fields = ['person']
+admin.site.register(Registration, RegistrationAdmin)
+
+class RegistrationTicketAdmin(admin.ModelAdmin):
+    model = RegistrationTicket
+    list_filter = ['attendance_type', ]
+    list_display = ['registration', 'attendance_type', 'ticket_type']
+    search_fields = ['registration__first_name', 'registration__last_name', 'registration__email']
+    raw_id_fields = ['registration']
+admin.site.register(RegistrationTicket, RegistrationTicketAdmin)
diff --git a/ietf/meeting/factories.py b/ietf/meeting/factories.py
index eb36e9e756..b3d21830fe 100644
--- a/ietf/meeting/factories.py
+++ b/ietf/meeting/factories.py
@@ -12,7 +12,7 @@
 from ietf.doc.storage_utils import store_str
 from ietf.meeting.models import (Attended, Meeting, Session, SchedulingEvent, Schedule,
     TimeSlot, SessionPresentation, FloorPlan, Room, SlideSubmission, Constraint,
-    MeetingHost, ProceedingsMaterial)
+    MeetingHost, ProceedingsMaterial, Registration, RegistrationTicket)
 from ietf.name.models import (ConstraintName, SessionStatusName, ProceedingsMaterialTypeName,
                               TimerangeName, SessionPurposeName)
 from ietf.doc.factories import ProceedingsMaterialDocFactory
@@ -318,3 +318,29 @@ class Meta:
 
     session = factory.SubFactory(SessionFactory)
     person = factory.SubFactory(PersonFactory)
+
+
+class RegistrationFactory(factory.django.DjangoModelFactory):
+    class Meta:
+        model = Registration
+        skip_postgeneration_save = True
+
+    meeting = factory.SubFactory(MeetingFactory)
+    person = factory.SubFactory(PersonFactory)
+    email = factory.LazyAttribute(lambda obj: obj.person.email())
+    first_name = factory.LazyAttribute(lambda obj: obj.person.first_name())
+    last_name = factory.LazyAttribute(lambda obj: obj.person.last_name())
+    affiliation = factory.Faker('company')
+    country_code = factory.Faker('country_code')
+    attended = False
+    checkedin = False
+
+
+class RegistrationTicketFactory(factory.django.DjangoModelFactory):
+    class Meta:
+        model = RegistrationTicket
+        skip_postgeneration_save = True
+
+    registration = factory.SubFactory(RegistrationFactory)
+    attendance_type_id = 'onsite'
+    ticket_type_id = 'week_pass'
diff --git a/ietf/meeting/migrations/0011_registration_registrationticket.py b/ietf/meeting/migrations/0011_registration_registrationticket.py
new file mode 100644
index 0000000000..fc161f303d
--- /dev/null
+++ b/ietf/meeting/migrations/0011_registration_registrationticket.py
@@ -0,0 +1,90 @@
+# Generated by Django 4.2.20 on 2025-03-16 08:37
+
+from django.db import migrations, models
+import django.db.models.deletion
+import ietf.utils.models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("name", "0017_populate_new_reg_names"),
+        ("person", "0004_alter_person_photo_alter_person_photo_thumb"),
+        ("meeting", "0010_alter_floorplan_image_alter_meetinghost_logo"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="Registration",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("first_name", models.CharField(max_length=255)),
+                ("last_name", models.CharField(max_length=255)),
+                ("affiliation", models.CharField(blank=True, max_length=255)),
+                ("country_code", models.CharField(max_length=2)),
+                ("email", models.EmailField(blank=True, max_length=254, null=True)),
+                ("attended", models.BooleanField(default=False)),
+                ("checkedin", models.BooleanField(default=False)),
+                (
+                    "meeting",
+                    ietf.utils.models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        to="meeting.meeting",
+                    ),
+                ),
+                (
+                    "person",
+                    ietf.utils.models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="person.person",
+                    ),
+                ),
+            ],
+        ),
+        migrations.CreateModel(
+            name="RegistrationTicket",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "attendance_type",
+                    ietf.utils.models.ForeignKey(
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="name.attendancetypename",
+                    ),
+                ),
+                (
+                    "registration",
+                    ietf.utils.models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="tickets",
+                        to="meeting.registration",
+                    ),
+                ),
+                (
+                    "ticket_type",
+                    ietf.utils.models.ForeignKey(
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="name.registrationtickettypename",
+                    ),
+                ),
+            ],
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 84d151c310..003f8cd76e 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1,5 +1,5 @@
-# Copyright The IETF Trust 2007-2024, All Rights Reserved
 # -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2007-2024, All Rights Reserved
 
 
 # old meeting models can be found in ../proceedings/models.py
@@ -34,7 +34,7 @@
 from ietf.name.models import (
     MeetingTypeName, TimeSlotTypeName, SessionStatusName, ConstraintName, RoomResourceName,
     ImportantDateName, TimerangeName, SlideSubmissionStatusName, ProceedingsMaterialTypeName,
-    SessionPurposeName,
+    SessionPurposeName, AttendanceTypeName, RegistrationTicketTypeName
 )
 from ietf.person.models import Person
 from ietf.utils.decorators import memoize
@@ -1483,3 +1483,40 @@ class Meta:
 
     def __str__(self):
         return f'{self.person} at {self.session}'
+
+
+class RegistrationManager(models.Manager):
+    def onsite(self):
+        return self.get_queryset().filter(registrationticket__attendance_type__slug='onsite')
+
+    def remote(self):
+        return self.get_queryset().filter(registrationticket__attendance_type__slug='remote').exclude(registrationticket__attendance_type__slug='onsite')
+
+class Registration(models.Model):
+    """Registration attendee records from the IETF registration system"""
+    meeting = ForeignKey(Meeting)
+    first_name = models.CharField(max_length=255)
+    last_name = models.CharField(max_length=255)
+    affiliation = models.CharField(blank=True, max_length=255)
+    country_code = models.CharField(max_length=2)        # ISO 3166
+    person = ForeignKey(Person, blank=True, null=True, on_delete=models.PROTECT)
+    email = models.EmailField(blank=True, null=True)
+    # attended was used prior to the introduction of the ietf.meeting.Attended model and is still used by
+    # Meeting.get_attendance() for older meetings. It should not be used except for dealing with legacy data.
+    attended = models.BooleanField(default=False)
+    # checkedin indicates that the badge was picked up
+    checkedin = models.BooleanField(default=False)
+
+    # custom manager
+    objects = RegistrationManager()
+
+    def __str__(self):
+        return "{} {}".format(self.first_name, self.last_name)
+
+class RegistrationTicket(models.Model):
+    registration = ForeignKey(Registration, related_name='tickets')
+    attendance_type = ForeignKey(AttendanceTypeName, on_delete=models.PROTECT)
+    ticket_type = ForeignKey(RegistrationTicketTypeName, on_delete=models.PROTECT)
+
+    def __str__(self):
+        return "{}:{}".format(self.attendance_type, self.ticket_type)
diff --git a/ietf/meeting/resources.py b/ietf/meeting/resources.py
index de9ca01476..ede2b5b993 100644
--- a/ietf/meeting/resources.py
+++ b/ietf/meeting/resources.py
@@ -14,7 +14,8 @@
 from ietf.meeting.models import ( Meeting, ResourceAssociation, Constraint, Room, Schedule, Session,
                                 TimeSlot, SchedTimeSessAssignment, SessionPresentation, FloorPlan,
                                 UrlResource, ImportantDate, SlideSubmission, SchedulingEvent,
-                                BusinessConstraint, ProceedingsMaterial, MeetingHost, Attended)
+                                BusinessConstraint, ProceedingsMaterial, MeetingHost, Attended,
+                                Registration, RegistrationTicket)
 
 from ietf.name.resources import MeetingTypeNameResource
 class MeetingResource(ModelResource):
@@ -431,3 +432,43 @@ class Meta:
             "session": ALL_WITH_RELATIONS,
         }
 api.meeting.register(AttendedResource())
+
+from ietf.meeting.resources import MeetingResource
+from ietf.person.resources import PersonResource
+class RegistrationResource(ModelResource):
+    meeting          = ToOneField(MeetingResource, 'meeting')
+    person           = ToOneField(PersonResource, 'person', null=True)
+    class Meta:
+        queryset = Registration.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'registration'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "first_name": ALL,
+            "last_name": ALL,
+            "affiliation": ALL,
+            "country_code": ALL,
+            "email": ALL,
+            "attended": ALL,
+            "meeting": ALL_WITH_RELATIONS,
+            "person": ALL_WITH_RELATIONS,
+        }
+api.meeting.register(RegistrationResource())
+
+class RegistrationTicketResource(ModelResource):
+    registration          = ToOneField(RegistrationResource, 'registration')
+    class Meta:
+        queryset = RegistrationTicket.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'registrationticket'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "ticket_type": ALL,
+            "attendance_type": ALL,
+            "registration": ALL_WITH_RELATIONS,
+        }
+api.meeting.register(RegistrationTicketResource())
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index 2b7c2fca91..f1b7e8e079 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -9,6 +9,7 @@
 from .models import Meeting
 from .utils import generate_proceedings_content
 from .views import generate_agenda_data
+from .utils import migrate_registrations, check_migrate_registrations
 
 
 @shared_task
@@ -17,6 +18,22 @@ def agenda_data_refresh():
 
 
 @shared_task
+def migrate_registrations_task(initial=False):
+    """ Migrate ietf.stats.MeetingRegistration to ietf.meeting.Registration
+        If initial is True, migrate all meetings otherwise only future meetings.
+        This function is idempotent. It can be run regularly from cron.
+    """
+    migrate_registrations(initial=initial)
+
+
+@shared_task
+def check_migrate_registrations_task():
+    """ Compare MeetingRegistration with Registration to ensure
+        all records migrated
+    """
+    check_migrate_registrations()
+
+
 def proceedings_content_refresh_task(*, all=False):
     """Refresh meeting proceedings cache
 
diff --git a/ietf/meeting/tests_utils.py b/ietf/meeting/tests_utils.py
new file mode 100644
index 0000000000..4bda3a65fa
--- /dev/null
+++ b/ietf/meeting/tests_utils.py
@@ -0,0 +1,91 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+# -*- coding: utf-8 -*-
+
+import datetime
+import debug  # pyflakes: ignore
+from ietf.meeting.factories import MeetingFactory # RegistrationFactory, RegistrationTicketFactory
+from ietf.meeting.models import Registration
+from ietf.meeting.utils import migrate_registrations, get_preferred
+from ietf.stats.factories import MeetingRegistrationFactory
+from ietf.utils.test_utils import TestCase
+
+
+class MigrateRegistrationsTests(TestCase):
+    def test_new_meeting_registration(self):
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        self.assertEqual(Registration.objects.count(), 0)
+        migrate_registrations(initial=True)
+        self.assertEqual(Registration.objects.count(), 1)
+        new = Registration.objects.first()
+        self.assertEqual(new.first_name, reg.first_name)
+        self.assertEqual(new.last_name, reg.last_name)
+        self.assertEqual(new.email, reg.email)
+        self.assertEqual(new.person, reg.person)
+        self.assertEqual(new.meeting, meeting)
+        self.assertEqual(new.affiliation, reg.affiliation)
+        self.assertEqual(new.country_code, reg.country_code)
+        self.assertEqual(new.checkedin, reg.checkedin)
+        self.assertEqual(new.attended, reg.attended)
+
+    def test_migrate_non_initial(self):
+        # with only old meeting
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        self.assertEqual(Registration.objects.count(), 0)
+        migrate_registrations()
+        self.assertEqual(Registration.objects.count(), 0)
+        # with new meeting
+        new_meeting = MeetingFactory(type_id='ietf', number='150')
+        new_meeting.date = datetime.date.today() + datetime.timedelta(days=30)
+        new_meeting.save()
+        MeetingRegistrationFactory(meeting=new_meeting, reg_type='onsite', ticket_type='week_pass')
+        migrate_registrations()
+        self.assertEqual(Registration.objects.count(), 1)
+
+    def test_updated_meeting_registration(self):
+        # setup test initial conditions
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        migrate_registrations(initial=True)
+        # change first_name and save
+        original = reg.first_name
+        reg.first_name = 'NewBob'
+        reg.save()
+        new = Registration.objects.first()
+        self.assertEqual(new.first_name, original)
+        migrate_registrations(initial=True)
+        new.refresh_from_db()
+        self.assertEqual(new.first_name, reg.first_name)
+
+    def test_additional_ticket(self):
+        # setup test initial conditions
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        migrate_registrations(initial=True)
+        new = Registration.objects.first()
+        self.assertEqual(new.tickets.count(), 1)
+        # add a second ticket
+        reg.reg_type = 'remote'
+        reg.pk = None
+        reg.save()
+        migrate_registrations(initial=True)
+        # new.refresh_from_db()
+        self.assertEqual(new.tickets.count(), 2)
+        
+    def test_cancelled_registration(self):
+        # setup test initial conditions
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        migrate_registrations(initial=True)
+        reg.delete()
+        # do test
+        migrate_registrations(initial=True)
+        self.assertEqual(Registration.objects.count(), 0)
+    
+    def test_get_preferred(self):
+        meeting = MeetingFactory(type_id='ietf', number='109')
+        onsite = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        hackathon = MeetingRegistrationFactory(meeting=meeting, reg_type='hackathon_onsite', ticket_type='week_pass')
+        result = get_preferred([onsite, hackathon])
+        self.assertEqual(result, onsite)
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 9603278399..d35914fd60 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -26,7 +26,8 @@
 from ietf.dbtemplate.models import DBTemplate
 from ietf.doc.storage_utils import store_bytes, store_str
 from ietf.meeting.models import (Session, SchedulingEvent, TimeSlot,
-    Constraint, SchedTimeSessAssignment, SessionPresentation, Attended)
+    Constraint, SchedTimeSessAssignment, SessionPresentation, Attended,
+    Registration, Meeting)
 from ietf.doc.models import Document, State, NewRevisionDocEvent, StateDocEvent
 from ietf.doc.models import DocEvent
 from ietf.group.models import Group
@@ -1013,6 +1014,112 @@ def participants_for_meeting(meeting):
     return (checked_in, attended)
 
 
+def get_preferred(regs):
+    """ Return a preferred regular registration (non hackathon) from 
+        a list of registrations if there is one, otherwise any.
+    """
+    for reg in regs:
+        if reg.reg_type in ['onsite', 'remote']:
+            return reg
+    return reg
+
+
+def migrate_registrations(initial=False):
+    """ Migrate ietf.stats.MeetingRegistration to ietf.meeting.Registration
+        If initial is True, migrate all meetings otherwise only future meetings.
+        This function is idempotent. It can be run regularly from cron.
+    """
+    if initial:
+        meetings = Meeting.objects.filter(type='ietf')
+        MeetingRegistration.objects.filter(reg_type='hackathon').update(reg_type='hackathon_remote')
+        MeetingRegistration.objects.filter(ticket_type='full_week_pass').update(ticket_type='week_pass')
+        MeetingRegistration.objects.filter(pk=49645).update(ticket_type='one_day')
+        MeetingRegistration.objects.filter(pk=50804).update(ticket_type='week_pass')
+        MeetingRegistration.objects.filter(pk=42386).update(ticket_type='week_pass')
+        MeetingRegistration.objects.filter(pk=42782).update(ticket_type='one_day')
+        MeetingRegistration.objects.filter(pk=43464).update(ticket_type='week_pass')
+    else:
+        # still process records during week of meeting
+        one_week_ago = datetime.date.today() - datetime.timedelta(days=7)
+        meetings = Meeting.objects.filter(type='ietf', date__gt=one_week_ago)
+
+    for meeting in meetings:
+        # gather all MeetingRegistrations by person (email)
+        emails = {}
+        for meeting_reg in MeetingRegistration.objects.filter(meeting=meeting):
+            if meeting_reg.email in emails:
+                emails[meeting_reg.email].append(meeting_reg)
+            else:
+                emails[meeting_reg.email] = [meeting_reg]
+        # process each person's registrations
+        for email, meeting_regs in emails.items():
+            preferred_reg = get_preferred(meeting_regs)
+            reg, created = Registration.objects.get_or_create(
+                meeting=meeting,
+                email=email,
+                defaults={
+                    'first_name': preferred_reg.first_name,
+                    'last_name': preferred_reg.last_name,
+                    'affiliation': preferred_reg.affiliation,
+                    'country_code': preferred_reg.country_code,
+                    'person': preferred_reg.person,
+                    'attended': preferred_reg.attended,
+                    'checkedin': preferred_reg.checkedin,
+                }
+            )
+            if created:
+                for meeting_reg in meeting_regs:
+                    reg.tickets.create(
+                        attendance_type_id=meeting_reg.reg_type or 'unknown',
+                        ticket_type_id=meeting_reg.ticket_type or 'unknown',
+                    )
+            else:
+                # check if tickets differ
+                reg_tuple_list = [(t.attendance_type_id, t.ticket_type_id) for t in reg.tickets.all()]
+                meeting_reg_tuple_list = [(mr.reg_type or 'unknown', mr.ticket_type or 'unknown') for mr in meeting_regs]
+                if not set(reg_tuple_list) == set(meeting_reg_tuple_list):
+                    # update tickets
+                    reg.tickets.all().delete()
+                    for meeting_reg in meeting_regs:
+                        reg.tickets.create(
+                            attendance_type_id=meeting_reg.reg_type or 'unknown',
+                            ticket_type_id=meeting_reg.ticket_type or 'unknown',
+                        )
+                # check fields for updates
+                fields_to_check = [
+                    'first_name', 'last_name', 'affiliation', 'country_code',
+                    'attended', 'checkedin'
+                ]
+
+                changed = False
+                for field in fields_to_check:
+                    new_value = getattr(preferred_reg, field)
+                    if getattr(reg, field) != new_value:
+                        setattr(reg, field, new_value)
+                        changed = True
+
+                if changed:
+                    reg.save()
+        # delete cancelled Registrations
+        meeting_reg_email_set = set(emails.keys())
+        reg_email_set = set(Registration.objects.filter(meeting=meeting).values_list('email', flat=True))
+        for email in reg_email_set - meeting_reg_email_set:
+            Registration.objects.filter(meeting=meeting, email=email).delete()
+
+    return
+
+
+def check_migrate_registrations():
+    """A simple utility function to test that all MeetingRegistration
+    records got migrated
+    """
+    for mr in MeetingRegistration.objects.all():
+        reg = Registration.objects.get(meeting=mr.meeting, email=mr.email)
+        assert reg.tickets.filter(
+            attendance_type__slug=mr.reg_type or 'unknown',
+            ticket_type__slug=mr.ticket_type or 'unknown').exists()
+
+
 def generate_proceedings_content(meeting, force_refresh=False):
     """Render proceedings content for a meeting and update cache
     
diff --git a/ietf/name/admin.py b/ietf/name/admin.py
index 2458da37d9..4336e0569c 100644
--- a/ietf/name/admin.py
+++ b/ietf/name/admin.py
@@ -3,6 +3,7 @@
 
 from ietf.name.models import (
     AgendaTypeName,
+    AttendanceTypeName,
     BallotPositionName,
     ConstraintName,
     ContinentName,
@@ -29,6 +30,7 @@
     LiaisonStatementTagName,
     MeetingTypeName,
     NomineePositionStateName,
+    RegistrationTicketTypeName,
     ReviewRequestStateName,
     ReviewResultName,
     ReviewTypeName,
@@ -137,6 +139,7 @@ class ProceedingsMaterialTypeNameAdmin(NameAdmin):
 admin.site.register(AgendaFilterTypeName, NameAdmin)
 admin.site.register(AgendaTypeName, NameAdmin)
 admin.site.register(AppealArtifactTypeName, NameAdmin)
+admin.site.register(AttendanceTypeName, NameAdmin)
 admin.site.register(BallotPositionName, NameAdmin)
 admin.site.register(ConstraintName, NameAdmin)
 admin.site.register(ContinentName, NameAdmin)
@@ -158,6 +161,7 @@ class ProceedingsMaterialTypeNameAdmin(NameAdmin):
 admin.site.register(LiaisonStatementTagName, NameAdmin)
 admin.site.register(MeetingTypeName, NameAdmin)
 admin.site.register(NomineePositionStateName, NameAdmin)
+admin.site.register(RegistrationTicketTypeName, NameAdmin)
 admin.site.register(ReviewRequestStateName, NameAdmin)
 admin.site.register(ReviewAssignmentStateName, NameAdmin)
 admin.site.register(ReviewResultName, NameAdmin)
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 96273fbc35..15ae71d849 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -6827,6 +6827,66 @@
     "model": "name.appealartifacttypename",
     "pk": "response"
   },
+  {
+    "fields": {
+      "desc": "",
+      "name": "ANRW Onsite",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "anrw_onsite"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Hackathon Onsite",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "hackathon_onsite"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Hackathon Remote",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "hackathon_remote"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Onsite",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "onsite"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Remote",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "remote"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Unknown",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.attendancetypename",
+    "pk": "unknown"
+  },
   {
     "fields": {
       "blocking": false,
@@ -12877,6 +12937,86 @@
     "model": "name.proceedingsmaterialtypename",
     "pk": "wiki"
   },
+  {
+    "fields": {
+      "desc": "",
+      "name": "ANRW Combo",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "anrw_combo"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "ANRW Only",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "anrw_only"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Hackathon Combo",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "hackathon_combo"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Hackathon Only",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "hackathon_only"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "One Day",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "one_day"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Student",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "student"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Unknown",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "unknown"
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Week Pass",
+      "order": 0,
+      "used": true
+    },
+    "model": "name.registrationtickettypename",
+    "pk": "week_pass"
+  },
   {
     "fields": {
       "desc": "The reviewer has accepted the assignment",
diff --git a/ietf/name/migrations/0016_attendancetypename_registrationtickettypename.py b/ietf/name/migrations/0016_attendancetypename_registrationtickettypename.py
new file mode 100644
index 0000000000..9376d3a4c6
--- /dev/null
+++ b/ietf/name/migrations/0016_attendancetypename_registrationtickettypename.py
@@ -0,0 +1,47 @@
+# Generated by Django 4.2.17 on 2025-01-02 18:21
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("name", "0015_last_call_name"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="AttendanceTypeName",
+            fields=[
+                (
+                    "slug",
+                    models.CharField(max_length=32, primary_key=True, serialize=False),
+                ),
+                ("name", models.CharField(max_length=255)),
+                ("desc", models.TextField(blank=True)),
+                ("used", models.BooleanField(default=True)),
+                ("order", models.IntegerField(default=0)),
+            ],
+            options={
+                "ordering": ["order", "name"],
+                "abstract": False,
+            },
+        ),
+        migrations.CreateModel(
+            name="RegistrationTicketTypeName",
+            fields=[
+                (
+                    "slug",
+                    models.CharField(max_length=32, primary_key=True, serialize=False),
+                ),
+                ("name", models.CharField(max_length=255)),
+                ("desc", models.TextField(blank=True)),
+                ("used", models.BooleanField(default=True)),
+                ("order", models.IntegerField(default=0)),
+            ],
+            options={
+                "ordering": ["order", "name"],
+                "abstract": False,
+            },
+        ),
+    ]
diff --git a/ietf/name/migrations/0017_populate_new_reg_names.py b/ietf/name/migrations/0017_populate_new_reg_names.py
new file mode 100644
index 0000000000..51954885c0
--- /dev/null
+++ b/ietf/name/migrations/0017_populate_new_reg_names.py
@@ -0,0 +1,39 @@
+# Generated by Django 4.2.17 on 2025-01-02 18:26
+
+from django.db import migrations
+
+def forward(apps, schema_editor):
+    AttendanceTypeName = apps.get_model('name', 'AttendanceTypeName')
+    RegistrationTicketTypeName = apps.get_model('name', 'RegistrationTicketTypeName')
+    AttendanceTypeName.objects.create(slug='onsite', name='Onsite')
+    AttendanceTypeName.objects.create(slug='remote', name='Remote')
+    AttendanceTypeName.objects.create(slug='hackathon_onsite', name='Hackathon Onsite')
+    AttendanceTypeName.objects.create(slug='hackathon_remote', name='Hackathon Remote')
+    AttendanceTypeName.objects.create(slug='anrw_onsite', name='ANRW Onsite')
+    AttendanceTypeName.objects.create(slug='unknown', name='Unknown')
+    RegistrationTicketTypeName.objects.create(slug='week_pass', name='Week Pass')
+    RegistrationTicketTypeName.objects.create(slug='one_day', name='One Day')
+    RegistrationTicketTypeName.objects.create(slug='student', name='Student')
+    RegistrationTicketTypeName.objects.create(slug='hackathon_only', name='Hackathon Only')
+    RegistrationTicketTypeName.objects.create(slug='hackathon_combo', name='Hackathon Combo')
+    RegistrationTicketTypeName.objects.create(slug='anrw_only', name='ANRW Only')
+    RegistrationTicketTypeName.objects.create(slug='anrw_combo', name='ANRW Combo')
+    RegistrationTicketTypeName.objects.create(slug='unknown', name='Unknown')
+
+
+def reverse(apps, schema_editor):
+    AttendanceTypeName = apps.get_model('name', 'AttendanceTypeName')
+    RegistrationTicketTypeName = apps.get_model('name', 'RegistrationTicketTypeName')
+    AttendanceTypeName.objects.delete()
+    RegistrationTicketTypeName.objects.delete()
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("name", "0016_attendancetypename_registrationtickettypename"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+    ]
diff --git a/ietf/name/models.py b/ietf/name/models.py
index 8c2520a489..0e87d43548 100644
--- a/ietf/name/models.py
+++ b/ietf/name/models.py
@@ -151,6 +151,9 @@ class SlideSubmissionStatusName(NameModel):
     "Pending, Accepted, Rejected"
 class TelechatAgendaSectionName(NameModel):
     """roll_call, minutes, action_items"""
-
 class AppealArtifactTypeName(NameModel):
     pass
+class AttendanceTypeName(NameModel):
+    """onsite, remote, hackathon_onsite, hackathon_remote"""
+class RegistrationTicketTypeName(NameModel):
+    """week, one_day, student"""
diff --git a/ietf/name/resources.py b/ietf/name/resources.py
index dffa7669db..0cb0e41e0b 100644
--- a/ietf/name/resources.py
+++ b/ietf/name/resources.py
@@ -19,7 +19,7 @@
     RoleName, RoomResourceName, SessionStatusName, StdLevelName, StreamName, TimeSlotTypeName,
     TopicAudienceName, ReviewerQueuePolicyName, TimerangeName, ExtResourceTypeName, ExtResourceName,
     SlideSubmissionStatusName, ProceedingsMaterialTypeName, SessionPurposeName, TelechatAgendaSectionName,
-    AppealArtifactTypeName )
+    AppealArtifactTypeName, AttendanceTypeName, RegistrationTicketTypeName )
 
 class TimeSlotTypeNameResource(ModelResource):
     class Meta:
@@ -752,3 +752,33 @@ class Meta:
             "order": ALL,
         }
 api.name.register(AppealArtifactTypeNameResource())
+
+
+class AttendanceTypeNameResource(ModelResource):
+    class Meta:
+        cache = SimpleCache()
+        queryset = AttendanceTypeName.objects.all()
+        serializer = api.Serializer()
+        filtering = { 
+            "slug": ALL,
+            "name": ALL,
+            "desc": ALL,
+            "used": ALL,
+            "order": ALL,
+        }
+api.name.register(AttendanceTypeNameResource())
+
+
+class RegistrationTicketTypeNameResource(ModelResource):
+    class Meta:
+        cache = SimpleCache()
+        queryset = RegistrationTicketTypeName.objects.all()
+        serializer = api.Serializer()
+        filtering = { 
+            "slug": ALL,
+            "name": ALL,
+            "desc": ALL,
+            "used": ALL,
+            "order": ALL,
+        }
+api.name.register(RegistrationTicketTypeNameResource())

From d5e3840d4dbeec37415fae89ab578b1b71046b6a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 15 Apr 2025 11:17:33 -0400
Subject: [PATCH 303/707] fix: 500->400 for bad /api/v1/ requests (#8802)

* fix: 400->500 for bad /api/v1/ requests

* chore: remove unused import
---
 ietf/api/views.py | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/ietf/api/views.py b/ietf/api/views.py
index 4cc3560627..e5b1f96aed 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -18,7 +18,7 @@
 from django.contrib.auth.models import User
 from django.core.exceptions import ValidationError
 from django.core.validators import validate_email
-from django.http import HttpResponse, Http404, JsonResponse
+from django.http import HttpResponse, Http404, JsonResponse, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404
 from django.urls import reverse
 from django.utils.decorators import method_decorator
@@ -68,7 +68,10 @@ def top_level(request):
         }
 
     serializer = Serializer()
-    desired_format = determine_format(request, serializer)
+    try:
+        desired_format = determine_format(request, serializer)
+    except BadRequest as err:
+        return HttpResponseBadRequest(str(err))
 
     options = {}
 
@@ -76,10 +79,12 @@ def top_level(request):
         callback = request.GET.get('callback', 'callback')
 
         if not is_valid_jsonp_callback_value(callback):
-            raise BadRequest('JSONP callback name is invalid.')
+            return HttpResponseBadRequest("JSONP callback name is invalid")
 
         options['callback'] = callback
 
+    # This might raise UnsupportedFormat, but that indicates a real server misconfiguration
+    # so let it bubble up unhandled and trigger a 500 / email to admins.
     serialized = serializer.serialize(available_resources, desired_format, options)
     return HttpResponse(content=serialized, content_type=build_content_type(desired_format))
 

From 86988eb6072b1331c393f5f7999350f45d653f04 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Tue, 15 Apr 2025 11:45:48 -0400
Subject: [PATCH 304/707] fix: remove credentials omit from agenda fetch call
 (#8779)

---
 client/agenda/store.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/agenda/store.js b/client/agenda/store.js
index 359c5fbf05..b5498303a6 100644
--- a/client/agenda/store.js
+++ b/client/agenda/store.js
@@ -141,7 +141,7 @@ export const useAgendaStore = defineStore('agenda', {
           meetingNumber = meetingData.meetingNumber
         }
 
-        const resp = await fetch(`/api/meeting/${meetingNumber}/agenda-data`, { credentials: 'omit' })
+        const resp = await fetch(`/api/meeting/${meetingNumber}/agenda-data`)
         if (!resp.ok) {
           throw new Error(resp.statusText)
         }

From be06d7c4d34a6fc18bc30d4a064dc3ffcf18c2cf Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 16 Apr 2025 12:00:04 -0500
Subject: [PATCH 305/707] chore: reorder migrations (#8804)

* chore: reorder migrations

* chore: copyright
---
 ...ationticket.py => 0012_registration_registrationticket.py} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename ietf/meeting/migrations/{0011_registration_registrationticket.py => 0012_registration_registrationticket.py} (96%)

diff --git a/ietf/meeting/migrations/0011_registration_registrationticket.py b/ietf/meeting/migrations/0012_registration_registrationticket.py
similarity index 96%
rename from ietf/meeting/migrations/0011_registration_registrationticket.py
rename to ietf/meeting/migrations/0012_registration_registrationticket.py
index fc161f303d..c555f52e8b 100644
--- a/ietf/meeting/migrations/0011_registration_registrationticket.py
+++ b/ietf/meeting/migrations/0012_registration_registrationticket.py
@@ -1,4 +1,4 @@
-# Generated by Django 4.2.20 on 2025-03-16 08:37
+# Copyright The IETF Trust 2025, All Rights Reserved
 
 from django.db import migrations, models
 import django.db.models.deletion
@@ -10,7 +10,7 @@ class Migration(migrations.Migration):
     dependencies = [
         ("name", "0017_populate_new_reg_names"),
         ("person", "0004_alter_person_photo_alter_person_photo_thumb"),
-        ("meeting", "0010_alter_floorplan_image_alter_meetinghost_logo"),
+        ("meeting", "0011_alter_slidesubmission_doc"),
     ]
 
     operations = [

From 3d69b2c03e24d78f28a824e04f2254ff33f651d7 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Wed, 16 Apr 2025 12:46:27 -0700
Subject: [PATCH 306/707] feat: add API for related emails (#8671)

* feat: add api for related emails. Fixes #8275

* fix: switch from querystring parameter to URL parameter

* fix: exclude null character in URL regex

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/api/tests.py | 33 +++++++++++++++++++++++++++++++++
 ietf/api/urls.py  |  2 ++
 ietf/api/views.py | 25 +++++++++++++++++++++++++
 3 files changed, 60 insertions(+)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 23e9ff0103..809b45cc2b 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1164,6 +1164,39 @@ def test_active_email_list(self):
         self.assertCountEqual(result.keys(), ["addresses"])
         self.assertCountEqual(result["addresses"], Email.objects.filter(active=True).values_list("address", flat=True))
 
+    @override_settings(APP_API_TOKENS={"ietf.api.views.related_email_list": ["valid-token"]})
+    def test_related_email_list(self):
+        joe = EmailFactory(address='joe@work.com')
+        EmailFactory(address='joe@home.com', person=joe.person)
+        EmailFactory(address='jòe@spain.com', person=joe.person)
+        url = urlreverse("ietf.api.views.related_email_list", kwargs={'email': 'joe@home.com'})
+        # no api key
+        r = self.client.get(url, headers={})
+        self.assertEqual(r.status_code, 403)
+        # invalid api key
+        r = self.client.get(url, headers={"X-Api-Key": "not-the-valid-token"})
+        self.assertEqual(r.status_code, 403)
+        # wrong method
+        r = self.client.post(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 405)
+        # valid
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.headers["Content-Type"], "application/json")
+        result = json.loads(r.content)
+        self.assertCountEqual(result.keys(), ["addresses"])
+        self.assertCountEqual(result["addresses"], joe.person.email_set.exclude(address='joe@home.com').values_list("address", flat=True))
+        # non-ascii
+        non_ascii_url = urlreverse("ietf.api.views.related_email_list", kwargs={'email': 'jòe@spain.com'})
+        r = self.client.get(non_ascii_url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 200)
+        result = json.loads(r.content)
+        self.assertTrue('joe@home.com' in result["addresses"])
+        # email not found
+        not_found_url = urlreverse("ietf.api.views.related_email_list", kwargs={'email': 'nobody@nowhere.com'})
+        r = self.client.get(not_found_url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 404)
+
     @override_settings(APP_API_TOKENS={"ietf.api.views.role_holder_addresses": ["valid-token"]})
     def test_role_holder_addresses(self):
         url = urlreverse("ietf.api.views.role_holder_addresses")
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 2fcaba6094..bafd5c5b76 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -73,6 +73,8 @@
     url(r'^openid/', include('oidc_provider.urls', namespace='oidc_provider')),
     # Email alias listing
     url(r'^person/email/$', api_views.active_email_list),
+    # Related Email listing
+    url(r'^person/email/(?P<email>[^/\x00]+)/related/$', api_views.related_email_list),
     # Draft submission API
     url(r'^submit/?$', submit_views.api_submit_tombstone),
     # Draft upload API
diff --git a/ietf/api/views.py b/ietf/api/views.py
index e5b1f96aed..97b9793048 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -691,6 +691,31 @@ def active_email_list(request):
     return HttpResponse(status=405)
 
 
+@requires_api_token
+@csrf_exempt
+def related_email_list(request, email):
+    """Given an email address, returns all other email addresses known
+    to Datatracker, via Person object
+    """
+    def _http_err(code, text):
+        return HttpResponse(text, status=code, content_type="text/plain")
+
+    if request.method == "GET":
+        try:
+            email_obj = Email.objects.get(address=email)
+        except Email.DoesNotExist:
+            return _http_err(404, "Email not found")
+        person = email_obj.person
+        if not person:
+            return JsonResponse({"addresses": []})
+        return JsonResponse(
+            {
+                "addresses": list(person.email_set.exclude(address=email).values_list("address", flat=True)),
+            }
+        )
+    return HttpResponse(status=405)
+
+
 @requires_api_token
 def role_holder_addresses(request):
     if request.method == "GET":

From 4a5716e2e89044981905e9af08775ba2f5386fa7 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 18 Apr 2025 19:39:32 -0400
Subject: [PATCH 307/707] ci: Update build workflow to handle AWS breaking
 things for no reason

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 36439aa6cf..e5c627c950 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -235,7 +235,7 @@ jobs:
         docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
         echo "Pushing statics..."
         cd static
-        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
+        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors --checksum-algorithm CRC32
 
     - name: Augment dockerignore for docker image build
       env:

From 24042631348135dd8b345715526815f245f9ad51 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 21 Apr 2025 13:00:32 -0300
Subject: [PATCH 308/707] refactor: smtpd->aiosmtpd (#8805)

* refactor: smtpd -> aiosmtpd

* test: set mock return value for EmailOnFailureCommandTests

The test has been working, but in a broken way, for as long as it has existed. The smtpd-based test_smtpserver was masking an exception that did not interfere with the test's effectiveness.

* test: increase SMTP.line_length_limit
---
 ietf/utils/management/tests.py |   2 +-
 ietf/utils/test_runner.py      |   2 +-
 ietf/utils/test_smtpserver.py  | 116 ++++++++++++---------------------
 requirements.txt               |   1 +
 4 files changed, 43 insertions(+), 78 deletions(-)

diff --git a/ietf/utils/management/tests.py b/ietf/utils/management/tests.py
index e94c39354f..d704999cd1 100644
--- a/ietf/utils/management/tests.py
+++ b/ietf/utils/management/tests.py
@@ -12,7 +12,7 @@
 from ietf.utils.test_utils import TestCase
 
 
-@mock.patch.object(EmailOnFailureCommand, 'handle')
+@mock.patch.object(EmailOnFailureCommand, 'handle', return_value=None)
 class EmailOnFailureCommandTests(TestCase):
     def test_calls_handle(self, handle_method):
         call_command(EmailOnFailureCommand())
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index a77377ffb5..c06e7876db 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -863,7 +863,7 @@ def setup_test_environment(self, **kwargs):
             try:
                 # remember the value so ietf.utils.mail.send_smtp() will use the same
                 ietf.utils.mail.SMTP_ADDR['port'] = base + offset
-                self.smtpd_driver = SMTPTestServerDriver((ietf.utils.mail.SMTP_ADDR['ip4'],ietf.utils.mail.SMTP_ADDR['port']),None)
+                self.smtpd_driver = SMTPTestServerDriver(ietf.utils.mail.SMTP_ADDR['ip4'],ietf.utils.mail.SMTP_ADDR['port'], None)
                 self.smtpd_driver.start()
                 print(("     Running an SMTP test server on %(ip4)s:%(port)s to catch outgoing email." % ietf.utils.mail.SMTP_ADDR))
                 break
diff --git a/ietf/utils/test_smtpserver.py b/ietf/utils/test_smtpserver.py
index 66675aa0b1..40da758d66 100644
--- a/ietf/utils/test_smtpserver.py
+++ b/ietf/utils/test_smtpserver.py
@@ -1,92 +1,56 @@
-# Copyright The IETF Trust 2014-2020, All Rights Reserved
+# Copyright The IETF Trust 2014-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
+from aiosmtpd.controller import Controller
+from aiosmtpd.smtp import SMTP
+from email.utils import parseaddr
+from typing import Optional
 
-import smtpd
-import threading
-import asyncore
 
-import debug                            # pyflakes:ignore
+class SMTPTestHandler:
 
-class AsyncCoreLoopThread(object):
+    def __init__(self, inbox: list):
+        self.inbox = inbox
 
-    def wrap_loop(self, exit_condition, timeout=1.0, use_poll=False, map=None):
-        if map is None:
-            map = asyncore.socket_map
-            while map and not exit_condition:
-                asyncore.loop(timeout=1.0, use_poll=False, map=map, count=1)
+    async def handle_DATA(self, server, session, envelope):
+        """Handle the DATA command and 'deliver' the message"""
 
-    def start(self):
-        """Start the listening service"""
-        self.exit_condition = []
-        kwargs={'exit_condition':self.exit_condition,'timeout':1.0} 
-        self.thread = threading.Thread(target=self.wrap_loop, kwargs=kwargs)
-        self.thread.daemon = True
-        self.thread.daemon = True
-        self.thread.start()     
-
-    def stop(self):
-        """Stop the listening service"""
-        self.exit_condition.append(True)
-        self.thread.join()
-
-
-class SMTPTestChannel(smtpd.SMTPChannel):
+        self.inbox.append(envelope.content)
+        # Per RFC2033: https://datatracker.ietf.org/doc/html/rfc2033.html#section-4.2
+        #     ...after the final ".", the server returns one reply
+        #     for each previously successful RCPT command in the mail transaction,
+        #     in the order that the RCPT commands were issued.  Even if there were
+        #     multiple successful RCPT commands giving the same forward-path, there
+        #     must be one reply for each successful RCPT command.
+        return "\n".join("250 OK" for _ in envelope.rcpt_tos)
 
-#    mail_options = ['BODY=8BITMIME', 'SMTPUTF8']
-
-    def smtp_RCPT(self, arg):
-        if not self.mailfrom:
-            self.push(str('503 Error: need MAIL command'))
-            return
-        arg = self._strip_command_keyword('TO:', arg)
-        address, __ = self._getaddr(arg)
-        if not address:
-            self.push(str('501 Syntax: RCPT TO: <address>'))
-            return
+    async def handle_RCPT(self, server, session, envelope, address, rcpt_options):
+        """Handle an RCPT command and add the address to the envelope if it is acceptable"""
+        _, address = parseaddr(address)
+        if address == "":
+            return "501 Syntax: RCPT TO: <address>"
         if "poison" in address:
-            self.push(str('550 Error: Not touching that'))
-            return
-        self.rcpt_options = []
-        self.rcpttos.append(address)
-        self.push(str('250 Ok'))
-
-class SMTPTestServer(smtpd.SMTPServer):
-
-    def __init__(self,localaddr,remoteaddr,inbox):
-        if inbox is not None:
-            self.inbox=inbox
-        else:
-            self.inbox = []
-        smtpd.SMTPServer.__init__(self,localaddr,remoteaddr)
+            return "550 Error: Not touching that"
+        # At this point the address is acceptable
+        envelope.rcpt_tos.append(address)
+        return "250 OK"
 
-    def handle_accept(self):
-        pair = self.accept()
-        if pair is not None:
-            conn, addr = pair
-            #channel = SMTPTestChannel(self, conn, addr)
-            SMTPTestChannel(self, conn, addr)
 
-    def process_message(self, peer, mailfrom, rcpttos, data, mail_options=None, rcpt_options=None):
-        self.inbox.append(data)
+class SMTPTestServerDriver:
 
-
-class SMTPTestServerDriver(object):
-    def __init__(self, localaddr, remoteaddr, inbox=None):
-        self.localaddr=localaddr
-        self.remoteaddr=remoteaddr
-        if inbox is not None:
-            self.inbox = inbox
-        else:
-            self.inbox = []
-        self.thread_driver = None
+    def __init__(self, address: str, port: int, inbox: Optional[list] = None):
+        # Allow longer lines than the 1001 that RFC 5321 requires. As of 2025-04-16 the
+        # datatracker emits some non-compliant messages.
+        # See https://aiosmtpd.aio-libs.org/en/latest/smtp.html
+        SMTP.line_length_limit = 4000  # tests start failing between 3000 and 4000
+        self.controller = Controller(
+            hostname=address,
+            port=port,
+            handler=SMTPTestHandler(inbox=[] if inbox is None else inbox),
+        )
 
     def start(self):
-        self.smtpserver = SMTPTestServer(self.localaddr,self.remoteaddr,self.inbox)
-        self.thread_driver = AsyncCoreLoopThread()
-        self.thread_driver.start()
+        self.controller.start()
 
     def stop(self):
-        if self.thread_driver:
-            self.thread_driver.stop()
-
+        self.controller.stop()
diff --git a/requirements.txt b/requirements.txt
index cd93f448e2..b00a21ab49 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,6 +1,7 @@
 # -*- conf-mode -*-
 setuptools>=51.1.0    # Require this first, to prevent later errors
 #
+aiosmtpd>=1.4.6
 argon2-cffi>=21.3.0    # For the Argon2 password hasher option
 beautifulsoup4>=4.11.1    # Only used in tests
 bibtexparser>=1.2.0    # Only used in tests

From 2652c96c8db968a021f6f95953d8ab2337aa167e Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Mon, 21 Apr 2025 16:13:32 +0000
Subject: [PATCH 309/707] ci: update base image target version to 20250421T1600

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index cd0a70667c..bdf3cff0e4 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250402T1611
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250421T1600
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 1195fc9a0b..bdfdb2eed1 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250402T1611
+20250421T1600

From 35db33961d91ada14c5744af3cf8c160e02c5614 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 22 Apr 2025 12:31:07 -0500
Subject: [PATCH 310/707] fix: lengthen liaison response_contact field (#8823)

---
 ...lter_liaisonstatement_response_contacts.py | 20 +++++++++++++++++++
 ietf/liaisons/models.py                       |  2 +-
 2 files changed, 21 insertions(+), 1 deletion(-)
 create mode 100644 ietf/liaisons/migrations/0002_alter_liaisonstatement_response_contacts.py

diff --git a/ietf/liaisons/migrations/0002_alter_liaisonstatement_response_contacts.py b/ietf/liaisons/migrations/0002_alter_liaisonstatement_response_contacts.py
new file mode 100644
index 0000000000..ac0a11101b
--- /dev/null
+++ b/ietf/liaisons/migrations/0002_alter_liaisonstatement_response_contacts.py
@@ -0,0 +1,20 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("liaisons", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="liaisonstatement",
+            name="response_contacts",
+            field=models.TextField(
+                blank=True, help_text="Where to send a response", max_length=1024
+            ),
+        ),
+    ]
diff --git a/ietf/liaisons/models.py b/ietf/liaisons/models.py
index f357d6cf8c..2ad502102c 100644
--- a/ietf/liaisons/models.py
+++ b/ietf/liaisons/models.py
@@ -33,7 +33,7 @@ class LiaisonStatement(models.Model):
     to_groups = models.ManyToManyField(Group, blank=True, related_name='liaisonstatement_to_set')
     to_contacts = models.CharField(max_length=2000, help_text="Contacts at recipient group")
 
-    response_contacts = models.CharField(blank=True, max_length=255, help_text="Where to send a response") # RFC4053
+    response_contacts = models.TextField(blank=True, max_length=1024, help_text="Where to send a response") # RFC4053
     technical_contacts = models.CharField(blank=True, max_length=255, help_text="Who to contact for clarification") # RFC4053
     action_holder_contacts = models.CharField(blank=True, max_length=255, help_text="Who makes sure action is completed")  # incoming only?
     cc_contacts = models.TextField(blank=True)

From 7be503cf1c6c02ed7715f6b72417cbc760369175 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Wed, 23 Apr 2025 08:33:13 -0700
Subject: [PATCH 311/707] feat: use new mail archive search API for review app
 lookups (#8788)

* feat: use new mail archive search API for review app lookups

* fix: fix patch call

* fix: remove url from query_data

* fix: force utc timezone on datetime from archive API

* fix: remove query_data['url'] from test
---
 ietf/doc/tests_review.py                      | 220 ++++++++++--------
 ietf/doc/views_review.py                      |  22 +-
 ietf/review/mailarch.py                       | 126 ++++------
 ietf/settings.py                              |   2 +
 .../templates/doc/review/complete_review.html |   4 +-
 5 files changed, 176 insertions(+), 198 deletions(-)

diff --git a/ietf/doc/tests_review.py b/ietf/doc/tests_review.py
index 13ddbc22ba..9850beca75 100644
--- a/ietf/doc/tests_review.py
+++ b/ietf/doc/tests_review.py
@@ -3,12 +3,12 @@
 
 
 from pathlib import Path
-import datetime, os, shutil
+import datetime
 import io
-import tarfile, tempfile, mailbox
-import email.mime.multipart, email.mime.text, email.utils
+import os
+import shutil
 
-from mock import patch
+from mock import patch, Mock
 from requests import Response
 
 from django.apps import apps
@@ -650,112 +650,132 @@ def test_accept_reviewer_assignment_after_reject(self):
         assignment = reload_db_objects(assignment)
         self.assertEqual(assignment.state_id, "accepted")
 
-    def make_test_mbox_tarball(self, review_req):
-        mbox_path = os.path.join(self.review_dir, "testmbox.tar.gz")
-        with tarfile.open(mbox_path, "w:gz") as tar:
-            with tempfile.NamedTemporaryFile(dir=self.review_dir, suffix=".mbox") as tmp:
-                mbox = mailbox.mbox(tmp.name)
+    @patch('ietf.review.mailarch.requests.post')
+    def test_retrieve_messages(self, mock_post):
+        mock_data = {
+            "results": [
+                {
+                    "from": "Alice <alice@example.com>",
+                    "subject": "Hello",
+                    "content": "Hi\n This is a really good document.\n",
+                    "message_id": "abc123",
+                    "url": "https://example.com/message",
+                    "date": "2025-04-07T12:00:00",
+                }
+            ]
+        }
+        mock_post.return_value.json.return_value = mock_data
 
-                # plain text
-                msg = email.mime.text.MIMEText("Hello,\n\nI have reviewed the document and did not find any problems.\n\nJohn Doe")
-                msg["From"] = "John Doe <johndoe@example.com>"
-                msg["To"] = review_req.team.list_email
-                msg["Subject"] = "Review of {}-01".format(review_req.doc.name)
-                msg["Message-ID"] = email.utils.make_msgid()
-                msg["Archived-At"] = "<https://www.example.com/testmessage>"
-                msg["Date"] = email.utils.formatdate()
-
-                mbox.add(msg)
-
-                # plain text + HTML
-                msg = email.mime.multipart.MIMEMultipart('alternative')
-                msg["From"] = "John Doe II <johndoe2@example.com>"
-                msg["To"] = review_req.team.list_email
-                msg["Subject"] = "Review of {}".format(review_req.doc.name)
-                msg["Message-ID"] = email.utils.make_msgid()
-                msg["Archived-At"] = "<https://www.example.com/testmessage2>"
-
-                msg.attach(email.mime.text.MIMEText("Hi!,\r\nLooks OK!\r\n-John", "plain"))
-                msg.attach(email.mime.text.MIMEText("<html><body><p>Hi!,</p><p>Looks OK!</p><p>-John</p></body></html>", "html"))
-                mbox.add(msg)
-
-                tmp.flush()
-
-                tar.add(os.path.relpath(tmp.name))
+        doc = WgDraftFactory(group__acronym='mars', rev='01')
+        review_team = ReviewTeamFactory(acronym="reviewteam", name="Review Team", type_id="review", list_email="reviewteam@ietf.org", parent=Group.objects.get(acronym="farfut"))
+        rev_role = RoleFactory(group=review_team, person__user__username='reviewer', person__user__email='reviewer@example.com', name_id='reviewer')
+        RoleFactory(group=review_team, person__user__username='reviewsecretary', person__user__email='reviewsecretary@example.com', name_id='secr')
+        review_req = ReviewRequestFactory(doc=doc, team=review_team, type_id='early', state_id='assigned', requested_by=rev_role.person, deadline=timezone.now() + datetime.timedelta(days=20))
+        ReviewAssignmentFactory(review_request=review_req, reviewer=rev_role.person.email_set.first(), state_id='accepted')
 
-                mbox.close()
+        query_data = ietf.review.mailarch.construct_query_data(doc, review_team, query=None)
+        response = ietf.review.mailarch.retrieve_messages(query_data)
 
-        return mbox_path
+        self.assertEqual(len(response), 1)
+        self.assertEqual(response[0]['from'], 'Alice <alice@example.com>')
+        self.assertEqual(response[0]['splitfrom'], ('Alice', 'alice@example.com'))
+        self.assertEqual(response[0]['subject'], 'Hello')
+        self.assertEqual(response[0]['content'], 'Hi\n This is a really good document.')
+        self.assertEqual(response[0]['message_id'], 'abc123')
+        self.assertEqual(response[0]['url'], 'https://example.com/message')
+        self.assertEqual(response[0]['utcdate'], ('2025-04-07', '12:00:00'))
 
-    def test_search_mail_archive(self):
-        doc = WgDraftFactory(group__acronym='mars',rev='01')
+    def test_construct_query_data(self):
+        doc = WgDraftFactory(group__acronym='mars', rev='01')
         review_team = ReviewTeamFactory(acronym="reviewteam", name="Review Team", type_id="review", list_email="reviewteam@ietf.org", parent=Group.objects.get(acronym="farfut"))
-        rev_role = RoleFactory(group=review_team,person__user__username='reviewer',person__user__email='reviewer@example.com',name_id='reviewer')
-        RoleFactory(group=review_team,person__user__username='reviewsecretary',person__user__email='reviewsecretary@example.com',name_id='secr')
-        review_req = ReviewRequestFactory(doc=doc,team=review_team,type_id='early',state_id='assigned',requested_by=rev_role.person,deadline=timezone.now()+datetime.timedelta(days=20))
+        data = ietf.review.mailarch.construct_query_data(doc, review_team, query=None)
+        self.assertEqual(data['start_date'], (date_today() - datetime.timedelta(days=180)).isoformat())
+        self.assertEqual(data['email_list'], 'reviewteam')
+        self.assertEqual(data['query_value'], doc.name)
+        self.assertEqual(data['query'], f'subject:({doc.name})')
+        self.assertEqual(data['limit'], '30')
+
+    @patch('ietf.doc.views_review.requests.post')
+    def test_search_mail_archive(self, mock_post):
+        doc = WgDraftFactory(group__acronym='mars', rev='01')
+        review_team = ReviewTeamFactory(acronym="reviewteam", name="Review Team", type_id="review", list_email="reviewteam@ietf.org", parent=Group.objects.get(acronym="farfut"))
+        rev_role = RoleFactory(group=review_team, person__user__username='reviewer', person__user__email='reviewer@example.com', name_id='reviewer')
+        RoleFactory(group=review_team, person__user__username='reviewsecretary', person__user__email='reviewsecretary@example.com', name_id='secr')
+        review_req = ReviewRequestFactory(doc=doc, team=review_team, type_id='early', state_id='assigned', requested_by=rev_role.person, deadline=timezone.now() + datetime.timedelta(days=20))
         assignment = ReviewAssignmentFactory(review_request=review_req, reviewer=rev_role.person.email_set.first(), state_id='accepted')
 
+        mock_data = {
+            "results": [
+                {
+                    "from": "Alice <alice@example.com>",
+                    "subject": "Review of {}-01".format(review_req.doc.name),
+                    "content": "Hi\n This is a really good document.\n",
+                    "message_id": "abc123",
+                    "url": "https://example.com/message",
+                    "date": "2025-04-07T12:00:00",
+                },
+                {
+                    "from": "Joe <joe@example.com>",
+                    "subject": "Review of {}".format(review_req.doc.name),
+                    "content": "Hi\n I believe this is the best document.\n",
+                    "message_id": "abc456",
+                    "url": "https://example.com/message",
+                    "date": "2025-04-07T12:00:00",
+                }
+            ]
+        }
+        response1 = Mock()
+        response1.json.return_value = mock_data
+
+        response2 = Mock()
+        response2.json.return_value = mock_data
+
+        response3 = Mock()
+        response3.json.return_value = {"results": []}
+
+        mock_post.side_effect = [response1, response2, response3]
+
         # test URL construction
-        query_urls = ietf.review.mailarch.construct_query_urls(doc, review_team)
-        self.assertTrue(review_req.doc.name in query_urls["query_data_url"])
+        query_data = ietf.review.mailarch.construct_query_data(doc, review_team)
+        self.assertTrue(review_req.doc.name in query_data["query_value"])
 
-        # test parsing
-        mbox_path = self.make_test_mbox_tarball(review_req)
+        url = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={"name": doc.name, "assignment_id": assignment.pk})
+        url2 = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={"name": doc.name, "acronym": review_team.acronym})
+        login_testing_unauthorized(self, "reviewsecretary", url)
 
-        try:
-            # mock URL generator and point it to local file - for this
-            # to work, the module (and not the function) must be
-            # imported in the view
-            real_fn = ietf.review.mailarch.construct_query_urls
-            ietf.review.mailarch.construct_query_urls = lambda doc, team, query=None: { "query_data_url": "file://" + os.path.abspath(mbox_path) }
-            url = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={ "name": doc.name, "assignment_id": assignment.pk })
-            url2 = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={ "name": doc.name, "acronym": review_team.acronym })
-            login_testing_unauthorized(self, "reviewsecretary", url)
-
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            messages = r.json()["messages"]
-            self.assertEqual(len(messages), 2)
-
-            r = self.client.get(url2)
-            self.assertEqual(r.status_code, 200)
-            messages = r.json()["messages"]
-            self.assertEqual(len(messages), 2)
-
-            today = date_today(datetime.timezone.utc)
-
-            self.assertEqual(messages[0]["url"], "https://www.example.com/testmessage")
-            self.assertTrue("John Doe" in messages[0]["content"])
-            self.assertEqual(messages[0]["subject"], "Review of {}-01".format(review_req.doc.name))
-            self.assertEqual(messages[0]["revision_guess"], "01")
-            self.assertEqual(messages[0]["splitfrom"], ["John Doe", "johndoe@example.com"])
-            self.assertEqual(messages[0]["utcdate"][0], today.isoformat())
-
-            self.assertEqual(messages[1]["url"], "https://www.example.com/testmessage2")
-            self.assertTrue("Looks OK" in messages[1]["content"])
-            self.assertTrue("<html>" not in messages[1]["content"])
-            self.assertEqual(messages[1]["subject"], "Review of {}".format(review_req.doc.name))
-            self.assertFalse('revision_guess' in messages[1])
-            self.assertEqual(messages[1]["splitfrom"], ["John Doe II", "johndoe2@example.com"])
-            self.assertEqual(messages[1]["utcdate"][0], "")
-
-
-            # Test failure to return mailarch results
-            no_result_path = os.path.join(self.review_dir, "mailarch_no_result.html")
-            with io.open(no_result_path, "w") as f:
-                f.write('Content-Type: text/html\n\n<html><body><div class="xtr"><div class="xtd no-results">No results found</div></div>')
-            ietf.review.mailarch.construct_query_urls = lambda doc, team, query=None: { "query_data_url": "file://" + os.path.abspath(no_result_path) }
-
-            url = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={ "name": doc.name, "assignment_id": assignment.pk })
-
-            r = self.client.get(url)
-            self.assertEqual(r.status_code, 200)
-            result = r.json()
-            self.assertNotIn('messages', result)
-            self.assertIn('No results found', result['error'])
-
-        finally:
-            ietf.review.mailarch.construct_query_urls = real_fn
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        messages = r.json()["messages"]
+        self.assertEqual(len(messages), 2)
+
+        r = self.client.get(url2)
+        self.assertEqual(r.status_code, 200)
+        messages = r.json()["messages"]
+        self.assertEqual(len(messages), 2)
+
+        self.assertEqual(messages[0]["url"], "https://example.com/message")
+        self.assertTrue("Hi" in messages[0]["content"])
+        self.assertEqual(messages[0]["subject"], "Review of {}-01".format(review_req.doc.name))
+        self.assertEqual(messages[0]["revision_guess"], "01")
+        self.assertEqual(messages[0]["splitfrom"], ["Alice", "alice@example.com"])
+        self.assertEqual(messages[0]["utcdate"], ['2025-04-07', '12:00:00'])
+
+        self.assertEqual(messages[1]["url"], "https://example.com/message")
+        self.assertTrue("Hi" in messages[1]["content"])
+        self.assertTrue("<html>" not in messages[1]["content"])
+        self.assertEqual(messages[1]["subject"], "Review of {}".format(review_req.doc.name))
+        self.assertFalse('revision_guess' in messages[1])
+        self.assertEqual(messages[1]["splitfrom"], ["Joe", "joe@example.com"])
+        self.assertEqual(messages[1]["utcdate"], ['2025-04-07', '12:00:00'])
+
+        # Test failure to return mailarch results
+        url = urlreverse('ietf.doc.views_review.search_mail_archive', kwargs={"name": doc.name, "assignment_id": assignment.pk})
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        result = r.json()
+        self.assertNotIn('messages', result)
+        self.assertIn('No results found', result['error'])
 
     def test_submit_unsolicited_review_choose_team(self):
         doc = WgDraftFactory(group__acronym='mars', rev='01')
diff --git a/ietf/doc/views_review.py b/ietf/doc/views_review.py
index 1f23c435fa..6ac0e17791 100644
--- a/ietf/doc/views_review.py
+++ b/ietf/doc/views_review.py
@@ -958,14 +958,14 @@ def complete_review(request, name, assignment_id=None, acronym=None):
 
         form = CompleteReviewForm(assignment, doc, team, is_reviewer, initial=initial)
 
-    mail_archive_query_urls = mailarch.construct_query_urls(doc, team)
+    mail_archive_query_data = mailarch.construct_query_data(doc, team)
 
     return render(request, 'doc/review/complete_review.html', {
         'doc': doc,
         'team': team,
         'assignment': assignment,
         'form': form,
-        'mail_archive_query_urls': mail_archive_query_urls,
+        'mail_archive_query_data': mail_archive_query_data,
         'revising_review': revising_review,
         'review_to': to,
         'review_cc': cc,
@@ -987,27 +987,25 @@ def search_mail_archive(request, name, acronym=None, assignment_id=None):
     if not (is_reviewer or can_manage_request):
         permission_denied(request, "You do not have permission to perform this action")
 
-    res = mailarch.construct_query_urls(doc, team, query=request.GET.get("query"))
-    if not res:
-        return JsonResponse({ "error": "Couldn't do lookup in mail archive - don't know where to look"})
-
-    MAX_RESULTS = 30
+    query_data = mailarch.construct_query_data(doc, team, query=request.GET.get("query"))
+    if not query_data:
+        return JsonResponse({"error": "Couldn't do lookup in mail archive - don't know where to look"})
 
     try:
-        res["messages"] = mailarch.retrieve_messages(res["query_data_url"])[:MAX_RESULTS]
-        for message in res["messages"]:
+        query_data["messages"] = mailarch.retrieve_messages(query_data)
+        for message in query_data["messages"]:
             try:
                 revision_guess = message["subject"].split(name)[1].split('-')[1]
                 message["revision_guess"] = revision_guess if revision_guess.isnumeric() else None
             except IndexError:
                 pass
     except KeyError as e:
-        res["error"] = "No results found (%s)" % str(e)
+        query_data["error"] = "No results found (%s)" % str(e)
     except Exception as e:
-        res["error"] = "Retrieval from mail archive failed: %s" % str(e)
+        query_data["error"] = "Retrieval from mail archive failed: %s" % str(e)
         # raise # useful when debugging
 
-    return JsonResponse(res)
+    return JsonResponse(query_data)
 
 class EditReviewRequestCommentForm(forms.ModelForm):
     comment = forms.CharField(widget=forms.Textarea, strip=False)
diff --git a/ietf/review/mailarch.py b/ietf/review/mailarch.py
index c34a6079ce..61abc83aa5 100644
--- a/ietf/review/mailarch.py
+++ b/ietf/review/mailarch.py
@@ -6,25 +6,18 @@
 # mailarchive.ietf.org
 
 import base64
-import contextlib
 import datetime
 import email.utils
 import hashlib
-import mailbox
-import tarfile
-import tempfile
-
-from urllib.parse import urlencode
-from urllib.request import urlopen
+import requests
 
 import debug                            # pyflakes:ignore
 
-from pyquery import PyQuery
 
 from django.conf import settings
 from django.utils.encoding import force_bytes, force_str
 
-from ietf.utils.mail import get_payload_text
+from ietf.utils.log import log
 from ietf.utils.timezone import date_today
 
 
@@ -43,7 +36,7 @@ def hash_list_message_id(list_name, msgid):
     sha.update(force_bytes(list_name))
     return force_str(base64.urlsafe_b64encode(sha.digest()).rstrip(b"="))
 
-def construct_query_urls(doc, team, query=None):
+def construct_query_data(doc, team, query=None):
     list_name = list_name_from_email(team.list_email)
     if not list_name:
         return None
@@ -51,83 +44,48 @@ def construct_query_urls(doc, team, query=None):
     if not query:
         query = doc.name
 
-    encoded_query = "?" + urlencode({
-        "qdr": "c", # custom time frame
-        "start_date": (date_today() - datetime.timedelta(days=180)).isoformat(),
-        "email_list": list_name,
-        "q": "subject:({})".format(query),
-        "as": "1", # this is an advanced search
-    })
-
-    return {
-        "query": query,
-        "query_url": settings.MAILING_LIST_ARCHIVE_URL + "/arch/search/" + encoded_query,
-        "query_data_url": settings.MAILING_LIST_ARCHIVE_URL + "/arch/export/mbox/" + encoded_query,
+    query_data = {
+        'start_date': (date_today() - datetime.timedelta(days=180)).isoformat(),
+        'email_list': list_name,
+        'query_value': query,
+        'query': f'subject:({query})',
+        'limit': '30',
     }
+    return query_data
 
 def construct_message_url(list_name, msgid):
     return "{}/arch/msg/{}/{}".format(settings.MAILING_LIST_ARCHIVE_URL, list_name, hash_list_message_id(list_name, msgid))
 
-def retrieve_messages_from_mbox(mbox_fileobj):
-    """Return selected content in message from mbox from mailarch."""
-    res = []
-    with tempfile.NamedTemporaryFile(suffix=".mbox") as mbox_file:
-        # mailbox.mbox needs a path, so we need to put the contents
-        # into a file
-        mbox_data = mbox_fileobj.read()
-        mbox_file.write(mbox_data)
-        mbox_file.flush()
-
-        mbox = mailbox.mbox(mbox_file.name, create=False)
-        for msg in mbox:
-            content = ""
-
-            for part in msg.walk():
-                if part.get_content_type() == "text/plain":
-                    charset = part.get_content_charset() or "utf-8"
-                    content += get_payload_text(part, default_charset=charset)
-
-            # parse a couple of things for the front end
-            utcdate = None
-            d = email.utils.parsedate_tz(msg["Date"])
-            if d:
-                utcdate = datetime.datetime.fromtimestamp(email.utils.mktime_tz(d), datetime.timezone.utc)
-
-            res.append({
-                "from": msg["From"],
-                "splitfrom": email.utils.parseaddr(msg["From"]),
-                "subject": msg["Subject"],
-                "content": content.replace("\r\n", "\n").replace("\r", "\n").strip("\n"),
-                "message_id": email.utils.unquote(msg["Message-ID"].strip()),
-                "url": email.utils.unquote(msg["Archived-At"].strip()),
-                "date": msg["Date"],
-                "utcdate": (utcdate.date().isoformat(), utcdate.time().isoformat()) if utcdate else ("", ""),
-            })
-        mbox.close()
-
-    return res
-
-def retrieve_messages(query_data_url):
+def retrieve_messages(query_data):
     """Retrieve and return selected content from mailarch."""
-    res = []
-
-    # This has not been rewritten to use requests.get() because get() does
-    # not handle file URLs out of the box, which we need for tesing
-    with contextlib.closing(urlopen(query_data_url, timeout=15)) as fileobj:
-        content_type = fileobj.info()["Content-type"]
-        if not content_type.startswith("application/x-tar"):
-            if content_type.startswith("text/html"):
-                r = fileobj.read(20000)
-                q = PyQuery(r)
-                div = q('div[class~="no-results"]')
-                if div:
-                    raise KeyError("No results: %s -> %s" % (query_data_url, div.text(), ))
-            raise Exception("Export failed - this usually means no matches were found")
-
-        with tarfile.open(fileobj=fileobj, mode='r|*') as tar:
-            for entry in tar:
-                if entry.isfile():
-                    mbox_fileobj = tar.extractfile(entry)
-                    res.extend(retrieve_messages_from_mbox(mbox_fileobj))
-
-    return res
+
+    headers = {'X-Api-Key': settings.MAILING_LIST_ARCHIVE_API_KEY}
+    try:
+        response = requests.post(
+            settings.MAILING_LIST_ARCHIVE_SEARCH_URL,
+            headers=headers,
+            json=query_data,
+            timeout=settings.DEFAULT_REQUESTS_TIMEOUT)
+    except requests.Timeout as exc:
+        log(f'POST request failed for [{query_data["url"]}]: {exc}')
+        raise RuntimeError(f'Timeout retrieving [{query_data["url"]}]') from exc
+
+    results = []
+    jresponse = response.json()
+    if 'results' not in jresponse or len(jresponse['results']) == 0:
+        raise KeyError(f'No results: {query_data["query"]}')
+    for msg in jresponse['results']:
+        # datetime is already UTC
+        dt = datetime.datetime.fromisoformat(msg['date'])
+        dt_utc = dt.replace(tzinfo=datetime.timezone.utc)
+        results.append({
+            "from": msg["from"],
+            "splitfrom": email.utils.parseaddr(msg["from"]),
+            "subject": msg["subject"],
+            "content": msg["content"].replace("\r\n", "\n").replace("\r", "\n").strip("\n"),
+            "message_id": msg["message_id"],
+            "url": msg["url"],
+            "utcdate": (dt_utc.date().isoformat(), dt_utc.time().isoformat()),
+        })
+
+    return results
diff --git a/ietf/settings.py b/ietf/settings.py
index 33a2f976d9..8005aca8cc 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -808,6 +808,8 @@ def skip_unreadable_post(record):
 # Mailing list info URL for lists hosted on the IETF servers
 MAILING_LIST_INFO_URL = "https://mailman3.%(domain)s/mailman3/lists/%(list_addr)s.%(domain)s"
 MAILING_LIST_ARCHIVE_URL = "https://mailarchive.ietf.org"
+MAILING_LIST_ARCHIVE_SEARCH_URL = "https://mailarchive.ietf.org/api/v1/message/search/"
+MAILING_LIST_ARCHIVE_API_KEY = "changeme"
 
 # Liaison Statement Tool settings (one is used in DOC_HREFS below)
 LIAISON_UNIVERSAL_FROM = 'Liaison Statement Management Tool <statements@' + IETF_DOMAIN + '>'
diff --git a/ietf/templates/doc/review/complete_review.html b/ietf/templates/doc/review/complete_review.html
index 091f30532e..8aeb1486a4 100644
--- a/ietf/templates/doc/review/complete_review.html
+++ b/ietf/templates/doc/review/complete_review.html
@@ -93,7 +93,7 @@ <h1>
             <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
         {% endif %}
         <div class="template d-none">
-            {% if mail_archive_query_urls %}
+            {% if mail_archive_query_data %}
                 <div class="mail-archive-search"
                     {% if assignment %}
                      data-search-mail-archive-url="{% url "ietf.doc.views_review.search_mail_archive" name=doc.name assignment_id=assignment.pk %}"
@@ -106,7 +106,7 @@ <h1>
                         <div class="input-group mb-3">
                             <input type="text" id="mail-archive-subjects"
                                    class="query-input form-control"
-                                   value="{{ mail_archive_query_urls.query }}">
+                                   value="{{ mail_archive_query_data.query_value }}">
                             <button type="button" class="search btn btn-primary">Search</button>
                         </div>
                         <div class="retrieving d-none my-3">

From f4209ea5a3061639f2adb9245271bb52f44a2140 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 23 Apr 2025 13:21:23 -0300
Subject: [PATCH 312/707] chore: k8s plumbing for mailarchive secret (#8827)

* chore: k8s plumbing for mailarchive secret

plus a typo fix

* style: remove empty line

* chore: hints for working with APP_API_TOKENS value
---
 k8s/settings_local.py | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index a0e197b7f5..0e128b1b4c 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -135,6 +135,12 @@ def _multiline_to_list(s):
     queue=os.environ.get("RABBITMQ_QUEUE", "dt"),
 )
 
+# mailarchive API key
+_mailing_list_archive_api_key = os.environ.get("DATATRACKER_MAILING_LIST_ARCHIVE_API_KEY", None)
+if _mailing_list_archive_api_key is None:
+    raise RuntimeError("DATATRACKER_MAILING_LIST_ARCHIVE_API_KEY must be set")
+MAILING_LIST_ARCHIVE_API_KEY = _mailing_list_archive_api_key
+
 IANA_SYNC_USERNAME = "ietfsync"
 IANA_SYNC_CHANGES_URL = "https://datatracker.iana.org:4443/data-tracker/changes"
 IANA_SYNC_PROTOCOLS_URL = "http://www.iana.org/protocols/"
@@ -173,7 +179,13 @@ def _multiline_to_list(s):
         "DATATRACKER_MEETECHO_CLIENT_ID and DATATRACKER_MEETECHO_CLIENT_SECRET must be set"
     )
 
-# For APP_API_TOKENS, ccept either base64-encoded JSON or raw JSON, but not both
+# For APP_API_TOKENS, accept either base64-encoded JSON or raw JSON, but not both.
+# To decode / pretty-print the encoded form, run:
+#    base64 -d | jq .
+# paste the encoded secret into stdin. Copy/paste that into an editor you trust not
+# to leave a copy lying around. When done editing, copy/paste the final JSON through
+#    jq -c | base64
+# and copy/paste the output into the secret store. 
 if "DATATRACKER_APP_API_TOKENS_JSON_B64" in os.environ:
     if "DATATRACKER_APP_API_TOKENS_JSON" in os.environ:
         raise RuntimeError(

From 1bede712301206b808d2650e726b82d864e74d5d Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Wed, 23 Apr 2025 09:26:34 -0700
Subject: [PATCH 313/707] refactor: update secretariat dashboard style (#8140)

* refactor: update secretariat dashboard style

* refactor: change announcement styling

* feat: hide to_custom field when not needed

* fix: apply Black to python files

* fix: add announcement.js to package.json

* fix: move announcement playwright test to tests-legacy

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/secr/announcement/forms.py               | 137 ++++++++++++------
 ietf/secr/announcement/tests.py               | 109 +++++++-------
 ietf/secr/announcement/urls.py                |   5 +-
 ietf/secr/announcement/views.py               |  95 ++++++------
 ietf/secr/templates/announcement/confirm.html |  33 ++---
 ietf/secr/templates/announcement/index.html   |  31 ++++
 ietf/secr/templates/announcement/main.html    |  36 -----
 ietf/secr/templates/index.html                |  33 +++++
 ietf/secr/templates/main.html                 |  69 ---------
 ietf/secr/urls.py                             |   2 +-
 ietf/static/js/announcement.js                |  57 ++++++++
 package.json                                  |   1 +
 playwright/.gitignore                         |   1 +
 .../tests-legacy/secr/announcement.spec.js    |  77 ++++++++++
 14 files changed, 413 insertions(+), 273 deletions(-)
 create mode 100644 ietf/secr/templates/announcement/index.html
 delete mode 100644 ietf/secr/templates/announcement/main.html
 create mode 100644 ietf/secr/templates/index.html
 delete mode 100644 ietf/secr/templates/main.html
 create mode 100644 ietf/static/js/announcement.js
 create mode 100644 playwright/tests-legacy/secr/announcement.spec.js

diff --git a/ietf/secr/announcement/forms.py b/ietf/secr/announcement/forms.py
index 3fe58bdaaa..820ef79a09 100644
--- a/ietf/secr/announcement/forms.py
+++ b/ietf/secr/announcement/forms.py
@@ -14,30 +14,41 @@
 # Globals
 # ---------------------------------------------
 
-TO_LIST = ('IETF Announcement List <ietf-announce@ietf.org>',
-           'I-D Announcement List <i-d-announce@ietf.org>',
-           'RFP Announcement List <rfp-announce@ietf.org>',
-           'The IESG <iesg@ietf.org>',
-           'Working Group Chairs <wgchairs@ietf.org>',
-           'BOF Chairs <bofchairs@ietf.org>',
-           'Other...')
+TO_LIST = (
+    "IETF Announcement List <ietf-announce@ietf.org>",
+    "I-D Announcement List <i-d-announce@ietf.org>",
+    "RFP Announcement List <rfp-announce@ietf.org>",
+    "The IESG <iesg@ietf.org>",
+    "Working Group Chairs <wgchairs@ietf.org>",
+    "BOF Chairs <bofchairs@ietf.org>",
+    "Other...",
+)
 
 # ---------------------------------------------
 # Helper Functions
 # ---------------------------------------------
 
+
 def get_from_choices(user):
-    '''
+    """
     This function returns a choices tuple containing
     all the Announced From choices.  Including
     leadership chairs and other entities.
-    '''
+    """
     addresses = []
-    if has_role(user,'Secretariat'):
-        addresses = AnnouncementFrom.objects.values_list('address', flat=True).order_by('address').distinct()
+    if has_role(user, "Secretariat"):
+        addresses = (
+            AnnouncementFrom.objects.values_list("address", flat=True)
+            .order_by("address")
+            .distinct()
+        )
     else:
         for role in user.person.role_set.all():
-            addresses.extend(AnnouncementFrom.objects.filter(name=role.name, group=role.group).values_list('address', flat=True).order_by('address'))
+            addresses.extend(
+                AnnouncementFrom.objects.filter(name=role.name, group=role.group)
+                .values_list("address", flat=True)
+                .order_by("address")
+            )
 
     nomcom_choices = get_nomcom_choices(user)
     if nomcom_choices:
@@ -45,65 +56,91 @@ def get_from_choices(user):
 
     choices = list(zip(addresses, addresses))
     if len(choices) > 1:
-        choices.insert(0, ('', '(Choose an option)'))
+        choices.insert(0, ("", "(Choose an option)"))
     return choices
 
 
 def get_nomcom_choices(user):
-    '''
+    """
     Returns the list of nomcom email addresses for given user
-    '''
-    nomcoms = Role.objects.filter(name="chair",
-                                  group__acronym__startswith="nomcom",
-                                  group__state="active",
-                                  group__type="nomcom",
-                                  person=user.person)
+    """
+    nomcoms = Role.objects.filter(
+        name="chair",
+        group__acronym__startswith="nomcom",
+        group__state="active",
+        group__type="nomcom",
+        person=user.person,
+    )
     addresses = []
     for nomcom in nomcoms:
         year = nomcom.group.acronym[-4:]
-        addresses.append('NomCom Chair %s <nomcom-chair-%s@ietf.org>' % (year,year))
+        addresses.append("NomCom Chair %s <nomcom-chair-%s@ietf.org>" % (year, year))
 
     return addresses
-        
+
 
 def get_to_choices():
-    return list(zip(TO_LIST,TO_LIST))
+    return list(zip(TO_LIST, TO_LIST))
 
 
 # ---------------------------------------------
 # Forms
 # ---------------------------------------------
 
+
 class AnnounceForm(forms.ModelForm):
-    nomcom = forms.ModelChoiceField(queryset=Group.objects.filter(acronym__startswith='nomcom',type='nomcom',state='active'),required=False)
+    nomcom = forms.ModelChoiceField(
+        queryset=Group.objects.filter(
+            acronym__startswith="nomcom", type="nomcom", state="active"
+        ),
+        required=False,
+    )
     to_custom = MultiEmailField(required=False)
 
     class Meta:
         model = Message
-        fields = ('nomcom', 'to','to_custom','frm','cc','bcc','reply_to','subject','body')
+        fields = (
+            "nomcom",
+            "to",
+            "to_custom",
+            "frm",
+            "cc",
+            "bcc",
+            "reply_to",
+            "subject",
+            "body",
+        )
+        labels = {"frm": "From"}
+        help_texts = {
+            "to": "Select name OR select Other... and enter email below",
+            "cc": "Use comma separated lists for emails (Cc, Bcc, Reply To)",
+        }
 
     def __init__(self, *args, **kwargs):
-        if 'hidden' in kwargs:
-            self.hidden = kwargs.pop('hidden')
+        if "hidden" in kwargs:
+            self.hidden = kwargs.pop("hidden")
         else:
             self.hidden = False
-        user = kwargs.pop('user')
+        user = kwargs.pop("user")
         person = user.person
         super(AnnounceForm, self).__init__(*args, **kwargs)
-        self.fields['to'].widget = forms.Select(choices=get_to_choices())
-        self.fields['to'].help_text = 'Select name OR select Other... and enter email below'
-        self.fields['cc'].help_text = 'Use comma separated lists for emails (Cc, Bcc, Reply To)'
-        self.fields['frm'].widget = forms.Select(choices=get_from_choices(user))
-        self.fields['frm'].label = 'From'
-        self.fields['reply_to'].required = True
-        self.fields['nomcom'].label = 'NomCom message:'
-        nomcom_roles = person.role_set.filter(group__in=self.fields['nomcom'].queryset,name='chair')
-        secr_roles = person.role_set.filter(group__acronym='secretariat',name='secr')
+        self.fields["to"].widget = forms.Select(choices=get_to_choices())
+        self.fields["frm"].widget = forms.Select(choices=get_from_choices(user))
+        self.fields["reply_to"].required = True
+        # nomcom field is defined declaratively so label and help_text must be set here
+        self.fields["nomcom"].label = "NomCom message:"
+        self.fields["nomcom"].help_text = (
+            "If this is a NomCom announcement specifiy which NomCom group here"
+        )
+        nomcom_roles = person.role_set.filter(
+            group__in=self.fields["nomcom"].queryset, name="chair"
+        )
+        secr_roles = person.role_set.filter(group__acronym="secretariat", name="secr")
         if nomcom_roles:
-            self.initial['nomcom'] = nomcom_roles[0].group.pk
+            self.initial["nomcom"] = nomcom_roles[0].group.pk
         if not nomcom_roles and not secr_roles:
-            self.fields['nomcom'].widget = forms.HiddenInput()
-        
+            self.fields["nomcom"].widget = forms.HiddenInput()
+
         if self.hidden:
             for key in list(self.fields.keys()):
                 self.fields[key].widget = forms.HiddenInput()
@@ -113,25 +150,29 @@ def clean(self):
         data = self.cleaned_data
         if self.errors:
             return self.cleaned_data
-        if data['to'] == 'Other...' and not data['to_custom']:
+        if data["to"] == "Other..." and not data["to_custom"]:
             raise forms.ValidationError('You must enter a "To" email address')
-        for k in ['to', 'frm', 'cc',]:
+        for k in [
+            "to",
+            "frm",
+            "cc",
+        ]:
             data[k] = unescape(data[k])
 
         return data
 
     def save(self, *args, **kwargs):
-        user = kwargs.pop('user')
+        user = kwargs.pop("user")
         message = super(AnnounceForm, self).save(commit=False)
         message.by = user.person
-        if self.cleaned_data['to'] == 'Other...':
-            message.to = self.cleaned_data['to_custom']
-        if kwargs['commit']:
+        if self.cleaned_data["to"] == "Other...":
+            message.to = self.cleaned_data["to_custom"]
+        if kwargs["commit"]:
             message.save()
 
         # handle nomcom message
-        nomcom = self.cleaned_data.get('nomcom',False)
+        nomcom = self.cleaned_data.get("nomcom", False)
         if nomcom:
             message.related_groups.add(nomcom)
 
-        return message
\ No newline at end of file
+        return message
diff --git a/ietf/secr/announcement/tests.py b/ietf/secr/announcement/tests.py
index c147c301b6..f08e824397 100644
--- a/ietf/secr/announcement/tests.py
+++ b/ietf/secr/announcement/tests.py
@@ -6,7 +6,7 @@
 
 from django.urls import reverse
 
-import debug                            # pyflakes:ignore
+import debug  # pyflakes:ignore
 
 from ietf.utils.test_utils import TestCase
 from ietf.group.factories import RoleFactory
@@ -17,97 +17,102 @@
 from ietf.message.models import AnnouncementFrom
 from ietf.utils.mail import outbox, empty_outbox
 
-SECR_USER='secretary'
-WG_USER=''
-AD_USER=''
+SECR_USER = "secretary"
+WG_USER = ""
+AD_USER = ""
+
 
 class SecrAnnouncementTestCase(TestCase):
     def setUp(self):
         super().setUp()
-        chair = RoleName.objects.get(slug='chair')
-        secr = RoleName.objects.get(slug='secr')
-        ietf = Group.objects.get(acronym='ietf')
-        iab = Group.objects.get(acronym='iab')
-        secretariat = Group.objects.get(acronym='secretariat')
-        AnnouncementFrom.objects.create(name=secr,group=secretariat,address='IETF Secretariat <ietf-secretariat@ietf.org>')
-        AnnouncementFrom.objects.create(name=chair,group=ietf,address='IETF Chair <chair@ietf.org>')
-        AnnouncementFrom.objects.create(name=chair,group=iab,address='IAB Chair <iab-chair@iab.org>')
+        chair = RoleName.objects.get(slug="chair")
+        secr = RoleName.objects.get(slug="secr")
+        ietf = Group.objects.get(acronym="ietf")
+        iab = Group.objects.get(acronym="iab")
+        secretariat = Group.objects.get(acronym="secretariat")
+        AnnouncementFrom.objects.create(
+            name=secr,
+            group=secretariat,
+            address="IETF Secretariat <ietf-secretariat@ietf.org>",
+        )
+        AnnouncementFrom.objects.create(
+            name=chair, group=ietf, address="IETF Chair <chair@ietf.org>"
+        )
+        AnnouncementFrom.objects.create(
+            name=chair, group=iab, address="IAB Chair <iab-chair@iab.org>"
+        )
 
     def test_main(self):
         "Main Test"
-        url = reverse('ietf.secr.announcement.views.main')
+        url = reverse("ietf.secr.announcement.views.main")
         self.client.login(username="secretary", password="secretary+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-    
+
     def test_main_announce_from(self):
-        url = reverse('ietf.secr.announcement.views.main')
+        url = reverse("ietf.secr.announcement.views.main")
 
         # Secretariat
         self.client.login(username="secretary", password="secretary+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#id_frm option')),4)
+        self.assertEqual(len(q("#id_frm option")), 4)
 
         # IAB Chair
         self.client.login(username="iab-chair", password="iab-chair+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#id_frm option')),1)
-        self.assertTrue('<iab-chair@iab.org>' in q('#id_frm option').val())
+        self.assertEqual(len(q("#id_frm option")), 1)
+        self.assertTrue("<iab-chair@iab.org>" in q("#id_frm option").val())
 
         # IETF Chair
         self.client.login(username="ietf-chair", password="ietf-chair+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#id_frm option')),1)
-        self.assertTrue('<chair@ietf.org>' in q('#id_frm option').val())
+        self.assertEqual(len(q("#id_frm option")), 1)
+        self.assertTrue("<chair@ietf.org>" in q("#id_frm option").val())
+
 
 class UnauthorizedAnnouncementCase(TestCase):
     def test_unauthorized(self):
         "Unauthorized Test"
-        url = reverse('ietf.secr.announcement.views.main')
-        person = RoleFactory(name_id='chair',group__acronym='mars').person
-        self.client.login(username=person.user.username, password=person.user.username+"+password")
+        url = reverse("ietf.secr.announcement.views.main")
+        person = RoleFactory(name_id="chair", group__acronym="mars").person
+        self.client.login(
+            username=person.user.username, password=person.user.username + "+password"
+        )
         r = self.client.get(url)
         self.assertEqual(r.status_code, 403)
-    
+
+
 class SubmitAnnouncementCase(TestCase):
-    def test_invalid_submit(self):
-        "Invalid Submit"
-        url = reverse('ietf.secr.announcement.views.main')
-        post_data = {'id_subject':''}
-        self.client.login(username="secretary", password="secretary+password")
-        r = self.client.post(url,post_data)
-        self.assertEqual(r.status_code, 200)
-        q = PyQuery(r.content)
-        self.assertTrue(len(q('form ul.errorlist')) > 0)
-        
     def test_valid_submit(self):
         "Valid Submit"
         nomcom_test_data()
         empty_outbox()
-        url = reverse('ietf.secr.announcement.views.main')
-        confirm_url = reverse('ietf.secr.announcement.views.confirm')
-        nomcom = Group.objects.get(type='nomcom')
-        post_data = {'nomcom': nomcom.pk,
-                     'to':'Other...',
-                     'to_custom':'rcross@amsl.com',
-                     'frm':'IETF Secretariat &lt;ietf-secretariat@ietf.org&gt;',
-                     'reply_to':'secretariat@ietf.org',
-                     'subject':'Test Subject',
-                     'body':'This is a test.'}
+        url = reverse("ietf.secr.announcement.views.main")
+        confirm_url = reverse("ietf.secr.announcement.views.confirm")
+        nomcom = Group.objects.get(type="nomcom")
+        post_data = {
+            "nomcom": nomcom.pk,
+            "to": "Other...",
+            "to_custom": "phil@example.com",
+            "frm": "IETF Secretariat &lt;ietf-secretariat@ietf.org&gt;",
+            "reply_to": "secretariat@ietf.org",
+            "subject": "Test Subject",
+            "body": "This is a test.",
+        }
         self.client.login(username="secretary", password="secretary+password")
-        response = self.client.post(url,post_data)
-        self.assertContains(response, 'Confirm Announcement')
-        response = self.client.post(confirm_url,post_data,follow=True)
+        response = self.client.post(url, post_data)
+        self.assertContains(response, "Confirm Announcement")
+        response = self.client.post(confirm_url, post_data, follow=True)
         self.assertRedirects(response, url)
-        self.assertEqual(len(outbox),1)
-        self.assertEqual(outbox[0]['subject'],'Test Subject')
-        self.assertEqual(outbox[0]['to'],'<rcross@amsl.com>')
-        message = Message.objects.filter(by__user__username='secretary').last()
-        self.assertEqual(message.subject,'Test Subject')
+        self.assertEqual(len(outbox), 1)
+        self.assertEqual(outbox[0]["subject"], "Test Subject")
+        self.assertEqual(outbox[0]["to"], "<phil@example.com>")
+        message = Message.objects.filter(by__user__username="secretary").last()
+        self.assertEqual(message.subject, "Test Subject")
         self.assertTrue(nomcom in message.related_groups.all())
diff --git a/ietf/secr/announcement/urls.py b/ietf/secr/announcement/urls.py
index 3c3c05a09c..dc534f64ae 100644
--- a/ietf/secr/announcement/urls.py
+++ b/ietf/secr/announcement/urls.py
@@ -1,8 +1,7 @@
-
 from ietf.secr.announcement import views
 from ietf.utils.urls import url
 
 urlpatterns = [
-    url(r'^$', views.main),
-    url(r'^confirm/$', views.confirm),
+    url(r"^$", views.main),
+    url(r"^confirm/$", views.confirm),
 ]
diff --git a/ietf/secr/announcement/views.py b/ietf/secr/announcement/views.py
index 42de089c59..5617ae9e6f 100644
--- a/ietf/secr/announcement/views.py
+++ b/ietf/secr/announcement/views.py
@@ -18,86 +18,93 @@
 # Helper Functions
 # -------------------------------------------------
 def check_access(user):
-    '''
+    """
     This function takes a Django User object and returns true if the user has access to
     the Announcement app.
-    '''
+    """
     if hasattr(user, "person"):
         person = user.person
         if has_role(user, "Secretariat"):
             return True
-        
+
         for role in person.role_set.all():
-            if AnnouncementFrom.objects.filter(name=role.name,group=role.group):
+            if AnnouncementFrom.objects.filter(name=role.name, group=role.group):
                 return True
 
-        if Role.objects.filter(name="chair",
-                               group__acronym__startswith="nomcom",
-                               group__state="active",
-                               group__type="nomcom",
-                               person=person):
+        if Role.objects.filter(
+            name="chair",
+            group__acronym__startswith="nomcom",
+            group__state="active",
+            group__type="nomcom",
+            person=person,
+        ):
             return True
 
     return False
 
+
 # --------------------------------------------------
 # STANDARD VIEW FUNCTIONS
 # --------------------------------------------------
 # this seems to cause some kind of circular problem
 # @check_for_cancel(reverse('home'))
 @login_required
-@check_for_cancel('../')
+@check_for_cancel("../")
 def main(request):
-    '''
+    """
     Main view for Announcement tool.  Authrozied users can fill out email details: header, body, etc
     and send.
-    '''
+    """
     if not check_access(request.user):
-        permission_denied(request, 'Restricted to: Secretariat, IAD, or chair of IETF, IAB, RSOC, RSE, IAOC, ISOC, NomCom.')
+        permission_denied(
+            request,
+            "Restricted to: Secretariat, IAD, or chair of IETF, IAB, RSOC, RSE, IAOC, ISOC, NomCom.",
+        )
 
-    form = AnnounceForm(request.POST or None,user=request.user)
+    form = AnnounceForm(request.POST or None, user=request.user)
 
     if form.is_valid():
         # recast as hidden form for next page of process
         form = AnnounceForm(request.POST, user=request.user, hidden=True)
-        if form.data['to'] == 'Other...':
-            to = form.data['to_custom']
+        if form.data["to"] == "Other...":
+            to = form.data["to_custom"]
         else:
-            to = form.data['to']
+            to = form.data["to"]
 
-        return render(request, 'announcement/confirm.html', {
-            'message': form.data,
-            'to': to,
-            'form': form},
+        return render(
+            request,
+            "announcement/confirm.html",
+            {"message": form.data, "to": to, "form": form},
         )
 
-    return render(request, 'announcement/main.html', { 'form': form} )
+    return render(request, "announcement/index.html", {"form": form})
+
 
 @login_required
-@check_for_cancel('../')
+@check_for_cancel("../")
 def confirm(request):
 
     if not check_access(request.user):
-        permission_denied(request, 'Restricted to: Secretariat, IAD, or chair of IETF, IAB, RSOC, RSE, IAOC, ISOC, NomCom.')
+        permission_denied(
+            request,
+            "Restricted to: Secretariat, IAD, or chair of IETF, IAB, RSOC, RSE, IAOC, ISOC, NomCom.",
+        )
 
-    if request.method == 'POST':
+    if request.method == "POST":
         form = AnnounceForm(request.POST, user=request.user)
-        if request.method == 'POST':
-            message = form.save(user=request.user,commit=True)
-            extra = {'Reply-To': message.get('reply_to') }
-            send_mail_text(None,
-                           message.to,
-                           message.frm,
-                           message.subject,
-                           message.body,
-                           cc=message.cc,
-                           bcc=message.bcc,
-                           extra=extra,
-                       )
-
-            messages.success(request, 'The announcement was sent.')
-            return redirect('ietf.secr.announcement.views.main')
-
-
-
-
+        if request.method == "POST":
+            message = form.save(user=request.user, commit=True)
+            extra = {"Reply-To": message.get("reply_to")}
+            send_mail_text(
+                None,
+                message.to,
+                message.frm,
+                message.subject,
+                message.body,
+                cc=message.cc,
+                bcc=message.bcc,
+                extra=extra,
+            )
+
+            messages.success(request, "The announcement was sent.")
+            return redirect("ietf.secr.announcement.views.main")
diff --git a/ietf/secr/templates/announcement/confirm.html b/ietf/secr/templates/announcement/confirm.html
index ddf2a6de6e..0e1f72c54b 100644
--- a/ietf/secr/templates/announcement/confirm.html
+++ b/ietf/secr/templates/announcement/confirm.html
@@ -1,22 +1,17 @@
-{% extends "base_site.html" %}
+{# Copyright The IETF Trust 2024, All Rights Reserved #}
+{% extends "base.html" %}
 {% load static %}
-
+{% load ietf_filters %}
+{% load django_bootstrap5 %}
 {% block title %}Announcement{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; Announcement
-{% endblock %}
-
 {% block content %}
+    <h1>Announcement</h1>
+
 
     <div class="module">
         <h2>Confirm Announcement</h2>
 
-        <form action="{% url "ietf.secr.announcement.views.confirm" %}" method="post">{% csrf_token %}
+        <form action="{% url 'ietf.secr.announcement.views.confirm' %}" method="post">{% csrf_token %}
 
             <pre id="announce-confirm">
 To: {{ to }}
@@ -29,15 +24,13 @@ <h2>Confirm Announcement</h2>
 {{ message.body }}
             </pre>
 
-            {{ form }}
-            <div class="button-group">
-                <ul id="announcement-button-list">
-                    <li><button type="submit" name="submit" value="Send">Send</button></li>
-                    <li><button type="button" onclick="history.go(-1);return false">Back</button></li>
-                    <li><button type="submit" name="submit" value="Cancel">Cancel</button></li>
-                </ul>
-            </div> <!-- button-group -->
+            {% bootstrap_form form %}
 
+            <div class="d-flex justify-content-around">
+                <button class="btn btn-primary" type="submit" name="submit" value="Send">Send</button>
+                <button class="btn btn-secondary" type="button" onclick="history.go(-1);return false">Back</button>
+                <button class="btn btn-danger" type="submit" name="submit" value="Cancel">Cancel</button>
+            </div>
         </form>
     </div> <!-- module -->
 
diff --git a/ietf/secr/templates/announcement/index.html b/ietf/secr/templates/announcement/index.html
new file mode 100644
index 0000000000..ad7226e3bc
--- /dev/null
+++ b/ietf/secr/templates/announcement/index.html
@@ -0,0 +1,31 @@
+{# Copyright The IETF Trust 2024, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load ietf_filters %}
+{% load django_bootstrap5 %}
+{% block title %}Announcement{% endblock %}
+{% block content %}
+    <h1 class="announcement">Announcement</h1>
+    {% if form.non_field_errors %}<div class="my-3 alert alert-danger">{{ form.non_field_errors }}</div>{% endif %}
+
+    <form id="announcement-form" method="post">
+        {% csrf_token %}
+        {% bootstrap_field form.nomcom layout='horizontal' %}
+        {% bootstrap_field form.to layout='horizontal' %}
+        {% bootstrap_field form.to_custom layout='horizontal' %}
+        {% bootstrap_field form.frm layout='horizontal' %}
+        {% bootstrap_field form.cc layout='horizontal' %}
+        {% bootstrap_field form.bcc layout='horizontal' %}
+        {% bootstrap_field form.reply_to layout='horizontal' %}
+        {% bootstrap_field form.subject layout='horizontal' %}
+        {% bootstrap_field form.body layout='horizontal' %}
+
+        <button type="submit" class="btn btn-primary">Continue</button>
+        <a class="btn btn-secondary float-end"
+               href="{% url 'ietf.secr' %}">Cancel</a>
+    </form>
+
+{% endblock %}
+{% block js %}
+    <script src="{% static 'ietf/js/announcement.js' %}"></script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/announcement/main.html b/ietf/secr/templates/announcement/main.html
deleted file mode 100644
index c88b4a2406..0000000000
--- a/ietf/secr/templates/announcement/main.html
+++ /dev/null
@@ -1,36 +0,0 @@
-{% extends "base_site.html" %}
-
-{% block title %}Announcement{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; Announcement
-{% endblock %}
-
-{% block content %}
-
-    <div class="module">
-        <h2>Announcement</h2>
-
-        <form method="post">{% csrf_token %}
-            <table class="new-style full-width amstable" id="announce-table">
-                <tbody>
-                {% if form.non_field_errors %}{{ form.non_field_errors }}{% endif %}
-                {% for field in form.visible_fields %}
-                    <tr>
-                        <th scope="row">{{ field.label_tag }}{% if field.field.required %}<span class="required"> *</span>{% endif %}</th>
-                        <td>{{ field.errors }}{{ field }}{% if field.help_text %}<br>{{ field.help_text }}{% endif %}</td>
-                    </tr>
-                {% endfor %}
-                </tbody>
-            </table>
-            <div class="button-group">
-                <ul id="announcement-button-list">
-                    <li><button type="submit" name="submit" value="Continue">Continue</button></li>
-                    <li><button type="button" onclick="window.location='../'" value="Cancel">Cancel</button></li>
-                </ul>
-            </div> <!-- button-group -->
-
-        </form>
-    </div> <!-- module -->
-
-{% endblock %}
diff --git a/ietf/secr/templates/index.html b/ietf/secr/templates/index.html
new file mode 100644
index 0000000000..05fa3db41f
--- /dev/null
+++ b/ietf/secr/templates/index.html
@@ -0,0 +1,33 @@
+{# Copyright The IETF Trust 2007, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load ietf_filters %}
+{% block title %}Secretariat Dashboard{% endblock %}
+{% block content %}
+    <h1>Secretariat Dashboard</h1>
+    <div class="">
+        {% if user|has_role:"Secretariat" %}
+            <h2>IESG</h2>
+            <ul>
+                <li><a href="{% url 'ietf.secr.announcement.views.main' %}"><b>Announcement</b></a></li>
+                <li><a href="{% url 'ietf.secr.telechat.views.main' %}"><b>Telechat</b></a></li>
+            </ul>
+
+            <h2>IDs and WGs Process</h2>
+            <ul>
+                <li> <a href="{% url 'ietf.secr.rolodex.views.search' %}"><b>Rolodex</b></a></li>
+            </ul>
+
+            <h2>Meetings and Proceedings</h2>
+            <ul>
+                <li> <a href="{% url 'ietf.secr.sreq.views.main' %} "><b>Session Requests</b></a></li>
+                <li> <a href="{% url 'ietf.secr.meetings.views.main' %}"><b>Meeting Manager</b></a></li>
+            </ul>
+        {% else %}
+            <ul>
+                <li> <a href="{% url 'ietf.secr.sreq.views.main' %}"><b>Session Requests</b></a></li>
+                <li> <a href="{% url 'ietf.secr.announcement.views.main' %}"><b>Announcements</b></a></li>
+            </ul>
+        {% endif %}
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/main.html b/ietf/secr/templates/main.html
deleted file mode 100644
index 42d6e8f6a1..0000000000
--- a/ietf/secr/templates/main.html
+++ /dev/null
@@ -1,69 +0,0 @@
-{% extends "base_site.html" %}
-{% load ietf_filters %}
-
-{% block content %}
-    <div id="content-main">
-
-        {% if user|has_role:"Secretariat" %}
-
-            <table class="menu">
-                <tbody>
-                <tr>
-                    <td>
-                        <h2>IESG</h2>
-                        <ul>
-                        <li> <a href="{% url 'ietf.secr.announcement.views.main' %}"><b>Announcement</b></a></li>
-                        <li> <a href="{% url 'ietf.secr.telechat.views.main' %}"><b>Telechat</b></a></li>
-                        </ul>
-                    </td>
-                    <td>
-                        <h2>IDs and WGs Process</h2>
-                        <ul>
-                        <li> <a href="{% url 'ietf.secr.rolodex.views.search' %}"><b>Rolodex</b></a></li>
-                        </ul>
-                    </td>
-                </tr>
-                <tr>
-                    <td>
-                        <h2>Meetings and Proceedings</h2>
-                        <ul>
-                        <li> <a href="{% url "ietf.secr.sreq.views.main" %}"><b>Session Requests</b></a></li>
-                        <li> <a href="{% url "ietf.secr.meetings.views.main" %}"><b>Meeting Manager</b></a></li>
-                        </ul>
-                    </td>
-                    <td></td>
-                </tr>
-                </tbody>
-            </table>
-
-        {% else %}
-
-            <table class="menu">
-                <tbody>
-                <tr>
-                    <td>
-                        <h2>Section 1</h2>
-                        <ul>
-                        <li> <a href="{% url "ietf.secr.sreq.views.main" %}"><b>Session Requests</b></a></li>
-                        <li> <a href="{% url 'ietf.secr.announcement.views.main' %}"><b>Announcements</b></a></li>
-                        </ul>
-                    </td>
-                    <td>
-                        <h2>Section 2</h2>
-                    </td>
-                </tr>
-                <tr>
-                    <td>
-                        <h2>Section 3</h2>
-                    </td>
-                    <td>
-                        <h2>Section 4</h2>
-                    </td>
-                </tr>
-                </tbody>
-            </table>
-
-        {% endif %}
-
-    </div>
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/urls.py b/ietf/secr/urls.py
index 0ce14a449a..4a3e5b0363 100644
--- a/ietf/secr/urls.py
+++ b/ietf/secr/urls.py
@@ -2,7 +2,7 @@
 from django.views.generic import TemplateView
 
 urlpatterns = [
-    re_path(r'^$', TemplateView.as_view(template_name='main.html')),
+    re_path(r'^$', TemplateView.as_view(template_name='index.html'), name='ietf.secr'),
     re_path(r'^announcement/', include('ietf.secr.announcement.urls')),
     re_path(r'^meetings/', include('ietf.secr.meetings.urls')),
     re_path(r'^rolodex/', include('ietf.secr.rolodex.urls')),
diff --git a/ietf/static/js/announcement.js b/ietf/static/js/announcement.js
new file mode 100644
index 0000000000..95465120fa
--- /dev/null
+++ b/ietf/static/js/announcement.js
@@ -0,0 +1,57 @@
+const announcementApp = (function() {
+    'use strict';
+    return {
+        // functions for Announcement
+        checkToField: function() {
+            document.documentElement.scrollTop = 0; // For most browsers
+            const toField = document.getElementById('id_to');
+            const toCustomInput = document.getElementById('id_to_custom');
+            const toCustomDiv = toCustomInput.closest('div.row');
+            
+            if (toField.value === 'Other...') {
+                toCustomDiv.style.display = 'flex'; // Show the custom field
+            } else {
+                toCustomDiv.style.display = 'none'; // Hide the custom field
+                toCustomInput.value = ''; // Optionally clear the input value if hidden
+            }
+        }
+    };
+})();
+
+// Extra care is required to ensure the back button 
+// works properly for the optional to_custom field.
+// Take the case when a user selects "Other..." for
+// "To" field. The "To custom" field appears and they
+// enter a new address there.
+// In Chrome, when the form is submitted and then the user
+// uses the back button (or browser back), the page loads
+// from bfcache then the javascript DOMContentLoaded event
+// handler is run, hiding the empty to_custom field, THEN the
+// browser autofills the form fields. Because to_submit
+// is now hidden it does not get a value. This is a very
+// bad experience for the user because the to_custom field
+// was unexpectedly cleared and hidden. If they notice this
+// they would need to know to first select another "To"
+// option, then select "Other..." again just to get the
+// to_custom field visible so they can re-enter the custom
+// address.
+// The solution is to use setTimeout to run checkToField
+// after a short delay, giving the browser time to autofill
+// the form fields before it checks to see if the to_custom
+// field is empty and hides it.
+
+document.addEventListener('DOMContentLoaded', function() {
+    // Run the visibility check after allowing cache to populate values
+    setTimeout(announcementApp.checkToField, 300);
+
+    const toField = document.getElementById('id_to');
+    toField.addEventListener('change', announcementApp.checkToField);
+});
+
+// Handle back/forward navigation with pageshow
+window.addEventListener('pageshow', function(event) {
+    if (event.persisted) {
+        // Then apply visibility logic after cache restoration
+        setTimeout(announcementApp.checkToField, 300);
+    }
+});
\ No newline at end of file
diff --git a/package.json b/package.json
index 6d1591ca15..e3e89288e7 100644
--- a/package.json
+++ b/package.json
@@ -114,6 +114,7 @@
         "ietf/static/js/add_session_recordings.js",
         "ietf/static/js/agenda_filter.js",
         "ietf/static/js/agenda_materials.js",
+        "ietf/static/js/announcement.js",
         "ietf/static/js/complete-review.js",
         "ietf/static/js/create_timeslot.js",
         "ietf/static/js/create_timeslot.js",
diff --git a/playwright/.gitignore b/playwright/.gitignore
index 75e854d8dc..f38d036a79 100644
--- a/playwright/.gitignore
+++ b/playwright/.gitignore
@@ -2,3 +2,4 @@ node_modules/
 /test-results/
 /playwright-report/
 /playwright/.cache/
+auth.json
\ No newline at end of file
diff --git a/playwright/tests-legacy/secr/announcement.spec.js b/playwright/tests-legacy/secr/announcement.spec.js
new file mode 100644
index 0000000000..4dbbc25a81
--- /dev/null
+++ b/playwright/tests-legacy/secr/announcement.spec.js
@@ -0,0 +1,77 @@
+const { test, expect } = require('@playwright/test')
+const viewports = require('../../helpers/viewports')
+const { setTimeout } = require('timers/promises')
+
+// ====================================================================
+// ANNOUNCEMENT | DESKTOP viewport
+// ====================================================================
+
+test.describe('desktop', () => {
+  
+  test.beforeAll(async ({ browser }) => {
+    const context = await browser.newContext();
+    const page = await context.newPage();
+
+    await page.goto('/accounts/login/');
+
+    await page.fill('input#id_username', 'glen');
+    await page.fill('input#id_password', 'password');
+
+    await page.click('button[type="submit"]');
+    await page.waitForURL('/accounts/profile/');
+
+    await context.storageState({ path: 'auth.json' });
+
+    await context.close();
+  });
+
+  test.beforeEach(async ({ browser }) => {
+    // Reuse the authentication state in each test
+    const context = await browser.newContext({ storageState: 'auth.json' });
+    const page = await context.newPage();
+    await page.setViewportSize({
+      width: viewports.desktop[0],
+      height: viewports.desktop[1]
+    })
+    await page.goto(`/secr/announcement/`); 
+    await page.locator('h1:text("Announcement")').waitFor({ state: 'visible' })
+    await setTimeout(500)
+    // Attach the page to the test context
+    test.info().page = page;
+  })
+
+  test('show to custom', async () => {
+    const page = test.info().page;
+
+    // to_custom should initially be hidden
+    const element = page.locator('#id_to_custom');
+    await expect(element).toBeHidden();
+    await page.selectOption('select#id_to', 'Other...');
+    await expect(element).toBeVisible();
+  })
+
+  test('back button', async () => {
+    const page = test.info().page;
+
+    const element = page.locator('#id_to_custom');
+    await page.selectOption('select#id_to', 'Other...');
+    await expect(element).toBeVisible();
+    await page.fill('input#id_to_custom', 'custom@example.com');
+    await page.selectOption('select#id_frm', 'IETF Chair <chair@ietf.org>');
+    await page.fill('input#id_reply_to', 'greg@example.com');
+    await page.fill('input#id_subject', 'About Stuff');
+    await page.fill('textarea#id_body', 'This is the stuff');
+
+    await page.click('text="Continue"');
+    const h2Locator = page.locator('h2:text("Confirm Announcement")');
+    await h2Locator.waitFor({ state: 'visible' });
+
+    // click back button and check to_custom
+    await page.click('text="Back"');
+    const subjectLocator = page.locator('input#id_subject');
+    await subjectLocator.waitFor({ state: 'visible' });
+    await expect(element).toBeVisible();
+    await expect(element).toHaveValue('custom@example.com');
+  })
+
+})
\ No newline at end of file

From 1a309b7464161e5e7e590eecacef96d752af02a0 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 23 Apr 2025 14:45:45 -0400
Subject: [PATCH 314/707] ci: Revert build.yml s3 sync command change

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e5c627c950..36439aa6cf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -235,7 +235,7 @@ jobs:
         docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
         echo "Pushing statics..."
         cd static
-        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors --checksum-algorithm CRC32
+        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
 
     - name: Augment dockerignore for docker image build
       env:

From 3c8f9727acc4825ec33816d77275b2793e9a9713 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 24 Apr 2025 11:43:23 -0300
Subject: [PATCH 315/707] chore: get django out of the forwarded header
 business (#8634)

---
 k8s/settings_local.py | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 0e128b1b4c..0f4ecaa631 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -19,13 +19,6 @@ def _multiline_to_list(s):
 # Default to "development". Production _must_ set DATATRACKER_SERVER_MODE="production" in the env!
 SERVER_MODE = os.environ.get("DATATRACKER_SERVER_MODE", "development")
 
-# Use X-Forwarded-Proto to determine request.is_secure(). This relies on CloudFlare overwriting the
-# value of the header if an incoming request sets it, which it does:
-# https://developers.cloudflare.com/fundamentals/reference/http-request-headers/#x-forwarded-proto
-# See also, especially the warnings:
-# https://docs.djangoproject.com/en/dev/ref/settings/#secure-proxy-ssl-header
-SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
-
 # Secrets
 _SECRET_KEY = os.environ.get("DATATRACKER_DJANGO_SECRET_KEY", None)
 if _SECRET_KEY is not None:

From 1ccf83d300a7fa0436c09c39a7d7fb955af00d0c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 24 Apr 2025 12:59:18 -0300
Subject: [PATCH 316/707] ci: increase timeout for staging db refresh

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 36439aa6cf..3d0b7d80fe 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -453,7 +453,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "sourceDb":"datatracker" }'
           wait-for-completion: true
-          wait-for-completion-timeout: 5m
+          wait-for-completion-timeout: 10m
           wait-for-completion-interval: 20s
           display-workflow-run-url: false
 

From f64470c7759ebcfd0e2589947dd7d372f510e436 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 25 Apr 2025 12:36:06 -0300
Subject: [PATCH 317/707] chore: fix typo in help_text (#8841)

---
 ietf/secr/announcement/forms.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/secr/announcement/forms.py b/ietf/secr/announcement/forms.py
index 820ef79a09..91004ea270 100644
--- a/ietf/secr/announcement/forms.py
+++ b/ietf/secr/announcement/forms.py
@@ -130,7 +130,7 @@ def __init__(self, *args, **kwargs):
         # nomcom field is defined declaratively so label and help_text must be set here
         self.fields["nomcom"].label = "NomCom message:"
         self.fields["nomcom"].help_text = (
-            "If this is a NomCom announcement specifiy which NomCom group here"
+            "If this is a NomCom announcement specify which NomCom group here"
         )
         nomcom_roles = person.role_set.filter(
             group__in=self.fields["nomcom"].queryset, name="chair"

From 6f76df2d4902b458e65a74b0efa8cc1e46202495 Mon Sep 17 00:00:00 2001
From: Mark Nottingham <mnot@mnot.net>
Date: Sat, 26 Apr 2025 01:50:37 +1000
Subject: [PATCH 318/707] Put draft name first in subject of review email
 (#8830)

Fixes #5946.

This is the minimal fix; other optimisations might be possible,
but this gets the job done for the common case -- people scanning
for drafts they're interested in.
---
 ietf/doc/views_review.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/doc/views_review.py b/ietf/doc/views_review.py
index 6ac0e17791..1968b133ce 100644
--- a/ietf/doc/views_review.py
+++ b/ietf/doc/views_review.py
@@ -897,7 +897,7 @@ def complete_review(request, name, assignment_id=None, acronym=None):
 
             if need_to_email_review:
                 # email the review
-                subject = "{} {} {} of {}-{}".format(assignment.review_request.team.acronym.capitalize(),assignment.review_request.type.name.lower(),"partial review" if assignment.state_id == "part-completed" else "review", assignment.review_request.doc.name, assignment.reviewed_rev)
+                subject = "{}-{} {} {} {}".format(assignment.review_request.doc.name, assignment.reviewed_rev, assignment.review_request.type.name.lower(), assignment.review_request.team.acronym.capitalize(), "partial review" if assignment.state_id == "part-completed" else "review")
                 related_groups = [ assignment.review_request.team, ]
                 if assignment.review_request.doc.group:
                     related_groups.append(assignment.review_request.doc.group)

From 3ece7bd5fb526414451cdc5502d781c524ac47ae Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 25 Apr 2025 13:14:53 -0300
Subject: [PATCH 319/707] chore: tag db docker img with dump info via env
 (#8831)

---
 docker/db.Dockerfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docker/db.Dockerfile b/docker/db.Dockerfile
index 31c41011e6..0b57a80b70 100644
--- a/docker/db.Dockerfile
+++ b/docker/db.Dockerfile
@@ -28,3 +28,10 @@ ENV POSTGRES_PASSWORD=hk2j22sfiv
 ENV POSTGRES_USER=django
 ENV POSTGRES_DB=datatracker
 ENV POSTGRES_HOST_AUTH_METHOD=trust
+
+# build-args for db dump tagging - exposed in the environment and
+# in image metadata
+ARG datatracker_dumpinfo_date=""
+ENV DATATRACKER_DUMPINFO_DATE=$datatracker_dumpinfo_date
+ARG datatracker_snapshot=""
+ENV DATATRACKER_SNAPSHOT=$datatracker_snapshot

From afa57830a34db56f08105115d9dcc1d99a3eff84 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 25 Apr 2025 18:50:56 -0300
Subject: [PATCH 320/707] fix: restore proceedings refresh task (#8842)

* fix: merge error dropped @shared_task

* fix: cache proceedings longer than recompute interval

* test: update tests
---
 ietf/meeting/tasks.py       | 1 +
 ietf/meeting/tests_views.py | 6 ++++--
 ietf/meeting/utils.py       | 5 ++++-
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index f1b7e8e079..20bb602682 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -34,6 +34,7 @@ def check_migrate_registrations_task():
     check_migrate_registrations()
 
 
+@shared_task
 def proceedings_content_refresh_task(*, all=False):
     """Refresh meeting proceedings cache
 
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index dfb414b61b..889a1bc882 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -8679,7 +8679,8 @@ def test_generate_proceedings_content(self, mock_caches):
         self.assertTrue(mock_default_cache.get.called)
         self.assertEqual(mock_default_cache.get.call_args.args[0], cache_key, "same cache key each time")
         self.assertTrue(mock_default_cache.set.called)
-        self.assertEqual(mock_default_cache.set.call_args, call(cache_key, proceedings_content, timeout=86400))
+        self.assertEqual(mock_default_cache.set.call_args.args, (cache_key, proceedings_content))
+        self.assertGreater(mock_default_cache.set.call_args.kwargs["timeout"], 86400)
         mock_default_cache.get.reset_mock()
         mock_default_cache.set.reset_mock()
 
@@ -8725,7 +8726,8 @@ def test_generate_proceedings_content(self, mock_caches):
         self.assertEqual(result, proceedings_content)  # should have recomputed the same thing
         self.assertFalse(mock_default_cache.get.called, "don't bother reading cache when force_refresh is True")
         self.assertTrue(mock_default_cache.set.called)
-        self.assertEqual(mock_default_cache.set.call_args, call(cache_key, proceedings_content, timeout=86400))
+        self.assertEqual(mock_default_cache.set.call_args.args, (cache_key, proceedings_content))
+        self.assertGreater(mock_default_cache.set.call_args.kwargs["timeout"], 86400)
 
     def test_named_session(self):
         """Session with a name should appear separately in the proceedings"""
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index d35914fd60..af12b6a274 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -1123,6 +1123,9 @@ def check_migrate_registrations():
 def generate_proceedings_content(meeting, force_refresh=False):
     """Render proceedings content for a meeting and update cache
     
+    Caches its value for 25 hours to ensure that the cache never expires if
+    we recompute the value daily.
+
     :meeting: meeting whose proceedings should be rendered
     :force_refresh: true to force regeneration and cache refresh
     """
@@ -1205,7 +1208,7 @@ def area_and_group_acronyms_from_session(s):
     cache.set(
         cache_key,
         rendered_content,
-        timeout=86400,  # one day, in seconds
+        timeout=3600 + 86400,  # one day + one hour, in seconds
     )
     return rendered_content
 

From c36ece86c70ec9b13e87c4e5852b4b2af4cc12b7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Apr 2025 12:17:46 -0400
Subject: [PATCH 321/707] chore(deps): bump the npm group across 1 directory
 with 3 updates (#8850)

Bumps the npm group with 3 updates in the /dev/deploy-to-container directory: [dockerode](https://github.com/apocas/dockerode), [nanoid](https://github.com/ai/nanoid) and [nanoid-dictionary](https://github.com/CyberAP/nanoid-dictionary).


Updates `dockerode` from 4.0.4 to 4.0.6
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.4...v4.0.6)

Updates `nanoid` from 5.1.4 to 5.1.5
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.1.4...5.1.5)

Updates `nanoid-dictionary` from 5.0.0-beta.1 to 5.0.0
- [Release notes](https://github.com/CyberAP/nanoid-dictionary/releases)
- [Changelog](https://github.com/CyberAP/nanoid-dictionary/blob/master/CHANGELOG.md)
- [Commits](https://github.com/CyberAP/nanoid-dictionary/commits/5.0.0)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nanoid
  dependency-version: 5.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nanoid-dictionary
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 206 ++++++++++++----------
 dev/deploy-to-container/package.json      |   6 +-
 2 files changed, 112 insertions(+), 100 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index f4ce2c367c..0954ec9af4 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -6,10 +6,10 @@
     "": {
       "name": "deploy-to-container",
       "dependencies": {
-        "dockerode": "^4.0.4",
+        "dockerode": "^4.0.6",
         "fs-extra": "^11.3.0",
-        "nanoid": "5.1.4",
-        "nanoid-dictionary": "5.0.0-beta.1",
+        "nanoid": "5.1.5",
+        "nanoid-dictionary": "5.0.0",
         "slugify": "1.6.6",
         "tar": "^7.4.3",
         "yargs": "^17.7.2"
@@ -285,7 +285,8 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ]
+      ],
+      "license": "MIT"
     },
     "node_modules/bcrypt-pbkdf": {
       "version": "1.0.2",
@@ -296,6 +297,17 @@
         "tweetnacl": "^0.14.3"
       }
     },
+    "node_modules/bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
     "node_modules/brace-expansion": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -304,6 +316,30 @@
         "balanced-match": "^1.0.0"
       }
     },
+    "node_modules/buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
     "node_modules/buildcheck": {
       "version": "0.0.6",
       "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.6.tgz",
@@ -316,7 +352,8 @@
     "node_modules/chownr": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
-      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg=="
+      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
+      "license": "ISC"
     },
     "node_modules/cliui": {
       "version": "8.0.1",
@@ -407,9 +444,9 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
-      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
+      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
@@ -417,7 +454,7 @@
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.0.1",
+        "tar-fs": "~2.1.2",
         "uuid": "^10.0.0"
       },
       "engines": {
@@ -438,6 +475,7 @@
       "version": "1.4.4",
       "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz",
       "integrity": "sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==",
+      "license": "MIT",
       "dependencies": {
         "once": "^1.4.0"
       }
@@ -468,7 +506,8 @@
     "node_modules/fs-constants": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
-      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
+      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
+      "license": "MIT"
     },
     "node_modules/fs-extra": {
       "version": "11.3.0",
@@ -535,7 +574,8 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ]
+      ],
+      "license": "BSD-3-Clause"
     },
     "node_modules/inherits": {
       "version": "2.0.4",
@@ -652,7 +692,8 @@
     "node_modules/mkdirp-classic": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
-      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A=="
+      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
+      "license": "MIT"
     },
     "node_modules/ms": {
       "version": "2.1.3",
@@ -668,9 +709,9 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.1.4",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.4.tgz",
-      "integrity": "sha512-GTFcMIDgR7tqji/LpSY8rtg464VnJl/j6ypoehYnuGb+Y8qZUdtKB8WVCXon0UEZgFDbuUxpIl//6FHLHgXSNA==",
+      "version": "5.1.5",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.5.tgz",
+      "integrity": "sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw==",
       "funding": [
         {
           "type": "github",
@@ -686,14 +727,16 @@
       }
     },
     "node_modules/nanoid-dictionary": {
-      "version": "5.0.0-beta.1",
-      "resolved": "https://registry.npmjs.org/nanoid-dictionary/-/nanoid-dictionary-5.0.0-beta.1.tgz",
-      "integrity": "sha512-xBkL9zzkNjzJ/UnmWyiOUDVX/COoi05eS0oU28RYKFFQhdnzO5dTOPbVZ/fCFgIOGr1zNinDHJ68mm/KQfcgcw=="
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/nanoid-dictionary/-/nanoid-dictionary-5.0.0.tgz",
+      "integrity": "sha512-/iCyQHwt36XkaIvSE9fcC8p6DiMPCZMTSMj9UT56Cv6T7f5CuxvOMhpNncaNieQ4z4d32p7ruEtAfRsb7Ya8Gw==",
+      "license": "MIT"
     },
     "node_modules/once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
       "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
       "dependencies": {
         "wrappy": "1"
       }
@@ -745,9 +788,10 @@
       }
     },
     "node_modules/pump": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
-      "integrity": "sha512-LwZy+p3SFs1Pytd/jYct4wpv49HiYCqd9Rlc5ZVdk0V+8Yzv6jR5Blk3TRmPL1ft69TxP0IMZGJ+WPFU2BFhww==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz",
+      "integrity": "sha512-tUPXtzlGM8FE3P0ZL6DVs/3P58k9nk8/jZeQCurTJylQA8qFYzHFfhBJkuqyE0FifOsQ0uKWekiZ5g8wtr28cw==",
+      "license": "MIT",
       "dependencies": {
         "end-of-stream": "^1.1.0",
         "once": "^1.3.1"
@@ -952,20 +996,22 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.0.1.tgz",
-      "integrity": "sha512-6tzWDMeroL87uF/+lin46k+Q+46rAJ0SyPGz7OW7wTgblI273hsBqk2C1j0/xNadNLKDTUL9BukSjB7cwgmlPA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
+      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
+      "license": "MIT",
       "dependencies": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
         "pump": "^3.0.0",
-        "tar-stream": "^2.0.0"
+        "tar-stream": "^2.1.4"
       }
     },
     "node_modules/tar-stream": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
       "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
+      "license": "MIT",
       "dependencies": {
         "bl": "^4.0.3",
         "end-of-stream": "^1.4.1",
@@ -977,39 +1023,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/tar-stream/node_modules/bl": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "dependencies": {
-        "buffer": "^5.5.0",
-        "inherits": "^2.0.4",
-        "readable-stream": "^3.4.0"
-      }
-    },
-    "node_modules/tar-stream/node_modules/buffer": {
-      "version": "5.7.1",
-      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
-      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "dependencies": {
-        "base64-js": "^1.3.1",
-        "ieee754": "^1.1.13"
-      }
-    },
     "node_modules/tar/node_modules/chownr": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
@@ -1104,7 +1117,8 @@
     "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "license": "ISC"
     },
     "node_modules/y18n": {
       "version": "5.0.8",
@@ -1352,6 +1366,16 @@
         "tweetnacl": "^0.14.3"
       }
     },
+    "bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "requires": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
     "brace-expansion": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -1360,6 +1384,15 @@
         "balanced-match": "^1.0.0"
       }
     },
+    "buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "requires": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
     "buildcheck": {
       "version": "0.0.6",
       "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.6.tgz",
@@ -1434,16 +1467,16 @@
       }
     },
     "dockerode": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
-      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
+      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.0.1",
+        "tar-fs": "~2.1.2",
         "uuid": "^10.0.0"
       }
     },
@@ -1613,14 +1646,14 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.1.4",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.4.tgz",
-      "integrity": "sha512-GTFcMIDgR7tqji/LpSY8rtg464VnJl/j6ypoehYnuGb+Y8qZUdtKB8WVCXon0UEZgFDbuUxpIl//6FHLHgXSNA=="
+      "version": "5.1.5",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.5.tgz",
+      "integrity": "sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw=="
     },
     "nanoid-dictionary": {
-      "version": "5.0.0-beta.1",
-      "resolved": "https://registry.npmjs.org/nanoid-dictionary/-/nanoid-dictionary-5.0.0-beta.1.tgz",
-      "integrity": "sha512-xBkL9zzkNjzJ/UnmWyiOUDVX/COoi05eS0oU28RYKFFQhdnzO5dTOPbVZ/fCFgIOGr1zNinDHJ68mm/KQfcgcw=="
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/nanoid-dictionary/-/nanoid-dictionary-5.0.0.tgz",
+      "integrity": "sha512-/iCyQHwt36XkaIvSE9fcC8p6DiMPCZMTSMj9UT56Cv6T7f5CuxvOMhpNncaNieQ4z4d32p7ruEtAfRsb7Ya8Gw=="
     },
     "once": {
       "version": "1.4.0",
@@ -1664,9 +1697,9 @@
       }
     },
     "pump": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz",
-      "integrity": "sha512-LwZy+p3SFs1Pytd/jYct4wpv49HiYCqd9Rlc5ZVdk0V+8Yzv6jR5Blk3TRmPL1ft69TxP0IMZGJ+WPFU2BFhww==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz",
+      "integrity": "sha512-tUPXtzlGM8FE3P0ZL6DVs/3P58k9nk8/jZeQCurTJylQA8qFYzHFfhBJkuqyE0FifOsQ0uKWekiZ5g8wtr28cw==",
       "requires": {
         "end-of-stream": "^1.1.0",
         "once": "^1.3.1"
@@ -1809,14 +1842,14 @@
       }
     },
     "tar-fs": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.0.1.tgz",
-      "integrity": "sha512-6tzWDMeroL87uF/+lin46k+Q+46rAJ0SyPGz7OW7wTgblI273hsBqk2C1j0/xNadNLKDTUL9BukSjB7cwgmlPA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
+      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
       "requires": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
         "pump": "^3.0.0",
-        "tar-stream": "^2.0.0"
+        "tar-stream": "^2.1.4"
       }
     },
     "tar-stream": {
@@ -1829,27 +1862,6 @@
         "fs-constants": "^1.0.0",
         "inherits": "^2.0.3",
         "readable-stream": "^3.1.1"
-      },
-      "dependencies": {
-        "bl": {
-          "version": "4.1.0",
-          "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-          "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-          "requires": {
-            "buffer": "^5.5.0",
-            "inherits": "^2.0.4",
-            "readable-stream": "^3.4.0"
-          }
-        },
-        "buffer": {
-          "version": "5.7.1",
-          "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
-          "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-          "requires": {
-            "base64-js": "^1.3.1",
-            "ieee754": "^1.1.13"
-          }
-        }
       }
     },
     "tweetnacl": {
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index eb8cb9012a..09716c3094 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -2,10 +2,10 @@
   "name": "deploy-to-container",
   "type": "module",
   "dependencies": {
-    "dockerode": "^4.0.4",
+    "dockerode": "^4.0.6",
     "fs-extra": "^11.3.0",
-    "nanoid": "5.1.4",
-    "nanoid-dictionary": "5.0.0-beta.1",
+    "nanoid": "5.1.5",
+    "nanoid-dictionary": "5.0.0",
     "slugify": "1.6.6",
     "tar": "^7.4.3",
     "yargs": "^17.7.2"

From f67aa6b4a341df9100ad73638eacec5f2afafd15 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Apr 2025 12:18:33 -0400
Subject: [PATCH 322/707] chore(deps): bump actions/download-artifact from
 4.1.9 to 4.3.0 (#8849)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.9 to 4.3.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4.1.9...v4.3.0)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3d0b7d80fe..0273fa4302 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -185,7 +185,7 @@ jobs:
 
     - name: Download a Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.1.9
+      uses: actions/download-artifact@v4.3.0
       with:
         name: coverage
 
@@ -292,7 +292,7 @@ jobs:
 
     - name: Download Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.1.9
+      uses: actions/download-artifact@v4.3.0
       with:
         name: coverage
 
@@ -407,7 +407,7 @@ jobs:
     - uses: actions/checkout@v4
         
     - name: Download a Release Artifact
-      uses: actions/download-artifact@v4.1.9
+      uses: actions/download-artifact@v4.3.0
       with:
         name: release-${{ env.PKG_VERSION }}
         

From 31c6c32ffb651bb99c1157788c3db5e9e3a25300 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Apr 2025 12:19:03 -0400
Subject: [PATCH 323/707] chore(deps): bump the npm group in /dev/diff with 2
 updates (#8759)

Bumps the npm group in /dev/diff with 2 updates: [dockerode](https://github.com/apocas/dockerode) and [luxon](https://github.com/moment/luxon).


Updates `dockerode` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.4...v4.0.5)

Updates `luxon` from 3.5.0 to 3.6.0
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/3.5.0...3.6.0)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: luxon
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/diff/package-lock.json | 174 +++++++++++++++++++------------------
 dev/diff/package.json      |   4 +-
 2 files changed, 93 insertions(+), 85 deletions(-)

diff --git a/dev/diff/package-lock.json b/dev/diff/package-lock.json
index 4e92d2a6e0..d1c2fbd763 100644
--- a/dev/diff/package-lock.json
+++ b/dev/diff/package-lock.json
@@ -7,7 +7,7 @@
       "name": "diff",
       "dependencies": {
         "chalk": "^5.4.1",
-        "dockerode": "^4.0.4",
+        "dockerode": "^4.0.6",
         "enquirer": "^2.4.1",
         "extract-zip": "^2.0.1",
         "fs-extra": "^11.3.0",
@@ -15,7 +15,7 @@
         "keypress": "^0.2.1",
         "listr2": "^6.6.1",
         "lodash-es": "^4.17.21",
-        "luxon": "^3.5.0",
+        "luxon": "^3.6.1",
         "pretty-bytes": "^6.1.1",
         "tar": "^7.4.3",
         "yargs": "^17.7.2"
@@ -359,7 +359,8 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ]
+      ],
+      "license": "MIT"
     },
     "node_modules/bcrypt-pbkdf": {
       "version": "1.0.2",
@@ -370,6 +371,17 @@
         "tweetnacl": "^0.14.3"
       }
     },
+    "node_modules/bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
     "node_modules/brace-expansion": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -378,6 +390,30 @@
         "balanced-match": "^1.0.0"
       }
     },
+    "node_modules/buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
     "node_modules/buffer-crc32": {
       "version": "0.2.13",
       "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
@@ -435,7 +471,8 @@
     "node_modules/chownr": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
-      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg=="
+      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
+      "license": "ISC"
     },
     "node_modules/cli-cursor": {
       "version": "4.0.0",
@@ -638,9 +675,9 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
-      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
+      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
@@ -648,7 +685,7 @@
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.0.1",
+        "tar-fs": "~2.1.2",
         "uuid": "^10.0.0"
       },
       "engines": {
@@ -776,7 +813,8 @@
     "node_modules/fs-constants": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
-      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
+      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
+      "license": "MIT"
     },
     "node_modules/fs-extra": {
       "version": "11.3.0",
@@ -895,7 +933,8 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ]
+      ],
+      "license": "BSD-3-Clause"
     },
     "node_modules/inherits": {
       "version": "2.0.4",
@@ -1186,9 +1225,10 @@
       }
     },
     "node_modules/luxon": {
-      "version": "3.5.0",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
-      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ==",
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
+      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ==",
+      "license": "MIT",
       "engines": {
         "node": ">=12"
       }
@@ -1263,7 +1303,8 @@
     "node_modules/mkdirp-classic": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
-      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A=="
+      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
+      "license": "MIT"
     },
     "node_modules/ms": {
       "version": "2.1.2",
@@ -1662,20 +1703,22 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.0.1.tgz",
-      "integrity": "sha512-6tzWDMeroL87uF/+lin46k+Q+46rAJ0SyPGz7OW7wTgblI273hsBqk2C1j0/xNadNLKDTUL9BukSjB7cwgmlPA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
+      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
+      "license": "MIT",
       "dependencies": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
         "pump": "^3.0.0",
-        "tar-stream": "^2.0.0"
+        "tar-stream": "^2.1.4"
       }
     },
     "node_modules/tar-stream": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
       "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
+      "license": "MIT",
       "dependencies": {
         "bl": "^4.0.3",
         "end-of-stream": "^1.4.1",
@@ -1687,39 +1730,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/tar-stream/node_modules/bl": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "dependencies": {
-        "buffer": "^5.5.0",
-        "inherits": "^2.0.4",
-        "readable-stream": "^3.4.0"
-      }
-    },
-    "node_modules/tar-stream/node_modules/buffer": {
-      "version": "5.7.1",
-      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
-      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "dependencies": {
-        "base64-js": "^1.3.1",
-        "ieee754": "^1.1.13"
-      }
-    },
     "node_modules/tar/node_modules/chownr": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
@@ -2115,6 +2125,16 @@
         "tweetnacl": "^0.14.3"
       }
     },
+    "bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "requires": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
     "brace-expansion": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
@@ -2123,6 +2143,15 @@
         "balanced-match": "^1.0.0"
       }
     },
+    "buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "requires": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
     "buffer-crc32": {
       "version": "0.2.13",
       "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
@@ -2298,16 +2327,16 @@
       }
     },
     "dockerode": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.4.tgz",
-      "integrity": "sha512-6GYP/EdzEY50HaOxTVTJ2p+mB5xDHTMJhS+UoGrVyS6VC+iQRh7kZ4FRpUYq6nziby7hPqWhOrFFUFTMUZJJ5w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
+      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.0.1",
+        "tar-fs": "~2.1.2",
         "uuid": "^10.0.0"
       }
     },
@@ -2669,9 +2698,9 @@
       "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ=="
     },
     "luxon": {
-      "version": "3.5.0",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
-      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ=="
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
+      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ=="
     },
     "mimic-fn": {
       "version": "2.1.0",
@@ -2989,14 +3018,14 @@
       }
     },
     "tar-fs": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.0.1.tgz",
-      "integrity": "sha512-6tzWDMeroL87uF/+lin46k+Q+46rAJ0SyPGz7OW7wTgblI273hsBqk2C1j0/xNadNLKDTUL9BukSjB7cwgmlPA==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
+      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
       "requires": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
         "pump": "^3.0.0",
-        "tar-stream": "^2.0.0"
+        "tar-stream": "^2.1.4"
       }
     },
     "tar-stream": {
@@ -3009,27 +3038,6 @@
         "fs-constants": "^1.0.0",
         "inherits": "^2.0.3",
         "readable-stream": "^3.1.1"
-      },
-      "dependencies": {
-        "bl": {
-          "version": "4.1.0",
-          "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-          "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-          "requires": {
-            "buffer": "^5.5.0",
-            "inherits": "^2.0.4",
-            "readable-stream": "^3.4.0"
-          }
-        },
-        "buffer": {
-          "version": "5.7.1",
-          "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
-          "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-          "requires": {
-            "base64-js": "^1.3.1",
-            "ieee754": "^1.1.13"
-          }
-        }
       }
     },
     "tweetnacl": {
diff --git a/dev/diff/package.json b/dev/diff/package.json
index 875e242d3d..a5a7beb0df 100644
--- a/dev/diff/package.json
+++ b/dev/diff/package.json
@@ -3,7 +3,7 @@
   "type": "module",
   "dependencies": {
     "chalk": "^5.4.1",
-    "dockerode": "^4.0.4",
+    "dockerode": "^4.0.6",
     "enquirer": "^2.4.1",
     "extract-zip": "^2.0.1",
     "fs-extra": "^11.3.0",
@@ -11,7 +11,7 @@
     "keypress": "^0.2.1",
     "listr2": "^6.6.1",
     "lodash-es": "^4.17.21",
-    "luxon": "^3.5.0",
+    "luxon": "^3.6.1",
     "pretty-bytes": "^6.1.1",
     "tar": "^7.4.3",
     "yargs": "^17.7.2"

From ae542fb0d55cfdcba401f6b427e07f4fc2f6d8e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Apr 2025 12:19:29 -0400
Subject: [PATCH 324/707] chore(deps): bump luxon in /dev/coverage-action in
 the npm group (#8757)

Bumps the npm group in /dev/coverage-action with 1 update: [luxon](https://github.com/moment/luxon).


Updates `luxon` from 3.5.0 to 3.6.0
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/3.5.0...3.6.0)

---
updated-dependencies:
- dependency-name: luxon
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/coverage-action/package-lock.json | 15 ++++++++-------
 dev/coverage-action/package.json      |  2 +-
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/dev/coverage-action/package-lock.json b/dev/coverage-action/package-lock.json
index f23a9b66c7..33aed07072 100644
--- a/dev/coverage-action/package-lock.json
+++ b/dev/coverage-action/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "1.11.1",
         "@actions/github": "6.0.0",
         "lodash": "4.17.21",
-        "luxon": "3.5.0"
+        "luxon": "3.6.1"
       }
     },
     "node_modules/@actions/core": {
@@ -209,9 +209,10 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "node_modules/luxon": {
-      "version": "3.5.0",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
-      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ==",
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
+      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ==",
+      "license": "MIT",
       "engines": {
         "node": ">=12"
       }
@@ -413,9 +414,9 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "luxon": {
-      "version": "3.5.0",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.5.0.tgz",
-      "integrity": "sha512-rh+Zjr6DNfUYR3bPwJEnuwDdqMbxZW7LOQfUN4B54+Cl+0o5zaU9RJ6bcidfDtC1cWCZXQ+nvX8bf6bAji37QQ=="
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
+      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ=="
     },
     "once": {
       "version": "1.4.0",
diff --git a/dev/coverage-action/package.json b/dev/coverage-action/package.json
index 1d03fe3dab..9e1433f1ce 100644
--- a/dev/coverage-action/package.json
+++ b/dev/coverage-action/package.json
@@ -9,6 +9,6 @@
     "@actions/core": "1.11.1",
     "@actions/github": "6.0.0",
     "lodash": "4.17.21",
-    "luxon": "3.5.0"
+    "luxon": "3.6.1"
   }
 }

From f505ce4946c3d4fc4656084bbca3790ff39f30c8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 30 Apr 2025 12:13:34 -0300
Subject: [PATCH 325/707] chore(deps): pin django-celery-beat (#8870)

Related to https://github.com/celery/django-celery-beat/issues/875
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index b00a21ab49..eb72600fe3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ Django>4.2,<5
 django-admin-rangefilter>=0.13.2
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
-django-celery-beat>=2.3.0
+django-celery-beat>=2.3.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
 django-celery-results>=2.5.1
 django-csp>=3.7
 django-cors-headers>=3.11.0

From 5b78311256560cc0c9c4be6e6ab077ad901bc336 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 30 Apr 2025 11:27:10 -0400
Subject: [PATCH 326/707] ci: update build.yml to allow chore for semver bump

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0273fa4302..bc9680cd9d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -79,6 +79,7 @@ jobs:
         token: ${{ github.token }}
         branch: release
         skipInvalidTags: true
+        patchList: fix, bugfix, perf, refactor, test, tests, chore
 
     - name: Get Dev Version
       if: ${{ github.ref_name != 'release' }}

From 7765ff1106d10808314fc0c2175606e92f9956c1 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 1 May 2025 15:49:49 -0300
Subject: [PATCH 327/707] feat: set BEAT_CRON_STARTING_DEADLINE (#8876)

https://docs.celeryq.dev/en/main/userguide/configuration.html#beat-cron-starting-deadline
---
 ietf/settings.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/settings.py b/ietf/settings.py
index 8005aca8cc..c21120f77a 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1268,6 +1268,7 @@ def skip_unreadable_post(record):
 CELERY_BROKER_URL = 'amqp://mq/'
 CELERY_BEAT_SCHEDULER = 'django_celery_beat.schedulers:DatabaseScheduler'
 CELERY_BEAT_SYNC_EVERY = 1  # update DB after every event
+CELERY_BEAT_CRON_STARTING_DEADLINE = 1800  # seconds after a missed deadline before abandoning a cron task
 CELERY_BROKER_CONNECTION_RETRY_ON_STARTUP = True  # the default, but setting it squelches a warning
 # Use a result backend so we can chain tasks. This uses the rpc backend, see
 # https://docs.celeryq.dev/en/stable/userguide/tasks.html#rpc-result-backend-rabbitmq-qpid

From a62387d635c70765d3a446dac9d2b9f122244669 Mon Sep 17 00:00:00 2001
From: Mark Nottingham <mnot@mnot.net>
Date: Fri, 2 May 2025 04:57:17 +1000
Subject: [PATCH 328/707] Make submission text less passive (#8845)

Fixes #8807.
---
 ietf/templates/base/menu.html          | 2 +-
 ietf/templates/submit/submit_base.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 1d7bad8724..3ae0d3dc57 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -95,7 +95,7 @@
     <li>
         <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
            href="{% url "ietf.submit.views.upload_submission" %}">
-            I-D submission
+            Submit an Internet-Draft
         </a>
     </li>
     <li>
diff --git a/ietf/templates/submit/submit_base.html b/ietf/templates/submit/submit_base.html
index 0613cf5d6a..a2c7be1a3b 100644
--- a/ietf/templates/submit/submit_base.html
+++ b/ietf/templates/submit/submit_base.html
@@ -4,7 +4,7 @@
 {% block pagehead %}{{ block.super }}{% endblock %}
 {% block content %}
     {% origin %}
-    <h1>Internet-Draft submission</h1>
+    <h1>Submit an Internet-Draft</h1>
     <ul class="nav nav-tabs my-3">
         <li class="nav-item">
             <a class="nav-link {% if selected == "index" %}active{% endif %}"

From 5b77ba6b716d5da0ef8ea60de365e75952d0e1d0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 13 May 2025 12:21:01 -0300
Subject: [PATCH 329/707] chore(deps): bump to fixed django-celery-beat (#8896)

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index eb72600fe3..6f72bd784d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ Django>4.2,<5
 django-admin-rangefilter>=0.13.2
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
-django-celery-beat>=2.3.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
+django-celery-beat>=2.8.1
 django-celery-results>=2.5.1
 django-csp>=3.7
 django-cors-headers>=3.11.0

From ae67dfc550903ce58db51d5450754f75e1b798a8 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Tue, 13 May 2025 15:34:42 +0000
Subject: [PATCH 330/707] ci: update base image target version to 20250513T1521

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index bdf3cff0e4..21304781dc 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250421T1600
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250513T1521
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index bdfdb2eed1..b59f430fcb 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250421T1600
+20250513T1521

From 9d91471942409fb5e853d4a7164065dcbb24942f Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 14 May 2025 00:03:06 -0400
Subject: [PATCH 331/707] chore: add types to issue templates

---
 .github/ISSUE_TEMPLATE/new-feature.yml  | 1 +
 .github/ISSUE_TEMPLATE/report-a-bug.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/ISSUE_TEMPLATE/new-feature.yml b/.github/ISSUE_TEMPLATE/new-feature.yml
index ddf0b575e8..285081e1c8 100644
--- a/.github/ISSUE_TEMPLATE/new-feature.yml
+++ b/.github/ISSUE_TEMPLATE/new-feature.yml
@@ -1,6 +1,7 @@
 name: Suggest new feature or enhancement
 description: Propose a new idea to be implemented.
 labels: ["enhancement"]
+type: Feature
 body:
   - type: markdown
     attributes:
diff --git a/.github/ISSUE_TEMPLATE/report-a-bug.yml b/.github/ISSUE_TEMPLATE/report-a-bug.yml
index d5b725d721..47fa1185b4 100644
--- a/.github/ISSUE_TEMPLATE/report-a-bug.yml
+++ b/.github/ISSUE_TEMPLATE/report-a-bug.yml
@@ -1,6 +1,7 @@
 name: Report a Datatracker bug
 description: Something in the datatracker's behavior isn't right? File a bug report. Don't use this to report RFC errata or issues with the content of Internet-Drafts.
 labels: ["bug"]
+type: Bug
 body:
   - type: markdown
     attributes:

From 9237758228ea4df36cda37389fc0d294345f6163 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 14 May 2025 13:27:34 -0300
Subject: [PATCH 332/707] chore(deps): revert "bump to fixed
 django-celery-beat" (#8899)

This reverts commit 5b77ba6b716d5da0ef8ea60de365e75952d0e1d0. There are still reports of trouble with django-celery-beat 2.8.1.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 6f72bd784d..eb72600fe3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ Django>4.2,<5
 django-admin-rangefilter>=0.13.2
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
-django-celery-beat>=2.8.1
+django-celery-beat>=2.3.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
 django-celery-results>=2.5.1
 django-csp>=3.7
 django-cors-headers>=3.11.0

From 51f5957a40c69ad3d858429d26c2f7bc38e6b0d4 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Wed, 14 May 2025 16:40:08 +0000
Subject: [PATCH 333/707] ci: update base image target version to 20250514T1627

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 21304781dc..3ad11e4d9e 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250513T1521
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250514T1627
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index b59f430fcb..4bd4db561e 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250513T1521
+20250514T1627

From 5fd8ae6bb828222d03ccf1431faad6b151dcae2e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 14 May 2025 15:34:29 -0500
Subject: [PATCH 334/707] feat: summarize all documents in iesg processing
 (#8878)

* feat: more detailed view of all docs in iesg processing (#8838)

* feat: more detailed view of all docs in iesg processing

* fix: commit new template

* feat: cache the new page for 5m in slowpages

* fix: add endcache

* fix: load cache tag definition

* fix: exclude things not in progress

* fix: link to the newer all ad dashboard from the base dashboard

* fix: reorder ad go-ahead to before iesg eval on search result pages

* fix: add a deprecation warning to the older docs in IESG processing view
---
 ietf/doc/tests.py                             | 24 ++++++
 ietf/doc/urls.py                              |  1 +
 ietf/doc/utils_search.py                      |  2 +-
 ietf/doc/views_search.py                      | 84 +++++++++++++++++++
 ietf/templates/doc/ad_list.html               |  1 +
 ietf/templates/doc/drafts_for_iesg.html       | 20 +++++
 .../templates/doc/drafts_in_iesg_process.html |  1 +
 7 files changed, 132 insertions(+), 1 deletion(-)
 create mode 100644 ietf/templates/doc/drafts_for_iesg.html

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index d74688f3f6..1229df46c5 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -403,6 +403,30 @@ def test_docs_for_ad(self):
         self.assertContains(r, discuss_other.doc.name)
         self.assertContains(r, block_other.doc.name)
 
+    def test_docs_for_iesg(self):
+        ad1 = RoleFactory(name_id='ad',group__type_id='area',group__state_id='active').person
+        ad2 = RoleFactory(name_id='ad',group__type_id='area',group__state_id='active').person
+
+        draft = IndividualDraftFactory(ad=ad1)
+        draft.action_holders.set([PersonFactory()])
+        draft.set_state(State.objects.get(type='draft-iesg', slug='lc'))
+        rfc = IndividualRfcFactory(ad=ad2)
+        conflrev = DocumentFactory(type_id='conflrev',ad=ad1)
+        conflrev.set_state(State.objects.get(type='conflrev', slug='iesgeval'))
+        statchg = DocumentFactory(type_id='statchg',ad=ad2)
+        statchg.set_state(State.objects.get(type='statchg', slug='iesgeval'))
+        charter = CharterFactory(name='charter-ietf-ames',ad=ad1)
+        charter.set_state(State.objects.get(type='charter', slug='iesgrev'))
+
+        r = self.client.get(urlreverse('ietf.doc.views_search.docs_for_iesg'))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, draft.name)
+        self.assertContains(r, escape(draft.action_holders.first().name))
+        self.assertNotContains(r, rfc.name)
+        self.assertContains(r, conflrev.name)
+        self.assertContains(r, statchg.name)
+        self.assertContains(r, charter.name)
+
     def test_auth48_doc_for_ad(self):
         """Docs in AUTH48 state should have a decoration"""
         ad = RoleFactory(name_id='ad', group__type_id='area', group__state_id='active').person
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 6e2f03a3dc..0fa1a04b49 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -53,6 +53,7 @@
     url(r'^ad/?$', views_search.ad_workload),
     url(r'^ad/(?P<name>[^/]+)/?$', views_search.docs_for_ad),
     url(r'^ad2/(?P<name>[\w.-]+)/$', RedirectView.as_view(url='/doc/ad/%(name)s/', permanent=True)),
+    url(r'^for_iesg/?$', views_search.docs_for_iesg),
     url(r'^rfc-status-changes/?$', views_status_change.rfc_status_changes),
     url(r'^start-rfc-status-change/(?:%(name)s/)?$' % settings.URL_REGEXPS, views_status_change.start_rfc_status_change),
     url(r'^bof-requests/?$', views_bofreq.bof_requests),
diff --git a/ietf/doc/utils_search.py b/ietf/doc/utils_search.py
index 59b64ad307..cfc8a872f8 100644
--- a/ietf/doc/utils_search.py
+++ b/ietf/doc/utils_search.py
@@ -299,10 +299,10 @@ def num(i):
         "ad-eval",
         "lc-req",
         "lc",
+        "goaheadw",
         "writeupw",
         # "defer",  # probably not a useful state to show, since it's rare
         "iesg-eva",
-        "goaheadw",
         "approved",
         "ann",
     ],
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 9e9b5e88dd..3433a9ca31 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -752,6 +752,90 @@ def sort_key(doc):
     )
 
 
+def docs_for_iesg(request):
+    def sort_key(doc):
+        dt = doc_type(doc)
+        dt_key = list(AD_WORKLOAD.keys()).index(dt)
+        ds = doc_state(doc)
+        ds_key = AD_WORKLOAD[dt].index(ds) if ds in AD_WORKLOAD[dt] else 99
+        return dt_key * 100 + ds_key
+
+    results, meta = prepare_document_table(
+        request,
+        Document.objects.filter(
+            ad__in=Person.objects.filter(
+                Q(
+                    role__name__in=("pre-ad", "ad"),
+                    role__group__type="area",
+                    role__group__state="active",
+                )
+            )
+        ).exclude(
+            type_id="rfc",
+        ).exclude(
+            type_id="draft",
+            states__type="draft", 
+            states__slug__in=["repl", "rfc"],
+        ).exclude(
+            type_id="draft",
+            states__type="draft-iesg",
+            states__slug__in=["idexists", "rfcqueue"],
+        ).exclude(
+            type_id="conflrev",
+            states__type="conflrev",
+            states__slug__in=["appr-noprob-sent", "appr-reqnopub-sent", "withdraw", "dead"],
+        ).exclude(
+            type_id="statchg",
+            states__type="statchg",
+            states__slug__in=["appr-sent", "dead"],
+        ).exclude(
+            type_id="charter",
+            states__type="charter",
+            states__slug__in=["notrev", "infrev", "approved", "replaced"],
+        ),
+        max_results=1000,
+        show_ad_and_shepherd=True,
+    )
+    results.sort(key=lambda d: sort_key(d))
+
+    # filter out some results
+    results = [
+        r
+        for r in results
+        if not (
+            r.type_id == "charter"
+            and (
+                r.group.state_id == "abandon"
+                or r.get_state_slug("charter") == "replaced"
+            )
+        )
+        and not (
+            r.type_id == "draft"
+            and (
+                r.get_state_slug("draft-iesg") == "dead"
+                or r.get_state_slug("draft") == "repl"
+                or r.get_state_slug("draft") == "rfc"
+            )
+        )
+    ]
+
+    _calculate_state_name = get_state_name_calculator()
+    for d in results:
+        dt = d.type.slug
+        d.search_heading = _calculate_state_name(dt, doc_state(d))
+        if d.search_heading != "RFC":
+            d.search_heading += f" {doc_type_name(dt)}"
+
+    return render(
+        request,
+        "doc/drafts_for_iesg.html",
+        {
+            "docs": results,
+            "meta": meta,
+        },
+    )
+
+
 def drafts_in_last_call(request):
     lc_state = State.objects.get(type="draft-iesg", slug="lc").pk
     form = SearchForm({'by':'state','state': lc_state, 'rfcs':'on', 'activedrafts':'on'})
diff --git a/ietf/templates/doc/ad_list.html b/ietf/templates/doc/ad_list.html
index a73264c0f3..1d7b6e2b54 100644
--- a/ietf/templates/doc/ad_list.html
+++ b/ietf/templates/doc/ad_list.html
@@ -29,6 +29,7 @@ <h1>IESG Dashboard</h1>
         are only shown to logged-in Area Directors.
     </div>
     {% endif %}
+    <p><a href="{% url 'ietf.doc.views_search.docs_for_iesg' %}">Documents in IESG Processing</a></p>
     {% for dt in metadata %}
         <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
         <table class="table table-sm table-striped table-bordered tablesorter navskip">
diff --git a/ietf/templates/doc/drafts_for_iesg.html b/ietf/templates/doc/drafts_for_iesg.html
new file mode 100644
index 0000000000..d7a79fb714
--- /dev/null
+++ b/ietf/templates/doc/drafts_for_iesg.html
@@ -0,0 +1,20 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{% load origin static %}
+{% load cache %}
+{% load ietf_filters %}
+{% load person_filters %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
+{% endblock %}
+{% block title %}Documents for the IESG{% endblock %}
+{% block content %}
+    {% cache 300 ietf_doc_drafts_for_iesg using="slowpages" %}
+    {% origin %}
+    <h1 class="mt-4">Documents for the IESG</h1>
+    {% include "doc/search/search_results.html" with start_table=True end_table=True %}
+    {% endcache %}
+{% endblock %}
+{% block js %}
+    <script src="{% static "ietf/js/list.js" %}"></script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/drafts_in_iesg_process.html b/ietf/templates/doc/drafts_in_iesg_process.html
index f128e528a5..d9b09e984e 100644
--- a/ietf/templates/doc/drafts_in_iesg_process.html
+++ b/ietf/templates/doc/drafts_in_iesg_process.html
@@ -10,6 +10,7 @@
 {% block content %}
     {% origin %}
     <h1>{{ title }}</h1>
+    <h2><i class="bi bi-exclamation-triangle"></i>This view is deprecated, and will soon redirect to a <a href="{% url 'ietf.doc.views_search.docs_for_iesg' %}">different representation</a></h2>
     <table class="table table-sm table-striped tablesorter">
         <thead>
             <tr>

From 06de5dda67610a296c3e1a70255ce4030216834a Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 15 May 2025 13:28:41 -0500
Subject: [PATCH 335/707] fix: adjust docevent text for docs moving telechat
 dates. (#8905)

---
 ietf/doc/utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 3ddd904c75..115b28b09b 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -771,7 +771,7 @@ def update_telechat(request, doc, by, new_telechat_date, new_returning_item=None
         else:
             e.desc = "Removed from agenda for telechat"
     elif on_agenda and new_telechat_date != prev_telechat:
-        e.desc = "Telechat date has been changed to <b>%s</b> from <b>%s</b>" % (
+        e.desc = "Telechat date has been changed to <b>%s</b> (Previous date was <b>%s</b>)" % (
             new_telechat_date, prev_telechat)
     else:
         # we didn't reschedule but flipped returning item bit - let's

From 5afea6256aed9a2a8941563d23569d847229ccdc Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 27 May 2025 10:19:37 -0300
Subject: [PATCH 336/707] fix: paginate search results correctly (#8927)

* fix: paginate search results correctly

* style: magic number -> named constant
---
 ietf/person/views.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ietf/person/views.py b/ietf/person/views.py
index bb1fa79f84..a37b164311 100644
--- a/ietf/person/views.py
+++ b/ietf/person/views.py
@@ -62,8 +62,9 @@ def ajax_select2_search(request, model_name):
         page = int(request.GET.get("p", 1)) - 1
     except ValueError:
         page = 0
-
-    objs = objs.distinct()[page:page + 10]
+    PAGE_SIZE = 10
+    first_item = page * PAGE_SIZE
+    objs = objs.distinct()[first_item:first_item + PAGE_SIZE]
 
     return HttpResponse(select2_id_name_json(objs), content_type='application/json')
 

From 01170dfea1f417dedcda0787d67b5035ecfb22fa Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Thu, 12 Jun 2025 04:41:50 +1200
Subject: [PATCH 337/707] test: Add test for api.ietf_utils (#8965)

* test: Add test for api.ietf_utils

* test: Use ietf.utils.test_utils instead of django.test

* test: Add test case for request without a token

* test: Test for misconfigured endpoint

* test: Improve tests

* test: Add test for a API call without X_API_KEY header
---
 ietf/api/tests_ietf_utils.py | 86 ++++++++++++++++++++++++++++++++++++
 1 file changed, 86 insertions(+)
 create mode 100644 ietf/api/tests_ietf_utils.py

diff --git a/ietf/api/tests_ietf_utils.py b/ietf/api/tests_ietf_utils.py
new file mode 100644
index 0000000000..b8d7fea7b4
--- /dev/null
+++ b/ietf/api/tests_ietf_utils.py
@@ -0,0 +1,86 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.test import RequestFactory
+from django.test.utils import override_settings
+
+from ietf.api.ietf_utils import is_valid_token, requires_api_token
+from ietf.utils.test_utils import TestCase
+
+
+class IetfUtilsTests(TestCase):
+    @override_settings(
+        APP_API_TOKENS={
+            "ietf.api.foobar": ["valid-token"],
+            "ietf.api.misconfigured": "valid-token",  # misconfigured
+        }
+    )
+    def test_is_valid_token(self):
+        self.assertFalse(is_valid_token("ietf.fake.endpoint", "valid-token"))
+        self.assertFalse(is_valid_token("ietf.api.foobar", "invalid-token"))
+        self.assertFalse(is_valid_token("ietf.api.foobar", None))
+        self.assertTrue(is_valid_token("ietf.api.foobar", "valid-token"))
+
+        # misconfiguration
+        self.assertFalse(is_valid_token("ietf.api.misconfigured", "v"))
+        self.assertFalse(is_valid_token("ietf.api.misconfigured", None))
+        self.assertTrue(is_valid_token("ietf.api.misconfigured", "valid-token"))
+
+    @override_settings(
+        APP_API_TOKENS={
+            "ietf.api.foo": ["valid-token"],
+            "ietf.api.bar": ["another-token"],
+            "ietf.api.misconfigured": "valid-token",  # misconfigured
+        }
+    )
+    def test_requires_api_token(self):
+        @requires_api_token("ietf.api.foo")
+        def protected_function(request):
+            return f"Access granted: {request.method}"
+
+        # request with a valid token
+        request = RequestFactory().get(
+            "/some/url", headers={"X_API_KEY": "valid-token"}
+        )
+        result = protected_function(request)
+        self.assertEqual(result, "Access granted: GET")
+
+        # request with an invalid token
+        request = RequestFactory().get(
+            "/some/url", headers={"X_API_KEY": "invalid-token"}
+        )
+        result = protected_function(request)
+        self.assertEqual(result.status_code, 403)
+
+        # request without a token
+        request = RequestFactory().get("/some/url", headers={"X_API_KEY": ""})
+        result = protected_function(request)
+        self.assertEqual(result.status_code, 403)
+
+        # request without a X_API_KEY token
+        request = RequestFactory().get("/some/url")
+        result = protected_function(request)
+        self.assertEqual(result.status_code, 403)
+
+        # request with a valid token for another API endpoint
+        request = RequestFactory().get(
+            "/some/url", headers={"X_API_KEY": "another-token"}
+        )
+        result = protected_function(request)
+        self.assertEqual(result.status_code, 403)
+
+        # requests for a misconfigured endpoint
+        @requires_api_token("ietf.api.misconfigured")
+        def another_protected_function(request):
+            return f"Access granted: {request.method}"
+
+        # request with valid token
+        request = RequestFactory().get(
+            "/some/url", headers={"X_API_KEY": "valid-token"}
+        )
+        result = another_protected_function(request)
+        self.assertEqual(result, "Access granted: GET")
+
+        # request with invalid token with the correct initial character
+        request = RequestFactory().get("/some/url", headers={"X_API_KEY": "v"})
+        result = another_protected_function(request)
+        self.assertEqual(result.status_code, 403)

From 425cbe2fa35271cd39f5836d85713d84e58aedeb Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Thu, 12 Jun 2025 07:35:23 -0700
Subject: [PATCH 338/707] feat: use new meeting.Registration model (#8983)

* refactor: use new meeting.Registration model for OidcExtraScopeClaims

* refactor: use new meeting.Registration model for nomcom eligibility calculations

* refactor: use new meeting.Registration model for various meeting views

* fix: revert to on_delete=PROTECT

* refactor: update new APIs and corresponding tests

* fix: tweaks for clarity

* fix: fix assert syntax

* fix: fix minor issue with MeetingRegistrtion migration

* fix: add missing meeting.tasks.fetch_meeting_attendance_task (#8987)

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/api/tests.py                             | 205 +++++-------
 ietf/api/views.py                             | 122 +------
 ietf/ietfauth/tests.py                        |  66 ++--
 ietf/ietfauth/utils.py                        |  20 +-
 ietf/meeting/factories.py                     |  23 +-
 .../migrations/0013_correct_reg_checkedin.py  |  41 +++
 ietf/meeting/models.py                        |  30 +-
 ietf/meeting/tasks.py                         |  19 ++
 ietf/meeting/tests_models.py                  |  34 +-
 ietf/meeting/tests_tasks.py                   |  30 ++
 ietf/meeting/tests_utils.py                   | 276 ++++++++++++++-
 ietf/meeting/tests_views.py                   |  56 ++--
 ietf/meeting/utils.py                         | 314 +++++++++++++++++-
 ietf/meeting/views.py                         |  18 +-
 ietf/nomcom/tests.py                          |  47 +--
 ietf/nomcom/utils.py                          |   6 +-
 ietf/settings.py                              |   3 +
 .../find_meetingregistration_person_issues.py |  37 ---
 .../repair_meetingregistration_person.py      |  18 -
 ietf/stats/utils.py                           |  60 +---
 .../meeting/proceedings_attendees.html        |   4 +-
 21 files changed, 951 insertions(+), 478 deletions(-)
 create mode 100644 ietf/meeting/migrations/0013_correct_reg_checkedin.py
 delete mode 100644 ietf/stats/management/commands/find_meetingregistration_person_issues.py
 delete mode 100644 ietf/stats/management/commands/repair_meetingregistration_person.py

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 809b45cc2b..32f33dcc63 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -833,111 +833,91 @@ def test_api_new_meeting_registration_nomcom_volunteer(self):
     def test_api_new_meeting_registration_v2(self):
         meeting = MeetingFactory(type_id='ietf')
         person = PersonFactory()
-        regs = [
-            {
-                'affiliation': "Alguma Corporação",
-                'country_code': 'PT',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'onsite',
-                'ticket_type': 'week_pass',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            }
-        ]
-
+        reg_detail = {
+            'email': person.email().address,
+            'first_name': person.first_name(),
+            'last_name': person.last_name(),
+            'meeting': meeting.number,
+            'affiliation': "Alguma Corporação",
+            'country_code': 'PT',
+            'checkedin': False,
+            'is_nomcom_volunteer': False,
+            'cancelled': False,
+            'tickets': [{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        }
+        reg_data = {'objects': {reg_detail['email']: reg_detail}}
         url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
         #
         # Test invalid key
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "invalid-token"})
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "invalid-token"})
         self.assertEqual(r.status_code, 403)
         #
         # Test invalid data
-        bad_regs = copy.deepcopy(regs)
-        del(bad_regs[0]['email'])
-        r = self.client.post(url, data=json.dumps(bad_regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        bad_reg_data = copy.deepcopy(reg_data)
+        del bad_reg_data['objects'][reg_detail['email']]['email']
+        r = self.client.post(url, data=json.dumps(bad_reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertEqual(r.status_code, 400)
         #
         # Test valid POST
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
         #
         # Check record
-        reg = regs[0]
-        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        objects = Registration.objects.filter(email=reg_detail['email'], meeting__number=reg_detail['meeting'])
         self.assertEqual(objects.count(), 1)
         obj = objects[0]
         for key in ['affiliation', 'country_code', 'first_name', 'last_name', 'checkedin']:
-            self.assertEqual(getattr(obj, key), False if key=='checkedin' else reg.get(key) , "Bad data for field '%s'" % key)
+            self.assertEqual(getattr(obj, key), False if key == 'checkedin' else reg_detail.get(key), f"Bad data for field {key}")
         self.assertEqual(obj.tickets.count(), 1)
         ticket = obj.tickets.first()
-        self.assertEqual(ticket.ticket_type.slug, regs[0]['ticket_type'])
-        self.assertEqual(ticket.attendance_type.slug, regs[0]['reg_type'])
+        self.assertEqual(ticket.ticket_type.slug, reg_detail['tickets'][0]['ticket_type'])
+        self.assertEqual(ticket.attendance_type.slug, reg_detail['tickets'][0]['attendance_type'])
         self.assertEqual(obj.person, person)
         #
         # Test update (switch to remote)
-        regs = [
-            {
-                'affiliation': "Alguma Corporação",
-                'country_code': 'PT',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'remote',
-                'ticket_type': 'week_pass',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            }
-        ]
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        reg_detail = {
+            'affiliation': "Alguma Corporação",
+            'country_code': 'PT',
+            'email': person.email().address,
+            'first_name': person.first_name(),
+            'last_name': person.last_name(),
+            'meeting': meeting.number,
+            'checkedin': False,
+            'is_nomcom_volunteer': False,
+            'cancelled': False,
+            'tickets': [{'attendance_type': 'remote', 'ticket_type': 'week_pass'}],
+        }
+        reg_data = {'objects': {reg_detail['email']: reg_detail}}
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
-        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        objects = Registration.objects.filter(email=reg_detail['email'], meeting__number=reg_detail['meeting'])
         self.assertEqual(objects.count(), 1)
         obj = objects[0]
         self.assertEqual(obj.tickets.count(), 1)
         ticket = obj.tickets.first()
-        self.assertEqual(ticket.ticket_type.slug, regs[0]['ticket_type'])
-        self.assertEqual(ticket.attendance_type.slug, regs[0]['reg_type'])
+        self.assertEqual(ticket.ticket_type.slug, reg_detail['tickets'][0]['ticket_type'])
+        self.assertEqual(ticket.attendance_type.slug, reg_detail['tickets'][0]['attendance_type'])
         #
         # Test multiple
-        regs = [
-            {
-                'affiliation': "Alguma Corporação",
-                'country_code': 'PT',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'onsite',
-                'ticket_type': 'one_day',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            },
-
-            {
-                'affiliation': "Alguma Corporação",
-                'country_code': 'PT',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'remote',
-                'ticket_type': 'week_pass',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            }
-        ]
-
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        reg_detail = {
+            'affiliation': "Alguma Corporação",
+            'country_code': 'PT',
+            'email': person.email().address,
+            'first_name': person.first_name(),
+            'last_name': person.last_name(),
+            'meeting': meeting.number,
+            'checkedin': False,
+            'is_nomcom_volunteer': False,
+            'cancelled': False,
+            'tickets': [
+                {'attendance_type': 'onsite', 'ticket_type': 'one_day'},
+                {'attendance_type': 'remote', 'ticket_type': 'week_pass'},
+            ],
+        }
+        reg_data = {'objects': {reg_detail['email']: reg_detail}}
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
-        objects = Registration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
+        objects = Registration.objects.filter(email=reg_detail['email'], meeting__number=reg_detail['meeting'])
         self.assertEqual(objects.count(), 1)
         obj = objects[0]
         self.assertEqual(obj.tickets.count(), 2)
@@ -948,51 +928,46 @@ def test_api_new_meeting_registration_v2(self):
     def test_api_new_meeting_registration_v2_cancelled(self):
         meeting = MeetingFactory(type_id='ietf')
         person = PersonFactory()
-        regs = [
-            {
-                'affiliation': "Acme",
-                'country_code': 'US',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'onsite',
-                'ticket_type': 'week_pass',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            }
-        ]
+        reg_detail = {
+            'affiliation': "Acme",
+            'country_code': 'US',
+            'email': person.email().address,
+            'first_name': person.first_name(),
+            'last_name': person.last_name(),
+            'meeting': meeting.number,
+            'checkedin': False,
+            'is_nomcom_volunteer': False,
+            'cancelled': False,
+            'tickets': [{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        }
+        reg_data = {'objects': {reg_detail['email']: reg_detail}}
         url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
         self.assertEqual(Registration.objects.count(), 0)
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
         self.assertEqual(Registration.objects.count(), 1)
-        regs[0]['cancelled'] = True
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        reg_detail['cancelled'] = True
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
         self.assertEqual(Registration.objects.count(), 0)
 
-    @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})    
+    @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})
     def test_api_new_meeting_registration_v2_nomcom(self):
         meeting = MeetingFactory(type_id='ietf')
         person = PersonFactory()
-        regs = [
-            {
-                'affiliation': "Acme",
-                'country_code': 'US',
-                'email': person.email().address,
-                'first_name': person.first_name(),
-                'last_name': person.last_name(),
-                'meeting': str(meeting.number),
-                'reg_type': 'onsite',
-                'ticket_type': 'week_pass',
-                'checkedin': False,
-                'is_nomcom_volunteer': False,
-                'cancelled': False,
-            }
-        ]
-
+        reg_detail = {
+            'affiliation': "Acme",
+            'country_code': 'US',
+            'email': person.email().address,
+            'first_name': person.first_name(),
+            'last_name': person.last_name(),
+            'meeting': meeting.number,
+            'checkedin': False,
+            'is_nomcom_volunteer': False,
+            'cancelled': False,
+            'tickets': [{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        }
+        reg_data = {'objects': {reg_detail['email']: reg_detail}}
         url = urlreverse('ietf.api.views.api_new_meeting_registration_v2')
         now = datetime.datetime.now()
         if now.month > 10:
@@ -1003,14 +978,14 @@ def test_api_new_meeting_registration_v2_nomcom(self):
         nomcom = NomComFactory.create(is_accepting_volunteers=True, **nomcom_kwargs_for_year(year))
 
         # first test is_nomcom_volunteer False
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
         # assert no Volunteers exists
         self.assertEqual(Volunteer.objects.count(), 0)
 
         # test is_nomcom_volunteer True
-        regs[0]['is_nomcom_volunteer'] = True
-        r = self.client.post(url, data=json.dumps(regs), content_type='application/json', headers={"X-Api-Key": "valid-token"})
+        reg_detail['is_nomcom_volunteer'] = True
+        r = self.client.post(url, data=json.dumps(reg_data), content_type='application/json', headers={"X-Api-Key": "valid-token"})
         self.assertContains(r, "Success", status_code=202)
         # assert Volunteer exists
         self.assertEqual(Volunteer.objects.count(), 1)
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 97b9793048..06a386b2e3 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -45,7 +45,8 @@
 from ietf.ietfauth.utils import role_required
 from ietf.ietfauth.views import send_account_creation_email
 from ietf.ipr.utils import ingest_response_email as ipr_ingest_response_email
-from ietf.meeting.models import Meeting, Registration
+from ietf.meeting.models import Meeting
+from ietf.meeting.utils import import_registration_json_validator, process_single_registration
 from ietf.nomcom.models import Volunteer, NomCom
 from ietf.nomcom.utils import ingest_feedback_email as nomcom_ingest_feedback_email
 from ietf.person.models import Person, Email
@@ -241,31 +242,6 @@ def err(code, text):
         return HttpResponse(status=405)
 
 
-_new_registration_json_validator = jsonschema.Draft202012Validator(
-    schema={
-        "type": "array",
-        "items": {
-            "type": "object",
-            "properties": {
-                "meeting": {"type": "string"},
-                "first_name": {"type": "string"},
-                "last_name": {"type": "string"},
-                "affiliation": {"type": "string"},
-                "country_code": {"type": "string"},
-                "email": {"type": "string"},
-                "reg_type": {"type": "string"},
-                "ticket_type": {"type": "string"},
-                "checkedin": {"type": "boolean"},
-                "is_nomcom_volunteer": {"type": "boolean"},
-                "cancelled": {"type": "boolean"},
-            },
-            "required": ["meeting", "first_name", "last_name", "affiliation", "country_code", "email", "reg_type", "ticket_type", "checkedin", "is_nomcom_volunteer", "cancelled"],
-            "additionalProperties": "false"
-        }
-    }
-)
-
-
 @requires_api_token
 @csrf_exempt
 def api_new_meeting_registration_v2(request):
@@ -285,7 +261,7 @@ def _api_response(result):
     # Validate
     try:
         payload = json.loads(request.body)
-        _new_registration_json_validator.validate(payload)
+        import_registration_json_validator.validate(payload)
     except json.decoder.JSONDecodeError as err:
         return _http_err(400, f"JSON parse error at line {err.lineno} col {err.colno}: {err.msg}")
     except jsonschema.exceptions.ValidationError as err:
@@ -293,91 +269,23 @@ def _api_response(result):
     except Exception:
         return _http_err(400, "Invalid request format")
 
-    # Validate consistency
-    # - if receive multiple records they should be for same meeting, same person (email)
-    if len(payload) > 1:
-        if len(set([r['meeting'] for r in payload])) != 1:
-            return _http_err(400, "Different meeting values")
-        if len(set([r['email'] for r in payload])) != 1:
-            return _http_err(400, "Different email values")
-
-    # Validate meeting
-    number = payload[0]['meeting']
+    # Get the meeting ID from the first registration, the API only deals with one meeting at a time
+    first_email = next(iter(payload['objects']))
+    meeting_number = payload['objects'][first_email]['meeting']
     try:
-        meeting = Meeting.objects.get(number=number)
+        meeting = Meeting.objects.get(number=meeting_number)
     except Meeting.DoesNotExist:
-        return _http_err(400, "Invalid meeting value: '%s'" % (number, ))
+        return _http_err(400, f"Invalid meeting value: {meeting_number}")
 
-    # Validate email
-    email = payload[0]['email']
+    # confirm email exists
     try:
-        validate_email(email)
-    except ValidationError:
-        return _http_err(400, "Invalid email value: '%s'" % (email, ))
-
-    # get person
-    person = Person.objects.filter(email__address=email).first()
-    if not person:
-        log.log(f"api_new_meeting_registration_v2 no Person found for {email}")
-
-    registration = payload[0]
-    # handle cancelled
-    if registration['cancelled']:
-        if len(payload) > 1:
-            return _http_err(400, "Error. Received cancelled registration notification with more than one record. ({})".format(email))
-        try:
-            obj = Registration.objects.get(meeting=meeting, email=email)
-        except Registration.DoesNotExist:
-            return _http_err(400, "Error. Received cancelled registration notification for non-existing registration. ({})".format(email))
-        if obj.tickets.count() == 1:
-            obj.delete()
-        else:
-            obj.tickets.filter(
-                attendance_type__slug=registration.reg_type,
-                ticket_type__slug=registration.ticket_type).delete()
-        return HttpResponse('Success', status=202, content_type='text/plain')
+        Email.objects.get(address=first_email)
+    except Email.DoesNotExist:
+        return _http_err(400, f"Unknown email: {first_email}")
 
-    # create or update MeetingRegistration
-    update_fields = ['first_name', 'last_name', 'affiliation', 'country_code', 'checkedin', 'is_nomcom_volunteer']
-    try:
-        reg = Registration.objects.get(meeting=meeting, email=email)
-        for key, value in registration.items():
-            if key in update_fields:
-                setattr(reg, key, value)
-        reg.save()
-    except Registration.DoesNotExist:
-        reg = Registration.objects.create(
-            meeting_id=meeting.pk,
-            person=person,
-            email=email,
-            first_name=registration['first_name'],
-            last_name=registration['last_name'],
-            affiliation=registration['affiliation'],
-            country_code=registration['country_code'],
-            checkedin=registration['checkedin'])
-
-    # handle registration tickets
-    reg.tickets.all().delete()
-    for registration in payload:
-        reg.tickets.create(
-            attendance_type_id=registration['reg_type'],
-            ticket_type_id=registration['ticket_type'],
-        )
-        # handle nomcom volunteer
-        if registration['is_nomcom_volunteer'] and person:
-            try:
-                nomcom = NomCom.objects.get(is_accepting_volunteers=True)
-            except (NomCom.DoesNotExist, NomCom.MultipleObjectsReturned):
-                nomcom = None
-            if nomcom:
-                Volunteer.objects.get_or_create(
-                    nomcom=nomcom,
-                    person=person,
-                    defaults={
-                        "affiliation": registration["affiliation"],
-                        "origin": "registration"
-                    }
-                )
+    reg_data = payload['objects'][first_email]
+
+    process_single_registration(reg_data, meeting)
 
     return HttpResponse('Success', status=202, content_type='text/plain')
 
diff --git a/ietf/ietfauth/tests.py b/ietf/ietfauth/tests.py
index fed764e8bd..f6d7671bc9 100644
--- a/ietf/ietfauth/tests.py
+++ b/ietf/ietfauth/tests.py
@@ -32,14 +32,13 @@
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.group.models import Group, Role, RoleName
 from ietf.ietfauth.utils import has_role
-from ietf.meeting.factories import MeetingFactory
+from ietf.meeting.factories import MeetingFactory, RegistrationFactory, RegistrationTicketFactory
 from ietf.nomcom.factories import NomComFactory
 from ietf.person.factories import PersonFactory, EmailFactory, UserFactory, PersonalApiKeyFactory
 from ietf.person.models import Person, Email
 from ietf.person.tasks import send_apikey_usage_emails_task
 from ietf.review.factories import ReviewRequestFactory, ReviewAssignmentFactory
 from ietf.review.models import ReviewWish, UnavailablePeriod
-from ietf.stats.models import MeetingRegistration
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized
 from ietf.utils.timezone import date_today
@@ -1016,11 +1015,15 @@ def test_oidc_code_auth(self):
             EmailFactory(person=person)
             email_list = person.email_set.all().values_list('address', flat=True)
             meeting = MeetingFactory(type_id='ietf', date=date_today())
-            MeetingRegistration.objects.create(
-                    meeting=meeting, person=None, first_name=person.first_name(), last_name=person.last_name(),
-                    email=email_list[0], ticket_type='full_week', reg_type='remote', affiliation='Some Company',
-                )
-
+            reg_person = RegistrationFactory(
+                meeting=meeting,
+                person=person,
+                first_name=person.first_name(),
+                last_name=person.last_name(),
+                email=email_list[0],
+                affiliation='Some Company',
+                with_ticket={'attendance_type_id': 'remote', 'ticket_type_id': 'week_pass'},
+            )
             # Get access authorisation
             session = {}
             session["state"] = rndstr()
@@ -1073,35 +1076,48 @@ def test_oidc_code_auth(self):
             for key in ['iss', 'sub', 'aud', 'exp', 'iat', 'auth_time', 'nonce', 'at_hash']:
                 self.assertIn(key, access_token_info['id_token'])
 
-            # Get userinfo, check keys present
+            # Get userinfo, check keys present, most common scenario
             userinfo = client.do_user_info_request(state=params["state"], scope=args['scope'])
             for key in [ 'email', 'family_name', 'given_name', 'meeting', 'name', 'pronouns', 'roles',
                          'ticket_type', 'reg_type', 'affiliation', 'picture', 'dots', ]:
                 self.assertIn(key, userinfo)
                 self.assertTrue(userinfo[key])
             self.assertIn('remote', set(userinfo['reg_type'].split()))
-            self.assertNotIn('hackathon', set(userinfo['reg_type'].split()))
+            self.assertNotIn('hackathon_onsite', set(userinfo['reg_type'].split()))
             self.assertIn(active_group.acronym, [i[1] for i in userinfo['roles']])
             self.assertNotIn(closed_group.acronym, [i[1] for i in userinfo['roles']])
 
-            # Create another registration, with a different email
-            MeetingRegistration.objects.create(
-                    meeting=meeting, person=None, first_name=person.first_name(), last_name=person.last_name(),
-                    email=email_list[1], ticket_type='one_day', reg_type='hackathon', affiliation='Some Company, Inc',
-                )
+            # Create a registration, with only email, no person (rare if at all)
+            reg_person.delete()
+            reg_email = RegistrationFactory(
+                meeting=meeting,
+                person=None,
+                first_name=person.first_name(),
+                last_name=person.last_name(),
+                email=email_list[1],
+                affiliation='Some Company, Inc',
+                with_ticket={'attendance_type_id': 'hackathon_onsite', 'ticket_type_id': 'one_day'},
+            )
             userinfo = client.do_user_info_request(state=params["state"], scope=args['scope'])
-            self.assertIn('hackathon', set(userinfo['reg_type'].split()))
-            self.assertIn('remote', set(userinfo['reg_type'].split()))
-            self.assertIn('full_week', set(userinfo['ticket_type'].split()))
-            self.assertIn('Some Company', userinfo['affiliation'])
-
-            # Create a third registration, with a composite reg type
-            MeetingRegistration.objects.create(
-                    meeting=meeting, person=None, first_name=person.first_name(), last_name=person.last_name(),
-                    email=email_list[1], ticket_type='one_day', reg_type='hackathon remote', affiliation='Some Company, Inc',
-                )
+            self.assertIn('hackathon_onsite', set(userinfo['reg_type'].split()))
+            self.assertNotIn('remote', set(userinfo['reg_type'].split()))
+            self.assertIn('one_day', set(userinfo['ticket_type'].split()))
+            self.assertIn('Some Company, Inc', userinfo['affiliation'])
+
+            # Test with multiple tickets
+            reg_email.delete()
+            creg = RegistrationFactory(
+                meeting=meeting,
+                person=None,
+                first_name=person.first_name(),
+                last_name=person.last_name(),
+                email=email_list[1],
+                affiliation='Some Company, Inc',
+                with_ticket={'attendance_type_id': 'hackathon_remote', 'ticket_type_id': 'week_pass'},
+            )
+            RegistrationTicketFactory(registration=creg, attendance_type_id='remote', ticket_type_id='week_pass')
             userinfo = client.do_user_info_request(state=params["state"], scope=args['scope'])
-            self.assertEqual(set(userinfo['reg_type'].split()), set(['remote', 'hackathon']))
+            self.assertEqual(set(userinfo['reg_type'].split()), set(['remote', 'hackathon_remote']))
 
             # Check that ending a session works
             r = client.do_end_session_request(state=params["state"], scope=args['scope'])
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index b4c6da14ea..efdd6f3ea6 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -346,13 +346,14 @@ def scope_pronouns(self):
         )
 
     def scope_registration(self):
+        # import here to avoid circular imports
         from ietf.meeting.helpers import get_current_ietf_meeting
-        from ietf.stats.models import MeetingRegistration
+        from ietf.meeting.models import Registration
         meeting = get_current_ietf_meeting()
         person = self.user.person
         email_list = person.email_set.values_list('address')
         q = Q(person=person, meeting=meeting) | Q(email__in=email_list, meeting=meeting)
-        regs = MeetingRegistration.objects.filter(q).distinct()
+        regs = Registration.objects.filter(q).distinct()
         for reg in regs:
             if not reg.person_id:
                 reg.person = person
@@ -363,19 +364,20 @@ def scope_registration(self):
             ticket_types = set([])
             reg_types = set([])
             for reg in regs:
-                ticket_types.add(reg.ticket_type)
-                reg_types.add(reg.reg_type)
+                for ticket in reg.tickets.all():
+                    ticket_types.add(ticket.ticket_type.slug)
+                    reg_types.add(ticket.attendance_type.slug)
             info = {
-                'meeting':      meeting.number,
+                'meeting': meeting.number,
                 # full_week, one_day, student:
-                'ticket_type':  ' '.join(ticket_types),
+                'ticket_type': ' '.join(ticket_types),
                 # onsite, remote, hackathon_onsite, hackathon_remote:
-                'reg_type':     ' '.join(reg_types),
-                'affiliation':  ([ reg.affiliation for reg in regs if reg.affiliation ] or [''])[0],
+                'reg_type': ' '.join(reg_types),
+                'affiliation': ([reg.affiliation for reg in regs if reg.affiliation] or [''])[0],
             }
 
         return info
-            
+
 def can_request_rfc_publication(user, doc):
     """Answers whether this user has an appropriate role to send this document to the RFC Editor for publication as an RFC.
 
diff --git a/ietf/meeting/factories.py b/ietf/meeting/factories.py
index b3d21830fe..fc0ce8387c 100644
--- a/ietf/meeting/factories.py
+++ b/ietf/meeting/factories.py
@@ -321,6 +321,15 @@ class Meta:
 
 
 class RegistrationFactory(factory.django.DjangoModelFactory):
+    """
+    This will create an associated onsite week_pass ticket by default.
+    Methods of calling:
+
+    RegistrationFactory()                   create a ticket with defaults, onsite
+    RegistrationFactory(with_ticket=True)   same as above
+    RegistrationFactory(with_ticket={'attendance_type_id': 'remote'})   creates ticket with overrides
+    RegistrationFactory(with_ticket=False)  does not create a ticket
+    """
     class Meta:
         model = Registration
         skip_postgeneration_save = True
@@ -335,6 +344,16 @@ class Meta:
     attended = False
     checkedin = False
 
+    @factory.post_generation
+    def with_ticket(self, create, extracted, **kwargs):
+        if not create:
+            return
+        if extracted is False:
+            # Explicitly disable ticket creation
+            return
+        ticket_kwargs = extracted if isinstance(extracted, dict) else {}
+        RegistrationTicketFactory(registration=self, **ticket_kwargs)
+
 
 class RegistrationTicketFactory(factory.django.DjangoModelFactory):
     class Meta:
@@ -342,5 +361,5 @@ class Meta:
         skip_postgeneration_save = True
 
     registration = factory.SubFactory(RegistrationFactory)
-    attendance_type_id = 'onsite'
-    ticket_type_id = 'week_pass'
+    attendance_type_id = factory.LazyAttribute(lambda _: 'onsite')
+    ticket_type_id = factory.LazyAttribute(lambda _: 'week_pass')
diff --git a/ietf/meeting/migrations/0013_correct_reg_checkedin.py b/ietf/meeting/migrations/0013_correct_reg_checkedin.py
new file mode 100644
index 0000000000..88b3efceac
--- /dev/null
+++ b/ietf/meeting/migrations/0013_correct_reg_checkedin.py
@@ -0,0 +1,41 @@
+# Generated by Django 4.2.21 on 2025-05-20 22:28
+
+'''
+The original migration had a flaw. If a participant had both a remote and onsite
+registration, which is rare but does occur, which registration the checkedin state
+came from was indeterminate. If it came from the remote registration it would be
+False which might be wrong. This migration finds all registrations with onsite tickets
+and checkedin is False, and checks if it is correct, and fixes if needed.
+'''
+
+from django.db import migrations
+import datetime
+
+
+def forward(apps, schema_editor):
+    Registration = apps.get_model('meeting', 'Registration')
+    MeetingRegistration = apps.get_model('stats', 'MeetingRegistration')
+    today = datetime.date.today()
+    for reg in Registration.objects.filter(tickets__attendance_type__slug='onsite', checkedin=False, meeting__date__lt=today).order_by('meeting__number'):
+        # get original MeetingRegistration
+        mregs = MeetingRegistration.objects.filter(meeting=reg.meeting, email=reg.email, reg_type='onsite')
+        mregs_checkedin = [mr.checkedin for mr in mregs]
+        if any(mregs_checkedin):
+            reg.checkedin = True
+            reg.save()
+            print(f'updating {reg.meeting}:{reg.email}:{reg.pk}')
+
+
+def reverse(apps, schema_editor):
+    pass
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("meeting", "0012_registration_registrationticket"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 003f8cd76e..cc5241efa2 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -233,9 +233,9 @@ def get_proceedings_materials(self):
         ).order_by('type__order')
 
     def get_attendance(self):
-        """Get the meeting attendance from the MeetingRegistrations
+        """Get the meeting attendance from the Registrations
 
-        Returns a NamedTuple with onsite and online attributes. Returns None if the record is unavailable
+        Returns a NamedTuple with onsite and remote attributes. Returns None if the record is unavailable
         for this meeting.
         """
         number = self.get_number()
@@ -247,10 +247,10 @@ def get_attendance(self):
         # We've separated session attendance off to ietf.meeting.Attended, but need to report attendance at older
         # meetings correctly.
 
-        attended_per_meetingregistration = (
-            Q(meetingregistration__meeting=self) & (
-                Q(meetingregistration__attended=True) |
-                Q(meetingregistration__checkedin=True)
+        attended_per_meeting_registration = (
+            Q(registration__meeting=self) & (
+                Q(registration__attended=True) |
+                Q(registration__checkedin=True)
             )
         )
         attended_per_meeting_attended = (
@@ -260,11 +260,11 @@ def get_attendance(self):
             # is good enough, just attending e.g. a training session is also good enough
         )
         attended = Person.objects.filter(
-            attended_per_meetingregistration | attended_per_meeting_attended
+            attended_per_meeting_registration | attended_per_meeting_attended
         ).distinct()
 
-        onsite=set(attended.filter(meetingregistration__meeting=self, meetingregistration__reg_type='onsite'))
-        remote=set(attended.filter(meetingregistration__meeting=self, meetingregistration__reg_type='remote'))
+        onsite = set(attended.filter(registration__meeting=self, registration__tickets__attendance_type__slug='onsite'))
+        remote = set(attended.filter(registration__meeting=self, registration__tickets__attendance_type__slug='remote'))
         remote.difference_update(onsite)
 
         return Attendance(
@@ -1487,10 +1487,10 @@ def __str__(self):
 
 class RegistrationManager(models.Manager):
     def onsite(self):
-        return self.get_queryset().filter(registrationticket__attendance_type__slug='onsite')
+        return self.get_queryset().filter(tickets__attendance_type__slug='onsite')
 
     def remote(self):
-        return self.get_queryset().filter(registrationticket__attendance_type__slug='remote').exclude(registrationticket__attendance_type__slug='onsite')
+        return self.get_queryset().filter(tickets__attendance_type__slug='remote').exclude(tickets__attendance_type__slug='onsite')
 
 class Registration(models.Model):
     """Registration attendee records from the IETF registration system"""
@@ -1513,6 +1513,14 @@ class Registration(models.Model):
     def __str__(self):
         return "{} {}".format(self.first_name, self.last_name)
 
+    @property
+    def attendance_type(self):
+        if self.tickets.filter(attendance_type__slug='onsite').exists():
+            return 'onsite'
+        elif self.tickets.filter(attendance_type__slug='remote').exists():
+            return 'remote'
+        return None
+
 class RegistrationTicket(models.Model):
     registration = ForeignKey(Registration, related_name='tickets')
     attendance_type = ForeignKey(AttendanceTypeName, on_delete=models.PROTECT)
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index 20bb602682..dc3fbc99ec 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -10,6 +10,7 @@
 from .utils import generate_proceedings_content
 from .views import generate_agenda_data
 from .utils import migrate_registrations, check_migrate_registrations
+from .utils import fetch_attendance_from_meetings
 
 
 @shared_task
@@ -60,3 +61,21 @@ def proceedings_content_refresh_task(*, all=False):
         elif all or (num % 24 == now.hour):
             log.log(f"Refreshing proceedings for meeting {meeting.number}...")
             generate_proceedings_content(meeting, force_refresh=True)
+
+
+@shared_task
+def fetch_meeting_attendance_task():
+    # fetch most recent two meetings
+    meetings = Meeting.objects.filter(type="ietf", date__lte=timezone.now()).order_by("-date")[:2]
+    try:
+        stats = fetch_attendance_from_meetings(meetings)
+    except RuntimeError as err:
+        log.log(f"Error in fetch_meeting_attendance_task: {err}")
+    else:
+        for meeting, meeting_stats in zip(meetings, stats):
+            log.log(
+                "Fetched data for meeting {:>3}: {:4d} created, {:4d} updated, {:4d} deleted, {:4d} processed".format(
+                    meeting.number, meeting_stats['created'], meeting_stats['updated'], meeting_stats['deleted'],
+                    meeting_stats['processed']
+                )
+            )
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index 03b706e1d7..e333ddad9a 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -11,8 +11,8 @@
 import ietf.meeting.models
 from ietf.group.factories import GroupFactory, GroupHistoryFactory
 from ietf.meeting.factories import MeetingFactory, SessionFactory, AttendedFactory, SessionPresentationFactory
+from ietf.meeting.factories import RegistrationFactory
 from ietf.meeting.models import Session
-from ietf.stats.factories import MeetingRegistrationFactory
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today, datetime_today
 
@@ -21,9 +21,9 @@ class MeetingTests(TestCase):
     def test_get_attendance_pre110(self):
         """Pre-110 meetings do not calculate attendance"""
         meeting = MeetingFactory(type_id='ietf', number='109')
-        MeetingRegistrationFactory.create_batch(3, meeting=meeting, reg_type='')
-        MeetingRegistrationFactory.create_batch(4, meeting=meeting, reg_type='remote')
-        MeetingRegistrationFactory.create_batch(5, meeting=meeting, reg_type='in_person')
+        RegistrationFactory.create_batch(3, meeting=meeting, with_ticket={'attendance_type_id': 'unknown'})
+        RegistrationFactory.create_batch(4, meeting=meeting, with_ticket={'attendance_type_id': 'remote'})
+        RegistrationFactory.create_batch(5, meeting=meeting, with_ticket={'attendance_type_id': 'onsite'})
         self.assertIsNone(meeting.get_attendance())
 
     def test_get_attendance_110(self):
@@ -31,31 +31,31 @@ def test_get_attendance_110(self):
         meeting = MeetingFactory(type_id='ietf', number='110')
 
         # start with attendees that should be ignored
-        MeetingRegistrationFactory.create_batch(3, meeting=meeting, reg_type='', attended=True)
-        MeetingRegistrationFactory(meeting=meeting, reg_type='', attended=False)
+        RegistrationFactory.create_batch(3, meeting=meeting, with_ticket={'attendance_type_id': 'unknown'}, attended=True)
+        RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'unknown'}, attended=False)
         attendance = meeting.get_attendance()
         self.assertIsNotNone(attendance)
         self.assertEqual(attendance.remote, 0)
         self.assertEqual(attendance.onsite, 0)
 
         # add online attendees with at least one who registered but did not attend
-        MeetingRegistrationFactory.create_batch(4, meeting=meeting, reg_type='remote', attended=True)
-        MeetingRegistrationFactory(meeting=meeting, reg_type='remote', attended=False)
+        RegistrationFactory.create_batch(4, meeting=meeting, with_ticket={'attendance_type_id': 'remote'}, attended=True)
+        RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'remote'}, attended=False)
         attendance = meeting.get_attendance()
         self.assertIsNotNone(attendance)
         self.assertEqual(attendance.remote, 4)
         self.assertEqual(attendance.onsite, 0)
 
         # and the same for onsite attendees
-        MeetingRegistrationFactory.create_batch(5, meeting=meeting, reg_type='onsite', attended=True)
-        MeetingRegistrationFactory(meeting=meeting, reg_type='in_person', attended=False)
+        RegistrationFactory.create_batch(5, meeting=meeting, with_ticket={'attendance_type_id': 'onsite'}, attended=True)
+        RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'onsite'}, attended=False)
         attendance = meeting.get_attendance()
         self.assertIsNotNone(attendance)
         self.assertEqual(attendance.remote, 4)
         self.assertEqual(attendance.onsite, 5)
 
         # and once more after removing all the online attendees
-        meeting.meetingregistration_set.filter(reg_type='remote').delete()
+        meeting.registration_set.remote().delete()
         attendance = meeting.get_attendance()
         self.assertIsNotNone(attendance)
         self.assertEqual(attendance.remote, 0)
@@ -64,11 +64,11 @@ def test_get_attendance_110(self):
     def test_get_attendance_113(self):
         """Simulate IETF 113 attendance gathering data"""
         meeting = MeetingFactory(type_id='ietf', number='113')
-        MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', attended=True, checkedin=False)
-        MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', attended=False, checkedin=True)
-        p1 = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', attended=False, checkedin=False).person
+        RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'onsite'}, attended=True, checkedin=False)
+        RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'onsite'}, attended=False, checkedin=True)
+        p1 = RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'onsite'}, attended=False, checkedin=False).person
         AttendedFactory(session__meeting=meeting, person=p1)
-        p2 = MeetingRegistrationFactory(meeting=meeting, reg_type='remote', attended=False, checkedin=False).person
+        p2 = RegistrationFactory(meeting=meeting, with_ticket={'attendance_type_id': 'remote'}, attended=False, checkedin=False).person
         AttendedFactory(session__meeting=meeting, person=p2)
         attendance = meeting.get_attendance()
         self.assertEqual(attendance.onsite, 3)
@@ -82,9 +82,9 @@ def test_get_attendance_keeps_meetings_distinct(self):
 
         # Create a person who attended a remote session for first_mtg and onsite for second_mtg without
         # checking in for either.
-        p = MeetingRegistrationFactory(meeting=second_mtg, reg_type='onsite', attended=False, checkedin=False).person
+        p = RegistrationFactory(meeting=second_mtg, with_ticket={'attendance_type_id': 'onsite'}, attended=False, checkedin=False).person
         AttendedFactory(session__meeting=first_mtg, person=p)
-        MeetingRegistrationFactory(meeting=first_mtg, person=p, reg_type='remote', attended=False, checkedin=False)
+        RegistrationFactory(meeting=first_mtg, person=p, with_ticket={'attendance_type_id': 'remote'}, attended=False, checkedin=False)
         AttendedFactory(session__meeting=second_mtg, person=p)
 
         att = first_mtg.get_attendance()
diff --git a/ietf/meeting/tests_tasks.py b/ietf/meeting/tests_tasks.py
index c026a99835..66de212899 100644
--- a/ietf/meeting/tests_tasks.py
+++ b/ietf/meeting/tests_tasks.py
@@ -3,8 +3,10 @@
 import datetime
 from mock import patch, call
 from ietf.utils.test_utils import TestCase
+from ietf.utils.timezone import date_today
 from .factories import MeetingFactory
 from .tasks import proceedings_content_refresh_task, agenda_data_refresh
+from .tasks import fetch_meeting_attendance_task
 
 
 class TaskTests(TestCase):
@@ -49,3 +51,31 @@ def test_proceedings_content_refresh_task(self, mock_generate):
         with patch("ietf.meeting.tasks.timezone.now", return_value=hour_01_utc):
             proceedings_content_refresh_task(all=True)
         self.assertEqual(mock_generate.call_count, 2)
+
+    @patch("ietf.meeting.tasks.fetch_attendance_from_meetings")
+    def test_fetch_meeting_attendance_task(self, mock_fetch_attendance):
+        today = date_today()
+        meetings = [
+            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=1)),
+            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=2)),
+            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=3)),
+        ]
+        data = {
+            'created': 1,
+            'updated': 2,
+            'deleted': 0,
+            'processed': 3,
+        }
+
+        mock_fetch_attendance.return_value = [data, data]
+
+        fetch_meeting_attendance_task()
+        self.assertEqual(mock_fetch_attendance.call_count, 1)
+        self.assertCountEqual(mock_fetch_attendance.call_args[0][0], meetings[0:2])
+
+        # test handling of RuntimeError
+        mock_fetch_attendance.reset_mock()
+        mock_fetch_attendance.side_effect = RuntimeError
+        fetch_meeting_attendance_task()
+        self.assertTrue(mock_fetch_attendance.called)
+        # Good enough that we got here without raising an exception
diff --git a/ietf/meeting/tests_utils.py b/ietf/meeting/tests_utils.py
index 4bda3a65fa..8d912158ce 100644
--- a/ietf/meeting/tests_utils.py
+++ b/ietf/meeting/tests_utils.py
@@ -1,11 +1,22 @@
 # Copyright The IETF Trust 2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
+import copy
 import datetime
 import debug  # pyflakes: ignore
-from ietf.meeting.factories import MeetingFactory # RegistrationFactory, RegistrationTicketFactory
+import json
+import jsonschema
+from json import JSONDecodeError
+from mock import patch, Mock
+
+from django.http import HttpResponse, JsonResponse
+from ietf.meeting.factories import MeetingFactory, RegistrationFactory, RegistrationTicketFactory
 from ietf.meeting.models import Registration
-from ietf.meeting.utils import migrate_registrations, get_preferred
+from ietf.meeting.utils import (migrate_registrations, get_preferred, process_single_registration,
+    get_registration_data, sync_registration_data, fetch_attendance_from_meetings)
+from ietf.nomcom.models import Volunteer
+from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
+from ietf.person.factories import PersonFactory
 from ietf.stats.factories import MeetingRegistrationFactory
 from ietf.utils.test_utils import TestCase
 
@@ -72,7 +83,7 @@ def test_additional_ticket(self):
         migrate_registrations(initial=True)
         # new.refresh_from_db()
         self.assertEqual(new.tickets.count(), 2)
-        
+
     def test_cancelled_registration(self):
         # setup test initial conditions
         meeting = MeetingFactory(type_id='ietf', number='109')
@@ -82,10 +93,265 @@ def test_cancelled_registration(self):
         # do test
         migrate_registrations(initial=True)
         self.assertEqual(Registration.objects.count(), 0)
-    
+
     def test_get_preferred(self):
         meeting = MeetingFactory(type_id='ietf', number='109')
         onsite = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
+        remote = MeetingRegistrationFactory(meeting=meeting, reg_type='remote', ticket_type='week_pass')
         hackathon = MeetingRegistrationFactory(meeting=meeting, reg_type='hackathon_onsite', ticket_type='week_pass')
-        result = get_preferred([onsite, hackathon])
+        result = get_preferred([remote, onsite, hackathon])
         self.assertEqual(result, onsite)
+        result = get_preferred([hackathon, remote])
+        self.assertEqual(result, remote)
+        result = get_preferred([hackathon])
+        self.assertEqual(result, hackathon)
+
+
+class JsonResponseWithJson(JsonResponse):
+    def json(self):
+        return json.loads(self.content)
+
+
+class GetRegistrationsTests(TestCase):
+
+    @patch('ietf.meeting.utils.requests.get')
+    def test_get_registation_data(self, mock_get):
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        person = PersonFactory()
+        reg_details = dict(
+            first_name=person.first_name(),
+            last_name=person.last_name(),
+            email=person.email().address,
+            affiliation='Microsoft',
+            country_code='US',
+            meeting=meeting.number,
+            checkedin=True,
+            is_nomcom_volunteer=False,
+            cancelled=False,
+            tickets=[{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        )
+        reg_data = {'objects': {person.email().address: reg_details}}
+        reg_data_bad = copy.deepcopy(reg_data)
+        del reg_data_bad['objects'][person.email().address]['email']
+        response1 = HttpResponse('Invalid apikey', status=403)
+        response2 = JsonResponseWithJson(reg_data)
+        response3 = Mock()
+        response3.status_code = 200
+        response3.json.side_effect = JSONDecodeError("Expecting value", doc="", pos=0)
+        response4 = JsonResponseWithJson(reg_data_bad)
+        mock_get.side_effect = [response1, response2, response3, response4]
+        # test status 403
+        with self.assertRaises(Exception):
+            get_registration_data(meeting)
+        # test status 200 good
+        returned_data = get_registration_data(meeting)
+        self.assertEqual(returned_data, reg_data)
+        # test decode error
+        with self.assertRaises(ValueError):
+            get_registration_data(meeting)
+        # test validation error
+        with self.assertRaises(jsonschema.exceptions.ValidationError):
+            get_registration_data(meeting)
+
+    @patch('ietf.meeting.utils.get_registration_data')
+    def test_sync_registation_data(self, mock_get):
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        person1 = PersonFactory()
+        person2 = PersonFactory()
+        items = []
+        for person in [person1, person2]:
+            items.append(dict(
+                first_name=person.first_name(),
+                last_name=person.last_name(),
+                email=person.email().address,
+                affiliation='Microsoft',
+                country_code='US',
+                meeting=meeting.number,
+                checkedin=True,
+                is_nomcom_volunteer=False,
+                cancelled=False,
+                tickets=[{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+            ))
+        reg_data = {'objects': {items[0]['email']: items[0], items[1]['email']: items[1]}}
+        mock_get.return_value = reg_data
+        self.assertEqual(Registration.objects.filter(meeting=meeting).count(), 0)
+        stats = sync_registration_data(meeting)
+        self.assertEqual(Registration.objects.filter(meeting=meeting).count(), 2)
+        self.assertEqual(stats['created'], 2)
+        # test idempotent
+        stats = sync_registration_data(meeting)
+        self.assertEqual(Registration.objects.filter(meeting=meeting).count(), 2)
+        self.assertEqual(stats['created'], 0)
+        # test delete cancelled registration
+        del reg_data['objects'][items[1]['email']]
+        stats = sync_registration_data(meeting)
+        self.assertEqual(Registration.objects.filter(meeting=meeting).count(), 1)
+        self.assertEqual(stats['deleted'], 1)
+
+    def test_process_single_registration(self):
+        # test new registration
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        person = PersonFactory()
+        reg_data = dict(
+            first_name=person.first_name(),
+            last_name=person.last_name(),
+            email=person.email().address,
+            affiliation='Microsoft',
+            country_code='US',
+            meeting=meeting.number,
+            checkedin=True,
+            is_nomcom_volunteer=False,
+            cancelled=False,
+            tickets=[{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        )
+        self.assertEqual(meeting.registration_set.count(), 0)
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, 'created')
+        self.assertEqual(reg.first_name, person.first_name())
+        self.assertEqual(reg.last_name, person.last_name())
+        self.assertEqual(reg.email, person.email().address)
+        self.assertEqual(reg.affiliation, 'Microsoft')
+        self.assertEqual(reg.meeting, meeting)
+        self.assertEqual(reg.checkedin, True)
+        self.assertEqual(reg.tickets.count(), 1)
+        ticket = reg.tickets.first()
+        self.assertEqual(ticket.attendance_type.slug, 'onsite')
+        self.assertEqual(ticket.ticket_type.slug, 'week_pass')
+
+        # test no change
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, None)
+
+        # test update fields
+        reg_data['affiliation'] = 'Cisco'
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, 'updated')
+        self.assertEqual(reg.affiliation, 'Cisco')
+
+        # test update tickets
+        reg_data['tickets'] = [{'attendance_type': 'remote', 'ticket_type': 'week_pass'}]
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, 'updated')
+        self.assertEqual(reg.tickets.count(), 1)
+        ticket = reg.tickets.first()
+        self.assertEqual(ticket.attendance_type.slug, 'remote')
+
+        # test tickets, two of same
+        reg_data['tickets'] = [
+            {'attendance_type': 'onsite', 'ticket_type': 'one_day'},
+            {'attendance_type': 'onsite', 'ticket_type': 'one_day'},
+            {'attendance_type': 'remote', 'ticket_type': 'week_pass'},
+        ]
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, 'updated')
+        self.assertEqual(reg.tickets.count(), 3)
+        self.assertEqual(reg.tickets.filter(attendance_type__slug='onsite', ticket_type__slug='one_day').count(), 2)
+        self.assertEqual(reg.tickets.filter(attendance_type__slug='remote', ticket_type__slug='week_pass').count(), 1)
+
+        # test tickets, two of same, delete one
+        reg_data['tickets'] = [
+            {'attendance_type': 'onsite', 'ticket_type': 'one_day'},
+            {'attendance_type': 'remote', 'ticket_type': 'week_pass'},
+        ]
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(meeting.registration_set.count(), 1)
+        reg = meeting.registration_set.first()
+        self.assertEqual(new_reg, reg)
+        self.assertEqual(action, 'updated')
+        self.assertEqual(reg.tickets.count(), 2)
+        self.assertEqual(reg.tickets.filter(attendance_type__slug='onsite', ticket_type__slug='one_day').count(), 1)
+        self.assertEqual(reg.tickets.filter(attendance_type__slug='remote', ticket_type__slug='week_pass').count(), 1)
+
+    def test_process_single_registration_nomcom(self):
+        '''Test that Volunteer is created if is_nomcom_volunteer=True'''
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        person = PersonFactory()
+        reg_data = dict(
+            first_name=person.first_name(),
+            last_name=person.last_name(),
+            email=person.email().address,
+            affiliation='Microsoft',
+            country_code='US',
+            meeting=meeting.number,
+            checkedin=True,
+            is_nomcom_volunteer=True,
+            cancelled=False,
+            tickets=[{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        )
+        now = datetime.datetime.now()
+        if now.month > 10:
+            year = now.year + 1
+        else:
+            year = now.year
+        # create appropriate group and nomcom objects
+        nomcom = NomComFactory.create(is_accepting_volunteers=True, **nomcom_kwargs_for_year(year))
+        # assert no Volunteers exists
+        self.assertEqual(Volunteer.objects.count(), 0)
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual(action, 'created')
+        # assert Volunteer exists
+        self.assertEqual(Volunteer.objects.count(), 1)
+        volunteer = Volunteer.objects.last()
+        self.assertEqual(volunteer.person, person)
+        self.assertEqual(volunteer.nomcom, nomcom)
+        self.assertEqual(volunteer.origin, 'registration')
+
+    def test_process_single_registration_cancelled(self):
+        # test cancelled registration, one of two tickets
+        meeting = MeetingFactory(type_id='ietf', number='122')
+        person = PersonFactory()
+        reg = RegistrationFactory(meeting=meeting, person=person, checkedin=False, with_ticket={'attendance_type_id': 'onsite'})
+        RegistrationTicketFactory(registration=reg, attendance_type_id='remote', ticket_type_id='week_pass')
+        reg_data = dict(
+            first_name=person.first_name(),
+            last_name=person.last_name(),
+            email=person.email().address,
+            affiliation='Microsoft',
+            country_code='US',
+            meeting=meeting.number,
+            checkedin=False,
+            is_nomcom_volunteer=False,
+            cancelled=True,
+            tickets=[{'attendance_type': 'onsite', 'ticket_type': 'week_pass'}],
+        )
+        self.assertEqual(meeting.registration_set.count(), 1)
+        self.assertEqual(reg.tickets.count(), 2)
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual((new_reg, action), (None, 'deleted'))
+        self.assertEqual(meeting.registration_set.count(), 1)
+        self.assertEqual(reg.tickets.count(), 1)
+        self.assertTrue(reg.tickets.filter(attendance_type__slug='remote').exists())
+        # test cancelled registration, last ticket
+        reg_data['tickets'][0]['attendance_type'] = 'remote'
+        new_reg, action = process_single_registration(reg_data, meeting)
+        self.assertEqual((new_reg, action), (None, 'deleted'))
+        self.assertEqual(meeting.registration_set.count(), 0)
+
+    @patch("ietf.meeting.utils.sync_registration_data")
+    def test_fetch_attendance_from_meetings(self, mock_sync_reg_data):
+        mock_meetings = [object(), object(), object()]
+        d1 = dict(created=1, updated=2, deleted=0, processed=3)
+        d2 = dict(created=2, updated=2, deleted=0, processed=4)
+        d3 = dict(created=1, updated=4, deleted=1, processed=5)
+        mock_sync_reg_data.side_effect = (d1, d2, d3)
+        stats = fetch_attendance_from_meetings(mock_meetings)
+        self.assertEqual(
+            [mock_sync_reg_data.call_args_list[n][0][0] for n in range(3)],
+            mock_meetings,
+        )
+        self.assertEqual(stats, [d1, d2, d3])
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 889a1bc882..1aac2a6523 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -66,8 +66,7 @@
     SessionPresentationFactory, MeetingFactory, FloorPlanFactory,
     TimeSlotFactory, SlideSubmissionFactory, RoomFactory,
     ConstraintFactory, MeetingHostFactory, ProceedingsMaterialFactory,
-    AttendedFactory)
-from ietf.stats.factories import MeetingRegistrationFactory
+    AttendedFactory, RegistrationFactory)
 from ietf.doc.factories import DocumentFactory, WgDraftFactory
 from ietf.submit.tests import submission_file
 from ietf.utils.test_utils import assert_ical_response_is_valid
@@ -8852,25 +8851,24 @@ def test_proceedings_attendees(self):
            - prefer onsite checkedin=True to remote attended when same person has both
         """
 
-        meeting = MeetingFactory(type_id='ietf', date=datetime.date(2023, 11, 4), number="118")
+        m = MeetingFactory(type_id='ietf', date=datetime.date(2023, 11, 4), number="118")
         person_a = PersonFactory(name='Person A')
         person_b = PersonFactory(name='Person B')
         person_c = PersonFactory(name='Person C')
         person_d = PersonFactory(name='Person D')
-        MeetingRegistrationFactory(meeting=meeting, person=person_a, reg_type='onsite', checkedin=True)
-        MeetingRegistrationFactory(meeting=meeting, person=person_b, reg_type='onsite', checkedin=False)
-        MeetingRegistrationFactory(meeting=meeting, person=person_a, reg_type='remote')
-        AttendedFactory(session__meeting=meeting, session__type_id='plenary', person=person_a)
-        MeetingRegistrationFactory(meeting=meeting, person=person_c, reg_type='remote')
-        AttendedFactory(session__meeting=meeting, session__type_id='plenary', person=person_c)
-        MeetingRegistrationFactory(meeting=meeting, person=person_d, reg_type='remote')
+        areg = RegistrationFactory(meeting=m, person=person_a, checkedin=True, with_ticket={'attendance_type_id': 'onsite'})
+        RegistrationFactory(meeting=m, person=person_b, checkedin=False, with_ticket={'attendance_type_id': 'onsite'})
+        creg = RegistrationFactory(meeting=m, person=person_c, with_ticket={'attendance_type_id': 'remote'})
+        RegistrationFactory(meeting=m, person=person_d, with_ticket={'attendance_type_id': 'remote'})
+        AttendedFactory(session__meeting=m, session__type_id='plenary', person=person_a)
+        AttendedFactory(session__meeting=m, session__type_id='plenary', person=person_c)
         url = urlreverse('ietf.meeting.views.proceedings_attendees',kwargs={'num': 118})
         response = self.client.get(url)
         self.assertContains(response, 'Attendee list')
         q = PyQuery(response.content)
         self.assertEqual(2, len(q("#id_attendees tbody tr")))
         text = q('#id_attendees tbody tr').text().replace('\n', ' ')
-        self.assertEqual(text, "A Person onsite C Person remote")
+        self.assertEqual(text, f"A Person {areg.affiliation} {areg.country_code} onsite C Person {creg.affiliation} {creg.country_code} remote")
 
     def test_proceedings_overview(self):
         '''Test proceedings IETF Overview page.
@@ -9271,27 +9269,25 @@ def test_get_next_sequence(self):
         self.assertEqual(sequence,1)
 
     def test_participants_for_meeting(self):
-        person_a = PersonFactory()
-        person_b = PersonFactory()
-        person_c = PersonFactory()
-        person_d = PersonFactory()
         m = MeetingFactory.create(type_id='ietf')
-        MeetingRegistrationFactory(meeting=m, person=person_a, reg_type='onsite', checkedin=True)
-        MeetingRegistrationFactory(meeting=m, person=person_b, reg_type='onsite', checkedin=False)
-        MeetingRegistrationFactory(meeting=m, person=person_c, reg_type='remote')
-        MeetingRegistrationFactory(meeting=m, person=person_d, reg_type='remote')
-        AttendedFactory(session__meeting=m, session__type_id='plenary', person=person_c)
+        areg = RegistrationFactory(meeting=m, checkedin=True, with_ticket={'attendance_type_id': 'onsite'})
+        breg = RegistrationFactory(meeting=m, checkedin=False, with_ticket={'attendance_type_id': 'onsite'})
+        creg = RegistrationFactory(meeting=m, with_ticket={'attendance_type_id': 'remote'})
+        dreg = RegistrationFactory(meeting=m, with_ticket={'attendance_type_id': 'remote'})
+        AttendedFactory(session__meeting=m, session__type_id='plenary', person=creg.person)
         checked_in, attended = participants_for_meeting(m)
-        self.assertTrue(person_a.pk in checked_in)
-        self.assertTrue(person_b.pk not in checked_in)
-        self.assertTrue(person_c.pk in attended)
-        self.assertTrue(person_d.pk not in attended)
+        self.assertIn(areg.person.pk, checked_in)
+        self.assertNotIn(breg.person.pk, checked_in)
+        self.assertNotIn(areg.person.pk, attended)
+        self.assertNotIn(breg.person.pk, attended)
+        self.assertIn(creg.person.pk, attended)
+        self.assertNotIn(dreg.person.pk, attended)
 
     def test_session_attendance(self):
         meeting = MeetingFactory(type_id='ietf', date=datetime.date(2023, 11, 4), number='118')
         make_meeting_test_data(meeting=meeting)
         session = Session.objects.filter(meeting=meeting, group__acronym='mars').first()
-        regs = MeetingRegistrationFactory.create_batch(3, meeting=meeting)
+        regs = RegistrationFactory.create_batch(3, meeting=meeting)
         persons = [reg.person for reg in regs]
         self.assertEqual(session.attended_set.count(), 0)
 
@@ -9337,7 +9333,7 @@ def _test_button(person, expected):
         # person0 is already on the bluesheet
         _test_button(persons[0], False)
         # person3 attests he was there
-        persons.append(MeetingRegistrationFactory(meeting=meeting).person)
+        persons.append(RegistrationFactory(meeting=meeting).person)
         # button isn't shown if we're outside the corrections windows
         meeting.importantdate_set.create(name_id='revsub',date=date_today() - datetime.timedelta(days=20))
         _test_button(persons[3], False)
@@ -9395,12 +9391,12 @@ def _test_button(person, expected):
 
     def test_bluesheet_data(self):
         session = SessionFactory(meeting__type_id="ietf") 
-        attended_with_affil = MeetingRegistrationFactory(meeting=session.meeting, affiliation="Somewhere")
+        attended_with_affil = RegistrationFactory(meeting=session.meeting, affiliation="Somewhere")
         AttendedFactory(session=session, person=attended_with_affil.person, time="2023-03-13T01:24:00Z")  # joined 2nd
-        attended_no_affil = MeetingRegistrationFactory(meeting=session.meeting)
+        attended_no_affil = RegistrationFactory(meeting=session.meeting, affiliation="")
         AttendedFactory(session=session, person=attended_no_affil.person, time="2023-03-13T01:23:00Z")  # joined 1st
-        MeetingRegistrationFactory(meeting=session.meeting)  # did not attend
-        
+        RegistrationFactory(meeting=session.meeting)  # did not attend
+
         data = bluesheet_data(session)
         self.assertEqual(
             data,
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index af12b6a274..db67f79b93 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -2,7 +2,9 @@
 # -*- coding: utf-8 -*-
 import datetime
 import itertools
+import jsonschema
 import os
+import requests
 from hashlib import sha384
 
 import pytz
@@ -15,6 +17,7 @@
 from django.contrib import messages
 from django.core.cache import caches
 from django.core.files.base import ContentFile
+from django.db import IntegrityError
 from django.db.models import OuterRef, Subquery, TextField, Q, Value, Max
 from django.db.models.functions import Coalesce
 from django.template.loader import render_to_string
@@ -27,7 +30,7 @@
 from ietf.doc.storage_utils import store_bytes, store_str
 from ietf.meeting.models import (Session, SchedulingEvent, TimeSlot,
     Constraint, SchedTimeSessAssignment, SessionPresentation, Attended,
-    Registration, Meeting)
+    Registration, Meeting, RegistrationTicket)
 from ietf.doc.models import Document, State, NewRevisionDocEvent, StateDocEvent
 from ietf.doc.models import DocEvent
 from ietf.group.models import Group
@@ -160,7 +163,7 @@ def bluesheet_data(session):
         .annotate(
             affiliation=Coalesce(
                 Subquery(
-                    MeetingRegistration.objects.filter(
+                    Registration.objects.filter(
                         Q(meeting=session.meeting),
                         Q(person=OuterRef("person")) | Q(email=OuterRef("person__email")),
                     ).values("affiliation")[:1]
@@ -1008,20 +1011,25 @@ def participants_for_meeting(meeting):
         checked_in = queryset of onsite, checkedin participants values_list('person')
         attended = queryset of remote participants who attended a session values_list('person')
     """
-    checked_in = meeting.meetingregistration_set.filter(reg_type='onsite', checkedin=True).values_list('person', flat=True).distinct()
+    checked_in = meeting.registration_set.onsite().filter(checkedin=True).values_list('person', flat=True).distinct()
     sessions = meeting.session_set.filter(Q(type='plenary') | Q(group__type__in=['wg', 'rg']))
     attended = Attended.objects.filter(session__in=sessions).values_list('person', flat=True).distinct()
     return (checked_in, attended)
 
 
 def get_preferred(regs):
-    """ Return a preferred regular registration (non hackathon) from 
-        a list of registrations if there is one, otherwise any.
+    """ If there are multiple registrations return preferred in
+        this order: onsite, remote, any (ie hackathon_onsite)
     """
-    for reg in regs:
-        if reg.reg_type in ['onsite', 'remote']:
-            return reg
-    return reg
+    if len(regs) == 1:
+        return regs[0]
+    reg_types = [r.reg_type for r in regs]
+    if 'onsite' in reg_types:
+        return regs[reg_types.index('onsite')]
+    elif 'remote' in reg_types:
+        return regs[reg_types.index('remote')]
+    else:
+        return regs[0]
 
 
 def migrate_registrations(initial=False):
@@ -1287,3 +1295,291 @@ def _format_materials(items):
             else:
                 not_meeting_groups.append(entry)
     return meeting_groups, not_meeting_groups
+
+
+import_registration_json_validator = jsonschema.Draft202012Validator(
+    schema={
+        "type": "object",
+        "properties": {
+            "objects": {
+                "type": "object",
+                "patternProperties": {
+                    # Email address as key (simplified pattern or just allow any key)
+                    ".*": {
+                        "type": "object",
+                        "properties": {
+                            "first_name": {"type": "string"},
+                            "last_name": {"type": "string"},
+                            "email": {"type": "string", "format": "email"},
+                            "affiliation": {"type": "string"},
+                            "country_code": {"type": "string", "minLength": 2, "maxLength": 2},
+                            "meeting": {"type": "string"},
+                            "checkedin": {"type": "boolean"},
+                            "cancelled": {"type": "boolean"},
+                            "is_nomcom_volunteer": {"type": "boolean"},
+                            "tickets": {
+                                "type": "array",
+                                "items": {
+                                    "type": "object",
+                                    "properties": {
+                                        "attendance_type": {"type": "string"},
+                                        "ticket_type": {"type": "string"}
+                                    },
+                                    "required": ["attendance_type", "ticket_type"]
+                                }
+                            }
+                        },
+                        "required": [
+                            "first_name", "last_name", "email",
+                            "country_code", "meeting", 'affiliation',
+                            "checkedin", "is_nomcom_volunteer", "tickets",
+                            "cancelled",
+                        ]
+                    }
+                },
+                "additionalProperties": False
+            }
+        },
+        "required": ["objects"]
+    }
+)
+
+
+def get_registration_data(meeting):
+    '''Retrieve data from registation system for meeting'''
+    url = settings.REGISTRATION_PARTICIPANTS_API_URL
+    key = settings.REGISTRATION_PARTICIPANTS_API_KEY
+    params = {'meeting': meeting.number, 'apikey': key}
+    try:
+        response = requests.get(url, params=params, timeout=settings.DEFAULT_REQUESTS_TIMEOUT)
+    except requests.Timeout as e:
+        log(f'GET request timed out for [{url}]: {e}')
+        raise Exception("Timeout retrieving data from registration API") from e
+    if response.status_code == 200:
+        try:
+            decoded = response.json()
+        except ValueError as e:
+            raise ValueError(f'Could not decode response from registration API: {e}')
+    else:
+        raise Exception(f'Bad response from registration API: {response.status_code}, {response.content[:64]}')
+
+    # validate registration data
+    import_registration_json_validator.validate(decoded)
+    return decoded
+
+
+def sync_registration_data(meeting):
+    """"Sync meeting.Registration with registration system.
+
+    Registration records are created in realtime as people register for a
+    meeting. This function serves as an audit / reconciliation. Most records are
+    expected to already exist. The function has been optimized with this in mind.
+
+    - Creates new registrations if they don't exist
+    - Updates existing registrations if fields differ
+    - Updates tickets as needed
+    - Deletes registrations that exist in the database but not in the JSON data
+
+    Returns:
+        dict: Summary of changes made (created, updated, deleted counts)
+    """
+    reg_data = get_registration_data(meeting)
+
+    # Get the meeting ID from the first registration, the API only deals with one meeting at a time
+    first_email = next(iter(reg_data['objects']))
+    meeting_number = reg_data['objects'][first_email]['meeting']
+    try:
+        Meeting.objects.get(number=meeting_number)
+    except Meeting.DoesNotExist:
+        raise Exception(f'meeting does not exist {meeting_number}')
+
+    # Get all existing registrations for this meeting
+    existing_registrations = meeting.registration_set.all()
+    existing_emails = set(reg.email for reg in existing_registrations if reg.email)
+
+    # Track changes for reporting
+    stats = {
+        'created': 0,
+        'updated': 0,
+        'deleted': 0,
+        'processed': 0,
+    }
+
+    # Process registrations from reg_data
+    reg_emails = set()
+    for email, data in reg_data['objects'].items():
+        stats['processed'] += 1
+        reg_emails.add(email)
+
+        # Process this registration
+        _, action_taken = process_single_registration(data, meeting)
+
+        # Update stats
+        if action_taken == 'created':
+            stats['created'] += 1
+        elif action_taken == 'updated':
+            stats['updated'] += 1
+
+    # Delete registrations that exist in the DB but not in registration data, they've been cancelled
+    emails_to_delete = existing_emails - reg_emails
+    if emails_to_delete:
+        result = Registration.objects.filter(
+            email__in=emails_to_delete,
+            meeting=meeting
+        ).delete()
+        if 'meeting.Registration' in result[1]:
+            deleted_count = result[1]['meeting.Registration']
+        else:
+            deleted_count = 0
+        stats['deleted'] = deleted_count
+
+    # set meeting.attendees
+    count = Registration.objects.onsite().filter(meeting=meeting, checkedin=True).count()
+    if meeting.attendees != count:
+        meeting.attendees = count
+        meeting.save()
+
+    return stats
+
+
+def process_single_registration(reg_data, meeting):
+    """
+    Process a single registration record - create, update, or leave unchanged as needed.
+
+    Args:
+        reg_data (dict): Registration data
+        meeting (obj): The IETF meeting
+
+    Returns:
+        tuple: (registration, action_taken)
+            - registration: Registration object
+            - action_taken: String indicating 'created', 'updated', or None
+    """
+    # import here to avoid circular imports
+    from ietf.nomcom.models import Volunteer, NomCom
+
+    action_taken = None
+    fields_updated = False
+    tickets_modified = False
+
+    # handle deleted
+    # should not see cancelled records during nightly sync but can see
+    # them from realtime notifications
+    if reg_data['cancelled']:
+        try:
+            registration = Registration.objects.get(meeting=meeting, email=reg_data['email'])
+        except Registration.DoesNotExist:
+            return (None, None)
+        for ticket in reg_data['tickets']:
+            target = registration.tickets.filter(
+                attendance_type__slug=ticket['attendance_type'],
+                ticket_type__slug=ticket['ticket_type']).first()
+            target.delete()
+        if registration.tickets.count() == 0:
+            registration.delete()
+        return (None, 'deleted')
+
+    person = Person.objects.filter(email__address=reg_data['email']).first()
+    if not person:
+        log.log(f"ERROR: meeting registration email unknown {reg_data['email']}")
+
+    registration, created = Registration.objects.get_or_create(
+        email=reg_data['email'],
+        meeting=meeting,
+        defaults={
+            'first_name': reg_data['first_name'],
+            'last_name': reg_data['last_name'],
+            'person': person,
+            'affiliation': reg_data['affiliation'],
+            'country_code': reg_data['country_code'],
+            'checkedin': reg_data['checkedin'],
+        }
+    )
+
+    # If not created, check if we need to update
+    if not created:
+        for field in ['first_name', 'last_name', 'affiliation', 'country_code', 'checkedin']:
+            if getattr(registration, field) != reg_data[field]:
+                setattr(registration, field, reg_data[field])
+                fields_updated = True
+
+    if fields_updated:
+        registration.save()
+
+    # Process tickets - handle counting properly for multiple same-type tickets
+    # Build count dictionaries for existing and new tickets
+    existing_ticket_counts = {}
+    for ticket in registration.tickets.all():
+        key = (ticket.attendance_type.slug, ticket.ticket_type.slug)
+        existing_ticket_counts[key] = existing_ticket_counts.get(key, 0) + 1
+
+    # Get new tickets from reg_data and count them
+    reg_data_ticket_counts = {}
+    for ticket_data in reg_data.get('tickets', []):
+        key = (ticket_data['attendance_type'], ticket_data['ticket_type'])
+        reg_data_ticket_counts[key] = reg_data_ticket_counts.get(key, 0) + 1
+
+    # Calculate tickets to add and remove
+    all_ticket_types = set(existing_ticket_counts.keys()) | set(reg_data_ticket_counts.keys())
+
+    for ticket_type in all_ticket_types:
+        existing_count = existing_ticket_counts.get(ticket_type, 0)
+        new_count = reg_data_ticket_counts.get(ticket_type, 0)
+
+        # Delete excess tickets
+        if existing_count > new_count:
+            tickets_to_delete = existing_count - new_count
+            # Get all tickets of this type
+            matching_tickets = registration.tickets.filter(
+                attendance_type__slug=ticket_type[0],
+                ticket_type__slug=ticket_type[1]
+            ).order_by('id')  # Use a consistent order for deterministic deletion
+
+            # Delete the required number
+            for ticket in matching_tickets[:tickets_to_delete]:
+                ticket.delete()
+            tickets_modified = True
+
+        # Add missing tickets
+        elif new_count > existing_count:
+            tickets_to_add = new_count - existing_count
+
+            # Create the new tickets
+            for _ in range(tickets_to_add):
+                try:
+                    RegistrationTicket.objects.create(
+                        registration=registration,
+                        attendance_type_id=ticket_type[0],
+                        ticket_type_id=ticket_type[1],
+                    )
+                    tickets_modified = True
+                except IntegrityError as e:
+                    log(f"Error adding RegistrationTicket {e}")
+
+    # handle nomcom volunteer
+    if reg_data['is_nomcom_volunteer'] and person:
+        try:
+            nomcom = NomCom.objects.get(is_accepting_volunteers=True)
+        except (NomCom.DoesNotExist, NomCom.MultipleObjectsReturned):
+            nomcom = None
+        if nomcom:
+            Volunteer.objects.get_or_create(
+                nomcom=nomcom,
+                person=person,
+                defaults={
+                    "affiliation": reg_data["affiliation"],
+                    "origin": "registration"
+                }
+            )
+
+    # set action_taken
+    if created:
+        action_taken = 'created'
+    elif fields_updated or tickets_modified:
+        action_taken = 'updated'
+
+    return registration, action_taken
+
+
+def fetch_attendance_from_meetings(meetings):
+    return [sync_registration_data(meeting) for meeting in meetings]
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 591b934b58..8bd70a3733 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -61,6 +61,7 @@
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.meeting.models import Meeting, Session, Schedule, FloorPlan, SessionPresentation, TimeSlot, SlideSubmission, Attended
 from ietf.meeting.models import ImportantDate, SessionStatusName, SchedulingEvent, SchedTimeSessAssignment, Room, TimeSlotTypeName
+from ietf.meeting.models import Registration
 from ietf.meeting.forms import ( CustomDurationField, SwapDaysForm, SwapTimeslotsForm, ImportMinutesForm,
                                  TimeSlotCreateForm, TimeSlotEditForm, SessionCancelForm, SessionEditForm )
 from ietf.meeting.helpers import get_person_by_email, get_schedule_by_name
@@ -98,7 +99,6 @@
 from ietf.meeting.utils import participants_for_meeting, generate_bluesheet, bluesheet_data, save_bluesheet
 from ietf.message.utils import infer_message
 from ietf.name.models import SlideSubmissionStatusName, ProceedingsMaterialTypeName, SessionPurposeName
-from ietf.stats.models import MeetingRegistration
 from ietf.utils import markdown
 from ietf.utils.decorators import require_api_key
 from ietf.utils.hedgedoc import Note, NoteError
@@ -2710,7 +2710,7 @@ def session_attendance(request, session_id, num):
             was_there = Attended.objects.filter(session=session, person=person).exists()
             can_add = (
                 today_utc <= cor_cut_off_date
-                and MeetingRegistration.objects.filter(
+                and Registration.objects.filter(
                     meeting=session.meeting, person=person
                 ).exists()
                 and not was_there
@@ -4210,17 +4210,17 @@ def proceedings_attendees(request, num=None):
         return HttpResponseRedirect(f'{settings.PROCEEDINGS_V1_BASE_URL.format(meeting=meeting)}/attendee.html')
 
     template = None
-    meeting_registrations = None
+    registrations = None
 
     if int(meeting.number) >= 118:
         checked_in, attended = participants_for_meeting(meeting)
-        regs = list(MeetingRegistration.objects.filter(meeting__number=num, reg_type='onsite', checkedin=True))
+        regs = list(Registration.objects.onsite().filter(meeting__number=num, checkedin=True))
 
-        for mr in MeetingRegistration.objects.filter(meeting__number=num, reg_type='remote').select_related('person'):
-            if mr.person.pk in attended and mr.person.pk not in checked_in:
-                regs.append(mr)
+        for reg in Registration.objects.remote().filter(meeting__number=num).select_related('person'):
+            if reg.person.pk in attended and reg.person.pk not in checked_in:
+                regs.append(reg)
 
-        meeting_registrations = sorted(regs, key=lambda x: (x.last_name, x.first_name))
+        registrations = sorted(regs, key=lambda x: (x.last_name, x.first_name))
     else:
         overview_template = "/meeting/proceedings/%s/attendees.html" % meeting.number
         try:
@@ -4230,7 +4230,7 @@ def proceedings_attendees(request, num=None):
 
     return render(request, "meeting/proceedings_attendees.html", {
         'meeting': meeting,
-        'meeting_registrations': meeting_registrations,
+        'registrations': registrations,
         'template': template,
     })
 
diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index 8f94cc7fc5..ea17da6707 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -31,7 +31,8 @@
                                NewRevisionDocEventFactory, DocumentAuthorFactory
 from ietf.group.factories import GroupFactory, GroupHistoryFactory, RoleFactory, RoleHistoryFactory
 from ietf.group.models import Group, Role
-from ietf.meeting.factories import MeetingFactory, AttendedFactory
+from ietf.meeting.factories import MeetingFactory, AttendedFactory, RegistrationFactory
+from ietf.meeting.models import Registration
 from ietf.message.models import Message
 from ietf.nomcom.test_data import nomcom_test_data, generate_cert, check_comments, \
                                   COMMUNITY_USER, CHAIR_USER, \
@@ -50,8 +51,6 @@
                               decorate_volunteers_with_qualifications, send_reminders, _is_time_to_send_reminder
 from ietf.person.factories import PersonFactory, EmailFactory
 from ietf.person.models import Email, Person
-from ietf.stats.models import MeetingRegistration
-from ietf.stats.factories import MeetingRegistrationFactory
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase, unicontent
 from ietf.utils.timezone import date_today, datetime_today, datetime_from_date, DEADLINE_TZINFO
@@ -2061,7 +2060,15 @@ def first_meeting_of_year(year):
                 if not ' ' in ascii:
                     continue
                 first_name, last_name = ascii.rsplit(None, 1)
-                MeetingRegistration.objects.create(meeting=meeting, first_name=first_name, last_name=last_name, person=person, country_code='WO', email=email, attended=True)
+                RegistrationFactory(
+                    meeting=meeting,
+                    first_name=first_name,
+                    last_name=last_name,
+                    person=person,
+                    country_code='WO',
+                    email=email,
+                    attended=True
+                )
         for view in ('public_eligible','private_eligible'):
             url = reverse(f'ietf.nomcom.views.{view}',kwargs={'year':self.nc.year()})
             for username in (self.chair.user.username,'secretary'):
@@ -2084,7 +2091,7 @@ def first_meeting_of_year(year):
         for number in range(meeting_start, meeting_start+8):
             m = MeetingFactory.create(type_id='ietf', number=number)
             for p in people:
-                m.meetingregistration_set.create(person=p, reg_type="onsite", checkedin=True, attended=True)
+                RegistrationFactory(meeting=m, person=p, checkedin=True, attended=True)
         for p in people:
             self.nc.volunteer_set.create(person=p,affiliation='something')
         for view in ('public_volunteers','private_volunteers'):
@@ -2110,10 +2117,6 @@ def first_meeting_of_year(year):
         self.assertContains(response, people[-1].plain_name(), status_code=200)
         self.assertNotContains(response, unqualified_person.plain_name())
 
-
-
-
-
 class NomComIndexTests(TestCase):
     def setUp(self):
         super().setUp()
@@ -2460,7 +2463,7 @@ def setUp(self):
             for combo in combinations(meetings,combo_len):
                 p = PersonFactory()
                 for m in combo:
-                    MeetingRegistrationFactory(person=p, meeting=m, attended=True)
+                    RegistrationFactory(person=p, meeting=m, attended=True)
                 if combo_len<3:
                     self.ineligible_people.append(p)
                 else:
@@ -2470,7 +2473,7 @@ def setUp(self):
         def ineligible_person_with_role(**kwargs):
             p = RoleFactory(**kwargs).person
             for m in meetings:
-                MeetingRegistrationFactory(person=p, meeting=m, attended=True)
+                RegistrationFactory(person=p, meeting=m, attended=True)
             self.ineligible_people.append(p)
         for group in ['isocbot', 'ietf-trust', 'llc-board', 'iab']:
             for role in ['member', 'chair']:
@@ -2485,8 +2488,7 @@ def ineligible_person_with_role(**kwargs):
         self.other_date = datetime.date(2009,5,1)
         self.other_people = PersonFactory.create_batch(1)
         for date in (datetime.date(2009,3,1), datetime.date(2008,11,1), datetime.date(2008,7,1)):
-            MeetingRegistrationFactory(person=self.other_people[0],meeting__date=date, meeting__type_id='ietf', attended=True)
-
+            RegistrationFactory(person=self.other_people[0], meeting__date=date, meeting__type_id='ietf', attended=True)
 
     def test_is_person_eligible(self):
         for person in self.eligible_people:
@@ -2530,7 +2532,7 @@ def setUp(self):
             for combo in combinations(meetings,combo_len):
                 p = PersonFactory()
                 for m in combo:
-                    MeetingRegistrationFactory(person=p, meeting=m, attended=True)
+                    RegistrationFactory(person=p, meeting=m, attended=True)
                 if combo_len<3:
                     self.ineligible_people.append(p)
                 else:
@@ -2578,7 +2580,7 @@ def test_elig_by_meetings(self):
                 for combo in combinations(prev_five,combo_len):
                     p = PersonFactory()
                     for m in combo:
-                        MeetingRegistrationFactory(person=p, meeting=m, attended=True) # not checkedin because this forces looking at older meetings
+                        RegistrationFactory(person=p, meeting=m, attended=True) # not checkedin because this forces looking at older meetings
                         AttendedFactory(session__meeting=m, session__type_id='plenary',person=p)
                     if combo_len<3:
                         ineligible_people.append(p)
@@ -2593,8 +2595,9 @@ def test_elig_by_meetings(self):
             for person in ineligible_people:
                 self.assertFalse(is_eligible(person,nomcom))
 
-            Person.objects.filter(pk__in=[p.pk for p in eligible_people+ineligible_people]).delete()
-
+            people = Person.objects.filter(pk__in=[p.pk for p in eligible_people + ineligible_people])
+            Registration.objects.filter(person__in=people).delete()
+            people.delete()
 
     def test_elig_by_office_active_groups(self):
 
@@ -2778,7 +2781,7 @@ def setUp(self):
     def test_registration_is_not_enough(self):
         p = PersonFactory()
         for meeting in self.meetings:
-            MeetingRegistrationFactory(person=p, meeting=meeting, checkedin=False)
+            RegistrationFactory(person=p, meeting=meeting, checkedin=False)
         self.assertFalse(is_eligible(p, self.nomcom))
 
     def test_elig_by_meetings(self):
@@ -2795,7 +2798,7 @@ def test_elig_by_meetings(self):
                 for method in attendance_methods:
                     p = PersonFactory()
                     for meeting in combo:
-                        MeetingRegistrationFactory(person=p, meeting=meeting, reg_type='onsite', checkedin=(method in ('checkedin', 'both')))
+                        RegistrationFactory(person=p, meeting=meeting, checkedin=(method in ('checkedin', 'both')))
                         if method in ('session', 'both'):
                             AttendedFactory(session__meeting=meeting, session__type_id='plenary',person=p)
                         if combo_len<3:
@@ -2828,7 +2831,7 @@ def test_volunteer(self):
         self.assertContains(r, 'NomCom is not accepting volunteers at this time', status_code=200)
         nomcom.is_accepting_volunteers = True
         nomcom.save()
-        MeetingRegistrationFactory(person=person, affiliation='mtg_affiliation', checkedin=True)
+        RegistrationFactory(person=person, affiliation='mtg_affiliation', checkedin=True)
         r = self.client.get(url)
         self.assertContains(r, 'Volunteer for NomCom', status_code=200)
         self.assertContains(r, 'mtg_affiliation')
@@ -2882,7 +2885,7 @@ def test_suggest_affiliation(self):
         nc = NomComFactory()
         nc.volunteer_set.create(person=person,affiliation='volunteer_affil')
         self.assertEqual(suggest_affiliation(person), 'volunteer_affil')
-        MeetingRegistrationFactory(person=person, affiliation='meeting_affil')
+        RegistrationFactory(person=person, affiliation='meeting_affil')
         self.assertEqual(suggest_affiliation(person), 'meeting_affil')
 
 class VolunteerDecoratorUnitTests(TestCase):
@@ -2900,7 +2903,7 @@ def test_decorate_volunteers_with_qualifications(self):
             ('106', datetime.date(2019, 11, 16)),
         ]]
         for m in meetings:
-            MeetingRegistrationFactory(meeting=m, person=meeting_person, attended=True)
+            RegistrationFactory(meeting=m, person=meeting_person, attended=True)
             AttendedFactory(session__meeting=m, session__type_id='plenary', person=meeting_person)
         nomcom.volunteer_set.create(person=meeting_person)
 
diff --git a/ietf/nomcom/utils.py b/ietf/nomcom/utils.py
index ab155ef1d5..10494d323f 100644
--- a/ietf/nomcom/utils.py
+++ b/ietf/nomcom/utils.py
@@ -666,14 +666,14 @@ def previous_five_meetings(date = None):
     return Meeting.objects.filter(type='ietf',date__lte=date).order_by('-date')[:5]
 
 def three_of_five_eligible_8713(previous_five, queryset=None):
-    """ Return a list of Person records who attended at least 
+    """ Return a list of Person records who attended at least
         3 of the 5 type_id='ietf' meetings before the given
         date. Does not disqualify anyone based on held roles.
         This variant bases the calculation on MeetingRegistration.attended
     """
     if queryset is None:
         queryset = Person.objects.all()
-    return queryset.filter(meetingregistration__meeting__in=list(previous_five),meetingregistration__attended=True).annotate(mtg_count=Count('meetingregistration')).filter(mtg_count__gte=3)
+    return queryset.filter(registration__meeting__in=list(previous_five), registration__attended=True).annotate(mtg_count=Count('registration')).filter(mtg_count__gte=3)
 
 def three_of_five_eligible_9389(previous_five, queryset=None):
     """ Return a list of Person records who attended at least
@@ -692,7 +692,7 @@ def three_of_five_eligible_9389(previous_five, queryset=None):
     return queryset.filter(pk__in=[id for id, count in counts.items() if count >= 3])
 
 def suggest_affiliation(person):
-    recent_meeting = person.meetingregistration_set.order_by('-meeting__date').first()
+    recent_meeting = person.registration_set.order_by('-meeting__date').first()
     affiliation = recent_meeting.affiliation if recent_meeting else ''
     if not affiliation:
         recent_volunteer = person.volunteer_set.order_by('-nomcom__group__acronym').first()
diff --git a/ietf/settings.py b/ietf/settings.py
index c21120f77a..3f66e6abfe 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1114,6 +1114,9 @@ def skip_unreadable_post(record):
 ]
 
 STATS_REGISTRATION_ATTENDEES_JSON_URL = 'https://registration.ietf.org/{number}/attendees/'
+REGISTRATION_PARTICIPANTS_API_URL = 'https://registration.ietf.org/api/v1/participants-dt/'
+REGISTRATION_PARTICIPANTS_API_KEY = 'changeme'
+
 PROCEEDINGS_VERSION_CHANGES = [
     0,   # version 1
     97,  # version 2: meeting 97 and later (was number was NEW_PROCEEDINGS_START)
diff --git a/ietf/stats/management/commands/find_meetingregistration_person_issues.py b/ietf/stats/management/commands/find_meetingregistration_person_issues.py
deleted file mode 100644
index 4eaf6ac238..0000000000
--- a/ietf/stats/management/commands/find_meetingregistration_person_issues.py
+++ /dev/null
@@ -1,37 +0,0 @@
-# Copyright The IETF Trust 2021, All Rights Reserved
-
-import debug # pyflakes:ignore
-
-from django.core.management.base import BaseCommand
-
-from ietf.stats.utils import find_meetingregistration_person_issues
-
-class Command(BaseCommand):
-    help = "Find possible Person/Email objects to repair based on MeetingRegistration objects"
-
-    def add_arguments(self, parser):
-        parser.add_argument('--meeting',action='append')
-
-    def handle(self, *args, **options):
-        meetings = options['meeting'] or None
-        summary = find_meetingregistration_person_issues(meetings)
-
-        print(f'{summary.ok_records} records are OK')
-
-        for msg in summary.could_be_fixed:
-            print(msg)
-
-        for msg in summary.maybe_address:
-            print(msg)
-
-        for msg in summary.different_person:
-            print(msg)
-
-        for msg in summary.no_person:
-            print(msg)
-
-        for msg in summary.maybe_person:
-            print(msg)
-
-        for msg in summary.no_email:
-            print(msg)
diff --git a/ietf/stats/management/commands/repair_meetingregistration_person.py b/ietf/stats/management/commands/repair_meetingregistration_person.py
deleted file mode 100644
index 74b1a807a6..0000000000
--- a/ietf/stats/management/commands/repair_meetingregistration_person.py
+++ /dev/null
@@ -1,18 +0,0 @@
-# Copyright The IETF Trust 2021, All Rights Reserved
-
-import debug # pyflakes:ignore
-
-from django.core.management.base import BaseCommand
-
-from ietf.stats.utils import repair_meetingregistration_person
-
-class Command(BaseCommand):
-    help = "Repair MeetingRegistration objects that have no person but an email matching a person"
-
-    def add_arguments(self, parser):
-        parser.add_argument('--meeting',action='append')
-
-    def handle(self, *args, **options):
-        meetings = options['meeting'] or None
-        repaired = repair_meetingregistration_person(meetings)
-        print(f'Repaired {repaired} MeetingRegistration objects')
\ No newline at end of file
diff --git a/ietf/stats/utils.py b/ietf/stats/utils.py
index 2e418eb0eb..f2e1d9801d 100644
--- a/ietf/stats/utils.py
+++ b/ietf/stats/utils.py
@@ -13,7 +13,7 @@
 
 from ietf.stats.models import AffiliationAlias, AffiliationIgnoredEnding, CountryAlias, MeetingRegistration
 from ietf.name.models import CountryName
-from ietf.person.models import Person, Email
+from ietf.person.models import Email
 from ietf.utils.log import log
 
 import logging
@@ -226,8 +226,8 @@ def compute_hirsch_index(citation_counts):
 def get_meeting_registration_data(meeting):
     """"Retrieve registration attendee data and summary statistics.  Returns number
     of Registration records created.
-    
-    MeetingRegistration records are created in realtime as people register for a 
+
+    MeetingRegistration records are created in realtime as people register for a
     meeting. This function serves as an audit / reconciliation. Most records are
     expected to already exist. The function has been optimized with this in mind.
     """
@@ -329,60 +329,6 @@ def get_meeting_registration_data(meeting):
         meeting.save()
     return num_created, num_processed, num_total
 
-def repair_meetingregistration_person(meetings=None):
-    repaired_records = 0
-    qs = MeetingRegistration.objects.all()
-    if meetings:
-        qs = qs.filter(meeting__number__in=meetings)
-    for mr in qs:
-        if mr.email and not mr.person:
-            email_person = Person.objects.filter(email__address=mr.email).first()
-            if email_person:
-                mr.person = email_person
-                mr.save()
-                repaired_records += 1            
-    return repaired_records
-
-class MeetingRegistrationIssuesSummary(object):
-    pass
-
-def find_meetingregistration_person_issues(meetings=None):
-    summary = MeetingRegistrationIssuesSummary()
-
-    summary.could_be_fixed = set()
-    summary.maybe_address = set()
-    summary.different_person = set()
-    summary.no_person = set()
-    summary.maybe_person = set()
-    summary.no_email = set()
-    summary.ok_records = 0
-
-    qs = MeetingRegistration.objects.all()
-    if meetings:
-        qs = qs.filter(meeting__number__in=meetings)
-    for mr in qs:
-        if mr.person and mr.email and mr.email in mr.person.email_set.values_list('address',flat=True):
-            summary.ok_records += 1
-        elif mr.email:
-            email_person = Person.objects.filter(email__address=mr.email).first()
-            if mr.person:
-                if not email_person:
-                    summary.maybe_address.add(f'{mr.email} is not present in any Email object. The MeetingRegistration object implies this is an address for {mr.person} ({mr.person.pk})')
-                elif email_person != mr.person:
-                    summary.different_person.add(f'{mr} ({mr.pk}) has person {mr.person} ({mr.person.pk}) but an email {mr.email} attached to a different person {email_person} ({email_person.pk}).')
-            elif email_person:
-                summary.could_be_fixed.add(f'{mr} ({mr.pk}) has no person, but email {mr.email} matches {email_person} ({email_person.pk})')
-            else:
-                maybe_person_qs = Person.objects.filter(name__icontains=mr.last_name).filter(name__icontains=mr.first_name)
-                if maybe_person_qs.exists():
-                    summary.maybe_person.add(f'{mr} ({mr.pk}) has email address {mr.email} which cannot be associated with any Person. Consider these possible people {[(p,p.pk) for p in maybe_person_qs]}')
-                else:
-                    summary.no_person.add(f'{mr} ({mr.pk}) has email address {mr.email} which cannot be associated with any Person')
-        else:
-            summary.no_email.add(f'{mr} ({mr.pk}) provides no email address')
-
-    return summary
-
 
 FetchStats = namedtuple("FetchStats", "added processed total")
 
diff --git a/ietf/templates/meeting/proceedings_attendees.html b/ietf/templates/meeting/proceedings_attendees.html
index 6c51a4546e..390ce00cad 100644
--- a/ietf/templates/meeting/proceedings_attendees.html
+++ b/ietf/templates/meeting/proceedings_attendees.html
@@ -29,13 +29,13 @@ <h2>Attendee list of IETF {{ meeting.number }} meeting</h2>
             </tr>
         </thead>
         <tbody>
-            {% for reg in meeting_registrations %}
+            {% for reg in registrations %}
             <tr>
                 <td>{{ reg.last_name }}</td>
                 <td>{{ reg.first_name }}</td>
                 <td>{{ reg.affiliation }}</td>
                 <td>{{ reg.country_code }}</td>
-                <td>{{ reg.reg_type }}</td>
+                <td>{{ reg.attendance_type }}</td>
             </tr>
             {% endfor %}
         </tbody>

From 015d6f789bbc100cb182aa77a7f7df77913b20c3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Jun 2025 14:31:15 -0300
Subject: [PATCH 339/707] feat: database-backed artifact blob storage (#8992)

* feat: blobdb app

* feat: blob model

* fix: app name

* feat: admin for blob model

* feat: database router

* feat: BlobdbStorage storage class

* refactor: storage metadata via File subclass

* refactor: eliminate in_flight_custom_metadata

* chore: raise blobstore exceptions in development mode

* feat: StagedBlobStore + StorageObjectStorageMixin

* feat: StoredObject.committed timestamp

* refactor: some refactoring (wip)

* refactor: better separation of StorageObject and Storage

Partial revert of 5d6bd49afd2d130fa687617e5d3efc002a4d96f3

* feat: basic 2-blobstore commit

* fix: StorageObject should have been StoredObject

* fix: propagate metadata to final_storage

* feat: easier config of StagedBlobStorage

* refactor: save-specific commit

* chore(dev): add dev database for blob storage

* chore(dev): migrate blobdb in app-init.sh

* chore(dev): use staged blob storages for dev env

* feat: deletion for StagedBlobStorage

* refactor: single-query update of committed field

* fix: better commit behavior for celery

Make async commit optional so that celery tasks don't spawn
other celery tasks. This is a definite fix.

Reverses order of StoredObject.create() and storage.save().
This avoids a race condition between an async commit and the
creation of a StoredObject, but need to review whether this
introduces other problems.

* style: black + copyright stmts

* fix: dont test for v1 apis into the blobdb app models

* chore: fix storage configs (esp for tests) (#8664)

* chore: remove empty blobdb.views

* feat: mtime/content-type for blobdb

* test: test BlobdbStorage

* refactor: split storage utils from Storage class

This is a rather consequential refactor. Moves the utility
methods (store_file(), remove_from_storage(), etc) out of
the Storage subclass. They are now only in storage_utils.py.
Drops the StoredObjectStorageMixin, instead moving the
Storage-like parts directly into
StoredObjectStagedBlobStorage. The CustomS3Storage class
is dropped, at least for now.

* fix: circular import

* chore: CRLFs in ISSUE_TEMPLATE/config.yml

* chore: add resources.py

* refactor: extract metadata from BlobFile

* refactor: reconcile dueling MetadataFiles

* refactor: plumb metadata and reorg code

* fix: handle content type properly

* chore: remove blobdb/resources.py

* test: ietf.blobdb->OMITTED_APPS; drop ad hoc ignore

* chore: copyright

* chore: Remove CR

* refactor: storage_backends.py -> storage.py

Matches standard naming convention

* refactor: remove StagedBlobStorage

* chore: fix mypy lint

* chore: remove StagedBlobStorage tasks

* refactor: committed -> replicated

* feat: admin improvements

* chore: configure storages for dev

 * configure separate replica storage
 * enable retries
 * switch to "standard" mode instead of legacy

* feat: copy blobs to "replica" storage when stored

* feat: propagate blob deletion, too

* fix: reset replicated flag on delete

* chore: remove replication

* refactor: unify artifact storage configs

All environments now use the same storage config,
so set it up directly in settings.py instead of
scattered throughout.

* fix: mypy lint

* fix: more mypy lint...

* fix: overwrite, don't rename, in BlobdbStorage

* fix: more lint

* feat: hooks for Blobdb watcher notifications

* feat: pybob the blob replicator

Simulation of an external replicator task.

* chore: fix quoting in celery docker-init.sh

* fix: adjust replicator/storage to work together

* chore: concurrency=1 worker for blobdb queue

* feat: blobdb replication module + settings

* feat: en/disable replication per settings

* feat: per-bucket replication en/disable

* fix: use correct type for EXCLUDE_BUCKETS

* style: reorder methods

* feat: logging/exceptions in replication.py

* feat: retry replication

* fix: valid storage pattern setting

* chore: consistent naming

* feat: detect missing replica storage configs

* fix: ensure mtime is set for the replica

Use blob modified timestamp as mtime in replicated
metadata. This is the intended behavior and matches
BlobdbStorage.

* fix: log message grammar

* feat: blobdb + k8s deployment (#8946)

* chore(dev): remove assert

I like the idea, but settings are sometimes loaded
more than once so this approach doesn't work

* chore: blobdb migrations in k8s

* chore: fix typo in commet

* chore: add replicator pod for k8s deploy

* chore: drop unnecessary ports from celery/beat

* chore: fix tyop

* chore: settings for blobdb / replication

* chore: put quotes back around $@

* ci: typo in k8s/settings_local.py

* chore: additional blobdb replicator logging (#8950)

* refactor: minor refactor + ruff style

* chore: additional logging

* fix: db transactions for blobdb save/delete (#8951)

* fix: use correct DB for transaction (#8952)

* fix: use correct DB for transaction

* chore: stale comment

* fix: on_commit needs "using" also (#8953)

* chore: unused imports in settings_locals

* refactor: typing-friendly blob handling in replication.py

* chore: more lint

* chore: fix lint affecting GHA tests

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 dev/build/migration-start.sh              |   3 +
 dev/build/start.sh                        |   5 +-
 dev/celery/docker-init.sh                 |   2 +-
 dev/deploy-to-container/settings_local.py |  21 ---
 dev/diff/settings_local.py                |  21 ---
 dev/tests/settings_local.py               |  21 ---
 docker-compose.yml                        |  34 +++-
 docker/configs/settings_local.py          |  60 ++++---
 docker/configs/settings_postgresqldb.py   |   8 +
 docker/scripts/app-configure-blobstore.py |   4 +-
 docker/scripts/app-init.sh                |   4 +-
 ietf/api/tests.py                         |   1 +
 ietf/blobdb/__init__.py                   |   0
 ietf/blobdb/admin.py                      |  31 ++++
 ietf/blobdb/apps.py                       |  30 ++++
 ietf/blobdb/factories.py                  |  13 ++
 ietf/blobdb/migrations/0001_initial.py    |  78 +++++++++
 ietf/blobdb/migrations/__init__.py        |   0
 ietf/blobdb/models.py                     |  98 +++++++++++
 ietf/blobdb/replication.py                | 178 ++++++++++++++++++++
 ietf/blobdb/routers.py                    |  58 +++++++
 ietf/blobdb/storage.py                    |  96 +++++++++++
 ietf/blobdb/tasks.py                      |  17 ++
 ietf/blobdb/tests.py                      |  80 +++++++++
 ietf/doc/admin.py                         |  20 ++-
 ietf/doc/models.py                        |   5 +-
 ietf/doc/storage.py                       | 178 ++++++++++++++++++++
 ietf/doc/storage_backends.py              | 192 ----------------------
 ietf/doc/storage_utils.py                 |  96 +++++++++--
 ietf/doc/tasks.py                         |   2 +-
 ietf/message/views.py                     |   1 +
 ietf/settings.py                          |  21 ++-
 ietf/settings_test.py                     |  25 +--
 ietf/utils/storage.py                     |  39 +++++
 ietf/utils/test_runner.py                 |   2 +-
 k8s/beat.yaml                             |   6 +-
 k8s/celery.yaml                           |   6 +-
 k8s/kustomization.yaml                    |   1 +
 k8s/replicator.yaml                       |  82 +++++++++
 k8s/settings_local.py                     |  66 ++++++--
 40 files changed, 1252 insertions(+), 353 deletions(-)
 create mode 100644 ietf/blobdb/__init__.py
 create mode 100644 ietf/blobdb/admin.py
 create mode 100644 ietf/blobdb/apps.py
 create mode 100644 ietf/blobdb/factories.py
 create mode 100644 ietf/blobdb/migrations/0001_initial.py
 create mode 100644 ietf/blobdb/migrations/__init__.py
 create mode 100644 ietf/blobdb/models.py
 create mode 100644 ietf/blobdb/replication.py
 create mode 100644 ietf/blobdb/routers.py
 create mode 100644 ietf/blobdb/storage.py
 create mode 100644 ietf/blobdb/tasks.py
 create mode 100644 ietf/blobdb/tests.py
 create mode 100644 ietf/doc/storage.py
 delete mode 100644 ietf/doc/storage_backends.py
 create mode 100644 k8s/replicator.yaml

diff --git a/dev/build/migration-start.sh b/dev/build/migration-start.sh
index 211638aec6..901026e53b 100644
--- a/dev/build/migration-start.sh
+++ b/dev/build/migration-start.sh
@@ -3,4 +3,7 @@
 echo "Running Datatracker migrations..."
 ./ietf/manage.py migrate --settings=settings_local
 
+echo "Running Blobdb migrations ..."
+./ietf/manage.py migrate --settings=settings_local --database=blobdb
+
 echo "Done!"
diff --git a/dev/build/start.sh b/dev/build/start.sh
index ef6c7fc0d9..3b03637068 100644
--- a/dev/build/start.sh
+++ b/dev/build/start.sh
@@ -2,7 +2,7 @@
 #
 # Environment config:
 #
-#  CONTAINER_ROLE - datatracker, celery, or beat (defaults to datatracker)
+#  CONTAINER_ROLE - datatracker, celery, beat, migrations, or replicator (defaults to datatracker)
 #
 case "${CONTAINER_ROLE:-datatracker}" in
     auth)
@@ -20,6 +20,9 @@ case "${CONTAINER_ROLE:-datatracker}" in
     migrations)
         exec ./migration-start.sh
         ;;
+    replicator)
+        exec ./celery-start.sh --app=ietf worker --queues=blobdb --concurrency=1
+        ;;
     *)
         echo "Unknown role '${CONTAINER_ROLE}'"
         exit 255       
diff --git a/dev/celery/docker-init.sh b/dev/celery/docker-init.sh
index 9940dfd7d0..6a36cb6d78 100755
--- a/dev/celery/docker-init.sh
+++ b/dev/celery/docker-init.sh
@@ -99,7 +99,7 @@ if [[ -n "${DEV_MODE}" ]]; then
             --recursive \
             --debounce-interval 5 \
             -- \
-            celery --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" "$@" &
+            celery --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" $@ &
   celery_pid=$!
 else
   celery --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" "$@" &
diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index e878206bd5..aacf000093 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -2,8 +2,6 @@
 # -*- coding: utf-8 -*-
 
 from ietf.settings import *   # pyflakes:ignore
-from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
-import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -81,22 +79,3 @@
 
 # OIDC configuration
 SITE_URL = 'https://__HOSTNAME__'
-
-for storagename in MORE_STORAGE_NAMES:
-    STORAGES[storagename] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
-        "OPTIONS": dict(
-            endpoint_url="http://blobstore:9000",
-            access_key="minio_root",
-            secret_key="minio_pass",
-            security_token=None,
-            client_config=botocore.config.Config(
-                signature_version="s3v4",
-                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
-                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
-                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
-            ),
-            verify=False,
-            bucket_name=f"test-{storagename}",
-        ),
-    }
diff --git a/dev/diff/settings_local.py b/dev/diff/settings_local.py
index 9e0806a8a6..c255cac23d 100644
--- a/dev/diff/settings_local.py
+++ b/dev/diff/settings_local.py
@@ -2,8 +2,6 @@
 # -*- coding: utf-8 -*-
 
 from ietf.settings import *  # pyflakes:ignore
-from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
-import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -68,22 +66,3 @@
 SLIDE_STAGING_PATH = 'test/staging/'
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
-
-for storagename in MORE_STORAGE_NAMES:
-    STORAGES[storagename] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
-        "OPTIONS": dict(
-            endpoint_url="http://blobstore:9000",
-            access_key="minio_root",
-            secret_key="minio_pass",
-            security_token=None,
-            client_config=botocore.config.Config(
-                signature_version="s3v4",
-                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
-                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
-                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
-            ),
-            verify=False,
-            bucket_name=f"test-{storagename}",
-        ),
-    }
diff --git a/dev/tests/settings_local.py b/dev/tests/settings_local.py
index f2166053a7..e1ffd60edb 100644
--- a/dev/tests/settings_local.py
+++ b/dev/tests/settings_local.py
@@ -2,8 +2,6 @@
 # -*- coding: utf-8 -*-
 
 from ietf.settings import *  # pyflakes:ignore
-from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
-import botocore.config
 
 ALLOWED_HOSTS = ['*']
 
@@ -67,22 +65,3 @@
 SLIDE_STAGING_PATH = 'test/staging/'
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
-
-for storagename in MORE_STORAGE_NAMES:
-    STORAGES[storagename] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
-        "OPTIONS": dict(
-            endpoint_url="http://blobstore:9000",
-            access_key="minio_root",
-            secret_key="minio_pass",
-            security_token=None,
-            client_config=botocore.config.Config(
-                signature_version="s3v4",
-                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
-                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
-                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
-            ),
-            verify=False,
-            bucket_name=f"test-{storagename}",
-        ),
-    }
diff --git a/docker-compose.yml b/docker-compose.yml
index 9910c02a99..100119c464 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -86,13 +86,44 @@ services:
             - .:/workspace
             - app-assets:/assets
 
+    replicator:
+        build:
+            context: .
+            dockerfile: docker/celery.Dockerfile
+        init: true
+        environment:
+            CELERY_APP: ietf
+            CELERY_ROLE: worker
+            UPDATE_REQUIREMENTS_FROM: requirements.txt
+            DEV_MODE: "yes"
+        command:
+            - '--loglevel=INFO'
+            - '--queues=blobdb'
+            - '--concurrency=1'
+                 
+        depends_on:
+            - db
+        restart: unless-stopped
+        stop_grace_period: 1m
+        volumes:
+            - .:/workspace
+            - app-assets:/assets
+
     blobstore:
         image: ghcr.io/ietf-tools/datatracker-devblobstore:latest
         restart: unless-stopped
         volumes:
             - "minio-data:/data"
 
-
+    blobdb:
+        image: postgres:16
+        restart: unless-stopped
+        environment:
+            POSTGRES_DB: blob
+            POSTGRES_USER: dt
+            POSTGRES_PASSWORD: abcd1234
+        volumes:
+            - blobdb-data:/var/lib/postgresql/data
 
 #  Celery Beat is a periodic task runner. It is not normally needed for development,
 #  but can be enabled by uncommenting the following.
@@ -118,3 +149,4 @@ volumes:
     postgresdb-data:
     app-assets:
     minio-data:
+    blobdb-data:
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index 46833451c1..ca51871463 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -2,12 +2,26 @@
 # -*- coding: utf-8 -*-
 
 from ietf.settings import *  # pyflakes:ignore
-from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
-import botocore.config
+from ietf.settings import (
+    ARTIFACT_STORAGE_NAMES,
+    STORAGES,
+    BLOBSTORAGE_MAX_ATTEMPTS,
+    BLOBSTORAGE_READ_TIMEOUT,
+    BLOBSTORAGE_CONNECT_TIMEOUT,
+)
 
 ALLOWED_HOSTS = ['*']
 
 from ietf.settings_postgresqldb import DATABASES  # pyflakes:ignore
+DATABASE_ROUTERS = ["ietf.blobdb.routers.BlobdbStorageRouter"]
+BLOBDB_DATABASE = "blobdb"
+BLOBDB_REPLICATION = {
+    "ENABLED": True,
+    "DEST_STORAGE_PATTERN": "r2-{bucket}",
+    "INCLUDE_BUCKETS": ARTIFACT_STORAGE_NAMES,
+    "EXCLUDE_BUCKETS": ["staging"],
+    "VERBOSE_LOGGING": True,
+}
 
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
 IDSUBMIT_STAGING_PATH = "/assets/www6s/staging/"
@@ -39,25 +53,6 @@
 # DEV_TEMPLATE_CONTEXT_PROCESSORS = [
 #    'ietf.context_processors.sql_debug',
 # ]
-for storagename in MORE_STORAGE_NAMES:
-    STORAGES[storagename] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
-        "OPTIONS": dict(
-            endpoint_url="http://blobstore:9000",
-            access_key="minio_root",
-            secret_key="minio_pass",
-            security_token=None,
-            client_config=botocore.config.Config(
-                signature_version="s3v4",
-                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
-                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
-                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
-            ),
-            verify=False,
-            bucket_name=storagename,
-        ),
-    }
-
 
 DOCUMENT_PATH_PATTERN = '/assets/ietfdata/doc/{doc.type_id}/'
 INTERNET_DRAFT_PATH = '/assets/ietf-ftp/internet-drafts/'
@@ -80,3 +75,26 @@
 
 STATIC_IETF_ORG = "/_static"
 STATIC_IETF_ORG_INTERNAL = "http://static"
+
+
+# Blob replication storage for dev
+import botocore.config
+for storagename in ARTIFACT_STORAGE_NAMES:
+    replica_storagename = f"r2-{storagename}"
+    STORAGES[replica_storagename] = {
+        "BACKEND": "ietf.doc.storage.MetadataS3Storage",
+        "OPTIONS": dict(
+            endpoint_url="http://blobstore:9000",
+            access_key="minio_root",
+            secret_key="minio_pass",
+            security_token=None,
+            client_config=botocore.config.Config(
+                signature_version="s3v4",
+                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
+                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
+                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
+            ),
+            verify=False,
+            bucket_name=f"{storagename}",
+        ),
+    }
diff --git a/docker/configs/settings_postgresqldb.py b/docker/configs/settings_postgresqldb.py
index 05d19b9a86..9b98586658 100644
--- a/docker/configs/settings_postgresqldb.py
+++ b/docker/configs/settings_postgresqldb.py
@@ -7,4 +7,12 @@
         'USER': 'django',
         'PASSWORD': 'RkTkDPFnKpko',
     },
+    'blobdb': {
+        'HOST': 'blobdb',
+        'PORT': 5432,
+        'NAME': 'blob',
+        'ENGINE': 'django.db.backends.postgresql',
+        'USER': 'dt',
+        'PASSWORD': 'abcd1234',
+    },
 }
diff --git a/docker/scripts/app-configure-blobstore.py b/docker/scripts/app-configure-blobstore.py
index ae87bf1afe..df4685b246 100755
--- a/docker/scripts/app-configure-blobstore.py
+++ b/docker/scripts/app-configure-blobstore.py
@@ -7,7 +7,7 @@
 import os
 import sys
 
-from ietf.settings import MORE_STORAGE_NAMES
+from ietf.settings import ARTIFACT_STORAGE_NAMES
 
 
 def init_blobstore():
@@ -19,7 +19,7 @@ def init_blobstore():
         aws_session_token=None,
         config=botocore.config.Config(signature_version="s3v4"),
     )
-    for bucketname in MORE_STORAGE_NAMES:
+    for bucketname in ARTIFACT_STORAGE_NAMES:
         try:
             blobstore.create_bucket(
                 Bucket=f"{os.environ.get('BLOB_STORE_BUCKET_PREFIX', '')}{bucketname}".strip()
diff --git a/docker/scripts/app-init.sh b/docker/scripts/app-init.sh
index e970398ac2..17e0c6c764 100755
--- a/docker/scripts/app-init.sh
+++ b/docker/scripts/app-init.sh
@@ -101,9 +101,11 @@ echo "Running initial checks..."
 /usr/local/bin/python $WORKSPACEDIR/ietf/manage.py check --settings=settings_local
 
 # Migrate, adjusting to what the current state of the underlying database might be:
-
 /usr/local/bin/python $WORKSPACEDIR/ietf/manage.py migrate --fake-initial --settings=settings_local
 
+# Apply migrations to the blobdb database as well (most are skipped)
+/usr/local/bin/python $WORKSPACEDIR/ietf/manage.py migrate --settings=settings_local --database=blobdb
+
 if [ -z "$EDITOR_VSCODE" ]; then
     CODE=0
     python -m smtpd -n -c DebuggingServer localhost:2025 &
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 32f33dcc63..6754f5c3de 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -50,6 +50,7 @@
     'ietf.secr.proceedings',
     'ietf.ipr',
     'ietf.status',
+    'ietf.blobdb',
 )
 
 class CustomApiTests(TestCase):
diff --git a/ietf/blobdb/__init__.py b/ietf/blobdb/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/ietf/blobdb/admin.py b/ietf/blobdb/admin.py
new file mode 100644
index 0000000000..f4cd002e07
--- /dev/null
+++ b/ietf/blobdb/admin.py
@@ -0,0 +1,31 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from django.contrib import admin
+from django.db.models.functions import Length
+from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
+
+from .models import Blob
+
+
+@admin.register(Blob)
+class BlobAdmin(admin.ModelAdmin):
+    list_display = ["bucket", "name", "object_size", "modified", "mtime", "content_type"]
+    list_filter = [
+        "bucket",
+        "content_type",
+        ("modified", DateRangeQuickSelectListFilterBuilder()),
+        ("mtime", DateRangeQuickSelectListFilterBuilder()),
+    ]
+    search_fields = ["name"]
+    list_display_links = ["name"]
+
+    def get_queryset(self, request):
+        return (
+            super().get_queryset(request)
+            .defer("content")  # don't load this unless we want it
+            .annotate(object_size=Length("content"))  # accessed via object_size()
+        )
+
+    @admin.display(ordering="object_size")
+    def object_size(self, instance):
+        """Get the size of the object"""
+        return instance.object_size  # annotation added in get_queryset()
diff --git a/ietf/blobdb/apps.py b/ietf/blobdb/apps.py
new file mode 100644
index 0000000000..c2513b6819
--- /dev/null
+++ b/ietf/blobdb/apps.py
@@ -0,0 +1,30 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from django.apps import AppConfig
+
+
+class BlobdbConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "ietf.blobdb"
+
+    def ready(self):
+        """Initialize app once the registries / settings are populated"""
+        from django.conf import settings
+
+        # Validate that the DB is set up
+        db = get_blobdb()  # depends on settings.BLOBDB_DATABASE
+        if db is not None and db not in settings.DATABASES:
+            raise RuntimeError(
+                f"settings.BLOBDB_DATABASE is '{db}' but that is not present in settings.DATABASES"
+            )
+
+        # Validate replication settings
+        from .replication import validate_replication_settings
+
+        validate_replication_settings()
+
+
+def get_blobdb():
+    """Retrieve the blobdb setting from Django's settings"""
+    from django.conf import settings
+
+    return getattr(settings, "BLOBDB_DATABASE", None)
diff --git a/ietf/blobdb/factories.py b/ietf/blobdb/factories.py
new file mode 100644
index 0000000000..fdcebb2b4e
--- /dev/null
+++ b/ietf/blobdb/factories.py
@@ -0,0 +1,13 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import factory
+
+from .models import Blob
+
+
+class BlobFactory(factory.django.DjangoModelFactory):
+    class Meta:
+        model = Blob
+
+    name = factory.Faker("file_path")
+    bucket = factory.Faker("word")
+    content = factory.Faker("binary", length=32)  # careful, default length is 1e6
diff --git a/ietf/blobdb/migrations/0001_initial.py b/ietf/blobdb/migrations/0001_initial.py
new file mode 100644
index 0000000000..2fcb08e5ea
--- /dev/null
+++ b/ietf/blobdb/migrations/0001_initial.py
@@ -0,0 +1,78 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import django.utils.timezone
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = []
+
+    operations = [
+        migrations.CreateModel(
+            name="Blob",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "name",
+                    models.CharField(help_text="Name of the blob", max_length=1024),
+                ),
+                (
+                    "bucket",
+                    models.CharField(
+                        help_text="Name of the bucket containing this blob",
+                        max_length=1024,
+                    ),
+                ),
+                (
+                    "modified",
+                    models.DateTimeField(
+                        default=django.utils.timezone.now,
+                        help_text="Last modification time of the blob",
+                    ),
+                ),
+                ("content", models.BinaryField(help_text="Content of the blob")),
+                (
+                    "checksum",
+                    models.CharField(
+                        editable=False,
+                        help_text="SHA-384 digest of the content",
+                        max_length=96,
+                    ),
+                ),
+                (
+                    "mtime",
+                    models.DateTimeField(
+                        blank=True,
+                        default=None,
+                        help_text="mtime associated with the blob as a filesystem object",
+                        null=True,
+                    ),
+                ),
+                (
+                    "content_type",
+                    models.CharField(
+                        blank=True,
+                        help_text="content-type header value for the blob contents",
+                        max_length=1024,
+                    ),
+                ),
+            ],
+        ),
+        migrations.AddConstraint(
+            model_name="blob",
+            constraint=models.UniqueConstraint(
+                fields=("bucket", "name"), name="unique_name_per_bucket"
+            ),
+        ),
+    ]
diff --git a/ietf/blobdb/migrations/__init__.py b/ietf/blobdb/migrations/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/ietf/blobdb/models.py b/ietf/blobdb/models.py
new file mode 100644
index 0000000000..8f423d9f6c
--- /dev/null
+++ b/ietf/blobdb/models.py
@@ -0,0 +1,98 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import json
+from functools import partial
+from hashlib import sha384
+
+from django.db import models, transaction
+from django.utils import timezone
+
+from .apps import get_blobdb
+from .replication import replication_enabled
+from .tasks import pybob_the_blob_replicator_task
+
+
+class BlobQuerySet(models.QuerySet):
+    """QuerySet customized for Blob management
+
+    Operations that bypass save() / delete() won't correctly notify watchers of changes
+    to the blob contents. Disallow them.
+    """
+
+    def delete(self):
+        raise NotImplementedError("Only deleting individual Blobs is supported")
+
+    def bulk_create(self, *args, **kwargs):
+        raise NotImplementedError("Only creating individual Blobs is supported")
+
+    def update(self, *args, **kwargs):
+        # n.b., update_or_create() _does_ call save()
+        raise NotImplementedError("Updating BlobQuerySets is not supported")
+
+    def bulk_update(self, *args, **kwargs):
+        raise NotImplementedError("Updating Blobs in bulk is not supported")
+
+
+class Blob(models.Model):
+    objects = BlobQuerySet.as_manager()
+    name = models.CharField(max_length=1024, help_text="Name of the blob")
+    bucket = models.CharField(
+        max_length=1024, help_text="Name of the bucket containing this blob"
+    )
+    modified = models.DateTimeField(
+        default=timezone.now, help_text="Last modification time of the blob"
+    )
+    content = models.BinaryField(help_text="Content of the blob")
+    checksum = models.CharField(
+        max_length=96, help_text="SHA-384 digest of the content", editable=False
+    )
+    mtime = models.DateTimeField(
+        default=None,
+        blank=True,
+        null=True,
+        help_text="mtime associated with the blob as a filesystem object",
+    )
+    content_type = models.CharField(
+        max_length=1024,
+        blank=True,
+        help_text="content-type header value for the blob contents",
+    )
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["bucket", "name"], name="unique_name_per_bucket"
+            ),
+        ]
+
+    def save(self, **kwargs):
+        db = get_blobdb()
+        with transaction.atomic(using=db):
+            self.checksum = sha384(self.content, usedforsecurity=False).hexdigest()
+            super().save(**kwargs)
+            self._emit_blob_change_event(using=db)
+
+    def delete(self, **kwargs):
+        db = get_blobdb()
+        with transaction.atomic(using=db):
+            retval = super().delete(**kwargs)
+            self._emit_blob_change_event(using=db)
+        return retval
+
+    def _emit_blob_change_event(self, using=None):
+        if not replication_enabled(self.bucket):
+            return
+
+        # For now, fire a celery task we've arranged to guarantee in-order processing.
+        # Later becomes pushing an event onto a queue to a dedicated worker.
+        transaction.on_commit(
+            partial(
+                pybob_the_blob_replicator_task.delay,
+                json.dumps(
+                    {
+                        "name": self.name,
+                        "bucket": self.bucket,
+                    }
+                )
+            ),
+            using=using,
+        )
diff --git a/ietf/blobdb/replication.py b/ietf/blobdb/replication.py
new file mode 100644
index 0000000000..b9d55c9498
--- /dev/null
+++ b/ietf/blobdb/replication.py
@@ -0,0 +1,178 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import datetime
+from dataclasses import dataclass
+from io import BytesIO
+from typing import Optional
+
+from django.conf import settings
+from django.core.files import File
+from django.core.files.storage import storages, InvalidStorageError
+from django.db import connections
+
+from ietf.utils import log
+
+DEFAULT_SETTINGS = {
+    "ENABLED": False,
+    "DEST_STORAGE_PATTERN": "r2-{bucket}",
+    "INCLUDE_BUCKETS": (),  # empty means include all
+    "EXCLUDE_BUCKETS": (),  # empty means exclude none
+    "VERBOSE_LOGGING": False,
+}
+
+
+class SimpleMetadataFile(File):
+    def __init__(self, file, name=None):
+        super().__init__(file, name)
+        self.custom_metadata = {}
+        self.content_type = ""
+
+
+def get_replication_settings():
+    return DEFAULT_SETTINGS | getattr(settings, "BLOBDB_REPLICATION", {})
+
+
+def validate_replication_settings():
+    replicator_settings = get_replication_settings()
+    # No extra settings allowed
+    unknown_settings = set(DEFAULT_SETTINGS.keys()) - set(replicator_settings.keys())
+    if len(unknown_settings) > 0:
+        raise RuntimeError(
+            f"Unrecognized BLOBDB_REPLICATOR settings: {', '.join(str(unknown_settings))}"
+        )
+    # destination storage pattern must be a string that includes {bucket}
+    pattern = replicator_settings["DEST_STORAGE_PATTERN"]
+    if not isinstance(pattern, str):
+        raise RuntimeError(
+            f"DEST_STORAGE_PATTERN must be a str, not {type(pattern).__name__}"
+        )
+    if "{bucket}" not in pattern:
+        raise RuntimeError(
+            f"DEST_STORAGE_PATTERN must contain the substring '{{bucket}}' (found '{pattern}')"
+        )
+    # include/exclude buckets must be list-like
+    include_buckets = replicator_settings["INCLUDE_BUCKETS"]
+    if not isinstance(include_buckets, (list, tuple, set)):
+        raise RuntimeError("INCLUDE_BUCKETS must be a list, tuple, or set")
+    exclude_buckets = replicator_settings["EXCLUDE_BUCKETS"]
+    if not isinstance(exclude_buckets, (list, tuple, set)):
+        raise RuntimeError("EXCLUDE_BUCKETS must be a list, tuple, or set")
+    # if we have explicit include_buckets, make sure the necessary storages exist
+    if len(include_buckets) > 0:
+        include_storages = {destination_storage_name_for(b) for b in include_buckets}
+        exclude_storages = {destination_storage_name_for(b) for b in exclude_buckets}
+        configured_storages = set(settings.STORAGES.keys())
+        missing_storages = include_storages - exclude_storages - configured_storages
+        if len(missing_storages) > 0:
+            raise RuntimeError(
+                f"Replication requires unknown storage(s): {', '.join(missing_storages)}"
+            )
+
+
+def destination_storage_name_for(bucket: str):
+    pattern = get_replication_settings()["DEST_STORAGE_PATTERN"]
+    return pattern.format(bucket=bucket)
+
+
+def destination_storage_for(bucket: str):
+    storage_name = destination_storage_name_for(bucket)
+    return storages[storage_name]
+
+
+def replication_enabled(bucket: str):
+    replication_settings = get_replication_settings()
+    if not replication_settings["ENABLED"]:
+        return False
+    # Default is all buckets are included
+    included = (
+        len(replication_settings["INCLUDE_BUCKETS"]) == 0
+        or bucket in replication_settings["INCLUDE_BUCKETS"]
+    )
+    # Default is no buckets are excluded
+    excluded = (
+        len(replication_settings["EXCLUDE_BUCKETS"]) > 0
+        and bucket in replication_settings["EXCLUDE_BUCKETS"]
+    )
+    return included and not excluded
+
+
+def verbose_logging_enabled():
+    return bool(get_replication_settings()["VERBOSE_LOGGING"])
+
+
+@dataclass
+class SqlBlob:
+    content: bytes
+    checksum: str
+    modified: datetime.datetime
+    mtime: Optional[datetime.datetime]
+    content_type: str
+
+
+def fetch_blob_via_sql(bucket: str, name: str) -> Optional[SqlBlob]:
+    blobdb_connection = connections["blobdb"]
+    cursor = blobdb_connection.cursor()
+    cursor.execute(
+        """
+        SELECT content, checksum, modified, mtime, content_type FROM blobdb_blob
+        WHERE bucket=%s AND name=%s LIMIT 1
+        """,
+        [bucket, name],
+    )
+    row = cursor.fetchone()
+    col_names = [col[0] for col in cursor.description]
+    return None if row is None else SqlBlob(**{
+        col_name: row_val
+        for col_name, row_val in zip(col_names, row)
+    })
+
+
+def replicate_blob(bucket, name):
+    """Replicate a Blobdb blob to a Storage"""
+    if not replication_enabled(bucket):
+        if verbose_logging_enabled():
+            log.log(
+                f"Not replicating {bucket}:{name} because replication is not enabled for {bucket}"
+            )
+        return
+
+    try:
+        destination_storage = destination_storage_for(bucket)
+    except InvalidStorageError as e:
+        log.log(
+            f"Failed to replicate {bucket}:{name} because destination storage for {bucket} is not configured"
+        )
+        raise ReplicationError from e
+
+    blob = fetch_blob_via_sql(bucket, name)
+    if blob is None:
+        if verbose_logging_enabled():
+            log.log("Deleting {bucket}:{name} from replica")
+        try:
+            destination_storage.delete(name)
+        except Exception as e:
+            log.log("Failed to delete {bucket}:{name} from replica: {e}")
+            raise ReplicationError from e
+    else:
+        # Add metadata expected by the MetadataS3Storage
+        file_with_metadata = SimpleMetadataFile(file=BytesIO(blob.content))
+        file_with_metadata.content_type = blob.content_type
+        file_with_metadata.custom_metadata = {
+            "sha384": blob.checksum,
+            "mtime": (blob.mtime or blob.modified).isoformat(),
+        }
+        if verbose_logging_enabled():
+            log.log(
+                f"Saving {bucket}:{name} to replica ("
+                f"sha384: '{file_with_metadata.custom_metadata['sha384'][:16]}...', "
+                f"content_type: '{file_with_metadata.content_type}', "
+                f"mtime: '{file_with_metadata.custom_metadata['mtime']})"
+            )
+        try:
+            destination_storage.save(name, file_with_metadata)
+        except Exception as e:
+            log.log("Failed to save {bucket}:{name} to replica: {e}")
+            raise ReplicationError from e
+
+
+class ReplicationError(Exception):
+    pass
diff --git a/ietf/blobdb/routers.py b/ietf/blobdb/routers.py
new file mode 100644
index 0000000000..319c0fbc71
--- /dev/null
+++ b/ietf/blobdb/routers.py
@@ -0,0 +1,58 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from django.apps import apps
+
+from .apps import BlobdbConfig, get_blobdb
+
+
+class BlobdbStorageRouter:
+    """Database router for the Blobdb"""
+
+    _app_label = None
+
+    @property
+    def app_label(self):
+        if self._app_label is None:
+            for app in apps.get_app_configs():
+                if isinstance(app, BlobdbConfig):
+                    self._app_label = app.label
+                    break
+            if self._app_label is None:
+                raise RuntimeError(
+                    f"{BlobdbConfig.name} is not present in the Django app registry"
+                )
+        return self._app_label
+
+    @property
+    def db(self):
+        return get_blobdb()
+
+    def db_for_read(self, model, **hints):
+        """Suggest the database that should be used for read operations for objects of type model
+
+        Returns None if there is no suggestion.
+        """
+        if model._meta.app_label == self.app_label:
+            return self.db
+        return None  # no suggestion
+
+    def db_for_write(self, model, **hints):
+        """Suggest the database that should be used for write of objects of type model
+
+        Returns None if there is no suggestion.
+        """
+        if model._meta.app_label == self.app_label:
+            return self.db
+        return None  # no suggestion
+
+    def allow_migrate(self, db, app_label, model_name=None, **hints):
+        """Determine if the migration operation is allowed to run on the database with alias db
+
+        Return True if the operation should run, False if it shouldn’t run, or
+        None if the router has no opinion.
+        """
+        if self.db is None:
+            return None  # no opinion, use the default db
+        is_our_app = app_label == self.app_label
+        is_our_db = db == self.db
+        if is_our_app or is_our_db:
+            return is_our_app and is_our_db
diff --git a/ietf/blobdb/storage.py b/ietf/blobdb/storage.py
new file mode 100644
index 0000000000..4213ec801d
--- /dev/null
+++ b/ietf/blobdb/storage.py
@@ -0,0 +1,96 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from typing import Optional
+
+from django.core.exceptions import SuspiciousFileOperation
+from django.core.files.base import ContentFile
+from django.core.files.storage import Storage
+from django.db.models.functions import Length
+from django.utils.deconstruct import deconstructible
+from django.utils import timezone
+
+from ietf.utils.storage import MetadataFile
+from .models import Blob
+
+
+class BlobFile(MetadataFile):
+
+    def __init__(self, content, name=None, mtime=None, content_type=""):
+        super().__init__(
+            file=ContentFile(content),
+            name=name,
+            mtime=mtime,
+            content_type=content_type,
+        )
+
+
+@deconstructible
+class BlobdbStorage(Storage):
+
+    def __init__(self, bucket_name: Optional[str]=None):
+        if bucket_name is None:
+            raise ValueError("BlobdbStorage bucket_name must be specified")
+        self.bucket_name = bucket_name
+
+    def get_queryset(self):
+        return Blob.objects.filter(bucket=self.bucket_name)
+
+    def delete(self, name):
+        blob = self.get_queryset().filter(name=name).first()
+        if blob is not None:
+            blob.delete()
+
+    def exists(self, name):
+        return self.get_queryset().filter(name=name).exists()
+
+    def size(self, name):
+        sizes = (
+            self.get_queryset()
+            .filter(name=name)
+            .annotate(object_size=Length("content"))
+            .values_list("object_size", flat=True)
+        )
+        if len(sizes) == 0:
+            raise FileNotFoundError(
+                f"No object '{name}' exists in bucket '{self.bucket_name}'"
+            )
+        return sizes[0]  # unique constraint guarantees 0 or 1 entry
+
+    def _open(self, name, mode="rb"):
+        try:
+            blob = self.get_queryset().get(name=name)
+        except Blob.DoesNotExist:
+            raise FileNotFoundError(
+                f"No object '{name}' exists in bucket '{self.bucket_name}'"
+            )
+        return BlobFile(
+            content=blob.content,
+            name=blob.name,
+            mtime=blob.mtime or blob.modified,  # fall back to modified time
+            content_type=blob.content_type,
+        )
+
+    def _save(self, name, content):
+        """Perform the save operation
+        
+        The storage API allows _save() to save to a different name than was requested. This method will
+        never do that, instead overwriting the existing blob.
+        """
+        Blob.objects.update_or_create(
+            name=name,
+            bucket=self.bucket_name,
+            defaults={
+                "content": content.read(),
+                "modified": timezone.now(),
+                "mtime": getattr(content, "mtime", None),
+                "content_type": getattr(content, "content_type", ""),
+            },
+        )
+        return name
+
+    def get_available_name(self, name, max_length=None):
+        if max_length is not None and len(name) > max_length:
+            raise SuspiciousFileOperation(
+                f"BlobdbStorage only allows names up to {max_length}, but was"
+                f"asked to store the name '{name[:5]}...{name[-5:]} of length {len(name)}"
+            )
+        return name  # overwrite is permitted
diff --git a/ietf/blobdb/tasks.py b/ietf/blobdb/tasks.py
new file mode 100644
index 0000000000..538d415830
--- /dev/null
+++ b/ietf/blobdb/tasks.py
@@ -0,0 +1,17 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+import json
+
+from celery import shared_task
+
+from .replication import replicate_blob, ReplicationError
+
+
+@shared_task(
+    autoretry_for=(ReplicationError,), retry_backoff=10, retry_kwargs={"max_retries": 5}
+)
+def pybob_the_blob_replicator_task(body: str):
+    request = json.loads(body)
+    bucket = request["bucket"]
+    name = request["name"]
+    replicate_blob(bucket, name)
diff --git a/ietf/blobdb/tests.py b/ietf/blobdb/tests.py
new file mode 100644
index 0000000000..0eadad0a1f
--- /dev/null
+++ b/ietf/blobdb/tests.py
@@ -0,0 +1,80 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import datetime
+
+from django.core.files.base import ContentFile
+
+from ietf.utils.test_utils import TestCase
+from .factories import BlobFactory
+from .models import Blob
+from .storage import BlobFile, BlobdbStorage
+
+
+class StorageTests(TestCase):
+    def test_save(self):
+        storage = BlobdbStorage(bucket_name="my-bucket")
+        timestamp = datetime.datetime(
+            2025,
+            3,
+            17,
+            1,
+            2,
+            3,
+            tzinfo=datetime.timezone.utc,
+        )
+        # Create file to save
+        my_file = BlobFile(
+            content=b"These are my bytes.",
+            mtime=timestamp,
+            content_type="application/x-my-content-type",
+        )
+        # save the file
+        saved_name = storage.save("myfile.txt", my_file)
+        # validate the outcome
+        self.assertEqual(saved_name, "myfile.txt")
+        blob = Blob.objects.filter(bucket="my-bucket", name="myfile.txt").first()
+        self.assertIsNotNone(blob)  # validates bucket and name
+        self.assertEqual(bytes(blob.content), b"These are my bytes.")
+        self.assertEqual(blob.mtime, timestamp)
+        self.assertEqual(blob.content_type, "application/x-my-content-type")
+        
+    def test_save_naive_file(self):
+        storage = BlobdbStorage(bucket_name="my-bucket")
+        my_naive_file = ContentFile(content=b"These are my naive bytes.")
+        # save the file
+        saved_name = storage.save("myfile.txt", my_naive_file)
+        # validate the outcome
+        self.assertEqual(saved_name, "myfile.txt")
+        blob = Blob.objects.filter(bucket="my-bucket", name="myfile.txt").first()
+        self.assertIsNotNone(blob)  # validates bucket and name
+        self.assertEqual(bytes(blob.content), b"These are my naive bytes.")
+        self.assertIsNone(blob.mtime)
+        self.assertEqual(blob.content_type, "")
+
+    def test_open(self):
+        """BlobdbStorage open yields a BlobFile with specific mtime and content_type"""
+        mtime = datetime.datetime(2021, 1, 2, 3, 45, tzinfo=datetime.timezone.utc)
+        blob = BlobFactory(mtime=mtime, content_type="application/x-oh-no-you-didnt")
+        storage = BlobdbStorage(bucket_name=blob.bucket)
+        with storage.open(blob.name, "rb") as f:
+            self.assertTrue(isinstance(f, BlobFile))
+            assert isinstance(f, BlobFile)  # redundant, narrows type for linter
+            self.assertEqual(f.read(), bytes(blob.content))
+            self.assertEqual(f.mtime, mtime)
+            self.assertEqual(f.content_type, "application/x-oh-no-you-didnt")
+
+    def test_open_null_mtime(self):
+        """BlobdbStorage open yields a BlobFile with default mtime and content_type"""
+        blob = BlobFactory(content_type="application/x-oh-no-you-didnt")  # does not set mtime
+        storage = BlobdbStorage(bucket_name=blob.bucket)
+        with storage.open(blob.name, "rb") as f:
+            self.assertTrue(isinstance(f, BlobFile))
+            assert isinstance(f, BlobFile)  # redundant, narrows type for linter
+            self.assertEqual(f.read(), bytes(blob.content))
+            self.assertIsNotNone(f.mtime)
+            self.assertEqual(f.mtime, blob.modified)
+            self.assertEqual(f.content_type, "application/x-oh-no-you-didnt")
+
+    def test_open_file_not_found(self):
+        storage = BlobdbStorage(bucket_name="not-a-bucket")
+        with self.assertRaises(FileNotFoundError):
+            storage.open("definitely/not-a-file.txt")
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index db3b24b2d2..b492aa3423 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -1,10 +1,11 @@
-# Copyright The IETF Trust 2010-2021, All Rights Reserved
+# Copyright The IETF Trust 2010-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 from django.contrib import admin
 from django.db import models
 from django import forms
+from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
 
 from .models import (StateType, State, RelatedDocument, DocumentAuthor, Document, RelatedDocHistory,
     DocHistoryAuthor, DocHistory, DocReminder, DocEvent, NewRevisionDocEvent,
@@ -220,7 +221,18 @@ class DocExtResourceAdmin(admin.ModelAdmin):
 admin.site.register(DocExtResource, DocExtResourceAdmin)
 
 class StoredObjectAdmin(admin.ModelAdmin):
-    list_display = ['store', 'name', 'modified', 'deleted']
-    list_filter = ['deleted']
-    search_fields = ['store', 'name', 'doc_name', 'doc_rev', 'deleted']
+    list_display = ['store', 'name', 'doc_name', 'modified', 'is_deleted']
+    list_filter = [
+        'store',
+        ('modified', DateRangeQuickSelectListFilterBuilder()),
+        ('deleted', DateRangeQuickSelectListFilterBuilder()),
+    ]
+    search_fields = ['name', 'doc_name', 'doc_rev']
+    list_display_links = ['name']
+
+    @admin.display(boolean=True, description="Deleted?", ordering="deleted")
+    def is_deleted(self, instance):
+        return instance.deleted is not None
+    
+
 admin.site.register(StoredObject, StoredObjectAdmin)
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 55da70972c..b6f36cb8a7 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2010-2023, All Rights Reserved
+# Copyright The IETF Trust 2010-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -1615,3 +1615,6 @@ class Meta:
         indexes = [
             models.Index(fields=["doc_name", "doc_rev"]),
         ]
+
+    def __str__(self):
+        return f"{self.store}:{self.name}"
diff --git a/ietf/doc/storage.py b/ietf/doc/storage.py
new file mode 100644
index 0000000000..a234ef2d4f
--- /dev/null
+++ b/ietf/doc/storage.py
@@ -0,0 +1,178 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from typing import Optional
+
+import debug  # pyflakes:ignore
+import json
+
+from contextlib import contextmanager
+from storages.backends.s3 import S3Storage
+
+from django.core.files.base import File
+
+from ietf.blobdb.storage import BlobdbStorage
+from ietf.doc.models import StoredObject
+from ietf.utils.log import log
+from ietf.utils.storage import MetadataFile
+from ietf.utils.timezone import timezone
+
+
+class StoredObjectFile(MetadataFile):
+    """Django storage File object that represents a StoredObject"""
+    def __init__(self, file, name, mtime=None, content_type="", store=None, doc_name=None, doc_rev=None):
+        super().__init__(
+            file=file,
+            name=name,
+            mtime=mtime,
+            content_type=content_type,
+        )
+        self.store = store
+        self.doc_name = doc_name
+        self.doc_rev = doc_rev
+
+    @classmethod
+    def from_storedobject(cls, file, name, store):
+        """Alternate constructor for objects that already exist in the StoredObject table"""
+        stored_object = StoredObject.objects.filter(store=store, name=name, deleted__isnull=True).first()
+        if stored_object is None:
+            raise FileNotFoundError(f"StoredObject for {store}:{name} does not exist or was deleted")
+        file = cls(file, name, store, doc_name=stored_object.doc_name, doc_rev=stored_object.doc_rev)
+        if int(file.custom_metadata["len"]) != stored_object.len:
+            raise RuntimeError(f"File length changed unexpectedly for {store}:{name}")
+        if file.custom_metadata["sha384"] != stored_object.sha384:
+            raise RuntimeError(f"SHA-384 hash changed unexpectedly for {store}:{name}")
+        return file
+
+
+@contextmanager
+def maybe_log_timing(enabled, op, **kwargs):
+    """If enabled, log elapsed time and additional data from kwargs
+
+    Emits log even if an exception occurs
+    """
+    before = timezone.now()
+    exception = None
+    try:
+        yield
+    except Exception as err:
+        exception = err
+        raise
+    finally:
+        if enabled:
+            dt = timezone.now() - before
+            log(
+                json.dumps(
+                    {
+                        "log": "S3Storage_timing",
+                        "seconds": dt.total_seconds(),
+                        "op": op,
+                        "exception": "" if exception is None else repr(exception),
+                        **kwargs,
+                    }
+                )
+            )
+
+
+class MetadataS3Storage(S3Storage):
+    def get_default_settings(self):
+        # add a default for the ietf_log_blob_timing boolean
+        return super().get_default_settings() | {"ietf_log_blob_timing": False}
+
+    def _save(self, name, content: File):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing, "_save", bucket_name=self.bucket_name, name=name
+        ):
+            return super()._save(name, content)
+
+    def _open(self, name, mode="rb"):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing,
+            "_open",
+            bucket_name=self.bucket_name,
+            name=name,
+            mode=mode,
+        ):
+            return super()._open(name, mode)
+
+    def delete(self, name):
+        with maybe_log_timing(
+            self.ietf_log_blob_timing, "delete", bucket_name=self.bucket_name, name=name
+        ):
+            super().delete(name)
+
+    def _get_write_parameters(self, name, content=None):
+        # debug.show('f"getting write parameters for {name}"')
+        params = super()._get_write_parameters(name, content)
+        # If we have a non-empty explicit content type, use it
+        content_type = getattr(content, "content_type", "").strip()
+        if content_type != "":
+            params["ContentType"] = content_type
+        if "Metadata" not in params:
+            params["Metadata"] = {}
+        if hasattr(content, "custom_metadata"):
+            params["Metadata"].update(content.custom_metadata)
+        return params
+
+
+class StoredObjectBlobdbStorage(BlobdbStorage):
+    ietf_log_blob_timing = True
+    warn_if_missing = True  # TODO-BLOBSTORE make this configurable (or remove it)
+
+    def _save_stored_object(self, name, content) -> StoredObject:
+        now = timezone.now()
+        record, created = StoredObject.objects.get_or_create(
+            store=self.bucket_name,
+            name=name,
+            defaults=dict(
+                sha384=content.custom_metadata["sha384"],
+                len=int(content.custom_metadata["len"]),
+                store_created=now,
+                created=now,
+                modified=now,
+                doc_name=getattr(
+                    content,
+                    "doc_name",  # Note that these are assumed to be invariant
+                    None,  # should be blank?
+                ),
+                doc_rev=getattr(
+                    content,
+                    "doc_rev",  # for a given name
+                    None,  # should be blank?
+                ),
+            ),
+        )
+        if not created:
+            record.sha384 = content.custom_metadata["sha384"]
+            record.len = int(content.custom_metadata["len"])
+            record.modified = now
+            record.deleted = None
+            record.save()
+        return record
+
+    def _delete_stored_object(self, name) -> Optional[StoredObject]:
+        existing_record = StoredObject.objects.filter(store=self.bucket_name, name=name)
+        if not existing_record.exists() and self.warn_if_missing:
+            complaint = (
+                f"WARNING: Asked to delete {name} from {self.bucket_name} storage, "
+                f"but there was no matching StoredObject"
+            )
+            log(complaint)
+            debug.show("complaint")
+        else:
+            now = timezone.now()
+            # Note that existing_record is a queryset that will have one matching object
+            existing_record.filter(deleted__isnull=True).update(deleted=now)
+        return existing_record.first()
+
+    def _save(self, name, content):
+        """Perform the save operation 
+        
+        In principle the name could change on save to the blob store. As of now, BlobdbStorage
+        will not change it, but allow for that possibility. Callers should be prepared for this.
+        """
+        saved_name = super()._save(name, content)
+        self._save_stored_object(saved_name, content)
+        return saved_name
+
+    def delete(self, name):
+        self._delete_stored_object(name)
+        super().delete(name)
diff --git a/ietf/doc/storage_backends.py b/ietf/doc/storage_backends.py
deleted file mode 100644
index 5eeab040e5..0000000000
--- a/ietf/doc/storage_backends.py
+++ /dev/null
@@ -1,192 +0,0 @@
-# Copyright The IETF Trust 2025, All Rights Reserved
-
-import debug  # pyflakes:ignore
-import json
-
-from contextlib import contextmanager
-from hashlib import sha384
-from io import BufferedReader
-from storages.backends.s3 import S3Storage
-from typing import Optional, Union
-
-from django.core.files.base import File
-
-from ietf.doc.models import StoredObject
-from ietf.utils.log import log
-from ietf.utils.timezone import timezone
-
-
-@contextmanager
-def maybe_log_timing(enabled, op, **kwargs):
-    """If enabled, log elapsed time and additional data from kwargs
-
-    Emits log even if an exception occurs
-    """
-    before = timezone.now()
-    exception = None
-    try:
-        yield
-    except Exception as err:
-        exception = err
-        raise
-    finally:
-        if enabled:
-            dt = timezone.now() - before
-            log(
-                json.dumps(
-                    {
-                        "log": "S3Storage_timing",
-                        "seconds": dt.total_seconds(),
-                        "op": op,
-                        "exception": "" if exception is None else repr(exception),
-                        **kwargs,
-                    }
-                )
-            )
-
-
-# TODO-BLOBSTORE
-# Consider overriding save directly so that
-# we capture metadata for, e.g., ImageField objects
-class CustomS3Storage(S3Storage):
-
-    def __init__(self, **settings):
-        self.in_flight_custom_metadata = {}  # type is Dict[str, Dict[str, str]]
-        super().__init__(**settings)
-
-    def get_default_settings(self):
-        # add a default for the ietf_log_blob_timing boolean
-        return super().get_default_settings() | {"ietf_log_blob_timing": False}
-
-    def _save(self, name, content):
-        with maybe_log_timing(
-            self.ietf_log_blob_timing, "_save", bucket_name=self.bucket_name, name=name
-        ):
-            return super()._save(name, content)
-
-    def _open(self, name, mode="rb"):
-        with maybe_log_timing(
-            self.ietf_log_blob_timing,
-            "_open",
-            bucket_name=self.bucket_name,
-            name=name,
-            mode=mode,
-        ):
-            return super()._open(name, mode)
-
-    def delete(self, name):
-        with maybe_log_timing(
-            self.ietf_log_blob_timing, "delete", bucket_name=self.bucket_name, name=name
-        ):
-            super().delete(name)
-
-    def store_file(
-        self,
-        kind: str,
-        name: str,
-        file: Union[File, BufferedReader],
-        allow_overwrite: bool = False,
-        doc_name: Optional[str] = None,
-        doc_rev: Optional[str] = None,
-    ):
-        is_new = not self.exists_in_storage(kind, name)
-        # debug.show('f"Asked to store {name} in {kind}: is_new={is_new}, allow_overwrite={allow_overwrite}"')
-        if not allow_overwrite and not is_new:
-            log(f"Failed to save {kind}:{name} - name already exists in store")
-            debug.show('f"Failed to save {kind}:{name} - name already exists in store"')
-            # raise Exception("Not ignoring overwrite attempts while testing")
-        else:
-            try:
-                new_name = self.save(name, file)
-                now = timezone.now()
-                record, created = StoredObject.objects.get_or_create(
-                    store=kind,
-                    name=name,
-                    defaults=dict(
-                        sha384=self.in_flight_custom_metadata[name]["sha384"],
-                        len=int(self.in_flight_custom_metadata[name]["len"]),
-                        store_created=now,
-                        created=now,
-                        modified=now,
-                        doc_name=doc_name,  # Note that these are assumed to be invariant
-                        doc_rev=doc_rev,  # for a given name
-                    ),
-                )
-                if not created:
-                    record.sha384 = self.in_flight_custom_metadata[name]["sha384"]
-                    record.len = int(self.in_flight_custom_metadata[name]["len"])
-                    record.modified = now
-                    record.deleted = None
-                    record.save()
-                if new_name != name:
-                    complaint = f"Error encountered saving '{name}' - results stored in '{new_name}' instead."
-                    log(complaint)
-                    debug.show("complaint")
-                    # Note that we are otherwise ignoring this condition - it should become an error later.
-            except Exception as e:
-                # Log and then swallow the exception while we're learning.
-                # Don't let failure pass so quietly when these are the autoritative bits.
-                complaint = f"Failed to save {kind}:{name}"
-                log(complaint, e)
-                debug.show('f"{complaint}: {e}"')
-            finally:
-                del self.in_flight_custom_metadata[name]
-        return None
-
-    def exists_in_storage(self, kind: str, name: str) -> bool:
-        try:
-            # open is realized with a HEAD
-            # See https://github.com/jschneier/django-storages/blob/b79ea310201e7afd659fe47e2882fe59aae5b517/storages/backends/s3.py#L528
-            with self.open(name):
-                return True
-        except FileNotFoundError:
-            return False
-
-    def remove_from_storage(
-        self, kind: str, name: str, warn_if_missing: bool = True
-    ) -> None:
-        now = timezone.now()
-        try:
-            with self.open(name):
-                pass
-            self.delete(name)
-            # debug.show('f"deleted {name} from {kind} storage"')
-        except FileNotFoundError:
-            if warn_if_missing:
-                complaint = (
-                    f"WARNING: Asked to delete non-existent {name} from {kind} storage"
-                )
-                log(complaint)
-                debug.show("complaint")
-        existing_record = StoredObject.objects.filter(store=kind, name=name)
-        if not existing_record.exists() and warn_if_missing:
-            complaint = f"WARNING: Asked to delete {name} from {kind} storage, but there was no matching StorageObject"
-            log(complaint)
-            debug.show("complaint")
-        else:
-            # Note that existing_record is a queryset that will have one matching object
-            existing_record.filter(deleted__isnull=True).update(deleted=now)
-
-    def _get_write_parameters(self, name, content=None):
-        # debug.show('f"getting write parameters for {name}"')
-        params = super()._get_write_parameters(name, content)
-        if "Metadata" not in params:
-            params["Metadata"] = {}
-        try:
-            content.seek(0)
-        except AttributeError:  # TODO-BLOBSTORE
-            debug.say("Encountered Non-Seekable content")
-            raise NotImplementedError("cannot handle unseekable content")
-        content_bytes = content.read()
-        if not isinstance(
-            content_bytes, bytes
-        ):  # TODO-BLOBSTORE: This is sketch-development only -remove before committing
-            raise Exception(f"Expected bytes - got {type(content_bytes)}")
-        content.seek(0)
-        metadata = {
-            "len": f"{len(content_bytes)}",
-            "sha384": f"{sha384(content_bytes).hexdigest()}",
-        }
-        params["Metadata"].update(metadata)
-        self.in_flight_custom_metadata[name] = metadata
-        return params
diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 012efc9071..510c98c4f5 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -1,21 +1,19 @@
 # Copyright The IETF Trust 2025, All Rights Reserved
-
+import datetime
 from io import BufferedReader
 from typing import Optional, Union
+
 import debug  # pyflakes ignore
 
 from django.conf import settings
 from django.core.files.base import ContentFile, File
-from django.core.files.storage import storages
+from django.core.files.storage import storages, Storage
 
 from ietf.utils.log import log
 
 
-# TODO-BLOBSTORE (Future, maybe after leaving 3.9) : add a return type
-def _get_storage(kind: str):
-
-    if kind in settings.MORE_STORAGE_NAMES:
-        # TODO-BLOBSTORE - add a checker that verifies configuration will only return CustomS3Storages
+def _get_storage(kind: str) -> Storage:
+    if kind in settings.ARTIFACT_STORAGE_NAMES:
         return storages[kind]
     else:
         debug.say(f"Got into not-implemented looking for {kind}")
@@ -26,23 +24,35 @@ def exists_in_storage(kind: str, name: str) -> bool:
     if settings.ENABLE_BLOBSTORAGE:
         try:
             store = _get_storage(kind)
-            return store.exists_in_storage(kind, name)
+            with store.open(name):
+                return True
+        except FileNotFoundError:
+            return False
         except Exception as err:
             log(f"Blobstore Error: Failed to test existence of {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise
     return False
 
 
 def remove_from_storage(kind: str, name: str, warn_if_missing: bool = True) -> None:
     if settings.ENABLE_BLOBSTORAGE:
         try:
-            store = _get_storage(kind)
-            store.remove_from_storage(kind, name, warn_if_missing)
+            if exists_in_storage(kind, name):
+                _get_storage(kind).delete(name)
+            elif warn_if_missing:
+                complaint = (
+                    f"WARNING: Asked to delete non-existent {name} from {kind} storage"
+                )
+                debug.show("complaint")
+                log(complaint)
         except Exception as err:
             log(f"Blobstore Error: Failed to remove {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise
     return None
 
 
-# TODO-BLOBSTORE: Try to refactor `kind` out of the signature of the methods already on the custom store (which knows its kind)
 def store_file(
     kind: str,
     name: str,
@@ -50,14 +60,36 @@ def store_file(
     allow_overwrite: bool = False,
     doc_name: Optional[str] = None,
     doc_rev: Optional[str] = None,
+    content_type: str="",
+    mtime: Optional[datetime.datetime]=None,
 ) -> None:
-    # debug.show('f"asked to store {name} into {kind}"')
+    from .storage import StoredObjectFile  # avoid circular import
     if settings.ENABLE_BLOBSTORAGE:
         try:
-            store = _get_storage(kind)
-            store.store_file(kind, name, file, allow_overwrite, doc_name, doc_rev)
+            is_new = not exists_in_storage(kind, name)
+            # debug.show('f"Asked to store {name} in {kind}: is_new={is_new}, allow_overwrite={allow_overwrite}"')
+            if not allow_overwrite and not is_new:
+                debug.show('f"Failed to save {kind}:{name} - name already exists in store"')
+                raise RuntimeError(f"Failed to save {kind}:{name} - name already exists in store")
+            new_name = _get_storage(kind).save(
+                name,
+                StoredObjectFile(
+                    file=file,
+                    name=name,
+                    doc_name=doc_name,
+                    doc_rev=doc_rev,
+                    mtime=mtime,
+                    content_type=content_type,
+                ),
+            )
+            if new_name != name:
+                complaint = f"Error encountered saving '{name}' - results stored in '{new_name}' instead."
+                debug.show("complaint")
+                raise RuntimeError(complaint)
         except Exception as err:
             log(f"Blobstore Error: Failed to store file {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise  # TODO-BLOBSTORE eventually make this an error for all modes
     return None
 
 
@@ -68,13 +100,26 @@ def store_bytes(
     allow_overwrite: bool = False,
     doc_name: Optional[str] = None,
     doc_rev: Optional[str] = None,
+    content_type: str = "",
+    mtime: Optional[datetime.datetime] = None,
 ) -> None:
     if settings.ENABLE_BLOBSTORAGE:
         try:
-            store_file(kind, name, ContentFile(content), allow_overwrite)
+            store_file(
+                kind,
+                name,
+                ContentFile(content),
+                allow_overwrite,
+                doc_name,
+                doc_rev,
+                content_type,
+                mtime,
+            )
         except Exception as err:
             # n.b., not likely to get an exception here because store_file or store_bytes will catch it
             log(f"Blobstore Error: Failed to store bytes to {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise  # TODO-BLOBSTORE eventually make this an error for all modes
     return None
 
 
@@ -85,19 +130,32 @@ def store_str(
     allow_overwrite: bool = False,
     doc_name: Optional[str] = None,
     doc_rev: Optional[str] = None,
+    content_type: str = "",
+    mtime: Optional[datetime.datetime] = None,
 ) -> None:
     if settings.ENABLE_BLOBSTORAGE:
         try:
             content_bytes = content.encode("utf-8")
-            store_bytes(kind, name, content_bytes, allow_overwrite)
+            store_bytes(
+                kind,
+                name,
+                content_bytes,
+                allow_overwrite,
+                doc_name,
+                doc_rev,
+                content_type,
+                mtime,
+            )
         except Exception as err:
             # n.b., not likely to get an exception here because store_file or store_bytes will catch it
             log(f"Blobstore Error: Failed to store string to {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise  # TODO-BLOBSTORE eventually make this an error for all modes
     return None
 
 
 def retrieve_bytes(kind: str, name: str) -> bytes:
-    from ietf.doc.storage_backends import maybe_log_timing
+    from ietf.doc.storage import maybe_log_timing
     content = b""
     if settings.ENABLE_BLOBSTORAGE:
         try:
@@ -112,6 +170,8 @@ def retrieve_bytes(kind: str, name: str) -> bytes:
                     content = f.read()
         except Exception as err:
             log(f"Blobstore Error: Failed to read bytes from {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise
     return content
 
 
@@ -124,4 +184,6 @@ def retrieve_str(kind: str, name: str) -> str:
             content = content_bytes.decode("utf-8")
         except Exception as err:
             log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
+            if settings.SERVER_MODE == "development":
+                raise
     return content
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index e24c58e1e7..4f7fe37782 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2025, All Rights Reserved
 #
 # Celery task definitions
 #
diff --git a/ietf/message/views.py b/ietf/message/views.py
index e4cca63017..355dcdd8d2 100644
--- a/ietf/message/views.py
+++ b/ietf/message/views.py
@@ -1,3 +1,4 @@
+# Copyright The IETF Trust 2013-2025, All Rights Reserved
 from django.shortcuts import render, get_object_or_404
 
 from ietf.message.models import Message
diff --git a/ietf/settings.py b/ietf/settings.py
index 3f66e6abfe..0b6b3745d2 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -185,9 +185,11 @@
 
 ENABLE_BLOBSTORAGE = True
 
-BLOBSTORAGE_MAX_ATTEMPTS = 1
-BLOBSTORAGE_CONNECT_TIMEOUT = 2
-BLOBSTORAGE_READ_TIMEOUT = 2
+# "standard" retry mode is used, which does exponential backoff with a base factor of 2
+# and a cap of 20. 
+BLOBSTORAGE_MAX_ATTEMPTS = 5  # boto3 default is 3 (for "standard" retry mode)
+BLOBSTORAGE_CONNECT_TIMEOUT = 10  # seconds; boto3 default is 60
+BLOBSTORAGE_READ_TIMEOUT = 10  # seconds; boto3 default is 60
 
 WSGI_APPLICATION = "ietf.wsgi.application"
 
@@ -471,6 +473,7 @@ def skip_unreadable_post(record):
     'widget_tweaks',
     # IETF apps
     'ietf.api',
+    'ietf.blobdb',
     'ietf.community',
     'ietf.dbtemplate',
     'ietf.doc',
@@ -748,8 +751,8 @@ def skip_unreadable_post(record):
     "staticfiles": {"BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage"},
 }
 
-# settings_local will need to configure storages for these names
-MORE_STORAGE_NAMES: list[str] = [
+# Storages for artifacts stored as blobs
+ARTIFACT_STORAGE_NAMES: list[str] = [
     "bofreq",
     "charter",
     "conflrev",
@@ -774,6 +777,11 @@ def skip_unreadable_post(record):
     "photo",
     "review",
 ]
+for storagename in ARTIFACT_STORAGE_NAMES:
+    STORAGES[storagename] = {
+        "BACKEND": "ietf.doc.storage.StoredObjectBlobdbStorage",
+        "OPTIONS": {"bucket_name": storagename},
+    }
 
 # Override this in settings_local.py if needed
 # *_PATH variables ends with a slash/ .
@@ -1281,6 +1289,9 @@ def skip_unreadable_post(record):
 CELERY_CACHE_BACKEND = 'celery-results'  # which Django cache to use
 CELERY_RESULT_EXPIRES = datetime.timedelta(minutes=5)  # how long are results valid? (Default is 1 day)
 CELERY_TASK_IGNORE_RESULT = True  # ignore results unless specifically enabled for a task
+CELERY_TASK_ROUTES = {
+    "ietf.blobdb.tasks.pybob_the_blob_replicator_task": {"queue": "blobdb"}
+}
 
 # Meetecho API setup: Uncomment this and provide real credentials to enable
 # Meetecho conference creation for interim session requests
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index fe77152d42..644a6d5b16 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -14,8 +14,7 @@
 import shutil
 import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import STORAGES, TEST_CODE_COVERAGE_CHECKER, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
-import botocore.config
+from ietf.settings import TEST_CODE_COVERAGE_CHECKER
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -49,6 +48,10 @@ def __getitem__(self, item):
         },
     }
 
+# test with a single DB - do not use a DB router
+BLOBDB_DATABASE = "default"
+DATABASE_ROUTERS: list[str] = []
+
 if TEST_CODE_COVERAGE_CHECKER and not TEST_CODE_COVERAGE_CHECKER._started: # pyflakes:ignore
     TEST_CODE_COVERAGE_CHECKER.start()                          # pyflakes:ignore
 
@@ -115,21 +118,3 @@ def tempdir_with_cleanup(**kwargs):
 _blob_store_enable_profiling = (
     os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
 )
-for storagename in MORE_STORAGE_NAMES:
-    STORAGES[storagename] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
-        "OPTIONS": dict(
-            endpoint_url=_blob_store_endpoint_url,
-            access_key=_blob_store_access_key,
-            secret_key=_blob_store_secret_key,
-            security_token=None,
-            client_config=botocore.config.Config(
-                signature_version="s3v4",
-                connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
-                read_timeout=BLOBSTORAGE_READ_TIMEOUT,
-                retries={"total_max_attempts": BLOBSTORAGE_MAX_ATTEMPTS},
-            ),
-            bucket_name=f"{_blob_store_bucket_prefix}{storagename}",
-            ietf_log_blob_timing=_blob_store_enable_profiling,
-        ),
-    }
diff --git a/ietf/utils/storage.py b/ietf/utils/storage.py
index 42fcf884aa..bad5af5178 100644
--- a/ietf/utils/storage.py
+++ b/ietf/utils/storage.py
@@ -1,8 +1,12 @@
 # Copyright The IETF Trust 2020-2025, All Rights Reserved
 """Django Storage classes"""
+import datetime
+from hashlib import sha384
 from pathlib import Path
+from typing import Optional
 
 from django.conf import settings
+from django.core.files.base import File
 from django.core.files.storage import FileSystemStorage
 from ietf.doc.storage_utils import store_file
 from .log import log
@@ -48,9 +52,44 @@ def save(self, name, content, max_length=None):
                     store_file(self.kind, blob_name, f, allow_overwrite=True)
             except Exception as err:
                 log(f"Blobstore Error: Failed to shadow {saved_name} at {self.kind}:{blob_name}: {repr(err)}")
+                if settings.SERVER_MODE == "development":
+                    raise
         return saved_name  # includes the path!
 
     def deconstruct(self):
         path, args, kwargs = super().deconstruct()
         kwargs["kind"] = ""  # don't record "kind" in migrations
         return path, args, kwargs
+
+
+class MetadataFile(File):
+    """File that includes metadata"""
+
+    def __init__(self, file, name=None, mtime: Optional[datetime.datetime]=None, content_type=""):
+        super().__init__(file=file, name=name)
+        self.mtime = mtime
+        self.content_type = content_type
+        self._custom_metadata = None
+
+    @property
+    def custom_metadata(self):
+        if self._custom_metadata is None:
+            self._custom_metadata = self._compute_custom_metadata()
+        return self._custom_metadata
+
+    def _compute_custom_metadata(self):
+        try:
+            self.file.seek(0)
+        except AttributeError:  # TODO-BLOBSTORE
+            raise NotImplementedError("cannot handle unseekable content")
+        content_bytes = self.file.read()
+        if not isinstance(
+            content_bytes, bytes
+        ):  # TODO-BLOBSTORE: This is sketch-development only -remove before committing
+            raise Exception(f"Expected bytes - got {type(content_bytes)}")
+        self.file.seek(0)
+        return {
+            "len": f"{len(content_bytes)}",
+            "sha384": f"{sha384(content_bytes).hexdigest()}",
+            "mtime": None if self.mtime is None else self.mtime.isoformat(),
+        }
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index c06e7876db..bfe5a56597 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -1268,7 +1268,7 @@ class TestBlobstoreManager():
     )
 
     def createTestBlobstores(self):
-        for storagename in settings.MORE_STORAGE_NAMES:
+        for storagename in settings.ARTIFACT_STORAGE_NAMES:
             bucketname = f"test-{storagename}"
             try:
                 bucket = self.blobstore.create_bucket(Bucket=bucketname)
diff --git a/k8s/beat.yaml b/k8s/beat.yaml
index 9a8fe2f0a4..cc98beecf6 100644
--- a/k8s/beat.yaml
+++ b/k8s/beat.yaml
@@ -36,10 +36,6 @@ spec:
         - name: beat
           image: "ghcr.io/ietf-tools/datatracker:$APP_IMAGE_TAG"
           imagePullPolicy: Always
-          ports:
-            - containerPort: 8000
-              name: http
-              protocol: TCP
           volumeMounts:
             - name: dt-vol
               mountPath: /a
@@ -63,7 +59,7 @@ spec:
             runAsUser: 1000
             runAsGroup: 1000
       volumes:
-        # To be overriden with the actual shared volume
+        # To be overridden with the actual shared volume
         - name: dt-vol
         - name: dt-tmp
           emptyDir:
diff --git a/k8s/celery.yaml b/k8s/celery.yaml
index 15f3bf0c7c..a2799f2a6d 100644
--- a/k8s/celery.yaml
+++ b/k8s/celery.yaml
@@ -36,10 +36,6 @@ spec:
         - name: celery
           image: "ghcr.io/ietf-tools/datatracker:$APP_IMAGE_TAG"
           imagePullPolicy: Always
-          ports:
-            - containerPort: 8000
-              name: http
-              protocol: TCP
           volumeMounts:
             - name: dt-vol
               mountPath: /a
@@ -92,7 +88,7 @@ spec:
             runAsUser: 65534 # "nobody" user by default
             runAsGroup: 65534  # "nogroup" group by default
       volumes:
-        # To be overriden with the actual shared volume
+        # To be overridden with the actual shared volume
         - name: dt-vol
         - name: dt-tmp
           emptyDir:
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index 2b623da2bd..769cb03517 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -14,3 +14,4 @@ resources:
   - datatracker.yaml
   - memcached.yaml
   - rabbitmq.yaml
+  - replicator.yaml
diff --git a/k8s/replicator.yaml b/k8s/replicator.yaml
new file mode 100644
index 0000000000..9c462bd96b
--- /dev/null
+++ b/k8s/replicator.yaml
@@ -0,0 +1,82 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: replicator
+  labels:
+    deleteBeforeUpgrade: yes
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: replicator
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: replicator
+    spec:
+      affinity:
+        podAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app
+                    operator: In
+                    values:
+                      - datatracker
+              topologyKey: "kubernetes.io/hostname"
+      securityContext:
+        runAsNonRoot: true
+      containers:
+        # -----------------------------------------------------
+        # Celery Container
+        # -----------------------------------------------------
+        - name: celery
+          image: "ghcr.io/ietf-tools/datatracker:$APP_IMAGE_TAG"
+          imagePullPolicy: Always
+          volumeMounts:
+            - name: dt-vol
+              mountPath: /a
+            - name: dt-tmp
+              mountPath: /tmp
+            - name: dt-home
+              mountPath: /home/datatracker
+            - name: dt-xml2rfc-cache
+              mountPath: /var/cache/xml2rfc
+            - name: dt-cfg
+              mountPath: /workspace/ietf/settings_local.py
+              subPath: settings_local.py
+          env:
+            - name: "CONTAINER_ROLE"
+              value: "replicator"
+          envFrom:
+            - secretRef:
+                name: dt-secrets-env
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+              - ALL
+            readOnlyRootFilesystem: true
+            runAsUser: 1000
+            runAsGroup: 1000
+      volumes:
+        # To be overridden with the actual shared volume
+        - name: dt-vol
+        - name: dt-tmp
+          emptyDir:
+            sizeLimit: "2Gi"
+        - name: dt-xml2rfc-cache
+          emptyDir:
+            sizeLimit: "2Gi"
+        - name: dt-home
+          emptyDir:
+            sizeLimit: "2Gi"
+        - name: dt-cfg
+          configMap:
+            name: files-cfgmap
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 600
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 0f4ecaa631..074888728f 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -7,7 +7,13 @@
 
 from ietf import __release_hash__
 from ietf.settings import *  # pyflakes:ignore
-from ietf.settings import STORAGES, MORE_STORAGE_NAMES, BLOBSTORAGE_CONNECT_TIMEOUT, BLOBSTORAGE_READ_TIMEOUT, BLOBSTORAGE_MAX_ATTEMPTS
+from ietf.settings import (
+    STORAGES,
+    ARTIFACT_STORAGE_NAMES,
+    BLOBSTORAGE_CONNECT_TIMEOUT,
+    BLOBSTORAGE_READ_TIMEOUT,
+    BLOBSTORAGE_MAX_ATTEMPTS,
+)
 import botocore.config
 
 
@@ -92,8 +98,20 @@ def _multiline_to_list(s):
         "PASSWORD": os.environ.get("DATATRACKER_DB_PASS", ""),
         "OPTIONS": json.loads(os.environ.get("DATATRACKER_DB_OPTS_JSON", "{}")),
     },
+    "blobdb": {
+        "HOST": os.environ.get("BLOBDB_DB_HOST", "blobdb"),
+        "PORT": os.environ.get("BLOBDB_DB_PORT", "5432"),
+        "NAME": os.environ.get("BLOBDB_DB_NAME", "blob"),
+        "ENGINE": "django.db.backends.postgresql",
+        "USER": os.environ.get("BLOBDB_DB_USER", "django"),
+        "PASSWORD": os.environ.get("BLOBDB_DB_PASS", ""),
+        "OPTIONS": json.loads(os.environ.get("BLOBDB_DB_OPTS_JSON", "{}")),
+    },
 }
 
+DATABASE_ROUTERS = ["ietf.blobdb.routers.BlobdbStorageRouter"]
+BLOBDB_DATABASE = "blobdb"
+
 # Configure persistent connections. A setting of 0 is Django's default.
 _conn_max_age = os.environ.get("DATATRACKER_DB_CONN_MAX_AGE", "0")
 # A string "none" means unlimited age.
@@ -129,7 +147,9 @@ def _multiline_to_list(s):
 )
 
 # mailarchive API key
-_mailing_list_archive_api_key = os.environ.get("DATATRACKER_MAILING_LIST_ARCHIVE_API_KEY", None)
+_mailing_list_archive_api_key = os.environ.get(
+    "DATATRACKER_MAILING_LIST_ARCHIVE_API_KEY", None
+)
 if _mailing_list_archive_api_key is None:
     raise RuntimeError("DATATRACKER_MAILING_LIST_ARCHIVE_API_KEY must be set")
 MAILING_LIST_ARCHIVE_API_KEY = _mailing_list_archive_api_key
@@ -178,7 +198,7 @@ def _multiline_to_list(s):
 # paste the encoded secret into stdin. Copy/paste that into an editor you trust not
 # to leave a copy lying around. When done editing, copy/paste the final JSON through
 #    jq -c | base64
-# and copy/paste the output into the secret store. 
+# and copy/paste the output into the secret store.
 if "DATATRACKER_APP_API_TOKENS_JSON_B64" in os.environ:
     if "DATATRACKER_APP_API_TOKENS_JSON" in os.environ:
         raise RuntimeError(
@@ -307,7 +327,7 @@ def _multiline_to_list(s):
 # Console logs as JSON instead of plain when running in k8s
 LOGGING["handlers"]["console"]["formatter"] = "json"
 
-# Configure storages for the blob store
+# Configure storages for the replica blob store
 _blob_store_endpoint_url = os.environ.get("DATATRACKER_BLOB_STORE_ENDPOINT_URL")
 _blob_store_access_key = os.environ.get("DATATRACKER_BLOB_STORE_ACCESS_KEY")
 _blob_store_secret_key = os.environ.get("DATATRACKER_BLOB_STORE_SECRET_KEY")
@@ -316,9 +336,7 @@ def _multiline_to_list(s):
         "All of DATATRACKER_BLOB_STORE_ENDPOINT_URL, DATATRACKER_BLOB_STORE_ACCESS_KEY, "
         "and DATATRACKER_BLOB_STORE_SECRET_KEY must be set"
     )
-_blob_store_bucket_prefix = os.environ.get(
-    "DATATRACKER_BLOB_STORE_BUCKET_PREFIX", ""
-)
+_blob_store_bucket_prefix = os.environ.get("DATATRACKER_BLOB_STORE_BUCKET_PREFIX", "")
 _blob_store_enable_profiling = (
     os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
 )
@@ -326,14 +344,20 @@ def _multiline_to_list(s):
     os.environ.get("DATATRACKER_BLOB_STORE_MAX_ATTEMPTS", BLOBSTORAGE_MAX_ATTEMPTS)
 )
 _blob_store_connect_timeout = float(
-    os.environ.get("DATATRACKER_BLOB_STORE_CONNECT_TIMEOUT", BLOBSTORAGE_CONNECT_TIMEOUT)
+    os.environ.get(
+        "DATATRACKER_BLOB_STORE_CONNECT_TIMEOUT", BLOBSTORAGE_CONNECT_TIMEOUT
+    )
 )
 _blob_store_read_timeout = float(
     os.environ.get("DATATRACKER_BLOB_STORE_READ_TIMEOUT", BLOBSTORAGE_READ_TIMEOUT)
 )
-for storage_name in MORE_STORAGE_NAMES:
-    STORAGES[storage_name] = {
-        "BACKEND": "ietf.doc.storage_backends.CustomS3Storage",
+
+for storagename in ARTIFACT_STORAGE_NAMES:
+    if storagename in ["staging"]:
+        continue
+    replica_storagename = f"r2-{storagename}"
+    STORAGES[replica_storagename] = {
+        "BACKEND": "ietf.doc.storage.MetadataS3Storage",
         "OPTIONS": dict(
             endpoint_url=_blob_store_endpoint_url,
             access_key=_blob_store_access_key,
@@ -345,7 +369,25 @@ def _multiline_to_list(s):
                 read_timeout=_blob_store_read_timeout,
                 retries={"total_max_attempts": _blob_store_max_attempts},
             ),
-            bucket_name=f"{_blob_store_bucket_prefix}{storage_name}".strip(),
+            verify=False,
+            bucket_name=f"{_blob_store_bucket_prefix}{storagename}".strip(),
             ietf_log_blob_timing=_blob_store_enable_profiling,
         ),
     }
+
+# Configure the blobdb app for artifact storage
+_blobdb_replication_enabled = (
+    os.environ.get("DATATRACKER_BLOBDB_REPLICATION_ENABLED", "true").lower() == "true"
+)
+_blobdb_replication_verbose_logging = (
+    os.environ.get("DATATRACKER_BLOBDB_REPLICATION_VERBOSE_LOGGING", "false").lower()
+    == "true"
+)
+
+BLOBDB_REPLICATION = {
+    "ENABLED": _blobdb_replication_enabled,
+    "DEST_STORAGE_PATTERN": "r2-{bucket}",
+    "INCLUDE_BUCKETS": ARTIFACT_STORAGE_NAMES,
+    "EXCLUDE_BUCKETS": ["staging"],
+    "VERBOSE_LOGGING": _blobdb_replication_verbose_logging,
+}

From 7e9cd9c79caedd376e4671cf55206bd7dc409fdf Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Jun 2025 16:56:51 -0300
Subject: [PATCH 340/707] chore: lint, lint everywhere (#8995)

---
 ietf/settings_test.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 644a6d5b16..b5da9b833b 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -50,7 +50,7 @@ def __getitem__(self, item):
 
 # test with a single DB - do not use a DB router
 BLOBDB_DATABASE = "default"
-DATABASE_ROUTERS: list[str] = []
+DATABASE_ROUTERS = []  # type: ignore
 
 if TEST_CODE_COVERAGE_CHECKER and not TEST_CODE_COVERAGE_CHECKER._started: # pyflakes:ignore
     TEST_CODE_COVERAGE_CHECKER.start()                          # pyflakes:ignore

From 1377503077c2acd22e0d7fee2757c0308ff249ff Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 14 Jun 2025 01:54:42 -0400
Subject: [PATCH 341/707] chore(deps): bump @actions/github (#8894)

Bumps the npm group in /dev/coverage-action with 1 update: [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github).


Updates `@actions/github` from 6.0.0 to 6.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/coverage-action/package-lock.json | 326 ++++++++++++++++----------
 dev/coverage-action/package.json      |   2 +-
 2 files changed, 197 insertions(+), 131 deletions(-)

diff --git a/dev/coverage-action/package-lock.json b/dev/coverage-action/package-lock.json
index 33aed07072..4a1ff1e03d 100644
--- a/dev/coverage-action/package-lock.json
+++ b/dev/coverage-action/package-lock.json
@@ -10,7 +10,7 @@
       "license": "BSD-3-Clause",
       "dependencies": {
         "@actions/core": "1.11.1",
-        "@actions/github": "6.0.0",
+        "@actions/github": "6.0.1",
         "lodash": "4.17.21",
         "luxon": "3.6.1"
       }
@@ -33,14 +33,18 @@
       }
     },
     "node_modules/@actions/github": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.0.tgz",
-      "integrity": "sha512-alScpSVnYmjNEXboZjarjukQEzgCRmjMv6Xj47fsdnqGS73bjJNDpiiXmp8jr0UZLdUB6d9jW63IcmddUP+l0g==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.1.tgz",
+      "integrity": "sha512-xbZVcaqD4XnQAe35qSQqskb3SqIAfRyLBrHMd/8TuL7hJSz2QtbDwnNM8zWx4zO5l2fnGtseNE3MbEvD7BxVMw==",
+      "license": "MIT",
       "dependencies": {
         "@actions/http-client": "^2.2.0",
         "@octokit/core": "^5.0.1",
-        "@octokit/plugin-paginate-rest": "^9.0.0",
-        "@octokit/plugin-rest-endpoint-methods": "^10.0.0"
+        "@octokit/plugin-paginate-rest": "^9.2.2",
+        "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "undici": "^5.28.5"
       }
     },
     "node_modules/@actions/http-client": {
@@ -69,20 +73,22 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
       "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
+      "license": "MIT",
       "engines": {
         "node": ">= 18"
       }
     },
     "node_modules/@octokit/core": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.0.1.tgz",
-      "integrity": "sha512-lyeeeZyESFo+ffI801SaBKmCfsvarO+dgV8/0gD8u1d87clbEdWsP5yC+dSj3zLhb2eIf5SJrn6vDz9AheETHw==",
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.1.tgz",
+      "integrity": "sha512-dKYCMuPO1bmrpuogcjQ8z7ICCH3FP6WmxpwC03yjzGfZhj9fTJg6+bS1+UAplekbN2C+M61UNllGOOoAfGCrdQ==",
+      "license": "MIT",
       "dependencies": {
         "@octokit/auth-token": "^4.0.0",
-        "@octokit/graphql": "^7.0.0",
-        "@octokit/request": "^8.0.2",
-        "@octokit/request-error": "^5.0.0",
-        "@octokit/types": "^12.0.0",
+        "@octokit/graphql": "^7.1.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.0.0",
         "before-after-hook": "^2.2.0",
         "universal-user-agent": "^6.0.0"
       },
@@ -91,12 +97,12 @@
       }
     },
     "node_modules/@octokit/endpoint": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.1.tgz",
-      "integrity": "sha512-hRlOKAovtINHQPYHZlfyFwaM8OyetxeoC81lAkBy34uLb8exrZB50SQdeW3EROqiY9G9yxQTpp5OHTV54QD+vA==",
+      "version": "9.0.6",
+      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
+      "integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/types": "^12.0.0",
-        "is-plain-object": "^5.0.0",
+        "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
       },
       "engines": {
@@ -104,12 +110,13 @@
       }
     },
     "node_modules/@octokit/graphql": {
-      "version": "7.0.2",
-      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.0.2.tgz",
-      "integrity": "sha512-OJ2iGMtj5Tg3s6RaXH22cJcxXRi7Y3EBqbHTBRq+PQAqfaS8f/236fUrWhfSn8P4jovyzqucxme7/vWSSZBX2Q==",
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
+      "integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/request": "^8.0.1",
-        "@octokit/types": "^12.0.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/types": "^13.0.0",
         "universal-user-agent": "^6.0.0"
       },
       "engines": {
@@ -117,47 +124,80 @@
       }
     },
     "node_modules/@octokit/openapi-types": {
-      "version": "19.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-19.0.0.tgz",
-      "integrity": "sha512-PclQ6JGMTE9iUStpzMkwLCISFn/wDeRjkZFIKALpvJQNBGwDoYYi2fFvuHwssoQ1rXI5mfh6jgTgWuddeUzfWw=="
+      "version": "24.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+      "license": "MIT"
     },
     "node_modules/@octokit/plugin-paginate-rest": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.0.0.tgz",
-      "integrity": "sha512-oIJzCpttmBTlEhBmRvb+b9rlnGpmFgDtZ0bB6nq39qIod6A5DP+7RkVLMOixIgRCYSHDTeayWqmiJ2SZ6xgfdw==",
+      "version": "9.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
+      "integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/types": "^12.0.0"
+        "@octokit/types": "^12.6.0"
       },
       "engines": {
         "node": ">= 18"
       },
       "peerDependencies": {
-        "@octokit/core": ">=5"
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
       }
     },
     "node_modules/@octokit/plugin-rest-endpoint-methods": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.0.1.tgz",
-      "integrity": "sha512-fgS6HPkPvJiz8CCliewLyym9qAx0RZ/LKh3sATaPfM41y/O2wQ4Z9MrdYeGPVh04wYmHFmWiGlKPC7jWVtZXQA==",
+      "version": "10.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
+      "integrity": "sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/types": "^12.0.0"
+        "@octokit/types": "^12.6.0"
       },
       "engines": {
         "node": ">= 18"
       },
       "peerDependencies": {
-        "@octokit/core": ">=5"
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^20.0.0"
       }
     },
     "node_modules/@octokit/request": {
-      "version": "8.1.4",
-      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.1.4.tgz",
-      "integrity": "sha512-M0aaFfpGPEKrg7XoA/gwgRvc9MSXHRO2Ioki1qrPDbl1e9YhjIwVoHE7HIKmv/m3idzldj//xBujcFNqGX6ENA==",
+      "version": "8.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
+      "integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/endpoint": "^9.0.0",
-        "@octokit/request-error": "^5.0.0",
-        "@octokit/types": "^12.0.0",
-        "is-plain-object": "^5.0.0",
+        "@octokit/endpoint": "^9.0.6",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
       },
       "engines": {
@@ -165,11 +205,12 @@
       }
     },
     "node_modules/@octokit/request-error": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.0.1.tgz",
-      "integrity": "sha512-X7pnyTMV7MgtGmiXBwmO6M5kIPrntOXdyKZLigNfQWSEQzVxR4a4vo49vJjTWX70mPndj8KhfT4Dx+2Ng3vnBQ==",
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
+      "integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/types": "^12.0.0",
+        "@octokit/types": "^13.1.0",
         "deprecation": "^2.0.0",
         "once": "^1.4.0"
       },
@@ -178,30 +219,25 @@
       }
     },
     "node_modules/@octokit/types": {
-      "version": "12.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.0.0.tgz",
-      "integrity": "sha512-EzD434aHTFifGudYAygnFlS1Tl6KhbTynEWELQXIbTY8Msvb5nEqTZIm7sbPEt4mQYLZwu3zPKVdeIrw0g7ovg==",
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/openapi-types": "^19.0.0"
+        "@octokit/openapi-types": "^24.2.0"
       }
     },
     "node_modules/before-after-hook": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
-      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ=="
+      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==",
+      "license": "Apache-2.0"
     },
     "node_modules/deprecation": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz",
-      "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ=="
-    },
-    "node_modules/is-plain-object": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz",
-      "integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==",
-      "engines": {
-        "node": ">=0.10.0"
-      }
+      "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==",
+      "license": "ISC"
     },
     "node_modules/lodash": {
       "version": "4.17.21",
@@ -220,7 +256,8 @@
     "node_modules/once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
-      "integrity": "sha1-WDsap3WWHUsROsF9nFC6753Xa9E=",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
       "dependencies": {
         "wrappy": "1"
       }
@@ -234,9 +271,10 @@
       }
     },
     "node_modules/undici": {
-      "version": "5.26.4",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-5.26.4.tgz",
-      "integrity": "sha512-OG+QOf0fTLtazL9P9X7yqWxQ+Z0395Wk6DSkyTxtaq3wQEjIroVe7Y4asCX/vcCxYpNGMnwz8F0qbRYUoaQVMw==",
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
+      "license": "MIT",
       "dependencies": {
         "@fastify/busboy": "^2.0.0"
       },
@@ -245,14 +283,16 @@
       }
     },
     "node_modules/universal-user-agent": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz",
-      "integrity": "sha512-isyNax3wXoKaulPDZWHQqbmIx1k2tb9fb3GGDBRxCscfYV2Ch7WxPArBsFEG8s/safwXTT7H4QGhaIkTp9447w=="
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
+      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ==",
+      "license": "ISC"
     },
     "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "license": "ISC"
     }
   },
   "dependencies": {
@@ -274,14 +314,17 @@
       }
     },
     "@actions/github": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.0.tgz",
-      "integrity": "sha512-alScpSVnYmjNEXboZjarjukQEzgCRmjMv6Xj47fsdnqGS73bjJNDpiiXmp8jr0UZLdUB6d9jW63IcmddUP+l0g==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.1.tgz",
+      "integrity": "sha512-xbZVcaqD4XnQAe35qSQqskb3SqIAfRyLBrHMd/8TuL7hJSz2QtbDwnNM8zWx4zO5l2fnGtseNE3MbEvD7BxVMw==",
       "requires": {
         "@actions/http-client": "^2.2.0",
         "@octokit/core": "^5.0.1",
-        "@octokit/plugin-paginate-rest": "^9.0.0",
-        "@octokit/plugin-rest-endpoint-methods": "^10.0.0"
+        "@octokit/plugin-paginate-rest": "^9.2.2",
+        "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "undici": "^5.28.5"
       }
     },
     "@actions/http-client": {
@@ -309,88 +352,116 @@
       "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA=="
     },
     "@octokit/core": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.0.1.tgz",
-      "integrity": "sha512-lyeeeZyESFo+ffI801SaBKmCfsvarO+dgV8/0gD8u1d87clbEdWsP5yC+dSj3zLhb2eIf5SJrn6vDz9AheETHw==",
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.1.tgz",
+      "integrity": "sha512-dKYCMuPO1bmrpuogcjQ8z7ICCH3FP6WmxpwC03yjzGfZhj9fTJg6+bS1+UAplekbN2C+M61UNllGOOoAfGCrdQ==",
       "requires": {
         "@octokit/auth-token": "^4.0.0",
-        "@octokit/graphql": "^7.0.0",
-        "@octokit/request": "^8.0.2",
-        "@octokit/request-error": "^5.0.0",
-        "@octokit/types": "^12.0.0",
+        "@octokit/graphql": "^7.1.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.0.0",
         "before-after-hook": "^2.2.0",
         "universal-user-agent": "^6.0.0"
       }
     },
     "@octokit/endpoint": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.1.tgz",
-      "integrity": "sha512-hRlOKAovtINHQPYHZlfyFwaM8OyetxeoC81lAkBy34uLb8exrZB50SQdeW3EROqiY9G9yxQTpp5OHTV54QD+vA==",
+      "version": "9.0.6",
+      "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
+      "integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
       "requires": {
-        "@octokit/types": "^12.0.0",
-        "is-plain-object": "^5.0.0",
+        "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
       }
     },
     "@octokit/graphql": {
-      "version": "7.0.2",
-      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.0.2.tgz",
-      "integrity": "sha512-OJ2iGMtj5Tg3s6RaXH22cJcxXRi7Y3EBqbHTBRq+PQAqfaS8f/236fUrWhfSn8P4jovyzqucxme7/vWSSZBX2Q==",
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
+      "integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
       "requires": {
-        "@octokit/request": "^8.0.1",
-        "@octokit/types": "^12.0.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/types": "^13.0.0",
         "universal-user-agent": "^6.0.0"
       }
     },
     "@octokit/openapi-types": {
-      "version": "19.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-19.0.0.tgz",
-      "integrity": "sha512-PclQ6JGMTE9iUStpzMkwLCISFn/wDeRjkZFIKALpvJQNBGwDoYYi2fFvuHwssoQ1rXI5mfh6jgTgWuddeUzfWw=="
+      "version": "24.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg=="
     },
     "@octokit/plugin-paginate-rest": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.0.0.tgz",
-      "integrity": "sha512-oIJzCpttmBTlEhBmRvb+b9rlnGpmFgDtZ0bB6nq39qIod6A5DP+7RkVLMOixIgRCYSHDTeayWqmiJ2SZ6xgfdw==",
+      "version": "9.2.2",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
+      "integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
       "requires": {
-        "@octokit/types": "^12.0.0"
+        "@octokit/types": "^12.6.0"
+      },
+      "dependencies": {
+        "@octokit/openapi-types": {
+          "version": "20.0.0",
+          "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+          "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA=="
+        },
+        "@octokit/types": {
+          "version": "12.6.0",
+          "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+          "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+          "requires": {
+            "@octokit/openapi-types": "^20.0.0"
+          }
+        }
       }
     },
     "@octokit/plugin-rest-endpoint-methods": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.0.1.tgz",
-      "integrity": "sha512-fgS6HPkPvJiz8CCliewLyym9qAx0RZ/LKh3sATaPfM41y/O2wQ4Z9MrdYeGPVh04wYmHFmWiGlKPC7jWVtZXQA==",
+      "version": "10.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
+      "integrity": "sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==",
       "requires": {
-        "@octokit/types": "^12.0.0"
+        "@octokit/types": "^12.6.0"
+      },
+      "dependencies": {
+        "@octokit/openapi-types": {
+          "version": "20.0.0",
+          "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+          "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA=="
+        },
+        "@octokit/types": {
+          "version": "12.6.0",
+          "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+          "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+          "requires": {
+            "@octokit/openapi-types": "^20.0.0"
+          }
+        }
       }
     },
     "@octokit/request": {
-      "version": "8.1.4",
-      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.1.4.tgz",
-      "integrity": "sha512-M0aaFfpGPEKrg7XoA/gwgRvc9MSXHRO2Ioki1qrPDbl1e9YhjIwVoHE7HIKmv/m3idzldj//xBujcFNqGX6ENA==",
+      "version": "8.4.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
+      "integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
       "requires": {
-        "@octokit/endpoint": "^9.0.0",
-        "@octokit/request-error": "^5.0.0",
-        "@octokit/types": "^12.0.0",
-        "is-plain-object": "^5.0.0",
+        "@octokit/endpoint": "^9.0.6",
+        "@octokit/request-error": "^5.1.1",
+        "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
       }
     },
     "@octokit/request-error": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.0.1.tgz",
-      "integrity": "sha512-X7pnyTMV7MgtGmiXBwmO6M5kIPrntOXdyKZLigNfQWSEQzVxR4a4vo49vJjTWX70mPndj8KhfT4Dx+2Ng3vnBQ==",
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
+      "integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
       "requires": {
-        "@octokit/types": "^12.0.0",
+        "@octokit/types": "^13.1.0",
         "deprecation": "^2.0.0",
         "once": "^1.4.0"
       }
     },
     "@octokit/types": {
-      "version": "12.0.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.0.0.tgz",
-      "integrity": "sha512-EzD434aHTFifGudYAygnFlS1Tl6KhbTynEWELQXIbTY8Msvb5nEqTZIm7sbPEt4mQYLZwu3zPKVdeIrw0g7ovg==",
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
       "requires": {
-        "@octokit/openapi-types": "^19.0.0"
+        "@octokit/openapi-types": "^24.2.0"
       }
     },
     "before-after-hook": {
@@ -403,11 +474,6 @@
       "resolved": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz",
       "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ=="
     },
-    "is-plain-object": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz",
-      "integrity": "sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q=="
-    },
     "lodash": {
       "version": "4.17.21",
       "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
@@ -421,7 +487,7 @@
     "once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
-      "integrity": "sha1-WDsap3WWHUsROsF9nFC6753Xa9E=",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
       "requires": {
         "wrappy": "1"
       }
@@ -432,22 +498,22 @@
       "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="
     },
     "undici": {
-      "version": "5.26.4",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-5.26.4.tgz",
-      "integrity": "sha512-OG+QOf0fTLtazL9P9X7yqWxQ+Z0395Wk6DSkyTxtaq3wQEjIroVe7Y4asCX/vcCxYpNGMnwz8F0qbRYUoaQVMw==",
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
       "requires": {
         "@fastify/busboy": "^2.0.0"
       }
     },
     "universal-user-agent": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz",
-      "integrity": "sha512-isyNax3wXoKaulPDZWHQqbmIx1k2tb9fb3GGDBRxCscfYV2Ch7WxPArBsFEG8s/safwXTT7H4QGhaIkTp9447w=="
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
+      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ=="
     },
     "wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
     }
   }
 }
diff --git a/dev/coverage-action/package.json b/dev/coverage-action/package.json
index 9e1433f1ce..d59a8de22c 100644
--- a/dev/coverage-action/package.json
+++ b/dev/coverage-action/package.json
@@ -7,7 +7,7 @@
   "license": "BSD-3-Clause",
   "dependencies": {
     "@actions/core": "1.11.1",
-    "@actions/github": "6.0.0",
+    "@actions/github": "6.0.1",
     "lodash": "4.17.21",
     "luxon": "3.6.1"
   }

From d5b07d1a205b0ac8ca610cc3efcab64314fb4dd4 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Wed, 18 Jun 2025 10:55:19 -0700
Subject: [PATCH 342/707] fix: change related_email API to return all addresses
 (#9013)

---
 ietf/api/tests.py | 2 +-
 ietf/api/views.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 6754f5c3de..29edd99b2b 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1161,7 +1161,7 @@ def test_related_email_list(self):
         self.assertEqual(r.headers["Content-Type"], "application/json")
         result = json.loads(r.content)
         self.assertCountEqual(result.keys(), ["addresses"])
-        self.assertCountEqual(result["addresses"], joe.person.email_set.exclude(address='joe@home.com').values_list("address", flat=True))
+        self.assertCountEqual(result["addresses"], joe.person.email_set.values_list("address", flat=True))
         # non-ascii
         non_ascii_url = urlreverse("ietf.api.views.related_email_list", kwargs={'email': 'jòe@spain.com'})
         r = self.client.get(non_ascii_url, headers={"X-Api-Key": "valid-token"})
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 06a386b2e3..e8e38b25b4 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -618,7 +618,7 @@ def _http_err(code, text):
             return JsonResponse({"addresses": []})
         return JsonResponse(
             {
-                "addresses": list(person.email_set.exclude(address=email).values_list("address", flat=True)),
+                "addresses": list(person.email_set.values_list("address", flat=True)),
             }
         )
     return HttpResponse(status=405)

From 0c8171c17b112f62e53fb496fe45f4776d20811e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 18 Jun 2025 14:57:26 -0300
Subject: [PATCH 343/707] feat: toggle all areas in schedule editor (#9012)

---
 ietf/static/js/edit-meeting-schedule.js           | 14 +++++++++++++-
 ietf/templates/meeting/edit_meeting_schedule.html |  5 +++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/ietf/static/js/edit-meeting-schedule.js b/ietf/static/js/edit-meeting-schedule.js
index 3f0afe0841..2a73a8c29d 100644
--- a/ietf/static/js/edit-meeting-schedule.js
+++ b/ietf/static/js/edit-meeting-schedule.js
@@ -50,6 +50,7 @@ $(function () {
     let sessionPurposeInputs = schedEditor.find('.session-purpose-toggles input');
     let timeSlotGroupInputs = schedEditor.find("#timeslot-group-toggles-modal .modal-body .individual-timeslots input");
     let sessionParentInputs = schedEditor.find(".session-parent-toggles input");
+    let sessionParentToggleAll = schedEditor.find(".session-parent-toggles .session-parent-toggle-all")
     const classes_to_hide = '.hidden-timeslot-group,.hidden-timeslot-type';
 
     // hack to work around lack of position sticky support in old browsers, see https://caniuse.com/#feat=css-sticky
@@ -769,6 +770,17 @@ $(function () {
     sessionParentInputs.on("click", updateSessionParentToggling);
     updateSessionParentToggling();
 
+    // Toggle _all_ session parents
+    function toggleAllSessionParents() {
+        if (sessionParentInputs.filter(":checked").length < sessionParentInputs.length) {
+            sessionParentInputs.prop("checked", true);
+        } else {
+            sessionParentInputs.prop("checked", false);
+        }
+        updateSessionParentToggling();
+    }
+    sessionParentToggleAll.on("click", toggleAllSessionParents);
+
     // Toggling timeslot types
     function updateTimeSlotTypeToggling() {
         const checkedTypes = jQuery.map(timeSlotTypeInputs.filter(":checked"), elt => elt.value);
@@ -1020,4 +1032,4 @@ $(function () {
         .on("mouseleave", ".other-session", function () {
             sessions.filter("#session" + this.dataset.othersessionid).removeClass("highlight");
         });
-});
\ No newline at end of file
+});
diff --git a/ietf/templates/meeting/edit_meeting_schedule.html b/ietf/templates/meeting/edit_meeting_schedule.html
index 462f97715d..a975c2e61a 100644
--- a/ietf/templates/meeting/edit_meeting_schedule.html
+++ b/ietf/templates/meeting/edit_meeting_schedule.html
@@ -223,6 +223,11 @@ <h1>
                                     {{ p.acronym }}
                                 </label>
                             {% endfor %}
+                            <button type="button"
+                                    class="btn btn-outline-primary btn-sm session-parent-toggle-all">
+                                Toggle All
+                            </button>
+                                    
                         </div>
                         <div class="my-3">
                         {% if session_purposes|length > 1 %}

From d0d69650299e8332775ca3cf51347d75343e2fa8 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 18 Jun 2025 22:24:50 -0500
Subject: [PATCH 344/707] chore: tweak test setup so blob storage is ok with
 overwrites (#9025)

---
 ietf/submit/tests.py | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 6b1c998e76..7e70c55965 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -2981,7 +2981,7 @@ def test_process_and_accept_uploaded_submission_invalid(self):
         xml_path = Path(settings.IDSUBMIT_STAGING_PATH) / 'draft-somebody-test-00.xml'
         with xml_path.open('w') as f:
             f.write(xml_data)
-        store_str("staging", "draft-somebody-test-00.xml", xml_data)
+        store_str("staging", "draft-somebody-test-00.xml", xml_data, allow_overwrite=True)
         with mock.patch(
                 'ietf.submit.utils.apply_checkers',
                 side_effect = lambda _, __: submission.checks.create(
@@ -3047,25 +3047,25 @@ def test_process_submission_xml(self):
         # Should behave on missing or partial <date> elements
         TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date.+>", "", xml_contents))  # strip <date...> entirely
-        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date.+>", "", xml_contents))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date.+>", "", xml_contents), allow_overwrite=True)
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], None)
 
         TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date year=.+ month", "<date month", xml_contents))  # remove year
-        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date year=.+ month", "<date month", xml_contents))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date year=.+ month", "<date month", xml_contents), allow_overwrite=True)
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
         TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"(<date.+) month=.+day=(.+>)", r"\1 day=\2", xml_contents))  # remove month
-        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"(<date.+) month=.+day=(.+>)", r"\1 day=\2", xml_contents))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"(<date.+) month=.+day=(.+>)", r"\1 day=\2", xml_contents), allow_overwrite=True)
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
         TestBlobstoreManager().emptyTestBlobstores()
         xml_path.write_text(re.sub(r"<date(.+) day=.+>", r"<date\1>", xml_contents))  # remove day
-        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date(.+) day=.+>", r"<date\1>", xml_contents))
+        store_str("staging", "draft-somebody-test-00.xml", re.sub(r"<date(.+) day=.+>", r"<date\1>", xml_contents), allow_overwrite=True)
         output = process_submission_xml("draft-somebody-test", "00")
         self.assertEqual(output["document_date"], date_today())
 
@@ -3080,7 +3080,7 @@ def test_process_submission_xml(self):
         )
         xml_path.write_text(xml.read())
         xml.seek(0)
-        store_str("staging", "draft-somebody-test-00.xml", xml.read())
+        store_str("staging", "draft-somebody-test-00.xml", xml.read(), allow_overwrite=True)
         with self.assertRaisesMessage(SubmissionError, "disagrees with submission filename"):
             process_submission_xml("draft-somebody-test", "00")
 
@@ -3095,7 +3095,7 @@ def test_process_submission_xml(self):
         )
         xml_path.write_text(xml.read())
         xml.seek(0)
-        store_str("staging", "draft-somebody-test-00.xml", xml.read())
+        store_str("staging", "draft-somebody-test-00.xml", xml.read(), allow_overwrite=True)
         with self.assertRaisesMessage(SubmissionError, "disagrees with submission revision"):
             process_submission_xml("draft-somebody-test", "00")
 
@@ -3110,7 +3110,7 @@ def test_process_submission_xml(self):
         )
         xml_path.write_text(xml.read())
         xml.seek(0)
-        store_str("staging", "draft-somebody-test-00.xml", xml.read())
+        store_str("staging", "draft-somebody-test-00.xml", xml.read(), allow_overwrite=True)
         with self.assertRaisesMessage(SubmissionError, "Could not extract a valid title"):
             process_submission_xml("draft-somebody-test", "00")
 
@@ -3153,7 +3153,7 @@ def test_process_submission_text(self):
         with txt_path.open('w') as fd:
             fd.write(txt.read())
         txt.seek(0)
-        store_str("staging", "draft-somebody-test-00.txt", txt.read())
+        store_str("staging", "draft-somebody-test-00.txt", txt.read(), allow_overwrite=True)
         txt.close()
         with self.assertRaisesMessage(SubmissionError, 'disagrees with submission filename'):
             process_submission_text("draft-somebody-test", "00")
@@ -3170,7 +3170,7 @@ def test_process_submission_text(self):
         with txt_path.open('w') as fd:
             fd.write(txt.read())
         txt.seek(0)
-        store_str("staging", "draft-somebody-test-00.txt", txt.read())
+        store_str("staging", "draft-somebody-test-00.txt", txt.read(), allow_overwrite=True)
         txt.close()
         with self.assertRaisesMessage(SubmissionError, 'disagrees with submission revision'):
             process_submission_text("draft-somebody-test", "00")

From 8e082b698b39c3a658f04185951a1bb3be1fb854 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 19 Jun 2025 00:25:43 -0300
Subject: [PATCH 345/707] fix: charset for telechat_agenda_content_view (#8967)

* fix: charset for telechat_agenda_content_view

* refactor: remove explicit encoding

HttpResponse knows how to read content_type and complies
with the specified encoding.
---
 ietf/iesg/tests.py | 2 +-
 ietf/iesg/views.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 86910bc0ce..746ea3f56f 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -759,7 +759,7 @@ def test_telechat_agenda_content_view(self):
                 urlreverse("ietf.iesg.views.telechat_agenda_content_view", kwargs={"section": section})
             )
             self.assertContains(r, content, status_code=200)
-            self.assertEqual(r.get("Content-Type", None), "text/plain")
+            self.assertEqual(r.get("Content-Type", None), "text/plain; charset=utf-8")
 
     def test_telechat_agenda_content_view_permissions(self):
         for section in TelechatAgendaSectionName.objects.filter(used=True).values_list("slug", flat=True):
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index df02754f2e..f1fe77f763 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -610,4 +610,4 @@ def telechat_agenda_content_manage(request):
 @role_required("Secretariat", "IAB Chair", "Area Director")
 def telechat_agenda_content_view(request, section):
     content = get_object_or_404(TelechatAgendaContent, section__slug=section, section__used=True)
-    return HttpResponse(content=content.text, content_type="text/plain")
+    return HttpResponse(content=content.text, content_type="text/plain; charset=utf-8")

From 0968719f7482c1d3e23e3b60e6b1ced9294aaf77 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 19 Jun 2025 00:44:29 -0300
Subject: [PATCH 346/707] feat: secretariat can change statement state (#9026)

* feat: secretariat can change statement state

* style: ruff

* test: test statement state change

* chore: copyright statmenets

* chore: exercise new template with a GET so coverage sees it.

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/forms.py                             | 13 ++++--
 ietf/doc/tests_statement.py                   | 35 ++++++++++++++-
 ietf/doc/urls.py                              |  3 +-
 ietf/doc/views_statement.py                   | 45 ++++++++++++++++++-
 ietf/templates/doc/document_statement.html    |  9 +++-
 .../doc/statement/change_statement_state.html | 22 +++++++++
 6 files changed, 118 insertions(+), 9 deletions(-)
 create mode 100644 ietf/templates/doc/statement/change_statement_state.html

diff --git a/ietf/doc/forms.py b/ietf/doc/forms.py
index 8a1e9ecb98..768d6f96af 100644
--- a/ietf/doc/forms.py
+++ b/ietf/doc/forms.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2013-2020, All Rights Reserved
+# Copyright The IETF Trust 2013-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -9,7 +9,7 @@
 from django.core.validators import validate_email
 
 from ietf.doc.fields import SearchableDocumentField, SearchableDocumentsField
-from ietf.doc.models import RelatedDocument, DocExtResource
+from ietf.doc.models import RelatedDocument, DocExtResource, State
 from ietf.iesg.models import TelechatDate
 from ietf.iesg.utils import telechat_page_count
 from ietf.person.fields import SearchablePersonField, SearchablePersonsField
@@ -61,7 +61,7 @@ class DocAuthorChangeBasisForm(forms.Form):
     basis = forms.CharField(max_length=255, 
                             label='Reason for change', 
                             help_text='What is the source or reasoning for the changes to the author list?')
-    
+
 class AdForm(forms.Form):
     ad = forms.ModelChoiceField(Person.objects.filter(role__name="ad", role__group__state="active", role__group__type='area').order_by('name'),
                                 label="Shepherding AD", empty_label="(None)", required=True)
@@ -288,3 +288,10 @@ def clean_name_fragment(self):
         if any(c in name_fragment for c in disallowed_characters):
             raise ValidationError(f"The following characters are disallowed: {', '.join(disallowed_characters)}")
         return name_fragment
+
+
+class ChangeStatementStateForm(forms.Form):
+    state = forms.ModelChoiceField(
+        State.objects.filter(used=True, type="statement"),
+        empty_label=None,
+    )
diff --git a/ietf/doc/tests_statement.py b/ietf/doc/tests_statement.py
index fea42b97d6..bb097b1828 100644
--- a/ietf/doc/tests_statement.py
+++ b/ietf/doc/tests_statement.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2023, All Rights Reserved
+# Copyright The IETF Trust 2023-2025, All Rights Reserved
 
 import debug  # pyflakes:ignore
 
@@ -372,3 +372,36 @@ def test_submit_non_markdown_formats(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue("Unexpected content" in q("#id_statement_file").next().text())
+
+    def test_change_statement_state(self):
+        statement = StatementFactory()  # starts in "active" state
+        active_state = State.objects.get(type_id="statement", slug="active")
+        replaced_state = State.objects.get(type_id="statement", slug="replaced")
+        url = urlreverse(
+            "ietf.doc.views_statement.change_statement_state",
+            kwargs={"name": statement.name},
+        )
+
+        events_before = statement.docevent_set.count()
+        login_testing_unauthorized(self, "secretary", url)
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code,200)
+
+        r = self.client.post(url, {"state": active_state.pk}, follow=True)
+        self.assertContains(r, "State not changed", status_code=200)
+        statement = Document.objects.get(pk=statement.pk)  # bust the state cache
+        self.assertEqual(statement.get_state(), active_state)
+
+        r = self.client.post(url, {"state": replaced_state.pk}, follow=True)
+        self.assertContains(r, "State changed to", status_code=200)
+        statement = Document.objects.get(pk=statement.pk)  # bust the state cache
+        self.assertEqual(statement.get_state(), replaced_state)
+
+        events_after = statement.docevent_set.count()
+        self.assertEqual(events_after, events_before + 1)
+        event = statement.docevent_set.first()
+        self.assertEqual(event.type, "changed_state")
+        self.assertEqual(
+            event.desc, "Statement State changed to <b>Replaced</b> from Active"
+        )
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 0fa1a04b49..60255af856 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2009-2023, All Rights Reserved
+# Copyright The IETF Trust 2009-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 # Copyright (C) 2009 Nokia Corporation and/or its subsidiary(-ies).
 # All rights reserved. Contact: Pasi Eronen <pasi.eronen@nokia.com>
@@ -145,6 +145,7 @@
     url(r'^%(name)s/edit/adopt/$' % settings.URL_REGEXPS, views_draft.adopt_draft),
     url(r'^%(name)s/edit/release/$' % settings.URL_REGEXPS, views_draft.release_draft),
     url(r'^%(name)s/edit/state/(?P<state_type>draft-stream-[a-z]+)/$' % settings.URL_REGEXPS, views_draft.change_stream_state),
+    url(r'^%(name)s/edit/state/statement/$' % settings.URL_REGEXPS, views_statement.change_statement_state),
 
     url(r'^%(name)s/edit/clearballot/(?P<ballot_type_slug>[\w-]+)/$' % settings.URL_REGEXPS, views_ballot.clear_ballot),
     url(r'^%(name)s/edit/deferballot/$' % settings.URL_REGEXPS, views_ballot.defer_ballot),
diff --git a/ietf/doc/views_statement.py b/ietf/doc/views_statement.py
index 9dc8c8ad69..4b85c81d83 100644
--- a/ietf/doc/views_statement.py
+++ b/ietf/doc/views_statement.py
@@ -1,4 +1,5 @@
-# Copyright The IETF Trust 2023, All Rights Reserved
+# Copyright The IETF Trust 2023-2025, All Rights Reserved
+from django.contrib import messages
 
 import debug  # pyflakes: ignore
 
@@ -6,10 +7,13 @@
 
 from django import forms
 from django.conf import settings
-from django.http import FileResponse, Http404
+from django.http import FileResponse, Http404, HttpResponseRedirect
 from django.views.decorators.cache import cache_control
 from django.shortcuts import get_object_or_404, render, redirect
 from django.template.loader import render_to_string
+
+from ietf.doc.forms import ChangeStatementStateForm
+from ietf.doc.utils import add_state_change_event
 from ietf.utils import markdown
 from django.utils.html import escape
 
@@ -278,3 +282,40 @@ def new_statement(request):
         }
         form = NewStatementForm(initial=init)
     return render(request, "doc/statement/new_statement.html", {"form": form})
+
+
+@role_required("Secretariat")
+def change_statement_state(request, name):
+    """Change state of a statement Document"""
+    statement = get_object_or_404(
+        Document.objects.filter(type_id="statement"),
+        name=name,
+    )
+    if request.method == "POST":
+        form = ChangeStatementStateForm(request.POST)
+        if form.is_valid():
+            new_state = form.cleaned_data["state"]
+            prev_state = statement.get_state()
+            if new_state == prev_state:
+                messages.info(request, f"State not changed, remains {prev_state}.")
+            else:
+                statement.set_state(new_state)
+                e = add_state_change_event(
+                    statement,
+                    request.user.person,
+                    prev_state,
+                    new_state,
+                )
+                statement.save_with_history([e])
+                messages.success(request, f"State changed to {new_state}.")
+            return HttpResponseRedirect(statement.get_absolute_url())
+    else:
+        form = ChangeStatementStateForm(initial={"state": statement.get_state()})
+    return render(
+        request,
+        "doc/statement/change_statement_state.html",
+        {
+            "form": form,
+            "statement": statement,
+        },
+    )
diff --git a/ietf/templates/doc/document_statement.html b/ietf/templates/doc/document_statement.html
index 7b9759c3e9..cc3ea5a44c 100644
--- a/ietf/templates/doc/document_statement.html
+++ b/ietf/templates/doc/document_statement.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2023, All Rights Reserved #}
+{# Copyright The IETF Trust 2023-2025, All Rights Reserved #}
 {% load origin %}
 {% load static %}
 {% load ietf_filters %}
@@ -49,7 +49,12 @@
                 <th scope="row">
                     <a href="{% url 'ietf.doc.views_help.state_help' type='statement' %}">State</a>
                 </th>
-                <td class="edit"></td>
+                <td class="edit">{% if can_manage %}
+                    <a class="btn btn-primary btn-sm"
+                       href="{% url 'ietf.doc.views_statement.change_statement_state' name=doc.name %}">
+                        Edit
+                    </a>
+                {% endif %}</td>
                 <td id="statement-state">
                     {% if doc.get_state %}
                         <span title="{{ doc.get_state.desc }}" class="badge rounded-pill {% if doc.get_state.name|slugify == 'active' %}text-bg-success{% else %}text-bg-warning{% endif %}">{{ doc.get_state.name }}</span>
diff --git a/ietf/templates/doc/statement/change_statement_state.html b/ietf/templates/doc/statement/change_statement_state.html
new file mode 100644
index 0000000000..aa5cb934e8
--- /dev/null
+++ b/ietf/templates/doc/statement/change_statement_state.html
@@ -0,0 +1,22 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load origin %}
+{% load django_bootstrap5 %}
+{% block title %}Change state for {{ statement }}{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Change state
+        <br>
+        <small class="text-body-secondary">{{ statement }}</small>
+    </h1>
+    <form class="mt-3" method="post">
+        {% csrf_token %}
+        {% bootstrap_form form %}
+        <button type="submit" class="btn btn-primary">Submit</button>
+        <a class="btn btn-secondary float-end"
+           href="{{ statement.get_absolute_url }}">
+            Back
+        </a>
+    </form>
+{% endblock %}
\ No newline at end of file

From 2a16b6d5f4b2add753ef2c0158c0b5f6f7e5608c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 19 Jun 2025 00:57:46 -0400
Subject: [PATCH 347/707] chore(deps): bump
 stefanzweifel/git-auto-commit-action from 5 to 6 (#9007)

Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 5 to 6.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-base-app.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 5f0a0d11b8..479cd7cadf 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -59,7 +59,7 @@ jobs:
         echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
 
     - name: Commit CHANGELOG.md
-      uses: stefanzweifel/git-auto-commit-action@v5
+      uses: stefanzweifel/git-auto-commit-action@v6
       with:
         branch: ${{ github.ref_name }}
         commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'

From df6266cfb3833f23a066212635960a2b86ec4b3f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Jun 2025 14:53:38 -0300
Subject: [PATCH 348/707] fix: block creation of floorplan without image
 (#9040)

* fix: block creation of floorplan without image

* chore: migration
---
 .../migrations/0014_alter_floorplan_image.py  | 25 +++++++++++++++++++
 ietf/meeting/models.py                        |  2 +-
 2 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 ietf/meeting/migrations/0014_alter_floorplan_image.py

diff --git a/ietf/meeting/migrations/0014_alter_floorplan_image.py b/ietf/meeting/migrations/0014_alter_floorplan_image.py
new file mode 100644
index 0000000000..e125625edc
--- /dev/null
+++ b/ietf/meeting/migrations/0014_alter_floorplan_image.py
@@ -0,0 +1,25 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.meeting.models
+import ietf.utils.storage
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("meeting", "0013_correct_reg_checkedin"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="floorplan",
+            name="image",
+            field=models.ImageField(
+                default=None,
+                storage=ietf.utils.storage.BlobShadowFileSystemStorage(
+                    kind="", location=None
+                ),
+                upload_to=ietf.meeting.models.floorplan_path,
+            ),
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index cc5241efa2..b148568156 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -530,7 +530,7 @@ class FloorPlan(models.Model):
     image   = models.ImageField(
         storage=BlobShadowFileSystemStorage(kind="floorplan"),
         upload_to=floorplan_path,
-        blank=True,
+        blank=False,
         default=None,
     )
     #

From e93a56bb350d4e5d21fa3031f29d78db2887d816 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Jun 2025 15:27:27 -0300
Subject: [PATCH 349/707] chore: increase timeout for rabbitmq probe (#9030)

---
 k8s/rabbitmq.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/k8s/rabbitmq.yaml b/k8s/rabbitmq.yaml
index 0c8f0705b5..780a399239 100644
--- a/k8s/rabbitmq.yaml
+++ b/k8s/rabbitmq.yaml
@@ -52,17 +52,17 @@ spec:
                   key: CELERY_PASSWORD
           livenessProbe:
             exec:
-              command: ["rabbitmq-diagnostics", "-q", "ping"]
+              command: ["rabbitmq-diagnostics", "-q", "ping", "-t", "30"]
             periodSeconds: 30
-            timeoutSeconds: 5
+            timeoutSeconds: 35  # slightly longer than ping "-t" option
           startupProbe:
             initialDelaySeconds: 15
             periodSeconds: 5
-            timeoutSeconds: 5
+            timeoutSeconds: 35  # slightly longer than ping "-t" option
             successThreshold: 1
             failureThreshold: 60
             exec:
-              command: ["rabbitmq-diagnostics", "-q", "ping"]
+              command: ["rabbitmq-diagnostics", "-q", "ping", "-t", "30"]
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

From 2f1d00942c6a57184db2ac05ba182a1cab14d2f6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Jun 2025 17:45:59 -0300
Subject: [PATCH 350/707] refactor: no mutating countries/timezones choices
 (#9037)

* refactor: don't mutate countries/timezones

* refactor: capitalize/make tuples to discourage mutation
---
 ietf/meeting/forms.py  | 11 +++--------
 ietf/meeting/models.py | 25 +++++++++++++++----------
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/ietf/meeting/forms.py b/ietf/meeting/forms.py
index e1d1e90b8d..b6b1a1591f 100644
--- a/ietf/meeting/forms.py
+++ b/ietf/meeting/forms.py
@@ -22,7 +22,7 @@
 from ietf.doc.models import Document, State, NewRevisionDocEvent
 from ietf.group.models import Group
 from ietf.group.utils import groups_managed_by
-from ietf.meeting.models import Session, Meeting, Schedule, countries, timezones, TimeSlot, Room
+from ietf.meeting.models import Session, Meeting, Schedule, COUNTRIES, TIMEZONES, TimeSlot, Room
 from ietf.meeting.helpers import get_next_interim_number, make_materials_directories
 from ietf.meeting.helpers import is_interim_meeting_approved, get_next_agenda_name
 from ietf.message.models import Message
@@ -38,11 +38,6 @@
 from ietf.utils.validators import ( validate_file_size, validate_mime_type,
     validate_file_extension, validate_no_html_frame)
 
-# need to insert empty option for use in ChoiceField
-# countries.insert(0, ('', '-'*9 ))
-countries.insert(0, ('', '-' * 9))
-timezones.insert(0, ('', '-' * 9))
-
 # -------------------------------------------------
 # Helpers
 # -------------------------------------------------
@@ -140,12 +135,12 @@ class InterimMeetingModelForm(forms.ModelForm):
     approved = forms.BooleanField(required=False)
     city = forms.CharField(max_length=255, required=False)
     city.widget.attrs['placeholder'] = "City"
-    country = forms.ChoiceField(choices=countries, required=False)
+    country = forms.ChoiceField(choices=COUNTRIES, required=False)
     country.widget.attrs['class'] = "select2-field"
     country.widget.attrs['data-max-entries'] = 1
     country.widget.attrs['data-placeholder'] = "Country"
     country.widget.attrs['data-minimum-input-length'] = 0
-    time_zone = forms.ChoiceField(choices=timezones)
+    time_zone = forms.ChoiceField(choices=TIMEZONES)
     time_zone.widget.attrs['class'] = "select2-field"
     time_zone.widget.attrs['data-max-entries'] = 1
     time_zone.widget.attrs['data-minimum-input-length'] = 0
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index b148568156..62275082e4 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -49,15 +49,20 @@
 )
 from ietf.utils.fields import MissingOkImageField
 
-countries = list(pytz.country_names.items())
-countries.sort(key=lambda x: x[1])
+# Set up countries / timezones, including an empty choice for fields
+EMPTY_CHOICE = ("", "-" * 9)
+COUNTRIES = (EMPTY_CHOICE,) + tuple(
+    sorted(pytz.country_names.items(), key=lambda x: x[1])
+)
 
-timezones = []
-for name in pytz.common_timezones:
-    tzfn = os.path.join(settings.TZDATA_ICS_PATH, name + ".ics")
-    if not os.path.islink(tzfn):
-        timezones.append((name, name))
-timezones.sort()
+_tzdata_ics_path = Path(settings.TZDATA_ICS_PATH)
+TIMEZONES = (EMPTY_CHOICE,) + tuple(
+    sorted(
+        (name, name)
+        for name in pytz.common_timezones
+        if not (_tzdata_ics_path / f"{name}.ics").is_symlink()
+    )
+)
 
 
 class Meeting(models.Model):
@@ -72,11 +77,11 @@ class Meeting(models.Model):
     days = models.IntegerField(default=7, null=False, validators=[MinValueValidator(1)],
         help_text="The number of days the meeting lasts")
     city = models.CharField(blank=True, max_length=255)
-    country = models.CharField(blank=True, max_length=2, choices=countries)
+    country = models.CharField(blank=True, max_length=2, choices=COUNTRIES)
     # We can't derive time-zone from country, as there are some that have
     # more than one timezone, and the pytz module doesn't provide timezone
     # lookup information for all relevant city/country combinations.
-    time_zone = models.CharField(max_length=255, choices=timezones, default='UTC')
+    time_zone = models.CharField(max_length=255, choices=TIMEZONES, default='UTC')
     idsubmit_cutoff_day_offset_00 = models.IntegerField(blank=True,
         default=settings.IDSUBMIT_DEFAULT_CUTOFF_DAY_OFFSET_00,
         help_text = "The number of days before the meeting start date when the submission of -00 drafts will be closed.")

From f85c1a4913eabd59d1ed2b594218e96ab47d57d0 Mon Sep 17 00:00:00 2001
From: Benson Muite <bkmgit@users.noreply.github.com>
Date: Sat, 21 Jun 2025 00:22:20 +0300
Subject: [PATCH 351/707] fix: do not list GMT as a meeting time option (#8507)
 (#8681)

* fix: do not list GMT as a meeting time option (#8507)

* chore: copyright

* chore: migration

* fix: migration conflict

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 .../0015_alter_meeting_time_zone.py           | 451 ++++++++++++++++++
 ietf/meeting/models.py                        |   5 +-
 2 files changed, 453 insertions(+), 3 deletions(-)
 create mode 100644 ietf/meeting/migrations/0015_alter_meeting_time_zone.py

diff --git a/ietf/meeting/migrations/0015_alter_meeting_time_zone.py b/ietf/meeting/migrations/0015_alter_meeting_time_zone.py
new file mode 100644
index 0000000000..2a4b7859ee
--- /dev/null
+++ b/ietf/meeting/migrations/0015_alter_meeting_time_zone.py
@@ -0,0 +1,451 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+def forward(apps, schema_editor):
+    """Migrate 'GMT' meeting time zones to 'UTC'"""
+    Meeting = apps.get_model("meeting", "Meeting")
+    Meeting.objects.filter(time_zone="GMT").update(time_zone="UTC")
+
+
+def reverse(apps, schema_editor):
+    pass  # nothing to do
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("meeting", "0014_alter_floorplan_image"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+        migrations.AlterField(
+            model_name="meeting",
+            name="time_zone",
+            field=models.CharField(
+                choices=[
+                    ("", "---------"),
+                    ("Africa/Abidjan", "Africa/Abidjan"),
+                    ("Africa/Accra", "Africa/Accra"),
+                    ("Africa/Addis_Ababa", "Africa/Addis_Ababa"),
+                    ("Africa/Algiers", "Africa/Algiers"),
+                    ("Africa/Asmara", "Africa/Asmara"),
+                    ("Africa/Bamako", "Africa/Bamako"),
+                    ("Africa/Bangui", "Africa/Bangui"),
+                    ("Africa/Banjul", "Africa/Banjul"),
+                    ("Africa/Bissau", "Africa/Bissau"),
+                    ("Africa/Blantyre", "Africa/Blantyre"),
+                    ("Africa/Brazzaville", "Africa/Brazzaville"),
+                    ("Africa/Bujumbura", "Africa/Bujumbura"),
+                    ("Africa/Cairo", "Africa/Cairo"),
+                    ("Africa/Casablanca", "Africa/Casablanca"),
+                    ("Africa/Ceuta", "Africa/Ceuta"),
+                    ("Africa/Conakry", "Africa/Conakry"),
+                    ("Africa/Dakar", "Africa/Dakar"),
+                    ("Africa/Dar_es_Salaam", "Africa/Dar_es_Salaam"),
+                    ("Africa/Djibouti", "Africa/Djibouti"),
+                    ("Africa/Douala", "Africa/Douala"),
+                    ("Africa/El_Aaiun", "Africa/El_Aaiun"),
+                    ("Africa/Freetown", "Africa/Freetown"),
+                    ("Africa/Gaborone", "Africa/Gaborone"),
+                    ("Africa/Harare", "Africa/Harare"),
+                    ("Africa/Johannesburg", "Africa/Johannesburg"),
+                    ("Africa/Juba", "Africa/Juba"),
+                    ("Africa/Kampala", "Africa/Kampala"),
+                    ("Africa/Khartoum", "Africa/Khartoum"),
+                    ("Africa/Kigali", "Africa/Kigali"),
+                    ("Africa/Kinshasa", "Africa/Kinshasa"),
+                    ("Africa/Lagos", "Africa/Lagos"),
+                    ("Africa/Libreville", "Africa/Libreville"),
+                    ("Africa/Lome", "Africa/Lome"),
+                    ("Africa/Luanda", "Africa/Luanda"),
+                    ("Africa/Lubumbashi", "Africa/Lubumbashi"),
+                    ("Africa/Lusaka", "Africa/Lusaka"),
+                    ("Africa/Malabo", "Africa/Malabo"),
+                    ("Africa/Maputo", "Africa/Maputo"),
+                    ("Africa/Maseru", "Africa/Maseru"),
+                    ("Africa/Mbabane", "Africa/Mbabane"),
+                    ("Africa/Mogadishu", "Africa/Mogadishu"),
+                    ("Africa/Monrovia", "Africa/Monrovia"),
+                    ("Africa/Nairobi", "Africa/Nairobi"),
+                    ("Africa/Ndjamena", "Africa/Ndjamena"),
+                    ("Africa/Niamey", "Africa/Niamey"),
+                    ("Africa/Nouakchott", "Africa/Nouakchott"),
+                    ("Africa/Ouagadougou", "Africa/Ouagadougou"),
+                    ("Africa/Porto-Novo", "Africa/Porto-Novo"),
+                    ("Africa/Sao_Tome", "Africa/Sao_Tome"),
+                    ("Africa/Tripoli", "Africa/Tripoli"),
+                    ("Africa/Tunis", "Africa/Tunis"),
+                    ("Africa/Windhoek", "Africa/Windhoek"),
+                    ("America/Adak", "America/Adak"),
+                    ("America/Anchorage", "America/Anchorage"),
+                    ("America/Anguilla", "America/Anguilla"),
+                    ("America/Antigua", "America/Antigua"),
+                    ("America/Araguaina", "America/Araguaina"),
+                    (
+                        "America/Argentina/Buenos_Aires",
+                        "America/Argentina/Buenos_Aires",
+                    ),
+                    ("America/Argentina/Catamarca", "America/Argentina/Catamarca"),
+                    ("America/Argentina/Cordoba", "America/Argentina/Cordoba"),
+                    ("America/Argentina/Jujuy", "America/Argentina/Jujuy"),
+                    ("America/Argentina/La_Rioja", "America/Argentina/La_Rioja"),
+                    ("America/Argentina/Mendoza", "America/Argentina/Mendoza"),
+                    (
+                        "America/Argentina/Rio_Gallegos",
+                        "America/Argentina/Rio_Gallegos",
+                    ),
+                    ("America/Argentina/Salta", "America/Argentina/Salta"),
+                    ("America/Argentina/San_Juan", "America/Argentina/San_Juan"),
+                    ("America/Argentina/San_Luis", "America/Argentina/San_Luis"),
+                    ("America/Argentina/Tucuman", "America/Argentina/Tucuman"),
+                    ("America/Argentina/Ushuaia", "America/Argentina/Ushuaia"),
+                    ("America/Aruba", "America/Aruba"),
+                    ("America/Asuncion", "America/Asuncion"),
+                    ("America/Atikokan", "America/Atikokan"),
+                    ("America/Bahia", "America/Bahia"),
+                    ("America/Bahia_Banderas", "America/Bahia_Banderas"),
+                    ("America/Barbados", "America/Barbados"),
+                    ("America/Belem", "America/Belem"),
+                    ("America/Belize", "America/Belize"),
+                    ("America/Blanc-Sablon", "America/Blanc-Sablon"),
+                    ("America/Boa_Vista", "America/Boa_Vista"),
+                    ("America/Bogota", "America/Bogota"),
+                    ("America/Boise", "America/Boise"),
+                    ("America/Cambridge_Bay", "America/Cambridge_Bay"),
+                    ("America/Campo_Grande", "America/Campo_Grande"),
+                    ("America/Cancun", "America/Cancun"),
+                    ("America/Caracas", "America/Caracas"),
+                    ("America/Cayenne", "America/Cayenne"),
+                    ("America/Cayman", "America/Cayman"),
+                    ("America/Chicago", "America/Chicago"),
+                    ("America/Chihuahua", "America/Chihuahua"),
+                    ("America/Costa_Rica", "America/Costa_Rica"),
+                    ("America/Creston", "America/Creston"),
+                    ("America/Cuiaba", "America/Cuiaba"),
+                    ("America/Curacao", "America/Curacao"),
+                    ("America/Danmarkshavn", "America/Danmarkshavn"),
+                    ("America/Dawson", "America/Dawson"),
+                    ("America/Dawson_Creek", "America/Dawson_Creek"),
+                    ("America/Denver", "America/Denver"),
+                    ("America/Detroit", "America/Detroit"),
+                    ("America/Dominica", "America/Dominica"),
+                    ("America/Edmonton", "America/Edmonton"),
+                    ("America/Eirunepe", "America/Eirunepe"),
+                    ("America/El_Salvador", "America/El_Salvador"),
+                    ("America/Fort_Nelson", "America/Fort_Nelson"),
+                    ("America/Fortaleza", "America/Fortaleza"),
+                    ("America/Glace_Bay", "America/Glace_Bay"),
+                    ("America/Goose_Bay", "America/Goose_Bay"),
+                    ("America/Grand_Turk", "America/Grand_Turk"),
+                    ("America/Grenada", "America/Grenada"),
+                    ("America/Guadeloupe", "America/Guadeloupe"),
+                    ("America/Guatemala", "America/Guatemala"),
+                    ("America/Guayaquil", "America/Guayaquil"),
+                    ("America/Guyana", "America/Guyana"),
+                    ("America/Halifax", "America/Halifax"),
+                    ("America/Havana", "America/Havana"),
+                    ("America/Hermosillo", "America/Hermosillo"),
+                    ("America/Indiana/Indianapolis", "America/Indiana/Indianapolis"),
+                    ("America/Indiana/Knox", "America/Indiana/Knox"),
+                    ("America/Indiana/Marengo", "America/Indiana/Marengo"),
+                    ("America/Indiana/Petersburg", "America/Indiana/Petersburg"),
+                    ("America/Indiana/Tell_City", "America/Indiana/Tell_City"),
+                    ("America/Indiana/Vevay", "America/Indiana/Vevay"),
+                    ("America/Indiana/Vincennes", "America/Indiana/Vincennes"),
+                    ("America/Indiana/Winamac", "America/Indiana/Winamac"),
+                    ("America/Inuvik", "America/Inuvik"),
+                    ("America/Iqaluit", "America/Iqaluit"),
+                    ("America/Jamaica", "America/Jamaica"),
+                    ("America/Juneau", "America/Juneau"),
+                    ("America/Kentucky/Louisville", "America/Kentucky/Louisville"),
+                    ("America/Kentucky/Monticello", "America/Kentucky/Monticello"),
+                    ("America/La_Paz", "America/La_Paz"),
+                    ("America/Lima", "America/Lima"),
+                    ("America/Los_Angeles", "America/Los_Angeles"),
+                    ("America/Maceio", "America/Maceio"),
+                    ("America/Managua", "America/Managua"),
+                    ("America/Manaus", "America/Manaus"),
+                    ("America/Martinique", "America/Martinique"),
+                    ("America/Matamoros", "America/Matamoros"),
+                    ("America/Mazatlan", "America/Mazatlan"),
+                    ("America/Menominee", "America/Menominee"),
+                    ("America/Merida", "America/Merida"),
+                    ("America/Metlakatla", "America/Metlakatla"),
+                    ("America/Mexico_City", "America/Mexico_City"),
+                    ("America/Miquelon", "America/Miquelon"),
+                    ("America/Moncton", "America/Moncton"),
+                    ("America/Monterrey", "America/Monterrey"),
+                    ("America/Montevideo", "America/Montevideo"),
+                    ("America/Montserrat", "America/Montserrat"),
+                    ("America/Nassau", "America/Nassau"),
+                    ("America/New_York", "America/New_York"),
+                    ("America/Nipigon", "America/Nipigon"),
+                    ("America/Nome", "America/Nome"),
+                    ("America/Noronha", "America/Noronha"),
+                    ("America/North_Dakota/Beulah", "America/North_Dakota/Beulah"),
+                    ("America/North_Dakota/Center", "America/North_Dakota/Center"),
+                    (
+                        "America/North_Dakota/New_Salem",
+                        "America/North_Dakota/New_Salem",
+                    ),
+                    ("America/Nuuk", "America/Nuuk"),
+                    ("America/Ojinaga", "America/Ojinaga"),
+                    ("America/Panama", "America/Panama"),
+                    ("America/Pangnirtung", "America/Pangnirtung"),
+                    ("America/Paramaribo", "America/Paramaribo"),
+                    ("America/Phoenix", "America/Phoenix"),
+                    ("America/Port-au-Prince", "America/Port-au-Prince"),
+                    ("America/Port_of_Spain", "America/Port_of_Spain"),
+                    ("America/Porto_Velho", "America/Porto_Velho"),
+                    ("America/Puerto_Rico", "America/Puerto_Rico"),
+                    ("America/Punta_Arenas", "America/Punta_Arenas"),
+                    ("America/Rainy_River", "America/Rainy_River"),
+                    ("America/Rankin_Inlet", "America/Rankin_Inlet"),
+                    ("America/Recife", "America/Recife"),
+                    ("America/Regina", "America/Regina"),
+                    ("America/Resolute", "America/Resolute"),
+                    ("America/Rio_Branco", "America/Rio_Branco"),
+                    ("America/Santarem", "America/Santarem"),
+                    ("America/Santiago", "America/Santiago"),
+                    ("America/Santo_Domingo", "America/Santo_Domingo"),
+                    ("America/Sao_Paulo", "America/Sao_Paulo"),
+                    ("America/Scoresbysund", "America/Scoresbysund"),
+                    ("America/Sitka", "America/Sitka"),
+                    ("America/St_Johns", "America/St_Johns"),
+                    ("America/St_Kitts", "America/St_Kitts"),
+                    ("America/St_Lucia", "America/St_Lucia"),
+                    ("America/St_Thomas", "America/St_Thomas"),
+                    ("America/St_Vincent", "America/St_Vincent"),
+                    ("America/Swift_Current", "America/Swift_Current"),
+                    ("America/Tegucigalpa", "America/Tegucigalpa"),
+                    ("America/Thule", "America/Thule"),
+                    ("America/Thunder_Bay", "America/Thunder_Bay"),
+                    ("America/Tijuana", "America/Tijuana"),
+                    ("America/Toronto", "America/Toronto"),
+                    ("America/Tortola", "America/Tortola"),
+                    ("America/Vancouver", "America/Vancouver"),
+                    ("America/Whitehorse", "America/Whitehorse"),
+                    ("America/Winnipeg", "America/Winnipeg"),
+                    ("America/Yakutat", "America/Yakutat"),
+                    ("America/Yellowknife", "America/Yellowknife"),
+                    ("Antarctica/Casey", "Antarctica/Casey"),
+                    ("Antarctica/Davis", "Antarctica/Davis"),
+                    ("Antarctica/DumontDUrville", "Antarctica/DumontDUrville"),
+                    ("Antarctica/Macquarie", "Antarctica/Macquarie"),
+                    ("Antarctica/Mawson", "Antarctica/Mawson"),
+                    ("Antarctica/McMurdo", "Antarctica/McMurdo"),
+                    ("Antarctica/Palmer", "Antarctica/Palmer"),
+                    ("Antarctica/Rothera", "Antarctica/Rothera"),
+                    ("Antarctica/Syowa", "Antarctica/Syowa"),
+                    ("Antarctica/Troll", "Antarctica/Troll"),
+                    ("Antarctica/Vostok", "Antarctica/Vostok"),
+                    ("Asia/Aden", "Asia/Aden"),
+                    ("Asia/Almaty", "Asia/Almaty"),
+                    ("Asia/Amman", "Asia/Amman"),
+                    ("Asia/Anadyr", "Asia/Anadyr"),
+                    ("Asia/Aqtau", "Asia/Aqtau"),
+                    ("Asia/Aqtobe", "Asia/Aqtobe"),
+                    ("Asia/Ashgabat", "Asia/Ashgabat"),
+                    ("Asia/Atyrau", "Asia/Atyrau"),
+                    ("Asia/Baghdad", "Asia/Baghdad"),
+                    ("Asia/Bahrain", "Asia/Bahrain"),
+                    ("Asia/Baku", "Asia/Baku"),
+                    ("Asia/Bangkok", "Asia/Bangkok"),
+                    ("Asia/Barnaul", "Asia/Barnaul"),
+                    ("Asia/Beirut", "Asia/Beirut"),
+                    ("Asia/Bishkek", "Asia/Bishkek"),
+                    ("Asia/Brunei", "Asia/Brunei"),
+                    ("Asia/Chita", "Asia/Chita"),
+                    ("Asia/Choibalsan", "Asia/Choibalsan"),
+                    ("Asia/Colombo", "Asia/Colombo"),
+                    ("Asia/Damascus", "Asia/Damascus"),
+                    ("Asia/Dhaka", "Asia/Dhaka"),
+                    ("Asia/Dili", "Asia/Dili"),
+                    ("Asia/Dubai", "Asia/Dubai"),
+                    ("Asia/Dushanbe", "Asia/Dushanbe"),
+                    ("Asia/Famagusta", "Asia/Famagusta"),
+                    ("Asia/Gaza", "Asia/Gaza"),
+                    ("Asia/Hebron", "Asia/Hebron"),
+                    ("Asia/Ho_Chi_Minh", "Asia/Ho_Chi_Minh"),
+                    ("Asia/Hong_Kong", "Asia/Hong_Kong"),
+                    ("Asia/Hovd", "Asia/Hovd"),
+                    ("Asia/Irkutsk", "Asia/Irkutsk"),
+                    ("Asia/Jakarta", "Asia/Jakarta"),
+                    ("Asia/Jayapura", "Asia/Jayapura"),
+                    ("Asia/Jerusalem", "Asia/Jerusalem"),
+                    ("Asia/Kabul", "Asia/Kabul"),
+                    ("Asia/Kamchatka", "Asia/Kamchatka"),
+                    ("Asia/Karachi", "Asia/Karachi"),
+                    ("Asia/Kathmandu", "Asia/Kathmandu"),
+                    ("Asia/Khandyga", "Asia/Khandyga"),
+                    ("Asia/Kolkata", "Asia/Kolkata"),
+                    ("Asia/Krasnoyarsk", "Asia/Krasnoyarsk"),
+                    ("Asia/Kuala_Lumpur", "Asia/Kuala_Lumpur"),
+                    ("Asia/Kuching", "Asia/Kuching"),
+                    ("Asia/Kuwait", "Asia/Kuwait"),
+                    ("Asia/Macau", "Asia/Macau"),
+                    ("Asia/Magadan", "Asia/Magadan"),
+                    ("Asia/Makassar", "Asia/Makassar"),
+                    ("Asia/Manila", "Asia/Manila"),
+                    ("Asia/Muscat", "Asia/Muscat"),
+                    ("Asia/Nicosia", "Asia/Nicosia"),
+                    ("Asia/Novokuznetsk", "Asia/Novokuznetsk"),
+                    ("Asia/Novosibirsk", "Asia/Novosibirsk"),
+                    ("Asia/Omsk", "Asia/Omsk"),
+                    ("Asia/Oral", "Asia/Oral"),
+                    ("Asia/Phnom_Penh", "Asia/Phnom_Penh"),
+                    ("Asia/Pontianak", "Asia/Pontianak"),
+                    ("Asia/Pyongyang", "Asia/Pyongyang"),
+                    ("Asia/Qatar", "Asia/Qatar"),
+                    ("Asia/Qostanay", "Asia/Qostanay"),
+                    ("Asia/Qyzylorda", "Asia/Qyzylorda"),
+                    ("Asia/Riyadh", "Asia/Riyadh"),
+                    ("Asia/Sakhalin", "Asia/Sakhalin"),
+                    ("Asia/Samarkand", "Asia/Samarkand"),
+                    ("Asia/Seoul", "Asia/Seoul"),
+                    ("Asia/Shanghai", "Asia/Shanghai"),
+                    ("Asia/Singapore", "Asia/Singapore"),
+                    ("Asia/Srednekolymsk", "Asia/Srednekolymsk"),
+                    ("Asia/Taipei", "Asia/Taipei"),
+                    ("Asia/Tashkent", "Asia/Tashkent"),
+                    ("Asia/Tbilisi", "Asia/Tbilisi"),
+                    ("Asia/Tehran", "Asia/Tehran"),
+                    ("Asia/Thimphu", "Asia/Thimphu"),
+                    ("Asia/Tokyo", "Asia/Tokyo"),
+                    ("Asia/Tomsk", "Asia/Tomsk"),
+                    ("Asia/Ulaanbaatar", "Asia/Ulaanbaatar"),
+                    ("Asia/Urumqi", "Asia/Urumqi"),
+                    ("Asia/Ust-Nera", "Asia/Ust-Nera"),
+                    ("Asia/Vientiane", "Asia/Vientiane"),
+                    ("Asia/Vladivostok", "Asia/Vladivostok"),
+                    ("Asia/Yakutsk", "Asia/Yakutsk"),
+                    ("Asia/Yangon", "Asia/Yangon"),
+                    ("Asia/Yekaterinburg", "Asia/Yekaterinburg"),
+                    ("Asia/Yerevan", "Asia/Yerevan"),
+                    ("Atlantic/Azores", "Atlantic/Azores"),
+                    ("Atlantic/Bermuda", "Atlantic/Bermuda"),
+                    ("Atlantic/Canary", "Atlantic/Canary"),
+                    ("Atlantic/Cape_Verde", "Atlantic/Cape_Verde"),
+                    ("Atlantic/Faroe", "Atlantic/Faroe"),
+                    ("Atlantic/Madeira", "Atlantic/Madeira"),
+                    ("Atlantic/Reykjavik", "Atlantic/Reykjavik"),
+                    ("Atlantic/South_Georgia", "Atlantic/South_Georgia"),
+                    ("Atlantic/St_Helena", "Atlantic/St_Helena"),
+                    ("Atlantic/Stanley", "Atlantic/Stanley"),
+                    ("Australia/Adelaide", "Australia/Adelaide"),
+                    ("Australia/Brisbane", "Australia/Brisbane"),
+                    ("Australia/Broken_Hill", "Australia/Broken_Hill"),
+                    ("Australia/Darwin", "Australia/Darwin"),
+                    ("Australia/Eucla", "Australia/Eucla"),
+                    ("Australia/Hobart", "Australia/Hobart"),
+                    ("Australia/Lindeman", "Australia/Lindeman"),
+                    ("Australia/Lord_Howe", "Australia/Lord_Howe"),
+                    ("Australia/Melbourne", "Australia/Melbourne"),
+                    ("Australia/Perth", "Australia/Perth"),
+                    ("Australia/Sydney", "Australia/Sydney"),
+                    ("Europe/Amsterdam", "Europe/Amsterdam"),
+                    ("Europe/Andorra", "Europe/Andorra"),
+                    ("Europe/Astrakhan", "Europe/Astrakhan"),
+                    ("Europe/Athens", "Europe/Athens"),
+                    ("Europe/Belgrade", "Europe/Belgrade"),
+                    ("Europe/Berlin", "Europe/Berlin"),
+                    ("Europe/Brussels", "Europe/Brussels"),
+                    ("Europe/Bucharest", "Europe/Bucharest"),
+                    ("Europe/Budapest", "Europe/Budapest"),
+                    ("Europe/Chisinau", "Europe/Chisinau"),
+                    ("Europe/Copenhagen", "Europe/Copenhagen"),
+                    ("Europe/Dublin", "Europe/Dublin"),
+                    ("Europe/Gibraltar", "Europe/Gibraltar"),
+                    ("Europe/Helsinki", "Europe/Helsinki"),
+                    ("Europe/Istanbul", "Europe/Istanbul"),
+                    ("Europe/Kaliningrad", "Europe/Kaliningrad"),
+                    ("Europe/Kirov", "Europe/Kirov"),
+                    ("Europe/Kyiv", "Europe/Kyiv"),
+                    ("Europe/Lisbon", "Europe/Lisbon"),
+                    ("Europe/London", "Europe/London"),
+                    ("Europe/Luxembourg", "Europe/Luxembourg"),
+                    ("Europe/Madrid", "Europe/Madrid"),
+                    ("Europe/Malta", "Europe/Malta"),
+                    ("Europe/Minsk", "Europe/Minsk"),
+                    ("Europe/Monaco", "Europe/Monaco"),
+                    ("Europe/Moscow", "Europe/Moscow"),
+                    ("Europe/Oslo", "Europe/Oslo"),
+                    ("Europe/Paris", "Europe/Paris"),
+                    ("Europe/Prague", "Europe/Prague"),
+                    ("Europe/Riga", "Europe/Riga"),
+                    ("Europe/Rome", "Europe/Rome"),
+                    ("Europe/Samara", "Europe/Samara"),
+                    ("Europe/Saratov", "Europe/Saratov"),
+                    ("Europe/Simferopol", "Europe/Simferopol"),
+                    ("Europe/Sofia", "Europe/Sofia"),
+                    ("Europe/Stockholm", "Europe/Stockholm"),
+                    ("Europe/Tallinn", "Europe/Tallinn"),
+                    ("Europe/Tirane", "Europe/Tirane"),
+                    ("Europe/Ulyanovsk", "Europe/Ulyanovsk"),
+                    ("Europe/Uzhgorod", "Europe/Uzhgorod"),
+                    ("Europe/Vaduz", "Europe/Vaduz"),
+                    ("Europe/Vienna", "Europe/Vienna"),
+                    ("Europe/Vilnius", "Europe/Vilnius"),
+                    ("Europe/Volgograd", "Europe/Volgograd"),
+                    ("Europe/Warsaw", "Europe/Warsaw"),
+                    ("Europe/Zaporozhye", "Europe/Zaporozhye"),
+                    ("Europe/Zurich", "Europe/Zurich"),
+                    ("Indian/Antananarivo", "Indian/Antananarivo"),
+                    ("Indian/Chagos", "Indian/Chagos"),
+                    ("Indian/Christmas", "Indian/Christmas"),
+                    ("Indian/Cocos", "Indian/Cocos"),
+                    ("Indian/Comoro", "Indian/Comoro"),
+                    ("Indian/Kerguelen", "Indian/Kerguelen"),
+                    ("Indian/Mahe", "Indian/Mahe"),
+                    ("Indian/Maldives", "Indian/Maldives"),
+                    ("Indian/Mauritius", "Indian/Mauritius"),
+                    ("Indian/Mayotte", "Indian/Mayotte"),
+                    ("Indian/Reunion", "Indian/Reunion"),
+                    ("Pacific/Apia", "Pacific/Apia"),
+                    ("Pacific/Auckland", "Pacific/Auckland"),
+                    ("Pacific/Bougainville", "Pacific/Bougainville"),
+                    ("Pacific/Chatham", "Pacific/Chatham"),
+                    ("Pacific/Chuuk", "Pacific/Chuuk"),
+                    ("Pacific/Easter", "Pacific/Easter"),
+                    ("Pacific/Efate", "Pacific/Efate"),
+                    ("Pacific/Fakaofo", "Pacific/Fakaofo"),
+                    ("Pacific/Fiji", "Pacific/Fiji"),
+                    ("Pacific/Funafuti", "Pacific/Funafuti"),
+                    ("Pacific/Galapagos", "Pacific/Galapagos"),
+                    ("Pacific/Gambier", "Pacific/Gambier"),
+                    ("Pacific/Guadalcanal", "Pacific/Guadalcanal"),
+                    ("Pacific/Guam", "Pacific/Guam"),
+                    ("Pacific/Honolulu", "Pacific/Honolulu"),
+                    ("Pacific/Kanton", "Pacific/Kanton"),
+                    ("Pacific/Kiritimati", "Pacific/Kiritimati"),
+                    ("Pacific/Kosrae", "Pacific/Kosrae"),
+                    ("Pacific/Kwajalein", "Pacific/Kwajalein"),
+                    ("Pacific/Majuro", "Pacific/Majuro"),
+                    ("Pacific/Marquesas", "Pacific/Marquesas"),
+                    ("Pacific/Midway", "Pacific/Midway"),
+                    ("Pacific/Nauru", "Pacific/Nauru"),
+                    ("Pacific/Niue", "Pacific/Niue"),
+                    ("Pacific/Norfolk", "Pacific/Norfolk"),
+                    ("Pacific/Noumea", "Pacific/Noumea"),
+                    ("Pacific/Pago_Pago", "Pacific/Pago_Pago"),
+                    ("Pacific/Palau", "Pacific/Palau"),
+                    ("Pacific/Pitcairn", "Pacific/Pitcairn"),
+                    ("Pacific/Pohnpei", "Pacific/Pohnpei"),
+                    ("Pacific/Port_Moresby", "Pacific/Port_Moresby"),
+                    ("Pacific/Rarotonga", "Pacific/Rarotonga"),
+                    ("Pacific/Saipan", "Pacific/Saipan"),
+                    ("Pacific/Tahiti", "Pacific/Tahiti"),
+                    ("Pacific/Tarawa", "Pacific/Tarawa"),
+                    ("Pacific/Tongatapu", "Pacific/Tongatapu"),
+                    ("Pacific/Wake", "Pacific/Wake"),
+                    ("Pacific/Wallis", "Pacific/Wallis"),
+                    ("UTC", "UTC"),
+                ],
+                default="UTC",
+                max_length=255,
+            ),
+        ),
+    ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 62275082e4..de0192769e 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -1,5 +1,4 @@
-# -*- coding: utf-8 -*-
-# Copyright The IETF Trust 2007-2024, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 
 
 # old meeting models can be found in ../proceedings/models.py
@@ -60,7 +59,7 @@
     sorted(
         (name, name)
         for name in pytz.common_timezones
-        if not (_tzdata_ics_path / f"{name}.ics").is_symlink()
+        if name != "GMT" and not (_tzdata_ics_path / f"{name}.ics").is_symlink()
     )
 )
 

From ecc478653ad6ff09122f07c7663884eee74b80ab Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Jun 2025 13:26:20 -0300
Subject: [PATCH 352/707] fix: handle absent <title> in XML submission (#9044)

* fix: handle absent front/title in get_title()

* test: test get_title()

* chore: copyrights

* chore: fix copyright + remove stray newline
---
 ietf/utils/tests.py    | 19 ++++++++++++++++++-
 ietf/utils/xmldraft.py |  5 +++--
 2 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 2dd861cd11..872aa366b9 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2014-2020, All Rights Reserved
+# Copyright The IETF Trust 2014-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -741,6 +741,23 @@ def test_render_author_name(self):
             "J. Q.",
         )
 
+    @patch("ietf.utils.xmldraft.XMLDraft.__init__", return_value=None)
+    def test_get_title(self, mock_init):
+        xmldraft = XMLDraft("fake")
+        self.assertTrue(mock_init.called)
+        # Stub XML that does not have a front/title element
+        xmldraft.xmlroot = lxml.etree.XML(
+            "<rfc><front></front></rfc>"  # no title
+        )
+        self.assertEqual(xmldraft.get_title(), "")
+
+        # Stub XML that has a front/title element
+        xmldraft.xmlroot = lxml.etree.XML(
+            "<rfc><front><title>This Is the Title</title></front></rfc>"
+        )
+        self.assertEqual(xmldraft.get_title(), "This Is the Title")
+
+        
     def test_capture_xml2rfc_output(self):
         """capture_xml2rfc_output reroutes and captures xml2rfc logs"""
         orig_write_out = xml2rfc_log.write_out
diff --git a/ietf/utils/xmldraft.py b/ietf/utils/xmldraft.py
index 3ac9a269c7..7ef6605c78 100644
--- a/ietf/utils/xmldraft.py
+++ b/ietf/utils/xmldraft.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2022, All Rights Reserved
+# Copyright The IETF Trust 2022-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 import datetime
 import io
@@ -147,7 +147,8 @@ def parse_docname(xmlroot):
         return revmatch.group('filename'), revmatch.group('rev')
 
     def get_title(self):
-        return self.xmlroot.findtext('front/title').strip()
+        title_text = self.xmlroot.findtext('front/title')
+        return "" if title_text is None else title_text.strip()
 
     @staticmethod
     def parse_creation_date(date_elt):

From 9e4660e89008c1acb286f2001ba00096f2342119 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Jun 2025 12:43:15 -0300
Subject: [PATCH 353/707] feat: add ability to require strong passwords (#8828)

* feat: enforce pw strength at login

* chore(deps): add zxcvbn to requirements.txt

* feat: use zxcvbn for password strength check

* feat: validate password strength for setting pw

* feat: feedback on password change page

* refactor: avoid field validator munging

* feat: give more info about how to choose a pw

* refactor: use password_validation module

Only for changing password so; may need to update StrongPasswordAuthenticationForm to match

* feat: password min_length validdation

* refactor: use password_validation for login form

* fix: UI feedback consistent with validation

* chore: update chpw page to state length req

* chore(dev): disable password validators in dev

* fix: drop JS validation when password val disabled

* style: ruff on ChangePasswordForm

* chore: lint

* chore(dev): preserve pw validator cfg for tests

* test: fix test_change_password

* test: fix test_change_username

* test: fix test_reset_password

* style: ruff refactored tests

* chore: type lint

* feat: require pw reset for very stale accounts

* test: test stale account login

* test: rejection of short/simple PWs

* Revert "test: test stale account login"

This reverts commit ae0d90bb29fb379e547dd33f1a6c9aa04c03477b.

* Revert "feat: require pw reset for very stale accounts"

This reverts commit 1a98ef4c63500e4cbebbf6150d9bb5e15815fb4a.

* test: disable pw validators for playwright legacy tests

* feat: make pw enforcement at login optional
---
 ietf/ietfauth/forms.py                        |  54 +++--
 ietf/ietfauth/password_validation.py          |  23 ++
 ietf/ietfauth/tests.py                        | 205 +++++++++++++-----
 ietf/ietfauth/views.py                        |  34 ++-
 ietf/ietfauth/widgets.py                      |   9 +-
 ietf/settings.py                              |  20 ++
 ietf/settings_test.py                         |  15 +-
 ietf/static/js/password_strength.js           |  48 +++-
 .../registration/change_password.html         |  11 +-
 k8s/settings_local.py                         |   5 +
 requirements.txt                              |   2 +
 11 files changed, 321 insertions(+), 105 deletions(-)
 create mode 100644 ietf/ietfauth/password_validation.py

diff --git a/ietf/ietfauth/forms.py b/ietf/ietfauth/forms.py
index a70f7b6ca1..53bf7b5888 100644
--- a/ietf/ietfauth/forms.py
+++ b/ietf/ietfauth/forms.py
@@ -3,16 +3,19 @@
 
 
 import re
+
 from unidecode import unidecode
 
 from django import forms
+from django.contrib.auth.models import User
+from django.contrib.auth import password_validation
 from django.core.exceptions import ValidationError
 from django.db import models
-from django.contrib.auth.models import User
 
 from ietf.person.models import Person, Email
 from ietf.mailinglists.models import Allowlisted
 from ietf.utils.text import isascii
+from .password_validation import StrongPasswordValidator
 
 from .validators import prevent_at_symbol, prevent_system_name, prevent_anonymous_name, is_allowed_address
 from .widgets import PasswordStrengthInput, PasswordConfirmationInput
@@ -170,33 +173,52 @@ class Meta:
         model = Allowlisted
         exclude = ['by', 'time' ]
 
-    
-from django import forms
-
 
 class ChangePasswordForm(forms.Form):
     current_password = forms.CharField(widget=forms.PasswordInput)
 
-    new_password = forms.CharField(widget=PasswordStrengthInput(attrs={'class':'password_strength'}))
-    new_password_confirmation = forms.CharField(widget=PasswordConfirmationInput(
-                                                    confirm_with='new_password',
-                                                    attrs={'class':'password_confirmation'}))
+    new_password = forms.CharField(
+        widget=PasswordStrengthInput(
+            attrs={
+                "class": "password_strength",
+                "data-disable-strength-enforcement": "",  # usually removed in init
+            }
+        ),
+    )
+    new_password_confirmation = forms.CharField(
+        widget=PasswordConfirmationInput(
+            confirm_with="new_password", attrs={"class": "password_confirmation"}
+        )
+    )
 
     def __init__(self, user, data=None):
         self.user = user
-        super(ChangePasswordForm, self).__init__(data)
+        super().__init__(data)
+        # Check whether we have validators to enforce
+        new_password_field = self.fields["new_password"]
+        for pwval in password_validation.get_default_password_validators():
+            if isinstance(pwval, password_validation.MinimumLengthValidator):
+                new_password_field.widget.attrs["minlength"] = pwval.min_length
+            elif isinstance(pwval, StrongPasswordValidator):
+                new_password_field.widget.attrs.pop(
+                    "data-disable-strength-enforcement", None
+                )
 
     def clean_current_password(self):
-        password = self.cleaned_data.get('current_password', None)
+        # n.b., password = None is handled by check_password and results in a failed check
+        password = self.cleaned_data.get("current_password", None)
         if not self.user.check_password(password):
-            raise ValidationError('Invalid password')
+            raise ValidationError("Invalid password")
         return password
-            
+
     def clean(self):
-        new_password = self.cleaned_data.get('new_password', None)
-        conf_password = self.cleaned_data.get('new_password_confirmation', None)
-        if not new_password == conf_password:
-            raise ValidationError("The password confirmation is different than the new password")
+        new_password = self.cleaned_data.get("new_password", "")
+        conf_password = self.cleaned_data.get("new_password_confirmation", "")
+        if new_password != conf_password:
+            raise ValidationError(
+                "The password confirmation is different than the new password"
+            )
+        password_validation.validate_password(conf_password, self.user)
 
 
 class ChangeUsernameForm(forms.Form):
diff --git a/ietf/ietfauth/password_validation.py b/ietf/ietfauth/password_validation.py
new file mode 100644
index 0000000000..bfed4a784e
--- /dev/null
+++ b/ietf/ietfauth/password_validation.py
@@ -0,0 +1,23 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from django.core.exceptions import ValidationError
+from zxcvbn import zxcvbn
+
+
+class StrongPasswordValidator:
+    message = "This password does not meet complexity requirements and is easily guessable."
+    code = "weak"
+    min_zxcvbn_score = 3
+
+    def __init__(self, message=None, code=None, min_zxcvbn_score=None):
+        if message is not None:
+            self.message = message
+        if code is not None:
+            self.code = code
+        if min_zxcvbn_score is not None:
+            self.min_zxcvbn_score = min_zxcvbn_score
+
+    def validate(self, password, user=None):
+        """Validate that a password is strong enough"""
+        strength_report = zxcvbn(password[:72], max_length=72)
+        if strength_report["score"] < self.min_zxcvbn_score:
+            raise ValidationError(message=self.message, code=self.code)
diff --git a/ietf/ietfauth/tests.py b/ietf/ietfauth/tests.py
index f6d7671bc9..dd23277b63 100644
--- a/ietf/ietfauth/tests.py
+++ b/ietf/ietfauth/tests.py
@@ -392,14 +392,14 @@ def test_nomcom_dressing_on_profile(self):
         self.assertFalse(q('#volunteer-button'))
         self.assertTrue(q('#volunteered'))
 
-
     def test_reset_password(self):
+        VALID_PASSWORD = "complex-and-long-valid-password"
+        ANOTHER_VALID_PASSWORD = "very-complicated-and-lengthy-password"
         url = urlreverse("ietf.ietfauth.views.password_reset")
-        email = 'someone@example.com'
-        password = 'foobar'
+        email = "someone@example.com"
 
         user = PersonFactory(user__email=email).user
-        user.set_password(password)
+        user.set_password(VALID_PASSWORD)
         user.save()
 
         # get
@@ -407,21 +407,23 @@ def test_reset_password(self):
         self.assertEqual(r.status_code, 200)
 
         # ask for reset, wrong username (form should not fail)
-        r = self.client.post(url, { 'username': "nobody@example.com" })
+        r = self.client.post(url, {"username": "nobody@example.com"})
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue(len(q("form .is-invalid")) == 0)
 
         # ask for reset
         empty_outbox()
-        r = self.client.post(url, { 'username': user.username })
+        r = self.client.post(url, {"username": user.username})
         self.assertEqual(r.status_code, 200)
         self.assertEqual(len(outbox), 1)
 
         # goto change password page, logged in as someone else
         confirm_url = self.extract_confirm_url(outbox[-1])
         other_user = UserFactory()
-        self.client.login(username=other_user.username, password=other_user.username + '+password')
+        self.client.login(
+            username=other_user.username, password=other_user.username + "+password"
+        )
         r = self.client.get(confirm_url)
         self.assertEqual(r.status_code, 403)
 
@@ -430,17 +432,32 @@ def test_reset_password(self):
         r = self.client.get(confirm_url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertNotIn(user.username, q('.nav').text(),
-                         'user should not appear signed in while resetting password')
+        self.assertNotIn(
+            user.username,
+            q(".nav").text(),
+            "user should not appear signed in while resetting password",
+        )
 
         # password mismatch
-        r = self.client.post(confirm_url, { 'password': 'secret', 'password_confirmation': 'nosecret' })
+        r = self.client.post(
+            confirm_url,
+            {
+                "password": ANOTHER_VALID_PASSWORD,
+                "password_confirmation": ANOTHER_VALID_PASSWORD[::-1],
+            },
+        )
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue(len(q("form .is-invalid")) > 0)
 
         # confirm
-        r = self.client.post(confirm_url, { 'password': 'secret', 'password_confirmation': 'secret' })
+        r = self.client.post(
+            confirm_url,
+            {
+                "password": ANOTHER_VALID_PASSWORD,
+                "password_confirmation": ANOTHER_VALID_PASSWORD,
+            },
+        )
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertEqual(len(q("form .is-invalid")), 0)
@@ -451,15 +468,18 @@ def test_reset_password(self):
 
         # login after reset request
         empty_outbox()
-        user.set_password(password)
+        user.set_password(VALID_PASSWORD)
         user.save()
 
-        r = self.client.post(url, { 'username': user.username })
+        r = self.client.post(url, {"username": user.username})
         self.assertEqual(r.status_code, 200)
         self.assertEqual(len(outbox), 1)
         confirm_url = self.extract_confirm_url(outbox[-1])
 
-        r = self.client.post(urlreverse("ietf.ietfauth.views.login"), {'username': email, 'password': password})
+        r = self.client.post(
+            urlreverse("ietf.ietfauth.views.login"),
+            {"username": email, "password": VALID_PASSWORD},
+        )
 
         r = self.client.get(confirm_url)
         self.assertEqual(r.status_code, 404)
@@ -467,12 +487,12 @@ def test_reset_password(self):
         # change password after reset request
         empty_outbox()
 
-        r = self.client.post(url, { 'username': user.username })
+        r = self.client.post(url, {"username": user.username})
         self.assertEqual(r.status_code, 200)
         self.assertEqual(len(outbox), 1)
         confirm_url = self.extract_confirm_url(outbox[-1])
 
-        user.set_password('newpassword')
+        user.set_password(ANOTHER_VALID_PASSWORD)
         user.save()
 
         r = self.client.get(confirm_url)
@@ -586,98 +606,175 @@ def test_review_overview(self):
         self.assertEqual(ReviewWish.objects.filter(doc=doc, team=review_req.team).count(), 0)
 
     def test_change_password(self):
+        VALID_PASSWORD = "complex-and-long-valid-password"
+        ANOTHER_VALID_PASSWORD = "very-complicated-and-lengthy-password"
         chpw_url = urlreverse("ietf.ietfauth.views.change_password")
         prof_url = urlreverse("ietf.ietfauth.views.profile")
         login_url = urlreverse("ietf.ietfauth.views.login")
-        redir_url = '%s?next=%s' % (login_url, chpw_url)
+        redir_url = "%s?next=%s" % (login_url, chpw_url)
 
         # get without logging in
         r = self.client.get(chpw_url)
         self.assertRedirects(r, redir_url)
 
-        user = User.objects.create(username="someone@example.com", email="someone@example.com")
-        user.set_password("password")
+        user = User.objects.create(
+            username="someone@example.com", email="someone@example.com"
+        )
+        user.set_password(VALID_PASSWORD)
         user.save()
         p = Person.objects.create(name="Some One", ascii="Some One", user=user)
         Email.objects.create(address=user.username, person=p, origin=user.username)
 
         # log in
-        r = self.client.post(redir_url, {"username":user.username, "password":"password"})
+        r = self.client.post(
+            redir_url, {"username": user.username, "password": VALID_PASSWORD}
+        )
         self.assertRedirects(r, chpw_url)
 
         # wrong current password
-        r = self.client.post(chpw_url, {"current_password": "fiddlesticks",
-                                        "new_password": "foobar",
-                                        "new_password_confirmation": "foobar",
-                                       })
+        r = self.client.post(
+            chpw_url,
+            {
+                "current_password": "fiddlesticks",
+                "new_password": ANOTHER_VALID_PASSWORD,
+                "new_password_confirmation": ANOTHER_VALID_PASSWORD,
+            },
+        )
         self.assertEqual(r.status_code, 200)
-        self.assertFormError(r.context["form"], 'current_password', 'Invalid password')
+        self.assertFormError(r.context["form"], "current_password", "Invalid password")
 
         # mismatching new passwords
-        r = self.client.post(chpw_url, {"current_password": "password",
-                                        "new_password": "foobar",
-                                        "new_password_confirmation": "barfoo",
-                                       })
+        r = self.client.post(
+            chpw_url,
+            {
+                "current_password": VALID_PASSWORD,
+                "new_password": ANOTHER_VALID_PASSWORD,
+                "new_password_confirmation": ANOTHER_VALID_PASSWORD[::-1],
+            },
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertFormError(
+            r.context["form"],
+            None,
+            "The password confirmation is different than the new password",
+        )
+
+        # password too short
+        r = self.client.post(
+            chpw_url,
+            {
+                "current_password": VALID_PASSWORD,
+                "new_password": "sh0rtpw0rd",
+                "new_password_confirmation": "sh0rtpw0rd",
+            }
+        )
         self.assertEqual(r.status_code, 200)
-        self.assertFormError(r.context["form"], None, "The password confirmation is different than the new password")
+        self.assertFormError(
+            r.context["form"],
+            None,
+            "This password is too short. It must contain at least "
+            f"{settings.PASSWORD_POLICY_MIN_LENGTH} characters."
+        )
+
+        # password too simple
+        r = self.client.post(
+            chpw_url,
+            {
+                "current_password": VALID_PASSWORD,
+                "new_password": "passwordpassword",
+                "new_password_confirmation": "passwordpassword",
+            }
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertFormError(
+            r.context["form"],
+            None,
+            "This password does not meet complexity requirements "
+            "and is easily guessable."
+        )
 
         # correct password change
-        r = self.client.post(chpw_url, {"current_password": "password",
-                                        "new_password": "foobar",
-                                        "new_password_confirmation": "foobar",
-                                       })
+        r = self.client.post(
+            chpw_url,
+            {
+                "current_password": VALID_PASSWORD,
+                "new_password": ANOTHER_VALID_PASSWORD,
+                "new_password_confirmation": ANOTHER_VALID_PASSWORD,
+            },
+        )
         self.assertRedirects(r, prof_url)
         # refresh user object
         user = User.objects.get(username="someone@example.com")
-        self.assertTrue(user.check_password('foobar'))
+        self.assertTrue(user.check_password(ANOTHER_VALID_PASSWORD))
 
     def test_change_username(self):
-
+        VALID_PASSWORD = "complex-and-long-valid-password"
         chun_url = urlreverse("ietf.ietfauth.views.change_username")
         prof_url = urlreverse("ietf.ietfauth.views.profile")
         login_url = urlreverse("ietf.ietfauth.views.login")
-        redir_url = '%s?next=%s' % (login_url, chun_url)
+        redir_url = "%s?next=%s" % (login_url, chun_url)
 
         # get without logging in
         r = self.client.get(chun_url)
         self.assertRedirects(r, redir_url)
 
-        user = User.objects.create(username="someone@example.com", email="someone@example.com")
-        user.set_password("password")
+        user = User.objects.create(
+            username="someone@example.com", email="someone@example.com"
+        )
+        user.set_password(VALID_PASSWORD)
         user.save()
         p = Person.objects.create(name="Some One", ascii="Some One", user=user)
         Email.objects.create(address=user.username, person=p, origin=user.username)
-        Email.objects.create(address="othername@example.org", person=p, origin=user.username)
+        Email.objects.create(
+            address="othername@example.org", person=p, origin=user.username
+        )
 
         # log in
-        r = self.client.post(redir_url, {"username":user.username, "password":"password"})
+        r = self.client.post(
+            redir_url, {"username": user.username, "password": VALID_PASSWORD}
+        )
         self.assertRedirects(r, chun_url)
 
         # wrong username
-        r = self.client.post(chun_url, {"username": "fiddlesticks",
-                                        "password": "password",
-                                       })
+        r = self.client.post(
+            chun_url,
+            {
+                "username": "fiddlesticks",
+                "password": VALID_PASSWORD,
+            },
+        )
         self.assertEqual(r.status_code, 200)
-        self.assertFormError(r.context["form"], 'username',
-            "Select a valid choice. fiddlesticks is not one of the available choices.")
+        self.assertFormError(
+            r.context["form"],
+            "username",
+            "Select a valid choice. fiddlesticks is not one of the available choices.",
+        )
 
         # wrong password
-        r = self.client.post(chun_url, {"username": "othername@example.org",
-                                        "password": "foobar",
-                                       })
+        r = self.client.post(
+            chun_url,
+            {
+                "username": "othername@example.org",
+                "password": "foobar",
+            },
+        )
         self.assertEqual(r.status_code, 200)
-        self.assertFormError(r.context["form"], 'password', 'Invalid password')
+        self.assertFormError(r.context["form"], "password", "Invalid password")
 
         # correct username change
-        r = self.client.post(chun_url, {"username": "othername@example.org",
-                                        "password": "password",
-                                       })
+        r = self.client.post(
+            chun_url,
+            {
+                "username": "othername@example.org",
+                "password": VALID_PASSWORD,
+            },
+        )
         self.assertRedirects(r, prof_url)
         # refresh user object
         prev = user
         user = User.objects.get(username="othername@example.org")
         self.assertEqual(prev, user)
-        self.assertTrue(user.check_password('password'))
+        self.assertTrue(user.check_password(VALID_PASSWORD))
 
     def test_apikey_management(self):
         # Create a person with a role that will give at least one valid apikey
diff --git a/ietf/ietfauth/views.py b/ietf/ietfauth/views.py
index 23f66ce824..84d5490873 100644
--- a/ietf/ietfauth/views.py
+++ b/ietf/ietfauth/views.py
@@ -38,14 +38,14 @@
 import importlib
 
 # needed if we revert to higher barrier for account creation
-#from datetime import datetime as DateTime, timedelta as TimeDelta, date as Date
+# from datetime import datetime as DateTime, timedelta as TimeDelta, date as Date
 from collections import defaultdict
 
 import django.core.signing
 from django import forms
 from django.contrib import messages
 from django.conf import settings
-from django.contrib.auth import logout, update_session_auth_hash
+from django.contrib.auth import logout, update_session_auth_hash, password_validation
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.forms import AuthenticationForm
 from django.contrib.auth.hashers import identify_hasher
@@ -80,7 +80,6 @@
 # These are needed if we revert to the higher bar for account creation
 
 
-
 def index(request):
     return render(request, 'registration/index.html')
 
@@ -97,7 +96,7 @@ def index(request):
 # def ietf_login(request):
 #     if not request.user.is_authenticated:
 #         return HttpResponse("Not authenticated?", status=500)
-# 
+#
 #     redirect_to = request.REQUEST.get(REDIRECT_FIELD_NAME, '')
 #     request.session.set_test_cookie()
 #     return HttpResponseRedirect('/accounts/loggedin/?%s=%s' % (REDIRECT_FIELD_NAME, urlquote(redirect_to)))
@@ -582,7 +581,6 @@ def test_email(request):
     return r
 
 
-
 class AddReviewWishForm(forms.Form):
     doc = SearchableDocumentField(label="Document", doc_type="draft")
     team = forms.ModelChoiceField(queryset=Group.objects.all(), empty_label="(Choose review team)")
@@ -696,7 +694,7 @@ def change_password(request):
         'hasher': hasher,
     })
 
-    
+
 @login_required
 @person_required
 def change_username(request):
@@ -764,6 +762,28 @@ def clean(self):
                 )
         return super().clean()
 
+    def confirm_login_allowed(self, user):
+        """Check whether a successfully authenticated user is permitted to log in"""
+        super().confirm_login_allowed(user)
+        # Optionally enforce password validation
+        if getattr(settings, "PASSWORD_POLICY_ENFORCE_AT_LOGIN", False):
+            try:
+                password_validation.validate_password(
+                    self.cleaned_data["password"], user
+                )
+            except ValidationError:
+                raise ValidationError(
+                    # dict mapping field to error / error list
+                    {
+                        "__all__": ValidationError(
+                            'You entered your password correctly, but it  does not '
+                            'meet our current length and complexity requirements. '
+                            'Please use the "Forgot your password?" button below to '
+                            'set a new password for your account.'
+                        ),
+                    }
+                )
+
 
 class AnyEmailLoginView(LoginView):
     """LoginView that allows any email address as the username
@@ -779,7 +799,7 @@ def form_valid(self, form):
             logout(self.request)  # should not be logged in yet, but just in case...
             return render(self.request, "registration/missing_person.html")
         return super().form_valid(form)
-        
+
 
 @login_required
 @person_required
diff --git a/ietf/ietfauth/widgets.py b/ietf/ietfauth/widgets.py
index c9a0523402..fd7fa16726 100644
--- a/ietf/ietfauth/widgets.py
+++ b/ietf/ietfauth/widgets.py
@@ -39,18 +39,19 @@ def render(self, name, value, attrs=None, renderer=None):
         strength_markup = """
         <div style="margin-top: 10px;">
             <div class="progress" style="margin-bottom: 10px;">
-                <div class="progress-bar progress-bar-warning password_strength_bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="5" style="width: 0%%"></div>
+                <div class="progress-bar progress-bar-warning password_strength_bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="5" style="width: 0%"></div>
             </div>
             <p class="text-body-secondary password_strength_info hidden">
                 <span class="label label-danger">
-                    %s
+                    {}
                 </span>
                 <span style="margin-left:5px;">
-                    %s
+                    {}
                 </span>
+                <span class="password_improvement_hint d-none"></span>
             </p>
         </div>
-        """ % (
+        """.format(
             _("Warning"),
             _(
                 'This password would take <em class="password_strength_time"></em> to crack.'
diff --git a/ietf/settings.py b/ietf/settings.py
index 0b6b3745d2..5e33673611 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -61,6 +61,26 @@
     'django.contrib.auth.hashers.CryptPasswordHasher',
 ]
 
+
+PASSWORD_POLICY_MIN_LENGTH = 12
+PASSWORD_POLICY_ENFORCE_AT_LOGIN = False  # should turn this on for prod
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        "NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
+        "OPTIONS": {
+            "min_length": PASSWORD_POLICY_MIN_LENGTH,
+        }
+    },
+    {
+        "NAME": "ietf.ietfauth.password_validation.StrongPasswordValidator",
+    },
+]
+# In dev environments, settings_local overrides the password validators. Save
+# a handle to the original value so settings_test can restore it so tests match
+# production.
+ORIG_AUTH_PASSWORD_VALIDATORS = AUTH_PASSWORD_VALIDATORS
+
 ALLOWED_HOSTS = [".ietf.org", ".ietf.org.", "209.208.19.216", "4.31.198.44", "127.0.0.1", "localhost", ]
 
 # Server name of the tools server
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index b5da9b833b..9a42e8b99d 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -14,7 +14,7 @@
 import shutil
 import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import TEST_CODE_COVERAGE_CHECKER
+from ietf.settings import TEST_CODE_COVERAGE_CHECKER, ORIG_AUTH_PASSWORD_VALIDATORS
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -110,11 +110,8 @@ def tempdir_with_cleanup(**kwargs):
     },
 }
 
-# Configure storages for the blob store - use env settings if present. See the --no-manage-blobstore test option.
-_blob_store_endpoint_url = os.environ.get("DATATRACKER_BLOB_STORE_ENDPOINT_URL", "http://blobstore:9000")
-_blob_store_access_key = os.environ.get("DATATRACKER_BLOB_STORE_ACCESS_KEY", "minio_root")
-_blob_store_secret_key = os.environ.get("DATATRACKER_BLOB_STORE_SECRET_KEY", "minio_pass")
-_blob_store_bucket_prefix = os.environ.get("DATATRACKER_BLOB_STORE_BUCKET_PREFIX", "test-")
-_blob_store_enable_profiling = (
-    os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
-)
+# Restore AUTH_PASSWORD_VALIDATORS if they were reset in settings_local
+try:
+    AUTH_PASSWORD_VALIDATORS = ORIG_AUTH_PASSWORD_VALIDATORS
+except NameError:
+    pass
diff --git a/ietf/static/js/password_strength.js b/ietf/static/js/password_strength.js
index 4df5c14439..74a245fb5c 100644
--- a/ietf/static/js/password_strength.js
+++ b/ietf/static/js/password_strength.js
@@ -57,22 +57,40 @@
                         .parent()
                         .parent()
                         .find('.password_strength_offline_info');
+                    let password_improvement_hint = $(password_strength_info)
+                        .find('.password_improvement_hint');
 
                     if ($(this)
                         .val()) {
                         var result = zxcvbn($(this)
                             .val());
-
-                        if (result.score < 3) {
-                            password_strength_bar.removeClass('text-bg-success')
-                                .addClass('text-bg-warning');
-                            password_strength_info.find('.badge')
-                                .removeClass('d-none');
+                        const enforceStrength = !('disableStrengthEnforcement' in this.dataset);
+                        const strongEnough = !enforceStrength || (result.score >= 3);
+                        if (strongEnough) {
+                            // Mark input as valid
+                            this.setCustomValidity('');
                         } else {
+                            // Mark input as invalid
+                            this.setCustomValidity('This password does not meet complexity requirements');
+                        }
+                        
+                        if (this.checkValidity()) {
                             password_strength_bar.removeClass('text-bg-warning')
                                 .addClass('text-bg-success');
                             password_strength_info.find('.badge')
                                 .addClass('d-none');
+                            this.classList.remove('is-invalid')
+                            password_improvement_hint.addClass('d-none');
+                            password_improvement_hint.text('')
+                        } else {
+                            this.classList.add('is-invalid')
+                            password_improvement_hint.text(this.validationMessage)
+                            password_improvement_hint.removeClass('d-none');
+
+                            password_strength_bar.removeClass('text-bg-success')
+                                .addClass('text-bg-warning');
+                            password_strength_info.find('.badge')
+                                .removeClass('d-none');
                         }
 
                         password_strength_bar.width(((result.score + 1) / 5) * 100 + '%')
@@ -152,23 +170,31 @@
                     .data('confirm-with');
 
                 if (confirm_with && confirm_with == password_field.attr('id')) {
-                    if (confirm_value && password) {
+                    if (password) {
                         if (confirm_value === password) {
                             $(confirm_field)
                                 .parent()
                                 .find('.password_strength_info')
                                 .addClass('d-none');
+                            confirm_field.setCustomValidity('')
+                            confirm_field.classList.remove('is-invalid')
                         } else {
-                            $(confirm_field)
-                                .parent()
-                                .find('.password_strength_info')
-                                .removeClass('d-none');
+                            if (confirm_value !== '') {
+                                $(confirm_field)
+                                    .parent()
+                                    .find('.password_strength_info')
+                                    .removeClass('d-none');
+                            }
+                            confirm_field.setCustomValidity('Does not match new password')
+                            confirm_field.classList.add('is-invalid')
                         }
                     } else {
                         $(confirm_field)
                             .parent()
                             .find('.password_strength_info')
                             .addClass('d-none');
+                        confirm_field.setCustomValidity('')
+                        confirm_field.classList.remove('is-invalid')
                     }
                 }
             });
diff --git a/ietf/templates/registration/change_password.html b/ietf/templates/registration/change_password.html
index 21c102bd0a..58bc2d2587 100644
--- a/ietf/templates/registration/change_password.html
+++ b/ietf/templates/registration/change_password.html
@@ -34,11 +34,14 @@ <h1>Change password</h1>
             <button type="submit" class="btn btn-primary">Change password</button>
         </form>
         <div class="alert alert-info mt-5">
-            <b>Online attack: </b>This password form uses the
+            <b>Password strength requirements: </b>
+            You must choose a password at least 12 characters long that scores at least a 3 according to the
             <a href="https://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-password-strength-estimation/">zxcvbn</a>
-            password strength estimator to give an indication of password strength.
-            The crack time estimate given above assume online attack without rate
-            limiting, at a rate of 10 attempts per second.
+            password strength estimator. A warning will appear if your password does not meet this standard.
+            <hr>
+            <b>Online attack: </b>
+            The crack time estimate given above assumes an online attack at a rate of 10 attempts per second.
+            It is only a very rough guideline.
             <hr>
             <b>Offline cracking: </b>
             The datatracker currently uses the <code>{{ hasher.algorithm }}</code>
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 074888728f..7a3c369750 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -391,3 +391,8 @@ def _multiline_to_list(s):
     "EXCLUDE_BUCKETS": ["staging"],
     "VERBOSE_LOGGING": _blobdb_replication_verbose_logging,
 }
+
+# Optionally disable password strength enforcement at login (on by default)
+PASSWORD_POLICY_ENFORCE_AT_LOGIN = (
+    os.environ.get("DATATRACKER_ENFORCE_PW_POLICY", "true").lower() != "false"
+)
diff --git a/requirements.txt b/requirements.txt
index eb72600fe3..4eb573ce36 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -79,8 +79,10 @@ selenium>=4.0
 tblib>=1.7.0    # So that the django test runner provides tracebacks
 tlds>=2022042700    # Used to teach bleach about which TLDs currently exist
 tqdm>=4.64.0
+types-zxcvbn~=4.5.0.20250223  # match zxcvbn version
 Unidecode>=1.3.4
 urllib3>=1.26,<2
 weasyprint>=64.1
 xml2rfc>=3.23.0
 xym>=0.6,<1.0
+zxcvbn>=4.5.0

From e8252aa84ef66058e23716e46145ae129152cdac Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Tue, 24 Jun 2025 15:58:14 +0000
Subject: [PATCH 354/707] ci: update base image target version to 20250624T1543

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 3ad11e4d9e..8317195446 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250514T1627
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250624T1543
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 4bd4db561e..1f2e39a0a2 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250514T1627
+20250624T1543

From ec3aec189afb872b1ffe1c00952bac20d6712897 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Jun 2025 14:34:46 -0300
Subject: [PATCH 355/707] fix: remove stale "contains" docs on rfc-index sync
 (#9049)

* fix: clean out stale "contains" docs correctly

* style: ruff ruff + copyright

* refactor: safer "contains" relation removal

* test: replacement of subseries doc in sync
---
 ietf/sync/rfceditor.py |  47 ++++++++++------
 ietf/sync/tests.py     | 122 ++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 152 insertions(+), 17 deletions(-)

diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index 889317cdcf..a3c6580452 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2012-2020, All Rights Reserved
+# Copyright The IETF Trust 2012-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -12,6 +12,7 @@
 from xml.dom import pulldom, Node
 
 from django.conf import settings
+from django.db import transaction
 from django.db.models import Subquery, OuterRef, F, Q
 from django.utils import timezone
 from django.utils.encoding import smart_bytes, force_str
@@ -30,9 +31,9 @@
 from ietf.utils.mail import send_mail_text
 from ietf.utils.timezone import datetime_from_date, RPC_TZINFO
 
-#QUEUE_URL = "https://www.rfc-editor.org/queue2.xml"
-#INDEX_URL = "https://www.rfc-editor.org/rfc/rfc-index.xml"
-#POST_APPROVED_DRAFT_URL = "https://www.rfc-editor.org/sdev/jsonexp/jsonparser.php"
+# QUEUE_URL = "https://www.rfc-editor.org/queue2.xml"
+# INDEX_URL = "https://www.rfc-editor.org/rfc/rfc-index.xml"
+# POST_APPROVED_DRAFT_URL = "https://www.rfc-editor.org/sdev/jsonexp/jsonparser.php"
 
 MIN_ERRATA_RESULTS = 5000
 MIN_INDEX_RESULTS = 8000
@@ -427,7 +428,7 @@ def update_docs_from_rfc_index(
                 pass
                 # Logging below warning turns out to be unhelpful - there are many references
                 # to such things in the index:
-                # * all april-1 RFCs have an internal name that looks like a draft name, but there 
+                # * all april-1 RFCs have an internal name that looks like a draft name, but there
                 # was never such a draft. More of these will exist in the future
                 # * Several documents were created with out-of-band input to the RFC-editor, for a
                 # variety of reasons.
@@ -436,7 +437,7 @@ def update_docs_from_rfc_index(
                 # If there is no draft to point to, don't point to one, even if there was an RPC
                 # internal name in use (and in the RPC database). This will be a requirement on the
                 # reimplementation of the creation of the rfc-index.
-                # 
+                #
                 # log(f"Warning: RFC index for {rfc_number} referred to unknown draft {draft_name}")
 
         # Find or create the RFC document
@@ -466,7 +467,7 @@ def update_docs_from_rfc_index(
             if draft:
                 doc.formal_languages.set(draft.formal_languages.all())
                 for author in draft.documentauthor_set.all():
-                    # Copy the author but point at the new doc. 
+                    # Copy the author but point at the new doc.
                     # See https://docs.djangoproject.com/en/4.2/topics/db/queries/#copying-model-instances
                     author.pk = None
                     author.id = None
@@ -707,12 +708,27 @@ def parse_relation_list(l):
                         subseries_doc.docevent_set.create(type="sync_from_rfc_editor", by=system, desc=f"Added {doc.name} to {subseries_doc.name}")
                         rfc_events.append(doc.docevent_set.create(type="sync_from_rfc_editor", by=system, desc=f"Added {doc.name} to {subseries_doc.name}"))
 
-        for subdoc in doc.related_that("contains"):
-            if subdoc.name not in also:
-                assert(not first_sync_creating_subseries)
-                subseries_doc.relateddocument_set.filter(target=subdoc).delete()
-                rfc_events.append(doc.docevent_set.create(type="sync_from_rfc_editor", by=system, desc=f"Removed {doc.name} from {subseries_doc.name}"))
-                subseries_doc.docevent_set.create(type="sync_from_rfc_editor", by=system, desc=f"Removed {doc.name} from {subseries_doc.name}")
+        # Delete subseries relations that are no longer current. Use a transaction
+        # so we are sure we iterate over the same relations that we delete!
+        with transaction.atomic():
+            stale_subseries_relations = doc.relations_that("contains").exclude(
+                source__name__in=also
+            )
+            for stale_relation in stale_subseries_relations:
+                stale_subseries_doc = stale_relation.source
+                rfc_events.append(
+                    doc.docevent_set.create(
+                        type="sync_from_rfc_editor",
+                        by=system,
+                        desc=f"Removed {doc.name} from {stale_subseries_doc.name}",
+                    )
+                )
+                stale_subseries_doc.docevent_set.create(
+                    type="sync_from_rfc_editor",
+                    by=system,
+                    desc=f"Removed {doc.name} from {stale_subseries_doc.name}",
+                )
+            stale_subseries_relations.delete()
 
         doc_errata = errata.get(f"RFC{rfc_number}", [])
         all_rejected = doc_errata and all(
@@ -754,9 +770,9 @@ def parse_relation_list(l):
             )
             doc.save_with_history(rfc_events)
             yield rfc_number, rfc_changes, doc, rfc_published  # yield changes to the RFC
-    
+
     if first_sync_creating_subseries:
-        # First - create the known subseries documents that have ghosted. 
+        # First - create the known subseries documents that have ghosted.
         # The RFC editor (as of 31 Oct 2023) claims these subseries docs do not exist.
         # The datatracker, on the other hand, will say that the series doc currently contains no RFCs.
         for name in ["fyi17", "std1", "bcp12", "bcp113", "bcp66"]:
@@ -769,7 +785,6 @@ def parse_relation_list(l):
                 subseries_slug = name[:3]
                 subseries_doc.docevent_set.create(type=f"{subseries_slug}_history_marker", by=system, desc=f"No history of this {subseries_slug.upper()} document is currently available in the datatracker before this point")
 
-
         RelatedDocument.objects.filter(
             Q(originaltargetaliasname__startswith="bcp") |
             Q(originaltargetaliasname__startswith="std") |
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index b0cdf863f0..14d65de0b2 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -20,7 +20,13 @@
 import debug                            # pyflakes:ignore
 
 from ietf.api.views import EmailIngestionError
-from ietf.doc.factories import WgDraftFactory, RfcFactory, DocumentAuthorFactory, DocEventFactory
+from ietf.doc.factories import (
+    WgDraftFactory,
+    RfcFactory,
+    DocumentAuthorFactory,
+    DocEventFactory,
+    BcpFactory,
+)
 from ietf.doc.models import Document, DocEvent, DeletedEvent, DocTagName, RelatedDocument, State, StateDocEvent
 from ietf.doc.utils import add_state_change_event
 from ietf.group.factories import GroupFactory
@@ -508,6 +514,120 @@ def test_rfc_index(self):
         changed = list(rfceditor.update_docs_from_rfc_index(data, errata, today - datetime.timedelta(days=30)))
         self.assertEqual(len(changed), 0)
 
+    def test_rfc_index_subseries_replacement(self):
+        today = date_today()
+        author = PersonFactory(name="Some Bozo")
+
+        # Start with two BCPs, each containing an rfc
+        rfc1, rfc2, rfc3 = RfcFactory.create_batch(3, authors=[author])
+        bcp1 = BcpFactory(contains=[rfc1])
+        bcp2 = BcpFactory(contains=[rfc2])
+        
+        def _nameify(doc):
+            """Convert a name like 'rfc1' to 'RFC0001"""
+            return f"{doc.name[:3].upper()}{int(doc.name[3:]):04d}"
+
+        # RFC index that replaces rfc2 with rfc3 in bcp2
+        index_xml = f"""<?xml version="1.0" encoding="UTF-8"?>
+<rfc-index xmlns="http://www.rfc-editor.org/rfc-index"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
+           xsi:schemaLocation="http://www.rfc-editor.org/rfc-index 
+                               http://www.rfc-editor.org/rfc-index.xsd">
+    <bcp-entry>
+        <doc-id>{_nameify(bcp1)}</doc-id>
+        <is-also>
+            <doc-id>{_nameify(rfc1)}</doc-id>
+        </is-also>
+    </bcp-entry>
+    <bcp-entry>
+        <doc-id>{_nameify(bcp2)}</doc-id>
+        <is-also>
+            <doc-id>{_nameify(rfc3)}</doc-id>
+        </is-also>
+    </bcp-entry>
+    <rfc-entry>
+        <doc-id>{_nameify(rfc1)}</doc-id>
+        <title>{rfc1.title}</title>
+        <author>
+            <name>Some Bozo</name>
+        </author>
+        <date>
+            <month>{today.strftime('%B')}</month>
+            <year>{today.strftime('%Y')}</year>
+        </date>
+        <format>
+            <file-format>ASCII</file-format>
+        </format>
+        <page-count>42</page-count>
+        <keywords>
+            <kw>test</kw>
+        </keywords>
+        <abstract><p>This is some interesting text.</p></abstract>
+        <is-also>
+            <doc-id>{_nameify(bcp1)}</doc-id>
+        </is-also>
+        <current-status>PROPOSED STANDARD</current-status>
+        <publication-status>PROPOSED STANDARD</publication-status>
+        <stream>IETF</stream>
+    </rfc-entry>
+    <rfc-entry>
+        <doc-id>{_nameify(rfc2)}</doc-id>
+        <title>{rfc2.title}</title>
+        <author>
+            <name>Some Bozo</name>
+        </author>
+        <date>
+            <month>{today.strftime('%B')}</month>
+            <year>{today.strftime('%Y')}</year>
+        </date>
+        <format>
+            <file-format>ASCII</file-format>
+        </format>
+        <page-count>42</page-count>
+        <keywords>
+            <kw>test</kw>
+        </keywords>
+        <abstract><p>This is some interesting text.</p></abstract>
+        <current-status>PROPOSED STANDARD</current-status>
+        <publication-status>PROPOSED STANDARD</publication-status>
+        <stream>IETF</stream>
+    </rfc-entry>
+    <rfc-entry>
+        <doc-id>{_nameify(rfc3)}</doc-id>
+        <title>{rfc3.title}</title>
+        <author>
+            <name>Some Bozo</name>
+        </author>
+        <date>
+            <month>{today.strftime('%B')}</month>
+            <year>{today.strftime('%Y')}</year>
+        </date>
+        <format>
+            <file-format>ASCII</file-format>
+        </format>
+        <page-count>42</page-count>
+        <keywords>
+            <kw>test</kw>
+        </keywords>
+        <abstract><p>This is some interesting text.</p></abstract>
+        <is-also>
+            <doc-id>{_nameify(bcp2)}</doc-id>
+        </is-also>
+        <current-status>PROPOSED STANDARD</current-status>
+        <publication-status>PROPOSED STANDARD</publication-status>
+        <stream>IETF</stream>
+    </rfc-entry>
+</rfc-index>"""
+        data = rfceditor.parse_index(io.StringIO(index_xml))  # parse index
+        self.assertEqual(len(data), 3)  # check that we parsed 3 RFCs
+        # Process the data by consuming the generator
+        for _ in rfceditor.update_docs_from_rfc_index(data, []):
+            pass
+        # Confirm that the expected changes were made
+        self.assertCountEqual(rfc1.related_that("contains"), [bcp1])
+        self.assertCountEqual(rfc2.related_that("contains"), [])
+        self.assertCountEqual(rfc3.related_that("contains"), [bcp2])
+
     def _generate_rfc_queue_xml(self, draft, state, auth48_url=None):
         """Generate an RFC queue xml string for a draft"""
         t = '''<rfc-editor-queue xmlns="http://www.rfc-editor.org/rfc-editor-queue">

From 5ede134ec5710309565cd8260204bad4b0804603 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 24 Jun 2025 13:02:57 -0500
Subject: [PATCH 356/707] fix: task that repairs bad docevents related to
 subseries removals (#9053)

---
 ietf/sync/tasks.py | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 53e23d7913..18ab4fe66e 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -11,6 +11,7 @@
 from django.conf import settings
 from django.utils import timezone
 
+from ietf.doc.models import DocEvent, RelatedDocument
 from ietf.sync import iana
 from ietf.sync import rfceditor
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
@@ -180,3 +181,44 @@ def batched(l, n):
 
         for d in updated:
             log.log("Added history entry for %s" % d.display_name())
+
+@shared_task
+def fix_subseries_docevents_task():
+    """Repairs DocEvents related to bugs around removing docs from subseries
+
+    Removes bogus and repairs the date of non-bogus DocEvents
+    about removing RFCs from subseries
+
+    This is designed to be a one-shot task that should be removed
+    after running it. It is intended to be safe if it runs more than once.
+    """
+    log.log("Repairing DocEvents related to bugs around removing docs from subseries")
+    bogus_event_descs = [
+        "Removed rfc8499 from bcp218",
+        "Removed rfc7042 from bcp184",
+        "Removed rfc9499 from bcp238",
+        "Removed rfc5033 from std74",
+        "Removed rfc3228 from bcp55",
+        "Removed rfc8109 from std85",
+    ]
+    DocEvent.objects.filter(
+        type="sync_from_rfc_editor", desc__in=bogus_event_descs
+    ).delete()
+    needs_moment_fix = [
+        "Removed rfc8499 from bcp219",
+        "Removed rfc7042 from bcp141",
+        "Removed rfc5033 from bcp133",
+        "Removed rfc3228 from bcp57",
+    ]
+    # Assumptions (which have been manually verified):
+    # 1) each of the above RFCs is obsoleted by exactly one other RFC
+    # 2) each of the obsoleting RFCs has exactly one published_rfc docevent
+    for desc in needs_moment_fix:
+        obsoleted_rfc_name = desc.split(" ")[1]
+        obsoleting_rfc = RelatedDocument.objects.get(
+            relationship_id="obs", target__name=obsoleted_rfc_name
+        ).source
+        obsoleting_time = obsoleting_rfc.docevent_set.get(type="published_rfc").time
+        DocEvent.objects.filter(type="sync_from_rfc_editor", desc=desc).update(
+            time=obsoleting_time
+        )

From 32ff440ca7f6ceb34f54460bd09e6315ec80d530 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Jun 2025 15:15:25 -0300
Subject: [PATCH 357/707] chore(k8s): config reg participants API key/url
 (#9054)

* chore(k8s): config reg participants API key/url

* fix: typo
---
 k8s/settings_local.py | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 7a3c369750..482a4b110a 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -165,6 +165,21 @@ def _multiline_to_list(s):
     raise RuntimeError("DATATRACKER_REGISTRATION_API_KEY must be set")
 STATS_REGISTRATION_ATTENDEES_JSON_URL = f"https://registration.ietf.org/{{number}}/attendees/?apikey={_registration_api_key}"
 
+# Registration Participants API config - key must be set, but the URL can be left
+# to the default in settings.py
+_registration_participants_api_key = os.environ.get(
+    "DATATRACKER_REGISTRATION_PARTICIPANTS_API_KEY", None
+)
+if _registration_participants_api_key is None:
+    raise RuntimeError("DATATRACKER_REGISTRATION_PARTICIPANTS_API_KEY must be set")
+REGISTRATION_PARTICIPANTS_API_KEY = _registration_participants_api_key
+
+_registration_participants_api_url = os.environ.get(
+    "DATATRACKER_REGISTRATION_PARTICIPANTS_API_URL", None
+)
+if _registration_participants_api_url is not None:
+    REGISTRATION_PARTICIPANTS_API_URL = _registration_participants_api_url
+
 # FIRST_CUTOFF_DAYS = 12
 # SECOND_CUTOFF_DAYS = 12
 # SUBMISSION_CUTOFF_DAYS = 26

From 0197e44d9a89cbaf8e5f68f42576518ba3f93df2 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 24 Jun 2025 17:05:48 -0500
Subject: [PATCH 358/707] feat: add liaison coordinators, remove from
 restrictions (#9055)

* refactor: clean up outgoing LS from field init

* feat: additional LS "from" groups for IETF/IAB Chair+ADs

* refactor: reduce queries in get_internal_choices

* refactor: break down / rename get_groups_for_person

* refactor: inline / remove unneeded methods

* refactor: colocate similar field config

* refactor: unify role logic for LS To fields

* fix: typo

* refactor: update EditLiaisonForm to match changes

* refactor: update IncomingLiaisonForm to match

* fix: typo / add docstring

* test: framing for new tests; test_flatten_choices()

* test: test_choices_from_group_queryset()

* test: test_all_internal_groups()

* fix: no person = no internal groups for LS

* test: test_all_internal_groups()

* test: test_external_groups_for_person()

* chore: adjust iab execdir and sdo auth'd individs

Need to confirm what is actually needed, but without
these users may be able to create/edit LS's they can't
actually fill in.

* fix: f-string flakes

* fix: remove authorized persons from sdo groups

* fix: remove liaison_contact and liaison_cc_contact Role objects

* feat: liaison coordinators (#8944)

* feat: liaison coordinators

* fix: give liaison coordinator the ability to send incoming

* feat: more flexible liaison stmt "From Contact" (#8958)

* refactor: CharField for LS from_contacts

* refactor: replace from_contact field

* style: copyrights + ruff

* fix: listify in the right place

* refactor: better validator

* refactor: use new from_contact field; fix lint

* fix: cleanup

* feat: default addresses for roles

* chore: update liaisons.resources

from_name and to_name were removed in 2015!

* fix: improve managing liaison coordinators (#8960)

* fix: align liaison coordinator perms with secretariat perms

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 .../0005_remove_sdo_authorized_individuals.py | 192 +++++++++++
 .../migrations/0006_remove_liason_contacts.py | 270 +++++++++++++++
 ietf/group/migrations/0007_used_roles.py      |  49 +++
 ietf/ietfauth/utils.py                        |   4 +
 ietf/liaisons/admin.py                        |   4 +-
 ietf/liaisons/factories.py                    |   2 +-
 ietf/liaisons/forms.py                        | 320 ++++++++++--------
 .../0003_liaisonstatement_from_contact_tmp.py |  22 ++
 ...ulate_liaisonstatement_from_contact_tmp.py |  60 ++++
 ...5_replace_liaisonstatement_from_contact.py |  20 ++
 ietf/liaisons/models.py                       |  12 +-
 ietf/liaisons/resources.py                    |   6 +-
 ietf/liaisons/tests.py                        |  28 +-
 ietf/liaisons/tests_forms.py                  | 229 +++++++++++++
 ietf/liaisons/utils.py                        |  25 +-
 ietf/liaisons/views.py                        |  10 +-
 ietf/name/fixtures/names.json                 |  46 ++-
 ietf/name/migrations/0018_alter_rolenames.py  |  36 ++
 ietf/templates/liaisons/detail.html           |   2 +-
 ietf/templates/liaisons/liaison_mail.txt      |   2 +-
 ietf/utils/validators.py                      |  23 +-
 21 files changed, 1194 insertions(+), 168 deletions(-)
 create mode 100644 ietf/group/migrations/0005_remove_sdo_authorized_individuals.py
 create mode 100644 ietf/group/migrations/0006_remove_liason_contacts.py
 create mode 100644 ietf/group/migrations/0007_used_roles.py
 create mode 100644 ietf/liaisons/migrations/0003_liaisonstatement_from_contact_tmp.py
 create mode 100644 ietf/liaisons/migrations/0004_populate_liaisonstatement_from_contact_tmp.py
 create mode 100644 ietf/liaisons/migrations/0005_replace_liaisonstatement_from_contact.py
 create mode 100644 ietf/liaisons/tests_forms.py
 create mode 100644 ietf/name/migrations/0018_alter_rolenames.py

diff --git a/ietf/group/migrations/0005_remove_sdo_authorized_individuals.py b/ietf/group/migrations/0005_remove_sdo_authorized_individuals.py
new file mode 100644
index 0000000000..77fe25b467
--- /dev/null
+++ b/ietf/group/migrations/0005_remove_sdo_authorized_individuals.py
@@ -0,0 +1,192 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from collections import defaultdict
+
+from django.db import migrations
+
+from ietf.person.name import plain_name
+
+
+def get_plain_name(person):
+    return person.plain or plain_name(person.name)
+
+
+def forward(apps, schema_editor):
+    """Remove any 'auth' Role objects for groups of type 'sdo'
+
+    The IAB has decided that the Authorized Individual concept for
+    authorizing entry or management of liaison statments hasn't worked
+    well - the roles for the groups are not being maintained, Instead,
+    the concept will be removed and the liaison managers or secretariat
+    (and soon the liaison coordinators) will operate the liaison tool
+    on their behalf.
+    """
+    Role = apps.get_model("group", "Role")
+    GroupEvent = apps.get_model("group", "GroupEvent")
+    groups = defaultdict(list)
+    role_qs = Role.objects.filter(name_id="auth", group__type_id="sdo")
+    for role in role_qs:
+        groups[role.group].append(role)
+    for group in groups:
+        desc = f"Removed Authorized Persons: {', '.join([get_plain_name(role.person) for role in groups[group]])}"
+        GroupEvent.objects.create(
+            group=group,
+            by_id=1,  # (System)
+            desc=desc,
+        )
+    role_qs.delete()
+
+
+def reverse(apps, schema_editor):
+    """Intentionally does nothing"""
+    pass
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("group", "0004_modern_list_archive"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
+
+
+# At the time this migration was created, it would have removed these Role objects:
+# { "authorized_individuals" : [
+# {"person_id": 107937, "group_id": 56, "email": "hannu.hietalahti@nokia.com" }, # Hannu Hietalahti is Authorized Individual in 3gpp
+# {"person_id": 107943, "group_id": 56, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Authorized Individual in 3gpp
+# {"person_id": 112807, "group_id": 56, "email": "Paolo.Usai@etsi.org" }, # Paolo Usai is Authorized Individual in 3gpp
+# {"person_id": 105859, "group_id": 56, "email": "atle.monrad@ericsson.com" }, # Atle Monrad is Authorized Individual in 3gpp
+# {"person_id": 116149, "group_id": 1907, "email": "tsgsx_chair@3GPP2.org" }, # Xiaowu Zhao is Authorized Individual in 3gpp2-tsg-sx
+# {"person_id": 120914, "group_id": 1902, "email": "ozgur.oyman@intel.com" }, # Ozgur Oyman is Authorized Individual in 3gpp-tsgsa-sa4
+# {"person_id": 107943, "group_id": 1902, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Authorized Individual in 3gpp-tsgsa-sa4
+# {"person_id": 119203, "group_id": 1902, "email": "fanyanping@huawei.com" }, # Yanping Fan is Authorized Individual in 3gpp-tsgsa-sa4
+# {"person_id": 112977, "group_id": 1902, "email": "tomas.frankkila@ericsson.com" }, # Tomas Frankkila is Authorized Individual in 3gpp-tsgsa-sa4
+# {"person_id": 120240, "group_id": 2019, "email": "CM8655@att.com" }, # Peter Musgrove is Authorized Individual in atis-eloc-tf
+# {"person_id": 120241, "group_id": 2019, "email": "Christian.Militeau@intrado.com" }, # Christian Militeau is Authorized Individual in atis-eloc-tf
+# {"person_id": 120243, "group_id": 2019, "email": "ablasgen@atis.org" }, # Alexandra Blasgen is Authorized Individual in atis-eloc-tf
+# {"person_id": 114696, "group_id": 67, "email": "KEN.KO@adtran.com" }, # Ken Ko is Authorized Individual in broadband-forum
+# {"person_id": 119494, "group_id": 67, "email": "michael.fargano@centurylink.com" }, # Michael Fargano is Authorized Individual in broadband-forum
+# {"person_id": 124318, "group_id": 67, "email": "joey.boyd@adtran.com" }, # Joey Boyd is Authorized Individual in broadband-forum
+# {"person_id": 114762, "group_id": 67, "email": "bwelch@juniper.net" }, # Bill Welch is Authorized Individual in broadband-forum
+# {"person_id": 112837, "group_id": 67, "email": "christophe.alter@orange.com" }, # Christophe Alter is Authorized Individual in broadband-forum
+# {"person_id": 141083, "group_id": 2407, "email": "dan.middleton@intel.com" }, # Dan Middleton is Authorized Individual in confidential-computing-consortium
+# {"person_id": 117421, "group_id": 1933, "email": "chairman@dmtf.org" }, # Winston Bumpus is Authorized Individual in dmtf
+# {"person_id": 116529, "group_id": 1919, "email": "istvan@ecma-international.org" }, # Istvan Sebestyen is Authorized Individual in ecma-tc39
+# {"person_id": 116363, "group_id": 1915, "email": "e2nasupport@etsi.org" }, # Sonia Compans is Authorized Individual in etsi-e2na
+# {"person_id": 116862, "group_id": 2003, "email": "latif@ladid.lu" }, # Latif Ladid is Authorized Individual in etsi-isg-ip6
+# {"person_id": 116283, "group_id": 2198, "email": "adrian.neal@vodafone.com" }, # Adrian Neal is Authorized Individual in etsi-isg-mec
+# {"person_id": 119412, "group_id": 2004, "email": "jkfernic@uwaterloo.ca" }, # Jennifer Fernick is Authorized Individual in etsi-isg-qsc
+# {"person_id": 122406, "group_id": 2165, "email": "d.lake@surrey.ac.uk" }, # David Lake is Authorized Individual in etsi-ngp
+# {"person_id": 122407, "group_id": 2165, "email": "andy.sutton@ee.co.uk" }, # Andy Sutton is Authorized Individual in etsi-ngp
+# {"person_id": 112609, "group_id": 2165, "email": "richard.li@futurewei.com" }, # Richard Li is Authorized Individual in etsi-ngp
+# {"person_id": 122406, "group_id": 2177, "email": "d.lake@surrey.ac.uk" }, # David Lake is Authorized Individual in etsi-ngp-isp
+# {"person_id": 112609, "group_id": 2177, "email": "richard.li@futurewei.com" }, # Richard Li is Authorized Individual in etsi-ngp-isp
+# {"person_id": 122407, "group_id": 2177, "email": "andy.sutton@ee.co.uk" }, # Andy Sutton is Authorized Individual in etsi-ngp-isp
+# {"person_id": 118527, "group_id": 1986, "email": "luca.pesando@telecomitalia.it" }, # Luca Pesando is Authorized Individual in etsi-ntech
+# {"person_id": 118526, "group_id": 1986, "email": "NTECHsupport@etsi.org" }, # Sylwia Korycinska is Authorized Individual in etsi-ntech
+# {"person_id": 116052, "group_id": 1904, "email": "Beniamino.gorini@alcatel-lucent.com" }, # Gorini Beniamino is Authorized Individual in etsi-tc-ee
+# {"person_id": 19651, "group_id": 63, "email": "glenn.parsons@ericsson.com" }, # Glenn Parsons is Authorized Individual in ieee-802-1
+# {"person_id": 107599, "group_id": 63, "email": "tony@jeffree.co.uk" }, # Tony Jeffree is Authorized Individual in ieee-802-1
+# {"person_id": 117415, "group_id": 1862, "email": "Adrian.P.Stephens@intel.com" }, # Adrian Stephens is Authorized Individual in ieee-802-11
+# {"person_id": 106284, "group_id": 1862, "email": "dstanley@arubanetworks.com" }, # Dorothy Stanley is Authorized Individual in ieee-802-11
+# {"person_id": 114106, "group_id": 1871, "email": "r.b.marks@ieee.org" }, # Roger Marks is Authorized Individual in ieee-802-16
+# {"person_id": 101753, "group_id": 1885, "email": "max.riegel@ieee.org" }, # Max Riegel is Authorized Individual in ieee-802-ec-omniran
+# {"person_id": 113810, "group_id": 1859, "email": "jehrig@inventures.com" }, # John Ehrig is Authorized Individual in imtc
+# {"person_id": 123010, "group_id": 48, "email": "Emil.Kowalczyk@orange.com" }, # Emil Kowalczyk is Authorized Individual in iso-iec-jtc1-sc2
+# {"person_id": 11182, "group_id": 48, "email": "paf@netnod.se" }, # Patrik Fältström is Authorized Individual in iso-iec-jtc1-sc2
+# {"person_id": 117429, "group_id": 1939, "email": "krystyna.passia@din.de" }, # Krystyna Passia is Authorized Individual in iso-iec-jtc1-sc27
+# {"person_id": 117428, "group_id": 1939, "email": "walter.fumy@bdr.de" }, # Walter Fumy is Authorized Individual in iso-iec-jtc1-sc27
+# {"person_id": 114435, "group_id": 74, "email": "watanabe@itscj.ipsj.or.jp" }, # Shinji Watanabe is Authorized Individual in iso-iec-jtc1-sc29-wg11
+# {"person_id": 112106, "group_id": 49, "email": "jooran@kisi.or.kr" }, # Jooran Lee is Authorized Individual in iso-iec-jtc1-sc6
+# {"person_id": 17037, "group_id": 49, "email": "dykim@comsun.chungnnam.ac.kr" }, # Dae Kim is Authorized Individual in iso-iec-jtc1-sc6
+# {"person_id": 117426, "group_id": 1938, "email": "chair@jtc1-sc7.org" }, # Francois Coallier is Authorized Individual in iso-iec-jtc1-sc7
+# {"person_id": 117427, "group_id": 1938, "email": "secretariat@jtc1-sc7.org" }, # Witold Suryn is Authorized Individual in iso-iec-jtc1-sc7
+# {"person_id": 118769, "group_id": 2144, "email": "alexandre.petrescu@gmail.com" }, # Alexandre Petrescu is Authorized Individual in isotc204
+# {"person_id": 115544, "group_id": 1890, "email": "sergio.buonomo@itu.int" }, # Sergio Buonomo is Authorized Individual in itu-r
+# {"person_id": 122111, "group_id": 2157, "email": "h.mazar@atdi.com" }, # Haim Mazar is Authorized Individual in itu-r-wp-5c
+# {"person_id": 115544, "group_id": 2157, "email": "sergio.buonomo@itu.int" }, # Sergio Buonomo is Authorized Individual in itu-r-wp-5c
+# {"person_id": 112105, "group_id": 51, "email": "Malcolm.Johnson@itu.int" }, # Malcom Johnson is Authorized Individual in itu-t
+# {"person_id": 113911, "group_id": 1860, "email": "martin.adolph@itu.int" }, # Martin Adolph is Authorized Individual in itu-t-fg-dist
+# {"person_id": 122779, "group_id": 2180, "email": "Leo.Lehmann@bakom.admin.ch" }, # Leo Lehmann is Authorized Individual in itu-t-fg-imt-2020
+# {"person_id": 103383, "group_id": 2180, "email": "peter.ashwoodsmith@huawei.com" }, # Peter Ashwood-Smith is Authorized Individual in itu-t-fg-imt-2020
+# {"person_id": 107300, "group_id": 1872, "email": "tatiana.kurakova@itu.int" }, # Tatiana Kurakova is Authorized Individual in itu-t-jca-cloud
+# {"person_id": 106224, "group_id": 1872, "email": "mmorrow@cisco.com" }, # Monique Morrow is Authorized Individual in itu-t-jca-cloud
+# {"person_id": 105714, "group_id": 1874, "email": "martin.euchner@itu.int" }, # Martin Euchner is Authorized Individual in itu-t-jca-cop
+# {"person_id": 106475, "group_id": 2170, "email": "khj@etri.re.kr" }, # Hyoung-Jun Kim is Authorized Individual in itu-t-jca-iot-scc
+# {"person_id": 122491, "group_id": 2170, "email": "tsbjcaiot@itu.int" }, # ITU Tsb is Authorized Individual in itu-t-jca-iot-scc
+# {"person_id": 122490, "group_id": 2170, "email": "fabio.bigi@virgilio.it" }, # Fabio Bigi is Authorized Individual in itu-t-jca-iot-scc
+# {"person_id": 116952, "group_id": 1927, "email": "chengying10@chinaunicom.cn" }, # Ying Cheng is Authorized Individual in itu-t-jca-sdn
+# {"person_id": 111205, "group_id": 1927, "email": "t-egawa@ct.jp.nec.com" }, # Takashi Egawa is Authorized Individual in itu-t-jca-sdn
+# {"person_id": 107298, "group_id": 2178, "email": "tsbsg11@itu.int" }, # Arshey Odedra is Authorized Individual in itu-tsbsg-11
+# {"person_id": 107300, "group_id": 77, "email": "tatiana.kurakova@itu.int" }, # Tatiana Kurakova is Authorized Individual in itu-t-sg-11
+# {"person_id": 112573, "group_id": 77, "email": "stefano.polidori@itu.int" }, # Stefano Polidori is Authorized Individual in itu-t-sg-11
+# {"person_id": 115401, "group_id": 84, "email": "spennock@rim.com" }, # Scott Pennock is Authorized Individual in itu-t-sg-12
+# {"person_id": 114255, "group_id": 84, "email": "hiroshi.ota@itu.int" }, # Hiroshi Ota is Authorized Individual in itu-t-sg-12
+# {"person_id": 113032, "group_id": 84, "email": "catherine.quinquis@orange.com" }, # Catherine Quinquis is Authorized Individual in itu-t-sg-12
+# {"person_id": 113031, "group_id": 84, "email": "gunilla.berndtsson@ericsson.com" }, # Gunilla Berndtsson is Authorized Individual in itu-t-sg-12
+# {"person_id": 113672, "group_id": 84, "email": "sarah.scott@itu.int" }, # Sarah Scott is Authorized Individual in itu-t-sg-12
+# {"person_id": 122459, "group_id": 81, "email": "chan@etri.re.kr" }, # Kangchan Lee is Authorized Individual in itu-t-sg-13
+# {"person_id": 107300, "group_id": 81, "email": "tatiana.kurakova@itu.int" }, # Tatiana Kurakova is Authorized Individual in itu-t-sg-13
+# {"person_id": 109145, "group_id": 62, "email": "lihan@chinamobile.com" }, # Han Li is Authorized Individual in itu-t-sg-15
+# {"person_id": 115875, "group_id": 62, "email": "mark.jones@xtera.com" }, # Mark Jones is Authorized Individual in itu-t-sg-15
+# {"person_id": 115846, "group_id": 62, "email": "peter.stassar@huawei.com" }, # Peter Stassar is Authorized Individual in itu-t-sg-15
+# {"person_id": 123452, "group_id": 62, "email": "sshew@ciena.com" }, # Stephen Shew is Authorized Individual in itu-t-sg-15
+# {"person_id": 109312, "group_id": 62, "email": "huubatwork@gmail.com" }, # Huub van Helvoort is Authorized Individual in itu-t-sg-15
+# {"person_id": 115874, "group_id": 62, "email": "tom.huber@tellabs.com" }, # Tom Huber is Authorized Individual in itu-t-sg-15
+# {"person_id": 110799, "group_id": 62, "email": "koike.yoshinori@lab.ntt.co.jp" }, # Yoshinori Koike is Authorized Individual in itu-t-sg-15
+# {"person_id": 110831, "group_id": 62, "email": "kam.lam@nokia.com" }, # Hing-Kam Lam is Authorized Individual in itu-t-sg-15
+# {"person_id": 114255, "group_id": 62, "email": "hiroshi.ota@itu.int" }, # Hiroshi Ota is Authorized Individual in itu-t-sg-15
+# {"person_id": 115874, "group_id": 62, "email": "tom.huber@coriant.com" }, # Tom Huber is Authorized Individual in itu-t-sg-15
+# {"person_id": 123014, "group_id": 62, "email": "jessy.rouyer@nokia.com" }, # Jessy Rouyer is Authorized Individual in itu-t-sg-15
+# {"person_id": 111160, "group_id": 62, "email": "ryoo@etri.re.kr" }, # Jeong-dong Ryoo is Authorized Individual in itu-t-sg-15
+# {"person_id": 107296, "group_id": 62, "email": "greg.jones@itu.int" }, # Greg Jones is Authorized Individual in itu-t-sg-15
+# {"person_id": 118539, "group_id": 72, "email": "rosa.angelesleondev@itu.int" }, # Rosa De Vivero is Authorized Individual in itu-t-sg-16
+# {"person_id": 123169, "group_id": 72, "email": "garysull@microsoft.com" }, # Gary Sullivan is Authorized Individual in itu-t-sg-16
+# {"person_id": 107746, "group_id": 72, "email": "hiwasaki.yusuke@lab.ntt.co.jp" }, # Yusuke Hiwasaki is Authorized Individual in itu-t-sg-16
+# {"person_id": 108160, "group_id": 1987, "email": "Christian.Groves@nteczone.com" }, # Christian Groves is Authorized Individual in itu-t-sg-16-q3
+# {"person_id": 118539, "group_id": 1987, "email": "rosa.angelesleondev@itu.int" }, # Rosa De Vivero is Authorized Individual in itu-t-sg-16-q3
+# {"person_id": 124354, "group_id": 76, "email": "jhbaek@kisa.or.kr" }, # Jonghyun Baek is Authorized Individual in itu-t-sg-17
+# {"person_id": 12898, "group_id": 1937, "email": "youki-k@is.aist-nara.ac.jp" }, # Youki Kadobayashi is Authorized Individual in itu-t-sg-17-q4
+# {"person_id": 113593, "group_id": 79, "email": "maite.comasbarnes@itu.int" }, # Maite Barnes is Authorized Individual in itu-t-sg-3
+# {"person_id": 122983, "group_id": 2000, "email": "cristina.bueti@itu.int" }, # Cristina Bueti is Authorized Individual in itu-t-sg-5
+# {"person_id": 112573, "group_id": 2072, "email": "stefano.polidori@itu.int" }, # Stefano Polidori is Authorized Individual in itu-t-sg-9
+# {"person_id": 113101, "group_id": 82, "email": "steve.trowbridge@alcatel-lucent.com" }, # Stephen Trowbridge is Authorized Individual in itu-t-tsag
+# {"person_id": 20783, "group_id": 82, "email": "reinhard.scholl@itu.int" }, # Reinhard Scholl is Authorized Individual in itu-t-tsag
+# {"person_id": 107300, "group_id": 1846, "email": "tatiana.kurakova@itu.int" }, # Tatiana Kurakova is Authorized Individual in itu-t-wp-5-13
+# {"person_id": 112107, "group_id": 69, "email": "michael.oreirdan@maawg.org" }, # Michael O'Reirdan is Authorized Individual in maawg
+# {"person_id": 121870, "group_id": 75, "email": "liaisons@mef.net" }, # Liaison Mef is Authorized Individual in mef
+# {"person_id": 112510, "group_id": 75, "email": "nan@mef.net" }, # Nan Chen is Authorized Individual in mef
+# {"person_id": 124306, "group_id": 75, "email": "jason.wolfe@bell.ca" }, # WOLFE Jason is Authorized Individual in mef
+# {"person_id": 114454, "group_id": 75, "email": "mike.bencheck@siamasystems.com" }, # Mike Bencheck is Authorized Individual in mef
+# {"person_id": 115327, "group_id": 1888, "email": "klaus.moschner@ngmn.org" }, # Klaus Moschner is Authorized Individual in ngmn
+# {"person_id": 123305, "group_id": 1888, "email": "office@ngmn.org" }, # Office Ngmn is Authorized Individual in ngmn
+# {"person_id": 115160, "group_id": 1888, "email": "jminlee@sk.com" }, # Jongmin Lee is Authorized Individual in ngmn
+# {"person_id": 117424, "group_id": 1936, "email": "patrick.gallagher@nist.gov" }, # Patrick Gallagher is Authorized Individual in nist
+# {"person_id": 117431, "group_id": 1941, "email": "chet.ensign@xn--oasis-open-vt6e.org" }, # Chet Ensign is Authorized Individual in oasis
+# {"person_id": 120913, "group_id": 2142, "email": "james.walker@tatacommunications.com" }, # James Walker is Authorized Individual in occ
+# {"person_id": 6699, "group_id": 2142, "email": "dromasca@gmail.com" }, # Dan Romascanu is Authorized Individual in occ
+# {"person_id": 118403, "group_id": 2142, "email": "richard.schell@verizon.com" }, # Rick Schell is Authorized Individual in occ
+# {"person_id": 109676, "group_id": 83, "email": "Jonathan.Sadler@tellabs.com" }, # Jonathan Sadler is Authorized Individual in oif
+# {"person_id": 122843, "group_id": 2122, "email": "tzhang@omaorg.org" }, # Tiffany Zhang is Authorized Individual in oma
+# {"person_id": 116967, "group_id": 1947, "email": "JMudge@omaorg.org" }, # John Mudge is Authorized Individual in oma-architecture-wg
+# {"person_id": 117423, "group_id": 1935, "email": "soley@omg.org" }, # Richard Soley is Authorized Individual in omg
+# {"person_id": 110831, "group_id": 1858, "email": "kam.lam@nokia.com" }, # Hing-Kam Lam is Authorized Individual in onf
+# {"person_id": 113674, "group_id": 1858, "email": "dan.pitt@opennetworking.org" }, # Dan Pitt is Authorized Individual in onf
+# {"person_id": 118348, "group_id": 1984, "email": "dave.hood@ericsson.com" }, # Dave Hood is Authorized Individual in onf-arch-wg
+# {"person_id": 116967, "group_id": 60, "email": "JMudge@omaorg.org" }, # John Mudge is Authorized Individual in open-mobile-alliance
+# {"person_id": 112613, "group_id": 60, "email": "jerry.shih@att.com" }, # Jerry Shih is Authorized Individual in open-mobile-alliance
+# {"person_id": 113067, "group_id": 60, "email": "laurent.goix@econocom.com" }, # Laurent Goix is Authorized Individual in open-mobile-alliance
+# {"person_id": 112772, "group_id": 60, "email": "zhiyuan.hu@alcatel-sbell.com.cn" }, # Hu Zhiyuan is Authorized Individual in open-mobile-alliance
+# {"person_id": 113064, "group_id": 60, "email": "thierry.berisot@telekom.de" }, # Thierry Berisot is Authorized Individual in open-mobile-alliance
+# {"person_id": 124276, "group_id": 2212, "email": "jmisener@qti.qualcomm.com" }, # Jim Misener is Authorized Individual in sae-cell-v2x
+# {"person_id": 124278, "group_id": 2212, "email": "Keith.Wilson@sae.org" }, # Keith Wilson is Authorized Individual in sae-cell-v2x
+# {"person_id": 124277, "group_id": 2212, "email": "Elizabeth.Perry@sae.org" }, # Elizabeth Perry is Authorized Individual in sae-cell-v2x
+# {"person_id": 117430, "group_id": 1940, "email": "admin@trustedcomputinggroup.org" }, # Lindsay Adamson is Authorized Individual in tcg
+# {"person_id": 117422, "group_id": 1934, "email": "j.hietala@opengroup.org" }, # Jim Hietala is Authorized Individual in the-open-group
+# {"person_id": 112104, "group_id": 53, "email": "rick@unicode.org" }, # Rick McGowan is Authorized Individual in unicode
+# {"person_id": 112103, "group_id": 54, "email": "plh@w3.org" }, # Philippe Le Hégaret is Authorized Individual in w3c
+# {"person_id": 120261, "group_id": 54, "email": "wendy@seltzer.org" }, # Wendy Seltzer is Authorized Individual in w3c
+# {"person_id": 118020, "group_id": 1955, "email": "tiago@wballiance.com" }, # Tiago Rodrigues is Authorized Individual in wba
+# {"person_id": 125489, "group_id": 1955, "email": "bruno@wballiance.com" }, # Bruno Tomas is Authorized Individual in wba
+# {"person_id": 109129, "group_id": 70, "email": "smccammon@amsl.com" }, # Stephanie McCammon is Authorized Individual in zigbee-alliance
+# ]}
diff --git a/ietf/group/migrations/0006_remove_liason_contacts.py b/ietf/group/migrations/0006_remove_liason_contacts.py
new file mode 100644
index 0000000000..13afd1a53e
--- /dev/null
+++ b/ietf/group/migrations/0006_remove_liason_contacts.py
@@ -0,0 +1,270 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from collections import defaultdict
+
+from django.db import migrations
+
+from ietf.person.name import plain_name
+
+
+def get_plain_name(person):
+    return person.plain or plain_name(person.name)
+
+
+def forward(apps, schema_editor):
+    """Removes liaison_contact and liaison_cc_contact roles from all groups
+
+    The IAB has decided to remove the liaison_contact and liaison_cc_contact
+    role concept from the datatracker as the roles are not well understood
+    and have not been being maintained.
+    """
+    Role = apps.get_model("group", "Role")
+    GroupEvent = apps.get_model("group", "GroupEvent")
+    for role_name in ["liaison_contact", "liaison_cc_contact"]:
+        groups = defaultdict(list)
+        role_qs = Role.objects.filter(name_id=role_name)
+        for role in role_qs:
+            groups[role.group].append(role)
+        for group in groups:
+            desc = f"Removed {role_name}: {', '.join([get_plain_name(role.person) for role in groups[group]])}"
+            GroupEvent.objects.create(
+                group=group,
+                by_id=1,  # (System)
+                desc=desc,
+            )
+        role_qs.delete()
+
+
+def reverse(apps, schema_editor):
+    """Intentionally does nothing"""
+    pass
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("group", "0005_remove_sdo_authorized_individuals"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+    ]
+
+
+# At the time this migration was created, it would remove these objects
+# {"liaison_contacts":[
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 56, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 56, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp
+#   { "role_name": "liaison_contact", "person_id": 127959, "group_id": 57, "email": "mahendra@qualcomm.com" }, # Mahendran Ac is Liaison Contact in 3gpp2
+#   { "role_name": "liaison_contact", "person_id": 111440, "group_id": 2026, "email": "georg.mayer.huawei@gmx.com" }, # Georg Mayer is Liaison Contact in 3gpp-tsgct
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2026, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgct
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2027, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgct-ct1
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2027, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgct-ct1
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2410, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgct-ct3
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2410, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgct-ct3
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2028, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgct-ct4
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2028, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgct-ct4
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2029, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgran
+#   { "role_name": "liaison_contact", "person_id": 111440, "group_id": 2029, "email": "georg.mayer.huawei@gmx.com" }, # Georg Mayer is Liaison Contact in 3gpp-tsgran
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2030, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgran-ran2
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2030, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgran-ran2
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2023, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgsa
+#   { "role_name": "liaison_contact", "person_id": 111440, "group_id": 2023, "email": "georg.mayer.huawei@gmx.com" }, # Georg Mayer is Liaison Contact in 3gpp-tsgsa
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2024, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgsa-sa2
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2024, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgsa-sa2
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2025, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgsa-sa3
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2025, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgsa-sa3
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 1902, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgsa-sa4
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 1902, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgsa-sa4
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2031, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in 3gpp-tsgt-wg2
+#   { "role_name": "liaison_contact", "person_id": 107737, "group_id": 2031, "email": "lionel.morand@orange.com" }, # Lionel Morand is Liaison Contact in 3gpp-tsgt-wg2
+#   { "role_name": "liaison_contact", "person_id": 106345, "group_id": 1396, "email": "Menachem.Dodge@ecitele.com" }, # Menachem Dodge is Liaison Contact in adslmib
+#   { "role_name": "liaison_contact", "person_id": 108054, "group_id": 1956, "email": "shengjiang@bupt.edu.cn" }, # Sheng Jiang is Liaison Contact in anima
+#   { "role_name": "liaison_contact", "person_id": 11834, "group_id": 1956, "email": "tte@cs.fau.de" }, # Toerless Eckert is Liaison Contact in anima
+#   { "role_name": "liaison_contact", "person_id": 21684, "group_id": 1805, "email": "barryleiba@computer.org" }, # Barry Leiba is Liaison Contact in appsawg
+#   { "role_name": "liaison_contact", "person_id": 102154, "group_id": 1805, "email": "alexey.melnikov@isode.com" }, # Alexey Melnikov is Liaison Contact in appsawg
+#   { "role_name": "liaison_contact", "person_id": 107279, "group_id": 1805, "email": "yaojk@cnnic.cn" }, # Jiankang Yao is Liaison Contact in appsawg
+#   { "role_name": "liaison_contact", "person_id": 100754, "group_id": 941, "email": "tom.taylor@rogers.com" }, # Tom Taylor is Liaison Contact in avt
+#   { "role_name": "liaison_contact", "person_id": 105873, "group_id": 941, "email": "ron.even.tlv@gmail.com" }, # Roni Even is Liaison Contact in avt
+#   { "role_name": "liaison_contact", "person_id": 105097, "group_id": 1813, "email": "keith.drage@alcatel-lucent.com" }, # Keith Drage is Liaison Contact in avtext
+#   { "role_name": "liaison_contact", "person_id": 101923, "group_id": 1813, "email": "jonathan@vidyo.com" }, # Jonathan Lennox is Liaison Contact in avtext
+#   { "role_name": "liaison_contact", "person_id": 108279, "group_id": 1960, "email": "martin.vigoureux@alcatel-lucent.com" }, # Martin Vigoureux is Liaison Contact in bess
+#   { "role_name": "liaison_contact", "person_id": 109666, "group_id": 66, "email": "g.white@cablelabs.com" }, # Greg White is Liaison Contact in cablelabs
+#   { "role_name": "liaison_contact", "person_id": 117421, "group_id": 1933, "email": "chairman@dmtf.org" }, # Winston Bumpus is Liaison Contact in dmtf
+#   { "role_name": "liaison_contact", "person_id": 127961, "group_id": 1739, "email": "statements@ietf.org" }, # statements@ietf.org is Liaison Contact in drinks
+#   { "role_name": "liaison_contact", "person_id": 109505, "group_id": 1787, "email": "bernie@ietf.hoeneisen.ch" }, # Bernie Hoeneisen is Liaison Contact in e2md
+#   { "role_name": "liaison_contact", "person_id": 109059, "group_id": 1787, "email": "ray.bellis@nominet.org.uk" }, # Ray Bellis is Liaison Contact in e2md
+#   { "role_name": "liaison_contact", "person_id": 116529, "group_id": 1919, "email": "istvan@ecma-interational.org" }, # Istvan Sebestyen is Liaison Contact in ecma-tc39
+#   { "role_name": "liaison_contact", "person_id": 127964, "group_id": 1919, "email": "johnneumann.openstrat@gmail.com" }, # John Neuman is Liaison Contact in ecma-tc39
+#   { "role_name": "liaison_contact", "person_id": 106012, "group_id": 1643, "email": "marc.linsner@cisco.com" }, # Marc Linsner is Liaison Contact in ecrit
+#   { "role_name": "liaison_contact", "person_id": 107084, "group_id": 1643, "email": "rmarshall@telecomsys.com" }, # Roger Marshall is Liaison Contact in ecrit
+#   { "role_name": "liaison_contact", "person_id": 116363, "group_id": 1915, "email": "e2nasupport@etsi.org" }, # Sonia Compans is Liaison Contact in etsi-e2na
+#   { "role_name": "liaison_contact", "person_id": 126473, "group_id": 2261, "email": "isgsupport@etsi.org" }, # Sonia Compan is Liaison Contact in etsi-isg-sai
+#   { "role_name": "liaison_contact", "person_id": 128316, "group_id": 2301, "email": "GSMALiaisons@gsma.com" }, # David Pollington is Liaison Contact in gsma-ztc
+#   { "role_name": "liaison_contact", "person_id": 3056, "group_id": 1875, "email": "shares@ndzh.com" }, # Susan Hares is Liaison Contact in i2rs
+#   { "role_name": "liaison_contact", "person_id": 105046, "group_id": 1875, "email": "jhaas@pfrc.org" }, # Jeffrey Haas is Liaison Contact in i2rs
+#   { "role_name": "liaison_contact", "person_id": 120845, "group_id": 61, "email": "tale@dd.org" }, # David Lawrence is Liaison Contact in icann-board-of-directors
+#   { "role_name": "liaison_contact", "person_id": 112851, "group_id": 2105, "email": "pthaler@broadcom.com" }, # Patricia Thaler is Liaison Contact in ieee-802
+#   { "role_name": "liaison_contact", "person_id": 127968, "group_id": 2105, "email": "p.nikolich@ieee.org" }, # Paul Nikolich is Liaison Contact in ieee-802
+#   { "role_name": "liaison_contact", "person_id": 19651, "group_id": 63, "email": "glenn.parsons@ericsson.com" }, # Glenn Parsons is Liaison Contact in ieee-802-1
+#   { "role_name": "liaison_contact", "person_id": 123875, "group_id": 63, "email": "JMessenger@advaoptical.com" }, # John Messenger is Liaison Contact in ieee-802-1
+#   { "role_name": "liaison_contact", "person_id": 127968, "group_id": 63, "email": "p.nikolich@ieee.org" }, # Paul Nikolich is Liaison Contact in ieee-802-1
+#   { "role_name": "liaison_contact", "person_id": 117415, "group_id": 1862, "email": "Adrian.P.Stephens@intel.com" }, # Adrian Stephens is Liaison Contact in ieee-802-11
+#   { "role_name": "liaison_contact", "person_id": 106284, "group_id": 1862, "email": "dstanley@agere.com" }, # Dorothy Stanley is Liaison Contact in ieee-802-11
+#   { "role_name": "liaison_contact", "person_id": 128345, "group_id": 2302, "email": "liaison@iowngf.org" }, # Forum Iown is Liaison Contact in iown-global-forum
+#   { "role_name": "liaison_contact", "person_id": 117428, "group_id": 1939, "email": "walter.fumy@bdr.de" }, # Walter Fumy is Liaison Contact in iso-iec-jtc1-sc27
+#   { "role_name": "liaison_contact", "person_id": 117429, "group_id": 1939, "email": "krystyna.passia@din.de" }, # Krystyna Passia is Liaison Contact in iso-iec-jtc1-sc27
+#   { "role_name": "liaison_contact", "person_id": 151289, "group_id": 50, "email": "koike@itscj.ipsj.or.jp" }, # Mayumi Koike is Liaison Contact in iso-iec-jtc1-sc29
+#   { "role_name": "liaison_contact", "person_id": 151289, "group_id": 2110, "email": "koike@itscj.ipsj.or.jp" }, # Mayumi Koike is Liaison Contact in iso-iec-jtc1-sc29-wg1
+#   { "role_name": "liaison_contact", "person_id": 114435, "group_id": 74, "email": "watanabe@itscj.ipsj.or.jp" }, # Shinji Watanabe is Liaison Contact in iso-iec-jtc1-sc29-wg11
+#   { "role_name": "liaison_contact", "person_id": 112106, "group_id": 49, "email": "jooran@kisi.or.kr" }, # Jooran Lee is Liaison Contact in iso-iec-jtc1-sc6
+#   { "role_name": "liaison_contact", "person_id": 113587, "group_id": 49, "email": "dykim@cnu.kr" }, # Chungnam University is Liaison Contact in iso-iec-jtc1-sc6
+#   { "role_name": "liaison_contact", "person_id": 117427, "group_id": 1938, "email": "secretariat@jtc1-sc7.org" }, # Witold Suryn is Liaison Contact in iso-iec-jtc1-sc7
+#   { "role_name": "liaison_contact", "person_id": 117426, "group_id": 1938, "email": "chair@jtc1-sc7.org" }, # Francois Coallier is Liaison Contact in iso-iec-jtc1-sc7
+#   { "role_name": "liaison_contact", "person_id": 127971, "group_id": 68, "email": "sabine.donnardcusse@afnor.org" }, # sabine.donnardcusse@afnor.org is Liaison Contact in isotc46
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2057, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1890, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-r
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2058, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-r-wp5a
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2059, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-r-wp5d
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2060, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-r-wp8a
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2061, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-r-wp8f
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 51, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2063, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-fg-cloud
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1860, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-fg-dist
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2064, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-fg-iptv
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2065, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-fg-ngnm
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2062, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-ipv6-group
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1872, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-jca-cloud
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1874, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-jca-cop
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2066, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-jca-idm
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1927, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-jca-sdn
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 65, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-mpls
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 52, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-ngn
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2067, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-ngnmfg
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 77, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-11
+#   { "role_name": "liaison_contact", "person_id": 128236, "group_id": 77, "email": "denis.andreev@itu.int" }, # Denis ANDREEV is Liaison Contact in itu-t-sg-11
+#   { "role_name": "liaison_contact", "person_id": 107300, "group_id": 77, "email": "tatiana.kurakova@itu.int" }, # Tatiana Kurakova is Liaison Contact in itu-t-sg-11
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2074, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-11-q5
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2075, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-11-wp2
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 84, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-12
+#   { "role_name": "liaison_contact", "person_id": 102900, "group_id": 84, "email": "acmorton@att.com" }, # Al Morton is Liaison Contact in itu-t-sg-12
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2076, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-12-q12
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2077, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-12-q17
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2082, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-q11
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2078, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-q3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2079, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-q5
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2080, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-q7
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2081, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-q9
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2083, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-wp3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2084, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-wp4
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2085, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-13-wp5
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2086, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-14
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 62, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2087, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q1
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2092, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q10
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2093, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q11
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2094, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q12
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2095, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q14
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2096, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q15
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2088, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2089, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q4
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2090, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q6
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2091, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-q9
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2097, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-wp1
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2098, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-15-wp3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 72, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-16
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2101, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-16-q10
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1987, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-16-q3
+#   { "role_name": "liaison_contact", "person_id": 118539, "group_id": 1987, "email": "rosa.angelesleondev@itu.int" }, # Rosa De Vivero is Liaison Contact in itu-t-sg-16-q3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2099, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-16-q8
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2100, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-16-q9
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 76, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-17
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2102, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-17-q2
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1937, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-17-q4
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1954, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-17-tsb
+#   { "role_name": "liaison_contact", "person_id": 12898, "group_id": 1954, "email": "youki-k@is.aist-nara.ac.jp" }, # Youki Kadobayashi is Liaison Contact in itu-t-sg-17-tsb
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 78, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-2
+#   { "role_name": "liaison_contact", "person_id": 127962, "group_id": 78, "email": "dr.guinena@ntra.gov.eg" }, # dr.guinena@ntra.gov.eg is Liaison Contact in itu-t-sg-2
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2103, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-20
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2073, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-2-q1
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 79, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-3
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2068, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-4
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2000, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-5
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2069, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-6
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2070, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-7
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2071, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-8
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 2072, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-sg-9
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 82, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-tsag
+#   { "role_name": "liaison_contact", "person_id": 127957, "group_id": 82, "email": "tsbtsag@itu.int" }, # Bilel Jamoussi is Liaison Contact in itu-t-tsag
+#   { "role_name": "liaison_cc_contact", "person_id": 127958, "group_id": 1846, "email": "itu-t-liaison@iab.org" }, # itu-t liaison is Liaison CC Contact in itu-t-wp-5-13
+#   { "role_name": "liaison_contact", "person_id": 10083, "group_id": 1882, "email": "paul.hoffman@vpnc.org" }, # Paul Hoffman is Liaison Contact in json
+#   { "role_name": "liaison_contact", "person_id": 111178, "group_id": 1882, "email": "mamille2@cisco.com" }, # Matthew Miller is Liaison Contact in json
+#   { "role_name": "liaison_contact", "person_id": 106881, "group_id": 1593, "email": "vach.kompella@alcatel.com" }, # Vach Kompella is Liaison Contact in l2vpn
+#   { "role_name": "liaison_contact", "person_id": 19987, "group_id": 1593, "email": "danny@arbor.net" }, # Danny McPherson is Liaison Contact in l2vpn
+#   { "role_name": "liaison_contact", "person_id": 2329, "group_id": 1593, "email": "stbryant@cisco.com" }, # Stewart Bryant is Liaison Contact in l2vpn
+#   { "role_name": "liaison_contact", "person_id": 101552, "group_id": 1593, "email": "Shane.Amante@Level3.com" }, # Shane Amante is Liaison Contact in l2vpn
+#   { "role_name": "liaison_contact", "person_id": 110305, "group_id": 1877, "email": "jason.weil@twcable.com" }, # Jason Weil is Liaison Contact in lmap
+#   { "role_name": "liaison_contact", "person_id": 6699, "group_id": 1877, "email": "dromasca@avaya.com" }, # Dan Romascanu is Liaison Contact in lmap
+#   { "role_name": "liaison_contact", "person_id": 127969, "group_id": 69, "email": "madkins@fb.com" }, # Mike Adkins is Liaison Contact in maawg
+#   { "role_name": "liaison_contact", "person_id": 127970, "group_id": 69, "email": "technical-chair@mailman.m3aawg.org" }, # technical-chair@mailman.m3aawg.org is Liaison Contact in maawg
+#   { "role_name": "liaison_contact", "person_id": 112512, "group_id": 75, "email": "rraghu@ciena.com" }, # Raghu Ranganathan is Liaison Contact in mef
+#   { "role_name": "liaison_contact", "person_id": 119947, "group_id": 1755, "email": "mrw@lilacglade.org" }, # Margaret Cullen is Liaison Contact in mif
+#   { "role_name": "liaison_contact", "person_id": 109884, "group_id": 1755, "email": "denghui02@hotmail.com" }, # Hui Deng is Liaison Contact in mif
+#   { "role_name": "liaison_contact", "person_id": 128292, "group_id": 1936, "email": "james.olthoff@nist.gov" }, # James Olthoff is Liaison Contact in nist
+#   { "role_name": "liaison_contact", "person_id": 104183, "group_id": 1537, "email": "john.loughney@nokia.com" }, # John Loughney is Liaison Contact in nsis
+#   { "role_name": "liaison_contact", "person_id": 105786, "group_id": 1840, "email": "matthew.bocci@nokia.com" }, # Matthew Bocci is Liaison Contact in nvo3
+#   { "role_name": "liaison_contact", "person_id": 112438, "group_id": 1840, "email": "bensons@queuefull.net" }, # Benson Schliesser is Liaison Contact in nvo3
+#   { "role_name": "liaison_contact", "person_id": 107943, "group_id": 2296, "email": "3GPPLiaison@etsi.org" }, # Susanna Kooistra is Liaison Contact in o3gpptsgran3
+#   { "role_name": "liaison_contact", "person_id": 127966, "group_id": 1941, "email": "chet.ensign@oasis-open.org" }, # chet.ensign@oasis-open.org is Liaison Contact in oasis
+#   { "role_name": "liaison_contact", "person_id": 117423, "group_id": 1935, "email": "soley@omg.org" }, # Richard Soley is Liaison Contact in omg
+#   { "role_name": "liaison_contact", "person_id": 127963, "group_id": 1858, "email": "dan.pitt@opennetworkingfoundation.org" }, # dan.pitt@opennetworkingfoundation.org is Liaison Contact in onf
+#   { "role_name": "liaison_contact", "person_id": 108304, "group_id": 1599, "email": "gunter.van_de_velde@nokia.com" }, # Gunter Van de Velde is Liaison Contact in opsec
+#   { "role_name": "liaison_contact", "person_id": 111647, "group_id": 1599, "email": "kk@google.com" }, # Chittimaneni Kk is Liaison Contact in opsec
+#   { "role_name": "liaison_contact", "person_id": 111656, "group_id": 1599, "email": "warren@kumari.net" }, # Warren Kumari is Liaison Contact in opsec
+#   { "role_name": "liaison_contact", "person_id": 106471, "group_id": 1188, "email": "dbrungard@att.com" }, # Deborah Brungard is Liaison Contact in ospf
+#   { "role_name": "liaison_contact", "person_id": 104198, "group_id": 1188, "email": "adrian@olddog.co.uk" }, # Adrian Farrel is Liaison Contact in ospf
+#   { "role_name": "liaison_contact", "person_id": 104816, "group_id": 1188, "email": "akr@cisco.com" }, # Abhay Roy is Liaison Contact in ospf
+#   { "role_name": "liaison_contact", "person_id": 10784, "group_id": 1188, "email": "acee@redback.com" }, # Acee Lindem is Liaison Contact in ospf
+#   { "role_name": "liaison_contact", "person_id": 108123, "group_id": 1819, "email": "Gabor.Bajko@nokia.com" }, # Gabor Bajko is Liaison Contact in paws
+#   { "role_name": "liaison_contact", "person_id": 106987, "group_id": 1819, "email": "br@brianrosen.net" }, # Brian Rosen is Liaison Contact in paws
+#   { "role_name": "liaison_cc_contact", "person_id": 122823, "group_id": 1630, "email": "ketant.ietf@gmail.com" }, # Ketan Talaulikar is Liaison CC Contact in pce
+#   { "role_name": "liaison_contact", "person_id": 125031, "group_id": 1630, "email": "andrew.stone@nokia.com" }, # Andrew Stone is Liaison Contact in pce
+#   { "role_name": "liaison_contact", "person_id": 108213, "group_id": 1630, "email": "julien.meuric@orange.com" }, # Julien Meuric is Liaison Contact in pce
+#   { "role_name": "liaison_contact", "person_id": 111477, "group_id": 1630, "email": "dd@dhruvdhody.com" }, # Dhruv Dhody is Liaison Contact in pce
+#   { "role_name": "liaison_contact", "person_id": 112773, "group_id": 1701, "email": "lars.eggert@nokia.com" }, # Lars Eggert is Liaison Contact in pcn
+#   { "role_name": "liaison_contact", "person_id": 12671, "group_id": 1437, "email": "adamson@itd.nrl.navy.mil" }, # Brian Adamson is Liaison Contact in rmt
+#   { "role_name": "liaison_contact", "person_id": 100609, "group_id": 1437, "email": "lorenzo@vicisano.net" }, # Lorenzo Vicisano is Liaison Contact in rmt
+#   { "role_name": "liaison_contact", "person_id": 115213, "group_id": 1730, "email": "maria.ines.robles@ericsson.com" }, # Ines Robles is Liaison Contact in roll
+#   { "role_name": "liaison_contact", "person_id": 110721, "group_id": 1820, "email": "ted.ietf@gmail.com" }, # Ted Hardie is Liaison Contact in rtcweb
+#   { "role_name": "liaison_contact", "person_id": 104294, "group_id": 1820, "email": "magnus.westerlund@ericsson.com" }, # Magnus Westerlund is Liaison Contact in rtcweb
+#   { "role_name": "liaison_contact", "person_id": 105791, "group_id": 1820, "email": "fluffy@iii.ca" }, # Cullen Jennings is Liaison Contact in rtcweb
+#   { "role_name": "liaison_contact", "person_id": 105906, "group_id": 1910, "email": "james.n.guichard@futurewei.com" }, # Jim Guichard is Liaison Contact in sfc
+#   { "role_name": "liaison_contact", "person_id": 3862, "group_id": 1910, "email": "jmh@joelhalpern.com" }, # Joel Halpern is Liaison Contact in sfc
+#   { "role_name": "liaison_contact", "person_id": 127960, "group_id": 1462, "email": "sipcore@ietf.org" }, # sipcore@ietf.org is Liaison Contact in sip
+#   { "role_name": "liaison_contact", "person_id": 103769, "group_id": 1762, "email": "adam@nostrum.com" }, # Adam Roach is Liaison Contact in sipcore
+#   { "role_name": "liaison_contact", "person_id": 108554, "group_id": 1762, "email": "pkyzivat@alum.mit.edu" }, # Paul Kyzivat is Liaison Contact in sipcore
+#   { "role_name": "liaison_contact", "person_id": 103539, "group_id": 1542, "email": "gonzalo.camarillo@ericsson.com" }, # Gonzalo Camarillo is Liaison Contact in sipping
+#   { "role_name": "liaison_contact", "person_id": 103612, "group_id": 1542, "email": "jf.mule@cablelabs.com" }, # Jean-Francois Mule is Liaison Contact in sipping
+#   { "role_name": "liaison_contact", "person_id": 3862, "group_id": 1905, "email": "jmh@joelhalpern.com" }, # Joel Halpern is Liaison Contact in spring
+#   { "role_name": "liaison_contact", "person_id": 109802, "group_id": 1905, "email": "aretana.ietf@gmail.com" }, # Alvaro Retana is Liaison Contact in spring
+#   { "role_name": "liaison_contact", "person_id": 107172, "group_id": 1905, "email": "bruno.decraene@orange.com" }, # Bruno Decraene is Liaison Contact in spring
+#   { "role_name": "liaison_contact", "person_id": 5376, "group_id": 1899, "email": "housley@vigilsec.com" }, # Russ Housley is Liaison Contact in stir
+#   { "role_name": "liaison_contact", "person_id": 103961, "group_id": 1899, "email": "rjsparks@nostrum.com" }, # Robert Sparks is Liaison Contact in stir
+#   { "role_name": "liaison_contact", "person_id": 117430, "group_id": 1940, "email": "admin@trustedcomputinggroup.org" }, # Lindsay Adamson is Liaison Contact in tcg
+#   { "role_name": "liaison_contact", "person_id": 110932, "group_id": 1985, "email": "oscar.gonzalezdedios@telefonica.com" }, # Oscar de Dios is Liaison Contact in teas
+#   { "role_name": "liaison_contact", "person_id": 10064, "group_id": 1985, "email": "lberger@labn.net" }, # Lou Berger is Liaison Contact in teas
+#   { "role_name": "liaison_contact", "person_id": 114351, "group_id": 1985, "email": "vbeeram@juniper.net" }, # Vishnu Beeram is Liaison Contact in teas
+#   { "role_name": "liaison_contact", "person_id": 117422, "group_id": 1934, "email": "j.hietala@opengroup.org" }, # Jim Hietala is Liaison Contact in the-open-group
+#   { "role_name": "liaison_contact", "person_id": 106414, "group_id": 1709, "email": "yaakovjstein@gmail.com" }, # Yaakov Stein is Liaison Contact in tictoc
+#   { "role_name": "liaison_contact", "person_id": 4857, "group_id": 1709, "email": "kodonog@pobox.com" }, # Karen O'Donoghue is Liaison Contact in tictoc
+#   { "role_name": "liaison_contact", "person_id": 144713, "group_id": 2420, "email": "liaisons@tmforum.org" }, # liaisons@tmforum.org is Liaison Contact in tmforum
+#   { "role_name": "liaison_contact", "person_id": 112773, "group_id": 1324, "email": "lars@eggert.org" }, # Lars Eggert is Liaison Contact in tsv
+#   { "role_name": "liaison_contact", "person_id": 112104, "group_id": 53, "email": "rick@unicode.org" }, # Rick McGowan is Liaison Contact in unicode
+#   { "role_name": "liaison_contact", "person_id": 105907, "group_id": 1864, "email": "stpeter@stpeter.im" }, # Peter Saint-Andre is Liaison Contact in videocodec
+#   { "role_name": "liaison_contact", "person_id": 120261, "group_id": 54, "email": "wseltzer@w3.org" }, # Wendy Seltzer is Liaison Contact in w3c
+#   { "role_name": "liaison_contact", "person_id": 112103, "group_id": 54, "email": "plh@w3.org" }, # Philippe Le Hégaret is Liaison Contact in w3c
+#   { "role_name": "liaison_contact", "person_id": 107520, "group_id": 1957, "email": "shida@ntt-at.com" }, # Shida Schubert is Liaison Contact in webpush
+#   { "role_name": "liaison_contact", "person_id": 110049, "group_id": 1957, "email": "jhildebr@cisco.com" }, # Joe Hildebrand is Liaison Contact in webpush
+#   { "role_name": "liaison_contact", "person_id": 103769, "group_id": 1601, "email": "adam@nostrum.com" }, # Adam Roach is Liaison Contact in xcon
+#   { "role_name": "liaison_contact", "person_id": 107520, "group_id": 1815, "email": "shida@ntt-at.com" }, # Shida Schubert is Liaison Contact in xrblock
+#   { "role_name": "liaison_contact", "person_id": 6699, "group_id": 1815, "email": "dromasca@avaya.com" }, # Dan Romascanu is Liaison Contact in xrblock
+# ]}
diff --git a/ietf/group/migrations/0007_used_roles.py b/ietf/group/migrations/0007_used_roles.py
new file mode 100644
index 0000000000..0dfa79fa03
--- /dev/null
+++ b/ietf/group/migrations/0007_used_roles.py
@@ -0,0 +1,49 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    Group = apps.get_model("group", "Group")
+    GroupFeatures = apps.get_model("group", "GroupFeatures")
+    iab = Group.objects.get(acronym="iab")
+    iab.used_roles = [
+        "chair",
+        "delegate",
+        "exofficio",
+        "liaison",
+        "liaison_coordinator",
+        "member",
+    ]
+    iab.save()
+    GroupFeatures.objects.filter(type_id="ietf").update(
+        default_used_roles=[
+            "ad",
+            "member",
+            "comdir",
+            "delegate",
+            "execdir",
+            "recman",
+            "secr",
+            "chair",
+        ]
+    )
+
+
+def reverse(apps, schema_editor):
+    Group = apps.get_model("group", "Group")
+    iab = Group.objects.get(acronym="iab")
+    iab.used_roles = []
+    iab.save()
+    # Intentionally not putting trac-* back into grouptype ietf default_used_roles
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("group", "0006_remove_liason_contacts"),
+        ("name", "0018_alter_rolenames"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+    ]
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index efdd6f3ea6..e2893a90f7 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -137,6 +137,10 @@ def has_role(user, role_names, *args, **kwargs):
                 group__type="sdo",
                 group__state="active",
             ),
+            "Liaison Coordinator": Q(
+                name="liaison_coordinator",
+                group__acronym="iab",
+            ),
             "Authorized Individual": Q(
                 name="auth",
                 group__type="sdo",
diff --git a/ietf/liaisons/admin.py b/ietf/liaisons/admin.py
index c7cb7a4dae..21515ed1a3 100644
--- a/ietf/liaisons/admin.py
+++ b/ietf/liaisons/admin.py
@@ -24,7 +24,7 @@ class LiaisonStatementAdmin(admin.ModelAdmin):
     list_display = ['id', 'title', 'submitted', 'from_groups_short_display', 'purpose', 'related_to']
     list_display_links = ['id', 'title']
     ordering = ('title', )
-    raw_id_fields = ('from_contact', 'attachments', 'from_groups', 'to_groups')
+    raw_id_fields = ('attachments', 'from_groups', 'to_groups')
     #filter_horizontal = ('from_groups', 'to_groups')
     inlines = [ RelatedLiaisonStatementInline, LiaisonStatementAttachmentInline ]
 
@@ -50,4 +50,4 @@ class LiaisonStatementEventAdmin(admin.ModelAdmin):
     raw_id_fields = ["statement", "by"]
 
 admin.site.register(LiaisonStatement, LiaisonStatementAdmin)
-admin.site.register(LiaisonStatementEvent, LiaisonStatementEventAdmin)
\ No newline at end of file
+admin.site.register(LiaisonStatementEvent, LiaisonStatementEventAdmin)
diff --git a/ietf/liaisons/factories.py b/ietf/liaisons/factories.py
index 6d93cf8cd2..ca588236e3 100644
--- a/ietf/liaisons/factories.py
+++ b/ietf/liaisons/factories.py
@@ -9,7 +9,7 @@ class Meta:
         skip_postgeneration_save = True
 
     title = factory.Faker('sentence')
-    from_contact = factory.SubFactory('ietf.person.factories.EmailFactory')
+    from_contact = factory.Faker('email')
     purpose_id = 'comment'
     body = factory.Faker('paragraph')
     state_id = 'posted'
diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index 1af29044b3..7483981595 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -3,38 +3,33 @@
 
 
 import io
-import os
 import operator
-
-from typing import Union            # pyflakes:ignore
-
+import os
 from email.utils import parseaddr
+from functools import reduce
+from typing import Union, Optional  # pyflakes:ignore
 
 from django import forms
 from django.conf import settings
-from django.core.exceptions import ObjectDoesNotExist, ValidationError
-from django.forms.utils import ErrorList
-from django.db.models import Q
-#from django.forms.widgets import RadioFieldRenderer
+from django.core.exceptions import ValidationError
 from django.core.validators import validate_email
+from django.db.models import Q, QuerySet
+from django.forms.utils import ErrorList
 from django_stubs_ext import QuerySetAny
 
-import debug                            # pyflakes:ignore
-
+from ietf.doc.models import Document
+from ietf.group.models import Group
 from ietf.ietfauth.utils import has_role
-from ietf.name.models import DocRelationshipName
-from ietf.liaisons.utils import get_person_for_user,is_authorized_individual
-from ietf.liaisons.widgets import ButtonWidget,ShowAttachmentsWidget
-from ietf.liaisons.models import (LiaisonStatement,
-    LiaisonStatementEvent,LiaisonStatementAttachment,LiaisonStatementPurposeName)
 from ietf.liaisons.fields import SearchableLiaisonStatementsField
-from ietf.group.models import Group
-from ietf.person.models import Email
-from ietf.person.fields import SearchableEmailField
-from ietf.doc.models import Document
+from ietf.liaisons.models import (LiaisonStatement,
+                                  LiaisonStatementEvent, LiaisonStatementAttachment, LiaisonStatementPurposeName)
+from ietf.liaisons.utils import get_person_for_user, is_authorized_individual, OUTGOING_LIAISON_ROLES, \
+    INCOMING_LIAISON_ROLES
+from ietf.liaisons.widgets import ButtonWidget, ShowAttachmentsWidget
+from ietf.name.models import DocRelationshipName
+from ietf.person.models import Person
 from ietf.utils.fields import DatepickerDateField, ModelMultipleChoiceField
 from ietf.utils.timezone import date_today, datetime_from_date, DEADLINE_TZINFO
-from functools import reduce
 
 '''
 NOTES:
@@ -51,45 +46,106 @@
 def liaison_manager_sdos(person):
     return Group.objects.filter(type="sdo", state="active", role__person=person, role__name="liaiman").distinct()
 
+
 def flatten_choices(choices):
-    '''Returns a flat choice list given one with option groups defined'''
+    """Returns a flat choice list given one with option groups defined
+    
+    n.b., Django allows mixing grouped options and top-level options. This helper only supports
+    the non-mixed case where every option is in an option group.
+    """
     flat = []
-    for optgroup,options in choices:
+    for optgroup, options in choices:
         flat.extend(options)
     return flat
+
+
+def choices_from_group_queryset(groups: QuerySet[Group]):
+    """Get choices list for internal IETF groups user is authorized to select
     
-def get_internal_choices(user):
-    '''Returns the set of internal IETF groups the user has permissions for, as a list
-    of choices suitable for use in a select widget.  If user == None, all active internal
-    groups are included.'''
+    Returns a grouped list of choices suitable for use with a ChoiceField. If user is None,
+    includes all groups.
+    """
+    main = []
+    areas = []
+    wgs = []
+    for g in groups.distinct().order_by("acronym"):
+        if g.acronym in ("ietf", "iesg", "iab"):
+            main.append((g.pk, f"The {g.acronym.upper()}"))
+        elif g.type_id == "area":
+            areas.append((g.pk, f"{g.acronym} - {g.name}"))
+        elif g.type_id == "wg":
+            wgs.append((g.pk, f"{g.acronym} - {g.name}"))
     choices = []
-    groups = get_groups_for_person(user.person if user else None)
-    main = [ (g.pk, 'The {}'.format(g.acronym.upper())) for g in groups.filter(acronym__in=('ietf','iesg','iab')) ]
-    areas = [ (g.pk, '{} - {}'.format(g.acronym,g.name)) for g in groups.filter(type='area') ]
-    wgs = [ (g.pk, '{} - {}'.format(g.acronym,g.name)) for g in groups.filter(type='wg') ]
-    choices.append(('Main IETF Entities', main))
-    choices.append(('IETF Areas', areas))
-    choices.append(('IETF Working Groups', wgs ))
+    if len(main) > 0:
+        choices.append(("Main IETF Entities", main))
+    if len(areas) > 0:
+        choices.append(("IETF Areas", areas))
+    if len(wgs) > 0:
+        choices.append(("IETF Working Groups", wgs))
     return choices
 
-def get_groups_for_person(person):
-    '''Returns queryset of internal Groups the person has interesting roles in.
-    This is a refactor of IETFHierarchyManager.get_entities_for_person().  If Person
-    is None or Secretariat or Liaison Manager all internal IETF groups are returned.
-    '''
-    if person == None or has_role(person.user, "Secretariat") or has_role(person.user, "Liaison Manager"):
-        # collect all internal IETF groups
-        queries = [Q(acronym__in=('ietf','iesg','iab')),
-                   Q(type='area',state='active'),
-                   Q(type='wg',state='active')]
+
+def all_internal_groups():
+    """Get a queryset of all IETF groups suitable for LS To/From assignment"""
+    return Group.objects.filter(
+        Q(acronym__in=("ietf", "iesg", "iab"))
+        | Q(type="area", state="active")
+        | Q(type="wg", state="active")
+    ).distinct()
+
+
+def internal_groups_for_person(person: Optional[Person]):
+    """Get a queryset of IETF groups suitable for LS To/From assignment by person"""
+    if person is None:
+        return Group.objects.none()  # no person = no roles
+
+    if has_role(
+        person.user,
+        (
+            "Secretariat",
+            "IETF Chair",
+            "IAB Chair",
+            "IAB Executive Director",
+            "Liaison Manager",
+            "Liaison Coordinator",
+            "Authorized Individual",
+        ),
+    ):
+        return all_internal_groups()
+    # Interesting roles, as Group queries
+    queries = [
+        Q(role__person=person, role__name="chair", acronym="ietf"),
+        Q(role__person=person, role__name__in=("chair", "execdir"), acronym="iab"),
+        Q(role__person=person, role__name="ad", type="area", state="active"),
+        Q(
+            role__person=person,
+            role__name__in=("chair", "secretary"),
+            type="wg",
+            state="active",
+        ),
+        Q(
+            parent__role__person=person,
+            parent__role__name="ad",
+            type="wg",
+            state="active",
+        ),
+    ]
+    if has_role(person.user, "Area Director"):
+        queries.append(Q(acronym__in=("ietf", "iesg")))  # AD can also choose these
+    return Group.objects.filter(reduce(operator.or_, queries)).distinct()
+
+
+def external_groups_for_person(person):
+    """Get a queryset of external groups suitable for LS To/From assignment by person"""
+    filter_expr = Q(pk__in=[])  # start with no groups
+    # These roles can add all external sdo groups
+    if has_role(person.user, set(INCOMING_LIAISON_ROLES + OUTGOING_LIAISON_ROLES) - {"Liaison Manager", "Authorized Individual"}):
+        filter_expr |= Q(type="sdo")
     else:
-        # Interesting roles, as Group queries
-        queries = [Q(role__person=person,role__name='chair',acronym='ietf'),
-                   Q(role__person=person,role__name__in=('chair','execdir'),acronym='iab'),
-                   Q(role__person=person,role__name='ad',type='area',state='active'),
-                   Q(role__person=person,role__name__in=('chair','secretary'),type='wg',state='active'),
-                   Q(parent__role__person=person,parent__role__name='ad',type='wg',state='active')]
-    return Group.objects.filter(reduce(operator.or_,queries)).order_by('acronym').distinct()
+        # The person cannot add all external sdo groups; add any for which they are Liaison Manager
+        filter_expr |= Q(type="sdo", role__person=person, role__name__in=["auth", "liaiman"])
+    return Group.objects.filter(state="active").filter(filter_expr).distinct().order_by("name")
+
 
 def liaison_form_factory(request, type=None, **kwargs):
     """Returns appropriate Liaison entry form"""
@@ -154,7 +210,7 @@ def get_results(self):
             query = self.cleaned_data.get('text')
             if query:
                 q = (Q(title__icontains=query) |
-                    Q(from_contact__address__icontains=query) |
+                    Q(from_contact__icontains=query) |
                     Q(to_contacts__icontains=query) |
                     Q(other_identifiers__icontains=query) |
                     Q(body__icontains=query) |
@@ -216,13 +272,8 @@ class LiaisonModelForm(forms.ModelForm):
     '''Specify fields which require a custom widget or that are not part of the model.
     '''
     from_groups = ModelMultipleChoiceField(queryset=Group.objects.all(),label='Groups',required=False)
-    from_groups.widget.attrs["class"] = "select2-field"
-    from_groups.widget.attrs['data-minimum-input-length'] = 0
-    from_contact = forms.EmailField()   # type: Union[forms.EmailField, SearchableEmailField]
     to_contacts = forms.CharField(label="Contacts", widget=forms.Textarea(attrs={'rows':'3', }), strip=False)
     to_groups = ModelMultipleChoiceField(queryset=Group.objects,label='Groups',required=False)
-    to_groups.widget.attrs["class"] = "select2-field"
-    to_groups.widget.attrs['data-minimum-input-length'] = 0
     deadline = DatepickerDateField(date_format="yyyy-mm-dd", picker_settings={"autoclose": "1" }, label='Deadline', required=True)
     related_to = SearchableLiaisonStatementsField(label='Related Liaison Statement', required=False)
     submitted_date = DatepickerDateField(date_format="yyyy-mm-dd", picker_settings={"autoclose": "1" }, label='Submission date', required=True, initial=lambda: date_today(DEADLINE_TZINFO))
@@ -245,13 +296,17 @@ def __init__(self, user, *args, **kwargs):
         self.person = get_person_for_user(user)
         self.is_new = not self.instance.pk
 
+        self.fields["from_groups"].widget.attrs["class"] = "select2-field"
+        self.fields["from_groups"].widget.attrs["data-minimum-input-length"] = 0
         self.fields["from_groups"].widget.attrs["data-placeholder"] = "Type in name to search for group"
+        self.fields["to_groups"].widget.attrs["class"] = "select2-field"
+        self.fields["to_groups"].widget.attrs["data-minimum-input-length"] = 0
         self.fields["to_groups"].widget.attrs["data-placeholder"] = "Type in name to search for group"
         self.fields["to_contacts"].label = 'Contacts'
         self.fields["other_identifiers"].widget.attrs["rows"] = 2
-        
+
         # add email validators
-        for field in ['from_contact','to_contacts','technical_contacts','action_holder_contacts','cc_contacts']:
+        for field in ['to_contacts','technical_contacts','action_holder_contacts','cc_contacts']:
             if field in self.fields:
                 self.fields[field].validators.append(validate_emails)
 
@@ -270,18 +325,6 @@ def clean_to_groups(self):
             raise forms.ValidationError('You must specify a To Group')
         return to_groups
         
-    def clean_from_contact(self):
-        contact = self.cleaned_data.get('from_contact')
-        from_groups = self.cleaned_data.get('from_groups')
-        try:
-            email = Email.objects.get(address=contact)
-            if not email.origin:
-                email.origin = "liaison: %s" % (','.join([ g.acronym for g in from_groups.all() ]))
-                email.save()
-        except ObjectDoesNotExist:
-            raise forms.ValidationError('Email address does not exist')
-        return email
-
 # Note to future person: This is the wrong place to fix the new lines
 # in cc_contacts and to_contacts. Those belong in the save function.
 # Or at least somewhere other than here.
@@ -434,32 +477,39 @@ def is_approved(self):
         return True
 
     def get_post_only(self):
-        from_groups = self.cleaned_data.get('from_groups')
-        if has_role(self.user, "Secretariat") or is_authorized_individual(self.user,from_groups):
+        from_groups = self.cleaned_data.get("from_groups")
+        if (
+            has_role(self.user, "Secretariat")
+            or has_role(self.user, "Liaison Coordinator")
+            or is_authorized_individual(self.user, from_groups)
+        ):
             return False
         return True
 
     def set_from_fields(self):
-        '''Set from_groups and from_contact options and initial value based on user
-        accessing the form.'''
-        if has_role(self.user, "Secretariat"):
-            queryset = Group.objects.filter(type="sdo", state="active").order_by('name')
-        else:
-            queryset = Group.objects.filter(type="sdo", state="active", role__person=self.person, role__name__in=("liaiman", "auth")).distinct().order_by('name')
-            self.fields['from_contact'].initial = self.person.role_set.filter(group=queryset[0]).first().email.address
-            self.fields['from_contact'].widget.attrs['disabled'] = True
-        self.fields['from_groups'].queryset = queryset
-        self.fields['from_groups'].widget.submitter = str(self.person)
-
+        """Configure from "From" fields based on user roles"""
+        qs = external_groups_for_person(self.person)
+        self.fields["from_groups"].queryset = qs
+        self.fields["from_groups"].widget.submitter = str(self.person)
         # if there's only one possibility make it the default
-        if len(queryset) == 1:
-            self.fields['from_groups'].initial = queryset
+        if len(qs) == 1:
+            self.fields['from_groups'].initial = qs
+
+        # Note that the IAB chair currently doesn't get to work with incoming liaison statements
+        if not (
+            has_role(self.user, "Secretariat")
+            or has_role(self.user, "Liaison Coordinator")
+        ):
+            self.fields["from_contact"].initial = (
+                self.person.role_set.filter(group=qs[0]).first().email.formatted_email()
+            )
+            self.fields["from_contact"].widget.attrs["disabled"] = True
 
     def set_to_fields(self):
         '''Set to_groups and to_contacts options and initial value based on user
         accessing the form.  For incoming Liaisons, to_groups choices is the full set.
         '''
-        self.fields['to_groups'].choices = get_internal_choices(None)
+        self.fields['to_groups'].choices = choices_from_group_queryset(all_internal_groups())
 
 
 class OutgoingLiaisonForm(LiaisonModelForm):
@@ -473,46 +523,56 @@ def is_approved(self):
         return self.cleaned_data['approved']
 
     def set_from_fields(self):
-        '''Set from_groups and from_contact options and initial value based on user
-        accessing the form'''
-        choices = get_internal_choices(self.user)
-        self.fields['from_groups'].choices = choices
-        
-        # set initial value if only one entry 
-        flat_choices = flatten_choices(choices)
+        """Configure from "From" fields based on user roles"""
+        self.set_from_groups_field()
+        self.set_from_contact_field()
+
+    def set_from_groups_field(self):
+        """Configure the from_groups field based on roles"""
+        grouped_choices = choices_from_group_queryset(internal_groups_for_person(self.person))
+        flat_choices = flatten_choices(grouped_choices)
         if len(flat_choices) == 1:
-            self.fields['from_groups'].initial = [flat_choices[0][0]]
-        
-        if has_role(self.user, "Secretariat"):
-            self.fields['from_contact'] = SearchableEmailField(only_users=True)  # secretariat can edit this field!
-            return
-
-        if self.person.role_set.filter(name='liaiman',group__state='active'):
-            email = self.person.role_set.filter(name='liaiman',group__state='active').first().email.address
-        elif self.person.role_set.filter(name__in=('ad','chair'),group__state='active'):
-            email = self.person.role_set.filter(name__in=('ad','chair'),group__state='active').first().email.address
+            self.fields["from_groups"].choices = flat_choices
+            self.fields["from_groups"].initial = [flat_choices[0][0]]
         else:
-            email = self.person.email_address()
+            self.fields["from_groups"].choices = grouped_choices
 
-        # Non-secretariat user cannot change the from_contact field. Fill in its value.
+    def set_from_contact_field(self):
+        """Configure the from_contact field based on user roles"""
+        # Secretariat can set this to any valid address but gets no default
+        if has_role(self.user, "Secretariat"):
+            return
+        elif has_role(self.user, ["IAB Chair", "Liaison Coordinator"]):
+            self.fields["from_contact"].initial = "IAB Chair <iab-chair@iab.org>"
+            return
+        elif has_role(self.user, "IETF Chair"):
+            self.fields["from_contact"].initial = "IETF Chair <chair@ietf.org>"
+            return
+        # ... others have it set to the correct value and cannot change it
         self.fields['from_contact'].disabled = True
-        self.fields['from_contact'].initial = email
-
-    def set_to_fields(self):
-        '''Set to_groups and to_contacts options and initial value based on user
-        accessing the form'''
-        # set options. if the user is a Liaison Manager and nothing more, reduce set to his SDOs
-        if has_role(self.user, "Liaison Manager") and not self.person.role_set.filter(name__in=('ad','chair'),group__state='active'):
-            queryset = Group.objects.filter(type="sdo", state="active", role__person=self.person, role__name="liaiman").distinct().order_by('name')
+        # Set up the querysets we might use - only evaluated as needed
+        liaison_manager_role = self.person.role_set.filter(name="liaiman", group__state="active")
+        chair_or_ad_role = self.person.role_set.filter(
+                    name__in=("ad", "chair"), group__state="active"
+                )  
+        if liaison_manager_role.exists():
+            from_contact_email = liaison_manager_role.first().email
+        elif chair_or_ad_role.exists():
+            from_contact_email = chair_or_ad_role.first().email
         else:
-            # get all outgoing entities
-            queryset = Group.objects.filter(type="sdo", state="active").order_by('name')
+            from_contact_email = self.person.email()
+        self.fields['from_contact'].initial = from_contact_email.formatted_email()
 
-        self.fields['to_groups'].queryset = queryset
+    def set_to_fields(self):
+        """Configure the "To" fields based on user roles"""
+        qs = external_groups_for_person(self.person)
+        self.fields['to_groups'].queryset = qs 
 
         # set initial
         if has_role(self.user, "Liaison Manager"):
-            self.fields['to_groups'].initial = [queryset.first()]
+            self.fields['to_groups'].initial = [
+                qs.filter(role__person=self.person, role__name="liaiman").first()
+            ]
 
 
 class EditLiaisonForm(LiaisonModelForm):
@@ -533,32 +593,20 @@ def save(self, *args, **kwargs):
         return self.instance
 
     def set_from_fields(self):
-        '''Set from_groups and from_contact options and initial value based on user
-        accessing the form.'''
+        """Configure from "From" fields based on user roles"""
         if self.instance.is_outgoing():
-            self.fields['from_groups'].choices = get_internal_choices(self.user)
+            self.fields['from_groups'].choices = choices_from_group_queryset(internal_groups_for_person(self.person))
         else:
-            if has_role(self.user, "Secretariat"):
-                queryset = Group.objects.filter(type="sdo").order_by('name')
-            else:
-                queryset = Group.objects.filter(type="sdo", role__person=self.person, role__name__in=("liaiman", "auth")).distinct().order_by('name')
+            self.fields["from_groups"].queryset = external_groups_for_person(self.person)
+            if not has_role(self.user, "Secretariat"):
                 self.fields['from_contact'].widget.attrs['disabled'] = True
-            self.fields['from_groups'].queryset = queryset
 
     def set_to_fields(self):
-        '''Set to_groups and to_contacts options and initial value based on user
-        accessing the form.  For incoming Liaisons, to_groups choices is the full set.
-        '''
+        """Configure the "To" fields based on user roles"""
         if self.instance.is_outgoing():
-            # if the user is a Liaison Manager and nothing more, reduce to set to his SDOs
-            if has_role(self.user, "Liaison Manager") and not self.person.role_set.filter(name__in=('ad','chair'),group__state='active'):
-                queryset = Group.objects.filter(type="sdo", role__person=self.person, role__name="liaiman").distinct().order_by('name')
-            else:
-                # get all outgoing entities
-                queryset = Group.objects.filter(type="sdo").order_by('name')
-            self.fields['to_groups'].queryset = queryset
+            self.fields['to_groups'].queryset = external_groups_for_person(self.person)
         else:
-            self.fields['to_groups'].choices = get_internal_choices(None)
+            self.fields['to_groups'].choices = choices_from_group_queryset(all_internal_groups())
 
 
 class EditAttachmentForm(forms.Form):
diff --git a/ietf/liaisons/migrations/0003_liaisonstatement_from_contact_tmp.py b/ietf/liaisons/migrations/0003_liaisonstatement_from_contact_tmp.py
new file mode 100644
index 0000000000..de2ce7ff59
--- /dev/null
+++ b/ietf/liaisons/migrations/0003_liaisonstatement_from_contact_tmp.py
@@ -0,0 +1,22 @@
+# Copyright The IETF Trust 2025 All Rights Reserved
+from django.db import migrations, models
+import ietf.utils.validators
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("liaisons", "0002_alter_liaisonstatement_response_contacts"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="liaisonstatement",
+            name="from_contact_tmp",
+            field=models.CharField(
+                blank=True,
+                help_text="Address of the formal sender of the statement",
+                max_length=512,
+                validators=[ietf.utils.validators.validate_mailbox_address],
+            ),
+        ),
+    ]
diff --git a/ietf/liaisons/migrations/0004_populate_liaisonstatement_from_contact_tmp.py b/ietf/liaisons/migrations/0004_populate_liaisonstatement_from_contact_tmp.py
new file mode 100644
index 0000000000..dbab326b0c
--- /dev/null
+++ b/ietf/liaisons/migrations/0004_populate_liaisonstatement_from_contact_tmp.py
@@ -0,0 +1,60 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from itertools import islice
+
+from django.db import migrations
+
+from ietf.person.name import plain_name
+from ietf.utils.mail import formataddr
+from ietf.utils.validators import validate_mailbox_address
+
+
+def forward(apps, schema_editor):
+    def _formatted_email(email):
+        """Format an email address to match Email.formatted_email()"""
+        person = email.person
+        if person:
+            return formataddr(
+                (
+                    # inlined Person.plain_name(), minus the caching
+                    person.plain if person.plain else plain_name(person.name),
+                    email.address,
+                )
+            )
+        return email.address
+
+    def _batched(iterable, n):
+        """Split an iterable into lists of length <= n
+
+        (based on itertools example code for batched(), which is added in py312)
+        """
+        iterator = iter(iterable)
+        batch = list(islice(iterator, n))  # consumes first n iterations
+        while batch:
+            yield batch
+            batch = list(islice(iterator, n))  # consumes next n iterations
+
+    LiaisonStatement = apps.get_model("liaisons", "LiaisonStatement")
+    LiaisonStatement.objects.update(from_contact_tmp="")  # ensure they're all blank
+    for batch in _batched(
+        LiaisonStatement.objects.exclude(from_contact=None).select_related(
+            "from_contact"
+        ),
+        100,
+    ):
+        for ls in batch:
+            ls.from_contact_tmp = _formatted_email(ls.from_contact)
+            validate_mailbox_address(
+                ls.from_contact_tmp
+            )  # be sure it's permitted before we accept it
+
+        LiaisonStatement.objects.bulk_update(batch, fields=["from_contact_tmp"])
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("liaisons", "0003_liaisonstatement_from_contact_tmp"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward),
+    ]
diff --git a/ietf/liaisons/migrations/0005_replace_liaisonstatement_from_contact.py b/ietf/liaisons/migrations/0005_replace_liaisonstatement_from_contact.py
new file mode 100644
index 0000000000..e1702ae3bc
--- /dev/null
+++ b/ietf/liaisons/migrations/0005_replace_liaisonstatement_from_contact.py
@@ -0,0 +1,20 @@
+# Copyright The IETF Trust 2025 All Rights Reserved
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("liaisons", "0004_populate_liaisonstatement_from_contact_tmp"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="liaisonstatement",
+            name="from_contact",
+        ),
+        migrations.RenameField(
+            model_name="liaisonstatement",
+            old_name="from_contact_tmp",
+            new_name="from_contact",
+        ),
+    ]
diff --git a/ietf/liaisons/models.py b/ietf/liaisons/models.py
index 2ad502102c..a2d79ea476 100644
--- a/ietf/liaisons/models.py
+++ b/ietf/liaisons/models.py
@@ -7,13 +7,14 @@
 from django.db import models
 from django.utils.text import slugify
 
-from ietf.person.models import Email, Person
+from ietf.person.models import Person
 from ietf.name.models import (LiaisonStatementPurposeName, LiaisonStatementState,
                               LiaisonStatementEventTypeName, LiaisonStatementTagName,
                               DocRelationshipName)
 from ietf.doc.models import Document
 from ietf.group.models import Group
 from ietf.utils.models import ForeignKey
+from ietf.utils.validators import validate_mailbox_address
 
 # maps (previous state id, new state id) to event type id
 STATE_EVENT_MAPPING = {
@@ -29,7 +30,12 @@
 class LiaisonStatement(models.Model):
     title = models.CharField(max_length=255)
     from_groups = models.ManyToManyField(Group, blank=True, related_name='liaisonstatement_from_set')
-    from_contact = ForeignKey(Email, blank=True, null=True)
+    from_contact = models.CharField(
+        blank=True,
+        max_length=512,
+        help_text="Address of the formal sender of the statement",
+        validators=(validate_mailbox_address,)
+    )
     to_groups = models.ManyToManyField(Group, blank=True, related_name='liaisonstatement_to_set')
     to_contacts = models.CharField(max_length=2000, help_text="Contacts at recipient group")
 
@@ -85,7 +91,7 @@ def name(self):
         if self.from_groups.count():
             frm = ', '.join([i.acronym or i.name for i in self.from_groups.all()])
         else:
-            frm = self.from_contact.person.name
+            frm = self.from_contact
         if self.to_groups.count():
             to = ', '.join([i.acronym or i.name for i in self.to_groups.all()])
         else:
diff --git a/ietf/liaisons/resources.py b/ietf/liaisons/resources.py
index 8f31ea3a64..02cd159a11 100644
--- a/ietf/liaisons/resources.py
+++ b/ietf/liaisons/resources.py
@@ -15,12 +15,10 @@
                                   RelatedLiaisonStatement)
 
 
-from ietf.person.resources import EmailResource
 from ietf.group.resources import GroupResource
 from ietf.name.resources import LiaisonStatementPurposeNameResource, LiaisonStatementTagNameResource, LiaisonStatementStateResource
 from ietf.doc.resources import DocumentResource
 class LiaisonStatementResource(ModelResource):
-    from_contact     = ToOneField(EmailResource, 'from_contact', null=True)
     purpose          = ToOneField(LiaisonStatementPurposeNameResource, 'purpose')
     state            = ToOneField(LiaisonStatementStateResource, 'state')
     from_groups      = ToManyField(GroupResource, 'from_groups', null=True)
@@ -36,6 +34,7 @@ class Meta:
         filtering = { 
             "id": ALL,
             "title": ALL,
+            "from_contact": ALL,
             "to_contacts": ALL,
             "response_contacts": ALL,
             "technical_contacts": ALL,
@@ -44,9 +43,6 @@ class Meta:
             "deadline": ALL,
             "other_identifiers": ALL,
             "body": ALL,
-            "from_name": ALL,
-            "to_name": ALL,
-            "from_contact": ALL_WITH_RELATIONS,
             "purpose": ALL_WITH_RELATIONS,
             "state": ALL_WITH_RELATIONS,
             "from_groups": ALL_WITH_RELATIONS,
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 1742687f14..1d6cfe0c14 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -462,11 +462,12 @@ def test_edit_liaison(self):
 
 
     def test_incoming_access(self):
-        '''Ensure only Secretariat, Liaison Managers, and Authorized Individuals
+        '''Ensure only Secretariat, Liaison Managers, Liaison Coordinators, and Authorized Individuals
         have access to incoming liaisons.
         '''
         sdo = RoleFactory(name_id='liaiman',group__type_id='sdo', person__user__username='ulm-liaiman').group
         RoleFactory(name_id='auth',group=sdo,person__user__username='ulm-auth')
+        RoleFactory(name_id='liaison_coordinator', group__acronym='iab', person__user__username='liaison-coordinator')
         stmt = LiaisonStatementFactory(from_groups=[sdo,])
         LiaisonStatementEventFactory(statement=stmt,type_id='posted')
         RoleFactory(name_id='chair',person__user__username='marschairman',group__acronym='mars')
@@ -499,6 +500,15 @@ def test_incoming_access(self):
         r = self.client.get(addurl)
         self.assertEqual(r.status_code, 200)
 
+        # Liaison Coordinator has access
+        self.client.login(username="liaison-coordinator", password="liaison-coordinator+password")
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q('a.btn:contains("New incoming liaison")')), 1)
+        r = self.client.get(addurl)
+        self.assertEqual(r.status_code, 200)
+
         # Authorized Individual has access
         self.client.login(username="ulm-auth", password="ulm-auth+password")
         r = self.client.get(url)
@@ -521,6 +531,7 @@ def test_outgoing_access(self):
 
         sdo = RoleFactory(name_id='liaiman',group__type_id='sdo', person__user__username='ulm-liaiman').group
         RoleFactory(name_id='auth',group=sdo,person__user__username='ulm-auth')
+        RoleFactory(name_id='liaison_coordinator', group__acronym='iab', person__user__username='liaison-coordinator')
         mars = RoleFactory(name_id='chair',person__user__username='marschairman',group__acronym='mars').group
         RoleFactory(name_id='secr',group=mars,person__user__username='mars-secr')
         RoleFactory(name_id='execdir',group=Group.objects.get(acronym='iab'),person__user__username='iab-execdir')
@@ -599,6 +610,15 @@ def test_outgoing_access(self):
         r = self.client.get(addurl)
         self.assertEqual(r.status_code, 200)
 
+        # Liaison Coordinator has access
+        self.assertTrue(self.client.login(username="liaison-coordinator", password="liaison-coordinator+password"))
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q('a.btn:contains("New outgoing liaison")')), 1)
+        r = self.client.get(addurl)
+        self.assertEqual(r.status_code, 200)
+
         # Authorized Individual has no access
         self.assertTrue(self.client.login(username="ulm-auth", password="ulm-auth+password"))
         r = self.client.get(url)
@@ -740,7 +760,7 @@ def test_add_incoming_liaison(self):
 
         l = LiaisonStatement.objects.all().order_by("-id")[0]
         self.assertEqual(l.from_groups.count(),2)
-        self.assertEqual(l.from_contact.address, submitter.email_address())
+        self.assertEqual(l.from_contact, submitter.email_address())
         self.assertSequenceEqual(l.to_groups.all(),[to_group])
         self.assertEqual(l.technical_contacts, "technical_contact@example.com")
         self.assertEqual(l.action_holder_contacts, "action_holder_contacts@example.com")
@@ -825,7 +845,7 @@ def test_add_outgoing_liaison(self):
 
         l = LiaisonStatement.objects.all().order_by("-id")[0]
         self.assertSequenceEqual(l.from_groups.all(), [from_group])
-        self.assertEqual(l.from_contact.address, submitter.email_address())
+        self.assertEqual(l.from_contact, submitter.email_address())
         self.assertSequenceEqual(l.to_groups.all(), [to_group])
         self.assertEqual(l.to_contacts, "to_contacts@example.com")
         self.assertEqual(l.technical_contacts, "technical_contact@example.com")
@@ -901,7 +921,7 @@ def test_liaison_add_attachment(self):
         file.name = "upload.txt"
         post_data = dict(
             from_groups = ','.join([ str(x.pk) for x in liaison.from_groups.all() ]),
-            from_contact = liaison.from_contact.address,
+            from_contact = liaison.from_contact,
             to_groups = ','.join([ str(x.pk) for x in liaison.to_groups.all() ]),
             to_contacts = 'to_contacts@example.com',
             purpose = liaison.purpose.slug,
diff --git a/ietf/liaisons/tests_forms.py b/ietf/liaisons/tests_forms.py
new file mode 100644
index 0000000000..c2afddea65
--- /dev/null
+++ b/ietf/liaisons/tests_forms.py
@@ -0,0 +1,229 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from ietf.group.factories import GroupFactory, RoleFactory
+from ietf.group.models import Group
+from ietf.liaisons.forms import (
+    flatten_choices,
+    choices_from_group_queryset,
+    all_internal_groups,
+    internal_groups_for_person,
+    external_groups_for_person,
+)
+from ietf.person.factories import PersonFactory
+from ietf.person.models import Person
+from ietf.utils.test_utils import TestCase
+
+
+class HelperTests(TestCase):
+    @staticmethod
+    def _alphabetically_by_acronym(group_list):
+        return sorted(group_list, key=lambda item: item.acronym)
+
+    def test_choices_from_group_queryset(self):
+        main_groups = list(Group.objects.filter(acronym__in=["ietf", "iab"]))
+        areas = GroupFactory.create_batch(2, type_id="area")
+        wgs = GroupFactory.create_batch(2)
+
+        # No groups
+        self.assertEqual(
+            choices_from_group_queryset(Group.objects.none()),
+            [],
+        )
+
+        # Main groups only
+        choices = choices_from_group_queryset(
+            Group.objects.filter(pk__in=[g.pk for g in main_groups])
+        )
+        self.assertEqual(len(choices), 1, "show one optgroup, hide empty ones")
+        self.assertEqual(choices[0][0], "Main IETF Entities")
+        self.assertEqual(
+            [val for val, _ in choices[0][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(main_groups)],
+        )
+
+        # Area groups only
+        choices = choices_from_group_queryset(
+            Group.objects.filter(pk__in=[g.pk for g in areas])
+        )
+        self.assertEqual(len(choices), 1, "show one optgroup, hide empty ones")
+        self.assertEqual(choices[0][0], "IETF Areas")
+        self.assertEqual(
+            [val for val, _ in choices[0][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(areas)],
+        )
+
+        # WGs only
+        choices = choices_from_group_queryset(
+            Group.objects.filter(pk__in=[g.pk for g in wgs])
+        )
+        self.assertEqual(len(choices), 1, "show one optgroup, hide empty ones")
+        self.assertEqual(choices[0][0], "IETF Working Groups")
+        self.assertEqual(
+            [val for val, _ in choices[0][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(wgs)],
+        )
+
+        # All together
+        choices = choices_from_group_queryset(
+            Group.objects.filter(pk__in=[g.pk for g in main_groups + areas + wgs])
+        )
+        self.assertEqual(len(choices), 3, "show all three optgroups")
+        self.assertEqual(
+            [optgroup_label for optgroup_label, _ in choices],
+            ["Main IETF Entities", "IETF Areas", "IETF Working Groups"],
+        )
+        self.assertEqual(
+            [val for val, _ in choices[0][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(main_groups)],
+        )
+        self.assertEqual(
+            [val for val, _ in choices[1][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(areas)],
+        )
+        self.assertEqual(
+            [val for val, _ in choices[2][1]],  # extract the choice value
+            [g.pk for g in self._alphabetically_by_acronym(wgs)],
+        )
+
+    def test_all_internal_groups(self):
+        # test relies on the data created in ietf.utils.test_data.make_immutable_test_data()
+        self.assertCountEqual(
+            all_internal_groups().values_list("acronym", flat=True),
+            {"ietf", "iab", "iesg", "farfut", "ops", "sops"},
+        )
+
+    def test_internal_groups_for_person(self):
+        # test relies on the data created in ietf.utils.test_data.make_immutable_test_data()
+        # todo add liaison coordinator when modeled
+        RoleFactory(
+            name_id="execdir",
+            group=Group.objects.get(acronym="iab"),
+            person__user__username="iab-execdir",
+        )
+        RoleFactory(
+            name_id="auth",
+            group__type_id="sdo",
+            group__acronym="sdo",
+            person__user__username="sdo-authperson",
+        )
+
+        self.assertQuerysetEqual(
+            internal_groups_for_person(None),
+            Group.objects.none(),
+            msg="no Person means no groups",
+        )
+        self.assertQuerysetEqual(
+            internal_groups_for_person(PersonFactory()),
+            Group.objects.none(),
+            msg="no Role means no groups",
+        )
+
+        for username in (
+            "secretary",
+            "ietf-chair",
+            "iab-chair",
+            "iab-execdir",
+            "sdo-authperson",
+        ):
+            returned_queryset = internal_groups_for_person(
+                Person.objects.get(user__username=username)
+            )
+            self.assertCountEqual(
+                returned_queryset.values_list("acronym", flat=True),
+                {"ietf", "iab", "iesg", "farfut", "ops", "sops"},
+                f"{username} should get all groups",
+            )
+
+        # "ops-ad" user is the AD of the "ops" area, which contains the "sops" wg
+        self.assertCountEqual(
+            internal_groups_for_person(
+                Person.objects.get(user__username="ops-ad")
+            ).values_list("acronym", flat=True),
+            {"ietf", "iesg", "ops", "sops"},
+            "area director should get only their area, its wgs, and the ietf/iesg groups",
+        )
+
+        self.assertCountEqual(
+            internal_groups_for_person(
+                Person.objects.get(user__username="sopschairman"),
+            ).values_list("acronym", flat=True),
+            {"sops"},
+            "wg chair should get only their wg",
+        )
+
+    def test_external_groups_for_person(self):
+        RoleFactory(
+            name_id="execdir",
+            group=Group.objects.get(acronym="iab"),
+            person__user__username="iab-execdir",
+        )
+        RoleFactory(name_id="liaison_coordinator", group__acronym="iab", person__user__username="liaison-coordinator")
+        the_sdo = GroupFactory(type_id="sdo", acronym="the-sdo")
+        liaison_manager = RoleFactory(name_id="liaiman", group=the_sdo).person
+        authperson = RoleFactory(name_id="auth", group=the_sdo).person
+
+        GroupFactory(acronym="other-sdo", type_id="sdo")
+        for username in (
+            "secretary",
+            "ietf-chair",
+            "iab-chair",
+            "iab-execdir",
+            "liaison-coordinator",
+            "ad",
+            "sopschairman",
+            "sopssecretary",
+        ):
+            person = Person.objects.get(user__username=username)
+            self.assertCountEqual(
+                external_groups_for_person(
+                    person,
+                ).values_list("acronym", flat=True),
+                {"the-sdo", "other-sdo"},
+                f"{username} should get all SDO groups",
+            )
+            tmp_role = RoleFactory(name_id="chair", group__type_id="wg", person=person)
+            self.assertCountEqual(
+                external_groups_for_person(
+                    person,
+                ).values_list("acronym", flat=True),
+                {"the-sdo", "other-sdo"},
+                f"{username} should still get all SDO groups when they also a liaison manager",
+            )
+            tmp_role.delete()
+
+        self.assertCountEqual(
+            external_groups_for_person(liaison_manager).values_list(
+                "acronym", flat=True
+            ),
+            {"the-sdo"},
+            "liaison manager should get only their SDO group",
+        )
+        self.assertCountEqual(
+            external_groups_for_person(authperson).values_list("acronym", flat=True),
+            {"the-sdo"},
+            "authorized individual should get only their SDO group",
+        )
+
+    def test_flatten_choices(self):
+        self.assertEqual(flatten_choices([]), [])
+        self.assertEqual(
+            flatten_choices(
+                (
+                    ("group A", ()),
+                    ("group B", (("val0", "label0"), ("val1", "label1"))),
+                    ("group C", (("val2", "label2"),)),
+                )
+            ),
+            [("val0", "label0"), ("val1", "label1"), ("val2", "label2")],
+        )
+
+
+class IncomingLiaisonFormTests(TestCase):
+    pass
+
+
+class OutgoingLiaisonFormTests(TestCase):
+    pass
+
+
+class EditLiaisonFormTests(TestCase):
+    pass
diff --git a/ietf/liaisons/utils.py b/ietf/liaisons/utils.py
index df48831917..ea06c5988e 100644
--- a/ietf/liaisons/utils.py
+++ b/ietf/liaisons/utils.py
@@ -4,6 +4,22 @@
 from ietf.liaisons.models import LiaisonStatement
 from ietf.ietfauth.utils import has_role, passes_test_decorator
 
+# Roles allowed to create and manage outgoing liaison statements.
+OUTGOING_LIAISON_ROLES = [
+    "Area Director",
+    "IAB Chair",
+    "IAB Executive Director",
+    "IETF Chair",
+    "Liaison Manager",
+    "Liaison Coordinator",
+    "Secretariat",
+    "WG Chair",
+    "WG Secretary",
+]
+
+# Roles allowed to create and manage incoming liaison statements.
+INCOMING_LIAISON_ROLES = ["Authorized Individual", "Liaison Manager", "Liaison Coordinator", "Secretariat"]
+
 can_submit_liaison_required = passes_test_decorator(
     lambda u, *args, **kwargs: can_add_liaison(u),
     "Restricted to participants who are authorized to submit liaison statements on behalf of the various IETF entities")
@@ -30,13 +46,13 @@ def can_edit_liaison(user, liaison):
     '''Returns True if user has edit / approval authority.
     
     True if:
-    - user is Secretariat
+    - user is Secretariat or Liaison Coordinator
     - liaison is outgoing and user has approval authority
     - user is liaison manager of all SDOs involved
     '''
     if not user.is_authenticated:
         return False
-    if has_role(user, "Secretariat"):
+    if has_role(user, "Secretariat") or has_role(user, "Liaison Coordinator"):
         return True
 
     if liaison.is_outgoing() and liaison in approvable_liaison_statements(user):
@@ -59,11 +75,10 @@ def get_person_for_user(user):
         return None
 
 def can_add_outgoing_liaison(user):
-    return has_role(user, ["Area Director","WG Chair","WG Secretary","IETF Chair","IAB Chair",
-        "IAB Executive Director","Liaison Manager","Secretariat"])
+    return has_role(user, OUTGOING_LIAISON_ROLES)
 
 def can_add_incoming_liaison(user):
-    return has_role(user, ["Liaison Manager","Authorized Individual","Secretariat"])
+    return has_role(user, INCOMING_LIAISON_ROLES)
 
 def can_add_liaison(user):
     return can_add_incoming_liaison(user) or can_add_outgoing_liaison(user)
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index a8e80a5194..1b7e8d63bb 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -57,7 +57,7 @@ def _can_take_care(liaison, user):
         return False
 
     if user.is_authenticated:
-        if has_role(user, "Secretariat"):
+        if has_role(user, "Secretariat") or has_role(user, "Liaison Coordinator"):
             return True
         else:
             return _find_person_in_emails(liaison, get_person_for_user(user))
@@ -196,7 +196,13 @@ def post_only(group,person):
     - Authorized Individuals have full access for the group they are associated with
     - Liaison Managers can post only
     '''
-    if group.type_id == 'sdo' and ( not(has_role(person.user,"Secretariat") or group.role_set.filter(name='auth',person=person)) ):
+    if group.type_id == "sdo" and (
+        not (
+            has_role(person.user, "Secretariat")
+            or has_role(person.user, "Liaison Coordinator")
+            or group.role_set.filter(name="auth", person=person)
+        )
+    ):
         return True
     else:
         return False
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 15ae71d849..ebdda1a1fa 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -3341,7 +3341,7 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"member\",\n    \"comdir\",\n    \"delegate\",\n    \"execdir\",\n    \"recman\",\n    \"secr\",\n    \"trac-editor\",\n    \"trac-admin\",\n    \"chair\"\n]",
+      "default_used_roles": "[\n    \"ad\",\n    \"member\",\n    \"comdir\",\n    \"delegate\",\n    \"execdir\",\n    \"recman\",\n    \"secr\",\n    \"chair\"\n]",
       "docman_roles": "[\n    \"chair\"\n]",
       "groupman_authroles": "[\n    \"Secretariat\"\n]",
       "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
@@ -5392,6 +5392,21 @@
     "model": "mailtrigger.mailtrigger",
     "pk": "review_completed_opsdir_telechat"
   },
+  {
+    "fields": {
+      "cc": [
+        "ietf_last_call",
+        "review_doc_all_parties",
+        "review_doc_group_mail_list"
+      ],
+      "desc": "Recipients when a perfmetrdir Telechat review is completed",
+      "to": [
+        "review_team_mail_list"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "review_completed_perfmetrdir_telechat"
+  },
   {
     "fields": {
       "cc": [
@@ -11330,6 +11345,17 @@
     "model": "name.extresourcename",
     "pk": "mailing_list_archive"
   },
+  {
+    "fields": {
+      "desc": "ORCID",
+      "name": "ORCID",
+      "order": 0,
+      "type": "url",
+      "used": true
+    },
+    "model": "name.extresourcename",
+    "pk": "orcid"
+  },
   {
     "fields": {
       "desc": "Related Implementations",
@@ -13562,7 +13588,7 @@
       "desc": "",
       "name": "Liaison CC Contact",
       "order": 9,
-      "used": true
+      "used": false
     },
     "model": "name.rolename",
     "pk": "liaison_cc_contact"
@@ -13572,11 +13598,21 @@
       "desc": "",
       "name": "Liaison Contact",
       "order": 8,
-      "used": true
+      "used": false
     },
     "model": "name.rolename",
     "pk": "liaison_contact"
   },
+  {
+    "fields": {
+      "desc": "Coordinates liaison handling for the IAB",
+      "name": "Liaison Coordinator",
+      "order": 14,
+      "used": true
+    },
+    "model": "name.rolename",
+    "pk": "liaison_coordinator"
+  },
   {
     "fields": {
       "desc": "",
@@ -13662,7 +13698,7 @@
       "desc": "Assigned permission TRAC_ADMIN in datatracker-managed Trac Wiki instances",
       "name": "Trac Admin",
       "order": 0,
-      "used": true
+      "used": false
     },
     "model": "name.rolename",
     "pk": "trac-admin"
@@ -13672,7 +13708,7 @@
       "desc": "Provides log-in permission to restricted Trac instances.  Used by the generate_apache_perms management command, called from ../../scripts/Cron-runner",
       "name": "Trac Editor",
       "order": 0,
-      "used": true
+      "used": false
     },
     "model": "name.rolename",
     "pk": "trac-editor"
diff --git a/ietf/name/migrations/0018_alter_rolenames.py b/ietf/name/migrations/0018_alter_rolenames.py
new file mode 100644
index 0000000000..f931de2e97
--- /dev/null
+++ b/ietf/name/migrations/0018_alter_rolenames.py
@@ -0,0 +1,36 @@
+# Copyright The IETF Trust 2025, All Rights Reserved# Generated by Django 4.2.21 on 2025-05-30 16:35
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    RoleName = apps.get_model("name", "RoleName")
+    RoleName.objects.filter(slug__in=["liaison_contact", "liaison_cc_contact"]).update(
+        used=False
+    )
+    RoleName.objects.get_or_create(
+        slug="liaison_coordinator",
+        defaults={
+            "name": "Liaison Coordinator",
+            "desc": "Coordinates liaison handling for the IAB",
+            "order": 14,
+        },
+    )
+    RoleName.objects.filter(slug__contains="trac-").update(used=False)
+
+
+def reverse(apps, schema_editor):
+    RoleName = apps.get_model("name", "RoleName")
+    RoleName.objects.filter(slug__in=["liaison_contact", "liaison_cc_contact"]).update(
+        used=True
+    )
+    RoleName.objects.filter(slug="liaison_coordinator").delete()
+    # Intentionally not restoring trac-* RoleNames to used=True
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("name", "0017_populate_new_reg_names"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/templates/liaisons/detail.html b/ietf/templates/liaisons/detail.html
index 4bf5b4d11b..d46c8d1c98 100644
--- a/ietf/templates/liaisons/detail.html
+++ b/ietf/templates/liaisons/detail.html
@@ -32,7 +32,7 @@ <h1>
         {% if liaison.from_contact %}
             <tr>
                 <th scope="row">From Contact</th>
-                <td>{% person_link liaison.from_contact.person %}</td>
+                <td>{{ liaison.from_contact }}</td>
             </tr>
         {% endif %}
         <tr>
diff --git a/ietf/templates/liaisons/liaison_mail.txt b/ietf/templates/liaisons/liaison_mail.txt
index c92c68ff76..6d6a07d7ef 100644
--- a/ietf/templates/liaisons/liaison_mail.txt
+++ b/ietf/templates/liaisons/liaison_mail.txt
@@ -2,7 +2,7 @@
 Submission Date: {{ liaison.submitted|date:"Y-m-d" }}
 URL of the IETF Web page: {{ liaison.get_absolute_url }}
 {% if liaison.deadline %}Please reply by {{ liaison.deadline }}{% endif %}
-From: {% if liaison.from_contact %}{{ liaison.from_contact.formatted_email }}{% endif %}
+From: {% if liaison.from_contact %}{{ liaison.from_contact }}{% endif %}
 To: {{ liaison.to_contacts }}
 Cc: {{ liaison.cc_contacts }}
 Response Contacts: {{ liaison.response_contacts }}
diff --git a/ietf/utils/validators.py b/ietf/utils/validators.py
index 8fe989df99..92a20f5a26 100644
--- a/ietf/utils/validators.py
+++ b/ietf/utils/validators.py
@@ -4,6 +4,8 @@
 
 import os
 import re
+from email.utils import parseaddr
+
 from pyquery import PyQuery
 from urllib.parse import urlparse, urlsplit, urlunsplit
 
@@ -11,7 +13,13 @@
 from django.apps import apps
 from django.conf import settings
 from django.core.exceptions import ObjectDoesNotExist, ValidationError
-from django.core.validators import RegexValidator, URLValidator, EmailValidator, BaseValidator
+from django.core.validators import (
+    RegexValidator,
+    URLValidator,
+    BaseValidator,
+    validate_email,
+    ProhibitNullCharactersValidator,
+)
 from django.template.defaultfilters import filesizeformat
 from django.utils.deconstruct import deconstructible
 from django.utils.ipv6 import is_valid_ipv6_address
@@ -136,8 +144,17 @@ def validate_no_html_frame(file):
 # instantiations of sub-validiators used by the external_resource validator
 
 validate_url = URLValidator()
-validate_http_url = URLValidator(schemes=['http','https'])
-validate_email = EmailValidator()
+validate_http_url = URLValidator(schemes=["http", "https"])
+validate_no_nulls = ProhibitNullCharactersValidator()
+
+
+def validate_mailbox_address(s):
+    """Validate an RFC 5322 'mailbox' (e.g., "Some Person" <some@example.com>)"""
+    # parseaddr() returns ("", "") on err; validate_email() will reject that for us
+    name, addr = parseaddr(s)
+    validate_no_nulls(name)  # could be stricter...
+    validate_email(addr)
+
 
 def validate_ipv6_address(value):
     if not is_valid_ipv6_address(value):

From e502fb4646bbfd39a1b391c65e7415723a63542e Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 26 Jun 2025 00:03:36 -0400
Subject: [PATCH 359/707] docs: Update README.md

---
 docker/README.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docker/README.md b/docker/README.md
index f2161a173f..b40bc6f925 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -157,12 +157,19 @@ On Windows:
 docker compose down -v --rmi all
 docker image prune
 ```
+
 ### Updating an older environment
 
 If you already have a clone, such as from a previous codesprint, and are updating that clone, before starting the datatracker from the updated image:
-* rm ietf/settings_local.py   # The startup script will put a new one, appropriate to the current release, in place
+* `rm ietf/settings_local.py`   # The startup script will put a new one, appropriate to the current release, in place
 * Execute the `Clean all` sequence above.
 
+If the dev environment fails to start, even after running the `Clean all` sequence above, you can fully purge all docker cache, containers, images and volumes by running:
+```sh
+docker system prune -a --volumes
+```
+Note that this will delete everything docker-related, including non-datatracker docker resources you might have.
+
 ### Accessing PostgreSQL Port
 
 The port is exposed but not automatically mapped to `5432` to avoid potential conflicts with the host. To get the mapped port, run the command *(from the project `/docker` directory)*:

From 1f540109b9b414b8f6b682faf917e69cdaf69711 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 26 Jun 2025 00:09:49 -0400
Subject: [PATCH 360/707] docs: Update README.md

---
 docker/README.md | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/docker/README.md b/docker/README.md
index b40bc6f925..e202ca5e20 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -164,11 +164,14 @@ If you already have a clone, such as from a previous codesprint, and are updatin
 * `rm ietf/settings_local.py`   # The startup script will put a new one, appropriate to the current release, in place
 * Execute the `Clean all` sequence above.
 
-If the dev environment fails to start, even after running the `Clean all` sequence above, you can fully purge all docker cache, containers, images and volumes by running:
+If the dev environment fails to start, even after running the `Clean all` sequence above, you can fully purge all docker cache, containers, images and volumes by running the command below.
+
+> [!CAUTION]
+> Note that this will delete everything docker-related, including non-datatracker docker resources you might have.
+
 ```sh
 docker system prune -a --volumes
 ```
-Note that this will delete everything docker-related, including non-datatracker docker resources you might have.
 
 ### Accessing PostgreSQL Port
 

From 75f6945fdb139c98305a0de3abaeb1b5e09ea2a4 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 26 Jun 2025 00:12:50 -0400
Subject: [PATCH 361/707] docs: Update README.md

---
 docker/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker/README.md b/docker/README.md
index e202ca5e20..9b94eab138 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -161,10 +161,10 @@ docker image prune
 ### Updating an older environment
 
 If you already have a clone, such as from a previous codesprint, and are updating that clone, before starting the datatracker from the updated image:
-* `rm ietf/settings_local.py`   # The startup script will put a new one, appropriate to the current release, in place
-* Execute the `Clean all` sequence above.
+1. `rm ietf/settings_local.py` *(The startup script will put a new one, appropriate to the current release, in place)*
+1. Execute the [Clean all](#clean-all) sequence above.
 
-If the dev environment fails to start, even after running the `Clean all` sequence above, you can fully purge all docker cache, containers, images and volumes by running the command below.
+If the dev environment fails to start, even after running the [Clean all](#clean-all) sequence above, you can fully purge all docker cache, containers, images and volumes by running the command below.
 
 > [!CAUTION]
 > Note that this will delete everything docker-related, including non-datatracker docker resources you might have.

From 3241d5798d7f1f2b13ce78fef28f9b9a7c3b9f8a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 26 Jun 2025 00:19:40 -0400
Subject: [PATCH 362/707] docs: Update README.md

---
 docker/README.md | 33 +++++++++++++++++++++++----------
 1 file changed, 23 insertions(+), 10 deletions(-)

diff --git a/docker/README.md b/docker/README.md
index 9b94eab138..0ca79a6e89 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -1,5 +1,18 @@
 # Datatracker Development in Docker
 
+- [Getting started](#getting-started)
+- [Using Visual Studio Code](#using-visual-studio-code)
+    - [Initial Setup](#initial-setup)
+    - [Subsequent Launch](#subsequent-launch)
+    - [Usage](#usage)
+- [Using Other Editors / Generic](#using-other-editors--generic)
+    - [Exit Environment](#exit-environment)
+    - [Accessing PostgreSQL Port](#accessing-postgresql-port)
+- [Clean and Rebuild DB from latest image](#clean-and-rebuild-db-from-latest-image)
+- [Clean all](#clean-all)
+- [Updating an older environment](#updating-an-older-environment)
+- [Notes / Troubleshooting](#notes--troubleshooting)
+
 ## Getting started
 
 1. [Set up Docker](https://docs.docker.com/get-started/) on your preferred platform. On Windows, it is highly recommended to use the [WSL 2 *(Windows Subsystem for Linux)*](https://docs.docker.com/desktop/windows/wsl/) backend.
@@ -123,7 +136,14 @@ docker compose down
 
 to terminate the containers.
 
-### Clean and Rebuild DB from latest image
+### Accessing PostgreSQL Port
+
+The port is exposed but not automatically mapped to `5432` to avoid potential conflicts with the host. To get the mapped port, run the command *(from the project `/docker` directory)*:
+```sh
+docker compose port db 5432
+```
+
+## Clean and Rebuild DB from latest image
 
 To delete the active DB container, its volume and get the latest image / DB dump, simply run the following command:
 
@@ -141,7 +161,7 @@ docker compose pull db
 docker compose build --no-cache db
 ```
 
-### Clean all
+## Clean all
 
 To delete all containers for this project, its associated images and purge any remaining dangling images, simply run the following command:
 
@@ -158,7 +178,7 @@ docker compose down -v --rmi all
 docker image prune
 ```
 
-### Updating an older environment
+## Updating an older environment
 
 If you already have a clone, such as from a previous codesprint, and are updating that clone, before starting the datatracker from the updated image:
 1. `rm ietf/settings_local.py` *(The startup script will put a new one, appropriate to the current release, in place)*
@@ -173,13 +193,6 @@ If the dev environment fails to start, even after running the [Clean all](#clean
 docker system prune -a --volumes
 ```
 
-### Accessing PostgreSQL Port
-
-The port is exposed but not automatically mapped to `5432` to avoid potential conflicts with the host. To get the mapped port, run the command *(from the project `/docker` directory)*:
-```sh
-docker compose port db 5432
-```
-
 ## Notes / Troubleshooting
 
 ### Slow zsh prompt inside Docker

From e285ad862f5e9766ba6e8125c8ecf28bf4b9c638 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@holloway.co.nz>
Date: Sat, 28 Jun 2025 05:10:09 +1200
Subject: [PATCH 363/707] fix: dropdown menu positioning (#9061)

fixes #9019
---
 ietf/static/css/ietf.scss |  2 +-
 ietf/static/js/ietf.js    | 43 ++++++++++++++++++++++++++++++++++-----
 2 files changed, 39 insertions(+), 6 deletions(-)

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index aee93dcfe1..014213c3e5 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -229,7 +229,7 @@ th,
 .group-menu .dropdown-menu {
     height: auto;
     width: auto;
-    max-height: 35em;
+    max-height: 95vh;
     overflow-x: hidden;
     overflow-y: auto;
 }
diff --git a/ietf/static/js/ietf.js b/ietf/static/js/ietf.js
index dde00c6d1e..09fa324e42 100644
--- a/ietf/static/js/ietf.js
+++ b/ietf/static/js/ietf.js
@@ -13,7 +13,7 @@ import "bootstrap/js/dist/scrollspy";
 import "bootstrap/js/dist/tab";
 // import "bootstrap/js/dist/toast";
 import "bootstrap/js/dist/tooltip";
-
+import { debounce } from 'lodash-es';
 import jquery from "jquery";
 
 window.$ = window.jQuery = jquery;
@@ -112,6 +112,34 @@ function overflowShadows(el) {
     }
 }
 
+function ensureDropdownOnscreen(elm) {
+    const handlePlacement = () => {
+        if(!(elm instanceof HTMLElement)) {
+            return
+        }
+        const rect = elm.getBoundingClientRect()
+        const BUFFER_PX = 5 // additional distance from bottom of viewport
+        const existingStyleTop = parseInt(elm.style.top, 10)
+        const offscreenBy = Math.round(window.innerHeight - (rect.top + rect.height) - BUFFER_PX)
+        if(existingStyleTop === offscreenBy) {
+            console.log(`Already set top to ${offscreenBy}. Ignoring`)
+            // already set, nothing to do
+            return
+        }
+        if(offscreenBy < 0) {
+            elm.style.top = `${offscreenBy}px`
+        } 
+    }
+
+    const debouncedHandler = debounce(handlePlacement, 100)
+        
+    const observer = new MutationObserver(debouncedHandler)
+
+    observer.observe(elm, {
+        attributes: true
+    })
+}
+
 $(document)
     .ready(function () {
         // load data for the menu
@@ -144,12 +172,17 @@ $(document)
                             g.acronym + " &mdash; " + g.name + "</a></li>");
                     }
                     menu.push("</ul>");
-                    for (i = 0; i < attachTo.length; i++) {
-                        attachTo.closest(".dropdown-menu");
-                    }
+
                     attachTo.append(menu.join(""));
 
-                    attachTo.find(".overflow-shadows").each(function(){ overflowShadows(this)})
+                    attachTo.find(".overflow-shadows").each(function(){
+                        // needs to be a function(){} so that we can access jQuery's `this`
+                        overflowShadows(this)
+                    })
+                    attachTo.find(".dropdown-menu").each(function(){
+                        // needs to be a function(){} so that we can access jQuery's `this`
+                        ensureDropdownOnscreen(this)
+                    })
                 }
             }
         });

From 2b2891f4c8e9916d83d6d74c1b749d66111d33cb Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 27 Jun 2025 14:12:18 -0300
Subject: [PATCH 364/707] chore(k8s): wait for blobdb migrations at startup
 (#9072)

* chore(k8s): wait for blobdb migrations at startup

* chore(k8s): ...and for celery containers, too
---
 dev/build/celery-start.sh      | 23 +++++++++++++++++++++--
 dev/build/datatracker-start.sh | 23 +++++++++++++++++++++--
 2 files changed, 42 insertions(+), 4 deletions(-)

diff --git a/dev/build/celery-start.sh b/dev/build/celery-start.sh
index f6284e84db..69dcd7bbda 100644
--- a/dev/build/celery-start.sh
+++ b/dev/build/celery-start.sh
@@ -5,10 +5,29 @@
 echo "Running Datatracker checks..."
 ./ietf/manage.py check
 
-if ! ietf/manage.py migrate --check ; then
+# Check whether the blobdb database exists - inspectdb will return a false
+# status if not.
+if ietf/manage.py inspectdb --database blobdb > /dev/null 2>&1; then
+    HAVE_BLOBDB="yes"
+fi
+
+migrations_applied_for () {
+    local DATABASE=${1:-default}
+    ietf/manage.py migrate --check --database "$DATABASE"
+}
+
+migrations_all_applied () {
+    if [[ "$HAVE_BLOBDB" == "yes" ]]; then
+        migrations_applied_for default && migrations_applied_for blobdb
+    else
+        migrations_applied_for default
+    fi
+}
+
+if ! migrations_all_applied; then
     echo "Unapplied migrations found, waiting to start..."
     sleep 5
-    while ! ietf/manage.py migrate --check ; do
+    while ! migrations_all_applied ; do 
         echo "... still waiting for migrations..."
         sleep 5
     done
diff --git a/dev/build/datatracker-start.sh b/dev/build/datatracker-start.sh
index 5eb99c4745..a676415a26 100644
--- a/dev/build/datatracker-start.sh
+++ b/dev/build/datatracker-start.sh
@@ -3,10 +3,29 @@
 echo "Running Datatracker checks..."
 ./ietf/manage.py check
 
-if ! ietf/manage.py migrate --check ; then
+# Check whether the blobdb database exists - inspectdb will return a false
+# status if not.
+if ietf/manage.py inspectdb --database blobdb > /dev/null 2>&1; then
+    HAVE_BLOBDB="yes"
+fi
+
+migrations_applied_for () {
+    local DATABASE=${1:-default}
+    ietf/manage.py migrate --check --database "$DATABASE"
+}
+
+migrations_all_applied () {
+    if [[ "$HAVE_BLOBDB" == "yes" ]]; then
+        migrations_applied_for default && migrations_applied_for blobdb
+    else
+        migrations_applied_for default
+    fi
+}
+
+if ! migrations_all_applied; then
     echo "Unapplied migrations found, waiting to start..."
     sleep 5
-    while ! ietf/manage.py migrate --check ; do 
+    while ! migrations_all_applied ; do 
         echo "... still waiting for migrations..."
         sleep 5
     done

From b81bf8eea84d37cb1ec2fe847950a861a1f4c310 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Mon, 30 Jun 2025 10:35:36 -0400
Subject: [PATCH 365/707] fix: handle agenda room slug with single quote +
 ampersand (#9074)

---
 client/shared/xslugify.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/shared/xslugify.js b/client/shared/xslugify.js
index e1f7a34483..e1ac556ddf 100644
--- a/client/shared/xslugify.js
+++ b/client/shared/xslugify.js
@@ -1,5 +1,5 @@
 import slugify from 'slugify'
 
 export default (str) => {
-  return slugify(str.replaceAll('/', '-'), { lower: true })
+  return slugify(str.replaceAll('/', '-').replaceAll(/['&]/g, ''), { lower: true })
 }

From 06a4182e0287769673106d5d0c415f0ec92cdb46 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 2 Jul 2025 17:55:33 -0300
Subject: [PATCH 366/707] test: tolerate APP_API_TOKENS existing in settings
 (#9089)

---
 ietf/api/tests.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 29edd99b2b..abaf9f5ed2 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -1582,7 +1582,7 @@ def test_bad_post(self):
             data = self.response_data(r)
             self.assertEqual(data["result"], "failure")
             self.assertEqual(data["reason"], "invalid post")
-        
+
         bad = dict(authtoken=self.valid_token, username=self.valid_person.user.username, password=self.valid_password)
         r = self.client.post(self.url, bad)
         self.assertEqual(r.status_code, 200)
@@ -1590,8 +1590,9 @@ def test_bad_post(self):
         self.assertEqual(data["result"], "failure")
         self.assertEqual(data["reason"], "invalid post")       
 
+    @override_settings()
     def test_notokenstore(self):
-        self.assertFalse(hasattr(settings, "APP_API_TOKENS"))
+        del settings.APP_API_TOKENS  # only affects overridden copy of settings!
         r = self.client.post(self.url,self.valid_body_with_good_password)
         self.assertEqual(r.status_code, 200)
         data = self.response_data(r)

From 4c2877f5a34d8a5e8b1618a3bb7387ed7070b281 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 3 Jul 2025 20:19:42 -0400
Subject: [PATCH 367/707] chore: Update devcontainer.json to disable vue.volar
 extension

---
 .devcontainer/devcontainer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index ac7854f265..9be6c09f20 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -23,7 +23,7 @@
                 "dbaeumer.vscode-eslint",
                 "eamodio.gitlens",
                 "editorconfig.editorconfig",
-                "vue.volar",
+                // "vue.volar", # causes crash in devcontainer...
                 "mrmlnc.vscode-duplicate",
                 "ms-azuretools.vscode-docker",
                 "ms-playwright.playwright",

From 2bf633bf70c40b9cb6baf428901615a0403e1ea5 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 3 Jul 2025 20:27:02 -0400
Subject: [PATCH 368/707] chore: Update devcontainer.json to pin vue.volar to
 older version

---
 .devcontainer/devcontainer.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 9be6c09f20..6b0fd79bb3 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -23,7 +23,8 @@
                 "dbaeumer.vscode-eslint",
                 "eamodio.gitlens",
                 "editorconfig.editorconfig",
-                // "vue.volar", # causes crash in devcontainer...
+                // Newer volar >=3.0.0 causes crashes in devcontainers
+                "vue.volar@2.2.10",
                 "mrmlnc.vscode-duplicate",
                 "ms-azuretools.vscode-docker",
                 "ms-playwright.playwright",

From 99775c4df25e68e2e4194d033107a7406353409a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 9 Jul 2025 19:03:30 -0300
Subject: [PATCH 369/707] fix: correct iCalendar text escaping (#9118)

Old implementation did not handle newlines and allowed many invalid chars to go through.
---
 ietf/doc/templatetags/ietf_filters.py | 54 ++++++++++++++++++++++++---
 1 file changed, 48 insertions(+), 6 deletions(-)

diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index d4adf96a27..5cabe1728d 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -285,7 +285,7 @@ def urlize_related_source_list(related, document_html=False):
                                                                       url=url)
         ))
     return links
-        
+
 @register.filter(name='urlize_related_target_list', is_safe=True, document_html=False)
 def urlize_related_target_list(related, document_html=False):
     """Convert a list of RelatedDocuments into list of links using the target document's canonical name"""
@@ -302,7 +302,7 @@ def urlize_related_target_list(related, document_html=False):
                                                                       url=url)
         ))
     return links
-        
+
 @register.filter(name='dashify')
 def dashify(string):
     """
@@ -521,10 +521,52 @@ def plural(text, seq, arg='s'):
     else:
         return text + pluralize(len(seq), arg)
 
+
+# Translation table to escape ICS characters. The {} | {} construction builds up a dict
+# mapping characters to arbitrary-length strings or None. Values in later dicts override
+# earlier ones prior to conversion to a translation table, so excluding a char and then
+# mapping it to an escape sequence results in its being escaped, not dropped.
+rfc5545_text_escapes = str.maketrans(
+    # text       = *(TSAFE-CHAR / ":" / DQUOTE / ESCAPED-CHAR)
+    # TSAFE-CHAR = WSP / %x21 / %x23-2B / %x2D-39 / %x3C-5B /
+    #                    %x5D-7E / NON-US-ASCII
+    {chr(c): None for c in range(0x00, 0x20)}  # strip 0x00-0x20
+    | {
+        # ESCAPED-CHAR = ("\\" / "\;" / "\," / "\N" / "\n")
+        "\n": r"\n",
+        ";": r"\;",
+        ",": r"\,",
+        "\\": r"\\",  # rhs is two backslashes!
+        "\t": "\t",  # htab ok (0x09)
+        " ": " ",  # space ok (0x20)
+    }
+)
+
+
 @register.filter
 def ics_esc(text):
-    text = re.sub(r"([\n,;\\])", r"\\\1", text)
-    return text
+    """Escape a string to use in an iCalendar text context
+    
+    >>> ics_esc('simple')
+    'simple'
+    
+    For the next tests, it helps to know:
+      chr(0x09) = "\t"
+      chr(0x0a) = "\n"
+      chr(0x0d) = "\r"
+      chr(0x5c) = "\\"
+    
+    >>> ics_esc(f'strips{chr(0x0d)}out{chr(0x0d)}LFs')
+    'stripsoutLFs'
+    
+    
+    >>> ics_esc(f'escapes;and,and{chr(0x5c)}and{chr(0x0a)}')
+    'escapes\\\\;and\\\\,and\\\\\\\\and\\\\n'
+    
+    >>> ics_esc(f"keeps spaces : and{chr(0x09)}tabs")
+    'keeps spaces : and\\ttabs'
+    """
+    return text.translate(rfc5545_text_escapes)
 
 
 @register.simple_tag
@@ -557,7 +599,7 @@ def ics_date_time(dt, tzname):
         return f':{timestamp}Z'
     else:
         return f';TZID={ics_esc(tzname)}:{timestamp}'
-    
+
 @register.filter
 def next_day(value):
     return value + datetime.timedelta(days=1)
@@ -676,7 +718,7 @@ def rfcbis(s):
 @stringfilter
 def urlize(value):
     raise RuntimeError("Use linkify from textfilters instead of urlize")
-    
+
 @register.filter
 @stringfilter
 def charter_major_rev(rev):

From 58bc7c9c385f88b665796ab358210282d8313aaa Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 10 Jul 2025 11:43:18 -0300
Subject: [PATCH 370/707] fix: improve pw validation without js (#9113)

* fix: backend validators for PasswordForm

Only used for password reset

* refactor: share more code

* fix: reconcile with PersonPasswordForm

This form class hierarchy reallllly needs to be refactored more deeply

* fix: attach pw errors to specific fields

* fix: return val from clean_password_confirmation

* refactor: share PasswordForm code

* test: update test_change_password

* test: update test_create_existing_account

* test: update test_reset_password
---
 ietf/ietfauth/forms.py | 86 ++++++++++++++++++++++--------------------
 ietf/ietfauth/tests.py | 67 ++++++++++++++++++++++++--------
 ietf/ietfauth/views.py |  6 +--
 3 files changed, 99 insertions(+), 60 deletions(-)

diff --git a/ietf/ietfauth/forms.py b/ietf/ietfauth/forms.py
index 53bf7b5888..41828f2bf6 100644
--- a/ietf/ietfauth/forms.py
+++ b/ietf/ietfauth/forms.py
@@ -33,21 +33,56 @@ def clean_email(self):
         return email
 
 
+class PasswordStrengthField(forms.CharField):
+    widget = PasswordStrengthInput(
+        attrs={
+            "class": "password_strength",
+            "data-disable-strength-enforcement": "",  # usually removed in init
+        }
+    )
+
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        for pwval in password_validation.get_default_password_validators():
+            if isinstance(pwval, password_validation.MinimumLengthValidator):
+                self.widget.attrs["minlength"] = pwval.min_length
+            elif isinstance(pwval, StrongPasswordValidator):
+                self.widget.attrs.pop(
+                    "data-disable-strength-enforcement", None
+                )
+
+    
+
 class PasswordForm(forms.Form):
-    password = forms.CharField(widget=PasswordStrengthInput(attrs={'class':'password_strength'}))
+    password = PasswordStrengthField()
     password_confirmation = forms.CharField(widget=PasswordConfirmationInput(
                                                         confirm_with='password',
                                                         attrs={'class':'password_confirmation'}),
                                             help_text="Enter the same password as above, for verification.",)
-                                            
+
+    def __init__(self, *args, user=None, **kwargs):
+        # user is a kw-only argument to avoid interfering with the signature
+        # when this class is mixed with ModelForm in PersonPasswordForm
+        self.user = user
+        super().__init__(*args, **kwargs)
 
     def clean_password_confirmation(self):
-        password = self.cleaned_data.get("password", "")
-        password_confirmation = self.cleaned_data["password_confirmation"]
+        # clean fields here rather than a clean() method so validation is
+        # still enforced in PersonPasswordForm without having to override its
+        # clean() method
+        password = self.cleaned_data.get("password")
+        password_confirmation = self.cleaned_data.get("password_confirmation")
         if password != password_confirmation:
-            raise forms.ValidationError("The two password fields didn't match.")
+            raise ValidationError(
+                "The password confirmation is different than the new password" 
+            )
+        try:
+            password_validation.validate_password(password_confirmation, self.user)
+        except ValidationError as err:
+            self.add_error("password", err)
         return password_confirmation
 
+
 def ascii_cleaner(supposedly_ascii):
     outside_printable_ascii_pattern = r'[^\x20-\x7F]'
     if re.search(outside_printable_ascii_pattern, supposedly_ascii):
@@ -174,35 +209,13 @@ class Meta:
         exclude = ['by', 'time' ]
 
 
-class ChangePasswordForm(forms.Form):
+class ChangePasswordForm(PasswordForm):
     current_password = forms.CharField(widget=forms.PasswordInput)
+    field_order = ["current_password", "password", "password_confirmation"]
 
-    new_password = forms.CharField(
-        widget=PasswordStrengthInput(
-            attrs={
-                "class": "password_strength",
-                "data-disable-strength-enforcement": "",  # usually removed in init
-            }
-        ),
-    )
-    new_password_confirmation = forms.CharField(
-        widget=PasswordConfirmationInput(
-            confirm_with="new_password", attrs={"class": "password_confirmation"}
-        )
-    )
-
-    def __init__(self, user, data=None):
-        self.user = user
-        super().__init__(data)
-        # Check whether we have validators to enforce
-        new_password_field = self.fields["new_password"]
-        for pwval in password_validation.get_default_password_validators():
-            if isinstance(pwval, password_validation.MinimumLengthValidator):
-                new_password_field.widget.attrs["minlength"] = pwval.min_length
-            elif isinstance(pwval, StrongPasswordValidator):
-                new_password_field.widget.attrs.pop(
-                    "data-disable-strength-enforcement", None
-                )
+    def __init__(self, user, *args, **kwargs):
+        # user arg is optional in superclass, but required for this form
+        super().__init__(*args, user=user, **kwargs)
 
     def clean_current_password(self):
         # n.b., password = None is handled by check_password and results in a failed check
@@ -211,15 +224,6 @@ def clean_current_password(self):
             raise ValidationError("Invalid password")
         return password
 
-    def clean(self):
-        new_password = self.cleaned_data.get("new_password", "")
-        conf_password = self.cleaned_data.get("new_password_confirmation", "")
-        if new_password != conf_password:
-            raise ValidationError(
-                "The password confirmation is different than the new password"
-            )
-        password_validation.validate_password(conf_password, self.user)
-
 
 class ChangeUsernameForm(forms.Form):
     username = forms.ChoiceField(choices=[('-','--------')])
diff --git a/ietf/ietfauth/tests.py b/ietf/ietfauth/tests.py
index dd23277b63..a77e5bd5d5 100644
--- a/ietf/ietfauth/tests.py
+++ b/ietf/ietfauth/tests.py
@@ -168,18 +168,40 @@ def register_and_verify(self, email):
         self.assertEqual(r.status_code, 200)
 
         # password mismatch
-        r = self.client.post(confirm_url, { 'password': 'secret', 'password_confirmation': 'nosecret' })
+        r = self.client.post(
+            confirm_url, {
+                "password": "secret-and-secure",
+                "password_confirmation": "not-secret-or-secure",
+            }
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(User.objects.filter(username=email).count(), 0)
+
+        # weak password
+        r = self.client.post(
+            confirm_url, {
+                "password": "password1234",
+                "password_confirmation": "password1234",
+            }
+        )
         self.assertEqual(r.status_code, 200)
         self.assertEqual(User.objects.filter(username=email).count(), 0)
 
         # confirm
-        r = self.client.post(confirm_url, { 'name': 'User Name', 'ascii': 'User Name', 'password': 'secret', 'password_confirmation': 'secret' })
+        r = self.client.post(
+            confirm_url,
+            {
+                "name": "User Name",
+                "ascii": "User Name",
+                "password": "secret-and-secure",
+                "password_confirmation": "secret-and-secure",
+            },
+        )
         self.assertEqual(r.status_code, 200)
         self.assertEqual(User.objects.filter(username=email).count(), 1)
         self.assertEqual(Person.objects.filter(user__username=email).count(), 1)
         self.assertEqual(Email.objects.filter(person__user__username=email).count(), 1)
 
-        
     # This also tests new account creation.
     def test_create_existing_account(self):
         # create account once
@@ -393,6 +415,7 @@ def test_nomcom_dressing_on_profile(self):
         self.assertTrue(q('#volunteered'))
 
     def test_reset_password(self):
+        WEAK_PASSWORD="password1234"
         VALID_PASSWORD = "complex-and-long-valid-password"
         ANOTHER_VALID_PASSWORD = "very-complicated-and-lengthy-password"
         url = urlreverse("ietf.ietfauth.views.password_reset")
@@ -450,6 +473,18 @@ def test_reset_password(self):
         q = PyQuery(r.content)
         self.assertTrue(len(q("form .is-invalid")) > 0)
 
+        # weak password
+        r = self.client.post(
+            confirm_url,
+            {
+                "password": WEAK_PASSWORD,
+                "password_confirmation": WEAK_PASSWORD,
+            },
+        )
+        self.assertEqual(r.status_code, 200)
+        q = PyQuery(r.content)
+        self.assertTrue(len(q("form .is-invalid")) > 0)
+
         # confirm
         r = self.client.post(
             confirm_url,
@@ -636,8 +671,8 @@ def test_change_password(self):
             chpw_url,
             {
                 "current_password": "fiddlesticks",
-                "new_password": ANOTHER_VALID_PASSWORD,
-                "new_password_confirmation": ANOTHER_VALID_PASSWORD,
+                "password": ANOTHER_VALID_PASSWORD,
+                "password_confirmation": ANOTHER_VALID_PASSWORD,
             },
         )
         self.assertEqual(r.status_code, 200)
@@ -648,14 +683,14 @@ def test_change_password(self):
             chpw_url,
             {
                 "current_password": VALID_PASSWORD,
-                "new_password": ANOTHER_VALID_PASSWORD,
-                "new_password_confirmation": ANOTHER_VALID_PASSWORD[::-1],
+                "password": ANOTHER_VALID_PASSWORD,
+                "password_confirmation": ANOTHER_VALID_PASSWORD[::-1],
             },
         )
         self.assertEqual(r.status_code, 200)
         self.assertFormError(
             r.context["form"],
-            None,
+            "password_confirmation",
             "The password confirmation is different than the new password",
         )
 
@@ -664,14 +699,14 @@ def test_change_password(self):
             chpw_url,
             {
                 "current_password": VALID_PASSWORD,
-                "new_password": "sh0rtpw0rd",
-                "new_password_confirmation": "sh0rtpw0rd",
+                "password": "sh0rtpw0rd",
+                "password_confirmation": "sh0rtpw0rd",
             }
         )
         self.assertEqual(r.status_code, 200)
         self.assertFormError(
             r.context["form"],
-            None,
+            "password",
             "This password is too short. It must contain at least "
             f"{settings.PASSWORD_POLICY_MIN_LENGTH} characters."
         )
@@ -681,14 +716,14 @@ def test_change_password(self):
             chpw_url,
             {
                 "current_password": VALID_PASSWORD,
-                "new_password": "passwordpassword",
-                "new_password_confirmation": "passwordpassword",
+                "password": "passwordpassword",
+                "password_confirmation": "passwordpassword",
             }
         )
         self.assertEqual(r.status_code, 200)
         self.assertFormError(
             r.context["form"],
-            None,
+            "password",
             "This password does not meet complexity requirements "
             "and is easily guessable."
         )
@@ -698,8 +733,8 @@ def test_change_password(self):
             chpw_url,
             {
                 "current_password": VALID_PASSWORD,
-                "new_password": ANOTHER_VALID_PASSWORD,
-                "new_password_confirmation": ANOTHER_VALID_PASSWORD,
+                "password": ANOTHER_VALID_PASSWORD,
+                "password_confirmation": ANOTHER_VALID_PASSWORD,
             },
         )
         self.assertRedirects(r, prof_url)
diff --git a/ietf/ietfauth/views.py b/ietf/ietfauth/views.py
index 84d5490873..4219747e12 100644
--- a/ietf/ietfauth/views.py
+++ b/ietf/ietfauth/views.py
@@ -529,7 +529,7 @@ def confirm_password_reset(request, auth):
         )
     success = False
     if request.method == 'POST':
-        form = PasswordForm(request.POST)
+        form = PasswordForm(user=user, data=request.POST)
         if form.is_valid():
             password = form.cleaned_data["password"]
 
@@ -538,7 +538,7 @@ def confirm_password_reset(request, auth):
 
             success = True
     else:
-        form = PasswordForm()
+        form = PasswordForm(user=user)
 
     hlibname, hashername = settings.PASSWORD_HASHERS[0].rsplit('.',1)
     hlib = importlib.import_module(hlibname)
@@ -669,7 +669,7 @@ def change_password(request):
     if request.method == 'POST':
         form = ChangePasswordForm(user, request.POST)
         if form.is_valid():
-            new_password = form.cleaned_data["new_password"]
+            new_password = form.cleaned_data["password"]
             
             user.set_password(new_password)
             user.save()

From 98f19cd317f2b05f988e74faeb3501ac766a4d25 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@holloway.co.nz>
Date: Fri, 11 Jul 2025 02:43:45 +1200
Subject: [PATCH 371/707] fix: agenda 'show meeting materials' button theme
 (#9119)

---
 client/agenda/AgendaScheduleList.vue | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index d38c7842eb..fc8b5fd30f 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -302,7 +302,7 @@ const meetingEvents = computed(() => {
           icon: 'collection',
           href: undefined,
           click: () => showMaterials(item.id),
-          color: 'black'
+          color: 'darkgray'
         })
         links.push({
           id: `lnk-${item.id}-tar`,
@@ -1155,7 +1155,7 @@ onBeforeUnmount(() => {
       .agenda-table-cell-links-buttons {
         white-space: nowrap;
 
-        > a, > i {
+        > a, > i, > button {
           margin-left: 3px;
           color: #666;
           cursor: pointer;
@@ -1197,6 +1197,18 @@ onBeforeUnmount(() => {
               background-color: rgba($orange-500, .3);
             }
           }
+          &.text-darkgray {
+            color: $gray-900;
+            background-color: rgba($gray-700, .1);
+
+            @at-root .theme-dark & {
+              color: $gray-100;
+            }
+
+            &:hover, &:focus {
+              background-color: rgba($gray-700, .3);
+            }
+          }
           &.text-blue {
             color: $blue-600;
             background-color: rgba($blue-300, .1);

From 6bb20be44cd64ff064c2eb4ea23905bb71a65374 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 10 Jul 2025 12:12:35 -0300
Subject: [PATCH 372/707] fix: next -> continue (#9121)

---
 ietf/sync/rfceditor.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index a3c6580452..76357ffbcc 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -676,11 +676,11 @@ def parse_relation_list(l):
                 subseries_slug = a[:3]
                 if subseries_slug not in ["bcp", "std", "fyi"]:
                     log(f"Unexpected 'also' relationship of {a} encountered for {doc}")
-                    next
+                    continue
                 maybe_number = a[3:].strip()
                 if not maybe_number.isdigit():
                     log(f"Unexpected 'also' subseries element identifier {a} encountered for {doc}")
-                    next
+                    continue
                 else:
                     subseries_number = int(maybe_number)
                     conditioned_also.append(f"{subseries_slug}{subseries_number}") # Note the lack of leading zeros

From 1eff7d17a9283d6f24977de130f194fc8121792d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 19 Jul 2025 04:55:54 -0400
Subject: [PATCH 373/707] chore(deps): bump ncipollo/release-action from 1.16.0
 to 1.18.0 (#9083)

Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.16.0 to 1.18.0.
- [Release notes](https://github.com/ncipollo/release-action/releases)
- [Commits](https://github.com/ncipollo/release-action/compare/v1.16.0...v1.18.0)

---
updated-dependencies:
- dependency-name: ncipollo/release-action
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bc9680cd9d..9c24380764 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -98,7 +98,7 @@ jobs:
         echo "IS_RELEASE=true" >> $GITHUB_ENV
         
     - name: Create Draft Release
-      uses: ncipollo/release-action@v1.16.0
+      uses: ncipollo/release-action@v1.18.0
       if: ${{ github.ref_name == 'release' }}
       with:
         prerelease: true
@@ -317,7 +317,7 @@ jobs:
         histCoveragePath: historical-coverage.json
         
     - name: Create Release
-      uses: ncipollo/release-action@v1.16.0
+      uses: ncipollo/release-action@v1.18.0
       if: ${{ env.SHOULD_DEPLOY == 'true' }}
       with:
         allowUpdates: true
@@ -330,7 +330,7 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Update Baseline Coverage
-      uses: ncipollo/release-action@v1.16.0
+      uses: ncipollo/release-action@v1.18.0
       if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
       with:
         allowUpdates: true

From 0909583925189812ea63fbf0b5a5d540f002cc5e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Sat, 19 Jul 2025 11:12:25 +0200
Subject: [PATCH 374/707] Merge pull request #8966 from
 jennifer-richards/remove-celery-image

chore(dev): remove the datatracker-celery image
---
 .github/workflows/build-celery-worker.yml     | 47 -------------------
 dev/celery/Dockerfile                         | 23 ---------
 dev/deploy-to-container/cli.js                | 13 ++---
 docker/celery.Dockerfile                      |  4 +-
 docker/docker-compose.celery.yml              | 47 -------------------
 .../scripts/app-init-celery.sh                | 11 +++--
 6 files changed, 12 insertions(+), 133 deletions(-)
 delete mode 100644 .github/workflows/build-celery-worker.yml
 delete mode 100644 dev/celery/Dockerfile
 delete mode 100644 docker/docker-compose.celery.yml
 rename dev/celery/docker-init.sh => docker/scripts/app-init-celery.sh (90%)

diff --git a/.github/workflows/build-celery-worker.yml b/.github/workflows/build-celery-worker.yml
deleted file mode 100644
index d14e4f2c8b..0000000000
--- a/.github/workflows/build-celery-worker.yml
+++ /dev/null
@@ -1,47 +0,0 @@
-name: Build Celery Worker Docker Image
-
-on:
-  push:
-    branches:
-      - 'main'
-    paths:
-      - 'requirements.txt'
-      - 'dev/celery/**'
-      - '.github/workflows/build-celery-worker.yml'
-
-  workflow_dispatch: 
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-
-    steps:
-    - uses: actions/checkout@v4
-
-    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
-    
-    - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
-
-    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
-      with:
-        registry: ghcr.io
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Docker Build & Push
-      uses: docker/build-push-action@v6
-      env:
-        DOCKER_BUILD_NO_SUMMARY: true
-      with:
-        context: .
-        file: dev/celery/Dockerfile
-        platforms: linux/amd64,linux/arm64
-        push: true
-        tags: ghcr.io/ietf-tools/datatracker-celery:latest
-
diff --git a/dev/celery/Dockerfile b/dev/celery/Dockerfile
deleted file mode 100644
index 12eb15eb81..0000000000
--- a/dev/celery/Dockerfile
+++ /dev/null
@@ -1,23 +0,0 @@
-# Dockerfile for celery worker
-#
-FROM ghcr.io/ietf-tools/datatracker-app-base:latest
-LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
-
-ENV DEBIAN_FRONTEND=noninteractive
-
-RUN apt-get purge -y imagemagick imagemagick-6-common
-
-# Copy the startup file
-COPY dev/celery/docker-init.sh /docker-init.sh
-RUN sed -i 's/\r$//' /docker-init.sh && \
-    chmod +x /docker-init.sh
-
-# Install current datatracker python dependencies
-COPY requirements.txt /tmp/pip-tmp/
-RUN pip3 --disable-pip-version-check --no-cache-dir install -r /tmp/pip-tmp/requirements.txt
-RUN rm -rf /tmp/pip-tmp
-
-# Add watchmedo utility for dev containers
-RUN pip3 --disable-pip-version-check --no-cache-dir install watchdog[watchmedo]
-
-ENTRYPOINT [ "/docker-init.sh" ]
diff --git a/dev/deploy-to-container/cli.js b/dev/deploy-to-container/cli.js
index 4aee7ba1ed..1a2d993ac4 100644
--- a/dev/deploy-to-container/cli.js
+++ b/dev/deploy-to-container/cli.js
@@ -70,6 +70,7 @@ async function main () {
       .replace('__HOSTNAME__', hostname)
   )
   await fs.copy(path.join(basePath, 'docker/scripts/app-create-dirs.sh'), path.join(releasePath, 'app-create-dirs.sh'))
+  await fs.copy(path.join(basePath, 'docker/scripts/app-init-celery.sh'), path.join(releasePath, 'app-init-celery.sh'))
   await fs.copy(path.join(basePath, 'dev/deploy-to-container/start.sh'), path.join(releasePath, 'start.sh'))
   await fs.copy(path.join(basePath, 'test/data'), path.join(releasePath, 'test/data'))
   console.info('Updated configuration files.')
@@ -98,14 +99,6 @@ async function main () {
   })
   console.info('Pulled latest MQ docker image.')
 
-  // Pull latest Celery image
-  console.info('Pulling latest Celery docker image...')
-  const celeryImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-celery:latest')
-  await new Promise((resolve, reject) => {
-    dock.modem.followProgress(celeryImagePullStream, (err, res) => err ? reject(err) : resolve(res))
-  })
-  console.info('Pulled latest Celery docker image.')
-
   // Terminate existing containers
   console.info('Ensuring existing containers with same name are terminated...')
   const containers = await dock.listContainers({ all: true })
@@ -221,7 +214,7 @@ async function main () {
   const celeryContainers = {}
   for (const conConf of conConfs) {
     celeryContainers[conConf.name] = await dock.createContainer({
-      Image: 'ghcr.io/ietf-tools/datatracker-celery:latest',
+      Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
       name: `dt-${conConf.name}-${branch}`,
       Hostname: `dt-${conConf.name}-${branch}`,
       Env: [
@@ -243,7 +236,7 @@ async function main () {
           Name: 'unless-stopped'
         }
       },
-      Cmd: ['--loglevel=INFO']
+      Entrypoint: ['bash', '-c', 'chmod +x ./app-init-celery.sh && ./app-init-celery.sh']
     })
   }
   console.info('Created Celery docker containers successfully.')
diff --git a/docker/celery.Dockerfile b/docker/celery.Dockerfile
index e44200398c..e7c7b9cc3f 100644
--- a/docker/celery.Dockerfile
+++ b/docker/celery.Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-celery:latest
+FROM ghcr.io/ietf-tools/datatracker-app-base:latest
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -34,7 +34,7 @@ RUN bash /tmp/library-scripts/docker-setup-python.sh "none" "/usr/local" "${PIPX
 RUN rm -rf /tmp/library-scripts
 
 # Copy the startup file
-COPY dev/celery/docker-init.sh /docker-init.sh
+COPY docker/scripts/app-init-celery.sh /docker-init.sh
 RUN sed -i 's/\r$//' /docker-init.sh && \
     chmod +x /docker-init.sh
 
diff --git a/docker/docker-compose.celery.yml b/docker/docker-compose.celery.yml
deleted file mode 100644
index b6cc3d09e8..0000000000
--- a/docker/docker-compose.celery.yml
+++ /dev/null
@@ -1,47 +0,0 @@
-services:
-  mq:
-    image: rabbitmq:3-alpine
-    user: '${RABBITMQ_UID:-499:499}'
-    hostname: datatracker-mq
-#    deploy:
-#      resources:
-#        limits:
-#          memory: 1gb # coordinate with settings in rabbitmq.conf
-#        reservations:
-#          memory: 512mb
-    mem_limit: 1gb  # coordinate with settings in rabbitmq.conf
-    ports:
-      - '${MQ_PORT:-5672}:5672'
-    volumes:
-      - ./lib.rabbitmq:/var/lib/rabbitmq
-      - ./rabbitmq.conf:/etc/rabbitmq/conf.d/90-ietf.conf
-      - ./definitions.json:/ietf-conf/definitions.json
-    restart: unless-stopped
-    logging:
-      driver: "syslog"
-      options:
-        syslog-address: 'unixgram:///dev/log'
-        tag: 'docker/{{.Name}}'
-#        syslog-address: "tcp://ietfa.amsl.com:514"
-
-  celery:
-    image: ghcr.io/ietf-tools/datatracker-celery:latest
-    environment:
-      CELERY_APP: ietf
-      # UPDATE_REQUIREMENTS: 1  # uncomment to update Python requirements on startup
-    command:
-      - '--loglevel=INFO'
-    user: '${CELERY_UID:-499:499}'
-    volumes:
-      - '${DATATRACKER_PATH:-..}:/workspace'
-      - '${MYSQL_SOCKET_PATH:-/run/mysql}:/run/mysql'
-    depends_on:
-      - mq
-    network_mode: 'service:mq'
-    restart: unless-stopped
-    logging:
-      driver: "syslog"
-      options:
-        syslog-address: 'unixgram:///dev/log'
-        tag: 'docker/{{.Name}}'
-#        syslog-address: "tcp://ietfa.amsl.com:514"
diff --git a/dev/celery/docker-init.sh b/docker/scripts/app-init-celery.sh
similarity index 90%
rename from dev/celery/docker-init.sh
rename to docker/scripts/app-init-celery.sh
index 6a36cb6d78..5788b943da 100755
--- a/dev/celery/docker-init.sh
+++ b/docker/scripts/app-init-celery.sh
@@ -90,19 +90,22 @@ if [[ "${CELERY_ROLE}" == "worker" ]]; then
     run_as_celery_uid /usr/local/bin/python $WORKSPACEDIR/ietf/manage.py check
 fi
 
+USER_BIN_PATH="/home/dev/.local/bin"
+WATCHMEDO="$USER_BIN_PATH/watchmedo"
+CELERY="$USER_BIN_PATH/celery"
 trap 'trap "" TERM; cleanup' TERM
 # start celery in the background so we can trap the TERM signal
-if [[ -n "${DEV_MODE}" ]]; then
-  watchmedo auto-restart \
+if [[ -n "${DEV_MODE}" && -x "${WATCHMEDO}" ]]; then
+  $WATCHMEDO auto-restart \
             --patterns '*.py' \
             --directory 'ietf' \
             --recursive \
             --debounce-interval 5 \
             -- \
-            celery --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" $@ &
+            $CELERY --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" $@ &
   celery_pid=$!
 else
-  celery --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" "$@" &
+  $CELERY --app="${CELERY_APP:-ietf}" "${CELERY_OPTS[@]}" "$@" &
   celery_pid=$!
 fi
 

From 4ea16888201116de81d183703a04d899e8662101 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Sat, 19 Jul 2025 11:20:02 +0200
Subject: [PATCH 375/707] fix: use bootstrap body color in highcharts (#9171)

---
 ietf/templates/doc/ad_list.html | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/doc/ad_list.html b/ietf/templates/doc/ad_list.html
index 1d7b6e2b54..7f7e95a873 100644
--- a/ietf/templates/doc/ad_list.html
+++ b/ietf/templates/doc/ad_list.html
@@ -8,15 +8,19 @@
 {% endblock %}
 {% block morecss %}
     table .border-bottom { border-bottom-color: var(--highcharts-neutral-color-80) !important; }
-    .highcharts-container .highcharts-axis-labels { font-size: .7rem; }
+    .highcharts-container .highcharts-axis-labels { 
+        font-size: .7rem; 
+        fill: var(--bs-body-color)
+    }
     .highcharts-container .highcharts-graph { stroke-width: 2.5; }
     .highcharts-container .highcharts-color-0 {
-        fill: var(--bs-primary);
+        fill: var(--bs-body-color);
         stroke: var(--bs-primary);
     }
     .highcharts-container .highcharts-data-label text {
         font-size: 1rem;
         font-weight: inherit;
+        fill: var(--bs-body-color)
     }
 {% endblock %}
 {% block title %}IESG Dashboard{% endblock %}

From ae60b41f60939a25f6268e35c2800d0a20fcd3df Mon Sep 17 00:00:00 2001
From: Peter Yee <github@houseofyee.com>
Date: Sat, 19 Jul 2025 11:33:20 +0200
Subject: [PATCH 376/707] feat: Add "IESG" group at top of Groups menu (#9144)

* feat: Add "IESG" group at top of Groups menu
Creates an IESG group at the top of the Group dropdown menu that
points at https://datatracker.ietf.org/group/iesg/about/. Maybe
that value shouldn't be hardcoded into menu.html. This feature
is in response to issue #9018.

* feat: Add "IESG" group at top of Groups menu
This feature is in response to issue #9018. This commit is an
update to the original commit to add proper support for the
left menu and use a non-hardcoded URL for the IESG.
---
 ietf/templates/base/menu.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 3ae0d3dc57..81f012a679 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -19,6 +19,7 @@
             <span class="fw-bolder">Groups</span>
         </li>
     {% endif %}
+    <li><a class="dropdown-item" href="{% url "ietf.group.views.group_about" acronym="iesg" %}">IESG</a></li>
     {% if flavor == 'top' %}<li class="dropdown-header">By area/parent</li>{% endif %}
     {% wg_menu flavor %}
     <li class="dropend">

From aae03d94cfb6aaeb29e033b6f1f4557217218537 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Sat, 19 Jul 2025 12:50:09 +0200
Subject: [PATCH 377/707] fix: fix issue cancelling unpaid registration (#9170)

* fix: fix issue cancelling unpaid registration

* fix: add logging to reg API
---
 ietf/meeting/utils.py | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index db67f79b93..ee1a3b46d7 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -1423,6 +1423,7 @@ def sync_registration_data(meeting):
     # Delete registrations that exist in the DB but not in registration data, they've been cancelled
     emails_to_delete = existing_emails - reg_emails
     if emails_to_delete:
+        log(f"sync_reg: emails marked for deletion: {emails_to_delete}")
         result = Registration.objects.filter(
             email__in=emails_to_delete,
             meeting=meeting
@@ -1432,7 +1433,6 @@ def sync_registration_data(meeting):
         else:
             deleted_count = 0
         stats['deleted'] = deleted_count
-
     # set meeting.attendees
     count = Registration.objects.onsite().filter(meeting=meeting, checkedin=True).count()
     if meeting.attendees != count:
@@ -1474,14 +1474,16 @@ def process_single_registration(reg_data, meeting):
             target = registration.tickets.filter(
                 attendance_type__slug=ticket['attendance_type'],
                 ticket_type__slug=ticket['ticket_type']).first()
-            target.delete()
+            if target:
+                target.delete()
         if registration.tickets.count() == 0:
             registration.delete()
+        log(f"sync_reg: cancelled registration {reg_data['email']}")
         return (None, 'deleted')
 
     person = Person.objects.filter(email__address=reg_data['email']).first()
     if not person:
-        log.log(f"ERROR: meeting registration email unknown {reg_data['email']}")
+        log(f"ERROR: meeting registration email unknown {reg_data['email']}")
 
     registration, created = Registration.objects.get_or_create(
         email=reg_data['email'],
@@ -1500,6 +1502,7 @@ def process_single_registration(reg_data, meeting):
     if not created:
         for field in ['first_name', 'last_name', 'affiliation', 'country_code', 'checkedin']:
             if getattr(registration, field) != reg_data[field]:
+                log(f"sync_reg: found update {reg_data['email']}, {field} different, data from reg: {reg_data}")
                 setattr(registration, field, reg_data[field])
                 fields_updated = True
 
@@ -1536,6 +1539,7 @@ def process_single_registration(reg_data, meeting):
             ).order_by('id')  # Use a consistent order for deterministic deletion
 
             # Delete the required number
+            log(f"sync_reg: deleting {tickets_to_delete} of {ticket_type[0]}:{ticket_type[1]} of {reg_data['email']}")
             for ticket in matching_tickets[:tickets_to_delete]:
                 ticket.delete()
             tickets_modified = True
@@ -1545,6 +1549,7 @@ def process_single_registration(reg_data, meeting):
             tickets_to_add = new_count - existing_count
 
             # Create the new tickets
+            log(f"sync_reg: adding {tickets_to_add} of {ticket_type[0]}:{ticket_type[1]} of {reg_data['email']}")
             for _ in range(tickets_to_add):
                 try:
                     RegistrationTicket.objects.create(
@@ -1555,7 +1560,6 @@ def process_single_registration(reg_data, meeting):
                     tickets_modified = True
                 except IntegrityError as e:
                     log(f"Error adding RegistrationTicket {e}")
-
     # handle nomcom volunteer
     if reg_data['is_nomcom_volunteer'] and person:
         try:
@@ -1574,6 +1578,7 @@ def process_single_registration(reg_data, meeting):
 
     # set action_taken
     if created:
+        log(f"sync_reg: created record. {reg_data['email']}")
         action_taken = 'created'
     elif fields_updated or tickets_modified:
         action_taken = 'updated'

From e89302c5937c49ddc98afcb82f3c51c8c0777fdb Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Sat, 19 Jul 2025 14:10:25 +0200
Subject: [PATCH 378/707] feat: Add "IESG Statements" and "IESG Appeals" as
 menu items to Document menu (#9174)

* Add IESG nested drop-down menu

* Remove aria id to please Python tests

* More suitable menu ordering
---
 ietf/templates/base/menu.html | 52 ++++++++++++++++++++++++-----------
 1 file changed, 36 insertions(+), 16 deletions(-)

diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 81f012a679..695445c578 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -99,35 +99,55 @@
             Submit an Internet-Draft
         </a>
     </li>
+    {% if user and user.is_authenticated %}
     <li>
         <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
-           href="{% url 'ietf.doc.views_search.ad_workload' %}">
-            IESG dashboard
+            href="{% url "ietf.community.views.view_list" user.username %}">
+            My tracked docs
         </a>
     </li>
-    {% if user and user.is_authenticated %}
+    {% if user|has_role:"Area Director,Secretariat" %}
+        {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
         <li>
             <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
-               href="{% url "ietf.community.views.view_list" user.username %}">
-                My tracked docs
+                href="{% url 'ietf.doc.views_status_change.rfc_status_changes' %}">
+                RFC status changes
             </a>
         </li>
-        {% if user|has_role:"Area Director,Secretariat" %}
-            {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
+    {% endif %}
+    {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
+    <li class="dropend">
+      <a class="dropdown-item dropdown-toggle" href="#">
+        IESG
+      </a>
+      <ul class="dropdown-menu">
             <li>
                 <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
-                   href="{% url 'ietf.doc.views_status_change.rfc_status_changes' %}">
-                    RFC status changes
+                href="{% url 'ietf.group.views.appeals' acronym='iesg' %}">
+                    IESG appeals
                 </a>
             </li>
-        {% endif %}
-        {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
-        <li>
-            <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
-               href="{% url 'ietf.doc.views_ballot.irsg_ballot_status' %}">
-                IRSG ballot status
-            </a>
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="{% url 'ietf.doc.views_search.ad_workload' %}">
+                    IESG dashboard
+                </a>
+            </li>
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="{% url 'ietf.group.views.statements' acronym='iesg' %}">
+                    IESG statements
+                </a>
+            </li>
+        </ul>
         </li>
+        <li><hr class="dropdown-divider"></li>
+    <li>
+        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+            href="{% url 'ietf.doc.views_ballot.irsg_ballot_status' %}">
+            IRSG ballot status
+        </a>
+    </li>
         {% if user|has_role:"WG Chair,RG Chair" %}
             {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
             <li {% if flavor == 'top' %}class="dropdown-header"{% else %}class="nav-item fw-bolder"{% endif %}>Manage</li>

From 2c8a7cda366d34d8eb1e0ee105d2b5c7b43a8cf3 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Sat, 19 Jul 2025 15:32:57 +0200
Subject: [PATCH 379/707] fix: add tickets to Registration admin (#9177)

---
 ietf/meeting/admin.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ietf/meeting/admin.py b/ietf/meeting/admin.py
index 5d6adb7294..1c5d5c67b5 100644
--- a/ietf/meeting/admin.py
+++ b/ietf/meeting/admin.py
@@ -227,6 +227,10 @@ def queryset(self, request, queryset):
         if self.value():
             return queryset.filter(meeting__id=self.value())
         return queryset
+
+class RegistrationTicketInline(admin.TabularInline):
+    model = RegistrationTicket
+
 class RegistrationAdmin(admin.ModelAdmin):
     model = Registration
     # list_filter = [('meeting', Meeting.objects.filter(type='ietf')), ]
@@ -234,6 +238,7 @@ class RegistrationAdmin(admin.ModelAdmin):
     list_display = ['meeting', 'first_name', 'last_name', 'affiliation', 'country_code', 'person', 'email', ]
     search_fields = ['meeting__number', 'first_name', 'last_name', 'affiliation', 'country_code', 'email', ]
     raw_id_fields = ['person']
+    inlines = [RegistrationTicketInline, ]
 admin.site.register(Registration, RegistrationAdmin)
 
 class RegistrationTicketAdmin(admin.ModelAdmin):

From c78e360b4215988f1c462d36c8f0e3d9b77cec29 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Sat, 19 Jul 2025 15:42:23 +0200
Subject: [PATCH 380/707] Add a idnits-v3 button displayed only to IESG members
 (test phase) (#9175)

---
 ietf/settings.py                       |  1 +
 ietf/templates/doc/document_draft.html | 11 +++++++++++
 2 files changed, 12 insertions(+)

diff --git a/ietf/settings.py b/ietf/settings.py
index 5e33673611..ada98bd627 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -658,6 +658,7 @@ def skip_unreadable_post(record):
 IDTRACKER_BASE_URL = "https://datatracker.ietf.org"
 RFCDIFF_BASE_URL = "https://author-tools.ietf.org/iddiff"
 IDNITS_BASE_URL = "https://author-tools.ietf.org/api/idnits"
+IDNITS3_BASE_URL = "https://author-tools.ietf.org/idnits3/results"
 IDNITS_SERVICE_URL = "https://author-tools.ietf.org/idnits"
 
 # Content security policy configuration (django-csp)
diff --git a/ietf/templates/doc/document_draft.html b/ietf/templates/doc/document_draft.html
index d5ea074422..6414538283 100644
--- a/ietf/templates/doc/document_draft.html
+++ b/ietf/templates/doc/document_draft.html
@@ -661,6 +661,17 @@
                 </i>
                 Nits
             </a>
+            {% if user|has_role:"Area Director" %}
+            {# IDNITS3 is an experimental service, so only show it to Area Directors #}
+             <a class="btn btn-primary btn-sm"
+               href="{{ settings.IDNITS3_BASE_URL }}?url=https://www.ietf.org/archive/id/{{ doc.filename_with_rev }}"
+               rel="nofollow"
+               target="_blank">
+                <i class="bi bi-exclamation-diamond">
+                </i>
+                Nits-v3 (Experimental)
+            </a>           
+            {% endif %}
             <a class="btn btn-primary btn-sm"
                href="https://mailarchive.ietf.org/arch/search/?q=%22{{ doc.name }}%22"
                rel="nofollow"

From 3d50a211fa6a98ad3bffdb973043d5152f77d89a Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Sat, 19 Jul 2025 16:01:52 +0200
Subject: [PATCH 381/707] refactor: remove old reg API functions (#9176)

---
 ietf/api/tests.py                             | 126 -----------------
 ietf/api/urls.py                              |   1 -
 ietf/api/views.py                             |  95 -------------
 ietf/meeting/tasks.py                         |  18 ---
 ietf/meeting/tests_utils.py                   |  89 +-----------
 ietf/meeting/utils.py                         | 112 ---------------
 ietf/settings.py                              |   1 -
 .../commands/fetch_meeting_attendance.py      |  42 ------
 ietf/stats/tasks.py                           |  27 ----
 ietf/stats/tests.py                           | 124 -----------------
 ietf/stats/utils.py                           | 127 +-----------------
 11 files changed, 3 insertions(+), 759 deletions(-)
 delete mode 100644 ietf/stats/management/commands/fetch_meeting_attendance.py
 delete mode 100644 ietf/stats/tasks.py

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index abaf9f5ed2..93a2195467 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -37,7 +37,6 @@
 from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
 from ietf.person.factories import PersonFactory, random_faker, EmailFactory, PersonalApiKeyFactory
 from ietf.person.models import Email, User
-from ietf.stats.models import MeetingRegistration
 from ietf.utils.mail import empty_outbox, outbox, get_payload_text
 from ietf.utils.models import DumpInfo
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, reload_db_objects
@@ -705,131 +704,6 @@ def test_api_v2_person_export_view(self):
         self.assertEqual(data['ascii'], robot.ascii)
         self.assertEqual(data['user']['email'], robot.user.email)
 
-    def test_api_new_meeting_registration(self):
-        meeting = MeetingFactory(type_id='ietf')
-        reg = {
-            'apikey': 'invalid',
-            'affiliation': "Alguma Corporação",
-            'country_code': 'PT',
-            'email': 'foo@example.pt',
-            'first_name': 'Foo',
-            'last_name': 'Bar',
-            'meeting': meeting.number,
-            'reg_type': 'hackathon',
-            'ticket_type': '',
-            'checkedin': 'False',
-            'is_nomcom_volunteer': 'False',
-        }
-        url = urlreverse('ietf.api.views.api_new_meeting_registration')
-        r = self.client.post(url, reg)
-        self.assertContains(r, 'Invalid apikey', status_code=403)
-        oidcp = PersonFactory(user__is_staff=True)
-        # Make sure 'oidcp' has an acceptable role
-        RoleFactory(name_id='robot', person=oidcp, email=oidcp.email(), group__acronym='secretariat')
-        key = PersonalApiKeyFactory(person=oidcp, endpoint=url)
-        reg['apikey'] = key.hash()
-        #
-        # Test valid POST
-        # FIXME: sometimes, there seems to be something in the outbox?
-        old_len = len(outbox)
-        r = self.client.post(url, reg)
-        self.assertContains(r, "Accepted, New registration, Email sent", status_code=202)
-        #
-        # Check outgoing mail
-        self.assertEqual(len(outbox), old_len + 1)
-        body = get_payload_text(outbox[-1])
-        self.assertIn(reg['email'], outbox[-1]['To'] )
-        self.assertIn(reg['email'], body)
-        self.assertIn('account creation request', body)
-        #
-        # Check record
-        obj = MeetingRegistration.objects.get(email=reg['email'], meeting__number=reg['meeting'])
-        for key in ['affiliation', 'country_code', 'first_name', 'last_name', 'person', 'reg_type', 'ticket_type', 'checkedin']:
-            self.assertEqual(getattr(obj, key), False if key=='checkedin' else reg.get(key) , "Bad data for field '%s'" % key)
-        #
-        # Test with existing user
-        person = PersonFactory()
-        reg['email'] = person.email().address
-        reg['first_name'] = person.first_name()
-        reg['last_name'] = person.last_name()
-        #
-        r = self.client.post(url, reg)
-        self.assertContains(r, "Accepted, New registration", status_code=202)
-        #
-        # There should be no new outgoing mail
-        self.assertEqual(len(outbox), old_len + 1)
-        #
-        # Test multiple reg types
-        reg['reg_type'] = 'remote'
-        reg['ticket_type'] = 'full_week_pass'
-        r = self.client.post(url, reg)
-        self.assertContains(r, "Accepted, New registration", status_code=202)
-        objs = MeetingRegistration.objects.filter(email=reg['email'], meeting__number=reg['meeting'])
-        self.assertEqual(len(objs), 2)
-        self.assertEqual(objs.filter(reg_type='hackathon').count(), 1)
-        self.assertEqual(objs.filter(reg_type='remote', ticket_type='full_week_pass').count(), 1)
-        self.assertEqual(len(outbox), old_len + 1)
-        #
-        # Test incomplete POST
-        drop_fields = ['affiliation', 'first_name', 'reg_type']
-        for field in drop_fields:
-            del reg[field]
-        r = self.client.post(url, reg)        
-        self.assertContains(r, 'Missing parameters:', status_code=400)
-        err, fields = r.content.decode().split(':', 1)
-        missing_fields = [f.strip() for f in fields.split(',')]
-        self.assertEqual(set(missing_fields), set(drop_fields))
-
-    def test_api_new_meeting_registration_nomcom_volunteer(self):
-        '''Test that Volunteer is created if is_nomcom_volunteer=True
-           is submitted to API
-        '''
-        meeting = MeetingFactory(type_id='ietf')
-        reg = {
-            'apikey': 'invalid',
-            'affiliation': "Alguma Corporação",
-            'country_code': 'PT',
-            'meeting': meeting.number,
-            'reg_type': 'onsite',
-            'ticket_type': '',
-            'checkedin': 'False',
-            'is_nomcom_volunteer': 'False',
-        }
-        person = PersonFactory()
-        reg['email'] = person.email().address
-        reg['first_name'] = person.first_name()
-        reg['last_name'] = person.last_name()
-        now = datetime.datetime.now()
-        if now.month > 10:
-            year = now.year + 1
-        else:
-            year = now.year
-        # create appropriate group and nomcom objects
-        nomcom = NomComFactory.create(is_accepting_volunteers=True, **nomcom_kwargs_for_year(year))
-        url = urlreverse('ietf.api.views.api_new_meeting_registration')
-        oidcp = PersonFactory(user__is_staff=True)
-        # Make sure 'oidcp' has an acceptable role
-        RoleFactory(name_id='robot', person=oidcp, email=oidcp.email(), group__acronym='secretariat')
-        key = PersonalApiKeyFactory(person=oidcp, endpoint=url)
-        reg['apikey'] = key.hash()
-
-        # first test is_nomcom_volunteer False
-        r = self.client.post(url, reg)
-        self.assertContains(r, "Accepted, New registration", status_code=202)
-        # assert no Volunteers exists
-        self.assertEqual(Volunteer.objects.count(), 0)
-
-        # test is_nomcom_volunteer True
-        reg['is_nomcom_volunteer'] = 'True'
-        r = self.client.post(url, reg)
-        self.assertContains(r, "Accepted, Updated registration", status_code=202)
-        # assert Volunteer exists
-        self.assertEqual(Volunteer.objects.count(), 1)
-        volunteer = Volunteer.objects.last()
-        self.assertEqual(volunteer.person, person)
-        self.assertEqual(volunteer.nomcom, nomcom)
-        self.assertEqual(volunteer.origin, 'registration')
-
     @override_settings(APP_API_TOKENS={"ietf.api.views.api_new_meeting_registration_v2": ["valid-token"]})
     def test_api_new_meeting_registration_v2(self):
         meeting = MeetingFactory(type_id='ietf')
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index bafd5c5b76..6f2efb3c1e 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -67,7 +67,6 @@
     url(r'^notify/session/polls/?$', meeting_views.api_upload_polls),    
     # Let the registration system notify us about registrations
     url(r'^notify/meeting/registration/v2/?', api_views.api_new_meeting_registration_v2),
-    url(r'^notify/meeting/registration/?', api_views.api_new_meeting_registration),
     # OpenID authentication provider
     url(r'^openid/$', TemplateView.as_view(template_name='api/openid-issuer.html'), name='ietf.api.urls.oidc_issuer'),
     url(r'^openid/', include('oidc_provider.urls', namespace='oidc_provider')),
diff --git a/ietf/api/views.py b/ietf/api/views.py
index e8e38b25b4..b4dd7f05d6 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -16,8 +16,6 @@
 from django.contrib.auth import authenticate
 from django.contrib.auth.decorators import login_required
 from django.contrib.auth.models import User
-from django.core.exceptions import ValidationError
-from django.core.validators import validate_email
 from django.http import HttpResponse, Http404, JsonResponse, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404
 from django.urls import reverse
@@ -43,14 +41,11 @@
 from ietf.doc.utils import DraftAliasGenerator, fuzzy_find_documents
 from ietf.group.utils import GroupAliasGenerator, role_holder_emails
 from ietf.ietfauth.utils import role_required
-from ietf.ietfauth.views import send_account_creation_email
 from ietf.ipr.utils import ingest_response_email as ipr_ingest_response_email
 from ietf.meeting.models import Meeting
 from ietf.meeting.utils import import_registration_json_validator, process_single_registration
-from ietf.nomcom.models import Volunteer, NomCom
 from ietf.nomcom.utils import ingest_feedback_email as nomcom_ingest_feedback_email
 from ietf.person.models import Person, Email
-from ietf.stats.models import MeetingRegistration
 from ietf.sync.iana import ingest_review_email as iana_ingest_review_email
 from ietf.utils import log
 from ietf.utils.decorators import require_api_key
@@ -151,96 +146,6 @@ def post(self, request):
 #     else:
 #         return HttpResponse(status=405)
 
-@require_api_key
-@role_required('Robot')
-@csrf_exempt
-def api_new_meeting_registration(request):
-    '''REST API to notify the datatracker about a new meeting registration'''
-    def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
-    required_fields = [ 'meeting', 'first_name', 'last_name', 'affiliation', 'country_code',
-                        'email', 'reg_type', 'ticket_type', 'checkedin', 'is_nomcom_volunteer']
-    fields = required_fields + []
-    if request.method == 'POST':
-        # parameters:
-        #   apikey:
-        #   meeting
-        #   name
-        #   email
-        #   reg_type (In Person, Remote, Hackathon Only)
-        #   ticket_type (full_week, one_day, student)
-        #   
-        data = {'attended': False, }
-        missing_fields = []
-        for item in fields:
-            value = request.POST.get(item, None)
-            if value is None and item in required_fields:
-                missing_fields.append(item)
-            data[item] = value
-        if missing_fields:
-            return err(400, "Missing parameters: %s" % ', '.join(missing_fields))
-        number = data['meeting']
-        try:
-            meeting = Meeting.objects.get(number=number)
-        except Meeting.DoesNotExist:
-            return err(400, "Invalid meeting value: '%s'" % (number, ))
-        reg_type = data['reg_type']
-        email = data['email']
-        try:
-            validate_email(email)
-        except ValidationError:
-            return err(400, "Invalid email value: '%s'" % (email, ))
-        if request.POST.get('cancelled', 'false') == 'true':
-            MeetingRegistration.objects.filter(
-                meeting_id=meeting.pk,
-                email=email,
-                reg_type=reg_type).delete()
-            return HttpResponse('OK', status=200, content_type='text/plain')
-        else:
-            object, created = MeetingRegistration.objects.get_or_create(
-                meeting_id=meeting.pk,
-                email=email,
-                reg_type=reg_type)
-            try:
-                # Update attributes
-                for key in set(data.keys())-set(['attended', 'apikey', 'meeting', 'email']):
-                    if key == 'checkedin':
-                        new = bool(data.get(key).lower() == 'true')
-                    else:
-                        new = data.get(key)
-                    setattr(object, key, new)
-                person = Person.objects.filter(email__address=email)
-                if person.exists():
-                    object.person = person.first()
-                object.save()
-            except ValueError as e:
-                return err(400, "Unexpected POST data: %s" % e)
-            response = "Accepted, New registration" if created else "Accepted, Updated registration"
-            if User.objects.filter(username__iexact=email).exists() or Email.objects.filter(address=email).exists():
-                pass
-            else:
-                send_account_creation_email(request, email)
-                response += ", Email sent"
-
-            # handle nomcom volunteer
-            if request.POST.get('is_nomcom_volunteer', 'false').lower() == 'true' and object.person:
-                try:
-                    nomcom = NomCom.objects.get(is_accepting_volunteers=True)
-                except (NomCom.DoesNotExist, NomCom.MultipleObjectsReturned):
-                    nomcom = None
-                if nomcom:
-                    Volunteer.objects.get_or_create(
-                        nomcom=nomcom,
-                        person=object.person,
-                        defaults={
-                            "affiliation": data["affiliation"],
-                            "origin": "registration"
-                        }
-                    )
-            return HttpResponse(response, status=202, content_type='text/plain')
-    else:
-        return HttpResponse(status=405)
-
 
 @requires_api_token
 @csrf_exempt
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index dc3fbc99ec..784eb00d87 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -9,7 +9,6 @@
 from .models import Meeting
 from .utils import generate_proceedings_content
 from .views import generate_agenda_data
-from .utils import migrate_registrations, check_migrate_registrations
 from .utils import fetch_attendance_from_meetings
 
 
@@ -18,23 +17,6 @@ def agenda_data_refresh():
     generate_agenda_data(force_refresh=True)
 
 
-@shared_task
-def migrate_registrations_task(initial=False):
-    """ Migrate ietf.stats.MeetingRegistration to ietf.meeting.Registration
-        If initial is True, migrate all meetings otherwise only future meetings.
-        This function is idempotent. It can be run regularly from cron.
-    """
-    migrate_registrations(initial=initial)
-
-
-@shared_task
-def check_migrate_registrations_task():
-    """ Compare MeetingRegistration with Registration to ensure
-        all records migrated
-    """
-    check_migrate_registrations()
-
-
 @shared_task
 def proceedings_content_refresh_task(*, all=False):
     """Refresh meeting proceedings cache
diff --git a/ietf/meeting/tests_utils.py b/ietf/meeting/tests_utils.py
index 8d912158ce..11ea63df4f 100644
--- a/ietf/meeting/tests_utils.py
+++ b/ietf/meeting/tests_utils.py
@@ -12,101 +12,14 @@
 from django.http import HttpResponse, JsonResponse
 from ietf.meeting.factories import MeetingFactory, RegistrationFactory, RegistrationTicketFactory
 from ietf.meeting.models import Registration
-from ietf.meeting.utils import (migrate_registrations, get_preferred, process_single_registration,
+from ietf.meeting.utils import (process_single_registration,
     get_registration_data, sync_registration_data, fetch_attendance_from_meetings)
 from ietf.nomcom.models import Volunteer
 from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
 from ietf.person.factories import PersonFactory
-from ietf.stats.factories import MeetingRegistrationFactory
 from ietf.utils.test_utils import TestCase
 
 
-class MigrateRegistrationsTests(TestCase):
-    def test_new_meeting_registration(self):
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        self.assertEqual(Registration.objects.count(), 0)
-        migrate_registrations(initial=True)
-        self.assertEqual(Registration.objects.count(), 1)
-        new = Registration.objects.first()
-        self.assertEqual(new.first_name, reg.first_name)
-        self.assertEqual(new.last_name, reg.last_name)
-        self.assertEqual(new.email, reg.email)
-        self.assertEqual(new.person, reg.person)
-        self.assertEqual(new.meeting, meeting)
-        self.assertEqual(new.affiliation, reg.affiliation)
-        self.assertEqual(new.country_code, reg.country_code)
-        self.assertEqual(new.checkedin, reg.checkedin)
-        self.assertEqual(new.attended, reg.attended)
-
-    def test_migrate_non_initial(self):
-        # with only old meeting
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        self.assertEqual(Registration.objects.count(), 0)
-        migrate_registrations()
-        self.assertEqual(Registration.objects.count(), 0)
-        # with new meeting
-        new_meeting = MeetingFactory(type_id='ietf', number='150')
-        new_meeting.date = datetime.date.today() + datetime.timedelta(days=30)
-        new_meeting.save()
-        MeetingRegistrationFactory(meeting=new_meeting, reg_type='onsite', ticket_type='week_pass')
-        migrate_registrations()
-        self.assertEqual(Registration.objects.count(), 1)
-
-    def test_updated_meeting_registration(self):
-        # setup test initial conditions
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        migrate_registrations(initial=True)
-        # change first_name and save
-        original = reg.first_name
-        reg.first_name = 'NewBob'
-        reg.save()
-        new = Registration.objects.first()
-        self.assertEqual(new.first_name, original)
-        migrate_registrations(initial=True)
-        new.refresh_from_db()
-        self.assertEqual(new.first_name, reg.first_name)
-
-    def test_additional_ticket(self):
-        # setup test initial conditions
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        migrate_registrations(initial=True)
-        new = Registration.objects.first()
-        self.assertEqual(new.tickets.count(), 1)
-        # add a second ticket
-        reg.reg_type = 'remote'
-        reg.pk = None
-        reg.save()
-        migrate_registrations(initial=True)
-        # new.refresh_from_db()
-        self.assertEqual(new.tickets.count(), 2)
-
-    def test_cancelled_registration(self):
-        # setup test initial conditions
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        reg = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        migrate_registrations(initial=True)
-        reg.delete()
-        # do test
-        migrate_registrations(initial=True)
-        self.assertEqual(Registration.objects.count(), 0)
-
-    def test_get_preferred(self):
-        meeting = MeetingFactory(type_id='ietf', number='109')
-        onsite = MeetingRegistrationFactory(meeting=meeting, reg_type='onsite', ticket_type='week_pass')
-        remote = MeetingRegistrationFactory(meeting=meeting, reg_type='remote', ticket_type='week_pass')
-        hackathon = MeetingRegistrationFactory(meeting=meeting, reg_type='hackathon_onsite', ticket_type='week_pass')
-        result = get_preferred([remote, onsite, hackathon])
-        self.assertEqual(result, onsite)
-        result = get_preferred([hackathon, remote])
-        self.assertEqual(result, remote)
-        result = get_preferred([hackathon])
-        self.assertEqual(result, hackathon)
-
-
 class JsonResponseWithJson(JsonResponse):
     def json(self):
         return json.loads(self.content)
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index ee1a3b46d7..1047783a0c 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -37,7 +37,6 @@
 from ietf.group.utils import can_manage_materials
 from ietf.name.models import SessionStatusName, ConstraintName, DocTypeName
 from ietf.person.models import Person
-from ietf.stats.models import MeetingRegistration
 from ietf.utils.html import clean_html
 from ietf.utils.log import log
 from ietf.utils.timezone import date_today
@@ -1017,117 +1016,6 @@ def participants_for_meeting(meeting):
     return (checked_in, attended)
 
 
-def get_preferred(regs):
-    """ If there are multiple registrations return preferred in
-        this order: onsite, remote, any (ie hackathon_onsite)
-    """
-    if len(regs) == 1:
-        return regs[0]
-    reg_types = [r.reg_type for r in regs]
-    if 'onsite' in reg_types:
-        return regs[reg_types.index('onsite')]
-    elif 'remote' in reg_types:
-        return regs[reg_types.index('remote')]
-    else:
-        return regs[0]
-
-
-def migrate_registrations(initial=False):
-    """ Migrate ietf.stats.MeetingRegistration to ietf.meeting.Registration
-        If initial is True, migrate all meetings otherwise only future meetings.
-        This function is idempotent. It can be run regularly from cron.
-    """
-    if initial:
-        meetings = Meeting.objects.filter(type='ietf')
-        MeetingRegistration.objects.filter(reg_type='hackathon').update(reg_type='hackathon_remote')
-        MeetingRegistration.objects.filter(ticket_type='full_week_pass').update(ticket_type='week_pass')
-        MeetingRegistration.objects.filter(pk=49645).update(ticket_type='one_day')
-        MeetingRegistration.objects.filter(pk=50804).update(ticket_type='week_pass')
-        MeetingRegistration.objects.filter(pk=42386).update(ticket_type='week_pass')
-        MeetingRegistration.objects.filter(pk=42782).update(ticket_type='one_day')
-        MeetingRegistration.objects.filter(pk=43464).update(ticket_type='week_pass')
-    else:
-        # still process records during week of meeting
-        one_week_ago = datetime.date.today() - datetime.timedelta(days=7)
-        meetings = Meeting.objects.filter(type='ietf', date__gt=one_week_ago)
-
-    for meeting in meetings:
-        # gather all MeetingRegistrations by person (email)
-        emails = {}
-        for meeting_reg in MeetingRegistration.objects.filter(meeting=meeting):
-            if meeting_reg.email in emails:
-                emails[meeting_reg.email].append(meeting_reg)
-            else:
-                emails[meeting_reg.email] = [meeting_reg]
-        # process each person's registrations
-        for email, meeting_regs in emails.items():
-            preferred_reg = get_preferred(meeting_regs)
-            reg, created = Registration.objects.get_or_create(
-                meeting=meeting,
-                email=email,
-                defaults={
-                    'first_name': preferred_reg.first_name,
-                    'last_name': preferred_reg.last_name,
-                    'affiliation': preferred_reg.affiliation,
-                    'country_code': preferred_reg.country_code,
-                    'person': preferred_reg.person,
-                    'attended': preferred_reg.attended,
-                    'checkedin': preferred_reg.checkedin,
-                }
-            )
-            if created:
-                for meeting_reg in meeting_regs:
-                    reg.tickets.create(
-                        attendance_type_id=meeting_reg.reg_type or 'unknown',
-                        ticket_type_id=meeting_reg.ticket_type or 'unknown',
-                    )
-            else:
-                # check if tickets differ
-                reg_tuple_list = [(t.attendance_type_id, t.ticket_type_id) for t in reg.tickets.all()]
-                meeting_reg_tuple_list = [(mr.reg_type or 'unknown', mr.ticket_type or 'unknown') for mr in meeting_regs]
-                if not set(reg_tuple_list) == set(meeting_reg_tuple_list):
-                    # update tickets
-                    reg.tickets.all().delete()
-                    for meeting_reg in meeting_regs:
-                        reg.tickets.create(
-                            attendance_type_id=meeting_reg.reg_type or 'unknown',
-                            ticket_type_id=meeting_reg.ticket_type or 'unknown',
-                        )
-                # check fields for updates
-                fields_to_check = [
-                    'first_name', 'last_name', 'affiliation', 'country_code',
-                    'attended', 'checkedin'
-                ]
-
-                changed = False
-                for field in fields_to_check:
-                    new_value = getattr(preferred_reg, field)
-                    if getattr(reg, field) != new_value:
-                        setattr(reg, field, new_value)
-                        changed = True
-
-                if changed:
-                    reg.save()
-        # delete cancelled Registrations
-        meeting_reg_email_set = set(emails.keys())
-        reg_email_set = set(Registration.objects.filter(meeting=meeting).values_list('email', flat=True))
-        for email in reg_email_set - meeting_reg_email_set:
-            Registration.objects.filter(meeting=meeting, email=email).delete()
-
-    return
-
-
-def check_migrate_registrations():
-    """A simple utility function to test that all MeetingRegistration
-    records got migrated
-    """
-    for mr in MeetingRegistration.objects.all():
-        reg = Registration.objects.get(meeting=mr.meeting, email=mr.email)
-        assert reg.tickets.filter(
-            attendance_type__slug=mr.reg_type or 'unknown',
-            ticket_type__slug=mr.ticket_type or 'unknown').exists()
-
-
 def generate_proceedings_content(meeting, force_refresh=False):
     """Render proceedings content for a meeting and update cache
     
diff --git a/ietf/settings.py b/ietf/settings.py
index ada98bd627..d76a8749b2 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1142,7 +1142,6 @@ def skip_unreadable_post(record):
     "--outdir"
 ]
 
-STATS_REGISTRATION_ATTENDEES_JSON_URL = 'https://registration.ietf.org/{number}/attendees/'
 REGISTRATION_PARTICIPANTS_API_URL = 'https://registration.ietf.org/api/v1/participants-dt/'
 REGISTRATION_PARTICIPANTS_API_KEY = 'changeme'
 
diff --git a/ietf/stats/management/commands/fetch_meeting_attendance.py b/ietf/stats/management/commands/fetch_meeting_attendance.py
deleted file mode 100644
index e17ae567fa..0000000000
--- a/ietf/stats/management/commands/fetch_meeting_attendance.py
+++ /dev/null
@@ -1,42 +0,0 @@
-# Copyright The IETF Trust 2017-2019, All Rights Reserved
-# Copyright 2016 IETF Trust
-
-from django.core.management.base import BaseCommand, CommandError
-from django.utils import timezone
-
-import debug                            # pyflakes:ignore
-
-from ietf.meeting.models import Meeting
-from ietf.stats.utils import fetch_attendance_from_meetings
-from ietf.utils import log
-
-
-class Command(BaseCommand):
-    help = "Fetch meeting attendee figures from ietf.org/registration/attendees."
-
-    def add_arguments(self, parser):
-        parser.add_argument("--meeting", help="meeting to fetch data for")
-        parser.add_argument("--all", action="store_true", help="fetch data for all meetings")
-        parser.add_argument("--latest", type=int, help="fetch data for latest N meetings")
-
-    def handle(self, *args, **options):
-        self.verbosity = options['verbosity']
-
-        meetings = Meeting.objects.none()
-        if options['meeting']:
-            meetings = Meeting.objects.filter(number=options['meeting'], type="ietf")
-        elif options['all']:
-            meetings = Meeting.objects.filter(type="ietf").order_by("date")
-        elif options['latest']:
-            meetings = Meeting.objects.filter(type="ietf", date__lte=timezone.now()).order_by("-date")[:options['latest']]
-        else:
-            raise CommandError("Please use one of --meeting, --all or --latest")
-
-        for meeting, stats in zip(meetings, fetch_attendance_from_meetings(meetings)):
-            msg = "Fetched data for meeting {:>3}: {:4d} processed, {:4d} added, {:4d} in table".format(
-                meeting.number, stats.processed, stats.added, stats.total
-            )
-            if self.stdout.isatty():
-                self.stdout.write(msg+'\n') # make debugging a bit easier
-            else:
-                log.log(msg)
diff --git a/ietf/stats/tasks.py b/ietf/stats/tasks.py
deleted file mode 100644
index 808e797a40..0000000000
--- a/ietf/stats/tasks.py
+++ /dev/null
@@ -1,27 +0,0 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
-#
-# Celery task definitions
-#
-from celery import shared_task
-from django.utils import timezone
-
-from ietf.meeting.models import Meeting
-from ietf.stats.utils import fetch_attendance_from_meetings
-from ietf.utils import log
-
-
-@shared_task
-def fetch_meeting_attendance_task():
-    # fetch most recent two meetings
-    meetings = Meeting.objects.filter(type="ietf", date__lte=timezone.now()).order_by("-date")[:2]
-    try:
-        stats = fetch_attendance_from_meetings(meetings)
-    except RuntimeError as err:
-        log.log(f"Error in fetch_meeting_attendance_task: {err}")
-    else:
-        for meeting, meeting_stats in zip(meetings, stats):
-            log.log(
-                "Fetched data for meeting {:>3}: {:4d} processed, {:4d} added, {:4d} in table".format(
-                    meeting.number, meeting_stats.processed, meeting_stats.added, meeting_stats.total
-                )
-            )
diff --git a/ietf/stats/tests.py b/ietf/stats/tests.py
index 47027277be..48552c8fba 100644
--- a/ietf/stats/tests.py
+++ b/ietf/stats/tests.py
@@ -3,12 +3,9 @@
 
 
 import calendar
-import datetime
 import json
 
-from mock import patch
 from pyquery import PyQuery
-from requests import Response
 
 import debug    # pyflakes:ignore
 
@@ -19,12 +16,8 @@
 
 
 from ietf.group.factories import RoleFactory
-from ietf.meeting.factories import MeetingFactory
 from ietf.person.factories import PersonFactory
 from ietf.review.factories import ReviewRequestFactory, ReviewerSettingsFactory, ReviewAssignmentFactory
-from ietf.stats.models import MeetingRegistration
-from ietf.stats.tasks import fetch_meeting_attendance_task
-from ietf.stats.utils import get_meeting_registration_data, FetchStats, fetch_attendance_from_meetings
 from ietf.utils.timezone import date_today
 
 
@@ -116,120 +109,3 @@ def test_review_stats(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue(q('.review-stats td:contains("1")'))
-
-    @patch('requests.get')
-    def test_get_meeting_registration_data(self, mock_get):
-        '''Test function to get reg data.  Confirm leading/trailing spaces stripped'''
-        person = PersonFactory()
-        data = {
-            'LastName': person.last_name() + ' ',
-            'FirstName': person.first_name(),
-            'Company': 'ABC',
-            'Country': 'US',
-            'Email': person.email().address,
-            'RegType': 'onsite',
-            'TicketType': 'week_pass',
-            'CheckedIn': 'True',
-        }
-        data2 = data.copy()
-        data2['RegType'] = 'hackathon'
-        response_a = Response()
-        response_a.status_code = 200
-        response_a._content = json.dumps([data, data2]).encode('utf8')
-        # second response one less record, it's been deleted
-        response_b = Response()
-        response_b.status_code = 200
-        response_b._content = json.dumps([data]).encode('utf8')
-        # mock_get.return_value = response
-        mock_get.side_effect = [response_a, response_b]
-        meeting = MeetingFactory(type_id='ietf', date=datetime.date(2016, 7, 14), number="96")
-        get_meeting_registration_data(meeting)
-        query = MeetingRegistration.objects.filter(
-            first_name=person.first_name(),
-            last_name=person.last_name(),
-            country_code='US')
-        self.assertEqual(query.count(), 2)
-        self.assertEqual(query.filter(reg_type='onsite').count(), 1)
-        self.assertEqual(query.filter(reg_type='hackathon').count(), 1)
-        onsite = query.get(reg_type='onsite')
-        self.assertEqual(onsite.ticket_type, 'week_pass')
-        self.assertEqual(onsite.checkedin, True)
-        # call a second time to test delete
-        get_meeting_registration_data(meeting)
-        query = MeetingRegistration.objects.filter(meeting=meeting, email=person.email())
-        self.assertEqual(query.count(), 1)
-        self.assertEqual(query.filter(reg_type='onsite').count(), 1)
-        self.assertEqual(query.filter(reg_type='hackathon').count(), 0)
-
-    @patch('requests.get')
-    def test_get_meeting_registration_data_duplicates(self, mock_get):
-        '''Test that get_meeting_registration_data does not create duplicate
-           MeetingRegistration records
-        '''
-        person = PersonFactory()
-        data = {
-            'LastName': person.last_name() + ' ',
-            'FirstName': person.first_name(),
-            'Company': 'ABC',
-            'Country': 'US',
-            'Email': person.email().address,
-            'RegType': 'onsite',
-            'TicketType': 'week_pass',
-            'CheckedIn': 'True',
-        }
-        data2 = data.copy()
-        data2['RegType'] = 'hackathon'
-        response = Response()
-        response.status_code = 200
-        response._content = json.dumps([data, data2, data]).encode('utf8')
-        mock_get.return_value = response
-        meeting = MeetingFactory(type_id='ietf', date=datetime.date(2016, 7, 14), number="96")
-        self.assertEqual(MeetingRegistration.objects.count(), 0)
-        get_meeting_registration_data(meeting)
-        query = MeetingRegistration.objects.all()
-        self.assertEqual(query.count(), 2)
-
-    @patch("ietf.stats.utils.get_meeting_registration_data")
-    def test_fetch_attendance_from_meetings(self, mock_get_mtg_reg_data):
-        mock_meetings = [object(), object(), object()]
-        mock_get_mtg_reg_data.side_effect = (
-            (1, 2, 3),
-            (4, 5, 6),
-            (7, 8, 9),
-        )
-        stats = fetch_attendance_from_meetings(mock_meetings)
-        self.assertEqual(
-            [mock_get_mtg_reg_data.call_args_list[n][0][0] for n in range(3)],
-            mock_meetings,
-        )
-        self.assertEqual(
-            stats,
-            [
-                FetchStats(1, 2, 3),
-                FetchStats(4, 5, 6),
-                FetchStats(7, 8, 9),
-            ]
-        )
-
-
-class TaskTests(TestCase):
-    @patch("ietf.stats.tasks.fetch_attendance_from_meetings")
-    def test_fetch_meeting_attendance_task(self, mock_fetch_attendance):
-        today = date_today()
-        meetings = [
-            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=1)),
-            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=2)),
-            MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=3)),
-        ]
-        mock_fetch_attendance.return_value = [FetchStats(1,2,3), FetchStats(1,2,3)]
-
-        fetch_meeting_attendance_task()
-        self.assertEqual(mock_fetch_attendance.call_count, 1)
-        self.assertCountEqual(mock_fetch_attendance.call_args[0][0], meetings[0:2])
-
-        # test handling of RuntimeError
-        mock_fetch_attendance.reset_mock()
-        mock_fetch_attendance.side_effect = RuntimeError
-        fetch_meeting_attendance_task()
-        self.assertTrue(mock_fetch_attendance.called)
-        # Good enough that we got here without raising an exception
diff --git a/ietf/stats/utils.py b/ietf/stats/utils.py
index f2e1d9801d..a13e87a4f4 100644
--- a/ietf/stats/utils.py
+++ b/ietf/stats/utils.py
@@ -3,18 +3,12 @@
 
 
 import re
-import requests
-from collections import defaultdict, namedtuple
-
-from django.conf import settings
-from django.db.models import Q
+from collections import defaultdict
 
 import debug                            # pyflakes:ignore
 
-from ietf.stats.models import AffiliationAlias, AffiliationIgnoredEnding, CountryAlias, MeetingRegistration
+from ietf.stats.models import AffiliationAlias, AffiliationIgnoredEnding, CountryAlias
 from ietf.name.models import CountryName
-from ietf.person.models import Email
-from ietf.utils.log import log
 
 import logging
 logger = logging.getLogger('django')
@@ -221,120 +215,3 @@ def compute_hirsch_index(citation_counts):
         i += 1
 
     return i
-
-
-def get_meeting_registration_data(meeting):
-    """"Retrieve registration attendee data and summary statistics.  Returns number
-    of Registration records created.
-
-    MeetingRegistration records are created in realtime as people register for a
-    meeting. This function serves as an audit / reconciliation. Most records are
-    expected to already exist. The function has been optimized with this in mind.
-    """
-    num_created = 0
-    num_processed = 0
-    try:
-        response = requests.get(
-            settings.STATS_REGISTRATION_ATTENDEES_JSON_URL.format(number=meeting.number),
-            timeout=settings.DEFAULT_REQUESTS_TIMEOUT,
-        )
-    except requests.Timeout as exc:
-        log(f'GET request timed out for [{settings.STATS_REGISTRATION_ATTENDEES_JSON_URL}]: {exc}')
-        raise RuntimeError("Timeout retrieving data from registrations API") from exc
-    if response.status_code == 200:
-        decoded = []
-        try:
-            decoded = response.json()
-        except ValueError:
-            if response.content.strip() == 'Invalid meeting':
-                logger.info('Invalid meeting: {}'.format(meeting.number))
-                return (0,0,0)
-            else:
-                raise RuntimeError("Could not decode response from registrations API: '%s...'" % (response.content[:64], ))
-
-        records = MeetingRegistration.objects.filter(meeting_id=meeting.pk).select_related('person')
-        meeting_registrations = {(r.email, r.reg_type):r for r in records}
-        for registration in decoded:
-            person = None
-            # capture the stripped registration values for later use
-            first_name      = registration['FirstName'].strip()
-            last_name       = registration['LastName'].strip()
-            affiliation     = registration['Company'].strip()
-            country_code    = registration['Country'].strip()
-            address         = registration['Email'].strip()
-            reg_type        = registration['RegType'].strip()
-            ticket_type     = registration['TicketType'].strip()
-            checkedin       = bool(registration['CheckedIn'].strip().lower() == 'true')
-
-            if (address, reg_type) in meeting_registrations:
-                object = meeting_registrations.pop((address, reg_type))
-                created = False
-            else:
-                object, created = MeetingRegistration.objects.get_or_create(
-                    meeting_id=meeting.pk,
-                    email=address,
-                    reg_type=reg_type)
-            
-            if (object.first_name != first_name[:200] or
-                object.last_name != last_name[:200] or
-                object.affiliation != affiliation or
-                object.country_code != country_code or
-                object.ticket_type != ticket_type or
-                object.checkedin != checkedin):
-                    object.first_name=first_name[:200]
-                    object.last_name=last_name[:200]
-                    object.affiliation=affiliation
-                    object.country_code=country_code
-                    object.ticket_type=ticket_type
-                    object.checkedin=checkedin
-                    object.save()
-
-            # Add a Person object to MeetingRegistration object
-            # if valid email is available
-            if object and not object.person and address:
-                # If the person already exists do not try to create a new one
-                emails = Email.objects.filter(address=address)
-                # there can only be on Email object with a unique email address (primary key)
-                if emails.exists():
-                    person = emails.first().person
-                # Create a new Person object
-                else:
-                    logger.error("No Person record for registration. email={}".format(address))
-                # update the person object to an actual value
-                object.person = person
-                object.save()
-            
-            if created:
-                num_created += 1
-            num_processed += 1
-
-        # any registrations left in meeting_registrations no longer exist in reg
-        # so must have been deleted
-        for r in meeting_registrations:
-            try:
-                MeetingRegistration.objects.get(meeting=meeting,email=r[0],reg_type=r[1]).delete()
-                logger.info('Removing deleted registration. email={}, reg_type={}'.format(r[0], r[1]))
-            except MeetingRegistration.DoesNotExist:
-                pass
-    else:
-        raise RuntimeError("Bad response from registrations API: %s, '%s'" % (response.status_code, response.content))
-    num_total = MeetingRegistration.objects.filter(
-        meeting_id=meeting.pk,
-        reg_type__in=['onsite', 'remote']
-    ).filter(
-        Q(attended=True) | Q(checkedin=True)
-    ).count()
-    if meeting.attendees is None or num_total > meeting.attendees:
-        meeting.attendees = num_total
-        meeting.save()
-    return num_created, num_processed, num_total
-
-
-FetchStats = namedtuple("FetchStats", "added processed total")
-
-
-def fetch_attendance_from_meetings(meetings):
-    stats = [
-        FetchStats(*get_meeting_registration_data(meeting)) for meeting in meetings
-    ]
-    return stats

From aa2770372287cad937e2aacacc95aefa90d9c6b3 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Sat, 19 Jul 2025 21:27:26 +0200
Subject: [PATCH 382/707] fix: AD dashboard shows undead documents returned to
 the WG (#9183)

* Do not display expired I-D while in IESG state of 'idexists'

* Do not remove AD&shepherd display
---
 ietf/doc/views_search.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 3433a9ca31..67ff0c2f21 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -665,6 +665,7 @@ def sort_key(doc):
                 r.get_state_slug("draft-iesg") == "dead"
                 or r.get_state_slug("draft") == "repl"
                 or r.get_state_slug("draft") == "rfc"
+                or (r.get_state_slug("draft") == "expired" and r.get_state_slug("draft-iesg") == "idexists")
             )
         )
     ]

From eba6191213413b56ccc0a999d82f0dea6e7c0484 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Jul 2025 03:05:13 -0400
Subject: [PATCH 383/707] chore(deps): bump luxon in /dev/coverage-action in
 the npm group (#9139)

Bumps the npm group in /dev/coverage-action with 1 update: [luxon](https://github.com/moment/luxon).


Updates `luxon` from 3.6.1 to 3.7.1
- [Changelog](https://github.com/moment/luxon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moment/luxon/compare/3.6.1...3.7.1)

---
updated-dependencies:
- dependency-name: luxon
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/coverage-action/package-lock.json | 15 +++++++--------
 dev/coverage-action/package.json      |  2 +-
 2 files changed, 8 insertions(+), 9 deletions(-)

diff --git a/dev/coverage-action/package-lock.json b/dev/coverage-action/package-lock.json
index 4a1ff1e03d..09570ee0e4 100644
--- a/dev/coverage-action/package-lock.json
+++ b/dev/coverage-action/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "1.11.1",
         "@actions/github": "6.0.1",
         "lodash": "4.17.21",
-        "luxon": "3.6.1"
+        "luxon": "3.7.1"
       }
     },
     "node_modules/@actions/core": {
@@ -245,10 +245,9 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "node_modules/luxon": {
-      "version": "3.6.1",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
-      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ==",
-      "license": "MIT",
+      "version": "3.7.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.7.1.tgz",
+      "integrity": "sha512-RkRWjA926cTvz5rAb1BqyWkKbbjzCGchDUIKMCUvNi17j6f6j8uHGDV82Aqcqtzd+icoYpELmG3ksgGiFNNcNg==",
       "engines": {
         "node": ">=12"
       }
@@ -480,9 +479,9 @@
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "luxon": {
-      "version": "3.6.1",
-      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.6.1.tgz",
-      "integrity": "sha512-tJLxrKJhO2ukZ5z0gyjY1zPh3Rh88Ej9P7jNrZiHMUXHae1yvI2imgOZtL1TO8TW6biMMKfTtAOoEJANgtWBMQ=="
+      "version": "3.7.1",
+      "resolved": "https://registry.npmjs.org/luxon/-/luxon-3.7.1.tgz",
+      "integrity": "sha512-RkRWjA926cTvz5rAb1BqyWkKbbjzCGchDUIKMCUvNi17j6f6j8uHGDV82Aqcqtzd+icoYpELmG3ksgGiFNNcNg=="
     },
     "once": {
       "version": "1.4.0",
diff --git a/dev/coverage-action/package.json b/dev/coverage-action/package.json
index d59a8de22c..3f72b78028 100644
--- a/dev/coverage-action/package.json
+++ b/dev/coverage-action/package.json
@@ -9,6 +9,6 @@
     "@actions/core": "1.11.1",
     "@actions/github": "6.0.1",
     "lodash": "4.17.21",
-    "luxon": "3.6.1"
+    "luxon": "3.7.1"
   }
 }

From ef99ffe11d0c92806a6fd57328b8f252cd2849a5 Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Mon, 21 Jul 2025 10:27:20 -0400
Subject: [PATCH 384/707] fix: correct RFC count in the activity report. fixes
 #9140 (#9178)

---
 ietf/meeting/tests_utils.py                 | 43 ++++++++++++++++++++-
 ietf/meeting/utils.py                       | 15 +++----
 ietf/templates/meeting/activity_report.html |  4 +-
 3 files changed, 51 insertions(+), 11 deletions(-)

diff --git a/ietf/meeting/tests_utils.py b/ietf/meeting/tests_utils.py
index 11ea63df4f..391e017d68 100644
--- a/ietf/meeting/tests_utils.py
+++ b/ietf/meeting/tests_utils.py
@@ -12,12 +12,19 @@
 from django.http import HttpResponse, JsonResponse
 from ietf.meeting.factories import MeetingFactory, RegistrationFactory, RegistrationTicketFactory
 from ietf.meeting.models import Registration
-from ietf.meeting.utils import (process_single_registration,
-    get_registration_data, sync_registration_data, fetch_attendance_from_meetings)
+from ietf.meeting.utils import (
+    process_single_registration,
+    get_registration_data, 
+    sync_registration_data, 
+    fetch_attendance_from_meetings, 
+    get_activity_stats
+)
 from ietf.nomcom.models import Volunteer
 from ietf.nomcom.factories import NomComFactory, nomcom_kwargs_for_year
 from ietf.person.factories import PersonFactory
 from ietf.utils.test_utils import TestCase
+from ietf.meeting.test_data import make_meeting_test_data
+from ietf.doc.factories import NewRevisionDocEventFactory, DocEventFactory
 
 
 class JsonResponseWithJson(JsonResponse):
@@ -25,6 +32,38 @@ def json(self):
         return json.loads(self.content)
 
 
+class ActivityStatsTests(TestCase):
+
+    def test_activity_stats(self):
+        utc = datetime.timezone.utc
+        make_meeting_test_data()
+        sdate = datetime.date(2016,4,3)
+        edate = datetime.date(2016,7,14)
+        MeetingFactory(type_id='ietf', date=sdate, number="96")
+        MeetingFactory(type_id='ietf', date=edate, number="97")
+
+        NewRevisionDocEventFactory(time=datetime.datetime(2016,4,5,12,0,0,0,tzinfo=utc))
+        NewRevisionDocEventFactory(time=datetime.datetime(2016,4,6,12,0,0,0,tzinfo=utc))
+        NewRevisionDocEventFactory(time=datetime.datetime(2016,4,7,12,0,0,0,tzinfo=utc))
+
+        NewRevisionDocEventFactory(time=datetime.datetime(2016,6,30,12,0,0,0,tzinfo=utc))
+        NewRevisionDocEventFactory(time=datetime.datetime(2016,6,30,13,0,0,0,tzinfo=utc))
+
+        DocEventFactory(doc__std_level_id="ps", doc__type_id="rfc", type="published_rfc", time=datetime.datetime(2016,4,5,12,0,0,0,tzinfo=utc))
+        DocEventFactory(doc__std_level_id="bcp", doc__type_id="rfc", type="published_rfc", time=datetime.datetime(2016,4,6,12,0,0,0,tzinfo=utc))
+        DocEventFactory(doc__std_level_id="inf", doc__type_id="rfc", type="published_rfc", time=datetime.datetime(2016,4,7,12,0,0,0,tzinfo=utc))
+        DocEventFactory(doc__std_level_id="exp", doc__type_id="rfc", type="published_rfc", time=datetime.datetime(2016,4,8,12,0,0,0,tzinfo=utc))
+
+        data = get_activity_stats(sdate, edate)
+        self.assertEqual(data['new_drafts_count'], len(data['new_docs']))
+        self.assertEqual(data['ffw_new_count'], 2)
+        self.assertEqual(data['ffw_new_percent'], '40%')
+        rfc_count = 0
+        for c in data['counts']:
+            rfc_count += data['counts'].get(c)
+        self.assertEqual(rfc_count, len(data['rfcs']))
+
+
 class GetRegistrationsTests(TestCase):
 
     @patch('ietf.meeting.utils.requests.get')
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index 1047783a0c..f6925269aa 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -949,13 +949,14 @@ def get_activity_stats(sdate, edate):
     data['ffw_update_count'] = ffw_update_count
     data['ffw_update_percent'] = ffw_update_percent
 
-    rfcs = events.filter(type='published_rfc')
-    data['rfcs'] = rfcs.select_related('doc').select_related('doc__group').select_related('doc__intended_std_level')
-
-    data['counts'] = {'std': rfcs.filter(doc__intended_std_level__in=('ps', 'ds', 'std')).count(),
-                      'bcp': rfcs.filter(doc__intended_std_level='bcp').count(),
-                      'exp': rfcs.filter(doc__intended_std_level='exp').count(),
-                      'inf': rfcs.filter(doc__intended_std_level='inf').count()}
+    rfcs_events = DocEvent.objects.filter(doc__type='rfc', time__gte=sdatetime, time__lt=edatetime)
+    rfcs = rfcs_events.filter(type='published_rfc')
+    data['rfcs'] = rfcs.select_related('doc').select_related('doc__group').select_related('doc__std_level')
+
+    data['counts'] = {'std': rfcs.filter(doc__std_level__in=('ps', 'ds', 'std')).count(),
+                      'bcp': rfcs.filter(doc__std_level='bcp').count(),
+                      'exp': rfcs.filter(doc__std_level='exp').count(),
+                      'inf': rfcs.filter(doc__std_level='inf').count()}
 
     data['new_groups'] = Group.objects.filter(
         type='wg',
diff --git a/ietf/templates/meeting/activity_report.html b/ietf/templates/meeting/activity_report.html
index 0de8b88c65..dbfc717dab 100644
--- a/ietf/templates/meeting/activity_report.html
+++ b/ietf/templates/meeting/activity_report.html
@@ -40,14 +40,14 @@ <h3 class="mt-3">{{ rfcs.count }} RFCs published this period</h3>
                 <th scope="col" data-sort="title">Title</th>
             </tr>
         </thead>
-        {% if rfcs %}
+        {% if rfcs|length > 0 %}
             <tbody>
                 {% for rfc in rfcs %}
                     <tr>
                         <td class="text-nowrap">
                             <a href="{{ rfc.doc.get_absolute_url }}">{{ rfc.doc.name|prettystdname }}</a>
                         </td>
-                        <td class="text-nowrap">{{ rfc.doc.intended_std_level.name }}</td>
+                        <td class="text-nowrap">{{ rfc.doc.std_level.name }}</td>
                         <td>
                             <a href="{{ rfc.doc.group.about_url }}">{{ rfc.doc.group.acronym }}</a>
                         </td>

From 8c1d881ff0ce1d10d02b18984fdc869fbaca865d Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 21 Jul 2025 16:32:11 +0200
Subject: [PATCH 385/707] fix: workaround magic false positives (#9207)

* fix: workaround magic false positives

* chore: ruff
---
 ietf/utils/mime.py | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/ietf/utils/mime.py b/ietf/utils/mime.py
index ab21cfe5c6..1f9b75b4df 100644
--- a/ietf/utils/mime.py
+++ b/ietf/utils/mime.py
@@ -5,6 +5,7 @@
 import magic
 import re
 
+
 def get_mime_type(content):
     # try to fixup encoding
     if hasattr(magic, "open"):
@@ -13,15 +14,17 @@ def get_mime_type(content):
         filetype = m.buffer(content)
     else:
         m = magic.Magic()
-        m.cookie = magic.magic_open(magic.MAGIC_NONE | magic.MAGIC_MIME | magic.MAGIC_MIME_ENCODING)
+        m.cookie = magic.magic_open(
+            magic.MAGIC_NONE | magic.MAGIC_MIME | magic.MAGIC_MIME_ENCODING
+        )
         magic.magic_load(m.cookie, None)
         filetype = m.from_buffer(content)
     # Work around silliness in libmagic on OpenSUSE 15.1
-    filetype = filetype.replace('text/x-Algol68;', 'text/plain;')
-    if ';' in filetype and 'charset=' in filetype:
-        mimetype, charset = re.split('; *charset=', filetype)
+    filetype = filetype.replace("text/x-Algol68;", "text/plain;")
+    filetype = filetype.replace("application/vnd.hp-HPGL;", "text/plain;")
+    if ";" in filetype and "charset=" in filetype:
+        mimetype, charset = re.split("; *charset=", filetype)
     else:
-        mimetype = re.split(';', filetype)[0]
-        charset = 'utf-8'
+        mimetype = re.split(";", filetype)[0]
+        charset = "utf-8"
     return mimetype, charset
-

From d2b70aea3efbbc847111ed493d01c403186d30af Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 21 Jul 2025 16:49:43 +0200
Subject: [PATCH 386/707] chore: move IESG menu item deeper into the menu
 structure (#9172)

---
 ietf/templates/base/menu.html    | 1 -
 ietf/templates/base/menu_wg.html | 3 +++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 695445c578..bd8c0bf3cd 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -19,7 +19,6 @@
             <span class="fw-bolder">Groups</span>
         </li>
     {% endif %}
-    <li><a class="dropdown-item" href="{% url "ietf.group.views.group_about" acronym="iesg" %}">IESG</a></li>
     {% if flavor == 'top' %}<li class="dropdown-header">By area/parent</li>{% endif %}
     {% wg_menu flavor %}
     <li class="dropend">
diff --git a/ietf/templates/base/menu_wg.html b/ietf/templates/base/menu_wg.html
index 09fef8c7b0..5ca1be8a4e 100644
--- a/ietf/templates/base/menu_wg.html
+++ b/ietf/templates/base/menu_wg.html
@@ -2,6 +2,9 @@
 {% load origin %}
 {% origin %}
 {% for p in parents %}
+    {% if p.acronym == "iab" %}
+        <li><a class="dropdown-item" href="{% url "ietf.group.views.group_about" acronym="iesg" %}">IESG</a></li>
+    {% endif%}
     <li class="dropend group-menu group-parent-{{ p.id }}">
         <a class="dropdown-item dropdown-toggle {% if flavor != 'top' %}text-wrap{% endif %}"
            href="{{ p.menu_url }}">

From e043c85dc218da5802ee63adec634cba5c30cb4e Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Tue, 22 Jul 2025 04:11:50 +1200
Subject: [PATCH 387/707] fix: Community feed (#9184)

* style: Apply black / ruff formatting

* fix: Community feed
---
 ietf/community/tests.py           | 416 ++++++++++++++++++++++--------
 ietf/community/views.py           | 259 ++++++++++++-------
 ietf/templates/community/atom.xml |   8 +-
 3 files changed, 477 insertions(+), 206 deletions(-)

diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 9bd7789958..1255ba46eb 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -6,13 +6,20 @@
 
 from django.test.utils import override_settings
 from django.urls import reverse as urlreverse
+from lxml import etree
 
-import debug                            # pyflakes:ignore
+import debug  # pyflakes:ignore
 
 from ietf.community.models import CommunityList, SearchRule, EmailSubscription
 from ietf.community.signals import notify_of_event
-from ietf.community.utils import docs_matching_community_list_rule, community_list_rules_matching_doc
-from ietf.community.utils import reset_name_contains_index_for_rule, notify_event_to_subscribers
+from ietf.community.utils import (
+    docs_matching_community_list_rule,
+    community_list_rules_matching_doc,
+)
+from ietf.community.utils import (
+    reset_name_contains_index_for_rule,
+    notify_event_to_subscribers,
+)
 from ietf.community.tasks import notify_event_to_subscribers_task
 import ietf.community.views
 from ietf.group.models import Group
@@ -26,35 +33,80 @@
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.person.factories import PersonFactory, EmailFactory, AliasFactory
 
+
 class CommunityListTests(TestCase):
     def test_rule_matching(self):
-        plain = PersonFactory(user__username='plain')
-        ad = Person.objects.get(user__username='ad')
+        plain = PersonFactory(user__username="plain")
+        ad = Person.objects.get(user__username="ad")
         draft = WgDraftFactory(
-            group__parent=Group.objects.get(acronym='farfut' ),
+            group__parent=Group.objects.get(acronym="farfut"),
             authors=[ad],
             ad=ad,
             shepherd=plain.email(),
-            states=[('draft-iesg','lc'),('draft','active')],
+            states=[("draft-iesg", "lc"), ("draft", "active")],
         )
 
         clist = CommunityList.objects.create(person=plain)
 
-        rule_group = SearchRule.objects.create(rule_type="group", group=draft.group, state=State.objects.get(type="draft", slug="active"), community_list=clist)
-        rule_group_rfc = SearchRule.objects.create(rule_type="group_rfc", group=draft.group, state=State.objects.get(type="rfc", slug="published"), community_list=clist)
-        rule_area = SearchRule.objects.create(rule_type="area", group=draft.group.parent, state=State.objects.get(type="draft", slug="active"), community_list=clist)
+        rule_group = SearchRule.objects.create(
+            rule_type="group",
+            group=draft.group,
+            state=State.objects.get(type="draft", slug="active"),
+            community_list=clist,
+        )
+        rule_group_rfc = SearchRule.objects.create(
+            rule_type="group_rfc",
+            group=draft.group,
+            state=State.objects.get(type="rfc", slug="published"),
+            community_list=clist,
+        )
+        rule_area = SearchRule.objects.create(
+            rule_type="area",
+            group=draft.group.parent,
+            state=State.objects.get(type="draft", slug="active"),
+            community_list=clist,
+        )
 
-        rule_state_iesg = SearchRule.objects.create(rule_type="state_iesg", state=State.objects.get(type="draft-iesg", slug="lc"), community_list=clist)
+        rule_state_iesg = SearchRule.objects.create(
+            rule_type="state_iesg",
+            state=State.objects.get(type="draft-iesg", slug="lc"),
+            community_list=clist,
+        )
 
-        rule_author = SearchRule.objects.create(rule_type="author", state=State.objects.get(type="draft", slug="active"), person=Person.objects.filter(documentauthor__document=draft).first(), community_list=clist)
+        rule_author = SearchRule.objects.create(
+            rule_type="author",
+            state=State.objects.get(type="draft", slug="active"),
+            person=Person.objects.filter(documentauthor__document=draft).first(),
+            community_list=clist,
+        )
 
-        rule_ad = SearchRule.objects.create(rule_type="ad", state=State.objects.get(type="draft", slug="active"), person=draft.ad, community_list=clist)
+        rule_ad = SearchRule.objects.create(
+            rule_type="ad",
+            state=State.objects.get(type="draft", slug="active"),
+            person=draft.ad,
+            community_list=clist,
+        )
 
-        rule_shepherd = SearchRule.objects.create(rule_type="shepherd", state=State.objects.get(type="draft", slug="active"), person=draft.shepherd.person, community_list=clist)
+        rule_shepherd = SearchRule.objects.create(
+            rule_type="shepherd",
+            state=State.objects.get(type="draft", slug="active"),
+            person=draft.shepherd.person,
+            community_list=clist,
+        )
 
-        rule_group_exp = SearchRule.objects.create(rule_type="group_exp", group=draft.group, state=State.objects.get(type="draft", slug="expired"), community_list=clist)
+        rule_group_exp = SearchRule.objects.create(
+            rule_type="group_exp",
+            group=draft.group,
+            state=State.objects.get(type="draft", slug="expired"),
+            community_list=clist,
+        )
 
-        rule_name_contains = SearchRule.objects.create(rule_type="name_contains", state=State.objects.get(type="draft", slug="active"), text="draft-.*" + "-".join(draft.name.split("-")[2:]), community_list=clist)
+        rule_name_contains = SearchRule.objects.create(
+            rule_type="name_contains",
+            state=State.objects.get(type="draft", slug="active"),
+            text="draft-.*" + "-".join(draft.name.split("-")[2:]),
+            community_list=clist,
+        )
         reset_name_contains_index_for_rule(rule_name_contains)
 
         # doc -> rules
@@ -71,29 +123,44 @@ def test_rule_matching(self):
 
         # rule -> docs
         self.assertTrue(draft in list(docs_matching_community_list_rule(rule_group)))
-        self.assertTrue(draft not in list(docs_matching_community_list_rule(rule_group_rfc)))
+        self.assertTrue(
+            draft not in list(docs_matching_community_list_rule(rule_group_rfc))
+        )
         self.assertTrue(draft in list(docs_matching_community_list_rule(rule_area)))
-        self.assertTrue(draft in list(docs_matching_community_list_rule(rule_state_iesg)))
+        self.assertTrue(
+            draft in list(docs_matching_community_list_rule(rule_state_iesg))
+        )
         self.assertTrue(draft in list(docs_matching_community_list_rule(rule_author)))
         self.assertTrue(draft in list(docs_matching_community_list_rule(rule_ad)))
         self.assertTrue(draft in list(docs_matching_community_list_rule(rule_shepherd)))
-        self.assertTrue(draft in list(docs_matching_community_list_rule(rule_name_contains)))
-        self.assertTrue(draft not in list(docs_matching_community_list_rule(rule_group_exp)))
+        self.assertTrue(
+            draft in list(docs_matching_community_list_rule(rule_name_contains))
+        )
+        self.assertTrue(
+            draft not in list(docs_matching_community_list_rule(rule_group_exp))
+        )
 
-        draft.set_state(State.objects.get(type='draft', slug='expired'))
+        draft.set_state(State.objects.get(type="draft", slug="expired"))
 
         # doc -> rules
         matching_rules = list(community_list_rules_matching_doc(draft))
         self.assertTrue(rule_group_exp in matching_rules)
 
         # rule -> docs
-        self.assertTrue(draft in list(docs_matching_community_list_rule(rule_group_exp)))
+        self.assertTrue(
+            draft in list(docs_matching_community_list_rule(rule_group_exp))
+        )
 
     def test_view_list_duplicates(self):
-        person = PersonFactory(name="John Q. Public", user__username="bazquux@example.com")
+        person = PersonFactory(
+            name="John Q. Public", user__username="bazquux@example.com"
+        )
         PersonFactory(name="John Q. Public", user__username="foobar@example.com")
 
-        url = urlreverse(ietf.community.views.view_list, kwargs={ "email_or_name": person.plain_name()})
+        url = urlreverse(
+            ietf.community.views.view_list,
+            kwargs={"email_or_name": person.plain_name()},
+        )
         r = self.client.get(url)
         self.assertEqual(r.status_code, 404)
 
@@ -104,20 +171,23 @@ def complex_person(self, *args, **kwargs):
         return person
 
     def email_or_name_set(self, person):
-        return [e for e in Email.objects.filter(person=person)] + \
-               [a for a in Alias.objects.filter(person=person)]
+        return [e for e in Email.objects.filter(person=person)] + [
+            a for a in Alias.objects.filter(person=person)
+        ]
 
     def do_view_list_test(self, person):
         draft = WgDraftFactory()
         # without list
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.view_list, kwargs={ "email_or_name": id })
+            url = urlreverse(
+                ietf.community.views.view_list, kwargs={"email_or_name": id}
+            )
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
 
         # with list
         clist = CommunityList.objects.create(person=person)
-        if not draft in clist.added_docs.all():
+        if draft not in clist.added_docs.all():
             clist.added_docs.add(draft)
         SearchRule.objects.create(
             community_list=clist,
@@ -126,31 +196,37 @@ def do_view_list_test(self, person):
             text="test",
         )
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.view_list, kwargs={ "email_or_name": id })
+            url = urlreverse(
+                ietf.community.views.view_list, kwargs={"email_or_name": id}
+            )
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             self.assertContains(r, draft.name)
 
     def test_view_list(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         self.do_view_list_test(person)
-        
+
     def test_view_list_without_active_email(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         person.email_set.update(active=False)
         self.do_view_list_test(person)
 
     def test_manage_personal_list(self):
-        person = self.complex_person(user__username='plain')
-        ad = Person.objects.get(user__username='ad')
+        person = self.complex_person(user__username="plain")
+        ad = Person.objects.get(user__username="ad")
         draft = WgDraftFactory(authors=[ad])
 
-        url = urlreverse(ietf.community.views.manage_list, kwargs={ "email_or_name": person.email() })
+        url = urlreverse(
+            ietf.community.views.manage_list, kwargs={"email_or_name": person.email()}
+        )
         login_testing_unauthorized(self, "plain", url)
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.manage_list, kwargs={ "email_or_name": id })
-            r = self.client.get(url, user='plain')
+            url = urlreverse(
+                ietf.community.views.manage_list, kwargs={"email_or_name": id}
+            )
+            r = self.client.get(url, user="plain")
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
 
             # We can't call post() with follow=True because that 404's if
@@ -158,11 +234,13 @@ def test_manage_personal_list(self):
             # apparently re-encodes the already-encoded url.
             def follow(r):
                 redirect_url = r.url or url
-                return self.client.get(redirect_url, user='plain')
+                return self.client.get(redirect_url, user="plain")
 
             # add document
-            self.assertContains(r, 'add_document')
-            r = self.client.post(url, {'action': 'add_documents', 'documents': draft.pk})
+            self.assertContains(r, "add_document")
+            r = self.client.post(
+                url, {"action": "add_documents", "documents": draft.pk}
+            )
             self.assertEqual(r.status_code, 302, msg=f"id='{id}', url='{url}'")
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertTrue(clist.added_docs.filter(pk=draft.pk))
@@ -170,8 +248,10 @@ def follow(r):
             self.assertContains(r, draft.name, status_code=200)
 
             # remove document
-            self.assertContains(r, 'remove_document_%s' % draft.pk)
-            r = self.client.post(url, {'action': 'remove_document', 'document': draft.pk})
+            self.assertContains(r, "remove_document_%s" % draft.pk)
+            r = self.client.post(
+                url, {"action": "remove_document", "document": draft.pk}
+            )
             self.assertEqual(r.status_code, 302, msg=f"id='{id}', url='{url}'")
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertTrue(not clist.added_docs.filter(pk=draft.pk))
@@ -179,23 +259,37 @@ def follow(r):
             self.assertNotContains(r, draft.name, status_code=200)
 
             # add rule
-            r = self.client.post(url, {
-                "action": "add_rule",
-                "rule_type": "author_rfc",
-                "author_rfc-person": Person.objects.filter(documentauthor__document=draft).first().pk,
-            "author_rfc-state": State.objects.get(type="rfc", slug="published").pk,
-            })
+            r = self.client.post(
+                url,
+                {
+                    "action": "add_rule",
+                    "rule_type": "author_rfc",
+                    "author_rfc-person": Person.objects.filter(
+                        documentauthor__document=draft
+                    )
+                    .first()
+                    .pk,
+                    "author_rfc-state": State.objects.get(
+                        type="rfc", slug="published"
+                    ).pk,
+                },
+            )
             self.assertEqual(r.status_code, 302, msg=f"id='{id}', url='{url}'")
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertTrue(clist.searchrule_set.filter(rule_type="author_rfc"))
 
             # add name_contains rule
-            r = self.client.post(url, {
-                "action": "add_rule",
-                "rule_type": "name_contains",
-                "name_contains-text": "draft.*mars",
-                "name_contains-state": State.objects.get(type="draft", slug="active").pk,
-            })
+            r = self.client.post(
+                url,
+                {
+                    "action": "add_rule",
+                    "rule_type": "name_contains",
+                    "name_contains-text": "draft.*mars",
+                    "name_contains-state": State.objects.get(
+                        type="draft", slug="active"
+                    ).pk,
+                },
+            )
             self.assertEqual(r.status_code, 302, msg=f"id='{id}', url='{url}'")
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertTrue(clist.searchrule_set.filter(rule_type="name_contains"))
@@ -205,22 +299,31 @@ def follow(r):
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             rule = clist.searchrule_set.filter(rule_type="author_rfc").first()
             q = PyQuery(r.content)
-            self.assertEqual(len(q('#r%s' % rule.pk)), 1)
+            self.assertEqual(len(q("#r%s" % rule.pk)), 1)
 
             # remove rule
-            r = self.client.post(url, {
-                "action": "remove_rule",
-                "rule": rule.pk,
-            })
+            r = self.client.post(
+                url,
+                {
+                    "action": "remove_rule",
+                    "rule": rule.pk,
+                },
+            )
 
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertTrue(not clist.searchrule_set.filter(rule_type="author_rfc"))
 
     def test_manage_group_list(self):
-        draft = WgDraftFactory(group__acronym='mars')
-        RoleFactory(group__acronym='mars',name_id='chair',person=PersonFactory(user__username='marschairman'))
+        draft = WgDraftFactory(group__acronym="mars")
+        RoleFactory(
+            group__acronym="mars",
+            name_id="chair",
+            person=PersonFactory(user__username="marschairman"),
+        )
 
-        url = urlreverse(ietf.community.views.manage_list, kwargs={ "acronym": draft.group.acronym })
+        url = urlreverse(
+            ietf.community.views.manage_list, kwargs={"acronym": draft.group.acronym}
+        )
         setup_default_community_list_for_group(draft.group)
         login_testing_unauthorized(self, "marschairman", url)
 
@@ -229,27 +332,41 @@ def test_manage_group_list(self):
         self.assertEqual(r.status_code, 200)
 
         # Verify GET also works with non-WG and RG groups
-        for gtype in ['area','program']:
+        for gtype in ["area", "program"]:
             g = GroupFactory.create(type_id=gtype)
             # make sure the group's features have been initialized to improve coverage
-            _ = g.features # pyflakes:ignore
+            _ = g.features  # pyflakes:ignore
             p = PersonFactory()
-            g.role_set.create(name_id={'area':'ad','program':'lead'}[gtype],person=p, email=p.email())
-            url = urlreverse(ietf.community.views.manage_list, kwargs={ "acronym": g.acronym })
+            g.role_set.create(
+                name_id={"area": "ad", "program": "lead"}[gtype],
+                person=p,
+                email=p.email(),
+            )
+            url = urlreverse(
+                ietf.community.views.manage_list, kwargs={"acronym": g.acronym}
+            )
             setup_default_community_list_for_group(g)
-            self.client.login(username=p.user.username,password=p.user.username+"+password")
+            self.client.login(
+                username=p.user.username, password=p.user.username + "+password"
+            )
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200)
 
     def test_track_untrack_document(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         draft = WgDraftFactory()
 
-        url = urlreverse(ietf.community.views.track_document, kwargs={ "email_or_name": person.email(), "name": draft.name })
+        url = urlreverse(
+            ietf.community.views.track_document,
+            kwargs={"email_or_name": person.email(), "name": draft.name},
+        )
         login_testing_unauthorized(self, "plain", url)
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.track_document, kwargs={ "email_or_name": id, "name": draft.name })
+            url = urlreverse(
+                ietf.community.views.track_document,
+                kwargs={"email_or_name": id, "name": draft.name},
+            )
 
             # track
             r = self.client.get(url)
@@ -261,7 +378,10 @@ def test_track_untrack_document(self):
             self.assertEqual(list(clist.added_docs.all()), [draft])
 
             # untrack
-            url = urlreverse(ietf.community.views.untrack_document, kwargs={ "email_or_name": id, "name": draft.name })
+            url = urlreverse(
+                ietf.community.views.untrack_document,
+                kwargs={"email_or_name": id, "name": draft.name},
+            )
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
 
@@ -271,36 +391,47 @@ def test_track_untrack_document(self):
             self.assertEqual(list(clist.added_docs.all()), [])
 
     def test_track_untrack_document_through_ajax(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         draft = WgDraftFactory()
 
-        url = urlreverse(ietf.community.views.track_document, kwargs={ "email_or_name": person.email(), "name": draft.name })
+        url = urlreverse(
+            ietf.community.views.track_document,
+            kwargs={"email_or_name": person.email(), "name": draft.name},
+        )
         login_testing_unauthorized(self, "plain", url)
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.track_document, kwargs={ "email_or_name": id, "name": draft.name })
+            url = urlreverse(
+                ietf.community.views.track_document,
+                kwargs={"email_or_name": id, "name": draft.name},
+            )
 
             # track
-            r = self.client.post(url, HTTP_X_REQUESTED_WITH='XMLHttpRequest')
+            r = self.client.post(url, HTTP_X_REQUESTED_WITH="XMLHttpRequest")
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             self.assertEqual(r.json()["success"], True)
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertEqual(list(clist.added_docs.all()), [draft])
 
             # untrack
-            url = urlreverse(ietf.community.views.untrack_document, kwargs={ "email_or_name": id, "name": draft.name })
-            r = self.client.post(url, HTTP_X_REQUESTED_WITH='XMLHttpRequest')
+            url = urlreverse(
+                ietf.community.views.untrack_document,
+                kwargs={"email_or_name": id, "name": draft.name},
+            )
+            r = self.client.post(url, HTTP_X_REQUESTED_WITH="XMLHttpRequest")
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             self.assertEqual(r.json()["success"], True)
             clist = CommunityList.objects.get(person__user__username="plain")
             self.assertEqual(list(clist.added_docs.all()), [])
 
     def test_csv(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         draft = WgDraftFactory()
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.export_to_csv, kwargs={ "email_or_name": id })
+            url = urlreverse(
+                ietf.community.views.export_to_csv, kwargs={"email_or_name": id}
+            )
 
             # without list
             r = self.client.get(url)
@@ -308,7 +439,7 @@ def test_csv(self):
 
             # with list
             clist = CommunityList.objects.create(person=person)
-            if not draft in clist.added_docs.all():
+            if draft not in clist.added_docs.all():
                 clist.added_docs.add(draft)
             SearchRule.objects.create(
                 community_list=clist,
@@ -324,7 +455,9 @@ def test_csv(self):
     def test_csv_for_group(self):
         draft = WgDraftFactory()
 
-        url = urlreverse(ietf.community.views.export_to_csv, kwargs={ "acronym": draft.group.acronym })
+        url = urlreverse(
+            ietf.community.views.export_to_csv, kwargs={"acronym": draft.group.acronym}
+        )
 
         setup_default_community_list_for_group(draft.group)
 
@@ -333,11 +466,11 @@ def test_csv_for_group(self):
         self.assertEqual(r.status_code, 200)
 
     def test_feed(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         draft = WgDraftFactory()
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.feed, kwargs={ "email_or_name": id })
+            url = urlreverse(ietf.community.views.feed, kwargs={"email_or_name": id})
 
             # without list
             r = self.client.get(url)
@@ -345,7 +478,7 @@ def test_feed(self):
 
             # with list
             clist = CommunityList.objects.create(person=person)
-            if not draft in clist.added_docs.all():
+            if draft not in clist.added_docs.all():
                 clist.added_docs.add(draft)
             SearchRule.objects.create(
                 community_list=clist,
@@ -357,31 +490,53 @@ def test_feed(self):
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
             self.assertContains(r, draft.name)
 
+            # test atom xml
+            xml = etree.fromstring(r.content)
+            ns = {"atom": "http://www.w3.org/2005/Atom"}
+            updated = xml.xpath("/atom:feed/atom:updated", namespaces=ns)[0].text
+            entries = xml.xpath("/atom:feed/atom:entry", namespaces=ns)
+            self.assertIn("+00:00", updated)  # RFC 3339 compatible UTC TZ
+            for entry in entries:
+                updated = entry.xpath("atom:updated", namespaces=ns)[0].text
+                published = entry.xpath("atom:published", namespaces=ns)[0].text
+                entry_id = entry.xpath("atom:id", namespaces=ns)[0].text
+                self.assertIn("+00:00", updated)
+                self.assertIn("+00:00", published)
+                self.assertIn(
+                    "urn:datatracker-ietf-org:event:", entry_id
+                )  # atom:entry:id must be a valid URN
+
             # only significant
             r = self.client.get(url + "?significant=1")
             self.assertEqual(r.status_code, 200, msg=f"id='{id}', url='{url}'")
-            self.assertNotContains(r, '<entry>')
+            self.assertNotContains(r, "<entry>")
 
     def test_feed_for_group(self):
         draft = WgDraftFactory()
 
-        url = urlreverse(ietf.community.views.feed, kwargs={ "acronym": draft.group.acronym })
+        url = urlreverse(
+            ietf.community.views.feed, kwargs={"acronym": draft.group.acronym}
+        )
 
         setup_default_community_list_for_group(draft.group)
 
         # test GET, rest is tested with personal list
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-        
+
     def test_subscription(self):
-        person = self.complex_person(user__username='plain')
+        person = self.complex_person(user__username="plain")
         draft = WgDraftFactory()
 
-        url = urlreverse(ietf.community.views.subscription, kwargs={ "email_or_name": person.email() })
+        url = urlreverse(
+            ietf.community.views.subscription, kwargs={"email_or_name": person.email()}
+        )
         login_testing_unauthorized(self, "plain", url)
 
         for id in self.email_or_name_set(person):
-            url = urlreverse(ietf.community.views.subscription, kwargs={ "email_or_name": id })
+            url = urlreverse(
+                ietf.community.views.subscription, kwargs={"email_or_name": id}
+            )
 
             # subscription without list
             r = self.client.get(url)
@@ -389,7 +544,7 @@ def test_subscription(self):
 
         # subscription with list
         clist = CommunityList.objects.create(person=person)
-        if not draft in clist.added_docs.all():
+        if draft not in clist.added_docs.all():
             clist.added_docs.add(draft)
         SearchRule.objects.create(
             community_list=clist,
@@ -399,29 +554,49 @@ def test_subscription(self):
         )
 
         for email in Email.objects.filter(person=person):
-            url = urlreverse(ietf.community.views.subscription, kwargs={ "email_or_name": email })
+            url = urlreverse(
+                ietf.community.views.subscription, kwargs={"email_or_name": email}
+            )
 
             r = self.client.get(url)
             self.assertEqual(r.status_code, 200)
 
             # subscribe
-            r = self.client.post(url, { "email": email.pk, "notify_on": "significant", "action": "subscribe" })
+            r = self.client.post(
+                url,
+                {"email": email.pk, "notify_on": "significant", "action": "subscribe"},
+            )
             self.assertEqual(r.status_code, 302)
 
-            subscription = EmailSubscription.objects.filter(community_list=clist, email=email, notify_on="significant").first()
+            subscription = EmailSubscription.objects.filter(
+                community_list=clist, email=email, notify_on="significant"
+            ).first()
 
             self.assertTrue(subscription)
 
             # delete subscription
-            r = self.client.post(url, { "subscription_id": subscription.pk, "action": "unsubscribe" })
+            r = self.client.post(
+                url, {"subscription_id": subscription.pk, "action": "unsubscribe"}
+            )
             self.assertEqual(r.status_code, 302)
-            self.assertEqual(EmailSubscription.objects.filter(community_list=clist, email=email, notify_on="significant").count(), 0)
+            self.assertEqual(
+                EmailSubscription.objects.filter(
+                    community_list=clist, email=email, notify_on="significant"
+                ).count(),
+                0,
+            )
 
     def test_subscription_for_group(self):
-        draft = WgDraftFactory(group__acronym='mars')
-        RoleFactory(group__acronym='mars',name_id='chair',person=PersonFactory(user__username='marschairman'))
+        draft = WgDraftFactory(group__acronym="mars")
+        RoleFactory(
+            group__acronym="mars",
+            name_id="chair",
+            person=PersonFactory(user__username="marschairman"),
+        )
 
-        url = urlreverse(ietf.community.views.subscription, kwargs={ "acronym": draft.group.acronym })
+        url = urlreverse(
+            ietf.community.views.subscription, kwargs={"acronym": draft.group.acronym}
+        )
 
         setup_default_community_list_for_group(draft.group)
 
@@ -434,7 +609,7 @@ def test_subscription_for_group(self):
     @mock.patch("ietf.community.signals.notify_of_event")
     def test_notification_signal_receiver(self, mock_notify_of_event):
         """Saving a newly created DocEvent should notify subscribers
-        
+
         This implicitly tests that notify_of_event_receiver is hooked up to the post_save signal.
         """
         # Arbitrary model that's not a DocEvent
@@ -442,19 +617,26 @@ def test_notification_signal_receiver(self, mock_notify_of_event):
         mock_notify_of_event.reset_mock()  # clear any calls that resulted from the factories
         person.save()
         self.assertFalse(mock_notify_of_event.called)
-    
+
         # build a DocEvent that is not yet persisted
         doc = DocumentFactory()
         event = DocEventFactory.build(by=person, doc=doc)  # builds but does not save...
         mock_notify_of_event.reset_mock()  # clear any calls that resulted from the factories
         event.save()
-        self.assertEqual(mock_notify_of_event.call_count, 1, "notify_task should be run on creation of DocEvent")
+        self.assertEqual(
+            mock_notify_of_event.call_count,
+            1,
+            "notify_task should be run on creation of DocEvent",
+        )
         self.assertEqual(mock_notify_of_event.call_args, mock.call(event))
 
-        # save the existing DocEvent and see that no notification is sent    
+        # save the existing DocEvent and see that no notification is sent
         mock_notify_of_event.reset_mock()
         event.save()
-        self.assertFalse(mock_notify_of_event.called, "notify_task should not be run save of on existing DocEvent")
+        self.assertFalse(
+            mock_notify_of_event.called,
+            "notify_task should not be run save of on existing DocEvent",
+        )
 
     # Mock out the on_commit call so we can tell whether the task was actually queued
     @mock.patch("ietf.submit.views.transaction.on_commit", side_effect=lambda x: x())
@@ -468,7 +650,10 @@ def test_notify_of_event(self, mock_notify_task, mock_on_commit):
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             notify_of_event(event)
-        self.assertTrue(mock_notify_task.delay.called, "notify_task should run for a DocEvent on a draft")
+        self.assertTrue(
+            mock_notify_task.delay.called,
+            "notify_task should run for a DocEvent on a draft",
+        )
         mock_notify_task.reset_mock()
 
         event.skip_community_list_notification = True
@@ -476,22 +661,28 @@ def test_notify_of_event(self, mock_notify_task, mock_on_commit):
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             notify_of_event(event)
-        self.assertFalse(mock_notify_task.delay.called, "notify_task should not run when skip_community_list_notification is set")
+        self.assertFalse(
+            mock_notify_task.delay.called,
+            "notify_task should not run when skip_community_list_notification is set",
+        )
 
         event = DocEventFactory.build(by=person, doc=DocumentFactory(type_id="rfc"))
         # be careful overriding SERVER_MODE - we do it here because the method
         # under test does not make this call when in "test" mode
         with override_settings(SERVER_MODE="not-test"):
             notify_of_event(event)
-        self.assertFalse(mock_notify_task.delay.called, "notify_task should not run on a document with type 'rfc'")
+        self.assertFalse(
+            mock_notify_task.delay.called,
+            "notify_task should not run on a document with type 'rfc'",
+        )
 
     @mock.patch("ietf.utils.mail.send_mail_text")
     def test_notify_event_to_subscribers(self, mock_send_mail_text):
-        person = PersonFactory(user__username='plain')
+        person = PersonFactory(user__username="plain")
         draft = WgDraftFactory()
 
         clist = CommunityList.objects.create(person=person)
-        if not draft in clist.added_docs.all():
+        if draft not in clist.added_docs.all():
             clist.added_docs.add(draft)
 
         sub_to_significant = EmailSubscription.objects.create(
@@ -522,11 +713,13 @@ def test_notify_event_to_subscribers(self, mock_send_mail_text):
         mock_send_mail_text.reset_mock()
         notify_event_to_subscribers(event)
         self.assertEqual(mock_send_mail_text.call_count, 2)
-        addresses = [call_args[0][1] for call_args in mock_send_mail_text.call_args_list]
+        addresses = [
+            call_args[0][1] for call_args in mock_send_mail_text.call_args_list
+        ]
         subjects = {call_args[0][3] for call_args in mock_send_mail_text.call_args_list}
         contents = {call_args[0][4] for call_args in mock_send_mail_text.call_args_list}
         self.assertCountEqual(
-            addresses, 
+            addresses,
             [sub_to_significant.email.address, sub_to_all.email.address],
         )
         self.assertEqual(len(subjects), 1)
@@ -545,4 +738,3 @@ def test_notify_event_to_subscribers_task(self, mock_notify):
         d.delete()
         notify_event_to_subscribers_task(event_id=d.pk)
         self.assertFalse(mock_notify.called)
-
diff --git a/ietf/community/views.py b/ietf/community/views.py
index 923ec556f3..08b1c24fe5 100644
--- a/ietf/community/views.py
+++ b/ietf/community/views.py
@@ -13,13 +13,24 @@
 from django.utils import timezone
 from django.utils.html import strip_tags
 
-import debug                            # pyflakes:ignore
+import debug  # pyflakes:ignore
 
 from ietf.community.models import CommunityList, EmailSubscription, SearchRule
-from ietf.community.forms import SearchRuleTypeForm, SearchRuleForm, AddDocumentsForm, SubscriptionForm
+from ietf.community.forms import (
+    SearchRuleTypeForm,
+    SearchRuleForm,
+    AddDocumentsForm,
+    SubscriptionForm,
+)
 from ietf.community.utils import can_manage_community_list
-from ietf.community.utils import docs_tracked_by_community_list, docs_matching_community_list_rule
-from ietf.community.utils import states_of_significant_change, reset_name_contains_index_for_rule
+from ietf.community.utils import (
+    docs_tracked_by_community_list,
+    docs_matching_community_list_rule,
+)
+from ietf.community.utils import (
+    states_of_significant_change,
+    reset_name_contains_index_for_rule,
+)
 from ietf.group.models import Group
 from ietf.doc.models import DocEvent, Document
 from ietf.doc.utils_search import prepare_document_table
@@ -31,43 +42,61 @@
 
 def lookup_community_list(request, email_or_name=None, acronym=None):
     """Finds a CommunityList for a person or group
-    
+
     Instantiates an unsaved CommunityList if one is not found.
-    
+
     If the person or group cannot be found and uniquely identified, raises an Http404 exception
     """
     assert email_or_name or acronym
 
     if acronym:
         group = get_object_or_404(Group, acronym=acronym)
-        clist = CommunityList.objects.filter(group=group).first() or CommunityList(group=group)
+        clist = CommunityList.objects.filter(group=group).first() or CommunityList(
+            group=group
+        )
     else:
         persons = lookup_persons(email_or_name)
         if len(persons) > 1:
-            if hasattr(request.user, 'person') and request.user.person in persons:
+            if hasattr(request.user, "person") and request.user.person in persons:
                 person = request.user.person
             else:
-                raise Http404(f"Unable to identify the CommunityList for {email_or_name}")
+                raise Http404(
+                    f"Unable to identify the CommunityList for {email_or_name}"
+                )
         else:
             person = persons[0]
-        clist = CommunityList.objects.filter(person=person).first() or CommunityList(person=person)
+        clist = CommunityList.objects.filter(person=person).first() or CommunityList(
+            person=person
+        )
     return clist
 
+
 def view_list(request, email_or_name=None):
     clist = lookup_community_list(request, email_or_name)  # may raise Http404
     docs = docs_tracked_by_community_list(clist)
     docs, meta = prepare_document_table(request, docs, request.GET)
 
-    subscribed = request.user.is_authenticated and (EmailSubscription.objects.none() if clist.pk is None else EmailSubscription.objects.filter(community_list=clist, email__person__user=request.user))
+    subscribed = request.user.is_authenticated and (
+        EmailSubscription.objects.none()
+        if clist.pk is None
+        else EmailSubscription.objects.filter(
+            community_list=clist, email__person__user=request.user
+        )
+    )
+
+    return render(
+        request,
+        "community/view_list.html",
+        {
+            "clist": clist,
+            "docs": docs,
+            "meta": meta,
+            "can_manage_list": can_manage_community_list(request.user, clist),
+            "subscribed": subscribed,
+            "email_or_name": email_or_name,
+        },
+    )
 
-    return render(request, 'community/view_list.html', {
-        'clist': clist,
-        'docs': docs,
-        'meta': meta,
-        'can_manage_list': can_manage_community_list(request.user, clist),
-        'subscribed': subscribed,
-        "email_or_name": email_or_name,
-    })
 
 @login_required
 @ignore_view_kwargs("group_type")
@@ -79,24 +108,24 @@ def manage_list(request, email_or_name=None, acronym=None):
     if not can_manage_community_list(request.user, clist):
         permission_denied(request, "You do not have permission to access this view")
 
-    action = request.POST.get('action')
+    action = request.POST.get("action")
 
-    if request.method == 'POST' and action == 'add_documents':
+    if request.method == "POST" and action == "add_documents":
         add_doc_form = AddDocumentsForm(request.POST)
         if add_doc_form.is_valid():
             if clist.pk is None:
                 clist.save()
 
-            for d in add_doc_form.cleaned_data['documents']:
-                if not d in clist.added_docs.all():
+            for d in add_doc_form.cleaned_data["documents"]:
+                if d not in clist.added_docs.all():
                     clist.added_docs.add(d)
 
             return HttpResponseRedirect("")
     else:
         add_doc_form = AddDocumentsForm()
 
-    if request.method == 'POST' and action == 'remove_document':
-        document_id = request.POST.get('document')
+    if request.method == "POST" and action == "remove_document":
+        document_id = request.POST.get("document")
         if clist.pk is not None and document_id:
             document = get_object_or_404(clist.added_docs, id=document_id)
             clist.added_docs.remove(document)
@@ -104,16 +133,16 @@ def manage_list(request, email_or_name=None, acronym=None):
             return HttpResponseRedirect("")
 
     rule_form = None
-    if request.method == 'POST' and action == 'add_rule':
+    if request.method == "POST" and action == "add_rule":
         rule_type_form = SearchRuleTypeForm(request.POST)
         if rule_type_form.is_valid():
-            rule_type = rule_type_form.cleaned_data['rule_type']
+            rule_type = rule_type_form.cleaned_data["rule_type"]
             if rule_type:
                 rule_form = SearchRuleForm(clist, rule_type, request.POST)
                 if rule_form.is_valid():
                     if clist.pk is None:
                         clist.save()
-    
+
                     rule = rule_form.save(commit=False)
                     rule.community_list = clist
                     rule.rule_type = rule_type
@@ -125,8 +154,8 @@ def manage_list(request, email_or_name=None, acronym=None):
     else:
         rule_type_form = SearchRuleTypeForm()
 
-    if request.method == 'POST' and action == 'remove_rule':
-        rule_pk = request.POST.get('rule')
+    if request.method == "POST" and action == "remove_rule":
+        rule_pk = request.POST.get("rule")
         if clist.pk is not None and rule_pk:
             rule = get_object_or_404(SearchRule, pk=rule_pk, community_list=clist)
             rule.delete()
@@ -137,23 +166,35 @@ def manage_list(request, email_or_name=None, acronym=None):
     for r in rules:
         r.matching_documents_count = docs_matching_community_list_rule(r).count()
 
-    empty_rule_forms = { rule_type: SearchRuleForm(clist, rule_type) for rule_type, _ in SearchRule.RULE_TYPES }
+    empty_rule_forms = {
+        rule_type: SearchRuleForm(clist, rule_type)
+        for rule_type, _ in SearchRule.RULE_TYPES
+    }
 
     total_count = docs_tracked_by_community_list(clist).count()
 
-    all_forms = [f for f in [rule_type_form, rule_form, add_doc_form, *empty_rule_forms.values()]
-                 if f is not None]
-    return render(request, 'community/manage_list.html', {
-        'clist': clist,
-        'rules': rules,
-        'individually_added': clist.added_docs.all() if clist.pk is not None else [],
-        'rule_type_form': rule_type_form,
-        'rule_form': rule_form,
-        'empty_rule_forms': empty_rule_forms,
-        'total_count': total_count,
-        'add_doc_form': add_doc_form,
-        'all_forms': all_forms,
-    })
+    all_forms = [
+        f
+        for f in [rule_type_form, rule_form, add_doc_form, *empty_rule_forms.values()]
+        if f is not None
+    ]
+    return render(
+        request,
+        "community/manage_list.html",
+        {
+            "clist": clist,
+            "rules": rules,
+            "individually_added": (
+                clist.added_docs.all() if clist.pk is not None else []
+            ),
+            "rule_type_form": rule_type_form,
+            "rule_form": rule_form,
+            "empty_rule_forms": empty_rule_forms,
+            "total_count": total_count,
+            "add_doc_form": add_doc_form,
+            "all_forms": all_forms,
+        },
+    )
 
 
 @login_required
@@ -161,24 +202,33 @@ def track_document(request, name, email_or_name=None, acronym=None):
     doc = get_object_or_404(Document, name=name)
 
     if request.method == "POST":
-        clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
+        clist = lookup_community_list(
+            request, email_or_name, acronym
+        )  # may raise Http404
         if not can_manage_community_list(request.user, clist):
             permission_denied(request, "You do not have permission to access this view")
 
         if clist.pk is None:
             clist.save()
 
-        if not doc in clist.added_docs.all():
+        if doc not in clist.added_docs.all():
             clist.added_docs.add(doc)
 
         if is_ajax(request):
-            return HttpResponse(json.dumps({ 'success': True }), content_type='application/json')
+            return HttpResponse(
+                json.dumps({"success": True}), content_type="application/json"
+            )
         else:
             return HttpResponseRedirect(clist.get_absolute_url())
 
-    return render(request, "community/track_document.html", {
-        "name": doc.name,
-    })
+    return render(
+        request,
+        "community/track_document.html",
+        {
+            "name": doc.name,
+        },
+    )
+
 
 @login_required
 def untrack_document(request, name, email_or_name=None, acronym=None):
@@ -192,28 +242,34 @@ def untrack_document(request, name, email_or_name=None, acronym=None):
             clist.added_docs.remove(doc)
 
         if is_ajax(request):
-            return HttpResponse(json.dumps({ 'success': True }), content_type='application/json')
+            return HttpResponse(
+                json.dumps({"success": True}), content_type="application/json"
+            )
         else:
             return HttpResponseRedirect(clist.get_absolute_url())
 
-    return render(request, "community/untrack_document.html", {
-        "name": doc.name,
-    })
+    return render(
+        request,
+        "community/untrack_document.html",
+        {
+            "name": doc.name,
+        },
+    )
 
 
 @ignore_view_kwargs("group_type")
 def export_to_csv(request, email_or_name=None, acronym=None):
     clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
-    response = HttpResponse(content_type='text/csv')
+    response = HttpResponse(content_type="text/csv")
 
     if clist.group:
         filename = "%s-draft-list.csv" % clist.group.acronym
     else:
         filename = "draft-list.csv"
 
-    response['Content-Disposition'] = 'attachment; filename=%s' % filename
+    response["Content-Disposition"] = "attachment; filename=%s" % filename
 
-    writer = csv.writer(response, dialect=csv.excel, delimiter=str(','))
+    writer = csv.writer(response, dialect=csv.excel, delimiter=str(","))
 
     header = [
         "Name",
@@ -226,12 +282,12 @@ def export_to_csv(request, email_or_name=None, acronym=None):
     ]
     writer.writerow(header)
 
-    docs = docs_tracked_by_community_list(clist).select_related('type', 'group', 'ad')
+    docs = docs_tracked_by_community_list(clist).select_related("type", "group", "ad")
     for doc in docs.prefetch_related("states", "tags"):
         row = []
         row.append(doc.name)
         row.append(doc.title)
-        e = doc.latest_event(type='new_revision')
+        e = doc.latest_event(type="new_revision")
         row.append(e.time.strftime("%Y-%m-%d") if e else "")
         row.append(strip_tags(doc.friendly_state()))
         row.append(doc.group.acronym if doc.group else "")
@@ -242,39 +298,54 @@ def export_to_csv(request, email_or_name=None, acronym=None):
 
     return response
 
+
 @ignore_view_kwargs("group_type")
 def feed(request, email_or_name=None, acronym=None):
     clist = lookup_community_list(request, email_or_name, acronym)  # may raise Http404
-    significant = request.GET.get('significant', '') == '1'
-
-    documents = docs_tracked_by_community_list(clist).values_list('pk', flat=True)
-    since = timezone.now() - datetime.timedelta(days=14)
-
-    events = DocEvent.objects.filter(
-        doc__id__in=documents,
-        time__gte=since,
-    ).distinct().order_by('-time', '-id').select_related("doc")
+    significant = request.GET.get("significant", "") == "1"
+
+    documents = docs_tracked_by_community_list(clist).values_list("pk", flat=True)
+    updated = timezone.now()
+    since = updated - datetime.timedelta(days=14)
+
+    events = (
+        DocEvent.objects.filter(
+            doc__id__in=documents,
+            time__gte=since,
+        )
+        .distinct()
+        .order_by("-time", "-id")
+        .select_related("doc")
+    )
 
     if significant:
-        events = events.filter(type="changed_state", statedocevent__state__in=list(states_of_significant_change()))
+        events = events.filter(
+            type="changed_state",
+            statedocevent__state__in=list(states_of_significant_change()),
+        )
 
     host = request.get_host()
-    feed_url = 'https://%s%s' % (host, request.get_full_path())
+    feed_url = "https://%s%s" % (host, request.get_full_path())
     feed_id = uuid.uuid5(uuid.NAMESPACE_URL, str(feed_url))
-    title = '%s RSS Feed' % clist.long_name()
+    title = "%s RSS Feed" % clist.long_name()
     if significant:
-        subtitle = 'Significant document changes'
+        subtitle = "Significant document changes"
     else:
-        subtitle = 'Document changes'
-
-    return render(request, 'community/atom.xml', {
-        'clist': clist,
-        'entries': events[:50],
-        'title': title,
-        'subtitle': subtitle,
-        'id': feed_id.urn,
-        'updated': timezone.now(),
-    }, content_type='text/xml')
+        subtitle = "Document changes"
+
+    return render(
+        request,
+        "community/atom.xml",
+        {
+            "clist": clist,
+            "entries": events[:50],
+            "title": title,
+            "subtitle": subtitle,
+            "id": feed_id.urn,
+            "updated": updated,
+        },
+        content_type="text/xml",
+    )
 
 
 @login_required
@@ -286,9 +357,11 @@ def subscription(request, email_or_name=None, acronym=None):
 
     person = request.user.person
 
-    existing_subscriptions = EmailSubscription.objects.filter(community_list=clist, email__person=person)
+    existing_subscriptions = EmailSubscription.objects.filter(
+        community_list=clist, email__person=person
+    )
 
-    if request.method == 'POST':
+    if request.method == "POST":
         action = request.POST.get("action")
         if action == "subscribe":
             form = SubscriptionForm(person, clist, request.POST)
@@ -300,14 +373,20 @@ def subscription(request, email_or_name=None, acronym=None):
                 return HttpResponseRedirect("")
 
         elif action == "unsubscribe":
-            existing_subscriptions.filter(pk=request.POST.get("subscription_id")).delete()
+            existing_subscriptions.filter(
+                pk=request.POST.get("subscription_id")
+            ).delete()
 
             return HttpResponseRedirect("")
     else:
         form = SubscriptionForm(person, clist)
 
-    return render(request, 'community/subscription.html', {
-        'clist': clist,
-        'form': form,
-        'existing_subscriptions': existing_subscriptions,
-    })
+    return render(
+        request,
+        "community/subscription.html",
+        {
+            "clist": clist,
+            "form": form,
+            "existing_subscriptions": existing_subscriptions,
+        },
+    )
diff --git a/ietf/templates/community/atom.xml b/ietf/templates/community/atom.xml
index 32e3b00292..01dcdfeee7 100644
--- a/ietf/templates/community/atom.xml
+++ b/ietf/templates/community/atom.xml
@@ -3,7 +3,7 @@
     <title type="text">{{ title }}</title>
     <subtitle type="text">{{ subtitle }}</subtitle>
     <id>{{ id }}</id>
-    <updated>{{ updated|date:"Y-m-d\TH:i:sO" }}</updated>
+    <updated>{{ updated.isoformat }}</updated>
     <link rel="alternate" type="text/html" hreflang="en" href="https://{{ request.get_host }}/"/>
     <link rel="self" type="application/atom+xml" href="https://{{ request.get_host }}{{ request.get_full_path }}"/>
 
@@ -17,11 +17,11 @@
 
         <link href="{{ entry.doc.get_absolute_url }}"/>
 
-        <id>{{ entry.id }}</id>
+        <id>urn:datatracker-ietf-org:event:{{ entry.id }}</id>
         
-        <updated>{{ entry.time|date:"Y-m-d\TH:i:sO" }}</updated>
+        <updated>{{ entry.time.isoformat }}</updated>
         
-        <published>{{ entry.time|date:"Y-m-d\TH:i:sO" }}</published>
+        <published>{{ entry.time.isoformat }}</published>
         
         <author>
             <name>{{ entry.by }}</name>

From 7c968139d0068d54a2de10013f62afe0a51522b3 Mon Sep 17 00:00:00 2001
From: Peter Yee <github@houseofyee.com>
Date: Tue, 22 Jul 2025 09:37:47 +0200
Subject: [PATCH 388/707] feat: Add calendar buttons for future group meetings
 (#9182)

The buttons appear when there are future meetings for a group, on
https://datatracker.ietf.org/wg/GROUPNAME/meetings/
The buttons are basically the same two calendar buttons that are
on https://datatracker.ietf.org/meeting/upcoming?show=GROUPNAME
This change addresses issue #7524. (Separately, the description
of #7526 might need to be updated to refer to the new buttons.)
---
 ietf/group/views.py                | 14 ++++++++++++++
 ietf/templates/group/meetings.html | 12 ++++++------
 2 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/ietf/group/views.py b/ietf/group/views.py
index f30569d230..f59b270a08 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -58,6 +58,7 @@
 from django.utils import timezone
 from django.utils.html import escape
 from django.views.decorators.cache import cache_page, cache_control
+from django.urls import reverse
 
 import debug                            # pyflakes:ignore
 
@@ -898,6 +899,18 @@ def meetings(request, acronym, group_type=None):
                 far_past.append(s)
         past = recent_past
 
+    # Add calendar actions
+    cal_actions = []
+
+    cal_actions.append(dict(
+        label='Download as .ics',
+        url=reverse('ietf.meeting.views.upcoming_ical')+"?show="+group.acronym)
+    )
+    cal_actions.append(dict(
+        label='Subscribe with webcal',
+        url='webcal://'+request.get_host()+reverse('ietf.meeting.views.upcoming_ical')+"?show="+group.acronym)
+    )
+
     return render(
         request,
         "group/meetings.html",
@@ -915,6 +928,7 @@ def meetings(request, acronym, group_type=None):
                 "far_past": far_past,
                 "can_edit": can_edit,
                 "can_always_edit": can_always_edit,
+                "cal_actions": cal_actions,
             },
         ),
     )
diff --git a/ietf/templates/group/meetings.html b/ietf/templates/group/meetings.html
index deaea1e675..bee8111025 100644
--- a/ietf/templates/group/meetings.html
+++ b/ietf/templates/group/meetings.html
@@ -40,12 +40,12 @@ <h2 class="mt-5" id="inprogressmeets">Meetings in progress</h2>
     {% if future %}
         <h2 class="mt-5" id="futuremeets">
             Future Meetings
-            <a class="ms-2"
-               aria-label="icalendar entry for all scheduled future {{ group.acronym }} meetings"
-               title="icalendar entry for all scheduled future {{ group.acronym }} meetings"
-               href="{% url 'ietf.meeting.views.upcoming_ical' %}?show={{ group.acronym }}">
-                <i class="bi bi-calendar"></i>
-            </a>
+            {% for cal_action in cal_actions %}
+                <a class="btn btn-primary"
+                   href="{{ cal_action.url }}">
+                    {{ cal_action.label }}
+                </a>
+            {% endfor %}
         </h2>
         <table class="table table-sm table-striped tablesorter">
             <thead>

From 0e2df84f21d05a1a58ed5d99db4e213458396c89 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Wed, 23 Jul 2025 15:58:56 +0200
Subject: [PATCH 389/707] feat: Sort IESG and IAB Statements Pages with Active
 Statements at the Top (#9198)

* Use statement.state to sort entries

* remove spurious tabs

* Uncomment the URL

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/group/views.py                  |  2 +-
 ietf/templates/group/statements.html | 19 ++++++++++++++-----
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/ietf/group/views.py b/ietf/group/views.py
index f59b270a08..0c89302c6a 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -2201,7 +2201,7 @@ def statements(request, acronym, group_type=None):
                 ).values_list("state__slug", flat=True)[:1]
             )
         )
-        .order_by("-published")
+        .order_by("status", "-published")
     )
     return render(
         request,
diff --git a/ietf/templates/group/statements.html b/ietf/templates/group/statements.html
index 035c3bc967..6bbe3cb394 100644
--- a/ietf/templates/group/statements.html
+++ b/ietf/templates/group/statements.html
@@ -12,8 +12,8 @@ <h2 class="my-3">{{group.acronym|upper}} Statements</h2>
     {% if request.user|has_role:"Secretariat" %}
     <div class="buttonlist">
         <a id="start_button"
-           class="btn btn-primary"
-           href="{% url 'ietf.doc.views_statement.new_statement' %}">
+        class="btn btn-primary"
+        href="{% url 'ietf.doc.views_statement.new_statement' %}">
             Start New Statement
         </a>
     </div>
@@ -25,16 +25,25 @@ <h2 class="my-3">{{group.acronym|upper}} Statements</h2>
                 <th scope="col" data-sort="statement">Statement</th>
             </tr>
         </thead>
+{% regroup statements by status as grouped_statements %}
+{% for statement_group in grouped_statements %}
         <tbody>
-            {% for statement in statements %}
+            <tr class="table-info">
+                <th scope="col" colspan="2">
+                {{ statement_group.grouper|title }} {{"Statement"|plural:statement_group.list }} ({{ statement_group.list|length }} {{"hit"|plural:statement_group.list }})
+                </th>
+            </tr>
+        </tbody>
+        <tbody>
+        {% for statement in statement_group.list %}
             <tr>
                 <td title="{{ statement.published|date:'Y-m-d H:i:s O' }}">{{ statement.published|date:"Y-m-d" }}</td>
                 <td><a href="{% url 'ietf.doc.views_doc.document_main' name=statement.name %}">{{statement.title}}</a>
-                    {% if statement.status == "replaced" %}<span class="badge rounded-pill text-bg-warning">Replaced</span>{% endif %}
                 </td>
             </tr>
-            {% endfor %}
+        {% endfor %}   
         </tbody>
+{% endfor %}
     </table>
 {% endblock %}
 {% block js %}

From 5a862b2022cbb4650596f8a2074b273b74b04660 Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Wed, 23 Jul 2025 10:01:48 -0400
Subject: [PATCH 390/707] feat: Append ascii name if any 8bit UTF8 chars
 (#9173)

Fixes: 7167
---
 ietf/utils/tests.py    | 8 ++++++++
 ietf/utils/xmldraft.py | 6 ++++++
 2 files changed, 14 insertions(+)

diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 872aa366b9..88484000f7 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -709,6 +709,14 @@ def test_render_author_name(self):
             )),
             "Joanna Q. Public",
         )
+        self.assertEqual(
+            XMLDraft.render_author_name(lxml.etree.Element(
+                "author",
+                fullname=chr(340)+"ich",
+                asciiFullname="Rich UTF-8",
+            )),
+            chr(340)+"ich (Rich UTF-8)",
+        )
         self.assertEqual(
             XMLDraft.render_author_name(lxml.etree.Element(
                 "author",
diff --git a/ietf/utils/xmldraft.py b/ietf/utils/xmldraft.py
index 7ef6605c78..f555a0a16a 100644
--- a/ietf/utils/xmldraft.py
+++ b/ietf/utils/xmldraft.py
@@ -233,6 +233,12 @@ def render_author_name(author_elt):
         # Use fullname attribute, if present
         fullname = author_elt.attrib.get("fullname", "").strip()
         if fullname:
+            # If any 8bit chars in the fullname, try to append the author's
+            # name in ascii.
+            if any([x >= 0x80 for x in fullname.encode('utf8')]):
+                asciifullname = author_elt.attrib.get("asciiFullname", "").strip()
+                if asciifullname:
+                    fullname = fullname + ' (' + asciifullname + ')'
             return fullname
         surname = author_elt.attrib.get("surname", "").strip()
         initials = author_elt.attrib.get("initials", "").strip()

From 47afc6ed95895f2f7d03947813fec48417b5c2d6 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 23 Jul 2025 10:08:52 -0400
Subject: [PATCH 391/707] fix: prevent navigation on doc search header sort
 click (#9227)

---
 ietf/static/js/list.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ietf/static/js/list.js b/ietf/static/js/list.js
index c16111ba63..756a75001a 100644
--- a/ietf/static/js/list.js
+++ b/ietf/static/js/list.js
@@ -247,7 +247,8 @@ $(document)
 
                 $(table)
                     .find(".sort")
-                    .on("click", function () {
+                    .on("click", function (ev) {
+                        ev.preventDefault()
                         var order = $(this)
                             .hasClass("asc") ? "desc" : "asc";
                         $.each(list_instance, (_, e) => {

From ced120fd0e5ffc713b910054087149d9c6fe8933 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 23 Jul 2025 16:11:58 +0200
Subject: [PATCH 392/707] feat: improve template coverage cfg (#9230)

* feat: template coverage ignores using path

* refactor: reduce repeatitive redundancy

* chore: copyrights

* refactor: use pathlib to compute BASE_DIR

* feat: settings.PROJECT_DIR

* fix: glob from PROJECT_DIR not BASE_DIR

* chore: remove reference code
---
 ietf/settings.py          | 22 +++++++++++++--------
 ietf/utils/test_runner.py | 41 ++++++++++++++++++++-------------------
 ietf/utils/tests.py       |  9 ++-------
 3 files changed, 37 insertions(+), 35 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index d76a8749b2..64679ca1d8 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2007-2024, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -9,6 +9,7 @@
 import os
 import sys
 import datetime
+import pathlib
 import warnings
 from hashlib import sha384
 from typing import Any, Dict, List, Tuple # pyflakes:ignore
@@ -27,8 +28,12 @@
 warnings.filterwarnings("ignore", message="Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated", module="bleach")
 warnings.filterwarnings("ignore", message="HTTPResponse.getheader\\(\\) is deprecated", module='selenium.webdriver')
 
-BASE_DIR = os.path.dirname(os.path.abspath(__file__))
-sys.path.append(os.path.abspath(BASE_DIR + "/.."))
+base_path = pathlib.Path(__file__).resolve().parent
+BASE_DIR = str(base_path)
+
+project_path = base_path.parent
+PROJECT_DIR = str(project_path)  
+sys.path.append(PROJECT_DIR)
 
 from ietf import __version__
 import debug
@@ -717,12 +722,13 @@ def skip_unreadable_post(record):
 ]
 
 # These are filename globs.  They are used by test_parse_templates() and
-# get_template_paths()
+# get_template_paths(). Globs are applied via pathlib.Path().match, using
+# the path to the template from the project root.
 TEST_TEMPLATE_IGNORE = [
-    ".*",                             # dot-files
-    "*~",                             # tilde temp-files
-    "#*",                             # files beginning with a hashmark
-    "500.html"                        # isn't loaded by regular loader, but checked by test_500_page()
+    ".*",  # dot-files
+    "*~",  # tilde temp-files
+    "#*",  # files beginning with a hashmark
+    "500.html",  # isn't loaded by regular loader, but checked by test_500_page()
 ]
 
 TEST_COVERAGE_MAIN_FILE = os.path.join(BASE_DIR, "../release-coverage.json")
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index bfe5a56597..d0a5496283 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2009-2020, All Rights Reserved
+# Copyright The IETF Trust 2009-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 #
 # Portion Copyright (C) 2009 Nokia Corporation and/or its subsidiary(-ies).
@@ -54,7 +54,6 @@
 import urllib3
 import warnings
 
-from fnmatch import fnmatch
 from typing import Callable, Optional
 from urllib.parse import urlencode
 
@@ -414,8 +413,9 @@ def do_append(res, p0, p1, item):
             res.append((str(item.pattern), item))
     return res
 
+
 _all_templates = None
-def get_template_paths(apps=None):
+def get_template_paths(apps=None) -> list[str]:
     global _all_templates
     if not _all_templates:
         # TODO: Add app templates to the full list, if we are using
@@ -424,25 +424,26 @@ def get_template_paths(apps=None):
         templatepaths = settings.TEMPLATES[0]['DIRS']
         for templatepath in templatepaths:
             for dirpath, dirs, files in os.walk(templatepath):
-                if ".svn" in dirs:
-                    dirs.remove(".svn")
-                relative_path = dirpath[len(templatepath)+1:]
-                for file in files:
-                    ignore = False
-                    for pattern in settings.TEST_TEMPLATE_IGNORE:
-                        if fnmatch(file, pattern):
-                            ignore = True
-                            break
-                    if ignore:
-                        continue
-                    if relative_path != "":
-                        file = os.path.join(relative_path, file)
-                    templates.add(file)
-        if apps:
-            templates = [ t for t in templates if t.split(os.path.sep)[0] in apps ]
-        _all_templates = templates
+                # glob against path from PROJECT_DIR
+                project_path = pathlib.Path(
+                    dirpath.removeprefix(settings.PROJECT_DIR).lstrip("/") 
+                )
+                # label entries with name relative to templatepath
+                relative_path = pathlib.Path(
+                    dirpath.removeprefix(templatepath).lstrip("/")
+                )
+                if apps and relative_path.parts[0] not in apps:
+                    continue  # skip uninteresting apps
+                for filename in files:
+                    file_path = project_path / filename
+                    if not any(
+                        file_path.match(pat) for pat in settings.TEST_TEMPLATE_IGNORE
+                    ):
+                        templates.add(relative_path / filename)
+        _all_templates = [str(t) for t in templates]
     return _all_templates
 
+
 def save_test_results(failures, test_labels):
     # Record the test result in a file, in order to be able to check the
     # results and avoid re-running tests if we've already run them with OK
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 88484000f7..ce1842236d 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -19,7 +19,6 @@
 from email.mime.image import MIMEImage
 from email.mime.multipart import MIMEMultipart
 from email.mime.text import MIMEText
-from fnmatch import fnmatch
 from importlib import import_module
 from textwrap import dedent
 from tempfile import mkdtemp
@@ -320,7 +319,7 @@ class TemplateChecksTestCase(TestCase):
     def setUp(self):
         super().setUp()
         set_coverage_checking(False)
-        self.paths = list(get_template_paths())
+        self.paths = get_template_paths()  # already filtered ignores
         self.paths.sort()
         for path in self.paths:
             try:
@@ -335,11 +334,7 @@ def tearDown(self):
     def test_parse_templates(self):
         errors = []
         for path in self.paths:
-            for pattern in settings.TEST_TEMPLATE_IGNORE:
-                if fnmatch(path, pattern):
-                    continue
-            if not path in self.templates:
-
+            if path not in self.templates:
                 try:
                     get_template(path)
                 except Exception as e:

From ae5080bb8d72d5e52534caf5b64d50dfda960730 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 23 Jul 2025 16:38:37 +0200
Subject: [PATCH 393/707] fix: better wrap of nomcom key in session (#9233)

---
 ietf/nomcom/utils.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/nomcom/utils.py b/ietf/nomcom/utils.py
index 10494d323f..dd651c2941 100644
--- a/ietf/nomcom/utils.py
+++ b/ietf/nomcom/utils.py
@@ -184,7 +184,7 @@ def retrieve_nomcom_private_key(request, year):
     if not private_key:
         return private_key
 
-    command = "%s bf -d -in /dev/stdin -k \"%s\" -a"
+    command = "%s aes-128-ecb -d -in /dev/stdin -k \"%s\" -a -iter 1000"
     code, out, error = pipe(
         command % (
             settings.OPENSSL_COMMAND,
@@ -208,7 +208,7 @@ def store_nomcom_private_key(request, year, private_key):
     if not private_key:
         request.session['NOMCOM_PRIVATE_KEY_%s' % year] = ''
     else:
-        command = "%s bf -e -in /dev/stdin -k \"%s\" -a"
+        command = "%s aes-128-ecb -e -in /dev/stdin -k \"%s\" -a -iter 1000"
         code, out, error = pipe(
             command % (
                 settings.OPENSSL_COMMAND,

From 328ee129588c4b096808ab4e33afedd4b2cc5833 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 24 Jul 2025 13:04:27 +0200
Subject: [PATCH 394/707] fix: set charset for text/plain responses (#9120)

* fix: charset for text/plain

Use settings.DEFAULT_CHARSET

* fix: more charset for text/plain

ALL THE PLACES
---
 ietf/api/views.py        |  30 +++++++++--
 ietf/doc/views_ballot.py |  12 ++++-
 ietf/iesg/views.py       |  27 +++++++---
 ietf/meeting/views.py    | 112 +++++++++++++++++++++++++++++++--------
 ietf/nomcom/views.py     |   5 +-
 ietf/submit/views.py     |   5 +-
 ietf/utils/decorators.py |   2 +-
 7 files changed, 155 insertions(+), 38 deletions(-)

diff --git a/ietf/api/views.py b/ietf/api/views.py
index b4dd7f05d6..22523b2f17 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -114,7 +114,11 @@ class ApiV2PersonExportView(DetailView, JsonExportMixin):
     model = Person
 
     def err(self, code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     def post(self, request):
         querydict = request.POST.copy()
@@ -152,7 +156,11 @@ def post(self, request):
 def api_new_meeting_registration_v2(request):
     '''REST API to notify the datatracker about a new meeting registration'''
     def _http_err(code, text):
-        return HttpResponse(text, status=code, content_type="text/plain")
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     def _api_response(result):
         return JsonResponse(data={"result": result})
@@ -192,7 +200,11 @@ def _api_response(result):
 
     process_single_registration(reg_data, meeting)
 
-    return HttpResponse('Success', status=202, content_type='text/plain')
+    return HttpResponse(
+        'Success',
+        status=202,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 def version(request):
@@ -511,7 +523,11 @@ def related_email_list(request, email):
     to Datatracker, via Person object
     """
     def _http_err(code, text):
-        return HttpResponse(text, status=code, content_type="text/plain")
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     if request.method == "GET":
         try:
@@ -637,7 +653,11 @@ def ingest_email_handler(request, test_mode=False):
     """
 
     def _http_err(code, text):
-        return HttpResponse(text, status=code, content_type="text/plain")
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     def _api_response(result):
         return JsonResponse(data={"result": result})
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 9e2a417933..0ba340890d 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -257,7 +257,11 @@ def edit_position(request, name, ballot_id):
 @csrf_exempt
 def api_set_position(request):
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
     if request.method == 'POST':
         ad = request.user.person
         name = request.POST.get('doc')
@@ -290,7 +294,11 @@ def err(code, text):
     addrs, frm, subject, body = build_position_email(ad, doc, pos)
     send_mail_text(request, addrs.to, frm, subject, body, cc=addrs.cc)
 
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 def build_position_email(balloter, doc, pos):
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index f1fe77f763..7b9f489b44 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -221,7 +221,7 @@ def agenda_txt(request, date=None):
             "date": data["date"],
             "sections": sorted(data["sections"].items(), key=lambda x:[int(p) for p in x[0].split('.')]),
             "domain": Site.objects.get_current().domain,
-            }, content_type="text/plain; charset=%s"%settings.DEFAULT_CHARSET)
+            }, content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}")
 
 @role_required('Area Director', 'Secretariat')
 def agenda_moderator_package(request, date=None):
@@ -277,14 +277,23 @@ def leaf_section(num, section):
 @role_required('Area Director', 'Secretariat')
 def agenda_package(request, date=None):
     data = agenda_data(date)
-    return render(request, "iesg/agenda_package.txt", {
+    return render(
+        request,
+        "iesg/agenda_package.txt",
+        {
             "date": data["date"],
             "sections": sorted(data["sections"].items()),
             "roll_call": data["sections"]["1.1"]["text"],
             "minutes": data["sections"]["1.3"]["text"],
-            "management_items": [(num, section) for num, section in data["sections"].items() if "6" < num < "7"],
+            "management_items": [
+                (num, section)
+                for num, section in data["sections"].items()
+                if "6" < num < "7"
+            ],
             "domain": Site.objects.get_current().domain,
-            }, content_type='text/plain')
+        },
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 def agenda_documents_txt(request):
@@ -315,7 +324,10 @@ def agenda_documents_txt(request):
             d.rev,
             )
         rows.append("\t".join(row))
-    return HttpResponse("\n".join(rows), content_type='text/plain')
+    return HttpResponse(
+        "\n".join(rows),
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 class RescheduleForm(forms.Form):
     telechat_date = forms.TypedChoiceField(coerce=lambda x: datetime.datetime.strptime(x, '%Y-%m-%d').date(), empty_value=None, required=False)
@@ -610,4 +622,7 @@ def telechat_agenda_content_manage(request):
 @role_required("Secretariat", "IAB Chair", "Area Director")
 def telechat_agenda_content_view(request, section):
     content = get_object_or_404(TelechatAgendaContent, section__slug=section, section__used=True)
-    return HttpResponse(content=content.text, content_type="text/plain; charset=utf-8")
+    return HttpResponse(
+        content=content.text,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 8bd70a3733..85eda5a8f4 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -2760,7 +2760,10 @@ def upload_session_bluesheets(request, session_id, num):
             ota = session.official_timeslotassignment()
             sess_time = ota and ota.timeslot.time
             if not sess_time:
-                return HttpResponseGone("Cannot receive uploads for an unscheduled session.  Please check the session ID.", content_type="text/plain")
+                return HttpResponseGone(
+                    "Cannot receive uploads for an unscheduled session.  Please check the session ID.",
+                    content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+                )
 
 
             save_error = save_bluesheet(request, session, file, encoding=form.file_encoding[file.name])
@@ -2821,7 +2824,7 @@ def upload_session_minutes(request, session_id, num):
             except SessionNotScheduledError:
                 return HttpResponseGone(
                     "Cannot receive uploads for an unscheduled session. Please check the session ID.",
-                    content_type="text/plain",
+                    content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
                 )
             except SaveMaterialsError as err:
                 form.add_error(None, str(err))
@@ -2880,7 +2883,7 @@ def upload_session_narrativeminutes(request, session_id, num):
             except SessionNotScheduledError:
                 return HttpResponseGone(
                     "Cannot receive uploads for an unscheduled session. Please check the session ID.",
-                    content_type="text/plain",
+                    content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
                 )
             except SaveMaterialsError as err:
                 form.add_error(None, str(err))
@@ -2978,7 +2981,10 @@ def upload_session_agenda(request, session_id, num):
                 ota = session.official_timeslotassignment()
                 sess_time = ota and ota.timeslot.time
                 if not sess_time:
-                    return HttpResponseGone("Cannot receive uploads for an unscheduled session.  Please check the session ID.", content_type="text/plain")
+                    return HttpResponseGone(
+                        "Cannot receive uploads for an unscheduled session.  Please check the session ID.",
+                        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+                    )
                 if session.meeting.type_id=='ietf':
                     name = 'agenda-%s-%s' % (session.meeting.number, 
                                                  session.group.acronym) 
@@ -4282,11 +4288,17 @@ def api_set_meetecho_recording_name(request):
         name: the name to use for the recording at meetecho player
     """
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     if request.method != "POST":
         return HttpResponseNotAllowed(
-            content="Method not allowed", content_type="text/plain", permitted_methods=('POST',)
+            content="Method not allowed",
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+            permitted_methods=('POST',),
         )
 
     session_id = request.POST.get('session_id', None)
@@ -4306,7 +4318,11 @@ def err(code, text):
     session.meetecho_recording_name = name
     session.save()
 
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 @require_api_key
 @role_required('Recording Manager')
@@ -4320,11 +4336,17 @@ def api_set_session_video_url(request):
       url: The recording url (on YouTube, or whatever)
     """
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     if request.method != 'POST':
         return HttpResponseNotAllowed(
-            content="Method not allowed", content_type="text/plain", permitted_methods=('POST',)
+            content="Method not allowed",
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+            permitted_methods=('POST',),
         )
 
     # Temporary: fall back to deprecated interface if we have old-style parameters.
@@ -4363,7 +4385,11 @@ def err(code, text):
         time = session.official_timeslotassignment().timeslot.time
         title = 'Video recording for %s on %s at %s' % (session.group.acronym, time.date(), time.time())
         create_recording(session, incoming_url, title=title, user=request.user.person)
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 def deprecated_api_set_session_video_url(request):
@@ -4372,7 +4398,11 @@ def deprecated_api_set_session_video_url(request):
     Uses meeting/group/item to identify session.
     """
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
     if request.method == 'POST':
         # parameters:
         #   apikey: the poster's personal API key
@@ -4426,7 +4456,11 @@ def err(code, text):
     else:
         return err(405, "Method not allowed")
 
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 @require_api_key
@@ -4478,7 +4512,11 @@ def api_add_session_attendees(request):
     )
 
     def err(code, text):
-        return HttpResponse(text, status=code, content_type="text/plain")
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     if request.method != "POST":
         return err(405, "Method not allowed")
@@ -4531,7 +4569,11 @@ def err(code, text):
         if save_error:
             return err(400, save_error)
 
-    return HttpResponse("Done", status=200, content_type="text/plain")
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 @require_api_key
@@ -4539,7 +4581,11 @@ def err(code, text):
 @csrf_exempt
 def api_upload_chatlog(request):
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
     if request.method != 'POST':
         return err(405, "Method not allowed")
     apidata_post = request.POST.get('apidata')
@@ -4572,14 +4618,22 @@ def err(code, text):
     write_doc_for_session(session, 'chatlog', filename, json.dumps(apidata['chatlog']))
     e = NewRevisionDocEvent.objects.create(doc=doc, rev=doc.rev, by=request.user.person, type='new_revision', desc='New revision available: %s'%doc.rev)
     doc.save_with_history([e])
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 @require_api_key
 @role_required('Recording Manager')
 @csrf_exempt
 def api_upload_polls(request):
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
     if request.method != 'POST':
         return err(405, "Method not allowed")
     apidata_post = request.POST.get('apidata')
@@ -4612,7 +4666,11 @@ def err(code, text):
     write_doc_for_session(session, 'polls', filename, json.dumps(apidata['polls']))
     e = NewRevisionDocEvent.objects.create(doc=doc, rev=doc.rev, by=request.user.person, type='new_revision', desc='New revision available: %s'%doc.rev)
     doc.save_with_history([e])
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 @require_api_key
 @role_required('Recording Manager', 'Secretariat')
@@ -4627,11 +4685,17 @@ def api_upload_bluesheet(request):
           [{'name': 'Name', 'affiliation': 'Organization', }, ...]
     """
     def err(code, text):
-        return HttpResponse(text, status=code, content_type='text/plain')
+        return HttpResponse(
+            text,
+            status=code,
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+        )
 
     if request.method != 'POST':
         return HttpResponseNotAllowed(
-            content="Method not allowed", content_type="text/plain", permitted_methods=('POST',)
+            content="Method not allowed",
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+            permitted_methods=('POST',),
         )
 
     session_id = request.POST.get('session_id', None)
@@ -4666,7 +4730,11 @@ def err(code, text):
         save_err = save_bluesheet(request, session, file)
     if save_err:
         return err(400, save_err)
-    return HttpResponse("Done", status=200, content_type='text/plain')
+    return HttpResponse(
+        "Done",
+        status=200,
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
 
 
 def important_dates(request, num=None, output_format=None):
@@ -5090,7 +5158,7 @@ def import_session_minutes(request, session_id, num):
             except SessionNotScheduledError:
                 return HttpResponseGone(
                     "Cannot import minutes for an unscheduled session. Please check the session ID.",
-                    content_type="text/plain",
+                    content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
                 )
             except SaveMaterialsError as err:
                 form.add_error(None, str(err))
diff --git a/ietf/nomcom/views.py b/ietf/nomcom/views.py
index d34126b1e7..c04e13f92b 100644
--- a/ietf/nomcom/views.py
+++ b/ietf/nomcom/views.py
@@ -1017,7 +1017,10 @@ def view_feedback_nominee(request, year, nominee_id):
                                          'positions': ','.join([str(p) for p in feedback.positions.all()]),
                                          },
                                         request=request)
-            response = HttpResponse(response, content_type='text/plain')
+            response = HttpResponse(
+                response,
+                content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+            )
             response['Content-Disposition'] = f'attachment; filename="{fn}"'
             return response
         elif submit == 'reclassify':
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index 2b9b55c00e..043b613016 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -755,4 +755,7 @@ def get_submission_or_404(submission_id, access_token=None):
 
 def async_poke_test(request):
     result = poke.delay()
-    return HttpResponse(f'Poked {result}', content_type='text/plain')
+    return HttpResponse(
+        f'Poked {result}',
+        content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+    )
diff --git a/ietf/utils/decorators.py b/ietf/utils/decorators.py
index 56c28c4b19..5e94dda91d 100644
--- a/ietf/utils/decorators.py
+++ b/ietf/utils/decorators.py
@@ -48,7 +48,7 @@ def require_api_key(f):
     @wraps(f)
     def _wrapper(request, *args, **kwargs):
         def err(code, text):
-            return HttpResponse(text, status=code, content_type='text/plain')
+            return HttpResponse(text, status=code, content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}")
         # Check method and get hash
         if request.method == 'POST':
             hash = request.POST.get('apikey')

From b766eaf54450cb494598474eeb9389ac7cb176de Mon Sep 17 00:00:00 2001
From: Rich Salz <rsalz@akamai.com>
Date: Thu, 24 Jul 2025 08:22:26 -0400
Subject: [PATCH 395/707] fix: Include text to set/update photo (#9186)

* fix: Include text to set/update photo

* fixup! fix: Include text to set/update photo

* fixup! fixup! fix: Include text to set/update photo

* fix: only show photo instructions to users with roles

* fix: only show Photo section to those with photos or roles

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/templates/registration/edit_profile.html | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/registration/edit_profile.html b/ietf/templates/registration/edit_profile.html
index 1837016b15..1e4ab169e1 100644
--- a/ietf/templates/registration/edit_profile.html
+++ b/ietf/templates/registration/edit_profile.html
@@ -32,12 +32,19 @@ <h1>Your account</h1>
                 <a class="btn btn-primary" href="{% url 'ietf.ietfauth.views.change_password' %}">Change password</a>
             </div>
         </div>
-        {% if person.photo %}
+        {% if person.photo or person.role_set.exists %}
             <div class="row mb-3">
                 <label class="col-sm-2 col-form-label fw-bold">
                     Photo
                 </label>
-                <div class="col-sm-10">{% include "person/photo.html" with person=person %}</div>
+                <div class="col-sm-10">
+                    {% if person.photo %}
+                    {% include "person/photo.html" with person=person %}
+                    {% endif %}
+                    {% if person.role_set.exists %}
+                    <p>Email <a href="support@ietf.org">support@ietf.org</a>
+                    to update your photo.</p></div>
+                    {% endif %}
             </div>
         {% endif %}
         <div class="row mb-3">

From e55162360c198765ae16f2baa8413ed1b502fa9c Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Thu, 24 Jul 2025 14:25:49 +0200
Subject: [PATCH 396/707] fix: Improvements to registration admin views (#9185)

* fix: add tickets to Registration admin

* fix: more improvements to registration admin views

* fix: add ignore for mypy

* fix: remove unused import

* fix: add new admin templates to TEST_TEMPLATE_IGNORE

* fix: use full path for TEST_TEMPLATE_IGNORE
---
 ietf/meeting/admin.py                         | 56 ++++++++++++++++---
 ietf/settings.py                              |  2 +
 .../meeting/Registration/change_list.html     | 10 ++++
 .../RegistrationTicket/change_list.html       | 10 ++++
 4 files changed, 70 insertions(+), 8 deletions(-)
 create mode 100644 ietf/templates/admin/meeting/Registration/change_list.html
 create mode 100644 ietf/templates/admin/meeting/RegistrationTicket/change_list.html

diff --git a/ietf/meeting/admin.py b/ietf/meeting/admin.py
index 1c5d5c67b5..d886a9a4b6 100644
--- a/ietf/meeting/admin.py
+++ b/ietf/meeting/admin.py
@@ -3,11 +3,13 @@
 
 
 from django.contrib import admin
+from django.db.models import Count
 
 from ietf.meeting.models import (Attended, Meeting, Room, Session, TimeSlot, Constraint, Schedule,
     SchedTimeSessAssignment, ResourceAssociation, FloorPlan, UrlResource,
     SessionPresentation, ImportantDate, SlideSubmission, SchedulingEvent, BusinessConstraint,
-    ProceedingsMaterial, MeetingHost, Registration, RegistrationTicket)
+    ProceedingsMaterial, MeetingHost, Registration, RegistrationTicket,
+    AttendanceTypeName)
 
 
 class UrlResourceAdmin(admin.ModelAdmin):
@@ -219,8 +221,9 @@ class MeetingFilter(admin.SimpleListFilter):
     parameter_name = 'meeting_id'
 
     def lookups(self, request, model_admin):
-        # Your queryset to limit choices
-        choices = Meeting.objects.filter(type='ietf').values_list('id', 'number')
+        # only include meetings with registration records
+        meetings = Meeting.objects.filter(type='ietf').annotate(reg_count=Count('registration')).filter(reg_count__gt=0).order_by('-date')
+        choices = meetings.values_list('id', 'number')
         return choices
 
     def queryset(self, request, queryset):
@@ -228,23 +231,60 @@ def queryset(self, request, queryset):
             return queryset.filter(meeting__id=self.value())
         return queryset
 
+class AttendanceFilter(admin.SimpleListFilter):
+    title = 'Attendance Type'
+    parameter_name = 'attendance_type'
+
+    def lookups(self, request, model_admin):
+        choices = AttendanceTypeName.objects.all().values_list('slug', 'name')
+        return choices
+
+    def queryset(self, request, queryset):
+        if self.value():
+            return queryset.filter(tickets__attendance_type__slug=self.value()).distinct()
+        return queryset
+
 class RegistrationTicketInline(admin.TabularInline):
     model = RegistrationTicket
 
 class RegistrationAdmin(admin.ModelAdmin):
     model = Registration
-    # list_filter = [('meeting', Meeting.objects.filter(type='ietf')), ]
-    list_filter = [MeetingFilter, ]
-    list_display = ['meeting', 'first_name', 'last_name', 'affiliation', 'country_code', 'person', 'email', ]
-    search_fields = ['meeting__number', 'first_name', 'last_name', 'affiliation', 'country_code', 'email', ]
+    list_filter = [AttendanceFilter, MeetingFilter]
+    list_display = ['meeting', 'first_name', 'last_name', 'display_attendance', 'affiliation', 'country_code', 'email', ]
+    search_fields = ['first_name', 'last_name', 'affiliation', 'country_code', 'email', ]
     raw_id_fields = ['person']
     inlines = [RegistrationTicketInline, ]
+    ordering = ['-meeting__date', 'last_name']
+
+    def display_attendance(self, instance):
+        '''Only display the most significant ticket in the list.
+        To see all the tickets inspect the individual instance
+        '''
+        if instance.tickets.filter(attendance_type__slug='onsite').exists():
+            return 'onsite'
+        elif instance.tickets.filter(attendance_type__slug='remote').exists():
+            return 'remote'
+        elif instance.tickets.filter(attendance_type__slug='hackathon_onsite').exists():
+            return 'hackathon onsite'
+        elif instance.tickets.filter(attendance_type__slug='hackathon_remote').exists():
+            return 'hackathon remote'
+    display_attendance.short_description = "Attendance"  # type: ignore # https://github.com/python/mypy/issues/2087
+
 admin.site.register(Registration, RegistrationAdmin)
 
 class RegistrationTicketAdmin(admin.ModelAdmin):
     model = RegistrationTicket
     list_filter = ['attendance_type', ]
-    list_display = ['registration', 'attendance_type', 'ticket_type']
+    # not available until Django 5.2, the name of a related field, using the __ notation
+    # list_display = ['registration__meeting', 'registration', 'attendance_type', 'ticket_type', 'registration__email']
+    # list_select_related = ('registration',)
+    list_display = ['registration', 'attendance_type', 'ticket_type', 'display_meeting']
     search_fields = ['registration__first_name', 'registration__last_name', 'registration__email']
     raw_id_fields = ['registration']
+    ordering = ['-registration__meeting__date', 'registration__last_name']
+
+    def display_meeting(self, instance):
+        return instance.registration.meeting.number
+    display_meeting.short_description = "Meeting"  # type: ignore # https://github.com/python/mypy/issues/2087
+
 admin.site.register(RegistrationTicket, RegistrationTicketAdmin)
diff --git a/ietf/settings.py b/ietf/settings.py
index 64679ca1d8..3af01d76e6 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -729,6 +729,8 @@ def skip_unreadable_post(record):
     "*~",  # tilde temp-files
     "#*",  # files beginning with a hashmark
     "500.html",  # isn't loaded by regular loader, but checked by test_500_page()
+    "ietf/templates/admin/meeting/RegistrationTicket/change_list.html",
+    "ietf/templates/admin/meeting/Registration/change_list.html",
 ]
 
 TEST_COVERAGE_MAIN_FILE = os.path.join(BASE_DIR, "../release-coverage.json")
diff --git a/ietf/templates/admin/meeting/Registration/change_list.html b/ietf/templates/admin/meeting/Registration/change_list.html
new file mode 100644
index 0000000000..62784b2cb6
--- /dev/null
+++ b/ietf/templates/admin/meeting/Registration/change_list.html
@@ -0,0 +1,10 @@
+{% extends "admin/change_list.html" %}
+
+{% block search %}
+  {{ block.super }} {# This includes the original search form #}
+  {% if cl.search_fields %} {# Only show if search is enabled for the model #}
+    <p class="search-help-text" style="font-size: 0.85em; color: #666; margin-top: 5px;">
+      Hint: Search by: {{ cl.search_fields|join:", "|capfirst }}.
+    </p>
+  {% endif %}
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/admin/meeting/RegistrationTicket/change_list.html b/ietf/templates/admin/meeting/RegistrationTicket/change_list.html
new file mode 100644
index 0000000000..62784b2cb6
--- /dev/null
+++ b/ietf/templates/admin/meeting/RegistrationTicket/change_list.html
@@ -0,0 +1,10 @@
+{% extends "admin/change_list.html" %}
+
+{% block search %}
+  {{ block.super }} {# This includes the original search form #}
+  {% if cl.search_fields %} {# Only show if search is enabled for the model #}
+    <p class="search-help-text" style="font-size: 0.85em; color: #666; margin-top: 5px;">
+      Hint: Search by: {{ cl.search_fields|join:", "|capfirst }}.
+    </p>
+  {% endif %}
+{% endblock %}
\ No newline at end of file

From ea8377db0d4ba8bc990c3f29386fba942f55c84f Mon Sep 17 00:00:00 2001
From: Tero Kivinen <kivinen@iki.fi>
Date: Mon, 28 Jul 2025 16:18:13 +0300
Subject: [PATCH 397/707] fix: Add Reviews history page to review teams group
 page. (fixes #9190) (#9191)

* Add Reviews history page to review teams group page.

* fix: Added test cases.

Fixed html to validate, moved sort text to data-text from comments.
Added test cases. fixes #9190
---
 ietf/group/tests_review.py                    | 128 ++++++++++++++++++
 ietf/group/urls.py                            |   1 +
 ietf/group/utils.py                           |   1 +
 ietf/group/views.py                           |  50 +++++++
 .../group/review_requests_history.html        |  90 ++++++++++++
 5 files changed, 270 insertions(+)
 create mode 100644 ietf/templates/group/review_requests_history.html

diff --git a/ietf/group/tests_review.py b/ietf/group/tests_review.py
index a03b806f8f..d671228953 100644
--- a/ietf/group/tests_review.py
+++ b/ietf/group/tests_review.py
@@ -815,3 +815,131 @@ def test_reset_next_reviewer(self):
             self.assertEqual(NextReviewerInTeam.objects.get(team=group).next_reviewer, reviewers[target_index].person)
             self.client.logout()
             target_index += 2
+
+class RequestsHistoryTests(TestCase):
+    def test_requests_history_overview_page(self):
+        # Make assigned assignment
+        review_req = ReviewRequestFactory(state_id='assigned')
+        assignment = ReviewAssignmentFactory(review_request=review_req,
+                                             state_id='assigned',
+                                             reviewer=EmailFactory(),
+                                             assigned_on = review_req.time)
+        group = review_req.team
+
+        for url in [urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym }),
+                    urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym ,
+                                        'group_type': group.type_id}),
+                    urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym }) +
+                    '?since=3m',
+                    urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym ,
+                                        'group_type': group.type_id }) +
+                    '?since=3m']:
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            self.assertContains(r, review_req.doc.name)
+            self.assertContains(r, 'Assigned')
+            self.assertContains(r, escape(assignment.reviewer.person.name))
+
+        url = urlreverse(ietf.group.views.review_requests_history,
+                         kwargs={ 'acronym': group.acronym })
+
+        assignment.state = ReviewAssignmentStateName.objects.get(slug="completed")
+        assignment.result = ReviewResultName.objects.get(slug="ready")
+        assignment.save()
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, review_req.doc.name)
+        self.assertContains(r, 'Assigned')
+        self.assertContains(r, 'Completed')
+
+    def test_requests_history_filter_page(self):
+        # First assignment as assigned
+        review_req = ReviewRequestFactory(state_id = 'assigned',
+                                          doc = DocumentFactory())
+        assignment = ReviewAssignmentFactory(review_request = review_req,
+                                             state_id = 'assigned',
+                                             reviewer = EmailFactory(),
+                                             assigned_on = review_req.time)
+        group = review_req.team
+
+        # Second assignment in same group as accepted
+        review_req2 = ReviewRequestFactory(state_id = 'assigned',
+                                           team = review_req.team,
+                                           doc = DocumentFactory())
+        assignment2 = ReviewAssignmentFactory(review_request = review_req2,
+                                              state_id='accepted',
+                                              reviewer = EmailFactory(),
+                                              assigned_on = review_req2.time)
+
+        # Modify the assignment to be completed, and mark it ready
+        assignment2.state = ReviewAssignmentStateName.objects.get(slug="completed")
+        assignment2.result = ReviewResultName.objects.get(slug="ready")
+        assignment2.save()
+
+        # Check that we have all information when we do not filter
+        url = urlreverse(ietf.group.views.review_requests_history,
+                         kwargs={ 'acronym': group.acronym })
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, review_req.doc.name)
+        self.assertContains(r, review_req2.doc.name)
+        self.assertContains(r, 'Assigned')
+        self.assertContains(r, 'Accepted')
+        self.assertContains(r, 'Completed')
+        self.assertContains(r, 'Ready')
+        self.assertContains(r, escape(assignment.reviewer.person.name))
+        self.assertContains(r, escape(assignment2.reviewer.person.name))
+
+        # Check first reviewer history
+        for url in [urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym }) +
+                    '?reviewer_email=' + str(assignment.reviewer),
+                    urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym ,
+                                        'group_type': group.type_id}) +
+                    '?reviewer_email=' + str(assignment.reviewer)]:
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            self.assertContains(r, review_req.doc.name)
+            self.assertNotContains(r, review_req2.doc.name)
+            self.assertContains(r, 'Assigned')
+            self.assertNotContains(r, 'Accepted')
+            self.assertNotContains(r, 'Completed')
+            self.assertNotContains(r, 'Ready')
+            self.assertContains(r, escape(assignment.reviewer.person.name))
+            self.assertNotContains(r, escape(assignment2.reviewer.person.name))
+
+        # Check second reviewer history
+        for url in [urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym }) +
+                    '?reviewer_email=' + str(assignment2.reviewer),
+                    urlreverse(ietf.group.views.review_requests_history,
+                               kwargs={ 'acronym': group.acronym ,
+                                        'group_type': group.type_id}) +
+                    '?reviewer_email=' + str(assignment2.reviewer)]:
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            self.assertNotContains(r, review_req.doc.name)
+            self.assertContains(r, review_req2.doc.name)
+            self.assertNotContains(r, 'Assigned')
+            self.assertContains(r, 'Accepted')
+            self.assertContains(r, 'Completed')
+            self.assertContains(r, 'Ready')
+            self.assertNotContains(r, escape(assignment.reviewer.person.name))
+            self.assertContains(r, escape(assignment2.reviewer.person.name))
+
+        # Check for reviewer that does not have anything
+        url = urlreverse(ietf.group.views.review_requests_history,
+                         kwargs={ 'acronym': group.acronym }) + '?reviewer_email=nobody@nowhere.example.org'
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertNotContains(r, review_req.doc.name)
+        self.assertNotContains(r, 'Assigned')
+        self.assertNotContains(r, 'Accepted')
+        self.assertNotContains(r, 'Completed')
diff --git a/ietf/group/urls.py b/ietf/group/urls.py
index 1824564c4d..8354aba063 100644
--- a/ietf/group/urls.py
+++ b/ietf/group/urls.py
@@ -24,6 +24,7 @@
     url(r'^about/status/edit/$', views.group_about_status_edit),
     url(r'^about/status/meeting/(?P<num>\d+)/$', views.group_about_status_meeting),
     url(r'^history/$',views.history),
+    url(r'^requestshistory/$',views.review_requests_history),
     url(r'^history/addcomment/$',views.add_comment),
     url(r'^email/$', views.email),
     url(r'^deps\.json$', views.dependencies),
diff --git a/ietf/group/utils.py b/ietf/group/utils.py
index dcf9d83e6f..29cfff2c2d 100644
--- a/ietf/group/utils.py
+++ b/ietf/group/utils.py
@@ -236,6 +236,7 @@ def construct_group_menu_context(request, group, selected, group_type, others):
         import ietf.group.views
         entries.append(("Review requests", urlreverse(ietf.group.views.review_requests, kwargs=kwargs)))
         entries.append(("Reviewers", urlreverse(ietf.group.views.reviewer_overview, kwargs=kwargs)))
+        entries.append(("Reviews History", urlreverse(ietf.group.views.review_requests_history, kwargs=kwargs)))
 
     if group.features.has_meetings:
         entries.append(("Meetings", urlreverse("ietf.group.views.meetings", kwargs=kwargs)))
diff --git a/ietf/group/views.py b/ietf/group/views.py
index 0c89302c6a..bc79599722 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -686,6 +686,56 @@ def history(request, acronym, group_type=None):
                       "can_add_comment": can_add_comment,
                   }))
 
+def review_requests_history(request, acronym, group_type=None):
+    group = get_group_or_404(acronym, group_type)
+    if not group.features.has_reviews:
+        raise Http404
+
+    reviewer_email = request.GET.get("reviewer_email", None)
+
+    if reviewer_email:
+        history = ReviewAssignment.history.model.objects.filter(
+            review_request__team__acronym=acronym,
+            reviewer=reviewer_email)
+    else:
+        history = ReviewAssignment.history.model.objects.filter(
+            review_request__team__acronym=acronym)
+        reviewer_email = ''
+        
+    since_choices = [
+        (None, "1 month"),
+        ("3m", "3 months"),
+        ("6m", "6 months"),
+        ("1y", "1 year"),
+        ("2y", "2 years"),
+        ("all", "All"),
+    ]
+    since = request.GET.get("since", None)
+    
+    if since not in [key for key, label in since_choices]:
+        since = None
+
+    if since != "all":
+        date_limit = {
+            None: datetime.timedelta(days=31),
+            "3m": datetime.timedelta(days=31 * 3),
+            "6m": datetime.timedelta(days=180),
+            "1y": datetime.timedelta(days=365),
+            "2y": datetime.timedelta(days=2 * 365),
+        }[since]
+
+        history = history.filter(review_request__time__gte=datetime_today(DEADLINE_TZINFO) - date_limit)
+
+    return render(request, 'group/review_requests_history.html',
+                  construct_group_menu_context(request, group, "reviews history", group_type, {
+                      "group": group,
+                      "acronym": acronym,
+                      "history": history,
+                      "since_choices": since_choices,
+                      "since": since,
+                      "reviewer_email": reviewer_email
+                  }))
+
 def materials(request, acronym, group_type=None):
     group = get_group_or_404(acronym, group_type)
     if not group.features.has_nonsession_materials:
diff --git a/ietf/templates/group/review_requests_history.html b/ietf/templates/group/review_requests_history.html
new file mode 100644
index 0000000000..1b1fb4d263
--- /dev/null
+++ b/ietf/templates/group/review_requests_history.html
@@ -0,0 +1,90 @@
+{% extends "group/group_base.html" %}
+{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{% load origin %}
+{% load tz %}
+{% load ietf_filters person_filters textfilters %}
+{% load static %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
+{% endblock %}
+{% block group_content %}
+    {% origin %}
+    {% if reviewer_email %}
+    <h2 class="my-3">Review requests history of {{ reviewer_email }}</h2>
+    {% else %}
+    <h2 class="my-3">Review requests history</h2>
+    {% endif %}
+    <form class="reviews-history-filter" action="#reviewshistory">
+      <div>
+	<label for="reviewer_email"
+	       class="query-input-label">Reviewer filter:</label>
+	<input type="text" class="query-input" id="reviewer_email"
+	       value="{{ reviewer_email }}" name="reviewer_email">
+	<button class="btn btn-primary" type="submit">Filter</button>
+      </div>
+      <div>
+	Past:
+	<div class="btn-group btn-group-sm" role="group">
+          {% for key, label in since_choices %}
+          <button class="btn btn-outline-primary {% if since == key %}active{% endif %}"
+                  {% if key %}name="since" value="{{ key }}"{% endif %}
+                  type="submit">
+            {{ label }}
+          </button>
+          {% endfor %}
+	</div>
+      </div>
+    </form>
+
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+            <tr>
+                <th scope="col" data-sort="date">Date (UTC)</th>
+                <th scope="col" data-sort="by">By</th>
+                <th scope="col" data-sort="doc">Document</th>
+                <th scope="col" data-sort="state">State</th>
+                <th scope="col" data-sort="review">Reviewer</th>
+                <th scope="col" data-sort="result">Result</th>
+                <th scope="col" data-sort="description">Description</th>
+            </tr>
+        </thead>
+        {% if history %}
+            <tbody>
+                {% for h in history %}
+                    <tr>
+                        <td>{{ h.history_date|utc|date:"Y-m-d H:i:s" }}</td>
+                        <td>{% person_link h.history_user.person %}</td>
+                        <td>{% if h.reviewed_rev %}
+			  <a href="{% url "ietf.doc.views_doc.document_main" name=h.review_request.doc.name rev=h.reviewed_rev %}">
+                        {{ h.review_request.doc.name }}-{{ h.reviewed_rev }}
+			  </a>
+			  {% else %}
+			  <a href="{% url "ietf.doc.views_doc.document_main" name=h.review_request.doc.name %}">{{ h.review_request.doc.name }}</a>
+			  {% endif %}
+			</td>
+                        <td data-text="{{ h.state }}">
+			  <a href="{% url "ietf.doc.views_review.review_request" name=h.review_request.doc.name request_id=h.review_request.pk %}">{{ h.state }} </a>
+			</td>
+                        <td data-text="{{ h.reviewer }}">
+			  {% person_link h.reviewer.person %}
+			  <a href="?reviewer_email={{h.reviewer.email_address}}#reviewshistory">
+			    (set&nbsp;as&nbsp;filter)
+			  </a>
+			</td>
+                        <td data-text="{{ h.result }}">
+			  {% if h.review %}<a href="{{ h.review.get_absolute_url }}">
+			    {{ h.result }}</a>
+			  {% else %}
+			  {{ h.result }}
+			  {% endif %}
+			</td>
+                        <td>{{ h.history_change_reason }}</td>
+                    </tr>
+                {% endfor %}
+            </tbody>
+        {% endif %}
+    </table>
+{% endblock %}
+{% block js %}
+    <script src="{% static "ietf/js/list.js" %}"></script>
+{% endblock %}

From 4762e252552587bfc80c91244c9acb9cc59d820b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:02:44 -0300
Subject: [PATCH 398/707] test: replace mock with unittest.mock (#9286)

---
 ietf/api/tests.py               | 2 +-
 ietf/community/tests.py         | 2 +-
 ietf/doc/tests.py               | 2 +-
 ietf/doc/tests_ballot.py        | 2 +-
 ietf/doc/tests_draft.py         | 2 +-
 ietf/doc/tests_material.py      | 2 +-
 ietf/doc/tests_review.py        | 2 +-
 ietf/doc/tests_tasks.py         | 2 +-
 ietf/group/tests.py             | 2 +-
 ietf/group/tests_info.py        | 2 +-
 ietf/idindex/tests.py           | 2 +-
 ietf/ipr/management/tests.py    | 2 +-
 ietf/ipr/tests.py               | 2 +-
 ietf/meeting/tests_models.py    | 2 +-
 ietf/meeting/tests_tasks.py     | 2 +-
 ietf/meeting/tests_utils.py     | 2 +-
 ietf/meeting/tests_views.py     | 2 +-
 ietf/message/tests.py           | 2 +-
 ietf/nomcom/management/tests.py | 2 +-
 ietf/nomcom/tests.py            | 2 +-
 ietf/person/tests.py            | 2 +-
 ietf/review/tests.py            | 2 +-
 ietf/submit/tests.py            | 2 +-
 ietf/sync/tests.py              | 2 +-
 ietf/utils/management/tests.py  | 2 +-
 ietf/utils/tests.py             | 2 +-
 requirements.txt                | 2 --
 27 files changed, 26 insertions(+), 28 deletions(-)

diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 93a2195467..93515dd0cb 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -5,7 +5,7 @@
 import datetime
 import json
 import html
-import mock
+from unittest import mock
 import os
 import sys
 
diff --git a/ietf/community/tests.py b/ietf/community/tests.py
index 1255ba46eb..04f1433d61 100644
--- a/ietf/community/tests.py
+++ b/ietf/community/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2016-2023, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-import mock
+from unittest import mock
 from pyquery import PyQuery
 
 from django.test.utils import override_settings
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index 1229df46c5..d3fba03bcc 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -10,7 +10,7 @@
 from django.http import HttpRequest
 import lxml
 import bibtexparser
-import mock
+from unittest import mock
 import json
 import copy
 import random
diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index ec23f3d491..810ee598f6 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -3,7 +3,7 @@
 
 
 import datetime
-import mock
+from unittest import mock
 
 from pyquery import PyQuery
 
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 4753c4ff0c..576feb0582 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -5,7 +5,7 @@
 import os
 import datetime
 import io
-import mock
+from unittest import mock
 
 from collections import Counter
 from pathlib import Path
diff --git a/ietf/doc/tests_material.py b/ietf/doc/tests_material.py
index c87341c95b..04779bdaf1 100644
--- a/ietf/doc/tests_material.py
+++ b/ietf/doc/tests_material.py
@@ -6,7 +6,7 @@
 import shutil
 import io
 
-from mock import call, patch
+from unittest.mock import call, patch
 from pathlib import Path
 from pyquery import PyQuery
 
diff --git a/ietf/doc/tests_review.py b/ietf/doc/tests_review.py
index 9850beca75..8c1fc99ffe 100644
--- a/ietf/doc/tests_review.py
+++ b/ietf/doc/tests_review.py
@@ -8,7 +8,7 @@
 import os
 import shutil
 
-from mock import patch, Mock
+from unittest.mock import patch, Mock
 from requests import Response
 
 from django.apps import apps
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 8a6ffa8be1..29689cd596 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -2,7 +2,7 @@
 
 import debug    # pyflakes:ignore
 import datetime
-import mock
+from unittest import mock
 
 from pathlib import Path
 
diff --git a/ietf/group/tests.py b/ietf/group/tests.py
index 31f8cc45b5..229744388c 100644
--- a/ietf/group/tests.py
+++ b/ietf/group/tests.py
@@ -3,7 +3,7 @@
 
 import datetime
 import json
-import mock
+from unittest import mock
 
 from django.urls import reverse as urlreverse
 from django.db.models import Q
diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index aaf937ee43..eb85860ece 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -6,7 +6,7 @@
 import datetime
 import io
 import bleach
-import mock
+from unittest import mock
 
 from unittest.mock import call, patch
 from pathlib import Path
diff --git a/ietf/idindex/tests.py b/ietf/idindex/tests.py
index 5cc7a7b3bb..ba6100550d 100644
--- a/ietf/idindex/tests.py
+++ b/ietf/idindex/tests.py
@@ -3,7 +3,7 @@
 
 
 import datetime
-import mock
+from unittest import mock
 
 from pathlib import Path
 from tempfile import TemporaryDirectory
diff --git a/ietf/ipr/management/tests.py b/ietf/ipr/management/tests.py
index d84b0cfef4..d7acd65042 100644
--- a/ietf/ipr/management/tests.py
+++ b/ietf/ipr/management/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2021, All Rights Reserved
 # -*- coding: utf-8 -*-
 """Tests of ipr management commands"""
-import mock
+from unittest import mock
 import sys
 
 from django.core.management import call_command
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index e0d00b5d1a..74fa540126 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -3,7 +3,7 @@
 
 
 import datetime
-import mock
+from unittest import mock
 import re
 
 from pyquery import PyQuery
diff --git a/ietf/meeting/tests_models.py b/ietf/meeting/tests_models.py
index e333ddad9a..869d9ec814 100644
--- a/ietf/meeting/tests_models.py
+++ b/ietf/meeting/tests_models.py
@@ -3,7 +3,7 @@
 """Tests of models in the Meeting application"""
 import datetime
 
-from mock import patch
+from unittest.mock import patch
 
 from django.conf import settings
 from django.test import override_settings
diff --git a/ietf/meeting/tests_tasks.py b/ietf/meeting/tests_tasks.py
index 66de212899..0c442c4bf7 100644
--- a/ietf/meeting/tests_tasks.py
+++ b/ietf/meeting/tests_tasks.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2025, All Rights Reserved
 
 import datetime
-from mock import patch, call
+from unittest.mock import patch, call
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today
 from .factories import MeetingFactory
diff --git a/ietf/meeting/tests_utils.py b/ietf/meeting/tests_utils.py
index 391e017d68..7dd8f435e1 100644
--- a/ietf/meeting/tests_utils.py
+++ b/ietf/meeting/tests_utils.py
@@ -7,7 +7,7 @@
 import json
 import jsonschema
 from json import JSONDecodeError
-from mock import patch, Mock
+from unittest.mock import patch, Mock
 
 from django.http import HttpResponse, JsonResponse
 from ietf.meeting.factories import MeetingFactory, RegistrationFactory, RegistrationTicketFactory
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 1aac2a6523..96a29c2297 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -12,7 +12,7 @@
 import requests_mock
 
 from unittest import skipIf
-from mock import call, patch, PropertyMock
+from unittest.mock import call, patch, PropertyMock
 from pyquery import PyQuery
 from lxml.etree import tostring
 from io import StringIO, BytesIO
diff --git a/ietf/message/tests.py b/ietf/message/tests.py
index a677d5477e..e1bad9a1e6 100644
--- a/ietf/message/tests.py
+++ b/ietf/message/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2013-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 import datetime
-import mock
+from unittest import mock
 
 from smtplib import SMTPException
 
diff --git a/ietf/nomcom/management/tests.py b/ietf/nomcom/management/tests.py
index 7bda2b5aa5..08c0e1fe32 100644
--- a/ietf/nomcom/management/tests.py
+++ b/ietf/nomcom/management/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2021, All Rights Reserved
 # -*- coding: utf-8 -*-
 """Tests of nomcom management commands"""
-import mock
+from unittest import mock
 import sys
 
 from collections import namedtuple
diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index ea17da6707..cc2e0826d3 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -4,7 +4,7 @@
 
 import datetime
 import io
-import mock
+from unittest import mock
 import random
 import shutil
 
diff --git a/ietf/person/tests.py b/ietf/person/tests.py
index 61d9b0ed70..6326362fd8 100644
--- a/ietf/person/tests.py
+++ b/ietf/person/tests.py
@@ -4,7 +4,7 @@
 
 import datetime
 import json
-import mock
+from unittest import mock
 
 from io import StringIO, BytesIO
 from PIL import Image
diff --git a/ietf/review/tests.py b/ietf/review/tests.py
index e9ddbd47af..5dc8f11e8e 100644
--- a/ietf/review/tests.py
+++ b/ietf/review/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2019-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 import datetime
-import mock
+from unittest import mock
 import debug # pyflakes:ignore
 
 from pyquery import PyQuery
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 7e70c55965..6b9002502b 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -5,7 +5,7 @@
 import datetime
 import email
 import io
-import mock
+from unittest import mock
 import os
 import re
 import sys
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 14d65de0b2..182b6e24c4 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -6,7 +6,7 @@
 import io
 import json
 import datetime
-import mock
+from unittest import mock
 import quopri
 import requests
 
diff --git a/ietf/utils/management/tests.py b/ietf/utils/management/tests.py
index d704999cd1..38be464c7f 100644
--- a/ietf/utils/management/tests.py
+++ b/ietf/utils/management/tests.py
@@ -1,7 +1,7 @@
 # Copyright The IETF Trust 2013-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-import mock
+from unittest import mock
 
 from django.core.management import call_command, CommandError
 from django.test import override_settings
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index ce1842236d..01433888fe 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -11,7 +11,7 @@
 import shutil
 import types
 
-from mock import call, patch
+from unittest.mock import call, patch
 from pyquery import PyQuery
 from typing import Dict, List       # pyflakes:ignore
 
diff --git a/requirements.txt b/requirements.txt
index 4eb573ce36..8ed354192a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -51,8 +51,6 @@ logging_tree>=1.9    # Used only by the showloggers management command
 lxml>=5.3.0
 markdown>=3.3.6
 types-markdown>=3.3.6
-mock>=4.0.3    # Used only by tests, of course
-types-mock>=4.0.3
 mypy~=1.7.0    # Version requirements determined by django-stubs.
 oic>=1.3    # Used only by tests
 Pillow>=9.1.0

From e0546b1543565c0a293d198db9b15f1dd5121600 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:04:09 -0300
Subject: [PATCH 399/707] fix: blank=True for xml_version (#9285)

---
 .../0002_alter_submission_xml_version.py       | 18 ++++++++++++++++++
 ietf/submit/models.py                          |  2 +-
 2 files changed, 19 insertions(+), 1 deletion(-)
 create mode 100644 ietf/submit/migrations/0002_alter_submission_xml_version.py

diff --git a/ietf/submit/migrations/0002_alter_submission_xml_version.py b/ietf/submit/migrations/0002_alter_submission_xml_version.py
new file mode 100644
index 0000000000..275e6efd95
--- /dev/null
+++ b/ietf/submit/migrations/0002_alter_submission_xml_version.py
@@ -0,0 +1,18 @@
+# Generated by Django 4.2.23 on 2025-08-01 19:33
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("submit", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="submission",
+            name="xml_version",
+            field=models.CharField(blank=True, default=None, max_length=4, null=True),
+        ),
+    ]
diff --git a/ietf/submit/models.py b/ietf/submit/models.py
index 51f7541e31..1145f761b4 100644
--- a/ietf/submit/models.py
+++ b/ietf/submit/models.py
@@ -55,7 +55,7 @@ class Submission(models.Model):
     file_size = models.IntegerField(null=True, blank=True)
     document_date = models.DateField(null=True, blank=True)
     submission_date = models.DateField(default=date_today)
-    xml_version = models.CharField(null=True, max_length=4, default=None)
+    xml_version = models.CharField(null=True, blank=True, max_length=4, default=None)
 
     submitter = models.CharField(max_length=255, blank=True, help_text="Name and email of submitter, e.g. \"John Doe &lt;john@example.org&gt;\".")
 

From 827f4e74a1b9a8e872634f31e9484a3dc8cd0842 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:09:15 -0300
Subject: [PATCH 400/707] fix: escape nulls in XML api responses (#9283)

* fix: escape nulls in XML api responses

* refactor: use \u2400 instead of \0

Less likely to lead to null injection down the road

* test: modern naming/python

* test: test null char handling

* test: remove unused vars
---
 ietf/api/__init__.py | 21 +++++++++++++++++++++
 ietf/api/tests.py    | 20 ++++++++++++++++++--
 2 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index 9fadab8e6f..d70866083e 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -145,5 +145,26 @@ def dehydrate(self, bundle, for_list=True):
 
 
 class Serializer(tastypie.serializers.Serializer):
+    OPTION_ESCAPE_NULLS = "datatracker-escape-nulls"
+
     def format_datetime(self, data):
         return data.astimezone(datetime.timezone.utc).replace(tzinfo=None).isoformat(timespec="seconds") + "Z"
+
+    def to_simple(self, data, options):
+        options = options or {}
+        simple_data = super().to_simple(data, options)
+        if (
+            options.get(self.OPTION_ESCAPE_NULLS, False) 
+            and isinstance(simple_data, str)
+        ):
+            # replace nulls with unicode "symbol for null character", \u2400
+            simple_data = simple_data.replace("\x00", "\u2400")
+        return simple_data
+
+    def to_etree(self, data, options=None, name=None, depth=0):
+        # lxml does not escape nulls on its own, so ask to_simple() to do it.
+        # This is mostly (only?) an issue when generating errors responses for
+        # fuzzers.
+        options = options or {}
+        options[self.OPTION_ESCAPE_NULLS] = True
+        return super().to_etree(data, options, name, depth)
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 93515dd0cb..865f877bfb 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -41,6 +41,7 @@
 from ietf.utils.models import DumpInfo
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, reload_db_objects
 
+from . import Serializer
 from .ietf_utils import is_valid_token, requires_api_token
 from .views import EmailIngestionError
 
@@ -1496,7 +1497,7 @@ def test_good_password(self):
         data = self.response_data(r)
         self.assertEqual(data["result"], "success")
 
-class TastypieApiTestCase(ResourceTestCaseMixin, TestCase):
+class TastypieApiTests(ResourceTestCaseMixin, TestCase):
     def __init__(self, *args, **kwargs):
         self.apps = {}
         for app_name in settings.INSTALLED_APPS:
@@ -1506,7 +1507,7 @@ def __init__(self, *args, **kwargs):
                 models_path = os.path.join(os.path.dirname(app.__file__), "models.py")
                 if os.path.exists(models_path):
                     self.apps[name] = app_name
-        super(TastypieApiTestCase, self).__init__(*args, **kwargs)
+        super().__init__(*args, **kwargs)
 
     def test_api_top_level(self):
         client = Client(Accept='application/json')
@@ -1541,6 +1542,21 @@ def test_all_model_resources_exist(self):
                     self.assertIn(model._meta.model_name, list(app_resources.keys()),
                         "There doesn't seem to be any API resource for model %s.models.%s"%(app.__name__,model.__name__,))
 
+    def test_serializer_to_etree_handles_nulls(self):
+        """Serializer to_etree() should handle a null character"""
+        serializer = Serializer()
+        try:
+            serializer.to_etree("string with no nulls in it")
+        except ValueError:
+            self.fail("serializer.to_etree raised ValueError on an ordinary string")
+        try:
+            serializer.to_etree("string with a \x00 in it")
+        except ValueError:
+            self.fail(
+                "serializer.to_etree raised ValueError on a string "
+                "containing a null character"
+            )
+
 
 class RfcdiffSupportTests(TestCase):
 

From 8c4bff875398fb7fc7de624c8155c8377276cec0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:11:12 -0300
Subject: [PATCH 401/707] test: guard against empty path (#9282)

---
 ietf/utils/test_runner.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index d0a5496283..a9b2e5d572 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -432,7 +432,11 @@ def get_template_paths(apps=None) -> list[str]:
                 relative_path = pathlib.Path(
                     dirpath.removeprefix(templatepath).lstrip("/")
                 )
-                if apps and relative_path.parts[0] not in apps:
+                if (
+                    apps 
+                    and len(relative_path.parts) > 0
+                    and relative_path.parts[0] not in apps
+                ):
                     continue  # skip uninteresting apps
                 for filename in files:
                     file_path = project_path / filename

From 649de73cab6c3aed3e909280e80e02272bc362a8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:13:46 -0300
Subject: [PATCH 402/707] fix: validate review_requests_history params (#9281)

* test: test null chars in GET params

* fix: validate GET params
---
 ietf/group/tests_review.py | 39 +++++++++++++++++++++++++++++++++
 ietf/group/views.py        | 45 +++++++++++++++++++++++---------------
 2 files changed, 66 insertions(+), 18 deletions(-)

diff --git a/ietf/group/tests_review.py b/ietf/group/tests_review.py
index d671228953..89c755bb26 100644
--- a/ietf/group/tests_review.py
+++ b/ietf/group/tests_review.py
@@ -943,3 +943,42 @@ def test_requests_history_filter_page(self):
         self.assertNotContains(r, 'Assigned')
         self.assertNotContains(r, 'Accepted')
         self.assertNotContains(r, 'Completed')
+
+    def test_requests_history_invalid_filter_parameters(self):
+        # First assignment as assigned
+        review_req = ReviewRequestFactory(state_id="assigned", doc=DocumentFactory())
+        group = review_req.team
+        url = urlreverse(
+            "ietf.group.views.review_requests_history",
+            kwargs={"acronym": group.acronym},
+        )
+        invalid_reviewer_emails = [
+            "%00null@example.com",  # urlencoded null character
+            "null@exa%00mple.com",  # urlencoded null character
+            "\x00null@example.com",  # literal null character
+            "null@ex\x00ample.com",  # literal null character
+        ]
+        for invalid_email in invalid_reviewer_emails:
+            r = self.client.get(
+                url + f"?reviewer_email={invalid_email}"
+            )
+            self.assertEqual(
+                r.status_code, 
+                400,
+                f"should return a 400 response for reviewer_email={repr(invalid_email)}"
+            )
+
+        invalid_since_choices = [
+            "forever",  # not an option
+            "all\x00",  # literal null character
+            "a%00ll",  # urlencoded null character
+        ]
+        for invalid_since in invalid_since_choices:
+            r = self.client.get(
+                url + f"?since={invalid_since}"
+            )
+            self.assertEqual(
+                r.status_code, 
+                400,
+                f"should return a 400 response for since={repr(invalid_since)}"
+            )
diff --git a/ietf/group/views.py b/ietf/group/views.py
index bc79599722..3529b31f68 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -51,7 +51,13 @@
 from django.contrib.auth.decorators import login_required
 from django.db.models import Count, F, OuterRef, Prefetch, Q, Subquery, TextField, Value
 from django.db.models.functions import Coalesce
-from django.http import HttpResponse, HttpResponseRedirect, Http404, JsonResponse
+from django.http import (
+    HttpResponse,
+    HttpResponseRedirect,
+    Http404,
+    JsonResponse,
+    HttpResponseBadRequest,
+)
 from django.shortcuts import render, redirect, get_object_or_404
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
@@ -96,11 +102,9 @@
 from ietf.review.policies import get_reviewer_queue_policy
 from ietf.review.utils import (can_manage_review_requests_for_team,
                                can_access_review_stats_for_team,
-
                                extract_revision_ordered_review_requests_for_documents_and_replaced,
                                assign_review_request_to_reviewer,
                                close_review_request,
-
                                suggested_review_requests_for_team,
                                unavailable_periods_to_list,
                                current_unavailable_periods_for_reviewers,
@@ -686,13 +690,30 @@ def history(request, acronym, group_type=None):
                       "can_add_comment": can_add_comment,
                   }))
 
+
+class RequestsHistoryParamsForm(forms.Form):
+    SINCE_CHOICES = (
+        (None, "1 month"),
+        ("3m", "3 months"),
+        ("6m", "6 months"),
+        ("1y", "1 year"),
+        ("2y", "2 years"),
+        ("all", "All"),
+    )
+
+    reviewer_email = forms.EmailField(required=False)
+    since = forms.ChoiceField(choices=SINCE_CHOICES, required=False)
+
 def review_requests_history(request, acronym, group_type=None):
     group = get_group_or_404(acronym, group_type)
     if not group.features.has_reviews:
         raise Http404
 
-    reviewer_email = request.GET.get("reviewer_email", None)
+    params = RequestsHistoryParamsForm(request.GET)
+    if not params.is_valid():
+        return HttpResponseBadRequest("Invalid parameters")
 
+    reviewer_email = params.cleaned_data["reviewer_email"] or None
     if reviewer_email:
         history = ReviewAssignment.history.model.objects.filter(
             review_request__team__acronym=acronym,
@@ -702,19 +723,7 @@ def review_requests_history(request, acronym, group_type=None):
             review_request__team__acronym=acronym)
         reviewer_email = ''
         
-    since_choices = [
-        (None, "1 month"),
-        ("3m", "3 months"),
-        ("6m", "6 months"),
-        ("1y", "1 year"),
-        ("2y", "2 years"),
-        ("all", "All"),
-    ]
-    since = request.GET.get("since", None)
-    
-    if since not in [key for key, label in since_choices]:
-        since = None
-
+    since = params.cleaned_data["since"] or None
     if since != "all":
         date_limit = {
             None: datetime.timedelta(days=31),
@@ -731,7 +740,7 @@ def review_requests_history(request, acronym, group_type=None):
                       "group": group,
                       "acronym": acronym,
                       "history": history,
-                      "since_choices": since_choices,
+                      "since_choices": params.SINCE_CHOICES,
                       "since": since,
                       "reviewer_email": reviewer_email
                   }))

From 39165a0b5d079459da601ea82f87c9981f6508b7 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 15:25:54 -0300
Subject: [PATCH 403/707] fix: serve materials w/mixed-case exts (#9273)

* fix: serve materials w/ mixed-case exts

* fix: another endpoint+reorder regex
---
 ietf/meeting/urls.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index 5da24ddb6f..18b123b4d8 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -64,7 +64,7 @@ def get_redirect_url(self, *args, **kwargs):
 type_interim_patterns = [
     url(r'^agenda/(?P<acronym>[A-Za-z0-9-]+)-drafts.pdf$', views.session_draft_pdf),
     url(r'^agenda/(?P<acronym>[A-Za-z0-9-]+)-drafts.tgz$', views.session_draft_tarfile),
-    url(r'^materials/%(document)s(?P<ext>\.[a-z0-9]+)$' % settings.URL_REGEXPS, views.materials_document),
+    url(r'^materials/%(document)s(?P<ext>\.[A-Za-z0-9]+)$' % settings.URL_REGEXPS, views.materials_document),
     url(r'^materials/%(document)s/?$' % settings.URL_REGEXPS, views.materials_document),
     url(r'^agenda.json$', views.agenda_json)
 ]
@@ -85,7 +85,7 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^week-view(?:.html)?/?$', AgendaRedirectView.as_view(pattern_name='agenda', permanent=True)),
     url(r'^materials(?:.html)?/?$', views.materials),
     url(r'^request_minutes/?$', views.request_minutes),
-    url(r'^materials/%(document)s(?P<ext>\.[a-z0-9]+)?/?$' % settings.URL_REGEXPS, views.materials_document),
+    url(r'^materials/%(document)s(?P<ext>\.[A-Za-z0-9]+)?/?$' % settings.URL_REGEXPS, views.materials_document),
     url(r'^session/?$', views.materials_editable_groups),
     url(r'^proceedings(?:.html)?/?$', views.proceedings),
     url(r'^proceedings(?:.html)?/finalize/?$', views.finalize_proceedings),

From afb0d2d245a11384d73e8f0cc0d31150dd91f80a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 17:16:47 -0300
Subject: [PATCH 404/707] chore(deps): pin jsonfield version (#9267)

At least nominally, 3.2.0 requires py3.10. Package is deprecated.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 8ed354192a..1b00cf81a2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -44,7 +44,7 @@ hashids>=1.3.1
 html2text>=2020.1.16    # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
 inflect>= 6.0.2
-jsonfield>=3.1.0    # for SubmissionCheck.  This is https://github.com/bradjasper/django-jsonfield/.
+jsonfield>=3.1.0,<3.2.0  # 3.2.0 needs py3.10; deprecated-replace with Django JSONField
 jsonschema[format]>=4.2.1
 jwcrypto>=1.2    # for signed notifications - this is aspirational, and is not really used.
 logging_tree>=1.9    # Used only by the showloggers management command

From 6494ce880631ce798424a3a57db88f50f6ebf370 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Mon, 4 Aug 2025 20:29:21 +0000
Subject: [PATCH 405/707] ci: update base image target version to 20250804T2017

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 8317195446..662aee950f 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250624T1543
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250804T2017
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 1f2e39a0a2..d2c3dd6fc9 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250624T1543
+20250804T2017

From e220bc89b464aab54e11c6698f074ed51982c715 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Mon, 4 Aug 2025 22:43:44 +0200
Subject: [PATCH 406/707] Add link to reviewers's reviews (#9272)

---
 ietf/templates/person/profile.html | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ietf/templates/person/profile.html b/ietf/templates/person/profile.html
index 1424f037a1..a78a90412f 100644
--- a/ietf/templates/person/profile.html
+++ b/ietf/templates/person/profile.html
@@ -50,7 +50,11 @@ <h2 class="mt-5" id="roles-{{ forloop.counter }}">Roles</h2>
                 <tbody>
                     {% for role in person.role_set.all|active_roles %}
                         <tr>
-                            <td>{{ role.name.name }}</td>
+                            <td>{{ role.name.name }}
+                                {% if role.name.name == 'Reviewer' %}
+                                 (<a href="{% url 'ietf.group.views.review_requests_history' acronym=role.group.acronym %}?reviewer_email={{ role.email.address }}&since=1y">See reviews</a>)
+                                {% endif %}
+                            </td>
                             <td>
                                 <a href="{% url 'ietf.group.views.group_about' acronym=role.group.acronym %}">{{ role.group.name }}</a>
                                 (<a href="{% url 'ietf.group.views.group_about' acronym=role.group.acronym %}">{{ role.group.acronym }}</a>)

From e3b87d9459c597731d828482bd13041931fe0a2d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 4 Aug 2025 22:28:31 -0300
Subject: [PATCH 407/707] chore: different celery path for sandboxes (#9300)

* chore: different celery path for sandboxes

* chore: typo
---
 docker/scripts/app-init-celery.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docker/scripts/app-init-celery.sh b/docker/scripts/app-init-celery.sh
index 5788b943da..17925633d2 100755
--- a/docker/scripts/app-init-celery.sh
+++ b/docker/scripts/app-init-celery.sh
@@ -92,7 +92,14 @@ fi
 
 USER_BIN_PATH="/home/dev/.local/bin"
 WATCHMEDO="$USER_BIN_PATH/watchmedo"
-CELERY="$USER_BIN_PATH/celery"
+# Find a celery that works
+if [[ -x "$USER_BIN_PATH/celery" ]]; then
+    # This branch is used for dev
+    CELERY="$USER_BIN_PATH/celery"
+else
+    # This branch is used for sandbox instances
+    CELERY="/usr/local/bin/celery"
+fi
 trap 'trap "" TERM; cleanup' TERM
 # start celery in the background so we can trap the TERM signal
 if [[ -n "${DEV_MODE}" && -x "${WATCHMEDO}" ]]; then

From b8e135b928f9d67c83e6ef6fda6c273fdb106748 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 5 Aug 2025 14:38:30 -0300
Subject: [PATCH 408/707] chore: remove find_github_backup_info.py (#9307)

---
 .../commands/find_github_backup_info.py       | 74 -------------------
 requirements.txt                              |  1 -
 2 files changed, 75 deletions(-)
 delete mode 100644 ietf/doc/management/commands/find_github_backup_info.py

diff --git a/ietf/doc/management/commands/find_github_backup_info.py b/ietf/doc/management/commands/find_github_backup_info.py
deleted file mode 100644
index f1f71452df..0000000000
--- a/ietf/doc/management/commands/find_github_backup_info.py
+++ /dev/null
@@ -1,74 +0,0 @@
-# Copyright The IETF Trust 2020, All Rights Reserved
-
-
-import github3
-
-from collections import Counter
-from urllib.parse import urlparse
-
-from django.conf import settings
-from django.core.management.base import BaseCommand, CommandError
-
-from ietf.doc.models import DocExtResource
-from ietf.group.models import GroupExtResource
-from ietf.person.models import PersonExtResource
-
-# TODO: Think more about submodules. This currently will only take top level repos, with the assumption that the clone will include arguments to grab all the submodules. 
-# As a consequence, we might end up pulling more than we need (or that the org or user expected)
-# Make sure this is what we want.
-
-class Command(BaseCommand):
-    help = ('Locate information about github repositories to backup')
-
-    def add_arguments(self, parser):
-        parser.add_argument('--verbose', dest='verbose', action='store_true', help='Show counts of types of repositories')
-
-    def handle(self, *args, **options):
-
-        if not (hasattr(settings,'GITHUB_BACKUP_API_KEY') and settings.GITHUB_BACKUP_API_KEY):
-            raise CommandError("ERROR: can't find GITHUB_BACKUP_API_KEY") # TODO: at >= py3.1, use returncode
-
-        github = github3.login(token = settings.GITHUB_BACKUP_API_KEY)
-        owners = dict()
-        repos = set()
-
-        for cls in (DocExtResource, GroupExtResource, PersonExtResource):
-            for res in cls.objects.filter(name_id__in=('github_repo','github_org')):
-                path_parts = urlparse(res.value).path.strip('/').split('/')
-                if not path_parts or not path_parts[0]:
-                    continue
-
-                owner = path_parts[0]
-
-                if owner not in owners:
-                    try:
-                        gh_owner = github.user(username=owner)
-                        owners[owner] = gh_owner
-                    except github3.exceptions.NotFoundError:
-                        continue 
-
-                if gh_owner.type in ('User', 'Organization'):
-                    if len(path_parts) > 1:
-                        repo = path_parts[1]
-                        if (owner, repo) not in repos:
-                            try:
-                                github.repository(owner,repo)
-                                repos.add( (owner, repo) )
-                            except github3.exceptions.NotFoundError:
-                                continue
-                    else:
-                        for repo in github.repositories_by(owner):
-                            repos.add( (owner, repo.name) )
-
-        owner_types = Counter([owners[owner].type for owner in owners])
-        if options['verbose']:
-            self.stdout.write("Owners:")
-            for key in owner_types:
-                self.stdout.write("    %s: %s"%(key,owner_types[key]))
-            self.stdout.write("Repositories: %d" % len(repos))
-            for repo in sorted(repos):
-                self.stdout.write("    https://github.com/%s/%s" % repo )
-        else:
-            for repo in sorted(repos):
-                self.stdout.write("%s/%s" % repo )
-
diff --git a/requirements.txt b/requirements.txt
index 1b00cf81a2..f82bfc4101 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -38,7 +38,6 @@ drf-spectacular>=0.27
 drf-standardized-errors[openapi] >= 0.14
 types-docutils>=0.18.1
 factory-boy>=3.3
-github3.py>=3.2.0
 gunicorn>=20.1.0
 hashids>=1.3.1
 html2text>=2020.1.16    # Used only to clean comment field of secr/sreq

From beb873efc8a98cc5fe144304ebc050faeb814371 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Tue, 5 Aug 2025 17:51:24 +0000
Subject: [PATCH 409/707] ci: update base image target version to 20250805T1738

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 662aee950f..3d5520babe 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250804T2017
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250805T1738
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index d2c3dd6fc9..90d83abf03 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250804T2017
+20250805T1738

From ebe6fbf046590c9b6f08560075b760f2164f1f2a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 7 Aug 2025 12:13:41 -0300
Subject: [PATCH 410/707] feat: personless User deletion via admin (#9312)

* feat: admin to allow user deletion

* fix: permissions + drop dangerous action

* chore: minor style lint

* fix: avoid limit on a queryset delete

* feat: User age filter

* feat: show useful fields on User admin

* chore: fix lint

* fix: reverse direction of age filter
---
 ietf/ietfauth/admin.py | 136 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 136 insertions(+)
 create mode 100644 ietf/ietfauth/admin.py

diff --git a/ietf/ietfauth/admin.py b/ietf/ietfauth/admin.py
new file mode 100644
index 0000000000..c2914f9efa
--- /dev/null
+++ b/ietf/ietfauth/admin.py
@@ -0,0 +1,136 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import datetime
+
+from django.conf import settings
+from django.contrib import admin, messages
+from django.contrib.admin import action
+from django.contrib.admin.actions import delete_selected as default_delete_selected
+from django.contrib.auth.admin import UserAdmin
+from django.contrib.auth.models import User
+from django.utils import timezone
+
+
+# Replace default UserAdmin with our custom one
+admin.site.unregister(User)
+
+
+class AgeListFilter(admin.SimpleListFilter):
+    title = "account age"
+    parameter_name = "age"
+    
+    def lookups(self, request, model_admin):
+        return [
+            ("1day", "> 1 day"),
+            ("3days", "> 3 days"),
+            ("1week", "> 1 week"),
+            ("1month", "> 1 month"),
+            ("1year", "> 1 year"),
+        ]
+
+    def queryset(self, request, queryset):
+        deltas = {
+            "1day": datetime.timedelta(days=1),
+            "3days": datetime.timedelta(days=3),
+            "1week": datetime.timedelta(weeks=1),
+            "1month": datetime.timedelta(days=30),
+            "1year": datetime.timedelta(days=365),
+        }
+        if self.value():
+            return queryset.filter(date_joined__lt=timezone.now()-deltas[self.value()])
+        return queryset
+
+
+@admin.register(User)
+class CustomUserAdmin(UserAdmin):
+    list_display = (
+        "username",
+        "person",
+        "date_joined",
+        "last_login",
+        "is_staff",
+    )
+    list_filter = list(UserAdmin.list_filter) + [
+        AgeListFilter,
+        ("person", admin.EmptyFieldListFilter),
+    ]
+    actions = ["delete_selected"]
+
+    @action(
+        permissions=["delete"], description="Delete personless %(verbose_name_plural)s"
+    )
+    def delete_selected(self, request, queryset):
+        """Delete selected action restricted to Users with a null Person field
+
+        This displaces the default delete_selected action with a safer one that will
+        only delete personless Users. It is done this way instead of by introducing
+        a new action so that we can simply hand off to the default action (imported
+        as default_delete_selected()) without having to adjust its template (and maybe
+        other things) to make it work with a different action name.
+        """
+        already_confirmed = bool(request.POST.get("post"))
+        personless_queryset = queryset.filter(person__isnull=True)
+        original_count = queryset.count()
+        personless_count = personless_queryset.count()
+        if personless_count > original_count:
+            # Refuse to act if the count increased!
+            self.message_user(
+                request,
+                (
+                    "Limiting the selection to Users without a Person INCREASED the "
+                    "count from {} to {}. This should not happen and probably means a "
+                    "concurrent change to the database affected this request. Please "
+                    "try again.".format(original_count, personless_count)
+                ),
+                level=messages.ERROR,
+            )
+            return None  # return to changelist
+
+        # Display warning/info if this is showing the confirmation page
+        if not already_confirmed:
+            if personless_count < original_count:
+                self.message_user(
+                    request,
+                    (
+                        "Limiting the selection to Users without a Person reduced the "
+                        "count from {} to {}. Only {} will be deleted.".format(
+                            original_count, personless_count, personless_count
+                        )
+                    ),
+                    level=messages.WARNING,
+                )
+            else:
+                self.message_user(
+                    request,
+                    "Confirmed that all selected Users had no Persons.",
+                )
+
+        # Django limits the number of fields in a request. The delete form itself
+        # includes a few metadata fields, so give it a little padding. The default
+        # limit is 1000 and everything will break if it's a small number, so not
+        # bothering to check that it's > 10.
+        max_count = settings.DATA_UPLOAD_MAX_NUMBER_FIELDS - 10
+        if personless_count > max_count:
+            self.message_user(
+                request,
+                (
+                    f"Only {max_count} Users can be deleted at once. Will only delete "
+                    f"the first {max_count} selected Personless Users."
+                ),
+                level=messages.WARNING,
+            )
+            # delete() doesn't like a queryset limited via [:max_count], so do an
+            # equivalent filter.
+            last_to_delete = personless_queryset.order_by("pk")[max_count]
+            personless_queryset = personless_queryset.filter(pk__lt=last_to_delete.pk)
+
+        if already_confirmed and personless_count != original_count:
+            # After confirmation, none of the above filtering should change anything.
+            # Refuse to delete if the DB moved underneath us.
+            self.message_user(
+                request,
+                "Queryset count changed, nothing deleted. Please try again.",
+                level=messages.ERROR,
+            )
+            return None
+
+        return default_delete_selected(self, request, personless_queryset)

From 86bce86731048f2dde04ace47af6425b775e23e9 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Thu, 7 Aug 2025 11:14:20 -0400
Subject: [PATCH 411/707] feat: use icalendar instead manual template (#9187)

* feat: use icalendar instead manual template

* avoid code duplication

* code cleanup

* ruff ruff

* remove comments

* add custom field with meeting's local Time zone

* more code cleanup

* remove unused template for ical

* pyflakes: remove unused imports and vars

* improve tests and code coverage

* remove commented line

* change URL in ical to use session material page
---
 ietf/meeting/tests_views.py       |  53 +++++++----
 ietf/meeting/views.py             | 148 +++++++++++++++++++++++++++---
 ietf/templates/meeting/agenda.ics |  32 -------
 requirements.txt                  |   1 +
 4 files changed, 168 insertions(+), 66 deletions(-)
 delete mode 100644 ietf/templates/meeting/agenda.ics

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 96a29c2297..f382772485 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -15,6 +15,7 @@
 from unittest.mock import call, patch, PropertyMock
 from pyquery import PyQuery
 from lxml.etree import tostring
+from icalendar import Calendar
 from io import StringIO, BytesIO
 from bs4 import BeautifulSoup
 from urllib.parse import urlparse, urlsplit
@@ -384,9 +385,6 @@ def test_meeting_agenda(self):
         r = self.client.get(ical_url)
 
         assert_ical_response_is_valid(self, r)
-        self.assertContains(r, "BEGIN:VTIMEZONE")
-        self.assertContains(r, "END:VTIMEZONE")
-        self.assertContains(r, meeting.time_zone, msg_prefix="time_zone should appear in its original case")
         self.assertNotEqual(
             meeting.time_zone,
             meeting.time_zone.lower(),
@@ -405,21 +403,32 @@ def test_meeting_agenda(self):
         assert_ical_response_is_valid(self, r)
         self.assertContains(r, session.group.acronym)
         self.assertContains(r, session.group.name)
-        self.assertContains(r, session.remote_instructions)
-        self.assertContains(r, slot.location.name)
-        self.assertContains(r, 'https://onsite.example.com')
-        self.assertContains(r, 'https://meetecho.example.com')
-        self.assertContains(r, "BEGIN:VTIMEZONE")
-        self.assertContains(r, "END:VTIMEZONE")        
 
-        self.assertContains(r, session.agenda().get_href())
-        self.assertContains(
-            r,
+        cal = Calendar.from_ical(r.content)
+        events = [component for component in cal.walk() if component.name == "VEVENT"]
+
+        self.assertEqual(len(events), 2)
+        self.assertIn(session.remote_instructions, events[0].get('description'))
+        self.assertIn("Onsite tool: https://onsite.example.com", events[0].get('description'))
+        self.assertIn("Meetecho: https://meetecho.example.com", events[0].get('description'))
+        self.assertIn(f"Agenda {session.agenda().get_href()}", events[0].get('description'))
+        session_materials_url = settings.IDTRACKER_BASE_URL + urlreverse(
+            'ietf.meeting.views.session_details',
+            kwargs=dict(num=meeting.number, acronym=session.group.acronym)
+        )
+        self.assertIn(f"Session materials: {session_materials_url}", events[0].get('description'))
+        self.assertIn(
             urlreverse(
                 'ietf.meeting.views.session_details',
                 kwargs=dict(num=meeting.number, acronym=session.group.acronym)),
-            msg_prefix='ical should contain link to meeting materials page for session')
+            events[0].get('description'))
+        self.assertEqual(
+            session_materials_url,
+            events[0].get('url')
+        )
 
+        self.assertContains(r, f"LOCATION:{slot.location.name}")
+        
         # Floor Plan
         r = self.client.get(urlreverse('floor-plan', kwargs=dict(num=meeting.number)))
         self.assertEqual(r.status_code, 200)
@@ -1049,32 +1058,36 @@ def test_group_ical(self):
         s1 = Session.objects.filter(meeting=meeting, group__acronym="mars").first()
         a1 = s1.official_timeslotassignment()
         t1 = a1.timeslot
+
         # Create an extra session
         t2 = TimeSlotFactory.create(
             meeting=meeting,
-            time=meeting.tz().localize(
+            time=pytz.utc.localize(
                 datetime.datetime.combine(meeting.date, datetime.time(11, 30))
             )
         )
+     
         s2 = SessionFactory.create(meeting=meeting, group=s1.group, add_to_schedule=False)
         SchedTimeSessAssignment.objects.create(timeslot=t2, session=s2, schedule=meeting.schedule)
-        #
+        
         url = urlreverse('ietf.meeting.views.agenda_ical', kwargs={'num':meeting.number, 'acronym':s1.group.acronym, })
         r = self.client.get(url)
         assert_ical_response_is_valid(self,
                                       r,
                                       expected_event_summaries=['mars - Martian Special Interest Group'],
                                       expected_event_count=2)
-        self.assertContains(r, t1.local_start_time().strftime('%Y%m%dT%H%M%S'))
-        self.assertContains(r, t2.local_start_time().strftime('%Y%m%dT%H%M%S'))
-        #
+        self.assertContains(r, f"DTSTART:{t1.time.strftime('%Y%m%dT%H%M%SZ')}")
+        self.assertContains(r, f"DTEND:{(t1.time + t1.duration).strftime('%Y%m%dT%H%M%SZ')}")
+        self.assertContains(r, f"DTSTART:{t2.time.strftime('%Y%m%dT%H%M%SZ')}")
+        self.assertContains(r, f"DTEND:{(t2.time + t2.duration).strftime('%Y%m%dT%H%M%SZ')}")
+
         url = urlreverse('ietf.meeting.views.agenda_ical', kwargs={'num':meeting.number, 'session_id':s1.id, })
         r = self.client.get(url)
         assert_ical_response_is_valid(self, r,
                                       expected_event_summaries=['mars - Martian Special Interest Group'],
                                       expected_event_count=1)
-        self.assertContains(r, t1.local_start_time().strftime('%Y%m%dT%H%M%S'))
-        self.assertNotContains(r, t2.local_start_time().strftime('%Y%m%dT%H%M%S'))
+        self.assertContains(r, f"DTSTART:{t1.time.strftime('%Y%m%dT%H%M%SZ')}")
+        self.assertNotContains(r, f"DTSTART:{t2.time.strftime('%Y%m%dT%H%M%SZ')}")
 
     def test_parse_agenda_filter_params(self):
         def _r(show=(), hide=(), showtypes=(), hidetypes=()):
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 85eda5a8f4..7fa3d21259 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -118,6 +118,9 @@
     UploadAgendaForm, UploadBlueSheetForm, UploadMinutesForm, UploadSlidesForm,
     UploadNarrativeMinutesForm)
 
+from icalendar import Calendar, Event
+from ietf.doc.templatetags.ietf_filters import absurl
+
 request_summary_exclude_group_types = ['team']
 
     
@@ -137,6 +140,10 @@ def send_interim_change_notice(request, meeting):
     message.related_groups.add(group)
     send_mail_message(request, message)
 
+def parse_ical_line_endings(ical):
+    """Parse icalendar line endings to ensure they are RFC 5545 compliant"""
+    return re.sub(r'\r(?!\n)|(?<!\r)\n', '\r\n', ical)
+
 # -------------------------------------------------
 # View Functions
 # -------------------------------------------------
@@ -1982,8 +1989,10 @@ def agenda_by_type_ics(request,num=None,type=None):
     ).order_by('session__type__slug','timeslot__time')
     if type:
         assignments = assignments.filter(session__type__slug=type)
-    updated = meeting.updated()
-    return render(request,"meeting/agenda.ics",{"schedule":schedule,"updated":updated,"assignments":assignments},content_type="text/calendar")
+
+    return render_icalendar(schedule, assignments)
+
+
 
 def session_draft_list(num, acronym):
     try:
@@ -2103,6 +2112,125 @@ def ical_session_status(assignment):
     else:
         return "CONFIRMED"
 
+def render_icalendar(schedule, assignments):
+    ical_content = generate_agenda_ical(schedule, assignments)
+    return HttpResponse(ical_content, content_type="text/calendar")
+
+def generate_agenda_ical(schedule, assignments):
+    """Generate iCalendar using the icalendar library"""
+
+    cal = Calendar()
+    cal.add("prodid", "-//IETF//datatracker.ietf.org ical agenda//EN")
+    cal.add("version", "2.0")
+    cal.add("method", "PUBLISH")
+
+    for item in assignments:
+        event = Event()
+
+        uid = f"ietf-{schedule.meeting.number}-{item.timeslot.pk}-{item.session.group.acronym}"
+        event.add("uid", uid)
+
+        # add custom field with meeting's local TZ
+        event.add("x-meeting-tz", schedule.meeting.time_zone)
+
+        if item.session.name:
+            summary = item.session.name
+        else:
+            group = item.session.group_at_the_time()
+            summary = f"{group.acronym} - {group.name}"
+
+        if item.session.agenda_note:
+            summary += f" ({item.session.agenda_note})"
+
+        event.add("summary", summary)
+
+        if item.timeslot.show_location and item.timeslot.get_location():
+            event.add("location", item.timeslot.get_location())
+
+        if item.session and hasattr(item.session, "current_status"):
+            status = ical_session_status(item)
+        else:
+            status = ""
+        event.add("status", status)
+
+        event.add("class", "PUBLIC")
+
+        event.add("dtstart", item.timeslot.utc_start_time())
+        event.add("dtend", item.timeslot.utc_end_time())
+
+        # DTSTAMP: when the event was created or last modified (in UTC)
+        dtstamp = item.timeslot.modified.astimezone(pytz.UTC)
+        event.add("dtstamp", dtstamp)
+
+        description_parts = [item.timeslot.name]
+
+        if item.session.agenda_note:
+            description_parts.append(f"Note: {item.session.agenda_note}")
+
+        if hasattr(item.session, "onsite_tool_url") and callable(
+            item.session.onsite_tool_url
+        ):
+            onsite_url = item.session.onsite_tool_url()
+            if onsite_url:
+                description_parts.append(f"Onsite tool: {onsite_url}")
+
+        if hasattr(item.session, "video_stream_url") and callable(
+            item.session.video_stream_url
+        ):
+            video_url = item.session.video_stream_url()
+            if video_url:
+                description_parts.append(f"Meetecho: {video_url}")
+
+        if (
+            item.timeslot.location
+            and hasattr(item.timeslot.location, "webex_url")
+            and callable(item.timeslot.location.webex_url)
+            and item.timeslot.location.webex_url() is not None
+        ):
+            description_parts.append(f"Webex: {item.timeslot.location.webex_url()}")
+
+        if item.session.remote_instructions:
+            description_parts.append(
+                f"Remote instructions: {item.session.remote_instructions}"
+            )
+
+        try:
+            materials_url = absurl(
+                "ietf.meeting.views.session_details",
+                num=schedule.meeting.number,
+                acronym=item.session.group.acronym,
+            )
+            description_parts.append(f"Session materials: {materials_url}")
+            event.add("url", materials_url)
+        except:
+            pass
+
+        if (
+            hasattr(schedule.meeting, "get_number")
+            and schedule.meeting.get_number() is not None
+        ):
+            try:
+                agenda_url = absurl("agenda", num=schedule.meeting.number)
+                description_parts.append(
+                    f"See in schedule: {agenda_url}#row-{item.slug()}"
+                )
+            except:
+                pass
+
+        agenda = item.session.agenda()
+        if agenda and hasattr(agenda, "get_versionless_href"):
+            agenda_url = agenda.get_versionless_href()
+            description_parts.append(f"{agenda.type} {agenda_url}")
+
+        # Join all description parts with 2 newlines
+        description = "\n\n".join(description_parts)
+        event.add("description", description)
+
+        # Add event to calendar
+        cal.add_component(event)
+
+    return cal.to_ical().decode("utf-8")
+
 def parse_agenda_filter_params(querydict):
     """Parse agenda filter parameters from a request"""
     if len(querydict) == 0:
@@ -2154,7 +2282,6 @@ def agenda_ical(request, num=None, acronym=None, session_id=None):
     else:
         meeting = get_meeting(num, type_in=None)  # get requested meeting, whatever its type
     schedule = get_schedule(meeting)
-    updated = meeting.updated()
 
     if schedule is None and acronym is None and session_id is None:
         raise Http404
@@ -2180,15 +2307,7 @@ def agenda_ical(request, num=None, acronym=None, session_id=None):
     elif session_id:
         assignments = [ a for a in assignments if a.session_id == int(session_id) ]
 
-    for a in assignments:
-        if a.session:
-            a.session.ical_status = ical_session_status(a)
-
-    return render(request, "meeting/agenda.ics", {
-        "schedule": schedule,
-        "assignments": assignments,
-        "updated": updated
-    }, content_type="text/calendar")
+    return render_icalendar(schedule, assignments)
 
 @cache_page(15 * 60)
 def agenda_json(request, num=None):
@@ -4138,7 +4257,7 @@ def upcoming_ical(request):
         'assignments': assignments,
         'ietfs': ietfs,
     }, request=request)
-    response = re.sub("\r(?!\n)|(?<!\r)\n", "\r\n", response)
+    response = parse_ical_line_endings(response)
 
     response = HttpResponse(response, content_type='text/calendar')
     response['Content-Disposition'] = 'attachment; filename="upcoming.ics"'
@@ -4764,7 +4883,7 @@ def important_dates(request, num=None, output_format=None):
             'meetings': meetings,
         }, request=request)
         # icalendar response file should have '\r\n' line endings per RFC5545
-        response = HttpResponse(re.sub("\r(?!\n)|(?<!\r)\n", "\r\n", ics), content_type='text/calendar')
+        response = HttpResponse(parse_ical_line_endings(ics), content_type='text/calendar')
         response['Content-Disposition'] = 'attachment; filename="important-dates.ics"'
         return response
 
@@ -5198,3 +5317,4 @@ def import_session_minutes(request, session_id, num):
             'contents_unchanged': not contents_changed,
         },
     )
+
diff --git a/ietf/templates/meeting/agenda.ics b/ietf/templates/meeting/agenda.ics
deleted file mode 100644
index eb83dd479a..0000000000
--- a/ietf/templates/meeting/agenda.ics
+++ /dev/null
@@ -1,32 +0,0 @@
-{% load humanize tz %}{% autoescape off %}{% timezone schedule.meeting.tz %}{% with tzname=schedule.meeting.time_zone %}{% load ietf_filters textfilters %}{% load cache %}{% cache 1800 ietf_meeting_agenda_ics schedule.meeting.number request.path request.GET %}BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-PRODID:-//IETF//datatracker.ietf.org ical agenda//EN
-{% if tzname != "utc" and tzname != "gmt" %}{% firstof schedule.meeting.vtimezone "" %}{% endif %}{% for item in assignments %}BEGIN:VEVENT
-UID:ietf-{{schedule.meeting.number}}-{{item.timeslot.pk}}-{{item.session.group.acronym}}
-SUMMARY:{% if item.session.name %}{{item.session.name|ics_esc}}{% else %}{{item.session.group_at_the_time.acronym|lower}} - {{item.session.group_at_the_time.name}}{%endif%}{% if item.session.agenda_note %} ({{item.session.agenda_note}}){% endif %}
-{% if item.timeslot.show_location %}LOCATION:{{item.timeslot.get_location}}
-{% endif %}STATUS:{{item.session.ical_status}}
-CLASS:PUBLIC
-DTSTART{% ics_date_time item.timeslot.local_start_time tzname %}
-DTEND{% ics_date_time item.timeslot.local_end_time tzname %}
-DTSTAMP{% ics_date_time item.timeslot.modified|utc 'utc' %}{% if item.session.agenda %}
-URL:{{item.session.agenda.get_versionless_href}}{% endif %}
-DESCRIPTION:{{item.timeslot.name|ics_esc}}\n{% if item.session.agenda_note %}
- Note: {{item.session.agenda_note|ics_esc}}\n{% endif %}{% if item.session.onsite_tool_url %}
- \n
- Onsite tool: {{ item.session.onsite_tool_url }}\n{% endif %}{% if item.session.video_stream_url %}
- \n
- Meetecho: {{ item.session.video_stream_url }}\n{% endif %}{% if item.timeslot.location.webex_url %}
- \n
- Webex: {{ item.timeslot.location.webex_url }}\n{% endif %}{% if item.session.remote_instructions %}
- \n
- Remote instructions: {{ item.session.remote_instructions }}\n{% endif %}{% if item.session.agenda %}{% with agenda=item.session.agenda %}
- \n
- {{agenda.type}} {{agenda.get_versionless_href}}\n{% endwith %}{% endif %}
- \n
- Session materials: {% absurl 'ietf.meeting.views.session_details' num=schedule.meeting.number acronym=item.session.group.acronym %}\n{% if schedule.meeting.get_number is not None %}
- \n{# link agenda for ietf meetings #}
- See in schedule: {% absurl 'agenda' num=schedule.meeting.number %}#row-{{ item.slug }}\n{% endif %}
-END:VEVENT
-{% endfor %}END:VCALENDAR{% endcache %}{% endwith %}{% endtimezone %}{% endautoescape %}
diff --git a/requirements.txt b/requirements.txt
index f82bfc4101..7aadc7bf7f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -42,6 +42,7 @@ gunicorn>=20.1.0
 hashids>=1.3.1
 html2text>=2020.1.16    # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
+icalendar>=5.0.0 
 inflect>= 6.0.2
 jsonfield>=3.1.0,<3.2.0  # 3.2.0 needs py3.10; deprecated-replace with Django JSONField
 jsonschema[format]>=4.2.1

From 666e9c53b45bc2eeda80ccbea66abeaa01df9830 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Thu, 7 Aug 2025 15:27:02 +0000
Subject: [PATCH 412/707] ci: update base image target version to 20250807T1514

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 3d5520babe..0ecf9566ef 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250805T1738
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250807T1514
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 90d83abf03..327fb48da4 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250805T1738
+20250807T1514

From a1a19e5b6cef8ddc8b6443b2e2844ee20be988fa Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 11 Aug 2025 14:00:51 -0300
Subject: [PATCH 413/707] fix: tz-aware tastypie datetimes (#9330)

* fix: tz-aware tastypie datetimes

* chore: comment

* chore: clarify comment
---
 ietf/api/__init__.py | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index d70866083e..e236347975 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -4,6 +4,7 @@
 
 import datetime
 import re
+import sys
 
 from urllib.parse import urlencode
 
@@ -25,6 +26,9 @@
 
 OMITTED_APPS_APIS = ["ietf.status"]
 
+# Pre-py3.11, fromisoformat() does not handle Z or +HH tz offsets
+HAVE_BROKEN_FROMISOFORMAT = sys.version_info < (3, 11, 0, "", 0)
+
 def populate_api_list():
     _module_dict = globals()
     for app_config in django_apps.get_app_configs():
@@ -58,6 +62,35 @@ def generate_cache_key(self, *args, **kwargs):
         # Use a list plus a ``.join()`` because it's faster than concatenation.
         return "%s:%s:%s:%s" % (self._meta.api_name, self._meta.resource_name, ':'.join(args), smooshed)
 
+    def _z_aware_fromisoformat(self, value):
+        """datetime.datetie.fromisoformat replacement that works with python < 3.11"""
+        if HAVE_BROKEN_FROMISOFORMAT:
+            if value.upper().endswith("Z"):
+                value = value[:-1] + "+00:00"  # Z -> UTC
+            elif re.match(r"[+-][0-9][0-9]$", value[-3:]):
+                value = value + ":00"  # -04 -> -04:00
+        return value
+
+    def filter_value_to_python(
+        self, value, field_name, filters, filter_expr, filter_type
+    ):
+        py_value = super().filter_value_to_python(
+            value, field_name, filters, filter_expr, filter_type
+        )
+        if isinstance(
+            self.fields[field_name], tastypie.fields.DateTimeField
+        ) and isinstance(py_value, str):
+            # Ensure datetime values are TZ-aware, using UTC by default
+            try:
+                dt = self._z_aware_fromisoformat(py_value)
+            except ValueError:
+                pass  # let tastypie deal with the original value
+            else:
+                if dt.tzinfo is None:
+                    dt = dt.replace(tzinfo=datetime.timezone.utc)
+                py_value = dt.isoformat()
+        return py_value
+
 
 TIMEDELTA_REGEX = re.compile(r'^(?P<days>\d+d)?\s?(?P<hours>\d+h)?\s?(?P<minutes>\d+m)?\s?(?P<seconds>\d+s?)$')
 

From 369e38f0b2ffe564340db6b6bcd64124d3190aa8 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Mon, 11 Aug 2025 19:05:59 +0200
Subject: [PATCH 414/707] Less shaded dark theme colors (#9335)

---
 ietf/static/css/ietf.scss | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index 014213c3e5..df973863d5 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -510,23 +510,23 @@ td.position-empty {
     tr.position-notready-row,
     tr.position-discuss-row,
     tr.position-block-row {
-        background-color: shade-color($color-discuss, 85%);
+        background-color: shade-color($color-discuss, 65%);
     }
 
     tr.position-yes-row {
-        background-color: shade-color($color-yes, 75%);
+        background-color: shade-color($color-yes, 65%);
     }
 
     tr.position-noobj-row {
-        background-color: shade-color($color-noobj, 75%);
+        background-color: shade-color($color-noobj, 65%);
     }
 
     tr.position-abstain-row {
-        background-color: shade-color($color-abstain, 85%);
+        background-color: shade-color($color-abstain, 65%);
     }
 
     tr.position-recuse-row {
-        background-color: shade-color($color-recuse, 85%);
+        background-color: shade-color($color-recuse, 65%);
     }
 }
 

From 37e3ffc8c41ad5e15464af4d242b2d6ee09c3775 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 11 Aug 2025 18:37:43 -0500
Subject: [PATCH 415/707] fix: allow RFC Editor to add comments to RFC history
 (#9344)

---
 ietf/doc/tests.py     | 34 ++++++++++++++++++++++++----------
 ietf/doc/views_doc.py |  2 +-
 2 files changed, 25 insertions(+), 11 deletions(-)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index d3fba03bcc..fa8c7fa4fc 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -66,7 +66,7 @@
 from ietf.name.models import SessionStatusName, BallotPositionName, DocTypeName, RoleName
 from ietf.person.models import Person
 from ietf.person.factories import PersonFactory, EmailFactory
-from ietf.utils.mail import outbox, empty_outbox
+from ietf.utils.mail import get_payload_text, outbox, empty_outbox
 from ietf.utils.test_utils import login_testing_unauthorized, unicontent
 from ietf.utils.test_utils import TestCase
 from ietf.utils.text import normalize_text
@@ -2172,20 +2172,19 @@ def test_trailing_hypen_digit_name_bibxml(self):
 
 class AddCommentTestCase(TestCase):
     def test_add_comment(self):
-        draft = WgDraftFactory(name='draft-ietf-mars-test',group__acronym='mars')
-        url = urlreverse('ietf.doc.views_doc.add_comment', kwargs=dict(name=draft.name))
+        draft = WgDraftFactory(name="draft-ietf-mars-test", group__acronym="mars")
+        url = urlreverse("ietf.doc.views_doc.add_comment", kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
 
         # normal get
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(unicontent(r))
-        self.assertEqual(len(q('form textarea[name=comment]')), 1)
+        self.assertEqual(len(q("form textarea[name=comment]")), 1)
 
-        # request resurrect
         events_before = draft.docevent_set.count()
         mailbox_before = len(outbox)
-        
+
         r = self.client.post(url, dict(comment="This is a test."))
         self.assertEqual(r.status_code, 302)
 
@@ -2193,9 +2192,9 @@ def test_add_comment(self):
         self.assertEqual("This is a test.", draft.latest_event().desc)
         self.assertEqual("added_comment", draft.latest_event().type)
         self.assertEqual(len(outbox), mailbox_before + 1)
-        self.assertIn("Comment added", outbox[-1]['Subject'])
-        self.assertIn(draft.name, outbox[-1]['Subject'])
-        self.assertIn('draft-ietf-mars-test@', outbox[-1]['To'])
+        self.assertIn("Comment added", outbox[-1]["Subject"])
+        self.assertIn(draft.name, outbox[-1]["Subject"])
+        self.assertIn("draft-ietf-mars-test@", outbox[-1]["To"])
 
         # Make sure we can also do it as IANA
         self.client.login(username="iana", password="iana+password")
@@ -2204,7 +2203,22 @@ def test_add_comment(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(unicontent(r))
-        self.assertEqual(len(q('form textarea[name=comment]')), 1)
+        self.assertEqual(len(q("form textarea[name=comment]")), 1)
+
+        empty_outbox()
+        rfc = WgRfcFactory()
+        self.client.login(username="rfc", password="rfc+password")
+        url = urlreverse("ietf.doc.views_doc.add_comment", kwargs=dict(name=rfc.name))
+        r = self.client.post(
+            url, dict(comment="This is an RFC Editor comment on an RFC.")
+        )
+        self.assertEqual(r.status_code, 302)
+
+        self.assertEqual(
+            "This is an RFC Editor comment on an RFC.", rfc.latest_event().desc
+        )
+        self.assertEqual(len(outbox), 1)
+        self.assertIn("This is an RFC Editor comment on an RFC.", get_payload_text(outbox[0]))
 
 
 class TemplateTagTest(TestCase):
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 591a72d907..4a20db3c89 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1687,7 +1687,7 @@ def add_comment(request, name):
                 group__acronym=doc.group.acronym,
                 person__user=request.user)))
     else:
-        can_add_comment = has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair"))
+        can_add_comment = has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair", "RFC Editor"))
     if not can_add_comment:
         # The user is a chair or secretary, but not for this WG or RG
         permission_denied(request, "You need to be a chair or secretary of this group to add a comment.")

From 00264a4cb0f43df07e39beda8f74e1aa36814e71 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 14 Aug 2025 11:18:56 -0300
Subject: [PATCH 416/707] ci: ensure blobdbs exist for sandboxen

---
 dev/deploy-to-container/start.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/dev/deploy-to-container/start.sh b/dev/deploy-to-container/start.sh
index 2c83d6970c..5d976f80ea 100644
--- a/dev/deploy-to-container/start.sh
+++ b/dev/deploy-to-container/start.sh
@@ -35,6 +35,18 @@ echo "Running Datatracker checks..."
 
 # Migrate, adjusting to what the current state of the underlying database might be:
 
+# On production, the blobdb tables are in a separate database. Manipulate migration
+# history to ensure that they're created for the sandbox environment that runs it
+# all from a single database.
+echo "Ensuring blobdb relations exist..."
+/usr/local/bin/python ./ietf/manage.py migrate --settings=settings_local --fake blobdb zero
+if ! /usr/local/bin/python ./ietf/manage.py migrate --settings=settings_local blobdb; then
+  # If we are restarting a sandbox, the migration may already have run and re-running
+  # it will fail. Assume that happened and fake it.
+  /usr/local/bin/python ./ietf/manage.py migrate --settings=settings_local --fake blobdb
+fi
+
+# Now run the migrations for real
 echo "Running Datatracker migrations..."
 /usr/local/bin/python ./ietf/manage.py migrate --settings=settings_local
 

From f13a1a55774c9605b79e2db6f41dbe0ceb0d400a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 15 Aug 2025 15:55:08 -0400
Subject: [PATCH 417/707] ci: Update db.Dockerfile to postgres 17

---
 docker/db.Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker/db.Dockerfile b/docker/db.Dockerfile
index 0b57a80b70..48ab298780 100644
--- a/docker/db.Dockerfile
+++ b/docker/db.Dockerfile
@@ -1,7 +1,7 @@
 # =====================
 # --- Builder Stage ---
 # =====================
-FROM postgres:16 AS builder
+FROM postgres:17 AS builder
 
 ENV POSTGRES_PASSWORD=hk2j22sfiv
 ENV POSTGRES_USER=django
@@ -19,7 +19,7 @@ RUN ["/usr/local/bin/docker-entrypoint.sh", "postgres"]
 # ===================
 # --- Final Image ---
 # ===================
-FROM postgres:16
+FROM postgres:17
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 COPY --from=builder /data $PGDATA

From 0694863763509369228849b876b99666aaa70092 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 15 Aug 2025 17:05:40 -0300
Subject: [PATCH 418/707] refactor: jsonfield pkg->Django JSONField (#9284)

* refactor: drop jsonfield pkg in code

It still exists in migrations

* refactor: callable JSONField defaults

* chore: migrations

* chore: unused import

* chore: fix nulls in authors; renumber migrations

* fix: rename IETFJSONField to fix migration

* chore: update names.json

JSONField representation has changed

* fix: missed renaming; hide dead code from coverage
---
 .../0008_alter_group_used_roles_and_more.py   |  107 ++
 ietf/group/models.py                          |   55 +-
 ietf/name/fixtures/names.json                 | 1202 +++++++++++++----
 ...alter_sessionpurposename_timeslot_types.py |   27 +
 ietf/name/models.py                           |    6 +-
 ...icalperson_pronouns_selectable_and_more.py |   34 +
 ietf/person/models.py                         |    3 +-
 ...ion_authors_alter_submissioncheck_items.py |   46 +
 ietf/submit/models.py                         |    7 +-
 ietf/utils/db.py                              |   26 +-
 ietf/utils/fields.py                          |   19 +-
 11 files changed, 1259 insertions(+), 273 deletions(-)
 create mode 100644 ietf/group/migrations/0008_alter_group_used_roles_and_more.py
 create mode 100644 ietf/name/migrations/0019_alter_sessionpurposename_timeslot_types.py
 create mode 100644 ietf/person/migrations/0005_alter_historicalperson_pronouns_selectable_and_more.py
 create mode 100644 ietf/submit/migrations/0003_alter_submission_authors_alter_submissioncheck_items.py

diff --git a/ietf/group/migrations/0008_alter_group_used_roles_and_more.py b/ietf/group/migrations/0008_alter_group_used_roles_and_more.py
new file mode 100644
index 0000000000..28f345df00
--- /dev/null
+++ b/ietf/group/migrations/0008_alter_group_used_roles_and_more.py
@@ -0,0 +1,107 @@
+# Generated by Django 4.2.23 on 2025-08-15 16:46
+
+from django.db import migrations, models
+import ietf.group.models
+import ietf.name.models
+import ietf.utils.db
+import ietf.utils.validators
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("group", "0007_used_roles"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="group",
+            name="used_roles",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                help_text="Leave an empty list to get the group_type's default used roles",
+                max_length=256,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="admin_roles",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_admin_roles, max_length=64
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="default_used_roles",
+            field=ietf.utils.db.EmptyAwareJSONField(default=list, max_length=256),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="docman_roles",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_docman_roles, max_length=128
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="groupman_authroles",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_groupman_authroles, max_length=128
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="groupman_roles",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_groupman_roles, max_length=128
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="material_types",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_material_types, max_length=64
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="matman_roles",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_matman_roles, max_length=128
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="role_order",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=ietf.group.models.default_role_order,
+                help_text="The order in which roles are shown, for instance on photo pages.  Enter valid JSON.",
+                max_length=128,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="groupfeatures",
+            name="session_purposes",
+            field=ietf.utils.db.EmptyAwareJSONField(
+                default=list,
+                help_text="Allowed session purposes for this group type",
+                max_length=256,
+                validators=[
+                    ietf.utils.validators.JSONForeignKeyListValidator(
+                        ietf.name.models.SessionPurposeName
+                    )
+                ],
+            ),
+        ),
+        migrations.AlterField(
+            model_name="grouphistory",
+            name="used_roles",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                help_text="Leave an empty list to get the group_type's default used roles",
+                max_length=256,
+            ),
+        ),
+    ]
diff --git a/ietf/group/models.py b/ietf/group/models.py
index 52549e8cc1..608dcc86b9 100644
--- a/ietf/group/models.py
+++ b/ietf/group/models.py
@@ -3,7 +3,6 @@
 
 
 import email.utils
-import jsonfield
 import os
 import re
 
@@ -21,7 +20,7 @@
                               AgendaTypeName, AgendaFilterTypeName, ExtResourceName, SessionPurposeName,
                               AppealArtifactTypeName )
 from ietf.person.models import Email, Person
-from ietf.utils.db import IETFJSONField
+from ietf.utils.db import EmptyAwareJSONField
 from ietf.utils.mail import formataddr, send_mail_text
 from ietf.utils import log
 from ietf.utils.models import ForeignKey, OneToOneField
@@ -46,7 +45,7 @@ class GroupInfo(models.Model):
     unused_states = models.ManyToManyField('doc.State', help_text="Document states that have been disabled for the group.", blank=True)
     unused_tags = models.ManyToManyField(DocTagName, help_text="Document tags that have been disabled for the group.", blank=True)
 
-    used_roles = jsonfield.JSONField(max_length=256, blank=True, default=[], help_text="Leave an empty list to get the group_type's default used roles")
+    used_roles = models.JSONField(max_length=256, blank=True, default=list, help_text="Leave an empty list to get the group_type's default used roles")
 
     uses_milestone_dates = models.BooleanField(default=True)
 
@@ -235,6 +234,36 @@ def chat_archive_url(self):
 )
 
 
+# JSONFields need callable defaults that work with migrations to avoid sharing
+# data structures between instances. These helpers provide that. 
+def default_material_types():
+    return ["slides"]
+
+
+def default_admin_roles():
+    return ["chair"]
+
+
+def default_docman_roles():
+    return ["ad", "chair", "delegate", "secr"]
+
+
+def default_groupman_roles():
+    return ["ad", "chair"]
+
+
+def default_groupman_authroles():
+    return ["Secretariat"]
+
+
+def default_matman_roles():
+    return ["ad", "chair", "delegate", "secr"]
+
+
+def default_role_order():
+    return ["chair", "secr", "member"]
+
+
 class GroupFeatures(models.Model):
     type = OneToOneField(GroupTypeName, primary_key=True, null=False, related_name='features')
     #history = HistoricalRecords()
@@ -268,16 +297,16 @@ class GroupFeatures(models.Model):
     agenda_type             = models.ForeignKey(AgendaTypeName, null=True, default="ietf", on_delete=CASCADE)
     about_page              = models.CharField(max_length=64, blank=False, default="ietf.group.views.group_about" )
     default_tab             = models.CharField(max_length=64, blank=False, default="ietf.group.views.group_about" )
-    material_types          = IETFJSONField(max_length=64, accepted_empty_values=[[], {}], blank=False, default=["slides"])
-    default_used_roles      = IETFJSONField(max_length=256, accepted_empty_values=[[], {}], blank=False, default=[])
-    admin_roles             = IETFJSONField(max_length=64, accepted_empty_values=[[], {}], blank=False, default=["chair"]) # Trac Admin
-    docman_roles            = IETFJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=["ad","chair","delegate","secr"])
-    groupman_roles          = IETFJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=["ad","chair",])
-    groupman_authroles      = IETFJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=["Secretariat",])
-    matman_roles            = IETFJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=["ad","chair","delegate","secr"])
-    role_order              = IETFJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=["chair","secr","member"],
-                                                help_text="The order in which roles are shown, for instance on photo pages.  Enter valid JSON.")
-    session_purposes        = IETFJSONField(max_length=256, accepted_empty_values=[[], {}], blank=False, default=[],
+    material_types          = EmptyAwareJSONField(max_length=64, accepted_empty_values=[[], {}], blank=False, default=default_material_types)
+    default_used_roles      = EmptyAwareJSONField(max_length=256, accepted_empty_values=[[], {}], blank=False, default=list)
+    admin_roles             = EmptyAwareJSONField(max_length=64, accepted_empty_values=[[], {}], blank=False, default=default_admin_roles)  # Trac Admin
+    docman_roles            = EmptyAwareJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=default_docman_roles)
+    groupman_roles          = EmptyAwareJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=default_groupman_roles)
+    groupman_authroles      = EmptyAwareJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=default_groupman_authroles)
+    matman_roles            = EmptyAwareJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=default_matman_roles)
+    role_order              = EmptyAwareJSONField(max_length=128, accepted_empty_values=[[], {}], blank=False, default=default_role_order,
+                                            help_text="The order in which roles are shown, for instance on photo pages.  Enter valid JSON.")
+    session_purposes        = EmptyAwareJSONField(max_length=256, accepted_empty_values=[[], {}], blank=False, default=list,
                                                   help_text="Allowed session purposes for this group type",
                                                   validators=[JSONForeignKeyListValidator(SessionPurposeName)])
 
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index ebdda1a1fa..0724cbb4b5 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -2630,6 +2630,19 @@
     "model": "doc.state",
     "pk": 181
   },
+  {
+    "fields": {
+      "desc": "The statement has been marked historic",
+      "name": "Historic",
+      "next_states": [],
+      "order": 0,
+      "slug": "historic",
+      "type": "statement",
+      "used": true
+    },
+    "model": "doc.state",
+    "pk": 182
+  },
   {
     "fields": {
       "label": "State"
@@ -2872,7 +2885,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "special",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -2880,10 +2895,24 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"matman\",\n    \"ad\",\n    \"chair\",\n    \"lead\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"lead\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "matman",
+        "ad",
+        "chair",
+        "lead",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "lead",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": true,
       "has_documents": false,
@@ -2893,15 +2922,29 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"lead\",\n    \"delegate\",\n    \"matman\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "lead",
+        "delegate",
+        "matman"
+      ],
       "need_parent": false,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"lead\",\n    \"delegate\",\n    \"matman\"\n]",
-      "session_purposes": "[\n    \"presentation\"\n]",
+      "role_order": [
+        "chair",
+        "lead",
+        "delegate",
+        "matman"
+      ],
+      "session_purposes": [
+        "presentation"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -2911,7 +2954,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "heading",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -2919,10 +2964,19 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"member\",\n    \"chair\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "member",
+        "chair"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -2932,13 +2986,22 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\"\n]",
-      "session_purposes": "[\n    \"closed_meeting\",\n    \"officehours\"\n]",
+      "role_order": [
+        "chair"
+      ],
+      "session_purposes": [
+        "closed_meeting",
+        "officehours"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -2948,7 +3011,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": true,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -2956,10 +3021,26 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"chair\",\n    \"secr\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"Area Director\"\n]",
-      "groupman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "ad",
+        "chair",
+        "secr",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "Area Director"
+      ],
+      "groupman_roles": [
+        "ad",
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": true,
@@ -2969,16 +3050,28 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "area",
         "ietf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -2988,7 +3081,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"ad\"\n]",
+      "admin_roles": [
+        "ad"
+      ],
       "agenda_filter_type": "heading",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -2996,10 +3091,22 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"liaison_contact\",\n    \"liaison_cc_contact\"\n]",
-      "docman_roles": "[\n    \"ad\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"ad\"\n]",
+      "default_used_roles": [
+        "ad",
+        "liaison_contact",
+        "liaison_cc_contact"
+      ],
+      "docman_roles": [
+        "ad",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "ad"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3009,15 +3116,27 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": true,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3027,7 +3146,10 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\",\n    \"secr\"\n]",
+      "admin_roles": [
+        "chair",
+        "secr"
+      ],
       "agenda_filter_type": "special",
       "agenda_type": "ad",
       "create_wiki": true,
@@ -3035,10 +3157,25 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"chair\",\n    \"reviewer\",\n    \"secr\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"ad\",\n    \"secr\",\n    \"delegate\",\n    \"chair\"\n]",
+      "default_used_roles": [
+        "ad",
+        "chair",
+        "reviewer",
+        "secr",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "ad",
+        "secr",
+        "delegate",
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3048,15 +3185,31 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": true,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"open_meeting\",\n    \"presentation\",\n    \"regular\",\n    \"social\",\n    \"tutorial\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "open_meeting",
+        "presentation",
+        "regular",
+        "social",
+        "tutorial"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3066,7 +3219,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3074,10 +3229,19 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"chair\",\n    \"member\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "chair",
+        "member"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": true,
       "has_documents": false,
@@ -3087,13 +3251,23 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\",\n    \"member\"\n]",
-      "session_purposes": "[\n    \"officehours\",\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "member"
+      ],
+      "session_purposes": [
+        "officehours",
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3103,7 +3277,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": true,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3111,10 +3287,18 @@
       "customize_workflow": true,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_documents",
-      "default_used_roles": "[\n    \"chair\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "chair"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": true,
       "has_documents": true,
@@ -3124,15 +3308,23 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [
         "rfcedtyp"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3142,7 +3334,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3150,10 +3344,16 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"chair\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[]",
+      "default_used_roles": [
+        "chair"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3163,15 +3363,26 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate"
+      ],
       "need_parent": false,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"closed_meeting\",\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "closed_meeting",
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3181,7 +3392,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"lead\"\n]",
+      "admin_roles": [
+        "lead"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "ad",
       "create_wiki": false,
@@ -3189,10 +3402,27 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"member\",\n    \"chair\",\n    \"lead\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"IAB\"\n]",
-      "groupman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "member",
+        "chair",
+        "lead",
+        "delegate"
+      ],
+      "docman_roles": [
+        "lead",
+        "chair",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "IAB"
+      ],
+      "groupman_roles": [
+        "lead",
+        "chair",
+        "secr",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": true,
@@ -3202,15 +3432,29 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "lead",
+        "chair",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": false,
-      "role_order": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"closed_meeting\",\n    \"officehours\",\n    \"open_meeting\"\n]",
+      "role_order": [
+        "lead",
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "closed_meeting",
+        "officehours",
+        "open_meeting"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3220,7 +3464,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3228,10 +3474,20 @@
       "customize_workflow": false,
       "default_parent": "iab",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[]",
-      "docman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"ad\",\n    \"chair\"\n]",
+      "default_used_roles": [],
+      "docman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "ad",
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": true,
       "has_documents": true,
@@ -3241,15 +3497,26 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": true,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\",\n    \"secr\",\n    \"member\"\n]",
-      "session_purposes": "\"[\\\"regular\\\"]\"",
+      "role_order": [
+        "chair",
+        "secr",
+        "member"
+      ],
+      "session_purposes": "[\"regular\"]",
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3259,7 +3526,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3267,10 +3536,18 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"auth\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "auth"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3280,13 +3557,21 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\"\n]",
-      "session_purposes": "[\n    \"officehours\"\n]",
+      "role_order": [
+        "chair"
+      ],
+      "session_purposes": [
+        "officehours"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3296,7 +3581,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "ad",
       "create_wiki": false,
@@ -3304,10 +3591,19 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3317,13 +3613,24 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "\"[]\"",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"member\"\n]",
+      "material_types": "[]",
+      "matman_roles": [
+        "chair",
+        "delegate",
+        "member"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"delegate\",\n    \"member\"\n]",
-      "session_purposes": "[\n    \"closed_meeting\",\n    \"open_meeting\"\n]",
+      "role_order": [
+        "chair",
+        "delegate",
+        "member"
+      ],
+      "session_purposes": [
+        "closed_meeting",
+        "open_meeting"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3333,7 +3640,10 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\",\n    \"lead\"\n]",
+      "admin_roles": [
+        "chair",
+        "lead"
+      ],
       "agenda_filter_type": "heading",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3341,10 +3651,26 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"member\",\n    \"comdir\",\n    \"delegate\",\n    \"execdir\",\n    \"recman\",\n    \"secr\",\n    \"chair\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "ad",
+        "member",
+        "comdir",
+        "delegate",
+        "execdir",
+        "recman",
+        "secr",
+        "chair"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3354,15 +3680,29 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate"
+      ],
       "need_parent": false,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"admin\",\n    \"plenary\",\n    \"presentation\",\n    \"social\",\n    \"officehours\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "admin",
+        "plenary",
+        "presentation",
+        "social",
+        "officehours"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3372,7 +3712,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "ad",
       "create_wiki": false,
@@ -3380,10 +3722,16 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\"\n]",
-      "docman_roles": "[\n    \"auth\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[]",
+      "default_used_roles": [
+        "ad"
+      ],
+      "docman_roles": [
+        "auth"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3393,15 +3741,20 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [],
       "need_parent": true,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3411,7 +3764,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "heading",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3419,10 +3774,20 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"member\",\n    \"atlarge\",\n    \"chair\",\n    \"delegate\"\n]",
-      "docman_roles": "[]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "member",
+        "atlarge",
+        "chair",
+        "delegate"
+      ],
+      "docman_roles": [],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3432,15 +3797,24 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "irtf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3450,7 +3824,10 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\",\n    \"lead\"\n]",
+      "admin_roles": [
+        "chair",
+        "lead"
+      ],
       "agenda_filter_type": "heading",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3458,10 +3835,20 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "chair",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": true,
@@ -3471,13 +3858,24 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"delegate\"\n]",
-      "session_purposes": "[\n    \"officehours\",\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "delegate"
+      ],
+      "session_purposes": [
+        "officehours",
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3487,7 +3885,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": null,
       "create_wiki": false,
@@ -3495,10 +3895,17 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"chair\",\n    \"ceo\"\n]",
-      "docman_roles": "[]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "chair",
+        "ceo"
+      ],
+      "docman_roles": [],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3508,15 +3915,27 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "isoc"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"officehours\",\n    \"open_meeting\",\n    \"presentation\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "officehours",
+        "open_meeting",
+        "presentation"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3526,7 +3945,10 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\",\n    \"advisor\"\n]",
+      "admin_roles": [
+        "chair",
+        "advisor"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": "side",
       "create_wiki": true,
@@ -3534,10 +3956,23 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"member\",\n    \"advisor\",\n    \"liaison\",\n    \"chair\",\n    \"techadv\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"advisor\"\n]",
+      "default_used_roles": [
+        "member",
+        "advisor",
+        "liaison",
+        "chair",
+        "techadv"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair",
+        "advisor"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3547,15 +3982,26 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"member\",\n    \"advisor\"\n]",
-      "session_purposes": "[\n    \"closed_meeting\",\n    \"officehours\"\n]",
+      "role_order": [
+        "chair",
+        "member",
+        "advisor"
+      ],
+      "session_purposes": [
+        "closed_meeting",
+        "officehours"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3565,7 +4011,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"lead\"\n]",
+      "admin_roles": [
+        "lead"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ad",
       "create_wiki": false,
@@ -3573,10 +4021,27 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"member\",\n    \"chair\",\n    \"lead\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"IAB\"\n]",
-      "groupman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "member",
+        "chair",
+        "lead",
+        "delegate"
+      ],
+      "docman_roles": [
+        "lead",
+        "chair",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "IAB"
+      ],
+      "groupman_roles": [
+        "lead",
+        "chair",
+        "secr",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": true,
@@ -3586,15 +4051,28 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "lead",
+        "chair",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "ietf"
       ],
       "req_subm_approval": false,
-      "role_order": "[\n    \"lead\",\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"regular\",\n    \"tutorial\"\n]",
+      "role_order": [
+        "lead",
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "regular",
+        "tutorial"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3604,7 +4082,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": true,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -3612,10 +4092,24 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"chair\",\n    \"secr\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"IRTF Chair\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "chair",
+        "secr",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "IRTF Chair"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": true,
@@ -3625,15 +4119,26 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "irtf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3643,7 +4148,10 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\",\n    \"secr\"\n]",
+      "admin_roles": [
+        "chair",
+        "secr"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -3651,10 +4159,24 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.review_requests",
-      "default_used_roles": "[\n    \"ad\",\n    \"chair\",\n    \"reviewer\",\n    \"secr\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"ad\",\n    \"secr\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "ad",
+        "chair",
+        "reviewer",
+        "secr",
+        "delegate"
+      ],
+      "docman_roles": [
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "ad",
+        "secr",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3664,15 +4186,26 @@
       "has_reviews": true,
       "has_session_materials": true,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "secr"
+      ],
       "need_parent": true,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"open_meeting\",\n    \"social\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "open_meeting",
+        "social"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3682,7 +4215,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": false,
@@ -3690,10 +4225,19 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"auth\",\n    \"chair\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[\n    \"chair\"\n]",
+      "default_used_roles": [
+        "auth",
+        "chair"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [
+        "chair"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3703,13 +4247,23 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair"
+      ],
       "need_parent": false,
       "parent_types": [],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"officehours\",\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr"
+      ],
+      "session_purposes": [
+        "officehours",
+        "regular"
+      ],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3719,7 +4273,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": true,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -3727,10 +4283,25 @@
       "customize_workflow": true,
       "default_parent": "irtf",
       "default_tab": "ietf.group.views.group_documents",
-      "default_used_roles": "[\n    \"chair\",\n    \"techadv\",\n    \"secr\",\n    \"delegate\"\n]",
-      "docman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"IRTF Chair\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "chair",
+        "techadv",
+        "secr",
+        "delegate"
+      ],
+      "docman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "IRTF Chair"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": true,
       "has_default_chat": true,
       "has_documents": true,
@@ -3740,15 +4311,27 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": true,
       "parent_types": [
         "irtf"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3758,7 +4341,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "none",
       "agenda_type": null,
       "create_wiki": false,
@@ -3766,10 +4351,23 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"liaiman\",\n    \"ceo\",\n    \"coord\",\n    \"auth\",\n    \"chair\",\n    \"liaison_contact\",\n    \"liaison_cc_contact\"\n]",
-      "docman_roles": "[\n    \"liaiman\",\n    \"matman\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\"\n]",
-      "groupman_roles": "[]",
+      "default_used_roles": [
+        "liaiman",
+        "ceo",
+        "coord",
+        "auth",
+        "chair",
+        "liaison_contact",
+        "liaison_cc_contact"
+      ],
+      "docman_roles": [
+        "liaiman",
+        "matman"
+      ],
+      "groupman_authroles": [
+        "Secretariat"
+      ],
+      "groupman_roles": [],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3779,16 +4377,20 @@
       "has_reviews": false,
       "has_session_materials": false,
       "is_schedulable": false,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [],
       "need_parent": false,
       "parent_types": [
         "area",
         "sdo"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"liaiman\"\n]",
-      "session_purposes": "[]",
+      "role_order": [
+        "liaiman"
+      ],
+      "session_purposes": [],
       "show_on_agenda": false
     },
     "model": "group.groupfeatures",
@@ -3798,7 +4400,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": false,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "special",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -3806,10 +4410,28 @@
       "customize_workflow": false,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_about",
-      "default_used_roles": "[\n    \"ad\",\n    \"member\",\n    \"delegate\",\n    \"secr\",\n    \"liaison\",\n    \"atlarge\",\n    \"chair\",\n    \"matman\",\n    \"techadv\"\n]",
-      "docman_roles": "[\n    \"chair\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"Area Director\"\n]",
-      "groupman_roles": "[\n    \"chair\",\n    \"delegate\"\n]",
+      "default_used_roles": [
+        "ad",
+        "member",
+        "delegate",
+        "secr",
+        "liaison",
+        "atlarge",
+        "chair",
+        "matman",
+        "techadv"
+      ],
+      "docman_roles": [
+        "chair"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "Area Director"
+      ],
+      "groupman_roles": [
+        "chair",
+        "delegate"
+      ],
       "has_chartering_process": false,
       "has_default_chat": false,
       "has_documents": false,
@@ -3819,15 +4441,29 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"chair\",\n    \"matman\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "chair",
+        "matman"
+      ],
       "need_parent": false,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": false,
-      "role_order": "[\n    \"chair\",\n    \"member\",\n    \"matman\"\n]",
-      "session_purposes": "[\n    \"coding\",\n    \"presentation\",\n    \"social\",\n    \"tutorial\"\n]",
+      "role_order": [
+        "chair",
+        "member",
+        "matman"
+      ],
+      "session_purposes": [
+        "coding",
+        "presentation",
+        "social",
+        "tutorial"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -3837,7 +4473,9 @@
     "fields": {
       "about_page": "ietf.group.views.group_about",
       "acts_like_wg": true,
-      "admin_roles": "[\n    \"chair\"\n]",
+      "admin_roles": [
+        "chair"
+      ],
       "agenda_filter_type": "normal",
       "agenda_type": "ietf",
       "create_wiki": true,
@@ -3845,10 +4483,32 @@
       "customize_workflow": true,
       "default_parent": "",
       "default_tab": "ietf.group.views.group_documents",
-      "default_used_roles": "[\n    \"ad\",\n    \"editor\",\n    \"delegate\",\n    \"secr\",\n    \"chair\",\n    \"matman\",\n    \"techadv\",\n    \"liaison_contact\",\n    \"liaison_cc_contact\"\n]",
-      "docman_roles": "[\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
-      "groupman_authroles": "[\n    \"Secretariat\",\n    \"Area Director\"\n]",
-      "groupman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "default_used_roles": [
+        "ad",
+        "editor",
+        "delegate",
+        "secr",
+        "chair",
+        "matman",
+        "techadv",
+        "liaison_contact",
+        "liaison_cc_contact"
+      ],
+      "docman_roles": [
+        "chair",
+        "delegate",
+        "secr"
+      ],
+      "groupman_authroles": [
+        "Secretariat",
+        "Area Director"
+      ],
+      "groupman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "has_chartering_process": true,
       "has_default_chat": true,
       "has_documents": true,
@@ -3858,15 +4518,28 @@
       "has_reviews": false,
       "has_session_materials": true,
       "is_schedulable": true,
-      "material_types": "[\n    \"slides\"\n]",
-      "matman_roles": "[\n    \"ad\",\n    \"chair\",\n    \"delegate\",\n    \"secr\"\n]",
+      "material_types": [
+        "slides"
+      ],
+      "matman_roles": [
+        "ad",
+        "chair",
+        "delegate",
+        "secr"
+      ],
       "need_parent": false,
       "parent_types": [
         "area"
       ],
       "req_subm_approval": true,
-      "role_order": "[\n    \"chair\",\n    \"secr\",\n    \"delegate\"\n]",
-      "session_purposes": "[\n    \"regular\"\n]",
+      "role_order": [
+        "chair",
+        "secr",
+        "delegate"
+      ],
+      "session_purposes": [
+        "regular"
+      ],
       "show_on_agenda": true
     },
     "model": "group.groupfeatures",
@@ -5392,6 +6065,21 @@
     "model": "mailtrigger.mailtrigger",
     "pk": "review_completed_opsdir_telechat"
   },
+  {
+    "fields": {
+      "cc": [
+        "ietf_last_call",
+        "review_doc_all_parties",
+        "review_doc_group_mail_list"
+      ],
+      "desc": "Recipients when a perfmetrdir IETF Last Call review is completed",
+      "to": [
+        "review_team_mail_list"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "review_completed_perfmetrdir_lc"
+  },
   {
     "fields": {
       "cc": [
@@ -13849,7 +14537,10 @@
       "name": "Administrative",
       "on_agenda": true,
       "order": 5,
-      "timeslot_types": "[\n    \"other\",\n    \"reg\"\n]",
+      "timeslot_types": [
+        "other",
+        "reg"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13861,7 +14552,10 @@
       "name": "Closed meeting",
       "on_agenda": false,
       "order": 10,
-      "timeslot_types": "[\n    \"other\",\n    \"regular\"\n]",
+      "timeslot_types": [
+        "other",
+        "regular"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13873,7 +14567,9 @@
       "name": "Coding",
       "on_agenda": true,
       "order": 4,
-      "timeslot_types": "[\n    \"other\"\n]",
+      "timeslot_types": [
+        "other"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13885,7 +14581,7 @@
       "name": "None",
       "on_agenda": true,
       "order": 0,
-      "timeslot_types": "[]",
+      "timeslot_types": [],
       "used": false
     },
     "model": "name.sessionpurposename",
@@ -13897,7 +14593,9 @@
       "name": "Office hours",
       "on_agenda": true,
       "order": 3,
-      "timeslot_types": "[\n    \"other\"\n]",
+      "timeslot_types": [
+        "other"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13909,7 +14607,9 @@
       "name": "Open meeting",
       "on_agenda": true,
       "order": 9,
-      "timeslot_types": "[\n    \"other\"\n]",
+      "timeslot_types": [
+        "other"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13921,7 +14621,9 @@
       "name": "Plenary",
       "on_agenda": true,
       "order": 7,
-      "timeslot_types": "[\n    \"plenary\"\n]",
+      "timeslot_types": [
+        "plenary"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13933,7 +14635,10 @@
       "name": "Presentation",
       "on_agenda": true,
       "order": 8,
-      "timeslot_types": "[\n    \"other\",\n    \"regular\"\n]",
+      "timeslot_types": [
+        "other",
+        "regular"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13945,7 +14650,9 @@
       "name": "Regular",
       "on_agenda": true,
       "order": 1,
-      "timeslot_types": "[\n    \"regular\"\n]",
+      "timeslot_types": [
+        "regular"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13957,7 +14664,10 @@
       "name": "Social",
       "on_agenda": true,
       "order": 6,
-      "timeslot_types": "[\n    \"break\",\n    \"other\"\n]",
+      "timeslot_types": [
+        "break",
+        "other"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
@@ -13969,7 +14679,9 @@
       "name": "Tutorial",
       "on_agenda": true,
       "order": 2,
-      "timeslot_types": "[\n    \"other\"\n]",
+      "timeslot_types": [
+        "other"
+      ],
       "used": true
     },
     "model": "name.sessionpurposename",
diff --git a/ietf/name/migrations/0019_alter_sessionpurposename_timeslot_types.py b/ietf/name/migrations/0019_alter_sessionpurposename_timeslot_types.py
new file mode 100644
index 0000000000..a0ca81836d
--- /dev/null
+++ b/ietf/name/migrations/0019_alter_sessionpurposename_timeslot_types.py
@@ -0,0 +1,27 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.utils.validators
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("name", "0018_alter_rolenames"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="sessionpurposename",
+            name="timeslot_types",
+            field=models.JSONField(
+                default=list,
+                help_text="Allowed TimeSlotTypeNames",
+                max_length=256,
+                validators=[
+                    ietf.utils.validators.JSONForeignKeyListValidator(
+                        "name.TimeSlotTypeName"
+                    )
+                ],
+            ),
+        ),
+    ]
diff --git a/ietf/name/models.py b/ietf/name/models.py
index 0e87d43548..24104c5f45 100644
--- a/ietf/name/models.py
+++ b/ietf/name/models.py
@@ -1,8 +1,6 @@
 # Copyright The IETF Trust 2010-2020, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-import jsonfield
-
 from django.db import models
 
 from ietf.utils.models import ForeignKey
@@ -73,8 +71,8 @@ class SessionStatusName(NameModel):
     """Waiting for Approval, Approved, Waiting for Scheduling, Scheduled, Cancelled, Disapproved"""
 class SessionPurposeName(NameModel):
     """Regular, Tutorial, Office Hours, Coding, Social, Admin"""
-    timeslot_types = jsonfield.JSONField(
-        max_length=256, blank=False, default=[],
+    timeslot_types = models.JSONField(
+        max_length=256, blank=False, default=list,
         help_text='Allowed TimeSlotTypeNames',
         validators=[JSONForeignKeyListValidator('name.TimeSlotTypeName')],
     )
diff --git a/ietf/person/migrations/0005_alter_historicalperson_pronouns_selectable_and_more.py b/ietf/person/migrations/0005_alter_historicalperson_pronouns_selectable_and_more.py
new file mode 100644
index 0000000000..2af874b1fa
--- /dev/null
+++ b/ietf/person/migrations/0005_alter_historicalperson_pronouns_selectable_and_more.py
@@ -0,0 +1,34 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("person", "0004_alter_person_photo_alter_person_photo_thumb"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="historicalperson",
+            name="pronouns_selectable",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                max_length=120,
+                null=True,
+                verbose_name="Pronouns",
+            ),
+        ),
+        migrations.AlterField(
+            model_name="person",
+            name="pronouns_selectable",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                max_length=120,
+                null=True,
+                verbose_name="Pronouns",
+            ),
+        ),
+    ]
diff --git a/ietf/person/models.py b/ietf/person/models.py
index 93364478ae..03cf0c87fb 100644
--- a/ietf/person/models.py
+++ b/ietf/person/models.py
@@ -4,7 +4,6 @@
 
 import email.utils
 import email.header
-import jsonfield
 import uuid
 
 from hashids import Hashids
@@ -57,7 +56,7 @@ class Person(models.Model):
     ascii = models.CharField("Full Name (ASCII)", max_length=255, help_text="Name as rendered in ASCII (Latin, unaccented) characters.", validators=[name_character_validator])
     # The short ascii-form of the name.  Also in alias table if non-null
     ascii_short = models.CharField("Abbreviated Name (ASCII)", max_length=32, null=True, blank=True, help_text="Example: A. Nonymous.  Fill in this with initials and surname only if taking the initials and surname of the ASCII name above produces an incorrect initials-only form. (Blank is OK).", validators=[name_character_validator])
-    pronouns_selectable = jsonfield.JSONCharField("Pronouns", max_length=120, blank=True, null=True, default=list )
+    pronouns_selectable = models.JSONField("Pronouns", max_length=120, blank=True, null=True, default=list )
     pronouns_freetext = models.CharField(" ", max_length=30, null=True, blank=True, help_text="Optionally provide your personal pronouns. These will be displayed on your public profile page and alongside your name in Meetecho and, in future, other systems. Select any number of the checkboxes OR provide a custom string up to 30 characters.")
     biography = models.TextField(blank=True, help_text="Short biography for use on leadership pages. Use plain text or reStructuredText markup.")
     photo = models.ImageField(
diff --git a/ietf/submit/migrations/0003_alter_submission_authors_alter_submissioncheck_items.py b/ietf/submit/migrations/0003_alter_submission_authors_alter_submissioncheck_items.py
new file mode 100644
index 0000000000..2c51659204
--- /dev/null
+++ b/ietf/submit/migrations/0003_alter_submission_authors_alter_submissioncheck_items.py
@@ -0,0 +1,46 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+def forward(apps, schema_editor):
+    JSON_ENCODED_NULL = r"\u0000"
+    NULL = "\x00"
+    NUL_SYMBOL = "\u2400"  # Unicode single-char "NUL" symbol 
+    
+    Submission = apps.get_model("submit", "Submission")
+    # The qs filter sees the serialized JSON string...
+    null_in_authors = Submission.objects.filter(authors__contains=JSON_ENCODED_NULL)
+    for submission in null_in_authors:
+        # submission.authors is now deserialized into Python objects
+        for author in submission.authors:
+            for k in author:
+                author[k] = author[k].replace(NULL, NUL_SYMBOL)
+        submission.save()
+
+
+def reverse(apps, schema_editor):
+    pass  # don't restore invalid data
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("submit", "0002_alter_submission_xml_version"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse),
+        migrations.AlterField(
+            model_name="submission",
+            name="authors",
+            field=models.JSONField(
+                default=list,
+                help_text="List of authors with name, email, affiliation and country.",
+            ),
+        ),
+        migrations.AlterField(
+            model_name="submissioncheck",
+            name="items",
+            field=models.JSONField(blank=True, default=dict, null=True),
+        ),
+    ]
diff --git a/ietf/submit/models.py b/ietf/submit/models.py
index 1145f761b4..576ba3e114 100644
--- a/ietf/submit/models.py
+++ b/ietf/submit/models.py
@@ -3,7 +3,6 @@
 
 
 import email
-import jsonfield
 
 from django.db import models
 from django.utils import timezone
@@ -46,7 +45,9 @@ class Submission(models.Model):
     words = models.IntegerField(null=True, blank=True)
     formal_languages = models.ManyToManyField(FormalLanguageName, blank=True, help_text="Formal languages used in document")
 
-    authors = jsonfield.JSONField(default=list, help_text="List of authors with name, email, affiliation and country.")
+    authors = models.JSONField(default=list, help_text="List of authors with name, email, affiliation and country.")
+    # Schema note: authors is a list of authors. Each author is a JSON object with 
+    # "name", "email", "affiliation", and "country" keys. All values are strings.
     note = models.TextField(blank=True)
     replaces = models.CharField(max_length=1000, blank=True)
 
@@ -135,7 +136,7 @@ class SubmissionCheck(models.Model):
     message = models.TextField(null=True, blank=True)
     errors = models.IntegerField(null=True, blank=True, default=None)
     warnings = models.IntegerField(null=True, blank=True, default=None)
-    items = jsonfield.JSONField(null=True, blank=True, default='{}')
+    items = models.JSONField(null=True, blank=True, default=dict)
     symbol = models.CharField(max_length=64, default='')
     #
     def __str__(self):
diff --git a/ietf/utils/db.py b/ietf/utils/db.py
index d451f6cfd8..865c9b999f 100644
--- a/ietf/utils/db.py
+++ b/ietf/utils/db.py
@@ -6,12 +6,34 @@
 # 
 # JSONField should recognize {}, (), and [] as valid, non-empty JSON
 # values.  However, the base Field class excludes them
+
 import jsonfield
+from django.db import models
+
+from ietf.utils.fields import IETFJSONField as FormIETFJSONField, EmptyAwareJSONField as FormEmptyAwareJSONField
+
+
+class EmptyAwareJSONField(models.JSONField):
+    form_class = FormEmptyAwareJSONField
+
+    def __init__(self, *args, empty_values=FormEmptyAwareJSONField.empty_values, accepted_empty_values=None, **kwargs):
+        if accepted_empty_values is None:
+            accepted_empty_values = []
+        self.empty_values = [x
+                             for x in empty_values
+                             if x not in accepted_empty_values]
+        super().__init__(*args, **kwargs)
 
-from ietf.utils.fields import IETFJSONField as FormIETFJSONField
+    def formfield(self, **kwargs):
+        if 'form_class' not in kwargs or issubclass(kwargs['form_class'], FormEmptyAwareJSONField):
+            kwargs.setdefault('empty_values', self.empty_values)
+        return super().formfield(**{**kwargs})
 
 
-class IETFJSONField(jsonfield.JSONField):
+class IETFJSONField(jsonfield.JSONField):  # pragma: no cover
+    # Deprecated - use EmptyAwareJSONField instead (different base class requires a
+    # new field name)
+    # Remove this class when migrations are squashed and it is no longer referenced
     form_class = FormIETFJSONField
 
     def __init__(self, *args, empty_values=FormIETFJSONField.empty_values, accepted_empty_values=None, **kwargs):
diff --git a/ietf/utils/fields.py b/ietf/utils/fields.py
index 3e6f56d45e..ba3fecebc6 100644
--- a/ietf/utils/fields.py
+++ b/ietf/utils/fields.py
@@ -6,8 +6,6 @@
 import json
 import re
 
-import jsonfield
-
 import debug                            # pyflakes:ignore
 
 from typing import Optional, Type # pyflakes:ignore
@@ -328,8 +326,21 @@ def has_changed(self, initial, data):
         return super().has_changed(initial, data)
 
 
-class IETFJSONField(jsonfield.fields.forms.JSONField):
-    def __init__(self, *args, empty_values=jsonfield.fields.forms.JSONField.empty_values,
+class IETFJSONField(forms.JSONField):  # pragma: no cover
+    # Deprecated - use EmptyAwareJSONField instead
+    def __init__(self, *args, empty_values=forms.JSONField.empty_values,
+                 accepted_empty_values=None, **kwargs):
+        if accepted_empty_values is None:
+            accepted_empty_values = []
+        self.empty_values = [x
+                             for x in empty_values
+                             if x not in accepted_empty_values]
+
+        super().__init__(*args, **kwargs)
+
+
+class EmptyAwareJSONField(forms.JSONField):
+    def __init__(self, *args, empty_values=forms.JSONField.empty_values,
                  accepted_empty_values=None, **kwargs):
         if accepted_empty_values is None:
             accepted_empty_values = []

From 711313d983d1d5ec9afe8c014a76959e04c04632 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 19 Aug 2025 12:08:11 -0300
Subject: [PATCH 419/707] chore: postgresql-client-17 for base.Dockerfile
 (#9378)

---
 docker/base.Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index f364456c7a..57aac8ee56 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -69,7 +69,7 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	nodejs \
 	pgloader \
 	pigz \
-	postgresql-client-14 \
+	postgresql-client-17 \
 	pv \
 	python3-ipython \
 	ripgrep \

From 811216838823507b911635967a012bc41f43edd5 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Tue, 19 Aug 2025 15:21:46 +0000
Subject: [PATCH 420/707] ci: update base image target version to 20250819T1508

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 0ecf9566ef..756b7021b7 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250807T1514
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250819T1508
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 327fb48da4..2e0f1519da 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250807T1514
+20250819T1508

From 566cf50b39fa4b0e7882a12b8ce977c29192009f Mon Sep 17 00:00:00 2001
From: "A. Nour" <nouraaproton.me@proton.me>
Date: Tue, 19 Aug 2025 17:52:56 +0100
Subject: [PATCH 421/707] feat: add auto-generated IPR email notifications on
 WG Call for Adoption or WG Last Call (#9322)

* feat(documents): add auto-generated IPR email notifications on WG Call for Adoption or WG Last Call

* fix: edit call durations in mails and call logic under new_state in views

* fix: calc  end_date as  7 * call_duration

* feat(mailtrigger): added new mailtrigger for wg-lc and rfc stream states

* test: add mailtrigger test fixtures and new tests

* fix: use two action-oriented mailtrigger names

The two actions have the same recipients to start with, but that
may change over time. Mailtrigger names should describe "what
happened to trigger this email?". Changed the utility names to
match the actions.

* fix: send from whomever issued the call

Using a list name as the From will not work - the mail infrastructure
blocks such mail when it is submitted.

* chore: revert ietf/doc/tests_draft.py

* fix: trigger call for adoption email from manage adoption view

* fix: changed template names to match functions

* fix: match the subject requested in the issue

* fix: Initial tests

* fix: pass duration to the email message generator

* fix: only issue the c-adopt and wg-lc email for ietf-stream docs

* chore: remove stray whitespace

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/mails.py                             |  55 +++++
 ietf/doc/tests_draft.py                       | 205 +++++++++++++++++-
 ietf/doc/views_draft.py                       |  17 +-
 ..._call_for_adoption_and_last_call_issued.py |  43 ++++
 ietf/name/fixtures/names.json                 |  28 +++
 .../doc/mail/wg_call_for_adoption_issued.txt  |  21 ++
 .../doc/mail/wg_last_call_issued.txt          |  22 ++
 7 files changed, 385 insertions(+), 6 deletions(-)
 create mode 100644 ietf/mailtrigger/migrations/0006_call_for_adoption_and_last_call_issued.py
 create mode 100644 ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
 create mode 100644 ietf/templates/doc/mail/wg_last_call_issued.txt

diff --git a/ietf/doc/mails.py b/ietf/doc/mails.py
index ddecbb6b54..f20d398c3c 100644
--- a/ietf/doc/mails.py
+++ b/ietf/doc/mails.py
@@ -103,6 +103,61 @@ def email_stream_changed(request, doc, old_stream, new_stream, text=""):
               dict(text=text,
                    url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url()),
               cc=cc)
+    
+def email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=None):
+    if cfa_duration_weeks is None:
+        cfa_duration_weeks=2
+    (to, cc) = gather_address_lists("doc_wg_call_for_adoption_issued", doc=doc)
+    frm = request.user.person.formatted_email()
+
+    end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=7 * cfa_duration_weeks)
+
+    subject = f"Call for adoption: {doc.name}-{doc.rev}  (Ends {end_date})"
+
+    send_mail(
+        request,
+        to,
+        frm,
+        subject,
+        "doc/mail/wg_call_for_adoption_issued.txt",
+        dict(
+            doc=doc,
+            subject=subject,
+            url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url(),
+            end_date=end_date,
+            cfa_duration_weeks=cfa_duration_weeks,
+            wg_list=doc.group.list_email,
+        ),
+        cc=cc,
+    )
+
+
+def email_wg_last_call_issued(request, doc, wglc_duration_weeks=None):
+    if wglc_duration_weeks is None:
+        wglc_duration_weeks = 2
+    (to, cc) = gather_address_lists("doc_wg_last_call_issued", doc=doc)
+    frm = request.user.person.formatted_email()
+
+
+    end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=7 * wglc_duration_weeks)
+    subject =  f"WG Last Call: {doc.name}-{doc.rev} (Ends {end_date})"
+
+    send_mail(
+        request,
+        to,
+        frm,
+        subject,
+        "doc/mail/wg_last_call_issued.txt",
+        dict(
+            doc=doc,
+            subject=subject,
+            url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url(),
+            end_date=end_date,
+            wglc_duration_weeks=wglc_duration_weeks,
+            wg_list=doc.group.list_email,
+        ),
+        cc=cc,
+    )
 
 def email_pulled_from_rfc_queue(request, doc, comment, prev_state, next_state):
     extra=extra_automation_headers(doc)
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 576feb0582..ab7eaba768 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -1707,11 +1707,12 @@ def test_adopt_document(self):
                 self.assertEqual(draft.group, chair_role.group)
                 self.assertEqual(draft.stream_id, stream_state_type_slug[type_id][13:]) # trim off "draft-stream-"
                 self.assertEqual(draft.docevent_set.count() - events_before, 5)
-                self.assertEqual(len(outbox), 1)
-                self.assertTrue("Call For Adoption" in outbox[-1]["Subject"])
-                self.assertTrue(f"{chair_role.group.acronym}-chairs@" in outbox[-1]['To'])
-                self.assertTrue(f"{draft.name}@" in outbox[-1]['To'])
-                self.assertTrue(f"{chair_role.group.acronym}@" in outbox[-1]['To'])
+                self.assertEqual(len(outbox), 2)
+                self.assertTrue("Call For Adoption" in outbox[0]["Subject"])
+                self.assertTrue(f"{chair_role.group.acronym}-chairs@" in outbox[0]['To'])
+                self.assertTrue(f"{draft.name}@" in outbox[0]['To'])
+                self.assertTrue(f"{chair_role.group.acronym}@" in outbox[0]['To'])
+                # contents of outbox[1] are tested elsewhere
 
             # adopt
             empty_outbox()
@@ -2001,6 +2002,200 @@ def test_set_state(self):
         self.assertTrue("mars-chairs@ietf.org" in outbox[0].as_string())
         self.assertTrue("marsdelegate@ietf.org" in outbox[0].as_string())
 
+    def test_wg_call_for_adoption_issued(self):
+        role = RoleFactory(
+            name_id="chair",
+            group__acronym="mars",
+            group__list_email="mars-wg@ietf.org",
+            person__user__username="marschairman",
+            person__name="WG Cháir Man",
+        )
+        # First test the usual workflow through the manage adoption view
+        draft = IndividualDraftFactory()
+        url = urlreverse(
+            "ietf.doc.views_draft.adopt_draft", kwargs=dict(name=draft.name)
+        )
+        login_testing_unauthorized(self, "marschairman", url)
+        empty_outbox()
+        call_issued = State.objects.get(type="draft-stream-ietf", slug="c-adopt")
+        r = self.client.post(
+            url,
+            dict(
+                comment="some comment",
+                group=role.group.pk,
+                newstate=call_issued.pk,
+                weeks="10",
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("Call for adoption", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 10-week", body)
+        # Test not entering a duration on the form
+        draft = IndividualDraftFactory()
+        url = urlreverse(
+            "ietf.doc.views_draft.adopt_draft", kwargs=dict(name=draft.name)
+        )
+        empty_outbox()
+        call_issued = State.objects.get(type="draft-stream-ietf", slug="c-adopt")
+        r = self.client.post(
+            url,
+            dict(
+                comment="some comment",
+                group=role.group.pk,
+                newstate=call_issued.pk,
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("Call for adoption", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 2-week", body)
+
+        # Test the less usual workflow of issuing a call for adoption 
+        # of a document that's already in the ietf stream
+        draft = WgDraftFactory(group=role.group)
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        )
+        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
+        new_state = State.objects.get(
+            used=True, type="draft-stream-%s" % draft.stream_id, slug="c-adopt"
+        )
+        self.assertNotEqual(old_state, new_state)
+        empty_outbox()
+        r = self.client.post(
+            url,
+            dict(
+                new_state=new_state.pk,
+                comment="some comment",
+                weeks="10",
+                tags=[
+                    t.pk
+                    for t in draft.tags.filter(
+                        slug__in=get_tags_for_stream_id(draft.stream_id)
+                    )
+                ],
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("Call for adoption", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 10-week", body)
+        draft = WgDraftFactory(group=role.group)
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        )
+        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
+        new_state = State.objects.get(
+            used=True, type="draft-stream-%s" % draft.stream_id, slug="c-adopt"
+        )
+        self.assertNotEqual(old_state, new_state)
+        empty_outbox()
+        r = self.client.post(
+            url,
+            dict(
+                new_state=new_state.pk,
+                comment="some comment",
+                tags=[
+                    t.pk
+                    for t in draft.tags.filter(
+                        slug__in=get_tags_for_stream_id(draft.stream_id)
+                    )
+                ],
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("Call for adoption", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 2-week", body)
+
+    def test_wg_last_call_issued(self):
+        role = RoleFactory(
+            name_id="chair",
+            group__acronym="mars",
+            group__list_email="mars-wg@ietf.org",
+            person__user__username="marschairman",
+            person__name="WG Cháir Man",
+        )
+        draft = WgDraftFactory(group=role.group)
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        )
+        login_testing_unauthorized(self, "marschairman", url)
+        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
+        new_state = State.objects.get(
+            used=True, type="draft-stream-%s" % draft.stream_id, slug="wg-lc"
+        )
+        self.assertNotEqual(old_state, new_state)
+        empty_outbox()
+        r = self.client.post(
+            url,
+            dict(
+                new_state=new_state.pk,
+                comment="some comment",
+                weeks="10",
+                tags=[
+                    t.pk
+                    for t in draft.tags.filter(
+                        slug__in=get_tags_for_stream_id(draft.stream_id)
+                    )
+                ],
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("WG Last Call", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 10-week", body)
+        draft = WgDraftFactory(group=role.group)
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        )
+        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
+        new_state = State.objects.get(
+            used=True, type="draft-stream-%s" % draft.stream_id, slug="wg-lc"
+        )
+        self.assertNotEqual(old_state, new_state)
+        empty_outbox()
+        r = self.client.post(
+            url,
+            dict(
+                new_state=new_state.pk,
+                comment="some comment",
+                tags=[
+                    t.pk
+                    for t in draft.tags.filter(
+                        slug__in=get_tags_for_stream_id(draft.stream_id)
+                    )
+                ],
+            ),
+        )
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 2)
+        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn("WG Last Call", outbox[1]["Subject"])
+        body = get_payload_text(outbox[1])
+        self.assertIn("disclosure obligations", body)
+        self.assertIn("starts a 2-week", body)
+
     def test_pubreq_validation(self):
         role = RoleFactory(name_id='chair',group__acronym='mars',group__list_email='mars-wg@ietf.org',person__user__username='marschairman',person__name='WG Cháir Man')
         RoleFactory(name_id='delegate',group=role.group,person__user__email='marsdelegate@ietf.org')
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index c80537afb3..16d04ee66a 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -28,6 +28,7 @@
     IanaExpertDocEvent, IESG_SUBSTATE_TAGS)
 from ietf.doc.mails import ( email_pulled_from_rfc_queue, email_resurrect_requested,
     email_resurrection_completed, email_state_changed, email_stream_changed,
+    email_wg_call_for_adoption_issued, email_wg_last_call_issued,
     email_stream_state_changed, email_stream_tags_changed, extra_automation_headers,
     generate_publication_request, email_adopted, email_intended_status_changed,
     email_iesg_processing_document, email_ad_approved_doc,
@@ -1568,8 +1569,15 @@ def adopt_draft(request, name):
 
                 update_reminder(doc, "stream-s", e, due_date)
 
+                # The following call name is very misleading - the view allows 
+                # setting states that are _not_ the adopted state.
                 email_adopted(request, doc, prev_state, new_state, by, comment)
 
+                # Currently only the IETF stream uses the c-adopt state - guard against other
+                # streams starting to use it asthe IPR rules for those streams will be different.
+                if doc.stream_id == "ietf" and new_state.slug == "c-adopt":
+                    email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=form.cleaned_data["weeks"])
+
             # comment
             if comment:
                 e = DocEvent(type="added_comment", doc=doc, rev=doc.rev, by=by)
@@ -1754,13 +1762,20 @@ def change_stream_state(request, name, state_type):
                 events.append(e)
 
                 due_date = None
-                if form.cleaned_data["weeks"] != None:
+                if form.cleaned_data["weeks"] is not None:
                     due_date = datetime_today(DEADLINE_TZINFO) + datetime.timedelta(weeks=form.cleaned_data["weeks"])
 
                 update_reminder(doc, "stream-s", e, due_date)
 
                 email_stream_state_changed(request, doc, prev_state, new_state, by, comment)
 
+                if doc.stream_id == "ietf":
+                    if new_state.slug == "c-adopt":
+                        email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=form.cleaned_data["weeks"])
+                    
+                    if new_state.slug == "wg-lc":
+                        email_wg_last_call_issued(request, doc, wglc_duration_weeks=form.cleaned_data["weeks"])
+
             # tags
             existing_tags = set(doc.tags.all())
             new_tags = set(form.cleaned_data["tags"])
diff --git a/ietf/mailtrigger/migrations/0006_call_for_adoption_and_last_call_issued.py b/ietf/mailtrigger/migrations/0006_call_for_adoption_and_last_call_issued.py
new file mode 100644
index 0000000000..7adad150eb
--- /dev/null
+++ b/ietf/mailtrigger/migrations/0006_call_for_adoption_and_last_call_issued.py
@@ -0,0 +1,43 @@
+# Copyright The IETF Trust 2023, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    MailTrigger = apps.get_model("mailtrigger", "MailTrigger")
+    Recipient = apps.get_model("mailtrigger", "Recipient")
+    recipients = list(
+        Recipient.objects.filter(
+            slug__in=(
+                "doc_group_mail_list",
+                "doc_authors",
+                "doc_group_chairs",
+                "doc_shepherd",
+            )
+        )
+    )
+    call_for_adoption = MailTrigger.objects.create(
+        slug="doc_wg_call_for_adoption_issued",
+        desc="Recipients when a working group call for adoption is issued",
+    )
+    call_for_adoption.to.add(*recipients)
+    wg_last_call = MailTrigger.objects.create(
+        slug="doc_wg_last_call_issued",
+        desc="Recipients when a working group last call is issued",
+    )
+    wg_last_call.to.add(*recipients)
+
+
+def reverse(apps, schema_editor):
+    MailTrigger = apps.get_model("mailtrigger", "MailTrigger")
+    MailTrigger.objects.filter(
+        slug_in=("doc_wg_call_for_adoption_issued", "doc_wg_last_call_issued")
+    ).delete()
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("mailtrigger", "0005_rfc_recipients"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 0724cbb4b5..c94e15a459 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -5116,6 +5116,34 @@
     "model": "mailtrigger.mailtrigger",
     "pk": "doc_telechat_details_changed"
   },
+  {
+    "fields": {
+      "cc": [],
+      "desc": "Recipients when a working group call for adoption is issued",
+      "to": [
+        "doc_authors",
+        "doc_group_chairs",
+        "doc_group_mail_list",
+        "doc_shepherd"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "doc_wg_call_for_adoption_issued"
+  },
+  {
+    "fields": {
+      "cc": [],
+      "desc": "Recipients when a working group last call is issued",
+      "to": [
+        "doc_authors",
+        "doc_group_chairs",
+        "doc_group_mail_list",
+        "doc_shepherd"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "doc_wg_last_call_issued"
+  },
   {
     "fields": {
       "cc": [],
diff --git a/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt b/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
new file mode 100644
index 0000000000..c4a2401bc2
--- /dev/null
+++ b/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
@@ -0,0 +1,21 @@
+{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}
+Subject: {{ subject }}
+
+This message starts a {{ cfa_duration_weeks }}-week Call for Adoption for this document. 
+
+Abstract: 
+{{ doc.abstract }}
+
+File can be retrieved from:
+{{ url }}
+
+Please reply to this message keeping {{ wg_list }} in copy by indicating whether you support or not the adoption of this draft as a WG document. Comments to motivate your preference are highly appreciated. 
+
+Authors, and WG participants in general, are reminded of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [2]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].
+
+Thank you.
+[1] https://datatracker.ietf.org/doc/bcp78/
+[2] https://datatracker.ietf.org/doc/bcp79/
+[3] https://datatracker.ietf.org/doc/rfc6701/
+{% endfilter %}
+{% endautoescape %}
diff --git a/ietf/templates/doc/mail/wg_last_call_issued.txt b/ietf/templates/doc/mail/wg_last_call_issued.txt
new file mode 100644
index 0000000000..35b1e149d7
--- /dev/null
+++ b/ietf/templates/doc/mail/wg_last_call_issued.txt
@@ -0,0 +1,22 @@
+{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}
+Subject: {{ subject }}
+
+This message starts a {{ wglc_duration_weeks }}-week WG Last Call for this document. 
+
+Abstract: 
+{{ doc.abstract }}
+
+File can be retrieved from:
+{{ url }}
+
+Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping {{ wg_list }} in copy. Objections should be motivated and suggestions to resolve them are highly appreciated.
+
+Authors, and WG participants in general, are reminded again of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].
+
+Thank you.
+
+[1] https://datatracker.ietf.org/doc/bcp78/
+[2] https://datatracker.ietf.org/doc/bcp79/
+[3] https://datatracker.ietf.org/doc/rfc6701/
+{% endfilter %}
+{% endautoescape %}

From 1e451fbac105b18a3539c406b8380890ee701ef8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 19 Aug 2025 18:12:38 -0300
Subject: [PATCH 422/707] ci: replace DOCKER_BUILD_NO_SUMMARY (#9383)

Option is deprecated; replace with DOCKER_BUILD_SUMMARY: false
---
 .github/workflows/build-base-app.yml          | 2 +-
 .github/workflows/build-devblobstore.yml      | 2 +-
 .github/workflows/build-mq-broker.yml         | 2 +-
 .github/workflows/dev-assets-sync-nightly.yml | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 479cd7cadf..ef8a17f6b4 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -43,7 +43,7 @@ jobs:
     - name: Docker Build & Push
       uses: docker/build-push-action@v6
       env:
-        DOCKER_BUILD_NO_SUMMARY: true
+        DOCKER_BUILD_SUMMARY: false
       with:
         context: .
         file: docker/base.Dockerfile
diff --git a/.github/workflows/build-devblobstore.yml b/.github/workflows/build-devblobstore.yml
index 2d8214b448..f49a11af19 100644
--- a/.github/workflows/build-devblobstore.yml
+++ b/.github/workflows/build-devblobstore.yml
@@ -35,7 +35,7 @@ jobs:
     - name: Docker Build & Push
       uses: docker/build-push-action@v6
       env:
-        DOCKER_BUILD_NO_SUMMARY: true
+        DOCKER_BUILD_SUMMARY: false
       with:
         context: .
         file: docker/devblobstore.Dockerfile
diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index 85c27c23cc..4de861dbcd 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -42,7 +42,7 @@ jobs:
     - name: Docker Build & Push
       uses: docker/build-push-action@v6
       env:
-        DOCKER_BUILD_NO_SUMMARY: true
+        DOCKER_BUILD_SUMMARY: false
       with:
         context: .
         file: dev/mq/Dockerfile
diff --git a/.github/workflows/dev-assets-sync-nightly.yml b/.github/workflows/dev-assets-sync-nightly.yml
index a7fe67f012..19933bddfd 100644
--- a/.github/workflows/dev-assets-sync-nightly.yml
+++ b/.github/workflows/dev-assets-sync-nightly.yml
@@ -41,7 +41,7 @@ jobs:
       - name: Docker Build & Push
         uses: docker/build-push-action@v6
         env:
-          DOCKER_BUILD_NO_SUMMARY: true
+          DOCKER_BUILD_SUMMARY: false
         with:
           context: .
           file: dev/shared-assets-sync/Dockerfile

From b7da3d7a779f310f765f205119624229d9a860d7 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Aug 2025 10:25:49 -0300
Subject: [PATCH 423/707] fix: escape linkify filter input (#9389)

* fix: escape linkify filter input

* test: exercise linkify

* chore: lint
---
 ietf/utils/templatetags/tests.py       | 66 ++++++++++++++++++++++++++
 ietf/utils/templatetags/textfilters.py | 10 ++--
 ietf/utils/text.py                     |  6 +++
 3 files changed, 79 insertions(+), 3 deletions(-)

diff --git a/ietf/utils/templatetags/tests.py b/ietf/utils/templatetags/tests.py
index a93bf2d94d..859319be3d 100644
--- a/ietf/utils/templatetags/tests.py
+++ b/ietf/utils/templatetags/tests.py
@@ -3,6 +3,7 @@
 from django.template import Context, Origin, Template
 from django.test import override_settings
 
+from ietf.utils.templatetags.textfilters import linkify
 from ietf.utils.test_utils import TestCase
 import debug  # pyflakes: ignore
 
@@ -39,3 +40,68 @@ def test_origin_outside_base_dir(self):
                 output = template.render(Context())
                 self.assertNotIn(component, output,
                                  'Full path components should not be revealed in html')
+
+
+class TextfiltersTests(TestCase):
+    def test_linkify(self):
+        # Cases with autoescape = True (the default)
+        self.assertEqual(
+            linkify("plain string"),
+            "plain string",
+        )
+        self.assertEqual(
+            linkify("https://www.ietf.org"),
+            '<a href="https://www.ietf.org">https://www.ietf.org</a>',
+        )
+        self.assertEqual(
+            linkify('<a href="https://www.ietf.org">IETF</a>'),
+            (
+                '&lt;a href=&quot;<a href="https://www.ietf.org">https://www.ietf.org</a>&quot;&gt;IETF&lt;/a&gt;'
+            ),
+        )
+        self.assertEqual(
+            linkify("somebody@example.com"),
+            '<a href="mailto:somebody@example.com">somebody@example.com</a>',
+        )
+        self.assertEqual(
+            linkify("Some Body <somebody@example.com>"),
+            (
+                'Some Body &lt;<a href="mailto:somebody@example.com">'
+                'somebody@example.com</a>&gt;'
+            ),
+        )
+        self.assertEqual(
+            linkify("<script>alert('h4x0r3d');</script>"),
+            "&lt;script&gt;alert(&#x27;h4x0r3d&#x27;);&lt;/script&gt;",
+        )
+
+        # Cases with autoescape = False (these are dangerous and assume the caller
+        # has sanitized already)
+        self.assertEqual(
+            linkify("plain string", autoescape=False),
+            "plain string",
+        )
+        self.assertEqual(
+            linkify("https://www.ietf.org", autoescape=False),
+            '<a href="https://www.ietf.org">https://www.ietf.org</a>',
+        )
+        self.assertEqual(
+            linkify('<a href="https://www.ietf.org">IETF</a>', autoescape=False),
+            '<a href="https://www.ietf.org">IETF</a>',
+        )
+        self.assertEqual(
+            linkify("somebody@example.com", autoescape=False),
+            '<a href="mailto:somebody@example.com">somebody@example.com</a>',
+        )
+        # bleach.Linkifier translates the < -> &lt; and > -> &gt; on this one
+        self.assertEqual(
+            linkify("Some Body <somebody@example.com>", autoescape=False),
+            (
+                'Some Body &lt;<a href="mailto:somebody@example.com">'
+                'somebody@example.com</a>&gt;'
+            ),
+        )
+        self.assertEqual(
+            linkify("<script>alert('friendly script');</script>", autoescape=False),
+            "<script>alert('friendly script');</script>",
+        )
diff --git a/ietf/utils/templatetags/textfilters.py b/ietf/utils/templatetags/textfilters.py
index 3b240740e0..e3bfbe0c56 100644
--- a/ietf/utils/templatetags/textfilters.py
+++ b/ietf/utils/templatetags/textfilters.py
@@ -7,6 +7,7 @@
 from django import template
 from django.conf import settings
 from django.template.defaultfilters import stringfilter
+from django.utils.html import conditional_escape
 from django.utils.safestring import mark_safe
 
 import debug                            # pyflakes:ignore
@@ -71,10 +72,13 @@ def texescape_filter(value):
     "A TeX escape filter"
     return texescape(value)
     
-@register.filter
+@register.filter(needs_autoescape=True)
 @stringfilter
-def linkify(value):
-    text = mark_safe(_linkify(value))
+def linkify(value, autoescape=True):
+    if autoescape:
+        # Escape unless the input was already a SafeString
+        value = conditional_escape(value)
+    text = mark_safe(_linkify(value))  # _linkify is a safe operation
     return text
 
 @register.filter
diff --git a/ietf/utils/text.py b/ietf/utils/text.py
index 4e5d5b6cd5..590ec3fd30 100644
--- a/ietf/utils/text.py
+++ b/ietf/utils/text.py
@@ -60,6 +60,12 @@ def check_url_validity(attrs, new=False):
 
 
 def linkify(text):
+    """Convert URL-ish substrings into HTML links
+    
+    This does no sanitization whatsoever. Caller must sanitize the input or output as
+    contextually appropriate. Do not call `mark_safe()` on the output if the input is
+    user-provided unless it has been sanitized or escaped.
+    """
     return _bleach_linker.linkify(text)
 
 

From 450ffd8e9e586fbfbc9c583a01ee4770de4f62d9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Aug 2025 10:26:38 -0300
Subject: [PATCH 424/707] chore(deps): bump pytz (#9385)

* chore(deps): bump pytz

* chore(deps): fix copy/paste error
---
 ...meeting_country_alter_meeting_time_zone.py | 693 ++++++++++++++++++
 requirements.txt                              |   4 +-
 2 files changed, 695 insertions(+), 2 deletions(-)
 create mode 100644 ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py

diff --git a/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py b/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py
new file mode 100644
index 0000000000..8f5db26112
--- /dev/null
+++ b/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py
@@ -0,0 +1,693 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("meeting", "0015_alter_meeting_time_zone"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="meeting",
+            name="country",
+            field=models.CharField(
+                blank=True,
+                choices=[
+                    ("", "---------"),
+                    ("AF", "Afghanistan"),
+                    ("AL", "Albania"),
+                    ("DZ", "Algeria"),
+                    ("AD", "Andorra"),
+                    ("AO", "Angola"),
+                    ("AI", "Anguilla"),
+                    ("AQ", "Antarctica"),
+                    ("AG", "Antigua & Barbuda"),
+                    ("AR", "Argentina"),
+                    ("AM", "Armenia"),
+                    ("AW", "Aruba"),
+                    ("AU", "Australia"),
+                    ("AT", "Austria"),
+                    ("AZ", "Azerbaijan"),
+                    ("BS", "Bahamas"),
+                    ("BH", "Bahrain"),
+                    ("BD", "Bangladesh"),
+                    ("BB", "Barbados"),
+                    ("BY", "Belarus"),
+                    ("BE", "Belgium"),
+                    ("BZ", "Belize"),
+                    ("BJ", "Benin"),
+                    ("BM", "Bermuda"),
+                    ("BT", "Bhutan"),
+                    ("BO", "Bolivia"),
+                    ("BA", "Bosnia & Herzegovina"),
+                    ("BW", "Botswana"),
+                    ("BV", "Bouvet Island"),
+                    ("BR", "Brazil"),
+                    ("GB", "Britain (UK)"),
+                    ("IO", "British Indian Ocean Territory"),
+                    ("BN", "Brunei"),
+                    ("BG", "Bulgaria"),
+                    ("BF", "Burkina Faso"),
+                    ("BI", "Burundi"),
+                    ("KH", "Cambodia"),
+                    ("CM", "Cameroon"),
+                    ("CA", "Canada"),
+                    ("CV", "Cape Verde"),
+                    ("BQ", "Caribbean NL"),
+                    ("KY", "Cayman Islands"),
+                    ("CF", "Central African Rep."),
+                    ("TD", "Chad"),
+                    ("CL", "Chile"),
+                    ("CN", "China"),
+                    ("CX", "Christmas Island"),
+                    ("CC", "Cocos (Keeling) Islands"),
+                    ("CO", "Colombia"),
+                    ("KM", "Comoros"),
+                    ("CD", "Congo (Dem. Rep.)"),
+                    ("CG", "Congo (Rep.)"),
+                    ("CK", "Cook Islands"),
+                    ("CR", "Costa Rica"),
+                    ("HR", "Croatia"),
+                    ("CU", "Cuba"),
+                    ("CW", "Curaçao"),
+                    ("CY", "Cyprus"),
+                    ("CZ", "Czech Republic"),
+                    ("CI", "Côte d'Ivoire"),
+                    ("DK", "Denmark"),
+                    ("DJ", "Djibouti"),
+                    ("DM", "Dominica"),
+                    ("DO", "Dominican Republic"),
+                    ("TL", "East Timor"),
+                    ("EC", "Ecuador"),
+                    ("EG", "Egypt"),
+                    ("SV", "El Salvador"),
+                    ("GQ", "Equatorial Guinea"),
+                    ("ER", "Eritrea"),
+                    ("EE", "Estonia"),
+                    ("SZ", "Eswatini (Swaziland)"),
+                    ("ET", "Ethiopia"),
+                    ("FK", "Falkland Islands"),
+                    ("FO", "Faroe Islands"),
+                    ("FJ", "Fiji"),
+                    ("FI", "Finland"),
+                    ("FR", "France"),
+                    ("GF", "French Guiana"),
+                    ("PF", "French Polynesia"),
+                    ("TF", "French S. Terr."),
+                    ("GA", "Gabon"),
+                    ("GM", "Gambia"),
+                    ("GE", "Georgia"),
+                    ("DE", "Germany"),
+                    ("GH", "Ghana"),
+                    ("GI", "Gibraltar"),
+                    ("GR", "Greece"),
+                    ("GL", "Greenland"),
+                    ("GD", "Grenada"),
+                    ("GP", "Guadeloupe"),
+                    ("GU", "Guam"),
+                    ("GT", "Guatemala"),
+                    ("GG", "Guernsey"),
+                    ("GN", "Guinea"),
+                    ("GW", "Guinea-Bissau"),
+                    ("GY", "Guyana"),
+                    ("HT", "Haiti"),
+                    ("HM", "Heard Island & McDonald Islands"),
+                    ("HN", "Honduras"),
+                    ("HK", "Hong Kong"),
+                    ("HU", "Hungary"),
+                    ("IS", "Iceland"),
+                    ("IN", "India"),
+                    ("ID", "Indonesia"),
+                    ("IR", "Iran"),
+                    ("IQ", "Iraq"),
+                    ("IE", "Ireland"),
+                    ("IM", "Isle of Man"),
+                    ("IL", "Israel"),
+                    ("IT", "Italy"),
+                    ("JM", "Jamaica"),
+                    ("JP", "Japan"),
+                    ("JE", "Jersey"),
+                    ("JO", "Jordan"),
+                    ("KZ", "Kazakhstan"),
+                    ("KE", "Kenya"),
+                    ("KI", "Kiribati"),
+                    ("KP", "Korea (North)"),
+                    ("KR", "Korea (South)"),
+                    ("KW", "Kuwait"),
+                    ("KG", "Kyrgyzstan"),
+                    ("LA", "Laos"),
+                    ("LV", "Latvia"),
+                    ("LB", "Lebanon"),
+                    ("LS", "Lesotho"),
+                    ("LR", "Liberia"),
+                    ("LY", "Libya"),
+                    ("LI", "Liechtenstein"),
+                    ("LT", "Lithuania"),
+                    ("LU", "Luxembourg"),
+                    ("MO", "Macau"),
+                    ("MG", "Madagascar"),
+                    ("MW", "Malawi"),
+                    ("MY", "Malaysia"),
+                    ("MV", "Maldives"),
+                    ("ML", "Mali"),
+                    ("MT", "Malta"),
+                    ("MH", "Marshall Islands"),
+                    ("MQ", "Martinique"),
+                    ("MR", "Mauritania"),
+                    ("MU", "Mauritius"),
+                    ("YT", "Mayotte"),
+                    ("MX", "Mexico"),
+                    ("FM", "Micronesia"),
+                    ("MD", "Moldova"),
+                    ("MC", "Monaco"),
+                    ("MN", "Mongolia"),
+                    ("ME", "Montenegro"),
+                    ("MS", "Montserrat"),
+                    ("MA", "Morocco"),
+                    ("MZ", "Mozambique"),
+                    ("MM", "Myanmar (Burma)"),
+                    ("NA", "Namibia"),
+                    ("NR", "Nauru"),
+                    ("NP", "Nepal"),
+                    ("NL", "Netherlands"),
+                    ("NC", "New Caledonia"),
+                    ("NZ", "New Zealand"),
+                    ("NI", "Nicaragua"),
+                    ("NE", "Niger"),
+                    ("NG", "Nigeria"),
+                    ("NU", "Niue"),
+                    ("NF", "Norfolk Island"),
+                    ("MK", "North Macedonia"),
+                    ("MP", "Northern Mariana Islands"),
+                    ("NO", "Norway"),
+                    ("OM", "Oman"),
+                    ("PK", "Pakistan"),
+                    ("PW", "Palau"),
+                    ("PS", "Palestine"),
+                    ("PA", "Panama"),
+                    ("PG", "Papua New Guinea"),
+                    ("PY", "Paraguay"),
+                    ("PE", "Peru"),
+                    ("PH", "Philippines"),
+                    ("PN", "Pitcairn"),
+                    ("PL", "Poland"),
+                    ("PT", "Portugal"),
+                    ("PR", "Puerto Rico"),
+                    ("QA", "Qatar"),
+                    ("RO", "Romania"),
+                    ("RU", "Russia"),
+                    ("RW", "Rwanda"),
+                    ("RE", "Réunion"),
+                    ("AS", "Samoa (American)"),
+                    ("WS", "Samoa (western)"),
+                    ("SM", "San Marino"),
+                    ("ST", "Sao Tome & Principe"),
+                    ("SA", "Saudi Arabia"),
+                    ("SN", "Senegal"),
+                    ("RS", "Serbia"),
+                    ("SC", "Seychelles"),
+                    ("SL", "Sierra Leone"),
+                    ("SG", "Singapore"),
+                    ("SK", "Slovakia"),
+                    ("SI", "Slovenia"),
+                    ("SB", "Solomon Islands"),
+                    ("SO", "Somalia"),
+                    ("ZA", "South Africa"),
+                    ("GS", "South Georgia & the South Sandwich Islands"),
+                    ("SS", "South Sudan"),
+                    ("ES", "Spain"),
+                    ("LK", "Sri Lanka"),
+                    ("BL", "St Barthelemy"),
+                    ("SH", "St Helena"),
+                    ("KN", "St Kitts & Nevis"),
+                    ("LC", "St Lucia"),
+                    ("SX", "St Maarten (Dutch)"),
+                    ("MF", "St Martin (French)"),
+                    ("PM", "St Pierre & Miquelon"),
+                    ("VC", "St Vincent"),
+                    ("SD", "Sudan"),
+                    ("SR", "Suriname"),
+                    ("SJ", "Svalbard & Jan Mayen"),
+                    ("SE", "Sweden"),
+                    ("CH", "Switzerland"),
+                    ("SY", "Syria"),
+                    ("TW", "Taiwan"),
+                    ("TJ", "Tajikistan"),
+                    ("TZ", "Tanzania"),
+                    ("TH", "Thailand"),
+                    ("TG", "Togo"),
+                    ("TK", "Tokelau"),
+                    ("TO", "Tonga"),
+                    ("TT", "Trinidad & Tobago"),
+                    ("TN", "Tunisia"),
+                    ("TR", "Turkey"),
+                    ("TM", "Turkmenistan"),
+                    ("TC", "Turks & Caicos Is"),
+                    ("TV", "Tuvalu"),
+                    ("UM", "US minor outlying islands"),
+                    ("UG", "Uganda"),
+                    ("UA", "Ukraine"),
+                    ("AE", "United Arab Emirates"),
+                    ("US", "United States"),
+                    ("UY", "Uruguay"),
+                    ("UZ", "Uzbekistan"),
+                    ("VU", "Vanuatu"),
+                    ("VA", "Vatican City"),
+                    ("VE", "Venezuela"),
+                    ("VN", "Vietnam"),
+                    ("VG", "Virgin Islands (UK)"),
+                    ("VI", "Virgin Islands (US)"),
+                    ("WF", "Wallis & Futuna"),
+                    ("EH", "Western Sahara"),
+                    ("YE", "Yemen"),
+                    ("ZM", "Zambia"),
+                    ("ZW", "Zimbabwe"),
+                    ("AX", "Åland Islands"),
+                ],
+                max_length=2,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="meeting",
+            name="time_zone",
+            field=models.CharField(
+                choices=[
+                    ("", "---------"),
+                    ("Africa/Abidjan", "Africa/Abidjan"),
+                    ("Africa/Accra", "Africa/Accra"),
+                    ("Africa/Addis_Ababa", "Africa/Addis_Ababa"),
+                    ("Africa/Algiers", "Africa/Algiers"),
+                    ("Africa/Asmara", "Africa/Asmara"),
+                    ("Africa/Bamako", "Africa/Bamako"),
+                    ("Africa/Bangui", "Africa/Bangui"),
+                    ("Africa/Banjul", "Africa/Banjul"),
+                    ("Africa/Bissau", "Africa/Bissau"),
+                    ("Africa/Blantyre", "Africa/Blantyre"),
+                    ("Africa/Brazzaville", "Africa/Brazzaville"),
+                    ("Africa/Bujumbura", "Africa/Bujumbura"),
+                    ("Africa/Cairo", "Africa/Cairo"),
+                    ("Africa/Casablanca", "Africa/Casablanca"),
+                    ("Africa/Ceuta", "Africa/Ceuta"),
+                    ("Africa/Conakry", "Africa/Conakry"),
+                    ("Africa/Dakar", "Africa/Dakar"),
+                    ("Africa/Dar_es_Salaam", "Africa/Dar_es_Salaam"),
+                    ("Africa/Djibouti", "Africa/Djibouti"),
+                    ("Africa/Douala", "Africa/Douala"),
+                    ("Africa/El_Aaiun", "Africa/El_Aaiun"),
+                    ("Africa/Freetown", "Africa/Freetown"),
+                    ("Africa/Gaborone", "Africa/Gaborone"),
+                    ("Africa/Harare", "Africa/Harare"),
+                    ("Africa/Johannesburg", "Africa/Johannesburg"),
+                    ("Africa/Juba", "Africa/Juba"),
+                    ("Africa/Kampala", "Africa/Kampala"),
+                    ("Africa/Khartoum", "Africa/Khartoum"),
+                    ("Africa/Kigali", "Africa/Kigali"),
+                    ("Africa/Kinshasa", "Africa/Kinshasa"),
+                    ("Africa/Lagos", "Africa/Lagos"),
+                    ("Africa/Libreville", "Africa/Libreville"),
+                    ("Africa/Lome", "Africa/Lome"),
+                    ("Africa/Luanda", "Africa/Luanda"),
+                    ("Africa/Lubumbashi", "Africa/Lubumbashi"),
+                    ("Africa/Lusaka", "Africa/Lusaka"),
+                    ("Africa/Malabo", "Africa/Malabo"),
+                    ("Africa/Maputo", "Africa/Maputo"),
+                    ("Africa/Maseru", "Africa/Maseru"),
+                    ("Africa/Mbabane", "Africa/Mbabane"),
+                    ("Africa/Mogadishu", "Africa/Mogadishu"),
+                    ("Africa/Monrovia", "Africa/Monrovia"),
+                    ("Africa/Nairobi", "Africa/Nairobi"),
+                    ("Africa/Ndjamena", "Africa/Ndjamena"),
+                    ("Africa/Niamey", "Africa/Niamey"),
+                    ("Africa/Nouakchott", "Africa/Nouakchott"),
+                    ("Africa/Ouagadougou", "Africa/Ouagadougou"),
+                    ("Africa/Porto-Novo", "Africa/Porto-Novo"),
+                    ("Africa/Sao_Tome", "Africa/Sao_Tome"),
+                    ("Africa/Tripoli", "Africa/Tripoli"),
+                    ("Africa/Tunis", "Africa/Tunis"),
+                    ("Africa/Windhoek", "Africa/Windhoek"),
+                    ("America/Adak", "America/Adak"),
+                    ("America/Anchorage", "America/Anchorage"),
+                    ("America/Anguilla", "America/Anguilla"),
+                    ("America/Antigua", "America/Antigua"),
+                    ("America/Araguaina", "America/Araguaina"),
+                    (
+                        "America/Argentina/Buenos_Aires",
+                        "America/Argentina/Buenos_Aires",
+                    ),
+                    ("America/Argentina/Catamarca", "America/Argentina/Catamarca"),
+                    ("America/Argentina/Cordoba", "America/Argentina/Cordoba"),
+                    ("America/Argentina/Jujuy", "America/Argentina/Jujuy"),
+                    ("America/Argentina/La_Rioja", "America/Argentina/La_Rioja"),
+                    ("America/Argentina/Mendoza", "America/Argentina/Mendoza"),
+                    (
+                        "America/Argentina/Rio_Gallegos",
+                        "America/Argentina/Rio_Gallegos",
+                    ),
+                    ("America/Argentina/Salta", "America/Argentina/Salta"),
+                    ("America/Argentina/San_Juan", "America/Argentina/San_Juan"),
+                    ("America/Argentina/San_Luis", "America/Argentina/San_Luis"),
+                    ("America/Argentina/Tucuman", "America/Argentina/Tucuman"),
+                    ("America/Argentina/Ushuaia", "America/Argentina/Ushuaia"),
+                    ("America/Aruba", "America/Aruba"),
+                    ("America/Asuncion", "America/Asuncion"),
+                    ("America/Atikokan", "America/Atikokan"),
+                    ("America/Bahia", "America/Bahia"),
+                    ("America/Bahia_Banderas", "America/Bahia_Banderas"),
+                    ("America/Barbados", "America/Barbados"),
+                    ("America/Belem", "America/Belem"),
+                    ("America/Belize", "America/Belize"),
+                    ("America/Blanc-Sablon", "America/Blanc-Sablon"),
+                    ("America/Boa_Vista", "America/Boa_Vista"),
+                    ("America/Bogota", "America/Bogota"),
+                    ("America/Boise", "America/Boise"),
+                    ("America/Cambridge_Bay", "America/Cambridge_Bay"),
+                    ("America/Campo_Grande", "America/Campo_Grande"),
+                    ("America/Cancun", "America/Cancun"),
+                    ("America/Caracas", "America/Caracas"),
+                    ("America/Cayenne", "America/Cayenne"),
+                    ("America/Cayman", "America/Cayman"),
+                    ("America/Chicago", "America/Chicago"),
+                    ("America/Chihuahua", "America/Chihuahua"),
+                    ("America/Ciudad_Juarez", "America/Ciudad_Juarez"),
+                    ("America/Costa_Rica", "America/Costa_Rica"),
+                    ("America/Coyhaique", "America/Coyhaique"),
+                    ("America/Creston", "America/Creston"),
+                    ("America/Cuiaba", "America/Cuiaba"),
+                    ("America/Curacao", "America/Curacao"),
+                    ("America/Danmarkshavn", "America/Danmarkshavn"),
+                    ("America/Dawson", "America/Dawson"),
+                    ("America/Dawson_Creek", "America/Dawson_Creek"),
+                    ("America/Denver", "America/Denver"),
+                    ("America/Detroit", "America/Detroit"),
+                    ("America/Dominica", "America/Dominica"),
+                    ("America/Edmonton", "America/Edmonton"),
+                    ("America/Eirunepe", "America/Eirunepe"),
+                    ("America/El_Salvador", "America/El_Salvador"),
+                    ("America/Fort_Nelson", "America/Fort_Nelson"),
+                    ("America/Fortaleza", "America/Fortaleza"),
+                    ("America/Glace_Bay", "America/Glace_Bay"),
+                    ("America/Goose_Bay", "America/Goose_Bay"),
+                    ("America/Grand_Turk", "America/Grand_Turk"),
+                    ("America/Grenada", "America/Grenada"),
+                    ("America/Guadeloupe", "America/Guadeloupe"),
+                    ("America/Guatemala", "America/Guatemala"),
+                    ("America/Guayaquil", "America/Guayaquil"),
+                    ("America/Guyana", "America/Guyana"),
+                    ("America/Halifax", "America/Halifax"),
+                    ("America/Havana", "America/Havana"),
+                    ("America/Hermosillo", "America/Hermosillo"),
+                    ("America/Indiana/Indianapolis", "America/Indiana/Indianapolis"),
+                    ("America/Indiana/Knox", "America/Indiana/Knox"),
+                    ("America/Indiana/Marengo", "America/Indiana/Marengo"),
+                    ("America/Indiana/Petersburg", "America/Indiana/Petersburg"),
+                    ("America/Indiana/Tell_City", "America/Indiana/Tell_City"),
+                    ("America/Indiana/Vevay", "America/Indiana/Vevay"),
+                    ("America/Indiana/Vincennes", "America/Indiana/Vincennes"),
+                    ("America/Indiana/Winamac", "America/Indiana/Winamac"),
+                    ("America/Inuvik", "America/Inuvik"),
+                    ("America/Iqaluit", "America/Iqaluit"),
+                    ("America/Jamaica", "America/Jamaica"),
+                    ("America/Juneau", "America/Juneau"),
+                    ("America/Kentucky/Louisville", "America/Kentucky/Louisville"),
+                    ("America/Kentucky/Monticello", "America/Kentucky/Monticello"),
+                    ("America/La_Paz", "America/La_Paz"),
+                    ("America/Lima", "America/Lima"),
+                    ("America/Los_Angeles", "America/Los_Angeles"),
+                    ("America/Maceio", "America/Maceio"),
+                    ("America/Managua", "America/Managua"),
+                    ("America/Manaus", "America/Manaus"),
+                    ("America/Martinique", "America/Martinique"),
+                    ("America/Matamoros", "America/Matamoros"),
+                    ("America/Mazatlan", "America/Mazatlan"),
+                    ("America/Menominee", "America/Menominee"),
+                    ("America/Merida", "America/Merida"),
+                    ("America/Metlakatla", "America/Metlakatla"),
+                    ("America/Mexico_City", "America/Mexico_City"),
+                    ("America/Miquelon", "America/Miquelon"),
+                    ("America/Moncton", "America/Moncton"),
+                    ("America/Monterrey", "America/Monterrey"),
+                    ("America/Montevideo", "America/Montevideo"),
+                    ("America/Montserrat", "America/Montserrat"),
+                    ("America/Nassau", "America/Nassau"),
+                    ("America/New_York", "America/New_York"),
+                    ("America/Nome", "America/Nome"),
+                    ("America/Noronha", "America/Noronha"),
+                    ("America/North_Dakota/Beulah", "America/North_Dakota/Beulah"),
+                    ("America/North_Dakota/Center", "America/North_Dakota/Center"),
+                    (
+                        "America/North_Dakota/New_Salem",
+                        "America/North_Dakota/New_Salem",
+                    ),
+                    ("America/Nuuk", "America/Nuuk"),
+                    ("America/Ojinaga", "America/Ojinaga"),
+                    ("America/Panama", "America/Panama"),
+                    ("America/Paramaribo", "America/Paramaribo"),
+                    ("America/Phoenix", "America/Phoenix"),
+                    ("America/Port-au-Prince", "America/Port-au-Prince"),
+                    ("America/Port_of_Spain", "America/Port_of_Spain"),
+                    ("America/Porto_Velho", "America/Porto_Velho"),
+                    ("America/Puerto_Rico", "America/Puerto_Rico"),
+                    ("America/Punta_Arenas", "America/Punta_Arenas"),
+                    ("America/Rankin_Inlet", "America/Rankin_Inlet"),
+                    ("America/Recife", "America/Recife"),
+                    ("America/Regina", "America/Regina"),
+                    ("America/Resolute", "America/Resolute"),
+                    ("America/Rio_Branco", "America/Rio_Branco"),
+                    ("America/Santarem", "America/Santarem"),
+                    ("America/Santiago", "America/Santiago"),
+                    ("America/Santo_Domingo", "America/Santo_Domingo"),
+                    ("America/Sao_Paulo", "America/Sao_Paulo"),
+                    ("America/Scoresbysund", "America/Scoresbysund"),
+                    ("America/Sitka", "America/Sitka"),
+                    ("America/St_Johns", "America/St_Johns"),
+                    ("America/St_Kitts", "America/St_Kitts"),
+                    ("America/St_Lucia", "America/St_Lucia"),
+                    ("America/St_Thomas", "America/St_Thomas"),
+                    ("America/St_Vincent", "America/St_Vincent"),
+                    ("America/Swift_Current", "America/Swift_Current"),
+                    ("America/Tegucigalpa", "America/Tegucigalpa"),
+                    ("America/Thule", "America/Thule"),
+                    ("America/Tijuana", "America/Tijuana"),
+                    ("America/Toronto", "America/Toronto"),
+                    ("America/Tortola", "America/Tortola"),
+                    ("America/Vancouver", "America/Vancouver"),
+                    ("America/Whitehorse", "America/Whitehorse"),
+                    ("America/Winnipeg", "America/Winnipeg"),
+                    ("America/Yakutat", "America/Yakutat"),
+                    ("Antarctica/Casey", "Antarctica/Casey"),
+                    ("Antarctica/Davis", "Antarctica/Davis"),
+                    ("Antarctica/DumontDUrville", "Antarctica/DumontDUrville"),
+                    ("Antarctica/Macquarie", "Antarctica/Macquarie"),
+                    ("Antarctica/Mawson", "Antarctica/Mawson"),
+                    ("Antarctica/McMurdo", "Antarctica/McMurdo"),
+                    ("Antarctica/Palmer", "Antarctica/Palmer"),
+                    ("Antarctica/Rothera", "Antarctica/Rothera"),
+                    ("Antarctica/Syowa", "Antarctica/Syowa"),
+                    ("Antarctica/Troll", "Antarctica/Troll"),
+                    ("Antarctica/Vostok", "Antarctica/Vostok"),
+                    ("Asia/Aden", "Asia/Aden"),
+                    ("Asia/Almaty", "Asia/Almaty"),
+                    ("Asia/Amman", "Asia/Amman"),
+                    ("Asia/Anadyr", "Asia/Anadyr"),
+                    ("Asia/Aqtau", "Asia/Aqtau"),
+                    ("Asia/Aqtobe", "Asia/Aqtobe"),
+                    ("Asia/Ashgabat", "Asia/Ashgabat"),
+                    ("Asia/Atyrau", "Asia/Atyrau"),
+                    ("Asia/Baghdad", "Asia/Baghdad"),
+                    ("Asia/Bahrain", "Asia/Bahrain"),
+                    ("Asia/Baku", "Asia/Baku"),
+                    ("Asia/Bangkok", "Asia/Bangkok"),
+                    ("Asia/Barnaul", "Asia/Barnaul"),
+                    ("Asia/Beirut", "Asia/Beirut"),
+                    ("Asia/Bishkek", "Asia/Bishkek"),
+                    ("Asia/Brunei", "Asia/Brunei"),
+                    ("Asia/Chita", "Asia/Chita"),
+                    ("Asia/Colombo", "Asia/Colombo"),
+                    ("Asia/Damascus", "Asia/Damascus"),
+                    ("Asia/Dhaka", "Asia/Dhaka"),
+                    ("Asia/Dili", "Asia/Dili"),
+                    ("Asia/Dubai", "Asia/Dubai"),
+                    ("Asia/Dushanbe", "Asia/Dushanbe"),
+                    ("Asia/Famagusta", "Asia/Famagusta"),
+                    ("Asia/Gaza", "Asia/Gaza"),
+                    ("Asia/Hebron", "Asia/Hebron"),
+                    ("Asia/Ho_Chi_Minh", "Asia/Ho_Chi_Minh"),
+                    ("Asia/Hong_Kong", "Asia/Hong_Kong"),
+                    ("Asia/Hovd", "Asia/Hovd"),
+                    ("Asia/Irkutsk", "Asia/Irkutsk"),
+                    ("Asia/Jakarta", "Asia/Jakarta"),
+                    ("Asia/Jayapura", "Asia/Jayapura"),
+                    ("Asia/Jerusalem", "Asia/Jerusalem"),
+                    ("Asia/Kabul", "Asia/Kabul"),
+                    ("Asia/Kamchatka", "Asia/Kamchatka"),
+                    ("Asia/Karachi", "Asia/Karachi"),
+                    ("Asia/Kathmandu", "Asia/Kathmandu"),
+                    ("Asia/Khandyga", "Asia/Khandyga"),
+                    ("Asia/Kolkata", "Asia/Kolkata"),
+                    ("Asia/Krasnoyarsk", "Asia/Krasnoyarsk"),
+                    ("Asia/Kuala_Lumpur", "Asia/Kuala_Lumpur"),
+                    ("Asia/Kuching", "Asia/Kuching"),
+                    ("Asia/Kuwait", "Asia/Kuwait"),
+                    ("Asia/Macau", "Asia/Macau"),
+                    ("Asia/Magadan", "Asia/Magadan"),
+                    ("Asia/Makassar", "Asia/Makassar"),
+                    ("Asia/Manila", "Asia/Manila"),
+                    ("Asia/Muscat", "Asia/Muscat"),
+                    ("Asia/Nicosia", "Asia/Nicosia"),
+                    ("Asia/Novokuznetsk", "Asia/Novokuznetsk"),
+                    ("Asia/Novosibirsk", "Asia/Novosibirsk"),
+                    ("Asia/Omsk", "Asia/Omsk"),
+                    ("Asia/Oral", "Asia/Oral"),
+                    ("Asia/Phnom_Penh", "Asia/Phnom_Penh"),
+                    ("Asia/Pontianak", "Asia/Pontianak"),
+                    ("Asia/Pyongyang", "Asia/Pyongyang"),
+                    ("Asia/Qatar", "Asia/Qatar"),
+                    ("Asia/Qostanay", "Asia/Qostanay"),
+                    ("Asia/Qyzylorda", "Asia/Qyzylorda"),
+                    ("Asia/Riyadh", "Asia/Riyadh"),
+                    ("Asia/Sakhalin", "Asia/Sakhalin"),
+                    ("Asia/Samarkand", "Asia/Samarkand"),
+                    ("Asia/Seoul", "Asia/Seoul"),
+                    ("Asia/Shanghai", "Asia/Shanghai"),
+                    ("Asia/Singapore", "Asia/Singapore"),
+                    ("Asia/Srednekolymsk", "Asia/Srednekolymsk"),
+                    ("Asia/Taipei", "Asia/Taipei"),
+                    ("Asia/Tashkent", "Asia/Tashkent"),
+                    ("Asia/Tbilisi", "Asia/Tbilisi"),
+                    ("Asia/Tehran", "Asia/Tehran"),
+                    ("Asia/Thimphu", "Asia/Thimphu"),
+                    ("Asia/Tokyo", "Asia/Tokyo"),
+                    ("Asia/Tomsk", "Asia/Tomsk"),
+                    ("Asia/Ulaanbaatar", "Asia/Ulaanbaatar"),
+                    ("Asia/Urumqi", "Asia/Urumqi"),
+                    ("Asia/Ust-Nera", "Asia/Ust-Nera"),
+                    ("Asia/Vientiane", "Asia/Vientiane"),
+                    ("Asia/Vladivostok", "Asia/Vladivostok"),
+                    ("Asia/Yakutsk", "Asia/Yakutsk"),
+                    ("Asia/Yangon", "Asia/Yangon"),
+                    ("Asia/Yekaterinburg", "Asia/Yekaterinburg"),
+                    ("Asia/Yerevan", "Asia/Yerevan"),
+                    ("Atlantic/Azores", "Atlantic/Azores"),
+                    ("Atlantic/Bermuda", "Atlantic/Bermuda"),
+                    ("Atlantic/Canary", "Atlantic/Canary"),
+                    ("Atlantic/Cape_Verde", "Atlantic/Cape_Verde"),
+                    ("Atlantic/Faroe", "Atlantic/Faroe"),
+                    ("Atlantic/Madeira", "Atlantic/Madeira"),
+                    ("Atlantic/Reykjavik", "Atlantic/Reykjavik"),
+                    ("Atlantic/South_Georgia", "Atlantic/South_Georgia"),
+                    ("Atlantic/St_Helena", "Atlantic/St_Helena"),
+                    ("Atlantic/Stanley", "Atlantic/Stanley"),
+                    ("Australia/Adelaide", "Australia/Adelaide"),
+                    ("Australia/Brisbane", "Australia/Brisbane"),
+                    ("Australia/Broken_Hill", "Australia/Broken_Hill"),
+                    ("Australia/Darwin", "Australia/Darwin"),
+                    ("Australia/Eucla", "Australia/Eucla"),
+                    ("Australia/Hobart", "Australia/Hobart"),
+                    ("Australia/Lindeman", "Australia/Lindeman"),
+                    ("Australia/Lord_Howe", "Australia/Lord_Howe"),
+                    ("Australia/Melbourne", "Australia/Melbourne"),
+                    ("Australia/Perth", "Australia/Perth"),
+                    ("Australia/Sydney", "Australia/Sydney"),
+                    ("Europe/Amsterdam", "Europe/Amsterdam"),
+                    ("Europe/Andorra", "Europe/Andorra"),
+                    ("Europe/Astrakhan", "Europe/Astrakhan"),
+                    ("Europe/Athens", "Europe/Athens"),
+                    ("Europe/Belgrade", "Europe/Belgrade"),
+                    ("Europe/Berlin", "Europe/Berlin"),
+                    ("Europe/Brussels", "Europe/Brussels"),
+                    ("Europe/Bucharest", "Europe/Bucharest"),
+                    ("Europe/Budapest", "Europe/Budapest"),
+                    ("Europe/Chisinau", "Europe/Chisinau"),
+                    ("Europe/Copenhagen", "Europe/Copenhagen"),
+                    ("Europe/Dublin", "Europe/Dublin"),
+                    ("Europe/Gibraltar", "Europe/Gibraltar"),
+                    ("Europe/Helsinki", "Europe/Helsinki"),
+                    ("Europe/Istanbul", "Europe/Istanbul"),
+                    ("Europe/Kaliningrad", "Europe/Kaliningrad"),
+                    ("Europe/Kirov", "Europe/Kirov"),
+                    ("Europe/Kyiv", "Europe/Kyiv"),
+                    ("Europe/Lisbon", "Europe/Lisbon"),
+                    ("Europe/London", "Europe/London"),
+                    ("Europe/Luxembourg", "Europe/Luxembourg"),
+                    ("Europe/Madrid", "Europe/Madrid"),
+                    ("Europe/Malta", "Europe/Malta"),
+                    ("Europe/Minsk", "Europe/Minsk"),
+                    ("Europe/Monaco", "Europe/Monaco"),
+                    ("Europe/Moscow", "Europe/Moscow"),
+                    ("Europe/Oslo", "Europe/Oslo"),
+                    ("Europe/Paris", "Europe/Paris"),
+                    ("Europe/Prague", "Europe/Prague"),
+                    ("Europe/Riga", "Europe/Riga"),
+                    ("Europe/Rome", "Europe/Rome"),
+                    ("Europe/Samara", "Europe/Samara"),
+                    ("Europe/Saratov", "Europe/Saratov"),
+                    ("Europe/Simferopol", "Europe/Simferopol"),
+                    ("Europe/Sofia", "Europe/Sofia"),
+                    ("Europe/Stockholm", "Europe/Stockholm"),
+                    ("Europe/Tallinn", "Europe/Tallinn"),
+                    ("Europe/Tirane", "Europe/Tirane"),
+                    ("Europe/Ulyanovsk", "Europe/Ulyanovsk"),
+                    ("Europe/Vaduz", "Europe/Vaduz"),
+                    ("Europe/Vienna", "Europe/Vienna"),
+                    ("Europe/Vilnius", "Europe/Vilnius"),
+                    ("Europe/Volgograd", "Europe/Volgograd"),
+                    ("Europe/Warsaw", "Europe/Warsaw"),
+                    ("Europe/Zurich", "Europe/Zurich"),
+                    ("Indian/Antananarivo", "Indian/Antananarivo"),
+                    ("Indian/Chagos", "Indian/Chagos"),
+                    ("Indian/Christmas", "Indian/Christmas"),
+                    ("Indian/Cocos", "Indian/Cocos"),
+                    ("Indian/Comoro", "Indian/Comoro"),
+                    ("Indian/Kerguelen", "Indian/Kerguelen"),
+                    ("Indian/Mahe", "Indian/Mahe"),
+                    ("Indian/Maldives", "Indian/Maldives"),
+                    ("Indian/Mauritius", "Indian/Mauritius"),
+                    ("Indian/Mayotte", "Indian/Mayotte"),
+                    ("Indian/Reunion", "Indian/Reunion"),
+                    ("Pacific/Apia", "Pacific/Apia"),
+                    ("Pacific/Auckland", "Pacific/Auckland"),
+                    ("Pacific/Bougainville", "Pacific/Bougainville"),
+                    ("Pacific/Chatham", "Pacific/Chatham"),
+                    ("Pacific/Chuuk", "Pacific/Chuuk"),
+                    ("Pacific/Easter", "Pacific/Easter"),
+                    ("Pacific/Efate", "Pacific/Efate"),
+                    ("Pacific/Fakaofo", "Pacific/Fakaofo"),
+                    ("Pacific/Fiji", "Pacific/Fiji"),
+                    ("Pacific/Funafuti", "Pacific/Funafuti"),
+                    ("Pacific/Galapagos", "Pacific/Galapagos"),
+                    ("Pacific/Gambier", "Pacific/Gambier"),
+                    ("Pacific/Guadalcanal", "Pacific/Guadalcanal"),
+                    ("Pacific/Guam", "Pacific/Guam"),
+                    ("Pacific/Honolulu", "Pacific/Honolulu"),
+                    ("Pacific/Kanton", "Pacific/Kanton"),
+                    ("Pacific/Kiritimati", "Pacific/Kiritimati"),
+                    ("Pacific/Kosrae", "Pacific/Kosrae"),
+                    ("Pacific/Kwajalein", "Pacific/Kwajalein"),
+                    ("Pacific/Majuro", "Pacific/Majuro"),
+                    ("Pacific/Marquesas", "Pacific/Marquesas"),
+                    ("Pacific/Midway", "Pacific/Midway"),
+                    ("Pacific/Nauru", "Pacific/Nauru"),
+                    ("Pacific/Niue", "Pacific/Niue"),
+                    ("Pacific/Norfolk", "Pacific/Norfolk"),
+                    ("Pacific/Noumea", "Pacific/Noumea"),
+                    ("Pacific/Pago_Pago", "Pacific/Pago_Pago"),
+                    ("Pacific/Palau", "Pacific/Palau"),
+                    ("Pacific/Pitcairn", "Pacific/Pitcairn"),
+                    ("Pacific/Pohnpei", "Pacific/Pohnpei"),
+                    ("Pacific/Port_Moresby", "Pacific/Port_Moresby"),
+                    ("Pacific/Rarotonga", "Pacific/Rarotonga"),
+                    ("Pacific/Saipan", "Pacific/Saipan"),
+                    ("Pacific/Tahiti", "Pacific/Tahiti"),
+                    ("Pacific/Tarawa", "Pacific/Tarawa"),
+                    ("Pacific/Tongatapu", "Pacific/Tongatapu"),
+                    ("Pacific/Wake", "Pacific/Wake"),
+                    ("Pacific/Wallis", "Pacific/Wallis"),
+                    ("UTC", "UTC"),
+                ],
+                default="UTC",
+                max_length=255,
+            ),
+        ),
+    ]
diff --git a/requirements.txt b/requirements.txt
index 7aadc7bf7f..b3226d24b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -66,8 +66,8 @@ python-json-logger>=3.1.0
 python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
 pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=1.6    # from TastyPie
-pytz==2022.2.1   # Pinned as changes need to be vetted for their effect on Meeting fields
-types-pytz==2022.2.1   # match pytz version
+pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
+types-pytz==2025.2.0.20250516  # match pytz versionrequests>=2.31.0
 requests>=2.31.0
 types-requests>=2.27.1
 requests-mock>=1.9.3

From 891049aa28c12b1afab4e16561bd31316e3b508e Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Thu, 21 Aug 2025 13:39:47 +0000
Subject: [PATCH 425/707] ci: update base image target version to 20250821T1326

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 756b7021b7..9019dbb626 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250819T1508
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250821T1326
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 2e0f1519da..c5c7fb37b9 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250819T1508
+20250821T1326

From 86f2cfa29b8958633bf9dd23b624cfb4246f5693 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 Aug 2025 08:59:40 -0500
Subject: [PATCH 426/707] chore(deps): bump types-pytz from 2022.2.1 to
 2025.2.0.20250809 (#9339)

Bumps [types-pytz](https://github.com/typeshed-internal/stub_uploader) from 2022.2.1 to 2025.2.0.20250809.
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: types-pytz
  dependency-version: 2025.2.0.20250809
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index b3226d24b1..60d3d8152e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -67,7 +67,7 @@ python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form
 pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=1.6    # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
-types-pytz==2025.2.0.20250516  # match pytz versionrequests>=2.31.0
+types-pytz==2025.2.0.20250809  # match pytz versionrequests>=2.31.0
 requests>=2.31.0
 types-requests>=2.27.1
 requests-mock>=1.9.3

From f84f2e5b4ade1bff90feb845707f70f5a317253c Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Thu, 21 Aug 2025 14:13:02 +0000
Subject: [PATCH 427/707] ci: update base image target version to 20250821T1359

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 9019dbb626..d619ee99ee 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250821T1326
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250821T1359
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index c5c7fb37b9..b6fc12e128 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250821T1326
+20250821T1359

From 64884e78ad3169a0d488ae3d046c1d65acf376b4 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 Aug 2025 15:03:05 -0300
Subject: [PATCH 428/707] fix: actually call fromisoformat() (#9399)

---
 ietf/api/__init__.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index e236347975..230f8339bd 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -62,14 +62,14 @@ def generate_cache_key(self, *args, **kwargs):
         # Use a list plus a ``.join()`` because it's faster than concatenation.
         return "%s:%s:%s:%s" % (self._meta.api_name, self._meta.resource_name, ':'.join(args), smooshed)
 
-    def _z_aware_fromisoformat(self, value):
-        """datetime.datetie.fromisoformat replacement that works with python < 3.11"""
+    def _z_aware_fromisoformat(self, value: str) -> datetime.datetime:
+        """datetime.datetime.fromisoformat replacement that works with python < 3.11"""
         if HAVE_BROKEN_FROMISOFORMAT:
             if value.upper().endswith("Z"):
                 value = value[:-1] + "+00:00"  # Z -> UTC
             elif re.match(r"[+-][0-9][0-9]$", value[-3:]):
                 value = value + ":00"  # -04 -> -04:00
-        return value
+        return datetime.datetime.fromisoformat(value)
 
     def filter_value_to_python(
         self, value, field_name, filters, filter_expr, filter_type

From 3b6b4770d67a8c88aee642db7129c35be930da12 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 22 Aug 2025 03:58:37 -0400
Subject: [PATCH 429/707] ci: Fix build.yml for staging db recreate

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9c24380764..79ef750b5d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -448,11 +448,11 @@ jobs:
       - name: Refresh Staging DB
         uses: the-actions-org/workflow-dispatch@v4
         with:
-          workflow: update-staging-db.yml
+          workflow: deploy-db.yml
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "sourceDb":"datatracker" }'
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "waitClusterReady":true }'
           wait-for-completion: true
           wait-for-completion-timeout: 10m
           wait-for-completion-interval: 20s

From 82a241084954146152196d612a13074bdc1b5de9 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Fri, 22 Aug 2025 17:46:45 +0200
Subject: [PATCH 430/707] feat: updated text for BoF request (per IESG demand)
 (#9406)

---
 ietf/templates/doc/bofreq/bofreq_template.md | 10 +++----
 ietf/templates/doc/bofreq/new_bofreq.html    | 30 ++++++++++++++++++--
 2 files changed, 32 insertions(+), 8 deletions(-)

diff --git a/ietf/templates/doc/bofreq/bofreq_template.md b/ietf/templates/doc/bofreq/bofreq_template.md
index 78949ba7bd..49c5e511a5 100644
--- a/ietf/templates/doc/bofreq/bofreq_template.md
+++ b/ietf/templates/doc/bofreq/bofreq_template.md
@@ -1,15 +1,15 @@
-# Name: Exact MPLS Edges (EXAMPLE) (There's an acronym for anything if you really want one ;-)
+# Name: EXAct MPLs Edges (EXAMPLE) (There's an acronym for anything if you really want one ;-)
 ## Description 
 Replace this with a few paragraphs describing the BOF request.
 
 Fill in the details below. Keep items in the order they appear here.
 
 ## Required Details
-- Status: (not) WG Forming
-- Responsible AD: name
+- Status: "not WG Forming" or "WG forming"
+- Responsible AD: name (or at least area(s) if you know)
 - BOF proponents: name <email>, name <email> (1-3 people - who are requesting and coordinating discussion for proposal) 
 - Number of people expected to attend: 100
-- Length of session (1 or 2 hours): 2 hours
+- Length of session (1 or usually 2 hours): 2 hours
 - Conflicts (whole Areas and/or WGs)
    - Chair Conflicts: TBD
    - Technology Overlap: TBD
@@ -27,7 +27,7 @@ To allow evaluation of your proposal, please include the following items:
    - Items, Internet-Drafts, speakers, timing
    - Or a URL
 
-## Links to the mailing list, draft charter if any, relevant Internet-Drafts, etc.
+## Links to the mailing list, draft charter if any (for WG-forming BoF), relevant Internet-Drafts, etc.
    - Mailing List: https://www.ietf.org/mailman/listinfo/example
    - Draft charter: {{ settings.IDTRACKER_BASE_URL }}{% url 'ietf.doc.views_doc.document_main' name='charter-ietf-EXAMPLE' %}
    - Relevant Internet-Drafts:
diff --git a/ietf/templates/doc/bofreq/new_bofreq.html b/ietf/templates/doc/bofreq/new_bofreq.html
index 9506d9c8e6..c6aa0054f9 100644
--- a/ietf/templates/doc/bofreq/new_bofreq.html
+++ b/ietf/templates/doc/bofreq/new_bofreq.html
@@ -6,15 +6,39 @@
     {% origin %}
     <h1>Start a new BOF Request</h1>
     <p>
-        The IAB will also attempt to provide BoF Shepherds as described in their document on the subject only on request from the IESG. If you feel that your BoF would benefit from an IAB BoF Shepherd, please discuss this with your Area Director.
+        BoF proponents are strongly encouraged to review the following sources before submitting requests:
+    </p>
+    <ul>
+        <li>Process: <a href="https://www.rfc-editor.org/rfc/rfc2418.html#section-2.4">RFC 2418 Section 2.4</a></li>
+        <li>Considerations for having a successful BoF: <a href="https://www.rfc-editor.org/rfc/rfc5434.html">RFC 5434</a></li>
+    </ul>
+    {# The following block needs to be commented out after the BoF deadline and re-opened before next BoF request opening #}
+    <hr>
+    <p class="lead">
+        Announcement for IETF 124: The IESG and the IAB have organized <em>Ask Me Anything</em> (AMA) virtual sessions 
+        for the community to help proponents who are interested in putting up BoF proposals for IETF 124
+        (see also the <a href="https://mailarchive.ietf.org/arch/msg/ietf-announce/mtAYV3Mu5RfJPR-przzr-Nzxhwc/">IETF-announce</a> email):
+    </p>
+    <ul class="lead">
+        <li>28th of August 13:00-14:00 UTC 
+            <a href="https://datatracker.ietf.org/meeting/interim-2025-iesg-22/sessions/iesg.ics" title="iCalendar entry" aria-label="iCalendar entry"><i class="bi bi-calendar"></i></a></li>
+        <li>28th of August 19:00-20:00 UTC 
+            <a href="https://datatracker.ietf.org/meeting/interim-2025-iesg-23/sessions/iesg.ics" title="iCalendar entry" aria-label="iCalendar entry"><i class="bi bi-calendar"></i></a></li>
+    </ul>
+    <hr>
+    {# End of the temporary block #}
+    <p>
+        The IAB will also attempt to provide BoF Shepherds as described in their document on the subject only on request from the IESG. 
+        If you feel that your BoF would benefit from an IAB BoF Shepherd, please discuss this with your Area Director.
     </p>
     <p>
-        Choose a short descriptive title for your request. Take time to choose a good initial title - it will be used to make the filename for your request's content. The title can be changed later, but the filename will not change.
+        Choose a short descriptive title for your request. Take time to choose a good initial title - it will be used to make the filename for your request's content.
+        The title can be changed later, but the filename will not change.
     </p>
     <p>
         For example, a request with a title of "A new important bit" will be saved as <code>bofreq-{{ user.person.last_name|xslugify|slice:"64" }}-a-new-important-bit-00.md</code>.
     </p>
-    <p>All the items in the template MUST be filed in.</p>
+    <p>All the items in the template <strong>MUST</strong> be filed in.</p>
     <form class="upload-content form-horizontal"
           method="post"
           enctype="multipart/form-data">

From b1cfa7082f60343210b8116668f182e3c67207bf Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 22 Aug 2025 22:08:59 -0400
Subject: [PATCH 431/707] ci: Increase wait-for-completion timeout to 30
 minutes for staging refresh db step

Increased the wait-for-completion timeout from 10 minutes to 30 minutes in the build workflow.
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 79ef750b5d..8567446cae 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -454,7 +454,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "waitClusterReady":true }'
           wait-for-completion: true
-          wait-for-completion-timeout: 10m
+          wait-for-completion-timeout: 30m
           wait-for-completion-interval: 20s
           display-workflow-run-url: false
 

From b3f2756f6b5d6adf853eb7779412950291169c38 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 27 Aug 2025 13:06:48 -0500
Subject: [PATCH 432/707] fix: clearly show To and From groups in liaison
 statement email (#9432)

---
 ietf/group/templatetags/group_filters.py |  7 +++++++
 ietf/templates/liaisons/liaison_mail.txt | 11 +++++++++--
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/ietf/group/templatetags/group_filters.py b/ietf/group/templatetags/group_filters.py
index c9481b767b..bf2ad71949 100644
--- a/ietf/group/templatetags/group_filters.py
+++ b/ietf/group/templatetags/group_filters.py
@@ -37,3 +37,10 @@ def role_person_link(role, **kwargs):
     plain_name = role.person.plain_name()
     email = role.email.address
     return {'name': name, 'plain_name': plain_name, 'email': email, 'title': title, 'class': cls}
+
+@register.filter
+def name_with_conditional_acronym(group):
+    if group.type_id in ("sdo", "isoc", "individ", "nomcom", "ietf", "irtf", ):
+        return group.name
+    else:
+        return f"{group.name} ({group.acronym})"
diff --git a/ietf/templates/liaisons/liaison_mail.txt b/ietf/templates/liaisons/liaison_mail.txt
index 6d6a07d7ef..18dfe610fd 100644
--- a/ietf/templates/liaisons/liaison_mail.txt
+++ b/ietf/templates/liaisons/liaison_mail.txt
@@ -1,13 +1,20 @@
-{% load ietf_filters %}{% autoescape off %}Title: {{ liaison.title|clean_whitespace }}
+{% load ietf_filters group_filters %}{% autoescape off %}Title: {{ liaison.title|clean_whitespace }}
 Submission Date: {{ liaison.submitted|date:"Y-m-d" }}
 URL of the IETF Web page: {{ liaison.get_absolute_url }}
+
+To: {% for g in liaison.to_groups.all %}{{g|name_with_conditional_acronym}}{% if not forloop.last %}, {% endif %}{% endfor %}
+From: {% for g in liaison.from_groups.all %}{{g|name_with_conditional_acronym}}{% if not forloop.last %}, {% endif %}{% endfor %}
+Purpose: {{ liaison.purpose.name }}
 {% if liaison.deadline %}Please reply by {{ liaison.deadline }}{% endif %}
+
+Email Addresses
+---------------
 From: {% if liaison.from_contact %}{{ liaison.from_contact }}{% endif %}
 To: {{ liaison.to_contacts }}
 Cc: {{ liaison.cc_contacts }}
 Response Contacts: {{ liaison.response_contacts }}
 Technical Contacts: {{ liaison.technical_contacts }}
-Purpose: {{ liaison.purpose.name }}
+
 {% for related in liaison.source_of_set.all %}
 Referenced liaison: {% if related.target.title %}{{ related.target.title }}{% else %}Liaison #{{ related.target.pk }}{% endif %} ({{ related.target.get_absolute_url }})
 {% endfor %}

From 6e62bb32771cb564f52201a376ad6e754155343c Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 29 Aug 2025 10:44:51 -0500
Subject: [PATCH 433/707] fix: remove iab executive director specialization
 from the liaison app (#9435)

---
 ietf/liaisons/forms.py       |  3 +--
 ietf/liaisons/tests.py       | 12 ------------
 ietf/liaisons/tests_forms.py | 12 ------------
 ietf/liaisons/utils.py       |  1 -
 ietf/liaisons/views.py       | 17 +++++++----------
 5 files changed, 8 insertions(+), 37 deletions(-)

diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index 7483981595..ef5b29535e 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -105,7 +105,6 @@ def internal_groups_for_person(person: Optional[Person]):
             "Secretariat",
             "IETF Chair",
             "IAB Chair",
-            "IAB Executive Director",
             "Liaison Manager",
             "Liaison Coordinator",
             "Authorized Individual",
@@ -115,7 +114,7 @@ def internal_groups_for_person(person: Optional[Person]):
     # Interesting roles, as Group queries
     queries = [
         Q(role__person=person, role__name="chair", acronym="ietf"),
-        Q(role__person=person, role__name__in=("chair", "execdir"), acronym="iab"),
+        Q(role__person=person, role__name="chair", acronym="iab"),
         Q(role__person=person, role__name="ad", type="area", state="active"),
         Q(
             role__person=person,
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 1d6cfe0c14..8bbaa4f053 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -123,7 +123,6 @@ def test_get_cc(self):
         cc = get_cc(Group.objects.get(acronym='iab'))
         self.assertTrue(EMAIL_ALIASES['IAB'] in cc)
         self.assertTrue(EMAIL_ALIASES['IABCHAIR'] in cc)
-        self.assertTrue(EMAIL_ALIASES['IABEXECUTIVEDIRECTOR'] in cc)
         # test an Area
         area = Group.objects.filter(type='area').first()
         cc = get_cc(area)
@@ -166,7 +165,6 @@ def test_get_contacts_for_group(self):
         # test iab
         contacts = get_contacts_for_group(Group.objects.get(acronym='iab'))
         self.assertTrue(EMAIL_ALIASES['IABCHAIR'] in contacts)
-        self.assertTrue(EMAIL_ALIASES['IABEXECUTIVEDIRECTOR'] in contacts)
         # test iesg
         contacts = get_contacts_for_group(Group.objects.get(acronym='iesg'))
         self.assertTrue(EMAIL_ALIASES['IESG'] in contacts)
@@ -534,7 +532,6 @@ def test_outgoing_access(self):
         RoleFactory(name_id='liaison_coordinator', group__acronym='iab', person__user__username='liaison-coordinator')
         mars = RoleFactory(name_id='chair',person__user__username='marschairman',group__acronym='mars').group
         RoleFactory(name_id='secr',group=mars,person__user__username='mars-secr')
-        RoleFactory(name_id='execdir',group=Group.objects.get(acronym='iab'),person__user__username='iab-execdir')
 
         url = urlreverse('ietf.liaisons.views.liaison_list')
         addurl = urlreverse('ietf.liaisons.views.liaison_add', kwargs={'type':'outgoing'})
@@ -592,15 +589,6 @@ def test_outgoing_access(self):
         r = self.client.get(addurl)
         self.assertEqual(r.status_code, 200)
 
-        # IAB Executive Director
-        self.assertTrue(self.client.login(username="iab-execdir", password="iab-execdir+password"))
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-        q = PyQuery(r.content)
-        self.assertEqual(len(q("a.btn:contains('New outgoing liaison')")), 1)
-        r = self.client.get(addurl)
-        self.assertEqual(r.status_code, 200)
-
         # Liaison Manager has access
         self.assertTrue(self.client.login(username="ulm-liaiman", password="ulm-liaiman+password"))
         r = self.client.get(url)
diff --git a/ietf/liaisons/tests_forms.py b/ietf/liaisons/tests_forms.py
index c2afddea65..101c0c8298 100644
--- a/ietf/liaisons/tests_forms.py
+++ b/ietf/liaisons/tests_forms.py
@@ -94,11 +94,6 @@ def test_all_internal_groups(self):
     def test_internal_groups_for_person(self):
         # test relies on the data created in ietf.utils.test_data.make_immutable_test_data()
         # todo add liaison coordinator when modeled
-        RoleFactory(
-            name_id="execdir",
-            group=Group.objects.get(acronym="iab"),
-            person__user__username="iab-execdir",
-        )
         RoleFactory(
             name_id="auth",
             group__type_id="sdo",
@@ -121,7 +116,6 @@ def test_internal_groups_for_person(self):
             "secretary",
             "ietf-chair",
             "iab-chair",
-            "iab-execdir",
             "sdo-authperson",
         ):
             returned_queryset = internal_groups_for_person(
@@ -151,11 +145,6 @@ def test_internal_groups_for_person(self):
         )
 
     def test_external_groups_for_person(self):
-        RoleFactory(
-            name_id="execdir",
-            group=Group.objects.get(acronym="iab"),
-            person__user__username="iab-execdir",
-        )
         RoleFactory(name_id="liaison_coordinator", group__acronym="iab", person__user__username="liaison-coordinator")
         the_sdo = GroupFactory(type_id="sdo", acronym="the-sdo")
         liaison_manager = RoleFactory(name_id="liaiman", group=the_sdo).person
@@ -166,7 +155,6 @@ def test_external_groups_for_person(self):
             "secretary",
             "ietf-chair",
             "iab-chair",
-            "iab-execdir",
             "liaison-coordinator",
             "ad",
             "sopschairman",
diff --git a/ietf/liaisons/utils.py b/ietf/liaisons/utils.py
index ea06c5988e..469bbc5c87 100644
--- a/ietf/liaisons/utils.py
+++ b/ietf/liaisons/utils.py
@@ -8,7 +8,6 @@
 OUTGOING_LIAISON_ROLES = [
     "Area Director",
     "IAB Chair",
-    "IAB Executive Director",
     "IETF Chair",
     "Liaison Manager",
     "Liaison Coordinator",
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index 1b7e8d63bb..9710149c90 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -30,11 +30,12 @@
 from ietf.utils.response import permission_denied
 
 EMAIL_ALIASES = {
-    'IETFCHAIR':'The IETF Chair <chair@ietf.org>',
-    'IESG':'The IESG <iesg@ietf.org>',
-    'IAB':'The IAB <iab@iab.org>',
-    'IABCHAIR':'The IAB Chair <iab-chair@iab.org>',
-    'IABEXECUTIVEDIRECTOR':'The IAB Executive Director <execd@iab.org>'}
+    "IETFCHAIR": "The IETF Chair <chair@ietf.org>",
+    "IESG": "The IESG <iesg@ietf.org>",
+    "IAB": "The IAB <iab@iab.org>",
+    "IABCHAIR": "The IAB Chair <iab-chair@iab.org>",
+}
+
 
 # -------------------------------------------------
 # Helper Functions
@@ -84,8 +85,6 @@ def _find_person_in_emails(liaison, person):
             return True
         elif addr in ('iab@iab.org', 'iab-chair@iab.org') and has_role(person.user, "IAB Chair"):
             return True
-        elif addr in ('execd@iab.org', ) and has_role(person.user, "IAB Executive Director"):
-            return True
 
     return False
 
@@ -110,7 +109,6 @@ def get_cc(group):
     elif group.acronym in ('iab'):
         emails.append(EMAIL_ALIASES['IAB'])
         emails.append(EMAIL_ALIASES['IABCHAIR'])
-        emails.append(EMAIL_ALIASES['IABEXECUTIVEDIRECTOR'])
     elif group.type_id == 'area':
         emails.append(EMAIL_ALIASES['IETFCHAIR'])
         ad_roles = group.role_set.filter(name='ad')
@@ -151,7 +149,6 @@ def get_contacts_for_group(group):
         contacts.append(EMAIL_ALIASES['IETFCHAIR'])
     elif group.acronym == 'iab':
         contacts.append(EMAIL_ALIASES['IABCHAIR'])
-        contacts.append(EMAIL_ALIASES['IABEXECUTIVEDIRECTOR'])
     elif group.acronym == 'iesg':
         contacts.append(EMAIL_ALIASES['IESG'])
 
@@ -171,7 +168,7 @@ def needs_approval(group,person):
     user = person.user
     if group.acronym in ('ietf','iesg') and has_role(user, 'IETF Chair'):
         return False
-    if group.acronym == 'iab' and (has_role(user,'IAB Chair') or has_role(user,'IAB Executive Director')):
+    if group.acronym == 'iab' and has_role(user,'IAB Chair'):
         return False
     if group.type_id == 'area' and group.role_set.filter(name='ad',person=person):
         return False

From 3ca4eec5abb6927837fbc849809b587f4bde6419 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 2 Sep 2025 14:41:52 -0300
Subject: [PATCH 434/707] feat: expose State.used in admin (#9449)

---
 ietf/doc/admin.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index b492aa3423..745536f9a1 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -22,8 +22,8 @@ class StateTypeAdmin(admin.ModelAdmin):
 admin.site.register(StateType, StateTypeAdmin)
 
 class StateAdmin(admin.ModelAdmin):
-    list_display = ["slug", "type", 'name', 'order', 'desc']
-    list_filter = ["type", ]
+    list_display = ["slug", "type", 'name', 'order', 'desc', "used"]
+    list_filter = ["type", "used"]
     search_fields = ["slug", "type__label", "type__slug", "name", "desc"]
     filter_horizontal = ["next_states"]
 admin.site.register(State, StateAdmin)

From 02dbe17fe7bfe707594531bb16dffd905c5c2a53 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 2 Sep 2025 16:48:38 -0300
Subject: [PATCH 435/707] feat: history for mailtrigger models (#9452)

* feat: history for mailtrigger models

* chore: update copyright years

* fix: use py3.9-compatible call_command syntax

It seems `option=[...]` does not work with positional arguments in py3.9's argparse.

* chore: update resources
---
 ietf/mailtrigger/admin.py                     |   7 +-
 ...storicalrecipient_historicalmailtrigger.py | 122 ++++++++++++++++++
 ietf/mailtrigger/models.py                    |   6 +-
 ietf/mailtrigger/resources.py                 |  42 +++++-
 4 files changed, 172 insertions(+), 5 deletions(-)
 create mode 100644 ietf/mailtrigger/migrations/0007_historicalrecipient_historicalmailtrigger.py

diff --git a/ietf/mailtrigger/admin.py b/ietf/mailtrigger/admin.py
index a60fd5b072..8c73f2ae02 100644
--- a/ietf/mailtrigger/admin.py
+++ b/ietf/mailtrigger/admin.py
@@ -1,9 +1,10 @@
-# Copyright The IETF Trust 2015-2019, All Rights Reserved
+# Copyright The IETF Trust 2015-2025, All Rights Reserved
 from django.contrib import admin
+from simple_history.admin import SimpleHistoryAdmin
 
 from ietf.mailtrigger.models import MailTrigger, Recipient
 
-class RecipientAdmin(admin.ModelAdmin):
+class RecipientAdmin(SimpleHistoryAdmin):
     list_display = [ 'slug', 'desc', 'template', 'has_code', ]
     def has_code(self, obj):
         return hasattr(obj,'gather_%s'%obj.slug) 
@@ -11,7 +12,7 @@ def has_code(self, obj):
 admin.site.register(Recipient, RecipientAdmin)
 
 
-class MailTriggerAdmin(admin.ModelAdmin):
+class MailTriggerAdmin(SimpleHistoryAdmin):
     list_display = [ 'slug', 'desc',  ]
     filter_horizontal = [ 'to', 'cc',  ]
 admin.site.register(MailTrigger, MailTriggerAdmin)
diff --git a/ietf/mailtrigger/migrations/0007_historicalrecipient_historicalmailtrigger.py b/ietf/mailtrigger/migrations/0007_historicalrecipient_historicalmailtrigger.py
new file mode 100644
index 0000000000..d23b72d737
--- /dev/null
+++ b/ietf/mailtrigger/migrations/0007_historicalrecipient_historicalmailtrigger.py
@@ -0,0 +1,122 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from io import StringIO
+
+from django.conf import settings
+from django.core import management
+from django.db import migrations, models
+import django.db.models.deletion
+import simple_history.models
+
+from ietf.utils.log import log
+
+
+def forward(apps, schema_editor):
+    # Fill in history for existing data using the populate_history management command
+    captured_stdout = StringIO()
+    captured_stderr = StringIO()
+    try:
+        management.call_command(
+            "populate_history",
+            "mailtrigger.MailTrigger",
+            "mailtrigger.Recipient",
+            stdout=captured_stdout,
+            stderr=captured_stderr,
+        )
+    except management.CommandError as err:
+        log(
+            "Failed to populate history for mailtrigger models.\n"
+            "\n"
+            f"stdout:\n{captured_stdout.getvalue() or '<none>'}\n"
+            "\n"
+            f"stderr:\n{captured_stderr.getvalue() or '<none>'}\n"
+        )
+        raise RuntimeError("Failed to populate history for mailtrigger models") from err
+    log(
+        "Populated history for mailtrigger models.\n"
+        "\n"
+        f"stdout:\n{captured_stdout.getvalue() or '<none>'}\n"
+        "\n"
+        f"stderr:\n{captured_stderr.getvalue() or '<none>'}\n"
+    )
+
+
+def reverse(apps, schema_editor):
+    pass  # nothing to do
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+        ("mailtrigger", "0006_call_for_adoption_and_last_call_issued"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="HistoricalRecipient",
+            fields=[
+                ("slug", models.CharField(db_index=True, max_length=32)),
+                ("desc", models.TextField(blank=True)),
+                ("template", models.TextField(blank=True, null=True)),
+                ("history_id", models.AutoField(primary_key=True, serialize=False)),
+                ("history_date", models.DateTimeField(db_index=True)),
+                ("history_change_reason", models.CharField(max_length=100, null=True)),
+                (
+                    "history_type",
+                    models.CharField(
+                        choices=[("+", "Created"), ("~", "Changed"), ("-", "Deleted")],
+                        max_length=1,
+                    ),
+                ),
+                (
+                    "history_user",
+                    models.ForeignKey(
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        related_name="+",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "historical recipient",
+                "verbose_name_plural": "historical recipients",
+                "ordering": ("-history_date", "-history_id"),
+                "get_latest_by": ("history_date", "history_id"),
+            },
+            bases=(simple_history.models.HistoricalChanges, models.Model),
+        ),
+        migrations.CreateModel(
+            name="HistoricalMailTrigger",
+            fields=[
+                ("slug", models.CharField(db_index=True, max_length=64)),
+                ("desc", models.TextField(blank=True)),
+                ("history_id", models.AutoField(primary_key=True, serialize=False)),
+                ("history_date", models.DateTimeField(db_index=True)),
+                ("history_change_reason", models.CharField(max_length=100, null=True)),
+                (
+                    "history_type",
+                    models.CharField(
+                        choices=[("+", "Created"), ("~", "Changed"), ("-", "Deleted")],
+                        max_length=1,
+                    ),
+                ),
+                (
+                    "history_user",
+                    models.ForeignKey(
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        related_name="+",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "historical mail trigger",
+                "verbose_name_plural": "historical mail triggers",
+                "ordering": ("-history_date", "-history_id"),
+                "get_latest_by": ("history_date", "history_id"),
+            },
+            bases=(simple_history.models.HistoricalChanges, models.Model),
+        ),
+        migrations.RunPython(forward, reverse),
+    ]
diff --git a/ietf/mailtrigger/models.py b/ietf/mailtrigger/models.py
index 66b7139fa5..435729f893 100644
--- a/ietf/mailtrigger/models.py
+++ b/ietf/mailtrigger/models.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2015-2020, All Rights Reserved
+# Copyright The IETF Trust 2015-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -7,6 +7,8 @@
 
 from email.utils import parseaddr
 
+from simple_history.models import HistoricalRecords
+
 from ietf.doc.utils_bofreq import bofreq_editors, bofreq_responsible
 from ietf.utils.mail import formataddr, get_email_addresses_from_text
 from ietf.group.models import Group, Role
@@ -38,6 +40,7 @@ class MailTrigger(models.Model):
     desc = models.TextField(blank=True)
     to   = models.ManyToManyField('mailtrigger.Recipient', blank=True, related_name='used_in_to')
     cc   = models.ManyToManyField('mailtrigger.Recipient', blank=True, related_name='used_in_cc')
+    history = HistoricalRecords()
 
     class Meta:
         ordering = ["slug"]
@@ -49,6 +52,7 @@ class Recipient(models.Model):
     slug = models.CharField(max_length=32, primary_key=True)
     desc = models.TextField(blank=True)
     template = models.TextField(null=True, blank=True)
+    history = HistoricalRecords()
 
     class Meta:
         ordering = ["slug"]
diff --git a/ietf/mailtrigger/resources.py b/ietf/mailtrigger/resources.py
index eb5466618a..daca055bf4 100644
--- a/ietf/mailtrigger/resources.py
+++ b/ietf/mailtrigger/resources.py
@@ -7,7 +7,7 @@
 
 from ietf import api
 
-from ietf.mailtrigger.models import Recipient, MailTrigger
+from ietf.mailtrigger.models import MailTrigger, Recipient
 
 
 class RecipientResource(ModelResource):
@@ -37,3 +37,43 @@ class Meta:
         }
 api.mailtrigger.register(MailTriggerResource())
 
+from ietf.utils.resources import UserResource
+class HistoricalMailTriggerResource(ModelResource):
+    history_user     = ToOneField(UserResource, 'history_user', null=True)
+    class Meta:
+        queryset = MailTrigger.history.model.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'historicalmailtrigger'
+        ordering = ['history_id', ]
+        filtering = { 
+            "slug": ALL,
+            "desc": ALL,
+            "history_id": ALL,
+            "history_date": ALL,
+            "history_change_reason": ALL,
+            "history_type": ALL,
+            "history_user": ALL_WITH_RELATIONS,
+        }
+api.mailtrigger.register(HistoricalMailTriggerResource())
+
+from ietf.utils.resources import UserResource
+class HistoricalRecipientResource(ModelResource):
+    history_user     = ToOneField(UserResource, 'history_user', null=True)
+    class Meta:
+        queryset = Recipient.history.model.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'historicalrecipient'
+        ordering = ['history_id', ]
+        filtering = { 
+            "slug": ALL,
+            "desc": ALL,
+            "template": ALL,
+            "history_id": ALL,
+            "history_date": ALL,
+            "history_change_reason": ALL,
+            "history_type": ALL,
+            "history_user": ALL_WITH_RELATIONS,
+        }
+api.mailtrigger.register(HistoricalRecipientResource())

From 2960164714f0c0380d3259408b028a9150c8c27e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 3 Sep 2025 19:16:26 -0300
Subject: [PATCH 436/707] feat: Python 3.12 (#8811)

* refactor: smtpd -> aiosmtpd

* test: set mock return value for EmailOnFailureCommandTests

The test has been working, but in a broken way, for as long as it has existed. The smtpd-based test_smtpserver was masking an exception that did not interfere with the test's effectiveness.

* test: increase SMTP.line_length_limit

* chore: suppress known deprecation warnings

* refactor: utcfromtimestamp->fromtimestamp

* refactor: it's now spelled "datetime.UTC"

* feat: python 3.12

* chore: suppress deprecation warning

* fix: utcnow() -> now(datetime.UTC)

* chore: suppress deprecation warning

* chore: more deprecation warnings

* ci: update base image target version to 20250417T1507

* chore: reorg / clean up deprecation ignore list

Removed a few suppressions that were OBE based on running the tests and checking versions of the dependencies that were causing them. Reordered kwargs to make it more readable (to me anyway).

* chore: disable coverage test for now

See the comment in settings.py for details.

tl;dr coverage is unusably slow under python 3.12 as we're using it

* ci: update base image target version to 20250422T1458

* ci: update base image target version to 20250604T2012

* ci: build/use py312 images (#9168)

* ci: tag py312 base app

* ci: datatrackerbase-app:latest -> py312

* ci: update base image target version to 20250719T0833

* refactor: update to coverage 7.9.2 + cleanup (#9256)

* refactor: drop unused code_coverage_collection var

* refactor: @skip_coverage -> pragma: no cover

* chore(deps): bump coverage to current ver

* refactor: split up set_coverage_checking()

* refactor: inline IetfLiveServerTestCase

(there's only one subclass)

* feat: disable_coverage context mgr

* chore: remove unused import

* refactor: set_coverage_checking -> disable_coverage

* refactor: elim more set_coverage_checking

* refactor: start using coverage 7.9.2

* feat: working coverage 7.9 implementation

 * Extract coverage tools to ietf.utils.coverage
 * Revert to starting checker in settings_test

Does not exactly match previous coverage reports. Need to investigate.

* refactor: CustomJsonReporter->CustomDictReporter

* chore: remove "migration" coverage entry

Has not been populated in quite some time

* test: test CoverageManager class

* chore: exclude CustomDictReporter from coverage

Setting up to test this will be complex and we'll notice other test failures/coverage weirdness if this does not behave.

* chore: exclude coverage.py from coverage

Way too meta

* chore: update deps for py3.12 (#9270)

* chore(deps): argon2-cffi (supports py3.14)

* chore(deps): setuptools to latest (py3.9+)

* chore(deps): bump beautifulsoup4 (py3.7+)

* chore(deps): bump bibtexparser (py3)

* chore(deps): bump bleach (py3.13)

* chore(deps): bump bleach (py3.13)

* chore(deps): lift pin on boto3 + adjust settings

* chore(deps): bump celery (py3.13)

* chore(deps): bump django-admin-rangefilter (py3.12)

* chore(deps): bump django-analytical (py3.13)

* chore(deps): bump django-bootstrap5 (py3.13)

* chore(deps): bump django-celery-beat (py3.12)

Still holding back until their #894 is conclusively resolved. The 2.8.x release adds official py3.13 support.

* chore(deps): bump django-celery-results (py3.13)

* chore(deps): remove django-csp (not used)

* chore(deps): bump django-cors-headers (py3.13)

* chore(deps): bump django-debug-toolbar (py3.13)

* refactor: drop stale django-referrer-policy pkg

Supported via django's SecurityMiddleware since longtime

* chore(deps): bump django-simple-history (py3.13)

* chore(deps): bump django-storages (py3.12)

* chore(deps): bump django-tastypie+update patch

* chore(deps): bump django_vite+update config

* chore(deps): bump djangorestframework+remove cap

* chore(deps): remove djlint

* chore(deps): bump docutils (py3.14)

* chore(deps): bump drf-standardized-errors (py3.13)

* chore(deps): bump factory-boy (py3.13)

* chore(deps): bump github3.py (py3.11??)

* chore(deps): bump gunicorn (py3.12)

* chore(deps): bump html2text (py3.13)

* chore(deps): bump inflect

* chore(deps): bump jsonfield (py3.10-3.13)

* chore(deps): bump jsonschema (py3.13)

* chore(deps): bump logging_tree (py3.12)

* chore(deps): bump lxml (py3.13)

* chore(deps): bump markdown (py3.13)

* chore(deps): bump mock

* chore(deps): bump oic (py3.11)

* chore(deps): bump pillow (py3.13)

* chore(deps): bump psycopg2 (py3.13)

* chore(deps): bump pyang (py3.11)

* chore(deps): bump pydyf (py3.12)

* chore(deps): bump pyflakes (py3.9+)

* chore(deps): bump pyopenssl (py3.13)

* chore(deps): bump pyquery (py3.12)

* chore(deps): bump python-dateutil (py3.12)

* chore(deps): bump python-json-logger (py3.13)

* chore(deps): bump python-mimeparse (py3.13)

* chore(deps): bump pytz (py3.13)

Brings a meeting migration to adjust tz/country choices.

* chore(deps): bump requests (py3.13)

* chore(deps): bump requests-mock (py3.12)

* chore(deps): bump scout-apm (py3.12)

* chore(deps): bump selenium (py3.13)

* chore(deps): bump tblib (py3.13)

* chore(deps): bump tqdm (py3.12)

* chore(deps): bump unidecode (py3.11)

* chore(deps): adjust requirements.txt to install correctly

* chore(deps): bump urllib3, remove pin (py3.13)

Situation requiring the pin to < 2.0 appears to have resolved.

* chore(deps): bump weasyprint (py3.13)

* chore(deps): bump xml2rfc (py3.13)

* fix: lint

* ci: py312 base for celery in sandbox

* ci: update base image target version to 20250819T1645

* chore: finish dropping smtpd  (#9384)

* chore: smtpd debug server -> aiosmtpd

* chore(dev): accept long SMTP lines

* chore(dev): use correct aiosmtpd handler

* chore: update copyright years

* Revert "chore: update copyright years"

This reverts commit 2814cb85dc43c9a27f9834c629474e58d1dfb0f7.

---------

Co-authored-by: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
---
 .github/workflows/build-base-app.yml          |   1 +
 .github/workflows/tests-az.yml                |   2 +-
 .vscode/tasks.json                            |   5 +-
 README.md                                     |   2 +-
 dev/build/Dockerfile                          |   2 +-
 dev/build/TARGET_BASE                         |   2 +-
 dev/celery/Dockerfile                         |   0
 dev/deploy-to-container/cli.js                |   6 +-
 dev/diff/cli.js                               |   6 +-
 dev/tests/debug.sh                            |   2 +-
 dev/tests/docker-compose.debug.yml            |   2 +-
 docker/app.Dockerfile                         |   2 +-
 docker/base.Dockerfile                        |   2 +-
 docker/celery.Dockerfile                      |   2 +-
 docker/configs/settings_local.py              |   2 +
 docker/configs/settings_local_vite.py         |   6 +-
 docker/scripts/app-configure-blobstore.py     |   6 +-
 docker/scripts/app-init.sh                    |   2 +-
 ietf/api/__init__.py                          |   2 +-
 ietf/api/tests.py                             |   6 +-
 ietf/bin/aliases-from-json.py                 |   2 +-
 ietf/doc/models.py                            |   2 +-
 ietf/doc/templatetags/ballot_icon.py          |   2 +-
 ietf/doc/tests_draft.py                       |   4 +-
 ietf/doc/tests_utils.py                       |   2 +-
 ietf/doc/views_stats.py                       |   6 +-
 ietf/group/views.py                           |   2 +-
 ietf/idindex/index.py                         |   4 +-
 ietf/iesg/views.py                            |   2 +-
 ietf/ietfauth/views.py                        |   2 +-
 ietf/ipr/mail.py                              |   4 +-
 ietf/ipr/views.py                             |  14 +-
 ietf/liaisons/tests.py                        |   8 +-
 ...meeting_country_alter_meeting_time_zone.py |   1 +
 ietf/meeting/models.py                        |   6 +-
 ietf/meeting/tests_js.py                      |   2 +-
 ietf/meeting/tests_tasks.py                   |   2 +-
 ietf/meeting/tests_views.py                   |  29 ++--
 ietf/meeting/views.py                         |   6 +-
 ietf/nomcom/tests.py                          |   2 +-
 ietf/nomcom/views.py                          |   4 +-
 ietf/settings.py                              |  48 +++---
 ietf/settings_test.py                         |   5 +-
 ietf/submit/checkers.py                       |  57 ++++---
 ietf/sync/iana.py                             |   8 +-
 ietf/sync/tasks.py                            |   2 +-
 ietf/sync/tests.py                            |   6 +-
 .../utils/{test_smtpserver.py => aiosmtpd.py} |  21 ++-
 ietf/utils/coverage.py                        |  90 ++++++++++
 ietf/utils/decorators.py                      |  12 --
 ietf/utils/jstest.py                          |  41 ++++-
 ietf/utils/meetecho.py                        |   4 +-
 ietf/utils/serialize.py                       |   2 +-
 ietf/utils/test_runner.py                     | 155 ++++++------------
 ietf/utils/tests.py                           |  14 +-
 ietf/utils/tests_coverage.py                  |  56 +++++++
 ietf/utils/tests_meetecho.py                  |  26 +--
 ietf/utils/timezone.py                        |   2 +-
 k8s/settings_local.py                         |   6 +-
 ...astypie-django22-fielderror-response.patch |   8 +-
 requirements.txt                              | 135 ++++++++-------
 61 files changed, 505 insertions(+), 359 deletions(-)
 create mode 100644 dev/celery/Dockerfile
 rename ietf/utils/{test_smtpserver.py => aiosmtpd.py} (72%)
 create mode 100644 ietf/utils/coverage.py
 create mode 100644 ietf/utils/tests_coverage.py

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index ef8a17f6b4..4a4394fca0 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -51,6 +51,7 @@ jobs:
         push: true
         tags: |
           ghcr.io/ietf-tools/datatracker-app-base:${{ env.IMGVERSION }}
+          ghcr.io/ietf-tools/datatracker-app-base:py312
           ${{ github.ref == 'refs/heads/main' && 'ghcr.io/ietf-tools/datatracker-app-base:latest' || '' }}
 
     - name: Update version references
diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index 8553563a19..d1fe0cdf62 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -62,7 +62,7 @@ jobs:
           echo "Starting Containers..."
           sudo docker network create dtnet
           sudo docker run -d --name db --network=dtnet ghcr.io/ietf-tools/datatracker-db:latest &
-          sudo docker run -d --name app --network=dtnet ghcr.io/ietf-tools/datatracker-app-base:latest sleep infinity &
+          sudo docker run -d --name app --network=dtnet ghcr.io/ietf-tools/datatracker-app-base:py312 sleep infinity &
           wait
 
           echo "Cloning datatracker repo..."
diff --git a/.vscode/tasks.json b/.vscode/tasks.json
index 4bd0b99363..8b36b0e6ac 100644
--- a/.vscode/tasks.json
+++ b/.vscode/tasks.json
@@ -105,10 +105,11 @@
             "command": "/usr/local/bin/python",
             "args": [
                 "-m",
-                "smtpd",
+                "aiosmtpd",
                 "-n",
                 "-c",
-                "DebuggingServer",
+                "ietf.utils.aiosmtpd.DevDebuggingHandler",
+                "-l",
                 "localhost:2025"
             ],
             "presentation": {
diff --git a/README.md b/README.md
index abebb7ca02..4e1b7e1a45 100644
--- a/README.md
+++ b/README.md
@@ -142,7 +142,7 @@ Pages will gradually be updated to Vue 3 components. These components are locate
 
 Each Vue 3 app has its own sub-directory. For example, the agenda app is located under `/client/agenda`.
 
-The datatracker makes use of the Django-Vite plugin to point to either the Vite.js server or the precompiled production files. The `DJANGO_VITE_DEV_MODE` flag, found in the `ietf/settings_local.py` file determines whether the Vite.js server is used or not.
+The datatracker makes use of the Django-Vite plugin to point to either the Vite.js server or the precompiled production files. The `DJANGO_VITE["default"]["dev_mode"]` flag, found in the `ietf/settings_local.py` file determines whether the Vite.js server is used or not.
 
 In development mode, you must start the Vite.js development server, in addition to the usual Datatracker server:
 
diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index d619ee99ee..658f1e5695 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250821T1359
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250819T1645
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index b6fc12e128..9e510ad8db 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250821T1359
+20250819T1645
diff --git a/dev/celery/Dockerfile b/dev/celery/Dockerfile
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/dev/deploy-to-container/cli.js b/dev/deploy-to-container/cli.js
index 1a2d993ac4..2f0faad151 100644
--- a/dev/deploy-to-container/cli.js
+++ b/dev/deploy-to-container/cli.js
@@ -85,7 +85,7 @@ async function main () {
   
   // Pull latest Datatracker Base image
   console.info('Pulling latest Datatracker base docker image...')
-  const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:latest')
+  const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:py312')
   await new Promise((resolve, reject) => {
     dock.modem.followProgress(appImagePullStream, (err, res) => err ? reject(err) : resolve(res))
   })
@@ -214,7 +214,7 @@ async function main () {
   const celeryContainers = {}
   for (const conConf of conConfs) {
     celeryContainers[conConf.name] = await dock.createContainer({
-      Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
+      Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
       name: `dt-${conConf.name}-${branch}`,
       Hostname: `dt-${conConf.name}-${branch}`,
       Env: [
@@ -244,7 +244,7 @@ async function main () {
   // Create Datatracker container
   console.info(`Creating Datatracker docker container... [dt-app-${branch}]`)
   const appContainer = await dock.createContainer({
-    Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
+    Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
     name: `dt-app-${branch}`,
     Hostname: `dt-app-${branch}`,
     Env: [
diff --git a/dev/diff/cli.js b/dev/diff/cli.js
index 461b0c37a0..0cf353cc65 100644
--- a/dev/diff/cli.js
+++ b/dev/diff/cli.js
@@ -567,7 +567,7 @@ async function main () {
           {
             title: 'Pulling latest Datatracker base docker image...',
             task: async (subctx, subtask) => {
-              const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:latest')
+              const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:py312')
               await new Promise((resolve, reject) => {
                 dock.modem.followProgress(appImagePullStream, (err, res) => err ? reject(err) : resolve(res))
               })
@@ -648,7 +648,7 @@ async function main () {
             title: 'Creating source Datatracker docker container...',
             task: async (subctx, subtask) => {
               containers.appSource = await dock.createContainer({
-                Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
+                Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
                 name: 'dt-diff-app-source',
                 Tty: true,
                 Hostname: 'appsource',
@@ -664,7 +664,7 @@ async function main () {
             title: 'Creating target Datatracker docker container...',
             task: async (subctx, subtask) => {
               containers.appTarget = await dock.createContainer({
-                Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
+                Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
                 name: 'dt-diff-app-target',
                 Tty: true,
                 Hostname: 'apptarget',
diff --git a/dev/tests/debug.sh b/dev/tests/debug.sh
index d87c504bb9..e92e6d9b2a 100644
--- a/dev/tests/debug.sh
+++ b/dev/tests/debug.sh
@@ -9,7 +9,7 @@
 # Simply type "exit" + ENTER to exit and shutdown this test environment.
 
 echo "Fetching latest images..."
-docker pull ghcr.io/ietf-tools/datatracker-app-base:latest
+docker pull ghcr.io/ietf-tools/datatracker-app-base:py312
 docker pull ghcr.io/ietf-tools/datatracker-db:latest
 echo "Starting containers..."
 docker compose -f docker-compose.debug.yml -p dtdebug --compatibility up -d
diff --git a/dev/tests/docker-compose.debug.yml b/dev/tests/docker-compose.debug.yml
index 8117b92375..168bbd4e92 100644
--- a/dev/tests/docker-compose.debug.yml
+++ b/dev/tests/docker-compose.debug.yml
@@ -5,7 +5,7 @@ version: '3.8'
 
 services:
     app:
-        image: ghcr.io/ietf-tools/datatracker-app-base:latest
+        image: ghcr.io/ietf-tools/datatracker-app-base:py312
         command: -f /dev/null
         working_dir: /__w/datatracker/datatracker
         entrypoint: tail
diff --git a/docker/app.Dockerfile b/docker/app.Dockerfile
index fee3833733..e3df9bd4b4 100644
--- a/docker/app.Dockerfile
+++ b/docker/app.Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:latest
+FROM ghcr.io/ietf-tools/datatracker-app-base:py312
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 57aac8ee56..c1fe5b093e 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.9-bookworm
+FROM python:3.12-bookworm
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/docker/celery.Dockerfile b/docker/celery.Dockerfile
index e7c7b9cc3f..279d5c7550 100644
--- a/docker/celery.Dockerfile
+++ b/docker/celery.Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:latest
+FROM ghcr.io/ietf-tools/datatracker-app-base:py312
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index ca51871463..3ee7a4295d 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -89,6 +89,8 @@
             secret_key="minio_pass",
             security_token=None,
             client_config=botocore.config.Config(
+                request_checksum_calculation="when_required",
+                response_checksum_validation="when_required",
                 signature_version="s3v4",
                 connect_timeout=BLOBSTORAGE_CONNECT_TIMEOUT,
                 read_timeout=BLOBSTORAGE_READ_TIMEOUT,
diff --git a/docker/configs/settings_local_vite.py b/docker/configs/settings_local_vite.py
index 7fb12a003d..9116905b12 100644
--- a/docker/configs/settings_local_vite.py
+++ b/docker/configs/settings_local_vite.py
@@ -2,5 +2,9 @@
 # -*- coding: utf-8 -*-
 
 from ietf.settings_local import *                  # pyflakes:ignore
+from ietf.settings_local import DJANGO_VITE
 
-DJANGO_VITE_DEV_MODE = True
+DJANGO_VITE["default"] |= {
+    "dev_mode": True,
+    "dev_server_port": 3000,
+}
diff --git a/docker/scripts/app-configure-blobstore.py b/docker/scripts/app-configure-blobstore.py
index df4685b246..3140e39306 100755
--- a/docker/scripts/app-configure-blobstore.py
+++ b/docker/scripts/app-configure-blobstore.py
@@ -17,7 +17,11 @@ def init_blobstore():
         aws_access_key_id=os.environ.get("BLOB_STORE_ACCESS_KEY", "minio_root"),
         aws_secret_access_key=os.environ.get("BLOB_STORE_SECRET_KEY", "minio_pass"),
         aws_session_token=None,
-        config=botocore.config.Config(signature_version="s3v4"),
+        config=botocore.config.Config(
+            request_checksum_calculation="when_required",
+            response_checksum_validation="when_required",
+            signature_version="s3v4",
+        ),
     )
     for bucketname in ARTIFACT_STORAGE_NAMES:
         try:
diff --git a/docker/scripts/app-init.sh b/docker/scripts/app-init.sh
index 17e0c6c764..1d895cdf53 100755
--- a/docker/scripts/app-init.sh
+++ b/docker/scripts/app-init.sh
@@ -108,7 +108,7 @@ echo "Running initial checks..."
 
 if [ -z "$EDITOR_VSCODE" ]; then
     CODE=0
-    python -m smtpd -n -c DebuggingServer localhost:2025 &
+    python -m aiosmtpd -n -c ietf.utils.aiosmtpd.DevDebuggingHandler -l localhost:2025 &
     if [ -z "$*" ]; then
         echo "-----------------------------------------------------------------"
         echo "Ready!"
diff --git a/ietf/api/__init__.py b/ietf/api/__init__.py
index 230f8339bd..d4562f97dd 100644
--- a/ietf/api/__init__.py
+++ b/ietf/api/__init__.py
@@ -181,7 +181,7 @@ class Serializer(tastypie.serializers.Serializer):
     OPTION_ESCAPE_NULLS = "datatracker-escape-nulls"
 
     def format_datetime(self, data):
-        return data.astimezone(datetime.timezone.utc).replace(tzinfo=None).isoformat(timespec="seconds") + "Z"
+        return data.astimezone(datetime.UTC).replace(tzinfo=None).isoformat(timespec="seconds") + "Z"
 
     def to_simple(self, data, options):
         options = options or {}
diff --git a/ietf/api/tests.py b/ietf/api/tests.py
index 865f877bfb..2a44791a5c 100644
--- a/ietf/api/tests.py
+++ b/ietf/api/tests.py
@@ -462,12 +462,12 @@ def test_api_add_session_attendees(self):
         self.assertTrue(session.attended_set.filter(person=recman).exists())
         self.assertEqual(
             session.attended_set.get(person=recman).time,
-            datetime.datetime(2023, 9, 3, 12, 34, 56, tzinfo=datetime.timezone.utc),
+            datetime.datetime(2023, 9, 3, 12, 34, 56, tzinfo=datetime.UTC),
         )
         self.assertTrue(session.attended_set.filter(person=otherperson).exists())
         self.assertEqual(
             session.attended_set.get(person=otherperson).time,
-            datetime.datetime(2023, 9, 3, 3, 0, 19, tzinfo=datetime.timezone.utc),
+            datetime.datetime(2023, 9, 3, 3, 0, 19, tzinfo=datetime.UTC),
         )
 
     def test_api_upload_polls_and_chatlog(self):
@@ -871,7 +871,7 @@ def test_api_new_meeting_registration_v2_nomcom(self):
         self.assertEqual(volunteer.origin, 'registration')
 
     def test_api_version(self):
-        DumpInfo.objects.create(date=timezone.datetime(2022,8,31,7,10,1,tzinfo=datetime.timezone.utc), host='testapi.example.com',tz='UTC')
+        DumpInfo.objects.create(date=timezone.datetime(2022,8,31,7,10,1,tzinfo=datetime.UTC), host='testapi.example.com',tz='UTC')
         url = urlreverse('ietf.api.views.version')
         r = self.client.get(url)
         data = r.json()
diff --git a/ietf/bin/aliases-from-json.py b/ietf/bin/aliases-from-json.py
index a0c383a1ac..0da5d1f8b9 100644
--- a/ietf/bin/aliases-from-json.py
+++ b/ietf/bin/aliases-from-json.py
@@ -38,7 +38,7 @@ def generate_files(records, adest, vdest, postconfirm, vdomain):
         vpath = tmppath / "virtual"
 
         with apath.open("w") as afile, vpath.open("w") as vfile:
-            date = datetime.datetime.now(datetime.timezone.utc)
+            date = datetime.datetime.now(datetime.UTC)
             signature = f"# Generated by {Path(__file__).absolute()} at {date}\n"
             afile.write(signature)
             vfile.write(signature)
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index b6f36cb8a7..25ee734cbe 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1157,7 +1157,7 @@ def fake_history_obj(self, rev):
             elif rev_events.exists():
                 time = rev_events.first().time
             else:
-                time = datetime.datetime.fromtimestamp(0, datetime.timezone.utc)
+                time = datetime.datetime.fromtimestamp(0, datetime.UTC)
             dh = DocHistory(name=self.name, rev=rev, doc=self, time=time, type=self.type, title=self.title,
                              stream=self.stream, group=self.group)
 
diff --git a/ietf/doc/templatetags/ballot_icon.py b/ietf/doc/templatetags/ballot_icon.py
index a94c145007..07a6c7f926 100644
--- a/ietf/doc/templatetags/ballot_icon.py
+++ b/ietf/doc/templatetags/ballot_icon.py
@@ -196,7 +196,7 @@ def state_age_colored(doc):
                 .time
             )
         except IndexError:
-            state_datetime = datetime.datetime(1990, 1, 1, tzinfo=datetime.timezone.utc)
+            state_datetime = datetime.datetime(1990, 1, 1, tzinfo=datetime.UTC)
         days = (timezone.now() - state_datetime).days
         # loosely based on the Publish Path page at the iesg wiki
         if iesg_state == "lc":
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index ab7eaba768..ab33acebe6 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -678,11 +678,11 @@ def test_in_draft_expire_freeze(self):
             datetime.datetime.combine(
                 ietf_monday - datetime.timedelta(days=1),
                 datetime.time(0, 0, 0),
-                tzinfo=datetime.timezone.utc,
+                tzinfo=datetime.UTC,
             )
         ))
         self.assertFalse(in_draft_expire_freeze(
-            datetime.datetime.combine(ietf_monday, datetime.time(0, 0, 0), tzinfo=datetime.timezone.utc)
+            datetime.datetime.combine(ietf_monday, datetime.time(0, 0, 0), tzinfo=datetime.UTC)
         ))
         
     def test_warn_expirable_drafts(self):
diff --git a/ietf/doc/tests_utils.py b/ietf/doc/tests_utils.py
index f610fe3d76..7db59819da 100644
--- a/ietf/doc/tests_utils.py
+++ b/ietf/doc/tests_utils.py
@@ -148,7 +148,7 @@ def test_update_action_holders_resets_age(self):
         doc = self.doc_in_iesg_state('pub-req')
         doc.action_holders.set([self.ad])
         dah = doc.documentactionholder_set.get(person=self.ad)
-        dah.time_added = datetime.datetime(2020, 1, 1, tzinfo=datetime.timezone.utc)  # arbitrary date in the past
+        dah.time_added = datetime.datetime(2020, 1, 1, tzinfo=datetime.UTC)  # arbitrary date in the past
         dah.save()
 
         right_now = timezone.now()
diff --git a/ietf/doc/views_stats.py b/ietf/doc/views_stats.py
index 0bbf0b91c5..028573b338 100644
--- a/ietf/doc/views_stats.py
+++ b/ietf/doc/views_stats.py
@@ -18,7 +18,7 @@
 from ietf.utils.timezone import date_today
 
 
-epochday = datetime.datetime.utcfromtimestamp(0).date().toordinal()
+epochday = datetime.datetime.fromtimestamp(0, datetime.UTC).date().toordinal()
 
 
 def dt(s):
@@ -35,13 +35,13 @@ def model_to_timeline_data(model, field='time', **kwargs):
     assert field in [ f.name for f in model._meta.get_fields() ]
 
     objects = ( model.objects.filter(**kwargs)
-                                .annotate(date=TruncDate(field, tzinfo=datetime.timezone.utc))
+                                .annotate(date=TruncDate(field, tzinfo=datetime.UTC))
                                 .order_by('date')
                                 .values('date')
                                 .annotate(count=Count('id')))
     if objects.exists():
         obj_list = list(objects)
-        today = date_today(datetime.timezone.utc)
+        today = date_today(datetime.UTC)
         if not obj_list[-1]['date'] == today:
             obj_list += [ {'date': today, 'count': 0} ]
         data = [ ((e['date'].toordinal()-epochday)*1000*60*60*24, e['count']) for e in obj_list ]
diff --git a/ietf/group/views.py b/ietf/group/views.py
index 3529b31f68..bc785ff81e 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -941,7 +941,7 @@ def meetings(request, acronym, group_type=None):
             cutoff_date = revsub_dates_by_meeting[s.meeting.pk]
         else:
             cutoff_date = s.meeting.date + datetime.timedelta(days=s.meeting.submission_correction_day_offset)
-        s.cached_is_cutoff = date_today(datetime.timezone.utc) > cutoff_date
+        s.cached_is_cutoff = date_today(datetime.UTC) > cutoff_date
 
     future, in_progress, recent, past = group_sessions(sessions)
 
diff --git a/ietf/idindex/index.py b/ietf/idindex/index.py
index 4f021c0dc7..19eb29d4da 100644
--- a/ietf/idindex/index.py
+++ b/ietf/idindex/index.py
@@ -276,7 +276,7 @@ def active_drafts_index_by_group(extra_values=()):
     groups = [g for g in groups_dict.values() if hasattr(g, "active_drafts")]
     groups.sort(key=lambda g: g.acronym)
 
-    fallback_time = datetime.datetime(1950, 1, 1, tzinfo=datetime.timezone.utc)
+    fallback_time = datetime.datetime(1950, 1, 1, tzinfo=datetime.UTC)
     for g in groups:
         g.active_drafts.sort(key=lambda d: d.get("initial_rev_time", fallback_time))
 
@@ -302,6 +302,6 @@ def id_index_txt(with_abstracts=False):
 
     return render_to_string("idindex/id_index.txt", {
             'groups': groups,
-            'time': timezone.now().astimezone(datetime.timezone.utc).strftime("%Y-%m-%d %H:%M:%S %Z"),
+            'time': timezone.now().astimezone(datetime.UTC).strftime("%Y-%m-%d %H:%M:%S %Z"),
             'with_abstracts': with_abstracts,
             })
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index 7b9f489b44..ffd4515c98 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -101,7 +101,7 @@ def agenda_json(request, date=None):
 
     res = {
         "telechat-date": str(data["date"]),
-        "as-of": str(datetime.datetime.utcnow()),
+        "as-of": str(datetime.datetime.now(datetime.UTC)),
         "page-counts": telechat_page_count(date=get_agenda_date(date))._asdict(),
         "sections": {},
         }
diff --git a/ietf/ietfauth/views.py b/ietf/ietfauth/views.py
index 4219747e12..b5256b14f8 100644
--- a/ietf/ietfauth/views.py
+++ b/ietf/ietfauth/views.py
@@ -517,7 +517,7 @@ def confirm_password_reset(request, auth):
         password = data['password']
         last_login = None
         if data['last_login']:
-            last_login = datetime.datetime.fromtimestamp(data['last_login'], datetime.timezone.utc)
+            last_login = datetime.datetime.fromtimestamp(data['last_login'], datetime.UTC)
     except django.core.signing.BadSignature:
         raise Http404("Invalid or expired auth")
 
diff --git a/ietf/ipr/mail.py b/ietf/ipr/mail.py
index 167b11956c..9bef751b95 100644
--- a/ietf/ipr/mail.py
+++ b/ietf/ipr/mail.py
@@ -66,9 +66,9 @@ def utc_from_string(s):
     if date is None:
         return None
     elif is_aware(date):
-        return date.astimezone(datetime.timezone.utc)
+        return date.astimezone(datetime.UTC)
     else:
-        return date.replace(tzinfo=datetime.timezone.utc)
+        return date.replace(tzinfo=datetime.UTC)
 
 # ----------------------------------------------------------------
 # Email Functions
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 24453df2d2..08979a3972 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -152,13 +152,13 @@ def ipr_rfc_number(disclosureDate, thirdPartyDisclosureFlag):
 
     # RFC publication date comes from the RFC Editor announcement
     ipr_rfc_pub_datetime = {
-        1310 : datetime.datetime(1992,  3, 13,  0,  0, tzinfo=datetime.timezone.utc),
-        1802 : datetime.datetime(1994,  3, 23,  0,  0, tzinfo=datetime.timezone.utc),
-        2026 : datetime.datetime(1996, 10, 29,  0,  0, tzinfo=datetime.timezone.utc),
-        3668 : datetime.datetime(2004,  2, 18,  0,  0, tzinfo=datetime.timezone.utc),
-        3979 : datetime.datetime(2005,  3,  2,  2, 23, tzinfo=datetime.timezone.utc),
-        4879 : datetime.datetime(2007,  4, 10, 18, 21, tzinfo=datetime.timezone.utc),
-        8179 : datetime.datetime(2017,  5, 31, 23,  1, tzinfo=datetime.timezone.utc),
+        1310 : datetime.datetime(1992,  3, 13,  0,  0, tzinfo=datetime.UTC),
+        1802 : datetime.datetime(1994,  3, 23,  0,  0, tzinfo=datetime.UTC),
+        2026 : datetime.datetime(1996, 10, 29,  0,  0, tzinfo=datetime.UTC),
+        3668 : datetime.datetime(2004,  2, 18,  0,  0, tzinfo=datetime.UTC),
+        3979 : datetime.datetime(2005,  3,  2,  2, 23, tzinfo=datetime.UTC),
+        4879 : datetime.datetime(2007,  4, 10, 18, 21, tzinfo=datetime.UTC),
+        8179 : datetime.datetime(2017,  5, 31, 23,  1, tzinfo=datetime.UTC),
     }
 
     if disclosureDate < ipr_rfc_pub_datetime[1310]:
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 8bbaa4f053..a1fbf77841 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -723,7 +723,7 @@ def test_add_incoming_liaison(self):
         from_groups = [ str(g.pk) for g in Group.objects.filter(type="sdo") ]
         to_group = Group.objects.get(acronym="mars")
         submitter = Person.objects.get(user__username="marschairman")
-        today = date_today(datetime.timezone.utc)
+        today = date_today(datetime.UTC)
         related_liaison = liaison
         r = self.client.post(url,
                              dict(from_groups=from_groups,
@@ -808,7 +808,7 @@ def test_add_outgoing_liaison(self):
         from_group = Group.objects.get(acronym="mars")
         to_group = Group.objects.filter(type="sdo")[0]
         submitter = Person.objects.get(user__username="marschairman")
-        today = date_today(datetime.timezone.utc)
+        today = date_today(datetime.UTC)
         related_liaison = liaison
         r = self.client.post(url,
                              dict(from_groups=str(from_group.pk),
@@ -878,7 +878,7 @@ def test_add_outgoing_liaison_unapproved_post_only(self):
         from_group = Group.objects.get(acronym="mars")
         to_group = Group.objects.filter(type="sdo")[0]
         submitter = Person.objects.get(user__username="marschairman")
-        today = date_today(datetime.timezone.utc)
+        today = date_today(datetime.UTC)
         r = self.client.post(url,
                              dict(from_groups=str(from_group.pk),
                                   from_contact=submitter.email_address(),
@@ -1062,7 +1062,7 @@ def test_search(self):
         LiaisonStatementEventFactory(type_id='posted', statement__body="Has recently in its body",statement__from_groups=[GroupFactory(type_id='sdo',acronym='ulm'),])
         # Statement 2
         s2 = LiaisonStatementEventFactory(type_id='posted', statement__body="That word does not occur here", statement__title="Nor does it occur here")
-        s2.time=datetime.datetime(2010, 1, 1, tzinfo=datetime.timezone.utc)
+        s2.time=datetime.datetime(2010, 1, 1, tzinfo=datetime.UTC)
         s2.save()
 
         # test list only, no search filters
diff --git a/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py b/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py
index 8f5db26112..8c467ea156 100644
--- a/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py
+++ b/ietf/meeting/migrations/0016_alter_meeting_country_alter_meeting_time_zone.py
@@ -4,6 +4,7 @@
 
 
 class Migration(migrations.Migration):
+
     dependencies = [
         ("meeting", "0015_alter_meeting_time_zone"),
     ]
diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index de0192769e..f3df23e916 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -149,7 +149,7 @@ def get_00_cutoff(self):
             cutoff_date = importantdate.date
         else:
             cutoff_date = self.date + datetime.timedelta(days=ImportantDateName.objects.get(slug='idcutoff').default_offset_days)
-        cutoff_time = datetime_from_date(cutoff_date, datetime.timezone.utc) + self.idsubmit_cutoff_time_utc
+        cutoff_time = datetime_from_date(cutoff_date, datetime.UTC) + self.idsubmit_cutoff_time_utc
         return cutoff_time
 
     def get_01_cutoff(self):
@@ -161,7 +161,7 @@ def get_01_cutoff(self):
             cutoff_date = importantdate.date
         else:
             cutoff_date = self.date + datetime.timedelta(days=ImportantDateName.objects.get(slug='idcutoff').default_offset_days)
-        cutoff_time = datetime_from_date(cutoff_date, datetime.timezone.utc) + self.idsubmit_cutoff_time_utc
+        cutoff_time = datetime_from_date(cutoff_date, datetime.UTC) + self.idsubmit_cutoff_time_utc
         return cutoff_time
 
     def get_reopen_time(self):
@@ -1172,7 +1172,7 @@ def can_manage_materials(self, user):
         return can_manage_materials(user,self.group)
 
     def is_material_submission_cutoff(self):
-        return date_today(datetime.timezone.utc) > self.meeting.get_submission_correction_date()
+        return date_today(datetime.UTC) > self.meeting.get_submission_correction_date()
     
     def joint_with_groups_acronyms(self):
         return [group.acronym for group in self.joint_with_groups.all()]
diff --git a/ietf/meeting/tests_js.py b/ietf/meeting/tests_js.py
index a184a7c6d0..262b47652c 100644
--- a/ietf/meeting/tests_js.py
+++ b/ietf/meeting/tests_js.py
@@ -1576,7 +1576,7 @@ def test_delete_timeslot_cancel(self):
 
     def do_delete_time_interval_test(self, cancel=False):
         delete_time_local = datetime_from_date(self.meeting.date, self.meeting.tz()).replace(hour=10)
-        delete_time = delete_time_local.astimezone(datetime.timezone.utc)
+        delete_time = delete_time_local.astimezone(datetime.UTC)
         duration = datetime.timedelta(minutes=60)
 
         delete: [TimeSlot] = TimeSlotFactory.create_batch(  # type: ignore[annotation-unchecked]
diff --git a/ietf/meeting/tests_tasks.py b/ietf/meeting/tests_tasks.py
index 0c442c4bf7..a5da00ecbf 100644
--- a/ietf/meeting/tests_tasks.py
+++ b/ietf/meeting/tests_tasks.py
@@ -23,7 +23,7 @@ def test_proceedings_content_refresh_task(self, mock_generate):
         meeting127 = MeetingFactory(type_id="ietf", number="127")  # 24 * 5 + 7
         
         # Times to be returned
-        now_utc = datetime.datetime.now(tz=datetime.timezone.utc)
+        now_utc = datetime.datetime.now(tz=datetime.UTC)
         hour_00_utc = now_utc.replace(hour=0)
         hour_01_utc = now_utc.replace(hour=1)
         hour_07_utc = now_utc.replace(hour=7)
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index f382772485..bd3ab772fc 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -55,9 +55,8 @@
 from ietf.meeting.views import session_draft_list, parse_agenda_filter_params, sessions_post_save, agenda_extract_schedule
 from ietf.meeting.views import get_summary_by_area, get_summary_by_type, get_summary_by_purpose, generate_agenda_data
 from ietf.name.models import SessionStatusName, ImportantDateName, RoleName, ProceedingsMaterialTypeName
-from ietf.utils.decorators import skip_coverage
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
-from ietf.utils.test_runner import TestBlobstoreManager
+from ietf.utils.test_runner import TestBlobstoreManager, disable_coverage
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, unicontent
 from ietf.utils.timezone import date_today, time_now
 
@@ -321,11 +320,11 @@ def test_meeting_agenda(self):
         self.assertContains(r, session.group.parent.acronym.upper())
         self.assertContains(r, slot.location.name)
         self.assertContains(r, "{}-{}".format(
-            slot.time.astimezone(datetime.timezone.utc).strftime("%H%M"),
-            (slot.time + slot.duration).astimezone(datetime.timezone.utc).strftime("%H%M"),
+            slot.time.astimezone(datetime.UTC).strftime("%H%M"),
+            (slot.time + slot.duration).astimezone(datetime.UTC).strftime("%H%M"),
         ))
         self.assertContains(r, "shown in UTC")
-        updated = meeting.updated().astimezone(datetime.timezone.utc).strftime("%Y-%m-%d %H:%M:%S %Z")
+        updated = meeting.updated().astimezone(datetime.UTC).strftime("%Y-%m-%d %H:%M:%S %Z")
         self.assertContains(r, f"Updated {updated}")
 
         # text, invalid updated (none)
@@ -369,8 +368,8 @@ def test_meeting_agenda(self):
         self.assertContains(r, session.group.parent.acronym.upper())
         self.assertContains(r, slot.location.name)
         self.assertContains(r, registration_text)
-        start_time = slot.time.astimezone(datetime.timezone.utc)
-        end_time = slot.end_time().astimezone(datetime.timezone.utc)
+        start_time = slot.time.astimezone(datetime.UTC)
+        end_time = slot.end_time().astimezone(datetime.UTC)
         self.assertContains(r, '"{}","{}","{}"'.format(
             start_time.strftime("%Y-%m-%d"),
             start_time.strftime("%H%M"),
@@ -1037,7 +1036,7 @@ def test_important_dates_ical(self):
 
         updated = meeting.updated()
         self.assertIsNotNone(updated)
-        expected_updated = updated.astimezone(datetime.timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+        expected_updated = updated.astimezone(datetime.UTC).strftime("%Y%m%dT%H%M%SZ")
         self.assertContains(r, f"DTSTAMP:{expected_updated}")
         dtstamps_count = r.content.decode("utf-8").count(f"DTSTAMP:{expected_updated}")
         self.assertEqual(dtstamps_count, meeting.importantdate_set.count())
@@ -1181,8 +1180,8 @@ def test_session_draft_tarfile(self):
                 os.unlink(filename)
 
     @skipIf(skip_pdf_tests, skip_message)
-    @skip_coverage
-    def test_session_draft_pdf(self):
+    @disable_coverage()
+    def test_session_draft_pdf(self):  # pragma: no cover
         session, filenames = self.build_session_setup()
         try:
             url = urlreverse('ietf.meeting.views.session_draft_pdf', kwargs={'num':session.meeting.number,'acronym':session.group.acronym})
@@ -2117,8 +2116,8 @@ def test_editor_time_zone(self):
         # strftime() does not seem to support hours without leading 0, so do this manually
         time_label_string = f'{ts_start.hour:d}:{ts_start.minute:02d} - {ts_end.hour:d}:{ts_end.minute:02d}'
         self.assertIn(time_label_string, time_label.text())
-        self.assertEqual(time_label.attr('data-start'), ts_start.astimezone(datetime.timezone.utc).isoformat())
-        self.assertEqual(time_label.attr('data-end'), ts_end.astimezone(datetime.timezone.utc).isoformat())
+        self.assertEqual(time_label.attr('data-start'), ts_start.astimezone(datetime.UTC).isoformat())
+        self.assertEqual(time_label.attr('data-end'), ts_end.astimezone(datetime.UTC).isoformat())
 
         ts_swap = time_label.find('.swap-timeslot-col')
         origin_label = ts_swap.attr('data-origin-label')
@@ -2129,8 +2128,8 @@ def test_editor_time_zone(self):
 
         timeslot_elt = pq(f'#timeslot{timeslot.pk}')
         self.assertEqual(len(timeslot_elt), 1)
-        self.assertEqual(timeslot_elt.attr('data-start'), ts_start.astimezone(datetime.timezone.utc).isoformat())
-        self.assertEqual(timeslot_elt.attr('data-end'), ts_end.astimezone(datetime.timezone.utc).isoformat())
+        self.assertEqual(timeslot_elt.attr('data-start'), ts_start.astimezone(datetime.UTC).isoformat())
+        self.assertEqual(timeslot_elt.attr('data-end'), ts_end.astimezone(datetime.UTC).isoformat())
 
         timeslot_label = pq(f'#timeslot{timeslot.pk} .time-label')
         self.assertEqual(len(timeslot_label), 1)
@@ -5233,7 +5232,7 @@ def test_upcoming_ical(self):
 
         updated = meeting.updated()
         self.assertIsNotNone(updated)
-        expected_updated = updated.astimezone(datetime.timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+        expected_updated = updated.astimezone(datetime.UTC).strftime("%Y%m%dT%H%M%SZ")
         self.assertContains(r, f"DTSTAMP:{expected_updated}")
 
         # With default cached_updated, 1970-01-01
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 7fa3d21259..fcc9312609 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -153,7 +153,7 @@ def materials(request, num=None):
     begin_date = meeting.get_submission_start_date()
     cut_off_date = meeting.get_submission_cut_off_date()
     cor_cut_off_date = meeting.get_submission_correction_date()
-    today_utc = date_today(datetime.timezone.utc)
+    today_utc = date_today(datetime.UTC)
     old = timezone.now() - datetime.timedelta(days=1)
     if settings.SERVER_MODE != 'production' and '_testoverride' in request.GET:
         pass
@@ -1921,7 +1921,7 @@ def slides_field(item):
 
     write_row(headings)
 
-    tz = datetime.timezone.utc if utc else schedule.meeting.tz()
+    tz = datetime.UTC if utc else schedule.meeting.tz()
     for item in filtered_assignments:
         row = []
         row.append(item.timeslot.time.astimezone(tz).strftime("%Y-%m-%d"))
@@ -2814,7 +2814,7 @@ def session_attendance(request, session_id, num):
             raise Http404("Bluesheets not found")
 
     cor_cut_off_date = session.meeting.get_submission_correction_date()
-    today_utc = date_today(datetime.timezone.utc)
+    today_utc = date_today(datetime.UTC)
     was_there = False
     can_add = False
     if request.user.is_authenticated:
diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index cc2e0826d3..dcdb9ef836 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -2930,7 +2930,7 @@ def test_decorate_volunteers_with_qualifications(self):
                     elig_date.year - 3,
                     elig_date.month,
                     28 if elig_date.month == 2 and elig_date.day == 29 else elig_date.day,
-                    tzinfo=datetime.timezone.utc,
+                    tzinfo=datetime.UTC,
                 )
             )
         nomcom.volunteer_set.create(person=author_person)
diff --git a/ietf/nomcom/views.py b/ietf/nomcom/views.py
index c04e13f92b..3f90be5253 100644
--- a/ietf/nomcom/views.py
+++ b/ietf/nomcom/views.py
@@ -981,7 +981,7 @@ def view_feedback_topic(request, year, topic_id):
     reviewer = request.user.person
 
     last_seen = TopicFeedbackLastSeen.objects.filter(reviewer=reviewer,topic=topic).first()
-    last_seen_time = (last_seen and last_seen.time) or datetime.datetime(year=1, month=1, day=1, tzinfo=datetime.timezone.utc)
+    last_seen_time = (last_seen and last_seen.time) or datetime.datetime(year=1, month=1, day=1, tzinfo=datetime.UTC)
     if last_seen:
         last_seen.save()
     else:
@@ -1044,7 +1044,7 @@ def view_feedback_nominee(request, year, nominee_id):
                                   })
 
     last_seen = FeedbackLastSeen.objects.filter(reviewer=reviewer,nominee=nominee).first()
-    last_seen_time = (last_seen and last_seen.time) or datetime.datetime(year=1, month=1, day=1, tzinfo=datetime.timezone.utc)
+    last_seen_time = (last_seen and last_seen.time) or datetime.datetime(year=1, month=1, day=1, tzinfo=datetime.UTC)
     if last_seen:
         last_seen.save()
     else:
diff --git a/ietf/settings.py b/ietf/settings.py
index 3af01d76e6..753508dc99 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -14,19 +14,27 @@
 from hashlib import sha384
 from typing import Any, Dict, List, Tuple # pyflakes:ignore
 
+# DeprecationWarnings are suppressed by default, enable them
 warnings.simplefilter("always", DeprecationWarning)
-warnings.filterwarnings("ignore", message="pkg_resources is deprecated as an API")
-warnings.filterwarnings("ignore", "Log out via GET requests is deprecated")  # happens in oidc_provider
-warnings.filterwarnings("ignore", module="tastypie", message="The django.utils.datetime_safe module is deprecated.")
-warnings.filterwarnings("ignore", module="oidc_provider", message="The django.utils.timezone.utc alias is deprecated.")
+
+# Warnings that must be resolved for Django 5.x
+warnings.filterwarnings("ignore", "Log out via GET requests is deprecated")  # caused by oidc_provider
+warnings.filterwarnings("ignore", message="The django.utils.timezone.utc alias is deprecated.", module="oidc_provider")
+warnings.filterwarnings("ignore", message="The django.utils.datetime_safe module is deprecated.", module="tastypie")
 warnings.filterwarnings("ignore", message="The USE_DEPRECATED_PYTZ setting,")  # https://github.com/ietf-tools/datatracker/issues/5635
 warnings.filterwarnings("ignore", message="The USE_L10N setting is deprecated.")  # https://github.com/ietf-tools/datatracker/issues/5648
 warnings.filterwarnings("ignore", message="django.contrib.auth.hashers.CryptPasswordHasher is deprecated.")  # https://github.com/ietf-tools/datatracker/issues/5663
-warnings.filterwarnings("ignore", message="'urllib3\\[secure\\]' extra is deprecated")
-warnings.filterwarnings("ignore", message="The logout\\(\\) view is superseded by")
+
+# Other DeprecationWarnings
+warnings.filterwarnings("ignore", message="pkg_resources is deprecated as an API", module="pyang.plugin")
 warnings.filterwarnings("ignore", message="Report.file_reporters will no longer be available in Coverage.py 4.2", module="coverage.report")
-warnings.filterwarnings("ignore", message="Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated", module="bleach")
-warnings.filterwarnings("ignore", message="HTTPResponse.getheader\\(\\) is deprecated", module='selenium.webdriver')
+warnings.filterwarnings("ignore", message="currentThread\\(\\) is deprecated", module="coverage.pytracer")
+warnings.filterwarnings("ignore", message="co_lnotab is deprecated", module="coverage.parser")
+warnings.filterwarnings("ignore", message="datetime.datetime.utcnow\\(\\) is deprecated", module="botocore.auth")
+warnings.filterwarnings("ignore", message="datetime.datetime.utcnow\\(\\) is deprecated", module="oic.utils.time_util")
+warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="oic.utils.time_util")
+warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="pytz.tzinfo")
+
 
 base_path = pathlib.Path(__file__).resolve().parent
 BASE_DIR = str(base_path)
@@ -447,23 +455,24 @@ def skip_unreadable_post(record):
     "ietf.middleware.SMTPExceptionMiddleware",
     "ietf.middleware.Utf8ExceptionMiddleware",
     "ietf.middleware.redirect_trailing_period_middleware",
-    "django_referrer_policy.middleware.ReferrerPolicyMiddleware",
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "django.middleware.security.SecurityMiddleware",
-    #"csp.middleware.CSPMiddleware",
     "ietf.middleware.unicode_nfkc_normalization_middleware",
     "ietf.middleware.is_authenticated_header_middleware",
 ]
 
 ROOT_URLCONF = 'ietf.urls'
 
-DJANGO_VITE_ASSETS_PATH = os.path.join(BASE_DIR, 'static/dist-neue')
+# Configure django_vite
+DJANGO_VITE: dict = {"default": {}}
 if DEBUG:
-    DJANGO_VITE_MANIFEST_PATH = os.path.join(BASE_DIR, 'static/dist-neue/manifest.json')
+    DJANGO_VITE["default"]["manifest_path"] = os.path.join(
+        BASE_DIR, 'static/dist-neue/manifest.json'
+    )
 
 # Additional locations of static files (in addition to each app's static/ dir)
 STATICFILES_DIRS = (
-    DJANGO_VITE_ASSETS_PATH,
+    os.path.join(BASE_DIR, "static/dist-neue"),  # for django_vite
     os.path.join(BASE_DIR, 'static/dist'),
     os.path.join(BASE_DIR, 'secr/static/dist'),
 )
@@ -567,8 +576,6 @@ def skip_unreadable_post(record):
 CORS_ALLOW_METHODS = ( 'GET', 'OPTIONS', )
 CORS_URLS_REGEX = r'^(/api/.*|.*\.json|.*/json/?)$'
 
-# Setting for django_referrer_policy.middleware.ReferrerPolicyMiddleware
-REFERRER_POLICY = 'strict-origin-when-cross-origin'
 
 # django.middleware.security.SecurityMiddleware 
 SECURE_BROWSER_XSS_FILTER       = True
@@ -581,6 +588,7 @@ def skip_unreadable_post(record):
 #SECURE_SSL_REDIRECT             = True
 # Relax the COOP policy to allow Meetecho authentication pop-up
 SECURE_CROSS_ORIGIN_OPENER_POLICY = "unsafe-none"
+SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin"
 
 # Override this in your settings_local with the IP addresses relevant for you:
 INTERNAL_IPS = (
@@ -666,11 +674,6 @@ def skip_unreadable_post(record):
 IDNITS3_BASE_URL = "https://author-tools.ietf.org/idnits3/results"
 IDNITS_SERVICE_URL = "https://author-tools.ietf.org/idnits"
 
-# Content security policy configuration (django-csp)
-# (In current production, the Content-Security-Policy header is completely set by nginx configuration, but
-#  we try to keep this in sync to avoid confusion)
-CSP_DEFAULT_SRC = ("'self'", "'unsafe-inline'", f"data: {IDTRACKER_BASE_URL} http://ietf.org/ https://www.ietf.org/ https://analytics.ietf.org/ https://static.ietf.org")
-
 # The name of the method to use to invoke the test suite
 TEST_RUNNER = 'ietf.utils.test_runner.IetfTestRunner'
 
@@ -709,6 +712,7 @@ def skip_unreadable_post(record):
     "ietf/utils/patch.py",
     "ietf/utils/test_data.py",
     "ietf/utils/jstest.py",
+    "ietf/utils/coverage.py",
 ]
 
 # These are code line regex patterns
@@ -738,8 +742,8 @@ def skip_unreadable_post(record):
 
 TEST_CODE_COVERAGE_CHECKER = None
 if SERVER_MODE != 'production':
-    import coverage
-    TEST_CODE_COVERAGE_CHECKER = coverage.Coverage(source=[ BASE_DIR ], cover_pylib=False, omit=TEST_CODE_COVERAGE_EXCLUDE_FILES)
+    from ietf.utils.coverage import CoverageManager
+    TEST_CODE_COVERAGE_CHECKER = CoverageManager()
 
 TEST_CODE_COVERAGE_REPORT_PATH = "coverage/"
 TEST_CODE_COVERAGE_REPORT_URL = os.path.join(STATIC_URL, TEST_CODE_COVERAGE_REPORT_PATH, "index.html")
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 9a42e8b99d..6479069db0 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -14,7 +14,7 @@
 import shutil
 import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import TEST_CODE_COVERAGE_CHECKER, ORIG_AUTH_PASSWORD_VALIDATORS
+from ietf.settings import ORIG_AUTH_PASSWORD_VALIDATORS
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -52,10 +52,9 @@ def __getitem__(self, item):
 BLOBDB_DATABASE = "default"
 DATABASE_ROUTERS = []  # type: ignore
 
-if TEST_CODE_COVERAGE_CHECKER and not TEST_CODE_COVERAGE_CHECKER._started: # pyflakes:ignore
+if TEST_CODE_COVERAGE_CHECKER: # pyflakes:ignore
     TEST_CODE_COVERAGE_CHECKER.start()                          # pyflakes:ignore
 
-
 def tempdir_with_cleanup(**kwargs):
     """Utility to create a temporary dir and arrange cleanup"""
     _dir = tempfile.mkdtemp(**kwargs)
diff --git a/ietf/submit/checkers.py b/ietf/submit/checkers.py
index 89908748a7..e02b686576 100644
--- a/ietf/submit/checkers.py
+++ b/ietf/submit/checkers.py
@@ -18,7 +18,7 @@
 from ietf.utils import tool_version
 from ietf.utils.log import log, assertion
 from ietf.utils.pipe import pipe
-from ietf.utils.test_runner import set_coverage_checking
+from ietf.utils.test_runner import disable_coverage
 
 class DraftSubmissionChecker(object):
     name = ""
@@ -247,34 +247,33 @@ def check_file_txt(self, path):
                 )
 
                 # yanglint
-                set_coverage_checking(False) # we can't count the following as it may or may not be run, depending on setup
-                if settings.SUBMIT_YANGLINT_COMMAND and os.path.exists(settings.YANGLINT_BINARY):
-                    cmd_template = settings.SUBMIT_YANGLINT_COMMAND
-                    command = [ w for w in cmd_template.split() if not '=' in w ][0]
-                    cmd = cmd_template.format(model=path, rfclib=settings.SUBMIT_YANG_RFC_MODEL_DIR, tmplib=workdir,
-                        draftlib=settings.SUBMIT_YANG_DRAFT_MODEL_DIR, ianalib=settings.SUBMIT_YANG_IANA_MODEL_DIR,
-                        cataloglib=settings.SUBMIT_YANG_CATALOG_MODEL_DIR, )
-                    code, out, err = pipe(cmd)
-                    out = out.decode('utf-8')
-                    err = err.decode('utf-8')
-                    if code > 0 or len(err.strip()) > 0:
-                        err_lines = err.splitlines()
-                        for line in err_lines:
-                            if line.strip():
-                                try:
-                                    if 'err : ' in line:
-                                        errors += 1
-                                    if 'warn: ' in line:
-                                        warnings += 1
-                                except ValueError:
-                                    pass
-                    #passed = passed and code == 0 # For the submission tool.  Yang checks always pass
-                    message += "{version}: {template}:\n{output}\n".format(
-                        version=tool_version[command],
-                        template=cmd_template,
-                        output=out + "No validation errors\n" if (code == 0 and len(err) == 0) else out + err,
-                    )
-                set_coverage_checking(True)
+                with disable_coverage():  # pragma: no cover
+                    if settings.SUBMIT_YANGLINT_COMMAND and os.path.exists(settings.YANGLINT_BINARY):
+                        cmd_template = settings.SUBMIT_YANGLINT_COMMAND
+                        command = [ w for w in cmd_template.split() if not '=' in w ][0]
+                        cmd = cmd_template.format(model=path, rfclib=settings.SUBMIT_YANG_RFC_MODEL_DIR, tmplib=workdir,
+                            draftlib=settings.SUBMIT_YANG_DRAFT_MODEL_DIR, ianalib=settings.SUBMIT_YANG_IANA_MODEL_DIR,
+                            cataloglib=settings.SUBMIT_YANG_CATALOG_MODEL_DIR, )
+                        code, out, err = pipe(cmd)
+                        out = out.decode('utf-8')
+                        err = err.decode('utf-8')
+                        if code > 0 or len(err.strip()) > 0:
+                            err_lines = err.splitlines()
+                            for line in err_lines:
+                                if line.strip():
+                                    try:
+                                        if 'err : ' in line:
+                                            errors += 1
+                                        if 'warn: ' in line:
+                                            warnings += 1
+                                    except ValueError:
+                                        pass
+                        #passed = passed and code == 0 # For the submission tool.  Yang checks always pass
+                        message += "{version}: {template}:\n{output}\n".format(
+                            version=tool_version[command],
+                            template=cmd_template,
+                            output=out + "No validation errors\n" if (code == 0 and len(err) == 0) else out + err,
+                        )
             else:
                 errors += 1
                 message += "No such file: %s\nPossible mismatch between extracted xym file name and returned module name?\n" % (path)
diff --git a/ietf/sync/iana.py b/ietf/sync/iana.py
index f46fe407d4..0d40c5337e 100644
--- a/ietf/sync/iana.py
+++ b/ietf/sync/iana.py
@@ -66,8 +66,8 @@ def update_rfc_log_from_protocol_page(rfc_names, rfc_must_published_later_than):
     
 
 def fetch_changes_json(url, start, end):
-    url += "?start=%s&end=%s" % (urlquote(start.astimezone(datetime.timezone.utc).strftime("%Y-%m-%d %H:%M:%S")),
-                                 urlquote(end.astimezone(datetime.timezone.utc).strftime("%Y-%m-%d %H:%M:%S")))
+    url += "?start=%s&end=%s" % (urlquote(start.astimezone(datetime.UTC).strftime("%Y-%m-%d %H:%M:%S")),
+                                 urlquote(end.astimezone(datetime.UTC).strftime("%Y-%m-%d %H:%M:%S")))
     # HTTP basic auth
     username = "ietfsync"
     password = settings.IANA_SYNC_PASSWORD
@@ -161,7 +161,7 @@ def update_history_with_changes(changes, send_email=True):
 
     for c in changes:
         docname = c['doc']
-        timestamp = datetime.datetime.strptime(c["time"], "%Y-%m-%d %H:%M:%S",).replace(tzinfo=datetime.timezone.utc)
+        timestamp = datetime.datetime.strptime(c["time"], "%Y-%m-%d %H:%M:%S",).replace(tzinfo=datetime.UTC)
 
         if c['type'] in ("iana_state", "iana_review"):
             if c['type'] == "iana_state":
@@ -247,7 +247,7 @@ def parse_review_email(text):
         review_time = parsedate_to_datetime(msg["Date"])
         # parsedate_to_datetime() may return a naive timezone - treat as UTC
         if review_time.tzinfo is None or review_time.tzinfo.utcoffset(review_time) is None:
-            review_time = review_time.replace(tzinfo=datetime.timezone.utc)
+            review_time = review_time.replace(tzinfo=datetime.UTC)
 
     # by
     by = None
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 18ab4fe66e..e4174d3729 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -152,7 +152,7 @@ def iana_protocols_update_task():
         2012, 
         11, 
         26, 
-        tzinfo=datetime.timezone.utc,
+        tzinfo=datetime.UTC,
     )
 
     try:
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 182b6e24c4..3432f6214a 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -206,7 +206,7 @@ def test_iana_review_mail(self):
                         doc_name, review_time, by, comment = iana.parse_review_email(msg.encode('utf-8'))
     
                         self.assertEqual(doc_name, draft.name)
-                        self.assertEqual(review_time, datetime.datetime(2012, 5, 10, 12, 0, rtime, tzinfo=datetime.timezone.utc))
+                        self.assertEqual(review_time, datetime.datetime(2012, 5, 10, 12, 0, rtime, tzinfo=datetime.UTC))
                         self.assertEqual(by, Person.objects.get(user__username="iana"))
                         self.assertIn("there are no IANA Actions", comment.replace("\n", ""))
     
@@ -240,7 +240,7 @@ def test_ingest_review_email(self, mock_parse_review_email, mock_add_review_comm
 
         args = (
             "doc-name",
-            datetime.datetime.now(tz=datetime.timezone.utc),
+            datetime.datetime.now(tz=datetime.UTC),
             PersonFactory(),
             "yadda yadda yadda",
         )
@@ -1121,7 +1121,7 @@ def test_iana_protocols_update_task(
         )
         self.assertEqual(
             published_later_than, 
-            {datetime.datetime(2012,11,26,tzinfo=datetime.timezone.utc)}
+            {datetime.datetime(2012,11,26,tzinfo=datetime.UTC)}
         )
 
         # try with an exception
diff --git a/ietf/utils/test_smtpserver.py b/ietf/utils/aiosmtpd.py
similarity index 72%
rename from ietf/utils/test_smtpserver.py
rename to ietf/utils/aiosmtpd.py
index 40da758d66..3e4cd65dd9 100644
--- a/ietf/utils/test_smtpserver.py
+++ b/ietf/utils/aiosmtpd.py
@@ -1,10 +1,14 @@
 # Copyright The IETF Trust 2014-2025, All Rights Reserved
-# -*- coding: utf-8 -*-
+"""aiosmtpd-related utilities
 
+These are for testing / dev use. If you're using this for production code, think very
+hard about the choices you're making...
+"""
+from aiosmtpd import handlers
 from aiosmtpd.controller import Controller
 from aiosmtpd.smtp import SMTP
 from email.utils import parseaddr
-from typing import Optional
+from typing import Optional, TextIO
 
 
 class SMTPTestHandler:
@@ -54,3 +58,16 @@ def start(self):
 
     def stop(self):
         self.controller.stop()
+
+
+class DevDebuggingHandler(handlers.Debugging):
+    """Debugging handler for use in dev ONLY"""
+    def __init__(self, stream: Optional[TextIO] = None):
+        # Allow longer lines than the 1001 that RFC 5321 requires. As of 2025-04-16 the
+        # datatracker emits some non-compliant messages.
+        # See https://aiosmtpd.aio-libs.org/en/latest/smtp.html
+        # Doing this in a handler class is a huge hack. Tests all pass with this set
+        # to 4000, but make the limit longer for dev just in case.
+        SMTP.line_length_limit = 10000
+        super().__init__(stream)
+        
diff --git a/ietf/utils/coverage.py b/ietf/utils/coverage.py
new file mode 100644
index 0000000000..bd205ce586
--- /dev/null
+++ b/ietf/utils/coverage.py
@@ -0,0 +1,90 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from coverage import Coverage, CoverageData, FileReporter
+from coverage.control import override_config as override_coverage_config
+from coverage.results import Numbers
+from coverage.report_core import get_analysis_to_report
+from coverage.results import Analysis
+from django.conf import settings
+
+
+class CoverageManager:
+    checker: Coverage | None = None
+    started = False
+
+    def start(self):
+        if settings.SERVER_MODE != "production" and not self.started:
+            self.checker = Coverage(
+                source=[settings.BASE_DIR],
+                cover_pylib=False,
+                omit=settings.TEST_CODE_COVERAGE_EXCLUDE_FILES,
+            )
+            for exclude_regex in getattr(
+                settings,
+                "TEST_CODE_COVERAGE_EXCLUDE_LINES",
+                [],
+            ):
+                self.checker.exclude(exclude_regex)
+            self.checker.start()
+            self.started = True
+
+    def stop(self):
+        if self.checker is not None:
+            self.checker.stop()
+
+    def save(self):
+        if self.checker is not None:
+            self.checker.save()
+
+    def report(self, include: list[str] | None = None):
+        if self.checker is None:
+            return None
+        reporter = CustomDictReporter()
+        with override_coverage_config(
+            self.checker,
+            report_include=include,
+        ):
+            return reporter.report(self.checker)
+
+
+class CustomDictReporter:  # pragma: no cover
+    total = Numbers()
+
+    def report(self, coverage):
+        coverage_data = coverage.get_data()
+        coverage_data.set_query_contexts(None)
+        measured_files = {}
+        for file_reporter, analysis in get_analysis_to_report(coverage, None):
+            measured_files[file_reporter.relative_filename()] = self.report_one_file(
+                coverage_data,
+                analysis,
+                file_reporter,
+            )
+        tot_numer, tot_denom = self.total.ratio_covered
+        return {
+            "coverage": 1 if tot_denom == 0 else tot_numer / tot_denom,
+            "covered": measured_files,
+            "format": 5,
+        }
+
+    def report_one_file(
+        self,
+        coverage_data: CoverageData,
+        analysis: Analysis,
+        file_reporter: FileReporter,
+    ):
+        """Extract the relevant report data for a single file."""
+        nums = analysis.numbers
+        self.total += nums
+        n_statements = nums.n_statements
+        numer, denom = nums.ratio_covered
+        fraction_covered = 1 if denom == 0 else numer / denom
+        missing_line_nums = sorted(analysis.missing)
+        # Extract missing lines from source files
+        source_lines = file_reporter.source().splitlines()
+        missing_lines = [source_lines[num - 1] for num in missing_line_nums]
+        return (
+            n_statements,
+            fraction_covered,
+            missing_line_nums,
+            missing_lines,
+        )
diff --git a/ietf/utils/decorators.py b/ietf/utils/decorators.py
index 5e94dda91d..b50e0e7f96 100644
--- a/ietf/utils/decorators.py
+++ b/ietf/utils/decorators.py
@@ -15,21 +15,9 @@
 
 import debug                            # pyflakes:ignore
 
-from ietf.utils.test_runner import set_coverage_checking
 from ietf.person.models import Person, PersonalApiKey, PersonApiKeyEvent
 from ietf.utils import log
 
-def skip_coverage(f):
-    @wraps(f)
-    def _wrapper(*args, **kwargs):
-        if settings.TEST_CODE_COVERAGE_CHECKER:
-            set_coverage_checking(False)
-            result = f(*args, **kwargs)
-            set_coverage_checking(True)
-            return result
-        else:
-            return  f(*args, **kwargs)
-    return _wrapper
 
 def person_required(f):
     @wraps(f)
diff --git a/ietf/utils/jstest.py b/ietf/utils/jstest.py
index 215d78d65f..cf242fc4eb 100644
--- a/ietf/utils/jstest.py
+++ b/ietf/utils/jstest.py
@@ -3,6 +3,8 @@
 
 import os
 
+from django.conf import settings
+from django.contrib.staticfiles.testing import StaticLiveServerTestCase
 from django.urls import reverse as urlreverse
 from unittest import skipIf
 
@@ -21,7 +23,11 @@
 
 
 from ietf.utils.pipe import pipe
-from ietf.utils.test_runner import IetfLiveServerTestCase
+from ietf.utils.test_runner import (
+    set_template_coverage,
+    set_url_coverage,
+    load_and_run_fixtures,
+)
 
 executable_name = 'geckodriver'
 code, out, err = pipe('{} --version'.format(executable_name))
@@ -49,17 +55,44 @@ def ifSeleniumEnabled(func):
     return skipIf(skip_selenium, skip_message)(func)
 
 
-class IetfSeleniumTestCase(IetfLiveServerTestCase):
+class IetfSeleniumTestCase(StaticLiveServerTestCase):  # pragma: no cover
     login_view = 'ietf.ietfauth.views.login'
 
+    @classmethod
+    def setUpClass(cls):
+        set_template_coverage(False)
+        set_url_coverage(False)
+        super().setUpClass()
+
+    @classmethod
+    def tearDownClass(cls):
+        super().tearDownClass()
+        set_template_coverage(True)
+        set_url_coverage(True)
+
     def setUp(self):
-        super(IetfSeleniumTestCase, self).setUp()
+        super().setUp()
+        # LiveServerTestCase uses TransactionTestCase which seems to
+        # somehow interfere with the fixture loading process in
+        # IetfTestRunner when running multiple tests (the first test
+        # is fine, in the next ones the fixtures have been wiped) -
+        # this is no doubt solvable somehow, but until then we simply
+        # recreate them here
+        from ietf.person.models import Person
+        if not Person.objects.exists():
+            load_and_run_fixtures(verbosity=0)
+        self.replaced_settings = dict()
+        if hasattr(settings, 'IDTRACKER_BASE_URL'):
+            self.replaced_settings['IDTRACKER_BASE_URL'] = settings.IDTRACKER_BASE_URL
+            settings.IDTRACKER_BASE_URL = self.live_server_url
         self.driver = start_web_driver()
         self.driver.set_window_size(1024,768)
     
     def tearDown(self):
-        super(IetfSeleniumTestCase, self).tearDown()
         self.driver.close()
+        for k, v in self.replaced_settings.items():
+            setattr(settings, k, v)
+        super().tearDown()
 
     def absreverse(self,*args,**kwargs):
         return '%s%s'%(self.live_server_url, urlreverse(*args, **kwargs))
diff --git a/ietf/utils/meetecho.py b/ietf/utils/meetecho.py
index 0dbf75736a..7654f67cd1 100644
--- a/ietf/utils/meetecho.py
+++ b/ietf/utils/meetecho.py
@@ -27,7 +27,7 @@
 
 
 class MeetechoAPI:
-    timezone = datetime.timezone.utc
+    timezone = datetime.UTC
 
     def __init__(
         self, api_base: str, client_id: str, client_secret: str, request_timeout=3.01
@@ -504,7 +504,7 @@ def _should_send_update(self, session):
         if self.slides_notify_time < datetime.timedelta(0):
             return True  # < 0 means "always" for a scheduled session
         else:
-            now = datetime.datetime.now(tz=datetime.timezone.utc)
+            now = datetime.datetime.now(tz=datetime.UTC)
             return (timeslot.time - self.slides_notify_time) < now < (timeslot.end_time() + self.slides_notify_time)
 
     def add(self, session: "Session", slides: "Document", order: int):
diff --git a/ietf/utils/serialize.py b/ietf/utils/serialize.py
index 342d211cf5..77f97942cb 100644
--- a/ietf/utils/serialize.py
+++ b/ietf/utils/serialize.py
@@ -16,7 +16,7 @@ def object_as_shallow_dict(obj):
         if isinstance(f, models.ManyToManyField):
             v = list(v.values_list("pk", flat=True))
         elif isinstance(f, models.DateTimeField):
-            v = v.astimezone(datetime.timezone.utc).isoformat()
+            v = v.astimezone(datetime.UTC).isoformat()
         elif isinstance(f, models.DateField):
             v = v.strftime('%Y-%m-%d')
 
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index a9b2e5d572..1a3d4e5c3d 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -48,6 +48,8 @@
 import subprocess
 import tempfile
 import copy
+from contextlib import contextmanager
+
 import boto3
 import botocore.config
 import factory.random
@@ -57,10 +59,6 @@
 from typing import Callable, Optional
 from urllib.parse import urlencode
 
-from coverage.report import Reporter
-from coverage.results import Numbers
-from coverage.misc import NotPython
-
 import django
 from django.conf import settings
 from django.contrib.staticfiles.testing import StaticLiveServerTestCase
@@ -84,7 +82,7 @@
 import ietf
 import ietf.utils.mail
 from ietf.utils.management.commands import pyflakes
-from ietf.utils.test_smtpserver import SMTPTestServerDriver
+from ietf.utils.aiosmtpd import SMTPTestServerDriver
 from ietf.utils.test_utils import TestCase
 
 from mypy_boto3_s3.service_resource import Bucket
@@ -96,11 +94,11 @@
 old_destroy: Optional[Callable] = None
 old_create: Optional[Callable] = None
 
-template_coverage_collection = None
-code_coverage_collection = None
-url_coverage_collection = None
+template_coverage_collection = False
+url_coverage_collection = False
 validation_settings = {"validate_html": None, "validate_html_harder": None, "show_logging": False}
 
+
 def start_vnu_server(port=8888):
     "Start a vnu validation server on the indicated port"
     vnu = subprocess.Popen(
@@ -463,50 +461,29 @@ def save_test_results(failures, test_labels):
             tfile.write("%s OK\n" % (timestr, ))
     tfile.close()
 
-def set_coverage_checking(flag=True):
+
+def set_template_coverage(flag):
     global template_coverage_collection
-    global code_coverage_collection
+    orig = template_coverage_collection
+    template_coverage_collection = flag
+    return orig
+
+
+def set_url_coverage(flag):
     global url_coverage_collection
-    if settings.SERVER_MODE == 'test':
-        if flag:
-            settings.TEST_CODE_COVERAGE_CHECKER.collector.resume()
-            template_coverage_collection = True
-            code_coverage_collection = True
-            url_coverage_collection = True
-        else:
-            settings.TEST_CODE_COVERAGE_CHECKER.collector.pause()
-            template_coverage_collection = False
-            code_coverage_collection = False
-            url_coverage_collection = False
-
-class CoverageReporter(Reporter):
-    def report(self):
-        self.find_file_reporters(None)
-
-        total = Numbers()
-        result = {"coverage": 0.0, "covered": {}, "format": 5, }
-        for fr in self.file_reporters:
-            try:
-                analysis = self.coverage._analyze(fr)
-                nums = analysis.numbers
-                missing_nums = sorted(analysis.missing)
-                with io.open(analysis.filename, encoding='utf-8') as file:
-                    lines = file.read().splitlines()
-                missing_lines = [ lines[l-1] for l in missing_nums ]
-                result["covered"][fr.relative_filename()] = (nums.n_statements, nums.pc_covered/100.0, missing_nums, missing_lines)
-                total += nums
-            except KeyboardInterrupt:                   # pragma: not covered
-                raise
-            except Exception:
-                report_it = not self.config.ignore_errors
-                if report_it:
-                    typ, msg = sys.exc_info()[:2]
-                    if typ is NotPython and not fr.should_be_python():
-                        report_it = False
-                if report_it:
-                    raise
-        result["coverage"] = total.pc_covered/100.0
-        return result
+    orig = url_coverage_collection
+    url_coverage_collection = flag
+    return orig
+
+
+@contextmanager
+def disable_coverage():
+    """Context manager/decorator that disables template/url coverage"""
+    orig_template = set_template_coverage(False)
+    orig_url = set_url_coverage(False)
+    yield
+    set_template_coverage(orig_template)
+    set_url_coverage(orig_url)
 
 
 class CoverageTest(unittest.TestCase):
@@ -594,23 +571,24 @@ def ignore_pattern(regex, pattern):
             self.skipTest("Coverage switched off with --skip-coverage")
 
     def code_coverage_test(self):
-        if self.runner.check_coverage:
-            include = [ os.path.join(path, '*') for path in self.runner.test_paths ]
-            checker = self.runner.code_coverage_checker
-            checker.stop()
+        if (
+            self.runner.check_coverage
+            and settings.TEST_CODE_COVERAGE_CHECKER is not None
+        ):
+            coverage_manager = settings.TEST_CODE_COVERAGE_CHECKER
+            coverage_manager.stop()
             # Save to the .coverage file
-            checker.save()
+            coverage_manager.save()
             # Apply the configured and requested omit and include data
-            checker.config.from_args(ignore_errors=None, omit=settings.TEST_CODE_COVERAGE_EXCLUDE_FILES,
-                include=include, file=None)
-            for pattern in settings.TEST_CODE_COVERAGE_EXCLUDE_LINES:
-                checker.exclude(pattern)
             # Maybe output an HTML report
             if self.runner.run_full_test_suite and self.runner.html_report:
-                checker.html_report(directory=settings.TEST_CODE_COVERAGE_REPORT_DIR)
-            # In any case, build a dictionary with per-file data for this run
-            reporter = CoverageReporter(checker, checker.config)
-            self.runner.coverage_data["code"] = reporter.report()
+                coverage_manager.checker.html_report(
+                    directory=settings.TEST_CODE_COVERAGE_REPORT_DIR
+                )
+            # Generate the output report data
+            self.runner.coverage_data["code"] = coverage_manager.report(
+                include=[str(pathlib.Path(p) / "*") for p in self.runner.test_paths]
+            )
             self.report_test_result("code")
         else:
             self.skipTest("Coverage switched off with --skip-coverage")
@@ -824,23 +802,12 @@ def setup_test_environment(self, **kwargs):
                     "covered": {},
                     "format": 1,
                 },
-                "migration": {
-                    "present": {},
-                    "format": 3,
-                }
             }
 
             settings.TEMPLATES[0]['OPTIONS']['loaders'] = ('ietf.utils.test_runner.TemplateCoverageLoader',) + settings.TEMPLATES[0]['OPTIONS']['loaders']
 
             settings.MIDDLEWARE = ('ietf.utils.test_runner.record_urls_middleware',) + tuple(settings.MIDDLEWARE)
 
-            self.code_coverage_checker = settings.TEST_CODE_COVERAGE_CHECKER
-            if not self.code_coverage_checker._started:
-                sys.stderr.write(" **  Warning: In %s: Expected the coverage checker to have\n"
-                                 "       been started already, but it wasn't. Doing so now.  Coverage numbers\n"
-                                 "       will be off, though.\n" % __name__)
-                self.code_coverage_checker.start()
-
         if settings.SITE_ID != 1:
             print("     Changing SITE_ID to '1' during testing.")
             settings.SITE_ID = 1
@@ -1140,9 +1107,8 @@ def _extra_tests(self):
                 ),
             ]
         if self.check_coverage:
-            global template_coverage_collection, code_coverage_collection, url_coverage_collection
+            global template_coverage_collection, url_coverage_collection
             template_coverage_collection = True
-            code_coverage_collection = True
             url_coverage_collection = True
             tests += [
                 PyFlakesTestCase(test_runner=self, methodName='pyflakes_test'),
@@ -1226,37 +1192,6 @@ def run_tests(self, test_labels, extra_tests=None, **kwargs):
 
         return failures
 
-class IetfLiveServerTestCase(StaticLiveServerTestCase):
-    @classmethod
-    def setUpClass(cls):
-        set_coverage_checking(False)
-        super(IetfLiveServerTestCase, cls).setUpClass()
-
-    def setUp(self):
-        super(IetfLiveServerTestCase, self).setUp()
-        # LiveServerTestCase uses TransactionTestCase which seems to
-        # somehow interfere with the fixture loading process in
-        # IetfTestRunner when running multiple tests (the first test
-        # is fine, in the next ones the fixtures have been wiped) -
-        # this is no doubt solvable somehow, but until then we simply
-        # recreate them here
-        from ietf.person.models import Person
-        if not Person.objects.exists():
-            load_and_run_fixtures(verbosity=0)
-        self.replaced_settings = dict()
-        if hasattr(settings, 'IDTRACKER_BASE_URL'):
-            self.replaced_settings['IDTRACKER_BASE_URL'] = settings.IDTRACKER_BASE_URL
-            settings.IDTRACKER_BASE_URL = self.live_server_url
-
-    @classmethod
-    def tearDownClass(cls):
-        super(IetfLiveServerTestCase, cls).tearDownClass()
-        set_coverage_checking(True)
-
-    def tearDown(self):
-        for k, v in self.replaced_settings.items():
-            setattr(settings, k, v)
-        super().tearDown()
 
 class TestBlobstoreManager():
     # N.B. buckets and blobstore are intentional Class-level attributes
@@ -1267,7 +1202,11 @@ class TestBlobstoreManager():
         aws_access_key_id="minio_root",
         aws_secret_access_key="minio_pass",
         aws_session_token=None,
-        config = botocore.config.Config(signature_version="s3v4"),
+        config = botocore.config.Config(
+            request_checksum_calculation="when_required",
+            response_checksum_validation="when_required",
+            signature_version="s3v4",
+        ),
         #config=botocore.config.Config(signature_version=botocore.UNSIGNED),
         verify=False
     )
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 01433888fe..3288309095 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -54,7 +54,11 @@
     decode_header_value,
     show_that_mail_was_sent,
 )
-from ietf.utils.test_runner import get_template_paths, set_coverage_checking
+from ietf.utils.test_runner import (
+    get_template_paths,
+    set_template_coverage,
+    set_url_coverage,
+)
 from ietf.utils.test_utils import TestCase, unicontent
 from ietf.utils.text import parse_unicode
 from ietf.utils.timezone import timezone_not_near_midnight
@@ -311,14 +315,15 @@ def qualified(name):
 
     return list(callbacks)
 
-class TemplateChecksTestCase(TestCase):
+class TemplateChecksTestCase(TestCase):  # pragma: no cover
 
     paths = []                          # type: List[str]
     templates = {}                      # type: Dict[str, Template]
 
     def setUp(self):
         super().setUp()
-        set_coverage_checking(False)
+        set_template_coverage(False)
+        set_url_coverage(False)
         self.paths = get_template_paths()  # already filtered ignores
         self.paths.sort()
         for path in self.paths:
@@ -328,7 +333,8 @@ def setUp(self):
                 pass
 
     def tearDown(self):
-        set_coverage_checking(True)
+        set_template_coverage(True)
+        set_url_coverage(True)
         super().tearDown()
 
     def test_parse_templates(self):
diff --git a/ietf/utils/tests_coverage.py b/ietf/utils/tests_coverage.py
new file mode 100644
index 0000000000..68795994a7
--- /dev/null
+++ b/ietf/utils/tests_coverage.py
@@ -0,0 +1,56 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+"""Tests of the coverage.py module"""
+
+from unittest import mock
+
+from django.test import override_settings
+
+from .coverage import CoverageManager
+from .test_utils import TestCase
+
+
+class CoverageManagerTests(TestCase):
+    @override_settings(
+        BASE_DIR="/path/to/project/ietf",
+        TEST_CODE_COVERAGE_EXCLUDE_FILES=["a.py"],
+        TEST_CODE_COVERAGE_EXCLUDE_LINES=["some-regex"],
+    )
+    @mock.patch("ietf.utils.coverage.Coverage")
+    def test_coverage_manager(self, mock_coverage):
+        """CoverageManager managed coverage correctly in non-production mode
+
+        Presumes we're not running tests in production mode.
+        """
+        cm = CoverageManager()
+        self.assertFalse(cm.started)
+
+        cm.start()
+        self.assertTrue(cm.started)
+        self.assertEqual(cm.checker, mock_coverage.return_value)
+        self.assertTrue(mock_coverage.called)
+        coverage_kwargs = mock_coverage.call_args.kwargs
+        self.assertEqual(coverage_kwargs["source"], ["/path/to/project/ietf"])
+        self.assertEqual(coverage_kwargs["omit"], ["a.py"])
+        self.assertTrue(isinstance(cm.checker.exclude, mock.Mock))
+        assert isinstance(cm.checker.exclude, mock.Mock)  # for type checker
+        self.assertEqual(cm.checker.exclude.call_count, 1)
+        cm.checker.exclude.assert_called_with("some-regex")
+
+    @mock.patch("ietf.utils.coverage.Coverage")
+    def test_coverage_manager_is_defanged_in_production(self, mock_coverage):
+        """CoverageManager is a no-op in production mode"""
+        # Be careful faking settings.SERVER_MODE, but there's really no other way to
+        # test this.
+        with override_settings(SERVER_MODE="production"):
+            cm = CoverageManager()
+            cm.start()
+
+        # Check that nothing actually happened
+        self.assertFalse(mock_coverage.called)
+        self.assertIsNone(cm.checker)
+        self.assertFalse(cm.started)
+
+        # Check that other methods are guarded appropriately
+        cm.stop()
+        cm.save()
+        self.assertIsNone(cm.report())
diff --git a/ietf/utils/tests_meetecho.py b/ietf/utils/tests_meetecho.py
index a10ac68c27..502e936483 100644
--- a/ietf/utils/tests_meetecho.py
+++ b/ietf/utils/tests_meetecho.py
@@ -98,7 +98,7 @@ def test_schedule_meeting(self):
         api_response = api.schedule_meeting(
             wg_token='my-token',
             room_id=18,
-            start_time=datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.timezone.utc),
+            start_time=datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.UTC),
             duration=datetime.timedelta(minutes=130),
             description='interim-2021-wgname-01',
             extrainfo='message for staff',
@@ -127,7 +127,7 @@ def test_schedule_meeting(self):
         )
         # same time in different time zones
         for start_time in [
-            datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.timezone.utc),
+            datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.UTC),
             datetime.datetime(2021, 9, 14, 7, 0, 0, tzinfo=ZoneInfo('America/Halifax')),
             datetime.datetime(2021, 9, 14, 13, 0, 0, tzinfo=ZoneInfo('Europe/Kiev')),
             datetime.datetime(2021, 9, 14, 5, 0, 0, tzinfo=ZoneInfo('Pacific/Easter')),
@@ -198,7 +198,7 @@ def test_fetch_meetings(self):
                     '3d55bce0-535e-4ba8-bb8e-734911cf3c32': {
                         'room': {
                             'id': 18,
-                            'start_time': datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.timezone.utc),
+                            'start_time': datetime.datetime(2021, 9, 14, 10, 0, 0, tzinfo=datetime.UTC),
                             'duration': datetime.timedelta(minutes=130),
                             'description': 'interim-2021-wgname-01',
                         },
@@ -208,7 +208,7 @@ def test_fetch_meetings(self):
                     'e68e96d4-d38f-475b-9073-ecab46ca96a5': {
                         'room': {
                             'id': 23,
-                            'start_time': datetime.datetime(2021, 9, 15, 14, 30, 0, tzinfo=datetime.timezone.utc),
+                            'start_time': datetime.datetime(2021, 9, 15, 14, 30, 0, tzinfo=datetime.UTC),
                             'duration': datetime.timedelta(minutes=30),
                             'description': 'interim-2021-wgname-02',
                         },
@@ -386,7 +386,7 @@ def test_request_helper_exception(self):
 
     def test_time_serialization(self):
         """Time de/serialization should be consistent"""
-        time = timezone.now().astimezone(datetime.timezone.utc).replace(microsecond=0)  # cut off to 0 microseconds
+        time = timezone.now().astimezone(datetime.UTC).replace(microsecond=0)  # cut off to 0 microseconds
         api = MeetechoAPI(API_BASE, CLIENT_ID, CLIENT_SECRET)
         self.assertEqual(api._deserialize_time(api._serialize_time(time)), time)
 
@@ -400,7 +400,7 @@ def test_conference_from_api_dict(self):
                 'session-1-uuid': {
                     'room': {
                         'id': 1,
-                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.timezone.utc),
+                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.UTC),
                         'duration': datetime.timedelta(minutes=45),
                         'description': 'some-description',
                     },
@@ -410,7 +410,7 @@ def test_conference_from_api_dict(self):
                 'session-2-uuid': {
                     'room': {
                         'id': 2,
-                        'start_time': datetime.datetime(2022,2,5,4,5,6, tzinfo=datetime.timezone.utc),
+                        'start_time': datetime.datetime(2022,2,5,4,5,6, tzinfo=datetime.UTC),
                         'duration': datetime.timedelta(minutes=90),
                         'description': 'another-description',
                     },
@@ -427,7 +427,7 @@ def test_conference_from_api_dict(self):
                     id=1,
                     public_id='session-1-uuid',
                     description='some-description',
-                    start_time=datetime.datetime(2022, 2, 4, 1, 2, 3, tzinfo=datetime.timezone.utc),
+                    start_time=datetime.datetime(2022, 2, 4, 1, 2, 3, tzinfo=datetime.UTC),
                     duration=datetime.timedelta(minutes=45),
                     url='https://example.com/some/url',
                     deletion_token='delete-me',
@@ -437,7 +437,7 @@ def test_conference_from_api_dict(self):
                     id=2,
                     public_id='session-2-uuid',
                     description='another-description',
-                    start_time=datetime.datetime(2022, 2, 5, 4, 5, 6, tzinfo=datetime.timezone.utc),
+                    start_time=datetime.datetime(2022, 2, 5, 4, 5, 6, tzinfo=datetime.UTC),
                     duration=datetime.timedelta(minutes=90),
                     url='https://example.com/another/url',
                     deletion_token='delete-me-too',
@@ -453,7 +453,7 @@ def test_fetch(self, mock_fetch, _):
                 'session-1-uuid': {
                     'room': {
                         'id': 1,
-                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.timezone.utc),
+                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.UTC),
                         'duration': datetime.timedelta(minutes=45),
                         'description': 'some-description',
                     },
@@ -472,7 +472,7 @@ def test_fetch(self, mock_fetch, _):
                 id=1,
                 public_id='session-1-uuid',
                 description='some-description',
-                start_time=datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.timezone.utc),
+                start_time=datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.UTC),
                 duration=datetime.timedelta(minutes=45),
                 url='https://example.com/some/url',
                 deletion_token='delete-me',
@@ -488,7 +488,7 @@ def test_create(self, mock_schedule, _):
                 'session-1-uuid': {
                     'room': {
                         'id': 1,  # value should match session_id param to cm.create() below 
-                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.timezone.utc),
+                        'start_time': datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.UTC),
                         'duration': datetime.timedelta(minutes=45),
                         'description': 'some-description',
                     },
@@ -506,7 +506,7 @@ def test_create(self, mock_schedule, _):
                 id=1,
                 public_id='session-1-uuid',
                 description='some-description',
-                start_time=datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.timezone.utc),
+                start_time=datetime.datetime(2022,2,4,1,2,3, tzinfo=datetime.UTC),
                 duration=datetime.timedelta(minutes=45),
                 url='https://example.com/some/url',
                 deletion_token='delete-me',
diff --git a/ietf/utils/timezone.py b/ietf/utils/timezone.py
index a396b5e82d..e08dfa02f2 100644
--- a/ietf/utils/timezone.py
+++ b/ietf/utils/timezone.py
@@ -26,7 +26,7 @@ def _tzinfo(tz: Union[str, datetime.tzinfo, None]):
     Accepts a tzinfo or string containing a timezone name. Defaults to UTC if tz is None.
     """
     if tz is None:
-        return datetime.timezone.utc
+        return datetime.UTC
     elif isinstance(tz, datetime.tzinfo):
         return tz
     else:
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 482a4b110a..c1436e158b 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -280,7 +280,9 @@ def _multiline_to_list(s):
 PHOTOS_DIR = MEDIA_ROOT + PHOTOS_DIRNAME
 
 # Normally only set for debug, but needed until we have a real FS
-DJANGO_VITE_MANIFEST_PATH = os.path.join(BASE_DIR, "static/dist-neue/manifest.json")
+DJANGO_VITE["default"]["manifest_path"] = os.path.join(
+    BASE_DIR, "static/dist-neue/manifest.json"
+)
 
 # Binaries that are different in the docker image
 DE_GFM_BINARY = "/usr/local/bin/de-gfm"
@@ -379,6 +381,8 @@ def _multiline_to_list(s):
             secret_key=_blob_store_secret_key,
             security_token=None,
             client_config=botocore.config.Config(
+                request_checksum_calculation="when_required",
+                response_checksum_validation="when_required",
                 signature_version="s3v4",
                 connect_timeout=_blob_store_connect_timeout,
                 read_timeout=_blob_store_read_timeout,
diff --git a/patch/tastypie-django22-fielderror-response.patch b/patch/tastypie-django22-fielderror-response.patch
index ffb152d319..3b4418fc66 100644
--- a/patch/tastypie-django22-fielderror-response.patch
+++ b/patch/tastypie-django22-fielderror-response.patch
@@ -1,5 +1,5 @@
---- tastypie/resources.py.orig	2020-08-24 13:14:25.463166100 +0200
-+++ tastypie/resources.py	2020-08-24 13:15:55.133759224 +0200
+--- tastypie/resources.py.orig	2025-07-29 19:00:01.526948002 +0000
++++ tastypie/resources.py	2025-07-29 19:07:15.324127008 +0000
 @@ -12,7 +12,7 @@
      ObjectDoesNotExist, MultipleObjectsReturned, ValidationError, FieldDoesNotExist
  )
@@ -9,13 +9,13 @@
  from django.db.models.fields.related import ForeignKey
  from django.urls.conf import re_path
  from tastypie.utils.timezone import make_naive_utc
-@@ -2198,6 +2198,8 @@
+@@ -2216,6 +2216,8 @@
              return self.authorized_read_list(objects, bundle)
          except ValueError:
              raise BadRequest("Invalid resource lookup data provided (mismatched type).")
 +        except FieldError as e:
 +            raise BadRequest("Invalid resource lookup: %s." % e)
- 
+
      def obj_get(self, bundle, **kwargs):
          """
 --- tastypie/paginator.py.orig	2020-08-25 15:24:46.391588425 +0200
diff --git a/requirements.txt b/requirements.txt
index 60d3d8152e..cf7c920fa3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,86 +1,85 @@
 # -*- conf-mode -*-
-setuptools>=51.1.0    # Require this first, to prevent later errors
+setuptools>=80.9.0  # Require this first, to prevent later errors
 #
 aiosmtpd>=1.4.6
-argon2-cffi>=21.3.0    # For the Argon2 password hasher option
-beautifulsoup4>=4.11.1    # Only used in tests
-bibtexparser>=1.2.0    # Only used in tests
-bleach>=6
-types-bleach>=6
-boto3>=1.35,<1.36
-boto3-stubs[s3]>=1.35,<1.36
-botocore>=1.35,<1.36
-celery>=5.2.6
-coverage>=4.5.4,<5.0    # Coverage 5.x moves from a json database to SQLite.  Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views
+argon2-cffi>=25.1.0  # For the Argon2 password hasher option
+beautifulsoup4>=4.13.4  # Only used in tests
+bibtexparser>=1.4.3  # Only used in tests
+bleach>=6.2.0  # project is deprecated but supported
+types-bleach>=6.2.0
+boto3>=1.39.15
+boto3-stubs[s3]>=1.39.15
+botocore>=1.39.15
+celery>=5.5.3
+coverage>=7.9.2
 defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
 Django>4.2,<5
-django-admin-rangefilter>=0.13.2
-django-analytical>=3.1.0
-django-bootstrap5>=21.3
-django-celery-beat>=2.3.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
-django-celery-results>=2.5.1
-django-csp>=3.7
-django-cors-headers>=3.11.0
-django-debug-toolbar>=3.2.4
-django-markup>=1.5    # Limited use - need to reconcile against direct use of markdown
+django-admin-rangefilter>=0.13.3
+django-analytical>=3.2.0
+django-bootstrap5>=25.1
+django-celery-beat>=2.7.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
+django-celery-results>=2.6.0
+django-cors-headers>=4.7.0
+django-debug-toolbar>=6.0.0
+django-markup>=1.10    # Limited use - need to reconcile against direct use of markdown
 django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
-django-referrer-policy>=1.0
-django-simple-history>=3.0.0
-django-storages>=1.14.4
+django-simple-history>=3.10.1
+django-storages>=1.14.6
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
-django-tastypie>=0.14.7,<0.15.0    # Version must be locked in sync with version of Django
-django-vite>=2.0.2,<3
+django-tastypie>=0.15.1  # Version must be kept in sync with Django
+django-vite>=3.1.0
 django-widget-tweaks>=1.4.12
-djangorestframework>=3.15,<4
-djlint>=1.0.0    # To auto-indent templates via "djlint --profile django --reformat"
-docutils>=0.18.1    # Used only by dbtemplates for RestructuredText
+djangorestframework>=3.16.0
+docutils>=0.22.0  # Used only by dbtemplates for RestructuredText
+types-docutils>=0.21.0  # should match docutils (0.22.0 not out yet)
 drf-spectacular>=0.27
-drf-standardized-errors[openapi] >= 0.14
-types-docutils>=0.18.1
-factory-boy>=3.3
-gunicorn>=20.1.0
+drf-standardized-errors[openapi] >= 0.15.0
+factory-boy>=3.3.3
+gunicorn>=23.0.0
 hashids>=1.3.1
-html2text>=2020.1.16    # Used only to clean comment field of secr/sreq
+html2text>=2025.4.15  # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
 icalendar>=5.0.0 
-inflect>= 6.0.2
-jsonfield>=3.1.0,<3.2.0  # 3.2.0 needs py3.10; deprecated-replace with Django JSONField
-jsonschema[format]>=4.2.1
-jwcrypto>=1.2    # for signed notifications - this is aspirational, and is not really used.
-logging_tree>=1.9    # Used only by the showloggers management command
-lxml>=5.3.0
-markdown>=3.3.6
-types-markdown>=3.3.6
-mypy~=1.7.0    # Version requirements determined by django-stubs.
-oic>=1.3    # Used only by tests
-Pillow>=9.1.0
-psycopg2>=2.9.6
-pyang>=2.5.3
-pydyf>0.8.0
-pyflakes>=2.4.0
-pyopenssl>=22.0.0    # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency
-pyquery>=1.4.3
-python-dateutil>=2.8.2
-types-python-dateutil>=2.8.2
-python-json-logger>=3.1.0
+inflect>= 7.5.0
+jsonfield>=3.2.0  # deprecated - need to replace with Django's JSONField
+jsonschema[format]>=4.25.0
+jwcrypto>=1.5.6  # for signed notifications - this is aspirational, and is not really used.
+logging_tree>=1.10  # Used only by the showloggers management command
+lxml>=6.0.0
+markdown>=3.8.0
+types-markdown>=3.8.0
+mock>=5.2.0  # should replace with unittest.mock and remove dependency
+types-mock>=5.2.0
+mypy~=1.7.0  # Version requirements determined by django-stubs.
+oic>=1.7.0  # Used only by tests
+pillow>=11.3.0
+psycopg2>=2.9.10
+pyang>=2.6.1
+pydyf>=0.11.0
+pyflakes>=3.4.0
+pyopenssl>=25.1.0  # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency
+pyquery>=2.0.1
+python-dateutil>=2.9.0
+types-python-dateutil>=2.9.0
+python-json-logger>=3.3.0
 python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
 pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
-python-mimeparse>=1.6    # from TastyPie
+python-mimeparse>=2.0.0  # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
-types-pytz==2025.2.0.20250809  # match pytz versionrequests>=2.31.0
-requests>=2.31.0
-types-requests>=2.27.1
-requests-mock>=1.9.3
+types-pytz==2025.2.0.20250809  # match pytz version
+requests>=2.32.4
+types-requests>=2.32.4
+requests-mock>=1.12.1
 rfc2html>=2.0.3
-scout-apm>=2.24.2
-selenium>=4.0
-tblib>=1.7.0    # So that the django test runner provides tracebacks
-tlds>=2022042700    # Used to teach bleach about which TLDs currently exist
-tqdm>=4.64.0
-types-zxcvbn~=4.5.0.20250223  # match zxcvbn version
-Unidecode>=1.3.4
-urllib3>=1.26,<2
-weasyprint>=64.1
-xml2rfc>=3.23.0
+scout-apm>=3.4.0
+selenium>=4.34.2
+tblib>=3.1.0  # So that the django test runner provides tracebacks
+tlds>=2022042700  # Used to teach bleach about which TLDs currently exist
+tqdm>=4.67.1
+unidecode>=1.4.0
+urllib3>=2.5.0
+weasyprint>=66.0
+xml2rfc>=3.30.0
 xym>=0.6,<1.0
 zxcvbn>=4.5.0
+types-zxcvbn~=4.5.0.20250223  # match zxcvbn version

From b14512e840d8dfccf4e418ac184c77321595278b Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Wed, 3 Sep 2025 22:29:19 +0000
Subject: [PATCH 437/707] ci: update base image target version to 20250903T2216

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 658f1e5695..d3b186e1f5 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250819T1645
+FROM ghcr.io/ietf-tools/datatracker-app-base:20250903T2216
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 9e510ad8db..9d8427efdb 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250819T1645
+20250903T2216

From e444d9e73c78a1100ad5b909f2b15012be287889 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 3 Sep 2025 20:55:17 -0300
Subject: [PATCH 438/707] chore: use :latest instead of :py312 (#9460)

---
 .github/workflows/tests-az.yml     | 2 +-
 dev/deploy-to-container/cli.js     | 6 +++---
 dev/diff/cli.js                    | 6 +++---
 dev/tests/debug.sh                 | 2 +-
 dev/tests/docker-compose.debug.yml | 2 +-
 docker/app.Dockerfile              | 2 +-
 docker/celery.Dockerfile           | 2 +-
 7 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index d1fe0cdf62..8553563a19 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -62,7 +62,7 @@ jobs:
           echo "Starting Containers..."
           sudo docker network create dtnet
           sudo docker run -d --name db --network=dtnet ghcr.io/ietf-tools/datatracker-db:latest &
-          sudo docker run -d --name app --network=dtnet ghcr.io/ietf-tools/datatracker-app-base:py312 sleep infinity &
+          sudo docker run -d --name app --network=dtnet ghcr.io/ietf-tools/datatracker-app-base:latest sleep infinity &
           wait
 
           echo "Cloning datatracker repo..."
diff --git a/dev/deploy-to-container/cli.js b/dev/deploy-to-container/cli.js
index 2f0faad151..1a2d993ac4 100644
--- a/dev/deploy-to-container/cli.js
+++ b/dev/deploy-to-container/cli.js
@@ -85,7 +85,7 @@ async function main () {
   
   // Pull latest Datatracker Base image
   console.info('Pulling latest Datatracker base docker image...')
-  const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:py312')
+  const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:latest')
   await new Promise((resolve, reject) => {
     dock.modem.followProgress(appImagePullStream, (err, res) => err ? reject(err) : resolve(res))
   })
@@ -214,7 +214,7 @@ async function main () {
   const celeryContainers = {}
   for (const conConf of conConfs) {
     celeryContainers[conConf.name] = await dock.createContainer({
-      Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
+      Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
       name: `dt-${conConf.name}-${branch}`,
       Hostname: `dt-${conConf.name}-${branch}`,
       Env: [
@@ -244,7 +244,7 @@ async function main () {
   // Create Datatracker container
   console.info(`Creating Datatracker docker container... [dt-app-${branch}]`)
   const appContainer = await dock.createContainer({
-    Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
+    Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
     name: `dt-app-${branch}`,
     Hostname: `dt-app-${branch}`,
     Env: [
diff --git a/dev/diff/cli.js b/dev/diff/cli.js
index 0cf353cc65..461b0c37a0 100644
--- a/dev/diff/cli.js
+++ b/dev/diff/cli.js
@@ -567,7 +567,7 @@ async function main () {
           {
             title: 'Pulling latest Datatracker base docker image...',
             task: async (subctx, subtask) => {
-              const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:py312')
+              const appImagePullStream = await dock.pull('ghcr.io/ietf-tools/datatracker-app-base:latest')
               await new Promise((resolve, reject) => {
                 dock.modem.followProgress(appImagePullStream, (err, res) => err ? reject(err) : resolve(res))
               })
@@ -648,7 +648,7 @@ async function main () {
             title: 'Creating source Datatracker docker container...',
             task: async (subctx, subtask) => {
               containers.appSource = await dock.createContainer({
-                Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
+                Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
                 name: 'dt-diff-app-source',
                 Tty: true,
                 Hostname: 'appsource',
@@ -664,7 +664,7 @@ async function main () {
             title: 'Creating target Datatracker docker container...',
             task: async (subctx, subtask) => {
               containers.appTarget = await dock.createContainer({
-                Image: 'ghcr.io/ietf-tools/datatracker-app-base:py312',
+                Image: 'ghcr.io/ietf-tools/datatracker-app-base:latest',
                 name: 'dt-diff-app-target',
                 Tty: true,
                 Hostname: 'apptarget',
diff --git a/dev/tests/debug.sh b/dev/tests/debug.sh
index e92e6d9b2a..d87c504bb9 100644
--- a/dev/tests/debug.sh
+++ b/dev/tests/debug.sh
@@ -9,7 +9,7 @@
 # Simply type "exit" + ENTER to exit and shutdown this test environment.
 
 echo "Fetching latest images..."
-docker pull ghcr.io/ietf-tools/datatracker-app-base:py312
+docker pull ghcr.io/ietf-tools/datatracker-app-base:latest
 docker pull ghcr.io/ietf-tools/datatracker-db:latest
 echo "Starting containers..."
 docker compose -f docker-compose.debug.yml -p dtdebug --compatibility up -d
diff --git a/dev/tests/docker-compose.debug.yml b/dev/tests/docker-compose.debug.yml
index 168bbd4e92..8117b92375 100644
--- a/dev/tests/docker-compose.debug.yml
+++ b/dev/tests/docker-compose.debug.yml
@@ -5,7 +5,7 @@ version: '3.8'
 
 services:
     app:
-        image: ghcr.io/ietf-tools/datatracker-app-base:py312
+        image: ghcr.io/ietf-tools/datatracker-app-base:latest
         command: -f /dev/null
         working_dir: /__w/datatracker/datatracker
         entrypoint: tail
diff --git a/docker/app.Dockerfile b/docker/app.Dockerfile
index e3df9bd4b4..fee3833733 100644
--- a/docker/app.Dockerfile
+++ b/docker/app.Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:py312
+FROM ghcr.io/ietf-tools/datatracker-app-base:latest
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/docker/celery.Dockerfile b/docker/celery.Dockerfile
index 279d5c7550..e7c7b9cc3f 100644
--- a/docker/celery.Dockerfile
+++ b/docker/celery.Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:py312
+FROM ghcr.io/ietf-tools/datatracker-app-base:latest
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive

From c4d69d0118a068c873dc066fe9adde829e86f14e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 5 Sep 2025 17:22:52 -0500
Subject: [PATCH 439/707] feat: links to postorious (#9470)

* feat: links to postorious

* fix: remove redundant divider

* chore: better use of whitespace

* chore: remove what the cat typed in

* chore: more stray removal
---
 ietf/templates/base/menu_user.html | 31 ++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/ietf/templates/base/menu_user.html b/ietf/templates/base/menu_user.html
index 9a0bf56838..fd921638a4 100644
--- a/ietf/templates/base/menu_user.html
+++ b/ietf/templates/base/menu_user.html
@@ -115,6 +115,37 @@
             </a>
         </li>
     {% endif %}
+    <li class="dropend">
+      <a class="dropdown-item dropdown-toggle" href="#">
+        List subscriptions
+      </a>
+      <ul class="dropdown-menu">
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="https://mailman3.ietf.org/mailman3/lists/">
+                    IETF Lists
+                </a>
+            </li>
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="https://mailman3.irtf.org/mailman3/lists/">
+                IRTF Lists
+                </a>
+            </li>
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="https://mailman3.iab.org/mailman3/lists/">
+                    IAB Lists
+                </a>
+            </li>
+            <li>
+                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                href="https://mailman3.rfc-editor.org/mailman3/lists/">
+                    RFC-Editor Lists
+                </a>
+            </li>
+        </ul>
+    </li>
     {% if user|has_role:"Reviewer" %}
         <li>
             <a class="dropdown-item {% if flavor != 'top' %} text-wrap{% endif %}"

From 32c237f6b3b2572eaffa3922e20d2ab1c119d3a9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 16 Sep 2025 17:55:07 -0300
Subject: [PATCH 440/707] chore: hide weasyprint internal deprecation warning
 (#9544)

---
 ietf/settings.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/settings.py b/ietf/settings.py
index 753508dc99..d6be1d1e0f 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -34,6 +34,7 @@
 warnings.filterwarnings("ignore", message="datetime.datetime.utcnow\\(\\) is deprecated", module="oic.utils.time_util")
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="oic.utils.time_util")
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="pytz.tzinfo")
+warnings.filterwarnings("ignore", message="'instantiateVariableFont' is deprecated", module="weasyprint")
 
 
 base_path = pathlib.Path(__file__).resolve().parent

From c71871855769d9c2980cad853cf92a9ec25cb50a Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 16 Sep 2025 15:55:45 -0500
Subject: [PATCH 441/707] fix: normalize 3gpp groups and resolve duplication
 (#9505)

* fix: don't bother the rfc-editor with group type sdo name changes

* fix: normalize 3gpp groups and resolve duplication

* fix: improve guard, update t2

* fix: exclude the task from test coverage

* fix: exclude harder

* fix: tweak the pragma
---
 ietf/group/models.py |   2 +
 ietf/group/tasks.py  | 121 ++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 121 insertions(+), 2 deletions(-)

diff --git a/ietf/group/models.py b/ietf/group/models.py
index 608dcc86b9..2d5e7c4e6f 100644
--- a/ietf/group/models.py
+++ b/ietf/group/models.py
@@ -491,6 +491,8 @@ def notify_rfceditor_of_group_name_change(sender, instance=None, **kwargs):
             current = Group.objects.get(pk=instance.pk)
         except Group.DoesNotExist:
             return
+        if current.type_id == "sdo":
+            return
         addr = settings.RFC_EDITOR_GROUP_NOTIFICATION_EMAIL
         if addr and instance.name != current.name:
             msg = """
diff --git a/ietf/group/tasks.py b/ietf/group/tasks.py
index 693aafb385..ada83e80e2 100644
--- a/ietf/group/tasks.py
+++ b/ietf/group/tasks.py
@@ -9,12 +9,15 @@
 
 from django.conf import settings
 from django.template.loader import render_to_string
+from django.utils import timezone
 
 from ietf.doc.storage_utils import store_file
+from ietf.liaisons.models import LiaisonStatement
 from ietf.utils import log
+from ietf.utils.test_runner import disable_coverage
 
-from .models import Group
-from .utils import fill_in_charter_info, fill_in_wg_drafts, fill_in_wg_roles
+from .models import Group, GroupHistory
+from .utils import fill_in_charter_info, fill_in_wg_drafts, fill_in_wg_roles, save_group_in_history
 from .views import extract_last_name, roles
 
 
@@ -113,3 +116,117 @@ def generate_wg_summary_files_task():
         store_file("indexes", "1wg-summary.txt", f, allow_overwrite=True)
     with summary_by_acronym_file.open("rb") as f:
         store_file("indexes", "1wg-summary-by-acronym.txt", f, allow_overwrite=True)
+
+@shared_task
+@disable_coverage()
+def run_once_adjust_liaison_groups():  # pragma: no cover
+    log.log("Starting run_once_adjust_liaison_groups")
+    if all(
+        [
+            Group.objects.filter(
+                acronym__in=[
+                    "3gpp-tsg-ct",
+                    "3gpp-tsg-ran-wg1",
+                    "3gpp-tsg-ran-wg4",
+                    "3gpp-tsg-sa",
+                    "3gpp-tsg-sa-wg5",
+                    "3gpp-tsgct",  # duplicates 3gpp-tsg-ct above already
+                    "3gpp-tsgct-ct1",  # will normalize all acronyms to hyphenated form
+                    "3gpp-tsgct-ct3",  # and consistently match the name
+                    "3gpp-tsgct-ct4",  # (particularly use of WG)
+                    "3gpp-tsgran",
+                    "3gpp-tsgran-ran2",
+                    "3gpp-tsgsa",  # duplicates 3gpp-tsg-sa above
+                    "3gpp-tsgsa-sa2",  # will normalize
+                    "3gpp-tsgsa-sa3",
+                    "3gpp-tsgsa-sa4",
+                    "3gpp-tsgt-wg2",
+                ]
+            ).count()
+            == 16,
+            not Group.objects.filter(
+                acronym__in=[
+                    "3gpp-tsg-ran-wg3",
+                    "3gpp-tsg-ct-wg1",
+                    "3gpp-tsg-ct-wg3",
+                    "3gpp-tsg-ct-wg4",
+                    "3gpp-tsg-ran",
+                    "3gpp-tsg-ran-wg2",
+                    "3gpp-tsg-sa-wg2",
+                    "3gpp-tsg-sa-wg3",
+                    "3gpp-tsg-sa-wg4",
+                    "3gpp-tsg-t-wg2",
+                ]
+            ).exists(),
+            Group.objects.filter(acronym="o3gpptsgran3").exists(),
+            not LiaisonStatement.objects.filter(
+                to_groups__acronym__in=["3gpp-tsgct", "3gpp-tsgsa"]
+            ).exists(),
+            not LiaisonStatement.objects.filter(
+                from_groups__acronym="3gpp-tsgct"
+            ).exists(),
+            LiaisonStatement.objects.filter(from_groups__acronym="3gpp-tsgsa").count()
+            == 1,
+            LiaisonStatement.objects.get(from_groups__acronym="3gpp-tsgsa").pk == 1448,
+        ]
+    ):
+        for old_acronym, new_acronym, new_name in (
+            ("o3gpptsgran3", "3gpp-tsg-ran-wg3", "3GPP TSG RAN WG3"),
+            ("3gpp-tsgct-ct1", "3gpp-tsg-ct-wg1", "3GPP TSG CT WG1"),
+            ("3gpp-tsgct-ct3", "3gpp-tsg-ct-wg3", "3GPP TSG CT WG3"),
+            ("3gpp-tsgct-ct4", "3gpp-tsg-ct-wg4", "3GPP TSG CT WG4"),
+            ("3gpp-tsgran", "3gpp-tsg-ran", "3GPP TSG RAN"),
+            ("3gpp-tsgran-ran2", "3gpp-tsg-ran-wg2", "3GPP TSG RAN WG2"),
+            ("3gpp-tsgsa-sa2", "3gpp-tsg-sa-wg2", "3GPP TSG SA WG2"),
+            ("3gpp-tsgsa-sa3", "3gpp-tsg-sa-wg3", "3GPP TSG SA WG3"),
+            ("3gpp-tsgsa-sa4", "3gpp-tsg-sa-wg4", "3GPP TSG SA WG4"),
+            ("3gpp-tsgt-wg2", "3gpp-tsg-t-wg2", "3GPP TSG T WG2"),
+        ):
+            group = Group.objects.get(acronym=old_acronym)
+            save_group_in_history(group)
+            group.time = timezone.now()
+            group.acronym = new_acronym
+            group.name = new_name
+            if old_acronym.startswith("3gpp-tsgct-"):
+                group.parent = Group.objects.get(acronym="3gpp-tsg-ct")
+            elif old_acronym.startswith("3gpp-tsgsa-"):
+                group.parent = Group.objects.get(acronym="3gpp-tsg-sa")
+            group.save()
+            group.groupevent_set.create(
+                time=group.time,
+                by_id=1,  # (System)
+                type="info_changed",
+                desc=f"acronym changed from {old_acronym} to {new_acronym}, name set to {new_name}",
+            )
+
+        for acronym, new_name in (("3gpp-tsg-ct", "3GPP TSG CT"),):
+            group = Group.objects.get(acronym=acronym)
+            save_group_in_history(group)
+            group.time = timezone.now()
+            group.name = new_name
+            group.save()
+            group.groupevent_set.create(
+                time=group.time,
+                by_id=1,  # (System)
+                type="info_changed",
+                desc=f"name set to {new_name}",
+            )
+
+        ls = LiaisonStatement.objects.get(pk=1448)
+        ls.from_groups.remove(Group.objects.get(acronym="3gpp-tsgsa"))
+        ls.from_groups.add(Group.objects.get(acronym="3gpp-tsg-sa"))
+
+        # Rewriting history to effectively merge the histories of the duplicate groups
+        GroupHistory.objects.filter(parent__acronym="3gpp-tsgsa").update(
+            parent=Group.objects.get(acronym="3gpp-tsg-sa")
+        )
+        GroupHistory.objects.filter(parent__acronym="3gpp-tsgct").update(
+            parent=Group.objects.get(acronym="3gpp-tsg-ct")
+        )
+
+        deleted = Group.objects.filter(
+            acronym__in=["3gpp-tsgsa", "3gpp-tsgct"]
+        ).delete()
+        log.log(f"Deleted Groups: {deleted}")
+    else:
+        log.log("* Refusing to continue as preconditions have changed")

From 0a1705193dfde6695921191540049b88d91d9ec9 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 17 Sep 2025 12:45:32 -0500
Subject: [PATCH 442/707] fix: update draft-stream-ietf state descriptions
 (#9543)

---
 .../0026_change_wg_state_descriptions.py      | 117 ++++++++++++++++++
 1 file changed, 117 insertions(+)
 create mode 100644 ietf/doc/migrations/0026_change_wg_state_descriptions.py

diff --git a/ietf/doc/migrations/0026_change_wg_state_descriptions.py b/ietf/doc/migrations/0026_change_wg_state_descriptions.py
new file mode 100644
index 0000000000..b02b12c97e
--- /dev/null
+++ b/ietf/doc/migrations/0026_change_wg_state_descriptions.py
@@ -0,0 +1,117 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations
+
+def forward(apps, schema_editor):
+    State = apps.get_model("doc","State")
+    for name, desc in [
+        ("WG Document","The document has been adopted by the Working Group (WG) and is under development.  A document can only be adopted by one WG at a time.  However, a document may be transferred between WGs."),
+        ("Parked WG Document","The Working Group (WG) document is in a temporary state where it will not be actively developed.  The reason for the pause is explained via a datatracker comments section."),
+        ("Dead WG Document","The Working Group (WG) document has been abandoned by the WG.  No further development is planned in this WG.  A decision to resume work on this document and move it out of this state is possible."),
+        ("In WG Last Call","The Working Group (WG) document is currently subject to an active WG Last Call (WGLC) review per Section 7.4 of RFC2418."),
+        ("Waiting for Implementation","The progression of this Working Group (WG) document towards publication is paused as it awaits implementation. The process governing the approach to implementations is WG-specific."),
+        ("Held by WG","Held by Working Group (WG) chairs for administrative reasons.  See document history for details."),
+        ("Waiting for WG Chair Go-Ahead","The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chair(s) are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed"),
+        ("WG Consensus: Waiting for Write-Up","The Working Group (WG) document has consensus to proceed to publication.  However, the document is waiting for a document shepherd write-up per RFC4858."),
+        ("Submitted to IESG for Publication","The Working Group (WG) document has left the WG and been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication.  See the “IESG State” or “RFC Editor State” for further details on the state of the document."),
+        ("Candidate for WG Adoption","The individual submission document has been marked by the Working Group (WG) chairs as a candidate for adoption by the WG, but no adoption call has been started."),
+        ("Call For Adoption By WG Issued","A call for adoption of the individual submission document has been issued by the Working Group (WG) chairs.  This call is still running but the WG has not yet reached consensus for adoption."),
+        ("Adopted by a WG","The individual submission document has been adopted by the Working Group (WG), but a WG document replacing this document with the typical naming convention of 'draft- ietf-wgname-topic-nn' has not yet been submitted."),
+        ("Adopted for WG Info Only","The document is adopted by the Working Group (WG) for its internal use.  The WG has decided that it will not pursue publication of it as an RFC."),
+    ]:
+        State.objects.filter(name=name).update(desc=desc)
+
+def reverse(apps, schema_editor):
+    State = apps.get_model("doc","State")
+    for name, desc in [
+       ("WG Document","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.4" target="_blank">4.2.4. WG Document</a>
+
+ The "WG Document" state describes an I-D that has been adopted by an IETF WG and is being actively developed.
+
+ A WG Chair may transition an I-D into the "WG Document" state at any time as long as the I-D is not being considered or developed in any other WG.
+
+ Alternatively, WG Chairs may rely upon new functionality to be added to the Datatracker to automatically move version-00 drafts into the "WG Document" state as described in Section 4.1.
+
+ Under normal conditions, it should not be possible for an I-D to be in the "WG Document" state in more than one WG at a time. This said, I-Ds may be transferred from one WG to another with the consent of the WG Chairs and the responsible ADs."""),
+        ("Parked WG Document","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.5" target="_blank">4.2.5. Parked WG Document</a>
+
+ A "Parked WG Document" is an I-D that has lost its author or editor, is waiting for another document to be written or for a review to be completed, or cannot be progressed by the working group for some other reason.
+
+ Some of the annotation tags described in Section 4.3 may be used in conjunction with this state to indicate why an I-D has been parked, and/or what may need to happen for the I-D to be un-parked.
+
+ Parking a WG draft will not prevent it from expiring; however, this state can be used to indicate why the I-D has stopped progressing in the WG.
+
+ A "Parked WG Document" that is not expired may be transferred from one WG to another with the consent of the WG Chairs and the responsible ADs."""),
+        ("Dead WG Document","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.6" target="_blank">4.2.6. Dead WG Document</a>
+
+ A "Dead WG Document" is an I-D that has been abandoned. Note that 'Dead' is not always a final state for a WG I-D. If consensus is subsequently achieved, a "Dead WG Document" may be resurrected. A "Dead WG Document" that is not resurrected will eventually expire.
+
+ Note that an I-D that is declared to be "Dead" in one WG and that is not expired may be transferred to a non-dead state in another WG with the consent of the WG Chairs and the responsible ADs."""),
+        ("In WG Last Call","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.7" target="_blank">4.2.7. In WG Last Call</a>
+
+ A document "In WG Last Call" is an I-D for which a WG Last Call (WGLC) has been issued and is in progress.
+
+ Note that conducting a WGLC is an optional part of the IETF WG process, per Section 7.4 of RFC 2418 [RFC2418].
+
+ If a WG Chair decides to conduct a WGLC on an I-D, the "In WG Last Call" state can be used to track the progress of the WGLC. The Chair may configure the Datatracker to send a WGLC message to one or more mailing lists when the Chair moves the I-D into this state. The WG Chair may also be able to select a different set of mailing lists for a different document undergoing a WGLC; some documents may deserve coordination with other WGs.
+
+ A WG I-D in this state should remain "In WG Last Call" until the WG Chair moves it to another state. The WG Chair may configure the Datatracker to send an e-mail after a specified period of time to remind or 'nudge' the Chair to conclude the WGLC and to determine the next state for the document.
+
+ It is possible for one WGLC to lead into another WGLC for the same document. For example, an I-D that completed a WGLC as an "Informational" document may need another WGLC if a decision is taken to convert the I-D into a Standards Track document."""),
+        ("Waiting for Implementation","""In some areas, it can be desirable to wait for multiple interoperable implementations before progressing a draft to be an RFC, and in some WGs this is required.  This state should be entered after WG Last Call has completed."""),
+        ("Held by WG","""Held by WG, see document history for details."""),
+        ("Waiting for WG Chair Go-Ahead","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.8" target="_blank">4.2.8. Waiting for WG Chair Go-Ahead</a>
+
+ A WG Chair may wish to place an I-D that receives a lot of comments during a WGLC into the "Waiting for WG Chair Go-Ahead" state. This state describes an I-D that has undergone a WGLC; however, the Chair is not yet ready to call consensus on the document.
+
+ If comments from the WGLC need to be responded to, or a revision to the I-D is needed, the Chair may place an I-D into this state until all of the WGLC comments are adequately addressed and the (possibly revised) document is in the I-D repository."""),
+        ("WG Consensus: Waiting for Write-Up","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.9" target="_blank">4.2.9. WG Consensus: Waiting for Writeup</a>
+
+ A document in the "WG Consensus: Waiting for Writeup" state has essentially completed its development within the working group, and is nearly ready to be sent to the IESG for publication. The last thing to be done is the preparation of a protocol writeup by a Document Shepherd. The IESG requires that a document shepherd writeup be completed before publication of the I-D is requested. The IETF document shepherding process and the role of a WG Document Shepherd is described in RFC 4858 [RFC4858]
+
+ A WG Chair may call consensus on an I-D without a formal WGLC and transition an I-D that was in the "WG Document" state directly into this state.
+
+ The name of this state includes the words "Waiting for Writeup" because a good document shepherd writeup takes time to prepare."""),
+        ("Submitted to IESG for Publication","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.10" target="_blank">4.2.10. Submitted to IESG for Publication</a>
+
+ This state describes a WG document that has been submitted to the IESG for publication and that has not been sent back to the working group for revision.
+
+ An I-D in this state may be under review by the IESG, it may have been approved and be in the RFC Editor's queue, or it may have been published as an RFC. Other possibilities exist too. The document may be "Dead" (in the IESG state machine) or in a "Do Not Publish" state."""),
+        ("Candidate for WG Adoption","""The document has been marked as a candidate for WG adoption by the WG Chair.  This state can be used before a call for adoption is issued (and the document is put in the "Call For Adoption By WG Issued" state), to indicate that the document is in the queue for a call for adoption, even if none has been issued yet."""),
+        ("Call For Adoption By WG Issued","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.1" target="_blank">4.2.1. Call for Adoption by WG Issued</a>
+
+ The "Call for Adoption by WG Issued" state should be used to indicate when an I-D is being considered for adoption by an IETF WG. An I-D that is in this state is actively being considered for adoption and has not yet achieved consensus, preference, or selection in the WG.
+
+ This state may be used to describe an I-D that someone has asked a WG to consider for adoption, if the WG Chair has agreed with the request. This state may also be used to identify an I-D that a WG Chair asked an author to write specifically for consideration as a candidate WG item [WGDTSPEC], and/or an I-D that is listed as a 'candidate draft' in the WG's charter.
+
+ Under normal conditions, it should not be possible for an I-D to be in the "Call for Adoption by WG Issued" state in more than one working group at the same time. This said, it is not uncommon for authors to "shop" their I-Ds to more than one WG at a time, with the hope of getting their documents adopted somewhere.
+
+ After this state is implemented in the Datatracker, an I-D that is in the "Call for Adoption by WG Issued" state will not be able to be "shopped" to any other WG without the consent of the WG Chairs and the responsible ADs impacted by the shopping.
+
+ Note that Figure 1 includes an arc leading from this state to outside of the WG state machine. This illustrates that some I-Ds that are considered do not get adopted as WG drafts. An I-D that is not adopted as a WG draft will transition out of the WG state machine and revert back to having no stream-specific state; however, the status change history log of the I-D will record that the I-D was previously in the "Call for Adoption by WG Issued" state."""),
+        ("Adopted by a WG","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.2" target="_blank">4.2.2. Adopted by a WG</a>
+
+ The "Adopted by a WG" state describes an individual submission I-D that an IETF WG has agreed to adopt as one of its WG drafts.
+
+ WG Chairs who use this state will be able to clearly indicate when their WGs adopt individual submission I-Ds. This will facilitate the Datatracker's ability to correctly capture "Replaces" information for WG drafts and correct "Replaced by" information for individual submission I-Ds that have been replaced by WG drafts.
+
+ This state is needed because the Datatracker uses the filename of an I-D as a key to search its database for status information about the I-D, and because the filename of a WG I-D is supposed to be different from the filename of an individual submission I-D. The filename of an individual submission I-D will typically be formatted as 'draft-author-wgname-topic-nn'.
+
+ The filename of a WG document is supposed to be formatted as 'draft- ietf-wgname-topic-nn'.
+
+ An individual I-D that is adopted by a WG may take weeks or months to be resubmitted by the author as a new (version-00) WG draft. If the "Adopted by a WG" state is not used, the Datatracker has no way to determine that an I-D has been adopted until a new version of the I-D is submitted to the WG by the author and until the I-D is approved for posting by a WG Chair."""),
+        ("Adopted for WG Info Only","""<a href="https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.3" target="_blank">4.2.3. Adopted for WG Info Only</a>
+
+ The "Adopted for WG Info Only" state describes a document that contains useful information for the WG that adopted it, but the document is not intended to be published as an RFC. The WG will not actively develop the contents of the I-D or progress it for publication as an RFC. The only purpose of the I-D is to provide information for internal use by the WG."""),
+    ]:
+        State.objects.filter(name=name).update(desc=desc)
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("doc", "0025_storedobject_storedobject_unique_name_per_store"),
+    ]
+
+    operations = [
+        migrations.RunPython(forward, reverse)
+    ]

From 327447f91fa21ef7620d958b5f8fc1f00d4f85a5 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 17 Sep 2025 13:42:09 -0500
Subject: [PATCH 443/707] feat: iesg dashboard of wg documents (#9363)

* feat: iesg dashboard of wg documents (#8999)

* fix: removed template html cruft

* fix: avoid triggering a Ghostery false positive

* fix: remove related-id, milestone, and last meeting columns

* fix: make wgs with no docs show in last table

* fix: remove wg w/wo docs columns from first three thables

* fix: Make table names closer to original request

* chore: ruff format ietf.iesg.utils

* feat: refactor, test, cleanup

* chore: added comment about the test wg acronyms

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/iesg/tests.py                      | 1583 +++++++++++++++++++++++
 ietf/iesg/urls.py                       |    1 +
 ietf/iesg/utils.py                      |  296 ++++-
 ietf/iesg/views.py                      |   12 +-
 ietf/templates/iesg/working_groups.html |  159 +++
 5 files changed, 2028 insertions(+), 23 deletions(-)
 create mode 100644 ietf/templates/iesg/working_groups.html

diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index 746ea3f56f..f3778d1ded 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -2,6 +2,7 @@
 # -*- coding: utf-8 -*-
 
 
+from collections import Counter
 import datetime
 import io
 import tarfile
@@ -24,7 +25,9 @@
 from ietf.group.models import Group, GroupMilestone, Role
 from ietf.iesg.agenda import get_agenda_date, agenda_data, fill_in_agenda_administrivia, agenda_sections
 from ietf.iesg.models import TelechatDate, TelechatAgendaContent
+from ietf.iesg.utils import get_wg_dashboard_info
 from ietf.name.models import StreamName, TelechatAgendaSectionName
+from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized, unicontent
 from ietf.iesg.factories import IESGMgmtItemFactory, TelechatAgendaContentFactory
@@ -182,6 +185,1586 @@ def test_ietf_activity(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
+    def test_working_groups(self):
+        # Clean away the wasted built-for-every-test noise
+        Group.objects.filter(type__in=["wg", "area"]).delete()
+
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+        self.assertEqual(area_summary, [])
+        self.assertEqual(
+            area_totals, {"group_count": 0, "doc_count": 0, "page_count": 0}
+        )
+        self.assertEqual(ad_summary, [])
+        self.assertEqual(noad_summary, [])
+        self.assertEqual(
+            ad_totals,
+            {
+                "ad_group_count": 0,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            noad_totals,
+            {
+                "ad_group_count": 0,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            totals,
+            {
+                "group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+                "groups_with_docs_count": 0,
+            },
+        )
+        self.assertEqual(wg_summary, [])
+
+        # Construct Areas with WGs similar in shape to a real moment of the IETF
+
+        # Note that this test construciton uses the first letter of the wg acronyms
+        # for convenience to switch on whether groups have documents with assigned ADs.
+        # (Search for ` if wg_acronym[0] > "g"`)
+        # There's no other significance to the names of the area directors or the
+        # acronyms of the areas and groups other than being distinct. Taking the
+        # values from sets of similar things hopefully helps with debugging the tests.
+
+        areas = {}
+        for area_acronym in ["red", "orange", "yellow", "green", "blue", "violet"]:
+            areas[area_acronym] = GroupFactory(type_id="area", acronym=area_acronym)
+        for ad, area, wgs in [
+            ("Alpha", "red", ["bassoon"]),
+            ("Bravo", "orange", ["celesta"]),
+            ("Charlie", "orange", ["clarinet", "cymbals"]),
+            ("Delta", "yellow", ["flute"]),
+            ("Echo", "yellow", ["glockenspiel"]),
+            ("Foxtrot", "green", ["gong", "guitar"]),
+            ("Golf", "green", ["harp"]),
+            ("Hotel", "blue", ["harpsichord"]),
+            ("Indigo", "blue", ["oboe", "organ"]),
+            ("Juliet", "violet", ["piano"]),
+            ("Kilo", "violet", ["piccolo"]),
+            ("Lima", "violet", ["saxophone", "tambourine"]),
+        ]:
+            p = Person.objects.filter(name=ad).first() or PersonFactory(name=ad)
+            RoleFactory(group=areas[area], person=p, name_id="ad")
+            for wg in wgs:
+                g = GroupFactory(acronym=wg, type_id="wg", parent=areas[area])
+                RoleFactory(group=g, person=p, name_id="ad")
+
+        # Some ADs have out of area groups
+        g = GroupFactory(acronym="timpani", parent=areas["orange"])
+        RoleFactory(group=g, person=Person.objects.get(name="Juliet"), name_id="ad")
+
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+
+        self.assertEqual(
+            area_summary,
+            [
+                {
+                    "area": "red",
+                    "groups_in_area": 1,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "area": "orange",
+                    "groups_in_area": 4,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "area": "yellow",
+                    "groups_in_area": 2,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "area": "green",
+                    "groups_in_area": 3,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "area": "blue",
+                    "groups_in_area": 3,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "area": "violet",
+                    "groups_in_area": 4,
+                    "groups_with_docs": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+            ],
+        )
+        self.assertEqual(
+            area_totals, {"group_count": 0, "doc_count": 0, "page_count": 0}
+        )
+        self.assertEqual(
+            ad_summary,
+            [
+                {
+                    "ad": "Alpha",
+                    "area": "red",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Bravo",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Charlie",
+                    "area": "orange",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Delta",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Echo",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Foxtrot",
+                    "area": "green",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Golf",
+                    "area": "green",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Hotel",
+                    "area": "blue",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Indigo",
+                    "area": "blue",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Kilo",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Lima",
+                    "area": "violet",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+            ],
+        )
+        self.assertEqual(
+            noad_summary,
+            [
+                {
+                    "ad": "Alpha",
+                    "area": "red",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Bravo",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Charlie",
+                    "area": "orange",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Delta",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Echo",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Foxtrot",
+                    "area": "green",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Golf",
+                    "area": "green",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Hotel",
+                    "area": "blue",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Indigo",
+                    "area": "blue",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Kilo",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+                {
+                    "ad": "Lima",
+                    "area": "violet",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0,
+                    "doc_percent": 0,
+                    "page_percent": 0,
+                },
+            ],
+        )
+        self.assertEqual(
+            ad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            noad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            totals,
+            {
+                "group_count": 17,
+                "doc_count": 0,
+                "page_count": 0,
+                "groups_with_docs_count": 0,
+            },
+        )
+        self.assertEqual(
+            wg_summary,
+            [
+                {
+                    "wg": "bassoon",
+                    "area": "red",
+                    "ad": "Alpha",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "celesta",
+                    "area": "orange",
+                    "ad": "Bravo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "clarinet",
+                    "area": "orange",
+                    "ad": "Charlie",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "cymbals",
+                    "area": "orange",
+                    "ad": "Charlie",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "flute",
+                    "area": "yellow",
+                    "ad": "Delta",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "glockenspiel",
+                    "area": "yellow",
+                    "ad": "Echo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "gong",
+                    "area": "green",
+                    "ad": "Foxtrot",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "guitar",
+                    "area": "green",
+                    "ad": "Foxtrot",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "harp",
+                    "area": "green",
+                    "ad": "Golf",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "harpsichord",
+                    "area": "blue",
+                    "ad": "Hotel",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "oboe",
+                    "area": "blue",
+                    "ad": "Indigo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "organ",
+                    "area": "blue",
+                    "ad": "Indigo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "piano",
+                    "area": "violet",
+                    "ad": "Juliet",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "piccolo",
+                    "area": "violet",
+                    "ad": "Kilo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "saxophone",
+                    "area": "violet",
+                    "ad": "Lima",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "tambourine",
+                    "area": "violet",
+                    "ad": "Lima",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "timpani",
+                    "area": "orange",
+                    "ad": "Juliet",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+            ],
+        )
+
+        # As seen above, all doc and page counts are currently 0
+
+        # We'll give a group a document but not assign it to its AD
+        WgDraftFactory(
+            group=Group.objects.get(acronym="saxophone"), pages=len("saxophone")
+        )
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+        count_violet_dicts = 0
+        for d in area_summary:
+            if d["area"] == "violet":
+                count_violet_dicts += 1
+                self.assertEqual(d["groups_with_docs"], 1)
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+                self.assertEqual(d["group_percent"], 100.0)
+                self.assertEqual(d["doc_percent"], 100.0)
+                self.assertEqual(d["page_percent"], 100.0)
+            else:
+                self.assertEqual(d["groups_with_docs"], 0)
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_violet_dicts, 1)
+
+        self.assertEqual(
+            area_totals, {"group_count": 1, "doc_count": 1, "page_count": 9}
+        )
+
+        # No AD has this document, even though it's in Lima's group
+        count_lima_dicts = 0
+        for d in ad_summary:
+            if d["ad"] == "Lima":
+                count_lima_dicts += 1
+            self.assertEqual(d["doc_group_count"], 0)
+            self.assertEqual(d["doc_count"], 0)
+            self.assertEqual(d["page_count"], 0)
+            self.assertEqual(d["group_percent"], 0)
+            self.assertEqual(d["doc_percent"], 0)
+            self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_lima_dicts, 1)
+
+        # It's in Lima's group, so normally it will eventually land on Lima
+        count_lima_dicts = 0
+        for d in noad_summary:
+            if d["ad"] == "Lima":
+                count_lima_dicts += 1
+                self.assertEqual(d["doc_group_count"], 1)
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+                self.assertEqual(d["group_percent"], 100.0)
+                self.assertEqual(d["doc_percent"], 100.0)
+                self.assertEqual(d["page_percent"], 100.0)
+            else:
+                self.assertEqual(d["doc_group_count"], 0)
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_lima_dicts, 1)
+
+        self.assertEqual(
+            ad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            noad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 1,
+                "doc_count": 1,
+                "page_count": 9,
+            },
+        )
+        self.assertEqual(
+            totals,
+            {
+                "group_count": 17,
+                "doc_count": 1,
+                "page_count": 9,
+                "groups_with_docs_count": 1,
+            },
+        )
+
+        count_sax_dicts = 0
+        for d in wg_summary:
+            if d["wg"] == "saxophone":
+                count_sax_dicts += 1
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+            else:
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+        self.assertEqual(count_sax_dicts, 1)
+
+        # Assign that doc to Lima
+        self.assertEqual(Document.objects.count(), 1)
+        Document.objects.all().update(ad=Person.objects.get(name="Lima"))
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+        count_violet_dicts = 0
+        for d in area_summary:
+            if d["area"] == "violet":
+                count_violet_dicts += 1
+                self.assertEqual(d["groups_with_docs"], 1)
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+                self.assertEqual(d["group_percent"], 100.0)
+                self.assertEqual(d["doc_percent"], 100.0)
+                self.assertEqual(d["page_percent"], 100.0)
+            else:
+                self.assertEqual(d["groups_with_docs"], 0)
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_violet_dicts, 1)
+
+        self.assertEqual(
+            area_totals, {"group_count": 1, "doc_count": 1, "page_count": 9}
+        )
+
+        # This time it will show up as a doc assigned to Lima
+        count_lima_dicts = 0
+        for d in ad_summary:
+            if d["ad"] == "Lima":
+                count_lima_dicts += 1
+                self.assertEqual(d["doc_group_count"], 1)
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+                self.assertEqual(d["group_percent"], 100.0)
+                self.assertEqual(d["doc_percent"], 100.0)
+                self.assertEqual(d["page_percent"], 100.0)
+            else:
+                self.assertEqual(d["doc_group_count"], 0)
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_lima_dicts, 1)
+
+        # and there will be no noad documents
+        count_lima_dicts = 0
+        for d in noad_summary:
+            if d["ad"] == "Lima":
+                count_lima_dicts += 1
+            self.assertEqual(d["doc_group_count"], 0)
+            self.assertEqual(d["doc_count"], 0)
+            self.assertEqual(d["page_count"], 0)
+            self.assertEqual(d["group_percent"], 0)
+            self.assertEqual(d["doc_percent"], 0)
+            self.assertEqual(d["page_percent"], 0)
+        self.assertEqual(count_lima_dicts, 1)
+
+        self.assertEqual(
+            ad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 1,
+                "doc_count": 1,
+                "page_count": 9,
+            },
+        )
+        self.assertEqual(
+            noad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 0,
+                "doc_count": 0,
+                "page_count": 0,
+            },
+        )
+        self.assertEqual(
+            totals,
+            {
+                "group_count": 17,
+                "doc_count": 1,
+                "page_count": 9,
+                "groups_with_docs_count": 1,
+            },
+        )
+
+        count_sax_dicts = 0
+        for d in wg_summary:
+            if d["wg"] == "saxophone":
+                count_sax_dicts += 1
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9)
+            else:
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+        self.assertEqual(count_sax_dicts, 1)
+
+        # Now give Lima a document in a group that's not in their area:
+        WgDraftFactory(
+            group=Group.objects.get(acronym="gong"),
+            pages=len("gong"),
+            ad=Person.objects.get(name="Lima"),
+        )
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+        seen_dicts = Counter([d["area"] for d in area_summary])
+        for d in areas:
+            self.assertEqual(seen_dicts[area], 1 if area in ["violet", "green"] else 0)
+        for d in area_summary:
+            if d["area"] in ["violet", "green"]:
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9 if d["area"] == "violet" else 4)
+                self.assertEqual(d["group_percent"], 50)
+                self.assertEqual(d["doc_percent"], 50)
+                self.assertEqual(
+                    d["page_percent"],
+                    100 * 9 / 13 if d["area"] == "violet" else 100 * 4 / 13,
+                )
+            else:
+                self.assertEqual(d["doc_count"], 0)
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+
+        self.assertEqual(
+            area_totals, {"group_count": 2, "doc_count": 2, "page_count": 13}
+        )
+
+        for d in ad_summary:
+            if d["ad"] == "Lima":
+                self.assertEqual(d["doc_group_count"], 1)
+                self.assertEqual(d["doc_count"], 1)
+                self.assertEqual(d["page_count"], 9 if d["area"] == "violet" else 4)
+                self.assertEqual(d["group_percent"], 50)
+                self.assertEqual(d["doc_percent"], 50)
+                self.assertEqual(
+                    d["page_percent"],
+                    100 * 9 / 13 if d["area"] == "violet" else 100 * 4 / 13,
+                )
+            else:
+                self.assertEqual(d["doc_group_count"], 0)
+                self.assertEqual(
+                    d["doc_count"], 0
+                )  # Note in particular this is 0 for Foxtrot
+                self.assertEqual(d["page_count"], 0)
+                self.assertEqual(d["group_percent"], 0)
+                self.assertEqual(d["doc_percent"], 0)
+                self.assertEqual(d["page_percent"], 0)
+
+        for d in wg_summary:
+            if d["wg"] == "gong":
+                # Lima's doc in gong above counts at the dict for gong even though the ad reported there is Foxtrot.
+                self.assertEqual(
+                    d,
+                    {
+                        "wg": "gong",
+                        "area": "green",
+                        "ad": "Foxtrot",
+                        "doc_count": 1,
+                        "page_count": 4,
+                        "rfc_count": 0,
+                        "recent_rfc_count": 0,
+                    },
+                )
+            elif d["ad"] == "Lima":
+                self.assertEqual(
+                    d["area"], "violet"
+                )  # The out of area assignment is not reflected in the wg_summary at all.
+
+        # Now pile on a lot of documents
+        for wg_acronym in [
+            "bassoon",
+            "celesta",
+            "clarinet",
+            "cymbals",
+            "flute",
+            "glockenspiel",
+            "gong",
+            "guitar",
+            "harp",
+            "harpsichord",
+            "oboe",
+            "organ",
+            "piano",
+            "piccolo",
+            "saxophone",
+            "tambourine",
+            "timpani",
+        ]:
+            if wg_acronym in ["bassoon", "celesta"]:
+                continue  # Those WGs have no docs
+            # The rest have a doc that's not assigned to any ad
+            WgDraftFactory(
+                group=Group.objects.get(acronym=wg_acronym), pages=len(wg_acronym)
+            )
+            if wg_acronym[0] > "g":
+                # Some have a doc assigned to the responsible ad
+                WgDraftFactory(
+                    group=Group.objects.get(acronym=wg_acronym),
+                    pages=len(wg_acronym),
+                    ad=Role.objects.get(name_id="ad", group__acronym=wg_acronym).person,
+                )
+        # The other AD for an area might be covering a doc
+        WgDraftFactory(
+            group=Group.objects.get(acronym="saxophone"),
+            pages=len("saxophone"),
+            ad=Person.objects.get(name="Juliet"),
+        )
+        # An Ad not associated with the group or the area is responsible for a doc
+        WgDraftFactory(
+            group=Group.objects.get(acronym="bassoon"),
+            pages=len("bassoon"),
+            ad=Person.objects.get(name="Juliet"),
+        )
+
+        (
+            area_summary,
+            area_totals,
+            ad_summary,
+            noad_summary,
+            ad_totals,
+            noad_totals,
+            totals,
+            wg_summary,
+        ) = get_wg_dashboard_info()
+
+        self.assertEqual(
+            area_summary,
+            [
+                {
+                    "area": "red",
+                    "groups_in_area": 1,
+                    "groups_with_docs": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 6.25,
+                    "doc_percent": 3.571428571428571,
+                    "page_percent": 3.5897435897435894,
+                },
+                {
+                    "area": "orange",
+                    "groups_in_area": 4,
+                    "groups_with_docs": 3,
+                    "doc_count": 4,
+                    "page_count": 29,
+                    "group_percent": 18.75,
+                    "doc_percent": 14.285714285714285,
+                    "page_percent": 14.871794871794872,
+                },
+                {
+                    "area": "yellow",
+                    "groups_in_area": 2,
+                    "groups_with_docs": 2,
+                    "doc_count": 2,
+                    "page_count": 17,
+                    "group_percent": 12.5,
+                    "doc_percent": 7.142857142857142,
+                    "page_percent": 8.717948717948717,
+                },
+                {
+                    "area": "green",
+                    "groups_in_area": 3,
+                    "groups_with_docs": 3,
+                    "doc_count": 5,
+                    "page_count": 22,
+                    "group_percent": 18.75,
+                    "doc_percent": 17.857142857142858,
+                    "page_percent": 11.282051282051283,
+                },
+                {
+                    "area": "blue",
+                    "groups_in_area": 3,
+                    "groups_with_docs": 3,
+                    "doc_count": 6,
+                    "page_count": 40,
+                    "group_percent": 18.75,
+                    "doc_percent": 21.428571428571427,
+                    "page_percent": 20.51282051282051,
+                },
+                {
+                    "area": "violet",
+                    "groups_in_area": 4,
+                    "groups_with_docs": 4,
+                    "doc_count": 10,
+                    "page_count": 80,
+                    "group_percent": 25.0,
+                    "doc_percent": 35.714285714285715,
+                    "page_percent": 41.02564102564102,
+                },
+            ],
+        )
+        self.assertEqual(
+            area_totals, {"group_count": 16, "doc_count": 28, "page_count": 195}
+        )
+        self.assertEqual(
+            ad_summary,
+            [
+                {
+                    "ad": "Alpha",
+                    "area": "red",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Bravo",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Charlie",
+                    "area": "orange",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Delta",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Echo",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Foxtrot",
+                    "area": "green",
+                    "ad_group_count": 2,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Golf",
+                    "area": "green",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 4,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 4.395604395604396,
+                },
+                {
+                    "ad": "Hotel",
+                    "area": "blue",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 11,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 12.087912087912088,
+                },
+                {
+                    "ad": "Indigo",
+                    "area": "blue",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 9,
+                    "group_percent": 16.666666666666664,
+                    "doc_percent": 15.384615384615385,
+                    "page_percent": 9.89010989010989,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 7.6923076923076925,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "red",
+                    "ad_group_count": 0,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 7.6923076923076925,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 14,
+                    "group_percent": 16.666666666666664,
+                    "doc_percent": 15.384615384615385,
+                    "page_percent": 15.384615384615385,
+                },
+                {
+                    "ad": "Kilo",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 7.6923076923076925,
+                },
+                {
+                    "ad": "Lima",
+                    "area": "green",
+                    "ad_group_count": 0,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 4,
+                    "group_percent": 8.333333333333332,
+                    "doc_percent": 7.6923076923076925,
+                    "page_percent": 4.395604395604396,
+                },
+                {
+                    "ad": "Lima",
+                    "area": "violet",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 3,
+                    "page_count": 28,
+                    "group_percent": 16.666666666666664,
+                    "doc_percent": 23.076923076923077,
+                    "page_percent": 30.76923076923077,
+                },
+            ],
+        )
+        self.assertEqual(
+            noad_summary,
+            [
+                {
+                    "ad": "Alpha",
+                    "area": "red",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Bravo",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 0,
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "group_percent": 0.0,
+                    "doc_percent": 0.0,
+                    "page_percent": 0.0,
+                },
+                {
+                    "ad": "Charlie",
+                    "area": "orange",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 15,
+                    "group_percent": 13.333333333333334,
+                    "doc_percent": 13.333333333333334,
+                    "page_percent": 14.423076923076922,
+                },
+                {
+                    "ad": "Delta",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 5,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 4.807692307692308,
+                },
+                {
+                    "ad": "Echo",
+                    "area": "yellow",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 12,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 11.538461538461538,
+                },
+                {
+                    "ad": "Foxtrot",
+                    "area": "green",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 10,
+                    "group_percent": 13.333333333333334,
+                    "doc_percent": 13.333333333333334,
+                    "page_percent": 9.615384615384617,
+                },
+                {
+                    "ad": "Golf",
+                    "area": "green",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 4,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 3.8461538461538463,
+                },
+                {
+                    "ad": "Hotel",
+                    "area": "blue",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 11,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 10.576923076923077,
+                },
+                {
+                    "ad": "Indigo",
+                    "area": "blue",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 9,
+                    "group_percent": 13.333333333333334,
+                    "doc_percent": 13.333333333333334,
+                    "page_percent": 8.653846153846153,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "orange",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 6.730769230769231,
+                },
+                {
+                    "ad": "Juliet",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 5,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 4.807692307692308,
+                },
+                {
+                    "ad": "Kilo",
+                    "area": "violet",
+                    "ad_group_count": 1,
+                    "doc_group_count": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 6.666666666666667,
+                    "doc_percent": 6.666666666666667,
+                    "page_percent": 6.730769230769231,
+                },
+                {
+                    "ad": "Lima",
+                    "area": "violet",
+                    "ad_group_count": 2,
+                    "doc_group_count": 2,
+                    "doc_count": 2,
+                    "page_count": 19,
+                    "group_percent": 13.333333333333334,
+                    "doc_percent": 13.333333333333334,
+                    "page_percent": 18.269230769230766,
+                },
+            ],
+        )
+        self.assertEqual(
+            ad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 12,
+                "doc_count": 13,
+                "page_count": 91,
+            },
+        )
+        self.assertEqual(
+            noad_totals,
+            {
+                "ad_group_count": 17,
+                "doc_group_count": 15,
+                "doc_count": 15,
+                "page_count": 104,
+            },
+        )
+        self.assertEqual(
+            totals,
+            {
+                "group_count": 17,
+                "doc_count": 28,
+                "page_count": 195,
+                "groups_with_docs_count": 16,
+            },
+        )
+        self.assertEqual(
+            wg_summary,
+            [
+                {
+                    "wg": "bassoon",
+                    "area": "red",
+                    "ad": "Alpha",
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "celesta",
+                    "area": "orange",
+                    "ad": "Bravo",
+                    "doc_count": 0,
+                    "page_count": 0,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "clarinet",
+                    "area": "orange",
+                    "ad": "Charlie",
+                    "doc_count": 1,
+                    "page_count": 8,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "cymbals",
+                    "area": "orange",
+                    "ad": "Charlie",
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "flute",
+                    "area": "yellow",
+                    "ad": "Delta",
+                    "doc_count": 1,
+                    "page_count": 5,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "glockenspiel",
+                    "area": "yellow",
+                    "ad": "Echo",
+                    "doc_count": 1,
+                    "page_count": 12,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "gong",
+                    "area": "green",
+                    "ad": "Foxtrot",
+                    "doc_count": 2,
+                    "page_count": 8,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "guitar",
+                    "area": "green",
+                    "ad": "Foxtrot",
+                    "doc_count": 1,
+                    "page_count": 6,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "harp",
+                    "area": "green",
+                    "ad": "Golf",
+                    "doc_count": 2,
+                    "page_count": 8,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "harpsichord",
+                    "area": "blue",
+                    "ad": "Hotel",
+                    "doc_count": 2,
+                    "page_count": 22,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "oboe",
+                    "area": "blue",
+                    "ad": "Indigo",
+                    "doc_count": 2,
+                    "page_count": 8,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "organ",
+                    "area": "blue",
+                    "ad": "Indigo",
+                    "doc_count": 2,
+                    "page_count": 10,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "piano",
+                    "area": "violet",
+                    "ad": "Juliet",
+                    "doc_count": 2,
+                    "page_count": 10,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "piccolo",
+                    "area": "violet",
+                    "ad": "Kilo",
+                    "doc_count": 2,
+                    "page_count": 14,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "saxophone",
+                    "area": "violet",
+                    "ad": "Lima",
+                    "doc_count": 4,
+                    "page_count": 36,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "tambourine",
+                    "area": "violet",
+                    "ad": "Lima",
+                    "doc_count": 2,
+                    "page_count": 20,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+                {
+                    "wg": "timpani",
+                    "area": "orange",
+                    "ad": "Juliet",
+                    "doc_count": 2,
+                    "page_count": 14,
+                    "rfc_count": 0,
+                    "recent_rfc_count": 0,
+                },
+            ],
+        )
+
+        # Make sure the view doesn't _crash_ - the template is a dead-simple rendering of the dicts, but this test doesn't prove that
+        url = urlreverse("ietf.iesg.views.working_groups")
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+
 
 class IESGAgendaTests(TestCase):
     def setUp(self):
diff --git a/ietf/iesg/urls.py b/ietf/iesg/urls.py
index d8cfec9f90..5fd9dea0cc 100644
--- a/ietf/iesg/urls.py
+++ b/ietf/iesg/urls.py
@@ -59,6 +59,7 @@
     url(r'^agenda/telechat-(?:%(date)s-)?docs.tgz' % settings.URL_REGEXPS, views.telechat_docs_tarfile),
     url(r'^discusses/$', views.discusses),
     url(r'^ietf-activity/$', views.ietf_activity),
+    url(r'^working-groups/$', views.working_groups),
     url(r'^milestones/$', views.milestones_needing_review),
     url(r'^photos/$', views.photos),
 ]
diff --git a/ietf/iesg/utils.py b/ietf/iesg/utils.py
index 56571dc753..9051cf92b2 100644
--- a/ietf/iesg/utils.py
+++ b/ietf/iesg/utils.py
@@ -1,32 +1,45 @@
-from collections import namedtuple
+from collections import Counter, defaultdict, namedtuple
 
-import debug                            # pyflakes:ignore
+import datetime
+
+import debug  # pyflakes:ignore
+
+from django.db import models
+from django.utils import timezone
 
 from ietf.doc.models import Document, STATUSCHANGE_RELATIONS
 from ietf.doc.utils_search import fill_in_telechat_date
+from ietf.group.models import Group
 from ietf.iesg.agenda import get_doc_section
+from ietf.person.utils import get_active_ads
+
 
+TelechatPageCount = namedtuple(
+    "TelechatPageCount",
+    ["for_approval", "for_action", "related", "ad_pages_left_to_ballot_on"],
+)
 
-TelechatPageCount = namedtuple('TelechatPageCount',['for_approval','for_action','related','ad_pages_left_to_ballot_on'])
 
 def telechat_page_count(date=None, docs=None, ad=None):
     if not date and not docs:
         return TelechatPageCount(0, 0, 0, 0)
 
     if not docs:
-        candidates = Document.objects.filter(docevent__telechatdocevent__telechat_date=date).distinct() 
+        candidates = Document.objects.filter(
+            docevent__telechatdocevent__telechat_date=date
+        ).distinct()
         fill_in_telechat_date(candidates)
-        docs = [ doc for doc in candidates if doc.telechat_date()==date ]
+        docs = [doc for doc in candidates if doc.telechat_date() == date]
 
-    for_action =[d for d in docs if get_doc_section(d).endswith('.3')]
+    for_action = [d for d in docs if get_doc_section(d).endswith(".3")]
 
-    for_approval = set(docs)-set(for_action)
+    for_approval = set(docs) - set(for_action)
 
-    drafts = [d for d in for_approval if d.type_id == 'draft']
+    drafts = [d for d in for_approval if d.type_id == "draft"]
 
     ad_pages_left_to_ballot_on = 0
     pages_for_approval = 0
-    
+
     for draft in drafts:
         pages_for_approval += draft.pages or 0
         if ad:
@@ -39,30 +52,269 @@ def telechat_page_count(date=None, docs=None, ad=None):
 
     pages_for_action = 0
     for d in for_action:
-        if d.type_id == 'draft':
+        if d.type_id == "draft":
             pages_for_action += d.pages or 0
-        elif d.type_id == 'statchg':
+        elif d.type_id == "statchg":
             for rel in d.related_that_doc(STATUSCHANGE_RELATIONS):
                 pages_for_action += rel.pages or 0
-        elif d.type_id == 'conflrev':
-            for rel in d.related_that_doc('conflrev'):
+        elif d.type_id == "conflrev":
+            for rel in d.related_that_doc("conflrev"):
                 pages_for_action += rel.pages or 0
         else:
             pass
 
     related_pages = 0
-    for d in for_approval-set(drafts):
-        if d.type_id == 'statchg':
+    for d in for_approval - set(drafts):
+        if d.type_id == "statchg":
             for rel in d.related_that_doc(STATUSCHANGE_RELATIONS):
                 related_pages += rel.pages or 0
-        elif d.type_id == 'conflrev':
-            for rel in d.related_that_doc('conflrev'):
+        elif d.type_id == "conflrev":
+            for rel in d.related_that_doc("conflrev"):
                 related_pages += rel.pages or 0
         else:
             # There's really nothing to rely on to give a reading load estimate for charters
             pass
-    
-    return TelechatPageCount(for_approval=pages_for_approval,
-                             for_action=pages_for_action,
-                             related=related_pages,
-                             ad_pages_left_to_ballot_on=ad_pages_left_to_ballot_on)
+
+    return TelechatPageCount(
+        for_approval=pages_for_approval,
+        for_action=pages_for_action,
+        related=related_pages,
+        ad_pages_left_to_ballot_on=ad_pages_left_to_ballot_on,
+    )
+
+
+def get_wg_dashboard_info():
+    docs = (
+        Document.objects.filter(
+            group__type="wg",
+            group__state="active",
+            states__type="draft",
+            states__slug="active",
+        )
+        .filter(models.Q(ad__isnull=True) | models.Q(ad__in=get_active_ads()))
+        .distinct()
+        .prefetch_related("group", "group__parent")
+        .exclude(
+            states__type="draft-stream-ietf",
+            states__slug__in=["c-adopt", "wg-cand", "dead", "parked", "info"],
+        )
+    )
+    groups = Group.objects.filter(state="active", type="wg")
+    areas = Group.objects.filter(state="active", type="area")
+
+    total_group_count = groups.count()
+    total_doc_count = docs.count()
+    total_page_count = docs.aggregate(models.Sum("pages"))["pages__sum"] or 0
+    totals = {
+        "group_count": total_group_count,
+        "doc_count": total_doc_count,
+        "page_count": total_page_count,
+    }
+
+    # Since this view is primarily about counting subsets of the above docs query and the
+    # expected number of returned documents is just under 1000 typically - do the totaling
+    # work in python rather than asking the db to do it.
+
+    groups_for_area = defaultdict(set)
+    pages_for_area = defaultdict(lambda: 0)
+    docs_for_area = defaultdict(lambda: 0)
+    groups_for_ad = defaultdict(lambda: defaultdict(set))
+    pages_for_ad = defaultdict(lambda: defaultdict(lambda: 0))
+    docs_for_ad = defaultdict(lambda: defaultdict(lambda: 0))
+    groups_for_noad = defaultdict(lambda: defaultdict(set))
+    pages_for_noad = defaultdict(lambda: defaultdict(lambda: 0))
+    docs_for_noad = defaultdict(lambda: defaultdict(lambda: 0))
+    docs_for_wg = defaultdict(lambda: 0)
+    pages_for_wg = defaultdict(lambda: 0)
+    groups_total = set()
+    pages_total = 0
+    docs_total = 0
+
+    responsible_for_group = defaultdict(lambda: defaultdict(lambda: "None"))
+    responsible_count = defaultdict(lambda: defaultdict(lambda: 0))
+    for group in groups:
+        responsible = f"{', '.join([r.person.plain_name() for r in group.role_set.filter(name_id='ad')])}"
+        docs_for_noad[responsible][group.parent.acronym] = (
+            0  # Ensure these keys are present later
+        )
+        docs_for_ad[responsible][group.parent.acronym] = 0
+        responsible_for_group[group.acronym][group.parent.acronym] = responsible
+        responsible_count[responsible][group.parent.acronym] += 1
+
+    for doc in docs:
+        docs_for_wg[doc.group] += 1
+        pages_for_wg[doc.group] += doc.pages
+        groups_for_area[doc.group.area.acronym].add(doc.group.acronym)
+        pages_for_area[doc.group.area.acronym] += doc.pages
+        docs_for_area[doc.group.area.acronym] += 1
+
+        if doc.ad is None:
+            responsible = responsible_for_group[doc.group.acronym][
+                doc.group.parent.acronym
+            ]
+            groups_for_noad[responsible][doc.group.parent.acronym].add(
+                doc.group.acronym
+            )
+            pages_for_noad[responsible][doc.group.parent.acronym] += doc.pages
+            docs_for_noad[responsible][doc.group.parent.acronym] += 1
+        else:
+            responsible = f"{doc.ad.plain_name()}"
+            groups_for_ad[responsible][doc.group.parent.acronym].add(doc.group.acronym)
+            pages_for_ad[responsible][doc.group.parent.acronym] += doc.pages
+            docs_for_ad[responsible][doc.group.parent.acronym] += 1
+
+        docs_total += 1
+        groups_total.add(doc.group.acronym)
+        pages_total += doc.pages
+
+    groups_total = len(groups_total)
+    totals["groups_with_docs_count"] = groups_total
+
+    area_summary = []
+
+    for area in areas:
+        group_count = len(groups_for_area[area.acronym])
+        doc_count = docs_for_area[area.acronym]
+        page_count = pages_for_area[area.acronym]
+        area_summary.append(
+            {
+                "area": area.acronym,
+                "groups_in_area": groups.filter(parent=area).count(),
+                "groups_with_docs": group_count,
+                "doc_count": doc_count,
+                "page_count": page_count,
+                "group_percent": group_count / groups_total * 100
+                if groups_total != 0
+                else 0,
+                "doc_percent": doc_count / docs_total * 100 if docs_total != 0 else 0,
+                "page_percent": page_count / pages_total * 100
+                if pages_total != 0
+                else 0,
+            }
+        )
+    area_totals = {
+        "group_count": groups_total,
+        "doc_count": docs_total,
+        "page_count": pages_total,
+    }
+
+    noad_summary = []
+    noad_totals = {
+        "ad_group_count": 0,
+        "doc_group_count": 0,
+        "doc_count": 0,
+        "page_count": 0,
+    }
+    for ad in docs_for_noad:
+        for area in docs_for_noad[ad]:
+            noad_totals["ad_group_count"] += responsible_count[ad][area]
+            noad_totals["doc_group_count"] += len(groups_for_noad[ad][area])
+            noad_totals["doc_count"] += docs_for_noad[ad][area]
+            noad_totals["page_count"] += pages_for_noad[ad][area]
+    for ad in docs_for_noad:
+        for area in docs_for_noad[ad]:
+            noad_summary.append(
+                {
+                    "ad": ad,
+                    "area": area,
+                    "ad_group_count": responsible_count[ad][area],
+                    "doc_group_count": len(groups_for_noad[ad][area]),
+                    "doc_count": docs_for_noad[ad][area],
+                    "page_count": pages_for_noad[ad][area],
+                    "group_percent": len(groups_for_noad[ad][area])
+                    / noad_totals["doc_group_count"]
+                    * 100
+                    if noad_totals["doc_group_count"] != 0
+                    else 0,
+                    "doc_percent": docs_for_noad[ad][area]
+                    / noad_totals["doc_count"]
+                    * 100
+                    if noad_totals["doc_count"] != 0
+                    else 0,
+                    "page_percent": pages_for_noad[ad][area]
+                    / noad_totals["page_count"]
+                    * 100
+                    if noad_totals["page_count"] != 0
+                    else 0,
+                }
+            )
+    noad_summary.sort(key=lambda r: (r["ad"], r["area"]))
+
+    ad_summary = []
+    ad_totals = {
+        "ad_group_count": 0,
+        "doc_group_count": 0,
+        "doc_count": 0,
+        "page_count": 0,
+    }
+    for ad in docs_for_ad:
+        for area in docs_for_ad[ad]:
+            ad_totals["ad_group_count"] += responsible_count[ad][area]
+            ad_totals["doc_group_count"] += len(groups_for_ad[ad][area])
+            ad_totals["doc_count"] += docs_for_ad[ad][area]
+            ad_totals["page_count"] += pages_for_ad[ad][area]
+    for ad in docs_for_ad:
+        for area in docs_for_ad[ad]:
+            ad_summary.append(
+                {
+                    "ad": ad,
+                    "area": area,
+                    "ad_group_count": responsible_count[ad][area],
+                    "doc_group_count": len(groups_for_ad[ad][area]),
+                    "doc_count": docs_for_ad[ad][area],
+                    "page_count": pages_for_ad[ad][area],
+                    "group_percent": len(groups_for_ad[ad][area])
+                    / ad_totals["doc_group_count"]
+                    * 100
+                    if ad_totals["doc_group_count"] != 0
+                    else 0,
+                    "doc_percent": docs_for_ad[ad][area] / ad_totals["doc_count"] * 100
+                    if ad_totals["doc_count"] != 0
+                    else 0,
+                    "page_percent": pages_for_ad[ad][area]
+                    / ad_totals["page_count"]
+                    * 100
+                    if ad_totals["page_count"] != 0
+                    else 0,
+                }
+            )
+    ad_summary.sort(key=lambda r: (r["ad"], r["area"]))
+
+    rfc_counter = Counter(
+        Document.objects.filter(type="rfc").values_list("group__acronym", flat=True)
+    )
+    recent_rfc_counter = Counter(
+        Document.objects.filter(
+            type="rfc",
+            docevent__type="published_rfc",
+            docevent__time__gte=timezone.now() - datetime.timedelta(weeks=104),
+        ).values_list("group__acronym", flat=True)
+    )
+    for wg in set(groups) - set(docs_for_wg.keys()):
+        docs_for_wg[wg] += 0
+        pages_for_wg[wg] += 0
+    wg_summary = []
+    for wg in docs_for_wg:
+        wg_summary.append(
+            {
+                "wg": wg.acronym,
+                "area": wg.parent.acronym,
+                "ad": responsible_for_group[wg.acronym][wg.parent.acronym],
+                "doc_count": docs_for_wg[wg],
+                "page_count": pages_for_wg[wg],
+                "rfc_count": rfc_counter[wg.acronym],
+                "recent_rfc_count": recent_rfc_counter[wg.acronym],
+            }
+        )
+    wg_summary.sort(key=lambda r: (r["wg"], r["area"]))
+
+    return (
+        area_summary,
+        area_totals,
+        ad_summary,
+        noad_summary,
+        ad_totals,
+        noad_totals,
+        totals,
+        wg_summary,
+    )
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index ffd4515c98..014b290425 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -61,7 +61,7 @@
 from ietf.group.models import GroupMilestone, Role
 from ietf.iesg.agenda import agenda_data, agenda_sections, fill_in_agenda_docs, get_agenda_date
 from ietf.iesg.models import TelechatDate, TelechatAgendaContent
-from ietf.iesg.utils import telechat_page_count
+from ietf.iesg.utils import get_wg_dashboard_info, telechat_page_count
 from ietf.ietfauth.utils import has_role, role_required, user_is_person
 from ietf.name.models import TelechatAgendaSectionName
 from ietf.person.models import Person
@@ -626,3 +626,13 @@ def telechat_agenda_content_view(request, section):
         content=content.text,
         content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
     )
+
+def working_groups(request):
+ 
+    area_summary, area_totals, ad_summary, noad_summary, ad_totals, noad_totals, totals, wg_summary = get_wg_dashboard_info()
+
+    return render(
+        request,
+        "iesg/working_groups.html",
+        dict(area_summary=area_summary, area_totals=area_totals, ad_summary=ad_summary, noad_summary=noad_summary, ad_totals=ad_totals, noad_totals=noad_totals, totals=totals, wg_summary=wg_summary),
+    )
diff --git a/ietf/templates/iesg/working_groups.html b/ietf/templates/iesg/working_groups.html
new file mode 100644
index 0000000000..b799636857
--- /dev/null
+++ b/ietf/templates/iesg/working_groups.html
@@ -0,0 +1,159 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load origin static %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static 'ietf/css/list.css' %}">
+{% endblock %}
+{% block title %}IESG view of working groups{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1 class="mt-4">IESG view of working groups</h1>
+    <h2 class="mt-3'">Area Size and Load</h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+            <tr>
+                <th scope="col" data-sort="areaname">Area Name</th>
+                <th scope="col" data-sort="wgcount">WGs</th>
+                <th scope="col" data-sort="idcount">I-Ds</th>
+                <th scope="col" data-sort="idpages">Pages</th>
+                {# (divider) #}
+                <th scope="col" data-sort="idpercent">% I-Ds</th>
+                <th scope="col" data-sort="pagespercent">% Pages</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for area in area_summary %}
+              <tr>
+                <td>{{area.area}}</td>
+                <td>{{area.groups_in_area}}</td>
+                <td>{{area.doc_count}}</td>
+                <td>{{area.page_count}}</td>
+                <td>{{area.doc_percent|floatformat:1}}</td>
+                <td>{{area.page_percent|floatformat:1}}</td>
+              </tr>
+            {% endfor %}
+        </tbody>
+        <tfoot>
+            <tr>
+                <td>Totals</td>
+                <td>{{totals.group_count}}</td>
+                <td>{{totals.doc_count}}</td>
+                <td>{{totals.page_count}}</td>
+                <td></td>
+                <td></td>
+            </tr>
+        </tfoot>
+    </table>
+
+    <h2 class="mt-3'">Area Director Load: Documents not yet directly assigned to AD</h2>
+    <div class="small text-body-secondary">Typically these are pre-pubreq documents</div>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+            <tr>
+                <th scope="col" data-sort="areadirname">AD</th>
+                <th scope="col" data-sort="areaname">Area Name</th>
+                <th scope="col" data-sort="areagroups">WGs for AD</th>
+                <th scope="col" data-sort="idcount">I-Ds</th>
+                <th scope="col" data-sort="idpages">Pages</th>
+                {# (divider) #}
+                <th scope="col" data-sort="idpercent">% I-Ds</th>
+                <th scope="col" data-sort="pagespercent">% Pages</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for ad in noad_summary %}
+                <tr>
+                    <td>{{ad.ad}}</td>
+                    <td>{{ad.area}}</td>
+                    <td>{{ad.ad_group_count}}</td>
+                    <td>{{ad.doc_count}}</td>
+                    <td>{{ad.page_count}}</td>
+                    <td>{{ad.doc_percent|floatformat:1}}</td>
+                    <td>{{ad.page_percent|floatformat:1}}</td>
+                </tr>
+            {% endfor %}
+        </tbody>
+        <tfoot>
+            <tr>
+                <td>Totals</td>
+                <td></td>
+                <td>{{noad_totals.ad_group_count}}</td>
+                <td>{{noad_totals.doc_count}}</td>
+                <td>{{noad_totals.page_count}}</td>
+                <td></td>
+                <td></td>
+            </tr>
+        </tfoot>
+    </table>    
+
+    <h2 class="mt-3'">Area Director Load: Documents directly assigned to AD</h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+            <tr>
+                <th scope="col" data-sort="areadirname">AD</th>
+                <th scope="col" data-sort="areaname">Area Name</th>
+                <th scope="col" data-sort="areagroups">WGs for AD</th>
+                <th scope="col" data-sort="idcount">I-Ds</th>
+                <th scope="col" data-sort="idpages">Pages</th>
+                {# (divider) #}
+                <th scope="col" data-sort="idpercent">% I-Ds</th>
+                <th scope="col" data-sort="pagespercent">% Pages</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for ad in ad_summary %}
+                <tr>
+                    <td>{{ad.ad}}</td>
+                    <td>{{ad.area}}</td>
+                    <td>{{ad.ad_group_count}}</td>
+                    <td>{{ad.doc_count}}</td>
+                    <td>{{ad.page_count}}</td>
+                    <td>{{ad.doc_percent|floatformat:1}}</td>
+                    <td>{{ad.page_percent|floatformat:1}}</td>
+                </tr>
+            {% endfor %}
+        </tbody>
+        <tfoot>
+            <tr>
+                <td>Totals</td>
+                <td></td>
+                <td>{{ad_totals.ad_group_count}}</td>
+                <td>{{ad_totals.doc_count}}</td>
+                <td>{{ad_totals.page_count}}</td>
+                <td></td>
+                <td></td>
+            </tr>
+        </tfoot>
+    </table>  
+
+    <h2 class="mt-3'">Working Group Summary</h2>
+    <table class="table table-sm table-striped tablesorter">
+        <thead>
+            <tr>
+                <th scope="col" data-sort="wg">WG</th>
+                <th scope="col" data-sort="area">Area</th>
+                <th scope="col" data-sort="ad">AD</th>
+                <th scope="col" data-sort="ids">I-Ds</th>
+                <th scope="col" data-sort="pages">Pages</th>
+                <th scope="col" data-sort="rfcs">RFCs</th>
+                <th scope="col" data-sort="rfcpubrate">RFCs in last 2 years</th>
+            </tr>
+        </thead>
+        <tbody>
+            {% for wg in wg_summary %}
+            <tr>
+                <td>{{wg.wg}}</td>
+                <td>{{wg.area}}</td>
+                <td>{{wg.ad}}</td>
+                <td>{{wg.doc_count}}</td>
+                <td>{{wg.page_count}}</td>
+                <td>{{wg.rfc_count}}</td>
+                <td>{{wg.recent_rfc_count}}</td>
+            </tr>
+            {% endfor %}
+        </tbody>
+    </table>
+{% endblock %}
+{% block js %}
+    <script src="{% static "ietf/js/list.js" %}"></script>
+{% endblock %}
\ No newline at end of file

From acffceba0b8f61d6a5c972080df41f9e86743919 Mon Sep 17 00:00:00 2001
From: Phil Whipps <WhippsP@users.noreply.github.com>
Date: Thu, 18 Sep 2025 04:46:20 +1000
Subject: [PATCH 444/707] fix: Rev Fix Option 2 - Htmlized url regex (#9538)

* Update Rev Regex in settings.py

Removing single value revision numbers as that is against the naming standard (https://authors.ietf.org/naming-your-internet-draft#version) and causes issues with htmlized documents with -1 in the name (eg draft-ietf-oauth-v2-1)

* Reverse REGEX Change

* Update URLS REgex for REV

Directly insert Regex for REV rather than reference settings.URL_REGEXPS. This is to resolve issue https://github.com/ietf-tools/datatracker/issues/9533
---
 ietf/doc/urls.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 60255af856..6f1b698a9f 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -75,7 +75,7 @@
 # This block should really all be at the idealized docs.ietf.org service
     url(r'^html/(?P<name>bcp[0-9]+?)(\.txt|\.html)?/?$', RedirectView.as_view(url=settings.RFC_EDITOR_INFO_BASE_URL+"%(name)s", permanent=False)), 
     url(r'^html/(?P<name>std[0-9]+?)(\.txt|\.html)?/?$', RedirectView.as_view(url=settings.RFC_EDITOR_INFO_BASE_URL+"%(name)s", permanent=False)), 
-    url(r'^html/%(name)s(?:-%(rev)s)?(\.txt|\.html)?/?$' % settings.URL_REGEXPS, views_doc.document_html),
+    url(r'^html/%(name)s(?:-(?P<rev>[0-9]{2}(-[0-9]{2})?))?(\.txt|\.html)?/?$' % settings.URL_REGEXPS, views_doc.document_html),
 
     url(r'^id/%(name)s(?:-%(rev)s)?(?:\.(?P<ext>(txt|html|xml)))?/?$' % settings.URL_REGEXPS, views_doc.document_raw_id),
     url(r'^pdf/%(name)s(?:-%(rev)s)?(?:\.(?P<ext>[a-z]+))?/?$' % settings.URL_REGEXPS, views_doc.document_pdfized),

From 6b58aa4bd47fd5fe84750a0cc66dd38b8e801c72 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 18 Sep 2025 10:20:03 -0500
Subject: [PATCH 445/707] fix: edit only attachments actually attached to this
 liaison statement (#9548)

* fix: edit only attachments actually attached to this liaison statement

* chore: remove unused import

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/liaisons/tests.py | 29 +++++++++++++++++++++++------
 ietf/liaisons/views.py | 11 +++++++----
 2 files changed, 30 insertions(+), 10 deletions(-)

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index a1fbf77841..2f86f38789 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -939,17 +939,34 @@ def test_liaison_add_attachment(self):
         )
 
     def test_liaison_edit_attachment(self):
-
-        attachment = LiaisonStatementAttachmentFactory(document__name='liaiatt-1')
-        url = urlreverse('ietf.liaisons.views.liaison_edit_attachment', kwargs=dict(object_id=attachment.statement_id,doc_id=attachment.document_id))
+        attachment = LiaisonStatementAttachmentFactory(document__name="liaiatt-1")
+        url = urlreverse(
+            "ietf.liaisons.views.liaison_edit_attachment",
+            kwargs=dict(
+                object_id=attachment.statement_id, doc_id=attachment.document_id
+            ),
+        )
         login_testing_unauthorized(self, "secretary", url)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-        post_data = dict(title='New Title')
-        r = self.client.post(url,post_data)
+        post_data = dict(title="New Title")
+        r = self.client.post(url, post_data)
         attachment = LiaisonStatementAttachment.objects.get(pk=attachment.pk)
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(attachment.document.title,'New Title')
+        self.assertEqual(attachment.document.title, "New Title")
+
+        # ensure attempts to edit attachments not attached to this liaison statement fail
+        other_attachment = LiaisonStatementAttachmentFactory(document__name="liaiatt-2")
+        url = urlreverse(
+            "ietf.liaisons.views.liaison_edit_attachment",
+            kwargs=dict(
+                object_id=attachment.statement_id, doc_id=other_attachment.document_id
+            ),
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+        r = self.client.post(url, dict(title="New Title"))
+        self.assertEqual(r.status_code, 404)
 
     def test_liaison_delete_attachment(self):
         attachment = LiaisonStatementAttachmentFactory(document__name='liaiatt-1')
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index 9710149c90..f9136a8d14 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -7,15 +7,14 @@
 
 from django.contrib import messages
 from django.urls import reverse as urlreverse
-from django.core.exceptions import ValidationError
+from django.core.exceptions import ValidationError, ObjectDoesNotExist
 from django.core.validators import validate_email
 from django.db.models import Q, Prefetch
-from django.http import HttpResponse
+from django.http import Http404, HttpResponse
 from django.shortcuts import render, get_object_or_404, redirect
 
 import debug                            # pyflakes:ignore
 
-from ietf.doc.models import Document
 from ietf.ietfauth.utils import role_required, has_role
 from ietf.group.models import Group, Role
 from ietf.liaisons.models import (LiaisonStatement,LiaisonStatementEvent,
@@ -444,7 +443,11 @@ def liaison_edit(request, object_id):
 def liaison_edit_attachment(request, object_id, doc_id):
     '''Edit the Liaison Statement attachment title'''
     liaison = get_object_or_404(LiaisonStatement, pk=object_id)
-    doc = get_object_or_404(Document, pk=doc_id)
+    try:
+       doc = liaison.attachments.get(pk=doc_id)
+    except ObjectDoesNotExist:
+        raise Http404
+
     if not can_edit_liaison(request.user, liaison):
         permission_denied(request, "You are not authorized for this action.")
 

From 76f56ceabf4a101c7a8f72946778b7bb5b63f570 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 18 Sep 2025 10:20:30 -0500
Subject: [PATCH 446/707] fix: adjust anachronystic urls - doc_ids became
 numeric years ago. (#9549)

---
 ietf/liaisons/urls.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/liaisons/urls.py b/ietf/liaisons/urls.py
index a4afbfef5d..0fbd29425e 100644
--- a/ietf/liaisons/urls.py
+++ b/ietf/liaisons/urls.py
@@ -26,8 +26,8 @@
     url(r'^(?P<object_id>\d+)/$', views.liaison_detail),
     url(r'^(?P<object_id>\d+)/addcomment/$', views.add_comment),
     url(r'^(?P<object_id>\d+)/edit/$', views.liaison_edit),
-    url(r'^(?P<object_id>\d+)/edit-attachment/(?P<doc_id>[A-Za-z0-9._+-]+)$', views.liaison_edit_attachment),
-    url(r'^(?P<object_id>\d+)/delete-attachment/(?P<attach_id>[A-Za-z0-9._+-]+)$', views.liaison_delete_attachment),
+    url(r'^(?P<object_id>\d+)/edit-attachment/(?P<doc_id>[0-9]+)$', views.liaison_edit_attachment),
+    url(r'^(?P<object_id>\d+)/delete-attachment/(?P<attach_id>[0-9]+)$', views.liaison_delete_attachment),
     url(r'^(?P<object_id>\d+)/history/$', views.liaison_history),
     url(r'^(?P<object_id>\d+)/reply/$', views.liaison_reply),
     url(r'^(?P<object_id>\d+)/resend/$', views.liaison_resend),

From ad5823e0c6ebaa88ae6c949e1bdefeab951cb280 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 18 Sep 2025 10:22:31 -0500
Subject: [PATCH 447/707] fix: properly guard state transitions (#9554)

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/liaisons/tests.py |  3 +++
 ietf/liaisons/views.py | 32 +++++++++++++++++++-------------
 2 files changed, 22 insertions(+), 13 deletions(-)

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 2f86f38789..c3ff9dbe94 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -363,6 +363,9 @@ def test_approval_process(self):
         self.assertEqual(len(q('form button[name=approved]')), 0)
 
         # check the detail page / authorized
+        r = self.client.post(url, dict(dead="1"))
+        self.assertEqual(r.status_code, 403)
+        mailbox_before = len(outbox)
         self.client.login(username="ulm-liaiman", password="ulm-liaiman+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index f9136a8d14..6a1e6e3def 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -7,7 +7,7 @@
 
 from django.contrib import messages
 from django.urls import reverse as urlreverse
-from django.core.exceptions import ValidationError, ObjectDoesNotExist
+from django.core.exceptions import ValidationError, ObjectDoesNotExist, PermissionDenied
 from django.core.validators import validate_email
 from django.db.models import Q, Prefetch
 from django.http import Http404, HttpResponse
@@ -404,22 +404,28 @@ def liaison_detail(request, object_id):
 
 
     if request.method == 'POST':
-        if request.POST.get('approved'):
-            liaison.change_state(state_id='approved',person=person)
-            liaison.change_state(state_id='posted',person=person)
-            send_liaison_by_email(request, liaison)
-            messages.success(request,'Liaison Statement Approved and Posted')
-        elif request.POST.get('dead'):
-            liaison.change_state(state_id='dead',person=person)
-            messages.success(request,'Liaison Statement Killed')
-        elif request.POST.get('resurrect'):
-            liaison.change_state(state_id='pending',person=person)
-            messages.success(request,'Liaison Statement Resurrected')
-        elif request.POST.get('do_action_taken') and can_take_care:
+        if request.POST.get('do_action_taken') and can_take_care:
             liaison.tags.remove('required')
             liaison.tags.add('taken')
             can_take_care = False
             messages.success(request,'Action handled')
+        else:
+            if can_edit:
+                if request.POST.get('approved'):
+                    liaison.change_state(state_id='approved',person=person)
+                    liaison.change_state(state_id='posted',person=person)
+                    send_liaison_by_email(request, liaison)
+                    messages.success(request,'Liaison Statement Approved and Posted')
+                elif request.POST.get('dead'):
+                    liaison.change_state(state_id='dead',person=person)
+                    messages.success(request,'Liaison Statement Killed')
+                elif request.POST.get('resurrect'):
+                    liaison.change_state(state_id='pending',person=person)
+                    messages.success(request,'Liaison Statement Resurrected')
+                else:
+                    pass
+            else:
+                raise PermissionDenied()
 
     relations_by = [i.target for i in liaison.source_of_set.filter(target__state__slug='posted')]
     relations_to = [i.source for i in liaison.target_of_set.filter(source__state__slug='posted')]

From e1c75d46161939acaf093bb50cf91af9a2cbb7ea Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 18 Sep 2025 10:32:26 -0500
Subject: [PATCH 448/707] fix: disable removing liaison attachments pending
 reimplementation (#9555)

---
 ietf/liaisons/tests.py | 16 ++++++++--------
 ietf/liaisons/views.py | 39 ++++++++++++++++++++++-----------------
 2 files changed, 30 insertions(+), 25 deletions(-)

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index c3ff9dbe94..fd1c22be77 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -971,14 +971,14 @@ def test_liaison_edit_attachment(self):
         r = self.client.post(url, dict(title="New Title"))
         self.assertEqual(r.status_code, 404)
 
-    def test_liaison_delete_attachment(self):
-        attachment = LiaisonStatementAttachmentFactory(document__name='liaiatt-1')
-        liaison = attachment.statement
-        url = urlreverse('ietf.liaisons.views.liaison_delete_attachment', kwargs=dict(object_id=liaison.pk,attach_id=attachment.pk))
-        login_testing_unauthorized(self, "secretary", url)
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 302)
-        self.assertEqual(liaison.liaisonstatementattachment_set.filter(removed=False).count(),0)
+    # def test_liaison_delete_attachment(self):
+    #     attachment = LiaisonStatementAttachmentFactory(document__name='liaiatt-1')
+    #     liaison = attachment.statement
+    #     url = urlreverse('ietf.liaisons.views.liaison_delete_attachment', kwargs=dict(object_id=liaison.pk,attach_id=attachment.pk))
+    #     login_testing_unauthorized(self, "secretary", url)
+    #     r = self.client.get(url)
+    #     self.assertEqual(r.status_code, 302)
+    #     self.assertEqual(liaison.liaisonstatementattachment_set.filter(removed=False).count(),0)
 
     def test_in_response(self):
         '''A statement with purpose=in_response must have related statement specified'''
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index 6a1e6e3def..6a6f579714 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -17,8 +17,7 @@
 
 from ietf.ietfauth.utils import role_required, has_role
 from ietf.group.models import Group, Role
-from ietf.liaisons.models import (LiaisonStatement,LiaisonStatementEvent,
-    LiaisonStatementAttachment)
+from ietf.liaisons.models import LiaisonStatement,LiaisonStatementEvent
 from ietf.liaisons.utils import (get_person_for_user, can_add_outgoing_liaison,
     can_add_incoming_liaison, can_edit_liaison,can_submit_liaison_required,
     can_add_liaison)
@@ -377,23 +376,29 @@ def liaison_history(request, object_id):
 
 def liaison_delete_attachment(request, object_id, attach_id):
     liaison = get_object_or_404(LiaisonStatement, pk=object_id)
-    attach = get_object_or_404(LiaisonStatementAttachment, pk=attach_id)
+
     if not can_edit_liaison(request.user, liaison):
         permission_denied(request, "You are not authorized for this action.")
-
-    # FIXME: this view should use POST instead of GET when deleting
-    attach.removed = True
-    attach.save()
-
-    # create event
-    LiaisonStatementEvent.objects.create(
-        type_id='modified',
-        by=get_person_for_user(request.user),
-        statement=liaison,
-        desc='Attachment Removed: {}'.format(attach.document.title)
-    )
-    messages.success(request, 'Attachment Deleted')
-    return redirect('ietf.liaisons.views.liaison_detail', object_id=liaison.pk)
+    else:
+        permission_denied(request, "This operation is temporarily unavailable. Ask the secretariat to mark the attachment as removed using the admin.")
+
+    # The following will be replaced with a different approach in the next generation of the liaison tool
+    # attach = get_object_or_404(LiaisonStatementAttachment, pk=attach_id)
+
+    # # FIXME: this view should use POST instead of GET when deleting
+    # attach.removed = True
+    # debug.say("Got here")
+    # attach.save()
+
+    # # create event
+    # LiaisonStatementEvent.objects.create(
+    #     type_id='modified',
+    #     by=get_person_for_user(request.user),
+    #     statement=liaison,
+    #     desc='Attachment Removed: {}'.format(attach.document.title)
+    # )
+    # messages.success(request, 'Attachment Deleted')
+    # return redirect('ietf.liaisons.views.liaison_detail', object_id=liaison.pk)
 
 def liaison_detail(request, object_id):
     liaison = get_object_or_404(LiaisonStatement, pk=object_id)

From 87e550c74ffef0f5b64b78a6a487321ebe923f11 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 19 Sep 2025 13:55:14 -0300
Subject: [PATCH 449/707] refactor: compare tokens using compare_digest (#9562)

* refactor: compare tokens using compare_digest

* test: test new helper

* refactor: const-time for auth_token check also
---
 ietf/submit/tests.py | 31 +++++++++++++++++++++++++++-
 ietf/submit/views.py | 49 +++++++++++++++++++++++++++++++++++---------
 2 files changed, 69 insertions(+), 11 deletions(-)

diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 6b9002502b..ede63d2752 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -51,8 +51,9 @@
                                process_submission_xml, process_uploaded_submission, 
                                process_and_validate_submission, apply_yang_checker_to_draft, 
                                run_all_yang_model_checks)
+from ietf.submit.views import access_token_is_valid, auth_token_is_valid
 from ietf.utils import tool_version
-from ietf.utils.accesstoken import generate_access_token
+from ietf.utils.accesstoken import generate_access_token, generate_random_key
 from ietf.utils.mail import outbox, get_payload_text
 from ietf.utils.test_runner import TestBlobstoreManager
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase
@@ -3500,3 +3501,31 @@ def test_submissionerror(self, mock_sanitize_message):
             mock_sanitize_message.call_args_list,
             [mock.call("hi"), mock.call("there")],
         )
+
+
+class HelperTests(TestCase):
+    def test_access_token_is_valid(self):
+        submission: Submission = SubmissionFactory()  # type: ignore
+        valid_token = submission.access_token()
+        access_key = submission.access_key  # accept this for backwards compat
+        invalid_token = "not the valid token"
+        self.assertTrue(access_token_is_valid(submission, valid_token))
+        self.assertTrue(access_token_is_valid(submission, access_key))
+        self.assertFalse(access_token_is_valid(submission, invalid_token))
+
+    def test_auth_token_is_valid(self):
+        auth_key = generate_random_key()
+        submission: Submission = SubmissionFactory(auth_key = auth_key)  # type: ignore
+        valid_token = generate_access_token(submission.auth_key)
+        auth_key = submission.auth_key  # accept this for backwards compat
+        invalid_token = "not the valid token"
+        self.assertTrue(auth_token_is_valid(submission, valid_token))
+        self.assertTrue(auth_token_is_valid(submission, auth_key))
+        self.assertFalse(auth_token_is_valid(submission, invalid_token))
+
+        submission.auth_key = ""
+        submission.save()
+        self.assertFalse(auth_token_is_valid(submission, valid_token))
+        self.assertFalse(auth_token_is_valid(submission, auth_key))
+        self.assertFalse(auth_token_is_valid(submission, invalid_token))
+        self.assertFalse(auth_token_is_valid(submission, ""))
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index 043b613016..8329a312bb 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -2,6 +2,7 @@
 # -*- coding: utf-8 -*-
 import re
 import datetime
+from secrets import compare_digest
 
 from typing import Optional, cast         # pyflakes:ignore
 from urllib.parse import urljoin
@@ -255,19 +256,48 @@ def search_submission(request):
     )
 
 
-def can_edit_submission(user, submission, access_token):
-    key_matched = access_token and submission.access_token() == access_token
-    if not key_matched: key_matched = submission.access_key == access_token # backwards-compat
-    return key_matched or has_role(user, "Secretariat")
+def access_token_is_valid(submission: Submission, access_token: str):
+    """Check whether access_token is valid for submission, in constant time"""
+    token_matched = compare_digest(submission.access_token(), access_token)
+    # also compare key directly for backwards compatibility
+    key_matched = compare_digest(submission.access_key, access_token)
+    return token_matched or key_matched
+
+
+def auth_token_is_valid(submission: Submission, auth_token: str):
+    """Check whether auth_token is valid for submission, in constant time"""
+    auth_key = submission.auth_key
+    if not auth_key:
+        # Make the same calls as the other branch to keep constant time, then
+        # return False because there is no auth key
+        compare_digest(generate_access_token("fake"), auth_token)
+        compare_digest("fake", auth_token)
+        return False
+    else:
+        token_matched = compare_digest(generate_access_token(auth_key), auth_token)
+        # also compare key directly for backwards compatibility
+        key_matched = compare_digest(auth_key, auth_token)
+        return token_matched or key_matched
+
+
+def can_edit_submission(user, submission: Submission, access_token: str | None):
+    if  has_role(user, "Secretariat"):
+        return True
+    elif not access_token:
+        return False
+    return access_token_is_valid(submission, access_token)
+
 
 def submission_status(request, submission_id, access_token=None):
     # type: (HttpRequest, str, Optional[str]) -> HttpResponse
     submission = get_object_or_404(Submission, pk=submission_id)
 
-    key_matched = access_token and submission.access_token() == access_token
-    if not key_matched: key_matched = submission.access_key == access_token # backwards-compat
-    if access_token and not key_matched:
-        raise Http404
+    if access_token:
+        key_matched = access_token_is_valid(submission, access_token)
+        if not key_matched:
+            raise Http404
+    else:
+        key_matched = False
 
     if submission.state.slug == "cancel":
         errors = {}
@@ -621,8 +651,7 @@ def edit_submission(request, submission_id, access_token=None):
 def confirm_submission(request, submission_id, auth_token):
     submission = get_object_or_404(Submission, pk=submission_id)
 
-    key_matched = submission.auth_key and auth_token == generate_access_token(submission.auth_key)
-    if not key_matched: key_matched = auth_token == submission.auth_key # backwards-compat
+    key_matched = submission.auth_key and auth_token_is_valid(submission, auth_token)
 
     if request.method == 'POST' and submission.state_id in ("auth", "aut-appr") and key_matched:
         # Set a temporary state 'confirmed' to avoid entering this code

From 4be83ce312dde9b434f86cff928daf5882809239 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 19 Sep 2025 11:58:49 -0500
Subject: [PATCH 450/707] fix: remove deprecated iesg docs view, link from ad
 dashboard to ad view of working groups (#9563)

* fix: remove deprecated iesg docs view

* fix: link from ad dashboard to ad view of working groups
---
 ietf/doc/tests.py                             | 11 ---
 ietf/doc/urls.py                              |  4 +-
 ietf/doc/views_search.py                      | 27 +-----
 ietf/templates/doc/ad_list.html               |  5 +-
 .../templates/doc/drafts_in_iesg_process.html | 83 -------------------
 5 files changed, 7 insertions(+), 123 deletions(-)
 delete mode 100644 ietf/templates/doc/drafts_in_iesg_process.html

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index fa8c7fa4fc..16dcfb7754 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -449,17 +449,6 @@ def test_drafts_in_last_call(self):
         self.assertContains(r, draft.title)
         self.assertContains(r, escape(draft.action_holders.first().name))
 
-    def test_in_iesg_process(self):
-        doc_in_process = IndividualDraftFactory()
-        doc_in_process.action_holders.set([PersonFactory()])
-        doc_in_process.set_state(State.objects.get(type='draft-iesg', slug='lc'))
-        doc_not_in_process = IndividualDraftFactory()
-        r = self.client.get(urlreverse('ietf.doc.views_search.drafts_in_iesg_process'))
-        self.assertEqual(r.status_code, 200)
-        self.assertContains(r, doc_in_process.title)
-        self.assertContains(r, escape(doc_in_process.action_holders.first().name))
-        self.assertNotContains(r, doc_not_in_process.title)
-        
     def test_indexes(self):
         draft = IndividualDraftFactory()
         rfc = WgRfcFactory()
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 6f1b698a9f..7b444782d7 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -53,13 +53,13 @@
     url(r'^ad/?$', views_search.ad_workload),
     url(r'^ad/(?P<name>[^/]+)/?$', views_search.docs_for_ad),
     url(r'^ad2/(?P<name>[\w.-]+)/$', RedirectView.as_view(url='/doc/ad/%(name)s/', permanent=True)),
-    url(r'^for_iesg/?$', views_search.docs_for_iesg),
+    url(r'^for_iesg/?$', RedirectView.as_view(pattern_name='ietf.doc.views_search.docs_for_iesg', permanent=False)),
     url(r'^rfc-status-changes/?$', views_status_change.rfc_status_changes),
     url(r'^start-rfc-status-change/(?:%(name)s/)?$' % settings.URL_REGEXPS, views_status_change.start_rfc_status_change),
     url(r'^bof-requests/?$', views_bofreq.bof_requests),
     url(r'^bof-requests/new/$', views_bofreq.new_bof_request),
     url(r'^statement/new/$', views_statement.new_statement),
-    url(r'^iesg/?$', views_search.drafts_in_iesg_process),
+    url(r'^iesg/?$', views_search.docs_for_iesg),
     url(r'^email-aliases/?$', views_doc.email_aliases),
     url(r'^downref/?$', views_downref.downref_registry),
     url(r'^downref/add/?$', views_downref.downref_registry_add),
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 67ff0c2f21..2144c23e06 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -59,7 +59,7 @@
 import debug                            # pyflakes:ignore
 
 from ietf.doc.models import ( Document, DocHistory, State,
-    LastCallDocEvent, NewRevisionDocEvent, IESG_SUBSTATE_TAGS,
+    NewRevisionDocEvent, IESG_SUBSTATE_TAGS,
     IESG_BALLOT_ACTIVE_STATES, IESG_STATCHG_CONFLREV_ACTIVE_STATES,
     IESG_CHARTER_ACTIVE_STATES )
 from ietf.doc.fields import select2_id_doc_name_json
@@ -849,31 +849,6 @@ def drafts_in_last_call(request):
         'form':form, 'docs':results, 'meta':meta, 'pages':pages
     })
 
-def drafts_in_iesg_process(request):
-    states = State.objects.filter(type="draft-iesg").exclude(slug__in=('idexists', 'pub', 'dead', 'rfcqueue'))
-    title = "Documents in IESG process"
-
-    grouped_docs = []
-
-    for s in states.order_by("order"):
-        docs = Document.objects.filter(type="draft", states=s).distinct().order_by("time").select_related("ad", "group", "group__parent")
-        if docs:
-            if s.slug == "lc":
-                for d in docs:
-                    e = d.latest_event(LastCallDocEvent, type="sent_last_call")
-                    # If we don't have an event, use an arbitrary date in the past (but not datetime.datetime.min,
-                    # which causes problems with timezone conversions)
-                    d.lc_expires = e.expires if e else datetime.datetime(1950, 1, 1)
-                docs = list(docs)
-                docs.sort(key=lambda d: d.lc_expires)
-
-            grouped_docs.append((s, docs))
-
-    return render(request, 'doc/drafts_in_iesg_process.html', {
-            "grouped_docs": grouped_docs,
-            "title": title,
-            })
-
 def recent_drafts(request, days=7):
     slowcache = caches['slowpages']
     cache_key = f'recentdraftsview{days}'
diff --git a/ietf/templates/doc/ad_list.html b/ietf/templates/doc/ad_list.html
index 7f7e95a873..cac709021e 100644
--- a/ietf/templates/doc/ad_list.html
+++ b/ietf/templates/doc/ad_list.html
@@ -33,7 +33,10 @@ <h1>IESG Dashboard</h1>
         are only shown to logged-in Area Directors.
     </div>
     {% endif %}
-    <p><a href="{% url 'ietf.doc.views_search.docs_for_iesg' %}">Documents in IESG Processing</a></p>
+    <p>
+        <a class="btn btn-primary" href="{% url 'ietf.doc.views_search.docs_for_iesg' %}">Documents in IESG Processing</a>
+        <a class="btn btn-primary" href="{% url 'ietf.iesg.views.working_groups' %}">IESG view of Working Groups</a>
+    </p>
     {% for dt in metadata %}
         <h2 class="mt-5" id="{{ dt.type.0 }}">{{ dt.type.1 }} State Counts</h2>
         <table class="table table-sm table-striped table-bordered tablesorter navskip">
diff --git a/ietf/templates/doc/drafts_in_iesg_process.html b/ietf/templates/doc/drafts_in_iesg_process.html
deleted file mode 100644
index d9b09e984e..0000000000
--- a/ietf/templates/doc/drafts_in_iesg_process.html
+++ /dev/null
@@ -1,83 +0,0 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% load ietf_filters static %}
-{% load textfilters person_filters %}
-{% block pagehead %}
-    <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
-{% endblock %}
-{% block title %}{{ title }}{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>{{ title }}</h1>
-    <h2><i class="bi bi-exclamation-triangle"></i>This view is deprecated, and will soon redirect to a <a href="{% url 'ietf.doc.views_search.docs_for_iesg' %}">different representation</a></h2>
-    <table class="table table-sm table-striped tablesorter">
-        <thead>
-            <tr>
-                <th scope="col" data-sort="area">Area</th>
-                <th scope="col" data-sort="date">
-                    {% if state.slug == "lc" %}
-                        Expires at
-                    {% else %}
-                        Date
-                    {% endif %}
-                </th>
-                <th scope="col" data-sort="doc">Document</th>
-                <th scope="col" data-sort="level">Intended level</th>
-                <th scope="col" data-sort="ad">AD</th>
-            </tr>
-        </thead>
-        {% for state, docs in grouped_docs %}
-            <tbody>
-                <tr class="table-info">
-                    <th scope="col" colspan="5">{{ state.name }}</th>
-                </tr>
-            </tbody>
-            <tbody>
-                {% for doc in docs %}
-                    <tr>
-                        <td>
-                            {% if doc.area_acronym %}
-                                <a href="{% url "ietf.group.views.group_home" acronym=doc.area_acronym %}">{{ doc.area_acronym }}</a>
-                            {% endif %}
-                        </td>
-                        <td>
-                            {% if state.slug == "lc" %}
-                                {% if doc.lc_expires %}{{ doc.lc_expires|date:"Y-m-d" }}{% endif %}
-                            {% else %}
-                                {{ doc.time|date:"Y-m-d" }}
-                            {% endif %}
-                        </td>
-                        <td>
-                            <a href="{% url "ietf.doc.views_doc.document_main" doc.name %}">{{ doc.name }}</a>
-                            <br>
-                            <b>{{ doc.title }}</b>
-                            {% if doc.action_holders_enabled and doc.action_holders.exists %}
-                                <br>
-                                Action holder{{ doc.documentactionholder_set.all|pluralize }}:
-                                {% for action_holder in doc.documentactionholder_set.all %}
-                                    {% person_link action_holder.person title=action_holder.role_for_doc %}{% if action_holder|action_holder_badge %} {{ action_holder|action_holder_badge }}{% endif %}{% if not forloop.last %},{% endif %}
-                                {% endfor %}
-                            {% endif %}
-                            {% if doc.note %}
-                                <br>
-                                <i>Note: {{ doc.note|urlize_ietf_docs|linkify|linebreaksbr }}</i>
-                            {% endif %}
-                        </td>
-                        <td>
-                            {% if doc.intended_std_level %}
-                                {{ doc.intended_std_level.name }}
-                            {% else %}
-                                <span class="text-body-secondary">(None)</span>
-                            {% endif %}
-                        </td>
-                        <td>{% person_link doc.ad %}</td>
-                    </tr>
-                {% endfor %}
-            </tbody>
-        {% endfor %}
-    </table>
-{% endblock %}
-{% block js %}
-    <script src="{% static "ietf/js/list.js" %}"></script>
-{% endblock %}
\ No newline at end of file

From 5e1f46d05cc23faa95b741f9133f40fe58c1cd46 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Mon, 29 Sep 2025 15:47:23 +0200
Subject: [PATCH 451/707] feat: Distinguish I-Ds on WG plate from I-Ds on IESG
 plate (#9214)

* Add "Outside of the WG Internet-Draft" when IESG state != idexists

* No plural forms in the dividers

* Use different search_heading

* Use the right stream_id

* Adding tests_info coverage for prepare_group_documents

* fix: move identifying and sorting doxs with IESG into search utility.

* fix: improve ordering conditional

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/doc/utils_search.py |  9 ++++++++-
 ietf/group/tests_info.py | 22 +++++++++++++++++++++-
 ietf/group/views.py      |  1 -
 3 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/ietf/doc/utils_search.py b/ietf/doc/utils_search.py
index cfc8a872f8..a5f461f9bb 100644
--- a/ietf/doc/utils_search.py
+++ b/ietf/doc/utils_search.py
@@ -108,7 +108,10 @@ def fill_in_document_table_attributes(docs, have_telechat_date=False):
                 d.search_heading = "Withdrawn Internet-Draft"
                 d.expirable = False
             else:
-                d.search_heading = "%s Internet-Draft" % d.get_state()
+                if d.type_id == "draft" and d.stream_id == 'ietf' and d.get_state_slug('draft-iesg') != 'idexists': # values can be: ad-eval idexists approved rfcqueue dead iesg-eva
+                    d.search_heading = "%s with the IESG Internet-Draft" % d.get_state()
+                else:
+                    d.search_heading = "%s Internet-Draft" % d.get_state()
                 if state_slug == "active":
                     d.expirable = d.pk in expirable_pks
                 else:
@@ -221,6 +224,10 @@ def num(i):
 
         if d.type_id == "draft":
             res.append(num(["Active", "Expired", "Replaced", "Withdrawn", "RFC"].index(d.search_heading.split()[0])))
+            if "with the IESG" in d.search_heading:
+                res.append("1")
+            else:
+                res.append("0")
         else:
             res.append(d.type_id);
             res.append("-");
diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index eb85860ece..34f8500854 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -27,7 +27,7 @@
 
 from ietf.community.models import CommunityList
 from ietf.community.utils import reset_name_contains_index_for_rule
-from ietf.doc.factories import WgDraftFactory, IndividualDraftFactory, CharterFactory, BallotDocEventFactory
+from ietf.doc.factories import WgDraftFactory, RgDraftFactory, IndividualDraftFactory, CharterFactory, BallotDocEventFactory
 from ietf.doc.models import Document, DocEvent, State
 from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils_charter import charter_name_for_group
@@ -413,6 +413,7 @@ def test_group_documents(self):
             self.assertContains(r, draft3.name)
             for ah in draft3.action_holders.all():
                 self.assertContains(r, escape(ah.name))
+            self.assertContains(r, "Active with the IESG Internet-Draft") # draft3 is pub-req hence should have such a divider
             self.assertContains(r, 'for 173 days', count=1)  # the old_dah should be tagged
             self.assertContains(r, draft4.name)
             self.assertNotContains(r, draft5.name)
@@ -425,6 +426,25 @@ def test_group_documents(self):
         q = PyQuery(r.content)
         self.assertTrue(any([draft2.name in x.attrib['href'] for x in q('table td a.track-untrack-doc')]))
 
+        # Let's also check the IRTF stream
+        rg = GroupFactory(type_id='rg')
+        setup_default_community_list_for_group(rg)
+        rgDraft = RgDraftFactory(group=rg)
+        rgDraft4 = RgDraftFactory(group=rg)
+        rgDraft4.set_state(State.objects.get(slug='irsg-w'))
+        rgDraft7 = RgDraftFactory(group=rg)
+        rgDraft7.set_state(State.objects.get(type='draft-stream-%s' % rgDraft7.stream_id, slug='dead'))
+        for url in group_urlreverse_list(rg, 'ietf.group.views.group_documents'):
+            with self.settings(DOC_ACTION_HOLDER_MAX_AGE_DAYS=20):
+                r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            self.assertContains(r, rgDraft.name)
+            self.assertContains(r, rg.name)
+            self.assertContains(r, rg.acronym)
+            self.assertNotContains(r, draft3.name) # As draft3 is a WG draft, it should not be listed here
+            self.assertContains(r, rgDraft4.name)
+            self.assertNotContains(r, rgDraft7.name)
+
         # test the txt version too while we're at it
         for url in group_urlreverse_list(group, 'ietf.group.views.group_documents_txt'):
             r = self.client.get(url)
diff --git a/ietf/group/views.py b/ietf/group/views.py
index bc785ff81e..efe3eca15d 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -443,7 +443,6 @@ def prepare_group_documents(request, group, clist):
 
     return docs, meta, docs_related, meta_related
 
-
 def get_leadership(group_type):
     people = Person.objects.filter(
         role__name__slug="chair",

From ba8b73190df413c39deaa6b546ad2bc5405fd86c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 30 Sep 2025 13:40:33 -0300
Subject: [PATCH 452/707] ci: DB persistence for blobdb, too

---
 k8s/settings_local.py | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index c1436e158b..c09bd70c86 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -114,15 +114,17 @@ def _multiline_to_list(s):
 
 # Configure persistent connections. A setting of 0 is Django's default.
 _conn_max_age = os.environ.get("DATATRACKER_DB_CONN_MAX_AGE", "0")
-# A string "none" means unlimited age.
-DATABASES["default"]["CONN_MAX_AGE"] = (
-    None if _conn_max_age.lower() == "none" else int(_conn_max_age)
-)
+for dbname in ["default", "blobdb"]:
+    # A string "none" means unlimited age.
+    DATABASES[dbname]["CONN_MAX_AGE"] = (
+        None if _conn_max_age.lower() == "none" else int(_conn_max_age)
+    )
 # Enable connection health checks if DATATRACKER_DB_CONN_HEALTH_CHECK is the string "true"
 _conn_health_checks = bool(
     os.environ.get("DATATRACKER_DB_CONN_HEALTH_CHECKS", "false").lower() == "true"
 )
-DATABASES["default"]["CONN_HEALTH_CHECKS"] = _conn_health_checks
+for dbname in ["default", "blobdb"]:
+    DATABASES[dbname]["CONN_HEALTH_CHECKS"] = _conn_health_checks
 
 # DATATRACKER_ADMINS is a newline-delimited list of addresses parseable by email.utils.parseaddr
 _admins_str = os.environ.get("DATATRACKER_ADMINS", None)

From d1cbdcb2afca5987706165a1928fece3da25a5ee Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 7 Oct 2025 14:54:08 -0300
Subject: [PATCH 453/707] chore: fix docker-compose comment (#9679)

Allows the commented-out options to work if uncommented.
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 100119c464..8c6e0ea486 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -36,7 +36,7 @@ services:
     db:
         image: ghcr.io/ietf-tools/datatracker-db:latest
         #  build:
-        #      context: ..
+        #      context: .
         #      dockerfile: docker/db.Dockerfile
         restart: unless-stopped
         volumes:

From a8e8b9e95bedececcda0f54bedbe4de8f69d90a2 Mon Sep 17 00:00:00 2001
From: Absit Iniuria <absniuria@nours.page>
Date: Tue, 7 Oct 2025 19:02:37 +0100
Subject: [PATCH 454/707] feat: split liaison_statement_posted mailtrigger into
 outgoing and incoming (#9553)

* fix: add new fixtures and mt slugs

* fix: edit mt reverse func

* chore: edit multiline and hash comments

* fix: adjust migration

* chore: remove stray whitespace

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/liaisons/mails.py                        |  5 +-
 ietf/liaisons/tests.py                        | 39 +++++-----
 ietf/liaisons/views.py                        | 76 ++-----------------
 ..._statement_incoming_and_outgoing_posted.py | 72 ++++++++++++++++++
 ietf/mailtrigger/utils.py                     | 71 +++++++++++++++++
 ietf/name/fixtures/names.json                 | 45 ++++++++++-
 6 files changed, 217 insertions(+), 91 deletions(-)
 create mode 100644 ietf/mailtrigger/migrations/0008_liaison_statement_incoming_and_outgoing_posted.py

diff --git a/ietf/liaisons/mails.py b/ietf/liaisons/mails.py
index 8708c8a078..878aada576 100644
--- a/ietf/liaisons/mails.py
+++ b/ietf/liaisons/mails.py
@@ -14,7 +14,10 @@
 def send_liaison_by_email(request, liaison):
     subject = 'New Liaison Statement, "%s"' % (liaison.title)
     from_email = settings.LIAISON_UNIVERSAL_FROM
-    (to_email, cc) = gather_address_lists('liaison_statement_posted',liaison=liaison)
+    if liaison.is_outgoing():
+        (to_email, cc) = gather_address_lists('liaison_statement_posted_outgoing',liaison=liaison)
+    else:
+        (to_email, cc) = gather_address_lists('liaison_statement_posted_incoming',liaison=liaison)
     bcc = ['statements@ietf.org']
     body = render_to_string('liaisons/liaison_mail.txt', dict(liaison=liaison))
 
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index fd1c22be77..5478f6c302 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -112,61 +112,61 @@ def test_help_pages(self):
 
 
 class UnitTests(TestCase):
-    def test_get_cc(self):
-        from ietf.liaisons.views import get_cc,EMAIL_ALIASES
+    def test_get_contacts_for_liaison_messages_for_group_primary(self):
+        from ietf.mailtrigger.utils import get_contacts_for_liaison_messages_for_group_primary,EMAIL_ALIASES
 
         # test IETF
-        cc = get_cc(Group.objects.get(acronym='ietf'))
+        cc = get_contacts_for_liaison_messages_for_group_primary(Group.objects.get(acronym='ietf'))
         self.assertTrue(EMAIL_ALIASES['IESG'] in cc)
         self.assertTrue(EMAIL_ALIASES['IETFCHAIR'] in cc)
         # test IAB
-        cc = get_cc(Group.objects.get(acronym='iab'))
+        cc = get_contacts_for_liaison_messages_for_group_primary(Group.objects.get(acronym='iab'))
         self.assertTrue(EMAIL_ALIASES['IAB'] in cc)
         self.assertTrue(EMAIL_ALIASES['IABCHAIR'] in cc)
         # test an Area
         area = Group.objects.filter(type='area').first()
-        cc = get_cc(area)
+        cc = get_contacts_for_liaison_messages_for_group_primary(area)
         self.assertTrue(EMAIL_ALIASES['IETFCHAIR'] in cc)
         self.assertTrue(contacts_from_roles([area.ad_role()]) in cc)
         # test a Working Group
         wg = Group.objects.filter(type='wg').first()
-        cc = get_cc(wg)
+        cc = get_contacts_for_liaison_messages_for_group_primary(wg)
         self.assertTrue(contacts_from_roles([wg.parent.ad_role()]) in cc)
         self.assertTrue(contacts_from_roles([wg.get_chair()]) in cc)
         # test an SDO
         sdo = RoleFactory(name_id='liaiman',group__type_id='sdo',).group
-        cc = get_cc(sdo)
+        cc = get_contacts_for_liaison_messages_for_group_primary(sdo)
         self.assertTrue(contacts_from_roles([sdo.role_set.filter(name='liaiman').first()]) in cc)
         # test a cc_contact role
         cc_contact_role = RoleFactory(name_id='liaison_cc_contact', group=sdo)
-        cc = get_cc(sdo)
+        cc = get_contacts_for_liaison_messages_for_group_primary(sdo)
         self.assertIn(contact_email_from_role(cc_contact_role), cc)
 
-    def test_get_contacts_for_group(self):
-        from ietf.liaisons.views import get_contacts_for_group, EMAIL_ALIASES
+    def test_get_contacts_for_liaison_messages_for_group_secondary(self):
+        from ietf.mailtrigger.utils import get_contacts_for_liaison_messages_for_group_secondary,EMAIL_ALIASES
 
-        # test explicit
+        # test explicit group contacts
         sdo = GroupFactory(type_id='sdo')
         contact_email = RoleFactory(name_id='liaison_contact', group=sdo).email.address
-        contacts = get_contacts_for_group(sdo)
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(sdo)
         self.assertIsNotNone(contact_email)
         self.assertIn(contact_email, contacts)
         # test area
         area = Group.objects.filter(type='area').first()
-        contacts = get_contacts_for_group(area)
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(area)
         self.assertTrue(area.ad_role().email.address in contacts)
         # test wg
         wg = Group.objects.filter(type='wg').first()
-        contacts = get_contacts_for_group(wg)
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(wg)
         self.assertTrue(wg.get_chair().email.address in contacts)
         # test ietf
-        contacts = get_contacts_for_group(Group.objects.get(acronym='ietf'))
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(Group.objects.get(acronym='ietf'))
         self.assertTrue(EMAIL_ALIASES['IETFCHAIR'] in contacts)
         # test iab
-        contacts = get_contacts_for_group(Group.objects.get(acronym='iab'))
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(Group.objects.get(acronym='iab'))
         self.assertTrue(EMAIL_ALIASES['IABCHAIR'] in contacts)
         # test iesg
-        contacts = get_contacts_for_group(Group.objects.get(acronym='iesg'))
+        contacts = get_contacts_for_liaison_messages_for_group_secondary(Group.objects.get(acronym='iesg'))
         self.assertTrue(EMAIL_ALIASES['IESG'] in contacts)
 
     def test_needs_approval(self):
@@ -786,8 +786,11 @@ def test_add_incoming_liaison(self):
         self.assertTrue("Liaison Statement" in outbox[-1]["Subject"])
     
         self.assertTrue('to_contacts@' in outbox[-1]['To'])
+        self.assertTrue(submitter.email_address(), outbox[-1]['To'])
         self.assertTrue('cc@' in outbox[-1]['Cc'])
 
+
+
     def test_add_outgoing_liaison(self):
         RoleFactory(name_id='liaiman',group__type_id='sdo', person__user__username='ulm-liaiman')
         wg = RoleFactory(name_id='chair',person__user__username='marschairman',group__acronym='mars').group
@@ -867,6 +870,8 @@ def test_add_outgoing_liaison(self):
         self.assertEqual(len(outbox), mailbox_before + 1)
         self.assertTrue("Liaison Statement" in outbox[-1]["Subject"])
         self.assertTrue('aread@' in outbox[-1]['To'])
+        self.assertTrue(submitter.email_address(), outbox[-1]['Cc'])
+        
 
     def test_add_outgoing_liaison_unapproved_post_only(self):
         RoleFactory(name_id='liaiman',group__type_id='sdo', person__user__username='ulm-liaiman')
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index 6a6f579714..f54a023357 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -27,14 +27,6 @@
 from ietf.name.models import LiaisonStatementTagName
 from ietf.utils.response import permission_denied
 
-EMAIL_ALIASES = {
-    "IETFCHAIR": "The IETF Chair <chair@ietf.org>",
-    "IESG": "The IESG <iesg@ietf.org>",
-    "IAB": "The IAB <iab@iab.org>",
-    "IABCHAIR": "The IAB Chair <iab-chair@iab.org>",
-}
-
-
 # -------------------------------------------------
 # Helper Functions
 # -------------------------------------------------
@@ -94,64 +86,6 @@ def contacts_from_roles(roles):
     emails = [ contact_email_from_role(r) for r in roles ]
     return ','.join(emails)
 
-def get_cc(group):
-    '''Returns list of emails to use as CC for group.  Simplified refactor of IETFHierarchy
-    get_cc() and get_from_cc()
-    '''
-    emails = []
-
-    # role based CCs
-    if group.acronym in ('ietf','iesg'):
-        emails.append(EMAIL_ALIASES['IESG'])
-        emails.append(EMAIL_ALIASES['IETFCHAIR'])
-    elif group.acronym in ('iab'):
-        emails.append(EMAIL_ALIASES['IAB'])
-        emails.append(EMAIL_ALIASES['IABCHAIR'])
-    elif group.type_id == 'area':
-        emails.append(EMAIL_ALIASES['IETFCHAIR'])
-        ad_roles = group.role_set.filter(name='ad')
-        emails.extend([ contact_email_from_role(r) for r in ad_roles ])
-    elif group.type_id == 'wg':
-        ad_roles = group.parent.role_set.filter(name='ad')
-        emails.extend([ contact_email_from_role(r) for r in ad_roles ])
-        chair_roles = group.role_set.filter(name='chair')
-        emails.extend([ contact_email_from_role(r) for r in chair_roles ])
-        if group.list_email:
-            emails.append('{} Discussion List <{}>'.format(group.name,group.list_email))
-    elif group.type_id == 'sdo':
-        liaiman_roles = group.role_set.filter(name='liaiman')
-        emails.extend([ contact_email_from_role(r) for r in liaiman_roles ])
-
-    # explicit CCs
-    liaison_cc_roles = group.role_set.filter(name='liaison_cc_contact')
-    emails.extend([ contact_email_from_role(r) for r in liaison_cc_roles ])
-
-    return emails
-
-def get_contacts_for_group(group):
-    '''Returns default contacts for groups as a comma separated string'''
-    # use explicit default contacts if defined
-    explicit_contacts = contacts_from_roles(group.role_set.filter(name='liaison_contact'))
-    if explicit_contacts:
-        return explicit_contacts
-
-    # otherwise construct based on group type
-    contacts = []
-    if group.type_id == 'area':
-        roles = group.role_set.filter(name='ad')
-        contacts.append(contacts_from_roles(roles))
-    elif group.type_id == 'wg':
-        roles = group.role_set.filter(name='chair')
-        contacts.append(contacts_from_roles(roles))
-    elif group.acronym == 'ietf':
-        contacts.append(EMAIL_ALIASES['IETFCHAIR'])
-    elif group.acronym == 'iab':
-        contacts.append(EMAIL_ALIASES['IABCHAIR'])
-    elif group.acronym == 'iesg':
-        contacts.append(EMAIL_ALIASES['IESG'])
-
-    return ','.join(contacts)
-
 def get_details_tabs(stmt, selected):
     return [
         t + (t[0].lower() == selected.lower(),)
@@ -207,6 +141,8 @@ def post_only(group,person):
 # -------------------------------------------------
 @can_submit_liaison_required
 def ajax_get_liaison_info(request):
+    from ietf.mailtrigger.utils import get_contacts_for_liaison_messages_for_group_primary,get_contacts_for_liaison_messages_for_group_secondary
+
     '''Returns dictionary of info to update entry form given the groups
     that have been selected
     '''
@@ -229,14 +165,14 @@ def ajax_get_liaison_info(request):
     result = {'response_contacts':[],'to_contacts': [], 'cc': [], 'needs_approval': False, 'post_only': False, 'full_list': []}
 
     for group in from_groups:
-        cc.extend(get_cc(group))
+        cc.extend(get_contacts_for_liaison_messages_for_group_primary(group))
         does_need_approval.append(needs_approval(group,person))
         can_post_only.append(post_only(group,person))
-        response_contacts.append(get_contacts_for_group(group))
+        response_contacts.append(get_contacts_for_liaison_messages_for_group_secondary(group))
 
     for group in to_groups:
-        cc.extend(get_cc(group))
-        to_contacts.append(get_contacts_for_group(group))
+        cc.extend(get_contacts_for_liaison_messages_for_group_primary(group))
+        to_contacts.append(get_contacts_for_liaison_messages_for_group_secondary(group))
 
     # if there are from_groups and any need approval
     if does_need_approval:
diff --git a/ietf/mailtrigger/migrations/0008_liaison_statement_incoming_and_outgoing_posted.py b/ietf/mailtrigger/migrations/0008_liaison_statement_incoming_and_outgoing_posted.py
new file mode 100644
index 0000000000..189a783a2e
--- /dev/null
+++ b/ietf/mailtrigger/migrations/0008_liaison_statement_incoming_and_outgoing_posted.py
@@ -0,0 +1,72 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    Mailtrigger = apps.get_model("mailtrigger", "MailTrigger")
+    Recipient = apps.get_model("mailtrigger", "Recipient")
+    recipients_to = Recipient.objects.get(pk="liaison_to_contacts")
+    recipients_cc = list(
+        Recipient.objects.filter(
+            slug__in=(
+                "liaison_cc",
+                "liaison_coordinators",
+                "liaison_response_contacts",
+                "liaison_technical_contacts",
+            )
+        )
+    )
+    recipient_from = Recipient.objects.get(pk="liaison_from_contact")
+
+    liaison_posted_outgoing = Mailtrigger.objects.create(
+        slug="liaison_statement_posted_outgoing",
+        desc="Recipients for a message when a new outgoing liaison statement is posted",
+    )
+    liaison_posted_outgoing.to.add(recipients_to)
+    liaison_posted_outgoing.cc.add(*recipients_cc)
+    liaison_posted_outgoing.cc.add(recipient_from)
+
+    liaison_posted_incoming = Mailtrigger.objects.create(
+        slug="liaison_statement_posted_incoming",
+        desc="Recipients for a message when a new incoming liaison statement is posted",
+    )
+    liaison_posted_incoming.to.add(recipients_to)
+    liaison_posted_incoming.cc.add(*recipients_cc)
+
+    Mailtrigger.objects.filter(slug=("liaison_statement_posted")).delete()
+
+
+def reverse(apps, schema_editor):
+    Mailtrigger = apps.get_model("mailtrigger", "MailTrigger")
+    Recipient = apps.get_model("mailtrigger", "Recipient")
+
+    Mailtrigger.objects.filter(
+        slug__in=(
+            "liaison_statement_posted_outgoing",
+            "liaison_statement_posted_incoming",
+        )
+    ).delete()
+
+    liaison_statement_posted = Mailtrigger.objects.create(
+        slug="liaison_statement_posted",
+        desc="Recipients for a message when a new liaison statement is posted",
+    )
+
+    liaison_to_contacts = Recipient.objects.get(slug="liaison_to_contacts")
+    recipients_ccs = Recipient.objects.filter(
+        slug__in=(
+            "liaison_cc",
+            "liaison_coordinators",
+            "liaison_response_contacts",
+            "liaison_technical_contacts",
+        )
+    )
+    liaison_statement_posted.to.add(liaison_to_contacts)
+    liaison_statement_posted.cc.add(*recipients_ccs)
+
+
+class Migration(migrations.Migration):
+    dependencies = [("mailtrigger", "0007_historicalrecipient_historicalmailtrigger")]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/mailtrigger/utils.py b/ietf/mailtrigger/utils.py
index 9915eae3fd..bcdaf5e44e 100644
--- a/ietf/mailtrigger/utils.py
+++ b/ietf/mailtrigger/utils.py
@@ -9,6 +9,14 @@
 from ietf.utils.mail import excludeaddrs
 
 
+EMAIL_ALIASES = {
+    "IETFCHAIR": "The IETF Chair <chair@ietf.org>",
+    "IESG": "The IESG <iesg@ietf.org>",
+    "IAB": "The IAB <iab@iab.org>",
+    "IABCHAIR": "The IAB Chair <iab-chair@iab.org>",
+}
+
+
 class AddrLists(namedtuple("AddrLists", ["to", "cc"])):
     __slots__ = ()
 
@@ -66,6 +74,69 @@ def get_mailtrigger(slug, create_from_slug_if_not_exists, desc_if_not_exists):
     return mailtrigger
 
 
+def get_contacts_for_liaison_messages_for_group_primary(group):
+    from ietf.liaisons.views import contact_email_from_role
+
+    '''Returns list of emails to use in liaison message for group
+    '''
+    emails = []
+
+    # role based emails
+    if group.acronym in ('ietf','iesg'):
+        emails.append(EMAIL_ALIASES['IESG'])
+        emails.append(EMAIL_ALIASES['IETFCHAIR'])
+    elif group.acronym in ('iab'):
+        emails.append(EMAIL_ALIASES['IAB'])
+        emails.append(EMAIL_ALIASES['IABCHAIR'])
+    elif group.type_id == 'area':
+        emails.append(EMAIL_ALIASES['IETFCHAIR'])
+        ad_roles = group.role_set.filter(name='ad')
+        emails.extend([ contact_email_from_role(r) for r in ad_roles ])
+    elif group.type_id == 'wg':
+        ad_roles = group.parent.role_set.filter(name='ad')
+        emails.extend([ contact_email_from_role(r) for r in ad_roles ])
+        chair_roles = group.role_set.filter(name='chair')
+        emails.extend([ contact_email_from_role(r) for r in chair_roles ])
+        if group.list_email:
+            emails.append('{} Discussion List <{}>'.format(group.name,group.list_email))
+    elif group.type_id == 'sdo':
+        liaiman_roles = group.role_set.filter(name='liaiman')
+        emails.extend([ contact_email_from_role(r) for r in liaiman_roles ])
+
+    # explicit CCs
+    liaison_cc_roles = group.role_set.filter(name='liaison_cc_contact')
+    emails.extend([ contact_email_from_role(r) for r in liaison_cc_roles ])
+
+    return emails
+
+
+def get_contacts_for_liaison_messages_for_group_secondary(group):
+    from ietf.liaisons.views import contacts_from_roles
+
+    '''Returns default contacts for groups as a comma separated string'''
+    # use explicit default contacts if defined
+    explicit_contacts = contacts_from_roles(group.role_set.filter(name='liaison_contact'))
+    if explicit_contacts:
+        return explicit_contacts
+
+    # otherwise construct based on group type
+    contacts = []
+    if group.type_id == 'area':
+        roles = group.role_set.filter(name='ad')
+        contacts.append(contacts_from_roles(roles))
+    elif group.type_id == 'wg':
+        roles = group.role_set.filter(name='chair')
+        contacts.append(contacts_from_roles(roles))
+    elif group.acronym == 'ietf':
+        contacts.append(EMAIL_ALIASES['IETFCHAIR'])
+    elif group.acronym == 'iab':
+        contacts.append(EMAIL_ALIASES['IABCHAIR'])
+    elif group.acronym == 'iesg':
+        contacts.append(EMAIL_ALIASES['IESG'])
+
+    return ','.join(contacts)
+
+
 def gather_relevant_expansions(**kwargs):
     def starts_with(prefix):
         return MailTrigger.objects.filter(slug__startswith=prefix).values_list(
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index c94e15a459..58deb01f0c 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -2638,11 +2638,24 @@
       "order": 0,
       "slug": "historic",
       "type": "statement",
-      "used": true
+      "used": false
     },
     "model": "doc.state",
     "pk": 182
   },
+  {
+    "fields": {
+      "desc": "The statement is no longer active",
+      "name": "Inactive",
+      "next_states": [],
+      "order": 0,
+      "slug": "inactive",
+      "type": "statement",
+      "used": true
+    },
+    "model": "doc.state",
+    "pk": 183
+  },
   {
     "fields": {
       "label": "State"
@@ -5520,13 +5533,31 @@
         "liaison_response_contacts",
         "liaison_technical_contacts"
       ],
-      "desc": "Recipient for a message when a new liaison statement is posted",
+      "desc": "Recipients for a message when a new incoming liaison statement is posted",
       "to": [
+        "liaison_from_contact",
         "liaison_to_contacts"
       ]
     },
     "model": "mailtrigger.mailtrigger",
-    "pk": "liaison_statement_posted"
+    "pk": "liaison_statement_posted_incoming"
+  },
+  {
+    "fields": {
+      "cc": [
+        "liaison_cc",
+        "liaison_coordinators",
+        "liaison_from_contact",
+        "liaison_response_contacts",
+        "liaison_technical_contacts"
+      ],
+      "desc": "Recipients for a message when a new outgoing liaison statement is posted",
+      "to": [
+        "liaison_to_contacts"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "liaison_statement_posted_outgoing"
   },
   {
     "fields": {
@@ -7068,6 +7099,14 @@
     "model": "mailtrigger.recipient",
     "pk": "liaison_coordinators"
   },
+  {
+    "fields": {
+      "desc": "Email address of the formal sender of the statement",
+      "template": "{{liaison.from_contact}}"
+    },
+    "model": "mailtrigger.recipient",
+    "pk": "liaison_from_contact"
+  },
   {
     "fields": {
       "desc": "The assigned liaison manager for an external group ",

From 8fbbc55ec3cb87f528953da33e8c7194c2b75afd Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 7 Oct 2025 15:13:16 -0300
Subject: [PATCH 455/707] fix: keep day visible in timeslot editor (#9653)

---
 ietf/templates/meeting/timeslot_edit.html | 44 ++++++++++++-----------
 1 file changed, 24 insertions(+), 20 deletions(-)

diff --git a/ietf/templates/meeting/timeslot_edit.html b/ietf/templates/meeting/timeslot_edit.html
index 11691ba6dd..3259dba9da 100644
--- a/ietf/templates/meeting/timeslot_edit.html
+++ b/ietf/templates/meeting/timeslot_edit.html
@@ -11,20 +11,22 @@
     {% endcomment %}
     .timeslot-edit { overflow: auto; height: max(30rem, calc(100vh - 25rem));}
     .tstable { width: 100%; border-collapse: separate; } {# "separate" to ensure sticky cells keep their borders #}
-.tstable thead  { position: sticky; top: 0; z-index: 3; background-color: white;}
-.tstable th:first-child, .tstable td:first-child {
-    background-color: white; {# needs to match the lighter of the striped-table colors! #}
-position: sticky;
-left: 0;
-    z-index: 2; {# render above other cells / borders but below thead (z-index 3, above) #}
-}
-.tstable tbody > tr:nth-of-type(odd) > th:first-child {
-    background-color: rgb(249, 249, 249); {# needs to match the darker of the striped-table colors! #}
-}
-.tstable th { white-space: nowrap;}
-.tstable td { white-space: nowrap;}
-.capacity { font-size:80%; font-weight: normal;}
-a.new-timeslot-link { color: lightgray; font-size: large;}
+    .tstable tr th:first-child { min-width: 25rem; max-width: 25rem; overflow: hidden; } 
+    .tstable thead  { position: sticky; top: 0; z-index: 3; background-color: white;}
+    .tstable thead th span.day { position: sticky; left: 25.5rem; }
+    .tstable th:first-child, .tstable td:first-child {
+        background-color: white; {# needs to match the lighter of the striped-table colors! #}
+        position: sticky;
+        left: 0;
+        z-index: 2; {# render above other cells / borders but below thead (z-index 3, above) #}
+    }
+    .tstable tbody > tr:nth-of-type(odd) > th:first-child {
+        background-color: rgb(249, 249, 249); {# needs to match the darker of the striped-table colors! #}
+    }
+    .tstable th { white-space: nowrap;}
+    .tstable td { white-space: nowrap;}
+    .capacity { font-size:80%; font-weight: normal;}
+    a.new-timeslot-link { color: lightgray; font-size: large;}
 {% endblock %}
 {% block content %}
     {% origin %}
@@ -84,12 +86,14 @@ <h1>
                                 <th scope="col"></th>
                                 {% for day in time_slices %}
                                     <th scope="col" class="day-label" colspan="{{ date_slices|colWidth:day }}">
-                                        {{ day|date:'D' }} ({{ day }})
-                                        <i class="bi bi-trash delete-button"
-                                              title="Delete all on this day"
-                                              data-delete-scope="day"
-                                              data-date-id="{{ day.isoformat }}">
-                                        </i>
+                                        <span class="day">
+                                            {{ day|date:'D' }} ({{ day }})
+                                            <i class="bi bi-trash delete-button"
+                                               title="Delete all on this day"
+                                               data-delete-scope="day"
+                                               data-date-id="{{ day.isoformat }}">
+                                            </i>
+                                        </span>
                                     </th>
                                 {% endfor %}
                             {% endif %}

From 24101bb8ca85cfb3a5c47d7f9ed283cc6fb5bc0e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 9 Oct 2025 13:49:40 -0500
Subject: [PATCH 456/707] feat: json snapshots of ipr statements (#9684)

---
 ietf/ipr/tests.py | 57 +++++++++++++++++++++++++++++++++++++++++++++++
 ietf/ipr/urls.py  |  1 +
 ietf/ipr/utils.py | 24 ++++++++++++++++++--
 ietf/ipr/views.py |  7 +++++-
 4 files changed, 86 insertions(+), 3 deletions(-)

diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 74fa540126..4146fbd4c1 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -3,6 +3,7 @@
 
 
 import datetime
+import json
 from unittest import mock
 import re
 
@@ -15,6 +16,8 @@
 from django.urls import reverse as urlreverse
 from django.utils import timezone
 
+from django.db.models import Max
+
 import debug                            # pyflakes:ignore
 
 from ietf.api.views import EmailIngestionError
@@ -45,6 +48,7 @@
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.message.factories import MessageFactory
 from ietf.message.models import Message
+from ietf.person.factories import PersonFactory
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
 from ietf.utils.test_utils import TestCase, login_testing_unauthorized
 from ietf.utils.text import text_to_dict
@@ -1113,3 +1117,56 @@ def test_patent_details_required_unless_blanket(self):
             val = self.data.pop(pf)
             self.assertTrue(HolderIprDisclosureForm(data=self.data).is_valid())
             self.data[pf] = val
+
+class JsonSnapshotTests(TestCase):
+    def test_json_snapshot(self):
+        h = HolderIprDisclosureFactory()
+        url = urlreverse("ietf.ipr.views.json_snapshot", kwargs=dict(id=h.id))
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        dump = json.loads(r.content)
+        self.assertCountEqual(
+            [o["model"] for o in dump],
+            ["ipr.holderiprdisclosure", "ipr.iprdisclosurebase", "person.person"],
+        )
+        h.docs.add(WgRfcFactory())
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        dump = json.loads(r.content)
+        self.assertCountEqual(
+            [o["model"] for o in dump],
+            [
+                "ipr.holderiprdisclosure",
+                "ipr.iprdisclosurebase",
+                "ipr.iprdocrel",
+                "person.person",
+            ],
+        )
+        IprEventFactory(
+            disclosure=h,
+            message=MessageFactory(by=PersonFactory()),
+            in_reply_to=MessageFactory(),
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        dump = json.loads(r.content)
+        self.assertCountEqual(
+            [o["model"] for o in dump],
+            [
+                "ipr.holderiprdisclosure",
+                "ipr.iprdisclosurebase",
+                "ipr.iprdocrel",
+                "ipr.iprevent",
+                "message.message",
+                "message.message",
+                "person.person",
+                "person.person",
+                "person.person",
+                "person.person",
+            ],
+        )
+        no_such_ipr_id = IprDisclosureBase.objects.aggregate(Max("id"))["id__max"] + 1
+        url = urlreverse("ietf.ipr.views.json_snapshot", kwargs=dict(id=no_such_ipr_id))
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
diff --git a/ietf/ipr/urls.py b/ietf/ipr/urls.py
index 84ed04a66b..2c8a26c624 100644
--- a/ietf/ipr/urls.py
+++ b/ietf/ipr/urls.py
@@ -21,6 +21,7 @@
     url(r'^(?P<id>\d+)/notify/(?P<type>update|posted)/$', views.notify),
     url(r'^(?P<id>\d+)/post/$', views.post),
     url(r'^(?P<id>\d+)/state/$', views.state),
+    url(r'^(?P<id>\d+)/json-snapshot/$', views.json_snapshot),
     url(r'^update/$', RedirectView.as_view(url=reverse_lazy('ietf.ipr.views.showlist'), permanent=True)),
     url(r'^update/(?P<id>\d+)/$', views.update),
     url(r'^new-(?P<_type>(specific|generic|general|third-party))/$', views.new),
diff --git a/ietf/ipr/utils.py b/ietf/ipr/utils.py
index 7e569a1d1d..bcbb052260 100644
--- a/ietf/ipr/utils.py
+++ b/ietf/ipr/utils.py
@@ -1,11 +1,16 @@
-# Copyright The IETF Trust 2014-2020, All Rights Reserved
+# Copyright The IETF Trust 2014-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
+import json
+import debug # pyflakes:ignore
+
 from textwrap import dedent
 
+from django.core import serializers
+
 from ietf.ipr.mail import process_response_email, UndeliverableIprResponseError
 
-import debug                            # pyflakes:ignore
+from ietf.ipr.models import IprDocRel
 
 def get_genitive(name):
     """Return the genitive form of name"""
@@ -85,3 +90,18 @@ def ingest_response_email(message: bytes):
             email_original_message=message,
             email_attach_traceback=True,
         ) from err
+
+def json_dump_disclosure(disclosure):
+    objs = set()
+    objs.add(disclosure)
+    objs.add(disclosure.iprdisclosurebase_ptr)
+    objs.add(disclosure.by)
+    objs.update(IprDocRel.objects.filter(disclosure=disclosure))
+    objs.update(disclosure.iprevent_set.all())
+    objs.update([i.by for i in disclosure.iprevent_set.all()])
+    objs.update([i.message for i in disclosure.iprevent_set.all() if i.message ])
+    objs.update([i.message.by for i in disclosure.iprevent_set.all() if i.message ])
+    objs.update([i.in_reply_to for i in disclosure.iprevent_set.all() if i.in_reply_to ])
+    objs.update([i.in_reply_to.by for i in disclosure.iprevent_set.all() if i.in_reply_to ])
+    objs = sorted(list(objs),key=lambda o:o.__class__.__name__)
+    return json.dumps(json.loads(serializers.serialize("json",objs)),indent=4)
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 08979a3972..8eb3affbc0 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -32,7 +32,7 @@
     NonDocSpecificIprDisclosure, IprDocRel,
     RelatedIpr,IprEvent)
 from ietf.ipr.utils import (get_genitive, get_ipr_summary,
-    iprs_from_docs, related_docs)
+    iprs_from_docs, json_dump_disclosure, related_docs)
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.message.models import Message
 from ietf.message.utils import infer_message
@@ -901,3 +901,8 @@ def update(request, id):
     child = ipr.get_child()
     type = class_to_type[child.__class__.__name__]
     return new(request, type, updates=id)
+
+@role_required("Secretariat")
+def json_snapshot(request, id):
+    obj = get_object_or_404(IprDisclosureBase,id=id).get_child()
+    return HttpResponse(json_dump_disclosure(obj),content_type="application/json")

From 9d2fa7a32c6dae35de28c3a5f62ca5d762baef3c Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 9 Oct 2025 17:04:13 -0500
Subject: [PATCH 457/707] feat: track deleted ipr disclosures (#9691)

* feat: track deleted ipr disclosures

* fix: unique constraint on removed_id
---
 ietf/ipr/admin.py                             | 23 ++++++++++++---
 .../migrations/0005_removediprdisclosure.py   | 28 +++++++++++++++++++
 .../migrations/0006_already_removed_ipr.py    | 24 ++++++++++++++++
 ietf/ipr/models.py                            |  6 +++-
 ietf/ipr/resources.py                         | 19 +++++++++++--
 ietf/ipr/tests.py                             | 22 ++++++++++++++-
 ietf/ipr/views.py                             | 11 ++++++--
 ietf/templates/ipr/deleted.html               | 16 +++++++++++
 8 files changed, 139 insertions(+), 10 deletions(-)
 create mode 100644 ietf/ipr/migrations/0005_removediprdisclosure.py
 create mode 100644 ietf/ipr/migrations/0006_already_removed_ipr.py
 create mode 100644 ietf/templates/ipr/deleted.html

diff --git a/ietf/ipr/admin.py b/ietf/ipr/admin.py
index afc1952d72..1a8a908dcd 100644
--- a/ietf/ipr/admin.py
+++ b/ietf/ipr/admin.py
@@ -1,13 +1,22 @@
-# Copyright The IETF Trust 2010-2020, All Rights Reserved
+# Copyright The IETF Trust 2010-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 from django import forms
 from django.contrib import admin
 from ietf.name.models import DocRelationshipName
-from ietf.ipr.models import (IprDisclosureBase, IprDocRel, IprEvent,
-    RelatedIpr, HolderIprDisclosure, ThirdPartyIprDisclosure, GenericIprDisclosure, 
-    NonDocSpecificIprDisclosure, LegacyMigrationIprEvent)
+from ietf.ipr.models import (
+    IprDisclosureBase,
+    IprDocRel,
+    IprEvent,
+    RelatedIpr,
+    HolderIprDisclosure,
+    RemovedIprDisclosure,
+    ThirdPartyIprDisclosure,
+    GenericIprDisclosure,
+    NonDocSpecificIprDisclosure,
+    LegacyMigrationIprEvent,
+)
 
 # ------------------------------------------------------
 # ModelAdmins
@@ -110,3 +119,9 @@ class LegacyMigrationIprEventAdmin(admin.ModelAdmin):
     list_filter = ['time', 'type', 'response_due']
     raw_id_fields = ['by', 'disclosure', 'message', 'in_reply_to']
 admin.site.register(LegacyMigrationIprEvent, LegacyMigrationIprEventAdmin)
+
+class RemovedIprDisclosureAdmin(admin.ModelAdmin):
+    pass
+
+
+admin.site.register(RemovedIprDisclosure, RemovedIprDisclosureAdmin)
diff --git a/ietf/ipr/migrations/0005_removediprdisclosure.py b/ietf/ipr/migrations/0005_removediprdisclosure.py
new file mode 100644
index 0000000000..400a264579
--- /dev/null
+++ b/ietf/ipr/migrations/0005_removediprdisclosure.py
@@ -0,0 +1,28 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("ipr", "0004_holderiprdisclosure_is_blanket_disclosure"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="RemovedIprDisclosure",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("removed_id", models.PositiveBigIntegerField(unique=True)),
+                ("reason", models.TextField()),
+            ],
+        ),
+    ]
diff --git a/ietf/ipr/migrations/0006_already_removed_ipr.py b/ietf/ipr/migrations/0006_already_removed_ipr.py
new file mode 100644
index 0000000000..0e2dbc63eb
--- /dev/null
+++ b/ietf/ipr/migrations/0006_already_removed_ipr.py
@@ -0,0 +1,24 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    RemovedIprDisclosure = apps.get_model("ipr", "RemovedIprDisclosure")
+    for id in (6544, 6068):
+        RemovedIprDisclosure.objects.create(
+            removed_id=id,
+            reason="This IPR disclosure was removed as objectively false.",
+        )
+
+
+def reverse(apps, schema_editor):
+    RemovedIprDisclosure = apps.get_model("ipr", "RemovedIprDisclosure")
+    RemovedIprDisclosure.objects.all().delete()
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("ipr", "0005_removediprdisclosure"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/ipr/models.py b/ietf/ipr/models.py
index 2d81eb4b42..ea148c2704 100644
--- a/ietf/ipr/models.py
+++ b/ietf/ipr/models.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2007-2023, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -270,3 +270,7 @@ class LegacyMigrationIprEvent(IprEvent):
     """A subclass of IprEvent specifically for capturing contents of legacy_url_0,
     the text of a disclosure submitted by email"""
     pass
+
+class RemovedIprDisclosure(models.Model):
+    removed_id = models.PositiveBigIntegerField(unique=True)
+    reason = models.TextField()
diff --git a/ietf/ipr/resources.py b/ietf/ipr/resources.py
index 0d8421cdec..c4d2c436e6 100644
--- a/ietf/ipr/resources.py
+++ b/ietf/ipr/resources.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2015-2019, All Rights Reserved
+# Copyright The IETF Trust 2015-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 # Autogenerated by the mkresources management command 2015-03-21 14:05 PDT
 
@@ -11,7 +11,7 @@
 
 from ietf import api
 
-from ietf.ipr.models import ( IprDisclosureBase, IprDocRel, HolderIprDisclosure, ThirdPartyIprDisclosure,
+from ietf.ipr.models import ( IprDisclosureBase, IprDocRel, HolderIprDisclosure, RemovedIprDisclosure, ThirdPartyIprDisclosure,
     RelatedIpr, NonDocSpecificIprDisclosure, GenericIprDisclosure, IprEvent, LegacyMigrationIprEvent )
 
 from ietf.person.resources import PersonResource
@@ -295,3 +295,18 @@ class Meta:
         }
 api.ipr.register(LegacyMigrationIprEventResource())
 
+
+
+class RemovedIprDisclosureResource(ModelResource):
+    class Meta:
+        queryset = RemovedIprDisclosure.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'removediprdisclosure'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "removed_id": ALL,
+            "reason": ALL,
+        }
+api.ipr.register(RemovedIprDisclosureResource())
diff --git a/ietf/ipr/tests.py b/ietf/ipr/tests.py
index 4146fbd4c1..53a599e2de 100644
--- a/ietf/ipr/tests.py
+++ b/ietf/ipr/tests.py
@@ -41,7 +41,7 @@
 from ietf.ipr.forms import DraftForm, HolderIprDisclosureForm
 from ietf.ipr.mail import (process_response_email, get_reply_to, get_update_submitter_emails,
                            get_pseudo_submitter, get_holders, get_update_cc_addrs, UndeliverableIprResponseError)
-from ietf.ipr.models import (IprDisclosureBase, GenericIprDisclosure, HolderIprDisclosure,
+from ietf.ipr.models import (IprDisclosureBase, GenericIprDisclosure, HolderIprDisclosure, RemovedIprDisclosure,
                              ThirdPartyIprDisclosure, IprEvent)
 from ietf.ipr.templatetags.ipr_filters import no_revisions_message
 from ietf.ipr.utils import get_genitive, get_ipr_summary, ingest_response_email
@@ -129,6 +129,26 @@ def test_showlist(self):
             self.assertContains(r, "removed as objectively false")
             ipr.delete()
 
+    def test_show_delete(self):
+        ipr = HolderIprDisclosureFactory()
+        removed = RemovedIprDisclosure.objects.create(
+            removed_id=ipr.pk, reason="Removed for reasons"
+        )
+        url = urlreverse("ietf.ipr.views.show", kwargs=dict(id=removed.removed_id))
+        r = self.client.get(url)
+        self.assertContains(r, "Removed for reasons")
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("#deletion_warning")), 0)
+        self.client.login(username="secretary", password="secretary+password")
+        r = self.client.get(url)
+        self.assertContains(r, "Removed for reasons")
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("#deletion_warning")), 1)
+        ipr.delete()
+        r = self.client.get(url)
+        self.assertContains(r, "Removed for reasons")
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("#deletion_warning")), 0)
 
     def test_show_posted(self):
         ipr = HolderIprDisclosureFactory()
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 8eb3affbc0..665c99dc43 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -28,7 +28,7 @@
     AddCommentForm, AddEmailForm, NotifyForm, StateForm, NonDocSpecificIprDisclosureForm,
     GenericIprDisclosureForm)
 from ietf.ipr.models import (IprDisclosureStateName, IprDisclosureBase,
-    HolderIprDisclosure, GenericIprDisclosure, ThirdPartyIprDisclosure,
+    HolderIprDisclosure, GenericIprDisclosure, RemovedIprDisclosure, ThirdPartyIprDisclosure,
     NonDocSpecificIprDisclosure, IprDocRel,
     RelatedIpr,IprEvent)
 from ietf.ipr.utils import (get_genitive, get_ipr_summary,
@@ -817,7 +817,14 @@ def get_details_tabs(ipr, selected):
 
 def show(request, id):
     """View of individual declaration"""
-    ipr = get_object_or_404(IprDisclosureBase, id=id).get_child()
+    ipr = IprDisclosureBase.objects.filter(id=id)
+    removed = RemovedIprDisclosure.objects.filter(removed_id=id)
+    if removed.exists():
+        return render(request, "ipr/deleted.html", {"removed": removed.get(), "ipr": ipr})
+    if not ipr.exists():
+        raise Http404
+    else:
+        ipr = ipr.get().get_child()
     if not has_role(request.user, 'Secretariat'):
         if ipr.state.slug in ['removed', 'removed_objfalse']:
             return render(request, "ipr/removed.html", {
diff --git a/ietf/templates/ipr/deleted.html b/ietf/templates/ipr/deleted.html
new file mode 100644
index 0000000000..24f696ebca
--- /dev/null
+++ b/ietf/templates/ipr/deleted.html
@@ -0,0 +1,16 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015-2023, All Rights Reserved #}
+{% load ietf_filters origin %}
+{% block title %}Removed IPR Disclosure{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>Removed IPR disclosure</h1>
+    <p class="alert alert-info my-3">
+        {{ removed.reason }}
+    </p>
+    {% if user|has_role:"Secretariat" and ipr.exists %}
+    <p class="alert alert-warn my-3" id="deletion_warning">
+        This disclosure has not yet been deleted and parts of its content is available through, e.g, the history view and the /api/v1 views.
+    </p>
+    {% endif %}
+    {% endblock %}
\ No newline at end of file

From ed6b061cfe4279328dbb7b914f5f7f76644521f9 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Fri, 10 Oct 2025 05:43:24 -0700
Subject: [PATCH 458/707] chore: merge feat/sreq to main (#9697)

* refactor: move session request tool to ietf.meeting and restyle (#9617)

* refactor: move session request tool to ietf.meeting and restyle to match standard Datatracker

* fix: add redirect for old session request url

* fix: move stripe javascript to js file

* fix: update copyright lines for modified files

* fix: rename javascripts and expand redirects

* fix: don't show inactive constraints label when there are none (#9680)

* chore: remove unused utility

* fix: add test for secr main menu page (#9693)

* fix: don't show inactive constraints label when there are none

* fix: add test for secr main menu page

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/meeting/forms.py                         | 333 +++++++-
 .../templatetags/ams_filters.py               |   2 +
 .../tests_session_requests.py}                | 314 ++++---
 ietf/meeting/tests_views.py                   |   4 +-
 ietf/meeting/urls.py                          |  14 +-
 .../views_session_request.py}                 | 803 ++++++++++--------
 ietf/secr/meetings/views.py                   |   4 +-
 ietf/secr/sreq/__init__.py                    |   0
 ietf/secr/sreq/forms.py                       | 333 --------
 ietf/secr/sreq/templatetags/__init__.py       |   0
 ietf/secr/sreq/urls.py                        |  20 -
 ietf/secr/telechat/tests.py                   |  21 +
 ietf/secr/templates/includes/activities.html  |  23 -
 .../includes/buttons_next_cancel.html         |   6 -
 .../includes/buttons_submit_cancel.html       |   6 -
 .../templates/includes/sessions_footer.html   |   5 -
 .../includes/sessions_request_form.html       | 130 ---
 .../includes/sessions_request_view.html       |  73 --
 .../sessions_request_view_formset.html        |  32 -
 .../sessions_request_view_session_set.html    |  32 -
 ietf/secr/templates/index.html                |   6 +-
 ietf/secr/templates/sreq/confirm.html         |  57 --
 ietf/secr/templates/sreq/edit.html            |  39 -
 ietf/secr/templates/sreq/locked.html          |  30 -
 ietf/secr/templates/sreq/main.html            |  65 --
 ietf/secr/templates/sreq/new.html             |  43 -
 ietf/secr/templates/sreq/tool_status.html     |  42 -
 ietf/secr/templates/sreq/view.html            |  55 --
 ietf/secr/urls.py                             |  13 +-
 ietf/secr/utils/group.py                      |  50 --
 ietf/settings.py                              |   1 -
 ietf/static/js/custom_striped.js              |  16 +
 ietf/{secr => }/static/js/session_form.js     |   2 +-
 .../js/session_request.js}                    |  12 +-
 ietf/templates/base/menu.html                 |   4 +-
 ietf/templates/group/meetings-row.html        |   3 +-
 ietf/templates/group/meetings.html            |   3 +-
 .../meeting/important_dates_for_meeting.ics   |   5 +-
 ietf/templates/meeting/requests.html          |   4 +-
 .../session_approval_notification.txt         |   5 +-
 .../meeting}/session_cancel_notification.txt  |   1 +
 .../meeting/session_details_form.html         |  64 +-
 .../session_not_meeting_notification.txt}     |   1 +
 .../meeting/session_request_confirm.html      |  38 +
 .../meeting/session_request_form.html         | 206 +++++
 .../meeting/session_request_info.txt          |  26 +
 .../meeting/session_request_list.html         |  65 ++
 .../meeting/session_request_locked.html       |  21 +
 .../meeting}/session_request_notification.txt |   3 +-
 .../meeting/session_request_status.html       |  28 +
 .../meeting/session_request_view.html         |  59 ++
 .../meeting/session_request_view_formset.html |  49 ++
 .../session_request_view_session_set.html     |  47 +
 .../meeting/session_request_view_table.html   | 146 ++++
 package.json                                  |   5 +-
 55 files changed, 1728 insertions(+), 1641 deletions(-)
 rename ietf/{secr/sreq => meeting}/templatetags/ams_filters.py (96%)
 rename ietf/{secr/sreq/tests.py => meeting/tests_session_requests.py} (84%)
 rename ietf/{secr/sreq/views.py => meeting/views_session_request.py} (80%)
 delete mode 100644 ietf/secr/sreq/__init__.py
 delete mode 100644 ietf/secr/sreq/forms.py
 delete mode 100644 ietf/secr/sreq/templatetags/__init__.py
 delete mode 100644 ietf/secr/sreq/urls.py
 delete mode 100644 ietf/secr/templates/includes/activities.html
 delete mode 100644 ietf/secr/templates/includes/buttons_next_cancel.html
 delete mode 100644 ietf/secr/templates/includes/buttons_submit_cancel.html
 delete mode 100755 ietf/secr/templates/includes/sessions_footer.html
 delete mode 100755 ietf/secr/templates/includes/sessions_request_form.html
 delete mode 100644 ietf/secr/templates/includes/sessions_request_view.html
 delete mode 100644 ietf/secr/templates/includes/sessions_request_view_formset.html
 delete mode 100644 ietf/secr/templates/includes/sessions_request_view_session_set.html
 delete mode 100755 ietf/secr/templates/sreq/confirm.html
 delete mode 100755 ietf/secr/templates/sreq/edit.html
 delete mode 100755 ietf/secr/templates/sreq/locked.html
 delete mode 100755 ietf/secr/templates/sreq/main.html
 delete mode 100755 ietf/secr/templates/sreq/new.html
 delete mode 100755 ietf/secr/templates/sreq/tool_status.html
 delete mode 100644 ietf/secr/templates/sreq/view.html
 delete mode 100644 ietf/secr/utils/group.py
 create mode 100644 ietf/static/js/custom_striped.js
 rename ietf/{secr => }/static/js/session_form.js (92%)
 rename ietf/{secr/static/js/sessions.js => static/js/session_request.js} (90%)
 rename ietf/{secr/templates/sreq => templates/meeting}/session_approval_notification.txt (56%)
 rename ietf/{secr/templates/sreq => templates/meeting}/session_cancel_notification.txt (71%)
 rename ietf/{secr/templates/sreq/not_meeting_notification.txt => templates/meeting/session_not_meeting_notification.txt} (83%)
 create mode 100644 ietf/templates/meeting/session_request_confirm.html
 create mode 100644 ietf/templates/meeting/session_request_form.html
 create mode 100644 ietf/templates/meeting/session_request_info.txt
 create mode 100644 ietf/templates/meeting/session_request_list.html
 create mode 100644 ietf/templates/meeting/session_request_locked.html
 rename ietf/{secr/templates/sreq => templates/meeting}/session_request_notification.txt (56%)
 create mode 100644 ietf/templates/meeting/session_request_status.html
 create mode 100644 ietf/templates/meeting/session_request_view.html
 create mode 100644 ietf/templates/meeting/session_request_view_formset.html
 create mode 100644 ietf/templates/meeting/session_request_view_session_set.html
 create mode 100644 ietf/templates/meeting/session_request_view_table.html

diff --git a/ietf/meeting/forms.py b/ietf/meeting/forms.py
index b6b1a1591f..e5b1697f86 100644
--- a/ietf/meeting/forms.py
+++ b/ietf/meeting/forms.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2016-2023, All Rights Reserved
+# Copyright The IETF Trust 2016-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -15,19 +15,24 @@
 from django.core import validators
 from django.core.exceptions import ValidationError
 from django.forms import BaseInlineFormSet
+from django.template.defaultfilters import pluralize
 from django.utils.functional import cached_property
+from django.utils.safestring import mark_safe
 
 import debug                            # pyflakes:ignore
 
 from ietf.doc.models import Document, State, NewRevisionDocEvent
 from ietf.group.models import Group
 from ietf.group.utils import groups_managed_by
-from ietf.meeting.models import Session, Meeting, Schedule, COUNTRIES, TIMEZONES, TimeSlot, Room
+from ietf.meeting.models import (Session, Meeting, Schedule, COUNTRIES, TIMEZONES, TimeSlot, Room,
+    Constraint, ResourceAssociation)
 from ietf.meeting.helpers import get_next_interim_number, make_materials_directories
 from ietf.meeting.helpers import is_interim_meeting_approved, get_next_agenda_name
 from ietf.message.models import Message
-from ietf.name.models import TimeSlotTypeName, SessionPurposeName
+from ietf.name.models import TimeSlotTypeName, SessionPurposeName, TimerangeName, ConstraintName
+from ietf.person.fields import SearchablePersonsField
 from ietf.person.models import Person
+from ietf.utils import log
 from ietf.utils.fields import (
     DatepickerDateField,
     DatepickerSplitDateTimeWidget,
@@ -35,9 +40,14 @@
     ModelMultipleChoiceField,
     MultiEmailField,
 )
+from ietf.utils.html import clean_text_field
 from ietf.utils.validators import ( validate_file_size, validate_mime_type,
     validate_file_extension, validate_no_html_frame)
 
+NUM_SESSION_CHOICES = (('', '--Please select'), ('1', '1'), ('2', '2'))
+SESSION_TIME_RELATION_CHOICES = (('', 'No preference'),) + Constraint.TIME_RELATION_CHOICES
+JOINT_FOR_SESSION_CHOICES = (('1', 'First session'), ('2', 'Second session'), ('3', 'Third session'), )
+
 # -------------------------------------------------
 # Helpers
 # -------------------------------------------------
@@ -74,6 +84,27 @@ def duration_string(duration):
     return string
 
 
+def allowed_conflicting_groups():
+    return Group.objects.filter(
+        type__in=['wg', 'ag', 'rg', 'rag', 'program', 'edwg'],
+        state__in=['bof', 'proposed', 'active'])
+
+
+def check_conflict(groups, source_group):
+    '''
+    Takes a string which is a list of group acronyms.  Checks that they are all active groups
+    '''
+    # convert to python list (allow space or comma separated lists)
+    items = groups.replace(',', ' ').split()
+    active_groups = allowed_conflicting_groups()
+    for group in items:
+        if group == source_group.acronym:
+            raise forms.ValidationError("Cannot declare a conflict with the same group: %s" % group)
+
+        if not active_groups.filter(acronym=group):
+            raise forms.ValidationError("Invalid or inactive group acronym: %s" % group)
+
+
 # -------------------------------------------------
 # Forms
 # -------------------------------------------------
@@ -753,6 +784,9 @@ def __init__(self, group, *args, **kwargs):
         self.fields['purpose'].queryset = SessionPurposeName.objects.filter(pk__in=session_purposes)
         if not group.features.acts_like_wg:
             self.fields['requested_duration'].durations = [datetime.timedelta(minutes=m) for m in range(30, 241, 30)]
+        # add bootstrap classes
+        self.fields['purpose'].widget.attrs.update({'class': 'form-select'})
+        self.fields['type'].widget.attrs.update({'class': 'form-select', 'aria-label': 'session type'})
 
     class Meta:
         model = Session
@@ -837,3 +871,296 @@ def sessiondetailsformset_factory(min_num=1, max_num=3):
         max_num=max_num,
         extra=max_num,  # only creates up to max_num total
     )
+
+
+class SessionRequestStatusForm(forms.Form):
+    message = forms.CharField(widget=forms.Textarea(attrs={'rows': '3', 'cols': '80'}), strip=False)
+
+
+class NameModelMultipleChoiceField(ModelMultipleChoiceField):
+    def label_from_instance(self, name):
+        return name.desc
+
+
+class SessionRequestForm(forms.Form):
+    num_session = forms.ChoiceField(
+        choices=NUM_SESSION_CHOICES,
+        label="Number of sessions")
+    # session fields are added in __init__()
+    session_time_relation = forms.ChoiceField(
+        choices=SESSION_TIME_RELATION_CHOICES,
+        required=False,
+        label="Time between two sessions")
+    attendees = forms.IntegerField(label="Number of Attendees")
+    # FIXME: it would cleaner to have these be
+    # ModelMultipleChoiceField, and just customize the widgetry, that
+    # way validation comes for free (applies to this CharField and the
+    # constraints dynamically instantiated in __init__())
+    joint_with_groups = forms.CharField(max_length=255, required=False)
+    joint_with_groups_selector = forms.ChoiceField(choices=[], required=False)  # group select widget for prev field
+    joint_for_session = forms.ChoiceField(choices=JOINT_FOR_SESSION_CHOICES, required=False)
+    comments = forms.CharField(
+        max_length=200,
+        label='Special Requests',
+        help_text='i.e. restrictions on meeting times / days, etc.  (limit 200 characters)',
+        required=False)
+    third_session = forms.BooleanField(
+        required=False,
+        help_text="Help")
+    resources = forms.MultipleChoiceField(
+        widget=forms.CheckboxSelectMultiple,
+        required=False,
+        label='Resources Requested')
+    bethere = SearchablePersonsField(
+        label="Participants who must be present",
+        required=False,
+        help_text=mark_safe('<span class="fw-bold text-danger">Do not include Area Directors and WG Chairs; the system already tracks their availability.</span>'))
+    timeranges = NameModelMultipleChoiceField(
+        widget=forms.CheckboxSelectMultiple,
+        required=False,
+        label=mark_safe('Times during which this WG can <strong>not</strong> meet:<br>Please explain any selections in Special Requests below.'),
+        queryset=TimerangeName.objects.all())
+    adjacent_with_wg = forms.ChoiceField(
+        required=False,
+        label=mark_safe('Plan session adjacent with another WG:<br>(Immediately before or after another WG, no break in between, in the same room.)'))
+    send_notifications = forms.BooleanField(label="Send notification emails?", required=False, initial=False)
+
+    def __init__(self, group, meeting, data=None, *args, **kwargs):
+        self.hidden = kwargs.pop('hidden', False)
+        self.notifications_optional = kwargs.pop('notifications_optional', False)
+
+        self.group = group
+        formset_class = sessiondetailsformset_factory(max_num=3 if group.features.acts_like_wg else 50)
+        self.session_forms = formset_class(group=self.group, meeting=meeting, data=data)
+        super().__init__(data=data, *args, **kwargs)
+        if not self.notifications_optional:
+            self.fields['send_notifications'].widget = forms.HiddenInput()
+
+        # Allow additional sessions for non-wg-like groups
+        if not self.group.features.acts_like_wg:
+            self.fields['num_session'].choices = ((n, str(n)) for n in range(1, 51))
+
+        self._add_widget_class(self.fields['third_session'].widget, 'form-check-input')
+        self.fields['comments'].widget = forms.Textarea(attrs={'rows': '3', 'cols': '65'})
+
+        other_groups = list(allowed_conflicting_groups().exclude(pk=group.pk).values_list('acronym', 'acronym').order_by('acronym'))
+        self.fields['adjacent_with_wg'].choices = [('', '--No preference')] + other_groups
+        group_acronym_choices = [('', '--Select WG(s)')] + other_groups
+        self.fields['joint_with_groups_selector'].choices = group_acronym_choices
+
+        # Set up constraints for the meeting
+        self._wg_field_data = []
+        for constraintname in meeting.group_conflict_types.all():
+            # two fields for each constraint: a CharField for the group list and a selector to add entries
+            constraint_field = forms.CharField(max_length=255, required=False)
+            constraint_field.widget.attrs['data-slug'] = constraintname.slug
+            constraint_field.widget.attrs['data-constraint-name'] = str(constraintname).title()
+            constraint_field.widget.attrs['aria-label'] = f'{constraintname.slug}_input'
+            self._add_widget_class(constraint_field.widget, 'wg_constraint')
+            self._add_widget_class(constraint_field.widget, 'form-control')
+
+            selector_field = forms.ChoiceField(choices=group_acronym_choices, required=False)
+            selector_field.widget.attrs['data-slug'] = constraintname.slug  # used by onchange handler
+            self._add_widget_class(selector_field.widget, 'wg_constraint_selector')
+            self._add_widget_class(selector_field.widget, 'form-control')
+
+            cfield_id = 'constraint_{}'.format(constraintname.slug)
+            cselector_id = 'wg_selector_{}'.format(constraintname.slug)
+            # keep an eye out for field name conflicts
+            log.assertion('cfield_id not in self.fields')
+            log.assertion('cselector_id not in self.fields')
+            self.fields[cfield_id] = constraint_field
+            self.fields[cselector_id] = selector_field
+            self._wg_field_data.append((constraintname, cfield_id, cselector_id))
+
+        # Show constraints that are not actually used by the meeting so these don't get lost
+        self._inactive_wg_field_data = []
+        inactive_cnames = ConstraintName.objects.filter(
+            is_group_conflict=True  # Only collect group conflicts...
+        ).exclude(
+            meeting=meeting  # ...that are not enabled for this meeting...
+        ).filter(
+            constraint__source=group,  # ...but exist for this group...
+            constraint__meeting=meeting,  # ... at this meeting.
+        ).distinct()
+
+        for inactive_constraint_name in inactive_cnames:
+            field_id = 'delete_{}'.format(inactive_constraint_name.slug)
+            self.fields[field_id] = forms.BooleanField(required=False, label='Delete this conflict', help_text='Delete this inactive conflict?')
+            self._add_widget_class(self.fields[field_id].widget, 'form-control')
+            constraints = group.constraint_source_set.filter(meeting=meeting, name=inactive_constraint_name)
+            self._inactive_wg_field_data.append(
+                (inactive_constraint_name,
+                 ' '.join([c.target.acronym for c in constraints]),
+                 field_id)
+            )
+
+        self.fields['joint_with_groups_selector'].widget.attrs['onchange'] = "document.form_post.joint_with_groups.value=document.form_post.joint_with_groups.value + ' ' + this.options[this.selectedIndex].value; return 1;"
+        self.fields["resources"].choices = [(x.pk, x.desc) for x in ResourceAssociation.objects.filter(name__used=True).order_by('name__order')]
+
+        if self.hidden:
+            # replace all the widgets to start...
+            for key in list(self.fields.keys()):
+                self.fields[key].widget = forms.HiddenInput()
+            # re-replace a couple special cases
+            self.fields['resources'].widget = forms.MultipleHiddenInput()
+            self.fields['timeranges'].widget = forms.MultipleHiddenInput()
+            # and entirely replace bethere - no need to support searching if input is hidden
+            self.fields['bethere'] = ModelMultipleChoiceField(
+                widget=forms.MultipleHiddenInput, required=False,
+                queryset=Person.objects.all(),
+            )
+
+    def wg_constraint_fields(self):
+        """Iterates over wg constraint fields
+
+        Intended for use in the template.
+        """
+        for cname, cfield_id, cselector_id in self._wg_field_data:
+            yield cname, self[cfield_id], self[cselector_id]
+
+    def wg_constraint_count(self):
+        """How many wg constraints are there?"""
+        return len(self._wg_field_data)
+
+    def wg_constraint_field_ids(self):
+        """Iterates over wg constraint field IDs"""
+        for cname, cfield_id, _ in self._wg_field_data:
+            yield cname, cfield_id
+
+    def inactive_wg_constraints(self):
+        for cname, value, field_id in self._inactive_wg_field_data:
+            yield cname, value, self[field_id]
+
+    def inactive_wg_constraint_count(self):
+        return len(self._inactive_wg_field_data)
+
+    def inactive_wg_constraint_field_ids(self):
+        """Iterates over wg constraint field IDs"""
+        for cname, _, field_id in self._inactive_wg_field_data:
+            yield cname, field_id
+
+    @staticmethod
+    def _add_widget_class(widget, new_class):
+        """Add a new class, taking care in case some already exist"""
+        existing_classes = widget.attrs.get('class', '').split()
+        widget.attrs['class'] = ' '.join(existing_classes + [new_class])
+
+    def _join_conflicts(self, cleaned_data, slugs):
+        """Concatenate constraint fields from cleaned data into a single list"""
+        conflicts = []
+        for cname, cfield_id, _ in self._wg_field_data:
+            if cname.slug in slugs and cfield_id in cleaned_data:
+                groups = cleaned_data[cfield_id]
+                # convert to python list (allow space or comma separated lists)
+                items = groups.replace(',', ' ').split()
+                conflicts.extend(items)
+        return conflicts
+
+    def _validate_duplicate_conflicts(self, cleaned_data):
+        """Validate that no WGs appear in more than one constraint that does not allow duplicates
+
+        Raises ValidationError
+        """
+        # Only the older constraints (conflict, conflic2, conflic3) need to be mutually exclusive.
+        all_conflicts = self._join_conflicts(cleaned_data, ['conflict', 'conflic2', 'conflic3'])
+        seen = []
+        duplicated = []
+        errors = []
+        for c in all_conflicts:
+            if c not in seen:
+                seen.append(c)
+            elif c not in duplicated:  # only report once
+                duplicated.append(c)
+                errors.append(forms.ValidationError('%s appears in conflicts more than once' % c))
+        return errors
+
+    def clean_joint_with_groups(self):
+        groups = self.cleaned_data['joint_with_groups']
+        check_conflict(groups, self.group)
+        return groups
+
+    def clean_comments(self):
+        return clean_text_field(self.cleaned_data['comments'])
+
+    def clean_bethere(self):
+        bethere = self.cleaned_data["bethere"]
+        if bethere:
+            extra = set(
+                Person.objects.filter(
+                    role__group=self.group, role__name__in=["chair", "ad"]
+                )
+                & bethere
+            )
+            if extra:
+                extras = ", ".join(e.name for e in extra)
+                raise forms.ValidationError(
+                    (
+                        f"Please remove the following person{pluralize(len(extra))}, the system "
+                        f"tracks their availability due to their role{pluralize(len(extra))}: {extras}."
+                    )
+                )
+        return bethere
+
+    def clean_send_notifications(self):
+        return True if not self.notifications_optional else self.cleaned_data['send_notifications']
+
+    def is_valid(self):
+        return super().is_valid() and self.session_forms.is_valid()
+
+    def clean(self):
+        super(SessionRequestForm, self).clean()
+        self.session_forms.clean()
+
+        data = self.cleaned_data
+
+        # Validate the individual conflict fields
+        for _, cfield_id, _ in self._wg_field_data:
+            try:
+                check_conflict(data[cfield_id], self.group)
+            except forms.ValidationError as e:
+                self.add_error(cfield_id, e)
+
+        # Skip remaining tests if individual field tests had errors,
+        if self.errors:
+            return data
+
+        # error if conflicts contain disallowed dupes
+        for error in self._validate_duplicate_conflicts(data):
+            self.add_error(None, error)
+
+        # Verify expected number of session entries are present
+        num_sessions_with_data = len(self.session_forms.forms_to_keep)
+        num_sessions_expected = -1
+        try:
+            num_sessions_expected = int(data.get('num_session', ''))
+        except ValueError:
+            self.add_error('num_session', 'Invalid value for number of sessions')
+        if num_sessions_with_data < num_sessions_expected:
+            self.add_error('num_session', 'Must provide data for all sessions')
+
+        # if default (empty) option is selected, cleaned_data won't include num_session key
+        if num_sessions_expected != 2 and num_sessions_expected is not None:
+            if data.get('session_time_relation'):
+                self.add_error(
+                    'session_time_relation',
+                    forms.ValidationError('Time between sessions can only be used when two sessions are requested.')
+                )
+
+        joint_session = data.get('joint_for_session', '')
+        if joint_session != '':
+            joint_session = int(joint_session)
+            if joint_session > num_sessions_with_data:
+                self.add_error(
+                    'joint_for_session',
+                    forms.ValidationError(
+                        f'Session {joint_session} can not be the joint session, the session has not been requested.'
+                    )
+                )
+
+        return data
+
+    @property
+    def media(self):
+        # get media for our formset
+        return super().media + self.session_forms.media + forms.Media(js=('ietf/js/session_form.js',))
diff --git a/ietf/secr/sreq/templatetags/ams_filters.py b/ietf/meeting/templatetags/ams_filters.py
similarity index 96%
rename from ietf/secr/sreq/templatetags/ams_filters.py
rename to ietf/meeting/templatetags/ams_filters.py
index 3ef872232a..a8175a81d6 100644
--- a/ietf/secr/sreq/templatetags/ams_filters.py
+++ b/ietf/meeting/templatetags/ams_filters.py
@@ -1,3 +1,5 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
 from django import template
 from ietf.person.models import Person
 
diff --git a/ietf/secr/sreq/tests.py b/ietf/meeting/tests_session_requests.py
similarity index 84%
rename from ietf/secr/sreq/tests.py
rename to ietf/meeting/tests_session_requests.py
index 847b993e1c..0cb092d2f8 100644
--- a/ietf/secr/sreq/tests.py
+++ b/ietf/meeting/tests_session_requests.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2013-2022, All Rights Reserved
+# Copyright The IETF Trust 2013-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -15,30 +15,15 @@
 from ietf.name.models import ConstraintName, TimerangeName
 from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
-from ietf.secr.sreq.forms import SessionForm
+from ietf.meeting.forms import SessionRequestForm
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text, send_mail
 from ietf.utils.timezone import date_today
 
 
 from pyquery import PyQuery
 
-SECR_USER='secretary'
+SECR_USER = 'secretary'
 
-class SreqUrlTests(TestCase):
-    def test_urls(self):
-        MeetingFactory(type_id='ietf',date=date_today())
-
-        self.client.login(username="secretary", password="secretary+password")
-
-        r = self.client.get("/secr/")
-        self.assertEqual(r.status_code, 200)
-
-        r = self.client.get("/secr/sreq/")
-        self.assertEqual(r.status_code, 200)
-
-        testgroup=GroupFactory()
-        r = self.client.get("/secr/sreq/%s/new/" % testgroup.acronym)
-        self.assertEqual(r.status_code, 200)
 
 class SessionRequestTestCase(TestCase):
     def test_main(self):
@@ -46,7 +31,7 @@ def test_main(self):
         SessionFactory.create_batch(2, meeting=meeting, status_id='sched')
         SessionFactory.create_batch(2, meeting=meeting, status_id='disappr')
         # Several unscheduled groups come from make_immutable_base_data
-        url = reverse('ietf.secr.sreq.views.main')
+        url = reverse('ietf.meeting.views_session_request.list_view')
         self.client.login(username="secretary", password="secretary+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -62,27 +47,27 @@ def test_approve(self):
         mars = GroupFactory(parent=area, acronym='mars')
         # create session waiting for approval
         session = SessionFactory(meeting=meeting, group=mars, status_id='apprw')
-        url = reverse('ietf.secr.sreq.views.approve', kwargs={'acronym':'mars'})
+        url = reverse('ietf.meeting.views_session_request.approve_request', kwargs={'acronym': 'mars'})
         self.client.login(username="ad", password="ad+password")
         r = self.client.get(url)
-        self.assertRedirects(r,reverse('ietf.secr.sreq.views.view', kwargs={'acronym':'mars'}))
+        self.assertRedirects(r, reverse('ietf.meeting.views_session_request.view_request', kwargs={'acronym': 'mars'}))
         self.assertEqual(SchedulingEvent.objects.filter(session=session).order_by('-id')[0].status_id, 'appr')
-        
+
     def test_cancel(self):
         meeting = MeetingFactory(type_id='ietf', date=date_today())
         ad = Person.objects.get(user__username='ad')
         area = RoleFactory(name_id='ad', person=ad, group__type_id='area').group
         session = SessionFactory(meeting=meeting, group__parent=area, group__acronym='mars', status_id='sched')
-        url = reverse('ietf.secr.sreq.views.cancel', kwargs={'acronym':'mars'})
+        url = reverse('ietf.meeting.views_session_request.cancel_request', kwargs={'acronym': 'mars'})
         self.client.login(username="ad", password="ad+password")
         r = self.client.get(url)
-        self.assertRedirects(r,reverse('ietf.secr.sreq.views.main'))
+        self.assertRedirects(r, reverse('ietf.meeting.views_session_request.list_view'))
         self.assertEqual(SchedulingEvent.objects.filter(session=session).order_by('-id')[0].status_id, 'deleted')
 
     def test_cancel_notification_msg(self):
         to = "<iesg-secretary@ietf.org>"
         subject = "Dummy subject"
-        template = "sreq/session_cancel_notification.txt"
+        template = "meeting/session_cancel_notification.txt"
         meeting = MeetingFactory(type_id="ietf", date=date_today())
         requester = PersonFactory(name="James O'Rourke", user__username="jimorourke")
         context = {"meeting": meeting, "requester": requester}
@@ -113,9 +98,9 @@ def test_edit(self):
         group4 = GroupFactory()
         iabprog = GroupFactory(type_id='program')
 
-        SessionFactory(meeting=meeting,group=mars,status_id='sched')
+        SessionFactory(meeting=meeting, group=mars, status_id='sched')
 
-        url = reverse('ietf.secr.sreq.views.edit', kwargs={'acronym':'mars'})
+        url = reverse('ietf.meeting.views_session_request.edit_request', kwargs={'acronym': 'mars'})
         self.client.login(username="marschairman", password="marschairman+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -123,9 +108,9 @@ def test_edit(self):
         comments = 'need lights'
         mars_sessions = meeting.session_set.filter(group__acronym='mars')
         empty_outbox()
-        post_data = {'num_session':'2',
+        post_data = {'num_session': '2',
                      'attendees': attendees,
-                     'constraint_chair_conflict':iabprog.acronym,
+                     'constraint_chair_conflict': iabprog.acronym,
                      'session_time_relation': 'subsequent-days',
                      'adjacent_with_wg': group2.acronym,
                      'joint_with_groups': group3.acronym + ' ' + group4.acronym,
@@ -135,7 +120,7 @@ def test_edit(self):
                      'session_set-INITIAL_FORMS': '1',
                      'session_set-MIN_NUM_FORMS': '1',
                      'session_set-MAX_NUM_FORMS': '3',
-                     'session_set-0-id':mars_sessions[0].pk,
+                     'session_set-0-id': mars_sessions[0].pk,
                      'session_set-0-name': mars_sessions[0].name,
                      'session_set-0-short': mars_sessions[0].short,
                      'session_set-0-purpose': mars_sessions[0].purpose_id,
@@ -169,7 +154,7 @@ def test_edit(self):
                      'session_set-2-DELETE': 'on',
                      'submit': 'Continue'}
         r = self.client.post(url, post_data, HTTP_HOST='example.com')
-        redirect_url = reverse('ietf.secr.sreq.views.view', kwargs={'acronym': 'mars'})
+        redirect_url = reverse('ietf.meeting.views_session_request.view_request', kwargs={'acronym': 'mars'})
         self.assertRedirects(r, redirect_url)
 
         # Check whether updates were stored in the database
@@ -204,17 +189,17 @@ def test_edit(self):
         # Edit again, changing the joint sessions and clearing some fields. The behaviour of
         # edit is different depending on whether previous joint sessions were recorded.
         empty_outbox()
-        post_data = {'num_session':'2',
-                     'attendees':attendees,
-                     'constraint_chair_conflict':'',
-                     'comments':'need lights',
+        post_data = {'num_session': '2',
+                     'attendees': attendees,
+                     'constraint_chair_conflict': '',
+                     'comments': 'need lights',
                      'joint_with_groups': group2.acronym,
                      'joint_for_session': '1',
                      'session_set-TOTAL_FORMS': '3',  # matches what view actually sends, even with only 2 filled in
                      'session_set-INITIAL_FORMS': '2',
                      'session_set-MIN_NUM_FORMS': '1',
                      'session_set-MAX_NUM_FORMS': '3',
-                     'session_set-0-id':sessions[0].pk,
+                     'session_set-0-id': sessions[0].pk,
                      'session_set-0-name': sessions[0].name,
                      'session_set-0-short': sessions[0].short,
                      'session_set-0-purpose': sessions[0].purpose_id,
@@ -270,7 +255,6 @@ def test_edit(self):
         r = self.client.get(redirect_url)
         self.assertContains(r, 'First session with: {}'.format(group2.acronym))
 
-
     def test_edit_constraint_bethere(self):
         meeting = MeetingFactory(type_id='ietf', date=date_today())
         mars = RoleFactory(name_id='chair', person__user__username='marschairman', group__acronym='mars').group
@@ -282,7 +266,7 @@ def test_edit_constraint_bethere(self):
             name_id='bethere',
         )
         self.assertEqual(session.people_constraints.count(), 1)
-        url = reverse('ietf.secr.sreq.views.edit', kwargs=dict(acronym='mars'))
+        url = reverse('ietf.meeting.views_session_request.edit_request', kwargs=dict(acronym='mars'))
         self.client.login(username='marschairman', password='marschairman+password')
         attendees = '10'
         ad = Person.objects.get(user__username='ad')
@@ -290,8 +274,8 @@ def test_edit_constraint_bethere(self):
             'num_session': '1',
             'attendees': attendees,
             'bethere': str(ad.pk),
-            'constraint_chair_conflict':'',
-            'comments':'',
+            'constraint_chair_conflict': '',
+            'comments': '',
             'joint_with_groups': '',
             'joint_for_session': '',
             'delete_conflict': 'on',
@@ -299,7 +283,7 @@ def test_edit_constraint_bethere(self):
             'session_set-INITIAL_FORMS': '1',
             'session_set-MIN_NUM_FORMS': '1',
             'session_set-MAX_NUM_FORMS': '3',
-            'session_set-0-id':session.pk,
+            'session_set-0-id': session.pk,
             'session_set-0-name': session.name,
             'session_set-0-short': session.short,
             'session_set-0-purpose': session.purpose_id,
@@ -313,8 +297,8 @@ def test_edit_constraint_bethere(self):
             'session_set-1-id': '',
             'session_set-1-name': '',
             'session_set-1-short': '',
-            'session_set-1-purpose':'regular',
-            'session_set-1-type':'regular',
+            'session_set-1-purpose': 'regular',
+            'session_set-1-type': 'regular',
             'session_set-1-requested_duration': '',
             'session_set-1-on_agenda': 'True',
             'session_set-1-attendees': attendees,
@@ -333,7 +317,7 @@ def test_edit_constraint_bethere(self):
             'submit': 'Save',
         }
         r = self.client.post(url, post_data, HTTP_HOST='example.com')
-        redirect_url = reverse('ietf.secr.sreq.views.view', kwargs={'acronym': 'mars'})
+        redirect_url = reverse('ietf.meeting.views_session_request.view_request', kwargs={'acronym': 'mars'})
         self.assertRedirects(r, redirect_url)
         self.assertEqual([pc.person for pc in session.people_constraints.all()], [ad])
 
@@ -350,7 +334,7 @@ def test_edit_inactive_conflicts(self):
             target=other_group,
         )
 
-        url = reverse('ietf.secr.sreq.views.edit', kwargs=dict(acronym='mars'))
+        url = reverse('ietf.meeting.views_session_request.edit_request', kwargs=dict(acronym='mars'))
         self.client.login(username='marschairman', password='marschairman+password')
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -360,17 +344,17 @@ def test_edit_inactive_conflicts(self):
         found = q('input#id_delete_conflict[type="checkbox"]')
         self.assertEqual(len(found), 1)
         delete_checkbox = found[0]
-        # check that the label on the checkbox is correct
-        self.assertIn('Delete this conflict', delete_checkbox.tail)
+        self.assertIn('Delete this conflict', delete_checkbox.label.text)
         # check that the target is displayed correctly in the UI
-        self.assertIn(other_group.acronym, delete_checkbox.find('../input[@type="text"]').value)
+        row = found.parent().parent()
+        self.assertIn(other_group.acronym, row.find('input[@type="text"]').val())
 
         attendees = '10'
         post_data = {
             'num_session': '1',
             'attendees': attendees,
-            'constraint_chair_conflict':'',
-            'comments':'',
+            'constraint_chair_conflict': '',
+            'comments': '',
             'joint_with_groups': '',
             'joint_for_session': '',
             'delete_conflict': 'on',
@@ -378,7 +362,7 @@ def test_edit_inactive_conflicts(self):
             'session_set-INITIAL_FORMS': '1',
             'session_set-MIN_NUM_FORMS': '1',
             'session_set-MAX_NUM_FORMS': '3',
-            'session_set-0-id':session.pk,
+            'session_set-0-id': session.pk,
             'session_set-0-name': session.name,
             'session_set-0-short': session.short,
             'session_set-0-purpose': session.purpose_id,
@@ -392,28 +376,28 @@ def test_edit_inactive_conflicts(self):
             'submit': 'Save',
         }
         r = self.client.post(url, post_data, HTTP_HOST='example.com')
-        redirect_url = reverse('ietf.secr.sreq.views.view', kwargs={'acronym': 'mars'})
+        redirect_url = reverse('ietf.meeting.views_session_request.view_request', kwargs={'acronym': 'mars'})
         self.assertRedirects(r, redirect_url)
         self.assertEqual(len(mars.constraint_source_set.filter(name_id='conflict')), 0)
 
     def test_tool_status(self):
         MeetingFactory(type_id='ietf', date=date_today())
-        url = reverse('ietf.secr.sreq.views.tool_status')
+        url = reverse('ietf.meeting.views_session_request.status')
         self.client.login(username="secretary", password="secretary+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-        r = self.client.post(url, {'message':'locked', 'submit':'Lock'})
-        self.assertRedirects(r,reverse('ietf.secr.sreq.views.main'))
+        r = self.client.post(url, {'message': 'locked', 'submit': 'Lock'})
+        self.assertRedirects(r, reverse('ietf.meeting.views_session_request.list_view'))
 
     def test_new_req_constraint_types(self):
         """Configurable constraint types should be handled correctly in a new request
 
-        Relies on SessionForm representing constraint values with element IDs
+        Relies on SessionRequestForm representing constraint values with element IDs
         like id_constraint_<ConstraintName slug>
         """
         meeting = MeetingFactory(type_id='ietf', date=date_today())
         RoleFactory(name_id='chair', person__user__username='marschairman', group__acronym='mars')
-        url = reverse('ietf.secr.sreq.views.new', kwargs=dict(acronym='mars'))
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs=dict(acronym='mars'))
         self.client.login(username="marschairman", password="marschairman+password")
 
         for expected in [
@@ -441,7 +425,7 @@ def test_edit_req_constraint_types(self):
                        add_to_schedule=False)
         RoleFactory(name_id='chair', person__user__username='marschairman', group__acronym='mars')
 
-        url = reverse('ietf.secr.sreq.views.edit', kwargs=dict(acronym='mars'))
+        url = reverse('ietf.meeting.views_session_request.edit_request', kwargs=dict(acronym='mars'))
         self.client.login(username='marschairman', password='marschairman+password')
 
         for expected in [
@@ -460,6 +444,7 @@ def test_edit_req_constraint_types(self):
                 ['id_constraint_{}'.format(conf_name) for conf_name in expected],
             )
 
+
 class SubmitRequestCase(TestCase):
     def setUp(self):
         super(SubmitRequestCase, self).setUp()
@@ -476,15 +461,15 @@ def test_submit_request(self):
         group3 = GroupFactory(parent=area)
         group4 = GroupFactory(parent=area)
         session_count_before = Session.objects.filter(meeting=meeting, group=group).count()
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':group.acronym})
-        confirm_url = reverse('ietf.secr.sreq.views.confirm',kwargs={'acronym':group.acronym})
-        main_url = reverse('ietf.secr.sreq.views.main')
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs={'acronym': group.acronym})
+        confirm_url = reverse('ietf.meeting.views_session_request.confirm', kwargs={'acronym': group.acronym})
+        main_url = reverse('ietf.meeting.views_session_request.list_view')
         attendees = '10'
         comments = 'need projector'
-        post_data = {'num_session':'1',
-                     'attendees':attendees,
-                     'constraint_chair_conflict':'',
-                     'comments':comments,
+        post_data = {'num_session': '1',
+                     'attendees': attendees,
+                     'constraint_chair_conflict': '',
+                     'comments': comments,
                      'adjacent_with_wg': group2.acronym,
                      'timeranges': ['thursday-afternoon-early', 'thursday-afternoon-late'],
                      'joint_with_groups': group3.acronym + ' ' + group4.acronym,
@@ -506,7 +491,7 @@ def test_submit_request(self):
                      'session_set-0-DELETE': '',
                      'submit': 'Continue'}
         self.client.login(username="secretary", password="secretary+password")
-        r = self.client.post(url,post_data)
+        r = self.client.post(url, post_data)
         self.assertEqual(r.status_code, 200)
 
         # Verify the contents of the confirm view
@@ -515,13 +500,13 @@ def test_submit_request(self):
         self.assertContains(r, 'First session with: {} {}'.format(group3.acronym, group4.acronym))
 
         post_data['submit'] = 'Submit'
-        r = self.client.post(confirm_url,post_data)
+        r = self.client.post(confirm_url, post_data)
         self.assertRedirects(r, main_url)
         session_count_after = Session.objects.filter(meeting=meeting, group=group, type='regular').count()
         self.assertEqual(session_count_after, session_count_before + 1)
 
         # test that second confirm does not add sessions
-        r = self.client.post(confirm_url,post_data)
+        r = self.client.post(confirm_url, post_data)
         self.assertRedirects(r, main_url)
         session_count_after = Session.objects.filter(meeting=meeting, group=group, type='regular').count()
         self.assertEqual(session_count_after, session_count_before + 1)
@@ -535,42 +520,6 @@ def test_submit_request(self):
         )
         self.assertEqual(set(list(session.joint_with_groups.all())), set([group3, group4]))
 
-    def test_submit_request_invalid(self):
-        MeetingFactory(type_id='ietf', date=date_today())
-        ad = Person.objects.get(user__username='ad')
-        area = RoleFactory(name_id='ad', person=ad, group__type_id='area').group
-        group = GroupFactory(parent=area)
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':group.acronym})
-        attendees = '10'
-        comments = 'need projector'
-        post_data = {
-            'num_session':'2',
-            'attendees':attendees,
-            'constraint_chair_conflict':'',
-            'comments':comments,
-            'session_set-TOTAL_FORMS': '1',
-            'session_set-INITIAL_FORMS': '1',
-            'session_set-MIN_NUM_FORMS': '1',
-            'session_set-MAX_NUM_FORMS': '3',
-            # no 'session_set-0-id' to create a new session
-            'session_set-0-name': '',
-            'session_set-0-short': '',
-            'session_set-0-purpose': 'regular',
-            'session_set-0-type': 'regular',
-            'session_set-0-requested_duration': '3600',
-            'session_set-0-on_agenda': True,
-            'session_set-0-remote_instructions': '',
-            'session_set-0-attendees': attendees,
-            'session_set-0-comments': comments,
-            'session_set-0-DELETE': '',
-        }
-        self.client.login(username="secretary", password="secretary+password")
-        r = self.client.post(url,post_data)
-        self.assertEqual(r.status_code, 200)
-        q = PyQuery(r.content)
-        self.assertEqual(len(q('#session-request-form')),1)
-        self.assertContains(r, 'Must provide data for all sessions')
-
     def test_submit_request_check_constraints(self):
         m1 = MeetingFactory(type_id='ietf', date=date_today() - datetime.timedelta(days=100))
         MeetingFactory(type_id='ietf', date=date_today(),
@@ -597,7 +546,7 @@ def test_submit_request_check_constraints(self):
 
         self.client.login(username="secretary", password="secretary+password")
 
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':group.acronym})
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs={'acronym': group.acronym})
         r = self.client.get(url + '?previous')
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
@@ -607,11 +556,11 @@ def test_submit_request_check_constraints(self):
 
         attendees = '10'
         comments = 'need projector'
-        post_data = {'num_session':'1',
-                     'attendees':attendees,
+        post_data = {'num_session': '1',
+                     'attendees': attendees,
                      'constraint_chair_conflict': group.acronym,
-                     'comments':comments,
-                     'session_set-TOTAL_FORMS': '1',
+                     'comments': comments,
+                     'session_set-TOTAL_FORMS': '3',
                      'session_set-INITIAL_FORMS': '1',
                      'session_set-MIN_NUM_FORMS': '1',
                      'session_set-MAX_NUM_FORMS': '3',
@@ -626,11 +575,31 @@ def test_submit_request_check_constraints(self):
                      'session_set-0-attendees': attendees,
                      'session_set-0-comments': comments,
                      'session_set-0-DELETE': '',
+                     'session_set-1-name': '',
+                     'session_set-1-short': '',
+                     'session_set-1-purpose': session.purpose_id,
+                     'session_set-1-type': session.type_id,
+                     'session_set-1-requested_duration': '',
+                     'session_set-1-on_agenda': session.on_agenda,
+                     'session_set-1-remote_instructions': '',
+                     'session_set-1-attendees': attendees,
+                     'session_set-1-comments': '',
+                     'session_set-1-DELETE': 'on',
+                     'session_set-2-name': '',
+                     'session_set-2-short': '',
+                     'session_set-2-purpose': session.purpose_id,
+                     'session_set-2-type': session.type_id,
+                     'session_set-2-requested_duration': '',
+                     'session_set-2-on_agenda': session.on_agenda,
+                     'session_set-2-remote_instructions': '',
+                     'session_set-2-attendees': attendees,
+                     'session_set-2-comments': '',
+                     'session_set-2-DELETE': 'on',
                      'submit': 'Continue'}
-        r = self.client.post(url,post_data)
+        r = self.client.post(url, post_data)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#session-request-form')),1)
+        self.assertEqual(len(q('#session-request-form')), 1)
         self.assertContains(r, "Cannot declare a conflict with the same group")
 
     def test_request_notification(self):
@@ -645,18 +614,18 @@ def test_request_notification(self):
         RoleFactory(name_id='chair', group=group, person__user__username='ameschairman')
         resource = ResourceAssociation.objects.create(name_id='project')
         # Bit of a test data hack - the fixture now has no used resources to pick from
-        resource.name.used=True
+        resource.name.used = True
         resource.name.save()
 
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':group.acronym})
-        confirm_url = reverse('ietf.secr.sreq.views.confirm',kwargs={'acronym':group.acronym})
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs={'acronym': group.acronym})
+        confirm_url = reverse('ietf.meeting.views_session_request.confirm', kwargs={'acronym': group.acronym})
         len_before = len(outbox)
         attendees = '10'
-        post_data = {'num_session':'2',
-                     'attendees':attendees,
-                     'bethere':str(ad.pk),
-                     'constraint_chair_conflict':group4.acronym,
-                     'comments':'',
+        post_data = {'num_session': '2',
+                     'attendees': attendees,
+                     'bethere': str(ad.pk),
+                     'constraint_chair_conflict': group4.acronym,
+                     'comments': '',
                      'resources': resource.pk,
                      'session_time_relation': 'subsequent-days',
                      'adjacent_with_wg': group2.acronym,
@@ -692,23 +661,23 @@ def test_request_notification(self):
                      'submit': 'Continue'}
         self.client.login(username="ameschairman", password="ameschairman+password")
         # submit
-        r = self.client.post(url,post_data)
+        r = self.client.post(url, post_data)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue('Confirm' in str(q("title")), r.context['form'].errors)
         # confirm
         post_data['submit'] = 'Submit'
-        r = self.client.post(confirm_url,post_data)
-        self.assertRedirects(r, reverse('ietf.secr.sreq.views.main'))
-        self.assertEqual(len(outbox),len_before+1)
+        r = self.client.post(confirm_url, post_data)
+        self.assertRedirects(r, reverse('ietf.meeting.views_session_request.list_view'))
+        self.assertEqual(len(outbox), len_before + 1)
         notification = outbox[-1]
         notification_payload = get_payload_text(notification)
-        sessions = Session.objects.filter(meeting=meeting,group=group)
+        sessions = Session.objects.filter(meeting=meeting, group=group)
         self.assertEqual(len(sessions), 2)
         session = sessions[0]
 
-        self.assertEqual(session.resources.count(),1)
-        self.assertEqual(session.people_constraints.count(),1)
+        self.assertEqual(session.resources.count(), 1)
+        self.assertEqual(session.people_constraints.count(), 1)
         self.assertEqual(session.constraints().get(name='time_relation').time_relation, 'subsequent-days')
         self.assertEqual(session.constraints().get(name='wg_adjacent').target.acronym, group2.acronym)
         self.assertEqual(
@@ -731,7 +700,7 @@ def test_request_notification(self):
     def test_request_notification_msg(self):
         to = "<iesg-secretary@ietf.org>"
         subject = "Dummy subject"
-        template = "sreq/session_request_notification.txt"
+        template = "meeting/session_request_notification.txt"
         header = "A new"
         meeting = MeetingFactory(type_id="ietf", date=date_today())
         requester = PersonFactory(name="James O'Rourke", user__username="jimorourke")
@@ -767,19 +736,19 @@ def test_request_notification_third_session(self):
         RoleFactory(name_id='chair', group=group, person__user__username='ameschairman')
         resource = ResourceAssociation.objects.create(name_id='project')
         # Bit of a test data hack - the fixture now has no used resources to pick from
-        resource.name.used=True
+        resource.name.used = True
         resource.name.save()
 
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':group.acronym})
-        confirm_url = reverse('ietf.secr.sreq.views.confirm',kwargs={'acronym':group.acronym})
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs={'acronym': group.acronym})
+        confirm_url = reverse('ietf.meeting.views_session_request.confirm', kwargs={'acronym': group.acronym})
         len_before = len(outbox)
         attendees = '10'
-        post_data = {'num_session':'2',
+        post_data = {'num_session': '2',
                      'third_session': 'true',
-                     'attendees':attendees,
-                     'bethere':str(ad.pk),
-                     'constraint_chair_conflict':group4.acronym,
-                     'comments':'',
+                     'attendees': attendees,
+                     'bethere': str(ad.pk),
+                     'constraint_chair_conflict': group4.acronym,
+                     'comments': '',
                      'resources': resource.pk,
                      'session_time_relation': 'subsequent-days',
                      'adjacent_with_wg': group2.acronym,
@@ -826,23 +795,23 @@ def test_request_notification_third_session(self):
                      'submit': 'Continue'}
         self.client.login(username="ameschairman", password="ameschairman+password")
         # submit
-        r = self.client.post(url,post_data)
+        r = self.client.post(url, post_data)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue('Confirm' in str(q("title")), r.context['form'].errors)
         # confirm
         post_data['submit'] = 'Submit'
-        r = self.client.post(confirm_url,post_data)
-        self.assertRedirects(r, reverse('ietf.secr.sreq.views.main'))
-        self.assertEqual(len(outbox),len_before+1)
+        r = self.client.post(confirm_url, post_data)
+        self.assertRedirects(r, reverse('ietf.meeting.views_session_request.list_view'))
+        self.assertEqual(len(outbox), len_before + 1)
         notification = outbox[-1]
         notification_payload = get_payload_text(notification)
-        sessions = Session.objects.filter(meeting=meeting,group=group)
+        sessions = Session.objects.filter(meeting=meeting, group=group)
         self.assertEqual(len(sessions), 3)
         session = sessions[0]
 
-        self.assertEqual(session.resources.count(),1)
-        self.assertEqual(session.people_constraints.count(),1)
+        self.assertEqual(session.resources.count(), 1)
+        self.assertEqual(session.people_constraints.count(), 1)
         self.assertEqual(session.constraints().get(name='time_relation').time_relation, 'subsequent-days')
         self.assertEqual(session.constraints().get(name='wg_adjacent').target.acronym, group2.acronym)
         self.assertEqual(
@@ -861,16 +830,17 @@ def test_request_notification_third_session(self):
         self.assertIn('1 Hour, 1 Hour, 1 Hour', notification_payload)
         self.assertIn('The third session requires your approval', notification_payload)
 
+
 class LockAppTestCase(TestCase):
     def setUp(self):
         super().setUp()
-        self.meeting = MeetingFactory(type_id='ietf', date=date_today(),session_request_lock_message='locked')
+        self.meeting = MeetingFactory(type_id='ietf', date=date_today(), session_request_lock_message='locked')
         self.group = GroupFactory(acronym='mars')
         RoleFactory(name_id='chair', group=self.group, person__user__username='marschairman')
-        SessionFactory(group=self.group,meeting=self.meeting)
+        SessionFactory(group=self.group, meeting=self.meeting)
 
     def test_edit_request(self):
-        url = reverse('ietf.secr.sreq.views.edit',kwargs={'acronym':self.group.acronym})
+        url = reverse('ietf.meeting.views_session_request.edit_request', kwargs={'acronym': self.group.acronym})
         self.client.login(username="secretary", password="secretary+password")
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
@@ -882,48 +852,49 @@ def test_edit_request(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertEqual(len(q(':disabled[name="submit"]')), 1)
-    
+
     def test_view_request(self):
-        url = reverse('ietf.secr.sreq.views.view',kwargs={'acronym':self.group.acronym})
+        url = reverse('ietf.meeting.views_session_request.view_request', kwargs={'acronym': self.group.acronym})
         self.client.login(username="secretary", password="secretary+password")
-        r = self.client.get(url,follow=True)
+        r = self.client.get(url, follow=True)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertEqual(len(q(':enabled[name="edit"]')), 1)  # secretary can edit
         chair = self.group.role_set.filter(name_id='chair').first().person.user.username
         self.client.login(username=chair, password=f'{chair}+password')
-        r = self.client.get(url,follow=True)
+        r = self.client.get(url, follow=True)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertEqual(len(q(':disabled[name="edit"]')), 1)  # chair cannot edit
 
     def test_new_request(self):
-        url = reverse('ietf.secr.sreq.views.new',kwargs={'acronym':self.group.acronym})
-        
+        url = reverse('ietf.meeting.views_session_request.new_request', kwargs={'acronym': self.group.acronym})
+
         # try as WG Chair
         self.client.login(username="marschairman", password="marschairman+password")
         r = self.client.get(url, follow=True)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#session-request-form')),0)
-        
+        self.assertEqual(len(q('#session-request-form')), 0)
+
         # try as Secretariat
         self.client.login(username="secretary", password="secretary+password")
-        r = self.client.get(url,follow=True)
+        r = self.client.get(url, follow=True)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertEqual(len(q('#session-request-form')),1)
-    
+        self.assertEqual(len(q('#session-request-form')), 1)
+
+
 class NotMeetingCase(TestCase):
     def test_not_meeting(self):
-        MeetingFactory(type_id='ietf',date=date_today())
+        MeetingFactory(type_id='ietf', date=date_today())
         group = GroupFactory(acronym='mars')
-        url = reverse('ietf.secr.sreq.views.no_session',kwargs={'acronym':group.acronym}) 
+        url = reverse('ietf.meeting.views_session_request.no_session', kwargs={'acronym': group.acronym})
         self.client.login(username="secretary", password="secretary+password")
 
         empty_outbox()
 
-        r = self.client.get(url,follow=True)
+        r = self.client.get(url, follow=True)
         # If the view invoked by that get throws an exception (such as an integrity error),
         # the traceback from this test will talk about a TransactionManagementError and
         # yell about executing queries before the end of an 'atomic' block
@@ -932,14 +903,15 @@ def test_not_meeting(self):
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, 'A message was sent to notify not having a session')
 
-        r = self.client.get(url,follow=True)
+        r = self.client.get(url, follow=True)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, 'is already marked as not meeting')
 
-        self.assertEqual(len(outbox),1)
+        self.assertEqual(len(outbox), 1)
         self.assertTrue('Not having a session' in outbox[0]['Subject'])
         self.assertTrue('session-request@' in outbox[0]['To'])
 
+
 class RetrievePreviousCase(TestCase):
     pass
 
@@ -949,7 +921,7 @@ class RetrievePreviousCase(TestCase):
     # test access by unauthorized
 
 
-class SessionFormTest(TestCase):
+class SessionRequestFormTest(TestCase):
     def setUp(self):
         super().setUp()
         self.meeting = MeetingFactory(type_id='ietf')
@@ -1014,19 +986,19 @@ def setUp(self):
             'session_set-2-comments': '',
             'session_set-2-DELETE': '',
         }
-        
+
     def test_valid(self):
         # Test with three sessions
-        form = SessionForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
+        form = SessionRequestForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
         self.assertTrue(form.is_valid())
-        
+
         # Test with two sessions
         self.valid_form_data.update({
             'third_session': '',
             'session_set-TOTAL_FORMS': '2',
             'joint_for_session': '2'
         })
-        form = SessionForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
+        form = SessionRequestForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
         self.assertTrue(form.is_valid())
 
         # Test with one session
@@ -1036,9 +1008,9 @@ def test_valid(self):
             'joint_for_session': '1',
             'session_time_relation': '',
         })
-        form = SessionForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
+        form = SessionRequestForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
         self.assertTrue(form.is_valid())
-    
+
     def test_invalid_groups(self):
         new_form_data = {
             'constraint_chair_conflict': 'doesnotexist',
@@ -1057,7 +1029,7 @@ def test_valid_group_appears_in_multiple_conflicts(self):
             'constraint_tech_overlap': self.group2.acronym,
         }
         self.valid_form_data.update(new_form_data)
-        form = SessionForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
+        form = SessionRequestForm(data=self.valid_form_data, group=self.group1, meeting=self.meeting)
         self.assertTrue(form.is_valid())
 
     def test_invalid_group_appears_in_multiple_conflicts(self):
@@ -1116,7 +1088,7 @@ def test_invalid_joint_for_session(self):
                              'joint_for_session': [
                                  'Session 2 can not be the joint session, the session has not been requested.']
                          })
-    
+
     def test_invalid_missing_session_length(self):
         form = self._invalid_test_helper({
             'session_set-TOTAL_FORMS': '2',
@@ -1156,6 +1128,6 @@ def test_invalid_missing_session_length(self):
 
     def _invalid_test_helper(self, new_form_data):
         form_data = dict(self.valid_form_data, **new_form_data)
-        form = SessionForm(data=form_data, group=self.group1, meeting=self.meeting)
+        form = SessionRequestForm(data=form_data, group=self.group1, meeting=self.meeting)
         self.assertFalse(form.is_valid())
         return form
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index bd3ab772fc..b1bbc62907 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2009-2024, All Rights Reserved
+# Copyright The IETF Trust 2009-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 import datetime
 import io
@@ -7554,7 +7554,7 @@ def test_meeting_requests(self):
         )
         def _sreq_edit_link(sess):
             return urlreverse(
-                'ietf.secr.sreq.views.edit',
+                'ietf.meeting.views_session_request.edit_request',
                 kwargs={
                     'num': meeting.number,
                     'acronym': sess.group.acronym,
diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index 18b123b4d8..af36a6656c 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -1,10 +1,10 @@
-# Copyright The IETF Trust 2007-2024, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 
 from django.conf import settings
 from django.urls import include
 from django.views.generic import RedirectView
 
-from ietf.meeting import views, views_proceedings
+from ietf.meeting import views, views_proceedings, views_session_request
 from ietf.utils.urls import url
 
 class AgendaRedirectView(RedirectView):
@@ -108,6 +108,8 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^important-dates.(?P<output_format>ics)$', views.important_dates),
     url(r'^proceedings/meetinghosts/edit/', views_proceedings.edit_meetinghosts),
     url(r'^proceedings/meetinghosts/(?P<host_id>\d+)/logo/$', views_proceedings.meetinghost_logo),
+    url(r'^session/request/%(acronym)s/edit/$' % settings.URL_REGEXPS, views_session_request.edit_request),
+    url(r'^session/request/%(acronym)s/view/$' % settings.URL_REGEXPS, views_session_request.view_request),
 ]
 
 urlpatterns = [
@@ -127,6 +129,13 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^upcoming/?$', views.upcoming),
     url(r'^upcoming\.ics/?$', views.upcoming_ical),
     url(r'^upcoming\.json/?$', views.upcoming_json),
+    url(r'^session/request/$', views_session_request.list_view),
+    url(r'^session/request/%(acronym)s/new/$' % settings.URL_REGEXPS, views_session_request.new_request),
+    url(r'^session/request/%(acronym)s/approve/$' % settings.URL_REGEXPS, views_session_request.approve_request),
+    url(r'^session/request/%(acronym)s/no_session/$' % settings.URL_REGEXPS, views_session_request.no_session),
+    url(r'^session/request/%(acronym)s/cancel/$' % settings.URL_REGEXPS, views_session_request.cancel_request),
+    url(r'^session/request/%(acronym)s/confirm/$' % settings.URL_REGEXPS, views_session_request.confirm),
+    url(r'^session/request/status/$', views_session_request.status),
     url(r'^session/(?P<session_id>\d+)/agenda_materials$', views.session_materials),
     url(r'^session/(?P<session_id>\d+)/cancel/?', views.cancel_session),
     url(r'^session/(?P<session_id>\d+)/edit/?', views.edit_session),
@@ -140,4 +149,3 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^(?P<num>\d+)/', include(safe_for_all_meeting_types)),
     url(r'^(?P<num>interim-[a-z0-9-]+)/', include(safe_for_all_meeting_types)),
 ]
-
diff --git a/ietf/secr/sreq/views.py b/ietf/meeting/views_session_request.py
similarity index 80%
rename from ietf/secr/sreq/views.py
rename to ietf/meeting/views_session_request.py
index eb93168e1c..a1ef74f1b8 100644
--- a/ietf/secr/sreq/views.py
+++ b/ietf/meeting/views_session_request.py
@@ -1,29 +1,26 @@
-# Copyright The IETF Trust 2013-2022, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
-
 import datetime
 import inflect
 from collections import defaultdict, OrderedDict
 
 from django.conf import settings
 from django.contrib import messages
+from django.core.exceptions import ObjectDoesNotExist
 from django.db.models import Q
 from django.shortcuts import render, get_object_or_404, redirect
 from django.http import Http404
 
-import debug                            # pyflakes:ignore
-
 from ietf.group.models import Group, GroupFeatures
 from ietf.ietfauth.utils import has_role, role_required
-from ietf.meeting.models import Meeting, Session, Constraint, ResourceAssociation, SchedulingEvent
 from ietf.meeting.helpers import get_meeting
+from ietf.meeting.models import Session, Meeting, Constraint, ResourceAssociation, SchedulingEvent
 from ietf.meeting.utils import add_event_info_to_session_qs
-from ietf.name.models import SessionStatusName, ConstraintName
-from ietf.secr.sreq.forms import (SessionForm, ToolStatusForm, allowed_conflicting_groups,
+from ietf.meeting.forms import (SessionRequestStatusForm, SessionRequestForm, allowed_conflicting_groups,
     JOINT_FOR_SESSION_CHOICES)
+from ietf.name.models import SessionStatusName, ConstraintName
 from ietf.secr.utils.decorators import check_permissions
-from ietf.secr.utils.group import get_my_groups
 from ietf.utils.mail import send_mail
 from ietf.mailtrigger.utils import gather_address_lists
 
@@ -31,12 +28,25 @@
 # Globals
 # -------------------------------------------------
 # TODO: This needs to be replaced with something that pays attention to groupfeatures
-AUTHORIZED_ROLES=('WG Chair','WG Secretary','RG Chair','IAB Group Chair','Area Director','Secretariat','Team Chair','IRTF Chair','Program Chair','Program Lead','Program Secretary', 'EDWG Chair')
+AUTHORIZED_ROLES = (
+    'WG Chair',
+    'WG Secretary',
+    'RG Chair',
+    'IAB Group Chair',
+    'Area Director',
+    'Secretariat',
+    'Team Chair',
+    'IRTF Chair',
+    'Program Chair',
+    'Program Lead',
+    'Program Secretary',
+    'EDWG Chair')
 
 # -------------------------------------------------
 # Helper Functions
 # -------------------------------------------------
 
+
 def check_app_locked(meeting=None):
     '''
     This function returns True if the application is locked to non-secretariat users.
@@ -45,6 +55,54 @@ def check_app_locked(meeting=None):
         meeting = get_meeting(days=14)
     return bool(meeting.session_request_lock_message)
 
+
+def get_lock_message(meeting=None):
+    '''
+    Returns the message to display to non-secretariat users when the tool is locked.
+    '''
+    if not meeting:
+        meeting = get_meeting(days=14)
+    return meeting.session_request_lock_message
+
+
+def get_my_groups(user, conclude=False):
+    '''
+    Takes a Django user object (from request)
+    Returns a list of groups the user has access to.  Rules are as follows
+    secretariat - has access to all groups
+    area director - has access to all groups in their area
+    wg chair or secretary - has access to their own group
+    chair of irtf has access to all irtf groups
+
+    If user=None than all groups are returned.
+    concluded=True means include concluded groups.  Need this to upload materials for groups
+    after they've been concluded.  it happens.
+    '''
+    my_groups = set()
+    states = ['bof', 'proposed', 'active']
+    if conclude:
+        states.extend(['conclude', 'bof-conc'])
+
+    all_groups = Group.objects.filter(type__features__has_meetings=True, state__in=states).order_by('acronym')
+    if user is None or has_role(user, 'Secretariat'):
+        return all_groups
+
+    try:
+        person = user.person
+    except ObjectDoesNotExist:
+        return list()
+
+    for group in all_groups:
+        if group.role_set.filter(person=person, name__in=('chair', 'secr', 'ad')):
+            my_groups.add(group)
+            continue
+        if group.parent and group.parent.role_set.filter(person=person, name__in=('ad', 'chair')):
+            my_groups.add(group)
+            continue
+
+    return list(my_groups)
+
+
 def get_initial_session(sessions, prune_conflicts=False):
     '''
     This function takes a queryset of sessions ordered by 'id' for consistency.  It returns
@@ -97,13 +155,43 @@ def valid_conflict(conflict):
             initial['joint_for_session_display'] = dict(JOINT_FOR_SESSION_CHOICES)[initial['joint_for_session']]
     return initial
 
-def get_lock_message(meeting=None):
+
+def inbound_session_conflicts_as_string(group, meeting):
     '''
-    Returns the message to display to non-secretariat users when the tool is locked.
+    Takes a Group object and Meeting object and returns a string of other groups which have
+    a conflict with this one
     '''
-    if not meeting:
-        meeting = get_meeting(days=14)
-    return meeting.session_request_lock_message
+    constraints = group.constraint_target_set.filter(meeting=meeting, name__is_group_conflict=True)
+    group_set = set(constraints.values_list('source__acronym', flat=True))  # set to de-dupe
+    group_list = sorted(group_set)  # give a consistent order
+    return ', '.join(group_list)
+
+
+def get_outbound_conflicts(form: SessionRequestForm):
+    """extract wg conflict constraint data from a SessionForm"""
+    outbound_conflicts = []
+    for conflictname, cfield_id in form.wg_constraint_field_ids():
+        conflict_groups = form.cleaned_data[cfield_id]
+        if len(conflict_groups) > 0:
+            outbound_conflicts.append(dict(name=conflictname, groups=conflict_groups))
+    return outbound_conflicts
+
+
+def save_conflicts(group, meeting, conflicts, name):
+    '''
+    This function takes a Group, Meeting a string which is a list of Groups acronyms (conflicts),
+    and the constraint name (conflict|conflic2|conflic3) and creates Constraint records
+    '''
+    constraint_name = ConstraintName.objects.get(slug=name)
+    acronyms = conflicts.replace(',',' ').split()
+    for acronym in acronyms:
+        target = Group.objects.get(acronym=acronym)
+
+        constraint = Constraint(source=group,
+                                target=target,
+                                meeting=meeting,
+                                name=constraint_name)
+        constraint.save()
 
 
 def get_requester_text(person, group):
@@ -129,22 +217,6 @@ def get_requester_text(person, group):
         )
 
 
-def save_conflicts(group, meeting, conflicts, name):
-    '''
-    This function takes a Group, Meeting a string which is a list of Groups acronyms (conflicts),
-    and the constraint name (conflict|conflic2|conflic3) and creates Constraint records
-    '''
-    constraint_name = ConstraintName.objects.get(slug=name)
-    acronyms = conflicts.replace(',',' ').split()
-    for acronym in acronyms:
-        target = Group.objects.get(acronym=acronym)
-
-        constraint = Constraint(source=group,
-                                target=target,
-                                meeting=meeting,
-                                name=constraint_name)
-        constraint.save()
-
 def send_notification(group, meeting, login, sreq_data, session_data, action):
     '''
     This function generates email notifications for various session request activities.
@@ -152,10 +224,10 @@ def send_notification(group, meeting, login, sreq_data, session_data, action):
     session_data is an array of data from individual session subforms
     action argument is a string [new|update].
     '''
-    (to_email, cc_list) = gather_address_lists('session_requested',group=group,person=login)
+    (to_email, cc_list) = gather_address_lists('session_requested', group=group, person=login)
     from_email = (settings.SESSION_REQUEST_FROM_EMAIL)
     subject = '%s - New Meeting Session Request for IETF %s' % (group.acronym, meeting.number)
-    template = 'sreq/session_request_notification.txt'
+    template = 'meeting/session_request_notification.txt'
 
     # send email
     context = {}
@@ -164,7 +236,7 @@ def send_notification(group, meeting, login, sreq_data, session_data, action):
     context['meeting'] = meeting
     context['login'] = login
     context['header'] = 'A new'
-    context['requester'] = get_requester_text(login,group)
+    context['requester'] = get_requester_text(login, group)
 
     # update overrides
     if action == 'update':
@@ -174,10 +246,10 @@ def send_notification(group, meeting, login, sreq_data, session_data, action):
     # if third session requested approval is required
     # change headers TO=ADs, CC=session-request, submitter and cochairs
     if len(session_data) > 2:
-        (to_email, cc_list) = gather_address_lists('session_requested_long',group=group,person=login)
+        (to_email, cc_list) = gather_address_lists('session_requested_long', group=group, person=login)
         subject = '%s - Request for meeting session approval for IETF %s' % (group.acronym, meeting.number)
-        template = 'sreq/session_approval_notification.txt'
-        #status_text = 'the %s Directors for approval' % group.parent
+        template = 'meeting/session_approval_notification.txt'
+        # status_text = 'the %s Directors for approval' % group.parent
 
     context['session_lengths'] = [sd['requested_duration'] for sd in session_data]
 
@@ -189,103 +261,188 @@ def send_notification(group, meeting, login, sreq_data, session_data, action):
               context,
               cc=cc_list)
 
-def inbound_session_conflicts_as_string(group, meeting):
-    '''
-    Takes a Group object and Meeting object and returns a string of other groups which have
-    a conflict with this one
-    '''
-    constraints = group.constraint_target_set.filter(meeting=meeting, name__is_group_conflict=True)
-    group_set = set(constraints.values_list('source__acronym', flat=True))  # set to de-dupe
-    group_list = sorted(group_set)  # give a consistent order
-    return ', '.join(group_list)
+
+def session_changed(session):
+    latest_event = SchedulingEvent.objects.filter(session=session).order_by('-time', '-id').first()
+
+    if latest_event and latest_event.status_id == "schedw" and session.meeting.schedule is not None:
+        # send an email to iesg-secretariat to alert to change
+        pass
+
+
+def status_slug_for_new_session(session, session_number):
+    if session.group.features.acts_like_wg and session_number == 2:
+        return 'apprw'
+    return 'schedw'
 
 # -------------------------------------------------
 # View Functions
 # -------------------------------------------------
-@check_permissions
-def approve(request, acronym):
+
+
+@role_required(*AUTHORIZED_ROLES)
+def list_view(request):
     '''
-    This view approves the third session.  For use by ADs or Secretariat.
+    Display list of groups the user has access to.
     '''
     meeting = get_meeting(days=14)
-    group = get_object_or_404(Group, acronym=acronym)
 
-    session = add_event_info_to_session_qs(Session.objects.filter(meeting=meeting, group=group)).filter(current_status='apprw').first()
-    if session is None:
-        raise Http404
+    # check for locked flag
+    is_locked = check_app_locked()
+    if is_locked and not has_role(request.user, 'Secretariat'):
+        message = get_lock_message()
+        return render(request, 'meeting/session_request_locked.html', {
+            'message': message,
+            'meeting': meeting})
 
-    if has_role(request.user,'Secretariat') or group.parent.role_set.filter(name='ad',person=request.user.person):
-        SchedulingEvent.objects.create(
-            session=session,
-            status=SessionStatusName.objects.get(slug='appr'),
-            by=request.user.person,
-        )
-        session_changed(session)
+    scheduled_groups = []
+    unscheduled_groups = []
 
-        messages.success(request, 'Third session approved')
-        return redirect('ietf.secr.sreq.views.view', acronym=acronym)
-    else:
-        # if an unauthorized user gets here return error
-        messages.error(request, 'Not authorized to approve the third session')
-        return redirect('ietf.secr.sreq.views.view', acronym=acronym)
+    group_types = GroupFeatures.objects.filter(has_meetings=True).values_list('type', flat=True)
 
-@check_permissions
-def cancel(request, acronym):
-    '''
-    This view cancels a session request and sends a notification.
-    To cancel, or withdraw the request set status = deleted.
-    "canceled" status is used by the secretariat.
+    my_groups = [g for g in get_my_groups(request.user, conclude=True) if g.type_id in group_types]
 
-    NOTE: this function can also be called after a session has been
-    scheduled during the period when the session request tool is
-    reopened.  In this case be sure to clear the timeslot assignment as well.
+    sessions_by_group = defaultdict(list)
+    for s in add_event_info_to_session_qs(Session.objects.filter(meeting=meeting, group__in=my_groups)).filter(current_status__in=['schedw', 'apprw', 'appr', 'sched']):
+        sessions_by_group[s.group_id].append(s)
+
+    for group in my_groups:
+        group.meeting_sessions = sessions_by_group.get(group.pk, [])
+
+        if group.pk in sessions_by_group:
+            # include even if concluded as we need to to see that the
+            # sessions are there
+            scheduled_groups.append(group)
+        else:
+            if group.state_id not in ['conclude', 'bof-conc']:
+                # too late for unscheduled if concluded
+                unscheduled_groups.append(group)
+
+    # warn if there are no associated groups
+    if not scheduled_groups and not unscheduled_groups:
+        messages.warning(request, 'The account %s is not associated with any groups.  If you have multiple Datatracker accounts you may try another or report a problem to %s' % (request.user, settings.SECRETARIAT_ACTION_EMAIL))
+
+    # add session status messages for use in template
+    for group in scheduled_groups:
+        if not group.features.acts_like_wg or (len(group.meeting_sessions) < 3):
+            group.status_message = group.meeting_sessions[0].current_status
+        else:
+            group.status_message = 'First two sessions: %s, Third session: %s' % (group.meeting_sessions[0].current_status, group.meeting_sessions[2].current_status)
+
+    # add not meeting indicators for use in template
+    for group in unscheduled_groups:
+        if any(s.current_status == 'notmeet' for s in group.meeting_sessions):
+            group.not_meeting = True
+
+    return render(request, 'meeting/session_request_list.html', {
+        'is_locked': is_locked,
+        'meeting': meeting,
+        'scheduled_groups': scheduled_groups,
+        'unscheduled_groups': unscheduled_groups},
+    )
+
+
+@role_required('Secretariat')
+def status(request):
+    '''
+    This view handles locking and unlocking of the session request tool to the public.
     '''
     meeting = get_meeting(days=14)
-    group = get_object_or_404(Group, acronym=acronym)
-    sessions = Session.objects.filter(meeting=meeting,group=group).order_by('id')
-    login = request.user.person
+    is_locked = check_app_locked(meeting=meeting)
 
-    # delete conflicts
-    Constraint.objects.filter(meeting=meeting,source=group).delete()
+    if request.method == 'POST':
+        button_text = request.POST.get('submit', '')
+        if button_text == 'Back':
+            return redirect('ietf.meeting.views_session_request.list_view')
 
-    # mark sessions as deleted
-    for session in sessions:
-        SchedulingEvent.objects.create(
-            session=session,
-            status=SessionStatusName.objects.get(slug='deleted'),
-            by=request.user.person,
-        )
-        session_changed(session)
+        form = SessionRequestStatusForm(request.POST)
 
-        # clear schedule assignments if already scheduled
-        session.timeslotassignments.all().delete()
+        if button_text == 'Lock':
+            if form.is_valid():
+                meeting.session_request_lock_message = form.cleaned_data['message']
+                meeting.save()
+                messages.success(request, 'Session Request Tool is now Locked')
+                return redirect('ietf.meeting.views_session_request.list_view')
 
-    # send notifitcation
-    (to_email, cc_list) = gather_address_lists('session_request_cancelled',group=group,person=login)
-    from_email = (settings.SESSION_REQUEST_FROM_EMAIL)
-    subject = '%s - Cancelling a meeting request for IETF %s' % (group.acronym, meeting.number)
-    send_mail(request, to_email, from_email, subject, 'sreq/session_cancel_notification.txt',
-              {'requester':get_requester_text(login,group),
-               'meeting':meeting}, cc=cc_list)
+        elif button_text == 'Unlock':
+            meeting.session_request_lock_message = ''
+            meeting.save()
+            messages.success(request, 'Session Request Tool is now Unlocked')
+            return redirect('ietf.meeting.views_session_request.list_view')
 
-    messages.success(request, 'The %s Session Request has been cancelled' % group.acronym)
-    return redirect('ietf.secr.sreq.views.main')
+    else:
+        if is_locked:
+            message = get_lock_message()
+            initial = {'message': message}
+            form = SessionRequestStatusForm(initial=initial)
+        else:
+            form = SessionRequestStatusForm()
 
+    return render(request, 'meeting/session_request_status.html', {
+        'is_locked': is_locked,
+        'form': form},
+    )
 
-def status_slug_for_new_session(session, session_number):
-    if session.group.features.acts_like_wg and session_number == 2:
-        return 'apprw'
-    return 'schedw'
 
+@check_permissions
+def new_request(request, acronym):
+    '''
+    This view gathers details for a new session request.  The user proceeds to confirm()
+    to create the request.
+    '''
+    group = get_object_or_404(Group, acronym=acronym)
+    if len(group.features.session_purposes) == 0:
+        raise Http404(f'Cannot request sessions for group "{acronym}"')
+    meeting = get_meeting(days=14)
+    session_conflicts = dict(inbound=inbound_session_conflicts_as_string(group, meeting))
 
-def get_outbound_conflicts(form: SessionForm):
-    """extract wg conflict constraint data from a SessionForm"""
-    outbound_conflicts = []
-    for conflictname, cfield_id in form.wg_constraint_field_ids():
-        conflict_groups = form.cleaned_data[cfield_id]
-        if len(conflict_groups) > 0:
-            outbound_conflicts.append(dict(name=conflictname, groups=conflict_groups))
-    return outbound_conflicts
+    # check if app is locked
+    is_locked = check_app_locked()
+    if is_locked and not has_role(request.user, 'Secretariat'):
+        messages.warning(request, "The Session Request Tool is closed")
+        return redirect('ietf.meeting.views_session_request.list_view')
+
+    if request.method == 'POST':
+        button_text = request.POST.get('submit', '')
+        if button_text == 'Cancel':
+            return redirect('ietf.meeting.views_session_request.list_view')
+
+        form = SessionRequestForm(group, meeting, request.POST, notifications_optional=has_role(request.user, "Secretariat"))
+        if form.is_valid():
+            return confirm(request, acronym)
+
+    # the "previous" querystring causes the form to be returned
+    # pre-populated with data from last meeeting's session request
+    elif request.method == 'GET' and 'previous' in request.GET:
+        latest_session = add_event_info_to_session_qs(Session.objects.filter(meeting__type_id='ietf', group=group)).exclude(current_status__in=['notmeet', 'deleted', 'canceled',]).order_by('-meeting__date').first()
+        if latest_session:
+            previous_meeting = Meeting.objects.get(number=latest_session.meeting.number)
+            previous_sessions = add_event_info_to_session_qs(Session.objects.filter(meeting=previous_meeting, group=group)).exclude(current_status__in=['notmeet', 'deleted']).order_by('id')
+            if not previous_sessions:
+                messages.warning(request, 'This group did not meet at %s' % previous_meeting)
+                return redirect('ietf.meeting.views_session_request.new_request', acronym=acronym)
+            else:
+                messages.info(request, 'Fetched session info from %s' % previous_meeting)
+        else:
+            messages.warning(request, 'Did not find any previous meeting')
+            return redirect('ietf.meeting.views_session_request.new_request', acronym=acronym)
+
+        initial = get_initial_session(previous_sessions, prune_conflicts=True)
+        if 'resources' in initial:
+            initial['resources'] = [x.pk for x in initial['resources']]
+        form = SessionRequestForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+
+    else:
+        initial = {}
+        form = SessionRequestForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+
+    return render(request, 'meeting/session_request_form.html', {
+        'meeting': meeting,
+        'form': form,
+        'group': group,
+        'is_create': True,
+        'session_conflicts': session_conflicts},
+    )
 
 
 @role_required(*AUTHORIZED_ROLES)
@@ -295,11 +452,11 @@ def confirm(request, acronym):
     to confirm for submission.
     '''
     # FIXME: this should be using form.is_valid/form.cleaned_data - invalid input will make it crash
-    group = get_object_or_404(Group,acronym=acronym)
+    group = get_object_or_404(Group, acronym=acronym)
     if len(group.features.session_purposes) == 0:
         raise Http404(f'Cannot request sessions for group "{acronym}"')
     meeting = get_meeting(days=14)
-    form = SessionForm(group, meeting, request.POST, hidden=True, notifications_optional=has_role(request.user, "Secretariat"))
+    form = SessionRequestForm(group, meeting, request.POST, hidden=True, notifications_optional=has_role(request.user, "Secretariat"))
     form.is_valid()
 
     login = request.user.person
@@ -307,8 +464,8 @@ def confirm(request, acronym):
     # check if request already exists for this group
     if add_event_info_to_session_qs(Session.objects.filter(group=group, meeting=meeting)).filter(Q(current_status__isnull=True) | ~Q(current_status__in=['deleted', 'notmeet'])):
         messages.warning(request, 'Sessions for working group %s have already been requested once.' % group.acronym)
-        return redirect('ietf.secr.sreq.views.main')
-                
+        return redirect('ietf.meeting.views_session_request.list_view')
+
     session_data = form.data.copy()
     # use cleaned_data for the 'bethere' field so we get the Person instances
     session_data['bethere'] = form.cleaned_data['bethere'] if 'bethere' in form.cleaned_data else []
@@ -318,7 +475,7 @@ def confirm(request, acronym):
         session_data['joint_for_session_display'] = dict(JOINT_FOR_SESSION_CHOICES)[session_data['joint_for_session']]
     if form.cleaned_data.get('timeranges'):
         session_data['timeranges_display'] = [t.desc for t in form.cleaned_data['timeranges']]
-    session_data['resources'] = [ ResourceAssociation.objects.get(pk=pk) for pk in request.POST.getlist('resources') ]
+    session_data['resources'] = [ResourceAssociation.objects.get(pk=pk) for pk in request.POST.getlist('resources')]
 
     # extract wg conflict constraint data for the view / notifications
     outbound_conflicts = get_outbound_conflicts(form)
@@ -326,7 +483,7 @@ def confirm(request, acronym):
     button_text = request.POST.get('submit', '')
     if button_text == 'Cancel':
         messages.success(request, 'Session Request has been cancelled')
-        return redirect('ietf.secr.sreq.views.main')
+        return redirect('ietf.meeting.views_session_request.list_view')
 
     if request.method == 'POST' and button_text == 'Submit':
         # delete any existing session records with status = canceled or notmeet
@@ -344,10 +501,10 @@ def confirm(request, acronym):
             if 'resources' in form.data:
                 new_session.resources.set(session_data['resources'])
             jfs = form.data.get('joint_for_session', '-1')
-            if not jfs: # jfs might be ''
+            if not jfs:  # jfs might be ''
                 jfs = '-1'
             if int(jfs) == count + 1:  # count is zero-indexed
-                groups_split = form.cleaned_data.get('joint_with_groups').replace(',',' ').split()
+                groups_split = form.cleaned_data.get('joint_with_groups').replace(',', ' ').split()
                 joint = Group.objects.filter(acronym__in=groups_split)
                 new_session.joint_with_groups.set(joint)
             new_session.save()
@@ -388,36 +545,105 @@ def confirm(request, acronym):
                 'new',
             )
 
-        status_text = 'IETF Agenda to be scheduled'
-        messages.success(request, 'Your request has been sent to %s' % status_text)
-        return redirect('ietf.secr.sreq.views.main')
+        status_text = 'IETF Agenda to be scheduled'
+        messages.success(request, 'Your request has been sent to %s' % status_text)
+        return redirect('ietf.meeting.views_session_request.list_view')
+
+    # POST from request submission
+    session_conflicts = dict(
+        outbound=outbound_conflicts,  # each is a dict with name and groups as keys
+        inbound=inbound_session_conflicts_as_string(group, meeting),
+    )
+    if form.cleaned_data.get('third_session'):
+        messages.warning(request, 'Note: Your request for a third session must be approved by an area director before being submitted to agenda@ietf.org.  Click "Submit" below to email an approval request to the area directors')
+
+    return render(request, 'meeting/session_request_confirm.html', {
+        'form': form,
+        'session': session_data,
+        'group': group,
+        'meeting': meeting,
+        'session_conflicts': session_conflicts},
+    )
+
+
+@role_required(*AUTHORIZED_ROLES)
+def view_request(request, acronym, num=None):
+    '''
+    This view displays the session request info
+    '''
+    meeting = get_meeting(num, days=14)
+    group = get_object_or_404(Group, acronym=acronym)
+    query = Session.objects.filter(meeting=meeting, group=group)
+    status_is_null = Q(current_status__isnull=True)
+    status_allowed = ~Q(current_status__in=("canceled", "notmeet", "deleted"))
+    sessions = (
+        add_event_info_to_session_qs(query)
+        .filter(status_is_null | status_allowed)
+        .order_by("id")
+    )
+
+    # check if app is locked
+    is_locked = check_app_locked()
+    if is_locked:
+        messages.warning(request, "The Session Request Tool is closed")
+
+    # if there are no session requests yet, redirect to new session request page
+    if not sessions:
+        if is_locked:
+            return redirect('ietf.meeting.views_session_request.list_view')
+        else:
+            return redirect('ietf.meeting.views_session_request.new_request', acronym=acronym)
+
+    activities = [{
+        'act_date': e.time.strftime('%b %d, %Y'),
+        'act_time': e.time.strftime('%H:%M:%S'),
+        'activity': e.status.name,
+        'act_by': e.by,
+    } for e in sessions[0].schedulingevent_set.select_related('status', 'by')]
+
+    # gather outbound conflicts
+    outbound_dict = OrderedDict()
+    for obc in group.constraint_source_set.filter(meeting=meeting, name__is_group_conflict=True):
+        if obc.name.slug not in outbound_dict:
+            outbound_dict[obc.name.slug] = []
+        outbound_dict[obc.name.slug].append(obc.target.acronym)
 
-    # POST from request submission
     session_conflicts = dict(
-        outbound=outbound_conflicts,  # each is a dict with name and groups as keys
         inbound=inbound_session_conflicts_as_string(group, meeting),
+        outbound=[dict(name=ConstraintName.objects.get(slug=slug), groups=' '.join(groups))
+                  for slug, groups in outbound_dict.items()],
     )
-    return render(request, 'sreq/confirm.html', {
-        'form': form,
-        'session': session_data,
+
+    show_approve_button = False
+
+    # if sessions include a 3rd session waiting approval and the user is a secretariat or AD of the group
+    # display approve button
+    if any(s.current_status == 'apprw' for s in sessions):
+        if has_role(request.user, 'Secretariat') or group.parent.role_set.filter(name='ad', person=request.user.person):
+            show_approve_button = True
+
+    # build session dictionary (like querydict from new session request form) for use in template
+    session = get_initial_session(sessions)
+
+    return render(request, 'meeting/session_request_view.html', {
+        'can_edit': (not is_locked) or has_role(request.user, 'Secretariat'),
+        'can_cancel': (not is_locked) or has_role(request.user, 'Secretariat'),
+        'session': session,  # legacy processed data
+        'sessions': sessions,  # actual session instances
+        'activities': activities,
+        'meeting': meeting,
         'group': group,
-        'session_conflicts': session_conflicts},
+        'session_conflicts': session_conflicts,
+        'show_approve_button': show_approve_button},
     )
-    
 
-def session_changed(session):
-    latest_event = SchedulingEvent.objects.filter(session=session).order_by('-time', '-id').first()
-
-    if latest_event and latest_event.status_id == "schedw" and session.meeting.schedule != None:
-        # send an email to iesg-secretariat to alert to change
-        pass
 
 @check_permissions
-def edit(request, acronym, num=None):
+def edit_request(request, acronym, num=None):
     '''
     This view allows the user to edit details of the session request
     '''
-    meeting = get_meeting(num,days=14)
+    meeting = get_meeting(num, days=14)
     group = get_object_or_404(Group, acronym=acronym)
     if len(group.features.session_purposes) == 0:
         raise Http404(f'Cannot request sessions for group "{acronym}"')
@@ -443,15 +669,15 @@ def edit(request, acronym, num=None):
     login = request.user.person
 
     first_session = Session()
-    if(len(sessions) > 0):
+    if (len(sessions) > 0):
         first_session = sessions[0]
 
     if request.method == 'POST':
         button_text = request.POST.get('submit', '')
         if button_text == 'Cancel':
-            return redirect('ietf.secr.sreq.views.view', acronym=acronym)
+            return redirect('ietf.meeting.views_session_request.view_request', acronym=acronym)
 
-        form = SessionForm(group, meeting, request.POST, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+        form = SessionRequestForm(group, meeting, request.POST, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
         if form.is_valid():
             if form.has_changed():
                 changed_session_forms = [sf for sf in form.session_forms.forms_to_keep if sf.has_changed()]
@@ -513,11 +739,11 @@ def edit(request, acronym, num=None):
 
                 if 'resources' in form.changed_data:
                     new_resource_ids = form.cleaned_data['resources']
-                    new_resources = [ ResourceAssociation.objects.get(pk=a)
-                                      for a in new_resource_ids]
+                    new_resources = [ResourceAssociation.objects.get(pk=a)
+                                     for a in new_resource_ids]
                     first_session.resources = new_resources
 
-                if 'bethere' in form.changed_data and set(form.cleaned_data['bethere'])!=set(initial['bethere']):
+                if 'bethere' in form.changed_data and set(form.cleaned_data['bethere']) != set(initial['bethere']):
                     first_session.constraints().filter(name='bethere').delete()
                     bethere_cn = ConstraintName.objects.get(slug='bethere')
                     for p in form.cleaned_data['bethere']:
@@ -539,7 +765,7 @@ def edit(request, acronym, num=None):
 
                 # deprecated
                 # log activity
-                #add_session_activity(group,'Session Request was updated',meeting,user)
+                # add_session_activity(group,'Session Request was updated',meeting,user)
 
                 # send notification
                 if form.cleaned_data.get("send_notifications"):
@@ -556,7 +782,7 @@ def edit(request, acronym, num=None):
                     )
 
             messages.success(request, 'Session Request updated')
-            return redirect('ietf.secr.sreq.views.view', acronym=acronym)
+            return redirect('ietf.meeting.views_session_request.view_request', acronym=acronym)
 
     else:  # method is not POST
         # gather outbound conflicts for initial value
@@ -567,142 +793,46 @@ def edit(request, acronym, num=None):
             initial['constraint_{}'.format(slug)] = ' '.join(groups)
 
         if not sessions:
-            return redirect('ietf.secr.sreq.views.new', acronym=acronym)
-        form = SessionForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+            return redirect('ietf.meeting.views_session_request.new_request', acronym=acronym)
+        form = SessionRequestForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
 
-    return render(request, 'sreq/edit.html', {
-        'is_locked': is_locked and not has_role(request.user,'Secretariat'),
+    return render(request, 'meeting/session_request_form.html', {
+        'is_locked': is_locked and not has_role(request.user, 'Secretariat'),
         'meeting': meeting,
         'form': form,
         'group': group,
+        'is_create': False,
         'session_conflicts': session_conflicts},
     )
 
-@role_required(*AUTHORIZED_ROLES)
-def main(request):
-    '''
-    Display list of groups the user has access to.
-
-    Template variables
-    form: a select box populated with unscheduled groups
-    meeting: the current meeting
-    scheduled_sessions:
-    '''
-    # check for locked flag
-    is_locked = check_app_locked()
-
-    if is_locked and not has_role(request.user,'Secretariat'):
-        message = get_lock_message()
-        return render(request, 'sreq/locked.html', {
-        'message': message},
-    )
-
-    meeting = get_meeting(days=14)
-
-    scheduled_groups = []
-    unscheduled_groups = []
-
-    group_types = GroupFeatures.objects.filter(has_meetings=True).values_list('type', flat=True)
-
-    my_groups = [g for g in get_my_groups(request.user, conclude=True) if g.type_id in group_types]
-
-    sessions_by_group = defaultdict(list)
-    for s in add_event_info_to_session_qs(Session.objects.filter(meeting=meeting, group__in=my_groups)).filter(current_status__in=['schedw', 'apprw', 'appr', 'sched']):
-        sessions_by_group[s.group_id].append(s)
-
-    for group in my_groups:
-        group.meeting_sessions = sessions_by_group.get(group.pk, [])
-
-        if group.pk in sessions_by_group:
-            # include even if concluded as we need to to see that the
-            # sessions are there
-            scheduled_groups.append(group)
-        else:
-            if group.state_id not in ['conclude', 'bof-conc']:
-                # too late for unscheduled if concluded
-                unscheduled_groups.append(group)
-
-    # warn if there are no associated groups
-    if not scheduled_groups and not unscheduled_groups:
-        messages.warning(request, 'The account %s is not associated with any groups.  If you have multiple Datatracker accounts you may try another or report a problem to %s' % (request.user, settings.SECRETARIAT_ACTION_EMAIL))
-     
-    # add session status messages for use in template
-    for group in scheduled_groups:
-        if not group.features.acts_like_wg or (len(group.meeting_sessions) < 3):
-            group.status_message = group.meeting_sessions[0].current_status
-        else:
-            group.status_message = 'First two sessions: %s, Third session: %s' % (group.meeting_sessions[0].current_status, group.meeting_sessions[2].current_status)
-
-    # add not meeting indicators for use in template
-    for group in unscheduled_groups:
-        if any(s.current_status == 'notmeet' for s in group.meeting_sessions):
-            group.not_meeting = True
-
-    return render(request, 'sreq/main.html', {
-        'is_locked': is_locked,
-        'meeting': meeting,
-        'scheduled_groups': scheduled_groups,
-        'unscheduled_groups': unscheduled_groups},
-    )
 
 @check_permissions
-def new(request, acronym):
+def approve_request(request, acronym):
     '''
-    This view gathers details for a new session request.  The user proceeds to confirm()
-    to create the request.
+    This view approves the third session.  For use by ADs or Secretariat.
     '''
-    group = get_object_or_404(Group, acronym=acronym)
-    if len(group.features.session_purposes) == 0:
-        raise Http404(f'Cannot request sessions for group "{acronym}"')
     meeting = get_meeting(days=14)
-    session_conflicts = dict(inbound=inbound_session_conflicts_as_string(group, meeting))
-
-    # check if app is locked
-    is_locked = check_app_locked()
-    if is_locked and not has_role(request.user,'Secretariat'):
-        messages.warning(request, "The Session Request Tool is closed")
-        return redirect('ietf.secr.sreq.views.main')
-    
-    if request.method == 'POST':
-        button_text = request.POST.get('submit', '')
-        if button_text == 'Cancel':
-            return redirect('ietf.secr.sreq.views.main')
-
-        form = SessionForm(group, meeting, request.POST, notifications_optional=has_role(request.user, "Secretariat"))
-        if form.is_valid():
-            return confirm(request, acronym)
+    group = get_object_or_404(Group, acronym=acronym)
 
-    # the "previous" querystring causes the form to be returned
-    # pre-populated with data from last meeeting's session request
-    elif request.method == 'GET' and 'previous' in request.GET:
-        latest_session = add_event_info_to_session_qs(Session.objects.filter(meeting__type_id='ietf', group=group)).exclude(current_status__in=['notmeet', 'deleted', 'canceled',]).order_by('-meeting__date').first()
-        if latest_session:
-            previous_meeting = Meeting.objects.get(number=latest_session.meeting.number)
-            previous_sessions = add_event_info_to_session_qs(Session.objects.filter(meeting=previous_meeting, group=group)).exclude(current_status__in=['notmeet', 'deleted']).order_by('id')
-            if not previous_sessions:
-                messages.warning(request, 'This group did not meet at %s' % previous_meeting)
-                return redirect('ietf.secr.sreq.views.new', acronym=acronym)
-            else:
-                messages.info(request, 'Fetched session info from %s' % previous_meeting)
-        else:
-            messages.warning(request, 'Did not find any previous meeting')
-            return redirect('ietf.secr.sreq.views.new', acronym=acronym)
+    session = add_event_info_to_session_qs(Session.objects.filter(meeting=meeting, group=group)).filter(current_status='apprw').first()
+    if session is None:
+        raise Http404
 
-        initial = get_initial_session(previous_sessions, prune_conflicts=True)
-        if 'resources' in initial:
-            initial['resources'] = [x.pk for x in initial['resources']]
-        form = SessionForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+    if has_role(request.user, 'Secretariat') or group.parent.role_set.filter(name='ad', person=request.user.person):
+        SchedulingEvent.objects.create(
+            session=session,
+            status=SessionStatusName.objects.get(slug='appr'),
+            by=request.user.person,
+        )
+        session_changed(session)
 
+        messages.success(request, 'Third session approved')
+        return redirect('ietf.meeting.views_session_request.view_request', acronym=acronym)
     else:
-        initial={}
-        form = SessionForm(group, meeting, initial=initial, notifications_optional=has_role(request.user, "Secretariat"))
+        # if an unauthorized user gets here return error
+        messages.error(request, 'Not authorized to approve the third session')
+        return redirect('ietf.meeting.views_session_request.view_request', acronym=acronym)
 
-    return render(request, 'sreq/new.html', {
-        'meeting': meeting,
-        'form': form,
-        'group': group,
-        'session_conflicts': session_conflicts},
-    )
 
 @check_permissions
 def no_session(request, acronym):
@@ -722,7 +852,7 @@ def no_session(request, acronym):
     # skip if state is already notmeet
     if add_event_info_to_session_qs(Session.objects.filter(group=group, meeting=meeting)).filter(current_status='notmeet'):
         messages.info(request, 'The group %s is already marked as not meeting' % group.acronym)
-        return redirect('ietf.secr.sreq.views.main')
+        return redirect('ietf.meeting.views_session_request.list_view')
 
     session = Session.objects.create(
         group=group,
@@ -740,125 +870,62 @@ def no_session(request, acronym):
     session_changed(session)
 
     # send notification
-    (to_email, cc_list) = gather_address_lists('session_request_not_meeting',group=group,person=login)
+    (to_email, cc_list) = gather_address_lists('session_request_not_meeting', group=group, person=login)
     from_email = (settings.SESSION_REQUEST_FROM_EMAIL)
     subject = '%s - Not having a session at IETF %s' % (group.acronym, meeting.number)
-    send_mail(request, to_email, from_email, subject, 'sreq/not_meeting_notification.txt',
-              {'login':login,
-               'group':group,
-               'meeting':meeting}, cc=cc_list)
+    send_mail(request, to_email, from_email, subject, 'meeting/session_not_meeting_notification.txt',
+              {'login': login,
+               'group': group,
+               'meeting': meeting}, cc=cc_list)
 
     # deprecated?
     # log activity
-    #text = 'A message was sent to notify not having a session at IETF %d' % meeting.meeting_num
-    #add_session_activity(group,text,meeting,request.person)
+    # text = 'A message was sent to notify not having a session at IETF %d' % meeting.meeting_num
+    # add_session_activity(group,text,meeting,request.person)
 
     # redirect
     messages.success(request, 'A message was sent to notify not having a session at IETF %s' % meeting.number)
-    return redirect('ietf.secr.sreq.views.main')
-
-@role_required('Secretariat')
-def tool_status(request):
-    '''
-    This view handles locking and unlocking of the tool to the public.
-    '''
-    meeting = get_meeting(days=14)
-    is_locked = check_app_locked(meeting=meeting)
-    
-    if request.method == 'POST':
-        button_text = request.POST.get('submit', '')
-        if button_text == 'Back':
-            return redirect('ietf.secr.sreq.views.main')
-
-        form = ToolStatusForm(request.POST)
-
-        if button_text == 'Lock':
-            if form.is_valid():
-                meeting.session_request_lock_message = form.cleaned_data['message']
-                meeting.save()
-                messages.success(request, 'Session Request Tool is now Locked')
-                return redirect('ietf.secr.sreq.views.main')
-
-        elif button_text == 'Unlock':
-            meeting.session_request_lock_message = ''
-            meeting.save()
-            messages.success(request, 'Session Request Tool is now Unlocked')
-            return redirect('ietf.secr.sreq.views.main')
-
-    else:
-        if is_locked:
-            message = get_lock_message()
-            initial = {'message': message}
-            form = ToolStatusForm(initial=initial)
-        else:
-            form = ToolStatusForm()
+    return redirect('ietf.meeting.views_session_request.list_view')
 
-    return render(request, 'sreq/tool_status.html', {
-        'is_locked': is_locked,
-        'form': form},
-    )
 
-@role_required(*AUTHORIZED_ROLES)
-def view(request, acronym, num = None):
+@check_permissions
+def cancel_request(request, acronym):
     '''
-    This view displays the session request info
+    This view cancels a session request and sends a notification.
+    To cancel, or withdraw the request set status = deleted.
+    "canceled" status is used by the secretariat.
+
+    NOTE: this function can also be called after a session has been
+    scheduled during the period when the session request tool is
+    reopened.  In this case be sure to clear the timeslot assignment as well.
     '''
-    meeting = get_meeting(num,days=14)
+    meeting = get_meeting(days=14)
     group = get_object_or_404(Group, acronym=acronym)
-    sessions = add_event_info_to_session_qs(Session.objects.filter(meeting=meeting, group=group)).filter(Q(current_status__isnull=True) | ~Q(current_status__in=('canceled','notmeet','deleted'))).order_by('id')
-
-    # check if app is locked
-    is_locked = check_app_locked()
-    if is_locked:
-        messages.warning(request, "The Session Request Tool is closed")
-
-    # if there are no session requests yet, redirect to new session request page
-    if not sessions:
-        if is_locked:
-            return redirect('ietf.secr.sreq.views.main')
-        else:
-            return redirect('ietf.secr.sreq.views.new', acronym=acronym)
-
-    activities = [{
-        'act_date': e.time.strftime('%b %d, %Y'),
-        'act_time': e.time.strftime('%H:%M:%S'),
-        'activity': e.status.name,
-        'act_by': e.by,
-    } for e in sessions[0].schedulingevent_set.select_related('status', 'by')]
-
-    # gather outbound conflicts
-    outbound_dict = OrderedDict()
-    for obc in group.constraint_source_set.filter(meeting=meeting, name__is_group_conflict=True):
-        if obc.name.slug not in outbound_dict:
-            outbound_dict[obc.name.slug] = []
-        outbound_dict[obc.name.slug].append(obc.target.acronym)
-
-    session_conflicts = dict(
-        inbound=inbound_session_conflicts_as_string(group, meeting),
-        outbound=[dict(name=ConstraintName.objects.get(slug=slug), groups=' '.join(groups))
-                  for slug, groups in outbound_dict.items()],
-    )
+    sessions = Session.objects.filter(meeting=meeting, group=group).order_by('id')
+    login = request.user.person
 
-    show_approve_button = False
+    # delete conflicts
+    Constraint.objects.filter(meeting=meeting, source=group).delete()
 
-    # if sessions include a 3rd session waiting approval and the user is a secretariat or AD of the group
-    # display approve button
-    if any(s.current_status == 'apprw' for s in sessions):
-        if has_role(request.user,'Secretariat') or group.parent.role_set.filter(name='ad',person=request.user.person):
-            show_approve_button = True
+    # mark sessions as deleted
+    for session in sessions:
+        SchedulingEvent.objects.create(
+            session=session,
+            status=SessionStatusName.objects.get(slug='deleted'),
+            by=request.user.person,
+        )
+        session_changed(session)
 
-    # build session dictionary (like querydict from new session request form) for use in template
-    session = get_initial_session(sessions)
+        # clear schedule assignments if already scheduled
+        session.timeslotassignments.all().delete()
 
-    return render(request, 'sreq/view.html', {
-        'can_edit': (not is_locked) or has_role(request.user, 'Secretariat'),
-        'can_cancel': (not is_locked) or has_role(request.user, 'Secretariat'),
-        'session': session,  # legacy processed data
-        'sessions': sessions,  # actual session instances
-        'activities': activities,
-        'meeting': meeting,
-        'group': group,
-        'session_conflicts': session_conflicts,
-        'show_approve_button': show_approve_button},
-    )
+    # send notifitcation
+    (to_email, cc_list) = gather_address_lists('session_request_cancelled', group=group, person=login)
+    from_email = (settings.SESSION_REQUEST_FROM_EMAIL)
+    subject = '%s - Cancelling a meeting request for IETF %s' % (group.acronym, meeting.number)
+    send_mail(request, to_email, from_email, subject, 'meeting/session_cancel_notification.txt',
+              {'requester': get_requester_text(login, group),
+               'meeting': meeting}, cc=cc_list)
 
+    messages.success(request, 'The %s Session Request has been cancelled' % group.acronym)
+    return redirect('ietf.meeting.views_session_request.list_view')
diff --git a/ietf/secr/meetings/views.py b/ietf/secr/meetings/views.py
index 47f7b7ffa5..1f6f2f3297 100644
--- a/ietf/secr/meetings/views.py
+++ b/ietf/secr/meetings/views.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2007-2023, All Rights Reserved
+# Copyright The IETF Trust 2007-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 import datetime
@@ -20,12 +20,12 @@
 from ietf.meeting.helpers import make_materials_directories, populate_important_dates
 from ietf.meeting.models import Meeting, Session, Room, TimeSlot, SchedTimeSessAssignment, Schedule, SchedulingEvent
 from ietf.meeting.utils import add_event_info_to_session_qs
+from ietf.meeting.views_session_request import get_initial_session
 from ietf.name.models import SessionStatusName
 from ietf.group.models import Group, GroupEvent
 from ietf.secr.meetings.forms import ( BaseMeetingRoomFormSet, MeetingModelForm, MeetingSelectForm,
     MeetingRoomForm, MiscSessionForm, TimeSlotForm, RegularSessionEditForm,
     MeetingRoomOptionsForm )
-from ietf.secr.sreq.views import get_initial_session
 from ietf.secr.utils.meeting import get_session, get_timeslot
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.utils.timezone import make_aware
diff --git a/ietf/secr/sreq/__init__.py b/ietf/secr/sreq/__init__.py
deleted file mode 100644
index e69de29bb2..0000000000
diff --git a/ietf/secr/sreq/forms.py b/ietf/secr/sreq/forms.py
deleted file mode 100644
index 4a0f449b2a..0000000000
--- a/ietf/secr/sreq/forms.py
+++ /dev/null
@@ -1,333 +0,0 @@
-# Copyright The IETF Trust 2013-2022, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-
-from django import forms
-from django.template.defaultfilters import pluralize
-
-import debug                            # pyflakes:ignore
-
-from ietf.name.models import TimerangeName, ConstraintName
-from ietf.group.models import Group
-from ietf.meeting.forms import sessiondetailsformset_factory
-from ietf.meeting.models import ResourceAssociation, Constraint
-from ietf.person.fields import SearchablePersonsField
-from ietf.person.models import Person
-from ietf.utils.fields import ModelMultipleChoiceField
-from ietf.utils.html import clean_text_field
-from ietf.utils import log
-
-# -------------------------------------------------
-# Globals
-# -------------------------------------------------
-
-NUM_SESSION_CHOICES = (('','--Please select'),('1','1'),('2','2'))
-SESSION_TIME_RELATION_CHOICES = (('', 'No preference'),) + Constraint.TIME_RELATION_CHOICES
-JOINT_FOR_SESSION_CHOICES = (('1', 'First session'), ('2', 'Second session'), ('3', 'Third session'), )
-
-# -------------------------------------------------
-# Helper Functions
-# -------------------------------------------------
-def allowed_conflicting_groups():
-    return Group.objects.filter(type__in=['wg', 'ag', 'rg', 'rag', 'program', 'edwg'], state__in=['bof', 'proposed', 'active'])
-
-def check_conflict(groups, source_group):
-    '''
-    Takes a string which is a list of group acronyms.  Checks that they are all active groups
-    '''
-    # convert to python list (allow space or comma separated lists)
-    items = groups.replace(',',' ').split()
-    active_groups = allowed_conflicting_groups()
-    for group in items:
-        if group == source_group.acronym:
-            raise forms.ValidationError("Cannot declare a conflict with the same group: %s" % group)
-
-        if not active_groups.filter(acronym=group):
-            raise forms.ValidationError("Invalid or inactive group acronym: %s" % group)
-
-# -------------------------------------------------
-# Forms
-# -------------------------------------------------
-
-class GroupSelectForm(forms.Form):
-    group = forms.ChoiceField()
-
-    def __init__(self,*args,**kwargs):
-        choices = kwargs.pop('choices')
-        super(GroupSelectForm, self).__init__(*args,**kwargs)
-        self.fields['group'].widget.choices = choices
-
-
-class NameModelMultipleChoiceField(ModelMultipleChoiceField):
-    def label_from_instance(self, name):
-        return name.desc
-
-
-class SessionForm(forms.Form):
-    num_session = forms.ChoiceField(choices=NUM_SESSION_CHOICES)
-    # session fields are added in __init__()
-    session_time_relation = forms.ChoiceField(choices=SESSION_TIME_RELATION_CHOICES, required=False)
-    attendees = forms.IntegerField()
-    # FIXME: it would cleaner to have these be
-    # ModelMultipleChoiceField, and just customize the widgetry, that
-    # way validation comes for free (applies to this CharField and the
-    # constraints dynamically instantiated in __init__())
-    joint_with_groups = forms.CharField(max_length=255,required=False)
-    joint_with_groups_selector = forms.ChoiceField(choices=[], required=False)  # group select widget for prev field
-    joint_for_session = forms.ChoiceField(choices=JOINT_FOR_SESSION_CHOICES, required=False)
-    comments = forms.CharField(max_length=200,required=False)
-    third_session = forms.BooleanField(required=False)
-    resources     = forms.MultipleChoiceField(widget=forms.CheckboxSelectMultiple,required=False)
-    bethere       = SearchablePersonsField(label="Must be present", required=False)
-    timeranges    = NameModelMultipleChoiceField(widget=forms.CheckboxSelectMultiple, required=False,
-                                                 queryset=TimerangeName.objects.all())
-    adjacent_with_wg = forms.ChoiceField(required=False)
-    send_notifications = forms.BooleanField(label="Send notification emails?", required=False, initial=False)
-
-    def __init__(self, group, meeting, data=None, *args, **kwargs):
-        self.hidden = kwargs.pop('hidden', False)
-        self.notifications_optional = kwargs.pop('notifications_optional', False)
-
-        self.group = group
-        formset_class = sessiondetailsformset_factory(max_num=3 if group.features.acts_like_wg else 50)
-        self.session_forms = formset_class(group=self.group, meeting=meeting, data=data)
-        super(SessionForm, self).__init__(data=data, *args, **kwargs)
-        if not self.notifications_optional:
-            self.fields['send_notifications'].widget = forms.HiddenInput()
-
-        # Allow additional sessions for non-wg-like groups
-        if not self.group.features.acts_like_wg:
-            self.fields['num_session'].choices = ((n, str(n)) for n in range(1, 51))
-
-        self.fields['comments'].widget = forms.Textarea(attrs={'rows':'3','cols':'65'})
-
-        other_groups = list(allowed_conflicting_groups().exclude(pk=group.pk).values_list('acronym', 'acronym').order_by('acronym'))
-        self.fields['adjacent_with_wg'].choices = [('', '--No preference')] + other_groups
-        group_acronym_choices = [('','--Select WG(s)')] + other_groups
-        self.fields['joint_with_groups_selector'].choices = group_acronym_choices
-
-        # Set up constraints for the meeting
-        self._wg_field_data = []
-        for constraintname in meeting.group_conflict_types.all():
-            # two fields for each constraint: a CharField for the group list and a selector to add entries
-            constraint_field = forms.CharField(max_length=255, required=False)
-            constraint_field.widget.attrs['data-slug'] = constraintname.slug
-            constraint_field.widget.attrs['data-constraint-name'] = str(constraintname).title()
-            self._add_widget_class(constraint_field.widget, 'wg_constraint')
-
-            selector_field = forms.ChoiceField(choices=group_acronym_choices, required=False)
-            selector_field.widget.attrs['data-slug'] = constraintname.slug  # used by onchange handler
-            self._add_widget_class(selector_field.widget, 'wg_constraint_selector')
-
-            cfield_id = 'constraint_{}'.format(constraintname.slug)
-            cselector_id = 'wg_selector_{}'.format(constraintname.slug)
-            # keep an eye out for field name conflicts
-            log.assertion('cfield_id not in self.fields')
-            log.assertion('cselector_id not in self.fields')
-            self.fields[cfield_id] = constraint_field
-            self.fields[cselector_id] = selector_field
-            self._wg_field_data.append((constraintname, cfield_id, cselector_id))
-
-        # Show constraints that are not actually used by the meeting so these don't get lost
-        self._inactive_wg_field_data = []
-        inactive_cnames = ConstraintName.objects.filter(
-            is_group_conflict=True  # Only collect group conflicts...
-        ).exclude(
-            meeting=meeting  # ...that are not enabled for this meeting...
-        ).filter(
-            constraint__source=group,  # ...but exist for this group...
-            constraint__meeting=meeting,  # ... at this meeting.
-        ).distinct()
-
-        for inactive_constraint_name in inactive_cnames:
-            field_id = 'delete_{}'.format(inactive_constraint_name.slug)
-            self.fields[field_id] = forms.BooleanField(required=False, label='Delete this conflict', help_text='Delete this inactive conflict?')
-            constraints = group.constraint_source_set.filter(meeting=meeting, name=inactive_constraint_name)
-            self._inactive_wg_field_data.append(
-                (inactive_constraint_name,
-                 ' '.join([c.target.acronym for c in constraints]),
-                 field_id)
-            )
-
-        self.fields['joint_with_groups_selector'].widget.attrs['onchange'] = "document.form_post.joint_with_groups.value=document.form_post.joint_with_groups.value + ' ' + this.options[this.selectedIndex].value; return 1;"
-        self.fields["resources"].choices = [(x.pk,x.desc) for x in ResourceAssociation.objects.filter(name__used=True).order_by('name__order') ]
-
-        if self.hidden:
-            # replace all the widgets to start...
-            for key in list(self.fields.keys()):
-                self.fields[key].widget = forms.HiddenInput()
-            # re-replace a couple special cases
-            self.fields['resources'].widget = forms.MultipleHiddenInput()
-            self.fields['timeranges'].widget = forms.MultipleHiddenInput()
-            # and entirely replace bethere - no need to support searching if input is hidden
-            self.fields['bethere'] = ModelMultipleChoiceField(
-                widget=forms.MultipleHiddenInput, required=False,
-                queryset=Person.objects.all(),
-            )
-
-    def wg_constraint_fields(self):
-        """Iterates over wg constraint fields
-
-        Intended for use in the template.
-        """
-        for cname, cfield_id, cselector_id in self._wg_field_data:
-            yield cname, self[cfield_id], self[cselector_id]
-
-    def wg_constraint_count(self):
-        """How many wg constraints are there?"""
-        return len(self._wg_field_data)
-
-    def wg_constraint_field_ids(self):
-        """Iterates over wg constraint field IDs"""
-        for cname, cfield_id, _ in self._wg_field_data:
-            yield cname, cfield_id
-
-    def inactive_wg_constraints(self):
-        for cname, value, field_id in self._inactive_wg_field_data:
-            yield cname, value, self[field_id]
-
-    def inactive_wg_constraint_count(self):
-        return len(self._inactive_wg_field_data)
-
-    def inactive_wg_constraint_field_ids(self):
-        """Iterates over wg constraint field IDs"""
-        for cname, _, field_id in self._inactive_wg_field_data:
-            yield cname, field_id
-
-    @staticmethod
-    def _add_widget_class(widget, new_class):
-        """Add a new class, taking care in case some already exist"""
-        existing_classes = widget.attrs.get('class', '').split()
-        widget.attrs['class'] = ' '.join(existing_classes + [new_class])
-
-    def _join_conflicts(self, cleaned_data, slugs):
-        """Concatenate constraint fields from cleaned data into a single list"""
-        conflicts = []
-        for cname, cfield_id, _ in self._wg_field_data:
-            if cname.slug in slugs and cfield_id in cleaned_data:
-                groups = cleaned_data[cfield_id]
-                # convert to python list (allow space or comma separated lists)
-                items = groups.replace(',',' ').split()
-                conflicts.extend(items)
-        return conflicts
-
-    def _validate_duplicate_conflicts(self, cleaned_data):
-        """Validate that no WGs appear in more than one constraint that does not allow duplicates
-
-        Raises ValidationError
-        """
-        # Only the older constraints (conflict, conflic2, conflic3) need to be mutually exclusive.
-        all_conflicts = self._join_conflicts(cleaned_data, ['conflict', 'conflic2', 'conflic3'])
-        seen = []
-        duplicated = []
-        errors = []
-        for c in all_conflicts:
-            if c not in seen:
-                seen.append(c)
-            elif c not in duplicated:  # only report once
-                duplicated.append(c)
-                errors.append(forms.ValidationError('%s appears in conflicts more than once' % c))
-        return errors
-
-    def clean_joint_with_groups(self):
-        groups = self.cleaned_data['joint_with_groups']
-        check_conflict(groups, self.group)
-        return groups
-
-    def clean_comments(self):
-        return clean_text_field(self.cleaned_data['comments'])
-
-    def clean_bethere(self):
-        bethere = self.cleaned_data["bethere"]
-        if bethere:
-            extra = set(
-                Person.objects.filter(
-                    role__group=self.group, role__name__in=["chair", "ad"]
-                )
-                & bethere
-            )
-            if extra:
-                extras = ", ".join(e.name for e in extra)
-                raise forms.ValidationError(
-                    (
-                        f"Please remove the following person{pluralize(len(extra))}, the system "
-                        f"tracks their availability due to their role{pluralize(len(extra))}: {extras}."
-                    )
-                )
-        return bethere
-
-    def clean_send_notifications(self):
-        return True if not self.notifications_optional else self.cleaned_data['send_notifications']
-
-    def is_valid(self):
-        return super().is_valid() and self.session_forms.is_valid()
-
-    def clean(self):
-        super(SessionForm, self).clean()
-        self.session_forms.clean()
-
-        data = self.cleaned_data
-
-        # Validate the individual conflict fields
-        for _, cfield_id, _ in self._wg_field_data:
-            try:
-                check_conflict(data[cfield_id], self.group)
-            except forms.ValidationError as e:
-                self.add_error(cfield_id, e)
-
-        # Skip remaining tests if individual field tests had errors,
-        if self.errors:
-            return data
-
-        # error if conflicts contain disallowed dupes
-        for error in self._validate_duplicate_conflicts(data):
-            self.add_error(None, error)
-
-        # Verify expected number of session entries are present
-        num_sessions_with_data = len(self.session_forms.forms_to_keep)
-        num_sessions_expected = -1
-        try:
-            num_sessions_expected = int(data.get('num_session', ''))
-        except ValueError:
-            self.add_error('num_session', 'Invalid value for number of sessions')
-        if num_sessions_with_data < num_sessions_expected:
-            self.add_error('num_session', 'Must provide data for all sessions')
-
-        # if default (empty) option is selected, cleaned_data won't include num_session key
-        if num_sessions_expected != 2 and num_sessions_expected is not None:
-            if data.get('session_time_relation'):
-                self.add_error(
-                    'session_time_relation',
-                    forms.ValidationError('Time between sessions can only be used when two sessions are requested.')
-                )
-
-        joint_session = data.get('joint_for_session', '')
-        if joint_session != '':
-            joint_session = int(joint_session)
-            if joint_session > num_sessions_with_data:
-                self.add_error(
-                    'joint_for_session',
-                    forms.ValidationError(
-                        f'Session {joint_session} can not be the joint session, the session has not been requested.'
-                    )
-                )
-
-        return data
-
-    @property
-    def media(self):
-        # get media for our formset
-        return super().media + self.session_forms.media + forms.Media(js=('secr/js/session_form.js',))
-
-
-# Used for totally virtual meetings during COVID-19 to omit the expected
-# number of attendees since there were no room size limitations
-#
-# class VirtualSessionForm(SessionForm):
-#     '''A SessionForm customized for special virtual meeting requirements'''
-#     attendees = forms.IntegerField(required=False)
-
-
-class ToolStatusForm(forms.Form):
-    message = forms.CharField(widget=forms.Textarea(attrs={'rows':'3','cols':'80'}), strip=False)
-
diff --git a/ietf/secr/sreq/templatetags/__init__.py b/ietf/secr/sreq/templatetags/__init__.py
deleted file mode 100644
index e69de29bb2..0000000000
diff --git a/ietf/secr/sreq/urls.py b/ietf/secr/sreq/urls.py
deleted file mode 100644
index 7e0db8117a..0000000000
--- a/ietf/secr/sreq/urls.py
+++ /dev/null
@@ -1,20 +0,0 @@
-# Copyright The IETF Trust 2007-2019, All Rights Reserved
-
-from django.conf import settings
-
-from ietf.secr.sreq import views
-from ietf.utils.urls import url
-
-urlpatterns = [
-    url(r'^$', views.main),
-    url(r'^status/$', views.tool_status),
-    url(r'^%(acronym)s/$' % settings.URL_REGEXPS, views.view),
-    url(r'^(?P<num>[A-Za-z0-9_\-\+]+)/%(acronym)s/view/$' % settings.URL_REGEXPS, views.view),
-    url(r'^%(acronym)s/approve/$' % settings.URL_REGEXPS, views.approve),
-    url(r'^%(acronym)s/cancel/$' % settings.URL_REGEXPS, views.cancel),
-    url(r'^%(acronym)s/confirm/$' % settings.URL_REGEXPS, views.confirm),
-    url(r'^%(acronym)s/edit/$' % settings.URL_REGEXPS, views.edit),
-    url(r'^%(acronym)s/new/$' % settings.URL_REGEXPS, views.new),
-    url(r'^%(acronym)s/no_session/$' % settings.URL_REGEXPS, views.no_session),
-    url(r'^(?P<num>[A-Za-z0-9_\-\+]+)/%(acronym)s/edit/$' % settings.URL_REGEXPS, views.edit),
-]
diff --git a/ietf/secr/telechat/tests.py b/ietf/secr/telechat/tests.py
index 39949b83a2..fa26d33a5c 100644
--- a/ietf/secr/telechat/tests.py
+++ b/ietf/secr/telechat/tests.py
@@ -13,6 +13,7 @@
     IndividualDraftFactory, ConflictReviewFactory)
 from ietf.doc.models import BallotDocEvent, BallotType, BallotPositionDocEvent, State, Document
 from ietf.doc.utils import update_telechat, create_ballot_if_not_open
+from ietf.meeting.factories import MeetingFactory
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today, datetime_today
 from ietf.iesg.models import TelechatDate
@@ -25,6 +26,26 @@
 def augment_data():
     TelechatDate.objects.create(date=date_today())
 
+class SecrUrlTests(TestCase):
+    def test_urls(self):
+        MeetingFactory(type_id='ietf', date=date_today())
+
+        # check public options
+        response = self.client.get("/secr/")
+        self.assertEqual(response.status_code, 200)
+        q = PyQuery(response.content)
+        links = q('div.secr-menu a')
+        self.assertEqual(len(links), 1)
+        self.assertEqual(PyQuery(links[0]).text(), 'Announcements')
+
+        # check secretariat only options
+        self.client.login(username="secretary", password="secretary+password")
+        response = self.client.get("/secr/")
+        self.assertEqual(response.status_code, 200)
+        q = PyQuery(response.content)
+        links = q('div.secr-menu a')
+        self.assertEqual(len(links), 4)
+
 class SecrTelechatTestCase(TestCase):
     def test_main(self):
         "Main Test"
diff --git a/ietf/secr/templates/includes/activities.html b/ietf/secr/templates/includes/activities.html
deleted file mode 100644
index 1304b7c48d..0000000000
--- a/ietf/secr/templates/includes/activities.html
+++ /dev/null
@@ -1,23 +0,0 @@
-<h2>Activities Log</h2>
-<div class="inline-related last-related">
-    <table class="full-width">
-        <thead>
-            <tr>
-                <th scope="col">Date</th>
-                <th scope="col">Time</th>
-                <th scope="col">Action</th>
-                <th scope="col">Name</th>
-            </tr>
-        </thead>
-        <tbody>
-            {% for entry in activities %}
-                <tr class="{% cycle 'row1' 'row2' %}">
-                    <td>{{ entry.act_date }}</td>
-                    <td>{{ entry.act_time }}</td>
-                    <td>{{ entry.activity }}</td>
-                    <td>{{ entry.act_by }}</td>
-                </tr>
-            {% endfor %}
-        </tbody>
-    </table>
-</div> <!-- inline-related -->
diff --git a/ietf/secr/templates/includes/buttons_next_cancel.html b/ietf/secr/templates/includes/buttons_next_cancel.html
deleted file mode 100644
index 95d25f55bc..0000000000
--- a/ietf/secr/templates/includes/buttons_next_cancel.html
+++ /dev/null
@@ -1,6 +0,0 @@
-<div class="button-group">
-    <ul>
-        <li><button type="submit" name="submit" value="Next">Next</button></li>
-        <li><button type="submit" name="submit" value="Cancel">Cancel</button></li>
-    </ul>
-</div> <!-- button-group -->
diff --git a/ietf/secr/templates/includes/buttons_submit_cancel.html b/ietf/secr/templates/includes/buttons_submit_cancel.html
deleted file mode 100644
index df40c98255..0000000000
--- a/ietf/secr/templates/includes/buttons_submit_cancel.html
+++ /dev/null
@@ -1,6 +0,0 @@
-<div class="button-group">
-    <ul>
-        <li><button type="submit" name="submit" value="Submit">Submit</button></li>
-        <li><button type="submit" name="submit" value="Cancel">Cancel</button></li>
-    </ul>
-</div> <!-- button-group -->
diff --git a/ietf/secr/templates/includes/sessions_footer.html b/ietf/secr/templates/includes/sessions_footer.html
deleted file mode 100755
index 2a26440047..0000000000
--- a/ietf/secr/templates/includes/sessions_footer.html
+++ /dev/null
@@ -1,5 +0,0 @@
-<ul>
-<li><a href="https://www.ietf.org/chairs/session-request-tool-instructions/" target="_blank">Instructions</a>.</li>
-<li>If you require assistance in using this tool, or wish to report a bug, then please send a message to <a href="mailto:ietf-action@ietf.org">ietf-action@ietf.org</a>.</li>
-<li>To submit your request via email, please send your request to <a href="mailto:agenda@ietf.org">agenda@ietf.org</a>.</li>
-</ul>
\ No newline at end of file
diff --git a/ietf/secr/templates/includes/sessions_request_form.html b/ietf/secr/templates/includes/sessions_request_form.html
deleted file mode 100755
index 61b1673357..0000000000
--- a/ietf/secr/templates/includes/sessions_request_form.html
+++ /dev/null
@@ -1,130 +0,0 @@
-<span class="required">*</span> Required Field
-<form id="session-request-form" action="." method="post" name="form_post">{% csrf_token %}
-    {{ form.session_forms.management_form }}
-    {% if form.non_field_errors %}
-        {{ form.non_field_errors }}
-    {% endif %}
-    <table id="sessions-new-table">
-        <tbody>
-        <tr class="bg1"><td>Working Group Name:</td><td>{{ group.name }} ({{ group.acronym }})</td></tr>
-        <tr class="bg2"><td>Area Name:</td><td>{% if group.parent %}{{ group.parent.name }} ({{ group.parent.acronym }}){% endif %}</td></tr>
-        <tr class="bg1"><td>Number of Sessions:<span class="required">*</span></td><td>{{ form.num_session.errors }}{{ form.num_session }}</td></tr>
-        {% if group.features.acts_like_wg %}<tr class="bg2" id="session_row_0"><td>Session 1:<span class="required">*</span></td><td>{% include 'meeting/session_details_form.html' with form=form.session_forms.0 hide_onsite_tool_prompt=True only %}</td></tr>
-            <tr class="bg2" id="session_row_1"><td>Session 2:<span class="required">*</span></td><td>{% include 'meeting/session_details_form.html' with form=form.session_forms.1 hide_onsite_tool_prompt=True only %}</td></tr>
-            {% if not is_virtual %}
-                <tr class="bg2"><td>Time between two sessions:</td><td>{{ form.session_time_relation.errors }}{{ form.session_time_relation }}</td></tr>
-            {% endif %}
-            <tr class="bg2" id="third_session_row"><td>Additional Session Request:</td><td>{{ form.third_session }} Check this box to request an additional session.<br>
-                Additional slot may be available after agenda scheduling has closed and with the approval of an Area Director.<br>
-                <div id="session_row_2">
-                    Third Session:
-                    {% include 'meeting/session_details_form.html' with form=form.session_forms.2 hide_onsite_tool_prompt=True only %}
-                </div>
-            </td></tr>
-        {% else %}{# else not group.features.acts_like_wg #}
-            {% for session_form in form.session_forms %}
-                <tr class="bg2" id="session_row_{{ forloop.counter0 }}"><td>Session {{ forloop.counter }}:<span class="required">*</span></td><td>{% include 'meeting/session_details_form.html' with form=session_form only %}</td></tr>
-            {% endfor %}
-        {% endif %}
-        <tr class="bg1"><td>Number of Attendees:{% if not is_virtual %}<span class="required">*</span>{% endif %}</td><td>{{ form.attendees.errors }}{{ form.attendees }}</td></tr>
-        <tr class="bg2">
-            <td>Participants who must be present:</td>
-            <td>
-                {{ form.bethere.errors }}
-                {{ form.bethere }}
-                <p class="fw-bold text-danger">
-                    Do not include Area Directors and WG Chairs; the system already tracks their availability.
-                </p>
-            </td>
-        </tr>
-        <tr class="bg1"><td>Conflicts to Avoid:</td>
-            <td>
-                <table>
-                    <tbody>
-                    <tr>
-                        <td colspan="2">Other WGs that included {{ group.name }} in their conflict lists:</td>
-                        <td>{{ session_conflicts.inbound|default:"None" }}</td>
-                    </tr>
-                    {% for cname, cfield, cselector  in form.wg_constraint_fields %}
-                        <tr class="bg1">
-                            {% if forloop.first %}<td rowspan="{{ form.wg_constraint_count }}" >WG Sessions:<br>You may select multiple WGs within each category</td>{% endif %}
-                            <td>{{ cname|title }}</td>
-                            <td>{{ cselector }}
-                                <button type="button" id="wg_delete_{{ cname.slug }}" onclick="ietf_sessions.delete_wg_constraint_clicked('{{ cname.slug }}')">Delete the last entry</button><br>
-                                {{ cfield.errors }}{{ cfield }}
-                            </td>
-                        </tr>
-                    {% empty %}{# shown if there are no constraint fields #}
-                        <tr class="bg1"><td ></td><td colspan="2">No constraints are enabled for this meeting.</td></tr>
-                    {% endfor %}
-                    {% if form.inactive_wg_constraints %}
-                        {% for cname, value, field in form.inactive_wg_constraints %}
-                            <tr class="bg1">
-                                {% if forloop.first %}
-                                    <td rowspan="{{ form.inactive_wg_constraint_count }}" >
-                                        Disabled for this meeting
-                                    </td>
-                                {% endif %}
-                                <td>{{ cname|title }}</td>
-                                <td><input type="text" value="{{ value }}" maxlength="255" class="wg_constraint" disabled><br>{{ field }} {{ field.label }}</td>
-                        </tr>
-                        {% endfor %}
-                    {% endif %}
-                    <tr>
-                        <td colspan="2">BOF Sessions:</td>
-                        <td>If the sessions can not be found in the fields above, please enter free form requests in the Special Requests field below.</td>
-                    </tr>
-                    </tbody>
-                </table>
-            </td>
-        </tr>
-
-        {% if not is_virtual %}
-
-            <tr class="bg2"><td>Resources requested:</td>
-                <td>
-                    {{ form.resources.errors }} {{ form.resources }}
-                </td>
-            </tr>
-            <tr class="bg1">
-                <td>Times during which this WG can <strong>not</strong> meet:<br>Please explain any selections in Special Requests below.</td>
-                 <!-- [html-validate-disable-block no-redundant-for -- FIXME: form renders with redundant for attributes] -->
-                <td>{{ form.timeranges.errors }}{{ form.timeranges }}</td>
-            </tr>
-            <tr class="bg2">
-                <td>
-                    Plan session adjacent with another WG:<br>
-                    (Immediately before or after another WG, no break in between, in the same room.)
-                </td>
-                <td>{{ form.adjacent_with_wg.errors }}{{ form.adjacent_with_wg }}</td>
-            </tr>
-            <tr class="bg1">
-                <td>
-                    Joint session with:<br>
-                    (To request one session for multiple WGs together.)
-                </td>
-                <td>To request a joint session with another group, please contact the secretariat.</td>
-            </tr>
-
-        {% endif %}
-
-        <tr class="bg2">
-            <td>Special Requests:<br>&nbsp;<br>i.e. restrictions on meeting times / days, etc.<br>  (limit 200 characters)</td>
-            <td>{{ form.comments.errors }}{{ form.comments }}</td>
-        </tr>
-        {% if form.notifications_optional %}
-            <tr class="bg1">
-                <td>{{ form.send_notifications.label }}</td>
-                <td>{{ form.send_notifications.errors }}{{ form.send_notifications }}</td>
-            </tr>
-        {% endif %}
-        </tbody>
-    </table>
-
-    <div class="button-group">
-        <ul>
-            <li><button type="submit" name="submit" value="Save"{% if is_locked %} disabled{% endif %}>Save</button></li>
-            <li><button type="button" onclick="history.back()">Back</button></li>
-        </ul>
-    </div>
-</form>
\ No newline at end of file
diff --git a/ietf/secr/templates/includes/sessions_request_view.html b/ietf/secr/templates/includes/sessions_request_view.html
deleted file mode 100644
index bc6aef0611..0000000000
--- a/ietf/secr/templates/includes/sessions_request_view.html
+++ /dev/null
@@ -1,73 +0,0 @@
-{% load ams_filters %}
-<table class="full-width">
-    <tbody>
-    <tr class="row1"><td>Working Group Name:</td><td>{{ group.name }} ({{ group.acronym }})</td></tr>
-    <tr class="row2"><td>Area Name:</td><td>{{ group.parent }}</td></tr>
-    <tr class="row1"><td>Number of Sessions Requested:</td><td>{% if session.third_session %}3{% else %}{{ session.num_session }}{% endif %}</td></tr>
-    {% if form %}
-        {% include 'includes/sessions_request_view_formset.html' with formset=form.session_forms group=group session=session only %}
-    {% else %}
-        {% include 'includes/sessions_request_view_session_set.html' with session_set=sessions group=group session=session only %}
-    {% endif %}
-    <tr class="row1"><td>Number of Attendees:</td><td>{{ session.attendees }}</td></tr>
-    <tr class="row2">
-        <td>Conflicts to Avoid:</td>
-        <td>
-            {% if session_conflicts.outbound %}
-                <table>
-                    <tbody>
-                    {% for conflict in session_conflicts.outbound %}
-                        <tr><td>{{ conflict.name|title }}: </td><td>{{ conflict.groups }}</td></tr>
-                    {% endfor %}
-                    </tbody>
-                </table>
-            {% else %}<i>None</i>{% endif %}
-        </td>
-    </tr>
-    <tr class="row1">
-        <td>Other WGs that included {{ group }} in their conflict list:</td>
-        <td>{% if session_conflicts.inbound %}{{ session_conflicts.inbound }}{% else %}<i>None so far</i>{% endif %}</td>
-    </tr>
-    {% if not is_virtual %}
-        <tr class="row2">
-            <td>Resources requested:</td>
-            <td>{% if session.resources %}<ul>{% for resource in session.resources %}<li>{{ resource.desc }}</li>{% endfor %}</ul>{% else %}<i>None so far</i>{% endif %}</td>
-        </tr>
-    {% endif %}
-    <tr class="row1">
-        <td>Participants who must be present:</td>
-        <td>{% if session.bethere %}<ul>{% for person in session.bethere %}<li>{{ person }}</li>{% endfor %}</ul>{% else %}<i>None</i>{% endif %}</td>
-    </tr>
-    <tr class="row2">
-        <td>Can not meet on:</td>
-        <td>{% if session.timeranges_display %}{{ session.timeranges_display|join:', ' }}{% else %}No constraints{% endif %}</td>
-    </tr>
-    {% if not is_virtual %}
-        <tr class="row1">
-            <td>Adjacent with WG:</td>
-            <td>{{ session.adjacent_with_wg|default:'No preference' }}</td>
-        </tr>
-        <tr class="row2">
-            <td>Joint session:</td>
-            <td>
-                {% if session.joint_with_groups %}
-                    {{ session.joint_for_session_display }} with: {{ session.joint_with_groups }}
-                {% else %}
-                    Not a joint session
-                {% endif %}
-            </td>
-        </tr>
-    {% endif %}
-    <tr class="row1"><td>Special Requests:</td><td>{{ session.comments }}</td></tr>
-    {% if form and form.notifications_optional %}
-        <tr class="row2">
-            <td>
-                {{ form.send_notifications.label}}
-            </td>
-            <td>
-                {% if form.cleaned_data.send_notifications %}Yes{% else %}No{% endif %}
-            </td>
-        </tr>
-    {% endif %}
-    </tbody>
-</table>
\ No newline at end of file
diff --git a/ietf/secr/templates/includes/sessions_request_view_formset.html b/ietf/secr/templates/includes/sessions_request_view_formset.html
deleted file mode 100644
index 80cad8d829..0000000000
--- a/ietf/secr/templates/includes/sessions_request_view_formset.html
+++ /dev/null
@@ -1,32 +0,0 @@
-{% load ams_filters %}{# keep this in sync with sessions_request_view_session_set.html #}
-{% for sess_form in formset %}{% if sess_form.cleaned_data and not sess_form.cleaned_data.DELETE %}
-  <tr class="row2">
-    <td>Session {{ forloop.counter }}:</td>
-    <td>
-      <dl>
-        <dt>Length</dt>
-        <dd>{{ sess_form.cleaned_data.requested_duration.total_seconds|display_duration }}</dd>
-        {% if sess_form.cleaned_data.name %}
-          <dt>Name</dt>
-          <dd>{{ sess_form.cleaned_data.name }}</dd>{% endif %}
-        {% if sess_form.cleaned_data.purpose.slug != 'regular' %}
-          <dt>Purpose</dt>
-          <dd>
-            {{ sess_form.cleaned_data.purpose }}
-            {% if sess_form.cleaned_data.purpose.timeslot_types|length > 1 %}({{ sess_form.cleaned_data.type }}
-              ){% endif %}
-          </dd>
-          <dt>Onsite tool?</dt>
-          <dd>{{ sess_form.cleaned_data.has_onsite_tool|yesno }}</dd>
-        {% endif %}
-      </dl>
-    </td>
-  </tr>
-  {% if group.features.acts_like_wg and forloop.counter == 2 and not is_virtual %}
-    <tr class="row2">
-      <td>Time between sessions:</td>
-      <td>{% if session.session_time_relation_display %}{{ session.session_time_relation_display }}{% else %}No
-        preference{% endif %}</td>
-    </tr>
-  {% endif %}
-{% endif %}{% endfor %}
\ No newline at end of file
diff --git a/ietf/secr/templates/includes/sessions_request_view_session_set.html b/ietf/secr/templates/includes/sessions_request_view_session_set.html
deleted file mode 100644
index a434b9d22b..0000000000
--- a/ietf/secr/templates/includes/sessions_request_view_session_set.html
+++ /dev/null
@@ -1,32 +0,0 @@
-{% load ams_filters %}{# keep this in sync with sessions_request_view_formset.html #}
-{% for sess in session_set %}
-  <tr class="row2">
-    <td>Session {{ forloop.counter }}:</td>
-    <td>
-      <dl>
-        <dt>Length</dt>
-        <dd>{{ sess.requested_duration.total_seconds|display_duration }}</dd>
-        {% if sess.name %}
-          <dt>Name</dt>
-          <dd>{{ sess.name }}</dd>{% endif %}
-        {% if sess.purpose.slug != 'regular' %}
-          <dt>Purpose</dt>
-          <dd>
-            {{ sess.purpose }}
-            {% if sess.purpose.timeslot_types|length > 1 %}({{ sess.type }}
-              ){% endif %}
-          </dd>
-          <dt>Onsite tool?</dt>
-          <dd>{{ sess.has_onsite_tool|yesno }}</dd>
-        {% endif %}
-      </dl>
-    </td>
-  </tr>
-  {% if group.features.acts_like_wg and forloop.counter == 2 and not is_virtual %}
-    <tr class="row2">
-      <td>Time between sessions:</td>
-      <td>{% if session.session_time_relation_display %}{{ session.session_time_relation_display }}{% else %}No
-        preference{% endif %}</td>
-    </tr>
-  {% endif %}
-{% endfor %}
\ No newline at end of file
diff --git a/ietf/secr/templates/index.html b/ietf/secr/templates/index.html
index 05fa3db41f..9ea7021279 100644
--- a/ietf/secr/templates/index.html
+++ b/ietf/secr/templates/index.html
@@ -1,11 +1,11 @@
-{# Copyright The IETF Trust 2007, All Rights Reserved #}
+{# Copyright The IETF Trust 2007-2025, All Rights Reserved #}
 {% extends "base.html" %}
 {% load static %}
 {% load ietf_filters %}
 {% block title %}Secretariat Dashboard{% endblock %}
 {% block content %}
     <h1>Secretariat Dashboard</h1>
-    <div class="">
+    <div class="secr-menu">
         {% if user|has_role:"Secretariat" %}
             <h2>IESG</h2>
             <ul>
@@ -20,12 +20,10 @@ <h2>IDs and WGs Process</h2>
 
             <h2>Meetings and Proceedings</h2>
             <ul>
-                <li> <a href="{% url 'ietf.secr.sreq.views.main' %} "><b>Session Requests</b></a></li>
                 <li> <a href="{% url 'ietf.secr.meetings.views.main' %}"><b>Meeting Manager</b></a></li>
             </ul>
         {% else %}
             <ul>
-                <li> <a href="{% url 'ietf.secr.sreq.views.main' %}"><b>Session Requests</b></a></li>
                 <li> <a href="{% url 'ietf.secr.announcement.views.main' %}"><b>Announcements</b></a></li>
             </ul>
         {% endif %}
diff --git a/ietf/secr/templates/sreq/confirm.html b/ietf/secr/templates/sreq/confirm.html
deleted file mode 100755
index 025375af32..0000000000
--- a/ietf/secr/templates/sreq/confirm.html
+++ /dev/null
@@ -1,57 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-
-{% block title %}Sessions - Confirm{% endblock %}
-
-{% block extrastyle %}
-    <style>
-        dl {width: 100%;}
-        dt {float: left; width: 30%; margin: 0.1em 0 0.1em 0; }
-        dt::after {content: ":";}
-        dd {float: left; width: 70%; margin: 0.1em 0 0.1em 0;}
-    </style>
-{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-    {{ form.media }}
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; <a href="{% url "ietf.secr.sreq.views.main" %}">Sessions</a>
-    &raquo; <a href="../">New</a>
-    &raquo; Session Request Confirmation
-{% endblock %}
-
-{% block content %}
-
-    <div class="module interim-container">
-        <h2>Sessions - Confirm</h2>
-
-        {% include "includes/sessions_request_view.html" %}
-
-        {% if group.features.acts_like_wg and form.session_forms.forms_to_keep|length > 2 %}
-            <br>
-            <p class="alert">
-                <b>
-                    Note: Your request for a third session must be approved by an area director before
-                    being submitted to agenda@ietf.org.  Click "Submit" below to email an approval
-                    request to the area directors.
-                </b>
-            </p>
-            <br>
-        {% endif %}
-
-        <form action="{% url "ietf.secr.sreq.views.confirm" acronym=group.acronym %}" method="post">
-            {% csrf_token %}
-            {{ form }}
-            {{ form.session_forms.management_form }}
-            {% for sf in form.session_forms %}
-                {% include 'meeting/session_details_form.html' with form=sf hidden=True only %}
-            {% endfor %}
-            {% include "includes/buttons_submit_cancel.html" %}
-        </form>
-
-    </div>
-
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/sreq/edit.html b/ietf/secr/templates/sreq/edit.html
deleted file mode 100755
index f6e62104b0..0000000000
--- a/ietf/secr/templates/sreq/edit.html
+++ /dev/null
@@ -1,39 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-{% block title %}Sessions - Edit{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-    <script src="{% static 'secr/js/sessions.js' %}"></script>
-    {{ form.media }}
-  <style>
-      .hidden {display: none !important;}
-      div.form-group {display: inline;}
-  </style>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; <a href="../../">Sessions</a>
-    &raquo; <a href="../">{{ group.acronym }}</a>
-    &raquo; Edit
-{% endblock %}
-
-{% block instructions %}
-    <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" target="_blank">Instructions</a>
-{% endblock %}
-
-{% block content %}
-    <div class="module interim-container">
-        <h2>IETF {{ meeting.number }}: Edit Session Request</h2>
-        <div class="inline-related">
-            <br>
-
-            {% include "includes/sessions_request_form.html" %}
-
-        </div> <!-- module -->
-    </div>
-{% endblock %}
-
-{% block footer-extras %}
-    {% include "includes/sessions_footer.html" %}
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/sreq/locked.html b/ietf/secr/templates/sreq/locked.html
deleted file mode 100755
index c27cf578ed..0000000000
--- a/ietf/secr/templates/sreq/locked.html
+++ /dev/null
@@ -1,30 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-
-{% block title %}Sessions{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; Sessions (Locked)
-{% endblock %}
-
-{% block content %}
-    <p>&raquo; <a href="{% url 'ietf.meeting.views.meeting_requests' %}">View list of timeslot requests</a></p>
-    <div class="module interim-container">
-        <h2>Sessions - Status</h2>
-
-        <p>{{ message }}</p>
-
-        <div class="button-group">
-            <ul>
-                <li><button type="button" onclick="window.location='../'">Back</button></li>
-            </ul>
-        </div> <!-- button-group -->
-
-
-    </div> <!-- module -->
-
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/sreq/main.html b/ietf/secr/templates/sreq/main.html
deleted file mode 100755
index a6695cd4f3..0000000000
--- a/ietf/secr/templates/sreq/main.html
+++ /dev/null
@@ -1,65 +0,0 @@
-{% extends "base_site.html" %}
-{% load ietf_filters %}
-{% load static %}
-
-{% block title %}Sessions{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; Sessions
-{% endblock %}
-{% block instructions %}
-    <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" target="_blank">Instructions</a>
-{% endblock %}
-
-{% block content %}
-    <p>&raquo; <a href="{% url 'ietf.meeting.views.meeting_requests' %}">View list of timeslot requests</a></p>
-    <div class="module interim-container">
-        <h2>
-            Sessions Request Tool: IETF {{ meeting.number }}
-            {% if user|has_role:"Secretariat" %}
-                {% if is_locked %}
-                    <span class="locked"><a href="{% url "ietf.secr.sreq.views.tool_status" %}">Tool Status: Locked</a></span>
-                {% else %}
-                    <span class="unlocked"><a href="{% url "ietf.secr.sreq.views.tool_status" %}">Tool Status: Unlocked</a></span>
-                {% endif %}
-            {% endif %}
-        </h2>
-        <div class="inline-related">
-            <h3><b>Request New Session</b></h3>
-            <p>The list below includes those working groups that you currently chair which do not already have a session scheduled. You can click on an acronym to initiate a request for a new session at the upcoming IETF meeting.  Click "Group will not meet" to send a notification that the group does not plan to meet.</p>
-            <ul>
-                {% for group in unscheduled_groups %}
-                    <li>
-                        <a href="{% url "ietf.secr.sreq.views.new" acronym=group.acronym %}">{{ group.acronym }}</a>
-                        {% if group.not_meeting %}
-                            <span class="required"> (Currently, this group does not plan to hold a session at IETF {{ meeting.number }})</span>
-                        {% endif %}
-                    </li>
-                {% empty %}
-                    <li><i>NONE</i></li>
-                {% endfor %}
-            </ul>
-        </div> <!-- inline-related -->
-        <br>
-        <div class="inline-related">
-            <h3>Edit / Cancel Previously Requested Sessions</h3>
-            <p>The list below includes those working groups for which you or your co-chair has requested sessions at the upcoming IETF meeting. You can click on an acronym to initiate changes to a session, or cancel a session.</p>
-            <ul>
-                {% for group in scheduled_groups %}
-                    <li><a href="{% url "ietf.secr.sreq.views.view" acronym=group.acronym %}">{{ group.acronym }} - {{ group.status_message }}</a></li>
-                {% empty %}
-                    <li><i>NONE</i></li>
-                {% endfor %}
-            </ul>
-        </div> <!-- inline-related -->
-    </div> <!-- module -->
-
-{% endblock %}
-
-{% block footer-extras %}
-    {% include "includes/sessions_footer.html" %}
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/sreq/new.html b/ietf/secr/templates/sreq/new.html
deleted file mode 100755
index 3f46e6f897..0000000000
--- a/ietf/secr/templates/sreq/new.html
+++ /dev/null
@@ -1,43 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-
-{% block title %}Sessions- New{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-    <script src="{% static 'secr/js/sessions.js' %}"></script>
-    {{ form.media }}
-  <style>
-      .hidden {display: none !important;}
-      div.form-group {display: inline;}
-  </style>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; <a href="../../">Sessions</a>
-    &raquo; New Session Request
-{% endblock %}
-
-{% block instructions %}
-    <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" target="_blank">Instructions</a>
-{% endblock %}
-
-{% block content %}
-    <div class="module interim-container">
-        <h2>IETF {{ meeting.number }}: New Session Request</h2>
-        <div class="inline-related">
-            <br>
-            <ul class="session-buttons">
-                <li><button type="button" onclick="if (window.confirm('A message will be sent to agenda@ietf.com as well as to the area director(s).\n\nContinue?')) { window.location='{% url "ietf.secr.sreq.views.no_session" acronym=group.acronym %}'};">Send a notification that the group does not plan to hold a session at IETF {{ meeting.number }}</button></li>
-                <li><button type="button" onclick="window.location='{% url "ietf.secr.sreq.views.new" acronym=group.acronym %}?previous'">Retrieve all information from previous meeting</button></li>
-            </ul>
-        </div>
-            {% include "includes/sessions_request_form.html" %}
-
-        </div> <!-- module -->
-
-{% endblock %}
-
-{% block footer-extras %}
-    {% include "includes/sessions_footer.html" %}
-{% endblock %}
\ No newline at end of file
diff --git a/ietf/secr/templates/sreq/tool_status.html b/ietf/secr/templates/sreq/tool_status.html
deleted file mode 100755
index b91e73a129..0000000000
--- a/ietf/secr/templates/sreq/tool_status.html
+++ /dev/null
@@ -1,42 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-
-{% block title %}Sessions{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; <a href="../">Sessions</a>
-    &raquo; Session Status
-{% endblock %}
-
-{% block content %}
-
-    <div class="module interim-container">
-        <h2>Sessions - Status</h2>
-        <p>Enter the message that you would like displayed to the WG Chair when this tool is locked.</p>
-        <form method="post">{% csrf_token %}
-            <table>
-                <tbody>
-                 <!-- [html-validate-disable-block wcag/h63 -- FIXME: as_table renders without scope] -->
-                 {{ form.as_table }}
-                 </tbody>
-            </table>
-            <div class="button-group">
-                <ul>
-                    {% if is_locked %}
-                        <li><button type="submit" name="submit" value="Unlock">Unlock</button></li>
-                    {% else %}
-                        <li><button type="submit" name="submit" value="Lock">Lock</button></li>
-                    {% endif %}
-                    <li><button type="submit" name="submit" value="Back">Back</button></li>
-                </ul>
-            </div> <!-- button-group -->
-
-        </form>
-
-    </div> <!-- module -->
-
-{% endblock %}
diff --git a/ietf/secr/templates/sreq/view.html b/ietf/secr/templates/sreq/view.html
deleted file mode 100644
index 9a0a3b01c1..0000000000
--- a/ietf/secr/templates/sreq/view.html
+++ /dev/null
@@ -1,55 +0,0 @@
-{% extends "base_site.html" %}
-{% load static %}
-
-{% block title %}Sessions - View{% endblock %}
-
-{% block extrahead %}{{ block.super }}
-    <script src="{% static 'secr/js/utils.js' %}"></script>
-{% endblock %}
-
-{% block extrastyle %}
-    <style>
-        dl {width: 100%;}
-        dt {float: left; width: 30%; margin: 0.1em 0 0.1em 0; }
-        dt::after {content: ":";}
-        dd {float: left; width: 70%; margin: 0.1em 0 0.1em 0;}
-    </style>
-{% endblock %}
-
-{% block breadcrumbs %}{{ block.super }}
-    &raquo; <a href="../">Sessions</a>
-    &raquo; {{ group.acronym }}
-{% endblock %}
-
-{% block instructions %}
-    <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" target="_blank">Instructions</a>
-{% endblock %}
-
-{% block content %}
-
-    <div class="module interim-container">
-        <h2>Sessions - View (meeting: {{ meeting.number }})</h2>
-
-        {% include "includes/sessions_request_view.html" %}
-
-        <br>
-
-        {% include "includes/activities.html" %}
-
-        <div class="button-group">
-            <ul>
-                <li><button type="button" name="edit" onclick="window.location='{% url "ietf.secr.sreq.views.edit" acronym=group.acronym num=meeting.number %}'"{% if not can_edit %} disabled{% endif %}>Edit</button></li>
-                {% if show_approve_button %}
-                    <li><button type="button" onclick="window.location='approve/'">Approve Third Session</button></li>
-                {% endif %}
-                <li><button type="button" onclick="if (window.confirm('Do you really want to cancel this session?')) { window.location='cancel/' };" {% if not can_cancel %} disabled{% endif %}>Cancel this Request</button></li>
-                <li><button type="button" onclick="window.location='{% url "ietf.secr.sreq.views.main" %}'">Back</button></li>
-            </ul>
-        </div> <!-- button-group -->
-    </div> <!-- module -->
-
-{% endblock %}
-
-{% block footer-extras %}
-    {% include "includes/sessions_footer.html" %}
-{% endblock %}
diff --git a/ietf/secr/urls.py b/ietf/secr/urls.py
index 4a3e5b0363..ab21046654 100644
--- a/ietf/secr/urls.py
+++ b/ietf/secr/urls.py
@@ -1,11 +1,22 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.conf import settings
 from django.urls import re_path, include
 from django.views.generic import TemplateView
+from django.views.generic.base import RedirectView
 
 urlpatterns = [
     re_path(r'^$', TemplateView.as_view(template_name='index.html'), name='ietf.secr'),
     re_path(r'^announcement/', include('ietf.secr.announcement.urls')),
     re_path(r'^meetings/', include('ietf.secr.meetings.urls')),
     re_path(r'^rolodex/', include('ietf.secr.rolodex.urls')),
-    re_path(r'^sreq/', include('ietf.secr.sreq.urls')),
+    # remove these redirects after 125
+    re_path(r'^sreq/$', RedirectView.as_view(url='/meeting/session/request/', permanent=True)),
+    re_path(r'^sreq/%(acronym)s/$' % settings.URL_REGEXPS, RedirectView.as_view(url='/meeting/session/request/%(acronym)s/view/', permanent=True)),
+    re_path(r'^sreq/%(acronym)s/edit/$' % settings.URL_REGEXPS, RedirectView.as_view(url='/meeting/session/request/%(acronym)s/edit/', permanent=True)),
+    re_path(r'^sreq/%(acronym)s/new/$' % settings.URL_REGEXPS, RedirectView.as_view(url='/meeting/session/request/%(acronym)s/new/', permanent=True)),
+    re_path(r'^sreq/(?P<num>[A-Za-z0-9_\-\+]+)/%(acronym)s/view/$' % settings.URL_REGEXPS, RedirectView.as_view(url='/meeting/%(num)s/session/request/%(acronym)s/view/', permanent=True)),
+    re_path(r'^sreq/(?P<num>[A-Za-z0-9_\-\+]+)/%(acronym)s/edit/$' % settings.URL_REGEXPS, RedirectView.as_view(url='/meeting/%(num)s/session/request/%(acronym)s/edit/', permanent=True)),
+    # ---------------------------------
     re_path(r'^telechat/', include('ietf.secr.telechat.urls')),
 ]
diff --git a/ietf/secr/utils/group.py b/ietf/secr/utils/group.py
deleted file mode 100644
index 40a9065ace..0000000000
--- a/ietf/secr/utils/group.py
+++ /dev/null
@@ -1,50 +0,0 @@
-# Copyright The IETF Trust 2013-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-
-# Python imports
-
-# Django imports
-from django.core.exceptions import ObjectDoesNotExist
-
-# Datatracker imports
-from ietf.group.models import Group
-from ietf.ietfauth.utils import has_role
-
-
-def get_my_groups(user,conclude=False):
-    '''
-    Takes a Django user object (from request)
-    Returns a list of groups the user has access to.  Rules are as follows
-    secretariat - has access to all groups
-    area director - has access to all groups in their area
-    wg chair or secretary - has access to their own group
-    chair of irtf has access to all irtf groups
-
-    If user=None than all groups are returned.
-    concluded=True means include concluded groups.  Need this to upload materials for groups
-    after they've been concluded.  it happens.
-    '''
-    my_groups = set()
-    states = ['bof','proposed','active']
-    if conclude:
-        states.extend(['conclude','bof-conc'])
-
-    all_groups = Group.objects.filter(type__features__has_meetings=True, state__in=states).order_by('acronym')
-    if user == None or has_role(user,'Secretariat'):
-        return all_groups
-    
-    try:
-        person = user.person
-    except ObjectDoesNotExist:
-        return list()
-
-    for group in all_groups:
-        if group.role_set.filter(person=person,name__in=('chair','secr','ad')):
-            my_groups.add(group)
-            continue
-        if group.parent and group.parent.role_set.filter(person=person,name__in=('ad','chair')):
-            my_groups.add(group)
-            continue
-
-    return list(my_groups)
diff --git a/ietf/settings.py b/ietf/settings.py
index d6be1d1e0f..9a213c1a73 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -537,7 +537,6 @@ def skip_unreadable_post(record):
     'ietf.secr.announcement',
     'ietf.secr.meetings',
     'ietf.secr.rolodex',
-    'ietf.secr.sreq',
     'ietf.secr.telechat',
 ]
 
diff --git a/ietf/static/js/custom_striped.js b/ietf/static/js/custom_striped.js
new file mode 100644
index 0000000000..480ad7cf82
--- /dev/null
+++ b/ietf/static/js/custom_striped.js
@@ -0,0 +1,16 @@
+// Copyright The IETF Trust 2025, All Rights Reserved
+
+document.addEventListener('DOMContentLoaded', () => {
+    // add stripes
+    const firstRow = document.querySelector('.custom-stripe .row')
+    if (firstRow) {
+        const parent = firstRow.parentElement;
+        const allRows = Array.from(parent.children).filter(child => child.classList.contains('row'))
+        allRows.forEach((row, index) => {
+            row.classList.remove('bg-light')
+            if (index % 2 === 1) {
+                row.classList.add('bg-light')
+            }
+        })
+    }
+})
diff --git a/ietf/secr/static/js/session_form.js b/ietf/static/js/session_form.js
similarity index 92%
rename from ietf/secr/static/js/session_form.js
rename to ietf/static/js/session_form.js
index 6f28f16db4..bd61293d7c 100644
--- a/ietf/secr/static/js/session_form.js
+++ b/ietf/static/js/session_form.js
@@ -1,4 +1,4 @@
-/* Copyright The IETF Trust 2021, All Rights Reserved
+/* Copyright The IETF Trust 2021-2025, All Rights Reserved
  *
  * JS support for the SessionForm
  * */
diff --git a/ietf/secr/static/js/sessions.js b/ietf/static/js/session_request.js
similarity index 90%
rename from ietf/secr/static/js/sessions.js
rename to ietf/static/js/session_request.js
index a2770e6262..dfb169f675 100644
--- a/ietf/secr/static/js/sessions.js
+++ b/ietf/static/js/session_request.js
@@ -1,4 +1,4 @@
-// Copyright The IETF Trust 2015-2021, All Rights Reserved
+// Copyright The IETF Trust 2015-2025, All Rights Reserved
 /* global alert */
 var ietf_sessions; // public interface
 
@@ -38,7 +38,7 @@ var ietf_sessions; // public interface
     const only_one_session = (val === 1);
     if (document.form_post.session_time_relation) {
       document.form_post.session_time_relation.disabled = only_one_session;
-      document.form_post.session_time_relation.closest('tr').hidden = only_one_session;
+      document.form_post.session_time_relation.closest('div.row').hidden = only_one_session;
     }
     if (document.form_post.joint_for_session) {
       document.form_post.joint_for_session.disabled = only_one_session;
@@ -129,6 +129,11 @@ var ietf_sessions; // public interface
     }
   }
 
+  function wg_constraint_delete_clicked(event) {
+    const constraint_name = event.currentTarget.dataset.constraint_name;
+    delete_last_wg_constraint(constraint_name);
+  }
+
   /* Initialization */
   function on_load() {
     // Attach event handler to session count select
@@ -146,6 +151,9 @@ var ietf_sessions; // public interface
       selectors[index].addEventListener('change', wg_constraint_selector_changed, false)
     }
 
+    // Attach event handler to constraint delete buttons
+    document.querySelectorAll('.wg_constraint_delete')
+      .forEach(btn => btn.addEventListener('click', wg_constraint_delete_clicked));
   }
 
   // initialize after page loads
diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index bd8c0bf3cd..1e7c1688ff 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -1,4 +1,4 @@
-{# Copyright The IETF Trust 2015-2022, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
 {% load origin %}
 {% origin %}
 {% load ietf_filters managed_groups wg_menu active_groups_menu group_filters cache meetings_filters %}
@@ -304,7 +304,7 @@
     </li>
     <li>
         <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
-           href="{% url 'ietf.secr.sreq.views.main' %}">
+           href="{% url 'ietf.meeting.views_session_request.list_view' %}">
             Request a session
         </a>
     </li>
diff --git a/ietf/templates/group/meetings-row.html b/ietf/templates/group/meetings-row.html
index 25605ec0f1..8927eb61a2 100644
--- a/ietf/templates/group/meetings-row.html
+++ b/ietf/templates/group/meetings-row.html
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% load origin tz %}
 {% origin %}
 {% for s in sessions %}
@@ -25,7 +26,7 @@
             {% if show_request and s.meeting.type_id == 'ietf' %}
                 {% if can_edit %}
                     <a class="btn btn-primary btn-sm"
-                       href="{% url 'ietf.secr.sreq.views.view' num=s.meeting.number acronym=s.group.acronym %}">
+                       href="{% url 'ietf.meeting.views_session_request.view_request' num=s.meeting.number acronym=s.group.acronym %}">
                         Edit Session Request
                     </a>
                 {% endif %}
diff --git a/ietf/templates/group/meetings.html b/ietf/templates/group/meetings.html
index bee8111025..30f478da13 100644
--- a/ietf/templates/group/meetings.html
+++ b/ietf/templates/group/meetings.html
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% extends "group/group_base.html" %}
 {% load origin static %}
 {% block title %}
@@ -9,7 +10,7 @@
     <a class="btn btn-primary"
        href="{% url 'ietf.meeting.views.meeting_requests' %}">Session requests</a>
     {% if can_edit or can_always_edit %}
-        <a class="btn btn-primary" href="{% url 'ietf.secr.sreq.views.main' %}">Request a session</a>
+        <a class="btn btn-primary" href="{% url 'ietf.meeting.views_session_request.list_view' %}">Request a session</a>
         <a class="btn btn-primary"
            href="{% url 'ietf.meeting.views.interim_request' %}?group={{ group.id }}">
             Request an interim meeting
diff --git a/ietf/templates/meeting/important_dates_for_meeting.ics b/ietf/templates/meeting/important_dates_for_meeting.ics
index df5fe46818..e6d403da93 100644
--- a/ietf/templates/meeting/important_dates_for_meeting.ics
+++ b/ietf/templates/meeting/important_dates_for_meeting.ics
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% load tz ietf_filters %}{% for d in meeting.important_dates %}BEGIN:VEVENT
 UID:ietf-{{ meeting.number }}-{{ d.name_id }}-{{ d.date.isoformat }}
 SUMMARY:IETF {{ meeting.number }}: {{ d.name.name }}
@@ -8,11 +9,11 @@ TRANSP:TRANSPARENT
 DESCRIPTION:{{ d.name.desc }}{% if first and d.name.slug == 'openreg' or first and d.name.slug == 'earlybird' %}\n
  Register here: https://www.ietf.org/how/meetings/register/{% endif %}{% if d.name.slug == 'opensched' %}\n
  To request a Working Group session, use the IETF Meeting Session Request Tool:\n
- {{ request.scheme }}://{{ request.get_host}}{% url 'ietf.secr.sreq.views.main' %}\n
+ {{ request.scheme }}://{{ request.get_host}}{% url 'ietf.meeting.views_session_request.list_view' %}\n
  If you are working on a BOF request, it is highly recommended to tell the IESG\n
  now by sending an email to iesg@ietf.org to get advance help with the request.{% endif %}{% if d.name.slug == 'cutoffwgreq' %}\n
  To request a Working Group session, use the IETF Meeting Session Request Tool:\n
- {{ request.scheme }}://{{ request.get_host }}{% url 'ietf.secr.sreq.views.main' %}{% endif %}{% if d.name.slug == 'cutoffbofreq' %}\n
+ {{ request.scheme }}://{{ request.get_host }}{% url 'ietf.meeting.views_session_request.list_view' %}{% endif %}{% if d.name.slug == 'cutoffbofreq' %}\n
  To request a BOF, please see instructions on Requesting a BOF:\n
  https://www.ietf.org/how/bofs/bof-procedures/{% endif %}{% if d.name.slug == 'idcutoff' %}\n
  Upload using the I-D Submission Tool:\n
diff --git a/ietf/templates/meeting/requests.html b/ietf/templates/meeting/requests.html
index 3008ceb662..0abee95887 100644
--- a/ietf/templates/meeting/requests.html
+++ b/ietf/templates/meeting/requests.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
 {% load origin %}
 {% load ietf_filters static person_filters textfilters %}
 {% block pagehead %}
@@ -151,7 +151,7 @@ <h2 class="mt-5" id="{% firstof area.grouper.acronym "other-groups" %}">
                 {% endifchanged %}
                     <tr>
                         <td>
-                            <a href="{% url "ietf.secr.sreq.views.edit" num=meeting.number acronym=session.group.acronym %}">
+                            <a href="{% url 'ietf.meeting.views_session_request.edit_request' num=meeting.number acronym=session.group.acronym %}">
                                 {{ session.group.acronym }}
                             </a>
                             {% if session.purpose_id != "regular" and session.purpose_id != "none" %}
diff --git a/ietf/secr/templates/sreq/session_approval_notification.txt b/ietf/templates/meeting/session_approval_notification.txt
similarity index 56%
rename from ietf/secr/templates/sreq/session_approval_notification.txt
rename to ietf/templates/meeting/session_approval_notification.txt
index 7bb63aa3fa..74eca09bd8 100644
--- a/ietf/secr/templates/sreq/session_approval_notification.txt
+++ b/ietf/templates/meeting/session_approval_notification.txt
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 Dear {{ group.parent }} Director(s):
 
 {{ header }} meeting session request has just been
@@ -5,11 +6,11 @@ submitted by {{ requester }}.
 The third session requires your approval.
 
 To approve the session go to the session request view here:
-{{ settings.IDTRACKER_BASE_URL }}{% url "ietf.secr.sreq.views.view" acronym=group.acronym %}
+{{ settings.IDTRACKER_BASE_URL }}{% url "ietf.meeting.views_session_request.view_request" acronym=group.acronym %}
 and click "Approve Third Session".
 
 Regards,
 
 The IETF Secretariat.
 
-{% include "includes/session_info.txt" %}
+{% include "meeting/session_request_info.txt" %}
diff --git a/ietf/secr/templates/sreq/session_cancel_notification.txt b/ietf/templates/meeting/session_cancel_notification.txt
similarity index 71%
rename from ietf/secr/templates/sreq/session_cancel_notification.txt
rename to ietf/templates/meeting/session_cancel_notification.txt
index 8aee6c89db..3de67fc8f4 100644
--- a/ietf/secr/templates/sreq/session_cancel_notification.txt
+++ b/ietf/templates/meeting/session_cancel_notification.txt
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% autoescape off %}{% load ams_filters %}
 
 A request to cancel a meeting session has just been submitted by {{ requester }}.{% endautoescape %}
diff --git a/ietf/templates/meeting/session_details_form.html b/ietf/templates/meeting/session_details_form.html
index 6b59e7dacd..9cd1b6e85c 100644
--- a/ietf/templates/meeting/session_details_form.html
+++ b/ietf/templates/meeting/session_details_form.html
@@ -1,42 +1,48 @@
-{# Copyright The IETF Trust 2007-2020, All Rights Reserved #}
+{# Copyright The IETF Trust 2007-2025, All Rights Reserved #}
+{% load django_bootstrap5 %}
+
 <div class="session-details-form my-3" data-prefix="{{ form.prefix }}">
     {% if hidden %}
         {{ form.name.as_hidden }}{{ form.purpose.as_hidden }}{{ form.type.as_hidden }}{{ form.requested_duration.as_hidden }}
         {{ form.has_onsite_tool.as_hidden }}
     {% else %}
-    <table>
-        <tbody>
         {% comment %}
         The form-group class is used by session_details_form.js to identify the correct element
         to hide the name / purpose / type fields when not needed. This is a bootstrap class - the
         secr app does not use it, so this (and the hidden class, also needed by session_details_form.js)
         are defined in edit.html and new.html as a kludge to make this work.
         {% endcomment %}
-      <tr class="form-group">
-                <th scope="row">{{ form.name.label_tag }}</th>
-                <td>{{ form.name }}{{ form.purpose.errors }}</td>
-            </tr>
-      <tr class="form-group">
-                <th scope="row">{{ form.purpose.label_tag }}</th>
-                <td>
-            {{ form.purpose }} <div class="form-group">{{ form.type }}</div>
-                    {{ form.purpose.errors }}{{ form.type.errors }}
-                </td>
-            </tr>
-            <tr>
-                <th scope="row">{{ form.requested_duration.label_tag }}</th>
-                <td>{{ form.requested_duration }}{{ form.requested_duration.errors }}</td>
-            </tr>
-            {% if not hide_onsite_tool_prompt %}
-            <tr>
-                <th scope="row">{{ form.has_onsite_tool.label_tag }}</th>
-                <td>{{ form.has_onsite_tool }}{{ form.has_onsite_tool.errors }}</td>
-            </tr>
-            {% endif %}
-            </tbody>
-        </table>
-        {% if hide_onsite_tool_prompt %}{{ form.has_onsite_tool.as_hidden }}{% endif %}
+
+        <div class="form-group">
+            {% bootstrap_field form.name layout="horizontal" %}
+        </div>
+
+        <div class="form-group">
+            <div class="row mb-3 g-3">
+                <label class="col-md-2 fw-bold col-form-label" for="{{ form.purpose.id_for_label }}">Purpose</label>
+                <div class="col-md-5">{{ form.purpose }}</div>
+                <div class="col-md-5 form-group">{{ form.type }}</div>
+                {{ form.purpose.errors }}{{ form.type.errors }}
+            </div>
+        </div>
+
+        {% bootstrap_field form.requested_duration layout="horizontal" %}
+        {% if not hide_onsite_tool_prompt %}
+            {% bootstrap_field form.has_onsite_tool layout="horizontal" %}
+        {% endif %}
+        
+        {% if hide_onsite_tool_prompt %}
+            {{ form.has_onsite_tool.as_hidden }}
+        {% endif %}
     {% endif %}
+
     {# hidden fields included whether or not the whole form is hidden #}
-    {{ form.attendees.as_hidden }}{{ form.comments.as_hidden }}{{ form.id.as_hidden }}{{ form.on_agenda.as_hidden }}{{ form.DELETE.as_hidden }}{{ form.remote_instructions.as_hidden }}{{ form.short.as_hidden }}{{ form.agenda_note.as_hidden }}
-</div>
\ No newline at end of file
+    {{ form.attendees.as_hidden }}
+    {{ form.comments.as_hidden }}
+    {{ form.id.as_hidden }}
+    {{ form.on_agenda.as_hidden }}
+    {{ form.DELETE.as_hidden }}
+    {{ form.remote_instructions.as_hidden }}
+    {{ form.short.as_hidden }}
+    {{ form.agenda_note.as_hidden }}
+</div>
diff --git a/ietf/secr/templates/sreq/not_meeting_notification.txt b/ietf/templates/meeting/session_not_meeting_notification.txt
similarity index 83%
rename from ietf/secr/templates/sreq/not_meeting_notification.txt
rename to ietf/templates/meeting/session_not_meeting_notification.txt
index 1120f8480c..0e5c940708 100644
--- a/ietf/secr/templates/sreq/not_meeting_notification.txt
+++ b/ietf/templates/meeting/session_not_meeting_notification.txt
@@ -1,3 +1,4 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% load ams_filters %}
 
 {{ login|smart_login }} {{ group.acronym }} working group, indicated that the {{ group.acronym }} working group does not plan to hold a session at IETF {{ meeting.number }}.
diff --git a/ietf/templates/meeting/session_request_confirm.html b/ietf/templates/meeting/session_request_confirm.html
new file mode 100644
index 0000000000..09043d3d0c
--- /dev/null
+++ b/ietf/templates/meeting/session_request_confirm.html
@@ -0,0 +1,38 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static ietf_filters django_bootstrap5 %}
+{% block title %}Confirm Session Request{% endblock %}
+    
+{% block content %}
+    <h1 class="">Confirm Session Request - IETF {{ meeting.number }}</h1>
+
+    <div class="d-flex mb-3">
+      <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" class="me-3 btn btn-primary" target="_blank">Instructions</a>
+    </div>
+
+    <hr>
+
+    <div class="custom-stripe">
+
+        {% include "meeting/session_request_view_table.html" %}
+
+        <form action="{% url 'ietf.meeting.views_session_request.confirm' acronym=group.acronym %}" method="post">
+            {% csrf_token %}
+            {{ form }}
+            {{ form.session_forms.management_form }}
+            {% for sf in form.session_forms %}
+                {% include 'meeting/session_details_form.html' with form=sf hidden=True only %}
+            {% endfor %}
+
+            <button class="btn btn-primary" type="submit" name="submit" value="Submit">Submit</button>
+            <button class="btn btn-secondary float-end" type="submit" name="submit" value="Cancel">Cancel</button>
+
+        </form>
+
+    </div> <!-- view-container -->
+
+{% endblock %}
+
+{% block js %}
+    <script src="{% static 'ietf/js/custom_striped.js' %}"></script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_form.html b/ietf/templates/meeting/session_request_form.html
new file mode 100644
index 0000000000..ecf5cb7268
--- /dev/null
+++ b/ietf/templates/meeting/session_request_form.html
@@ -0,0 +1,206 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static ietf_filters django_bootstrap5 %}
+{% block title %}{% if is_create %}New {% else %}Edit {% endif %}Session Request{% endblock %}
+{% block morecss %}{{ block.super }}
+  .hidden {display: none !important;}
+  div.form-group {display: inline;}
+{% endblock %}
+{% block content %}
+    <h1>{% if is_create %}New {% else %}Edit {% endif %}Session Request</h1>
+
+    {% if is_create %}
+    <div class="buttonlist mb-3">
+        <a class="btn btn-primary me-3"
+           onclick="if (window.confirm('A message will be sent to agenda@ietf.com as well as to the area director(s).\n\nContinue?')) { window.location='{% url "ietf.meeting.views_session_request.no_session" acronym=group.acronym %}'};"
+           href="{% url 'ietf.meeting.views_session_request.no_session' acronym=group.acronym %}">Send a notification that the group does not plan to hold a session at IETF {{ meeting.number }}</a>
+        <a class="btn btn-primary"
+           href="{% url 'ietf.meeting.views_session_request.new_request' acronym=group.acronym %}?previous">Retrieve all information from previous meeting</a>
+    </div>
+    {% endif %}
+
+    <hr>
+
+    <form id="session-request-form" action="." method="post" name="form_post">
+        {% csrf_token %}
+        {{ form.session_forms.management_form }}
+        {% if form.non_field_errors %}
+            <div class="my-3 alert alert-danger">{{ form.non_field_errors }}</div>
+        {% endif %}
+
+        <div class="row mb-3">
+            <label class="col-md-2 fw-bold col-form-label" for="id_group_name">Working Group Name</label>
+            <div class="col-md-10">
+                <input type="text" class="form-control" value="{{ group.name }} ({{ group.acronym }})" id="id_group_name" disabled>
+            </div>
+        </div>
+
+        <div class="row mb-3">
+            <label class="col-md-2 fw-bold col-form-label" for="id_area_name">Area Name</label>
+            <div class="col-md-10">
+                <input type="text" class="form-control" value="{% if group.parent %}{{ group.parent.name }} ({{ group.parent.acronym }}){% endif %}" id="id_area_name" disabled>
+            </div>
+        </div>
+
+        {% bootstrap_field form.num_session layout="horizontal" %}
+
+        {% if group.features.acts_like_wg %}
+
+            <div class="row mb-3" id="session_row_0">
+                <div class="col-md-2 fw-bold col-form-label">Session 1</div>
+                <div class="col-md-10">
+                    {% include 'meeting/session_details_form.html' with form=form.session_forms.0 hide_onsite_tool_prompt=True only %}
+                </div>
+            </div>
+
+            <div class="row mb-3" id="session_row_1">
+                <div class="col-md-2 fw-bold col-form-label">Session 2</div>
+                <div class="col-md-10">
+                    {% include 'meeting/session_details_form.html' with form=form.session_forms.1 hide_onsite_tool_prompt=True only %}
+                </div>
+            </div>
+
+            {% if not is_virtual %}
+                {% bootstrap_field form.session_time_relation layout="horizontal" %}
+            {% endif %}
+
+            <div class="row mb-3" id="third_session_row">
+                <div class="col-md-2 fw-bold col-form-label">Additional Session Request</div>
+                <div class="col-md-10">
+                    <div class="form-check">
+                        {{ form.third_session }}
+                        <label class="form-check-label" for="id_third_session">Check this box to request an additional session</label>
+                        <div id="id_third_session_helptext" class="form-text">Additional slot may be available after agenda scheduling has closed and with the approval of an Area Director.</div>
+                    </div>
+                    
+                </div>
+            </div>
+
+            <div class="row mb-3" id="session_row_2">
+                <div class="col-md-2 fw-bold col-form-label">Third session request</div>
+                <div class="col-md-10">
+                    {% include 'meeting/session_details_form.html' with form=form.session_forms.2 hide_onsite_tool_prompt=True only %}
+                </div>
+            </div>
+
+        {% else %}{# else not group.features.acts_like_wg #}
+            {% for session_form in form.session_forms %}
+            <div class="row mb-3" id="session_row_{{ forloop.counter0 }}">
+                <div class="col-md-2 fw-bold col-form-label">Session {{ forloop.counter }}</div>
+                <div class="col-md-10">
+                    {% include 'meeting/session_details_form.html' with form=session_form only %}
+                </div>
+            </div>
+            {% endfor %}
+        {% endif %}
+
+        {% bootstrap_field form.attendees layout="horizontal" %}
+
+        {% bootstrap_field form.bethere layout="horizontal" %}
+
+        <div class="row mb-3">
+            <div class="col-md-2 fw-bold col-form-label">Conflicts to avoid</div>
+            <div class="col-md-10">
+                <div class="row mb-3">
+                    <div class="col-md-2">Other WGs that included <strong>{{ group.acronym }}</strong> in their conflict lists</div>
+                    <div class="col-md-8">{{ session_conflicts.inbound|default:"None" }}</div>
+                </div>
+                <div class="row mb-3">
+                    <div class="col-md-2">WG Sessions<br>You may select multiple WGs within each category</div>
+                    <div class="col-md">
+                        {% for cname, cfield, cselector  in form.wg_constraint_fields %}
+                        <div class="row mb-2">
+                            <div class="col-md-2"><label for="id_wg_selector_{{ cname.slug }}">{{ cname|title }}</label></div>
+                            <div class="col">
+                                <div class="row g-3 mb-1">
+                                    <div class="col">
+                                        {{ cselector }}
+                                    </div>
+                                    <div class="col">
+                                        <button type="button" class="btn btn-primary wg_constraint_delete" id="wg_delete_{{ cname.slug }}" data-constraint_name="{{ cname.slug }}">Delete the last entry</button>
+                                    </div>
+                                </div>
+                                <div class="row g-3">
+                                    <div class="col">
+                                        {{ cfield.errors }}{{ cfield }}
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+                        {% empty %}{# shown if there are no constraint fields #}
+                            <div class="col-md-1"></div>
+                            <div class="col-md">No constraints are enabled for this meeting.</div>
+                        {% endfor %}
+                    </div>
+                </div>
+                
+                {% if form.inactive_wg_constraint_count %}
+                <div class="row mb-3">
+                    <div class="col-md-2">Disabled for this meeting</div>
+                    <div class="col">
+                        {% for cname, value, field in form.inactive_wg_constraints %}
+                        <div class="row mb2">
+                            <div class="col-md-2">{{ cname|title }}</div>
+                            <div class="col">
+                                <div class="row">
+                                    <div class="col">
+                                        <input type="text" value="{{ value }}" maxlength="255" class="wg_constraint form-control" aria-label="constraint target" disabled>
+                                    </div>
+                                    <div class="col form-check">
+                                        <input type="checkbox" name="{{ field.name }}" id="{{ field.id_for_label }}" class="form-check-input">
+                                        <label class="form-check-label" for="{{ field.id_for_label }}">Delete this conflict</label>
+                                    </div>
+                                </div>
+                            </div>
+                        </div>
+                        {% endfor %}
+                    </div>
+                </div>
+                {% endif %}
+
+                <div class="row mb-3">
+                    <div class="col-md-2">BOF Sessions</div>
+                    <div class="col">If the sessions can not be found in the fields above, please enter free form requests in the Special Requests field below.</div>
+                </div>
+            </div>
+        </div>
+
+        {% if not is_virtual %}
+
+            {% bootstrap_field form.resources layout="horizontal" %}
+
+            {% bootstrap_field form.timeranges layout="horizontal" %}
+
+            {% bootstrap_field form.adjacent_with_wg layout="horizontal" %}
+
+            <div class="row mb-3">
+                <div class="col-md-2 fw-bold col-form-label">Joint session with: (To request one session for multiple WGs together)</div>
+                <div class="col-md-10">To request a joint session with another group, please contact the secretariat.</div>
+            </div>
+
+        {% endif %}
+
+        {% bootstrap_field form.comments layout="horizontal" %}
+
+        {% if form.notifications_optional %}
+        <div class="row mb-3">
+            <label class="col-md-2 fw-bold col-form-label" for="id_send_notifications">Notifications</label>
+            <div class="col">
+                <div class="form-check">
+                    <input type="checkbox" name="send_notifications" class="form-check-input" id="id_send_notifications">
+                    <label class="form-check-label" for="id_send_notifications">Send notification emails?</label>
+                </div>
+            </div>
+        </div>
+        {% endif %}
+        
+        <button type="submit" class="btn btn-primary" name="submit" value="Save"{% if is_locked %} disabled{% endif %}>Save</button>
+        <a class="btn btn-secondary float-end"
+               href="{% url 'ietf.meeting.views_session_request.list_view' %}">Cancel</a>
+    </form>
+
+{% endblock %}
+{% block js %}
+    <script src="{% static 'ietf/js/session_request.js' %}"></script>
+    {{ form.media }}
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_info.txt b/ietf/templates/meeting/session_request_info.txt
new file mode 100644
index 0000000000..2e96efb31f
--- /dev/null
+++ b/ietf/templates/meeting/session_request_info.txt
@@ -0,0 +1,26 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load ams_filters %}
+---------------------------------------------------------
+Working Group Name: {{ group.name }}
+Area Name: {{ group.parent }}
+Session Requester: {{ login }}
+{% if session.joint_with_groups %}{{ session.joint_for_session_display }} joint with: {{ session.joint_with_groups }}{% endif %}
+
+Number of Sessions: {{ session.num_session }}
+Length of Session(s): {% for session_length in session_lengths %}{{ session_length.total_seconds|display_duration }}{% if not forloop.last %}, {% endif %}{% endfor %}
+Number of Attendees: {{ session.attendees }}
+Conflicts to Avoid: 
+{% for line in session.outbound_conflicts %} {{line}}
+{% endfor %}{% if session.session_time_relation_display %} {{ session.session_time_relation_display }}{% endif %}
+{% if session.adjacent_with_wg %} Adjacent with WG: {{ session.adjacent_with_wg }}{% endif %}       
+{% if session.timeranges_display %} Can't meet: {{ session.timeranges_display|join:", " }}{% endif %}
+
+Participants who must be present:
+{% for person in session.bethere %}  {{ person.ascii_name }}
+{% endfor %}
+Resources Requested:
+{% for resource in session.resources %}  {{ resource.desc }}
+{% endfor %}
+Special Requests:
+  {{ session.comments }}
+---------------------------------------------------------
diff --git a/ietf/templates/meeting/session_request_list.html b/ietf/templates/meeting/session_request_list.html
new file mode 100644
index 0000000000..789b7006e5
--- /dev/null
+++ b/ietf/templates/meeting/session_request_list.html
@@ -0,0 +1,65 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load ietf_filters %}
+{% load django_bootstrap5 %}
+{% block title %}Session Requests{% endblock %}
+{% block content %}
+    <h1>Session Requests IETF {{ meeting.number }}</h1>
+
+    <div class="d-flex mb-3">
+      <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" class="btn btn-primary me-3" target="_blank">Instructions</a>
+
+      <a href="{% url 'ietf.meeting.views.meeting_requests' %}" class="btn btn-primary me-3">View list of timeslot requests</a>
+      {% if user|has_role:"Secretariat" %}
+        {% if is_locked %}
+          <a href="{% url 'ietf.meeting.views_session_request.status' %}" class="btn btn-danger ms-auto">Unlock Tool</a>
+        {% else %}
+          <a href="{% url 'ietf.meeting.views_session_request.status' %}" class="btn btn-primary ms-auto">Lock Tool</a>
+        {% endif %}
+      {% endif %}
+    </div>
+    
+    <div class="card mb-3">
+      <div class="card-header">
+        Request New Session
+      </div>
+      <div class="card-body">
+        <p class="card-text">The list below includes those working groups that you currently chair which do not already have a session scheduled. You can click on an acronym to complete a request for a new session at the upcoming IETF meeting.  Click "Group will not meet" to send a notification that the group does not plan to meet.</p>
+        <ul>
+            {% for group in unscheduled_groups %}
+                <li>
+                    <a href="{% url 'ietf.meeting.views_session_request.new_request' acronym=group.acronym %}">{{ group.acronym }}</a>
+                    {% if group.not_meeting %}
+                        <span class="required"> (Currently, this group does not plan to hold a session at IETF {{ meeting.number }})</span>
+                    {% endif %}
+                </li>
+            {% empty %}
+                <li><i>NONE</i></li>
+            {% endfor %}
+        </ul>
+      </div>
+    </div> <!-- card -->
+
+
+    <div class="card">
+      <div class="card-header">
+        Edit / Cancel Previously Requested Sessions
+      </div>
+      <div class="card-body">
+        <p class="card-text">The list below includes those working groups for which you or your co-chair has requested sessions at the upcoming IETF meeting. You can click on an acronym to initiate changes to a session, or cancel a session.</p>
+        <ul>
+            {% for group in scheduled_groups %}
+                <li><a href="{% url 'ietf.meeting.views_session_request.view_request' acronym=group.acronym %}">{{ group.acronym }} - {{ group.status_message }}</a></li>
+            {% empty %}
+                <li><i>NONE</i></li>
+            {% endfor %}
+        </ul>
+      </div>
+    </div> <!-- card -->
+
+{% endblock %}
+
+{% block footer-extras %}
+    {% include "includes/sessions_footer.html" %}
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_locked.html b/ietf/templates/meeting/session_request_locked.html
new file mode 100644
index 0000000000..15c023ce33
--- /dev/null
+++ b/ietf/templates/meeting/session_request_locked.html
@@ -0,0 +1,21 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static ietf_filters django_bootstrap5 %}
+{% block title %}Session Request{% endblock %}
+    
+{% block content %}
+    <h1 class="">Session Request - IETF {{ meeting.number }}</h1>
+
+    <a href="{% url 'ietf.meeting.views.meeting_requests' %}" class="btn btn-primary">View list of timeslot requests</a>
+
+    <hr>
+
+    <div class="">
+        <p>{{ message }}</p>
+
+        <div>
+            <button class="btn btn-primary" type="button" onclick="history.back()">Back</button>
+        </div>
+    </div> 
+
+{% endblock %}
diff --git a/ietf/secr/templates/sreq/session_request_notification.txt b/ietf/templates/meeting/session_request_notification.txt
similarity index 56%
rename from ietf/secr/templates/sreq/session_request_notification.txt
rename to ietf/templates/meeting/session_request_notification.txt
index 75f2cbbae4..49dbbfc42c 100644
--- a/ietf/secr/templates/sreq/session_request_notification.txt
+++ b/ietf/templates/meeting/session_request_notification.txt
@@ -1,5 +1,6 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
 {% autoescape off %}{% load ams_filters %}
 
 {% filter wordwrap:78 %}{{ header }} meeting session request has just been submitted by {{ requester }}.{% endfilter %}
 
-{% include "includes/session_info.txt" %}{% endautoescape %}
+{% include "meeting/session_request_info.txt" %}{% endautoescape %}
diff --git a/ietf/templates/meeting/session_request_status.html b/ietf/templates/meeting/session_request_status.html
new file mode 100644
index 0000000000..65e98d6d23
--- /dev/null
+++ b/ietf/templates/meeting/session_request_status.html
@@ -0,0 +1,28 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load ietf_filters %}
+{% load django_bootstrap5 %}
+{% block title %}Session Request Status{% endblock %}
+{% block content %}
+    <h1>Session Request Status</h1>
+
+    <div class="card">
+      <div class="card-header">
+        Session Request Status
+      </div>
+      <div class="card-body">
+        <p class="card-text">Enter the message that you would like displayed to the WG Chair when this tool is locked.</p>
+        <form method="post">{% csrf_token %}
+            {% bootstrap_form form %}
+            {% if is_locked %}
+                <button class="btn btn-primary" type="submit" name="submit" value="Unlock">Unlock</button>
+            {% else %}
+                <button class="btn btn-primary" type="submit" name="submit" value="Lock">Lock</button>
+            {% endif %}
+            <button class="btn btn-primary ms-auto" type="submit" name="submit" value="Back">Back</button>
+        </form>
+      </div>
+    </div>
+
+{% endblock %}
diff --git a/ietf/templates/meeting/session_request_view.html b/ietf/templates/meeting/session_request_view.html
new file mode 100644
index 0000000000..3db16f56cb
--- /dev/null
+++ b/ietf/templates/meeting/session_request_view.html
@@ -0,0 +1,59 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static ietf_filters django_bootstrap5 %}
+{% block title %}Session Request{% endblock %}
+    
+{% block content %}
+    <h1 class="">Session Request - IETF {{ meeting.number }}</h1>
+
+    <div class="d-flex mb-3">
+      <a href="https://www.ietf.org/chairs/session-request-tool-instructions/" class="me-3 btn btn-primary" target="_blank">Instructions</a>
+    </div>
+
+    <hr>
+
+    <div class="custom-stripe">
+
+        {% include "meeting/session_request_view_table.html" %}
+
+        <hr>
+
+        <h2>Activities Log</h2>
+        <div class="">
+            <table class=" table table-sm full-width">
+                <thead>
+                    <tr>
+                        <th scope="col">Date</th>
+                        <th scope="col">Time</th>
+                        <th scope="col">Action</th>
+                        <th scope="col">Name</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    {% for entry in activities %}
+                        <tr class="{% cycle 'row1' 'row2' %}">
+                            <td>{{ entry.act_date }}</td>
+                            <td>{{ entry.act_time }}</td>
+                            <td>{{ entry.activity }}</td>
+                            <td>{{ entry.act_by }}</td>
+                        </tr>
+                    {% endfor %}
+                </tbody>
+            </table>
+        </div>
+
+
+      <button type="button" name="edit" class="btn btn-primary me-2" onclick="window.location='{% url 'ietf.meeting.views_session_request.edit_request' acronym=group.acronym num=meeting.number %}'"{% if not can_edit %} disabled{% endif %}>Edit</button>
+      {% if show_approve_button %}
+        <a href="{% url 'ietf.meeting.views_session_request.approve_request' acronym=group.acronym %}" class="btn btn-primary me-2">Approve Third Session</a>
+      {% endif %}
+      <button type="button" class="btn btn-primary me-2" onclick="if (window.confirm('Do you really want to cancel this session?')) { window.location='{% url 'ietf.meeting.views_session_request.cancel_request' acronym=group.acronym %}' };" {% if not can_cancel %} disabled{% endif %}>Cancel this Request</button>
+      <a href="{% url 'ietf.meeting.views_session_request.list_view' %}" class="btn btn-secondary float-end">Back</a>
+  
+    </div> <!-- view-container -->
+
+{% endblock %}
+
+{% block js %}
+    <script src="{% static 'ietf/js/custom_striped.js' %}"></script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_view_formset.html b/ietf/templates/meeting/session_request_view_formset.html
new file mode 100644
index 0000000000..72811b8c2c
--- /dev/null
+++ b/ietf/templates/meeting/session_request_view_formset.html
@@ -0,0 +1,49 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load ams_filters %}{# keep this in sync with sessions_request_view_session_set.html #}
+{% for sess_form in formset %}
+    {% if sess_form.cleaned_data and not sess_form.cleaned_data.DELETE %}
+        <div class="row mb-3">
+            <div class="col-md-2 fw-bold">
+                Session {{ forloop.counter }}
+            </div>
+            <div class="col">
+                <div class="row mb-2">
+                    <div class="col-sm-2 fw-bold">Length</div>
+                    <div class="col">{{ sess_form.cleaned_data.requested_duration.total_seconds|display_duration }}</div>
+                </div>
+                {% if sess_form.cleaned_data.name %}
+                    <div class="row mb-2">
+                        <div class="col-sm-2 fw-bold">Name</div>
+                        <div class="col">{{ sess_form.cleaned_data.name }}</div>
+                    </div>
+                {% endif %}
+                {% if sess_form.cleaned_data.purpose.slug != 'regular' %}
+                    <div class="row mb-2">
+                        <div class="col-sm-2 fw-bold">Purpose</div>
+                        <div class="col">
+                            {{ sess_form.cleaned_data.purpose }}
+                            {% if sess_form.cleaned_data.purpose.timeslot_types|length > 1 %}({{ sess_form.cleaned_data.type }}
+                      ){% endif %}
+                        </div>
+                    </div>
+                    <div class="row mb-2">
+                        <div class="col-sm-2 fw-bold">Onsite tool?</div>
+                        <div class="col">{{ sess_form.cleaned_data.has_onsite_tool|yesno }}</div>
+                    </div>
+                {% endif %}
+            </div>
+        </div>
+
+        {% if group.features.acts_like_wg and forloop.counter == 2 and not is_virtual %}
+        <div class="row mb-3">
+            <div class="col-md-2 fw-bold">
+                Time between sessions
+            </div>
+            <div class="col">
+                {% if session.session_time_relation_display %}{{ session.session_time_relation_display }}{% else %}No
+            preference{% endif %}
+            </div>
+        </div>
+        {% endif %}
+    {% endif %}
+{% endfor %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_view_session_set.html b/ietf/templates/meeting/session_request_view_session_set.html
new file mode 100644
index 0000000000..0b8412b04f
--- /dev/null
+++ b/ietf/templates/meeting/session_request_view_session_set.html
@@ -0,0 +1,47 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load ams_filters %}{# keep this in sync with sessions_request_view_formset.html #}
+{% for sess in session_set %}
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Session {{ forloop.counter }}
+    </div>
+    <div class="col">
+        <div class="row mb-2">
+            <div class="col-sm-2 fw-bold">Length</div>
+            <div class="col">{{ sess.requested_duration.total_seconds|display_duration }}</div>
+        </div>
+        {% if sess.name %}
+            <div class="row mb-2">
+                <div class="col-sm-2 fw-bold">Name</div>
+                <div class="col">{{ sess.name }}</div>
+            </div>
+        {% endif %}
+        {% if sess.purpose.slug != 'regular' %}
+            <div class="row mb-2">
+                <div class="col-sm-2 fw-bold">Purpose</div>
+                <div class="col">
+                    {{ sess.purpose }}
+                    {% if sess.purpose.timeslot_types|length > 1 %}({{ sess.type }}){% endif %}
+                </div>
+            </div>
+            <div class="row mb-2">
+                <div class="col-sm-2 fw-bold">Onsite tool?</div>
+                <div class="col">{{ sess.has_onsite_tool|yesno }}</div>
+            </div>
+        {% endif %}
+    </div>
+</div>
+
+{% if group.features.acts_like_wg and forloop.counter == 2 and not is_virtual %}
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Time between sessions
+    </div>
+    <div class="col">
+        {% if session.session_time_relation_display %}{{ session.session_time_relation_display }}{% else %}No
+    preference{% endif %}
+    </div>
+</div>
+{% endif %}
+
+{% endfor %}
\ No newline at end of file
diff --git a/ietf/templates/meeting/session_request_view_table.html b/ietf/templates/meeting/session_request_view_table.html
new file mode 100644
index 0000000000..a5cb85c252
--- /dev/null
+++ b/ietf/templates/meeting/session_request_view_table.html
@@ -0,0 +1,146 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load ams_filters %}
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Working Group Name
+    </div>
+    <div class="col">
+        {{ group.name }} ({{ group.acronym }})
+    </div>
+</div>
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Area Name
+    </div>
+    <div class="col">
+        {{ group.parent }}
+    </div>
+</div>
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Number of Sessions Requested
+    </div>
+    <div class="col">
+        {% if session.third_session %}3{% else %}{{ session.num_session }}{% endif %}
+    </div>
+</div>
+
+{% if form %}
+    {% include 'meeting/session_request_view_formset.html' with formset=form.session_forms group=group session=session only %}
+{% else %}
+    {% include 'meeting/session_request_view_session_set.html' with session_set=sessions group=group session=session only %}
+{% endif %}
+
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Number of Attendees
+    </div>
+    <div class="col">
+        {{ session.attendees }}
+    </div>
+</div>
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Conflicts to Avoid
+    </div>
+    <div class="col">
+        {% if session_conflicts.outbound %}
+            {% for conflict in session_conflicts.outbound %}
+                <div class="row mb-1">
+                    <div class="col-sm-2 fw-bold">
+                        {{ conflict.name|title }}
+                    </div>
+                    <div class="col">
+                        {{ conflict.groups }}
+                    </div>
+                </div>
+            {% endfor %}
+        {% else %}<i>None</i>{% endif %}
+    </div>
+</div>
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Other WGs that included {{ group }} in their conflict list
+    </div>
+    <div class="col">
+        {% if session_conflicts.inbound %}{{ session_conflicts.inbound }}{% else %}<i>None so far</i>{% endif %}
+    </div>
+</div>
+
+{% if not is_virtual %}
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Resources requested
+    </div>
+    <div class="col">
+        {% if session.resources %}<ul>{% for resource in session.resources %}<li>{{ resource.desc }}</li>{% endfor %}</ul>{% else %}<i>None so far</i>{% endif %}
+    </div>
+</div>
+{% endif %}
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Participants who must be present
+    </div>
+    <div class="col">
+        {% if session.bethere %}<ul>{% for person in session.bethere %}<li>{{ person }}</li>{% endfor %}</ul>{% else %}<i>None</i>{% endif %}
+    </div>
+</div>
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Can not meet on
+    </div>
+    <div class="col">
+        {% if session.timeranges_display %}{{ session.timeranges_display|join:', ' }}{% else %}No constraints{% endif %}
+    </div>
+</div>
+
+{% if not is_virtual %}
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Adjacent with WG
+    </div>
+    <div class="col">
+        {{ session.adjacent_with_wg|default:'No preference' }}
+    </div>
+</div>
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Joint session
+    </div>
+    <div class="col">
+        {% if session.joint_with_groups %}
+            {{ session.joint_for_session_display }} with: {{ session.joint_with_groups }}
+        {% else %}
+            Not a joint session
+        {% endif %}
+    </div>
+</div>
+{% endif %}
+
+<div class="row mb-3">
+    <div class="col-md-2 fw-bold">
+        Special Requests
+    </div>
+    <div class="col">
+        {{ session.comments }}    
+    </div>
+</div>
+
+{% if form and form.notifications_optional %}
+    <div class="row mb-3">
+        <div class="col-md-2 fw-bold">
+            {{ form.send_notifications.label}}
+        </div>
+        <div class="col">
+            {% if form.cleaned_data.send_notifications %}Yes{% else %}No{% endif %}    
+        </div>
+    </div>
+{% endif %}
diff --git a/package.json b/package.json
index e3e89288e7..e2e6fd7dab 100644
--- a/package.json
+++ b/package.json
@@ -118,6 +118,7 @@
         "ietf/static/js/complete-review.js",
         "ietf/static/js/create_timeslot.js",
         "ietf/static/js/create_timeslot.js",
+        "ietf/static/js/custom_striped.js",
         "ietf/static/js/d3.js",
         "ietf/static/js/datepicker.js",
         "ietf/static/js/doc-search.js",
@@ -148,6 +149,8 @@
         "ietf/static/js/password_strength.js",
         "ietf/static/js/select2.js",
         "ietf/static/js/session_details_form.js",
+        "ietf/static/js/session_form.js",
+        "ietf/static/js/session_request.js",
         "ietf/static/js/sortable.js",
         "ietf/static/js/stats.js",
         "ietf/static/js/status-change-edit-relations.js",
@@ -208,8 +211,6 @@
         "ietf/secr/static/images/tooltag-arrowright.webp",
         "ietf/secr/static/images/tooltag-arrowright_over.webp",
         "ietf/secr/static/js/dynamic_inlines.js",
-        "ietf/secr/static/js/session_form.js",
-        "ietf/secr/static/js/sessions.js",
         "ietf/secr/static/js/utils.js"
       ]
     }

From 4961f376756de40ca1fe1d2db6a4ec7ff32b92a9 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 14 Oct 2025 14:51:43 -0500
Subject: [PATCH 459/707] feat: preview ballot email before save (#9646)
 (#9721)

* feat: skeleton for modal email preview

* fix: rudimentary transfer of the comment and discuss text

* fix: put. the buttons. back.

* fix: transfer of the data on the current form to the modal

* fix: pull cc_select and additional_cc foward in the workflow UI

* fix: refactor where ballot email is sent

* fix: refactor build_position_email

* chore: remove abandoned imports

* chore: remove abandoned template
---
 ietf/doc/tests_ballot.py                      | 103 +++-----
 ietf/doc/tests_draft.py                       |  77 +++++-
 ietf/doc/tests_irsg_ballot.py                 |  63 +++--
 ietf/doc/tests_rsab_ballot.py                 |  51 +---
 ietf/doc/urls.py                              |   3 +-
 ietf/doc/views_ballot.py                      | 247 ++++++++++--------
 ietf/mailtrigger/forms.py                     |   1 +
 ietf/templates/doc/ballot/edit_position.html  |  89 ++++++-
 .../doc/ballot/send_ballot_comment.html       |  44 ----
 9 files changed, 393 insertions(+), 285 deletions(-)
 delete mode 100644 ietf/templates/doc/ballot/send_ballot_comment.html

diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index 810ee598f6..8420e411e2 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -25,7 +25,6 @@
 from ietf.group.models import Group, Role
 from ietf.group.factories import GroupFactory, RoleFactory, ReviewTeamFactory
 from ietf.ipr.factories import HolderIprDisclosureFactory
-from ietf.name.models import BallotPositionName
 from ietf.iesg.models import TelechatDate
 from ietf.person.models import Person
 from ietf.person.factories import PersonFactory, PersonalApiKeyFactory
@@ -37,9 +36,18 @@
 
 
 class EditPositionTests(TestCase):
+
+    # N.B. This test needs to be rewritten to exercise all types of ballots (iesg, irsg, rsab)
+    # and test against the output of the mailtriggers instead of looking for hardcoded values
+    # in the To and CC results. See #7864
     def test_edit_position(self):
         ad = Person.objects.get(user__username="ad")
-        draft = IndividualDraftFactory(ad=ad,stream_id='ietf')
+        draft = WgDraftFactory(
+            ad=ad,
+            stream_id="ietf",
+            notify="somebody@example.com",
+            group__acronym="mars",
+        )
         ballot = create_ballot_if_not_open(None, draft, ad, 'approve')
         url = urlreverse('ietf.doc.views_ballot.edit_position', kwargs=dict(name=draft.name,
                                                           ballot_id=ballot.pk))
@@ -55,11 +63,20 @@ def test_edit_position(self):
         self.assertEqual(len(q('form textarea[name=comment]')), 1)
 
         # vote
+        empty_outbox()
         events_before = draft.docevent_set.count()
-        
-        r = self.client.post(url, dict(position="discuss",
-                                       discuss=" This is a discussion test. \n ",
-                                       comment=" This is a test. \n "))
+
+        r = self.client.post(
+            url,
+            dict(
+                position="discuss",
+                discuss=" This is a discussion test. \n ",
+                comment=" This is a test. \n ",
+                additional_cc="test298347@example.com",
+                cc_choices=["doc_notify", "doc_group_chairs"],
+                send_mail=1,
+            ),
+        )
         self.assertEqual(r.status_code, 302)
 
         pos = draft.latest_event(BallotPositionDocEvent, balloter=ad)
@@ -70,6 +87,22 @@ def test_edit_position(self):
         self.assertTrue(pos.comment_time != None)
         self.assertTrue("New position" in pos.desc)
         self.assertEqual(draft.docevent_set.count(), events_before + 3)
+        self.assertEqual(len(outbox),1)
+        m = outbox[0]
+        self.assertTrue("COMMENT" in m['Subject'])
+        self.assertTrue("DISCUSS" in m['Subject'])
+        self.assertTrue(draft.name in m['Subject'])
+        self.assertTrue("This is a discussion test." in str(m))
+        self.assertTrue("This is a test" in str(m))
+        self.assertTrue("iesg@" in m['To'])
+        # cc_choice doc_group_chairs
+        self.assertTrue("mars-chairs@" in m['Cc'])
+        # cc_choice doc_notify
+        self.assertTrue("somebody@example.com" in m['Cc'])
+        # cc_choice doc_group_email_list was not selected
+        self.assertFalse(draft.group.list_email in m['Cc'])
+        # extra-cc    
+        self.assertTrue("test298347@example.com" in m['Cc'])        
 
         # recast vote
         events_before = draft.docevent_set.count()
@@ -230,64 +263,6 @@ def test_cannot_edit_position_as_pre_ad(self):
         r = self.client.post(url, dict(position="discuss", discuss="Test discuss text"))
         self.assertEqual(r.status_code, 403)
         
-    # N.B. This test needs to be rewritten to exercise all types of ballots (iesg, irsg, rsab)
-    # and test against the output of the mailtriggers instead of looking for hardcoded values
-    # in the To and CC results. See #7864
-    def test_send_ballot_comment(self):
-        ad = Person.objects.get(user__username="ad")
-        draft = WgDraftFactory(ad=ad,group__acronym='mars')
-        draft.notify = "somebody@example.com"
-        draft.save_with_history([DocEvent.objects.create(doc=draft, rev=draft.rev, type="changed_document", by=Person.objects.get(user__username="secretary"), desc="Test")])
-
-        ballot = create_ballot_if_not_open(None, draft, ad, 'approve')
-
-        BallotPositionDocEvent.objects.create(
-            doc=draft, rev=draft.rev, type="changed_ballot_position",
-            by=ad, balloter=ad, ballot=ballot, pos=BallotPositionName.objects.get(slug="discuss"),
-            discuss="This draft seems to be lacking a clearer title?",
-            discuss_time=timezone.now(),
-            comment="Test!",
-            comment_time=timezone.now())
-        
-        url = urlreverse('ietf.doc.views_ballot.send_ballot_comment', kwargs=dict(name=draft.name,
-                                                                ballot_id=ballot.pk))
-        login_testing_unauthorized(self, "ad", url)
-
-        # normal get
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-        q = PyQuery(r.content)
-        self.assertTrue(len(q('form input[name="extra_cc"]')) > 0)
-
-        # send
-        mailbox_before = len(outbox)
-
-        r = self.client.post(url, dict(extra_cc="test298347@example.com", cc_choices=['doc_notify','doc_group_chairs']))
-        self.assertEqual(r.status_code, 302)
-
-        self.assertEqual(len(outbox), mailbox_before + 1)
-        m = outbox[-1]
-        self.assertTrue("COMMENT" in m['Subject'])
-        self.assertTrue("DISCUSS" in m['Subject'])
-        self.assertTrue(draft.name in m['Subject'])
-        self.assertTrue("clearer title" in str(m))
-        self.assertTrue("Test!" in str(m))
-        self.assertTrue("iesg@" in m['To'])
-        # cc_choice doc_group_chairs
-        self.assertTrue("mars-chairs@" in m['Cc'])
-        # cc_choice doc_notify
-        self.assertTrue("somebody@example.com" in m['Cc'])
-        # cc_choice doc_group_email_list was not selected
-        self.assertFalse(draft.group.list_email in m['Cc'])
-        # extra-cc    
-        self.assertTrue("test298347@example.com" in m['Cc'])
-
-        r = self.client.post(url, dict(cc=""))
-        self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), mailbox_before + 2)
-        m = outbox[-1]
-        self.assertTrue("iesg@" in m['To'])
-        self.assertFalse(m['Cc'] and draft.group.list_email in m['Cc'])
 
 
 class BallotWriteupsTests(TestCase):
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index ab33acebe6..4d262c5a2f 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -2,6 +2,7 @@
 # -*- coding: utf-8 -*-
 
 
+import json
 import os
 import datetime
 import io
@@ -11,7 +12,7 @@
 from pathlib import Path
 from pyquery import PyQuery
 
-from django.db.models import Q
+from django.db.models import Max, Q
 from django.urls import reverse as urlreverse
 from django.conf import settings
 from django.utils import timezone
@@ -2391,3 +2392,77 @@ def test_editorial_metadata(self):
         top_level_metadata_headings = q("tbody>tr>th:first-child").text()
         self.assertNotIn("IESG", top_level_metadata_headings)
         self.assertNotIn("IANA", top_level_metadata_headings)
+
+class BallotEmailAjaxTests(TestCase):
+    def test_ajax_build_position_email(self):
+        def _post_json(self, url, json_to_post):
+            r = self.client.post(
+                url, json.dumps(json_to_post), content_type="application/json"
+            )
+            self.assertEqual(r.status_code, 200)
+            return json.loads(r.content)
+
+        doc = WgDraftFactory()
+        ad = RoleFactory(
+            name_id="ad", group=doc.group, person__name="Some Areadirector"
+        ).person
+        url = urlreverse("ietf.doc.views_ballot.ajax_build_position_email")
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 405)
+        response = _post_json(self, url, {})
+        self.assertFalse(response["success"])
+        self.assertEqual(response["errors"], ["post_data not provided"])
+        response = _post_json(self, url, {"dictis": "not empty"})
+        self.assertFalse(response["success"])
+        self.assertEqual(response["errors"], ["post_data not provided"])
+        response = _post_json(self, url, {"post_data": {}})
+        self.assertFalse(response["success"])
+        self.assertEqual(len(response["errors"]), 7)
+        response = _post_json(
+            self,
+            url,
+            {
+                "post_data": {
+                    "discuss": "aaaaaa",
+                    "comment": "bbbbbb",
+                    "position": "discuss",
+                    "balloter": Person.objects.aggregate(maxpk=Max("pk") + 1)["maxpk"],
+                    "docname": "this-draft-does-not-exist",
+                    "cc_choices": ["doc_group_mail_list"],
+                    "additional_cc": "foo@example.com",
+                }
+            },
+        )
+        self.assertFalse(response["success"])
+        self.assertEqual(
+            response["errors"],
+            ["No person found matching balloter", "No document found matching docname"],
+        )
+        response = _post_json(
+            self,
+            url,
+            {
+                "post_data": {
+                    "discuss": "aaaaaa",
+                    "comment": "bbbbbb",
+                    "position": "discuss",
+                    "balloter": ad.pk,
+                    "docname": doc.name,
+                    "cc_choices": ["doc_group_mail_list"],
+                    "additional_cc": "foo@example.com",
+                }
+            },
+        )
+        self.assertTrue(response["success"])
+        for snippet in [
+            "aaaaaa",
+            "bbbbbb",
+            "DISCUSS",
+            ad.plain_name(),
+            doc.name,
+            doc.group.list_email,
+            "foo@example.com",
+        ]:
+            self.assertIn(snippet, response["text"])
+
diff --git a/ietf/doc/tests_irsg_ballot.py b/ietf/doc/tests_irsg_ballot.py
index aa62d8aaf9..d96cf9dbef 100644
--- a/ietf/doc/tests_irsg_ballot.py
+++ b/ietf/doc/tests_irsg_ballot.py
@@ -355,28 +355,35 @@ def test_issue_ballot(self):
     def test_take_and_email_position(self):
         draft = RgDraftFactory()
         ballot = IRSGBallotDocEventFactory(doc=draft)
-        url = urlreverse('ietf.doc.views_ballot.edit_position', kwargs=dict(name=draft.name, ballot_id=ballot.pk)) + self.balloter
+        url = (
+            urlreverse(
+                "ietf.doc.views_ballot.edit_position",
+                kwargs=dict(name=draft.name, ballot_id=ballot.pk),
+            )
+            + self.balloter
+        )
         empty_outbox()
 
         login_testing_unauthorized(self, self.username, url)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
-        r = self.client.post(url, dict(position='yes', comment='oib239sb', send_mail='Save and send email'))
+        empty_outbox()
+        r = self.client.post(
+            url,
+            dict(
+                position="yes",
+                comment="oib239sb",
+                send_mail="Save and send email",
+                cc_choices=["doc_authors", "doc_group_chairs", "doc_group_mail_list"],
+            ),
+        )
         self.assertEqual(r.status_code, 302)
         e = draft.latest_event(BallotPositionDocEvent)
-        self.assertEqual(e.pos.slug,'yes')
-        self.assertEqual(e.comment, 'oib239sb')
-
-        url = urlreverse('ietf.doc.views_ballot.send_ballot_comment', kwargs=dict(name=draft.name, ballot_id=ballot.pk)) + self.balloter
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-
-        r = self.client.post(url, dict(cc_choices=['doc_authors','doc_group_chairs','doc_group_mail_list'], body="Stuff"))
-        self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox),1)
-        self.assertNotIn('discuss-criteria', get_payload_text(outbox[0]))
+        self.assertEqual(e.pos.slug, "yes")
+        self.assertEqual(e.comment, "oib239sb")
+        self.assertEqual(len(outbox), 1)
+        self.assertNotIn("discuss-criteria", get_payload_text(outbox[0]))
 
     def test_close_ballot(self):
         draft = RgDraftFactory()
@@ -482,27 +489,31 @@ def test_cant_take_position_on_iesg_ballot(self):
     def test_take_and_email_position(self):
         draft = RgDraftFactory()
         ballot = IRSGBallotDocEventFactory(doc=draft)
-        url = urlreverse('ietf.doc.views_ballot.edit_position', kwargs=dict(name=draft.name, ballot_id=ballot.pk))
+        url = urlreverse(
+            "ietf.doc.views_ballot.edit_position",
+            kwargs=dict(name=draft.name, ballot_id=ballot.pk),
+        )
         empty_outbox()
 
         login_testing_unauthorized(self, self.username, url)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
-        r = self.client.post(url, dict(position='yes', comment='oib239sb', send_mail='Save and send email'))
+        r = self.client.post(
+            url,
+            dict(
+                position="yes",
+                comment="oib239sb",
+                send_mail="Save and send email",
+                cc_choices=["doc_authors", "doc_group_chairs", "doc_group_mail_list"],
+            ),
+        )
         self.assertEqual(r.status_code, 302)
         e = draft.latest_event(BallotPositionDocEvent)
-        self.assertEqual(e.pos.slug,'yes')
-        self.assertEqual(e.comment, 'oib239sb')
-
-        url = urlreverse('ietf.doc.views_ballot.send_ballot_comment', kwargs=dict(name=draft.name, ballot_id=ballot.pk))
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-
-        r = self.client.post(url, dict(cc_choices=['doc_authors','doc_group_chairs','doc_group_mail_list'], body="Stuff"))
+        self.assertEqual(e.pos.slug, "yes")
+        self.assertEqual(e.comment, "oib239sb")
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox),1)
+        self.assertEqual(len(outbox), 1)
 
 class IESGMemberTests(TestCase):
 
diff --git a/ietf/doc/tests_rsab_ballot.py b/ietf/doc/tests_rsab_ballot.py
index 028f548232..9086106ba9 100644
--- a/ietf/doc/tests_rsab_ballot.py
+++ b/ietf/doc/tests_rsab_ballot.py
@@ -333,34 +333,19 @@ def test_take_and_email_position(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
-        r = self.client.post(
-            url,
-            dict(position="yes", comment="oib239sb", send_mail="Save and send email"),
-        )
-        self.assertEqual(r.status_code, 302)
-        e = draft.latest_event(BallotPositionDocEvent)
-        self.assertEqual(e.pos.slug, "yes")
-        self.assertEqual(e.comment, "oib239sb")
-
-        url = (
-            urlreverse(
-                "ietf.doc.views_ballot.send_ballot_comment",
-                kwargs=dict(name=draft.name, ballot_id=ballot.pk),
-            )
-            + self.balloter
-        )
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-
         r = self.client.post(
             url,
             dict(
+                position="yes",
+                comment="oib239sb",
+                send_mail="Save and send email",
                 cc_choices=["doc_authors", "doc_group_chairs", "doc_group_mail_list"],
-                body="Stuff",
             ),
         )
         self.assertEqual(r.status_code, 302)
+        e = draft.latest_event(BallotPositionDocEvent)
+        self.assertEqual(e.pos.slug, "yes")
+        self.assertEqual(e.comment, "oib239sb")
         self.assertEqual(len(outbox), 1)
         self.assertNotIn("discuss-criteria", get_payload_text(outbox[0]))
 
@@ -532,31 +517,19 @@ def test_take_and_email_position(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
-        r = self.client.post(
-            url,
-            dict(position="yes", comment="oib239sb", send_mail="Save and send email"),
-        )
-        self.assertEqual(r.status_code, 302)
-        e = draft.latest_event(BallotPositionDocEvent)
-        self.assertEqual(e.pos.slug, "yes")
-        self.assertEqual(e.comment, "oib239sb")
-
-        url = urlreverse(
-            "ietf.doc.views_ballot.send_ballot_comment",
-            kwargs=dict(name=draft.name, ballot_id=ballot.pk),
-        )
-
-        r = self.client.get(url)
-        self.assertEqual(r.status_code, 200)
-
         r = self.client.post(
             url,
             dict(
+                position="yes",
+                comment="oib239sb",
+                send_mail="Save and send email",
                 cc_choices=["doc_authors", "doc_group_chairs", "doc_group_mail_list"],
-                body="Stuff",
             ),
         )
         self.assertEqual(r.status_code, 302)
+        e = draft.latest_event(BallotPositionDocEvent)
+        self.assertEqual(e.pos.slug, "yes")
+        self.assertEqual(e.comment, "oib239sb")
         self.assertEqual(len(outbox), 1)
 
 
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 7b444782d7..8e9c0569e2 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -93,6 +93,8 @@
     url(r'^ballots/irsg/$', views_ballot.irsg_ballot_status),
     url(r'^ballots/rsab/$', views_ballot.rsab_ballot_status),
 
+    url(r'^build-position-email/$', views_ballot.ajax_build_position_email),
+
     url(r'^(?P<type_id>(bcp|std|fyi))/?$', views_search.index_subseries),
 
     url(r'^%(name)s(?:/%(rev)s)?/$' % settings.URL_REGEXPS, views_doc.document_main),
@@ -111,7 +113,6 @@
     url(r'^%(name)s/ballot/rsab/$' % settings.URL_REGEXPS, views_doc.document_rsab_ballot),
     url(r'^%(name)s/ballot/(?P<ballot_id>[0-9]+)/$' % settings.URL_REGEXPS, views_doc.document_ballot),
     url(r'^%(name)s/ballot/(?P<ballot_id>[0-9]+)/position/$' % settings.URL_REGEXPS, views_ballot.edit_position),
-    url(r'^%(name)s/ballot/(?P<ballot_id>[0-9]+)/emailposition/$' % settings.URL_REGEXPS, views_ballot.send_ballot_comment),
     url(r'^%(name)s/(?:%(rev)s/)?doc.json$' % settings.URL_REGEXPS, views_doc.document_json),
     url(r'^%(name)s/ballotpopup/(?P<ballot_id>[0-9]+)/$' % settings.URL_REGEXPS, views_doc.ballot_popup),
     url(r'^(?P<name>[A-Za-z0-9._+-]+)/reviewrequest/', include("ietf.doc.urls_review")),
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 0ba340890d..03cf01a4a1 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -4,18 +4,18 @@
 # Directors and Secretariat
 
 
-import datetime, json
+import datetime
+import json
 
 from django import forms
 from django.conf import settings
-from django.http import HttpResponse, HttpResponseRedirect, Http404, HttpResponseBadRequest
+from django.http import HttpResponse, HttpResponseNotAllowed, HttpResponseRedirect, Http404, HttpResponseBadRequest
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.defaultfilters import striptags
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
 from django.views.decorators.csrf import csrf_exempt
 from django.utils.html import escape
-from urllib.parse import urlencode as urllib_urlencode
 
 import debug                            # pyflakes:ignore
 
@@ -34,14 +34,15 @@
 from ietf.doc.templatetags.ietf_filters import can_ballot
 from ietf.iesg.models import TelechatDate
 from ietf.ietfauth.utils import has_role, role_required, is_authorized_in_doc_stream
+from ietf.mailtrigger.models import Recipient
 from ietf.mailtrigger.utils import gather_address_lists
 from ietf.mailtrigger.forms import CcSelectForm
 from ietf.message.utils import infer_message
 from ietf.name.models import BallotPositionName, DocTypeName
 from ietf.person.models import Person
-from ietf.utils.fields import ModelMultipleChoiceField
+from ietf.utils.fields import ModelMultipleChoiceField, MultiEmailField
 from ietf.utils.http import validate_return_to_path
-from ietf.utils.mail import send_mail_text, send_mail_preformatted
+from ietf.utils.mail import decode_header_value, send_mail_text, send_mail_preformatted
 from ietf.utils.decorators import require_api_key
 from ietf.utils.response import permission_denied
 from ietf.utils.timezone import date_today, datetime_from_date, DEADLINE_TZINFO
@@ -179,6 +180,9 @@ def save_position(form, doc, ballot, balloter, login=None, send_email=False):
 
     return pos
 
+class AdditionalCCForm(forms.Form):
+    additional_cc = MultiEmailField(required=False)
+
 @role_required("Area Director", "Secretariat", "IRSG Member", "RSAB Member")
 def edit_position(request, name, ballot_id):
     """Vote and edit discuss and comment on document"""
@@ -199,50 +203,67 @@ def edit_position(request, name, ballot_id):
             raise Http404
         balloter = get_object_or_404(Person, pk=balloter_id)
 
+    if doc.stream_id == 'irtf':
+        mailtrigger_slug='irsg_ballot_saved'
+    elif doc.stream_id == 'editorial':
+        mailtrigger_slug='rsab_ballot_saved'
+    else:
+        mailtrigger_slug='iesg_ballot_saved'
+
     if request.method == 'POST':
         old_pos = None
         if not has_role(request.user, "Secretariat") and not can_ballot(request.user, doc):
             # prevent pre-ADs from taking a position
             permission_denied(request, "Must be an active member (not a pre-AD for example) of the balloting body to take a position")
         
+        if request.POST.get("Defer") and doc.stream.slug != "irtf":
+            return redirect('ietf.doc.views_ballot.defer_ballot', name=doc)
+        elif request.POST.get("Undefer") and doc.stream.slug != "irtf":
+            return redirect('ietf.doc.views_ballot.undefer_ballot', name=doc)
+        
         form = EditPositionForm(request.POST, ballot_type=ballot.ballot_type)
-        if form.is_valid():
+        cc_select_form = CcSelectForm(data=request.POST,mailtrigger_slug=mailtrigger_slug,mailtrigger_context={'doc':doc})
+        additional_cc_form = AdditionalCCForm(request.POST)
+        if form.is_valid() and cc_select_form.is_valid() and additional_cc_form.is_valid():
             send_mail = True if request.POST.get("send_mail") else False
-            save_position(form, doc, ballot, balloter, login, send_mail)
-
+            pos = save_position(form, doc, ballot, balloter, login, send_mail)
             if send_mail:
-                query = {}
-                if request.GET.get('balloter'):
-                    query['balloter'] = request.GET.get('balloter')
-                if request.GET.get('ballot_edit_return_point'):
-                    query['ballot_edit_return_point'] = request.GET.get('ballot_edit_return_point')
-                qstr = ""
-                if len(query) > 0:
-                    qstr = "?" + urllib_urlencode(query, safe='/')
-                return HttpResponseRedirect(urlreverse('ietf.doc.views_ballot.send_ballot_comment', kwargs=dict(name=doc.name, ballot_id=ballot_id)) + qstr)
-            elif request.POST.get("Defer") and doc.stream.slug != "irtf":
-                return redirect('ietf.doc.views_ballot.defer_ballot', name=doc)
-            elif request.POST.get("Undefer") and doc.stream.slug != "irtf":
-                return redirect('ietf.doc.views_ballot.undefer_ballot', name=doc)
-            else:
-                return HttpResponseRedirect(return_to_url)
+                addrs, frm, subject, body = build_position_email(balloter, doc, pos)
+                if doc.stream_id == 'irtf':
+                    mailtrigger_slug='irsg_ballot_saved'
+                elif doc.stream_id == 'editorial':
+                    mailtrigger_slug='rsab_ballot_saved'
+                else:
+                    mailtrigger_slug='iesg_ballot_saved'
+                cc = []
+                cc.extend(cc_select_form.get_selected_addresses())
+                extra_cc = additional_cc_form.cleaned_data["additional_cc"]
+                if extra_cc:
+                    cc.extend(extra_cc)
+                cc_set = set(cc)
+                cc_set.discard("")
+                cc = sorted(list(cc_set))
+                send_mail_text(request, addrs.to, frm, subject, body, cc=", ".join(cc))
+            return redirect(return_to_url)
     else:
         initial = {}
         old_pos = doc.latest_event(BallotPositionDocEvent, type="changed_ballot_position", balloter=balloter, ballot=ballot)
         if old_pos:
             initial['position'] = old_pos.pos.slug
             initial['discuss'] = old_pos.discuss
-            initial['comment'] = old_pos.comment
-            
+            initial['comment'] = old_pos.comment      
         form = EditPositionForm(initial=initial, ballot_type=ballot.ballot_type)
+        cc_select_form = CcSelectForm(mailtrigger_slug=mailtrigger_slug,mailtrigger_context={'doc':doc})
+        additional_cc_form = AdditionalCCForm()
 
     blocking_positions = dict((p.pk, p.name) for p in form.fields["position"].queryset.all() if p.blocking)
-
     ballot_deferred = doc.active_defer_event()
 
     return render(request, 'doc/ballot/edit_position.html',
                               dict(doc=doc,
                                    form=form,
+                                   cc_select_form=cc_select_form,
+                                   additional_cc_form=additional_cc_form,
                                    balloter=balloter,
                                    return_to_url=return_to_url,
                                    old_pos=old_pos,
@@ -301,21 +322,98 @@ def err(code, text):
     )
 
 
-def build_position_email(balloter, doc, pos):
+@role_required("Area Director", "Secretariat")
+@csrf_exempt
+def ajax_build_position_email(request):
+    if request.method != "POST":
+        return HttpResponseNotAllowed(["POST"])
+    errors = list()
+    try:
+        json_body = json.loads(request.body)
+    except json.decoder.JSONDecodeError:
+        errors.append("Post body is not valid json")
+    if len(errors) == 0:
+        post_data = json_body.get("post_data")
+        if post_data is None:
+            errors.append("post_data not provided")
+        else:
+            for key in [
+                "discuss",
+                "comment",
+                "position",
+                "balloter",
+                "docname",
+                "cc_choices",
+                "additional_cc",
+            ]:
+                if key not in post_data:
+                    errors.append(f"{key} not found in post_data")
+    if len(errors) == 0:
+        person = Person.objects.filter(pk=post_data.get("balloter")).first()
+        if person is None:
+            errors.append("No person found matching balloter")
+        doc = Document.objects.filter(name=post_data.get("docname")).first()
+        if doc is None:
+            errors.append("No document found matching docname")
+    if len(errors) > 0:
+        response = {
+            "success": False,
+            "errors": errors,
+        }
+    else:
+        wanted = dict()  # consider named tuple instead
+        wanted["discuss"] = post_data.get("discuss")
+        wanted["comment"] = post_data.get("comment")
+        wanted["position_name"] = post_data.get("position")
+        wanted["balloter"] = person
+        wanted["doc"] = doc
+        addrs, frm, subject, body = build_position_email_from_dict(wanted)
+
+        recipient_slugs = post_data.get("cc_choices")
+        # Consider refactoring gather_address_lists so this isn't duplicated from there
+        cc_addrs = set()
+        for r in Recipient.objects.filter(slug__in=recipient_slugs):
+            cc_addrs.update(r.gather(doc=doc))
+        additional_cc = post_data.get("additional_cc")
+        for addr in additional_cc.split(","):
+            cc_addrs.add(addr.strip())
+        cc_addrs.discard("")
+        cc_addrs = sorted(list(cc_addrs))
+
+        response_text = "\n".join(
+            [
+                f"From: {decode_header_value(frm)}",
+                f"To: {', '.join([decode_header_value(addr) for addr in addrs.to])}",
+                f"Cc: {', '.join([decode_header_value(addr) for addr in cc_addrs])}",
+                f"Subject: {subject}",
+                "",
+                body,
+            ]
+        )
+
+        response = {
+            "success": True,
+            "text": response_text,
+        }
+    return HttpResponse(json.dumps(response), content_type="application/json")
+
+def build_position_email_from_dict(pos_dict):
+    doc = pos_dict["doc"]
     subj = []
     d = ""
     blocking_name = "DISCUSS"
-    if pos.pos.blocking and pos.discuss:
-        d = pos.discuss
-        blocking_name = pos.pos.name.upper()
+    pos_name = BallotPositionName.objects.filter(slug=pos_dict["position_name"]).first()
+    if pos_name.blocking and pos_dict.get("discuss"):
+        d = pos_dict.get("discuss")
+        blocking_name = pos_name.name.upper()
         subj.append(blocking_name)
     c = ""
-    if pos.comment:
-        c = pos.comment
+    if pos_dict.get("comment"):
+        c = pos_dict.get("comment")
         subj.append("COMMENT")
-
+    balloter = pos_dict.get("balloter")
     balloter_name_genitive = balloter.plain_name() + "'" if balloter.plain_name().endswith('s') else balloter.plain_name() + "'s"
-    subject = "%s %s on %s" % (balloter_name_genitive, pos.pos.name if pos.pos else "No Position", doc.name + "-" + doc.rev)
+    subject = "%s %s on %s" % (balloter_name_genitive, pos_name.name if pos_name else "No Position", doc.name + "-" + doc.rev)
     if subj:
         subject += ": (with %s)" % " and ".join(subj)
 
@@ -324,7 +422,7 @@ def build_position_email(balloter, doc, pos):
                                  comment=c,
                                  balloter=balloter.plain_name(),
                                  doc=doc,
-                                 pos=pos.pos,
+                                 pos=pos_name,
                                  blocking_name=blocking_name,
                                  settings=settings))
     frm = balloter.role_email("ad").formatted_email()
@@ -338,79 +436,16 @@ def build_position_email(balloter, doc, pos):
 
     return addrs, frm, subject, body
 
-@role_required('Area Director','Secretariat','IRSG Member', 'RSAB Member')
-def send_ballot_comment(request, name, ballot_id):
-    """Email document ballot position discuss/comment for Area Director."""
-    doc = get_object_or_404(Document, name=name)
-    ballot = get_object_or_404(BallotDocEvent, type="created_ballot", pk=ballot_id, doc=doc)
 
-    if not has_role(request.user, 'Secretariat'):
-        if any([
-            doc.stream_id == 'ietf' and not has_role(request.user, 'Area Director'),
-            doc.stream_id == 'irtf' and not has_role(request.user, 'IRSG Member'),
-            doc.stream_id == 'editorial' and not has_role(request.user, 'RSAB Member'),
-        ]):
-            raise Http404
-
-    balloter = request.user.person
-
-    try:
-        return_to_url = parse_ballot_edit_return_point(request.GET.get('ballot_edit_return_point'), doc.name, ballot_id)
-    except ValueError:
-        return HttpResponseBadRequest('ballot_edit_return_point is invalid')
-    
-    if 'HTTP_REFERER' in request.META:
-        back_url = request.META['HTTP_REFERER']
-    else:
-        back_url = urlreverse("ietf.doc.views_doc.document_ballot", kwargs=dict(name=doc.name, ballot_id=ballot_id))
-
-    # if we're in the Secretariat, we can select a balloter (such as an AD) to act as stand-in for
-    if has_role(request.user, "Secretariat"):
-        balloter_id = request.GET.get('balloter')
-        if not balloter_id:
-            raise Http404
-        balloter = get_object_or_404(Person, pk=balloter_id)
-
-    pos = doc.latest_event(BallotPositionDocEvent, type="changed_ballot_position", balloter=balloter, ballot=ballot)
-    if not pos:
-        raise Http404
-
-    addrs, frm, subject, body = build_position_email(balloter, doc, pos)
-
-    if doc.stream_id == 'irtf':
-        mailtrigger_slug='irsg_ballot_saved'
-    elif doc.stream_id == 'editorial':
-        mailtrigger_slug='rsab_ballot_saved'
-    else:
-        mailtrigger_slug='iesg_ballot_saved'
-        
-    if request.method == 'POST':
-        cc = []
-        cc_select_form = CcSelectForm(data=request.POST,mailtrigger_slug=mailtrigger_slug,mailtrigger_context={'doc':doc})
-        if cc_select_form.is_valid():
-            cc.extend(cc_select_form.get_selected_addresses())
-        extra_cc = [x.strip() for x in request.POST.get("extra_cc","").split(',') if x.strip()]
-        if extra_cc:
-            cc.extend(extra_cc)
-
-        send_mail_text(request, addrs.to, frm, subject, body, cc=", ".join(cc))
-            
-        return HttpResponseRedirect(return_to_url)
-
-    else: 
+def build_position_email(balloter, doc, pos):
 
-        cc_select_form = CcSelectForm(mailtrigger_slug=mailtrigger_slug,mailtrigger_context={'doc':doc})
-  
-        return render(request, 'doc/ballot/send_ballot_comment.html',
-                      dict(doc=doc,
-                          subject=subject,
-                          body=body,
-                          frm=frm,
-                          to=addrs.as_strings().to,
-                          balloter=balloter,
-                          back_url=back_url,
-                          cc_select_form = cc_select_form,
-                      ))
+    pos_dict=dict()
+    pos_dict["doc"]=doc
+    pos_dict["position_name"]=pos.pos.slug
+    pos_dict["discuss"]=pos.discuss
+    pos_dict["comment"]=pos.comment
+    pos_dict["balloter"]=balloter
+    return build_position_email_from_dict(pos_dict)
 
 @role_required('Area Director','Secretariat')
 def clear_ballot(request, name, ballot_type_slug):
diff --git a/ietf/mailtrigger/forms.py b/ietf/mailtrigger/forms.py
index 366c429d8c..8d13c5edf3 100644
--- a/ietf/mailtrigger/forms.py
+++ b/ietf/mailtrigger/forms.py
@@ -11,6 +11,7 @@
 class CcSelectForm(forms.Form):
     expansions = dict()                 # type: Dict[str, List[str]]
     cc_choices = forms.MultipleChoiceField(
+                   required=False,
                    label='Cc',
                    choices=[],
                    widget=forms.CheckboxSelectMultiple(),
diff --git a/ietf/templates/doc/ballot/edit_position.html b/ietf/templates/doc/ballot/edit_position.html
index 293c186112..b57e9a3652 100644
--- a/ietf/templates/doc/ballot/edit_position.html
+++ b/ietf/templates/doc/ballot/edit_position.html
@@ -20,24 +20,48 @@ <h1>
             Ballot deferred by {{ ballot_deferred.by }} on {{ ballot_deferred.time|date:"Y-m-d" }}.
         </p>
     {% endif %}
+    <div class="d-none" id="id_docname" data-value="{{doc.name}}"></div>
+    <div class="d-none" id="id_balloter" data-value="{{balloter.pk}}"></div>
+    {% if form.errors or cc_select_form.errors or additional_cc_form.errors %}
+        <div class="alert alert-danger my-3">
+                There were errors in the submitted form -- see below. Please correct these and resubmit.
+        </div>
+        {% if form.errors %}
+            <div>Position entry</div>
+            {% bootstrap_form_errors form %}
+        {% endif %}
+        {% if cc_select_form.errors %}
+            <div>CC selection</div>
+            {% bootstrap_form_errors cc_select_form %}
+        {% endif %}
+        {% if additional_cc_form.errors %}
+            <div>Additional Cc Addresses</div>
+            {% bootstrap_form_errors additional_cc_form %}
+        {% endif %}
+    {% endif %}
     <form method="post" id="ballot-form" class="my-3">
         {% csrf_token %}
         {% for field in form %}
             {% if field.name == "discuss" %}<div id="div_id_discuss">{% endif %}
             {% bootstrap_field field %}
             {% if field.name == "discuss" and old_pos and old_pos.discuss_time %}
-                <div class="form-text mt-n3 mb-3">Last edited {{ old_pos.discuss_time }}</div>
+                <div class="form-text mt-n3 mb-3">Last saved {{ old_pos.discuss_time }}</div>
             {% elif field.name == "comment" and old_pos and old_pos.comment_time %}
-                <div class="form-text mt-n3 mb-3">Last edited {{ old_pos.comment_time }}</div>
+                <div class="form-text mt-n3 mb-3">Last saved {{ old_pos.comment_time }}</div>
             {% endif %}
             {% if field.name == "discuss" %}</div>{% endif %}
         {% endfor %}
+        {% bootstrap_form cc_select_form %}
+        {% bootstrap_form additional_cc_form %}
         <div class="mt-3">
+            <button type="button" class="btn btn-primary" data-bs-toggle="modal" data-bs-target="#emailPreview">
+                Preview email
+            </button>
             <button type="submit"
                     class="btn btn-primary"
                     name="send_mail"
                     value="Save and send email">Save &amp; send email</button>
-            <button type="submit" class="btn btn-primary">Save</button>
+            <button type="submit" class="btn btn-warning">Save without sending email</button>
             {% if doc.type_id == "draft" or doc.type_id == "conflrev" %}
                 {% if doc.stream.slug != "irtf" %}
                     {% if ballot_deferred %}
@@ -58,7 +82,24 @@ <h1>
                 Back
             </a>
         </div>
-    </form>
+    </form>  
+    <!-- Modal -->
+    <div class="modal fade" id="emailPreview" tabindex="-1" aria-labelledby="emailPreviewLabel" aria-hidden="true">
+    <div class="modal-dialog modal-xl">
+        <div class="modal-content">
+        <div class="modal-header">
+            <h1 class="modal-title fs-5" id="emailPreviewLabel">This email has not yet been sent</h1>
+            <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
+        </div>
+        <pre class="modal-body">
+            Loading
+        </pre>
+        <div class="modal-footer">
+            <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
+        </div>
+        </div>
+    </div>
+    </div>
 {% endblock %}
 {% block js %}
     <script>
@@ -78,4 +119,44 @@ <h1>
 
         discussToggle($("input[name=position]:checked").val());
     </script>
+
+    <script>
+        function getCheckedCcValues() {
+            const checkedInputs = document.querySelectorAll('#id_cc_choices input:checked')
+            const values = Array.from(checkedInputs).map(input => input.value)
+            return values
+        }
+        const emailPreview = document.getElementById("emailPreview")
+        if (emailPreview) {
+            emailPreview.addEventListener("show.bs.modal", async (event) => {
+                const discuss = document.getElementById("id_discuss").value
+                const comment = document.getElementById("id_comment").value
+                const position = document.getElementById("id_position").querySelector('input[name="position"]:checked').value
+                const docname = document.getElementById("id_docname").dataset.value
+                const balloter = document.getElementById("id_balloter").dataset.value
+                const cc_choices = getCheckedCcValues()
+                const additional_cc = document.getElementById("id_additional_cc").value
+                const postData = {
+                    discuss: discuss,
+                    comment: comment,
+                    position: position,
+                    docname: docname,
+                    balloter: balloter,
+                    cc_choices: cc_choices,
+                    additional_cc: additional_cc
+                }
+                response = await fetch("/doc/build-position-email/", {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json"
+                    },
+                    body: JSON.stringify({"post_data": postData})
+                })
+                // Update the modal's content.
+                const modalBody = emailPreview.querySelector('.modal-body')
+                responseJson = await response.json()
+                modalBody.textContent = responseJson.text
+            })
+        }
+    </script>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/ballot/send_ballot_comment.html b/ietf/templates/doc/ballot/send_ballot_comment.html
deleted file mode 100644
index 1c5f521859..0000000000
--- a/ietf/templates/doc/ballot/send_ballot_comment.html
+++ /dev/null
@@ -1,44 +0,0 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% load django_bootstrap5 %}
-{% load ietf_filters %}
-{% block title %}Send ballot position for {{ balloter }} on {{ doc }}{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>
-        Send ballot position for {{ balloter }}
-        <br>
-        <small class="text-body-secondary">{{ doc }}</small>
-    </h1>
-    <form class="mt-3" method="post">
-        {% csrf_token %}
-        <div class="mb-3">
-            <label class="form-label" for="from">From</label>
-            <input id="from" class="form-control" type="text" placeholder="{{ frm }}" disabled>
-        </div>
-        <div class="mb-3">
-            <label class="form-label" for="to">To</label>
-            <input id="to" class="form-control" type="text" placeholder="{{ to }}" disabled>
-        </div>
-        {% bootstrap_form cc_select_form %}
-        <div class="mb-3">
-            <label class="form-label" for="additional">Additional Cc Addresses</label>
-            <input id="additional" class="form-control" type="text" name="extra_cc">
-            <div class="form-text">Separate email addresses with commas.</div>
-        </div>
-        <div class="mb-3">
-            <label class="form-label" for="subject">Subject</label>
-            <input id="subject" class="form-control" type="text" placeholder="{{ subject }}" disabled>
-        </div>
-        <div class="mb-3">
-            <p class="form-label">Body</p>
-            <pre class="border p-3">{{ body|maybewordwrap }}</pre>
-        </div>
-        <button type="submit" class="btn btn-danger">Send</button>
-        <a class="btn btn-secondary float-end"
-           href="{% url "ietf.doc.views_doc.document_main" name=doc.name %}">
-            Back
-        </a>
-    </form>
-{% endblock %}

From 8f2feef631acbd8b181a845140647c2c83a9299f Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Tue, 14 Oct 2025 18:57:50 -0400
Subject: [PATCH 460/707] ci: update build workflow to deploy to dev

---
 .github/workflows/build.yml               |  71 ++---
 dev/k8s-get-deploy-name/.editorconfig     |   7 +
 dev/k8s-get-deploy-name/.gitignore        |   1 +
 dev/k8s-get-deploy-name/.npmrc            |   3 +
 dev/k8s-get-deploy-name/README.md         |  16 ++
 dev/k8s-get-deploy-name/cli.js            |  22 ++
 dev/k8s-get-deploy-name/package-lock.json | 303 ++++++++++++++++++++++
 dev/k8s-get-deploy-name/package.json      |   8 +
 8 files changed, 396 insertions(+), 35 deletions(-)
 create mode 100644 dev/k8s-get-deploy-name/.editorconfig
 create mode 100644 dev/k8s-get-deploy-name/.gitignore
 create mode 100644 dev/k8s-get-deploy-name/.npmrc
 create mode 100644 dev/k8s-get-deploy-name/README.md
 create mode 100644 dev/k8s-get-deploy-name/cli.js
 create mode 100644 dev/k8s-get-deploy-name/package-lock.json
 create mode 100644 dev/k8s-get-deploy-name/package.json

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8567446cae..15eaba48d1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -16,13 +16,13 @@ on:
           - Skip
           - Staging Only
           - Staging + Prod
-      sandbox:
-        description: 'Deploy to Sandbox'
+      dev:
+        description: 'Deploy to Dev'
         default: true
         required: true
         type: boolean
-      sandboxNoDbRefresh:
-        description: 'Sandbox Disable Daily DB Refresh'
+      devNoDbRefresh:
+        description: 'Dev Disable Daily DB Refresh'
         default: false
         required: true
         type: boolean
@@ -392,44 +392,45 @@ jobs:
                   value: "Failed"
         
   # -----------------------------------------------------------------
-  # SANDBOX
+  # DEV
   # -----------------------------------------------------------------
-  sandbox:
-    name: Deploy to Sandbox
-    if: ${{ !failure() && !cancelled() && github.event.inputs.sandbox == 'true' }}
+  dev:
+    name: Deploy to Dev
+    if: ${{ !failure() && !cancelled() && github.event.inputs.dev == 'true' }}
     needs: [prepare, release]
-    runs-on: [self-hosted, dev-server]
+    runs-on: ubuntu-latest
     environment:
-      name: sandbox
+      name: dev
     env:
       PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
       
     steps:
-    - uses: actions/checkout@v4
-        
-    - name: Download a Release Artifact
-      uses: actions/download-artifact@v4.3.0
-      with:
-        name: release-${{ env.PKG_VERSION }}
-        
-    - name: Deploy to containers
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        echo "Reset production flags in settings.py..."
-        sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = True/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'development'/" ietf/settings.py
-        echo "Install Deploy to Container CLI dependencies..."
-        cd dev/deploy-to-container
-        npm ci
-        cd ../..
-        echo "Start Deploy..."
-        node ./dev/deploy-to-container/cli.js --branch ${{ github.ref_name }} --domain dev.ietf.org --appversion ${{ env.PKG_VERSION }} --commit ${{ github.sha }} --ghrunid ${{ github.run_id }} --nodbrefresh ${{ github.event.inputs.sandboxNoDbRefresh }}
-        
-    - name: Cleanup old docker resources
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        docker image prune -a -f
+      - uses: actions/checkout@v4
+        with:
+          ref: main
+          
+      - name: Get Deploy Name
+        env:
+          DEBIAN_FRONTEND: noninteractive
+        run: |
+          echo "Install Get Deploy Name CLI dependencies..."
+          cd dev/k8s-get-deploy-name
+          npm ci
+          echo "Get Deploy Name..."
+          echo "DEPLOY_NAMESPACE=$(node cli.js --branch ${{ github.ref_name }})" >> "$GITHUB_ENV"
+
+      - name: Deploy to dev
+        uses: the-actions-org/workflow-dispatch@v4
+        with:
+          workflow: deploy-dev.yml
+          repo: ietf-tools/infra-k8s
+          ref: main
+          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
+          inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}" }'
+          wait-for-completion: true
+          wait-for-completion-timeout: 30m
+          wait-for-completion-interval: 30s
+          display-workflow-run-url: false
 
   # -----------------------------------------------------------------
   # STAGING
diff --git a/dev/k8s-get-deploy-name/.editorconfig b/dev/k8s-get-deploy-name/.editorconfig
new file mode 100644
index 0000000000..fec5c66519
--- /dev/null
+++ b/dev/k8s-get-deploy-name/.editorconfig
@@ -0,0 +1,7 @@
+[*]
+indent_size = 2
+indent_style = space
+charset = utf-8
+trim_trailing_whitespace = false
+end_of_line = lf
+insert_final_newline = true
diff --git a/dev/k8s-get-deploy-name/.gitignore b/dev/k8s-get-deploy-name/.gitignore
new file mode 100644
index 0000000000..07e6e472cc
--- /dev/null
+++ b/dev/k8s-get-deploy-name/.gitignore
@@ -0,0 +1 @@
+/node_modules
diff --git a/dev/k8s-get-deploy-name/.npmrc b/dev/k8s-get-deploy-name/.npmrc
new file mode 100644
index 0000000000..580a68c499
--- /dev/null
+++ b/dev/k8s-get-deploy-name/.npmrc
@@ -0,0 +1,3 @@
+audit = false
+fund = false
+save-exact = true
diff --git a/dev/k8s-get-deploy-name/README.md b/dev/k8s-get-deploy-name/README.md
new file mode 100644
index 0000000000..a6605e4dd2
--- /dev/null
+++ b/dev/k8s-get-deploy-name/README.md
@@ -0,0 +1,16 @@
+# Datatracker Get Deploy Name
+
+This tool process and slugify a git branch into an appropriate subdomain name.
+
+## Usage
+
+1. From the `dev/k8s-get-deploy-name` directory, install the dependencies:
+```sh
+npm install
+```
+2. Run the command: (replacing the `branch` argument)
+```sh
+node /cli.js --branch feat/fooBar-123
+```
+
+The subdomain name will be output. It can then be used in a workflow as a namespace name and subdomain value.
diff --git a/dev/k8s-get-deploy-name/cli.js b/dev/k8s-get-deploy-name/cli.js
new file mode 100644
index 0000000000..b6c3b5119e
--- /dev/null
+++ b/dev/k8s-get-deploy-name/cli.js
@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+
+import yargs from 'yargs/yargs'
+import { hideBin } from 'yargs/helpers'
+import slugify from 'slugify'
+
+const argv = yargs(hideBin(process.argv)).argv
+
+let branch = argv.branch
+if (!branch) {
+  throw new Error('Missing --branch argument!')
+}
+if (branch.indexOf('/') >= 0) {
+  branch = branch.split('/').slice(1).join('-')
+}
+branch = slugify(branch, { lower: true, strict: true })
+if (branch.length < 1) {
+  throw new Error('Branch name is empty!')
+}
+process.stdout.write(`dt-${branch}`)
+
+process.exit(0)
diff --git a/dev/k8s-get-deploy-name/package-lock.json b/dev/k8s-get-deploy-name/package-lock.json
new file mode 100644
index 0000000000..e492a4cd38
--- /dev/null
+++ b/dev/k8s-get-deploy-name/package-lock.json
@@ -0,0 +1,303 @@
+{
+  "name": "k8s-get-deploy-name",
+  "lockfileVersion": 2,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "k8s-get-deploy-name",
+      "dependencies": {
+        "slugify": "1.6.6",
+        "yargs": "17.7.2"
+      }
+    },
+    "node_modules/ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/cliui": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
+      "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
+      "dependencies": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.1",
+        "wrap-ansi": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
+    },
+    "node_modules/emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="
+    },
+    "node_modules/escalade": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz",
+      "integrity": "sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw==",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/get-caller-file": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
+      "engines": {
+        "node": "6.* || 8.* || >= 10.*"
+      }
+    },
+    "node_modules/is-fullwidth-code-point": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
+      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/require-directory": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/slugify": {
+      "version": "1.6.6",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.6.tgz",
+      "integrity": "sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw==",
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "dependencies": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "dependencies": {
+        "ansi-regex": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/wrap-ansi": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+      }
+    },
+    "node_modules/y18n": {
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
+      "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/yargs": {
+      "version": "17.7.2",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
+      "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==",
+      "dependencies": {
+        "cliui": "^8.0.1",
+        "escalade": "^3.1.1",
+        "get-caller-file": "^2.0.5",
+        "require-directory": "^2.1.1",
+        "string-width": "^4.2.3",
+        "y18n": "^5.0.5",
+        "yargs-parser": "^21.1.1"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/yargs-parser": {
+      "version": "21.1.1",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
+      "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==",
+      "engines": {
+        "node": ">=12"
+      }
+    }
+  },
+  "dependencies": {
+    "ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ=="
+    },
+    "ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "requires": {
+        "color-convert": "^2.0.1"
+      }
+    },
+    "cliui": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
+      "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
+      "requires": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.1",
+        "wrap-ansi": "^7.0.0"
+      }
+    },
+    "color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "requires": {
+        "color-name": "~1.1.4"
+      }
+    },
+    "color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA=="
+    },
+    "emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="
+    },
+    "escalade": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz",
+      "integrity": "sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw=="
+    },
+    "get-caller-file": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="
+    },
+    "is-fullwidth-code-point": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
+      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="
+    },
+    "require-directory": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q=="
+    },
+    "slugify": {
+      "version": "1.6.6",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.6.tgz",
+      "integrity": "sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw=="
+    },
+    "string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "requires": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      }
+    },
+    "strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "requires": {
+        "ansi-regex": "^5.0.1"
+      }
+    },
+    "wrap-ansi": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+      "requires": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      }
+    },
+    "y18n": {
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
+      "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA=="
+    },
+    "yargs": {
+      "version": "17.7.2",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
+      "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==",
+      "requires": {
+        "cliui": "^8.0.1",
+        "escalade": "^3.1.1",
+        "get-caller-file": "^2.0.5",
+        "require-directory": "^2.1.1",
+        "string-width": "^4.2.3",
+        "y18n": "^5.0.5",
+        "yargs-parser": "^21.1.1"
+      }
+    },
+    "yargs-parser": {
+      "version": "21.1.1",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
+      "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw=="
+    }
+  }
+}
diff --git a/dev/k8s-get-deploy-name/package.json b/dev/k8s-get-deploy-name/package.json
new file mode 100644
index 0000000000..849f5d9b8d
--- /dev/null
+++ b/dev/k8s-get-deploy-name/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "k8s-get-deploy-name",
+  "type": "module",
+  "dependencies": {
+    "slugify": "1.6.6",
+    "yargs": "17.7.2"
+  }
+}

From 5a7be260dd6dfd9c484bc7c50ef991642fa8ad8e Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Wed, 15 Oct 2025 03:07:07 -0400
Subject: [PATCH 461/707] chore: add disableDailyDbRefresh flag to build
 workflow

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 15eaba48d1..4c70456a73 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -426,7 +426,7 @@ jobs:
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}" }'
+          inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }} }'
           wait-for-completion: true
           wait-for-completion-timeout: 30m
           wait-for-completion-interval: 30s

From 93c1124c21267556625df760c68f35f6d4ae8139 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 15 Oct 2025 13:06:45 -0500
Subject: [PATCH 462/707] ci: add ruff to devcontainer (#9731)

---
 .devcontainer/devcontainer.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 6b0fd79bb3..bf28550084 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -23,7 +23,6 @@
                 "dbaeumer.vscode-eslint",
                 "eamodio.gitlens",
                 "editorconfig.editorconfig",
-                // Newer volar >=3.0.0 causes crashes in devcontainers
                 "vue.volar@2.2.10",
                 "mrmlnc.vscode-duplicate",
                 "ms-azuretools.vscode-docker",
@@ -35,7 +34,8 @@
                 "redhat.vscode-yaml",
                 "spmeesseman.vscode-taskexplorer",
                 "visualstudioexptteam.vscodeintellicode",
-                "ms-python.pylint"
+                "ms-python.pylint",
+                "charliermarsh.ruff"
             ],
             "settings": {
                 "terminal.integrated.defaultProfile.linux": "zsh",

From d5660ab8e953fec25dbb20025aba73b2e58f0609 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 15 Oct 2025 18:30:18 -0300
Subject: [PATCH 463/707] fix: unbreak EmptyAwareJSONField (#9732)

* fix: specify default form_class correctly

* style: ruff ruff
---
 ietf/utils/db.py | 63 ++++++++++++++++++++++++++++++------------------
 1 file changed, 40 insertions(+), 23 deletions(-)

diff --git a/ietf/utils/db.py b/ietf/utils/db.py
index 865c9b999f..49c89da13a 100644
--- a/ietf/utils/db.py
+++ b/ietf/utils/db.py
@@ -1,33 +1,44 @@
-# Copyright The IETF Trust 2021, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-# Taken from/inspired by
-# https://stackoverflow.com/questions/55147169/django-admin-jsonfield-default-empty-dict-wont-save-in-admin
-# 
-# JSONField should recognize {}, (), and [] as valid, non-empty JSON
-# values.  However, the base Field class excludes them
+# Copyright The IETF Trust 2021-2025, All Rights Reserved
 
 import jsonfield
 from django.db import models
 
-from ietf.utils.fields import IETFJSONField as FormIETFJSONField, EmptyAwareJSONField as FormEmptyAwareJSONField
+from ietf.utils.fields import (
+    IETFJSONField as FormIETFJSONField,
+    EmptyAwareJSONField as FormEmptyAwareJSONField,
+)
 
 
 class EmptyAwareJSONField(models.JSONField):
-    form_class = FormEmptyAwareJSONField
+    """JSONField that allows empty JSON values when model specifies empty=False
+
+    Taken from/inspired by
+    https://stackoverflow.com/questions/55147169/django-admin-jsonfield-default-empty-dict-wont-save-in-admin
+
+    JSONField should recognize {}, (), and [] as valid, non-empty JSON values.
 
-    def __init__(self, *args, empty_values=FormEmptyAwareJSONField.empty_values, accepted_empty_values=None, **kwargs):
+    If customizing the formfield, the field must accept the `empty_values` argument.
+    """
+
+    def __init__(
+        self,
+        *args,
+        empty_values=FormEmptyAwareJSONField.empty_values,
+        accepted_empty_values=None,
+        **kwargs,
+    ):
         if accepted_empty_values is None:
             accepted_empty_values = []
-        self.empty_values = [x
-                             for x in empty_values
-                             if x not in accepted_empty_values]
+        self.empty_values = [x for x in empty_values if x not in accepted_empty_values]
         super().__init__(*args, **kwargs)
 
     def formfield(self, **kwargs):
-        if 'form_class' not in kwargs or issubclass(kwargs['form_class'], FormEmptyAwareJSONField):
-            kwargs.setdefault('empty_values', self.empty_values)
-        return super().formfield(**{**kwargs})
+        defaults = {
+            "form_class": FormEmptyAwareJSONField,
+            "empty_values": self.empty_values,
+        }
+        defaults.update(kwargs)
+        return super().formfield(**defaults)
 
 
 class IETFJSONField(jsonfield.JSONField):  # pragma: no cover
@@ -36,15 +47,21 @@ class IETFJSONField(jsonfield.JSONField):  # pragma: no cover
     # Remove this class when migrations are squashed and it is no longer referenced
     form_class = FormIETFJSONField
 
-    def __init__(self, *args, empty_values=FormIETFJSONField.empty_values, accepted_empty_values=None, **kwargs):
+    def __init__(
+        self,
+        *args,
+        empty_values=FormIETFJSONField.empty_values,
+        accepted_empty_values=None,
+        **kwargs,
+    ):
         if accepted_empty_values is None:
             accepted_empty_values = []
-        self.empty_values = [x
-                             for x in empty_values
-                             if x not in accepted_empty_values]
+        self.empty_values = [x for x in empty_values if x not in accepted_empty_values]
         super().__init__(*args, **kwargs)
 
     def formfield(self, **kwargs):
-        if 'form_class' not in kwargs or issubclass(kwargs['form_class'], FormIETFJSONField):
-            kwargs.setdefault('empty_values', self.empty_values)
+        if "form_class" not in kwargs or issubclass(
+            kwargs["form_class"], FormIETFJSONField
+        ):
+            kwargs.setdefault("empty_values", self.empty_values)
         return super().formfield(**{**kwargs})

From 1d2d304fa5c99db6cd2a944328246ce900c73b3c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 16 Oct 2025 12:39:04 -0300
Subject: [PATCH 464/707] fix: improve proceedings caching/performance (#9733)

* refactor: speed up get_attendance()

* fix: avoid cache invalidation by later draft rev

* fix: guard against empty value

* feat: freeze cache key for final proceedings
---
 ietf/meeting/models.py | 28 +++++++++++++++++++++-------
 ietf/meeting/utils.py  | 39 +++++++++++++++++++++++++++++++++++----
 2 files changed, 56 insertions(+), 11 deletions(-)

diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index f3df23e916..9e44df33b7 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -250,25 +250,39 @@ def get_attendance(self):
         # MeetingRegistration.attended started conflating badge-pickup and session attendance before IETF 114.
         # We've separated session attendance off to ietf.meeting.Attended, but need to report attendance at older
         # meetings correctly.
-
+        #
+        # Looking up by registration and attendance records separately and joining in
+        # python is far faster than combining the Q objects in the query (~100x).
+        # Further optimization may be possible, but the queries are tricky...
         attended_per_meeting_registration = (
             Q(registration__meeting=self) & (
                 Q(registration__attended=True) |
                 Q(registration__checkedin=True)
             )
         )
+        attendees_by_reg = set(
+            Person.objects.filter(attended_per_meeting_registration).values_list(
+                "pk", flat=True
+            )
+        )
+
         attended_per_meeting_attended = (
             Q(attended__session__meeting=self)
             # Note that we are not filtering to plenary, wg, or rg sessions
             # as we do for nomcom eligibility - if picking up a badge (see above)
             # is good enough, just attending e.g. a training session is also good enough
         )
-        attended = Person.objects.filter(
-            attended_per_meeting_registration | attended_per_meeting_attended
-        ).distinct()
-
-        onsite = set(attended.filter(registration__meeting=self, registration__tickets__attendance_type__slug='onsite'))
-        remote = set(attended.filter(registration__meeting=self, registration__tickets__attendance_type__slug='remote'))
+        attendees_by_att = set(
+            Person.objects.filter(attended_per_meeting_attended).values_list(
+                "pk", flat=True
+            )
+        )
+        
+        attendees = Person.objects.filter(
+            pk__in=attendees_by_att | attendees_by_reg
+        )
+        onsite = set(attendees.filter(registration__meeting=self, registration__tickets__attendance_type__slug='onsite'))
+        remote = set(attendees.filter(registration__meeting=self, registration__tickets__attendance_type__slug='remote'))
         remote.difference_update(onsite)
 
         return Attendance(
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index f6925269aa..feadb0c7fd 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -1027,10 +1027,41 @@ def generate_proceedings_content(meeting, force_refresh=False):
     :force_refresh: true to force regeneration and cache refresh
     """
     cache = caches["default"]
-    cache_version = Document.objects.filter(session__meeting__number=meeting.number).aggregate(Max('time'))["time__max"]
-    # Include proceedings_final in the bare_key so we'll always reflect that accurately, even at the cost of
-    # a recomputation in the view
-    bare_key = f"proceedings.{meeting.number}.{cache_version}.final={meeting.proceedings_final}"
+    key_components = [
+        "proceedings",
+        str(meeting.number),
+    ]
+    if meeting.proceedings_final:
+        # Freeze the cache key once proceedings are finalized. Further changes will
+        # not be picked up until the cache expires or is refreshed by the
+        # proceedings_content_refresh_task()
+        key_components.append("final")
+    else:
+        # Build a cache key that changes when materials are modified. For all but drafts,
+        # use the last modification time of the document. Exclude drafts from this because
+        # revisions long after the meeting ends will otherwise show up as changes and
+        # incorrectly invalidate the cache. Instead, include an ordered list of the
+        # drafts linked to the meeting so adding or removing drafts will trigger a
+        # recalculation. The list is long but that doesn't matter because we hash it into
+        # a fixed-length key.
+        meeting_docs = Document.objects.filter(session__meeting__number=meeting.number)
+        last_materials_update = (
+            meeting_docs.exclude(type_id="draft")
+            .filter(session__meeting__number=meeting.number)
+            .aggregate(Max("time"))["time__max"]
+        )
+        draft_names = (
+            meeting_docs
+            .filter(type_id="draft")
+            .order_by("name")
+            .values_list("name", flat=True)
+        )
+        key_components += [
+            last_materials_update.isoformat() if last_materials_update else "-",
+            ",".join(draft_names),
+        ]
+
+    bare_key = ".".join(key_components)
     cache_key = sha384(bare_key.encode("utf8")).hexdigest()
     if not force_refresh:
         cached_content = cache.get(cache_key, None)

From 2cfbaf90c3504a53135d61f9bf976bab3b388eb9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 16 Oct 2025 14:28:13 -0300
Subject: [PATCH 465/707] ci: drop caching from build images step (#9738)

---
 .github/workflows/build.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4c70456a73..7eac7b1c64 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -278,8 +278,6 @@ jobs:
         tags: |
           ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
           ${{ env.FEATURE_LATEST_TAG && format('ghcr.io/ietf-tools/datatracker:{0}-latest', env.FEATURE_LATEST_TAG) || null }}
-        cache-from: type=gha
-        cache-to: type=gha,mode=max
 
     - name: Update CHANGELOG
       id: changelog

From b0ec8c4b27d6225c6ffa6cac27ce554ec4a49a7c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 17 Oct 2025 13:08:11 -0300
Subject: [PATCH 466/707] chore: remove unused variables (#9742)

---
 ietf/meeting/models.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/ietf/meeting/models.py b/ietf/meeting/models.py
index 9e44df33b7..7d9e318aab 100644
--- a/ietf/meeting/models.py
+++ b/ietf/meeting/models.py
@@ -956,8 +956,6 @@ class Meta:
     def __str__(self):
         return u"%s -> %s-%s" % (self.session, self.document.name, self.rev)
 
-constraint_cache_uses = 0
-constraint_cache_initials = 0
 
 class SessionQuerySet(models.QuerySet):
     def with_current_status(self):

From 62f720ceaf951fba91b5a818473d798663dfbf1d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 21 Oct 2025 12:31:39 -0300
Subject: [PATCH 467/707] ci: imagePullPolicy for migration container (#9764)

---
 k8s/datatracker.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index 3d9e86a29d..50a2c69687 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -115,6 +115,7 @@ spec:
       initContainers:
         - name: migration
           image: "ghcr.io/ietf-tools/datatracker:$APP_IMAGE_TAG"
+          imagePullPolicy: Always
           env:
             - name: "CONTAINER_ROLE"
               value: "migrations"

From a3a3d215ca4067e722ead94e886175adb589e235 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 23 Oct 2025 12:14:48 -0500
Subject: [PATCH 468/707] fix: don't limit from_contact for incoming liaison
 statements (#9773)

---
 ietf/liaisons/forms.py | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index ef5b29535e..1747e55571 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -495,14 +495,18 @@ def set_from_fields(self):
             self.fields['from_groups'].initial = qs
 
         # Note that the IAB chair currently doesn't get to work with incoming liaison statements
-        if not (
-            has_role(self.user, "Secretariat")
-            or has_role(self.user, "Liaison Coordinator")
-        ):
-            self.fields["from_contact"].initial = (
-                self.person.role_set.filter(group=qs[0]).first().email.formatted_email()
-            )
-            self.fields["from_contact"].widget.attrs["disabled"] = True
+
+        # Removing this block at the request of the IAB - as a workaround until the new liaison tool is
+        # create, anyone with access to the form can set any from_contact value
+        #
+        # if not (
+        #     has_role(self.user, "Secretariat")
+        #     or has_role(self.user, "Liaison Coordinator")
+        # ):
+        #     self.fields["from_contact"].initial = (
+        #         self.person.role_set.filter(group=qs[0]).first().email.formatted_email()
+        #     )
+        #     self.fields["from_contact"].widget.attrs["disabled"] = True
 
     def set_to_fields(self):
         '''Set to_groups and to_contacts options and initial value based on user

From 1243957f06da485e5cf4c04a8479d551817d4d78 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 23 Oct 2025 14:15:22 -0300
Subject: [PATCH 469/707] feat: unversioned proceedings cache (#9779)

* feat: separate, unversioned proceedings cache

* refactor: don't double-hash the cache key
---
 ietf/meeting/utils.py |  8 ++++----
 ietf/settings.py      | 22 ++++++++++++++++++++++
 2 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index feadb0c7fd..afcf7656f2 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -5,7 +5,6 @@
 import jsonschema
 import os
 import requests
-from hashlib import sha384
 
 import pytz
 import subprocess
@@ -1026,7 +1025,7 @@ def generate_proceedings_content(meeting, force_refresh=False):
     :meeting: meeting whose proceedings should be rendered
     :force_refresh: true to force regeneration and cache refresh
     """
-    cache = caches["default"]
+    cache = caches["proceedings"]
     key_components = [
         "proceedings",
         str(meeting.number),
@@ -1061,8 +1060,9 @@ def generate_proceedings_content(meeting, force_refresh=False):
             ",".join(draft_names),
         ]
 
-    bare_key = ".".join(key_components)
-    cache_key = sha384(bare_key.encode("utf8")).hexdigest()
+    # Key is potentially long, but the "proceedings" cache hashes it to a fixed
+    # length. If that changes, hash it separately here first.
+    cache_key = ".".join(key_components)
     if not force_refresh:
         cached_content = cache.get(cache_key, None)
         if cached_content is not None:
diff --git a/ietf/settings.py b/ietf/settings.py
index 9a213c1a73..5e576430ed 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1374,6 +1374,17 @@ def skip_unreadable_post(record):
                 "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
                 "VERSION": __version__,
                 "KEY_PREFIX": "ietf:dt",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
+            "proceedings": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:proceedings",
+                # Key function is default except with sha384-encoded key
                 "KEY_FUNCTION": lambda key, key_prefix, version: (
                     f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
                 ),
@@ -1421,6 +1432,17 @@ def skip_unreadable_post(record):
                 "VERSION": __version__,
                 "KEY_PREFIX": "ietf:dt",
             },
+            "proceedings": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                # "LOCATION": "127.0.0.1:11211",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:proceedings",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
             "sessions": {
                 "BACKEND": "django.core.cache.backends.locmem.LocMemCache",
             },

From 6412d1e24a9c499c39245bba58c2c31ec8110c0e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 23 Oct 2025 17:41:06 -0300
Subject: [PATCH 470/707] feat: blobstore-driven meeting materials (#9780)

* feat: meeting materials blob resolver API (#9700)

* refactor: exclude_deleted() for StoredObject queryset

* chore: comment

* feat: meeting materials blob resolver API

* feat: materials blob retrieval API (#9728)

* feat: materials blob retrieval API (WIP)

* refactor: alphabetize ARTIFACT_STORAGE_NAMES

* chore: limit buckets served

* refactor: any-meeting option in _get_materials_doc()

* feat: create missing blobs on retrieval

* feat: render HTML from markdown via API (#9729)

* chore: add comment

* fix: allow bluesheets to be retrieved

Normally not retrieved through /meeting/materials, but they're
close enough in purpose that we might as well make them available.

* fix: only update StoredObject.modified if changed

* fix: preserve mtime when creating blob

* refactor: better exception name

* feat: render .md.html from .md blob

* fix: explicit STATIC_IETF_ORG value in template

Django's context_processors are not applied to render_string calls as we use them here, so settings are not available.

* fix: typo

* fix: decode utf-8 properly

* feat: use filesystem to render .md.html

* fix: copy/paste error in api_resolve_materials_name

* refactor: get actual rev in _get_materials_doc (#9741)

* fix: return filename, not full path

* feat: precompute blob lookups for meeting materials (#9746)

* feat: ResolvedMaterial model + migration

* feat: method to populate ResolvedMaterial (WIP)

* refactor: don't delete ResolvedMaterials

Instead of deleting the ResolvedMaterials for a meeting, which might
lose updates made during processing, update existing rows with any
changes and warn if anything changed during the process.

* fix: fix _get_materials_doc()

Did not handle the possibility of multiple DocHistory objects with the
same rev.

* refactor: factor out material lookup helper

* feat: resolve blobs via blobdb/fs for cache

* chore: add resource

* feat: admin for ResolvedMaterial

* feat: cache-driven resolve materials API

* fix: add all ResolvedMaterials; var names

* fix: handle null case

* feat: resolve_meeting_materials_task

* feat: update resolver cache on material upload (#9759)

* feat: robustness + date range for resolve materials task (#9760)

* fix: limit types added to ResolvedMaterial

* feat: resolve meeting materials in order by date

* feat: add meetings_until param

* fix: log&continue if resolving fails on a meeting

* feat: log error message on parse errors

* refactor: move ResolvedMaterial to blobdb app (#9762)

* refactor: move ResolvedMaterial to blobdb app

* fix: undo accidental removal

* chore: fix lint (#9767)

* fix: don't use DocHistory to find materials (#9771)

* fix: don't use DocHistory to validate revs

The DocHistory records are incomplete and, in particular, -00 revs are
often missing.

* Revert "refactor: get actual rev in _get_materials_doc (#9741)"

This reverts commit 7fd15801

* chore: remove the on-demand resolver api

* chore: fix lint

* feat: populate materials buckets (#9777)

* refactor: drop .txt from filename_with_rev()

* feat: utilities to populate materials blobs

* feat: store materials for a full meeting as blobs

Plus a bunch of fixup from working with real data.
(Based on meetings 71, 83, and 118, picked arbitrarily)

* chore: update migration

* feat: task to store materials in blobdb

* refactor: reimplement api_retrieve_materials_blob

* fix: update resolving task, fix bugs

* Revert "refactor: drop .txt from filename_with_rev()"

This reverts commit a849d0f92d4df54296a7062b6c3a05fb0977be93.

* chore: fix lint

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
---
 ietf/api/urls.py                              |   3 +
 ietf/blobdb/admin.py                          |  11 +-
 .../migrations/0002_resolvedmaterial.py       |  48 +++
 ietf/blobdb/models.py                         |  20 +
 ietf/doc/models.py                            |   9 +
 ietf/doc/storage.py                           |  10 +-
 ietf/doc/storage_utils.py                     |  12 +-
 ietf/doc/views_material.py                    |   4 +
 ietf/meeting/resources.py                     |  14 +-
 ietf/meeting/tasks.py                         | 131 ++++++-
 ietf/meeting/utils.py                         | 355 +++++++++++++++++-
 ietf/meeting/views.py                         | 177 ++++++++-
 ietf/settings.py                              |  44 ++-
 ietf/templates/minimal.html                   |   4 +-
 14 files changed, 798 insertions(+), 44 deletions(-)
 create mode 100644 ietf/blobdb/migrations/0002_resolvedmaterial.py

diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 6f2efb3c1e..04575b34cb 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -49,6 +49,9 @@
     url(r'^group/role-holder-addresses/$', api_views.role_holder_addresses),
     # Let IESG members set positions programmatically
     url(r'^iesg/position', views_ballot.api_set_position),
+    # Find the blob to store for a given materials document path
+    url(r'^meeting/(?:(?P<num>(?:interim-)?[a-z0-9-]+)/)?materials/%(document)s(?P<ext>\.[A-Za-z0-9]+)?/resolve-cached/$' % settings.URL_REGEXPS, meeting_views.api_resolve_materials_name_cached),
+    url(r'^meeting/blob/(?P<bucket>[a-z0-9-]+)/(?P<name>[a-z][a-z0-9.-]+)$', meeting_views.api_retrieve_materials_blob),
     # Let Meetecho set session video URLs
     url(r'^meeting/session/video/url$', meeting_views.api_set_session_video_url),
     # Let Meetecho tell us the name of its recordings
diff --git a/ietf/blobdb/admin.py b/ietf/blobdb/admin.py
index f4cd002e07..3e1a2a311f 100644
--- a/ietf/blobdb/admin.py
+++ b/ietf/blobdb/admin.py
@@ -3,7 +3,7 @@
 from django.db.models.functions import Length
 from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
 
-from .models import Blob
+from .models import Blob, ResolvedMaterial
 
 
 @admin.register(Blob)
@@ -29,3 +29,12 @@ def get_queryset(self, request):
     def object_size(self, instance):
         """Get the size of the object"""
         return instance.object_size  # annotation added in get_queryset()
+
+
+@admin.register(ResolvedMaterial)
+class ResolvedMaterialAdmin(admin.ModelAdmin):
+    model = ResolvedMaterial
+    list_display = ["name", "meeting_number", "bucket", "blob"]
+    list_filter = ["meeting_number", "bucket"]
+    search_fields = ["name", "blob"]
+    ordering = ["name"]
diff --git a/ietf/blobdb/migrations/0002_resolvedmaterial.py b/ietf/blobdb/migrations/0002_resolvedmaterial.py
new file mode 100644
index 0000000000..e0ab405b11
--- /dev/null
+++ b/ietf/blobdb/migrations/0002_resolvedmaterial.py
@@ -0,0 +1,48 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("blobdb", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="ResolvedMaterial",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("name", models.CharField(help_text="Name to resolve", max_length=300)),
+                (
+                    "meeting_number",
+                    models.CharField(
+                        help_text="Meeting material is related to", max_length=64
+                    ),
+                ),
+                (
+                    "bucket",
+                    models.CharField(help_text="Resolved bucket name", max_length=255),
+                ),
+                (
+                    "blob",
+                    models.CharField(help_text="Resolved blob name", max_length=300),
+                ),
+            ],
+        ),
+        migrations.AddConstraint(
+            model_name="resolvedmaterial",
+            constraint=models.UniqueConstraint(
+                fields=("name", "meeting_number"), name="unique_name_per_meeting"
+            ),
+        ),
+    ]
diff --git a/ietf/blobdb/models.py b/ietf/blobdb/models.py
index 8f423d9f6c..fa7831f203 100644
--- a/ietf/blobdb/models.py
+++ b/ietf/blobdb/models.py
@@ -96,3 +96,23 @@ def _emit_blob_change_event(self, using=None):
             ),
             using=using,
         )
+
+
+class ResolvedMaterial(models.Model):
+    # A Document name can be 255 characters; allow this name to be a bit longer
+    name = models.CharField(max_length=300, help_text="Name to resolve")
+    meeting_number = models.CharField(
+        max_length=64, help_text="Meeting material is related to"
+    )
+    bucket = models.CharField(max_length=255, help_text="Resolved bucket name")
+    blob = models.CharField(max_length=300, help_text="Resolved blob name")
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["name", "meeting_number"], name="unique_name_per_meeting"
+            )
+        ]
+    
+    def __str__(self):
+        return f"{self.name}@{self.meeting_number} -> {self.bucket}:{self.blob}"
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 25ee734cbe..8bb79b64ed 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -913,6 +913,7 @@ def role_for_doc(self):
             roles.append('Action Holder')
         return ', '.join(roles) 
 
+# N.B., at least a couple dozen documents exist that do not satisfy this validator
 validate_docname = RegexValidator(
     r'^[-a-z0-9]+$',
     "Provide a valid document name consisting of lowercase letters, numbers and hyphens.",
@@ -1588,9 +1589,17 @@ class BofreqResponsibleDocEvent(DocEvent):
     """ Capture the responsible leadership (IAB and IESG members) for a BOF Request """
     responsible = models.ManyToManyField('person.Person', blank=True)
 
+
+class StoredObjectQuerySet(models.QuerySet):
+    def exclude_deleted(self):
+        return self.filter(deleted__isnull=True)
+
+
 class StoredObject(models.Model):
     """Hold metadata about objects placed in object storage"""
 
+    objects = StoredObjectQuerySet.as_manager() 
+
     store = models.CharField(max_length=256)
     name = models.CharField(max_length=1024, null=False, blank=False) # N.B. the 1024 limit on name comes from S3
     sha384 = models.CharField(max_length=96)
diff --git a/ietf/doc/storage.py b/ietf/doc/storage.py
index a234ef2d4f..375620ccaf 100644
--- a/ietf/doc/storage.py
+++ b/ietf/doc/storage.py
@@ -32,7 +32,7 @@ def __init__(self, file, name, mtime=None, content_type="", store=None, doc_name
     @classmethod
     def from_storedobject(cls, file, name, store):
         """Alternate constructor for objects that already exist in the StoredObject table"""
-        stored_object = StoredObject.objects.filter(store=store, name=name, deleted__isnull=True).first()
+        stored_object = StoredObject.objects.exclude_deleted().filter(store=store, name=name).first()
         if stored_object is None:
             raise FileNotFoundError(f"StoredObject for {store}:{name} does not exist or was deleted")
         file = cls(file, name, store, doc_name=stored_object.doc_name, doc_rev=stored_object.doc_rev)
@@ -140,7 +140,11 @@ def _save_stored_object(self, name, content) -> StoredObject:
                 ),
             ),
         )
-        if not created:
+        if not created and (
+            record.sha384 != content.custom_metadata["sha384"]
+            or record.len != int(content.custom_metadata["len"])
+            or record.deleted is not None
+        ):
             record.sha384 = content.custom_metadata["sha384"]
             record.len = int(content.custom_metadata["len"])
             record.modified = now
@@ -160,7 +164,7 @@ def _delete_stored_object(self, name) -> Optional[StoredObject]:
         else:
             now = timezone.now()
             # Note that existing_record is a queryset that will have one matching object
-            existing_record.filter(deleted__isnull=True).update(deleted=now)
+            existing_record.exclude_deleted().update(deleted=now)
         return existing_record.first()
 
     def _save(self, name, content):
diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 510c98c4f5..81588c83ec 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -12,6 +12,14 @@
 from ietf.utils.log import log
 
 
+class StorageUtilsError(Exception):
+    pass
+
+
+class AlreadyExistsError(StorageUtilsError):
+    pass
+
+
 def _get_storage(kind: str) -> Storage:
     if kind in settings.ARTIFACT_STORAGE_NAMES:
         return storages[kind]
@@ -70,7 +78,7 @@ def store_file(
             # debug.show('f"Asked to store {name} in {kind}: is_new={is_new}, allow_overwrite={allow_overwrite}"')
             if not allow_overwrite and not is_new:
                 debug.show('f"Failed to save {kind}:{name} - name already exists in store"')
-                raise RuntimeError(f"Failed to save {kind}:{name} - name already exists in store")
+                raise AlreadyExistsError(f"Failed to save {kind}:{name} - name already exists in store")
             new_name = _get_storage(kind).save(
                 name,
                 StoredObjectFile(
@@ -85,7 +93,7 @@ def store_file(
             if new_name != name:
                 complaint = f"Error encountered saving '{name}' - results stored in '{new_name}' instead."
                 debug.show("complaint")
-                raise RuntimeError(complaint)
+                raise StorageUtilsError(complaint)
         except Exception as err:
             log(f"Blobstore Error: Failed to store file {kind}:{name}: {repr(err)}")
             if settings.SERVER_MODE == "development":
diff --git a/ietf/doc/views_material.py b/ietf/doc/views_material.py
index 6f8b8a8f12..eefac0ca61 100644
--- a/ietf/doc/views_material.py
+++ b/ietf/doc/views_material.py
@@ -22,6 +22,7 @@
 from ietf.doc.utils import add_state_change_event, check_common_doc_name_rules
 from ietf.group.models import Group
 from ietf.group.utils import can_manage_materials
+from ietf.meeting.utils import resolve_uploaded_material
 from ietf.utils import log
 from ietf.utils.decorators import ignore_view_kwargs
 from ietf.utils.meetecho import MeetechoAPIError, SlidesManager
@@ -179,6 +180,9 @@ def edit_material(request, name=None, acronym=None, action=None, doc_type=None):
                             "There was an error creating a hardlink at %s pointing to %s: %s"
                             % (ftp_filepath, filepath, ex)
                         )
+                else:
+                    for meeting in set([s.meeting for s in doc.session_set.all()]):
+                        resolve_uploaded_material(meeting=meeting, doc=doc)
 
             if prev_rev != doc.rev:
                 e = NewRevisionDocEvent(type="new_revision", doc=doc, rev=doc.rev)
diff --git a/ietf/meeting/resources.py b/ietf/meeting/resources.py
index ede2b5b993..88562a88fe 100644
--- a/ietf/meeting/resources.py
+++ b/ietf/meeting/resources.py
@@ -11,11 +11,15 @@
 
 from ietf import api
 
-from ietf.meeting.models import ( Meeting, ResourceAssociation, Constraint, Room, Schedule, Session,
-                                TimeSlot, SchedTimeSessAssignment, SessionPresentation, FloorPlan,
-                                UrlResource, ImportantDate, SlideSubmission, SchedulingEvent,
-                                BusinessConstraint, ProceedingsMaterial, MeetingHost, Attended,
-                                Registration, RegistrationTicket)
+from ietf.meeting.models import (Meeting, ResourceAssociation, Constraint, Room,
+                                 Schedule, Session,
+                                 TimeSlot, SchedTimeSessAssignment, SessionPresentation,
+                                 FloorPlan,
+                                 UrlResource, ImportantDate, SlideSubmission,
+                                 SchedulingEvent,
+                                 BusinessConstraint, ProceedingsMaterial, MeetingHost,
+                                 Attended,
+                                 Registration, RegistrationTicket)
 
 from ietf.name.resources import MeetingTypeNameResource
 class MeetingResource(ModelResource):
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index 784eb00d87..c361325f9a 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -1,13 +1,20 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2025, All Rights Reserved
 #
 # Celery task definitions
 #
+import datetime
+
 from celery import shared_task
+# from django.db.models import QuerySet
 from django.utils import timezone
 
 from ietf.utils import log
 from .models import Meeting
-from .utils import generate_proceedings_content
+from .utils import (
+    generate_proceedings_content,
+    resolve_materials_for_one_meeting,
+    store_blobs_for_one_meeting,
+)
 from .views import generate_agenda_data
 from .utils import fetch_attendance_from_meetings
 
@@ -61,3 +68,123 @@ def fetch_meeting_attendance_task():
                     meeting_stats['processed']
                 )
             )
+
+
+def _select_meetings(
+    meetings: list[str] | None = None,
+    meetings_since: str | None = None,
+    meetings_until: str | None = None
+):  # nyah
+    """Select meetings by number or date range"""
+    # IETF-1 = 1986-01-16
+    EARLIEST_MEETING_DATE = datetime.datetime(1986, 1, 1)
+    meetings_since_dt: datetime.datetime | None = None
+    meetings_until_dt: datetime.datetime | None = None
+
+    if meetings_since == "zero":
+        meetings_since_dt = EARLIEST_MEETING_DATE
+    elif meetings_since is not None:
+        try:
+            meetings_since_dt = datetime.datetime.fromisoformat(meetings_since)
+        except ValueError:
+            log.log(
+                "Failed to parse meetings_since='{meetings_since}' with fromisoformat"
+            )
+            raise
+
+    if meetings_until is not None:
+        try:
+            meetings_until_dt = datetime.datetime.fromisoformat(meetings_until)
+        except ValueError:
+            log.log(
+                "Failed to parse meetings_until='{meetings_until}' with fromisoformat"
+            )
+            raise
+        if meetings_since_dt is None:
+            # if we only got meetings_until, start from the first meeting
+            meetings_since_dt = EARLIEST_MEETING_DATE
+
+    if meetings is None:
+        if meetings_since_dt is None:
+            log.log("No meetings requested, doing nothing.")
+            return Meeting.objects.none()
+        meetings_qs = Meeting.objects.filter(date__gte=meetings_since_dt)
+        if meetings_until_dt is not None:
+            meetings_qs = meetings_qs.filter(date__lte=meetings_until_dt)
+            log.log(
+                "Selecting meetings between "
+                f"{meetings_since_dt} and {meetings_until_dt}"
+            )
+        else:
+            log.log(f"Selecting meetings since {meetings_since_dt}")
+    else:
+        if meetings_since_dt is not None:
+            log.log(
+                "Ignoring meetings_since and meetings_until "
+                "because specific meetings were requested."
+            )
+        meetings_qs = Meeting.objects.filter(number__in=meetings)
+    return meetings_qs
+
+
+@shared_task
+def resolve_meeting_materials_task(
+    *,  # only allow kw arguments
+    meetings: list[str] | None=None,
+    meetings_since: str | None=None,
+    meetings_until: str | None=None
+):
+    """Run materials resolver on meetings
+    
+    Can request a set of meetings by number by passing a list in the meetings arg, or
+    by range by passing an iso-format timestamps in meetings_since / meetings_until.
+    To select all meetings, set meetings_since="zero" and omit other parameters. 
+    """
+    meetings_qs = _select_meetings(meetings, meetings_since, meetings_until)
+    for meeting in meetings_qs.order_by("date"):
+        log.log(
+            f"Resolving materials for {meeting.type_id} "
+            f"meeting {meeting.number} ({meeting.date})..."
+        )
+        mark = timezone.now()
+        try:
+            resolve_materials_for_one_meeting(meeting)
+        except Exception as err:
+            log.log(
+                "Exception raised while resolving materials for "
+                f"meeting {meeting.number}: {err}"
+            )
+        else:
+            log.log(f"Resolved in {(timezone.now() - mark).total_seconds():0.3f} seconds.")
+
+
+@shared_task
+def store_meeting_materials_as_blobs_task(
+    *,  # only allow kw arguments
+    meetings: list[str] | None = None,
+    meetings_since: str | None = None,
+    meetings_until: str | None = None
+):
+    """Push meeting materials into the blob store
+
+    Can request a set of meetings by number by passing a list in the meetings arg, or
+    by range by passing an iso-format timestamps in meetings_since / meetings_until.
+    To select all meetings, set meetings_since="zero" and omit other parameters. 
+    """
+    meetings_qs = _select_meetings(meetings, meetings_since, meetings_until)
+    for meeting in meetings_qs.order_by("date"):
+        log.log(
+            f"Creating blobs for materials for {meeting.type_id} "
+            f"meeting {meeting.number} ({meeting.date})..."
+        )
+        mark = timezone.now()
+        try:
+            store_blobs_for_one_meeting(meeting)
+        except Exception as err:
+            log.log(
+                "Exception raised while creating blobs for "
+                f"meeting {meeting.number}: {err}"
+            )
+        else:
+            log.log(
+                f"Blobs created in {(timezone.now() - mark).total_seconds():0.3f} seconds.")
diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index afcf7656f2..bdf3d3d3d3 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -2,6 +2,9 @@
 # -*- coding: utf-8 -*-
 import datetime
 import itertools
+from contextlib import suppress
+from dataclasses import dataclass
+
 import jsonschema
 import os
 import requests
@@ -26,16 +29,33 @@
 import debug                            # pyflakes:ignore
 
 from ietf.dbtemplate.models import DBTemplate
-from ietf.doc.storage_utils import store_bytes, store_str
-from ietf.meeting.models import (Session, SchedulingEvent, TimeSlot,
-    Constraint, SchedTimeSessAssignment, SessionPresentation, Attended,
-    Registration, Meeting, RegistrationTicket)
-from ietf.doc.models import Document, State, NewRevisionDocEvent, StateDocEvent
+from ietf.doc.storage_utils import store_bytes, store_str, AlreadyExistsError
+from ietf.meeting.models import (
+    Session,
+    SchedulingEvent,
+    TimeSlot,
+    Constraint,
+    SchedTimeSessAssignment,
+    SessionPresentation,
+    Attended,
+    Registration,
+    Meeting,
+    RegistrationTicket,
+)
+from ietf.blobdb.models import ResolvedMaterial
+from ietf.doc.models import (
+    Document,
+    State,
+    NewRevisionDocEvent,
+    StateDocEvent,
+    StoredObject,
+)
 from ietf.doc.models import DocEvent
 from ietf.group.models import Group
 from ietf.group.utils import can_manage_materials
 from ietf.name.models import SessionStatusName, ConstraintName, DocTypeName
 from ietf.person.models import Person
+from ietf.utils import markdown
 from ietf.utils.html import clean_html
 from ietf.utils.log import log
 from ietf.utils.timezone import date_today
@@ -220,6 +240,7 @@ def save_bluesheet(request, session, file, encoding='utf-8'):
     save_error = handle_upload_file(file, filename, session.meeting, 'bluesheets', request=request, encoding=encoding)
     if not save_error:
         doc.save_with_history([e])
+        resolve_uploaded_material(meeting=session.meeting, doc=doc)
     return save_error
 
 
@@ -832,6 +853,330 @@ def write_doc_for_session(session, type_id, filename, contents):
     store_str(type_id, filename.name, contents)
     return None
 
+
+@dataclass
+class BlobSpec:
+    bucket: str
+    name: str
+
+
+def resolve_one_material(
+    doc: Document, rev: str | None, ext: str | None
+) -> BlobSpec | None:
+    if doc.type_id is None:
+        log(f"Cannot resolve a doc with no type: {doc.name}")
+        return None
+
+    # Get the Document's base name. It may or may not have an extension.
+    if rev is None:
+        basename = Path(doc.get_base_name())
+    else:
+        basename = Path(f"{doc.name}-{int(rev):02d}")
+
+    # If the document's file exists, the blob is _always_ named with this stem,
+    # even if it's different from the original.
+    blob_stem = Path(f"{doc.name}-{rev or doc.rev}")
+
+    # If we have an extension, either from the URL or the Document's base name, look up
+    # the blob or file or return 404. N.b. the suffix check needs adjustment to handle
+    # a bare "." extension when we reach py3.14.
+    if ext or basename.suffix != "": 
+        if ext:
+            blob_name = str(blob_stem.with_suffix(ext))
+        else:
+            blob_name = str(blob_stem.with_suffix(basename.suffix))
+
+        # See if we have a stored object under that name
+        preferred_blob = (
+            StoredObject.objects.exclude_deleted()
+            .filter(store=doc.type_id, name=blob_name)
+            .first()
+        )
+        if preferred_blob is not None:
+            return BlobSpec(
+                bucket=preferred_blob.store,
+                name=preferred_blob.name,
+            )
+        # No stored object, fall back to the file system.
+        filename = Path(doc.get_file_path()) / basename  # use basename for file
+        if filename.is_file():
+            return BlobSpec(
+                bucket=doc.type_id,
+                name=str(blob_stem.with_suffix(filename.suffix)),
+            )
+        else:
+            return None
+
+    # No extension has been specified so far, so look one up.
+    matching_stored_objects = (
+        StoredObject.objects.exclude_deleted()
+        .filter(
+            store=doc.type_id,
+            name__startswith=f"{blob_stem}.",  # anchor to end with trailing "."
+        )
+        .order_by("name")
+    )  # orders by suffix
+    blob_ext_choices = {
+        Path(stored_obj.name).suffix: stored_obj
+        for stored_obj in matching_stored_objects
+    }
+
+    # Short-circuit to return pdf if present
+    if ".pdf" in blob_ext_choices:
+        pdf_blob = blob_ext_choices[".pdf"]
+        return BlobSpec(
+            bucket=pdf_blob.store,
+            name=str(blob_stem.with_suffix(".pdf")),
+        )
+
+    # Now look for files
+    filename = Path(doc.get_file_path()) / basename
+    file_ext_choices = {
+        # Construct a map from suffix to full filename
+        fn.suffix: fn.name
+        for fn in sorted(filename.parent.glob(filename.stem + ".*"))
+    }
+
+    # Short-circuit to return pdf if we have the file
+    if ".pdf" in file_ext_choices:
+        return BlobSpec(
+            bucket=doc.type_id,
+            name=str(blob_stem.with_suffix(".pdf")),
+        )
+
+    all_exts = set(blob_ext_choices.keys()).union(file_ext_choices.keys())
+    if len(all_exts) > 0:
+        preferred_ext = sorted(all_exts)[0]
+        if preferred_ext in blob_ext_choices:
+            preferred_blob = blob_ext_choices[preferred_ext]
+            return BlobSpec(
+                bucket=preferred_blob.store,
+                name=preferred_blob.name,
+            )
+        else:
+            return BlobSpec(
+                bucket=doc.type_id,
+                name=str(blob_stem.with_suffix(preferred_ext)),
+            )
+
+    return None
+
+
+def resolve_materials_for_one_meeting(meeting: Meeting):
+    start_time = timezone.now()
+    meeting_documents = (
+        Document.objects.filter(
+            type_id__in=settings.MATERIALS_TYPES_SERVED_BY_WORKER
+        ).filter(
+            Q(session__meeting=meeting) | Q(proceedingsmaterial__meeting=meeting)
+        )
+    ).distinct()
+    
+    resolved = []
+    for doc in meeting_documents:
+        # request by doc name with no rev
+        blob = resolve_one_material(doc, rev=None, ext=None)
+        if blob is not None:
+            resolved.append(
+                ResolvedMaterial(
+                    name=doc.name,
+                    meeting_number=meeting.number,
+                    bucket=blob.bucket,
+                    blob=blob.name,
+                )
+            )
+        # request by doc name + rev
+        blob = resolve_one_material(doc, rev=doc.rev, ext=None)
+        if blob is not None:
+            resolved.append(
+                ResolvedMaterial(
+                    name=f"{doc.name}-{doc.rev:02}",
+                    meeting_number=meeting.number,
+                    bucket=blob.bucket,
+                    blob=blob.name,
+                )
+            )
+        # for other revisions, only need request by doc name + rev
+        other_revisions = doc.revisions_by_newrevisionevent()
+        other_revisions.remove(doc.rev)
+        for rev in other_revisions:
+            blob = resolve_one_material(doc, rev=rev, ext=None)
+            if blob is not None:
+                resolved.append(
+                    ResolvedMaterial(
+                        name=f"{doc.name}-{rev:02}",
+                        meeting_number=meeting.number,
+                        bucket=blob.bucket,
+                        blob=blob.name,
+                    )
+                )
+    ResolvedMaterial.objects.bulk_create(
+        resolved,
+        update_conflicts=True,
+        unique_fields=["name", "meeting_number"],
+        update_fields=["bucket", "blob"],
+    )
+    # Warn if any files were updated during the above process
+    last_update = meeting_documents.aggregate(Max("time"))["time__max"]
+    if last_update and last_update > start_time:
+        log(
+            f"Warning: materials for meeting {meeting.number} "
+            "changed during ResolvedMaterial update"
+        )
+
+def resolve_uploaded_material(meeting: Meeting, doc: Document):
+    resolved = []
+    blob = resolve_one_material(doc, rev=None, ext=None)
+    if blob is not None:
+        resolved.append(
+            ResolvedMaterial(
+                name=doc.name,
+                meeting_number=meeting.number,
+                bucket=blob.bucket,
+                blob=blob.name,
+            )
+        )
+    # request by doc name + rev
+    blob = resolve_one_material(doc, rev=doc.rev, ext=None)
+    if blob is not None:
+        resolved.append(
+            ResolvedMaterial(
+                name=f"{doc.name}-{doc.rev:02}",
+                meeting_number=meeting.number,
+                bucket=blob.bucket,
+                blob=blob.name,
+            )
+        )
+    ResolvedMaterial.objects.bulk_create(
+        resolved,
+        update_conflicts=True,
+        unique_fields=["name", "meeting_number"],
+        update_fields=["bucket", "blob"],
+    )
+
+
+def store_blob_for_one_material_file(doc: Document, rev: str, filepath: Path):
+    if not settings.ENABLE_BLOBSTORAGE:
+        raise RuntimeError("Cannot store blobs: ENABLE_BLOBSTORAGE is False")
+
+    bucket = doc.type_id
+    if bucket not in settings.MATERIALS_TYPES_SERVED_BY_WORKER:
+        raise ValueError(f"Bucket {bucket} not found for doc {doc.name}.")
+    blob_stem = f"{doc.name}-{rev}"
+    suffix = filepath.suffix  # includes leading "."
+
+    # Store the file
+    try:
+        file_bytes = filepath.read_bytes()
+    except Exception as err:
+        log(f"Failed to read {filepath}: {err}")
+        raise
+    with suppress(AlreadyExistsError):
+        store_bytes(
+            kind=bucket,
+            name= blob_stem + suffix,
+            content=file_bytes,
+            mtime=datetime.datetime.fromtimestamp(
+                filepath.stat().st_mtime,
+                tz=datetime.UTC,
+            ),
+            allow_overwrite=False,
+            doc_name=doc.name,
+            doc_rev=rev,
+        )
+
+    # Special case: pre-render markdown into HTML as .md.html
+    if suffix == ".md":
+        try:
+            markdown_source = file_bytes.decode("utf-8")
+        except UnicodeDecodeError as err:
+            log(f"Unable to decode {filepath} as UTF-8, treating as latin-1: {err}")
+            markdown_source = file_bytes.decode("latin-1")
+        # render the markdown
+        try:
+            html = render_to_string(
+                "minimal.html",
+                {
+                    "content": markdown.markdown(markdown_source),
+                    "title": blob_stem,
+                    "static_ietf_org": settings.STATIC_IETF_ORG,
+                },
+            )
+        except Exception as err:
+            log(f"Failed to render markdown for {filepath}: {err}")
+        else:
+            # Don't overwrite, but don't fail if the blob exists
+            with suppress(AlreadyExistsError):
+                store_str(
+                    kind=bucket,
+                    name=blob_stem + ".md.html",
+                    content=html,
+                    allow_overwrite=False,
+                    doc_name=doc.name,
+                    doc_rev=rev,
+                    content_type="text/html;charset=utf-8",
+                )
+
+
+def store_blobs_for_one_material_doc(doc: Document):
+    """Ensure that all files related to a materials Document are in the blob store"""
+    if doc.type_id not in settings.MATERIALS_TYPES_SERVED_BY_WORKER:
+        log(f"This method does not handle docs of type {doc.name}")
+        return
+
+    # Store files for current Document / rev
+    file_path = Path(doc.get_file_path())
+    base_name = Path(doc.get_base_name())
+    # .stem would remove directories, so use .with_suffix("")
+    base_name_stem = str(base_name.with_suffix(""))
+    if base_name_stem.endswith(".") and base_name.suffix == "":
+        # In Python 3.14, a trailing "." is a valid suffix, but in prior versions
+        # it is left as part of the stem. The suffix check ensures that either way,
+        # only a single "." will be removed.
+        base_name_stem = base_name_stem[:-1]
+    # Add any we find without the rev
+    for file_to_store in file_path.glob(base_name_stem + ".*"):
+        if not (file_to_store.is_file()):
+            continue
+        try:
+            store_blob_for_one_material_file(doc, doc.rev, file_to_store)
+        except Exception as err:
+            log(
+                f"Failed to store blob for {doc} rev {doc.rev} "
+                f"from {file_to_store}: {err}"
+            )
+
+    # Get other revisions
+    for rev in doc.revisions_by_newrevisionevent():
+        if rev == doc.rev:
+            continue  # already handled this
+
+        # Add some that have the rev
+        for file_to_store in file_path.glob(doc.name + f"-{rev}.*"):
+            if not file_to_store.is_file():
+                continue
+            try:
+                store_blob_for_one_material_file(doc, rev, file_to_store)
+            except Exception as err:
+                log(
+                    f"Failed to store blob for {doc} rev {rev} "
+                    f"from {file_to_store}: {err}"
+                )
+
+
+def store_blobs_for_one_meeting(meeting: Meeting):
+    meeting_documents = (
+        Document.objects.filter(
+            type_id__in=settings.MATERIALS_TYPES_SERVED_BY_WORKER
+        ).filter(
+            Q(session__meeting=meeting) | Q(proceedingsmaterial__meeting=meeting)
+        )
+    ).distinct()
+
+    for doc in meeting_documents:
+        store_blobs_for_one_material_doc(doc)
+
+
 def create_recording(session, url, title=None, user=None):
     '''
     Creates the Document type=recording, setting external_url and creating
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index fcc9312609..cf6fed596b 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -9,6 +9,7 @@
 import json
 import math
 import os
+
 import pytz
 import re
 import tarfile
@@ -27,10 +28,12 @@
 
 from django import forms
 from django.core.cache import caches
+from django.core.files.storage import storages
 from django.shortcuts import render, redirect, get_object_or_404
 from django.http import (HttpResponse, HttpResponseRedirect, HttpResponseForbidden,
                          HttpResponseNotFound, Http404, HttpResponseBadRequest,
-                         JsonResponse, HttpResponseGone, HttpResponseNotAllowed)
+                         JsonResponse, HttpResponseGone, HttpResponseNotAllowed,
+                         FileResponse)
 from django.conf import settings
 from django.contrib import messages
 from django.contrib.auth.decorators import login_required
@@ -48,18 +51,25 @@
 from django.views.decorators.cache import cache_page
 from django.views.decorators.csrf import ensure_csrf_cookie, csrf_exempt
 from django.views.generic import RedirectView
+from rest_framework.status import HTTP_404_NOT_FOUND
 
 import debug                            # pyflakes:ignore
 
 from ietf.doc.fields import SearchableDocumentsField
 from ietf.doc.models import Document, State, DocEvent, NewRevisionDocEvent
-from ietf.doc.storage_utils import remove_from_storage, retrieve_bytes, store_file
+from ietf.doc.storage_utils import (
+    remove_from_storage,
+    retrieve_bytes,
+    store_file,
+)
 from ietf.group.models import Group
 from ietf.group.utils import can_manage_session_materials, can_manage_some_groups, can_manage_group
 from ietf.person.models import Person, User
 from ietf.ietfauth.utils import role_required, has_role, user_is_person
 from ietf.mailtrigger.utils import gather_address_lists
-from ietf.meeting.models import Meeting, Session, Schedule, FloorPlan, SessionPresentation, TimeSlot, SlideSubmission, Attended
+from ietf.meeting.models import Meeting, Session, Schedule, FloorPlan, \
+    SessionPresentation, TimeSlot, SlideSubmission, Attended
+from ..blobdb.models import ResolvedMaterial
 from ietf.meeting.models import ImportantDate, SessionStatusName, SchedulingEvent, SchedTimeSessAssignment, Room, TimeSlotTypeName
 from ietf.meeting.models import Registration
 from ietf.meeting.forms import ( CustomDurationField, SwapDaysForm, SwapTimeslotsForm, ImportMinutesForm,
@@ -83,7 +93,8 @@
     finalize,
     generate_proceedings_content,
     organize_proceedings_sessions,
-    sort_accept_tuple,
+    resolve_uploaded_material,
+    sort_accept_tuple, store_blobs_for_one_material_doc,
 )
 from ietf.meeting.utils import add_event_info_to_session_qs
 from ietf.meeting.utils import session_time_for_sorting
@@ -120,6 +131,8 @@
 
 from icalendar import Calendar, Event
 from ietf.doc.templatetags.ietf_filters import absurl
+from ..api.ietf_utils import requires_api_token
+from ..blobdb.storage import BlobdbStorage, BlobFile
 
 request_summary_exclude_group_types = ['team']
 
@@ -245,21 +258,32 @@ def current_materials(request):
         raise Http404('No such meeting')
 
 
-def _get_materials_doc(meeting, name):
+def _get_materials_doc(name, meeting=None):
     """Get meeting materials document named by name
 
-    Raises Document.DoesNotExist if a match cannot be found.
+    Raises Document.DoesNotExist if a match cannot be found. If meeting is None,
+    matches a name that is associated with _any_ meeting.
     """
+
+    def _matches_meeting(doc, meeting=None):
+        if meeting is None:
+            return doc.get_related_meeting() is not None
+        return doc.get_related_meeting() == meeting
+
     # try an exact match first
     doc = Document.objects.filter(name=name).first()
-    if doc is not None and doc.get_related_meeting() == meeting:
+    if doc is not None and _matches_meeting(doc, meeting):
         return doc, None
+
     # try parsing a rev number
     if "-" in name:
         docname, rev = name.rsplit("-", 1)
         if len(rev) == 2 and rev.isdigit():
             doc = Document.objects.get(name=docname)  # may raise Document.DoesNotExist
-            if doc.get_related_meeting() == meeting and rev in doc.revisions_by_newrevisionevent():
+            if (
+                _matches_meeting(doc, meeting)
+                and rev in doc.revisions_by_newrevisionevent()
+            ):
                 return doc, rev
     # give up
     raise Document.DoesNotExist
@@ -277,7 +301,7 @@ def materials_document(request, document, num=None, ext=None):
     meeting = get_meeting(num, type_in=["ietf", "interim"])
     num = meeting.number
     try:
-        doc, rev = _get_materials_doc(meeting=meeting, name=document)
+        doc, rev = _get_materials_doc(name=document, meeting=meeting)
     except Document.DoesNotExist:
         raise Http404("No such document for meeting %s" % num)
 
@@ -320,6 +344,7 @@ def materials_document(request, document, num=None, ext=None):
                         {
                             "content": markdown.markdown(bytes.decode(encoding=chset)),
                             "title": filename.name,
+                            "static_ietf_org": settings.STATIC_IETF_ORG,
                         },
                     )
                     content_type = content_type.replace("plain", "html", 1)
@@ -334,6 +359,133 @@ def materials_document(request, document, num=None, ext=None):
         return HttpResponseRedirect(redirect_to=doc.get_href(meeting=meeting))
 
 
+@requires_api_token("ietf.meeting.views.api_resolve_materials_name")
+def api_resolve_materials_name_cached(request, document, num=None, ext=None):
+    """Resolve materials name into document to a blob spec
+
+    Returns the bucket/name of a blob in the blob store that corresponds to the named
+    document. Handles resolution of revision if it is not specified and determines the
+    best extension if one is not provided. Response is JSON.
+
+    As of 2025-10-10 we do not have blobs for all materials documents or for every
+    format of every document. This API still returns the bucket/name as if the blob
+    exists. Another API will allow the caller to obtain the file contents using that
+    name if it cannot be retrieved from the blob store.
+    """
+
+    def _error_response(status: int, detail: str):
+        return JsonResponse(
+            {
+                "status": status,
+                "title": "Error",
+                "detail": detail,
+            },
+            status=status,
+        )
+
+    def _response(bucket: str, name: str):
+        return JsonResponse(
+            {
+                "bucket": bucket,
+                "name": name,
+            }
+        )
+
+    try:
+        resolved = ResolvedMaterial.objects.get(
+            meeting_number=num, name=document
+        )
+    except ResolvedMaterial.DoesNotExist:
+        return _error_response(
+            HTTP_404_NOT_FOUND, f"No suitable file for {document} for meeting {num}"
+        )
+    return _response(bucket=resolved.bucket, name=resolved.blob)
+
+
+@requires_api_token
+def api_retrieve_materials_blob(request, bucket, name):
+    """Retrieve contents of a meeting materials blob
+    
+    This is intended as a fallback if the web worker cannot retrieve a blob from
+    the blobstore itself. The most likely cause is retrieving an old materials document
+    that has not been backfilled.
+    
+    If a blob is requested that does not exist, this checks for it on the filesystem
+    and if found, adds it to the blobstore, creates a StoredObject record, and returns
+    the contents as it would have done if the blob was already present.
+    
+    As a special case, if a requested file with extension `.md.html` does not exist
+    but a file with the same name but extension `.md` does, `.md` file will be rendered
+    from markdown to html and returned / stored.
+    """
+    DEFAULT_CONTENT_TYPES = {
+        ".html": "text/html;charset=utf-8",
+        ".md": "text/markdown;charset=utf-8",
+        ".pdf": "application/pdf",
+        ".txt": "text/plain;charset=utf-8",
+    }
+    
+    def _default_content_type(blob_name: str):
+        return DEFAULT_CONTENT_TYPES.get(Path(name).suffix, "application/octet-stream") 
+
+    if not (
+        settings.ENABLE_BLOBSTORAGE
+        and bucket in settings.MATERIALS_TYPES_SERVED_BY_WORKER
+    ):
+        return HttpResponseNotFound(f"Bucket {bucket} not found.")
+    storage = storages[bucket]  # if not configured, a server error will result
+    assert isinstance(storage, BlobdbStorage)
+    try:
+        blob = storage.open(name, "rb")
+    except FileNotFoundError:
+        pass
+    else:
+        # found the blob - return it
+        assert isinstance(blob, BlobFile)
+        return FileResponse(
+            blob,
+            filename=name,
+            content_type=blob.content_type or _default_content_type(name),
+        )
+    
+    # Did not find the blob. Create it if we can 
+    name_as_path = Path(name)
+    if name_as_path.suffixes == [".md", ".html"]:
+        # special case: .md.html means we want to create the .md and the .md.html
+        # will come along as a bonus
+        name_to_store = name_as_path.stem  # removes the .html
+    else:
+        name_to_store = name
+    
+    # See if we have a meeting-related document that matches the requested bucket and
+    # name.
+    try: 
+        doc, rev = _get_materials_doc(Path(name_to_store).stem)
+        if doc.type_id != bucket:
+            raise Document.DoesNotExist
+    except Document.DoesNotExist:
+        return HttpResponseNotFound(
+            f"Document corresponding to {bucket}:{name} not found."
+        )
+    else:
+        # create all missing blobs for the doc while we're at it
+        store_blobs_for_one_material_doc(doc)
+    
+    # If we can make the blob at all, it now exists, so return it or a 404
+    try:
+        blob = storage.open(name, "rb")
+    except FileNotFoundError:
+        return HttpResponseNotFound(f"Object {bucket}:{name} not found.")
+    else:
+        # found the blob - return it
+        assert isinstance(blob, BlobFile)
+        return FileResponse(
+            blob,
+            filename=name,
+            content_type=blob.content_type or _default_content_type(name),
+        )
+    
+
 @login_required
 def materials_editable_groups(request, num=None):
     meeting = get_meeting(num)
@@ -2949,6 +3101,7 @@ def upload_session_minutes(request, session_id, num):
                 form.add_error(None, str(err))
             else:
                 # no exception -- success!
+                resolve_uploaded_material(meeting=session.meeting, doc=session.minutes())
                 messages.success(request, f'Successfully uploaded minutes as revision {session.minutes().rev}.')
                 return redirect('ietf.meeting.views.session_details', num=num, acronym=session.group.acronym)
     else:
@@ -3008,6 +3161,7 @@ def upload_session_narrativeminutes(request, session_id, num):
                 form.add_error(None, str(err))
             else:
                 # no exception -- success!
+                resolve_uploaded_material(meeting=session.meeting, doc=session.narrative_minutes())
                 messages.success(request, f'Successfully uploaded narrative minutes as revision {session.narrative_minutes().rev}.')
                 return redirect('ietf.meeting.views.session_details', num=num, acronym=session.group.acronym)
     else:
@@ -3154,6 +3308,7 @@ def upload_session_agenda(request, session_id, num):
                 form.add_error(None, save_error)
             else:
                 doc.save_with_history([e])
+                resolve_uploaded_material(meeting=session.meeting, doc=doc)
                 messages.success(request, f'Successfully uploaded agenda as revision {doc.rev}.')
                 return redirect('ietf.meeting.views.session_details',num=num,acronym=session.group.acronym)
     else: 
@@ -3337,6 +3492,7 @@ def upload_session_slides(request, session_id, num, name=None):
             else:
                 doc.save_with_history([e])
                 post_process(doc)
+                resolve_uploaded_material(meeting=session.meeting, doc=doc)
 
             # Send MeetEcho updates even if we had a problem saving - that will keep it in sync with the
             # SessionPresentation, which was already saved regardless of problems saving the file.
@@ -4737,6 +4893,7 @@ def err(code, text):
     write_doc_for_session(session, 'chatlog', filename, json.dumps(apidata['chatlog']))
     e = NewRevisionDocEvent.objects.create(doc=doc, rev=doc.rev, by=request.user.person, type='new_revision', desc='New revision available: %s'%doc.rev)
     doc.save_with_history([e])
+    resolve_uploaded_material(meeting=session.meeting, doc=doc)
     return HttpResponse(
         "Done",
         status=200,
@@ -4785,6 +4942,7 @@ def err(code, text):
     write_doc_for_session(session, 'polls', filename, json.dumps(apidata['polls']))
     e = NewRevisionDocEvent.objects.create(doc=doc, rev=doc.rev, by=request.user.person, type='new_revision', desc='New revision available: %s'%doc.rev)
     doc.save_with_history([e])
+    resolve_uploaded_material(meeting=session.meeting, doc=doc)
     return HttpResponse(
         "Done",
         status=200,
@@ -5167,6 +5325,7 @@ def approve_proposed_slides(request, slidesubmission_id, num):
                 doc.store_bytes(target_filename, retrieve_bytes("staging", submission.filename))
                 remove_from_storage("staging", submission.filename)
                 post_process(doc)
+                resolve_uploaded_material(meeting=submission.session.meeting, doc=doc)
                 DocEvent.objects.create(type="approved_slides", doc=doc, rev=doc.rev, by=request.user.person, desc="Slides approved")
 
                 # update meetecho slide info if configured
diff --git a/ietf/settings.py b/ietf/settings.py
index 5e576430ed..eb5f9d2161 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -786,29 +786,29 @@ def skip_unreadable_post(record):
 
 # Storages for artifacts stored as blobs
 ARTIFACT_STORAGE_NAMES: list[str] = [
-    "bofreq",
-    "charter",
-    "conflrev",
     "active-draft",
-    "draft",
-    "slides",
-    "minutes",
     "agenda",
+    "bibxml-ids",
     "bluesheets",
-    "procmaterials",
-    "narrativeminutes",
-    "statement",
-    "statchg",
-    "liai-att",
+    "bofreq",
+    "charter",
     "chatlog",
-    "polls",
-    "staging",
-    "bibxml-ids",
-    "indexes",
+    "conflrev",
+    "draft",
     "floorplan",
+    "indexes",
+    "liai-att",
     "meetinghostlogo",
+    "minutes",
+    "narrativeminutes",
     "photo",
+    "polls",
+    "procmaterials",
     "review",
+    "slides",
+    "staging",
+    "statchg",
+    "statement",
 ]
 for storagename in ARTIFACT_STORAGE_NAMES:
     STORAGES[storagename] = {
@@ -816,6 +816,20 @@ def skip_unreadable_post(record):
         "OPTIONS": {"bucket_name": storagename},
     }
 
+# Buckets / doc types of meeting materials the CF worker is allowed to serve. This
+# differs from the list in Session.meeting_related() by the omission of "recording"
+MATERIALS_TYPES_SERVED_BY_WORKER = [
+    "agenda",
+    "bluesheets",
+    "chatlog",
+    "minutes",
+    "narrativeminutes",
+    "polls",
+    "procmaterials",
+    "slides",
+]
+
+
 # Override this in settings_local.py if needed
 # *_PATH variables ends with a slash/ .
 
diff --git a/ietf/templates/minimal.html b/ietf/templates/minimal.html
index 87f661f501..15c432505e 100644
--- a/ietf/templates/minimal.html
+++ b/ietf/templates/minimal.html
@@ -9,8 +9,8 @@
         <meta http-equiv="X-UA-Compatible" content="IE=edge">
         <title>{{ title }}</title>
         <meta name="viewport" content="width=device-width, initial-scale=1">
-        <link href="{{ settings.STATIC_IETF_ORG }}/fonts/inter/import.css" rel="stylesheet">
-        <link href="{{ settings.STATIC_IETF_ORG }}/fonts/noto-sans-mono/import.css" rel="stylesheet">
+        <link href="{{ static_ietf_org }}/fonts/inter/import.css" rel="stylesheet">
+        <link href="{{ static_ietf_org }}/fonts/noto-sans-mono/import.css" rel="stylesheet">
         <link rel="stylesheet" href="{% static 'ietf/css/ietf.css' %}">
         {# load this in the head, to prevent flickering #}
         <script src="{% static 'ietf/js/theme.js' %}"></script>

From af0bcc743f6e449f93e0c7a7e4f2e2eec3ec76ae Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 23 Oct 2025 17:14:39 -0400
Subject: [PATCH 471/707] docs: Update PostgreSQL version badge in README

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 4e1b7e1a45..dfaf871052 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@
 [![Python Version](https://img.shields.io/badge/python-3.9-blue?logo=python&logoColor=white)](#prerequisites)
 [![Django Version](https://img.shields.io/badge/django-4.x-51be95?logo=django&logoColor=white)](#prerequisites)
 [![Node Version](https://img.shields.io/badge/node.js-16.x-green?logo=node.js&logoColor=white)](#prerequisites)
-[![MariaDB Version](https://img.shields.io/badge/postgres-16-blue?logo=postgresql&logoColor=white)](#prerequisites)
+[![MariaDB Version](https://img.shields.io/badge/postgres-17-blue?logo=postgresql&logoColor=white)](#prerequisites)
 
 ##### The day-to-day front-end to the IETF database for people who work on IETF standards.
 

From f9dea7df9d562ba818cf9224c1594f0e0983cdbe Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 23 Oct 2025 17:24:58 -0400
Subject: [PATCH 472/707] docs: Update Python version badge to 3.12 in README

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index dfaf871052..baffc311e7 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@
 [![Release](https://img.shields.io/github/release/ietf-tools/datatracker.svg?style=flat&maxAge=300)](https://github.com/ietf-tools/datatracker/releases)
 [![License](https://img.shields.io/github/license/ietf-tools/datatracker)](https://github.com/ietf-tools/datatracker/blob/main/LICENSE)
 [![Code Coverage](https://codecov.io/gh/ietf-tools/datatracker/branch/feat/bs5/graph/badge.svg?token=V4DXB0Q28C)](https://codecov.io/gh/ietf-tools/datatracker)  
-[![Python Version](https://img.shields.io/badge/python-3.9-blue?logo=python&logoColor=white)](#prerequisites)
+[![Python Version](https://img.shields.io/badge/python-3.12-blue?logo=python&logoColor=white)](#prerequisites)
 [![Django Version](https://img.shields.io/badge/django-4.x-51be95?logo=django&logoColor=white)](#prerequisites)
 [![Node Version](https://img.shields.io/badge/node.js-16.x-green?logo=node.js&logoColor=white)](#prerequisites)
 [![MariaDB Version](https://img.shields.io/badge/postgres-17-blue?logo=postgresql&logoColor=white)](#prerequisites)

From e0691c17121d2324d812bc68c3943d963d1c5d4d Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 23 Oct 2025 17:30:50 -0400
Subject: [PATCH 473/707] ci: remove assets rsync sync job from
 dev-assets-sync-nightly workflow

Removed the nightly sync job for assets in the workflow.
---
 .github/workflows/dev-assets-sync-nightly.yml | 14 --------------
 1 file changed, 14 deletions(-)

diff --git a/.github/workflows/dev-assets-sync-nightly.yml b/.github/workflows/dev-assets-sync-nightly.yml
index 19933bddfd..4cfbf6365b 100644
--- a/.github/workflows/dev-assets-sync-nightly.yml
+++ b/.github/workflows/dev-assets-sync-nightly.yml
@@ -47,17 +47,3 @@ jobs:
           file: dev/shared-assets-sync/Dockerfile
           push: true
           tags: ghcr.io/ietf-tools/datatracker-rsync-assets:latest
-          
-  sync:
-    name: Run assets rsync
-    if: ${{ always() }}
-    runs-on: [self-hosted, dev-server]
-    needs: [build]
-    steps:
-    - name: Run rsync
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        docker pull ghcr.io/ietf-tools/datatracker-rsync-assets:latest
-        docker run --rm -v dt-assets:/assets ghcr.io/ietf-tools/datatracker-rsync-assets:latest
-        docker image prune -a -f

From 354d83d2fa22f817384a792bcbdef9757771f70a Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 23 Oct 2025 17:34:00 -0400
Subject: [PATCH 474/707] ci: remove sandbox-refresh workflow

---
 .github/workflows/sandbox-refresh.yml | 35 ---------------------------
 1 file changed, 35 deletions(-)
 delete mode 100644 .github/workflows/sandbox-refresh.yml

diff --git a/.github/workflows/sandbox-refresh.yml b/.github/workflows/sandbox-refresh.yml
deleted file mode 100644
index 3ddb119e4f..0000000000
--- a/.github/workflows/sandbox-refresh.yml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: Sandbox Refresh
-
-on:
-  # Run every night
-  schedule:
-   - cron: '0 9 * * *'
-  
-  workflow_dispatch:
-
-jobs:
-  main:
-    name: Refresh DBs
-    runs-on: [self-hosted, dev-server]
-    permissions:
-      contents: read
-      
-    steps:
-    - uses: actions/checkout@v4
-        
-    - name: Refresh DBs
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        echo "Install Deploy to Container CLI dependencies..."
-        cd dev/deploy-to-container
-        npm ci
-        cd ../..
-        echo "Start Refresh..."
-        node ./dev/deploy-to-container/refresh.js
-        
-    - name: Cleanup old docker resources
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        docker image prune -a -f

From 4e6168607cb49abc9341b27049f458bc9363297a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 23 Oct 2025 20:43:04 -0300
Subject: [PATCH 475/707] ci: proceedings cache cfg for prod/tests (#9784)

---
 ietf/settings_testcrawl.py |  4 +++-
 k8s/settings_local.py      | 11 +++++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/ietf/settings_testcrawl.py b/ietf/settings_testcrawl.py
index a1b5ce8946..40744a228d 100644
--- a/ietf/settings_testcrawl.py
+++ b/ietf/settings_testcrawl.py
@@ -27,9 +27,11 @@
             'MAX_ENTRIES': 10000,
         },
     },
+    'proceedings': {
+        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
+    },
     'sessions': {
         'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
-        # No version-specific VERSION setting.
     },
     'htmlized': {
         'BACKEND': 'django.core.cache.backends.dummy.DummyCache',
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index c09bd70c86..f8ffacc83f 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -301,6 +301,17 @@ def _multiline_to_list(s):
         "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         "VERSION": __version__,
         "KEY_PREFIX": "ietf:dt",
+        # Key function is default except with sha384-encoded key
+        "KEY_FUNCTION": lambda key, key_prefix, version: (
+            f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+        ),
+    },
+    "proceedings": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+        # No release-specific VERSION setting.
+        "KEY_PREFIX": "ietf:dt:proceedings",
+        # Key function is default except with sha384-encoded key
         "KEY_FUNCTION": lambda key, key_prefix, version: (
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),

From 6db7d4afbe2b876192d0aa4a63a0bbe98a3806be Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Oct 2025 20:06:53 -0300
Subject: [PATCH 476/707] fix: don't trust libmagic charset recognition (#9815)

---
 ietf/meeting/views.py | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index cf6fed596b..d6b5a1c0db 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -329,7 +329,7 @@ def materials_document(request, document, num=None, ext=None):
     old_proceedings_format = meeting.number.isdigit() and int(meeting.number) <= 96
     if settings.MEETING_MATERIALS_SERVE_LOCALLY or old_proceedings_format:
         bytes = filename.read_bytes()
-        mtype, chset = get_mime_type(bytes)
+        mtype, chset = get_mime_type(bytes)  # chset does not consider entire file!
         content_type = "%s; charset=%s" % (mtype, chset)
 
         if filename.suffix == ".md" and mtype == "text/plain":
@@ -339,15 +339,24 @@ def materials_document(request, document, num=None, ext=None):
                     content_type = content_type.replace("plain", "markdown", 1)
                     break
                 elif atype[0] == "text/html":
+                    # Render markdown, allowing that charset may be inaccurate.
+                    try:
+                        md_src = bytes.decode(
+                            "utf-8" if chset in ["ascii", "us-ascii"] else chset
+                        )
+                    except UnicodeDecodeError:
+                        # latin-1, aka iso8859-1, accepts all 8-bit code points
+                        md_src = bytes.decode("latin-1")
+                    content = markdown.markdown(md_src)  # a string
                     bytes = render_to_string(
                         "minimal.html",
                         {
-                            "content": markdown.markdown(bytes.decode(encoding=chset)),
+                            "content": content,
                             "title": filename.name,
                             "static_ietf_org": settings.STATIC_IETF_ORG,
                         },
-                    )
-                    content_type = content_type.replace("plain", "html", 1)
+                    ).encode("utf-8")
+                    content_type = "text/html; charset=utf-8"
                     break
                 elif atype[0] == "text/plain":
                     break

From 3e34efe74950d7f237171e9ea5cedc24d8d08615 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Oct 2025 20:09:27 -0300
Subject: [PATCH 477/707] chore: update names fixture (#9807)

* chore(dev): update names fixture

* chore(dev): update names fixture again
---
 ietf/name/fixtures/names.json | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 58deb01f0c..64e26e503a 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -650,7 +650,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.1\" target=\"_blank\">4.2.1. Call for Adoption by WG Issued</a>\r\n\r\n The \"Call for Adoption by WG Issued\" state should be used to indicate when an I-D is being considered for adoption by an IETF WG. An I-D that is in this state is actively being considered for adoption and has not yet achieved consensus, preference, or selection in the WG.\r\n\r\n This state may be used to describe an I-D that someone has asked a WG to consider for adoption, if the WG Chair has agreed with the request. This state may also be used to identify an I-D that a WG Chair asked an author to write specifically for consideration as a candidate WG item [WGDTSPEC], and/or an I-D that is listed as a 'candidate draft' in the WG's charter.\r\n\r\n Under normal conditions, it should not be possible for an I-D to be in the \"Call for Adoption by WG Issued\" state in more than one working group at the same time. This said, it is not uncommon for authors to \"shop\" their I-Ds to more than one WG at a time, with the hope of getting their documents adopted somewhere.\r\n\r\n After this state is implemented in the Datatracker, an I-D that is in the \"Call for Adoption by WG Issued\" state will not be able to be \"shopped\" to any other WG without the consent of the WG Chairs and the responsible ADs impacted by the shopping.\r\n\r\n Note that Figure 1 includes an arc leading from this state to outside of the WG state machine. This illustrates that some I-Ds that are considered do not get adopted as WG drafts. An I-D that is not adopted as a WG draft will transition out of the WG state machine and revert back to having no stream-specific state; however, the status change history log of the I-D will record that the I-D was previously in the \"Call for Adoption by WG Issued\" state.",
+      "desc": "A call for adoption of the individual submission document has been issued by the Working Group (WG) chairs.  This call is still running but the WG has not yet reached consensus for adoption.",
       "name": "Call For Adoption By WG Issued",
       "next_states": [
         36,
@@ -666,7 +666,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.2\" target=\"_blank\">4.2.2. Adopted by a WG</a>\r\n\r\n The \"Adopted by a WG\" state describes an individual submission I-D that an IETF WG has agreed to adopt as one of its WG drafts.\r\n\r\n WG Chairs who use this state will be able to clearly indicate when their WGs adopt individual submission I-Ds. This will facilitate the Datatracker's ability to correctly capture \"Replaces\" information for WG drafts and correct \"Replaced by\" information for individual submission I-Ds that have been replaced by WG drafts.\r\n\r\n This state is needed because the Datatracker uses the filename of an I-D as a key to search its database for status information about the I-D, and because the filename of a WG I-D is supposed to be different from the filename of an individual submission I-D. The filename of an individual submission I-D will typically be formatted as 'draft-author-wgname-topic-nn'.\r\n\r\n The filename of a WG document is supposed to be formatted as 'draft- ietf-wgname-topic-nn'.\r\n\r\n An individual I-D that is adopted by a WG may take weeks or months to be resubmitted by the author as a new (version-00) WG draft. If the \"Adopted by a WG\" state is not used, the Datatracker has no way to determine that an I-D has been adopted until a new version of the I-D is submitted to the WG by the author and until the I-D is approved for posting by a WG Chair.",
+      "desc": "The individual submission document has been adopted by the Working Group (WG), but a WG document replacing this document with the typical naming convention of 'draft- ietf-wgname-topic-nn' has not yet been submitted.",
       "name": "Adopted by a WG",
       "next_states": [
         38
@@ -681,7 +681,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.3\" target=\"_blank\">4.2.3. Adopted for WG Info Only</a>\r\n\r\n The \"Adopted for WG Info Only\" state describes a document that contains useful information for the WG that adopted it, but the document is not intended to be published as an RFC. The WG will not actively develop the contents of the I-D or progress it for publication as an RFC. The only purpose of the I-D is to provide information for internal use by the WG.",
+      "desc": "The document is adopted by the Working Group (WG) for its internal use.  The WG has decided that it will not pursue publication of it as an RFC.",
       "name": "Adopted for WG Info Only",
       "next_states": [],
       "order": 3,
@@ -694,7 +694,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.4\" target=\"_blank\">4.2.4. WG Document</a>\r\n\r\n The \"WG Document\" state describes an I-D that has been adopted by an IETF WG and is being actively developed.\r\n\r\n A WG Chair may transition an I-D into the \"WG Document\" state at any time as long as the I-D is not being considered or developed in any other WG.\r\n\r\n Alternatively, WG Chairs may rely upon new functionality to be added to the Datatracker to automatically move version-00 drafts into the \"WG Document\" state as described in Section 4.1.\r\n\r\n Under normal conditions, it should not be possible for an I-D to be in the \"WG Document\" state in more than one WG at a time. This said, I-Ds may be transferred from one WG to another with the consent of the WG Chairs and the responsible ADs.",
+      "desc": "The document has been adopted by the Working Group (WG) and is under development.  A document can only be adopted by one WG at a time.  However, a document may be transferred between WGs.",
       "name": "WG Document",
       "next_states": [
         39,
@@ -712,7 +712,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.5\" target=\"_blank\">4.2.5. Parked WG Document</a>\r\n\r\n A \"Parked WG Document\" is an I-D that has lost its author or editor, is waiting for another document to be written or for a review to be completed, or cannot be progressed by the working group for some other reason.\r\n\r\n Some of the annotation tags described in Section 4.3 may be used in conjunction with this state to indicate why an I-D has been parked, and/or what may need to happen for the I-D to be un-parked.\r\n\r\n Parking a WG draft will not prevent it from expiring; however, this state can be used to indicate why the I-D has stopped progressing in the WG.\r\n\r\n A \"Parked WG Document\" that is not expired may be transferred from one WG to another with the consent of the WG Chairs and the responsible ADs.",
+      "desc": "The Working Group (WG) document is in a temporary state where it will not be actively developed.  The reason for the pause is explained via a datatracker comments section.",
       "name": "Parked WG Document",
       "next_states": [
         38
@@ -727,7 +727,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.6\" target=\"_blank\">4.2.6. Dead WG Document</a>\r\n\r\n A \"Dead WG Document\" is an I-D that has been abandoned. Note that 'Dead' is not always a final state for a WG I-D. If consensus is subsequently achieved, a \"Dead WG Document\" may be resurrected. A \"Dead WG Document\" that is not resurrected will eventually expire.\r\n\r\n Note that an I-D that is declared to be \"Dead\" in one WG and that is not expired may be transferred to a non-dead state in another WG with the consent of the WG Chairs and the responsible ADs.",
+      "desc": "The Working Group (WG) document has been abandoned by the WG.  No further development is planned in this WG.  A decision to resume work on this document and move it out of this state is possible.",
       "name": "Dead WG Document",
       "next_states": [
         38
@@ -742,7 +742,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.7\" target=\"_blank\">4.2.7. In WG Last Call</a>\r\n\r\n A document \"In WG Last Call\" is an I-D for which a WG Last Call (WGLC) has been issued and is in progress.\r\n\r\n Note that conducting a WGLC is an optional part of the IETF WG process, per Section 7.4 of RFC 2418 [RFC2418].\r\n\r\n If a WG Chair decides to conduct a WGLC on an I-D, the \"In WG Last Call\" state can be used to track the progress of the WGLC. The Chair may configure the Datatracker to send a WGLC message to one or more mailing lists when the Chair moves the I-D into this state. The WG Chair may also be able to select a different set of mailing lists for a different document undergoing a WGLC; some documents may deserve coordination with other WGs.\r\n\r\n A WG I-D in this state should remain \"In WG Last Call\" until the WG Chair moves it to another state. The WG Chair may configure the Datatracker to send an e-mail after a specified period of time to remind or 'nudge' the Chair to conclude the WGLC and to determine the next state for the document.\r\n\r\n It is possible for one WGLC to lead into another WGLC for the same document. For example, an I-D that completed a WGLC as an \"Informational\" document may need another WGLC if a decision is taken to convert the I-D into a Standards Track document.",
+      "desc": "The Working Group (WG) document is currently subject to an active WG Last Call (WGLC) review per Section 7.4 of RFC2418.",
       "name": "In WG Last Call",
       "next_states": [
         38,
@@ -759,7 +759,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.8\" target=\"_blank\">4.2.8. Waiting for WG Chair Go-Ahead</a>\r\n\r\n A WG Chair may wish to place an I-D that receives a lot of comments during a WGLC into the \"Waiting for WG Chair Go-Ahead\" state. This state describes an I-D that has undergone a WGLC; however, the Chair is not yet ready to call consensus on the document.\r\n\r\n If comments from the WGLC need to be responded to, or a revision to the I-D is needed, the Chair may place an I-D into this state until all of the WGLC comments are adequately addressed and the (possibly revised) document is in the I-D repository.",
+      "desc": "The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chair(s) are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed",
       "name": "Waiting for WG Chair Go-Ahead",
       "next_states": [
         41,
@@ -775,7 +775,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.9\" target=\"_blank\">4.2.9. WG Consensus: Waiting for Writeup</a>\r\n\r\n A document in the \"WG Consensus: Waiting for Writeup\" state has essentially completed its development within the working group, and is nearly ready to be sent to the IESG for publication. The last thing to be done is the preparation of a protocol writeup by a Document Shepherd. The IESG requires that a document shepherd writeup be completed before publication of the I-D is requested. The IETF document shepherding process and the role of a WG Document Shepherd is described in RFC 4858 [RFC4858]\r\n\r\n A WG Chair may call consensus on an I-D without a formal WGLC and transition an I-D that was in the \"WG Document\" state directly into this state.\r\n\r\n The name of this state includes the words \"Waiting for Writeup\" because a good document shepherd writeup takes time to prepare.",
+      "desc": "The Working Group (WG) document has consensus to proceed to publication.  However, the document is waiting for a document shepherd write-up per RFC4858.",
       "name": "WG Consensus: Waiting for Write-Up",
       "next_states": [
         44
@@ -790,7 +790,7 @@
   },
   {
     "fields": {
-      "desc": "<a href=\"https://www.rfc-editor.org/rfc/rfc6174.html#section-4.2.10\" target=\"_blank\">4.2.10. Submitted to IESG for Publication</a>\r\n\r\n This state describes a WG document that has been submitted to the IESG for publication and that has not been sent back to the working group for revision.\r\n\r\n An I-D in this state may be under review by the IESG, it may have been approved and be in the RFC Editor's queue, or it may have been published as an RFC. Other possibilities exist too. The document may be \"Dead\" (in the IESG state machine) or in a \"Do Not Publish\" state.",
+      "desc": "The Working Group (WG) document has left the WG and been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication.  See the “IESG State” or “RFC Editor State” for further details on the state of the document.",
       "name": "Submitted to IESG for Publication",
       "next_states": [
         38
@@ -2020,7 +2020,7 @@
   },
   {
     "fields": {
-      "desc": "The document has been marked as a candidate for WG adoption by the WG Chair.  This state can be used before a call for adoption is issued (and the document is put in the \"Call For Adoption By WG Issued\" state), to indicate that the document is in the queue for a call for adoption, even if none has been issued yet.",
+      "desc": "The individual submission document has been marked by the Working Group (WG) chairs as a candidate for adoption by the WG, but no adoption call has been started.",
       "name": "Candidate for WG Adoption",
       "next_states": [
         35
@@ -2152,7 +2152,7 @@
   },
   {
     "fields": {
-      "desc": "In some areas, it can be desirable to wait for multiple interoperable implementations before progressing a draft to be an RFC, and in some WGs this is required.  This state should be entered after WG Last Call has completed.",
+      "desc": "The progression of this Working Group (WG) document towards publication is paused as it awaits implementation. The process governing the approach to implementations is WG-specific.",
       "name": "Waiting for Implementation",
       "next_states": [],
       "order": 8,
@@ -2165,7 +2165,7 @@
   },
   {
     "fields": {
-      "desc": "Held by WG, see document history for details.",
+      "desc": "Held by Working Group (WG) chairs for administrative reasons.  See document history for details.",
       "name": "Held by WG",
       "next_states": [],
       "order": 9,
@@ -4473,6 +4473,7 @@
       ],
       "session_purposes": [
         "coding",
+        "open_meeting",
         "presentation",
         "social",
         "tutorial"
@@ -5535,7 +5536,6 @@
       ],
       "desc": "Recipients for a message when a new incoming liaison statement is posted",
       "to": [
-        "liaison_from_contact",
         "liaison_to_contacts"
       ]
     },

From 145b9f76c19030b67628432b5f811a1c3c55c749 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Oct 2025 20:11:52 -0300
Subject: [PATCH 478/707] chore(dev): bump dev blobdb to pg17 (#9806)

---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 8c6e0ea486..2440faf121 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -116,7 +116,7 @@ services:
             - "minio-data:/data"
 
     blobdb:
-        image: postgres:16
+        image: postgres:17
         restart: unless-stopped
         environment:
             POSTGRES_DB: blob

From cbb0e2e3db4cc9e591b4397b7bc6cdebb51cfc8c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 29 Oct 2025 11:18:47 -0300
Subject: [PATCH 479/707] feat: logs in api_retrieve_materials_blob() (#9818)

---
 ietf/meeting/views.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index d6b5a1c0db..69635d6219 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -451,6 +451,7 @@ def _default_content_type(blob_name: str):
     else:
         # found the blob - return it
         assert isinstance(blob, BlobFile)
+        log(f"Materials blob: directly returning {bucket}:{name}")
         return FileResponse(
             blob,
             filename=name,
@@ -473,17 +474,20 @@ def _default_content_type(blob_name: str):
         if doc.type_id != bucket:
             raise Document.DoesNotExist
     except Document.DoesNotExist:
+        log(f"Materials blob: no doc for {bucket}:{name}")
         return HttpResponseNotFound(
             f"Document corresponding to {bucket}:{name} not found."
         )
     else:
         # create all missing blobs for the doc while we're at it
+        log(f"Materials blob: storing blobs for {doc.name}-{doc.rev}")
         store_blobs_for_one_material_doc(doc)
     
     # If we can make the blob at all, it now exists, so return it or a 404
     try:
         blob = storage.open(name, "rb")
     except FileNotFoundError:
+        log(f"Materials blob: no blob for {bucket}:{name}")
         return HttpResponseNotFound(f"Object {bucket}:{name} not found.")
     else:
         # found the blob - return it

From c47fe34b0e409f4811e2f96fc45ec87bc1b7931f Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 3 Nov 2025 09:05:30 -0500
Subject: [PATCH 480/707] fix: include punctuation when tablesorting (#9855)

---
 ietf/static/js/list.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/static/js/list.js b/ietf/static/js/list.js
index 756a75001a..c03368cd72 100644
--- a/ietf/static/js/list.js
+++ b/ietf/static/js/list.js
@@ -16,7 +16,7 @@ function text_sort(a, b, options) {
     // sort by text content
     return prep(a, options).localeCompare(prep(b, options), "en", {
         sensitivity: "base",
-        ignorePunctuation: true,
+        ignorePunctuation: false,
         numeric: true
     });
 }

From 87c3a9db06b784d2cf1484a547171a9783e50fdc Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Mon, 3 Nov 2025 09:08:53 -0500
Subject: [PATCH 481/707] feat(agenda): Show calendar links to all the events
 (#9843)

* feat(agenda): Show calendar links to all the events

* test: Update playwright tests
---
 client/agenda/AgendaScheduleList.vue    | 20 ++++++++++----------
 playwright/tests/meeting/agenda.spec.js |  7 ++++++-
 2 files changed, 16 insertions(+), 11 deletions(-)

diff --git a/client/agenda/AgendaScheduleList.vue b/client/agenda/AgendaScheduleList.vue
index fc8b5fd30f..bbe5dfee8b 100644
--- a/client/agenda/AgendaScheduleList.vue
+++ b/client/agenda/AgendaScheduleList.vue
@@ -398,16 +398,6 @@ const meetingEvents = computed(() => {
             color: 'teal'
           })
         }
-        // -> Calendar item
-        if (item.links.calendar) {
-          links.push({
-            id: `lnk-${item.id}-calendar`,
-            label: 'Calendar (.ics) entry for this session',
-            icon: 'calendar-check',
-            href: item.links.calendar,
-            color: 'pink'
-          })
-        }
       } else {
         // -> Post event
         if (meetingNumberInt >= 60) {
@@ -484,6 +474,16 @@ const meetingEvents = computed(() => {
         }
       }
     }
+    // Add Calendar item for all events that has a calendar link
+    if (item.adjustedEnd > current && item.links.calendar) {
+      links.push({
+        id: `lnk-${item.id}-calendar`,
+        label: 'Calendar (.ics) entry for this session',
+        icon: 'calendar-check',
+        href: item.links.calendar,
+        color: 'pink'
+      })
+    }
 
     // Event icon
     let icon = null
diff --git a/playwright/tests/meeting/agenda.spec.js b/playwright/tests/meeting/agenda.spec.js
index 412a3fe9b8..2248027a38 100644
--- a/playwright/tests/meeting/agenda.spec.js
+++ b/playwright/tests/meeting/agenda.spec.js
@@ -1219,7 +1219,12 @@ test.describe('future - desktop', () => {
             await expect(eventButtons.locator(`#btn-lnk-${event.id}-calendar > i.bi`)).toBeVisible()
           }
         } else {
-          await expect(eventButtons).toHaveCount(0)
+          if (event.links.calendar) {
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-calendar`)).toHaveAttribute('href', event.links.calendar)
+            await expect(eventButtons.locator(`#btn-lnk-${event.id}-calendar > i.bi`)).toBeVisible()
+          } else {
+            await expect(eventButtons).toHaveCount(0)
+          }
         }
       }
     }

From 8da45cb8488345a1f449e6fc7442098cff81e3ff Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 3 Nov 2025 09:10:59 -0500
Subject: [PATCH 482/707] feat: optionally hide room-only schedule diffs
 (#9861)

* feat: optionally hide room-only schedule diffs

* test: update test
---
 ietf/meeting/tests_views.py | 194 +++++++++++++++++++++++++-----------
 ietf/meeting/views.py       |  13 +++
 2 files changed, 151 insertions(+), 56 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index b1bbc62907..50960b5143 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -49,7 +49,11 @@
 from ietf.meeting.helpers import send_interim_minutes_reminder, populate_important_dates, update_important_dates
 from ietf.meeting.models import Session, TimeSlot, Meeting, SchedTimeSessAssignment, Schedule, SessionPresentation, SlideSubmission, SchedulingEvent, Room, Constraint, ConstraintName
 from ietf.meeting.test_data import make_meeting_test_data, make_interim_meeting, make_interim_test_data
-from ietf.meeting.utils import condition_slide_order, generate_proceedings_content
+from ietf.meeting.utils import (
+    condition_slide_order,
+    generate_proceedings_content,
+    diff_meeting_schedules,
+)
 from ietf.meeting.utils import add_event_info_to_session_qs, participants_for_meeting
 from ietf.meeting.utils import create_recording, delete_recording, get_next_sequence, bluesheet_data
 from ietf.meeting.views import session_draft_list, parse_agenda_filter_params, sessions_post_save, agenda_extract_schedule
@@ -4765,73 +4769,151 @@ def test_list_schedules(self):
         self.assertTrue(r.status_code, 200)
 
     def test_diff_schedules(self):
-        meeting = make_meeting_test_data()
-
-        url = urlreverse('ietf.meeting.views.diff_schedules',kwargs={'num':meeting.number})
-        login_testing_unauthorized(self,"secretary", url)
-        r = self.client.get(url)
-        self.assertTrue(r.status_code, 200)
-
-        from_schedule = Schedule.objects.get(meeting=meeting, name="test-unofficial-schedule")
-
-        session1 = Session.objects.filter(meeting=meeting, group__acronym='mars').first()
-        session2 = Session.objects.filter(meeting=meeting, group__acronym='ames').first()
-        session3 = SessionFactory(meeting=meeting, group=Group.objects.get(acronym='mars'),
-                                  attendees=10, requested_duration=datetime.timedelta(minutes=70),
-                                  add_to_schedule=False)
-        SchedulingEvent.objects.create(session=session3, status_id='schedw', by=Person.objects.first())
-
-        slot2 = TimeSlot.objects.filter(meeting=meeting, type='regular').order_by('-time').first()
-        slot3 = TimeSlot.objects.create(
-            meeting=meeting, type_id='regular', location=slot2.location,
-            duration=datetime.timedelta(minutes=60),
-            time=slot2.time + datetime.timedelta(minutes=60),
+        # Create meeting and some time slots
+        meeting = MeetingFactory(type_id="ietf", populate_schedule=False)
+        rooms = RoomFactory.create_batch(2, meeting=meeting)
+        # first index is room, second is time
+        timeslots = [
+            [
+                TimeSlotFactory(
+                    location=room,
+                    meeting=meeting,
+                    time=datetime.datetime.combine(
+                        meeting.date, datetime.time(9, 0, tzinfo=datetime.UTC)
+                    )
+                ),
+                TimeSlotFactory(
+                    location=room,
+                    meeting=meeting,
+                    time=datetime.datetime.combine(
+                        meeting.date, datetime.time(10, 0, tzinfo=datetime.UTC)
+                    )
+                ),
+                TimeSlotFactory(
+                    location=room,
+                    meeting=meeting,
+                    time=datetime.datetime.combine(
+                        meeting.date, datetime.time(11, 0, tzinfo=datetime.UTC)
+                    )
+                ),
+            ]
+            for room in rooms
+        ]
+        sessions = SessionFactory.create_batch(
+            5, meeting=meeting, add_to_schedule=False
         )
 
-        # copy
-        new_url = urlreverse("ietf.meeting.views.new_meeting_schedule", kwargs=dict(num=meeting.number, owner=from_schedule.owner_email(), name=from_schedule.name))
-        r = self.client.post(new_url, {
-            'name': "newtest",
-            'public': "on",
-        })
-        self.assertNoFormPostErrors(r)
+        from_schedule = ScheduleFactory(meeting=meeting)
+        to_schedule = ScheduleFactory(meeting=meeting)
 
-        to_schedule = Schedule.objects.get(meeting=meeting, name='newtest')
+        # sessions[0]: not scheduled in from_schedule, scheduled in to_schedule
+        SchedTimeSessAssignment.objects.create(
+            schedule=to_schedule,
+            session=sessions[0],
+            timeslot=timeslots[0][0],
+        )
+        # sessions[1]: scheduled in from_schedule, not scheduled in to_schedule
+        SchedTimeSessAssignment.objects.create(
+            schedule=from_schedule,
+            session=sessions[1],
+            timeslot=timeslots[0][0],
+        )
+        # sessions[2]: moves rooms, not time
+        SchedTimeSessAssignment.objects.create(
+            schedule=from_schedule,
+            session=sessions[2],
+            timeslot=timeslots[0][1],
+        )
+        SchedTimeSessAssignment.objects.create(
+            schedule=to_schedule,
+            session=sessions[2],
+            timeslot=timeslots[1][1],
+        )
+        # sessions[3]: moves time, not room
+        SchedTimeSessAssignment.objects.create(
+            schedule=from_schedule,
+            session=sessions[3],
+            timeslot=timeslots[1][1],
+        )
+        SchedTimeSessAssignment.objects.create(
+            schedule=to_schedule,
+            session=sessions[3],
+            timeslot=timeslots[1][2],
+        )
+        # sessions[4]: moves room and time
+        SchedTimeSessAssignment.objects.create(
+            schedule=from_schedule,
+            session=sessions[4],
+            timeslot=timeslots[1][0],
+        )
+        SchedTimeSessAssignment.objects.create(
+            schedule=to_schedule,
+            session=sessions[4],
+            timeslot=timeslots[0][2],
+        )
 
-        # make some changes
+        # Check the raw diffs
+        raw_diffs = diff_meeting_schedules(from_schedule, to_schedule)
+        self.assertCountEqual(
+            raw_diffs,
+            [
+                {
+                    "change": "schedule",
+                    "session": sessions[0].pk,
+                    "to": timeslots[0][0].pk,
+                },
+                {
+                    "change": "unschedule",
+                    "session": sessions[1].pk,
+                    "from": timeslots[0][0].pk,
+                },
+                {
+                    "change": "move",
+                    "session": sessions[2].pk,
+                    "from": timeslots[0][1].pk,
+                    "to": timeslots[1][1].pk,
+                },
+                {
+                    "change": "move",
+                    "session": sessions[3].pk,
+                    "from": timeslots[1][1].pk,
+                    "to": timeslots[1][2].pk,
+                },
+                {
+                    "change": "move",
+                    "session": sessions[4].pk,
+                    "from": timeslots[1][0].pk,
+                    "to": timeslots[0][2].pk,
+                },
+            ]
+        )
 
-        edit_url = urlreverse("ietf.meeting.views.edit_meeting_schedule", kwargs=dict(num=meeting.number, owner=to_schedule.owner_email(), name=to_schedule.name))
+        # Check the view
+        url = urlreverse("ietf.meeting.views.diff_schedules",
+                         kwargs={"num": meeting.number})
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        self.assertTrue(r.status_code, 200)
 
-        # schedule session
-        r = self.client.post(edit_url, {
-            'action': 'assign',
-            'timeslot': slot3.pk,
-            'session': session3.pk,
-        })
-        self.assertEqual(json.loads(r.content)['success'], True)
-        # unschedule session
-        r = self.client.post(edit_url, {
-            'action': 'unassign',
-            'session': session1.pk,
-        })
-        self.assertEqual(json.loads(r.content)['success'], True)
-        # move session
-        r = self.client.post(edit_url, {
-            'action': 'assign',
-            'timeslot': slot2.pk,
-            'session': session2.pk,
+        # with show room changes disabled - does not show sessions[2] because it did 
+        # not change time
+        r = self.client.get(url, {
+            "from_schedule": from_schedule.name,
+            "to_schedule": to_schedule.name,
         })
-        self.assertEqual(json.loads(r.content)['success'], True)
+        self.assertTrue(r.status_code, 200)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q(".schedule-diffs tr")), 4 + 1)
 
-        # now get differences
+        # with show room changes enabled - shows all changes
         r = self.client.get(url, {
-            'from_schedule': from_schedule.name,
-            'to_schedule': to_schedule.name,
+            "from_schedule": from_schedule.name,
+            "to_schedule": to_schedule.name,
+            "show_room_changes": "on",
         })
         self.assertTrue(r.status_code, 200)
-
         q = PyQuery(r.content)
-        self.assertEqual(len(q(".schedule-diffs tr")), 3+1)
+        self.assertEqual(len(q(".schedule-diffs tr")), 5 + 1)
 
     def test_delete_schedule(self):
         url = urlreverse('ietf.meeting.views.delete_schedule',
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 69635d6219..b0c46cb05a 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -1675,6 +1675,11 @@ def list_schedules(request, num):
 class DiffSchedulesForm(forms.Form):
     from_schedule = forms.ChoiceField()
     to_schedule = forms.ChoiceField()
+    show_room_changes = forms.BooleanField(
+        initial=False,
+        required=False,
+        help_text="Include changes to room without a date or time change",
+    )
 
     def __init__(self, meeting, user, *args, **kwargs):
         super().__init__(*args, **kwargs)
@@ -1707,6 +1712,14 @@ def diff_schedules(request, num):
             raw_diffs = diff_meeting_schedules(from_schedule, to_schedule)
 
             diffs = prefetch_schedule_diff_objects(raw_diffs)
+            if not form.cleaned_data["show_room_changes"]:
+                # filter out room-only changes
+                diffs = [
+                    d
+                    for d in diffs
+                    if (d["change"] != "move") or (d["from"].time != d["to"].time)
+                ]
+
             for d in diffs:
                 s = d['session']
                 s.session_label = s.short_name

From 9546e15224df7d8d9f385a8f670cd27012d7aee5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 3 Nov 2025 09:11:32 -0500
Subject: [PATCH 483/707] fix: no autoescape for bluesheet template (#9858)

---
 ietf/templates/meeting/bluesheet.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ietf/templates/meeting/bluesheet.txt b/ietf/templates/meeting/bluesheet.txt
index dd3bf36ac7..5b3960f3aa 100644
--- a/ietf/templates/meeting/bluesheet.txt
+++ b/ietf/templates/meeting/bluesheet.txt
@@ -1,7 +1,8 @@
-Bluesheet for {{session}}
+{% autoescape off %}Bluesheet for {{session}}
 ========================================================================
 
 {{ data|length }} attendees.
 
 {% for item in data %}
 {{ item.name }}	{{ item.affiliation }}{% endfor %}
+{% endautoescape %}

From 7b4035d7fcd1130cdf8e08b3aa54efda35087a8a Mon Sep 17 00:00:00 2001
From: Tero Kivinen <kivinen@iki.fi>
Date: Mon, 3 Nov 2025 18:16:33 +0200
Subject: [PATCH 484/707] fix: Change add period button to save new period.
 (#9847)

---
 ietf/templates/group/change_reviewer_settings.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/group/change_reviewer_settings.html b/ietf/templates/group/change_reviewer_settings.html
index 9ecec5633c..75451fdd75 100644
--- a/ietf/templates/group/change_reviewer_settings.html
+++ b/ietf/templates/group/change_reviewer_settings.html
@@ -89,7 +89,7 @@ <h2 class="mt-5">Unavailable periods</h2>
             <button type="submit"
                     class="btn btn-primary"
                     name="action"
-                    value="add_period">Add period</button>
+                    value="add_period">Save new period</button>
         </form>
     </div>
     <h2 class="mt-5">History of settings</h2>

From 1ba63977c00121572048c506289f88d41ce67291 Mon Sep 17 00:00:00 2001
From: Matthew Holloway <matthew@holloway.co.nz>
Date: Tue, 4 Nov 2025 06:26:25 +1300
Subject: [PATCH 485/707] fix: ask google not to index noscript content (#9844)

---
 ietf/templates/base.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/base.html b/ietf/templates/base.html
index aa44955527..d8ff85f86e 100644
--- a/ietf/templates/base.html
+++ b/ietf/templates/base.html
@@ -96,7 +96,7 @@
                     </div>
                 {% endif %}
                 <div class="col mx-lg-3 ietf-auto-nav" id="content">
-                    <noscript>
+                    <noscript data-nosnippet>
                         <div class="alert alert-danger alert-ignore my-3">
                             <b>Javascript disabled?</b> Like other modern websites, the IETF Datatracker relies on Javascript.
                             Please enable Javascript for full functionality.

From 8d876c0bd422de4f297a4064119b0377e9dde659 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 3 Nov 2025 17:50:39 -0500
Subject: [PATCH 486/707] feat: remove restrictions on sending incoming
 liaisons (#9859)

* feat: remove restrictions on sending incoming liaisons

* chore: remove flake and ruff imports
---
 ietf/liaisons/forms.py     | 16 +---------------
 ietf/liaisons/tests.py     | 33 ---------------------------------
 ietf/liaisons/views.py     | 36 ++++++++++--------------------------
 ietf/static/js/liaisons.js | 13 +------------
 4 files changed, 12 insertions(+), 86 deletions(-)

diff --git a/ietf/liaisons/forms.py b/ietf/liaisons/forms.py
index 1747e55571..6ceda5ad38 100644
--- a/ietf/liaisons/forms.py
+++ b/ietf/liaisons/forms.py
@@ -23,7 +23,7 @@
 from ietf.liaisons.fields import SearchableLiaisonStatementsField
 from ietf.liaisons.models import (LiaisonStatement,
                                   LiaisonStatementEvent, LiaisonStatementAttachment, LiaisonStatementPurposeName)
-from ietf.liaisons.utils import get_person_for_user, is_authorized_individual, OUTGOING_LIAISON_ROLES, \
+from ietf.liaisons.utils import get_person_for_user, OUTGOING_LIAISON_ROLES, \
     INCOMING_LIAISON_ROLES
 from ietf.liaisons.widgets import ButtonWidget, ShowAttachmentsWidget
 from ietf.name.models import DocRelationshipName
@@ -466,25 +466,11 @@ def set_to_fields(self):
         assert NotImplemented
 
 class IncomingLiaisonForm(LiaisonModelForm):
-    def clean(self):
-        if 'send' in list(self.data.keys()) and self.get_post_only():
-            raise forms.ValidationError('As an IETF Liaison Manager you can not send incoming liaison statements, you only can post them')
-        return super(IncomingLiaisonForm, self).clean()
 
     def is_approved(self):
         '''Incoming Liaison Statements do not required approval'''
         return True
 
-    def get_post_only(self):
-        from_groups = self.cleaned_data.get("from_groups")
-        if (
-            has_role(self.user, "Secretariat")
-            or has_role(self.user, "Liaison Coordinator")
-            or is_authorized_individual(self.user, from_groups)
-        ):
-            return False
-        return True
-
     def set_from_fields(self):
         """Configure from "From" fields based on user roles"""
         qs = external_groups_for_person(self.person)
diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 5478f6c302..1209d7f401 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -203,7 +203,6 @@ def test_ajax(self):
         self.assertEqual(r.status_code, 200)
         data = r.json()
         self.assertEqual(data["error"], False)
-        self.assertEqual(data["post_only"], False)
         self.assertTrue('cc' in data)
         self.assertTrue('needs_approval' in data)
         self.assertTrue('to_contacts' in data)
@@ -871,38 +870,6 @@ def test_add_outgoing_liaison(self):
         self.assertTrue("Liaison Statement" in outbox[-1]["Subject"])
         self.assertTrue('aread@' in outbox[-1]['To'])
         self.assertTrue(submitter.email_address(), outbox[-1]['Cc'])
-        
-
-    def test_add_outgoing_liaison_unapproved_post_only(self):
-        RoleFactory(name_id='liaiman',group__type_id='sdo', person__user__username='ulm-liaiman')
-        mars = RoleFactory(name_id='chair',person__user__username='marschairman',group__acronym='mars').group
-        RoleFactory(name_id='ad',group=mars)
-
-        url = urlreverse('ietf.liaisons.views.liaison_add', kwargs={'type':'outgoing'})
-        login_testing_unauthorized(self, "secretary", url)
-
-        # add new
-        mailbox_before = len(outbox)
-        from_group = Group.objects.get(acronym="mars")
-        to_group = Group.objects.filter(type="sdo")[0]
-        submitter = Person.objects.get(user__username="marschairman")
-        today = date_today(datetime.UTC)
-        r = self.client.post(url,
-                             dict(from_groups=str(from_group.pk),
-                                  from_contact=submitter.email_address(),
-                                  to_groups=str(to_group.pk),
-                                  to_contacts='to_contacts@example.com',
-                                  approved="",
-                                  purpose="info",
-                                  title="title",
-                                  submitted_date=today.strftime("%Y-%m-%d"),
-                                  body="body",
-                                  post_only="1",
-                                  ))
-        self.assertEqual(r.status_code, 302)
-        l = LiaisonStatement.objects.all().order_by("-id")[0]
-        self.assertEqual(l.state.slug,'pending')
-        self.assertEqual(len(outbox), mailbox_before + 1)
 
     def test_liaison_add_attachment(self):
         liaison = LiaisonStatementFactory(deadline=date_today(DEADLINE_TZINFO)+datetime.timedelta(days=1))
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index f54a023357..e2abff52ac 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -118,23 +118,6 @@ def normalize_sort(request):
 
     return sort, order_by
 
-def post_only(group,person):
-    '''Returns true if the user is restricted to post_only (vs. post_and_send) for this
-    group.  This is for incoming liaison statements.
-    - Secretariat have full access.
-    - Authorized Individuals have full access for the group they are associated with
-    - Liaison Managers can post only
-    '''
-    if group.type_id == "sdo" and (
-        not (
-            has_role(person.user, "Secretariat")
-            or has_role(person.user, "Liaison Coordinator")
-            or group.role_set.filter(name="auth", person=person)
-        )
-    ):
-        return True
-    else:
-        return False
 
 # -------------------------------------------------
 # Ajax Functions
@@ -159,15 +142,13 @@ def ajax_get_liaison_info(request):
 
     cc = []
     does_need_approval = []
-    can_post_only = []
     to_contacts = []
     response_contacts = []
-    result = {'response_contacts':[],'to_contacts': [], 'cc': [], 'needs_approval': False, 'post_only': False, 'full_list': []}
+    result = {'response_contacts':[],'to_contacts': [], 'cc': [], 'needs_approval': False, 'full_list': []}
 
     for group in from_groups:
         cc.extend(get_contacts_for_liaison_messages_for_group_primary(group))
         does_need_approval.append(needs_approval(group,person))
-        can_post_only.append(post_only(group,person))
         response_contacts.append(get_contacts_for_liaison_messages_for_group_secondary(group))
 
     for group in to_groups:
@@ -183,12 +164,15 @@ def ajax_get_liaison_info(request):
     else:
         does_need_approval = True
 
-    result.update({'error': False,
-                   'cc': list(set(cc)),
-                   'response_contacts':list(set(response_contacts)),
-                   'to_contacts': list(set(to_contacts)),
-                   'needs_approval': does_need_approval,
-                   'post_only': any(can_post_only)})
+    result.update(
+        {
+            "error": False,
+            "cc": list(set(cc)),
+            "response_contacts": list(set(response_contacts)),
+            "to_contacts": list(set(to_contacts)),
+            "needs_approval": does_need_approval,
+        }
+    )
 
     json_result = json.dumps(result)
     return HttpResponse(json_result, content_type='application/json')
diff --git a/ietf/static/js/liaisons.js b/ietf/static/js/liaisons.js
index e7a76660c9..6c46cb6dfc 100644
--- a/ietf/static/js/liaisons.js
+++ b/ietf/static/js/liaisons.js
@@ -197,16 +197,6 @@ var liaisonForm = {
         }
     },
 
-    checkPostOnly: function (post_only) {
-        if (post_only) {
-            $("button[name=send]")
-                .hide();
-        } else {
-            $("button[name=send]")
-                .show();
-        }
-    },
-
     updateInfo: function (first_time, sender) {
         // don't overwrite fields when editing existing liaison
         if (liaisonForm.is_edit_form) {
@@ -239,7 +229,6 @@ var liaisonForm = {
                         liaisonForm.toggleApproval(response.needs_approval);
                         liaisonForm.response_contacts.val(response.response_contacts);
                     }
-                    liaisonForm.checkPostOnly(response.post_only);
                 }
             }
         });
@@ -326,4 +315,4 @@ $(document)
             .each(liaisonForm.init);
         $('#liaison_search_form')
             .each(searchForm.init);
-    });
\ No newline at end of file
+    });

From a3836949eb827b7b70b22fb09187ba5c202a4d60 Mon Sep 17 00:00:00 2001
From: Peter Yee <github@houseofyee.com>
Date: Mon, 3 Nov 2025 18:11:21 -0500
Subject: [PATCH 487/707] feat(meetings): Use "Decline and Delete" for slide
 disapprovals (#9842)

* feat(meetings): Use "Decline and Delete" for slide disapprovals

Changes use of "disapprove" and "rejected" to "decline" and "declined"
when dealing with slides that have been submitted for approval.

Responds to #9242

* feat(meetings): Use "Decline and Delete" for slide disapprovals

Now with a fix for a test that broke owing to the original change.

Still responds to #9242
---
 ietf/meeting/tests_views.py                            | 2 +-
 ietf/meeting/views.py                                  | 2 +-
 ietf/templates/meeting/approve_proposed_slides.html    | 4 ++--
 ietf/templates/meeting/previously_approved_slides.html | 6 +++---
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 50960b5143..bab2de5ec7 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -7148,7 +7148,7 @@ def test_disapprove_proposed_slides(self):
             self.assertFalse(exists_in_storage("staging", submission.filename))
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
-        self.assertRegex(r.content.decode(), r"These\s+slides\s+have\s+already\s+been\s+rejected")
+        self.assertRegex(r.content.decode(), r"These\s+slides\s+have\s+already\s+been\s+declined")
 
     @override_settings(MEETECHO_API_CONFIG="fake settings")  # enough to trigger API calls
     @patch("ietf.meeting.views.SlidesManager")
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index b0c46cb05a..3484a85784 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -5304,7 +5304,7 @@ def approve_proposed_slides(request, slidesubmission_id, num):
             if request.POST.get('approve'):
                 # Ensure that we have a file to approve.  The system gets cranky otherwise.
                 if submission.filename is None or submission.filename == '' or not os.path.isfile(submission.staged_filepath()):
-                    return HttpResponseNotFound("The slides you attempted to approve could not be found.  Please disapprove and delete them instead.")
+                    return HttpResponseNotFound("The slides you attempted to approve could not be found.  Please decline and delete them instead.")
                 title = form.cleaned_data['title']
                 if existing_doc:
                    doc = Document.objects.get(name=name)
diff --git a/ietf/templates/meeting/approve_proposed_slides.html b/ietf/templates/meeting/approve_proposed_slides.html
index 37fb523394..204473f455 100644
--- a/ietf/templates/meeting/approve_proposed_slides.html
+++ b/ietf/templates/meeting/approve_proposed_slides.html
@@ -34,6 +34,6 @@ <h2>
         <button type="submit"
                 class="btn btn-warning"
                 name="disapprove"
-                value="disapprove">Disapprove and Delete</button>
+                value="disapprove">Decline and Delete</button>
     </form>
-{% endblock %}
\ No newline at end of file
+{% endblock %}
diff --git a/ietf/templates/meeting/previously_approved_slides.html b/ietf/templates/meeting/previously_approved_slides.html
index 25a4c97863..95975cb63f 100644
--- a/ietf/templates/meeting/previously_approved_slides.html
+++ b/ietf/templates/meeting/previously_approved_slides.html
@@ -11,7 +11,7 @@ <h1 class="mb-3">
         {% if submission.status.slug == 'approved' %}
             approved
         {% else %}
-            rejected
+            declined
         {% endif %}
     </h1>
     <p>
@@ -19,7 +19,7 @@ <h1 class="mb-3">
         {% if submission.status.slug == 'approved' %}
             approved.
         {% else %}
-            rejected.
+            declined.
         {% endif %}
         No further action is needed.
     </p>
@@ -33,4 +33,4 @@ <h1 class="mb-3">
             return to this meeting session
         </a>.
     </p>
-{% endblock %}
\ No newline at end of file
+{% endblock %}

From 3c12880650b6f468ab41ec5782f791c3e019b6ef Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Wed, 5 Nov 2025 15:27:52 -0500
Subject: [PATCH 488/707] feat: Add tab for IESG view of working groups (#9841)

* Add tab for WGs. Fixes#9730.

* Update utils.py

Only add WG tabe for the IESG (not the IAB)
---
 ietf/group/utils.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/group/utils.py b/ietf/group/utils.py
index 29cfff2c2d..6777ed1933 100644
--- a/ietf/group/utils.py
+++ b/ietf/group/utils.py
@@ -237,9 +237,10 @@ def construct_group_menu_context(request, group, selected, group_type, others):
         entries.append(("Review requests", urlreverse(ietf.group.views.review_requests, kwargs=kwargs)))
         entries.append(("Reviewers", urlreverse(ietf.group.views.reviewer_overview, kwargs=kwargs)))
         entries.append(("Reviews History", urlreverse(ietf.group.views.review_requests_history, kwargs=kwargs)))
-
     if group.features.has_meetings:
         entries.append(("Meetings", urlreverse("ietf.group.views.meetings", kwargs=kwargs)))
+    if group.acronym in ["iesg"]:
+        entries.append(("Working Groups", urlreverse("ietf.iesg.views.working_groups")))
     if group.acronym in ["iab", "iesg"]:
         entries.append(("Statements", urlreverse("ietf.group.views.statements", kwargs=kwargs)))
         entries.append(("Appeals", urlreverse("ietf.group.views.appeals", kwargs=kwargs)))
@@ -250,7 +251,6 @@ def construct_group_menu_context(request, group, selected, group_type, others):
         if is_valid_url(group.list_archive):
             entries.append((mark_safe("List archive &raquo;"), group.list_archive))
 
-
     # actions
     actions = []
 

From d796aa0a9eee4b705bc072d546b9ce634eb7dd92 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 5 Nov 2025 15:29:08 -0500
Subject: [PATCH 489/707] chore: remove OBE test (#9885)

---
 ietf/liaisons/tests.py | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 1209d7f401..d2f4fafca3 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -1119,17 +1119,6 @@ def test_redirect_for_approval(self):
     # -------------------------------------------------
     # Form validations
     # -------------------------------------------------
-    def test_post_and_send_fail(self):
-        RoleFactory(name_id='liaiman',person__user__username='ulm-liaiman',group__type_id='sdo',group__acronym='ulm')
-        GroupFactory(type_id='wg',acronym='mars')
-
-        url = urlreverse('ietf.liaisons.views.liaison_add', kwargs={'type':'incoming'})
-        login_testing_unauthorized(self, "ulm-liaiman", url)
-
-        r = self.client.post(url,get_liaison_post_data(),follow=True)
-
-        self.assertEqual(r.status_code, 200)
-        self.assertContains(r, 'As an IETF Liaison Manager you can not send incoming liaison statements')
 
     def test_deadline_field(self):
         '''Required for action, comment, not info, response'''

From 2ac61062b4776933a3bb73554963095bf1503760 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 6 Nov 2025 10:33:38 -0500
Subject: [PATCH 490/707] feat: show available sdo groups to liaison
 coordinators and managers (#9856)

* feat: show available sdo groups to liaison coordinators and mamagers

* fix: better typing delcaration

* fix: avoid unneeded whitespace in class declarations
---
 ietf/liaisons/tests.py                      |  11 +++
 ietf/liaisons/urls.py                       |   1 +
 ietf/liaisons/views.py                      |  14 +++
 ietf/templates/base/menu.html               | 102 +++++++++++---------
 ietf/templates/liaisons/list_other_sdo.html |  41 ++++++++
 5 files changed, 122 insertions(+), 47 deletions(-)
 create mode 100644 ietf/templates/liaisons/list_other_sdo.html

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index d2f4fafca3..5e0a237575 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -110,6 +110,17 @@ def test_help_pages(self):
         self.assertEqual(self.client.get('/liaison/help/from_ietf/').status_code, 200)
         self.assertEqual(self.client.get('/liaison/help/to_ietf/').status_code, 200)
 
+    def test_list_other_sdo(self):
+        GroupFactory(type_id="sdo", state_id="conclude", acronym="third")
+        GroupFactory(type_id="sdo", state_id="active", acronym="second")
+        GroupFactory(type_id="sdo", state_id="active", acronym="first")
+        url = urlreverse("ietf.liaisons.views.list_other_sdo")
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        q = PyQuery(r.content)
+        self.assertEqual(len(q("h1")), 2)
+        first_td_elements_text = [e.text for e in q("tr").find("td:first-child")]
+        self.assertEqual(first_td_elements_text, ["first", "second", "third"])
 
 class UnitTests(TestCase):
     def test_get_contacts_for_liaison_messages_for_group_primary(self):
diff --git a/ietf/liaisons/urls.py b/ietf/liaisons/urls.py
index 0fbd29425e..498df3b965 100644
--- a/ietf/liaisons/urls.py
+++ b/ietf/liaisons/urls.py
@@ -37,4 +37,5 @@
     url(r'^add/$', views.redirect_add),
     url(r'^for_approval/$', views.redirect_for_approval),
     url(r'^for_approval/(?P<object_id>\d+)/$', views.redirect_for_approval),
+    url(r"^list_other_sdo/$", views.list_other_sdo),
 ]
diff --git a/ietf/liaisons/views.py b/ietf/liaisons/views.py
index e2abff52ac..59c6ea69fc 100644
--- a/ietf/liaisons/views.py
+++ b/ietf/liaisons/views.py
@@ -509,3 +509,17 @@ def liaison_resend(request, object_id):
     messages.success(request,'Liaison Statement resent')
     return redirect('ietf.liaisons.views.liaison_list')
 
+
+@role_required("Secretariat", "IAB", "Liaison Coordinator", "Liaison Manager")
+def list_other_sdo(request):
+    def _sdo_order_key(obj:Group)-> tuple[str,str]:
+        state_order = {
+            "active" : "a",
+            "conclude": "b",
+        }
+        return (state_order.get(obj.state.slug,f"c{obj.state.slug}"), obj.acronym)
+
+    sdos = sorted(list(Group.objects.filter(type="sdo")),key = _sdo_order_key)
+    for sdo in sdos:
+        sdo.liaison_managers =[r.person for r in sdo.role_set.filter(name="liaiman")]
+    return render(request,"liaisons/list_other_sdo.html",dict(sdos=sdos))
diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 1e7c1688ff..8ff6e952da 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -31,19 +31,19 @@
     {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
     <li {% if flavor == 'top' %}class="dropdown-header"{% else %}class="nav-item fw-bolder"{% endif %}>New work</li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.chartering_groups" %}">
             Chartering groups
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.bofs" group_type="wg" %}">
             BOFs
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_bofreq.bof_requests" %}">
             BOF Requests
         </a>
@@ -51,13 +51,13 @@
     {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
     <li {% if flavor == 'top' %}class="dropdown-header"{% else %}class="nav-item fw-bolder"{% endif %}>Other groups</li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.concluded_groups" %}">
             Concluded groups
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.mailinglists.views.nonwg' %}">
             Non-WG lists
         </a>
@@ -81,26 +81,26 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_search.search" %}">
             Search
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_search.recent_drafts" %}">
             Recent I-Ds
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.submit.views.upload_submission" %}">
             Submit an Internet-Draft
         </a>
     </li>
     {% if user and user.is_authenticated %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
             href="{% url "ietf.community.views.view_list" user.username %}">
             My tracked docs
         </a>
@@ -108,7 +108,7 @@
     {% if user|has_role:"Area Director,Secretariat" %}
         {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
         <li>
-            <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+            <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                 href="{% url 'ietf.doc.views_status_change.rfc_status_changes' %}">
                 RFC status changes
             </a>
@@ -121,19 +121,19 @@
       </a>
       <ul class="dropdown-menu">
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                 href="{% url 'ietf.group.views.appeals' acronym='iesg' %}">
                     IESG appeals
                 </a>
             </li>
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                 href="{% url 'ietf.doc.views_search.ad_workload' %}">
                     IESG dashboard
                 </a>
             </li>
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                 href="{% url 'ietf.group.views.statements' acronym='iesg' %}">
                     IESG statements
                 </a>
@@ -142,7 +142,7 @@
         </li>
         <li><hr class="dropdown-divider"></li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
             href="{% url 'ietf.doc.views_ballot.irsg_ballot_status' %}">
             IRSG ballot status
         </a>
@@ -151,14 +151,14 @@
             {% if flavor == 'top' %}<li><hr class="dropdown-divider"></li>{% endif %}
             <li {% if flavor == 'top' %}class="dropdown-header"{% else %}class="nav-item fw-bolder"{% endif %}>Manage</li>
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                    href="{% url "ietf.submit.views.approvals" %}">
                     Approve an I-D
                 </a>
             </li>
             {% for g in user|docman_groups %}
                 <li>
-                    <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                    <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                        href="{% url "ietf.group.views.group_documents" g.acronym %}">
                         {{ g.acronym }} {{ g.type_id }} docs
                     </a>
@@ -175,7 +175,7 @@
             </li>
             {% for g in user|managed_review_groups %}
                 <li>
-                    <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                    <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                        href="{% url "ietf.group.views.review_requests" g.acronym %}">
                         {{ g.acronym }} reviews
                     </a>
@@ -192,7 +192,7 @@
             </li>
             {% for nomcom in nomcoms %}
                 <li>
-                    <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                    <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                        href="{% url "ietf.nomcom.views.private_index" nomcom.year %}">
                         {{ nomcom|capfirst }}
                     </a>
@@ -208,25 +208,25 @@
         RFC streams
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.stream_documents" acronym="iab" %}">
             IAB
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.stream_documents" acronym="irtf" %}">
             IRTF
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.stream_documents" acronym="ise" %}">
             ISE
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.group.views.stream_documents" acronym="editorial" %}">
             Editorial
         </a>
@@ -239,15 +239,15 @@
         Subseries
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_search.index_subseries" type_id="std" %}">
             STD
         </a>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_search.index_subseries" type_id="bcp" %}">
             BCP
         </a>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.doc.views_search.index_subseries" type_id="fyi" %}">
             FYI
         </a>
@@ -273,37 +273,37 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'agenda' %}">
             Agenda
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views.materials' %}">
             Materials
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'floor-plan' %}">
             Floor plan
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="https://www.ietf.org/how/meetings/register/">
             Registration
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views.important_dates' %}">
             Important dates
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views_session_request.list_view' %}">
             Request a session
         </a>
@@ -317,7 +317,7 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views.meeting_requests' %}">
             Session requests
         </a>
@@ -344,7 +344,7 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views.upcoming' %}">
             Upcoming meetings
         </a>
@@ -359,13 +359,13 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.meeting.views.past' %}">
             Past meetings
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="https://www.ietf.org/how/meetings/past/">
             Meeting proceedings
         </a>
@@ -391,56 +391,64 @@
         </li>
     {% endif %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.ipr.views.showlist' %}">
             IPR disclosures
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.liaisons.views.liaison_list' %}">
             Liaison statements
         </a>
     </li>
+    {% if user|has_role:"Secretariat,IAB,Liaison Manager,Liaison Coordinator" %}
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
+           href="{% url 'ietf.liaisons.views.list_other_sdo' %}">
+            List of other SDO groups
+        </a>
+    </li>
+    {% endif %}
+    <li>
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.iesg.views.agenda' %}">
             IESG agenda
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.nomcom.views.index' %}">
             NomComs
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.doc.views_downref.downref_registry' %}">
             Downref registry
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url "ietf.stats.views.stats_index" %}">
             Statistics
         </a>
         <ul class="dropdown-menu {% if flavor == 'top' %}mt-n1{% else %}ms-n1{% endif %}">
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                    href="{% url 'ietf.stats.views.document_stats' %}">
                     I-Ds/RFCs
                 </a>
             </li>
             <li>
-                <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                    href="{% url 'ietf.stats.views.meeting_stats' %}">
                     Meetings
                 </a>
             </li>
             {% if user and user.is_authenticated %}
                 <li>
-                    <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+                    <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                        href="{% url 'ietf.stats.views.review_stats' %}">
                         Reviews
                     </a>
@@ -449,19 +457,19 @@
         </ul>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.api.views.api_help' %}">
             API Help
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            href="{% url 'ietf.release.views.release' %}">
             Release notes
         </a>
     </li>
     <li>
-        <a class="dropdown-item {% if flavor != 'top' %}text-wrap{% endif %}"
+        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
            target="_blank" href="https://status.ietf.org">
             System status
         </a>
diff --git a/ietf/templates/liaisons/list_other_sdo.html b/ietf/templates/liaisons/list_other_sdo.html
new file mode 100644
index 0000000000..23f2d94af3
--- /dev/null
+++ b/ietf/templates/liaisons/list_other_sdo.html
@@ -0,0 +1,41 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load origin static person_filters %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static 'ietf/css/list.css' %}">
+{% endblock %}
+{% block title %}
+   Other SDO groups
+{% endblock %}
+{% block content %}
+  {% origin %}
+  {% regroup sdos by state.name as sdos_by_state %}
+  {% for sdos_in_state in sdos_by_state %}
+    <h1>{{sdos_in_state.grouper|capfirst}} SDO groups</h1>
+      <table class="table tablesorter table-borderless table-striped table-sm mt-3">
+        <thead>
+          <tr>
+            <th scope="col" data-sort="acronym">Acronym</th>
+            <th scope="col" data-sort="name">Name</th>
+            <th scope="col" data-sort="managers">Liaison Managers</th>
+          </tr>
+        </thead>
+        <tbody>
+          {% for group in sdos_in_state.list%}
+          <tr>
+            <td>{{ group.acronym }}</td>
+            <td>{{ group.name }}</td>
+            <td>
+              {% for person in group.liaison_managers %}
+                {% person_link person %}{% if not forloop.last %}, {% endif %}
+              {% endfor %}
+            </td>
+          </tr>
+          {% endfor %}
+        </tbody>
+    </table>
+  {% endfor %}
+{% endblock %}
+{% block js %}
+    <script src="{% static "ietf/js/list.js" %}"></script>
+{% endblock %}
\ No newline at end of file

From ce91feba9529ed74b8751269e70701b0ebeb70a4 Mon Sep 17 00:00:00 2001
From: Absit Iniuria <absniuria@nours.page>
Date: Fri, 7 Nov 2025 13:22:11 +0000
Subject: [PATCH 491/707] fix: onclick disable submit button (#9878)

---
 ietf/templates/submit/upload_submission.html | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ietf/templates/submit/upload_submission.html b/ietf/templates/submit/upload_submission.html
index 7313d8f000..b8b1aca29c 100644
--- a/ietf/templates/submit/upload_submission.html
+++ b/ietf/templates/submit/upload_submission.html
@@ -73,6 +73,11 @@
         $(document).ready(function() {
             if ($("#checkbox").is(':checked'))
             $("#other-formats").collapse('show')
+
+            $("form").one('submit', function() {
+                $("button").attr('disabled', 'disabled');
+                return true;
+            })
         });
     </script>
 {% endblock %}

From bd6a160508422da82ca24bdeabe08a9b7bcdb16f Mon Sep 17 00:00:00 2001
From: Russ Housley <housley@vigilsec.com>
Date: Fri, 7 Nov 2025 08:24:11 -0500
Subject: [PATCH 492/707] fix: add most recent ballot hint to History tab. 
 (#9851)

* Add most recent ballot hint to History tab. Fixes#9696.

* chore: style nit

* fix: explicitly order queryset

* fix: more precise description of the revision at the time of ballot

* refactor: is None instead of == None

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
Co-authored-by: Jennifer Richards <jeni@borkbork.org>
---
 ietf/doc/tests_utils.py                  | 28 +++++++++++++++++++++++-
 ietf/doc/utils.py                        | 19 +++++++++++++++-
 ietf/doc/views_doc.py                    |  6 +++++
 ietf/templates/doc/document_history.html |  5 +++++
 4 files changed, 56 insertions(+), 2 deletions(-)

diff --git a/ietf/doc/tests_utils.py b/ietf/doc/tests_utils.py
index 7db59819da..ef71f6ae6e 100644
--- a/ietf/doc/tests_utils.py
+++ b/ietf/doc/tests_utils.py
@@ -13,13 +13,15 @@
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.name.models import DocTagName
 from ietf.person.factories import PersonFactory
+from ietf.doc.factories import BallotPositionDocEventFactory
 from ietf.utils.test_utils import TestCase, name_of_file_containing, reload_db_objects
 from ietf.person.models import Person
 from ietf.doc.factories import DocumentFactory, WgRfcFactory, WgDraftFactory
 from ietf.doc.models import State, DocumentActionHolder, DocumentAuthor
 from ietf.doc.utils import (update_action_holders, add_state_change_event, update_documentauthors,
                             fuzzy_find_documents, rebuild_reference_relations, build_file_urls,
-                            ensure_draft_bibxml_path_exists, update_or_create_draft_bibxml_file)
+                            ensure_draft_bibxml_path_exists, update_or_create_draft_bibxml_file,
+                            last_ballot_doc_revision)
 from ietf.utils.draft import Draft, PlaintextDraft
 from ietf.utils.xmldraft import XMLDraft
 
@@ -533,3 +535,27 @@ def test_update_draft_bibxml_file(self, mock):
         self.assertEqual(mock.call_count, 1)
         self.assertEqual(mock.call_args, call(doc, "26"))
         self.assertEqual(ref_path.read_text(), "This\nis\nmy\nbibxml")
+
+
+class LastBallotDocRevisionTests(TestCase):
+    def test_last_ballot_doc_revision(self):
+        now = timezone.now()
+        ad = Person.objects.get(user__username="ad")
+        bpde_with_null_send_email = BallotPositionDocEventFactory(
+            time=now - datetime.timedelta(minutes=30),
+            send_email=None,
+        )
+        ballot = bpde_with_null_send_email.ballot
+        BallotPositionDocEventFactory(
+            ballot=ballot,
+            balloter=ad,
+            pos_id='noobj',
+            comment='Commentary',
+            comment_time=timezone.now(),
+            send_email=None,
+        )
+        doc = bpde_with_null_send_email.doc
+        rev = bpde_with_null_send_email.rev
+        nobody = PersonFactory()
+        self.assertIsNone(last_ballot_doc_revision(doc, nobody))
+        self.assertEqual(rev, last_ballot_doc_revision(doc, ad))
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 115b28b09b..2bd9a3d314 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -36,11 +36,12 @@
 from ietf.doc.models import Document, DocHistory, State, DocumentAuthor, DocHistoryAuthor
 from ietf.doc.models import RelatedDocument, RelatedDocHistory, BallotType, DocReminder
 from ietf.doc.models import DocEvent, ConsensusDocEvent, BallotDocEvent, IRSGBallotDocEvent, NewRevisionDocEvent, StateDocEvent
-from ietf.doc.models import TelechatDocEvent, DocumentActionHolder, EditedAuthorsDocEvent
+from ietf.doc.models import TelechatDocEvent, DocumentActionHolder, EditedAuthorsDocEvent, BallotPositionDocEvent
 from ietf.name.models import DocReminderTypeName, DocRelationshipName
 from ietf.group.models import Role, Group, GroupFeatures
 from ietf.ietfauth.utils import has_role, is_authorized_in_doc_stream, is_individual_draft_author, is_bofreq_editor
 from ietf.person.models import Email, Person
+from ietf.person.utils import get_active_balloters
 from ietf.review.models import ReviewWish
 from ietf.utils import draft, log
 from ietf.utils.mail import parseaddr, send_mail
@@ -687,6 +688,22 @@ def nice_consensus(consensus):
         }
     return mapping[consensus]
 
+def last_ballot_doc_revision(doc, person):
+    """ Return the document revision for the most recent ballot position
+        by the provided user. """
+    ballot = doc.active_ballot()
+    if ballot is None or person is None:
+        return None    
+    balloters = get_active_balloters(ballot.ballot_type)
+    if person not in balloters:
+        return None
+    position_queryset = BallotPositionDocEvent.objects.filter(type="changed_ballot_position", balloter=person, ballot=ballot).order_by("-time")
+    if not position_queryset.exists():
+        return None
+    ballot_time = position_queryset.first().time
+    doc_rev = NewRevisionDocEvent.objects.filter(doc=doc, time__lte=ballot_time).order_by('-time').first().rev
+    return doc_rev
+
 def has_same_ballot(doc, date1, date2=None):
     """ Test if the most recent ballot created before the end of date1
         is the same as the most recent ballot created before the
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 4a20db3c89..50070734f9 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -79,6 +79,7 @@
 from ietf.doc.views_ballot import parse_ballot_edit_return_point
 from ietf.doc.forms import InvestigateForm, TelechatForm, NotifyForm, ActionHoldersForm, DocAuthorForm, DocAuthorChangeBasisForm
 from ietf.doc.mails import email_comment, email_remind_action_holders
+from ietf.doc.utils import last_ballot_doc_revision
 from ietf.mailtrigger.utils import gather_relevant_expansions
 from ietf.meeting.models import Session, SessionPresentation
 from ietf.meeting.utils import group_sessions, get_upcoming_manageable_sessions, sort_sessions, add_event_info_to_session_qs
@@ -1225,6 +1226,10 @@ def document_history(request, name):
             request.user, ("Area Director", "Secretariat", "IRTF Chair")
         )
 
+    # if the current user has balloted on this document, give them a revision hint
+    ballot_doc_rev = None
+    if request.user.is_authenticated:
+        ballot_doc_rev = last_ballot_doc_revision(doc, request.user.person)
 
     return render(
         request,
@@ -1235,6 +1240,7 @@ def document_history(request, name):
             "diff_revisions": diff_revisions,
             "events": events,
             "can_add_comment": can_add_comment,
+            "ballot_doc_rev": ballot_doc_rev,
         },
     )
 
diff --git a/ietf/templates/doc/document_history.html b/ietf/templates/doc/document_history.html
index a9ee3e9a36..78471e08d6 100644
--- a/ietf/templates/doc/document_history.html
+++ b/ietf/templates/doc/document_history.html
@@ -20,6 +20,11 @@
         <h2 class="my-3">Revision differences</h2>
         {% include "doc/document_history_form.html" with doc=doc diff_revisions=diff_revisions action=rfcdiff_base_url snapshot=snapshot only %}
     {% endif %}
+    {% if ballot_doc_rev %}
+        <p class="alert alert-info my-3">
+            Your most recent ballot position was provided when the document was at version {{ ballot_doc_rev }}.
+        </p>
+    {% endif %}
     <h2 class="my-3">Document history</h2>
     {% if doc.came_from_draft %}
         <ul class="nav nav-tabs my-3">

From 1249ace05bc700c1b80e80aee30992eac0595e89 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 7 Nov 2025 14:32:08 -0500
Subject: [PATCH 493/707] feat: add OpenTelemetry integration (#9886)

* feat: initial otel integration

* feat: add traceparent propagation via headers and meta tag

* feat: add memcached instrumentation

* fix: add more otel service attributes

* style: Update dev/build/gunicorn.conf.py

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>

* style: Update dev/build/gunicorn.conf.py

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>

* style: Update dev/build/gunicorn.conf.py

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>

* fix: Update traceparent meta tag to use otel variable

* fix: Update traceparent_id context processor to use sub-object

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 dev/build/gunicorn.conf.py | 36 +++++++++++++++++++++++++++++++++++-
 ietf/context_processors.py |  6 ++++++
 ietf/middleware.py         | 10 ++++++++++
 ietf/settings.py           |  2 ++
 ietf/templates/base.html   |  3 ++-
 requirements.txt           |  6 ++++++
 6 files changed, 61 insertions(+), 2 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 032d95ee0d..c54b24a054 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -1,4 +1,16 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2025, All Rights Reserved
+
+import os
+import ietf
+from opentelemetry import trace
+from opentelemetry.exporter.otlp.proto.http.trace_exporter import OTLPSpanExporter
+from opentelemetry.sdk.resources import Resource
+from opentelemetry.sdk.trace import TracerProvider
+from opentelemetry.sdk.trace.export import BatchSpanProcessor
+from opentelemetry.instrumentation.django import DjangoInstrumentor
+from opentelemetry.instrumentation.psycopg2 import Psycopg2Instrumentor
+from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
+from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
 # Configure security scheme headers for forwarded requests. Cloudflare sets X-Forwarded-Proto 
 # for us. Don't trust any of the other similar headers. Only trust the header if it's coming
@@ -119,3 +131,25 @@ def post_request(worker, req, environ, resp):
     in_flight = in_flight_by_pid.get(worker.pid, [])
     if request_description in in_flight:
         in_flight.remove(request_description)
+
+def post_fork(server, worker):
+    server.log.info("Worker spawned (pid: %s)", worker.pid)
+
+    resource = Resource.create(attributes={
+        "service.name": "datatracker",
+        "service.version": ietf.__version__,
+        "service.instance.id": worker.pid,
+        "service.namespace": "datatracker",
+        "deployment.environment.name": os.environ.get("DATATRACKER_SERVICE_ENV", "dev")
+    })
+
+    trace.set_tracer_provider(TracerProvider(resource=resource))
+    otlp_exporter = OTLPSpanExporter(endpoint="https://heimdall-otlp.ietf.org/v1/traces")
+
+    trace.get_tracer_provider().add_span_processor(BatchSpanProcessor(otlp_exporter))
+
+    # Instrumentations
+    DjangoInstrumentor().instrument()
+    Psycopg2Instrumentor().instrument()
+    PymemcacheInstrumentor().instrument()
+    RequestsInstrumentor().instrument()
diff --git a/ietf/context_processors.py b/ietf/context_processors.py
index baa8d7a5d2..5aaa4ab256 100644
--- a/ietf/context_processors.py
+++ b/ietf/context_processors.py
@@ -5,6 +5,7 @@
 from django.conf import settings
 from django.utils import timezone
 from ietf import __version__, __patch__, __release_branch__, __release_hash__
+from opentelemetry.propagate import inject
 
 def server_mode(request):
     return {'server_mode': settings.SERVER_MODE}
@@ -51,3 +52,8 @@ def timezone_now(request):
     return {
         'timezone_now': timezone.now(),
     }
+
+def traceparent_id(request):
+    context_extras = {}
+    inject(context_extras)
+    return { "otel": context_extras }
diff --git a/ietf/middleware.py b/ietf/middleware.py
index a4b7a0d24c..fa2e8efd0c 100644
--- a/ietf/middleware.py
+++ b/ietf/middleware.py
@@ -8,6 +8,7 @@
 from django.http import HttpResponsePermanentRedirect
 from ietf.utils.log import log, exc_parts
 from ietf.utils.mail import log_smtp_exception
+from opentelemetry.propagate import inject
 import re
 import smtplib
 import unicodedata
@@ -99,3 +100,12 @@ def add_header(request):
         return response
 
     return add_header
+
+def add_otel_traceparent_header(get_response):
+    """Middleware to add the OpenTelemetry traceparent id header to the response"""
+    def add_header(request):
+        response = get_response(request)
+        inject(response)
+        return response
+
+    return add_header
diff --git a/ietf/settings.py b/ietf/settings.py
index eb5f9d2161..f8d8a28d65 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -411,6 +411,7 @@ def skip_unreadable_post(record):
         ],
         'OPTIONS': {
             'context_processors': [
+                'ietf.context_processors.traceparent_id',
                 'django.contrib.auth.context_processors.auth',
                 'django.template.context_processors.debug',     # makes 'sql_queries' available in templates
                 'django.template.context_processors.i18n',
@@ -443,6 +444,7 @@ def skip_unreadable_post(record):
 
 
 MIDDLEWARE = [
+    "ietf.middleware.add_otel_traceparent_header",
     "django.middleware.csrf.CsrfViewMiddleware",
     "corsheaders.middleware.CorsMiddleware", # see docs on CORS_REPLACE_HTTPS_REFERER before using it
     "django.middleware.common.CommonMiddleware",
diff --git a/ietf/templates/base.html b/ietf/templates/base.html
index d8ff85f86e..25ce50c467 100644
--- a/ietf/templates/base.html
+++ b/ietf/templates/base.html
@@ -15,6 +15,7 @@
             {% block title %}No title{% endblock %}
         </title>
         <meta name="viewport" content="width=device-width, initial-scale=1">
+        <meta name="traceparent" content="{{ otel.traceparent }}">
         <link href="{{ settings.STATIC_IETF_ORG }}/fonts/inter/import.css" rel="stylesheet">
         <link href="{{ settings.STATIC_IETF_ORG }}/fonts/noto-sans-mono/import.css" rel="stylesheet">
         <link rel="stylesheet" href="{% static 'ietf/css/ietf.css' %}">
@@ -170,4 +171,4 @@
         </script>
       {% analytical_body_bottom %}
     </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/requirements.txt b/requirements.txt
index cf7c920fa3..02a4cf5fd0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -52,6 +52,12 @@ mock>=5.2.0  # should replace with unittest.mock and remove dependency
 types-mock>=5.2.0
 mypy~=1.7.0  # Version requirements determined by django-stubs.
 oic>=1.7.0  # Used only by tests
+opentelemetry-sdk>=1.38.0
+opentelemetry-instrumentation-django>=0.59b0
+opentelemetry-instrumentation-psycopg2>=0.59b0
+opentelemetry-instrumentation-pymemcache>=0.59b0
+opentelemetry-instrumentation-requests>=0.59b0
+opentelemetry-exporter-otlp-proto-http>=1.38.0
 pillow>=11.3.0
 psycopg2>=2.9.10
 pyang>=2.6.1

From de08e5f0d2e9b862e2a642a7241f62c22be05d38 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Fri, 7 Nov 2025 14:45:02 -0500
Subject: [PATCH 494/707] fix: Milestones date sorting out of order (#9868)

* Add hidden YYYY-MM-DD field to sort

* Also hide for ARIA readers
---
 ietf/templates/group/milestones.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/templates/group/milestones.html b/ietf/templates/group/milestones.html
index df03d370fd..51579ce80a 100644
--- a/ietf/templates/group/milestones.html
+++ b/ietf/templates/group/milestones.html
@@ -20,7 +20,7 @@ <h2 class="my-3">
     <table class="table table-sm table-striped tablesorter">
         <thead>
             <tr>
-                <th class="col-2" scope="col"{% if group.uses_milestone_dates %} data-sort="num"{% endif %}>
+                <th class="col-2" scope="col"{% if group.uses_milestone_dates %} data-sort="num"{% endif %} data-default-sort="asc">
                     {% if group.uses_milestone_dates %}
                         Date
                     {% else %}
@@ -39,7 +39,7 @@ <h2 class="my-3">
                             <span class="badge rounded-pill {% if milestone.resolved|slugify == 'done' %}text-bg-success{% else %}text-bg-warning{% endif %}">{{ milestone.resolved|title }}</span>
                         {% else %}
                             {% if group.uses_milestone_dates %}
-                                {{ milestone.due|date:"M Y" }}
+                                 <span class="d-none" aria-hidden="true">{{ milestone.due }}</span>{{ milestone.due|date:"M Y" }}
                             {% else %}
                                 {% if forloop.first %}Last{% endif %}
                                 {% if forloop.last %}Next{% endif %}

From c8cf9e1e32c087b03b1fc9ce169a3c6f213c4e6a Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Fri, 7 Nov 2025 14:45:43 -0500
Subject: [PATCH 495/707] refactor: use ical for important-dates (#9849)

* refactor: use ical for important-dates

* chore: format and cleanup

* fix: remove unwanted newline
---
 ietf/meeting/views.py                         | 74 +++++++++++++++++--
 ietf/templates/meeting/important_dates.ics    |  5 --
 .../meeting/important_dates_for_meeting.ics   | 24 ------
 3 files changed, 69 insertions(+), 34 deletions(-)
 delete mode 100644 ietf/templates/meeting/important_dates.ics
 delete mode 100644 ietf/templates/meeting/important_dates_for_meeting.ics

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 3484a85784..a4fe498152 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4445,6 +4445,73 @@ def upcoming_ical(request):
     response['Content-Disposition'] = 'attachment; filename="upcoming.ics"'
     return response
     
+def render_important_dates_ical(meetings, request):
+    """Generate important dates using the icalendar library"""
+    cal = Calendar()
+    cal.add("prodid", "-//IETF//datatracker.ietf.org ical importantdates//EN")
+    cal.add("version", "2.0")
+    cal.add("method", "PUBLISH")
+
+    for meeting in meetings:
+        for important_date in meeting.important_dates:
+            event = Event()
+            event.add("uid", f"ietf-{meeting.number}-{important_date.name_id}-"
+                     f"{important_date.date.isoformat()}")
+            event.add("summary", f"IETF {meeting.number}: {important_date.name.name}")
+            event.add("class", "PUBLIC")
+
+            if not important_date.midnight_cutoff:
+                event.add("dtstart", important_date.date)
+            else:
+                event.add("dtstart", datetime.datetime.combine(
+                    important_date.date, 
+                    datetime.time(23, 59, 0, tzinfo=pytz.UTC))
+                )
+
+            event.add("transp", "TRANSPARENT")
+            event.add("dtstamp", meeting.cached_updated)
+            description_lines = [important_date.name.desc]
+            if important_date.name.slug in ('openreg', 'earlybird'):
+                description_lines.append(
+                    "Register here: https://www.ietf.org/how/meetings/register/")
+            if important_date.name.slug == 'opensched':
+                description_lines.append("To request a Working Group session, use the "
+                                         "IETF Meeting Session Request Tool:")
+                description_lines.append(f"{request.scheme}://{request.get_host()}"
+                    f"{reverse('ietf.meeting.views_session_request.list_view')}")
+                description_lines.append("If you are working on a BOF request, it is "
+                                         "highly recommended to tell the IESG")
+                description_lines.append("now by sending an email to iesg@ietf.org "
+                                         "to get advance help with the request.")
+            if important_date.name.slug == 'cutoffwgreq':
+                description_lines.append("To request a Working Group session, use the "
+                                         "IETF Meeting Session Request Tool:")
+                description_lines.append(f"{request.scheme}://{request.get_host()}"
+                    f"{reverse('ietf.meeting.views_session_request.list_view')}")
+            if important_date.name.slug == 'cutoffbofreq':
+                description_lines.append("To request a BOF, please see instructions on "
+                                         "Requesting a BOF:")
+                description_lines.append("https://www.ietf.org/how/bofs/bof-procedures/")
+            if important_date.name.slug == 'idcutoff':
+                description_lines.append("Upload using the I-D Submission Tool:")
+                description_lines.append(f"{request.scheme}://{request.get_host()}"
+                    f"{reverse('ietf.submit.views.upload_submission')}")
+            if important_date.name.slug in (
+                    'draftwgagenda', 
+                    'revwgagenda', 
+                    'procsub', 
+                    'revslug'
+                ):
+                description_lines.append("Upload using the Meeting Materials "
+                                         "Management Tool:")
+                description_lines.append(f"{request.scheme}://{request.get_host()}"
+                    f"{reverse('ietf.meeting.views.materials', 
+                               kwargs={'num': meeting.number})}")
+
+            event.add("description", "\n".join(description_lines))
+            cal.add_component(event)
+
+    return cal.to_ical().decode("utf-8")
 
 def upcoming_json(request):
     '''Return Upcoming meetings in json format'''
@@ -5063,11 +5130,8 @@ def important_dates(request, num=None, output_format=None):
     if output_format == 'ics':
         preprocess_meeting_important_dates(meetings)
 
-        ics = render_to_string('meeting/important_dates.ics', {
-            'meetings': meetings,
-        }, request=request)
-        # icalendar response file should have '\r\n' line endings per RFC5545
-        response = HttpResponse(parse_ical_line_endings(ics), content_type='text/calendar')
+        response = HttpResponse(render_important_dates_ical(meetings, request), 
+                                content_type='text/calendar')
         response['Content-Disposition'] = 'attachment; filename="important-dates.ics"'
         return response
 
diff --git a/ietf/templates/meeting/important_dates.ics b/ietf/templates/meeting/important_dates.ics
deleted file mode 100644
index 35079e01eb..0000000000
--- a/ietf/templates/meeting/important_dates.ics
+++ /dev/null
@@ -1,5 +0,0 @@
-{% load humanize %}{% autoescape off %}{% load ietf_filters %}BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-PRODID:-//IETF//datatracker.ietf.org ical importantdates//EN
-{% for meeting in meetings %}{% include "meeting/important_dates_for_meeting.ics" %}{% endfor %}END:VCALENDAR{% endautoescape %}
diff --git a/ietf/templates/meeting/important_dates_for_meeting.ics b/ietf/templates/meeting/important_dates_for_meeting.ics
deleted file mode 100644
index e6d403da93..0000000000
--- a/ietf/templates/meeting/important_dates_for_meeting.ics
+++ /dev/null
@@ -1,24 +0,0 @@
-{# Copyright The IETF Trust 2025, All Rights Reserved #}
-{% load tz ietf_filters %}{% for d in meeting.important_dates %}BEGIN:VEVENT
-UID:ietf-{{ meeting.number }}-{{ d.name_id }}-{{ d.date.isoformat }}
-SUMMARY:IETF {{ meeting.number }}: {{ d.name.name }}
-CLASS:PUBLIC
-DTSTART{% if not d.midnight_cutoff %};VALUE=DATE{% endif %}:{{ d.date|date:"Ymd" }}{% if d.midnight_cutoff %}235900Z{% endif %}
-DTSTAMP{% ics_date_time meeting.cached_updated|utc 'utc' %}
-TRANSP:TRANSPARENT
-DESCRIPTION:{{ d.name.desc }}{% if first and d.name.slug == 'openreg' or first and d.name.slug == 'earlybird' %}\n
- Register here: https://www.ietf.org/how/meetings/register/{% endif %}{% if d.name.slug == 'opensched' %}\n
- To request a Working Group session, use the IETF Meeting Session Request Tool:\n
- {{ request.scheme }}://{{ request.get_host}}{% url 'ietf.meeting.views_session_request.list_view' %}\n
- If you are working on a BOF request, it is highly recommended to tell the IESG\n
- now by sending an email to iesg@ietf.org to get advance help with the request.{% endif %}{% if d.name.slug == 'cutoffwgreq' %}\n
- To request a Working Group session, use the IETF Meeting Session Request Tool:\n
- {{ request.scheme }}://{{ request.get_host }}{% url 'ietf.meeting.views_session_request.list_view' %}{% endif %}{% if d.name.slug == 'cutoffbofreq' %}\n
- To request a BOF, please see instructions on Requesting a BOF:\n
- https://www.ietf.org/how/bofs/bof-procedures/{% endif %}{% if d.name.slug == 'idcutoff' %}\n
- Upload using the I-D Submission Tool:\n
- {{ request.scheme }}://{{ request.get_host }}{% url 'ietf.submit.views.upload_submission' %}{% endif %}{% if d.name.slug == 'draftwgagenda' or d.name.slug == 'revwgagenda' or d.name.slug == 'procsub' or d.name.slug == 'revslug' %}\n
- Upload using the Meeting Materials Management Tool:\n
- {{ request.scheme }}://{{ request.get_host }}{% url 'ietf.meeting.views.materials' num=meeting.number %}{% endif %}
-END:VEVENT
-{% endfor %}

From 2ea08c696a7317e74e24f50c8b85ffbf91cdfa7b Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Fri, 7 Nov 2025 14:46:46 -0500
Subject: [PATCH 496/707] Sort ADs by full name (#9839)

---
 ietf/doc/views_search.py       | 3 ++-
 ietf/utils/unicodenormalize.py | 9 +++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100644 ietf/utils/unicodenormalize.py

diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 2144c23e06..3b67061b05 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -74,7 +74,7 @@
 from ietf.utils.log import log
 from ietf.doc.utils_search import prepare_document_table, doc_type, doc_state, doc_type_name, AD_WORKLOAD
 from ietf.ietfauth.utils import has_role
-
+from ietf.utils.unicodenormalize import normalize_for_sorting
 
 class SearchForm(forms.Form):
     name = forms.CharField(required=False)
@@ -480,6 +480,7 @@ def _state_to_doc_type(state):
     ).distinct():
         if p in get_active_ads():
             ads.append(p)
+    ads.sort(key=lambda p: normalize_for_sorting(p.plain_name()))
 
     bucket_template = {
         dt: {state: [[] for _ in range(days)] for state in STATE_SLUGS[dt].values()}
diff --git a/ietf/utils/unicodenormalize.py b/ietf/utils/unicodenormalize.py
new file mode 100644
index 0000000000..8644dbdb79
--- /dev/null
+++ b/ietf/utils/unicodenormalize.py
@@ -0,0 +1,9 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import unicodedata
+
+def normalize_for_sorting(text):
+    """Normalize text for proper accent-aware sorting."""
+    # Normalize the text to NFD (decomposed form)
+    decomposed = unicodedata.normalize('NFD', text)
+    # Filter out combining diacritical marks
+    return ''.join(char for char in decomposed if not unicodedata.combining(char))

From bc4752d8a09070680efe0f198fb4f8ac7b125233 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Fri, 7 Nov 2025 14:47:08 -0500
Subject: [PATCH 497/707] fix: AD order in IESG ballots (and other places) does
 not handle UTF-8 collation (#9836)

* Fix the ballot AD order by name

* Also fix the IESG WG dashboard

* Fix IESG milestones under review

* Better normalization by removing completely the diacritical marks

* Align comments

* Test whether areas are alphabetically sorted
---
 ietf/doc/views_doc.py |  4 +-
 ietf/iesg/tests.py    | 89 ++++++++++++++++++++++---------------------
 ietf/iesg/utils.py    |  7 ++--
 ietf/iesg/views.py    |  3 +-
 4 files changed, 53 insertions(+), 50 deletions(-)

diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 50070734f9..5210317325 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -92,7 +92,7 @@
 from ietf.utils.response import permission_denied
 from ietf.utils.text import maybe_split
 from ietf.utils.timezone import date_today
-
+from ietf.utils.unicodenormalize import normalize_for_sorting
 
 def render_document_top(request, doc, tab, name):
     tabs = []
@@ -1506,7 +1506,7 @@ def document_ballot_content(request, doc, ballot_id, editable=True):
     position_groups = []
     for n in BallotPositionName.objects.filter(slug__in=[p.pos_id for p in positions]).order_by('order'):
         g = (n, [p for p in positions if p.pos_id == n.slug])
-        g[1].sort(key=lambda p: (p.is_old_pos, p.balloter.plain_name()))
+        g[1].sort(key=lambda p: (p.is_old_pos, normalize_for_sorting(p.balloter.plain_name())))
         if n.blocking:
             position_groups.insert(0, g)
         else:
diff --git a/ietf/iesg/tests.py b/ietf/iesg/tests.py
index f3778d1ded..e5fbe5da7b 100644
--- a/ietf/iesg/tests.py
+++ b/ietf/iesg/tests.py
@@ -281,12 +281,13 @@ def test_working_groups(self):
             wg_summary,
         ) = get_wg_dashboard_info()
 
+        # checks for the expected result with area sorted by name
         self.assertEqual(
             area_summary,
             [
                 {
-                    "area": "red",
-                    "groups_in_area": 1,
+                    "area": "blue",
+                    "groups_in_area": 3,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -295,8 +296,8 @@ def test_working_groups(self):
                     "page_percent": 0,
                 },
                 {
-                    "area": "orange",
-                    "groups_in_area": 4,
+                    "area": "green",
+                    "groups_in_area": 3,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -305,8 +306,8 @@ def test_working_groups(self):
                     "page_percent": 0,
                 },
                 {
-                    "area": "yellow",
-                    "groups_in_area": 2,
+                    "area": "orange",
+                    "groups_in_area": 4,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -315,8 +316,8 @@ def test_working_groups(self):
                     "page_percent": 0,
                 },
                 {
-                    "area": "green",
-                    "groups_in_area": 3,
+                    "area": "red",
+                    "groups_in_area": 1,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -325,8 +326,8 @@ def test_working_groups(self):
                     "page_percent": 0,
                 },
                 {
-                    "area": "blue",
-                    "groups_in_area": 3,
+                    "area": "violet",
+                    "groups_in_area": 4,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -335,8 +336,8 @@ def test_working_groups(self):
                     "page_percent": 0,
                 },
                 {
-                    "area": "violet",
-                    "groups_in_area": 4,
+                    "area": "yellow",
+                    "groups_in_area": 2,
                     "groups_with_docs": 0,
                     "doc_count": 0,
                     "page_count": 0,
@@ -1192,34 +1193,14 @@ def test_working_groups(self):
             area_summary,
             [
                 {
-                    "area": "red",
-                    "groups_in_area": 1,
-                    "groups_with_docs": 1,
-                    "doc_count": 1,
-                    "page_count": 7,
-                    "group_percent": 6.25,
-                    "doc_percent": 3.571428571428571,
-                    "page_percent": 3.5897435897435894,
-                },
-                {
-                    "area": "orange",
-                    "groups_in_area": 4,
+                    "area": "blue",
+                    "groups_in_area": 3,
                     "groups_with_docs": 3,
-                    "doc_count": 4,
-                    "page_count": 29,
+                    "doc_count": 6,
+                    "page_count": 40,
                     "group_percent": 18.75,
-                    "doc_percent": 14.285714285714285,
-                    "page_percent": 14.871794871794872,
-                },
-                {
-                    "area": "yellow",
-                    "groups_in_area": 2,
-                    "groups_with_docs": 2,
-                    "doc_count": 2,
-                    "page_count": 17,
-                    "group_percent": 12.5,
-                    "doc_percent": 7.142857142857142,
-                    "page_percent": 8.717948717948717,
+                    "doc_percent": 21.428571428571427,
+                    "page_percent": 20.51282051282051,
                 },
                 {
                     "area": "green",
@@ -1232,14 +1213,24 @@ def test_working_groups(self):
                     "page_percent": 11.282051282051283,
                 },
                 {
-                    "area": "blue",
-                    "groups_in_area": 3,
+                    "area": "orange",
+                    "groups_in_area": 4,
                     "groups_with_docs": 3,
-                    "doc_count": 6,
-                    "page_count": 40,
+                    "doc_count": 4,
+                    "page_count": 29,
                     "group_percent": 18.75,
-                    "doc_percent": 21.428571428571427,
-                    "page_percent": 20.51282051282051,
+                    "doc_percent": 14.285714285714285,
+                    "page_percent": 14.871794871794872,
+                },
+                {
+                    "area": "red",
+                    "groups_in_area": 1,
+                    "groups_with_docs": 1,
+                    "doc_count": 1,
+                    "page_count": 7,
+                    "group_percent": 6.25,
+                    "doc_percent": 3.571428571428571,
+                    "page_percent": 3.5897435897435894,
                 },
                 {
                     "area": "violet",
@@ -1251,6 +1242,16 @@ def test_working_groups(self):
                     "doc_percent": 35.714285714285715,
                     "page_percent": 41.02564102564102,
                 },
+                {
+                    "area": "yellow",
+                    "groups_in_area": 2,
+                    "groups_with_docs": 2,
+                    "doc_count": 2,
+                    "page_count": 17,
+                    "group_percent": 12.5,
+                    "doc_percent": 7.142857142857142,
+                    "page_percent": 8.717948717948717,
+                },
             ],
         )
         self.assertEqual(
diff --git a/ietf/iesg/utils.py b/ietf/iesg/utils.py
index 9051cf92b2..1d24ecac8e 100644
--- a/ietf/iesg/utils.py
+++ b/ietf/iesg/utils.py
@@ -12,7 +12,7 @@
 from ietf.group.models import Group
 from ietf.iesg.agenda import get_doc_section
 from ietf.person.utils import get_active_ads
-
+from ietf.utils.unicodenormalize import normalize_for_sorting
 
 TelechatPageCount = namedtuple(
     "TelechatPageCount",
@@ -192,6 +192,7 @@ def get_wg_dashboard_info():
                 else 0,
             }
         )
+    area_summary.sort(key=lambda r: r["area"])
     area_totals = {
         "group_count": groups_total,
         "doc_count": docs_total,
@@ -238,7 +239,7 @@ def get_wg_dashboard_info():
                     else 0,
                 }
             )
-    noad_summary.sort(key=lambda r: (r["ad"], r["area"]))
+    noad_summary.sort(key=lambda r: (normalize_for_sorting(r["ad"]), r["area"]))
 
     ad_summary = []
     ad_totals = {
@@ -278,7 +279,7 @@ def get_wg_dashboard_info():
                     else 0,
                 }
             )
-    ad_summary.sort(key=lambda r: (r["ad"], r["area"]))
+    ad_summary.sort(key=lambda r: (normalize_for_sorting(r["ad"]), r["area"]))
 
     rfc_counter = Counter(
         Document.objects.filter(type="rfc").values_list("group__acronym", flat=True)
diff --git a/ietf/iesg/views.py b/ietf/iesg/views.py
index 014b290425..f03afb9fc1 100644
--- a/ietf/iesg/views.py
+++ b/ietf/iesg/views.py
@@ -68,6 +68,7 @@
 from ietf.meeting.utils import get_activity_stats
 from ietf.doc.utils_search import fill_in_document_table_attributes, fill_in_telechat_date
 from ietf.utils.timezone import date_today, datetime_from_date
+from ietf.utils.unicodenormalize import normalize_for_sorting
 
 def review_decisions(request, year=None):
     events = DocEvent.objects.filter(type__in=("iesg_disapproved", "iesg_approved"))
@@ -547,7 +548,7 @@ def milestones_needing_review(request):
             )
 
     return render(request, 'iesg/milestones_needing_review.html',
-                  dict(ads=sorted(ad_list, key=lambda ad: ad.plain_name()),))
+                  dict(ads=sorted(ad_list, key=lambda ad: normalize_for_sorting(ad.plain_name())),))
 
 def photos(request):
     roles = sorted(Role.objects.filter(group__type='area', group__state='active', name_id='ad'),key=lambda x: "" if x.group.acronym=="gen" else x.group.acronym)

From c43092560c50363f59914205d059fec103350720 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Sun, 9 Nov 2025 10:51:51 -0500
Subject: [PATCH 498/707] fix: add resolver records when importing minutes
 (#9907)

---
 ietf/meeting/views.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index a4fe498152..2ab670a04d 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -5531,6 +5531,7 @@ def import_session_minutes(request, session_id, num):
             except SaveMaterialsError as err:
                 form.add_error(None, str(err))
             else:
+                resolve_uploaded_material(meeting=session.meeting, doc=session.minutes())
                 messages.success(request, f'Successfully imported minutes as revision {session.minutes().rev}.')
                 return redirect('ietf.meeting.views.session_details', num=num, acronym=session.group.acronym)
     else:

From d252e85642261e8881e5fbec2d051e06c1616e07 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Nov 2025 18:38:48 -0500
Subject: [PATCH 499/707] chore(deps): bump actions/setup-node from 4 to 6
 (#9758)

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 2 +-
 .github/workflows/tests.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 7eac7b1c64..24ab51ebcf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -170,7 +170,7 @@ jobs:
         fetch-tags: false
 
     - name: Setup Node.js environment
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: 18.x
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index f10c1db9a3..836314bac0 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -104,7 +104,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
         node-version: '18'
 

From 3f6addc6ebba12536d941b51c252168c9fc4f182 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 12 Nov 2025 10:30:43 -0600
Subject: [PATCH 500/707] fix: link to sdo group page from other sdo list
 (#9920)

---
 ietf/templates/liaisons/list_other_sdo.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/liaisons/list_other_sdo.html b/ietf/templates/liaisons/list_other_sdo.html
index 23f2d94af3..e6a567ae50 100644
--- a/ietf/templates/liaisons/list_other_sdo.html
+++ b/ietf/templates/liaisons/list_other_sdo.html
@@ -23,7 +23,7 @@ <h1>{{sdos_in_state.grouper|capfirst}} SDO groups</h1>
         <tbody>
           {% for group in sdos_in_state.list%}
           <tr>
-            <td>{{ group.acronym }}</td>
+            <td><a href="{% url 'ietf.group.views.group_about' acronym=group.acronym %}">{{ group.acronym }}</a></td>
             <td>{{ group.name }}</td>
             <td>
               {% for person in group.liaison_managers %}

From 8cabf4d6c41ce1a73602b5ac1e1d372086266f71 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 12 Nov 2025 14:55:21 -0600
Subject: [PATCH 501/707] fix(dev): Disable python terminal integration as it
 corrupts the terminal (#9924)

---
 .vscode/settings.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index b0ceba5c9d..b323cd02f7 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -56,5 +56,6 @@
     "python.linting.pylintArgs": ["--load-plugins", "pylint_django"],
     "python.testing.pytestEnabled": false,
     "python.testing.unittestEnabled": false,
-    "python.linting.enabled": true
+    "python.linting.enabled": true,
+    "python.terminal.shellIntegration.enabled": false
 }

From 92f23c0066c439ae7a696ddd8929418698cd9185 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 13 Nov 2025 09:36:52 -0600
Subject: [PATCH 502/707] fix: adjust test for other sdo list page (#9929)

---
 ietf/liaisons/tests.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/liaisons/tests.py b/ietf/liaisons/tests.py
index 5e0a237575..e29045443f 100644
--- a/ietf/liaisons/tests.py
+++ b/ietf/liaisons/tests.py
@@ -119,7 +119,7 @@ def test_list_other_sdo(self):
         r = self.client.get(url)
         q = PyQuery(r.content)
         self.assertEqual(len(q("h1")), 2)
-        first_td_elements_text = [e.text for e in q("tr").find("td:first-child")]
+        first_td_elements_text = [e.text for e in q("tr").find("td:first-child a")]
         self.assertEqual(first_td_elements_text, ["first", "second", "third"])
 
 class UnitTests(TestCase):

From 9244e6107c4923fb6186126302bd6b71000680e3 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 14 Nov 2025 17:37:14 -0500
Subject: [PATCH 503/707] ci(staging): Increase wait-for-completion timeout to
 60 minutes

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 24ab51ebcf..df218930ab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -453,7 +453,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "waitClusterReady":true }'
           wait-for-completion: true
-          wait-for-completion-timeout: 30m
+          wait-for-completion-timeout: 60m
           wait-for-completion-interval: 20s
           display-workflow-run-url: false
 

From 70067702da41414710151e176ddaf57a3bf8ef64 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Tue, 18 Nov 2025 09:19:59 -0500
Subject: [PATCH 504/707] refactor: use ical for upcoming meetings (#9845)

* refactor: use ical for upcoming meetings

* fix: unfold to pass tests

* fix: make material title, type and url on one line
---
 ietf/meeting/tests_views.py         |  7 ++-
 ietf/meeting/views.py               | 69 ++++++++++++++++++++++++-----
 ietf/templates/meeting/upcoming.ics | 32 -------------
 3 files changed, 64 insertions(+), 44 deletions(-)
 delete mode 100644 ietf/templates/meeting/upcoming.ics

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index bab2de5ec7..b94229d969 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -5302,7 +5302,9 @@ def test_upcoming_ical(self):
         assert_ical_response_is_valid(self, r,
                                       expected_event_summaries=expected_event_summaries,
                                       expected_event_count=len(expected_event_summaries))
-        self.assertContains(r, 'Remote instructions: https://someurl.example.com')
+        # Unfold long lines that might have been folded by iCal
+        content_unfolded = r.content.decode('utf-8').replace('\r\n ', '')
+        self.assertIn('Remote instructions: https://someurl.example.com', content_unfolded)
 
         Session.objects.filter(meeting__type_id='interim').update(remote_instructions='')
         r = self.client.get(url)
@@ -5310,7 +5312,8 @@ def test_upcoming_ical(self):
         assert_ical_response_is_valid(self, r,
                                       expected_event_summaries=expected_event_summaries,
                                       expected_event_count=len(expected_event_summaries))
-        self.assertNotContains(r, 'Remote instructions:')
+        content_unfolded = r.content.decode('utf-8').replace('\r\n ', '')
+        self.assertNotIn('Remote instructions:', content_unfolded)
 
         updated = meeting.updated()
         self.assertIsNotNone(updated)
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 2ab670a04d..903e3c7e79 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -4430,16 +4430,7 @@ def upcoming_ical(request):
     else:
         ietfs = []
 
-    meeting_vtz = {meeting.vtimezone() for meeting in meetings}
-    meeting_vtz.discard(None)
-
-    # icalendar response file should have '\r\n' line endings per RFC5545
-    response = render_to_string('meeting/upcoming.ics', {
-        'vtimezones': ''.join(sorted(meeting_vtz)),
-        'assignments': assignments,
-        'ietfs': ietfs,
-    }, request=request)
-    response = parse_ical_line_endings(response)
+    response = render_upcoming_ical(assignments, ietfs, request)
 
     response = HttpResponse(response, content_type='text/calendar')
     response['Content-Disposition'] = 'attachment; filename="upcoming.ics"'
@@ -4513,6 +4504,64 @@ def render_important_dates_ical(meetings, request):
 
     return cal.to_ical().decode("utf-8")
 
+def render_upcoming_ical(assignments, meetings, request):
+    """Generate upcoming using the icalendar library"""
+
+    cal = Calendar()
+    cal.add("prodid", "-//IETF//datatracker.ietf.org ical upcoming//EN")
+    cal.add("version", "2.0")
+    cal.add("method", "PUBLISH")
+
+    for item in assignments:
+        event = Event()
+
+        event.add("uid", f"ietf-{item.session.meeting.number}-{item.timeslot.pk}")
+        event.add("summary", f"{item.session.group.acronym.lower()} - {item.session.name if item.session.name else item.session.group.name}")
+
+        if item.schedule.meeting.city:
+            event.add("location", f"{item.schedule.meeting.city},{item.schedule.meeting.country}")
+
+        event.add("status", item.session.ical_status)
+        event.add("class", "PUBLIC")
+
+        event.add("dtstart", item.timeslot.utc_start_time())
+        event.add("dtend", item.timeslot.utc_end_time())
+        event.add("dtstamp", item.timeslot.modified)
+        if item.session.agenda():
+            event.add("url", item.session.agenda().get_href())
+
+        description_lines = []
+        if item.timeslot.name:
+            description_lines.append(f"{item.timeslot.name}")
+        if item.session.agenda_note:
+            description_lines.append(f"Note: {item.session.agenda_note}")
+        
+        for material in item.session.materials.all():
+            title_part = f" ({material.title})" if material.type.name != "Agenda" else ""
+            description_lines.append(f"{material.type}{title_part}: {material.get_href()}")
+
+        if item.session.remote_instructions:
+            description_lines.append(f"Remote instructions: {item.session.remote_instructions}")
+
+        event.add("description", "\n".join(description_lines))
+        cal.add_component(event)
+
+    for meeting in meetings:
+        event = Event()
+        event.add("uid", f"ietf-{meeting.number}")
+        event.add("summary", f"IETF {meeting.number}")
+        if meeting.city:
+            event.add("location", f"{meeting.city},{meeting.country}")
+        event.add("class", "PUBLIC")
+        event.add("dtstart", meeting.date)
+        event.add("dtend", meeting.end_date() + datetime.timedelta(days=1))
+        event.add("dtstamp", meeting.cached_updated)
+        event.add("url", f"{request.scheme}://{request.get_host()}{reverse('agenda', kwargs={'num': meeting.number})}")
+
+        cal.add_component(event)
+
+    return cal.to_ical().decode("utf-8")
+
 def upcoming_json(request):
     '''Return Upcoming meetings in json format'''
     today = date_today()
diff --git a/ietf/templates/meeting/upcoming.ics b/ietf/templates/meeting/upcoming.ics
deleted file mode 100644
index 5eca7ec81d..0000000000
--- a/ietf/templates/meeting/upcoming.ics
+++ /dev/null
@@ -1,32 +0,0 @@
-{% load humanize tz %}{% autoescape off %}{% load ietf_filters textfilters %}BEGIN:VCALENDAR
-VERSION:2.0
-METHOD:PUBLISH
-PRODID:-//IETF//datatracker.ietf.org ical upcoming//EN
-{{vtimezones}}{% for item in assignments %}BEGIN:VEVENT
-UID:ietf-{{item.session.meeting.number}}-{{item.timeslot.pk}}
-SUMMARY:{% if item.session.name %}{{item.session.group.acronym|lower}} - {{item.session.name|ics_esc}}{% else %}{{item.session.group.acronym|lower}} - {{item.session.group.name}}{%endif%}
-{% if item.schedule.meeting.city %}LOCATION:{{item.schedule.meeting.city}},{{item.schedule.meeting.country}}
-{% endif %}STATUS:{{item.session.ical_status}}
-CLASS:PUBLIC
-DTSTART{% ics_date_time item.timeslot.local_start_time item.schedule.meeting.time_zone %}
-DTEND{% ics_date_time item.timeslot.local_end_time item.schedule.meeting.time_zone %}
-DTSTAMP{% ics_date_time item.timeslot.modified|utc 'utc' %}{% if item.session.agenda %}
-URL:{{item.session.agenda.get_href}}{% endif %}
-DESCRIPTION:{% if item.timeslot.name %}{{item.timeslot.name|ics_esc}}\n{% endif %}{% if item.session.agenda_note %}
- Note: {{item.session.agenda_note|ics_esc}}\n{% endif %}{% for material in item.session.materials.all %}
- \n{{material.type}}{% if material.type.name != "Agenda" %}
-  ({{material.title|ics_esc}}){% endif %}:
-  {{material.get_href}}\n{% endfor %}{% if item.session.remote_instructions %}
- Remote instructions: {{ item.session.remote_instructions }}\n{% endif %}
-END:VEVENT
-{% endfor %}{% for meeting in ietfs %}BEGIN:VEVENT
-UID:ietf-{{ meeting.number }}
-SUMMARY:IETF {{ meeting.number }}{% if meeting.city %}
-LOCATION:{{ meeting.city }},{{ meeting.country }}{% endif %}
-CLASS:PUBLIC
-DTSTART;VALUE=DATE{% if meeting.time_zone %};TZID={{ meeting.time_zone|ics_esc }}{% endif %}:{{ meeting.date|date:"Ymd" }}
-DTEND;VALUE=DATE{% if meeting.time_zone %};TZID={{ meeting.time_zone|ics_esc }}{% endif %}:{{ meeting.end_date|next_day|date:"Ymd" }}
-DTSTAMP{% ics_date_time meeting.cached_updated|utc 'utc' %}
-URL:{{ request.scheme }}://{{ request.get_host }}{% url 'agenda' num=meeting.number %}
-END:VEVENT
-{% endfor %}END:VCALENDAR{% endautoescape %}

From 33c0a894b3c1a4122f128117c295709e6f3c83ca Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 18 Nov 2025 10:01:16 -0600
Subject: [PATCH 505/707] test: fix selenium selector syntax (#9963)

---
 ietf/meeting/tests_js.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/meeting/tests_js.py b/ietf/meeting/tests_js.py
index 262b47652c..3269342924 100644
--- a/ietf/meeting/tests_js.py
+++ b/ietf/meeting/tests_js.py
@@ -1260,7 +1260,7 @@ def _assert_ietf_tz_correct(meetings, tz):
         # to inherit Django's settings.TIME_ZONE but I don't know whether that's guaranteed to be consistent.
         # To avoid test fragility, ask Moment what it considers local and expect that.
         local_tz = self.driver.execute_script('return moment.tz.guess();')
-        local_tz_opt = tz_select_input.find_element(By.CSS_SELECTOR, 'option[value=%s]' % local_tz)
+        local_tz_opt = tz_select_input.find_element(By.CSS_SELECTOR, 'option[value="%s"]' % local_tz)
         local_tz_bottom_opt = tz_select_bottom_input.find_element(By.CSS_SELECTOR, 'option[value="%s"]' % local_tz)
 
         # Should start off in local time zone

From 0dd84be354aa872e0bc2582295a97f7491dc7b21 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 18 Nov 2025 13:28:30 -0400
Subject: [PATCH 506/707] fix: recognize Editorial Stream in queue2.xml (#9965)

---
 ietf/sync/rfceditor.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index 76357ffbcc..b3234a87e2 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -115,6 +115,8 @@ def parse_queue(response):
                     stream = "irtf"
                 elif name.startswith("INDEPENDENT"):
                     stream = "ise"
+                elif name.startswith("Editorial Stream"):
+                    stream = "editorial"
                 else:
                     stream = None
                     warnings.append("unrecognized section " + name)

From a007f50518d027e5edcf2325a4b6de1c347a1a02 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Tue, 18 Nov 2025 16:53:51 -0500
Subject: [PATCH 507/707] fix(dev): remove deprecated ext (#9966)

---
 .devcontainer/devcontainer.json | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index bf28550084..2cfff78853 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -33,7 +33,6 @@
                 "oderwat.indent-rainbow",
                 "redhat.vscode-yaml",
                 "spmeesseman.vscode-taskexplorer",
-                "visualstudioexptteam.vscodeintellicode",
                 "ms-python.pylint",
                 "charliermarsh.ruff"
             ],

From c79b35dd1ddbdadd78481023fa6e6dd876a3db3c Mon Sep 17 00:00:00 2001
From: Absit Iniuria <nouralma68@gmail.com>
Date: Tue, 25 Nov 2025 20:12:18 +0000
Subject: [PATCH 508/707] fix: make chatlog readable in dark mode (#9995)

---
 client/components/ChatLog.vue | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/client/components/ChatLog.vue b/client/components/ChatLog.vue
index f9dc382bfe..b3a4f7b40f 100644
--- a/client/components/ChatLog.vue
+++ b/client/components/ChatLog.vue
@@ -159,4 +159,18 @@ onMounted(() => {
     }
   }
 }
+
+[data-bs-theme="dark"] .chatlog {
+  .n-timeline-item-content__title {
+    color: #d63384 !important;
+  }
+  
+  .n-timeline-item-content__content {
+    color: #fff !important;
+  }
+
+  .n-timeline-item-content__meta {
+    color: #0569ffd9 !important;
+  }
+}
 </style>

From 3afa3d0e79fe98dd8f1780a6649340acbf0f317b Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 26 Nov 2025 00:05:07 -0500
Subject: [PATCH 509/707] ci: enable restoreToLastFullSnapshot for staging db
 deploy

---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index df218930ab..5e91445202 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -451,7 +451,7 @@ jobs:
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "waitClusterReady":true }'
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "restoreToLastFullSnapshot":true, "waitClusterReady":true }'
           wait-for-completion: true
           wait-for-completion-timeout: 60m
           wait-for-completion-interval: 20s

From 03e84773497715d5e082f8b08d8aaa90e45d2a73 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 1 Dec 2025 11:02:08 -0400
Subject: [PATCH 510/707] chore: drop apt-key + old pg utilities (#10029)

* chore: refactor to drop apt-key + consistency

Updates postgres apt setup to use current recommendation + not use
apt-key.

Moves all installed keyrings to /etc/apt/keyrings instead of
/usr/share/keyrings. Either is a reasonable place, but let's just use
one.

* chore: no duplicate key install, drop pg client 14

* chore: drop pgloader, too
---
 docker/app.Dockerfile    |  5 -----
 docker/base.Dockerfile   | 27 ++++++++++++++-------------
 docker/celery.Dockerfile |  5 -----
 3 files changed, 14 insertions(+), 23 deletions(-)

diff --git a/docker/app.Dockerfile b/docker/app.Dockerfile
index fee3833733..dd4cf72ffd 100644
--- a/docker/app.Dockerfile
+++ b/docker/app.Dockerfile
@@ -10,12 +10,7 @@ ARG USER_GID=$USER_UID
 COPY docker/scripts/app-setup-debian.sh /tmp/library-scripts/docker-setup-debian.sh
 RUN sed -i 's/\r$//' /tmp/library-scripts/docker-setup-debian.sh && chmod +x /tmp/library-scripts/docker-setup-debian.sh
 
-# Add Postgresql Apt Repository to get 14    
-RUN echo "deb http://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list
-RUN wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
-
 RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
-    && apt-get install -y --no-install-recommends postgresql-client-14 pgloader \
     # Remove imagemagick due to https://security-tracker.debian.org/tracker/CVE-2019-10131
     && apt-get purge -y imagemagick imagemagick-6-common \
     # Install common packages, non-root user
diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index c1fe5b093e..2501636049 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -11,21 +11,22 @@ RUN apt-get update \
 
 # Add Node.js Source
 RUN apt-get install -y --no-install-recommends ca-certificates curl gnupg \
-    && mkdir -p /etc/apt/keyrings\
-    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
-RUN echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list
-RUN echo "Package: nodejs" >> /etc/apt/preferences.d/preferences && \
-    echo "Pin: origin deb.nodesource.com" >> /etc/apt/preferences.d/preferences && \
-    echo "Pin-Priority: 1001" >> /etc/apt/preferences.d/preferences
+    && mkdir -p /etc/apt/keyrings \
+    && curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+    && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list
+RUN echo "Package: nodejs" >> /etc/apt/preferences.d/preferences \
+    && echo "Pin: origin deb.nodesource.com" >> /etc/apt/preferences.d/preferences \
+    && echo "Pin-Priority: 1001" >> /etc/apt/preferences.d/preferences
 
 # Add Docker Source
-RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
-RUN echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian \
-    $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
-
-# Add PostgreSQL Source 
-RUN echo "deb http://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list
-RUN wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
+RUN mkdir -p /etc/apt/keyrings \
+    && curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | tee /etc/apt/sources.list.d/docker.list
+
+# Add PostgreSQL Source
+RUN mkdir -p /etc/apt/keyrings \
+    && curl -fsSL https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor -o /etc/apt/keyrings/apt.postgresql.org.gpg \
+    && echo "deb [signed-by=/etc/apt/keyrings/apt.postgresql.org.gpg] https://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list
 
 # Install the packages we need
 RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends \
diff --git a/docker/celery.Dockerfile b/docker/celery.Dockerfile
index e7c7b9cc3f..e93ca3cf77 100644
--- a/docker/celery.Dockerfile
+++ b/docker/celery.Dockerfile
@@ -10,12 +10,7 @@ ARG USER_GID=$USER_UID
 COPY docker/scripts/app-setup-debian.sh /tmp/library-scripts/docker-setup-debian.sh
 RUN sed -i 's/\r$//' /tmp/library-scripts/docker-setup-debian.sh && chmod +x /tmp/library-scripts/docker-setup-debian.sh
 
-# Add Postgresql Apt Repository to get 14    
-RUN echo "deb http://apt.postgresql.org/pub/repos/apt $(. /etc/os-release && echo "$VERSION_CODENAME")-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list
-RUN wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
-
 RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
-    && apt-get install -y --no-install-recommends postgresql-client-14 pgloader \
     # Remove imagemagick due to https://security-tracker.debian.org/tracker/CVE-2019-10131
     && apt-get purge -y imagemagick imagemagick-6-common \
     # Install common packages, non-root user

From 47c15df84ca8a3f401239a41214b66839b16ecc3 Mon Sep 17 00:00:00 2001
From: Absit Iniuria <nouralma68@gmail.com>
Date: Mon, 1 Dec 2025 15:13:37 +0000
Subject: [PATCH 511/707] fix: render polls correctly in darkmode (#10027)

---
 client/components/Polls.vue | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/client/components/Polls.vue b/client/components/Polls.vue
index 30cc9e8f36..0846d4ed16 100644
--- a/client/components/Polls.vue
+++ b/client/components/Polls.vue
@@ -90,3 +90,21 @@ onMounted(() => {
 })
 </script>
 
+<style lang="scss">
+@import '../shared/colors.scss';
+
+[data-bs-theme="dark"] .polls {
+    tr,
+    th, 
+    td {
+        background-color: $gray-900 !important;
+        color: $gray-300 !important;
+        border-color: $gray-500 !important;
+        border-width: 0.05 !important;
+    }
+
+    td:hover {
+      background-color: $cyan-600 !important;
+    }
+}
+</style>

From 9d10995dbc6d84bcce7712dc2b2b849286925223 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Mon, 1 Dec 2025 16:02:38 +0000
Subject: [PATCH 512/707] ci: update base image target version to 20251201T1548

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index d3b186e1f5..ae59ba1440 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20250903T2216
+FROM ghcr.io/ietf-tools/datatracker-app-base:20251201T1548
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 9d8427efdb..726f080c67 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20250903T2216
+20251201T1548

From ef4e0958e40380954577d9a4026a12bb9f8bf99e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 2 Dec 2025 19:07:29 -0400
Subject: [PATCH 513/707] fix: adjust patch for Django 4.2.27 (#10045)

---
 patch/django-cookie-delete-with-all-settings.patch | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/patch/django-cookie-delete-with-all-settings.patch b/patch/django-cookie-delete-with-all-settings.patch
index fb8bbbe4fe..4ceaf8fceb 100644
--- a/patch/django-cookie-delete-with-all-settings.patch
+++ b/patch/django-cookie-delete-with-all-settings.patch
@@ -9,9 +9,9 @@
                  samesite=settings.SESSION_COOKIE_SAMESITE,
              )
  
---- django/http/response.py.orig	2020-08-13 11:16:04.060627793 +0200
-+++ django/http/response.py	2020-08-13 11:54:03.482476973 +0200
-@@ -282,20 +282,28 @@
+--- django/http/response.py.orig	2025-12-02 22:12:05.197283001 +0000
++++ django/http/response.py	2025-12-02 22:26:01.396576013 +0000
+@@ -286,20 +286,28 @@
          value = signing.get_cookie_signer(salt=key + salt).sign(value)
          return self.set_cookie(key, value, **kwargs)
 

From 9a4ad7223155814cc8cf8e7b6c4e581b37e7d119 Mon Sep 17 00:00:00 2001
From: Absit Iniuria <nouralma68@gmail.com>
Date: Mon, 15 Dec 2025 14:46:12 +0000
Subject: [PATCH 514/707] fix: adjust datepicker css in darkmode (#10095)

---
 ietf/static/css/datepicker.scss | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/ietf/static/css/datepicker.scss b/ietf/static/css/datepicker.scss
index 88f9e835fd..b193ccda3a 100644
--- a/ietf/static/css/datepicker.scss
+++ b/ietf/static/css/datepicker.scss
@@ -4,3 +4,29 @@
 $dp-cell-focus-background-color: $dropdown-link-hover-bg !default;
 
 @import "vanillajs-datepicker/sass/datepicker-bs5";
+
+[data-bs-theme="dark"] .datepicker-picker {
+    .datepicker-header, 
+    .datepicker-controls .btn,
+    .datepicker-main,
+    .datepicker-footer {
+        background-color: $gray-800;
+    }
+
+    .datepicker-cell:hover {
+        background-color: $gray-700;
+    }
+
+    .datepicker-cell.day.focused {
+        background-color: $gray-600;
+    }
+
+     .datepicker-cell.day.selected.focused {
+        background-color: $blue;
+    }
+
+     .datepicker-controls .btn:hover {
+        background-color:$gray-700;
+        color: $gray-400;
+     }
+}

From e775af342a3ff7a90d33166ac653ec99b8952d4e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 16 Dec 2025 09:10:56 -0600
Subject: [PATCH 515/707] feat: editable wglc messages (#9607) (#9616)

* feat: editable wglc messages (#9607)

* feat: split complex actions out of change state view

* feat: allow editing call for adoption messages (#9702)

* feat: (WIP) sketch of workflow changes to allow editing call for adoption message

* feat: improved tests and related code adjustments

* feat: improve the change state interstitial workflow

* fix: simplify call for adoption workflow (#9964)

* fix: simplify call for adoption workflow

* fix: guard against nonwg target groups

* refactor: make reject conditions easier to understand

* feat: add issuewglc form automatic date replacement (#9969)

* fix: add date adjusting js to the wglc email form (#9976)

* fix: populate and use cfa and wglc forms correctly (#9981)

* fix: populate cfa form correctly. use cfa form for email.

* fix: restrict wglc to drafts

* fix: use wglc form for email.

* fix: tweak wording on forms and email (#9998)

* fix: adjust when call for adoption is shown, allow direct setting of c-adopt and wg-lc (#10051)

* fix: adjust when to show the call for adoption button

* fix: allow direct setting of c-adopt and wg-lc

* fix: adjust call for adoption wording (#10076)

---------

Co-authored-by: Nicolas Giard <github@ngpixel.com>
---
 ietf/doc/mails.py                             |  55 --
 ietf/doc/templatetags/ietf_filters.py         |  58 ++
 ietf/doc/tests_draft.py                       | 501 ++++++++++++++----
 ietf/doc/urls.py                              |   5 +
 ietf/doc/views_doc.py                         |   8 +-
 ietf/doc/views_draft.py                       | 386 +++++++++++++-
 ietf/ietfauth/utils.py                        |   4 +-
 ietf/templates/doc/document_draft.html        |   7 +-
 .../doc/draft/ask_about_ietf_adoption.html    |  22 +
 .../doc/draft/change_stream_state.html        |  19 +-
 ...issue_working_group_call_for_adoption.html |  61 +++
 .../draft/issue_working_group_last_call.html  |  61 +++
 .../doc/draft/wg_action_helpers.html          |  25 +
 .../doc/mail/wg_call_for_adoption_issued.txt  |  24 +-
 .../doc/mail/wg_last_call_issued.txt          |  22 +-
 15 files changed, 1066 insertions(+), 192 deletions(-)
 create mode 100644 ietf/templates/doc/draft/ask_about_ietf_adoption.html
 create mode 100644 ietf/templates/doc/draft/issue_working_group_call_for_adoption.html
 create mode 100644 ietf/templates/doc/draft/issue_working_group_last_call.html
 create mode 100644 ietf/templates/doc/draft/wg_action_helpers.html

diff --git a/ietf/doc/mails.py b/ietf/doc/mails.py
index f20d398c3c..ddecbb6b54 100644
--- a/ietf/doc/mails.py
+++ b/ietf/doc/mails.py
@@ -103,61 +103,6 @@ def email_stream_changed(request, doc, old_stream, new_stream, text=""):
               dict(text=text,
                    url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url()),
               cc=cc)
-    
-def email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=None):
-    if cfa_duration_weeks is None:
-        cfa_duration_weeks=2
-    (to, cc) = gather_address_lists("doc_wg_call_for_adoption_issued", doc=doc)
-    frm = request.user.person.formatted_email()
-
-    end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=7 * cfa_duration_weeks)
-
-    subject = f"Call for adoption: {doc.name}-{doc.rev}  (Ends {end_date})"
-
-    send_mail(
-        request,
-        to,
-        frm,
-        subject,
-        "doc/mail/wg_call_for_adoption_issued.txt",
-        dict(
-            doc=doc,
-            subject=subject,
-            url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url(),
-            end_date=end_date,
-            cfa_duration_weeks=cfa_duration_weeks,
-            wg_list=doc.group.list_email,
-        ),
-        cc=cc,
-    )
-
-
-def email_wg_last_call_issued(request, doc, wglc_duration_weeks=None):
-    if wglc_duration_weeks is None:
-        wglc_duration_weeks = 2
-    (to, cc) = gather_address_lists("doc_wg_last_call_issued", doc=doc)
-    frm = request.user.person.formatted_email()
-
-
-    end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=7 * wglc_duration_weeks)
-    subject =  f"WG Last Call: {doc.name}-{doc.rev} (Ends {end_date})"
-
-    send_mail(
-        request,
-        to,
-        frm,
-        subject,
-        "doc/mail/wg_last_call_issued.txt",
-        dict(
-            doc=doc,
-            subject=subject,
-            url=settings.IDTRACKER_BASE_URL + doc.get_absolute_url(),
-            end_date=end_date,
-            wglc_duration_weeks=wglc_duration_weeks,
-            wg_list=doc.group.list_email,
-        ),
-        cc=cc,
-    )
 
 def email_pulled_from_rfc_queue(request, doc, comment, prev_state, next_state):
     extra=extra_automation_headers(doc)
diff --git a/ietf/doc/templatetags/ietf_filters.py b/ietf/doc/templatetags/ietf_filters.py
index 5cabe1728d..ae5df641c2 100644
--- a/ietf/doc/templatetags/ietf_filters.py
+++ b/ietf/doc/templatetags/ietf_filters.py
@@ -1017,3 +1017,61 @@ def is_in_stream(doc):
     elif stream == "editorial":
         return True
     return False
+
+
+@register.filter
+def is_doc_ietf_adoptable(doc):
+    return doc.stream_id is None or all(
+        [
+            doc.stream_id == "ietf",
+            doc.get_state_slug("draft-stream-ietf")
+            not in [
+                "c-adopt",
+                "adopt-wg",
+                "info",
+                "wg-doc",
+                "parked",
+                "dead",
+                "wg-lc",
+                "waiting-for-implementation",
+                "chair-w",
+                "writeupw",
+                "sub-pub",
+            ],
+            doc.get_state_slug("draft") != "rfc",
+            doc.became_rfc() is None,
+        ]
+    )
+
+
+@register.filter
+def can_issue_ietf_wg_lc(doc):
+    return all(
+        [
+            doc.stream_id == "ietf",
+            doc.get_state_slug("draft-stream-ietf")
+            not in ["wg-cand", "c-adopt", "wg-lc"],
+            doc.get_state_slug("draft") != "rfc",
+            doc.became_rfc() is None,
+        ]
+    )
+
+
+@register.filter
+def can_submit_to_iesg(doc):
+    return all(
+        [
+            doc.stream_id == "ietf",
+            doc.get_state_slug("draft-iesg") == "idexists",
+            doc.get_state_slug("draft-stream-ietf") not in ["wg-cand", "c-adopt"],
+        ]
+    )
+
+
+@register.filter
+def has_had_ietf_wg_lc(doc):
+    return (
+        doc.stream_id == "ietf"
+        and doc.docevent_set.filter(statedocevent__state__slug="wg-lc").exists()
+    )
+
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 4d262c5a2f..cebeac1f27 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -21,13 +21,14 @@
 import debug                            # pyflakes:ignore
 
 from ietf.doc.expire import expirable_drafts, get_expired_drafts, send_expire_notice_for_draft, expire_draft
-from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, WgDraftFactory, RgDraftFactory, DocEventFactory
+from ietf.doc.factories import EditorialDraftFactory, IndividualDraftFactory, StateDocEventFactory, WgDraftFactory, RgDraftFactory, DocEventFactory, WgRfcFactory
 from ietf.doc.models import ( Document, DocReminder, DocEvent,
     ConsensusDocEvent, LastCallDocEvent, RelatedDocument, State, TelechatDocEvent, 
     WriteupDocEvent, DocRelationshipName, IanaExpertDocEvent )
 from ietf.doc.storage_utils import exists_in_storage, store_str
 from ietf.doc.utils import get_tags_for_stream_id, create_ballot_if_not_open
-from ietf.doc.views_draft import AdoptDraftForm
+from ietf.doc.views_draft import AdoptDraftForm, IssueCallForAdoptionForm, IssueWorkingGroupLastCallForm
+from ietf.ietfauth.utils import has_role
 from ietf.name.models import DocTagName, RoleName
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.group.models import Group, Role
@@ -86,7 +87,7 @@ def test_ad_approved(self):
         self.assertTrue("Approved: " in outbox[-1]['Subject'])
         self.assertTrue(draft.name in outbox[-1]['Subject'])
         self.assertTrue('iesg@' in outbox[-1]['To'])
-        
+
     def test_change_state(self):
         ad = Person.objects.get(user__username="ad")
         draft = WgDraftFactory(
@@ -1708,11 +1709,7 @@ def test_adopt_document(self):
                 self.assertEqual(draft.group, chair_role.group)
                 self.assertEqual(draft.stream_id, stream_state_type_slug[type_id][13:]) # trim off "draft-stream-"
                 self.assertEqual(draft.docevent_set.count() - events_before, 5)
-                self.assertEqual(len(outbox), 2)
-                self.assertTrue("Call For Adoption" in outbox[0]["Subject"])
-                self.assertTrue(f"{chair_role.group.acronym}-chairs@" in outbox[0]['To'])
-                self.assertTrue(f"{draft.name}@" in outbox[0]['To'])
-                self.assertTrue(f"{chair_role.group.acronym}@" in outbox[0]['To'])
+                self.assertEqual(len(outbox), 1)
                 # contents of outbox[1] are tested elsewhere
 
             # adopt
@@ -2003,6 +2000,40 @@ def test_set_state(self):
         self.assertTrue("mars-chairs@ietf.org" in outbox[0].as_string())
         self.assertTrue("marsdelegate@ietf.org" in outbox[0].as_string())
 
+    def test_set_stream_state_to_wglc(self):
+        def _form_presents_state_option(response, state):
+            q = PyQuery(response.content)
+            option = q(f"select#id_new_state option[value='{state.pk}']")
+            return len(option) != 0 
+        
+        doc = WgDraftFactory()
+        chair = RoleFactory(name_id="chair", group=doc.group).person
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=doc.name, state_type="draft-stream-ietf"),
+        )
+        login_testing_unauthorized(self, chair.user.username, url)
+        r = self.client.get(url)
+        wglc_state = State.objects.get(type="draft-stream-ietf", slug="wg-lc")
+        doc.set_state(wglc_state)
+        StateDocEventFactory(
+            doc=doc,
+            state_type_id="draft-stream-ietf",
+            state=("draft-stream-ietf", "wg-lc"),
+        )
+        self.assertEqual(doc.docevent_set.count(), 2)
+        r = self.client.get(url)
+        self.assertTrue(_form_presents_state_option(r, wglc_state))
+        other_doc = WgDraftFactory()
+        self.client.logout()
+        url = urlreverse(
+            "ietf.doc.views_draft.change_stream_state",
+            kwargs=dict(name=other_doc.name, state_type="draft-stream-ietf"),
+        )
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        self.assertTrue(_form_presents_state_option(r, wglc_state))
+
     def test_wg_call_for_adoption_issued(self):
         role = RoleFactory(
             name_id="chair",
@@ -2029,12 +2060,7 @@ def test_wg_call_for_adoption_issued(self):
             ),
         )
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
-        self.assertIn("Call for adoption", outbox[1]["Subject"])
-        body = get_payload_text(outbox[1])
-        self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 10-week", body)
+        self.assertEqual(len(outbox), 1)
         # Test not entering a duration on the form
         draft = IndividualDraftFactory()
         url = urlreverse(
@@ -2051,12 +2077,7 @@ def test_wg_call_for_adoption_issued(self):
             ),
         )
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
-        self.assertIn("Call for adoption", outbox[1]["Subject"])
-        body = get_payload_text(outbox[1])
-        self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 2-week", body)
+        self.assertEqual(len(outbox), 1)
 
         # Test the less usual workflow of issuing a call for adoption 
         # of a document that's already in the ietf stream
@@ -2086,12 +2107,7 @@ def test_wg_call_for_adoption_issued(self):
             ),
         )
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
-        self.assertIn("Call for adoption", outbox[1]["Subject"])
-        body = get_payload_text(outbox[1])
-        self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 10-week", body)
+        self.assertEqual(len(outbox), 1)
         draft = WgDraftFactory(group=role.group)
         url = urlreverse(
             "ietf.doc.views_draft.change_stream_state",
@@ -2117,85 +2133,210 @@ def test_wg_call_for_adoption_issued(self):
             ),
         )
         self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
-        self.assertIn("Call for adoption", outbox[1]["Subject"])
-        body = get_payload_text(outbox[1])
-        self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 2-week", body)
+        self.assertEqual(len(outbox), 1)
 
-    def test_wg_last_call_issued(self):
-        role = RoleFactory(
-            name_id="chair",
-            group__acronym="mars",
-            group__list_email="mars-wg@ietf.org",
-            person__user__username="marschairman",
-            person__name="WG Cháir Man",
+    def test_issue_wg_lc_form(self):
+        end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=1)
+        post = dict(
+            end_date=end_date,
+            to="foo@example.net, bar@example.com",
+            # Intentionally not passing cc
+            subject=f"garbage {end_date.isoformat()}",
+            body=f"garbage {end_date.isoformat()}",
         )
-        draft = WgDraftFactory(group=role.group)
-        url = urlreverse(
-            "ietf.doc.views_draft.change_stream_state",
-            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        form = IssueWorkingGroupLastCallForm(post)
+        self.assertTrue(form.is_valid())
+        post["end_date"] = date_today(DEADLINE_TZINFO)
+        form = IssueWorkingGroupLastCallForm(post)
+        self.assertFalse(form.is_valid())
+        self.assertIn(
+            "End date must be later than today",
+            form.errors["end_date"],
+            "Form accepted a too-early date",
         )
-        login_testing_unauthorized(self, "marschairman", url)
-        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
-        new_state = State.objects.get(
-            used=True, type="draft-stream-%s" % draft.stream_id, slug="wg-lc"
+        post["end_date"] = end_date + datetime.timedelta(days=2)
+        form = IssueWorkingGroupLastCallForm(post)
+        self.assertFalse(form.is_valid())
+        self.assertIn(
+            f"Last call end date ({post['end_date'].isoformat()}) not found in subject",
+            form.errors["subject"],
+            "form allowed subject without end_date",
         )
-        self.assertNotEqual(old_state, new_state)
+        self.assertIn(
+            f"Last call end date ({post['end_date'].isoformat()}) not found in body",
+            form.errors["body"],
+            "form allowed body without end_date",
+        )
+
+    def test_issue_wg_lc(self):
+        def _assert_rejected(testcase, doc, person):
+            url = urlreverse(
+                "ietf.doc.views_draft.issue_wg_lc", kwargs=dict(name=doc.name)
+            )
+            login_testing_unauthorized(testcase, person.user.username, url)
+            r = testcase.client.get(url)
+            testcase.assertEqual(r.status_code, 404)
+            testcase.client.logout()
+
+        already_rfc = WgDraftFactory(states=[("draft", "rfc")])
+        rfc_chair = RoleFactory(name_id="chair", group=already_rfc.group).person
+        _assert_rejected(self, already_rfc, rfc_chair)
+        rg_doc = RgDraftFactory()
+        rg_chair = RoleFactory(name_id="chair", group=rg_doc.group).person
+        _assert_rejected(self, rg_doc, rg_chair)
+        inwglc_doc = WgDraftFactory(states=[("draft-stream-ietf", "wg-lc")])
+        inwglc_chair = RoleFactory(name_id="chair", group=inwglc_doc.group).person
+        _assert_rejected(self, inwglc_doc, inwglc_chair)
+        doc = WgDraftFactory()
+        chair = RoleFactory(name_id="chair", group=doc.group).person
+        url = urlreverse("ietf.doc.views_draft.issue_wg_lc", kwargs=dict(name=doc.name))
+        login_testing_unauthorized(self, chair.user.username, url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        q = PyQuery(r.content)
+        postdict = dict()
+        postdict["end_date"] = q("input#id_end_date").attr("value")
+        postdict["to"] = q("input#id_to").attr("value") + ", extrato@example.org"
+        cc = q("input#id_cc").attr("value")
+        if cc is not None:
+            postdict["cc"] = cc + ", extracc@example.org"
+        else:
+            postdict["cc"] = "extracc@example.org"
+        postdict["subject"] = q("input#id_subject").attr("value") + " Extra Subject Words"
+        postdict["body"] = q("textarea#id_body").text() + "FGgqbQ$UNeXs"
         empty_outbox()
         r = self.client.post(
             url,
-            dict(
-                new_state=new_state.pk,
-                comment="some comment",
-                weeks="10",
-                tags=[
-                    t.pk
-                    for t in draft.tags.filter(
-                        slug__in=get_tags_for_stream_id(draft.stream_id)
-                    )
-                ],
-            ),
+            postdict,
         )
         self.assertEqual(r.status_code, 302)
+        self.assertEqual(doc.get_state_slug("draft-stream-ietf"), "wg-lc")
         self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
+        self.assertIn(f"{doc.group.acronym}@ietf.org", outbox[1]["To"])
+        self.assertIn("extrato@example.org", outbox[1]["To"])
+        self.assertIn("extracc@example.org", outbox[1]["Cc"])
+        self.assertIn("Extra Subject Words", outbox[1]["Subject"])
         self.assertIn("WG Last Call", outbox[1]["Subject"])
         body = get_payload_text(outbox[1])
         self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 10-week", body)
-        draft = WgDraftFactory(group=role.group)
-        url = urlreverse(
-            "ietf.doc.views_draft.change_stream_state",
-            kwargs=dict(name=draft.name, state_type="draft-stream-ietf"),
+        self.assertIn("FGgqbQ$UNeXs", body)
+
+    def test_issue_wg_call_for_adoption_form(self):
+        end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=1)
+        post = dict(
+            end_date=end_date,
+            to="foo@example.net, bar@example.com",
+            # Intentionally not passing cc
+            subject=f"garbage {end_date.isoformat()}",
+            body=f"garbage {end_date.isoformat()}",
         )
-        old_state = draft.get_state("draft-stream-%s" % draft.stream_id)
-        new_state = State.objects.get(
-            used=True, type="draft-stream-%s" % draft.stream_id, slug="wg-lc"
+        form = IssueCallForAdoptionForm(post)
+        self.assertTrue(form.is_valid())
+        post["end_date"] = date_today(DEADLINE_TZINFO)
+        form = IssueCallForAdoptionForm(post)
+        self.assertFalse(form.is_valid())
+        self.assertIn(
+            "End date must be later than today",
+            form.errors["end_date"],
+            "Form accepted a too-early date",
         )
-        self.assertNotEqual(old_state, new_state)
-        empty_outbox()
-        r = self.client.post(
-            url,
-            dict(
-                new_state=new_state.pk,
-                comment="some comment",
-                tags=[
-                    t.pk
-                    for t in draft.tags.filter(
-                        slug__in=get_tags_for_stream_id(draft.stream_id)
-                    )
-                ],
-            ),
+        post["end_date"] = end_date + datetime.timedelta(days=2)
+        form = IssueCallForAdoptionForm(post)
+        self.assertFalse(form.is_valid())
+        self.assertIn(
+            f"Call for adoption end date ({post['end_date'].isoformat()}) not found in subject",
+            form.errors["subject"],
+            "form allowed subject without end_date",
+        )
+        self.assertIn(
+            f"Call for adoption end date ({post['end_date'].isoformat()}) not found in body",
+            form.errors["body"],
+            "form allowed body without end_date",
+        )
+
+    def test_issue_wg_call_for_adoption(self):
+        def _assert_rejected(testcase, doc, person, group=None):
+            target_acronym = group.acronym if group is not None else doc.group.acronym
+            url = urlreverse(
+                "ietf.doc.views_draft.issue_wg_call_for_adoption",
+                kwargs=dict(name=doc.name, acronym=target_acronym),
+            )
+            login_testing_unauthorized(testcase, person.user.username, url)
+            r = testcase.client.get(url)
+            testcase.assertEqual(r.status_code, 403)
+            testcase.client.logout()
+
+        def _verify_call_issued(testcase, doc, chair_role):
+            url = urlreverse(
+                "ietf.doc.views_draft.issue_wg_call_for_adoption",
+                kwargs=dict(name=doc.name, acronym=chair_role.group.acronym),
+            )
+            login_testing_unauthorized(testcase, chair_role.person.user.username, url)
+            r = testcase.client.get(url)
+            testcase.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            postdict = dict()
+            postdict["end_date"] = q("input#id_end_date").attr("value")
+            postdict["to"] = q("input#id_to").attr("value") + ", extrato@example.com"
+            self.assertIn(chair_role.group.list_email, postdict["to"])
+            cc = q("input#id_cc").attr("value")
+            if cc is not None:
+                postdict["cc"] = cc + ", extracc@example.com"
+            else:
+                postdict["cc"] = "extracc@example.com"
+            postdict["subject"] = q("input#id_subject").attr("value") + " Extra Subject Words"
+            postdict["body"] = q("textarea#id_body").text() + "FGgqbQ$UNeXs"
+            empty_outbox()
+            r = testcase.client.post(
+                url,
+                postdict,
+            )
+            testcase.assertEqual(r.status_code, 302)
+            doc.refresh_from_db()
+            self.assertEqual(doc.group, chair_role.group)
+            self.assertEqual(doc.get_state_slug("draft-stream-ietf"), "c-adopt")
+            self.assertEqual(len(outbox), 2)
+            self.assertIn(f"{doc.group.acronym}@ietf.org", outbox[1]["To"])
+            self.assertIn("extrato@example.com", outbox[1]["To"])
+            self.assertIn("extracc@example.com", outbox[1]["Cc"])
+            self.assertIn("Call for adoption", outbox[1]["Subject"])
+            self.assertIn("Extra Subject Words", outbox[1]["Subject"])
+            body = get_payload_text(outbox[1])
+            self.assertIn("disclosure obligations", body)
+            self.assertIn("FGgqbQ$UNeXs", body)
+            self.client.logout()
+            return doc
+
+        already_rfc = WgDraftFactory(states=[("draft", "rfc")])
+        rfc = WgRfcFactory(group=already_rfc.group)
+        already_rfc.relateddocument_set.create(relationship_id="became_rfc",target=rfc)
+        rfc_chair = RoleFactory(name_id="chair", group=already_rfc.group).person
+        _assert_rejected(self, already_rfc, rfc_chair)
+        rg_doc = RgDraftFactory()
+        rg_chair = RoleFactory(name_id="chair", group=rg_doc.group).person
+        _assert_rejected(self, rg_doc, rg_chair)
+        inwglc_doc = WgDraftFactory(states=[("draft-stream-ietf", "wg-lc")])
+        inwglc_chair = RoleFactory(name_id="chair", group=inwglc_doc.group).person
+        _assert_rejected(self, inwglc_doc, inwglc_chair)
+        ind_doc = IndividualDraftFactory()
+        _assert_rejected(self, ind_doc, rg_chair, rg_doc.group)
+
+        # Successful call issued for doc already in WG
+        doc = WgDraftFactory(states=[("draft-stream-ietf","wg-cand")])
+        chair_role = RoleFactory(name_id="chair",group=doc.group)
+        _ = _verify_call_issued(self, doc, chair_role)
+
+        # Successful call issued for doc not yet in WG
+        doc = IndividualDraftFactory()
+        chair_role = RoleFactory(name_id="chair",group__type_id="wg")
+        doc = _verify_call_issued(self, doc, chair_role)
+        self.assertEqual(doc.group, chair_role.group)
+        self.assertEqual(doc.stream_id, "ietf")
+        self.assertEqual(doc.get_state_slug("draft-stream-ietf"), "c-adopt")
+        self.assertCountEqual(
+            doc.docevent_set.values_list("type", flat=True),
+            ["changed_state", "changed_group", "changed_stream", "new_revision"]
         )
-        self.assertEqual(r.status_code, 302)
-        self.assertEqual(len(outbox), 2)
-        self.assertIn("mars-wg@ietf.org", outbox[1]["To"])
-        self.assertIn("WG Last Call", outbox[1]["Subject"])
-        body = get_payload_text(outbox[1])
-        self.assertIn("disclosure obligations", body)
-        self.assertIn("starts a 2-week", body)
 
     def test_pubreq_validation(self):
         role = RoleFactory(name_id='chair',group__acronym='mars',group__list_email='mars-wg@ietf.org',person__user__username='marschairman',person__name='WG Cháir Man')
@@ -2393,6 +2534,188 @@ def test_editorial_metadata(self):
         self.assertNotIn("IESG", top_level_metadata_headings)
         self.assertNotIn("IANA", top_level_metadata_headings)
 
+class IetfGroupActionHelperTests(TestCase):
+    def test_manage_adoption_routing(self):
+        draft = IndividualDraftFactory()
+        nobody = PersonFactory()
+        rgchair = RoleFactory(group__type_id="rg", name_id="chair").person
+        wgchair = RoleFactory(group__type_id="wg", name_id="chair").person
+        multichair = RoleFactory(group__type_id="rg", name_id="chair").person
+        RoleFactory(group__type_id="wg", person=multichair, name_id="chair")
+        ad = RoleFactory(group__type_id="area", name_id="ad").person
+        secretary = Role.objects.filter(
+            name_id="secr", group__acronym="secretariat"
+        ).first()
+        self.assertIsNotNone(secretary)
+        secretary = secretary.person
+        self.assertFalse(
+            has_role(rgchair.user, ["Secretariat", "Area Director", "WG Chair"])
+        )
+        url = urlreverse(
+            "ietf.doc.views_doc.document_main", kwargs={"name": draft.name}
+        )
+        ask_about_ietf_link = urlreverse(
+            "ietf.doc.views_draft.ask_about_ietf_adoption_call",
+            kwargs={"name": draft.name},
+        )
+        non_ietf_adoption_link = urlreverse(
+            "ietf.doc.views_draft.adopt_draft", kwargs={"name": draft.name}
+        )
+        for person in (None, nobody, rgchair, wgchair, multichair, ad, secretary):
+            if person is not None:
+                self.client.login(
+                    username=person.user.username,
+                    password=f"{person.user.username}+password",
+                )
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            has_ask_about_ietf_link = len(q(f'a[href="{ask_about_ietf_link}"]')) != 0
+            has_non_ietf_adoption_link = (
+                len(q(f'a[href="{non_ietf_adoption_link}"]')) != 0
+            )
+            ask_about_r = self.client.get(ask_about_ietf_link)
+            ask_about_link_return_code = ask_about_r.status_code
+            if person == rgchair:
+                self.assertFalse(has_ask_about_ietf_link)
+                self.assertTrue(has_non_ietf_adoption_link)
+                self.assertEqual(ask_about_link_return_code, 403)
+            elif person in (ad, nobody, None):
+                self.assertFalse(has_ask_about_ietf_link)
+                self.assertFalse(has_non_ietf_adoption_link)
+                self.assertEqual(
+                    ask_about_link_return_code, 302 if person is None else 403
+                )
+            else:
+                self.assertTrue(has_ask_about_ietf_link)
+                self.assertFalse(has_non_ietf_adoption_link)
+                self.assertEqual(ask_about_link_return_code, 200)
+            self.client.logout()
+
+    def test_ask_about_ietf_adoption_call(self):
+        # Basic permission tests above
+        doc = IndividualDraftFactory()
+        self.assertEqual(doc.docevent_set.count(), 1)
+        chair_role = RoleFactory(group__type_id="wg", name_id="chair")
+        chair = chair_role.person
+        group = chair_role.group
+        othergroup = GroupFactory(type_id="wg")
+        url = urlreverse(
+            "ietf.doc.views_draft.ask_about_ietf_adoption_call",
+            kwargs={"name": doc.name},
+        )
+        login_testing_unauthorized(self, chair.user.username, url)
+        r = self.client.post(url, {"group": othergroup.pk})
+        self.assertEqual(r.status_code, 200)
+        r = self.client.post(url, {"group": group.pk})
+        self.assertEqual(r.status_code, 302)
+
+    def test_offer_wg_action_helpers(self):
+        def _assert_view_presents_buttons(testcase, response, expected):
+            q = PyQuery(response.content)
+            for id, expect in expected:
+                button = q(f"#{id}")
+                testcase.assertEqual(
+                    len(button) != 0,
+                    expect
+                )
+
+        # View rejects access
+        came_from_draft = WgDraftFactory(states=[("draft","rfc")])
+        rfc = WgRfcFactory(group=came_from_draft.group)
+        came_from_draft.relateddocument_set.create(relationship_id="became_rfc",target=rfc)
+        rfc_chair = RoleFactory(name_id="chair", group=rfc.group).person
+        url = urlreverse("ietf.doc.views_draft.offer_wg_action_helpers", kwargs=dict(name=came_from_draft.name))
+        login_testing_unauthorized(self, rfc_chair.user.username, url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+        self.client.logout()
+        rg_draft = RgDraftFactory()
+        rg_chair = RoleFactory(group=rg_draft.group, name_id="chair").person
+        url = urlreverse("ietf.doc.views_draft.offer_wg_action_helpers", kwargs=dict(name=rg_draft.name))
+        login_testing_unauthorized(self, rg_chair.user.username, url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code,404)
+        self.client.logout()
+
+        # View offers access
+        draft = WgDraftFactory()
+        chair = RoleFactory(group=draft.group, name_id="chair").person
+        url = urlreverse("ietf.doc.views_draft.offer_wg_action_helpers", kwargs=dict(name=draft.name))
+        login_testing_unauthorized(self, chair.user.username, url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code,200)
+        _assert_view_presents_buttons(
+            self,
+            r,
+            [
+                ("id_wgadopt_button", False),
+                ("id_wglc_button", True),
+                ("id_pubreq_button", True),
+            ],
+        )
+        draft.set_state(State.objects.get(type_id="draft-stream-ietf", slug="wg-cand"))
+        r = self.client.get(url)
+        self.assertEqual(r.status_code,200)
+        _assert_view_presents_buttons(
+            self,
+            r,
+            [
+                ("id_wgadopt_button", True),
+                ("id_wglc_button", False),
+                ("id_pubreq_button", False),
+            ],
+        ) 
+        draft.set_state(State.objects.get(type_id="draft-stream-ietf", slug="wg-lc"))
+        StateDocEventFactory(
+            doc=draft,
+            state_type_id="draft-stream-ietf",
+            state=("draft-stream-ietf", "wg-lc"),
+        )
+        self.assertEqual(draft.docevent_set.count(), 2)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code,200)
+        _assert_view_presents_buttons(
+            self,
+            r,
+            [
+                ("id_wgadopt_button", False),
+                ("id_wglc_button", False),
+                ("id_pubreq_button", True),
+            ],
+        )
+        draft.set_state(State.objects.get(type_id="draft-stream-ietf",slug="chair-w"))
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        _assert_view_presents_buttons(
+            self,
+            r,
+            [
+                ("id_wgadopt_button", False),
+                ("id_wglc_button", True),
+                ("id_pubreq_button", True),
+            ],
+        )
+        self.assertContains(response=r,text="Issue Another Working Group Last Call", status_code=200)
+        other_draft = WgDraftFactory()
+        self.client.logout()
+        url = urlreverse("ietf.doc.views_draft.offer_wg_action_helpers", kwargs=dict(name=other_draft.name))
+        login_testing_unauthorized(self, "secretary", url)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        _assert_view_presents_buttons(
+            self,
+            r,
+            [
+                ("id_wgadopt_button", False),
+                ("id_wglc_button", True),
+                ("id_pubreq_button", True),
+            ],
+        )
+        self.assertContains(
+            response=r, text="Issue Working Group Last Call", status_code=200
+        )
+
 class BallotEmailAjaxTests(TestCase):
     def test_ajax_build_position_email(self):
         def _post_json(self, url, json_to_post):
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 8e9c0569e2..61e94b2231 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -125,6 +125,7 @@
     url(r'^%(name)s/edit/info/$' % settings.URL_REGEXPS, views_draft.edit_info),
     url(r'^%(name)s/edit/requestresurrect/$' % settings.URL_REGEXPS, views_draft.request_resurrect),
     url(r'^%(name)s/edit/submit-to-iesg/$' % settings.URL_REGEXPS, views_draft.to_iesg),
+    url(r'^%(name)s/edit/issue-wg-lc/$' % settings.URL_REGEXPS, views_draft.issue_wg_lc),
     url(r'^%(name)s/edit/resurrect/$' % settings.URL_REGEXPS, views_draft.resurrect),
     url(r'^%(name)s/edit/addcomment/$' % settings.URL_REGEXPS, views_doc.add_comment),
 
@@ -143,9 +144,13 @@
     url(r'^%(name)s/edit/shepherdemail/$' % settings.URL_REGEXPS, views_draft.change_shepherd_email),
     url(r'^%(name)s/edit/shepherdwriteup/$' % settings.URL_REGEXPS, views_draft.edit_shepherd_writeup),
     url(r'^%(name)s/edit/requestpublication/$' % settings.URL_REGEXPS, views_draft.request_publication),
+    url(r'^%(name)s/edit/ask-about-ietf-adoption/$' % settings.URL_REGEXPS, views_draft.ask_about_ietf_adoption_call),
     url(r'^%(name)s/edit/adopt/$' % settings.URL_REGEXPS, views_draft.adopt_draft),
+    url(r'^%(name)s/edit/issue-wg-call-for-adoption/%(acronym)s/$' % settings.URL_REGEXPS, views_draft.issue_wg_call_for_adoption),
+
     url(r'^%(name)s/edit/release/$' % settings.URL_REGEXPS, views_draft.release_draft),
     url(r'^%(name)s/edit/state/(?P<state_type>draft-stream-[a-z]+)/$' % settings.URL_REGEXPS, views_draft.change_stream_state),
+    url(r'^%(name)s/edit/wg-action-helpers/$' % settings.URL_REGEXPS, views_draft.offer_wg_action_helpers),
     url(r'^%(name)s/edit/state/statement/$' % settings.URL_REGEXPS, views_statement.change_statement_state),
 
     url(r'^%(name)s/edit/clearballot/(?P<ballot_type_slug>[\w-]+)/$' % settings.URL_REGEXPS, views_ballot.clear_ballot),
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 5210317325..5564904504 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -515,13 +515,17 @@ def document_main(request, name, rev=None, document_html=False):
         # remaining actions
         actions = []
 
-        if can_adopt_draft(request.user, doc) and not doc.get_state_slug() in ["rfc"] and not snapshot:
+        if can_adopt_draft(request.user, doc) and doc.get_state_slug() not in ["rfc"] and not snapshot:
+            target = urlreverse("ietf.doc.views_draft.adopt_draft", kwargs=dict(name=doc.name))
             if doc.group and doc.group.acronym != 'none': # individual submission
                 # already adopted in one group
                 button_text = "Switch adoption"
             else:
                 button_text = "Manage adoption"
-            actions.append((button_text, urlreverse('ietf.doc.views_draft.adopt_draft', kwargs=dict(name=doc.name))))
+                # can_adopt_draft currently returns False for Area Directors
+                if has_role(request.user, ["Secretariat", "WG Chair"]):
+                    target = urlreverse("ietf.doc.views_draft.ask_about_ietf_adoption_call", kwargs=dict(name=doc.name))
+            actions.append((button_text, target))
 
         if can_unadopt_draft(request.user, doc) and not doc.get_state_slug() in ["rfc"] and not snapshot:
             if doc.get_state_slug('draft-iesg') == 'idexists':
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index 16d04ee66a..c5faf1140b 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -28,12 +28,12 @@
     IanaExpertDocEvent, IESG_SUBSTATE_TAGS)
 from ietf.doc.mails import ( email_pulled_from_rfc_queue, email_resurrect_requested,
     email_resurrection_completed, email_state_changed, email_stream_changed,
-    email_wg_call_for_adoption_issued, email_wg_last_call_issued,
     email_stream_state_changed, email_stream_tags_changed, extra_automation_headers,
     generate_publication_request, email_adopted, email_intended_status_changed,
     email_iesg_processing_document, email_ad_approved_doc,
     email_iana_expert_review_state_changed )
 from ietf.doc.storage_utils import retrieve_bytes, store_bytes
+from ietf.doc.templatetags.ietf_filters import is_doc_ietf_adoptable
 from ietf.doc.utils import ( add_state_change_event, can_adopt_draft, can_unadopt_draft,
     get_tags_for_stream_id, nice_consensus, update_action_holders,
     update_reminder, update_telechat, make_notify_changed_event, get_initial_notify,
@@ -51,12 +51,12 @@
 from ietf.name.models import IntendedStdLevelName, DocTagName, StreamName
 from ietf.person.fields import SearchableEmailField
 from ietf.person.models import Person, Email
-from ietf.utils.mail import send_mail, send_mail_message, on_behalf_of
+from ietf.utils.mail import send_mail, send_mail_message, on_behalf_of, send_mail_text
 from ietf.utils.textupload import get_cleaned_text_file_content
 from ietf.utils import log
-from ietf.utils.fields import ModelMultipleChoiceField
+from ietf.utils.fields import DatepickerDateField, ModelMultipleChoiceField, MultiEmailField
 from ietf.utils.response import permission_denied
-from ietf.utils.timezone import datetime_today, DEADLINE_TZINFO
+from ietf.utils.timezone import date_today, datetime_from_date, datetime_today, DEADLINE_TZINFO
 
 
 class ChangeStateForm(forms.Form):
@@ -1564,7 +1564,7 @@ def adopt_draft(request, name):
                 events.append(e)
 
                 due_date = None
-                if form.cleaned_data["weeks"] != None:
+                if form.cleaned_data["weeks"] is not None:
                     due_date = datetime_today(DEADLINE_TZINFO) + datetime.timedelta(weeks=form.cleaned_data["weeks"])
 
                 update_reminder(doc, "stream-s", e, due_date)
@@ -1573,11 +1573,6 @@ def adopt_draft(request, name):
                 # setting states that are _not_ the adopted state.
                 email_adopted(request, doc, prev_state, new_state, by, comment)
 
-                # Currently only the IETF stream uses the c-adopt state - guard against other
-                # streams starting to use it asthe IPR rules for those streams will be different.
-                if doc.stream_id == "ietf" and new_state.slug == "c-adopt":
-                    email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=form.cleaned_data["weeks"])
-
             # comment
             if comment:
                 e = DocEvent(type="added_comment", doc=doc, rev=doc.rev, by=by)
@@ -1689,11 +1684,14 @@ def __init__(self, *args, **kwargs):
             f.queryset = f.queryset.exclude(pk__in=unused_states)
         f.label = state_type.label
         if self.stream.slug == 'ietf':
+            help_text_items = []
             if self.can_set_sub_pub:
-                f.help_text = "Only select 'Submitted to IESG for Publication' to correct errors. Use the document's main page to request publication."
+                help_text_items.append("Only select 'Submitted to IESG for Publication' to correct errors. This is not how to submit a document to the IESG.")
             else:
                 f.queryset = f.queryset.exclude(slug='sub-pub')
-                f.help_text = "You may not set the 'Submitted to IESG for Publication' using this form - Use the document's main page to request publication."
+                help_text_items.append("You may not set the 'Submitted to IESG for Publication' using this form - Use the button above or the document's main page to request publication.")
+            help_text_items.append("Only use this form in unusual circumstances when issuing call for adoption or working group last call.")
+            f.help_text = " ".join(help_text_items)
 
         f = self.fields['tags']
         f.queryset = f.queryset.filter(slug__in=get_tags_for_stream_id(doc.stream_id))
@@ -1704,7 +1702,7 @@ def __init__(self, *args, **kwargs):
     def clean_new_state(self):
         new_state = self.cleaned_data.get('new_state')
         if new_state.slug=='sub-pub' and not self.can_set_sub_pub:
-            raise forms.ValidationError('You may not set the %s state using this form. Use the "Submit to IESG for publication" button on the document\'s main page instead. If that button does not appear, the document may already have IESG state. Ask your Area Director or the Secretariat for help.'%new_state.name)
+            raise forms.ValidationError('You may not set the %s state using this form. Use the "Submit to IESG for Publication" button on the document\'s main page instead. If that button does not appear, the document may already have IESG state. Ask your Area Director or the Secretariat for help.'%new_state.name)
         return new_state
          
 
@@ -1730,6 +1728,19 @@ def next_states_for_stream_state(doc, state_type, current_state):
 
     return next_states
 
+@login_required
+def offer_wg_action_helpers(request, name):
+    doc = get_object_or_404(Document, type="draft", name=name)
+    if doc.stream is None or doc.stream_id != "ietf" or doc.became_rfc() is not None:
+        raise Http404
+
+    if not is_authorized_in_doc_stream(request.user, doc):
+        permission_denied(request, "You don't have permission to access this page.")
+    
+    return render(request, "doc/draft/wg_action_helpers.html",
+                              {"doc": doc,
+                              })
+
 @login_required
 def change_stream_state(request, name, state_type):
     doc = get_object_or_404(Document, type="draft", name=name)
@@ -1744,10 +1755,17 @@ def change_stream_state(request, name, state_type):
     prev_state = doc.get_state(state_type.slug)
     next_states = next_states_for_stream_state(doc, state_type, prev_state)
 
+    # These tell the form to allow directly setting the state to fix up errors.
     can_set_sub_pub = has_role(request.user,('Secretariat','Area Director')) or (prev_state and prev_state.slug=='sub-pub')
 
     if request.method == 'POST':
-        form = ChangeStreamStateForm(request.POST, doc=doc, state_type=state_type,can_set_sub_pub=can_set_sub_pub,stream=doc.stream)
+        form = ChangeStreamStateForm(
+            request.POST,
+            doc=doc,
+            state_type=state_type,
+            can_set_sub_pub=can_set_sub_pub,
+            stream=doc.stream,
+        )
         if form.is_valid():
             by = request.user.person
             events = []
@@ -1768,14 +1786,7 @@ def change_stream_state(request, name, state_type):
                 update_reminder(doc, "stream-s", e, due_date)
 
                 email_stream_state_changed(request, doc, prev_state, new_state, by, comment)
-
-                if doc.stream_id == "ietf":
-                    if new_state.slug == "c-adopt":
-                        email_wg_call_for_adoption_issued(request, doc, cfa_duration_weeks=form.cleaned_data["weeks"])
                     
-                    if new_state.slug == "wg-lc":
-                        email_wg_last_call_issued(request, doc, wglc_duration_weeks=form.cleaned_data["weeks"])
-
             # tags
             existing_tags = set(doc.tags.all())
             new_tags = set(form.cleaned_data["tags"])
@@ -1811,8 +1822,15 @@ def change_stream_state(request, name, state_type):
             else:
                 form.add_error(None, "No change in state or tags found, and no comment provided -- nothing to do.")
     else:
-        form = ChangeStreamStateForm(initial=dict(new_state=prev_state.pk if prev_state else None, tags= doc.tags.all()),
-                                     doc=doc, state_type=state_type, can_set_sub_pub = can_set_sub_pub,stream = doc.stream)
+        form = ChangeStreamStateForm(
+            initial=dict(
+                new_state=prev_state.pk if prev_state else None, tags=doc.tags.all()
+            ),
+            doc=doc,
+            state_type=state_type,
+            can_set_sub_pub=can_set_sub_pub,
+            stream=doc.stream,
+        )
 
     milestones = doc.groupmilestone_set.all()
 
@@ -1857,3 +1875,325 @@ def set_intended_status_level(request, doc, new_level, old_level, comment):
         msg = "\n".join(e.desc for e in events)
 
         email_intended_status_changed(request, doc, msg)
+
+class IssueWorkingGroupLastCallForm(forms.Form):
+    end_date = DatepickerDateField(
+        required=True,
+        date_format="yyyy-mm-dd",
+        picker_settings={
+            "autoclose": "1",
+        },
+        help_text="The date the Last Call closes. If you change this, review the subject and body carefully to ensure the change is captured correctly.",
+    )
+
+    to = MultiEmailField(
+        required=True,
+        help_text="Comma separated list of address to use in the To: header",
+    )
+    cc = MultiEmailField(
+        required=False, help_text="Comma separated list of addresses to copy"
+    )
+    subject = forms.CharField(
+        required=True,
+        help_text="Subject for Last Call message. If you change the date here, be sure to make a matching change in the body.",
+    )
+    body = forms.CharField(
+        widget=forms.Textarea, required=True, help_text="Body for Last Call message"
+    )
+
+    def clean_end_date(self):
+        end_date = self.cleaned_data["end_date"]
+        if end_date <= date_today(DEADLINE_TZINFO):
+            raise forms.ValidationError("End date must be later than today")
+        return end_date
+
+    def clean(self):
+        cleaned_data = super().clean()
+        end_date = cleaned_data.get("end_date")
+        if end_date is not None:
+            body = cleaned_data.get("body")
+            subject = cleaned_data.get("subject")
+            if end_date.isoformat() not in body:
+                self.add_error(
+                    "body",
+                    forms.ValidationError(
+                        f"Last call end date ({end_date.isoformat()}) not found in body"
+                    ),
+                )
+            if end_date.isoformat() not in subject:
+                self.add_error(
+                    "subject",
+                    forms.ValidationError(
+                        f"Last call end date ({end_date.isoformat()}) not found in subject"
+                    ),
+                )
+        return cleaned_data
+
+
+@login_required
+def issue_wg_lc(request, name):
+    doc = get_object_or_404(Document, name=name)
+
+    if doc.stream_id != "ietf":
+        raise Http404
+    if doc.type_id != "draft" or doc.group.type_id != "wg":
+        raise Http404
+    if doc.get_state_slug("draft-stream-ietf") == "wg-lc":
+        raise Http404
+    if doc.get_state_slug("draft") == "rfc":
+        raise Http404
+
+    if not is_authorized_in_doc_stream(request.user, doc):
+        permission_denied(request, "You don't have permission to access this page.")
+
+    if request.method == "POST":
+        form = IssueWorkingGroupLastCallForm(request.POST)
+        if form.is_valid():
+            # Intentionally not changing tags or adding a comment
+            # those things can be done with other workflows
+            by = request.user.person
+            prev_state = doc.get_state("draft-stream-ietf")
+            events = []
+            wglc_state = State.objects.get(type="draft-stream-ietf", slug="wg-lc")
+            doc.set_state(wglc_state)
+            e = add_state_change_event(doc, by, prev_state, wglc_state)
+            events.append(e)
+            end_date = form.cleaned_data["end_date"]
+            update_reminder(
+                doc, "stream-s", e, datetime_from_date(end_date, DEADLINE_TZINFO)
+            )
+            doc.save_with_history(events)
+            email_stream_state_changed(request, doc, prev_state, wglc_state, by)
+            send_mail_text(
+                request, 
+                to = form.cleaned_data["to"], 
+                frm = request.user.person.formatted_email(),
+                subject = form.cleaned_data["subject"], 
+                txt = form.cleaned_data["body"],
+                cc = form.cleaned_data["cc"],
+            )
+            return redirect("ietf.doc.views_doc.document_main", name=doc.name)
+    else:
+        end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=14)
+        subject = f"WG Last Call: {doc.name}-{doc.rev} (Ends {end_date})"
+        body = render_to_string(
+            "doc/mail/wg_last_call_issued.txt",
+            dict(
+                doc=doc,
+                end_date=end_date,
+                wg_list=doc.group.list_email,
+                settings=settings,
+            ),
+        )
+        (to, cc) = gather_address_lists("doc_wg_last_call_issued", doc=doc)
+
+        form = IssueWorkingGroupLastCallForm(
+            initial=dict(
+                end_date=end_date,
+                to=", ".join(to),
+                cc=", ".join(cc),
+                subject=subject,
+                body=body,
+            )
+        )
+
+    return render(
+        request,
+        "doc/draft/issue_working_group_last_call.html",
+        dict(
+            doc=doc,
+            form=form,
+        ),
+    )
+
+class IssueCallForAdoptionForm(forms.Form):
+    end_date = DatepickerDateField(
+        required=True,
+        date_format="yyyy-mm-dd",
+        picker_settings={
+            "autoclose": "1",
+        },
+        help_text="The date the Call for Adoption closes. If you change this, review the subject and body carefully to ensure the change is captured correctly.",
+    )
+
+    to = MultiEmailField(
+        required=True,
+        help_text="Comma separated list of address to use in the To: header",
+    )
+    cc = MultiEmailField(
+        required=False, help_text="Comma separated list of addresses to copy"
+    )
+    subject = forms.CharField(
+        required=True,
+        help_text="Subject for Call for Adoption message. If you change the date here, be sure to make a matching change in the body.",
+    )
+    body = forms.CharField(
+        widget=forms.Textarea, required=True, help_text="Body for Call for Adoption message"
+    )
+
+    def clean_end_date(self):
+        end_date = self.cleaned_data["end_date"]
+        if end_date <= date_today(DEADLINE_TZINFO):
+            raise forms.ValidationError("End date must be later than today")
+        return end_date
+
+    def clean(self):
+        cleaned_data = super().clean()
+        end_date = cleaned_data.get("end_date")
+        if end_date is not None:
+            body = cleaned_data.get("body")
+            subject = cleaned_data.get("subject")
+            if end_date.isoformat() not in body:
+                self.add_error(
+                    "body",
+                    forms.ValidationError(
+                        f"Call for adoption end date ({end_date.isoformat()}) not found in body"
+                    ),
+                )
+            if end_date.isoformat() not in subject:
+                self.add_error(
+                    "subject",
+                    forms.ValidationError(
+                        f"Call for adoption end date ({end_date.isoformat()}) not found in subject"
+                    ),
+                )
+        return cleaned_data
+
+@login_required
+def issue_wg_call_for_adoption(request, name, acronym):
+    doc = get_object_or_404(Document, name=name)
+    group = Group.objects.filter(acronym=acronym, type_id="wg").first()
+    reject = False
+    if group is None or doc.type_id != "draft" or not is_doc_ietf_adoptable(doc):
+        reject = True
+    if doc.stream is None:
+        if not can_adopt_draft(request.user, doc):
+            reject = True
+    elif doc.stream_id != "ietf":
+        reject = True
+    else: # doc.stream_id == "ietf"
+        if not is_authorized_in_doc_stream(request.user, doc):
+            reject = True
+    if reject:
+        raise permission_denied(request, f"You can't issue a {acronym} wg call for adoption for this document.")
+
+    if request.method == "POST":
+        form = IssueCallForAdoptionForm(request.POST)
+        if form.is_valid():
+            # Intentionally not changing tags or adding a comment
+            # those things can be done with other workflows
+            by = request.user.person
+
+            events = []
+            if doc.stream_id != "ietf":
+                stream = StreamName.objects.get(slug="ietf")
+                doc.stream = stream
+                e = DocEvent(type="changed_stream", doc=doc, rev=doc.rev, by=by)
+                e.desc = f"Changed stream to <b>{stream.name}</b>"  # Propogates embedding html in DocEvent.desc for consistency
+                e.save()
+                events.append(e)
+            if doc.group != group:
+                doc.group = group
+                e = DocEvent(type="changed_group", doc=doc, rev=doc.rev, by=by)
+                e.desc = f"Changed group to <b>{group.name} ({group.acronym.upper()})</b>"  # Even if it makes the cats cry
+                e.save()
+                events.append(e)
+            prev_state = doc.get_state("draft-stream-ietf")
+            c_adopt_state = State.objects.get(type="draft-stream-ietf", slug="c-adopt")
+            doc.set_state(c_adopt_state)
+            e = add_state_change_event(doc, by, prev_state, c_adopt_state)
+            events.append(e)
+            end_date = form.cleaned_data["end_date"]
+            update_reminder(
+                doc, "stream-s", e, datetime_from_date(end_date, DEADLINE_TZINFO)
+            )
+            doc.save_with_history(events)
+            email_stream_state_changed(request, doc, prev_state, c_adopt_state, by)
+            send_mail_text(
+                request, 
+                to = form.cleaned_data["to"], 
+                frm = request.user.person.formatted_email(),
+                subject = form.cleaned_data["subject"], 
+                txt = form.cleaned_data["body"],
+                cc = form.cleaned_data["cc"],
+            )
+            return redirect("ietf.doc.views_doc.document_main", name=doc.name)
+    else:
+        end_date = date_today(DEADLINE_TZINFO) + datetime.timedelta(days=14)
+        subject = f"Call for adoption: {doc.name}-{doc.rev}  (Ends {end_date})"
+        body = render_to_string(
+            "doc/mail/wg_call_for_adoption_issued.txt",
+            dict(
+                doc=doc,
+                group=group,
+                end_date=end_date,
+                wg_list=doc.group.list_email,
+                settings=settings,
+            ),
+        )
+        (to, cc) = gather_address_lists("doc_wg_call_for_adoption_issued", doc=doc)
+        if doc.group.acronym == "none":
+            to.insert(0, f"{group.acronym}-chairs@ietf.org")
+            to.insert(0, group.list_email)
+        form = IssueCallForAdoptionForm(
+            initial=dict(
+                end_date=end_date,
+                to=", ".join(to),
+                cc=", ".join(cc),
+                subject=subject,
+                body=body,
+            )
+        )
+
+    return render(
+        request,
+        "doc/draft/issue_working_group_call_for_adoption.html",
+        dict(
+            doc=doc,
+            form=form,
+        ),
+    )
+
+class GroupModelChoiceField(forms.ModelChoiceField):
+    def label_from_instance(self, obj):
+        return f"{obj.acronym} - {obj.name}"
+
+
+class WgForm(forms.Form):
+    group = GroupModelChoiceField(
+        queryset=Group.objects.filter(type_id="wg", state="active")
+        .order_by("acronym")
+        .distinct(),
+        required=True,
+        empty_label="Select IETF Working Group",
+    )
+
+    def __init__(self, *args, **kwargs):
+        user = kwargs.pop("user")
+        super(WgForm, self).__init__(*args, **kwargs)
+        if not has_role(user, ["Secretariat", "Area Director"]):
+            self.fields["group"].queryset = self.fields["group"].queryset.filter(
+                role__name_id="chair", role__person=user.person
+            )
+
+
+@role_required("Secretariat", "WG Chair")
+def ask_about_ietf_adoption_call(request, name):
+    doc = get_object_or_404(Document, name=name)
+    if doc.stream is not None or doc.group.acronym != "none":
+        raise Http404
+    if request.method == "POST":
+        form = WgForm(request.POST, user=request.user)
+        if form.is_valid():
+            group = form.cleaned_data["group"]
+            return redirect(issue_wg_call_for_adoption, name=doc.name, acronym=group.acronym)
+    else:
+        form = WgForm(initial={"group": None}, user=request.user)
+    return render(
+        request,
+        "doc/draft/ask_about_ietf_adoption.html",
+        dict(
+            doc=doc,
+            form=form,
+        ),
+    )
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index e2893a90f7..1f634278be 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -211,9 +211,9 @@ def role_required(*role_names):
 
 # specific permissions
 
+
 def is_authorized_in_doc_stream(user, doc):
-    """Return whether user is authorized to perform stream duties on
-    document."""
+    """Is user authorized to perform stream duties on doc?"""
     if has_role(user, ["Secretariat"]):
         return True
 
diff --git a/ietf/templates/doc/document_draft.html b/ietf/templates/doc/document_draft.html
index 6414538283..eab1d779fb 100644
--- a/ietf/templates/doc/document_draft.html
+++ b/ietf/templates/doc/document_draft.html
@@ -63,7 +63,12 @@
                     <td class="edit">
                         {% if doc.stream and can_edit_stream_info and doc.stream.slug != "legacy" and not snapshot %}
                             <a class="btn btn-primary btn-sm"
-                               href="{% url 'ietf.doc.views_draft.change_stream_state' name=doc.name state_type=stream_state_type_slug %}">
+                               {% if doc|is_doc_ietf_adoptable or doc|can_issue_ietf_wg_lc or doc|can_submit_to_iesg %}
+                                 href="{% url 'ietf.doc.views_draft.offer_wg_action_helpers' name=doc.name %}"
+                               {% else %}
+                                 href="{% url 'ietf.doc.views_draft.change_stream_state' name=doc.name state_type=stream_state_type_slug %}"
+                               {% endif %}
+                            >
                                 Edit
                             </a>
                         {% endif %}
diff --git a/ietf/templates/doc/draft/ask_about_ietf_adoption.html b/ietf/templates/doc/draft/ask_about_ietf_adoption.html
new file mode 100644
index 0000000000..d19e4572b7
--- /dev/null
+++ b/ietf/templates/doc/draft/ask_about_ietf_adoption.html
@@ -0,0 +1,22 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
+{% load django_bootstrap5 ietf_filters origin %}
+{% block title %}Manage Adoption of {{ doc }}{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Manage Adoption
+        <br>
+        <small class="text-body-secondary">{{ doc }}</small>
+    </h1>
+    <div>
+        Do you wish to issue an IETF Working Group call for adoption to one of these working groups?
+    </div>
+    <form method="post">
+        {% csrf_token %}
+        {% bootstrap_form form %}
+        <button type="submit" class="btn btn-primary">Issue IETF WG Call For Adoption</button>
+        <a class="btn btn-secondary" href="{% url 'ietf.doc.views_draft.adopt_draft' name=doc.name %}">No, I wish to manage adoption directly, perhaps with non-IETF-stream groups</a>
+        <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
+    </form>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/draft/change_stream_state.html b/ietf/templates/doc/draft/change_stream_state.html
index 0b13e02fdf..7f3132b3c8 100644
--- a/ietf/templates/doc/draft/change_stream_state.html
+++ b/ietf/templates/doc/draft/change_stream_state.html
@@ -1,7 +1,6 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% load django_bootstrap5 %}
+{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
+{% load django_bootstrap5 ietf_filters origin %}
 {% block title %}Change {{ state_type.label }} for {{ doc }}{% endblock %}
 {% block content %}
     {% origin %}
@@ -14,12 +13,10 @@ <h1>
         <a class="my-3 btn btn-info"
            href="{% url 'ietf.doc.views_help.state_help' type=state_type.slug %}">Help on states</a>
         <p>
-            <b>Move document to {{ next_states|pluralize:"to one of" }} the recommended next state{{ next_states|pluralize }}:</b>
+            <b>Move document to {{ next_states|pluralize:"one of" }} the recommended next state{{ next_states|pluralize }}:</b>
         </p>
         {% for state in next_states %}
-            {% if state.slug == 'sub-pub' %}
-                <a type="button" class="btn btn-primary next-state" href="{% url 'ietf.doc.views_draft.to_iesg' name=doc.name %}">{{ state.name }}</a>
-            {% else %}
+            {% if state.slug != 'sub-pub' and state.slug != "wg-lc" %}
                 <button type="button" class="btn btn-primary next-state" data-state="{{ state.pk }}">{{ state.name }}</button>
             {% endif %}
         {% endfor %}
@@ -28,7 +25,13 @@ <h1>
         {% csrf_token %}
         {% bootstrap_form form %}
         <button type="submit" class="btn btn-primary">Submit</button>
-        <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
+        <a class="btn btn-secondary float-end"
+          {% if doc|can_issue_ietf_wg_lc or doc|can_submit_to_iesg %}
+            href="{% url 'ietf.doc.views_draft.offer_wg_action_helpers' name=doc.name %}"
+          {% else %} 
+            href="{{ doc.get_absolute_url }}"
+          {% endif %}
+        >Back</a>
     </form>
 {% endblock %}
 {% block js %}
diff --git a/ietf/templates/doc/draft/issue_working_group_call_for_adoption.html b/ietf/templates/doc/draft/issue_working_group_call_for_adoption.html
new file mode 100644
index 0000000000..61094b053a
--- /dev/null
+++ b/ietf/templates/doc/draft/issue_working_group_call_for_adoption.html
@@ -0,0 +1,61 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load origin django_bootstrap5 static %}
+={% block title %}Issue Working Group Call for Adoption of {{ doc }}{% endblock %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static 'ietf/css/datepicker.css' %}">
+{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Issue Working Group Call for Adoption
+        <br>
+        <small class="text-body-secondary">{{ doc }}</small>
+    </h1>
+    {% if form.errors %}
+        <p class="alert alert-danger my-3">
+            Please correct the following:
+        </p>
+    {% endif %}
+    {% bootstrap_form_errors form %}
+    <form class="mt-5" method="post">
+        {% csrf_token %}
+        {% bootstrap_form form %}
+        <div id="end_date_warn" class="alert alert-warning d-none" role="alert">
+            All dates have been updated automatically in the Subject and Body fields with the End date value. Since you previously edited these fields manually, review both to ensure they match your expectations.
+        </div>
+        <button type="submit" class="btn btn-primary">Submit</button>
+        <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
+    </form>
+{% endblock %}
+{% block js %}
+    <script src="{% static 'ietf/js/datepicker.js' %}"></script>
+    <script>
+        (function () {
+            const datepickerElm = document.querySelector('#id_end_date')
+            const subjectElm = document.querySelector('#id_subject')
+            const contentElm = document.querySelector('#id_body')
+            const warnElm = document.querySelector('#end_date_warn')
+            let isSubjectOrContentDirty = false
+
+            // Handle date auto-replace in subject + content
+            datepickerElm.addEventListener('changeDate', ev => {
+                subjectElm.value = subjectElm.value.replaceAll(/2[0-9]{3}-[0-9]{2}-[0-9]{2}/g, datepickerElm.value)
+                contentElm.value = contentElm.value.replaceAll(/2[0-9]{3}-[0-9]{2}-[0-9]{2}/g, datepickerElm.value)
+
+                // Warn about auto-replace on dirtied fields
+                if (isSubjectOrContentDirty) {
+                    warnElm.classList.remove('d-none')
+                }
+            })
+
+            // Detect dirtied fields
+            subjectElm.addEventListener('input', () => {
+                isSubjectOrContentDirty = true
+            })
+            contentElm.addEventListener('input', () => {
+                isSubjectOrContentDirty = true
+            })
+        })()
+    </script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/draft/issue_working_group_last_call.html b/ietf/templates/doc/draft/issue_working_group_last_call.html
new file mode 100644
index 0000000000..d6f35a0e82
--- /dev/null
+++ b/ietf/templates/doc/draft/issue_working_group_last_call.html
@@ -0,0 +1,61 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% load origin django_bootstrap5 static %}
+={% block title %}Issue Working Group Last Call for {{ doc }}{% endblock %}
+{% block pagehead %}
+    <link rel="stylesheet" href="{% static 'ietf/css/datepicker.css' %}">
+{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Issue Working Group Last Call
+        <br>
+        <small class="text-body-secondary">{{ doc }}</small>
+    </h1>
+    {% if form.errors %}
+        <p class="alert alert-danger my-3">
+            Please correct the following:
+        </p>
+    {% endif %}
+    {% bootstrap_form_errors form %}
+    <form class="mt-5" method="post">
+        {% csrf_token %}
+        {% bootstrap_form form %}
+        <div id="end_date_warn" class="alert alert-warning d-none" role="alert">
+            All dates have been updated automatically in the Subject and Body fields with the End date value. Since you previously edited these fields manually, review both to ensure they match your expectations.
+        </div>
+        <button type="submit" class="btn btn-primary">Submit</button>
+        <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
+    </form>
+{% endblock %}
+{% block js %}
+    <script src="{% static 'ietf/js/datepicker.js' %}"></script>
+    <script>
+        (function () {
+            const datepickerElm = document.querySelector('#id_end_date')
+            const subjectElm = document.querySelector('#id_subject')
+            const contentElm = document.querySelector('#id_body')
+            const warnElm = document.querySelector('#end_date_warn')
+            let isSubjectOrContentDirty = false
+
+            // Handle date auto-replace in subject + content
+            datepickerElm.addEventListener('changeDate', ev => {
+                subjectElm.value = subjectElm.value.replaceAll(/2[0-9]{3}-[0-9]{2}-[0-9]{2}/g, datepickerElm.value)
+                contentElm.value = contentElm.value.replaceAll(/2[0-9]{3}-[0-9]{2}-[0-9]{2}/g, datepickerElm.value)
+
+                // Warn about auto-replace on dirtied fields
+                if (isSubjectOrContentDirty) {
+                    warnElm.classList.remove('d-none')
+                }
+            })
+
+            // Detect dirtied fields
+            subjectElm.addEventListener('input', () => {
+                isSubjectOrContentDirty = true
+            })
+            contentElm.addEventListener('input', () => {
+                isSubjectOrContentDirty = true
+            })
+        })()
+    </script>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/draft/wg_action_helpers.html b/ietf/templates/doc/draft/wg_action_helpers.html
new file mode 100644
index 0000000000..d21f3c0926
--- /dev/null
+++ b/ietf/templates/doc/draft/wg_action_helpers.html
@@ -0,0 +1,25 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
+{% load django_bootstrap5 ietf_filters origin %}
+{% block title %}Change IETF WG state for {{ doc }}{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        Change IETF WG state
+        <br>
+        <small class="text-body-secondary">{{ doc }}</small>
+    </h1>
+    <div>
+        {% if doc|is_doc_ietf_adoptable %}
+          <a class="btn btn-primary" href="{% url 'ietf.doc.views_draft.issue_wg_call_for_adoption' name=doc.name acronym=doc.group.acronym %}" id="id_wgadopt_button">Issue WG Call for Adoption</a>
+        {% endif %}
+        {% if doc|can_issue_ietf_wg_lc %}
+          <a class="btn btn-primary" href="{% url 'ietf.doc.views_draft.issue_wg_lc' name=doc.name %}" id="id_wglc_button">Issue{% if doc|has_had_ietf_wg_lc %} Another{% endif %} Working Group Last Call</a>
+        {% endif %}
+        {% if doc|can_submit_to_iesg %}
+          <a class="btn btn-primary" href="{% url 'ietf.doc.views_draft.to_iesg' name=doc.name %}" id="id_pubreq_button">Submit to IESG for Publication</a>
+        {% endif %}
+        <a class="btn btn-primary" href="{% url 'ietf.doc.views_draft.change_stream_state' name=doc.name state_type='draft-stream-ietf' %}">Set any WG state directly</a>
+        <a class="btn btn-secondary float-end" href="{{ doc.get_absolute_url }}">Back</a>
+    </div>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt b/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
index c4a2401bc2..15ace9495b 100644
--- a/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
+++ b/ietf/templates/doc/mail/wg_call_for_adoption_issued.txt
@@ -1,15 +1,13 @@
-{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}
-Subject: {{ subject }}
+{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}This message starts a {{group.acronym}} WG Call for Adoption of:
+{{ doc.name }}-{{ doc.rev }}
 
-This message starts a {{ cfa_duration_weeks }}-week Call for Adoption for this document. 
+
+This Working Group Call for Adoption ends on {{ end_date }}
 
 Abstract: 
 {{ doc.abstract }}
 
-File can be retrieved from:
-{{ url }}
-
-Please reply to this message keeping {{ wg_list }} in copy by indicating whether you support or not the adoption of this draft as a WG document. Comments to motivate your preference are highly appreciated. 
+Please reply to this message and indicate whether or not you support adoption of this Internet-Draft by the {{group.acronym}} WG. Comments to explain your preference are greatly appreciated. Please reply to all recipients of this message and include this message in your response.
 
 Authors, and WG participants in general, are reminded of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [2]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].
 
@@ -17,5 +15,17 @@ Thank you.
 [1] https://datatracker.ietf.org/doc/bcp78/
 [2] https://datatracker.ietf.org/doc/bcp79/
 [3] https://datatracker.ietf.org/doc/rfc6701/
+
+The IETF datatracker status page for this Internet-Draft is:
+{{ settings.IDTRACKER_BASE_URL }}{% url 'ietf.doc.views_doc.document_main' name=doc.name %}
+{% if doc.submission.xml_version == "3" %}
+There is also an HTML version available at:
+{{ settings.IETF_ID_ARCHIVE_URL }}{{ doc.name }}-{{ doc.rev }}.html{% else %}
+There is also an HTMLized version available at:
+{{ settings.IDTRACKER_BASE_URL }}{% url 'ietf.doc.views_doc.document_html' name=doc.name rev=doc.rev %}{% endif %}
+{% if doc.rev != "00" %}
+A diff from the previous version is available at:
+{{settings.RFCDIFF_BASE_URL}}?url2={{ doc.name }}-{{ doc.rev }}
+{% endif %}
 {% endfilter %}
 {% endautoescape %}
diff --git a/ietf/templates/doc/mail/wg_last_call_issued.txt b/ietf/templates/doc/mail/wg_last_call_issued.txt
index 35b1e149d7..114f8bc5e2 100644
--- a/ietf/templates/doc/mail/wg_last_call_issued.txt
+++ b/ietf/templates/doc/mail/wg_last_call_issued.txt
@@ -1,7 +1,7 @@
-{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}
-Subject: {{ subject }}
+{% load ietf_filters %}{% load mail_filters %}{% autoescape off %}{% filter wordwrap:78 %}This message starts a WG Last Call for:
+{{ doc.name }}-{{ doc.rev }}
 
-This message starts a {{ wglc_duration_weeks }}-week WG Last Call for this document. 
+This Working Group Last Call ends on {{ end_date }}
 
 Abstract: 
 {{ doc.abstract }}
@@ -9,14 +9,26 @@ Abstract:
 File can be retrieved from:
 {{ url }}
 
-Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping {{ wg_list }} in copy. Objections should be motivated and suggestions to resolve them are highly appreciated.
+Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping {{ wg_list }} in copy. Objections should be explained and suggestions to resolve them are highly appreciated.
 
-Authors, and WG participants in general, are reminded again of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].
+Authors, and WG participants in general, are reminded of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1]. Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any. Sanctions available for application to violators of IETF IPR Policy can be found at [3].
 
 Thank you.
 
 [1] https://datatracker.ietf.org/doc/bcp78/
 [2] https://datatracker.ietf.org/doc/bcp79/
 [3] https://datatracker.ietf.org/doc/rfc6701/
+
+The IETF datatracker status page for this Internet-Draft is:
+{{ settings.IDTRACKER_BASE_URL }}{% url 'ietf.doc.views_doc.document_main' name=doc.name %}
+{% if doc.submission.xml_version == "3" %}
+There is also an HTML version available at:
+{{ settings.IETF_ID_ARCHIVE_URL }}{{ doc.name }}-{{ doc.rev }}.html{% else %}
+There is also an HTMLized version available at:
+{{ settings.IDTRACKER_BASE_URL }}{% url 'ietf.doc.views_doc.document_html' name=doc.name rev=doc.rev %}{% endif %}
+{% if doc.rev != "00" %}
+A diff from the previous version is available at:
+{{settings.RFCDIFF_BASE_URL}}?url2={{ doc.name }}-{{ doc.rev }}
+{% endif %}
 {% endfilter %}
 {% endautoescape %}

From fb50ac0d90f7a8d5b5ebe7f88ce08be2e9ea2acf Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 16 Dec 2025 11:58:05 -0400
Subject: [PATCH 516/707] chore: optional opentelemetry (#10112)

* chore: optional opentelemetry

* chore: add comment
---
 dev/build/gunicorn.conf.py | 45 +++++++++++++++++++++++---------------
 1 file changed, 27 insertions(+), 18 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index c54b24a054..9af4478685 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -135,21 +135,30 @@ def post_request(worker, req, environ, resp):
 def post_fork(server, worker):
     server.log.info("Worker spawned (pid: %s)", worker.pid)
 
-    resource = Resource.create(attributes={
-        "service.name": "datatracker",
-        "service.version": ietf.__version__,
-        "service.instance.id": worker.pid,
-        "service.namespace": "datatracker",
-        "deployment.environment.name": os.environ.get("DATATRACKER_SERVICE_ENV", "dev")
-    })
-
-    trace.set_tracer_provider(TracerProvider(resource=resource))
-    otlp_exporter = OTLPSpanExporter(endpoint="https://heimdall-otlp.ietf.org/v1/traces")
-
-    trace.get_tracer_provider().add_span_processor(BatchSpanProcessor(otlp_exporter))
-
-    # Instrumentations
-    DjangoInstrumentor().instrument()
-    Psycopg2Instrumentor().instrument()
-    PymemcacheInstrumentor().instrument()
-    RequestsInstrumentor().instrument()
+    # Setting DATATRACKER_OPENTELEMETRY_ENABLE=all in the environment will enable all
+    # opentelemetry instrumentations. Individual instrumentations can be selected by
+    # using a space-separated list. See the code below for available instrumentations.
+    telemetry_env = os.environ.get("DATATRACKER_OPENTELEMETRY_ENABLE", "").strip()
+    if telemetry_env != "":
+        enabled_telemetry = [tok.strip().lower() for tok in telemetry_env.split()]
+        resource = Resource.create(attributes={
+            "service.name": "datatracker",
+            "service.version": ietf.__version__,
+            "service.instance.id": worker.pid,
+            "service.namespace": "datatracker",
+            "deployment.environment.name": os.environ.get("DATATRACKER_SERVICE_ENV", "dev")
+        })
+        trace.set_tracer_provider(TracerProvider(resource=resource))
+        otlp_exporter = OTLPSpanExporter(endpoint="https://heimdall-otlp.ietf.org/v1/traces")
+    
+        trace.get_tracer_provider().add_span_processor(BatchSpanProcessor(otlp_exporter))
+    
+        # Instrumentations
+        if "all" in enabled_telemetry or "django" in enabled_telemetry: 
+            DjangoInstrumentor().instrument()
+        if "all" in enabled_telemetry or "psycopg2" in enabled_telemetry: 
+            Psycopg2Instrumentor().instrument()
+        if "all" in enabled_telemetry or "pymemcache" in enabled_telemetry: 
+            PymemcacheInstrumentor().instrument()
+        if "all" in enabled_telemetry or "requests" in enabled_telemetry: 
+            RequestsInstrumentor().instrument()

From 58430dbdfdf306c107fe62cae97e23050688e56a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 16 Dec 2025 13:44:41 -0400
Subject: [PATCH 517/707] refactor: no delete from inline admins (#10113)

* refactor: no delete from TabularInlines

* refactor: no delete from StackedInlines
---
 ietf/doc/admin.py      | 11 +++++++----
 ietf/group/admin.py    |  7 ++++---
 ietf/ipr/admin.py      |  5 +++--
 ietf/liaisons/admin.py |  5 +++--
 ietf/meeting/admin.py  |  9 +++++----
 ietf/name/admin.py     |  3 ++-
 ietf/person/admin.py   |  5 +++--
 ietf/utils/admin.py    | 13 +++++++++++++
 8 files changed, 40 insertions(+), 18 deletions(-)

diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 745536f9a1..920e389a9a 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -15,6 +15,7 @@
     ReviewAssignmentDocEvent, IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
     BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject )
 
+from ietf.utils.admin import SaferTabularInline
 from ietf.utils.validators import validate_external_resource_value
 
 class StateTypeAdmin(admin.ModelAdmin):
@@ -28,17 +29,19 @@ class StateAdmin(admin.ModelAdmin):
     filter_horizontal = ["next_states"]
 admin.site.register(State, StateAdmin)
 
-class DocAuthorInline(admin.TabularInline):
+class DocAuthorInline(SaferTabularInline):
     model = DocumentAuthor
     raw_id_fields = ['person', 'email']
     extra = 1
+    can_delete = False
+    show_change_link = True
 
-class DocActionHolderInline(admin.TabularInline):
+class DocActionHolderInline(SaferTabularInline):
     model = DocumentActionHolder
     raw_id_fields = ['person']
     extra = 1
 
-class RelatedDocumentInline(admin.TabularInline):
+class RelatedDocumentInline(SaferTabularInline):
     model = RelatedDocument
     fk_name= 'source'
     def this(self, instance):
@@ -48,7 +51,7 @@ def this(self, instance):
     raw_id_fields = ['target']
     extra = 1
 
-class AdditionalUrlInLine(admin.TabularInline):
+class AdditionalUrlInLine(SaferTabularInline):
     model = DocumentURL
     fields = ['tag','desc','url',]
     extra = 1
diff --git a/ietf/group/admin.py b/ietf/group/admin.py
index fedec49d85..685c10aeea 100644
--- a/ietf/group/admin.py
+++ b/ietf/group/admin.py
@@ -26,14 +26,15 @@
     MilestoneGroupEvent, GroupExtResource, Appeal, AppealArtifact )
 from ietf.name.models import GroupTypeName
 
-from ietf.utils.validators import validate_external_resource_value
+from ietf.utils.admin import SaferTabularInline
 from ietf.utils.response import permission_denied
+from ietf.utils.validators import validate_external_resource_value
 
-class RoleInline(admin.TabularInline):
+class RoleInline(SaferTabularInline):
     model = Role
     raw_id_fields = ["person", "email"]
 
-class GroupURLInline(admin.TabularInline):
+class GroupURLInline(SaferTabularInline):
     model = GroupURL
 
 class GroupForm(forms.ModelForm):
diff --git a/ietf/ipr/admin.py b/ietf/ipr/admin.py
index 1a8a908dcd..d6a320203b 100644
--- a/ietf/ipr/admin.py
+++ b/ietf/ipr/admin.py
@@ -17,6 +17,7 @@
     NonDocSpecificIprDisclosure,
     LegacyMigrationIprEvent,
 )
+from ietf.utils.admin import SaferTabularInline
 
 # ------------------------------------------------------
 # ModelAdmins
@@ -29,13 +30,13 @@ class Meta:
           'sections':forms.TextInput,
         }
 
-class IprDocRelInline(admin.TabularInline):
+class IprDocRelInline(SaferTabularInline):
     model = IprDocRel
     form = IprDocRelAdminForm
     raw_id_fields = ['document']
     extra = 1
 
-class RelatedIprInline(admin.TabularInline):
+class RelatedIprInline(SaferTabularInline):
     model = RelatedIpr
     raw_id_fields = ['target']
     fk_name = 'source'
diff --git a/ietf/liaisons/admin.py b/ietf/liaisons/admin.py
index 21515ed1a3..d873cce536 100644
--- a/ietf/liaisons/admin.py
+++ b/ietf/liaisons/admin.py
@@ -7,15 +7,16 @@
 
 from ietf.liaisons.models import  ( LiaisonStatement, LiaisonStatementEvent,
     RelatedLiaisonStatement, LiaisonStatementAttachment )
+from ietf.utils.admin import SaferTabularInline
 
 
-class RelatedLiaisonStatementInline(admin.TabularInline):
+class RelatedLiaisonStatementInline(SaferTabularInline):
     model = RelatedLiaisonStatement
     fk_name = 'source'
     raw_id_fields = ['target']
     extra = 1
 
-class LiaisonStatementAttachmentInline(admin.TabularInline):
+class LiaisonStatementAttachmentInline(SaferTabularInline):
     model = LiaisonStatementAttachment
     raw_id_fields = ['document']
     extra = 1
diff --git a/ietf/meeting/admin.py b/ietf/meeting/admin.py
index d886a9a4b6..03abf5c029 100644
--- a/ietf/meeting/admin.py
+++ b/ietf/meeting/admin.py
@@ -10,6 +10,7 @@
     SessionPresentation, ImportantDate, SlideSubmission, SchedulingEvent, BusinessConstraint,
     ProceedingsMaterial, MeetingHost, Registration, RegistrationTicket,
     AttendanceTypeName)
+from ietf.utils.admin import SaferTabularInline
 
 
 class UrlResourceAdmin(admin.ModelAdmin):
@@ -18,7 +19,7 @@ class UrlResourceAdmin(admin.ModelAdmin):
     raw_id_fields = ['room', ]
 admin.site.register(UrlResource, UrlResourceAdmin)
 
-class UrlResourceInline(admin.TabularInline):
+class UrlResourceInline(SaferTabularInline):
     model = UrlResource
 
 class RoomAdmin(admin.ModelAdmin):
@@ -28,7 +29,7 @@ class RoomAdmin(admin.ModelAdmin):
 
 admin.site.register(Room, RoomAdmin)
 
-class RoomInline(admin.TabularInline):
+class RoomInline(SaferTabularInline):
     model = Room
 
 class MeetingAdmin(admin.ModelAdmin):
@@ -93,7 +94,7 @@ def name_lower(self, instance):
 
 admin.site.register(Constraint, ConstraintAdmin)
 
-class SchedulingEventInline(admin.TabularInline):
+class SchedulingEventInline(SaferTabularInline):
     model = SchedulingEvent
     raw_id_fields = ["by"]
 
@@ -244,7 +245,7 @@ def queryset(self, request, queryset):
             return queryset.filter(tickets__attendance_type__slug=self.value()).distinct()
         return queryset
 
-class RegistrationTicketInline(admin.TabularInline):
+class RegistrationTicketInline(SaferTabularInline):
     model = RegistrationTicket
 
 class RegistrationAdmin(admin.ModelAdmin):
diff --git a/ietf/name/admin.py b/ietf/name/admin.py
index 4336e0569c..b89d6d141c 100644
--- a/ietf/name/admin.py
+++ b/ietf/name/admin.py
@@ -57,6 +57,7 @@
 
 
 from ietf.stats.models import CountryAlias
+from ietf.utils.admin import SaferTabularInline
 
 
 class NameAdmin(admin.ModelAdmin):
@@ -86,7 +87,7 @@ class GroupTypeNameAdmin(NameAdmin):
 admin.site.register(GroupTypeName, GroupTypeNameAdmin)
 
 
-class CountryAliasInline(admin.TabularInline):
+class CountryAliasInline(SaferTabularInline):
     model = CountryAlias
     extra = 1
 
diff --git a/ietf/person/admin.py b/ietf/person/admin.py
index cd8ca2abf1..f46edcf8ae 100644
--- a/ietf/person/admin.py
+++ b/ietf/person/admin.py
@@ -7,6 +7,7 @@
 from ietf.person.models import Email, Alias, Person, PersonalApiKey, PersonEvent, PersonApiKeyEvent, PersonExtResource
 from ietf.person.name import name_parts
 
+from ietf.utils.admin import SaferStackedInline, SaferTabularInline
 from ietf.utils.validators import validate_external_resource_value
 
 
@@ -16,7 +17,7 @@ class EmailAdmin(simple_history.admin.SimpleHistoryAdmin):
     search_fields = ["address", "person__name", ]
 admin.site.register(Email, EmailAdmin)
     
-class EmailInline(admin.TabularInline):
+class EmailInline(SaferTabularInline):
     model = Email
 
 class AliasAdmin(admin.ModelAdmin):
@@ -25,7 +26,7 @@ class AliasAdmin(admin.ModelAdmin):
     raw_id_fields = ["person"]
 admin.site.register(Alias, AliasAdmin)
 
-class AliasInline(admin.StackedInline):
+class AliasInline(SaferStackedInline):
     model = Alias
 
 class PersonAdmin(simple_history.admin.SimpleHistoryAdmin):
diff --git a/ietf/utils/admin.py b/ietf/utils/admin.py
index 6c1c8726e1..e6324ad7cd 100644
--- a/ietf/utils/admin.py
+++ b/ietf/utils/admin.py
@@ -51,6 +51,19 @@ def _link(self):
     _link.admin_order_field = ordering
     return _link
 
+
+class SaferStackedInline(admin.StackedInline):
+    """StackedInline without delete by default"""
+    can_delete = False  # no delete button
+    show_change_link = True  # show a link to the resource (where it can be deleted)
+
+
+class SaferTabularInline(admin.TabularInline):
+    """TabularInline without delete by default"""
+    can_delete = False  # no delete button
+    show_change_link = True  # show a link to the resource (where it can be deleted)
+
+
 from .models import DumpInfo
 class DumpInfoAdmin(admin.ModelAdmin):
     list_display = ['date', 'host', 'tz']

From 4f0102d4f48e59ab65e0545959315f060a9c3a11 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 16 Dec 2025 14:28:02 -0400
Subject: [PATCH 518/707] fix: remove redundant options (#10117)

---
 ietf/doc/admin.py | 2 --
 1 file changed, 2 deletions(-)

diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 920e389a9a..8f26b222e1 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -33,8 +33,6 @@ class DocAuthorInline(SaferTabularInline):
     model = DocumentAuthor
     raw_id_fields = ['person', 'email']
     extra = 1
-    can_delete = False
-    show_change_link = True
 
 class DocActionHolderInline(SaferTabularInline):
     model = DocumentActionHolder

From 4f1d8000b47aa3a3deadabfa4a863cb741227281 Mon Sep 17 00:00:00 2001
From: Orie Steele <orie@or13.io>
Date: Fri, 19 Dec 2025 08:38:07 -0600
Subject: [PATCH 519/707] Merge pull request #10135 from OR13/patch-1

fix: change title from 'IAB news we can use' to 'IESG Liaison News'
---
 ietf/iesg/agenda.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/iesg/agenda.py b/ietf/iesg/agenda.py
index 587713089f..ace4c9ec40 100644
--- a/ietf/iesg/agenda.py
+++ b/ietf/iesg/agenda.py
@@ -133,7 +133,7 @@ def agenda_sections():
         ('4.2', {'title':"WG rechartering"}),
         ('4.2.1', {'title':"Under evaluation for IETF review", 'docs':[]}),
         ('4.2.2', {'title':"Proposed for approval", 'docs':[]}),
-        ('5', {'title':"IAB news we can use"}),
+        ('5', {'title':"IESG Liaison News"}),
         ('6', {'title':"Management issues"}),
         ('7', {'title':"Any Other Business (WG News, New Proposals, etc.)"}),
         ])

From 7f566673abef2df32c8bf477fda1f6bf63fc0cf9 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 19 Dec 2025 12:15:11 -0600
Subject: [PATCH 520/707] feat: move base containers to trixie (#9535) (#10127)

* Use latest release of yanglint, e.g. libyang3-tools.

* Remove apt-utils, since apt-key is removed.

Fixes: #8701

Co-authored-by: avtobiff <avtobiff@gmail.com>
Co-authored-by: Per Andersson <per@ionio.se>
---
 docker/base.Dockerfile | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 2501636049..1b1f5264b8 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12-bookworm
+FROM python:3.12-trixie
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -7,7 +7,7 @@ ENV NODE_MAJOR=16
 # Update system packages
 RUN apt-get update \
     && apt-get -qy upgrade \
-    && apt-get -y install --no-install-recommends apt-utils dialog 2>&1
+    && apt-get -y install --no-install-recommends dialog 2>&1
 
 # Add Node.js Source
 RUN apt-get install -y --no-install-recommends ca-certificates curl gnupg \
@@ -51,7 +51,6 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libgtk2.0-0 \
 	libgtk-3-0 \
 	libnotify-dev \
-	libgconf-2-4 \
 	libgbm-dev \
 	libnss3 \
 	libxss1 \
@@ -60,7 +59,7 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libmagic-dev \
 	libmariadb-dev \
 	libmemcached-tools \
-	libyang2-tools \
+	libyang3-tools \
 	locales \
 	make \
 	mariadb-client \

From e510c8e4a9016c267a1b02557ebaa3656f7f13c4 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Fri, 19 Dec 2025 18:29:28 +0000
Subject: [PATCH 521/707] ci: update base image target version to 20251219T1815

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index ae59ba1440..d40a734f89 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20251201T1548
+FROM ghcr.io/ietf-tools/datatracker-app-base:20251219T1815
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 726f080c67..8b107939b6 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20251201T1548
+20251219T1815

From 6ee56b52c1b412c0ba8cacd6421a3c8b529f5a4e Mon Sep 17 00:00:00 2001
From: Absit Iniuria <absniuria@nours.page>
Date: Fri, 19 Dec 2025 19:02:42 +0000
Subject: [PATCH 522/707] fix: adjust rendering of agenda sesh pop-up on mobile
 (#10134)

* fix: adjust popup display on mobile

* fix: adjust ui spacing
---
 client/agenda/AgendaDetailsModal.vue | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/client/agenda/AgendaDetailsModal.vue b/client/agenda/AgendaDetailsModal.vue
index 2582bf2159..69c8ef8b53 100644
--- a/client/agenda/AgendaDetailsModal.vue
+++ b/client/agenda/AgendaDetailsModal.vue
@@ -274,6 +274,7 @@ async function fetchSessionMaterials () {
 <style lang="scss">
 @import "bootstrap/scss/functions";
 @import "bootstrap/scss/variables";
+@import "../shared/breakpoints";
 
 .agenda-eventdetails {
   width: 90vw;
@@ -403,5 +404,29 @@ async function fetchSessionMaterials () {
       font-size: 16px;
     }
   }
+
+  .n-card-header {
+    @media screen and (max-width: $bs5-break-sm) {
+      display: block;
+      padding: 1em;
+    }
+  }
+
+  .n-card__content {
+    @media screen and (max-width: $bs5-break-sm) {
+      padding: 1em;
+
+      .detail-title {
+        display: block;
+      }
+
+      .nav-link,
+      .nav-link.active {
+        display: grid;
+        width: 1em;
+        border-width: 1em;
+      }
+    }
+  }
 }
 </style>

From 3565d8427efdbefb2b36cd2fe0776ad67c55d130 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 19 Dec 2025 15:51:47 -0600
Subject: [PATCH 523/707] fix: revert "feat: move base containers to trixie
 (#9535) (#10127)" (#10140)

This reverts commit 7f566673abef2df32c8bf477fda1f6bf63fc0cf9.
---
 docker/base.Dockerfile | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 1b1f5264b8..2501636049 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12-trixie
+FROM python:3.12-bookworm
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -7,7 +7,7 @@ ENV NODE_MAJOR=16
 # Update system packages
 RUN apt-get update \
     && apt-get -qy upgrade \
-    && apt-get -y install --no-install-recommends dialog 2>&1
+    && apt-get -y install --no-install-recommends apt-utils dialog 2>&1
 
 # Add Node.js Source
 RUN apt-get install -y --no-install-recommends ca-certificates curl gnupg \
@@ -51,6 +51,7 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libgtk2.0-0 \
 	libgtk-3-0 \
 	libnotify-dev \
+	libgconf-2-4 \
 	libgbm-dev \
 	libnss3 \
 	libxss1 \
@@ -59,7 +60,7 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libmagic-dev \
 	libmariadb-dev \
 	libmemcached-tools \
-	libyang3-tools \
+	libyang2-tools \
 	locales \
 	make \
 	mariadb-client \

From c85ebbf326eb5dc6fa23e315e462ae4fefffb709 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Fri, 19 Dec 2025 22:04:33 +0000
Subject: [PATCH 524/707] ci: update base image target version to 20251219T2152

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index d40a734f89..e05ad51d1b 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20251219T1815
+FROM ghcr.io/ietf-tools/datatracker-app-base:20251219T2152
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 8b107939b6..f8afdadf36 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20251219T1815
+20251219T2152

From 3b07c70435697625d5c20432f619a9f91c5c10e3 Mon Sep 17 00:00:00 2001
From: Absit Iniuria <absniuria@nours.page>
Date: Fri, 9 Jan 2026 15:59:30 +0000
Subject: [PATCH 525/707] feat: provide link to detailed submission status page
 for submission api (#10233)

* feat: include link to detailed submission status page for submission api

* chore: rename endpoint to submission_url

---------

Co-authored-by: nouralmaa <absnuiria@nours.page>
---
 ietf/submit/tests.py | 9 ++++++++-
 ietf/submit/views.py | 4 ++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index ede63d2752..216fc7de6b 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -2404,7 +2404,7 @@ def test_upload_draft(self):
         response = r.json()
         self.assertCountEqual(
             response.keys(),
-            ['id', 'name', 'rev', 'status_url'],
+            ['id', 'name', 'rev', 'status_url', 'submission_url'],
         )
         submission_id = int(response['id'])
         self.assertEqual(response['name'], 'draft-somebody-test')
@@ -2416,6 +2416,13 @@ def test_upload_draft(self):
                 kwargs={'submission_id': submission_id},
             ),
         )
+        self.assertEqual(
+            response['submission_url'],
+            'https://datatracker.example.com' + urlreverse(
+                'ietf.submit.views.submission_status',
+                kwargs={'submission_id': submission_id},
+            )
+        )
         self.assertEqual(mock_task.delay.call_count, 1)
         self.assertEqual(mock_task.delay.call_args.args, (submission_id,))
         submission = Submission.objects.get(pk=submission_id)
diff --git a/ietf/submit/views.py b/ietf/submit/views.py
index 8329a312bb..2db3f51098 100644
--- a/ietf/submit/views.py
+++ b/ietf/submit/views.py
@@ -182,6 +182,10 @@ def err(code, error, messages=None):
                             settings.IDTRACKER_BASE_URL,
                             urlreverse(api_submission_status, kwargs={'submission_id': submission.pk}),
                         ),
+                        'submission_url': urljoin(
+                            settings.IDTRACKER_BASE_URL,
+                            urlreverse("ietf.submit.views.submission_status", kwargs={'submission_id': submission.pk}),
+                        ),
                     }
                 )
             else:

From 967fffaa61a5bb6ba69e2e6766f043dee86799ee Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 9 Jan 2026 12:25:00 -0400
Subject: [PATCH 526/707] fix: f-strings for replicator log msgs (#10234)

---
 ietf/blobdb/replication.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/blobdb/replication.py b/ietf/blobdb/replication.py
index b9d55c9498..d251d3b95c 100644
--- a/ietf/blobdb/replication.py
+++ b/ietf/blobdb/replication.py
@@ -146,11 +146,11 @@ def replicate_blob(bucket, name):
     blob = fetch_blob_via_sql(bucket, name)
     if blob is None:
         if verbose_logging_enabled():
-            log.log("Deleting {bucket}:{name} from replica")
+            log.log(f"Deleting {bucket}:{name} from replica")
         try:
             destination_storage.delete(name)
         except Exception as e:
-            log.log("Failed to delete {bucket}:{name} from replica: {e}")
+            log.log(f"Failed to delete {bucket}:{name} from replica: {e}")
             raise ReplicationError from e
     else:
         # Add metadata expected by the MetadataS3Storage
@@ -170,7 +170,7 @@ def replicate_blob(bucket, name):
         try:
             destination_storage.save(name, file_with_metadata)
         except Exception as e:
-            log.log("Failed to save {bucket}:{name} to replica: {e}")
+            log.log(f"Failed to save {bucket}:{name} to replica: {e}")
             raise ReplicationError from e
 
 

From 79cb013a190080c3cf3cf0032253da9193d36491 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 9 Jan 2026 19:18:59 -0400
Subject: [PATCH 527/707] chore: squelch pyparsing deprecation warnings
 (#10239)

---
 ietf/settings.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ietf/settings.py b/ietf/settings.py
index f8d8a28d65..05eab0f12f 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -35,6 +35,8 @@
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="oic.utils.time_util")
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="pytz.tzinfo")
 warnings.filterwarnings("ignore", message="'instantiateVariableFont' is deprecated", module="weasyprint")
+warnings.filterwarnings("ignore", category=DeprecationWarning, module="bibtexparser")  # https://github.com/sciunto-org/python-bibtexparser/issues/502
+warnings.filterwarnings("ignore", category=DeprecationWarning, module="pyparsing")  # https://github.com/sciunto-org/python-bibtexparser/issues/502
 
 
 base_path = pathlib.Path(__file__).resolve().parent

From d06001f640315502988ec6eb99ae3d6f08b3fc6c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 14 Jan 2026 13:55:12 -0400
Subject: [PATCH 528/707] feat: RPC modernization APIs (#9631)

* feat: Add rpc_person API call

* chore: Add OpenAPI yaml for RPC API

* feat: api endpoint for docs submitted to the rpc

* chore: remove some debug

* feat: api for created demo people

* feat: optimize fetching persons

* feat: api for creating demo drafts (#6402)

* fix: Typo in rpcapi.yaml

* refactor: Allow existing Person in create_demo_person (#6398)

* fix: include pubreq docevents in demo drafts (#6404)

* fix: Minor API fixes (#6405)

* chore: Document 404 from rpcapi get_person_by_id

* feat: adding rev to demo doc creation (#6425)

* feat: adding rev to demo doc creation

* fix: remove attempt to control required

* refactor: Replace api token checks with decorator (#6434)

* feat: Add @requires_api_token decorator

* refactor: Use @requires_api_token

* refactor: Tweak api token endpoints

This might be drifting from the design intent, but at least
uses the defined endpoint values. Further cleanup may well
be needed.

* refactor: Improve usability of @requires_api_token

* feat: get_draft_by_id api call (#6446)

* fix: construct the cdn photo url correctly (#6491)

* chore: restructure the rpc api (#6505)

* fix: authenticate person api correctly

* chore: Fix plain_name lookup

* feat: subject_id -> Person api call (#6566)

* feat: subject_id -> Person api call

* doc: Add error responses to openapi spec

* feat: rpc api drafts by names (#6853)

* feat: get stream rfcs were first published into (#7814)

* feat: get stream rfcs were first published into

* chore: black

* fix: deal with the case of no DocHistory having a stream

* fix: return "none" from drafts_by_names if a draft has a stream of None (#7863)

* feat: API changes needed for "real" draft imports (#7877)

* style: black

* fix: submitted as DateTime, not Date

* fix: pk -> id in API

* feat: rpc_draft source_format

* feat: add shepherd to rpc_draft() api

* fix: "unknown" src fmt instead of error

* feat: add intended_std_level to api

* refactor: blank, not None, for shepherd / std_level

* style: black

* fix: typo in drafts_by_names() (#7912)

* feat: support for building rfc authors (#7983)

* feat: support for building rfc authors

* chore: copyrights

* feat: api to gather draft authors (#8126)

* feat: api to gather draft authors

* chore: black

* ci: tag feature branch release images

* chore: fix git nonsense

* feat: API for RFC metadata fetch/filtering (#8291)

* feat: RFC API for rfceditor website (WIP)

* feat: pagination + ordered RFC index

* feat: filter by publication date

* feat: stream + stream filtering

* feat: DOI

* feat: group/area for RFCs

* feat: group/area filtering

* feat: result sorting

* refactor: send rfc number, not name

* feat: search rfc title/abstract

* style: Black

* feat: add 'status' field

* feat: filter by 'status'

* style: remove redundant parentheses

* feat: add updated_by/obsoleted_by fields

* feat: add 'abstract' to rpc api

* chore: fix unused/duplicate imports

* chore: fix mypy lint

* chore: unused import

* feat: retrieve single rfc, including text (#8346)

* feat: retrieve single rfc

Use RFC number instead of doc PK as id

* feat: include text in single-rfc response

* chore: drop doc id from api response

* fix: many=True for identifiers (#8425)

* feat: add more rfc api fields (many stubs)

* chore: adding postscript (ps) to rfc meta serializer (#8560)

* fix: acknowledge not-issued in RfcStatusSlugT

* feat: Add API call to get references

* fix: Filter drafts

* chore: Optimize the data query

* test: Test for norminative references API call

* chore: Fix typos in tests

* chore: Fix typos

* refactor: Separate demo logic (#8937)

* refactor: Separate demo logic

* chore: Skip tests

* fix: trailing slashes for all rpc api endpoints (#8940)

* chore: Add RPC references API call to OpenAPI spec (#8941)

* chore: Remove line noise

* chore: Add RPC references API call to OpenAPI spec

* chore: Update rpcapi.yaml

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* fix: Fix OpenAPI spec errors (#8943)

* chore: Remove more line noise

* fix: Fix OpenAPI spec errors

* feat: include picture URL in rpc_person API (#9009)

* feat: person search endpoint (#9062)

* feat: person search endpoint

* refactor: address review comments

  * improved naming of operation/components in API schema
  * reused Person schema component
  * added serializers_rpc.py

* chore: RpcPersonSerializer -> PersonSerializer

Better matches the hand-written schema.

* fix: search for entire term, not word-by-word

* fix: only look at name/plain in search

Including ascii / ascii_short might be useful eventually, but since we only show plain_name in the response it can cause confusing results.

By the same reasoning we could remove email__address as well, but that's useful and I expect we'll include email addresses in our response soon anyway.

* refactor: reimplement purple API in django-rest-framework (#9097)

* refactor: rpc_person -> PersonViewSet

* refactor: rpc_subject_person -> SubjectPersonView

* refactor: rpc_persons -> RpcPersonsView

* refactor: move get_persons into PersonViewSet

Changes the interface to return a list of Persons instead of a map from ID to name.

* refactor: rpc_draft -> DraftViewSet

* refactor: drafts_by_names -> DraftsByNameView

* refactor: submitted_to_rpc -> DraftViewSet

* refactor: rfc_original_stream -> RfcViewSet

* refactor: rpc demo APIs -> viewset

* refactor: get_draft_refs -> DraftViewSet

* refactor: persons_by_email -> PersonViewSet

* refactor: rfc_authors -> RfcViewSet

* refactor: draft_authors -> DraftViewSet

* refactor: avoid \x00 in regex validator

Gets turned into a literal nul somewhere in the process of generating a schema and building a Python client for purple. This has the same effect but avoids the nul.

* fix: missing arg on references() action

* style: ruff, remove unused imports

* style: ruff ruff

* chore: remove rpcapi.yaml

* refactor: move API to /api/purple

Side effect is that the purple API client is named PurpleApi instead of RpcApi.

* fix: get_draft_authors returns DraftWithAuthors

* fix: distinguish CharField flavors

* fix: no serializer validators for draft name/title

This prevents at least one existing draft from being looked up.

* fix: get_draft_authors works with str, not int

* Revert "refactor: avoid \x00 in regex validator"

This reverts commit 63f40cf2

* Revert "Revert "refactor: avoid \x00 in regex validator"" (#9111)

This reverts commit d8656f470045c21542824d7b9b9be41bdcb8866d.

* ci: only migrate blobdb if it is configured

* feat: add email/url to purple person API (#9127)

* feat: expose consensus in submission api

* feat: subseries api for red (#9556)

* refactor: central def of subseries doc types

* feat: subseries doc API

* refactor: optimize queries via prefetch

Reduced 4500 to 18 queries

* chore: remove debug

* fix: fix serialization of draft field

* refactor: clean up prefetch a bit

* feat: filter by subseries type

* fix: restore max_limit for RFC pagination

* feat: add subseries+stub titlepage_name to rfc serializer (#9569)

* feat: add subseries to RfcMetadataSerializer

* feat: titlepage_name for RfcAuthorSerializer

Always blank for now

* chore: update copyrights

* refactor: use py3.12 typing syntax

* fix: renumber migrations

* feat: add consensus on FullDraftSerializer

* feat: add type field in serializer

* feat: tag subseries API endpoints for purple (#9763)

* feat: tag subseries API endpoints for purple

* ruff

* feat: change slugs/names (#9778)

* change slugs/names

* change slug names

* fix: update RfcStatusSlugT

* fix: remove double tag (#9787)

This was meant to include the API call in both purple and red API clients.
It seems this does not work, at least with some generators.
Need to investigate further, but we should be able to work around it.

* feat: rfc authors (#9937)

* feat: rfc authors

* fix: distinct rfc search results

* fix: include titlepage_name in author name searches

* fix: add is_editor to rfcauthor model. Adjust FK on_delete. Tweak admin.

* fix: renumber migration

* refactor: realistic titlepage_name in factory

* refactor: comment + rename iteration var

* chore: bump copyright year

* chore: remove country from RfcAuthor

Not planning to track this

* refactor: make blank=False explicit

* chore: remove country from admin

* fix: author_list() for type=rfc

* fix: blankable RfcAuthor.person

* feat: RfcAuthor-aware document_json()

* feat: limit docs to rfcs for RfcAuthor admin

* test: document_json authors

* fix: use author_names() for get_document_emails()

* feat: suggest affiliation based on RfcAuthor

* chore: revert "remove country from RfcAuthor"

This reverts commit 3044d10439bed2137e28356f27250600ce7a2529.

* chore: revert "remove country from admin"

This reverts commit 208879368fa5be5ecf79ae67b0be636db8a7e81f.

* feat: use rfcauthors for nomcom eligibility (#9629)

* refactor: author-based eligibility cleanup

* feat: use rfcauthor recs for nomcom eligbility

* chore: remove commented code

* refactor: factor out helper for testing

* test: test_get_qualified_author_queryset

* fix: restore a necessary import

* test: fix test_elig_by_author

* test: fix test_decorate_volunteers_with_qualifications

* test: add comment

* fix: drop test for draft-rfceditor state

Attempted to limit to drafts literally in the queue, but was not a
valid check when looking back in time. As a practical matter, the test
is not necessary.

* fix: exclude double counting, not rfc pub state

* test: update test

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>

* fix: renumber migrations

* feat: basic RfcAuthor API (#9940)

* refactor: move get_rfc_authors API URL

* refactor: drop format_suffixes from router

Creates a bunch of API endpoints we have no intention of ever using

* feat: RfcAuthor API (WIP)

* fix: remove debug code

* style: remove stray whitespace

* fix: authors API for xfer (#9961)

* fix: partial implementation of rfc authors()

Does not handle RfcAuthor instances where person is None yet.

* refactor: authors -> bulk_authors for URL consistency

* fix: add OpenApi param definition doc_id (#9962)

* fix: add OpenApi param definition doc_id

* add schema def for person_id

* feat: RFC publication API (#9975)

* feat: API to publish RFC (WIP)

Incomplete and in need of refactoring, but publishes an RFC.

* feat: group / formal_languages from draft

* feat: allow optional formal_languages via API

Could do the same with group, but not clear it would ever be used.

* feat: fill in overrides/updates

* feat: subseries membership

* fix: tolerate race to create related docs

* fix: wrap pub in a transaction

* feat: prevent re-publishing draft as RFC

* chore: remove stale code

* chore: remove debug

* feat: RFC file upload API (WIP)

Checkpointing progress before going further.

* feat: specify RFC, validate file exts

* feat: move uploaded files into place

* feat: add replace option

* fix: add rest of replace option

* feat: handle ad/group more consistently

* chore: remove inadvertent change

* chore: drop external_url, get note from draft

* refactor: clarify default value logic

* refactor: ID obsoletes/updates by number

* fix: handle draft-stream-editorial

* feat: split unknown vs already published draft error (#10011)

* feat: use RfcAuthor for red API (#10014)

* refactor: combine redundant serializers

* feat: edit authors via RFC update API

* fix: remove all None authors, not just first (#10044)

* refactor: extract update_rfcauthors() method

* feat: EditedRfcAuthorsDocEvent

* refactor: reduce RfcAuthor instance churn

* feat: create RfcAuthor edit DocEvents

* feat: handle DocumentAuthor->RfcAuthor updates

* refactor: reduce code duplication

* fix: remove leftover import

* chore: relabel titlepage_name in DocEvent desc

* feat: transaction

* chore: make RfcAuthorViewset read-only

This can perhaps go away entirely

* style: undo accidental whitespace change

* fix: actual RFC file extensions/locations + tests (#10131)

* chore: update list of rfc file exts

* refactor: _destination() helper

* fix: .notprepped.xml -> prerelease/ subdir

* refactor: better prefixed DRF Routers

* test: fix references API test

* test: test notify_rfc_published

* test: test upload_rfc_files

* chore: remove unused imports

* chore: remove unused imports

* chore: add a todo

* fix: find pubreq event for editorial stream

* chore: remove obsolete rpc demo API

* chore: clean up outdated comments

* feat: api key for red api (#10232)

* fix: avoid over-return (#10231)

* fix: avoid over-return

* chore: undo accidental commit

This is a separate bug fix on main; let it come in from there.

* refactor: authors() -> author_persons() (#10237)

* refactor: authors() -> author_persons()

* refactor: select_related() a couple more places

* refactor: update uses of Document.authors()

* chore: remove debug

* fix: typo

* fix: mypy lint and minor bugs; mypy->1.11.2 (#10249)

* fix: doc property authors needs refactoring (#10250)

* fix: doc property needs refactoring

* fix: set source for author fields

* chore: comment

* chore: fix random typo

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>

* chore: remove completed todo, add comment

* chore(dev): accept devtoken for red api

---------

Co-authored-by: Robert Sparks <rjsparks@nostrum.com>
Co-authored-by: Matthew Holloway <matthew@staff.ietf.org>
Co-authored-by: Kesara Rathnayake <kesara@fq.nz>
Co-authored-by: Rudi Matz <rudi@staff.ietf.org>
---
 dev/build/migration-start.sh                  |   8 +-
 dev/deploy-to-container/settings_local.py     |   6 +-
 docker/configs/settings_local.py              |   5 +
 ietf/api/routers.py                           |  25 +-
 ietf/api/serializers_rpc.py                   | 609 ++++++++++++++++++
 ietf/api/tests_views_rpc.py                   | 299 +++++++++
 ietf/api/urls.py                              |  19 +-
 ietf/api/urls_rpc.py                          |  42 ++
 ietf/api/views.py                             |   2 +-
 ietf/api/views_rpc.py                         | 434 +++++++++++++
 ietf/community/utils.py                       |  13 +-
 ietf/doc/admin.py                             |  10 +-
 ietf/doc/api.py                               | 194 ++++++
 ietf/doc/factories.py                         |  15 +-
 .../management/commands/reset_rfc_authors.py  |  69 --
 ietf/doc/management/commands/tests.py         |  72 ---
 ...r_dochistory_title_alter_document_title.py |  41 ++
 ietf/doc/migrations/0028_rfcauthor.py         |  84 +++
 .../0029_editedrfcauthorsdocevent.py          |  30 +
 ...r_dochistory_title_alter_document_title.py |  41 ++
 ietf/doc/models.py                            | 134 +++-
 ietf/doc/resources.py                         |  55 +-
 ietf/doc/serializers.py                       | 316 +++++++++
 ietf/doc/tests.py                             |  88 ++-
 ietf/doc/tests_draft.py                       |   8 +-
 ietf/doc/tests_review.py                      |   2 +-
 ietf/doc/utils.py                             | 175 ++++-
 ietf/doc/views_doc.py                         |  19 +-
 ietf/doc/views_search.py                      |  13 +-
 ietf/group/models.py                          |   3 +
 ietf/group/serializers.py                     |  11 +
 ietf/ietfauth/utils.py                        |   2 +-
 ietf/ipr/views.py                             |   3 +-
 ietf/name/serializers.py                      |  11 +
 ietf/nomcom/tests.py                          | 194 +++++-
 ietf/nomcom/utils.py                          | 123 +++-
 ietf/person/models.py                         |  12 +-
 ietf/secr/telechat/tests.py                   |   4 +-
 ietf/settings.py                              |   2 +
 ietf/submit/tests.py                          |   2 +-
 ietf/submit/utils.py                          |   2 +-
 ietf/sync/rfceditor.py                        |  16 +-
 ietf/sync/tests.py                            |   2 +-
 ietf/templates/doc/document_info.html         |   6 +-
 ietf/templates/doc/index_active_drafts.html   |   2 +-
 ietf/templates/doc/opengraph.html             |   4 +-
 ietf/templates/doc/review/request_info.html   |   6 +-
 .../group/manage_review_requests.html         |   6 +-
 ietf/utils/test_utils.py                      |   9 +
 ietf/utils/validators.py                      |   5 +-
 mypy.ini                                      |   3 +
 requirements.txt                              |   4 +-
 52 files changed, 2945 insertions(+), 315 deletions(-)
 create mode 100644 ietf/api/serializers_rpc.py
 create mode 100644 ietf/api/tests_views_rpc.py
 create mode 100644 ietf/api/urls_rpc.py
 create mode 100644 ietf/api/views_rpc.py
 create mode 100644 ietf/doc/api.py
 delete mode 100644 ietf/doc/management/commands/reset_rfc_authors.py
 delete mode 100644 ietf/doc/management/commands/tests.py
 create mode 100644 ietf/doc/migrations/0027_alter_dochistory_title_alter_document_title.py
 create mode 100644 ietf/doc/migrations/0028_rfcauthor.py
 create mode 100644 ietf/doc/migrations/0029_editedrfcauthorsdocevent.py
 create mode 100644 ietf/doc/migrations/0030_alter_dochistory_title_alter_document_title.py
 create mode 100644 ietf/doc/serializers.py
 create mode 100644 ietf/group/serializers.py
 create mode 100644 ietf/name/serializers.py

diff --git a/dev/build/migration-start.sh b/dev/build/migration-start.sh
index 901026e53b..578daf5cef 100644
--- a/dev/build/migration-start.sh
+++ b/dev/build/migration-start.sh
@@ -3,7 +3,11 @@
 echo "Running Datatracker migrations..."
 ./ietf/manage.py migrate --settings=settings_local
 
-echo "Running Blobdb migrations ..."
-./ietf/manage.py migrate --settings=settings_local --database=blobdb
+# Check whether the blobdb database exists - inspectdb will return a false
+# status if not.
+if ./ietf/manage.py inspectdb --database blobdb > /dev/null 2>&1; then
+    echo "Running Blobdb migrations ..."
+    ./ietf/manage.py migrate --settings=settings_local --database=blobdb
+fi
 
 echo "Done!"
diff --git a/dev/deploy-to-container/settings_local.py b/dev/deploy-to-container/settings_local.py
index aacf000093..055b48d0f5 100644
--- a/dev/deploy-to-container/settings_local.py
+++ b/dev/deploy-to-container/settings_local.py
@@ -71,11 +71,11 @@
 
 DE_GFM_BINARY = '/usr/local/bin/de-gfm'
 
-# No real secrets here, these are public testing values _only_
 APP_API_TOKENS = {
-  "ietf.api.views.ingest_email_test": ["ingestion-test-token"]
+  "ietf.api.red_api" : ["devtoken", "redtoken"],  # Not a real secret
+  "ietf.api.views.ingest_email_test": ["ingestion-test-token"],  # Not a real secret
+  "ietf.api.views_rpc" : ["devtoken"],  # Not a real secret
 }
 
-
 # OIDC configuration
 SITE_URL = 'https://__HOSTNAME__'
diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index 3ee7a4295d..e357ce3f73 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -100,3 +100,8 @@
             bucket_name=f"{storagename}",
         ),
     }
+
+APP_API_TOKENS = {
+    "ietf.api.red_api" : ["devtoken", "redtoken"],  # Not a real secret
+    "ietf.api.views_rpc" : ["devtoken"],  # Not a real secret
+}
diff --git a/ietf/api/routers.py b/ietf/api/routers.py
index 745ddaa811..99afdb242a 100644
--- a/ietf/api/routers.py
+++ b/ietf/api/routers.py
@@ -3,14 +3,29 @@
 from django.core.exceptions import ImproperlyConfigured
 from rest_framework import routers
 
-class PrefixedSimpleRouter(routers.SimpleRouter):
-    """SimpleRouter that adds a dot-separated prefix to its basename"""
+
+class PrefixedBasenameMixin:
+    """Mixin to add a prefix to the basename of a rest_framework BaseRouter"""
     def __init__(self, name_prefix="", *args, **kwargs):
         self.name_prefix = name_prefix
         if len(self.name_prefix) == 0 or self.name_prefix[-1] == ".":
             raise ImproperlyConfigured("Cannot use a name_prefix that is empty or ends with '.'")
         super().__init__(*args, **kwargs)
 
-    def get_default_basename(self, viewset):
-        basename = super().get_default_basename(viewset)
-        return f"{self.name_prefix}.{basename}"
+    def register(self, prefix, viewset, basename=None):
+        # Get the superclass "register" method from the class this is mixed-in with.
+        # This avoids typing issues with calling super().register() directly in a
+        # mixin class.
+        super_register = getattr(super(), "register")
+        if not super_register or not callable(super_register):
+            raise TypeError("Must mixin with superclass that has register() method")
+        super_register(prefix, viewset, basename=f"{self.name_prefix}.{basename}")
+
+
+class PrefixedSimpleRouter(PrefixedBasenameMixin, routers.SimpleRouter):
+    """SimpleRouter that adds a dot-separated prefix to its basename"""
+
+
+class PrefixedDefaultRouter(PrefixedBasenameMixin, routers.DefaultRouter):
+    """DefaultRouter that adds a dot-separated prefix to its basename"""
+
diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
new file mode 100644
index 0000000000..2223f04aeb
--- /dev/null
+++ b/ietf/api/serializers_rpc.py
@@ -0,0 +1,609 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+import datetime
+from pathlib import Path
+from typing import Literal, Optional
+
+from django.db import transaction
+from django.urls import reverse as urlreverse
+from drf_spectacular.types import OpenApiTypes
+from drf_spectacular.utils import extend_schema_field
+from rest_framework import serializers
+
+from ietf.doc.expire import move_draft_files_to_archive
+from ietf.doc.models import (
+    DocumentAuthor,
+    Document,
+    RelatedDocument,
+    State,
+    DocEvent,
+    RfcAuthor,
+)
+from ietf.doc.serializers import RfcAuthorSerializer
+from ietf.doc.utils import (
+    default_consensus,
+    prettify_std_name,
+    update_action_holders,
+    update_rfcauthors,
+)
+from ietf.group.models import Group
+from ietf.name.models import StreamName, StdLevelName, FormalLanguageName
+from ietf.person.models import Person
+from ietf.utils import log
+
+
+class PersonSerializer(serializers.ModelSerializer):
+    email = serializers.EmailField(read_only=True)
+    picture = serializers.URLField(source="cdn_photo_url", read_only=True)
+    url = serializers.SerializerMethodField(
+        help_text="relative URL for datatracker person page"
+    )
+
+    class Meta:
+        model = Person
+        fields = ["id", "plain_name", "email", "picture", "url"]
+        read_only_fields = ["id", "plain_name", "email", "picture", "url"]
+
+    @extend_schema_field(OpenApiTypes.URI)
+    def get_url(self, object: Person):
+        return urlreverse(
+            "ietf.person.views.profile",
+            kwargs={"email_or_name": object.email_address() or object.name},
+        )
+
+
+class EmailPersonSerializer(serializers.Serializer):
+    email = serializers.EmailField(source="address")
+    person_pk = serializers.IntegerField(source="person.pk")
+    name = serializers.CharField(source="person.name")
+    last_name = serializers.CharField(source="person.last_name")
+    initials = serializers.CharField(source="person.initials")
+
+
+class LowerCaseEmailField(serializers.EmailField):
+    def to_representation(self, value):
+        return super().to_representation(value).lower()
+
+
+class AuthorPersonSerializer(serializers.ModelSerializer):
+    person_pk = serializers.IntegerField(source="pk", read_only=True)
+    last_name = serializers.CharField()
+    initials = serializers.CharField()
+    email_addresses = serializers.ListField(
+        source="email_set.all", child=LowerCaseEmailField()
+    )
+
+    class Meta:
+        model = Person
+        fields = ["person_pk", "name", "last_name", "initials", "email_addresses"]
+
+
+class RfcWithAuthorsSerializer(serializers.ModelSerializer):
+    authors = AuthorPersonSerializer(many=True, source="author_persons")
+
+    class Meta:
+        model = Document
+        fields = ["rfc_number", "authors"]
+
+
+class DraftWithAuthorsSerializer(serializers.ModelSerializer):
+    draft_name = serializers.CharField(source="name")
+    authors = AuthorPersonSerializer(many=True, source="author_persons")
+
+    class Meta:
+        model = Document
+        fields = ["draft_name", "authors"]
+
+
+class DocumentAuthorSerializer(serializers.ModelSerializer):
+    """Serializer for a Person in a response"""
+
+    plain_name = serializers.SerializerMethodField()
+
+    class Meta:
+        model = DocumentAuthor
+        fields = ["person", "plain_name"]
+
+    def get_plain_name(self, document_author: DocumentAuthor) -> str:
+        return document_author.person.plain_name()
+
+
+class FullDraftSerializer(serializers.ModelSerializer):
+    # Redefine these fields so they don't pick up the regex validator patterns.
+    # There seem to be some non-compliant drafts in the system! If this serializer
+    # is used for a writeable view, the validation will need to be added back.
+    name = serializers.CharField(max_length=255)
+    title = serializers.CharField(max_length=255)
+
+    # Other fields we need to add / adjust
+    source_format = serializers.SerializerMethodField()
+    authors = DocumentAuthorSerializer(many=True, source="documentauthor_set")
+    shepherd = serializers.SerializerMethodField()
+    consensus = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Document
+        fields = [
+            "id",
+            "name",
+            "rev",
+            "stream",
+            "title",
+            "pages",
+            "source_format",
+            "authors",
+            "shepherd",
+            "intended_std_level",
+            "consensus",
+        ]
+
+    def get_consensus(self, doc: Document) -> Optional[bool]:
+        return default_consensus(doc)
+
+    def get_source_format(
+        self, doc: Document
+    ) -> Literal["unknown", "xml-v2", "xml-v3", "txt"]:
+        submission = doc.submission()
+        if submission is None:
+            return "unknown"
+        if ".xml" in submission.file_types:
+            if submission.xml_version == "3":
+                return "xml-v3"
+            else:
+                return "xml-v2"
+        elif ".txt" in submission.file_types:
+            return "txt"
+        return "unknown"
+
+    @extend_schema_field(OpenApiTypes.EMAIL)
+    def get_shepherd(self, doc: Document) -> str:
+        if doc.shepherd:
+            return doc.shepherd.formatted_ascii_email()
+        return ""
+
+
+class DraftSerializer(FullDraftSerializer):
+    class Meta:
+        model = Document
+        fields = [
+            "id",
+            "name",
+            "rev",
+            "stream",
+            "title",
+            "pages",
+            "source_format",
+            "authors",
+        ]
+
+
+class SubmittedToQueueSerializer(FullDraftSerializer):
+    submitted = serializers.SerializerMethodField()
+    consensus = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Document
+        fields = [
+            "id",
+            "name",
+            "stream",
+            "submitted",
+            "consensus",
+        ]
+
+    def get_submitted(self, doc) -> Optional[datetime.datetime]:
+        event = doc.sent_to_rfc_editor_event()
+        return None if event is None else event.time
+    
+    def get_consensus(self, doc) -> Optional[bool]:
+        return default_consensus(doc)
+
+
+class OriginalStreamSerializer(serializers.ModelSerializer):
+    stream = serializers.CharField(read_only=True, source="orig_stream_id")
+
+    class Meta:
+        model = Document
+        fields = ["rfc_number", "stream"]
+
+
+class ReferenceSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Document
+        fields = ["id", "name"]
+        read_only_fields = ["id", "name"]
+
+
+class EditableRfcSerializer(serializers.ModelSerializer):
+    # Would be nice to reconcile this with ietf.doc.serializers.RfcSerializer.
+    # The purposes of that serializer (representing data for Red) and this one
+    # (accepting updates from Purple) are different enough that separate formats
+    # may be needed, but if not it'd be nice to have a single RfcSerializer that
+    # can serve both.
+    #
+    # For now, only handles authors
+    authors = RfcAuthorSerializer(many=True, min_length=1, source="rfcauthor_set")
+
+    class Meta:
+        model = Document
+        fields = ["id", "authors"]
+
+    def update(self, instance, validated_data):
+        assert isinstance(instance, Document)
+        authors_data = validated_data.pop("rfcauthor_set", None)
+        if authors_data is not None:
+            # Construct unsaved instances from validated author data
+            new_authors = [RfcAuthor(**ad) for ad in authors_data]
+            # Update the RFC with the new author set
+            with transaction.atomic():
+                change_events = update_rfcauthors(instance, new_authors)
+                for event in change_events:
+                    event.save()
+        return instance
+
+
+class RfcPubSerializer(serializers.ModelSerializer):
+    """Write-only serializer for RFC publication"""
+    # publication-related fields
+    published = serializers.DateTimeField(default_timezone=datetime.timezone.utc)
+    draft_name = serializers.RegexField(
+        required=False, regex=r"^draft-[a-zA-Z0-9-]+$"
+    )
+    draft_rev = serializers.RegexField(
+        required=False, regex=r"^[0-9][0-9]$"
+    )
+
+    # fields on the RFC Document that need tweaking from ModelSerializer defaults
+    rfc_number = serializers.IntegerField(min_value=1, required=True)
+    group = serializers.SlugRelatedField(
+        slug_field="acronym", queryset=Group.objects.all(), required=False
+    )
+    stream = serializers.PrimaryKeyRelatedField(
+        queryset=StreamName.objects.filter(used=True)
+    )
+    formal_languages = serializers.PrimaryKeyRelatedField(
+        many=True,
+        required=False,
+        queryset=FormalLanguageName.objects.filter(used=True),
+        help_text=(
+            "formal languages used in RFC (defaults to those from draft, send empty"
+            "list to override)"
+        )
+    )
+    std_level = serializers.PrimaryKeyRelatedField(
+        queryset=StdLevelName.objects.filter(used=True),
+    )
+    ad = serializers.PrimaryKeyRelatedField(
+        queryset=Person.objects.all(),
+        allow_null=True,
+        required=False,
+    )
+    obsoletes = serializers.SlugRelatedField(
+        many=True,
+        required=False,
+        slug_field="rfc_number",
+        queryset=Document.objects.filter(type_id="rfc"),
+    )
+    updates = serializers.SlugRelatedField(
+        many=True,
+        required=False,
+        slug_field="rfc_number",
+        queryset=Document.objects.filter(type_id="rfc"),
+    )
+    subseries = serializers.ListField(
+        child=serializers.RegexField(
+            required=False,
+            # pattern: no leading 0, finite length (arbitrarily set to 5 digits)
+            regex=r"^(bcp|std|fyi)[1-9][0-9]{0,4}$", 
+        )
+    )
+    # N.b., authors is _not_ a field on Document!
+    authors = RfcAuthorSerializer(many=True)
+
+    class Meta:
+        model = Document
+        fields = [
+            "published",
+            "draft_name",
+            "draft_rev",
+            "rfc_number",
+            "title",
+            "authors",
+            "group",
+            "stream",
+            "abstract",
+            "pages",
+            "words",
+            "formal_languages",
+            "std_level",
+            "ad",
+            "note",
+            "obsoletes",
+            "updates",
+            "subseries",
+        ]
+
+    def validate(self, data):
+        if "draft_name" in data or "draft_rev" in data:
+            if "draft_name" not in data:
+                raise serializers.ValidationError(
+                    {"draft_name": "Missing draft_name"},
+                    code="invalid-draft-spec",
+                ) 
+            if "draft_rev" not in data:
+                raise serializers.ValidationError(
+                    {"draft_rev": "Missing draft_rev"},
+                    code="invalid-draft-spec",
+                )
+        return data
+
+    def create(self, validated_data):
+        """Publish an RFC"""
+        published = validated_data.pop("published")
+        draft_name = validated_data.pop("draft_name", None)
+        draft_rev = validated_data.pop("draft_rev", None)
+        obsoletes = validated_data.pop("obsoletes", [])
+        updates = validated_data.pop("updates", [])
+        subseries = validated_data.pop("subseries", [])
+
+        system_person = Person.objects.get(name="(System)")
+
+        # If specified, retrieve draft and extract RFC default values from it
+        if draft_name is None:
+            draft = None
+            defaults_from_draft = {
+                "group": Group.objects.get(acronym="none", type_id="individ"),
+            }
+        else:
+            # validation enforces that draft_name and draft_rev are both present
+            draft = Document.objects.filter(
+                type_id="draft",
+                name=draft_name,
+                rev=draft_rev,
+            ).first()
+            if draft is None:
+                raise serializers.ValidationError(
+                    {
+                        "draft_name": "No such draft",
+                        "draft_rev": "No such draft",
+                    },
+                    code="invalid-draft"
+                )
+            elif draft.get_state_slug() == "rfc":
+                raise serializers.ValidationError(
+                    {
+                        "draft_name": "Draft already published as RFC",
+                    },
+                    code="already-published-draft",
+                )
+            defaults_from_draft = {
+                "ad": draft.ad,
+                "formal_languages": draft.formal_languages.all(),
+                "group": draft.group,
+                "note": draft.note,
+            }
+
+        # Transaction to clean up if something fails
+        with transaction.atomic():
+            # create rfc, letting validated request data override draft defaults
+            rfc = self._create_rfc(defaults_from_draft | validated_data)
+            DocEvent.objects.create(
+                doc=rfc,
+                rev=rfc.rev,
+                type="published_rfc",
+                time=published,
+                by=system_person,
+                desc="RFC published",
+            )
+            rfc.set_state(State.objects.get(used=True, type_id="rfc", slug="published"))
+    
+            # create updates / obsoletes relations
+            for obsoleted_rfc_pk in obsoletes:
+                RelatedDocument.objects.get_or_create(
+                    source=rfc, target=obsoleted_rfc_pk, relationship_id="obs"
+                )
+            for updated_rfc_pk in updates:
+                RelatedDocument.objects.get_or_create(
+                    source=rfc, target=updated_rfc_pk, relationship_id="updates"
+                )
+        
+            # create subseries relations
+            for subseries_doc_name in subseries:
+                ss_slug = subseries_doc_name[:3]
+                subseries_doc, ss_doc_created = Document.objects.get_or_create(
+                    type_id=ss_slug, name=subseries_doc_name
+                )
+                if ss_doc_created:
+                    subseries_doc.docevent_set.create(
+                        type=f"{ss_slug}_doc_created",
+                        by=system_person,
+                        desc=f"Created {subseries_doc_name} via publication of {rfc.name}",
+                    )
+                _, ss_rel_created = subseries_doc.relateddocument_set.get_or_create(
+                    relationship_id="contains", target=rfc
+                )
+                if ss_rel_created:
+                    subseries_doc.docevent_set.create(
+                        type="sync_from_rfc_editor",
+                        by=system_person,
+                        desc=f"Added {rfc.name} to {subseries_doc.name}",
+                    )
+                    rfc.docevent_set.create(
+                        type="sync_from_rfc_editor",
+                        by=system_person,
+                        desc=f"Added {rfc.name} to {subseries_doc.name}",
+                    )
+    
+    
+            # create relation with draft and update draft state
+            if draft is not None:
+                draft_changes = []
+                draft_events = []
+                if draft.get_state_slug() != "rfc":
+                    draft.set_state(
+                        State.objects.get(used=True, type="draft", slug="rfc")
+                    )
+                    move_draft_files_to_archive(draft, draft.rev)
+                    draft_changes.append(f"changed state to {draft.get_state()}")
+    
+                r, created_relateddoc = RelatedDocument.objects.get_or_create(
+                    source=draft, target=rfc, relationship_id="became_rfc",
+                )
+                if created_relateddoc:
+                    change = "created {rel_name} relationship between {pretty_draft_name} and {pretty_rfc_name}".format(
+                        rel_name=r.relationship.name.lower(),
+                        pretty_draft_name=prettify_std_name(draft_name),
+                        pretty_rfc_name=prettify_std_name(rfc.name),
+                    )
+                    draft_changes.append(change)
+    
+                # Always set the "draft-iesg" state. This state should be set for all drafts, so
+                # log a warning if it is not set. What should happen here is that ietf stream
+                # RFCs come in as "rfcqueue" and are set to "pub" when they appear in the RFC index.
+                # Other stream documents should normally be "idexists" and be left that way. The
+                # code here *actually* leaves "draft-iesg" state alone if it is "idexists" or "pub",
+                # and changes any other state to "pub". If unset, it changes it to "idexists".
+                # This reflects historical behavior and should probably be updated, but a migration
+                # of existing drafts (and validation of the change) is needed before we change the
+                # handling.
+                prev_iesg_state = draft.get_state("draft-iesg")
+                if prev_iesg_state is None:
+                    log.log(f'Warning while processing {rfc.name}: {draft.name} has no "draft-iesg" state')
+                    new_iesg_state = State.objects.get(type_id="draft-iesg", slug="idexists")
+                elif prev_iesg_state.slug not in ("pub", "idexists"):
+                    if prev_iesg_state.slug != "rfcqueue":
+                        log.log(
+                            'Warning while processing {}: {} is in "draft-iesg" state {} (expected "rfcqueue")'.format(
+                                rfc.name, draft.name, prev_iesg_state.slug
+                            )
+                        )
+                    new_iesg_state = State.objects.get(type_id="draft-iesg", slug="pub")
+                else:
+                    new_iesg_state = prev_iesg_state
+        
+                if new_iesg_state != prev_iesg_state:
+                    draft.set_state(new_iesg_state)
+                    draft_changes.append(f"changed {new_iesg_state.type.label} to {new_iesg_state}")
+                    e = update_action_holders(draft, prev_iesg_state, new_iesg_state)
+                    if e:
+                        draft_events.append(e)
+    
+                # If the draft and RFC streams agree, move draft to "pub" stream state. If not, complain.
+                if draft.stream != rfc.stream:
+                    log.log("Warning while processing {}: draft {} stream is {} but RFC stream is {}".format(
+                        rfc.name, draft.name, draft.stream, rfc.stream
+                    ))
+                elif draft.stream.slug in ["iab", "irtf", "ise", "editorial"]:
+                    stream_slug = f"draft-stream-{draft.stream.slug}"
+                    prev_state = draft.get_state(stream_slug)
+                    if prev_state is not None and prev_state.slug != "pub":
+                        new_state = State.objects.select_related("type").get(used=True, type__slug=stream_slug, slug="pub")
+                        draft.set_state(new_state)
+                        draft_changes.append(
+                            f"changed {new_state.type.label} to {new_state}"
+                        )
+                        e = update_action_holders(draft, prev_state, new_state)
+                        if e:
+                            draft_events.append(e)
+                if draft_changes:
+                    draft_events.append(
+                        DocEvent.objects.create(
+                            doc=draft,
+                            rev=draft.rev,
+                            by=system_person,
+                            type="sync_from_rfc_editor",
+                            desc=f"Updated while publishing {rfc.name} ({', '.join(draft_changes)})",
+                        )
+                    )
+                    draft.save_with_history(draft_events)
+
+        return rfc
+
+    def _create_rfc(self, validated_data):
+        authors_data = validated_data.pop("authors")
+        formal_languages = validated_data.pop("formal_languages", [])
+        # todo ad field
+        rfc = Document.objects.create(
+            type_id="rfc",
+            name=f"rfc{validated_data['rfc_number']}",
+            **validated_data,
+        )
+        rfc.formal_languages.set(formal_languages)  # list of PKs is ok
+        for order, author_data in enumerate(authors_data):
+            rfc.rfcauthor_set.create(
+                order=order,
+                **author_data,
+            )
+        return rfc
+
+
+class RfcFileSerializer(serializers.Serializer):
+    # The structure of this serializer is constrained by what openapi-generator-cli's
+    # python generator can correctly serialize as multipart/form-data. It does not
+    # handle nested serializers well (or perhaps at all). ListFields with child
+    # ChoiceField or RegexField do not serialize correctly. DictFields don't seem
+    # to work.
+    #
+    # It does seem to correctly send filenames along with FileFields, even as a child
+    # in a ListField, so we use that to convey the file format of each item. There
+    # are other options we could consider (e.g., a structured CharField) but this
+    # works.
+    allowed_extensions = (
+        ".html",
+        ".json",
+        ".notprepped.xml",
+        ".pdf",
+        ".txt",
+        ".xml",
+    )
+
+    rfc = serializers.SlugRelatedField(
+        slug_field="rfc_number",
+        queryset=Document.objects.filter(type_id="rfc"),
+        help_text="RFC number to which the contents belong",
+    )
+    contents = serializers.ListField(
+        child=serializers.FileField(
+            allow_empty_file=False,
+            use_url=False,
+        ),
+        help_text=(
+            "List of content files. Filename extensions are used to identify "
+            "file types, but filenames are otherwise ignored."
+        ),
+    )
+    replace = serializers.BooleanField(
+        required=False,
+        default=False,
+        help_text=(
+            "Replace existing files for this RFC. Defaults to false. When false, "
+            "if _any_ files already exist for the specified RFC the upload will be "
+            "rejected regardless of which files are being uploaded. When true,"
+            "existing files will be removed and new ones will be put in place. BE"
+            "VERY CAREFUL WITH THIS OPTION IN PRODUCTION."
+        ),
+    )
+
+    def validate_contents(self, data):
+        found_extensions = []
+        for uploaded_file in data:
+            if not hasattr(uploaded_file, "name"):
+                raise serializers.ValidationError(
+                    "filename not specified for uploaded file",
+                    code="missing-filename",
+                )
+            ext = "".join(Path(uploaded_file.name).suffixes)
+            if ext not in self.allowed_extensions:
+                raise serializers.ValidationError(
+                    f"File uploaded with invalid extension '{ext}'",
+                    code="invalid-filename-ext",
+                )
+            if ext in found_extensions:
+                raise serializers.ValidationError(
+                    f"More than one file uploaded with extension '{ext}'",
+                    code="duplicate-filename-ext",
+                )
+        return data
+
+
+class NotificationAckSerializer(serializers.Serializer):
+    message = serializers.CharField(default="ack")
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
new file mode 100644
index 0000000000..032b4b9495
--- /dev/null
+++ b/ietf/api/tests_views_rpc.py
@@ -0,0 +1,299 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+from io import StringIO
+from pathlib import Path
+from tempfile import TemporaryDirectory
+
+from django.conf import settings
+from django.core.files.base import ContentFile
+from django.db.models import Max
+from django.test.utils import override_settings
+from django.urls import reverse as urlreverse
+
+from ietf.doc.factories import IndividualDraftFactory, WgDraftFactory, WgRfcFactory
+from ietf.doc.models import RelatedDocument, Document
+from ietf.group.factories import RoleFactory, GroupFactory
+from ietf.person.factories import PersonFactory
+from ietf.utils.test_utils import APITestCase, reload_db_objects
+
+
+class RpcApiTests(APITestCase):
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    def test_draftviewset_references(self):
+        viewname = "ietf.api.purple_api.draft-references"
+
+        # non-existent draft
+        bad_id = Document.objects.aggregate(unused_id=Max("id") + 100)["unused_id"]
+        url = urlreverse(viewname, kwargs={"doc_id": bad_id})
+        # Without credentials
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        # Add credentials
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 404)
+
+        # draft without any normative references
+        draft = IndividualDraftFactory()
+        draft = reload_db_objects(draft)
+        url = urlreverse(viewname, kwargs={"doc_id": draft.id})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 200)
+        refs = r.json()
+        self.assertEqual(refs, [])
+
+        # draft without any normative references but with an informative reference
+        draft_foo = IndividualDraftFactory()
+        draft_foo = reload_db_objects(draft_foo)
+        RelatedDocument.objects.create(
+            source=draft, target=draft_foo, relationship_id="refinfo"
+        )
+        url = urlreverse(viewname, kwargs={"doc_id": draft.id})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 200)
+        refs = r.json()
+        self.assertEqual(refs, [])
+
+        # draft with a normative reference
+        draft_bar = IndividualDraftFactory()
+        draft_bar = reload_db_objects(draft_bar)
+        RelatedDocument.objects.create(
+            source=draft, target=draft_bar, relationship_id="refnorm"
+        )
+        url = urlreverse(viewname, kwargs={"doc_id": draft.id})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        r = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(r.status_code, 200)
+        refs = r.json()
+        self.assertEqual(len(refs), 1)
+        self.assertEqual(refs[0]["id"], draft_bar.id)
+        self.assertEqual(refs[0]["name"], draft_bar.name)
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    def test_notify_rfc_published(self):
+        url = urlreverse("ietf.api.purple_api.notify_rfc_published")
+        area = GroupFactory(type_id="area")
+        draft_ad = RoleFactory(group=area, name_id="ad").person
+        authors = PersonFactory.create_batch(2)
+        draft = WgDraftFactory(group__parent=area, authors=authors)
+        assert isinstance(draft, Document), "WgDraftFactory should generate a Document"
+        unused_rfc_number = (
+            Document.objects.filter(rfc_number__isnull=False).aggregate(
+                unused_rfc_number=Max("rfc_number") + 1
+            )["unused_rfc_number"]
+            or 10000
+        )
+
+        post_data = {
+            "published": "2025-12-17T20:29:00Z",
+            "draft_name": draft.name,
+            "draft_rev": draft.rev,
+            "rfc_number": unused_rfc_number,
+            "title": draft.title,
+            "authors": [
+                {
+                    "titlepage_name": f"titlepage {author.name}",
+                    "is_editor": False,
+                    "person": author.pk,
+                    "email": author.email_address(),
+                    "affiliation": "Some Affiliation",
+                    "country": "CA",
+                }
+                for author in authors
+            ],
+            "group": draft.group.acronym,
+            "stream": draft.stream_id,
+            "abstract": draft.abstract,
+            "pages": draft.pages,
+            "words": draft.pages * 250,
+            "formal_languages": [],
+            "std_level": "ps",
+            "ad": draft_ad.pk,
+            "note": "noted",
+            "obsoletes": [],
+            "updates": [],
+            "subseries": [],
+        }
+        r = self.client.post(url, data=post_data, format="json")
+        self.assertEqual(r.status_code, 403)
+
+        r = self.client.post(
+            url, data=post_data, format="json", headers={"X-Api-Key": "valid-token"}
+        )
+        self.assertEqual(r.status_code, 200)
+        rfc = Document.objects.filter(rfc_number=unused_rfc_number).first()
+        self.assertIsNotNone(rfc)
+        self.assertEqual(rfc.came_from_draft(), draft)
+        self.assertEqual(
+            rfc.docevent_set.filter(
+                type="published_rfc", time="2025-12-17T20:29:00Z"
+            ).count(),
+            1,
+        )
+        self.assertEqual(rfc.title, draft.title)
+        self.assertEqual(rfc.documentauthor_set.count(), 0)
+        self.assertEqual(
+            list(
+                rfc.rfcauthor_set.values(
+                    "titlepage_name",
+                    "is_editor",
+                    "person",
+                    "email",
+                    "affiliation",
+                    "country",
+                )
+            ),
+            [
+                {
+                    "titlepage_name": f"titlepage {author.name}",
+                    "is_editor": False,
+                    "person": author.pk,
+                    "email": author.email_address(),
+                    "affiliation": "Some Affiliation",
+                    "country": "CA",
+                }
+                for author in authors
+            ],
+        )
+        self.assertEqual(rfc.group, draft.group)
+        self.assertEqual(rfc.stream, draft.stream)
+        self.assertEqual(rfc.abstract, draft.abstract)
+        self.assertEqual(rfc.pages, draft.pages)
+        self.assertEqual(rfc.words, draft.pages * 250)
+        self.assertEqual(rfc.formal_languages.count(), 0)
+        self.assertEqual(rfc.std_level_id, "ps")
+        self.assertEqual(rfc.ad, draft_ad)
+        self.assertEqual(rfc.note, "noted")
+        self.assertEqual(rfc.related_that_doc("obs"), [])
+        self.assertEqual(rfc.related_that_doc("updates"), [])
+        self.assertEqual(rfc.part_of(), [])
+        self.assertEqual(draft.get_state().slug, "rfc")
+        # todo test non-empty relationships
+        # todo test references (when updating that is part of the handling)
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    def test_upload_rfc_files(self):
+        def _valid_post_data():
+            """Generate a valid post data dict
+
+            Each API call needs a fresh set of files, so don't reuse the return
+            value from this for multiple calls!
+            """
+            return {
+                "rfc": rfc.rfc_number,
+                "contents": [
+                    ContentFile(b"This is .xml", "myfile.xml"),
+                    ContentFile(b"This is .txt", "myfile.txt"),
+                    ContentFile(b"This is .html", "myfile.html"),
+                    ContentFile(b"This is .pdf", "myfile.pdf"),
+                    ContentFile(b"This is .json", "myfile.json"),
+                    ContentFile(b"This is .notprepped.xml", "myfile.notprepped.xml"),
+                ],
+                "replace": False,
+            }
+
+        url = urlreverse("ietf.api.purple_api.upload_rfc_files")
+        unused_rfc_number = (
+            Document.objects.filter(rfc_number__isnull=False).aggregate(
+                unused_rfc_number=Max("rfc_number") + 1
+            )["unused_rfc_number"]
+            or 10000
+        )
+
+        rfc = WgRfcFactory(rfc_number=unused_rfc_number)
+        assert isinstance(rfc, Document), "WgRfcFactory should generate a Document"
+        with TemporaryDirectory() as rfc_dir:
+            settings.RFC_PATH = rfc_dir  # affects overridden settings
+            rfc_path = Path(rfc_dir)
+            (rfc_path / "prerelease").mkdir()
+            content = StringIO("XML content\n")
+            content.name = "myrfc.xml"
+
+            # no api key
+            r = self.client.post(url, _valid_post_data(), format="multipart")
+            self.assertEqual(r.status_code, 403)
+
+            # invalid RFC
+            r = self.client.post(
+                url,
+                _valid_post_data() | {"rfc": unused_rfc_number + 1},
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 400)
+
+            # empty files
+            r = self.client.post(
+                url,
+                _valid_post_data() | {
+                    "contents": [
+                        ContentFile(b"", "myfile.xml"),
+                        ContentFile(b"", "myfile.txt"),
+                        ContentFile(b"", "myfile.html"),
+                        ContentFile(b"", "myfile.pdf"),
+                        ContentFile(b"", "myfile.json"),
+                        ContentFile(b"", "myfile.notprepped.xml"),
+                    ]
+                },
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 400)
+
+            # bad file type
+            r = self.client.post(
+                url,
+                _valid_post_data() | {
+                    "contents": [
+                        ContentFile(b"Some content", "myfile.jpg"),
+                    ]
+                },
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 400)
+
+            # valid post
+            r = self.client.post(
+                url,
+                _valid_post_data(),
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 200)
+            for suffix in [".xml", ".txt", ".html", ".pdf", ".json"]:
+                self.assertEqual(
+                    (rfc_path / f"rfc{unused_rfc_number}")
+                    .with_suffix(suffix)
+                    .read_text(),
+                    f"This is {suffix}",
+                    f"{suffix} file should contain the expected content",
+                )
+            self.assertEqual(
+                (
+                    rfc_path / "prerelease" / f"rfc{unused_rfc_number}.notprepped.xml"
+                ).read_text(),
+                "This is .notprepped.xml",
+                ".notprepped.xml file should contain the expected content",
+            )
+
+            # re-post with replace = False should now fail
+            r = self.client.post(
+                url,
+                _valid_post_data(),
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 409)  # conflict
+            
+            # re-post with replace = True should succeed
+            r = self.client.post(
+                url,
+                _valid_post_data() | {"replace": True},
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 200)  # conflict
diff --git a/ietf/api/urls.py b/ietf/api/urls.py
index 04575b34cb..7a082567b8 100644
--- a/ietf/api/urls.py
+++ b/ietf/api/urls.py
@@ -1,26 +1,31 @@
 # Copyright The IETF Trust 2017-2024, All Rights Reserved
 
+from drf_spectacular.views import SpectacularAPIView
+
 from django.conf import settings
-from django.urls import include
+from django.urls import include, path
 from django.views.generic import TemplateView
 
 from ietf import api
-from ietf.doc import views_ballot
+from ietf.doc import views_ballot, api as doc_api
 from ietf.meeting import views as meeting_views
 from ietf.submit import views as submit_views
 from ietf.utils.urls import url
 
 from . import views as api_views
+from .routers import PrefixedSimpleRouter 
 
 # DRF API routing - disabled until we plan to use it
-# from drf_spectacular.views import SpectacularAPIView
-# from django.urls import path
 # from ietf.person import api as person_api
-# from .routers import PrefixedSimpleRouter 
 # core_router = PrefixedSimpleRouter(name_prefix="ietf.api.core_api")  # core api router
 # core_router.register("email", person_api.EmailViewSet)
 # core_router.register("person", person_api.PersonViewSet)
 
+# todo more general name for this API?
+red_router = PrefixedSimpleRouter(name_prefix="ietf.api.red_api")  # red api router
+red_router.register("doc", doc_api.RfcViewSet)
+red_router.register("subseries", doc_api.SubseriesViewSet, basename="subseries")
+
 api.autodiscover()
 
 urlpatterns = [
@@ -32,7 +37,9 @@
     url(r'^v2/person/person', api_views.ApiV2PersonExportView.as_view()),
     # --- DRF API ---
     # path("core/", include(core_router.urls)),
-    # path("schema/", SpectacularAPIView.as_view()),
+    path("purple/", include("ietf.api.urls_rpc")),
+    path("red/", include(red_router.urls)),
+    path("schema/", SpectacularAPIView.as_view()),
     #
     # --- Custom API endpoints, sorted alphabetically ---
     # Email alias information for drafts
diff --git a/ietf/api/urls_rpc.py b/ietf/api/urls_rpc.py
new file mode 100644
index 0000000000..9d41ac137f
--- /dev/null
+++ b/ietf/api/urls_rpc.py
@@ -0,0 +1,42 @@
+# Copyright The IETF Trust 2023-2026, All Rights Reserved
+from django.urls import include, path
+
+from ietf.api import views_rpc
+from ietf.api.routers import PrefixedDefaultRouter
+from ietf.utils.urls import url
+
+router = PrefixedDefaultRouter(use_regex_path=False, name_prefix="ietf.api.purple_api")
+router.include_format_suffixes = False
+router.register(r"draft", views_rpc.DraftViewSet, basename="draft")
+router.register(r"person", views_rpc.PersonViewSet)
+router.register(r"rfc", views_rpc.RfcViewSet, basename="rfc")
+
+router.register(
+    r"rfc/<int:rfc_number>/authors",
+    views_rpc.RfcAuthorViewSet,
+    basename="rfc-authors",
+)
+
+urlpatterns = [
+    url(r"^doc/drafts_by_names/", views_rpc.DraftsByNamesView.as_view()),
+    url(r"^persons/search/", views_rpc.RpcPersonSearch.as_view()),
+    path(
+        r"rfc/publish/",
+        views_rpc.RfcPubNotificationView.as_view(),
+        name="ietf.api.purple_api.notify_rfc_published",
+    ),
+    path(
+        r"rfc/publish/files/",
+        views_rpc.RfcPubFilesView.as_view(),
+        name="ietf.api.purple_api.upload_rfc_files",
+    ),
+    path(r"subject/<str:subject_id>/person/", views_rpc.SubjectPersonView.as_view()),
+]
+
+# add routers at the end so individual routes can steal parts of their address
+# space (e.g., ^rfc/publish/ superseding the ^rfc/ routes of RfcViewSet)
+urlpatterns.extend(
+    [
+        path("", include(router.urls)),
+    ]
+)
diff --git a/ietf/api/views.py b/ietf/api/views.py
index 22523b2f17..420bc39693 100644
--- a/ietf/api/views.py
+++ b/ietf/api/views.py
@@ -97,7 +97,7 @@ class PersonalInformationExportView(DetailView, JsonExportMixin):
 
     def get(self, request):
         person = get_object_or_404(self.model, user=request.user)
-        expand = ['searchrule', 'documentauthor', 'ad_document_set', 'ad_dochistory_set', 'docevent',
+        expand = ['searchrule', 'documentauthor', 'rfcauthor', 'ad_document_set', 'ad_dochistory_set', 'docevent',
             'ballotpositiondocevent', 'deletedevent', 'email_set', 'groupevent', 'role', 'rolehistory', 'iprdisclosurebase',
             'iprevent', 'liaisonstatementevent', 'allowlisted', 'schedule', 'constraint', 'schedulingevent', 'message',
             'sendqueue', 'nominee', 'topicfeedbacklastseen', 'alias', 'email', 'apikeys', 'personevent',
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
new file mode 100644
index 0000000000..fce174ab72
--- /dev/null
+++ b/ietf/api/views_rpc.py
@@ -0,0 +1,434 @@
+# Copyright The IETF Trust 2023-2026, All Rights Reserved
+import shutil
+from pathlib import Path
+from tempfile import TemporaryDirectory
+
+from django.conf import settings
+from drf_spectacular.utils import OpenApiParameter
+from rest_framework import mixins, parsers, serializers, viewsets, status
+from rest_framework.decorators import action
+from rest_framework.exceptions import APIException
+from rest_framework.views import APIView
+from rest_framework.response import Response
+
+from django.db.models import CharField as ModelCharField, OuterRef, Subquery, Q
+from django.db.models.functions import Coalesce
+from django.http import Http404
+from drf_spectacular.utils import extend_schema_view, extend_schema
+from rest_framework import generics
+from rest_framework.fields import CharField as DrfCharField
+from rest_framework.filters import SearchFilter
+from rest_framework.pagination import LimitOffsetPagination
+
+from ietf.api.serializers_rpc import (
+    PersonSerializer,
+    FullDraftSerializer,
+    DraftSerializer,
+    SubmittedToQueueSerializer,
+    OriginalStreamSerializer,
+    ReferenceSerializer,
+    EmailPersonSerializer,
+    RfcWithAuthorsSerializer,
+    DraftWithAuthorsSerializer,
+    NotificationAckSerializer, RfcPubSerializer, RfcFileSerializer,
+    EditableRfcSerializer,
+)
+from ietf.doc.models import Document, DocHistory, RfcAuthor
+from ietf.doc.serializers import RfcAuthorSerializer
+from ietf.person.models import Email, Person
+
+
+class Conflict(APIException):
+    status_code = status.HTTP_409_CONFLICT
+    default_detail = "Conflict."
+    default_code = "conflict"
+
+
+@extend_schema_view(
+    retrieve=extend_schema(
+        operation_id="get_person_by_id",
+        summary="Find person by ID",
+        description="Returns a single person",
+        parameters=[
+            OpenApiParameter(
+                name="person_id",
+                type=int,
+                location="path",
+                description="Person ID identifying this person.",
+            ),
+        ],
+    ),
+)
+class PersonViewSet(mixins.RetrieveModelMixin, viewsets.GenericViewSet):
+    queryset = Person.objects.all()
+    serializer_class = PersonSerializer
+    api_key_endpoint = "ietf.api.views_rpc"
+    lookup_url_kwarg = "person_id"
+
+    @extend_schema(
+        operation_id="get_persons",
+        summary="Get a batch of persons",
+        description="Returns a list of persons matching requested ids. Omits any that are missing.",
+        request=list[int],
+        responses=PersonSerializer(many=True),
+    )
+    @action(detail=False, methods=["post"])
+    def batch(self, request):
+        """Get a batch of rpc person names"""
+        pks = request.data
+        return Response(
+            self.get_serializer(Person.objects.filter(pk__in=pks), many=True).data
+        )
+
+    @extend_schema(
+        operation_id="persons_by_email",
+        summary="Get a batch of persons by email addresses",
+        description=(
+            "Returns a list of persons matching requested ids. "
+            "Omits any that are missing."
+        ),
+        request=list[str],
+        responses=EmailPersonSerializer(many=True),
+    )
+    @action(detail=False, methods=["post"], serializer_class=EmailPersonSerializer)
+    def batch_by_email(self, request):
+        emails = Email.objects.filter(address__in=request.data, person__isnull=False)
+        serializer = self.get_serializer(emails, many=True)
+        return Response(serializer.data)
+
+
+class SubjectPersonView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    @extend_schema(
+        operation_id="get_subject_person_by_id",
+        summary="Find person for OIDC subject by ID",
+        description="Returns a single person",
+        responses=PersonSerializer,
+        parameters=[
+            OpenApiParameter(
+                name="subject_id",
+                type=str,
+                description="subject ID of person to return",
+                location="path",
+            ),
+        ],
+    )
+    def get(self, request, subject_id: str):
+        try:
+            user_id = int(subject_id)
+        except ValueError:
+            raise serializers.ValidationError(
+                {"subject_id": "This field must be an integer value."}
+            )
+        person = Person.objects.filter(user__pk=user_id).first()
+        if person:
+            return Response(PersonSerializer(person).data)
+        raise Http404
+
+
+class RpcLimitOffsetPagination(LimitOffsetPagination):
+    default_limit = 10
+    max_limit = 100
+
+
+class SingleTermSearchFilter(SearchFilter):
+    """SearchFilter backend that does not split terms
+
+    The default SearchFilter treats comma or whitespace-separated terms as individual
+    search terms. This backend instead searches for the exact term.
+    """
+
+    def get_search_terms(self, request):
+        value = request.query_params.get(self.search_param, "")
+        field = DrfCharField(trim_whitespace=False, allow_blank=True)
+        cleaned_value = field.run_validation(value)
+        return [cleaned_value]
+
+
+@extend_schema_view(
+    get=extend_schema(
+        operation_id="search_person",
+        description="Get a list of persons, matching by partial name or email",
+    ),
+)
+class RpcPersonSearch(generics.ListAPIView):
+    # n.b. the OpenAPI schema for this can be generated by running
+    # ietf/manage.py spectacular --file spectacular.yaml
+    # and extracting / touching up the rpc_person_search_list operation
+    api_key_endpoint = "ietf.api.views_rpc"
+    queryset = Person.objects.all()
+    serializer_class = PersonSerializer
+    pagination_class = RpcLimitOffsetPagination
+
+    # Searchable on all name-like fields or email addresses
+    filter_backends = [SingleTermSearchFilter]
+    search_fields = ["name", "plain", "email__address"]
+
+
+@extend_schema_view(
+    retrieve=extend_schema(
+        operation_id="get_draft_by_id",
+        summary="Get a draft",
+        description="Returns the draft for the requested ID",
+        parameters=[
+            OpenApiParameter(
+                name="doc_id",
+                type=int,
+                location="path",
+                description="Doc ID identifying this draft.",
+            ),
+        ],
+    ),
+    submitted_to_rpc=extend_schema(
+        operation_id="submitted_to_rpc",
+        summary="List documents ready to enter the RFC Editor Queue",
+        description="List documents ready to enter the RFC Editor Queue",
+        responses=SubmittedToQueueSerializer(many=True),
+    ),
+)
+class DraftViewSet(mixins.RetrieveModelMixin, viewsets.GenericViewSet):
+    queryset = Document.objects.filter(type_id="draft")
+    serializer_class = FullDraftSerializer
+    api_key_endpoint = "ietf.api.views_rpc"
+    lookup_url_kwarg = "doc_id"
+
+    @action(detail=False, serializer_class=SubmittedToQueueSerializer)
+    def submitted_to_rpc(self, request):
+        """Return documents in datatracker that have been submitted to the RPC but are not yet in the queue
+
+        Those queries overreturn - there may be things, particularly not from the IETF stream that are already in the queue.
+        """
+        ietf_docs = Q(states__type_id="draft-iesg", states__slug__in=["ann"])
+        irtf_iab_ise_docs = Q(
+            states__type_id__in=[
+                "draft-stream-iab",
+                "draft-stream-irtf",
+                "draft-stream-ise",
+            ],
+            states__slug__in=["rfc-edit"],
+        )
+        # TODO: Need a way to talk about editorial stream docs
+        docs = (
+            self.get_queryset()
+            .filter(type_id="draft")
+            .filter(ietf_docs | irtf_iab_ise_docs)
+        )
+        serializer = self.get_serializer(docs, many=True)
+        return Response(serializer.data)
+
+    @extend_schema(
+        operation_id="get_draft_references",
+        summary="Get normative references to I-Ds",
+        description=(
+            "Returns the id and name of each normatively "
+            "referenced Internet-Draft for the given docId"
+        ),
+        parameters=[
+            OpenApiParameter(
+                name="doc_id",
+                type=int,
+                location="path",
+                description="Doc ID identifying this draft.",
+            ),
+        ],
+        responses=ReferenceSerializer(many=True),
+    )
+    @action(detail=True, serializer_class=ReferenceSerializer)
+    def references(self, request, doc_id=None):
+        doc = self.get_object()
+        serializer = self.get_serializer(
+            [
+                reference
+                for reference in doc.related_that_doc("refnorm")
+                if reference.type_id == "draft"
+            ],
+            many=True,
+        )
+        return Response(serializer.data)
+
+    @extend_schema(
+        operation_id="get_draft_authors",
+        summary="Gather authors of the drafts with the given names",
+        description="returns a list mapping draft names to objects describing authors",
+        request=list[str],
+        responses=DraftWithAuthorsSerializer(many=True),
+    )
+    @action(detail=False, methods=["post"], serializer_class=DraftWithAuthorsSerializer)
+    def bulk_authors(self, request):
+        drafts = self.get_queryset().filter(name__in=request.data)
+        serializer = self.get_serializer(drafts, many=True)
+        return Response(serializer.data)
+
+
+@extend_schema_view(
+    rfc_original_stream=extend_schema(
+        operation_id="get_rfc_original_streams",
+        summary="Get the streams RFCs were originally published into",
+        description="returns a list of dicts associating an RFC with its originally published stream",
+        responses=OriginalStreamSerializer(many=True),
+    )
+)
+class RfcViewSet(mixins.UpdateModelMixin, viewsets.GenericViewSet):
+    queryset = Document.objects.filter(type_id="rfc")
+    api_key_endpoint = "ietf.api.views_rpc"
+    lookup_field = "rfc_number"
+    serializer_class = EditableRfcSerializer
+
+    @action(detail=False, serializer_class=OriginalStreamSerializer)
+    def rfc_original_stream(self, request):
+        rfcs = self.get_queryset().annotate(
+            orig_stream_id=Coalesce(
+                Subquery(
+                    DocHistory.objects.filter(doc=OuterRef("pk"))
+                    .exclude(stream__isnull=True)
+                    .order_by("time")
+                    .values_list("stream_id", flat=True)[:1]
+                ),
+                "stream_id",
+                output_field=ModelCharField(),
+            ),
+        )
+        serializer = self.get_serializer(rfcs, many=True)
+        return Response(serializer.data)
+
+    @extend_schema(
+        operation_id="get_rfc_authors",
+        summary="Gather authors of the RFCs with the given numbers",
+        description="returns a list mapping rfc numbers to objects describing authors",
+        request=list[int],
+        responses=RfcWithAuthorsSerializer(many=True),
+    )
+    @action(detail=False, methods=["post"], serializer_class=RfcWithAuthorsSerializer)
+    def bulk_authors(self, request):
+        rfcs = self.get_queryset().filter(rfc_number__in=request.data)
+        serializer = self.get_serializer(rfcs, many=True)
+        return Response(serializer.data)
+
+
+class DraftsByNamesView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    @extend_schema(
+        operation_id="get_drafts_by_names",
+        summary="Get a batch of drafts by draft names",
+        description="returns a list of drafts with matching names",
+        request=list[str],
+        responses=DraftSerializer(many=True),
+    )
+    def post(self, request):
+        names = request.data
+        docs = Document.objects.filter(type_id="draft", name__in=names)
+        return Response(DraftSerializer(docs, many=True).data)
+
+
+class RfcAuthorViewSet(viewsets.ReadOnlyModelViewSet):
+    """ViewSet for RfcAuthor model
+    
+    Router needs to provide rfc_number as a kwarg
+    """
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    queryset = RfcAuthor.objects.all()
+    serializer_class = RfcAuthorSerializer
+    lookup_url_kwarg = "author_id"
+    rfc_number_param = "rfc_number"
+
+    def get_queryset(self):
+        return (
+            super()
+            .get_queryset()
+            .filter(
+                document__type_id="rfc",
+                document__rfc_number=self.kwargs[self.rfc_number_param],
+            )
+        )
+
+
+class RfcPubNotificationView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    @extend_schema(
+        operation_id="notify_rfc_published",
+        summary="Notify datatracker of RFC publication",
+        request=RfcPubSerializer,
+        responses=NotificationAckSerializer,
+    )
+    def post(self, request):
+        serializer = RfcPubSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        # Create RFC
+        serializer.save()
+        return Response(NotificationAckSerializer().data)
+
+
+class RfcPubFilesView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+    parser_classes = [parsers.MultiPartParser]
+
+    def _destination(self, filename: str | Path) -> Path:
+        """Destination for an uploaded RFC file
+        
+        Strips any path components in filename and returns an absolute Path.
+        """
+        rfc_path = Path(settings.RFC_PATH)
+        filename = Path(filename)  # could potentially have directory components
+        extension = "".join(filename.suffixes)
+        if extension == ".notprepped.xml":
+            return rfc_path / "prerelease" / filename.name
+        return rfc_path / filename.name
+
+    @extend_schema(
+        operation_id="upload_rfc_files",
+        summary="Upload files for a published RFC",
+        request=RfcFileSerializer,
+        responses=NotificationAckSerializer,
+    )
+    def post(self, request):
+        serializer = RfcFileSerializer(
+            # many=True,
+            data=request.data,
+        )
+        serializer.is_valid(raise_exception=True)
+        rfc = serializer.validated_data["rfc"]
+        uploaded_files = serializer.validated_data["contents"]  # list[UploadedFile]
+        replace = serializer.validated_data["replace"]
+        dest_stem = f"rfc{rfc.rfc_number}"
+
+        # List of files that might exist for an RFC
+        possible_rfc_files = [
+            self._destination(dest_stem + ext)
+            for ext in serializer.allowed_extensions
+        ]
+        if not replace:
+            # this is the default: refuse to overwrite anything if not replacing
+            for possible_existing_file in possible_rfc_files:
+                if possible_existing_file.exists():
+                    raise Conflict(
+                        "File(s) already exist for this RFC",
+                        code="files-exist",
+                    )
+
+        with TemporaryDirectory() as tempdir:
+            # Save files in a temporary directory. Use the uploaded filename
+            # extensions to identify files, but ignore the stems and generate our own.
+            files_to_move = []  # list[Path]
+            tmpfile_stem = Path(tempdir) / dest_stem
+            for upfile in uploaded_files:
+                uploaded_filename = Path(upfile.name)  # name supplied by request
+                uploaded_ext = "".join(uploaded_filename.suffixes)
+                tempfile_path = tmpfile_stem.with_suffix(uploaded_ext)
+                with tempfile_path.open("wb") as dest:
+                    for chunk in upfile.chunks():
+                        dest.write(chunk)
+                files_to_move.append(tempfile_path)
+            # copy files to final location, removing any existing ones first if the
+            # remove flag was set
+            if replace:
+                for possible_existing_file in possible_rfc_files:
+                    possible_existing_file.unlink(missing_ok=True)
+            for ftm in files_to_move:
+                shutil.move(ftm, self._destination(ftm))
+                # todo store in blob storage as well (need a bucket for RFCs)
+
+        return Response(NotificationAckSerializer().data)
diff --git a/ietf/community/utils.py b/ietf/community/utils.py
index f23e8d26ab..b6137095ef 100644
--- a/ietf/community/utils.py
+++ b/ietf/community/utils.py
@@ -72,8 +72,10 @@ def docs_matching_community_list_rule(rule):
         return docs.filter(group=rule.group_id)
     elif rule.rule_type.startswith("state_"):
         return docs
-    elif rule.rule_type in ["author", "author_rfc"]:
+    elif rule.rule_type == "author": 
         return docs.filter(documentauthor__person=rule.person)
+    elif rule.rule_type == "author_rfc":
+        return docs.filter(Q(rfcauthor__person=rule.person)|Q(rfcauthor__isnull=True,documentauthor__person=rule.person))
     elif rule.rule_type == "ad":
         return docs.filter(ad=rule.person)
     elif rule.rule_type == "shepherd":
@@ -122,9 +124,16 @@ def community_list_rules_matching_doc(doc):
 
     # author rules
     if doc.type_id == "rfc":
+        has_rfcauthors = doc.rfcauthor_set.exists()
         rules |= SearchRule.objects.filter(
             rule_type="author_rfc",
-            person__in=list(Person.objects.filter(documentauthor__document=doc)),
+            person__in=list(
+                Person.objects.filter(
+                    Q(rfcauthor__document=doc)
+                    if has_rfcauthors
+                    else Q(documentauthor__document=doc)
+                )
+            ),
         )
     else:
         rules |= SearchRule.objects.filter(
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 8f26b222e1..f082418935 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -13,7 +13,8 @@
     TelechatDocEvent, BallotPositionDocEvent, ReviewRequestDocEvent, InitialReviewDocEvent,
     AddedMessageEvent, SubmissionDocEvent, DeletedEvent, EditedAuthorsDocEvent, DocumentURL,
     ReviewAssignmentDocEvent, IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
-    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject )
+    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject, RfcAuthor,
+    EditedRfcAuthorsDocEvent)
 
 from ietf.utils.admin import SaferTabularInline
 from ietf.utils.validators import validate_external_resource_value
@@ -174,6 +175,7 @@ def short_desc(self, obj):
 admin.site.register(TelechatDocEvent, DocEventAdmin)
 admin.site.register(InitialReviewDocEvent, DocEventAdmin)
 admin.site.register(EditedAuthorsDocEvent, DocEventAdmin)
+admin.site.register(EditedRfcAuthorsDocEvent, DocEventAdmin)
 admin.site.register(IanaExpertDocEvent, DocEventAdmin)
 
 class BallotPositionDocEventAdmin(DocEventAdmin):
@@ -237,3 +239,9 @@ def is_deleted(self, instance):
     
 
 admin.site.register(StoredObject, StoredObjectAdmin)
+
+class RfcAuthorAdmin(admin.ModelAdmin):
+    list_display = ['id', 'document', 'titlepage_name', 'person', 'email', 'affiliation', 'country', 'order']
+    search_fields = ['document__name', 'titlepage_name', 'person__name', 'email__address', 'affiliation', 'country']
+    raw_id_fields = ["document", "person", "email"]
+admin.site.register(RfcAuthor, RfcAuthorAdmin)
diff --git a/ietf/doc/api.py b/ietf/doc/api.py
new file mode 100644
index 0000000000..47e7e6fffd
--- /dev/null
+++ b/ietf/doc/api.py
@@ -0,0 +1,194 @@
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
+"""Doc API implementations"""
+
+from django.db.models import OuterRef, Subquery, Prefetch, Value, JSONField, QuerySet
+from django.db.models.functions import TruncDate
+from django_filters import rest_framework as filters
+from rest_framework import filters as drf_filters
+from rest_framework.mixins import ListModelMixin, RetrieveModelMixin
+from rest_framework.pagination import LimitOffsetPagination
+from rest_framework.viewsets import GenericViewSet
+
+from ietf.group.models import Group
+from ietf.name.models import StreamName, DocTypeName
+from ietf.utils.timezone import RPC_TZINFO
+from .models import (
+    Document,
+    DocEvent,
+    RelatedDocument,
+    DocumentAuthor,
+    SUBSERIES_DOC_TYPE_IDS,
+)
+from .serializers import (
+    RfcMetadataSerializer,
+    RfcStatus,
+    RfcSerializer,
+    SubseriesDocSerializer,
+)
+
+
+class RfcLimitOffsetPagination(LimitOffsetPagination):
+    default_limit = 10
+    max_limit = 500
+
+
+class RfcFilter(filters.FilterSet):
+    published = filters.DateFromToRangeFilter()
+    stream = filters.ModelMultipleChoiceFilter(
+        queryset=StreamName.objects.filter(used=True)
+    )
+    group = filters.ModelMultipleChoiceFilter(
+        queryset=Group.objects.wgs(),
+        field_name="group__acronym",
+        to_field_name="acronym",
+    )
+    area = filters.ModelMultipleChoiceFilter(
+        queryset=Group.objects.areas(),
+        field_name="group__parent__acronym",
+        to_field_name="acronym",
+    )
+    status = filters.MultipleChoiceFilter(
+        choices=[(slug, slug) for slug in RfcStatus.status_slugs],
+        method=RfcStatus.filter,
+    )
+    sort = filters.OrderingFilter(
+        fields=(
+            ("rfc_number", "number"),  # ?sort=number / ?sort=-number
+            ("published", "published"),  # ?sort=published / ?sort=-published
+        ),
+    )
+
+
+class PrefetchRelatedDocument(Prefetch):
+    """Prefetch via a RelatedDocument
+
+    Prefetches following RelatedDocument relationships to other docs. By default, includes
+    those for which the current RFC is the `source`. If `reverse` is True, includes those
+    for which it is the `target` instead. Defaults to only "rfc" documents.
+    """
+
+    @staticmethod
+    def _get_queryset(relationship_id, reverse, doc_type_ids):
+        """Get queryset to use for the prefetch"""
+        if isinstance(doc_type_ids, str):
+            doc_type_ids = (doc_type_ids,)
+
+        return RelatedDocument.objects.filter(
+            **{
+                "relationship_id": relationship_id,
+                f"{'source' if reverse else 'target'}__type_id__in": doc_type_ids,
+            }
+        ).select_related("source" if reverse else "target")
+
+    def __init__(self, to_attr, relationship_id, reverse=False, doc_type_ids="rfc"):
+        super().__init__(
+            lookup="targets_related" if reverse else "relateddocument_set",
+            queryset=self._get_queryset(relationship_id, reverse, doc_type_ids),
+            to_attr=to_attr,
+        )
+
+
+def augment_rfc_queryset(queryset: QuerySet[Document]):
+    return (
+        queryset.select_related("std_level", "stream")
+        .prefetch_related(
+            Prefetch(
+                "group",
+                Group.objects.select_related("parent"),
+            ),
+            Prefetch(
+                "documentauthor_set",
+                DocumentAuthor.objects.select_related("email", "person"),
+            ),
+            PrefetchRelatedDocument(
+                to_attr="drafts",
+                relationship_id="became_rfc",
+                doc_type_ids="draft",
+                reverse=True,
+            ),
+            PrefetchRelatedDocument(to_attr="obsoletes", relationship_id="obs"),
+            PrefetchRelatedDocument(
+                to_attr="obsoleted_by", relationship_id="obs", reverse=True
+            ),
+            PrefetchRelatedDocument(to_attr="updates", relationship_id="updates"),
+            PrefetchRelatedDocument(
+                to_attr="updated_by", relationship_id="updates", reverse=True
+            ),
+            PrefetchRelatedDocument(
+                to_attr="subseries",
+                relationship_id="contains",
+                reverse=True,
+                doc_type_ids=SUBSERIES_DOC_TYPE_IDS,
+            ),
+        )
+        .annotate(
+            published_datetime=Subquery(
+                DocEvent.objects.filter(
+                    doc_id=OuterRef("pk"),
+                    type="published_rfc",
+                )
+                .order_by("-time")
+                .values("time")[:1]
+            ),
+        )
+        .annotate(published=TruncDate("published_datetime", tzinfo=RPC_TZINFO))
+        .annotate(
+            # TODO implement these fake fields for real
+            see_also=Value([], output_field=JSONField()),
+            formats=Value(["txt", "xml"], output_field=JSONField()),
+            keywords=Value(["keyword"], output_field=JSONField()),
+            errata=Value([], output_field=JSONField()),
+        )
+    )
+
+
+class RfcViewSet(ListModelMixin, RetrieveModelMixin, GenericViewSet):
+    api_key_endpoint = "ietf.api.red_api"  # matches prefix in ietf/api/urls.py
+    lookup_field = "rfc_number"
+    queryset = augment_rfc_queryset(
+        Document.objects.filter(type_id="rfc", rfc_number__isnull=False)
+    ).order_by("-rfc_number")
+
+    pagination_class = RfcLimitOffsetPagination
+    filter_backends = [filters.DjangoFilterBackend, drf_filters.SearchFilter]
+    filterset_class = RfcFilter
+    search_fields = ["title", "abstract"]
+
+    def get_serializer_class(self):
+        if self.action == "retrieve":
+            return RfcSerializer
+        return RfcMetadataSerializer
+
+
+class PrefetchSubseriesContents(Prefetch):
+    def __init__(self, to_attr):
+        super().__init__(
+            lookup="relateddocument_set",
+            queryset=RelatedDocument.objects.filter(
+                relationship_id="contains",
+                target__type_id="rfc",
+            ).prefetch_related(
+                Prefetch(
+                    "target",
+                    queryset=augment_rfc_queryset(Document.objects.all()),
+                )
+            ),
+            to_attr=to_attr,
+        )
+
+
+class SubseriesFilter(filters.FilterSet):
+    type = filters.ModelMultipleChoiceFilter(
+        queryset=DocTypeName.objects.filter(pk__in=SUBSERIES_DOC_TYPE_IDS)
+    )
+
+
+class SubseriesViewSet(ListModelMixin, RetrieveModelMixin, GenericViewSet):
+    api_key_endpoint = "ietf.api.red_api"  # matches prefix in ietf/api/urls.py
+    lookup_field = "name"
+    serializer_class = SubseriesDocSerializer
+    queryset = Document.objects.subseries_docs().prefetch_related(
+        PrefetchSubseriesContents(to_attr="contents")
+    )
+    filter_backends = [filters.DjangoFilterBackend]
+    filterset_class = SubseriesFilter
diff --git a/ietf/doc/factories.py b/ietf/doc/factories.py
index 19aa9ecc9c..aad01be04f 100644
--- a/ietf/doc/factories.py
+++ b/ietf/doc/factories.py
@@ -14,7 +14,7 @@
 
 from ietf.doc.models import ( Document, DocEvent, NewRevisionDocEvent, State, DocumentAuthor,
     StateDocEvent, BallotPositionDocEvent, BallotDocEvent, BallotType, IRSGBallotDocEvent, TelechatDocEvent,
-    DocumentActionHolder, BofreqEditorDocEvent, BofreqResponsibleDocEvent, DocExtResource )
+    DocumentActionHolder, BofreqEditorDocEvent, BofreqResponsibleDocEvent, DocExtResource, RfcAuthor )
 from ietf.group.models import Group
 from ietf.person.factories import PersonFactory
 from ietf.group.factories import RoleFactory
@@ -382,6 +382,19 @@ class Meta:
     country = factory.Faker('country')
     order = factory.LazyAttribute(lambda o: o.document.documentauthor_set.count() + 1)
 
+class RfcAuthorFactory(factory.django.DjangoModelFactory):
+    class Meta:
+        model = RfcAuthor
+
+    document = factory.SubFactory(DocumentFactory)
+    titlepage_name = factory.LazyAttribute(
+        lambda obj: " ".join([obj.person.initials(), obj.person.last_name()])
+    )
+    person = factory.SubFactory('ietf.person.factories.PersonFactory')
+    email = factory.LazyAttribute(lambda obj: obj.person.email())
+    affiliation = factory.Faker('company')
+    order = factory.LazyAttribute(lambda o: o.document.rfcauthor_set.count() + 1)
+
 class WgDocumentAuthorFactory(DocumentAuthorFactory):
     document = factory.SubFactory(WgDraftFactory)
 
diff --git a/ietf/doc/management/commands/reset_rfc_authors.py b/ietf/doc/management/commands/reset_rfc_authors.py
deleted file mode 100644
index e2ab5f1208..0000000000
--- a/ietf/doc/management/commands/reset_rfc_authors.py
+++ /dev/null
@@ -1,69 +0,0 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
-
-# Reset an RFC's authors to those of the draft it came from
-from django.core.management.base import BaseCommand, CommandError
-
-from ietf.doc.models import Document, DocEvent
-from ietf.person.models import Person
-
-
-class Command(BaseCommand):
-    def add_arguments(self, parser):
-        parser.add_argument("rfcnum", type=int, help="RFC number to modify")
-        parser.add_argument(
-            "--force",
-            action="store_true",
-            help="reset even if RFC already has authors",
-        )
-
-    def handle(self, *args, **options):
-        try:
-            rfc = Document.objects.get(type="rfc", rfc_number=options["rfcnum"])
-        except Document.DoesNotExist:
-            raise CommandError(
-                f"rfc{options['rfcnum']} does not exist in the Datatracker."
-            )
-
-        draft = rfc.came_from_draft()
-        if draft is None:
-            raise CommandError(f"{rfc.name} did not come from a draft. Can't reset.")
-
-        orig_authors = rfc.documentauthor_set.all()
-        if orig_authors.exists():
-            # Potentially dangerous, so refuse unless "--force" is specified
-            if not options["force"]:
-                raise CommandError(
-                    f"{rfc.name} already has authors. Not resetting. Use '--force' to reset anyway."
-                )
-            removed_auth_names = list(orig_authors.values_list("person__name", flat=True))
-            rfc.documentauthor_set.all().delete()
-            DocEvent.objects.create(
-                doc=rfc,
-                by=Person.objects.get(name="(System)"),
-                type="edited_authors",
-                desc=f"Removed all authors: {', '.join(removed_auth_names)}",
-            )
-            self.stdout.write(
-                self.style.SUCCESS(
-                    f"Removed author(s): {', '.join(removed_auth_names)}"
-                )
-            )
-
-        for author in draft.documentauthor_set.all():
-            # Copy the author but point at the new doc.
-            # See https://docs.djangoproject.com/en/4.2/topics/db/queries/#copying-model-instances
-            author.pk = None
-            author.id = None
-            author._state.adding = True
-            author.document = rfc
-            author.save()
-            self.stdout.write(
-                self.style.SUCCESS(f"Added author {author.person.name} <{author.email}>")
-            )
-        auth_names = draft.documentauthor_set.values_list("person__name", flat=True)
-        DocEvent.objects.create(
-            doc=rfc,
-            by=Person.objects.get(name="(System)"),
-            type="edited_authors",
-            desc=f"Set authors from rev {draft.rev} of {draft.name}: {', '.join(auth_names)}",
-        )
diff --git a/ietf/doc/management/commands/tests.py b/ietf/doc/management/commands/tests.py
deleted file mode 100644
index 8244d87266..0000000000
--- a/ietf/doc/management/commands/tests.py
+++ /dev/null
@@ -1,72 +0,0 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
-# -*- coding: utf-8 -*-
-
-from io import StringIO
-
-from django.core.management import call_command, CommandError
-
-from ietf.doc.factories import DocumentAuthorFactory, WgDraftFactory, WgRfcFactory
-from ietf.doc.models import Document, DocumentAuthor
-from ietf.utils.test_utils import TestCase
-
-
-class CommandTests(TestCase):
-    @staticmethod
-    def _call_command(command_name, *args, **options):
-        """Call command, capturing (and suppressing) output"""
-        out = StringIO()
-        err = StringIO()
-        options["stdout"] = out
-        options["stderr"] = err
-        call_command(command_name, *args, **options)
-        return out.getvalue(), err.getvalue()
-
-    def test_reset_rfc_authors(self):
-        command_name = "reset_rfc_authors"
-
-        draft = WgDraftFactory()
-        DocumentAuthorFactory.create_batch(3, document=draft)
-        rfc = WgRfcFactory()  # rfc does not yet have a draft
-        DocumentAuthorFactory.create_batch(3, document=rfc)
-        bad_rfc_num = (
-            1
-            + Document.objects.filter(rfc_number__isnull=False)
-            .order_by("-rfc_number")
-            .first()
-            .rfc_number
-        )
-        docauthor_fields = [
-            field.name
-            for field in DocumentAuthor._meta.get_fields()
-            if field.name not in ["document", "id"]
-        ]
-
-        with self.assertRaises(CommandError, msg="Cannot reset a bad RFC number"):
-            self._call_command(command_name, bad_rfc_num)
-
-        with self.assertRaises(CommandError, msg="Cannot reset an RFC with no draft"):
-            self._call_command(command_name, rfc.rfc_number)
-
-        with self.assertRaises(CommandError, msg="Cannot force-reset an RFC with no draft"):
-            self._call_command(command_name, rfc.rfc_number, "--force")
-
-        # Link the draft to the rfc
-        rfc.targets_related.create(relationship_id="became_rfc", source=draft)
-
-        with self.assertRaises(CommandError, msg="Cannot reset an RFC with authors"):
-            self._call_command(command_name, rfc.rfc_number)
-
-        # Calling with force should work
-        self._call_command(command_name, rfc.rfc_number, "--force")
-        self.assertCountEqual(
-            draft.documentauthor_set.values(*docauthor_fields),
-            rfc.documentauthor_set.values(*docauthor_fields),
-        )
-
-        # Calling on an RFC with no authors should also work
-        rfc.documentauthor_set.all().delete()
-        self._call_command(command_name, rfc.rfc_number)
-        self.assertCountEqual(
-            draft.documentauthor_set.values(*docauthor_fields),
-            rfc.documentauthor_set.values(*docauthor_fields),
-        )
diff --git a/ietf/doc/migrations/0027_alter_dochistory_title_alter_document_title.py b/ietf/doc/migrations/0027_alter_dochistory_title_alter_document_title.py
new file mode 100644
index 0000000000..e0d8560e6f
--- /dev/null
+++ b/ietf/doc/migrations/0027_alter_dochistory_title_alter_document_title.py
@@ -0,0 +1,41 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+import django.core.validators
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0026_change_wg_state_descriptions"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="dochistory",
+            name="title",
+            field=models.CharField(
+                max_length=255,
+                validators=[
+                    django.core.validators.ProhibitNullCharactersValidator,  # type:ignore
+                    django.core.validators.RegexValidator(
+                        message="Please enter a string without control characters.",
+                        regex="^[^\x01-\x1f]*$",
+                    ),
+                ],
+            ),
+        ),
+        migrations.AlterField(
+            model_name="document",
+            name="title",
+            field=models.CharField(
+                max_length=255,
+                validators=[
+                    django.core.validators.ProhibitNullCharactersValidator,  # type:ignore
+                    django.core.validators.RegexValidator(
+                        message="Please enter a string without control characters.",
+                        regex="^[^\x01-\x1f]*$",
+                    ),
+                ],
+            ),
+        ),
+    ]
diff --git a/ietf/doc/migrations/0028_rfcauthor.py b/ietf/doc/migrations/0028_rfcauthor.py
new file mode 100644
index 0000000000..776dc22eb1
--- /dev/null
+++ b/ietf/doc/migrations/0028_rfcauthor.py
@@ -0,0 +1,84 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import django.db.models.deletion
+import ietf.utils.models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("person", "0005_alter_historicalperson_pronouns_selectable_and_more"),
+        ("doc", "0027_alter_dochistory_title_alter_document_title"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="RfcAuthor",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("titlepage_name", models.CharField(max_length=128)),
+                ("is_editor", models.BooleanField(default=False)),
+                (
+                    "affiliation",
+                    models.CharField(
+                        blank=True,
+                        help_text="Organization/company used by author for submission",
+                        max_length=100,
+                    ),
+                ),
+                (
+                    "country",
+                    models.CharField(
+                        blank=True,
+                        help_text="Country used by author for submission",
+                        max_length=255,
+                    ),
+                ),
+                ("order", models.IntegerField(default=1)),
+                (
+                    "document",
+                    ietf.utils.models.ForeignKey(
+                        limit_choices_to={"type_id": "rfc"},
+                        on_delete=django.db.models.deletion.CASCADE,
+                        to="doc.document",
+                    ),
+                ),
+                (
+                    "email",
+                    ietf.utils.models.ForeignKey(
+                        blank=True,
+                        help_text="Email address used by author for submission",
+                        null=True,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="person.email",
+                    ),
+                ),
+                (
+                    "person",
+                    ietf.utils.models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.PROTECT,
+                        to="person.person",
+                    ),
+                ),
+            ],
+            options={
+                "ordering": ["document", "order"],
+                "indexes": [
+                    models.Index(
+                        fields=["document", "order"],
+                        name="doc_rfcauth_documen_6b5dc4_idx",
+                    )
+                ],
+            },
+        ),
+    ]
diff --git a/ietf/doc/migrations/0029_editedrfcauthorsdocevent.py b/ietf/doc/migrations/0029_editedrfcauthorsdocevent.py
new file mode 100644
index 0000000000..60837c5cb2
--- /dev/null
+++ b/ietf/doc/migrations/0029_editedrfcauthorsdocevent.py
@@ -0,0 +1,30 @@
+# Copyright The IETF Trust 2025, All Rights Reserved
+
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0028_rfcauthor"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="EditedRfcAuthorsDocEvent",
+            fields=[
+                (
+                    "docevent_ptr",
+                    models.OneToOneField(
+                        auto_created=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        parent_link=True,
+                        primary_key=True,
+                        serialize=False,
+                        to="doc.docevent",
+                    ),
+                ),
+            ],
+            bases=("doc.docevent",),
+        ),
+    ]
diff --git a/ietf/doc/migrations/0030_alter_dochistory_title_alter_document_title.py b/ietf/doc/migrations/0030_alter_dochistory_title_alter_document_title.py
new file mode 100644
index 0000000000..9ee858b2e8
--- /dev/null
+++ b/ietf/doc/migrations/0030_alter_dochistory_title_alter_document_title.py
@@ -0,0 +1,41 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import django.core.validators
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0029_editedrfcauthorsdocevent"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="dochistory",
+            name="title",
+            field=models.CharField(
+                max_length=255,
+                validators=[
+                    django.core.validators.ProhibitNullCharactersValidator(),
+                    django.core.validators.RegexValidator(
+                        message="Please enter a string without control characters.",
+                        regex="^[^\x01-\x1f]*$",
+                    ),
+                ],
+            ),
+        ),
+        migrations.AlterField(
+            model_name="document",
+            name="title",
+            field=models.CharField(
+                max_length=255,
+                validators=[
+                    django.core.validators.ProhibitNullCharactersValidator(),
+                    django.core.validators.RegexValidator(
+                        message="Please enter a string without control characters.",
+                        regex="^[^\x01-\x1f]*$",
+                    ),
+                ],
+            ),
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 8bb79b64ed..cce9203d09 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1,7 +1,8 @@
-# Copyright The IETF Trust 2010-2025, All Rights Reserved
+# Copyright The IETF Trust 2010-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
+from collections import namedtuple
 import datetime
 import logging
 import os
@@ -20,7 +21,11 @@
 from django.core import checks
 from django.core.files.base import File
 from django.core.cache import caches
-from django.core.validators import URLValidator, RegexValidator
+from django.core.validators import (
+    URLValidator,
+    RegexValidator,
+    ProhibitNullCharactersValidator,
+)
 from django.urls import reverse as urlreverse
 from django.contrib.contenttypes.models import ContentType
 from django.conf import settings
@@ -107,7 +112,13 @@ class DocumentInfo(models.Model):
     time = models.DateTimeField(default=timezone.now) # should probably have auto_now=True
 
     type = ForeignKey(DocTypeName, blank=True, null=True) # Draft, Agenda, Minutes, Charter, Discuss, Guideline, Email, Review, Issue, Wiki, External ...
-    title = models.CharField(max_length=255, validators=[validate_no_control_chars, ])
+    title = models.CharField(
+        max_length=255,
+        validators=[
+            ProhibitNullCharactersValidator(),
+            validate_no_control_chars,
+        ],
+    )
 
     states = models.ManyToManyField(State, blank=True) # plain state (Active/Expired/...), IESG state, stream state
     tags = models.ManyToManyField(DocTagName, blank=True) # Revised ID Needed, ExternalParty, AD Followup, ...
@@ -407,9 +418,55 @@ def friendly_state(self):
         else:
             return state.name
 
+    def author_names(self):
+        """Author names as a list of strings"""
+        names = []
+        if self.type_id == "rfc" and self.rfcauthor_set.exists():
+            for author in self.rfcauthor_set.select_related("person"):
+                if author.person:
+                    names.append(author.person.name)
+                else:
+                    # titlepage_name cannot be blank
+                    names.append(author.titlepage_name)
+        else:
+            names = [
+                author.person.name
+                for author in self.documentauthor_set.select_related("person")
+            ]
+        return names
+
+    def author_persons_or_names(self):
+        """Authors as a list of named tuples with person and/or titlepage_name"""
+        Author = namedtuple("Author", "person titlepage_name")
+        persons_or_names = []
+        if self.type_id=="rfc" and self.rfcauthor_set.exists():
+            for author in self.rfcauthor_set.select_related("person"):
+                persons_or_names.append(Author(person=author.person, titlepage_name=author.titlepage_name))
+        else:
+            for author in self.documentauthor_set.select_related("person"):
+                persons_or_names.append(Author(person=author.person, titlepage_name=""))
+        return persons_or_names
+
+    def author_persons(self):
+        """Authors as a list of Persons
+        
+        Omits any RfcAuthors with a null person field.
+        """
+        if self.type_id == "rfc" and self.rfcauthor_set.exists():
+            authors_qs = self.rfcauthor_set.filter(person__isnull=False)
+        else:
+            authors_qs = self.documentauthor_set.all()
+        return [a.person for a in authors_qs.select_related("person")]
+
     def author_list(self):
+        """List of author emails"""
+        author_qs = (
+            self.rfcauthor_set
+            if self.type_id == "rfc" and self.rfcauthor_set.exists()
+            else self.documentauthor_set
+        ).select_related("email").order_by("order")
         best_addresses = []
-        for author in self.documentauthor_set.all():
+        for author in author_qs:
             if author.email:
                 if author.email.active or not author.email.person:
                     best_addresses.append(author.email.address)
@@ -417,9 +474,6 @@ def author_list(self):
                     best_addresses.append(author.email.person.email_address())
         return ", ".join(best_addresses)
 
-    def authors(self):
-        return [ a.person for a in self.documentauthor_set.all() ]
-
     # This, and several other ballot related functions here, assume that there is only one active ballot for a document at any point in time.
     # If that assumption is violated, they will only expose the most recently created ballot
     def ballot_open(self, ballot_type_slug):
@@ -721,7 +775,14 @@ def referenced_by_rfcs_as_rfc_or_draft(self):
         if self.type_id == "rfc" and self.came_from_draft():
             refs_to |= self.came_from_draft().referenced_by_rfcs()
         return refs_to
-    
+
+    def sent_to_rfc_editor_event(self):
+        if self.stream_id == "ietf":
+            return self.docevent_set.filter(type="iesg_approved").order_by("-time").first()
+        elif self.stream_id in ["editorial", "iab", "irtf", "ise"]:
+            return self.docevent_set.filter(type="requested_publication").order_by("-time").first()
+        else:
+            return None
     class Meta:
         abstract = True
 
@@ -845,6 +906,45 @@ def is_approved_downref(self):
 
         return False
 
+class RfcAuthor(models.Model):
+    """Captures the authors of an RFC as represented on the RFC title page.
+
+    This deviates from DocumentAuthor in that it does not get moved into the DocHistory
+    hierarchy as documents are saved. It will attempt to preserve email, country, and affiliation
+    from the DocumentAuthor objects associated with the draft leading to this RFC (which
+    may be wrong if the author moves or changes affiliation while the document is in the
+    queue).
+
+    It does not, at this time, attempt to capture the authors from anything _but_ the title
+    page. The datatracker may know more about such authors based on information from the draft
+    leading to the RFC, and future work may take that into account.
+
+    Once doc.rfcauthor_set.exists() for a doc of type `rfc`, doc.documentauthor_set should be 
+    ignored.
+    """
+
+    document = ForeignKey(
+        "Document",
+        on_delete=models.CASCADE,
+        limit_choices_to={"type_id": "rfc"},  # only affects ModelForms (e.g., admin)
+    )
+    titlepage_name = models.CharField(max_length=128, blank=False)
+    is_editor = models.BooleanField(default=False)
+    person = ForeignKey(Person, null=True, blank=True, on_delete=models.PROTECT)
+    email = ForeignKey(Email, help_text="Email address used by author for submission", blank=True, null=True, on_delete=models.PROTECT)
+    affiliation = models.CharField(max_length=100, blank=True, help_text="Organization/company used by author for submission")
+    country = models.CharField(max_length=255, blank=True, help_text="Country used by author for submission")
+    order = models.IntegerField(default=1)
+
+    def __str__(self):
+        return u"%s %s (%s)" % (self.document.name, self.person, self.order)
+
+    class Meta:
+        ordering=["document", "order"]
+        indexes=[
+            models.Index(fields=["document", "order"])
+        ]
+
 class DocumentAuthorInfo(models.Model):
     person = ForeignKey(Person)
     # email should only be null for some historic documents
@@ -894,7 +994,7 @@ class Meta:
     def role_for_doc(self):
         """Brief string description of this person's relationship to the doc"""
         roles = []
-        if self.person in self.document.authors():
+        if self.person in self.document.author_persons():
             roles.append('Author')
         if self.person == self.document.ad:
             roles.append('Responsible AD')
@@ -920,7 +1020,18 @@ def role_for_doc(self):
     'invalid'
 )
 
+
+SUBSERIES_DOC_TYPE_IDS = ("bcp", "fyi", "std")
+
+
+class DocumentQuerySet(models.QuerySet):
+    def subseries_docs(self):
+        return self.filter(type_id__in=SUBSERIES_DOC_TYPE_IDS)
+
+
 class Document(StorableMixin, DocumentInfo):
+    objects = DocumentQuerySet.as_manager()
+
     name = models.CharField(max_length=255, validators=[validate_docname,], unique=True)           # immutable
     
     action_holders = models.ManyToManyField(Person, through=DocumentActionHolder, blank=True)
@@ -1581,6 +1692,11 @@ class EditedAuthorsDocEvent(DocEvent):
     """
     basis = models.CharField(help_text="What is the source or reasoning for the changes to the author list",max_length=255)
 
+
+class EditedRfcAuthorsDocEvent(DocEvent):
+    """Change to the RfcAuthor list for a document"""
+
+
 class BofreqEditorDocEvent(DocEvent):
     """ Capture the proponents of a BOF Request."""
     editors = models.ManyToManyField('person.Person', blank=True)
diff --git a/ietf/doc/resources.py b/ietf/doc/resources.py
index 157a3ad556..556465a522 100644
--- a/ietf/doc/resources.py
+++ b/ietf/doc/resources.py
@@ -17,8 +17,9 @@
     InitialReviewDocEvent, DocHistoryAuthor, BallotDocEvent, RelatedDocument,
     RelatedDocHistory, BallotPositionDocEvent, AddedMessageEvent, SubmissionDocEvent,
     ReviewRequestDocEvent, ReviewAssignmentDocEvent, EditedAuthorsDocEvent, DocumentURL,
-    IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder, 
-    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject)
+    IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
+    BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject, RfcAuthor,
+    EditedRfcAuthorsDocEvent)
 
 from ietf.name.resources import BallotPositionNameResource, DocTypeNameResource
 class BallotTypeResource(ModelResource):
@@ -650,6 +651,31 @@ class Meta:
 api.doc.register(EditedAuthorsDocEventResource())
 
 
+
+from ietf.person.resources import PersonResource
+class EditedRfcAuthorsDocEventResource(ModelResource):
+    by               = ToOneField(PersonResource, 'by')
+    doc              = ToOneField(DocumentResource, 'doc')
+    docevent_ptr     = ToOneField(DocEventResource, 'docevent_ptr')
+    class Meta:
+        queryset = EditedRfcAuthorsDocEvent.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'editedrfcauthorsdocevent'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "time": ALL,
+            "type": ALL,
+            "rev": ALL,
+            "desc": ALL,
+            "by": ALL_WITH_RELATIONS,
+            "doc": ALL_WITH_RELATIONS,
+            "docevent_ptr": ALL_WITH_RELATIONS,
+        }
+api.doc.register(EditedRfcAuthorsDocEventResource())
+
+
 from ietf.name.resources import DocUrlTagNameResource
 class DocumentURLResource(ModelResource):
     doc              = ToOneField(DocumentResource, 'doc')
@@ -865,3 +891,28 @@ class Meta:
             "deleted": ALL,
         }
 api.doc.register(StoredObjectResource())
+
+
+from ietf.person.resources import EmailResource, PersonResource
+class RfcAuthorResource(ModelResource):
+    document         = ToOneField(DocumentResource, 'document')
+    person           = ToOneField(PersonResource, 'person', null=True)
+    email            = ToOneField(EmailResource, 'email', null=True)
+    class Meta:
+        queryset = RfcAuthor.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'rfcauthor'
+        ordering = ['id', ]
+        filtering = { 
+            "id": ALL,
+            "titlepage_name": ALL,
+            "is_editor": ALL,
+            "affiliation": ALL,
+            "country": ALL,
+            "order": ALL,
+            "document": ALL_WITH_RELATIONS,
+            "person": ALL_WITH_RELATIONS,
+            "email": ALL_WITH_RELATIONS,
+        }
+api.doc.register(RfcAuthorResource())
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
new file mode 100644
index 0000000000..05647d9ce1
--- /dev/null
+++ b/ietf/doc/serializers.py
@@ -0,0 +1,316 @@
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
+"""django-rest-framework serializers"""
+
+from dataclasses import dataclass
+from typing import Literal, ClassVar
+
+from django.db.models.manager import BaseManager
+from django.db.models.query import QuerySet
+from drf_spectacular.utils import extend_schema_field
+from rest_framework import serializers
+
+from ietf.group.serializers import GroupSerializer
+from ietf.name.serializers import StreamNameSerializer
+from .models import Document, DocumentAuthor, RfcAuthor
+
+
+class RfcAuthorSerializer(serializers.ModelSerializer):
+    """Serializer for an RfcAuthor / DocumentAuthor in a response"""
+    datatracker_person_path = serializers.URLField(
+        source="person.get_absolute_url",
+        required=False,
+        help_text="URL for person link (relative to datatracker base URL)",
+    )
+
+    class Meta:
+        model = RfcAuthor
+        fields = [
+            "titlepage_name",
+            "is_editor",
+            "person",
+            "email",  # relies on email.pk being email.address
+            "affiliation",
+            "country",
+            "datatracker_person_path",
+        ]
+
+    def to_representation(self, instance):
+        """instance -> primitive data types
+        
+        Translates a DocumentAuthor into an equivalent RfcAuthor we can use the same
+        serializer for either type.
+        """
+        if isinstance(instance, DocumentAuthor):
+            # create a non-persisted RfcAuthor as a shim - do not save it!
+            document_author = instance
+            instance = RfcAuthor(
+                titlepage_name=document_author.person.plain_name(),
+                is_editor=False,
+                person=document_author.person,
+                email=document_author.email,
+                affiliation=document_author.affiliation,
+                country=document_author.country,
+                order=document_author.order,
+            )
+        return super().to_representation(instance)
+
+    def validate(self, data):
+        email = data.get("email")
+        if email is not None:
+            person = data.get("person")
+            if person is None:
+                raise serializers.ValidationError(
+                    {
+                        "email": "cannot have an email without a person",
+                    },
+                    code="email-without-person",
+                )
+            if email.person_id != person.pk:
+                raise serializers.ValidationError(
+                    {
+                        "email": "email must belong to person",
+                    },
+                    code="email-person-mismatch",
+                )
+        return data
+
+
+@dataclass
+class DocIdentifier:
+    type: Literal["doi", "issn"]
+    value: str
+
+
+class DocIdentifierSerializer(serializers.Serializer):
+    type = serializers.ChoiceField(choices=["doi", "issn"])
+    value = serializers.CharField()
+
+
+type RfcStatusSlugT = Literal[
+    "std", "ps", "ds", "bcp", "inf", "exp", "hist", "unkn", "not-issued",
+]
+
+
+@dataclass
+class RfcStatus:
+    """Helper to extract the 'Status' from an RFC document for serialization"""
+
+    slug: RfcStatusSlugT
+
+    # Names that aren't just the slug itself. ClassVar annotation prevents dataclass from treating this as a field.
+    fancy_names: ClassVar[dict[RfcStatusSlugT, str]] = {
+        "std": "internet standard",
+        "ps": "proposed standard",
+        "ds": "draft standard",
+        "bcp": "best current practice",
+        "inf": "informational",
+        "exp": "experimental",
+        "hist": "historic",
+        "unkn": "unknown",
+    }
+
+    # ClassVar annotation prevents dataclass from treating this as a field
+    stdlevelname_slug_map: ClassVar[dict[str, RfcStatusSlugT]] = {
+        "bcp": "bcp",
+        "ds": "ds",
+        "exp": "exp",
+        "hist": "hist",
+        "inf": "inf",
+        "std": "std",
+        "ps": "ps",
+        "unkn": "unkn",
+    }
+
+    # ClassVar annotation prevents dataclass from treating this as a field
+    status_slugs: ClassVar[list[RfcStatusSlugT]] = sorted(
+        # TODO implement "not-issued" RFCs
+        set(stdlevelname_slug_map.values()) | {"not-issued"}
+    )
+
+    @property
+    def name(self):
+        return RfcStatus.fancy_names.get(self.slug, self.slug)
+
+    @classmethod
+    def from_document(cls, doc: Document):
+        """Decide the status that applies to a document"""
+        return cls(
+            slug=(cls.stdlevelname_slug_map.get(doc.std_level.slug, "unkn")),
+        )
+
+    @classmethod
+    def filter(cls, queryset, name, value: list[RfcStatusSlugT]):
+        """Filter a queryset by status
+
+        This is basically the inverse of the from_document() method. Given a status name, filter
+        the queryset to those in that status. The queryset should be a Document queryset.
+        """
+        interesting_slugs = [
+            stdlevelname_slug
+            for stdlevelname_slug, status_slug in cls.stdlevelname_slug_map.items()
+            if status_slug in value
+        ]
+        if len(interesting_slugs) == 0:
+            return queryset.none()
+        return queryset.filter(std_level__slug__in=interesting_slugs)
+
+
+class RfcStatusSerializer(serializers.Serializer):
+    """Status serializer for a Document instance"""
+
+    slug = serializers.ChoiceField(choices=RfcStatus.status_slugs)
+    name = serializers.CharField()
+
+    def to_representation(self, instance: Document):
+        return super().to_representation(instance=RfcStatus.from_document(instance))
+
+
+class RelatedDraftSerializer(serializers.Serializer):
+    id = serializers.IntegerField(source="source.id")
+    name = serializers.CharField(source="source.name")
+    title = serializers.CharField(source="source.title")
+
+
+class RelatedRfcSerializer(serializers.Serializer):
+    id = serializers.IntegerField(source="target.id")
+    number = serializers.IntegerField(source="target.rfc_number")
+    title = serializers.CharField(source="target.title")
+
+
+class ReverseRelatedRfcSerializer(serializers.Serializer):
+    id = serializers.IntegerField(source="source.id")
+    number = serializers.IntegerField(source="source.rfc_number")
+    title = serializers.CharField(source="source.title")
+
+
+class ContainingSubseriesSerializer(serializers.Serializer):
+    name = serializers.CharField(source="source.name")
+    type = serializers.CharField(source="source.type_id")
+
+
+class RfcMetadataSerializer(serializers.ModelSerializer):
+    """Serialize metadata of an RFC"""
+
+    RFC_FORMATS = ("xml", "txt", "html", "htmlized", "pdf", "ps")
+
+    number = serializers.IntegerField(source="rfc_number")
+    published = serializers.DateField()
+    status = RfcStatusSerializer(source="*")
+    authors = serializers.SerializerMethodField()
+    group = GroupSerializer()
+    area = GroupSerializer(source="group.area", required=False)
+    stream = StreamNameSerializer()
+    identifiers = serializers.SerializerMethodField()
+    draft = serializers.SerializerMethodField()
+    obsoletes = RelatedRfcSerializer(many=True, read_only=True)
+    obsoleted_by = ReverseRelatedRfcSerializer(many=True, read_only=True)
+    updates = RelatedRfcSerializer(many=True, read_only=True)
+    updated_by = ReverseRelatedRfcSerializer(many=True, read_only=True)
+    subseries = ContainingSubseriesSerializer(many=True, read_only=True)
+    see_also = serializers.ListField(child=serializers.CharField(), read_only=True)
+    formats = serializers.MultipleChoiceField(choices=RFC_FORMATS)
+    keywords = serializers.ListField(child=serializers.CharField(), read_only=True)
+    errata = serializers.ListField(child=serializers.CharField(), read_only=True)
+
+    class Meta:
+        model = Document
+        fields = [
+            "number",
+            "title",
+            "published",
+            "status",
+            "pages",
+            "authors",
+            "group",
+            "area",
+            "stream",
+            "identifiers",
+            "obsoletes",
+            "obsoleted_by",
+            "updates",
+            "updated_by",
+            "subseries",
+            "see_also",
+            "draft",
+            "abstract",
+            "formats",
+            "keywords",
+            "errata",
+        ]
+
+
+    @extend_schema_field(RfcAuthorSerializer(many=True))
+    def get_authors(self, doc: Document):
+        # If doc has any RfcAuthors, use those, otherwise fall back to DocumentAuthors
+        author_queryset: QuerySet[RfcAuthor] | QuerySet[DocumentAuthor] = (
+            doc.rfcauthor_set.all()
+            if doc.rfcauthor_set.exists()
+            else doc.documentauthor_set.all()
+        )
+        # RfcAuthorSerializer can deal with DocumentAuthor instances
+        return RfcAuthorSerializer(
+            instance=author_queryset,
+            many=True,
+        ).data
+
+    @extend_schema_field(DocIdentifierSerializer(many=True))
+    def get_identifiers(self, doc: Document):
+        identifiers = []
+        if doc.rfc_number:
+            identifiers.append(
+                DocIdentifier(type="doi", value=f"10.17487/RFC{doc.rfc_number:04d}")
+            )
+        return DocIdentifierSerializer(instance=identifiers, many=True).data
+
+    @extend_schema_field(RelatedDraftSerializer)
+    def get_draft(self, object):
+        try:
+            related_doc = object.drafts[0]
+        except IndexError:
+            return None
+        return RelatedDraftSerializer(related_doc).data
+
+
+class RfcSerializer(RfcMetadataSerializer):
+    """Serialize an RFC, including its metadata and text content if available"""
+
+    text = serializers.CharField(allow_null=True)
+
+    class Meta:
+        model = RfcMetadataSerializer.Meta.model
+        fields = RfcMetadataSerializer.Meta.fields + ["text"]
+
+
+class SubseriesContentListSerializer(serializers.ListSerializer):
+    """ListSerializer that gets its object from item.target"""
+
+    def to_representation(self, data):
+        """
+        List of object instances -> List of dicts of primitive datatypes.
+        """
+        # Dealing with nested relationships, data can be a Manager,
+        # so, first get a queryset from the Manager if needed
+        iterable = data.all() if isinstance(data, BaseManager) else data
+        # Serialize item.target instead of item itself
+        return [self.child.to_representation(item.target) for item in iterable]
+
+
+class SubseriesContentSerializer(RfcMetadataSerializer):
+    """Serialize RFC contained in a subseries doc"""
+
+    class Meta(RfcMetadataSerializer.Meta):
+        list_serializer_class = SubseriesContentListSerializer
+
+
+class SubseriesDocSerializer(serializers.ModelSerializer):
+    """Serialize a subseries document (e.g., a BCP or STD)"""
+
+    contents = SubseriesContentSerializer(many=True)
+
+    class Meta:
+        model = Document
+        fields = [
+            "name",
+            "type",
+            "contents",
+        ]
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index 16dcfb7754..f92c9648e6 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -39,11 +39,15 @@
 from ietf.doc.models import ( Document, DocRelationshipName, RelatedDocument, State,
     DocEvent, BallotPositionDocEvent, LastCallDocEvent, WriteupDocEvent, NewRevisionDocEvent, BallotType,
     EditedAuthorsDocEvent, StateType)
-from ietf.doc.factories import ( DocumentFactory, DocEventFactory, CharterFactory,
-    ConflictReviewFactory, WgDraftFactory, IndividualDraftFactory, WgRfcFactory, 
-    IndividualRfcFactory, StateDocEventFactory, BallotPositionDocEventFactory, 
-    BallotDocEventFactory, DocumentAuthorFactory, NewRevisionDocEventFactory,
-    StatusChangeFactory, DocExtResourceFactory, RgDraftFactory, BcpFactory)
+from ietf.doc.factories import (DocumentFactory, DocEventFactory, CharterFactory,
+                                ConflictReviewFactory, WgDraftFactory,
+                                IndividualDraftFactory, WgRfcFactory,
+                                IndividualRfcFactory, StateDocEventFactory,
+                                BallotPositionDocEventFactory,
+                                BallotDocEventFactory, DocumentAuthorFactory,
+                                NewRevisionDocEventFactory,
+                                StatusChangeFactory, DocExtResourceFactory,
+                                RgDraftFactory, BcpFactory, RfcAuthorFactory)
 from ietf.doc.forms import NotifyForm
 from ietf.doc.fields import SearchableDocumentsField
 from ietf.doc.utils import (
@@ -979,7 +983,7 @@ def test_edit_authors_permissions(self):
         # Relevant users not authorized to edit authors
         unauthorized_usernames = [
             'plain',
-            *[author.user.username for author in draft.authors()],
+            *[author.user.username for author in draft.author_persons()],
             draft.group.get_chair().person.user.username,
             'ad'
         ]
@@ -994,7 +998,7 @@ def test_edit_authors_permissions(self):
         self.client.logout()
 
         # Try to add an author via POST - still only the secretary should be able to do this.
-        orig_authors = draft.authors()
+        orig_authors = draft.author_persons()
         post_data = self.make_edit_authors_post_data(
             basis='permission test',
             authors=draft.documentauthor_set.all(),
@@ -1012,12 +1016,12 @@ def test_edit_authors_permissions(self):
         for username in unauthorized_usernames:
             login_testing_unauthorized(self, username, url, method='post', request_kwargs=dict(data=post_data))
             draft = Document.objects.get(pk=draft.pk)
-            self.assertEqual(draft.authors(), orig_authors)  # ensure draft author list was not modified
+            self.assertEqual(draft.author_persons(), orig_authors)  # ensure draft author list was not modified
         login_testing_unauthorized(self, 'secretary', url, method='post', request_kwargs=dict(data=post_data))
         r = self.client.post(url, post_data)
         self.assertEqual(r.status_code, 302)
         draft = Document.objects.get(pk=draft.pk)
-        self.assertEqual(draft.authors(), orig_authors + [new_auth_person])
+        self.assertEqual(draft.author_persons(), orig_authors + [new_auth_person])
 
     def make_edit_authors_post_data(self, basis, authors):
         """Helper to generate edit_authors POST data for a set of authors"""
@@ -1365,8 +1369,8 @@ def test_edit_authors_edit_fields(self):
             basis=change_reason
         )
 
-        old_address = draft.authors()[0].email()
-        new_email = EmailFactory(person=draft.authors()[0], address=f'changed-{old_address}')
+        old_address = draft.author_persons()[0].email()
+        new_email = EmailFactory(person=draft.author_persons()[0], address=f'changed-{old_address}')
         post_data['author-0-email'] = new_email.address
         post_data['author-1-affiliation'] = 'University of Nowhere'
         post_data['author-2-country'] = 'Chile'
@@ -1399,17 +1403,17 @@ def test_edit_authors_edit_fields(self):
         country_event = change_events.filter(desc__icontains='changed country').first()
 
         self.assertIsNotNone(email_event)
-        self.assertIn(draft.authors()[0].name, email_event.desc)
+        self.assertIn(draft.author_persons()[0].name, email_event.desc)
         self.assertIn(before[0]['email'], email_event.desc)
         self.assertIn(after[0]['email'], email_event.desc)
 
         self.assertIsNotNone(affiliation_event)
-        self.assertIn(draft.authors()[1].name, affiliation_event.desc)
+        self.assertIn(draft.author_persons()[1].name, affiliation_event.desc)
         self.assertIn(before[1]['affiliation'], affiliation_event.desc)
         self.assertIn(after[1]['affiliation'], affiliation_event.desc)
 
         self.assertIsNotNone(country_event)
-        self.assertIn(draft.authors()[2].name, country_event.desc)
+        self.assertIn(draft.author_persons()[2].name, country_event.desc)
         self.assertIn(before[2]['country'], country_event.desc)
         self.assertIn(after[2]['country'], country_event.desc)
 
@@ -1863,13 +1867,63 @@ def test_document_ballot_needed_positions(self):
 
     def test_document_json(self):
         doc = IndividualDraftFactory()
-
+        author = DocumentAuthorFactory(document=doc)
+        
         r = self.client.get(urlreverse("ietf.doc.views_doc.document_json", kwargs=dict(name=doc.name)))
         self.assertEqual(r.status_code, 200)
         data = r.json()
-        self.assertEqual(doc.name, data['name'])
-        self.assertEqual(doc.pages,data['pages'])
+        self.assertEqual(data["name"], doc.name)
+        self.assertEqual(data["pages"], doc.pages)
+        self.assertEqual(
+            data["authors"],
+            [
+                {
+                    "name": author.person.name,
+                    "email": author.email.address,
+                    "affiliation": author.affiliation,
+                }
+            ]
+        )
 
+    def test_document_json_rfc(self):
+        doc = IndividualRfcFactory()
+        old_style_author = DocumentAuthorFactory(document=doc)
+        url = urlreverse("ietf.doc.views_doc.document_json", kwargs=dict(name=doc.name))
+
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        data = r.json()
+        self.assertEqual(data["name"], doc.name)
+        self.assertEqual(data["pages"], doc.pages)
+        self.assertEqual(
+            data["authors"],
+            [
+                {
+                    "name": old_style_author.person.name,
+                    "email": old_style_author.email.address,
+                    "affiliation": old_style_author.affiliation,
+                }
+            ]
+        )
+    
+        new_style_author = RfcAuthorFactory(document=doc)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        data = r.json()
+        self.assertEqual(data["name"], doc.name)
+        self.assertEqual(data["pages"], doc.pages)
+        self.assertEqual(
+            data["authors"],
+            [
+                {
+                    "name": new_style_author.titlepage_name,
+                    "email": new_style_author.email.address,
+                    "affiliation": new_style_author.affiliation,
+                }
+            ]
+        )
+
+    
     def test_writeup(self):
         doc = IndividualDraftFactory(states = [('draft','active'),('draft-iesg','iesg-eva')],)
 
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index cebeac1f27..21a873c5c0 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -140,7 +140,7 @@ def test_change_state(self):
         self.assertEqual(draft.get_state_slug("draft-iesg"), "review-e")
         self.assertTrue(not draft.tags.filter(slug="ad-f-up"))
         self.assertTrue(draft.tags.filter(slug="need-rev"))
-        self.assertCountEqual(draft.action_holders.all(), [ad] + draft.authors())
+        self.assertCountEqual(draft.action_holders.all(), [ad] + draft.author_persons())
         self.assertEqual(draft.docevent_set.count(), events_before + 3)
         self.assertTrue("Test comment" in draft.docevent_set.all()[0].desc)
         self.assertTrue("Changed action holders" in draft.docevent_set.all()[1].desc)
@@ -179,7 +179,7 @@ def test_pull_from_rfc_queue(self):
             states=[('draft-iesg','rfcqueue')],
         )
         DocEventFactory(type='started_iesg_process',by=ad,doc=draft,rev=draft.rev,desc="Started IESG Process")
-        draft.action_holders.add(*(draft.authors()))
+        draft.action_holders.add(*(draft.author_persons()))
 
         url = urlreverse('ietf.doc.views_draft.change_state', kwargs=dict(name=draft.name))
         login_testing_unauthorized(self, "secretary", url)
@@ -279,7 +279,7 @@ def test_request_last_call(self):
             states=[('draft-iesg','ad-eval')],
         )
         DocEventFactory(type='started_iesg_process',by=ad,doc=draft,rev=draft.rev,desc="Started IESG Process")
-        draft.action_holders.add(*(draft.authors()))
+        draft.action_holders.add(*(draft.author_persons()))
 
         self.client.login(username="secretary", password="secretary+password")
         url = urlreverse('ietf.doc.views_draft.change_state', kwargs=dict(name=draft.name))
@@ -1369,7 +1369,7 @@ def _test_changing_ah(action_holders, reason):
 
         _test_changing_ah([doc.ad, doc.shepherd.person], 'this is a first test')
         _test_changing_ah([doc.ad], 'this is a second test')
-        _test_changing_ah(doc.authors(), 'authors can do it, too')
+        _test_changing_ah(doc.author_persons(), 'authors can do it, too')
         _test_changing_ah([], 'clear it back out')
 
     def test_doc_change_action_holders_as_doc_manager(self):
diff --git a/ietf/doc/tests_review.py b/ietf/doc/tests_review.py
index 8c1fc99ffe..82d1b5c232 100644
--- a/ietf/doc/tests_review.py
+++ b/ietf/doc/tests_review.py
@@ -822,7 +822,7 @@ def test_complete_review_upload_content(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, assignment.review_request.team.list_email)
-        for author in assignment.review_request.doc.authors():
+        for author in assignment.review_request.doc.author_persons():
             self.assertContains(r, author.formatted_email())
 
         # faulty post
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 2bd9a3d314..0715471551 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -13,7 +13,7 @@
 from dataclasses import dataclass
 from hashlib import sha384
 from pathlib import Path
-from typing import Iterator, Optional, Union
+from typing import Iterator, Optional, Union, Iterable
 from zoneinfo import ZoneInfo
 
 from django.conf import settings
@@ -33,7 +33,14 @@
 from ietf.community.models import CommunityList
 from ietf.community.utils import docs_tracked_by_community_list
 
-from ietf.doc.models import Document, DocHistory, State, DocumentAuthor, DocHistoryAuthor
+from ietf.doc.models import (
+    DocHistory,
+    DocHistoryAuthor,
+    Document,
+    DocumentAuthor,
+    RfcAuthor,
+    State, EditedRfcAuthorsDocEvent,
+)
 from ietf.doc.models import RelatedDocument, RelatedDocHistory, BallotType, DocReminder
 from ietf.doc.models import DocEvent, ConsensusDocEvent, BallotDocEvent, IRSGBallotDocEvent, NewRevisionDocEvent, StateDocEvent
 from ietf.doc.models import TelechatDocEvent, DocumentActionHolder, EditedAuthorsDocEvent, BallotPositionDocEvent
@@ -534,7 +541,7 @@ def update_action_holders(doc, prev_state=None, new_state=None, prev_tags=None,
             doc.action_holders.clear()
         if tags.removed("need-rev"):
             # Removed the 'need-rev' tag - drop authors from the action holders list
-            DocumentActionHolder.objects.filter(document=doc, person__in=doc.authors()).delete()
+            DocumentActionHolder.objects.filter(document=doc, person__in=doc.author_persons()).delete()
         elif tags.added("need-rev"):
             # Remove the AD if we're asking for a new revision
             DocumentActionHolder.objects.filter(document=doc, person=doc.ad).delete()
@@ -549,7 +556,7 @@ def update_action_holders(doc, prev_state=None, new_state=None, prev_tags=None,
                 doc.action_holders.add(doc.ad)
         # Authors get the action if a revision is needed
         if tags.added("need-rev"):
-            for auth in doc.authors():
+            for auth in doc.author_persons():
                 doc.action_holders.add(auth)
 
         # Now create an event if we changed the set
@@ -561,6 +568,40 @@ def update_action_holders(doc, prev_state=None, new_state=None, prev_tags=None,
         )
 
 
+def _change_field_and_describe(
+    author: DocumentAuthor | RfcAuthor,
+    field: str,
+    newval,
+    field_display_name: str | None = None,
+):
+    # make the change
+    oldval = getattr(author, field)
+    setattr(author, field, newval)
+
+    was_empty = oldval is None or len(str(oldval)) == 0
+    now_empty = newval is None or len(str(newval)) == 0
+
+    # describe the change
+    if oldval == newval:
+        return None
+    else:
+        if field_display_name is None:
+            field_display_name = field
+
+        if was_empty and not now_empty:
+            return 'set {field} to "{new}"'.format(
+                field=field_display_name, new=newval
+            )
+        elif now_empty and not was_empty:
+            return 'cleared {field} (was "{old}")'.format(
+                field=field_display_name, old=oldval
+            )
+        else:
+            return 'changed {field} from "{old}" to "{new}"'.format(
+                field=field_display_name, old=oldval, new=newval
+            )
+
+
 def update_documentauthors(doc, new_docauthors, by=None, basis=None):
     """Update the list of authors for a document
 
@@ -573,27 +614,6 @@ def update_documentauthors(doc, new_docauthors, by=None, basis=None):
     used. These objects will not be saved, their attributes will be used to create new
     DocumentAuthor instances. (The document and order fields will be ignored.)
     """
-    def _change_field_and_describe(auth, field, newval):
-        # make the change
-        oldval = getattr(auth, field)
-        setattr(auth, field, newval)
-        
-        was_empty = oldval is None or len(str(oldval)) == 0
-        now_empty = newval is None or len(str(newval)) == 0
-        
-        # describe the change
-        if oldval == newval:
-            return None
-        else:
-            if was_empty and not now_empty:
-                return 'set {field} to "{new}"'.format(field=field, new=newval)
-            elif now_empty and not was_empty:
-                return 'cleared {field} (was "{old}")'.format(field=field, old=oldval)
-            else:
-                return 'changed {field} from "{old}" to "{new}"'.format(
-                    field=field, old=oldval, new=newval
-                )
-
     persons = []
     changes = []  # list of change descriptions
 
@@ -637,6 +657,111 @@ def _change_field_and_describe(auth, field, newval):
         ) for change in changes
     ] 
 
+
+def update_rfcauthors(
+    rfc: Document, new_rfcauthors: Iterable[RfcAuthor], by: Person | None = None
+) -> Iterable[EditedRfcAuthorsDocEvent]:
+    def _find_matching_author(
+        author_to_match: RfcAuthor, existing_authors: Iterable[RfcAuthor]
+    ) -> RfcAuthor | None:
+        """Helper to find a matching existing author"""
+        if author_to_match.person_id is not None:
+            for candidate in existing_authors:
+                if candidate.person_id == author_to_match.person_id:
+                    return candidate
+            return None  # no match
+        # author does not have a person, match on titlepage name
+        for candidate in existing_authors:
+            if candidate.titlepage_name == author_to_match.titlepage_name:
+                return candidate
+        return None  # no match
+
+    def _rfcauthor_from_documentauthor(docauthor: DocumentAuthor) -> RfcAuthor:
+        """Helper to create an equivalent RfcAuthor from a DocumentAuthor"""
+        return RfcAuthor(
+            document_id=docauthor.document_id,
+            titlepage_name=docauthor.person.plain_name(),  # closest thing we have
+            is_editor=False,
+            person_id=docauthor.person_id,
+            affiliation=docauthor.affiliation,
+            country=docauthor.country,
+            order=docauthor.order,
+        )
+
+    # Is this the first time this document is getting an RfcAuthor? If so, the
+    # updates will need to account for the model change.
+    converting_from_docauthors = not rfc.rfcauthor_set.exists()
+    
+    if converting_from_docauthors:
+        original_authors = [
+            _rfcauthor_from_documentauthor(da) for da in rfc.documentauthor_set.all()
+        ]
+    else:
+        original_authors = list(rfc.rfcauthor_set.all())
+
+    authors_to_commit = []
+    changes = []
+    for order, new_author in enumerate(new_rfcauthors):
+        matching_author = _find_matching_author(new_author, original_authors)
+        if matching_author is not None:
+            # Update existing matching author using new_author data
+            authors_to_commit.append(matching_author)
+            original_authors.remove(matching_author)  # avoid reuse
+            # Describe changes to this author
+            author_changes = []
+            # Update fields other than order
+            for field in ["titlepage_name", "is_editor", "affiliation", "country"]:
+                author_changes.append(
+                    _change_field_and_describe(
+                        matching_author,
+                        field,
+                        getattr(new_author, field),
+                        # List titlepage_name as "name" in logs
+                        "name" if field == "titlepage_name" else field,
+                    )
+                )
+            # Update order
+            author_changes.append(
+                _change_field_and_describe(matching_author, "order", order + 1)
+            )
+            matching_author.save()
+            author_change_summary = ", ".join(
+                [ch for ch in author_changes if ch is not None]
+            )
+            if len(author_change_summary) > 0:
+                changes.append(
+                    'Changed author "{name}": {summary}'.format(
+                        name=matching_author.titlepage_name,
+                        summary=author_change_summary,
+                    )
+                )
+        else:
+            # No author matched, so update the new_author and use that
+            new_author.document = rfc
+            new_author.order = order + 1
+            new_author.save()
+            changes.append(f'Added "{new_author.titlepage_name}" as author')
+    # Any authors left in original_authors are no longer in the list, so remove them
+    for removed_author in original_authors:
+        # Skip actual removal of old authors if we are converting from the
+        # DocumentAuthor models - the original_authors were just stand-ins anyway.
+        if not converting_from_docauthors:
+            removed_author.delete()
+        changes.append(f'Removed "{removed_author.titlepage_name}" as author')
+    # Create DocEvents, but leave it up to caller to save
+    if by is None:
+        by = Person.objects.get(name="(System)")
+    return [
+        EditedRfcAuthorsDocEvent(
+            type="edited_authors",
+            by=by,
+            doc=rfc,
+            desc=change,
+        )
+        for change in changes
+    ]
+
+
 def update_reminder(doc, reminder_type_slug, event, due_date):
     reminder_type = DocReminderTypeName.objects.get(slug=reminder_type_slug)
 
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 5564904504..0578da1b77 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1653,11 +1653,18 @@ def extract_name(s):
     data["state"] = extract_name(doc.get_state())
     data["intended_std_level"] = extract_name(doc.intended_std_level)
     data["std_level"] = extract_name(doc.std_level)
+    author_qs = (
+        doc.rfcauthor_set
+        if doc.type_id == "rfc" and doc.rfcauthor_set.exists()
+        else doc.documentauthor_set
+    ).select_related("person", "email").order_by("order")
     data["authors"] = [
-        dict(name=author.person.name,
-             email=author.email.address if author.email else None,
-             affiliation=author.affiliation)
-        for author in doc.documentauthor_set.all().select_related("person", "email").order_by("order")
+        {
+            "name": author.titlepage_name if hasattr(author, "titlepage_name") else author.person.name,
+            "email": author.email.address if author.email else None,
+            "affiliation": author.affiliation,
+        }
+        for author in author_qs
     ]
     data["shepherd"] = doc.shepherd.formatted_email() if doc.shepherd else None
     data["ad"] = doc.ad.role_email("ad").formatted_email() if doc.ad else None
@@ -1941,9 +1948,9 @@ def edit_action_holders(request, name):
     role_ids = dict()  # maps role slug to list of Person IDs (assumed numeric in the JavaScript)
     extra_prefetch = []  # list of Person objects to prefetch for select2 field
 
-    if len(doc.authors()) > 0:
+    authors = doc.author_persons()
+    if len(authors) > 0:
         doc_role_labels.append(dict(slug='authors', label='Authors'))
-        authors = doc.authors()
         role_ids['authors'] = [p.pk for p in authors]
         extra_prefetch += authors
 
diff --git a/ietf/doc/views_search.py b/ietf/doc/views_search.py
index 3b67061b05..4232d77f6c 100644
--- a/ietf/doc/views_search.py
+++ b/ietf/doc/views_search.py
@@ -219,7 +219,7 @@ def retrieve_search_results(form, all_types=False):
             queries.extend([Q(targets_related__source__name__icontains=look_for, targets_related__relationship_id="became_rfc")])
 
         combined_query = reduce(operator.or_, queries)
-        docs = docs.filter(combined_query).distinct()
+        docs = docs.filter(combined_query)
 
     # rfc/active/old check buttons
     allowed_draft_states = []
@@ -229,20 +229,23 @@ def retrieve_search_results(form, all_types=False):
         allowed_draft_states.extend(['repl', 'expired', 'auth-rm', 'ietf-rm'])
 
     docs = docs.filter(Q(states__slug__in=allowed_draft_states) |
-                       ~Q(type__slug='draft')).distinct()
+                       ~Q(type__slug='draft'))
 
     # radio choices
     by = query["by"]
     if by == "author":
         docs = docs.filter(
             Q(documentauthor__person__alias__name__icontains=query["author"]) |
-            Q(documentauthor__person__email__address__icontains=query["author"])
+            Q(documentauthor__person__email__address__icontains=query["author"]) |
+            Q(rfcauthor__person__alias__name__icontains=query["author"]) |
+            Q(rfcauthor__person__email__address__icontains=query["author"]) |
+            Q(rfcauthor__titlepage_name__icontains=query["author"])
         )
     elif by == "group":
         docs = docs.filter(group__acronym__iexact=query["group"])
     elif by == "area":
         docs = docs.filter(Q(group__type="wg", group__parent=query["area"]) |
-                           Q(group=query["area"])).distinct()
+                           Q(group=query["area"]))
     elif by == "ad":
         docs = docs.filter(ad=query["ad"])
     elif by == "state":
@@ -255,6 +258,8 @@ def retrieve_search_results(form, all_types=False):
     elif by == "stream":
         docs = docs.filter(stream=query["stream"])
 
+    docs=docs.distinct()
+
     return docs
 
 
diff --git a/ietf/group/models.py b/ietf/group/models.py
index 2d5e7c4e6f..a7e3c6616e 100644
--- a/ietf/group/models.py
+++ b/ietf/group/models.py
@@ -111,6 +111,9 @@ def active_wgs(self):
     def closed_wgs(self):
         return self.wgs().exclude(state__in=Group.ACTIVE_STATE_IDS)
 
+    def areas(self):
+        return self.get_queryset().filter(type="area")
+
     def with_meetings(self):
         return self.get_queryset().filter(type__features__has_meetings=True)
 
diff --git a/ietf/group/serializers.py b/ietf/group/serializers.py
new file mode 100644
index 0000000000..08e6bba81a
--- /dev/null
+++ b/ietf/group/serializers.py
@@ -0,0 +1,11 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""django-rest-framework serializers"""
+from rest_framework import serializers
+
+from .models import Group
+
+
+class GroupSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Group
+        fields = ["acronym", "name", "type"]
diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index 1f634278be..0df667fbd2 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -287,7 +287,7 @@ def is_individual_draft_author(user, doc):
     if not hasattr(user, 'person'):
         return False
 
-    if user.person in doc.authors():
+    if user.person in doc.author_persons():
         return True
 
     return False
diff --git a/ietf/ipr/views.py b/ietf/ipr/views.py
index 665c99dc43..0a43ff2c27 100644
--- a/ietf/ipr/views.py
+++ b/ietf/ipr/views.py
@@ -81,7 +81,8 @@ def get_document_emails(ipr):
 
         addrs = gather_address_lists('ipr_posted_on_doc',doc=doc).as_strings(compact=False)
 
-        author_names = ', '.join(a.person.name for a in doc.documentauthor_set.select_related("person"))
+        # Get a list of author names for the salutation in the body of the email
+        author_names = ', '.join(doc.author_names())
     
         context = dict(
             settings=settings,
diff --git a/ietf/name/serializers.py b/ietf/name/serializers.py
new file mode 100644
index 0000000000..a764f56051
--- /dev/null
+++ b/ietf/name/serializers.py
@@ -0,0 +1,11 @@
+# Copyright The IETF Trust 2024, All Rights Reserved
+"""django-rest-framework serializers"""
+from rest_framework import serializers
+
+from .models import StreamName
+
+
+class StreamNameSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = StreamName
+        fields = ["slug", "name", "desc"]
diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index dcdb9ef836..b6e8c57da7 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -1,5 +1,4 @@
-# Copyright The IETF Trust 2012-2023, All Rights Reserved
-# -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2012-2025, All Rights Reserved
 
 
 import datetime
@@ -27,8 +26,14 @@
 from ietf.api.views import EmailIngestionError
 from ietf.dbtemplate.factories import DBTemplateFactory
 from ietf.dbtemplate.models import DBTemplate
-from ietf.doc.factories import DocEventFactory, WgDocumentAuthorFactory, \
-                               NewRevisionDocEventFactory, DocumentAuthorFactory
+from ietf.doc.factories import (
+    DocEventFactory,
+    WgDocumentAuthorFactory,
+    NewRevisionDocEventFactory,
+    DocumentAuthorFactory,
+    RfcAuthorFactory,
+    WgDraftFactory, WgRfcFactory,
+)
 from ietf.group.factories import GroupFactory, GroupHistoryFactory, RoleFactory, RoleHistoryFactory
 from ietf.group.models import Group, Role
 from ietf.meeting.factories import MeetingFactory, AttendedFactory, RegistrationFactory
@@ -45,10 +50,20 @@
                                   nomcom_kwargs_for_year, provide_private_key_to_test_client, \
                                   key
 from ietf.nomcom.tasks import send_nomcom_reminders_task
-from ietf.nomcom.utils import get_nomcom_by_year, make_nomineeposition, \
-                              get_hash_nominee_position, is_eligible, list_eligible, \
-                              get_eligibility_date, suggest_affiliation, ingest_feedback_email, \
-                              decorate_volunteers_with_qualifications, send_reminders, _is_time_to_send_reminder
+from ietf.nomcom.utils import (
+    get_nomcom_by_year,
+    make_nomineeposition,
+    get_hash_nominee_position,
+    is_eligible,
+    list_eligible,
+    get_eligibility_date,
+    suggest_affiliation,
+    ingest_feedback_email,
+    decorate_volunteers_with_qualifications,
+    send_reminders,
+    _is_time_to_send_reminder,
+    get_qualified_author_queryset,
+)
 from ietf.person.factories import PersonFactory, EmailFactory
 from ietf.person.models import Email, Person
 from ietf.utils.mail import outbox, empty_outbox, get_payload_text
@@ -2440,6 +2455,86 @@ def test_get_eligibility_date(self):
         NomComFactory(group__acronym=f'nomcom{this_year}', first_call_for_volunteers=datetime.date(this_year,5,6))
         self.assertEqual(get_eligibility_date(),datetime.date(this_year,5,6))
 
+    def test_get_qualified_author_queryset(self):
+        """get_qualified_author_queryset implements the eligiblity rules correctly
+
+        This is not an exhaustive test of corner cases. Overlaps considerably with
+        rfc8989EligibilityTests.test_elig_by_author().
+        """
+        people = PersonFactory.create_batch(2)
+        extra_person = PersonFactory()
+        base_qs = Person.objects.filter(pk__in=[person.pk for person in people])
+        now = datetime.datetime.now(tz=datetime.UTC)
+        one_year = datetime.timedelta(days=365)
+
+        # Authors with no qualifying drafts
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 5 * one_year, now), []
+        )
+
+        # Authors with one qualifying draft
+        approved_draft = WgDraftFactory(authors=people, states=[("draft", "active")])
+        DocEventFactory(
+            type="iesg_approved",
+            doc=approved_draft,
+            time=now - 4 * one_year,
+        )
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 5 * one_year, now), []
+        )
+
+        # Create a draft that was published into an RFC. Give it an extra author who
+        # should not be eligible.
+        published_draft = WgDraftFactory(authors=people, states=[("draft", "rfc")])
+        DocEventFactory(
+            type="iesg_approved",
+            doc=published_draft,
+            time=now - 5.5 * one_year,  # < 6 years ago
+        )
+        rfc = WgRfcFactory(
+            authors=people + [extra_person],
+            group=published_draft.group,
+        )
+        DocEventFactory(
+            type="published_rfc",
+            doc=rfc,
+            time=now - 0.5 * one_year,  # < 1 year ago
+        )
+        # Period 6 years ago to 1 year ago - authors are eligible due to the
+        # iesg-approved draft in this window
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 6 * one_year, now - one_year),
+            people,
+        )
+
+        # Period 5 years ago to now - authors are eligible due to the RFC publication
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 5 * one_year, now),
+            people,
+        )
+        
+        # Use the extra_person to check that a single doc can't count both as an
+        # RFC _and_ an approved draft. Use an eligibility interval that includes both
+        # the approval and the RFC publication
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 6 * one_year, now),
+            people,  # does not include extra_person!
+        )
+
+        # Now add an RfcAuthor for only one of the two authors to the RFC. This should
+        # remove the other author from the eligibility list because the DocumentAuthor
+        # records are no longer used.
+        RfcAuthorFactory(
+            document=rfc,
+            person=people[0],
+            titlepage_name="P. Zero",
+            email=people[0].email_set.first(),
+        )
+        self.assertCountEqual(
+            get_qualified_author_queryset(base_qs, now - 5 * one_year, now),
+            [people[0]],
+        )
+
 
 class rfc8713EligibilityTests(TestCase):
 
@@ -2724,33 +2819,41 @@ def test_elig_by_author(self):
             ineligible = set()
 
             p = PersonFactory()
-            ineligible.add(p)
-
+            ineligible.add(p)  # no RFCs or iesg-approved drafts
             p = PersonFactory()
-            da = WgDocumentAuthorFactory(person=p)
-            DocEventFactory(type='published_rfc',doc=da.document,time=middle_date)
-            ineligible.add(p)
+            doc = WgRfcFactory(authors=[p])
+            DocEventFactory(type='published_rfc', doc=doc, time=middle_date)
+            ineligible.add(p)  # only one RFC
 
             p = PersonFactory()
-            da = WgDocumentAuthorFactory(person=p)
+            da = WgDocumentAuthorFactory(
+                person=p,
+                document__states=[("draft", "active"), ("draft-rfceditor", "ref")],
+            )
             DocEventFactory(type='iesg_approved',doc=da.document,time=last_date)
-            da = WgDocumentAuthorFactory(person=p)
-            DocEventFactory(type='published_rfc',doc=da.document,time=first_date)
-            eligible.add(p)
+            doc = WgRfcFactory(authors=[p])
+            DocEventFactory(type='published_rfc', doc=doc, time=first_date)
+            eligible.add(p)  # one RFC and one iesg-approved draft
 
             p = PersonFactory()
-            da = WgDocumentAuthorFactory(person=p)
+            da = WgDocumentAuthorFactory(
+                person=p,
+                document__states=[("draft", "active"), ("draft-rfceditor", "ref")],
+            )
             DocEventFactory(type='iesg_approved',doc=da.document,time=middle_date)
-            da = WgDocumentAuthorFactory(person=p)
-            DocEventFactory(type='published_rfc',doc=da.document,time=day_before_first_date)
-            ineligible.add(p)
+            doc = WgRfcFactory(authors=[p])
+            DocEventFactory(type='published_rfc', doc=doc, time=day_before_first_date)
+            ineligible.add(p)  # RFC is out of the eligibility window
 
             p = PersonFactory()
-            da = WgDocumentAuthorFactory(person=p)
+            da = WgDocumentAuthorFactory(
+                person=p,
+                document__states=[("draft", "active"), ("draft-rfceditor", "ref")],
+            )
             DocEventFactory(type='iesg_approved',doc=da.document,time=day_after_last_date)
-            da = WgDocumentAuthorFactory(person=p)
-            DocEventFactory(type='published_rfc',doc=da.document,time=middle_date)
-            ineligible.add(p)
+            doc = WgRfcFactory(authors=[p])
+            DocEventFactory(type='published_rfc', doc=doc, time=middle_date)
+            ineligible.add(p)  # iesg approval is outside the eligibility window
 
             for person in eligible:
                 self.assertTrue(is_eligible(person,nomcom))
@@ -2878,15 +2981,38 @@ def test_volunteer(self):
 
     def test_suggest_affiliation(self):
         person = PersonFactory()
-        self.assertEqual(suggest_affiliation(person), '')
-        da = DocumentAuthorFactory(person=person,affiliation='auth_affil')
+        self.assertEqual(suggest_affiliation(person), "")
+        rfc_da = DocumentAuthorFactory(
+            person=person,
+            document__type_id="rfc",
+            affiliation="",
+        )
+        rfc = rfc_da.document
+        DocEventFactory(doc=rfc, type="published_rfc")
+        self.assertEqual(suggest_affiliation(person), "")
+
+        rfc_da.affiliation = "rfc_da_affil"
+        rfc_da.save()
+        self.assertEqual(suggest_affiliation(person), "rfc_da_affil")
+
+        rfc_ra = RfcAuthorFactory(person=person, document=rfc, affiliation="")
+        self.assertEqual(suggest_affiliation(person), "")
+
+        rfc_ra.affiliation = "rfc_ra_affil"
+        rfc_ra.save()
+        self.assertEqual(suggest_affiliation(person), "rfc_ra_affil")
+
+        da = DocumentAuthorFactory(person=person, affiliation="auth_affil")
         NewRevisionDocEventFactory(doc=da.document)
-        self.assertEqual(suggest_affiliation(person), 'auth_affil')
+        self.assertEqual(suggest_affiliation(person), "auth_affil")
+
         nc = NomComFactory()
-        nc.volunteer_set.create(person=person,affiliation='volunteer_affil')
-        self.assertEqual(suggest_affiliation(person), 'volunteer_affil')
-        RegistrationFactory(person=person, affiliation='meeting_affil')
-        self.assertEqual(suggest_affiliation(person), 'meeting_affil')
+        nc.volunteer_set.create(person=person, affiliation="volunteer_affil")
+        self.assertEqual(suggest_affiliation(person), "volunteer_affil")
+
+        RegistrationFactory(person=person, affiliation="meeting_affil")
+        self.assertEqual(suggest_affiliation(person), "meeting_affil")
+
 
 class VolunteerDecoratorUnitTests(TestCase):
     def test_decorate_volunteers_with_qualifications(self):
@@ -2922,10 +3048,10 @@ def test_decorate_volunteers_with_qualifications(self):
 
         author_person = PersonFactory()
         for i in range(2):
-            da = WgDocumentAuthorFactory(person=author_person)
+            doc = WgRfcFactory(authors=[author_person])
             DocEventFactory(
                 type='published_rfc',
-                doc=da.document,
+                doc=doc,
                 time=datetime.datetime(
                     elig_date.year - 3,
                     elig_date.month,
diff --git a/ietf/nomcom/utils.py b/ietf/nomcom/utils.py
index dd651c2941..a2ab680df6 100644
--- a/ietf/nomcom/utils.py
+++ b/ietf/nomcom/utils.py
@@ -18,7 +18,7 @@
 from email.utils import parseaddr
 from textwrap import dedent
 
-from django.db.models import Q, Count
+from django.db.models import Q, Count, F, QuerySet
 from django.conf import settings
 from django.contrib.sites.models import Site
 from django.core.exceptions import ObjectDoesNotExist
@@ -27,7 +27,7 @@
 from django.shortcuts import get_object_or_404
 
 from ietf.dbtemplate.models import DBTemplate
-from ietf.doc.models import DocEvent, NewRevisionDocEvent
+from ietf.doc.models import DocEvent, NewRevisionDocEvent, Document
 from ietf.group.models import Group, Role
 from ietf.person.models import Email, Person
 from ietf.mailtrigger.utils import gather_address_lists
@@ -576,6 +576,70 @@ def get_8989_eligibility_querysets(date, base_qs):
 def get_9389_eligibility_querysets(date, base_qs):
     return get_threerule_eligibility_querysets(date, base_qs, three_of_five_callable=three_of_five_eligible_9389)
 
+
+def get_qualified_author_queryset(
+    base_qs: QuerySet[Person],
+    eligibility_period_start: datetime.datetime,
+    eligibility_period_end: datetime.datetime,
+):
+    """Filter a Person queryset, keeping those qualified by RFC 8989's author path
+    
+    The author path is defined by "path 3" in section 4 of RFC 8989. It qualifies
+    a person who has been a front-page listed author or editor of at least two IETF-
+    stream RFCs within the last five years. An I-D in the RFC Editor queue that was
+    approved by the IESG is treated as an RFC, using the date of entry to the RFC
+    Editor queue as the date for qualification.
+    
+    This method does not strictly enforce "in the RFC Editor queue" for IESG-approved
+    drafts when computing eligibility. In the overwhelming majority of cases, an IESG-
+    approved draft immediately enters the queue and goes on to be published, so this
+    simplification makes the calculation much easier and virtually never affects
+    eligibility.  
+    
+    Arguments eligibility_period_start and eligibility_period_end are datetimes that
+    mark the start and end of the eligibility period. These should be five years apart.
+    """
+    # First, get the RFCs using publication date
+    qualifying_rfc_pub_events = DocEvent.objects.filter(
+        type='published_rfc',
+        time__gte=eligibility_period_start,
+        time__lte=eligibility_period_end,
+    )
+    qualifying_rfcs = Document.objects.filter(
+        type_id="rfc",
+        docevent__in=qualifying_rfc_pub_events
+    ).annotate(
+        rfcauthor_count=Count("rfcauthor")
+    )
+    rfcs_with_rfcauthors = qualifying_rfcs.filter(rfcauthor_count__gt=0).distinct()
+    rfcs_without_rfcauthors = qualifying_rfcs.filter(rfcauthor_count=0).distinct()
+
+    # Second, get the IESG-approved I-Ds excluding any we're already counting as rfcs
+    qualifying_approval_events = DocEvent.objects.filter(
+        type='iesg_approved',
+        time__gte=eligibility_period_start,
+        time__lte=eligibility_period_end,
+    )
+    qualifying_drafts = Document.objects.filter(
+        type_id="draft",
+        docevent__in=qualifying_approval_events,
+    ).exclude(
+        relateddocument__relationship_id="became_rfc",
+        relateddocument__target__in=qualifying_rfcs,
+    ).distinct()
+
+    return base_qs.filter(
+        Q(documentauthor__document__in=qualifying_drafts)
+        | Q(rfcauthor__document__in=rfcs_with_rfcauthors)
+        | Q(documentauthor__document__in=rfcs_without_rfcauthors)
+    ).annotate(
+        document_author_count=Count('documentauthor'),
+        rfc_author_count=Count("rfcauthor")
+    ).annotate(
+        authorship_count=F("document_author_count") + F("rfc_author_count")
+    ).filter(authorship_count__gte=2)
+
+
 def get_threerule_eligibility_querysets(date, base_qs, three_of_five_callable):
     if not base_qs:
         base_qs = Person.objects.all()
@@ -608,14 +672,7 @@ def get_threerule_eligibility_querysets(date, base_qs, three_of_five_callable):
          )
     ).distinct()
 
-    rfc_pks = set(DocEvent.objects.filter(type='published_rfc', time__gte=five_years_ago, time__lte=date_as_dt).values_list('doc__pk', flat=True))
-    iesgappr_pks = set(DocEvent.objects.filter(type='iesg_approved', time__gte=five_years_ago, time__lte=date_as_dt).values_list('doc__pk',flat=True))
-    qualifying_pks = rfc_pks.union(iesgappr_pks.difference(rfc_pks))
-    author_qs = base_qs.filter(
-            documentauthor__document__pk__in=qualifying_pks
-        ).annotate(
-            document_author_count = Count('documentauthor')
-        ).filter(document_author_count__gte=2)
+    author_qs = get_qualified_author_queryset(base_qs, five_years_ago, date_as_dt)
     return three_of_five_qs, officer_qs, author_qs
 
 def list_eligible_8989(date, base_qs=None):
@@ -691,18 +748,42 @@ def three_of_five_eligible_9389(previous_five, queryset=None):
             counts[id] += 1
     return queryset.filter(pk__in=[id for id, count in counts.items() if count >= 3])
 
-def suggest_affiliation(person):
+def suggest_affiliation(person) -> str:
+    """Heuristically suggest a current affiliation for a Person"""
     recent_meeting = person.registration_set.order_by('-meeting__date').first()
-    affiliation = recent_meeting.affiliation if recent_meeting else ''
-    if not affiliation:
-        recent_volunteer = person.volunteer_set.order_by('-nomcom__group__acronym').first()
-        if recent_volunteer:
-            affiliation = recent_volunteer.affiliation 
-    if not affiliation:
-        recent_draft_revision =  NewRevisionDocEvent.objects.filter(doc__type_id='draft',doc__documentauthor__person=person).order_by('-time').first()
-        if recent_draft_revision:
-            affiliation = recent_draft_revision.doc.documentauthor_set.filter(person=person).first().affiliation
-    return affiliation
+    if recent_meeting and recent_meeting.affiliation:
+        return recent_meeting.affiliation
+
+    recent_volunteer = person.volunteer_set.order_by('-nomcom__group__acronym').first()
+    if recent_volunteer and recent_volunteer.affiliation:
+        return recent_volunteer.affiliation 
+
+    recent_draft_revision =  NewRevisionDocEvent.objects.filter(
+        doc__type_id="draft",
+        doc__documentauthor__person=person,
+    ).order_by("-time").first()
+    if recent_draft_revision:
+        draft_author = recent_draft_revision.doc.documentauthor_set.filter(
+            person=person
+        ).first()
+        if draft_author and draft_author.affiliation:
+            return draft_author.affiliation
+    
+    recent_rfc_publication = DocEvent.objects.filter(
+        Q(doc__documentauthor__person=person) | Q(doc__rfcauthor__person=person),
+        doc__type_id="rfc",
+        type="published_rfc",
+    ).order_by("-time").first()
+    if recent_rfc_publication:
+        rfc = recent_rfc_publication.doc
+        if rfc.rfcauthor_set.exists():
+            rfc_author = rfc.rfcauthor_set.filter(person=person).first()
+        else:
+            rfc_author = rfc.documentauthor_set.filter(person=person).first()
+        if rfc_author and rfc_author.affiliation:
+            return rfc_author.affiliation
+    return ""
+
 
 def extract_volunteers(year):
     nomcom = get_nomcom_by_year(year)
diff --git a/ietf/person/models.py b/ietf/person/models.py
index 03cf0c87fb..3ab89289a6 100644
--- a/ietf/person/models.py
+++ b/ietf/person/models.py
@@ -87,7 +87,7 @@ def short(self):
         else:
             prefix, first, middle, last, suffix = self.ascii_parts()
             return (first and first[0]+"." or "")+(middle or "")+" "+last+(suffix and " "+suffix or "")
-    def plain_name(self):
+    def plain_name(self) -> str:
         if not hasattr(self, '_cached_plain_name'):
             if self.plain:
                 self._cached_plain_name = self.plain
@@ -203,7 +203,10 @@ def has_drafts(self):
 
     def rfcs(self):
         from ietf.doc.models import Document
-        rfcs = list(Document.objects.filter(documentauthor__person=self, type='rfc'))
+        # When RfcAuthors are populated, this may over-return if an author is dropped
+        # from the author list between the final draft and the published RFC. Should
+        # ignore DocumentAuthors when an RfcAuthor exists for a draft.
+        rfcs = list(Document.objects.filter(type="rfc").filter(models.Q(documentauthor__person=self)|models.Q(rfcauthor__person=self)).distinct())
         rfcs.sort(key=lambda d: d.name )
         return rfcs
 
@@ -266,11 +269,16 @@ def available_api_endpoints(self):
     def cdn_photo_url(self, size=80):
         if self.photo:
             if settings.SERVE_CDN_PHOTOS:
+                if settings.SERVER_MODE != "production":
+                    original_media_dir = settings.MEDIA_URL
+                    settings.MEDIA_URL = "https://www.ietf.org/lib/dt/media/"
                 source_url = self.photo.url
                 if source_url.startswith(settings.IETF_HOST_URL):
                     source_url = source_url[len(settings.IETF_HOST_URL):]
                 elif source_url.startswith('/'):
                     source_url = source_url[1:]
+                if settings.SERVER_MODE != "production":
+                    settings.MEDIA_URL = original_media_dir
                 return f'{settings.IETF_HOST_URL}cdn-cgi/image/fit=scale-down,width={size},height={size}/{source_url}'
             else:
                 datatracker_photo_path = urlreverse('ietf.person.views.photo', kwargs={'email_or_name': self.email()})
diff --git a/ietf/secr/telechat/tests.py b/ietf/secr/telechat/tests.py
index fa26d33a5c..91ccde2187 100644
--- a/ietf/secr/telechat/tests.py
+++ b/ietf/secr/telechat/tests.py
@@ -256,7 +256,7 @@ def test_doc_detail_post_update_state_action_holder_automation(self):
         self.assertEqual(response.status_code,302)
         draft = Document.objects.get(name=draft.name)
         self.assertEqual(draft.get_state('draft-iesg').slug,'defer')
-        self.assertCountEqual(draft.action_holders.all(), [draft.ad] + draft.authors())
+        self.assertCountEqual(draft.action_holders.all(), [draft.ad] + draft.author_persons())
         self.assertEqual(draft.docevent_set.filter(type='changed_action_holders').count(), 1)
 
         # Removing need-rev should remove authors
@@ -273,7 +273,7 @@ def test_doc_detail_post_update_state_action_holder_automation(self):
 
         # Setting to approved should remove all action holders
         # noinspection DjangoOrm
-        draft.action_holders.add(*(draft.authors()))  # add() with through model ok in Django 2.2+
+        draft.action_holders.add(*(draft.author_persons()))  # add() with through model ok in Django 2.2+
         response = self.client.post(url,{
             'submit': 'update_state',
             'state': State.objects.get(type_id='draft-iesg', slug='approved').pk,
diff --git a/ietf/settings.py b/ietf/settings.py
index 05eab0f12f..fedd313ca0 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -22,6 +22,7 @@
 warnings.filterwarnings("ignore", message="The django.utils.timezone.utc alias is deprecated.", module="oidc_provider")
 warnings.filterwarnings("ignore", message="The django.utils.datetime_safe module is deprecated.", module="tastypie")
 warnings.filterwarnings("ignore", message="The USE_DEPRECATED_PYTZ setting,")  # https://github.com/ietf-tools/datatracker/issues/5635
+warnings.filterwarnings("ignore", message="The is_dst argument to make_aware\\(\\)")  # caused by django-filters when USE_DEPRECATED_PYTZ is true 
 warnings.filterwarnings("ignore", message="The USE_L10N setting is deprecated.")  # https://github.com/ietf-tools/datatracker/issues/5648
 warnings.filterwarnings("ignore", message="django.contrib.auth.hashers.CryptPasswordHasher is deprecated.")  # https://github.com/ietf-tools/datatracker/issues/5663
 
@@ -502,6 +503,7 @@ def skip_unreadable_post(record):
     'django_celery_results',
     'corsheaders',
     'django_markup',
+    'django_filters',
     'oidc_provider',
     'drf_spectacular',
     'drf_standardized_errors',
diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 216fc7de6b..400d0d8c7d 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -595,7 +595,7 @@ def submit_existing(self, formats, change_authors=True, group_type='wg', stream_
         TestBlobstoreManager().emptyTestBlobstores()
 
         def _assert_authors_are_action_holders(draft, expect=True):
-            for author in draft.authors():
+            for author in draft.author_persons():
                 if expect:
                     self.assertIn(author, draft.action_holders.all())
                 else:
diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index a0c7dd8511..9a7c358a6d 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -1268,7 +1268,7 @@ def process_submission_text(filename, revision):
     if title:
         title = _normalize_title(title)
 
-    # Translation taable drops \r, \n, <, >.
+    # Translation table drops \r, \n, <, >.
     trans_table = str.maketrans("", "", "\r\n<>")
     authors = [
         {
diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index b3234a87e2..cdcdeb5989 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -468,14 +468,18 @@ def update_docs_from_rfc_index(
             doc.set_state(rfc_published_state)
             if draft:
                 doc.formal_languages.set(draft.formal_languages.all())
-                for author in draft.documentauthor_set.all():
+                # Create authors based on the last draft in the datatracker. This
+                # path will go away when we publish via the modernized RPC workflow
+                # but until then, these are the only data we have for authors that
+                # are easily connected to Person records.
+                for documentauthor in draft.documentauthor_set.all():
                     # Copy the author but point at the new doc.
                     # See https://docs.djangoproject.com/en/4.2/topics/db/queries/#copying-model-instances
-                    author.pk = None
-                    author.id = None
-                    author._state.adding = True
-                    author.document = doc
-                    author.save()
+                    documentauthor.pk = None
+                    documentauthor.id = None
+                    documentauthor._state.adding = True
+                    documentauthor.document = doc
+                    documentauthor.save()
 
         if draft:
             draft_events = []
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 3432f6214a..888920ae9d 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -446,7 +446,7 @@ def test_rfc_index(self):
 
         rfc_doc = Document.objects.filter(rfc_number=1234, type_id="rfc").first()
         self.assertIsNotNone(rfc_doc, "RFC document should have been created")
-        self.assertEqual(rfc_doc.authors(), draft_doc.authors())
+        self.assertEqual(rfc_doc.author_persons_or_names(), draft_doc.author_persons_or_names())
         rfc_events = rfc_doc.docevent_set.all()
         self.assertEqual(len(rfc_events), 8)
         expected_events = [
diff --git a/ietf/templates/doc/document_info.html b/ietf/templates/doc/document_info.html
index 71050f9d41..d6d8d43071 100644
--- a/ietf/templates/doc/document_info.html
+++ b/ietf/templates/doc/document_info.html
@@ -87,7 +87,7 @@
     {% endif %}
     <tr>
         <td></td>
-        <th scope="row">Author{% if doc.pk %}{{ doc.authors|pluralize }}{% endif %}</th>
+        <th scope="row">Author{% if doc.pk %}{{ doc.author_persons_or_names|pluralize }}{% endif %}</th>
         <td class="edit">
             {% if can_edit_authors %}
                 <a class="btn btn-primary btn-sm"
@@ -96,8 +96,8 @@
         </td>
         <td>
             {# Implementation that uses the current primary email for each author #}
-            {% if doc.pk %}{% for author in doc.authors %}
-                {% person_link author %}{% if not forloop.last %},{% endif %}
+            {% if doc.pk %}{% for author in doc.author_persons_or_names %}
+                {% if author.person %}{% person_link author.person %}{% else %}{{ author.titlepage_name }}{% endif %}{% if not forloop.last %},{% endif %}
             {% endfor %}{% endif %}
             {% if document_html and not snapshot or document_html and doc.rev == latest_rev%}
                 <br>
diff --git a/ietf/templates/doc/index_active_drafts.html b/ietf/templates/doc/index_active_drafts.html
index 06ea2c4ff5..607385f56f 100644
--- a/ietf/templates/doc/index_active_drafts.html
+++ b/ietf/templates/doc/index_active_drafts.html
@@ -29,7 +29,7 @@ <h1>Active Internet-Drafts</h1>
     </p>
     {% for group in groups %}
         <h2 class="mt-3" id="id-{{ group.acronym }}">{{ group.name }} ({{ group.acronym }})</h2>
-        {% for d in group.active_drafts %}
+        {% for d in group.active_drafts %}{# n.b., d is a dict, not a Document #}
             <div class="card mb-3">
                 <div class="card-body">
                     <b>{{ d.title }}.</b>
diff --git a/ietf/templates/doc/opengraph.html b/ietf/templates/doc/opengraph.html
index 4fe39b6209..1c8c5abe91 100644
--- a/ietf/templates/doc/opengraph.html
+++ b/ietf/templates/doc/opengraph.html
@@ -1,4 +1,4 @@
-{# Copyright The IETF Trust 2016-2020, All Rights Reserved #}
+{# Copyright The IETF Trust 2016-2025, All Rights Reserved #}
 {% load origin %}
 {% load static %}
 {% load ietf_filters %}
@@ -36,7 +36,7 @@
 {% else %}{# TODO: We need a card image for individual I-Ds. #}
 <meta property="article:section" content="Individual Internet-Draft">
 {% endif %}
-{% if doc.pk %}{% for author in doc.documentauthor_set.all %}<meta property="article:author" content="{{ author.person.name}}">
+{% if doc.pk %}{% for author_name in doc.author_names %}<meta property="article:author" content="{{ author_name }}">
 {% endfor %}{% endif %}
 {% if published %}<meta property="article:published_time" content="{{ published.time|date:'Y-m-d' }}">{% endif %}
 {% if expires %}<meta property="article:expiration_time" content="{{ expires.time|date:'Y-m-d' }}">{% endif %}
\ No newline at end of file
diff --git a/ietf/templates/doc/review/request_info.html b/ietf/templates/doc/review/request_info.html
index 9ad126d59e..51aea10a02 100644
--- a/ietf/templates/doc/review/request_info.html
+++ b/ietf/templates/doc/review/request_info.html
@@ -74,13 +74,13 @@
                 <td>{% person_link review_req.requested_by %}</td>
             </tr>
         {% endif %}
-        {% if review_req.doc.authors %}
+        {% if review_req.doc.author_persons_or_names %}
             <tr>
                 <td></td>
                 <th scope="row">Authors</th>
                 <td>
-                    {% for author in review_req.doc.authors %}
-                        {% person_link author %}{% if not forloop.last %},{% endif %}
+                    {% for person, tp_name in review_req.doc.author_persons_or_names %}
+                        {% if person %}{% person_link person %}{% else %}<span>{{ tp_name }}</span>{% endif %}{% if not forloop.last %},{% endif %}
                     {% endfor %}
                 </td>
             </tr>
diff --git a/ietf/templates/group/manage_review_requests.html b/ietf/templates/group/manage_review_requests.html
index 99b23c138a..d240ef24fa 100644
--- a/ietf/templates/group/manage_review_requests.html
+++ b/ietf/templates/group/manage_review_requests.html
@@ -66,10 +66,10 @@ <h1>
                                     <span class="badge rounded-pill text-bg-info">Auto-suggested</span>
                                     <br>
                                 {% endif %}
-                                {% if r.doc.authors %}
+                                {% if r.doc.author_persons_or_names %}
                                     <span class="fw-bold">Authors:</span>
-                                    {% for person in r.doc.authors %}
-                                        {% person_link person %}{% if not forloop.last %},{% endif %}
+                                    {% for person, tp_name in r.doc.author_persons_or_names %}
+                                        {% if person %}{% person_link person %}{% else %}<span>{{ tp_name }}</span>{% endif %}{% if not forloop.last %},{% endif %}
                                     {% endfor %}
                                     <br>
                                 {% endif %}
diff --git a/ietf/utils/test_utils.py b/ietf/utils/test_utils.py
index 86c5a0c1c3..5faf83d93f 100644
--- a/ietf/utils/test_utils.py
+++ b/ietf/utils/test_utils.py
@@ -38,6 +38,7 @@
 import re
 import email
 import html5lib
+import rest_framework.test
 import requests_mock
 import shutil
 import sys
@@ -312,3 +313,11 @@ def tearDown(self):
             shutil.rmtree(dir)
         self.requests_mock.stop()
         super().tearDown()
+
+
+class APITestCase(TestCase):
+    """Test case that uses rest_framework's APIClient
+    
+    This is equivalent to rest_framework.test.APITestCase, but picks up our 
+    """
+    client_class = rest_framework.test.APIClient
diff --git a/ietf/utils/validators.py b/ietf/utils/validators.py
index 92a20f5a26..a99de72724 100644
--- a/ietf/utils/validators.py
+++ b/ietf/utils/validators.py
@@ -33,8 +33,9 @@
 # Note that this is an instantiation of the regex validator, _not_ the
 # regex-string validator defined right below
 validate_no_control_chars = RegexValidator(
-                                    regex="^[^\x00-\x1f]*$",
-                                    message="Please enter a string without control characters." )
+    regex="^[^\x01-\x1f]*$",
+    message="Please enter a string without control characters.",
+)
 
 
 @deconstructible
diff --git a/mypy.ini b/mypy.ini
index 19df7ec9b0..4acaf98c95 100644
--- a/mypy.ini
+++ b/mypy.ini
@@ -2,6 +2,9 @@
 
 ignore_missing_imports = True
 
+# allow PEP 695 type aliases (flag needed until mypy >= 1.13) 
+enable_incomplete_feature = NewGenericSyntax
+
 plugins =
     mypy_django_plugin.main
 
diff --git a/requirements.txt b/requirements.txt
index 02a4cf5fd0..3f89f6f16c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -19,8 +19,10 @@ django-analytical>=3.2.0
 django-bootstrap5>=25.1
 django-celery-beat>=2.7.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
 django-celery-results>=2.6.0
+django-csp>=3.7
 django-cors-headers>=4.7.0
 django-debug-toolbar>=6.0.0
+django-filter>=24.3
 django-markup>=1.10    # Limited use - need to reconcile against direct use of markdown
 django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
 django-simple-history>=3.10.1
@@ -50,7 +52,7 @@ markdown>=3.8.0
 types-markdown>=3.8.0
 mock>=5.2.0  # should replace with unittest.mock and remove dependency
 types-mock>=5.2.0
-mypy~=1.7.0  # Version requirements determined by django-stubs.
+mypy~=1.11.2  # Version requirements loosely determined by django-stubs.
 oic>=1.7.0  # Used only by tests
 opentelemetry-sdk>=1.38.0
 opentelemetry-instrumentation-django>=0.59b0

From c845aa788b7d1b215636a7730756365c6d27ebd8 Mon Sep 17 00:00:00 2001
From: rjsparks <10996692+rjsparks@users.noreply.github.com>
Date: Wed, 14 Jan 2026 18:11:50 +0000
Subject: [PATCH 529/707] ci: update base image target version to 20260114T1756

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index e05ad51d1b..41ff295eec 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20251219T2152
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260114T1756
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index f8afdadf36..3ad31c7e25 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20251219T2152
+20260114T1756

From c1e8eb658ce6a204f450cd6d61857d49f6bbfcee Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Thu, 15 Jan 2026 12:01:00 -0500
Subject: [PATCH 530/707] ci: Increase wait-for-completion timeouts in
 build.yml

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5e91445202..d97889fbb8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -426,7 +426,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }} }'
           wait-for-completion: true
-          wait-for-completion-timeout: 30m
+          wait-for-completion-timeout: 60m
           wait-for-completion-interval: 30s
           display-workflow-run-url: false
 
@@ -453,7 +453,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "restoreToLastFullSnapshot":true, "waitClusterReady":true }'
           wait-for-completion: true
-          wait-for-completion-timeout: 60m
+          wait-for-completion-timeout: 120m
           wait-for-completion-interval: 20s
           display-workflow-run-url: false
 

From ac2fced3113f16e54eb84fd2b5c1b3000f0f2c87 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 15 Jan 2026 14:58:04 -0400
Subject: [PATCH 531/707] fix: remove notice from bofreq template (#10265)

---
 ietf/templates/doc/bofreq/new_bofreq.html | 17 +----------------
 1 file changed, 1 insertion(+), 16 deletions(-)

diff --git a/ietf/templates/doc/bofreq/new_bofreq.html b/ietf/templates/doc/bofreq/new_bofreq.html
index c6aa0054f9..cda6f73b90 100644
--- a/ietf/templates/doc/bofreq/new_bofreq.html
+++ b/ietf/templates/doc/bofreq/new_bofreq.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2021, All Rights Reserved #}
+{# Copyright The IETF Trust 2021-2026, All Rights Reserved #}
 {% load origin django_bootstrap5 static textfilters %}
 {% block title %}Start a new BOF Request{% endblock %}
 {% block content %}
@@ -12,21 +12,6 @@ <h1>Start a new BOF Request</h1>
         <li>Process: <a href="https://www.rfc-editor.org/rfc/rfc2418.html#section-2.4">RFC 2418 Section 2.4</a></li>
         <li>Considerations for having a successful BoF: <a href="https://www.rfc-editor.org/rfc/rfc5434.html">RFC 5434</a></li>
     </ul>
-    {# The following block needs to be commented out after the BoF deadline and re-opened before next BoF request opening #}
-    <hr>
-    <p class="lead">
-        Announcement for IETF 124: The IESG and the IAB have organized <em>Ask Me Anything</em> (AMA) virtual sessions 
-        for the community to help proponents who are interested in putting up BoF proposals for IETF 124
-        (see also the <a href="https://mailarchive.ietf.org/arch/msg/ietf-announce/mtAYV3Mu5RfJPR-przzr-Nzxhwc/">IETF-announce</a> email):
-    </p>
-    <ul class="lead">
-        <li>28th of August 13:00-14:00 UTC 
-            <a href="https://datatracker.ietf.org/meeting/interim-2025-iesg-22/sessions/iesg.ics" title="iCalendar entry" aria-label="iCalendar entry"><i class="bi bi-calendar"></i></a></li>
-        <li>28th of August 19:00-20:00 UTC 
-            <a href="https://datatracker.ietf.org/meeting/interim-2025-iesg-23/sessions/iesg.ics" title="iCalendar entry" aria-label="iCalendar entry"><i class="bi bi-calendar"></i></a></li>
-    </ul>
-    <hr>
-    {# End of the temporary block #}
     <p>
         The IAB will also attempt to provide BoF Shepherds as described in their document on the subject only on request from the IESG. 
         If you feel that your BoF would benefit from an IAB BoF Shepherd, please discuss this with your Area Director.

From 0b6e887c36b37f3b66cf653360471f5151cd7796 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 16 Jan 2026 15:38:26 -0400
Subject: [PATCH 532/707] test: more robust URL coverage; improve badly formed
 test (#10270)

* test: use bad ID with correct format

* test: use Django resolver for URL coverage

* chore: f-strings are hard
---
 ietf/api/tests_views_rpc.py |  5 +++-
 ietf/utils/test_runner.py   | 56 ++++++++++++++++++++++++++++++-------
 2 files changed, 50 insertions(+), 11 deletions(-)

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 032b4b9495..ece2af1b85 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -6,6 +6,7 @@
 from django.conf import settings
 from django.core.files.base import ContentFile
 from django.db.models import Max
+from django.db.models.functions import Coalesce
 from django.test.utils import override_settings
 from django.urls import reverse as urlreverse
 
@@ -22,7 +23,9 @@ def test_draftviewset_references(self):
         viewname = "ietf.api.purple_api.draft-references"
 
         # non-existent draft
-        bad_id = Document.objects.aggregate(unused_id=Max("id") + 100)["unused_id"]
+        bad_id = Document.objects.aggregate(unused_id=Coalesce(Max("id"), 0) + 100)[
+            "unused_id"
+        ]
         url = urlreverse(viewname, kwargs={"doc_id": bad_id})
         # Without credentials
         r = self.client.get(url)
diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index 1a3d4e5c3d..df8ed1fd61 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -70,7 +70,7 @@
 from django.template.loaders.filesystem import Loader as BaseLoader
 from django.test.runner import DiscoverRunner
 from django.core.management import call_command
-from django.urls import URLResolver # type: ignore
+from django.urls import URLResolver, resolve, Resolver404  # type: ignore
 from django.template.backends.django import DjangoTemplates
 from django.template.backends.django import Template  # type: ignore[attr-defined]
 from django.utils import timezone
@@ -88,6 +88,26 @@
 from mypy_boto3_s3.service_resource import Bucket
 
 
+class UrlCoverageWarning(UserWarning):
+    """Warning category for URL coverage-related warnings"""
+    pass
+
+
+class UninterestingPatternWarning(UrlCoverageWarning):
+    """Warning category for unexpected URL match patterns
+    
+    These are common, caused by tests that hit a URL that is not selected for
+    coverage checking. The warning is in place to help with a putative future 
+    review of whether we're selecting the right patterns to check for coverage. 
+    """
+    pass
+
+
+# Configure warnings for reasonable output quantity
+warnings.simplefilter("once", UrlCoverageWarning)
+warnings.simplefilter("ignore", UninterestingPatternWarning)
+
+
 loaded_templates: set[str] = set()
 visited_urls: set[str] = set()
 test_database_name: Optional[str] = None
@@ -550,21 +570,37 @@ def ignore_pattern(regex, pattern):
                         )
                         or pattern.callback == django.views.static.serve)
 
-            patterns = [(regex, re.compile(regex, re.U), obj) for regex, obj in url_patterns
-                        if not ignore_pattern(regex, obj)]
+            patterns ={
+                regex: obj
+                for regex, obj in url_patterns
+                if not ignore_pattern(regex, obj)
+            }
 
             covered = set()
             for url in visited_urls:
-                for regex, compiled, obj in patterns:
-                    if regex not in covered and compiled.match(url[1:]): # strip leading /
-                        covered.add(regex)
-                        break
+                try:
+                    resolved = resolve(url)  # let Django resolve the URL for us
+                except Resolver404:
+                    warnings.warn(
+                        f"Unable to resolve visited URL {url}", UrlCoverageWarning
+                    )
+                    continue
+                if resolved.route not in patterns:
+                    warnings.warn(
+                        f"WARNING: url resolved to an unexpected pattern (url='{url}', "
+                        f"resolved to r'{resolved.route}'",
+                        UninterestingPatternWarning,
+                    )
+                    continue
+                covered.add(resolved.route)
 
             self.runner.coverage_data["url"] = {
-                "coverage": 1.0*len(covered)/len(patterns),
-                "covered": dict( (k, (o.lookup_str, k in covered)) for k,p,o in patterns ),
+                "coverage": 1.0 * len(covered) / len(patterns),
+                "covered": dict(
+                    (k, (o.lookup_str, k in covered)) for k, o in patterns.items()
+                ),
                 "format": 4,
-                }
+            }
 
             self.report_test_result("url")
         else:

From 0e9e18efa187857a8992aee867d659d3c0276d2f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 16 Jan 2026 16:21:49 -0400
Subject: [PATCH 533/707] chore: suppress expected warnings (#10272)

---
 ietf/utils/test_runner.py | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/ietf/utils/test_runner.py b/ietf/utils/test_runner.py
index df8ed1fd61..a23416e87f 100644
--- a/ietf/utils/test_runner.py
+++ b/ietf/utils/test_runner.py
@@ -90,7 +90,11 @@
 
 class UrlCoverageWarning(UserWarning):
     """Warning category for URL coverage-related warnings"""
-    pass
+    # URLs for which we don't expect patterns to match
+    IGNORE_URLS = (
+        "/_doesnotexist/",
+        "/sitemap.xml.",
+    )
 
 
 class UninterestingPatternWarning(UrlCoverageWarning):
@@ -581,9 +585,10 @@ def ignore_pattern(regex, pattern):
                 try:
                     resolved = resolve(url)  # let Django resolve the URL for us
                 except Resolver404:
-                    warnings.warn(
-                        f"Unable to resolve visited URL {url}", UrlCoverageWarning
-                    )
+                    if url not in UrlCoverageWarning.IGNORE_URLS:
+                        warnings.warn(
+                            f"Unable to resolve visited URL {url}", UrlCoverageWarning
+                        )
                     continue
                 if resolved.route not in patterns:
                     warnings.warn(

From 337a2311cbef23d46e4dc290742215de764a701c Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 16 Jan 2026 14:28:12 -0600
Subject: [PATCH 534/707] feat: rsync rfc content, store in blob, rebuild
 references (#10255)

* feat: rsync rfc content, store in blob, rebuild references

* fix: isolate subprocess. Guard against missing file

* fix: correct variable initialization. guard against unnecessary call

* test: mock rsync task calls

* fix: use list for typing rather than List

* fix: string formatting

* fix: generalize error string when there are no files to parse

* fix: use delete_on_close with NamedTemporaryFile

* fix: mtime is less distracting than m_time

* fix: store the notprepped file on the fs

* fix: typo

* fix: fetch json, remove unneeded unlink

* chore: ruff

* fix: use list for typing

* fix: typo

* feat: bulk load rfcs into blob storage

* fix: restrict the rsync_helper to rsync

* test: test ietf.sync.utils

* chore: honor typing choices

* test: sync task tests

* refactor: isolate the rsync from-file construction and test it

* chore: ruff

* fix: reflect current changes in older test

* fix: address incorrect test assumption

* chore: adhere to task naming conventions
---
 ietf/doc/tasks.py        | 21 ++++++++++
 ietf/doc/tests_utils.py  |  4 +-
 ietf/doc/utils.py        | 48 +++++++++++++++--------
 ietf/settings.py         |  1 +
 ietf/sync/tasks.py       | 50 ++++++++++++++++++++++++
 ietf/sync/tests.py       | 82 +++++++++++++++++++++++++++++++++++++++-
 ietf/sync/tests_utils.py | 82 ++++++++++++++++++++++++++++++++++++++++
 ietf/sync/utils.py       | 69 +++++++++++++++++++++++++++++++++
 8 files changed, 338 insertions(+), 19 deletions(-)
 create mode 100644 ietf/sync/tests_utils.py
 create mode 100644 ietf/sync/utils.py

diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 4f7fe37782..02b7c2a07d 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -29,6 +29,7 @@
 from .utils import (
     generate_idnits2_rfc_status,
     generate_idnits2_rfcs_obsoleted,
+    rebuild_reference_relations,
     update_or_create_draft_bibxml_file,
     ensure_draft_bibxml_path_exists,
     investigate_fragment,
@@ -128,3 +129,23 @@ def investigate_fragment_task(name_fragment: str):
         "name_fragment": name_fragment,
         "results": investigate_fragment(name_fragment),
     }
+
+@shared_task
+def rebuild_reference_relations_task(doc_names: list[str]):
+    log.log(f"Task: Rebuilding reference relations for {doc_names}")
+    for doc in Document.objects.filter(name__in=doc_names, type__in=["rfc", "draft"]):
+        filenames = dict()
+        base = (
+            settings.RFC_PATH
+            if doc.type_id == "rfc"
+            else settings.INTERNET_ALL_DRAFTS_ARCHIVE_DIR
+        )
+        stem = doc.name if doc.type_id == "rfc" else f"{doc.name}-{doc.rev}"
+        for ext in ["xml", "txt"]:
+            path = Path(base) / f"{stem}.{ext}"
+            if path.is_file():
+                filenames[ext] = str(path)
+        if len(filenames) > 0:
+            rebuild_reference_relations(doc, filenames)
+        else:
+            log.log(f"Found no content for {stem}")
diff --git a/ietf/doc/tests_utils.py b/ietf/doc/tests_utils.py
index ef71f6ae6e..a2784bc85e 100644
--- a/ietf/doc/tests_utils.py
+++ b/ietf/doc/tests_utils.py
@@ -389,13 +389,13 @@ def test_requires_txt_or_xml(self):
         result = rebuild_reference_relations(self.doc, {})
         self.assertCountEqual(result.keys(), ['errors'])
         self.assertEqual(len(result['errors']), 1)
-        self.assertIn('No Internet-Draft text available', result['errors'][0],
+        self.assertIn('No file available', result['errors'][0],
                       'Error should be reported if no Internet-Draft file is given')
 
         result = rebuild_reference_relations(self.doc, {'md': 'cant-do-this.md'})
         self.assertCountEqual(result.keys(), ['errors'])
         self.assertEqual(len(result['errors']), 1)
-        self.assertIn('No Internet-Draft text available', result['errors'][0],
+        self.assertIn('No file available', result['errors'][0],
                       'Error should be reported if no XML or plaintext file is given')
 
     @patch.object(XMLDraft, 'get_refs')
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 0715471551..42fab7d472 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -941,50 +941,66 @@ def rebuild_reference_relations(doc, filenames):
 
     filenames should be a dict mapping file ext (i.e., type) to the full path of each file.
     """
-    if doc.type.slug != 'draft':
+    if doc.type.slug not in ["draft", "rfc"]:
         return None
+    
+    log.log(f"Rebuilding reference relations for {doc.name}")
 
     # try XML first
-    if 'xml' in filenames:
-        refs = XMLDraft(filenames['xml']).get_refs()
-    elif 'txt' in filenames:
-        filename = filenames['txt']
+    if "xml" in filenames:
+        refs = XMLDraft(filenames["xml"]).get_refs()
+    elif "txt" in filenames:
+        filename = filenames["txt"]
         try:
             refs = draft.PlaintextDraft.from_file(filename).get_refs()
         except IOError as e:
-            return { 'errors': ["%s :%s" %  (e.strerror, filename)] }
+            return {"errors": [f"{e.strerror}: {filename}"]}
     else:
-        return {'errors': ['No Internet-Draft text available for rebuilding reference relations. Need XML or plaintext.']}
+        return {
+            "errors": [
+                "No file available for rebuilding reference relations. Need XML or plaintext."
+            ]
+        }
 
-    doc.relateddocument_set.filter(relationship__slug__in=['refnorm','refinfo','refold','refunk']).delete()
+    doc.relateddocument_set.filter(
+        relationship__slug__in=["refnorm", "refinfo", "refold", "refunk"]
+    ).delete()
 
     warnings = []
     errors = []
     unfound = set()
-    for ( ref, refType ) in refs.items():
+    for ref, refType in refs.items():
         refdoc = Document.objects.filter(name=ref)
         if not refdoc and re.match(r"^draft-.*-\d{2}$", ref):
             refdoc = Document.objects.filter(name=ref[:-3])
         count = refdoc.count()
         if count == 0:
-            unfound.add( "%s" % ref )
+            unfound.add("%s" % ref)
             continue
         elif count > 1:
-            errors.append("Too many Document objects found for %s"%ref)
+            errors.append("Too many Document objects found for %s" % ref)
         else:
             # Don't add references to ourself
             if doc != refdoc[0]:
-                RelatedDocument.objects.get_or_create( source=doc, target=refdoc[ 0 ], relationship=DocRelationshipName.objects.get( slug='ref%s' % refType ) )
+                RelatedDocument.objects.get_or_create(
+                    source=doc,
+                    target=refdoc[0],
+                    relationship=DocRelationshipName.objects.get(
+                        slug="ref%s" % refType
+                    ),
+                )
     if unfound:
-        warnings.append('There were %d references with no matching Document'%len(unfound))
+        warnings.append(
+            "There were %d references with no matching Document" % len(unfound)
+        )
 
     ret = {}
     if errors:
-        ret['errors']=errors
+        ret["errors"] = errors
     if warnings:
-        ret['warnings']=warnings
+        ret["warnings"] = warnings
     if unfound:
-        ret['unfound']=list(unfound)
+        ret["unfound"] = list(unfound)
 
     return ret
 
diff --git a/ietf/settings.py b/ietf/settings.py
index fedd313ca0..fd8d86a1ab 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -811,6 +811,7 @@ def skip_unreadable_post(record):
     "polls",
     "procmaterials",
     "review",
+    "rfc",
     "slides",
     "staging",
     "statchg",
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index e4174d3729..fc75a056ed 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -4,6 +4,8 @@
 #
 import datetime
 import io
+from pathlib import Path
+from tempfile import NamedTemporaryFile
 import requests
 
 from celery import shared_task
@@ -12,9 +14,11 @@
 from django.utils import timezone
 
 from ietf.doc.models import DocEvent, RelatedDocument
+from ietf.doc.tasks import rebuild_reference_relations_task
 from ietf.sync import iana
 from ietf.sync import rfceditor
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
+from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils import log
 from ietf.utils.timezone import date_today
 
@@ -65,11 +69,16 @@ def rfc_editor_index_update_task(full_index=False):
     if len(errata_data) < rfceditor.MIN_ERRATA_RESULTS:
         log.log("Not enough errata entries, only %s" % len(errata_data))
         return  # failed
+    newly_published = set()
     for rfc_number, changes, doc, rfc_published in rfceditor.update_docs_from_rfc_index(
         index_data, errata_data, skip_older_than_date=skip_date
     ):
         for c in changes:
             log.log("RFC%s, %s: %s" % (rfc_number, doc.name, c))
+        if rfc_published:
+            newly_published.add(rfc_number)
+    if len(newly_published) > 0:
+        rsync_rfcs_from_rfceditor_task.delay(list(newly_published))
 
 
 @shared_task
@@ -222,3 +231,44 @@ def fix_subseries_docevents_task():
         DocEvent.objects.filter(type="sync_from_rfc_editor", desc=desc).update(
             time=obsoleting_time
         )
+
+@shared_task
+def rsync_rfcs_from_rfceditor_task(rfc_numbers: list[int]):
+    log.log(f"Rsyncing rfcs from rfc-editor: {rfc_numbers}")
+    from_file = None
+    with NamedTemporaryFile(mode="w", delete_on_close=False) as fp:
+        fp.write(build_from_file_content(rfc_numbers))
+        fp.close()
+        from_file = Path(fp.name)
+        rsync_helper(
+            [
+                "-a",
+                "--ignore-existing",
+                f"--include-from={from_file}",
+                "--exclude=*",
+                "rsync.rfc-editor.org::rfcs/",
+                f"{settings.RFC_PATH}",
+            ]
+        )
+    load_rfcs_into_blobdb(rfc_numbers)
+
+    rebuild_reference_relations_task.delay([f"rfc{num}" for num in rfc_numbers])
+
+
+@shared_task
+def load_rfcs_into_blobdb_task(start: int, end: int):
+    """Move file content for rfcs from rfc{start} to rfc{end} inclusive
+
+    As this is expected to be removed once the blobdb is populated, it
+    will truncate its work to a coded max end.
+    This will not overwrite any existing blob content, and will only
+    log a small complaint if asked to load a non-exsiting RFC.
+    """
+    # Protect us from ourselves
+    if end < start:
+        return
+    if start < 1:
+        start = 1
+    if end > 11000:  # Arbitrarily chosen
+        end = 11000
+    load_rfcs_into_blobdb(list(range(start, end + 1)))
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 888920ae9d..bcc87a43aa 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -889,8 +889,9 @@ class TaskTests(TestCase):
     @mock.patch("ietf.sync.tasks.rfceditor.update_docs_from_rfc_index")
     @mock.patch("ietf.sync.tasks.rfceditor.parse_index")
     @mock.patch("ietf.sync.tasks.requests.get")
+    @mock.patch("ietf.sync.tasks.rsync_rfcs_from_rfceditor_task.delay")
     def test_rfc_editor_index_update_task(
-        self, requests_get_mock, parse_index_mock, update_docs_mock
+        self, rsync_task_mock, requests_get_mock, parse_index_mock, update_docs_mock
     ) -> None:  # the annotation here prevents mypy from complaining about annotation-unchecked
         """rfc_editor_index_update_task calls helpers correctly
         
@@ -922,6 +923,7 @@ def json(self):
         rfc = RfcFactory()
     
         # Test with full_index = False
+        rsync_task_mock.return_value = None
         requests_get_mock.side_effect = (index_response, errata_response)  # will step through these
         parse_index_mock.return_value = MockIndexData(length=rfceditor.MIN_INDEX_RESULTS)
         update_docs_mock.return_value = (
@@ -947,10 +949,13 @@ def json(self):
         )
         self.assertIsNotNone(update_docs_kwargs["skip_older_than_date"])
 
+        self.assertFalse(rsync_task_mock.called)
+
         # Test again with full_index = True
         requests_get_mock.reset_mock()
         parse_index_mock.reset_mock()
         update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
         requests_get_mock.side_effect = (index_response, errata_response)  # will step through these
         tasks.rfc_editor_index_update_task(full_index=True)
 
@@ -971,40 +976,67 @@ def json(self):
         )
         self.assertIsNone(update_docs_kwargs["skip_older_than_date"])
 
+        self.assertFalse(rsync_task_mock.called)
+
+        # Test again where the index would cause a new RFC to come into existance
+        requests_get_mock.reset_mock()
+        parse_index_mock.reset_mock()
+        update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
+        requests_get_mock.side_effect = (
+            index_response,
+            errata_response,
+        )  # will step through these
+        update_docs_mock.return_value = (
+            (rfc.rfc_number, ("something changed",), rfc, True),
+        )
+        tasks.rfc_editor_index_update_task(full_index=True)
+        self.assertTrue(rsync_task_mock.called)
+        rsync_task_args, rsync_task_kwargs = rsync_task_mock.call_args
+        self.assertEqual((([rfc.rfc_number],), {}), (rsync_task_args, rsync_task_kwargs))
+
         # Test error handling
         requests_get_mock.reset_mock()
         parse_index_mock.reset_mock()
         update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
         requests_get_mock.side_effect = requests.Timeout  # timeout on every get()
         tasks.rfc_editor_index_update_task(full_index=False)
         self.assertFalse(parse_index_mock.called)
         self.assertFalse(update_docs_mock.called)
+        self.assertFalse(rsync_task_mock.called)
         
         requests_get_mock.reset_mock()
         parse_index_mock.reset_mock()
         update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
         requests_get_mock.side_effect = [index_response, requests.Timeout]  # timeout second get()
         tasks.rfc_editor_index_update_task(full_index=False)
         self.assertFalse(update_docs_mock.called)
+        self.assertFalse(rsync_task_mock.called)
 
         requests_get_mock.reset_mock()
         parse_index_mock.reset_mock()
         update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
         requests_get_mock.side_effect = [index_response, errata_response]
         # feed in an index that is too short
         parse_index_mock.return_value = MockIndexData(length=rfceditor.MIN_INDEX_RESULTS - 1)
         tasks.rfc_editor_index_update_task(full_index=False)
         self.assertTrue(parse_index_mock.called)
         self.assertFalse(update_docs_mock.called)
+        self.assertFalse(rsync_task_mock.called)
 
         requests_get_mock.reset_mock()
         parse_index_mock.reset_mock()
         update_docs_mock.reset_mock()
+        rsync_task_mock.reset_mock()
         requests_get_mock.side_effect = [index_response, errata_response]
         errata_response.json_length = rfceditor.MIN_ERRATA_RESULTS - 1  # too short
         parse_index_mock.return_value = MockIndexData(length=rfceditor.MIN_INDEX_RESULTS)
         tasks.rfc_editor_index_update_task(full_index=False)
         self.assertFalse(update_docs_mock.called)
+        self.assertFalse(rsync_task_mock.called)
 
     @override_settings(RFC_EDITOR_QUEUE_URL="https://rfc-editor.example.com/queue/")
     @mock.patch("ietf.sync.tasks.update_drafts_from_queue")
@@ -1134,3 +1166,51 @@ def test_iana_protocols_update_task(
         self.assertTrue(requests_get_mock.called)
         self.assertFalse(parse_protocols_mock.called)
         self.assertFalse(update_rfc_log_mock.called)
+
+    @mock.patch("ietf.sync.tasks.rsync_helper")
+    @mock.patch("ietf.sync.tasks.load_rfcs_into_blobdb")
+    @mock.patch("ietf.sync.tasks.rebuild_reference_relations_task.delay")
+    def test_rsync_rfcs_from_rfceditor_task(
+        self,
+        rebuild_relations_mock,
+        load_blobs_mock,
+        rsync_helper_mock,
+    ):
+        tasks.rsync_rfcs_from_rfceditor_task([12345, 54321])
+        self.assertTrue(rsync_helper_mock.called)
+        self.assertTrue(load_blobs_mock.called)
+        load_blobs_args, load_blobs_kwargs = load_blobs_mock.call_args
+        self.assertEqual(load_blobs_args, ([12345, 54321],))
+        self.assertEqual(load_blobs_kwargs, {})
+        self.assertTrue(rebuild_relations_mock.called)
+        rebuild_args, rebuild_kwargs = rebuild_relations_mock.call_args
+        self.assertEqual(rebuild_args, (["rfc12345", "rfc54321"],))
+        self.assertEqual(rebuild_kwargs, {})
+
+    @mock.patch("ietf.sync.tasks.load_rfcs_into_blobdb")
+    def test_load_rfcs_into_blobdb_task(
+        self,
+        load_blobs_mock,
+    ):
+        tasks.load_rfcs_into_blobdb_task(5, 3)
+        self.assertFalse(load_blobs_mock.called)
+        load_blobs_mock.reset_mock()
+        tasks.load_rfcs_into_blobdb_task(-1, 1)
+        self.assertTrue(load_blobs_mock.called)
+        mock_args, mock_kwargs = load_blobs_mock.call_args
+        self.assertEqual(mock_args, ([1],))
+        self.assertEqual(mock_kwargs, {})
+        load_blobs_mock.reset_mock()
+        tasks.load_rfcs_into_blobdb_task(10999, 50000)
+        self.assertTrue(load_blobs_mock.called)
+        mock_args, mock_kwargs = load_blobs_mock.call_args
+        self.assertEqual(mock_args, ([10999, 11000],))
+        self.assertEqual(mock_kwargs, {})
+        load_blobs_mock.reset_mock()
+        tasks.load_rfcs_into_blobdb_task(3261, 3263)
+        self.assertTrue(load_blobs_mock.called)
+        mock_args, mock_kwargs = load_blobs_mock.call_args
+        self.assertEqual(mock_args, ([3261, 3262, 3263],))
+        self.assertEqual(mock_kwargs, {})
+
+
diff --git a/ietf/sync/tests_utils.py b/ietf/sync/tests_utils.py
new file mode 100644
index 0000000000..eb4b4ddf74
--- /dev/null
+++ b/ietf/sync/tests_utils.py
@@ -0,0 +1,82 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from pathlib import Path
+from tempfile import TemporaryDirectory
+
+from django.test import override_settings
+from ietf import settings
+from ietf.doc.storage_utils import exists_in_storage, retrieve_str
+from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
+from ietf.utils.test_utils import TestCase
+
+
+class RsyncHelperTests(TestCase):
+    def test_rsync_helper(self):
+        with (
+            TemporaryDirectory() as source_dir,
+            TemporaryDirectory() as dest_dir,
+        ):
+            with (Path(source_dir) / "canary.txt").open("w") as canary_source_file:
+                canary_source_file.write("chirp")
+            rsync_helper(
+                [
+                    "-a",
+                    f"{source_dir}/",
+                    f"{dest_dir}/",
+                ]
+            )
+            with (Path(dest_dir) / "canary.txt").open("r") as canary_dest_file:
+                chirp = canary_dest_file.read()
+            self.assertEqual(chirp, "chirp")
+
+    def test_build_from_file_content(self):
+        content = build_from_file_content([12345, 54321])
+        self.assertEqual(
+            content,
+            """prerelease/
+rfc12345.txt
+rfc12345.html
+rfc12345.xml
+rfc12345.pdf
+rfc12345.ps
+rfc12345.json
+prerelease/rfc12345.notprepped.xml
+rfc54321.txt
+rfc54321.html
+rfc54321.xml
+rfc54321.pdf
+rfc54321.ps
+rfc54321.json
+prerelease/rfc54321.notprepped.xml
+""",
+        )
+
+
+class RfcBlobUploadTests(TestCase):
+    def test_load_rfcs_into_blobdb(self):
+        with TemporaryDirectory() as faux_rfc_path:
+            with override_settings(RFC_PATH=faux_rfc_path):
+                rfc_path = Path(faux_rfc_path)
+                (rfc_path / "prerelease").mkdir()
+                for num in [12345, 54321]:
+                    for ext in settings.RFC_FILE_TYPES + ("json",):
+                        with (rfc_path / f"rfc{num}.{ext}").open("w") as f:
+                            f.write(ext)
+                    with (rfc_path / "rfc{num}.bogon").open("w") as f:
+                        f.write("bogon")
+                    with (rfc_path / "prerelease" / f"rfc{num}.notprepped.xml").open(
+                        "w"
+                    ) as f:
+                        f.write("notprepped")
+                load_rfcs_into_blobdb([12345, 54321])
+                for num in [12345, 54321]:
+                    for ext in settings.RFC_FILE_TYPES + ("json",):
+                        self.assertEqual(
+                            retrieve_str("rfc", f"{ext}/rfc{num}.{ext}"),
+                            ext,
+                        )
+                    self.assertFalse(exists_in_storage("rfc", f"bogon/rfc{num}.bogon"))
+                    self.assertEqual(
+                        retrieve_str("rfc", f"notprepped/rfc{num}.notprepped.xml"),
+                        "notprepped",
+                    )
diff --git a/ietf/sync/utils.py b/ietf/sync/utils.py
new file mode 100644
index 0000000000..5b5f8ff559
--- /dev/null
+++ b/ietf/sync/utils.py
@@ -0,0 +1,69 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import datetime
+import subprocess
+
+from pathlib import Path
+
+from django.conf import settings
+
+from ietf.utils import log
+from ietf.doc.storage_utils import AlreadyExistsError, store_bytes
+
+
+def rsync_helper(subprocess_arg_array: list[str]):
+    subprocess.run(["/usr/bin/rsync"]+subprocess_arg_array)
+
+def build_from_file_content(rfc_numbers: list[int]) -> str:
+    types_to_sync = settings.RFC_FILE_TYPES + ("json",)
+    lines = []
+    lines.append("prerelease/")
+    for num in rfc_numbers:
+        for ext in types_to_sync:
+            lines.append(f"rfc{num}.{ext}")
+        lines.append(f"prerelease/rfc{num}.notprepped.xml")
+    return "\n".join(lines)+"\n"
+
+def load_rfcs_into_blobdb(numbers: list[int]):
+    types_to_load = settings.RFC_FILE_TYPES + ("json",)
+    for num in numbers:
+        for ext in types_to_load:
+            fs_path = Path(settings.RFC_PATH) / f"rfc{num}.{ext}"
+            if fs_path.is_file():
+                with fs_path.open("rb") as f:
+                    bytes = f.read()
+                mtime = fs_path.stat().st_mtime
+                try:
+                    store_bytes(
+                        kind="rfc",
+                        name=f"{ext}/rfc{num}.{ext}",
+                        content=bytes,
+                        allow_overwrite=False,  # Intentionally not allowing overwrite.
+                        doc_name=f"rfc{num}",
+                        doc_rev=None,
+                        # Not setting content_type
+                        mtime=datetime.datetime.fromtimestamp(mtime, tz=datetime.UTC),
+                    )
+                except AlreadyExistsError as e:
+                    log.log(str(e))
+
+        # store the not-prepped xml
+        name = f"rfc{num}.notprepped.xml"
+        source = Path(settings.RFC_PATH) / "prerelease" / name
+        if source.is_file():
+            with open(source, "rb") as f:
+                bytes = f.read()
+            mtime = source.stat().st_mtime
+            try:
+                store_bytes(
+                    kind="rfc",
+                    name=f"notprepped/{name}",
+                    content=bytes,
+                    allow_overwrite=False,  # Intentionally not allowing overwrite.
+                    doc_name=f"rfc{num}",
+                    doc_rev=None,
+                    # Not setting content_type
+                    mtime=datetime.datetime.fromtimestamp(mtime, tz=datetime.UTC),
+                )
+            except AlreadyExistsError as e:
+                log.log(str(e))

From 37888b36b3f7e2262b857363ff7b3b4486dbcbe2 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 16 Jan 2026 16:28:53 -0400
Subject: [PATCH 535/707] feat: store blobs+set mtime in RFC publish API
 (#10260)

* feat: set mtime for RFC pub files

* chore: add rfc storage

* refactor: destination helper is fs-specific

* feat: RFC files->blobstore in publish API

* test: test blob writing

* chore: remove completed todo comment
---
 ietf/api/serializers_rpc.py |  7 +++++
 ietf/api/tests_views_rpc.py | 58 +++++++++++++++++++++++++++++++++----
 ietf/api/views_rpc.py       | 57 ++++++++++++++++++++++++++++++++----
 3 files changed, 111 insertions(+), 11 deletions(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 2223f04aeb..f2e735be7a 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -5,6 +5,7 @@
 
 from django.db import transaction
 from django.urls import reverse as urlreverse
+from django.utils import timezone
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import extend_schema_field
 from rest_framework import serializers
@@ -571,6 +572,12 @@ class RfcFileSerializer(serializers.Serializer):
             "file types, but filenames are otherwise ignored."
         ),
     )
+    mtime = serializers.DateTimeField(
+        required=False,
+        default=timezone.now,
+        default_timezone=datetime.UTC,
+        help_text="Modification timestamp to apply to uploaded files",
+    )
     replace = serializers.BooleanField(
         required=False,
         default=False,
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index ece2af1b85..ecb50ee76c 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -10,6 +10,7 @@
 from django.test.utils import override_settings
 from django.urls import reverse as urlreverse
 
+from ietf.blobdb.models import Blob
 from ietf.doc.factories import IndividualDraftFactory, WgDraftFactory, WgRfcFactory
 from ietf.doc.models import RelatedDocument, Document
 from ietf.group.factories import RoleFactory, GroupFactory
@@ -259,6 +260,31 @@ def _valid_post_data():
             )
             self.assertEqual(r.status_code, 400)
 
+            # Put a file in the way. Post should fail because replace = False
+            file_in_the_way = (rfc_path / f"rfc{unused_rfc_number}.txt")
+            file_in_the_way.touch()
+            r = self.client.post(
+                url,
+                _valid_post_data(),
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 409)  # conflict
+            file_in_the_way.unlink()
+            
+            # Put a blob in the way. Post should fail because replace = False
+            blob_in_the_way = Blob.objects.create(
+                bucket="rfc", name=f"txt/rfc{unused_rfc_number}.txt", content=b""
+            )
+            r = self.client.post(
+                url,
+                _valid_post_data(),
+                format="multipart",
+                headers={"X-Api-Key": "valid-token"},
+            )
+            self.assertEqual(r.status_code, 409)  # conflict
+            blob_in_the_way.delete()
+
             # valid post
             r = self.client.post(
                 url,
@@ -267,21 +293,41 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 200)
-            for suffix in [".xml", ".txt", ".html", ".pdf", ".json"]:
+            for extension in ["xml", "txt", "html", "pdf", "json"]:
+                filename = f"rfc{unused_rfc_number}.{extension}"
                 self.assertEqual(
-                    (rfc_path / f"rfc{unused_rfc_number}")
-                    .with_suffix(suffix)
+                    (rfc_path / filename)
                     .read_text(),
-                    f"This is {suffix}",
-                    f"{suffix} file should contain the expected content",
+                    f"This is .{extension}",
+                    f"{extension} file should contain the expected content",
+                )
+                self.assertEqual(
+                    bytes(
+                        Blob.objects.get(
+                            bucket="rfc", name=f"{extension}/{filename}"
+                        ).content
+                    ),
+                    f"This is .{extension}".encode("utf-8"),
+                    f"{extension} blob should contain the expected content",
                 )
+            # special case for notprepped
+            notprepped_fn = f"rfc{unused_rfc_number}.notprepped.xml"
             self.assertEqual(
                 (
-                    rfc_path / "prerelease" / f"rfc{unused_rfc_number}.notprepped.xml"
+                    rfc_path / "prerelease" / notprepped_fn
                 ).read_text(),
                 "This is .notprepped.xml",
                 ".notprepped.xml file should contain the expected content",
             )
+            self.assertEqual(
+                bytes(
+                    Blob.objects.get(
+                        bucket="rfc", name=f"notprepped/{notprepped_fn}"
+                    ).content
+                ),
+                b"This is .notprepped.xml",
+                ".notprepped.xml blob should contain the expected content",
+            )
 
             # re-post with replace = False should now fail
             r = self.client.post(
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index fce174ab72..542836a857 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -1,4 +1,5 @@
 # Copyright The IETF Trust 2023-2026, All Rights Reserved
+import os
 import shutil
 from pathlib import Path
 from tempfile import TemporaryDirectory
@@ -35,6 +36,7 @@
 )
 from ietf.doc.models import Document, DocHistory, RfcAuthor
 from ietf.doc.serializers import RfcAuthorSerializer
+from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
 from ietf.person.models import Email, Person
 
 
@@ -366,8 +368,8 @@ class RfcPubFilesView(APIView):
     api_key_endpoint = "ietf.api.views_rpc"
     parser_classes = [parsers.MultiPartParser]
 
-    def _destination(self, filename: str | Path) -> Path:
-        """Destination for an uploaded RFC file
+    def _fs_destination(self, filename: str | Path) -> Path:
+        """Destination for an uploaded RFC file in the filesystem
         
         Strips any path components in filename and returns an absolute Path.
         """
@@ -378,6 +380,23 @@ def _destination(self, filename: str | Path) -> Path:
             return rfc_path / "prerelease" / filename.name
         return rfc_path / filename.name
 
+    def _blob_destination(self, filename: str | Path) -> str:
+        """Destination name for an uploaded RFC file in the blob store
+        
+        Strips any path components in filename and returns an absolute Path.
+        """
+        filename = Path(filename)  # could potentially have directory components
+        extension = "".join(filename.suffixes)
+        if extension == ".notprepped.xml":
+            file_type = "notprepped"
+        elif extension[0] == ".":
+            file_type = extension[1:]
+        else:
+            raise serializers.ValidationError(
+                f"Extension does not begin with '.'!? ({filename})",
+            )
+        return f"{file_type}/{filename.name}"
+
     @extend_schema(
         operation_id="upload_rfc_files",
         summary="Upload files for a published RFC",
@@ -394,10 +413,17 @@ def post(self, request):
         uploaded_files = serializer.validated_data["contents"]  # list[UploadedFile]
         replace = serializer.validated_data["replace"]
         dest_stem = f"rfc{rfc.rfc_number}"
+        mtime = serializer.validated_data["mtime"]
+        mtimestamp = mtime.timestamp()
+        blob_kind = "rfc"
 
         # List of files that might exist for an RFC
         possible_rfc_files = [
-            self._destination(dest_stem + ext)
+            self._fs_destination(dest_stem + ext)
+            for ext in serializer.allowed_extensions
+        ]
+        possible_rfc_blobs = [
+            self._blob_destination(dest_stem + ext)
             for ext in serializer.allowed_extensions
         ]
         if not replace:
@@ -408,6 +434,14 @@ def post(self, request):
                         "File(s) already exist for this RFC",
                         code="files-exist",
                     )
+            for possible_existing_blob in possible_rfc_blobs:
+                if exists_in_storage(
+                    kind=blob_kind, name=possible_existing_blob
+                ):
+                    raise Conflict(
+                        "Blob(s) already exist for this RFC",
+                        code="blobs-exist",
+                    )
 
         with TemporaryDirectory() as tempdir:
             # Save files in a temporary directory. Use the uploaded filename
@@ -421,14 +455,27 @@ def post(self, request):
                 with tempfile_path.open("wb") as dest:
                     for chunk in upfile.chunks():
                         dest.write(chunk)
+                os.utime(tempfile_path, (mtimestamp, mtimestamp))
                 files_to_move.append(tempfile_path)
             # copy files to final location, removing any existing ones first if the
             # remove flag was set
             if replace:
                 for possible_existing_file in possible_rfc_files:
                     possible_existing_file.unlink(missing_ok=True)
+                for possible_existing_blob in possible_rfc_blobs:
+                    remove_from_storage(
+                        blob_kind, possible_existing_blob, warn_if_missing=False
+                    )
             for ftm in files_to_move:
-                shutil.move(ftm, self._destination(ftm))
-                # todo store in blob storage as well (need a bucket for RFCs)
+                with ftm.open("rb") as f:
+                    store_file(
+                        kind=blob_kind,
+                        name=self._blob_destination(ftm),
+                        file=f,
+                        doc_name=rfc.name,
+                        doc_rev=rfc.rev,  # expect None, but match whatever it is
+                        mtime=mtime,
+                    )
+                shutil.move(ftm, self._fs_destination(ftm))
 
         return Response(NotificationAckSerializer().data)

From 4aeb36e01803cf1fc93cc931aa53438417a75900 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 16 Jan 2026 16:46:48 -0400
Subject: [PATCH 536/707] chore: order is_auth'd middleware correctly (#10225)

Needs to be earlier than ConditionalGetMiddleware or the flag
will not be set for 304 responses.
---
 ietf/settings.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index fd8d86a1ab..1cda79e21b 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -454,6 +454,7 @@ def skip_unreadable_post(record):
     "django.contrib.sessions.middleware.SessionMiddleware",
     "django.contrib.auth.middleware.AuthenticationMiddleware",
     "django.contrib.messages.middleware.MessageMiddleware",
+    "ietf.middleware.is_authenticated_header_middleware",
     "django.middleware.http.ConditionalGetMiddleware",
     "simple_history.middleware.HistoryRequestMiddleware",
     # comment in this to get logging of SQL insert and update statements:
@@ -464,7 +465,6 @@ def skip_unreadable_post(record):
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "django.middleware.security.SecurityMiddleware",
     "ietf.middleware.unicode_nfkc_normalization_middleware",
-    "ietf.middleware.is_authenticated_header_middleware",
 ]
 
 ROOT_URLCONF = 'ietf.urls'

From 3ff0154ce5044802c586961c8216e74393bbf6f6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 16 Jan 2026 16:48:24 -0400
Subject: [PATCH 537/707] feat: include tickets in RegistrationResource
 (#10223)

---
 ietf/meeting/resources.py | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/ietf/meeting/resources.py b/ietf/meeting/resources.py
index 88562a88fe..490b75f925 100644
--- a/ietf/meeting/resources.py
+++ b/ietf/meeting/resources.py
@@ -21,7 +21,13 @@
                                  Attended,
                                  Registration, RegistrationTicket)
 
-from ietf.name.resources import MeetingTypeNameResource
+from ietf.name.resources import (
+    AttendanceTypeNameResource,
+    MeetingTypeNameResource,
+    RegistrationTicketTypeNameResource,
+)
+
+
 class MeetingResource(ModelResource):
     type             = ToOneField(MeetingTypeNameResource, 'type')
     schedule         = ToOneField('ietf.meeting.resources.ScheduleResource', 'schedule', null=True)
@@ -437,11 +443,16 @@ class Meta:
         }
 api.meeting.register(AttendedResource())
 
-from ietf.meeting.resources import MeetingResource
 from ietf.person.resources import PersonResource
 class RegistrationResource(ModelResource):
     meeting          = ToOneField(MeetingResource, 'meeting')
     person           = ToOneField(PersonResource, 'person', null=True)
+    tickets          = ToManyField(
+        'ietf.meeting.resources.RegistrationTicketResource',
+        'tickets',
+        full=True,
+    )
+    
     class Meta:
         queryset = Registration.objects.all()
         serializer = api.Serializer()
@@ -456,13 +467,17 @@ class Meta:
             "country_code": ALL,
             "email": ALL,
             "attended": ALL,
+            "checkedin": ALL,
             "meeting": ALL_WITH_RELATIONS,
             "person": ALL_WITH_RELATIONS,
+            "tickets": ALL_WITH_RELATIONS,
         }
 api.meeting.register(RegistrationResource())
 
 class RegistrationTicketResource(ModelResource):
     registration          = ToOneField(RegistrationResource, 'registration')
+    attendance_type       = ToOneField(AttendanceTypeNameResource, 'attendance_type')
+    ticket_type           = ToOneField(RegistrationTicketTypeNameResource, 'ticket_type')
     class Meta:
         queryset = RegistrationTicket.objects.all()
         serializer = api.Serializer()
@@ -471,8 +486,8 @@ class Meta:
         ordering = ['id', ]
         filtering = { 
             "id": ALL,
-            "ticket_type": ALL,
-            "attendance_type": ALL,
+            "ticket_type": ALL_WITH_RELATIONS,
+            "attendance_type": ALL_WITH_RELATIONS,
             "registration": ALL_WITH_RELATIONS,
         }
 api.meeting.register(RegistrationTicketResource())

From d53ceff5d408c0fc9daab4ebe7144e2507309fbf Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 21 Jan 2026 11:43:46 -0400
Subject: [PATCH 538/707] chore(dev): adjust dev settings for RFC file upload
 (#10287)

* chore(dev): disable nginx max_body_size

* chore(dev): create missing dest dir

Create the "prerelease" directory, if needed, when accepting RFC
publication files. Gated not to impact production, where this directory
should already exist.
---
 docker/configs/nginx-proxy.conf | 1 +
 ietf/api/views_rpc.py           | 8 +++++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/docker/configs/nginx-proxy.conf b/docker/configs/nginx-proxy.conf
index 3068cc71d7..5a9ae31ad0 100644
--- a/docker/configs/nginx-proxy.conf
+++ b/docker/configs/nginx-proxy.conf
@@ -4,6 +4,7 @@ server {
 
     proxy_read_timeout 1d;
     proxy_send_timeout 1d;
+    client_max_body_size 0;  # disable checking
     
     root /var/www/html;
     index index.html index.htm index.nginx-debian.html;
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 542836a857..ea9c6348ca 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -476,6 +476,12 @@ def post(self, request):
                         doc_rev=rfc.rev,  # expect None, but match whatever it is
                         mtime=mtime,
                     )
-                shutil.move(ftm, self._fs_destination(ftm))
+                destination = self._fs_destination(ftm)
+                if (
+                    settings.SERVER_MODE != "production"
+                    and not destination.parent.exists()
+                ):
+                    destination.parent.mkdir()
+                shutil.move(ftm, destination)
 
         return Response(NotificationAckSerializer().data)

From 50653e961556cf803b43707fad17c51077c68870 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 21 Jan 2026 11:44:49 -0400
Subject: [PATCH 539/707] fix: add Blob.__str__() (#10284)

Keeps the model in sync with mailarchive's verison
---
 ietf/blobdb/models.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ietf/blobdb/models.py b/ietf/blobdb/models.py
index fa7831f203..27325ada5d 100644
--- a/ietf/blobdb/models.py
+++ b/ietf/blobdb/models.py
@@ -64,6 +64,9 @@ class Meta:
             ),
         ]
 
+    def __str__(self):
+        return f"{self.bucket}:{self.name}"
+
     def save(self, **kwargs):
         db = get_blobdb()
         with transaction.atomic(using=db):

From 4ff48057e8dfc68d467effa396854dd7fdbede9a Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 21 Jan 2026 09:50:02 -0600
Subject: [PATCH 540/707] fix: restrict rfc bulkload to those with a Document
 object (#10289)

* fix: restrict rfc bulkload to those with a Document object

* fix: only query Document once

* test: update test to match check for existing Document
---
 ietf/sync/tests_utils.py |  2 ++
 ietf/sync/utils.py       | 64 ++++++++++++++++++++++------------------
 2 files changed, 38 insertions(+), 28 deletions(-)

diff --git a/ietf/sync/tests_utils.py b/ietf/sync/tests_utils.py
index eb4b4ddf74..bb4a859e30 100644
--- a/ietf/sync/tests_utils.py
+++ b/ietf/sync/tests_utils.py
@@ -5,6 +5,7 @@
 
 from django.test import override_settings
 from ietf import settings
+from ietf.doc.factories import RfcFactory
 from ietf.doc.storage_utils import exists_in_storage, retrieve_str
 from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils.test_utils import TestCase
@@ -59,6 +60,7 @@ def test_load_rfcs_into_blobdb(self):
                 rfc_path = Path(faux_rfc_path)
                 (rfc_path / "prerelease").mkdir()
                 for num in [12345, 54321]:
+                    RfcFactory(rfc_number=num)
                     for ext in settings.RFC_FILE_TYPES + ("json",):
                         with (rfc_path / f"rfc{num}.{ext}").open("w") as f:
                             f.write(ext)
diff --git a/ietf/sync/utils.py b/ietf/sync/utils.py
index 5b5f8ff559..b3bdd8d206 100644
--- a/ietf/sync/utils.py
+++ b/ietf/sync/utils.py
@@ -6,8 +6,8 @@
 from pathlib import Path
 
 from django.conf import settings
-
 from ietf.utils import log
+from ietf.doc.models import Document
 from ietf.doc.storage_utils import AlreadyExistsError, store_bytes
 
 
@@ -26,17 +26,42 @@ def build_from_file_content(rfc_numbers: list[int]) -> str:
 
 def load_rfcs_into_blobdb(numbers: list[int]):
     types_to_load = settings.RFC_FILE_TYPES + ("json",)
+    rfc_docs = Document.objects.filter(type="rfc", rfc_number__in=numbers).values_list("rfc_number", flat=True)
     for num in numbers:
-        for ext in types_to_load:
-            fs_path = Path(settings.RFC_PATH) / f"rfc{num}.{ext}"
-            if fs_path.is_file():
-                with fs_path.open("rb") as f:
+        if num in rfc_docs:
+            for ext in types_to_load:
+                fs_path = Path(settings.RFC_PATH) / f"rfc{num}.{ext}"
+                if fs_path.is_file():
+                    with fs_path.open("rb") as f:
+                        bytes = f.read()
+                    mtime = fs_path.stat().st_mtime
+                    try:
+                        store_bytes(
+                            kind="rfc",
+                            name=f"{ext}/rfc{num}.{ext}",
+                            content=bytes,
+                            allow_overwrite=False,  # Intentionally not allowing overwrite.
+                            doc_name=f"rfc{num}",
+                            doc_rev=None,
+                            # Not setting content_type
+                            mtime=datetime.datetime.fromtimestamp(
+                                mtime, tz=datetime.UTC
+                            ),
+                        )
+                    except AlreadyExistsError as e:
+                        log.log(str(e))
+
+            # store the not-prepped xml
+            name = f"rfc{num}.notprepped.xml"
+            source = Path(settings.RFC_PATH) / "prerelease" / name
+            if source.is_file():
+                with open(source, "rb") as f:
                     bytes = f.read()
-                mtime = fs_path.stat().st_mtime
+                mtime = source.stat().st_mtime
                 try:
                     store_bytes(
                         kind="rfc",
-                        name=f"{ext}/rfc{num}.{ext}",
+                        name=f"notprepped/{name}",
                         content=bytes,
                         allow_overwrite=False,  # Intentionally not allowing overwrite.
                         doc_name=f"rfc{num}",
@@ -46,24 +71,7 @@ def load_rfcs_into_blobdb(numbers: list[int]):
                     )
                 except AlreadyExistsError as e:
                     log.log(str(e))
-
-        # store the not-prepped xml
-        name = f"rfc{num}.notprepped.xml"
-        source = Path(settings.RFC_PATH) / "prerelease" / name
-        if source.is_file():
-            with open(source, "rb") as f:
-                bytes = f.read()
-            mtime = source.stat().st_mtime
-            try:
-                store_bytes(
-                    kind="rfc",
-                    name=f"notprepped/{name}",
-                    content=bytes,
-                    allow_overwrite=False,  # Intentionally not allowing overwrite.
-                    doc_name=f"rfc{num}",
-                    doc_rev=None,
-                    # Not setting content_type
-                    mtime=datetime.datetime.fromtimestamp(mtime, tz=datetime.UTC),
-                )
-            except AlreadyExistsError as e:
-                log.log(str(e))
+        else:
+            log.log(
+                f"Skipping loading rfc{num} into blobdb as no matching Document exists"
+            )

From a28594eecbe5000950ccd6a12bcadd5c61018183 Mon Sep 17 00:00:00 2001
From: Ryan Cross <rcross@amsl.com>
Date: Wed, 21 Jan 2026 09:55:37 -0800
Subject: [PATCH 541/707] feat: add option to email users about duplicate
 accounts. Fixes #8174. (#9850)

* feat: add option to email users about duplicate accounts. Fixes #8174.

* fix: split person merge into two views

* fix: use form for validation

* fix: update text of merge request email

* fix: update copyright date

* fix: use custom field classes in MergeRequestForm
---
 ietf/person/forms.py                          | 21 ++++-
 ietf/person/tests.py                          | 34 ++++++--
 ietf/person/urls.py                           |  4 +
 ietf/person/views.py                          | 86 ++++++++++++++++---
 ietf/templates/person/merge.html              | 36 +-------
 ietf/templates/person/merge_request_email.txt | 23 +++++
 ietf/templates/person/merge_submit.html       | 57 ++++++++++++
 ietf/templates/person/send_merge_request.html | 20 +++++
 ietf/utils/fields.py                          | 23 ++++-
 9 files changed, 254 insertions(+), 50 deletions(-)
 create mode 100644 ietf/templates/person/merge_request_email.txt
 create mode 100644 ietf/templates/person/merge_submit.html
 create mode 100644 ietf/templates/person/send_merge_request.html

diff --git a/ietf/person/forms.py b/ietf/person/forms.py
index 81ee362561..7eef8aa17b 100644
--- a/ietf/person/forms.py
+++ b/ietf/person/forms.py
@@ -1,15 +1,26 @@
-# Copyright The IETF Trust 2018-2020, All Rights Reserved
+# Copyright The IETF Trust 2018-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 from django import forms
+
 from ietf.person.models import Person
+from ietf.utils.fields import MultiEmailField, NameAddrEmailField
 
 
 class MergeForm(forms.Form):
     source = forms.IntegerField(label='Source Person ID')
     target = forms.IntegerField(label='Target Person ID')
 
+    def __init__(self, *args, **kwargs):
+        self.readonly = False
+        if 'readonly' in kwargs:
+            self.readonly = kwargs.pop('readonly')
+        super().__init__(*args, **kwargs)
+        if self.readonly:
+            self.fields['source'].widget.attrs['readonly'] = True
+            self.fields['target'].widget.attrs['readonly'] = True
+
     def clean_source(self):
         return self.get_person(self.cleaned_data['source'])
 
@@ -21,3 +32,11 @@ def get_person(self, pk):
             return Person.objects.get(pk=pk)
         except Person.DoesNotExist:
             raise forms.ValidationError("ID does not exist")
+
+
+class MergeRequestForm(forms.Form):
+    to = MultiEmailField()
+    frm = NameAddrEmailField()
+    reply_to = MultiEmailField()
+    subject = forms.CharField()
+    body = forms.CharField(widget=forms.Textarea)
diff --git a/ietf/person/tests.py b/ietf/person/tests.py
index 6326362fd8..f55d8b8a34 100644
--- a/ietf/person/tests.py
+++ b/ietf/person/tests.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2014-2022, All Rights Reserved
+# Copyright The IETF Trust 2014-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -10,7 +10,6 @@
 from PIL import Image
 from pyquery import PyQuery
 
-
 from django.core.exceptions import ValidationError
 from django.http import HttpRequest
 from django.test import override_settings
@@ -23,6 +22,7 @@
 from ietf.community.models import CommunityList
 from ietf.group.factories import RoleFactory
 from ietf.group.models import Group
+from ietf.message.models import Message
 from ietf.nomcom.models import NomCom
 from ietf.nomcom.test_data import nomcom_test_data
 from ietf.nomcom.factories import NomComFactory, NomineeFactory, NominationFactory, FeedbackFactory, PositionFactory
@@ -208,13 +208,13 @@ def test_merge(self):
     def test_merge_with_params(self):
         p1 = get_person_no_user()
         p2 = PersonFactory()
-        url = urlreverse("ietf.person.views.merge") + "?source={}&target={}".format(p1.pk, p2.pk)
+        url = urlreverse("ietf.person.views.merge_submit") + "?source={}&target={}".format(p1.pk, p2.pk)
         login_testing_unauthorized(self, "secretary", url)
         r = self.client.get(url)
         self.assertContains(r, 'retaining login', status_code=200)
 
     def test_merge_with_params_bad_id(self):
-        url = urlreverse("ietf.person.views.merge") + "?source=1000&target=2000"
+        url = urlreverse("ietf.person.views.merge_submit") + "?source=1000&target=2000"
         login_testing_unauthorized(self, "secretary", url)
         r = self.client.get(url)
         self.assertContains(r, 'ID does not exist', status_code=200)
@@ -222,7 +222,7 @@ def test_merge_with_params_bad_id(self):
     def test_merge_post(self):
         p1 = get_person_no_user()
         p2 = PersonFactory()
-        url = urlreverse("ietf.person.views.merge")
+        url = urlreverse("ietf.person.views.merge_submit")
         expected_url = urlreverse("ietf.secr.rolodex.views.view", kwargs={'id': p2.pk})
         login_testing_unauthorized(self, "secretary", url)
         data = {'source': p1.pk, 'target': p2.pk}
@@ -451,6 +451,30 @@ def test_dots(self):
         ncchair = RoleFactory(group__acronym='nomcom2020',group__type_id='nomcom',name_id='chair').person
         self.assertEqual(get_dots(ncchair),['nomcom'])
 
+    def test_send_merge_request(self):
+        empty_outbox()
+        message_count_before = Message.objects.count()
+        source = PersonFactory()
+        target = PersonFactory()
+        url = urlreverse('ietf.person.views.send_merge_request')
+        url = url + f'?source={source.pk}&target={target.pk}'
+        login_testing_unauthorized(self, 'secretary', url)
+        r = self.client.get(url)
+        initial = r.context['form'].initial
+        subject = 'Action requested: Merging possible duplicate IETF Datatracker accounts'
+        self.assertEqual(initial['to'], ', '.join([source.user.username, target.user.username]))
+        self.assertEqual(initial['subject'], subject)
+        self.assertEqual(initial['reply_to'], 'support@ietf.org')
+        self.assertEqual(r.status_code, 200)
+        r = self.client.post(url, data=initial)
+        self.assertEqual(r.status_code, 302)
+        self.assertEqual(len(outbox), 1)
+        self.assertIn(source.user.username, outbox[0]['To'])
+        message_count_after = Message.objects.count()
+        message = Message.objects.last()
+        self.assertEqual(message_count_after, message_count_before + 1)
+        self.assertIn(source.user.username, message.to)
+
 
 class TaskTests(TestCase):
     @mock.patch("ietf.person.tasks.log.log")
diff --git a/ietf/person/urls.py b/ietf/person/urls.py
index 867646fe39..f3eccd04b7 100644
--- a/ietf/person/urls.py
+++ b/ietf/person/urls.py
@@ -1,8 +1,12 @@
+# Copyright The IETF Trust 2009-2025, All Rights Reserved
+# -*- coding: utf-8 -*-
 from ietf.person import views, ajax
 from ietf.utils.urls import url
 
 urlpatterns = [
     url(r'^merge/?$', views.merge),
+    url(r'^merge/submit/?$', views.merge_submit),
+    url(r'^merge/send_request/?$', views.send_merge_request),
     url(r'^search/(?P<model_name>(person|email))/$', views.ajax_select2_search),
     url(r'^(?P<personid>[0-9]+)/email.json$', ajax.person_email_json),
     url(r'^(?P<email_or_name>[^/]+)$', views.profile),
diff --git a/ietf/person/views.py b/ietf/person/views.py
index a37b164311..d0b5912431 100644
--- a/ietf/person/views.py
+++ b/ietf/person/views.py
@@ -1,14 +1,16 @@
-# Copyright The IETF Trust 2012-2020, All Rights Reserved
+# Copyright The IETF Trust 2012-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 from io import StringIO, BytesIO
 from PIL import Image
 
+from django.conf import settings
 from django.contrib import messages
 from django.db.models import Q
 from django.http import HttpResponse, Http404
 from django.shortcuts import render, redirect
+from django.template.loader import render_to_string
 from django.utils import timezone
 
 import debug                            # pyflakes:ignore
@@ -16,8 +18,9 @@
 from ietf.ietfauth.utils import role_required
 from ietf.person.models import Email, Person
 from ietf.person.fields import select2_id_name_json
-from ietf.person.forms import MergeForm
+from ietf.person.forms import MergeForm, MergeRequestForm
 from ietf.person.utils import handle_users, merge_persons, lookup_persons
+from ietf.utils.mail import send_mail_text
 
 
 def ajax_select2_search(request, model_name):
@@ -98,16 +101,19 @@ def photo(request, email_or_name):
 @role_required("Secretariat")
 def merge(request):
     form = MergeForm()
-    method = 'get'
+    return render(request, 'person/merge.html', {'form': form})
+
+
+@role_required("Secretariat")
+def merge_submit(request):
     change_details = ''
     warn_messages = []
     source = None
     target = None
 
     if request.method == "GET":
-        form = MergeForm()
         if request.GET:
-            form = MergeForm(request.GET)
+            form = MergeForm(request.GET, readonly=True)
             if form.is_valid():
                 source = form.cleaned_data.get('source')
                 target = form.cleaned_data.get('target')
@@ -116,12 +122,9 @@ def merge(request):
                     if source.user.last_login and target.user.last_login and source.user.last_login > target.user.last_login:
                         warn_messages.append('WARNING: The most recently used login is being deleted!')
                 change_details = handle_users(source, target, check_only=True)
-                method = 'post'
-            else:
-                method = 'get'
 
     if request.method == "POST":
-        form = MergeForm(request.POST)
+        form = MergeForm(request.POST, readonly=True)
         if form.is_valid():
             source = form.cleaned_data.get('source')
             source_id = source.id
@@ -136,11 +139,72 @@ def merge(request):
                 messages.error(request, output)
             return redirect('ietf.secr.rolodex.views.view', id=target.pk)
 
-    return render(request, 'person/merge.html', {
+    return render(request, 'person/merge_submit.html', {
         'form': form,
-        'method': method,
         'change_details': change_details,
         'source': source,
         'target': target,
         'warn_messages': warn_messages,
     })
+
+
+@role_required("Secretariat")
+def send_merge_request(request):
+    if request.method == 'GET':
+        merge_form = MergeForm(request.GET)
+        if merge_form.is_valid():
+            source = merge_form.cleaned_data['source']
+            target = merge_form.cleaned_data['target']
+            to = []
+            if source.email():
+                to.append(source.email().address)
+            if target.email():
+                to.append(target.email().address)
+            if source.user:
+                source_account = source.user.username
+            else:
+                source_account = source.email()
+            if target.user:
+                target_account = target.user.username
+            else:
+                target_account = target.email()
+            sender_name = request.user.person.name
+            subject = 'Action requested: Merging possible duplicate IETF Datatracker accounts'
+            context = {
+                'source_account': source_account,
+                'target_account': target_account,
+                'sender_name': sender_name,
+            }
+            body = render_to_string('person/merge_request_email.txt', context)
+            initial = {
+                'to': ', '.join(to),
+                'frm': settings.DEFAULT_FROM_EMAIL,
+                'reply_to': 'support@ietf.org',
+                'subject': subject,
+                'body': body,
+                'by': request.user.person.pk,
+            }
+            form = MergeRequestForm(initial=initial)
+        else:
+            messages.error(request, "Error requesting merge email: " + merge_form.errors.as_text())
+            return redirect("ietf.person.views.merge")
+
+    if request.method == 'POST':
+        form = MergeRequestForm(request.POST)
+        if form.is_valid():
+            extra = {"Reply-To": form.cleaned_data.get("reply_to")}
+            send_mail_text(
+                request,
+                form.cleaned_data.get("to"),
+                form.cleaned_data.get("frm"),
+                form.cleaned_data.get("subject"),
+                form.cleaned_data.get("body"),
+                extra=extra,
+            )
+
+            messages.success(request, "The merge confirmation email was sent.")
+            return redirect("ietf.person.views.merge")
+
+    return render(request, "person/send_merge_request.html", {
+        "form": form,
+    })
diff --git a/ietf/templates/person/merge.html b/ietf/templates/person/merge.html
index 36499ecdbc..5c3e6b0938 100644
--- a/ietf/templates/person/merge.html
+++ b/ietf/templates/person/merge.html
@@ -1,5 +1,5 @@
+{# Copyright The IETF Trust 2018-2025, All Rights Reserved #}
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
 {% load static %}
 {% load django_bootstrap5 %}
 {% block title %}Merge Persons{% endblock %}
@@ -8,45 +8,17 @@ <h1>Merge Person Records</h1>
     <p class="alert alert-info my-3">
         This tool will merge two Person records into one.  If both records have logins and you want to retain the one on the left, use the Swap button to swap source and target records.
     </p>
-    <form method="{{ method }}">
-        {% if method == 'post' %}
-            {% csrf_token %}
-        {% endif %}
+    <form method="GET" action="{% url 'ietf.person.views.merge_submit' %}">
         <div class="row mt-3">
             <div class="col-md-6">
                 {% bootstrap_field form.source %}
-                {% if source %}
-                    {% with person=source %}
-                        {% include "person/person_info.html" %}
-                    {% endwith %}
-                {% endif %}
             </div>
             <div class="col-md-6">
                 {% bootstrap_field form.target %}
-                {% if target %}
-                    {% with person=target %}
-                        {% include "person/person_info.html" %}
-                    {% endwith %}
-                {% endif %}
             </div>
         </div>
-        {% if change_details %}<div class="alert alert-info my-3" role="alert">{{ change_details }}</div>{% endif %}
-        {% if warn_messages %}
-            {% for message in warn_messages %}<div class="alert alert-warning my-3" role="alert">{{ message }}</div>{% endfor %}
-        {% endif %}
-        {% if method == 'post' %}
-            <a class="btn btn-primary"
-               href="{% url 'ietf.person.views.merge' %}?source={{ target.pk }}&amp;target={{ source.pk }}"
-               role="button">
-                Swap
-            </a>
-        {% endif %}
-        <button type="submit" class="btn btn-warning">
-            {% if method == 'post' %}
-                Merge
-            {% else %}
-                Submit
-            {% endif %}
+        <button type="submit" class="btn btn-warning" title="Get Person information">
+            Get Info
         </button>
     </form>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/person/merge_request_email.txt b/ietf/templates/person/merge_request_email.txt
new file mode 100644
index 0000000000..0a695f036c
--- /dev/null
+++ b/ietf/templates/person/merge_request_email.txt
@@ -0,0 +1,23 @@
+Hello,
+
+We have identified multiple IETF Datatracker accounts that may represent a single person:
+
+https://datatracker.ietf.org/person/{{ source_account }}
+
+and 
+
+https://datatracker.ietf.org/person/{{ target_account }}
+
+If this is so then it is important that we merge the accounts.
+
+This email is being sent to the primary emails associated with each Datatracker account.
+
+Please respond to this message individually from the email account(s) you control so we can take the appropriate action.
+
+If these should be merged, please identify which account you would like to keep the login credentials from.
+
+If you are associated with but no longer have access to one of the email accounts, then please let us know and we will follow up to determine how to proceed.
+
+
+{{ sender_name }}
+IETF Support
\ No newline at end of file
diff --git a/ietf/templates/person/merge_submit.html b/ietf/templates/person/merge_submit.html
new file mode 100644
index 0000000000..30e1999f81
--- /dev/null
+++ b/ietf/templates/person/merge_submit.html
@@ -0,0 +1,57 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load django_bootstrap5 %}
+{% block title %}Merge Persons{% endblock %}
+{% block content %}
+    <h1>Merge Person Records</h1>
+    <p class="alert alert-info my-3">
+        This tool will merge two Person records into one.  If both records have logins and you want to retain the one on the left, use the Swap button to swap source and target records.
+    </p>
+    <form method="post">
+        {% csrf_token %}
+        <div class="row mt-3">
+            <div class="col-md-6">
+                {% bootstrap_field form.source %}
+                {% if source %}
+                    {% with person=source %}
+                        {% include "person/person_info.html" %}
+                    {% endwith %}
+                {% endif %}
+            </div>
+            <div class="col-md-6">
+                {% bootstrap_field form.target %}
+                {% if target %}
+                    {% with person=target %}
+                        {% include "person/person_info.html" %}
+                    {% endwith %}
+                {% endif %}
+            </div>
+        </div>
+        {% if change_details %}<div class="alert alert-info my-3" role="alert">{{ change_details }}</div>{% endif %}
+        {% if warn_messages %}
+            {% for message in warn_messages %}<div class="alert alert-warning my-3" role="alert">{{ message }}</div>{% endfor %}
+        {% endif %}
+
+        <a class="btn btn-primary"
+           href="{% url 'ietf.person.views.merge_submit' %}?source={{ target.pk }}&amp;target={{ source.pk }}"
+           role="button"
+           title="Swap source and target">
+            Swap
+        </a>
+
+        <button type="submit" class="btn btn-warning" title="Merge Person records">
+            Merge
+        </button>
+
+        <a class="btn btn-primary"
+           href="{% url 'ietf.person.views.send_merge_request' %}?source={{ source.pk }}&amp;target={{ target.pk }}"
+           role="button"
+           title="Send email to both addresses to confirm they are the same person">
+            Send Email
+        </a>
+
+        <a class="btn btn-primary" href="{% url 'ietf.person.views.merge' %}" role="button">Back</a>
+
+    </form>
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/person/send_merge_request.html b/ietf/templates/person/send_merge_request.html
new file mode 100644
index 0000000000..f0c6272dca
--- /dev/null
+++ b/ietf/templates/person/send_merge_request.html
@@ -0,0 +1,20 @@
+{# Copyright The IETF Trust 2025, All Rights Reserved #}
+{% extends "base.html" %}
+{% load static %}
+{% load django_bootstrap5 %}
+{% block title %}Send Merge Notice{% endblock %}
+{% block content %}
+    <h1>Send Merge Notice</h1>
+    {% if form.non_field_errors %}<div class="my-3 alert alert-danger">{{ form.non_field_errors }}</div>{% endif %}
+    <form id="email-form" method="post">
+        {% csrf_token %}
+        {% bootstrap_field form.to layout='horizontal' %}
+        {% bootstrap_field form.frm layout='horizontal' %}
+        {% bootstrap_field form.reply_to layout='horizontal' %}
+        {% bootstrap_field form.subject layout='horizontal' %}
+        {% bootstrap_field form.body layout='horizontal' %}
+        <button type="submit" class="btn btn-primary">Send</button>
+        <a class="btn btn-secondary float-end"
+               href="{% url 'ietf.person.views.merge' %}">Cancel</a>
+    </form>
+{% endblock %}
diff --git a/ietf/utils/fields.py b/ietf/utils/fields.py
index ba3fecebc6..6e8765612f 100644
--- a/ietf/utils/fields.py
+++ b/ietf/utils/fields.py
@@ -1,10 +1,11 @@
-# Copyright The IETF Trust 2012-2020, All Rights Reserved
+# Copyright The IETF Trust 2012-2025, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 import datetime
 import json
 import re
+from email.utils import parseaddr
 
 import debug                            # pyflakes:ignore
 
@@ -16,6 +17,7 @@
 from django.core.exceptions import ValidationError
 from django.utils.dateparse import parse_duration
 
+
 class MultiEmailField(forms.Field):
     def to_python(self, value):
         "Normalize data to a list of strings."
@@ -38,6 +40,25 @@ def validate(self, value):
         for email in value:
             validate_email(email)
 
+
+def validate_name_addr_email(value):
+    "Validate name-addr style email address"
+    name, addr = parseaddr(value)
+    if not addr:
+        raise ValidationError("Invalid email format.")
+    try:
+        validate_email(addr)  # validate the actual address part
+    except ValidationError:
+        raise ValidationError("Invalid email address.")
+
+
+class NameAddrEmailField(forms.CharField):
+    def validate(self, value):
+        "Check if value consists only of valid emails."
+        super().validate(value)
+        validate_name_addr_email(value)
+
+
 def yyyymmdd_to_strftime_format(fmt):
     translation_table = sorted([
         ("yyyy", "%Y"),

From 5d2790bb3cfff4e45be076d56dcc0fb209ed327e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 22 Jan 2026 11:52:17 -0400
Subject: [PATCH 542/707] feat: additional fields for purple API (#10299)

* feat: include group, abstract in purple draft API

* feat: include ad/shepherd in purple API
---
 ietf/api/serializers_rpc.py | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index f2e735be7a..fe7f609251 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -114,11 +114,14 @@ class FullDraftSerializer(serializers.ModelSerializer):
     # is used for a writeable view, the validation will need to be added back.
     name = serializers.CharField(max_length=255)
     title = serializers.CharField(max_length=255)
+    group = serializers.SlugRelatedField(slug_field="acronym", read_only=True)
 
     # Other fields we need to add / adjust
     source_format = serializers.SerializerMethodField()
     authors = DocumentAuthorSerializer(many=True, source="documentauthor_set")
-    shepherd = serializers.SerializerMethodField()
+    shepherd = serializers.PrimaryKeyRelatedField(
+        source="shepherd.person", read_only=True
+    )
     consensus = serializers.SerializerMethodField()
 
     class Meta:
@@ -129,12 +132,16 @@ class Meta:
             "rev",
             "stream",
             "title",
+            "group",
+            "abstract",
             "pages",
             "source_format",
             "authors",
             "shepherd",
             "intended_std_level",
             "consensus",
+            "shepherd",
+            "ad",
         ]
 
     def get_consensus(self, doc: Document) -> Optional[bool]:
@@ -155,12 +162,6 @@ def get_source_format(
             return "txt"
         return "unknown"
 
-    @extend_schema_field(OpenApiTypes.EMAIL)
-    def get_shepherd(self, doc: Document) -> str:
-        if doc.shepherd:
-            return doc.shepherd.formatted_ascii_email()
-        return ""
-
 
 class DraftSerializer(FullDraftSerializer):
     class Meta:
@@ -171,6 +172,7 @@ class Meta:
             "rev",
             "stream",
             "title",
+            "group",
             "pages",
             "source_format",
             "authors",

From f56bfcb2f618fbaded92519797d4e4baa34ac4a1 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 23 Jan 2026 10:32:02 -0400
Subject: [PATCH 543/707] feat: more clickable message admin (#10307)

---
 ietf/message/admin.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/ietf/message/admin.py b/ietf/message/admin.py
index 250e1eb596..6a876cdc70 100644
--- a/ietf/message/admin.py
+++ b/ietf/message/admin.py
@@ -27,7 +27,8 @@ def queryset(self, request, queryset):
 
 
 class MessageAdmin(admin.ModelAdmin):
-    list_display = ["sent_status", "subject", "by", "time", "groups"]
+    list_display = ["sent_status", "display_subject", "by", "time", "groups"]
+    list_display_links = ["display_subject"]
     search_fields = ["subject", "body"]
     raw_id_fields = ["by", "related_groups", "related_docs"]
     list_filter = [
@@ -37,6 +38,10 @@ class MessageAdmin(admin.ModelAdmin):
     ordering = ["-time"]
     actions = ["retry_send"]
 
+    @admin.display(description="Subject", empty_value="(no subject)")
+    def display_subject(self, instance):
+        return instance.subject or None  # None triggers the empty_value
+
     def groups(self, instance):
         return ", ".join(g.acronym for g in instance.related_groups.all())
 

From 9c6fa92b7eed8b29bea96cb73148dba130678e63 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 27 Jan 2026 11:34:17 -0400
Subject: [PATCH 544/707] fix: update RPC publish API fields (#10308)

* fix: update purple publish API fields

* fix: handle IntegrityError more cleanly

* fix: don't import RFC fields from draft

* test: update test

* chore: remove unused var/import

* fix: f-string -> string
---
 ietf/api/serializers_rpc.py | 29 ++----------------------
 ietf/api/tests_views_rpc.py | 44 ++++++++++++++++++-------------------
 ietf/api/views_rpc.py       | 16 +++++++++++++-
 3 files changed, 39 insertions(+), 50 deletions(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index fe7f609251..440c2a73d4 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -27,7 +27,7 @@
     update_rfcauthors,
 )
 from ietf.group.models import Group
-from ietf.name.models import StreamName, StdLevelName, FormalLanguageName
+from ietf.name.models import StreamName, StdLevelName
 from ietf.person.models import Person
 from ietf.utils import log
 
@@ -137,7 +137,6 @@ class Meta:
             "pages",
             "source_format",
             "authors",
-            "shepherd",
             "intended_std_level",
             "consensus",
             "shepherd",
@@ -263,15 +262,6 @@ class RfcPubSerializer(serializers.ModelSerializer):
     stream = serializers.PrimaryKeyRelatedField(
         queryset=StreamName.objects.filter(used=True)
     )
-    formal_languages = serializers.PrimaryKeyRelatedField(
-        many=True,
-        required=False,
-        queryset=FormalLanguageName.objects.filter(used=True),
-        help_text=(
-            "formal languages used in RFC (defaults to those from draft, send empty"
-            "list to override)"
-        )
-    )
     std_level = serializers.PrimaryKeyRelatedField(
         queryset=StdLevelName.objects.filter(used=True),
     )
@@ -315,11 +305,8 @@ class Meta:
             "stream",
             "abstract",
             "pages",
-            "words",
-            "formal_languages",
             "std_level",
             "ad",
-            "note",
             "obsoletes",
             "updates",
             "subseries",
@@ -353,9 +340,6 @@ def create(self, validated_data):
         # If specified, retrieve draft and extract RFC default values from it
         if draft_name is None:
             draft = None
-            defaults_from_draft = {
-                "group": Group.objects.get(acronym="none", type_id="individ"),
-            }
         else:
             # validation enforces that draft_name and draft_rev are both present
             draft = Document.objects.filter(
@@ -378,17 +362,11 @@ def create(self, validated_data):
                     },
                     code="already-published-draft",
                 )
-            defaults_from_draft = {
-                "ad": draft.ad,
-                "formal_languages": draft.formal_languages.all(),
-                "group": draft.group,
-                "note": draft.note,
-            }
 
         # Transaction to clean up if something fails
         with transaction.atomic():
             # create rfc, letting validated request data override draft defaults
-            rfc = self._create_rfc(defaults_from_draft | validated_data)
+            rfc = self._create_rfc(validated_data)
             DocEvent.objects.create(
                 doc=rfc,
                 rev=rfc.rev,
@@ -523,14 +501,11 @@ def create(self, validated_data):
 
     def _create_rfc(self, validated_data):
         authors_data = validated_data.pop("authors")
-        formal_languages = validated_data.pop("formal_languages", [])
-        # todo ad field
         rfc = Document.objects.create(
             type_id="rfc",
             name=f"rfc{validated_data['rfc_number']}",
             **validated_data,
         )
-        rfc.formal_languages.set(formal_languages)  # list of PKs is ok
         for order, author_data in enumerate(authors_data):
             rfc.rfcauthor_set.create(
                 order=order,
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index ecb50ee76c..09fb40bf6e 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -80,9 +80,15 @@ def test_draftviewset_references(self):
     def test_notify_rfc_published(self):
         url = urlreverse("ietf.api.purple_api.notify_rfc_published")
         area = GroupFactory(type_id="area")
+        rfc_group = GroupFactory(type_id="wg")
         draft_ad = RoleFactory(group=area, name_id="ad").person
-        authors = PersonFactory.create_batch(2)
-        draft = WgDraftFactory(group__parent=area, authors=authors)
+        rfc_ad = PersonFactory()
+        draft_authors = PersonFactory.create_batch(2)
+        rfc_authors = PersonFactory.create_batch(3)
+        draft = WgDraftFactory(
+            group__parent=area, authors=draft_authors, ad=draft_ad, stream_id="ietf"
+        )
+        rfc_stream_id = "ise"
         assert isinstance(draft, Document), "WgDraftFactory should generate a Document"
         unused_rfc_number = (
             Document.objects.filter(rfc_number__isnull=False).aggregate(
@@ -96,7 +102,7 @@ def test_notify_rfc_published(self):
             "draft_name": draft.name,
             "draft_rev": draft.rev,
             "rfc_number": unused_rfc_number,
-            "title": draft.title,
+            "title": "RFC " + draft.title,
             "authors": [
                 {
                     "titlepage_name": f"titlepage {author.name}",
@@ -106,17 +112,14 @@ def test_notify_rfc_published(self):
                     "affiliation": "Some Affiliation",
                     "country": "CA",
                 }
-                for author in authors
+                for author in rfc_authors
             ],
-            "group": draft.group.acronym,
-            "stream": draft.stream_id,
-            "abstract": draft.abstract,
-            "pages": draft.pages,
-            "words": draft.pages * 250,
-            "formal_languages": [],
+            "group": rfc_group.acronym,
+            "stream": rfc_stream_id,
+            "abstract": "RFC version of " + draft.abstract,
+            "pages": draft.pages + 10,
             "std_level": "ps",
-            "ad": draft_ad.pk,
-            "note": "noted",
+            "ad": rfc_ad.pk,
             "obsoletes": [],
             "updates": [],
             "subseries": [],
@@ -137,7 +140,7 @@ def test_notify_rfc_published(self):
             ).count(),
             1,
         )
-        self.assertEqual(rfc.title, draft.title)
+        self.assertEqual(rfc.title, "RFC " + draft.title)
         self.assertEqual(rfc.documentauthor_set.count(), 0)
         self.assertEqual(
             list(
@@ -159,18 +162,15 @@ def test_notify_rfc_published(self):
                     "affiliation": "Some Affiliation",
                     "country": "CA",
                 }
-                for author in authors
+                for author in rfc_authors
             ],
         )
-        self.assertEqual(rfc.group, draft.group)
-        self.assertEqual(rfc.stream, draft.stream)
-        self.assertEqual(rfc.abstract, draft.abstract)
-        self.assertEqual(rfc.pages, draft.pages)
-        self.assertEqual(rfc.words, draft.pages * 250)
-        self.assertEqual(rfc.formal_languages.count(), 0)
+        self.assertEqual(rfc.group, rfc_group)
+        self.assertEqual(rfc.stream_id, rfc_stream_id)
+        self.assertEqual(rfc.abstract, "RFC version of " + draft.abstract)
+        self.assertEqual(rfc.pages, draft.pages + 10)
         self.assertEqual(rfc.std_level_id, "ps")
-        self.assertEqual(rfc.ad, draft_ad)
-        self.assertEqual(rfc.note, "noted")
+        self.assertEqual(rfc.ad, rfc_ad)
         self.assertEqual(rfc.related_that_doc("obs"), [])
         self.assertEqual(rfc.related_that_doc("updates"), [])
         self.assertEqual(rfc.part_of(), [])
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index ea9c6348ca..6b1799f654 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -5,6 +5,7 @@
 from tempfile import TemporaryDirectory
 
 from django.conf import settings
+from django.db import IntegrityError
 from drf_spectacular.utils import OpenApiParameter
 from rest_framework import mixins, parsers, serializers, viewsets, status
 from rest_framework.decorators import action
@@ -360,7 +361,20 @@ def post(self, request):
         serializer = RfcPubSerializer(data=request.data)
         serializer.is_valid(raise_exception=True)
         # Create RFC
-        serializer.save()
+        try:
+            serializer.save()
+        except IntegrityError as err:
+            if Document.objects.filter(
+                rfc_number=serializer.validated_data["rfc_number"]
+            ):
+                raise serializers.ValidationError(
+                    "RFC with that number already exists",
+                    code="rfc-number-in-use",
+                )
+            raise serializers.ValidationError(
+                f"Unable to publish: {err}",
+                code="unknown-integrity-error",
+            )
         return Response(NotificationAckSerializer().data)
 
 

From 33fe0bcb7cafadc2096bfd1386c3d7e8a6a915f5 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Wed, 28 Jan 2026 13:47:48 -0500
Subject: [PATCH 545/707] feat: add consensus in Draft serializer (#10327)

---
 ietf/api/serializers_rpc.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 440c2a73d4..34e2c791c0 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -175,6 +175,7 @@ class Meta:
             "pages",
             "source_format",
             "authors",
+            "consensus",
         ]
 
 

From a174f43574c5ed4f20ddcc0d600d03e5156fb351 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 30 Jan 2026 14:49:47 -0400
Subject: [PATCH 546/707] fix: use current time for bofreq revisions  (#10333)

* fix: use current time for bofreq revisions

* test: test time handling

Adjusts assertion argument order to match our usual style
---
 ietf/doc/tests_bofreq.py | 19 ++++++++++++-------
 ietf/doc/views_bofreq.py |  1 -
 2 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/ietf/doc/tests_bofreq.py b/ietf/doc/tests_bofreq.py
index 6a7c9393ef..6b142149be 100644
--- a/ietf/doc/tests_bofreq.py
+++ b/ietf/doc/tests_bofreq.py
@@ -307,17 +307,20 @@ def test_submit(self):
         url = urlreverse('ietf.doc.views_bofreq.submit', kwargs=dict(name=doc.name))
 
         rev = doc.rev
+        doc_time = doc.time 
         r = self.client.post(url,{'bofreq_submission':'enter','bofreq_content':'# oiwefrase'})
         self.assertEqual(r.status_code, 302)
         doc = reload_db_objects(doc)
-        self.assertEqual(rev, doc.rev)
+        self.assertEqual(doc.rev, rev)
+        self.assertEqual(doc.time, doc_time)
 
         nobody = PersonFactory()
         self.client.login(username=nobody.user.username, password=nobody.user.username+'+password')
         r = self.client.post(url,{'bofreq_submission':'enter','bofreq_content':'# oiwefrase'})
         self.assertEqual(r.status_code, 403)
         doc = reload_db_objects(doc)
-        self.assertEqual(rev, doc.rev)
+        self.assertEqual(doc.rev, rev)
+        self.assertEqual(doc.time, doc_time)
         self.client.logout()
 
         editor = bofreq_editors(doc).first()
@@ -339,12 +342,14 @@ def test_submit(self):
                         r = self.client.post(url, postdict)
                         self.assertEqual(r.status_code, 302)
                         doc = reload_db_objects(doc)
-                        self.assertEqual('%02d'%(int(rev)+1) ,doc.rev)
-                        self.assertEqual(f'# {username}', doc.text())
-                        self.assertEqual(f'# {username}', retrieve_str('bofreq',doc.get_base_name()))
-                        self.assertEqual(docevent_count+1, doc.docevent_set.count())
-                        self.assertEqual(1, len(outbox))
+                        self.assertEqual(doc.rev, '%02d'%(int(rev)+1))
+                        self.assertGreater(doc.time, doc_time)
+                        self.assertEqual(doc.text(), f'# {username}')
+                        self.assertEqual(retrieve_str('bofreq', doc.get_base_name()), f'# {username}')
+                        self.assertEqual(doc.docevent_set.count(), docevent_count+1)
+                        self.assertEqual(len(outbox), 1)
                         rev = doc.rev
+                        doc_time = doc.time
             finally:
                 os.unlink(file.name)
 
diff --git a/ietf/doc/views_bofreq.py b/ietf/doc/views_bofreq.py
index 71cbe30491..94e3960dfa 100644
--- a/ietf/doc/views_bofreq.py
+++ b/ietf/doc/views_bofreq.py
@@ -91,7 +91,6 @@ def submit(request, name):
                 by=request.user.person,
                 rev=bofreq.rev,
                 desc='New revision available',
-                time=bofreq.time,
             )
             bofreq.save_with_history([e])
             bofreq_submission = form.cleaned_data['bofreq_submission']

From 2dbe61e891752245447f4c2774353151f0bb34e5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 9 Feb 2026 14:43:58 -0400
Subject: [PATCH 547/707] feat: speed up agenda.ics; cache more agenda data
 (#10362)

* chore(dev): cprofile middleware settings

* feat: precomputed agenda.ics (wip)

* feat: precomp filtering support

* fix: separately cache versioned hrefs

Fixes https://github.com/ietf-tools/datatracker/issues/10355

* fix: versionless agenda href in agenda / ical

* fix: preserve RESCHEDULED output

* fix: fixup to agree with original output

* feat: separate agenda cache, cache old meetings

* feat: agenda refresh tasks

* chore: undo accidental commit

* chore: remove debug parameter

* fix: convert session ID to int for comparison

* test: update/fix tests, rename new task

* refactor: rename task to have _task suffix

Also changes a log msg so it won't contain "None" awkwardly

* feat: no exceptions from agenda_data_refresh_task

* test: explanatory comment

* ci: agenda cache for k8s / testcrawl
---
 ietf/doc/models.py          |  16 ++-
 ietf/meeting/tasks.py       |  92 +++++++++++---
 ietf/meeting/tests_tasks.py |  64 ++++++++--
 ietf/meeting/views.py       | 247 +++++++++++++++++++++++++++++++-----
 ietf/settings.py            |  37 +++++-
 ietf/settings_testcrawl.py  |   3 +
 k8s/settings_local.py       |  10 ++
 7 files changed, 396 insertions(+), 73 deletions(-)

diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index cce9203d09..463aa6fd97 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -239,14 +239,14 @@ def revisions_by_newrevisionevent(self):
         return revisions
 
     def get_href(self, meeting=None):
-        return self._get_ref(meeting=meeting,meeting_doc_refs=settings.MEETING_DOC_HREFS)
+        return self._get_ref(meeting=meeting, versioned=True)
 
 
     def get_versionless_href(self, meeting=None):
-        return self._get_ref(meeting=meeting,meeting_doc_refs=settings.MEETING_DOC_GREFS)
+        return self._get_ref(meeting=meeting, versioned=False)
 
 
-    def _get_ref(self, meeting=None, meeting_doc_refs=settings.MEETING_DOC_HREFS):
+    def _get_ref(self, meeting=None, versioned=True):
         """
         Returns an url to the document text.  This differs from .get_absolute_url(),
         which returns an url to the datatracker page for the document.   
@@ -255,12 +255,16 @@ def _get_ref(self, meeting=None, meeting_doc_refs=settings.MEETING_DOC_HREFS):
         # the earlier resolution order, but there's at the moment one single
         # instance which matches this (with correct results), so we won't
         # break things all over the place.
-        if not hasattr(self, '_cached_href'):
+        cache_attr = "_cached_href" if versioned else "_cached_versionless_href"
+        if not hasattr(self, cache_attr):
             validator = URLValidator()
             if self.external_url and self.external_url.split(':')[0] in validator.schemes:
                 validator(self.external_url)
                 return self.external_url
 
+            meeting_doc_refs = (
+                settings.MEETING_DOC_HREFS if versioned else settings.MEETING_DOC_GREFS
+            )
             if self.type_id in settings.DOC_HREFS and self.type_id in meeting_doc_refs:
                 if self.meeting_related():
                     self.is_meeting_related = True
@@ -312,8 +316,8 @@ def _get_ref(self, meeting=None, meeting_doc_refs=settings.MEETING_DOC_HREFS):
 
             if href.startswith('/'):
                 href = settings.IDTRACKER_BASE_URL + href
-            self._cached_href = href
-        return self._cached_href
+            setattr(self, cache_attr, href)
+        return getattr(self, cache_attr)
 
     def set_state(self, state):
         """Switch state type implicit in state to state. This just
diff --git a/ietf/meeting/tasks.py b/ietf/meeting/tasks.py
index c361325f9a..a73763560b 100644
--- a/ietf/meeting/tasks.py
+++ b/ietf/meeting/tasks.py
@@ -1,11 +1,14 @@
-# Copyright The IETF Trust 2024-2025, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 #
 # Celery task definitions
 #
 import datetime
 
-from celery import shared_task
-# from django.db.models import QuerySet
+from itertools import batched
+
+from celery import shared_task, chain
+from django.db.models import IntegerField
+from django.db.models.functions import Cast
 from django.utils import timezone
 
 from ietf.utils import log
@@ -19,9 +22,56 @@
 from .utils import fetch_attendance_from_meetings
 
 
+@shared_task
+def agenda_data_refresh_task(num=None):
+    """Refresh agenda data for one plenary meeting
+
+    If `num` is `None`, refreshes data for the current meeting.
+    """
+    log.log(
+        f"Refreshing agenda data for {f"IETF-{num}" if num else "current IETF meeting"}"
+    )
+    try:
+        generate_agenda_data(num, force_refresh=True)
+    except Exception as err:
+        # Log and swallow exceptions so failure on one meeting won't break a chain of
+        # tasks. This is used by agenda_data_refresh_all_task().
+        log.log(f"ERROR: Refreshing agenda data failed for num={num}: {err}")
+
+
 @shared_task
 def agenda_data_refresh():
-    generate_agenda_data(force_refresh=True)
+    """Deprecated. Use agenda_data_refresh_task() instead.
+    
+    TODO remove this after switching the periodic task to the new name
+    """
+    log.log("Deprecated agenda_data_refresh task called!")
+    agenda_data_refresh_task()
+
+
+@shared_task
+def agenda_data_refresh_all_task(*, batch_size=10):
+    """Refresh agenda data for all plenary meetings
+
+    Executes as a chain of tasks, each computing up to `batch_size` meetings
+    in a single task.
+    """
+    meeting_numbers = sorted(
+        Meeting.objects.annotate(
+            number_as_int=Cast("number", output_field=IntegerField())
+        )
+        .filter(type_id="ietf", number_as_int__gt=64)
+        .values_list("number_as_int", flat=True)
+    )
+    # Batch using chained maps rather than celery.chunk so we only use one worker
+    # at a time.
+    batched_task_chain = chain(
+        *(
+            agenda_data_refresh_task.map(nums)
+            for nums in batched(meeting_numbers, batch_size)
+        )
+    )
+    batched_task_chain.delay()
 
 
 @shared_task
@@ -55,7 +105,9 @@ def proceedings_content_refresh_task(*, all=False):
 @shared_task
 def fetch_meeting_attendance_task():
     # fetch most recent two meetings
-    meetings = Meeting.objects.filter(type="ietf", date__lte=timezone.now()).order_by("-date")[:2]
+    meetings = Meeting.objects.filter(type="ietf", date__lte=timezone.now()).order_by(
+        "-date"
+    )[:2]
     try:
         stats = fetch_attendance_from_meetings(meetings)
     except RuntimeError as err:
@@ -64,8 +116,11 @@ def fetch_meeting_attendance_task():
         for meeting, meeting_stats in zip(meetings, stats):
             log.log(
                 "Fetched data for meeting {:>3}: {:4d} created, {:4d} updated, {:4d} deleted, {:4d} processed".format(
-                    meeting.number, meeting_stats['created'], meeting_stats['updated'], meeting_stats['deleted'],
-                    meeting_stats['processed']
+                    meeting.number,
+                    meeting_stats["created"],
+                    meeting_stats["updated"],
+                    meeting_stats["deleted"],
+                    meeting_stats["processed"],
                 )
             )
 
@@ -73,7 +128,7 @@ def fetch_meeting_attendance_task():
 def _select_meetings(
     meetings: list[str] | None = None,
     meetings_since: str | None = None,
-    meetings_until: str | None = None
+    meetings_until: str | None = None,
 ):  # nyah
     """Select meetings by number or date range"""
     # IETF-1 = 1986-01-16
@@ -130,15 +185,15 @@ def _select_meetings(
 @shared_task
 def resolve_meeting_materials_task(
     *,  # only allow kw arguments
-    meetings: list[str] | None=None,
-    meetings_since: str | None=None,
-    meetings_until: str | None=None
+    meetings: list[str] | None = None,
+    meetings_since: str | None = None,
+    meetings_until: str | None = None,
 ):
     """Run materials resolver on meetings
-    
+
     Can request a set of meetings by number by passing a list in the meetings arg, or
     by range by passing an iso-format timestamps in meetings_since / meetings_until.
-    To select all meetings, set meetings_since="zero" and omit other parameters. 
+    To select all meetings, set meetings_since="zero" and omit other parameters.
     """
     meetings_qs = _select_meetings(meetings, meetings_since, meetings_until)
     for meeting in meetings_qs.order_by("date"):
@@ -155,7 +210,9 @@ def resolve_meeting_materials_task(
                 f"meeting {meeting.number}: {err}"
             )
         else:
-            log.log(f"Resolved in {(timezone.now() - mark).total_seconds():0.3f} seconds.")
+            log.log(
+                f"Resolved in {(timezone.now() - mark).total_seconds():0.3f} seconds."
+            )
 
 
 @shared_task
@@ -163,13 +220,13 @@ def store_meeting_materials_as_blobs_task(
     *,  # only allow kw arguments
     meetings: list[str] | None = None,
     meetings_since: str | None = None,
-    meetings_until: str | None = None
+    meetings_until: str | None = None,
 ):
     """Push meeting materials into the blob store
 
     Can request a set of meetings by number by passing a list in the meetings arg, or
     by range by passing an iso-format timestamps in meetings_since / meetings_until.
-    To select all meetings, set meetings_since="zero" and omit other parameters. 
+    To select all meetings, set meetings_since="zero" and omit other parameters.
     """
     meetings_qs = _select_meetings(meetings, meetings_since, meetings_until)
     for meeting in meetings_qs.order_by("date"):
@@ -187,4 +244,5 @@ def store_meeting_materials_as_blobs_task(
             )
         else:
             log.log(
-                f"Blobs created in {(timezone.now() - mark).total_seconds():0.3f} seconds.")
+                f"Blobs created in {(timezone.now() - mark).total_seconds():0.3f} seconds."
+            )
diff --git a/ietf/meeting/tests_tasks.py b/ietf/meeting/tests_tasks.py
index a5da00ecbf..2c5120a39d 100644
--- a/ietf/meeting/tests_tasks.py
+++ b/ietf/meeting/tests_tasks.py
@@ -5,23 +5,63 @@
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today
 from .factories import MeetingFactory
-from .tasks import proceedings_content_refresh_task, agenda_data_refresh
+from .tasks import (
+    proceedings_content_refresh_task,
+    agenda_data_refresh_task,
+    agenda_data_refresh_all_task,
+)
 from .tasks import fetch_meeting_attendance_task
 
 
 class TaskTests(TestCase):
     @patch("ietf.meeting.tasks.generate_agenda_data")
-    def test_agenda_data_refresh(self, mock_generate):
-        agenda_data_refresh()
+    def test_agenda_data_refresh_task(self, mock_generate):
+        agenda_data_refresh_task()
         self.assertTrue(mock_generate.called)
-        self.assertEqual(mock_generate.call_args, call(force_refresh=True))
+        self.assertEqual(mock_generate.call_args, call(None, force_refresh=True))
+        
+        mock_generate.reset_mock()
+        mock_generate.side_effect = RuntimeError
+        try:
+            agenda_data_refresh_task()
+        except Exception as err:
+            self.fail(
+                f"agenda_data_refresh_task should not raise exceptions (got {repr(err)})"
+            )
+
+    @patch("ietf.meeting.tasks.agenda_data_refresh_task")
+    @patch("ietf.meeting.tasks.chain")
+    def test_agenda_data_refresh_all_task(self, mock_chain, mock_agenda_data_refresh):
+        # Patch the agenda_data_refresh_task task with a mock whose `.map` attribute
+        # converts its argument, which is expected to be an iterator,  to a list
+        # and returns it. We'll use this to check that the expected task chain
+        # was set up, but we don't actually run any celery tasks.
+        mock_agenda_data_refresh.map.side_effect = lambda x: list(x)
+
+        meetings = MeetingFactory.create_batch(5, type_id="ietf")
+        numbers = sorted(int(m.number) for m in meetings)
+        agenda_data_refresh_all_task(batch_size=2)
+        self.assertTrue(mock_chain.called)
+        # The lists in the call() below are the output of the lambda we patched in
+        # via mock_agenda_data_refresh.map.side_effect above. I.e., this tests that
+        # map() was called with the correct batched data.
+        self.assertEqual(
+            mock_chain.call_args,
+            call(
+                [numbers[0], numbers[1]],
+                [numbers[2], numbers[3]],
+                [numbers[4]],
+            ),
+        )
+        self.assertEqual(mock_agenda_data_refresh.call_count, 0)
+        self.assertEqual(mock_agenda_data_refresh.map.call_count, 3)
 
     @patch("ietf.meeting.tasks.generate_proceedings_content")
     def test_proceedings_content_refresh_task(self, mock_generate):
         # Generate a couple of meetings
         meeting120 = MeetingFactory(type_id="ietf", number="120")  # 24 * 5
         meeting127 = MeetingFactory(type_id="ietf", number="127")  # 24 * 5 + 7
-        
+
         # Times to be returned
         now_utc = datetime.datetime.now(tz=datetime.UTC)
         hour_00_utc = now_utc.replace(hour=0)
@@ -34,19 +74,19 @@ def test_proceedings_content_refresh_task(self, mock_generate):
         self.assertEqual(mock_generate.call_count, 1)
         self.assertEqual(mock_generate.call_args, call(meeting120, force_refresh=True))
         mock_generate.reset_mock()
-    
+
         # hour 01 - should call no meetings
         with patch("ietf.meeting.tasks.timezone.now", return_value=hour_01_utc):
             proceedings_content_refresh_task()
         self.assertEqual(mock_generate.call_count, 0)
-    
+
         # hour 07 - should call meeting with number % 24 == 0
         with patch("ietf.meeting.tasks.timezone.now", return_value=hour_07_utc):
             proceedings_content_refresh_task()
         self.assertEqual(mock_generate.call_count, 1)
         self.assertEqual(mock_generate.call_args, call(meeting127, force_refresh=True))
         mock_generate.reset_mock()
-        
+
         # With all=True, all should be called regardless of time. Reuse hour_01_utc which called none before
         with patch("ietf.meeting.tasks.timezone.now", return_value=hour_01_utc):
             proceedings_content_refresh_task(all=True)
@@ -61,10 +101,10 @@ def test_fetch_meeting_attendance_task(self, mock_fetch_attendance):
             MeetingFactory(type_id="ietf", date=today - datetime.timedelta(days=3)),
         ]
         data = {
-            'created': 1,
-            'updated': 2,
-            'deleted': 0,
-            'processed': 3,
+            "created": 1,
+            "updated": 2,
+            "deleted": 0,
+            "processed": 3,
         }
 
         mock_fetch_attendance.return_value = [data, data]
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 903e3c7e79..8dccda9c87 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -40,7 +40,7 @@
 from django.core.exceptions import ValidationError
 from django.core.files.uploadedfile import SimpleUploadedFile
 from django.core.validators import URLValidator
-from django.urls import reverse,reverse_lazy
+from django.urls import reverse, reverse_lazy, NoReverseMatch
 from django.db.models import F, Max, Q
 from django.forms.models import modelform_factory, inlineformset_factory
 from django.template import TemplateDoesNotExist
@@ -1859,18 +1859,22 @@ def generate_agenda_data(num=None, force_refresh=False):
     :num: meeting number
     :force_refresh: True to force a refresh of the cache
     """
-    cache = caches["default"]
-    cache_timeout = 6 * 60
-
     meeting = get_ietf_meeting(num)
     if meeting is None:
         raise Http404("No such full IETF meeting")
     elif int(meeting.number) <= 64:
-        return Http404("Pre-IETF 64 meetings are not available through this API")
-    else:
-        pass
+        raise Http404("Pre-IETF 64 meetings are not available through this API")
+    is_current_meeting = meeting.number == get_current_ietf_meeting_num()
+
+    cache = caches["agenda"]
+    cache_timeout = (
+        settings.AGENDA_CACHE_TIMEOUT_CURRENT_MEETING
+        if is_current_meeting
+        else settings.AGENDA_CACHE_TIMEOUT_DEFAULT
+    )
+    cache_format = "1"  # bump this on backward-incompatible data format changes
 
-    cache_key = f"generate_agenda_data_{meeting.number}"
+    cache_key = f"generate_agenda_data:{meeting.number}:v{cache_format}"
     if not force_refresh:
         cached_value = cache.get(cache_key)
         if cached_value is not None:
@@ -1890,8 +1894,6 @@ def generate_agenda_data(num=None, force_refresh=False):
 
     filter_organizer = AgendaFilterOrganizer(assignments=filtered_assignments)
 
-    is_current_meeting = (num is None) or (num == get_current_ietf_meeting_num())
-
     # Get Floor Plans
     floors = FloorPlan.objects.filter(meeting=meeting).order_by('order')
     
@@ -1966,21 +1968,32 @@ def api_get_session_materials(request, session_id=None):
     )
 
 
-def agenda_extract_schedule (item):
+def agenda_extract_schedule(item):
+    if item.session.current_status == "resched":
+        resched_to = item.session.tombstone_for.official_timeslotassignment()
+    else:
+        resched_to = None
     return {
         "id": item.id,
+        "slug": item.slug(),
         "sessionId": item.session.id,
-        "room": item.room_name if item.timeslot.show_location else None,
+        "room": (item.timeslot.get_location() or None) if item.timeslot else None,
         "location": {
             "short": item.timeslot.location.floorplan.short,
             "name": item.timeslot.location.floorplan.name,
         } if (item.timeslot.show_location and item.timeslot.location and item.timeslot.location.floorplan) else {},
         "acronym": item.acronym,
-        "duration": item.timeslot.duration.seconds,
+        "duration": item.timeslot.duration.total_seconds(),
         "name": item.session.name,
+        "slotId": item.timeslot.id,
         "slotName": item.timeslot.name,
+        "slotModified": item.timeslot.modified.isoformat(),
         "startDateTime": item.timeslot.time.isoformat(),
         "status": item.session.current_status,
+        "rescheduledTo": {
+            "startDateTime": resched_to.timeslot.time.isoformat(),
+            "duration": resched_to.timeslot.duration.total_seconds(),
+        } if resched_to is not None else {},
         "type": item.session.type.slug,
         "purpose": item.session.purpose.slug,
         "isBoF": item.session.group_at_the_time().state_id == "bof",
@@ -1998,7 +2011,7 @@ def agenda_extract_schedule (item):
             "showAgenda": True if (item.session.agenda() is not None or item.session.remote_instructions) else False
         },
         "agenda": {
-            "url": item.session.agenda().get_href()
+            "url": item.session.agenda().get_versionless_href()
         } if item.session.agenda() is not None else {
             "url": None
         },
@@ -2290,10 +2303,131 @@ def ical_session_status(assignment):
     else:
         return "CONFIRMED"
 
+
+def render_icalendar_precomp(agenda_data):
+    ical_content = generate_agenda_ical_precomp(agenda_data)
+    return HttpResponse(ical_content, content_type="text/calendar")
+
+
 def render_icalendar(schedule, assignments):
     ical_content = generate_agenda_ical(schedule, assignments)
     return HttpResponse(ical_content, content_type="text/calendar")
 
+
+def generate_agenda_ical_precomp(agenda_data):
+    """Generate iCalendar from precomputed data using the icalendar library"""
+
+    cal = Calendar()
+    cal.add("prodid", "-//IETF//datatracker.ietf.org ical agenda//EN")
+    cal.add("version", "2.0")
+    cal.add("method", "PUBLISH")
+    
+    meeting_data = agenda_data["meeting"]
+    for item in agenda_data["schedule"]:
+        event = Event()
+        
+        uid = f"ietf-{meeting_data["number"]}-{item["slotId"]}-{item["acronym"]}"
+        event.add("uid", uid)
+
+        # add custom field with meeting's local TZ
+        event.add("x-meeting-tz", meeting_data["timezone"])
+        
+        if item["name"]:
+            summary = item["name"]
+        else:
+            summary = f"{item["groupAcronym"]} - {item["groupName"]}"
+
+        if item["note"]:
+            summary += f" ({item["note"]})"
+
+        event.add("summary", summary)
+
+        if item["room"]:
+            event.add("location", item["room"])  # room name
+
+        if item["status"] == "canceled":
+            status = "CANCELLED"
+        elif item["status"] == "resched":
+            resched_to = item["rescheduledTo"]
+            if resched_to is None:
+                status = "RESCHEDULED"
+            else:
+                resched_start = datetime.datetime.fromisoformat(
+                    resched_to["startDateTime"]
+                )
+                dur = datetime.timedelta(seconds=resched_to["duration"])
+                resched_end = resched_start + dur
+                formatted_start = resched_start.strftime("%A %H:%M").upper()
+                formatted_end = resched_end.strftime("%H:%M")
+                status = f"RESCHEDULED TO {formatted_start}-{formatted_end}"
+        else:
+            status = "CONFIRMED"
+        event.add("status", status)
+
+        event.add("class", "PUBLIC")
+
+        start_time = datetime.datetime.fromisoformat(item["startDateTime"])
+        duration = datetime.timedelta(seconds=item["duration"])
+        event.add("dtstart", start_time)
+        event.add("dtend", start_time + duration)
+
+        # DTSTAMP: when the event was created or last modified (in UTC)
+        # n.b. timeslot.modified may not be an accurate measure of this
+        event.add("dtstamp", datetime.datetime.fromisoformat(item["slotModified"]))
+
+        description_parts = [item["slotName"]]
+
+        if item["note"]:
+            description_parts.append(f"Note: {item["note"]}")
+
+        links = item["links"]
+        if links["onsiteTool"]:
+            description_parts.append(f"Onsite tool: {links["onsiteTool"]}")
+
+        if links["videoStream"]:
+            description_parts.append(f"Meetecho: {links["videoStream"]}")
+
+        if links["webex"]:
+            description_parts.append(f"Webex: {links["webex"]}")
+
+        if item["remoteInstructions"]:
+            description_parts.append(
+                f"Remote instructions: {item["remoteInstructions"]}"
+            )
+
+        try:
+            materials_url = absurl(
+                "ietf.meeting.views.session_details",
+                num=meeting_data["number"],
+                acronym=item["acronym"],
+            )
+        except NoReverseMatch:
+            pass
+        else:
+            description_parts.append(f"Session materials: {materials_url}")
+            event.add("url", materials_url)
+
+        if meeting_data["number"].isdigit():
+            try:
+                agenda_url = absurl("agenda", num=meeting_data["number"])
+            except NoReverseMatch:
+                pass
+            else:
+                description_parts.append(f"See in schedule: {agenda_url}#row-{item["slug"]}")
+
+        if item["agenda"] and item["agenda"]["url"]:
+            description_parts.append(f"Agenda {item["agenda"]["url"]}")
+
+        # Join all description parts with 2 newlines
+        description = "\n\n".join(description_parts)
+        event.add("description", description)
+
+        # Add event to calendar
+        cal.add_component(event)
+
+    return cal.to_ical().decode("utf-8")
+
+
 def generate_agenda_ical(schedule, assignments):
     """Generate iCalendar using the icalendar library"""
 
@@ -2428,10 +2562,66 @@ def parse_agenda_filter_params(querydict):
 
 def should_include_assignment(filter_params, assignment):
     """Decide whether to include an assignment"""
-    shown = len(set(filter_params['show']).intersection(assignment.filter_keywords)) > 0
-    hidden = len(set(filter_params['hide']).intersection(assignment.filter_keywords)) > 0
+    if hasattr(assignment, "filter_keywords"):
+        kw = assignment.filter_keywords
+    elif isinstance(assignment, dict):
+        kw = assignment.get("filterKeywords", [])
+    else:
+        raise ValueError("Unsupported assignment instance")
+    shown = len(set(filter_params['show']).intersection(kw)) > 0
+    hidden = len(set(filter_params['hide']).intersection(kw)) > 0
     return shown and not hidden
 
+
+def agenda_ical_ietf(meeting, filt_params, acronym=None, session_id=None):
+    agenda_data = generate_agenda_data(meeting.number, force_refresh=False)
+    if acronym:
+        agenda_data["schedule"] = [
+            item
+            for item in agenda_data["schedule"]
+            if item["groupAcronym"] == acronym
+        ]
+    elif session_id:
+        agenda_data["schedule"] = [
+            item
+            for item in agenda_data["schedule"]
+            if item["sessionId"] == session_id
+        ]
+    if filt_params is not None:
+        # Apply the filter
+        agenda_data["schedule"] = [
+            item
+            for item in agenda_data["schedule"]
+            if should_include_assignment(filt_params, item)
+        ]
+    return render_icalendar_precomp(agenda_data)
+
+
+def agenda_ical_interim(meeting, filt_params, acronym=None, session_id=None):
+    schedule = get_schedule(meeting)
+
+    if schedule is None and acronym is None and session_id is None:
+        raise Http404
+
+    assignments = SchedTimeSessAssignment.objects.filter(
+        schedule__in=[schedule, schedule.base],
+        session__on_agenda=True,
+    )
+    assignments = preprocess_assignments_for_agenda(assignments, meeting)
+    AgendaKeywordTagger(assignments=assignments).apply()
+
+    if filt_params is not None:
+        # Apply the filter
+        assignments = [a for a in assignments if should_include_assignment(filt_params, a)]
+
+    if acronym:
+        assignments = [ a for a in assignments if a.session.group_at_the_time().acronym == acronym ]
+    elif session_id:
+        assignments = [ a for a in assignments if a.session_id == int(session_id) ]
+
+    return render_icalendar(schedule, assignments)
+
+
 def agenda_ical(request, num=None, acronym=None, session_id=None):
     """Agenda ical view
 
@@ -2459,33 +2649,20 @@ def agenda_ical(request, num=None, acronym=None, session_id=None):
             raise Http404
     else:
         meeting = get_meeting(num, type_in=None)  # get requested meeting, whatever its type
-    schedule = get_schedule(meeting)
 
-    if schedule is None and acronym is None and session_id is None:
-        raise Http404
-
-    assignments = SchedTimeSessAssignment.objects.filter(
-        schedule__in=[schedule, schedule.base],
-        session__on_agenda=True,
-    )
-    assignments = preprocess_assignments_for_agenda(assignments, meeting)
-    AgendaKeywordTagger(assignments=assignments).apply()
+    if isinstance(session_id, str) and session_id.isdigit():
+        session_id = int(session_id)
 
     try:
         filt_params = parse_agenda_filter_params(request.GET)
     except ValueError as e:
         return HttpResponseBadRequest(str(e))
 
-    if filt_params is not None:
-        # Apply the filter
-        assignments = [a for a in assignments if should_include_assignment(filt_params, a)]
-
-    if acronym:
-        assignments = [ a for a in assignments if a.session.group_at_the_time().acronym == acronym ]
-    elif session_id:
-        assignments = [ a for a in assignments if a.session_id == int(session_id) ]
+    if meeting.type_id == "ietf":
+        return agenda_ical_ietf(meeting, filt_params, acronym, session_id)
+    else:
+        return agenda_ical_interim(meeting, filt_params, acronym, session_id)
 
-    return render_icalendar(schedule, assignments)
 
 @cache_page(15 * 60)
 def agenda_json(request, num=None):
diff --git a/ietf/settings.py b/ietf/settings.py
index 1cda79e21b..899a377ad7 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -228,6 +228,10 @@
 BLOBSTORAGE_CONNECT_TIMEOUT = 10  # seconds; boto3 default is 60
 BLOBSTORAGE_READ_TIMEOUT = 10  # seconds; boto3 default is 60
 
+# Caching for agenda data in seconds
+AGENDA_CACHE_TIMEOUT_DEFAULT = 8 * 24 * 60 * 60  # 8 days
+AGENDA_CACHE_TIMEOUT_CURRENT_MEETING = 6 * 60  # 6 minutes
+
 WSGI_APPLICATION = "ietf.wsgi.application"
 
 AUTHENTICATION_BACKENDS = ( 'ietf.ietfauth.backends.CaseInsensitiveModelBackend', )
@@ -1400,6 +1404,16 @@ def skip_unreadable_post(record):
                     f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
                 ),
             },
+            "agenda": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:agenda",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
             "proceedings": {
                 "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
                 "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
@@ -1453,6 +1467,17 @@ def skip_unreadable_post(record):
                 "VERSION": __version__,
                 "KEY_PREFIX": "ietf:dt",
             },
+            "agenda": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                # "LOCATION": "127.0.0.1:11211",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:agenda",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
             "proceedings": {
                 "BACKEND": "django.core.cache.backends.dummy.DummyCache",
                 # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
@@ -1519,11 +1544,17 @@ def skip_unreadable_post(record):
         NOMCOM_APP_SECRET = b'\x9b\xdas1\xec\xd5\xa0SI~\xcb\xd4\xf5t\x99\xc4i\xd7\x9f\x0b\xa9\xe8\xfeY\x80$\x1e\x12tN:\x84'
 
     ALLOWED_HOSTS = ['*',]
-    
+
     try:
         # see https://github.com/omarish/django-cprofile-middleware
-        import django_cprofile_middleware # pyflakes:ignore
-        MIDDLEWARE = MIDDLEWARE + ['django_cprofile_middleware.middleware.ProfilerMiddleware', ]
+        import django_cprofile_middleware  # pyflakes:ignore
+
+        MIDDLEWARE = MIDDLEWARE + [
+            "django_cprofile_middleware.middleware.ProfilerMiddleware",
+        ]
+        DJANGO_CPROFILE_MIDDLEWARE_REQUIRE_STAFF = (
+            False  # Do not use this setting for a public site!
+        )
     except ImportError:
         pass
 
diff --git a/ietf/settings_testcrawl.py b/ietf/settings_testcrawl.py
index 40744a228d..edb978757a 100644
--- a/ietf/settings_testcrawl.py
+++ b/ietf/settings_testcrawl.py
@@ -27,6 +27,9 @@
             'MAX_ENTRIES': 10000,
         },
     },
+    'agenda': {
+        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
+    },
     'proceedings': {
         'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
     },
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index f8ffacc83f..0386dbbdf9 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -306,6 +306,16 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
+    "agenda": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+        # No release-specific VERSION setting.
+        "KEY_PREFIX": "ietf:dt:agenda",
+        # Key function is default except with sha384-encoded key
+        "KEY_FUNCTION": lambda key, key_prefix, version: (
+            f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+        ),
+    },
     "proceedings": {
         "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
         "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",

From f8be1436fb9570eb623c6408cbb755e39bb18b22 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 10 Feb 2026 13:33:39 -0400
Subject: [PATCH 548/707] fix: add id attr to liaisons ButtonWidget (#10389)

---
 ietf/liaisons/widgets.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ietf/liaisons/widgets.py b/ietf/liaisons/widgets.py
index 74368e83f2..48db8af0a3 100644
--- a/ietf/liaisons/widgets.py
+++ b/ietf/liaisons/widgets.py
@@ -26,7 +26,9 @@ def render(self, name, value, **kwargs):
                 html += '<span class="d-none attachRequiredField">%s</span>' % conditional_escape(i)
             required_str = 'Please fill in %s to attach a new file' % conditional_escape(self.required_label)
             html += '<span class="d-none attachDisabledLabel">%s</span>' % conditional_escape(required_str)
-        html += '<button type="button" class="addAttachmentWidget btn btn-primary btn-sm">%s</button>' % conditional_escape(self.label)
+        html += '<button type="button" id="{}" class="addAttachmentWidget btn btn-primary btn-sm">{}</button>'.format(
+            f"id_{name}", conditional_escape(self.label)
+        )
         return mark_safe(html)
 
 

From 4a024d9d64e36714523b2f9e04bdbc3005aefc03 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 10 Feb 2026 12:25:43 -0600
Subject: [PATCH 549/707] fix: identify editorial drafts that should not expire
 (#10388)

---
 ietf/doc/expire.py | 50 ++++++++++++++++++++++++++++++++++------------
 1 file changed, 37 insertions(+), 13 deletions(-)

diff --git a/ietf/doc/expire.py b/ietf/doc/expire.py
index bf8523aa98..d42af628f8 100644
--- a/ietf/doc/expire.py
+++ b/ietf/doc/expire.py
@@ -38,22 +38,46 @@ def expirable_drafts(queryset=None):
     # Populate this first time through (but after django has been set up)
     if nonexpirable_states is None:
         # all IESG states except I-D Exists and Dead block expiry
-        nonexpirable_states = list(State.objects.filter(used=True, type="draft-iesg").exclude(slug__in=("idexists", "dead")))
+        nonexpirable_states = list(
+            State.objects.filter(used=True, type="draft-iesg").exclude(
+                slug__in=("idexists", "dead")
+            )
+        )
         # sent to RFC Editor and RFC Published block expiry (the latter
         # shouldn't be possible for an active draft, though)
-        nonexpirable_states += list(State.objects.filter(used=True, type__in=("draft-stream-iab", "draft-stream-irtf", "draft-stream-ise"), slug__in=("rfc-edit", "pub")))
+        nonexpirable_states += list(
+            State.objects.filter(
+                used=True,
+                type__in=(
+                    "draft-stream-iab",
+                    "draft-stream-irtf",
+                    "draft-stream-ise",
+                    "draft-stream-editorial",
+                ),
+                slug__in=("rfc-edit", "pub"),
+            )
+        )
         # other IRTF states that block expiration
-        nonexpirable_states += list(State.objects.filter(used=True, type_id="draft-stream-irtf", slug__in=("irsgpoll", "iesg-rev",)))
-
-    return queryset.filter(
-        states__type="draft", states__slug="active"
-    ).exclude(
-        expires=None
-    ).exclude(
-        states__in=nonexpirable_states
-    ).exclude(
-        tags="rfc-rev"  # under review by the RFC Editor blocks expiry
-    ).distinct()
+        nonexpirable_states += list(
+            State.objects.filter(
+                used=True,
+                type_id="draft-stream-irtf",
+                slug__in=(
+                    "irsgpoll",
+                    "iesg-rev",
+                ),
+            )
+        )
+
+    return (
+        queryset.filter(states__type="draft", states__slug="active")
+        .exclude(expires=None)
+        .exclude(states__in=nonexpirable_states)
+        .exclude(
+            tags="rfc-rev"  # under review by the RFC Editor blocks expiry
+        )
+        .distinct()
+    )
 
 
 def get_soon_to_expire_drafts(days_of_warning):

From 832c62e5c1f0cba736842cbe241236bfc8cf386f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 11 Feb 2026 11:41:58 -0400
Subject: [PATCH 550/707] feat: format+has_errata, drop see_also for red API
 (#10392)

* fix: has_errata field for red API

* chore: explanatory comment

* feat: accurate format list for red API

* refactor: specify blob names in API

* chore: remove see_also field

* fix: finish removing see_also field
---
 ietf/doc/api.py         | 27 ++++++++++++++++++++++-----
 ietf/doc/models.py      | 18 ++++++++++++++++++
 ietf/doc/serializers.py | 33 +++++++++++++++++++++++----------
 3 files changed, 63 insertions(+), 15 deletions(-)

diff --git a/ietf/doc/api.py b/ietf/doc/api.py
index 47e7e6fffd..6a4c0c9fd5 100644
--- a/ietf/doc/api.py
+++ b/ietf/doc/api.py
@@ -1,7 +1,17 @@
 # Copyright The IETF Trust 2024-2026, All Rights Reserved
 """Doc API implementations"""
 
-from django.db.models import OuterRef, Subquery, Prefetch, Value, JSONField, QuerySet
+from django.db.models import (
+    BooleanField,
+    Count,
+    JSONField,
+    OuterRef,
+    Prefetch,
+    Q,
+    QuerySet,
+    Subquery,
+    Value,
+)
 from django.db.models.functions import TruncDate
 from django_filters import rest_framework as filters
 from rest_framework import filters as drf_filters
@@ -133,11 +143,18 @@ def augment_rfc_queryset(queryset: QuerySet[Document]):
         )
         .annotate(published=TruncDate("published_datetime", tzinfo=RPC_TZINFO))
         .annotate(
-            # TODO implement these fake fields for real
-            see_also=Value([], output_field=JSONField()),
-            formats=Value(["txt", "xml"], output_field=JSONField()),
+            # Count of "verified-errata" tags will be 1 or 0, convert to Boolean
+            has_errata=Count(
+                "tags",
+                filter=Q(
+                    tags__slug="verified-errata",
+                ),
+                output_field=BooleanField(),
+            )
+        )
+        .annotate(
+            # TODO implement this fake field for real
             keywords=Value(["keyword"], output_field=JSONField()),
-            errata=Value([], output_field=JSONField()),
         )
     )
 
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 463aa6fd97..ec9a25add8 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1284,6 +1284,24 @@ def action_holders_enabled(self):
         iesg_state = self.get_state('draft-iesg')
         return iesg_state and iesg_state.slug != 'idexists'
 
+    def formats(self):
+        """List of file formats available
+        
+        Only implemented for RFCs. Relies on StoredObject.
+        """
+        if self.type_id != "rfc":
+            raise RuntimeError("Only allowed for type=rfc")
+        return [
+            {
+                "fmt": Path(object_name).parts[0],
+                "name": object_name,
+            }
+            for object_name in StoredObject.objects.filter(
+                store="rfc", doc_name=self.name, doc_rev=self.rev
+            ).values_list("name", flat=True)
+        ]
+
+
 class DocumentURL(models.Model):
     doc  = ForeignKey(Document)
     tag  = ForeignKey(DocUrlTagName)
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index 05647d9ce1..e8d373164b 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -16,6 +16,7 @@
 
 class RfcAuthorSerializer(serializers.ModelSerializer):
     """Serializer for an RfcAuthor / DocumentAuthor in a response"""
+
     datatracker_person_path = serializers.URLField(
         source="person.get_absolute_url",
         required=False,
@@ -36,7 +37,7 @@ class Meta:
 
     def to_representation(self, instance):
         """instance -> primitive data types
-        
+
         Translates a DocumentAuthor into an equivalent RfcAuthor we can use the same
         serializer for either type.
         """
@@ -87,7 +88,15 @@ class DocIdentifierSerializer(serializers.Serializer):
 
 
 type RfcStatusSlugT = Literal[
-    "std", "ps", "ds", "bcp", "inf", "exp", "hist", "unkn", "not-issued",
+    "std",
+    "ps",
+    "ds",
+    "bcp",
+    "inf",
+    "exp",
+    "hist",
+    "unkn",
+    "not-issued",
 ]
 
 
@@ -188,11 +197,16 @@ class ContainingSubseriesSerializer(serializers.Serializer):
     type = serializers.CharField(source="source.type_id")
 
 
+class RfcFormatSerializer(serializers.Serializer):
+    RFC_FORMATS = ("xml", "txt", "html", "pdf", "ps", "json", "notprepped")
+
+    fmt = serializers.ChoiceField(choices=RFC_FORMATS)
+    name = serializers.CharField(help_text="Name of blob in the blob store")
+
+
 class RfcMetadataSerializer(serializers.ModelSerializer):
     """Serialize metadata of an RFC"""
 
-    RFC_FORMATS = ("xml", "txt", "html", "htmlized", "pdf", "ps")
-
     number = serializers.IntegerField(source="rfc_number")
     published = serializers.DateField()
     status = RfcStatusSerializer(source="*")
@@ -207,10 +221,11 @@ class RfcMetadataSerializer(serializers.ModelSerializer):
     updates = RelatedRfcSerializer(many=True, read_only=True)
     updated_by = ReverseRelatedRfcSerializer(many=True, read_only=True)
     subseries = ContainingSubseriesSerializer(many=True, read_only=True)
-    see_also = serializers.ListField(child=serializers.CharField(), read_only=True)
-    formats = serializers.MultipleChoiceField(choices=RFC_FORMATS)
+    formats = RfcFormatSerializer(
+        many=True, read_only=True, help_text="Available formats"
+    )
     keywords = serializers.ListField(child=serializers.CharField(), read_only=True)
-    errata = serializers.ListField(child=serializers.CharField(), read_only=True)
+    has_errata = serializers.BooleanField(read_only=True)
 
     class Meta:
         model = Document
@@ -230,15 +245,13 @@ class Meta:
             "updates",
             "updated_by",
             "subseries",
-            "see_also",
             "draft",
             "abstract",
             "formats",
             "keywords",
-            "errata",
+            "has_errata",
         ]
 
-
     @extend_schema_field(RfcAuthorSerializer(many=True))
     def get_authors(self, doc: Document):
         # If doc has any RfcAuthors, use those, otherwise fall back to DocumentAuthors

From 66a1bf0a9ecae30036cf23fc07f6f26b27b1e94d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 11 Feb 2026 15:00:57 -0400
Subject: [PATCH 551/707] chore: un-squelch bibtexparser DeprecationWarnings
 (#10395)

---
 ietf/settings.py | 2 --
 requirements.txt | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 899a377ad7..565e8825a9 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -36,8 +36,6 @@
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="oic.utils.time_util")
 warnings.filterwarnings("ignore", message="datetime.datetime.utcfromtimestamp\\(\\) is deprecated", module="pytz.tzinfo")
 warnings.filterwarnings("ignore", message="'instantiateVariableFont' is deprecated", module="weasyprint")
-warnings.filterwarnings("ignore", category=DeprecationWarning, module="bibtexparser")  # https://github.com/sciunto-org/python-bibtexparser/issues/502
-warnings.filterwarnings("ignore", category=DeprecationWarning, module="pyparsing")  # https://github.com/sciunto-org/python-bibtexparser/issues/502
 
 
 base_path = pathlib.Path(__file__).resolve().parent
diff --git a/requirements.txt b/requirements.txt
index 3f89f6f16c..cb583d5dc9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@ setuptools>=80.9.0  # Require this first, to prevent later errors
 aiosmtpd>=1.4.6
 argon2-cffi>=25.1.0  # For the Argon2 password hasher option
 beautifulsoup4>=4.13.4  # Only used in tests
-bibtexparser>=1.4.3  # Only used in tests
+bibtexparser>=1.4.4  # Only used in tests
 bleach>=6.2.0  # project is deprecated but supported
 types-bleach>=6.2.0
 boto3>=1.39.15

From 0b637ef4ace72f31a963b7603a8f69a253420810 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Wed, 11 Feb 2026 19:13:44 +0000
Subject: [PATCH 552/707] ci: update base image target version to 20260211T1901

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 41ff295eec..71370fabee 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260114T1756
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260211T1901
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 3ad31c7e25..947f3790e4 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260114T1756
+20260211T1901

From 492888b8a22113becc2cbe3900ba3294cfc6d7f6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Feb 2026 11:34:11 -0400
Subject: [PATCH 553/707] fix: handle doc_rev is None in Document.formats
 (#10401)

Likely a temporary fix, but safer for quick deployment while we
work on the bigger project.
---
 ietf/api/views_rpc.py |  2 +-
 ietf/doc/models.py    | 12 +++++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 6b1799f654..2bf16480f2 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -487,7 +487,7 @@ def post(self, request):
                         name=self._blob_destination(ftm),
                         file=f,
                         doc_name=rfc.name,
-                        doc_rev=rfc.rev,  # expect None, but match whatever it is
+                        doc_rev=rfc.rev,  # expect blank, but match whatever it is
                         mtime=mtime,
                     )
                 destination = self._fs_destination(ftm)
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index ec9a25add8..8f700bf496 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -12,6 +12,8 @@
 
 from io import BufferedReader
 from pathlib import Path
+
+from django.db.models import Q
 from lxml import etree
 from typing import Optional, Protocol, TYPE_CHECKING, Union
 from weasyprint import HTML as wpHTML
@@ -1291,13 +1293,21 @@ def formats(self):
         """
         if self.type_id != "rfc":
             raise RuntimeError("Only allowed for type=rfc")
+
+        # StoredObject.doc_rev can be null or "" to represent no rev. Match either
+        # of these when self.rev is "" (always expected to be the case for RFCs)
+        rev_q = Q(doc_rev=self.rev)
+        if self.rev == "":
+            rev_q |= Q(doc_rev__isnull=True)
         return [
             {
                 "fmt": Path(object_name).parts[0],
                 "name": object_name,
             }
             for object_name in StoredObject.objects.filter(
-                store="rfc", doc_name=self.name, doc_rev=self.rev
+                rev_q,
+                store="rfc",
+                doc_name=self.name,
             ).values_list("name", flat=True)
         ]
 

From 1b306eb7f3b9b45b3162101c7fc216ac7da3eab1 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Feb 2026 13:49:22 -0400
Subject: [PATCH 554/707] feat: bofreq timestamp fixup task (#10402)

* feat: utility to fix up bofreq timestamps

* fix: don't fix -00 (+ logging)

* feat: task

* chore: disable test coverage for one-off task
---
 ietf/doc/tasks.py        |   8 ++-
 ietf/doc/utils_bofreq.py | 143 ++++++++++++++++++++++++++++++++++++++-
 2 files changed, 147 insertions(+), 4 deletions(-)

diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 02b7c2a07d..b463b9cecf 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2024-2025, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 #
 # Celery task definitions
 #
@@ -34,6 +34,7 @@
     ensure_draft_bibxml_path_exists,
     investigate_fragment,
 )
+from .utils_bofreq import fixup_bofreq_timestamps
 
 
 @shared_task
@@ -149,3 +150,8 @@ def rebuild_reference_relations_task(doc_names: list[str]):
             rebuild_reference_relations(doc, filenames)
         else:
             log.log(f"Found no content for {stem}")
+
+
+@shared_task
+def fixup_bofreq_timestamps_task():  # pragma: nocover
+    fixup_bofreq_timestamps()
diff --git a/ietf/doc/utils_bofreq.py b/ietf/doc/utils_bofreq.py
index aec8f60ad6..d01b039b8e 100644
--- a/ietf/doc/utils_bofreq.py
+++ b/ietf/doc/utils_bofreq.py
@@ -1,12 +1,149 @@
-# Copyright The IETF Trust 2021 All Rights Reserved
+# Copyright The IETF Trust 2021-2026 All Rights Reserved
+import datetime
+from pathlib import Path
 
-from ietf.doc.models import BofreqEditorDocEvent, BofreqResponsibleDocEvent
+from django.conf import settings
+
+from ietf.doc.models import (
+    BofreqEditorDocEvent,
+    BofreqResponsibleDocEvent,
+    DocEvent,
+    DocHistory,
+    Document,
+)
 from ietf.person.models import Person
+from ietf.utils import log
+
 
 def bofreq_editors(bofreq):
     e = bofreq.latest_event(BofreqEditorDocEvent)
     return e.editors.all() if e else Person.objects.none()
 
+
 def bofreq_responsible(bofreq):
     e = bofreq.latest_event(BofreqResponsibleDocEvent)
-    return e.responsible.all() if e else Person.objects.none()
\ No newline at end of file
+    return e.responsible.all() if e else Person.objects.none()
+
+
+def fixup_bofreq_timestamps():  # pragma: nocover
+    """Fixes bofreq event / document timestamps
+
+    Timestamp errors resulted from the bug fixed by
+    https://github.com/ietf-tools/datatracker/pull/10333
+    
+    Does not fix up -00 revs because the timestamps on these were not affected by
+    the bug. Replacing their timestamps creates a confusing event history because the 
+    filesystem timestamp is usually a fraction of a second later than other events
+    created upon the initial rev creation. This causes the "New revision available"
+    event to appear _after_ these events in the history. Better to leave them as is.  
+    """
+    FIX_DEPLOYMENT_TIME = "2026-02-03T01:16:00+00:00"  # 12.58.0 -> production
+
+    def _get_doc_time(doc_name: str, rev: str):
+        path = Path(settings.BOFREQ_PATH) / f"{doc_name}-{rev}.md"
+        return datetime.datetime.fromtimestamp(path.stat().st_mtime, datetime.UTC)
+
+    # Find affected DocEvents and DocHistories
+    new_bofreq_events = (
+        DocEvent.objects.filter(
+            doc__type="bofreq", type="new_revision", time__lt=FIX_DEPLOYMENT_TIME
+        )
+        .exclude(rev="00")  # bug did not affect rev 00 events
+        .order_by("doc__name", "rev")
+    )
+    log.log(
+        f"fixup_bofreq_timestamps: found {new_bofreq_events.count()} "
+        f"new_revision events before {FIX_DEPLOYMENT_TIME}"
+    )
+    document_fixups = {}
+    for e in new_bofreq_events:
+        name = e.doc.name
+        rev = e.rev
+        filesystem_time = _get_doc_time(name, rev)
+        assert e.time < filesystem_time, (
+            f"Rev {rev} event timestamp for {name} unexpectedly later than the "
+            "filesystem timestamp!"
+        )
+        try:
+            dochistory = DocHistory.objects.filter(
+                name=name, time__lt=filesystem_time
+            ).get(rev=rev)
+        except DocHistory.MultipleObjectsReturned as err:
+            raise RuntimeError(
+                f"Multiple DocHistories for {name} rev {rev} exist earlier than the "
+                "filesystem timestamp!"
+            ) from err
+        except DocHistory.DoesNotExist as err:
+            if rev == "00":
+                # Unreachable because we don't adjust -00 revs, but could be needed
+                # if we did, in theory. In practice it's still not reached, but
+                # keeping the case for completeness.
+                dochistory = None
+            else:
+                raise RuntimeError(
+                    f"No DocHistory for {name} rev {rev} exists earlier than the "
+                    f"filesystem timestamp!"
+                ) from err
+
+        if name not in document_fixups:
+            document_fixups[name] = []
+        document_fixups[name].append(
+            {
+                "event": e,
+                "dochistory": dochistory,
+                "filesystem_time": filesystem_time,
+            }
+        )
+
+    # Now do the actual fixup
+    system_person = Person.objects.get(name="(System)")
+    for doc_name, fixups in document_fixups.items():
+        bofreq = Document.objects.get(type="bofreq", name=doc_name)
+        log_msg_parts = []
+        adjusted_revs = []
+        for fixup in fixups:
+            event_to_fix = fixup["event"]
+            dh_to_fix = fixup["dochistory"]
+            new_time = fixup["filesystem_time"]
+            adjusted_revs.append(event_to_fix.rev)
+
+            # Fix up the event
+            event_to_fix.time = new_time
+            event_to_fix.save()
+            log_msg_parts.append(f"rev {event_to_fix.rev} DocEvent")
+
+            # Fix up the DocHistory
+            if dh_to_fix is not None:
+                dh_to_fix.time = new_time
+                dh_to_fix.save()
+                log_msg_parts.append(f"rev {dh_to_fix.rev} DocHistory")
+
+            if event_to_fix.rev == bofreq.rev and bofreq.time < new_time:
+                # Update the Document without calling save(). Only update if
+                # the time has not changed so we don't inadvertently overwrite
+                # a concurrent update.
+                Document.objects.filter(pk=bofreq.pk, time=bofreq.time).update(
+                    time=new_time
+                )
+                bofreq.refresh_from_db()
+                if bofreq.rev == event_to_fix.rev:
+                    log_msg_parts.append(f"rev {bofreq.rev} Document")
+                else:
+                    log.log(
+                        "fixup_bofreq_timestamps: WARNING: bofreq Document rev "
+                        f"changed for {bofreq.name}"
+                    )
+        log.log(f"fixup_bofreq_timestamps: {bofreq.name}: " + ", ".join(log_msg_parts))
+
+        # Fix up the Document, if necessary, and add a record of the adjustment
+        DocEvent.objects.create(
+            type="added_comment",
+            by=system_person,
+            doc=bofreq,
+            rev=bofreq.rev,
+            desc=(
+                "Corrected inaccurate document and new revision event timestamps for "
+                + ("version " if len(adjusted_revs) == 1 else "versions ")
+                + ", ".join(adjusted_revs)
+            ),
+        )

From 4945809b7804c1f15de1b0340be269dd7e200f95 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Feb 2026 13:56:46 -0400
Subject: [PATCH 555/707] chore(dev): update beat in docker-compose.yml
 (#10330)

Fixes commented-out config
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 2440faf121..ebe53cf95a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -129,7 +129,7 @@ services:
 #  but can be enabled by uncommenting the following.
 #
 #    beat:
-#        image: ghcr.io/ietf-tools/datatracker-celery:latest
+#        image: "${COMPOSE_PROJECT_NAME}-celery"
 #        init: true
 #        environment:
 #            CELERY_APP: ietf

From 8005a8baa6ffb72c47d6e35f44c0e5d78b456a2d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 13 Feb 2026 11:36:23 -0400
Subject: [PATCH 556/707] chore(dev): update docker-compose depends_on (#10410)

* chore(dev): update docker-compose depends_on

* chore(dev): another depends_on tweak

app/celery don't actually use the blobstore container,
but the Django config refers to it so we should
probably depend on it anyway
---
 docker-compose.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index ebe53cf95a..4c3f2f6b8e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,9 +13,10 @@ services:
         # network_mode: service:db
 
         depends_on:
+            - blobdb
+            - blobstore
             - db
             - mq
-            - blobstore
 
         ipc: host
 
@@ -79,7 +80,10 @@ services:
         command:
             - '--loglevel=INFO'
         depends_on:
+            - blobdb
+            - blobstore
             - db
+            - mq
         restart: unless-stopped
         stop_grace_period: 1m
         volumes:
@@ -102,7 +106,10 @@ services:
             - '--concurrency=1'
                  
         depends_on:
+            - blobdb
+            - blobstore
             - db
+            - mq
         restart: unless-stopped
         stop_grace_period: 1m
         volumes:

From 8d804f3427b4d4c40aa6bfadba92a433bd468b26 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Feb 2026 15:22:24 -0400
Subject: [PATCH 557/707] feat: button to push slide decks to Meetecho (#10431)

* refactor: eliminate inline script

Partially removes jQuery from this corner

* chore: indicate whether slide updates were sent

* feat: admin button to push slide decks to Meetecho

* test: new test

* test: cover interim case
---
 ietf/meeting/tests_views.py                 | 63 +++++++++++++++-
 ietf/meeting/urls.py                        |  3 +-
 ietf/meeting/views.py                       | 46 ++++++++++++
 ietf/static/js/session_details.js           | 53 ++++++++++++++
 ietf/templates/meeting/session_details.html | 81 ++++++---------------
 ietf/utils/meetecho.py                      | 48 +++++++++---
 ietf/utils/tests_meetecho.py                | 47 ++++++++++--
 package.json                                |  1 +
 8 files changed, 268 insertions(+), 74 deletions(-)
 create mode 100644 ietf/static/js/session_details.js

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index b94229d969..168999d0aa 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -4754,7 +4754,7 @@ def _approval_url(slidesub):
                 0,
                 "second session proposed slides should be linked for approval",
             )
-        
+
 
 class EditScheduleListTests(TestCase):
     def setUp(self):
@@ -7345,6 +7345,67 @@ def test_submit_and_approve_multiple_versions(self, mock_slides_manager_cls):
         fd.close()
         self.assertIn('third version', contents)
 
+    @override_settings(
+        MEETECHO_API_CONFIG="fake settings"
+    )  # enough to trigger API calls
+    @patch("ietf.meeting.views.SlidesManager")
+    def test_notify_meetecho_of_all_slides(self, mock_slides_manager_cls):
+        for meeting_type in ["ietf", "interim"]:
+            # Reset for the sake of the second iteration
+            self.client.logout()
+            mock_slides_manager_cls.reset_mock()
+
+            session = SessionFactory(meeting__type_id=meeting_type)
+            meeting = session.meeting
+    
+            # bad meeting
+            url = urlreverse(
+                "ietf.meeting.views.notify_meetecho_of_all_slides",
+                kwargs={"num": 9999, "acronym": session.group.acronym},
+            )
+            login_testing_unauthorized(self, "secretary", url)
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 404)
+            r = self.client.post(url)
+            self.assertEqual(r.status_code, 404)
+            self.assertFalse(mock_slides_manager_cls.called)
+            self.client.logout()
+    
+            # good meeting
+            url = urlreverse(
+                "ietf.meeting.views.notify_meetecho_of_all_slides",
+                kwargs={"num": meeting.number, "acronym": session.group.acronym},
+            )
+            login_testing_unauthorized(self, "secretary", url)
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 405)
+            self.assertFalse(mock_slides_manager_cls.called)
+            mock_slides_manager = mock_slides_manager_cls.return_value
+            mock_slides_manager.send_update.return_value = True
+            r = self.client.post(url)
+            self.assertEqual(r.status_code, 302)
+            self.assertEqual(mock_slides_manager.send_update.call_count, 1)
+            self.assertEqual(mock_slides_manager.send_update.call_args, call(session))
+            r = self.client.get(r["Location"])
+            messages = list(r.context["messages"])
+            self.assertEqual(len(messages), 1)
+            self.assertEqual(
+                str(messages[0]), f"Notified Meetecho about slides for {session}"
+            )
+    
+            mock_slides_manager.send_update.reset_mock()
+            mock_slides_manager.send_update.return_value = False
+            r = self.client.post(url)
+            self.assertEqual(r.status_code, 302)
+            self.assertEqual(mock_slides_manager.send_update.call_count, 1)
+            self.assertEqual(mock_slides_manager.send_update.call_args, call(session))
+            r = self.client.get(r["Location"])
+            messages = list(r.context["messages"])
+            self.assertEqual(len(messages), 1)
+            self.assertIn(
+                "No sessions were eligible for Meetecho slides update.", str(messages[0])
+            )
+
 
 @override_settings(IETF_NOTES_URL='https://notes.ietf.org/')
 class ImportNotesTests(TestCase):
diff --git a/ietf/meeting/urls.py b/ietf/meeting/urls.py
index af36a6656c..a038e1cfe6 100644
--- a/ietf/meeting/urls.py
+++ b/ietf/meeting/urls.py
@@ -15,6 +15,7 @@ def get_redirect_url(self, *args, **kwargs):
 
 safe_for_all_meeting_types = [
     url(r'^session/(?P<acronym>[-a-z0-9]+)/?$',  views.session_details),
+    url(r'^session/(?P<acronym>[-a-z0-9]+)/send_slide_notifications$',  views.notify_meetecho_of_all_slides),
     url(r'^session/(?P<session_id>\d+)/drafts$',  views.add_session_drafts),
     url(r'^session/(?P<session_id>\d+)/recordings$', views.add_session_recordings),
     url(r'^session/(?P<session_id>\d+)/attendance$', views.session_attendance),
@@ -30,7 +31,7 @@ def get_redirect_url(self, *args, **kwargs):
     url(r'^session/(?P<session_id>\d+)/doc/%(name)s/remove$' % settings.URL_REGEXPS, views.remove_sessionpresentation),
     url(r'^session/(?P<session_id>\d+)\.ics$',    views.agenda_ical),
     url(r'^sessions/(?P<acronym>[-a-z0-9]+)\.ics$', views.agenda_ical),
-    url(r'^slidesubmission/(?P<slidesubmission_id>\d+)$', views.approve_proposed_slides)
+    url(r'^slidesubmission/(?P<slidesubmission_id>\d+)$', views.approve_proposed_slides),
 ]
 
 
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 8dccda9c87..731dfad88f 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -5710,6 +5710,52 @@ def approve_proposed_slides(request, slidesubmission_id, num):
                   })
 
 
+@role_required("Secretariat")
+def notify_meetecho_of_all_slides(request, num, acronym):
+    """Notify meetecho of state of all slides for the group
+
+    Respects the usual notification window around each session. Meetecho will ignore
+    notices outside that window anyway, so no sense sending them.
+    """
+    meeting = get_meeting(num=num, type_in=None)  # raises 404
+    if request.method != "POST":
+        return HttpResponseNotAllowed(
+            content="Method not allowed",
+            content_type=f"text/plain; charset={settings.DEFAULT_CHARSET}",
+            permitted_methods=("POST",),
+        )
+    scheduled_sessions = [
+        session
+        for session in get_sessions(meeting.number, acronym)
+        if session.current_status == "sched"
+    ]
+    sm = SlidesManager(api_config=settings.MEETECHO_API_CONFIG)
+    updated = []
+    for session in scheduled_sessions:
+        if sm.send_update(session):
+            updated.append(session)
+    if len(updated) > 0:
+        messages.success(
+            request,
+            f"Notified Meetecho about slides for {','.join(str(s) for s in updated)}",
+        )
+    elif sm.slides_notify_time is not None:
+        messages.warning(
+            request,
+            "No sessions were eligible for Meetecho slides update. Updates are "
+            f"only sent within {sm.slides_notify_time} before or after the session.",
+        )
+    else:
+        messages.warning(
+            request,
+            "No sessions were eligible for Meetecho slides update. Updates are "
+            "currently disabled.",
+        )
+    return redirect(
+        "ietf.meeting.views.session_details", num=meeting.number, acronym=acronym
+    )
+
+
 def import_session_minutes(request, session_id, num):
     """Import session minutes from the ietf.notes.org site
 
diff --git a/ietf/static/js/session_details.js b/ietf/static/js/session_details.js
new file mode 100644
index 0000000000..03d1b2d3d9
--- /dev/null
+++ b/ietf/static/js/session_details.js
@@ -0,0 +1,53 @@
+// Copyright The IETF Trust 2026, All Rights Reserved
+// Relies on other scripts being loaded, see usage in session_details.html
+document.addEventListener('DOMContentLoaded', () => {
+    // Init with best guess at local timezone.
+    ietf_timezone.set_tz_change_callback(timezone_changed) // cb is in upcoming.js
+    ietf_timezone.initialize('local')
+
+    // Set up sortable elements if the user can manage materials
+    if (document.getElementById('can-manage-materials-flag')) {
+        const sortables = []
+        const options = {
+            group: 'slides',
+            animation: 150,
+            handle: '.drag-handle',
+            onAdd: function (event) {onAdd(event)},
+            onRemove: function (event) {onRemove(event)},
+            onEnd: function (event) {onEnd(event)}
+        }
+
+        function onAdd (event) {
+            const old_session = event.from.getAttribute('data-session')
+            const new_session = event.to.getAttribute('data-session')
+            $.post(event.to.getAttribute('data-add-to-session'), {
+                'order': event.newIndex + 1,
+                'name': event.item.getAttribute('name')
+            })
+            $(event.item).find('td:eq(1)').find('a').each(function () {
+                $(this).attr('href', $(this).attr('href').replace(old_session, new_session))
+            })
+        }
+
+        function onRemove (event) {
+            const old_session = event.from.getAttribute('data-session')
+            $.post(event.from.getAttribute('data-remove-from-session'), {
+                'oldIndex': event.oldIndex + 1,
+                'name': event.item.getAttribute('name')
+            })
+        }
+
+        function onEnd (event) {
+            if (event.to == event.from) {
+                $.post(event.from.getAttribute('data-reorder-in-session'), {
+                    'oldIndex': event.oldIndex + 1,
+                    'newIndex': event.newIndex + 1
+                })
+            }
+        }
+
+        for (const elt of document.querySelectorAll('.slides tbody')) {
+            sortables.push(Sortable.create(elt, options))
+        }
+    }
+})
diff --git a/ietf/templates/meeting/session_details.html b/ietf/templates/meeting/session_details.html
index 55fa3d3857..a4d9ba1090 100644
--- a/ietf/templates/meeting/session_details.html
+++ b/ietf/templates/meeting/session_details.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2026, All Rights Reserved #}
 {% load origin ietf_filters static %}
 {% block title %}{{ meeting }} : {{ group.acronym }}{% endblock %}
 {% block morecss %}
@@ -53,69 +53,36 @@ <h2 class="mt-3">Unscheduled Sessions</h2>
             {% endif %}
         {% if forloop.last %}</div>{% endif %}
     {% endfor %}
+    {% if user|has_role:"Secretariat" %}
+        <div class="card text-dark bg-warning mt-5 mb-3">
+            <div class="card-header">
+                Secretariat Only
+            </div>
+            <div class="card-body">
+                <form method="post"
+                      action="{% url 'ietf.meeting.views.notify_meetecho_of_all_slides' num=meeting.number acronym=group.acronym %}">
+                    {% csrf_token %}
+                    <button class="btn btn-primary" type="submit">
+                        Notify Meetecho of Slides
+                    </button>
+                </form>
+            </div>
+        </div>
+    {% endif %}
+    {% comment %}
+    The existence of an element with id canManageMaterialsFlag is checked in
+    session_details.js to determine whether it should init the sortable tables.
+    Not the most elegant approach, but it works.
+    {% endcomment %}
+    {% if can_manage_materials %} <div id="can-manage-materials-flag"></div>{% endif %}
 {% endblock %}
 {% block js %}
     <script src="{% static 'ietf/js/list.js' %}"></script>
     <script src="{% static 'ietf/js/moment.js' %}"></script>
     <script src="{% static 'ietf/js/upcoming.js' %}"></script>
     <script src="{% static 'ietf/js/timezone.js' %}"></script>
-    <script>
-    $(function () {
-            // Init with best guess at local timezone.
-            ietf_timezone.set_tz_change_callback(timezone_changed);
-            ietf_timezone.initialize('local');
-    });
-    </script>
     {% if can_manage_materials %}
         <script src="{% static 'ietf/js/sortable.js' %}"></script>
-        <script>
-            var sortables=[];
-            var options = {
-                group: "slides",
-                animation: 150,
-                handle: ".drag-handle",
-                onAdd: function(event) {onAdd(event)},
-                onRemove: function(event) {onRemove(event)},
-                onEnd: function(event) {onEnd(event)}
-            };
-
-            function onAdd(event) {
-                var old_session = event.from.getAttribute("data-session");
-                var new_session = event.to.getAttribute("data-session");
-                $.post(event.to.getAttribute("data-add-to-session"), {
-                    'order': event.newIndex + 1,
-                    'name': event.item.getAttribute("name")
-                });
-                $(event.item).find("td:eq(1)").find("a").each(function(){
-                    $(this).attr("href", $(this).attr("href").replace(old_session,new_session) );
-                });
-            }
-
-            function onRemove(event) {
-                var old_session = event.from.getAttribute("data-session");
-                $.post(event.from.getAttribute("data-remove-from-session"),{
-                    'oldIndex': event.oldIndex + 1,
-                    'name': event.item.getAttribute("name")
-                });
-            }
-
-            function onEnd(event) {
-                if (event.to == event.from) {
-                    $.post(event.from.getAttribute("data-reorder-in-session"),{
-                        'oldIndex': event.oldIndex + 1,
-                        'newIndex': event.newIndex + 1
-                    });
-                }
-            }
-
-            $(document).ready(function() {
-
-                $(".slides tbody").each(function() {
-                    sortables.push(Sortable.create(this, options));
-                });
-
-            });
-
-        </script>
     {% endif %}
+    <script src="{% static 'ietf/js/session_details.js' %}"></script>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/utils/meetecho.py b/ietf/utils/meetecho.py
index 7654f67cd1..943f3789ef 100644
--- a/ietf/utils/meetecho.py
+++ b/ietf/utils/meetecho.py
@@ -508,8 +508,13 @@ def _should_send_update(self, session):
             return (timeslot.time - self.slides_notify_time) < now < (timeslot.end_time() + self.slides_notify_time)
 
     def add(self, session: "Session", slides: "Document", order: int):
+        """Add a slide deck to the session
+        
+        Returns True if the update was sent, False if it was not sent because the
+        current time is outside the update window for the session.
+        """
         if not self._should_send_update(session):
-            return
+            return False
 
         # Would like to confirm that session.presentations includes the slides Document, but we can't
         # (same problem regarding unsaved Documents discussed in the docstring)
@@ -524,11 +529,16 @@ def add(self, session: "Session", slides: "Document", order: int):
                 "order": order,
             }
         )
+        return True
 
     def delete(self, session: "Session", slides: "Document"):
-        """Delete a slide deck from the session"""
+        """Delete a slide deck from the session
+        
+        Returns True if the update was sent, False if it was not sent because the
+        current time is outside the update window for the session.
+        """
         if not self._should_send_update(session):
-            return
+            return False
 
         if session.presentations.filter(document=slides).exists():
             # "order" problems are very likely to result if we delete slides that are actually still
@@ -543,12 +553,17 @@ def delete(self, session: "Session", slides: "Document"):
             id=slides.pk,
         )
         if session.presentations.filter(document__type_id="slides").exists():
-            self.send_update(session)  # adjust order to fill in the hole        
+            self._send_update(session)  # adjust order to fill in the hole
+        return True
     
     def revise(self, session: "Session", slides: "Document"):
-        """Replace existing deck with its current state"""
+        """Replace existing deck with its current state
+        
+        Returns True if the update was sent, False if it was not sent because the
+        current time is outside the update window for the session.
+        """
         if not self._should_send_update(session):
-            return
+            return False
 
         sp = session.presentations.filter(document=slides).first()
         if sp is None:
@@ -561,11 +576,13 @@ def revise(self, session: "Session", slides: "Document"):
             id=slides.pk,
         )
         self.add(session, slides, order)  # fill in the hole
+        return True
         
-    def send_update(self, session: "Session"):
-        if not self._should_send_update(session):
-            return
-
+    def _send_update(self, session: "Session"):
+        """Notify of the current state of the session's slides (no time window check)
+        
+        This is a private helper - use send_update() (no leading underscore) instead.
+        """
         self.api.update_slide_decks(
             wg_token=self.wg_token(session.group),
             session=str(session.pk),
@@ -580,3 +597,14 @@ def send_update(self, session: "Session"):
                 for deck in session.presentations.filter(document__type="slides")
             ]
         )
+
+    def send_update(self, session: "Session"):
+        """Notify of the current state of the session's slides
+        
+        Returns True if the update was sent, False if it was not sent because the
+        current time is outside the update window for the session.
+        """
+        if not self._should_send_update(session):
+            return False
+        self._send_update(session)
+        return True
diff --git a/ietf/utils/tests_meetecho.py b/ietf/utils/tests_meetecho.py
index 502e936483..c076a3df74 100644
--- a/ietf/utils/tests_meetecho.py
+++ b/ietf/utils/tests_meetecho.py
@@ -547,7 +547,8 @@ def test_add(self, mock_add, mock_wg_token):
         sm = SlidesManager(settings.MEETECHO_API_CONFIG)
         session = SessionFactory()
         slides_doc = DocumentFactory(type_id="slides")
-        sm.add(session, slides_doc, 13)
+        retval = sm.add(session, slides_doc, 13)
+        self.assertIs(retval, True)
         self.assertTrue(mock_wg_token.called)
         self.assertTrue(mock_add.called)
         self.assertEqual(
@@ -565,6 +566,14 @@ def test_add(self, mock_add, mock_wg_token):
             ),
         )
 
+        # Test return value when no update is sent. Really ought to do a more
+        # careful test of the _should_send_update() method.
+        sm = SlidesManager(
+            settings.MEETECHO_API_CONFIG | {"slides_notify_time": None}
+        )
+        retval = sm.add(session, slides_doc, 14)
+        self.assertIs(retval, False)
+
     @patch("ietf.utils.meetecho.MeetechoAPI.update_slide_decks")
     @patch("ietf.utils.meetecho.MeetechoAPI.delete_slide_deck")
     def test_delete(self, mock_delete, mock_update, mock_wg_token):
@@ -580,7 +589,8 @@ def test_delete(self, mock_delete, mock_update, mock_wg_token):
             sm.delete(session, slides_doc)  # can't remove slides still attached to the session
         self.assertFalse(any([mock_wg_token.called, mock_delete.called, mock_update.called]))
 
-        sm.delete(session, removed_slides_doc)
+        retval = sm.delete(session, removed_slides_doc)
+        self.assertIs(retval, True)
         self.assertTrue(mock_wg_token.called)
         self.assertTrue(mock_delete.called)
         self.assertEqual(
@@ -609,9 +619,18 @@ def test_delete(self, mock_delete, mock_update, mock_wg_token):
         
         # Delete the other session and check that we don't make the update call
         slides.delete()
-        sm.delete(session, slides_doc)
+        retval = sm.delete(session, slides_doc)
+        self.assertIs(retval, True)
         self.assertTrue(mock_delete.called)
         self.assertFalse(mock_update.called)
+        
+        # Test return value when no update is sent. Really ought to do a more
+        # careful test of the _should_send_update() method.
+        sm = SlidesManager(
+            settings.MEETECHO_API_CONFIG | {"slides_notify_time": None}
+        )
+        retval = sm.delete(session, slides_doc)
+        self.assertIs(retval, False)
 
     @patch("ietf.utils.meetecho.MeetechoAPI.delete_slide_deck")
     @patch("ietf.utils.meetecho.MeetechoAPI.add_slide_deck")
@@ -619,7 +638,8 @@ def test_revise(self, mock_add, mock_delete, mock_wg_token):
         sm = SlidesManager(settings.MEETECHO_API_CONFIG)
         slides = SessionPresentationFactory(document__type_id="slides", order=23)
         slides_doc = slides.document
-        sm.revise(slides.session, slides.document)
+        retval = sm.revise(slides.session, slides_doc)
+        self.assertIs(retval, True)
         self.assertTrue(mock_wg_token.called)
         self.assertTrue(mock_delete.called)
         self.assertEqual(
@@ -642,13 +662,22 @@ def test_revise(self, mock_add, mock_delete, mock_wg_token):
             ),
         )
 
+        # Test return value when no update is sent. Really ought to do a more
+        # careful test of the _should_send_update() method.
+        sm = SlidesManager(
+            settings.MEETECHO_API_CONFIG | {"slides_notify_time": None}
+        )
+        retval = sm.revise(slides.session, slides_doc)
+        self.assertIs(retval, False)
+
 
     @patch("ietf.utils.meetecho.MeetechoAPI.update_slide_decks")
     def test_send_update(self, mock_send_update, mock_wg_token):
         sm = SlidesManager(settings.MEETECHO_API_CONFIG)
         slides = SessionPresentationFactory(document__type_id="slides")
         SessionPresentationFactory(session=slides.session, document__type_id="agenda")
-        sm.send_update(slides.session)
+        retval = sm.send_update(slides.session)
+        self.assertIs(retval, True)
         self.assertTrue(mock_wg_token.called)
         self.assertTrue(mock_send_update.called)
         self.assertEqual(
@@ -667,3 +696,11 @@ def test_send_update(self, mock_send_update, mock_wg_token):
                 ]
             )
         )
+
+        # Test return value when no update is sent. Really ought to do a more
+        # careful test of the _should_send_update() method.
+        sm = SlidesManager(
+            settings.MEETECHO_API_CONFIG | {"slides_notify_time": None}
+        )
+        retval = sm.send_update(slides.session)
+        self.assertIs(retval, False)
diff --git a/package.json b/package.json
index e2e6fd7dab..fec29275b4 100644
--- a/package.json
+++ b/package.json
@@ -148,6 +148,7 @@
         "ietf/static/js/moment.js",
         "ietf/static/js/password_strength.js",
         "ietf/static/js/select2.js",
+        "ietf/static/js/session_details.js",
         "ietf/static/js/session_details_form.js",
         "ietf/static/js/session_form.js",
         "ietf/static/js/session_request.js",

From 619b2aee0f3b4acbc95a44f6fd3e8785163f6a93 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 20 Feb 2026 13:22:49 -0600
Subject: [PATCH 558/707] fix: adjust draft-stream-ietf state descriptions per
 IESG (#10437)

---
 ...ge_draft_stream_ietf_state_descriptions.py | 57 +++++++++++++++++++
 1 file changed, 57 insertions(+)
 create mode 100644 ietf/doc/migrations/0031_change_draft_stream_ietf_state_descriptions.py

diff --git a/ietf/doc/migrations/0031_change_draft_stream_ietf_state_descriptions.py b/ietf/doc/migrations/0031_change_draft_stream_ietf_state_descriptions.py
new file mode 100644
index 0000000000..c664126da3
--- /dev/null
+++ b/ietf/doc/migrations/0031_change_draft_stream_ietf_state_descriptions.py
@@ -0,0 +1,57 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    for name, desc in [
+        (
+            "Adopted by a WG",
+            "The individual submission document has been adopted by the Working Group (WG), but some administrative matter still needs to be completed (e.g., a WG document replacing this document with the typical naming convention of 'draft-ietf-wgname-topic-nn' has not yet been submitted).",
+        ),
+        (
+            "WG Document",
+            "The document has been identified as a Working Group (WG) document and is under development per Section 7.2 of RFC2418.",
+        ),
+        (
+            "Waiting for WG Chair Go-Ahead",
+            "The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chairs are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed.",
+        ),
+        (
+            "Submitted to IESG for Publication",
+            "The Working Group (WG) document has been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication per Section 7.4 of RFC2418.  See the “IESG State” or “RFC Editor State” for further details on the state of the document.",
+        ),
+    ]:
+        State.objects.filter(name=name).update(desc=desc, type="draft-stream-ietf")
+
+
+def reverse(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    for name, desc in [
+        (
+            "Adopted by a WG",
+            "The individual submission document has been adopted by the Working Group (WG), but a WG document replacing this document with the typical naming convention of 'draft- ietf-wgname-topic-nn' has not yet been submitted.",
+        ),
+        (
+            "WG Document",
+            "The document has been adopted by the Working Group (WG) and is under development.  A document can only be adopted by one WG at a time.  However, a document may be transferred between WGs.",
+        ),
+        (
+            "Waiting for WG Chair Go-Ahead",
+            "The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chair(s) are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed",
+        ),
+        (
+            "Submitted to IESG for Publication",
+            "The Working Group (WG) document has left the WG and been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication.  See the “IESG State” or “RFC Editor State” for further details on the state of the document.",
+        ),
+    ]:
+        State.objects.filter(name=name).update(desc=desc, type="draft-stream-ietf")
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0030_alter_dochistory_title_alter_document_title"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]

From c4be6318f73cbf896b5cc1f3416040e12b4611f4 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Feb 2026 15:25:57 -0400
Subject: [PATCH 559/707] feat: more API fields+filtering; drop RfcAuthor.email
 field (#10432)

* feat: RfcAuthorSerializer.email is current email

* refactor: RfcAuthor email field -> property

* feat: more RfcMetadataSerializer fields

* shepherd email (with a fallback to the draft)
* doc ad email
* area ad emails
* group list email

* fix: filter RFCs by any group type

* feat: filter by RFC numbers

* fix: shepherd -> draft object in response JSON

* fix: consistent filter naming

* chore: migration

* test: update test_notify_rfc_published

* fix: RfcAuthor.email() -> Email, not str

* fix: update RfcAuthorFactory

* fix: consistent blank value in email()

* fix: guard against non-prefetched queryset

* test: fix nomcom test

* refactor: name-addr -> addr for ad/shepherd

Also falls back to current primary email for ad/shepherd if the email on
record is inactive.
---
 ietf/api/tests_views_rpc.py                   | 25 +++++-----
 ietf/doc/admin.py                             |  4 +-
 ietf/doc/api.py                               | 10 +++-
 ietf/doc/factories.py                         |  1 -
 .../migrations/0031_remove_rfcauthor_email.py | 16 ++++++
 ietf/doc/models.py                            |  6 ++-
 ietf/doc/serializers.py                       | 50 +++++++++++++++----
 ietf/doc/views_doc.py                         |  2 +-
 ietf/group/serializers.py                     | 32 ++++++++++--
 ietf/nomcom/tests.py                          |  1 -
 10 files changed, 115 insertions(+), 32 deletions(-)
 create mode 100644 ietf/doc/migrations/0031_remove_rfcauthor_email.py

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 09fb40bf6e..1fbb4c3f02 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -143,22 +143,23 @@ def test_notify_rfc_published(self):
         self.assertEqual(rfc.title, "RFC " + draft.title)
         self.assertEqual(rfc.documentauthor_set.count(), 0)
         self.assertEqual(
-            list(
-                rfc.rfcauthor_set.values(
-                    "titlepage_name",
-                    "is_editor",
-                    "person",
-                    "email",
-                    "affiliation",
-                    "country",
-                )
-            ),
+            [
+                {
+                    "titlepage_name": ra.titlepage_name,
+                    "is_editor": ra.is_editor,
+                    "person": ra.person,
+                    "email": ra.email,
+                    "affiliation": ra.affiliation,
+                    "country": ra.country,
+                }
+                for ra in rfc.rfcauthor_set.all()
+            ],
             [
                 {
                     "titlepage_name": f"titlepage {author.name}",
                     "is_editor": False,
-                    "person": author.pk,
-                    "email": author.email_address(),
+                    "person": author,
+                    "email": author.email(),
                     "affiliation": "Some Affiliation",
                     "country": "CA",
                 }
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index f082418935..b604d4f096 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -242,6 +242,6 @@ def is_deleted(self, instance):
 
 class RfcAuthorAdmin(admin.ModelAdmin):
     list_display = ['id', 'document', 'titlepage_name', 'person', 'email', 'affiliation', 'country', 'order']
-    search_fields = ['document__name', 'titlepage_name', 'person__name', 'email__address', 'affiliation', 'country']
-    raw_id_fields = ["document", "person", "email"]
+    search_fields = ['document__name', 'titlepage_name', 'person__name', 'email', 'affiliation', 'country']
+    raw_id_fields = ["document", "person"]
 admin.site.register(RfcAuthor, RfcAuthorAdmin)
diff --git a/ietf/doc/api.py b/ietf/doc/api.py
index 6a4c0c9fd5..75993f463e 100644
--- a/ietf/doc/api.py
+++ b/ietf/doc/api.py
@@ -42,13 +42,21 @@ class RfcLimitOffsetPagination(LimitOffsetPagination):
     max_limit = 500
 
 
+class NumberInFilter(filters.BaseInFilter, filters.NumberFilter):
+    """Filter against a comma-separated list of numbers"""
+    pass
+
+
 class RfcFilter(filters.FilterSet):
     published = filters.DateFromToRangeFilter()
     stream = filters.ModelMultipleChoiceFilter(
         queryset=StreamName.objects.filter(used=True)
     )
+    number = NumberInFilter(
+        field_name="rfc_number"
+    )
     group = filters.ModelMultipleChoiceFilter(
-        queryset=Group.objects.wgs(),
+        queryset=Group.objects.all(),
         field_name="group__acronym",
         to_field_name="acronym",
     )
diff --git a/ietf/doc/factories.py b/ietf/doc/factories.py
index aad01be04f..bc38765446 100644
--- a/ietf/doc/factories.py
+++ b/ietf/doc/factories.py
@@ -391,7 +391,6 @@ class Meta:
         lambda obj: " ".join([obj.person.initials(), obj.person.last_name()])
     )
     person = factory.SubFactory('ietf.person.factories.PersonFactory')
-    email = factory.LazyAttribute(lambda obj: obj.person.email())
     affiliation = factory.Faker('company')
     order = factory.LazyAttribute(lambda o: o.document.rfcauthor_set.count() + 1)
 
diff --git a/ietf/doc/migrations/0031_remove_rfcauthor_email.py b/ietf/doc/migrations/0031_remove_rfcauthor_email.py
new file mode 100644
index 0000000000..c4c1911bfe
--- /dev/null
+++ b/ietf/doc/migrations/0031_remove_rfcauthor_email.py
@@ -0,0 +1,16 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0030_alter_dochistory_title_alter_document_title"),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name="rfcauthor",
+            name="email",
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 8f700bf496..cc28951be0 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -937,7 +937,6 @@ class RfcAuthor(models.Model):
     titlepage_name = models.CharField(max_length=128, blank=False)
     is_editor = models.BooleanField(default=False)
     person = ForeignKey(Person, null=True, blank=True, on_delete=models.PROTECT)
-    email = ForeignKey(Email, help_text="Email address used by author for submission", blank=True, null=True, on_delete=models.PROTECT)
     affiliation = models.CharField(max_length=100, blank=True, help_text="Organization/company used by author for submission")
     country = models.CharField(max_length=255, blank=True, help_text="Country used by author for submission")
     order = models.IntegerField(default=1)
@@ -951,6 +950,11 @@ class Meta:
             models.Index(fields=["document", "order"])
         ]
 
+    @property
+    def email(self) -> Email | None:
+        return self.person.email() if self.person else None
+
+
 class DocumentAuthorInfo(models.Model):
     person = ForeignKey(Person)
     # email should only be null for some historic documents
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index e8d373164b..b054b074d7 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -9,14 +9,20 @@
 from drf_spectacular.utils import extend_schema_field
 from rest_framework import serializers
 
-from ietf.group.serializers import GroupSerializer
+from ietf.group.serializers import (
+    AreaDirectorSerializer,
+    AreaSerializer,
+    GroupSerializer,
+)
 from ietf.name.serializers import StreamNameSerializer
+from ietf.utils import log
 from .models import Document, DocumentAuthor, RfcAuthor
 
 
 class RfcAuthorSerializer(serializers.ModelSerializer):
     """Serializer for an RfcAuthor / DocumentAuthor in a response"""
 
+    email = serializers.EmailField(source="email.address", read_only=True)
     datatracker_person_path = serializers.URLField(
         source="person.get_absolute_url",
         required=False,
@@ -29,7 +35,7 @@ class Meta:
             "titlepage_name",
             "is_editor",
             "person",
-            "email",  # relies on email.pk being email.address
+            "email",
             "affiliation",
             "country",
             "datatracker_person_path",
@@ -48,7 +54,6 @@ def to_representation(self, instance):
                 titlepage_name=document_author.person.plain_name(),
                 is_editor=False,
                 person=document_author.person,
-                email=document_author.email,
                 affiliation=document_author.affiliation,
                 country=document_author.country,
                 order=document_author.order,
@@ -174,10 +179,16 @@ def to_representation(self, instance: Document):
         return super().to_representation(instance=RfcStatus.from_document(instance))
 
 
+class ShepherdSerializer(serializers.Serializer):
+    email = serializers.EmailField(source="email_address")
+
+
 class RelatedDraftSerializer(serializers.Serializer):
     id = serializers.IntegerField(source="source.id")
     name = serializers.CharField(source="source.name")
     title = serializers.CharField(source="source.title")
+    shepherd = ShepherdSerializer(source="source.shepherd")
+    ad = AreaDirectorSerializer(source="source.ad")
 
 
 class RelatedRfcSerializer(serializers.Serializer):
@@ -205,15 +216,23 @@ class RfcFormatSerializer(serializers.Serializer):
 
 
 class RfcMetadataSerializer(serializers.ModelSerializer):
-    """Serialize metadata of an RFC"""
+    """Serialize metadata of an RFC
+
+    This needs to be called with a Document queryset that has been processed with
+    api.augment_rfc_queryset() or it very likely will not work. Some of the typing
+    refers to Document, but this should really be WithAnnotations[Document, ...].
+    However, have not been able to make that work yet.
+    """
 
     number = serializers.IntegerField(source="rfc_number")
     published = serializers.DateField()
     status = RfcStatusSerializer(source="*")
     authors = serializers.SerializerMethodField()
     group = GroupSerializer()
-    area = GroupSerializer(source="group.area", required=False)
+    area = AreaSerializer(source="group.area", required=False)
     stream = StreamNameSerializer()
+    ad = AreaDirectorSerializer(read_only=True)
+    group_list_email = serializers.EmailField(source="group.list_email", read_only=True)
     identifiers = serializers.SerializerMethodField()
     draft = serializers.SerializerMethodField()
     obsoletes = RelatedRfcSerializer(many=True, read_only=True)
@@ -239,6 +258,8 @@ class Meta:
             "group",
             "area",
             "stream",
+            "ad",
+            "group_list_email",
             "identifiers",
             "obsoletes",
             "obsoleted_by",
@@ -276,11 +297,20 @@ def get_identifiers(self, doc: Document):
         return DocIdentifierSerializer(instance=identifiers, many=True).data
 
     @extend_schema_field(RelatedDraftSerializer)
-    def get_draft(self, object):
-        try:
-            related_doc = object.drafts[0]
-        except IndexError:
-            return None
+    def get_draft(self, doc: Document):
+        if hasattr(doc, "drafts"):
+            # This is the expected case - drafts is added by a Prefetch in
+            # the augment_rfc_queryset() method.
+            try:
+                related_doc = doc.drafts[0]
+            except IndexError:
+                return None
+        else:
+            # Fallback in case augment_rfc_queryset() was not called
+            log.log(
+                f"Warning: {self.__class__}.get_draft() called without prefetched draft"
+            )
+            related_doc = doc.came_from_draft()
         return RelatedDraftSerializer(related_doc).data
 
 
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 0578da1b77..0ae7520681 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1657,7 +1657,7 @@ def extract_name(s):
         doc.rfcauthor_set
         if doc.type_id == "rfc" and doc.rfcauthor_set.exists()
         else doc.documentauthor_set
-    ).select_related("person", "email").order_by("order")
+    ).select_related("person").prefetch_related("person__email_set").order_by("order")
     data["authors"] = [
         {
             "name": author.titlepage_name if hasattr(author, "titlepage_name") else author.person.name,
diff --git a/ietf/group/serializers.py b/ietf/group/serializers.py
index 08e6bba81a..85f209019c 100644
--- a/ietf/group/serializers.py
+++ b/ietf/group/serializers.py
@@ -1,11 +1,37 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 """django-rest-framework serializers"""
+
+from drf_spectacular.utils import extend_schema_field
 from rest_framework import serializers
 
-from .models import Group
+from ietf.person.models import Email
+from .models import Group, Role
 
 
 class GroupSerializer(serializers.ModelSerializer):
     class Meta:
         model = Group
-        fields = ["acronym", "name", "type"]
+        fields = ["acronym", "name", "type", "list_email"]
+
+
+class AreaDirectorSerializer(serializers.Serializer):
+    """Serialize an area director
+
+    Works with Email or Role
+    """
+
+    email = serializers.SerializerMethodField()
+
+    @extend_schema_field(serializers.EmailField)
+    def get_email(self, instance: Email | Role):
+        if isinstance(instance, Role):
+            return instance.email.email_address()
+        return instance.email_address()
+
+
+class AreaSerializer(serializers.ModelSerializer):
+    ads = AreaDirectorSerializer(many=True, read_only=True)
+
+    class Meta:
+        model = Group
+        fields = ["acronym", "name", "type", "ads"]
diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index b6e8c57da7..210788ce07 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -2528,7 +2528,6 @@ def test_get_qualified_author_queryset(self):
             document=rfc,
             person=people[0],
             titlepage_name="P. Zero",
-            email=people[0].email_set.first(),
         )
         self.assertCountEqual(
             get_qualified_author_queryset(base_qs, now - 5 * one_year, now),

From d7319030f3d3a38bf0c048e713bc1f068ca228ed Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Feb 2026 16:12:43 -0400
Subject: [PATCH 560/707] chore: renumber migrations (#10441)

---
 ...remove_rfcauthor_email.py => 0032_remove_rfcauthor_email.py} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename ietf/doc/migrations/{0031_remove_rfcauthor_email.py => 0032_remove_rfcauthor_email.py} (80%)

diff --git a/ietf/doc/migrations/0031_remove_rfcauthor_email.py b/ietf/doc/migrations/0032_remove_rfcauthor_email.py
similarity index 80%
rename from ietf/doc/migrations/0031_remove_rfcauthor_email.py
rename to ietf/doc/migrations/0032_remove_rfcauthor_email.py
index c4c1911bfe..a0e147da59 100644
--- a/ietf/doc/migrations/0031_remove_rfcauthor_email.py
+++ b/ietf/doc/migrations/0032_remove_rfcauthor_email.py
@@ -5,7 +5,7 @@
 
 class Migration(migrations.Migration):
     dependencies = [
-        ("doc", "0030_alter_dochistory_title_alter_document_title"),
+        ("doc", "0031_change_draft_stream_ietf_state_descriptions"),
     ]
 
     operations = [

From abf5e0d97ca38ede129b218d3a895f9bb5ab441b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Feb 2026 17:45:31 -0400
Subject: [PATCH 561/707] fix: allow null for shepherd/ad (#10443)

---
 ietf/doc/serializers.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index b054b074d7..e42a6a0293 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -187,8 +187,8 @@ class RelatedDraftSerializer(serializers.Serializer):
     id = serializers.IntegerField(source="source.id")
     name = serializers.CharField(source="source.name")
     title = serializers.CharField(source="source.title")
-    shepherd = ShepherdSerializer(source="source.shepherd")
-    ad = AreaDirectorSerializer(source="source.ad")
+    shepherd = ShepherdSerializer(source="source.shepherd", allow_null=True)
+    ad = AreaDirectorSerializer(source="source.ad", allow_null=True)
 
 
 class RelatedRfcSerializer(serializers.Serializer):
@@ -231,7 +231,7 @@ class RfcMetadataSerializer(serializers.ModelSerializer):
     group = GroupSerializer()
     area = AreaSerializer(source="group.area", required=False)
     stream = StreamNameSerializer()
-    ad = AreaDirectorSerializer(read_only=True)
+    ad = AreaDirectorSerializer(read_only=True, allow_null=True)
     group_list_email = serializers.EmailField(source="group.list_email", read_only=True)
     identifiers = serializers.SerializerMethodField()
     draft = serializers.SerializerMethodField()

From 18902ff1be5746cafc958561e563f00be5f05176 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 24 Feb 2026 13:10:42 -0400
Subject: [PATCH 562/707] fix: more accurate group areas (red API) (#10462)

* fix: RFC area only for ietf stream

* fix: no ADs for inactive areas
---
 ietf/doc/serializers.py   | 19 ++++++++++++++++++-
 ietf/group/serializers.py |  9 ++++++++-
 2 files changed, 26 insertions(+), 2 deletions(-)

diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index e42a6a0293..36076c30be 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -229,7 +229,7 @@ class RfcMetadataSerializer(serializers.ModelSerializer):
     status = RfcStatusSerializer(source="*")
     authors = serializers.SerializerMethodField()
     group = GroupSerializer()
-    area = AreaSerializer(source="group.area", required=False)
+    area = serializers.SerializerMethodField()
     stream = StreamNameSerializer()
     ad = AreaDirectorSerializer(read_only=True, allow_null=True)
     group_list_email = serializers.EmailField(source="group.list_email", read_only=True)
@@ -287,6 +287,23 @@ def get_authors(self, doc: Document):
             many=True,
         ).data
 
+    @extend_schema_field(AreaSerializer(required=False))
+    def get_area(self, doc: Document):
+        """Get area for the RFC
+        
+        This logic might be better moved to Document or a combination of Document
+        and Group. The current (2026-02-24) Group.area() method is not strict enough:
+        it does not limit to WG groups or IETF-stream documents.
+        """
+        if doc.stream_id != "ietf":
+            return None
+        if doc.group is None:
+            return None
+        parent = doc.group.parent
+        if parent.type_id == "area":
+            return AreaSerializer(parent).data
+        return None
+
     @extend_schema_field(DocIdentifierSerializer(many=True))
     def get_identifiers(self, doc: Document):
         identifiers = []
diff --git a/ietf/group/serializers.py b/ietf/group/serializers.py
index 85f209019c..4ba92232c5 100644
--- a/ietf/group/serializers.py
+++ b/ietf/group/serializers.py
@@ -30,8 +30,15 @@ def get_email(self, instance: Email | Role):
 
 
 class AreaSerializer(serializers.ModelSerializer):
-    ads = AreaDirectorSerializer(many=True, read_only=True)
+    ads = serializers.SerializerMethodField()
 
     class Meta:
         model = Group
         fields = ["acronym", "name", "type", "ads"]
+
+    @extend_schema_field(AreaDirectorSerializer(many=True))
+    def get_ads(self, area: Group):
+        return AreaDirectorSerializer(
+            area.ads() if area.is_active else Role.objects.none(),
+            many=True,
+        ).data

From 07efd2b078a461da2eb7e197fc91f2ae0b45ac40 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 25 Feb 2026 12:58:57 -0400
Subject: [PATCH 563/707] fix: unbreak red API + group serializer tests
 (#10467)

* test: group serializer tests

* fix: Group.ads is a property

* fix: no need for type in AreaSerializer
---
 ietf/group/serializers.py       |  4 +-
 ietf/group/tests_serializers.py | 90 +++++++++++++++++++++++++++++++++
 2 files changed, 92 insertions(+), 2 deletions(-)
 create mode 100644 ietf/group/tests_serializers.py

diff --git a/ietf/group/serializers.py b/ietf/group/serializers.py
index 4ba92232c5..db3b37af48 100644
--- a/ietf/group/serializers.py
+++ b/ietf/group/serializers.py
@@ -34,11 +34,11 @@ class AreaSerializer(serializers.ModelSerializer):
 
     class Meta:
         model = Group
-        fields = ["acronym", "name", "type", "ads"]
+        fields = ["acronym", "name", "ads"]
 
     @extend_schema_field(AreaDirectorSerializer(many=True))
     def get_ads(self, area: Group):
         return AreaDirectorSerializer(
-            area.ads() if area.is_active else Role.objects.none(),
+            area.ads if area.is_active else Role.objects.none(),
             many=True,
         ).data
diff --git a/ietf/group/tests_serializers.py b/ietf/group/tests_serializers.py
new file mode 100644
index 0000000000..bf29e6c8fd
--- /dev/null
+++ b/ietf/group/tests_serializers.py
@@ -0,0 +1,90 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+from ietf.group.factories import RoleFactory, GroupFactory
+from ietf.group.serializers import (
+    AreaDirectorSerializer,
+    AreaSerializer,
+    GroupSerializer,
+)
+from ietf.person.factories import EmailFactory
+from ietf.utils.test_utils import TestCase
+
+
+class GroupSerializerTests(TestCase):
+    def test_serializes(self):
+        wg = GroupFactory()
+        serialized = GroupSerializer(wg).data
+        self.assertEqual(
+            serialized,
+            {
+                "acronym": wg.acronym,
+                "name": wg.name,
+                "type": "wg",
+                "list_email": wg.list_email,
+            },
+        )
+
+
+class AreaDirectorSerializerTests(TestCase):
+    def test_serializes_role(self):
+        """Should serialize a Role correctly"""
+        role = RoleFactory(group__type_id="area", name_id="ad")
+        serialized = AreaDirectorSerializer(role).data
+        self.assertEqual(
+            serialized,
+            {"email": role.email.email_address()},
+        )
+
+    def test_serializes_email(self):
+        """Should serialize an Email correctly"""
+        email = EmailFactory()
+        serialized = AreaDirectorSerializer(email).data
+        self.assertEqual(
+            serialized,
+            {"email": email.email_address()},
+        )
+
+
+class AreaSerializerTests(TestCase):
+    def test_serializes_active_area(self):
+        """Should serialize an active area correctly"""
+        area = GroupFactory(type_id="area", state_id="active")
+        serialized = AreaSerializer(area).data
+        self.assertEqual(
+            serialized,
+            {
+                "acronym": area.acronym,
+                "name": area.name,
+                "ads": [],
+            },
+        )
+        ad_roles = RoleFactory.create_batch(2, group=area, name_id="ad")
+        serialized = AreaSerializer(area).data
+        self.assertEqual(serialized["acronym"], area.acronym)
+        self.assertEqual(serialized["name"], area.name)
+        self.assertCountEqual(
+            serialized["ads"],
+            [{"email": ad.email.email_address()} for ad in ad_roles],
+        )
+
+    def test_serializes_inactive_area(self):
+        """Should serialize an inactive area correctly"""
+        area = GroupFactory(type_id="area", state_id="conclude")
+        serialized = AreaSerializer(area).data
+        self.assertEqual(
+            serialized,
+            {
+                "acronym": area.acronym,
+                "name": area.name,
+                "ads": [],
+            },
+        )
+        RoleFactory.create_batch(2, group=area, name_id="ad")
+        serialized = AreaSerializer(area).data
+        self.assertEqual(
+            serialized,
+            {
+                "acronym": area.acronym,
+                "name": area.name,
+                "ads": [],
+            },
+        )

From b81249884877e20c6e311478fe25b472c869c555 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 25 Feb 2026 13:24:30 -0600
Subject: [PATCH 564/707] feat: notify errata system of new rfc (#10465)

* feat: notify errata system of new rfc

* chore: ruff
---
 docker/configs/settings_local.py |  4 ++++
 ietf/api/tests_views_rpc.py      | 28 +++++++++++++++++++------
 ietf/api/views_rpc.py            |  9 +++++++-
 ietf/doc/tasks.py                |  5 +++++
 ietf/doc/utils_errata.py         | 35 ++++++++++++++++++++++++++++++++
 ietf/settings.py                 |  5 +++++
 6 files changed, 79 insertions(+), 7 deletions(-)
 create mode 100644 ietf/doc/utils_errata.py

diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index e357ce3f73..1d4e6916b9 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -105,3 +105,7 @@
     "ietf.api.red_api" : ["devtoken", "redtoken"],  # Not a real secret
     "ietf.api.views_rpc" : ["devtoken"],  # Not a real secret
 }
+
+# Errata system api configuration
+ERRATA_METADATA_NOTIFICATION_URL = "http://host.docker.internal:8808/api/rfc_metadata_update/"
+ERRATA_METADATA_NOTIFICATION_API_KEY = "not a real secret"
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 1fbb4c3f02..6a5a5c9b88 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -9,9 +9,10 @@
 from django.db.models.functions import Coalesce
 from django.test.utils import override_settings
 from django.urls import reverse as urlreverse
+import mock
 
 from ietf.blobdb.models import Blob
-from ietf.doc.factories import IndividualDraftFactory, WgDraftFactory, WgRfcFactory
+from ietf.doc.factories import IndividualDraftFactory, RfcFactory, WgDraftFactory, WgRfcFactory
 from ietf.doc.models import RelatedDocument, Document
 from ietf.group.factories import RoleFactory, GroupFactory
 from ietf.person.factories import PersonFactory
@@ -77,7 +78,8 @@ def test_draftviewset_references(self):
         self.assertEqual(refs[0]["name"], draft_bar.name)
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
-    def test_notify_rfc_published(self):
+    @mock.patch("ietf.doc.tasks.signal_update_rfc_metadata_task.delay")
+    def test_notify_rfc_published(self, mock_task_delay):
         url = urlreverse("ietf.api.purple_api.notify_rfc_published")
         area = GroupFactory(type_id="area")
         rfc_group = GroupFactory(type_id="wg")
@@ -90,6 +92,8 @@ def test_notify_rfc_published(self):
         )
         rfc_stream_id = "ise"
         assert isinstance(draft, Document), "WgDraftFactory should generate a Document"
+        updates = RfcFactory.create_batch(2)
+        obsoletes = RfcFactory.create_batch(2)
         unused_rfc_number = (
             Document.objects.filter(rfc_number__isnull=False).aggregate(
                 unused_rfc_number=Max("rfc_number") + 1
@@ -120,8 +124,8 @@ def test_notify_rfc_published(self):
             "pages": draft.pages + 10,
             "std_level": "ps",
             "ad": rfc_ad.pk,
-            "obsoletes": [],
-            "updates": [],
+            "obsoletes": [o.rfc_number for o in obsoletes],
+            "updates": [o.rfc_number for o in updates],
             "subseries": [],
         }
         r = self.client.post(url, data=post_data, format="json")
@@ -172,13 +176,25 @@ def test_notify_rfc_published(self):
         self.assertEqual(rfc.pages, draft.pages + 10)
         self.assertEqual(rfc.std_level_id, "ps")
         self.assertEqual(rfc.ad, rfc_ad)
-        self.assertEqual(rfc.related_that_doc("obs"), [])
-        self.assertEqual(rfc.related_that_doc("updates"), [])
+        self.assertEqual(set(rfc.related_that_doc("obs")), set([o for o in obsoletes]))
+        self.assertEqual(
+            set(rfc.related_that_doc("updates")), set([o for o in updates])
+        )
         self.assertEqual(rfc.part_of(), [])
         self.assertEqual(draft.get_state().slug, "rfc")
         # todo test non-empty relationships
         # todo test references (when updating that is part of the handling)
 
+        self.assertTrue(mock_task_delay.called)
+        mock_args, mock_kwargs = mock_task_delay.call_args
+        self.assertIn("rfc_number_list", mock_kwargs)
+        expected_rfc_number_list = [rfc.rfc_number]
+        expected_rfc_number_list.extend(
+            [d.rfc_number for d in updates + obsoletes]
+        )
+        expected_rfc_number_list = sorted(set(expected_rfc_number_list))
+        self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
+
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
     def test_upload_rfc_files(self):
         def _valid_post_data():
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 2bf16480f2..9273590b28 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -38,6 +38,7 @@
 from ietf.doc.models import Document, DocHistory, RfcAuthor
 from ietf.doc.serializers import RfcAuthorSerializer
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
+from ietf.doc.tasks import signal_update_rfc_metadata_task
 from ietf.person.models import Email, Person
 
 
@@ -362,7 +363,7 @@ def post(self, request):
         serializer.is_valid(raise_exception=True)
         # Create RFC
         try:
-            serializer.save()
+            rfc = serializer.save()
         except IntegrityError as err:
             if Document.objects.filter(
                 rfc_number=serializer.validated_data["rfc_number"]
@@ -375,6 +376,12 @@ def post(self, request):
                 f"Unable to publish: {err}",
                 code="unknown-integrity-error",
             )
+        rfc_number_list = [rfc.rfc_number]
+        rfc_number_list.extend(
+            [d.rfc_number for d in rfc.related_that_doc(("updates", "obs"))]
+        )
+        rfc_number_list = sorted(set(rfc_number_list))
+        signal_update_rfc_metadata_task.delay(rfc_number_list=rfc_number_list)
         return Response(NotificationAckSerializer().data)
 
 
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index b463b9cecf..90f4c80af5 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -35,6 +35,7 @@
     investigate_fragment,
 )
 from .utils_bofreq import fixup_bofreq_timestamps
+from .utils_errata import signal_update_rfc_metadata
 
 
 @shared_task
@@ -155,3 +156,7 @@ def rebuild_reference_relations_task(doc_names: list[str]):
 @shared_task
 def fixup_bofreq_timestamps_task():  # pragma: nocover
     fixup_bofreq_timestamps()
+
+@shared_task
+def signal_update_rfc_metadata_task(rfc_number_list=()):
+    signal_update_rfc_metadata(rfc_number_list)
diff --git a/ietf/doc/utils_errata.py b/ietf/doc/utils_errata.py
new file mode 100644
index 0000000000..539262151f
--- /dev/null
+++ b/ietf/doc/utils_errata.py
@@ -0,0 +1,35 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import requests
+
+from django.conf import settings
+
+from ietf.utils.log import log
+
+
+def signal_update_rfc_metadata(rfc_number_list=()):
+    key = getattr(settings, "ERRATA_METADATA_NOTIFICATION_API_KEY", None)
+    if key is not None:
+        headers = {"X-Api-Key": settings.ERRATA_METADATA_NOTIFICATION_API_KEY}
+        post_dict = {
+            "rfc_number_list": list(rfc_number_list),
+        }
+        try:
+            response = requests.post(
+                settings.ERRATA_METADATA_NOTIFICATION_URL,
+                headers=headers,
+                json=post_dict,
+                timeout=settings.DEFAULT_REQUESTS_TIMEOUT,
+            )
+        except requests.Timeout as e:
+            log(
+                f"POST request timed out for {settings.ERRATA_METADATA_NOTIFICATION_URL} ]: {e}"
+            )
+            # raise RuntimeError(f'POST request timed out for {settings.ERRATA_METADATA_NOTIFICATION_URL}') from e
+            return
+        if response.status_code != 200:
+            log(
+                f"POST request failed for {settings.ERRATA_METADATA_NOTIFICATION_URL} ]: {response.status_code} {response.text}"
+            )
+    else:
+        log("No API key configured for errata metadata notification, skipping")
diff --git a/ietf/settings.py b/ietf/settings.py
index 565e8825a9..71b110d762 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1368,6 +1368,11 @@ def skip_unreadable_post(record):
 MEETECHO_AUDIO_STREAM_URL = "https://mp3.conf.meetecho.com/ietf{session.meeting.number}/{session.pk}.m3u"
 MEETECHO_SESSION_RECORDING_URL = "https://meetecho-player.ietf.org/playout/?session={session_label}"
 
+# Errata system api configuration
+# settings should provide
+# ERRATA_METADATA_NOTIFICATION_URL
+# ERRATA_METADATA_NOTIFICATION_API_KEY
+
 # Put the production SECRET_KEY in settings_local.py, and also any other
 # sensitive or site-specific changes.  DO NOT commit settings_local.py to svn.
 from ietf.settings_local import *            # pyflakes:ignore pylint: disable=wildcard-import

From da5614c4963c3dc4ff8e901c1edd888296219a0d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 25 Feb 2026 18:14:47 -0400
Subject: [PATCH 565/707] test: avoid random fail in test_rfc_index (#10469)

---
 ietf/sync/tests.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index bcc87a43aa..21d6cb5cd5 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -301,6 +301,7 @@ def test_rfc_index(self):
             ad=Person.objects.get(user__username='ad'),
             external_url="http://my-external-url.example.com",
             note="this is a note",
+            pages=54,  # make sure this is not 42
         )
         DocumentAuthorFactory.create_batch(2, document=draft_doc)
         draft_doc.action_holders.add(draft_doc.ad)  # not normally set, but add to be sure it's cleared

From c1c24d012d23135725f0206dbe1a6be1e2a7fef4 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 27 Feb 2026 14:31:40 -0400
Subject: [PATCH 566/707] feat: RFC metadata update API (#10476)

* feat: more editable RFC fields for API (WIP)

Checkpoint commit!

* chore: avoid requiring prefetch

Makes some fields write-only to achieve this.

* refactor: replace EditableRfcSerializer

* fix: mark read-only field properly

* refactor: SubseriesNameField

* test: EditableRfcSerializer

* refactor: DocEvent adjustment

* feat: record person ids for authors

* chore: adjust history message

* fix: always save!!

* fix: better msg formatting

* fix: _almost_ always save!!

* fix: lint

* refactor: rename var
---
 ietf/api/serializers_rpc.py       | 227 ++++++++++++++++++++++++++----
 ietf/api/tests_serializers_rpc.py | 139 ++++++++++++++++++
 ietf/api/views_rpc.py             |  12 +-
 ietf/doc/serializers.py           |   1 +
 ietf/doc/utils.py                 |  16 ++-
 5 files changed, 361 insertions(+), 34 deletions(-)
 create mode 100644 ietf/api/tests_serializers_rpc.py

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 34e2c791c0..d5f5363990 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -216,32 +216,24 @@ class Meta:
         read_only_fields = ["id", "name"]
 
 
-class EditableRfcSerializer(serializers.ModelSerializer):
-    # Would be nice to reconcile this with ietf.doc.serializers.RfcSerializer.
-    # The purposes of that serializer (representing data for Red) and this one
-    # (accepting updates from Purple) are different enough that separate formats
-    # may be needed, but if not it'd be nice to have a single RfcSerializer that
-    # can serve both.
-    #
-    # For now, only handles authors
-    authors = RfcAuthorSerializer(many=True, min_length=1, source="rfcauthor_set")
+def _update_authors(rfc, authors_data):
+    # Construct unsaved instances from validated author data
+    new_authors = [RfcAuthor(**authdata) for authdata in authors_data]
+    # Update the RFC with the new author set
+    with transaction.atomic():
+        change_events = update_rfcauthors(rfc, new_authors)
+        for event in change_events:
+            event.save()
+    return change_events
 
-    class Meta:
-        model = Document
-        fields = ["id", "authors"]
 
-    def update(self, instance, validated_data):
-        assert isinstance(instance, Document)
-        authors_data = validated_data.pop("rfcauthor_set", None)
-        if authors_data is not None:
-            # Construct unsaved instances from validated author data
-            new_authors = [RfcAuthor(**ad) for ad in authors_data]
-            # Update the RFC with the new author set
-            with transaction.atomic():
-                change_events = update_rfcauthors(instance, new_authors)
-                for event in change_events:
-                    event.save()
-        return instance
+class SubseriesNameField(serializers.RegexField):
+
+    def __init__(self, **kwargs):
+        # pattern: no leading 0, finite length (arbitrarily set to 5 digits)
+        regex = r"^(bcp|std|fyi)[1-9][0-9]{0,4}$"
+        super().__init__(regex, **kwargs)
+
 
 
 class RfcPubSerializer(serializers.ModelSerializer):
@@ -283,13 +275,7 @@ class RfcPubSerializer(serializers.ModelSerializer):
         slug_field="rfc_number",
         queryset=Document.objects.filter(type_id="rfc"),
     )
-    subseries = serializers.ListField(
-        child=serializers.RegexField(
-            required=False,
-            # pattern: no leading 0, finite length (arbitrarily set to 5 digits)
-            regex=r"^(bcp|std|fyi)[1-9][0-9]{0,4}$", 
-        )
-    )
+    subseries = serializers.ListField(child=SubseriesNameField(required=False))
     # N.b., authors is _not_ a field on Document!
     authors = RfcAuthorSerializer(many=True)
 
@@ -327,6 +313,9 @@ def validate(self, data):
                 )
         return data
 
+    def update(self, instance, validated_data):
+        raise RuntimeError("Cannot update with this serializer")
+
     def create(self, validated_data):
         """Publish an RFC"""
         published = validated_data.pop("published")
@@ -515,6 +504,182 @@ def _create_rfc(self, validated_data):
         return rfc
 
 
+class EditableRfcSerializer(serializers.ModelSerializer):
+    # Would be nice to reconcile this with ietf.doc.serializers.RfcSerializer.
+    # The purposes of that serializer (representing data for Red) and this one
+    # (accepting updates from Purple) are different enough that separate formats
+    # may be needed, but if not it'd be nice to have a single RfcSerializer that
+    # can serve both.
+    #
+    # Should also consider whether this and RfcPubSerializer should merge.
+    #
+    # Treats published and subseries fields as write-only. This isn't quite correct,
+    # but makes it easier and we don't currently use the serialized value except for
+    # debugging.
+    published = serializers.DateTimeField(
+        default_timezone=datetime.timezone.utc,
+        write_only=True,
+    )
+    authors = RfcAuthorSerializer(many=True, min_length=1, source="rfcauthor_set")
+    subseries = serializers.ListField(
+        child=SubseriesNameField(required=False),
+        write_only=True,
+    )
+
+    class Meta:
+        model = Document
+        fields = [
+            "published",
+            "title",
+            "authors",
+            "stream",
+            "abstract",
+            "pages",
+            "std_level",
+            "subseries",
+        ]
+
+    def create(self, validated_data):
+        raise RuntimeError("Cannot create with this serializer")
+
+    def update(self, instance, validated_data):
+        assert isinstance(instance, Document)
+        assert instance.type_id == "rfc"
+        rfc = instance  # get better name
+
+        system_person = Person.objects.get(name="(System)")
+
+        # Remove data that needs special handling. Use a singleton object to detect
+        # missing values in case we ever support a value that needs None as an option.
+        omitted = object()
+        published = validated_data.pop("published", omitted)
+        subseries = validated_data.pop("subseries", omitted)
+        authors_data = validated_data.pop("rfcauthor_set", omitted)
+
+        # Transaction to clean up if something fails
+        with transaction.atomic():
+            # update the rfc Document itself
+            rfc_changes = []
+            rfc_events = []
+            
+            for attr, new_value in validated_data.items():
+                old_value = getattr(rfc, attr)
+                if new_value != old_value:
+                    rfc_changes.append(
+                        f"changed {attr} to '{new_value}' from '{old_value}'"
+                    )
+                    setattr(rfc, attr, new_value)
+            if len(rfc_changes) > 0:
+                rfc_change_summary = f"{', '.join(rfc_changes)}"
+                rfc_events.append(
+                    DocEvent.objects.create(
+                        doc=rfc,
+                        rev=rfc.rev,
+                        by=system_person,
+                        type="sync_from_rfc_editor",
+                        desc=f"Changed metadata: {rfc_change_summary}",
+                    )
+                )
+            if authors_data is not omitted:
+                rfc_events.extend(_update_authors(instance, authors_data))
+
+            if published is not omitted:
+                published_event = rfc.latest_event(type="published_rfc")
+                if published_event is None:
+                    # unexpected, but possible in theory
+                    rfc_events.append(
+                        DocEvent.objects.create(
+                            doc=rfc,
+                            rev=rfc.rev,
+                            type="published_rfc",
+                            time=published,
+                            by=system_person,
+                            desc="RFC published",
+                        )
+                    )
+                    rfc_events.append(
+                        DocEvent.objects.create(
+                            doc=rfc,
+                            rev=rfc.rev,
+                            type="sync_from_rfc_editor",
+                            by=system_person,
+                            desc=(
+                                f"Set publication timestamp to {published.isoformat()}"
+                            ),
+                        )
+                    )
+                else:
+                    original_pub_time = published_event.time
+                    if published != original_pub_time:
+                        published_event.time = published
+                        published_event.save()
+                        rfc_events.append(
+                            DocEvent.objects.create(
+                                doc=rfc,
+                                rev=rfc.rev,
+                                type="sync_from_rfc_editor",
+                                by=system_person,
+                                desc=(
+                                    f"Changed publication time to "
+                                    f"{published.isoformat()} from "
+                                    f"{original_pub_time.isoformat()}"
+                                )
+                            )
+                        )
+
+            # update subseries relations
+            if subseries is not omitted:
+                for subseries_doc_name in subseries:
+                    ss_slug = subseries_doc_name[:3]
+                    subseries_doc, ss_doc_created = Document.objects.get_or_create(
+                        type_id=ss_slug, name=subseries_doc_name
+                    )
+                    if ss_doc_created:
+                        subseries_doc.docevent_set.create(
+                            type=f"{ss_slug}_doc_created",
+                            by=system_person,
+                            desc=f"Created {subseries_doc_name} via update of {rfc.name}",
+                        )
+                    _, ss_rel_created = subseries_doc.relateddocument_set.get_or_create(
+                        relationship_id="contains", target=rfc
+                    )
+                    if ss_rel_created:
+                        subseries_doc.docevent_set.create(
+                            type="sync_from_rfc_editor",
+                            by=system_person,
+                            desc=f"Added {rfc.name} to {subseries_doc.name}",
+                        )
+                        rfc_events.append(
+                            rfc.docevent_set.create(
+                                type="sync_from_rfc_editor",
+                                by=system_person,
+                                desc=f"Added {rfc.name} to {subseries_doc.name}",
+                            )
+                        )
+                # Delete subseries relations that are no longer current
+                stale_subseries_relations = rfc.relations_that("contains").exclude(
+                    source__name__in=subseries
+                )
+                for stale_relation in stale_subseries_relations:
+                    stale_subseries_doc = stale_relation.source
+                    rfc_events.append(
+                        rfc.docevent_set.create(
+                            type="sync_from_rfc_editor",
+                            by=system_person,
+                            desc=f"Removed {rfc.name} from {stale_subseries_doc.name}",
+                        )
+                    )
+                    stale_subseries_doc.docevent_set.create(
+                        type="sync_from_rfc_editor",
+                        by=system_person,
+                        desc=f"Removed {rfc.name} from {stale_subseries_doc.name}",
+                    )
+                stale_subseries_relations.delete()
+            if len(rfc_events) > 0:
+                rfc.save_with_history(rfc_events)
+        return rfc
+
+
 class RfcFileSerializer(serializers.Serializer):
     # The structure of this serializer is constrained by what openapi-generator-cli's
     # python generator can correctly serialize as multipart/form-data. It does not
diff --git a/ietf/api/tests_serializers_rpc.py b/ietf/api/tests_serializers_rpc.py
new file mode 100644
index 0000000000..1babb4c30f
--- /dev/null
+++ b/ietf/api/tests_serializers_rpc.py
@@ -0,0 +1,139 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+from django.utils import timezone
+
+from ietf.utils.test_utils import TestCase
+from ietf.doc.models import Document
+from ietf.doc.factories import WgRfcFactory
+from .serializers_rpc import EditableRfcSerializer
+
+
+class EditableRfcSerializerTests(TestCase):
+    def test_create(self):
+        serializer = EditableRfcSerializer(
+            data={
+                "published": timezone.now(),
+                "title": "Yadda yadda yadda",
+                "authors": [
+                    {
+                        "titlepage_name": "B. Fett",
+                        "is_editor": False,
+                        "affiliation": "DBA Galactic Empire",
+                        "country": "",
+                    },
+                ],
+                "stream": "ietf",
+                "abstract": "A long time ago in a galaxy far, far away...",
+                "pages": 3,
+                "std_level": "inf",
+                "subseries": ["fyi999"],
+            }
+        )
+        self.assertTrue(serializer.is_valid())
+        with self.assertRaises(RuntimeError, msg="serializer does not allow create()"):
+            serializer.save()
+
+    def test_update(self):
+        rfc = WgRfcFactory(pages=10)
+        serializer = EditableRfcSerializer(
+            instance=rfc,
+            data={
+                "published": timezone.now(),
+                "title": "Yadda yadda yadda",
+                "authors": [
+                    {
+                        "titlepage_name": "B. Fett",
+                        "is_editor": False,
+                        "affiliation": "DBA Galactic Empire",
+                        "country": "",
+                    },
+                ],
+                "stream": "ise",
+                "abstract": "A long time ago in a galaxy far, far away...",
+                "pages": 3,
+                "std_level": "inf",
+                "subseries": ["fyi999"],
+            },
+        )
+        self.assertTrue(serializer.is_valid())
+        result = serializer.save()
+        result.refresh_from_db()
+        self.assertEqual(result.title, "Yadda yadda yadda")
+        self.assertEqual(
+            list(
+                result.rfcauthor_set.values(
+                    "titlepage_name", "is_editor", "affiliation", "country"
+                )
+            ),
+            [
+                {
+                    "titlepage_name": "B. Fett",
+                    "is_editor": False,
+                    "affiliation": "DBA Galactic Empire",
+                    "country": "",
+                },
+            ],
+        )
+        self.assertEqual(result.stream_id, "ise")
+        self.assertEqual(
+            result.abstract, "A long time ago in a galaxy far, far away..."
+        )
+        self.assertEqual(result.pages, 3)
+        self.assertEqual(result.std_level_id, "inf")
+        self.assertEqual(
+            result.part_of(),
+            [Document.objects.get(name="fyi999")],
+        )
+
+    def test_partial_update(self):
+        # We could test other permutations of fields, but authors is a partial update
+        # we know we are going to use, so verifying that one in particular.
+        rfc = WgRfcFactory(pages=10, abstract="do or do not", title="padawan")
+        serializer = EditableRfcSerializer(
+            partial=True,
+            instance=rfc,
+            data={
+                "authors": [
+                    {
+                        "titlepage_name": "B. Fett",
+                        "is_editor": False,
+                        "affiliation": "DBA Galactic Empire",
+                        "country": "",
+                    },
+                ],
+            },
+        )
+        self.assertTrue(serializer.is_valid())
+        result = serializer.save()
+        result.refresh_from_db()
+        self.assertEqual(rfc.title, "padawan")
+        self.assertEqual(
+            list(
+                result.rfcauthor_set.values(
+                    "titlepage_name", "is_editor", "affiliation", "country"
+                )
+            ),
+            [
+                {
+                    "titlepage_name": "B. Fett",
+                    "is_editor": False,
+                    "affiliation": "DBA Galactic Empire",
+                    "country": "",
+                },
+            ],
+        )
+        self.assertEqual(result.stream_id, "ietf")
+        self.assertEqual(result.abstract, "do or do not")
+        self.assertEqual(result.pages, 10)
+        self.assertEqual(result.std_level_id, "ps")
+        self.assertEqual(result.part_of(), [])
+
+        # Test only a field on the Document itself to be sure that it works
+        serializer = EditableRfcSerializer(
+            partial=True,
+            instance=rfc,
+            data={"title": "jedi master"},
+        )
+        self.assertTrue(serializer.is_valid())
+        result = serializer.save()
+        result.refresh_from_db()
+        self.assertEqual(rfc.title, "jedi master")
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 9273590b28..8862bbf866 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -35,7 +35,7 @@
     NotificationAckSerializer, RfcPubSerializer, RfcFileSerializer,
     EditableRfcSerializer,
 )
-from ietf.doc.models import Document, DocHistory, RfcAuthor
+from ietf.doc.models import Document, DocHistory, RfcAuthor, DocEvent
 from ietf.doc.serializers import RfcAuthorSerializer
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
 from ietf.doc.tasks import signal_update_rfc_metadata_task
@@ -279,6 +279,16 @@ class RfcViewSet(mixins.UpdateModelMixin, viewsets.GenericViewSet):
     lookup_field = "rfc_number"
     serializer_class = EditableRfcSerializer
 
+    def perform_update(self, serializer):
+        DocEvent.objects.create(
+            doc=serializer.instance,
+            rev=serializer.instance.rev,
+            by=Person.objects.get(name="(System)"),
+            type="sync_from_rfc_editor",
+            desc="Metadata update from RFC Editor",
+        )
+        super().perform_update(serializer)
+
     @action(detail=False, serializer_class=OriginalStreamSerializer)
     def rfc_original_stream(self, request):
         rfcs = self.get_queryset().annotate(
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index 36076c30be..a7ea640be8 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -27,6 +27,7 @@ class RfcAuthorSerializer(serializers.ModelSerializer):
         source="person.get_absolute_url",
         required=False,
         help_text="URL for person link (relative to datatracker base URL)",
+        read_only=True,
     )
 
     class Meta:
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 42fab7d472..396b3fcfa4 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -740,14 +740,26 @@ def _rfcauthor_from_documentauthor(docauthor: DocumentAuthor) -> RfcAuthor:
             new_author.document = rfc
             new_author.order = order + 1
             new_author.save()
-            changes.append(f'Added "{new_author.titlepage_name}" as author')
+            if new_author.person_id is not None:
+                person_desc = f"Person {new_author.person_id}"
+            else:
+                person_desc = "no Person linked"
+            changes.append(
+                f'Added "{new_author.titlepage_name}" ({person_desc}) as author'
+            )
     # Any authors left in original_authors are no longer in the list, so remove them
     for removed_author in original_authors:
         # Skip actual removal of old authors if we are converting from the
         # DocumentAuthor models - the original_authors were just stand-ins anyway.
         if not converting_from_docauthors:
             removed_author.delete()
-        changes.append(f'Removed "{removed_author.titlepage_name}" as author')
+        if removed_author.person_id is not None:
+            person_desc = f"Person {removed_author.person_id}"
+        else:
+            person_desc = "no Person linked"
+        changes.append(
+            f'Removed "{removed_author.titlepage_name}" ({person_desc}) as author'
+        )
     # Create DocEvents, but leave it up to caller to save
     if by is None:
         by = Person.objects.get(name="(System)")

From 481054511b9f07a47c41f854105e00616e61d3e2 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 3 Mar 2026 11:36:45 -0400
Subject: [PATCH 567/707] feat: add area to FullDraftSerializer (#10487)

* refactor: Document.area() + serializer

* feat: add area to FullDraftSerializer
---
 ietf/api/serializers_rpc.py |  3 +++
 ietf/doc/models.py          | 16 ++++++++++++++++
 ietf/doc/serializers.py     | 19 +------------------
 3 files changed, 20 insertions(+), 18 deletions(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index d5f5363990..e51b917be4 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -27,6 +27,7 @@
     update_rfcauthors,
 )
 from ietf.group.models import Group
+from ietf.group.serializers import AreaSerializer
 from ietf.name.models import StreamName, StdLevelName
 from ietf.person.models import Person
 from ietf.utils import log
@@ -115,6 +116,7 @@ class FullDraftSerializer(serializers.ModelSerializer):
     name = serializers.CharField(max_length=255)
     title = serializers.CharField(max_length=255)
     group = serializers.SlugRelatedField(slug_field="acronym", read_only=True)
+    area = AreaSerializer(read_only=True)
 
     # Other fields we need to add / adjust
     source_format = serializers.SerializerMethodField()
@@ -133,6 +135,7 @@ class Meta:
             "stream",
             "title",
             "group",
+            "area",
             "abstract",
             "pages",
             "source_format",
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index cc28951be0..f1b319367e 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1147,6 +1147,22 @@ def request_closed_time(self, review_req):
         e = self.latest_event(ReviewRequestDocEvent, type="closed_review_request", review_request=review_req)
         return e.time if e and e.time else None
 
+    @property
+    def area(self) -> Group | None:
+        """Get area for document, if one exists
+        
+        None for non-IETF-stream documents. N.b., this is stricter than Group.area() and
+        uses different logic from Document.area_acronym().
+        """
+        if self.stream_id != "ietf":
+            return None
+        if self.group is None:
+            return None
+        parent = self.group.parent
+        if parent.type_id == "area":
+            return parent
+        return None
+
     def area_acronym(self):
         g = self.group
         if g:
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index a7ea640be8..139ae9aa7e 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -230,7 +230,7 @@ class RfcMetadataSerializer(serializers.ModelSerializer):
     status = RfcStatusSerializer(source="*")
     authors = serializers.SerializerMethodField()
     group = GroupSerializer()
-    area = serializers.SerializerMethodField()
+    area = AreaSerializer(read_only=True)
     stream = StreamNameSerializer()
     ad = AreaDirectorSerializer(read_only=True, allow_null=True)
     group_list_email = serializers.EmailField(source="group.list_email", read_only=True)
@@ -288,23 +288,6 @@ def get_authors(self, doc: Document):
             many=True,
         ).data
 
-    @extend_schema_field(AreaSerializer(required=False))
-    def get_area(self, doc: Document):
-        """Get area for the RFC
-        
-        This logic might be better moved to Document or a combination of Document
-        and Group. The current (2026-02-24) Group.area() method is not strict enough:
-        it does not limit to WG groups or IETF-stream documents.
-        """
-        if doc.stream_id != "ietf":
-            return None
-        if doc.group is None:
-            return None
-        parent = doc.group.parent
-        if parent.type_id == "area":
-            return AreaSerializer(parent).data
-        return None
-
     @extend_schema_field(DocIdentifierSerializer(many=True))
     def get_identifiers(self, doc: Document):
         identifiers = []

From 47d3734955071d1ccc54787698e751c74ce4d303 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 12:32:36 -0400
Subject: [PATCH 568/707] chore(deps): bump types-pytz from 2025.2.0.20250809
 to 2025.2.0.20251108 (#10424)

Bumps [types-pytz](https://github.com/typeshed-internal/stub_uploader) from 2025.2.0.20250809 to 2025.2.0.20251108.
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: types-pytz
  dependency-version: 2025.2.0.20251108
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index cb583d5dc9..3d54b104ee 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -74,7 +74,7 @@ python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form
 pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=2.0.0  # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
-types-pytz==2025.2.0.20250809  # match pytz version
+types-pytz==2025.2.0.20251108  # match pytz version
 requests>=2.32.4
 types-requests>=2.32.4
 requests-mock>=1.12.1

From 1799245dc6ce82301b0790412957ccfa19910dc1 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Wed, 4 Mar 2026 16:45:46 +0000
Subject: [PATCH 569/707] ci: update base image target version to 20260304T1633

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 71370fabee..ce1828052e 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260211T1901
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260304T1633
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 947f3790e4..6be54fb6b0 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260211T1901
+20260304T1633

From 7f28542c82e2c51210daf77ca10f9682c0ea709d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 9 Mar 2026 14:02:57 -0300
Subject: [PATCH 570/707] fix: finish dropping email as RfcAuthor field
 (#10512)

* fix: fix admin / Document.author_list()

* fix: update RfcAuthorResource

email is still accessible, but read only

* fix: admin search by RfcAuthor email
---
 ietf/doc/admin.py     |  4 +++-
 ietf/doc/models.py    | 16 +++++++++++-----
 ietf/doc/resources.py |  2 +-
 3 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index b604d4f096..0d04e8db3a 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -241,7 +241,9 @@ def is_deleted(self, instance):
 admin.site.register(StoredObject, StoredObjectAdmin)
 
 class RfcAuthorAdmin(admin.ModelAdmin):
+    # the email field in the list_display/readonly_fields works through a @property
     list_display = ['id', 'document', 'titlepage_name', 'person', 'email', 'affiliation', 'country', 'order']
-    search_fields = ['document__name', 'titlepage_name', 'person__name', 'email', 'affiliation', 'country']
+    search_fields = ['document__name', 'titlepage_name', 'person__name', 'person__email__address', 'affiliation', 'country']
     raw_id_fields = ["document", "person"]
+    readonly_fields = ["email"]
 admin.site.register(RfcAuthor, RfcAuthorAdmin)
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index f1b319367e..868bc4ac47 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -466,11 +466,12 @@ def author_persons(self):
 
     def author_list(self):
         """List of author emails"""
-        author_qs = (
-            self.rfcauthor_set
-            if self.type_id == "rfc" and self.rfcauthor_set.exists()
-            else self.documentauthor_set
-        ).select_related("email").order_by("order")
+        if self.type_id == "rfc" and self.rfcauthor_set.exists():
+            author_qs = self.rfcauthor_set.select_related("person").order_by("order")
+        else:
+            author_qs = self.documentauthor_set.select_related("email").order_by(
+                "order"
+            )
         best_addresses = []
         for author in author_qs:
             if author.email:
@@ -953,6 +954,11 @@ class Meta:
     @property
     def email(self) -> Email | None:
         return self.person.email() if self.person else None
+    
+    def format_for_titlepage(self):
+        if self.is_editor:
+            return f"{self.titlepage_name}, Ed."
+        return self.titlepage_name
 
 
 class DocumentAuthorInfo(models.Model):
diff --git a/ietf/doc/resources.py b/ietf/doc/resources.py
index 556465a522..1d86df78d0 100644
--- a/ietf/doc/resources.py
+++ b/ietf/doc/resources.py
@@ -897,7 +897,7 @@ class Meta:
 class RfcAuthorResource(ModelResource):
     document         = ToOneField(DocumentResource, 'document')
     person           = ToOneField(PersonResource, 'person', null=True)
-    email            = ToOneField(EmailResource, 'email', null=True)
+    email            = ToOneField(EmailResource, 'email', null=True, readonly=True)
     class Meta:
         queryset = RfcAuthor.objects.all()
         serializer = api.Serializer()

From 809e7682db30279cb715f47c89ae546e320c9c76 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 11 Mar 2026 13:07:27 -0500
Subject: [PATCH 571/707] chore: remove task explorer from devcontainer
 (#10532)

---
 .devcontainer/devcontainer.json | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 2cfff78853..e4964e8909 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -32,7 +32,6 @@
                 "mutantdino.resourcemonitor",
                 "oderwat.indent-rainbow",
                 "redhat.vscode-yaml",
-                "spmeesseman.vscode-taskexplorer",
                 "ms-python.pylint",
                 "charliermarsh.ruff"
             ],

From d4a594ddd4a9dd0bd575465748627f7fea68aac3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 11 Mar 2026 15:12:22 -0300
Subject: [PATCH 572/707] feat: rfc-index generation (#10526)

* chore: stand-in red_bucket STORAGE for dev

* feat: rfc index text generation (WIP)

Text generation works. Also includes XML generation that is not yet
converted. Based on Kesara's implementations in the purple repo.

* feat: rfc index XML generation (WIP)

* feat: Document.keywords + migration

* feat: keywords API

* feat: keywords in rfc-index.xml

* fix: better stream/area/wg_acronym

Still some disagreements, not sure if that's data or logic driven

* fix: NON WORKING GROUP logic

May need more attention

* fix: add rev to draft name

* fix: interleave unpublished RFC records

* fix: lint

* refactor: use lxml

* fix: multi-paragraph abstracts

* feat: RFCINDEX_MATCH_LEGACY_XML option

* fix: zero pad DOIs

* fix: better NON WORKING GROUP id

* fix: reorder elements

* refactor: extract repeated code

* refactor: unify DOI generation

* fix: modern DOI proxy URL for ATOM feed

* refactor: settings.RFC_EDITOR_ERRATA_BASE_URL

Drop unused settings.RFC_EDITOR_ERRATA_URL

* chore: real red_bucket storage cfg

* fix: handle missing json for prod/dev/test

* chore: straighten out S3 saving

* chore(dev): FileSystemStorage for red_bucket dev

(commented out)

* chore: configurable bucket path for JSON inputs

* test: tests_rfcindex.py

Not great coverage, but exercises the generators a bit.

* fix: lint + consistent var naming

* test: improve test coverage / testability

* fix: lint
---
 docker/configs/settings_local.py              |  11 +
 ietf/api/serializers_rpc.py                   |   2 +
 ietf/doc/api.py                               |   6 -
 ietf/doc/factories.py                         |   6 +
 ietf/doc/feeds.py                             |   9 +-
 ...3_dochistory_keywords_document_keywords.py |  31 ++
 ietf/doc/models.py                            |  21 +
 ietf/doc/serializers.py                       |   4 +-
 ietf/doc/views_doc.py                         |   4 +-
 ietf/settings.py                              |  10 +-
 ietf/settings_test.py                         |   8 +-
 ietf/sync/rfcindex.py                         | 480 ++++++++++++++++++
 ietf/sync/tests_rfcindex.py                   | 230 +++++++++
 ietf/templates/sync/rfc-index.txt             |  69 +++
 k8s/settings_local.py                         |  33 ++
 15 files changed, 907 insertions(+), 17 deletions(-)
 create mode 100644 ietf/doc/migrations/0033_dochistory_keywords_document_keywords.py
 create mode 100644 ietf/sync/rfcindex.py
 create mode 100644 ietf/sync/tests_rfcindex.py
 create mode 100644 ietf/templates/sync/rfc-index.txt

diff --git a/docker/configs/settings_local.py b/docker/configs/settings_local.py
index 1d4e6916b9..94adc516a4 100644
--- a/docker/configs/settings_local.py
+++ b/docker/configs/settings_local.py
@@ -101,6 +101,17 @@
         ),
     }
 
+# For dev on rfc-index generation, create a red_bucket/ directory in the project root
+# and uncomment these settings. Generated files will appear in this directory. To
+# generate an accurate index, put up-to-date copies of unusable-rfc-numbers.json,
+# april-first-rfc-numbers.json, and publication-std-levels.json in this directory
+# before generating the index.
+#
+# STORAGES["red_bucket"] = {
+#     "BACKEND": "django.core.files.storage.FileSystemStorage",
+#     "OPTIONS": {"location": "red_bucket"},
+# }
+
 APP_API_TOKENS = {
     "ietf.api.red_api" : ["devtoken", "redtoken"],  # Not a real secret
     "ietf.api.views_rpc" : ["devtoken"],  # Not a real secret
diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index e51b917be4..c17cbc64ce 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -300,6 +300,7 @@ class Meta:
             "obsoletes",
             "updates",
             "subseries",
+            "keywords",
         ]
 
     def validate(self, data):
@@ -540,6 +541,7 @@ class Meta:
             "pages",
             "std_level",
             "subseries",
+            "keywords",
         ]
 
     def create(self, validated_data):
diff --git a/ietf/doc/api.py b/ietf/doc/api.py
index 75993f463e..73fff6b27f 100644
--- a/ietf/doc/api.py
+++ b/ietf/doc/api.py
@@ -4,13 +4,11 @@
 from django.db.models import (
     BooleanField,
     Count,
-    JSONField,
     OuterRef,
     Prefetch,
     Q,
     QuerySet,
     Subquery,
-    Value,
 )
 from django.db.models.functions import TruncDate
 from django_filters import rest_framework as filters
@@ -160,10 +158,6 @@ def augment_rfc_queryset(queryset: QuerySet[Document]):
                 output_field=BooleanField(),
             )
         )
-        .annotate(
-            # TODO implement this fake field for real
-            keywords=Value(["keyword"], output_field=JSONField()),
-        )
     )
 
 
diff --git a/ietf/doc/factories.py b/ietf/doc/factories.py
index bc38765446..1a178c6f31 100644
--- a/ietf/doc/factories.py
+++ b/ietf/doc/factories.py
@@ -311,6 +311,12 @@ class Meta:
     def desc(self):
          return 'New version available %s-%s'%(self.doc.name,self.rev)
 
+class PublishedRfcDocEventFactory(DocEventFactory):
+    class Meta:
+        model = DocEvent
+    type = "published_rfc"
+    doc = factory.SubFactory(WgRfcFactory)
+
 class StateDocEventFactory(DocEventFactory):
     class Meta:
         model = StateDocEvent
diff --git a/ietf/doc/feeds.py b/ietf/doc/feeds.py
index 500ed3cb18..afe96cf0df 100644
--- a/ietf/doc/feeds.py
+++ b/ietf/doc/feeds.py
@@ -1,5 +1,4 @@
-# Copyright The IETF Trust 2007-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2007-2026, All Rights Reserved
 
 import debug  # pyflakes:ignore
 
@@ -263,9 +262,11 @@ def item_extra_kwargs(self, item):
                 )
         extra.update({"media_contents": media_contents})
 
-        extra.update({"doi": "10.17487/%s" % item.name.upper()})
         extra.update(
-            {"doiuri": "http://dx.doi.org/10.17487/%s" % item.name.upper()}
+            {
+                "doi": item.doi,
+                "doiuri": f"https://doi.org/{item.doi}",
+            }
         )
 
         # R104 Publisher (Mandatory - but we need a string from them first)
diff --git a/ietf/doc/migrations/0033_dochistory_keywords_document_keywords.py b/ietf/doc/migrations/0033_dochistory_keywords_document_keywords.py
new file mode 100644
index 0000000000..5e2513e15a
--- /dev/null
+++ b/ietf/doc/migrations/0033_dochistory_keywords_document_keywords.py
@@ -0,0 +1,31 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.doc.models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0032_remove_rfcauthor_email"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="dochistory",
+            name="keywords",
+            field=models.JSONField(
+                default=list,
+                max_length=1000,
+                validators=[ietf.doc.models.validate_doc_keywords],
+            ),
+        ),
+        migrations.AddField(
+            model_name="document",
+            name="keywords",
+            field=models.JSONField(
+                default=list,
+                max_length=1000,
+                validators=[ietf.doc.models.validate_doc_keywords],
+            ),
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 868bc4ac47..7b23a62c45 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -13,6 +13,7 @@
 from io import BufferedReader
 from pathlib import Path
 
+from django.core.exceptions import ValidationError
 from django.db.models import Q
 from lxml import etree
 from typing import Optional, Protocol, TYPE_CHECKING, Union
@@ -109,6 +110,15 @@ class Meta:
 IESG_STATCHG_CONFLREV_ACTIVE_STATES = ("iesgeval", "defer")
 IESG_SUBSTATE_TAGS = ('ad-f-up', 'need-rev', 'extpty')
 
+
+def validate_doc_keywords(value):
+    if (
+        not isinstance(value, list | tuple | set) 
+        or not all(isinstance(elt, str) for elt in value)
+    ):
+        raise ValidationError("Value must be an array of strings")
+
+
 class DocumentInfo(models.Model):
     """Any kind of document.  Draft, RFC, Charter, IPR Statement, Liaison Statement"""
     time = models.DateTimeField(default=timezone.now) # should probably have auto_now=True
@@ -142,6 +152,17 @@ class DocumentInfo(models.Model):
     uploaded_filename = models.TextField(blank=True)
     note = models.TextField(blank=True)
     rfc_number = models.PositiveIntegerField(blank=True, null=True)  # only valid for type="rfc"
+    keywords = models.JSONField(
+        default=list,
+        max_length=1000,
+        validators=[validate_doc_keywords],
+    )
+
+    @property
+    def doi(self) -> str | None:
+        if self.type_id == "rfc" and self.rfc_number is not None:
+            return f"{settings.IETF_DOI_PREFIX}/RFC{self.rfc_number:04d}"
+        return None
 
     def file_extension(self):
         if not hasattr(self, '_cached_extension'):
diff --git a/ietf/doc/serializers.py b/ietf/doc/serializers.py
index 139ae9aa7e..3651670962 100644
--- a/ietf/doc/serializers.py
+++ b/ietf/doc/serializers.py
@@ -291,9 +291,9 @@ def get_authors(self, doc: Document):
     @extend_schema_field(DocIdentifierSerializer(many=True))
     def get_identifiers(self, doc: Document):
         identifiers = []
-        if doc.rfc_number:
+        if doc.doi:
             identifiers.append(
-                DocIdentifier(type="doi", value=f"10.17487/RFC{doc.rfc_number:04d}")
+                DocIdentifier(type="doi", value=doc.doi)
             )
         return DocIdentifierSerializer(instance=identifiers, many=True).data
 
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 0ae7520681..c1f6352ac3 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1285,9 +1285,7 @@ def document_bibtex(request, name, rev=None):
                     break
 
     elif doc.type_id == "rfc":
-        # This needs to be replaced with a lookup, as the mapping may change
-        # over time.
-        doi = f"10.17487/RFC{doc.rfc_number:04d}"
+        doi = doc.doi
 
     if doc.is_dochistory():
         latest_event = doc.latest_event(type='new_revision', rev=rev)
diff --git a/ietf/settings.py b/ietf/settings.py
index 71b110d762..e0b4f20118 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -838,6 +838,11 @@ def skip_unreadable_post(record):
     "slides",
 ]
 
+# Other storages
+STORAGES["red_bucket"] = {
+    "BACKEND": "django.core.files.storage.InMemoryStorage",
+    "OPTIONS": {"location": "red_bucket"},
+}
 
 # Override this in settings_local.py if needed
 # *_PATH variables ends with a slash/ .
@@ -932,10 +937,11 @@ def skip_unreadable_post(record):
 RFC_EDITOR_QUEUE_URL = "https://www.rfc-editor.org/queue2.xml"
 RFC_EDITOR_INDEX_URL = "https://www.rfc-editor.org/rfc/rfc-index.xml"
 RFC_EDITOR_ERRATA_JSON_URL = "https://www.rfc-editor.org/errata.json"
-RFC_EDITOR_ERRATA_URL = "https://www.rfc-editor.org/errata_search.php?rfc={rfc_number}"
 RFC_EDITOR_INLINE_ERRATA_URL = "https://www.rfc-editor.org/rfc/inline-errata/rfc{rfc_number}.html"
+RFC_EDITOR_ERRATA_BASE_URL = "https://www.rfc-editor.org/errata/"
 RFC_EDITOR_INFO_BASE_URL = "https://www.rfc-editor.org/info/"
 
+
 # NomCom Tool settings
 ROLODEX_URL = ""
 NOMCOM_PUBLIC_KEYS_DIR = '/a/www/nomcom/public_keys/'
@@ -1570,3 +1576,5 @@ def skip_unreadable_post(record):
 
 
 YOUTUBE_DOMAINS = ['www.youtube.com', 'youtube.com', 'youtu.be', 'm.youtube.com', 'youtube-nocookie.com', 'www.youtube-nocookie.com']
+
+IETF_DOI_PREFIX = "10.17487"
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 6479069db0..1f5a7e8ddc 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -14,7 +14,7 @@
 import shutil
 import tempfile
 from ietf.settings import *                                          # pyflakes:ignore
-from ietf.settings import ORIG_AUTH_PASSWORD_VALIDATORS
+from ietf.settings import ORIG_AUTH_PASSWORD_VALIDATORS, STORAGES
 import debug                            # pyflakes:ignore
 debug.debug = True
 
@@ -114,3 +114,9 @@ def tempdir_with_cleanup(**kwargs):
     AUTH_PASSWORD_VALIDATORS = ORIG_AUTH_PASSWORD_VALIDATORS
 except NameError:
     pass
+
+# Use InMemoryStorage for red bucket storage
+STORAGES["red_bucket"] = {
+    "BACKEND": "django.core.files.storage.InMemoryStorage",
+    "OPTIONS": {"location": "red_bucket"},
+}
diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
new file mode 100644
index 0000000000..b15846094f
--- /dev/null
+++ b/ietf/sync/rfcindex.py
@@ -0,0 +1,480 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+import json
+from collections import defaultdict
+from collections.abc import Container
+from dataclasses import dataclass
+from io import StringIO, BytesIO
+from itertools import chain
+from operator import attrgetter, itemgetter
+from pathlib import Path
+from textwrap import fill
+from urllib.parse import urljoin
+
+from django.conf import settings
+from lxml import etree
+
+from django.core.files.storage import storages
+from django.db import models
+from django.db.models.functions import Substr, Cast
+from django.template.loader import render_to_string
+from django.utils import timezone
+
+from ietf.doc.models import Document
+from ietf.name.models import StdLevelName
+from ietf.utils.log import log
+
+FORMATS_FOR_INDEX = ["txt", "html", "pdf", "xml", "ps"]
+
+
+def format_rfc_number(n):
+    """Format an RFC number (or subseries doc number)
+    
+    Set settings.RFCINDEX_MATCH_LEGACY_XML=True for the legacy (leading-zero) format.
+    That is for debugging only - tests will fail.
+    """
+    if getattr(settings, "RFCINDEX_MATCH_LEGACY_XML", False):
+        return format(n, "04")
+    else:
+        return format(n)
+
+
+def errata_url(rfc: Document):
+    return urljoin(settings.RFC_EDITOR_ERRATA_BASE_URL + "/", f"rfc{rfc.rfc_number}")
+
+
+def save_to_red_bucket(filename: str, content: BytesIO | StringIO):
+    red_bucket = storages["red_bucket"]
+    bucket_path = str(Path(getattr(settings, "RFCINDEX_OUTPUT_PATH", "")) / filename)
+    if getattr(settings, "RFCINDEX_DELETE_THEN_WRITE", True):
+        # Django 4.2's FileSystemStorage does not support allow_overwrite.
+        red_bucket.delete(bucket_path)
+    red_bucket.save(bucket_path, content)
+    log(f"Saved {bucket_path} in red_bucket storage")
+
+
+@dataclass
+class UnusableRfcNumber:
+    rfc_number: int
+    comment: str
+
+
+def get_unusable_rfc_numbers() -> list[UnusableRfcNumber]:
+    FILENAME = "unusable-rfc-numbers.json"
+    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    try:
+        with storages["red_bucket"].open(bucket_path) as urn_file:
+            records = json.load(urn_file)
+    except FileNotFoundError:
+        if settings.SERVER_MODE == "development":
+            log(
+                f"Unable to open {bucket_path} in red_bucket storage. This is okay in dev "
+                "but generated rfc-index will not agree with RFC Editor values."
+            )  # pragma: no cover
+            return []  # pragma: no cover
+        log(f"Error: unable to open {bucket_path} in red_bucket storage")
+        raise
+    except json.JSONDecodeError:
+        log(f"Error: unable to parse {bucket_path} in red_bucket storage")
+        if settings.SERVER_MODE == "development":
+            return []  # pragma: no cover  
+        raise
+    assert all(isinstance(record["number"], int) for record in records)
+    assert all(isinstance(record["comment"], str) for record in records)
+    return [
+        UnusableRfcNumber(rfc_number=record["number"], comment=record["comment"])
+        for record in sorted(records, key=itemgetter("number"))
+    ]
+
+
+def get_april1_rfc_numbers() -> Container[int]:
+    FILENAME = "april-first-rfc-numbers.json"
+    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    try:
+        with storages["red_bucket"].open(bucket_path) as urn_file:
+            records = json.load(urn_file)
+    except FileNotFoundError:
+        if settings.SERVER_MODE == "development":
+            log(
+                f"Unable to open {bucket_path} in red_bucket storage. This is okay in dev "
+                "but generated rfc-index will not agree with RFC Editor values."
+            )  # pragma: no cover
+            return []  # pragma: no cover
+        log(f"Error: unable to open {bucket_path} in red_bucket storage")
+        raise
+    except json.JSONDecodeError:
+        log(f"Error: unable to parse {bucket_path} in red_bucket storage")
+        if settings.SERVER_MODE == "development":
+            return []  # pragma: no cover
+        raise
+    assert all(isinstance(record, int) for record in records)
+    return records
+
+
+def get_publication_std_levels() -> dict[int, StdLevelName]:
+    FILENAME = "publication-std-levels.json"
+    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    values: dict[int, StdLevelName] = {}
+    try:
+        with storages["red_bucket"].open(bucket_path) as urn_file:
+            records = json.load(urn_file)
+    except FileNotFoundError:
+        if settings.SERVER_MODE == "development":
+            log(
+                f"Unable to open {bucket_path} in red_bucket storage. This is okay in dev "
+                "but generated rfc-index will not agree with RFC Editor values."
+            )  # pragma: no cover
+            # intentionally fall through instead of return here
+        else:
+            log(f"Error: unable to open {bucket_path} in red_bucket storage")
+            raise
+    except json.JSONDecodeError:
+        log(f"Error: unable to parse {bucket_path} in red_bucket storage")
+        if settings.SERVER_MODE != "development":
+            raise
+    else:
+        assert all(isinstance(record["number"], int) for record in records)
+        values = {
+            record["number"]: StdLevelName.objects.get(
+                slug=record["publication_std_level"]
+            )
+            for record in records
+        }
+    # defaultdict to return "unknown" for any missing values
+    unknown_std_level = StdLevelName.objects.get(slug="unkn")
+    return defaultdict(lambda: unknown_std_level, values)
+
+
+def format_ordering(rfc_number):
+    if rfc_number < 8650:
+        ordering = ["txt", "ps", "pdf", "html", "xml"]
+    else:
+        ordering = ["html", "txt", "ps", "pdf", "xml"]
+    return ordering.index  # return the method
+
+
+def get_rfc_text_index_entries():
+    """Returns RFC entries for rfc-index.txt"""
+    entries = []
+    april1_rfc_numbers = get_april1_rfc_numbers()
+    published_rfcs = Document.objects.filter(type_id="rfc").order_by("rfc_number")
+    rfcs = sorted(
+        chain(published_rfcs, get_unusable_rfc_numbers()), key=attrgetter("rfc_number")
+    )
+    for rfc in rfcs:
+        if isinstance(rfc, UnusableRfcNumber):
+            entries.append(f"{format_rfc_number(rfc.rfc_number)} Not Issued.")
+        else:
+            assert isinstance(rfc, Document)
+            authors = ", ".join(
+                author.format_for_titlepage() for author in rfc.rfcauthor_set.all()
+            )
+            published_at = rfc.pub_date()
+            date = (
+                published_at.strftime("1 %B %Y")
+                if rfc.rfc_number in april1_rfc_numbers
+                else published_at.strftime("%B %Y")
+            )
+
+            # formats
+            formats = ", ".join(
+                sorted(
+                    [
+                        format["fmt"]
+                        for format in rfc.formats()
+                        if format["fmt"] in FORMATS_FOR_INDEX
+                    ],
+                    key=format_ordering(rfc.rfc_number),
+                )
+            ).upper()
+
+            # obsoletes
+            obsoletes = ""
+            obsoletes_documents = sorted(
+                rfc.related_that_doc("obs"),
+                key=attrgetter("rfc_number"),
+            )
+            if len(obsoletes_documents) > 0:
+                obsoletes_names = ", ".join(
+                    f"RFC{format_rfc_number(doc.rfc_number)}"
+                    for doc in obsoletes_documents
+                )
+                obsoletes = f" (Obsoletes {obsoletes_names})"
+
+            # obsoleted by
+            obsoleted_by = ""
+            obsoleted_by_documents = sorted(
+                rfc.related_that("obs"),
+                key=attrgetter("rfc_number"),
+            )
+            if len(obsoleted_by_documents) > 0:
+                obsoleted_by_names = ", ".join(
+                    f"RFC{format_rfc_number(doc.rfc_number)}"
+                    for doc in obsoleted_by_documents
+                )
+                obsoleted_by = f" (Obsoleted by {obsoleted_by_names})"
+
+            # updates
+            updates = ""
+            updates_documents = sorted(
+                rfc.related_that_doc("updates"),
+                key=attrgetter("rfc_number"),
+            )
+            if len(updates_documents) > 0:
+                updates_names = ", ".join(
+                    f"RFC{format_rfc_number(doc.rfc_number)}"
+                    for doc in updates_documents
+                )
+                updates = f" (Updates {updates_names})"
+
+            # updated by
+            updated_by = ""
+            updated_by_documents = sorted(
+                rfc.related_that("updates"),
+                key=attrgetter("rfc_number"),
+            )
+            if len(updated_by_documents) > 0:
+                updated_by_names = ", ".join(
+                    f"RFC{format_rfc_number(doc.rfc_number)}"
+                    for doc in updated_by_documents
+                )
+                updated_by = f" (Updated by {updated_by_names})"
+
+            doc_relations = f"{obsoletes}{obsoleted_by}{updates}{updated_by} "
+
+            # subseries
+            subseries = ",".join(
+                f"{container.type.slug}{format_rfc_number(int(container.name[3:]))}"
+                for container in rfc.part_of()
+            ).upper()
+            if subseries:
+                subseries = f"(Also {subseries}) "
+
+            entry = fill(
+                (
+                    f"{format_rfc_number(rfc.rfc_number)} {rfc.title}. {authors}. {date}. "
+                    f"(Format: {formats}){doc_relations}{subseries}"
+                    f"(Status: {str(rfc.std_level).upper()}) "
+                    f"(DOI: {rfc.doi})"
+                ),
+                width=73,
+                subsequent_indent=" " * 5,
+            )
+            entries.append(entry)
+
+    return entries
+
+
+def add_subseries_xml_index_entries(rfc_index, ss_type, include_all=False):
+    """Add subseries entries for rfc-index.xml"""
+    # subseries docs annotated with numeric number
+    ss_docs = list(
+        Document.objects.filter(type_id=ss_type)
+        .annotate(
+            number=Cast(
+                Substr("name", 4, None),
+                output_field=models.IntegerField(),
+            )
+        )
+        .order_by("-number")
+    )
+    if len(ss_docs) == 0:
+        return  # very much not expected
+    highest_number = ss_docs[0].number
+    for ss_number in range(1, highest_number + 1):
+        if ss_docs[-1].number == ss_number:
+            this_ss_doc = ss_docs.pop()
+            contained_rfcs = this_ss_doc.contains()
+        else:
+            contained_rfcs = []
+        if len(contained_rfcs) == 0 and not include_all:
+            continue
+        entry = etree.SubElement(rfc_index, f"{ss_type}-entry")
+        etree.SubElement(
+            entry, "doc-id"
+        ).text = f"{ss_type.upper()}{format_rfc_number(ss_number)}"
+        if len(contained_rfcs) > 0:
+            is_also = etree.SubElement(entry, "is-also")
+            for rfc in sorted(contained_rfcs, key=attrgetter("rfc_number")):
+                etree.SubElement(
+                    is_also, "doc-id"
+                ).text = f"RFC{format_rfc_number(rfc.rfc_number)}"
+
+
+def add_related_xml_index_entries(root: etree.Element, rfc: Document, tag: str):
+    relation_getter = {
+        "obsoletes": lambda doc: doc.related_that_doc("obs"),
+        "obsoleted-by": lambda doc: doc.related_that("obs"),
+        "updates": lambda doc: doc.related_that_doc("updates"),
+        "updated-by": lambda doc: doc.related_that("updates"),
+    }
+    related_docs = sorted(
+        relation_getter[tag](rfc),
+        key=attrgetter("rfc_number"),
+    )
+    if len(related_docs) > 0:
+        element = etree.SubElement(root, tag)
+        for doc in related_docs:
+            etree.SubElement(
+                element, "doc-id"
+            ).text = f"RFC{format_rfc_number(doc.rfc_number)}"
+
+
+def add_rfc_xml_index_entries(rfc_index):
+    """Add RFC entries for rfc-index.xml"""
+    entries = []
+    april1_rfc_numbers = get_april1_rfc_numbers()
+    publication_statuses = get_publication_std_levels()
+
+    published_rfcs = Document.objects.filter(type_id="rfc").order_by("rfc_number")
+
+    # Iterators for unpublished and published, both sorted by number
+    unpublished_iter = iter(get_unusable_rfc_numbers())
+    published_iter = iter(published_rfcs)
+
+    # Prime the next_* values
+    next_unpublished = next(unpublished_iter, None)
+    next_published = next(published_iter, None)
+
+    while next_published is not None or next_unpublished is not None:
+        if next_unpublished is not None and (
+            next_published is None
+            or next_unpublished.rfc_number < next_published.rfc_number
+        ):
+            entry = etree.SubElement(rfc_index, "rfc-not-issued-entry")
+            etree.SubElement(
+                entry, "doc-id"
+            ).text = f"RFC{format_rfc_number(next_unpublished.rfc_number)}"
+            entries.append(entry)
+            next_unpublished = next(unpublished_iter, None)
+            continue
+
+        rfc = next_published  # hang on to this
+        next_published = next(published_iter, None)  # prep for next iteration
+        entry = etree.SubElement(rfc_index, "rfc-entry")
+
+        etree.SubElement(
+            entry, "doc-id"
+        ).text = f"RFC{format_rfc_number(rfc.rfc_number)}"
+        etree.SubElement(entry, "title").text = rfc.title
+
+        for author in rfc.rfcauthor_set.all():
+            author_element = etree.SubElement(entry, "author")
+            etree.SubElement(author_element, "name").text = author.titlepage_name
+            if author.is_editor:
+                etree.SubElement(author_element, "title").text = "Editor"
+
+        date = etree.SubElement(entry, "date")
+        published_at = rfc.pub_date()
+        etree.SubElement(date, "month").text = published_at.strftime("%B")
+        if rfc.rfc_number in april1_rfc_numbers:
+            etree.SubElement(date, "day").text = str(published_at.day)
+        etree.SubElement(date, "year").text = str(published_at.year)
+
+        format_ = etree.SubElement(entry, "format")
+        fmts = [ff["fmt"] for ff in rfc.formats() if ff["fmt"] in FORMATS_FOR_INDEX]
+        for fmt in sorted(fmts, key=format_ordering(rfc.rfc_number)):
+            match_legacy = getattr(settings, "RFCINDEX_MATCH_LEGACY_XML", False)
+            etree.SubElement(format_, "file-format").text = (
+                "ASCII" if match_legacy and fmt == "txt" else fmt.upper()
+            )
+
+        etree.SubElement(entry, "page-count").text = str(rfc.pages)
+
+        if len(rfc.keywords) > 0:
+            keywords = etree.SubElement(entry, "keywords")
+            for keyword in rfc.keywords:
+                etree.SubElement(keywords, "kw").text = keyword.strip()
+
+        if rfc.abstract:
+            abstract = etree.SubElement(entry, "abstract")
+            for paragraph in rfc.abstract.split("\n\n"):
+                etree.SubElement(abstract, "p").text = paragraph.strip()
+
+        draft = rfc.came_from_draft()
+        if draft is not None:
+            etree.SubElement(entry, "draft").text = f"{draft.name}-{draft.rev}"
+
+        part_of_documents = rfc.part_of()
+        if len(part_of_documents) > 0:
+            is_also = etree.SubElement(entry, "is-also")
+            for doc in part_of_documents:
+                etree.SubElement(is_also, "doc-id").text = doc.name.upper()
+
+        add_related_xml_index_entries(entry, rfc, "obsoletes")
+        add_related_xml_index_entries(entry, rfc, "obsoleted-by")
+        add_related_xml_index_entries(entry, rfc, "updates")
+        add_related_xml_index_entries(entry, rfc, "updated-by")
+
+        etree.SubElement(entry, "current-status").text = rfc.std_level.name.upper()
+        etree.SubElement(entry, "publication-status").text = publication_statuses[
+            rfc.rfc_number
+        ].name.upper()
+        etree.SubElement(entry, "stream").text = (
+            "INDEPENDENT" if rfc.stream_id == "ise" else rfc.stream.name
+        )
+
+        # Add area / wg_acronym
+        if rfc.stream_id == "ietf":
+            if rfc.group.type_id in ["individ", "area"]:
+                etree.SubElement(entry, "wg_acronym").text = "NON WORKING GROUP"
+            else:
+                if rfc.area is not None:
+                    etree.SubElement(entry, "area").text = rfc.area.acronym
+                if rfc.group:
+                    etree.SubElement(entry, "wg_acronym").text = rfc.group.acronym
+
+        if rfc.tags.filter(slug="errata").exists():
+            etree.SubElement(entry, "errata-url").text = errata_url(rfc)
+        etree.SubElement(entry, "doi").text = rfc.doi
+        entries.append(entry)
+
+
+def create_rfc_txt_index():
+    """Create text index of published documents"""
+    DATE_FMT = "%m/%d/%Y"
+    created_on = timezone.now().strftime(DATE_FMT)
+    log("Creating rfc-index.txt")
+    index = render_to_string(
+        "sync/rfc-index.txt",
+        {
+            "created_on": created_on,
+            "rfcs": get_rfc_text_index_entries(),
+        },
+    )
+    save_to_red_bucket("rfc-index.txt", StringIO(index))
+
+
+def create_rfc_xml_index():
+    """Create XML index of published documents"""
+    XSI_NAMESPACE = "http://www.w3.org/2001/XMLSchema-instance"
+    XSI = "{" + XSI_NAMESPACE + "}"
+
+    log("Creating rfc-index.xml")
+    rfc_index = etree.Element(
+        "rfc-index",
+        nsmap={
+            None: "https://www.rfc-editor.org/rfc-index",
+            "xsi": XSI_NAMESPACE,
+        },
+        attrib={
+            XSI + "schemaLocation": (
+                "https://www.rfc-editor.org/rfc-index "
+                "https://www.rfc-editor.org/rfc-index.xsd"
+            ),
+        },
+    )
+
+    # add data
+    add_subseries_xml_index_entries(rfc_index, "bcp", include_all=True)
+    add_subseries_xml_index_entries(rfc_index, "fyi")
+    add_rfc_xml_index_entries(rfc_index)
+    add_subseries_xml_index_entries(rfc_index, "std")
+
+    # make it pretty
+    pretty_index = etree.tostring(
+        rfc_index,
+        encoding="utf-8",
+        xml_declaration=True,
+        pretty_print=4,
+    )
+    save_to_red_bucket("rfc-index.xml", BytesIO(pretty_index))
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
new file mode 100644
index 0000000000..b0a8712fe1
--- /dev/null
+++ b/ietf/sync/tests_rfcindex.py
@@ -0,0 +1,230 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+import json
+from io import BytesIO, StringIO
+from unittest import mock
+
+from django.core.files.storage import storages
+from django.test.utils import override_settings
+from lxml import etree
+
+from ietf.doc.factories import PublishedRfcDocEventFactory, IndividualRfcFactory
+from ietf.name.models import DocTagName
+from ietf.sync.rfcindex import (
+    create_rfc_txt_index,
+    create_rfc_xml_index,
+    format_rfc_number,
+    save_to_red_bucket, get_unusable_rfc_numbers, get_april1_rfc_numbers,
+    get_publication_std_levels,
+)
+from ietf.utils.test_utils import TestCase
+
+
+class RfcIndexTests(TestCase):
+    """Tests of rfc-index generation
+
+    Tests are limited and should cover more cases. Needs:
+      * test of subseries docs
+      * test of related docs (obsoletes/updates + reverse directions)
+      * more thorough validation of index contents
+
+    Be careful when calling create_rfc_txt_index() or create_rfc_xml_index(). These
+    will save to a storage by default, which can introduce cross-talk between tests.
+    Best to patch that method with a mock.
+    """
+
+    def setUp(self):
+        super().setUp()
+        red_bucket = storages["red_bucket"]
+
+        # Create an unused RFC number
+        red_bucket.save(
+            "input/unusable-rfc-numbers.json",
+            StringIO(json.dumps([{"number": 123, "comment": ""}])),
+        )
+
+        # actual April 1 RFC
+        self.april_fools_rfc = PublishedRfcDocEventFactory(
+            time="2020-04-01T12:00:00Z",
+            doc=IndividualRfcFactory(
+                name="rfc4560",
+                rfc_number=4560,
+                stream_id="ise",
+                std_level_id="inf",
+            ),
+        ).doc
+        # Set up a JSON file to flag the April 1 RFC
+        red_bucket.save(
+            "input/april-first-rfc-numbers.json",
+            StringIO(json.dumps([self.april_fools_rfc.rfc_number])),
+        )
+
+        # non-April Fools RFC that happens to have been published on April 1
+        self.rfc = PublishedRfcDocEventFactory(
+            time="2021-04-01T12:00:00Z",
+            doc__name="rfc10000",
+            doc__rfc_number=10000,
+            doc__std_level_id="std",
+        ).doc
+        self.rfc.tags.add(DocTagName.objects.get(slug="errata"))
+
+        # Set up a publication-std-levels.json file to indicate the publication
+        # standard of self.rfc as different from its current value
+        red_bucket.save(
+            "input/publication-std-levels.json",
+            StringIO(
+                json.dumps(
+                    [{"number": self.rfc.rfc_number, "publication_std_level": "ps"}]
+                )
+            ),
+        )
+
+    def tearDown(self):
+        red_bucket = storages["red_bucket"]
+        red_bucket.delete("input/unusable-rfc-numbers.json")
+        red_bucket.delete("input/april-first-rfc-numbers.json")
+        red_bucket.delete("input/publication-std-levels.json")
+        super().tearDown()
+
+    @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
+    def test_create_rfc_txt_index(self, mock_save):
+        create_rfc_txt_index()
+        self.assertEqual(mock_save.call_count, 1)
+        self.assertEqual(mock_save.call_args[0][0], "rfc-index.txt")
+        contents = mock_save.call_args[0][1].read()
+        self.assertIn(
+            "123 Not Issued.",
+            contents,
+        )
+        # No zero prefix!
+        self.assertNotIn(
+            "0123 Not Issued.",
+            contents,
+        )
+        self.assertIn(
+            f"{self.april_fools_rfc.rfc_number} {self.april_fools_rfc.title}",
+            contents,
+        )
+        self.assertIn("1 April 2020", contents)  # from the April 1 RFC
+        self.assertIn(
+            f"{self.rfc.rfc_number} {self.rfc.title}",
+            contents,
+        )
+        self.assertIn("April 2021", contents)  # from the non-April 1 RFC
+        self.assertNotIn("1 April 2021", contents)
+
+    @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
+    def test_create_rfc_xml_index(self, mock_save):
+        create_rfc_xml_index()
+        self.assertEqual(mock_save.call_count, 1)
+        self.assertEqual(mock_save.call_args[0][0], "rfc-index.xml")
+        contents = mock_save.call_args[0][1].read()
+        ns = "{https://www.rfc-editor.org/rfc-index}"  # NOT an f-string
+        index = etree.fromstring(contents)
+
+        # We can aspire to validating the schema - currently does not conform because
+        # XSD expects 4-digit RFC numbers (etc).
+        #
+        # xmlschema = etree.XMLSchema(etree.fromstring(
+        #     Path(__file__).with_name("rfc-index.xsd").read_bytes())
+        # )
+        # xmlschema.assertValid(index)
+
+        children = list(index)  # elements as list
+        # Should be one rfc-not-issued-entry
+        self.assertEqual(len(children), 3)
+        self.assertEqual(
+            [
+                c.find(f"{ns}doc-id").text
+                for c in children
+                if c.tag == f"{ns}rfc-not-issued-entry"
+            ],
+            ["RFC123"],
+        )
+        # Should be two rfc-entries
+        rfc_entries = {
+            c.find(f"{ns}doc-id").text: c for c in children if c.tag == f"{ns}rfc-entry"
+        }
+
+        # Check the April Fool's entry
+        april_fools_entry = rfc_entries[self.april_fools_rfc.name.upper()]
+        self.assertEqual(
+            april_fools_entry.find(f"{ns}title").text,
+            self.april_fools_rfc.title,
+        )
+        self.assertEqual(
+            [(c.tag, c.text) for c in april_fools_entry.find(f"{ns}date")],
+            [(f"{ns}month", "April"), (f"{ns}day", "1"), (f"{ns}year", "2020")],
+        )
+        self.assertEqual(
+            april_fools_entry.find(f"{ns}current-status").text,
+            "INFORMATIONAL",
+        )
+        self.assertEqual(
+            april_fools_entry.find(f"{ns}publication-status").text,
+            "UNKNOWN",
+        )
+
+        # Check the Regular entry
+        rfc_entry = rfc_entries[self.rfc.name.upper()]
+        self.assertEqual(rfc_entry.find(f"{ns}title").text, self.rfc.title)
+        self.assertEqual(
+            rfc_entry.find(f"{ns}current-status").text, "INTERNET STANDARD"
+        )
+        self.assertEqual(
+            rfc_entry.find(f"{ns}publication-status").text, "PROPOSED STANDARD"
+        )
+        self.assertEqual(
+            [(c.tag, c.text) for c in rfc_entry.find(f"{ns}date")],
+            [(f"{ns}month", "April"), (f"{ns}year", "2021")],
+        )
+
+
+class HelperTests(TestCase):
+    def test_format_rfc_number(self):
+        self.assertEqual(format_rfc_number(10), "10")
+        with override_settings(RFCINDEX_MATCH_LEGACY_XML=True):
+            self.assertEqual(format_rfc_number(10), "0010")
+
+    def test_save_to_red_bucket(self):
+        red_bucket = storages["red_bucket"]
+        with override_settings(RFCINDEX_DELETE_THEN_WRITE=False):
+            save_to_red_bucket("test", StringIO("contents"))
+        with red_bucket.open("test", "r") as f:
+            self.assertEqual(f.read(), "contents")
+        with override_settings(RFCINDEX_DELETE_THEN_WRITE=True):
+            save_to_red_bucket("test", BytesIO(b"new contents"))
+        with red_bucket.open("test", "r") as f:
+            self.assertEqual(f.read(), "new contents")
+        red_bucket.delete("test")  # clean up like a good child
+
+    def test_get_unusable_rfc_numbers_raises(self):
+        """get_unusable_rfc_numbers should bail on errors"""
+        with self.assertRaises(FileNotFoundError):
+            get_unusable_rfc_numbers()
+        red_bucket = storages["red_bucket"]
+        red_bucket.save("unusable-rfc-numbers.json", StringIO("not json"))
+        with self.assertRaises(json.JSONDecodeError):
+            get_unusable_rfc_numbers()
+        red_bucket.delete("unusable-rfc-numbers.json")
+
+    def test_get_april1_rfc_numbers_raises(self):
+        """get_april1_rfc_numbers should bail on errors"""
+        with self.assertRaises(FileNotFoundError):
+            get_april1_rfc_numbers()
+        red_bucket = storages["red_bucket"]
+        red_bucket.save("april-first-rfc-numbers.json", StringIO("not json"))
+        with self.assertRaises(json.JSONDecodeError):
+            get_april1_rfc_numbers()
+        red_bucket.delete("april-first-rfc-numbers.json")
+
+    def test_get_publication_std_levels_raises(self):
+        """get_publication_std_levels should bail on errors"""
+        with self.assertRaises(FileNotFoundError):
+            get_publication_std_levels()
+        red_bucket = storages["red_bucket"]
+        red_bucket.save("publication-std-levels.json", StringIO("not json"))
+        with self.assertRaises(json.JSONDecodeError):
+            get_publication_std_levels()
+        red_bucket.delete("publication-std-levels.json")
diff --git a/ietf/templates/sync/rfc-index.txt b/ietf/templates/sync/rfc-index.txt
new file mode 100644
index 0000000000..0f01ddfa90
--- /dev/null
+++ b/ietf/templates/sync/rfc-index.txt
@@ -0,0 +1,69 @@
+
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                             RFC INDEX
+                           -------------
+
+(CREATED ON: {{created_on}}.)
+
+This file contains citations for all RFCs in numeric order.
+
+RFC citations appear in this format:
+
+  ####  Title of RFC.  Author 1, Author 2, Author 3.  Issue date.
+        (Format: ASCII) (Obsoletes xxx) (Obsoleted by xxx) (Updates xxx)
+        (Updated by xxx) (Also FYI ####) (Status: ssssss) (DOI: ddd)
+
+or
+
+  ####  Not Issued.
+
+For example:
+
+  1129 Internet Time Synchronization: The Network Time Protocol. D.L.
+       Mills. October 1989. (Format: TXT, PS, PDF, HTML) (Also RFC1119)
+       (Status: INFORMATIONAL) (DOI: 10.17487/RFC1129)
+
+Key to citations:
+
+#### is the RFC number.
+
+Following the RFC number are the title, the author(s), and the
+publication date of the RFC.  Each of these is terminated by a period.
+
+Following the number are the title (terminated with a period), the
+author, or list of authors (terminated with a period), and the date
+(terminated with a period).
+
+The format follows in parentheses. One or more of the following formats
+are listed:  text (TXT), PostScript (PS), Portable Document Format
+(PDF), HTML, XML.
+
+Obsoletes xxxx refers to other RFCs that this one replaces;
+Obsoleted by xxxx refers to RFCs that have replaced this one.
+Updates xxxx refers to other RFCs that this one merely updates (but
+does not replace); Updated by xxxx refers to RFCs that have updated
+(but not replaced) this one.  Generally, only immediately succeeding
+and/or preceding RFCs are indicated, not the entire history of each
+related earlier or later RFC in a related series.
+
+The (Also FYI ##) or (Also STD ##) or (Also BCP ##) phrase gives the
+equivalent FYI, STD, or BCP number if the RFC is also in those
+document sub-series.  The Status field gives the document's
+current status (see RFC 2026).  The (DOI ddd) field gives the
+Digital Object Identifier.
+
+RFCs may be obtained in a number of ways, using HTTP, FTP, or email.
+See the RFC Editor Web page http://www.rfc-editor.org
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                                RFC INDEX
+                                ---------
+
+
+
+{% for rfc in rfcs %}{{rfc|safe}}
+
+{% endfor %}
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 0386dbbdf9..5ca4ba5cd9 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -417,6 +417,39 @@ def _multiline_to_list(s):
         ),
     }
 
+# Configure storage for the red bucket - assume it uses the same credentials as
+# other blobs
+_red_bucket_name = os.environ.get("DATATRACKER_BLOB_STORE_RED_BUCKET_NAME", "").strip()
+if _red_bucket_name == "":
+    raise RuntimeError("DATATRACKER_BLOB_STORE_RED_BUCKET_NAME must be set")
+
+STORAGES["red_bucket"] = {
+    "BACKEND": "storages.backends.s3.S3Storage",
+    "OPTIONS": dict(
+        endpoint_url=_blob_store_endpoint_url,
+        access_key=_blob_store_access_key,
+        secret_key=_blob_store_secret_key,
+        security_token=None,
+        client_config=botocore.config.Config(
+            request_checksum_calculation="when_required",
+            response_checksum_validation="when_required",
+            signature_version="s3v4",
+            connect_timeout=_blob_store_connect_timeout,
+            read_timeout=_blob_store_read_timeout,
+            retries={"total_max_attempts": _blob_store_max_attempts},
+        ),
+        verify=False,
+        bucket_name=_red_bucket_name,
+    ),
+}
+RFCINDEX_DELETE_THEN_WRITE = False  # S3Storage allows file_overwrite by default
+RFCINDEX_OUTPUT_PATH = os.environ.get(
+    "DATATRACKER_RFCINDEX_OUTPUT_PATH", "other/"
+)
+RFCINDEX_INPUT_PATH = os.environ.get(
+    "DATATRACKR_RFCINDEX_INPUT_PATH", ""
+)
+
 # Configure the blobdb app for artifact storage
 _blobdb_replication_enabled = (
     os.environ.get("DATATRACKER_BLOBDB_REPLICATION_ENABLED", "true").lower() == "true"

From c226749c301fbecfd5503ebd66ba3692187d2946 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 12 Mar 2026 16:31:56 -0300
Subject: [PATCH 573/707] feat: task + API for rfc-index creation (#10537)

* chore: fix typo in k8s/settings_local.py

* feat: refresh_rfc_index() API

* fix: use ContentFile, manually encode str

Works better with S3Storage

* chore(dev): expose blobstore on fixed ports

Simplifies connecting purple to the blob store

* chore(dev): typo

* test: fix + test encoding more carefully

* test: cover the new url
---
 .devcontainer/docker-compose.extend.yml |  4 +--
 docker/docker-compose.extend.yml        |  4 +--
 ietf/api/tests_views_rpc.py             | 15 ++++++++++
 ietf/api/urls_rpc.py                    |  5 ++++
 ietf/api/views_rpc.py                   | 16 +++++++++++
 ietf/sync/rfcindex.py                   | 17 ++++++-----
 ietf/sync/tasks.py                      | 10 ++++++-
 ietf/sync/tests_rfcindex.py             | 38 ++++++++++++++-----------
 k8s/settings_local.py                   |  2 +-
 9 files changed, 82 insertions(+), 29 deletions(-)

diff --git a/.devcontainer/docker-compose.extend.yml b/.devcontainer/docker-compose.extend.yml
index a92f42bc6d..ce1ce259fd 100644
--- a/.devcontainer/docker-compose.extend.yml
+++ b/.devcontainer/docker-compose.extend.yml
@@ -14,8 +14,8 @@ services:
         network_mode: service:db
     blobstore:
         ports:
-            - '9000'
-            - '9001'
+            - '9000:9000'
+            - '9001:9001'
 
 volumes:
     datatracker-vscode-ext:
diff --git a/docker/docker-compose.extend.yml b/docker/docker-compose.extend.yml
index a69a453110..12ebe447d5 100644
--- a/docker/docker-compose.extend.yml
+++ b/docker/docker-compose.extend.yml
@@ -18,8 +18,8 @@ services:
             - '5433'
     blobstore:
         ports:
-            - '9000'
-            - '9001'
+            - '9000:9000'
+            - '9001:9001'
     celery:
         volumes:
             - .:/workspace
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 6a5a5c9b88..7ab8778d28 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -363,3 +363,18 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 200)  # conflict
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    @mock.patch("ietf.api.views_rpc.create_rfc_index_task")
+    def test_refresh_rfc_index(self, mock_task):
+        url = urlreverse("ietf.api.purple_api.refresh_rfc_index")
+        response = self.client.get(url)
+        self.assertEqual(response.status_code, 403)
+        response = self.client.get(url, headers={"X-Api-Key": "invalid-token"})
+        self.assertEqual(response.status_code, 403)
+        response = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(response.status_code, 405)
+        self.assertFalse(mock_task.delay.called)
+        response = self.client.post(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(response.status_code, 202)
+        self.assertTrue(mock_task.delay.called)
diff --git a/ietf/api/urls_rpc.py b/ietf/api/urls_rpc.py
index 9d41ac137f..8555610dc3 100644
--- a/ietf/api/urls_rpc.py
+++ b/ietf/api/urls_rpc.py
@@ -30,6 +30,11 @@
         views_rpc.RfcPubFilesView.as_view(),
         name="ietf.api.purple_api.upload_rfc_files",
     ),
+    path(
+        r"rfc_index/refresh/",
+        views_rpc.RfcIndexView.as_view(),
+        name="ietf.api.purple_api.refresh_rfc_index",
+    ),
     path(r"subject/<str:subject_id>/person/", views_rpc.SubjectPersonView.as_view()),
 ]
 
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 8862bbf866..c7ae699005 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -40,6 +40,7 @@
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
 from ietf.doc.tasks import signal_update_rfc_metadata_task
 from ietf.person.models import Email, Person
+from ietf.sync.tasks import create_rfc_index_task
 
 
 class Conflict(APIException):
@@ -516,3 +517,18 @@ def post(self, request):
                 shutil.move(ftm, destination)
 
         return Response(NotificationAckSerializer().data)
+
+
+class RfcIndexView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    @extend_schema(
+        operation_id="refresh_rfc_index",
+        summary="Refresh rfc-index files",
+        description="Requests creation of rfc-index.xml and rfc-index.txt files",
+        responses={202: None},
+        request=None,
+    )
+    def post(self, request):
+        create_rfc_index_task.delay()
+        return Response(status=202)
diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index b15846094f..63c2044931 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -3,7 +3,6 @@
 from collections import defaultdict
 from collections.abc import Container
 from dataclasses import dataclass
-from io import StringIO, BytesIO
 from itertools import chain
 from operator import attrgetter, itemgetter
 from pathlib import Path
@@ -11,6 +10,7 @@
 from urllib.parse import urljoin
 
 from django.conf import settings
+from django.core.files.base import ContentFile
 from lxml import etree
 
 from django.core.files.storage import storages
@@ -28,7 +28,7 @@
 
 def format_rfc_number(n):
     """Format an RFC number (or subseries doc number)
-    
+
     Set settings.RFCINDEX_MATCH_LEGACY_XML=True for the legacy (leading-zero) format.
     That is for debugging only - tests will fail.
     """
@@ -42,13 +42,16 @@ def errata_url(rfc: Document):
     return urljoin(settings.RFC_EDITOR_ERRATA_BASE_URL + "/", f"rfc{rfc.rfc_number}")
 
 
-def save_to_red_bucket(filename: str, content: BytesIO | StringIO):
+def save_to_red_bucket(filename: str, content: str | bytes):
     red_bucket = storages["red_bucket"]
     bucket_path = str(Path(getattr(settings, "RFCINDEX_OUTPUT_PATH", "")) / filename)
     if getattr(settings, "RFCINDEX_DELETE_THEN_WRITE", True):
         # Django 4.2's FileSystemStorage does not support allow_overwrite.
         red_bucket.delete(bucket_path)
-    red_bucket.save(bucket_path, content)
+    red_bucket.save(
+        bucket_path,
+        ContentFile(content if isinstance(content, bytes) else content.encode("utf-8")),
+    )
     log(f"Saved {bucket_path} in red_bucket storage")
 
 
@@ -76,7 +79,7 @@ def get_unusable_rfc_numbers() -> list[UnusableRfcNumber]:
     except json.JSONDecodeError:
         log(f"Error: unable to parse {bucket_path} in red_bucket storage")
         if settings.SERVER_MODE == "development":
-            return []  # pragma: no cover  
+            return []  # pragma: no cover
         raise
     assert all(isinstance(record["number"], int) for record in records)
     assert all(isinstance(record["comment"], str) for record in records)
@@ -441,7 +444,7 @@ def create_rfc_txt_index():
             "rfcs": get_rfc_text_index_entries(),
         },
     )
-    save_to_red_bucket("rfc-index.txt", StringIO(index))
+    save_to_red_bucket("rfc-index.txt", index)
 
 
 def create_rfc_xml_index():
@@ -477,4 +480,4 @@ def create_rfc_xml_index():
         xml_declaration=True,
         pretty_print=4,
     )
-    save_to_red_bucket("rfc-index.xml", BytesIO(pretty_index))
+    save_to_red_bucket("rfc-index.xml", pretty_index)
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index fc75a056ed..4c84dc581e 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 #
 # Celery task definitions
 #
@@ -18,6 +18,7 @@
 from ietf.sync import iana
 from ietf.sync import rfceditor
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
+from ietf.sync.rfcindex import create_rfc_txt_index, create_rfc_xml_index
 from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils import log
 from ietf.utils.timezone import date_today
@@ -272,3 +273,10 @@ def load_rfcs_into_blobdb_task(start: int, end: int):
     if end > 11000:  # Arbitrarily chosen
         end = 11000
     load_rfcs_into_blobdb(list(range(start, end + 1)))
+
+
+@shared_task
+def create_rfc_index_task():
+    create_rfc_txt_index()
+    create_rfc_xml_index()
+
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index b0a8712fe1..e682c016f5 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -1,8 +1,8 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 import json
-from io import BytesIO, StringIO
 from unittest import mock
 
+from django.core.files.base import ContentFile
 from django.core.files.storage import storages
 from django.test.utils import override_settings
 from lxml import etree
@@ -13,7 +13,9 @@
     create_rfc_txt_index,
     create_rfc_xml_index,
     format_rfc_number,
-    save_to_red_bucket, get_unusable_rfc_numbers, get_april1_rfc_numbers,
+    save_to_red_bucket,
+    get_unusable_rfc_numbers,
+    get_april1_rfc_numbers,
     get_publication_std_levels,
 )
 from ietf.utils.test_utils import TestCase
@@ -39,7 +41,7 @@ def setUp(self):
         # Create an unused RFC number
         red_bucket.save(
             "input/unusable-rfc-numbers.json",
-            StringIO(json.dumps([{"number": 123, "comment": ""}])),
+            ContentFile(json.dumps([{"number": 123, "comment": ""}])),
         )
 
         # actual April 1 RFC
@@ -55,7 +57,7 @@ def setUp(self):
         # Set up a JSON file to flag the April 1 RFC
         red_bucket.save(
             "input/april-first-rfc-numbers.json",
-            StringIO(json.dumps([self.april_fools_rfc.rfc_number])),
+            ContentFile(json.dumps([self.april_fools_rfc.rfc_number])),
         )
 
         # non-April Fools RFC that happens to have been published on April 1
@@ -71,7 +73,7 @@ def setUp(self):
         # standard of self.rfc as different from its current value
         red_bucket.save(
             "input/publication-std-levels.json",
-            StringIO(
+            ContentFile(
                 json.dumps(
                     [{"number": self.rfc.rfc_number, "publication_std_level": "ps"}]
                 )
@@ -91,7 +93,8 @@ def test_create_rfc_txt_index(self, mock_save):
         create_rfc_txt_index()
         self.assertEqual(mock_save.call_count, 1)
         self.assertEqual(mock_save.call_args[0][0], "rfc-index.txt")
-        contents = mock_save.call_args[0][1].read()
+        contents = mock_save.call_args[0][1]
+        self.assertTrue(isinstance(contents, str))
         self.assertIn(
             "123 Not Issued.",
             contents,
@@ -119,7 +122,8 @@ def test_create_rfc_xml_index(self, mock_save):
         create_rfc_xml_index()
         self.assertEqual(mock_save.call_count, 1)
         self.assertEqual(mock_save.call_args[0][0], "rfc-index.xml")
-        contents = mock_save.call_args[0][1].read()
+        contents = mock_save.call_args[0][1]
+        self.assertTrue(isinstance(contents, bytes))
         ns = "{https://www.rfc-editor.org/rfc-index}"  # NOT an f-string
         index = etree.fromstring(contents)
 
@@ -190,13 +194,15 @@ def test_format_rfc_number(self):
     def test_save_to_red_bucket(self):
         red_bucket = storages["red_bucket"]
         with override_settings(RFCINDEX_DELETE_THEN_WRITE=False):
-            save_to_red_bucket("test", StringIO("contents"))
-        with red_bucket.open("test", "r") as f:
-            self.assertEqual(f.read(), "contents")
+            save_to_red_bucket("test", "contents \U0001f600")
+        # Read as binary and explicitly decode to confirm encoding
+        with red_bucket.open("test", "rb") as f:
+            self.assertEqual(f.read().decode("utf-8"), "contents \U0001f600")
         with override_settings(RFCINDEX_DELETE_THEN_WRITE=True):
-            save_to_red_bucket("test", BytesIO(b"new contents"))
-        with red_bucket.open("test", "r") as f:
-            self.assertEqual(f.read(), "new contents")
+            save_to_red_bucket("test", "new contents \U0001fae0".encode("utf-8"))
+        # Read as binary and explicitly decode to confirm encoding
+        with red_bucket.open("test", "rb") as f:
+            self.assertEqual(f.read().decode("utf-8"), "new contents \U0001fae0")
         red_bucket.delete("test")  # clean up like a good child
 
     def test_get_unusable_rfc_numbers_raises(self):
@@ -204,7 +210,7 @@ def test_get_unusable_rfc_numbers_raises(self):
         with self.assertRaises(FileNotFoundError):
             get_unusable_rfc_numbers()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("unusable-rfc-numbers.json", StringIO("not json"))
+        red_bucket.save("unusable-rfc-numbers.json", ContentFile("not json"))
         with self.assertRaises(json.JSONDecodeError):
             get_unusable_rfc_numbers()
         red_bucket.delete("unusable-rfc-numbers.json")
@@ -214,7 +220,7 @@ def test_get_april1_rfc_numbers_raises(self):
         with self.assertRaises(FileNotFoundError):
             get_april1_rfc_numbers()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("april-first-rfc-numbers.json", StringIO("not json"))
+        red_bucket.save("april-first-rfc-numbers.json", ContentFile("not json"))
         with self.assertRaises(json.JSONDecodeError):
             get_april1_rfc_numbers()
         red_bucket.delete("april-first-rfc-numbers.json")
@@ -224,7 +230,7 @@ def test_get_publication_std_levels_raises(self):
         with self.assertRaises(FileNotFoundError):
             get_publication_std_levels()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("publication-std-levels.json", StringIO("not json"))
+        red_bucket.save("publication-std-levels.json", ContentFile("not json"))
         with self.assertRaises(json.JSONDecodeError):
             get_publication_std_levels()
         red_bucket.delete("publication-std-levels.json")
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 5ca4ba5cd9..56e395c5ac 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -447,7 +447,7 @@ def _multiline_to_list(s):
     "DATATRACKER_RFCINDEX_OUTPUT_PATH", "other/"
 )
 RFCINDEX_INPUT_PATH = os.environ.get(
-    "DATATRACKR_RFCINDEX_INPUT_PATH", ""
+    "DATATRACKER_RFCINDEX_INPUT_PATH", ""
 )
 
 # Configure the blobdb app for artifact storage

From 2c59afe783216285b9695e99ee64547fe4e66469 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 13 Mar 2026 16:14:38 -0300
Subject: [PATCH 574/707] fix: drop stale obs/updates in rfced sync (#10543)

* fix: drop stale obs/updates in rfced sync

* refactor: partial revert, orig was safer
---
 ietf/sync/rfceditor.py | 73 +++++++++++++++++++++++++++++-------------
 1 file changed, 50 insertions(+), 23 deletions(-)

diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index cdcdeb5989..aa0e643b20 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -636,43 +636,70 @@ def update_docs_from_rfc_index(
             )
             rfc_published = True
 
-        def parse_relation_list(l):
-            res = []
-            for x in l:
-                for a in Document.objects.filter(name=x.lower(), type_id="rfc"):
-                    if a not in res:
-                        res.append(a)
-            return res
-
-        for x in parse_relation_list(obsoletes):
-            if not RelatedDocument.objects.filter(
-                source=doc, target=x, relationship=relationship_obsoletes
+        def parse_relation_list(rel_list: list[str]) -> list[Document]:
+            return list(
+                Document.objects.filter(
+                    name__in=[name.strip().lower() for name in rel_list],
+                    type_id="rfc"
+                )
+            )
+
+        # Create missing obsoletes relations
+        docs_this_obsoletes = parse_relation_list(obsoletes)
+        for obs_doc in docs_this_obsoletes:
+            if not doc.relateddocument_set.filter(
+                target=obs_doc, relationship=relationship_obsoletes
             ):
-                r = RelatedDocument.objects.create(
-                    source=doc, target=x, relationship=relationship_obsoletes
+                r = doc.relateddocument_set.create(
+                    target=obs_doc, relationship=relationship_obsoletes
                 )
                 rfc_changes.append(
-                    "created {rel_name} relation between {src_name} and {tgt_name}".format(
+                    "created {rel_name} relation between {src} and {tgt}".format(
                         rel_name=r.relationship.name.lower(),
-                        src_name=prettify_std_name(r.source.name),
-                        tgt_name=prettify_std_name(r.target.name),
+                        src=prettify_std_name(r.source.name),
+                        tgt=prettify_std_name(r.target.name),
                     )
                 )
+        # Remove stale obsoletes relations
+        for r in doc.relateddocument_set.filter(
+            relationship=relationship_obsoletes
+        ).exclude(target_id__in=[d.pk for d in docs_this_obsoletes]):
+            r.delete()
+            rfc_changes.append(
+                "removed {rel_name} relation between {src} and {tgt}".format(
+                    rel_name=r.relationship.name.lower(),
+                    src=prettify_std_name(r.source.name),
+                    tgt=prettify_std_name(r.target.name),
+                )
+            )
 
-        for x in parse_relation_list(updates):
+        docs_this_updates = parse_relation_list(updates)
+        for upd_doc in docs_this_updates:
             if not RelatedDocument.objects.filter(
-                source=doc, target=x, relationship=relationship_updates
+                source=doc, target=upd_doc, relationship=relationship_updates
             ):
-                r = RelatedDocument.objects.create(
-                    source=doc, target=x, relationship=relationship_updates
+                r = doc.relateddocument_set.create(
+                    target=upd_doc, relationship=relationship_updates
                 )
                 rfc_changes.append(
-                    "created {rel_name} relation between {src_name} and {tgt_name}".format(
+                    "created {rel_name} relation between {src} and {tgt}".format(
                         rel_name=r.relationship.name.lower(),
-                        src_name=prettify_std_name(r.source.name),
-                        tgt_name=prettify_std_name(r.target.name),
+                        src=prettify_std_name(r.source.name),
+                        tgt=prettify_std_name(r.target.name),
                     )
                 )
+        # Remove stale updates relations
+        for r in doc.relateddocument_set.filter(
+            relationship=relationship_updates
+        ).exclude(target_id__in=[d.pk for d in docs_this_updates]):
+            r.delete()
+            rfc_changes.append(
+                "removed {rel_name} relation between {src} and {tgt}".format(
+                    rel_name=r.relationship.name.lower(),
+                    src=prettify_std_name(r.source.name),
+                    tgt=prettify_std_name(r.target.name),
+                )
+            )
 
         if also:
             # recondition also to have proper subseries document names:

From 76fd25a1f39093a214be8ac2e0a9ed452beb7a47 Mon Sep 17 00:00:00 2001
From: Tianyi Gao <tianyi.gao@ed.ac.uk>
Date: Sat, 14 Mar 2026 12:19:51 +0800
Subject: [PATCH 575/707] fix: wording in id_expired_email template (#10154)

---
 ietf/templates/doc/draft/id_expired_email.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/doc/draft/id_expired_email.txt b/ietf/templates/doc/draft/id_expired_email.txt
index afbf253ee2..161146a301 100644
--- a/ietf/templates/doc/draft/id_expired_email.txt
+++ b/ietf/templates/doc/draft/id_expired_email.txt
@@ -1,4 +1,4 @@
-{% autoescape off %}{{ doc.file_tag|safe }} was just expired.
+{% autoescape off %}{{ doc.file_tag|safe }} just expired.
 This Internet-Draft is in the state "{{ state }}" in the Datatracker.
 
 

From 9646edc20378e101ab48ff24253861fc5ea78fe9 Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Sun, 15 Mar 2026 02:17:40 +0800
Subject: [PATCH 576/707] feat: add author affiliation in serializer (#10549)

---
 ietf/api/serializers_rpc.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index c17cbc64ce..a18dc588c4 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -103,7 +103,7 @@ class DocumentAuthorSerializer(serializers.ModelSerializer):
 
     class Meta:
         model = DocumentAuthor
-        fields = ["person", "plain_name"]
+        fields = ["person", "plain_name", "affiliation"]
 
     def get_plain_name(self, document_author: DocumentAuthor) -> str:
         return document_author.person.plain_name()

From 36fa518ec387f425b1f11f6f9040a73e8f61df30 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Mar 2026 10:02:47 -0400
Subject: [PATCH 577/707] chore(deps): bump the npm group across
 /dev/deploy-to-container with 5 updates (#10560)

Bumps the npm group with 5 updates in the /dev/deploy-to-container directory:

| Package | From | To |
| --- | --- | --- |
| [dockerode](https://github.com/apocas/dockerode) | `4.0.6` | `4.0.9` |
| [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.3.0` | `11.3.4` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.5` | `5.1.7` |
| [slugify](https://github.com/simov/slugify) | `1.6.6` | `1.6.8` |
| [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.11` |



Updates `dockerode` from 4.0.6 to 4.0.9
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.6...v4.0.9)

Updates `fs-extra` from 11.3.0 to 11.3.4
- [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jprichardson/node-fs-extra/compare/11.3.0...11.3.4)

Updates `nanoid` from 5.1.5 to 5.1.7
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/5.1.5...5.1.7)

Updates `slugify` from 1.6.6 to 1.6.8
- [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simov/slugify/compare/v1.6.6...v1.6.8)

Updates `tar` from 7.4.3 to 7.5.11
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.11)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: fs-extra
  dependency-version: 11.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nanoid
  dependency-version: 5.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: slugify
  dependency-version: 1.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 733 +++-------------------
 dev/deploy-to-container/package.json      |  10 +-
 2 files changed, 76 insertions(+), 667 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index 0954ec9af4..b62109f0e2 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -6,12 +6,12 @@
     "": {
       "name": "deploy-to-container",
       "dependencies": {
-        "dockerode": "^4.0.6",
-        "fs-extra": "^11.3.0",
-        "nanoid": "5.1.5",
+        "dockerode": "^4.0.9",
+        "fs-extra": "^11.3.4",
+        "nanoid": "5.1.7",
         "nanoid-dictionary": "5.0.0",
-        "slugify": "1.6.6",
-        "tar": "^7.4.3",
+        "slugify": "1.6.8",
+        "tar": "^7.5.11",
         "yargs": "^17.7.2"
       },
       "engines": {
@@ -52,95 +52,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
-      "dependencies": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
-      },
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz",
-      "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA==",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
-      }
-    },
-    "node_modules/@isaacs/cliui/node_modules/ansi-styles": {
-      "version": "6.2.1",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
-      "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug==",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
-    },
-    "node_modules/@isaacs/cliui/node_modules/emoji-regex": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
-      "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg=="
-    },
-    "node_modules/@isaacs/cliui/node_modules/string-width": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
-      "dependencies": {
-        "eastasianwidth": "^0.2.0",
-        "emoji-regex": "^9.2.2",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/@isaacs/cliui/node_modules/strip-ansi": {
-      "version": "7.1.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
-      "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
-      "dependencies": {
-        "ansi-regex": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
-      }
-    },
-    "node_modules/@isaacs/cliui/node_modules/wrap-ansi": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
-      "dependencies": {
-        "ansi-styles": "^6.1.0",
-        "string-width": "^5.0.1",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
     "node_modules/@isaacs/fs-minipass": {
       "version": "4.0.1",
       "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
@@ -161,15 +72,6 @@
         "url": "https://opencollective.com/js-sdsl"
       }
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
-      "optional": true,
-      "engines": {
-        "node": ">=14"
-      }
-    },
     "node_modules/@protobufjs/aspromise": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
@@ -263,11 +165,6 @@
         "safer-buffer": "~2.1.0"
       }
     },
-    "node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="
-    },
     "node_modules/base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -285,8 +182,7 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ],
-      "license": "MIT"
+      ]
     },
     "node_modules/bcrypt-pbkdf": {
       "version": "1.0.2",
@@ -301,21 +197,12 @@
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
       "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "license": "MIT",
       "dependencies": {
         "buffer": "^5.5.0",
         "inherits": "^2.0.4",
         "readable-stream": "^3.4.0"
       }
     },
-    "node_modules/brace-expansion": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
     "node_modules/buffer": {
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
@@ -334,7 +221,6 @@
           "url": "https://feross.org/support"
         }
       ],
-      "license": "MIT",
       "dependencies": {
         "base64-js": "^1.3.1",
         "ieee754": "^1.1.13"
@@ -352,8 +238,7 @@
     "node_modules/chownr": {
       "version": "1.1.4",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
-      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
-      "license": "ISC"
+      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg=="
     },
     "node_modules/cliui": {
       "version": "8.0.1",
@@ -398,19 +283,6 @@
         "node": ">=10.0.0"
       }
     },
-    "node_modules/cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
-      "dependencies": {
-        "path-key": "^3.1.0",
-        "shebang-command": "^2.0.0",
-        "which": "^2.0.1"
-      },
-      "engines": {
-        "node": ">= 8"
-      }
-    },
     "node_modules/debug": {
       "version": "4.4.0",
       "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
@@ -444,38 +316,31 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.6",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
-      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
-      "license": "Apache-2.0",
+      "version": "4.0.9",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.9.tgz",
+      "integrity": "sha512-iND4mcOWhPaCNh54WmK/KoSb35AFqPAUWFMffTQcp52uQt36b5uNwEJTSXntJZBbeGad72Crbi/hvDIv6us/6Q==",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.1.2",
+        "tar-fs": "^2.1.4",
         "uuid": "^10.0.0"
       },
       "engines": {
         "node": ">= 8.0"
       }
     },
-    "node_modules/eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA=="
-    },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="
     },
     "node_modules/end-of-stream": {
-      "version": "1.4.4",
-      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz",
-      "integrity": "sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==",
-      "license": "MIT",
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
       "dependencies": {
         "once": "^1.4.0"
       }
@@ -488,32 +353,15 @@
         "node": ">=6"
       }
     },
-    "node_modules/foreground-child": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz",
-      "integrity": "sha512-TMKDUnIte6bfb5nWv7V/caI169OHgvwjb7V4WkeUvbQQdjr5rWKqHFiKWb/fcOwB+CzBT+qbWjvj+DVwRskpIg==",
-      "dependencies": {
-        "cross-spawn": "^7.0.0",
-        "signal-exit": "^4.0.1"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/fs-constants": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
-      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
-      "license": "MIT"
+      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "node_modules/fs-extra": {
-      "version": "11.3.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
-      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
-      "license": "MIT",
+      "version": "11.3.4",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.4.tgz",
+      "integrity": "sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA==",
       "dependencies": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
@@ -531,27 +379,6 @@
         "node": "6.* || 8.* || >= 10.*"
       }
     },
-    "node_modules/glob": {
-      "version": "10.3.12",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.3.12.tgz",
-      "integrity": "sha512-TCNv8vJ+xz4QiqTpfOJA7HvYv+tNIRHKfUWw/q+v2jdgN4ebz+KY9tGx5J4rHP0o84mNP+ApH66HRX8us3Khqg==",
-      "dependencies": {
-        "foreground-child": "^3.1.0",
-        "jackspeak": "^2.3.6",
-        "minimatch": "^9.0.1",
-        "minipass": "^7.0.4",
-        "path-scurry": "^1.10.2"
-      },
-      "bin": {
-        "glob": "dist/esm/bin.mjs"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/graceful-fs": {
       "version": "4.2.10",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz",
@@ -574,8 +401,7 @@
           "type": "consulting",
           "url": "https://feross.org/support"
         }
-      ],
-      "license": "BSD-3-Clause"
+      ]
     },
     "node_modules/inherits": {
       "version": "2.0.4",
@@ -590,28 +416,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/isexe": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
-      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="
-    },
-    "node_modules/jackspeak": {
-      "version": "2.3.6",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.3.6.tgz",
-      "integrity": "sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==",
-      "dependencies": {
-        "@isaacs/cliui": "^8.0.2"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      },
-      "optionalDependencies": {
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
     "node_modules/jsonfile": {
       "version": "6.1.0",
       "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz",
@@ -633,28 +437,6 @@
       "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
       "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg=="
     },
-    "node_modules/lru-cache": {
-      "version": "10.2.2",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
-      "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ==",
-      "engines": {
-        "node": "14 || >=16.14"
-      }
-    },
-    "node_modules/minimatch": {
-      "version": "9.0.4",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.4.tgz",
-      "integrity": "sha512-KqWh+VchfxcMNRAJjj2tnsSJdNbHsVgnkBhTNrW7AjVo6OvLtxw8zfT9oLw1JSohlFzJ8jCoTgaoXvJ+kHt6fw==",
-      "dependencies": {
-        "brace-expansion": "^2.0.1"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/minipass": {
       "version": "7.1.2",
       "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
@@ -664,36 +446,20 @@
       }
     },
     "node_modules/minizlib": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.0.1.tgz",
-      "integrity": "sha512-umcy022ILvb5/3Djuu8LWeqUa8D68JaBzlttKeMWen48SjabqS3iY5w/vzeMzMUNhLDifyhbOwKDSznB1vvrwg==",
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
+      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
       "dependencies": {
-        "minipass": "^7.0.4",
-        "rimraf": "^5.0.5"
+        "minipass": "^7.1.2"
       },
       "engines": {
         "node": ">= 18"
       }
     },
-    "node_modules/mkdirp": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-3.0.1.tgz",
-      "integrity": "sha512-+NsyUUAZDmo6YVHzL/stxSu3t9YS1iljliy3BSDrXJ/dkn1KYdmtZODGGjLcc9XLgVVpH4KshHB8XmZgMhaBXg==",
-      "bin": {
-        "mkdirp": "dist/cjs/src/bin.js"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/mkdirp-classic": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
-      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
-      "license": "MIT"
+      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A=="
     },
     "node_modules/ms": {
       "version": "2.1.3",
@@ -709,16 +475,15 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "5.1.5",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.5.tgz",
-      "integrity": "sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw==",
+      "version": "5.1.7",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.7.tgz",
+      "integrity": "sha512-ua3NDgISf6jdwezAheMOk4mbE1LXjm1DfMUDMuJf4AqxLFK3ccGpgWizwa5YV7Yz9EpXwEaWoRXSb/BnV0t5dQ==",
       "funding": [
         {
           "type": "github",
           "url": "https://github.com/sponsors/ai"
         }
       ],
-      "license": "MIT",
       "bin": {
         "nanoid": "bin/nanoid.js"
       },
@@ -736,34 +501,10 @@
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
       "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
-      "license": "ISC",
       "dependencies": {
         "wrappy": "1"
       }
     },
-    "node_modules/path-key": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
-      "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/path-scurry": {
-      "version": "1.10.2",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.10.2.tgz",
-      "integrity": "sha512-7xTavNy5RQXnsjANvVvMkEjvloOinkAjv/Z6Ildz9v2RinZ4SBKTWFOVRbaF8p0vpHnyjV/UwNDdKuUv6M5qcA==",
-      "dependencies": {
-        "lru-cache": "^10.2.0",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/protobufjs": {
       "version": "7.4.0",
       "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
@@ -788,10 +529,9 @@
       }
     },
     "node_modules/pump": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz",
-      "integrity": "sha512-tUPXtzlGM8FE3P0ZL6DVs/3P58k9nk8/jZeQCurTJylQA8qFYzHFfhBJkuqyE0FifOsQ0uKWekiZ5g8wtr28cw==",
-      "license": "MIT",
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
+      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
       "dependencies": {
         "end-of-stream": "^1.1.0",
         "once": "^1.3.1"
@@ -818,23 +558,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/rimraf": {
-      "version": "5.0.5",
-      "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-5.0.5.tgz",
-      "integrity": "sha512-CqDakW+hMe/Bz202FPEymy68P+G50RfMQK+Qo5YUqc9SPipvbGjCGKd0RSKEelbsfQuw3g5NZDSrlZZAJurH1A==",
-      "dependencies": {
-        "glob": "^10.3.7"
-      },
-      "bin": {
-        "rimraf": "dist/esm/bin.mjs"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/safe-buffer": {
       "version": "5.2.1",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -860,40 +583,10 @@
       "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
       "license": "MIT"
     },
-    "node_modules/shebang-command": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
-      "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
-      "dependencies": {
-        "shebang-regex": "^3.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/shebang-regex": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
-      "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/signal-exit": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
-      "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/slugify": {
-      "version": "1.6.6",
-      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.6.tgz",
-      "integrity": "sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw==",
+      "version": "1.6.8",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.8.tgz",
+      "integrity": "sha512-HVk9X1E0gz3mSpoi60h/saazLKXKaZThMLU3u/aNwoYn8/xQyX2MGxL0ui2eaokkD7tF+Zo+cKTHUbe1mmmGzA==",
       "engines": {
         "node": ">=8.0.0"
       }
@@ -942,20 +635,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/string-width-cjs": {
-      "name": "string-width",
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/strip-ansi": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
@@ -967,28 +646,15 @@
         "node": ">=8"
       }
     },
-    "node_modules/strip-ansi-cjs": {
-      "name": "strip-ansi",
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/tar": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
-      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
+      "version": "7.5.11",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
+      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
         "minipass": "^7.1.2",
-        "minizlib": "^3.0.1",
-        "mkdirp": "^3.0.1",
+        "minizlib": "^3.1.0",
         "yallist": "^5.0.0"
       },
       "engines": {
@@ -996,10 +662,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
-      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
-      "license": "MIT",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "dependencies": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
@@ -1011,7 +676,6 @@
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
       "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
-      "license": "MIT",
       "dependencies": {
         "bl": "^4.0.3",
         "end-of-stream": "^1.4.1",
@@ -1067,20 +731,6 @@
         "uuid": "dist/bin/uuid"
       }
     },
-    "node_modules/which": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
-      "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
-      "dependencies": {
-        "isexe": "^2.0.0"
-      },
-      "bin": {
-        "node-which": "bin/node-which"
-      },
-      "engines": {
-        "node": ">= 8"
-      }
-    },
     "node_modules/wrap-ansi": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
@@ -1097,28 +747,10 @@
         "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
-    "node_modules/wrap-ansi-cjs": {
-      "name": "wrap-ansi",
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
-      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
     "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
-      "license": "ISC"
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
     },
     "node_modules/y18n": {
       "version": "5.0.8",
@@ -1188,64 +820,6 @@
         "yargs": "^17.7.2"
       }
     },
-    "@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
-      "requires": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
-      },
-      "dependencies": {
-        "ansi-regex": {
-          "version": "6.0.1",
-          "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.0.1.tgz",
-          "integrity": "sha512-n5M855fKb2SsfMIiFFoVrABHJC8QtHwVx+mHWP3QcEqBHYienj5dHSgjbxtC0WEZXYt4wcD6zrQElDPhFuZgfA=="
-        },
-        "ansi-styles": {
-          "version": "6.2.1",
-          "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
-          "integrity": "sha512-bN798gFfQX+viw3R7yrGWRqnrN2oRkEkUjjl4JNn4E8GxxbjtG3FbrEIIY3l8/hrwUwIeCZvi4QuOTP4MErVug=="
-        },
-        "emoji-regex": {
-          "version": "9.2.2",
-          "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
-          "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg=="
-        },
-        "string-width": {
-          "version": "5.1.2",
-          "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-          "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
-          "requires": {
-            "eastasianwidth": "^0.2.0",
-            "emoji-regex": "^9.2.2",
-            "strip-ansi": "^7.0.1"
-          }
-        },
-        "strip-ansi": {
-          "version": "7.1.0",
-          "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
-          "integrity": "sha512-iq6eVVI64nQQTRYq2KtEg2d2uU7LElhTJwsH4YzIHZshxlgZms/wIc4VoDQTlG/IvVIrBKG06CrZnp0qv7hkcQ==",
-          "requires": {
-            "ansi-regex": "^6.0.1"
-          }
-        },
-        "wrap-ansi": {
-          "version": "8.1.0",
-          "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-          "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
-          "requires": {
-            "ansi-styles": "^6.1.0",
-            "string-width": "^5.0.1",
-            "strip-ansi": "^7.0.1"
-          }
-        }
-      }
-    },
     "@isaacs/fs-minipass": {
       "version": "4.0.1",
       "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
@@ -1259,12 +833,6 @@
       "resolved": "https://registry.npmjs.org/@js-sdsl/ordered-map/-/ordered-map-4.4.2.tgz",
       "integrity": "sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw=="
     },
-    "@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
-      "optional": true
-    },
     "@protobufjs/aspromise": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/@protobufjs/aspromise/-/aspromise-1.1.2.tgz",
@@ -1348,11 +916,6 @@
         "safer-buffer": "~2.1.0"
       }
     },
-    "balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw=="
-    },
     "base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -1376,14 +939,6 @@
         "readable-stream": "^3.4.0"
       }
     },
-    "brace-expansion": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
-      "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==",
-      "requires": {
-        "balanced-match": "^1.0.0"
-      }
-    },
     "buffer": {
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
@@ -1437,16 +992,6 @@
         "nan": "^2.19.0"
       }
     },
-    "cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
-      "requires": {
-        "path-key": "^3.1.0",
-        "shebang-command": "^2.0.0",
-        "which": "^2.0.1"
-      }
-    },
     "debug": {
       "version": "4.4.0",
       "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
@@ -1467,33 +1012,28 @@
       }
     },
     "dockerode": {
-      "version": "4.0.6",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.6.tgz",
-      "integrity": "sha512-FbVf3Z8fY/kALB9s+P9epCpWhfi/r0N2DgYYcYpsAUlaTxPjdsitsFobnltb+lyCgAIvf9C+4PSWlTnHlJMf1w==",
+      "version": "4.0.9",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.9.tgz",
+      "integrity": "sha512-iND4mcOWhPaCNh54WmK/KoSb35AFqPAUWFMffTQcp52uQt36b5uNwEJTSXntJZBbeGad72Crbi/hvDIv6us/6Q==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
         "docker-modem": "^5.0.6",
         "protobufjs": "^7.3.2",
-        "tar-fs": "~2.1.2",
+        "tar-fs": "^2.1.4",
         "uuid": "^10.0.0"
       }
     },
-    "eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA=="
-    },
     "emoji-regex": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A=="
     },
     "end-of-stream": {
-      "version": "1.4.4",
-      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz",
-      "integrity": "sha512-+uw1inIHVPQoaVuHzRyXd21icM+cnt4CzD5rW+NC1wjOUSTOs+Te7FOv7AhN7vS9x/oIyhLP5PR1H+phQAHu5Q==",
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
       "requires": {
         "once": "^1.4.0"
       }
@@ -1503,24 +1043,15 @@
       "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz",
       "integrity": "sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw=="
     },
-    "foreground-child": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.1.1.tgz",
-      "integrity": "sha512-TMKDUnIte6bfb5nWv7V/caI169OHgvwjb7V4WkeUvbQQdjr5rWKqHFiKWb/fcOwB+CzBT+qbWjvj+DVwRskpIg==",
-      "requires": {
-        "cross-spawn": "^7.0.0",
-        "signal-exit": "^4.0.1"
-      }
-    },
     "fs-constants": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
       "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="
     },
     "fs-extra": {
-      "version": "11.3.0",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.0.tgz",
-      "integrity": "sha512-Z4XaCL6dUDHfP/jT25jJKMmtxvuwbkrD1vNSMFlo9lNLY2c5FHYSQgHPRZUjAB26TpDEoW9HCOgplrdbaPV/ew==",
+      "version": "11.3.4",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-11.3.4.tgz",
+      "integrity": "sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA==",
       "requires": {
         "graceful-fs": "^4.2.0",
         "jsonfile": "^6.0.1",
@@ -1532,18 +1063,6 @@
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
       "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg=="
     },
-    "glob": {
-      "version": "10.3.12",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.3.12.tgz",
-      "integrity": "sha512-TCNv8vJ+xz4QiqTpfOJA7HvYv+tNIRHKfUWw/q+v2jdgN4ebz+KY9tGx5J4rHP0o84mNP+ApH66HRX8us3Khqg==",
-      "requires": {
-        "foreground-child": "^3.1.0",
-        "jackspeak": "^2.3.6",
-        "minimatch": "^9.0.1",
-        "minipass": "^7.0.4",
-        "path-scurry": "^1.10.2"
-      }
-    },
     "graceful-fs": {
       "version": "4.2.10",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz",
@@ -1564,20 +1083,6 @@
       "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
       "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg=="
     },
-    "isexe": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
-      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="
-    },
-    "jackspeak": {
-      "version": "2.3.6",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-2.3.6.tgz",
-      "integrity": "sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==",
-      "requires": {
-        "@isaacs/cliui": "^8.0.2",
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
     "jsonfile": {
       "version": "6.1.0",
       "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz",
@@ -1597,38 +1102,19 @@
       "resolved": "https://registry.npmjs.org/long/-/long-5.2.4.tgz",
       "integrity": "sha512-qtzLbJE8hq7VabR3mISmVGtoXP8KGc2Z/AT8OuqlYD7JTR3oqrgwdjnk07wpj1twXxYmgDXgoKVWUG/fReSzHg=="
     },
-    "lru-cache": {
-      "version": "10.2.2",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.2.2.tgz",
-      "integrity": "sha512-9hp3Vp2/hFQUiIwKo8XCeFVnrg8Pk3TYNPIR7tJADKi5YfcF7vEaK7avFHTlSy3kOKYaJQaalfEo6YuXdceBOQ=="
-    },
-    "minimatch": {
-      "version": "9.0.4",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.4.tgz",
-      "integrity": "sha512-KqWh+VchfxcMNRAJjj2tnsSJdNbHsVgnkBhTNrW7AjVo6OvLtxw8zfT9oLw1JSohlFzJ8jCoTgaoXvJ+kHt6fw==",
-      "requires": {
-        "brace-expansion": "^2.0.1"
-      }
-    },
     "minipass": {
       "version": "7.1.2",
       "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
       "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw=="
     },
     "minizlib": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.0.1.tgz",
-      "integrity": "sha512-umcy022ILvb5/3Djuu8LWeqUa8D68JaBzlttKeMWen48SjabqS3iY5w/vzeMzMUNhLDifyhbOwKDSznB1vvrwg==",
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
+      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
       "requires": {
-        "minipass": "^7.0.4",
-        "rimraf": "^5.0.5"
+        "minipass": "^7.1.2"
       }
     },
-    "mkdirp": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-3.0.1.tgz",
-      "integrity": "sha512-+NsyUUAZDmo6YVHzL/stxSu3t9YS1iljliy3BSDrXJ/dkn1KYdmtZODGGjLcc9XLgVVpH4KshHB8XmZgMhaBXg=="
-    },
     "mkdirp-classic": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
@@ -1646,9 +1132,9 @@
       "optional": true
     },
     "nanoid": {
-      "version": "5.1.5",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.5.tgz",
-      "integrity": "sha512-Ir/+ZpE9fDsNH0hQ3C68uyThDXzYcim2EqcZ8zn8Chtt1iylPT9xXJB0kPCnqzgcEGikO9RxSrh63MsmVCU7Fw=="
+      "version": "5.1.7",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.7.tgz",
+      "integrity": "sha512-ua3NDgISf6jdwezAheMOk4mbE1LXjm1DfMUDMuJf4AqxLFK3ccGpgWizwa5YV7Yz9EpXwEaWoRXSb/BnV0t5dQ=="
     },
     "nanoid-dictionary": {
       "version": "5.0.0",
@@ -1663,20 +1149,6 @@
         "wrappy": "1"
       }
     },
-    "path-key": {
-      "version": "3.1.1",
-      "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
-      "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q=="
-    },
-    "path-scurry": {
-      "version": "1.10.2",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.10.2.tgz",
-      "integrity": "sha512-7xTavNy5RQXnsjANvVvMkEjvloOinkAjv/Z6Ildz9v2RinZ4SBKTWFOVRbaF8p0vpHnyjV/UwNDdKuUv6M5qcA==",
-      "requires": {
-        "lru-cache": "^10.2.0",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
-      }
-    },
     "protobufjs": {
       "version": "7.4.0",
       "resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.4.0.tgz",
@@ -1697,9 +1169,9 @@
       }
     },
     "pump": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz",
-      "integrity": "sha512-tUPXtzlGM8FE3P0ZL6DVs/3P58k9nk8/jZeQCurTJylQA8qFYzHFfhBJkuqyE0FifOsQ0uKWekiZ5g8wtr28cw==",
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
+      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
       "requires": {
         "end-of-stream": "^1.1.0",
         "once": "^1.3.1"
@@ -1720,14 +1192,6 @@
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
       "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q=="
     },
-    "rimraf": {
-      "version": "5.0.5",
-      "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-5.0.5.tgz",
-      "integrity": "sha512-CqDakW+hMe/Bz202FPEymy68P+G50RfMQK+Qo5YUqc9SPipvbGjCGKd0RSKEelbsfQuw3g5NZDSrlZZAJurH1A==",
-      "requires": {
-        "glob": "^10.3.7"
-      }
-    },
     "safe-buffer": {
       "version": "5.2.1",
       "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
@@ -1738,28 +1202,10 @@
       "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
       "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
     },
-    "shebang-command": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
-      "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
-      "requires": {
-        "shebang-regex": "^3.0.0"
-      }
-    },
-    "shebang-regex": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
-      "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A=="
-    },
-    "signal-exit": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
-      "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw=="
-    },
     "slugify": {
-      "version": "1.6.6",
-      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.6.tgz",
-      "integrity": "sha512-h+z7HKHYXj6wJU+AnS/+IH8Uh9fdcX1Lrhg1/VMdf9PwoBQXFcXiAdsy2tSK0P6gKwJLXp02r90ahUCqHk9rrw=="
+      "version": "1.6.8",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.8.tgz",
+      "integrity": "sha512-HVk9X1E0gz3mSpoi60h/saazLKXKaZThMLU3u/aNwoYn8/xQyX2MGxL0ui2eaokkD7tF+Zo+cKTHUbe1mmmGzA=="
     },
     "split-ca": {
       "version": "1.0.1",
@@ -1795,16 +1241,6 @@
         "strip-ansi": "^6.0.1"
       }
     },
-    "string-width-cjs": {
-      "version": "npm:string-width@4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "requires": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      }
-    },
     "strip-ansi": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
@@ -1813,24 +1249,15 @@
         "ansi-regex": "^5.0.1"
       }
     },
-    "strip-ansi-cjs": {
-      "version": "npm:strip-ansi@6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "requires": {
-        "ansi-regex": "^5.0.1"
-      }
-    },
     "tar": {
-      "version": "7.4.3",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.4.3.tgz",
-      "integrity": "sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==",
+      "version": "7.5.11",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
+      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
       "requires": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
         "minipass": "^7.1.2",
-        "minizlib": "^3.0.1",
-        "mkdirp": "^3.0.1",
+        "minizlib": "^3.1.0",
         "yallist": "^5.0.0"
       },
       "dependencies": {
@@ -1842,9 +1269,9 @@
       }
     },
     "tar-fs": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.2.tgz",
-      "integrity": "sha512-EsaAXwxmx8UB7FRKqeozqEPop69DXcmYwTQwXvyAPF352HJsPdkVhvTaDPYqfNgruveJIJy3TA2l+2zj8LJIJA==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "requires": {
         "chownr": "^1.1.1",
         "mkdirp-classic": "^0.5.2",
@@ -1889,14 +1316,6 @@
       "resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz",
       "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ=="
     },
-    "which": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
-      "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
-      "requires": {
-        "isexe": "^2.0.0"
-      }
-    },
     "wrap-ansi": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
@@ -1907,16 +1326,6 @@
         "strip-ansi": "^6.0.0"
       }
     },
-    "wrap-ansi-cjs": {
-      "version": "npm:wrap-ansi@7.0.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
-      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
-      "requires": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      }
-    },
     "wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 09716c3094..1c95a4540c 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -2,12 +2,12 @@
   "name": "deploy-to-container",
   "type": "module",
   "dependencies": {
-    "dockerode": "^4.0.6",
-    "fs-extra": "^11.3.0",
-    "nanoid": "5.1.5",
+    "dockerode": "^4.0.9",
+    "fs-extra": "^11.3.4",
+    "nanoid": "5.1.7",
     "nanoid-dictionary": "5.0.0",
-    "slugify": "1.6.6",
-    "tar": "^7.4.3",
+    "slugify": "1.6.8",
+    "tar": "^7.5.11",
     "yargs": "^17.7.2"
   },
   "engines": {

From dcce2df0300879078690a2fbd3522602d467cf38 Mon Sep 17 00:00:00 2001
From: Lars Eggert <lars@eggert.org>
Date: Fri, 20 Mar 2026 12:03:18 +0900
Subject: [PATCH 578/707] feat: add attendance summary and pie chart to meeting
 attendees page (#10481)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat: add attendance summary and pie chart to meeting attendees page

For IETF meetings ≥ 118, the attendees proceedings page now shows an
Onsite / Remote / Total summary row matching the counts displayed on
registration.ietf.org, together with a "View chart" button that opens
a Bootstrap modal containing a Highcharts pie chart.

* Split out attendees-chart.js
---
 ietf/meeting/tests_views.py                   | 13 +++++
 ietf/meeting/views.py                         | 33 +++++++++--
 ietf/static/js/attendees-chart.js             | 58 +++++++++++++++++++
 .../meeting/proceedings_attendees.html        | 53 ++++++++++++++++-
 package.json                                  |  1 +
 5 files changed, 151 insertions(+), 7 deletions(-)
 create mode 100644 ietf/static/js/attendees-chart.js

diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 168999d0aa..258ffe554c 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -9007,6 +9007,8 @@ def test_proceedings_attendees(self):
            - assert onsite checkedin=True appears, not onsite checkedin=False
            - assert remote attended appears, not remote not attended
            - prefer onsite checkedin=True to remote attended when same person has both
+           - summary stats row shows correct counts
+           - chart data JSON is embedded with correct values
         """
 
         m = MeetingFactory(type_id='ietf', date=datetime.date(2023, 11, 4), number="118")
@@ -9028,6 +9030,17 @@ def test_proceedings_attendees(self):
         text = q('#id_attendees tbody tr').text().replace('\n', ' ')
         self.assertEqual(text, f"A Person {areg.affiliation} {areg.country_code} onsite C Person {creg.affiliation} {creg.country_code} remote")
 
+        # Summary stats row: Onsite / Remote / Total (matches registration.ietf.org)
+        self.assertContains(response, 'Onsite:')
+        self.assertContains(response, 'Remote:')
+        self.assertContains(response, 'Total:')
+        self.assertContains(response, '<strong>1</strong>')   # onsite and remote
+        self.assertContains(response, '<strong>2</strong>')   # total
+
+        # Chart data embedded in page
+        chart_json = json.loads(q('#attendees-chart-data').text())
+        self.assertEqual(chart_json['type'], [['Onsite', 1], ['Remote', 1]])
+
     def test_proceedings_overview(self):
         '''Test proceedings IETF Overview page.
         Note: old meetings aren't supported so need to add a new meeting then test.
diff --git a/ietf/meeting/views.py b/ietf/meeting/views.py
index 731dfad88f..67a81305b4 100644
--- a/ietf/meeting/views.py
+++ b/ietf/meeting/views.py
@@ -109,7 +109,7 @@
 from ietf.meeting.utils import get_activity_stats, post_process, create_recording, delete_recording
 from ietf.meeting.utils import participants_for_meeting, generate_bluesheet, bluesheet_data, save_bluesheet
 from ietf.message.utils import infer_message
-from ietf.name.models import SlideSubmissionStatusName, ProceedingsMaterialTypeName, SessionPurposeName
+from ietf.name.models import SlideSubmissionStatusName, ProceedingsMaterialTypeName, SessionPurposeName, CountryName
 from ietf.utils import markdown
 from ietf.utils.decorators import require_api_key
 from ietf.utils.hedgedoc import Note, NoteError
@@ -4812,15 +4812,36 @@ def proceedings_attendees(request, num=None):
     template = None
     registrations = None
 
+    stats = None
+    chart_data = None
+
     if int(meeting.number) >= 118:
         checked_in, attended = participants_for_meeting(meeting)
         regs = list(Registration.objects.onsite().filter(meeting__number=num, checkedin=True))
-
-        for reg in Registration.objects.remote().filter(meeting__number=num).select_related('person'):
-            if reg.person.pk in attended and reg.person.pk not in checked_in:
-                regs.append(reg)
+        onsite_count = len(regs)
+        regs += [
+            reg
+            for reg in Registration.objects.remote().filter(meeting__number=num).select_related('person')
+            if reg.person.pk in attended and reg.person.pk not in checked_in
+        ]
+        remote_count = len(regs) - onsite_count
 
         registrations = sorted(regs, key=lambda x: (x.last_name, x.first_name))
+
+        country_codes = [r.country_code for r in registrations if r.country_code]
+        stats = {
+            'total': onsite_count + remote_count,
+            'onsite': onsite_count,
+            'remote': remote_count,
+        }
+
+        code_to_name = dict(CountryName.objects.values_list('slug', 'name'))
+        country_counts = Counter(code_to_name.get(c, c) for c in country_codes).most_common()
+
+        chart_data = {
+            'type': [['Onsite', onsite_count], ['Remote', remote_count]],
+            'countries': country_counts,
+        }
     else:
         overview_template = "/meeting/proceedings/%s/attendees.html" % meeting.number
         try:
@@ -4832,6 +4853,8 @@ def proceedings_attendees(request, num=None):
         'meeting': meeting,
         'registrations': registrations,
         'template': template,
+        'stats': stats,
+        'chart_data': chart_data,
     })
 
 def proceedings_overview(request, num=None):
diff --git a/ietf/static/js/attendees-chart.js b/ietf/static/js/attendees-chart.js
new file mode 100644
index 0000000000..fed3b1289c
--- /dev/null
+++ b/ietf/static/js/attendees-chart.js
@@ -0,0 +1,58 @@
+(function () {
+    var raw = document.getElementById('attendees-chart-data');
+    if (!raw) return;
+    var chartData = JSON.parse(raw.textContent);
+    var chart = null;
+    var currentBreakdown = 'type';
+
+    // Override the global transparent background set by highcharts.js so the
+    // export menu and fullscreen view use the page background color.
+    var container = document.getElementById('attendees-pie-chart');
+    var bodyBg = getComputedStyle(document.body).backgroundColor;
+    container.style.setProperty('--highcharts-background-color', bodyBg);
+
+    function renderChart(breakdown) {
+        var seriesData = chartData[breakdown].map(function (item) {
+            return { name: item[0], y: item[1] };
+        });
+        if (chart) chart.destroy();
+        chart = Highcharts.chart(container, {
+            chart: { type: 'pie', height: 400 },
+            title: { text: null },
+            tooltip: { pointFormat: '{point.name}: <b>{point.y}</b> ({point.percentage:.1f}%)' },
+            plotOptions: {
+                pie: {
+                    dataLabels: {
+                        enabled: true,
+                        format: '<b>{point.name}</b><br>{point.y} ({point.percentage:.1f}%)',
+                    },
+                    showInLegend: false,
+                }
+            },
+            series: [{ name: 'Attendees', data: seriesData }],
+        });
+    }
+
+    var modal = document.getElementById('attendees-chart-modal');
+
+    // Render (or re-render) the chart each time the modal becomes fully visible,
+    // so Highcharts can measure the container dimensions correctly.
+    modal.addEventListener('shown.bs.modal', function () {
+        renderChart(currentBreakdown);
+    });
+
+    // Release the chart when the modal closes to avoid stale renders.
+    modal.addEventListener('hidden.bs.modal', function () {
+        if (chart) {
+            chart.destroy();
+            chart = null;
+        }
+    });
+
+    document.querySelectorAll('[name="attendees-breakdown"]').forEach(function (radio) {
+        radio.addEventListener('change', function () {
+            currentBreakdown = this.value;
+            renderChart(currentBreakdown);
+        });
+    });
+})();
diff --git a/ietf/templates/meeting/proceedings_attendees.html b/ietf/templates/meeting/proceedings_attendees.html
index 390ce00cad..0c59d4ab15 100644
--- a/ietf/templates/meeting/proceedings_attendees.html
+++ b/ietf/templates/meeting/proceedings_attendees.html
@@ -3,6 +3,7 @@
 {% load origin markup_tags static %}
 {% block pagehead %}
     <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
+    {% if chart_data %}<link rel="stylesheet" href="{% static "ietf/css/highcharts.css" %}">{% endif %}
 {% endblock %}
 {% block title %}IETF {{ meeting.number }} proceedings{% endblock %}
 {% block content %}
@@ -14,8 +15,52 @@ <h1>
         </a>
     </h1>
     <h2>Attendee list of IETF {{ meeting.number }} meeting</h2>
-    
+
+    {% if chart_data %}
+    <div class="d-flex align-items-center gap-4 mb-3 flex-wrap">
+        <div class="d-flex gap-4">
+            <div>Onsite: <strong>{{ stats.onsite }}</strong></div>
+            <div>Remote: <strong>{{ stats.remote }}</strong></div>
+            <div>Total: <strong>{{ stats.total }}</strong></div>
+        </div>
+        <button type="button" class="btn btn-primary btn-sm"
+                data-bs-toggle="modal" data-bs-target="#attendees-chart-modal">
+            <i class="bi bi-pie-chart-fill"></i> View chart
+        </button>
+    </div>
+
+    <div class="modal fade" id="attendees-chart-modal" tabindex="-1"
+         aria-labelledby="attendees-chart-modal-label" aria-hidden="true">
+        <div class="modal-dialog modal-lg">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h2 class="modal-title fs-5" id="attendees-chart-modal-label">
+                        IETF {{ meeting.number }} attendees
+                    </h2>
+                    <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
+                </div>
+                <div class="modal-body">
+                    <div class="btn-group mb-3" role="group" aria-label="Chart breakdown">
+                        <input type="radio" class="btn-check" name="attendees-breakdown"
+                               id="breakdown-type" value="type" checked>
+                        <label class="btn btn-outline-secondary btn-sm" for="breakdown-type">Onsite/Remote</label>
+                        <input type="radio" class="btn-check" name="attendees-breakdown"
+                               id="breakdown-countries" value="countries">
+                        <label class="btn btn-outline-secondary btn-sm" for="breakdown-countries">Countries</label>
+                    </div>
+                    <div id="attendees-pie-chart" class="bg-body"></div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+    {{ chart_data|json_script:"attendees-chart-data" }}
+    {% endif %}{# chart_data #}
+
     {% if template %}
+    <div class="alert alert-info" role="alert">
+        Attendee statistics are not available for this meeting.
+    </div>
       {{template|safe}}
     {% else %}
         <table id="id_attendees" class="table table-sm table-striped tablesorter">
@@ -44,4 +89,8 @@ <h2>Attendee list of IETF {{ meeting.number }} meeting</h2>
 {% endblock %}
 {% block js %}
     <script src="{% static "ietf/js/list.js" %}"></script>
-{% endblock %}
\ No newline at end of file
+    {% if chart_data %}
+    <script src="{% static "ietf/js/highcharts.js" %}"></script>
+    <script src="{% static "ietf/js/attendees-chart.js" %}"></script>
+    {% endif %}
+{% endblock %}
diff --git a/package.json b/package.json
index fec29275b4..bb71250c4b 100644
--- a/package.json
+++ b/package.json
@@ -112,6 +112,7 @@
         "ietf/static/images/irtf-logo-white.svg",
         "ietf/static/images/irtf-logo.svg",
         "ietf/static/js/add_session_recordings.js",
+        "ietf/static/js/attendees-chart.js",
         "ietf/static/js/agenda_filter.js",
         "ietf/static/js/agenda_materials.js",
         "ietf/static/js/announcement.js",

From 2c29cbaad91a7c076643167e1ffc056975b2c97e Mon Sep 17 00:00:00 2001
From: Tianyi Gao <tianyi.gao@ed.ac.uk>
Date: Fri, 20 Mar 2026 11:45:09 +0800
Subject: [PATCH 579/707] feat: add parent section in team about (#9148)
 (#10551)

fix: remove empty <tr> for area/parent on all groups
---
 ietf/group/tests_info.py              | 19 +++++++++++++++++++
 ietf/templates/group/group_about.html | 11 +++++++----
 2 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 34f8500854..3f24e2e3d6 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -543,6 +543,25 @@ def verify_can_edit_group(url, group, username):
                 for username in list(set(interesting_users)-set(can_edit[group.type_id])):
                     verify_cannot_edit_group(url, group, username)
 
+    def test_group_about_team_parent(self):
+        """Team about page should show parent when parent is not an area"""
+        GroupFactory(type_id='team', parent=GroupFactory(type_id='area', acronym='gen'))
+        GroupFactory(type_id='team', parent=GroupFactory(type_id='ietf', acronym='iab'))
+        GroupFactory(type_id='team', parent=None)
+
+        for team in Group.objects.filter(type='team').select_related('parent'):
+            url = urlreverse('ietf.group.views.group_about', kwargs=dict(acronym=team.acronym))
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            if team.parent and team.parent.type_id != 'area':
+                self.assertContains(r, 'Parent')
+                self.assertContains(r, team.parent.acronym)
+            elif team.parent and team.parent.type_id == 'area':
+                self.assertContains(r, team.parent.name)
+                self.assertNotContains(r, '>Parent<')
+            else:
+                self.assertNotContains(r, '>Parent<')
+
     def test_group_about_personnel(self):
         """Correct personnel should appear on the group About page"""
         group = GroupFactory()
diff --git a/ietf/templates/group/group_about.html b/ietf/templates/group/group_about.html
index cbc2e11536..6d1843383c 100644
--- a/ietf/templates/group/group_about.html
+++ b/ietf/templates/group/group_about.html
@@ -51,10 +51,13 @@
                         {{ group.parent.name }}
                         <a href="{% url "ietf.group.views.group_home" acronym=group.parent.acronym %}">({{ group.parent.acronym }})</a>
                     </td>
-                {% else %}
-                    <td></td>
+                {% elif group.parent and group.type_id == "team" %}
+                    <th scope="row">Parent</th>
                     <td class="edit"></td>
-                    <td></td>
+                    <td>
+                        {{ group.parent.name }}
+                        <a href="{% url "ietf.group.views.group_home" acronym=group.parent.acronym %}">({{ group.parent.acronym }})</a>
+                    </td>
                 {% endif %}
             </tr>
             <tr>
@@ -444,4 +447,4 @@ <h2 class="mt-4">
             group_stats("{% url 'ietf.group.views.group_stats_data' %}", ".chart");
         });
     </script>
-{% endblock %}
\ No newline at end of file
+{% endblock %}

From abab6373f5f465bdcc052f45c5def0710f360dc7 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 19 Mar 2026 23:02:40 -0500
Subject: [PATCH 580/707] fix: reduce db churn and log noise for rebuilding
 references (#10563)

* fix: (wip) reduce db churn and log noise for rebuilding references

* fix: typo in log message

* fix: typo in log message

Co-authored-by: Jennifer Richards <jeni@borkbork.org>

---------

Co-authored-by: Jennifer Richards <jeni@borkbork.org>
---
 ietf/doc/utils.py    | 78 ++++++++++++++++++++++++++++++--------------
 ietf/submit/utils.py |  5 +--
 2 files changed, 54 insertions(+), 29 deletions(-)

diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 396b3fcfa4..8cbe5e8f3e 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -4,6 +4,7 @@
 
 import datetime
 import io
+import json
 import math
 import os
 import re
@@ -954,58 +955,78 @@ def rebuild_reference_relations(doc, filenames):
     filenames should be a dict mapping file ext (i.e., type) to the full path of each file.
     """
     if doc.type.slug not in ["draft", "rfc"]:
+        log.log(f"rebuild_reference_relations called for non draft/rfc doc {doc.name}")
         return None
-    
-    log.log(f"Rebuilding reference relations for {doc.name}")
 
-    # try XML first
-    if "xml" in filenames:
-        refs = XMLDraft(filenames["xml"]).get_refs()
-    elif "txt" in filenames:
-        filename = filenames["txt"]
-        try:
-            refs = draft.PlaintextDraft.from_file(filename).get_refs()
-        except IOError as e:
-            return {"errors": [f"{e.strerror}: {filename}"]}
-    else:
+
+    if "xml" not in filenames and "txt" not in filenames:
+        log.log(f"rebuild_reference_relations error: no file available for {doc.name}")
         return {
             "errors": [
                 "No file available for rebuilding reference relations. Need XML or plaintext."
             ]
         }
-
-    doc.relateddocument_set.filter(
+    else:
+        try:
+            # try XML first
+            if "xml" in filenames:
+                refs = XMLDraft(filenames["xml"]).get_refs()
+            elif "txt" in filenames:
+                filename = filenames["txt"]
+                refs = draft.PlaintextDraft.from_file(filename).get_refs()
+        except (IOError, UnicodeDecodeError) as e:
+                log.log(f"rebuild_reference_relations error: On {doc.name}: {e}")
+                return {"errors": [f"{e}: {filename}"]}
+
+    before = set(doc.relateddocument_set.filter(
         relationship__slug__in=["refnorm", "refinfo", "refold", "refunk"]
-    ).delete()
+    ).values_list("relationship__slug","target__name"))
 
     warnings = []
     errors = []
     unfound = set()
+    intended = set()
+    names = [ref for ref in refs]
+    names.extend([ref[:-3] for ref in refs if re.match(r"^draft-.*-\d{2}$", ref)])
+    queryset = Document.objects.filter(name__in=names)
     for ref, refType in refs.items():
-        refdoc = Document.objects.filter(name=ref)
-        if not refdoc and re.match(r"^draft-.*-\d{2}$", ref):
-            refdoc = Document.objects.filter(name=ref[:-3])
+        refdoc = queryset.filter(name=ref)
+        if not refdoc.exists() and re.match(r"^draft-.*-\d{2}$", ref):
+            refdoc = queryset.filter(name=ref[:-3])
         count = refdoc.count()
         if count == 0:
             unfound.add("%s" % ref)
             continue
         elif count > 1:
+            log.unreachable("2026-3-16") # This branch is holdover from DocAlias
             errors.append("Too many Document objects found for %s" % ref)
         else:
             # Don't add references to ourself
             if doc != refdoc[0]:
-                RelatedDocument.objects.get_or_create(
-                    source=doc,
-                    target=refdoc[0],
-                    relationship=DocRelationshipName.objects.get(
-                        slug="ref%s" % refType
-                    ),
-                )
+                intended.add((f"ref{refType}", refdoc[0].name))
+
     if unfound:
         warnings.append(
             "There were %d references with no matching Document" % len(unfound)
         )
 
+    if intended != before:
+        for slug, name in before-intended:
+            doc.relateddocument_set.filter(target__name=name, relationship_id=slug).delete()
+        for slug, name in intended-before:
+            doc.relateddocument_set.create(
+                target=queryset.get(name=name),
+                relationship_id=slug
+            )
+        after = set(doc.relateddocument_set.filter(
+            relationship__slug__in=["refnorm", "refinfo", "refold", "refunk"]
+        ).values_list("relationship__slug","target__name"))
+        if after != intended:
+            errors.append("Attempted changed didn't achieve intended results")
+        changed_references = True
+    else:
+        changed_references = False
+
     ret = {}
     if errors:
         ret["errors"] = errors
@@ -1014,6 +1035,13 @@ def rebuild_reference_relations(doc, filenames):
     if unfound:
         ret["unfound"] = list(unfound)
 
+    logmsg = f"rebuild_reference_relations for {doc.name}: "
+    logmsg += "changed references" if changed_references else "references unchanged"
+    if ret:
+        logmsg += f" {json.dumps(ret)}"
+
+    log.log(logmsg)
+
     return ret
 
 def set_replaces_for_document(request, doc, new_replaces, by, email_subject, comment=""):
diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 9a7c358a6d..7e3106f723 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -395,10 +395,7 @@ def post_submission(request, submission, approved_doc_desc, approved_subm_desc):
 
     log.log(f"{submission.name}: updated state and info")
 
-    trouble = rebuild_reference_relations(draft, find_submission_filenames(draft))
-    if trouble:
-        log.log('Rebuild_reference_relations trouble: %s'%trouble)
-    log.log(f"{submission.name}: rebuilt reference relations")
+    rebuild_reference_relations(draft, find_submission_filenames(draft))
     
     if draft.stream_id == "ietf" and draft.group.type_id == "wg" and draft.rev == "00":
         # automatically set state "WG Document"

From b08945aaf4618613f668bb5c231533f709bea4d4 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 20 Mar 2026 05:17:10 -0300
Subject: [PATCH 581/707] fix: maintain column count in HTML template (#10593)

---
 ietf/templates/group/group_about.html | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ietf/templates/group/group_about.html b/ietf/templates/group/group_about.html
index 6d1843383c..0a8b9194f2 100644
--- a/ietf/templates/group/group_about.html
+++ b/ietf/templates/group/group_about.html
@@ -58,6 +58,10 @@
                         {{ group.parent.name }}
                         <a href="{% url "ietf.group.views.group_home" acronym=group.parent.acronym %}">({{ group.parent.acronym }})</a>
                     </td>
+                {% else %}
+                    <td></td>
+                    <td class="edit"></td>
+                    <td></td>
                 {% endif %}
             </tr>
             <tr>

From d39317b070a7af5db4f48edaf0e7f03fd0a29680 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Mar 2026 12:33:23 -0300
Subject: [PATCH 582/707] feat: update typesense search index on rfc pub/update
 (#10575)

* chore: typesense API config for k8s

* feat: DocumentInfo.pub_datetime() helper

* chore(deps): install typesense library

* feat: searchindex (typesense) util module

* feat: sanitize abstract

* feat: add (sanitized) content

* style: ruff ruff on doc/tasks.py

* feat: search index update task

* chore: call the update task

* refactor: better settings management

* ci: update prod settings

* chore: typing

* test: searchindex tests

* test: searchindex task test

* style: ruff ruff

* chore: drop type hints to fix mypy errors

* test: fix tests

* test: improve coverage

* fix: handle missing content blob correctly
---
 ietf/api/serializers_rpc.py       |   5 +-
 ietf/api/tests_serializers_rpc.py |  18 +++-
 ietf/api/tests_views_rpc.py       |  44 ++++++---
 ietf/api/views_rpc.py             |   3 +-
 ietf/doc/models.py                |  17 ++--
 ietf/doc/tasks.py                 |  46 +++++++--
 ietf/doc/tests_tasks.py           |  64 ++++++++++--
 ietf/utils/searchindex.py         | 155 ++++++++++++++++++++++++++++++
 ietf/utils/tests_searchindex.py   | 128 ++++++++++++++++++++++++
 k8s/settings_local.py             |  20 ++--
 requirements.txt                  |   1 +
 11 files changed, 451 insertions(+), 50 deletions(-)
 create mode 100644 ietf/utils/searchindex.py
 create mode 100644 ietf/utils/tests_searchindex.py

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index a18dc588c4..701f05eece 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2025, All Rights Reserved
+# Copyright The IETF Trust 2025-2026, All Rights Reserved
 import datetime
 from pathlib import Path
 from typing import Literal, Optional
@@ -20,6 +20,7 @@
     RfcAuthor,
 )
 from ietf.doc.serializers import RfcAuthorSerializer
+from ietf.doc.tasks import update_rfc_searchindex_task
 from ietf.doc.utils import (
     default_consensus,
     prettify_std_name,
@@ -682,6 +683,8 @@ def update(self, instance, validated_data):
                 stale_subseries_relations.delete()
             if len(rfc_events) > 0:
                 rfc.save_with_history(rfc_events)
+
+        update_rfc_searchindex_task.delay(rfc.rfc_number)
         return rfc
 
 
diff --git a/ietf/api/tests_serializers_rpc.py b/ietf/api/tests_serializers_rpc.py
index 1babb4c30f..ed326be451 100644
--- a/ietf/api/tests_serializers_rpc.py
+++ b/ietf/api/tests_serializers_rpc.py
@@ -1,4 +1,6 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
+from unittest import mock
+
 from django.utils import timezone
 
 from ietf.utils.test_utils import TestCase
@@ -32,7 +34,8 @@ def test_create(self):
         with self.assertRaises(RuntimeError, msg="serializer does not allow create()"):
             serializer.save()
 
-    def test_update(self):
+    @mock.patch("ietf.api.serializers_rpc.update_rfc_searchindex_task")
+    def test_update(self, mock_update_searchindex_task):
         rfc = WgRfcFactory(pages=10)
         serializer = EditableRfcSerializer(
             instance=rfc,
@@ -56,6 +59,11 @@ def test_update(self):
         )
         self.assertTrue(serializer.is_valid())
         result = serializer.save()
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
         result.refresh_from_db()
         self.assertEqual(result.title, "Yadda yadda yadda")
         self.assertEqual(
@@ -84,7 +92,8 @@ def test_update(self):
             [Document.objects.get(name="fyi999")],
         )
 
-    def test_partial_update(self):
+    @mock.patch("ietf.api.serializers_rpc.update_rfc_searchindex_task")
+    def test_partial_update(self, mock_update_searchindex_task):
         # We could test other permutations of fields, but authors is a partial update
         # we know we are going to use, so verifying that one in particular.
         rfc = WgRfcFactory(pages=10, abstract="do or do not", title="padawan")
@@ -104,6 +113,11 @@ def test_partial_update(self):
         )
         self.assertTrue(serializer.is_valid())
         result = serializer.save()
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
         result.refresh_from_db()
         self.assertEqual(rfc.title, "padawan")
         self.assertEqual(
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 7ab8778d28..a679e74789 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -196,7 +196,8 @@ def test_notify_rfc_published(self, mock_task_delay):
         self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
-    def test_upload_rfc_files(self):
+    @mock.patch("ietf.api.views_rpc.update_rfc_searchindex_task")
+    def test_upload_rfc_files(self, mock_update_searchindex_task):
         def _valid_post_data():
             """Generate a valid post data dict
 
@@ -217,14 +218,7 @@ def _valid_post_data():
             }
 
         url = urlreverse("ietf.api.purple_api.upload_rfc_files")
-        unused_rfc_number = (
-            Document.objects.filter(rfc_number__isnull=False).aggregate(
-                unused_rfc_number=Max("rfc_number") + 1
-            )["unused_rfc_number"]
-            or 10000
-        )
-
-        rfc = WgRfcFactory(rfc_number=unused_rfc_number)
+        rfc = WgRfcFactory()
         assert isinstance(rfc, Document), "WgRfcFactory should generate a Document"
         with TemporaryDirectory() as rfc_dir:
             settings.RFC_PATH = rfc_dir  # affects overridden settings
@@ -236,15 +230,17 @@ def _valid_post_data():
             # no api key
             r = self.client.post(url, _valid_post_data(), format="multipart")
             self.assertEqual(r.status_code, 403)
+            self.assertFalse(mock_update_searchindex_task.delay.called)
 
             # invalid RFC
             r = self.client.post(
                 url,
-                _valid_post_data() | {"rfc": unused_rfc_number + 1},
+                _valid_post_data() | {"rfc": rfc.rfc_number + 10},
                 format="multipart",
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 400)
+            self.assertFalse(mock_update_searchindex_task.delay.called)
 
             # empty files
             r = self.client.post(
@@ -263,6 +259,7 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 400)
+            self.assertFalse(mock_update_searchindex_task.delay.called)
 
             # bad file type
             r = self.client.post(
@@ -276,9 +273,10 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 400)
+            self.assertFalse(mock_update_searchindex_task.delay.called)
 
             # Put a file in the way. Post should fail because replace = False
-            file_in_the_way = (rfc_path / f"rfc{unused_rfc_number}.txt")
+            file_in_the_way = (rfc_path / f"{rfc.name}.txt")
             file_in_the_way.touch()
             r = self.client.post(
                 url,
@@ -287,11 +285,12 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 409)  # conflict
+            self.assertFalse(mock_update_searchindex_task.delay.called)
             file_in_the_way.unlink()
             
             # Put a blob in the way. Post should fail because replace = False
             blob_in_the_way = Blob.objects.create(
-                bucket="rfc", name=f"txt/rfc{unused_rfc_number}.txt", content=b""
+                bucket="rfc", name=f"txt/{rfc.name}.txt", content=b""
             )
             r = self.client.post(
                 url,
@@ -300,6 +299,7 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 409)  # conflict
+            self.assertFalse(mock_update_searchindex_task.delay.called)
             blob_in_the_way.delete()
 
             # valid post
@@ -310,8 +310,13 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 200)
+            self.assertTrue(mock_update_searchindex_task.delay.called)
+            self.assertEqual(
+                mock_update_searchindex_task.delay.call_args,
+                mock.call(rfc.rfc_number),
+            )
             for extension in ["xml", "txt", "html", "pdf", "json"]:
-                filename = f"rfc{unused_rfc_number}.{extension}"
+                filename = f"{rfc.name}.{extension}"
                 self.assertEqual(
                     (rfc_path / filename)
                     .read_text(),
@@ -328,7 +333,7 @@ def _valid_post_data():
                     f"{extension} blob should contain the expected content",
                 )
             # special case for notprepped
-            notprepped_fn = f"rfc{unused_rfc_number}.notprepped.xml"
+            notprepped_fn = f"{rfc.name}.notprepped.xml"
             self.assertEqual(
                 (
                     rfc_path / "prerelease" / notprepped_fn
@@ -347,6 +352,7 @@ def _valid_post_data():
             )
 
             # re-post with replace = False should now fail
+            mock_update_searchindex_task.reset_mock()
             r = self.client.post(
                 url,
                 _valid_post_data(),
@@ -354,7 +360,8 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 409)  # conflict
-            
+            self.assertFalse(mock_update_searchindex_task.delay.called)
+
             # re-post with replace = True should succeed
             r = self.client.post(
                 url,
@@ -362,7 +369,12 @@ def _valid_post_data():
                 format="multipart",
                 headers={"X-Api-Key": "valid-token"},
             )
-            self.assertEqual(r.status_code, 200)  # conflict
+            self.assertEqual(r.status_code, 200)
+            self.assertTrue(mock_update_searchindex_task.delay.called)
+            self.assertEqual(
+                mock_update_searchindex_task.delay.call_args,
+                mock.call(rfc.rfc_number),
+            )
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
     @mock.patch("ietf.api.views_rpc.create_rfc_index_task")
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index c7ae699005..cb6a59a167 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -38,7 +38,7 @@
 from ietf.doc.models import Document, DocHistory, RfcAuthor, DocEvent
 from ietf.doc.serializers import RfcAuthorSerializer
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
-from ietf.doc.tasks import signal_update_rfc_metadata_task
+from ietf.doc.tasks import signal_update_rfc_metadata_task, update_rfc_searchindex_task
 from ietf.person.models import Email, Person
 from ietf.sync.tasks import create_rfc_index_task
 
@@ -516,6 +516,7 @@ def post(self, request):
                     destination.parent.mkdir()
                 shutil.move(ftm, destination)
 
+        update_rfc_searchindex_task.delay(rfc.rfc_number)
         return Response(NotificationAckSerializer().data)
 
 
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 7b23a62c45..972f0a34e8 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1285,11 +1285,8 @@ def submission(self):
         s = s.first()
         return s
 
-    def pub_date(self):
-        """Get the publication date for this document
-
-        This is the rfc publication date for RFCs, and the new-revision date for other documents.
-        """
+    def pub_datetime(self):
+        """Get the publication datetime of this document"""
         if self.type_id == "rfc":
             # As of Sept 2022, in ietf.sync.rfceditor.update_docs_from_rfc_index() `published_rfc` events are
             # created with a timestamp whose date *in the PST8PDT timezone* is the official publication date
@@ -1297,7 +1294,15 @@ def pub_date(self):
             event = self.latest_event(type='published_rfc')
         else:
             event = self.latest_event(type='new_revision')
-        return event.time.astimezone(RPC_TZINFO).date() if event else None
+        return event.time.astimezone(RPC_TZINFO) if event else None
+
+    def pub_date(self):
+        """Get the publication date for this document
+
+        This is the rfc publication date for RFCs, and the new-revision date for other documents.
+        """
+        pub_datetime = self.pub_datetime()
+        return None if pub_datetime is None else pub_datetime.date()
 
     def is_dochistory(self):
         return False
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 90f4c80af5..a38cd5eb5c 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -3,6 +3,7 @@
 # Celery task definitions
 #
 import datetime
+
 import debug  # pyflakes:ignore
 
 from celery import shared_task
@@ -11,7 +12,7 @@
 from django.conf import settings
 from django.utils import timezone
 
-from ietf.utils import log
+from ietf.utils import log, searchindex
 from ietf.utils.timezone import datetime_today
 
 from .expire import (
@@ -77,17 +78,19 @@ def expire_last_calls_task():
         try:
             expire_last_call(doc)
         except Exception:
-            log.log(f"ERROR: Failed to expire last call for {doc.file_tag()} (id={doc.pk})")
+            log.log(
+                f"ERROR: Failed to expire last call for {doc.file_tag()} (id={doc.pk})"
+            )
         else:
             log.log(f"Expired last call for {doc.file_tag()} (id={doc.pk})")
 
 
-@shared_task            
+@shared_task
 def generate_idnits2_rfc_status_task():
     outpath = Path(settings.DERIVED_DIR) / "idnits2-rfc-status"
     blob = generate_idnits2_rfc_status()
     try:
-        outpath.write_text(blob, encoding="utf8") # TODO-BLOBSTORE
+        outpath.write_text(blob, encoding="utf8")  # TODO-BLOBSTORE
     except Exception as e:
         log.log(f"failed to write idnits2-rfc-status: {e}")
 
@@ -97,7 +100,7 @@ def generate_idnits2_rfcs_obsoleted_task():
     outpath = Path(settings.DERIVED_DIR) / "idnits2-rfcs-obsoleted"
     blob = generate_idnits2_rfcs_obsoleted()
     try:
-        outpath.write_text(blob, encoding="utf8") # TODO-BLOBSTORE
+        outpath.write_text(blob, encoding="utf8")  # TODO-BLOBSTORE
     except Exception as e:
         log.log(f"failed to write idnits2-rfcs-obsoleted: {e}")
 
@@ -105,7 +108,7 @@ def generate_idnits2_rfcs_obsoleted_task():
 @shared_task
 def generate_draft_bibxml_files_task(days=7, process_all=False):
     """Generate bibxml files for recently updated docs
-    
+
     If process_all is False (the default), processes only docs with new revisions
     in the last specified number of days.
     """
@@ -117,7 +120,9 @@ def generate_draft_bibxml_files_task(days=7, process_all=False):
         doc__type_id="draft",
     ).order_by("time")
     if not process_all:
-        doc_events = doc_events.filter(time__gte=timezone.now() - datetime.timedelta(days=days))
+        doc_events = doc_events.filter(
+            time__gte=timezone.now() - datetime.timedelta(days=days)
+        )
     for event in doc_events:
         try:
             update_or_create_draft_bibxml_file(event.doc, event.rev)
@@ -132,6 +137,7 @@ def investigate_fragment_task(name_fragment: str):
         "results": investigate_fragment(name_fragment),
     }
 
+
 @shared_task
 def rebuild_reference_relations_task(doc_names: list[str]):
     log.log(f"Task: Rebuilding reference relations for {doc_names}")
@@ -157,6 +163,32 @@ def rebuild_reference_relations_task(doc_names: list[str]):
 def fixup_bofreq_timestamps_task():  # pragma: nocover
     fixup_bofreq_timestamps()
 
+
 @shared_task
 def signal_update_rfc_metadata_task(rfc_number_list=()):
     signal_update_rfc_metadata(rfc_number_list)
+
+
+@shared_task(bind=True)
+def update_rfc_searchindex_task(self, rfc_number: int):
+    """Update the search index for one RFC"""
+    if not searchindex.enabled():
+        log.log("Search indexing is not enabled, skipping")
+        return
+
+    rfc = Document.objects.filter(type_id="rfc", rfc_number=rfc_number).first()
+    if rfc is None:
+        log.log(
+            f"ERROR: Document for rfc{rfc_number} not found, not updating search index"
+        )
+        return
+    try:
+        searchindex.update_or_create_rfc_entry(rfc)
+    except Exception as err:
+        log.log(f"Search index update for {rfc.name} failed ({err})")
+        if isinstance(err, searchindex.RETRYABLE_ERROR_CLASSES):
+            searchindex_settings = searchindex.get_settings()
+            self.retry(
+                countdown=searchindex_settings["TASK_RETRY_DELAY"],
+                max_retries=searchindex_settings["TASK_MAX_RETRIES"],
+            )
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 29689cd596..728d21f131 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -1,18 +1,20 @@
-# Copyright The IETF Trust 2024, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 
-import debug    # pyflakes:ignore
 import datetime
 from unittest import mock
 
 from pathlib import Path
 
+from celery.exceptions import Retry
 from django.conf import settings
+from django.test.utils import override_settings
 from django.utils import timezone
+from typesense import exceptions as typesense_exceptions
 
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import datetime_today
 
-from .factories import DocumentFactory, NewRevisionDocEventFactory
+from .factories import DocumentFactory, NewRevisionDocEventFactory, WgRfcFactory
 from .models import Document, NewRevisionDocEvent
 from .tasks import (
     expire_ids_task,
@@ -22,8 +24,10 @@
     generate_idnits2_rfc_status_task,
     investigate_fragment_task,
     notify_expirations_task,
+    update_rfc_searchindex_task,
 )
 
+
 class TaskTests(TestCase):
     @mock.patch("ietf.doc.tasks.in_draft_expire_freeze")
     @mock.patch("ietf.doc.tasks.get_expired_drafts")
@@ -87,7 +91,7 @@ def test_expire_last_calls_task(self, mock_get_expired, mock_expire):
         self.assertEqual(mock_expire.call_args_list[0], mock.call(docs[0]))
         self.assertEqual(mock_expire.call_args_list[1], mock.call(docs[1]))
         self.assertEqual(mock_expire.call_args_list[2], mock.call(docs[2]))
-    
+
         # Check that it runs even if exceptions occur
         mock_get_expired.reset_mock()
         mock_expire.reset_mock()
@@ -111,9 +115,40 @@ def test_investigate_fragment_task(self):
             retval, {"name_fragment": "some fragment", "results": investigation_results}
         )
 
+    @mock.patch("ietf.doc.tasks.searchindex.update_or_create_rfc_entry")
+    @mock.patch("ietf.doc.tasks.searchindex.enabled")
+    def test_update_rfc_searchindex_task(
+        self, mock_searchindex_enabled, mock_create_entry
+    ):
+        mock_searchindex_enabled.return_value = False
+
+        self.assertFalse(Document.objects.filter(rfc_number=5073).exists())
+        rfc = WgRfcFactory()
+        update_rfc_searchindex_task(rfc_number=5073)
+        self.assertFalse(mock_create_entry.called)
+        update_rfc_searchindex_task(rfc_number=rfc.rfc_number)
+        self.assertFalse(mock_create_entry.called)
+
+        mock_searchindex_enabled.return_value = True
+        update_rfc_searchindex_task(rfc_number=5073)
+        self.assertFalse(mock_create_entry.called)
+        update_rfc_searchindex_task(rfc_number=rfc.rfc_number)
+        self.assertTrue(mock_create_entry.called)
+
+        with override_settings(SEARCHINDEX_CONFIG={"TASK_MAX_RETRIES": 0}):
+            # Try a non-retryable error (there are others)
+            mock_create_entry.side_effect = typesense_exceptions.RequestMalformed
+            update_rfc_searchindex_task(rfc_number=rfc.rfc_number)  # no retry
+            # Now what should be a retryable error
+            mock_create_entry.side_effect = typesense_exceptions.Timeout
+            with self.assertRaises(Retry):
+                update_rfc_searchindex_task(rfc_number=rfc.rfc_number)
+
 
 class Idnits2SupportTests(TestCase):
-    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + ['DERIVED_DIR']
+    settings_temp_path_overrides = TestCase.settings_temp_path_overrides + [
+        "DERIVED_DIR"
+    ]
 
     @mock.patch("ietf.doc.tasks.generate_idnits2_rfcs_obsoleted")
     def test_generate_idnits2_rfcs_obsoleted_task(self, mock_generate):
@@ -151,7 +186,9 @@ def setUp(self):
         )
         # a couple that should always be ignored
         NewRevisionDocEventFactory(
-            time=now - datetime.timedelta(days=6), rev="09", doc__type_id="rfc"  # not a draft
+            time=now - datetime.timedelta(days=6),
+            rev="09",
+            doc__type_id="rfc",  # not a draft
         )
         NewRevisionDocEventFactory(
             type="changed_document",  # not a "new_revision" type
@@ -164,7 +201,9 @@ def setUp(self):
 
     @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
     @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
-    def test_generate_bibxml_files_for_all_drafts_task(self, mock_create, mock_ensure_path):
+    def test_generate_bibxml_files_for_all_drafts_task(
+        self, mock_create, mock_ensure_path
+    ):
         generate_draft_bibxml_files_task(process_all=True)
         self.assertTrue(mock_ensure_path.called)
         self.assertCountEqual(
@@ -193,12 +232,15 @@ def test_generate_bibxml_files_for_all_drafts_task(self, mock_create, mock_ensur
 
     @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
     @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
-    def test_generate_bibxml_files_for_recent_drafts_task(self, mock_create, mock_ensure_path):
+    def test_generate_bibxml_files_for_recent_drafts_task(
+        self, mock_create, mock_ensure_path
+    ):
         # default args - look back 7 days
         generate_draft_bibxml_files_task()
         self.assertTrue(mock_ensure_path.called)
         self.assertCountEqual(
-            mock_create.call_args_list, [mock.call(self.young_event.doc, self.young_event.rev)]
+            mock_create.call_args_list,
+            [mock.call(self.young_event.doc, self.young_event.rev)],
         )
         mock_create.reset_mock()
         mock_ensure_path.reset_mock()
@@ -223,7 +265,9 @@ def test_generate_bibxml_files_for_recent_drafts_task(self, mock_create, mock_en
 
     @mock.patch("ietf.doc.tasks.ensure_draft_bibxml_path_exists")
     @mock.patch("ietf.doc.tasks.update_or_create_draft_bibxml_file")
-    def test_generate_bibxml_files_for_recent_drafts_task_with_bad_value(self, mock_create, mock_ensure_path):
+    def test_generate_bibxml_files_for_recent_drafts_task_with_bad_value(
+        self, mock_create, mock_ensure_path
+    ):
         with self.assertRaises(ValueError):
             generate_draft_bibxml_files_task(days=0)
         self.assertFalse(mock_create.called)
diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
new file mode 100644
index 0000000000..e4427b88b5
--- /dev/null
+++ b/ietf/utils/searchindex.py
@@ -0,0 +1,155 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+"""Search indexing utilities"""
+
+import re
+from math import floor
+
+import httpx  # just for exceptions
+import typesense
+import typesense.exceptions
+from django.conf import settings
+
+from ietf.doc.models import Document, StoredObject
+from ietf.doc.storage_utils import retrieve_str
+from ietf.utils.log import log
+
+# Error classes that might succeed just by retrying a failed attempt.
+# Must be a tuple for use with isinstance()
+RETRYABLE_ERROR_CLASSES = (
+    httpx.ConnectError,
+    httpx.ConnectTimeout,
+    typesense.exceptions.Timeout,
+    typesense.exceptions.ServerError,
+    typesense.exceptions.ServiceUnavailable,
+)
+
+
+DEFAULT_SETTINGS = {
+    "TYPESENSE_API_URL": "",
+    "TYPESENSE_API_KEY": "",
+    "TYPESENSE_COLLECTION_NAME": "docs",
+    "TASK_RETRY_DELAY": 10,
+    "TASK_MAX_RETRIES": 12,
+}
+
+
+def get_settings():
+    return DEFAULT_SETTINGS | getattr(settings, "SEARCHINDEX_CONFIG", {})
+
+
+def enabled():
+    _settings = get_settings()
+    return _settings["TYPESENSE_API_URL"] != ""
+
+
+def _sanitize_text(content):
+    """Sanitize content or abstract text for search"""
+    # REs (with approximate names)
+    RE_DOT_OR_BANG_SPACE = r"\. |! "  # -> " " (space)
+    RE_COMMENT_OR_TOC_CRUD = r"<--|-->|--+|\+|\.\.+"  # -> ""
+    RE_BRACKETED_REF = r"\[[a-zA-Z0-9 -]+\]"  # -> ""
+    RE_DOTTED_NUMBERS = r"[0-9]+\.[0-9]+(\.[0-9]+)?"  # -> ""
+    RE_MULTIPLE_WHITESPACE = r"\s+"  # -> " " (space)
+    # Replacement values (for clarity of intent)
+    SPACE = " "
+    EMPTY = ""
+    # Sanitizing begins here, order is significant!
+    content = re.sub(RE_DOT_OR_BANG_SPACE, SPACE, content.strip())
+    content = re.sub(RE_COMMENT_OR_TOC_CRUD, EMPTY, content)
+    content = re.sub(RE_BRACKETED_REF, EMPTY, content)
+    content = re.sub(RE_DOTTED_NUMBERS, EMPTY, content)
+    content = re.sub(RE_MULTIPLE_WHITESPACE, SPACE, content)
+    return content.strip()
+
+
+def update_or_create_rfc_entry(rfc: Document):
+    assert rfc.type_id == "rfc"
+    assert rfc.rfc_number is not None
+
+    keywords: list[str] = rfc.keywords  # help type checking
+
+    subseries = rfc.part_of()
+    if len(subseries) > 1:
+        log(
+            f"RFC {rfc.rfc_number} is in multiple subseries. "
+            f"Indexing as {subseries[0].name}"
+        )
+    subseries = subseries[0] if len(subseries) > 0 else None
+    obsoleted_by = rfc.relations_that("obs")
+    updated_by = rfc.relations_that("updates")
+
+    stored_txt = (
+        StoredObject.objects.exclude_deleted()
+        .filter(store="rfc", doc_name=rfc.name, name__startswith="txt/")
+        .first()
+    )
+    content = ""
+    if stored_txt is not None:
+        # Should be available in the blobdb, but be cautious...
+        try:
+            content = retrieve_str(kind=stored_txt.store, name=stored_txt.name)
+        except Exception as err:
+            log(f"Unable to retrieve {stored_txt} from storage: {err}")
+
+    ts_id = f"doc-{rfc.pk}"
+    ts_document = {
+        "rfcNumber": rfc.rfc_number,
+        "rfc": str(rfc.rfc_number),
+        "filename": rfc.name,
+        "title": rfc.title,
+        "abstract": _sanitize_text(rfc.abstract),
+        "keywords": keywords,
+        "type": "rfc",
+        "state": [state.name for state in rfc.states.all()],
+        "status": {"slug": rfc.std_level.slug, "name": rfc.std_level.name},
+        "date": floor(rfc.time.timestamp()),
+        "publicationDate": floor(rfc.pub_datetime().timestamp()),
+        "stream": {"slug": rfc.stream.slug, "name": rfc.stream.name},
+        "authors": [
+            {"name": rfc_author.titlepage_name, "affiliation": rfc_author.affiliation}
+            for rfc_author in rfc.rfcauthor_set.all()
+        ],
+        "flags": {
+            "hiddenDefault": False,
+            "obsoleted": len(obsoleted_by) > 0,
+            "updated": len(updated_by) > 0,
+        },
+        "obsoletedBy": [str(doc.rfc_number) for doc in obsoleted_by],
+        "updatedBy": [str(doc.rfc_number) for doc in updated_by],
+        "ranking": rfc.rfc_number,
+    }
+    if subseries is not None:
+        ts_document["subseries"] = {
+            "acronym": subseries.type.slug,
+            "number": int(subseries.name[len(subseries.type.slug) :]),
+            "total": len(subseries.contains()),
+        }
+    if rfc.group is not None:
+        ts_document["group"] = {
+            "acronym": rfc.group.acronym,
+            "name": rfc.group.name,
+            "full": f"{rfc.group.acronym} - {rfc.group.name}",
+        }
+    if (
+        rfc.group.parent is not None
+        and rfc.stream_id not in ["ise", "irtf", "iab"]  # exclude editorial?
+    ):
+        ts_document["area"] = {
+            "acronym": rfc.group.parent.acronym,
+            "name": rfc.group.parent.name,
+            "full": f"{rfc.group.parent.acronym} - {rfc.group.parent.name}",
+        }
+    if rfc.ad is not None:
+        ts_document["adName"] = rfc.ad.name
+    if content != "":
+        ts_document["content"] = _sanitize_text(content)
+    _settings = get_settings()
+    client = typesense.Client(
+        {
+            "api_key": _settings["TYPESENSE_API_KEY"],
+            "nodes": [_settings["TYPESENSE_API_URL"]],
+        }
+    )
+    client.collections[_settings["TYPESENSE_COLLECTION_NAME"]].documents.upsert(
+        {"id": ts_id} | ts_document
+    )
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
new file mode 100644
index 0000000000..8740716c85
--- /dev/null
+++ b/ietf/utils/tests_searchindex.py
@@ -0,0 +1,128 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+from unittest import mock
+
+from django.conf import settings
+from django.test.utils import override_settings
+
+from . import searchindex
+from .test_utils import TestCase
+from ..blobdb.models import Blob
+from ..doc.factories import (
+    WgDraftFactory,
+    WgRfcFactory,
+    PublishedRfcDocEventFactory,
+    BcpFactory,
+    StdFactory,
+)
+from ..doc.models import Document
+from ..doc.storage_utils import store_str
+from ..person.factories import PersonFactory
+
+
+class SearchindexTests(TestCase):
+    def test_enabled(self):
+        with override_settings():
+            try:
+                del settings.SEARCHINDEX_CONFIG
+            except AttributeError:
+                pass
+            self.assertFalse(searchindex.enabled())
+        with override_settings(
+            SEARCHINDEX_CONFIG={"TYPESENSE_API_KEY": "this-is-not-a-key"}
+        ):
+            self.assertFalse(searchindex.enabled())
+        with override_settings(
+            SEARCHINDEX_CONFIG={"TYPESENSE_API_URL": "http://example.com"}
+        ):
+            self.assertTrue(searchindex.enabled())
+
+    def test_sanitize_text(self):
+        dirty_text = """
+        
+        This is text.  It + is <---- full    of \tprobl.....ems! Fix it. 
+        """
+        sanitized = "This is text It is full of problems Fix it."
+        self.assertEqual(searchindex._sanitize_text(dirty_text), sanitized)
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    @mock.patch("ietf.utils.searchindex.typesense.Client")
+    def test_update_or_create_rfc_entry(self, mock_ts_client_constructor):
+        not_rfc = WgDraftFactory()
+        assert isinstance(not_rfc, Document)
+        with self.assertRaises(AssertionError):
+            searchindex.update_or_create_rfc_entry(not_rfc)
+        self.assertFalse(mock_ts_client_constructor.called)
+
+        invalid_rfc = WgRfcFactory(name="rfc1000000", rfc_number=None)
+        assert isinstance(invalid_rfc, Document)
+        with self.assertRaises(AssertionError):
+            searchindex.update_or_create_rfc_entry(invalid_rfc)
+        self.assertFalse(mock_ts_client_constructor.called)
+
+        rfc = PublishedRfcDocEventFactory().doc
+        assert isinstance(rfc, Document)
+        searchindex.update_or_create_rfc_entry(rfc)
+        self.assertTrue(mock_ts_client_constructor.called)
+        # walk the tree down to the method we expected to be called...
+        mock_upsert = mock_ts_client_constructor.return_value.collections[
+            "frogs"
+        ].documents.upsert  # matches value in override_settings above
+        self.assertTrue(mock_upsert.called)
+        upserted_dict = mock_upsert.call_args[0][0]
+        # Check a few values, not exhaustive
+        self.assertEqual(upserted_dict["id"], f"doc-{rfc.pk}")
+        self.assertEqual(upserted_dict["rfcNumber"], rfc.rfc_number)
+        self.assertEqual(
+            upserted_dict["abstract"], searchindex._sanitize_text(rfc.abstract)
+        )
+        self.assertNotIn("adName", upserted_dict)
+        self.assertNotIn("content", upserted_dict)  # no blob
+        self.assertNotIn("subseries", upserted_dict)
+
+        # repeat, this time with contents, an AD, and subseries docs
+        mock_upsert.reset_mock()
+        store_str(
+            kind="rfc",
+            name=f"txt/{rfc.name}.txt",
+            content="The contents of this RFC",
+            doc_name=rfc.name,
+            doc_rev=rfc.rev,  # expected to be None
+        )
+        rfc.ad = PersonFactory(name="Alfred D. Rector")
+        # Put it in two Subseries docs to be sure this does not break things
+        # (the typesense schema does not support this for real at the moment)
+        BcpFactory(contains=[rfc], name="bcp1234")
+        StdFactory(contains=[rfc], name="std1234")
+        searchindex.update_or_create_rfc_entry(rfc)
+        self.assertTrue(mock_upsert.called)
+        upserted_dict = mock_upsert.call_args[0][0]
+        # Check a few values, not exhaustive
+        self.assertEqual(
+            upserted_dict["content"],
+            searchindex._sanitize_text("The contents of this RFC"),
+        )
+        self.assertEqual(upserted_dict["adName"], "Alfred D. Rector")
+        self.assertIn("subseries", upserted_dict)
+        ss_dict = upserted_dict["subseries"]
+        # We should get one of the two subseries docs, but neither is more correct
+        # than the other...
+        self.assertTrue(
+            any(
+                ss_dict == {"acronym": ss_type, "number": 1234, "total": 1}
+                for ss_type in ["bcp", "std"]
+            )
+        )
+
+        # Finally, delete the contents blob and make sure things don't blow up 
+        mock_upsert.reset_mock()
+        Blob.objects.get(bucket="rfc", name=f"txt/{rfc.name}.txt").delete()
+        searchindex.update_or_create_rfc_entry(rfc)
+        self.assertTrue(mock_upsert.called)
+        upserted_dict = mock_upsert.call_args[0][0]
+        self.assertNotIn("content", upserted_dict)
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 56e395c5ac..8c0c66cdf2 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2007-2024, All Rights Reserved
+# Copyright The IETF Trust 2007-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 from base64 import b64decode
@@ -443,12 +443,8 @@ def _multiline_to_list(s):
     ),
 }
 RFCINDEX_DELETE_THEN_WRITE = False  # S3Storage allows file_overwrite by default
-RFCINDEX_OUTPUT_PATH = os.environ.get(
-    "DATATRACKER_RFCINDEX_OUTPUT_PATH", "other/"
-)
-RFCINDEX_INPUT_PATH = os.environ.get(
-    "DATATRACKER_RFCINDEX_INPUT_PATH", ""
-)
+RFCINDEX_OUTPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_OUTPUT_PATH", "other/")
+RFCINDEX_INPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_INPUT_PATH", "")
 
 # Configure the blobdb app for artifact storage
 _blobdb_replication_enabled = (
@@ -471,3 +467,13 @@ def _multiline_to_list(s):
 PASSWORD_POLICY_ENFORCE_AT_LOGIN = (
     os.environ.get("DATATRACKER_ENFORCE_PW_POLICY", "true").lower() != "false"
 )
+
+# Typesense search indexing
+SEARCHINDEX_CONFIG = {
+    "TYPESENSE_API_URL": os.environ.get("DATATRACKER_TYPESENSE_API_URL", ""),
+    "TYPESENSE_API_KEY": os.environ.get("DATATRACKER_TYPESENSE_API_KEY", ""),
+    "TASK_RETRY_DELAY": os.environ.get("DATATRACKER_SEARCHINDEX_TASK_RETRY_DELAY", 10),
+    "TASK_MAX_RETRIES": os.environ.get(
+        "DATATRACKER_SEARCHINDEX_TASK_MAX_RETRIES", "12"
+    ),
+}
diff --git a/requirements.txt b/requirements.txt
index 3d54b104ee..2b8185dab9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -75,6 +75,7 @@ pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=2.0.0  # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
 types-pytz==2025.2.0.20251108  # match pytz version
+typesense>=2.0.0
 requests>=2.32.4
 types-requests>=2.32.4
 requests-mock>=1.12.1

From e6a3b3ebc03ef539454cfa154ad0242b32c6a335 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Mon, 23 Mar 2026 15:46:07 +0000
Subject: [PATCH 583/707] ci: update base image target version to 20260323T1533

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index ce1828052e..af43e990e0 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260304T1633
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260323T1533
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 6be54fb6b0..09f74cce28 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260304T1633
+20260323T1533

From 33f0dbf9e969a233f46251909515b249330fbb79 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 23 Mar 2026 12:39:15 -0500
Subject: [PATCH 584/707] feat: trigger red recomputation on RFC publication or
 metadata update (#10567)

* feat: trigger red recomputation on RFC publication or metadata update

* fix: move red precomputer call out of transaction

* chore: remove old comment, simplify request call

* fix: isolate delayed task in test

* test: give settings_test an InMemoryStorage for r2-rfc

* fix: follow obs/updates both ways when notifying red of changes

* fix: improve red utils, test red and r2 utils

* chore: ruff

* chore: remove unused import

* test: fix patch paths

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/api/serializers_rpc.py       |  15 +++-
 ietf/api/tests_serializers_rpc.py |  88 ++++++++++++++++---
 ietf/api/tests_views_rpc.py       |  24 ++++-
 ietf/api/views_rpc.py             |  12 ++-
 ietf/doc/tasks.py                 |  17 ++++
 ietf/doc/tests_utils.py           | 140 +++++++++++++++++++++++++++++-
 ietf/doc/utils_r2.py              |  17 ++++
 ietf/doc/utils_red.py             |  31 +++++++
 ietf/settings_test.py             |   6 +-
 k8s/settings_local.py             |  10 +++
 10 files changed, 341 insertions(+), 19 deletions(-)
 create mode 100644 ietf/doc/utils_r2.py
 create mode 100644 ietf/doc/utils_red.py

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 701f05eece..397ca05d9b 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -20,7 +20,7 @@
     RfcAuthor,
 )
 from ietf.doc.serializers import RfcAuthorSerializer
-from ietf.doc.tasks import update_rfc_searchindex_task
+from ietf.doc.tasks import trigger_red_precomputer_task, update_rfc_searchindex_task
 from ietf.doc.utils import (
     default_consensus,
     prettify_std_name,
@@ -683,7 +683,18 @@ def update(self, instance, validated_data):
                 stale_subseries_relations.delete()
             if len(rfc_events) > 0:
                 rfc.save_with_history(rfc_events)
-
+        # Gather obs and updates in both directions as a title/author change to
+        # this doc affects the info rendering of all of the other RFCs
+        needs_updating = sorted(
+            [
+                d.rfc_number
+                for d in [rfc]
+                + rfc.related_that_doc(("obs", "updates"))
+                + rfc.related_that(("obs", "updates"))
+            ]
+        )
+        trigger_red_precomputer_task.delay(rfc_number_list=needs_updating)
+        # Update the search index also
         update_rfc_searchindex_task.delay(rfc.rfc_number)
         return rfc
 
diff --git a/ietf/api/tests_serializers_rpc.py b/ietf/api/tests_serializers_rpc.py
index ed326be451..167ffcd3ee 100644
--- a/ietf/api/tests_serializers_rpc.py
+++ b/ietf/api/tests_serializers_rpc.py
@@ -1,4 +1,5 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
+
 from unittest import mock
 
 from django.utils import timezone
@@ -35,8 +36,21 @@ def test_create(self):
             serializer.save()
 
     @mock.patch("ietf.api.serializers_rpc.update_rfc_searchindex_task")
-    def test_update(self, mock_update_searchindex_task):
+    @mock.patch("ietf.api.serializers_rpc.trigger_red_precomputer_task")
+    def test_update(self, mock_trigger_red_task, mock_update_searchindex_task):
+        updates = WgRfcFactory.create_batch(2)
+        obsoletes = WgRfcFactory.create_batch(2)
         rfc = WgRfcFactory(pages=10)
+        updated_by = WgRfcFactory.create_batch(2)
+        obsoleted_by = WgRfcFactory.create_batch(2)
+        for d in updates:
+            rfc.relateddocument_set.create(relationship_id="updates",target=d)
+        for d in obsoletes:
+            rfc.relateddocument_set.create(relationship_id="updates",target=d)
+        for d in updated_by:
+            d.relateddocument_set.create(relationship_id="updates",target=rfc)
+        for d in obsoleted_by:
+            d.relateddocument_set.create(relationship_id="updates",target=rfc)        
         serializer = EditableRfcSerializer(
             instance=rfc,
             data={
@@ -59,11 +73,6 @@ def test_update(self, mock_update_searchindex_task):
         )
         self.assertTrue(serializer.is_valid())
         result = serializer.save()
-        self.assertTrue(mock_update_searchindex_task.delay.called)
-        self.assertEqual(
-            mock_update_searchindex_task.delay.call_args,
-            mock.call(rfc.rfc_number),
-        )
         result.refresh_from_db()
         self.assertEqual(result.title, "Yadda yadda yadda")
         self.assertEqual(
@@ -91,12 +100,42 @@ def test_update(self, mock_update_searchindex_task):
             result.part_of(),
             [Document.objects.get(name="fyi999")],
         )
+        # Confirm that red precomputer was triggered correctly
+        self.assertTrue(mock_trigger_red_task.delay.called)
+        _, mock_kwargs = mock_trigger_red_task.delay.call_args
+        self.assertIn("rfc_number_list", mock_kwargs)
+        expected_numbers = sorted(
+            [
+                d.rfc_number
+                for d in [rfc] + updates + obsoletes + updated_by + obsoleted_by
+            ]
+        )
+        self.assertEqual(mock_kwargs["rfc_number_list"], expected_numbers)
+        # Confirm that the search index update task was triggered correctly
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
 
     @mock.patch("ietf.api.serializers_rpc.update_rfc_searchindex_task")
-    def test_partial_update(self, mock_update_searchindex_task):
+    @mock.patch("ietf.api.serializers_rpc.trigger_red_precomputer_task")
+    def test_partial_update(self, mock_trigger_red_task, mock_update_searchindex_task):
         # We could test other permutations of fields, but authors is a partial update
         # we know we are going to use, so verifying that one in particular.
+        updates = WgRfcFactory.create_batch(2)
+        obsoletes = WgRfcFactory.create_batch(2)
         rfc = WgRfcFactory(pages=10, abstract="do or do not", title="padawan")
+        updated_by = WgRfcFactory.create_batch(2)
+        obsoleted_by = WgRfcFactory.create_batch(2)
+        for d in updates:
+            rfc.relateddocument_set.create(relationship_id="updates",target=d)
+        for d in obsoletes:
+            rfc.relateddocument_set.create(relationship_id="updates",target=d)
+        for d in updated_by:
+            d.relateddocument_set.create(relationship_id="updates",target=rfc)
+        for d in obsoleted_by:
+            d.relateddocument_set.create(relationship_id="updates",target=rfc) 
         serializer = EditableRfcSerializer(
             partial=True,
             instance=rfc,
@@ -113,11 +152,6 @@ def test_partial_update(self, mock_update_searchindex_task):
         )
         self.assertTrue(serializer.is_valid())
         result = serializer.save()
-        self.assertTrue(mock_update_searchindex_task.delay.called)
-        self.assertEqual(
-            mock_update_searchindex_task.delay.call_args,
-            mock.call(rfc.rfc_number),
-        )
         result.refresh_from_db()
         self.assertEqual(rfc.title, "padawan")
         self.assertEqual(
@@ -140,8 +174,27 @@ def test_partial_update(self, mock_update_searchindex_task):
         self.assertEqual(result.pages, 10)
         self.assertEqual(result.std_level_id, "ps")
         self.assertEqual(result.part_of(), [])
+        # Confirm that the red precomputer was triggered correctly
+        self.assertTrue(mock_trigger_red_task.delay.called)
+        _, mock_kwargs = mock_trigger_red_task.delay.call_args
+        self.assertIn("rfc_number_list", mock_kwargs)
+        expected_numbers = sorted(
+            [
+                d.rfc_number
+                for d in [rfc] + updates + obsoletes + updated_by + obsoleted_by
+            ]
+        )
+        self.assertEqual(mock_kwargs["rfc_number_list"], expected_numbers)
+        # Confirm that the search index update task was called correctly
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
 
         # Test only a field on the Document itself to be sure that it works
+        mock_trigger_red_task.delay.reset_mock()
+        mock_update_searchindex_task.delay.reset_mock()
         serializer = EditableRfcSerializer(
             partial=True,
             instance=rfc,
@@ -151,3 +204,14 @@ def test_partial_update(self, mock_update_searchindex_task):
         result = serializer.save()
         result.refresh_from_db()
         self.assertEqual(rfc.title, "jedi master")
+        # Confirm that the red precomputer was triggered correctly
+        self.assertTrue(mock_trigger_red_task.delay.called)
+        _, mock_kwargs = mock_trigger_red_task.delay.call_args
+        self.assertIn("rfc_number_list", mock_kwargs)
+        self.assertEqual(mock_kwargs["rfc_number_list"], expected_numbers)
+        # Confirm that the search index update task was called correctly
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index a679e74789..6d10bee8e8 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -197,7 +197,8 @@ def test_notify_rfc_published(self, mock_task_delay):
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
     @mock.patch("ietf.api.views_rpc.update_rfc_searchindex_task")
-    def test_upload_rfc_files(self, mock_update_searchindex_task):
+    @mock.patch("ietf.api.views_rpc.trigger_red_precomputer_task")
+    def test_upload_rfc_files(self, mock_trigger_red_task, mock_update_searchindex_task):
         def _valid_post_data():
             """Generate a valid post data dict
 
@@ -218,7 +219,14 @@ def _valid_post_data():
             }
 
         url = urlreverse("ietf.api.purple_api.upload_rfc_files")
+        updates = RfcFactory.create_batch(2)
+        obsoletes = RfcFactory.create_batch(2)
+
         rfc = WgRfcFactory()
+        for r in obsoletes:
+            rfc.relateddocument_set.create(relationship_id="obs", target=r)
+        for r in updates:
+            rfc.relateddocument_set.create(relationship_id="updates", target=r)
         assert isinstance(rfc, Document), "WgRfcFactory should generate a Document"
         with TemporaryDirectory() as rfc_dir:
             settings.RFC_PATH = rfc_dir  # affects overridden settings
@@ -303,6 +311,7 @@ def _valid_post_data():
             blob_in_the_way.delete()
 
             # valid post
+            mock_trigger_red_task.delay.reset_mock()
             r = self.client.post(
                 url,
                 _valid_post_data(),
@@ -310,7 +319,6 @@ def _valid_post_data():
                 headers={"X-Api-Key": "valid-token"},
             )
             self.assertEqual(r.status_code, 200)
-            self.assertTrue(mock_update_searchindex_task.delay.called)
             self.assertEqual(
                 mock_update_searchindex_task.delay.call_args,
                 mock.call(rfc.rfc_number),
@@ -350,6 +358,18 @@ def _valid_post_data():
                 b"This is .notprepped.xml",
                 ".notprepped.xml blob should contain the expected content",
             )
+            # Confirm that the red precomputer was triggered correctly
+            self.assertTrue(mock_trigger_red_task.delay.called)
+            _, mock_kwargs = mock_trigger_red_task.delay.call_args
+            self.assertIn("rfc_number_list", mock_kwargs)
+            expected_rfc_number_list = [rfc.rfc_number]
+            expected_rfc_number_list.extend(
+                [d.rfc_number for d in updates + obsoletes]
+            )
+            expected_rfc_number_list = sorted(set(expected_rfc_number_list))
+            self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
+            # Confirm that the search index update task was called correctly
+            self.assertTrue(mock_update_searchindex_task.delay.called)
 
             # re-post with replace = False should now fail
             mock_update_searchindex_task.reset_mock()
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index cb6a59a167..59eed1e10e 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -38,7 +38,11 @@
 from ietf.doc.models import Document, DocHistory, RfcAuthor, DocEvent
 from ietf.doc.serializers import RfcAuthorSerializer
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
-from ietf.doc.tasks import signal_update_rfc_metadata_task, update_rfc_searchindex_task
+from ietf.doc.tasks import (
+    signal_update_rfc_metadata_task,
+    trigger_red_precomputer_task,
+    update_rfc_searchindex_task,
+)
 from ietf.person.models import Email, Person
 from ietf.sync.tasks import create_rfc_index_task
 
@@ -516,6 +520,12 @@ def post(self, request):
                     destination.parent.mkdir()
                 shutil.move(ftm, destination)
 
+        # Trigger red precomputer
+        needs_updating = [rfc.rfc_number]
+        for rel in rfc.relateddocument_set.filter(relationship_id__in=["obs","updates"]):
+            needs_updating.append(rel.target.rfc_number)
+        trigger_red_precomputer_task.delay(rfc_number_list=sorted(needs_updating))
+        # Trigger search index update
         update_rfc_searchindex_task.delay(rfc.rfc_number)
         return Response(NotificationAckSerializer().data)
 
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index a38cd5eb5c..19edb39014 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -7,11 +7,14 @@
 import debug  # pyflakes:ignore
 
 from celery import shared_task
+from celery.exceptions import MaxRetriesExceededError
 from pathlib import Path
 
 from django.conf import settings
 from django.utils import timezone
 
+from ietf.doc.utils_r2 import rfcs_are_in_r2
+from ietf.doc.utils_red import trigger_red_precomputer
 from ietf.utils import log, searchindex
 from ietf.utils.timezone import datetime_today
 
@@ -169,6 +172,20 @@ def signal_update_rfc_metadata_task(rfc_number_list=()):
     signal_update_rfc_metadata(rfc_number_list)
 
 
+@shared_task(bind=True)
+def trigger_red_precomputer_task(self, rfc_number_list=()):
+    if not rfcs_are_in_r2(rfc_number_list):
+        log.log(f"Objects are not yet in R2 for RFCs {rfc_number_list}")
+        try:
+            countdown = getattr(settings, "RED_PRECOMPUTER_TRIGGER_RETRY_DELAY", 10)
+            max_retries = getattr(settings, "RED_PRECOMPUTER_TRIGGER_MAX_RETRIES", 12)
+            self.retry(countdown=countdown, max_retries=max_retries)
+        except MaxRetriesExceededError:
+            log.log(f"Gave up waiting for objects in R2 for RFCs {rfc_number_list}")
+    else:
+        trigger_red_precomputer(rfc_number_list)
+
+
 @shared_task(bind=True)
 def update_rfc_searchindex_task(self, rfc_number: int):
     """Update the search index for one RFC"""
diff --git a/ietf/doc/tests_utils.py b/ietf/doc/tests_utils.py
index a2784bc85e..ba672cd847 100644
--- a/ietf/doc/tests_utils.py
+++ b/ietf/doc/tests_utils.py
@@ -1,15 +1,23 @@
 # Copyright The IETF Trust 2020, All Rights Reserved
 import datetime
+from io import BytesIO
+
+import mock
 import debug  # pyflakes:ignore
+import requests
 
 from pathlib import Path
 from unittest.mock import call, patch
 
 from django.conf import settings
+from django.core.files.storage import storages
 from django.db import IntegrityError
 from django.test.utils import override_settings
 from django.utils import timezone
 
+
+from ietf.doc.utils_r2 import rfcs_are_in_r2
+from ietf.doc.utils_red import trigger_red_precomputer
 from ietf.group.factories import GroupFactory, RoleFactory
 from ietf.name.models import DocTagName
 from ietf.person.factories import PersonFactory
@@ -17,11 +25,12 @@
 from ietf.utils.test_utils import TestCase, name_of_file_containing, reload_db_objects
 from ietf.person.models import Person
 from ietf.doc.factories import DocumentFactory, WgRfcFactory, WgDraftFactory
-from ietf.doc.models import State, DocumentActionHolder, DocumentAuthor
+from ietf.doc.models import State, DocumentActionHolder, DocumentAuthor, StoredObject
 from ietf.doc.utils import (update_action_holders, add_state_change_event, update_documentauthors,
                             fuzzy_find_documents, rebuild_reference_relations, build_file_urls,
                             ensure_draft_bibxml_path_exists, update_or_create_draft_bibxml_file,
                             last_ballot_doc_revision)
+from ietf.doc.storage_utils import store_str
 from ietf.utils.draft import Draft, PlaintextDraft
 from ietf.utils.xmldraft import XMLDraft
 
@@ -559,3 +568,132 @@ def test_last_ballot_doc_revision(self):
         nobody = PersonFactory()
         self.assertIsNone(last_ballot_doc_revision(doc, nobody))
         self.assertEqual(rev, last_ballot_doc_revision(doc, ad))
+
+
+class UtilsRedTests(TestCase):
+    @mock.patch("ietf.doc.utils_red.log")
+    @mock.patch("ietf.doc.utils_red.requests.post")
+    def test_trigger_red_precomputer_not_configured(self, mock_post, mock_log):
+        with override_settings():
+            try:
+                del settings.CUSTOM_SETTING_NAME
+            except AttributeError:
+                pass
+            trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+            self.assertEqual(mock_log.call_count, 1)
+            mock_args, _ = mock_log.call_args
+            self.assertEqual(
+                mock_args,
+                ("No URL configured for triggering red precompute multiple, skipping",),
+            )
+
+        mock_log.reset_mock()
+        with override_settings(TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL=None):
+            trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+            self.assertFalse(mock_post.called)
+            self.assertEqual(mock_log.call_count, 1)
+            mock_args, _ = mock_log.call_args
+            self.assertEqual(
+                mock_args,
+                ("No URL configured for triggering red precompute multiple, skipping",),
+            )
+
+    @override_settings(
+        TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL="urlbits",
+    )
+    @mock.patch("ietf.doc.utils_red.log")
+    @mock.patch("ietf.doc.utils_red.requests.post", side_effect=requests.Timeout())
+    def test_trigger_red_precomputer_swallows_timeout_exception(
+        self, mock_post, mock_log
+    ):
+        exception_raised = False
+        try:
+            trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+        except Exception:
+            exception_raised = True
+        self.assertFalse(exception_raised)
+        self.assertEqual(mock_log.call_count, 2)
+        # only checking the last log call
+        mock_args, _ = mock_log.call_args
+        self.assertEqual(len(mock_args), 1)
+        self.assertIn("POST request timed out", mock_args[0])
+
+    @override_settings(
+        TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL="urlbits",
+    )
+    @mock.patch("ietf.doc.utils_red.requests.post", side_effect=Exception())
+    def test_trigger_red_precomputer_does_not_swallow_too_much(self, mock_post):
+        exception_raised = False
+        try:
+            trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+        except Exception:
+            exception_raised = True
+        self.assertTrue(exception_raised)
+
+    @override_settings(
+        TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL="urlbits",
+        DEFAULT_REQUESTS_TIMEOUT=314159265,
+    )
+    @mock.patch("ietf.doc.utils_red.log")
+    @mock.patch("ietf.doc.utils_red.requests.post")
+    def test_trigger_red_precomputer(self, mock_post, mock_log):
+        mock_post.return_value = mock.Mock(status_code=200)
+        trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+        self.assertTrue(mock_post.called)
+        _, mock_kwargs = mock_post.call_args
+        self.assertIn("url", mock_kwargs)
+        self.assertEqual(mock_kwargs["url"], "urlbits")
+        self.assertIn("json", mock_kwargs)
+        self.assertEqual(mock_kwargs["json"], {"rfcs": "1,2,3"})
+        self.assertIn("timeout", mock_kwargs)
+        self.assertEqual(mock_kwargs["timeout"], 314159265)
+        self.assertEqual(mock_log.call_count, 1)  # Not testing the first info log value
+        mock_log.reset_mock()
+        mock_post.reset_mock()
+        mock_post.return_value = mock.Mock(
+            status_code=500,
+        )
+        trigger_red_precomputer(rfc_number_list=[1, 2, 3])
+        self.assertEqual(mock_log.call_count, 2)
+        mock_args, _ = mock_log.call_args
+        self.assertEqual(len(mock_args), 1)
+        expected = f"POST request failed for {settings.TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL} : status_code=500"
+        self.assertEqual(mock_args[0], expected)
+
+
+class UtilsR2TestCase(TestCase):
+    def test_rfcs_are_in_r2(self):
+        rfcs = WgRfcFactory.create_batch(2)
+        rfc_name_list = [rfc.name for rfc in rfcs]
+        rfc_number_list = [rfc.rfc_number for rfc in rfcs]
+        r2_rfc_bucket = storages["r2-rfc"]
+        # Right now the various doc Factories do not populate any content
+        self.assertEqual(
+            StoredObject.objects.filter(
+                store="rfc", doc_name__in=rfc_name_list
+            ).count(),
+            0,
+        )
+        self.assertTrue(rfcs_are_in_r2(rfc_number_list=rfc_number_list))
+        for rfc in rfcs:
+            store_str(
+                kind="rfc",
+                name=f"testartifact/{rfc.name}.testartifact",
+                content="",
+                doc_name=rfc.name,
+                doc_rev=None,
+            )
+        self.assertEqual(
+            StoredObject.objects.filter(
+                store="rfc", doc_name__in=rfc_name_list
+            ).count(),
+            2,
+        )
+        self.assertFalse(rfcs_are_in_r2(rfc_number_list=rfc_number_list))
+        r2_rfc_bucket.save(f"testartifact/{rfcs[0].name}.testartifact", BytesIO(b""))
+        self.assertFalse(rfcs_are_in_r2(rfc_number_list=rfc_number_list))
+        r2_rfc_bucket.save(f"testartifact/{rfcs[1].name}.testartifact", BytesIO(b""))
+        self.assertTrue(rfcs_are_in_r2(rfc_number_list=rfc_number_list))
+
+
+
diff --git a/ietf/doc/utils_r2.py b/ietf/doc/utils_r2.py
new file mode 100644
index 0000000000..53fb978303
--- /dev/null
+++ b/ietf/doc/utils_r2.py
@@ -0,0 +1,17 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.core.files.storage import storages
+
+from ietf.doc.models import StoredObject
+
+
+def rfcs_are_in_r2(rfc_number_list=()):
+    r2_rfc_bucket = storages["r2-rfc"]
+    for rfc_number in rfc_number_list:
+        stored_objects = StoredObject.objects.filter(
+            store="rfc", doc_name=f"rfc{rfc_number}"
+        )
+        for stored_object in stored_objects:
+            if not r2_rfc_bucket.exists(stored_object.name):
+                return False
+    return True
diff --git a/ietf/doc/utils_red.py b/ietf/doc/utils_red.py
new file mode 100644
index 0000000000..bcda893dca
--- /dev/null
+++ b/ietf/doc/utils_red.py
@@ -0,0 +1,31 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import requests
+
+from django.conf import settings
+
+from ietf.utils.log import log
+
+
+def trigger_red_precomputer(rfc_number_list=()):
+    url = getattr(settings, "TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL", None)
+    if url is not None:
+        payload = {
+            "rfcs": ",".join([str(n) for n in rfc_number_list]),
+        }
+        try:
+            log(f"Triggering red precompute multiple for RFCs {rfc_number_list}")
+            response = requests.post(
+                url=url,
+                json=payload,
+                timeout=settings.DEFAULT_REQUESTS_TIMEOUT,
+            )
+        except requests.Timeout as e:
+            log(f"POST request timed out for {url} : {e}")
+            return
+        if response.status_code != 200:
+            log(
+                f"POST request failed for {url} : status_code={response.status_code}"
+            )
+    else:
+        log("No URL configured for triggering red precompute multiple, skipping")
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 1f5a7e8ddc..e7ebc13eb2 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -115,8 +115,12 @@ def tempdir_with_cleanup(**kwargs):
 except NameError:
     pass
 
-# Use InMemoryStorage for red bucket storage
+# Use InMemoryStorage for red bucket and r2-rfc storages
 STORAGES["red_bucket"] = {
     "BACKEND": "django.core.files.storage.InMemoryStorage",
     "OPTIONS": {"location": "red_bucket"},
 }
+STORAGES["r2-rfc"] = {
+    "BACKEND": "django.core.files.storage.InMemoryStorage",
+    "OPTIONS": {"location": "r2-rfc"},
+}
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 8c0c66cdf2..323b7fd45a 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -80,6 +80,16 @@ def _multiline_to_list(s):
 else:
     raise RuntimeError("DATATRACKER_API_PRIVATE_KEY_PEM_B64 must be set")
 
+_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = os.environ.get("DATATRACKER_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY", None)
+if _RED_PRECOMPUTER_TRIGGER_RETRY_DELAY is not None:
+    RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = _RED_PRECOMPUTER_TRIGGER_RETRY_DELAY 
+_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES = os.environ.get("DATATRACKER_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES", None)
+if _RED_PRECOMPUTER_TRIGGER_MAX_RETRIES is not None:
+    RED_PRECOMPUTER_TRIGGER_MAX_RETRIES = _RED_PRECOMPUTER_TRIGGER_MAX_RETRIES
+_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL = os.environ.get("DATATRACKER_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL", None)
+if _TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL is not None:
+    TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL = _TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL
+
 # Set DEBUG if DATATRACKER_DEBUG env var is the word "true"
 DEBUG = os.environ.get("DATATRACKER_DEBUG", "false").lower() == "true"
 

From e5b037ba83c2275efcd5a034c4bd1af67932d23f Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 23 Mar 2026 13:19:54 -0500
Subject: [PATCH 585/707] fix: rebuild reference relations once we have rfc
 contents (#10578)

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/api/tests_views_rpc.py | 13 ++++++++++++-
 ietf/api/views_rpc.py       |  4 ++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 6d10bee8e8..0db67e126f 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -196,9 +196,15 @@ def test_notify_rfc_published(self, mock_task_delay):
         self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    @mock.patch("ietf.api.views_rpc.rebuild_reference_relations_task")
     @mock.patch("ietf.api.views_rpc.update_rfc_searchindex_task")
     @mock.patch("ietf.api.views_rpc.trigger_red_precomputer_task")
-    def test_upload_rfc_files(self, mock_trigger_red_task, mock_update_searchindex_task):
+    def test_upload_rfc_files(
+        self,
+        mock_trigger_red_task,
+        mock_update_searchindex_task,
+        mock_rebuild_relations,
+    ):
         def _valid_post_data():
             """Generate a valid post data dict
 
@@ -370,6 +376,11 @@ def _valid_post_data():
             self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
             # Confirm that the search index update task was called correctly
             self.assertTrue(mock_update_searchindex_task.delay.called)
+            # Confirm reference relations rebuild task was called correctly
+            self.assertTrue(mock_rebuild_relations.delay.called)
+            _, mock_kwargs = mock_rebuild_relations.delay.call_args
+            self.assertIn("doc_names", mock_kwargs)
+            self.assertEqual(mock_kwargs["doc_names"], [rfc.name])
 
             # re-post with replace = False should now fail
             mock_update_searchindex_task.reset_mock()
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 59eed1e10e..6c7464e252 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -40,6 +40,7 @@
 from ietf.doc.storage_utils import remove_from_storage, store_file, exists_in_storage
 from ietf.doc.tasks import (
     signal_update_rfc_metadata_task,
+    rebuild_reference_relations_task,
     trigger_red_precomputer_task,
     update_rfc_searchindex_task,
 )
@@ -527,6 +528,9 @@ def post(self, request):
         trigger_red_precomputer_task.delay(rfc_number_list=sorted(needs_updating))
         # Trigger search index update
         update_rfc_searchindex_task.delay(rfc.rfc_number)
+        # Trigger reference relation srebuild
+        rebuild_reference_relations_task.delay(doc_names=[rfc.name])
+
         return Response(NotificationAckSerializer().data)
 
 

From 10ebdf9a6433b34d32352b4bb1b4e9b285773de8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Mar 2026 15:44:22 -0300
Subject: [PATCH 586/707] chore: deduplicate logging and clean up config
 (#10592)

* fix: remove redundant loggers + cleanup

* style: ruff ruff (logging config)

* chore: alphabetize loggers

* refactor: modern suppression of DisallowedHost log

* style: minor cleanup / comments

* fix: roll back accidental commit

* fix: django.request at ERROR level

* fix: squelch other SuspiciousOperation mail
---
 ietf/settings.py | 188 +++++++++++++++++++----------------------------
 1 file changed, 74 insertions(+), 114 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index e0b4f20118..40a4cb5c56 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2007-2025, All Rights Reserved
+# Copyright The IETF Trust 2007-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -13,6 +13,7 @@
 import warnings
 from hashlib import sha384
 from typing import Any, Dict, List, Tuple # pyflakes:ignore
+from django.http import UnreadablePostError
 
 # DeprecationWarnings are suppressed by default, enable them
 warnings.simplefilter("always", DeprecationWarning)
@@ -236,153 +237,112 @@
 
 FILE_UPLOAD_PERMISSIONS = 0o644          
 
-# ------------------------------------------------------------------------
-# Django/Python Logging Framework Modifications
 
-# Filter out "Invalid HTTP_HOST" emails
-# Based on http://www.tiwoc.de/blog/2013/03/django-prevent-email-notification-on-suspiciousoperation/
-from django.core.exceptions import SuspiciousOperation
-def skip_suspicious_operations(record):
-    if record.exc_info:
-        exc_value = record.exc_info[1]
-        if isinstance(exc_value, SuspiciousOperation):
-            return False
-    return True
+#
+# Logging config
+#
 
-# Filter out UreadablePostError:
-from django.http import UnreadablePostError
+# Callback to filter out UnreadablePostError:
 def skip_unreadable_post(record):
     if record.exc_info:
-        exc_type, exc_value = record.exc_info[:2] # pylint: disable=unused-variable
+        exc_type, exc_value = record.exc_info[:2]  # pylint: disable=unused-variable
         if isinstance(exc_value, UnreadablePostError):
             return False
     return True
 
-# Copied from DEFAULT_LOGGING as of Django 1.10.5 on 22 Feb 2017, and modified
-# to incorporate html logging, invalid http_host filtering, and more.
-# Changes from the default has comments.
-
-# The Python logging flow is as follows:
-# (see https://docs.python.org/2.7/howto/logging.html#logging-flow)
-#
-#   Init: get a Logger: logger = logging.getLogger(name)
-#
-#   Logging call, e.g. logger.error(level, msg, *args, exc_info=(...), extra={...})
-#   --> Logger (discard if level too low for this logger)
-#       (create log record from level, msg, args, exc_info, extra)
-#       --> Filters (discard if any filter attach to logger rejects record)
-#           --> Handlers (discard if level too low for handler)
-#               --> Filters (discard if any filter attached to handler rejects record)
-#                   --> Formatter (format log record and emit)
-#
-
 LOGGING = {
-    'version': 1,
-    'disable_existing_loggers': False,
-    #
-    'loggers': {
-        'django': {
-            'handlers': ['console', 'mail_admins'],
-            'level': 'INFO',
-        },
-        'django.request': {
-            'handlers': ['console'],
-            'level': 'ERROR',
+    "version": 1,
+    "disable_existing_loggers": False,
+    "loggers": {
+        "celery": {
+            "handlers": ["console"],
+            "level": "INFO",
         },
-        'django.server': {
-            'handlers': ['django.server'],
-            'level': 'INFO',
+        "datatracker": {
+            "handlers": ["console"],
+            "level": "INFO",
         },
-        'django.security': {
-            'handlers': ['console', ],
-            'level': 'INFO',
+        "django": {
+            "handlers": ["console", "mail_admins"],
+            "level": "INFO",
         },
-        'oidc_provider': {
-            'handlers': ['console', ],
-            'level': 'DEBUG',
+        "django.request": {"level": "ERROR"},  # only log 5xx, ignore 4xx
+        "django.security": {
+            # SuspiciousOperation errors - log to console only
+            "handlers": ["console"],
+            "propagate": False,  # no further handling please
         },
-        'datatracker': {
-            'handlers': ['console'],
-            'level': 'INFO',
+        "django.server": {
+            # Only used by Django's runserver development server
+            "handlers": ["django.server"],
+            "level": "INFO",
         },
-        'celery': {
-            'handlers': ['console'],
-            'level': 'INFO',
+        "oidc_provider": {
+            "handlers": ["console"],
+            "level": "DEBUG",
         },
     },
-    #
-    # No logger filters
-    #
-    'handlers': {
-        'console': {
-            'level': 'DEBUG',
-            'class': 'logging.StreamHandler',
-            'formatter': 'plain',
+    "handlers": {
+        "console": {
+            "level": "DEBUG",
+            "class": "logging.StreamHandler",
+            "formatter": "plain",
         },
-        'debug_console': {
-            # Active only when DEBUG=True
-            'level': 'DEBUG',
-            'filters': ['require_debug_true'],
-            'class': 'logging.StreamHandler',
-            'formatter': 'plain',
+        "debug_console": {
+            "level": "DEBUG",
+            "filters": ["require_debug_true"],
+            "class": "logging.StreamHandler",
+            "formatter": "plain",
         },
-        'django.server': {
-            'level': 'INFO',
-            'class': 'logging.StreamHandler',
-            'formatter': 'django.server',
+        "django.server": {
+            "level": "INFO",
+            "class": "logging.StreamHandler",
+            "formatter": "django.server",
         },
-        'mail_admins': {
-            'level': 'ERROR',
-            'filters': [
-                'require_debug_false',
-                'skip_suspicious_operations', # custom
-                'skip_unreadable_posts', # custom
+        "mail_admins": {
+            "level": "ERROR",
+            "filters": [
+                "require_debug_false",
+                "skip_unreadable_posts",
             ],
-            'class': 'django.utils.log.AdminEmailHandler',
-            'include_html': True,       # non-default
-        }
+            "class": "django.utils.log.AdminEmailHandler",
+            "include_html": True,
+        },
     },
-    #
     # All these are used by handlers
-    'filters': {
-        'require_debug_false': {
-            '()': 'django.utils.log.RequireDebugFalse',
-        },
-        'require_debug_true': {
-            '()': 'django.utils.log.RequireDebugTrue',
+    "filters": {
+        "require_debug_false": {
+            "()": "django.utils.log.RequireDebugFalse",
         },
-        # custom filter, function defined above:
-        'skip_suspicious_operations': {
-            '()': 'django.utils.log.CallbackFilter',
-            'callback': skip_suspicious_operations,
+        "require_debug_true": {
+            "()": "django.utils.log.RequireDebugTrue",
         },
         # custom filter, function defined above:
-        'skip_unreadable_posts': {
-            '()': 'django.utils.log.CallbackFilter',
-            'callback': skip_unreadable_post,
+        "skip_unreadable_posts": {
+            "()": "django.utils.log.CallbackFilter",
+            "callback": skip_unreadable_post,
         },
     },
-    # And finally the formatters
-    'formatters': {
-        'django.server': {
-            '()': 'django.utils.log.ServerFormatter',
-            'format': '[%(server_time)s] %(message)s',
+    "formatters": {
+        "django.server": {
+            "()": "django.utils.log.ServerFormatter",
+            "format": "[%(server_time)s] %(message)s",
         },
-        'plain': {
-            'style': '{',
-            'format': '{levelname}: {name}:{lineno}: {message}',
+        "plain": {
+            "style": "{",
+            "format": "{levelname}: {name}:{lineno}: {message}",
         },
-        'json' : {
+        "json": {
             "class": "ietf.utils.jsonlogger.DatatrackerJsonFormatter",
             "style": "{",
-            "format": "{asctime}{levelname}{message}{name}{pathname}{lineno}{funcName}{process}",
-        }
+            "format": (
+                "{asctime}{levelname}{message}{name}{pathname}{lineno}{funcName}"
+                "{process}{status_code}"
+            ),
+        },
     },
 }
 
-# End logging
-# ------------------------------------------------------------------------
-
 
 X_FRAME_OPTIONS = 'SAMEORIGIN'
 CSRF_TRUSTED_ORIGINS = [

From 14dd4cfdacb49552a2fcb9d9525e713f8ebd3c26 Mon Sep 17 00:00:00 2001
From: Tianyi Gao <tianyi.gao@ed.ac.uk>
Date: Tue, 24 Mar 2026 02:45:24 +0800
Subject: [PATCH 587/707] feat: show parents on list of teams with grouping
 (#8635) (#10552)

* feat: show parents on list of teams with grouping (#8635)

* fix: sort teams by parent type then parent name in active teams list
---
 ietf/group/views.py                    | 13 +++++++--
 ietf/templates/group/active_teams.html | 38 ++++++++++++++++----------
 2 files changed, 34 insertions(+), 17 deletions(-)

diff --git a/ietf/group/views.py b/ietf/group/views.py
index efe3eca15d..8561a5059f 100644
--- a/ietf/group/views.py
+++ b/ietf/group/views.py
@@ -245,10 +245,19 @@ def active_review_dirs(request):
     return render(request, 'group/active_review_dirs.html', {'dirs' : dirs })
 
 def active_teams(request):
-    teams = Group.objects.filter(type="team", state="active").order_by("name")
+    parent_type_order = {"area": 1, "adm": 3, None: 4}
+
+    def team_sort_key(group):
+        type_id = group.parent.type_id if group.parent else None
+        return (parent_type_order.get(type_id, 2), group.parent.name if group.parent else "", group.name)
+
+    teams = sorted(
+        Group.objects.filter(type="team", state="active").select_related("parent"),
+        key=team_sort_key,
+    )
     for group in teams:
         group.chairs = sorted(roles(group, "chair"), key=extract_last_name)
-    return render(request, 'group/active_teams.html', {'teams' : teams })
+    return render(request, 'group/active_teams.html', {'teams': teams})
 
 def active_iab(request):
     iabgroups = Group.objects.filter(type__in=("program","iabasg","iabworkshop"), state="active").order_by("-type_id","name")
diff --git a/ietf/templates/group/active_teams.html b/ietf/templates/group/active_teams.html
index 502d971a20..771dfda290 100644
--- a/ietf/templates/group/active_teams.html
+++ b/ietf/templates/group/active_teams.html
@@ -16,21 +16,29 @@ <h1>Active teams</h1>
                 <th scope="col" data-sort="chairs">Chairs</th>
             </tr>
         </thead>
-        <tbody>
-            {% for group in teams %}
-                <tr>
-                    <td>
-                        <a href="{% url "ietf.group.views.group_home" acronym=group.acronym %}">{{ group.acronym }}</a>
-                    </td>
-                    <td>{{ group.name }}</td>
-                    <td>
-                        {% for chair in group.chairs %}
-                            {% person_link chair.person %}{% if not forloop.last %},{% endif %}
-                        {% endfor %}
-                    </td>
-                </tr>
-            {% endfor %}
-        </tbody>
+        {% regroup teams by parent as grouped_teams %}
+        {% for group_entry in grouped_teams %}
+            <tbody>
+                <tr class="table-info"><th scope="col" colspan="3">
+                    {% if group_entry.grouper %}{{ group_entry.grouper.name }}{% else %}Other{% endif %}
+                </th></tr>
+            </tbody>
+            <tbody>
+                {% for group in group_entry.list %}
+                    <tr>
+                        <td>
+                            <a href="{% url "ietf.group.views.group_home" acronym=group.acronym %}">{{ group.acronym }}</a>
+                        </td>
+                        <td>{{ group.name }}</td>
+                        <td>
+                            {% for chair in group.chairs %}
+                                {% person_link chair.person %}{% if not forloop.last %},{% endif %}
+                            {% endfor %}
+                        </td>
+                    </tr>
+                {% endfor %}
+            </tbody>
+        {% endfor %}
     </table>
 {% endblock %}
 {% block js %}

From 057d52b76666ab6fcfd366700862be10db4844bb Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Mar 2026 15:56:39 -0300
Subject: [PATCH 588/707] ci: update actions to avoid deprecations (#10604)

* ci: upload-artifact -> v7

* ci: checkout -> v6
---
 .github/workflows/build-base-app.yml          |  2 +-
 .github/workflows/build-devblobstore.yml      |  2 +-
 .github/workflows/build-mq-broker.yml         |  2 +-
 .github/workflows/build.yml                   |  8 ++++----
 .github/workflows/ci-run-tests.yml            |  2 +-
 .github/workflows/codeql-analysis.yml         |  2 +-
 .github/workflows/dependency-review.yml       |  2 +-
 .github/workflows/dev-assets-sync-nightly.yml |  2 +-
 .github/workflows/tests.yml                   | 14 +++++++-------
 9 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 4a4394fca0..2b937cbfef 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -18,7 +18,7 @@ jobs:
       packages: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         token: ${{ secrets.GH_COMMON_TOKEN }}
 
diff --git a/.github/workflows/build-devblobstore.yml b/.github/workflows/build-devblobstore.yml
index f49a11af19..41b2e0d47a 100644
--- a/.github/workflows/build-devblobstore.yml
+++ b/.github/workflows/build-devblobstore.yml
@@ -20,7 +20,7 @@ jobs:
       packages: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index 4de861dbcd..76c9b93168 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -24,7 +24,7 @@ jobs:
       packages: write
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - name: Set up QEMU
       uses: docker/setup-qemu-action@v3
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d97889fbb8..8872c7f7d3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -66,7 +66,7 @@ jobs:
       base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
 
     steps:   
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 1
         fetch-tags: false
@@ -164,7 +164,7 @@ jobs:
       TARGET_BASE: ${{needs.prepare.outputs.base_image_version}}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 1
         fetch-tags: false
@@ -341,7 +341,7 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
         
     - name: Upload Build Artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: release-${{ env.PKG_VERSION }}
         path: /home/runner/work/release/release.tar.gz
@@ -403,7 +403,7 @@ jobs:
       PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
       
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: main
           
diff --git a/.github/workflows/ci-run-tests.yml b/.github/workflows/ci-run-tests.yml
index 278bd8af2f..5349f1ac7a 100644
--- a/.github/workflows/ci-run-tests.yml
+++ b/.github/workflows/ci-run-tests.yml
@@ -23,7 +23,7 @@ jobs:
       base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
 
     steps:   
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 1
         fetch-tags: false
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 3444c03b5e..4ab32d27a6 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 6d0683c471..e255b270ff 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@v4
         with:
diff --git a/.github/workflows/dev-assets-sync-nightly.yml b/.github/workflows/dev-assets-sync-nightly.yml
index 4cfbf6365b..926d816b38 100644
--- a/.github/workflows/dev-assets-sync-nightly.yml
+++ b/.github/workflows/dev-assets-sync-nightly.yml
@@ -29,7 +29,7 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 836314bac0..be7b834b7a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -32,7 +32,7 @@ jobs:
         image: ghcr.io/ietf-tools/datatracker-devblobstore:latest
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     
     - name: Prepare for tests
       run: |
@@ -68,7 +68,7 @@ jobs:
         coverage xml
 
     - name: Upload geckodriver.log
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       if: ${{ failure() }}
       with:
         name: geckodriverlog
@@ -87,7 +87,7 @@ jobs:
         mv latest-coverage.json coverage.json
         
     - name: Upload Coverage Results as Build Artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       if: ${{ always() }}
       with:
         name: coverage
@@ -102,7 +102,7 @@ jobs:
         project: [chromium, firefox]
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
     - uses: actions/setup-node@v6
       with:
@@ -121,7 +121,7 @@ jobs:
         npx playwright test --project=${{ matrix.project }}
         
     - name: Upload Report
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       if: ${{ always() }}
       continue-on-error: true
       with:
@@ -143,7 +143,7 @@ jobs:
         image: ghcr.io/ietf-tools/datatracker-db:latest
     
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     
     - name: Prepare for tests
       run: |
@@ -180,7 +180,7 @@ jobs:
         npx playwright test --project=${{ matrix.project }} -c playwright-legacy.config.js
         
     - name: Upload Report
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       if: ${{ always() }}
       continue-on-error: true
       with:

From 02070ee2f4dc6ee599e08a87e92b345198ae40fa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 16:04:08 -0300
Subject: [PATCH 589/707] chore(deps): bump actions/setup-python from 5 to 6
 (#9480)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8872c7f7d3..07a304cac2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -175,7 +175,7 @@ jobs:
         node-version: 18.x
 
     - name: Setup Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: "3.x"
 

From 4a6627826993863bcb9cd5ede6b6e6f5b19eb0e9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 17:07:28 -0300
Subject: [PATCH 590/707] chore(deps): bump ncipollo/release-action from 1.18.0
 to 1.20.0 (#9478)

Bumps [ncipollo/release-action](https://github.com/ncipollo/release-action) from 1.18.0 to 1.20.0.
- [Release notes](https://github.com/ncipollo/release-action/releases)
- [Commits](https://github.com/ncipollo/release-action/compare/v1.18.0...v1.20.0)

---
updated-dependencies:
- dependency-name: ncipollo/release-action
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 07a304cac2..ed425f9ae5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -98,7 +98,7 @@ jobs:
         echo "IS_RELEASE=true" >> $GITHUB_ENV
         
     - name: Create Draft Release
-      uses: ncipollo/release-action@v1.18.0
+      uses: ncipollo/release-action@v1.21.0
       if: ${{ github.ref_name == 'release' }}
       with:
         prerelease: true
@@ -315,7 +315,7 @@ jobs:
         histCoveragePath: historical-coverage.json
         
     - name: Create Release
-      uses: ncipollo/release-action@v1.18.0
+      uses: ncipollo/release-action@v1.21.0
       if: ${{ env.SHOULD_DEPLOY == 'true' }}
       with:
         allowUpdates: true
@@ -328,7 +328,7 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Update Baseline Coverage
-      uses: ncipollo/release-action@v1.18.0
+      uses: ncipollo/release-action@v1.21.0
       if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
       with:
         allowUpdates: true

From 753bd507c5d9cfdad4793d0e3feed68726fecf1e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 23 Mar 2026 15:38:15 -0500
Subject: [PATCH 591/707] fix: include editorial docs in sent-to-rpc (#10605)

---
 ietf/api/views_rpc.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 6c7464e252..1e96118e58 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -210,19 +210,19 @@ def submitted_to_rpc(self, request):
         Those queries overreturn - there may be things, particularly not from the IETF stream that are already in the queue.
         """
         ietf_docs = Q(states__type_id="draft-iesg", states__slug__in=["ann"])
-        irtf_iab_ise_docs = Q(
+        irtf_iab_ise_editorial_docs = Q(
             states__type_id__in=[
                 "draft-stream-iab",
                 "draft-stream-irtf",
                 "draft-stream-ise",
+                "draft-stream-editorial",
             ],
             states__slug__in=["rfc-edit"],
         )
-        # TODO: Need a way to talk about editorial stream docs
         docs = (
             self.get_queryset()
             .filter(type_id="draft")
-            .filter(ietf_docs | irtf_iab_ise_docs)
+            .filter(ietf_docs | irtf_iab_ise_editorial_docs)
         )
         serializer = self.get_serializer(docs, many=True)
         return Response(serializer.data)

From 4308162174bb565b988c4fca9289c424c736ecba Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Mar 2026 17:38:34 -0300
Subject: [PATCH 592/707] ci: handle rabbitmq version for push trigger (#10606)

---
 .github/workflows/build-mq-broker.yml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index 76c9b93168..50472122c4 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -39,6 +39,15 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
+    - name: Set rabbitmq version
+      id: rabbitmq-version
+      run: |
+        if [[ "${{ inputs.rabbitmq_version }}" == "" ]]; then
+          echo "RABBITMQ_VERSION=3.13-alpine" >> $GITHUB_OUTPUT
+        else
+          echo "RABBITMQ_VERSION=${{ inputs.rabbitmq_version }}" >> $GITHUB_OUTPUT
+        fi
+
     - name: Docker Build & Push
       uses: docker/build-push-action@v6
       env:
@@ -48,7 +57,7 @@ jobs:
         file: dev/mq/Dockerfile
         platforms: linux/amd64,linux/arm64
         push: true
-        build-args: RABBITMQ_VERSION=${{ inputs.rabbitmq_version }}
+        build-args: RABBITMQ_VERSION=${{ steps.rabbitmq-version.outputs.RABBITMQ_VERSION }}
         tags: |
-          ghcr.io/ietf-tools/datatracker-mq:${{ inputs.rabbitmq_version }}
+          ghcr.io/ietf-tools/datatracker-mq:${{ steps.rabbitmq-version.outputs.RABBITMQ_VERSION }}
           ghcr.io/ietf-tools/datatracker-mq:latest

From eb041f7d81c7469f0b4c765150ccfadba5604177 Mon Sep 17 00:00:00 2001
From: Martin Thomson <mt@lowentropy.net>
Date: Tue, 24 Mar 2026 05:39:01 +0900
Subject: [PATCH 593/707] fix: Rewrite CSS style attributes in SVG (#10584)

This makes the dark mode work properly for drafts like
https://datatracker.ietf.org/doc/html/draft-hajdusek-qirg-timing-physics-01
which have diagrams that use a mix of ordinary attributes and the style
attribute.  Using the style attribute makes the rules there invisible to
the method we use for the remapping of black and white for dark mode.
---
 ietf/static/js/document_html.js | 79 +++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)

diff --git a/ietf/static/js/document_html.js b/ietf/static/js/document_html.js
index 6e8861739a..3e609f3965 100644
--- a/ietf/static/js/document_html.js
+++ b/ietf/static/js/document_html.js
@@ -117,4 +117,83 @@ document.addEventListener("DOMContentLoaded", function (event) {
                 }
             });
     }
+
+    // Rewrite these CSS properties so that the values are available for restyling.
+    document.querySelectorAll("svg [style]").forEach(el => {
+        // Push these CSS properties into their own attributes
+        const SVG_PRESENTATION_ATTRS = new Set([
+            'alignment-baseline', 'baseline-shift', 'clip', 'clip-path', 'clip-rule',
+            'color', 'color-interpolation', 'color-interpolation-filters',
+            'color-rendering', 'cursor', 'direction', 'display', 'dominant-baseline',
+            'fill', 'fill-opacity', 'fill-rule', 'filter', 'flood-color',
+            'flood-opacity', 'font-family', 'font-size', 'font-size-adjust',
+            'font-stretch', 'font-style', 'font-variant', 'font-weight',
+            'image-rendering', 'letter-spacing', 'lighting-color', 'marker-end',
+            'marker-mid', 'marker-start', 'mask', 'opacity', 'overflow', 'paint-order',
+            'pointer-events', 'shape-rendering', 'stop-color', 'stop-opacity',
+            'stroke', 'stroke-dasharray', 'stroke-dashoffset', 'stroke-linecap',
+            'stroke-linejoin', 'stroke-miterlimit', 'stroke-opacity', 'stroke-width',
+            'text-anchor', 'text-decoration', 'text-rendering', 'unicode-bidi',
+            'vector-effect', 'visibility', 'word-spacing', 'writing-mode',
+        ]);
+
+        // Simple CSS splitter: respects quoted strings and parens so semicolons
+        // inside url(...) or "..." don't get treated as declaration boundaries.
+        function parseDeclarations(styleText) {
+            const decls = [];
+            let buf = '';
+            let inStr = false;
+            let strChar = '';
+            let escaped = false;
+            let depth = 0;
+
+            for (const ch of styleText) {
+                if (inStr) {
+                    if (escaped) {
+                        escaped = false;
+                    } else if (ch === '\\') {
+                        escaped = true;
+                    } else if (ch === strChar) {
+                        inStr = false;
+                    }
+                } else if (ch === '"' || ch === "'") {
+                    inStr = true;
+                    strChar = ch;
+                } else if (ch === '(') {
+                    depth++;
+                } else if (ch === ')') {
+                    depth--;
+                } else if (ch === ';' && depth === 0) {
+                    const trimmed = buf.trim();
+                    if (trimmed) {
+                        decls.push(trimmed);
+                    }
+                    buf = '';
+                    continue;
+                }
+                buf += ch;
+            }
+            const trimmed = buf.trim();
+            if (trimmed) {
+                decls.push(trimmed);
+            }
+            return decls;
+        }
+
+        const remainder = [];
+        for (const decl of parseDeclarations(el.getAttribute('style'))) {
+            const [prop, val] = decl.split(":", 2).map(v => v.trim());
+            if (val && !/!important$/.test(val) && SVG_PRESENTATION_ATTRS.has(prop)) {
+                el.setAttribute(prop, val);
+            } else {
+                remainder.push(decl);
+            }
+        }
+
+        if (remainder.length > 0) {
+            el.setAttribute('style', remainder.join('; '));
+        } else {
+            el.removeAttribute('style');
+        }
+    });
 });

From 93e9bd3aad53808e791302c8fd99d74eb0873385 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 17:44:26 -0300
Subject: [PATCH 594/707] chore(deps): bump github/codeql-action from 3 to 4
 (#9956)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4ab32d27a6..bc20779ae6 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,9 +29,9 @@ jobs:
       uses: actions/checkout@v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

From f9aebd5aa881557d7493db415d04a3d89494d637 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 17:48:56 -0300
Subject: [PATCH 595/707] chore(deps): bump actions/download-artifact from
 4.3.0 to 6.0.0 (#9805)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.3.0 to 6.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4.3.0...v6.0.0)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ed425f9ae5..74791747b6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -186,7 +186,7 @@ jobs:
 
     - name: Download a Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.3.0
+      uses: actions/download-artifact@v6.0.0
       with:
         name: coverage
 
@@ -291,7 +291,7 @@ jobs:
 
     - name: Download Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v4.3.0
+      uses: actions/download-artifact@v6.0.0
       with:
         name: coverage
 

From 7d84aacad621b83753d6701afbcc864592d4822f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 17:50:26 -0300
Subject: [PATCH 596/707] chore(deps): bump the npm group (#10602)

Bumps the npm group in /dev/deploy-to-container with 2 updates: [dockerode](https://github.com/apocas/dockerode) and [tar](https://github.com/isaacs/node-tar).


Updates `dockerode` from 4.0.9 to 4.0.10
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](https://github.com/apocas/dockerode/compare/v4.0.9...v4.0.10)

Updates `tar` from 7.5.11 to 7.5.12
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.12)

---
updated-dependencies:
- dependency-name: dockerode
  dependency-version: 4.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: tar
  dependency-version: 7.5.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 113 ++++++++++------------
 dev/deploy-to-container/package.json      |   4 +-
 2 files changed, 54 insertions(+), 63 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index b62109f0e2..a68f170c4b 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -6,12 +6,12 @@
     "": {
       "name": "deploy-to-container",
       "dependencies": {
-        "dockerode": "^4.0.9",
+        "dockerode": "^4.0.10",
         "fs-extra": "^11.3.4",
         "nanoid": "5.1.7",
         "nanoid-dictionary": "5.0.0",
         "slugify": "1.6.8",
-        "tar": "^7.5.11",
+        "tar": "^7.5.12",
         "yargs": "^17.7.2"
       },
       "engines": {
@@ -160,7 +160,6 @@
       "version": "0.2.6",
       "resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
       "integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
-      "license": "MIT",
       "dependencies": {
         "safer-buffer": "~2.1.0"
       }
@@ -188,7 +187,6 @@
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
       "integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
-      "license": "BSD-3-Clause",
       "dependencies": {
         "tweetnacl": "^0.14.3"
       }
@@ -227,9 +225,9 @@
       }
     },
     "node_modules/buildcheck": {
-      "version": "0.0.6",
-      "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.6.tgz",
-      "integrity": "sha512-8f9ZJCUXyT1M35Jx7MkBgmBMo3oHTTBIPLiY9xyL0pl3T5RwcPEY8cUHr5LBNfu/fk6c2T4DJZuVM/8ZZT2D2A==",
+      "version": "0.0.7",
+      "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.7.tgz",
+      "integrity": "sha512-lHblz4ahamxpTmnsk+MNTRWsjYKv965MwOrSJyeD588rR3Jcu7swE+0wN5F+PbL5cjgu/9ObkhfzEPuofEMwLA==",
       "optional": true,
       "engines": {
         "node": ">=10.0.0"
@@ -284,10 +282,9 @@
       }
     },
     "node_modules/debug": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
-      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
-      "license": "MIT",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dependencies": {
         "ms": "^2.1.3"
       },
@@ -301,10 +298,9 @@
       }
     },
     "node_modules/docker-modem": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
-      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
-      "license": "Apache-2.0",
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.7.tgz",
+      "integrity": "sha512-XJgGhoR/CLpqshm4d3L7rzH6t8NgDFUIIpztYlLHIApeJjMZKYJMz2zxPsYxnejq5h3ELYSw/RBsi3t5h7gNTA==",
       "dependencies": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -316,14 +312,14 @@
       }
     },
     "node_modules/dockerode": {
-      "version": "4.0.9",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.9.tgz",
-      "integrity": "sha512-iND4mcOWhPaCNh54WmK/KoSb35AFqPAUWFMffTQcp52uQt36b5uNwEJTSXntJZBbeGad72Crbi/hvDIv6us/6Q==",
+      "version": "4.0.10",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.10.tgz",
+      "integrity": "sha512-8L/P9JynLBiG7/coiA4FlQXegHltRqS0a+KqI44P1zgQh8QLHTg7FKOwhkBgSJwZTeHsq30WRoVFLuwkfK0YFg==",
       "dependencies": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
-        "docker-modem": "^5.0.6",
+        "docker-modem": "^5.0.7",
         "protobufjs": "^7.3.2",
         "tar-fs": "^2.1.4",
         "uuid": "^10.0.0"
@@ -464,14 +460,12 @@
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
-      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
-      "license": "MIT"
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "node_modules/nan": {
-      "version": "2.22.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
-      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
-      "license": "MIT",
+      "version": "2.26.2",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.26.2.tgz",
+      "integrity": "sha512-0tTvBTYkt3tdGw22nrAy50x7gpbGCCFH3AFcyS5WiUu7Eu4vWlri1woE6qHBSfy11vksDqkiwjOnlR7WV8G1Hw==",
       "optional": true
     },
     "node_modules/nanoid": {
@@ -580,8 +574,7 @@
     "node_modules/safer-buffer": {
       "version": "2.1.2",
       "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
-      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
-      "license": "MIT"
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
     },
     "node_modules/slugify": {
       "version": "1.6.8",
@@ -594,13 +587,12 @@
     "node_modules/split-ca": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/split-ca/-/split-ca-1.0.1.tgz",
-      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ==",
-      "license": "ISC"
+      "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
     },
     "node_modules/ssh2": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
-      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
+      "version": "1.17.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.17.0.tgz",
+      "integrity": "sha512-wPldCk3asibAjQ/kziWQQt1Wh3PgDFpC0XpwclzKcdT1vql6KeYxf5LIt4nlFkUeR8WuphYMKqUA56X4rjbfgQ==",
       "hasInstallScript": true,
       "dependencies": {
         "asn1": "^0.2.6",
@@ -611,7 +603,7 @@
       },
       "optionalDependencies": {
         "cpu-features": "~0.0.10",
-        "nan": "^2.20.0"
+        "nan": "^2.23.0"
       }
     },
     "node_modules/string_decoder": {
@@ -647,9 +639,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.11",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
-      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
+      "version": "7.5.12",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.12.tgz",
+      "integrity": "sha512-9TsuLcdhOn4XztcQqhNyq1KOwOOED/3k58JAvtULiYqbO8B/0IBAAIE1hj0Svmm58k27TmcigyDI0deMlgG3uw==",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
@@ -698,8 +690,7 @@
     "node_modules/tweetnacl": {
       "version": "0.14.5",
       "resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
-      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
-      "license": "Unlicense"
+      "integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA=="
     },
     "node_modules/undici-types": {
       "version": "6.20.0",
@@ -949,9 +940,9 @@
       }
     },
     "buildcheck": {
-      "version": "0.0.6",
-      "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.6.tgz",
-      "integrity": "sha512-8f9ZJCUXyT1M35Jx7MkBgmBMo3oHTTBIPLiY9xyL0pl3T5RwcPEY8cUHr5LBNfu/fk6c2T4DJZuVM/8ZZT2D2A==",
+      "version": "0.0.7",
+      "resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.7.tgz",
+      "integrity": "sha512-lHblz4ahamxpTmnsk+MNTRWsjYKv965MwOrSJyeD588rR3Jcu7swE+0wN5F+PbL5cjgu/9ObkhfzEPuofEMwLA==",
       "optional": true
     },
     "chownr": {
@@ -993,17 +984,17 @@
       }
     },
     "debug": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
-      "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "requires": {
         "ms": "^2.1.3"
       }
     },
     "docker-modem": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.6.tgz",
-      "integrity": "sha512-ens7BiayssQz/uAxGzH8zGXCtiV24rRWXdjNha5V4zSOcxmAZsfGVm/PPFbwQdqEkDnhG+SyR9E3zSHUbOKXBQ==",
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/docker-modem/-/docker-modem-5.0.7.tgz",
+      "integrity": "sha512-XJgGhoR/CLpqshm4d3L7rzH6t8NgDFUIIpztYlLHIApeJjMZKYJMz2zxPsYxnejq5h3ELYSw/RBsi3t5h7gNTA==",
       "requires": {
         "debug": "^4.1.1",
         "readable-stream": "^3.5.0",
@@ -1012,14 +1003,14 @@
       }
     },
     "dockerode": {
-      "version": "4.0.9",
-      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.9.tgz",
-      "integrity": "sha512-iND4mcOWhPaCNh54WmK/KoSb35AFqPAUWFMffTQcp52uQt36b5uNwEJTSXntJZBbeGad72Crbi/hvDIv6us/6Q==",
+      "version": "4.0.10",
+      "resolved": "https://registry.npmjs.org/dockerode/-/dockerode-4.0.10.tgz",
+      "integrity": "sha512-8L/P9JynLBiG7/coiA4FlQXegHltRqS0a+KqI44P1zgQh8QLHTg7FKOwhkBgSJwZTeHsq30WRoVFLuwkfK0YFg==",
       "requires": {
         "@balena/dockerignore": "^1.0.2",
         "@grpc/grpc-js": "^1.11.1",
         "@grpc/proto-loader": "^0.7.13",
-        "docker-modem": "^5.0.6",
+        "docker-modem": "^5.0.7",
         "protobufjs": "^7.3.2",
         "tar-fs": "^2.1.4",
         "uuid": "^10.0.0"
@@ -1126,9 +1117,9 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "nan": {
-      "version": "2.22.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.22.0.tgz",
-      "integrity": "sha512-nbajikzWTMwsW+eSsNm3QwlOs7het9gGJU5dDZzRTQGk03vyBOauxgI4VakDzE0PtsGTmXPsXTbbjVhRwR5mpw==",
+      "version": "2.26.2",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.26.2.tgz",
+      "integrity": "sha512-0tTvBTYkt3tdGw22nrAy50x7gpbGCCFH3AFcyS5WiUu7Eu4vWlri1woE6qHBSfy11vksDqkiwjOnlR7WV8G1Hw==",
       "optional": true
     },
     "nanoid": {
@@ -1213,14 +1204,14 @@
       "integrity": "sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ=="
     },
     "ssh2": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.16.0.tgz",
-      "integrity": "sha512-r1X4KsBGedJqo7h8F5c4Ybpcr5RjyP+aWIG007uBPRjmdQWfEiVLzSK71Zji1B9sKxwaCvD8y8cwSkYrlLiRRg==",
+      "version": "1.17.0",
+      "resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.17.0.tgz",
+      "integrity": "sha512-wPldCk3asibAjQ/kziWQQt1Wh3PgDFpC0XpwclzKcdT1vql6KeYxf5LIt4nlFkUeR8WuphYMKqUA56X4rjbfgQ==",
       "requires": {
         "asn1": "^0.2.6",
         "bcrypt-pbkdf": "^1.0.2",
         "cpu-features": "~0.0.10",
-        "nan": "^2.20.0"
+        "nan": "^2.23.0"
       }
     },
     "string_decoder": {
@@ -1250,9 +1241,9 @@
       }
     },
     "tar": {
-      "version": "7.5.11",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
-      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
+      "version": "7.5.12",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.12.tgz",
+      "integrity": "sha512-9TsuLcdhOn4XztcQqhNyq1KOwOOED/3k58JAvtULiYqbO8B/0IBAAIE1hj0Svmm58k27TmcigyDI0deMlgG3uw==",
       "requires": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index 1c95a4540c..aa9e82dbdf 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -2,12 +2,12 @@
   "name": "deploy-to-container",
   "type": "module",
   "dependencies": {
-    "dockerode": "^4.0.9",
+    "dockerode": "^4.0.10",
     "fs-extra": "^11.3.4",
     "nanoid": "5.1.7",
     "nanoid-dictionary": "5.0.0",
     "slugify": "1.6.8",
-    "tar": "^7.5.11",
+    "tar": "^7.5.12",
     "yargs": "^17.7.2"
   },
   "engines": {

From 3d00e594e6a667fe8084bc8548d6993c29d515e6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 23 Mar 2026 19:50:19 -0300
Subject: [PATCH 597/707] chore(deps): bump more action versions (#10608)

---
 .github/workflows/build-base-app.yml          |  6 +++---
 .github/workflows/build-devblobstore.yml      |  6 +++---
 .github/workflows/build-mq-broker.yml         |  6 +++---
 .github/workflows/build.yml                   | 10 +++++-----
 .github/workflows/dev-assets-sync-nightly.yml |  4 ++--
 5 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 2b937cbfef..1b0855cc47 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -31,17 +31,17 @@ jobs:
       uses: docker/setup-qemu-action@v3
     
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@v4
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Docker Build & Push
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       env:
         DOCKER_BUILD_SUMMARY: false
       with:
diff --git a/.github/workflows/build-devblobstore.yml b/.github/workflows/build-devblobstore.yml
index 41b2e0d47a..14c4b1a135 100644
--- a/.github/workflows/build-devblobstore.yml
+++ b/.github/workflows/build-devblobstore.yml
@@ -23,17 +23,17 @@ jobs:
     - uses: actions/checkout@v6
     
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@v4
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Docker Build & Push
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       env:
         DOCKER_BUILD_SUMMARY: false
       with:
diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index 50472122c4..ef7ed2f65c 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -30,10 +30,10 @@ jobs:
       uses: docker/setup-qemu-action@v3
     
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@v4
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
@@ -49,7 +49,7 @@ jobs:
         fi
 
     - name: Docker Build & Push
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       env:
         DOCKER_BUILD_SUMMARY: false
       with:
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 74791747b6..8ec806b229 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -253,10 +253,10 @@ jobs:
         EOL
 
     - name: Setup Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@v4
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
@@ -267,7 +267,7 @@ jobs:
       run: echo "FEATURE_LATEST_TAG=$(echo $GITHUB_REF_NAME | tr / -)" >> $GITHUB_ENV
 
     - name: Build Images
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       env:
         DOCKER_BUILD_SUMMARY: false
       with:
@@ -360,7 +360,7 @@ jobs:
     steps:      
     - name: Notify on Slack (Success)
       if: ${{ !contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v2
+      uses: slackapi/slack-github-action@v3
       with:
         token: ${{ secrets.SLACK_GH_BOT }}
         method: chat.postMessage
@@ -375,7 +375,7 @@ jobs:
                   value: "Completed"
     - name: Notify on Slack (Failure)
       if: ${{ contains(join(needs.*.result, ','), 'failure') }}
-      uses: slackapi/slack-github-action@v2
+      uses: slackapi/slack-github-action@v3
       with:
         token: ${{ secrets.SLACK_GH_BOT }}
         method: chat.postMessage
diff --git a/.github/workflows/dev-assets-sync-nightly.yml b/.github/workflows/dev-assets-sync-nightly.yml
index 926d816b38..cd986f06f3 100644
--- a/.github/workflows/dev-assets-sync-nightly.yml
+++ b/.github/workflows/dev-assets-sync-nightly.yml
@@ -32,14 +32,14 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Docker Build & Push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:

From e51469a5d437491071610156d56dcb73191ad61c Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Fri, 27 Mar 2026 13:44:35 -0400
Subject: [PATCH 598/707] feat: add email/name for ADs and WG Chairs

---
 ietf/api/serializers_rpc.py | 28 +++++++++++++++++++++++++++-
 ietf/group/serializers.py   |  6 ++++++
 2 files changed, 33 insertions(+), 1 deletion(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 397ca05d9b..d888de4586 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -27,7 +27,7 @@
     update_action_holders,
     update_rfcauthors,
 )
-from ietf.group.models import Group
+from ietf.group.models import Group, Role
 from ietf.group.serializers import AreaSerializer
 from ietf.name.models import StreamName, StdLevelName
 from ietf.person.models import Person
@@ -97,6 +97,21 @@ class Meta:
         fields = ["draft_name", "authors"]
 
 
+class WgChairSerializer(serializers.Serializer):
+    """Serialize a WG chair's name and email from a Role"""
+
+    name = serializers.SerializerMethodField()
+    email = serializers.SerializerMethodField()
+
+    @extend_schema_field(serializers.CharField)
+    def get_name(self, role: Role) -> str:
+        return role.person.plain_name()
+
+    @extend_schema_field(serializers.EmailField)
+    def get_email(self, role: Role) -> str:
+        return role.email.email_address()
+
+
 class DocumentAuthorSerializer(serializers.ModelSerializer):
     """Serializer for a Person in a response"""
 
@@ -126,6 +141,7 @@ class FullDraftSerializer(serializers.ModelSerializer):
         source="shepherd.person", read_only=True
     )
     consensus = serializers.SerializerMethodField()
+    wg_chairs = serializers.SerializerMethodField()
 
     class Meta:
         model = Document
@@ -145,11 +161,21 @@ class Meta:
             "consensus",
             "shepherd",
             "ad",
+            "wg_chairs",
         ]
 
     def get_consensus(self, doc: Document) -> Optional[bool]:
         return default_consensus(doc)
 
+    @extend_schema_field(WgChairSerializer(many=True))
+    def get_wg_chairs(self, doc: Document):
+        if doc.group is None:
+            return []
+        chairs = doc.group.role_set.filter(name_id="chair").select_related(
+            "person", "email"
+        )
+        return WgChairSerializer(chairs, many=True).data
+
     def get_source_format(
         self, doc: Document
     ) -> Literal["unknown", "xml-v2", "xml-v3", "txt"]:
diff --git a/ietf/group/serializers.py b/ietf/group/serializers.py
index db3b37af48..e789ba46bf 100644
--- a/ietf/group/serializers.py
+++ b/ietf/group/serializers.py
@@ -20,8 +20,14 @@ class AreaDirectorSerializer(serializers.Serializer):
     Works with Email or Role
     """
 
+    name = serializers.SerializerMethodField()
     email = serializers.SerializerMethodField()
 
+    @extend_schema_field(serializers.CharField)
+    def get_name(self, instance: Email | Role):
+        person = getattr(instance, 'person', None)
+        return person.plain_name() if person else None
+
     @extend_schema_field(serializers.EmailField)
     def get_email(self, instance: Email | Role):
         if isinstance(instance, Role):

From b1cc7edc7ff5e80f7eb0072657e88450a4b2c06b Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Fri, 27 Mar 2026 14:32:07 -0400
Subject: [PATCH 599/707] adapt test

---
 ietf/group/tests_serializers.py | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/ietf/group/tests_serializers.py b/ietf/group/tests_serializers.py
index bf29e6c8fd..b584a17ae2 100644
--- a/ietf/group/tests_serializers.py
+++ b/ietf/group/tests_serializers.py
@@ -31,7 +31,7 @@ def test_serializes_role(self):
         serialized = AreaDirectorSerializer(role).data
         self.assertEqual(
             serialized,
-            {"email": role.email.email_address()},
+            {"email": role.email.email_address(), "name": role.person.plain_name()},
         )
 
     def test_serializes_email(self):
@@ -40,7 +40,10 @@ def test_serializes_email(self):
         serialized = AreaDirectorSerializer(email).data
         self.assertEqual(
             serialized,
-            {"email": email.email_address()},
+            {
+                "email": email.email_address(),
+                "name": email.person.plain_name() if email.person else None,
+            },
         )
 
 
@@ -63,7 +66,10 @@ def test_serializes_active_area(self):
         self.assertEqual(serialized["name"], area.name)
         self.assertCountEqual(
             serialized["ads"],
-            [{"email": ad.email.email_address()} for ad in ad_roles],
+            [
+                {"email": ad.email.email_address(), "name": ad.person.plain_name()}
+                for ad in ad_roles
+            ],
         )
 
     def test_serializes_inactive_area(self):

From 5775077317640de8981cf27b0b8c54e42d8ae9a2 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 1 Apr 2026 18:53:13 -0300
Subject: [PATCH 600/707] fix: limit access to manual post cancellation
 (#10638)

* fix: drop access_token from URL

* test: update test case

* test: remove unneeded test

There is no longer a dedicated manual post cancel action

* chore: update copyrights
---
 ietf/submit/tests.py                   | 30 +++++++++++++++-----------
 ietf/templates/submit/manual_post.html | 16 ++++----------
 2 files changed, 21 insertions(+), 25 deletions(-)

diff --git a/ietf/submit/tests.py b/ietf/submit/tests.py
index 400d0d8c7d..ad361d31b2 100644
--- a/ietf/submit/tests.py
+++ b/ietf/submit/tests.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2011-2023, All Rights Reserved
+# Copyright The IETF Trust 2011-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -207,20 +207,24 @@ def test_manualpost_view(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
-        self.assertIn(
-            urlreverse(
-                "ietf.submit.views.submission_status", 
-                kwargs=dict(submission_id=submission.pk)
-            ),
-            q("#manual.submissions td a").attr("href")
-        )
-        self.assertIn(
-            submission.name,
-            q("#manual.submissions td a").text()
+        # Validate that the basic submission status URL is on the manual post page
+        # _without_ an access token, even if logged in as various users.
+        expected_url = urlreverse(
+            "ietf.submit.views.submission_status", 
+            kwargs=dict(submission_id=submission.pk)
         )
+        selected_elts = q("#manual.submissions td a")
+        self.assertEqual(expected_url, selected_elts.attr("href"))
+        self.assertIn(submission.name, selected_elts.text())
+        for username in ["plain", "secretary"]:
+            self.client.login(username=username, password=username + "+password")
+            r = self.client.get(url)
+            self.assertEqual(r.status_code, 200)
+            q = PyQuery(r.content)
+            selected_elts = q("#manual.submissions td a")
+            self.assertEqual(expected_url, selected_elts.attr("href"))
+            self.assertIn(submission.name, selected_elts.text())
 
-    def test_manualpost_cancel(self):
-        pass
 
 class SubmitTests(BaseSubmitTestCase):
     def setUp(self):
diff --git a/ietf/templates/submit/manual_post.html b/ietf/templates/submit/manual_post.html
index 6e4a2ba42a..0da83e750f 100644
--- a/ietf/templates/submit/manual_post.html
+++ b/ietf/templates/submit/manual_post.html
@@ -1,5 +1,5 @@
 {% extends "submit/submit_base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2026, All Rights Reserved #}
 {% load origin static %}
 {% block pagehead %}
     <link rel="stylesheet" href="{% static "ietf/css/list.css" %}">
@@ -27,17 +27,9 @@ <h2 class="mt-3" id="man_post">Submissions needing manual posting</h2>
             <tbody>
                 {% for s in manual %}
                     <tr>
-                        {% if user.is_authenticated %}
-                            <td>
-                                <a href="{% url "ietf.submit.views.submission_status" submission_id=s.pk access_token=s.access_token %}">
-                                    {{ s.name }}-{{ s.rev }}
-                                </a>
-                            </td>
-                        {% else %}
-                            <td>
-                                <a href="{% url "ietf.submit.views.submission_status" submission_id=s.pk %}">{{ s.name }}-{{ s.rev }}</a>
-                            </td>
-                        {% endif %}
+                        <td>
+                            <a href="{% url "ietf.submit.views.submission_status" submission_id=s.pk %}">{{ s.name }}-{{ s.rev }}</a>
+                        </td>
                         <td>{{ s.submission_date }}</td>
                         <td>
                             {% if s.passes_checks %}

From 6058769a64778679d4b3b5ca5e6937ed5f2ec6c8 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 2 Apr 2026 15:57:49 -0300
Subject: [PATCH 601/707] ci: optional bucket suffix for storage cfg (#10637)

* ci: optional bucket suffix for storage cfg

* style: ruff ruff

* fix: roll back bizarre editor glitch
---
 docker/scripts/app-configure-blobstore.py | 10 +++++++---
 k8s/settings_local.py                     | 22 ++++++++++++++++------
 2 files changed, 23 insertions(+), 9 deletions(-)

diff --git a/docker/scripts/app-configure-blobstore.py b/docker/scripts/app-configure-blobstore.py
index 3140e39306..9ae64e0041 100755
--- a/docker/scripts/app-configure-blobstore.py
+++ b/docker/scripts/app-configure-blobstore.py
@@ -24,10 +24,13 @@ def init_blobstore():
         ),
     )
     for bucketname in ARTIFACT_STORAGE_NAMES:
+        adjusted_bucket_name = (
+            os.environ.get("BLOB_STORE_BUCKET_PREFIX", "")
+            + bucketname
+            + os.environ.get("BLOB_STORE_BUCKET_SUFFIX", "")
+        ).strip()
         try:
-            blobstore.create_bucket(
-                Bucket=f"{os.environ.get('BLOB_STORE_BUCKET_PREFIX', '')}{bucketname}".strip()
-            )
+            blobstore.create_bucket(Bucket=adjusted_bucket_name)
         except botocore.exceptions.ClientError as err:
             if err.response["Error"]["Code"] == "BucketAlreadyExists":
                 print(f"Bucket {bucketname} already exists")
@@ -36,5 +39,6 @@ def init_blobstore():
         else:
             print(f"Bucket {bucketname} created")
 
+
 if __name__ == "__main__":
     sys.exit(init_blobstore())
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 323b7fd45a..b45cbbe260 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -18,7 +18,7 @@
 
 
 def _multiline_to_list(s):
-    """Helper to split at newlines and conver to list"""
+    """Helper to split at newlines and convert to list"""
     return [item.strip() for item in s.split("\n")]
 
 
@@ -80,13 +80,19 @@ def _multiline_to_list(s):
 else:
     raise RuntimeError("DATATRACKER_API_PRIVATE_KEY_PEM_B64 must be set")
 
-_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = os.environ.get("DATATRACKER_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY", None)
+_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = os.environ.get(
+    "DATATRACKER_RED_PRECOMPUTER_TRIGGER_RETRY_DELAY", None
+)
 if _RED_PRECOMPUTER_TRIGGER_RETRY_DELAY is not None:
-    RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = _RED_PRECOMPUTER_TRIGGER_RETRY_DELAY 
-_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES = os.environ.get("DATATRACKER_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES", None)
+    RED_PRECOMPUTER_TRIGGER_RETRY_DELAY = _RED_PRECOMPUTER_TRIGGER_RETRY_DELAY
+_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES = os.environ.get(
+    "DATATRACKER_RED_PRECOMPUTER_TRIGGER_MAX_RETRIES", None
+)
 if _RED_PRECOMPUTER_TRIGGER_MAX_RETRIES is not None:
     RED_PRECOMPUTER_TRIGGER_MAX_RETRIES = _RED_PRECOMPUTER_TRIGGER_MAX_RETRIES
-_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL = os.environ.get("DATATRACKER_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL", None)
+_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL = os.environ.get(
+    "DATATRACKER_TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL", None
+)
 if _TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL is not None:
     TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL = _TRIGGER_RED_PRECOMPUTE_MULTIPLE_URL
 
@@ -387,6 +393,7 @@ def _multiline_to_list(s):
         "and DATATRACKER_BLOB_STORE_SECRET_KEY must be set"
     )
 _blob_store_bucket_prefix = os.environ.get("DATATRACKER_BLOB_STORE_BUCKET_PREFIX", "")
+_blob_store_bucket_suffix = os.environ.get("DATATRACKER_BLOB_STORE_BUCKET_SUFFIX", "")
 _blob_store_enable_profiling = (
     os.environ.get("DATATRACKER_BLOB_STORE_ENABLE_PROFILING", "false").lower() == "true"
 )
@@ -406,6 +413,9 @@ def _multiline_to_list(s):
     if storagename in ["staging"]:
         continue
     replica_storagename = f"r2-{storagename}"
+    adjusted_bucket_name = (
+        _blob_store_bucket_prefix + storagename + _blob_store_bucket_suffix
+    ).strip()
     STORAGES[replica_storagename] = {
         "BACKEND": "ietf.doc.storage.MetadataS3Storage",
         "OPTIONS": dict(
@@ -422,7 +432,7 @@ def _multiline_to_list(s):
                 retries={"total_max_attempts": _blob_store_max_attempts},
             ),
             verify=False,
-            bucket_name=f"{_blob_store_bucket_prefix}{storagename}".strip(),
+            bucket_name=adjusted_bucket_name,
             ietf_log_blob_timing=_blob_store_enable_profiling,
         ),
     }

From a46a2efc05b2e7f5d1b50c76d543e1ca16ae8918 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Tue, 7 Apr 2026 09:25:24 +1200
Subject: [PATCH 602/707] feat: Generate bcp-index.txt (#10631)

* feat: Generate bcp-index.txt

* fix: Fix issue with author names

* feat: Update bcp-index.txt header

* refactor: Generalize some functions

* fix: Sort RFCs

* test: Add tests for bcp-index.txt

* fix: Fix range bug

* test: Add test for BCP entry

* test: Fix test_create_bcp_txt_index
---
 ietf/sync/rfcindex.py             | 98 +++++++++++++++++++++++++++++++
 ietf/sync/tests_rfcindex.py       | 69 ++++++++++++++++++++--
 ietf/templates/sync/bcp-index.txt | 52 ++++++++++++++++
 3 files changed, 215 insertions(+), 4 deletions(-)
 create mode 100644 ietf/templates/sync/bcp-index.txt

diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index 63c2044931..357cc4069a 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -24,6 +24,8 @@
 from ietf.utils.log import log
 
 FORMATS_FOR_INDEX = ["txt", "html", "pdf", "xml", "ps"]
+SS_TXT_MARGIN = 3
+SS_TXT_CUE_COL_WIDTH = 14
 
 
 def format_rfc_number(n):
@@ -267,6 +269,87 @@ def get_rfc_text_index_entries():
     return entries
 
 
+def subseries_text_line(line, first=False):
+    """Return subseries text entry line"""
+    indent = " " * SS_TXT_CUE_COL_WIDTH
+    if first:
+        initial_indent = " " * SS_TXT_MARGIN
+    else:
+        initial_indent = indent
+    return fill(
+        line,
+        initial_indent=initial_indent,
+        subsequent_indent=indent,
+        width=80,
+        break_on_hyphens=False,
+    )
+
+
+def get_bcp_text_index_entries():
+    """Returns BCP entries for bcp-index.txt"""
+    entries = []
+
+    highest_bcp_number = (
+        Document.objects.filter(type_id="bcp")
+        .annotate(
+            number=Cast(
+                Substr("name", 4, None),
+                output_field=models.IntegerField(),
+            )
+        )
+        .order_by("-number")
+        .first()
+        .number
+    )
+
+    for bcp_number in range(1, highest_bcp_number + 1):
+        bcp_name = f"BCP{bcp_number}"
+        bcp = Document.objects.filter(type_id="bcp", name=f"{bcp_name.lower()}").first()
+
+        if bcp:
+            entry = subseries_text_line(
+                (
+                    f"[{bcp_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(bcp_name) - 2 - SS_TXT_MARGIN)}"
+                    f"Best Current Practice {bcp_number},"
+                ),
+                first=True,
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                f"<{settings.RFC_EDITOR_INFO_BASE_URL}{bcp_name.lower()}>."
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                "At the time of writing, this BCP comprises the following:"
+            )
+            entry += "\n\n"
+            rfcs = sorted(bcp.contains(), key=lambda x: x.rfc_number)
+            for rfc in rfcs:
+                authors = ", ".join(
+                    author.format_for_titlepage() for author in rfc.rfcauthor_set.all()
+                )
+                entry += subseries_text_line(
+                    (
+                        f'{authors}, "{rfc.title}", BCP¶{bcp_number}, RFC¶{rfc.rfc_number}, '
+                        f"DOI¶{rfc.doi}, {rfc.pub_date().strftime('%B %Y')}, "
+                        f"<{settings.RFC_EDITOR_INFO_BASE_URL}rfc{rfc.rfc_number}>."
+                    )
+                ).replace("¶", " ")
+                entry += "\n\n"
+        else:
+            entry = subseries_text_line(
+                (
+                    f"[{bcp_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(bcp_name) - 2 - SS_TXT_MARGIN)}"
+                    f"Best Current Practice {bcp_number} currently contains no RFCs"
+                ),
+                first=True,
+            )
+        entries.append(entry)
+    return entries
+
+
 def add_subseries_xml_index_entries(rfc_index, ss_type, include_all=False):
     """Add subseries entries for rfc-index.xml"""
     # subseries docs annotated with numeric number
@@ -481,3 +564,18 @@ def create_rfc_xml_index():
         pretty_print=4,
     )
     save_to_red_bucket("rfc-index.xml", pretty_index)
+
+
+def create_bcp_txt_index():
+    """Create text index of BCPs"""
+    DATE_FMT = "%m/%d/%Y"
+    created_on = timezone.now().strftime(DATE_FMT)
+    log("Creating bcp-index.txt")
+    index = render_to_string(
+        "sync/bcp-index.txt",
+        {
+            "created_on": created_on,
+            "bcps": get_bcp_text_index_entries(),
+        },
+    )
+    save_to_red_bucket("bcp-index.txt", index)
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index e682c016f5..cad5b577d4 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -7,16 +7,22 @@
 from django.test.utils import override_settings
 from lxml import etree
 
-from ietf.doc.factories import PublishedRfcDocEventFactory, IndividualRfcFactory
+from ietf.doc.factories import (
+    BcpFactory,
+    IndividualRfcFactory,
+    PublishedRfcDocEventFactory,
+)
 from ietf.name.models import DocTagName
 from ietf.sync.rfcindex import (
+    create_bcp_txt_index,
     create_rfc_txt_index,
     create_rfc_xml_index,
     format_rfc_number,
-    save_to_red_bucket,
-    get_unusable_rfc_numbers,
     get_april1_rfc_numbers,
     get_publication_std_levels,
+    get_unusable_rfc_numbers,
+    save_to_red_bucket,
+    subseries_text_line,
 )
 from ietf.utils.test_utils import TestCase
 
@@ -69,6 +75,9 @@ def setUp(self):
         ).doc
         self.rfc.tags.add(DocTagName.objects.get(slug="errata"))
 
+        # Create a BCP with non-April Fools RFC
+        self.bcp = BcpFactory(contains=[self.rfc], name="bcp11")
+
         # Set up a publication-std-levels.json file to indicate the publication
         # standard of self.rfc as different from its current value
         red_bucket.save(
@@ -137,7 +146,7 @@ def test_create_rfc_xml_index(self, mock_save):
 
         children = list(index)  # elements as list
         # Should be one rfc-not-issued-entry
-        self.assertEqual(len(children), 3)
+        self.assertEqual(len(children), 14)
         self.assertEqual(
             [
                 c.find(f"{ns}doc-id").text
@@ -184,6 +193,53 @@ def test_create_rfc_xml_index(self, mock_save):
             [(f"{ns}month", "April"), (f"{ns}year", "2021")],
         )
 
+    @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
+    def test_create_bcp_txt_index(self, mock_save):
+        create_bcp_txt_index()
+        self.assertEqual(mock_save.call_count, 1)
+        self.assertEqual(mock_save.call_args[0][0], "bcp-index.txt")
+        contents = mock_save.call_args[0][1]
+        self.assertTrue(isinstance(contents, str))
+        # starts from 1
+        self.assertIn(
+            "[BCP1]",
+            contents,
+        )
+        # fill up to 11
+        self.assertIn(
+            "[BCP10]",
+            contents,
+        )
+        # but not to 12
+        self.assertNotIn(
+            "[BCP12]",
+            contents,
+        )
+        # Test empty BCPs
+        self.assertIn(
+            "Best Current Practice 9 currently contains no RFCs",
+            contents,
+        )
+        # No zero prefix!
+        self.assertNotIn(
+            "[BCP0001]",
+            contents,
+        )
+        # Has BCP11 with a RFC
+        self.assertIn(
+            "Best Current Practice 11,",
+            contents,
+        )
+        self.assertIn(
+            f'"{self.rfc.title}"',
+            contents,
+        )
+        self.assertIn(
+            f'BCP 11, RFC {self.rfc.rfc_number},',
+            contents,
+        )
+
 
 class HelperTests(TestCase):
     def test_format_rfc_number(self):
@@ -234,3 +290,8 @@ def test_get_publication_std_levels_raises(self):
         with self.assertRaises(json.JSONDecodeError):
             get_publication_std_levels()
         red_bucket.delete("publication-std-levels.json")
+
+    def test_subseries_text_line(self):
+        text = "foobar"
+        self.assertEqual(subseries_text_line(line=text, first=True), f"   {text}")
+        self.assertEqual(subseries_text_line(line=text), f"              {text}")
diff --git a/ietf/templates/sync/bcp-index.txt b/ietf/templates/sync/bcp-index.txt
new file mode 100644
index 0000000000..dd19920eba
--- /dev/null
+++ b/ietf/templates/sync/bcp-index.txt
@@ -0,0 +1,52 @@
+
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                             BCP INDEX
+                           -------------
+
+(CREATED ON: {{created_on}}.)
+
+This file contains citations for all BCPs in numeric order.  The BCPs
+form a sub-series of the RFC document series, specifically those RFCs
+with the status BEST CURRENT PRACTICE.
+
+BCP citations appear in this format:
+
+   [BCP#]     Best Current Practice #,
+              <BCP URL>.
+              At the time of writing, this BCP comprises the following:
+
+              Author 1, Author 2, "Title of the RFC", BCP #, RFC №,
+              DOI DOI string, Issue date,
+              <RFC URL>.
+
+For example:
+
+   [BCP3]     Best Current Practice 3,
+              <https://www.rfc-editor.org/info/bcp3>.
+              At the time of writing, this BCP comprises the following:
+
+              F. Kastenholz, "Variance for The PPP Compression Control Protocol
+              and The PPP Encryption Control Protocol", BCP 3, RFC 1915,
+              DOI 10.17487/RFC1915, February 1996,
+              <https://www.rfc-editor.org/info/rfc1915>.
+
+Key to fields:
+
+# is the BCP number.
+
+№ is the RFC number.
+
+BCPs and other RFCs may be obtained from https://www.rfc-editor.org.
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                                BCP INDEX
+                                ---------
+   
+
+
+{% for bcp in bcps %}{{bcp|safe}}
+
+{% endfor %}

From 7c7219f0dcf326f369c7b4bd04337f95f0a7a9f4 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Wed, 8 Apr 2026 11:16:57 +1200
Subject: [PATCH 603/707] feat: Generate std-index.txt (#10665)

* feat: Generate std-index.txt

* style: Ruff ruff

Good boy!

* test: Fix flaky test

* test: Add tests for std-index.txt
---
 ietf/sync/rfcindex.py             | 80 +++++++++++++++++++++++++++++++
 ietf/sync/tests_rfcindex.py       | 64 ++++++++++++++++++++++++-
 ietf/templates/sync/std-index.txt | 51 ++++++++++++++++++++
 3 files changed, 193 insertions(+), 2 deletions(-)
 create mode 100644 ietf/templates/sync/std-index.txt

diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index 357cc4069a..6a6a4bfa9f 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -350,6 +350,71 @@ def get_bcp_text_index_entries():
     return entries
 
 
+def get_std_text_index_entries():
+    """Returns STD entries for std-index.txt"""
+    entries = []
+
+    highest_std_number = (
+        Document.objects.filter(type_id="std")
+        .annotate(
+            number=Cast(
+                Substr("name", 4, None),
+                output_field=models.IntegerField(),
+            )
+        )
+        .order_by("-number")
+        .first()
+        .number
+    )
+
+    for std_number in range(1, highest_std_number + 1):
+        std_name = f"STD{std_number}"
+        std = Document.objects.filter(type_id="std", name=f"{std_name.lower()}").first()
+
+        if std and std.contains():
+            entry = subseries_text_line(
+                (
+                    f"[{std_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(std_name) - 2 - SS_TXT_MARGIN)}"
+                    f"Internet Standard {std_number},"
+                ),
+                first=True,
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                f"<{settings.RFC_EDITOR_INFO_BASE_URL}{std_name.lower()}>."
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                "At the time of writing, this STD comprises the following:"
+            )
+            entry += "\n\n"
+            rfcs = sorted(std.contains(), key=lambda x: x.rfc_number)
+            for rfc in rfcs:
+                authors = ", ".join(
+                    author.format_for_titlepage() for author in rfc.rfcauthor_set.all()
+                )
+                entry += subseries_text_line(
+                    (
+                        f'{authors}, "{rfc.title}", STD¶{std_number}, RFC¶{rfc.rfc_number}, '
+                        f"DOI¶{rfc.doi}, {rfc.pub_date().strftime('%B %Y')}, "
+                        f"<{settings.RFC_EDITOR_INFO_BASE_URL}rfc{rfc.rfc_number}>."
+                    )
+                ).replace("¶", " ")
+                entry += "\n\n"
+        else:
+            entry = subseries_text_line(
+                (
+                    f"[{std_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(std_name) - 2 - SS_TXT_MARGIN)}"
+                    f"Internet Standard {std_number} currently contains no RFCs"
+                ),
+                first=True,
+            )
+        entries.append(entry)
+    return entries
+
+
 def add_subseries_xml_index_entries(rfc_index, ss_type, include_all=False):
     """Add subseries entries for rfc-index.xml"""
     # subseries docs annotated with numeric number
@@ -579,3 +644,18 @@ def create_bcp_txt_index():
         },
     )
     save_to_red_bucket("bcp-index.txt", index)
+
+
+def create_std_txt_index():
+    """Create text index of STDs"""
+    DATE_FMT = "%m/%d/%Y"
+    created_on = timezone.now().strftime(DATE_FMT)
+    log("Creating std-index.txt")
+    index = render_to_string(
+        "sync/std-index.txt",
+        {
+            "created_on": created_on,
+            "stds": get_std_text_index_entries(),
+        },
+    )
+    save_to_red_bucket("std-index.txt", index)
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index cad5b577d4..70bc41b992 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -9,6 +9,7 @@
 
 from ietf.doc.factories import (
     BcpFactory,
+    StdFactory,
     IndividualRfcFactory,
     PublishedRfcDocEventFactory,
 )
@@ -17,6 +18,7 @@
     create_bcp_txt_index,
     create_rfc_txt_index,
     create_rfc_xml_index,
+    create_std_txt_index,
     format_rfc_number,
     get_april1_rfc_numbers,
     get_publication_std_levels,
@@ -78,6 +80,9 @@ def setUp(self):
         # Create a BCP with non-April Fools RFC
         self.bcp = BcpFactory(contains=[self.rfc], name="bcp11")
 
+        # Create a STD with non-April Fools RFC
+        self.std = StdFactory(contains=[self.rfc], name="std11")
+
         # Set up a publication-std-levels.json file to indicate the publication
         # standard of self.rfc as different from its current value
         red_bucket.save(
@@ -146,7 +151,7 @@ def test_create_rfc_xml_index(self, mock_save):
 
         children = list(index)  # elements as list
         # Should be one rfc-not-issued-entry
-        self.assertEqual(len(children), 14)
+        self.assertEqual(len(children), 15)
         self.assertEqual(
             [
                 c.find(f"{ns}doc-id").text
@@ -236,7 +241,62 @@ def test_create_bcp_txt_index(self, mock_save):
             contents,
         )
         self.assertIn(
-            f'BCP 11, RFC {self.rfc.rfc_number},',
+            "BCP 11,",
+            contents,
+        )
+        self.assertIn(
+            f"RFC {self.rfc.rfc_number},",
+            contents,
+        )
+
+    @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
+    def test_create_std_txt_index(self, mock_save):
+        create_std_txt_index()
+        self.assertEqual(mock_save.call_count, 1)
+        self.assertEqual(mock_save.call_args[0][0], "std-index.txt")
+        contents = mock_save.call_args[0][1]
+        self.assertTrue(isinstance(contents, str))
+        # starts from 1
+        self.assertIn(
+            "[STD1]",
+            contents,
+        )
+        # fill up to 11
+        self.assertIn(
+            "[STD10]",
+            contents,
+        )
+        # but not to 12
+        self.assertNotIn(
+            "[STD12]",
+            contents,
+        )
+        # Test empty STDs
+        self.assertIn(
+            "Internet Standard 9 currently contains no RFCs",
+            contents,
+        )
+        # No zero prefix!
+        self.assertNotIn(
+            "[STD0001]",
+            contents,
+        )
+        # Has STD11 with a RFC
+        self.assertIn(
+            "Internet Standard 11,",
+            contents,
+        )
+        self.assertIn(
+            f'"{self.rfc.title}"',
+            contents,
+        )
+        self.assertIn(
+            "STD 11,",
+            contents,
+        )
+        self.assertIn(
+            f"RFC {self.rfc.rfc_number},",
             contents,
         )
 
diff --git a/ietf/templates/sync/std-index.txt b/ietf/templates/sync/std-index.txt
new file mode 100644
index 0000000000..c075d1d43e
--- /dev/null
+++ b/ietf/templates/sync/std-index.txt
@@ -0,0 +1,51 @@
+
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                             STD INDEX
+                           -------------
+
+(CREATED ON: {{created_on}}.)
+
+This file contains citations for all STDs in numeric order.  Each
+STD represents a single Internet Standard technical specification,
+composed of one or more RFCs with Internet Standard status.
+
+STD citations appear in this format:
+
+   [STD#]     Best Current Practice #,
+              <STD URL>.
+              At the time of writing, this STD comprises the following:
+
+              Author 1, Author 2, "Title of the RFC", STD #, RFC №,
+              DOI DOI string, Issue date,
+              <RFC URL>.
+
+For example:
+
+   [STD6]     Internet Standard 6,
+              <https://www.rfc-editor.org/info/std6>.
+              At the time of writing, this STD comprises the following:
+
+              J. Postel, "User Datagram Protocol", STD 6, RFC 768,
+              DOI 10.17487/RFC0768, August 1980,
+              <https://www.rfc-editor.org/info/rfc768>.
+
+Key to fields:
+
+# is the STD number.
+
+№ is the RFC number.
+
+STDs and other RFCs may be obtained from https://www.rfc-editor.org.
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                                STD INDEX
+                                ---------
+   
+
+
+{% for std in stds %}{{std|safe}}
+
+{% endfor %}

From e72ead86dee707b5cbd9aeea96437dbaee78c88d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 12:35:06 -0300
Subject: [PATCH 604/707] chore(deps): bump appleboy/ssh-action from 1.2.2 to
 1.2.5 (#10623)

Bumps [appleboy/ssh-action](https://github.com/appleboy/ssh-action) from 1.2.2 to 1.2.5.
- [Release notes](https://github.com/appleboy/ssh-action/releases)
- [Commits](https://github.com/appleboy/ssh-action/compare/2ead5e36573f08b82fbfce1504f1a4b05a647c6f...0ff4204d59e8e51228ff73bce53f80d53301dee2)

---
updated-dependencies:
- dependency-name: appleboy/ssh-action
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests-az.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
index 8553563a19..833ca89bef 100644
--- a/.github/workflows/tests-az.yml
+++ b/.github/workflows/tests-az.yml
@@ -38,7 +38,7 @@ jobs:
         ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
 
     - name: Remote SSH into VM
-      uses: appleboy/ssh-action@2ead5e36573f08b82fbfce1504f1a4b05a647c6f
+      uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:

From c7657c3f22f5f7a906fd2cf01aaed7b54feca9e3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 12:37:35 -0300
Subject: [PATCH 605/707] chore(deps): bump
 stefanzweifel/git-auto-commit-action from 6 to 7 (#10624)

Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 6 to 7.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v6...v7)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-base-app.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 1b0855cc47..5e274838a1 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -60,7 +60,7 @@ jobs:
         echo "${{ env.IMGVERSION }}" > dev/build/TARGET_BASE
 
     - name: Commit CHANGELOG.md
-      uses: stefanzweifel/git-auto-commit-action@v6
+      uses: stefanzweifel/git-auto-commit-action@v7
       with:
         branch: ${{ github.ref_name }}
         commit_message: 'ci: update base image target version to ${{ env.IMGVERSION }}'

From f39e916a73eaab6c0172a09e98c28ba628b7bcc4 Mon Sep 17 00:00:00 2001
From: Eric Rescorla <ekr@rtfm.com>
Date: Wed, 8 Apr 2026 08:50:19 -0700
Subject: [PATCH 606/707] fix: Rewrite upper right document search box (#10538)

* Rewrite upper right document search box. Fixes #10358

This is a fix to the problem where the first item in the dropdown
is auto-selected and then when you hit return you go to that
rather than searching for what's in the text field.

It appears to be challenging to get this behavior with select2,
so this is actually a rewrite of the box with explicit behavior.
As a side effect, the draft names actually render a bit better.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Respond to review comments

---------

Co-authored-by: EKR aibot <ekr.aibot@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
---
 ietf/static/css/ietf.scss           |  17 +++++
 ietf/static/js/navbar-doc-search.js | 113 ++++++++++++++++++++++++++++
 ietf/templates/base.html            |  24 +++---
 package.json                        |   1 +
 4 files changed, 143 insertions(+), 12 deletions(-)
 create mode 100644 ietf/static/js/navbar-doc-search.js

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index df973863d5..6695c57b13 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -1216,3 +1216,20 @@ iframe.status {
 .overflow-shadows--bottom-only {
     box-shadow: inset 0px -21px 18px -20px var(--bs-body-color);
 }
+
+#navbar-doc-search-wrapper {
+    position: relative;
+}
+
+#navbar-doc-search-results {
+    max-height: 400px;
+    overflow-y: auto;
+    min-width: auto;
+    left: 0;
+    right: 0;
+
+    .dropdown-item {
+        white-space: normal;
+        overflow-wrap: break-word;
+    }
+}
diff --git a/ietf/static/js/navbar-doc-search.js b/ietf/static/js/navbar-doc-search.js
new file mode 100644
index 0000000000..c36c032310
--- /dev/null
+++ b/ietf/static/js/navbar-doc-search.js
@@ -0,0 +1,113 @@
+$(function () {
+    var $input = $('#navbar-doc-search');
+    var $results = $('#navbar-doc-search-results');
+    var ajaxUrl = $input.data('ajax-url');
+    var debounceTimer = null;
+    var highlightedIndex = -1;
+    var keyboardHighlight = false;
+    var currentItems = [];
+
+    function showDropdown() {
+        $results.addClass('show');
+    }
+
+    function hideDropdown() {
+        $results.removeClass('show');
+        highlightedIndex = -1;
+        keyboardHighlight = false;
+        updateHighlight();
+    }
+
+    function updateHighlight() {
+        $results.find('.dropdown-item').removeClass('active');
+        if (highlightedIndex >= 0 && highlightedIndex < currentItems.length) {
+            $results.find('.dropdown-item').eq(highlightedIndex).addClass('active');
+        }
+    }
+
+    function doSearch(query) {
+        if (query.length < 2) {
+            hideDropdown();
+            return;
+        }
+        $.ajax({
+            url: ajaxUrl,
+            dataType: 'json',
+            data: { q: query },
+            success: function (data) {
+                currentItems = data;
+                highlightedIndex = -1;
+                $results.empty();
+                if (data.length === 0) {
+                    $results.append('<li><span class="dropdown-item text-muted">No results found</span></li>');
+                } else {
+                    data.forEach(function (item) {
+                        var $li = $('<li>');
+                        var $a = $('<a class="dropdown-item" href="' + item.url + '">' + item.text + '</a>');
+                        $li.append($a);
+                        $results.append($li);
+                    });
+                }
+                showDropdown();
+            }
+        });
+    }
+
+    $input.on('input', function () {
+        clearTimeout(debounceTimer);
+        var query = $(this).val().trim();
+        debounceTimer = setTimeout(function () {
+            doSearch(query);
+        }, 250);
+    });
+
+    $input.on('keydown', function (e) {
+        if (e.key === 'ArrowDown') {
+            e.preventDefault();
+            if (highlightedIndex < currentItems.length - 1) {
+                highlightedIndex++;
+                keyboardHighlight = true;
+                updateHighlight();
+            }
+        } else if (e.key === 'ArrowUp') {
+            e.preventDefault();
+            if (highlightedIndex > 0) {
+                highlightedIndex--;
+                keyboardHighlight = true;
+                updateHighlight();
+            }
+        } else if (e.key === 'Enter') {
+            e.preventDefault();
+            if (keyboardHighlight && highlightedIndex >= 0 && highlightedIndex < currentItems.length) {
+                window.location.href = currentItems[highlightedIndex].url;
+            } else {
+                var query = $(this).val().trim();
+                if (query) {
+                    window.location.href = '/doc/search/?name=' + encodeURIComponent(query) + '&rfcs=on&activedrafts=on&olddrafts=on';
+                }
+            }
+        } else if (e.key === 'Escape') {
+            hideDropdown();
+            $input.blur();
+        }
+    });
+
+    // Hover highlights (visual only — Enter still submits the text)
+    $results.on('mouseenter', '.dropdown-item', function () {
+        highlightedIndex = $results.find('.dropdown-item').index(this);
+        keyboardHighlight = false;
+        updateHighlight();
+    });
+
+    $results.on('mouseleave', '.dropdown-item', function () {
+        highlightedIndex = -1;
+        updateHighlight();
+    });
+
+    // Click outside closes dropdown
+    $(document).on('click', function (e) {
+        if (!$(e.target).closest('#navbar-doc-search-wrapper').length) {
+            hideDropdown();
+        }
+    });
+});
diff --git a/ietf/templates/base.html b/ietf/templates/base.html
index 25ce50c467..b0df04f30a 100644
--- a/ietf/templates/base.html
+++ b/ietf/templates/base.html
@@ -67,13 +67,17 @@
                         </a>
                     {% endif %}
 
-                    <label class="d-none d-md-block" aria-label="Document search">
-                    <input class="form-control select2-field search-select"
-                           id="navbar-doc-search"
-                           data-select2-ajax-url="{% url 'ietf.doc.views_search.ajax_select2_search_docs' model_name='document' doc_type='all' %}"
-                           type="text"
-                           data-placeholder="Document search">
-                   </label>
+                    <div class="d-none d-md-block dropdown" id="navbar-doc-search-wrapper">
+                        <input class="form-control"
+                               id="navbar-doc-search"
+                               type="text"
+                               placeholder="Document search"
+                               autocomplete="off"
+                               data-ajax-url="{% url 'ietf.doc.views_search.ajax_select2_search_docs' model_name='document' doc_type='all' %}"
+                               aria-label="Document search">
+                        <ul class="dropdown-menu" id="navbar-doc-search-results">
+                        </ul>
+                    </div>
                 </div>
                 <button class="navbar-toggler"
                         type="button"
@@ -164,11 +168,7 @@
         {% block js %}
         {% endblock %}
         <script src="{% static 'ietf/js/select2.js' %}"></script>
-        <script>
-            $('#navbar-doc-search').on('select2:select', function (e) {
-                window.location.href = e.params.data.url;
-            });
-        </script>
+        <script src="{% static 'ietf/js/navbar-doc-search.js' %}"></script>
       {% analytical_body_bottom %}
     </body>
 </html>
diff --git a/package.json b/package.json
index bb71250c4b..57642d7860 100644
--- a/package.json
+++ b/package.json
@@ -147,6 +147,7 @@
         "ietf/static/js/manage-review-requests.js",
         "ietf/static/js/meeting-interim-request.js",
         "ietf/static/js/moment.js",
+        "ietf/static/js/navbar-doc-search.js",
         "ietf/static/js/password_strength.js",
         "ietf/static/js/select2.js",
         "ietf/static/js/session_details.js",

From a85432fecfa4c7f2ee0ad2dfcc0073936cb0304b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:27:18 -0300
Subject: [PATCH 607/707] chore(deps): bump actions/download-artifact from
 6.0.0 to 8.0.1 (#10625)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6.0.0...v8.0.1)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 8ec806b229..49a0e5b53b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -186,7 +186,7 @@ jobs:
 
     - name: Download a Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v6.0.0
+      uses: actions/download-artifact@v8.0.1
       with:
         name: coverage
 
@@ -291,7 +291,7 @@ jobs:
 
     - name: Download Coverage Results
       if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v6.0.0
+      uses: actions/download-artifact@v8.0.1
       with:
         name: coverage
 

From 38158873cab134fedbda452351bb750259937bac Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:30:57 -0300
Subject: [PATCH 608/707] chore(deps): bump docker/setup-qemu-action from 3 to
 4 (#10626)

Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/build-base-app.yml  | 2 +-
 .github/workflows/build-mq-broker.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-base-app.yml b/.github/workflows/build-base-app.yml
index 5e274838a1..35172aa299 100644
--- a/.github/workflows/build-base-app.yml
+++ b/.github/workflows/build-base-app.yml
@@ -28,7 +28,7 @@ jobs:
         echo "IMGVERSION=$CURDATE" >> $GITHUB_ENV
 
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@v4
     
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v4
diff --git a/.github/workflows/build-mq-broker.yml b/.github/workflows/build-mq-broker.yml
index ef7ed2f65c..b297e34b47 100644
--- a/.github/workflows/build-mq-broker.yml
+++ b/.github/workflows/build-mq-broker.yml
@@ -27,7 +27,7 @@ jobs:
     - uses: actions/checkout@v6
 
     - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@v4
     
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v4

From e774233b8dfbbe5717156f55cc1f4fcdbb5f5686 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:32:25 -0300
Subject: [PATCH 609/707] chore(deps): bump codecov/codecov-action from 5 to 6
 (#10628)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index be7b834b7a..30b2771897 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -75,7 +75,7 @@ jobs:
         path: geckodriver.log
 
     - name: Upload Coverage Results to Codecov
-      uses: codecov/codecov-action@v5
+      uses: codecov/codecov-action@v6
       with:
         disable_search: true
         files: coverage.xml

From a52f18d4a8c8b7aee0bb0556e77c256e2845e6c1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 13:47:13 -0300
Subject: [PATCH 610/707] chore(deps): bump the npm group across 1 directory
 with 2 updates (#10658)

Bumps the npm group with 2 updates in the /dev/deploy-to-container directory: [slugify](https://github.com/simov/slugify) and [tar](https://github.com/isaacs/node-tar).


Updates `slugify` from 1.6.8 to 1.6.9
- [Changelog](https://github.com/simov/slugify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simov/slugify/commits)

Updates `tar` from 7.5.12 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.12...v7.5.13)

---
updated-dependencies:
- dependency-name: slugify
  dependency-version: 1.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 dev/deploy-to-container/package-lock.json | 28 +++++++++++------------
 dev/deploy-to-container/package.json      |  4 ++--
 2 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/dev/deploy-to-container/package-lock.json b/dev/deploy-to-container/package-lock.json
index a68f170c4b..5d5bef5604 100644
--- a/dev/deploy-to-container/package-lock.json
+++ b/dev/deploy-to-container/package-lock.json
@@ -10,8 +10,8 @@
         "fs-extra": "^11.3.4",
         "nanoid": "5.1.7",
         "nanoid-dictionary": "5.0.0",
-        "slugify": "1.6.8",
-        "tar": "^7.5.12",
+        "slugify": "1.6.9",
+        "tar": "^7.5.13",
         "yargs": "^17.7.2"
       },
       "engines": {
@@ -577,9 +577,9 @@
       "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
     },
     "node_modules/slugify": {
-      "version": "1.6.8",
-      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.8.tgz",
-      "integrity": "sha512-HVk9X1E0gz3mSpoi60h/saazLKXKaZThMLU3u/aNwoYn8/xQyX2MGxL0ui2eaokkD7tF+Zo+cKTHUbe1mmmGzA==",
+      "version": "1.6.9",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.9.tgz",
+      "integrity": "sha512-vZ7rfeehZui7wQs438JXBckYLkIIdfHOXsaVEUMyS5fHo1483l1bMdo0EDSWYclY0yZKFOipDy4KHuKs6ssvdg==",
       "engines": {
         "node": ">=8.0.0"
       }
@@ -639,9 +639,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.12",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.12.tgz",
-      "integrity": "sha512-9TsuLcdhOn4XztcQqhNyq1KOwOOED/3k58JAvtULiYqbO8B/0IBAAIE1hj0Svmm58k27TmcigyDI0deMlgG3uw==",
+      "version": "7.5.13",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
+      "integrity": "sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
@@ -1194,9 +1194,9 @@
       "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
     },
     "slugify": {
-      "version": "1.6.8",
-      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.8.tgz",
-      "integrity": "sha512-HVk9X1E0gz3mSpoi60h/saazLKXKaZThMLU3u/aNwoYn8/xQyX2MGxL0ui2eaokkD7tF+Zo+cKTHUbe1mmmGzA=="
+      "version": "1.6.9",
+      "resolved": "https://registry.npmjs.org/slugify/-/slugify-1.6.9.tgz",
+      "integrity": "sha512-vZ7rfeehZui7wQs438JXBckYLkIIdfHOXsaVEUMyS5fHo1483l1bMdo0EDSWYclY0yZKFOipDy4KHuKs6ssvdg=="
     },
     "split-ca": {
       "version": "1.0.1",
@@ -1241,9 +1241,9 @@
       }
     },
     "tar": {
-      "version": "7.5.12",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.12.tgz",
-      "integrity": "sha512-9TsuLcdhOn4XztcQqhNyq1KOwOOED/3k58JAvtULiYqbO8B/0IBAAIE1hj0Svmm58k27TmcigyDI0deMlgG3uw==",
+      "version": "7.5.13",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
+      "integrity": "sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==",
       "requires": {
         "@isaacs/fs-minipass": "^4.0.0",
         "chownr": "^3.0.0",
diff --git a/dev/deploy-to-container/package.json b/dev/deploy-to-container/package.json
index aa9e82dbdf..ccc78fc63b 100644
--- a/dev/deploy-to-container/package.json
+++ b/dev/deploy-to-container/package.json
@@ -6,8 +6,8 @@
     "fs-extra": "^11.3.4",
     "nanoid": "5.1.7",
     "nanoid-dictionary": "5.0.0",
-    "slugify": "1.6.8",
-    "tar": "^7.5.12",
+    "slugify": "1.6.9",
+    "tar": "^7.5.13",
     "yargs": "^17.7.2"
   },
   "engines": {

From 83a08c4f073653bc0634d6d9ed1c853686b1d930 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Thu, 9 Apr 2026 06:56:35 +1200
Subject: [PATCH 611/707] fix: Fix typo in std-index template (#10671)

---
 ietf/templates/sync/std-index.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/templates/sync/std-index.txt b/ietf/templates/sync/std-index.txt
index c075d1d43e..a4a5fba946 100644
--- a/ietf/templates/sync/std-index.txt
+++ b/ietf/templates/sync/std-index.txt
@@ -13,7 +13,7 @@ composed of one or more RFCs with Internet Standard status.
 
 STD citations appear in this format:
 
-   [STD#]     Best Current Practice #,
+   [STD#]     Internet Standard #,
               <STD URL>.
               At the time of writing, this STD comprises the following:
 

From 03080a7f5b6034e2cd4b0c9b1d9b7b4bbf74ae61 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Thu, 9 Apr 2026 06:57:07 +1200
Subject: [PATCH 612/707] feat: Generate fyi-index.txt (#10670)

* feat: Generate fyi-index.txt

* test: Add tests for fyi-index.txt
---
 ietf/sync/rfcindex.py             | 80 +++++++++++++++++++++++++++++++
 ietf/sync/tests_rfcindex.py       | 58 +++++++++++++++++++++-
 ietf/templates/sync/fyi-index.txt | 52 ++++++++++++++++++++
 3 files changed, 189 insertions(+), 1 deletion(-)
 create mode 100644 ietf/templates/sync/fyi-index.txt

diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index 6a6a4bfa9f..0ea6fb939f 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -415,6 +415,71 @@ def get_std_text_index_entries():
     return entries
 
 
+def get_fyi_text_index_entries():
+    """Returns FYI entries for fyi-index.txt"""
+    entries = []
+
+    highest_fyi_number = (
+        Document.objects.filter(type_id="fyi")
+        .annotate(
+            number=Cast(
+                Substr("name", 4, None),
+                output_field=models.IntegerField(),
+            )
+        )
+        .order_by("-number")
+        .first()
+        .number
+    )
+
+    for fyi_number in range(1, highest_fyi_number + 1):
+        fyi_name = f"FYI{fyi_number}"
+        fyi = Document.objects.filter(type_id="fyi", name=f"{fyi_name.lower()}").first()
+
+        if fyi and fyi.contains():
+            entry = subseries_text_line(
+                (
+                    f"[{fyi_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(fyi_name) - 2 - SS_TXT_MARGIN)}"
+                    f"For Your Information {fyi_number},"
+                ),
+                first=True,
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                f"<{settings.RFC_EDITOR_INFO_BASE_URL}{fyi_name.lower()}>."
+            )
+            entry += "\n"
+            entry += subseries_text_line(
+                "At the time of writing, this FYI comprises the following:"
+            )
+            entry += "\n\n"
+            rfcs = sorted(fyi.contains(), key=lambda x: x.rfc_number)
+            for rfc in rfcs:
+                authors = ", ".join(
+                    author.format_for_titlepage() for author in rfc.rfcauthor_set.all()
+                )
+                entry += subseries_text_line(
+                    (
+                        f'{authors}, "{rfc.title}", FYI¶{fyi_number}, RFC¶{rfc.rfc_number}, '
+                        f"DOI¶{rfc.doi}, {rfc.pub_date().strftime('%B %Y')}, "
+                        f"<{settings.RFC_EDITOR_INFO_BASE_URL}rfc{rfc.rfc_number}>."
+                    )
+                ).replace("¶", " ")
+                entry += "\n\n"
+        else:
+            entry = subseries_text_line(
+                (
+                    f"[{fyi_name}]"
+                    f"{' ' * (SS_TXT_CUE_COL_WIDTH - len(fyi_name) - 2 - SS_TXT_MARGIN)}"
+                    f"For Your Information {fyi_number} currently contains no RFCs"
+                ),
+                first=True,
+            )
+        entries.append(entry)
+    return entries
+
+
 def add_subseries_xml_index_entries(rfc_index, ss_type, include_all=False):
     """Add subseries entries for rfc-index.xml"""
     # subseries docs annotated with numeric number
@@ -659,3 +724,18 @@ def create_std_txt_index():
         },
     )
     save_to_red_bucket("std-index.txt", index)
+
+
+def create_fyi_txt_index():
+    """Create text index of FYIs"""
+    DATE_FMT = "%m/%d/%Y"
+    created_on = timezone.now().strftime(DATE_FMT)
+    log("Creating fyi-index.txt")
+    index = render_to_string(
+        "sync/fyi-index.txt",
+        {
+            "created_on": created_on,
+            "fyis": get_fyi_text_index_entries(),
+        },
+    )
+    save_to_red_bucket("fyi-index.txt", index)
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index 70bc41b992..541ffbb228 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -9,6 +9,7 @@
 
 from ietf.doc.factories import (
     BcpFactory,
+    FyiFactory,
     StdFactory,
     IndividualRfcFactory,
     PublishedRfcDocEventFactory,
@@ -16,6 +17,7 @@
 from ietf.name.models import DocTagName
 from ietf.sync.rfcindex import (
     create_bcp_txt_index,
+    create_fyi_txt_index,
     create_rfc_txt_index,
     create_rfc_xml_index,
     create_std_txt_index,
@@ -83,6 +85,9 @@ def setUp(self):
         # Create a STD with non-April Fools RFC
         self.std = StdFactory(contains=[self.rfc], name="std11")
 
+        # Create a FYI with non-April Fools RFC
+        self.fyi = FyiFactory(contains=[self.rfc], name="fyi11")
+
         # Set up a publication-std-levels.json file to indicate the publication
         # standard of self.rfc as different from its current value
         red_bucket.save(
@@ -151,7 +156,7 @@ def test_create_rfc_xml_index(self, mock_save):
 
         children = list(index)  # elements as list
         # Should be one rfc-not-issued-entry
-        self.assertEqual(len(children), 15)
+        self.assertEqual(len(children), 16)
         self.assertEqual(
             [
                 c.find(f"{ns}doc-id").text
@@ -300,6 +305,57 @@ def test_create_std_txt_index(self, mock_save):
             contents,
         )
 
+    @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
+    def test_create_fyi_txt_index(self, mock_save):
+        create_fyi_txt_index()
+        self.assertEqual(mock_save.call_count, 1)
+        self.assertEqual(mock_save.call_args[0][0], "fyi-index.txt")
+        contents = mock_save.call_args[0][1]
+        self.assertTrue(isinstance(contents, str))
+        # starts from 1
+        self.assertIn(
+            "[FYI1]",
+            contents,
+        )
+        # fill up to 11
+        self.assertIn(
+            "[FYI10]",
+            contents,
+        )
+        # but not to 12
+        self.assertNotIn(
+            "[FYI12]",
+            contents,
+        )
+        # Test empty FYIs
+        self.assertIn(
+            "For Your Information 9 currently contains no RFCs",
+            contents,
+        )
+        # No zero prefix!
+        self.assertNotIn(
+            "[FYI0001]",
+            contents,
+        )
+        # Has FYI11 with a RFC
+        self.assertIn(
+            "For Your Information 11,",
+            contents,
+        )
+        self.assertIn(
+            f'"{self.rfc.title}"',
+            contents,
+        )
+        self.assertIn(
+            "FYI 11,",
+            contents,
+        )
+        self.assertIn(
+            f"RFC {self.rfc.rfc_number},",
+            contents,
+        )
+
 
 class HelperTests(TestCase):
     def test_format_rfc_number(self):
diff --git a/ietf/templates/sync/fyi-index.txt b/ietf/templates/sync/fyi-index.txt
new file mode 100644
index 0000000000..cf9d57d570
--- /dev/null
+++ b/ietf/templates/sync/fyi-index.txt
@@ -0,0 +1,52 @@
+
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                             FYI INDEX
+                           -------------
+
+(CREATED ON: {{created_on}}.)
+
+This file contains citations for all FYIs in numeric order.  The FYIs
+(For Your Information) documents form a sub-series of the RFC series,
+specifically those documents that may be of particular interest
+to Internet users.  The corresponding RFCs have status INFORMATIONAL.
+
+FYI citations appear in this format:
+
+   [FYI#]     For Your Information #,
+              <FYI URL>.
+              At the time of writing, this FYI comprises the following:
+
+              Author 1, Author 2, "Title of the RFC", FYI #, RFC №,
+              DOI DOI string, Issue date,
+              <RFC URL>.
+
+For example:
+
+   [FYI8]     For Your Information 8,
+              <https://www.rfc-editor.org/info/fyi8>.
+              At the time of writing, this FYI comprises the following:
+
+              B. Fraser, "Site Security Handbook", FYI 8, RFC 2196,
+              DOI 10.17487/RFC2196, September 1997,
+              <https://www.rfc-editor.org/info/rfc2196>.
+
+Key to fields:
+
+# is the FYI number.
+
+№ is the RFC number.
+
+FYIs and other RFCs may be obtained from https://www.rfc-editor.org.
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+                                FYI INDEX
+                                ---------
+   
+
+
+{% for fyi in fyis %}{{fyi|safe}}
+
+{% endfor %}

From 6c6919f851ac6de2ca63c7bd903b1ddeb198fafc Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 8 Apr 2026 16:07:32 -0300
Subject: [PATCH 613/707] chore(deps): require httpx since we import it
 (#10678)

---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index 2b8185dab9..4fe55d3600 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -41,6 +41,7 @@ gunicorn>=23.0.0
 hashids>=1.3.1
 html2text>=2025.4.15  # Used only to clean comment field of secr/sreq
 html5lib>=1.1    # Only used in tests
+httpx>=0.28.1  # Indirect req of typesense, but we import and refer to exceptions
 icalendar>=5.0.0 
 inflect>= 7.5.0
 jsonfield>=3.2.0  # deprecated - need to replace with Django's JSONField

From e1ae8d3dfef3254713a9c9abea0512baa95c4ec3 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Wed, 8 Apr 2026 19:21:37 +0000
Subject: [PATCH 614/707] ci: update base image target version to 20260408T1908

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index af43e990e0..72511b6652 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260323T1533
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260408T1908
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 09f74cce28..c8ef587199 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260323T1533
+20260408T1908

From 68104b53108e28f368cb95b10b667c4818f98498 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 9 Apr 2026 13:09:54 -0300
Subject: [PATCH 615/707] ci: disable playwright legacy tests

These are always failing. Seems to be an issue with the test runner
rather than with the code.
---
 .github/workflows/tests.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 30b2771897..ad2e35408d 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -130,6 +130,7 @@ jobs:
         if-no-files-found: ignore
 
   tests-playwright-legacy:
+    if: ${{ false }}  # disable until we sort out suspected test runner issue
     name: Playwright Legacy Tests
     runs-on: ubuntu-latest
     container: ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.targetBaseVersion }}

From a77ef8c1569acb6e03ce14cc9dabdcc9f53689f5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 9 Apr 2026 14:23:12 -0300
Subject: [PATCH 616/707] ci: plumb errata notification API (#10684)

---
 k8s/settings_local.py | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index b45cbbe260..3a7e524f5a 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -497,3 +497,17 @@ def _multiline_to_list(s):
         "DATATRACKER_SEARCHINDEX_TASK_MAX_RETRIES", "12"
     ),
 }
+
+# Errata system api configuration
+ERRATA_METADATA_NOTIFICATION_API_KEY = os.environ.get(
+    "DATATRACKER_ERRATA_METADATA_NOTIFICATION_API_KEY", None
+)
+if ERRATA_METADATA_NOTIFICATION_API_KEY is not None:
+    ERRATA_METADATA_NOTIFICATION_URL = os.environ.get(
+        "DATATRACKER_ERRATA_METADATA_NOTIFICATION_URL", None
+    )
+    if ERRATA_METADATA_NOTIFICATION_URL is None:
+        raise RuntimeError(
+            "DATATRACKER_ERRATA_METADATA_NOTIFICATION_URL must be set if "
+            "DATATRACKER_ERRATA_METADATA_NOTIFICATION_API_KEY is provided"
+        )

From 4c5d4224b91da63e747c62177f0a8297760ce6ac Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 10 Apr 2026 12:57:20 -0300
Subject: [PATCH 617/707] chore(deps): unpin django-celery-beat (#10679)

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 4fe55d3600..ca9a6740e1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,7 +17,7 @@ Django>4.2,<5
 django-admin-rangefilter>=0.13.3
 django-analytical>=3.2.0
 django-bootstrap5>=25.1
-django-celery-beat>=2.7.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
+django-celery-beat>=2.9.0
 django-celery-results>=2.6.0
 django-csp>=3.7
 django-cors-headers>=4.7.0

From 608a5b73dc6a498162b485e40a9517b9db6adac6 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Fri, 10 Apr 2026 16:13:25 +0000
Subject: [PATCH 618/707] ci: update base image target version to 20260410T1557

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 72511b6652..e57fecd5f2 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260408T1908
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260410T1557
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index c8ef587199..f430037c09 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260408T1908
+20260410T1557

From 73132b34f6dc4088a5a27977f68d8a05cbc38e03 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 13 Apr 2026 14:38:42 -0300
Subject: [PATCH 619/707] fix: resolve procmaterials when uploaded (#10693)

* fix: resolve procmaterials when uploaded

* fix: avoid leaving stale ResolvedMaterial
---
 ietf/meeting/utils.py             | 16 ++++++++++++++--
 ietf/meeting/views_proceedings.py |  4 ++--
 2 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/ietf/meeting/utils.py b/ietf/meeting/utils.py
index bdf3d3d3d3..10ae0d3667 100644
--- a/ietf/meeting/utils.py
+++ b/ietf/meeting/utils.py
@@ -1025,9 +1025,18 @@ def resolve_materials_for_one_meeting(meeting: Meeting):
         )
 
 def resolve_uploaded_material(meeting: Meeting, doc: Document):
-    resolved = []
+    resolved: list[ResolvedMaterial] = []
+    remove = ResolvedMaterial.objects.none()
     blob = resolve_one_material(doc, rev=None, ext=None)
-    if blob is not None:
+    if blob is None:
+        # Versionless file does not exist. Remove the versionless ResolvedMaterial
+        # if it existed. This is to avoid leaving behind a stale link to a replaced
+        # version. This comes up e.g. if a ProceedingsMaterial is changed from having
+        # an uploaded file to being an external URL.
+        remove = ResolvedMaterial.objects.filter(
+            name=doc.name, meeting_number=meeting.number
+        )
+    else:
         resolved.append(
             ResolvedMaterial(
                 name=doc.name,
@@ -1047,12 +1056,15 @@ def resolve_uploaded_material(meeting: Meeting, doc: Document):
                 blob=blob.name,
             )
         )
+    # Create the new record(s) 
     ResolvedMaterial.objects.bulk_create(
         resolved,
         update_conflicts=True,
         unique_fields=["name", "meeting_number"],
         update_fields=["bucket", "blob"],
     )
+    # and remove one if necessary (will be a none() queryset if not)
+    remove.delete()
 
 
 def store_blob_for_one_material_file(doc: Document, rev: str, filepath: Path):
diff --git a/ietf/meeting/views_proceedings.py b/ietf/meeting/views_proceedings.py
index d1169bff2d..639efa1da4 100644
--- a/ietf/meeting/views_proceedings.py
+++ b/ietf/meeting/views_proceedings.py
@@ -14,7 +14,7 @@
 from ietf.meeting.models import Meeting, MeetingHost
 from ietf.meeting.helpers import get_meeting
 from ietf.name.models import ProceedingsMaterialTypeName
-from ietf.meeting.utils import handle_upload_file
+from ietf.meeting.utils import handle_upload_file, resolve_uploaded_material
 from ietf.utils.text import xslugify
 
 class UploadProceedingsMaterialForm(FileUploadForm):
@@ -150,7 +150,7 @@ def save_proceedings_material_doc(meeting, material_type, title, request, file=N
 
     if events:
         doc.save_with_history(events)
-
+    resolve_uploaded_material(meeting, doc)
     return doc
 
 

From 3e23f162c4929703a630141a343d820252b29a83 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 13 Apr 2026 13:26:38 -0500
Subject: [PATCH 620/707] chore: git ignore .claude (#10705)

---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 84bc800e3b..ccc7a46b08 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,7 @@
 .DS_store
 datatracker.sublime-project
 datatracker.sublime-workspace
+/.claude
 /.coverage
 /.factoryboy_random_state
 /.mypy_cache

From dee75e2e67bcb47b2dc1e556cc34ecd08dfa6806 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 13 Apr 2026 15:37:33 -0300
Subject: [PATCH 621/707] feat: unmask exceptions on blob retrieve error
 (#10704)

These have not been encountered in at least three months, likely longer.

Still remains to unmask exceptions when storing blobs. We are probably
ready to do that, but log noise caused by expected failures makes it
hard to be certain. Soon...
---
 ietf/doc/storage_utils.py | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 81588c83ec..ffdd4599be 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -178,8 +178,7 @@ def retrieve_bytes(kind: str, name: str) -> bytes:
                     content = f.read()
         except Exception as err:
             log(f"Blobstore Error: Failed to read bytes from {kind}:{name}: {repr(err)}")
-            if settings.SERVER_MODE == "development":
-                raise
+            raise
     return content
 
 
@@ -192,6 +191,5 @@ def retrieve_str(kind: str, name: str) -> str:
             content = content_bytes.decode("utf-8")
         except Exception as err:
             log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
-            if settings.SERVER_MODE == "development":
-                raise
+            raise
     return content

From aa847b4b8ae292e60f9d8f96bc23904c156cda47 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 13 Apr 2026 14:15:06 -0500
Subject: [PATCH 622/707] fix: look in target if draft name not found in anchor
 (#10636)

---
 ietf/utils/xmldraft.py | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/ietf/utils/xmldraft.py b/ietf/utils/xmldraft.py
index f555a0a16a..325b8499a9 100644
--- a/ietf/utils/xmldraft.py
+++ b/ietf/utils/xmldraft.py
@@ -102,6 +102,17 @@ def _document_name(self, ref):
             number = int(maybe_number)
             return f"{label}{number}"
 
+        target = ref.get("target")
+        if isinstance(target, str):
+            target = target.lower()
+            if target.startswith("https://datatracker.ietf.org/doc/"):
+                # len("https://datatracker.ietf.org/doc/")==33
+                m = re.match(r"^(draft-[a-z0-9-]*[a-z0-9])([/-]\d{2})?/?$",target[33:])
+                if m:
+                    name = m.group(1)
+                    return name
+
+
         # if we couldn't find a match so far, try the seriesInfo
         series_query = " or ".join(f"@name='{x.upper()}'" for x in series)
         for info in ref.xpath(

From 60ecfa2029f81b6a6b987770a1edd4840a6acf02 Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Mon, 13 Apr 2026 16:43:16 -0400
Subject: [PATCH 623/707] chore(k8s): remove interpod affinity

---
 k8s/auth.yaml       | 10 ----------
 k8s/beat.yaml       | 10 ----------
 k8s/celery.yaml     | 10 ----------
 k8s/memcached.yaml  | 10 ----------
 k8s/rabbitmq.yaml   | 10 ----------
 k8s/replicator.yaml | 10 ----------
 6 files changed, 60 deletions(-)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 392e306b54..2bdb064447 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -15,16 +15,6 @@ spec:
       labels:
         app: auth
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/beat.yaml b/k8s/beat.yaml
index cc98beecf6..9ab242681c 100644
--- a/k8s/beat.yaml
+++ b/k8s/beat.yaml
@@ -17,16 +17,6 @@ spec:
       labels:
         app: beat
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/celery.yaml b/k8s/celery.yaml
index a2799f2a6d..2f4c0fd439 100644
--- a/k8s/celery.yaml
+++ b/k8s/celery.yaml
@@ -17,16 +17,6 @@ spec:
       labels:
         app: celery
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
index 8f73f3d0d5..5a4c9f0aed 100644
--- a/k8s/memcached.yaml
+++ b/k8s/memcached.yaml
@@ -13,16 +13,6 @@ spec:
       labels:
         app: memcached
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/rabbitmq.yaml b/k8s/rabbitmq.yaml
index 780a399239..346b54c93e 100644
--- a/k8s/rabbitmq.yaml
+++ b/k8s/rabbitmq.yaml
@@ -13,16 +13,6 @@ spec:
       labels:
         app: rabbitmq
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:
diff --git a/k8s/replicator.yaml b/k8s/replicator.yaml
index 9c462bd96b..a28d9e8a16 100644
--- a/k8s/replicator.yaml
+++ b/k8s/replicator.yaml
@@ -17,16 +17,6 @@ spec:
       labels:
         app: replicator
     spec:
-      affinity:
-        podAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            - labelSelector:
-                matchExpressions:
-                  - key: app
-                    operator: In
-                    values:
-                      - datatracker
-              topologyKey: "kubernetes.io/hostname"
       securityContext:
         runAsNonRoot: true
       containers:

From 1689b88859e7c7fc49de4c96c9ac3eec7c239e50 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Tue, 14 Apr 2026 16:06:34 +1200
Subject: [PATCH 624/707] fix: Wire bcp, std, fyi index creation (#10706)

* style: Ruff Ruff

* fix: Wire bcp and std index creation tasks

* fix: Use single task and add fyi index creation

* fix: Log index creation errors and continue
---
 ietf/api/views_rpc.py | 21 ++++++-----
 ietf/sync/tasks.py    | 82 +++++++++++++++++++++++++++++++------------
 2 files changed, 72 insertions(+), 31 deletions(-)

diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 1e96118e58..25982d76bf 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -32,7 +32,9 @@
     EmailPersonSerializer,
     RfcWithAuthorsSerializer,
     DraftWithAuthorsSerializer,
-    NotificationAckSerializer, RfcPubSerializer, RfcFileSerializer,
+    NotificationAckSerializer,
+    RfcPubSerializer,
+    RfcFileSerializer,
     EditableRfcSerializer,
 )
 from ietf.doc.models import Document, DocHistory, RfcAuthor, DocEvent
@@ -344,9 +346,10 @@ def post(self, request):
 
 class RfcAuthorViewSet(viewsets.ReadOnlyModelViewSet):
     """ViewSet for RfcAuthor model
-    
+
     Router needs to provide rfc_number as a kwarg
     """
+
     api_key_endpoint = "ietf.api.views_rpc"
 
     queryset = RfcAuthor.objects.all()
@@ -407,7 +410,7 @@ class RfcPubFilesView(APIView):
 
     def _fs_destination(self, filename: str | Path) -> Path:
         """Destination for an uploaded RFC file in the filesystem
-        
+
         Strips any path components in filename and returns an absolute Path.
         """
         rfc_path = Path(settings.RFC_PATH)
@@ -419,7 +422,7 @@ def _fs_destination(self, filename: str | Path) -> Path:
 
     def _blob_destination(self, filename: str | Path) -> str:
         """Destination name for an uploaded RFC file in the blob store
-        
+
         Strips any path components in filename and returns an absolute Path.
         """
         filename = Path(filename)  # could potentially have directory components
@@ -472,9 +475,7 @@ def post(self, request):
                         code="files-exist",
                     )
             for possible_existing_blob in possible_rfc_blobs:
-                if exists_in_storage(
-                    kind=blob_kind, name=possible_existing_blob
-                ):
+                if exists_in_storage(kind=blob_kind, name=possible_existing_blob):
                     raise Conflict(
                         "Blob(s) already exist for this RFC",
                         code="blobs-exist",
@@ -523,7 +524,9 @@ def post(self, request):
 
         # Trigger red precomputer
         needs_updating = [rfc.rfc_number]
-        for rel in rfc.relateddocument_set.filter(relationship_id__in=["obs","updates"]):
+        for rel in rfc.relateddocument_set.filter(
+            relationship_id__in=["obs", "updates"]
+        ):
             needs_updating.append(rel.target.rfc_number)
         trigger_red_precomputer_task.delay(rfc_number_list=sorted(needs_updating))
         # Trigger search index update
@@ -540,7 +543,7 @@ class RfcIndexView(APIView):
     @extend_schema(
         operation_id="refresh_rfc_index",
         summary="Refresh rfc-index files",
-        description="Requests creation of rfc-index.xml and rfc-index.txt files",
+        description="Requests creation of various index files.",
         responses={202: None},
         request=None,
     )
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 4c84dc581e..c48368cccd 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -18,7 +18,13 @@
 from ietf.sync import iana
 from ietf.sync import rfceditor
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
-from ietf.sync.rfcindex import create_rfc_txt_index, create_rfc_xml_index
+from ietf.sync.rfcindex import (
+    create_bcp_txt_index,
+    create_fyi_txt_index,
+    create_rfc_txt_index,
+    create_rfc_xml_index,
+    create_std_txt_index,
+)
 from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils import log
 from ietf.utils.timezone import date_today
@@ -27,13 +33,13 @@
 @shared_task
 def rfc_editor_index_update_task(full_index=False):
     """Update metadata from the RFC index
-    
+
     Default is to examine only changes in the past 365 days. Call with full_index=True to update
     the full RFC index.
-    
+
     According to comments on the original script, a year's worth took about 20s on production as of
     August 2022
-    
+
     The original rfc-editor-index-update script had a long-disabled provision for running the
     rebuild_reference_relations scripts after the update. That has not been brought over
     at all because it should be implemented as its own task if it is needed.
@@ -51,7 +57,7 @@ def rfc_editor_index_update_task(full_index=False):
             timeout=30,  # seconds
         )
     except requests.Timeout as exc:
-        log.log(f'GET request timed out retrieving RFC editor index: {exc}')
+        log.log(f"GET request timed out retrieving RFC editor index: {exc}")
         return  # failed
     rfc_index_xml = response.text
     index_data = rfceditor.parse_index(io.StringIO(rfc_index_xml))
@@ -61,9 +67,9 @@ def rfc_editor_index_update_task(full_index=False):
             timeout=30,  # seconds
         )
     except requests.Timeout as exc:
-        log.log(f'GET request timed out retrieving RFC editor errata: {exc}')
+        log.log(f"GET request timed out retrieving RFC editor errata: {exc}")
         return  # failed
-    errata_data = response.json()   
+    errata_data = response.json()
     if len(index_data) < rfceditor.MIN_INDEX_RESULTS:
         log.log("Not enough index entries, only %s" % len(index_data))
         return  # failed
@@ -96,15 +102,15 @@ def rfc_editor_queue_updates_task():
     drafts, warnings = parse_queue(io.StringIO(response.text))
     for w in warnings:
         log.log(f"Warning: {w}")
-    
+
     if len(drafts) < MIN_QUEUE_RESULTS:
         log.log("Not enough results, only %s" % len(drafts))
         return  # failed
-    
+
     changed, warnings = update_drafts_from_queue(drafts)
     for w in warnings:
         log.log(f"Warning: {w}")
-    
+
     for c in changed:
         log.log(f"Updated {c}")
 
@@ -120,9 +126,11 @@ def iana_changes_update_task():
     MAX_INTERVAL_ACCEPTED_BY_IANA = datetime.timedelta(hours=23)
 
     start = (
-        timezone.now() 
-        - datetime.timedelta(hours=23) 
-        + datetime.timedelta(seconds=CLOCK_SKEW_COMPENSATION,)
+        timezone.now()
+        - datetime.timedelta(hours=23)
+        + datetime.timedelta(
+            seconds=CLOCK_SKEW_COMPENSATION,
+        )
     )
     end = start + datetime.timedelta(hours=23)
 
@@ -133,7 +141,9 @@ def iana_changes_update_task():
         # requests if necessary
 
         text = iana.fetch_changes_json(
-            settings.IANA_SYNC_CHANGES_URL, t, min(end, t + MAX_INTERVAL_ACCEPTED_BY_IANA)
+            settings.IANA_SYNC_CHANGES_URL,
+            t,
+            min(end, t + MAX_INTERVAL_ACCEPTED_BY_IANA),
         )
         log.log(f"Retrieved the JSON: {text}")
 
@@ -159,9 +169,9 @@ def iana_protocols_update_task():
     # "this needs to be the date where this tool is first deployed" in the original
     # iana-protocols-updates script)"
     rfc_must_published_later_than = datetime.datetime(
-        2012, 
-        11, 
-        26, 
+        2012,
+        11,
+        26,
         tzinfo=datetime.UTC,
     )
 
@@ -171,17 +181,17 @@ def iana_protocols_update_task():
             timeout=30,
         )
     except requests.Timeout as exc:
-        log.log(f'GET request timed out retrieving IANA protocols page: {exc}')
+        log.log(f"GET request timed out retrieving IANA protocols page: {exc}")
         return
 
     rfc_numbers = iana.parse_protocol_page(response.text)
 
     def batched(l, n):
         """Split list l up in batches of max size n.
-        
+
         For Python 3.12 or later, replace this with itertools.batched()
         """
-        return (l[i:i + n] for i in range(0, len(l), n))
+        return (l[i : i + n] for i in range(0, len(l), n))
 
     for batch in batched(rfc_numbers, 100):
         updated = iana.update_rfc_log_from_protocol_page(
@@ -192,6 +202,7 @@ def batched(l, n):
         for d in updated:
             log.log("Added history entry for %s" % d.display_name())
 
+
 @shared_task
 def fix_subseries_docevents_task():
     """Repairs DocEvents related to bugs around removing docs from subseries
@@ -233,6 +244,7 @@ def fix_subseries_docevents_task():
             time=obsoleting_time
         )
 
+
 @shared_task
 def rsync_rfcs_from_rfceditor_task(rfc_numbers: list[int]):
     log.log(f"Rsyncing rfcs from rfc-editor: {rfc_numbers}")
@@ -277,6 +289,32 @@ def load_rfcs_into_blobdb_task(start: int, end: int):
 
 @shared_task
 def create_rfc_index_task():
-    create_rfc_txt_index()
-    create_rfc_xml_index()
+    try:
+        create_rfc_txt_index()
+    except Exception as e:
+        log.log(f"Error: failure in creating rfc-index.txt. {e}")
+        pass
 
+    try:
+        create_rfc_xml_index()
+    except Exception as e:
+        log.log(f"Error: failure in creating rfc-index.xml. {e}")
+        pass
+
+    try:
+        create_bcp_txt_index()
+    except Exception as e:
+        log.log(f"Error: failure in creating bcp-index.txt. {e}")
+        pass
+
+    try:
+        create_std_txt_index()
+    except Exception as e:
+        log.log(f"Error: failure in creating std-index.txt. {e}")
+        pass
+
+    try:
+        create_fyi_txt_index()
+    except Exception as e:
+        log.log(f"Error: failure in creating fyi-index.txt. {e}")
+        pass

From c66655fb5745bfb8657edcae534f96056a7d4ff0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 13:33:45 -0300
Subject: [PATCH 625/707] feat: debounce rfc index refresh (#10708)

* feat: DirtyBits model + admin

* style: ruff + modernize utils/admin.py

* chore: remove unused code

* feat: rfcindex DirtyBits helpers

* feat: refresh RFC index only when dirty

Renames the task to better match its purpose

* test: update test

* fix: typo

* chore: add (empty) DirtyBits resource

* fix: actually call mark_rfcindex_as_processed
---
 ietf/api/tests_views_rpc.py             | 17 +++++--
 ietf/api/views_rpc.py                   |  4 +-
 ietf/sync/rfcindex.py                   | 50 ++++++++++++++++++
 ietf/sync/tasks.py                      | 68 ++++++++++++++-----------
 ietf/utils/admin.py                     | 65 +++++------------------
 ietf/utils/migrations/0003_dirtybits.py | 37 ++++++++++++++
 ietf/utils/models.py                    | 25 ++++++++-
 ietf/utils/resources.py                 | 12 +++--
 8 files changed, 183 insertions(+), 95 deletions(-)
 create mode 100644 ietf/utils/migrations/0003_dirtybits.py

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 0db67e126f..180221cffc 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -1,4 +1,5 @@
 # Copyright The IETF Trust 2025, All Rights Reserved
+import datetime
 from io import StringIO
 from pathlib import Path
 from tempfile import TemporaryDirectory
@@ -10,12 +11,15 @@
 from django.test.utils import override_settings
 from django.urls import reverse as urlreverse
 import mock
+from django.utils import timezone
 
 from ietf.blobdb.models import Blob
 from ietf.doc.factories import IndividualDraftFactory, RfcFactory, WgDraftFactory, WgRfcFactory
 from ietf.doc.models import RelatedDocument, Document
 from ietf.group.factories import RoleFactory, GroupFactory
 from ietf.person.factories import PersonFactory
+from ietf.sync.rfcindex import rfcindex_is_dirty
+from ietf.utils.models import DirtyBits
 from ietf.utils.test_utils import APITestCase, reload_db_objects
 
 
@@ -408,8 +412,13 @@ def _valid_post_data():
             )
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
-    @mock.patch("ietf.api.views_rpc.create_rfc_index_task")
-    def test_refresh_rfc_index(self, mock_task):
+    def test_refresh_rfc_index(self):
+        DirtyBits.objects.create(
+            slug=DirtyBits.Slugs.RFCINDEX,
+            dirty_time=timezone.now() - datetime.timedelta(days=1),
+            processed_time=timezone.now() - datetime.timedelta(hours=12),
+        )
+        self.assertFalse(rfcindex_is_dirty())
         url = urlreverse("ietf.api.purple_api.refresh_rfc_index")
         response = self.client.get(url)
         self.assertEqual(response.status_code, 403)
@@ -417,7 +426,7 @@ def test_refresh_rfc_index(self, mock_task):
         self.assertEqual(response.status_code, 403)
         response = self.client.get(url, headers={"X-Api-Key": "valid-token"})
         self.assertEqual(response.status_code, 405)
-        self.assertFalse(mock_task.delay.called)
+        self.assertFalse(rfcindex_is_dirty())
         response = self.client.post(url, headers={"X-Api-Key": "valid-token"})
         self.assertEqual(response.status_code, 202)
-        self.assertTrue(mock_task.delay.called)
+        self.assertTrue(rfcindex_is_dirty())
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 25982d76bf..6bc45fe3da 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -47,7 +47,7 @@
     update_rfc_searchindex_task,
 )
 from ietf.person.models import Email, Person
-from ietf.sync.tasks import create_rfc_index_task
+from ietf.sync.rfcindex import mark_rfcindex_as_dirty
 
 
 class Conflict(APIException):
@@ -548,5 +548,5 @@ class RfcIndexView(APIView):
         request=None,
     )
     def post(self, request):
-        create_rfc_index_task.delay()
+        mark_rfcindex_as_dirty()
         return Response(status=202)
diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index 0ea6fb939f..6864617874 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -1,4 +1,5 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
+import datetime
 import json
 from collections import defaultdict
 from collections.abc import Container
@@ -11,6 +12,7 @@
 
 from django.conf import settings
 from django.core.files.base import ContentFile
+from django.db.models import Q
 from lxml import etree
 
 from django.core.files.storage import storages
@@ -22,6 +24,7 @@
 from ietf.doc.models import Document
 from ietf.name.models import StdLevelName
 from ietf.utils.log import log
+from ietf.utils.models import DirtyBits
 
 FORMATS_FOR_INDEX = ["txt", "html", "pdf", "xml", "ps"]
 SS_TXT_MARGIN = 3
@@ -739,3 +742,50 @@ def create_fyi_txt_index():
         },
     )
     save_to_red_bucket("fyi-index.txt", index)
+
+
+## DirtyBits management for the RFC index
+
+RFCINDEX_SLUG = DirtyBits.Slugs.RFCINDEX
+
+
+def mark_rfcindex_as_dirty():
+    _, created = DirtyBits.objects.update_or_create(
+        slug=RFCINDEX_SLUG, defaults={"dirty_time": timezone.now()}
+    )
+    if created:
+        log(f"Created DirtyBits(slug='{RFCINDEX_SLUG}')")
+
+
+def mark_rfcindex_as_processed(when: datetime.datetime):
+    n_updated = DirtyBits.objects.filter(
+        Q(processed_time__isnull=True) | Q(processed_time__lt=when),
+        slug=RFCINDEX_SLUG,
+    ).update(processed_time=when)
+    if n_updated > 0:
+        log(f"processed_time is now {when.isoformat()}")
+    else:
+        log("processed_time not updated, no matching record found")
+
+
+def rfcindex_is_dirty():
+    """Does the rfc index need to be updated?"""
+    dirty_work, created = DirtyBits.objects.get_or_create(
+        slug=RFCINDEX_SLUG, defaults={"dirty_time": timezone.now()}
+    )
+    if created:
+        log(f"Created DirtyBits(slug='{RFCINDEX_SLUG}')")
+    display_processed_time = (
+        dirty_work.processed_time.isoformat()
+        if dirty_work.processed_time is not None
+        else "never"
+    )
+    log(
+        f"DirtyBits(slug='{RFCINDEX_SLUG}'): "
+        f"dirty_time={dirty_work.dirty_time.isoformat()} "
+        f"processed_time={display_processed_time}"
+    )
+    return (
+        dirty_work.processed_time is None
+        or dirty_work.dirty_time >= dirty_work.processed_time
+    )
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index c48368cccd..2805f431bf 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -24,6 +24,7 @@
     create_rfc_txt_index,
     create_rfc_xml_index,
     create_std_txt_index,
+    rfcindex_is_dirty, mark_rfcindex_as_processed,
 )
 from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils import log
@@ -288,33 +289,40 @@ def load_rfcs_into_blobdb_task(start: int, end: int):
 
 
 @shared_task
-def create_rfc_index_task():
-    try:
-        create_rfc_txt_index()
-    except Exception as e:
-        log.log(f"Error: failure in creating rfc-index.txt. {e}")
-        pass
-
-    try:
-        create_rfc_xml_index()
-    except Exception as e:
-        log.log(f"Error: failure in creating rfc-index.xml. {e}")
-        pass
-
-    try:
-        create_bcp_txt_index()
-    except Exception as e:
-        log.log(f"Error: failure in creating bcp-index.txt. {e}")
-        pass
-
-    try:
-        create_std_txt_index()
-    except Exception as e:
-        log.log(f"Error: failure in creating std-index.txt. {e}")
-        pass
-
-    try:
-        create_fyi_txt_index()
-    except Exception as e:
-        log.log(f"Error: failure in creating fyi-index.txt. {e}")
-        pass
+def refresh_rfc_index_task():
+    if rfcindex_is_dirty():
+        # new_processed_time is the *start* of processing so that any changes after
+        # this point will trigger another refresh
+        new_processed_time = timezone.now()
+
+        try:
+            create_rfc_txt_index()
+        except Exception as e:
+            log.log(f"Error: failure in creating rfc-index.txt. {e}")
+            pass
+
+        try:
+            create_rfc_xml_index()
+        except Exception as e:
+            log.log(f"Error: failure in creating rfc-index.xml. {e}")
+            pass
+
+        try:
+            create_bcp_txt_index()
+        except Exception as e:
+            log.log(f"Error: failure in creating bcp-index.txt. {e}")
+            pass
+
+        try:
+            create_std_txt_index()
+        except Exception as e:
+            log.log(f"Error: failure in creating std-index.txt. {e}")
+            pass
+
+        try:
+            create_fyi_txt_index()
+        except Exception as e:
+            log.log(f"Error: failure in creating fyi-index.txt. {e}")
+            pass
+
+        mark_rfcindex_as_processed(new_processed_time)
diff --git a/ietf/utils/admin.py b/ietf/utils/admin.py
index e6324ad7cd..cb8841cdc6 100644
--- a/ietf/utils/admin.py
+++ b/ietf/utils/admin.py
@@ -1,71 +1,30 @@
-# Copyright The IETF Trust 2011-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2011-2026, All Rights Reserved
 
 
 from django.contrib import admin
-from django.utils.encoding import force_str
-
-def name(obj):
-    if hasattr(obj, 'abbrev'):
-        return obj.abbrev()
-    elif hasattr(obj, 'name'):
-        if callable(obj.name):
-            name = obj.name()
-        else:
-            name = force_str(obj.name)
-        if name:
-            return name
-    return str(obj)
-    
-def admin_link(field, label=None, ordering="", display=name, suffix=""):
-    if not label:
-        label = field.capitalize().replace("_", " ").strip()
-    if ordering == "":
-        ordering = field
-    def _link(self):
-        obj = self
-        for attr in field.split("__"):
-            obj = getattr(obj, attr)
-            if callable(obj):
-                obj = obj()
-        if hasattr(obj, "all"):
-            objects = obj.all()
-        elif callable(obj):
-            objects = obj()
-            if not hasattr(objects, "__iter__"):
-                objects = [ objects ]
-        elif hasattr(obj, "__iter__"):
-            objects = obj
-        else:
-            objects = [ obj ]
-        chunks = []
-        for obj in objects:
-            app = obj._meta.app_label
-            model = obj.__class__.__name__.lower()
-            id = obj.pk
-            chunks += [ '<a href="/admin/%(app)s/%(model)s/%(id)s/%(suffix)s">%(display)s</a>' %
-                {'app':app, "model": model, "id":id, "display": display(obj), "suffix":suffix, } ]
-        return ", ".join(chunks)
-    _link.allow_tags = True
-    _link.short_description = label
-    _link.admin_order_field = ordering
-    return _link
+from .models import DumpInfo, DirtyBits
 
 
 class SaferStackedInline(admin.StackedInline):
     """StackedInline without delete by default"""
+
     can_delete = False  # no delete button
     show_change_link = True  # show a link to the resource (where it can be deleted)
 
 
 class SaferTabularInline(admin.TabularInline):
     """TabularInline without delete by default"""
+
     can_delete = False  # no delete button
     show_change_link = True  # show a link to the resource (where it can be deleted)
 
 
-from .models import DumpInfo
+@admin.register(DumpInfo)
 class DumpInfoAdmin(admin.ModelAdmin):
-    list_display = ['date', 'host', 'tz']
-    list_filter = ['date']
-admin.site.register(DumpInfo, DumpInfoAdmin)
+    list_display = ["date", "host", "tz"]
+    list_filter = ["date"]
+
+
+@admin.register(DirtyBits)
+class DirtyBitsAdmin(admin.ModelAdmin):
+    list_display = ["slug", "dirty_time", "processed_time"]
diff --git a/ietf/utils/migrations/0003_dirtybits.py b/ietf/utils/migrations/0003_dirtybits.py
new file mode 100644
index 0000000000..11f6ed09f6
--- /dev/null
+++ b/ietf/utils/migrations/0003_dirtybits.py
@@ -0,0 +1,37 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("utils", "0002_delete_versioninfo"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="DirtyBits",
+            fields=[
+                (
+                    "id",
+                    models.AutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                (
+                    "slug",
+                    models.CharField(
+                        choices=[("rfcindex", "RFC Index")], max_length=40, unique=True
+                    ),
+                ),
+                ("dirty_time", models.DateTimeField(blank=True, null=True)),
+                ("processed_time", models.DateTimeField(blank=True, null=True)),
+            ],
+            options={
+                "verbose_name_plural": "dirty bits",
+            },
+        ),
+    ]
diff --git a/ietf/utils/models.py b/ietf/utils/models.py
index 21af5766e9..13afbdfe20 100644
--- a/ietf/utils/models.py
+++ b/ietf/utils/models.py
@@ -1,14 +1,35 @@
-# Copyright The IETF Trust 2015-2020, All Rights Reserved
+# Copyright The IETF Trust 2015-2026, All Rights Reserved
 
 import itertools
 
 from django.db import models
 
+
+class DirtyBits(models.Model):
+    """A weak semaphore mechanism for coordination with celery beat tasks
+
+    Web workers will set the "dirty_time" value for a given dirtybit slug.
+    Celery workers will do work if "processed_time" < "dirty_time" and update
+    "processed_time".
+    """
+
+    class Slugs(models.TextChoices):
+        RFCINDEX = "rfcindex", "RFC Index"
+
+    # next line can become `...choices=Slugs)` when we get to Django 5.x
+    slug = models.CharField(max_length=40, blank=False, choices=Slugs.choices, unique=True)
+    dirty_time = models.DateTimeField(null=True, blank=True)
+    processed_time = models.DateTimeField(null=True, blank=True)
+
+    class Meta:
+        verbose_name_plural = "dirty bits"
+
+    
 class DumpInfo(models.Model):
     date = models.DateTimeField()
     host = models.CharField(max_length=128)
     tz   = models.CharField(max_length=32, default='UTC')
-    
+
 class ForeignKey(models.ForeignKey):
     "A local ForeignKey proxy which provides the on_delete value required under Django 2.0."
     def __init__(self, to, on_delete=models.CASCADE, **kwargs):
diff --git a/ietf/utils/resources.py b/ietf/utils/resources.py
index 1252cfef14..63206eb33a 100644
--- a/ietf/utils/resources.py
+++ b/ietf/utils/resources.py
@@ -1,6 +1,4 @@
-# Copyright The IETF Trust 2014-2019, All Rights Reserved
-# -*- coding: utf-8 -*-
-# Autogenerated by the mkresources management command 2014-11-13 05:39
+# Copyright The IETF Trust 2014-2026, All Rights Reserved
 
 
 from ietf.api import ModelResource
@@ -12,7 +10,7 @@
 from django.contrib.contenttypes.models import ContentType
 
 from ietf import api
-from ietf.utils.models import DumpInfo
+from ietf.utils.models import DirtyBits, DumpInfo
 
 
 class UserResource(ModelResource):
@@ -43,3 +41,9 @@ class Meta:
             "host": ALL,
         }
 api.utils.register(DumpInfoResource())
+
+
+class DirtyBitsResource(ModelResource):
+    class Meta:
+        queryset = DirtyBits.objects.none()
+api.utils.register(DirtyBitsResource())

From 98d6bb51481fbba98aefafc4fa3c116e9fc9f57c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 12:40:03 -0300
Subject: [PATCH 626/707] feat: utils to sync errata tags from errata.json

---
 ietf/sync/errata.py | 108 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 108 insertions(+)
 create mode 100644 ietf/sync/errata.py

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
new file mode 100644
index 0000000000..ca826687ec
--- /dev/null
+++ b/ietf/sync/errata.py
@@ -0,0 +1,108 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+import datetime
+import json
+from collections import defaultdict
+from typing import DefaultDict, Literal
+
+from django.core.files.storage import storages
+
+from ietf.doc.models import Document, DocEvent
+from ietf.name.models import DocTagName
+from ietf.person.models import Person
+
+ERRATA_BLOB_NAME = "other/errata.json"  # name of errata.json in the red bucket
+
+def get_errata_last_updated() -> datetime.datetime:
+    """Get timestamp of the last errata.json update
+    
+    May raise FileNotFoundError or other storage/S3 exceptions. Be prepared.
+    """
+    red_bucket = storages["red_bucket"]
+    return red_bucket.get_modified_time(ERRATA_BLOB_NAME)
+
+
+def get_errata_data():
+    red_bucket = storages["red_bucket"]
+    with red_bucket.open(ERRATA_BLOB_NAME, "r") as f:
+        errata_data = json.load(f)
+    return errata_data
+
+
+def errata_map_from_json(errata_data):
+    """Create a dict mapping RFC number to a list of applicable errata records"""
+    errata = defaultdict(list)
+    for item in errata_data:
+        doc_id = item["doc-id"]
+        if doc_id.upper().startswith("RFC"):
+            rfc_number = int(doc_id[3:])
+            errata[rfc_number].append(item)
+    return dict(errata)
+
+
+def update_errata_tags(errata_data):
+    tag_has_errata = DocTagName.objects.get(slug="errata")
+    tag_has_verified_errata = DocTagName.objects.get(slug="verified-errata")
+    system = Person.objects.get(name="(System)")
+
+    errata_map = errata_map_from_json(errata_data)
+    nums_with_errata = [
+        num
+        for num, errata in errata_map.items()
+        if any(er["errata_status_code"] != "Rejected" for er in errata)
+    ]
+    nums_with_verified_errata = [
+        num
+        for num, errata in errata_map.items()
+        if any(er["errata_status_code"] == "Verified" for er in errata)
+    ]
+
+    rfcs_gaining_errata_tag = Document.objects.filter(
+        type_id="rfc", rfc_number__in=nums_with_errata
+    ).exclude(tags=tag_has_errata)
+
+    rfcs_gaining_verified_errata_tag = Document.objects.filter(
+        type_id="rfc", rfc_number__in=nums_with_verified_errata
+    ).exclude(tags=tag_has_verified_errata)
+
+    rfcs_losing_errata_tag = Document.objects.filter(
+        type_id="rfc", tags=tag_has_errata
+    ).exclude(rfc_number__in=nums_with_errata)
+
+    rfcs_losing_verified_errata_tag = Document.objects.filter(
+        type_id="rfc", tags=tag_has_verified_errata
+    ).exclude(rfc_number__in=nums_with_verified_errata)
+
+    # map rfc_number to add/remove lists
+    changes: DefaultDict[Document, dict[str, list[DocTagName]]] = defaultdict(
+        lambda: {"add": [], "remove": []}
+    ) 
+    for rfc in rfcs_gaining_errata_tag:
+        changes[rfc]["add"].append(tag_has_errata)
+    for rfc in rfcs_gaining_verified_errata_tag:    
+        changes[rfc]["add"].append(tag_has_verified_errata)
+    for rfc in rfcs_losing_errata_tag:
+        changes[rfc]["remove"].append(tag_has_errata)
+    for rfc in rfcs_losing_verified_errata_tag:
+        changes[rfc]["remove"].append(tag_has_verified_errata)
+
+    for rfc, changeset in changes.items():
+        change_descs = []
+        for tag in changeset["add"]:
+            rfc.tags.add(tag)
+            change_descs.append(f"added {tag.slug} tag")
+        for tag in changeset["remove"]:
+            rfc.tags.remove(tag)
+            change_descs.append(f"removed {tag.slug} tag")
+        summary = "Update from RFC Editor: " + ", ".join(change_descs)
+        if all(
+            er["errata_status_code"] == "Rejected"
+            for er in errata_map[rfc.rfc_number]
+        ):
+            summary += " (all errata rejected)"
+        DocEvent.objects.create(
+            doc=rfc,
+            rev=rfc.rev,  # expect no rev
+            by=system,
+            type="sync_from_rfc_editor",
+            desc=summary
+        )

From c01380714f0c7d2b0e44dc5a5c9a8f11d3c73cf6 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 13:56:13 -0300
Subject: [PATCH 627/707] feat: DirtyBits for errata processing

---
 ietf/sync/errata.py                           | 57 +++++++++++++++++++
 .../migrations/0004_alter_dirtybits_slug.py   | 21 +++++++
 ietf/utils/models.py                          |  1 +
 3 files changed, 79 insertions(+)
 create mode 100644 ietf/utils/migrations/0004_alter_dirtybits_slug.py

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index ca826687ec..1e8e122eae 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -5,10 +5,13 @@
 from typing import DefaultDict, Literal
 
 from django.core.files.storage import storages
+from django.db.models import Q
 
 from ietf.doc.models import Document, DocEvent
 from ietf.name.models import DocTagName
 from ietf.person.models import Person
+from ietf.utils.log import log
+from ietf.utils.models import DirtyBits
 
 ERRATA_BLOB_NAME = "other/errata.json"  # name of errata.json in the red bucket
 
@@ -106,3 +109,57 @@ def update_errata_tags(errata_data):
             type="sync_from_rfc_editor",
             desc=summary
         )
+
+
+## DirtyBits management for the errata tags
+
+ERRATA_SLUG = DirtyBits.Slugs.ERRATA
+
+
+def update_errata_dirty_time() -> DirtyBits | None:
+    try:
+        last_update = get_errata_last_updated()
+    except Exception as err:
+        log(f"Error in get_errata_last_updated: {err}")
+        return None
+    else:
+        dirty_work, created = DirtyBits.objects.update_or_create(
+            slug=ERRATA_SLUG, defaults={"dirty_time": last_update}
+        )
+        if created:
+            log(f"Created DirtyBits(slug='{ERRATA_SLUG}')")
+        return dirty_work
+
+def mark_errata_as_processed(when: datetime.datetime):
+    n_updated = DirtyBits.objects.filter(
+        Q(processed_time__isnull=True) | Q(processed_time__lt=when),
+        slug=ERRATA_SLUG,
+    ).update(processed_time=when)
+    if n_updated > 0:
+        log(f"processed_time is now {when.isoformat()}")
+    else:
+        log("processed_time not updated, no matching record found")
+
+
+def errata_are_dirty():
+    """Does the rfc index need to be updated?"""
+    dirty_work = update_errata_dirty_time()  # creates DirtyBits if needed
+    if dirty_work is None:
+        # A None indicates we could not check the timestamp of errata.json. In that
+        # case, we are not likely to be able to read the blob either, so don't try
+        # to process it. An error was already logged.
+        return False 
+    display_processed_time = (
+        dirty_work.processed_time.isoformat()
+        if dirty_work.processed_time is not None
+        else "never"
+    )
+    log(
+        f"DirtyBits(slug='{ERRATA_SLUG}'): "
+        f"dirty_time={dirty_work.dirty_time.isoformat()} "
+        f"processed_time={display_processed_time}"
+    )
+    return (
+        dirty_work.processed_time is None
+        or dirty_work.dirty_time >= dirty_work.processed_time
+    )
diff --git a/ietf/utils/migrations/0004_alter_dirtybits_slug.py b/ietf/utils/migrations/0004_alter_dirtybits_slug.py
new file mode 100644
index 0000000000..e17ea6cadd
--- /dev/null
+++ b/ietf/utils/migrations/0004_alter_dirtybits_slug.py
@@ -0,0 +1,21 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("utils", "0003_dirtybits"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="dirtybits",
+            name="slug",
+            field=models.CharField(
+                choices=[("rfcindex", "RFC Index"), ("errata", "Errata Tags")],
+                max_length=40,
+                unique=True,
+            ),
+        ),
+    ]
diff --git a/ietf/utils/models.py b/ietf/utils/models.py
index 13afbdfe20..64f7f253f2 100644
--- a/ietf/utils/models.py
+++ b/ietf/utils/models.py
@@ -15,6 +15,7 @@ class DirtyBits(models.Model):
 
     class Slugs(models.TextChoices):
         RFCINDEX = "rfcindex", "RFC Index"
+        ERRATA = "errata", "Errata Tags"
 
     # next line can become `...choices=Slugs)` when we get to Django 5.x
     slug = models.CharField(max_length=40, blank=False, choices=Slugs.choices, unique=True)

From 070c0595c58788b159c113004d749da962cf8449 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 14:03:21 -0300
Subject: [PATCH 628/707] feat: errata update task

---
 ietf/sync/tasks.py | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 2805f431bf..357075620f 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -17,6 +17,8 @@
 from ietf.doc.tasks import rebuild_reference_relations_task
 from ietf.sync import iana
 from ietf.sync import rfceditor
+from ietf.sync.errata import errata_are_dirty, mark_errata_as_processed, get_errata_data, \
+    update_errata_tags
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
 from ietf.sync.rfcindex import (
     create_bcp_txt_index,
@@ -288,6 +290,17 @@ def load_rfcs_into_blobdb_task(start: int, end: int):
     load_rfcs_into_blobdb(list(range(start, end + 1)))
 
 
+@shared_task
+def update_errata_from_rfceditor_task():
+    if errata_are_dirty():
+        # new_processed_time is the *start* of processing so that any changes after
+        # this point will trigger another refresh
+        new_processed_time = timezone.now()
+        errata_data = get_errata_data()
+        update_errata_tags(errata_data)
+        mark_errata_as_processed(new_processed_time)
+
+
 @shared_task
 def refresh_rfc_index_task():
     if rfcindex_is_dirty():

From 9f1e5ceb1d90439653920c7080e6e1fb924e762f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 14:20:10 -0300
Subject: [PATCH 629/707] feat: rebuild rfc indexes after errata update

---
 ietf/sync/tasks.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 357075620f..ac0fe173ca 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -26,7 +26,7 @@
     create_rfc_txt_index,
     create_rfc_xml_index,
     create_std_txt_index,
-    rfcindex_is_dirty, mark_rfcindex_as_processed,
+    rfcindex_is_dirty, mark_rfcindex_as_processed, mark_rfcindex_as_dirty,
 )
 from ietf.sync.utils import build_from_file_content, load_rfcs_into_blobdb, rsync_helper
 from ietf.utils import log
@@ -299,6 +299,7 @@ def update_errata_from_rfceditor_task():
         errata_data = get_errata_data()
         update_errata_tags(errata_data)
         mark_errata_as_processed(new_processed_time)
+        mark_rfcindex_as_dirty()  # ensure any changes are reflected in the indexes
 
 
 @shared_task

From 4dd9f2a82569b85b6d2e74e418a43b7382edb8af Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 14:32:32 -0300
Subject: [PATCH 630/707] chore: setting for ERRATA_JSON_BLOB_NAME

---
 ietf/sync/errata.py   | 27 +++++++++++++++++----------
 k8s/settings_local.py |  5 +++++
 2 files changed, 22 insertions(+), 10 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 1e8e122eae..0d154bf86e 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -4,6 +4,7 @@
 from collections import defaultdict
 from typing import DefaultDict, Literal
 
+from django.conf import settings
 from django.core.files.storage import storages
 from django.db.models import Q
 
@@ -13,20 +14,26 @@
 from ietf.utils.log import log
 from ietf.utils.models import DirtyBits
 
-ERRATA_BLOB_NAME = "other/errata.json"  # name of errata.json in the red bucket
+
+DEFAULT_ERRATA_JSON_BLOB_NAME = "other/errata.json"
+
 
 def get_errata_last_updated() -> datetime.datetime:
     """Get timestamp of the last errata.json update
-    
+
     May raise FileNotFoundError or other storage/S3 exceptions. Be prepared.
     """
     red_bucket = storages["red_bucket"]
-    return red_bucket.get_modified_time(ERRATA_BLOB_NAME)
+    return red_bucket.get_modified_time(
+        getattr(settings, "ERRATA_JSON_BLOB_NAME", DEFAULT_ERRATA_JSON_BLOB_NAME)
+    )
 
 
 def get_errata_data():
     red_bucket = storages["red_bucket"]
-    with red_bucket.open(ERRATA_BLOB_NAME, "r") as f:
+    with red_bucket.open(
+        getattr(settings, "ERRATA_JSON_BLOB_NAME", DEFAULT_ERRATA_JSON_BLOB_NAME), "r"
+    ) as f:
         errata_data = json.load(f)
     return errata_data
 
@@ -78,10 +85,10 @@ def update_errata_tags(errata_data):
     # map rfc_number to add/remove lists
     changes: DefaultDict[Document, dict[str, list[DocTagName]]] = defaultdict(
         lambda: {"add": [], "remove": []}
-    ) 
+    )
     for rfc in rfcs_gaining_errata_tag:
         changes[rfc]["add"].append(tag_has_errata)
-    for rfc in rfcs_gaining_verified_errata_tag:    
+    for rfc in rfcs_gaining_verified_errata_tag:
         changes[rfc]["add"].append(tag_has_verified_errata)
     for rfc in rfcs_losing_errata_tag:
         changes[rfc]["remove"].append(tag_has_errata)
@@ -98,8 +105,7 @@ def update_errata_tags(errata_data):
             change_descs.append(f"removed {tag.slug} tag")
         summary = "Update from RFC Editor: " + ", ".join(change_descs)
         if all(
-            er["errata_status_code"] == "Rejected"
-            for er in errata_map[rfc.rfc_number]
+            er["errata_status_code"] == "Rejected" for er in errata_map[rfc.rfc_number]
         ):
             summary += " (all errata rejected)"
         DocEvent.objects.create(
@@ -107,7 +113,7 @@ def update_errata_tags(errata_data):
             rev=rfc.rev,  # expect no rev
             by=system,
             type="sync_from_rfc_editor",
-            desc=summary
+            desc=summary,
         )
 
 
@@ -130,6 +136,7 @@ def update_errata_dirty_time() -> DirtyBits | None:
             log(f"Created DirtyBits(slug='{ERRATA_SLUG}')")
         return dirty_work
 
+
 def mark_errata_as_processed(when: datetime.datetime):
     n_updated = DirtyBits.objects.filter(
         Q(processed_time__isnull=True) | Q(processed_time__lt=when),
@@ -148,7 +155,7 @@ def errata_are_dirty():
         # A None indicates we could not check the timestamp of errata.json. In that
         # case, we are not likely to be able to read the blob either, so don't try
         # to process it. An error was already logged.
-        return False 
+        return False
     display_processed_time = (
         dirty_work.processed_time.isoformat()
         if dirty_work.processed_time is not None
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 3a7e524f5a..251f11234f 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -511,3 +511,8 @@ def _multiline_to_list(s):
             "DATATRACKER_ERRATA_METADATA_NOTIFICATION_URL must be set if "
             "DATATRACKER_ERRATA_METADATA_NOTIFICATION_API_KEY is provided"
         )
+
+# name (with path) of errata.json in the red bucket
+ERRATA_JSON_BLOB_NAME = os.environ.get(
+    "DATATRACKER_ERRATA_JSON_BLOB_NAME", "other/errata.json"
+)

From 1b2aced58e6fa43ff5c9579964ac4684fb87824f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 15:00:35 -0300
Subject: [PATCH 631/707] fix: transaction

---
 ietf/sync/errata.py | 43 ++++++++++++++++++++++++-------------------
 1 file changed, 24 insertions(+), 19 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 0d154bf86e..51531a6190 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -6,6 +6,7 @@
 
 from django.conf import settings
 from django.core.files.storage import storages
+from django.db import transaction
 from django.db.models import Q
 
 from ietf.doc.models import Document, DocEvent
@@ -96,25 +97,29 @@ def update_errata_tags(errata_data):
         changes[rfc]["remove"].append(tag_has_verified_errata)
 
     for rfc, changeset in changes.items():
-        change_descs = []
-        for tag in changeset["add"]:
-            rfc.tags.add(tag)
-            change_descs.append(f"added {tag.slug} tag")
-        for tag in changeset["remove"]:
-            rfc.tags.remove(tag)
-            change_descs.append(f"removed {tag.slug} tag")
-        summary = "Update from RFC Editor: " + ", ".join(change_descs)
-        if all(
-            er["errata_status_code"] == "Rejected" for er in errata_map[rfc.rfc_number]
-        ):
-            summary += " (all errata rejected)"
-        DocEvent.objects.create(
-            doc=rfc,
-            rev=rfc.rev,  # expect no rev
-            by=system,
-            type="sync_from_rfc_editor",
-            desc=summary,
-        )
+        # Update in a transaction per RFC to keep tags and DocEvents consistent.
+        # With this in place, an interrupted task will be cleanly completed on the
+        # next run.
+        with transaction.atomic():
+            change_descs = []
+            for tag in changeset["add"]:
+                rfc.tags.add(tag)
+                change_descs.append(f"added {tag.slug} tag")
+            for tag in changeset["remove"]:
+                rfc.tags.remove(tag)
+                change_descs.append(f"removed {tag.slug} tag")
+            summary = "Update from RFC Editor: " + ", ".join(change_descs)
+            if all(
+                er["errata_status_code"] == "Rejected" for er in errata_map[rfc.rfc_number]
+            ):
+                summary += " (all errata rejected)"
+            DocEvent.objects.create(
+                doc=rfc,
+                rev=rfc.rev,  # expect no rev
+                by=system,
+                type="sync_from_rfc_editor",
+                desc=summary,
+            )
 
 
 ## DirtyBits management for the errata tags

From 5bdbdf1ea961542f9aa36e9286222cea37598c41 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 15:14:13 -0300
Subject: [PATCH 632/707] refactor: extract method from task

---
 ietf/sync/errata.py |  5 +++++
 ietf/sync/tasks.py  | 10 ++++++----
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 51531a6190..81a31e7484 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -175,3 +175,8 @@ def errata_are_dirty():
         dirty_work.processed_time is None
         or dirty_work.dirty_time >= dirty_work.processed_time
     )
+
+
+def update_errata_from_rfceditor():
+    errata_data = get_errata_data()
+    update_errata_tags(errata_data)
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index ac0fe173ca..34b2efeb5c 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -17,8 +17,11 @@
 from ietf.doc.tasks import rebuild_reference_relations_task
 from ietf.sync import iana
 from ietf.sync import rfceditor
-from ietf.sync.errata import errata_are_dirty, mark_errata_as_processed, get_errata_data, \
-    update_errata_tags
+from ietf.sync.errata import (
+    errata_are_dirty,
+    mark_errata_as_processed,
+    update_errata_from_rfceditor,
+)
 from ietf.sync.rfceditor import MIN_QUEUE_RESULTS, parse_queue, update_drafts_from_queue
 from ietf.sync.rfcindex import (
     create_bcp_txt_index,
@@ -296,8 +299,7 @@ def update_errata_from_rfceditor_task():
         # new_processed_time is the *start* of processing so that any changes after
         # this point will trigger another refresh
         new_processed_time = timezone.now()
-        errata_data = get_errata_data()
-        update_errata_tags(errata_data)
+        update_errata_from_rfceditor()
         mark_errata_as_processed(new_processed_time)
         mark_rfcindex_as_dirty()  # ensure any changes are reflected in the indexes
 

From 2c385a0f95a991ff547152dba2f700e7a7c8e3ec Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 15:15:32 -0300
Subject: [PATCH 633/707] test: test_update_errata_from_rfceditor_task

---
 ietf/sync/tests.py | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 21d6cb5cd5..6cbd91d59f 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -1,5 +1,4 @@
-# Copyright The IETF Trust 2012-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2012-2026, All Rights Reserved
 
 
 import os
@@ -33,6 +32,7 @@
 from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
 from ietf.sync import iana, rfceditor, tasks
+from ietf.sync.tasks import update_errata_from_rfceditor_task
 from ietf.utils.mail import outbox, empty_outbox
 from ietf.utils.test_utils import login_testing_unauthorized
 from ietf.utils.test_utils import TestCase
@@ -1215,3 +1215,28 @@ def test_load_rfcs_into_blobdb_task(
         self.assertEqual(mock_kwargs, {})
 
 
+    @mock.patch("ietf.sync.tasks.update_errata_from_rfceditor")
+    @mock.patch("ietf.sync.tasks.mark_rfcindex_as_dirty")
+    @mock.patch("ietf.sync.tasks.mark_errata_as_processed")
+    @mock.patch("ietf.sync.tasks.errata_are_dirty")
+    def test_update_errata_from_rfceditor_task(
+        self,
+        mock_errata_are_dirty,
+        mock_mark_errata_processed,
+        mock_mark_rfcindex_dirty,
+        mock_update,
+    ):
+        mock_errata_are_dirty.return_value = False
+        update_errata_from_rfceditor_task()
+        self.assertTrue(mock_errata_are_dirty.called)
+        self.assertFalse(mock_mark_errata_processed.called)
+        self.assertFalse(mock_mark_rfcindex_dirty.called)
+        self.assertFalse(mock_update.called)
+
+        mock_errata_are_dirty.reset_mock()
+        mock_errata_are_dirty.return_value = True
+        update_errata_from_rfceditor_task()
+        self.assertTrue(mock_errata_are_dirty.called)
+        self.assertTrue(mock_mark_errata_processed.called)
+        self.assertTrue(mock_mark_rfcindex_dirty.called)
+        self.assertTrue(mock_update.called)

From 3a4e248570e7373e0de8c2281af2df6d485919e1 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 15:24:12 -0300
Subject: [PATCH 634/707] refactor: slight reorg in errata.py

---
 ietf/sync/errata.py | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 81a31e7484..8a4c13c3a9 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -122,6 +122,11 @@ def update_errata_tags(errata_data):
             )
 
 
+def update_errata_from_rfceditor():
+    errata_data = get_errata_data()
+    update_errata_tags(errata_data)
+
+
 ## DirtyBits management for the errata tags
 
 ERRATA_SLUG = DirtyBits.Slugs.ERRATA
@@ -175,8 +180,3 @@ def errata_are_dirty():
         dirty_work.processed_time is None
         or dirty_work.dirty_time >= dirty_work.processed_time
     )
-
-
-def update_errata_from_rfceditor():
-    errata_data = get_errata_data()
-    update_errata_tags(errata_data)

From a568046bbed4656005a64ce97e8f1e58b46ede9b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 19:43:01 -0300
Subject: [PATCH 635/707] test: test errata module

---
 ietf/sync/tests.py | 193 ++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 192 insertions(+), 1 deletion(-)

diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 6cbd91d59f..eb70bcf9e9 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -12,6 +12,8 @@
 from dataclasses import dataclass
 
 from django.conf import settings
+from django.core.files.base import ContentFile
+from django.core.files.storage import storages
 from django.urls import reverse as urlreverse
 from django.utils import timezone
 from django.test.utils import override_settings
@@ -24,7 +26,7 @@
     RfcFactory,
     DocumentAuthorFactory,
     DocEventFactory,
-    BcpFactory,
+    BcpFactory, WgRfcFactory,
 )
 from ietf.doc.models import Document, DocEvent, DeletedEvent, DocTagName, RelatedDocument, State, StateDocEvent
 from ietf.doc.utils import add_state_change_event
@@ -32,8 +34,12 @@
 from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
 from ietf.sync import iana, rfceditor, tasks
+from ietf.sync.errata import update_errata_from_rfceditor, get_errata_last_updated, \
+    get_errata_data, errata_map_from_json, update_errata_dirty_time, \
+    mark_errata_as_processed, update_errata_tags
 from ietf.sync.tasks import update_errata_from_rfceditor_task
 from ietf.utils.mail import outbox, empty_outbox
+from ietf.utils.models import DirtyBits
 from ietf.utils.test_utils import login_testing_unauthorized
 from ietf.utils.test_utils import TestCase
 from ietf.utils.timezone import date_today, RPC_TZINFO
@@ -882,6 +888,191 @@ def test_rfceditor_undo(self):
         self.assertTrue(StateDocEvent.objects.filter(desc="First", doc=draft))
 
 
+class ErrataTests(TestCase):
+    @override_settings(ERRATA_JSON_BLOB_NAME="myblob.json")
+    def test_get_errata_last_update(self):
+        red_bucket = storages["red_bucket"]  # InMemoryStorage in test
+        red_bucket.save("myblob.json", ContentFile("file"))
+        self.assertEqual(
+            get_errata_last_updated(), red_bucket.get_modified_time("myblob.json")
+        )
+    
+    @override_settings(ERRATA_JSON_BLOB_NAME="myblob.json")
+    def test_get_errata_data(self):
+        red_bucket = storages["red_bucket"]  # InMemoryStorage in test
+        red_bucket.save("myblob.json", ContentFile('[{"value": 3}]'))
+        self.assertEqual(
+            get_errata_data(),
+            [{"value": 3}],
+        )
+
+    def test_errata_map_from_json(self):
+        input_data = [
+            {
+                "doc-id": "not-an-rfc",
+                "errata_status_code": "Verified",
+            },
+            {
+                "doc-id": "rfc01234",
+                "errata_status_code": "Reported",
+            },
+            {
+                "doc-id": "RFC1001",
+                "errata_status_code": "Verified"
+            },
+            {
+                "doc-id": "RfC1234",
+                "errata_status_code": "Verified",
+            },
+        ]
+        expected_output = {1001: [input_data[2]], 1234: [input_data[1], input_data[3]]}
+        self.assertDictEqual(errata_map_from_json(input_data), expected_output)
+
+    @mock.patch("ietf.sync.errata.update_errata_tags")
+    @mock.patch("ietf.sync.errata.get_errata_data")
+    def test_update_errata_from_rfceditor(self, mock_get_data, mock_update):
+        fake_data = object()
+        mock_get_data.return_value = fake_data
+        update_errata_from_rfceditor()
+        self.assertTrue(mock_get_data.called)
+        self.assertTrue(mock_update.called)
+        self.assertEqual(mock_update.call_args, mock.call(fake_data))
+
+    def test_update_errata_tags(self):
+        tag_has_errata = DocTagName.objects.get(slug="errata")
+        tag_has_verified_errata = DocTagName.objects.get(slug="verified-errata")
+
+        rfcs = WgRfcFactory.create_batch(10)
+        rfcs[0].tags.set([tag_has_errata])
+        rfcs[1].tags.set([tag_has_errata, tag_has_verified_errata])
+        rfcs[2].tags.set([tag_has_errata])
+        rfcs[3].tags.set([tag_has_errata, tag_has_verified_errata])
+        rfcs[4].tags.set([tag_has_errata])
+        rfcs[5].tags.set([tag_has_errata, tag_has_verified_errata])
+
+        # Only contains the fields we care about, not the full JSON
+        errata_data = [
+            # rfcs[0] had errata and should keep it
+            {"doc-id": rfcs[0].name, "errata_status_code": "Held for Document Update"},
+            {"doc-id": rfcs[0].name, "errata_status_code": "Rejected"},
+            # rfcs[1] had errata+verified-errata and should keep both
+            {"doc-id": rfcs[1].name, "errata_status_code": "Verified"},
+            # rfcs[2] had errata and should gain verified-errata
+            {"doc-id": rfcs[2].name, "errata_status_code": "Verified"},
+            # rfcs[3] had errata+verified errata and should lose both
+            {"doc-id": rfcs[3].name, "errata_status_code": "Rejected"},
+            # rfcs[4] had errata and should gain verified-errata
+            {"doc-id": rfcs[4].name, "errata_status_code": "Verified"},
+            {"doc-id": rfcs[4].name, "errata_status_code": "Reported"},
+            # rfcs[5] had errata+verified-errata and should lose verified-errata
+            {"doc-id": rfcs[5].name, "errata_status_code": "Reported"},
+            # rfcs[6] had none and should gain errata
+            {"doc-id": rfcs[6].name, "errata_status_code": "Reported"},
+            # rfcs[7] had none and should gain errata+verified-errata
+            {"doc-id": rfcs[7].name, "errata_status_code": "Verified"},
+            # rfcs[8] had none and it should stay that way
+            {"doc-id": rfcs[8].name, "errata_status_code": "Rejected"},
+            # rfcs[9] had none and it should stay that way (no entry at all)
+        ]
+        update_errata_tags(errata_data)
+
+        self.assertCountEqual(rfcs[0].tags.all(), [tag_has_errata])
+        self.assertIsNone(rfcs[0].docevent_set.first())  # no change
+
+        self.assertCountEqual(
+            rfcs[1].tags.all(), [tag_has_errata, tag_has_verified_errata]
+        )
+        self.assertIsNone(rfcs[1].docevent_set.first())  # no change
+
+        self.assertCountEqual(
+            rfcs[2].tags.all(), [tag_has_errata, tag_has_verified_errata]
+        )
+        self.assertEqual(rfcs[2].docevent_set.count(), 1)
+        self.assertIn(": added verified-errata tag", rfcs[2].docevent_set.first().desc)
+
+        self.assertCountEqual(rfcs[3].tags.all(), [])
+        self.assertEqual(rfcs[3].docevent_set.count(), 1)
+        self.assertIn(
+            ": removed errata tag, removed verified-errata tag (all errata rejected)",
+            rfcs[3].docevent_set.first().desc,
+        )
+
+        self.assertCountEqual(
+            rfcs[4].tags.all(), [tag_has_errata, tag_has_verified_errata]
+        )
+        self.assertEqual(rfcs[4].docevent_set.count(), 1)
+        self.assertIn(": added verified-errata tag", rfcs[4].docevent_set.first().desc)
+
+        self.assertCountEqual(rfcs[5].tags.all(), [tag_has_errata])
+        self.assertEqual(rfcs[5].docevent_set.count(), 1)
+        self.assertIn(
+            ": removed verified-errata tag", rfcs[5].docevent_set.first().desc
+        )
+
+        self.assertCountEqual(rfcs[6].tags.all(), [tag_has_errata])
+        self.assertEqual(rfcs[6].docevent_set.count(), 1)
+        self.assertIn(": added errata tag", rfcs[6].docevent_set.first().desc)
+
+        self.assertCountEqual(
+            rfcs[7].tags.all(), [tag_has_errata, tag_has_verified_errata]
+        )
+        self.assertEqual(rfcs[7].docevent_set.count(), 1)
+        self.assertIn(
+            ": added errata tag, added verified-errata tag",
+            rfcs[7].docevent_set.first().desc,
+        )
+
+        self.assertCountEqual(rfcs[8].tags.all(), [])
+        self.assertIsNone(rfcs[8].docevent_set.first())  # no change
+
+        self.assertCountEqual(rfcs[9].tags.all(), [])
+        self.assertIsNone(rfcs[9].docevent_set.first())  # no change
+
+    @override_settings(ERRATA_JSON_BLOB_NAME="myblob.json")
+    @mock.patch("ietf.sync.errata.get_errata_last_updated")
+    def test_update_errata_dirty_time(self, mock_last_updated):
+        ERRATA_SLUG = DirtyBits.Slugs.ERRATA
+        
+        # No time available
+        mock_last_updated.side_effect = FileNotFoundError
+        self.assertIsNone(DirtyBits.objects.filter(slug=ERRATA_SLUG).first())
+        self.assertIsNone(update_errata_dirty_time())  # no blob yet
+        self.assertIsNone(DirtyBits.objects.filter(slug=ERRATA_SLUG).first())
+
+        # Now set a time
+        first_timestamp = timezone.now() - datetime.timedelta(hours=3)
+        mock_last_updated.return_value = first_timestamp
+        mock_last_updated.side_effect = None
+        result = update_errata_dirty_time()
+        self.assertTrue(isinstance(result, DirtyBits))
+        result.refresh_from_db()
+        self.assertEqual(result.slug, ERRATA_SLUG)
+        self.assertEqual(result.processed_time, None)
+        self.assertEqual(result.dirty_time, first_timestamp)
+        
+        # Update the time
+        second_timestamp = timezone.now()
+        mock_last_updated.return_value = second_timestamp
+        second_result = update_errata_dirty_time()
+        self.assertEqual(result.pk, second_result.pk)  # should be the same record
+        result.refresh_from_db()
+        self.assertEqual(result.slug, ERRATA_SLUG)
+        self.assertEqual(result.processed_time, None)
+        self.assertEqual(result.dirty_time, second_timestamp)
+
+    def test_mark_errata_as_processed(self):
+        ERRATA_SLUG = DirtyBits.Slugs.ERRATA
+        first_timestamp = timezone.now()
+        mark_errata_as_processed(first_timestamp)  # no DirtyBits is not an error
+        self.assertIsNone(DirtyBits.objects.filter(slug=ERRATA_SLUG).first())
+        dbits = DirtyBits.objects.create(slug=ERRATA_SLUG, dirty_time=first_timestamp)
+        second_timestamp = timezone.now()
+        mark_errata_as_processed(second_timestamp)
+        dbits.refresh_from_db()
+        self.assertEqual(dbits.dirty_time, first_timestamp)
+        self.assertEqual(dbits.processed_time, second_timestamp)
+        
+
 class TaskTests(TestCase):
     @override_settings(
         RFC_EDITOR_INDEX_URL="https://rfc-editor.example.com/index/",

From 96e227b89b349e67c65e6f7149577974ed3021dd Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 19:43:17 -0300
Subject: [PATCH 636/707] fix: guard map lookup

---
 ietf/sync/errata.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 8a4c13c3a9..9f71cf111b 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -109,8 +109,9 @@ def update_errata_tags(errata_data):
                 rfc.tags.remove(tag)
                 change_descs.append(f"removed {tag.slug} tag")
             summary = "Update from RFC Editor: " + ", ".join(change_descs)
-            if all(
-                er["errata_status_code"] == "Rejected" for er in errata_map[rfc.rfc_number]
+            if rfc.rfc_number in errata_map and all(
+                er["errata_status_code"] == "Rejected"
+                for er in errata_map[rfc.rfc_number]
             ):
                 summary += " (all errata rejected)"
             DocEvent.objects.create(

From a34917937cafd0637a22e60e06e1dbcad72dcc53 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 14 Apr 2026 20:04:06 -0300
Subject: [PATCH 637/707] fix: lint / typing

---
 ietf/sync/errata.py |  9 +++++----
 ietf/sync/tests.py  | 22 ++++++++++++++++++----
 2 files changed, 23 insertions(+), 8 deletions(-)

diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 9f71cf111b..113d987291 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -2,7 +2,7 @@
 import datetime
 import json
 from collections import defaultdict
-from typing import DefaultDict, Literal
+from typing import DefaultDict
 
 from django.conf import settings
 from django.core.files.storage import storages
@@ -18,6 +18,7 @@
 
 DEFAULT_ERRATA_JSON_BLOB_NAME = "other/errata.json"
 
+type ErrataJsonEntry = dict[str, str]
 
 def get_errata_last_updated() -> datetime.datetime:
     """Get timestamp of the last errata.json update
@@ -30,7 +31,7 @@ def get_errata_last_updated() -> datetime.datetime:
     )
 
 
-def get_errata_data():
+def get_errata_data() -> list[ErrataJsonEntry]:
     red_bucket = storages["red_bucket"]
     with red_bucket.open(
         getattr(settings, "ERRATA_JSON_BLOB_NAME", DEFAULT_ERRATA_JSON_BLOB_NAME), "r"
@@ -39,7 +40,7 @@ def get_errata_data():
     return errata_data
 
 
-def errata_map_from_json(errata_data):
+def errata_map_from_json(errata_data: list[ErrataJsonEntry]):
     """Create a dict mapping RFC number to a list of applicable errata records"""
     errata = defaultdict(list)
     for item in errata_data:
@@ -50,7 +51,7 @@ def errata_map_from_json(errata_data):
     return dict(errata)
 
 
-def update_errata_tags(errata_data):
+def update_errata_tags(errata_data: list[ErrataJsonEntry]):
     tag_has_errata = DocTagName.objects.get(slug="errata")
     tag_has_verified_errata = DocTagName.objects.get(slug="verified-errata")
     system = Person.objects.get(name="(System)")
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index eb70bcf9e9..e83b6a5e0a 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -28,15 +28,29 @@
     DocEventFactory,
     BcpFactory, WgRfcFactory,
 )
-from ietf.doc.models import Document, DocEvent, DeletedEvent, DocTagName, RelatedDocument, State, StateDocEvent
+from ietf.doc.models import (
+    Document,
+    DocEvent,
+    DeletedEvent,
+    DocTagName,
+    RelatedDocument,
+    State,
+    StateDocEvent,
+)
 from ietf.doc.utils import add_state_change_event
 from ietf.group.factories import GroupFactory
 from ietf.person.factories import PersonFactory
 from ietf.person.models import Person
 from ietf.sync import iana, rfceditor, tasks
-from ietf.sync.errata import update_errata_from_rfceditor, get_errata_last_updated, \
-    get_errata_data, errata_map_from_json, update_errata_dirty_time, \
-    mark_errata_as_processed, update_errata_tags
+from ietf.sync.errata import (
+    update_errata_from_rfceditor,
+    get_errata_last_updated,
+    get_errata_data,
+    errata_map_from_json,
+    update_errata_dirty_time,
+    mark_errata_as_processed,
+    update_errata_tags,
+)
 from ietf.sync.tasks import update_errata_from_rfceditor_task
 from ietf.utils.mail import outbox, empty_outbox
 from ietf.utils.models import DirtyBits

From 15b2abd937f5d6e2b71667501309a965fdd9dc9d Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 16 Apr 2026 12:12:58 -0500
Subject: [PATCH 638/707] feat: serve notprepped rfc xml from datatracker
 (#10692)

* chore: move v3 RFC boundary number to settings

* feat: button for downloading unprepped RFCXML

* chore: ruff

* chore: refactor test to avoid setup overhead

* feat: serve notprepped bytes from blobdb

* fix: typo

* chore; improve test class name

* feat: wrapper explaining notprepped xml
---
 ietf/doc/feeds.py                          |   3 +-
 ietf/doc/tests_unprepped.py                | 118 +++++++++++++++++++++
 ietf/doc/urls.py                           |   2 +
 ietf/doc/views_doc.py                      |  31 +++++-
 ietf/settings.py                           |   4 +-
 ietf/sync/rfcindex.py                      |   2 +-
 ietf/templates/doc/document_rfc.html       |   9 ++
 ietf/templates/doc/notprepped_wrapper.html |  26 +++++
 8 files changed, 190 insertions(+), 5 deletions(-)
 create mode 100644 ietf/doc/tests_unprepped.py
 create mode 100644 ietf/templates/doc/notprepped_wrapper.html

diff --git a/ietf/doc/feeds.py b/ietf/doc/feeds.py
index afe96cf0df..0269906fcf 100644
--- a/ietf/doc/feeds.py
+++ b/ietf/doc/feeds.py
@@ -5,6 +5,7 @@
 import datetime
 import unicodedata
 
+from django.conf import settings
 from django.contrib.syndication.views import Feed, FeedDoesNotExist
 from django.utils.feedgenerator import Atom1Feed, Rss201rev2Feed
 from django.urls import reverse as urlreverse
@@ -223,7 +224,7 @@ def item_extra_kwargs(self, item):
         extra.update({"dcterms_accessRights": "gratis"})
         extra.update({"dcterms_format": "text/html"})
         media_contents = []
-        if item.rfc_number < 8650:
+        if item.rfc_number < settings.FIRST_V3_RFC:
             if item.rfc_number not in [8, 9, 51, 418, 500, 530, 589]:
                 for fmt, media_type in [("txt", "text/plain"), ("html", "text/html")]:
                     media_contents.append(
diff --git a/ietf/doc/tests_unprepped.py b/ietf/doc/tests_unprepped.py
new file mode 100644
index 0000000000..f88af8e81a
--- /dev/null
+++ b/ietf/doc/tests_unprepped.py
@@ -0,0 +1,118 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.conf import settings
+from django.utils import timezone
+from django.urls import reverse as urlreverse
+
+from pyquery import PyQuery
+
+from ietf.doc.factories import WgRfcFactory
+from ietf.doc.models import StoredObject
+from ietf.doc.storage_utils import store_bytes
+from ietf.utils.test_utils import TestCase
+
+
+class UnpreppedRfcXmlTests(TestCase):
+    def test_editor_source_button_visibility(self):
+        pre_v3 = WgRfcFactory(rfc_number=settings.FIRST_V3_RFC - 1)
+        first_v3 = WgRfcFactory(rfc_number=settings.FIRST_V3_RFC)
+        post_v3 = WgRfcFactory(rfc_number=settings.FIRST_V3_RFC + 1)
+
+        for rfc, expect_button in [(pre_v3, False), (first_v3, True), (post_v3, True)]:
+            r = self.client.get(
+                urlreverse(
+                    "ietf.doc.views_doc.document_main", kwargs=dict(name=rfc.name)
+                )
+            )
+            self.assertEqual(r.status_code, 200)
+            buttons = PyQuery(r.content)('a.btn:contains("Get editor source")')
+            if expect_button:
+                self.assertEqual(len(buttons), 1, msg=f"rfc_number={rfc.rfc_number}")
+                expected_href = urlreverse(
+                    "ietf.doc.views_doc.rfcxml_notprepped_wrapper",
+                    kwargs=dict(number=rfc.rfc_number),
+                )
+                self.assertEqual(
+                    buttons.attr("href"),
+                    expected_href,
+                    msg=f"rfc_number={rfc.rfc_number}",
+                )
+            else:
+                self.assertEqual(len(buttons), 0, msg=f"rfc_number={rfc.rfc_number}")
+
+    def test_rfcxml_notprepped(self):
+        number = settings.FIRST_V3_RFC
+        stored_name = f"notprepped/rfc{number}.notprepped.xml"
+        url = f"/doc/rfc{number}/notprepped/"
+
+        # 404 for pre-v3 RFC numbers (no document needed)
+        r = self.client.get(f"/doc/rfc{number - 1}/notprepped/")
+        self.assertEqual(r.status_code, 404)
+
+        # 404 when no RFC document exists in the database
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+
+        # 404 when RFC document exists but has no StoredObject
+        WgRfcFactory(rfc_number=number)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+
+        # 404 when StoredObject exists but backing storage is missing (FileNotFoundError)
+        now = timezone.now()
+        StoredObject.objects.create(
+            store="rfc",
+            name=stored_name,
+            sha384="a" * 96,
+            len=0,
+            store_created=now,
+            created=now,
+            modified=now,
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 404)
+
+        # 200 with correct content-type and body when object is fully stored
+        xml_content = b"<rfc>test</rfc>"
+        store_bytes("rfc", stored_name, xml_content, allow_overwrite=True)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r["Content-Type"], "application/xml")
+        self.assertEqual(r.content, xml_content)
+
+    def test_rfcxml_notprepped_wrapper(self):
+        number = settings.FIRST_V3_RFC
+
+        # 404 for pre-v3 RFC numbers (no document needed)
+        r = self.client.get(
+            urlreverse(
+                "ietf.doc.views_doc.rfcxml_notprepped_wrapper",
+                kwargs=dict(number=number - 1),
+            )
+        )
+        self.assertEqual(r.status_code, 404)
+
+        # 404 when no RFC document exists in the database
+        r = self.client.get(
+            urlreverse(
+                "ietf.doc.views_doc.rfcxml_notprepped_wrapper",
+                kwargs=dict(number=number),
+            )
+        )
+        self.assertEqual(r.status_code, 404)
+
+        # 200 with rendered template when RFC document exists
+        rfc = WgRfcFactory(rfc_number=number)
+        r = self.client.get(
+            urlreverse(
+                "ietf.doc.views_doc.rfcxml_notprepped_wrapper",
+                kwargs=dict(number=number),
+            )
+        )
+        self.assertEqual(r.status_code, 200)
+        q = PyQuery(r.content)
+        self.assertIn(str(rfc.rfc_number), q("h1").text())
+        download_url = urlreverse(
+            "ietf.doc.views_doc.rfcxml_notprepped", kwargs=dict(number=number)
+        )
+        self.assertEqual(len(q(f'a.btn[href="{download_url}"]')), 1)
diff --git a/ietf/doc/urls.py b/ietf/doc/urls.py
index 61e94b2231..0c13503b78 100644
--- a/ietf/doc/urls.py
+++ b/ietf/doc/urls.py
@@ -99,6 +99,8 @@
 
     url(r'^%(name)s(?:/%(rev)s)?/$' % settings.URL_REGEXPS, views_doc.document_main),
     url(r'^%(name)s(?:/%(rev)s)?/bibtex/$' % settings.URL_REGEXPS, views_doc.document_bibtex),
+    url(r'^rfc(?P<number>[0-9]+)/notprepped/$' , views_doc.rfcxml_notprepped),
+    url(r'^rfc(?P<number>[0-9]+)/notprepped-wrapper/$', views_doc.rfcxml_notprepped_wrapper),
     url(r'^%(name)s(?:/%(rev)s)?/idnits2-state/$' % settings.URL_REGEXPS, views_doc.idnits2_state),
     url(r'^bibxml3/reference.I-D.%(name)s(?:-%(rev)s)?.xml$' % settings.URL_REGEXPS, views_doc.document_bibxml_ref),
     url(r'^bibxml3/%(name)s(?:-%(rev)s)?.xml$' % settings.URL_REGEXPS, views_doc.document_bibxml),
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index c1f6352ac3..a23185333e 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2009-2024, All Rights Reserved
+# Copyright The IETF Trust 2009-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 #
 # Parts Copyright (C) 2009-2010 Nokia Corporation and/or its subsidiary(-ies).
@@ -57,7 +57,7 @@
 import debug                            # pyflakes:ignore
 
 from ietf.doc.models import ( Document, DocHistory, DocEvent, BallotDocEvent, BallotType,
-    ConsensusDocEvent, NewRevisionDocEvent, TelechatDocEvent, WriteupDocEvent, IanaExpertDocEvent,
+    ConsensusDocEvent, NewRevisionDocEvent, StoredObject, TelechatDocEvent, WriteupDocEvent, IanaExpertDocEvent,
     IESG_BALLOT_ACTIVE_STATES, STATUSCHANGE_RELATIONS, DocumentActionHolder, DocumentAuthor,
     RelatedDocument, RelatedDocHistory)
 from ietf.doc.tasks import investigate_fragment_task
@@ -86,6 +86,7 @@
 from ietf.review.models import ReviewAssignment
 from ietf.review.utils import can_request_review_of_doc, review_assignments_to_list_for_docs, review_requests_to_list_for_docs
 from ietf.review.utils import no_review_from_teams_on_doc
+from ietf.doc.storage_utils import retrieve_bytes
 from ietf.utils import markup_txt, log, markdown
 from ietf.utils.draft import get_status_from_draft_text
 from ietf.utils.meetecho import MeetechoAPIError, SlidesManager
@@ -2356,3 +2357,29 @@ def investigate(request):
             "results": results,
         },
     )
+
+def rfcxml_notprepped(request, number):
+    number = int(number)
+    if number < settings.FIRST_V3_RFC:
+        raise Http404
+    rfc = Document.objects.filter(type="rfc", rfc_number=number).first()
+    if rfc is None:
+        raise Http404
+    name = f"notprepped/rfc{number}.notprepped.xml"
+    if not StoredObject.objects.filter(name=name).exists():
+        raise Http404
+    try:
+        bytes = retrieve_bytes("rfc", name)
+    except FileNotFoundError:
+        raise Http404
+    return HttpResponse(bytes, content_type="application/xml")
+
+
+def rfcxml_notprepped_wrapper(request, number):
+    number = int(number)
+    if number < settings.FIRST_V3_RFC:
+        raise Http404
+    rfc = Document.objects.filter(type="rfc", rfc_number=number).first()
+    if rfc is None:
+        raise Http404
+    return render(request, "doc/notprepped_wrapper.html", context={"rfc": rfc})
diff --git a/ietf/settings.py b/ietf/settings.py
index 40a4cb5c56..3aa45a453c 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -235,7 +235,9 @@
 
 AUTHENTICATION_BACKENDS = ( 'ietf.ietfauth.backends.CaseInsensitiveModelBackend', )
 
-FILE_UPLOAD_PERMISSIONS = 0o644          
+FILE_UPLOAD_PERMISSIONS = 0o644
+
+FIRST_V3_RFC = 8650
 
 
 #
diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index 6864617874..d1a0ed432f 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -153,7 +153,7 @@ def get_publication_std_levels() -> dict[int, StdLevelName]:
 
 
 def format_ordering(rfc_number):
-    if rfc_number < 8650:
+    if rfc_number < settings.FIRST_V3_RFC:
         ordering = ["txt", "ps", "pdf", "html", "xml"]
     else:
         ordering = ["html", "txt", "ps", "pdf", "xml"]
diff --git a/ietf/templates/doc/document_rfc.html b/ietf/templates/doc/document_rfc.html
index 7612ef8910..d4b309a964 100644
--- a/ietf/templates/doc/document_rfc.html
+++ b/ietf/templates/doc/document_rfc.html
@@ -124,6 +124,15 @@
                 </i>
                 Referenced by
             </a>
+            {% if doc.rfc_number >= settings.FIRST_V3_RFC %}
+            <a class="btn btn-primary btn-sm"
+              href="{% url 'ietf.doc.views_doc.rfcxml_notprepped_wrapper' number=doc.rfc_number %}"
+              rel="nofollow">
+              <i class="bi bi-vector-pen">
+              </i>
+              Get editor source
+            </a>
+            {% endif %}
             <a class="btn btn-primary btn-sm"
                 href="https://mailarchive.ietf.org/arch/search?q=%22{{ doc.name }}%22"
                 rel="nofollow"
diff --git a/ietf/templates/doc/notprepped_wrapper.html b/ietf/templates/doc/notprepped_wrapper.html
new file mode 100644
index 0000000000..078db7bc51
--- /dev/null
+++ b/ietf/templates/doc/notprepped_wrapper.html
@@ -0,0 +1,26 @@
+{% extends "base.html" %}
+{# Copyright The IETF Trust 2026, All Rights Reserved #}
+{% load origin %}
+{% block title %}RFC {{ rfc.rfc_number }} — Not-prepped XML{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>RFC {{ rfc.rfc_number }} — Not-prepped XML</h1>
+    <p>
+        The <em>not-prepped</em> XML 
+        is the RFC XML v3 source for an RFC at the moment in the publication process
+        just before the prep tool was used to expand default
+        values, generate section numbers, resolve cross-references, and embed
+        boilerplate.  
+    </p><p>   
+        It is useful for authors who want to begin a new draft based on
+        the RFC's text, such as when creating a bis-draft, and for tools that process 
+        author-facing RFC XML.
+    </p>
+    <p>
+        <a class="btn btn-primary"
+           href="{% url 'ietf.doc.views_doc.rfcxml_notprepped' number=rfc.rfc_number %}">
+            <i class="bi bi-download"></i>
+            Download not-prepped XML for RFC {{ rfc.rfc_number }}
+        </a>
+    </p>
+{% endblock %}

From 20480d6242254693b3dbcbf9b73380b5b3c838cb Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 16 Apr 2026 13:59:23 -0500
Subject: [PATCH 639/707] fix: force notprepped downloads (#10719)

---
 ietf/doc/{tests_unprepped.py => tests_notprepped.py} | 10 +++++++---
 ietf/doc/views_doc.py                                |  5 +++--
 2 files changed, 10 insertions(+), 5 deletions(-)
 rename ietf/doc/{tests_unprepped.py => tests_notprepped.py} (92%)

diff --git a/ietf/doc/tests_unprepped.py b/ietf/doc/tests_notprepped.py
similarity index 92%
rename from ietf/doc/tests_unprepped.py
rename to ietf/doc/tests_notprepped.py
index f88af8e81a..f417aa7931 100644
--- a/ietf/doc/tests_unprepped.py
+++ b/ietf/doc/tests_notprepped.py
@@ -12,7 +12,7 @@
 from ietf.utils.test_utils import TestCase
 
 
-class UnpreppedRfcXmlTests(TestCase):
+class NotpreppedRfcXmlTests(TestCase):
     def test_editor_source_button_visibility(self):
         pre_v3 = WgRfcFactory(rfc_number=settings.FIRST_V3_RFC - 1)
         first_v3 = WgRfcFactory(rfc_number=settings.FIRST_V3_RFC)
@@ -72,13 +72,17 @@ def test_rfcxml_notprepped(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 404)
 
-        # 200 with correct content-type and body when object is fully stored
+        # 200 with correct content-type, attachment disposition, and body when object is fully stored
         xml_content = b"<rfc>test</rfc>"
         store_bytes("rfc", stored_name, xml_content, allow_overwrite=True)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         self.assertEqual(r["Content-Type"], "application/xml")
-        self.assertEqual(r.content, xml_content)
+        self.assertEqual(
+            r["Content-Disposition"],
+            f'attachment; filename="rfc{number}.notprepped.xml"',
+        )
+        self.assertEqual(b"".join(r.streaming_content), xml_content)
 
     def test_rfcxml_notprepped_wrapper(self):
         number = settings.FIRST_V3_RFC
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index a23185333e..5b57a62074 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -43,9 +43,10 @@
 
 from celery.result import AsyncResult
 from django.core.cache import caches
+from django.core.files.base import ContentFile
 from django.core.exceptions import PermissionDenied
 from django.db.models import Max
-from django.http import HttpResponse, Http404, HttpResponseBadRequest, JsonResponse
+from django.http import FileResponse, HttpResponse, Http404, HttpResponseBadRequest, JsonResponse
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
@@ -2372,7 +2373,7 @@ def rfcxml_notprepped(request, number):
         bytes = retrieve_bytes("rfc", name)
     except FileNotFoundError:
         raise Http404
-    return HttpResponse(bytes, content_type="application/xml")
+    return FileResponse(ContentFile(bytes, name=f"rfc{number}.notprepped.xml"), as_attachment=True)
 
 
 def rfcxml_notprepped_wrapper(request, number):

From 9cecc36bc7e42ecc5cd196d96f4bd0eaf03b5e69 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 17 Apr 2026 00:25:02 -0300
Subject: [PATCH 640/707] feat: rebuild_searchindex task (#10723)

* refactor: DRY

* chore: typesense docker container (commented out)

* feat: batched RFC search index import

* feat: rebuild_searchindex task

* feat: logging / error reporting

* refactor: _task suffix for task name

* test: tests for searchindex utils + tasks

* fix: only create collection if dropped

* fix: typing / lint
---
 docker-compose.yml              |  12 ++
 ietf/doc/tasks.py               |  11 ++
 ietf/doc/tests_tasks.py         |  43 ++++++
 ietf/utils/searchindex.py       | 239 ++++++++++++++++++++++++++++++--
 ietf/utils/tests_searchindex.py | 152 +++++++++++++++-----
 5 files changed, 410 insertions(+), 47 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 4c3f2f6b8e..073d04b896 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -132,6 +132,18 @@ services:
         volumes:
             - blobdb-data:/var/lib/postgresql/data
 
+#    typesense:
+#        image: typesense/typesense:30.1
+#        restart: on-failure
+#        ports:
+#            - "8108:8108"
+#        volumes:
+#            - ./typesense-data:/data
+#        command:
+#            - '--data-dir=/data'
+#            - '--api-key=typesense-api-key'
+#            - '--enable-cors'
+
 #  Celery Beat is a periodic task runner. It is not normally needed for development,
 #  but can be enabled by uncommenting the following.
 #
diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 19edb39014..273242e35f 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -209,3 +209,14 @@ def update_rfc_searchindex_task(self, rfc_number: int):
                 countdown=searchindex_settings["TASK_RETRY_DELAY"],
                 max_retries=searchindex_settings["TASK_MAX_RETRIES"],
             )
+
+
+@shared_task
+def rebuild_searchindex_task(*, batchsize=40, drop_collection=False):
+    if drop_collection:
+        searchindex.delete_collection()
+        searchindex.create_collection()
+    searchindex.update_or_create_rfc_entries(
+        Document.objects.filter(type_id="rfc").order_by("-rfc_number"),
+        batchsize=batchsize,
+    )
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 728d21f131..2e2d65463f 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -24,6 +24,7 @@
     generate_idnits2_rfc_status_task,
     investigate_fragment_task,
     notify_expirations_task,
+    rebuild_searchindex_task,
     update_rfc_searchindex_task,
 )
 
@@ -144,6 +145,48 @@ def test_update_rfc_searchindex_task(
             with self.assertRaises(Retry):
                 update_rfc_searchindex_task(rfc_number=rfc.rfc_number)
 
+    @mock.patch("ietf.doc.tasks.searchindex.update_or_create_rfc_entries")
+    @mock.patch("ietf.doc.tasks.searchindex.create_collection")
+    @mock.patch("ietf.doc.tasks.searchindex.delete_collection")
+    def test_rebuild_searchindex_task(self, mock_delete, mock_create, mock_update):
+        rfcs = WgRfcFactory.create_batch(10)
+        rebuild_searchindex_task()
+        self.assertFalse(mock_delete.called)
+        self.assertFalse(mock_create.called)
+        self.assertTrue(mock_update.called)
+        self.assertQuerysetEqual(
+            mock_update.call_args.args[0],
+            sorted(rfcs, key=lambda doc: -doc.rfc_number),
+            ordered=True,
+        )
+
+        mock_delete.reset_mock()
+        mock_create.reset_mock()
+        mock_update.reset_mock()
+        rebuild_searchindex_task(drop_collection=True)
+        self.assertTrue(mock_delete.called)
+        self.assertTrue(mock_create.called)
+        self.assertTrue(mock_update.called)
+        self.assertQuerysetEqual(
+            mock_update.call_args.args[0],
+            sorted(rfcs, key=lambda doc: -doc.rfc_number),
+            ordered=True,
+        )
+
+        mock_delete.reset_mock()
+        mock_create.reset_mock()
+        mock_update.reset_mock()
+        rebuild_searchindex_task(drop_collection=True, batchsize=3)
+        self.assertTrue(mock_delete.called)
+        self.assertTrue(mock_create.called)
+        self.assertTrue(mock_update.called)
+        self.assertQuerysetEqual(
+            mock_update.call_args.args[0],
+            sorted(rfcs, key=lambda doc: -doc.rfc_number),
+            ordered=True,
+        )
+        self.assertEqual(mock_update.call_args.kwargs["batchsize"], 3)
+
 
 class Idnits2SupportTests(TestCase):
     settings_temp_path_overrides = TestCase.settings_temp_path_overrides + [
diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index e4427b88b5..a47e6d2f12 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -2,12 +2,15 @@
 """Search indexing utilities"""
 
 import re
+from itertools import batched
 from math import floor
+from typing import Iterable
 
 import httpx  # just for exceptions
 import typesense
 import typesense.exceptions
 from django.conf import settings
+from typesense.types.document import DocumentSchema
 
 from ietf.doc.models import Document, StoredObject
 from ietf.doc.storage_utils import retrieve_str
@@ -42,6 +45,24 @@ def enabled():
     return _settings["TYPESENSE_API_URL"] != ""
 
 
+def get_typesense_client() -> typesense.Client:
+    _settings = get_settings()
+    client = typesense.Client(
+        {
+            "api_key": _settings["TYPESENSE_API_KEY"],
+            "nodes": [_settings["TYPESENSE_API_URL"]],
+        }
+    )
+    return client
+
+
+def get_collection_name() -> str:
+    _settings = get_settings()
+    collection_name = _settings["TYPESENSE_COLLECTION_NAME"]
+    assert isinstance(collection_name, str)
+    return collection_name
+
+
 def _sanitize_text(content):
     """Sanitize content or abstract text for search"""
     # REs (with approximate names)
@@ -62,7 +83,7 @@ def _sanitize_text(content):
     return content.strip()
 
 
-def update_or_create_rfc_entry(rfc: Document):
+def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
     assert rfc.type_id == "rfc"
     assert rfc.rfc_number is not None
 
@@ -75,8 +96,8 @@ def update_or_create_rfc_entry(rfc: Document):
             f"Indexing as {subseries[0].name}"
         )
     subseries = subseries[0] if len(subseries) > 0 else None
-    obsoleted_by = rfc.relations_that("obs")
-    updated_by = rfc.relations_that("updates")
+    obsoleted_by = rfc.related_that("obs")
+    updated_by = rfc.related_that("updates")
 
     stored_txt = (
         StoredObject.objects.exclude_deleted()
@@ -91,8 +112,8 @@ def update_or_create_rfc_entry(rfc: Document):
         except Exception as err:
             log(f"Unable to retrieve {stored_txt} from storage: {err}")
 
-    ts_id = f"doc-{rfc.pk}"
     ts_document = {
+        "id": f"doc-{rfc.pk}",
         "rfcNumber": rfc.rfc_number,
         "rfc": str(rfc.rfc_number),
         "filename": rfc.name,
@@ -143,13 +164,205 @@ def update_or_create_rfc_entry(rfc: Document):
         ts_document["adName"] = rfc.ad.name
     if content != "":
         ts_document["content"] = _sanitize_text(content)
-    _settings = get_settings()
-    client = typesense.Client(
+    return ts_document
+
+
+def update_or_create_rfc_entry(rfc: Document):
+    """Update/create index entries for one RFC"""
+    ts_document = typesense_doc_from_rfc(rfc)
+    client = get_typesense_client()
+    client.collections[get_collection_name()].documents.upsert(ts_document)
+
+
+def update_or_create_rfc_entries(
+    rfcs: Iterable[Document], batchsize: int | None = None
+):
+    """Update/create index entries for RFCs in bulk
+
+    If batchsize is set, computes index data in batches of batchsize and adds to the
+    index. Will make a total of (len(rfcs) // batchsize) + 1 API calls.
+
+    N.b. that typesense has a server-side batch size that defaults to 40, which should
+    "almost never be changed from the default." This does not change that. Further,
+    the python client library's import_ method has a batch_size parameter that does
+    client-side batching. We don't use that, either.
+    """
+    success_count = 0
+    fail_count = 0
+    client = get_typesense_client()
+    batches = [rfcs] if batchsize is None else batched(rfcs, batchsize)
+    for batch in batches:
+        tdoc_batch = [typesense_doc_from_rfc(rfc) for rfc in batch]
+        results = client.collections[get_collection_name()].documents.import_(
+            tdoc_batch, {"action": "upsert"}
+        )
+        for tdoc, result in zip(tdoc_batch, results):
+            if result["success"]:
+                success_count += 1
+            else:
+                fail_count += 1
+                log(f"Failed to index RFC {tdoc['rfcNumber']}: {result['error']}")
+    log(f"Added {success_count} RFCs to the index, failed to add {fail_count}")
+
+
+DOCS_SCHEMA = {
+    "enable_nested_fields": True,
+    "default_sorting_field": "ranking",
+    "fields": [
+        # RFC number in integer form, for sorting asc/desc in search results
+        # Omit field for drafts
         {
-            "api_key": _settings["TYPESENSE_API_KEY"],
-            "nodes": [_settings["TYPESENSE_API_URL"]],
-        }
-    )
-    client.collections[_settings["TYPESENSE_COLLECTION_NAME"]].documents.upsert(
-        {"id": ts_id} | ts_document
-    )
+            "name": "rfcNumber",
+            "type": "int32",
+            "facet": False,
+            "optional": True,
+            "sort": True,
+        },
+        # RFC number in string form, for direct matching with ranking
+        # Omit field for drafts
+        {"name": "rfc", "type": "string", "facet": False, "optional": True},
+        # For drafts that correspond to an RFC, insert the RFC number
+        # Omit field for rfcs or if not relevant
+        {"name": "ref", "type": "string", "facet": False, "optional": True},
+        # Filename of the document (without the extension, e.g. "rfc1234"
+        # or "draft-ietf-abc-def-02")
+        {"name": "filename", "type": "string", "facet": False, "infix": True},
+        # Title of the draft / rfc
+        {"name": "title", "type": "string", "facet": False},
+        # Abstract of the draft / rfc
+        {"name": "abstract", "type": "string", "facet": False},
+        # A list of search keywords if relevant, set to empty array otherwise
+        {"name": "keywords", "type": "string[]", "facet": True},
+        # Type of the document
+        # Accepted values: "draft" or "rfc"
+        {"name": "type", "type": "string", "facet": True},
+        # State(s) of the document (e.g. "Published", "Adopted by a WG", etc.)
+        # Use the full name, not the slug
+        {"name": "state", "type": "string[]", "facet": True, "optional": True},
+        # Status (Standard Level Name)
+        # Object with properties "slug" and "name"
+        # e.g.: { slug: "std", "name": "Internet Standard" }
+        {"name": "status", "type": "object", "facet": True, "optional": True},
+        # The subseries it is part of. (e.g. "BCP")
+        # Omit otherwise.
+        {
+            "name": "subseries.acronym",
+            "type": "string",
+            "facet": True,
+            "optional": True,
+        },
+        # The subseries number it is part of. (e.g. 123)
+        # Omit otherwise.
+        {
+            "name": "subseries.number",
+            "type": "int32",
+            "facet": True,
+            "sort": True,
+            "optional": True,
+        },
+        # The total of RFCs in the subseries
+        # Omit if not part of a subseries
+        {
+            "name": "subseries.total",
+            "type": "int32",
+            "facet": False,
+            "sort": False,
+            "optional": True,
+        },
+        # Date of the document, in unix epoch seconds (can be negative for < 1970)
+        {"name": "date", "type": "int64", "facet": False},
+        # Expiration date of the document, in unix epoch seconds (can be negative
+        # for < 1970). Omit field for RFCs
+        {"name": "expires", "type": "int64", "facet": False, "optional": True},
+        # Publication date of the RFC, in unix epoch seconds (can be negative
+        # for < 1970). Omit field for drafts
+        {
+            "name": "publicationDate",
+            "type": "int64",
+            "facet": True,
+            "optional": True,
+        },
+        # Working Group
+        # Object with properties "acronym", "name" and "full"
+        # e.g.:
+        # {
+        #     "acronym": "ntp",
+        #     "name": "Network Time Protocols",
+        #     "full": "ntp - Network Time Protocols",
+        # }
+        {"name": "group", "type": "object", "facet": True, "optional": True},
+        # Area
+        # Object with properties "acronym", "name" and "full"
+        # e.g.:
+        # {
+        #     "acronym": "mpls",
+        #     "name": "Multiprotocol Label Switching",
+        #     "full": "mpls - Multiprotocol Label Switching",
+        # }
+        {"name": "area", "type": "object", "facet": True, "optional": True},
+        # Stream
+        # Object with properties "slug" and "name"
+        # e.g.: { slug: "ietf", "name": "IETF" }
+        {"name": "stream", "type": "object", "facet": True, "optional": True},
+        # List of authors
+        # Array of objects with properties "name" and "affiliation"
+        # e.g.:
+        # [
+        #     {"name": "John Doe", "affiliation": "ACME Inc."},
+        #     {"name": "Ada Lovelace", "affiliation": "Babbage Corps."},
+        # ]
+        {"name": "authors", "type": "object[]", "facet": True, "optional": True},
+        # Area Director Name (e.g. "Leonardo DaVinci")
+        {"name": "adName", "type": "string", "facet": True, "optional": True},
+        # Whether the document should be hidden by default in search results or not.
+        {"name": "flags.hiddenDefault", "type": "bool", "facet": True},
+        # Whether the document is obsoleted by another document or not.
+        {"name": "flags.obsoleted", "type": "bool", "facet": True},
+        # Whether the document is updated by another document or not.
+        {"name": "flags.updated", "type": "bool", "facet": True},
+        # List of documents that obsolete this document.
+        # Array of strings. Use RFC number for RFCs. (e.g. ["123", "456"])
+        # Omit if none. Must be provided if "flags.obsoleted" is set to True.
+        {
+            "name": "obsoletedBy",
+            "type": "string[]",
+            "facet": False,
+            "optional": True,
+        },
+        # List of documents that update this document.
+        # Array of strings. Use RFC number for RFCs. (e.g. ["123", "456"])
+        # Omit if none. Must be provided if "flags.updated" is set to True.
+        {"name": "updatedBy", "type": "string[]", "facet": False, "optional": True},
+        # Sanitized content of the document.
+        # Make sure to remove newlines, double whitespaces, symbols and tags.
+        {
+            "name": "content",
+            "type": "string",
+            "facet": False,
+            "optional": True,
+            "store": False,
+        },
+        # Ranking value to use when no explicit sorting is used during search
+        # Set to the RFC number for RFCs and the revision number for drafts
+        # This ensures newer RFCs get listed first in the default search results
+        # (without a query)
+        {"name": "ranking", "type": "int32", "facet": False},
+    ],
+}
+
+
+def create_collection():
+    collection_name = get_collection_name()
+    log(f"Creating '{collection_name}' collection")
+    client = get_typesense_client()
+    client.collections.create({"name": get_collection_name()} | DOCS_SCHEMA)
+
+
+def delete_collection():
+    collection_name = get_collection_name()
+    log(f"Deleting '{collection_name}' collection")
+    client = get_typesense_client()
+    try:
+        client.collections[collection_name].delete()
+    except typesense.exceptions.ObjectNotFound:
+        pass
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
index 8740716c85..0bff96ec7d 100644
--- a/ietf/utils/tests_searchindex.py
+++ b/ietf/utils/tests_searchindex.py
@@ -1,6 +1,7 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 from unittest import mock
 
+import typesense.exceptions
 from django.conf import settings
 from django.test.utils import override_settings
 
@@ -51,42 +52,29 @@ def test_sanitize_text(self):
             "TYPESENSE_COLLECTION_NAME": "frogs",
         }
     )
-    @mock.patch("ietf.utils.searchindex.typesense.Client")
-    def test_update_or_create_rfc_entry(self, mock_ts_client_constructor):
+    def test_typesense_doc_from_rfc(self):
         not_rfc = WgDraftFactory()
         assert isinstance(not_rfc, Document)
         with self.assertRaises(AssertionError):
-            searchindex.update_or_create_rfc_entry(not_rfc)
-        self.assertFalse(mock_ts_client_constructor.called)
+            searchindex.typesense_doc_from_rfc(not_rfc)
 
         invalid_rfc = WgRfcFactory(name="rfc1000000", rfc_number=None)
         assert isinstance(invalid_rfc, Document)
         with self.assertRaises(AssertionError):
-            searchindex.update_or_create_rfc_entry(invalid_rfc)
-        self.assertFalse(mock_ts_client_constructor.called)
+            searchindex.typesense_doc_from_rfc(invalid_rfc)
 
         rfc = PublishedRfcDocEventFactory().doc
         assert isinstance(rfc, Document)
-        searchindex.update_or_create_rfc_entry(rfc)
-        self.assertTrue(mock_ts_client_constructor.called)
-        # walk the tree down to the method we expected to be called...
-        mock_upsert = mock_ts_client_constructor.return_value.collections[
-            "frogs"
-        ].documents.upsert  # matches value in override_settings above
-        self.assertTrue(mock_upsert.called)
-        upserted_dict = mock_upsert.call_args[0][0]
+        result = searchindex.typesense_doc_from_rfc(rfc)
         # Check a few values, not exhaustive
-        self.assertEqual(upserted_dict["id"], f"doc-{rfc.pk}")
-        self.assertEqual(upserted_dict["rfcNumber"], rfc.rfc_number)
-        self.assertEqual(
-            upserted_dict["abstract"], searchindex._sanitize_text(rfc.abstract)
-        )
-        self.assertNotIn("adName", upserted_dict)
-        self.assertNotIn("content", upserted_dict)  # no blob
-        self.assertNotIn("subseries", upserted_dict)
+        self.assertEqual(result["id"], f"doc-{rfc.pk}")
+        self.assertEqual(result["rfcNumber"], rfc.rfc_number)
+        self.assertEqual(result["abstract"], searchindex._sanitize_text(rfc.abstract))
+        self.assertNotIn("adName", result)
+        self.assertNotIn("content", result)  # no blob
+        self.assertNotIn("subseries", result)
 
         # repeat, this time with contents, an AD, and subseries docs
-        mock_upsert.reset_mock()
         store_str(
             kind="rfc",
             name=f"txt/{rfc.name}.txt",
@@ -99,17 +87,15 @@ def test_update_or_create_rfc_entry(self, mock_ts_client_constructor):
         # (the typesense schema does not support this for real at the moment)
         BcpFactory(contains=[rfc], name="bcp1234")
         StdFactory(contains=[rfc], name="std1234")
-        searchindex.update_or_create_rfc_entry(rfc)
-        self.assertTrue(mock_upsert.called)
-        upserted_dict = mock_upsert.call_args[0][0]
+        result = searchindex.typesense_doc_from_rfc(rfc)
         # Check a few values, not exhaustive
         self.assertEqual(
-            upserted_dict["content"],
+            result["content"],
             searchindex._sanitize_text("The contents of this RFC"),
         )
-        self.assertEqual(upserted_dict["adName"], "Alfred D. Rector")
-        self.assertIn("subseries", upserted_dict)
-        ss_dict = upserted_dict["subseries"]
+        self.assertEqual(result["adName"], "Alfred D. Rector")
+        self.assertIn("subseries", result)
+        ss_dict = result["subseries"]
         # We should get one of the two subseries docs, but neither is more correct
         # than the other...
         self.assertTrue(
@@ -119,10 +105,108 @@ def test_update_or_create_rfc_entry(self, mock_ts_client_constructor):
             )
         )
 
-        # Finally, delete the contents blob and make sure things don't blow up 
-        mock_upsert.reset_mock()
+        # Finally, delete the contents blob and make sure things don't blow up
         Blob.objects.get(bucket="rfc", name=f"txt/{rfc.name}.txt").delete()
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertNotIn("content", result)
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    @mock.patch("ietf.utils.searchindex.typesense_doc_from_rfc")
+    @mock.patch("ietf.utils.searchindex.typesense.Client")
+    def test_update_or_create_rfc_entry(
+        self, mock_ts_client_constructor, mock_tdoc_from_rfc
+    ):
+        fake_tdoc = object()
+        mock_tdoc_from_rfc.return_value = fake_tdoc
+        rfc = WgRfcFactory()
+        assert isinstance(rfc, Document)
         searchindex.update_or_create_rfc_entry(rfc)
+        self.assertTrue(mock_ts_client_constructor.called)
+        # walk the tree down to the method we expected to be called...
+        mock_upsert = mock_ts_client_constructor.return_value.collections[
+            "frogs"  # matches value in override_settings above
+        ].documents.upsert
         self.assertTrue(mock_upsert.called)
-        upserted_dict = mock_upsert.call_args[0][0]
-        self.assertNotIn("content", upserted_dict)
+        self.assertEqual(mock_upsert.call_args, mock.call(fake_tdoc))
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    @mock.patch("ietf.utils.searchindex.typesense_doc_from_rfc")
+    @mock.patch("ietf.utils.searchindex.typesense.Client")
+    def test_update_or_create_rfc_entries(
+        self, mock_ts_client_constructor, mock_tdoc_from_rfc
+    ):
+        fake_tdoc = object()
+        mock_tdoc_from_rfc.return_value = fake_tdoc
+        rfc = WgRfcFactory()
+        assert isinstance(rfc, Document)
+        searchindex.update_or_create_rfc_entries([rfc] * 50)  # list of docs...
+        self.assertEqual(mock_ts_client_constructor.call_count, 1)
+        # walk the tree down to the method we expected to be called...
+        mock_import_ = mock_ts_client_constructor.return_value.collections[
+            "frogs"  # matches value in override_settings above
+        ].documents.import_
+        self.assertEqual(mock_import_.call_count, 1)
+        self.assertEqual(
+            mock_import_.call_args, mock.call([fake_tdoc] * 50, {"action": "upsert"})
+        )
+
+        mock_import_.reset_mock()
+        searchindex.update_or_create_rfc_entries([rfc] * 50, batchsize=20)
+        self.assertEqual(mock_ts_client_constructor.call_count, 2)  # one more
+        # walk the tree down to the method we expected to be called...
+        mock_import_ = mock_ts_client_constructor.return_value.collections[
+            "frogs"  # matches value in override_settings above
+        ].documents.import_
+        self.assertEqual(mock_import_.call_count, 3)
+        self.assertEqual(
+            mock_import_.call_args_list,
+            [
+                mock.call([fake_tdoc] * 20, {"action": "upsert"}),
+                mock.call([fake_tdoc] * 20, {"action": "upsert"}),
+                mock.call([fake_tdoc] * 10, {"action": "upsert"}),
+            ],
+        )
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    @mock.patch("ietf.utils.searchindex.typesense.Client")
+    def test_create_collection(self, mock_ts_client_constructor):
+        searchindex.create_collection()
+        self.assertEqual(mock_ts_client_constructor.call_count, 1)
+        mock_collections = mock_ts_client_constructor.return_value.collections
+        self.assertTrue(mock_collections.create.called)
+        self.assertEqual(mock_collections.create.call_args[0][0]["name"], "frogs")
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    @mock.patch("ietf.utils.searchindex.typesense.Client")
+    def test_delete_collection(self, mock_ts_client_constructor):
+        searchindex.delete_collection()
+        self.assertEqual(mock_ts_client_constructor.call_count, 1)
+        mock_collections = mock_ts_client_constructor.return_value.collections
+        self.assertTrue(mock_collections["frogs"].delete.called)
+
+        mock_collections["frogs"].side_effect = typesense.exceptions.ObjectNotFound
+        searchindex.delete_collection()  # should ignore the exception

From c4cb8b91fc9434a3bb3419acfac2dd3b30cb4a6c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 17 Apr 2026 07:33:51 -0300
Subject: [PATCH 641/707] fix: add pages to typesense schema (#10726)

---
 ietf/utils/searchindex.py       | 4 ++++
 ietf/utils/tests_searchindex.py | 1 +
 2 files changed, 5 insertions(+)

diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index a47e6d2f12..87951abb60 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -86,6 +86,7 @@ def _sanitize_text(content):
 def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
     assert rfc.type_id == "rfc"
     assert rfc.rfc_number is not None
+    assert rfc.pages is not None
 
     keywords: list[str] = rfc.keywords  # help type checking
 
@@ -119,6 +120,7 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
         "filename": rfc.name,
         "title": rfc.title,
         "abstract": _sanitize_text(rfc.abstract),
+        "pages": rfc.pages,
         "keywords": keywords,
         "type": "rfc",
         "state": [state.name for state in rfc.states.all()],
@@ -231,6 +233,8 @@ def update_or_create_rfc_entries(
         {"name": "title", "type": "string", "facet": False},
         # Abstract of the draft / rfc
         {"name": "abstract", "type": "string", "facet": False},
+        # Number of pages
+        {"name": "pages", "type": "int32", "facet": False},
         # A list of search keywords if relevant, set to empty array otherwise
         {"name": "keywords", "type": "string[]", "facet": True},
         # Type of the document
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
index 0bff96ec7d..e9fbf52020 100644
--- a/ietf/utils/tests_searchindex.py
+++ b/ietf/utils/tests_searchindex.py
@@ -70,6 +70,7 @@ def test_typesense_doc_from_rfc(self):
         self.assertEqual(result["id"], f"doc-{rfc.pk}")
         self.assertEqual(result["rfcNumber"], rfc.rfc_number)
         self.assertEqual(result["abstract"], searchindex._sanitize_text(rfc.abstract))
+        self.assertEqual(result["pages"], rfc.pages)
         self.assertNotIn("adName", result)
         self.assertNotIn("content", result)  # no blob
         self.assertNotIn("subseries", result)

From 629ffb13480201e25fc5d941cfcea9de123562f9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 17 Apr 2026 15:04:23 -0300
Subject: [PATCH 642/707] fix: decode non-utf-8 blob content (#10729)

* refactor: decode_document_content() utility method

* fix: fall back to latin-1 in retrieve_str()

* refactor: match structure with retrieve_bytes()

* refactor: separate tests_text.py module

* test: test_decode_document_content + ruff

* fix: revert misguided refactor

* test: assert to guarantee test is valid
---
 ietf/doc/models.py        | 15 ++-------
 ietf/doc/storage_utils.py | 47 +++++++++++++-------------
 ietf/utils/tests.py       | 19 -----------
 ietf/utils/tests_text.py  | 71 +++++++++++++++++++++++++++++++++++++++
 ietf/utils/text.py        | 18 ++++++++++
 5 files changed, 114 insertions(+), 56 deletions(-)
 create mode 100644 ietf/utils/tests_text.py

diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 972f0a34e8..cc79b73831 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -52,6 +52,7 @@
 from ietf.person.utils import get_active_balloters
 from ietf.utils import log
 from ietf.utils.decorators import memoize
+from ietf.utils.text import decode_document_content
 from ietf.utils.validators import validate_no_control_chars
 from ietf.utils.mail import formataddr
 from ietf.utils.models import ForeignKey
@@ -640,19 +641,7 @@ def text(self, size = -1):
         except IOError as e:
             log.log(f"Error reading text for {path}: {e}")
             return None
-        text = None
-        try:
-            text = raw.decode('utf-8')
-        except UnicodeDecodeError:
-            for back in range(1,4):
-                try:
-                    text = raw[:-back].decode('utf-8')
-                    break
-                except UnicodeDecodeError:
-                    pass
-            if text is None:
-                text = raw.decode('latin-1')
-        return text
+        return decode_document_content(raw)
 
     def text_or_error(self):
         return self.text() or "Error; cannot read '%s'"%self.get_base_name()
diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index ffdd4599be..9c18bb8a8a 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -10,6 +10,7 @@
 from django.core.files.storage import storages, Storage
 
 from ietf.utils.log import log
+from ietf.utils.text import decode_document_content
 
 
 class StorageUtilsError(Exception):
@@ -164,32 +165,30 @@ def store_str(
 
 def retrieve_bytes(kind: str, name: str) -> bytes:
     from ietf.doc.storage import maybe_log_timing
-    content = b""
-    if settings.ENABLE_BLOBSTORAGE:
-        try:
-            store = _get_storage(kind)
-            with store.open(name) as f:
-                with maybe_log_timing(
-                    hasattr(store, "ietf_log_blob_timing") and store.ietf_log_blob_timing,
-                    "read",
-                    bucket_name=store.bucket_name if hasattr(store, "bucket_name") else "",
-                    name=name,
-                ):
-                    content = f.read()
-        except Exception as err:
-            log(f"Blobstore Error: Failed to read bytes from {kind}:{name}: {repr(err)}")
-            raise
+    if not settings.ENABLE_BLOBSTORAGE:
+        return b""
+    try:
+        store = _get_storage(kind)
+        with store.open(name) as f:
+            with maybe_log_timing(
+                hasattr(store, "ietf_log_blob_timing") and store.ietf_log_blob_timing,
+                "read",
+                bucket_name=store.bucket_name if hasattr(store, "bucket_name") else "",
+                name=name,
+            ):
+                content = f.read()
+    except Exception as err:
+        log(f"Blobstore Error: Failed to read bytes from {kind}:{name}: {repr(err)}")
+        raise
     return content
 
 
 def retrieve_str(kind: str, name: str) -> str:
-    content = ""
-    if settings.ENABLE_BLOBSTORAGE:
-        try:
-            content_bytes = retrieve_bytes(kind, name)
-            # TODO-BLOBSTORE: try to decode all the different ways doc.text() does
-            content = content_bytes.decode("utf-8")
-        except Exception as err:
-            log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
-            raise
+    if not settings.ENABLE_BLOBSTORAGE:
+        return ""
+    try:
+        content = decode_document_content(retrieve_bytes(kind, name))
+    except Exception as err:
+        log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
+        raise
     return content
diff --git a/ietf/utils/tests.py b/ietf/utils/tests.py
index 3288309095..99c33f34b3 100644
--- a/ietf/utils/tests.py
+++ b/ietf/utils/tests.py
@@ -60,7 +60,6 @@
     set_url_coverage,
 )
 from ietf.utils.test_utils import TestCase, unicontent
-from ietf.utils.text import parse_unicode
 from ietf.utils.timezone import timezone_not_near_midnight
 from ietf.utils.xmldraft import XMLDraft, InvalidMetadataError, capture_xml2rfc_output
 
@@ -864,24 +863,6 @@ def test_assertion(self):
         assertion('False')
         settings.SERVER_MODE = 'test'
 
-class TestRFC2047Strings(TestCase):
-    def test_parse_unicode(self):
-        names = (
-            ('=?utf-8?b?4Yuz4YuK4Ym1IOGJoOGJgOGIiA==?=', 'ዳዊት በቀለ'),
-            ('=?utf-8?b?5Li9IOmDnA==?=', '丽 郜'),
-            ('=?utf-8?b?4KSV4KSu4KWN4KSs4KWL4KScIOCkoeCkvuCksA==?=', 'कम्बोज डार'),
-            ('=?utf-8?b?zpfPgc6szrrOu861zrnOsSDOm865z4zOvc+Ezrc=?=', 'Ηράκλεια Λιόντη'),
-            ('=?utf-8?b?15nXqdeo15DXnCDXqNeV15bXoNek15zXkw==?=', 'ישראל רוזנפלד'),
-            ('=?utf-8?b?5Li95Y2OIOeahw==?=', '丽华 皇'),
-            ('=?utf-8?b?77ul77qu766V77qzIO+tlu+7ru+vvu+6ju+7pw==?=', 'ﻥﺮﮕﺳ ﭖﻮﯾﺎﻧ'),
-            ('=?utf-8?b?77uh77uu77qz77uu76++IO+6su+7tO+7p++6jSDvurDvu6Pvuo7vu6jvr74=?=', 'ﻡﻮﺳﻮﯾ ﺲﻴﻧﺍ ﺰﻣﺎﻨﯾ'),
-            ('=?utf-8?b?ScOxaWdvIFNhbsOnIEliw6HDsWV6IGRlIGxhIFBlw7Fh?=', 'Iñigo Sanç Ibáñez de la Peña'),
-            ('Mart van Oostendorp', 'Mart van Oostendorp'),
-            ('', ''),
-            )
-        for encoded_str, unicode in names: 
-            self.assertEqual(unicode, parse_unicode(encoded_str))
-
 class TestAndroidSiteManifest(TestCase):
     def test_manifest(self):
         r = self.client.get(urlreverse('site.webmanifest'))
diff --git a/ietf/utils/tests_text.py b/ietf/utils/tests_text.py
new file mode 100644
index 0000000000..51aa2eff13
--- /dev/null
+++ b/ietf/utils/tests_text.py
@@ -0,0 +1,71 @@
+# Copyright The IETF Trust 2021-2026, All Rights Reserved
+from ietf.utils.test_utils import TestCase
+from ietf.utils.text import parse_unicode, decode_document_content
+
+
+class TestDecoders(TestCase):
+    def test_parse_unicode(self):
+        names = (
+            ("=?utf-8?b?4Yuz4YuK4Ym1IOGJoOGJgOGIiA==?=", "ዳዊት በቀለ"),
+            ("=?utf-8?b?5Li9IOmDnA==?=", "丽 郜"),
+            ("=?utf-8?b?4KSV4KSu4KWN4KSs4KWL4KScIOCkoeCkvuCksA==?=", "कम्बोज डार"),
+            ("=?utf-8?b?zpfPgc6szrrOu861zrnOsSDOm865z4zOvc+Ezrc=?=", "Ηράκλεια Λιόντη"),
+            ("=?utf-8?b?15nXqdeo15DXnCDXqNeV15bXoNek15zXkw==?=", "ישראל רוזנפלד"),
+            ("=?utf-8?b?5Li95Y2OIOeahw==?=", "丽华 皇"),
+            ("=?utf-8?b?77ul77qu766V77qzIO+tlu+7ru+vvu+6ju+7pw==?=", "ﻥﺮﮕﺳ ﭖﻮﯾﺎﻧ"),
+            (
+                "=?utf-8?b?77uh77uu77qz77uu76++IO+6su+7tO+7p++6jSDvurDvu6Pvuo7vu6jvr74=?=",
+                "ﻡﻮﺳﻮﯾ ﺲﻴﻧﺍ ﺰﻣﺎﻨﯾ",
+            ),
+            (
+                "=?utf-8?b?ScOxaWdvIFNhbsOnIEliw6HDsWV6IGRlIGxhIFBlw7Fh?=",
+                "Iñigo Sanç Ibáñez de la Peña",
+            ),
+            ("Mart van Oostendorp", "Mart van Oostendorp"),
+            ("", ""),
+        )
+        for encoded_str, unicode in names:
+            self.assertEqual(unicode, parse_unicode(encoded_str))
+
+    def test_decode_document_content(self):
+        utf8_bytes = "𒀭𒊩𒌆𒄈𒋢".encode("utf-8")  # ends with 4-byte character
+        latin1_bytes = "àéîøü".encode("latin-1")
+        other_bytes = "àéîøü".encode("macintosh")  # different from its latin-1 encoding
+        assert other_bytes.decode("macintosh") != other_bytes.decode("latin-1"),\
+            "test broken: other_bytes must decode differently as latin-1"
+
+        # simplest case
+        self.assertEqual(
+            decode_document_content(utf8_bytes),
+            utf8_bytes.decode(),
+        )
+        # losing 1-4 bytes from the end leave the last character incomplete; the
+        # decoder should decode all but that last character
+        self.assertEqual(
+            decode_document_content(utf8_bytes[:-1]),
+            utf8_bytes.decode()[:-1],
+        )
+        self.assertEqual(
+            decode_document_content(utf8_bytes[:-2]),
+            utf8_bytes.decode()[:-1],
+        )
+        self.assertEqual(
+            decode_document_content(utf8_bytes[:-3]),
+            utf8_bytes.decode()[:-1],
+        )
+        self.assertEqual(
+            decode_document_content(utf8_bytes[:-4]),
+            utf8_bytes.decode()[:-1],
+        )
+
+        # latin-1 is also simple
+        self.assertEqual(
+            decode_document_content(latin1_bytes),
+            latin1_bytes.decode("latin-1"),
+        )
+
+        # other character sets are just treated as latin1 (bug? feature? you decide)
+        self.assertEqual(
+            decode_document_content(other_bytes),
+            other_bytes.decode("latin-1"),
+        )
diff --git a/ietf/utils/text.py b/ietf/utils/text.py
index 590ec3fd30..2763056e1a 100644
--- a/ietf/utils/text.py
+++ b/ietf/utils/text.py
@@ -263,3 +263,21 @@ def parse_unicode(text):
     else:
         text = decoded_string
     return text
+
+
+def decode_document_content(content: bytes) -> str:
+    """Decode document contents as utf-8 or latin1
+    
+    Method was developed in DocumentInfo.text() where it gave acceptable results
+    for existing documents / RFCs.
+    """
+    try:
+        return content.decode("utf-8")
+    except UnicodeDecodeError:
+        pass
+    for back in range(1, 4):
+        try:
+            return content[:-back].decode("utf-8")
+        except UnicodeDecodeError:
+            pass
+    return content.decode("latin-1")  # everything is legal in latin-1

From 63a69945ab11b1c3b3ec490fb260073c90eed0bc Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 17 Apr 2026 16:24:18 -0500
Subject: [PATCH 643/707] test: Squash some transient test error vectors
 (#10730)

* test: enforce queryset order assumed by test

* test: match html escaping in test

* test: search more specifically for tokens to avoid mis-reading them when they occur in faker data
---
 ietf/group/tests_review.py             | 30 +++++++++++++-------------
 ietf/meeting/tests_session_requests.py |  2 +-
 ietf/meeting/tests_views.py            |  7 +++---
 3 files changed, 20 insertions(+), 19 deletions(-)

diff --git a/ietf/group/tests_review.py b/ietf/group/tests_review.py
index 89c755bb26..bb9b79a416 100644
--- a/ietf/group/tests_review.py
+++ b/ietf/group/tests_review.py
@@ -888,10 +888,10 @@ def test_requests_history_filter_page(self):
         self.assertEqual(r.status_code, 200)
         self.assertContains(r, review_req.doc.name)
         self.assertContains(r, review_req2.doc.name)
-        self.assertContains(r, 'Assigned')
-        self.assertContains(r, 'Accepted')
-        self.assertContains(r, 'Completed')
-        self.assertContains(r, 'Ready')
+        self.assertContains(r, 'data-text="Assigned"')
+        self.assertContains(r, 'data-text="Accepted"')
+        self.assertContains(r, 'data-text="Completed"')
+        self.assertContains(r, 'data-text="Ready"')
         self.assertContains(r, escape(assignment.reviewer.person.name))
         self.assertContains(r, escape(assignment2.reviewer.person.name))
 
@@ -907,10 +907,10 @@ def test_requests_history_filter_page(self):
             self.assertEqual(r.status_code, 200)
             self.assertContains(r, review_req.doc.name)
             self.assertNotContains(r, review_req2.doc.name)
-            self.assertContains(r, 'Assigned')
-            self.assertNotContains(r, 'Accepted')
-            self.assertNotContains(r, 'Completed')
-            self.assertNotContains(r, 'Ready')
+            self.assertContains(r, 'data-text="Assigned"')
+            self.assertNotContains(r, 'data-text="Accepted"')
+            self.assertNotContains(r, 'data-text="Completed"')
+            self.assertNotContains(r, 'data-text="Ready"')
             self.assertContains(r, escape(assignment.reviewer.person.name))
             self.assertNotContains(r, escape(assignment2.reviewer.person.name))
 
@@ -926,10 +926,10 @@ def test_requests_history_filter_page(self):
             self.assertEqual(r.status_code, 200)
             self.assertNotContains(r, review_req.doc.name)
             self.assertContains(r, review_req2.doc.name)
-            self.assertNotContains(r, 'Assigned')
-            self.assertContains(r, 'Accepted')
-            self.assertContains(r, 'Completed')
-            self.assertContains(r, 'Ready')
+            self.assertNotContains(r, 'data-text="Assigned"')
+            self.assertContains(r, 'data-text="Accepted"')
+            self.assertContains(r, 'data-text="Completed"')
+            self.assertContains(r, 'data-text="Ready"')
             self.assertNotContains(r, escape(assignment.reviewer.person.name))
             self.assertContains(r, escape(assignment2.reviewer.person.name))
 
@@ -940,9 +940,9 @@ def test_requests_history_filter_page(self):
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
         self.assertNotContains(r, review_req.doc.name)
-        self.assertNotContains(r, 'Assigned')
-        self.assertNotContains(r, 'Accepted')
-        self.assertNotContains(r, 'Completed')
+        self.assertNotContains(r, 'data-text="Assigned"')
+        self.assertNotContains(r, 'data-text="Accepted"')
+        self.assertNotContains(r, 'data-text="Completed"')
 
     def test_requests_history_invalid_filter_parameters(self):
         # First assignment as assigned
diff --git a/ietf/meeting/tests_session_requests.py b/ietf/meeting/tests_session_requests.py
index 0cb092d2f8..42dbee5f23 100644
--- a/ietf/meeting/tests_session_requests.py
+++ b/ietf/meeting/tests_session_requests.py
@@ -236,7 +236,7 @@ def test_edit(self):
         self.assertRedirects(r, redirect_url)
 
         # Check whether updates were stored in the database
-        sessions = Session.objects.filter(meeting=meeting, group=mars)
+        sessions = Session.objects.filter(meeting=meeting, group=mars).order_by("id")
         self.assertEqual(len(sessions), 2)
         session = sessions[0]
         self.assertFalse(session.constraints().filter(name='time_relation'))
diff --git a/ietf/meeting/tests_views.py b/ietf/meeting/tests_views.py
index 258ffe554c..17988e50be 100644
--- a/ietf/meeting/tests_views.py
+++ b/ietf/meeting/tests_views.py
@@ -33,6 +33,7 @@
 from django.http import QueryDict, FileResponse
 from django.template import Context, Template
 from django.utils import timezone
+from django.utils.html import escape
 from django.utils.safestring import mark_safe
 from django.utils.text import slugify
 
@@ -9491,7 +9492,7 @@ def test_session_attendance(self):
         self.assertEqual(r.status_code, 200)  
         self.assertContains(r, '3 attendees')
         for person in persons:
-            self.assertContains(r, person.plain_name())
+            self.assertContains(r, escape(person.plain_name()))
 
         # Test for the "I was there" button.
         def _test_button(person, expected):
@@ -9511,14 +9512,14 @@ def _test_button(person, expected):
         # attempt to POST anyway is ignored
         r = self.client.post(attendance_url)
         self.assertEqual(r.status_code, 200)
-        self.assertNotContains(r, persons[3].plain_name())
+        self.assertNotContains(r, escape(persons[3].plain_name()))
         self.assertEqual(session.attended_set.count(), 3)
         # button is shown, and POST is accepted
         meeting.importantdate_set.update(name_id='revsub',date=date_today() + datetime.timedelta(days=20))
         _test_button(persons[3], True)
         r = self.client.post(attendance_url)
         self.assertEqual(r.status_code, 200)
-        self.assertContains(r, persons[3].plain_name())
+        self.assertContains(r, escape(persons[3].plain_name()))
         self.assertEqual(session.attended_set.count(), 4)
 
         # When the meeting is finalized, a bluesheet file is generated,

From dc49dc8362812893cad560feecc55efcea1553dc Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 20 Apr 2026 14:29:41 -0300
Subject: [PATCH 644/707] chore: beat termination grace period -> 10 s (#10741)

---
 k8s/beat.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/k8s/beat.yaml b/k8s/beat.yaml
index 9ab242681c..b4291c7e31 100644
--- a/k8s/beat.yaml
+++ b/k8s/beat.yaml
@@ -59,4 +59,4 @@ spec:
             name: files-cfgmap
       dnsPolicy: ClusterFirst
       restartPolicy: Always
-      terminationGracePeriodSeconds: 600
+      terminationGracePeriodSeconds: 10

From 4d69329ef86054fa5bfb9da9acd0c966ab013d8f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 20 Apr 2026 23:59:36 -0300
Subject: [PATCH 645/707] chore: remove blobdb profiling logs (#10732)

These are not useful any more, blobdb is fast
---
 ietf/doc/storage.py | 1 -
 1 file changed, 1 deletion(-)

diff --git a/ietf/doc/storage.py b/ietf/doc/storage.py
index 375620ccaf..ee1e76c4fa 100644
--- a/ietf/doc/storage.py
+++ b/ietf/doc/storage.py
@@ -114,7 +114,6 @@ def _get_write_parameters(self, name, content=None):
 
 
 class StoredObjectBlobdbStorage(BlobdbStorage):
-    ietf_log_blob_timing = True
     warn_if_missing = True  # TODO-BLOBSTORE make this configurable (or remove it)
 
     def _save_stored_object(self, name, content) -> StoredObject:

From e8e4dd65c325199e7f1a1b5f254c0359bd8b144d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 27 Apr 2026 17:15:14 -0300
Subject: [PATCH 646/707] feat: sync blobs with replica via admin (#10756)

* refactor: factor out queue_for_replication()

* feat: BlobdbStorage.force_replication()

* feat: force_replication() in storage_utils.py

* feat: replicate_stored_objects_for_document

* feat: admin action to replicate Document blobs

* feat: admin action to replicate StoredObject blobs

* feat: admin action to replicate Blobs

* fix: use get_blobdb() helper

* fix: drop references to R2 in the admin
---
 ietf/blobdb/admin.py      | 20 +++++++++++++++++++-
 ietf/blobdb/models.py     | 27 ++++----------------------
 ietf/blobdb/storage.py    | 12 +++++++++++-
 ietf/blobdb/utils.py      | 32 +++++++++++++++++++++++++++++++
 ietf/doc/admin.py         | 40 +++++++++++++++++++++++++++++++++++++--
 ietf/doc/storage_utils.py |  9 +++++++++
 ietf/doc/utils.py         | 25 +++++++++++++++++++++++-
 7 files changed, 137 insertions(+), 28 deletions(-)
 create mode 100644 ietf/blobdb/utils.py

diff --git a/ietf/blobdb/admin.py b/ietf/blobdb/admin.py
index 3e1a2a311f..44a30d1d7f 100644
--- a/ietf/blobdb/admin.py
+++ b/ietf/blobdb/admin.py
@@ -1,9 +1,12 @@
-# Copyright The IETF Trust 2025, All Rights Reserved
+# Copyright The IETF Trust 2025-2026, All Rights Reserved
 from django.contrib import admin
+from django.db.models import QuerySet
 from django.db.models.functions import Length
 from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
 
+from .apps import get_blobdb
 from .models import Blob, ResolvedMaterial
+from .utils import queue_for_replication
 
 
 @admin.register(Blob)
@@ -17,6 +20,7 @@ class BlobAdmin(admin.ModelAdmin):
     ]
     search_fields = ["name"]
     list_display_links = ["name"]
+    actions = ["replicate_blob"]
 
     def get_queryset(self, request):
         return (
@@ -30,6 +34,20 @@ def object_size(self, instance):
         """Get the size of the object"""
         return instance.object_size  # annotation added in get_queryset()
 
+    @admin.action(description="Replicate blobs")
+    def replicate_blob(self, request, queryset: QuerySet[Blob]):
+        blob_count = 0
+        for blob in queryset.all():
+            if isinstance(blob, Blob):
+                queue_for_replication(
+                    bucket=blob.bucket, name=blob.name, using=get_blobdb()
+                )
+                blob_count += 1
+        self.message_user(
+            request,
+            f"Queued replication of a total of {blob_count} Blob(s)",
+        )
+
 
 @admin.register(ResolvedMaterial)
 class ResolvedMaterialAdmin(admin.ModelAdmin):
diff --git a/ietf/blobdb/models.py b/ietf/blobdb/models.py
index 27325ada5d..6dbb615fa0 100644
--- a/ietf/blobdb/models.py
+++ b/ietf/blobdb/models.py
@@ -1,14 +1,11 @@
-# Copyright The IETF Trust 2025, All Rights Reserved
-import json
-from functools import partial
+# Copyright The IETF Trust 2025-2026, All Rights Reserved
 from hashlib import sha384
 
 from django.db import models, transaction
 from django.utils import timezone
 
 from .apps import get_blobdb
-from .replication import replication_enabled
-from .tasks import pybob_the_blob_replicator_task
+from .utils import queue_for_replication
 
 
 class BlobQuerySet(models.QuerySet):
@@ -81,24 +78,8 @@ def delete(self, **kwargs):
             self._emit_blob_change_event(using=db)
         return retval
 
-    def _emit_blob_change_event(self, using=None):
-        if not replication_enabled(self.bucket):
-            return
-
-        # For now, fire a celery task we've arranged to guarantee in-order processing.
-        # Later becomes pushing an event onto a queue to a dedicated worker.
-        transaction.on_commit(
-            partial(
-                pybob_the_blob_replicator_task.delay,
-                json.dumps(
-                    {
-                        "name": self.name,
-                        "bucket": self.bucket,
-                    }
-                )
-            ),
-            using=using,
-        )
+    def _emit_blob_change_event(self, using: str | None=None):
+        queue_for_replication(self.bucket, self.name, using=using)
 
 
 class ResolvedMaterial(models.Model):
diff --git a/ietf/blobdb/storage.py b/ietf/blobdb/storage.py
index 4213ec801d..e304dabc5d 100644
--- a/ietf/blobdb/storage.py
+++ b/ietf/blobdb/storage.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2025, All Rights Reserved
+# Copyright The IETF Trust 2025-2026, All Rights Reserved
 from typing import Optional
 
 from django.core.exceptions import SuspiciousFileOperation
@@ -10,6 +10,7 @@
 
 from ietf.utils.storage import MetadataFile
 from .models import Blob
+from .utils import queue_for_replication
 
 
 class BlobFile(MetadataFile):
@@ -94,3 +95,12 @@ def get_available_name(self, name, max_length=None):
                 f"asked to store the name '{name[:5]}...{name[-5:]} of length {len(name)}"
             )
         return name  # overwrite is permitted
+
+    def force_replication(self, name: str):
+        """Force replication of a blob by name
+
+        Be careful with this - replication includes replicating deletion of blobs, so
+        if you call it with a name that does not exist in blobdb, it will be removed
+        from R2 if it exists there!
+        """
+        queue_for_replication(bucket=self.bucket_name, name=name)
diff --git a/ietf/blobdb/utils.py b/ietf/blobdb/utils.py
new file mode 100644
index 0000000000..93f8f2f521
--- /dev/null
+++ b/ietf/blobdb/utils.py
@@ -0,0 +1,32 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+import json
+from functools import partial
+
+from django.db import transaction
+
+from ietf.blobdb.replication import replication_enabled
+from ietf.blobdb.tasks import pybob_the_blob_replicator_task
+
+
+def queue_for_replication(bucket: str, name: str, using: str | None=None):
+    """Queue a blob for replication
+    
+    This is private to the blobdb app. Do not call it directly from other apps.
+    """
+    if not replication_enabled(bucket):
+        return
+
+    # For now, fire a celery task we've arranged to guarantee in-order processing.
+    # Later becomes pushing an event onto a queue to a dedicated worker.
+    transaction.on_commit(
+        partial(
+            pybob_the_blob_replicator_task.delay,
+            json.dumps(
+                {
+                    "name": name,
+                    "bucket": bucket,
+                }
+            )
+        ),
+        using=using,
+    )
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 0d04e8db3a..757d3da9f9 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -5,6 +5,7 @@
 from django.contrib import admin
 from django.db import models
 from django import forms
+from django.db.models import QuerySet
 from rangefilter.filters import DateRangeQuickSelectListFilterBuilder
 
 from .models import (StateType, State, RelatedDocument, DocumentAuthor, Document, RelatedDocHistory,
@@ -18,6 +19,9 @@
 
 from ietf.utils.admin import SaferTabularInline
 from ietf.utils.validators import validate_external_resource_value
+from .storage_utils import force_replication
+from .utils import replicate_stored_objects_for_document
+
 
 class StateTypeAdmin(admin.ModelAdmin):
     list_display = ["slug", "label"]
@@ -73,7 +77,9 @@ class DocumentAuthorAdmin(admin.ModelAdmin):
     search_fields = ['document__name', 'person__name', 'email__address', 'affiliation', 'country']
     raw_id_fields = ["document", "person", "email"]
 admin.site.register(DocumentAuthor, DocumentAuthorAdmin)
-    
+
+
+
 class DocumentAdmin(admin.ModelAdmin):
     list_display = ['name', 'rev', 'group', 'pages', 'intended_std_level', 'author_list', 'time']
     search_fields = ['name']
@@ -81,6 +87,7 @@ class DocumentAdmin(admin.ModelAdmin):
     raw_id_fields = ['group', 'shepherd', 'ad']
     inlines = [DocAuthorInline, DocActionHolderInline, RelatedDocumentInline, AdditionalUrlInLine]
     form = DocumentForm
+    actions = ["replicate_stored_objects"]
 
     def save_model(self, request, obj, form, change):
         e = DocEvent.objects.create(
@@ -95,6 +102,22 @@ def save_model(self, request, obj, form, change):
     def state(self, instance):
         return self.get_state()
 
+    @admin.action(description="Replicate related blobs")
+    def replicate_stored_objects(self, request, queryset: QuerySet[Document]):
+        doc_count = 0
+        stored_obj_count = 0
+        for doc in queryset.all():
+            doc_count += 1
+            if isinstance(doc, Document):
+                stored_obj_count += replicate_stored_objects_for_document(doc)
+        self.message_user(
+            request,
+            (
+                f"Queued replication of a total of {stored_obj_count} StoredObject(s) "
+                f"for {doc_count} Document(s)"
+            )
+        )
+
 admin.site.register(Document, DocumentAdmin)
 
 class DocHistoryAdmin(admin.ModelAdmin):
@@ -232,11 +255,24 @@ class StoredObjectAdmin(admin.ModelAdmin):
     ]
     search_fields = ['name', 'doc_name', 'doc_rev']
     list_display_links = ['name']
+    actions = ["replicate_stored_object"]
 
     @admin.display(boolean=True, description="Deleted?", ordering="deleted")
     def is_deleted(self, instance):
         return instance.deleted is not None
-    
+
+    @admin.action(description="Replicate related blobs")
+    def replicate_stored_object(self, request, queryset: QuerySet[StoredObject]):
+        stored_obj_count = 0
+        for stored_object in queryset.all():
+            if isinstance(stored_object, StoredObject):
+                force_replication(kind=stored_object.store, name=stored_object.name)
+                stored_obj_count += 1
+        self.message_user(
+            request,
+            f"Queued replication of a total of {stored_obj_count} StoredObject(s)",
+        )
+
 
 admin.site.register(StoredObject, StoredObjectAdmin)
 
diff --git a/ietf/doc/storage_utils.py b/ietf/doc/storage_utils.py
index 9c18bb8a8a..c7cc6989cd 100644
--- a/ietf/doc/storage_utils.py
+++ b/ietf/doc/storage_utils.py
@@ -192,3 +192,12 @@ def retrieve_str(kind: str, name: str) -> str:
         log(f"Blobstore Error: Failed to read string from {kind}:{name}: {repr(err)}")
         raise
     return content
+
+
+def force_replication(kind: str, name: str):
+    if not settings.ENABLE_BLOBSTORAGE:
+        return
+    storage = _get_storage(kind)
+    from ietf.blobdb.storage import BlobdbStorage
+    if isinstance(storage, BlobdbStorage):
+        storage.force_replication(name)
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 8cbe5e8f3e..6f32ed454f 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -39,12 +39,15 @@
     DocHistoryAuthor,
     Document,
     DocumentAuthor,
+    EditedRfcAuthorsDocEvent,
     RfcAuthor,
-    State, EditedRfcAuthorsDocEvent,
+    State,
+    StoredObject,
 )
 from ietf.doc.models import RelatedDocument, RelatedDocHistory, BallotType, DocReminder
 from ietf.doc.models import DocEvent, ConsensusDocEvent, BallotDocEvent, IRSGBallotDocEvent, NewRevisionDocEvent, StateDocEvent
 from ietf.doc.models import TelechatDocEvent, DocumentActionHolder, EditedAuthorsDocEvent, BallotPositionDocEvent
+from ietf.doc.storage_utils import force_replication
 from ietf.name.models import DocReminderTypeName, DocRelationshipName
 from ietf.group.models import Role, Group, GroupFeatures
 from ietf.ietfauth.utils import has_role, is_authorized_in_doc_stream, is_individual_draft_author, is_bofreq_editor
@@ -1713,3 +1716,23 @@ def update_or_create_draft_bibxml_file(doc, rev):
 
 def ensure_draft_bibxml_path_exists():
     (Path(settings.BIBXML_BASE_PATH) / "bibxml-ids").mkdir(exist_ok=True)
+
+
+def replicate_stored_objects_for_document(doc: Document) -> int:
+    """Sync all StoredObjects associated with doc to the replica blob store
+    
+    Returns count of StoredObjects queued for replication (which may or may not
+    be replicated, depending on whether replication is enabled / the storages are
+    actually BlobdbStorage instances, etc).
+    """
+    # n.b., StoredObjects have a nullable doc_rev field, but Documents do not.
+    # Until / unless we straighten that out, treat "" and None equivalently when
+    # matching rev.
+    qs_matching_rev = StoredObject.objects.filter(doc_rev=doc.rev)
+    if doc.rev == "":
+        qs_matching_rev |= StoredObject.objects.filter(doc_rev__isnull=True)
+    count = 0
+    for stored_object in qs_matching_rev.filter(doc_name=doc.name):
+        force_replication(kind=stored_object.store, name=stored_object.name)
+        count += 1
+    return count

From e3e080fa2341d4cae501dcfbebf8e438e49b6f46 Mon Sep 17 00:00:00 2001
From: Eric Vyncke <eric@vyncke.org>
Date: Tue, 28 Apr 2026 19:02:07 +0200
Subject: [PATCH 647/707] feat: add some per country/affiliation meeting
 registration statistics (#10550)

* Draft for meeting registrations

* Add totals, + nicer JS code

* Coherent URL parameters

* Handle error case when per-continent stats is requested

* Remove redundant code

* Dynamic get the current IETF meeting

* Display %-age when hovering

* Add test for meeting statistics

* Add test

* Add statistics per affiliation

* More code coverage for test

* Nicer canonical affiliation

* Allow navigation by buttons

* Also add participants count in the legend

* Add timeline over meetings (total and per country)

* Default index refers to current meeting stats by number

* Remove unused JS code

* Add test coverage for timeline statistics

* No need to import test coverage

* Use stacked lines of onsite/remote when displaying the total timeline

* fix a comment

* Add timeline for affiliation

* Expanding the test coverage to affiliation timeline

* Remove unused botocore (unsure how it was added though)

* Remove unused package

* Code clean-up, add pan & zoom on timelines

* Fix button type

* refactor: avoid inline JS; safer JSON handling

* chore: lint

* feat: cache timeline stats

Pins the top_n parameter, which had not been plumbed
to be dynamically adjustable.

* chore: timeout->settings + drop stale setting

STATS_NAMES_LIMIT does not appear anywhere else in the
codebase

* refactor: wait for DOMContentLoaded + restyle

* fix: fix null checks

* test: update test_meeting_stats()

---------

Co-authored-by: Jennifer Richards <jennifer@staff.ietf.org>
---
 ietf/settings.py                            |   3 +-
 ietf/static/js/meeting_stats.js             |  57 ++
 ietf/static/js/meeting_timeline.js          |  84 +++
 ietf/stats/tests.py                         |  63 +-
 ietf/stats/urls.py                          |   5 +-
 ietf/stats/views.py                         | 612 ++++++++++++++++++--
 ietf/templates/base/menu.html               |  11 +-
 ietf/templates/stats/index.html             |   8 +-
 ietf/templates/stats/meeting_stats.html     |  61 ++
 ietf/templates/stats/meetings_timeline.html |  78 +++
 package.json                                |   2 +
 11 files changed, 916 insertions(+), 68 deletions(-)
 create mode 100644 ietf/static/js/meeting_stats.js
 create mode 100644 ietf/static/js/meeting_timeline.js
 create mode 100644 ietf/templates/stats/meeting_stats.html
 create mode 100644 ietf/templates/stats/meetings_timeline.html

diff --git a/ietf/settings.py b/ietf/settings.py
index 3aa45a453c..50e069ff1a 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -231,6 +231,7 @@
 AGENDA_CACHE_TIMEOUT_DEFAULT = 8 * 24 * 60 * 60  # 8 days
 AGENDA_CACHE_TIMEOUT_CURRENT_MEETING = 6 * 60  # 6 minutes
 
+
 WSGI_APPLICATION = "ietf.wsgi.application"
 
 AUTHENTICATION_BACKENDS = ( 'ietf.ietfauth.backends.CaseInsensitiveModelBackend', )
@@ -1270,7 +1271,7 @@ def skip_unreadable_post(record):
     except ImportError:
         pass
 
-STATS_NAMES_LIMIT = 25
+STATS_TIMELINE_CACHE_TIMEOUT = 86400
 
 UTILS_MEETING_CONFERENCE_DOMAINS = ['webex.com', 'zoom.us', 'jitsi.org', 'meetecho.com', 'gather.town', ]
 UTILS_TEST_RANDOM_STATE_FILE = '.factoryboy_random_state'
diff --git a/ietf/static/js/meeting_stats.js b/ietf/static/js/meeting_stats.js
new file mode 100644
index 0000000000..70b18a0f03
--- /dev/null
+++ b/ietf/static/js/meeting_stats.js
@@ -0,0 +1,57 @@
+// Copyright The IETF Trust 2026, All Rights Reserved
+document.addEventListener('DOMContentLoaded', () => {
+    // Need to use autocolors plug-in else all slices are gray...
+    const autocolors = window['chartjs-plugin-autocolors']
+    Chart.register(autocolors)
+    // ── Safely parse JSON data injected from Django view ──
+    const totalChartData = JSON.parse(document.getElementById('total-chart-data').textContent)
+    const inPersonChartData = JSON.parse(document.getElementById('in-person-chart-data').textContent)
+
+    function displayChart (id, data) {
+        const ctx = document.getElementById(id).getContext('2d')
+        new Chart(ctx, {
+            type: 'pie',   // Change to 'doughnut' for a donut chart
+            data: data,
+            options: {
+                responsive: true,
+                plugins: {
+                    autocolors: {
+                        mode: 'data' // Required for Pie charts to color individual slices
+                    },
+                    legend: {
+                        position: 'bottom',
+                        labels: {
+                            padding: 20,
+                            font: { size: 13 },
+                            color: '#475569',
+                            generateLabels: function (chart) {
+                                const dataset = chart.data.datasets[0]
+                                return chart.data.labels.map((label, i) => ({
+                                    text: `${label}: ${dataset.data[i]}`,
+                                    fillStyle: dataset.backgroundColor[i],
+                                    hidden: false,
+                                    index: i,
+                                }))
+                            }
+                        }
+                    },
+                    tooltip: {
+                        callbacks: {
+                            label: function (context) {
+                                const label = context.label || ''
+                                const value = context.raw
+                                const total = context.dataset.data.reduce((a, b) => a + b, 0)
+                                const percentage = ((value / total) * 100).toFixed(1)
+
+                                return `${label}: ${value} (${percentage}%)`
+                            }
+                        }
+                    }
+                }
+            }
+        })
+    }
+
+    displayChart('totalRegistrationChart', totalChartData)
+    displayChart('inPersonRegistrationChart', inPersonChartData)
+})
diff --git a/ietf/static/js/meeting_timeline.js b/ietf/static/js/meeting_timeline.js
new file mode 100644
index 0000000000..161cead0ec
--- /dev/null
+++ b/ietf/static/js/meeting_timeline.js
@@ -0,0 +1,84 @@
+// Copyright The IETF Trust 2026, All Rights Reserved
+document.addEventListener('DOMContentLoaded', () => {
+    // ── Safely parse JSON data injected from Django view ──
+    const totalChartData = JSON.parse(document.getElementById('total-chart-data').textContent)
+    const inPersonChartData = JSON.parse(document.getElementById('in-person-chart-data').textContent)
+    const statsType = JSON.parse(document.getElementById('stats-type-data').textContent)
+    const stackedLines = statsType === 'total'
+
+    function displayChart (id, data) {
+        const ctx = document.getElementById(id).getContext('2d')
+        return new Chart(ctx, {
+            type: 'line',   // Change to 'doughnut' for a donut chart
+            data: data,
+            options: {
+                responsive: true,
+                scales: {
+                    y: {
+                        stacked: stackedLines,
+                    },
+                    x: {
+                        title: {
+                            display: true,
+                            text: 'IETF Meeting Number',
+                        },
+                    },
+                },
+                plugins: {
+                    legend: {
+                        position: 'bottom',
+                        labels: {
+                            usePointStyle: true,
+                            padding: 15,
+                            font: { size: 12 },
+                        },
+                    },
+                    tooltip: {
+                        backgroundColor: 'rgba(0,0,0,0.8)',
+                        titleFont: { size: 14 },
+                        bodyFont: { size: 13 },
+                        callbacks: {
+                            title: function (items) {
+                                return `IETF Meeting ${items[0].label}`
+                            },
+                            label: function (context) {
+                                return ` ${context.dataset.label}: ${context.parsed.y} participants`
+                            }
+                        }
+                    },
+                    zoom: {
+                        zoom: {
+                            wheel: { enabled: true },      // scroll to zoom
+                            pinch: { enabled: true },      // pinch on mobile
+                            drag: { enabled: true },       // drag to select range
+                            mode: 'xy',                     // zoom X-axis and Y-axis
+                        },
+                        pan: {
+                            enabled: true,
+                            mode: 'xy',                     // pan X-axis and Y-axis
+                        },
+                    },
+                }
+            }
+        })
+    }
+
+    const totalChart = displayChart('totalRegistrationChart', totalChartData)
+    if (inPersonChartData !== null) {
+        inPersonChart = displayChart('inPersonRegistrationChart', inPersonChartData)
+    }
+    document.addEventListener('keydown', (event) => {
+        if (event.key === 'Escape') {
+            totalChart.resetZoom()
+            if (inPersonChart !== null) {
+                inPersonChart.resetZoom()
+            }
+        }
+    })
+    document.getElementById('resetButton').addEventListener('click', () => {
+        totalChart.resetZoom()
+        if (inPersonChart !== null) {
+            inPersonChart.resetZoom()
+        }
+    })
+})
diff --git a/ietf/stats/tests.py b/ietf/stats/tests.py
index 48552c8fba..373f06e343 100644
--- a/ietf/stats/tests.py
+++ b/ietf/stats/tests.py
@@ -4,12 +4,14 @@
 
 import calendar
 import json
+import datetime
 
 from pyquery import PyQuery
 
 import debug    # pyflakes:ignore
 
 from django.urls import reverse as urlreverse
+from django.utils import timezone
 
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase
 import ietf.stats.views
@@ -18,24 +20,73 @@
 from ietf.group.factories import RoleFactory
 from ietf.person.factories import PersonFactory
 from ietf.review.factories import ReviewRequestFactory, ReviewerSettingsFactory, ReviewAssignmentFactory
+from ietf.meeting.tests_models import MeetingFactory, RegistrationFactory
 from ietf.utils.timezone import date_today
 
 
 class StatisticsTests(TestCase):
     def test_stats_index(self):
+        # Create a meeting as the index page needs to know the current meeting
+        MeetingFactory(type_id='ietf', number='124', date=timezone.now())
         url = urlreverse(ietf.stats.views.stats_index)
         r = self.client.get(url)
         self.assertEqual(r.status_code, 200)
 
     def test_document_stats(self):
-        r = self.client.get(urlreverse("ietf.stats.views.document_stats"))
-        self.assertRedirects(r, urlreverse("ietf.stats.views.stats_index"))
-
+        # Create a meeting as the index page needs to know the current meeting
+        MeetingFactory(type_id='ietf', number='124', date=timezone.now())
+        r = self.client.get(urlreverse(ietf.stats.views.document_stats))
+        self.assertRedirects(r, urlreverse(ietf.stats.views.stats_index))
 
     def test_meeting_stats(self):
-        r = self.client.get(urlreverse("ietf.stats.views.meeting_stats"))
-        self.assertRedirects(r, urlreverse("ietf.stats.views.stats_index"))
-
+        meeting124 = MeetingFactory(type_id='ietf', number='124', date=timezone.now())
+        meeting125 = MeetingFactory(type_id='ietf', number='125', date=timezone.now() + datetime.timedelta(days=120))
+        RegistrationFactory.create_batch(15, meeting=meeting124, with_ticket={'attendance_type_id': 'onsite'}, attended=True)
+        RegistrationFactory(meeting=meeting124, with_ticket={'attendance_type_id': 'onsite'}, attended=False)
+        RegistrationFactory.create_batch(14, meeting=meeting124, with_ticket={'attendance_type_id': 'remote'}, attended=True)
+        RegistrationFactory(meeting=meeting124, with_ticket={'attendance_type_id': 'remote'}, attended=False)
+        RegistrationFactory.create_batch(15, meeting=meeting125, affiliation='Test LLC', with_ticket={'attendance_type_id': 'remote'}, attended=False)
+        RegistrationFactory.create_batch(25, meeting=meeting125, affiliation='Example, Ltd', with_ticket={'attendance_type_id': 'onsite'}, attended=False)
+        # Test the meeting specific statitistics per affiliation and per country
+        r = self.client.get(urlreverse(ietf.stats.views.meeting_stats, kwargs={"meeting_number": "124", "stats_type": "affiliation"}))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "Total Registrations by Affiliation (31 in total)")
+        self.assertContains(r, "In Person Registrations by Affiliation (16 in total)")
+        self.assertContains(r, "/stats/meeting/124/affiliation")
+        self.assertContains(r, "/stats/meeting/125/affiliation")
+        r = self.client.get(urlreverse(ietf.stats.views.meeting_stats, kwargs={"meeting_number": "124", "stats_type": "country"}))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "Total Registrations by Country (31 in total)")
+        self.assertContains(r, "In Person Registrations by Country (16 in total)")
+        self.assertContains(r, "/stats/meeting/124/country")
+        self.assertContains(r, "/stats/meeting/125/country")
+        # Test the meetings timeline per country
+        r = self.client.get(urlreverse(ietf.stats.views.meetings_timeline, kwargs={"stats_type": "country"}))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "/stats/meeting/124/country")
+        self.assertContains(r, "/stats/meeting/125/country")
+        self.assertContains(r, "This page provides a timeline of meeting registrations by country")
+        # Test the meetings timeline per affiliation
+        r = self.client.get(urlreverse(ietf.stats.views.meetings_timeline, kwargs={"stats_type": "affiliation"}))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "/stats/meeting/124/affiliation")
+        self.assertContains(r, "/stats/meeting/125/affiliation")
+        self.assertContains(r, "This page provides a timeline of meeting registrations by affiliation")
+        # Extract the JSON embedded in the response
+        pq = PyQuery(r.content)
+        in_person_data = json.loads(pq.find("script#in-person-chart-data").text())
+        self.assertTrue(
+            any(
+                ds["label"] == "Example" and ds["data"] == [0, 25]
+                for ds in in_person_data["datasets"]
+            )
+        )
+        # Test the global meetings timeline
+        r = self.client.get(urlreverse(ietf.stats.views.meetings_timeline, kwargs={"stats_type": "total"}))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, "/stats/meeting/124/country")
+        self.assertContains(r, "/stats/meeting/125/country")
+        self.assertContains(r, "This page provides a timeline of meeting registrations.")
                 
     def test_known_country_list(self):
         # check redirect
diff --git a/ietf/stats/urls.py b/ietf/stats/urls.py
index d2993759d2..01b8758c84 100644
--- a/ietf/stats/urls.py
+++ b/ietf/stats/urls.py
@@ -11,7 +11,8 @@
     url(r"^$", views.stats_index),
     url(r"^document/(?:(?P<stats_type>authors|pages|words|format|formlang|author/(?:documents|affiliation|country|continent|citations|hindex)|yearly/(?:affiliation|country|continent))/)?$", views.document_stats),
     url(r"^knowncountries/$", views.known_countries_list),
-    url(r"^meeting/(?P<num>\d+)/(?P<stats_type>country|continent)/$", views.meeting_stats),
-    url(r"^meeting/(?:(?P<stats_type>overview|country|continent)/)?$", views.meeting_stats),
+    url(r"^meeting/$", views.meetings_timeline),
+    url(r"^meeting/(?P<meeting_number>\d+)/(?P<stats_type>affiliation|country)/$", views.meeting_stats),
+    url(r"^meeting/(?:(?P<stats_type>affiliation|country|total)/)?$", views.meetings_timeline),
     url(r"^review/(?:(?P<stats_type>completion|results|states|time)/)?(?:%(acronym)s/)?$" % settings.URL_REGEXPS, views.review_stats),
 ]
diff --git a/ietf/stats/views.py b/ietf/stats/views.py
index 504d84e86d..d61b673075 100644
--- a/ietf/stats/views.py
+++ b/ietf/stats/views.py
@@ -9,11 +9,13 @@
 import dateutil.relativedelta
 from collections import defaultdict
 
+from django.conf import settings
 from django.contrib.auth.decorators import login_required
+from django.core.cache import cache
 from django.http import HttpResponseRedirect
 from django.shortcuts import render
 from django.urls import reverse as urlreverse
-
+from django.db.models import Count
 
 import debug                            # pyflakes:ignore
 
@@ -25,15 +27,32 @@
 from ietf.group.models import Role, Group
 from ietf.person.models import Person
 from ietf.name.models import ReviewResultName, CountryName, ReviewAssignmentStateName
+from ietf.meeting.models import Registration
 from ietf.ietfauth.utils import has_role
 from ietf.utils.response import permission_denied
 from ietf.utils.timezone import date_today, DEADLINE_TZINFO
+from ietf.meeting.helpers import get_current_ietf_meeting_num, get_ietf_meeting
 
+# Color palette for lines
+colors = [
+    '#FF6384', '#36A2EB', '#FFCE56', '#4BC0C0', '#9966FF',
+    '#FF9F40', '#C9CBCF', '#7BC043', '#F37735', '#00ABA9',
+    '#2B5797', '#E81123', '#00A4EF', '#7FBA00', '#FFB900',
+    '#D83B01', '#B4009E', '#5C2D91', '#008575', '#E3008C',
+]
 
 def stats_index(request):
-    return render(request, "stats/index.html")
+    """Render the statistics index page with the current meeting number as it is required by the meeting menu item."""
+    current_meeting = get_current_ietf_meeting_num()
+    return render(request, "stats/index.html", {
+        "current_meeting": current_meeting
+    })
 
 def generate_query_string(query_dict, overrides):
+    """
+    Returns:
+        A query string starting with '?' if there are parameters, empty string otherwise.
+    """
     query_part = ""
 
     if query_dict or overrides:
@@ -58,9 +77,20 @@ def generate_query_string(query_dict, overrides):
     return query_part
 
 def get_choice(request, get_parameter, possible_choices, multiple=False):
-    # the statistics are built with links to make navigation faster,
-    # so we don't really have a form in most cases, so just use this
-    # helper instead to select between the choices
+    """Extract a choice from the request GET parameters.
+
+    Since statistics pages use links for navigation instead of forms,
+    this helper selects between possible choices from the URL parameters.
+
+    Args:
+        request: The HTTP request object.
+        get_parameter: The name of the GET parameter.
+        possible_choices: List of tuples (value, label).
+        multiple: If True, return a list of found values; otherwise return the first found or None.
+
+    Returns:
+        The selected value(s) or None.
+    """
     values = request.GET.getlist(get_parameter)
     found = [t[0] for t in possible_choices if t[0] in values]
 
@@ -73,75 +103,553 @@ def get_choice(request, get_parameter, possible_choices, multiple=False):
             return None
 
 def add_url_to_choices(choices, url_builder):
+    """Add URLs to a list of choices.
+
+    Args:
+        choices: List of tuples (slug, label).
+        url_builder: Function that takes a slug and returns a URL.
+
+    Returns:
+        List of tuples (slug, label, url).
+    """
     return [ (slug, label, url_builder(slug)) for slug, label in choices]
 
-def put_into_bin(value, bin_size):
-    if value is None:
-        return (0, '')
+def document_stats(request, stats_type=None):
+    # timeline per year, or per specific year: streams, affiliation, rfc vs I-D
+    # could also be time between individual/WG I-D to rfc publication/IESG ballot
+    # DISCUSS resolution time
+    # Humm also split by authors (affiliation) / documents (the rest) probably
+    """Redirect to the stats index page. Deprecated view."""
+    return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
 
-    v = (value // bin_size) * bin_size
-    return (v, "{} - {}".format(v, v + bin_size - 1))
+def known_countries_list(request, stats_type=None, acronym=None):
+    """Render a list of known countries with their aliases."""
+    countries = CountryName.objects.prefetch_related("countryalias_set")
+    for c in countries:
+        # the sorting is a bit of a hack - it puts the ISO code first
+        # since it was added in a migration
+        c.aliases = sorted(c.countryalias_set.all(), key=lambda a: a.pk)
 
-def prune_unknown_bin_with_known(bins):
-    # remove from the unknown bin all authors within the
-    # named/known bins
-    all_known = { n for b, names in bins.items() if b for n in names }
-    bins[""] = [name for name in bins[""] if name not in all_known]
-    if not bins[""]:
-        del bins[""]
+    return render(request, "stats/known_countries_list.html", {
+        "countries": countries,
+    })
 
-def count_bins(bins):
-    return len({ n for b, names in bins.items() if b for n in names })
+def canonicalize_affiliation(affiliation):
+    """Canonicalize an affiliation string by removing common suffixes and standardizing prefixes.
+
+    Args:
+        affiliation: The affiliation string to canonicalize.
+
+    Returns:
+        The canonicalized affiliation string, or None if input is None.
+    """
+    if not affiliation or affiliation.lower() in ('n/a', 'none', 'unspecified'):
+        return None
+    for suffix in ('ab', 'ag', 'corp', 'corp.', 'corporation', 'gmbh', 'inc.', 'inc', 'international pte ltd', 'llc', 'ltd', 'ltd.', 'private limited', 'pty ltd', 'pvt ltd'):
+        if affiliation.lower().endswith(', ' + suffix):
+            affiliation = affiliation[:-(len(suffix)+2)]
+        elif affiliation.lower().endswith(' ' + suffix):
+            affiliation = affiliation[:-(len(suffix)+1)]
+        elif affiliation.lower().endswith(',' + suffix):
+            affiliation = affiliation[:-(len(suffix)+1)]
+    for prefix in ('akamai','apple', 'cisco', 'futurewei', 'google', 'hitachi', 'hpe', 'huawei', 'juniper', 'meta', 'nokia', 'ntt', 'siemens'):
+        if affiliation.lower().startswith(prefix + ' '):
+            affiliation = prefix
+    return affiliation.title()
+
+def get_affiliation_data_for_meetings(attendance_type=None):
+    """Get affiliation participation data for meetings timeline chart.
+
+    Args:
+        attendance_type: Optional filter for attendance type (e.g., 'onsite').
+
+    Returns:
+        Tuple of (sorted_meetings, datasets) for Chart.js.
+    """
+    cache_key = f'stats:get_affiliation_data_for_meetings:{attendance_type}'
+    sorted_meetings, datasets = cache.get(cache_key, (None, None))
+    if (sorted_meetings, datasets) == (None, None):
+        top_n = 20  # could be a parameter, but would need to adjust cache handling
+
+        # Get registration status details
+        if attendance_type:
+            registrations = Registration.objects.filter(tickets__attendance_type=attendance_type)
+        else:
+            registrations = Registration.objects.all()
+        registrations = registrations.values('affiliation', 'meeting__number')
+    
+        # Count per canonicalized affiliation
+        organization = dict()
+        meetings_set = set()
+        org_totals = defaultdict(int)
+        data_map = defaultdict(dict)  # {org: {meeting: count}}
+    
+        for reg in registrations:
+            meeting = reg['meeting__number']
+            meetings_set.add(meeting)
+            affiliation = canonicalize_affiliation(reg['affiliation']) or "Unspecified"
+            organization[affiliation] = organization.get(affiliation, 0) + 1
+            org_totals[affiliation] = org_totals.get(affiliation, 0) + 1
+            data_map[affiliation][meeting] = data_map[affiliation].get(meeting, 0) + 1
+    
+        # ── Step 2: Sort meetings numerically rather than alphabetically  ──
+        sorted_meetings = sorted(meetings_set, key=lambda x: int(x) if x.isdigit() else x)
+    
+        # ── Step 3: Get top N countries ──
+        top_orgs = sorted(
+            org_totals.keys(),
+            key=lambda c: org_totals[c],
+            reverse=True
+        )[:top_n]
+        non_top_orgs = org_totals.keys() - top_orgs
+        other_totals = defaultdict(int)
+        for m in sorted_meetings:
+            other_totals[m] = 0
+            for c in non_top_orgs:
+                other_totals[m] += int(data_map[c].get(m, 0))
+    
+        # ── Step 4: Build Chart.js datasets ──
+    
+        datasets = []
+        for idx, org in enumerate(top_orgs):
+            color = colors[idx % len(colors)]
+            datasets.append({
+                'label': org,
+                'data': [data_map[org].get(m, 0) for m in sorted_meetings],
+                'borderColor': color,
+                'fill': False,
+                'tension': 0.3,
+                'pointColor': color,
+                'pointBackgroundColor': color,
+                'pointRadius': 4,
+                'pointHoverRadius': 6,
+                'borderWidth': 2,
+            })
+    
+        # -- Step 4.bis handle the other --
+        datasets.append({
+            'label': 'Other',
+            'data': [other_totals.get(m, 0) for m in sorted_meetings],
+            'borderColor': 'black',
+            'fill': False,
+            'tension': 0.3,
+            'pointColor': 'black',
+            'pointBackgroundColor': 'black',
+            'pointRadius': 4,
+            'pointHoverRadius': 6,
+            'borderWidth': 2,
+        })
+        cache.set(
+            cache_key,
+            (sorted_meetings, datasets),
+            settings.STATS_TIMELINE_CACHE_TIMEOUT,
+        )
 
-def add_labeled_top_series_from_bins(chart_data, bins, limit):
-    """Take bins on the form (x, label): [name1, name2, ...], figure out
-    how many there are per label, take the overall top ones and put
-    them into sorted series like [(x1, len(names1)), (x2, len(names2)), ...]."""
-    aggregated_bins = defaultdict(set)
-    xs = set()
-    for (x, label), names in bins.items():
-        xs.add(x)
-        aggregated_bins[label].update(names)
+    return sorted_meetings, datasets
 
-    xs = list(sorted(xs))
+def get_country_data_for_meetings(attendance_type=None):
+    """Get country participation data for meetings timeline chart.
 
-    sorted_bins = sorted(aggregated_bins.items(), key=lambda t: len(t[1]), reverse=True)
-    top = [ label for label, names in list(sorted_bins)[:limit]]
+    Args:
+        attendance_type: Optional filter for attendance type (e.g., 'onsite').
 
-    for label in top:
-        series_data = []
+    Returns:
+        Tuple of (sorted_meetings, datasets) for Chart.js.
+    """
+    cache_key = f'stats:get_country_data_for_meetings:{attendance_type}'
+    sorted_meetings, datasets = cache.get(cache_key, (None, None))
+    if (sorted_meetings, datasets) == (None, None):
+        top_n = 10  # could be a parameter, but would need to adjust cache handling
+        # Get registration status counts, aggregated by country_code
+        if attendance_type:
+            registrations = Registration.objects.filter(tickets__attendance_type=attendance_type)
+        else:
+            registrations = Registration.objects.all()
+        queryset = (
+            registrations
+            .values(
+                'meeting__number',      # e.g. "118", "119", "120"
+                'country_code'          # country code of the participant
+            )
+            .annotate(participant_count=Count('id'))
+            .order_by('meeting__number')  # chronological order
+        )
+    
+        # ── Step 1: Collect all meetings and country totals ──
+        meetings_set = set()
+        country_totals = defaultdict(int)
+        data_map = defaultdict(dict)  # {country: {meeting: count}}
+    
+        for row in queryset:
+            meeting = row['meeting__number']
+            country = row['country_code']
+            count = row['participant_count']
+    
+            meetings_set.add(meeting)
+            country_totals[country] += count
+            data_map[country][meeting] = count
+    
+        # ── Step 2: Sort meetings numerically rather than alphabetically  ──
+        sorted_meetings = sorted(meetings_set, key=lambda x: int(x) if x.isdigit() else x)
+    
+        # ── Step 3: Get top N countries ──
+        top_countries = sorted(
+            country_totals.keys(),
+            key=lambda c: country_totals[c],
+            reverse=True
+        )[:top_n]
+    
+        # -- Step 3.bis do the 'other' category --
+        non_top_countries = country_totals.keys() - top_countries
+        other_totals = defaultdict(int)
+        for m in sorted_meetings:
+            other_totals[m] = 0
+            for c in non_top_countries:
+                other_totals[m] += int(data_map[c].get(m, 0))
+    
+        # ── Step 4: Build Chart.js datasets ──
+    
+        datasets = []
+        for idx, country in enumerate(top_countries):
+            color = colors[idx % len(colors)]
+            datasets.append({
+                'label': country,
+                'data': [data_map[country].get(m, 0) for m in sorted_meetings],
+                'borderColor': color,
+                'fill': False,
+                'tension': 0.3,
+                'pointColor': color,
+                'pointBackgroundColor': color,
+                'pointRadius': 4,
+                'pointHoverRadius': 6,
+                'borderWidth': 2,
+            })
+    
+        # -- Step 4.bis handle the other --
+        datasets.append({
+            'label': 'Other',
+            'data': [other_totals.get(m, 0) for m in sorted_meetings],
+            'borderColor': 'black',
+            'fill': False,
+            'tension': 0.3,
+            'pointColor': 'black',
+            'pointBackgroundColor': 'black',
+            'pointRadius': 4,
+            'pointHoverRadius': 6,
+            'borderWidth': 2,
+        })
+        cache.set(
+            cache_key,
+            (sorted_meetings, datasets),
+            settings.STATS_TIMELINE_CACHE_TIMEOUT,
+        )
 
-        for x in xs:
-            names = bins.get((x, label), set())
+    return sorted_meetings, datasets
+
+def get_data_for_meetings():
+    """Get total participation data by attendance type for meetings timeline chart.
+
+    Returns:
+        Tuple of (sorted_meetings, datasets) for Chart.js.
+    """
+    cache_key = "stats:get_data_for_meetings"
+    sorted_meetings, datasets = cache.get(cache_key, (None, None))
+    if (sorted_meetings, datasets) == (None, None):
+        # Get registration status counts, aggregated by ticket types
+        registrations = Registration.objects.filter(tickets__attendance_type__in=['onsite', 'remote'])
+        queryset = (
+            registrations
+            .values(
+                'meeting__number',      # e.g. "118", "119", "120"
+                'tickets__attendance_type'
+            )
+            .annotate(participant_count=Count('id'))
+            .order_by('meeting__number')  # chronological order
+        )
+    
+        # ── Step 1: Collect all meetings and tickets totals ──
+        meetings_set = set()
+        tickets_totals = defaultdict(int)
+        data_map = defaultdict(dict)  # {ticket: {meeting: count}}
+    
+        for row in queryset:
+            meeting = row['meeting__number']
+            ticket = row['tickets__attendance_type']
+            count = row['participant_count']
+    
+            meetings_set.add(meeting)
+            tickets_totals[ticket] += count
+            data_map[ticket][meeting] = count
+    
+        # ── Step 2: Sort meetings numerically rather than alphabetically  ──
+        sorted_meetings = sorted(meetings_set, key=lambda x: int(x) if x.isdigit() else x)
+        ticket_types = tickets_totals.keys()
+        
+        # ── Step 4: Build Chart.js datasets ──
+        # Color palette for lines
+        colors = [ '#FF6384', '#36A2EB']
+    
+        datasets = []
+        for idx, ticket_type in enumerate(ticket_types):
+            color = colors[idx % len(colors)]
+            datasets.append({
+                'label': ticket_type,
+                'data': [data_map[ticket_type].get(m, 0) for m in sorted_meetings],
+                'borderColor': color,
+                'backgroundColor': color + '99', # 60% opacity fill
+                'fill': True,
+                'tension': 0.0,
+                'pointColor': color,
+                'pointBackgroundColor': color,
+                'pointRadius': 4,
+                'pointHoverRadius': 6,
+                'borderWidth': 2,
+            })
+        cache.set(
+            cache_key,
+            (sorted_meetings, datasets),
+            settings.STATS_TIMELINE_CACHE_TIMEOUT,
+        )
+    return sorted_meetings, datasets
+
+def meetings_timeline(request, stats_type='country'):
+    """Render the meetings timeline page with participation statistics over time.
+
+    Args:
+        request: The HTTP request object.
+        stats_type: Type of statistics ('country' or 'total').
+        top_n: Number of top items to show (for country stats).
+
+    Returns:
+        Rendered response for the meetings timeline template.
+    """
+    if stats_type == 'total':
+        total_labels, total_data_sets = get_data_for_meetings()
+        in_person_labels = ([], [])
+        in_person_data_sets = ([], [])
+        top_n = len(total_data_sets) - 1  # subtract one because we don't count "other"
+    elif stats_type == 'affiliation':
+        total_labels, total_data_sets = get_affiliation_data_for_meetings()
+        in_person_labels, in_person_data_sets = get_affiliation_data_for_meetings(attendance_type='onsite')
+        top_n = len(total_data_sets) - 1  # subtract one because we don't count "other"
+    elif stats_type == 'country':
+        total_labels, total_data_sets = get_country_data_for_meetings()
+        in_person_labels, in_person_data_sets = get_country_data_for_meetings(attendance_type='onsite')
+        top_n = len(total_data_sets) - 1  # subtract one because we don't count "other"
+    else:
+        return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
 
-            series_data.append((x, len(names)))
+    total_chart_data = {
+        'labels': total_labels,
+        'datasets': total_data_sets,
+    }
 
-        chart_data.append({
-            "data": series_data,
-            "name": label
-        })
+    # On per country/affiliation have a separate graph for inperson
+    if stats_type == 'total':
+        in_person_chart_data = None
+    else:
+        in_person_chart_data = {
+            'labels': in_person_labels,
+            'datasets': in_person_data_sets,
+        }
 
-def document_stats(request, stats_type=None):
-    return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
+    # Prepare the list of choice buttons for the template
+    possible_stats_types = [
+        ("affiliation", "Per affiliation", urlreverse(meetings_timeline, kwargs={'stats_type': 'affiliation'})),
+        ("country", "Per country", urlreverse(meetings_timeline, kwargs={'stats_type': 'country'})),
+        ("total", "Total", urlreverse(meetings_timeline, kwargs={'stats_type': 'total'})),
+    ]
 
+    current_meeting = get_current_ietf_meeting_num()
+    if stats_type == 'total':
+        possible_stats_type = 'country'
+    else:
+        possible_stats_type = stats_type
 
-def known_countries_list(request, stats_type=None, acronym=None):
-    countries = CountryName.objects.prefetch_related("countryalias_set")
-    for c in countries:
-        # the sorting is a bit of a hack - it puts the ISO code first
-        # since it was added in a migration
-        c.aliases = sorted(c.countryalias_set.all(), key=lambda a: a.pk)
+    possible_meeting_numbers = [(int(current_meeting)-1, urlreverse(meeting_stats, kwargs={'meeting_number': int(current_meeting)-1, 'stats_type': possible_stats_type})),
+        (int(current_meeting), urlreverse(meeting_stats, kwargs={'meeting_number': int(current_meeting), 'stats_type': possible_stats_type})),
+        (int(current_meeting)+1, urlreverse(meeting_stats, kwargs={'meeting_number': int(current_meeting)+1, 'stats_type': possible_stats_type}))]
 
-    return render(request, "stats/known_countries_list.html", {
-        "countries": countries,
+    return render(request, "stats/meetings_timeline.html", {
+        "top_n": top_n,
+        "possible_stats_types": possible_stats_types,
+        "possible_meeting_numbers": possible_meeting_numbers,
+        "stats_type": stats_type,
+        "total_chart_data": total_chart_data,
+        "in_person_chart_data": in_person_chart_data,
     })
 
-def meeting_stats(request, num=None, stats_type=None):
-    return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
+def get_affiliation_data_for_meeting(meeting_number, minimum_required, attendance_type=None):
+    """Get affiliation participation data for a specific meeting.
+
+    Args:
+        meeting_number: The meeting number.
+        minimum_required: Minimum count to include in main data (others go to 'Other').
+        attendance_type: Optional filter for attendance type.
+
+    Returns:
+        Tuple of (labels, data, total) for chart display.
+    """
+    # Get registration status details
+    registrations = Registration.objects.filter(meeting__number=meeting_number)
+    if attendance_type:
+        registrations = registrations.filter(tickets__attendance_type=attendance_type)
+    registrations = registrations.values('affiliation')
+
+    # Count per canonicalized affiliation
+    organization = dict()
+    for reg in registrations:
+        affiliation = canonicalize_affiliation(reg['affiliation']) or "Unspecified"
+        organization[affiliation] = organization.get(affiliation, 0) + 1
+
+    # Sort to have the largest count first (nicer in pie chart)
+    sorted_orgs = sorted(organization.items(), key=lambda t: t[1], reverse=True)
+    labels = []
+    data = []
+    others_count = 0
+    total = 0
+    for org, count in sorted_orgs:
+        total += count
+        if count > minimum_required:
+            labels.append(org)
+            data.append(count)
+        else:
+            others_count += count
+
+    if others_count > 0:
+        labels.append('Other')
+        data.append(others_count)
+
+    return labels, data, total
+
+def get_data_for_meeting(meeting_number, minimum_required, attendance_type=None):
+    """Get country participation data for a specific meeting.
+
+    Args:
+        meeting_number: The meeting number.
+        minimum_required: Minimum count to include in main data (others go to 'Other').
+        attendance_type: Optional filter for attendance type.
+
+    Returns:
+        Tuple of (labels, data, total) for chart display.
+    """
+    # Get registration status counts, aggregated by country_code
+    registration_counts = Registration.objects.filter(meeting__number=meeting_number)
+    if attendance_type:
+        registration_counts = registration_counts.filter(tickets__attendance_type=attendance_type)
+    registration_counts = registration_counts.values('country_code').annotate(count=Count('country_code')).order_by('-count')
+
+    labels = []
+    data = []
+    others_count = 0
+    total = 0
+    for item in registration_counts:
+        total += item['count']
+        if item['count'] > minimum_required:
+            labels.append(item['country_code'])
+            data.append(item['count'])
+        else:
+            others_count += item['count']
+
+    if others_count > 0:
+        labels.append('Other')
+        data.append(others_count)
+
+    return labels, data, total
+
+def meeting_stats(request, meeting_number=None, stats_type='country'):
+    """Render statistics for a specific meeting.
+
+    Args:
+        request: The HTTP request object.
+        meeting_number: The meeting number (defaults to current).
+        stats_type: Type of statistics ('country' or 'affiliation').
+
+    Returns:
+        Rendered response for the meeting stats template.
+    """
+
+    current_meeting = get_current_ietf_meeting_num()
+    if meeting_number is None:
+        meeting_number = current_meeting
+
+    this_meeting = get_ietf_meeting(meeting_number)
+
+    if stats_type == 'affiliation':
+        minimum_required = 4
+        total_labels, total_data, total_total = get_affiliation_data_for_meeting(meeting_number, minimum_required)
+        in_person_labels, in_person_data, in_person_total = get_affiliation_data_for_meeting(meeting_number, minimum_required, attendance_type='onsite')
+    elif stats_type == 'country':
+        minimum_required = 10
+        total_labels, total_data, total_total = get_data_for_meeting(meeting_number, minimum_required)
+        in_person_labels, in_person_data, in_person_total = get_data_for_meeting(meeting_number, minimum_required, attendance_type='onsite')
+    else:
+        return HttpResponseRedirect(urlreverse("ietf.stats.views.stats_index"))
+
+    total_chart_data = {
+        'labels': total_labels,
+        'datasets': [{
+            'label': 'Total Registrations by ' + stats_type,
+            'data': total_data,
+            'borderColor': '#ffffff',
+            'borderWidth': 2,
+        }]
+    }
+    in_person_chart_data = {
+        'labels': in_person_labels,
+        'datasets': [{
+            'label': 'In Person Registrations by ' + stats_type,
+            'data': in_person_data,
+            'borderColor': '#ffffff',
+            'borderWidth': 2,
+        }]
+    }
+
+    # Prepare the list of choice buttons for the template
+    possible_stats_types = [
+        ("affiliation", "Per affiliation", urlreverse(meeting_stats, kwargs={'meeting_number': meeting_number, 'stats_type': 'affiliation'})),
+        ("country", "Per country", urlreverse(meeting_stats, kwargs={'meeting_number': meeting_number, 'stats_type': 'country'})),
+    ]
+
+    # Prepare the list of meeting number buttons for the template
+    possible_meeting_numbers = [('All', urlreverse(meetings_timeline, kwargs={'stats_type': stats_type}))]
+    if int(meeting_number) > 72:  # No registration data before IETF-72
+        possible_meeting_numbers.append((int(meeting_number)-1, urlreverse(meeting_stats, kwargs={'meeting_number': int(meeting_number)-1, 'stats_type': stats_type})))
+    possible_meeting_numbers.append((meeting_number, urlreverse(meeting_stats, kwargs={'meeting_number': meeting_number, 'stats_type': stats_type})))
+    if int(meeting_number) <= int(current_meeting): # Allow current meeting +1
+        possible_meeting_numbers.append((int(meeting_number)+1, urlreverse(meeting_stats, kwargs={'meeting_number': int(meeting_number)+1, 'stats_type': stats_type})))
+
+    return render(request, "stats/meeting_stats.html", {
+        "meeting_number": meeting_number,
+        "meeting_date": this_meeting.date,
+        "meeting_country": this_meeting.country,
+        "meeting_city": this_meeting.city,
+        "possible_stats_types": possible_stats_types,
+        "possible_meeting_numbers": possible_meeting_numbers,
+        "stats_type": stats_type,
+        "minimum_required": minimum_required,
+        "total_chart_data": total_chart_data,
+        "total_total": total_total,
+        "in_person_chart_data": in_person_chart_data,
+        "in_person_total": in_person_total
+    })
 
 
 @login_required
 def review_stats(request, stats_type=None, acronym=None):
+    """Render review statistics page with tables and charts for review assignments.
+
+    Shows completion status, results, assignment states, and time series data.
+    Supports both team-level and reviewer-level views with filtering options.
+
+    Args:
+        request: The HTTP request object.
+        stats_type: Type of statistics ('completion', 'results', 'states', 'time').
+        acronym: Team acronym for reviewer-level view (None for team view).
+
+    Returns:
+        Rendered response for the review stats template.
+    """
     # This view is a bit complex because we want to show a bunch of
     # tables with various filtering options, and both a team overview
     # and a reviewers-within-team overview - and a time series chart.
diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 8ff6e952da..43ca025e28 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -428,12 +428,11 @@
             Downref registry
         </a>
     </li>
-    <li>
-        <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
-           href="{% url "ietf.stats.views.stats_index" %}">
+    <li class="dropend">
+        <a class="dropdown-item dropdown-toggle" href="#">
             Statistics
         </a>
-        <ul class="dropdown-menu {% if flavor == 'top' %}mt-n1{% else %}ms-n1{% endif %}">
+        <ul class="dropdown-menu">
             <li>
                 <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
                    href="{% url 'ietf.stats.views.document_stats' %}">
@@ -442,14 +441,14 @@
             </li>
             <li>
                 <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
-                   href="{% url 'ietf.stats.views.meeting_stats' %}">
+                   href="{% url 'ietf.stats.views.meetings_timeline' %}">
                     Meetings
                 </a>
             </li>
             {% if user and user.is_authenticated %}
                 <li>
                     <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
-                       href="{% url 'ietf.stats.views.review_stats' %}">
+                       href="{% url "ietf.stats.views.review_stats" %}">
                         Reviews
                     </a>
                 </li>
diff --git a/ietf/templates/stats/index.html b/ietf/templates/stats/index.html
index 2000168525..38c8069507 100644
--- a/ietf/templates/stats/index.html
+++ b/ietf/templates/stats/index.html
@@ -14,8 +14,14 @@ <h1>
             <a rel="nofollow" href="{% url "ietf.stats.views.review_stats" %}">Reviews of Internet-Drafts in review teams</a>
             (requires login)
         </li>
+        <li>
+            <a rel="nofollow" href="{% url "ietf.stats.views.meeting_stats" meeting_number=current_meeting stats_type='country' %}">Per country/affiliation registration for a specific meeting, by default IETF-{{ current_meeting }}.</a>
+        </li>
+        <li>
+            <a rel="nofollow" href="{% url "ietf.stats.views.meetings_timeline" %}">Per country registration timeline for last meetings</a>
+        </li>
     </ul>
     <p>
-        Statistics on meetings and authorship are not currently available.
+        Statistics on authorship are not currently available.
     </p>
 {% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/stats/meeting_stats.html b/ietf/templates/stats/meeting_stats.html
new file mode 100644
index 0000000000..b32f5a4046
--- /dev/null
+++ b/ietf/templates/stats/meeting_stats.html
@@ -0,0 +1,61 @@
+{% extends "base.html" %}
+{% load origin %}
+{% origin %}
+{% load ietf_filters static django_bootstrap5 %}
+{% block js %}
+    <!-- Chart.js CDN -->
+    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-autocolors"></script>
+    {{ total_chart_data|json_script:"total-chart-data" }}
+    {{ in_person_chart_data|json_script:"in-person-chart-data" }}
+    <script src="{% static 'ietf/js/meeting_stats.js' %}"></script>
+{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        {% block title %}
+            Statistics for IETF-{{ meeting_number }} ({{ meeting_date }}, {{ meeting_city }}, {{ meeting_country }}) Registrations
+        {% endblock %}
+    </h1>
+    <div class="row my-3">
+        <label class="fw-bold col-sm-1 col-form-label">Show:</label>
+        <div class="btn-group col-sm-4">
+            {% for slug, label, url in possible_stats_types %}
+                <a class="btn btn-outline-primary
+                            {% if slug == stats_type %}
+                                active
+                            {% endif %}"
+                    href="{{ url }}">{{ label }}</a>
+            {% endfor %}
+        </div>
+        <label class="fw-bold col-sm-1 col-form-label">Meeting:</label>
+        <div class="btn-group col-sm-2">
+            {% for num, url in possible_meeting_numbers %}
+                <a class="btn btn-outline-primary
+                            {% if num == meeting_number %}
+                                active
+                            {% endif %}"
+                    href="{{ url }}">{{ num }}</a>
+            {% endfor %}
+        </div>
+    </div>
+    <p>
+        This page provides a visual representation of the total registrations for IETF-{{ meeting_number }} by {{ stats_type }}. 
+        Only categories having more than {{ minimum_required }} registrations are displayed separately,
+        else they are grouped under "Other".
+    </p>
+    <div class="row">
+        <div class="col-md-6 col-sm-12">
+        <h2>Total Registrations by {{ stats_type|title }} ({{ total_total}} in total)</h2>
+        <div class="chart-wrapper col-10">
+            <canvas id="totalRegistrationChart" aria-label="Total Registration Pie Chart" role="img"></canvas>
+        </div>
+        </div><!-- col -->
+        <div class="col-md-6 col-sm-12">
+        <h2>In Person Registrations by {{ stats_type|title }} ({{ in_person_total}} in total)</h2>
+        <div class="chart-wrapper col-10">
+            <canvas id="inPersonRegistrationChart" aria-label="In Person Registration Pie Chart" role="img"></canvas>
+        </div>
+        </div><!-- col -->
+    </div><!-- row -->
+{% endblock %}
\ No newline at end of file
diff --git a/ietf/templates/stats/meetings_timeline.html b/ietf/templates/stats/meetings_timeline.html
new file mode 100644
index 0000000000..65fb4e09c0
--- /dev/null
+++ b/ietf/templates/stats/meetings_timeline.html
@@ -0,0 +1,78 @@
+{% extends "base.html" %}
+{% load origin %}
+{% origin %}
+{% load ietf_filters static django_bootstrap5 %}
+{% block js %}
+    <!-- Chart.js CDN -->
+    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/hammerjs@2.0.8"></script>
+    <script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
+    {{ total_chart_data|json_script:"total-chart-data" }}
+    {{ in_person_chart_data|json_script:"in-person-chart-data" }}
+    {{ stats_type|json_script:"stats-type-data" }}
+    <script src="{% static 'ietf/js/meeting_timeline.js' %}"></script>
+{% endblock %}
+{% block content %}
+    {% origin %}
+    <h1>
+        {% block title %}
+            Statistics for IETF Meeting Registrations
+        {% endblock %}
+    </h1>
+    
+    <div class="row my-3">
+        <label class="fw-bold col-sm-1 col-form-label">Show:</label>
+        <div class="btn-group col-sm-4">
+            {% for slug, label, url in possible_stats_types %}
+                <a class="btn btn-outline-primary
+                            {% if slug == stats_type %}
+                                active
+                            {% endif %}"
+                    href="{{ url }}">{{ label }}</a>
+            {% endfor %}
+        </div>
+        <label class="fw-bold col-sm-1 col-form-label">Meeting:</label>
+        <div class="btn-group col-sm-2">
+            {% for num, url in possible_meeting_numbers %}
+                <a class="btn btn-outline-primary
+                            {% if num == meeting_number %}
+                                active
+                            {% endif %}"
+                    href="{{ url }}">{{ num }}</a>
+            {% endfor %}
+        </div>
+    </div>
+    <p>
+    {% if stats_type == 'total' %}
+        This page provides a timeline of meeting registrations.
+    {% else %}
+        This page provides a timeline of meeting registrations by {{ stats_type }} with a limit of {{ top_n }} categories.
+    {% endif %}
+        Panning can be done via the mouse or with a finger. Zooming is done via the mouse wheel or via a pinch gesture. Press <kbd>ESC</kbd> 
+            or click <button type="button" class="btn btn-primary" id="resetButton">Reset</button> to reset panning/zooming.
+    </p>
+    <div class="row">
+        <div class="col-md-12">
+        {% if stats_type == 'total' %}
+            <h2>Total Registrations</h2>
+        {% else %}
+            <h2>Total Registrations by {{ stats_type|title }}</h2>
+        {% endif %}
+        <div class="chart-wrapper col-10">
+            <canvas id="totalRegistrationChart" aria-label="Total Registration Timeline" role="img"></canvas>
+        </div>
+        </div><!-- col -->
+        {% if stats_type != 'total' %}
+        <div class="col-md-12">
+        {% if stats_type == 'total' %}
+            <h2>Total In Person Registrations</h2>
+        {% else %}
+            <h2>In Person Registrations by {{ stats_type|title }}</h2>
+        {% endif %}
+        <div class="chart-wrapper col-10">
+            <canvas id="inPersonRegistrationChart" aria-label="In Person Registration Timeline" role="img"></canvas>
+        </div>
+        </div><!-- col -->
+        {% endif %}
+    </div><!-- row -->
+{% endblock %}
\ No newline at end of file
diff --git a/package.json b/package.json
index 57642d7860..6f61aaba29 100644
--- a/package.json
+++ b/package.json
@@ -146,6 +146,8 @@
         "ietf/static/js/manage-community-list.js",
         "ietf/static/js/manage-review-requests.js",
         "ietf/static/js/meeting-interim-request.js",
+        "ietf/static/js/meeting_stats.js",
+        "ietf/static/js/meeting_timeline.js",
         "ietf/static/js/moment.js",
         "ietf/static/js/navbar-doc-search.js",
         "ietf/static/js/password_strength.js",

From 4964901bb5a29d37ab7a8f7ee925eda7cf734b6f Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Apr 2026 18:53:12 -0300
Subject: [PATCH 648/707] fix: bind gunicorn on ipv6 interface + config
 refactor (#10769)

* refactor: move gunicorn cfg to python

* fix: bind gunicorn on ipv6 interface, too
---
 dev/build/datatracker-start.sh | 12 +-----------
 dev/build/gunicorn.conf.py     | 18 +++++++++++++++++-
 2 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/dev/build/datatracker-start.sh b/dev/build/datatracker-start.sh
index a676415a26..012a563412 100644
--- a/dev/build/datatracker-start.sh
+++ b/dev/build/datatracker-start.sh
@@ -45,16 +45,6 @@ cleanup () {
 trap 'trap "" TERM; cleanup' TERM
 
 # start gunicorn in the background so we can trap the TERM signal
-gunicorn \
-          -c /workspace/gunicorn.conf.py \
-          --workers "${DATATRACKER_GUNICORN_WORKERS:-9}" \
-          --max-requests "${DATATRACKER_GUNICORN_MAX_REQUESTS:-32768}" \
-          --timeout "${DATATRACKER_GUNICORN_TIMEOUT:-180}" \
-          --bind :8000 \
-          --log-level "${DATATRACKER_GUNICORN_LOG_LEVEL:-info}" \
-          --capture-output \
-          --access-logfile -\
-          ${DATATRACKER_GUNICORN_EXTRA_ARGS} \
-          ietf.wsgi:application &
+gunicorn -c /workspace/gunicorn.conf.py ${DATATRACKER_GUNICORN_EXTRA_ARGS} ietf.wsgi:application &
 gunicorn_pid=$!
 wait "${gunicorn_pid}"
diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 9af4478685..37991a55dc 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2024-2025, All Rights Reserved
+# Copyright The IETF Trust 2024-2026, All Rights Reserved
 
 import os
 import ietf
@@ -12,6 +12,22 @@
 from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
 from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
+# Bind interfaces for both ipv4 and ipv6
+bind = ["127.0.0.1:8000", "[::1]:8000"]
+
+# Disable control socket
+control_socket_disable = True
+
+# Settings configurable via environment
+workers = int(os.environ.get("DATATRACKER_GUNICORN_WORKERS", "9"))
+max_requests = int(os.environ.get("DATATRACKER_GUNICORN_MAX_REQUESTS", "32768"))
+timeout = int(os.environ.get("DATATRACKER_GUNICORN_TIMEOUT", "180"))
+loglevel = os.environ.get("DATATRACKER_GUNICORN_LOG_LEVEL", "info") 
+
+# Logging / stdout capture
+capture_output = True
+accesslog = "-"
+
 # Configure security scheme headers for forwarded requests. Cloudflare sets X-Forwarded-Proto 
 # for us. Don't trust any of the other similar headers. Only trust the header if it's coming
 # from localhost, as all legitimate traffic will reach gunicorn via co-located nginx.

From e19761d6043f09883c1989b62334fb8837390581 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Apr 2026 21:43:37 -0300
Subject: [PATCH 649/707] fix: bind gunicorn on all interfaces (#10774)

* fix: bind gunicorn on all interfaces

* fix: something conflicts with ipv6 - loopback only

* fix: bind all ipv6 (conflict is in dev only)
---
 dev/build/gunicorn.conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 37991a55dc..18f6d0aad1 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -12,8 +12,8 @@
 from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
 from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
-# Bind interfaces for both ipv4 and ipv6
-bind = ["127.0.0.1:8000", "[::1]:8000"]
+# Bind all ipv4 and ipv6 interfaces
+bind = ["0.0.0.0:8000", "[::]:8000"]
 
 # Disable control socket
 control_socket_disable = True

From 7649d1c4b6f5cc669dd70d4512042a867c2081e1 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 28 Apr 2026 22:15:11 -0300
Subject: [PATCH 650/707] fix: bind gunicorn to ipv6 loopback only (#10776)

Something conflicts with [::]:8000...
---
 dev/build/gunicorn.conf.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 18f6d0aad1..be8808ec48 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -12,8 +12,9 @@
 from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
 from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
-# Bind all ipv4 and ipv6 interfaces
-bind = ["0.0.0.0:8000", "[::]:8000"]
+# Bind all ipv4 interfaces and ipv6 loopback interface. Would prefer to bind all
+# ipv6 as well, but something conflicts with [::]:8000.
+bind = ["0.0.0.0:8000", "[::1]:8000"]
 
 # Disable control socket
 control_socket_disable = True

From d9196b53cfa5d0034ddb9aae7d4e40f91404a3b5 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Thu, 30 Apr 2026 02:56:00 +1200
Subject: [PATCH 651/707] fix: Disable calt font feature (#10779)

---
 ietf/static/css/ietf.scss | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ietf/static/css/ietf.scss b/ietf/static/css/ietf.scss
index 6695c57b13..b8c701eae1 100644
--- a/ietf/static/css/ietf.scss
+++ b/ietf/static/css/ietf.scss
@@ -46,6 +46,11 @@ $bootstrap-icons-font-src: url("npm:bootstrap-icons/font/fonts/bootstrap-icons.w
 url("npm:bootstrap-icons/font/fonts/bootstrap-icons.woff") format("woff");
 @import "bootstrap-icons/font/bootstrap-icons";
 
+// Disable contextual alternates (calt)
+body {
+  font-feature-settings: "calt" off;
+}
+
 // Leave room for fixed-top navbar...
 body.navbar-offset {
     padding-top: 60px;

From 2fba35f76c37f9492b6411c2586c8c75c4aef7ee Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 29 Apr 2026 11:56:31 -0300
Subject: [PATCH 652/707] fix: 2xx == success on red precomputer POST (#10783)

---
 ietf/doc/utils_red.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ietf/doc/utils_red.py b/ietf/doc/utils_red.py
index bcda893dca..5c5879d688 100644
--- a/ietf/doc/utils_red.py
+++ b/ietf/doc/utils_red.py
@@ -23,7 +23,7 @@ def trigger_red_precomputer(rfc_number_list=()):
         except requests.Timeout as e:
             log(f"POST request timed out for {url} : {e}")
             return
-        if response.status_code != 200:
+        if response.status_code // 100 != 2:  # 2xx status codes are ok
             log(
                 f"POST request failed for {url} : status_code={response.status_code}"
             )

From a7bfb91875332bc88294ca6ab32aeeaf770bd3ad Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 29 Apr 2026 19:59:45 -0300
Subject: [PATCH 653/707] feat: write rfc-index and friends to filesystem
 (#10784)

* feat: write rfc-index and friends to filesystem

* style: ruff

* fix: create subdir if needed

* test: test_save_to_filesystem()

* test: check that indexes are written to fs

* style: ruff ruff
---
 ietf/sync/rfcindex.py       | 42 +++++++++++++---
 ietf/sync/tests_rfcindex.py | 96 +++++++++++++++++++++++++++++--------
 2 files changed, 112 insertions(+), 26 deletions(-)

diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index d1a0ed432f..be55a6866e 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -1,8 +1,9 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 import datetime
 import json
+import shutil
 from collections import defaultdict
-from collections.abc import Container
+from collections.abc import Container, Iterable
 from dataclasses import dataclass
 from itertools import chain
 from operator import attrgetter, itemgetter
@@ -60,6 +61,25 @@ def save_to_red_bucket(filename: str, content: str | bytes):
     log(f"Saved {bucket_path} in red_bucket storage")
 
 
+def save_to_filesystem(
+    filename: str, content: str | bytes, subdirs: Iterable[str] = ()
+):
+    """Save contents to the RFC_PATH in the filesystem
+
+    Always saves directly to settings.RFC_PATH/filename. Additionally saves a copy
+    to settings.RFC_PATH/subdir/filename for each entry in subdirs. Uses shutil.copy2
+    to create the copies, which will preserve mtime and other metadata between copies.
+    """
+    rfc_path = Path(settings.RFC_PATH)
+    dest_path = rfc_path / filename
+    dest_path.write_bytes(
+        content if isinstance(content, bytes) else content.encode("utf-8")
+    )
+    for subdir in subdirs:
+        (rfc_path / subdir).mkdir(parents=False, exist_ok=True)
+        shutil.copy2(dest_path, rfc_path / subdir / filename)
+
+
 @dataclass
 class UnusableRfcNumber:
     rfc_number: int
@@ -660,7 +680,9 @@ def create_rfc_txt_index():
             "rfcs": get_rfc_text_index_entries(),
         },
     )
-    save_to_red_bucket("rfc-index.txt", index)
+    filename = "rfc-index.txt"
+    save_to_red_bucket(filename, index)
+    save_to_filesystem(filename, index)
 
 
 def create_rfc_xml_index():
@@ -696,7 +718,9 @@ def create_rfc_xml_index():
         xml_declaration=True,
         pretty_print=4,
     )
-    save_to_red_bucket("rfc-index.xml", pretty_index)
+    filename = "rfc-index.xml"
+    save_to_red_bucket(filename, pretty_index)
+    save_to_filesystem(filename, pretty_index)
 
 
 def create_bcp_txt_index():
@@ -711,7 +735,9 @@ def create_bcp_txt_index():
             "bcps": get_bcp_text_index_entries(),
         },
     )
-    save_to_red_bucket("bcp-index.txt", index)
+    filename = "bcp-index.txt"
+    save_to_red_bucket(filename, index)
+    save_to_filesystem(filename, index, ["bcp"])
 
 
 def create_std_txt_index():
@@ -726,7 +752,9 @@ def create_std_txt_index():
             "stds": get_std_text_index_entries(),
         },
     )
-    save_to_red_bucket("std-index.txt", index)
+    filename = "std-index.txt"
+    save_to_red_bucket(filename, index)
+    save_to_filesystem(filename, index, ["std"])
 
 
 def create_fyi_txt_index():
@@ -741,7 +769,9 @@ def create_fyi_txt_index():
             "fyis": get_fyi_text_index_entries(),
         },
     )
-    save_to_red_bucket("fyi-index.txt", index)
+    filename = "fyi-index.txt"
+    save_to_red_bucket(filename, index)
+    save_to_filesystem(filename, index, ["fyi"])
 
 
 ## DirtyBits management for the RFC index
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index 541ffbb228..74fa9e7616 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -1,7 +1,9 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 import json
+from pathlib import Path
 from unittest import mock
 
+from django.conf import settings
 from django.core.files.base import ContentFile
 from django.core.files.storage import storages
 from django.test.utils import override_settings
@@ -27,6 +29,7 @@
     get_unusable_rfc_numbers,
     save_to_red_bucket,
     subseries_text_line,
+    save_to_filesystem,
 )
 from ietf.utils.test_utils import TestCase
 
@@ -107,12 +110,17 @@ def tearDown(self):
         super().tearDown()
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_filesystem")
     @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
-    def test_create_rfc_txt_index(self, mock_save):
+    def test_create_rfc_txt_index(self, mock_save_blob, mock_save_file):
         create_rfc_txt_index()
-        self.assertEqual(mock_save.call_count, 1)
-        self.assertEqual(mock_save.call_args[0][0], "rfc-index.txt")
-        contents = mock_save.call_args[0][1]
+        self.assertEqual(mock_save_blob.call_count, 1)
+        self.assertEqual(mock_save_blob.call_args[0][0], "rfc-index.txt")
+        contents = mock_save_blob.call_args[0][1]
+
+        self.assertEqual(mock_save_file.call_count, 1)
+        self.assertEqual(mock_save_file.call_args, mock.call("rfc-index.txt", contents))
+
         self.assertTrue(isinstance(contents, str))
         self.assertIn(
             "123 Not Issued.",
@@ -136,12 +144,17 @@ def test_create_rfc_txt_index(self, mock_save):
         self.assertNotIn("1 April 2021", contents)
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_filesystem")
     @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
-    def test_create_rfc_xml_index(self, mock_save):
+    def test_create_rfc_xml_index(self, mock_save_blob, mock_save_file):
         create_rfc_xml_index()
-        self.assertEqual(mock_save.call_count, 1)
-        self.assertEqual(mock_save.call_args[0][0], "rfc-index.xml")
-        contents = mock_save.call_args[0][1]
+        self.assertEqual(mock_save_blob.call_count, 1)
+        self.assertEqual(mock_save_blob.call_args[0][0], "rfc-index.xml")
+        contents = mock_save_blob.call_args[0][1]
+
+        self.assertEqual(mock_save_file.call_count, 1)
+        self.assertEqual(mock_save_file.call_args, mock.call("rfc-index.xml", contents))
+
         self.assertTrue(isinstance(contents, bytes))
         ns = "{https://www.rfc-editor.org/rfc-index}"  # NOT an f-string
         index = etree.fromstring(contents)
@@ -204,12 +217,20 @@ def test_create_rfc_xml_index(self, mock_save):
         )
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_filesystem")
     @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
-    def test_create_bcp_txt_index(self, mock_save):
+    def test_create_bcp_txt_index(self, mock_save_blob, mock_save_file):
         create_bcp_txt_index()
-        self.assertEqual(mock_save.call_count, 1)
-        self.assertEqual(mock_save.call_args[0][0], "bcp-index.txt")
-        contents = mock_save.call_args[0][1]
+        self.assertEqual(mock_save_blob.call_count, 1)
+        self.assertEqual(mock_save_blob.call_args[0][0], "bcp-index.txt")
+        contents = mock_save_blob.call_args[0][1]
+
+        self.assertEqual(mock_save_file.call_count, 1)
+        self.assertEqual(
+            mock_save_file.call_args,
+            mock.call("bcp-index.txt", contents, ["bcp"]),
+        )
+
         self.assertTrue(isinstance(contents, str))
         # starts from 1
         self.assertIn(
@@ -255,12 +276,20 @@ def test_create_bcp_txt_index(self, mock_save):
         )
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_filesystem")
     @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
-    def test_create_std_txt_index(self, mock_save):
+    def test_create_std_txt_index(self, mock_save_blob, mock_save_file):
         create_std_txt_index()
-        self.assertEqual(mock_save.call_count, 1)
-        self.assertEqual(mock_save.call_args[0][0], "std-index.txt")
-        contents = mock_save.call_args[0][1]
+        self.assertEqual(mock_save_blob.call_count, 1)
+        self.assertEqual(mock_save_blob.call_args[0][0], "std-index.txt")
+        contents = mock_save_blob.call_args[0][1]
+
+        self.assertEqual(mock_save_file.call_count, 1)
+        self.assertEqual(
+            mock_save_file.call_args,
+            mock.call("std-index.txt", contents, ["std"]),
+        )
+
         self.assertTrue(isinstance(contents, str))
         # starts from 1
         self.assertIn(
@@ -306,12 +335,20 @@ def test_create_std_txt_index(self, mock_save):
         )
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
+    @mock.patch("ietf.sync.rfcindex.save_to_filesystem")
     @mock.patch("ietf.sync.rfcindex.save_to_red_bucket")
-    def test_create_fyi_txt_index(self, mock_save):
+    def test_create_fyi_txt_index(self, mock_save_blob, mock_save_file):
         create_fyi_txt_index()
-        self.assertEqual(mock_save.call_count, 1)
-        self.assertEqual(mock_save.call_args[0][0], "fyi-index.txt")
-        contents = mock_save.call_args[0][1]
+        self.assertEqual(mock_save_blob.call_count, 1)
+        self.assertEqual(mock_save_blob.call_args[0][0], "fyi-index.txt")
+        contents = mock_save_blob.call_args[0][1]
+
+        self.assertEqual(mock_save_file.call_count, 1)
+        self.assertEqual(
+            mock_save_file.call_args,
+            mock.call("fyi-index.txt", contents, ["fyi"]),
+        )
+
         self.assertTrue(isinstance(contents, str))
         # starts from 1
         self.assertIn(
@@ -377,6 +414,25 @@ def test_save_to_red_bucket(self):
             self.assertEqual(f.read().decode("utf-8"), "new contents \U0001fae0")
         red_bucket.delete("test")  # clean up like a good child
 
+    def test_save_to_filesystem(self):
+        rfc_path = Path(settings.RFC_PATH)
+        self.assertFalse((rfc_path / "test").exists())
+        save_to_filesystem("test", "contents \U0001f600")
+        self.assertEqual((rfc_path / "test").read_text("utf-8"), "contents \U0001f600")
+        self.assertFalse((rfc_path / "subdir" / "test").exists())
+
+        self.assertFalse((rfc_path / "test2").exists())
+        self.assertFalse((rfc_path / "subdir" / "test2").exists())
+        save_to_filesystem("test", "contents \U0001f600".encode("utf-8"), ["subdir"])
+        self.assertEqual((rfc_path / "test").read_text("utf-8"), "contents \U0001f600")
+        self.assertEqual(
+            (rfc_path / "subdir" / "test").read_text("utf-8"), "contents \U0001f600"
+        )
+        self.assertEqual(
+            (rfc_path / "test").stat().st_mtime,
+            (rfc_path / "subdir" / "test").stat().st_mtime,
+        )
+
     def test_get_unusable_rfc_numbers_raises(self):
         """get_unusable_rfc_numbers should bail on errors"""
         with self.assertRaises(FileNotFoundError):

From dd6334ae586ac634ff3aab7f598316f86ef0e846 Mon Sep 17 00:00:00 2001
From: Kesara Rathnayake <kesara@fq.nz>
Date: Thu, 30 Apr 2026 14:53:21 +1200
Subject: [PATCH 654/707] feat: Check if any files exists before publishing RFC
 (#10782)

* style: Ruff ruff

Good boy!

* feat: Check if any files exists before publishing RFC

* refactor: Drop temporary dir creation

* refactor: Use helper mixins

* test: Add test for blobs

* chore: Improve comment
---
 ietf/api/tests_views_rpc.py | 369 ++++++++++++++++++++----------------
 ietf/api/views_rpc.py       |  96 ++++++----
 2 files changed, 269 insertions(+), 196 deletions(-)

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 180221cffc..c836cdc2c0 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -2,7 +2,6 @@
 import datetime
 from io import StringIO
 from pathlib import Path
-from tempfile import TemporaryDirectory
 
 from django.conf import settings
 from django.core.files.base import ContentFile
@@ -13,8 +12,14 @@
 import mock
 from django.utils import timezone
 
+from ietf.api.views_rpc import DestinationHelperMixin
 from ietf.blobdb.models import Blob
-from ietf.doc.factories import IndividualDraftFactory, RfcFactory, WgDraftFactory, WgRfcFactory
+from ietf.doc.factories import (
+    IndividualDraftFactory,
+    RfcFactory,
+    WgDraftFactory,
+    WgRfcFactory,
+)
 from ietf.doc.models import RelatedDocument, Document
 from ietf.group.factories import RoleFactory, GroupFactory
 from ietf.person.factories import PersonFactory
@@ -135,6 +140,27 @@ def test_notify_rfc_published(self, mock_task_delay):
         r = self.client.post(url, data=post_data, format="json")
         self.assertEqual(r.status_code, 403)
 
+        # Put a file in the way. Post should fail because files exists
+        rfc_path = Path(settings.RFC_PATH)
+        (rfc_path / "prerelease").mkdir()
+        file_in_the_way = rfc_path / f"rfc{unused_rfc_number}.txt"
+        file_in_the_way.touch()
+        r = self.client.post(
+            url, data=post_data, format="json", headers={"X-Api-Key": "valid-token"}
+        )
+        self.assertEqual(r.status_code, 409)  # conflict
+        file_in_the_way.unlink()
+
+        # Put a blob in the way. Post should fail because replace = False
+        blob_in_the_way = Blob.objects.create(
+            bucket="rfc", name=f"txt/rfc{unused_rfc_number}.txt", content=b""
+        )
+        r = self.client.post(
+            url, data=post_data, format="json", headers={"X-Api-Key": "valid-token"}
+        )
+        self.assertEqual(r.status_code, 409)  # conflict
+        blob_in_the_way.delete()
+
         r = self.client.post(
             url, data=post_data, format="json", headers={"X-Api-Key": "valid-token"}
         )
@@ -193,9 +219,7 @@ def test_notify_rfc_published(self, mock_task_delay):
         mock_args, mock_kwargs = mock_task_delay.call_args
         self.assertIn("rfc_number_list", mock_kwargs)
         expected_rfc_number_list = [rfc.rfc_number]
-        expected_rfc_number_list.extend(
-            [d.rfc_number for d in updates + obsoletes]
-        )
+        expected_rfc_number_list.extend([d.rfc_number for d in updates + obsoletes])
         expected_rfc_number_list = sorted(set(expected_rfc_number_list))
         self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
 
@@ -238,178 +262,173 @@ def _valid_post_data():
         for r in updates:
             rfc.relateddocument_set.create(relationship_id="updates", target=r)
         assert isinstance(rfc, Document), "WgRfcFactory should generate a Document"
-        with TemporaryDirectory() as rfc_dir:
-            settings.RFC_PATH = rfc_dir  # affects overridden settings
-            rfc_path = Path(rfc_dir)
-            (rfc_path / "prerelease").mkdir()
-            content = StringIO("XML content\n")
-            content.name = "myrfc.xml"
+        rfc_path = Path(settings.RFC_PATH)
+        (rfc_path / "prerelease").mkdir()
+        content = StringIO("XML content\n")
+        content.name = "myrfc.xml"
 
-            # no api key
-            r = self.client.post(url, _valid_post_data(), format="multipart")
-            self.assertEqual(r.status_code, 403)
-            self.assertFalse(mock_update_searchindex_task.delay.called)
+        # no api key
+        r = self.client.post(url, _valid_post_data(), format="multipart")
+        self.assertEqual(r.status_code, 403)
+        self.assertFalse(mock_update_searchindex_task.delay.called)
 
-            # invalid RFC
-            r = self.client.post(
-                url,
-                _valid_post_data() | {"rfc": rfc.rfc_number + 10},
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 400)
-            self.assertFalse(mock_update_searchindex_task.delay.called)
+        # invalid RFC
+        r = self.client.post(
+            url,
+            _valid_post_data() | {"rfc": rfc.rfc_number + 10},
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(mock_update_searchindex_task.delay.called)
 
-            # empty files
-            r = self.client.post(
-                url,
-                _valid_post_data() | {
-                    "contents": [
-                        ContentFile(b"", "myfile.xml"),
-                        ContentFile(b"", "myfile.txt"),
-                        ContentFile(b"", "myfile.html"),
-                        ContentFile(b"", "myfile.pdf"),
-                        ContentFile(b"", "myfile.json"),
-                        ContentFile(b"", "myfile.notprepped.xml"),
-                    ]
-                },
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 400)
-            self.assertFalse(mock_update_searchindex_task.delay.called)
+        # empty files
+        r = self.client.post(
+            url,
+            _valid_post_data()
+            | {
+                "contents": [
+                    ContentFile(b"", "myfile.xml"),
+                    ContentFile(b"", "myfile.txt"),
+                    ContentFile(b"", "myfile.html"),
+                    ContentFile(b"", "myfile.pdf"),
+                    ContentFile(b"", "myfile.json"),
+                    ContentFile(b"", "myfile.notprepped.xml"),
+                ]
+            },
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(mock_update_searchindex_task.delay.called)
 
-            # bad file type
-            r = self.client.post(
-                url,
-                _valid_post_data() | {
-                    "contents": [
-                        ContentFile(b"Some content", "myfile.jpg"),
-                    ]
-                },
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 400)
-            self.assertFalse(mock_update_searchindex_task.delay.called)
+        # bad file type
+        r = self.client.post(
+            url,
+            _valid_post_data()
+            | {
+                "contents": [
+                    ContentFile(b"Some content", "myfile.jpg"),
+                ]
+            },
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 400)
+        self.assertFalse(mock_update_searchindex_task.delay.called)
 
-            # Put a file in the way. Post should fail because replace = False
-            file_in_the_way = (rfc_path / f"{rfc.name}.txt")
-            file_in_the_way.touch()
-            r = self.client.post(
-                url,
-                _valid_post_data(),
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 409)  # conflict
-            self.assertFalse(mock_update_searchindex_task.delay.called)
-            file_in_the_way.unlink()
-            
-            # Put a blob in the way. Post should fail because replace = False
-            blob_in_the_way = Blob.objects.create(
-                bucket="rfc", name=f"txt/{rfc.name}.txt", content=b""
-            )
-            r = self.client.post(
-                url,
-                _valid_post_data(),
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 409)  # conflict
-            self.assertFalse(mock_update_searchindex_task.delay.called)
-            blob_in_the_way.delete()
+        # Put a file in the way. Post should fail because replace = False
+        file_in_the_way = rfc_path / f"{rfc.name}.txt"
+        file_in_the_way.touch()
+        r = self.client.post(
+            url,
+            _valid_post_data(),
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 409)  # conflict
+        self.assertFalse(mock_update_searchindex_task.delay.called)
+        file_in_the_way.unlink()
 
-            # valid post
-            mock_trigger_red_task.delay.reset_mock()
-            r = self.client.post(
-                url,
-                _valid_post_data(),
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 200)
-            self.assertEqual(
-                mock_update_searchindex_task.delay.call_args,
-                mock.call(rfc.rfc_number),
-            )
-            for extension in ["xml", "txt", "html", "pdf", "json"]:
-                filename = f"{rfc.name}.{extension}"
-                self.assertEqual(
-                    (rfc_path / filename)
-                    .read_text(),
-                    f"This is .{extension}",
-                    f"{extension} file should contain the expected content",
-                )
-                self.assertEqual(
-                    bytes(
-                        Blob.objects.get(
-                            bucket="rfc", name=f"{extension}/{filename}"
-                        ).content
-                    ),
-                    f"This is .{extension}".encode("utf-8"),
-                    f"{extension} blob should contain the expected content",
-                )
-            # special case for notprepped
-            notprepped_fn = f"{rfc.name}.notprepped.xml"
+        # Put a blob in the way. Post should fail because replace = False
+        blob_in_the_way = Blob.objects.create(
+            bucket="rfc", name=f"txt/{rfc.name}.txt", content=b""
+        )
+        r = self.client.post(
+            url,
+            _valid_post_data(),
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 409)  # conflict
+        self.assertFalse(mock_update_searchindex_task.delay.called)
+        blob_in_the_way.delete()
+
+        # valid post
+        mock_trigger_red_task.delay.reset_mock()
+        r = self.client.post(
+            url,
+            _valid_post_data(),
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
+        for extension in ["xml", "txt", "html", "pdf", "json"]:
+            filename = f"{rfc.name}.{extension}"
             self.assertEqual(
-                (
-                    rfc_path / "prerelease" / notprepped_fn
-                ).read_text(),
-                "This is .notprepped.xml",
-                ".notprepped.xml file should contain the expected content",
+                (rfc_path / filename).read_text(),
+                f"This is .{extension}",
+                f"{extension} file should contain the expected content",
             )
             self.assertEqual(
                 bytes(
                     Blob.objects.get(
-                        bucket="rfc", name=f"notprepped/{notprepped_fn}"
+                        bucket="rfc", name=f"{extension}/{filename}"
                     ).content
                 ),
-                b"This is .notprepped.xml",
-                ".notprepped.xml blob should contain the expected content",
-            )
-            # Confirm that the red precomputer was triggered correctly
-            self.assertTrue(mock_trigger_red_task.delay.called)
-            _, mock_kwargs = mock_trigger_red_task.delay.call_args
-            self.assertIn("rfc_number_list", mock_kwargs)
-            expected_rfc_number_list = [rfc.rfc_number]
-            expected_rfc_number_list.extend(
-                [d.rfc_number for d in updates + obsoletes]
+                f"This is .{extension}".encode("utf-8"),
+                f"{extension} blob should contain the expected content",
             )
-            expected_rfc_number_list = sorted(set(expected_rfc_number_list))
-            self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
-            # Confirm that the search index update task was called correctly
-            self.assertTrue(mock_update_searchindex_task.delay.called)
-            # Confirm reference relations rebuild task was called correctly
-            self.assertTrue(mock_rebuild_relations.delay.called)
-            _, mock_kwargs = mock_rebuild_relations.delay.call_args
-            self.assertIn("doc_names", mock_kwargs)
-            self.assertEqual(mock_kwargs["doc_names"], [rfc.name])
+        # special case for notprepped
+        notprepped_fn = f"{rfc.name}.notprepped.xml"
+        self.assertEqual(
+            (rfc_path / "prerelease" / notprepped_fn).read_text(),
+            "This is .notprepped.xml",
+            ".notprepped.xml file should contain the expected content",
+        )
+        self.assertEqual(
+            bytes(
+                Blob.objects.get(
+                    bucket="rfc", name=f"notprepped/{notprepped_fn}"
+                ).content
+            ),
+            b"This is .notprepped.xml",
+            ".notprepped.xml blob should contain the expected content",
+        )
+        # Confirm that the red precomputer was triggered correctly
+        self.assertTrue(mock_trigger_red_task.delay.called)
+        _, mock_kwargs = mock_trigger_red_task.delay.call_args
+        self.assertIn("rfc_number_list", mock_kwargs)
+        expected_rfc_number_list = [rfc.rfc_number]
+        expected_rfc_number_list.extend([d.rfc_number for d in updates + obsoletes])
+        expected_rfc_number_list = sorted(set(expected_rfc_number_list))
+        self.assertEqual(mock_kwargs["rfc_number_list"], expected_rfc_number_list)
+        # Confirm that the search index update task was called correctly
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        # Confirm reference relations rebuild task was called correctly
+        self.assertTrue(mock_rebuild_relations.delay.called)
+        _, mock_kwargs = mock_rebuild_relations.delay.call_args
+        self.assertIn("doc_names", mock_kwargs)
+        self.assertEqual(mock_kwargs["doc_names"], [rfc.name])
 
-            # re-post with replace = False should now fail
-            mock_update_searchindex_task.reset_mock()
-            r = self.client.post(
-                url,
-                _valid_post_data(),
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 409)  # conflict
-            self.assertFalse(mock_update_searchindex_task.delay.called)
+        # re-post with replace = False should now fail
+        mock_update_searchindex_task.reset_mock()
+        r = self.client.post(
+            url,
+            _valid_post_data(),
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 409)  # conflict
+        self.assertFalse(mock_update_searchindex_task.delay.called)
 
-            # re-post with replace = True should succeed
-            r = self.client.post(
-                url,
-                _valid_post_data() | {"replace": True},
-                format="multipart",
-                headers={"X-Api-Key": "valid-token"},
-            )
-            self.assertEqual(r.status_code, 200)
-            self.assertTrue(mock_update_searchindex_task.delay.called)
-            self.assertEqual(
-                mock_update_searchindex_task.delay.call_args,
-                mock.call(rfc.rfc_number),
-            )
+        # re-post with replace = True should succeed
+        r = self.client.post(
+            url,
+            _valid_post_data() | {"replace": True},
+            format="multipart",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(r.status_code, 200)
+        self.assertTrue(mock_update_searchindex_task.delay.called)
+        self.assertEqual(
+            mock_update_searchindex_task.delay.call_args,
+            mock.call(rfc.rfc_number),
+        )
 
     @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
     def test_refresh_rfc_index(self):
@@ -430,3 +449,31 @@ def test_refresh_rfc_index(self):
         response = self.client.post(url, headers={"X-Api-Key": "valid-token"})
         self.assertEqual(response.status_code, 202)
         self.assertTrue(rfcindex_is_dirty())
+
+    def test_destination_helper_mixin_fs_destination(self):
+        file_list = [f"rfc31337.{ext}" for ext in ["txt", "xml", "pdf", "html"]]
+        for filename in file_list:
+            self.assertEqual(
+                DestinationHelperMixin().fs_destination(filename),
+                Path(f"{settings.RFC_PATH}") / filename,
+            )
+        # noteprepped xml
+        filename = "rfc31337.notprepped.xml"
+        self.assertEqual(
+            DestinationHelperMixin().fs_destination(filename),
+            Path(f"{settings.RFC_PATH}/prerelease") / filename,
+        )
+
+    def test_destination_helper_mixin_blob_destination(self):
+        file_list = {ext: f"rfc31337.{ext}" for ext in ["txt", "xml", "pdf", "html"]}
+        for file_type, filename in file_list.items():
+            self.assertEqual(
+                DestinationHelperMixin().blob_destination(filename),
+                f"{file_type}/{filename}",
+            )
+        # noteprepped xml
+        filename = "rfc31337.notprepped.xml"
+        self.assertEqual(
+            DestinationHelperMixin().blob_destination(filename),
+            f"notprepped/{filename}",
+        )
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 6bc45fe3da..e9c17b8a12 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -368,7 +368,38 @@ def get_queryset(self):
         )
 
 
-class RfcPubNotificationView(APIView):
+class DestinationHelperMixin:
+    def fs_destination(self, filename: str | Path) -> Path:
+        """Destination for an uploaded RFC file in the filesystem
+
+        Strips any path components in filename and returns an absolute Path.
+        """
+        rfc_path = Path(settings.RFC_PATH)
+        filename = Path(filename)  # could potentially have directory components
+        extension = "".join(filename.suffixes)
+        if extension == ".notprepped.xml":
+            return rfc_path / "prerelease" / filename.name
+        return rfc_path / filename.name
+
+    def blob_destination(self, filename: str | Path) -> str:
+        """Destination name for an uploaded RFC file in the blob store
+
+        Strips any path components in filename and returns an absolute Path.
+        """
+        filename = Path(filename)  # could potentially have directory components
+        extension = "".join(filename.suffixes)
+        if extension == ".notprepped.xml":
+            file_type = "notprepped"
+        elif extension[0] == ".":
+            file_type = extension[1:]
+        else:
+            raise serializers.ValidationError(
+                f"Extension does not begin with '.'!? ({filename})",
+            )
+        return f"{file_type}/{filename.name}"
+
+
+class RfcPubNotificationView(DestinationHelperMixin, APIView):
     api_key_endpoint = "ietf.api.views_rpc"
 
     @extend_schema(
@@ -380,6 +411,30 @@ class RfcPubNotificationView(APIView):
     def post(self, request):
         serializer = RfcPubSerializer(data=request.data)
         serializer.is_valid(raise_exception=True)
+        # Check blobstore & filesystem for conflicts
+        rfc_number = serializer.validated_data["rfc_number"]
+        dest_stem = f"rfc{rfc_number}"
+        blob_kind = "rfc"
+        possible_rfc_files = [
+            self.fs_destination(dest_stem + ext)
+            for ext in RfcFileSerializer.allowed_extensions
+        ]
+        possible_rfc_blobs = [
+            self.blob_destination(dest_stem + ext)
+            for ext in RfcFileSerializer.allowed_extensions
+        ]
+        for possible_existing_file in possible_rfc_files:
+            if possible_existing_file.exists():
+                raise Conflict(
+                    "File(s) already exist for this RFC",
+                    code="files-exist",
+                )
+        for possible_existing_blob in possible_rfc_blobs:
+            if exists_in_storage(kind=blob_kind, name=possible_existing_blob):
+                raise Conflict(
+                    "Blob(s) already exist for this RFC",
+                    code="blobs-exist",
+                )
         # Create RFC
         try:
             rfc = serializer.save()
@@ -404,39 +459,10 @@ def post(self, request):
         return Response(NotificationAckSerializer().data)
 
 
-class RfcPubFilesView(APIView):
+class RfcPubFilesView(DestinationHelperMixin, APIView):
     api_key_endpoint = "ietf.api.views_rpc"
     parser_classes = [parsers.MultiPartParser]
 
-    def _fs_destination(self, filename: str | Path) -> Path:
-        """Destination for an uploaded RFC file in the filesystem
-
-        Strips any path components in filename and returns an absolute Path.
-        """
-        rfc_path = Path(settings.RFC_PATH)
-        filename = Path(filename)  # could potentially have directory components
-        extension = "".join(filename.suffixes)
-        if extension == ".notprepped.xml":
-            return rfc_path / "prerelease" / filename.name
-        return rfc_path / filename.name
-
-    def _blob_destination(self, filename: str | Path) -> str:
-        """Destination name for an uploaded RFC file in the blob store
-
-        Strips any path components in filename and returns an absolute Path.
-        """
-        filename = Path(filename)  # could potentially have directory components
-        extension = "".join(filename.suffixes)
-        if extension == ".notprepped.xml":
-            file_type = "notprepped"
-        elif extension[0] == ".":
-            file_type = extension[1:]
-        else:
-            raise serializers.ValidationError(
-                f"Extension does not begin with '.'!? ({filename})",
-            )
-        return f"{file_type}/{filename.name}"
-
     @extend_schema(
         operation_id="upload_rfc_files",
         summary="Upload files for a published RFC",
@@ -459,11 +485,11 @@ def post(self, request):
 
         # List of files that might exist for an RFC
         possible_rfc_files = [
-            self._fs_destination(dest_stem + ext)
+            self.fs_destination(dest_stem + ext)
             for ext in serializer.allowed_extensions
         ]
         possible_rfc_blobs = [
-            self._blob_destination(dest_stem + ext)
+            self.blob_destination(dest_stem + ext)
             for ext in serializer.allowed_extensions
         ]
         if not replace:
@@ -508,13 +534,13 @@ def post(self, request):
                 with ftm.open("rb") as f:
                     store_file(
                         kind=blob_kind,
-                        name=self._blob_destination(ftm),
+                        name=self.blob_destination(ftm),
                         file=f,
                         doc_name=rfc.name,
                         doc_rev=rfc.rev,  # expect blank, but match whatever it is
                         mtime=mtime,
                     )
-                destination = self._fs_destination(ftm)
+                destination = self.fs_destination(ftm)
                 if (
                     settings.SERVER_MODE != "production"
                     and not destination.parent.exists()

From 7f25c287d83545a9123117e112baf4b585d7c59c Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 30 Apr 2026 13:15:47 -0300
Subject: [PATCH 655/707] chore: add DATATRACKER_BROKER_URL config option
 (#10785)

---
 k8s/settings_local.py | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 251f11234f..19d0a1c2f5 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -155,14 +155,18 @@ def _multiline_to_list(s):
 EMAIL_HOST = os.environ.get("DATATRACKER_EMAIL_HOST", "localhost")
 EMAIL_PORT = int(os.environ.get("DATATRACKER_EMAIL_PORT", "2025"))
 
+_broker_url = os.environ.get("DATATRACKER_BROKER_URL", None)
 _celery_password = os.environ.get("CELERY_PASSWORD", None)
-if _celery_password is None:
-    raise RuntimeError("CELERY_PASSWORD must be set")
-CELERY_BROKER_URL = "amqp://datatracker:{password}@{host}/{queue}".format(
-    host=os.environ.get("RABBITMQ_HOSTNAME", "dt-rabbitmq"),
-    password=_celery_password,
-    queue=os.environ.get("RABBITMQ_QUEUE", "dt"),
-)
+if _broker_url is not None:
+    CELERY_BROKER_URL = _broker_url
+elif _celery_password is not None:
+    CELERY_BROKER_URL = "amqp://datatracker:{password}@{host}/{queue}".format(
+        host=os.environ.get("RABBITMQ_HOSTNAME", "dt-rabbitmq"),
+        password=_celery_password,
+        queue=os.environ.get("RABBITMQ_QUEUE", "dt"),
+    )
+else:
+    raise RuntimeError("DATATRACKER_BROKER_URL or CELERY_PASSWORD must be set")
 
 # mailarchive API key
 _mailing_list_archive_api_key = os.environ.get(

From 56009e7dda34e92acdda1b2b3301cefe8b203df2 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 30 Apr 2026 14:34:50 -0300
Subject: [PATCH 656/707] ci: increase staging/prod deploy timeouts

---
 .github/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 49a0e5b53b..ff84408187 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -466,7 +466,7 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
           wait-for-completion: true
-          wait-for-completion-timeout: 10m
+          wait-for-completion-timeout: 30m
           wait-for-completion-interval: 30s
           display-workflow-run-url: false
 
@@ -493,6 +493,6 @@ jobs:
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
           wait-for-completion: true
-          wait-for-completion-timeout: 10m
+          wait-for-completion-timeout: 30m
           wait-for-completion-interval: 30s
           display-workflow-run-url: false

From 65cd4ab1ef9ab9316270561f53ed66c47231d7f9 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 30 Apr 2026 18:17:28 -0300
Subject: [PATCH 657/707] fix: pkgs via npm, not CDN; alt-drag for zoom
 (#10795)

---
 .pnp.cjs                                    | 102 ++++++++++++++++++++
 ietf/static/js/meeting_stats.js             |   5 +-
 ietf/static/js/meeting_timeline.js          |  10 +-
 ietf/templates/stats/meeting_stats.html     |   3 -
 ietf/templates/stats/meetings_timeline.html |   4 -
 package.json                                |   4 +
 yarn.lock                                   |  63 ++++++++++++
 7 files changed, 181 insertions(+), 10 deletions(-)

diff --git a/.pnp.cjs b/.pnp.cjs
index 5fcce34d2f..6c76263c7e 100644
--- a/.pnp.cjs
+++ b/.pnp.cjs
@@ -42,6 +42,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["@fullcalendar/luxon3", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
             ["@fullcalendar/timegrid", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
             ["@fullcalendar/vue3", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
+            ["@kurkle/color", "npm:0.3.1"],\
             ["@parcel/optimizer-data-url", "npm:2.12.0"],\
             ["@parcel/transformer-inline-string", "npm:2.12.0"],\
             ["@parcel/transformer-sass", "npm:2.12.0"],\
@@ -56,6 +57,9 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["browserlist", "npm:1.0.1"],\
             ["c8", "npm:9.1.0"],\
             ["caniuse-lite", "npm:1.0.30001603"],\
+            ["chart.js", "npm:4.5.1"],\
+            ["chartjs-plugin-autocolors", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:0.3.1"],\
+            ["chartjs-plugin-zoom", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:2.2.0"],\
             ["d3", "npm:7.9.0"],\
             ["eslint", "npm:8.57.0"],\
             ["eslint-config-standard", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:17.1.0"],\
@@ -883,6 +887,22 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
           "linkType": "HARD"\
         }]\
       ]],\
+      ["@kurkle/color", [\
+        ["npm:0.3.1", {\
+          "packageLocation": "./.yarn/cache/@kurkle-color-npm-0.3.1-174f3d038c-e6be5c081b.zip/node_modules/@kurkle/color/",\
+          "packageDependencies": [\
+            ["@kurkle/color", "npm:0.3.1"]\
+          ],\
+          "linkType": "HARD"\
+        }],\
+        ["npm:0.3.4", {\
+          "packageLocation": "./.yarn/cache/@kurkle-color-npm-0.3.4-fbd637031f-b95c6abe02.zip/node_modules/@kurkle/color/",\
+          "packageDependencies": [\
+            ["@kurkle/color", "npm:0.3.4"]\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
       ["@lezer/common", [\
         ["npm:0.15.12", {\
           "packageLocation": "./.yarn/cache/@lezer-common-npm-0.15.12-62017272b0-dae6581618.zip/node_modules/@lezer/common/",\
@@ -2616,6 +2636,15 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
           "linkType": "HARD"\
         }]\
       ]],\
+      ["@types/hammerjs", [\
+        ["npm:2.0.46", {\
+          "packageLocation": "./.yarn/cache/@types-hammerjs-npm-2.0.46-de99d4d9d1-caba6ec788.zip/node_modules/@types/hammerjs/",\
+          "packageDependencies": [\
+            ["@types/hammerjs", "npm:2.0.46"]\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
       ["@types/istanbul-lib-coverage", [\
         ["npm:2.0.4", {\
           "packageLocation": "./.yarn/cache/@types-istanbul-lib-coverage-npm-2.0.4-734954bb56-a25d7589ee.zip/node_modules/@types/istanbul-lib-coverage/",\
@@ -3545,6 +3574,66 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
           "linkType": "HARD"\
         }]\
       ]],\
+      ["chart.js", [\
+        ["npm:4.5.1", {\
+          "packageLocation": "./.yarn/cache/chart.js-npm-4.5.1-97698d58cc-34b35b3736.zip/node_modules/chart.js/",\
+          "packageDependencies": [\
+            ["chart.js", "npm:4.5.1"],\
+            ["@kurkle/color", "npm:0.3.4"]\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
+      ["chartjs-plugin-autocolors", [\
+        ["npm:0.3.1", {\
+          "packageLocation": "./.yarn/cache/chartjs-plugin-autocolors-npm-0.3.1-7e93d38139-de4f87b5bb.zip/node_modules/chartjs-plugin-autocolors/",\
+          "packageDependencies": [\
+            ["chartjs-plugin-autocolors", "npm:0.3.1"]\
+          ],\
+          "linkType": "SOFT"\
+        }],\
+        ["virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:0.3.1", {\
+          "packageLocation": "./.yarn/__virtual__/chartjs-plugin-autocolors-virtual-6e228c1a1e/0/cache/chartjs-plugin-autocolors-npm-0.3.1-7e93d38139-de4f87b5bb.zip/node_modules/chartjs-plugin-autocolors/",\
+          "packageDependencies": [\
+            ["chartjs-plugin-autocolors", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:0.3.1"],\
+            ["@kurkle/color", "npm:0.3.1"],\
+            ["@types/chart.js", null],\
+            ["@types/kurkle__color", null],\
+            ["chart.js", "npm:4.5.1"]\
+          ],\
+          "packagePeers": [\
+            "@kurkle/color",\
+            "@types/chart.js",\
+            "@types/kurkle__color",\
+            "chart.js"\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
+      ["chartjs-plugin-zoom", [\
+        ["npm:2.2.0", {\
+          "packageLocation": "./.yarn/cache/chartjs-plugin-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip/node_modules/chartjs-plugin-zoom/",\
+          "packageDependencies": [\
+            ["chartjs-plugin-zoom", "npm:2.2.0"]\
+          ],\
+          "linkType": "SOFT"\
+        }],\
+        ["virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:2.2.0", {\
+          "packageLocation": "./.yarn/__virtual__/chartjs-plugin-zoom-virtual-45332d2c47/0/cache/chartjs-plugin-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip/node_modules/chartjs-plugin-zoom/",\
+          "packageDependencies": [\
+            ["chartjs-plugin-zoom", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:2.2.0"],\
+            ["@types/chart.js", null],\
+            ["@types/hammerjs", "npm:2.0.46"],\
+            ["chart.js", "npm:4.5.1"],\
+            ["hammerjs", "npm:2.0.8"]\
+          ],\
+          "packagePeers": [\
+            "@types/chart.js",\
+            "chart.js"\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
       ["chokidar", [\
         ["npm:3.5.3", {\
           "packageLocation": "./.yarn/cache/chokidar-npm-3.5.3-c5f9b0a56a-b49fcde401.zip/node_modules/chokidar/",\
@@ -5709,6 +5798,15 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
           "linkType": "HARD"\
         }]\
       ]],\
+      ["hammerjs", [\
+        ["npm:2.0.8", {\
+          "packageLocation": "./.yarn/cache/hammerjs-npm-2.0.8-f656ba2573-b092da7d15.zip/node_modules/hammerjs/",\
+          "packageDependencies": [\
+            ["hammerjs", "npm:2.0.8"]\
+          ],\
+          "linkType": "HARD"\
+        }]\
+      ]],\
       ["has", [\
         ["npm:1.0.3", {\
           "packageLocation": "./.yarn/cache/has-npm-1.0.3-b7f00631c1-b9ad53d53b.zip/node_modules/has/",\
@@ -8326,6 +8424,7 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["@fullcalendar/luxon3", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
             ["@fullcalendar/timegrid", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
             ["@fullcalendar/vue3", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:6.1.11"],\
+            ["@kurkle/color", "npm:0.3.1"],\
             ["@parcel/optimizer-data-url", "npm:2.12.0"],\
             ["@parcel/transformer-inline-string", "npm:2.12.0"],\
             ["@parcel/transformer-sass", "npm:2.12.0"],\
@@ -8340,6 +8439,9 @@ function $$SETUP_STATE(hydrateRuntimeState, basePath) {
             ["browserlist", "npm:1.0.1"],\
             ["c8", "npm:9.1.0"],\
             ["caniuse-lite", "npm:1.0.30001603"],\
+            ["chart.js", "npm:4.5.1"],\
+            ["chartjs-plugin-autocolors", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:0.3.1"],\
+            ["chartjs-plugin-zoom", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:2.2.0"],\
             ["d3", "npm:7.9.0"],\
             ["eslint", "npm:8.57.0"],\
             ["eslint-config-standard", "virtual:dc3fc578bfa5e06182a4d2be39ede0bc5b74940b1ffe0d70c26892ab140a4699787750fba175dc306292e80b4aa2c8c5f68c2a821e69b2c37e360c0dff36ff66#npm:17.1.0"],\
diff --git a/ietf/static/js/meeting_stats.js b/ietf/static/js/meeting_stats.js
index 70b18a0f03..cf43d08eb8 100644
--- a/ietf/static/js/meeting_stats.js
+++ b/ietf/static/js/meeting_stats.js
@@ -1,7 +1,8 @@
 // Copyright The IETF Trust 2026, All Rights Reserved
+import Chart from 'chart.js/auto'
+import autocolors from 'chartjs-plugin-autocolors'
+
 document.addEventListener('DOMContentLoaded', () => {
-    // Need to use autocolors plug-in else all slices are gray...
-    const autocolors = window['chartjs-plugin-autocolors']
     Chart.register(autocolors)
     // ── Safely parse JSON data injected from Django view ──
     const totalChartData = JSON.parse(document.getElementById('total-chart-data').textContent)
diff --git a/ietf/static/js/meeting_timeline.js b/ietf/static/js/meeting_timeline.js
index 161cead0ec..713fb3ae70 100644
--- a/ietf/static/js/meeting_timeline.js
+++ b/ietf/static/js/meeting_timeline.js
@@ -1,5 +1,10 @@
 // Copyright The IETF Trust 2026, All Rights Reserved
+import Chart from 'chart.js/auto'
+import zoomPlugin from 'chartjs-plugin-zoom'
+
 document.addEventListener('DOMContentLoaded', () => {
+    Chart.register(zoomPlugin) // enable the zoom plugin
+
     // ── Safely parse JSON data injected from Django view ──
     const totalChartData = JSON.parse(document.getElementById('total-chart-data').textContent)
     const inPersonChartData = JSON.parse(document.getElementById('in-person-chart-data').textContent)
@@ -50,7 +55,10 @@ document.addEventListener('DOMContentLoaded', () => {
                         zoom: {
                             wheel: { enabled: true },      // scroll to zoom
                             pinch: { enabled: true },      // pinch on mobile
-                            drag: { enabled: true },       // drag to select range
+                            drag: {                        // drag to select range 
+                                enabled: true,
+                                modifierKey: 'alt'
+                            },
                             mode: 'xy',                     // zoom X-axis and Y-axis
                         },
                         pan: {
diff --git a/ietf/templates/stats/meeting_stats.html b/ietf/templates/stats/meeting_stats.html
index b32f5a4046..fc41949a2e 100644
--- a/ietf/templates/stats/meeting_stats.html
+++ b/ietf/templates/stats/meeting_stats.html
@@ -3,9 +3,6 @@
 {% origin %}
 {% load ietf_filters static django_bootstrap5 %}
 {% block js %}
-    <!-- Chart.js CDN -->
-    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
-    <script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-autocolors"></script>
     {{ total_chart_data|json_script:"total-chart-data" }}
     {{ in_person_chart_data|json_script:"in-person-chart-data" }}
     <script src="{% static 'ietf/js/meeting_stats.js' %}"></script>
diff --git a/ietf/templates/stats/meetings_timeline.html b/ietf/templates/stats/meetings_timeline.html
index 65fb4e09c0..40f46880cc 100644
--- a/ietf/templates/stats/meetings_timeline.html
+++ b/ietf/templates/stats/meetings_timeline.html
@@ -3,10 +3,6 @@
 {% origin %}
 {% load ietf_filters static django_bootstrap5 %}
 {% block js %}
-    <!-- Chart.js CDN -->
-    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
-    <script src="https://cdn.jsdelivr.net/npm/hammerjs@2.0.8"></script>
-    <script src="https://cdn.jsdelivr.net/npm/chartjs-plugin-zoom"></script>
     {{ total_chart_data|json_script:"total-chart-data" }}
     {{ in_person_chart_data|json_script:"in-person-chart-data" }}
     {{ stats_type|json_script:"stats-type-data" }}
diff --git a/package.json b/package.json
index 6f61aaba29..29ead19d23 100644
--- a/package.json
+++ b/package.json
@@ -16,12 +16,16 @@
     "@fullcalendar/luxon3": "6.1.11",
     "@fullcalendar/timegrid": "6.1.11",
     "@fullcalendar/vue3": "6.1.11",
+    "@kurkle/color": "0.3.1",
     "@popperjs/core": "2.11.8",
     "@twuni/emojify": "1.0.2",
     "bootstrap": "5.3.3",
     "bootstrap-icons": "1.11.3",
     "browser-fs-access": "0.35.0",
     "caniuse-lite": "1.0.30001603",
+    "chart.js": "^4.5.1",
+    "chartjs-plugin-autocolors": "0.3.1",
+    "chartjs-plugin-zoom": "2.2.0",
     "d3": "7.9.0",
     "file-saver": "2.0.5",
     "highcharts": "11.4.0",
diff --git a/yarn.lock b/yarn.lock
index 54768ac391..47d675d6b9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -532,6 +532,20 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@kurkle/color@npm:0.3.1":
+  version: 0.3.1
+  resolution: "@kurkle/color@npm:0.3.1"
+  checksum: e6be5c081bf5acfd4a1803dcd5a0733caf450e73148d5f02dc536b1ff0c60c959c23472a26c9c3c6c78ada04fb6a53c9202db9b2de8ea56f6eeec381f9cc3a1a
+  languageName: node
+  linkType: hard
+
+"@kurkle/color@npm:^0.3.0":
+  version: 0.3.4
+  resolution: "@kurkle/color@npm:0.3.4"
+  checksum: b95c6abe0241ba1745b3c84de3b464296b95ce577110b54f46e6c6dcc9a0966491533df43812bd6c66f92cf818e385d1390b280cd5851d4afb52fc37f8a6c0b9
+  languageName: node
+  linkType: hard
+
 "@lezer/common@npm:^0.15.0, @lezer/common@npm:^0.15.7":
   version: 0.15.12
   resolution: "@lezer/common@npm:0.15.12"
@@ -1944,6 +1958,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@types/hammerjs@npm:^2.0.45":
+  version: 2.0.46
+  resolution: "@types/hammerjs@npm:2.0.46"
+  checksum: caba6ec788d19905c71092670b58514b3d1f5eee5382bf9205e8df688d51e7857b7994e2dd7aed57fac8977bdf0e456d67fbaf23440a4385b8ce25fe2af1ec39
+  languageName: node
+  linkType: hard
+
 "@types/istanbul-lib-coverage@npm:^2.0.1":
   version: 2.0.4
   resolution: "@types/istanbul-lib-coverage@npm:2.0.4"
@@ -2728,6 +2749,37 @@ browserlist@latest:
   languageName: node
   linkType: hard
 
+"chart.js@npm:^4.5.1":
+  version: 4.5.1
+  resolution: "chart.js@npm:4.5.1"
+  dependencies:
+    "@kurkle/color": ^0.3.0
+  checksum: 34b35b373642994b2adac197e91363625930530e29fc1baa6dbb411b5e1295f9f6572922003a0224a21a3019aec916567c1ed00c33b1373081f189fc188e5a7b
+  languageName: node
+  linkType: hard
+
+"chartjs-plugin-autocolors@npm:0.3.1":
+  version: 0.3.1
+  resolution: "chartjs-plugin-autocolors@npm:0.3.1"
+  peerDependencies:
+    "@kurkle/color": ^0.3.1
+    chart.js: ">=2"
+  checksum: de4f87b5bb3e042aa1d3de3886425bbd2340a55ca455b645569d0def602079833182ef214e205ff4466fb5ab1e708761cf37eb51ab3cd622284242c05ed94128
+  languageName: node
+  linkType: hard
+
+"chartjs-plugin-zoom@npm:2.2.0":
+  version: 2.2.0
+  resolution: "chartjs-plugin-zoom@npm:2.2.0"
+  dependencies:
+    "@types/hammerjs": ^2.0.45
+    hammerjs: ^2.0.8
+  peerDependencies:
+    chart.js: ">=3.2.0"
+  checksum: a540e3834082eeb4dedb5ec6ca381f94d7e101075c19a7b65f2a4cd2d12685b3a416e718c9cf7145799802874fb397f69b71a955dfc56b035946cde4d1eb6c8e
+  languageName: node
+  linkType: hard
+
 "chokidar@npm:>=3.0.0 <4.0.0":
   version: 3.5.3
   resolution: "chokidar@npm:3.5.3"
@@ -4616,6 +4668,13 @@ browserlist@latest:
   languageName: node
   linkType: hard
 
+"hammerjs@npm:^2.0.8":
+  version: 2.0.8
+  resolution: "hammerjs@npm:2.0.8"
+  checksum: b092da7d1565a165d7edb53ef0ce212837a8b11f897aa3cf81a7818b66686b0ab3f4747fbce8fc8a41d1376594639ce3a054b0fd4889ca8b5b136a29ca500e27
+  languageName: node
+  linkType: hard
+
 "has-bigints@npm:^1.0.1, has-bigints@npm:^1.0.2":
   version: 1.0.2
   resolution: "has-bigints@npm:1.0.2"
@@ -7030,6 +7089,7 @@ browserlist@latest:
     "@fullcalendar/luxon3": 6.1.11
     "@fullcalendar/timegrid": 6.1.11
     "@fullcalendar/vue3": 6.1.11
+    "@kurkle/color": 0.3.1
     "@parcel/optimizer-data-url": 2.12.0
     "@parcel/transformer-inline-string": 2.12.0
     "@parcel/transformer-sass": 2.12.0
@@ -7044,6 +7104,9 @@ browserlist@latest:
     browserlist: latest
     c8: 9.1.0
     caniuse-lite: 1.0.30001603
+    chart.js: ^4.5.1
+    chartjs-plugin-autocolors: 0.3.1
+    chartjs-plugin-zoom: 2.2.0
     d3: 7.9.0
     eslint: 8.57.0
     eslint-config-standard: 17.1.0

From 7e9883d82b7f4d68b6e84bb1ff18e05bdc46b921 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 1 May 2026 17:30:14 -0300
Subject: [PATCH 658/707] fix: ipv4-only for internal traffic (#10800)

Listening on ipv6 interfaces may have contributed to increased
CPU usage during heavy traffic. This switches back to ipv4 only
and configures nginx to use 127.0.0.1 instead of localhost
for proxying.

Does not affect external access, this is purely internal to the k8s cluster.
---
 dev/build/gunicorn.conf.py      | 5 ++---
 docker/configs/nginx-proxy.conf | 6 +++++-
 k8s/nginx-datatracker.conf      | 6 +++++-
 3 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index be8808ec48..5c6587aa43 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -12,9 +12,8 @@
 from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
 from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
-# Bind all ipv4 interfaces and ipv6 loopback interface. Would prefer to bind all
-# ipv6 as well, but something conflicts with [::]:8000.
-bind = ["0.0.0.0:8000", "[::1]:8000"]
+# Bind all ipv4 interfaces (nginx uses loopback, but k8s health checks don't)
+bind = ["0.0.0.0:8001"]
 
 # Disable control socket
 control_socket_disable = True
diff --git a/docker/configs/nginx-proxy.conf b/docker/configs/nginx-proxy.conf
index 5a9ae31ad0..e1f739970b 100644
--- a/docker/configs/nginx-proxy.conf
+++ b/docker/configs/nginx-proxy.conf
@@ -1,3 +1,7 @@
+upstream datatracker_backend {
+    server 127.0.0.1:8001;
+}
+
 server {
     listen 8000 default_server;
     listen [::]:8000 default_server;
@@ -24,7 +28,7 @@ server {
 
     location / {
         error_page 502 /502.html;
-        proxy_pass http://localhost:8001/;
+        proxy_pass http://datatracker_backend/;
         proxy_set_header Host localhost:8000;
     }
 
diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index 882d7563c2..a7d5936a19 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -1,3 +1,7 @@
+upstream datatracker_backend {
+    server 127.0.0.1:8000;
+}
+
 server {
     listen 8080 default_server;
     server_name _;
@@ -22,7 +26,7 @@ server {
         proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_hide_header X-Datatracker-Is-Authenticated; # hide this from the outside world
-        proxy_pass http://localhost:8000;
+        proxy_pass http://datatracker_backend;
         # Set timeouts longer than Cloudflare proxy limits
         proxy_connect_timeout 60;  # nginx default (Cf = 15)
         proxy_read_timeout 120;  # nginx default = 60 (Cf = 100) 

From bffc011cec82403c7dfe8bcd2f00634a6c9c518d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 1 May 2026 17:38:45 -0300
Subject: [PATCH 659/707] chore: fix + parameterize gunicorn bind port (#10801)

---
 dev/build/gunicorn.conf.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 5c6587aa43..03e81eac5e 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -13,7 +13,8 @@
 from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
 # Bind all ipv4 interfaces (nginx uses loopback, but k8s health checks don't)
-bind = ["0.0.0.0:8001"]
+_BIND_PORT = os.environ.get("DATATRACKER_GUNICORN_BIND_PORT", "8000")
+bind = [f"0.0.0.0:{_BIND_PORT}"]
 
 # Disable control socket
 control_socket_disable = True

From a99db9b4e6672ca3ac976c9266e697d834a4922e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 1 May 2026 22:33:18 -0300
Subject: [PATCH 660/707] fix: adjust nginx proxy config for auth (#10808)

---
 k8s/nginx-auth.conf | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/k8s/nginx-auth.conf b/k8s/nginx-auth.conf
index 95aa838064..1dc2f4fae0 100644
--- a/k8s/nginx-auth.conf
+++ b/k8s/nginx-auth.conf
@@ -1,3 +1,7 @@
+upstream datatracker_backend {
+    server 127.0.0.1:8000;
+}
+
 server {
     listen 8080 default_server;
     server_name _;
@@ -33,7 +37,7 @@ server {
         proxy_set_header X-Request-Start "t=$${keepempty}msec";
         proxy_set_header X-Forwarded-For $${keepempty}proxy_add_x_forwarded_for;
         proxy_hide_header X-Datatracker-Is-Authenticated; # hide this from the outside world
-        proxy_pass http://localhost:8000;
+        proxy_pass http://datatracker_backend;
         # Set timeouts longer than Cloudflare proxy limits
         proxy_connect_timeout 60;  # nginx default (Cf = 15)
         proxy_read_timeout 120;  # nginx default = 60 (Cf = 100) 

From 473bbb20ac95cdbd4b643928cde974ff4b30428d Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 6 May 2026 18:35:22 -0300
Subject: [PATCH 661/707] feat: configure typesense presets (#10826)

* feat: upsert search presets for red

* fix: syntax + payload format

* test: update tests
---
 ietf/doc/tasks.py               |  6 +++++-
 ietf/doc/tests_tasks.py         | 14 ++++++++++--
 ietf/utils/searchindex.py       | 38 +++++++++++++++++++++++++++++++--
 ietf/utils/tests_searchindex.py | 32 +++++++++++++++++++++++++++
 4 files changed, 85 insertions(+), 5 deletions(-)

diff --git a/ietf/doc/tasks.py b/ietf/doc/tasks.py
index 273242e35f..37c235b911 100644
--- a/ietf/doc/tasks.py
+++ b/ietf/doc/tasks.py
@@ -212,10 +212,14 @@ def update_rfc_searchindex_task(self, rfc_number: int):
 
 
 @shared_task
-def rebuild_searchindex_task(*, batchsize=40, drop_collection=False):
+def rebuild_searchindex_task(
+    *, batchsize=40, drop_collection=False, upsert_presets=True
+):
     if drop_collection:
         searchindex.delete_collection()
         searchindex.create_collection()
+    if upsert_presets:
+        searchindex.upsert_presets()  # ok if they already exist
     searchindex.update_or_create_rfc_entries(
         Document.objects.filter(type_id="rfc").order_by("-rfc_number"),
         batchsize=batchsize,
diff --git a/ietf/doc/tests_tasks.py b/ietf/doc/tests_tasks.py
index 2e2d65463f..48db95d047 100644
--- a/ietf/doc/tests_tasks.py
+++ b/ietf/doc/tests_tasks.py
@@ -146,13 +146,17 @@ def test_update_rfc_searchindex_task(
                 update_rfc_searchindex_task(rfc_number=rfc.rfc_number)
 
     @mock.patch("ietf.doc.tasks.searchindex.update_or_create_rfc_entries")
+    @mock.patch("ietf.doc.tasks.searchindex.upsert_presets")
     @mock.patch("ietf.doc.tasks.searchindex.create_collection")
     @mock.patch("ietf.doc.tasks.searchindex.delete_collection")
-    def test_rebuild_searchindex_task(self, mock_delete, mock_create, mock_update):
+    def test_rebuild_searchindex_task(
+        self, mock_delete, mock_create, mock_presets, mock_update
+    ):
         rfcs = WgRfcFactory.create_batch(10)
         rebuild_searchindex_task()
         self.assertFalse(mock_delete.called)
         self.assertFalse(mock_create.called)
+        self.assertTrue(mock_presets.called)
         self.assertTrue(mock_update.called)
         self.assertQuerysetEqual(
             mock_update.call_args.args[0],
@@ -162,10 +166,12 @@ def test_rebuild_searchindex_task(self, mock_delete, mock_create, mock_update):
 
         mock_delete.reset_mock()
         mock_create.reset_mock()
+        mock_presets.reset_mock()
         mock_update.reset_mock()
         rebuild_searchindex_task(drop_collection=True)
         self.assertTrue(mock_delete.called)
         self.assertTrue(mock_create.called)
+        self.assertTrue(mock_presets.called)
         self.assertTrue(mock_update.called)
         self.assertQuerysetEqual(
             mock_update.call_args.args[0],
@@ -175,10 +181,14 @@ def test_rebuild_searchindex_task(self, mock_delete, mock_create, mock_update):
 
         mock_delete.reset_mock()
         mock_create.reset_mock()
+        mock_presets.reset_mock()
         mock_update.reset_mock()
-        rebuild_searchindex_task(drop_collection=True, batchsize=3)
+        rebuild_searchindex_task(
+            drop_collection=True, batchsize=3, upsert_presets=False
+        )
         self.assertTrue(mock_delete.called)
         self.assertTrue(mock_create.called)
+        self.assertFalse(mock_presets.called)
         self.assertTrue(mock_update.called)
         self.assertQuerysetEqual(
             mock_update.call_args.args[0],
diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index 87951abb60..ffc139676e 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -5,8 +5,10 @@
 from itertools import batched
 from math import floor
 from typing import Iterable
+from urllib.parse import urljoin
 
 import httpx  # just for exceptions
+import requests
 import typesense
 import typesense.exceptions
 from django.conf import settings
@@ -26,7 +28,6 @@
     typesense.exceptions.ServiceUnavailable,
 )
 
-
 DEFAULT_SETTINGS = {
     "TYPESENSE_API_URL": "",
     "TYPESENSE_API_KEY": "",
@@ -144,7 +145,7 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
     if subseries is not None:
         ts_document["subseries"] = {
             "acronym": subseries.type.slug,
-            "number": int(subseries.name[len(subseries.type.slug) :]),
+            "number": int(subseries.name[len(subseries.type.slug):]),
             "total": len(subseries.contains()),
         }
     if rfc.group is not None:
@@ -354,6 +355,21 @@ def update_or_create_rfc_entries(
     ],
 }
 
+SEARCH_PRESETS = {
+    "red": {
+        "collection": "docs",
+        "infix": "off,always,off,off,off,off,off,off",
+        "query_by": "rfc,filename,title,abstract,keywords,authors,group,area",
+        "query_by_weights": "127,50,50,20,20,5,2,1"
+    },
+    "red-content": {
+        "collection": "docs",
+        "infix": "off,always,off,off",
+        "query_by": "rfc,filename,authors,content",
+        "query_by_weights": "127,50,5,1"
+    },
+}
+
 
 def create_collection():
     collection_name = get_collection_name()
@@ -370,3 +386,21 @@ def delete_collection():
         client.collections[collection_name].delete()
     except typesense.exceptions.ObjectNotFound:
         pass
+
+
+def upsert_presets():
+    # typesense-python does not support presets, so use requests
+    _settings = get_settings()
+    api_base = _settings["TYPESENSE_API_URL"]
+    api_key = _settings["TYPESENSE_API_KEY"]
+    for preset_name, payload in SEARCH_PRESETS.items():
+        log(f"Upserting '{preset_name}' preset")
+        response = requests.put(
+            urljoin(api_base, f"/presets/{preset_name}"),
+            json={"value": payload},
+            headers={
+                "X-TYPESENSE-API-KEY": api_key,
+            },
+            timeout=3,
+        )
+        response.raise_for_status()
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
index e9fbf52020..ffca5c18be 100644
--- a/ietf/utils/tests_searchindex.py
+++ b/ietf/utils/tests_searchindex.py
@@ -1,6 +1,7 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 from unittest import mock
 
+import requests.exceptions
 import typesense.exceptions
 from django.conf import settings
 from django.test.utils import override_settings
@@ -211,3 +212,34 @@ def test_delete_collection(self, mock_ts_client_constructor):
 
         mock_collections["frogs"].side_effect = typesense.exceptions.ObjectNotFound
         searchindex.delete_collection()  # should ignore the exception
+
+    @override_settings(
+        SEARCHINDEX_CONFIG={
+            "TYPESENSE_API_URL": "http://ts.example.com",
+            "TYPESENSE_API_KEY": "test-api-key",
+            "TYPESENSE_COLLECTION_NAME": "frogs",
+        }
+    )
+    def test_upsert_presets(self):
+        self.requests_mock.put(
+            "http://ts.example.com/presets/red", text="ok", status_code=201
+        )
+        self.requests_mock.put(
+            "http://ts.example.com/presets/red-content", text="ok", status_code=202
+        )
+        searchindex.upsert_presets()
+
+        self.requests_mock.put(
+            "http://ts.example.com/presets/red", text="not ok", status_code=400
+        )
+        with self.assertRaises(requests.exceptions.HTTPError):
+            searchindex.upsert_presets()
+
+        self.requests_mock.put(
+            "http://ts.example.com/presets/red", text="ok", status_code=200
+        )
+        self.requests_mock.put(
+            "http://ts.example.com/presets/red-content", text="not ok", status_code=400
+        )
+        with self.assertRaises(requests.exceptions.HTTPError):
+            searchindex.upsert_presets()

From ba4ffdf6c282cbedf2bb15e622b4b88618c2d6be Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Fri, 8 May 2026 04:44:15 -0400
Subject: [PATCH 662/707] chore: add k8s resources requests to all pods

---
 .vscode/settings.json |  5 ++++-
 k8s/auth.yaml         | 16 +++++++++++++---
 k8s/beat.yaml         |  4 ++++
 k8s/celery.yaml       |  8 ++++++++
 k8s/datatracker.yaml  | 16 +++++++++++++---
 k8s/memcached.yaml    |  8 ++++++++
 k8s/rabbitmq.yaml     |  4 ++++
 k8s/replicator.yaml   |  4 ++++
 8 files changed, 58 insertions(+), 7 deletions(-)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index b323cd02f7..ad6b0adc84 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -57,5 +57,8 @@
     "python.testing.pytestEnabled": false,
     "python.testing.unittestEnabled": false,
     "python.linting.enabled": true,
-    "python.terminal.shellIntegration.enabled": false
+    "python.terminal.shellIntegration.enabled": false,
+    "vs-kubernetes": {
+        "disable-linters": ["resource-limits"]
+    }
 }
diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 2bdb064447..992c90557a 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -9,7 +9,7 @@ spec:
     matchLabels:
       app: auth
   strategy:
-    type: Recreate
+    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
@@ -61,6 +61,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 1000
             runAsGroup: 1000
+          resources:
+            requests:
+              cpu: 250m
+              memory: 4Gi
         # -----------------------------------------------------
         # Nginx Container
         # -----------------------------------------------------
@@ -86,6 +90,10 @@ spec:
             - name: dt-cfg
               mountPath: /etc/nginx/conf.d/default.conf
               subPath: nginx-auth.conf
+          resources:
+            requests:
+              cpu: 10m
+              memory: 10Mi
         # -----------------------------------------------------
         # ScoutAPM Container
         # -----------------------------------------------------
@@ -111,6 +119,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 65534 # "nobody" user by default
             runAsGroup: 65534  # "nogroup" group by default
+          resources:
+            requests:
+              cpu: 10m
+              memory: 50Mi
       volumes:
         # To be overriden with the actual shared volume
         - name: dt-vol
@@ -129,8 +141,6 @@ spec:
         - name: nginx-tmp
           emptyDir:
             sizeLimit: "500Mi"
-      dnsPolicy: ClusterFirst
-      restartPolicy: Always
       terminationGracePeriodSeconds: 60
 ---
 apiVersion: v1
diff --git a/k8s/beat.yaml b/k8s/beat.yaml
index b4291c7e31..cc171fb7d1 100644
--- a/k8s/beat.yaml
+++ b/k8s/beat.yaml
@@ -48,6 +48,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 1000
             runAsGroup: 1000
+          resources:
+            requests:
+              cpu: 100m
+              memory: 250Mi
       volumes:
         # To be overridden with the actual shared volume
         - name: dt-vol
diff --git a/k8s/celery.yaml b/k8s/celery.yaml
index 2f4c0fd439..f6cea2acc7 100644
--- a/k8s/celery.yaml
+++ b/k8s/celery.yaml
@@ -52,6 +52,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 1000
             runAsGroup: 1000
+          resources:
+            requests:
+              cpu: 100m
+              memory: 1Gi
         # -----------------------------------------------------
         # ScoutAPM Container
         # -----------------------------------------------------
@@ -77,6 +81,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 65534 # "nobody" user by default
             runAsGroup: 65534  # "nogroup" group by default
+          resources:
+            requests:
+              cpu: 10m
+              memory: 50Mi
       volumes:
         # To be overridden with the actual shared volume
         - name: dt-vol
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index 50a2c69687..ff89fb3722 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -9,7 +9,7 @@ spec:
     matchLabels:
       app: datatracker
   strategy:
-    type: Recreate
+    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
@@ -61,6 +61,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 1000
             runAsGroup: 1000
+          resources:
+            requests:
+              cpu: 250m
+              memory: 4Gi
         # -----------------------------------------------------
         # Nginx Container
         # -----------------------------------------------------
@@ -87,6 +91,10 @@ spec:
               # Replaces the original default.conf
               mountPath: /etc/nginx/conf.d/default.conf
               subPath: nginx-datatracker.conf
+          resources:
+            requests:
+              cpu: 10m
+              memory: 10Mi
         # -----------------------------------------------------
         # ScoutAPM Container
         # -----------------------------------------------------
@@ -112,6 +120,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 65534 # "nobody" user by default
             runAsGroup: 65534  # "nogroup" group by default
+          resources:
+            requests:
+              cpu: 10m
+              memory: 50Mi
       initContainers:
         - name: migration
           image: "ghcr.io/ietf-tools/datatracker:$APP_IMAGE_TAG"
@@ -160,8 +172,6 @@ spec:
         - name: nginx-tmp
           emptyDir:
             sizeLimit: "500Mi"
-      dnsPolicy: ClusterFirst
-      restartPolicy: Always
       terminationGracePeriodSeconds: 60
 ---
 apiVersion: v1
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
index 5a4c9f0aed..68b732d745 100644
--- a/k8s/memcached.yaml
+++ b/k8s/memcached.yaml
@@ -36,6 +36,10 @@ spec:
             # memcached image sets up uid/gid 11211
             runAsUser: 11211
             runAsGroup: 11211
+          resources:
+            requests:
+              cpu: 100m
+              memory: 100Mi
         # -----------------------------------------------------
         # Memcached Exporter for Prometheus
         # -----------------------------------------------------
@@ -54,6 +58,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 65534  # nobody
             runAsGroup: 65534  # nobody
+          resources:
+            requests:
+              cpu: 10m
+              memory: 20Mi
       dnsPolicy: ClusterFirst
       restartPolicy: Always
       terminationGracePeriodSeconds: 30
diff --git a/k8s/rabbitmq.yaml b/k8s/rabbitmq.yaml
index 346b54c93e..e69aa7a1aa 100644
--- a/k8s/rabbitmq.yaml
+++ b/k8s/rabbitmq.yaml
@@ -62,6 +62,10 @@ spec:
             # rabbitmq image sets up uid/gid 100/101
             runAsUser: 100
             runAsGroup: 101
+          resources:
+            requests:
+              cpu: 100m
+              memory: 150Mi
       initContainers:
         # -----------------------------------------------------
         # Init RabbitMQ data
diff --git a/k8s/replicator.yaml b/k8s/replicator.yaml
index a28d9e8a16..0b06fe4fdc 100644
--- a/k8s/replicator.yaml
+++ b/k8s/replicator.yaml
@@ -52,6 +52,10 @@ spec:
             readOnlyRootFilesystem: true
             runAsUser: 1000
             runAsGroup: 1000
+          resources:
+            requests:
+              cpu: 100m
+              memory: 500Mi
       volumes:
         # To be overridden with the actual shared volume
         - name: dt-vol

From 5e751a66a1d3ce9ea8809358a68f6239cf247e1a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 12 May 2026 00:56:15 -0300
Subject: [PATCH 663/707] fix: RFCs with no group use "none" Group (#10844)

* fix: RFCs with no group use "none" Group

Translates null/empty/blank "group" field into the Group with
acronym="none" when publishing an RFC via the purple API.

* refactor: imports

* chore: remove dead code
---
 ietf/api/serializers_rpc.py | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index d888de4586..401cb43a32 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -8,7 +8,7 @@
 from django.utils import timezone
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import extend_schema_field
-from rest_framework import serializers
+from rest_framework import fields, serializers
 
 from ietf.doc.expire import move_draft_files_to_archive
 from ietf.doc.models import (
@@ -265,6 +265,23 @@ def __init__(self, **kwargs):
         super().__init__(regex, **kwargs)
 
 
+class RfcGroupRelatedField(serializers.SlugRelatedField):
+    """SlugRelatedField that translates None / "" to the acronym "none" """
+
+    def __init__(self, **kwargs):
+        super().__init__(
+            slug_field="acronym",
+            queryset=Group.objects.all(),
+            allow_null=True,
+            required=False,
+        )
+
+    def run_validation(self, data=fields.empty):
+        # Use the Group with acronym "none" when group is not specified 
+        if data is fields.empty or data is None or data == "":
+            data = "none"
+        return super().run_validation(data)
+
 
 class RfcPubSerializer(serializers.ModelSerializer):
     """Write-only serializer for RFC publication"""
@@ -279,9 +296,7 @@ class RfcPubSerializer(serializers.ModelSerializer):
 
     # fields on the RFC Document that need tweaking from ModelSerializer defaults
     rfc_number = serializers.IntegerField(min_value=1, required=True)
-    group = serializers.SlugRelatedField(
-        slug_field="acronym", queryset=Group.objects.all(), required=False
-    )
+    group = RfcGroupRelatedField()
     stream = serializers.PrimaryKeyRelatedField(
         queryset=StreamName.objects.filter(used=True)
     )

From 2d084d18843b689ac6860d464b1be8eb07b86b5e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 12 May 2026 13:29:04 -0300
Subject: [PATCH 664/707] fix: backport CVE-2026-35192 fix from Django 5.2
 (#10850)

CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

Patch from https://github.com/django/django/commit/47cf968c125e3fab317e10fe150ec479e745f995

Verified that Django's new tests pass after patching 4.2.30.
---
 ietf/settings.py                              |  5 +++-
 ...-delete-settings-and-CVE-2026-35192.patch} | 27 ++++++++++++++++---
 requirements.txt                              |  2 +-
 3 files changed, 28 insertions(+), 6 deletions(-)
 rename patch/{django-cookie-delete-with-all-settings.patch => django-cookie-delete-settings-and-CVE-2026-35192.patch} (68%)

diff --git a/ietf/settings.py b/ietf/settings.py
index 50e069ff1a..8a4587e50a 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1261,7 +1261,10 @@ def skip_unreadable_post(record):
     'patch/change-oidc-provider-field-sizes-228.patch',
     'patch/fix-oidc-access-token-post.patch',
     'patch/fix-jwkest-jwt-logging.patch',
-    'patch/django-cookie-delete-with-all-settings.patch',
+    # Patch includes old cookie-delete-with-all-settings and a backport of the fix
+    # to CVE-2026-35192 from Django 5.2. The patches conflict, so cannot be applied
+    # separately.
+    'patch/django-cookie-delete-settings-and-CVE-2026-35192.patch',
     'patch/tastypie-django22-fielderror-response.patch',
 ]
 if DEBUG:
diff --git a/patch/django-cookie-delete-with-all-settings.patch b/patch/django-cookie-delete-settings-and-CVE-2026-35192.patch
similarity index 68%
rename from patch/django-cookie-delete-with-all-settings.patch
rename to patch/django-cookie-delete-settings-and-CVE-2026-35192.patch
index 4ceaf8fceb..3f625c33bb 100644
--- a/patch/django-cookie-delete-with-all-settings.patch
+++ b/patch/django-cookie-delete-settings-and-CVE-2026-35192.patch
@@ -44,9 +44,9 @@
              expires="Thu, 01 Jan 1970 00:00:00 GMT",
              samesite=samesite,
          )
---- django/contrib/sessions/middleware.py.orig	2020-08-13 12:12:12.401898114 +0200
-+++ django/contrib/sessions/middleware.py	2020-08-13 12:14:52.690520659 +0200
-@@ -38,6 +38,8 @@
+--- django/contrib/sessions/middleware.py.old	2026-05-12 15:18:07.673997003 +0000
++++ django/contrib/sessions/middleware.py	2026-05-12 15:18:15.770997007 +0000
+@@ -38,12 +38,15 @@
                  settings.SESSION_COOKIE_NAME,
                  path=settings.SESSION_COOKIE_PATH,
                  domain=settings.SESSION_COOKIE_DOMAIN,
@@ -54,4 +54,23 @@
 +                httponly=settings.SESSION_COOKIE_HTTPONLY or None,
                  samesite=settings.SESSION_COOKIE_SAMESITE,
              )
-             patch_vary_headers(response, ("Cookie",))
+-            patch_vary_headers(response, ("Cookie",))
++            need_vary_cookie = True
+         else:
+-            if accessed:
+-                patch_vary_headers(response, ("Cookie",))
++            # If the session was accessed, it must be varied on, regardless of
++            # whether it was modified or will be saved.
++            need_vary_cookie = accessed
+             if (modified or settings.SESSION_SAVE_EVERY_REQUEST) and not empty:
+                 if request.session.get_expire_at_browser_close():
+                     max_age = None
+@@ -74,4 +77,8 @@
+                         httponly=settings.SESSION_COOKIE_HTTPONLY or None,
+                         samesite=settings.SESSION_COOKIE_SAMESITE,
+                     )
++                    # With a session cookie set, it must be varied on.
++                    need_vary_cookie = True
++        if need_vary_cookie:
++            patch_vary_headers(response, ("Cookie",))
+         return response
diff --git a/requirements.txt b/requirements.txt
index ca9a6740e1..214dfe296f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ botocore>=1.39.15
 celery>=5.5.3
 coverage>=7.9.2
 defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
-Django>4.2,<5
+Django>=4.2.30,<5
 django-admin-rangefilter>=0.13.3
 django-analytical>=3.2.0
 django-bootstrap5>=25.1

From 4ea222d433ec131036f80896e0a36c15dfd6ab18 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Tue, 12 May 2026 16:42:17 +0000
Subject: [PATCH 665/707] ci: update base image target version to 20260512T1629

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index e57fecd5f2..55a308d7ce 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260410T1557
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260512T1629
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index f430037c09..71a59ed266 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260410T1557
+20260512T1629

From 9f6fa7d4f6f11043934d6825f2f840d008bb472b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 12 May 2026 16:52:00 -0300
Subject: [PATCH 666/707] fix: allow empty keyword list for Document (#10848)

* fix: allow empty keyword list for Document

* chore: migration
---
 ...istory_keywords_alter_document_keywords.py | 33 +++++++++++++++++++
 ietf/doc/models.py                            |  1 +
 2 files changed, 34 insertions(+)
 create mode 100644 ietf/doc/migrations/0034_alter_dochistory_keywords_alter_document_keywords.py

diff --git a/ietf/doc/migrations/0034_alter_dochistory_keywords_alter_document_keywords.py b/ietf/doc/migrations/0034_alter_dochistory_keywords_alter_document_keywords.py
new file mode 100644
index 0000000000..2b89b67e88
--- /dev/null
+++ b/ietf/doc/migrations/0034_alter_dochistory_keywords_alter_document_keywords.py
@@ -0,0 +1,33 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+import ietf.doc.models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0033_dochistory_keywords_document_keywords"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="dochistory",
+            name="keywords",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                max_length=1000,
+                validators=[ietf.doc.models.validate_doc_keywords],
+            ),
+        ),
+        migrations.AlterField(
+            model_name="document",
+            name="keywords",
+            field=models.JSONField(
+                blank=True,
+                default=list,
+                max_length=1000,
+                validators=[ietf.doc.models.validate_doc_keywords],
+            ),
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index cc79b73831..0af8507f85 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -157,6 +157,7 @@ class DocumentInfo(models.Model):
         default=list,
         max_length=1000,
         validators=[validate_doc_keywords],
+        blank=True,
     )
 
     @property

From 2e59ee218e641b089ad8103e654386d705f840af Mon Sep 17 00:00:00 2001
From: Rudi Matz <rudi@staff.ietf.org>
Date: Wed, 13 May 2026 10:28:26 -0400
Subject: [PATCH 667/707] feat: add updates and obsoletes for RFCs (#10851)

* feat: add updates and obsoletes for RFCs

* add validator existing RFC; add test
---
 ietf/api/serializers_rpc.py       | 52 +++++++++++++++++++++++++++++++
 ietf/api/tests_serializers_rpc.py | 24 ++++++++++++++
 2 files changed, 76 insertions(+)

diff --git a/ietf/api/serializers_rpc.py b/ietf/api/serializers_rpc.py
index 401cb43a32..0e45ee3b39 100644
--- a/ietf/api/serializers_rpc.py
+++ b/ietf/api/serializers_rpc.py
@@ -571,6 +571,18 @@ class EditableRfcSerializer(serializers.ModelSerializer):
         child=SubseriesNameField(required=False),
         write_only=True,
     )
+    updates = serializers.ListField(
+        child=serializers.IntegerField(),
+        required=False,
+        write_only=True,
+        help_text="List of RFC numbers this document updates."
+    )
+    obsoletes = serializers.ListField(
+        child=serializers.IntegerField(),
+        required=False,
+        write_only=True,
+        help_text="List of RFC numbers this document obsoletes."
+    )
 
     class Meta:
         model = Document
@@ -584,8 +596,28 @@ class Meta:
             "std_level",
             "subseries",
             "keywords",
+            "updates",
+            "obsoletes",
         ]
 
+    def _validate_rfc_number_list(self, field_name, rfc_numbers):
+        """Raise ValidationError if any RFC numbers in the list don't exist."""
+        unknown = [
+            n for n in rfc_numbers
+            if not Document.objects.filter(rfc_number=n, type_id="rfc").exists()
+        ]
+        if unknown:
+            raise serializers.ValidationError(
+                {field_name: [f"Unknown RFC number: {n}" for n in unknown]}
+            )
+        return rfc_numbers
+
+    def validate_updates(self, value):
+        return self._validate_rfc_number_list("updates", value)
+
+    def validate_obsoletes(self, value):
+        return self._validate_rfc_number_list("obsoletes", value)
+
     def create(self, validated_data):
         raise RuntimeError("Cannot create with this serializer")
 
@@ -602,6 +634,8 @@ def update(self, instance, validated_data):
         published = validated_data.pop("published", omitted)
         subseries = validated_data.pop("subseries", omitted)
         authors_data = validated_data.pop("rfcauthor_set", omitted)
+        updates = validated_data.pop("updates", omitted)
+        obsoletes = validated_data.pop("obsoletes", omitted)
 
         # Transaction to clean up if something fails
         with transaction.atomic():
@@ -673,6 +707,24 @@ def update(self, instance, validated_data):
                                 )
                             )
                         )
+            if updates is not omitted:
+                RelatedDocument.objects.filter(
+                    source=rfc, relationship_id="updates"
+                ).exclude(target__rfc_number__in=updates).delete()
+                for rfc_num in updates:
+                    target = Document.objects.get(rfc_number=rfc_num, type_id="rfc")
+                    RelatedDocument.objects.get_or_create(
+                        source=rfc, relationship_id="updates", target=target
+                    )
+            if obsoletes is not omitted:
+                RelatedDocument.objects.filter(
+                    source=rfc, relationship_id="obs"
+                ).exclude(target__rfc_number__in=obsoletes).delete()
+                for rfc_num in obsoletes:
+                    target = Document.objects.get(rfc_number=rfc_num, type_id="rfc")
+                    RelatedDocument.objects.get_or_create(
+                        source=rfc, relationship_id="obs", target=target
+                    )
 
             # update subseries relations
             if subseries is not omitted:
diff --git a/ietf/api/tests_serializers_rpc.py b/ietf/api/tests_serializers_rpc.py
index 167ffcd3ee..5151f337d5 100644
--- a/ietf/api/tests_serializers_rpc.py
+++ b/ietf/api/tests_serializers_rpc.py
@@ -215,3 +215,27 @@ def test_partial_update(self, mock_trigger_red_task, mock_update_searchindex_tas
             mock_update_searchindex_task.delay.call_args,
             mock.call(rfc.rfc_number),
         )
+
+    def test_unknown_rfc_number_rejected(self):
+        """Unknown RFC numbers in updates/obsoletes should cause validation failure."""
+        from django.db.models import Max
+
+        rfc = WgRfcFactory()
+        unknown_rfc_number = (
+            Document.objects.filter(rfc_number__isnull=False).aggregate(
+                m=Max("rfc_number") + 1
+            )["m"]
+            or 10000
+        )
+
+        for field in ("updates", "obsoletes"):
+            serializer = EditableRfcSerializer(
+                partial=True,
+                instance=rfc,
+                data={field: [unknown_rfc_number]},
+            )
+            self.assertFalse(
+                serializer.is_valid(),
+                msg=f"{field} with unknown RFC number should be invalid",
+            )
+            self.assertIn(field, serializer.errors)

From 6e664eaa6f0f121821f3a9e508a98d82c65c9662 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Wed, 13 May 2026 18:05:10 -0400
Subject: [PATCH 668/707] ci: Update workflow dispatch action to ietf-tools
 version

---
 .github/workflows/build.yml | 28 ++++++++--------------------
 1 file changed, 8 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ff84408187..a89bac46e7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -418,17 +418,14 @@ jobs:
           echo "DEPLOY_NAMESPACE=$(node cli.js --branch ${{ github.ref_name }})" >> "$GITHUB_ENV"
 
       - name: Deploy to dev
-        uses: the-actions-org/workflow-dispatch@v4
+        uses: ietf-tools/workflow-dispatch-action@v1
         with:
           workflow: deploy-dev.yml
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }} }'
-          wait-for-completion: true
-          wait-for-completion-timeout: 60m
-          wait-for-completion-interval: 30s
-          display-workflow-run-url: false
+          waitForCompletionTimeout: 60m
 
   # -----------------------------------------------------------------
   # STAGING
@@ -445,30 +442,24 @@ jobs:
       
     steps:
       - name: Refresh Staging DB
-        uses: the-actions-org/workflow-dispatch@v4
+        uses: ietf-tools/workflow-dispatch-action@v1
         with:
           workflow: deploy-db.yml
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "restoreToLastFullSnapshot":true, "waitClusterReady":true }'
-          wait-for-completion: true
-          wait-for-completion-timeout: 120m
-          wait-for-completion-interval: 20s
-          display-workflow-run-url: false
+          waitForCompletionTimeout: 120m
 
       - name: Deploy to staging
-        uses: the-actions-org/workflow-dispatch@v4
+        uses: ietf-tools/workflow-dispatch-action@v1
         with:
           workflow: deploy.yml
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
-          wait-for-completion: true
-          wait-for-completion-timeout: 30m
-          wait-for-completion-interval: 30s
-          display-workflow-run-url: false
+          waitForCompletionTimeout: 30m
 
   # -----------------------------------------------------------------
   # PROD
@@ -485,14 +476,11 @@ jobs:
 
     steps:
       - name: Deploy to production
-        uses: the-actions-org/workflow-dispatch@v4
+        uses: ietf-tools/workflow-dispatch-action@v1
         with:
           workflow: deploy.yml
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
           inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
-          wait-for-completion: true
-          wait-for-completion-timeout: 30m
-          wait-for-completion-interval: 30s
-          display-workflow-run-url: false
+          waitForCompletionTimeout: 30m

From 94955d438f7b87607b0b9c292c28c21574b4e661 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 14 May 2026 12:44:26 -0500
Subject: [PATCH 669/707] feat: show rfc titlepage names (#10863)

* feat: use titlepage_name for person_links when it exists

* test: test using titlepage_name when present, and test html rendering
---
 ietf/person/templatetags/person_filters.py |  2 +
 ietf/person/templatetags/tests.py          | 65 +++++++++++++++++++++-
 ietf/templates/doc/document_info.html      |  2 +-
 ietf/templates/person/person_link.html     |  2 +-
 4 files changed, 68 insertions(+), 3 deletions(-)

diff --git a/ietf/person/templatetags/person_filters.py b/ietf/person/templatetags/person_filters.py
index 017b29c63a..a7a6e8193a 100644
--- a/ietf/person/templatetags/person_filters.py
+++ b/ietf/person/templatetags/person_filters.py
@@ -50,6 +50,7 @@ def person_link(person, **kwargs):
     title = kwargs.get("title", "")
     cls = kwargs.get("class", "")
     with_email = kwargs.get("with_email", True)
+    titlepage_name = kwargs.get("titlepage_name", None)
     if person is not None:
         plain_name = person.plain_name()
         name = (
@@ -61,6 +62,7 @@ def person_link(person, **kwargs):
         return {
             "name": name,
             "plain_name": plain_name,
+            "titlepage_name": titlepage_name,
             "email": email,
             "title": title,
             "class": cls,
diff --git a/ietf/person/templatetags/tests.py b/ietf/person/templatetags/tests.py
index 327cfad6ce..7c35fd6b69 100644
--- a/ietf/person/templatetags/tests.py
+++ b/ietf/person/templatetags/tests.py
@@ -1,4 +1,6 @@
 # Copyright The IETF Trust 2022, All Rights Reserved
+from django.template.loader import render_to_string
+
 from ietf.person.factories import PersonFactory
 from ietf.utils.test_utils import TestCase
 
@@ -8,7 +10,6 @@
 class PersonLinkTests(TestCase):
     # Tests of the person_link template tag. These assume it is implemented as an
     # inclusion tag.
-    # TODO test that the template actually renders the data in the dict
     def test_person_link(self):
         person = PersonFactory()
         self.assertEqual(
@@ -16,6 +17,7 @@ def test_person_link(self):
             {
                 'name': person.name,
                 'plain_name': person.plain_name(),
+                'titlepage_name': None,
                 'email': person.email_address(),
                 'title': '',
                 'class': '',
@@ -27,6 +29,7 @@ def test_person_link(self):
             {
                 'name': person.name,
                 'plain_name': person.plain_name(),
+                'titlepage_name': None,
                 'email': person.email_address(),
                 'title': '',
                 'class': '',
@@ -38,6 +41,7 @@ def test_person_link(self):
             {
                 'name': person.name,
                 'plain_name': person.plain_name(),
+                'titlepage_name': None,
                 'email': person.email_address(),
                 'title': 'Random Title',
                 'class': '',
@@ -50,12 +54,71 @@ def test_person_link(self):
             {
                 'name': person.name,
                 'plain_name': person.plain_name(),
+                'titlepage_name': None,
                 'email': person.email_address(),
                 'title': '',
                 'class': 'some-class',
                 'with_email': True,
             }
         )
+        self.assertEqual(
+            person_link(person, titlepage_name='G. Surname'),
+            {
+                'name': person.name,
+                'plain_name': person.plain_name(),
+                'titlepage_name': 'G. Surname',
+                'email': person.email_address(),
+                'title': '',
+                'class': '',
+                'with_email': True,
+            }
+        )
+
+    def test_person_link_renders(self):
+        """Verifies person/person_link.html renders context dict values correctly."""
+        person = PersonFactory()
+        name = person.name
+        email = person.email_address()
+        base_context = {
+            'name': name,
+            'plain_name': person.plain_name(),
+            'titlepage_name': None,
+            'email': email,
+            'title': '',
+            'class': '',
+            'with_email': True,
+        }
+
+        # Default: name is used as link text with default title attribute
+        html = render_to_string('person/person_link.html', base_context)
+        self.assertIn(f'>{name}</a>', html)
+        self.assertIn(f'Datatracker profile of {name}', html)
+        self.assertIn('bi-envelope', html)
+
+        # titlepage_name overrides name as link text
+        html = render_to_string('person/person_link.html', {**base_context, 'titlepage_name': 'G. Surname'})
+        self.assertIn('>G. Surname</a>', html)
+        self.assertNotIn(f'>{name}</a>', html)
+
+        # with_email=False suppresses the envelope link
+        html = render_to_string('person/person_link.html', {**base_context, 'with_email': False})
+        self.assertNotIn('bi-envelope', html)
+
+        # Custom title appears in the anchor title attribute
+        html = render_to_string('person/person_link.html', {**base_context, 'title': 'Special Title'})
+        self.assertIn('title="Special Title"', html)
+
+        # Empty context (None person) renders (None)
+        self.assertInHTML(
+            '<span class="text-body-secondary">(None)</span>',
+            render_to_string('person/person_link.html', {}),
+        )
+
+        # System email renders (System)
+        self.assertInHTML(
+            '<span class="text-body-secondary">(System)</span>',
+            render_to_string('person/person_link.html', {'email': 'system@datatracker.ietf.org', 'name': ''}),
+        )
 
     def test_invalid_person(self):
         """Generates correct context dict when input is invalid/missing"""
diff --git a/ietf/templates/doc/document_info.html b/ietf/templates/doc/document_info.html
index d6d8d43071..1666c42ae5 100644
--- a/ietf/templates/doc/document_info.html
+++ b/ietf/templates/doc/document_info.html
@@ -97,7 +97,7 @@
         <td>
             {# Implementation that uses the current primary email for each author #}
             {% if doc.pk %}{% for author in doc.author_persons_or_names %}
-                {% if author.person %}{% person_link author.person %}{% else %}{{ author.titlepage_name }}{% endif %}{% if not forloop.last %},{% endif %}
+                {% if author.person %}{% person_link author.person titlepage_name=author.titlepage_name %}{% else %}{{ author.titlepage_name }}{% endif %}{% if not forloop.last %},{% endif %}
             {% endfor %}{% endif %}
             {% if document_html and not snapshot or document_html and doc.rev == latest_rev%}
                 <br>
diff --git a/ietf/templates/person/person_link.html b/ietf/templates/person/person_link.html
index f3f7e1a5b7..b77fe8d6df 100644
--- a/ietf/templates/person/person_link.html
+++ b/ietf/templates/person/person_link.html
@@ -1,7 +1,7 @@
 {% if email and email == "system@datatracker.ietf.org" or name and name == "(System)" %}<span class="text-body-secondary">(System)</span>{% else %}<span {% if class %}class="{{ class }}"
       {% endif %}>{% if email or name %}<a {% if class %}class="text-reset"{% endif %}
            title="{% if title %}{{ title }}{% else %}Datatracker profile of {{ name }}{% endif %}"
-           {% if email %} href="{% url 'ietf.person.views.profile' email_or_name=email %}" {% else %} href="{% url 'ietf.person.views.profile' email_or_name=name %}" {% endif %}>{{ name }}</a>{% if email and with_email %} <a {% if class %}class="text-reset"{% endif %}
+           {% if email %} href="{% url 'ietf.person.views.profile' email_or_name=email %}" {% else %} href="{% url 'ietf.person.views.profile' email_or_name=name %}" {% endif %}>{% if titlepage_name %}{{ titlepage_name }}{% else %}{{ name }}{% endif %}</a>{% if email and with_email %} <a {% if class %}class="text-reset"{% endif %}
                href="mailto:{{ email|urlencode }}"
                aria-label="Compose email to {{ email }}"
                title="Compose email to {{ email }}">

From 31dcaeb490f916a5d31ea3299957a3269b0b4727 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 14 May 2026 13:33:46 -0500
Subject: [PATCH 670/707] feat: disable editing DocumentAuthors when RfcAuthors
 exist (#10864)

* fix: disable editing DocumentAuthors when RfcAuthors exist

* test: test disabling edit when rfcauthors exist

* chore: consistent use of RFC Editor
---
 ietf/doc/tests.py     | 28 ++++++++++++++++++++++++++++
 ietf/doc/views_doc.py |  9 ++++++---
 2 files changed, 34 insertions(+), 3 deletions(-)

diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index f92c9648e6..b001e01e80 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -1023,6 +1023,34 @@ def test_edit_authors_permissions(self):
         draft = Document.objects.get(pk=draft.pk)
         self.assertEqual(draft.author_persons(), orig_authors + [new_auth_person])
 
+    def test_edit_authors_blocked_when_rfcauthors_exist(self):
+        """edit_authors returns 403 for all users when RfcAuthors exist"""
+        rfc = WgRfcFactory()
+        RfcAuthorFactory(document=rfc)
+        url = urlreverse('ietf.doc.views_doc.edit_authors', kwargs=dict(name=rfc.name))
+
+        self.client.login(username='secretary', password='secretary+password')
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+        r = self.client.post(url, {})
+        self.assertEqual(r.status_code, 403)
+
+    def test_document_main_hides_edit_authors_when_rfcauthors_exist(self):
+        """document_main does not offer edit link for authors when RfcAuthors exist"""
+        rfc = WgRfcFactory()
+        edit_authors_url = urlreverse('ietf.doc.views_doc.edit_authors', kwargs=dict(name=rfc.name))
+
+        self.client.login(username='secretary', password='secretary+password')
+
+        r = self.client.get(urlreverse('ietf.doc.views_doc.document_main', kwargs=dict(name=rfc.name)))
+        self.assertEqual(r.status_code, 200)
+        self.assertContains(r, edit_authors_url)
+
+        RfcAuthorFactory(document=rfc)
+        r = self.client.get(urlreverse('ietf.doc.views_doc.document_main', kwargs=dict(name=rfc.name)))
+        self.assertEqual(r.status_code, 200)
+        self.assertNotContains(r, edit_authors_url)
+
     def make_edit_authors_post_data(self, basis, authors):
         """Helper to generate edit_authors POST data for a set of authors"""
         def _add_prefix(s):
diff --git a/ietf/doc/views_doc.py b/ietf/doc/views_doc.py
index 5b57a62074..af056f6a96 100644
--- a/ietf/doc/views_doc.py
+++ b/ietf/doc/views_doc.py
@@ -46,7 +46,7 @@
 from django.core.files.base import ContentFile
 from django.core.exceptions import PermissionDenied
 from django.db.models import Max
-from django.http import FileResponse, HttpResponse, Http404, HttpResponseBadRequest, JsonResponse
+from django.http import FileResponse, HttpResponse, Http404, HttpResponseBadRequest, HttpResponseForbidden, JsonResponse
 from django.shortcuts import render, get_object_or_404, redirect
 from django.template.loader import render_to_string
 from django.urls import reverse as urlreverse
@@ -258,7 +258,7 @@ def document_main(request, name, rev=None, document_html=False):
         interesting_relations_that, interesting_relations_that_doc = interesting_doc_relations(doc)
 
         can_edit = has_role(request.user, ("Area Director", "Secretariat"))
-        can_edit_authors = has_role(request.user, ("Secretariat"))
+        can_edit_authors = has_role(request.user, ("Secretariat")) and not doc.rfcauthor_set.exists()
 
         stream_slugs = StreamName.objects.values_list("slug", flat=True)
         # For some reason, AnonymousUser has __iter__, but is not iterable,
@@ -1842,12 +1842,15 @@ def add_fields(self, form, index):
                 if fh in form.fields:
                     form.fields[fh].widget = forms.HiddenInput()
 
+    doc = get_object_or_404(Document, name=name)
+    if doc.rfcauthor_set.exists():
+        return HttpResponseForbidden("Contact the RFC Editor to change RFC Author information")
+
     AuthorFormSet = forms.formset_factory(DocAuthorForm,
                                           formset=_AuthorsBaseFormSet,
                                           can_delete=True,
                                           can_order=True,
                                           extra=0)
-    doc = get_object_or_404(Document, name=name)
     
     if request.method == 'POST':
         change_basis_form = DocAuthorChangeBasisForm(request.POST)

From 1e5f5db9c24db321097dc70849783eff2c3f8057 Mon Sep 17 00:00:00 2001
From: Sai Asish Y <say.apm35@gmail.com>
Date: Thu, 14 May 2026 12:52:05 -0700
Subject: [PATCH 671/707] fix: avoid PosixPath.endswith() in
 run_yang_model_checks_task (#10819)

Fixes #10818

Signed-off-by: SAY-5 <saiasish.cnp@gmail.com>
Co-authored-by: SAY-5 <saiasish.cnp@gmail.com>
---
 ietf/submit/utils.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/ietf/submit/utils.py b/ietf/submit/utils.py
index 7e3106f723..457462e4f2 100644
--- a/ietf/submit/utils.py
+++ b/ietf/submit/utils.py
@@ -1612,6 +1612,4 @@ def active(dirent):
             log.log(f"Error processing {item.name}: {e}")
 
     ftp_moddir = Path(settings.FTP_DIR) / "yang" / "draftmod/"
-    if not moddir.endswith("/"):
-        moddir += "/"
-    subprocess.call(("/usr/bin/rsync", "-aq", "--delete", moddir, ftp_moddir))
+    subprocess.call(("/usr/bin/rsync", "-aq", "--delete", f"{moddir}/", str(ftp_moddir)))

From d51c909214ed08034d92280bbb4cb94dfa751e58 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 14 May 2026 18:49:30 -0500
Subject: [PATCH 672/707] feat: process rfc-editor queue notifications from
 purple (#10857)

* feat: api endpoint for receiving rpc queue updates

* feat: process new queue

* test: processing queue

* chore: ruff

* fix: admin and resources for RpcAssignmentDocEvent

* fix: express Awaiting Editor Assignment

* chore: ruff

* chore: renumber migrations

* fix: migration boilerplate

* fix: space after colon

* test: use more realistic assignment states for blocked roles

* fix: update auth48 urls on each parse of the queue
---
 ietf/api/tests_views_rpc.py                   |  88 ++++
 ietf/api/urls_rpc.py                          |   5 +
 ietf/api/views_rpc.py                         |  22 +
 ietf/doc/admin.py                             |   6 +-
 ...35_add_rpc_queue_draft_rfceditor_states.py |  31 ++
 .../migrations/0036_alter_docevent_type.py    |  92 ++++
 .../migrations/0037_rpcassignmentdocevent.py  |  31 ++
 ietf/doc/models.py                            |   4 +
 ietf/doc/resources.py                         |  27 +-
 ietf/name/fixtures/names.json                 |  80 ++-
 ietf/settings.py                              |   1 +
 ietf/sync/tasks.py                            | 129 ++++-
 ietf/sync/tests_tasks.py                      | 476 ++++++++++++++++++
 13 files changed, 985 insertions(+), 7 deletions(-)
 create mode 100644 ietf/doc/migrations/0035_add_rpc_queue_draft_rfceditor_states.py
 create mode 100644 ietf/doc/migrations/0036_alter_docevent_type.py
 create mode 100644 ietf/doc/migrations/0037_rpcassignmentdocevent.py
 create mode 100644 ietf/sync/tests_tasks.py

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index c836cdc2c0..6d147c00b0 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -477,3 +477,91 @@ def test_destination_helper_mixin_blob_destination(self):
             DestinationHelperMixin().blob_destination(filename),
             f"notprepped/{filename}",
         )
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    @mock.patch("ietf.api.views_rpc.process_rpc_queue_task.delay")
+    def test_process_rpc_queue(self, mock_task_delay):
+        url = urlreverse("ietf.api.purple_api.process_rpc_queue")
+        queue_entries = [
+            {
+                "id": 9850,
+                "name": "draft-ietf-netmod-system-config",
+                "title": "System-defined Configuration",
+                "draft_url": "http://localhost:8000/doc/draft-ietf-netmod-system-config-20",
+                "disposition": "in_progress",
+                "external_deadline": None,
+                "labels": [],
+                "cluster": None,
+                "assignment_set": [
+                    {
+                        "id": 434,
+                        "rfc_to_be": 9850,
+                        "role": "first_editor",
+                        "state": "in_progress",
+                    }
+                ],
+                "actionholder_set": [],
+                "pending_activities": [],
+                "rfc_number": None,
+                "pages": 33,
+                "enqueued_at": "2026-01-26T12:00:00Z",
+                "final_approval": [],
+                "iana_status": {
+                    "slug": "completed",
+                    "name": "completed",
+                    "desc": "IANA has completed actions in draft",
+                },
+                "blocking_reasons": [],
+                "authors": [{"titlepage_name": "Q. Ma", "is_editor": True}],
+                "approval_log_message": [],
+                "stream": "ietf",
+                "group": "netmod",
+                "group_name": "Network Modeling",
+                "std_level": "ps",
+                "references": [],
+                "rev": "20",
+            }
+        ]
+        queue_data = {"data": queue_entries}
+
+        # no credentials
+        response = self.client.post(
+            url, data=queue_data, content_type="application/json"
+        )
+        self.assertEqual(response.status_code, 403)
+        mock_task_delay.assert_not_called()
+
+        # invalid token
+        response = self.client.post(
+            url,
+            data=queue_data,
+            content_type="application/json",
+            headers={"X-Api-Key": "invalid-token"},
+        )
+        self.assertEqual(response.status_code, 403)
+        mock_task_delay.assert_not_called()
+
+        # valid token, wrong method
+        response = self.client.get(url, headers={"X-Api-Key": "valid-token"})
+        self.assertEqual(response.status_code, 405)
+        mock_task_delay.assert_not_called()
+
+        # valid token, missing "data" field
+        response = self.client.post(
+            url,
+            data={},
+            content_type="application/json",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(response.status_code, 400)
+        mock_task_delay.assert_not_called()
+
+        # valid token, POST with data
+        response = self.client.post(
+            url,
+            data=queue_data,
+            content_type="application/json",
+            headers={"X-Api-Key": "valid-token"},
+        )
+        self.assertEqual(response.status_code, 202)
+        mock_task_delay.assert_called_once_with(queue_entries)
diff --git a/ietf/api/urls_rpc.py b/ietf/api/urls_rpc.py
index 8555610dc3..07f2cf8751 100644
--- a/ietf/api/urls_rpc.py
+++ b/ietf/api/urls_rpc.py
@@ -36,6 +36,11 @@
         name="ietf.api.purple_api.refresh_rfc_index",
     ),
     path(r"subject/<str:subject_id>/person/", views_rpc.SubjectPersonView.as_view()),
+    path(
+        r"queue/process/",
+        views_rpc.ProcessRpcQueueView.as_view(),
+        name="ietf.api.purple_api.process_rpc_queue",
+    ),
 ]
 
 # add routers at the end so individual routes can steal parts of their address
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index e9c17b8a12..83d0abefb1 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -48,6 +48,7 @@
 )
 from ietf.person.models import Email, Person
 from ietf.sync.rfcindex import mark_rfcindex_as_dirty
+from ietf.sync.tasks import process_rpc_queue_task
 
 
 class Conflict(APIException):
@@ -576,3 +577,24 @@ class RfcIndexView(APIView):
     def post(self, request):
         mark_rfcindex_as_dirty()
         return Response(status=202)
+
+
+class RpcQueueDataSerializer(serializers.Serializer):
+    data = serializers.JSONField()
+
+
+class ProcessRpcQueueView(APIView):
+    api_key_endpoint = "ietf.api.views_rpc"
+
+    @extend_schema(
+        operation_id="process_rpc_queue",
+        summary="Process the provided RPC queue",
+        description="Schedules parsing the provided queue to update documents with change dqueue data",
+        responses={202: None},
+        request=RpcQueueDataSerializer,
+    )
+    def post(self, request):
+        serializer = RpcQueueDataSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        process_rpc_queue_task.delay(serializer.validated_data["data"])
+        return Response(status=202)
diff --git a/ietf/doc/admin.py b/ietf/doc/admin.py
index 757d3da9f9..86f5ac5fda 100644
--- a/ietf/doc/admin.py
+++ b/ietf/doc/admin.py
@@ -15,7 +15,7 @@
     AddedMessageEvent, SubmissionDocEvent, DeletedEvent, EditedAuthorsDocEvent, DocumentURL,
     ReviewAssignmentDocEvent, IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
     BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject, RfcAuthor,
-    EditedRfcAuthorsDocEvent)
+    EditedRfcAuthorsDocEvent, RpcAssignmentDocEvent)
 
 from ietf.utils.admin import SaferTabularInline
 from ietf.utils.validators import validate_external_resource_value
@@ -229,6 +229,10 @@ class SubmissionDocEventAdmin(DocEventAdmin):
     raw_id_fields = DocEventAdmin.raw_id_fields + ["submission"]
 admin.site.register(SubmissionDocEvent, SubmissionDocEventAdmin)
 
+class RpcAssignmentDocEventAdmin(DocEventAdmin):
+    search_fields = DocEventAdmin.search_fields + ["assignments"]
+admin.site.register(RpcAssignmentDocEvent, RpcAssignmentDocEventAdmin)
+
 class DocumentUrlAdmin(admin.ModelAdmin):
     list_display = ['id', 'doc', 'tag', 'url', 'desc', ]
     search_fields = ['doc__name', 'url', ]
diff --git a/ietf/doc/migrations/0035_add_rpc_queue_draft_rfceditor_states.py b/ietf/doc/migrations/0035_add_rpc_queue_draft_rfceditor_states.py
new file mode 100644
index 0000000000..9805970ef0
--- /dev/null
+++ b/ietf/doc/migrations/0035_add_rpc_queue_draft_rfceditor_states.py
@@ -0,0 +1,31 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations
+
+
+def forward(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    for slug, name in [("in_progress", "In Progress"), ("blocked", "Blocked")]:
+        State.objects.get_or_create(
+            type_id="draft-rfceditor",
+            slug=slug,
+            defaults={"name": name, "used": True, "desc": "", "order": 0},
+        )
+
+
+def reverse(apps, schema_editor):
+    State = apps.get_model("doc", "State")
+    Document = apps.get_model("doc", "Document")
+    for slug in ("in_progress", "blocked"):
+        assert not Document.objects.filter(
+            states__type="draft-rfceditor", states__slug=slug
+        ).exists()
+        State.objects.filter(type_id="draft-rfceditor", slug=slug).delete()
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0034_alter_dochistory_keywords_alter_document_keywords"),
+    ]
+
+    operations = [migrations.RunPython(forward, reverse)]
diff --git a/ietf/doc/migrations/0036_alter_docevent_type.py b/ietf/doc/migrations/0036_alter_docevent_type.py
new file mode 100644
index 0000000000..1cc11d4ee9
--- /dev/null
+++ b/ietf/doc/migrations/0036_alter_docevent_type.py
@@ -0,0 +1,92 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0035_add_rpc_queue_draft_rfceditor_states"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="docevent",
+            name="type",
+            field=models.CharField(
+                choices=[
+                    ("new_revision", "Added new revision"),
+                    ("new_submission", "Uploaded new revision"),
+                    ("changed_document", "Changed document metadata"),
+                    ("added_comment", "Added comment"),
+                    ("added_message", "Added message"),
+                    ("edited_authors", "Edited the documents author list"),
+                    ("deleted", "Deleted document"),
+                    ("changed_state", "Changed state"),
+                    ("changed_stream", "Changed document stream"),
+                    ("expired_document", "Expired document"),
+                    ("extended_expiry", "Extended expiry of document"),
+                    ("requested_resurrect", "Requested resurrect"),
+                    ("completed_resurrect", "Completed resurrect"),
+                    ("changed_consensus", "Changed consensus"),
+                    ("published_rfc", "Published RFC"),
+                    (
+                        "added_suggested_replaces",
+                        "Added suggested replacement relationships",
+                    ),
+                    (
+                        "reviewed_suggested_replaces",
+                        "Reviewed suggested replacement relationships",
+                    ),
+                    ("changed_action_holders", "Changed action holders for document"),
+                    ("changed_group", "Changed group"),
+                    ("changed_protocol_writeup", "Changed protocol writeup"),
+                    ("changed_charter_milestone", "Changed charter milestone"),
+                    ("initial_review", "Set initial review time"),
+                    ("changed_review_announcement", "Changed WG Review text"),
+                    ("changed_action_announcement", "Changed WG Action text"),
+                    ("started_iesg_process", "Started IESG process on document"),
+                    ("created_ballot", "Created ballot"),
+                    ("closed_ballot", "Closed ballot"),
+                    ("sent_ballot_announcement", "Sent ballot announcement"),
+                    ("changed_ballot_position", "Changed ballot position"),
+                    ("changed_ballot_approval_text", "Changed ballot approval text"),
+                    ("changed_ballot_writeup_text", "Changed ballot writeup text"),
+                    ("changed_rfc_editor_note_text", "Changed RFC Editor Note text"),
+                    ("changed_last_call_text", "Changed last call text"),
+                    ("requested_last_call", "Requested last call"),
+                    ("sent_last_call", "Sent last call"),
+                    ("scheduled_for_telechat", "Scheduled for telechat"),
+                    ("iesg_approved", "IESG approved document (no problem)"),
+                    ("iesg_disapproved", "IESG disapproved document (do not publish)"),
+                    ("approved_in_minute", "Approved in minute"),
+                    ("iana_review", "IANA review comment"),
+                    ("rfc_in_iana_registry", "RFC is in IANA registry"),
+                    (
+                        "rfc_editor_received_announcement",
+                        "Announcement was received by RFC Editor",
+                    ),
+                    ("requested_publication", "Publication at RFC Editor requested"),
+                    (
+                        "sync_from_rfc_editor",
+                        "Received updated information from RFC Editor",
+                    ),
+                    ("changed_rpc_assignments", "Changed RPC queue assignments"),
+                    ("requested_review", "Requested review"),
+                    ("assigned_review_request", "Assigned review request"),
+                    ("closed_review_request", "Closed review request"),
+                    ("closed_review_assignment", "Closed review assignment"),
+                    ("downref_approved", "Downref approved"),
+                    ("posted_related_ipr", "Posted related IPR"),
+                    ("removed_related_ipr", "Removed related IPR"),
+                    (
+                        "removed_objfalse_related_ipr",
+                        "Removed Objectively False related IPR",
+                    ),
+                    ("changed_editors", "Changed BOF Request editors"),
+                    ("published_statement", "Published statement"),
+                    ("approved_slides", "Slides approved"),
+                ],
+                max_length=50,
+            ),
+        ),
+    ]
diff --git a/ietf/doc/migrations/0037_rpcassignmentdocevent.py b/ietf/doc/migrations/0037_rpcassignmentdocevent.py
new file mode 100644
index 0000000000..648376e118
--- /dev/null
+++ b/ietf/doc/migrations/0037_rpcassignmentdocevent.py
@@ -0,0 +1,31 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("doc", "0036_alter_docevent_type"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="RpcAssignmentDocEvent",
+            fields=[
+                (
+                    "docevent_ptr",
+                    models.OneToOneField(
+                        auto_created=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        parent_link=True,
+                        primary_key=True,
+                        serialize=False,
+                        to="doc.docevent",
+                    ),
+                ),
+                ("assignments", models.TextField(blank=True)),
+            ],
+            bases=("doc.docevent",),
+        ),
+    ]
diff --git a/ietf/doc/models.py b/ietf/doc/models.py
index 0af8507f85..156bac4e77 100644
--- a/ietf/doc/models.py
+++ b/ietf/doc/models.py
@@ -1546,6 +1546,7 @@ class DocReminder(models.Model):
     ("rfc_editor_received_announcement", "Announcement was received by RFC Editor"),
     ("requested_publication", "Publication at RFC Editor requested"),
     ("sync_from_rfc_editor", "Received updated information from RFC Editor"),
+    ("changed_rpc_assignments", "Changed RPC queue assignments"),
 
     # review
     ("requested_review", "Requested review"),
@@ -1611,6 +1612,9 @@ class StateDocEvent(DocEvent):
 class ConsensusDocEvent(DocEvent):
     consensus = models.BooleanField(null=True, default=None)
 
+class RpcAssignmentDocEvent(DocEvent):
+    assignments = models.TextField(blank=True)
+
 # IESG events
 class BallotType(models.Model):
     doc_type = ForeignKey(DocTypeName, blank=True, null=True)
diff --git a/ietf/doc/resources.py b/ietf/doc/resources.py
index 1d86df78d0..9da7cb57d8 100644
--- a/ietf/doc/resources.py
+++ b/ietf/doc/resources.py
@@ -19,7 +19,7 @@
     ReviewRequestDocEvent, ReviewAssignmentDocEvent, EditedAuthorsDocEvent, DocumentURL,
     IanaExpertDocEvent, IRSGBallotDocEvent, DocExtResource, DocumentActionHolder,
     BofreqEditorDocEvent, BofreqResponsibleDocEvent, StoredObject, RfcAuthor,
-    EditedRfcAuthorsDocEvent)
+    EditedRfcAuthorsDocEvent, RpcAssignmentDocEvent)
 
 from ietf.name.resources import BallotPositionNameResource, DocTypeNameResource
 class BallotTypeResource(ModelResource):
@@ -916,3 +916,28 @@ class Meta:
             "email": ALL_WITH_RELATIONS,
         }
 api.doc.register(RfcAuthorResource())
+
+
+from ietf.person.resources import PersonResource
+class RpcAssignmentDocEventResource(ModelResource):
+    by               = ToOneField(PersonResource, 'by')
+    doc              = ToOneField(DocumentResource, 'doc')
+    docevent_ptr     = ToOneField(DocEventResource, 'docevent_ptr')
+    class Meta:
+        queryset = RpcAssignmentDocEvent.objects.all()
+        serializer = api.Serializer()
+        cache = SimpleCache()
+        #resource_name = 'rpcassignmentdocevent'
+        ordering = ['docevent_ptr', ]
+        filtering = { 
+            "id": ALL,
+            "time": ALL,
+            "type": ALL,
+            "rev": ALL,
+            "desc": ALL,
+            "assignments": ALL,
+            "by": ALL_WITH_RELATIONS,
+            "doc": ALL_WITH_RELATIONS,
+            "docevent_ptr": ALL_WITH_RELATIONS,
+        }
+api.doc.register(RpcAssignmentDocEventResource())
diff --git a/ietf/name/fixtures/names.json b/ietf/name/fixtures/names.json
index 64e26e503a..798fa9178e 100644
--- a/ietf/name/fixtures/names.json
+++ b/ietf/name/fixtures/names.json
@@ -666,7 +666,7 @@
   },
   {
     "fields": {
-      "desc": "The individual submission document has been adopted by the Working Group (WG), but a WG document replacing this document with the typical naming convention of 'draft- ietf-wgname-topic-nn' has not yet been submitted.",
+      "desc": "The individual submission document has been adopted by the Working Group (WG), but some administrative matter still needs to be completed (e.g., a WG document replacing this document with the typical naming convention of 'draft-ietf-wgname-topic-nn' has not yet been submitted).",
       "name": "Adopted by a WG",
       "next_states": [
         38
@@ -694,7 +694,7 @@
   },
   {
     "fields": {
-      "desc": "The document has been adopted by the Working Group (WG) and is under development.  A document can only be adopted by one WG at a time.  However, a document may be transferred between WGs.",
+      "desc": "The document has been identified as a Working Group (WG) document and is under development per Section 7.2 of RFC2418.",
       "name": "WG Document",
       "next_states": [
         39,
@@ -759,7 +759,7 @@
   },
   {
     "fields": {
-      "desc": "The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chair(s) are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed",
+      "desc": "The Working Group (WG) document has completed Working Group Last Call (WGLC), but the WG chairs are not yet ready to call consensus on the document. The reasons for this may include comments from the WGLC need to be responded to, or a revision to the document is needed.",
       "name": "Waiting for WG Chair Go-Ahead",
       "next_states": [
         41,
@@ -790,7 +790,7 @@
   },
   {
     "fields": {
-      "desc": "The Working Group (WG) document has left the WG and been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication.  See the “IESG State” or “RFC Editor State” for further details on the state of the document.",
+      "desc": "The Working Group (WG) document has been submitted to the Internet Engineering Steering Group (IESG) for evaluation and publication per Section 7.4 of RFC2418.  See the “IESG State” or “RFC Editor State” for further details on the state of the document.",
       "name": "Submitted to IESG for Publication",
       "next_states": [
         38
@@ -2656,6 +2656,32 @@
     "model": "doc.state",
     "pk": 183
   },
+  {
+    "fields": {
+      "desc": "",
+      "name": "In Progress",
+      "next_states": [],
+      "order": 0,
+      "slug": "in_progress",
+      "type": "draft-rfceditor",
+      "used": true
+    },
+    "model": "doc.state",
+    "pk": 216
+  },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Blocked",
+      "next_states": [],
+      "order": 0,
+      "slug": "blocked",
+      "type": "draft-rfceditor",
+      "used": true
+    },
+    "model": "doc.state",
+    "pk": 217
+  },
   {
     "fields": {
       "label": "State"
@@ -5816,6 +5842,20 @@
     "model": "mailtrigger.mailtrigger",
     "pk": "review_completed_artart_telechat"
   },
+  {
+    "fields": {
+      "cc": [
+        "review_doc_all_parties",
+        "review_doc_group_mail_list"
+      ],
+      "desc": "Recipients when a bgpdir Early review is completed",
+      "to": [
+        "review_team_mail_list"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "review_completed_bgpdir_early"
+  },
   {
     "fields": {
       "cc": [
@@ -6124,6 +6164,20 @@
     "model": "mailtrigger.mailtrigger",
     "pk": "review_completed_opsdir_telechat"
   },
+  {
+    "fields": {
+      "cc": [
+        "review_doc_all_parties",
+        "review_doc_group_mail_list"
+      ],
+      "desc": "Recipients when a perfmetrdir Early review is completed",
+      "to": [
+        "review_team_mail_list"
+      ]
+    },
+    "model": "mailtrigger.mailtrigger",
+    "pk": "review_completed_perfmetrdir_early"
+  },
   {
     "fields": {
       "cc": [
@@ -14038,6 +14092,16 @@
     "model": "name.reviewresultname",
     "pk": "almost-ready"
   },
+  {
+    "fields": {
+      "desc": "",
+      "name": "Clarification Needed",
+      "order": 10,
+      "used": true
+    },
+    "model": "name.reviewresultname",
+    "pk": "clarification-needed"
+  },
   {
     "fields": {
       "desc": "",
@@ -17757,5 +17821,13 @@
     },
     "model": "stats.countryalias",
     "pk": 303
+  },
+  {
+    "fields": {
+      "alias": "czechia",
+      "country": "CZ"
+    },
+    "model": "stats.countryalias",
+    "pk": 304
   }
 ]
diff --git a/ietf/settings.py b/ietf/settings.py
index 8a4587e50a..aac0eabc90 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -903,6 +903,7 @@ def skip_unreadable_post(record):
 RFC_EDITOR_INLINE_ERRATA_URL = "https://www.rfc-editor.org/rfc/inline-errata/rfc{rfc_number}.html"
 RFC_EDITOR_ERRATA_BASE_URL = "https://www.rfc-editor.org/errata/"
 RFC_EDITOR_INFO_BASE_URL = "https://www.rfc-editor.org/info/"
+RFC_EDITOR_QUEUE_SITE_BASE_URL = "https://queue.rfc-editor.org"
 
 
 # NomCom Tool settings
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 34b2efeb5c..3808fb1db5 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -13,8 +13,11 @@
 from django.conf import settings
 from django.utils import timezone
 
-from ietf.doc.models import DocEvent, RelatedDocument
+from ietf.doc.models import DocEvent, DocTagName, Document, RelatedDocument, RpcAssignmentDocEvent, State
 from ietf.doc.tasks import rebuild_reference_relations_task
+from ietf.doc.utils import add_state_change_event, new_state_change_event, update_action_holders
+from ietf.person.models import Person
+from ietf.utils.mail import send_mail_text
 from ietf.sync import iana
 from ietf.sync import rfceditor
 from ietf.sync.errata import (
@@ -342,3 +345,127 @@ def refresh_rfc_index_task():
             pass
 
         mark_rfcindex_as_processed(new_processed_time)
+
+
+@shared_task
+def process_rpc_queue_task(data: list):
+    in_progress_state = State.objects.get(
+        used=True, type="draft-rfceditor", slug="in_progress"
+    )
+    blocked_state = State.objects.get(used=True, type="draft-rfceditor", slug="blocked")
+    system = Person.objects.get(name="(System)")
+    iana_ref_tags = list(DocTagName.objects.filter(slug__in=["iana", "ref"]))
+
+    names = [obj["name"] for obj in data]
+    docs_in_db = {
+        d.name: d for d in Document.objects.filter(type="draft", name__in=names)
+    }
+
+    for obj in data:
+        name = obj["name"]
+        if name not in docs_in_db:
+            log.log(f"process_rpc_queue_task: unknown document {name}")
+            continue
+
+        d = docs_in_db[name]
+        events = []
+        prev_state = d.get_state("draft-rfceditor")
+
+        # Same check as ietf.sync.rfceditor.update_drafts_from_queue:
+        # if this document just arrived at the RFC Editor for the first time, record it.
+        if (
+            d.get_state_slug("draft-iesg") == "ann"
+            and not prev_state
+            and not d.latest_event(DocEvent, type="rfc_editor_received_announcement")
+        ):
+            e = DocEvent(
+                doc=d, rev=d.rev, by=system, type="rfc_editor_received_announcement"
+            )
+            e.desc = "Announcement was received by RFC Editor"
+            e.save()
+            send_mail_text(
+                None,
+                "iesg-secretary@ietf.org",
+                None,
+                "%s in RFC Editor queue" % d.name,
+                "The announcement for %s has been received by the RFC Editor." % d.name,
+            )
+            prev_iesg_state = State.objects.get(
+                used=True, type="draft-iesg", slug="ann"
+            )
+            next_iesg_state = State.objects.get(
+                used=True, type="draft-iesg", slug="rfcqueue"
+            )
+            d.set_state(next_iesg_state)
+            e = add_state_change_event(d, system, prev_iesg_state, next_iesg_state)
+            if e:
+                events.append(e)
+            e = update_action_holders(d, prev_iesg_state, next_iesg_state)
+            if e:
+                events.append(e)
+
+        is_blocked = any(a["role"] == "blocked" for a in obj.get("assignment_set", []))
+        next_state = blocked_state if is_blocked else in_progress_state
+
+        if prev_state != next_state:
+            d.set_state(next_state)
+            e = new_state_change_event(d, system, prev_state, next_state)
+            if e:
+                e.save()
+                events.append(e)
+
+        roles = sorted(a["role"] for a in obj.get("assignment_set", []))
+        next_assignments = ", ".join(roles)
+        blocking_names = sorted(
+            br["reason"]["name"] for br in obj.get("blocking_reasons", [])
+        )
+        if blocking_names:
+            next_assignments += ": " + ", ".join(blocking_names)
+
+        if next_assignments == "":
+            next_assignments = "Awaiting Editor Assignment"
+
+        prev_assignments_event = d.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        prev_assignments = (
+            prev_assignments_event.assignments if prev_assignments_event else None
+        )
+
+        if next_assignments != prev_assignments:
+            e = RpcAssignmentDocEvent(
+                doc=d,
+                rev=d.rev,
+                by=system,
+                type="changed_rpc_assignments",
+                assignments=next_assignments,
+            )
+            e.desc = f"RPC status changed to {next_assignments}"
+            if prev_assignments is not None and prev_assignments != "":
+                e.desc += f" from {prev_assignments}"
+            e.save()
+            events.append(e)
+
+        rfc_number = obj.get("rfc_number")
+        if obj.get("final_approval") and rfc_number:
+            d.documenturl_set.update_or_create(
+                tag_id="auth48",
+                defaults=dict(
+                    url=f"{settings.RFC_EDITOR_QUEUE_SITE_BASE_URL}/final-review/rfc{rfc_number}/"
+                ),
+            )
+        else:
+            d.documenturl_set.filter(tag_id="auth48").delete()
+
+        d.tags.remove(*iana_ref_tags)
+
+        if events:
+            d.save_with_history(events)
+
+    for d in (
+        Document.objects.exclude(name__in=names)
+        .filter(states__type="draft-rfceditor")
+        .distinct()
+    ):
+        d.tags.remove(*iana_ref_tags)
+        d.unset_state("draft-rfceditor")
diff --git a/ietf/sync/tests_tasks.py b/ietf/sync/tests_tasks.py
new file mode 100644
index 0000000000..6657dd617a
--- /dev/null
+++ b/ietf/sync/tests_tasks.py
@@ -0,0 +1,476 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+from django.test.utils import override_settings
+
+from ietf.doc.factories import WgDraftFactory
+from ietf.doc.models import (
+    DocEvent,
+    DocTagName,
+    Document,
+    DocumentURL,
+    RpcAssignmentDocEvent,
+    State,
+)
+from ietf.person.models import Person
+from ietf.sync import tasks
+from ietf.utils.mail import outbox
+from ietf.utils.test_utils import TestCase
+
+
+def _make_entry(
+    doc_name, roles=None, blocking_reasons=None, rfc_number=None, final_approval=None
+):
+    return {
+        "name": doc_name,
+        "assignment_set": [{"role": r, "state": "in_progress"} for r in (roles or [])],
+        "blocking_reasons": blocking_reasons or [],
+        "rfc_number": rfc_number,
+        "final_approval": final_approval or [],
+    }
+
+
+class ProcessRpcQueueTaskTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        self.system = Person.objects.get(name="(System)")
+
+    # --- Unknown document --------------------------------------------------------
+
+    def test_unknown_document_is_skipped(self):
+        """Entries with unknown doc names are logged and skipped without raising."""
+        tasks.process_rpc_queue_task([_make_entry("draft-does-not-exist")])
+        self.assertFalse(Document.objects.filter(name="draft-does-not-exist").exists())
+
+    # --- First-arrival announcement ----------------------------------------------
+
+    def test_first_arrival_fires_announcement(self):
+        """Fires rfc_editor_received_announcement and email on first arrival."""
+        draft = WgDraftFactory(states=[("draft-iesg", "ann")])
+        mailbox_before = len(outbox)
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertEqual(draft.get_state_slug("draft-iesg"), "rfcqueue")
+        self.assertTrue(
+            draft.docevent_set.filter(type="rfc_editor_received_announcement").exists()
+        )
+        self.assertEqual(len(outbox), mailbox_before + 1)
+        self.assertIn("RFC Editor queue", outbox[-1]["Subject"])
+        self.assertIn("iesg-secretary@ietf.org", outbox[-1]["To"])
+
+    def test_first_arrival_skipped_if_rfceditor_state_exists(self):
+        """No announcement when doc already has a draft-rfceditor state."""
+        draft = WgDraftFactory(states=[("draft-iesg", "ann")])
+        draft.set_state(
+            State.objects.get(used=True, type="draft-rfceditor", slug="in_progress")
+        )
+        mailbox_before = len(outbox)
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertFalse(
+            draft.docevent_set.filter(type="rfc_editor_received_announcement").exists()
+        )
+        self.assertEqual(len(outbox), mailbox_before)
+
+    def test_first_arrival_skipped_if_announcement_event_exists(self):
+        """No duplicate announcement when rfc_editor_received_announcement already exists."""
+        draft = WgDraftFactory(states=[("draft-iesg", "ann")])
+        DocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="rfc_editor_received_announcement",
+            desc="Announcement was received by RFC Editor",
+        )
+        mailbox_before = len(outbox)
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name)])
+
+        self.assertEqual(
+            draft.docevent_set.filter(type="rfc_editor_received_announcement").count(),
+            1,
+        )
+        self.assertEqual(len(outbox), mailbox_before)
+
+    def test_first_arrival_skipped_if_not_ann_iesg_state(self):
+        """No announcement when IESG state is not 'ann'."""
+        draft = WgDraftFactory(states=[("draft-iesg", "rfcqueue")])
+        mailbox_before = len(outbox)
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertFalse(
+            draft.docevent_set.filter(type="rfc_editor_received_announcement").exists()
+        )
+        self.assertEqual(len(outbox), mailbox_before)
+
+    # --- draft-rfceditor state transitions ---------------------------------------
+
+    def test_sets_in_progress_state(self):
+        """Non-blocked assignment results in in_progress draft-rfceditor state."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertEqual(draft.get_state_slug("draft-rfceditor"), "in_progress")
+
+    def test_sets_blocked_state(self):
+        """Assignment with role='blocked' results in blocked draft-rfceditor state."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [{"role": "blocked", "state": "in_progress"}],
+                    "blocking_reasons": [],
+                    "rfc_number": None,
+                    "final_approval": [],
+                }
+            ]
+        )
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertEqual(draft.get_state_slug("draft-rfceditor"), "blocked")
+
+    def test_no_state_change_event_when_state_unchanged(self):
+        """No state-change DocEvent created when draft-rfceditor state is already correct."""
+        draft = WgDraftFactory(states=[("draft-rfceditor", "in_progress")])
+        events_before = draft.docevent_set.filter(type="changed_state").count()
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertEqual(
+            draft.docevent_set.filter(type="changed_state").count(), events_before
+        )
+
+    def test_state_change_event_created_on_transition(self):
+        """State-change DocEvent is created when draft-rfceditor state changes."""
+        draft = WgDraftFactory(states=[("draft-rfceditor", "in_progress")])
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [{"role": "blocked", "state": "in_progress"}],
+                    "blocking_reasons": [],
+                    "rfc_number": None,
+                    "final_approval": [],
+                }
+            ]
+        )
+
+        self.assertTrue(draft.docevent_set.filter(type="changed_state").exists())
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertEqual(draft.get_state_slug("draft-rfceditor"), "blocked")
+
+    # --- RpcAssignmentDocEvent ---------------------------------------------------
+
+    def test_creates_assignment_event_on_first_update(self):
+        """Creates RpcAssignmentDocEvent when no prior event exists."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [_make_entry(draft.name, roles=["first_editor", "second_editor"])]
+        )
+
+        event = draft.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        self.assertIsNotNone(event)
+        self.assertEqual(event.assignments, "first_editor, second_editor")
+
+    def test_no_assignment_event_when_unchanged(self):
+        """No new RpcAssignmentDocEvent when assignments match the last recorded ones."""
+        draft = WgDraftFactory()
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="first_editor",
+            desc="RPC status changed to first_editor",
+        )
+        events_before = RpcAssignmentDocEvent.objects.filter(doc=draft).count()
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertEqual(
+            RpcAssignmentDocEvent.objects.filter(doc=draft).count(), events_before
+        )
+
+    def test_assignment_desc_includes_previous_assignments(self):
+        """Assignment event desc includes previous assignments when they exist."""
+        draft = WgDraftFactory()
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="first_editor",
+            desc="RPC status changed to first_editor",
+        )
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["second_editor"])])
+
+        event = draft.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        self.assertIn("from first_editor", event.desc)
+
+    def test_blocking_reasons_appended_to_assignments(self):
+        """Blocking reason names are appended after ':' in the assignment string, sorted."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [{"role": "blocked", "state": "in_progress"}],
+                    "blocking_reasons": [
+                        {"reason": {"name": "missing reference"}},
+                    ],
+                    "rfc_number": None,
+                    "final_approval": [],
+                }
+            ]
+        )
+
+        event = draft.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        self.assertIsNotNone(event)
+        self.assertEqual(event.assignments, "blocked: missing reference")
+
+    def test_roles_sorted_in_assignment_string(self):
+        """Roles are sorted alphabetically in the assignment string."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [_make_entry(draft.name, roles=["second_editor", "first_editor"])]
+        )
+
+        event = draft.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        self.assertEqual(event.assignments, "first_editor, second_editor")
+
+    def test_empty_roles_uses_awaiting_editor_assignment(self):
+        """Empty assignment_set records 'Awaiting Editor Assignment' rather than an empty string."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name)])
+
+        event = draft.latest_event(
+            RpcAssignmentDocEvent, type="changed_rpc_assignments"
+        )
+        self.assertIsNotNone(event)
+        self.assertEqual(event.assignments, "Awaiting Editor Assignment")
+
+    # --- DocumentURL (auth48) handling -------------------------------------------
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_created_on_final_approval(self):
+        """auth48 DocumentURL is created when final_approval is truthy and rfc_number is set."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [
+                        {"role": "first_editor", "state": "in_progress"}
+                    ],
+                    "blocking_reasons": [],
+                    "rfc_number": 9999,
+                    "final_approval": [{"approved": True}],
+                }
+            ]
+        )
+
+        url_obj = draft.documenturl_set.filter(tag_id="auth48").first()
+        self.assertIsNotNone(url_obj)
+        self.assertEqual(url_obj.url, "https://queue.example.com/final-review/rfc9999/")
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_not_created_without_rfc_number(self):
+        """No auth48 URL created when rfc_number is None even if final_approval is set."""
+        draft = WgDraftFactory()
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [
+                        {"role": "first_editor", "state": "in_progress"}
+                    ],
+                    "blocking_reasons": [],
+                    "rfc_number": None,
+                    "final_approval": [{"approved": True}],
+                }
+            ]
+        )
+
+        self.assertFalse(draft.documenturl_set.filter(tag_id="auth48").exists())
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_deleted_when_final_approval_cleared(self):
+        """Existing auth48 URL is deleted whenever final_approval is empty, regardless of whether assignments changed."""
+        draft = WgDraftFactory()
+        DocumentURL.objects.create(
+            doc=draft,
+            tag_id="auth48",
+            url="https://queue.example.com/final-review/rfc9999/",
+        )
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="old_editor",
+            desc="RPC status changed to old_editor",
+        )
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertFalse(draft.documenturl_set.filter(tag_id="auth48").exists())
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_updated_when_rfc_number_changes(self):
+        """auth48 URL is updated whenever final_approval and rfc_number are set, regardless of whether assignments changed."""
+        draft = WgDraftFactory()
+        DocumentURL.objects.create(
+            doc=draft,
+            tag_id="auth48",
+            url="https://queue.example.com/final-review/rfc8888/",
+        )
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="old_editor",
+            desc="RPC status changed to old_editor",
+        )
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [
+                        {"role": "first_editor", "state": "in_progress"}
+                    ],
+                    "blocking_reasons": [],
+                    "rfc_number": 9999,
+                    "final_approval": [{"approved": True}],
+                }
+            ]
+        )
+
+        url_obj = draft.documenturl_set.filter(tag_id="auth48").first()
+        self.assertIsNotNone(url_obj)
+        self.assertEqual(url_obj.url, "https://queue.example.com/final-review/rfc9999/")
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_created_when_assignments_unchanged(self):
+        """auth48 URL is created even when assignments have not changed."""
+        draft = WgDraftFactory()
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="first_editor",
+            desc="RPC status changed to first_editor",
+        )
+
+        tasks.process_rpc_queue_task(
+            [
+                {
+                    "name": draft.name,
+                    "assignment_set": [
+                        {"role": "first_editor", "state": "in_progress"}
+                    ],
+                    "blocking_reasons": [],
+                    "rfc_number": 9999,
+                    "final_approval": [{"approved": True}],
+                }
+            ]
+        )
+
+        url_obj = draft.documenturl_set.filter(tag_id="auth48").first()
+        self.assertIsNotNone(url_obj)
+        self.assertEqual(url_obj.url, "https://queue.example.com/final-review/rfc9999/")
+
+    @override_settings(RFC_EDITOR_QUEUE_SITE_BASE_URL="https://queue.example.com")
+    def test_auth48_url_deleted_when_assignments_unchanged(self):
+        """Existing auth48 URL is deleted even when assignments have not changed."""
+        draft = WgDraftFactory()
+        DocumentURL.objects.create(
+            doc=draft,
+            tag_id="auth48",
+            url="https://queue.example.com/final-review/rfc9999/",
+        )
+        RpcAssignmentDocEvent.objects.create(
+            doc=draft,
+            rev=draft.rev,
+            by=self.system,
+            type="changed_rpc_assignments",
+            assignments="first_editor",
+            desc="RPC status changed to first_editor",
+        )
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        self.assertFalse(draft.documenturl_set.filter(tag_id="auth48").exists())
+
+    # --- Tag handling ------------------------------------------------------------
+
+    def test_removes_iana_and_ref_tags_from_queued_docs(self):
+        """iana and ref tags are removed from documents in the queue."""
+        iana_tag = DocTagName.objects.get(slug="iana")
+        ref_tag = DocTagName.objects.get(slug="ref")
+        draft = WgDraftFactory()
+        draft.tags.add(iana_tag, ref_tag)
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name)])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertNotIn(iana_tag, draft.tags.all())
+        self.assertNotIn(ref_tag, draft.tags.all())
+
+    # --- Cleanup of docs no longer in queue --------------------------------------
+
+    def test_unsets_rfceditor_state_for_docs_not_in_queue(self):
+        """Documents with draft-rfceditor state but absent from the queue have that state cleared."""
+        draft = WgDraftFactory(states=[("draft-rfceditor", "in_progress")])
+
+        tasks.process_rpc_queue_task([])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertIsNone(draft.get_state("draft-rfceditor"))
+
+    def test_removes_tags_from_docs_not_in_queue(self):
+        """iana and ref tags are removed from docs with rfceditor state not in the queue."""
+        iana_tag = DocTagName.objects.get(slug="iana")
+        ref_tag = DocTagName.objects.get(slug="ref")
+        draft = WgDraftFactory(states=[("draft-rfceditor", "in_progress")])
+        draft.tags.add(iana_tag, ref_tag)
+
+        tasks.process_rpc_queue_task([])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertNotIn(iana_tag, draft.tags.all())
+        self.assertNotIn(ref_tag, draft.tags.all())
+
+    def test_docs_in_queue_retain_rfceditor_state(self):
+        """Documents present in the queue keep their draft-rfceditor state."""
+        draft = WgDraftFactory(states=[("draft-rfceditor", "in_progress")])
+
+        tasks.process_rpc_queue_task([_make_entry(draft.name, roles=["first_editor"])])
+
+        draft = Document.objects.get(pk=draft.pk)
+        self.assertIsNotNone(draft.get_state("draft-rfceditor"))

From 4165235a1609eb58fcdc7a20a1d710bad098ef0a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 15 May 2026 13:21:54 -0300
Subject: [PATCH 673/707] chore: strip whitespace in test (#10874)

---
 ietf/sync/tests_rfcindex.py | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index 74fa9e7616..2b70924db3 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -1,5 +1,6 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 import json
+import re
 from pathlib import Path
 from unittest import mock
 
@@ -131,17 +132,20 @@ def test_create_rfc_txt_index(self, mock_save_blob, mock_save_file):
             "0123 Not Issued.",
             contents,
         )
+
+        # strip whitespace so line breaks don't interfere with the next few tests
+        stripped_contents = re.sub(r"\s+", " ", mock_save_blob.call_args[0][1])
         self.assertIn(
             f"{self.april_fools_rfc.rfc_number} {self.april_fools_rfc.title}",
-            contents,
+            stripped_contents,
         )
         self.assertIn("1 April 2020", contents)  # from the April 1 RFC
         self.assertIn(
             f"{self.rfc.rfc_number} {self.rfc.title}",
-            contents,
+            stripped_contents,
         )
-        self.assertIn("April 2021", contents)  # from the non-April 1 RFC
-        self.assertNotIn("1 April 2021", contents)
+        self.assertIn("April 2021", stripped_contents)  # from the non-April 1 RFC
+        self.assertNotIn("1 April 2021", stripped_contents)
 
     @override_settings(RFCINDEX_INPUT_PATH="input/")
     @mock.patch("ietf.sync.rfcindex.save_to_filesystem")

From e37a2c97c22636c0d69330c49693bb1071b7b922 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Fri, 15 May 2026 11:22:28 -0500
Subject: [PATCH 674/707] fix: stop linking to pdfized txt at the rfc editor
 site (#10873)

* fix: stop linking to pdfized txt at the rfc editor site

* test: adjust tests to match
---
 ietf/doc/feeds.py | 8 --------
 ietf/doc/tests.py | 4 ++--
 ietf/doc/utils.py | 3 ---
 3 files changed, 2 insertions(+), 13 deletions(-)

diff --git a/ietf/doc/feeds.py b/ietf/doc/feeds.py
index 0269906fcf..7472b14c18 100644
--- a/ietf/doc/feeds.py
+++ b/ietf/doc/feeds.py
@@ -234,14 +234,6 @@ def item_extra_kwargs(self, item):
                             "is_format_of": self.item_link(item),
                         }
                     )
-            if item.rfc_number not in [571, 587]:
-                media_contents.append(
-                    {
-                        "url": f"https://www.rfc-editor.org/rfc/pdfrfc/{item.name}.txt.pdf",
-                        "media_type": "application/pdf",
-                        "is_format_of": self.item_link(item),
-                    }
-                )
         else:
             media_contents.append(
                 {
diff --git a/ietf/doc/tests.py b/ietf/doc/tests.py
index b001e01e80..ff4461d466 100644
--- a/ietf/doc/tests.py
+++ b/ietf/doc/tests.py
@@ -2093,9 +2093,9 @@ def test_rfc_feed(self):
         self.assertEqual(len(q("item")), 3)
         item = q("item")[0]
         media_content = item.findall("{http://search.yahoo.com/mrss/}content")
-        self.assertEqual(len(media_content), 3)
+        self.assertEqual(len(media_content), 2)
         types = set([m.attrib["type"] for m in media_content])
-        self.assertEqual(types, set(["text/plain", "text/html", "application/pdf"]))
+        self.assertEqual(types, set(["text/plain", "text/html"]))
 
     def test_state_help(self):
         url = urlreverse('ietf.doc.views_help.state_help', kwargs=dict(type="draft-iesg"))
diff --git a/ietf/doc/utils.py b/ietf/doc/utils.py
index 6f32ed454f..5f8f587c59 100644
--- a/ietf/doc/utils.py
+++ b/ietf/doc/utils.py
@@ -1274,9 +1274,6 @@ def build_file_urls(doc: Union[Document, DocHistory]):
             label = "plain text" if t == "txt" else t
             file_urls.append((label, base + doc.name + "." + t))
 
-        if "pdf" not in found_types and "txt" in found_types:
-            file_urls.append(("pdf", base + "pdfrfc/" + doc.name + ".txt.pdf"))
-
         if "txt" in found_types:
             file_urls.append(("htmlized", urlreverse('ietf.doc.views_doc.document_html', kwargs=dict(name=doc.name))))
             if doc.tags.filter(slug="verified-errata").exists():

From c5ce32847add41737ca3920f3ae6323f7a8af6d3 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 20 May 2026 12:35:49 -0300
Subject: [PATCH 675/707] ci: numeric settings -> int for searchindex cfg
 (#10904)

---
 k8s/settings_local.py | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 19d0a1c2f5..41d6d99745 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -496,9 +496,11 @@ def _multiline_to_list(s):
 SEARCHINDEX_CONFIG = {
     "TYPESENSE_API_URL": os.environ.get("DATATRACKER_TYPESENSE_API_URL", ""),
     "TYPESENSE_API_KEY": os.environ.get("DATATRACKER_TYPESENSE_API_KEY", ""),
-    "TASK_RETRY_DELAY": os.environ.get("DATATRACKER_SEARCHINDEX_TASK_RETRY_DELAY", 10),
-    "TASK_MAX_RETRIES": os.environ.get(
-        "DATATRACKER_SEARCHINDEX_TASK_MAX_RETRIES", "12"
+    "TASK_RETRY_DELAY": int(
+        os.environ.get("DATATRACKER_SEARCHINDEX_TASK_RETRY_DELAY", "10")
+    ),
+    "TASK_MAX_RETRIES": int(
+        os.environ.get("DATATRACKER_SEARCHINDEX_TASK_MAX_RETRIES", "12")
     ),
 }
 

From c6b49e78401dd6605a575a197d28ebb71c76b2e4 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 21 May 2026 11:15:08 -0500
Subject: [PATCH 676/707] fix: remove no longer needed notification to the
 rfc-editor (#10911)

---
 ietf/doc/tests_ballot.py                      |  8 +--
 ietf/doc/tests_draft.py                       |  8 +--
 ietf/doc/views_ballot.py                      | 10 ----
 ietf/doc/views_draft.py                       |  9 ----
 ietf/settings.py                              |  3 --
 ietf/sync/rfceditor.py                        | 51 -------------------
 ietf/sync/tests.py                            | 24 ---------
 .../rfceditor_post_approved_draft_failed.html | 26 ----------
 k8s/secrets.yaml                              |  3 +-
 k8s/settings_local.py                         |  6 ---
 10 files changed, 5 insertions(+), 143 deletions(-)
 delete mode 100644 ietf/templates/doc/draft/rfceditor_post_approved_draft_failed.html

diff --git a/ietf/doc/tests_ballot.py b/ietf/doc/tests_ballot.py
index 8420e411e2..517a2ce056 100644
--- a/ietf/doc/tests_ballot.py
+++ b/ietf/doc/tests_ballot.py
@@ -3,7 +3,6 @@
 
 
 import datetime
-from unittest import mock
 
 from pyquery import PyQuery
 
@@ -716,11 +715,8 @@ def verify_can_see(username, url):
             verify_can_see(username, url)
 
 class ApproveBallotTests(TestCase):
-    @mock.patch('ietf.sync.rfceditor.requests.post', autospec=True)
-    def test_approve_ballot(self, mock_urlopen):
-        mock_urlopen.return_value.text = b'OK'
-        mock_urlopen.return_value.status_code = 200
-        #
+    def test_approve_ballot(self):
+
         ad = Person.objects.get(name="Areað Irector")
         draft = IndividualDraftFactory(ad=ad, intended_std_level_id='ps')
         draft.set_state(State.objects.get(used=True, type="draft-iesg", slug="iesg-eva")) # make sure it's approvable
diff --git a/ietf/doc/tests_draft.py b/ietf/doc/tests_draft.py
index 21a873c5c0..db9dbc2baf 100644
--- a/ietf/doc/tests_draft.py
+++ b/ietf/doc/tests_draft.py
@@ -6,7 +6,6 @@
 import os
 import datetime
 import io
-from unittest import mock
 
 from collections import Counter
 from pathlib import Path
@@ -1549,11 +1548,8 @@ def test_confirm_submission_no_doc_ad(self):
 
 
 class RequestPublicationTests(TestCase):
-    @mock.patch('ietf.sync.rfceditor.requests.post', autospec=True)
-    def test_request_publication(self, mockobj):
-        mockobj.return_value.text = b'OK'
-        mockobj.return_value.status_code = 200
-        #
+    def test_request_publication(self):
+
         draft = IndividualDraftFactory(stream_id='iab',group__acronym='iab',intended_std_level_id='inf',states=[('draft-stream-iab','approved')])
 
         url = urlreverse('ietf.doc.views_draft.request_publication', kwargs=dict(name=draft.name))
diff --git a/ietf/doc/views_ballot.py b/ietf/doc/views_ballot.py
index 03cf01a4a1..29aadfdb9b 100644
--- a/ietf/doc/views_ballot.py
+++ b/ietf/doc/views_ballot.py
@@ -939,16 +939,6 @@ def approve_ballot(request, name):
         if ballot_writeup_event.pk == None:
             ballot_writeup_event.save()
 
-        if new_state.slug == "ann" and new_state.slug != prev_state.slug:
-            # start by notifying the RFC Editor
-            import ietf.sync.rfceditor
-            response, error = ietf.sync.rfceditor.post_approved_draft(settings.RFC_EDITOR_SYNC_NOTIFICATION_URL, doc.name)
-            if error:
-                return render(request, 'doc/draft/rfceditor_post_approved_draft_failed.html',
-                              dict(name=doc.name,
-                                   response=response,
-                                   error=error))
-
         doc.set_state(new_state)
         doc.tags.remove(*prev_tags)
         
diff --git a/ietf/doc/views_draft.py b/ietf/doc/views_draft.py
index c5faf1140b..0f5ea49f5d 100644
--- a/ietf/doc/views_draft.py
+++ b/ietf/doc/views_draft.py
@@ -1276,15 +1276,6 @@ class PublicationForm(forms.Form):
         if form.is_valid():
             events = []
 
-            # start by notifying the RFC Editor
-            import ietf.sync.rfceditor
-            response, error = ietf.sync.rfceditor.post_approved_draft(settings.RFC_EDITOR_SYNC_NOTIFICATION_URL, doc.name)
-            if error:
-                return render(request, 'doc/draft/rfceditor_post_approved_draft_failed.html',
-                                  dict(name=doc.name,
-                                       response=response,
-                                       error=error))
-
             m.subject = form.cleaned_data["subject"]
             m.body = form.cleaned_data["body"]
             m.save()
diff --git a/ietf/settings.py b/ietf/settings.py
index aac0eabc90..95f2ffefd7 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -893,10 +893,7 @@ def skip_unreadable_post(record):
 IANA_SYNC_CHANGES_URL = "https://datatracker.iana.org:4443/data-tracker/changes"
 IANA_SYNC_PROTOCOLS_URL = "https://www.iana.org/protocols/"
 
-RFC_EDITOR_SYNC_PASSWORD="secret"
-RFC_EDITOR_SYNC_NOTIFICATION_URL = "https://www.rfc-editor.org/parser/parser.php"
 RFC_EDITOR_GROUP_NOTIFICATION_EMAIL = "webmaster@rfc-editor.org"
-#RFC_EDITOR_GROUP_NOTIFICATION_URL = "https://www.rfc-editor.org/notification/group.php"
 RFC_EDITOR_QUEUE_URL = "https://www.rfc-editor.org/queue2.xml"
 RFC_EDITOR_INDEX_URL = "https://www.rfc-editor.org/rfc/rfc-index.xml"
 RFC_EDITOR_ERRATA_JSON_URL = "https://www.rfc-editor.org/errata.json"
diff --git a/ietf/sync/rfceditor.py b/ietf/sync/rfceditor.py
index aa0e643b20..347b58efbb 100644
--- a/ietf/sync/rfceditor.py
+++ b/ietf/sync/rfceditor.py
@@ -2,20 +2,15 @@
 # -*- coding: utf-8 -*-
 
 
-import base64
 import datetime
 import re
-import requests
 
 from typing import Iterator, Optional, Union
-from urllib.parse import urlencode
 from xml.dom import pulldom, Node
 
-from django.conf import settings
 from django.db import transaction
 from django.db.models import Subquery, OuterRef, F, Q
 from django.utils import timezone
-from django.utils.encoding import smart_bytes, force_str
 
 import debug                            # pyflakes:ignore
 
@@ -847,50 +842,4 @@ def parse_relation_list(rel_list: list[str]) -> list[Document]:
         ).update(document=F("subseries_target"))
 
 
-def post_approved_draft(url, name):
-    """Post an approved draft to the RFC Editor so they can retrieve
-    the data from the Datatracker and start processing it. Returns
-    response and error (empty string if no error)."""
-
-    if settings.SERVER_MODE != "production":
-        log(f"In production, would have posted RFC-Editor notification of approved I-D '{name}' to '{url}'")
-        return "", ""
-
-    # HTTP basic auth
-    username = "dtracksync"
-    password = settings.RFC_EDITOR_SYNC_PASSWORD
-    headers = {
-            "Content-type": "application/x-www-form-urlencoded",
-            "Accept": "text/plain",
-            "Authorization": "Basic %s" % force_str(base64.encodebytes(smart_bytes("%s:%s" % (username, password)))).replace("\n", ""),
-        }
-
-    log("Posting RFC-Editor notification of approved Internet-Draft '%s' to '%s'" % (name, url))
-    text = error = ""
-
-    try:
-        r = requests.post(
-            url,
-            headers=headers,
-            data=smart_bytes(urlencode({ 'draft': name })),
-            timeout=settings.DEFAULT_REQUESTS_TIMEOUT,
-        )
-
-        log("RFC-Editor notification result for Internet-Draft '%s': %s:'%s'" % (name, r.status_code, r.text))
-
-        if r.status_code != 200:
-            raise RuntimeError("Status code is not 200 OK (it's %s)." % r.status_code)
-
-        if force_str(r.text) != "OK":
-            raise RuntimeError('Response is not "OK" (it\'s "%s").' % r.text)
-
-    except Exception as e:
-        # catch everything so we don't leak exceptions, convert them
-        # into string instead
-        msg = "Exception on RFC-Editor notification for Internet-Draft '%s': %s: %s" % (name, type(e), str(e))
-        log(msg)
-        if settings.SERVER_MODE == 'test':
-            debug.say(msg)
-        error = str(e)
 
-    return text, error
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index e83b6a5e0a..207c78cf6a 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -795,30 +795,6 @@ def test_update_draft_auth48_url(self):
         auth48_docurl = draft.documenturl_set.filter(tag_id='auth48').first()
         self.assertIsNone(auth48_docurl)
 
-    def test_post_approved_draft_in_production_only(self):
-        self.requests_mock.post("https://rfceditor.example.com/", status_code=200, text="OK")
-
-        # be careful playing with SERVER_MODE!
-        with override_settings(SERVER_MODE="test"):
-            self.assertEqual(
-                rfceditor.post_approved_draft("https://rfceditor.example.com/", "some-draft"),
-                ("", "")
-            )
-            self.assertFalse(self.requests_mock.called)
-        with override_settings(SERVER_MODE="development"):
-            self.assertEqual(
-                rfceditor.post_approved_draft("https://rfceditor.example.com/", "some-draft"),
-                ("", "")
-            )
-            self.assertFalse(self.requests_mock.called)
-        with override_settings(SERVER_MODE="production"):
-            self.assertEqual(
-                rfceditor.post_approved_draft("https://rfceditor.example.com/", "some-draft"),
-                ("", "")
-            )
-            self.assertTrue(self.requests_mock.called)
-
-
 class DiscrepanciesTests(TestCase):
     def test_discrepancies(self):
 
diff --git a/ietf/templates/doc/draft/rfceditor_post_approved_draft_failed.html b/ietf/templates/doc/draft/rfceditor_post_approved_draft_failed.html
deleted file mode 100644
index f976ead926..0000000000
--- a/ietf/templates/doc/draft/rfceditor_post_approved_draft_failed.html
+++ /dev/null
@@ -1,26 +0,0 @@
-{% extends "base.html" %}
-{# Copyright The IETF Trust 2015, All Rights Reserved #}
-{% load origin %}
-{% block title %}Posting approved I-D to RFC Editor failed{% endblock %}
-{% block content %}
-    {% origin %}
-    <h1>Posting approved I-D to RFC Editor failed</h1>
-    <p>
-        Sorry, when trying to notify the RFC Editor through HTTP, we hit an
-        error.
-    </p>
-    <p>
-        We have not changed the Internet-Draft state or sent the announcement
-        yet so if this is an intermittent error, you can go back and try
-        again.
-    </p>
-    <p>
-        The error was: <code>{{ error }}</code>
-    </p>
-    {% if response %}
-        <p>
-            The response from the RFC Editor was:
-            <code>{{ response|linebreaksbr }}</code>
-        </p>
-    {% endif %}
-{% endblock %}
\ No newline at end of file
diff --git a/k8s/secrets.yaml b/k8s/secrets.yaml
index ba90af9c2a..4d32652146 100644
--- a/k8s/secrets.yaml
+++ b/k8s/secrets.yaml
@@ -39,7 +39,6 @@ stringData:
   DATATRACKER_NOMCOM_APP_SECRET_B64: "m9pzMezVoFNJfsvU9XSZxGnXnwup6P5ZgCQeEnROOoQ="  # secret
 
   DATATRACKER_IANA_SYNC_PASSWORD: "this-is-the-iana-sync-password"  # secret
-  DATATRACKER_RFC_EDITOR_SYNC_PASSWORD: "this-is-the-rfc-editor-sync-password"  # secret
   DATATRACKER_YOUTUBE_API_KEY: "this-is-the-youtube-api-key"  # secret
   DATATRACKER_GITHUB_BACKUP_API_KEY: "this-is-the-github-backup-api-key"  # secret
 
@@ -80,4 +79,4 @@ stringData:
 
   # Scout configuration
   DATATRACKER_SCOUT_KEY: "this-is-the-scout-key"
-  DATATRACKER_SCOUT_NAME: "StagingDatatracker"
\ No newline at end of file
+  DATATRACKER_SCOUT_NAME: "StagingDatatracker"
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 41d6d99745..402f89787b 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -44,12 +44,6 @@ def _multiline_to_list(s):
 else:
     raise RuntimeError("DATATRACKER_IANA_SYNC_PASSWORD must be set")
 
-_RFC_EDITOR_SYNC_PASSWORD = os.environ.get("DATATRACKER_RFC_EDITOR_SYNC_PASSWORD", None)
-if _RFC_EDITOR_SYNC_PASSWORD is not None:
-    RFC_EDITOR_SYNC_PASSWORD = os.environ.get("DATATRACKER_RFC_EDITOR_SYNC_PASSWORD")
-else:
-    raise RuntimeError("DATATRACKER_RFC_EDITOR_SYNC_PASSWORD must be set")
-
 _YOUTUBE_API_KEY = os.environ.get("DATATRACKER_YOUTUBE_API_KEY", None)
 if _YOUTUBE_API_KEY is not None:
     YOUTUBE_API_KEY = _YOUTUBE_API_KEY

From 35b4048097ff21ecac84656e1adf382100bf56df Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 May 2026 13:17:21 -0300
Subject: [PATCH 677/707] fix: meeting_stats -> 404 for nonexistent meeting
 (#10896)

* fix: meeting_stats->404 for nonexistent number

* test: add test case

* chore: fix lint

* test: fix new test
---
 ietf/stats/tests.py | 31 +++++++++++++++++++++++++++----
 ietf/stats/views.py | 18 +++++++++---------
 2 files changed, 36 insertions(+), 13 deletions(-)

diff --git a/ietf/stats/tests.py b/ietf/stats/tests.py
index 373f06e343..dc5b5d6ae8 100644
--- a/ietf/stats/tests.py
+++ b/ietf/stats/tests.py
@@ -1,18 +1,19 @@
-# Copyright The IETF Trust 2016-2020, All Rights Reserved
-# -*- coding: utf-8 -*-
-
+# Copyright The IETF Trust 2016-2026, All Rights Reserved
 
 import calendar
 import json
 import datetime
 
+from django.http import Http404
 from pyquery import PyQuery
 
 import debug    # pyflakes:ignore
 
+from django.test import RequestFactory
 from django.urls import reverse as urlreverse
 from django.utils import timezone
 
+from ietf.meeting.models import Meeting
 from ietf.utils.test_utils import login_testing_unauthorized, TestCase
 import ietf.stats.views
 
@@ -87,7 +88,29 @@ def test_meeting_stats(self):
         self.assertContains(r, "/stats/meeting/124/country")
         self.assertContains(r, "/stats/meeting/125/country")
         self.assertContains(r, "This page provides a timeline of meeting registrations.")
-                
+
+    def test_meeting_stats_for_bad_meeting(self):
+        self.assertFalse(Meeting.objects.filter(number=676767).exists())
+        for stats_type in ["affiliation", "country"]:
+            r = self.client.get(
+                urlreverse(
+                    "ietf.stats.views.meeting_stats",
+                    kwargs={"meeting_number": 676767, "stats_type": stats_type},
+                )
+            )
+            self.assertEqual(r.status_code, 404)
+
+            # We don't have a URL for an interim, but make sure the view will 404 if
+            # somehow a non-interim gets selected...
+            interim_num = MeetingFactory(type_id="interim").number
+            request_factory = RequestFactory()
+            with self.assertRaises(Http404):
+                ietf.stats.views.meeting_stats(
+                    request_factory.get(f"/stats/meeting/{interim_num}/{stats_type}"),
+                    meeting_number=interim_num,
+                    stats_type=stats_type,
+                )
+
     def test_known_country_list(self):
         # check redirect
         url = urlreverse(ietf.stats.views.known_countries_list)
diff --git a/ietf/stats/views.py b/ietf/stats/views.py
index d61b673075..d61c9cab64 100644
--- a/ietf/stats/views.py
+++ b/ietf/stats/views.py
@@ -13,7 +13,7 @@
 from django.contrib.auth.decorators import login_required
 from django.core.cache import cache
 from django.http import HttpResponseRedirect
-from django.shortcuts import render
+from django.shortcuts import render, get_object_or_404
 from django.urls import reverse as urlreverse
 from django.db.models import Count
 
@@ -27,11 +27,11 @@
 from ietf.group.models import Role, Group
 from ietf.person.models import Person
 from ietf.name.models import ReviewResultName, CountryName, ReviewAssignmentStateName
-from ietf.meeting.models import Registration
+from ietf.meeting.models import Registration, Meeting
 from ietf.ietfauth.utils import has_role
 from ietf.utils.response import permission_denied
 from ietf.utils.timezone import date_today, DEADLINE_TZINFO
-from ietf.meeting.helpers import get_current_ietf_meeting_num, get_ietf_meeting
+from ietf.meeting.helpers import get_current_ietf_meeting_num
 
 # Color palette for lines
 colors = [
@@ -568,12 +568,12 @@ def meeting_stats(request, meeting_number=None, stats_type='country'):
     Returns:
         Rendered response for the meeting stats template.
     """
-
-    current_meeting = get_current_ietf_meeting_num()
+    current_meeting_number = get_current_ietf_meeting_num()
     if meeting_number is None:
-        meeting_number = current_meeting
-
-    this_meeting = get_ietf_meeting(meeting_number)
+        meeting_number = current_meeting_number
+    this_meeting = get_object_or_404(
+        Meeting.objects.filter(type_id="ietf"), number=meeting_number
+    )
 
     if stats_type == 'affiliation':
         minimum_required = 4
@@ -616,7 +616,7 @@ def meeting_stats(request, meeting_number=None, stats_type='country'):
     if int(meeting_number) > 72:  # No registration data before IETF-72
         possible_meeting_numbers.append((int(meeting_number)-1, urlreverse(meeting_stats, kwargs={'meeting_number': int(meeting_number)-1, 'stats_type': stats_type})))
     possible_meeting_numbers.append((meeting_number, urlreverse(meeting_stats, kwargs={'meeting_number': meeting_number, 'stats_type': stats_type})))
-    if int(meeting_number) <= int(current_meeting): # Allow current meeting +1
+    if int(meeting_number) <= int(current_meeting_number): # Allow current meeting +1
         possible_meeting_numbers.append((int(meeting_number)+1, urlreverse(meeting_stats, kwargs={'meeting_number': int(meeting_number)+1, 'stats_type': stats_type})))
 
     return render(request, "stats/meeting_stats.html", {

From d7ce42fd71b3ea946313cfd42fcc6b1faae52e16 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 21 May 2026 14:34:31 -0300
Subject: [PATCH 678/707] fix: set searchindex hiddenDefault flag (#10916)

* fix: set searchindex hiddenDefault flag

* chore: adjust docstring comments
---
 ietf/utils/searchindex.py       |  9 +++--
 ietf/utils/tests_searchindex.py | 63 ++++++++++++++++++++++++++++-----
 2 files changed, 61 insertions(+), 11 deletions(-)

diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index ffc139676e..a9e02ca740 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -99,7 +99,10 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
         )
     subseries = subseries[0] if len(subseries) > 0 else None
     obsoleted_by = rfc.related_that("obs")
+    is_obsoleted = len(obsoleted_by) > 0
     updated_by = rfc.related_that("updates")
+    is_updated = len(updated_by) > 0
+    is_historic = rfc.std_level.slug == "hist"
 
     stored_txt = (
         StoredObject.objects.exclude_deleted()
@@ -134,9 +137,9 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
             for rfc_author in rfc.rfcauthor_set.all()
         ],
         "flags": {
-            "hiddenDefault": False,
-            "obsoleted": len(obsoleted_by) > 0,
-            "updated": len(updated_by) > 0,
+            "hiddenDefault": is_obsoleted or is_historic,
+            "obsoleted": is_obsoleted,
+            "updated": is_updated,
         },
         "obsoletedBy": [str(doc.rfc_number) for doc in obsoleted_by],
         "updatedBy": [str(doc.rfc_number) for doc in updated_by],
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
index ffca5c18be..7eb4e8acea 100644
--- a/ietf/utils/tests_searchindex.py
+++ b/ietf/utils/tests_searchindex.py
@@ -16,7 +16,7 @@
     BcpFactory,
     StdFactory,
 )
-from ..doc.models import Document
+from ..doc.models import Document, RelatedDocument
 from ..doc.storage_utils import store_str
 from ..person.factories import PersonFactory
 
@@ -46,13 +46,6 @@ def test_sanitize_text(self):
         sanitized = "This is text It is full of problems Fix it."
         self.assertEqual(searchindex._sanitize_text(dirty_text), sanitized)
 
-    @override_settings(
-        SEARCHINDEX_CONFIG={
-            "TYPESENSE_API_URL": "http://ts.example.com",
-            "TYPESENSE_API_KEY": "test-api-key",
-            "TYPESENSE_COLLECTION_NAME": "frogs",
-        }
-    )
     def test_typesense_doc_from_rfc(self):
         not_rfc = WgDraftFactory()
         assert isinstance(not_rfc, Document)
@@ -112,6 +105,60 @@ def test_typesense_doc_from_rfc(self):
         result = searchindex.typesense_doc_from_rfc(rfc)
         self.assertNotIn("content", result)
 
+    def test_typesense_doc_from_rfc_flags_obsoleted(self):
+        """typesense docs should set correct flags for obsoleted RFC"""
+        rfc = PublishedRfcDocEventFactory().doc
+        assert isinstance(rfc, Document)
+        self.assertEqual(len(rfc.related_that("obs")), 0)
+        self.assertEqual(len(rfc.related_that("updates")), 0)
+        self.assertNotEqual(rfc.std_level.slug, "hist")
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertFalse(result["flags"]["hiddenDefault"])
+        self.assertFalse(result["flags"]["obsoleted"])
+        self.assertFalse(result["flags"]["updated"])
+
+        RelatedDocument.objects.create(
+            source=(PublishedRfcDocEventFactory().doc),
+            target=rfc,
+            relationship_id="obs",
+        )
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertTrue(result["flags"]["hiddenDefault"])
+        self.assertTrue(result["flags"]["obsoleted"])
+        self.assertFalse(result["flags"]["updated"])
+
+    def test_typesense_doc_from_rfc_flags_updated(self):
+        """typesense docs should set flags correctly for updated RFC"""
+        rfc = PublishedRfcDocEventFactory().doc
+        assert isinstance(rfc, Document)
+        self.assertEqual(len(rfc.related_that("obs")), 0)
+        self.assertEqual(len(rfc.related_that("updates")), 0)
+        self.assertNotEqual(rfc.std_level.slug, "hist")
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertFalse(result["flags"]["hiddenDefault"])
+        self.assertFalse(result["flags"]["obsoleted"])
+        self.assertFalse(result["flags"]["updated"])
+
+        RelatedDocument.objects.create(
+            source=(PublishedRfcDocEventFactory().doc),
+            target=rfc,
+            relationship_id="updates",
+        )
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertFalse(result["flags"]["hiddenDefault"])
+        self.assertFalse(result["flags"]["obsoleted"])
+        self.assertTrue(result["flags"]["updated"])
+
+    def test_typesense_doc_from_rfc_flags_historic(self):
+        """typesense docs should set flags correctly for historic RFC"""
+        rfc = PublishedRfcDocEventFactory(doc__std_level_id="hist").doc
+        assert isinstance(rfc, Document)
+        result = searchindex.typesense_doc_from_rfc(rfc)
+        self.assertTrue(result["flags"]["hiddenDefault"])
+        self.assertFalse(result["flags"]["obsoleted"])
+        self.assertFalse(result["flags"]["updated"])
+
+
     @override_settings(
         SEARCHINDEX_CONFIG={
             "TYPESENSE_API_URL": "http://ts.example.com",

From 2cc68c6eeea2fe03db8b160ee44a3251e1fb331f Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 27 May 2026 10:29:19 -0500
Subject: [PATCH 679/707] ci: pin xym until we can adapt to new required
 arguments (#10939)

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 214dfe296f..31e8ea69d1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -90,6 +90,6 @@ unidecode>=1.4.0
 urllib3>=2.5.0
 weasyprint>=66.0
 xml2rfc>=3.30.0
-xym>=0.6,<1.0
+xym>=0.6,<0.10.0
 zxcvbn>=4.5.0
 types-zxcvbn~=4.5.0.20250223  # match zxcvbn version

From ff318025b61885ce00ab9daa38fdc78f6935895e Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Wed, 27 May 2026 15:44:21 +0000
Subject: [PATCH 680/707] ci: update base image target version to 20260527T1529

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 55a308d7ce..1e44f47761 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260512T1629
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260527T1529
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 71a59ed266..0284151019 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260512T1629
+20260527T1529

From e7c939a43c34d6df0973d2e6ace9d41d82cb6b46 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 29 May 2026 16:56:12 -0300
Subject: [PATCH 681/707] fix: adjust searchindex abstract sanitiziation
 (#10950)

* fix: adjust searchindex abstract sanitiziation

* test: leading/trailing whitespace to be stripped

* fix: strip each line of the abstract
---
 ietf/utils/searchindex.py       | 21 +++++++++++++++++---
 ietf/utils/tests_searchindex.py | 35 ++++++++++++++++++++++++++++++++-
 2 files changed, 52 insertions(+), 4 deletions(-)

diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index a9e02ca740..6a8f4529a8 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -64,8 +64,11 @@ def get_collection_name() -> str:
     return collection_name
 
 
-def _sanitize_text(content):
-    """Sanitize content or abstract text for search"""
+def _sanitize_text(content: str):
+    """Sanitize content text for search
+    
+    Aggressively simplifies whitespace, removes most punctuation
+    """
     # REs (with approximate names)
     RE_DOT_OR_BANG_SPACE = r"\. |! "  # -> " " (space)
     RE_COMMENT_OR_TOC_CRUD = r"<--|-->|--+|\+|\.\.+"  # -> ""
@@ -84,6 +87,18 @@ def _sanitize_text(content):
     return content.strip()
 
 
+def _sanitize_abstract(abstract: str):
+    """Sanitize abstract text for search
+    
+    Simplifies whitespace but mostly leaves text intact. Abstract text will be
+    displayed in search results, so a light touch is needed.
+    """
+    abstract = abstract.strip()
+    abstract = re.sub("\r\n|\n\r|\r", "\n", abstract)  # normalize on \n
+    abstract = "\n".join(line.strip() for line in abstract.split("\n"))  # strip by line
+    return abstract
+
+
 def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
     assert rfc.type_id == "rfc"
     assert rfc.rfc_number is not None
@@ -123,7 +138,7 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
         "rfc": str(rfc.rfc_number),
         "filename": rfc.name,
         "title": rfc.title,
-        "abstract": _sanitize_text(rfc.abstract),
+        "abstract": _sanitize_abstract(rfc.abstract),
         "pages": rfc.pages,
         "keywords": keywords,
         "type": "rfc",
diff --git a/ietf/utils/tests_searchindex.py b/ietf/utils/tests_searchindex.py
index 7eb4e8acea..b97bc2e266 100644
--- a/ietf/utils/tests_searchindex.py
+++ b/ietf/utils/tests_searchindex.py
@@ -46,6 +46,39 @@ def test_sanitize_text(self):
         sanitized = "This is text It is full of problems Fix it."
         self.assertEqual(searchindex._sanitize_text(dirty_text), sanitized)
 
+    def test_sanitize_abstract(self):
+        dirty_abstract = (
+            "Mixed\n"
+            "Newlines\r"
+            "And\r\n"
+            "Things\n\r"
+            " Sometimes\n"
+            "\n"
+            "With\r\n"
+            "\r\n"
+            "Double  \n\r"
+            "\n\r"
+            "   Newlines\r"
+            "\r"
+            "Whee!"
+        )
+        sanitized = (
+            "Mixed\n"
+            "Newlines\n"
+            "And\n"
+            "Things\n"
+            "Sometimes\n"
+            "\n"
+            "With\n"
+            "\n"
+            "Double\n"
+            "\n"
+            "Newlines\n"
+            "\n"
+            "Whee!"
+        )
+        self.assertEqual(searchindex._sanitize_abstract(dirty_abstract), sanitized)
+
     def test_typesense_doc_from_rfc(self):
         not_rfc = WgDraftFactory()
         assert isinstance(not_rfc, Document)
@@ -63,7 +96,7 @@ def test_typesense_doc_from_rfc(self):
         # Check a few values, not exhaustive
         self.assertEqual(result["id"], f"doc-{rfc.pk}")
         self.assertEqual(result["rfcNumber"], rfc.rfc_number)
-        self.assertEqual(result["abstract"], searchindex._sanitize_text(rfc.abstract))
+        self.assertEqual(result["abstract"], searchindex._sanitize_abstract(rfc.abstract))
         self.assertEqual(result["pages"], rfc.pages)
         self.assertNotIn("adName", result)
         self.assertNotIn("content", result)  # no blob

From 2ffbfcd08be29774ee9f496d39603e60a93074b3 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 1 Jun 2026 16:00:01 -0500
Subject: [PATCH 682/707] chore: add items to tracked yarn cache (#10964)

---
 ...-color-npm-0.3.1-174f3d038c-e6be5c081b.zip | Bin 0 -> 29022 bytes
 ...-color-npm-0.3.4-fbd637031f-b95c6abe02.zip | Bin 0 -> 29456 bytes
 ...merjs-npm-2.0.46-de99d4d9d1-caba6ec788.zip | Bin 0 -> 4582 bytes
 ...art.js-npm-4.5.1-97698d58cc-34b35b3736.zip | Bin 0 -> 1614023 bytes
 ...colors-npm-0.3.1-7e93d38139-de4f87b5bb.zip | Bin 0 -> 25077 bytes
 ...n-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip | Bin 0 -> 27387 bytes
 ...mmerjs-npm-2.0.8-f656ba2573-b092da7d15.zip | Bin 0 -> 243546 bytes
 7 files changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 .yarn/cache/@kurkle-color-npm-0.3.1-174f3d038c-e6be5c081b.zip
 create mode 100644 .yarn/cache/@kurkle-color-npm-0.3.4-fbd637031f-b95c6abe02.zip
 create mode 100644 .yarn/cache/@types-hammerjs-npm-2.0.46-de99d4d9d1-caba6ec788.zip
 create mode 100644 .yarn/cache/chart.js-npm-4.5.1-97698d58cc-34b35b3736.zip
 create mode 100644 .yarn/cache/chartjs-plugin-autocolors-npm-0.3.1-7e93d38139-de4f87b5bb.zip
 create mode 100644 .yarn/cache/chartjs-plugin-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip
 create mode 100644 .yarn/cache/hammerjs-npm-2.0.8-f656ba2573-b092da7d15.zip

diff --git a/.yarn/cache/@kurkle-color-npm-0.3.1-174f3d038c-e6be5c081b.zip b/.yarn/cache/@kurkle-color-npm-0.3.1-174f3d038c-e6be5c081b.zip
new file mode 100644
index 0000000000000000000000000000000000000000..65b1d3941c4d5458ebc4b928b8893192661e750a
GIT binary patch
literal 29022
zcmb^2Q;;xEzbE*%ZFfIy+qP}neA>2c+qP}nwry+w^Pbs_GqZ8tofENjQB@cDji|cF
ztjtgSQeFxe1O?!K9Q-va5dXUQpC{OVuC{i@CVDn@#?ICzj&$<>WmDAuy(zzyvxAkj
z$-jwU|5p(sJ8L_Ke-kA5_d#O|N2mXp1_FTi*GrkZ_THN!0RSj50sv6_AEf{F1hht$
zj@g{wMw=}$y{EPMyO(I?_P829E*mEsJtxjqoh}lo)ze;fNy6h5CgaJ*T<xsCpMW3~
z3N4v8wz@<}Ap8g*{C9_M{oTMXe&4HJ$+O7zS7s6^jm?WUEnE<}$;S<8IQU}r99r%+
zd|Eh}X}?pT@Mu5`G`prXhaFd^%U(0<RDDR0qbZK@5V~Q0)eHPbRauZPC#A1f&R3C5
z{2PbBRNBQpm}V4>1;meT3x<DQC#ieu*HZ%@Oeq@T!Y@ryQb9ex-Wa&1y5t7v;MZgM
z7?-=o0#pdsc&vwW2G~*i|8S|mUPov*wpg>ycR^;WTWJtGTADwK0A!UJsuak;CAIY_
zGZcJ$YG_}@51D6`L4AHCqY^@DRrox|jwpW_Sx#8x;%sfGLO#)$mcclI;Gzbgn&1U0
z%EG}_jBo=(R<TsX*J~$La+_GW3}w0GdYiz}bKf;Kk!v8)<xyE}8|HnbPvh|!*tv07
z(Y-Z`1hWsXq{Ctmh%XN=Jh!|7Q%OBTFW$C%dgs||P6Y$GsK=M=5`B{vpO(1F<0+Ni
zU9-m+&#m9Mxtophi{csqQY0s!dAaujTYel!8(#)F^S41dYE^L=Y@=PusMijEAg|cf
z_XojhTC*DrqG8Ldl?{&|v)a~|@`Db|?g1~&?gJnF2Efnt`oYt)2g3i|3pz(EkxK(K
zfEs{7e0&ieXG2~k*jDM>=5^w<ZC%BO5j!lM&H23?Uf*vL96)qq@AvaLuE$Sz^j2-{
zFs&@kz|G`wAMjAB%kmaJXe4cDA-6tP!ZNoCXlqOJX9HTsDjzbl+Mcm-V%LbeC{ROh
zw{RgC;mScD04gj^*M7_*Aq33<uoR-8G$Vt8Ym6FZHxBbXmL6aJbr&yMA`A!I5-MFv
z?iq<I32>~nl+VpG7#J(k(Ef8c;}mhiWUV4TPn*ygcyvwZ>>AgHMVU`urBcQdJVA^e
z?CVJg-6~CtfH}1fJG~!$i=*qPAB&f7nE`A8(?szN=P@h%D*g1s`{W;P3*!S5*lO9d
z&$}`2WO=JH3iz$0OE)bj#-BrNhGRqk-kJay*C^(oE308{f8^@6*3<_L(PmL31c{{y
z0h44;^oG)H10?Hg7^FurPN9k4rX-#s7c7p>O)c&}ccXwO!ECVXVJKXj+S~m$`wo5f
z_SRdi5r4N>+Zg@otXg%=SIrj*zOp=6*z(4dhPS?QPK*%m?eT0jpMi%7%XcLR;0kX3
zt)IJ5+V?2;`BPsWL1_OtCRMEwiQ2|1?oHlYAQa%O8VONFhx;N=ONa&DY+6jinyLrG
zh|t-IAn4;4M^;J*2&HS!uv)~?#Lta0Xcpt&GmPhAEwrtcAKcH~B>G@Co5Pv{B%es}
zv4P@Us}4-D!Y|nzB5U7G{vri-DL|9lNTRG4v6$@3wJB)RC0Pbb4NxKv0B$cGJ-7id
z*>0Tc2S3WWV8d@1%j3V}90xoA2jj14?GO&@d6#D1M^VYhDFIQQ7tA~Z8OLj=^M-?K
zVLJDz!Yu-nH4XdqC_5EWIBM<KaBLgDigO~V{a{Q|g|mQ<K}u~)^Y_5&0w^?2Dz=s%
zm25JiPDuLz*a@|a7wBAW9l$Gy*}GC*c-L?rFjU(C0PH5EZ0=DA?R-U7$QmOA`lA)A
zCE<}d00ik!#AcO)_U|=L+t^9Rp9I)>+dwkxu5B<30A>}@5@ypk1a<9TfRWZnKaGlD
z>lg&|&=bqVKb!DP`vgd)wMfxPX!PYm@=yR4ISk3NeO>g)L0cHt6T>di!GKDFm%QPB
zLtZ|s%h}}n%E91{E3_INSq6_#gGP#BdL$OTy>f`lK{;4bv%W=3%*NqzPB?lkMuWcu
z|Ef&}MLosg0Z>r8zpZ9pv_Q5{ga9-c;H97y)xD^4$H%Nk1yxujNOjsqT4Z_m>^gmu
z0;A#*2g1rc*a};LHPJw>z(TIPv}kEImduzUJajlPcA)(3HOe$5$52!Tg%>?Tvg!|{
zPH$YeUDK-TSUq;Ons-#3PeYHP7TMIWz&U8}Hvl+>YQ+-`@h?hMMwF;Q(rVzhv?~qr
zq@<w%*Krkl2hJZTO3j-8(cq+v4Z<vE9A|l`J^c$g?|z;D<4kKBhjvM7!Q<IkM5@^U
zU!B8P+y|*u$bnx5V-v0Fo%c}7LheTyr*jXSPMmH)OXW`ScQ%wmD0x5c=K><Ed&Zbo
z#x!u4NP<91T7m?maNkHmpjmu{vw~EOHO_LgFvC5iDgN09yWBCRB<gv~ahXkkK5X9>
zVcVNZ6-j+PY-W3dl1!OnOE1k%<F$9nR_p2~_232ki})$tQ+cgvYs0tv2)6!}VAGeS
zHH{LwH^hr+@BItm^o&S3fjuL+;RVpLJ#LsU?~H^>;|F&_fi^N#UOS9Hm&W*+tt_C3
zWWEpXNnZY*2c=OMjjm37X*P~8b@+6R0YS6@Y;#E{sUWV|v8uS?jS59TC|6BG+NLg%
zCu_Lj4X)j!;SDV!tK$<CGZDe=Z;`SW>@apbaga|)fFgKp-r212{q7iXt`Z*|VzBVH
z1f*EO4@~p))m`2OPN~-)sEwXN;(EFtKba?kv!FuyBw}uw!&$0&cZCTs+Ae)@*jzQ7
zKl!3T9|5PQVXPqfb3}K)RlEpd(P!c830)rse0Pv2=yRb*q#nG89+0o601i$x-XsC7
zk<_pdvyZ?T)&)w(&R@Do02ubG$h7f2n?+^WJ(D_$5v>!6nKCJ$ilaN`!bA`6nTigV
zp+^1XyK3BYd{t09<YEF$zdWf>kX!w2LW@UwUC9YBgFS@+7HP)V@lqv$J8g78+ww!>
zSxsz;oOh3I3dZCXd#)Zjpk4dr<wsWImPZOA%`x1tVLQDNyZdGO(!gSXzNc*LUkpDe
z8=*`TaagcRtqdnjys`0ed$8aUvjJjeB&pvVF*o<#U1&o!yZCN32@gPz%oML<tJ&Ib
zbn*@NZI>U+ZI|%=2PO7US$fPn_ipq@P%jB@v4XSs6hFNZEKj1_{FC?C(F^~KL`no$
zDUcti<6ekPWfjpTFc}aXNNC(Tw6hkboZa@IR3~f=QgU*_2y|tm{TRMjqB<FM)L}`0
zPD5)7O9o&4lSURhIg!7J%<XQK-_$Vf;*yY!@FMS@O3IO!G2GFe9x6jezA-0Q_m2ae
zV@06*v3`wJ<SeTS$1C%m4u$$<PI~FGef>%hqC_|xZ$!iykUV<w-rWL|kOT5EJQRHd
z=_ciE?v3+*_<^OWkNek%eEHxFb0j100(*8}S?C7<pXZLukM2JXMB9T7N}^euhV+G<
zAoX&)$LABk3=tfFU&I)QEXl5@?nsO6VZY_IF6s0`e<JCpl3wjmt$8QXj|AwEfPu(s
zYr(%1+>6VIcEl8GmQbgt;LVBgC3*$WeW4Vf7+pZtB0{VW&8OXgbFbbCU9jU86>J|B
zI-@V$Xjkb?h70rQk`#F<M={~V3h&kZ%jA%iljM*c07h@iP0op;!GDm6t&r$~8pbMQ
z1^p($b+DWqd_*<>CV^Gf8LB@7^d<reN-0gzPCuK_-vP6fNl~O^<Vc|!bMM?zIqT4>
zy(6tI+q<5DpwQ4ZJ9PA{;wB)`QIx=R_lp+;rVcam#X>Ly&58HvQ9S%J5gVd4LHN^&
z>+(UwSRsN_)OM9{7|V6|C)&_n_XGbeK($wXx}T7CBGWZk_ZI}RY0N7Z{S@j9aW|><
zy|fAn$$!s3Bym>(2)S>Af+3);b}7nV)4gPYTrj{4uVN7!GIdEs%yvi34e7~$K%^EZ
zp#T_8vKTJKP6Smb2!V)&4}!EX1b`RMB2AeH9#FwtzFJ(}2?y0P)oa}D?PNIN2?4Aq
z^mtNjQUxOcsZC6^1La+EW1wu8glnPZfQxtfi%}#0A<&Nt(84y|X6I<4DY!+#hN+CI
zco9Cw?|lw7P@uKaOUR;xamjT!I@OHvxDQl{M&s6YXCY%5Gin(G9YNGbVSIe-@|lbI
zU?Tl}46_4@3Dy?HbnUPk@L9RN4a5CA9|)Cc3}u||Q?gaWE2SXNzVx=kABe=t{~nPU
zm@fcxULdYxj0~)+_AoaFEe{nn&#A8Lk4T2i6Ot&aJ||L<7|0@GF&jp^B_z4Y9!y@v
zfE&dQWoGe3WP$MYU<E#yv7|}Mo{1=xM5~x20ebK{Oqev?qkdA2;`l6`)Oldscl^qw
zvl_Tf5K5$Vjgm^Uwz7bn%<E+|qaCdfPRYtLtxYoRpU~#1Za#kyJY4Vg>Q_}q`@qhc
z)(5cGXcnpBlM%40tw2z%!jHJdVczCDbCy8g^DpCBdy<7SD}u*8#=*lalwX1o74Bjp
zGKrt?F+M=|^}Ju@MJ9JV>dabR3PVwtMRzWADHw6LH|Pi5=~5T(NB$%!ZnAd@n&-0G
zhWDmnPT=6OW|!m{do^#CQO~9sKiavOJ9?}OqC&~y^OYaH#&|8MrL?Q*H2Nw#-1V{O
z=AlKSWYjpp*&7L1n^X=tXpAWF`<=50TFv|4^BYrb#l30i&MDnP)_so9nCtTT<`cJB
zwQSA5k4piWrD$FDmieUO+nd>fR<4>lUt3t87mvPti>bu!NB4^#mPH-wYo6Qn=w&ye
zF~2Lv5Kgbtg$xN7onl58aZk6naj@rp)T``En;A28Art!NOV&kl(<^R<A+CED8{2Kp
zYN{efPV&g-iHucl%IAyP30wM!Xn3_0H|-}mYF;+er2{t>SK>xuGS;(0H8Y>w(bp{X
zt+D+N6Bz{)NnM??y@a*y7s@<208GV9M<)hx+;D=64L80Tt&Z*^jkaPJm)kd7NC}~W
zZtN|&!iMR$@DtLzX|?M_Vahh6=Pn&H5FIJAXj?C9peYYX0BD}votI6x?|21fM1q@u
zpuEC@%(Tvv$!3u@Ej*>GsnW5o>6%YILke`%b#n>07_9iE#bc?McsLsLJ+e}Gqs{8;
zZH)b`G;{62mI75Swwu#j38s$5te#xcJ3r~8fqRUN4sjhrp^~KWkvbEe1e-N5!id73
zkc1KlDj>Qdd)H)l#QtiCe(e(W?V_pbIK^@Loe|o}oah>N4+ku=WL2IV;Oe+_m4Wgw
zD948Fj!)wV5o``4&xmf4&Pqj^vCJF57x}@f!3bhFb->&oxpgr*k4$hb`6YW!ZIRYl
z<srgQ3*`hk0d1Dq^mMjJYXXP#sqU(#T0X87iGaE&_DPyZ;B<aHTN73>kUInzQ-9II
z1|k-ZE2?7a7|?vikCAi4f1Z!@Xjh}Pa7{ARgog&aXbJy#e7irSIbVVZxDqHFIV%=X
zxm6yWM{wCZb>udVrv=OyS=bL1R3gJ<8*bfn(h>|yMy#-f?6g;#D!lT`*<x7?r$ne2
z$l>{0b@Ls*FD^KoA<h~2v^j%rs$;ftT56Mzi(x@dae30>ldCci>+LVHJNm%F1|&d>
zH+p-elAUAO>C_>Io1U0aPVG>Od>75~SJaf3p${<S5V6wej{>;n94)~>wXaw+l<lyW
z-}_guYG}b)%?K7!Ijm}EH~k9Tf+anHXg(5;Tz&0yH?Q~v5ee5dv#5auherbDb@V9K
zh>WN{TdqQBVIL-{mY@qOZEY+-D3;msk7jJ)#OIp~l}(jt_V)51Kv1w~(%3zw!`4^g
ze{PM}h<?I#UdUeBx}a`sU!mPMlk7&etcmVvM4dzXEIy47d3S-wOCJ|Ti6ZN|N)k50
z%J?3#GT5W${S+bEX(M3j0ZXGag?IOV!K$W`R5@jvB4-5b##`mVOYNiKMp$ZK6C5|>
zhT@)?0e6qNQsXotR05NP8yq^u#dvMcxiA+-PcAVfcO1rOSN**N!6bRQ_v04}`vMpq
zyDSBdAlM)Yg9$JX?b{@|g8{M&1wgGQ7M6ymPI9+Eb}2^Vu~D?}<ObiYr16grqkwLo
zWS1Ugl%R5x(f~`A`sCVHB42B`SGFd{)AArrUR_9J>p47KPAC!@-su6c7ImB)i_Ner
zp|oA*BGIqhp_3@EYlv}JyZYoV4|M?7Yu-($9XOX@cu5*0=Denrrd%P^xQta<PF$89
zts$ADh)rY_Bae+gWfPf7`FgzgW&0?+jp9W`+~~XUafl=-_O016;9s8tV4-JB<cEFg
zS#RvRN3(F0r^IBHURaj6XT#j*`Pe;pyyJ?3f+J|JY|m6V{Ui+k1+KjfFW#|KhG(G+
z>lfvlSR3ryvKp#u)6T?Pj#<5c0WPcHhBE($No?&y?|T1()&6g+5}y^dr2hx2?ic_7
zsQ-_#%EZxz_J4Slx9=uv?C+^kU2mz@k*Krr`?f`@)hDxDYl~H?)B46zs{#^9WeSN}
z!u8RH*DElDVu3Z=_I86NF@zrhgx}ueeV`}!72s#>J7q4}!P;yBwV74vwv8(SFV&<8
z0|#%+fkVr~hEEGSE5mOxG#)jGp{7q{d(35np6Vlq86BV$F^<-Z2%*~_pcYBs_(liP
zwaeVydbN7G1t5!9_yLuRRQr?$ZeZen>_-m{V^XAjLaD`6Y|7$wUF{?bXAAF5Lo<mw
z9Q}%+afMaNn$@a)l&^lZE2|m(YokCg%kZ)a6r(z^BeeL^<{n%%<pRCPdGnihj-Ayp
z-w#){D5tY4@M(?Unq4-L`CGTv)hWZLSLsbKb?Mn<bdrlpR05lj>YMiM!3UiAYdC#u
z1@hAGFY?L8KSHFF`Ak}6*7y_jY{QyX=RX~S%-XbWJ|N19Ew{F2D(43kmOB7mmfH_L
z_6v)j=L?6g{}&8@uMcvONII7ucmO2`lkns^Ji(5%Mxdk8rPKS&Y0I{j4<lwoE{FH?
z^|5i#A~=ZXZjKe;d%}p1@${q0)_Gc0iiL~jWl^q*4YY7mjF{Jo&?*wh`i?=p2&jcw
zKwEpNp$nvfMKOGKr6ap_EtXG_p(0XO=cr^j0K?8*7ow8fF=L!%R)bJ+4>FH6sldUd
zV2^%MJxVC#O>IUw!uhRMh_Dz<0%i~IAGJG|)H4!S>Tg$LDU+L{H!xnHu8FfZ;}m(s
z+(1=qiafd@aPJh~#wD%`ktBDq%zHthOw>mCxelk^VvI*AVCc%{=(^7yw1T^uCsLMi
zB#8EBE#4KlO+U*C-`Nf2rJs-Pk2Sbcjb_~v<I0fL@?5s(|4mwzYMkp&B%8z>y&LbZ
zHoiK#iqA?_Les=~$Hil%xht4DWM0Szfu#Wfn`lGyir8TVEahY%Y)v{ssfOR8Af7B0
zEP}>EE8;hQC66V}7+WTcQbNQ~I3K>9{pIw9!^Qt?WuZdy`EYKz@0p2kzASvMchlG5
z;kJy7?SCpW$(98|Y?iI%MSFP~Gk-Hc2WsQuzYJZmxI}UDvEJrmRZ$?e#d9xbY1HtS
zid+g+q~auAGi(0oTUauHKmI7Rm$y>2Y;6BBjPqaH4n}wY4&vrOg_OUGh-}ZA&Idi%
z$KZ8@d1Cckv%tLQfueyq$!AIE?OtiBNAb&$o?k6F^Bl$!uLo1CU~!7L6sgx^REM`L
z&!WlyP|T|Ny0(UHzNgG*tpi9C1jHF)V1cs&HU>)Y2I9rJ6mJC#=XpVXstLqFaM6cY
zS|Chas{@Y>2g_=pEKCfFdr}ua%mO$kS_z(=k2eMD)*DtL?pxpL<GUTQX7`w4CDXb=
zbDuV-86uHW9hk5|>!&xcZ|o1REr-Stq~+-WQpuvG8i2D8ho4i)`+z9oGXcIsTzINB
zMD&gf2FGz22gGR8DiEB7*C^8RgsnHgpgr5QT$7wx6!)tk&|PxLJ_K5w@&9MWicPqV
zaLwx0(7$Qp2gt8vVk~JC0`EVp0-^8K2?43e(7++6jgwI+6JpIb7ZND`DsK@cDhZvo
z^oJbOk9ii<4~d>`N>C0E@an&iqT=>{Nl_R2f0iOtK_C*2&uHn{1YGWMN1w$Q==b2g
zniNRP^FKTQis}z{|Bn<|_H$Fyh#P2W-3xP?G9gveNYGw)ur9KHdi9=v$beCDii2Ti
z9BqfKz?f?xRbeAlX>HnCOlNRr3XEM&jGrlf1<tZgt8$i9A(1Aml(w{?^;oZ{j#|0)
zUub6Tc8e^k$k^%f*AUn^R@=u-0wsW^acvFb`~l0*)l^~bmi#;ZQ8%59byGjogyFYM
zag7~?ma6F?3O&A{;7&Xxo-9!l@5>V^6*eQ4YFy^X5ZI*7CULpGNy0Lp;BEe#L;)(h
zhBf`pZ(?rMbOD^~TP*;n?0*%3KSn$b<ESw%<-aL1g;@au{;Vd(f8|X2Xu*h0jVA%L
zZYW9l2Ll#g3aUb+VMT$Zy}@636K{E{u_(IgbyGask=dl`G^er$GC%;vHSp|4t3IJ`
zLe%MIMU^9eV*h8vYqI0l#Ko%dQ!io@|1NP(>_)+0(P8sLi^MLh8@&D5)iJWX;m&G|
z4LD~O-adwxpCr6cgTm@IKLuLj3pql!A>o)W59heS4RSab;$T@&)i;z<ToVcQiXR>n
zbyt8v%J?2AQurI?-BH6U1Q*zV*s4y3N0<UigKJciGO||yk@?9zd3XtoYkg3II?^s)
zi!{<MZ>+piFP;JN9!pGeSWUhQQ9|&{jGWy04k_YC8tpew`hny55lBINDL45q@dcgy
z<`f)!#kBnddO_Ybmn72Xf!vxfeuykPl#s;0BI8dNQs!x~_1*w<$kLtrFd~wra2cJO
zPmH+`02mL@@9YJS{Zd#?7}0no{tIv}zdfM0xNX5Ha(?PxUpNA>)rC|-x5lvrzdLTe
zym3-a72VNWVMsqjSDt;O^G%tEjq}bel47???)G(K4Fcz@Xi;Xu++JFeRv&h>tPk(;
z$A|BVxj+XL=Eq(8^0+?SC@yB1pJ8l@ar!GRsJIY`7Q}XA&a>!G!Z}!xtSJdkqGDja
zSagw)1Tde{Rh2&MoD9jHlqyj?73IsZMZdG{%O{!`s1fGBD0lEafrI#mxq_a)q@aq0
z{vWI(UL&Ur50G8^{P!AnXH`cHe53O`J&~&cYtNs+vnq<Z`Z=V>c<&vF(7zm#taz?E
zxnQo}yz*Pjvi^^eBV2g!A=>@A2)_zv??l7DuH_*+W!UB%KBWpB2Jk;9VId{~K0=Io
zAh;ElMwo%50X0FOaw(IJ8R@ci+Wisl(N_zL$cRJG7xwfce6WSIGU{l;69AlsSL7G;
zKDWp9%yzTGzYrPPUGqL@A>72pLF=CdUx$zt!_HzkBRbvGh7WvVj?r)K`#Q!80eAn2
zin#t?R3s+OjO@{q_hA{Bf*h2e;i2d!z&NRB|L9RD<Oi0bIT=_l_Tz&$#GQ<`5ANN2
zYo#Cb&$?xNe(dmhINAYnSO(kbEUZ8545^3LGrN!kc8K5z>}u9fbV+tiZBIt>5bGnq
zWks(a?)%grjpFu@a?LA_X*^J$7z{*SR}cOz@Ig{RtP8$KyPPUb4R21IH_j)J_J=~4
zVr&gjp9-rXx{&1*)~n$Ve#3@eR;+y*{F=4quw8pF2{ksPM_%$h566rhCwjyPw18Je
zUV&F)3=pTcG^H4x8ShOlu1cZ{VS=!d6B3XX-^pTb{2kMxUjeIXAi`iA`bQNGf<}g+
zlX*3@zYl&XkG5Fd(t}nd?%u7pcFDP2`&dd_ZFD;yS-z=lY2y4t*Hv7yt0;}}35+Ni
zOdD<Ti<@u=L68X0w{Q&ENg1ItNg(LTW$iq6tPIUQ?w~;`hVLdSlsRJ9{k-=STJu|w
z1w68i+-?WW;~SZHj_}c2H;XDy%uA`~B)5T593%i7OV&pWQX0UjbO>UgN0AB4@;F_x
z5CSsCqfFM0SX)sIx7}TDUt-P^3cVXjJOYlLJegCy2T=tEQ7~%hiy$ou3+T<Q$Urfg
z8$>u?pqbEM-d_1i=YgbmKl4;-K?oxbFNIE*R?R?Mat}}AT=9s?0=m#A^-8=m;`WXC
zand+=0v_lFq^RAb#XXy95p9FCc{;BqNp{y0=tPJO25h_L0k$}OLVg#GO*dye2^gKa
z*|@vgUC2t+j9wL4n;+v{g@lZ#cJ+2HjLPhU$n1=Ain&c8%^>y_Y)R?(!0_lf6iRuD
zK#92bifS9}ULyi-B)jJl3@WJ#bVO_p<_mEu3@%_vgqLB@8~4|#381<Rpg2$jmSVxW
zFqOUma50{MhcGRMyt{u)MT(yS*bG1gbwui3be&oy7oEfsU-g@wK#8&ul#WSLqJu{f
zsGWSul;7AR9lX#fS<=T{K@vacDz-_twv*GGs7T$|F}tGTxB$w-vO~`%$=wn2fWEoL
z#iG&)lB3Gx<{Ogu?(A&Rrn@yG5_`+J`<@rF*V<@WvAn$=km^;xf2EA~sA-)HJ64tH
zEp<lj1xJlAx(AFAo|cJwM&=%zq2_=BmqX$~PWT6MY!d9dG$UvHQGea*Spt#CFl}bD
zUEPp>U{Eja)soj{nGIgJeaJB(cTq9+gECXjW(AX6xVpL0DW>zHl4GaP8O+JwB_woS
z9v@SMQl|CgHzRsWvtY#7ZY0RS`*KXwwu&SNud>Py#luC;(!6uZU9(SLIO0`Q&1pX3
zSI(8~FagNUbi?EYsugmU-DxWWOUo+e)oZyNlueGN&E2veyA;hbV5xhXqRFLnd3d(E
zzLxiQR>@l;K@5+tx>mFzGrD^f*VF&P_UH{?Cx+j3mm7<yyvLKd1Ww|29dJDkZp<NC
zsJr?c#;Ob^MRr>BW63(2%+w9Mre-@@%hg0hSQeZmo|j@ULM)kgnq(Z7)nflX;~>ZC
z#(lW8_+5F8CmPq{sx16EeQnu2x3s>S^yP&?T~|X%IX%I3^<3?UMJ~I-6<xo?DP)Tq
zCSg>-Tyy1{?$U*J)@|il+`D_zTTJjl9s+*!B~hIE@mnDM9Q%>Q6C}RkntfY#6;ojK
zVLf0Iud`247pTuL*331#g=kmkNi%HDh2I}O9wAz4+u?ZKFw<uC{F!9&P^Scq=buj(
zG&J>E1MuL<VH3(b<6s~W^vG)cv3=I`#7HvaQ$)5_8QPHLX|?KOOwl?{`t*)$W2^7U
zJwe-46;2WDy+n+}kzwisUfFWR|Cbf*siL-1I@31n4G&Xg$*R9Pz}0c;tAXcZkWUOd
zoSr5AL9siEx+J<wx+oEE#<OSwUkZ%=PgW#bd18ihB`DK>{uh0nT?sZErASGD8`OT8
z(?EBNxGr$SfcCL!s^#lOnGCp#{D8cf7)}?!yFGao2f0gtK5d^GAsDrEQbhybz=--Q
zVUmnH{_FXOF7<MxI;LToiqO!27d;-K`{(QFzhy;GpV&gTTdIv^o_S<!(M^U@!xeR8
zv3<=ux%XcZ7939yXY_nq9RW5~QChexv`I%q(I6+;Jc)Am6&MM%UyPH}?<~v^lC%WV
zFCu72I)~NJE`;+_U(&(rnIyW$2jJqcMHd+n9)GxTG)b?o>MQ`cz}g;(OHJj+noT1G
zo<}62;jO!8HZ0X0(Xe#lJ7*3GzR|m}<rk36rxP(6A3a}JG(Qnz5c*eEv@uagX~Fz1
zJ|x@GFtwJgDpl7uFmjt1y9qK5R#HUc1f797SB_4?U}%U$O+=SJzOViH#mna{-7{yc
z!*ssaPGwzKHeA<KTs2)AE9Y)ZTf=H;-k+9CvHi^$O6cBX7Riub@9~5glVcgNWZbqX
z!lzi7zoR#YhE)7M5=Fc01&qC5=@sTkU%(#O)OAwo7MwF=%%Ob5YW#VrgSDK<D@<(s
zk|urdT=H^Zp9pvB|4s>3!6gxkLgxlL9bJaB6k^(Fm*kW$;kq6f25XUxk>|&PgK!ES
zfs>2s^6|)n%+m@OBM5VW?9lp~A-HjYl!cM}G4#;SpPEE7P_vw0Bu#D^b*$^&K*9)5
zYl!QN8g!ygYzo+%U@X&a=~?6n4xqu78xA?BFBVgDr{Qrw<nqy_k>FImx|ZrQWp0i7
zDtkArI8g0Y0&2PVP9Xjuy(ABv?wL*WAa}h}`J{<)9eXOm@SHF}%635~MYW2rdLFH~
z7`H54toZ*6jQIW=VDw885uC1a?N&3x=%=VncTe$(Zdq?HGn!kh(`eY`cO%pzN$|a-
z5v^03(y}AH_MBjLSxWDc488GT5FO3sgAEMy!!M_z86;=Gt##{nMLFDbnY^RgQ9sUQ
zU;F&O$rFsnt`<5x06-7ke@C8dENuUgr(g{$&&`&EpB=sYx^R5O0OABB=X@cn#T>Uy
z(i$Z$86&C<r8p3h6{PZnBs#0}-dipJ3d$O`Q4eYWra-_GD3~Rip0}EL>#x;m(oT&C
z+c?_ADtjvz58TMT$O83K+g7gF$l;M&kn;*p@po@hw>Bi<a&XZ>R-4ZI$&-^1wjF;-
zY7PV1A;mlGplBJSh$;nY;lr!b*yvY#f`qISmtIdqn}ocuMPc+Rdc5YPUn!8_6Zhdk
z%_0S%t=h$^vDg^q1H|EQh-P$DhvbmV;<U07r38;)+cwSNmXjh=eBAPuLA8Bh=jVaH
z&ig#AeO~DwUhnpZr->bx5!bBflVfR?dK7Y*^9x+v0I-X%4gzH|v{>%(!w6Sx0c=6E
zQKQl*nK0j~qw5)+1Tqf=3T{QvXqY?Wm~?2_sJ*KyWTZ4AU??h$;ZNqXC3C^Ht~jNT
zSc&T~MprLR>q;G`<8R0fWl}KFH6|H(&2Z$2WJ!7QF!KzO3Wm4yPJs3_rk$*p?K~^4
zpHud@tbf6+&*0X_aO>;2OzpHMjrrPAhJBo9GQTIAJ+7*)p4ZE*IHHhO$gKI-;_3qG
z5bL;7JQrn43)54!FS!Eu&A(1U@qeFRlr!u5kar|_o3n@*jPkM0Tz0vUM#d$4S1ROr
z^DTo;&q4U+9<!#LCz&kpZiiMy$e3bc%Cb|d^;)**`MDvt?%En|g+FzzP#t2dPb%)C
zQ)qE_xe#j&!XW+r>P{2T0(7=o;ILATig(}qo<(|%lWh)X_v#$Aj-Y=_?JSjEtBQF+
zn$Za5w&kZ`C!VKfO>2UOsr?4|z2NhICo?dR?!6DYtyc%{CgHu8u_m~SINru1Hg42$
zy*>&0Gz+(yVbxM&3yNG<z02XBT;pN4a&(0^(-bbvCtZ@Zoe_OpU^i~eqsgJKGHH?z
z3IbCz$6X3fAG9Z{>s1@wq>ej{>Zk7%(p~;dKVCEuH;;72Idr3l0ON~UfLRbBTbYla
z;i;4Y9x_}!q#i&o@8dqH^&IV5W^ACyW#OsRX(AH+PEk{yiCea+885FW3w3nb2c{OZ
zqxHn}=()1Dqr-U_V+<tO(Vaj-^5nE55nWCBoYv@j`5D!7(+#i*#j_&|3x6v*lpd(D
zZDnB9eljN=IHSi#RvWp*Id;d(Jwq5fGo|Tv!<7N6v1khp5VH~Zi(THNBVXIAgl+UE
z&F{I-`b69jEHgvP+P0HL!z=G6)M5NP;3Jdz5I&ndl_uc{B;CVuMxCMgY%&M4W^Ne;
zI78!dUBE?CWrf=HH_t9DV2N4H8Ej>^a;MMwc`W}<WpN8nlYAJH2#7yPtPiYi+8*be
z4oc{rgSKP_X5vKN<p6cD-x}$h1_;Ym)g|hXl0z2}#DSmd?8%gI5^U*q@@K~@C&X`5
z;UxYlu{PR?;Gh9XAr@0PN;&}NKDU%6M^-Bt_a&`8OPN;;xcJlj3NyjJfl6ti`_=8%
z^3SX-v&*&Rq+1U;v&*q%`rMkC+G8qq^!L8yqqI@3whhUETjRpoZA}QXs^3X;B_uPx
z4vmiG6%s7DZ=YAqKEYg=dCflaT$p1`J@gY&^!JJ7+ShI-GuRc)Q54GyV54Gmb|)5i
zr5*!j)NCCW^R3Rc0Cg&VuAu<E+o@&0pwTbv!4(*{4-kgbPZiogLT}r~w%}$x*X=#d
zYw|3RD-;u!Nc@PK;*hW1(Dr74pZ426LSHW%PN6tbUhly==$sJ105AV<XL|w;u|M4b
z$Fwsc84P`t<6Yr;0lwdw-oxI=vh=#tPWYWyGHL$MrvSvTq^70aVQj(QX2e!+gTSvr
z9iVWW%uR%mUE|5nPG(pM@E`La9k8#eymeV-G@P&9`>M8qXJMNqVsR|5BVu)P_z^T^
zbnTo)%fT@Qi#XxQCt2em<2ih;HX20w*i<&f55#d~<9kZE`b7G=4;~=yyCTII9vR&C
zGxD>s)WG-A#v@>t2yZxPps#*>f{8TVpdQX*P>awrd_!BbFVc~&Iea+torqaEXjv~A
zC5Io3T_}!id$1lEuC}9aWnX3};=##18dbblPZz)G9lc=7mZ9S!PxetaZVU&kUt;%Y
zLOu+{+FgmPpEC4`W}no~mO@@$<|M6ccwb-(0zv5Qg}+APC@;)tJsP!iMPSuG>d}vx
z;D*;y#liQI4tP=LM577MK3O4-CMZ%-G8u@&YP_~td*_=^;A0ODT~F)e2Z%wD3zc1O
zhp<D9*YR`~thW#9AN3UNQ|}@-dL_mZ9{_dYj|E4Jiu?4x<T^|^2|bidAvn5W^;^$l
zMeuQoj*7KsJ-vabgXDyX;s%rrA{k+!jh&3z#Chb+Oc<YGv61vAkQx*a*?o}2`Y|#u
z<419XJ>6dNH=>PF;Nj8?82&Efc5<_f>P`e;h_xfRkHJ|6qHz8<NbRcz2omt`sJsYW
z(FMxx45b8Jq&AQAIN^X`l#-HwHUInsX56SvRutDg%MM-JZ(fpGD}+a!Gc;1_b8&DA
zqat|)2mCtea1y)fCwA?k-JWOl&YY}&$e5=`Al_<r7~B8Lj1_A^?tUBUes4;VJq7cT
zL|S`{cTZLqYtn@@fvl`Y8-xJqiJ<RpPg%?$@j-b+S*vjm-z3rS4@Wu0!Gi}96h-?K
zm`FtDD&M_t*^6(<UCOkG-r&84n1+RYC_}A5f9)VZy%8VUoWYAaS$j>at`BP?35$aR
ze32G1G?B;gjT0pLFg9f&!gNLq20e7bB-OLv8M;<R61E*srAHGjtW(ZJhQhn2$AY5i
z6btk{LWAD*lkK;D)iyzuAQaaHN#Ktdpb`2alSbhv!jljjZx_L01@pbh2lFAZ3h$T^
z-5}_~)f$UGqw-UdAIU?cRnLl`8VQCWo+t1x_{SxU5OI*Q+(Cc{!o5cDCoog=R=sEN
z-F3EFQ7EAZmORVdu4IxY0NLa3)T6D3STj3#)LEQ|_+$1_ULJ!%K?~W2#Cc`!WSdMx
z2R(%@gb>r6A5Ngp=|SSac<?;%kmNhW!M_LQ7CSj9C>A$;?C)!zs94dH0w0An>MifH
zK77W2LRRqa5jmP8iy-lmN0iNe0{^WR6pHdP6Cd>Qr}BHU3w=r$ErrZV$&9fHW!Bz-
zIsz3BgCB7wh76<rw(Y~k{4`M(;DlOZESpfsDRMQ52)2R4K@lS#F&TOWC(2aR5C|s}
zPE}O;Gn1T~_sL3^N0UXV0Fj7x9)Vsy<=4#{6mJV>6G}i6i^Lu%WBC1`B+wIujIX(I
z>X{y9o>aS#`EVgnUIXREIQYqREUF#yCadcpcS(4+>x9a?ZTqZryJs)74IKR1W)$p7
zt7pf_cJOEQ7Dkyd)X&q|MpULBDFnKNx{Ps2di}DX5oNqf9mkA38xIoClf$-py^6Y`
zAi~eGawt+>VSgdZm9f4=eG%D(PsVh_{-D}DB{DZrus3sr$rKibwB&s%la!2XWiQN<
z;z_h2@VC&orSc*(+qP~|HvXO%9626kCuxWKE?q_KWq>O?LN>mqlxi-P8@+>}lJ<Of
z9<gRJxPun`qC>mv(jm8IuNVZm<E&G?qeCz^zhd@;H+QM|s|Urmh1VBN9qn=3PWjQY
z9oyp!p|(55;-xBwBSYQA%$hCO%2|3;frS|;!*aJ~`yAT_sB!jF!@KcTT3Bty;dQCQ
z95H)7SsO#93iq_Df?b}XKe!0lP5A@QY|&6vt%Y<mwJFGaUX96+)WR;HVyYQN`FaN`
z7*DAF%B09@Y2r+M>3+W6th2-IvkVXQHI}}Z?SVV?lsvOli@lm3Rb#fTO3z(i8abuN
zj0~BTI8vqLr-Ko-Oj_zN$BhTY$Du|(h9HRu;uvBm=sKLlCe$;Xb`Lqkpe;?()2E@S
zS;$|?n1EGX;r6A2R=+vwf_okkjoVY{ti)daW?2r)Ob%K-Vz44?y2!ubTpq2?*|-(L
zDNCrGsKPYAPOt|r;^O|VUU5s&A0$gpCN!l>c@U+%b7O4jQ|9bcC0G?f<OaF1ptx~7
zOf_*0(b1r&SMds&{2~y^i2Ne2*3J2yGW}gpskOFy#qc<r03b{e@?WbVfP3P+)9qBz
zW311&nw;$7fC3{2(Db^P%Tx<?qa&S(P)?5}nG+;ZXrCe`gQOFajn^OoGSC=B{)TPN
zC24jJh;UQb%=@Gy(HaMUI<q5YaKD|XEwO1@f$wxlq8oXhn<%|8RHyN-qmK_~U#<Jh
zPLe{XwbV%Y*>Zp2_BnN0;X{LHtYm1cq_uY!sndQJDPD+D?IHKmU2!8_<rlkmM!0Tt
zx`J(-j3lCNAG#U|Vk~55R97ItIy2L&UAcS#e}ugY=j3o5-I)ND%jR)%E+^VzjT{}@
z0_fV4+O>()RXz&vOFH~`b(boE>n>~W^@?KGkz87ZAHJZG+~vgTC!Bh%uunT1Qy&7W
z=atT})ZGjRjFqPc;)>MLi9m|_0saSq3GN~ecA#LS=PQls1xZ^E`4IMa6vEB!0#em!
z|EWBWkg+$%*C>$6H(e6l<lE&D!eW=XaWk2w<Hia>vK$YwD|TA}`(5b`v~DpMH?GUS
zXl@;NY>u;5T8V4RhpM(t&Xu5X22Io+k4HJnaOy!u{sW}u1*-?sFuS<md+&JMseA1}
zpPqGe{XIaAbbw*4PL<ghG8_EO?sOZt7$)ds!DA~FJWAf)EAp1LMhD}QS|kr<*^{{-
zW84*dY-bGe&)$WMXh58cc27m9EY1U{%-~$W_u7UBSio@CY4klqM=W4p8yp60(2Ynq
zrxIG4Z+#K$ImSv!3enmT4qY$9!doo57s;GaxOz3{UwfrhJVefQ*Xa=2<qfCjXW821
z9qu8ShJC4mwR$?2)gn1_T-~OBqB%vOsWep+g*SHx_5l12dnH9WouWS;v8`GsnvogE
zm{!1dbE;x6&voWBNN;f~_)^v2mtRq--r*<{0!e1!nXMZoX`cRmz&5yuq&n&s$MQ&7
zEW-@@5^pn2FC18P)cQsggP@gLX$EN@=$tP#K}ph5@hGa*m30J&ETd8vP_5;2C0Abm
z)Q=&j3SNxNJACQ1etHwhv1t&@ym>@(zkLpS%Kh|7vJKAYadbcXzWV;Jr5%nh5G}hv
z003#=003nFzO>`7fsvJgnaMvZYdhO$l}W`-dX()))EuV}&|!yzAT;%Qb99^1&Ku5P
zg`-P#^%QL$AlgOWTHO{@AR*TWp3|Jqq%Wrg6X+N&b#1fA%$2be0Ra$X2m2cWo+rEu
zVG|6HO}wIl0Io-*>Um0aDtX}rU9lkYWcTc<(Uck2Q;pE}bJ)R{1Or`-tXNH5!Fed&
zRThNmD&gpKAiG=o=L}R8PU6t9ZYW-cdLb0$P|<)&ex5<9A|j~R?l|79#Bb^IGPm)5
zM)Onc7;*_|sf4>tc}Owp)K-%(*yoQBlK$3^hKcvT3Ie9gCM(tWH(7qDv$Aqb6c|k2
zDTxe7g<E966WNR;680x;Sl05s51eKa4saO-Zg|J2+y%^Rklpgi&>T1~Bk$K`c*Rl1
z^AA1q9crs02D8!YgoGW0+hj*wr0*GwyC=B<Bd%xGDBe46R^P|nnizONRY;@mDu<!z
zy-Uh}3)h^2MlD1;Z5)P>4-L3JugRKi%}<5v=A)ynsD3Rs(9CwN^ZNpVvLOI#yh?j~
z-w~~~8l_HfI$uObp(>L6jY*@=@<zGd;CEe-{x0{svApKyfpZzjk`udc1=&z~n7SmL
zZs>~Msch5EL(z<G)Hj&+GPIIt&b(AFTX9lvLR8P0TB-#W_o%t2$@#I}m%G88N=kk5
z54GW&dM~V9{#}(4;D6_Gw@MT|hLM`z|I(G&S34&i^YU7SYs_JI#yZQP4g+M9=)?5N
zmlA8Pngi_+Z<$9%vQwM#7#e(jevxXTG+PH)lfBQld01=1@czcC4#2`L0luZAp?^3S
zI&Gb5$)`RA!&|swjPLt6Q%_W{9+2yM`J=`kRpfzDk7w+?3Nb&Eb>8w`{pew}S$Lf9
z4HLm(I+(jwDWf^~Czk#%UkbSzFFaFn1@np4;7-D(k_mmG(H^uD2fTz5?;AzR=;S`$
zsAL>_`hsbLWd7aC=$=|*k!RMZ4rTSa&P!r1*)PEV+DB4yvP@Aa0RS*U008L!eINPP
zPQU-ytM?xWMQda5ci1b^XoG#>t@q&4)iszV^Pg$p!u2z7Xi*S?;22lt?#jqXyx$+z
z*rM&P+g)yA4X{LJ&+bnfbS=DS(ZYFiW-N*KAKROce*LTN&GF(LXK<m{?U~LQH})4c
zQDD16TDMdW^e8i*QP`d9t**_rHJGoNl5b{b4mp628>1&rv=h0ineI#B1|F*;FvPIk
zMxxz*MnCt3Kfts5ns%s>Cu^A<J1896U&pDtJcsCqzV#lJr#CTNjfh7YO6Jt3Q6n?f
zXIPEr`WOVpkFH~J$Fd_#vyd>O*D#_hb7?WKv&~*?X;{Ezg{L109d^-Cw>#Fxoj;8X
zY(6X{-m80d)W<})0^8nMQQzhB+3vVU0gp(JMfbP}FuU0^Uhv{x^b6SThjK*U_pY~?
z?nuX+M(`E*aH1n*L=1A6gGuvpSh+tY%vBb?M#em(><oAGt+^mkM`GPF`~V)FmeSe?
zDQqGyb!7P+(bl}ZEdp`b5~Zt61_{lnS^zkt!i#=}E=0NDstXjr7vdA7G>yVu0DMCm
z%9RedVgdUYF;`bdBr&WkF?lh~IPOOHoIZEc&O3yqEZpw3lIJvn3+jo^Kd21ud<3L!
zfpO~UeB_knI<>F+9u_jXDQGX7ir@h{Z?2(Vzp}ZcHHR+Iw}FU^Np8LQQB$8sBjY~B
zU)Fn$&Bnfa>@{S2+_GXTAS36mPjL6`M#gz|u2I$#W7in%N%hS}*2Pg@G4XPk!MKHS
zj4iHF*GURn3=tHCO-4zIqL`8b`%qnZO^|ftJ<xRIdco)jYk}zUbr_4LQ*cI{QRj@N
z=nT1hJtM5@4*H*_Mn;F;oQcym$IzR@itUCss;@h{qEd9u6|mV6SRFY|VC0+Tb$JQc
zn{TD@K3kuz7N*V_kOIuv%s<a`Mwe*P=d+a)-f=1<DHni5Uy#xb0Hj8h2G{YAz|*Ey
zR#+g{yl`Q1e(=lf@Zs+vxy(QBa<VT2MYyEZ=G~(y_-!Mp7bI{J)tvpZ^v~eBx9fhb
z`r&`9M2W@YAxHtFV5ZuSv4vKFNda2`%XgZ76-@ieil6eV^y4$1Xu{9Ff4k6&IU*;3
zy(Zrt<%E2WP@$rIaD*R_0l3Wn2+YxU*~U4Xyr97jxKIwA(;OPB*<YDtZBfF(P!1>F
zYZ%x<N(YLIKb^*Ad9ZH%fzY+vZrSNrpsHTneBQJp$Lz+OSH0+>+qV_@dyT->8=)1p
zXIV`vP>GCW<=L!%|H9fX3ial(a>YgkGL2Vtxbk<QbuPZXk2xOQ2(woq*Ne3S68gNy
z7k~Z?xg>~ky2H}x`<`61brp`KKT`gO&w$mw6L{7+XVuC(Q-0YxsAC(nW*9=`&8*3a
zOFxYFLKY`-pUILNBcB#tU-rp(U<70wFqAIBU+NkoqS4pW_Aq_w4X)7}>Qu#RjpAt|
zN5hML6w;2D@;a9b(}$z-$6gV%-{z-Rm=8lU_xFnKitn?Z`~CAaeAgG=M`G*i!(j0H
z+x7HCi1FTi)ZTM^mMt#6<2%pnn+Oi<jbU$yFCjNEH~!`JpYg2+(;{m;MoJ%m?x^V1
zdOCbxb?PgBK3A5kf9B*wXD*l(b{lp!+ZIo=u>ZT{cIF0}<I<uL<<|FE;9DQnc*`$0
zk*dhfC?1F(ih2&?LUdqy$OsP5k^StsGzS|5QFx_|zhGyJ7x*GNm(gPnehaH+`J9f!
z+~ZtaFE|1prjY=dZe9)(kd{dOb9hW75#D6k5P0PerZJrak)Mh6P*cCro2fWds3H)`
zW6ln{R$y;>pvLn*rHye4eJ)xRjNajn@Em*FNqf$*GZqtXEQw2_dopbPx`u2DMW?C{
zF6+LimH^Y)zalj3PtfVZgHt<GM{K{?mVTl(wy>c6zg19E&Zu!<ce^*+K+m@RoT-|?
zMFDScU}PLuTTc$VC*^96Pg7lUt<au2yFbY_ng9z0d}$q2hx9YqI05xPw=iqL)gD%W
z#)QCVn?DqcB?i%PJ7bN)p?g6vNsTRjwhhs~{$t6xU?xm+_F2g&$X^3*$BE=%HzIEW
zjy|qe*pSqzKM=#dOb&M+cLE9^w6<Wa>R{7gl1o1r<L`Il>R#IS1RgC{hjr^ruQ*~t
zg5vNi+!S}Rcp@rm1i9Sl2qkAENIX@TYHe_`LwE1kO-GFievs<sn~g;aT2i2&>tuxd
zM4bc9K--r&Q@fg_#cLvS^K)W$_r@vC;_8>1&if@f*}+&zOhiqC4<58nsBOCVEabGj
ztX_MW56xM4$4`b1))Vzc4*Y-PN<-Sts*7S6?ohy@zA>WyXd)6n0mds7XcYHu{S~ud
zDENluf<Y7s<p6Ug7=z3c+y(N371(6hdBLRTpKJ^xn4g0tF;}l8UmyLa@bS|L=d4;V
zL&$?_!hUg-9RDr`I*9pYtHDQHB+eT`Rx7IcooNY(Y6oLjkPGMn{zUbvL(M{V6br6f
zn9W3eX-bxvHF57G#e3Id0|Vp<3|_Yeax6C#l^`iZ1(vt5mC_NM2~;77L_mNP@=hV~
zlFaJ7p_>}gV&*q0CK8om3#2vvoDI*yt&&Us5^TT286<Ou#7<H?)`Y6saUxE<R?eKS
z{5w+1TQ+jE-tPJQs(Si#+`_^(f>m!yZ|N%-<GuFH@^|_scUN-sa$1LPwZjK*_xVwL
zbvE&`%I~IpF9<-@<?Wyi6p;8sDzF*;MlD8KF~*z0jYe&(pJ;AeM&A~hCFTT=Mzo1E
z?#Tg>ge7OS4H3C&5^*h?ftr;^eHHBTh{G`zSiuko&}g!93ifsWTD~U(pW4P}@U}gJ
z;)hi;V_t};yB(70mH-0%(9)%Se0SlAQO%@2U|wb)Eeh8*%!?l-i<|oyaRJp|Du<t*
z&9idW5jiRWh}m_r-j#=HQbWrF%`piPkQKoT!!XkbcYiO_`0qX)JLI6U=DvQ9GW*g_
z+5qB^0d+x%o8ko52o4$W&&9r)sL%Raa<bkE+_Wi*l1Gf~v<%G_1mN*I=PxDms1IWg
zr|oSeApEX#ApT=v3K&`vD2{-?>urglWz=@hp!Am2;9n68f`J-XZyF@wT*5qVJcf7w
zh`%YcykPl<&*2kcvv}U7M`Z1f1ZAlGbw%~MRP9*AT39;2{%#ud+7YSq2${9Gh6elw
z61w{s^+hNcL3r4<@cC5rSGbJYF{GH`n+WzInDL(x_oYL-y|1}SBfGuev%h_-ae7T;
zEe0gHiFzjFaPvlWiFzvLwibin(7ZPox44tNzH${_uzE+Fcc-XcAGD=(e{A5*zU%?<
zd2$y|<M7&N^jQyXncl#9N(;0xd3EA>gP+{S&RI)9!=YA;>^Fqb@|<G%T=$VNq23-r
z_;_Sn319;})1tu%TcP59{1!*W9jDGoi)a*X|F6c*0w}I#4b!;0ySoH;3-0dj?(XjH
z?(P;CEI`oU4#9)F4NkBu|K9!g-kaV1YkQ`u&s5EM=A5psp6)*1`@N|1*sttO*JS=M
zC)A$Y7~&5}_R7kH^ZA06kI89)OmwdyS|Qgt+iJ`KAce8-z9?^!v>v>&B#>JKZX2@L
zNnIxn&Fcpu8C-<?lN;jhGCUc!eCuRK#ulViwMwAOUtZD0HlV6nD7UvPH09Kb*Di}B
z?`}4`7f_poK`>FpJ!{FwQ`RAxTA%Mu8x{!S1tM8463APFW5*MJZ7=47m06kFbJ5EX
zGx1|+2-=#5N1bO2`RT-sAdPK)!V=%()i9O8xZO;#jb1y;5bDW+{Nis7OXR7*h?bbj
zn8sT2$a_J>(z-cSNjY?eGy=a&JrG{6^3z>Sff?s#3wx{z31J{J-1pJug)zGWio3BJ
zGLt|G7ja#`=+}~ZlAeVK&p5=eL(F+JA7g=H2AL;CGJ^|L(=Wy#TK%0@x{u&x2P^B4
z(za&z4;5HTISREtiqNi^(ucQ@eDtgKd(Rm<O6OHMYx#68T670r2<K);=p~iZv_L)h
z>Ab4dR@x|l@R};;YxyO0`*C4k)F*jj^4T1m+rC2nrijzU2?jKojkvS!>e{Hl?(gp7
z9H&vIqF**nYS2PJJu0d-*ZYj%#&!G@f&EQOqDcUnkY6wxAEzrL3%1#xet~R-vZDQ}
z7!-L?L6ElDu!Ko=n$Q?>B90rLHicy$E>H^%PE>C#-f5W+;o&Ry9R3@kRS2mf#f60(
zqDPg;dAjW!sa!JwQd9<{vw4{P9o=e!uLgVP#VOe4!0oFFtrnh7wcsQ`F+RK%AC5QO
zg(=O>m|P(*_#pX<Tb>{Fmhvo7n?1a`N|Z6Pqfm4+IjxNUWyPk5G6tc}ZBIm^kA@Sx
zzAUr>ls{F{<sqftjx%~YpMLqQWKmVVO*<c!=~9ZtX%6p-OJ0dC3W_mp>vzLg;d2|R
z+nizflF;`yg1HLYjE>a7K(zEH+H(C_a!8&2l$2I@!s4@KmmttVYo5M_1CWV|i@Ne4
zk%icGLd}?C9fanK3zKHG6y^pVF!+iC(!^9ZOIZca<qh_y8B953XmZVCI~XH_zK;zx
z(%_vjq6rE{@tX7GhD-9ZthI<78rXs}SB>IXXS0{-Xn|GhqXGU^4MC=1Pr>Y8=y_eT
zofoa-ag&{C>J6qxZQ*J&t2p-S;U#W-)1lFU^QMcRv@}8Oo9A3u=b;KxuZ=f<PVdKx
z97%wW3`Xb2i_@yEVO`+n%kgRch_d|AaGp6wk|jt8?c(4LX;|u9X$naVW&^)gz|nsB
zeY};s;h+kEsBFO1#mI(=pfWczL^72L>I()-NM20*4ItJ*Ly9R6qON<0Vg*w-yB=k{
z#FHWEOO^S&Tl$5weme~x;!fQ!X6&>WI4KiASI{Y)7L8Wc==^+`VqNsT8DkAPmdrA$
zNVZ?KqQ&MX*`Y7tM2dQW5;`iAM`0;rEKAa!VKQ<NZ0E=$&GQLK`)1u%Pa?nd%Ue|n
zmE2TDHQV6*DO};g^%N3FNh_7o6GN%jiBm&EZ;SF^6AN?rF)iRISFb^{3dwg6FfZ!;
zBw7vP18TE=PRr=cc%yY}GTPRX)Tm1IGp_xzhlPLMZoHwHmNkYB6+j*-NuRcCNeDwc
z`lO?kg#L>Dd8({K#E0JvPQw6K$=dX@#C(S|dTB72V|S8j=`51}Xs{+#&^($wW{fsZ
zvE0}bFObnPta=^8hOxJ{AHx@-JGOxw!=9H&dx2#}zLSv@jc9ImB7ugs2UcmlE^W3y
zlQv$<>9e?E7~9t`zhU4c_Iyt`Cw@t4%U8oh!n43IuqK~h#x7CS3D>VG>AFwz^P?w6
ziG|`EnoRzFX=#(|_AGR&pKZO`n05pIhSnM|o0+nJL!q^9{neay?^F0ois_U0Bk^8a
zcT*Za2IlH3-kw8M<VTPo?ncZM7@5-u#AQ$)yU310snKi%-NDwz*e=w<-6fZwXNU%3
zyW(};^qakkQ0ibf?V-kP#l}<a^_%_pC<a9d#?N@qMB&(6U;h0JTHr~Wz{X7YRmsCx
z^?G_zBE?;cLNl{~w}UvJc7mj4lVuf;&<PIw$Y&m>5H~{}!S*;BQ)-_o)o_j7>28s+
zgHbARMJ*xoqlu*kwdX`UFVj<90}z7U6WwDj!M51nTi?U=I<BsPKi&MIY<U+#)>7Mj
z?uG{T!j1Q*W5h1&q&_N%%dpd!J^w;dK2Q7tOyBoT=-j^Q=c__%Ffs3nv8&Y|mTwfQ
zUJ%w(V`Ush-f7miBQvbc1txdQalhn8YH*pV7#w)N(ei%_F!c79D=5DMXYp>1ma+Gx
z<YX$jea|_5<&-?~SI_Cpb_M$B=Ex<iVw+C}BwYLOTYO5`JFC1_uNPcENnR<4TU^MT
zGW2E%>hLzgN5|R0PJjA>W|*u<rvm3MTk=TZ;|RO?V{WM}lyU9?#>WojC-R6h6T#3!
zZL_C44ms!0E4lN57orXvLG1*yQQ*+~jS5AkNhdcDE%3MC7LZnuZ|gX^{fz*BrabBs
zE3sk3+yFkLY$bJIuRki$h!)X(0sgmO=%!?aBi2qgR2`{y!Y}yc49p6Z<bBuQ2_q*Z
zavH4cC{c~c5xask>E_vshOX(&+@miweCQR`xHPM&o(`3DHlF*$Vr;y2`1zt(Z(SZu
zjfCD|x;EUhZ8Eho<WLL%H`JzgmOnO&RcKVXf;Y;lzNfLo6S;s2ljOoK!icQ{Q^(3h
z8RuRND7Fm7+EbJ5Bb<zOGPd0EfWld-Rw^P)8N)UweM+pj2|~&x*oGyNls?9=y6H`O
zvMXu>NV0uaR0WLDidI;xBHR0h`6<$!%lRBo<YHVNCeZOi>DcfpJH}@yg^rjKv)-i)
zm<}A}iy2Nb4rJv+(|HnBZF-F^?IIN3w91mHs=9RS%Eq9*B~_)i<2WUdq(5hz#PLim
zXZ=}wTan|Vg(B`>+<@4ge9%F{?jf~Lu!@iYa7KNBI<86~36e$QvoH7L(M4o^<ZE<V
zOv<EFwTSHy&ZmV5RJFQ6P$AdsMIKHFR2=SNa{B>ER^OZ`Y5ALAS_1JV35Z-*SXiaw
zi`rJ<3|T|D^pcgHHG+M>(qM(#K+Mxc2?a`734AYgKT$-zvedH|#^WE)p5P?rD1oW(
z536cx5yE9PWl~SixPaP1_7@#d!oVWu_y<;memwGk+x5=3U;YSp=^nFtMkB8}(bEob
z0`xe!b@jfuK{rS$<`!VpLli85MjWrQP@#3wijj0yJS|g`S29ML6NZUGPx;({&*ZM&
zko)4-a~F7ovHKDhj&8Fi=jkZcV&1#HX2V<((WUE<hfcay1%JVFPNnZkF<4j6(fn<K
z94)p1hpriv-+Pc*8O^?B=6m(cQ1A%v`dV`(Hg8<J3&60)kxxofVm#04eL}-C)%;$^
zR_<I({E7NbNSb(<G)x^3N5E@Ihsv?Yi#raXI&s#q_sJElCoWu`wA*S(jN6(S&-rN(
zUgpedCz`AwhDAAnziG=B(D&sau(H3AnPjB5mL52cqtl~^HE*u{ilXoCsu%@<@EOMj
z##k9L+NF;k=9Iahy-eJ+GgSWqIV4`_DXSABEW$2vM0EKk<ND}_QxIs^w>Ntt?G;+U
z6I{<pz;J~rsNT6Y6m|;LV$@UI7b1CTpA`-*isrgmJmhP@2vZ~=M;($oJ8YyPY;JF^
zks@{R&a`3u6W*gsKH3tW{rSi>cDCN<g&$5hFi4=HOSPU^6<$$jhT3L5*qBPM*Cg7$
z9bbHl!HpW=u0@g=^}}L~;hE^a<yQiAwkG()y&QL?h5YZS+7?f$HCI%;9F1#Pyx18W
z5%6|nwJ5#7*&CjiY=>}vS_c2BWnNb@fiQ#mnM3~>9^3P7;OpC*@el<73cMadJqeAH
z9O`R}S>Y<2C(w-okb4y>b_4XHXqT7~yX_tg5JTsIXVwc&4YK8d%5tV;2e~1>bRxc1
zwDWREV}Fh>akmP>);@;rW^W=dlFega<_C{23}RrF_2&M`hpXf7ZiL#Vhqj(6#Zc5F
zuKt!2T!W>Ay7{fy$+}?la}0BemoufPCn@KA%siQGR4s?jCa#M!i-O}Ty6vxUVPcdQ
z?ERtTPqa~JJxgc;^<s{IupXU(A2KVolu88X--iyY!G0A`;0j<QoI9uJ*QJZac}+Ej
z$Fe5T+OlsIw``saxOXxjAdNi9bQ&7sz}vF_9!WPy)Py+*)V^}pt;f~?rp<aQD5g4M
zAT#P19OWLhm{06?!nYy9u8P`HC2>mlQ4jV4B!V*d=M|O*mQHUlE1qsz0lba0jyhA-
zjpN0}n}hp2Lqaz#4VlXf!G`Gsb8^SF+s8}%!yaCUNO&ZdBg)Oh_F>(Wpc!4z^wmYC
zh=E0pzP%Gw(ZnXm2($*#o2wgcJ@Lca0nE<%!2p&A-`poaCzI_vaX%8yrjV56@2rI1
zQ8$#Pw^&5m2SUJ*`p4j%I|(ENuz>qxdPB5APJatlX?Z<CXp~VimT78==TaA2g}TU9
z#mh&Qg;(3R_Z|DUfc=L)DhL~0NdtB7aPh<#N)t|*4DCG_>5PHNqyz|QidO9CRH>@B
zQhV;9=*9a08)Ag)Llxqv*)$8`7FMzQ(#cDm_cz7ECDIh3fzw9EJ-}3E?ndEweFw`y
z@3`aPREc}&Z-~K!7p#menq72n#UZbS`V>tqENr=fbxOFhkB9pyLtlQWl0BclO?b7v
z%KDvwt;wTKEqWC3D7=-qlX?()ZF0R*k2@^y6mKip{jAOM+cMDG3WP-!h^J%%2adMf
z)a}T0Y^Euf&n_z~mq}4vN{Xo0V%GC4V!#^JKk3l%hxYj9`bhF&KS?56gN45r3_5b-
z?4SquKN+tO7?7W#7J{qANdJhalvLz9Q}z+zeqtDG1QS9J_zJ8Ya6}HkG8t?H7pfZ%
zH^ioQPIeIrO=K7##u=4WmwEvXwm&WKNWuAn{<J}bvhE#-6dw-PdVNV9#e2Pk<<B(o
zw!}z*FWVArgUTC-hY&;MYE3rmwvE0RfMIJURV|^CIHDHsZ#txPiFX;gg{Nsjfc;b_
zU<Ru~6KwmW-+zS`fDPn}+`@fT*jbL)f_>Ei@<kY;2S~2)0QtfU2?JheAfA@CJ%I`j
zjN9{5SZO+5xscz8EHb?2aE;^wb4kJ7gdn%vs3Fn4ki)l5!Qfa==R=Y1jW4gkhRZ&s
zCmjRHU~i~DB^sqL#Thw#l~#0T3Ht_Qg{gP~gQ+NB@Do5AD1F@(ZOZB@n(l)qcr9V#
zT}yx!M2e?%rUXxQTgyPpr<?02q0R>_AHojy`kr18%{vWok0oqA@k<1P`j~*4>f{uh
zx+AH3H^_#mfx}2e&%Cd!qc=#p>r0T&%rXWuWh0f*^I~yj5{Tvy!2%?>Pin-CIGBul
zwxqLhkg7mg95%R95=`{9c3^tPM{rX`=zEpNsguwt1IJO0?~RUIJa1j1_2EU%gaMo8
z^5hr*<MFR|+D`z=69A=yn>~@1EY@;oI93)(@nIAsy0>EQk~_lfUXU8>sAS?73?G%*
z#nHy<sTXfWb?Jey8*9)FkS72b><V^E>MD2B?}8U}!^{(CB>J??P4yXfc%r%pHi?cF
zDa14eR~@=nJO`&Vbn_J{TNS#4Wh%0b<=~mkFM0C%GiUD;3TH(aM(f~@r||v#VjH<#
zVH<Ya8z6gy_*J#&d=^#-Mr1KdICRlTd}IL&X;)S_<FmFK8<F03%@xp^t;#YTRcy?7
zB$B;cB*Ic{F$5kw<lb%7D1AZ#3DM3XXmkx-T=saNw-NzFQ-OG{bODS8DTpT!zZ68k
z512r#fa7PDVKxJ8ipj%3P*6kRu%s<b;OEvA-?u@`ecG=`hA7gGR$ZDIPD6gK98*g2
z$zh}fP_e14EXN|p#;=WHuL~u+AV@glj3yxndKms<sD<BQy4XtFjv>5_J#dCxP{&;m
zhlYLC>^~B=lvYnR#m-4ojnoiZS^(1r+Z>9%3r4&$ARd8NM5eCAhCUrNmOb?OL-Og&
z`qWoPLf-B4-J#^3HXBA~r1-5|9gUX3_ZG$#fc%gIyC!-BvylzU4*FW^Nqq9H-??*B
z4lr@x!K2QYiEm-^%}#-?+M;uVLJAS&Kw_LB*8s9$$)ZNsN<AWDN?-0$^TfKsCQbW8
zAClH^q0%LDLO!r683MA!#1-*X%{Bj&=X*}19$Rwb#m+4PECGq`0X!XY*(4u&%_Z{|
z<A8v+W*3!gVfDN}!{+w9{eVC`)6`U*ajdRX)igzoxobl*$pGM%i`6KAZGvJvRw*sz
zHSmU%u3zx!cS>FQ+0S4lVzrpX4i$$y^rC>UDEAZ>_*Ce~DoTY^)<khC{&k8)Q9qq#
zalh2ol7J8z>@a-`J1;#{1Ka}ZbJ%i7%U^I0JEq}JIqD#Xxt6Zab(Zu)0SN|6V4(QE
zymg~ZOuTkOO&LgEM|6lLzv{!kbOW@DvG|oO2oH=bv|?FdSihl!<7Vd9o<2(J;eCAH
zl#o+o<yV;C5O+O#r|1t`xs>CYNHrWHOJ72>+Bq)D7QGsE&f7!WoM7_VO=$o@PO!)6
zV8E{u*$^`j?4QIyTPaR+onkZrGA+|CKyP(+BzSol$9dkG=|OO_m7QDI16ko>+S)9F
zZm?Mn0u~3iZJd%~+WaY+kMsrCo4|gHw7Z8iR9VkK7DY{rb}x<UMCaNA#rz%YjV`);
z;hUFj8kw^>pt(BMR=<?&V%2iN-pA2?2Dja^@8UY!rLWOi{7l9{aZl^Y#eCO=KL!iN
zf#CCV(gi7;XzK#Mq1qyXs%EEBFkutxUYQAz;LQk_;Zl#wihnZ2G#n-t<%~!%;vsK8
zcPtU}(ssQ8yf31UKU|`4xIFKaMZI5Dhec_hdHWJfU52Of(-Qh+ZVFz+(hZTtd7++4
zMCErAz$+x14K)(1gXWoBMi}#SW?3X=Zqq}nL&31oX0zMF(z(8bD{cJ>wmyFIOYYI^
zZmCY;7hNj%(1~$%Wz_<2gF3M^H2ok{O^o5;Q@s#d64!+xAJ=qnj6;7)LUTSh?B~UG
zZ&ptluyd?a`vo&!t*;n9K?tpoVjjF-)CqIUe&TOcX=Q&`zlf8`rzvxgz2gf}JfLAe
zs=6$du?==q+R0pf)mVkM%x1+GJP%-yRWUYlHKOCWNPR6b<F0G-IyD9F39MS8Nw3%D
ztX+*^Ze*-#5?d;i6@42(kytJ%*`Xaza`vym7!WH6Uw#y$saJ^`J`AviOOPh9q|YF%
zvNySHqZ>fDLD`^y%akfoH(*`JN*!dKs?aEtr#wt|GC(D-<Y|~iSwX)EZd;_%GHds1
zw3AM^czzz;r)`1Nr#1`Wc>bz&s#26FN7>;M%~xwB1Db)qjzE|7#SgPv-ppoH{>3N)
zJV7jA?6ebGMZ8L$DyzODq>VrAM0tt&ovF!Jk=TP$<~v28m(os7iG=1I)C(zM&hv~$
zT+4Ypbqi+JzJXl!qL*eoNEJk_dfa9(?=j$1HM1`LV6fud&O9a+@Gz<2lWCLRxTteM
zbQV)_#LbO`yvnzR{eXEUXhz;@IRBX(${SCrgJxxO$rLEx4fR4bGT+EKqdoZGY~_!7
zt41&PW6+EoYb^om)>Aaj$P*GjbwS;UKF3dMxZ{asjfpDxj;mhJCtbqTUYIhhW=sP#
z+|z!ZM1r(W&NEz)ox=V`3{UEOR4%_b6>(M;)E+%;14)WVk_M$!La7$v0k0@w>?d54
z>u0LQ_}K**mU_5&EqqP&B>qGUa!sU^NYnt1umiddOtm_N;ixex7TlQx4Y^R8JnLb0
zs?3AF`MIYhlvcBDrA%6O!=lgp?3vzCnftY4PZl-;7+WNWHP`q|(D4p__Bzd)>I!>u
zrB1>0{hYKN8qWO9UXXztxJ;*Bl(Q+<HFec`{386D2Npjv%in9pmG^Qd2y0J5HN?Bu
zMr3=Yk@{1LT4VOUzA!$J8X#Ri7oo;3M|yd%!;4DP$xF!D`gP;=z{NLSsDt0sD16rq
z(HyCWsO7j-Cu(hD#O7nWb$^hi?zs83LTw2QE&;LhjBNF&w@d!^2ubz0Df|XjDV0n0
z7&QB7cC{~>_(ap1bh(Th<T>^hoa$Pvs$QRwJ~5aIp~cGf2>F~v(Q32f_bkf0G-hV{
zV#n9-H{-6cF^l*VdB&mQMj5sKY2O_>mz7BKUGkN07wc}3BPYtNavT<;&?Nl&u1yqd
zN+miPcq{LvdKi9Cb#QyxSv8mIU}@I})H2UiLPfi!Ld=d5(QMr{iy*Y(v$nw}xQj{z
zjT4a3Mb-+u3Ze_MCrJ|f^QRuH+D4VPtO|7xm}h#=SBk_76Glo<b2ey`;~EP&q>$^<
zyS&_P#OxZ6s|z0oq~Zz-U6SeLG+%j&2c4nxsb55Zq=+T@%pPJ2Kfs)Hb(Th18i*tR
zIRA3SZFO_w(B@d+HV7&0KfoeIn!}0eFdDuE4mj2=m!RY1raHJuRBy4q-Ye<%t%HJa
zP$0hxs%>$>anf)D4!hBmP7PK%JkWipHGy%}Q=JVA6GgKq$$kW$i6Mw?t<jCt4+-t~
zIz^^h##Z%1UChg+@*)k!3?>-;jGT9kVE)QY_ffUnsm_e92Id=3whp$!e!N==gB@^j
zb>y8MTr=VcQBr1_u3qv=@Hs9@{ap(~>P6AEikRtkW?_C-rNuLA>3bRsId>clFyz84
z78rU84=5-b6<I>63`(8wq+DoHC)@~E&TM3$kIYplH8eiknv`{SUo>VjU&YbJIUL7=
z-mIG;ifb+oWf<$~DSqh`&c6sCrkN^ffFI<J|DMU#mDiR{6~!|Gc3`2t)#tbP4Tsdg
zLVYE}%N4}(sHGE)^PD1f=sd|akAIiOA#5Z<re~#~hIkLQIo-!2xEIleyd!`!Z5Ow|
zi5oTue9YTZ`1M^zs#q$bvD3c;O(ly-GSDN@qx^ndh?H@=ub-58ShTGo9EXVBCX7dI
zi!*X!V5!I2*Fx`A_|iW*JA^X_iJPLNq*}1X0AK#nxwB}XI0bl}C(MS(zE3mUgBwC5
z-U_jbC`(TyHmSa{%_tx0tbLwqq2<%2<MX}T`<DTIU0N@K>{er2VVl{hsK4W9%!Ujp
zY^0e*H(Je_yxzt6uXGpcNJWdHkaeH$i(RgRTU&bK@sxYgK&j#2_Tny7GLwyKd@)^4
z8@y_;-t3Hn!t7#4IKhq<PiZkrwcA2HV5jQYAthDOOBISDFwUxc()&>%>x<STj7peP
z1<P^neufREcFC_++A(KIZcVCUEL~QyhTX(7-qIk(bB|{mS`BGf|LA=6pgFKjA$D<5
z^tDDFnt_F_{8|e}2AwDmIAN(sa1A>zT>J!~6>M#eI}zL8#g^Huppnd-Bv-ta$^u}U
z>KFit91T*Fv>pbOM3lM%aAmufc_0iL{Mj;bX~#Id9cjq$yl(a=HFRwm0j~be2>k4A
zbgBAr&O`zl55zjvZ{JH;8=TJX&!fwnC5Q>tnspr787*wSh%v6MWC4cE5XZf*<3)Hp
ztIp!z+~DulH^@2O$&&DnwL<mRp(D=`*p%bhDjfD1l_f*LTBdF?*FHAgQa#P~^_=kp
zQPou2Uc*K!tpjQiX<+=^ikjsIpGwFdJ_XI_6GT{~ukd5owLRP{v02Fhy43AsvA~9V
z<lIeEzG4y&;ZBu{0!+y#zW}L#wPg<$z%%}FzEQJr_!wexXJvggeJc>)Q+!?pYE6PR
zquS91NmF%=I5VMZs?+?z$%9;<RsC8HmuR6W_Mw&fjT9C?LLUgAImfZyX|Ky5gA_=2
z@yZeQ*$Z8w!)Li${kUdqN6N_jX-TF3;<guRZhIgQPa`8dKt{x}(VJvwr13DuOZ+>l
zOa2cFi#La>>J;%Q#zMkj*$RNJRZ7kH!ImIv6BD+Yya!nlZ)4tc^yCBTmEcV$7+e_F
zD-}N7LxMH@#phdmq*2!7#Z$TlWWDL!9S=25x6h4{3``F?4_w~B$0vf%#D*1YCE2}W
zy;|{!xa{|xt##(?W)Vne@a!$EeA|0SX|lN$mEGBbJV;aHA@lcAP%m!X;5|&sILGMO
z9}OuG-zP^+!b;=@hMo`7i2NXn7yObTQB*b|hO)8<i$VTn?~93$>n*ol-p}@d3scgy
zsqsPQmAQlOad+FidVm5`!@{KZ4)*0+FgV(!%aykLBv77YD4WM-h1_i9bb}807+=95
zI$9YCEiav-#qh%S;M`0;i>v%}Yt+aTRGM>|_#76RfLQD+7g57!v0kTDFU~w->DqXg
zoiSOo(|jkKT`h*|Gp`isbpaKz3c39gNU~0t<cZm-Om;6?CH(du3t4S$cqYrWlr2*I
zI;RvMbyB!kCP8dRJK8n7pdH#~v<+Q5dGl5=`t)*Nxv|aV)}AVQ9naS~&iW<NBLtG|
z7dh~SBfi3(!JZpI*YbhfZGM?$G9Xb*1gIknfBr<AV9qG-wBdy(ve%l}9N9y!na+7p
zT`|!b#*w&@G~ArU+Vsv>5D70?<96>dxz-`Sdrnf0Zt#2g_^waDR{=|yMs9#QMWLaL
zR2cSBB{$5u*oC8BOnxUtqLrKCP;&qaYD45V69A>gegZ3FWkdztw@2@6*NP#wvquTG
zJ>@<Wr=mrFE)*iHh<KDaUqw6-6D1^od61vTR=;f<YRcO8CaP@kR=TmoI@5!*&v|e_
zk)KUaWoHl&{`d<A664Y)d;wGEBA|3&#IcS?xBu5QnP|A;mey?sf7hrU@x$XI&j81c
z`Ef@*VZv8iTZ394?Q{B@lm26W+6V}S)$E~BG>xtrH1aI*uaZYcD!q{czquEV_7u|R
z7A98UF&sBiY>!T3{EwpSW!+x!_}&eynsv@2YE6nuRrfm)EwG$feCY0<zK^eegke{K
z-ro3rgkcLnfPhf`bBL*&w5Yg(s`w{+Gkq0Z$2De*fFn(U>qQyu<p=AvTxq#$tld!-
zbN+}SltxmCHnzpUZ>FgY7Zen34qH>n`5_#sNoNv>3jK&!?Je3i(~TO$e8^l=jQl@^
z{9bOnem{W-eb3Cq3rKhnzrVNBp!1!dwq^_Rn5C_KXmo15-&W7<>!*V}1d-QVFO})T
zuZq;<rauGro%`2A3lJ1XK%ER!T%ml=4*j;MvEu>{aIKi**cG<Txh{h;eChL??QwD1
zQ~uqZ^XafXxlG+1*(ZqE7r$TpWjc<i&gJJRl@Ue9#||?-dw0CA|2(=VcOq^F2rsW2
ziW`*^YrSAtAf|o(h<~Gg=I2`QyMVhDw_;p!`H;lM?;)!G#3<~i2?kqB!})zKNWssv
zC8NG4lP4|camUPSptS1U)`${VxPi6bBNeoSvU<5Pjp|uMYeUH&{W(*)YaS01V+<M;
z`Ee3e8qo&8^R^7#@j4qME_^v4Bf4=M-}(~}@22+#Z71LD?Dk)_4he4>Y1I5^+r^ZO
zFw;VWTH-92sWE@tLbS;>JV}5#z^IH80x6SBpoO%PDL)6MhiG6rf!gUG#+f8yTKA4=
zT|>Zk({l$*Aqbg5q!WPcKnz=9_We*Rqh}ZkIgq<V(_+<zn4}Crqlr#p*xVQU+=)ur
zNHcE<quXRcn-tz)O?s7t>HE2`Imkx*hF>Kau?Ab&aC{=)NRb|vzQ7VA7d~cul&n&d
zjy?S_tR8)IG>3oAYZz602q3-bA#Mu)3+7#A%nQ}7tUC#80zx0|*Ol7@T@DCp9b7O2
zq~sF{wE++&#1pcoB&=#@A$D7)iVM?!IYl{zTmv&f=+oBJJJ^2*Nc-9;%+!4J-Zdx?
z5Q=~9y(;3uV)B1=-g>nw+jVA?w}x-K5wsM==>(Oy`o`yy>-OOu_+_TV10*T+LpEj;
zT3<Hr8Vk*M<W=xQMo3T}7JRR!D;FSv&f4j+W72hHbf`JK*@xl}m6>>|$F3q`ZGF6$
zdQ^Du;^#!wV+n_$ob+Q`*eN#TyYCWf?1*izzVW8%$sylmySBfs39fiiX6D)Savh3f
zwVITbCff`AxHob1YqSk@wEZEGBW2UUX^+IIXrx{sg`~rOIWz1UqsAgEO?4xw{CZ^L
zhk2+wyxmTh=~|7Kg=0hKU&SpiN!?X`6#%p>_=w@3IIxukq|X*Zltp>JpSv0Ov&zv)
zuudFOc6Ro5JPURXXwOU1z-&uSP3QojikUJ%*cCrps>yU@$rYuG3d=Iyh=0wT)5Ay?
zF#eGDg`~IY?ff{dv?OJ(juA<Zpk~%ImxvdXJce+|xrQiSwX=8%6_(Q=$WA$2>$=_O
zK$MjIH5h@RB%|Di({ct>9g<*yI~??8C(h5Whdc<mw+bwEzMAv$LpUq{7A*36kdPB8
zF~QjK+6#shVGsxdljn|eAzqv=aVdnylXxu7ze_#%zR+&fnVRF9s4y7Dl%N}kjh1K+
z(!OIv444`eY2}I|aLy+tatDr~wBvK%U|l8XiB#rxAg;r$F=O9(4`B)Dmj)nSuh(y!
zT@0ON^6R)YM%qWqV%qXOPu6Tl`){z<Tq$ha*IsyRRkmq_3O67SBW!;<*cLNdALKy8
zf!C9FAXSw%2LR6=zW73=PhbL}m)*M#<k1By)7c5Vn42EwxH+;Bc<a9rDSB@B!}$8}
z9A^P@THSX2sXU&A8QsLoz3dzl?{8avB=GqKuFT1k6c&4SU#IpL%uhGv1~+lkRwt#c
z&aZTi`(ISFFMH0$rv?(?;=DorcVE9=qu($27^NdW42nK90srkr^tZ*(zx;y!LkwW{
z$<4J#OV)9Z6Q%b^6KDm!%FWS)jXhkk$+#wp&6pw^+^3~FFQy`&N=G{;z5ISfC}<`?
zJCR!=3^KAf>9@tt%{IRK{2Zf~`VtqRi#JG(ip96hGo{);6`CIf2eludJIWX;PLq}N
zWaJFVl%2#gX2?c@{O$FQ{8zAF57|@8EY<xChqok!*#61ogU7G;x3&CFla(LadgowC
zTaW1`uzitByQqL5Oy)YwI4k80%Ec=GWsMTRJnB6br%Iqwb<pecZ6O7ASxiJiVHw|z
z`T^^~b@DcK&NMp7Lm6)KQAi|jH$^bEseJ@1JvFysCymGM!u8iZrQ90RXAp1F&SD$;
zR7+Y9|7l)tNfqAS9tf@zK|H<|7jss@Myb@$Uk2o{A(Am-C>4C;ZbjTmuyoY4Go%q%
z-INCCO<RDJMGL6vEb5#H%!1`hKB(et$|4CU)*+W4KSGuXq8O2gyBmVPeia_F!<Fl2
zBZ0ASx?L+mo=!O#gq*O0Bfv%j&wCHewCjot4SHq$jn_B5e?W9IAy7B(&DkJGEm`_J
zXFSe5YZPsA)Ck*|d6-ijGqCU+MW#50sLT~sA34E=lwsB5oJhAxgpI+bNs9FRlgMTW
zf(89NAQH=kiC57kJ|u>0uWQiLJS)T4I&YsK?dFMlgA_xTY(ZOvC(Mry(d@pMSHg$b
z#~Q~afcQ0Y`U+tBLNT?oucb+$mCF+{2sGJx?2o#7iMZ-#-%|e-NZq^0N;ypHqdh+n
zEzKlJ*dB^0YZZ)z&3k{CumrxyW+us@Ah@z_d*x7(Oh!!*qff=niOF%U4=T#m#dhgr
z2xjV|>X5g&oo+`K#l;PI&s$p2nxY`0gf5=fOBjVW%7%JhT2s1VRWH#bn=G-}^O=i;
z_o@-<B1+CKP+bLyJ9CHU0L7ax%rf$LF}Qr-1nK*7ZGzr#MYh9liPEKMi{+a+Oan=H
z*JAVU)h8@2(zMSK!@r(e6xwNf?UzM$fAXsjke13Af18IrwtwgTrrZnTifEKbha|CA
z6i=i#w|K#Dpq<>_28<}q_FmKCr5AWzm~Zku?ruNW%5BFudplu}E`{lMIi2k-+EaIn
zw1*I3E_#i_Juk6tB~$3Iv<)Tdk0_hTicmv+Egz~<qjhdm<X8}PzY^&%#;af5Kwg^e
zhIzL+>NQpncCeNDPH#x?kuc7Y&ZFY6K&wp#@TTKM*DW#Z-g+%=CItu(I{B96#>nn#
zxIS7f{Oek%k}1q3xIuO~u!%TJEXT1u6f)4Q<Vvr)WE|<Dtealn{kOm|=6UNhCwIxu
zNgQ2mT`q;TIpCCc;*(^Ae~<syyRpeyV3c<mu548zg*)YTVDt}Ui#rCuj9YB@(4B3`
zU2yi2_;1C2Kcpa@w`^2yV#Ic9V=5DALv<-_K5lN$i)x|I-z@L0b`j&kmxxU#Nq?kn
z%I<LG`)qH?1#7=W3%`gRJRlk+D;GxHTP>?UeIyaO8c^H%+=Iyy0?$IcA;T4Sv<Z?+
zxZn_Q5k3=4i0_E$5o5x0p${!{9d*+LFp|%jx^D~0C1TVvwSC%Eph7-Hp9=(4k_815
z0{?$IuYC-6|Fc{O|5g3r!}k9^^)Dy3zsrR%{m0>do%;8n`A@(8mowYn<wDrt<M98A
z_}94mPau-NDIfKPaOOXQ{+DmtzwYesWY~W?xBU$)3tsyFp#4i5_Tl69_eK7V{WHh*
zzp)|c|9H3m@h|hQjN5;b|IDHEZ}RKMQsW=m@juA_60`kD{!={qZ?ZneKa&4bO8O`C
zPqp2@p~2k$2>m}U_b=_;pY%T$TK}f+oBSjF-^;E)k$=v9|BWm$|3~Eio(um;{Bw@+
kZ(@SgKNA0=3I3XKD9J*8%*a7N5I$bB;2<Dg_J4i)9|%Bf4*&oF

literal 0
HcmV?d00001

diff --git a/.yarn/cache/@kurkle-color-npm-0.3.4-fbd637031f-b95c6abe02.zip b/.yarn/cache/@kurkle-color-npm-0.3.4-fbd637031f-b95c6abe02.zip
new file mode 100644
index 0000000000000000000000000000000000000000..e4d1e3fd1dffa19ccf82564e4bdf7124f56da045
GIT binary patch
literal 29456
zcmb5#Q;;az)*$M#ZQHhOSFKvbRkm&0wr$(CZQHi1?%MnO{m>oJC;DbY=FEpVGBO`#
zM2>Hcp&$(mf&%c*AyB;x@$b$5Twwo>);5MlI#xD@PL@Uv^a}sisi^<wQ~?VodkagW
z{}O`ze+x0Nv9z)OFM$OAJ<!n1!SR2hfdC->{U}8J$aD&10Dux^007GWhv<LbfX=|&
zA&c9>U}3mEC&p*!`4KS<Lp*sWI9A$YcNQoJObWV8zCB*0K9mMivUx1;?ZySK!+n+P
zQF~sbqk*}h;h!@md-JWF^g8sX?T?9S9oOAF$JF5P^>YVsAbq%g(u|y3f2msKR&@%U
z{CTR5iPXDvP-^lDTJ#mnp!`JzHDxwXayV&oW`)|A=9_-jD;4sPP}m87H`)x5JSpdV
zc4MV(maAwYSwGalVv?OW$UOD@WjifjQ}{)a6mTA2^?c>%(AilTht$@~ICb=(%MRpL
zr_7gA<)G?nI4|h0{7+)LV(fO(Ha)ARp~+igM`J5P!sE@^Bx!sOyCEvkjHbrcUM1%J
z_Y2WP{Mf=}js?`a6&)f~yV<#?2p_iM{hWvP&MS|qjAms3FY!esFfRXSd(wNN2m#8M
zKUMXN(t<!10p=(~zlXS_2gPupJGfDNAh9u;J6Xn{5yhoX$JZS}D17G7O5g__)M?tK
z-{$s(5_K=~VKE3K)&|DyTwZ~xrC*>IZX82|bL+VK{eYa+;@hXs(dHAd%x0Q13dd61
zyNVVLC$jp{+YhT<xV5*|8Ku?{)Gu5pRd*f*268Sjo2EtJ12Z5?h~Js#ZbJKHV7T--
zkO!hMrUpxihnX3#L&s!fxb(S@7ouGulmtF`J$>K7Ujg2Fc7Y#bc7b8=2EaKah8-~%
z3}kW`Q4PRC-5lg6S`_dF+as)7JPcnlzjZmV<cr~Ze)e=?@bIUkNpSokngLJIt6$|-
z@$prw<hqvTr<^r-TnWG&7}|wJ&I1VRohjB2qrq0$Kz@Cj14hFrVHYamSIV+m6x1j(
zR)$+ECptxdGHQ?0sG_|>&m4*w6RAMnf+(O%>D9HC>@iHJMFRP~qCaOA46caFjMIw1
z>;k?wl)=D)r9n-1RSS9r2SXAQH?#^2cfH|EnQT(V^?Q++z>jT-pWhJru_g-XiO~E4
z$5KW>kMePdfnpaLLQpy%z+MSq?{adT^4sc(DK~>FWSlL2^f(RRYS$3Q#}mR|nzIPV
z>EEq_vhoadX3A-SFE1GCS-%*gk-1I0Gbd#9l(MA`&r;khapOexBaPdc`?Ub1BUmXX
zge)~X3#6MHh23XzYQ=0@?$I<V8=sl?<i`za`KAdW+cyLR8R#5yk1!{bDE*6;iudhl
z?&yv9^!1Q`nJDIHO(&x2V})p^@u&8C^hOQcC8pyX-p6~hdD^%eYQqHG=P>Kdu4-??
z3u5;gu*zn`<cfLsP5dJxp`Ge}bxer84h=W%U|#5b)?73M<b!4fUoG8zpRS4@47|yh
z6xU8v2Zjlu;{!pcJ1AECHzIHlP1|Bh1GTB2D@V`_D%g8;>xRY3q8FkX#w4(XkPrBk
zn*k*N>yqfsq9{Mba_AsdoD%ja%1Xp%tzj*mlHwY-5UgY--`CX@RFji*UUMzLVh|8V
z=<gMdO4wLPgbxf)4yHJ3XrzvPz(;F;9E4|Gh|PK9l+|$V5*c7Q_2fB8piv^)!nzy4
zGq1UjnY%hYur3`D2a?{k&HfsXnr&N8s^%BxO<Ko{0nG|_CT(i!fJw+;$OsMa%vWL;
zKjG2Q18Ie^v3j9PgcMhNEzt58!FOgxAbdU99aFTu6SdY}LSney-Zey2_ik#T1uoN2
z*a2ICAC&<WrnJCV5B<*4ORfRX>I^`1^J*+1bBGsgO>^59Y+Zm^C9Je%wW*NaeJK!z
zZZ8lSTUtYh$W{)PkyMzCZW|czIEFh?7L{~*iI7|rfO{STG`s*eJv1mY*7c--D==ta
zGQkSIG+V#tkG8U!Jm23@mU0d*#wYrIZuAgQ(wLqH#UHLr(a6yAc9NN0V#OxEz~LKY
zv|S1^yAd{@m;~eS=79-<Na26D92VFH*rpH!tWragKq)Of$g^V&*ogD4(~p>{HxR*2
zVsF^Bdd39A!S!p8B)4Nsr+k}<`-%zsin}h7m-EXSKm$AZWW{n0@I9T)oaY&>k{IGT
z`TDkH-4-n?<y5Zym!cSZYLaDDt2`c%>_O|NqWT2sq$SXFuWivCA~8(eCDj=px%!MQ
z2G~rr9b!<6hX5{T+;$W!>{^W!EcDdfxncq_DVfJ$?`w{2LFe3#YGIV=REVe8W#`SG
zpCvC$?+6>s#~Xo6^aGAJ=P}p8s@jVlYG5gRsbjUq&`2ep7*f#c6<W0hGxH{G6?~LI
z2DQ-><r~&??@}R3i|8l?8L+aEKv#sypB$r9*ka9B3ew%s)<%zOqm($se-E2q7hPu%
zVhq}{hhBFhQ)5<I4IWx+Wg(yAT+2_kRNC;-T667Z$iGdsyoS9Adnm0oZZ`fbj$!NL
z3t0cGZR#tceaFPaTE8=OaGf`P-@%RBq0m89b_Pim*FJJ5Zn{Pd?c`z@tGNRg72Ov+
zAzAbY!HUp8;5%oFhfCGuB@U~(2ayte;=M`HeEDtx%7&t@rs3(WaH>q##p|A-Q}{{o
zRW5}7(LHf*46S`cdMi|O2PBp3`i#UWJ2~N?q2djgZwfaM@`}tyJSb7PM^k%ek2g^r
z{Dy2!u;n**lW5J!t=Gb78ppLIN})R8<$A<-J9k;7zz20^fCM6ml|=MXtGFug-&Jh;
zPTj>{MgsH`3piIaJ_%(3OXVjx^;xk=%Mf!=MnTHaV|e8C7vZcWmowi*Ov0AFfg)(G
zCXrA2(N81eGib|}cNi1V+!U!%27C&0)I37iny~Ue$KaYLWNp2m>E13blYe(4N5%>!
z&p{tF!;ncT#LF44bnTd)lCT6T-nNjWy3Lwv6o1(3au+0u49J^$A_-ln8V}twWx%D<
z8F--R*0+*%UDZaTeLx|7?Ap$qskKO3RC<qFmC>ZSXb!8m*t<9xlg5F9F*IbpWOs`q
z&fbS7?(&lHzeUJxU+`{<RYknN-MR~PqcM7Ija^Kzy6Dyx#~!K-9*DcBwXI>;ATlG*
zKK>c^2t<-C@fs-r^zyv0ki#M#F%uccloK}?%O#(5M{3;;RR56z#+P~TM%z`zOGAd)
z4I$)7#yUhVyi43ENUsZ_jNG~*9`$Mcll6e}2=*Izyr#O0S@mKwCV6wkG@Ku6Fl$Mm
z4F6pHx~y!fQ1Eeiiik;brOyW>Qm2cd8X1I%fEDCyqx1EOkgDH~ta@0Je~S2-Lc;;(
z$nCmYYE0}lL^pzk9%dxWZvK|_BbeV<G-Y{D+7<xlu9l4L8v)8fYX)X9+iH&ElVBI}
zm{IjLg5}rBOv`WvYb660uB_JmmIHr0q-@6td{<tH9$~b;FPUgS6kAPoQxP+{L6~2a
z7&1}#(ed2_jFnNLm|vwp&j~bHQvjiG3naYpCFnYe4;b?U9;jgXm!$outN3p+FQ0rd
zr4>9)xce+;W@WHSmr5x`xXGMH$#0iR*`65wNHHWCE70d$KyD1N-`AtW*j^@?fP)Qd
znA?~pww5b#ScSBXOwTA4ds)sQcdkrna+v*HO9XCr48{}9U4ZoXH?9b`@^PVdjY{j=
zGD#lbFHavV)32Y5F&oA~NppEj^F^ML1p?CgVm9X%eWr(RJn`%#aPouLxKx^)IQ8z^
zmCI{T=v`($mLG@DHj!-a*&Fx?)7!SD7##(W^b<Ds%FcL9e*o;FbbD-HZ#{5=wiOt3
zGjLvlk?Yfq4#`_7>XGF=78u96dFVS^?8m5;df&Ch-0Z%X*ew!?B$LZd#y&L%H22d+
zqdaqxudk`kEEqbFju821tQW7rg;l76Rj<q|1wdYRI!bw6@^R+nQLT?+>mcrvzr1yI
zD^+y-;lf_dgQyJr6wUj8`zbW5hPE$+fyJ#G0+>n(Qw{Y2={d}5jwN*_Z-`Ulx$iE_
zs>)|qFAMe_B-5?!N*P(C-;LGE7whx%Ht?qJDtC&>esni_%`Z}I@y#?YQCZm!(<yLP
z_P106ZDGHfF5WauS!iJ}d#34hs7px#RMT`ecXoRBMM&GQ9ED91;(S&n1ch;9JewvK
z*^GzrI%Ck^)v#(a#0DTbDRNb&w+=80--8~SUYZH37~%2C%~}-lI^yII-ihfs0&Dfc
z`<X{qOYmD>5_2x@O}z4+`UOPVeIUh>pDoj{vMe~g`0@k^kTJoCA%_Gw3kuGJV2x}G
zb<KiFHi^6Wr3Wu@+>WV*J5oj@9(el*3>fDGs6T`aSN7=I!(Hr_kb}CR7HSvnnJX{G
zp#i=zbupb0ioY-!-xcz0m=7eO<TFIkw(wpUg1Qwb@5nGq?5R(dWSBSD7ggI~Kloe!
z?oexR#M0cDLjkYVt@)LO<vjQSm#tiUo1wYIZTlU<a;#nCjg-3oX6o;Qa6pv)fC(4Z
zV{-o@pv`i+qx$F%r&jj1-$jNt$<TIgY#zi2CjVP-JEFp^gKOMm92Jk}GZn>n5&dkb
zlh~a&%CylrPIHg#X&;Kd*qyjL&ONfELm_9eTr>T~vJ@73y&`Y8v}HX|&+7yx(78O&
zWLOF{wtw=v3u>K~DeaH}BWYK35_Cs%-{;|Li}u&9vUrO`j$ZtCKw$L7!@9Qe{*byG
z48g?+K)p8%0rm)hyZ@u;DrV#J$&u{1tW|;g_sz{z6|iN~k-F20f;K8nCqD<oVhSv|
z&qXs}`^Tj^vh>qX1DV(P>x*3Gu;+dvCeF3hK!}imRjnrsE8~a)HjjV5w2@bgR>$zN
z%Fv<bJz{zRd1b36=DlY9rfvdSwyN26+Fo{&=SHx67%#(WULRb>sx@v0kAMSg^Tyyd
zuj;sz1(ft}dmC;!sI6m0xwlxr$wYXgj1p?cZvSE<uLrY*snc1*1=y#RE>6c`p%NO`
zb;s1e+H>@GQS<6t_I*B)@@lIW4=)cOtp#p?5^g77(ya0U`{)q8u4-9$7%(f5)Aiim
z4vEm=qME3B$F>P)UHIU^N5h=5AsbH1FGE0R-1A)HhhK`NmPz|%k)Q_`PN$v~#NorZ
zAl=M<)3i#^`c4hb9d2i{mT(tS*V+vpuE%$VO%hcwg><)b3R$ClbZ7cSTXe7@$blh{
zLPQYKKrJM;@W`zqyU8HB)+E&|r-7uupnzH?MwQDQ(%$8@c?Zq{o#+z)DuA5b>O=kV
z)vBMTkwAs+!YiEdfwL90yH1x40-QrUPItes2NAI^0cPe+@>i-~m*k}KiuXMKgj-&=
z`2}LlQxjGPbGT=f?gS3j&J5{Q*EdSId|pqI05i=LFw{YS+bHpE&35&{#2i{o+M=cQ
zhsQ6qmre&VqIr*>%F0OiXuVULZM8D~YIZy6r#Zi&htOZn0WZndA%!Rg7Rvibn^n3^
zA7({0**<+@IN>sY<0>(<o6NUCf=STd#NqNW8A1|0VHUpGN^CH7-({zXYSb4WYPThb
z>22E97`@cfTl*|Orr=(0Td=H*<i=&SHa%SuhIyd#&K>bLf*D(Wm8s(EVTJXNcaW&&
z^&}Q|j2a<ch0I%eV8%7BQ7w1ZRu!hY@oGgMuHc2W{L`Bac->`JhH==qe91t84|{g!
zSEZ`10ctTVR6y;#BAVzz|3;)OJ(C+1Njy2-^KNd?h`$ekXn8fM9F-p(0hrqfKVLmG
ztn$2GjnZ5e6;nA$6Y69~Eo~rC-2sS;eg7V6{zoiwK63o&;{n(&RxwZco^7X!q2v5%
zvg(qmk-nCiKFr!gHGgZ`8q=%s^vYP=5*4p<(W}oQoiC#`#073JQJa$`{q{RH^xVqy
zU85u{tODRgT&&Ycz_3$0$IKMjBjOFal8##K%zcWC1++%oA{ShG4-PlnTwQ}8X>n!?
z@3A3B`&2J<kY?~)FpOdSwL4#Y2DH6duhA*c`{kF@X2B3ti(Kq4A$%7M$H-9^g~-bG
zi4~ANK0!5Nh!==WFQ68&-D|{LB9+L{Gru6Fn)OJn@*x>)$}8U!U5_@>Qd0eOA#3L7
zc7r8JX;*O#u#|{r^!5{lT7!eIb$g!XNeQW%BX&dknVAXFvB2;EFUr+OV-;F{b3P%e
zwj_8T-zske5s@4tT;tlc7eh_hBeZV!9#Q(nw<x;j#6FVsEj}5lWubD|lJ;}OrWFg-
zc%#gbxGBbQ%KOjC&@(A-wVxj`pU<E<aw-w*)gAfk+QY}0JY2BE3(Q==;3tw<fUTKl
znUql~GdL;o0oDXZ8O2X^F<0iVme<WMpaM;xP-oVbhI21<k|&?tC(^pdgOK|pVaT#N
z#u^+rhSD2WA~j7u?Q&1`neu0z6+=vcunE2&ew>p1!|9cj6nY<CA4fO06Oob&!Qw@q
zq^B|`H%ZEmBht&%WxGu?#0pG@%SHn9R6QZzBGhD+EVN1odtCGesdBjqL(v8%ej*I|
z#0GOnFp3)mW8(^;Sfm*g#CAqk?5L848TGUfph%su$w`MaIqK+S$LCoyLDPIIf@Bpn
zptT7lD-|QFtYs)h)zC5*Gv)>@;!rXMQh&^_2_gYAXA}42y6$0U_xDDIxDs{3BIS@$
z_Z_9O_!8K<2~UjlT=xL(t{>3<z~KMlHXy8>4Jsr606|6o0Gj`2ZZmSQqWdduTpm6f
zZ1Fxd{Gjg}&Bgj+#icD-iz&_tvKfVvSu9(FOHBljijfqGgp_05i#uP(fVYH{ayRE<
zAYjY^eY(aBu9@2(=MtO9KTT>U5h7Xd>hVYV2aX?Gfc+;%ZB)~8@&&D#HC@#?wDK9L
zKa)u?$xw{6J;a(LxS=`A5kV+30MevL8g$C}hIv4Ba==Lu_SJ(C_&cE|bv5%qX7Vxp
zPUk6h$>BV}Bo+&ZInjZm%5BrX>k!HN&)|l1`Z@XAdG8w<DMXRzhlKU4EaO)7w-Moc
zkm(IMZ|IJihJrYTmfgS^xK5nlsaH1k;45ji=p`<k|N54l<(?2Acclccixc>nSwQ0n
zht>R}bl3Kr+53^)9<-MIN(XMu^(6+WRaoUyM`A^dNA8~dG-gwF7#@TRnWo0$jK~gJ
z05fCl(5(!N6(biiu}0*~;3`@IGh^M*ql}Ez9Ym?`tH&$A6Z|dUy-y$bDgFRB29F=S
zZEWNjWARKXpaIn|4C2GH<^;Ry3c;3g%LcEryR{DkP89iq_|DI5&4_%o2`W-_ukZ%I
zBelFIb>;=RQ^kg5lVigI;*J+N81uirRq&5*^@8F1i<;|>APf#&xFx3uGzn5Y&8<5=
zM87_3(1|(CRYcUA)e#I+r=gEijc1zJ6FbC}qPPN;LKl^0=2&n{GNBzP5PT;w6W2xm
zxJ?#r3Jn6_h4y?S6*IA57*cV(w1Yh{v&djzrVXJoT~8UC@)>jpg+Iq_@{-u#m-U2z
zEGs~g(qWYXM^S}F4EOMs^j9fJ=KUGKX8(&^4z5>zysp0GX7Giqv(5h?7g_s?$Un%%
zI*0u)a$)_8Tp3Pq<p-fZW;Nsu41K@JD%u8bDf_A@oTcu3kB@``lSRBoMy#McwT|tu
z(iHrI(SU%hHX*tNY`B3-xNJnM;}3zV;5R7^Cr*S6q43Zo2pT;SLqexbn;;I9K%+_@
zA6G_vH2H#~<$pHP(Zf1lExMn+)6p}gZ<cR{crVVsB~`!hCgr%6htzZPr-znqf_S;j
zSUelx0XKPbpJY$+9RPWJZalr#l|<uO-42VEH_<@pXba)1R2(I0XUxC+ipt2Z7v2qQ
z6)aTDBS5_vM+Gjgg(2R+gz#iVfl%uA=QXF%W`XW(p>jaM+%-0DoUqQjp=e=_^H}qC
z1WlIzKncjo&aunR!H2UF)rpZTfpHBz<#W(rR)RMvO-CyTBbCVabZO-^Ym+Xbq4^do
z0D#-2V}&#UG6Cx6_`;8n&07iT%X@-%We|V|@?rqBIIfa5?{5ni1C~^dpOO%g@S@Fg
zoCv%NJnlKz>!%9dsNTUq+OoCW&T!kXW%8hGJm9)SbUrhzoL9*#kB?g+_A%($HS~qm
zv_azt$>HhvQOPBv>V>opf}c_;cmd4ogd)B|SiGw=gz}B_1H*CJ0f1dcm(D(TA*L-0
zN?T$CL%+BDX^x*@QOu<dMQ_qNY3+4#*cF;`5*C4-^9~S)-S!5C0Z6AJUcj<=MNrcW
z0vK+IiOoeN&Oja<%4-`oTzv*M;0S$0rGlMPGxH<B^;ZNKeb5A;0DS1Dc?3e}t=6<;
zSHoa{{PQvv=+L+`BkKhWnrVJ$o8H09t?Dr8A!w>OzMIjwHIgD3|A&x7VQ|gH$Q{k;
zmSW~emYwbtx=)K98Rd+S7eG<%{&poRt(n<!0S0i<&rMA|w%^%#ACl9U8|l1So$jE$
znSmq3v*+sF3XF>jA%Ir?-dn^1yb%|YjTVwEORJ^v*eYv^@bJlu=^f{1w?VogA=<1W
zFzoQDtfD$eerovK@QO}t3*+I#e9d{On4O+bm0)8N1Lv?l&=Bw#&V`XY)UP;21y#5P
zS+kkX(!m7wMNRJyOz(H(3v3ixiUwE|T5?gzgG6c^Rl+90k2{<yLY6Asgu;nF?7aR0
zS(S-RPGeXyj!;F34E3#y<!ok*V{r3d{+oYW0Ym9U9j!h@B$b?ENJ*+!`WL#!|3a73
zU+6md4|E0og)Yi}po@<Ls#;X(;tZ?Gl3=M?yy=0aK5j}6yUZcFIr3>!dW&6{A#~3g
zVatnLg-LBAbZo1gi+quDGbhzXUB@SVXMO)de&~w*Rr2*e(B=I7ALzRNT-*K^x-2Bv
zfz#-tuL^uRL+p{nACRbTa^tCKzQCol>xcJk6e8_ux`O5vLGRqdnsoBOh>`>0xn~SS
zi`W&$k!ZSxkr2IOJV}$id#`=}?!R2h#ME5?QKzU$);&Te3XtNjsLRmSI`C$X{53I8
zCYr9m_(E-OvFODIXdJYpY~eF8Qph|$!MV^oW{NilnlJ3J2hcj7@GFwdm_K+(*W{&^
zCnMrZa2!d}%C~s9?=fCa_<x}*M2-Vem?YK=(?_%7>L7ks(XH<<bgdu(=KTX*$0>iI
zOO1ix^rv!%kv;0TjDv`8z!u{bBn(<tK69~`oQgi~8;Bsfx^PD6);_HW(7?@G;9uw(
zv{8cm3thZNNLv+F;pZ6b^Q5e<7d&li#_9s^k7R$Li(V)3FLcTM16^aCo-K5f5;$PS
z-`J8=5S#x(SC6+OQRG10z!Qs1ebso_KhRY!Fc86^UfWE@W62+rA{vYY=4~@;vKl3W
zP1Qxlh8#2AZnb~r{&+0<4iy3fjL8Y}A-laBTJky~ag!ZOzynfx-AI3Ik4PNTiyf0X
zq9`UWCCSSfeSIO@`D@ag1ILXH`UR_jHr{#P;=AT+gksKd-Ng%Q_Nha_VIBiiju`9M
zkqb*2jMr#6VfKN1@?90{Rd*h~5uoRObki2V2WGF1g`kHZs>UC0DUw%4?@|z7u&-e0
zJpLq?Jrzr#t~GC(r|N+~+g_)D^4ko-Wf{Oou+XHfq!=zC_>P-CX3Uls{fAih{=LX9
ziy@J)jBs)r^~feh0kN9<j^+4W9kD^2Gu?oM9{R>fjLqK%B*R41j6*ImLCj{A-Jg-V
zy*^sN9~dDtgw^ggMnUbu-8lEzGh!GqkWii>rfoRKq^#Yoj&-|IuW0Vf^gQlH8>~*o
zZ2e336y6Iq!WIRXg%ZoM)6J`ZHj5Ke8U~j&9pM)dyS(<HDK#-Glo9N^Jfn#sIS!L!
z#=Y*acd6{12?O(w9ft9G4oOJl3yTpG1ev*r(^cOR!Hxy{Z{=S1nR1e&-p?`LL!X&-
znD^HaQ<A>LU%K#EwE=o8M^T>jb1%b~0z4sEdtG*5D|eb@g6l%$20C?E+ZHYuG2{tn
ziG-UPz>0}6NX?cb__z0W+2DXblt_$WDN-95W%f6_-GVv8X_|a{cHEV<R9uT<?TIy}
zD5jE=r&bQM7*U_T;`hmedtt5>!a?LA!YVTxOI$j8`RrFQS-zX!RdZrHFYgBPYZ`E{
z1~x2vMsHSi<MhO0(1g{9m*{Z#f-wcN8c<-C2?yJ@LMjcB0VwFA&iiIITx4r0DMdeW
zbZ$XV>N^vy6gJwZ#!-qSV@wZT>YC=M;yl0G;_&Oow}453VU1Pud5C<6qSga!N2P{t
z%eA6VLw$EW;G0fl6Q$qF2C8tF&;+;ZcHm(mm#`#e3GcMKl$2={q-0&G5XPUOez|bX
z5h!NB0Lq$4RB@;g;J~F*x5cyDf4B|_!vkZzpPw}>alyE4&J$y6mU+rD^I<-ZDMf<6
zM$032N-dY35yZ*~r2jG6KyPdQQzSdR3Q85C{5t(R*8><o>fNi^tqR&8xF#H%eue_F
zHz{Z(S(TmM&F(C!m?sW2Fd)aNp5YE`057WkUY65tnC_scFKQSX+@2v{?(bueZ8(f2
z7(;NPc&$duY4*t}-J=|XtFakK)+i#abD>{}6$a)|&qAWSNJ6+gF?+yyZDSd&bpXRz
zHqwiNjoZ)gVoMN4MS}ZG_w8rtC{IBZ4pueFQ`QN}o?9t?E!1L#0Afm~(Hf=MZQj6}
zu3kDYSOCtYKB3D@8{vLFHj>o%FGjFv)`WA-6XmKILnq+bJJ#r<$)7(|v1v*YLM^PC
zZ#2lM#<KsJnqmn+$sY1-uVSZ$b_&=?P1y!NO3|uR=YqAqG#v+4t6eFThqb!v8*Uhf
z`7Vlh06y`NFt}DuC-=k5jwyZ(z)-!5oUsl41Wxb)xUU!e$ty;8?3J2Q#b>G04L-}y
zs6ZXY;E@G&t3hj!^Gcjaq~>vbWu%=dt*IZHMC*zZWBJn|h2ARL^=EfT$!3sUQU2Bu
z{X9V|NxC5mwn<OegLM((X*rdl@+Q-7RxaswQmqU~F?Ef%CU1)=#SAdu7p3-~=G_$O
zH~+@Y780noljFoCC)pXl#Az$D#icT-cBb-Q<oat}8Gi>Sm|SuRoj@%C3m=uO!c8`|
z@|2(N?M<#;6%Fl07uY4`zP^uu00FNx+xHf0?A(r-Y}Ps@9UhDMl4zfsL9<D6xwgK&
zZ8lE|mSwPs5d~xin5I5ricY2Fm(?f>ODkoWX>$BHPWS%sktD(y(g|2Lvpu(@<816}
zx1kn;SEW_p09?$=(x@xex(Z;H8C?&n%PohZ&idj~CeoYggThe@`~xL;%wCx{g=VjI
zp%ZG;Kg%mQY+IRdvTR!tK3yBaCNz%Y{w1;@k`NVcc{;|&Q0~Nd0)^*Xay=_9WV5VY
zz_uN~(beY5xM)sXF_tg59(#3X1p}*rp*mv%O*P-wDQ1#8EWxLBC1m7Z(*ArV56sD<
z)$0BRhs}stP&}%DkvF2j(3vTIpw&pM;)Xay<!(`+4PBbz&U!8q?%*_M^YED3-b))v
zSYm3hk8K}hr;{Z@?<kB&k}F|CkVU{H3k@YGhv*FN<(An+^ixIjZHsH2&qYoap@i5h
zBT_AzHbUd^`obweUhdKas)Soz8Y2P=w{KhLmPUaXqOKnHf^n5{ddk<3hgs*n?i>DK
z4<&|M1<WqW3DYh)Ug4k&N)LW8qpY_x217EFsPT8j+CO*7cSDZv<wFl?8*gCRxa)vU
zfEmpXEm$PN>HPKPDE$Iv;!3ik8{E)~qLNv?Y~)22S$F$e&PJc;{pnP7zTM6u-|}NR
zNS$Rz2Vt<1e}@<4i%XCJ7XfN(Mx@w(g(bVJwLzsOgp(c9Vb)CoZG`5XtdD_m_$u$g
zMTO?qY7VCRO>?^F0&tI>SrIBX)p8K98%Xujx8`w-)Wn`D>&V;Pbe6G&(dJpHldy0N
z9#X2y9dMUbg}y}h^8}5}w2g2;?jcaTg^m&7LK9w$E_vYc<cwo#m-^log|}~`pVHQc
zEq!E&@WkkJ^afh3iLZx^ra2gB6)QJPxwx>qr|yN*vdX}E!|ZwZmJ=TO7XRyitV>4!
ze_7Ywf2=DYKkTn{wg1Pup4Q7yo6REswJupZi@(;D_pfywhhqJ;uJOq7|FN!urTgZ8
ztn2-0GV9X(uXR<>g<Tt~=50+`W9n!;CNH3A1c6h_>fCM=&yZaoWC1f4slru}b@G$s
z8)K(`FIySxQ}uquA=+pmVAib6urx+>4Sm9@q@Y$hb~z)b`|lL6&W04(hQNt7Rno>v
zou7Eazpn|=KQf5uqv=28ieTV+>dY0K0BMadthWpGe3Wuu&*=wgkdIR2#dyGQ2_AY-
zh-vQ}S@@gg5SSx~cz|s4`K=J#K0_!VQi}~f_6nt`;tp3Y>K8{PI`=x%cC90^ATe4I
zx?qYg)TI}qZZ0SH9o0VsU2~#buDX^t<HXQ1$B$dQ!KQ6KJeW%|<?ZY0K(Q6HEse&k
z$HY=uFAd=9R^Wpm&Y7r-b6P%or7a4#1=MWYNOmS3vA3`OhD$hg{9q_kizsEwJTDht
z(ysX}o$P=o&Ne~;A9rFRI;nDh@czU8o<JYTr;NDX`|WKXLR#WOcg2vqISByEU{2--
zcIwq^(k`N6=ApoaX`NbV5x+mf)Sq$IGj#Hej)96K&{)xyp?otzRQ3a0LmyUz&#y#}
zPbCo$<#uH2E9g*zIIwU36+)FfRcSusAe#)Bc<vr#Q^0Q*5oN*kU3r<F6btHzKkfu{
zRx)OO>E6^hW!zt#!n4syTUVhu%SNwkxp}vNfp81%UOrFcsj<Ii3~s1OS*%s_*t{Gy
zwH@YB^?#ZZrQfg6F8IILMDYK|oUF{O|C&>jx`oF^bNu(VPF`&ozM?-#Jd#tMu*CwN
z#|Bxo7Pp;#2N$J;KaxS1lH_=b!9~vvH-IE%SWCyU0U!npSSmF`f%U@>e3bD)kM;7}
zl#pY9W1Ml6M#I9zBP1Vvxbn4gM?-6B&6iv(T}MYMzp;Oav|y^cE{o;DHM_UQ&gSi~
zhHe;WNg8t<0uQ>LK~^A<1&YHQ$M=)hffi0ENlDWdzP88(3B^9k94K|9IPFtUXznae
zjjLK1i+SjWayshUcD5KxJ_lmnbAGyJ@t!*&S@~IFsdgTAwMyKUqGH9%v(m=igl&Gi
zyIyPiZT5z4vxHZ-D}T(xSo1}ANr@&6(ZQb&DcAMH=Iv8Z+f?lb(BkDb(?e0TfVwZJ
zZG?6PJmz1O%#RwlCu5r+X7T7z{lx0EqqlI;Zj3iHZ(Y?~jFOa01f{fT5;5jXL3EBC
z2OP4ysguq)2EPxCcJ_H=l05^^oWgSFnq-h$m*L2Mz>qP*3An_@q%L{W=?JQaELV(q
zTSnfkb2zI9z^;8^w+OM@h}oP+E~6~cF3DHwS7)k?8hqMRVsP74a&X&{2RNqQS+Hj<
zB^vyVi6^bquC-jaaHkqCwRbRK#1Gi{zdmaQh^@wf<XyqvnvO2RC?A#tT0V}m8Q|dF
z7gShT3(BqnPtHJg;vA&T+mCAX(cJPI5XLG~Z>YbU@b!$dTiHrHJh+zK=N1x#rwVWJ
zn9-588-k}^|7dFbwrql~1-x|u<OOK0P)W)Cc9g=vc6kMw?drONZVR9bOHtD4x#m}X
zG`5y31$sUrTXbmd_1iS1Vb8y_<z}T~XVEp+2nuNe(aqiNlR?j#T-_*eR%!NLvmXGs
zC$atd8t*4ZP^^fxFl7E6Wz*<*_P*`s8pTTv(C@_>PzrFlU2L~ns%dcL^iwtS0Gh)y
zb@N%`=56s=_LIi`bm3e<{0&n=E1c7smx`Hi!SBFkbtTjJjt8`P<NHo+pf4lvAb()w
zQt|C}mJoAJkfzFFkrSD^6nsRUtvy<keEKYNkYp54R+`1y^Ri#KWpLmO<fCsjL1E;W
zbxKxxO8kC~y-;<CzGGc&()cSl3T)Ms;3X`5$bq}Adwry`Wz2CzH*LFs-ohngsbvFU
z0qufg_*)1i%8*}**%lpFjp1Rip`FDyjHN43^pyxP^<(T}+k4&|bIpm#%3Y<yR6O#X
zwx%?aaO1j-q@a8sFR}m{I~I;Dp$mpr=NYNS7|z5nt*=$pL0w2+UjEPK>H2*qC$yTC
z52R=C!D@F(BWJ#l=d2x>w`$7<1~#30Ba)xt3m;KA&6=3ms}$2*U+mn}ANM=1bQsMA
zTWHXjb^l#9x&&vzu5U5i$TtF@dEkaL;#us=b<h62>}(mdo6w)U&H8Nxp9G`NJmi!5
zAy(EttssH{C|92D%d$NvEm}r`w505-!IKH8jH5IBN6z1|w9{8E92GaV*F6L3o*@n`
zT@#LX<?IX^yi78lR(5<h=I&7&e?WXGCj9C04!$_%bx?xy8*~WN1kE55hr59G%#qG$
zfv~JqoFl)^)7yw44go0(7Ba>^sB*n^o-LSfSwP^zmq`Z3s_>XifdIkt3WK**XD8|h
z5KNGfK4GFn>sb1XL$f^_j&3BnbSVVH@Y0^V14%hBS*!Yem38*V4H@iX1WqSs>q-v_
z3~o~U8OOp438~DK{E7Q>Nu~%MTIImW21@W=YX+=BCQRSaL8ZTr3>x*KQexJQQCaKE
zkuXcyhjr-mcmoVSm4mmiZ|=62gtE6xFUObA?ku%UFXxw-^6KQPkLj1OK2FUWWDL-&
zn^E*SwaqUBD)e4}IBYa!bKP#t&x8z4Onu*wmmOeNy2K=yVO_e#5*?zl@={DM;Z=dz
zeQFjkYK18%mscrOim<rtSm6|V3>YEs4;)Rm+tvfrXc)W#VFh=qDnK2gzSv_MuxDRE
zbuHg2)*&>$kIh{itOoepV#r;Sypdcv)8{C{S%wpczCCEK;h=%+_d<jLezYATiNbup
z<4sIb@qiGX0pDld6%}J4x<gGGm%}m{dKsn#V^ku%0StZm0<cw?jp*H|`xA`P1MRor
zg&<V+6+N(f(1R+XTCbq7PfJ`NIqWU112BEEXz{M+Sx7Kn3lQZnZx8%cxaZVtXMH9b
z_K{)~oD>oW%x<%h4f1#~G!V3Gy@fhpiAM?rk!a_+;}GKneJ*!pWqNtEHzlsc2jydj
zCU}M<`+Lt{AZ~jTq&Qw09S;i%a*1`|jBjERerKYb;G}}Qj^g)@r}D9Qxrt!UL(c7F
zwWU2|U|b0KaO65k^Knyg%(2Q!zIl04AKH&#zOrTQW|Av@&QZjI%mfHu^5DH(0)%w+
zz$}?_rX*bI;T+uQj+%W&6taeY>WVb-A#i{FqEGbjiY;j_;NxRS6t4>L0boVQ3$iY2
zW#oYJz=GbXR54NXSMjMFewzZ0doG&occr9+AAXE8kZi{**^{9hLNZ8D5xFah=>%f&
z%J>FQ&&)|=!xrTMa`@$*hK|4E%e#U1hGg=^7E^?q5kDT8bM);dm0k!B@W4VZMMZoB
z*YGmWGC(+1p=dCw7lbkKJ4WVRS5ZoC9CgdZWmX?Uv=C`bCWuWQ`Oel;wLJm^rN|M?
z0RP(#ZJ39U7Bml;!w+QAc9gFSM{}^{1b%$e)X9t>juMP`m+tjy&JHXJZjfMq>Gd~X
z3iaeD;j9+X3>OTM8DY-=nEwEUR1&I#eLr<P8~i{VhHh?Wq2aESdNW1WmlR~sYtW`!
zD6+O>TOjW{0+1CO8>l0>c!vY&$v1)TmS)m%D08Y|v}zIOda;cIr-}+Q7MOo(hawm!
zPPEtoBP{8adn&pO+WhEbuDss8R5qdy(23fhbRLc1(~+2MTrD^lnu&Nkc0y~7W_5i!
zDSwf0e6iWxkQ@&VjDIYgyWmFr-`&24w@tgyt%xNq4MOJ_4`Jp&ajis{XP_STKmfYJ
z9@wwG(CVlN&!ns=5}`m_fL{E0Y~cu;HzBUH#)Q11$lO&U95R%hqJqe(JA@LAY}7td
zopDo~xXENYZJx|yBObI>$22g&nHiK`@T|a{dwR1YnY`V+KuPRjBQzrK1sM!Z5<Dn@
z@pefp7AT*4LMR^+%UVrw;_KN?9BrwTb824{g;7ET1dXiF@sU6T;&@WOLO?=_C~<ok
z{ar+aK%8ZNfmjyG?#kD2{@ad$q(e%mzJ>FYmI@~n$>3J_3$-vySuQM2-qS{wfnJ#0
zq$Pb=zaT<(VcTx0n`mYuF`;$gGU5G{L%TER(Hamqur9o{?0p5yQM2z|6G|;D6eY^a
zY`)CVR&&_lLSG#3=Z^MGG4GwaUcn;>PeVAXeu;kYAjBs(AAs^Ci_o|m7_-!wJCNAt
zt60tZR|>y5`-Qrz*x(2azg7UayFS+oNgx{O4s2WTckeUh-DsR<$8!5b@-r<={k#lZ
z;33p-yED75zR_X@6@^@gxuRL6P-G+WQ@mr)!XOP&sJwY1t$U&*#M%{b=J`p&D}>S`
zWgvsvu&Nzz%F$%I17Rtr&J@2;vA=~tlsR}P=Tsr&teqXdjR%V&Yz~1x4Kq%&7Zx54
z&m{TpoTb#xaVa`SV5vKi)e9~*LqjxwL~7==dZXOuiEZ>V_ugm{hGE?Fp4&?+$RyzL
zA@Mvov+LIyWpE0h{O-l0+3lEy0{CtW^+mgj9h@De?naNc!%f;=St%doSMCzkfq5!w
z9?D#%;NdF!@Qxx*qYOjLsXg1v@P@Isbjh=b4kY1-h$uTP$}RVpS<h9U$C^%2&bZxy
zz9t>=uouqtv@Wj*F)5Uo6iN+q6~+Kiy{XX169Y%Fq}~F(Z=8Ozrabx9mZ{I}2O3yI
zP5g}d@;`pc)H1CfswO>tthz<Z%j~OVj<MFB6pl4Cj9MTXb3E3bLgVTEWK@%3MU`1A
z6R32BkTTb|QPv>-gd|GUgX?7^lQ;5EreIMW6pZo7+NU2r8EVRoSJD@cwPqI@!t|dg
z&HJxDOvxcRH)$w|9;=-Ql6VwyNOT*<2W(bYeoe8rAu#-)iyYLHSHH!V2kkelFivGJ
zF^eNlTt{9N+g3$G0*<wV?2{(Rw>y{EG(t|oT_}4s+{lQiR{w2q(Q1U4IhCS{M6+IU
zQz_bGG~566o+`!MaG~E$8=YEN9X=}((VdRSJjOvTF{%YkG#MLiOocjCuEbKI_-lS8
zT4JZPv$^^pX?psBC!5s$?lCYGU;$wR6~8%1=yW`=y42Z1Nc9jQiQG$T6JfZJsvOUi
z*Ho?=b$ll9o;mL`GPD*;ec!n?<xJ_G1!iDKk?Vn7Lj!vt)>NRl-nbS3JPO+Aa*c}u
zAzEpk7K>4U2l5o%7rH>d6Ao^P9(g_~-%FomW9QozkWqXaTz#l8-G?cGA(QF8H2Cw;
zk*>#ywg58lZ#|qp=gc-ryP1q!9{LM&cj+@%%)_+FY5{uEmqvG}@Xb(!Df7U#eW6Xn
ztp*CGY;ffx0YPl~YO`4G=fLk~c#GA;BdSro4)(fw!4plUhfC*#3fz0;A!oYlA2Z3<
z&3Ml{dFkjJ_4>%0BrmEK1+H+OFbE!X0TB%}h9#C4rJ?GBR?whyG8+x0w~Jfn<-Gme
z>XE6<hxKI==cm>rY^^PGKtl}Li1LUqlO|xaJ`V~RP}#>nlFS1xBY>_d0VYU1zjb@S
zK9DY{8D2O9I*T-{tXa+gmiD?#8;FBsGf{{%ij-*H)=9^Jn~U$2zv|;5Uf`ZY&~_+W
z%fBac?bFUb#Ej5vGh}?q9#j?=&8l-*IWS{Q?8&yLeTBG-F?FU7H!x={PFM!CFwpz<
zoUJeo*f$3HBaD704#Sm*D7Gql6J2AWyOY8h44_wV?u6a45+41qBKk$}df>%S%?s^K
zF?Ff}btAkt)3x#bIfU$5us~BRGiaR6H)0KIdZz^d2Eh4A3bCF?t<UvY?NGkX3dJn5
z^H^Cn-GIt&q#LD4*i(NpVG^q7u8|ls&y;X(=Glm=ouaB!c)P}*T}RcPW~8>dRF|=k
zR`|>*Wu2p;?H=Y{Z}LYn^9b<V>{Al+#Sn?Rlzv){WFq_~ejJ&}QO(Wr{=Ou;81ny;
z;U8>ApKL+qLGtuCTK>Mhyh&f0Num)U>e5EJ77uQ9lB$trH*$h-5Ds27JgB`Uttd$J
zi2SY!+-`XLQ)-m6_Box>t07g2sE>sG?RSH^O#`Wu?0RAe>N@Ca7Estxn4QjL<kaa@
zlNz7p5jf2SX*ahF_WGp!8RyjpJ-qspxA9dMS8_pvFyh$+6bEl|!}EsB$_ve<WB*>Y
z8}bAAzn7kT;fseH0|5Y}f&&1M|M$`pTRj5{Jrkq9`M-^Il=6iA0t3p{3pI~kam4&+
zSVH5hGI}jQFfMnnBgz|>3ay4%Ok?qak2t-C)H>Ydp~p1u3+3Ax&4e+owVrdrlr=Uj
z78vJVWW-ug(Bdq2=~0pKt`#^!{QYz~x@pkz_8)%||7R)!k@3khLteH=YoD~H)`c$P
zRYj)FB(NJXT5>`&$eaqO(0H-@ei{FUmQ=2(c&VcV;X`froY+-HsCrT2J{1D_Tck4I
zeuJ4H=odr2-(2H54h%5se^SsBNs0*}U#rS|(P=VT^msnpwFcsMxn<SOytuT5icyV*
ztMIQYeGzA-XPEmi7rfZW4M@beQ(z=K#tRAFf{v&d1h>Y{G)czPO~dzH8>#mYi`pPh
z+X}-Y_FCDOZRD3Iia?>0Uz!xVI>#Iws-NHxw~x>G2rpR2R1@3Sejb^sh0zO6%?_fT
zQXb58U3c?ka1P3Y;c<Hom27F(90Nzp#6Gm_2ayl-(7)gk{&2G}B33F}?Wd3ToEP`4
zvHzxEpw}Z4%1x;Lz0>n~+nlvc?f|FtAwFVHRTOMU#%hx{;_(W<;{s&6*6+#+pOXvD
zd=RZ5ao_s1k@zBWW5%v}%;aBT-XUPoh+#1@pSm?{3Edd_oHbXWL6Z(ZJD{Pvp=^+M
zeY80<GGNi@iJC1<Ith%puPy4Om~mmd0xc)d&fTV!ek&RXYIFCwEliE<oo4Ny8gsL5
zw~Uxz<M%uko;^gpyIOQqW}!HNWHn2+CMGV?X~kH9__DIH#-D#gHtyc*SYC1JjfaJv
zU$dQ`q@XvI2;&}s-pO$Hnw%yTLBw{OYMdPAy4++WtDp4954aH029gh|JP`UsP~MUL
zKxSXOaojw8R`n}x@!XG*>Y4%jJJ7glfhgK7(C@1ukd{L3K&DA5s3Xgn-KN7$<659-
zI5OIg{Zu$JK7VU>SS=8;`oMX0rS6a<vba@fg>rxAJ=Ybr>+*o-T2b$Bk(c+g=QH~M
zzEmhiDhxHL006W?0RR~O`%?M0rSd;bk^d1hIx9WfAs%Rhb&h$Tp_Q9!C=IqfL<q^2
z4Pap;Aqc`5GPCZgs3~GVVM{#8j<=f~9ujr1gc0qV?koL?c~h2j%qTHpO8)IBP5#rE
zPM3|g#SS^2-R=$V6+Bq6@AcZ7sx7b^#T);*MVpSkj;jk73yTZC9qkr;a=MhT$m|b<
zuk7F>g9@(`t~mV}tad??k(>3n8(qc#vw4U2Y~ZT)J_a&$dux=v<I#-PZICmapQDtT
z?7N6NdXn+;_M~4PT!Bm$Ks3AYd!uP^ng(2F@IaI5KTx3c+jpktoPK+)SKqT(7zuHE
zZOJ!a$OZ6Lj#@hUFI9PW0~v5uD?Uud!!^T&Cs?0RO`e0qwH@#War}&2ziXnDY}NIX
zS-b&!_c{{FZUDpK#oTFaKFtdGy`QpU$$r)F-sipv`j~n$AvGj2N?>*s-krG==*hZU
z2wxEPg>{D%b&&{=@Sl4Df#d=s8(ac4bVA05+y@;m*S~#^!wK4vWogfa*ez>c0xF~;
zXaPsAHF@GmNS45u5>s|GN+8VvJ|dVQSB)v7K>8a{)HfWQQ2be;@Mlv|JdE;0@cikx
z=nRslHoezAoYzP#j3e9lq_(`*?jv&rPDoX+F-%&lPBCgt*El$73$oWhAXp9ZaT)!w
zxaV-jZ87*fg^$Y}{9rXQ+$LX%c9|$52hN#b_3#?8<Bgm7o0LcCWqwQ8AZKleff;sK
z8U7Zt-WV;4jIuHyHacvH@*JnI#12ZVYqPQ}j@)nlC4;H4F|0C9AxK-Q8H~Qjwg<XI
zee3_O><Z|Q>k0@KL1-0h$y_)PODF7%aDR3nZ5ZGMUSG4ayu4k)ytXOUU8}xHl{6*g
zbn+$J`0TG>g+OI~YQBisYgy3eFIH`JkR$f4cd|2-wq!>JGVeJ5`sHG9048%bV=>;9
zB1?+44oLh7DN{cxGt4%yPJ9BMexTC42ruW(LBI#d!*a4sZfxN_|9ZmDxdxlyoZ6Uw
zg{SVli{-II&q30348qwrc;m4}4!rG8GOf-?<QEah0H~m^J595L(Taxv>1GjoF6WMK
z1Q_{8>V+FjrA=-JA!7Sy#^YB;L@D2)4TjIR+34SVIBzZ{K*C#SnC*{*E(=VJ#b9Pz
zn_xg~8kAmp1jCvUh6f^93k-08)SRKGN-Q?eJOK*Q=NWNHHjE2E<cdd2*^Bi>(DvEa
z`xX0P<aU%Pz0*3nE;~`JGem|?Fs+DgleUdu4Kk9sL!18HF<F~G^sD>)B|A096kg@Q
zvhHTXY+PM0OB}iZW>1_9A9hw?kn2uQjOinzfl!jM7Ax1cDMrBtbx3-yD8)|>Lq=;>
z_X(GLMbmenz>;NP`xapN5X8{ujOj{qAA;9n7KibG$)YQR5H4PC=HK7eD9C+aI2}Xa
zm31~0qo3!^Vdk_uVB-&z>5A9d-=|Hyj32tu$b8<38~iRzo7@%OcAB8WRX;ZQ=rENt
zKF`O`IbFKRpYN=9PZqb*`|m687S}5^(^Daa`wz_r&Ivg+c?3=mg7oj=ns~h<hUDLI
zpP8SLtv%kd-(I})oC&xoy#RkkC2!W#kq5d`-+>F*(;@?|o}M;xfxWO=EwZ`Q`D=r}
zI-GX0wo&bu58hQef0lrs0-ECNV7=w4W4psZp#Ugq1q>u2K{CQZZ~zW-cdlf4*dd5~
zEA9M1y1LzfW-a)Q9Q*KF88s`mG;C)d*Adl&!tr71dy(nqq%i^Mh}AxZMnx0gotE^0
zmkBXR=p~7L-7E(m`wl*z5K!TYKq!uJyX>05e3-!-&iQ-&2n&3_nw1RRkxt;GdOOzq
zS8%yXC=XU-6!8OAvOwI!vP9ytvBxq*f0RoB9bKN$n|6EY4Ub=bd+;Xc{MeKNVl}0)
zB0&5!P%$hh3t;v7XtaaITl)n{cL6F1cKY^7!Ubh$Ct76}rWcqTW3EkKDc65d=cfbD
zcCO^KN*^#xXW{tPec!;WwpA6fg0sW{MtJ?8U@p{(Nz@#r6#&}`y^pJB1f*IXxahXs
zFXUQ-fsBYsGWN|x>F|Y_?`j9)vz)kyb;tF(pT#JAu@i&Wz~iHc<?grp1USuF5{O^L
z#KptsM81uX!slB^V}@*Hx1VreA^CgM9!vVU+!Lht!@V7j1-e1$5X}uG+XY?hiooRb
z2+H$egQofhHS<c+Y$d5FO!E-};;fODBcE!!7`+Ws(TXDa<qC?~+!>-dNvK_9DDM?l
zX9b}pG7~or+_%$>LTT2-{Gp@cTlUP&7;lQFOL8=jvZSgrkn*)tC=PCoRZ$E%^?(8z
z_J$b*sDdDR_w5~>tDM)lZY^lU==%-^5*8q27$E=z${|oa)c|k<o^_6F@dAUGy{7?^
zV0aXwWVcjZyxa@@Q{=@3BT*519J?KFuld3-4&HbGL>LvXu?SxVp%}c|IHZ=rFHBpz
zAN9-9TI2BjD-E^dZ_&a+GZ--aoFpciQv+_)6iI6b=}rsY$~$0JUqFfl(EW)XC`6N<
za=^@G6xHUikRQrJd@jKO$ZP4?QbLpCTJ}jG%ZZQJ$Pf~GbwI}GBQ`us>l|*aa)9j;
zm%r?dKRapbNN3VAr;$W%3VCDB;?G+YU&+wGD*L<R^YZn>VIu>(Xb1f<{rR_M<R`jk
z(@*iM3H$t=d&8+o`l-oXevYUJzjSpyP<x3#GLYI@U&8?!M(imq%rai94kwc&=kw5R
z(<%XYi~#wHU#rt1N4iHN#$33-{DboU*Vs8nSF&|`JGRwv$F}Vq+qRu_Y}<CnR>!t&
z+qSyXNxr=Ij&slZ_W14@chw$Mwg0H6)~>zAthuV@oIkW>H{E^Ns2{Xq0?lHzD-ZfQ
zIF)<H3p#Kj;m}}Fv^7l28<5R1hn7CI4L{+#%`A&w*6j^M5u+b|aZPl*5okwMtR8at
z3eS&AFAhS4EC=H-xU>-70SnsS-7JWOse#eCgY?c_MDtBYGfKj=w&KKeo&z-K)@CBp
z@}r<?f%p57*5THnAh$UJVSNQ9FpKA?AnSw2@}7p2V}KA0fmsI=wYS(zIk0ZjzH~F)
zjStmS{;q4XU@J(QQ*yGhHQW`2qL^-8WzXY$D!83=Xy1l&d#T3hn2OcJRG0sv4+gQ-
znHg5b=<<pH>reyVk8a=x1;F{GIS_^q5OC))yaQF)CCc{B3XWMOFDK?}e@Ku2elP`E
zkb>EtHRMut;239Z;PeK$XVR-rs4FUL-Q*Y+3>*yZ6Kph)puI!$uww5Cr4tUgj=MiJ
zPl#_}MOI5fZvDJrNdA5kyQVbxT;Dt(dcnT{JPoZ>?<jxDgzO>lKydw(2|mJL^AaFP
z47J(sH2Ud!t@Ppyu6Mw7b4=>>i>{<wU=3gT=ROEu8(+yZA+J;RyVJ<F*$uptoJc2%
zR~wNx%;~J(Jb4-h#n?*BparUg-<r;QWe+(D+RZVek4KiRAU38eKi(t20^QNWTlOpA
z6mm&sT$4z9Xqev2e9u(m190Kj&0YcJRlz!du(NoxXVw-#`90g*9x)GWmsPNg!0RjD
zap!Z-uh@i3r#=Cuu2s8sJ#C<~LheD?P-=~>LSKI8<3;FX_3BIOh=kX&U=2KQ7%bs&
ze$gJ85ob1$_vcemBbD5y^=p(aFY@aKfG)pZ2vkA)EQa%_O+ZJ(uZOehdE6MDP{PY5
z;s*bUu~?0dg=_)Y*|9ZS)dju`&yh;6r7;+cRVCjWj<3<Ud+j<j5mSv-5JnTOP1;fo
zy3M~w4_V^gq{c54UKfa-I9B^qKaHRF97zBh_s@ojTdu&_jYnt)10(8du5ywS#H+MS
zz-V04_E!kv!W9cMHb<uC**hX@Ujiq9mRI;)ewAZe3H&t_H`FF|p~+S7V_3&ZpD)Ud
zV<=Q2USJeyT6>Q3vY2*Er$$^$h^niZp+d!JgXMDr|2HfXKE2xdgbh^fZAHWgo5eYa
z_6Rgvo5MPr+1XGjF@0ruU>JOKFRO}Li_r;Q+rpI}>wwh}EJl-pv~OsfW*hs~W}xq*
zJXZ!JHNmXw)rrX4iiu5r^s+I`*>i4Q6L(|Q*1_q$o5ZZv)TbP8gw0x?{h~_5i7}4J
zs-B6CYEMpq;(C)>zn&+kt$+DGf}h25n0w(=8KbXY=7c3pCpl7R-DFOEV!?ZIZ!SYU
zp>xhrD<@j0_ab-jB-$%tNEZ^4>p4a|wVJdi?{TQkP$)v?+LSir3lddSPzbdR`AwO+
zWIkT9cVoutQNP;TdZK7kz7=)!xi5v*df>-=Gmm0QQ=;ARI#qL|_qsqbn)S)FEdJn1
zJZ2G}>zr*KML9y{s%*a)FLg_BOp%!nv_}-d=IHqE)?u9uYu6;9uL1c@71>kbQ7Tdy
zWz;COha7-r0>_}D87^N^h#wW{6V#^cKM)RVIP>MyCLG8^KS(HM>yupsW0jXsk`4-W
z%wcu96F}jhWXFMBNFmkPY|LnrDOoyOR$WLVs|S$QH)t@Ln~d?BaYtdvihyGiojiqQ
zUDY;NU#8JT5Pu1)omi*!Hu$C6I|hIT?&BRvXx1sO66<V+E+Id{vnmkrEFV`2<z0@v
zXQR3+njiP^tg7<Sue$Q({4&aFYj(`E5W`IWHd>**K4k+_om0=a)&L7Qb;*J>`e+%?
z#jC9*Y916F9~H-OlN}0m_GC_^hsnly!b2o?VZ+c$uacSlzI$8fZ2|9YdMVxt_u6}K
zOA+_2g8BqIX3d701EaO6=Td|D+@(-Da$hrsYDbWYha9rlG{Aw&ebkNRry+q9hEa-A
zQ+&6}>?F)paH3ywYFv`*sOsk%c9SJ;410|RCfl~Lr<Q81B%yw<C9gEtrU<IU6-#HJ
z1r>KfBLgBSDOA3up``-WnwWG-JTV574z;gx+;~S}Ca}Et?e9qqg=y2!q=`o5*|xCB
zn25y`h{HeTVs;MPSnOVeK6Hv26u-wgCyb^x!7?R~1`E-V56A5&m5zz^7F@=T^!B>T
zPX&p^%H+T>2h&o%08LEi*@r|tiSiM9)QEPgNZXl`Rvz=ftW1S8Dj-c#7VKbL{w|(?
z_1LMoqnMI1g?z(99L`UkGOLf7z?sl)sO=$tA!lMu+=IEgouO2BHxVd`2F91zCzFXv
zL3b-?&B6|LIT1$aV2Y=tofXYXOGX_FimCzKb`(u(k;z-yYsZdTN7w=kBS)}d!B>rj
z9T#te=tIYv$JG&AO4@-euu*e1bhGCn!y=T%iEz|Yzs73x+B=bNnsR<nR8XSt>eE5^
z1IQ9Ky??9)v6iypnO97eg_;qe#G4}>w_@IZ+!oTJUT=tLQ?p!ZHS=op*ML=heJDC0
zfq+_aS+ms`YmwRQI)L)o+8l17rLQDK1OV8&MO$#rc0mQJU)c@o{g5`80<;7e!u4Ag
z88932BoCLH>)LubI@?*d@d{M>FO_&ozPTnYOdr^rM6@n;K)b$sIJqV=F@Zx<q`O{j
z8qDndLO^Uaf$?gyfqee9+g|GJcxFm@K#crWsYDYcm!ma1mAOBQo&@K7Opa%?i%9_~
zi*yY;e2f8Xav_4~Ts|YYk*-$Sin&^N0)1YB)}?(ZS@cnAQX}Iv4(lhx;|=S$Z`A(s
zA)`GKY!Vy#OjZD@J)e%zkkc_+K#qY=4@c~(O5$h+AaYe@aU@q(!@Yim8*I(Isa%<#
z=3N1kUG)8sMg<yUmho9`;yWi#?;{qcmL;niNfAq5((_FTe?%(?HJGqtQrvVCHF22#
zDYN@?@pY`i=x(A&ZQx*#jOy_+c%>t3>XkbGJ`*?lS;eN<bg1`U#)65{R4<9~6>I4H
zHm#K-rsn&QTGg*8VG+Z2CPg_tHs8ZRpuH=98)^L@J(j(3QLkXWGI`1yc<8O<olS6i
zEl9O>geI_N;+-FYZv42zoAyZS^g~;V22m?W_f~sjx7ZCx9IB}XJ?~*}hr!}>gN_b6
zr0?%WO-D*zE=^15cCVCdIa0_vBz#>6fx+xB7_xHjUav$vG4VWSyv#nJi2AhIQznk5
zL=SPc+{VjIbpjmOF+jsOuDDEA7H#=I;zj%#Sx!K7%f#pXP=;&b7Qj1jPNR7Ybo7QY
zb~42*9L_;eDJ^%??=O1BChqr!dwhN)JGGuN&C>m#Nh9d6Jd71PnXYUTE)pQK1u2tI
zh@><^;XMF}5@13tMTTlRB2R=3)yzNK6mRWRwk0QChuiJxqwOB0*ac-KpD7B`rH!1N
z^UpJ8!u_nIz}_XAYU$LE-BfNcyj)urg16*1E6t*XlG8&&5>%Jy>nurjsO!9h8HKdD
z5{}1$qN+<H9voUF?AB$4349#=nIE#4q^Q+L*&3dN!u<_9|J1O3Y!k-+Km~v&Eo)OY
zBNB}MvX_rgO=$#$5oFKbk8Tl_<#Rl{!p+Gr^bWOjo%pV|ad`m>)(Bm_N6v%(Lg@$m
zVKFEO&4uqzC48M4OA-(P6m4Fi-zk#JQp2`^GEnBrgiCJ+jGY!;0^AsA#86g7Y?%KL
z2=*F`BeClbNPC;tKe|clZ;F?&gle2reMtcC*o_FAW2dU1u46Jtp{=VM%ZtfTz>4B|
zru~8<@-s{|LvDx_%89A3fGkM>-Tg@!gDn(}>|`+fzFxaWQ*h?m0~(|+(3C&tgkX#<
zJHYKT0=%(+#oLZ2n@0@Fl8ZfsK;4EOH@o^P-=_ch+<b8ffZCtj*^kh}B`RLT7DgdO
zTj}@v=!nI*!74=Wj9`8B@1A?prr#r5A~-R_c!HC<!{kgYQ6wcx^Ok@&G+(lSLE%P4
zYPUFd7*=^UVp~Um+8i~Y$o+9zQk-N@HLV52`kAJiMWXO0*}CV)+aBj~SZue5?t$`D
zUzG_~jRm3rGJImnD6H71Ma*N#C3H0Gn?0xhhr}-m1VWk$lY<#fqwvx^GUHNIX_}hL
z7%pjv2PO=c;GKMA)ZM~f^MPGN`qHYvVDg9-$`BF0yB?pKMv(CoUzq?s1A!PXHMN~0
z#s;tNGy~%uZs@ws-{fk+-~=!&q3-ixP>TH2kVqJEnhOC&U4c56pR;xTm$X*nAPDPN
zQPAZ(j9s&(+*shY?l&6@jTOqq7l=8hZiD3?AaqYOfz%SHmLguFt1-o>I%x2!5;Rl|
zqQYM1x8nv?CW}C_WV=5o4IbPcsHaF+-_lN-B8NJ)OGF-Jab6uB0Aycg8qm=o0)+hJ
zFV8^c(GUgqa3U+8^Wh@+@kz80)m)~bfR4(M=!{qU04<nxH+6UG7BDrBymCrV&tw@7
z^J;cPQrS5k{xsmv7<Jfhko|X}xrAL|Dgo>Q`w<^oqFKA%C~@5|_3*4Ae#O^SEg&qe
z4r25j>tFFiqZH2>b|mFNDHWIvYu90)(yQ!o<ir%afAWbJ!o`X?+C2!dOy6IKvBb{<
z^`mn@x1<>PVW~+6O27BxU4g!b!%s)&i*_qKAi&@7z&iFwfvyv|`X_LPnC0FZ?Ep;k
z;D$Z9g)3^<X!<a$3_no9IhC7A%k-FM7I3liU)eF}CQ-4(kwsAGtBp_S1~fGdGR)u|
z8bz(Rh3V*qPNRJdsk`l$AcNk)DQ_F4VDd#>TSe6>W_79!=$C67v7a2_jfc|+9o#bn
z+J+?{5YvfCWji7p6QGc5em2@GK=7DEA8|W1ai_P_EeH4RVs4i{tTP)K1Rr(lo<6z-
z%fBB#>NYQWm?VEk;hH{`xQo8X1B{P5-Fr2er}MZ@H4ze$HW-3%_J&=%&D5(h%p{1d
zoocpd>U0U9>E$$~9J3zERB%25_*g2r(|90X#C%jG+y_x!08_|QL0u3rx|2%Aq02kD
zpnE>JDxNmv2ei<&3p(l&;5Jq_Fsm-!se-6AM2K*dy5XC;daj*~?jP0sF4<j;Y<KPF
zFO6N)TJK*45imFT#l=3-qTa*iNR93>@OKXRZvr}>{dXQT5#T_4oKLB{N%?GkO&BL&
zw|gNF#ElxJ$%Q>MdRfI(y`IXYyoNcvv$p!WWo{sD(yasu*qo14P|?SoC^U*ph>j9j
z;1Z51reV#+6NFD(itdpxE&JGfMX)Dw?)**_2)wTy=MN=gfx$v8tXxCdWcbsSKV3Cc
zzAI!wZ(H;nTF=(em#T4ZDCw1`Go8JD3H}`wjQdJU+=n<a_K+8OU#3}7mq0_C0opFL
zlqOo;Ii4hC;ycQ$*|pwK{o(fUzF$+=9n@aG5m)yB;4O8m59-5l*2#pHSFv09#jBx{
zQmAU}i34)>E9;xkW&mj~>&II|riwj<N>bS~5y=N5&}}n#4yXvbc`rB!hvO@cRc*r;
z{joT;ldv)*H4^EU430HNVQN`zz~}RznA`}wH?+k-K#Y1G74W$)JX3yP!j$<&=Audx
zv>w)IKR=E{M366S0uN%Y3q-e|Z<yT6<4))+{0+7y;>(3m>W~Ib4nFT?rPwKB?@m2f
zH`8zF7nL2g;BAE8G(jPHI6f;$u-yo3dqhXN5MMPWx{swJ26nd(vR-b$*oYOXho|X~
zgTZw|j>3R!HSYDu`XCfycdC|J;*M|<)BzjpLlCu~H|+%%=@Thxj)a`UO>N>{-<4YA
z0txm&c%EQt>I|<L{p5^ClFTUwFxmPkUMSlmJBIs-MvmbaaWY9NLZiO5M=3sjNp}VB
zmU{8_-v<9Zwd)Get@M)JbB*ak`-0b71Klm0MEx6KM=f-l&Jn_g_2sfV(Gs}UDHBQq
zYm1<-=CzDe*Xas-e!D~*XcM}ReG{|~Z0l{ex$Pk^sO=#)FiG8mMQp1ql4n4!qa*Mk
z9F{xnK#EJ<W3I5IEvjG74H#0%>l8vM7NZLvYDduLw%15nCobq_4zBwovKm!CAU4-X
zQaiAhB-_4Nq+ODO?o{H~mhuNV&~(cz^XyQ1&sM(n>bI_-K4>oPNQpMvKIm$an&h1@
zWHku}%Ia8sMQyBJ5*^fD|6Vm=2GW{9{a*`tB|AXu18DO_2p)-RcZcwjGHId?5`juO
z15v4r_6JZgw{I}XFDMTbGO5(^mkYr#3mRur=u&r*VWK*5JuLGsgP$*i%c+YGB<o)P
z^>MtGWcV$~pslUkgO)e=3b{AP3OUSe+#XbU8UY+bsM9$O-P?-9sfW`OWc`*ETvZLG
zp8-aT_>p*-1o?g&i1<^9?d!!b$=9P2U<$;Wdq|fc#B(E%B!!MFrZuFpguNTy;xu{Z
z5#7RY1}^F8>o^W)bNqQPd3>d6{=qM|xQM;`k%(PJlJ<h!J284;viQcsB>1{w)YOQT
zMw;Ssc+$fS`b8XmF_b(`vUWV?G0=pDrcH76NX+;c!)g>jq|eZ0O9KEvf$;WAap0CY
z2C`7h&>OE8OjAYwnmNVsgZ_Z!YuFJ6UtnZlk2guCL?S&KA(QPcyAXtjD@$y2Fy<ka
zaWMFK5TtszxHAp<FfJa+!A~)^8W(t|jG{m`ARh2Ja;FPqxNLYZtb8xZgy7m1!kDJa
z-(U(d@p86svim3W`c?L>$c+B{;pq)F5!*YC{pW}|3mnR^QRvt4-csf70%4ehkTHy)
zC9Q0--@bVfgx|v{<OX=JfVi>~lj)y94kphSj=sRNhr>Hw0Jq9Yd12o+poxBygq4}&
z*F~BgDEE#FeS{R(OQ7B)e@O2c#{wPhwefh4e?R}4ESpi5sCZhKRGuOU&)lfRG<>LB
zuWYF(3(q7Oouu(u{)neyQaP}vJWGp-I&GtBZeDt^v{sjDky58ZzD@E}IA9eJ6xXd~
z2}iZyn7zi?mjb!Llvi`Pa}S4nL99^(TaH*dp@o`Z%e+Y&z^kj$PG<GJY>l^ab7zel
z%oAHLvt6SfzZpp(TR~asNLpAh%<9;Vr02J7N?7t2LTb`q9|yuL0ZcEx5=)ZKc6z0V
zQ~*n5I@T%50-rEH=RHT*#8=2tQrSe9SP?=Vxv(<Gmj=U%7cvXL8>S!~RNKJJO$$j2
z3J<*?k|eaO_@kK#8WOUWfj^6QOruWRMeT*(i0wEX%+)wPwOFUIqFhWx*mIY(1umCq
z2@$~R>UwM|Rn#Qt8<|PD&oI5>nWHzdIR>ax7nD;6+&%dG!nF}>qD2TUeLiTKN7-4j
z(Fr6^;+-NSMrlZ%L|++v3e+Y_XL@HIgzM$YBRa;bMYP^J_5r(8<2p=?(LEY|AIzs&
z$3N`@z0GGEl<aaBEmtTvgC4ex(Ou-r>=5R?j=7I{=pa<FZ6LCzNcOyMatuvrT)<9D
zFXdOXz)PN<s1+R5PiYmSDAsl_UK{2*_SnKZ_MW{DSy|$&7fZX~%Hx*DwUFPgfK<l9
zH{%x0hZRjENv&v<G~IHFcL>!V9$Hl7Ak8Y|yGWtq8jzgY8EXgbHXTr(A*!4;v9J%d
z>?)H%e;w0bw9j3_AA1&ZGA9o;F&K+eJd?ID4S6H@@vX_cPlJ(oGg4F2$kCn<QrZ_1
z+D5Tpf*YFzt|?B$nNjKs=^3|@=N<3d&ueje87H4#A@4gz^o2D~=4ZHCi&f&WF79OP
zo$SviQJ!e_u}o21R+0dO!B#<}$|uDO%dzoWbt-)qqpx$2Jp4<JyKa2+Ny)<sYDF`C
z*`%*3V&wfiD+jS4UFF<G@&WNAtAa<Qh{N`>M{EXlrV#*643(OJ-?ULe-4m+*9hplu
zfX5~42MvhkV%!i01A^y@VQmJ6L-ooOms<Vj7Gdxl?6}1_e2j${JVR|j;*qFEW+iuF
zgo)OKXkJ!5qkQv3w$9;XJa|%*wcN5;g6}<Uo0s~zg8MiLXN!n=O{EvXy_dP@0*ZGZ
zVKZ9r;FI>)a@~Y8D$Z2$b9|=jp<&Y1jPFH!%f0bK93(|5&tbX{JC_i09FWw3cp0(A
zBCtAHrKl!|ED?G`*-|pdnKn$XQ4=jBk?cE}^j#ImYG>m5XAL;rE$Gb{6fOQF{w30C
zdsAix^zSa=zVghtYTh|U_Zv(8OZhCxlL;D^8GS=dxq>;_Q$?*lrf>x{8cRE9rW7q)
zD%b}2p{V-t0-CxetJd|}83BeFx>G3=-1=Jdp(j_+Ev(fvnehJA<GL7=xn@#FCdhb7
z$7(4T<s$5rL8>R#qwkVV@TTv?IAPH67xe1gDw=6xwIrb`8PdH;<yo~JlPh;W_?B04
z*m|G#k#tg<kl#ipnK+a3J`_lo8)Q>(A;eIXrAFXzCRJ*ez5q`h<$!5@RXbrV7Y9zo
z#y5kfuJd_JX*~4z{Gyz6Yn=Sj*KbBX5YfsegTgaix{(s9&0Bedq;d$dc+H}vfGT34
zmulOVFN)rR2~{4KF6P;`!!lxdtggn<Inc}KUOP&>ugciV(_-X~&_Kf&>|p|5UTGS9
zra&Q(5g<9~Y+IwX$kQofs|^Rt_S|`AI}$H&8aYO#?6ymOR)?lZf_iUBpM@*gSQXc_
z-)ZkivAC29)56|YK3D0A?~*GnleKA?v@E3<UC#0u*n8wfVa3~O7}}!}jR*5JXuYN}
zDIn{)0hhLWSlC*A>9=4;tK2A^bEyTUH5ALfno?yA06dKoQo9yPo7`-frIV~Zk=*k1
zHaHZQu4jUGSGA$fm{*$3@S9xz;$1RQzPv`j(7}<T3w6eZdPs{K-j!KmSeqJr{p%uW
z+|gJ>1oR>mH3QQ$8ANj&^iG=g9?DCQ<N1h=fQxzYls!CntDeXe^kG6K)Mx<|#8{O=
zwMxJ$x+7j<rxbzNcd}B{3EpUe`HY#kY<+pKgyVS2125q_0-+j++7+<pfbzvM&A?Pw
zabq4%O;%d90_lok<kk_$qZrW|h+NYB^tQ0PpKuWQd9C8YJmh-PL#|4R@?N10+R<BX
zeCBTZTJz<drH<Gp*defR2Lg9gbM`!SZs5L*Skq^2q%#S(<&|aHJOVshgSJawTHo`>
z6pk|^0~Q|yt%!6l_gi(%5H0)_H2ZJ&d?LNWj)gn;%t!Vf33G5K`{Izf35koH`E;Xo
zC!*~x0ibvJvO`({UxtezDxB{D*bQB@s@%-?xVlx*v(OzYCLdY2ef5tJgV<vhcSg@W
z++`2vUpN43JeSwscBas_q9^&VxIsG*axR%8#9SDuHRHu(-HR)SxqiXN$lY13A?X^U
z7XU4A*8ISvpqNW2?OG(ba>9aZ=I|InuwTNVLQpG*T>;f}e@wN%%`b2jFZ~s|a_*HL
zUbe~J7ktAhbMly=9+J2GkS%fbgMMYOsbYIPifxmi+7=lRd)51}l0PXtH!)-*+rKgd
zZX=naP7NmY_{E#7Z>I<4Mz)u=6h-P9n`p)034u;-1XAbtsLdG{?{XzO9NPgJa9SVg
zDu-ufyaGFgU##62&0@hsSR6%jqnVNIgfMgY#L}IO1N#LFasW0Zb~3V%jmRZ?M6oCW
zmb<=xYrkRi{Pxtg%)Jso%#N6vYEub0IT?6pqGdw}^jXwV+~*4aTWtyqV(z!cgs!{l
z@lsj_SgtGiz-C<N84P*08u>4&ZjSuY=3j02F7Nx401NmGlFk7_JXGNn_FM;hv(I%H
z(npn$AsM0L#RX9q6o^*T*lydo_-Cf2z&lp2#aK%|+SRoAE**{)kExcfeQWoJ@AGUj
zyeKVd$rV~AnmA31NJ&@pCES{A`E$Bhss7IlO$%F_#HXVgSK^gLZtL}A$+CL;7c=H~
zrM2xyrRu}Gsp_!^8tqf5s(h$QdVHOJ0jameoE5dA%tenp6~UP6<Sca9ObbqO;$5lX
zC6B|zx(oP}O9~?WgA%WKnuQlfs$gH^TvcJ7dC>8_81bn%b}4ghUB+9fZf`-2w2qtF
z3~jtA*b*JIA2cl)W`=aCwiDQxweu0ivb5R{t9m-{cQH%_VSVvWYu|+5Dx~xpwp~YL
zvPRY0I4hW}iN%VWlZ#fzT5V1%9&MFGVJE*S5T%@dMM#w#@aSAgx(|@}0ju1gO3A_>
z4a{t?vNr-!7C6lNK2uopT9<ZWo~bkuTU5S`VhB>1X^Pp?Rx<Xbc*RS!T3T~=D1h&%
z!I)gS9B_7s(e%5>r9=$-m86%N4;#p(W6(ONI7nhftJSV9Ca+;QX$#Ln1OI&JMm&&9
z5q33;lPjT$g);$$*;Q`az5F(e3I<FDt|feG>jzzY#LX6joK(#jr+R)u$Op$pW(7X{
zm?L$Mqq|{m%9$<}-W&={zEi7k20;`*O~k9o9XAi<sAZXlr1L1iQmMzea`dc8+Gn9b
zn((Uqj&P4}vj;)hwd)(CGv~D;=VWh5ep)lE?3_%-$!h8MqS-L%F+73-#h)=J#fPmw
z!|HDfFVrkW@CW_fo(@NU{3?=9L7w7TuoozEhs)2NYBo<LSx4zd;&S>S;UB^ntU_6$
zO7gaq2k``E9Ei3xKmzgHjDQ8!T5EeI#DhG^YF<&Ou~u=YW$a6g@sq_;$4XLFuaAu{
z&dZ*}i2S+HHV#H-#~&`{l4+BaNu`heECqbGG}^juS_HpJR1;O1rCtrX;yU=V_C%FS
z2zk2u{py-V)vc3oMUGu92hQ!H7K>HNT;Vh8srYsN(v{?N!>DGIq&hkzF_Kyi?&3H6
zmPcMT1sQw~l61ePn5X`?%{9Jk>|A7JwOhlR!Qn}J98>&^-U>!)ip<ANE$^1A1Xh-8
zPe;3q?N-&UiS~P;D%YZB8W`-1t_qsn;|#52!tbxSikcc(cd~ao6dNyy6gshJwYR&S
z%R1NMSTEu3!)#}&!uB=9NZ`VFy#iu0W?-GFVfqVmNDodqP+$RaQMov~c+2QG?#)#*
z!(SWwyp?*_9_!NDC1#3-!X9=~hM*BYjMhFMZ3{)3#sl_8ac>uG-Jwu6rt)xwl0&&{
z4mVTRcR9<35a!1{5hnsbCX=1NcmFchI^T|ULokS53j=jWBDf$j&158~$Dj{7@M(I0
z=uTw~zdCZO%c;-o&zwY=#UmcW4L?-Gn|8i6jt?goWk@(>7Vi>^yJ5Kp3==MJn^z6p
z&dfQ~l1*sUg;AIXYjHXoyb41xY~i;>4ZgKI&Jang<<0Kz<H2hlvdl1+oAyW{@7c{n
z6ggpM5MX~eGggHR5eaJ<z<JA-2=io6K0BmPLOUDP(0(hNEH`WD7p0?QT`5%6uP#ia
zZy0WmtT@gdhYjv)U>3{sN&IGluWL?Hu-buYikfU2xfu;#RKk#X>ou!Rjxo=7!`NQJ
zs>!!?>rTE!R-CQRSJr<VZYiR^SRsGSHfGS7p;}O^FQK7@>zu2k;-M$DvHaM*q;~QZ
ze@fB&GJ9l+Bm#Tt!L!I~AeuCK4w2IDyVcni4e&`Qx-_|V5CzcNOn^I!9-2{)PQjzi
zV_e$c{Zvu0Z{f7sfu)}L;}0XH@@-uCw?LIg2d;u&c%6JNg+-ipEAvBck0&;l-v!^q
z%6$bPYkM?2m0rbtbA%WsN$=RPHQ#t>nY)Z}v|BBoVsw;uG3YyF(B0+xr_qjuRx-0x
zW1h_yEoC(6bJT3k%uGrk$rI~vbPQ@=bh>|EoqhoQXQXN;B}b*#XHYjU7!VNYKS!!c
zO9%sGl>l@$#yW~xc54i1KF4afw+oUQ%PO8}Po^kJ9U&x+(pa%%4q?kk#OqjR-P=F%
ztk|KUv)5g}iPY#%f*rIe6e!sT4qjTPWXxAAhHmxCe1k=N*6Z^2Xz_i4;V(}80xg&5
ztq_<sNo5kd#%UuugWzGZ_>PXC8l&3??W9V{fXC9=0GaH^PB5&-L3w`DbJ4j_fR9L!
zC)ied>KWuvd~arfPS;G3%^aN)23ciMT!7vA;9oNz=xD#M@X^twJ7GsGQE>p|5yaq$
z)2s2iC5>O{xOGORPtvjgr-Z}O5e@0RpcZ0}&ukCu<ak1GBE4g-xf$$>Zj)X7maFq!
zpaS&4=WfL*4~tkPAa;5vK&c-IiRCOtcYAR#yT=j6|Cg0W{PRZUezz<`zHJ?`V!7Kq
zb`%ZMyJ9qAcI{TW0mHF=6{Ar_An~&|8!AVF=e-tyK9w9lTCD5~^e(XMb&UsJt8V^N
zXB$LF2WHK0{b2}?<J(<UQ(q>wyEnUggr90?XO5IjK}!0p${k*&Sd;p)mX*iQ*6HfW
zIKVBv5`-@DbpB}EZiavqpf?Q%&1HE<{c|caG|x)$dzqmKG4&lCg}vp88)i{?1tEeC
zAx2HeTGqo;7^ymaPSkd=6lpZzZ{fLMRDIx5?3}yuHf}0QXs66UwCX<&Mue6dkX%P1
zcyp)K1v-h`@ykXa7Vk^xX)Ex|VyS^En5HS%zMv(?17zuy&8a4#waDY*S=|e7%SF)e
zm#fd3sIj$1#BNeyR55x*H8BE=(sQNg-g9g<WKapR7761>>5=&c!oQe+^|lA-$_p*r
zOh@iWma?;YFDED@5Ub+F@Y8KizW*_N(NCXRYCebWIs_09$v+QYMS!4)%)dr&mGZUK
zIs?*Mb@yHfB}rZ~ZV8r-!G+kmO|T12q0!eqf`qC8OXF4by3L20@5Y=mir7NK1jtMC
zozGJx_uw}U8p%?l5?SLNBIdtL%Ofu2=vj+rj)TIi{hg^=q**XHf0z}Lac3c}Rg(DX
ziI+!*z2aETv#bnlTj3sKQJQxY!gh^c20l`^9w^^;=D-@vMa0uZS>OMt{^I$@Tf@42
zR2j??zhG~(hHIVELzOI!pviMJJvfYJF$G4NE+3o!GQIdhHPIZ=d)=WuWwO;XAg^>P
zJec<bxpl7a)Lf*wVe?BYxUR`v<Kx=cnLLK#fHrS?zM39lA}28xdc=mdp0@XQ?OmEv
zVl=Ruf+G`Jx4@Y%)DX&~xy)3g+R|h*33<6i7?!g+Cd%RYb*a|Wpo+B#DbyP<Zx0Gk
zGUfRrQvIlD$0nlDd}1eHXp?RMGuCX(zk3PDsAHrhlAF%7v0Qih6yIy1VJM0y^rKdt
zUnmU=Fv0J4c`{<Brj~*ndp#PucU!z!@W1wZoZ98ieAtIZ_ZJwgXz<_*LG?56fPk3c
ziFzuSm&L!vipmmuAjiIp)_y$DX<ii`J<VFA-3&TZT+`gHV7GumdM>je!p?3nIQpOe
zz9|iq3u)o)iBENNJwV~wd||U5Z!nm8Xf=w=saEI?dAU@*dUV-)l)|QMQ|oUUFu}Lt
zew!%Y3HRP;D7%)~aIUy?-Y#lV4fG#_{|dK5ceo?2zuwP^f(ffFV@o)mIOe#!d};Cw
z*P1}RgIIm;gu^cLlBGK5v?FL#Q{Z69gyp3D;qG-rCCjWyw;5SmGATG1v|I>Ju4`rp
zNw6TKrW`T+bpFG`XJaiq^cs=6ZFisfA%fk9ZbfS?-IW=s$&?j6fk_LSTeG!h^Wo_i
zLYu)|EGTF}_kY@JKDbhjoKIWr_bDs&nPBjr8d84=L;bhP)4ydF7}Gg@>r|Jr+h;@S
zI##<ehg{`gt^M+4uy~VpP529Kf|P%cy3(A8qD&$c<*3B+`!yb)F)!tKX1*ZM@PZff
zHV+5$*xs*S5!#8bQ6XB`{p83P+&i3;O1+bT*<mmc2R>ROw1EJMw73_22XOlIIL=W$
zW&*_S-w(t;{k=MgUg~G49;aE|#YjXBPOqL^e!jo0Wz$WRXd~-hfW&P-3;qDx>92JI
z!>9!bQRsz=sH6FG|8#IftY(lMU~$U$OO*wD-hRp@z$yZShvnw*ewI6?-@S<6psE~0
zBYDn6t$gbh#?wvciJWB<PESV7s?kQ{zCC@}bSRZsWc2pyh})2FY#XgdYv(h|?jWYb
z+tv-pbov^dqtVKQ^<AxSwAZVKHZnjgLIkOpd(0`9LmrxnoN}5lB*k5-gG|5MDsI6N
zqAZO(BLqEX`HCANZ-<nC2o%eZ)5@mT3Sj^vbh@M3zr9^Ba+N8~a2iw4XvkKV`XRmE
z_}5W@3ELp<7ZlK}_rO%^w$MO`pC<3DaNNnMo+I?nwUWoHEx)pGqtC?5l!pA-QYc*B
zGvYigs?*CUc&cJ4?vgf;oP}3BTD<o4!`E=0OZ%Q$a?@I29A=)M<h7({OanHrXX-X0
zrxG;_a`Q)8u5NU&icQq9$vGj5c=!-pp$1b%oKln#2*1PlSMn);R{s;GhZml@4*Zz=
z+38~ay^u2t_dEj3idoDaQ}^PP5A)W0`-V5|sGaKLdLUJ^xR3)tFXh3>czRg6?^0_B
zO)I}IRI;`4!^6)b<bq=FAh5IZ>B@9X@gPX}$2iz<aehcAwZ6Hi>k!_Rl)kdvSoAzj
zM}iF4EksGKuGvD8>YM}=k;1_4rNBZ652^xxIoDXUC~JUD1k2eKcpLDnyDzJ`n6cq&
zMS^2bE8H|?=*T)D54T7O0u8#XD?^vA^8ppxq|+-qHavHx&bXMG8y@XMa0*sQ@$d*~
z(FqRv@%c2@X7Njt4x+RBy)txY6jkt>BzbQ0&;8$`KZzz9fjyNS7{UToJ?sHW&GkuU
zfUUJYoCwn+3!~FY`<Id;gXbA{yYX&zJIbZkd5r{7Wc%kujn{w}wOPC+WT;-hJ7&w;
z$l}=uj@_JUcn>g~1U@5dMZire3TT<)p3`^BVxz@Q*xe8d`TEvvW$t^Tmx}Dy5H9f6
zDnhIpF9%$jy{__=vJ6kdRjS1&tKG62Z1iQp{m2od1|NPbf3{3r9Pcw}pNHdzV0pS3
zvr}wDHjqTY`%9PFxmekU><WdT3wgP*_BoaH?ZB;0Sx@Ug;yqK*)z6$8hq`E4yD85B
zekSXaORFL|Q{5h7vN%(kJidg5!>x~}%C8eA8kXNrF{r~%pM_7EO<geFrorwx^(S`C
zM0dPcHX?%4!$`eV2u&_`c6u61-htk7X1gQV889&Thth;A#oAK)?6@9#y3;}GU%~}n
zMGl|fhloJGo1f2KmEBA(ZREo$d4oQxMj~sQ-}hcR_CIx0=+&#NCD(MGavBW}od@B4
zSC{o%_E+S|=drd?MGbN6B-@D)gI!Yp($$hUiuz0BK~G)^7=$16f7i<UG<E;gE(QO!
z`9nGHe?RnJ+IfGqOF`<--TyfBFN66{XaAR$-e2ufQ1^59|BLubS?_=E3&CHM&+VmP
z>OX`2%Xt6Qt-p$Y|Eab27qHNO@&7>kALYG2v47SS{~Igv`G@?&ul=_>%zsxH|C9V@
z<*2{OEoA>!@_%Q={Ym~a8TD^+H`_mw|2;MJPw1a%dw)aEIR6p)Zx`b4B)&iCe@?aj
zrY9NyBmM7**PqBg-QT~FN@o9v{2yodPvW2c#ot5`%YP*P+a>syw;?YD{^^nf0l|GP
NGoYWoirv4y{XcY~reOd8

literal 0
HcmV?d00001

diff --git a/.yarn/cache/@types-hammerjs-npm-2.0.46-de99d4d9d1-caba6ec788.zip b/.yarn/cache/@types-hammerjs-npm-2.0.46-de99d4d9d1-caba6ec788.zip
new file mode 100644
index 0000000000000000000000000000000000000000..1babeca0a9777203a28e0510e180160aac081aad
GIT binary patch
literal 4582
zcmai&2T)VX8plH?q1VtNE%aX0P?V0+oAlmm=qdyd=|!r5bc9eu=>j6%P((loy(2|X
zP>Mh>G~wyJ&v)N-=3e*AIlE_O|G(X{=i8a@zq%TD__Tl@MZS89_>abaA7tNaPcH{Y
zYq*!gZ4XC35#4|6`UCK{uJZnY-v6qA{DZ>977lmxb^AFOE`a!td6~pW%7@?r0Jrf0
z0O;?enrcca+6F3?`a_<pqLdw2KGi%kzPa|@A$)^Mt<^VTj#AM*lr@S89`)s3of6~?
zZlyOz6F#0YGXn}~nLzW|d|6L;D%tO5-u2Q^iu|}kpgtc6UJ$cevd;4=zCE5C`25Pb
zhtey;89>C|hcDzjOWLCtMwWK5<)jg^D!FV@WW*gr%!54~oE=JYnb}QzA^-9$VjpSp
zn<|K=DQ0}kNc6JwJO>Y^y0u`4HVp`y8^sSuiU?EjyCG=xP}gftOl%IgappsMm6_;n
z;<8rkyE{E;E4o*$g7)`em$ql$84?#vQBku$w8krAM>FPGdL?77@~y5T7~l-z8$zS3
z)l|7*Ij)_I>&Kh2_!7fkQ+n;9(@)18b2v*$gkbNC>C63?7mnRIWKN~6zD164uOMOs
zGzUVpz)zJ@ikWZREzZi%MQChx)f{tQzSKm7MVD9{Z0iUkw`W0?1M3Gbc5m3a^ih$2
z=#ZayeY<H18Tg!v<2q<Q>Anc>=Dp<LP(4I<QL1~peSCyVq0zop<q?R!5`{=bX>TMh
zxV-}Q^0yN;6B=!=G?g1MevxZj)xy)~lGdAwTAl$LT6q{F5m8)r0&zN4%iTBZgwi(h
zwZB9YYgF%(J@ViK6=6*|%t<V%ux9)=x)P--9YR^*hzhq^?}j?XPwKbaqtx5hGS0&W
zX7J9V2_%_~XrY-$GxTY^`=I7Zta_WLq=!S@>Wqc2|C>hykJm+QtVH#kYVEj!)`489
zuET1@^#(I=Sfg6zN~SxzKz#b3x`3dBW+jFwn1`tV#{gNhUYQ~Iv9`fZxnDVQCLXQX
za9-0C$$86*`CI`cFbrCACq9ck1;~CQ`g5=R3}2(i5JgrT0HFW-&HcOZ)mKqa)>09M
zJHS&kG`i(!qp)FTF?h4L>ePVhTqJs=*9&{27GsI?ojh|#1H~j7KP<_(2J89<ieQ63
z7No6MoxUn@P+-XC2AjB5utjsdwnx7MW){`2J$S^YvNI_%4%HHu^~|uV)<{zkkQH=)
zHxoU=05O>;p1wbB<}zA;ZR+(3bC@1;cvU>BQwLSiVzsYrd~xvdG_Atelm5h%wK~ol
zg%s`<Y)Oq0pljVX-ekTIdsa@Q^l*{m<Ur2PTRF<^dWrzK0a>+aw7@WyRpR&*H%aUP
zhlh~!Xh+w=290J}fD7(`T44P1O78JbTP#fnz2_a=8aZj6_{X3*7bZJPnfTzPY1Q-E
zqL7|^8upae&$<sF<5|E&9w%$nixN0#=GsZub)3I1@ow72Fg_3fpymPqcz(CUuAUB#
z0m2T#{(iltaIbk7^?89cYB19PWL>{4Oiyy!5;pB)b-(9|-Q{^nVvs5l-uSS*v_!IF
z`y9*Mag&43%*bckD(p42)PXllB9Adik-8^~3KPlL@=8r{M)#XAiG?z1W0~z16i7Ch
zRoI=Fb)LnFl%t?L<3uw$5+I6?REa_%EXuA5Ga#ZKfB`Ar@m6XU6e?sRc5&jyZ#@ET
zXuD=Cf~Q>1fpop650uQ@y)k)uS$i+1hDToMd6%Qb+T_+#gz<ROc<%ao@D*j(Y}qNz
z%=%vQi|#Sjr6VPbTS=lN+UtoD#*8&*SUYBeC&WR#K&#AH3G*Nvk1h1XR?J#hB(ybW
zD%SU?Y4bS1NNJ$1zc=8{b-2wsuV7E#z0p3;vb5vlt^M{q`My5hKA-|@I?&&NeU6SN
z^st`X|4IjKv0R6d;$th^7ZfeWqPb|MqTH2=&1~zzMbagU0_&s3wV|VV6(NK~fb>Pk
z)XlL3>$hIQOK9hFhK8g1nMcjSFC!a~1b{n-B0PED4t3}+=A%$UDz#aC#;>sNDd?>^
z(@@q`(8jVn^nNe!$Qd<ISg3idmXo2P0<~IusWWIJLH<&S;t=deBZdsfb?!%K4d#_M
ze=r>uDu)G(^T6ceOD>lH3zbaq1{{(85E@ISAZ1{%5^jrj@r8GyB-)U8h4wwtMmpoT
z+TaAnyf3#iOF)>2V#RLl`=zHAoz0?HOHod|p$oKEX{`Xt=R5MY&=_6Ldvmnmk!4n4
zvpM(2BKJe~#N~UhaJ~ZF!+pk5NT%JLC9qbh8AT!=9E8;4oi3`FyeiKQn+d?|y{BC9
zmyxGB!XpI3%ZYdkm$}eUg`xo{ujw8VH7nkoJOVnpGeZ(tFqF*l79LPkIXV3`{u62A
zbWh?3AdwkmpK_9eSU+T^bAnSO9o14@<Gy`*wDZ#@b(t#$S~rstQVlVhidyWTQ1i`$
zas*{_LWP;1TjyIgk`5{p>ydW&w-`$rJTj%y=QTwT-qiaR*B9i@lDF{IChf_-QMDy9
zcF%{(aEFF4H2MW)xMqOYoLY>e<VxbcEVX^bUzg&$mk@WEn0uhP&s@DTG-W*MlB|Hz
zUK|@5Y@=>sk1UulO$aE@>4Bjkbtal8+e%J!;&df*DPQUu0(4w)Kj-?=!dhdeav9FS
zG)xC+PMUtlJg_9b<npR)t_jt!%Q&{#`QmM!$#WA)tAh>7r6p;q8aD66qj34v<D?H8
zo3-7>8{$f~NkM3hytqB$_Txr!95~eV3r$S#d_&HmPIRKN`K?OA0c^L~bzeJ}8nd}y
z7EQOkrhW|9oMU(e^a^gsF8@s3f?;|@@<TVOWZC|Qt+N)8Pj^WwvV0g2>Q9@q*OM`s
zqxbAIc05l`V`{>|Ye@tFPImsEvt7l)){6c0xyC5LFZ1zH)Zeap(M(JAa<BF0mlwKl
z?awV_0EeEjE%r|L8$AZ<1blhwSCIh4#06&@vIrg)K-Rp+uB}f7<(rLwB@c|!2~_Fy
zTH&{^ksXa*CijGtS9HJNgejl^s3R((#|<Y>JB*}RZt%^sB<O!BLnxC%Is?L-&T>?Z
z%V#K|316u#RUQ)$h{i@SwspWB`M?JSruh@5&!!8_e58yRb}8>A?dJ$UeZrPZr_I1i
z`4PLrsE<mM%*7nIPm5`}qy~!gxpD32>e^C9(LH-%b2zs_+Obj+cav*v^}5NE#5yfZ
z*0PeNT)fmYBg$vGTt{dnmi3*{eQNcSJSs=kL~rs5?Cf7kzBafPpjJP;2SIfCsF_il
zysgzDOu9So{?!tT$v3$0hBiwWGqt}~0U+b^r@-cc@}kN#LyGY}a=d0@Ij<5|A20JR
z<OhlmA7#{ExKR?aL-X!bHb)-xhdm$@UjDMak(xs5mY!aSW)4s<JWDv|0!3tQ&^2*=
z@Ei<LBYRfr3-CRD`0|rV7ZIZJi&7s*lU<5Fo3g-0K_(D76`oS|Uh$dphCMK;hpz0E
zL|{<O3SO9AuZU06G+J16HS*E^gn&oh-lF&6<X)$gg{aI5hDW$+oZ7CM)QnhI!{$=p
zZhAYeUMZ;qi5<Ud)+pSiVL1Hh+vjAQ>FP`$!4Y~(sg)Ixrt-nmKAGc+uI*%|?e0U$
zWDY1Kem%TYvySMVn&5j%$%yo?G{WQy1gN>%R2|)Jf+5`a$-8|n%|KwTi<L-ABzZEp
zi$rjb-^&M4j5*i+ta<7BR?%wvK)dqz?4}jdtfXx4$P2=314x)9BijJ_sQgaUe1D#z
z(;k}^_y##?mcMOmEAI&l9W(w)wRj})sDeebxZr&``9;W7{Tmw9C<Vu9ahd0Ez91l$
zqIEhPd1iv&{64Geg+Rv#QAJ2C_lh0QyUWnD63vOxRp;mQqELb(a4d`3dL?^Ax^6G;
z2EN?Y+HDrHV|okzei-ycVBn6`zNv8`r$ATi&5c{H8E;>)?xIV$csAH}H<DW4gI75|
zkjYD>k^|kQ_VA*3su)$&WNKz;I&R#MgTGXw>n=3?DezpVVy<em({c2o&v$7tXGp7I
zvhUfPnqi|ZPj$gI@Po%Kij+H?V>Nw?aFUe^h!$}j1uub2WF@X5kJ^qGL;qDta+x;)
z$laVBJe<^G`xbutyD3|u7N5th$46aEr(2-A@|D4b=c_y|sIkx9(pqcR-fr*`&Jjf{
zv3CT~hO_#GHr56zsn)-HtJ-=ClYPhPf@_DB>*YRUl3ncb60r&9GIA=Dr?t2!<j#K5
zr!}tKre;2qcls``UF7!{=6yWhUN5cRtJM(y3b{4Z5tE~W9^1lksY<-GBb3B4uZ_(b
zgb`GuoeX2h%Yu0c7ED^JoDJf~C+b`v7;_%qi_I&km5wadhX_38Hp`cdn5nY!h5(Bt
zqEiif-(=~!Q}wlzsTpgIw4jN&MFS2j(b#$FJ3H3f#aP;b<IScfO?qrOP3sfoB%Rsz
zb+LdOkeB(-VQw%+Y$wu)22#~hXI^TaBmb7IfNpmvSD`}$%(u@)(pF|@gDnkox$HRN
zJSf<spOpVtqNh|Ie$?E|v}as(_;nf;`b#1eCViXD<9nV;jRyem{VtL6wzYS+b#@eX
z^YikI($~_76s2t6tzpX}^DkoC>Q|<4N5;if#ED%3K^`%=sF^3^l3gt7o7@3+BHTW<
z2Oc;{pGMgy4XTmt4EWSws&UpcOR5z*1h97B1DT&Y08K2rwsHi})opf2yo5^Zzt?~h
zqlkii##yITl=kb_pBPE0sxot1EYH~W$`+n~JE*d~M7pWFjnF#TuHw3HO;f6HA{SI`
zLT+LD?R0*KJ%^;4YtT%nM0}(o@vF1k;xOTJ?uBOig+TTpUNJqwCLPdPSRRR4Sl)q|
z>9?`9H;*^++uIY3+`G1PDW>4LA@_Yik1ri!CMqITd7Th*jAt`(TALD@Lo~*ruoLI4
zcbc){z+;oC{E!I8+r=nb4FvYo(=4A*lT+5&o4!e$0&XN`7~Xc}g219Cj{lU2Pj!zv
z6<PxAAEQ;IRpq^jWKd#?@}c_3P|Su)%blr~L!X`!&K4=+LoF!r>PbBd{o(P;xfzWG
z6)b_S1`e(q-aq^H@Bi(OvaRr=`kOWXH|d|ipHhKerT=sF|2+5)U;ndgD_DMS{%!F8
z68_KS|B3o(lz#R3KT#!NS-(U5*Y*GWyr0Bht=C^f<L?3fuao<q5&M<-tJnC8+4B8-
q;$NA6IgekVzwW!gpm^lJf&Tw4)YTv${2?X!eldMNF?m7p<Ly5{1lo}R

literal 0
HcmV?d00001

diff --git a/.yarn/cache/chart.js-npm-4.5.1-97698d58cc-34b35b3736.zip b/.yarn/cache/chart.js-npm-4.5.1-97698d58cc-34b35b3736.zip
new file mode 100644
index 0000000000000000000000000000000000000000..2dba0d6d9f90d2dbbb1f3cb0fd4ef68215bccb9d
GIT binary patch
literal 1614023
zcmaI7Q;;w`&?P*!ZQC}Vv2EM7ZQHhO+qP}nGyl8$@6}d)o2uZVPjyaTBz>wAc`0BJ
z6oCKL1Zr0y{`cbl46y&rwsyuQdNy{(F4iVa^z#3sDcb*SYGiKU=uBt%|H5GZj~D|N
zXS@I73<v<?fA4FAewE1MKS1Swo%sI^{9kA~BTFZh8AiB41{lzJ-m>vk0>U={RAlgd
zm<p>D;S#{D6e_~oSnQC172iKUnyT_KFXNd*`rL~a($aarXC<VYD`*BOH!K|0pI*GS
zri~2{2ORXoxDc(GeQnfxU_gN1dX)~bjMfnUS2F|NQad9u<!~YkU7;=W6ts7s|2a(m
zGi757C+Gi*GN{t>pCczAz?UW%0LlMI`F{id|7icm`TFO|7n?JYAlCOyso2abtXO2B
z@r$WRc|v#3a`Mk1#m8FB#iQl3LdjTil1aoeF`1@CEN|8-`ziJe5snBb4T2zEda^e2
zcIS47GD@5P00byNfPn7pZl_0Sn>sfqb;j~}s<Hih=sd0nT;91;Glzcc?auG>*@7it
zu8&46>J)_Ug*@o+V0MT<)N~H*Nks`?ry6Yr$+Ek~RHdW3bY#R^lXc{>nX1?Cqt{(U
zuJWUiiS>5xLWicx&_Yv2wP%Ohjc%%xqsH`1rHLmym3qlt<r-Dy1s~l->BXz)D`_d}
zW9-C7%gp#Hnyin;D`<zi_weuAeZf0h<&8XQqcDKpjjYMBgC=+Ss%a6X?%lhL;V+Bk
zwDc}2g7N~s9OAc)t0t{T2tbv#;O}F^x)s|;#F*y5=%wPlm*)=t5Nl?{TX#-QI_1c*
zwfb<*l&9+Kq>^b5kaz5*J5w<yi+kk2yP-0!?rVLjo?@mxZD?@16$`EE>d8_*c;S#F
zQi3xJHzg^Kfux!*b7e|}m0f)^3=O<XA?Radqf5mF?^2FF(@}-~w7M{elS`L{esaR1
z&yNTHnwKm0P3Wzc367Pr_UxsS&dg{l;wNL(X-J|^nl7_6vu^)tUEkA%i>vC)r(dMO
zrhrZ@oDAHEKz|zs46shdWm|b_iBC-5NBems@hR@UuT)cq1%{q|BZX}^nZ`N4D7;bZ
z6&m5BO~ykt2H@aF?!~+ForUHTY{?M^<n9pXboRoAcSdxn_+fPESf3`9B$(k2J5-T7
zmvVtA{@J|ueHq{Wp1CP5>$19<HrMs}2IYKOkq3?3-9KZyB*m@#Z|;xATB4`Y|GnyC
z;!-)wpgY~s(7=xXr;qbK%^Jk1QU-LlpkN%_qQ*kWS8~HY%wTg$F(~A>HsA*WLB-l`
zEyx*be$u5^5C6Ip6(({2>byR?`f^HgD5SbgvwBkFfx-~H!}XqDV+n2yXj4UN=iJEO
zw94}lvBEr`y+u7)YkG*5DrkEfg*FkWw~&;3eWndNhko{JGTv5`0>U0@XvIE^gg3Ab
zOL-HPcDv7QmqvE_boi;(2gGg72DBqY8R&+sbmH)OJKk|c$&}>1cXvW&*akOmJu%CQ
z-GKkn0?KF;bvnl(m$#|JP`R43){du)yCPnV9ujgA^V%3_cF7eKS=c%qD|HVu94#G(
z@uAT@zqVm;+5FxJ%WH}frpv6HDe0tronM^agVHd2L)-S|<@BCktU=yrhb=MKprP4W
zz0sL{KGyK?N_hZZmc?_ey_3Z;m{U2H!_cCpu*75#nT-o0M=$+pzWF(S>SB37<aq=M
z^oEZoee?BzYl8?c{X~Kxb0OR}gfS--%0_dzIiM-~K7l(8mI9^1G58ijA$uol!O?e@
zQ7sWB57PVJX1G<oP{b6d3~NuivS@F*bSQxa)<&T4<l|&o4BXEKJIgjv%2}|zFmT(D
z3}PsTIcnGSXSw!Sl>BUP;mmNc3$Y{02|C!t2u_k-oHiSl1)f#Szim%I+Z=*Z5NP7|
zIr5ci{_&+I?1^7NX}QY*EC?-5U07?UVp_T?)~p>vPfbCifa@%7cK0>99Uu3)cE7rJ
zyRa}jU+=HO`}ytZ2i>dMDW7gZVo^02PQBbTdt&Ao&+D>|KCR+8H5I4cbipZmZCqNk
zrpj#epCeNTQ`?590z!s%59*;Z`2ILiKN`HO&JfNGX=ZMBr|JEXUffjPB)8-!^w!Z)
z0W)j3p!ZZB4}h?j+4IKim8HYHKThDuXa?x<*$Dxr8FF}<^0E6f4WE^~>-T{;*{UkH
zDzNwQ{%Q9Xh^G?lM}-yVA^d6UDt`l;qc}l_xz*RJK5Av6eoCdB@#FX5XJt0iI=BN2
z{xDx~$jFPpUnR~ifRCulJ0Ta@E9e)XZtZCp%)2S2zjtHfQgV~#bM`x@^yW~?ufZT=
z1w`JgXfTD{hQF16HyN%ZIwMSxfkqtF^<A9uN$a9t;mKD|P#4qRT^yqpB-_PQY0lQ8
zO;xdRRTGf_3MIh)DHWz5`5r24jLvSihZ!C`S{PW6*-#X4`PjZny1>^tf`I_8G)jOv
zT%f|i2eSLZ^LjM1GA~_j1!&*l)CeCQT+#f%8kuqTa)EwCQT^r^^7*=L_@MPoo*J|&
zxOnxx+PA)`f=h0@gH%f9N3`dGC0CWtT0I<!_W*IV#-FJs>09vbT=SWkBfQ`_bUMv2
zeg??}D`it@cf-j2twF^X4LCUyUD=YN(e~XWVm@%tf)bU3(c^R4ELvbo{~QrRoR26t
z@yZ@LTy={cyV9RXKzcVQly=*ErK7<|i#iO3Z;MN1F0ffeq!-F(R-80N_U1b!-T{In
zsS>C=ZGbDY7<ffiVo_<Gptu>F979f`sns=MgR#{JWKAVhCkM3!<`E!$_I7~zAQGkV
zyO^|h4Gy#Z8EjsEE{)c=Pa`;N8V~HBN2l`m!TSFW0l0C!&^>Iz?MYVV`k}lHS^m8p
z9@uIkE|}h*nQViLqIp9&VxdMSx!lWqK<>TK6T*jvn0X7PO2_SDjH#ZApGf%P`A}V{
z@R#_y-iweI5Qh6Ya@^t<KQe67@5-n28mynrE-CksRQiGkv*2a2>3J|R`4^(+>)f0S
ze$Oo=n*=O5mzu3yIx~)liB}q`R+;_YW`r>P{Vs0pfUthQf~QHjf$juoow6IWsvc-8
zYiR-F5}vMh$Qf~;Q*U3L%F^u8vwq~>W|y9~^GV<dJX9^ISUM`NR9{x!z$OFev54ju
z&~e-*#Wk#w@RePjTovg>+h1PVRl-o<Qt9R)|9gc3;`mh8q5pDl6V0WjHx)&By-AD$
z@u?^cjh!0_)LIVyY$a|2)bq>iD}Y+#Pc~awoFVJ>$ygxy>W{P;BiK+1@=>}W@Hwy=
z*mQ_&l))SR24i6V%sL*ZJXfj#J#1xIOTyRzc6lQj_px*lc*B3IvJwAr&Xmh6?H-*H
zQuhbk?GQn<9Wo{X%SaeUS_R%DgFd{M5o_f{g$1c=eq><;ilJ$p<1L!F%)co0YCRLT
z(#v%|bu|anI)2-s{Y4^aHJLn{MuXc5q>3@eO=Vo6_vYmue}mw@r4)!h0fZ(fay{l@
z>I%u=YN(iI0nWP8I;RDOz!&Y)!a61U;H!no_L4JY=Ee+*ShyPm0Qp|HY|ec9qDm1*
z7^c-5ODE-xdpz}Px@{;jj@REo_O90YxRsXH2>KbW4W_)cID|1H!7U!?R{+aoz<Dy~
z4ioN=wSgxht>baF^7=#P+C!tQi=SyQc-+6`0NfPk)p&`?hvX@E>&pEE=}xb^{19om
z1zdYd%_Ys%y+uvCKhF!P?%$aNL>XN)(GHH5s^TC}|B7tv=XLFjiX)Bssn!jcWt)JL
zqv6IWUWW^FEMPYEH%srUV|ScPca?=<?LY!EGk;;|$^e&#wX%vq`sa3WB&dcBJTJaq
zK#YPb5)1CJfluzz^@4tNjvl?r!GoE;m-&eC6?2N2R7YmxV&Lt%@VHG^js|3hO?%a+
z+Nt7i!YvwFD|gDczOx0HOIxPe3M_ct;l}V5%N(d?LDmDWv3HqIEaKeGhod)5-d_Dn
zaV&<PR=?g7$mr+BAkWEg7oNh5psdsZFE}!-L!qCFe1KGJs6Piz353f&&IH8$E)YuG
z`D2<agck4$#|^Z^`!?7$g}AOF-dHr?lY=(qENTSc4La~o606H?6QovFQDT$OU+dVU
z4CIoi*K*_Mc>{u5S3YS<f1t9JM%o+$JA=@vs*U>SL7#5Omo+uXQI$7q<;>@M$~u0-
z`k^ATx3@ae=qat(3>auMRwcmq9-g0f$YV!lTqgl0*+k?C%n0~<!YaFf3a9Td&+Gam
z-yH|O6oWeoW~;ONvF2c|wubf}P_BXu=j)MAbo>}Yr~jQLA1dp#{h0h+EbFoXiEZ6v
z_-d6~@Y<DI&HIQBW(@kN(53o~#Cny39foM__GNhQ5g#X9ok-NxDjMXjYSfd1120oK
zq`T#1l2XtVwT5T2dJUSHd`5IqhJa^uON08riDdwAQPH9+?AA6zl&LxnY?Q|O`bHOD
z3mW$l?pG128WejkMj0X>&IddTGMT~`Jp*bNNkegv>DTEWz_hd^4m)kR4yn0~Vlv*y
zxbf-nlBWjVjK7yU;z~ktpv6$dE-e<ZH6QtNPqy5ZM2oX#!;xoeWoF)`i4A~ct9~4_
z$7qfU#E8~gK|{*<zE}A|n!Vc((ArQTo0$#=%mYF3zo#@{{8=F<0mC3et0+B<`}tw!
zX;wh!l+F7H>KLhiE&-{J-`=i2wkooGuW9#t1i<uqK=Fh|m#3ShgkW1S5RUH<mRA}t
zKZcqiK?csD{0Ff@d0vqJ<lkGbf_k#LT%VNk$=4wa8U}8Celk3|8N8MF;7Tyk7RA7}
zysb-TQd9Vg-wCNR6f~7bk;1W6Esv(>b`)prkuQG6!*lRi1z8DJ=<|BE9vZ}!Bsb>Z
z&5Iss)3a260FYPgeOiA{k71-*i#7=Jll3zQlok7$@Q^HG_w8;-pOK~<C<qZxXDIGW
z>#g0UVjF{K?2NR=X+k)~RfnSup8E9SU6DljhihowX3h#ngUT7QVtyHDQeJuX1YeS>
zJU{MGaSW9Glrw=g`P6vbGuj8;BChc4Trf3tT<uE2uNgcYQd8v*>3lf^Tg|{GW!duj
z%-ej1HAuW*#stBB6Cqx4N8v{2C83hO(hi7$0AfCK#!)n?Szd`%J9UZ5s!L_FrPo{~
zP#X=8$5j!C!mNy4L+$8`d4WMY3rF8+rfB2~h2SdFEnXjB>Ve>qZn~VOTmSmLZ=K3{
zE6do6_I%)EtO2q8G0A^{mWs3bhKb)DG+5;f!e}977$1VHIfXHuA^iB;oQ8?sfZ0I^
zW&cf2Sc1)`3po+dJd`iM)BoN~e5LXCaCm<VwbA>zfBXs&z%5;+yWI>MZ9UFhxzUSA
z>9o4<@C-@uaZAqVm|36?&GYWRk<*=Ocy@3MlEos@zv*DJtY4CcNPAtDj|Hy7`>eNa
zf^X@@{;G74<o-F*nE*;LpGBF#u9;uNjpGIS<LqOOH{t+4emSyovYPp$`iNr<uHKd!
z-)=s@{w3x~e2E*iIHGhM^!MhI#hq(+Wceyw1JLXOy{}U9f2=ZkC)`3l1mAg7nKEXn
zh-&lG&s3K(b}S8D)^lVhCoNe*g<~N1#*YL0@1(~t94!8Zs-%!c<2Z&zk@hwu>pqIb
z^4KLdiQv&J5E}A9;T^xjpYaw7alt`24L*U(B4rz?>J{T+4j^m`p_+vaA>yK*QV1+#
zpe#Jt@7p4U<6cyu3-mdalY?`#vK10|o~duz;1R6zL7H&^f1G=W!AL|}R%E6PcMhTU
z8ab~Yo>QZ&e-Z=;qc__2i)R%5Yf4t8r=P@ZEVd8fKq<-n5;;NC{Agp#-WI00+v?P)
zwQr~Iv4Tf%9?mWJw;uMaWUoiZv~V^MPUmxLlP9UL3(<(-%Bq>WI#$(dJXTE8nkH`F
zSXZm+)5z>rOdxkRERG8}Ogn@}7-L@O&@?k9*o;y6hSy~_ICf6H{SfVK(IVV)4+sIs
zhfuwXTQ;e5Rx9hRuH1A919R)g3UjVRB3oEkO37bw;##a1Ool7gRB3&E0gO%aDE?$u
z{9PD{&6v&dz1-Bu%jjBd76(i2L^hrK?YgcyK@nF2AN>|BWF8hgxufo%Z-_u>&c-P9
z#<PNlnmQrc3KoE>)loqLMjd={ZZ*x~zH=)ocI>(Yq#m2R7WKZhqy9Lz78B~*W^+CX
zu;p)2C;SSc%~yv#^yn+hI8NpMDKHzl1_~;tG(a}y@@Dch()}1Kl$7!D^7tM$a*4|a
z2!Mi=5WOvJ2OH|PST+Xg!)WO7*(i_)hG)wm3Q2;i;EWYQ09=c+0wA7Q_Tp?=j41XN
zc1vXnRorXSEt?T8T4f-XWNQ+gSlq=M--CDb*vwo&zI0ca%fb4!sG;9sX!#hpKILVP
z^zeYMj{4GN2s@6>+X`vT3YlG9``uvv8_Tzr`e1(#38Kv|FmUz6AX5SrK7C935{y!1
z0g#G1!(tnDD5lJA&O*!&XZv8jE-l4_UInGFx%3vI2G+7dbm_aphO?E!X|k(9AF(Pq
zH%;47qsR&#!ubNRMaMsKGV;+u_;B)MiM0FO64{qE&$-35aP@Jl5>p_FlqQ~&UnNKU
z)t&CE2GHC(%ifav_@YOBu|GA%N_?PL&|J-GEnV5<`HMKWO!`OSF^jjv+MuMqozK(n
z$kn2Rg3tpQti+4i;2e5QcYUkS<IUW~QE^5e&rte<r(Bt-TWAo{K_88CUtxXv<L9}z
zY?@pp0*IJHu#DV##Thg&_j2j%&`?OfhctYM!%Y<qQdV>bI~qlG$(-L*m@PN+;0cub
z9<vEYm7Rh=gJ>FWSqu_XVA!kvAx6+-zCJtqn#TnH;p`<AO2YC|`2f+t$f4$>g2*aO
z6jfmu@A5j=B>v?%FfI(wcM#5SIEP!I3=tXKv&meM=Q);3hbHBu6{v)I9A;nu;^@Q+
z+V&|v2J_h@zbt_G&ZRv@P<L68#8tOX_x;#$*bqE+c6G{`6K1=h9b|CJWG2caerk`)
z)xFz1bmfApOO4A`Fl4#}m*s-XCK)EKDwoc22c4K{VBUhCsde0I#}=%D1#}w9fPF%B
zH=x}bC<viOiJ|G+=?ua&ythY(1$;zR<GZ8y!&S4}tgHs6)TUgwbeTrGLhs|Ux#AsU
zf+J!xO`tTD<1_Ws&j?3kP6FE!2<2mV0ze%t4Tr^wMxWOv)M5#%#SR0FH>fv6jRTY{
z2Y_8qUbaoPe0vj-;z5JJf4X-pBpYpps64Z)kdFD&%=Gwh_{kRL%fK-l)^r{o?)E*B
zZ8*Eny%{CN(<yXC_{u!q(GIClaKpg01V@lfZmup{H6dnFik%Ii3iZmza*w?1T1ems
zQIsm{59g%&wr*{sgV2#_y=V}D^w2XkMJt4#(bInq;hzM3c<_$3Ipl*bIUli))}$kZ
zp!nKMg+W<pHkdQ;97AG3fAsP=l9B<$_k2!WJj0XY=DNwAxz_GmCXS|ogpLjxvh6L!
zm}f^Cf?1rFhQS>ERe!ecz`N9#mtY=8ce(NGBJ_#DPk3y@ubihnKugvR$bVnQIww2z
zA;D_X#ZJE7xSG~<!R_~jNOLPiFOh2&dgf%O4n+EpD2yy|<Fsl`xvI9TB&ECnb<Wx6
z8TmOMGjFdQ+STQS_<FbzaVB-{P4U{tmKMW!JCU>#xWo<Pi=2kxWfd!7#Ho?3_9sh5
zr95O4=XNW_Zyo?<>9o44Wol%#mAv%A@NAyqp#hr+Dj_-6X8gVLTrpO#$9PLg^s)r!
zN#>x^Hj<-a3bxYj?SqZu2IQHKa*~&#c20;p`phE@pEs}ZX?nSr!pkXaH;%iTz*{G9
zL)r5^Ac6)v)bEw_tmYcVl~yy>4k0_sT|A1k@1dmQX&(oHL4M`)Ni^iAX;m^2;@7=)
z%-JWLIne0nJqa9UL&ScTTwuIeNhi|jj&h8ac@f|V^5tu9`VNf^B(gC^!W9IHDPrb;
z5Tses3_FGxTn`Jr2>F>+$|p1wAHy{d1WNCxUadQ;$G%kQ(aI6jHgfSbf?ddGf6g*&
z90T1QLS=7WEJtvE|A9@@+_#wCKfMSDj-JJ3zTBpVuEj$9T-$5zOby|XOrX*_3Oy^!
zd8ZpTR$lZbUA*BPtlyO}^UnU181<?#O@2&k8T7=+iD?J2bR(_}#ja}vzL`)^%Q$QB
zU^q$KWCDcIeC%JSj79vUQ?_momB0(m=dkCZMTZeK$}O25Dr%}$5l~M0k)0FgCm%Mz
znYrd(X-bY|EdoDkScni7!ypt!c@Q;y2ABOHf)zlr4)-u>Ttbz3TDV7s7x&HJsJt4W
zK#k&hLUHX08?s{w8kP{VT-Ol0njTf)l;qNjrG>Jt0%-olO&jIG+gg4Ii|3s~dhIys
zGl7*^x%-KY@=z-B?z00un1gQlOJ5QwEzhEf&!Ww;1Ix<>zB5rme0+uRXmc@Hf6uPI
zSa(!LiHXbB9qy$eSebMKI=;)%6(p4kGHAkFM`R@!?E|-fajfP&>j*Y1d;TV7U<iD9
zdzPqfYqUEc!&B^nbf<^4wXKl4*@1h^(>Q1)do2ttzS3<Zk?a9&8EBU^l0ljb<_jNX
zZh#~MVFtnPB0zl)8u6PKoR``$@+1E%AN?Wb^3g3wF+SxHOofGL_tK-R!bJ?9`@629
z9sY{)-2@1)^ch#<v=Iv`oOEU<ZgK>@1OWMp-1!rFo?0uvS_b>&!~3_p+#q!!ooQQh
z3GKGNtQvQNL#_wyu*KOqY{wcwB1Jw}VE8!W9Ps-y9;fN0GI?WR3Y5C;2a1-|y8={+
zoa&!T%4vo$0Xm;Ta^_HI<8g|_Tq@yrmu<9tx0rb;#h&h;|7;wqHlr1bN5{W<_Tz5#
z&dNW%jk1v_>`f3&w3`^6x1)2!k^YzrSjmFRhWAkW10IxWr<wheEaj|v-`_=Gc-k79
zDz22pytRD6?1vfW&3S@xJfaGISRe3ZCj(OqXRd(^Ehb0(R6?-{fSCG@;QDO%Ys}__
z%<;+e_K&tjJQ5&<xBC^IY0>exFkx~ck+L<>hU8)y{BvV{!HXT1kbo51k#UXavzZ_-
zukp2;s!n@8<ae_kUY7g8Se7~^vKSlJcDKCf#J&^7Wwo3u+fi?PFM@-dF%m1p;a~>C
zlh<h{qM31zF1(C$cHEf{Jf1RtP03iU%-f!Ue#=0Yi~&_m-Hg0o>Uw8a3==|scXyAl
z!8?1}GTKBMka1OAJfaQBoD)SsB3)!5ehWGT98)knNRWo9ixOEv>9h8EF%WHj7t8Z)
zt#e6T4#{r*WSVBt+`Hr;W`F|w_iH$rq(wXW%;!cCWpuhamayB8iQmc+2OHlg-W<yT
zqN7Y~lFcS}Uw@nV?CRqSVPUhzu2hrlGSBa}Wq9fJP_|-Y`Vtn=W8=(UxiTM<Fp8|&
z=49pB5SP)LWkx85#++Z%Eto!n;+$XulpV<vEX6Wkuv*l6&qK$>+t1-ga@&=IohV`k
zZXhR=QnvyKglEFlWr%iLb&c685+;g8pkpWbc;3*#w4L%Ngb^9%NiyC0#>fX^4p&7D
zs1+sdB1r{~7rhjZ&K#p5-$9YNQdDOMtYs3_*SFKnjPWcRskEsejP*T@J9hM8y!U9a
z&dwRecyM#1%ebdB!Vcn5z`pn_2dN*2mU3GO2R5nfbNI|Y-<9i<3jUrgc{?#{qGe_(
zE3#{ER{`<(V?01-E7@Ro(P${lPK|MBTdstWQV6k$bViz0KINzC3nc^C=$stc9TEE@
z>E>1^*E&S4VGH|LB8knRbF^8@s?AK4*HTMVhRIc@$P>$Mhjoj0XCUjj)`d1_n$oQi
ztQg8BELH^!f0c;1;L8QF)<3n1>>ud$tN9(b6MD;kC%3^6)0w>;Hi>@6a5dz$%D2&;
zp!f;F9ahRqreb4|#%$iTH;lZLY@{bi<T|S2yP#tDgm&{noq@2)ntD?Smg6#&VAf1@
z-Tmy<oD`<b4}IU)G{ClZ8^gahz2lb>H>i+>oY19=YFs)h@KgKkz3!E@W;iJZrZ9p(
z9VJ+I#`qX+))csE%xS4ZBT4R!rbtL`p{^D}!T=|}XEZC0fPyRM^E3`3vntea5al#I
zL3J{&SoOZ`AV8}z8I_-wOY*M3{!pC-G-i%PUJln$!+XtX1FSx*$VaAw&#G<Ok5xVI
z;H8`Y)G2X5x?~np?Ta)Rza@o{g9)+wxU6?H3;y?q?JQC)x7_7m+PC3FHs!ume8|_y
z7uM0q&f+%nX0~;IQ0zmINW9G-z{RN1Y`(F>VNT^T=_gH`>BVQwMxrIX&Y{cDO%ylx
zTMEGlkGn%`(=jju1f)2ZY8Z`3!;lM`G~*J)%G1QPp{7H}94N)Os14mM8L{{fnK~kp
zB2TD~BS!q&Hdiau994u!Rn7dJ)7U<f`AzVeHW4SzNqk>5I{MVcOBaL}lq{<tl|`cT
zP@M9E>G3!`dccbmkOH6ZS${K=lY&bsV(AAxIkVM~>Pl~;i}BmwS)sWBeY;*5a{tc>
z3y7-Rgnu-<OQRLM|DBh_VXN6)`r%~)UekKT5?CD|z1gk-?lZvUI~tidfcIV(5ea)9
z!ll?OC02T7EE&f>Z4Miiu3V-(Rk&~`54rtW)608KDMimB$r)|csTOI~n+7+@*vL-4
z-E!Mk;LU=F^qa!6p}2QUTPTDMlcc@lU2`>Mn2Fm@bHb!>Ug<*J2B8x<VF!w-xe3B*
zU20IH3L_Z{we(ljk_(r-=o*(R640*}uJdud)6gA24WDYID9cfCCeKXy6S7?o-Ezvz
zF?i)=68QUG7&yYaWG5?}BFsCAe}MsCx9}|g;;s_?thI8^d5vhrJI}j<DOE=qf!(pO
z7OW0`0~1NB^GgvK@nlXbIL7paiP+1yTRxIBuU_WT2z`4E_jA%Fowq{N5U!KE18kqg
zT^bwfotl2or;n~_c2kkU6MBVn_G->~R5$m>km0|Br~Q%>-F8QKyIVleIdY+5nZ&*6
z<PP?MnjQ=+KR`p&pqfa`s1GYItp-)bmx)*OKL#5F*VVX;4E+InkLs&wZ2Z@pUV#w#
z<w1wG6)UwDIw?F#19i;4Y4bAbSU<<E7RFBT^B3hb%~E)1OnO21>LWmRJX(X`uow5V
zW~~7`1V6$cg}i)khm3TN*wnKo&qNW!vVQ1Hqx<=nwS$KxyMfe!{Ryjgu55q~XSL7k
zlMMYPJiz!DIk666Xtu2h$G53iO0O%@K6{4M#!}I*i}NCY%=^9ta}XnlNu7*4H%4%>
zFR*=!+c9TzOaSyxNDO;4*fR8ob8(Lx^VIjMvLl%xh?!FJ85XoNNeW~aXGb%OqA8vU
zpr(`-{ATz|T+sR-sG-e`YCV%E;VnXXWAmabhJRLKyVaqQB4B!ae3mjpX0efGn1{^J
z_Y4wxpVw&27Nqm38SS^L(xNn@aZe{?#`9dw;V_2Z6v_inJ_#=5o1P9wvY4&8L?eYi
z*fv26cd?UXCJ1RXj=XcC@p0C5974md`9!fDZC}Sal&g6bhWF!1fXi1&jw@&O{WPH=
z-!oXfmBE?$ViB6I>VbaiaZjK8bX0EyAgyCRy_|2c1Qgi?r$qs&p%j4dh_TSA3Mbd!
zhAKXKb9*UfXHA#5Aco40HpehrMP_w0D#H&G1_t9gLvRdm;&-$j<mfU%aYkv~Vn_kg
z^?B1})1*9yQl*r=0e`;-ecu;)0^o;Itp(?LU02<#L%MGeutrkJnhEq!o(21LkLD7<
zTcZ*MmZRP(7R2smT5s1`+NtPLC|A=N7QY5TJr#B7Bb77K%1&e`#G0aa&A`!x38h0t
zaB3|HtG2wOZ>27Mw>&Iqo`tzpD1SCRo~D|4G?`a#G8%Q=M716LFvxrnM4<i$XFv-1
z23<*UPnHvnjIq<No_CQNwxCUAFxvBPEhXt+2Zn53JKqrH*IxU9wG<UpF$g(1w;#FW
zu5@;lriSV69)mWv`DUDx?V3dKo3(=^cZ|Zt`S{JH`B~Yz)BLfJr#@h26bCR#ERh@w
zPU?PVSa4vqAg2c7a7lEx)t#S>D<!hLjThu*0;!TC`-6#FJ_fWekvWGA<q-o4kqyvj
zHrO*0ul<<M3czG^qXMml1g_`Jt=0oh!-5_42E~$r?4w@NXFgck_6#K5{<DT#zcQIo
zj50>p*l>p^Wk67OGqbo}TT~c+(n?BPQx@z@Uv*|J^OoTNGpCHshT?05!elc-KyNe~
zv6<?Pi<hm!ysK?G!dH@|#NBj$+*-+1WhP7PHJMhAzi=J=mn4L$O^&`sL;^sqWP08S
z$fcQbT9^FdmttX>=l17<u#4T5y913SeDi;Zy5|ly306&y=;heV3_u5;DM3R^*A4ew
z-ALL=L9`hPMgUsm8z{kRV8vU*on60Oh~;#t$wj0$<`^ys_pG7d8K|p-CgVvq5#Jh|
z{|bP+b0jwhF%6^wT4kTpIC)u6N<l^e?rB94;SM1W8T8os0H!zV;jXk3Ryzn?qK_H{
zVbaDcEdB%%Tp<U-@hGJ>D7ic&KLwA4DT9xUIPH<iA|Lvf0QNIi9A`R(tqr7!-rEyR
zEqF~VukN&eh1mq;!kh03t65x`4d=<<t&ZQk6Ay`%{b%y#?!XcDeR6}@*$*8XJ1NZM
zrb^lm4>9f8WnJ?o(wm&+TRPru=ql3oXfr?SPGvP_r%nDEIKRh6UV{QSQ?ya{N8(=B
z!~fB8Cj6K2doIz;irBiR0&b8+JZ(Wd(h6<v8w@C+B-QV4#>xJ?A7|?n+N!=lfW3vM
zY2QeuLX^(LJEmh&E?J4gH=({US(EK;v3DP9Uc{KDzM7TpM1`Pj%?OaGgl?810v{~7
zzSL)Jm)mIRinYSY+i5mNM->@i92t*yMJe%8hlLkRmx)u{@vWYnxmUoh(kW`j<{k$G
zR$f5P@p=yvPVn6FBobMM<yW9^4@o*Q5JWz4AW5Q;xG#?eT$j+h(CQPL;FnI>(h)V8
zX0dYr>?fL)=~0BSC7%h!7cbtJNfoujMirDfY$t?lC8CrQG_|-XIX}-{UO211cqbOY
z*p7eaQXJTD*3hR)Ac**HnNi;L<3}n&u4#^fNnsIja(SKJOeMSR_>W{Pt(>6<(SErn
zcQeF%E(<quwAH~c3nX0jn+!XF;aj=|^u~4@HG~1uGfMdkM>Bm-!1;bu@R-$XFy2u0
z`_BlPQ)9lH$d)c?G1LcY45&@$>r<Rgb1;To06+P`7ZKy|B@BbSZBK=rl0b{V7n}#s
zChG6l({a8Mucxsgaye=PPwpt&aNcVvL4D06k61sPe7l?8&dJRREF)PzG!ZJk&gl1B
zdT75{H<--y{HKgBw5!q5dxM;*N+B2;m_L8+X6jud8?1qcil<dYsSGu0s373^W{$fG
zn}Ctj49FsK5gk3dEU~IN@Cm(4)sj9U?jYE`<yPQL`HK8d*GN8Y{DSSsXATc>kboq?
zu&v$37JBoH>O+b#Jh)?GEh*qx4SEdS(Eo}ZOIU{B*E-+{;*NWLD$A;tw#SyBO!AJ8
z1h2l>ru4v84P|(1jsq2$A~1Nv#_iy>>Q7Y_FmDgvF_tt+%?N7rd2!7SGw)Nc4&x-p
z!^*2|vG1qHpG#V&#a1ME{Te^@RGQ>HR}nm?){DOXE&cp{k~UEEiN>|T<g9b{U#5l0
zR{Qwim86i1IHHc?wPFpW=xgtyg=UTlcFfYp`cA0x*mxF<@j5+6xt7dnUpc9Lc^1h>
zmd+K3eF^NoYuWzn?CUbMclzc_xsTFE_P4Q^Nk54QCT&;wuRwL`dnzMr7<<}?Kpdr}
zM<T!_f={wK+*Z2^^^&_nx}RaCs%3=3Ssg;&d}}rYv+2|53;{c9Q(>MeDhTq@d4BPF
z*9dHP&~9U+RihM3D!KYA(6YgzFVhY$j3&e+=Zi+NODD+8t|#s(?iQJAl~mxf=L01i
z5VO7+cJQ^^9IHVTAJ>rfwCp1Q`w6>hJMaW7^DK$CO-0+7;-EGZ-orXr>Y2#x1Mkb9
zroT_SinDcqRF1u3paxzd<gG7_KyvlY|Fa}ZYLC4~8V8o>4GC=CJsUT&#^}mpB+Oqy
zm1BRK5QCAt@mjryTRC`P;(<R({5kVOySe+Yq^Td%ydQ9^2%j%gu@E+YM+*VP^3u$e
zq1$&fe@DLc(q1qzeQ&|{-Nfp#)wcT5t>ymdY@TDXrP)7xnh}szvBJC6w8Xd&@DxH7
zGin1P#x<%SveK5Hb$mp4nbvmnYaWFp3@y&2rficWr3GW#;)?r`H^4l=v-2AaX|r4w
zSS#$P){6$^iBT6<s~GGri*#_O=`lW$oVMxC7tMcewbs4oMmOdjW;oo^k<ms<CLdU#
zdw9`7Z?u4z1ZA0D8k82HA?a}*t@WMEpC-^ok1*?VaokdF$^{s|%I5)S93XgEy2Z*1
z>czcBFj^nAt;sBc@nkQo`Ki{{MDI!K)II}c8y$Q)#KkF#cU9`HzckGwyh15fW8*H6
z3yt)OyO%ZvOTWb(yo`O`A4xWf`gDd(q%p7lReZSxIzkRwVBdf!U8Gyir2_QvJeM|0
zCM-~r&5|bw?lhhb-P{KOg0opz_Pm9}k1-Mo^NG&0%cN`@>*3{-{|Of^IM|Nc&h@{}
z@JV{FI3Vc>1{X6v;7{h?r;qVyM*x-KbKZ-&WDG|-JX~KYK^ou)29d%`!(D_t(nFG;
zPb!c43($QP4?E6z_)I6=EFw?30q;$;p#&QvwfL36F1>-gd#cWIDS~r&YJlEH)x$9O
zsKt%I8;gZ!o-PwH6M%I^?hQ@VvO;16!5jBBsED{XYXJMwhq8glCTIf;(e!~8PL9Gt
z0_#GVi%f#Oa5164pi+8L)yi+|JqnT}vf{SHvx&$Dx3z|X?W&)MoQVs{S3J_ml*0aC
zFh5r$6BP(nj1t)q$WMpKlDhNguISnonRTiikkmcrz$*o8-6M6j1#6IAz%bFE9~DUi
z<ISyjH1=3(Rb<!{lza(K?R9PoD_5>L>*9ww(jh!(#&KYqCwN9_m>*+|3gQB0v9y2$
z>HHyJF<xyn!mD49-O?3HlAu+;P7T4+JE0!!eO;@I-fgF~^{DnUUqjW3z`-<*uPa{h
zb38%~^HGJqT811r%%Krrp?+TvRBi@pi>^kW#DYy{h=W1K+m-mP(<ZU+E@KN0q(Hz^
z*YA`(4O1jl|A-}iY_sO8gsaDq{+QsmA{xD}8$S-74g;+nABNs4uB$wTL%_tc8W?Tb
z49pg;tIAOKRP;iK6}g6M2ZRx-Pn>%_g!>}}bc47u8@-QYv&q_w%;>mbgwSlh))RsC
zhWP|ibSTZ-Z=L4B6bYX>j2<=TZd`Ay@A22c9!f8na-b)<WhHW#j5}He2S7pvHLs-8
zBeGWO52id2pwc^l;8ly!NA~94p3-(jIG;F>i_r^b$2DlnxcG-<XWQ2HIDkCCq6AGG
z*_!TpDlhRv$AxQLeBw^1^s!Dwq;+4c{;+4$2lElb(C;smD~{hp%M?pIm?Ys-44NwT
z4<jhmVn>V|EChOY;Yy>YvlW|06oIN|)mg=QgH`v8*e+n;UPVvR@v>iYOM&))S%9j_
z4&+ZFJkP&|9i*4M|2Q0hBxTu~W7P_6%WHSQqQ{U5$Al_0Pc7-QI{U?K8M~AFP&129
zKFiXVz**a~+>?6*zqludRC#asEy7X{fCB^V!il^HS=^BVBTox$PWNMVqD=lZVu3>_
zt>X0c<HC*LJ`xp1_o4(elpVk|^8@Y(&$){LIq>xnJ9;4-uk5Hf8~0Bu2+Y7k%SGt;
z`d|^_$`5R&epN!UqZ!Jpw`j*X%f?F2ZdLd*2-c(Q=YeD;J_*T38l{mm2U2U8<bh^T
z8<P3W{*I%4`S_2*S^IQwfW=*x-y#aBqO;qR3iN?hO$nUAl7mKfHtwL~m1|Z=Kn`_5
z7V7QEj7TU#*+&@B5rI~gxeCcRzESY#uKr#<rM+gH3yv>5B96){r&;5S#Z9L(9)FIi
zJIOBqzhZ+DkC>r;>kAuNeA8P}5u>@vKE0IChYy}B>^W<N@0hE!SoI+@%k}oQHxxvw
zYD>MY5%YKtUt}>*yl#MKquA2pYj?0b>KW3g7JbJMc}Jxk;@Xj=z~LXv&%ZhOGlrkV
z&dWzR$gtztatvC6-BcuopU6GW=lp-R`BS!Oe%rD<eHy1SmN)(xah<;`EumdYIty_8
z96n{&J8GMg%8R)gBgiET9uvm-mzgMSLaNLV5uMi1AZDz*>huxG$HbZ9qzj+JQ5BhD
z9Ok<&wL1i`25a|)8FSIcRRn|HmbI*k(4+AUrdQ}<VojH;saNZtYK*%4ddp8LcXx}+
zIC~j?+osC9`Lx4!#>&1eyIfr}!(X0Dr<3J=BE+p(T3aDvo>Z6m$m$scV#6SZ)2R_7
zNpnUM-Ro-`3hl}dL5K?SZe812>J4WPOMtU!2cwSqjYXo^R&K3ht*cmQYvDZaiNE*y
z?ToG9*o9xJWZzi5T>zihVjQR9LGiG#-z_43zm-z+hO{*x+_R&MqX-)13>ymyI3mc_
zQp`A%y7R|do(TCJs(!d!6v>j<NcmA>#ilO?Y`wjl?QvrWeM_70mW{J>BPm`D?Z1_5
z$NtMzszX-_n-JQvwOiOaWuYy!^e8s12XvCa7R3a#)wzqUYv9C>Rr<ZYHotXy{v9|!
zw)4KYx57Pwa_Bi)GIa`-mk2#tP5q^<=Dsq1uB|<;w0(^)EvE_fy9ozXSv<^k6c<n>
zT-*|JWp$<;uoz&6!qR3;n_oIEY4OvKsLh)iQp5+?E2$e7^+G#7!{Y&Mv%cEP9xLzX
zaps+w3b~!kXA;M;1M*eRewc4{np@~c)w8R-xRyIi$jbA&`#~h>gNQ`!Hrb_ee>OID
z2^5{0yO9{1LD56zTufekWpj3s&=*`?>Ns|0RqHWIVz#cs;r*o~NiJ6oPu~ufzGP{@
zbUF~wQ@bUkky_Rw-~ToUN7x~o2|!N0(n@NkNxGNNc%R9sZE8}GjhI#3M&Y7_-<6Vf
zMFJf50z3O5c<L6qI`(K(NlkjPmS>I+uiGsvKZ=3Mx>gPiN&h_vjN}Oki0HivrY7t?
z&l&s{+zU|%n+fff7+f)u?ec#pv^-d<$`QOGGca;{lj;Rj4PM$!NK{(P`MEZp8ym#2
zS#!%%``M?Y-IgfSS%(tucOF=vf=*kDxc`0Nfu8w7qFOgc^@v%x>%M<CYx-1Hc2r@9
zay^$fVk%W*#-WeFt~a)uO#l|z<9y_Omf!!pT*X;(!%PvF78zuCd`C+lBbvpl1*c+l
zeP~qu2B^f1{q7{G?cw!$SOj<r5a5GFGG^Q@MYDq)Zkd5A%<(t3vM+aEjDN%35{tGv
z#4i+;?=AQU1FwD{tUz*mXA#&~#1E$Kk*RAjR!c)rVws{;Jq|J4^3lB`{1Zz+d;2&%
zJa+bN=&ZqWv)uZl%G_?uF!$V6uMx+uZ0kRxqKyoxxsRRxI4*E|(yOCDgJCawcgf;?
z>&czVDbucv+<3jJ1bI!YYUohSqPT;0-ko}KRGgDzllN>|XC1$p2KsS0>tlYumBx9Z
z_%y^F9l85!9(qInAb7>Qh7fSI28#9TWL>F=+|u>=hSQME{Pb=yKPKZWHk7xBgKo^(
z^*WxZ=EeIbhw@^g<KvAKXy|#S{oA3N^GbV|mo~MuD^M4(QJU9ixwDHjdD4*}yqEYw
zJ(b|V_uu=3r5@HQ*?C9y9nIpe@sM1`8mgfeDyTCH=KItClABvP^IX?8mUo;{!8bzb
zYOsfGm?Cc`=0#V)$cT+X#y?#ellzu}m<LloE@+L*9Mf7aTuWIgRk2g$P}7;<Frm>g
zvLnqAz}%EGpGa`1)x(A&4LnxWGxBT58F2xx#P#Zv0vg1;S6-FQt&QktT!9L%=IuZI
zlWI$w^@;%p-mC-lQI^dG1<nr$HioAQ=Kt~q`RVQY&-C*WEo#p}Ty(epq->C_|NaE*
zYeQbp-bPl7pN$dUh<tfBclF<xH5nwRB*M&2z;^~tHYW<rC76MQ`Hc~&8k&K1ePu3e
z^ibZ8CYUXgsh^vb7YWaiQLB-<kRAixGd0Xo(PFH#5ijs%ON!lQ+l9;&TW?2`snH$&
zdCXEMyQFv1N0SEchx+r3N<{jtRJ4+?-x)@!$z1b|Y7{atiU>D-KbD0k8x=v7F~0Mf
zOT?JHamLKZ@HiaZ2q(KHt}tQ3GFMktUxAiZHD?qR)(Ol*OM3E#>XcsGrj@t26$0P%
z>0dYyZzoP?*b-~S!~2j<qKoxg)YCbr-5yC6%+qWuy`L3Kp8%n8sQ9R!4@XMdbG$+2
z7^?;F*8%S<!P!hS(yUnYPAFHy>${EMI}))LHu*H14+L+ECt;PY^LEnhs=?Z!NxpV6
zOM>ul`+^ZgcgtF+Zy3ix6{vNfqb)JMyG<LYf;IY|k=Um*-_ctf{rSIbBV%-1Ao~5-
zzQo;5!jhyyqvhO|HmxhlQ4r2OZ9Cn0!w=D!%aWZYw&q|Bjz5f&$buJuCe;QEoBuAp
zPV~TU%Dr->`hrtiuvEQEUNBdZ3yL+>N*`nZ#EN41=4TaK9!-~#-hOy~MMyV$Yx$A~
z`!m^YzM?Gl=>JM&liV&>#H_U`>g~^{=uvqrDigJaZO^E5SrS!*<vspQ$Y)=Vmlg<$
zU-vk3d>e0I09SqPYk+|z=LUNYTDnc{17o9dF2N4|p$50aP)s0vG-wQ!IAJ5Phx(9M
zD6-O&*ig5Xh~$lxX55nl_3rV5VT?bRVZ=aj8H@^)%phuq@e?tF<*IyR<k9pY#;kop
zWxKeZxVQ6H7KrDk^um*sgn<2kShR`Sh*(LB-`rvKzTKrz{_s!$^aUlg8n(_u^9re4
z#m#AoqfejJne+iG6G{kLFhc^#6u{c+&q2pOA!RYn+RFpfXYN#+HctBt%yOi!$_?4M
z<99zqk;&*2b+>h1IOrN0t3N3fG8Sm)C=GG#=}v}|(L(!rvx@usxvecUAC=hBh#x;x
zBs%0d4LY=GVomTsp<%0n_hO@L=knJyFgEC0nBF(?2oIRoi0QmOJs-djq~}w2dnlrZ
zDL{0`Zd*AHlnur-^<30`Z!?&Hm!ZE*?Ny$lQbbA2QC@xM1;@RgSUZNZBG5mqF&(RU
z?+4v(nUZ>qRY|e-!;-V!ZTWQ-joK&0PR}|Y8jlv@G(i7S=*@YeR<``&ZwRvq?PLvL
zR$jkPrnZ<dH&L1}9yD*f)%(4oHDC?-7JUC51C(#yt1)*!EnsH@3KNk(7j3p6Ero1s
zSg4`fDj#IT%nmpIP||f*O6YBxVDD*ewZvO79=wuR!LQ?eKUrQw`bpuWSyoGn9Ti@N
zNn_bExyuiREMA?rk0gssi0uAmEEs<#D17h9R!cV-w?!pUTCf@cCNp+2=eV+U02hk^
z&DhXR6l^*zp5<JOzRAXJUUa75j<?*x(OpV73$%{VKlFO=-511sHpoKxv)St3(D|_J
z(WaujC_>(?JL-u6bZu%%bPz<a8ZlEjb);y8Gq>xO1-aDp1@udZhANQ2ikG6xpay&R
zZ=asmBafVaW!}PGjUe6uEG)bYBxv&Z33Z+lknWv|%M0lR6rdQ1Hi4cJzh~-#ccKec
zo)Gwqp1F>tzq}(yaE@nDnvZk?_mVVqIqVs(d9gZX$vWo9V#csIO-^iYDQ-=9+;(u+
z*+gO}%j=8EU3x;3W}bbXm8*iZ>2NC^H%aYf4paV`8*k3D<&`DlPr-y4_XM;uxo5vM
zpDZdDA;DBQ5+rN94_ccIp511rd+C4hk}e13b$w;*0IgVNC*79Y4q;BXVRh<;(OcoH
z9A}AE&mzR-AQonpJ3_BQ2;r>X;87^weYs<3bzU~z$}%yI!^AeOH|T#Cy1>U$y_ZH8
zuzVV;2*860!Wxe)7g}3Iv{q5qJ;LCuP{6w$or59(U9_^*>AN{%d#PErOPmLuTpS`t
zv#?p}<fc9OQO~7qr@ySp;k>CVcKo2>{i!>6IQaIOt4ckhG~L<f5Cfy=Wk!r%(9sY^
zFKAW}NJTr`mu~a>Gi1~GI;_^Prjzm4rTP0)+&>v;3PQ;e(%uZ8b}Ac7V*7*J1}a5s
zK7X#;F0ymzUJ2c1GcEBM@!k=FpnI4VQHvVD2!WzgSrQ%bS){^-i4UhASbbch{AOG>
zY%&w#lDASHgjVLT)@zy?Yz-?^6CRe_q6#MEDw8mg&`)+5{Ojeh+@}owRYwkt#+?bc
zYG2ZDpz5Oj?`uR>L_&E4CuSTid?i;vEiq^}wXGM}`A~BhXw*!t=7-#WwaMiB(9QM?
zUia#F^Cv~s<)yz9yh$SEI%9OdHs2{<_g4mHVy9)~&}6Rx$~tM}zwR;-jghE^AlO-j
z-aH3EJuy4oKCh486FGV~z2EzrDSX{txm}4e)?kTGL^W^PAyC1gvLq-e9=-Txgs*zi
zRjJCMpC;E((CVM=3Ob)(Bp{0ys)QgapDi@Id(H8<d52%i`5Bw+st8azd@X<@mNile
z>7H8b>;ggx(NSsUml9d#&~~YZ&T8DY31Tow-m0MMRDPPfu-!}Wy@?*)nahohp`H8<
zITI(lH?7eQG!6yDMB8)nIr4-s5IZw30i|Z4?oWCB#p{In3hjG<rC_I=WJ}s7O`)>f
ze)stdX&qv0K@0~m#mb+vnLR0Yf9HHRPAPfR&9>)zxh`ZLrqOSivwnWu5??nyW|N%0
z_%KZp6%8wWb-gyU)rK%s(#TSso%#(o^s7Y3odXNvqJ|>dM??UIxC!j3&jcK|&Jp}g
zOc+HGcMvM5uw_{LW%GEd_MU%1WbDRC7@>kBcx`Pl#1m@Ui?u6c>)a^FMBm82@n+bV
z4c7Drsgg$$&lq-SO^tvEZ7QbO+yFW(SbZU0wc_W#Pj48b4n4>>YObd}F-FzSiYAq$
z{O=A8PktFgXKOCa+DCknbVY4X5I<q~XMQF4XKVLZ-8uB<X<j_O5pxG>Pr^T8Vh4T=
zVh8p!MFLBXseuJ{oL(ZE-zdx&WnjIgAMee&xpR|Nw4cggTVg4kV!747YAZA>AAs=S
zPBbT6!cJtwC&G;)Qeo}Px-Ge)S#w0Z8h&1Sb9MWJAAapSFvF=o^o`jaGUt2IF3ScW
z&_5t%&OID~$Nm221D)ypxVr<@3X*C0`C%a8=aqk`+CclAx^slz%QY9XCMXh(NT)8t
zL+gtJYCi`feY}V&E!rc5e?<ku=%)HVz9LDk8Ca_%o~lJ~v6;&FCN-Dk2H;9UtY2xs
zrd@xdr?vjkGMJ<1)XnGZwws^s#{$V}R-XdYNwz)=Xj!+$An4Y}Bssf-6Zh0zI2hW!
zQI9Udy}<F3a_#6a$Zr4&CM_I#M-!;lZq{d*e|6beXr}GLcQmPcj}7O?z7P6lV<+9x
zmxD5oQa_zM6;et`By|flJQam%x+m^BN2D+8r{qsBIeOY;HOKbm%5q8j)It|lwYdg@
zyQHC&I#(;#67R8I9`86@$=MK+Ge4^|Q?uuBrW#A{0gnYW&H7058efjwD2inr3g5qS
z+_Ps0X{$(Odfx-5wPYs8CjTg_%mY~yX60dyQt`++z24En5{6ewlQEoJ)L9g{v$mv1
z1(UKmMmm2T2qMo~FweXdeYR+3!%H72Q^jDr^+iTWWBIm~7l}Esu`u~geHtCd^0QB5
z*PK*u!k3#ma)+TBODs2_u4WIk+>u*4;9ES;!|%Oww!Jzzuqg?2YLDriS1kTh7f^T{
zRBIdB!K1^0t9%A${~rKWK&ih=BwQw~W~AFM5npkLTU)!`<w0hTfu6^L1BF1{5f{oB
zt+o%?EdH9PF5O~=kBIr03#S~@IJmonH=|lLeN7|5YR^UWTGLk-a&zaah1(24YwZjS
zg39K$FJ28a{%!1cvyUtpyI#9b(kBzFo02x@v&Z(qsrO|Wz;cf`U#K8lJE*RTB%hft
zktX#leO;sUw<&WjWtJDiB%O1Wnt}z=tX#Gxh7l?I2LI=1fx0ID0TbwUqX=*Inl)vJ
z)PelroGnyWYg(DJ!0=jg*X`+PZNI?eb~CfvPNuiF6s8Vmi^X|PiGFx|F`K=@3i1UM
zE|xNLPj0{)N-l}b?^+RNo%Qaon`3ChEA9H*`EQWCr@I%|h8A6H3~v_8+PYYTM78{b
zXN2{z&~8&2<SUkeN2mmfvFvqpr8U1!nqOy{U*9IifpQtiyoSZymHOoYtQ^PIrtyl|
zH(n3E)^6J<J&qT)3}r)%#M_EnOKSd`q<Rf<Rn(LOr45{=Y9N$yqS-S6zI@-^-&Fqw
zlBxb9m){rW^83{?_1!Kf-$qVo(&_9Uo@Re5o@U;Gc%4`n1jv+EX04~o=~PoJ=cLEf
zU$M<Mv74jZM$U4#a+q5$=6^LQep5fU+xfa}=<k-52-3ryLQQ*`TTe;T%53T?b7%9j
zOW_nY685I@`x@^%LC*<8{Ol!wHW#wCjRbne+y>0gl<~)=I;oed<{Hiux7wsQQm-;(
z+^y`=zfWgFw5@;5A~5D}8*Q$I(ibHN0Ma?pcc#2b3lB%nYItd%RJfw6fA~0l6(7g1
z>Xo>8{JYIk+HRi6wxcKGKU@U=;Uf4C7s3CNTm+*IBUgF;%RLarN7Pq#GF<EO*Xd%R
z29S!`aO7yWOMclqyT$glnrTCc0Oev8ck%0kuu1oehpj6X;z7B+>O(_m&WpdLSLQ$b
zEjRJEyt#AdvTRsXH()mR@BO#K!#6*^eQ|hr@4n4$ecV))8RO?WhlgfwuNH@gV`S*V
zJ5Tw0@VF2^&DV<~BfW?UQOWR5`u;su-o%G@WaOxE6iI4$N4&0&<zu_~n)+*wH7CyD
zo#>5w96x#w?<9)ZajL7m1Lh5P?%%t2r?^-APe}0y$pNb3nU(OS<+-W9#IMU5;srk(
z{p)B4f1fw?rD1dC@B4*Mk8MuE6(~kM<650Ii%-S8`c%AV8pAMp?+pdP7CT)`&GB2z
z7lwhHof8?sb@th5HTh_om8+sGz_tP}m?%uy;XpI9zL)j1nvUS!bmM05oY(44E}8~J
z=?h@mN7n{sRjlf>iZrl;_9>$}qQW|76^P1<V-+hL3pQu2`T2yZfb?VWfFmqSi`Q16
z?DX7nYJ`~Oi0VF>Oe(l7VU8Me=$OGmrPZP!&45=|Kn2_8e^yr|AdP;hvl=<2_BWr;
zuI*512ZQ4n#LT*R)c;HXDBPA?&U>C?EQ}mCTbxMUR0NH7|2@aK?iDxqsBJJ6DcAdi
zVj*hCjP(&xN4URX*5DgWZTZDm+?lwejQuc(!iEJQW)Z}f&qCFD|9(*|%}sr^J*C^u
z_Pn}UZKEFSf5J#8JL@)8x<6lRS7+y|>ut9+eCRTpkc<vcbAeiF0qw#*N*@2aS10)0
z>zC7M_sY}y__%v*yqmq=pg{%MQ@T~Z!Q;V^xPPZXQXj|L@s3&4JDyz~)$_8sepi*v
z<P`O{kfO4HOZt!$@<V#+SsGGwWAUkF!n+m;FQ^$=G@z68+E6b-*gKjtQ{f4l*gJ8}
z-idvZAiA=9cuq7i@^Vz-$vFFE#54dHa+?0JarHp-rvX9^0MuLT3FU?_Cvyl)9qgv;
z+@Mp5#tImV#m9^D?}_nysE0<Z2K3?$Y^j*L9X8bP>Gi)?*JilMclJ3Fu#%NaG+@Af
z_r%EhWaq*tK(W&ZDwTZByi4|ar7!kwwynzqm{O7Azi!Qv-!Gn%viQ{kZhZE2%J8B|
z)!!M~$r_GbY#Fg^WU<~Kj7*y;YTWyDGaBqYy1Pab0oA0blHyz%I^1T0z8Q%!;6dlf
zeOD)wvmKq*zxrHGYacy5H<$0~E>{wQr>fmKsYu<UO2ep?v68>0xp59`a6TCUrkaf~
zI~5kf7IusfcQX6hkAjSN3w8LICwuqU)xM+9(FNe-mYu?%tpT!?1=1QMV79PHAPi~h
z?&zoW7)D^0`_3AN^BdKEI_Vy|WX7uiKe{Ic3)Ub>S1?U;cD)Ry2H^O;bbh>qi*su=
zGAvHZ`4l6aXAUgOM})(}J7nF`{Rvo;e`b)*vaYjz+$p<vVkJO`B<(s|8%^3jGT@`1
zJx4j;lL}fNG-F}vn*E41wL^S~=|nRJd8$eN1?g?q{QJ$GfeWMjWuR}k%0BGjuKPtv
z>TuWAL8YU%SL{kfX79t|m$g|&Iejpf6tiSaJ^6OgfS!@Iu2_0=0Rq1%_&^V;MzZQ%
z^#*v1Z$H?TRX-$EucNA#!rf5%=c@;X5?2qEjJnlqRbm=n7{X(wEnPhrK^8~TYIGGj
z%dn;&sOg8e>9uWo9W~`jhUI@WD@p)yzWCIqkqnE6kUCM8et=RZP431>e(A_Y?7pz?
zh{ntyzcpkyd*jQk67}W$lD3yzk{W=atwoT%?#4|p`GpG{j(U-obI=3yUGD=$K1RqQ
zO9v4yu@kVhGn0eoSGRhe4Eg)J^TpscPuU?RGMOB$?;r_lwUbHbku!vFJFA}4DRu5G
z{KATiuG7^>x<Mq3&M%gy{d9l2@g^Sxg6^ncOYY<XkciL?oAP$Kctf<$9f-YXS3RQL
z9}G{dmMb#s-iUr3!jQE`v>G2#c37PW$-jCAud!k98bg-u78+iPn#K9DFQaeeV`zog
zS-$u{nO%CKl%eyOoXsE*BzXQIU5A+_HhhdCWBa^7psI6`YGs6@dRnbMRn@#thN0Z|
z%wz3uhrquAeQ!Y7&kVR~S(o!x;`S&1CVX0>e0eLOW0x|%wj9N~9^6?yclAuG_80iC
zv&k%@WIJkO)+s5}qmmLc5wPw|ocn0YZBDk=w7u4D*Yj|?p!rvFD*fkw7TUQ<9mm1W
zIkYdB)if-vq>z4~M|A+c;WwN@)Ey19nCwgaqLba^>o>Z-+0*N6B>YP9cC%8ixdB&3
ztXwzg|MS_{*XLeePo8wVPh4)ja?mOPgRad;>R%{$jDKbRo-6{e>f6F^m+F}k#w$Jp
z>aKcV@=(uzMs@>659Y@Q`VkHd-#Ly^+D&dspzWsz_q%4&_C6c`0qKd-^1jp!{7s7B
z-f@FtGb%6#$5%KhEfX0qy?S(R@=m*My1+u<y@Rc}fAYxD17QkmPRQ?sv@MQGDxYX8
zPv7zR>;1VDVfk$}E5VG%!GI`;6pdBQCQJ5_?tub-f_ubOPc?FjSz2hR2?3Ffak^7O
zW5K_^-lc!smCch&Qa1*c)k|^aBk%3F+wzfVGf^)iCx8xm!w}U0-66Cnvu-8H%pXSv
zhAWDxzovI%dCk$6W>*bj;_Ab0Tc?lXuJt*F)Jdv}8PwRiALpg4yriWuFC|_|RKqT#
zo6WB9KXdPff8+c9`d8Zc{6hElzwPl*VVfFk-0}}Ik!y|Lb0U3VOWR!dXAw*^6Fxf@
zigG4|ETf`-Hqdjbt`#4m-8y!*h26I8nys3POnfugEV@yuuXP)hOve8&-KG{TUvoD~
z?9ORd{sX^V*i*tNZ-MatdPy_Px#g}0sT{h@H=5n`-^uK*H=mt*b=<vkhsOKv{gd}E
zpB<9Q^7RkzygI4}QAMpPzPDPOyFW4fsQW>YMtgV6IpD9~$Mp;hv#$Ld%cd!>!@wQh
zoZbPxj;K+;e`&<a%aN&SBarwR+{7I`zn+(8^~Ck^^qSPO)E9p+&Gr*d-M^0F00uaM
z?FS%lUXG3yS0jJTw>n@pBruqIdTsOV+A&yz9Ca8_zuzy1#gP!F?c4kg`ru$|Bg7mT
z$s_RvxO^b$l%~#6@@9IuW3%z%s4pM5UytDn3G3TXOn;79{q0bD*I#_ud_Ohi`P0Q!
zwd^0kf2GP~R$ebIR`{982qKxgX@vxVPal(y_Mbnq4%4jR)D<~B4Axp9n95*B08NCs
zLI1O-Dtx~wh9QREXBtK!hEwc4@HsmSI38yx%u|zEoMa(o516_1LRmz?2u~MH{ny2O
zRnEpxdsHvK^CkT#G6*dZ)w7A0V^{Ub$FZH3A!L~Fmc@BmktUoxWeJT1o3x;aql<br
zMgOj4pXx+Zfjyup=Z#-sG>$UgfSiiOap4-O4~w`kv|@aDaA5#I^aMaH47J=<_BkGI
z;9a{MC~Q2+92ma}kiQx^Dw-+n<3AVxqAyGK63`d(RT7!<d{$1tN`6OQ+Nc;@Hh4Ax
zE~3)FMoIWXTW<IE)?T{X#1hjaq)v4Su`*zBp4Vr7frn(ko?B>*BzA?p?WLik@5?Ll
zrx_Nf^z%Emu+)LVK?q=uSJ>{>atW#z8mN{@5F-mCV&jOYCL9Qf53?i-TajoXahoo|
zcHLEmt;wrf(!O8tg_HDcs|RM0_;^u;Pd1R4?eMYt<DNwRILs2*1Y&(uUY7L??BcP`
zt_J?p@<_RM$pcaA(D*>wJ4q)YNv3@k$=KRRUoy5=f$Ob5@#4dg)4U(wo|GB*S>j|A
zfMdi1_y^?=*LEPRMeGQSuolBi1Togh(8_ljtj1z{6JR724g?%>tK9?&h?&}mY(V?X
zfLYm8j)`7t!+{D!)gn$xh*v!Y)=%JXI@u7?bx%GehW+6ddB}Y0k0EHzdkoTN{)S9j
zlXBIEkp3)wDxkzvdy2Cj({EQ*j&$IP2}1)}E8vDf_Xb|$Vhz@P%^quhX?vCvz#$GY
zV`Rp)Odc|G?mGBj`^O&!pDoUgz^eOua#4L#PN((!ge6ZfcL$KlrO?j3T5Xg4@_@B6
zzq}D*RPRXCJ35epH2D>O@2iVJnN4s1cH;?ON3^??9^ngb%W^-kN|s@0?J1oE0{{gn
z1ivXY81zv<u?v>KaqLC|gWm)cA{qsUD44KiB<}A71uHWyV~-z_C*iWd4tKuE!(g1k
z6!U3>VrJ}_Iwp|ETOwz&103YJL<IHZVj3QRw*{-5mrL8^4|IOh1j(T$p+3;^*pMu;
z<atTVVujLSk;o))do>5wsXLwVngYjsa*J|sStm~ViF2h(<ZLO(x$#Q^9b%*pv5P{S
zo&3gQ&H95uYJ5AdKDijJ+<nB#92jYyzHfJAJ67MKAEl<Z@2Ys8MBRPouI?TCL!D0M
zn8Zc0LC{Q>ezIUP9yY-z-h>uew6P<SjjV{rps)_&Z>Jp4Zh8-uw8qk-m1l;y`78pR
zFIK1EI4#CY%Ug^S5TaHBgLj~uH{=z-Xv|M6^5f{nV<LuU4q#*~TDl@K5Y&z%;waHB
zit_FxJB%QvQS(nl8YQuE*U&BultjCDd9R{MB$Dp3Kv-C8cSKU|NH;#@zb_j|L)#C;
z!6^UBP=AJ?zg;v={8@Tq5@jW*cA^J>X(p_91@c`~)~G6gBP-(VXk6NlCcN4Mk;ISo
zG%{LXMkp~^M1;dN$!Q!2f~hDJ#3ofR80;Up(wS+S@%I5d!M3*!YHFdKrq+=TncwCF
zV|0RpCNMOWYnan)I&lLvoLGHm_sKM;tiU1o;MLeByq&gcEmHL+sXa9v1)OO%wy3y&
zJG)xq#lz^%Exwx3vE7w$V7|!|b9`W^plt=#Nz&Fvf*U6{z|ep05kzy*537<y-JJOI
z$o*wzghPnbh2nypm<fCMsOP1T4O%q`G)OZzPiX;4E4dNIiC*{%Lj`RSS4dhUq@$>h
z>o~MWl^Z+Ehpq_bzq`K3iv93UD0C7ye%vB>;j5SP0o<1DCVX~UoTyb$4B7f@E~xRm
z&Gx%kR!v~nR`@yRjGE%ng4^LWOS2vF@G+&c-9?LI+D3`eIlq-|BW^p%dL!MhDu-JM
z&Ea>g-Vny}U_<30lLE!L_^G&8#M;PM1e8*|={%4_YVQ(XnQVAecdY=w7&XPub?9Z4
z#GXx~inZ--6!xOs#R$z_hp%<no>z2<8PmpgYeu8gRHNEpWTHp+elsH4!I4Q0(1r|#
zGYEvet9&H5AentiHL}-q>R6_*M$a2j1sChv$jFghN=3?mzJ!RbeqADp=!o-b_1?xS
z`xKrLgxk`PAR}Vrl8SCiLRal1r0skAFiZO-ldz0k5qux~a)Go<QDW@V4N2JsQ)b@Y
zexr_TvGJ%Uvp1o}m*%iXk$@L@twOGLrpK4RQwtsZ&dfsOZ!io3u{Emi**pIgMVx~#
zhi3K^AxHd#Q8;JdOeDIlPDg)LQ|Y0B9fYDx@3cA7z7f=C)%8U8H{BhSZlWtIts9AG
zxbXHWVn*LoXN${<QwC8@Y^yKrm^n2(7JWEN5e{YSo#}&z0Kg$P`xZ(YEzdFRiH#ZX
zAQddl49v)m>ywM76144&7X*<<1nNwLTv47hT}@Y%BT83KScsTGl0ffAD0s>coWc}E
zT-cJEdgq;cNia>QCp0c0u{+5<wqbHdk?)=SUi`@(_qOH8&TJ<SB30L&IzI1!IJ~4#
z90N+;9y#kuOoHswiMyT>ZMo98c98vK{ZJlS#OSR+t-yvd#IsRN@@S*fpvX`e;k$Ze
z@2(<LjmA3SCi!FrHz_K}Xz{0j5tj!-AZgT8(+jil`l|(AU*iW?76>#h8%=AoYs+h#
z2r_&KbPQmMvHf?8@>xgXw~s|#q6Kvv=28Us_kyO?G!E0x-`ShOsbc(N=}Z<%8qa+D
zPJzZ>>BsR_xnDdq|Cd2~WZuMI?8nK5F_2moR;cS_IKj_1!y?_-t!n-}+hD9}(3a~x
z8bYLE^F7JS-MDoTPRH%*01*lJ<sykm5QIf$)LP_tp10PK7Cv&H*f-XQXAHdk4~xDd
z^lJXdX}jSojYaR>+5)rj?W2LVL5Nw;my98>q!!ITQ`JUlkWqN)@77<WNKYPS6peiH
z4x<i48WU_Vm=WI`n$la|Wfcv$xTUDt@Z>to)t9QGJihsGji%gtRoq2X;S+H`)}tnk
zs^=wPmSNJV5#wWXo%Sh>q#CpYqnvonw7){zE0nwGA*{Ys<X$WCFBbZ%MdGI)!hi0%
zRCJhZU{<am?kV2yCjW6!HyB{Kx?1%o<@~aQbWtIfErnujs##^4`g-)Q;+D%UYd3g(
zd~sRLSFh^js+w1glVm9@?aY?CF5phlxjML6RhLH2$GDg{R4o?jgD7l#eRgpM95ncO
zM^d$%`W->3(QC0+_&fK>_$@wC+VZOLMP7}_r${MoOYw2AA-gDG$Fs$vv10apIVUIF
zXxVe?<&)J4!*5zr&~kD&7h!>E4?M%mRG;ott_e$kXsE89c(QZJ4`W&ciAj=Ut-F3h
zF$j@(i8`V5iKe<z)bBl<_I%cgG%t`kaLY7IiI+}&9v2y0fToE2<;Bl$p8W9q_2Iw2
zfPieh-y!AxvIISZt?<)}AKo9n|M2F;JI~8ki;KxAYJSE=?`#24xEG)1_Q?%D!j^E~
z;BWrTAklrgaPM^J7Y7N!SMZ)rAMuC$4&5kS+OL^T?bnO*T(5>jgocLC%CDHxJbVMD
zWYq&U-slSm1`Uo06jXNakqxS7ZUh*J*Q{bF=>cZ_3kU>_eue~_VPV3a`kLYkW5p5v
z6y}-+uU?DjtAXp#YSq+7=9bX!(GHU4i`33tb=79LAAKvVvCjzSAWEQFuWB&T`>Zkm
zK1}scW#fr`6Ru}!GIV<f8&eH;B}<PUHw3DtU6t4{s1p8In_klmF5CvA-=N()nk^<D
zd%U(ej15btOH5pXEijM5wkhnfa1)&B`V3hEB}OB4@76Y!N6c|Q{n2bBJXak3$;D=Y
zi~=OkWcdtsi9(AA$ela9p|0c2O^Qe)v6tiI?_U>jV`WBi8tn*oxb*q)W6=F@(CHb&
zPUyREM0P={+;|FRnT=Eywc4aa^9^Fy5**N-yC9NGehKN*;@K@P&d(RkYWYH|?kum)
zK^_H;3P<i8FsHI-Psk-PoqAbmj`?yDQOVQBJW6s0zekCHCfg6y`LM9^ek3Hltrgt-
zXei&MIkByrok$zJe5A>Sw;kzmvpD+!y+#pUAKN*%QE^hNC^sQHx%aX12tMGOboeP9
zaoB@-C$CjLgp46OPFG?l{G21aF^wk_UyX|^xfKj;T@^0n3)6C3C)KWPHN_4OC<hP?
zLRJZ;E3RNz$aQ4a0Z;{O16<XC<VJIs36B7v#0K;^aa~xzna7tPlge1Ye#jHUPF58O
zx37<uRdczHNUd^;hO;Ngk+1c_0wcr9;`@sg%89;@zFCl_uB62nSXG$PlM`$gy>Bt3
zLECG<ngbH0)AS(RUlwg*aS#Y>^lJJ8gg5eww7Uiv1cu2#qy3nL7v<(9c!@)m+sN6d
zP!6{v`$vDem|VnBMJK1A(>Jh)O|m577e}k6a@>={wM65<@1}(Ey!yYEP}VH%#-!3p
zcz=I{VuhFHoK6}eVq*TFrCZkW9EJ(&wwO(01qCID^R%{@|GA!<>(|=~6NgEHnw~dk
z1qKyH(+E%yW3igyn@Vr#%~|CCQHN*1QKfW-!2q_YmO%%d#Kf~3fHF%ZUBEG8I!XCB
zp+H+<wmXRwVxVL(?jt%7ED`2WnN92{VlkZvL_Gorp&`U_$xJ^A{Av{qNIKcfJIuw6
zPXSL^rTbiD*l?zrOtp5h38$p*UzJnZGang@t!(&968M=i&YIB!bLk7#LT}&>O#43Y
znQrKDKY7DCZ5FH5teW=w(xfMiGx5phvB6G9lUZ%X7Two8E6bS&!N@-q-{^2QV2ne%
z%7d08C|Wx80OH5Xo;zJcCKYL8Mm!(Y!*e6&PFAsvS!BbO)<0F8vn_PPI(CQ@{B3oo
zyOD!sF&gHx=SZL-YYw{s|5-0<Sf#qYd0Y$5$Ko<EW^;oz!<|=gnlNWJ;8U2x1{bbd
zomf$p1H5S#SJzMG_9FUKIKVl8Y~PG{)5)DZE4uZ-^(DJ!TCaiHhT>@8_im?~pc&)P
z<=SHrhJUcx4;N=^b>W@fW#Wf)s|M#>GpHe%k~}FSHM!h#6IP%89JzJ#*R&*HZMzy)
zjmczz>pK=}2-W@ihp3pw#NZ<@1w{v&xnV}K_f2BrhRRxxdjWD}zlP>ft_G{sit;p&
z0x=|MU>-=#;ym-t=@JpyF8878!Fm&4ne&Sj@GWXHk{yC(8wb?Ul-4O8xn>;N>&fKW
z%#xfY-_DhEnLI5ed)ob2T`&7sfyG}ng((`DUUc77IB-g3{GmH+MY>x4GgKmpO{0(9
z)+e^kZ>Ta~=bGo#G+}_@Qgs!$^6y*$#NmmGAm~s6z~*dPCYA~%YF);v4n~svwBj}8
zC48vd7sjd(ns@TBLxhvX4tC$G^0dQ@nRL+1ZFS#1vlfh7wJ$=#w!U~3+|elp9A|UD
zGipQY(6!4ONi+J&wpMbB8dbX8dP;@#Ze&UntsFnKwdMATQ7%|@v_NRR!l!l#?%?cZ
zmf$=>Qzi3;FuR!me60%_8~WY5LCSW*2Hkw><uj6Jt0|K{gZO!9h{}9*VpB9+HG;%p
zy)@F-J9>PnAeFD76l+ua`uKQhm_Rir35F85`i1WW!O5IAl!_y5q%4iFeNdcvnKZZ?
zEGBHycni+vg0|_fdC)ic<t^B-E>n87)=t(v38LO#R#KlRvO)jOn>*No)nYMQ)#v`b
zqAhf%@&tnCQ7%u_RV?;gcg;(sn#{yWr4%C<WCF{dK-lPa*h?T9K^h{;<9#*IXkFI1
z9z<+{CJsUlgtLa}q!<I7FCDUy74Q^|tuYKAHi)_S{rjLZ?orZsI?@beb4mOKLz&jc
z_+egEQyXC+mOM=F`7^*&Vzg%&<@s`rU}{>C7z(L9V9@p#WJ(S{M?{upMIMXd!_@*z
zz|FW~SypkGZ>p8XDawo0;@!vkypL(^4b!g^S6C=|eU5tzD|yo&tSfR`L4x@+8x7=r
zP1e4?(3MeFGJY47zpBsb;KoqT`>ta!=6WA$m=#Vt8Y*Q28C~a>Me}k#H75<yQh;sB
zN7WpRpr;hb{d-omZxJ$%(z47i&c2rrc?ZHd+=gSTo8>C1=Cwu6O*pL)_p@C*IEccv
zI7IVoka4p|48?q7Kvn~+XeT=K0Ec26!(_tuImCq89F$a@xI8Z>HU>sHn_L+FUcIBD
zzU<JBC+S6>p3ru&FbS#G%n7!9=ZBHPdf-e2n}s<o`h8rNZCb$rm~|+NG8l+#=nl6j
zR_*+UMf*K78YgW19k6mhD%y^xF|>n|xoKtW2W8Ma?nAw`6+Mlu8NVRY`XDX<r<4Qr
zJ!=hI!1gV$g8*GRgE8%;tr$<;2(@*9Qh^nkGv!~7;|Z?1FyaxO8Iq?`am*WE(X?FU
zLnwR4UWL5N3gwOW^(;E>b0Awq-}X%;^&p0UZzBPQDS4HG*-e7hkzK84-fl2M4{{JC
z&)RtZ3;cmnGTO<8b;Es911IJfSdbtZ&e7OoN!*bl7ljaIj))&9al9y!sAlqXNT1O5
zI_|A4QMQH1a)IY}bQBEMHWd+F(6NOoJo4n8)A>QQ*03ZxQlji>+EFW`;6So_JpxWH
z$PHiAJU&qO4>b)6NC;3KUQOTD$#-1{7N{D<G46b{MyQ4<POKB*PMGza6xgc#fLO8D
z9#7o30F$bo^_K}Pv6Lwhx)LPSWM&+xlF_uv&WBLskeMW^h(bhD%XBU@<$G=d2fM8a
z%)1;;?^dYCz`tM2r%CMSMl-HNP3!CCIb9q39MF#7BGr7#h1D)_%pisW--GDqZW{r(
zuub(4@z-^^VGUyx5J-EbxQ~W^gxNAN#`oa)B;)tKOm<33W|x_Ty!do#_F^B)zcKja
z>?tA>+m^{;v|?LDL@1(1N83DTq+L2BcC%=|F^zYgK#tO*Q>|>GCqrU-rdV7$ET5d#
z$H##Tpz1e}#D0x$l0_smCeVh_4Dsx-2aFOa4B$h}8e;z8A9z<Gs}=)jlgA^$TWJd3
zo5W_KcrvR`FjYedf0&DPNd=&p!pLrr9g{-3K~jtG(Uv`S)$B*-aY3RHB<p@L#mI*4
zVqBS@L;KluSK(Ix2q87l;MJG7{;}mglpmN?w?fxg6mJ(!;G^!%V!!8iVWPNKcIS(G
zuo(mww&Vp_G-E#o+%;rbo}HWBXch~vcbNNS&GGB=2sJLFULZWf1RRvzZuA-W8;~0#
ztr{FieJ=w}uHj4uB4eDW9vo;{B($R$^iH5{{&vy)TT@S88ByIWvyF^FtKvQ`lO4yU
zadCj&5$}!l)Fn;xOJzF<BAXOVS3>s2pE%U?<gr!EkF>)1vYw$w)`M#MPwWISbNR`>
zf>Lva2_T?;7&AMI_?-l8Ep+5CE^}gSQj%CC{?_9ebQsfiVVQM>XOaIfP?JF0$SInk
zi|?ebPtuHvgNHx>Yy2_-L^0eoD71P337#1|IY@@qS)*@kP?*PoV{G#k@M!k!zp-Sq
z?HAr~fbjVdB6Q1r?Do1PGqE^W(KafZqw=JBwwTSpv}OWNBTGlxt{Xj~hpkF~C}veB
z6I2kHkE4^xZu0RJ@|2TF;5-b)Oc-{!q85(|J%wo`5M$+B_CWts4MW4kfF~1k=Cx)%
zHRH5#cg!UPp=XRa1&0D+`o3)JeY+n;-*LuME=EXGT0P+7f~#j=Ieo~E0)OSgKJ<O&
zF>@Txj>^eL@l+HAB2mPL9p$#Wn6K1$Ip3NOeIF=j0hUF+S7GVYA?A*cA|ygiSS}5`
zNoid#pFm<P-<FJI7}~%j#_N$D?8X~mX(Tro_6UAhpQ^1W(vD&`kIE2dn{$qjf5SrP
zg))yU)I4s<RJeF>31^sb(ZkZ7W++VXfLLOf_GkjS`NA;)h~XWPo+=q3)KLex0>VW3
zj)Xg&h%U->hI^f!UJ{+kYVpd*VQ(?0Hv0KmQ8AojE~y!1tD?wMcbSX`Pf1!GCPzkl
zA!JIU@tY!DCRr&nZcdg?3L$<k5-Q@@qm%*=V}jzdVrBu1<2STPRjgGWJu@O$>4z1<
zXIL^^vM8qE>~9t;=iSY&qGvWb&ya@xv;Fr&8l@ehJ=p+*K0K^6jCH{*L!?+(96DTO
zMlxZ^gB@!NkEp^+thv-W5~Apsjbc;WmP$cSJ}=WRV%o&#AwmzDQ~9>SAUL%}^NH^z
zw5Sas*RA6+uFORcdb=faF&{#gT{9F(O42oDH%UBQ{Sa7C54*5iGU^EmJRQ2uz?T;=
zw;{qtus1MGqH<KJ(p1vx-_zRvy!qO1+x@lmb(a2Tx%5dq9NJm9^lN+0fd7J(_tevk
z8Mu@&GRi4qbrLV`KEEA9|L)1FZx7$R#JC~q7lrr79Bdd(VwjNgFd1QRJSCGDdi8Mz
z)6zf&X|A~db$x$we8NQ9<;A&lkRSt#8bg>LpO`=5PuA-fJ_g6$@Oj~Vx+5c-PzCJI
z34r-4`Dh=W@bjq*lS}<$l<_QZA3i)=!^R}fes|%?vlZN#m95}UJ*5U#IHbG+%WkO}
z^dLuCNTk+O4b(N`kJ<5``3!e0m8`J)zI{1tt*2{O#a4W^W^rt_x9dh{lVazIpggK(
zZ^LHKt<+iF`n9}jTjj<kM#+w16<KYtwkKAzf~vG)FET5zm2ej8YrrdUTEkXwdaRw4
zMz3CFKh755`?7j(_{}r821j;JwpLJGwPC@luUc_QA~n`qrp~@p38Ghj-@YbTrFBsc
zmlr26H?$$@R<9i%Q@v`ar0^?FC6|1jDCngxaL%BzcZo|d&0yts!SN-v(*@svz7o_o
z;^ppMybL}u&T7&9=1xI;3-Y}5`NgoC+pMs^lbfwK$S<(gpu8HaStF$tuQ6Cd3a!n3
z?*^?@rzt<#3$>yyF(0{&^N(g`PvM1V*^jN5J{KNQ!@{G${3#|UewSClw3H?04fu{_
zm17_T_EhPr4hyo}98o&spI#ik{NdY|KfHYZVGzSb40VHBUU|4by!f{#S-8>atp(2O
zcN=-Mz#H_?aSo~#t|9I521_936{X}hL_gjD>tX^isCxdK*uyw$!TT*j_G3#2vl#?4
z2E_syY(nZeB$JzzbIj<RZizD_`7_)IVc=BcehBMozQLrPxRKe$@U1*R{O5mWATtk`
zsfySDNJD-ZI8sBLHzhu+R^^h7{`+z@IW>aMPZaa`d-&XsO#M>ZAcV3uD>Y8UiYnLw
ztYP5LXh5mojKXrjXfR9#ElTP)cQ+tzpkswUg8`DL=ZM+s2{G>G*TG^pN<!y>i-SRn
zSrrDy$Ol%wh8F{X{22c`hLYVovdf5AcoXwCBoVv%8vFpUwYCz>8jyJ#Hi3;h4FfQm
z*||Q8WqRakcb!D|hpZFIO((u{q}A*-DZM77Roy*FxuQU2ePU$AsYU$sqCBtu3M6k?
z-x|mp#JZhLE^AP-t3nN#1OOO%xzYVxs6-8=0f^BR^=U{Be_qp1bmGB+0L5K6*ii8r
z(dPk`*$CCF8`ciMUO$o>i65-IrdX+Vadv*Os<fU5>FHSqdji_8GE#pmx87Q2=D>fX
z@WmW>@&aO?tomZDc=KW8$_y2Q`_3SW6Wb3eb$<mP+8l&S&57u!GGCso{#Vs3%*l7s
zloLpKhom?TE*s$(6mCq+-~eqvZ2AuG6cI`zBuf0GS7N7MaDS#XymrC=omY^AzuKbT
ze|^PCKzuYdcWGB|)9bF=?brIXw|a*EcNK)rujWh4N*NDw+4{9SUR6yy0CD}-c@9&C
zZ8>B)rLg<i*i_71FBZO1e029KPV$9kzP@b}^>o0?b6+)1;enOBUH+PSh@v%hyn-jy
zI8Uel2D{NpOt>?Le7maP6y~Hw?u#b;6tcG1!zn|mRGZb~XMmit4vp~%b5y>tj#7J^
zb9}?PO!8tnray-?2MGQB!XA(@(8tasEr1)ceg=-1R<%qBK&O>UTa=)JaP`c&8@%HB
zzohb{TQx-3dXUb_9J#6s)oUchQ0N@+oYfxj-^E2UvDSo8p*K*e-mS5B;v<q%any-X
z$>}|DV6$QAq6Jh3sV}`cMwQ0Dtyc;5kCieU^0&DU^2oYjS*{YDORR1bC%pYAZ;?UQ
ziN<Tp9?#Q2%0**j35BVDt&nTOw58#_V$J(n3fI5G=fK9?n8Y!OmAj%KyM|H^9NROh
zdf*g;x*9k$fJnFP0dKeTj_-o+7y6Qmk6c(3gtf7($Xa(56}^BOo!_^VQw5X_#<0xx
z-jUSBQ<@MR6;@>5>~@q-?zt|&Tldy1p6H}Vs=%lBMy=<NsW?E)?g9C}6>Is$V_N2;
zd-KYC_D^g(33+}grKCVMAe2LZ`Q2h+1d4fiRwb7;x?s*1tNQr*&FlhmeM7}z(e}d7
zY2f<+=V0TF#ic&wYUyUvi);5}%u7ws#MCTqS-SQURqiQ6=2F}GA&1%w){zdvrSCjQ
zsH$t9QDtrT@WDz2&rncU#+gJnVQDI~u2gUW;c%>Nq!UxPOQISQK@5Uvf+A-{x|+B7
zXLoa3bk>!wfpFk-A4%JzTuuV&oTTYWhDw%J1cl~AsXn_Ns@0b=gDP$0jPE28$Jbi^
zJg|*<Ku)T^B}wYwHW<}p{dlbJl7F*p)A%sj&5*5+aN#0L2(P4ma@QM5Kr&oMnpm-(
zGvkX8hl3T%?8DwMU2PVM<-UupJQ#dg5kP60H`1s+ugjCgyqu}3iF#?@Waw6XH@WGV
zLO!oYdtw@xd&wgCo4w)z!RRPHb(&w7=w;$MXf;(<FN~#qEj1>7cFMj00few>nTc%c
znt2T%Yj<jjpkXXY`Ifl^Glw%EGO~PRGKI^cD~37*ZY#u1epPg2!1jfYlOWZb_rtP{
z3s&0q#oHpaGI`)~oNX0<vLRX2=*4_28TkEVj60)0Vl;>7&d*h@kq&k{?`ARrWhEGq
zdXjeT7~2`&krA3N4!K~*ojlS}iS6ZH@0S13tRh_9D`MP5gmf<|h`Ne5O6pDWygF$r
zL+Ji-68|WdidQ!$w|<s>VSNWSo`j{m?FSJ5U@$DY!48XbKf#p;X4axJG>)(qkb^bI
z3s0<p-3$xvhZ;&n+d*E<6Zav0C!*(9JDppgZE!e8iZUnUGu72C#Rk)MgJB#;J^7>7
zzU+L~(xC0=`4e~YQ6;V0Na0WXF?gXwZ%)=3WK93qBH$-u{I7eLQjC;D`YV4Lu~Rm#
z%FjvttwPN)rW^II0#kD`PvCNXE-w9P3v;7%V__5-a|l?PE?N*?{ZtH3aBhcNaQk3W
z=@@!A>7Y$HqD|no14{F_E9&w@<WvJNTN0%hSrkaBz{s8z{$Y7EdlStII;qGUl7S~j
z;yvzt8iy`CnN@GgX<e$h&Q=Tit)Ftj>}V#7r4RS9SoV1r**42yeFKNZnl@bsI1(U(
zj1dI-rdc#L$Q1N{ui(-l#=!tz%ADxeN}VA_pdiy>Tysl|Zi}y^GVko}h$ib~GkvZ!
zt!S=<fKBEq)9SLRy32~Fx5Y=ccAn|o-Dz&<G<1eMxRqQ;wk25qn8|gpry_7JH90=<
z#;mxFzEb^g(C16}URVr}syHreGRj>~OOj-|Xpr5|#1ibT(=^9(@D6fvyr6WB%i;%_
zn@GvpWz`fL5_@ugw((Jh-sjrPJ$PQNHzKK*$h7FyIu+@_r#89IlR?tcYPRqJETt1J
z##M2=pA5>O*d;36;JJZEcCku$A9t5WZrB+(#HTNB9L8I|stsSn7-Dj6MK?pIgUG%R
zL=}{GfUuwJ8feTK<3&UW&oOm57Gh>dQ5u;?jokQ%+W`S)SzRlym17`iG=?_L84ZGl
zj)TaI{6>?FFpyD*7le<7Jq=k=ce##qu+@Cp2Gq_xi}wU5Zkc*MSNu0y!OGAXYp0f0
zze(Ai?95*o`@DRc??)d#VPF=FaoGEIdpm9)nhZiTwzl`Or0=)FC;6=m-q5LcY!h{_
z(lXn&^tQ*gLyAUL+rQ><icec?N~iC&$4vHJ?e;5>ax(e#BiQLmVg#H0@N1c;4d09W
zt+e!~Y%IxWFW!fWt!84==pM5@UB>%msMJ@Dc(}BXf%hH~$0W5|p*8WoNjB9`YtahR
zKb5OMpE_4;rA^zr(d|?#u4z}zN@Vw#N>C`5bQ6_a$}8bo?t;h3Qkp(~NCh7p*0&e4
z**l&YGiN=1Y%BV<8FQ>yB47qsnJ2o)6e0U~y4xO>`%4}|*Qaap5nfUHQS&xYcQ!y%
zJxt^??8ppYds``w3$vG@w#Uw}HjzFeGE7rmYC=);Kovgd(y+AqPTsIp3vm8o=7$iy
z9SX}pZymZubK?Ly>(9jSbM1K`jT#k1ai;^qE{`wmA2Jn8<X$tAWNh(T&}PeYJ5xhC
zDjWtPCJc+j>3U2d$d-9EDvB+!hdB?;qkrSE9kn>G@-0}OMzrTi72<Iq4|u3x)gmo5
z%)b1^{C_m0Ks?jJeM{lP%zxjl8Vvl4SQ!=}Hdm6`XO1qA*q6eEd=N^@d@^w;{o4q$
z!yq1$T4Q`mk<gqG<8m>(L@o*CuZh$|d}&;Z)z!#GPz$rOeL=g?5=){+*7b!bV?Q)J
z&<i0QTpHlc@X>Mc`6jjRIGI2ajGPyv3u!16f#1qFX}jqw1S&=Ix7xey?47te=Ge}K
zdCN2YPq`=Mv#MNPm~#)aD6X!CEZX1D2PO1$MIEGPgP&Gz{!E(QeDFZ9ztFMy3muzS
z*B_g|7%Kk7I(+^z&~MpnCz$pGVE>l`{c_!5H5k11HQ^O=YKX76LcF`(Y-dhmoL{iK
z`t+vdd?G$fA!|QHMhBr^Tj5lD!A|+77p3hCqZ)A!DSPz*99N9%s0Uqpz)$4>sxYCA
z#Q;V_czxW@57wSe_MK+WqsFyt86*p>^#lX8*3+xO-lKkI+mG#__D!_|#Y>dGhuTqu
zs&cW{IsD^wdhCYQ--*0);bI)VGA-dyp@C45en*uoenKr<kis%k*B*bDy8A04JPt6H
z+&eBQLM(F!PUDj0V`BVJ{=nN}8`BnH^v~hH^tc|YSQB_Gqf|yl4dH{oDRy8*>BplY
z(bVcL|I%mXM!kO})3;Ir^mH)d>0ITUo>!Cl%v?67^slaJ5S|b5AZ<$s{%q!8f91`;
z&bi|U_tx0*knV~1i`{iu;STHh>cOAhf`43JbFX-uiPA<(9qfmOG&WGR6=V8apv<Bw
zA(Ggfz~h5z_{WtnSG3h>o1*4`@|fcn{H{5sX@r=%8poEqrl(|LOQEUF!#9XQruq5Y
zWg$eyP_6~GU#Rm9Ws8T3@Fxp!0I9Uxr$_V&0~ze_K{%`Y&U-KRISf1Skxg9h_G8;s
zF+dMeH|{4jdp24x`v6GjkuFO1lt{RV+kp&<J6N~tWp_~oCM6CqGnSLRqS-W441|PF
z8LQv-9Otcez0G2EdrO4G0--#zc5`5gU_cL2&(UCd;46a-f?9cVW7H5Pnjyk_RXVE;
z&7$~|)D%3<*|7%IaM%Y-T4{ljSOuzZH~}S&)?oh#=ze5|dk=B>*!*=L%Zz9OiC1uc
zp4zY9U_JQy7{5}zPgF0^6SrLc+-`prMgLX}s_6NNJXQ5G^X}cGefHqg1KzlE`4Qtq
zPQUVR+_k>n60yPtCi8E~31!<5lwo7;-pa`SGn%?_%`ikAg<x;QnKR9No&jh*io>UF
zZu7QY7UKCgy~{rrgLt~Q2SB(f_*vHcD>c}&p$$^K6Jf_XCeV+rA?L!<I>Vd*%v+H?
z=7qGcmE8<LzAI<P4p0Cp-rsCxkXoLK5PmMCcPfmu2~14<k&=(^o}WBYGsZ#)VrnR#
ztHH($uW)1h6l8O+#l3m}IlkdPR}bMY^B*XJ5-7NSD7Sk0a1l>WMl+1D(`Sy8@q^Lz
z1L=AUGFq%jyME{w)+OK&t0k)=#AFCjpz5tw2oIg54hweOA&Rnnytxf>(&ssxh8VRn
z$d+kZbhqP*(9Z|B)n5G}^CSmjvsnkUU=ZcoAVqy)yn2w>-^BECwGq8st)Uluh;7Hq
zl_VJ5H$O#8nn<84W|YU_D@iY@9n;ksg0XSD+v(+MGkUpt$Rir$35LIQ#`x$Qt-J&B
zBpVQ6%-w#W5cWHxKMpp~*{+Kn&xF?7#gC5^U7cgdcO@vgiEI{VzV&Uc6Z^{Z*xNHF
z)2IWPUH?{O))FrN9|ZO#1eUU*?GCKy>Va}#bYq=){vO|CZ3e$Jc|lv=nv=wR@>;#B
zgyqkJA<F>D<@x(Gl))hT+R19$Cr<!A(3CGhn-L4-$qS~tEiIp{ToOFI)i9ynLR;68
z$Vj~wv_Sw#n0a(MXd_>qYxHa}!yL)H(FDr01~jJU<udAq20fa>he-RSHGb`GemaQP
z(N$1h-LzTy@?0ZrmcBgK=xJuQqv&IH#<HF^>ycI^eP?!zM$6?$VX$f?Wr#P14iNTO
zZ1fC6UDfl8s*MfBH?3?Y5^>36S2a(Qw{Ru1!Z5NY{4>aS>gBK1`r2N_@D#;AuR8#f
zLxw9py=JOo9cq0lh2{>b)Km&JkQzh{pa#!A5c(w<DkNdH$T;wdVdgLd`fdA0w5><d
z$aL*@sQ&3`OTXH_%06Y@v?em(Cq`>Z1NLi8WY^ZPup8^~x@zf|dd@n-aCLf{s_xfN
z!v#m2NwZikpG00c;PZukW^7#VRdt@OkrTfC+UTClr_9Z9rrAVWrT6=|w)cSB4mxfL
zQhA4P9^czv^ctb*6qCq1-fZk@SX`STBQ!j*$puN(MwuwN-571}3n+%_@j-+-G*b>Q
za!}Qbpm$bJr?aZJsp9N9(SAh;j-*&Oc>YH6Gl<c+dGHh1tMv!BS65w270+)s9#v1|
zvQe*i4<D2sR<VT-A6o;I<$g!9z5RT3YlY2!@ese7?&Mk~dTUpZtXinz@AoEqEd!u$
zoOH1jD_?Wxd^JtR)h5~f{?A<Wt1nsfjn_EC7__}FBkrzS@=hLM@v#MG(wBI8#qjKz
zvfedf^GE;g?jmWTlh(L-+?rdn<ks{V+~T0+t+I}FSi<HiF=zu8!Xe{ev}^G3Eey+r
ziS}`udA1jST5@Px`|HQT_&8+Ej)cZ?cI*HK;E7+OQ#5U$gITVc#Ya_b1NeUzzUCXN
zDiq&XQKUFWnD=~p>nC@YOFWR%xeQG#?EXS8?T)^_KdgvbL@{KHcLkrsT`k_VSz?zJ
zdu(O2jBRva95jTTuhKWAU>&<bwD#S-J9i}B&dj^Je9vpMn;q7lS7n2qevJs1(26yG
z8-cr1*h=>bk&>SMP@TM^<%$Q^A}(YGk~MrHxgqTT>_Bh3t{unG5ht6)D)==P^*3I+
z+pXN!Sgd@{+l5ZpU$$3CO_4(k8`?cXNDp>9LY1qGt}px?S)MLFp)~WfoP3-%V0ohV
ze<i(75c~HEZZVmQ40Y2@yL+8KWyG@dA8`B+<c3`n0s@Va>_pRZaAUkM5iw|+Qhkw&
zeZ%3qQRD+5ad*gw8lBTe_KNXIjed$gB}y9<7tmLqA$nWPD}5gKj=wf8Oxz%SqlEu0
zKh>+rX`c(_83(Y5`RtWe<NS_=h(z8`FUycnw{32VA9q_ivsZ(Too(FFO&d0lL$;#A
zGS2+yD8iI=Y5GD`kSNo!uP^9_gvES6n~94Xj7-RakJ^vF4Uv2E<%Hq5LlPa64`+BM
zL!<f!?px+UvboLrNq^8uJ<Z~V)<rK9ln!5_G_Hpio)izae!3(5x#EaA*IuwZlS{va
z(4p#-+$q;GVf_=k1-4cAbABB>lNigZLcX?Ru$dZ7IbY6jHe)5ezCZSd*-zK%mjk_l
zTlsa;L7N*(l5R1pkyPA|;@7nGk>kF?BM=wBG6vU5%$2q~<&AjbDYKVF7p>H$2x`;1
zc_7i%nX$+OlBR9*aFQ{%0MfMu9u$3Up@}l6Gy+XzG?*Qz0s;<-_f7kDD8dh}rJT(@
zg*JNO^v=s`gWJ1zz)0}}#aC?)f$Bq7`yJ&<8a-!%UA10H+pa!OGDQ02H_laOr3+qx
zEb>(ep!I$!`e{=Yv2JdCnYv0$&|4lxzI;(~)A?;yW&3NbN{jCBDxdgHS(e*A)OOrr
zGZC2ZAB(y9Vs3xE9p?N7e$@^3e*@Rk^G0^uVW01G?)9cUCdNvatgn>t6T&VG9;5Z}
zi;*3*y1&<D!ddV98TgCzjdkT~&-*mipU$LItl6vQSPND{NwEE9(X0+B%{7lboz}8x
zvjdUj!ad!rF>%TUHQa2b&IBnp;hp?MnL$-{o-CMn`$Wxur%m|@6qP5<;$lAS=VP_8
z)EGy;K0QuiTy11#LsWFx5JiQHPNs!z0Q^R965FHI)o58>R(&msSUsD)TV2o48dHMN
zE58LBjTyxvg$SY|e45fhW0=-LW?kmdIzcFRmbCd0GK4|&nU1y=lyyqJh0X<;1Rs{j
zcJh0Fy>Vu3AN`5L9Gjo0Z|V0}gS|)AuLCJPHVKizE;7N%$?rLKkVq^EFyO{OjduYc
zG~b4V6$kfuAZaj~Z?m*rzb2M>u7U;4>MCcWX)kKrT|dOih{~hTjX59xbpb|gPy;j7
zS7e^jKYw7Znh%G?61Ig|yi`8Ci=V8UI1m^8o@kp-J6Y1hv~7!WM-|p_T9Fi3Za1?r
zDOG9Pfu(n!Djr4N8JU3yw~V-@>V{$(Vs`sC<?2+M-r3@^dcQDOA6*%|KNwwSdWJd=
zvCc!a4$Z#bkp;>9*Tx)DlOocCb}=cE6z-a;FF;`!h7@1VpJ`i;|IbluKd&^u8e@MW
z%>%+~5N)072l~V5u;>8)VF&mRbMWEwpzBkr$53mIf(>x9>Vllrmtber1wE@ge)2t7
z?LGm>JAOp3559VfrkeyMx2;*5HV2ZlA@KvXx#C}<DWKP0J%sp$&~?$v<|Ru-FmfKG
z3}mf&$9{zfB%Py=;Gq+ueQbDfff$0X*dek`jMy0rG)aM@!8!0GPCb!^(*+B8kOmCt
zkeLPD)jD{}g?kMPiDF%S|E#|jq7z(K(2e!@;CLM1I~+%B(noNRQxT+Io3A&SG78{b
zXMDZMjP1o}<0%IRLw(A3+610h*opUqtSO}(RyPuPvH}PbJ}9t_G8FiR!EOdx=P|TM
z(6DUDhP!VOqPxdvLq@=@e_L-fExL?WalAC6R70baf<+FeRD_fy-NLLs$F>-a7hB}V
zCN2Z+(Iyt_g~@l(XF}HEm>>*v2OM)nYT)JewRZu;(<ymIl6OBFq#LWkleX#`ZcW6o
zQr1NL+SSmU#x&f8ArtnjquLHRs`)7A$;<{>AAt@Fb}{EmHpu8ZFau^cRfl-xGp!03
zG1>3xhb~>^q3UgE+}gjV@5X>I%GepF=Zs?p<_*cH`FUbG#zKFgG5~6o>C>N&<QCc3
zOOBd#$4k{`R(}j1HutQtquKIFZ`4pLZIQ@nq8MvI6Usve@qF(UtZhCE+8SkZIssuU
zccY}XGkyN-i17nOMg6l?wt1@qB1@?8q&ZpIxB=8x2;FA`sj&gC+reSNxQ%z5cWKP9
zP`aneid~CO^>}B!d5o}Jf$6~C<hsKrVt3>qZR`wL#@-$<s?%=DLg*gq<sU?G$RKbd
zQWyij(a%s_>DQfGVAEKAyPJNFRAEXDcL7m8SyrihNyLNjwqcl_Sr0v^>pJK4)nBc<
ziVd;*&;QJRjsB{JJU#hqr-(G9;qwsjI`LP?5uWhDqpkq$HOzsu*Q3A6JZgFEu16-C
zSYr&`(EwXOq`$e@3X9eCd4(S`D&Le;_3QRu&BpobFsp1BGxx|uV<-sT4OAthO-$Ag
zT2#1lR_SQWY)+Kfbe_qY9ivvw?jE&vvRyKYfZ_U?9_44+VS>qyzWqQ}Uj^kEcF{#y
za=?Rht5I}eyC`|$;hXe-H2~f%npHKm&7afWwy}6M%?JAFhGeZ<MUR|jdx_0owKQxY
zAF!d#*%L?FNi!Q}=9(p1S+oQ(U-oJE2PkNf)&iNI;Y9{rz<!|C2!CJ|K%)K(05c;4
zT4>TCQ?lLA)G{0lId4uq;JR{JxHMiHyd`C#(^_#F**24=VU$Kfd0wB?EA0fsL_;jS
zSZ+!?1Jwi74yLb1#b$Xq$2`?CxTw31-7s(N+?mYE<+6BhmTmgBI;qXw{@RWg$J$&>
z%&i{x#;{mU7Vyu)2ug;banA|T$RH6Q2}DOdHiS15_&56Ipuvf4|BPz5JF#_ir&#fQ
z$TT5@q<RT%!lv_NCtHNs_Tg--mv7wPua7Y;V&6|BR2vrZcj&Z1gc%lzYW!rGu|*g+
zI5UUt`jP6NlAIc8dG$^ri9BRq;+x2`#o75{4(6l?JK1OqfH!AxW26=xH4n_xnbnxO
z>wEgdx#WG)55wg~J@en>jk=zui9nmhr(#}xDqetbO20=`IbBrCV!i<P=*!B$F#<Ti
zlZcb|do#w`T54yco`?onb9$bd9@ts(4M#Y%Qri;O&Tj{X^ns$~^}A(_)?sRa`v!fB
z>Y-KA*y3fIi8`AcopgPPY!Of2&DYnzn6IJeuT3MnUDs|}nf*}}(U8;Sr!F982ExkW
zcpvK>WO`ZCO7`Drty_TmWlh1RFFiMRToCmQXp*yY#Gq@UTu;ub=A`N?jFxAG<y_`*
zo{oX~#5iQ?yw-L&4R#erigGou)V<MX!7Lq^p_sI7hV;gOzFl0bWIoUaN<4NMq^OBF
zf&$d#q^Zx%(Yb8P#Onu3^^dBkp8#Z6p#W`wjhF`y4P(C;Ii-0~PEPx9Aeh0du7%j`
zPcHoQ#+*4oChj+;f?f3uUr%GME-so$^+S19vHIA4biO$6XX?A7N?zJ<E<ti1nHH0B
z)fZ3)qhA*FTph}}9W~8(-!(gE8U3m>biZ<=&ySkwxlvO^WgOXc#v%3D+=mQtLk@n(
z#^hGt{L9uqCluJVx2(QbPkX=$Nf<GlvF8R8ig$w`*dhbQ;vNM5Y#`lT1IUKMTS$?8
zdo6nAs|`)xRJQDy={3R<3_%(e3C=P)ychJ*KylT2ar^Vx1?0$9o6}w}t!<^GF@-f!
z+oDp%G^Hv@%fl6`T_cP%hc?I8F#SrPl@D&R%1ySMPWz+L$k0iepZc(ZP2O|IL=Rq`
zP9(Q#DtG~02O$Ur2@KPJSl#7@Lm4Jm5rFM#-x8`rngIER7XEe+E!7BsNEWw*N9#R^
zQ-={MTBNo^66#Xy8S)IjdIGS;WoM`kdts|dc!bE#;4JF=)|0>xiJf8DZDO}#kKe_B
zm^UEDgs$5NlAw2`$sFjEDhX~!!pwn9NRyy;qs|=Am_DicS+zP{OnpVpBzXst``Hn&
z1KrCYraaO5IZfD!)g=VIgj03{Nw`9H=LblNR35iCU`Ihw0F7*EP;j|J#GIAp`>0kU
zUt1JjRTGaB0|XH>=on5q77`G_ru~p)$gDOr2=Z??#8JlDFf$+9L*7U+ufpSG6QKwP
zG%O}gXh|=b6C?4=zQ-1t(axkiuUF*^68;g`7P$*lI$+q}_ucLHjw(Za6(|x|M+fG9
zbHGOxU;dlxed_I?uT|>Oae0i7)Lr@o#3}0+>$Q$C`MjY8majmQM}ks#YirQ5*|fH*
zW?1f`7M-tE;GT3=_VOJla6v}^Cw2O%D=Fe_F|w+VNa27r+k)IDim87hjTR`k{>ez-
zsGTbPWxSfAh6)v-sQy|PP9R+CF3ZM~ni>85d&Pe{Jbd%x+ZTt2#l8DD1TT&ns8(F3
zljB|0T-KASgUo(d&oT3cpRmWVnMi$n?d;%A7mJUM%OBS>Gqw298EROw4BSvJ4d7mi
zKGvtTs6wT}^KiBGrgu#eER<T<kp)=8!Zzs{A~CFB*2}5``2gD1d7U{8yNZL|3Sz|R
z+7GAkWCkOu(RZjDXKQ93fW+KcJ3slbL=jbol|hbUP;KOy>&)7;bkJL3yuJ;W<YKNY
z$~yY%^zPFQ7i^aB8xl0YKjv8ce52aU1$baR$8|0mrzF;7poWT;UG3^mY;=lIm3<he
zn)>6sY|69r-iQ@&ib*l<O-0G*M`a(oa_{Cjqb7fHxig!FHndY1AY~nwAkvV4WF+Qt
zKB;Eq(X47Y1h7f>W1wN_(qW|YOLOE;K^>V`zoceaKU~aaubUr%#w?9ajBJ&jQS@yw
zn?8fjfknYDjd&-vT9$f&Ow&EC<|(HU=}#2uFxpv?9AGP}O|%!ZvEHpr<!7gmnmny&
z2gdpoF;B8g-4K%^;4S9I^@&Ru1!P3;>QtUjSFy&HhMGINN3fzK+(SR#q&h>dIWj|b
z_c3apqQMV|Z-u+2p*a%v4-B`@;=>QYf*=gVJWg2(<#DmPtQQx{=L#8kijGnZts$JG
zVtsrJK7r-1I5M}9(w%DkEA#8_(P+6itNMM=A75GAf^h&K<vRQxWXP=#(EG|PhJpv@
zPoor=I2jbk0vJXj3gVZ~POGfHctDvg42OI<1=P6%C8i*Uaw-SqdlaSJ$$5?<=_$>Q
zMiJ_vQAUP$5YVooVbZSE(Lhrp!ViSvkIe*jA?*@3envCOP_R*EEYS&xRmJrIO?usw
z!NlVAai1S6+evgiF+E!~iZyN5W8YI8yx)fNBlfvYeCpknyc0vbV|^u=%H7}<ye#@+
z_gYxwret^k+3`sRp(wZDSuK7$;_Xl#PMdwc*-dBT%^=xWvpndtC)Ht~W^lICW|c8Z
ziZkAM!zk|o<|)X@S(Yx0jOFxIpS8DRzl^)OAy2df@M_ALD8nS75nnG;zw#(;85cl;
zosve2Qs(kT{`3(?#t$>igHeOy>24ed+RQ96vqKyV9oh#OW8p}AW+cG}>4xXl#nOV(
zji3a}%>>WD_o{!#^b>rCvPXZ`gx1fD23z4en!W%mdzq!7n2ltq!97{=g(Se7GlXgi
zI&Al}E8dd5RYR|)VXpj@yVs+4=Aq~l_7X_CW7^m3g&O#o`o$0@AZLs_nmyzRwu12z
zz$nm~T3N!9$hU$|%lmzJP__?k`vC5MUw;Is;0WY1V7ZpmW{?7KvY>!K{2V3#RTo-e
zG<x~5ch!qIEqwa6S-6*bRA;|@j(Q;9)Zqt%5mMeW$2qJ;30{N`vB9CZ1H0-Dl%*LK
zm(?{!IkUa7OD_bm6R$CF;#E%}LQ2Obrzxig6Gk$Cs>(zeAPP(CNANgI6Z&_fmQTi0
zw0y0W*hSE6^XXopAC3EUEq=*(PEL<CRg4o#yLfM`e?{=WVO`!bG>&`OmMH#$s6r0l
zbx)bev@$a9nYry*oDJbU17Am8%RNd+j1b(4ujqutGs~Qh0(d67ADWz&cJn02#;*b6
zxPs2V=uz>245Z{p_je9PtHrCur>c2owyAL8cFA=z*HxKhkPBO}`t&c)$~kCEJx)ng
zYUbSg-RF9G(?eLJ;?1mr@XY7U;u0)Fdr;ad45oT+Qa#IKMt>P(`3CVDTr%2CmILtx
zvqk%nT{hV}tB;aVq)<~ojm#zNv_Or1Sw*8FN|F~045LQJ6by^qVBx1{%;{b52%Hd}
zvqM(Y_t&<mxv5P@S1xfBP7oRM=vtITD{rA&`pM8h2JdE%4&Cq!g&`^Cs$R>g?c%$X
z%h7BNIp{M)fERDnV-y9nmP0g{<XLovBale~@H`3@ZFktpbN$9UXHMb{Lu+4>9K|@C
zm*FIl;s6^$n2r>%Y(H7^XnytNV`H{p^;EF}TRMb#!lHK4QZb{0vu>9jM#d)%yIRbu
zQAG^mB`Nx-Z`<odLmr91DzSWAAh-C-Aa4e0dmSAb9&&ZPrteQ>GdEqI%oh!~zFKSi
zrZ_K`%W7JbOMjv3HUz<`)APfRZrF)C3|nj*X+6Spkx~b##s}-aoDy-hN*t0JbD-X_
zBg$R>p370iD)*(Qot)k2%j0#Hr@DKQ;K7PRQowg)?VC&mkAZ{r)jUGO4efv#=~;9s
zoY?I*cM_$W&N@+e4-@NU!`Ofte9f{BzyG*w-EzH1mUrz9BQVG0Vz7=%;tPOIC!AX;
za2V5atMEKyLQ;Bmnz>4N09?@4o@Y=qkrfrJ1h$(Jog;Vl!&J^P>YO!!+Z_SSu(R`K
zvN@Cu66iHBc<pT|zY(5GRfRacqm9AWcNw2UrZjgD1vHvU2YJ&Afvgx$oj56R(cuOS
zvs}QtWdL+}6`R-I&r8!Yhi8xIT?0Y_Mn!w!MI(Ca=;VQ%c^rx4mc8{-Rx&|2&XCu+
zxuIN3TZ!*`!6of?p@?vLNBn?6Kzud(i&bI@ieyA$<P78XL5lv6BAS=S_rjc5u~S>6
z>$#iipI|&*k>*|<;ePaeiPq*p$%Y@N_UpR}HL5|kiyu+thJTvBhKA40D<dgYTqk1H
zb*?isgK;gGzU?mR-xvq6?HovM2=8Gn87!f}a{y=xBd}6tUxgeG<pC$A=F8)6;R*l>
zDGW5RIQj))d#)gq!D+Awl-!8Lm|^vO^W8f_GkiB^3<6MKz)&kZ5A9lW8=@Y?&c?2I
zY;EHSD<!@7AqzE;3Ps3TPBhI_^kHR-^I5qvT=lG<HLLY1T&frY03NuuaS%tS;nFpX
zEwhqV!cR2x3JbZmSK8RJ*J;dYl3wF2%=T{R-*U3GLlAK%!YEwx=-Qc#B`|IU5G^0Q
zK(1dsX(?y^cX6JWNkq@?97053lUY>~afwJ*Io@WU6Ir8V#(}O0_!^p)l_1m-ZSC;J
zU<=;sKE8}IvWi0tcaVxqdfuVGczOMIpBa#wzvwYA>_dSb$3+MQel}0$^;zj3LDJD;
zM439y+LKQ4FLHpR(9R4!{4gW`DhOckmvIL=pnQWAXT!gl<*|1DnZ>bI{ObuYTAl6R
zeP&I++L}10f>8|qYas70n?c_M*O|A&VzXCaca}J}{oVHUSm8ntv~AMhY`6^0BEdFR
zD~(3Z{sjVZ0lk+q{^&`<YIjtTdCt_nn4XmuZJ<5^2fNskj4&f5ikKP8zyr>1jB{%c
z6@6E6AfkygFVaVVqsYrLXfwvTTJo-j)UwTTnprE650Q9LW{`~J_o`mP19KauKKsiS
znUv?l;7(FI!S+>A0RTZyJdWKMBNS83oZ=Ec=2egW(Vbl$m}HLqiA(oV4fP(DUr{dD
z_jeGMH8SBBf%twO<b3}CFBfevXp0x$5u`U~Q2=%X(MkFBH9K%>g|7>fnZ-q5Q$xrS
zLK+&%!O(`I<7RPY0Vk19;k$iPRFm0L4YbctG+tTVJ-a!cmdmg`RQ`gjBkXeQvW;_K
z1<yH9Z7q1m?U;iadCZYts~SlssBW4k&BS9}Brd4hrYg_U<C<EY!W1uME8l}7`_$bc
z9IehxAveD{Z_JhaD)OLqmN@C+c)K(?)88%4!d6peal_u|_|p29o?)@PIC|qc$0bJp
zD{CgCTvTkRjb#{f6wD{w@mxE(f#y{;b=GpOhDC_-R)$7tc3#DvW=$WA@zTe*Z>{2}
z?`^ssyZU|bPO*P$s&9iAhXx-7ZH)~TLuJIl^0wTE<!WWnnj(ZlbzQ1EoSPa#>f*(*
zMW%*I3<_}&?%(vgyEDo<6tvPYw{U*0Shgk9`Ni~@318-4X&G5;zA#>orq62}(f>_k
zuHh%OZaPe@>Etk}I`DyGxGCY?#L=QfFqQCp1ev9jNx2cVQ-EU76B;N51hIAfXr<7n
z>0ncd&oeo<{ZeOGoemWe@PkOU1Fffgyb3#b9OmWhNY26h|6E!Njq3Sic45}P-#djv
ztv48`j91Yd+j(m?n^w$q`e7pvI8Fu%VoD~p_b5x&HkH;t|1%50_WINOjSUC`C(_bZ
zvd#=7RJAZrtc@>F1Fn$g%p5Ha948lVI-iSr`Oce=nnR~vzI0}zw8@hN=H5hP%8(jX
zXSkia3i$r^ME4j@XP`bN``UhVdS#o}%ck(cRz?a5JtFFH)G>c0BMm<?2q?J@>1aE|
zD8QDIb(`<sK+1*bcJ+0at91?o_QbupgPyt&Dw?S9pZ+lV<LJRZfk!Ul<lldI{pTMJ
z-@JbJ^8L%#KfLn?0Gc<_E^{`G_7|Ed+P}#*(f;sZPJ4F_7_B)IxR*TgBMZo#T8nOA
zX9*voDFjyyZ%|0i8t4GXj9;bu!Qu>pe?5FvT~@RH?7^^@J&cCs>XL&|s!A*OXAj5_
z?+E{T3?&Z_if#D)5d5sD#x{N5RU9@JbFXS$LYyQB!PZv|+g*Z7`;q6kv=<`>C^CET
z?q$A$ZG|7nKgl^1kw@-Z42j;$1Tgasm`R6#?x<|En7e85r*1n5CvG@zJ{>WJ9iEtD
zVEG&2<xA)5hTCbr1(!6QmGjGTDMA}+9<Yb?^7-QI-NpGi2KntH7lVtFO|Ic`*@LZ^
zFeA2s2d0b31t>~KA@a`C>z7j=eS=$>LnE-q#l#tji6u*&w!d?r#hUYtCpf)KWBXM(
zWGM`RJ7Up!dp@b0f18bsZjfi`pr1a*5@-@pEsn#JtBk#hJQ!m2+Frb;e1BqqPDT#Y
z-kyazaB<jf7zc#tHa{2~H}wP+yZFkBE`3A%rn;<fyA#tOJx9$KI7U$$mMEd;D-!ay
z%;z|LC4PFeM<dX4Sh|zabR3zlu+WhDM^wa_NfnQZ9Xji%KfOD=Wf?fO))wLeE;^So
z8Bs32WRcpvzbcoj7ncw}s-m1o_ybI)e4aj#WS-6H$w%P~$11?Us}Lo+cec1#R*MVO
z3}17Mi@>wmen1Lo<9Tgg?vZ?{^%Al~Oq@Man;Xq8ug|xJ|6A1X+MG7KInjbe{BVDY
z??KM6e~GVbTe?3L=w^3~Mx!LGs&^K(QRKJ}s&u(`r<V}XZ5J$LY-=YW*4&2ua4QQ6
zacU^1c^2DSXiwb!7u@u$^#yC3ioQm=DQC}8ZWaYVqUx2Ad{*WNh*zL5;6z$e(P(Y3
z89NjsVU;tpiKf>OvC+(6WXbtcy*e#kJ}>@v52DTp*dvNjLtlEu*#)=>RB%CuU?Aoq
zNKso%pOxd^ZP2KS2MSF9TvM6ROfz9_GIngymDQD|s@P%CmR8UP3L@hbyT<*<rUkgp
zA@H%u>W#C9k*hQ4=Rl6gjv{BY6Fb1lw&mnMF6yQV;pADL{$XNNF3-)#-hzCiJQP_f
zbX|}$2#H|qC=V@cmTY%$Vgp*W(<pvC)&FD@%_Y^NbaO7~f6CG>>NHmj<yK4diS*6S
zDVhKaS-)3k-TS%4Q?c<5baR?efnnMwVhBZXZOS|oC1IdXm@I*86w{A}B~lVQB|eBv
zENE4Nans2~196g{R}jVt6B4?y=0N$oVN0FE(wyX%l{!{`Y__$Z0b`#NF1U$yFx)ve
z$TnTPVimK{mMBht--1DJY05jJ#xk<22z!;#;O{`?P-g(0*3)S<e>tDl6TJrMJ2fr4
zMXJA0KChRcbC|YF`gegtWbrax7-mS>AW}I59HPt=jRZIaRTs9f7G78sxJiRRo>!1k
z74jP;c2)q?1{H~r@1>c2yV(!)jC5`?ko7ygZ8+8vym|iV+p-4ytQJ;bPB*hLFo2%9
zITDxjEDjzU@jyB;Bt;jKe^T?gYo`q@%c2<((b{}vy@|aY_lBx2fPv2dIJehL3BX-K
z6C_(!577y=WB`u1)JR0ma!=PofmtA9T5V62kaLi;JbGSVng4sjO3f{FXitHmJ3WSl
z;FY=5gzX`h__>yI8P&M2d<WKsYz`?tz6|igHPHQQ2u}I2#ld}7FivhDYb{f6Wtb}M
zQscIrtWj@ihT7E%webN5(*elq3K%JI(vN$L)L=Yhpq4TturzzXsQZODp4cy1tku*=
z+{m>hg&n3%E;^k?hwvbqHt(pOPw@<0CP$E__KT;>Rx+`s?YCtOu=ciiHDQ9)&`V(J
zJAq(Iq7Tpg@C#I51H>X9_l{#9NoY0?wYiwjF>@#Y*2A!=0M{%nZ}}8y>N(`W+f$Sx
zpY(+9)Q?n)==}F^-HhY=PFsRPFAB5uODu7O(CWxD!xr;0Edeu96VEv1Zz`A!?W#Vz
zID^l9M@eFm!=mk`Vj#z3jJJ>vO3b^Bh21pS0th&6z{H~;7d=`93~@n+X)kk+urnUD
z-X~lo{a(@a+Mu3^DVuSavawD#Owt*#6pM#Azz`IU-LzCQudM!k;Z^J;j}Db2266+%
z-5d}L+C=aP0TG=TOmb~D<~HS%?GM(eGU30~e0kB>IOyM%m(|PXnS7!hb}ZdZUdKmf
z#)(yp?JYnIDWrz~MS1oTGfY;8F5y&fSBw30bWzWyMhHVO(nf#(qUpXSFDp4!9Wf!T
zlU9c$+i9eQcix{(HNAj44yy5^NCaM=jdv2o?8!wyJNkv;Bnt6}G3;#Ws{P~@+D<f~
zOxpnebt!0);bTj~l+TkG3OYV5>V4ZZ>r>YN0%@l6NS(QSTTW|?@E0Cwn_j+pcuf{f
zu9PNfD3l~78XsmReXM&@9*5yR<`3V+SPtxQc&HwWm-7TNyfsLu4gU4YAhK*Uz-E1`
zlSM<}n`Trk^_-6Qj&8@QZhs`CTyTGtN+|DJyg?(^2;N3GNPHO~u>rj&AB#1P#9|y2
zWq`6+v7Cw8#v|`zZj0bGCEQ9uSUad~o#_MkcB-vtIN3z--fKS{R3V$T8K+xTx39&a
zbiBy<vxj@8cu>UDb(XCf(JpxXhX*vjF4;+lr~@4{Qt+@Z_-YnjrA9teOXzwx+cW6s
z0+_zeCkz4VsVH#g`fl_}=9V+|_nk}?(ltS)wYe);#0Clhz~VNvt+uUfZgzquwE!D!
zG8pm)OF4!^oR-TU-4EqdA#u~!X-PJirGW0EatU|nk7O*f@_KQxaw-KQZCP2@MqeQO
zEL0BTnwHb))5R5UH&Df!Lqd>KAonx5nyZlS*Q@K3JIe(|+Hv({kQN)<Hf{1fOPH)x
z^dCUe-49`t(S8c7l<2QWJa&K|xlzUI$)oVvDin*?w$w5_Gp#SZ_^}+-{kqk=Cd}e|
z2HJJo<<Mhb+YdB*S4nmK0V)FB84!}Bl~@lGj`uLJgF#e}MJ+z02jm~;O?6zEJHRAB
zS2dx2>BoU8C;%KNM}24s!wWMy&S;g*@<arZNgm3df;9YixZaTmN^Afcb*m?F+@RVO
z9s`(r+wIput2a(NMMQL|^9U*tw+x<dD_sV23_KG_0+nForQEV&E3Qd_?zBI7!e~pE
z9`ARSF+G<i$2MV&lk7M!P@7oYy<WF%z1EmdTvsc7TRD+Zbt5N)A9r0M_Tme;f+N<B
zGfA0<o)6rAy-nCEeq$XdFp+;Sc=Q`y!*T-v*-rU}L1oN0G=*@`uu!RdSubm{n6??&
zEuMa&@&r|W<wB}CZKa|r_IU_Vl3grb-&|onIxWCP0$|v)niR;g6s~kB(D7jDO^>$-
zV!^ybHG9waxTRg$`?wipeKPMy10QBCsL>F{VtOuDVpM4`%z~0r9Bb1yyEE5^tU2f;
zsYWXuES&i4tw5zwisZ}Wq8St9`cy5%Nn)Wac{Pxo@dG_fecAfnfpTbiIt=~M=p(zn
zR1Z;&eTfEq*Wj?ko03p!(#r?bNFtp?6WU#;zO8sx%@DW+)t^Nd%QkVA!Xc49Age0B
z!(YoLD;R`x+lUskiMtsa@tC|)HfBBWPpipCe1dywxOqK4QR)zc@3`4VS}A0u2ziDS
zEw=iMNs>^aiHCI@Mjp#9Pg3leI?yvkw7&{uWGs4`%nE6{9Uf*K5!;zXn$)v;{s!V&
z%ug^ah@Oqmi&^;#RtJIWbHTWr7u356Rk*`|#w0x&RvfWE=ib6kV{&jw9c(R=5a{(=
z9(#<%5{|6z%hl=Vti0-PF<A5h_uA~c<Jsa9Y_ZTry<rKE_MXd&+@7NQ^{Bj9E!@Y)
zyz!VX9^Wgkuwh>vhJV)e7#*y6Zb$AdQ9dj<vNKBaEJKb@Mg2tbk#v!tc6gp|*~Y52
zgxd<Lm)XC<MfR|shI_2IpjzX+VZm(iGI!BXLw`E2;L~^Id<sI@Av4jBaw;;n6We{}
zE-N@ESgyZYT>}HQt%imFBkti&%VS;8;V6$&`9r^>28!;1>orM!aO&$|Y_X|5sj;{`
z%K3B42RCPLO$H?_bPIoSip(+x+GBhI!0`j5lK62pdA5c<^Wr})%2{8IXc%Cl%jMm>
zc_UD`e|EItxtQx#G;54(ZX$w;j(1HVBn?0FA%47tq)(&#<Gco=h3CP3vOkDZt1&;K
z&o1qw^+_tgSN?)__u|-fpq_W==d<V2Mq>66nR*;DjBFFQF@cTFo5(dvPFs3OY3R&N
zH;FDKtw|FL(}>DMb)X(z(3)8w&*$^@tU_D!43V{gruVG;SiM8hp>LSC;Wut0i7^Ym
zwf!BJFyhKS22bGTwfCq7e~BR`eRlfP2LlQaV2TIn1}5sD?(IPOI|E(FdO#u+pQk2D
zt=Z<j$D!}A9<-!$?wrGuMG*3RIP9RaA0T8!c%b6a6!%p{h}jO{?fXCp5{MK%F1E`3
zhX-0%Yl9X1`uhX@<u)*pRPNC-cd8OIHBE$vuPpJqqt4#*nDL^u*J8#^88OlYd8)i#
z&p);&XUW3)7eH-mR`tyuIU!<^wW9iFFBK$J7mEB5kB$*TNHwCX!0k|s>~3nv$6{tI
zusO{-_yE<vU}<1Pg?_8*Q^<v=S{aRCg04*5m~Rq`DbYOS=RnW5%o_o`O@o~25>mCu
zJeuHZX*bypQiATh6<o9bs%!BVTtm}$H2u2C^+hUG{F<YYtJANCZSkIH=^i8270$}F
zVB?~W7^IOfqRZ3GdTQ#h{4I~WepWD|VWI27+Fm81hb+hLFcJ9YM0GC-kvhFKweD`V
zK|F#eZTT%IJy!T1at-3HNQ2IDbZ7jUTGmpIRQg%d{jM`}u%R!0<#Q6_6FSrLQ)?wZ
z$eNydk1x#P+{t7;GMNXr--wS#!co?GecF_t;sZsETJrf$R|A)uj0X{Q#Rh?lNg><B
zqFxVb@HzG#3L3fu!frRa{nR3=n{$8?#avb3N-2ihf`6mDnYU9|%MLe_`L$`>=5Tg$
z78e_oS8toVnWPG9CSa(Y3ij)R(O*f7Qx2U_2kA%3j4f(7sO?3F=mw(<=PP!tvNBi_
zcHDqD8``L_(_`7EOPzhU?O<Od&0KbK(J8qQtXeXp)(NqZQL9`ajz!lpF-^dGpqL@-
z0sexm3(z4SGSnS(zW+rb6FtUl=K}Fr4>x_CnAQ;%Q<B=olIm}_U1I`j$BBOHj}4Qy
zNe}P{x9|40E;BL=^%;TOPPB{nQVd*qy~L;h&Rp|L#IrH8-Pl|(v!j{S=Zeum5G9|P
z3czCQ4Lc(HPDEvC>ejLyh5$FiSogXzaYF?&Se)6Qi>Me&9bLOK_X^gb+SM0}n;dnX
z$m->rMLjn+73}*Q{#JN~63Q!SHjLCB!{iMu&I;pnuTSV%<=aK`JzS?Mx}UH>;}^^7
z+j?Hk-YnAO9i9Q8X191bHxn-Lk~RV;%YFE7<eOrHj&XIc3(wTc_&!rzOSr9LYw?WU
zKZr1pwVX&M7)<2SJMKPjny70#81FLUx?n~rj3SLpbL9;p5o6vs(#8=Jr(w*kn9Z9W
zJDYsNhw4RoZ16VBU9ocw!=B95AO(KztIg({`+VL08SUe|#S&mIwVX>^Sw_rPGp%&!
zC+>`N(kka=vxG3+8s4mIH74$Hr^N@ylY%CrB(x3RBkK01EEyr>cP#EjKMw1WFl02P
zaUc=xv1AdhZF1T~V5HFO-O&`)G+rqzpx!?__I3$FynxtfYq9m>*Wd5B^`czd(b%IS
z<EFa?NDMc1VfP%h9MQ&d(N7oV&NzqHwY&V|xNrltB~hpaj;nfBudYS^!{V~-DzVuN
z#F&e_7BU~tYH@NxE6m1I$Lpqq!P&=3;P7%c|5Z5>+Pbj_?*h>3t+GgjUu*G6zT(al
z_i@o%o-RJ2E1&7R>g|3p{+V%`J%5Dm%?8pAikm)*iymp@w5X%DZr@LKpdC!OxAuLV
zgB(Guiz|~=M{PjUvL{504^4zF4e1eTo8D<NaOFcrA#?AM`R|C2fgkKtKpJkd+99c<
zt^)&N$dOmNOS%&#iT8p#82bA)dW!G9sU?3q$L5spWvn(<jSZZCLEdCN*%5YR`n!nm
zmT4P>4Ze{CEXjL>P*o+clZ`<cDQZ*Q%NM=QtnsW6`dEjcPSJ9nQ|+E&OJ<{q4Dp_=
zShhHyq(z!h)S3F~c^@$kl@{k~t?f=*%o-PDMBX4hSRW*$F*ITtJ6S4I-G@@i=#EME
zAU`H_m_|VBa$l7z;tt`bX3T&3!^^Ys1mm5O3Lq0ViXtwq7C<gPzJ2BEhnNlw!!en_
zw;z{Pldiy~k(2<^TVF*nx5}OuELvVBgnm5Agdy=LgOPz-OzJG&ry!NM-l4h3gZ&P9
z4LNYh%Xx^`IVB`J6E<gBA)7~@UT%;!|I(f>+0Cn-Too9c0d3g%buy}Iv^YLCd*)|T
z>1tQ~^uc_(-d$%2Dqe28m|;ju!6D(#j1SNm<5H4nN<48WsI0YMHX4)?Tk`Ww%Tq`~
zMhcAo;|R){2X+`6tU}a<rtfFm7wrx=odsj6QE%CYgSJf~U;MN=F-F=FG^q9YFgqR)
zGN#ok%C=~40)g}OlY!Y~>AM(JLtkAx!m>;>o<N*K6ZU0@1eIA4szuZ24gGv{=HR}n
zvsx1$RZM){sC1bmdGR$;*^WA&HpE7z7@nl-<r7<3P)(A!&{bM@0y<==mdR2&>SXC2
z4!&X7tF+(rwfK_Fs`xTwIBm;-6&CwnGW1TNh`F0x@M>^zc}SOE%@d~<mt_gEU>Tsc
z2C5jU6>1o03cXZOO(AfG=|zQ-I!tXg1dG^SMis3ZI>Dg#cMe7wZH00p+wUEMA+nvw
zR?)NY0xEh3c_TJ?MWUcsU2a7z2TA%Q9ipgvPga-GBsb|%&T}(;>~43jW{3$W5xBta
zY}RWR%t+kIv1m=~1or&>1bt>ymsj!TZ9RjShk<FoOxl;?ry^IEOWPzkVJ48-dFHB0
zxMZ3AS*lyCDJtwlJ&@Jr>b2H48QSPkc7z`mUi*9u32+VHw!>mh`!8EphoQdRI5K^o
zuyiqIYB^GCX5LG(Ax1MU0O%f@yl1*}>}0y{oUp=5$Cq~krHk0ng72zU%pppA&NM6a
z5^Ein-w^UfeY#kDq&MGTK~H+w?cscN34lE-l=l4X7@NEx&TTWzznre^fiirHyocu_
zpNbxNw}-`puRMrV+wItajN#@uyiT_;rc!*Z`j3t9TjKLlA0LD0=3@`>=h3@IHp?O0
zITelSwJgH7)S7)IPM6T@w8AOb0FN+&KA&3|QvhQ(whc`m^1Bg9jtR<I@@74^IWi_E
zK5I7=I3AG@z?Hd*WogtW<{XTHbQ?(fFjU`4AS!vw&y$a8Sc8qnMP$}YAlfZzVsjjy
z-D&IspKxP~YLLI-;TXO}(gbRyO$5$Ac5_KZgg4cUJQ+jI(P}g=(VaDlNYZYqgPg7B
zxCR^37g%@&=4~IoaFu-eEQ@9`l3^J9D(2ex`KYG?`SF~fDNOd1NW<;kw1x%GO_<MB
z^UkEbK9)ku{z2g_Sn?j5v1N;AC|L=|n-)eARm7D=g0mL;85ckmQ<P~*T<s@|l%yp;
zW%aCU(P^B?y%y)CQ!(E4aPJT%8W~v}B^p^wDg#+wuBvB5VH!i)Pbkd+x4~estv1-q
zfZGPG4m>~jn-1LKYl(WWsng?NBcX32ktJ{c&B-fD(#M#G9kwvc{*ql8sh!v698|2{
z(i8t~%U)t>2%khKy}7+K7n$(nEf5v4ffr@@mdL`cq~Md8dQ}aO%`@j-&W1>X4Jc_T
z|En5Q2eY!WEWxw-{9QFWCi7K)*EWaFlljT4iqmJKrwx8F2LoI~ui=2WfSkJJw7yv4
z#dOYoiNnK!-xVN_(9-SC){%vN{Xa&GLDHvoB4UG$=>UD=K%S8?F@<)i=Y0<EJ|A1^
zr*}ACG-sGF1tIm>?6w06?1F&}#8GtuMyjjRJ}WGnNgv*kBqFv8Igp1#j=ZgS0$9Oy
zX&R@WS*Ci9;z!bJ#${5Rcft+>^o7_-k--PKl_G=9H5zS-E3E>z!iZJF!OHy4HWx)^
z{txAv-TQJJkTbKSVG8^X8j^(bNtF2!3-rWedh=32QLa)x0F64zBZ!>S)4k2$rtr|<
zDBzX-t*I5w9N-CcyD=4U0VWG`n7E1M#yl`zt}@_02yjcYo}Iv5tC7_KeK0;Tybegs
z4iMXZ;1FSi9U;bJG=u>m@ZT?Bia#Skd>CZw&}1x4e8`x)K>f*Vv8-Ya2Fh~-ggx~@
zX;V#BST>}VEIFkp5wCgFM}6M!!S!b`o%UqfbMju8+~&ABhfFo!n+sDt?{xU2M-IFS
zlmN{_*%L6uVL=V<-!ITFvYZoS%f^bMYn;eAMDc=rd1ecnI#YD;gtD@jE-uX7ahu#7
zsg;BHVm>n++RU#G3P3PWcSgVeJq>CJN&Bi<ZI~A1?K_#(tI27#ERL$xr>dG;n9Exn
zO@ec5bA&Lqv&GA^M-M}v%w?6wF$2)y<j9SvZ4Rv`gXoBjOmr0Q((j(U`u6b6%c#>#
zEtxzyx8-n;$gQzj(43zw8hAeIV|s@*a^N9kCH@I2zF)j)7U#AVzh?Dt>EFS~S*i{y
zePNCyR)&aAYGNtW#G(Tn^!<DH?ieQb2K)!yrf7&Nd=km?W^q|h&5g*4Z>GWhklh?z
z51wL6n)dG=^v%jdt1rkFSNVB03(pf)76e&7LY@KTMf)Sx%YX}!r{(PU{i(T@&MS<v
z+m`|y8_59JG;fOEUYXsw;?jix$Omk2#dl5+=L|o14V@OS(^pG~>r!CK%zA<v&f?Ei
z@u@U-I7s1X$}d*LILgbiCiRr*<iaqNVp`KZpeR=ka_QD&ajeRw_UBPGDa|bfLuf6H
zv@=U!+9)>#s7CBaN3N4USAJk62?-s#LTHn^nam(1Harn8i62(rmIdR5UzV^Yw5F~{
z*YQhU$-*~Kk-5Tn&1i5l*j(9WkX13SPDoGbfV{_nz?f(NICjTe0qL-L;Y;la+zhd9
zs+r**pUhI9LZ6Kx0MqPZUR^<UGFZ3wivsP@aUetBonoMmIF{UCK2^oX`Qj6e9Y(YA
z#EF>yRGYP#F6@y22M#9*M?ouUkG^(y_#-b?MQU?|3*16HAo9yqGx62risr~2fDH_#
zGqU%)rj3W;z>$f;cu?TTbs<LPP2hI#sPBk@@r~2j_ZOq^oduV6e6gj8`N|pura5k%
z+F}%H;v54DiJ@Wl9blPyF(ii&&!V3#=9g8oD*DZ^`2YQX|3Cll0T4Bwe*?*ooA;;H
zs(ior`2$p4ouc&w){{q2!0*+#fH!*~KVv&KpX;%a(zc{TOm&ix!V&4DDNt`=qCb$0
z<oRNxq-AAJj}pHb8aI2iI$q&+XfTq5p_$7H*ad<u3Pd>#$6(AC7Z0|#w;z@8pNH@h
z7n(lZXHxe6rlNmkMZc$_|71n~nJxMkR`drd`roYRz8%b;zA*zig8%#xe!heyjZe(g
zX(~FCJ*p8+&dZ5G2+A=-WUau#V}aU9%|VbE`xuE*zGlbO*#5{WaX5QmL3VA;5&yj9
z1_~+=9J*mBLJr#*B<HLLZO8Gb*eM>n9}2`RF&7_Z7c)Om-Pcsn2Trr^6SMQv5-p6T
zW>komAo<#sT+W5l@6^cRZUE*aIEQGtWUT@}ft;7+8J(?gvZ5Id2k>qIY`>iTa<L?y
zPs;(+48uTP>dr&BBrGo`r^w(r5cufNf8K4mgn@ioT+F8C2s8)C>eQ?TeWyVuG3VY<
z`OCG4-}dtsfs7+KuLW&zQXpXRXla31UjDE+u|Pe%zB=A5wfliQjVx3|d}T%dJ*^iA
zrV1k^>bR#>xnJ~^Qcsx>$O~JC-eWrK6ZCC4AU5P1MyE$)+~YUe&S+=n!O#y-qSWq*
z`-<*ipxt?$o1N)C9o-Sy21T+kyA|zO^4$^uw&ZkqTYu|vyN<Wp&bRx_PIspTFwEUC
zE?4f3Nn%~vog<i+W$ztK7Z;{FNEjgY`NS@tO7YvQV$$4<vP)xAt-WWl5JKBbNV%UK
zZQGF8A_)~W;P!rI0tp}2F(ehmp<>cp!;sQA!cf|?iXlce_p_sI8<K({Pkr|@6KHu^
zz$eA%6!&))bDq=<+LxFEp*q2*DY|&0)L%RRA&>qn!=Dc|G5`BInL$5CR9iY(#Edns
zc*+1C>O&cHhZ#2=W=6Uj<B{%`4v8Fx4+G+UFVy><?jNNA%dDyLGrGp^aiLn@Bbk9(
z$$M9QEU@55ri%OXI>5<7T(96#ACoPjK+(+6^ZS6FKg5>We~>fRX+I1onJiOmpZ@`;
z`G?W<CTsVHFt|TPHW~BVtX*yfDi65D+J)O(7cHdDdA3L%XkSIrVguV?*!p9@)=~KL
zPuiQJ#w}VHo@dPcHN4hJXsw(?R}1Gl9qI#4Uc_4Z$N=axm874wH2bH3`hQ7jmb$nF
z)heghFn1>2mU695BX`nz%G^kS-iZtSOF-Jc#$4!M75=MYBMhpQ6a6br{a-iZME@EF
z_#iz+ZnLWSd1O!5+nptLRl6)%w(s;MQhSlH?~gI=BLVkkcjW;+Q?9@0`XgRyV}KtV
zKu}6`26(Mf2OB0w#s_^qFX&}l&L$PBy3OSUy^G74tOwRIj~Dpj?18txXt5V8c>e65
zp~@+zjxT1jXZR+t6e_C1HaWBTMKdqE{3>ZRPp&A4)T|G_=eq0G?3VI#$fVyQpDfm!
z8aCA6^0=PO`h&dT+wzC<hrXD8;x5T1F3u*|toZNA?tTB{M=)1ZiZd1jUy7!9!d9gm
zmMJ18x~u={^z`LsYOdsYxjYp=tR`b9Uw?8|Z6uzB+&$Fj$*exHVY0A7FOc(HHmuZ}
zCf>JZB(KaihjI1Uc+ne;t<cQY@#>#=I*~cRAY$jx-WgtTwB3tkJE#aa^z{Nl&6upo
zRLe_#rlXBIA&V!DslQ)d0?|-DR)06#L?@tj1EJlhz1u0vYIcmP{LlZa>+2vsuVQ_L
z8BN&E#MIrPG|<Xjv|z5yk=Toe+h#u-kN57cNHi%4fRXV8QwST_)`q#Lu2u%jvT(m?
z5C&7LdQyN_UC}d=q1_U;*yRHj&P<FuLDWQ)9+}|?eSWr>EgJLrza1YRCm(^O$mo+X
zs~Pk7m(iNAU}JF|_i&XoMg}o19<m4Dv>%IZQC8ApnbM<MiP%TWktC0xd81+VEl64s
zYRk#T6Xbsme^E(K1-G0u_4#ViNMMIltoe~0qDvut>CekEh!p_;5V?oN5ZwtzKt+-{
za#nT6ziM-pXY%U69_;*_?9OEeWOFewv+GZePZ;-GUYtt@DQ?%F1|bM>sRTdE*Aveh
zxk`*{=Bmi2%v>$`mYS=@-#63jPh9X3Us0)id=j&KnZ%p?d7)Z{ZO`9=%Lq9en0o^L
z`=LwlWx59kuXM6llO936tDf}t>0O6VtOp(3z&_hI(_wfKRa2aUp9@s{)?C)nZPG=j
zmbkeZ7j~ke_}UhKXz?SD>{mUBBt8<tgjKofwBjrD5hKoZ7?-o&<4<fT@h35^&6cF0
zt0=}u;yyRw;a(IAnO1qTJ&bp5ytHWc^}2aZ>{SXb?az7q0ek+xs%G)jn%gQ)g-B-h
zd%uizgWRauh!czwfVE0~DPDE~9Dakn8%<S_VXV|8hZ}>1cYoNnma8cKk!~Jt&&2*4
zb_s`(62TUyaen1Q3<CHN;_%NXInW+l&qOpMmae;N{ccjY&+s?eZyR#Cg}Yh0T@)sl
z$#4s{bY5#OWcxs>%65Zh!QeuYMZ0OwK(+r%`0JI^5Q8er4-zz1q3eYEUb{w1YbB^O
ziv8bRfXKycRi8W5wvt@r2G~leyK$x`h?l95uaiu&tUl55c{2>}O-m&Z9UgG}hq#4X
z2-d_Exi-l%J2952A6!wZ@Ucc$Q9LH6hVdFHC1P|cpL<Lzemq-%5GWelSMQy&SO26Q
zj*dN^h>DZ;H>{i!`8S&+slp3cc`0t>%2te}%q=NWDvx5TrkpQl;LoY=8+UKiH;CPw
z@t7#O)&pnY3(bNVZgO*usTb)gJ^2x9UXf(!_8#;lX9QY7>xUL7N?v)ii*C{++&NiD
zJ+77}>6VX6(<I8qTn)Ktd-9}Onrn-=l?Oeifk3fH5WG(pvXnFPx=pLmdRCsV7km(g
z!%2CL-3((~*>a};<7&bUdVu;dbSN9NsTMbc?=YVB@|qKMr1#sP6R%u|`|uy4E}Z^x
zgFdW_rzY;QMG*A8$wCA1549a3A8YJ`4^rKEQ(e{ze6<GeiB(K(rXGEOcS8HuHG&J~
z$tOfL-&6jZh-`(bZdIM1SJN)pgKX7TIE0+)Z&l5gFaX1W{K0i`R8KI&&-r48*#N%x
zvHs2$^Tld0uX<eua8&)ZHrTspE~5dsr~`In46mTc`>AY}be)8qOs~R2Fh4BMD7K?~
zs+iae>C{5x1Q9pMu?0cT#&C3@-0O<L24c?w+cu2c**uz0Dlj`RXDf-2Y?(Kiw7(N`
zPi}t71~n8w2a%;Gca`!(9<n}TqsnECNhSEKzmdZ>H;XX&=$j!3-trNjoM^|tWPC{w
zt4z0tlMUe}7mIU`yAk|i9vw4C9#qlr+?emW$vw8~wZ)Cji!uKd93`YLz&q-Wb}$fP
zLTd4Y7|~b!+yzY~ebA7G-ZKCuRM^mymZ;ikT&&~Fa|P2<=Mv!&_j5tfltE2dfEUPR
z1ulk+lwnz2a8#Rvz$$Kli&+JvNV~bG#>RBYD4N24-x)6VU7wF>!rKPKxTpt%;=dDO
zqU;RVezg3U=5B)km-Sr4WDoB5FikBQfVG7ns8@Dwqu6}IhMbPG^k^}11NsB6_b9V-
z4abFJ&YCz2EgiyQW(*`E-ZMI4cMMXag4r(_wcyZq@50dJ?l~@(t2ejUL3aPpmKo8n
z_MLOfEwlM9C@)Wb4!T|_!J$NDa<BY6EDR_9VE$WPeV`aWA9myE+USIZO)#|gsBNQQ
z-Em>#6uM>QFhQLDIf-qJ8^R0)bz?9ZZD&|P1ZGM@&WA&=bqvIHb#T(DqB}hD#``oP
z?0}>G&fsA8PWP>Rb6ZZux~vCZ!i=K3+Lh~Kl-L<v`%g(sH$$TH31&(t{xiO8yKfMt
z6X;D#0Df(bMO-K)su+?)l4yZ3(Q9*bYvh8BO}Wxo1{$Yb)3<x&9u;gAS8(Uv+M?oh
zG01_U`*}K3jPDQ`6l>n#Ck`bdw{3)rbXH+TNXy}4&_w;*k7RYs>P!5`GFcdG<W+wj
zSe;_3!t6)zlFIL5AmKzsickv*G|Pw~{u*|4IISj-EXd}9r!o{jP-p^}PTY5WWMuuj
zLe>w>?NNaRVR%C7;{$sf9~Q-!3tuT(<w$;o%aG{czwS<y9Y(I1Wm~UM+GO`7y66Ii
z|6H$5DFqTgkm*{1+ro_wj<Rzi8=?^S!HlBdXKY*{>O#Q9>Jxe#KYSkN?V-aRtQ+A!
z(FkHrbB_AAIKoH#WGZz$d`l%ae(ZFR!O-&>gYv9FkH6+Q&!9B||B`b8cy!XagBPta
zuzP3+-l?uD{w$x-YuQWElIc>iPEg+WR*Xgy*W{{1*E4IOF!s)g{*KI(d@3SG%fhx8
z+&Jz=<OO`5l3u#sB8~8_w0K;%wt$TQ+VjX@28H<GbJ=8nWo+#_6JTt01e<*Wvm<~A
zc1P=tj-1vK3}Y@<tFLZYWG%fi)<eH%#y{oxQ{;#ED71|2Yjmb-;M=*e9zX+bO@)Ld
z(){1b^JV&h4uhoJGJZ2VFUWocW22l=7yI>F8zcekhYx@}X`{5Exe(<jR5Ac{G$uMk
zYml}ID8;mVhv%?YYwFmuEC1bHP_s4snb1-v$Y6TtYun9_7^XH`Nk+HVdiyHYNE9sh
z8RZh8P1t9t<&m5q2Y31syHEqc%He$lfyzprT-w7j1(muNkR=@Ukc%wAh^CCN#t{{@
z$C9=ohKX}Y-0@+tW1FEA)td~lS_tEqLNcidNldU8TdNsKQ?q)i<{FnIhpD6N%;z8?
zcA{f%oZ<$T&sD(&6<WE`<lFh3=#!fB&6%v2jYjm&!L=EhggKQx{DXo4y~LG_kE|n`
zbU4Ocr0}A5{|NndI<7Ix#$YuS?hB+zLOCI1(}BC{uQo9GsuGPajew2ylu>&r@c`c9
z!`N%T=c~R~r!CBKt*$rcGE|EKm01ekchC-QGwn7aI)WoTBBAI$W4j)v^7NQSsfg8B
zt{Ot(bu3zdO*1+))zZi<n2jK@1Y}ELFD`BO@7?y~#c7tUm~>hbZHd=4dQTH?Xu0fL
z=MREzkMEMG*27RMP@~ZOJs?fnLroh-NF1GCEX}p{fs!&Z)eolXGOO`(&v@n0vQP0Q
zA%@d~K(?Sg>z_Xi1@ZTRHbb_ScncNV?19;15YD*mrGku;0}$4K%g&0i!y&X~-LP$V
z)**8wQ>kHi=0v8yJ=;j$>@sf+n_SGJWCxNX^XoG0b^Xo3j?E5AxpZ#MpEn*kY)C8U
z1gU0MzPI}5LjU=nGCUOVdHUBGZHc#Z8O>`WHHLfME&h40176dOr>G)2s3T%Nnoys6
z*0LXi>VOGq?Mta2O#EG`{oIL@*!kxNE(oY5-HPK{WF*H;C_Ro-MMH~?RqFgEu6cTH
zjy3n1F88n-#lp)vOkl7ncm;yUuvhgm?=cZCP&Lyu@Slr)0CQl^U+253nKnbcJME^$
zmaaTwH^Vd(X=4z7;}^2=mcK4<M!j-I-A?O+H;E0@K8SYfZ-ybdEI#2G%jpvwtz)dn
zqPSQ5Ps}Uwxtw1k%J1Fppf$4Un+IV#`q9f$NZ|1_*91PgMt>N}S30LYqR_TXZ_?NX
zOm);ORw$%!UCkyl{7p1DU*GMDR=CaI>SKN0>W-Duk$hF}CQMcXkI3+EC-0_ilD>0a
zxRonHM;8IUm(LfU>|D%tHp~>04ahGa%$IBY@=f@X>~FT`8yj%sp>%JZ|1440!LUBC
zMp_rw6eeG^TG-d~53IKjx9`m~1t*X8-fr!s@*6C3<WCWKO6WcinA$sfmPEfyPs2<e
zXp;{>ZfktFLU~9?F|A4B!#XmuUzoVScq|!~Cw@{atiYZEfPasMK}hR2N@kit2vH#2
zI3T5;mN&193Ni3BraNrBH^Jxul;2fcvUn~>qSq3|Iszyb5aP*i=$6pkd_J~xR&e|U
zw*2wL0p+yG<hvox+6se_4UO4Z#0qXJ<let;4%_861#jQ3AiHt#t<7M!ES9GjK6eh*
zP7p-*6hiyXi}MDuvQ4U(vbso0sf=jm@U%2Che6P?e^fT>gu~zkcVy6J{`q7hlTbDm
z;ydPBqwyWVbA*Rm51{ei2$mNR{N5UA60dXBG1%%sb+c@sGd^0ZR*SPCdcTC{dKl#C
zqN)G7n6JtiUqh&eYAl?R@PfgR-^`r&iV(rMBQ|2}Capq}#5KgV@*^VA2*!z@w%DiS
zT>w)+tiRNb?~}_Wl??AH0qsV0B_M~v_z7JnqxGZmGm>>~bjxL22Hwk14rUm25X_B(
z0fOOPuWbx`_<LwIfnbz`rg%|^c;t4Ei=AS;F4(^S5}DEaSiQ(%Xj7PKf5!iQC%1#s
zp8_pq`IEiwlXwX=sm41~a9+u%x{C62wRr#b=_{L+C1WKHM)eV{Mo9S!`e(<Eoh^aV
z!fu&``-58jnYB7nTDi@&@PDPf&6IYuO&9iG*Ox*CN%Z9QCHY)bnC|;&68I>`mD2hl
z<xH2QR-zbZ*HI?f;cd)J-tvve=C>&s@d;sM-~=B^yqtPT7nU`Ywm5%f7EG?^UD2U|
z?Fi8S?H1cMckBIjAUMQZpu0^$d#ZH+G~h&<T}N&?UOe~!B;Q5nDMWqvSuil67iCxA
zlM2LqH%o>)Lhb_myd=j5ali{=`s9OH!Dku-rq02iFmI8zsIrHM{cfk=>w9Ghmz8Ds
zbH-9Xg<Oc?pcSL@l6!^&v_a65vW!zFa5mS(*E`Hhe)=?~zGdm@*bXB~upYUDM>$v8
zhve@Gqgl)7LamiPP@fKIGz)(=nc;^T?9U@@Qe#E$>={JJ65wuHZuk3CKIWqzw;$kO
zFw}tBjip0<YsZ}j+h|}pS5N?l&kE?H_7MwikcFKa_Yog=Yf5R!6r2(Xw+BTQZWrf)
z_mB}iJS2r=;NdG8c4xmnT_FD;Fc5A8TI_0k$P5Y1Pkbx$qr>Gx>}CthwCq!l$}z@b
zih$tFcDLYigMkP0VGWq;A!h`V`3<D-cv>zkgKBK*4<VmM+W<0lM<g7I81co0SXEkp
zm(%GFm@yWPgE#(B4U8taPc0fz!hc5gBLv;We?QrOBNO0yehd$iZ(X}#QJ$ekqN#lh
zrHWT6SY1&cXd`DUnqQBLZE79DBLp`O8jWaiop138yeDiYTXqIfZ(IKFPmn~#gBgH6
zQXFd@*0qCm8jT~sI!$0*?`E@9`2k*u#8kd7X6^84>}Ii5d}2!fu^W)NwxwEq{KgKL
zoA4N7Hr57DA!hS+Gk~?y=Gexg$yuuIbO?-RY3m7M(*P_lR*RnguHlvL|CPq2U;jxW
zXdhZCp`IoG*@<x3KAg~&4-dzd;a7a%XbVjv$KbVZV;}z(R|Az!Vh!P5mknR@*@m^X
zp_uF)P>9WuF@Q_WG<94Qu5q5FBb1S2?2nTp1KI)fDl{LbjCr>;N{f%sZrK^m!2As=
zTr56i#p;u`>dSy{v0++tIB?#Mz=v`jY(T4l^62fd$aaR0kcP!})B$#@b--1*s&ZIF
zb>=yrb+xmKl`bO|1CEo<i&3@(jfsP8tHD`r`wA!@nW6`+EP$`{f);fLGUBiIfMz?R
zPCCu(3!=PP{Wjy#q}%?&Fm92en{?a0k1u<I8}rdVF8UyPprRHo#)cVPC3i?s|JqdP
zU-LHlBc6ZvC?orJJ1Qt9bM&j8vljPvb!RaiE7$Q^;?i6aY!G5NH}Bv3Z-<9(eti4l
z@bKP!d)gc~RrS}Z|M|}0;d!%IEe;RIL=bmEsNpdSJ3PD-B%v{riiUTXlhBxZ3=Qva
zLz1yDE4c&4QP$Jy>Fc-8U%Wkh_WIT9x9`AA6z9=vPLBG2{KK$#@TZ5v;^FWAIIydY
zA0GbkkHg}B{15Z>_Ycz#5B_Mr{OJ$rhle}nKmYnC@!?;f!T)%O{}CS^{PFjua0hz-
zW7Ioj>wCEKd-%`440`bXbkbDUcMf*%m_MJotj9C(n}N8A#UFS6dx0^(&P#~4b?s*U
z<k`Rf+uPSa{_s4^{{FqfFBaI02<(`<?RmeCkOzB@@L$9K&S&MM>f^|ILmXk*?+wC-
z0hA7lospRZuwL<K6%K`d9bL0T*ZXzx-=o2hnb?82=-^dUaPSmtJZl0Sm#W}#%Jp9>
z8#w7Xi41)!I+$a|_2q;KF81uD6W*1TBdKUlpN_bwY;D#02p1P8r}K+0Lri-0Z>i>A
zT5_}6@z}Sv2680&INmH~Wdm=}Uv(fcPSy+tjt@JYhP->YD{vjW<=yMPA0+oeQZijn
z$oFN2`cVW7M~a>5_tmQG3jm`~Ka$D=oO(_XR2RpETf=AmYZ3tg?N-;WxEeu5@6)eW
zw@%xZcTKOYbII<n-B!gJKrhW~aJ84u;R1w5?y}E(3HjQ83;};W!mB*5CgY2+FZ&-4
z#KtyKef(7tsBT-);?-m;SOd}y6J*1S*j@O5nzHaSKZRuY>JaQ2`H@r()zJVF3k|E4
z5dEVUCY~HSL;QcE2j*Z?6ndd`#4S_^FmMn?&Sw|q;&5osM5kY<LH|Kz_IP#Bxkj9x
zeWtOesUew3_4=}Eni@QES&V+Fb5xlc)vNLv5+)PV85W0Sa}wO*I9Z^li+hi>U2f{>
z@)_CH*#2v<g%76e8jhoQ&3*ZaXPM^5^+|g1_A*?k`&u_k6m%Jg0k?E^OWHvWV4bss
z&3na~eo%&-^T1s#0X$E#yZS<iMNT>l5H?*Y$LH)BA0JN42hrjPM)IPZoc4Xo;4Ht(
z?0{yg)zNeEzeTQKnoHC7VNqU|^$h4s#*xG+*cXBF?3|+NdS@A1VsI&&v;5|^%A>v1
zW5BT@IL4Q=+6aY9mK@G`FbvX6)!dcXISbeaiHpg{YUOOo`pyO7A^Hxvv26QyM9kfe
zrBmloyc0zibmfUx1&fm9K8ui8XXO=~fN#i^&;D}OcJu0L^~8#KZZi9PBwJetR?^uo
z547-e1)Gg2Frv<9VLmBCcd^nBY3VO%R`e6R1HR)y87V-r8Nyca0Bjl=uEF~E0fg$7
z?l2PA3mK|0hWSu~>HSRBz<y=@r9@}javstp?-y2?J{P|jtg`l|Kw#B}cG|KF^UDE`
zX=Oiu;GfliN(kfrUNrXII|4|{clUg5K0(k4xjgj-3xgouFWMI6!EF}hGw3Q%!T$u+
zE$)Z4TNXrZV`{<PfCZs{wjZQx<>yQ5WXG<q5dkq5OEdQ1Qs@SRRPi&+tM8WyJPB!t
z@aDs+`gO+oxH6&YAoZ5Sz8|?6Wdew?$?oR9zp>HT>;Tew$U#hnUv^txkk@e--W?-B
z3}xh5)J-==<+$a+u9P%wGa)V-V*9?l+UQK;0{W(b3F);wgeSytB3HJ5VaKl2hcDdi
zbm*)<CG6Ab_ZT-CaYZh<qbvEnyh?B>t4yH+*4svK@?@ahNT&lING|jr_Qc(XF(jjn
z)@OTwlhgEiPd(vL&-k|##m|0m%Ta&D7=QLl4s@pofEKkI!~wLyI?AOFc~S?m62fU}
z@%O{UZ1%eO5nlZI4k;8lWKCT=%YlX*=2d-GO>46uu<iq4+?Z@I-8EbT^pKk(cLGES
z|B~^*%`fa~n0BU;N3J$q!T89PTdxHF8;wS^rIL;ghS^5utOV*%zuzd+z3GO4hg}fx
z@V7$1!(R;nH_1+@A@wy(H|!dT3T>Lv6mb^5{lTDZvqw#FkN=vXIU^p&coJJ}!Jrf!
zl71>rW>q<V?mk6&HXba_8&Y{V>0=wzVcJ?`Hc1$r6i`bQ0l>Z(kvYQ~8-XF{1bgsT
zZ<w;v<ND;H(Sn4LR_EfZ%6|RS)T`V#w5uNDV3U|7H|;o<x@Xe8;H5aZ=KG}(I_K6!
zvm+S9nr})<4r($(ey@*zs+YBy8HH<lR~z}RKCY{2|EvPBOvX@R-uut;IR@}<?NSOv
za+-8Fuis6|ne{Y>{-T)GMrcC*U!Y|6oXl6K$o;^k1O_ziKQ1e0cQ{}%mwjUy$dHEE
z=2DV=TP!|aoIkz(_v+e5-nQM755DPZFq$pU#+xC^oZLz7)-a7hoEhNj539Tyj81F1
z#93K83~wL<TBOO5`C_{X@dmo7TokJUp#&v8)5A{vZ9wW`LwSonww#?T%=SDz!!V2U
zZ8KH&5bw3M8HKEU0Jc#Y#$Gck6|-@0@pYQn>{j31NG&KOZ?B&H6!}PY;2SM3SA5GM
zMHMU>Te!IUJl(PlY}-z6U0P#%P*AV%<iOtdQb9MS`lebgW|viDt3kFXcKE66K?8Nm
z=PQbO2Lm#5xbEqpkL051vdCRP413=jEicZ`7tLxJZoanzZf}gZI1cYi*y+oC>=M7c
ze69p^!Y?C?0)dYs;DlQ?82K{(w5rdlFPOYUGPrrv^OM_wqa+?K1{N_Qq{&TBGN2lj
z2v?_ukWLq~DbsI<GDDSrXt@K22U{4}H+un^dWGt6U~i7?_B$OGs~0*UUfEr~tH{Sf
z7Sk);N+jzlnspP=-2YA>7O#_c`niiu5<XFpLIu|K&X%IHX<Kh0iYcHv)61Q8*PwKB
zWCp(cRId#GcLePZ$$>(ZU=i1Ym!jUd{T2wpzHk4aq|f=NsmhPLnL)YpeEqm?qgLE#
zKvwk7M`CvU;uFSze*xb9{lEM;xBT7=j!8Fu8H(QTJ|}B))B8*NeKWZ-0V$>H?{6PY
zXoBbr*M+=obP!Xbw?rRLv`?YBDREmGtTGAhh9SjeXt!<&a8@Bu7$u2ItC+(DE9@U^
z7*AdvER~v|%tlrN5ydbz7wPiFeCpmSE66uy??`D(5$hs#h^A6_De>VjWq`&ZkHk0>
ziNE5PXp0Cxp(KBRK}Swmvs_#>lgcL+Q~dD|xN|`q>cQv6(b)A^bZkO*+8EmUJTf$>
zciqE~TC$``4AdBXs}m#(30jT6xx6@f+PaXIM)wWKky}k(MoS8RMavobKznmso3+#H
zhmead?~@x~1e(n@z=uh*-ju_jm4G-A1u**2=xE8zJacvuG38Ip5M6VOsDCj97f2$_
zFzumtS@PQB!6rvIQtMY3gn{FSP|pWne7-BHJ6s!~&QU26qcl@0DvGYn^>=Y%H7;V_
zB<dRk6-POR3d9wmi})+XZL~#njlx{^y-uo^Ir`Mpf2}aNFmc&I%!}8xs^-)75GH9*
z;z(0rASlL!HlE|R&Em{68>ED?xu*0LX-u6xuwh5f1NtjCE15<-ZcxZ=_-4(a=+8uV
z<cZ@o-2CIiO<eldpK4(!N@iz66?TAc^gzSm^-9*0p@!)_?yhx0PR=q?EoOMp)tJUH
zx=Q!;b?cF{7A_2XGqCJ^@#?noQTlUJ{G$1&aB+&)YvRM+NE>QLihN6~7mF+s;H7#O
z$?lPRtu{Zlw+ElK*s!_S)F=X(`)&C{-@mBBvnDUPPA<EVM6YnxYCcW)Dsp;rg*YM!
z*YMRjXQU-`e56>l9nbqEGDUOjAJHEgJ1W8Bm_8Rq;xfOE{I8u|5zOmwVkWSvo?5m6
zJ}nu>GpjWIU<zHj5Eg<~R~<ZQn)2F17pQbFq?xks&b7(tkbS)lY*ay)3<dlc?^?{c
zryqATjAIbShkTUTCXx^iWzt=r2V+cM?Di<eHhKal9g6Sv<otYg{Vn(hlE4&)v?6f~
zLMz~3=t_v3!`pZ>kXF<A9z`k(aA~!)M4jb{A&}?-MqTXLKbHG7GtmK>z%KXr07P7*
zdRbeWmpekQN->lI7!ve&y0myad~^6-XmvlG*5<^PlLxHW-bq3G`WS1FR(AVAWQecY
zG@Kn(&9`9uOTaVH4B2p`@I`ZCxPyuZ>QyWUIZCA~O<?E}cS#D%4aeqCgZv&Rw=0r9
zh1+tB?AVKdWg47Tlf|?`dZo*~r7dZ?8?F;BdJnW9V{D$(O=m4O4pp)q&P4}#ID8%1
zFwu`KJ&Y5w33TTNGFy}@j*gsWlu?FTKtpfL{Lz&Hv878KUeOJ{XhTx&ROott=fGpm
zT|-k-W($HvDqA%5Nj>Lb5#uNfbiEMYCm%(@X?b4R_-4_rd9+7X5rjm>s<cTMapT!(
zW)kf5vlU6e-$u_2QM4uGeZN$c(RWMmjPM}ps_nUo5G<C;zA;k>zgld{lbkzF%WHd#
z^J~)V-_%#t4AEsSb?}%X4pjJ9@IX0)0oVmFS6VBPAkwx#P&T@YI2I)USlfJaAAXCq
z?Y_ArEH~9}7Y)56v+b62;+s4*ePFXzz`j;rJ-^{g4*g*)7X4On`xEhjuoO7bZfoG;
z`UOB6tblKflk*{1eS&H#2Lpw%`@6jQf>m<;h2_XdQF34w>x4cH>lPHpy2`dQi2`!T
zdXIf`_GT7%G!rgj6yShfH`ei{&j48lMZZRl@r0s*vg|&l3CE@F`R?7;Siv_bG&*dM
zli8B^7MJ5O0t|@9N+ZYQwFB8QW+w3+UDUJbJ7DrC?MoTbX9hy+8Oy8-lAWy<8|$}f
z4Z3UT3D`Qd1QaiyR<p$?dYpabfA{T{u9+P`s7-Q=cEu4fmnaqhyTNkaYF|6(@(>cs
z_JcPsnMNn+mxK#}d^O1AS#n^12^B_5??n>Is*D@SbV`UM%y=a(L-GDE2SbLRLF>i!
zHrJpVW*Am*%dp&%$q1Boi6tGu8~c*;B_mKxPV4!JeUt}#kY%4TvgQ{Ep|q}!H8;VE
zVqMUn3hW<fGk6)IlP*9SZJgHAX_Z)K;Jil{^W|xMyrQnshkIp(uw4?>Z4D6!0*H+7
zmaFr{TsR|en%p5T8MeP1I)72ni5z2()fOHnj?a+3k2K1KRqPO-0rd}sV6oYI`4oCr
zz4-NtnmS?8nd&NeDzk4wUieJ4YZftnjbeLT)y$qN&ol#G9JV&d%u}(hz~{Y;Mk7Dg
zXb-lcQ-5Z4>N4cYJjI#bmS59xw&_9j`6l(d#JWGVB^B&`oV4q>Np>LpGCOB60DKvj
z{z^QaX}R5;xvHCU{eygRMHp^Nb5Lw*jWxlMMXd}gF=QhghTalYhr=dc!@WJ$SQ4<s
za#Y)c-`!BN%H=Y6mb%0HiJ}6AHy0c1a0y0S)stqzN#2I)Gv^t9zodK)B#th*cP1rx
za38Lt4?Ne1`^CvWNwVjj{;>O&FjEZ+P%fj`h0v+=2Rs64*)eyN%$PA@ynpgz9LveY
zAuF3npPb)ZUKAVQ6qWP#Z>z6Iku`}zbr*3$HD#o)C|~LA@L)|`;mOWBlHsrQ;jpe;
z&Y{U-*~d2ErD^9G$HKaHm6!Fry)u4GV`B-y+}~L<GCAe#ri)8fB=4Y`%4x~0nD+FV
z6gJjcnd!Z5^xN^|V^4vWxo5OMLN$|?gxEg{+{9sm;iVH4HkfeON%*oW%-iAWvgk9O
z0Vq92?+u*kba*gPh2IFPiuBuN?#%BuL5F^X<c;khUIaF*m$sdijzv><b+>IF7hKlV
zUK}!*m5%{<RrJb!`pKT3g}w(*Di@v3sfv^pupK|Eo5{t@27FGIRxFHd@d_=E)B5S8
z^qT5Dc<=L#+jqG;uvJ;L>HRuyPy{weS)U00N+_+D-}%D+rqTXr(D4OWi}QyD24iZV
zNBDD>#ta4J7BZuDXhU_-Aqf?lkON)h22XddN^@CS_6Ne7$kMO17|E*Q%B!G?bKcQ1
z!N+=aqu9G%XT8r1TU_@iO+6h=EV@z}m|$#5p>@@^6vT~>O<dT$-ZQ^`LLt<_C=L8*
zKV0i!{rzyB*TiDs5tagJ`Z19*Sn*`b2;5H2mX7AmUK1`nYmiXe^gn|^tJ<EO!4Ps7
zL$6YXVKPD!Db=DSOi%4y_0SfIw4o>T(mTSWgbr0-pRYP=OI`isy>((^-1!Qs+R}}<
zJX%~DqMo?;$)uE-xZufqywk+WXtP5Mf&wd=+|cfsseoDK?6C>p86UN)0C)Xx*;8`2
z#~n;OSf4PDd5A8)^#l+lSB9JOozxOB67>Lo!&JdDOah8Tnd^~V$V!Qy5sX|-Ums7=
zP&AvQ<}=FY$wGBIGO&bdQ9QI{;pl;|#t0dgl45rqpNNyu8|={{k*UXHXS-)ut7(9)
zgu8dN7}rkY?*cVirI#1&a5(V5j{}V3oJn)Rt6u6&SD*i6D%55gHiff&9)S7516geQ
znxPGyK5{fd=)vIe3b|ycLANhdDMK}f)>BVwIPZuZo6thFRg;LnRuRucmlQZ8;P|z1
zuk6deDcrXrh?0_|7;+m02}@U?Xo!>uj1gxM=HWB@R*9?>Ngg>4DG@S+8+(r4;LC?Z
zT68KwXAx+10n7q`>-@q!5><X?zONF?H8t{kXU7jeu(hrqOb_@*S|#SqU89N}3?w7n
zpQ_x38J`(SdB5m~;Xtw%_Uk$!vqX!U4>n_SvL^6pNq4(d&J5;8kgr|NyUvp((Xe?B
z2RTHT{@6oMk5{yBw-q!DPG*Z`6=w@rhY!D~8anuXWo^9umBEL(&O{B>q44wz(Pqmr
z82I+{KepT7_jbcYYz6#(*LJh`2)pij{dTi$qFr}=i|uy2iLmXZr(xmlVQU3#_CU7Q
zoif>IpMwWqGw~xq7pr0zZ?JW{5fd<dPBQQCJLG4Zg~#+3@4fkA^$t|Qp0%KKFD=70
zp{aX%l^NudL(e86Q_|Bw@i6pmE|sbaRM_`%ZWlFUOt{MX?Lv3eWV1ArfsCLE7bUqR
z+~BmhcDe1+x@EH4CVGsSzOvha9}>j+BuTXemY{ZPxdwRkX#w;E*BB}R4Nz@I{`;-M
zxb-#gYhqS93{88Y&tP>Oeq1b^br_O)htzfQ8G+p8*`+Ts*XQ1RG5>4TEPCs*1x06n
zb_-bVR>7iB|6*f|lG4qF^LFJ@hs5|-ayYZM$(x*C-xZquw%s8^+ICE_Xp`Y`d)Tfj
z0Gj|kiaLvzAfyvN#b7S$Y0f4}LmwZZ@No&yL*sa8>bA3E39UjxT{$Rav~Dn=aYI=j
z)q#m2cgTE&kw^@AWU%L>E7F=kP3;CRGu_wozFjx0uU%+)s(Aw)*BUFQnwco+yaDdA
zi(`XSSrP4)$*La{RIy#SJfJpjvFtWZY<43PVYah}^ETTX-q;DEmSHAu<f;u$0zf<^
z1OX?hH^QuDapCnK%DH51;dn?bU{IAyl2{%a5LSz8BVct%P2lv^6cenkgr5Swuzw)m
zabkN?Zj0)81x4zqNdZ3;+IIK)z+N8I2)B3&wduFxbA~M7_#0~!NX5BP1@r&-MEAOF
z_v&ST^OtO9q^TWKz8BpS-9847v+u_P-MJkJU~Dj|eg#?>Yra3u;X`jm1fqTd4e_{$
zLtiD)wlV<$;K;JAFW>3vJ-1}3BYm4_gCKuLq#wQF$OW(_dg75tg6m3ysrQ`{k?XFl
z1=-@68=yBv&xGNPj3d+e3SfEnLBG34!DTPGZ1G@u&ztg7X9fYUbnL|ze!j2I$egSf
z;PrMD6JKN^YzM!?NII6<*>+y0QoIcUuS!1g6Q=9Rxs^hEW%J<?F7Nhstw#iLE9+XD
zrFF!WUE(iXN#rgU$e?W=CbA~%Q&I_A3-k7+L%@ZQo~GJx*t06(E_qyCW9cd=#hwHm
zDTcqTdqTO(2!(;`ZJJ!=)&%t%lS<BWc;m&2X#W=LCYEi@KKGM^dLzziBjfL^XEbEN
zUBCDnuKg`AbdwJ<>KSAldd>}atc{jM(IQ--uHx!l{a3(Oe+Kq0@YX*xq&8ncu@BNg
z;i--mSKrx0&#nf%?k=uuKu}+Zmo^VCNSMB8bg?80WYoM2L;`T%2baoiAsZSuVRZut
zeU3t6Z~A6dm4mav;38-lTVY>69VJUNzN*fsY#c5h4*oE-7<jwlUAqj>a{1yvF3?5`
zV>}qVmp*U@Ms^UtylnW=dzT!^BCJ%iulV<_HDrEOoxs&v$=EKkk7FRjwF$@%%jp#T
zKO$8#ew<-X-_<~8LB^(br;E#~sirT@>=StwYfNp*!0(Mbn1N5GGJ7^?BmK-KNVk<1
zagH#8w7Oz&R#)moV61Ja)+dYE#n~JdysZ`-pGZ$_l??TKw=Su=sq^PGiP`BgoXz^~
z?!Vcg(p5e8xmh#7wQ1qk<&{4?Gi<zWO>cj0Ex6ixSvL%br(xM(RE0PK$vS<9Zwz4V
z7?K^Ka4?S+$Nkx|#QyI*0_<N=1z_%m;bZiWWwJTZpxPNS#*?mB(n~i26$wPxM%s?X
z$DdeIfrQ<(o+T|YOHFsh=`3`xMkyw#PhwkvPrF18CDGi;9m9IiUxWne6EVdfR1TCA
zIq-u}bq3WXXF-X5S~;7+^94I&P4%iVbW4L67W?URkYVy{;7~dsg-P_Z=D`{%W|ihg
zm7`<7Z2f*8jyZF%#elGU$c8hb5WzWjyU>2QXja{a0k!+?bd^ACT&2!K5DR7>5n2Y~
zs`OQW%JIT}33FH2u!?hwJK=_)q|<y`M2z@py*!_l*X#GL-#$B=g^A~+Evb4}tNHCh
zO)#)pzz0rt3*ilEpXZ&#xfg(qmZl&{0adSN)pvp+99lc`_u*4|fBzh$%OMl-e9&(z
zKdZvC+`gaa<cL`YKGP5i*bG)pJwMsql>c^My^<#$8j^au__XXZ^n?in(VkBoQ}6Ap
z;lG_&uNW>2<=J8u4aK9R<5+a*!VCVNL<s0`L_;hWj<Z2dj`5IA?Eo1lOBoE79i-pG
zw?lWj;bEH(y;Q+d=zb=Q;a}%QFgH{LD^%R%UEWUX)sYp>TSWHcY1#|0sYol&nGn!S
zh2!@m+gw|2>~aUK7KZA>9u7E^yJ-ap184OKNQ6BQD0=C4h*M&9?Y*;lI-ONL*;j*6
z1$Y8T8Ue@&+hN@KTSAC@844joxSs0*Chw$0&v3Q^d%Isegd}=k2vn8Ji>7*SCcz-%
zqz18Q<R5nM5{My-!b0tbKbaQkz;qJ^vt_!y=LzYNCpk?A#8+o)uh4MBRpu>&u$i+S
zoBtaZ4+aP65#*lv*7Rc*aciqhpXq3SzdleOJAir;*H_#5Q0p!&#3dOAoTfESt<oTD
zfIBTu2^|)2Ppn|Fm2Oi19=3K|;MjmCA9mzemOy@UmL+fI%4I!mLhJGh@*MFC8ocOg
ztjBXGw~tjGHo0h;3bGdYYCE|K-zoB!GhtBLEoQRt%NWvUMnkFKV=f!uYqqKY2+BW!
z5*T@)l9Ttwsbn{wFfYNumOLFKQ)26s<x6%m>?QbD_6M_Hcl6N~f!uEJ2(bQE=(c)1
z!L@<7z1hUZQ-~QL7AHj5PIb3qoGRB$=dOBM{Q7(}#erAa#!DGG9pqqybFW>D;p^H;
zn4B54l3^F}TT6DiBY_Qt*1w$oa<N=FPMhe6?uwgn=BBys{&@SVnmh-_;hYf1O^LGM
zP(OBtMYEc<9zN##cX(ITy%687W>2Q&IVd(v&0)}W4cVP!u<_L{$fVJ}WG6xrrv+z<
zX{o^a9DlI^1^OIvE!%c1(eImn5Ax|82+3gJ>(H&_ae!Gi*6EI_jhYZkN)e<AUQf@A
z^V`ol<%5A2j;uWD^@&@8kXx9vZEvUJ$qNg<T{N#&NJ+MktmOtn*XmOyb&xwOc(vRh
zZq^wXD$<3#5pA#rEvOj^73+2)rR|%)5A0q1E6}4w4NMKl()>HfrUaV>dNe<Ddi)zf
z#abfWD-zXqOom%~+J^aJ(q+}xQ?T7nw$^FuHqyhKNsg)niQ$J;ct*mEgNyT?*W~C`
zXl+CQO?Z9R-%ZvWiS~|yPmu04GS=I*xuc`jUU{uJq!G1)Qr*4<E)SE5MXKj92B0F(
z6Mv@~ay?O2H|;|RM5l7lB4eY4w<BOCU1S;IoLA#{Im3z3B=Y6h@EE69TwTucucg%%
z5=ml6aSQGDX*oOoHdN+nrR4Ux<hY`Dcr+?8Tq<@i;F`9u&wXj1v~PnA)o;$y*k6!G
zf80=AuBh&VS;-fu@q;BHSx}f(fK8Whk>Z<$`>y74Lt*9J!0@HbkMbL<qw{r~K7}gT
zA%9cs+%i>b&TCxibk~PTW@<;@YUndc=X|TW1NE(jVvA=S5ucUk8xPsE85$0Lu@cnD
zp*}B{r>~EXm(^-x;GyZzER_!a|5?=YjR8ZWA#51Km2%_uhEVQrC33*3S$wQEUl!JG
z?ZPZ6f*GKqzd81XV6Lwyh&q^$rCas2xBtmpHf%Jau*2?=D&XD!>+So8z#?^BPB1VV
zvpvu3&W4%0%?gumibk$bZ*sI~rd9K2y6F3bU1xJ1$A9`+FzKr|vx{Z_idpZOi4NK!
zd@v9od?7zg6qztShRqt_S`p7AfrTy1(2dXi@nP6v#s{`=iz`hTll4iYDO?+7{T`)X
zAAu2cJ>Ejk2-%F|!m1~mHvqdbz+SZoy$r8e7__QyUBu5+Qh5LN>8odpW^PLPCgJTg
z;5lzBzL9K#WZa36?ubDgEf;51zkfN{dvuBSqMbqRS`-i2$SiNcQLmc5HPEsDOym_7
zJItYSn5_gsGimYibv}(1Bh6&IW6f?e&kq7t^z@0^#VbdI!e`9S*-wnUqy#GLa<B7V
zo|%;nX9BHd%g~6w_t$oN(<MyJO&UmHHiJjYO$4Txz#3DpYVheZdRjoKa##RB`B;D(
znLSA;zD`DX{8&NC<cpJ2!IdfUx}wH*0`6FqdZSTc;UJ&eE=Cl;wYuwIE@b0v6{aMK
z2AIix6t4m5k$E-#Y8p4DY}+{)sEGlYp2S^=gvMm3zAf`CY7vh0fDf(H)h42i_1Dq-
zaHY?VSNUu{?`+gJu)=QYDOwafuYo_o)^u733N4L<>^}~^z>eeAuab%2$}bFy`6>$7
zpxr<^w4nWDChH%@Zeel}ptN0%H8ue^J^cfBZ3tXNy~%w_?MTG^e=AHd)#qN(W1!g%
zqpS4mb@+N683p<o8k$1beN{!$h5ID$!4P0O(qNlUftTb?H9p*RwjzNK;59^hHbs8G
z@beWP9~diSgINFmz@q1QY{3c0cH|?@P&7<MQvzfQO*0!$`#VAh6p9tu`wdv87`>`5
z*TRl8RXL09OZ}^;olpbyu|+J-$ObCCz*hXZ?|1YN(VyA5Ln#|PX8U5y$jP#7Gj=7?
zA2KmHt@crO*{q&=%pPlhX$s`Jx;_U-^oZG!qaEq<dii@ju<uv=&<VQ0wmr^yfj41!
z<ws!UBz_Rdjs|Py^|`gj+{kV^1!uJ~_Qt2QfzI@|i3)#_x*(|HWw7Tq-9Uj_t6l5u
z0qI(A{QSnUcMXXB#^Bh+i1Ye{3b!;t`1KwKa&J67os#oqVw1FmYn1wa0q_Mts`f2{
z7v~m*p#1qxX>LDTW~=LYP!3Qn(mV#DFdD%TO7q|8XaK>Wc;(G#G>TsBBj$Bo$Ori>
z0(S3gZdrg!Z;vRp?(RreY{~V@2YH1vU$FSG*X;f2#iZ)@%gJO|EXgm|Bf%H?yFsG3
zx~4bZ+~RL-GE;}n_|WC{kyxJ|^4u16Z`kU^bdcYP9fT~mKin!<K}*4Zmp7~QgkFHE
z<}HkrV$=H$2e*0Il9!mU%i~AN=<d>9k=QQd0MUckIz>u=9`q=~0FQYvXv>!zD*VI{
z&)<K`Cx<f%h|dlqX9dJExq3^oOlzPpc1ALQEQk;1g^4FC)OW=J$!au&Fe0QO+|$l^
zx31Fj#@>X?1)!zfb!G#n_GYKLadl#L!^6+aPDgtF1!gZoZ>F=;BmzyhSrY_1Z}tP2
z82zGicRe0#b;LyYJHWBrG;5>AY)F_sL!H*m+9-Y^6^i|ITFwpocyS3)4yz3%Hxz^F
z<*RzRs^-<SUyVTCwt2!fm4>9FKC$tbv@3`KR*CSaFb3+E3}((27t0DlGNNTo@?~+c
z>gjed=S_84FE0FSdE@|10kSO5Dm&N^TA}Zt4EcPN%Z~5OP|#fmN~40T2QD6ei}|an
zysTocTlc@r>!2T`ZeeC-pL{q_&3|qbV<5SXStQ~nWL3Wu58nZ-4e`MG|B9&K$*>s>
zta){a=ksh<Pd;k%QRdP*k7N$%_-~XroL|BBLdFebzGnhBsqr|BTu&lH3sV3`0Ik5l
zMk0r(-Qr~$vd<#iO7z|r8UEkwX3@66%viejP~SdeMal~n=SJ3qXtA-n<9(a9qopS(
z2p0kyE5`YMJt~gepO1^u2qQ;YU>l}hl4fIT-3;Gzm3I!g>sC3|sRRTI%3<wU_MXkO
zMmi~OqVZAC$H%4NU?YVR--x&vL8TSV@o`+@R@#f4E`PgJj@{#M#fX`Fz@!5gp3`8v
zpF6zOquWrqVEHzXmOlyy9r85V$ZMX>BGAy=1j@7#T%7m1fOi<8NJ2LlmGpdeaZ=9@
z3Ar*lDV0HV(!+{kB#mwCBw{)gr?_hbLf-?0nD9R_X*$`)ByV0W#3pca@y+%UWqK0P
zJh(Q|++)ll!Q~O+8<~ym22G;~qfVQc`wb|#MSU5eYzcBRRS-<f0%(wK7z{pto<z&w
zcvXq7yJ<+c4dcS9NdGdt;1?EFN(kRKER?Mn>gGeEelih!?AO>ID;)&hA4KrH#Ayp7
z<u#RRn9hba;ujKZ0};hnxfq>V+&X)uj-%E&h02%=@56_ZtSowD7{)%hfK4$ZAJHAR
zcqsp5J>VYf>@aU`$7K3dB!>`bs+SQL#F#N-9(hf>k4$P`KaNo5)?iZSvaqU;AT`*g
z$ULoj>=|prQpCv++8-_I(eiZhX(RAaaJES9<|xOrAx<D_kBGR~yXZw&#l%wRt+4k9
z18O6gIxW*gW}D&>{Kmx}B5!`H2m;cOA7u0-Wfw=Lreze?Q-q+-83A(VcVW}&66Uxc
zL2Vh*dzc1Kxe?(|+7vn`MzMzzO+j>GQsqM*lT-#H9i5fu{XS+?j14rRE4Wo##<7<H
zE_~|C$x^5XA9`)D+X9+d!?x=Ba0nw-I|EfsdmEd3js5!W<CJh~9FUGXZ%XJDxZ}c(
zM&=i3Y3b}!#>J$)Chfp+ahC#B6Yt1Zx7P1|K!_ew&|<Odnt^4uY=^emYuk`5eA?35
z$hWo!lXuw?N;(YI?)E-ge{a0N%TB$)?;r92na(~!T>IK^6LGeiA-*;OS!XLQ?Zv50
zyQz3&o+u29sC_Us$O7P8WSnprkjMp}@t}nraUMKBE^T~u+)lcYt)fj`r{!TO2|+{u
z6^;)tw?tw^B)lYIN?;$oUQS9{PMZ3BwP?gKcSxlrM%nMr%QJZLy9@u0@Y1pTbG<t4
z_ZIWsVBKk{gVMEeJ$dN$^hNAZ;J(~fh^W^~b#rEsC$kGPUm8QI;)1Zm7@ig%m%dVT
z+TScd?BTh8fBM^u#kwxk>e^VX|FwZuH+%r$7~4_TVJD4`c$?seX?#+@ke%Zurr?_p
z7FLTKD|`1HDslFLf$lS#AtjcW>gAKBDX;t9f@omGG5;ednI7Z`J}-nV^taYvA?w^%
z{Q&Rf-hdbW`8Rrn<%3BgvThQ&Hel5btV@ttziernF0Sa_?k9dKPpy8epo(?5kGd~V
zJkrr~`-!=$_ZKK_X+GSr9jw)a&syY?8F>Xr-gUdQ#uRSg_&W}!M>0zqwJL0MJgR@T
z|9;qf0kL^!lTvy=R<lQ8|70*@sEg3Hn=?h?DWBF*3r{K`BMFd~v=+L`P0GG-Yl9JE
z?lyUs<0{RE#RX0U+?$tXdu|JV>{dmBAHPG>SDL_zJf@=LTwN!Sjz71$JcZY8{?%Ti
z#Gyh|L$x1S>INVC2W0|GbTKMiZz!<%0#ixg$kx<nE#q$W8*zYC3tl@D=a9`B(vy`u
z1jKTAHb=zhIE)OS>S@NaxlzJ8yPH!jf+f`s{(m>Op?(!vc)PAmNF=>x*jrx*6SiQ{
zH%P%a8@91GVT<ZC<$O7_x6=L0t{-MLxqR?W9xLQicT<(t*32oey?K^=I>Tc7mO}MK
z<~sEm#m6r3Fj)e6|B~VcmVGI})_h>HzI;BxTJE(RhlC|hXN$>4XTcXeOu4DCcPT8A
z&r&$)4PT{F?8?`U_U9djcsKlbM!W0Zf<oooOHd5%OJ0K<F4qq<x6J8#5Pn$m9HhO4
zWZyP&$_8K}@#WsVYZ%#YHtlIDklag&s`t)5#5g5J`l9l1XJ<#5>RW@wO3c^tx*q=9
z+f)Z42Y-kPBl?0^N>Ur0VN?)c2Y;^0kKdP=Z<Fn+<;9V*v0Q2IHt)M_Jm|N2&dpNk
zdUiwy&N=w+X`gTT)(a3%9K=D?7438T?d$Ds+2`N?-kvX-vvPL3-Th^o`@tXoCO5a6
zi4k&W|CX0kQ=S+~L3_{Sfg4M$CPSBR<M+#(*hbqlmN(a{cPNR%W;cKJqht@)T7YKK
zzw9U(WD&kISM@g3Xi{zZRg9?#57o@IflPi@7DykLD@+<z%|@r?@+S!S(I4dBF-a9+
zDz6rc*{VK&V{xs;g#a7?M*)wBk@ixIesA#cI{mh_McGQ%+D7C1I3dqPvB!?lVr@^0
zYO!ujt!v2>OEq!Eg3)LM9fZ6EiM<^>BEg%HAIEO{oe<)j*xn?Ihu9_t4o)w*@|mjh
zsszVBOW4B#EiT-We04g9TcqfL`+z&LmK7pTu(NvpyrwL}rs@wDXGc{tdh`0-%l9vT
zdU5#jhi_m0@bdkKU1fI--CSS9Wc;_dONg=4MlnYX-Ky|GyPpmCGu2`gT4Y(j1e-=x
zpxA{)$^>|sn&~sF=iC+K!c6t2aJd3FyW2Q3z_27J-IQiUA{wu_j_aVF<2(*ca80Gx
zopm&k^mUzTTg)H+8VXUjUpLPd^GUhtADMLn4b&S`$ZaKMNzR$YDcf!B7%%t{(jTuD
zVBm=HzDFfwD3$%LQ8hwciWQ#LSImJ+GKTbVc?u(=)T<w=PoM-?_Lr+BF$!HA!=pH<
zFRk4zy#qHq%lJF|f|jA?3%&BbKJNGa_q;bK9u?aU6q8M;i2YMF#d_1!ki)eXS)v>;
zOLB5u&8+*K8p!VdVkq9BAu1&Pi~671`$V|p5zc@mm&cvM8Zd*G-8+e`kLe2IZdv0T
zVH<<bu21Gu;y>K}Dk0-2?RjL0a$YveYC4X<zrj)qml@5KpT?Te(mtQn0T%C*;R_dB
zjcmGt<i#-LF-?uhy96N~h(%q0AZuEa0PG`y@luxBbqtpNfgVf;mKe}I!m^a);vjUV
zRA=O`XL8|=7Srnj)OZWv`u4(Lb%oS2uK)jU@9Ur2$Z<q}_g|sZZk?o9R^-gg-kcmK
zm1L6L)Mb*qB(pntsgzH#+jeJUN!OA;bXouJj{x`qkYIPq&dl9=^>(W!R+9ut5F`N*
zA4=d+7sob85YC|KXkG9A=$;K+P2q0Q!hKS>UnT%(R_!2!y6G5RvPVV|oa_~y^u=q^
z7o{pp7AnGqc9r3qQnlqvBt5-|$4KBm{Ij3-hUhc51<swA`LoaPcKrkfNiU>!bdFU-
zmTrLGUQpsg;$gS_ry&Ws?uC^V;JK@OM}uDbJ$QL5W7!TAO`SXmh(kYkDnocrVw~b_
zCKi+*)2BYuMYQO5b8fN`Fi29=H?;*(zFSNVDY%#T{4?g_e1gv~v710T?NlS+XvjY@
zL~*#$erwrz6haEHOw(?+ac3lOsYyTYDcDKL_ij9#ZEX@5hcar~w`~>NssIFjp`k@@
zjKXL)>dP#*KCQ@md>f57^Idk7M8k}$Mq{L6Wt4vV1@G<=-}z?AUb3jSKC&S6&Zl!3
zhmNqB025ayXy*+DdC!g$vAsvJlpDS9<AbSym}hPuTKyBBObXW%Kx?pU>mL&Hnr!^O
z+G~XI+@@iEWcS(5HJ@Eu@0z5J6J|8%^w<&kHT%To8?cj89eZ<QJY8?t77?emz1DFz
zO4gC>k=83oZL$;+#oxSiIfdMX#v-mHeB`BkU_8zFPaYL!1V)N1K2V$t%VJ|Rl8D6y
zR_T=SJV8MMhtApvtf&6%R*?WuJ86*`9Cp`6U?A@7)P)(ThoV@+xFV~TmGhey%UAQ&
z^Ku2Il{CjI8<R`Ej_H#I5rPmO&DpY<M#|+E5dOB&SH!nBJiZi6{K`fv@s=WSL_7lR
zuyYybXRPtG<Dk(*!@}ONuy-u%DCE2XQ6rRJ1)&J!4LWNIV7M6)zxr%f0Ml{U_yf{c
zU@k#2W2zkW1rLb8yj}V1pq>ysaWah9LOyff@(P0W_pDh?<zq&hL(#6$*kLpwWNdor
zLvCx(dDc?V^5H(8`c4xVF#<owjVWCRE^sII7uAt6nWqXY1Iew|ysO-5P<W%Yw`6x4
zCVZ(ooiYdCm9>^Y*jEYcs}yz{f(|DseNawPd>s0<N6oIpJ^<>h*#-KZ70c7vvBZ^9
zPXlTDmLYVQT-9_EA9{T519#s%o*lhoYe|!8xD?pn;P~ewTeGXof=+J-*4`fc62#7a
zCr%-x!P1-P2w5juhbP{>hg884iA)^n+kF<Fe&J3SbogC>E?*D_J~(!%iiEFjce)j!
zn!Z~_WVSd!@Az;br56#i6@5u3toiG$H4!C*zvKp_Z^J^@2e#)EV>0=b8+Wu%_-NLy
zP6HXXKHb&ZHdfJI<*2b{yQTZo@3<_ay6u|`3_*F>#x4?Hn7&(8b@w!#DcchGTPGj;
zmDa##PF=-3Z3?MdN#%Kk=5maaF_#=3(8SiT)3qMXn!)k>A`g<MoXchdBOZ#QUxUuj
zTAZq?!<(y}ELtWBIYO{8%ky6`MU6j~4PP-yc(%GWJ6;H=Y<x0a*Oig^a(tShkoDM!
ziZAgozy-r`m~ckv{E6h_r$O|D;9K?g6#G6JkZBBt2))Im!Xwfz!73>Bmr=J#s2&6u
zL;A{6t`f}n1Hxus*NXzJB(SjS<vTWX7d8E<omrS8Bs8G`NNRB{tkU1cg|UA+oxAeM
zJ&Dy6`4B}*L0-PcM;%|mhkNh2KR~C&+Fx(U<Z7<O8%mMv{hmDQ;suz^U6u|~k@vL4
z3r}XDEJUywW&G}K^fA`v<LHx`$%-7d=^1Cp-ZiKo+r%lEZTm;|k0i`W?3sY!eYhi8
z^m}+VKeDk(ESkFc1YR^~hfaDhGCXLvn+>Fl4X|PpRIHSR!*E~&iTk0@6WIfXrkbt@
zYaeCfPkU`c;JKOd7#5Ah7BpSWweXFtt{NeoQ>T{F@f)nV&$R42vJ1Z5>6+swoaHuU
z0e@-37&zI|oPh^{7rUsQ);wV(@gZrT`#93PjSanY?zb8$ny{n~=C97D)7RB6;4Rog
zaQ*C9E^>3{q$$YDQZ&R<$St^4G#9H$G!OM5Si$UzD2#^p%CJU-*%%2itQe4L+Q1ys
z$4n)g@m7xl60jC^kqSgYGTDdXuMj-`<H~9LfH*pU)<TOLAYIl+nkkiAZP4@E6>rK3
z3u<4MC4@s^!7KhBAsim8Ao!{20SZD;0#`HZx5SR|#*^1SOEjP2&ru^@SMRv726k5m
z2&{ktOI*$_=D&G{4|HeGU1Uhc`+;-2jlMXkP9zIh6-&cXQ7Ag9{}HNxLjJAi+a%%c
zTsyc-yxVkFq28Ejs{t?MGwJ}DKk~r0ET`gwzl3!@j7)IZFD9XH=BYo2*T2<T@z*|>
zm<6~%JIzmVkua63aXdd*s$S=z{BUx3S{yx|m1h&Tzp`~X6RM5s&yzM_{_Mnne3fq(
zy#UCXtPAS`6j%fLY={ESX4S?qs4ez;ye>)r+1cbPcrA3U!n&!#RbAuTL`i50vw&)n
zUz;j?sEY&Pd6s2Ut#C^<R`u87G8dbnoS98FnSx1`;(`$oqfUjJ?6Um!fY9pZ#F|ep
ziU3J-i^a}DO1!9V$$3&~hDE2sJe%wGY1p*+TU&4#=B9Dl3jBT&e)szsM_$*qn1PSP
z5$Xj*02_b$KvD8Bb>Qc#0sagOsbNAkI;cb%x{(rMVJvD?1#Qi3{?X&AC=4})0rYE_
z_jm%P0>@T{mGe{tnbl&tQuR+^%3?Jr=+Hp90s7)b1>-|<sic-Q{z_j1AE4;;nH5ve
zxPVrp6&uoJjk<2^PA|2Wahz%idesVOklfot4sB|{qaX`v#pvpF--IsG8hc1}B*P8g
zW$gj1Zr(IZv7d6}SS6ySC;rkE3Nw|iESQ|~wq_NA4MI#p(A=*^E#0>p<A$_vEpOt*
zt}~aheY+i)=8_bU)wG{9^|9$v&$PMJi*RwFXsafMnT?QmIA7r9)Jl^qAxMXW*eFWU
zTg{r&5d1=;c$VzDeyhGMskiBDs&~_-7i)dB`2>Ub**HH>aO6PYjnnp2M_eCK-8PDL
zgx`OE^w#xUcDtQRLhv`=yG&Bw^x~pc`skC?(i`@0ya8;cBiQg7Yd3>$b(v9bH@lLK
zZ_$=bwedbXAbtx`(92Sn7xuaAA1@0W`-0y_0XK;+BP1n`UREw;q)a6t9f@@+R-GDk
zfaX1%_%qTJ+c-3e7c)GcQr{=evJ>Qw<tIJG8V^ZDF&z^QUQSK)Pc3>q>xpAMs6fY5
zP1fepm5}vn<b~BdI(SWjfW(`O58_aIm)#f;ey{8O_6$bN4X+&8`c2O$nAW@X4U3JM
zuGx44Y}iL=*{Y+ki8k!VH>~UCx?ig&VZWL+CGn?5g-P_KPWi@ZD9t{X6pFZ*W?Ror
z0555@{%@ydXgGl3NLy59d8$>(G1G7oQl<fZ()E=9c|sF>NAvAR?$CFyGVc^n1!3^F
zpbR^H-6lOJi+##;-5=w4epb~^G)j{lXo~7M=3sP+k=jJLEca6Nij&>lx{~ri=j4>;
zLZ$0qG>V)Wpa{f9jk!|TL1^Ng6)>I=bTDf9T2(5u$#D6TLF`V7i(3c8QA04UwEC{e
zatQ{+U#|z9khGN9C@X<Ats}l-J{_s%$j~(ET7~;rTB*_uv!<&NL}A4mhM=v6SJL|y
zLuVPD)Lo}_*Gk=njqf-8ZYr8zjpK<AuhLrUwAMPUWxWuBVWN`w%|_5+Hiu~?dJ7nP
z9BU(@=Kxk`ozpE`*S}Kf_fCtKC`yXx5U=Za6?Od3-dVI?7=RqFXD>Idw1)S`YL+IQ
zkIVV7tAy+T3LP_QRbmqoa;VZkF>QkDRw6zVQ~{z!K7}>w`A`<6&&Nl0%30Be?5<f3
zaCcYp?-5)HQsxB)@$3D(C%_J`b_cSf;d-}KyZcGI`>oo2m$dsX)<3kLprVXWjo!6L
z#gT=5y-EEaZS^i@WVZVXLY1!Jj}Icy0AeL=a%r8RbQcS6R&UlG))CfZZT?=Hzt`W%
zt=?cHkEi5);DgM-wi6GDjcn=hT;4@kzbetCpchlT6PuQcp+NKX{nY+kRQir8Wg%rF
z7`xFqcf0&3x7&<zr_Cs{kYwbYtM9Pm7E!0$t;2mk(+wR7ZshzBb?J=No7@a;u!8r!
zo(ON-I+QkfB8lZR^slTT^tNuGStP2f25O+?z2AuL{OJ7d%nx(B%`msy40ER)(GrdC
zwhz=4adPJHiZ($M$tkM8j_R+!%Lmpb$!X#4>c%jWLHtTohAtvV8V1En$}UQP4JKn_
z9}GHWWPGcN%GR80HT@f2Gs=BqF4ecI>Eolx!iIY$E4|g!a_ugG{H2l^Yq3J}7~v1Y
zg&vypW9b>Q7somcnT8+$yc=rx+DoBjfVg<n;B{&PQY$h0Zx#YafN)Vr_SN7d>EL{R
zueb#>8Wr{HB19zWVXp~Bt#GOg=A*#i6$tlZ`Dwt=ebs~2><?g3*I-eu#b^Ns;&f|M
zi~U?!mpp15?Utt2E}o=16~`TAL%%=-{@UK^W75IX1G43?Dj1s<_BU+wlA)?DiD<AA
z-%oUl2H_3w3ZfCyDk?3%vUpJ;DRtuu`HjLy@%UzDBEPCzo)`vIz;I{KQ`eeP9f3@$
zuU{V@Q{dDv&j)I3n@1EFB>ub;8uqP2+(@0y2fPH4=542Y>dS&iM5v#$Ks&F!VpVZ`
zv1aGQyp%JRkX;To6)d^YbwnPu+2Mi#cHAnTA5K{9?>1W~5c4k=7O3I*yn4B+dVb{t
zo%S(Um8IE4B;Zg#puH+C(>5c8v<<}B3EB79IeT_)q@jN=)<JRA?u@;2a4*r@<(r(?
zww;{V)`@M~cJhsF+qP}nw(S$!$(-N&&eXkC_fE}pRaf_}>RtU*|IwfB+Ur@%%hobg
z_>3h|?l&V3D<*AQUsi7iKi^{}I6(~Db%FxF{f;P?$tNAiYVw|H+pNhpO={8pB^gSS
zb3d^)T&PebyohVINe$d9*<TU;$<~i*d7F@*1@a1Mv0r-mt+BaD#mR59&2$>&z)TA*
zAi@hf*0ERR65(b~@>}hnrXD><@~$73DeDqzKsgS}mXaCDI8eyQw4vPoWN2X%gU6p$
zXHRtR9|-i9%yHO}t5pN119eb#uny(^u6Aya<{uW0&X4Gp=wf!$b@gIf>RfV8tSwTN
z6cXB-T{Q%c2b1-BXx#(n99bD2aIRDiT_s*ha5IjtMK&won>KPas#5M3$9cR9b+~=?
zY;;i8Nhc=btM4aLiL*!EFz>E5z}>u3lQHJp*r7^dbgiI{I2HF!b)bD}nsnvboj#3|
zjyx>W9DU4hg7bc{8Pgu%IDi(>?CC$;07~6rrQk_<ZxEe|K7O63^j(=DAR95{&_=c}
za?6T*4`k7smt}8tt3Qo-b8i=iFOQ@taKF<b_vDGtdf<xh)<HFR1|)w6bN6$E<75my
zMy0*hS&JivAh>a*<LAif=<>+m9a>RaLBxh61?F`5bI<I!&b=9aNA7?0LXxzq10Us=
zs#q>_%K$T2J*i-U9_36nB{Dez&uE267)1yQi&m9}H5|)+rTUK7Y~Uf?ky$@edcmgl
zinl=ba}@ezYv#?23H%e2iQv0pH7lBo2*hJ859a<E^tWWY@!Gc6G>uhPYu0_89}G5K
z4chFI%zRF=kwK3Vvr=tzd$$g-L6i54xWvcHqtSP8OgOn&ybxY|4PJSJsb<cd&^?XR
zIHL#T_fk%Xh08V|e7_zmW$v%${G5wxftgI#T)WubFlOvp2fdN>X)!HFLBu{~f60<F
zG0R7=YFnBj7mcHQP4J0P)~{?+5fm(Z@7{q59#(q?hAmGh09|DAtJn3|y&F1IrhUk`
zqO+Fy29606^?Z?l0^7O;&m9J>@(UdqMy?Ja*199wSGA=Q4(Muu8THzkxc)-orKRXK
zx9I8@y@S9katnNnGLVeno`BMK@2;+hihPQcl*ZD~P(jmYczFX$BUB*dvFfh7KBd)e
zqVQ>0e+Fnj1=Xj<!&K8Qp)uP+vcX-LFa5alF@9A~43?fQ2b-Jzh3ERjkh!#RZa0H<
zWyo?Wq#e0o(!>61;nobLii<O~9jGrJH|JK29YiT;;2T>W%A1Cj%6Dj9^80%3-SiMm
z?aI67yoy&w6l7{9DMfKRd+x-ZOAmcxC5Bb+6D_tE-kb<jrQ5^}k6cN`uKRuG7IOIa
zO~DH8HE;l$o6<M`>ZmSIH}5jLRj4m)ZIcJVf`?T&T)^|Juj11;`-Aab457^@*4(O5
zzA;r&3!e+_k8dWY&)EgJ=o@?esNU8Bv>tQc%My_3UKy8q+<0ecOqqUmvbI*not@=G
zF6b20%42#2-y?iu`K<DjAOKyGSc-RJ=Fhl!dwDdse#7pV2flWJs0RR4uuc)-mfN)r
zMVSUO;P0MRr?>wnMuA;%_Xn*_?_WX3`xwZlQY+*rQtRuXjR7uQ&<-qX3t5aP?fZ@S
z;orc%tbhcItfFK}Ef93X(BJ9fX8I+x8TihC$m|=gSgyjEw#2;07QrHrsKxOFi2C&E
zAeRCdeHbL6;uIz-g`Q!~0WU$(^gcTi^n6OJ0uPbKD9O){ap!M$CT|{{ELnMuFhnZ#
zj1^>^?qBn7mjTirN*ZX7zxrGlDbGF%qOSYF)^vy8!TEQhmMv@ne-{->9A(3m`JFPQ
z&q7et7LdXR5m>m!#Ma^hCasUiF`f{n=|36Uq&MV-W;0O7XV~m4h**L!Z*A)u0{7RA
z=P$gcO%SGE13D@5h+CA|{L2PpfPuauYEDuyn=dp}rYm({&W+hJ2dP&s%a|PsFQruh
zL5M1CCAC(x?;0DGISGqjvmWoUR08E0Y)i9nJ!W_tib5h6#4WoLzrYCAbW>-e<`}Pn
zO#m@%Pz<hz{7(YmxCJ-7qc0~My4RhiVXT%lACn?O#nyYI4aKk3tPC_M>n?WlDpy#_
zqCR<Ct9jf#!%3E%OR!(&nuKw>`(4xiW4RsLQs~aOSecgZ>T45eY|~P@%&lcIc+^d+
z&!~H&GAm?!yhE@F9K%$QoxE?$m*9~A=I0Xc{k-7$XS4#9@DK2$Dn<~RQN@{V=3c0V
z72e<zZmaZG;`?+J8r|mT{X&|i7#-iSdWfv=XvktRSNhd5%s*B73vXG|v#G<MJUI3_
zi>=Q6-HBKb2<L}lHz0jUCkv6pcR{!d#bKsj;{<SjX(_2+LOtFsB}sS0&X+%^UmoT;
zkFTHbI$7Pj22hUQy58M=lplXZh7o<HGvvmBP~1$!Rbc5xvEtkfq&!=KXg9!t4khwK
zE`@1R-f60BBH-~~el`x-7;2(gR8b(nr+~$ps$b;bVOn5kF~EoV;gwOUzX<*5kCa%}
zke-#BNPjSX`RL^_T-Pw)BycM^<ej}6ARjUG=}k+nj9Fa9#dJ`P1&pMy$E(JL4Yc_I
zH{!i8!JmPUX#)?~I#Qn+%=-2pmLIPT6Iz)uC>ws5ju@nU7(VTC0%`Z>M!6a7Q^R}s
zXb2N{YTje<#9m?s8H%pv3^*@ajSZANR6t@f!g{!O`2-GiU$)Cvg94kbEKjM24iXV-
zg(EU@)0Eh^$HY@ao<ZG!ZpE@M4sl(^JwuHmaFy|zFc!KilqoUNrU_mR94K6l!&KS{
zE4N9WynE_m_XIG)16hbexY?>~33EO~PRBuEk;+@R3Hg{<Vvb1qt4LwpTjAlcrTjQf
z>1*OgtZ>Q)92SmbufI8C_jE4KW~HDw{YcA3*iuR>`Z`x8&L-}d`~47nubH_7DixML
zmmVG-w!!8ckJdNLSRQudo-P*JrWr3S^{mCVH#;8yb6kIt{cc|8uJ+BSI~<2iO5Y5d
z$tsS;`f2{mI1gM`E9!=12A!8P_9ZSsjly9YC1w_r7_~%`FJR8uQHYxBw2$THudAIR
z7wEfFH9d?`L!_lz(X9i;H~fU(8S%(#woSmUELF!4b-#Ot1jHQ9g!!7LJA&T5bUM&-
zo33p1o)5zSoORc4c4I~Fo9M`;aD`Vt6}tHJzG|JE?8~gMbzzNe8y^~HMUuTnyag>T
z%0yk|QP^y@-pZh*wkvDsL|j(ee<=^1LQ6p8Qj@LJwLA*3Q$-n4BNX%ru>Dewz>D>A
zYs)czg`#%#WtqU6_iA0+i#{a1iExbR1-pT$x8C164^U85<A*z70&FS9Us}1VCr2)8
zBaZ=llcDEBa2iad1p1DZr5$mw;6W1T<V~G5c3Q55!OP>4?2Va~Q6|6;i=whB8m!nR
zfWFsXwaOft$XwLaE>GXmoT&RBj3;?f?+R{7)^~T1t(i!}gT%?jsfLBK_sQ>cev}3V
zviEj*1MKZza;9Q#T`u<eF1MCH_xiSPuG1P1khq#KM{Y|G=17Ln@!sSDt53-w7mRRx
zT`o)<6#En`tz_>`^)I&H%rb3f(P?J+Nv7dij$B{nMP?EjHqarN*piC`7a|W`%}v(U
zTi=cZvU0RT^y|dLhLOO}bUom><ot}=yp?U@stcwzB0X$UTjGf$Gu{!YLpZ}5;6qLu
zk1gE0B0!s&R7~Zl43hm*&WhZBjT~2wQ(r3LpjV|OI6y_d_#u1wP|2_N*5DJ&GvLgV
zGD+d3E;Aj~kb;e07~v|9k(*Fs@myd2uBEe1$L2m|hQ?lI0D65Q#tK?|I^fvj=ogKp
zsTom5RE*QbbiX|d9yXedIk0v#p&T-F&Aqh}*yDfV^uO~?(FK?A58?~}#@7OsU*E^g
zou#%E<%9rh@eWaVsgPAaXVg|Y7!3VLl1TL7jl&X2CaY^_u79TpwzLiqN-eoKH&)4-
zs(j*hnnCB&!1y9wW7ATDN(gONDCb%u-uy*j44J-yT14@j&yR|NIxJS0@avLe`Uh+`
zjnMeYRyBm=y;BA|eY!W;+zkdfIfIsFjw(_R#}V@>#V>Dl{q=B;rwbZXKfW3b752jV
z5T`6CUDJrvLisTH`Cpo$W`@!TuFqPcA>hi%iSFtFJ6LnvB;W~R!x55b3jwCJ5b$vY
zQo&-Nu`&{jU&3)p-2hZ<OP|GD-=>#~$inBct_uZGTY_R+&v6Y(pE_#*jjreI{3bC6
z&yLDJb}#16LqvMAx-8d(vR%+O1Wr|<)NI8;s-u+N;x<}a%S!AhYL(~e3sqW}!gXOa
zs{9rX(1Spbcp0or1h(j<>1P|dRPyJjqxb`~q{#Nxp7jNLw|z8868Uur%LQD~JRkB<
zRv8@GgCbfU&jV|~AJb`HEpWG}lrLR_%4P6s<3lho!h-#<d)7z%deZBa&X=3ISop%=
zVB!Lq0D^t-&+nR7{yFWaKn2oyag~K0mFzo)8M|qXrw2O5Wp^i#qv`7_N!Yu^2IFxM
zSJ6#0{X|%J^B_y{8u$hY1LS6%DiI4^xJ#TU+;g-x#hm*SxQp~-K?b>Q-w}6Eu`M%a
zCDF&mZd3yosCuZZWC=iItNbP5mpPHdchMPJqB+=Gmom;ev+G_KA1YN&HrroPin4tu
zq>7#nLySLpynCYZrYEYHEv;1D(O5OKTF-urHa~@T+=y?3p$nGJ!LLOwGPjY3Y2`wC
zXHUlgHa9)Qm|x>(gQBiL0_Qy9W7W1FZ_jq6F=J0b#1n>ymgs^@u?id*n4hYh>bR&0
zA|Qv)_d8SOgfBph<Na<ffwYr}ty8IeTeX1{a&sqnFs#m8Q+;-66wnR!sYawe(o2yE
z*nF|M!xie>4AZ(@FC^!TWVs)Nq)!sGWGHBizf%LlU-R9$THh@h3)K#|$azOA5cV2c
zSk2Yz;&OXAxm(1j{kEL=_szC_<IX7T(|6&Z|N3eOyjs<3O|;Y^*pD0nR!=u$M*X|L
ze!a7chjEopvl>r!HWs>L;5<h*WQLnBG<4DXFAJ!_{VKe9_k8GvYb(hGp_)FZCBOFT
zrUN9t&@W4UA=E<paoCKGFLU9mP1zb@En)4874=SnXl~)e%Y9N;`<=RJPXoAtW^lFf
z1$K!Ah0Mv@<u?s_aI`uf1T_dsyl*&$SPH@bI4+=lvo@K#*l+{XX(Dl(z_q{Nw*ql_
z?d@2lBK#^T<5+27jU-N^NLWi$PFC2mHB3CIanGNic%Js^NlF8IyrCC8kz8Ip*_kkS
z63nRJQ=sYyAPd7bYi$7FAsxMcT?@5eK-l7QHy#e73kRL&^e3s^+eq9*Yu)G}1PsSL
z+s*cVduO$7_D`1`WV{es!_Ix<Io6?D);>=KrV^AzbFO4=$3UGC>UL?dMF2otnx5Oc
zzl0}lyrl=5Ud^`yS1x)t{*_{<ME<ZJ?c23EDM$uckmPC>0wtEeQ+>cT<EGlG0$T)I
zr?3n-Gccpz<~V|=cQn>D{{AovAUK^*{c1e9a+(Yy2ESuIXlc0Qa__p0F1fsvbfE77
z5qV;X1*PfR+_W9m)4LC2$@gkCK?qI)6cUaI=c!T7Cg;rYd|Ch9bYe5mJh@CwM8;M3
zQHe}Uc|Lz7<_~}IMviNU?UCQ;I4}mD0DAJX(Y14=EWyf{*A#02&Wn^h*H|NIiWKR;
z<yUKfIAP&l&$hBXu4@9f${o4=HqRWF|Bv_jj;&(Gk|MuQ+Ku(*-Z342s}U$M28?P7
z;_X?$!hAs_#W@g<5UaTRl8^78Mjc2sI@T}HT}r}FrJyYP4q*ewUx7EMFzkOKd7O__
zQ2j`hkYm4{RHS{BqW?Mt8HbMz%ItQxJjS0DS+hYW+><I?K>IU$rfWJ9LouZ&R5OIH
z=1H>Mx(hXwUxn|6tvj_Y<43QrKC-|+j;q_mwSSf;9W-00*ep(ENCq#sAlfQTadk0o
z`CMgrup*2X+Sw3VHVGaP+p%&gcH{LAm@{cTt7{P{?l1JCO?xyr1gD0GG3gT-Gi<v&
zkbR5phRoZuAS;%|hO%IPUm%!{GHP7emac+fP$?=wo{H841LZ_DcZeC`v~j%b2VawI
zWb8%ao?$GpcVzM;<^L7(B`$<6N$ofo31vI=W#sOdx7zYu+=K^`u?DZIK@bP-Ne184
zXSAy58bJ1%Z$H#?Z?T)Jr41?Z`Zkt;rr|0W&Efj%1OwjW-u1pK!fJLywjQP2J9;6#
zHHl1Mr9UW$d(wz&=bPUw)DpgN-1Z6MUe5@6Hd|h|OIar%&4xKlMCqHb8n<DJGQGX<
z^wh_%)s~B$D~NI({l4xc4!<J=bz^{^!>KPyiyKR0f5mp2^L5=n%G(n)g?!nOi2S)c
z8<)#EdW4`53ov~A{A16uyOdFEw3rWphBnda&NO&b8ru6WyjgBFG7~QiR3c3I2;iwc
zj_t3(N-av7w{0jmu38gaWVOmP5~UXJcsC_?txM5_@=g_tu4}~Y6WH{L<#HPbDoxAN
zl>XzT2}@70T=hcmD%^|v{YKrriK~NR8B&w$a5}5Ey}Oz{`S$h**(EqrN<FKQ-g)aa
zuQ4qnv-;I+BE=OZS!NJnATanNe+iGNnl~ew{?CHL@i8Npc1D82&caZxTF$DA;0yfe
z+4edHNhR~&iymypkIL4P4n;!t6%u2XV!3M}n$7E<PABq({`>oKZ@BW5UboxrC;w^j
zo@blL^DR2abaMhcBK42$v^=|DGN;XT<yn5sw2H3s@xEU8)`<!obtDKwSis_d4#%~+
zk<%*?_1+<9O28PFkh4hQnB*Ka&ImrM(2tC2@YSGY`!-A1b+uF7^;7e$D-*T{f89+K
z#J5l_L9p;$S3~vhU8BUe-luRAub-?`2!ID-x(ri)Y;(e|{1>RHQKP$A{+;KF0X?=I
z@fkKEACJj6NMAoGT#n7OOj2yxjurgbm?^Y3<FA|Hj3MRJ{GLc_2lmV>^v-FH=!Nj|
z*C_H&U&~`8383=$FuLXvfk_Pzc_Qf5O|r9Rkm;M{SMn4*w4@X8CH>4i%w7)fiH4Q3
zStljlGxtzYh>482b|yu9zjld?wJ_7>#@%pQyRqpDNRU-gkyRH_>Q@r<>9kkXslQ<C
zY}q*Ji9;WUZo1hrs?G$Q!N3o_fVSKj{|ih?n)Kj4o&crvjmgFOtZMaM&DPk>^`4PN
zuUXL!CNLq-&olCRoVA^1_H3i5268!&?`q@7cNvP7Xyud+s9#~2vVNP<ghxf&0NAK#
zV>D&%j}7l+I2&5$KQuL2kl-z;8}o0O|Ds5W5zQ)!EUU{7WZDNJd}Gnn?%SFi3Pt`&
zo}W8~J}6ny;2c9lHoN=seE6~5=9tKtXG(G#g)8_`zr{Dp0HVUX1CC+2;=;iXiQDr|
zakE(~ffCk?8U`jx<59Vx4(@>Fv{_1Lt(yUBABdsukYGM(E#|+>*Uj>DzByjN=W&nE
z@jcBPnQ{G;$sHzYgq_a|dV|0WlWo*2gMGbp-Qnbz|Ae@P-nDP<@c7e(5PW*s)Mnc*
zvkc+~H4r2fi(dqknL(#*HQ8ZpheJG57|e+LXePf@{Too4kotVusQgZ)1dN8y9`2j6
z(7Sm`1h~w8>#6PSWY=f`yXS$duPdN_`b>6e2K<^iQ(0-6i{4~eWOFy*+&WiVVALh;
z-{J*kcdqp|Om|`CRHE+pHV?lfLNC3*u>`eh_pbT^dNK--?Jk%~GSVE-k*EuXQKiyE
zLo)CM?=jwuej@^)y9k?n*>h8C4e${pu)*mMKn>#$-UJiihMa1x_aF-d@Ilcc&()21
zw^{KqkTl;LtKz4ICe}UC@Judok?DEO5x)PzeJKG5A@8pVY;mC#zXc-P)i8z8ObnH{
z=xPZt*yybra(=;Zq;?*r*NlskA%;|d_Xyz;XU+_IYiHMT5@Hgte=<=FBIMnG9X@>&
zf>Xt@O7C_v2e#+JmOz%K^7V+LM!4<`<`u+<YrvoUaaZ{<4a(!@7(jAkjtG9p*yO8J
zHr}<+k)r_(C?Zkwk5`lyUA;efsO?Y<%E*<jaCGrd#cz4U%L+m7ZG{}}P;^Z^*q9wG
zSQ=Gb|H%C~^2l6OzF~;$Be8G`yFR?7k>rCL95-at(UL>3sDznoy$9yv7lBaPyAkU!
z8};q?EJ1%9Stt$&xgekZLz<|$KIpm5H?$b|jZbmC`ok=2UrSRU)k_cVK@zVm5G2Pq
zv@}TfW2x2%SfvuEI6HXH)_7o*dN`$^2;L`&*(1ZsS;sLo0tumygq{Xzc6ehKEaIl(
zc{{BKMm#F?qT=X_y}&kWwvE<|ncn%bdyC6`0Bwq8VD<6yy}a<5#%ZSZsnh$wu5qW@
zd^z7%*z{^cS8ckEA-?Awg4<);mBn7-owI73i~{$YoF|Qq)v%vXH*nm<vfo{!Zyr80
z7{D&JbG?P6m;pW}i%E70Y*CFB&VYou{r>5kBlxCUdUqjWz|JvZ5R-9TQZe-LdPoi3
zIIZMyw9Lsv4UtzvS$I&SjV)t$mI6K@na*Q(C|OQ9$o;uostdq~*K>(^B(Y&^D>XF7
z!xkMOomF1zBU!e{5K{YwBz?Kf>PTU@>ohM3o(1cCa`A4eS$6$XU9bc2v*OV&rlyWa
zLA1Up%b-8Q0+K6Ua$q$AJGktehwl?T0Xeao@hOEgPlOy6`mzpvAs-J*K*BDd#KA`_
z8Em5O{RROel-B34U|#|j>5{tZ&rJ&&a3OV`HXAm!kPXzAjy6DyWxT5h+x|nO&+`4_
zpdz!vtF;a;dv=><^lB2>E<_%VOV=zf@ql&vH*I(kVZs!`#Rx|2t{iS@Pq*Vn@#)t2
z=*Wi6mEKFEe-e=>t1q&>9RupP{#VYudbYGh?Eu^Gr^<JrF~zbMS{v5L9MsvjM6bIq
zVsEQbu#Fzk2~`>+h0BjX%*p=rNI@*g`9JX}P;_uWvJzC}oPooL>JOz_X_~<l__e?y
ze|zt#iaW7e<9S=)atNXUYTscjh}icnD{P@-GIi!4Lq&A1hP;rPH>+Mz-n1Bc?4k;p
z-6txGw_Fo1UKD7Ha$|45c5sc)Ux3;B31SS@8y-Sh=~-6WO(?27jW(3}4m(ZrDP=SC
z-Kw|I&TnB{FX>If0Olg$IBS<_B&3@sc6!+8Mx+l22#m#`<8Qd-DLbS|VTP}HO7*{t
z8R*&rJrUHu+tm#jKk7e^u2Db8;I#E3iVzz>)aIxmT0n`_a2V2Bj5A%B!{XCV&eGUQ
z%u6;2rwvU@%=Cg2P;x~@IQL4E9J$FbnR__0;E_r5NB!j<gflGE8^KK0Aei^8i6*#a
z*lFOv;|lD^v@K=A>ctpVyGtqG%Q?y;2JjyM@?R|O>r$<ZjjJG9DpT0D6#QL7kUpLK
zG01rsnZP>Cd8L6fy;x;0KgmMHO@!#6*`&_au%HtVwrn8mzxrX2I}EIXcsD>O2g^A}
zAusK@?0r>klfaA7o>;YmHL3M38Y`dHpOfbnB31my#T5X)B>X5)u$caETtw5jot>Es
zdD1#t6q9>CFmmNP*x)!Xg=;vIMZYn}!Yb?~b->U#KeeTLwYc%Ad-w=Rp=NNF)$xA{
z`1r!0qce2yY?tv=r$E{z4+FW{2ub*xU^1ct)Hd#t9~qU2H<G_hN9EI}J(FK8b<N8V
zLoTdhp$QuzG10)k#u-$hf2&3*u2TJ`Q&jen6?KR&IB>Fs%|%o8YB74XmhVT2a8u-C
z!RW7u!|A^Q!4X0zAn27f#)sV3{!&i(N$Yi6dm=X4PD3fqa8A%FIdoMIUDH*3?x1r)
z&mVRXBS|&dY6-ku)xDnS?62Q(ZZ8TXK>oZs(tY1NOr1s8={lQq0xC1G8QP_3d+Iw0
zXf}&u!D3`~EjJe|bK&RhYl3oY`FKSDU3a8ys;RYJO%0q=;3u)xNt#?RJB7@;Ty87;
z1>fn<I93x2taRrT;t2)?rXCn^aL=uq9WwDJR!K3qnVMUrsM+z&vd6<)L3wf95ZFBx
z*8k5;WE?hhcQ3g@4P~kO-K^-Uq0(L$AsIzbHSxK={wT_`f8Mx=g9?q_l=Vt`(BBEN
zYmkaQ{KeW4qzJ<33onC0*G+fKw<}ek_Bsclw0O!#IMMV!${|$dPw-+5gaI<{;10Se
zDR*tvMJ#GZB<@Qke`foRg9s~#-Tz>eZ;ewA>F}_RHveVF7YmD7b~p`j#Kh3{FHe89
zG9g)?nzq0^S|)tGEMB&DbRjYul4ey7f#h*nrRd}`p<h`8`;Nl@*E_UNGI`|1Dks#P
zAu8k<VJNV3*`L%Qc;DjTfzP8lP@c$&hqS+GAZl2+q|I1CXGO}YK{!+tYMvTambolw
zl3{?1DdM^`T$oP{p0fowvFvPuIvJijrwbM#rc4OkUcb>U8HBaDlwJ_+XBUNil7wZd
z13sB~S?!Kk^NnPH3CPlClqoH(TEr|z$QJ>+>jRSBqz2KIQYkfn9z=I%>V-bHHIE!i
zya#_dSdCE%FyaccpSo&>!=l)DQHtg%?#UnGuYf=L+N7Y*H3Z}pd(y$tzOzp`>y~bX
zUM`FtJHOjDk0c6A5nj)t^}uRp$5XWRFs&YZ;Z}thPyrrccN)0JAp!&(RaY(2=~j{P
z6dY};GlzXfE14z0D!PBSnKVO7^L(cA`akSD`uy{*WI6mbZNJcG=qJ?l<!+SrsVl@}
z&m7T82#zXdCzHDN>zspE3~sj{DaUkGBbL)=@qV&i*j)3_88@G{T5+951(&LMzYbUA
zDdV8LJ;E<EC#^h9l_k`?PjadGGM#9hrt9dCc`%BK^c^=7A*$csVlUoLUJ;&HU|8Sd
zWK+nH8UR2>tL=Vu8BRE&U<kLKPKLqKnM}7;Ku_x)rA~bgWDa4UqgursY(enE-W7hZ
zB07WKtHo2#bO{{~z2mI0X@g#r3t{I_VdOc}hLZ;rDoFZPe+X9M7UDB!-^CwNv`2oL
zk7mrBTl#5GJ#t+;&rTE;TFk2yNHQ+yrX>afNY+ZYCQ7!s&Tvzf_urfqS?4{ZXE9?J
zTF_Qg*DDkM&MA(gS!m(WtzMU2=s>Z)e&5l5N!N)#Vp+TZF*<q+v#+gx7P#@>ka=8*
zQ&b0KghqEtRr&TQPrV;%NnTJS7zf!V)pcb?GdUF%U-&2{i`{;(Ittn14Mc%If6B7j
z3xL_Oo!I5GwgdtF#RvC2>k<1!axa}HoQvk{tMq8Kl5nSh&z4r#kcfg@gF^aB-8Uew
zG{z=E6zJBWQi;J>rYlR=<&OBRtMaf5J$i%-elk)WdC2j(TV+%45q>f)x(2O|i=V!m
zwAn*1C^)=2!%1m*o57h^X*~$n;^GJ3$fk#Zr<Kn3Esr?1ls!>m<<fS2r;p-+03CA5
zZvz`k3qdTy>{EMtW?P#$f@+k&7zEya`o@^q{6!F2!tSh9tA0p63qvh28X+oan0iK_
z0az1C?QfaX!n%Wam+|6c+K$uQK|X40#DUNQUif8+gF`%(j5HkG|D++c0kO$^M^mq?
zns|Yb%UGpp`p<n-StDnLK3t<NE0b+{6BKk0W{>{K4fRhQ7KBu%zoyjW@kX8esAPr4
zJxPFoTxVfN+okPuwl3Q`>a1Cd8pPyj=@-#ol9e2?$w@R5M<w|RnR@09|BUeSb3;*`
zT%eSB@6^Vuo@)c`NE(qsM;B>6vQkV1AJ4nbM1k9FyVF5qjeIWlVizYgTRDZ(+o58l
zbYV(5UnHuCD<}8*_i`R;)5)k8VR=e*H(FHK4!+b)ph8`CgHw7P`qbyYF5oTBXg5nz
zA3go$C@(rrlPx#KVBhB32lDo+tA3g+C2W4P_3O7>FhR=jrAV+3tl&gyIsSJyeQ|qH
zMz>lXIts`iIGs8QNpcL7-=hBVm;(41CXX_Q1*G-d3Bhfv7J^IhGLH74bsgY5Gj6@^
z1OrX1v$)L>zgjKC1QVpLtQ*camAvn5oF()N?dh>H)m=#>5ZE2!HnBm-9-0r@vOD++
zSZxj{k#}AC3^xTg#4~5OS~pDs6n(`xQ#}#?7P2Iod_(EK*_1rF&gCX8IyS>&!{K;n
zM`tNrcpl<O8CqG#5DznL0x&WoMa9eRaN|p4Nl;tFGJLc7@7%pPhJDxu?y($?%5>rQ
zr|(dG;+~hj&;{$?-r8vo(d=L2ltNt*^*|0Fqxb6a1$ctZX`pd?yj|1Kq8nOo5Yqf7
zW$utXN$s8Zx05l~6LV*Yk{_Ceq=e?<1%4MA`*H``L*}Jx7y6^b4%RgwLwYZn&k<;4
z%9A&Cj`y`%9dHHnp}=y&WSlO4Mxl4_P?vlcACu$Lpc|a*F%8{rnT*L(k_ty}->Dhu
zv~@-~rQ^Ycnwoj2#T1Nei-Ow^SgG1%wT%>=g_s$9Her=`S7s7-au|Z^!e@*+!c3L+
zP+~vpBr#dyy70hPO#_tCKdg%X+IjO+W7M@JDX<oiK|51b>1^~lmtOcI3-Oi@w}t~P
zQ?ryVIeZ3uY`?r`1GVMKA(p3)<B@@~%S&H~r3c2}F`O%OBr@AcT~)mN-4>})cjovw
z@K(cWk2E+z-PW3K)H1fxf-$P@?*nuwNk-}UN^0_);&OEx<+O0@fYh8LsycB%>)Uju
z9F}mj_K^D(FR;Mt8uq7d`qSpTs?>9=GyE=>PGnzI`5e<MmMfW}ldhr3aw3$?ibE>P
zsPDtzZ|-oe%!bKudjU;1lO!R0SNJ38YZ$Mlb}j{`mfPxa9J92dYHvZ#g{9m)%euwM
zCXS_A@KV!gt3PJp)26C?GM)}e{h`(<Kap{AyS35&L%nFJ;c?d1nzhD9hWs~+S06r>
zsY!&hjwlCQH?kU%n>Hx(bv#>~$h}6~JK4aNGmj{Nkuo4x242pSQt#AQ%YA>xVZ?y#
zr)x6%N+UoT9r`s_`g&Vn%2areqqDx@?QF(`fvi+vRh93UWMU1cCwL2e0EL+3MSK}w
z@ey1?iiQRVm-Y^0tjG-P-6fJ|d#5fcX%;JC9M9<Xc5_Fw5dOm&7S`#2ZYon@Xp`r`
zW5Q!giAtL<eqqrfCPhgK3Ga$_M+8OsbVn^Q;*v3WQzi(a@>>_caA2Zh_oWH--F?n?
z0xZ;}?4Kb+0787Fk0cGkl(i-xx4huiDk=&ez=%d;3U@Mh>8FKDIRbv}@%-+>3A4Es
z*)+dz+C-2QaKEXS3@5>2-#EmG>Kxx9nkAD&tEh`5(qFX2h{<n2X@=sZrINVr$mO8W
znSqXl0d$~+p?!nwZ_LNN@SMJCKO!bSu1O&B-V8^#Ykyb5UY+QDvjlcLulk3G|5zN}
zU0~r~jD3TpDK$EjmlH{IbURqADs^mGRiII~cImiLM@F!@NMR$UJAQ#|QRjAd&pwop
z&$2mn=oD<X=qSBC=e1_mSO?zS^ku41UO85yrBa8GQy@EsMKRCW<y!KF0c3;2@1o#_
z?aunUJ3>p0OpI0hEE)6&;HR>UU5C=J3&%Y29804J@!B){CVrWV!d?L7RCCh^rH2&F
z)Pw!qKA9bYr$`sQ+G0QrECIszaOKPFKfmm|N!Rb;pQ$Rxb{gsWIz7&;+-!pyJcC>V
z8-}(o$$Iq|Mv@iu#{4zJ9E)tf&qyHinJ%X~6ibL(`a;vN(uao%+O8W!edxRI7u*A+
zwZ<lp*F(LYRU#jX5jPFgUJJszcFyd_7yiEj!<2A9gq?uHF8<HSFM>#4snriYh_~F+
zlLeZJ6_T&j{aAjVS^=~}ZH&a{3+An_{f~hRa4gH+%?5}=`dZyC2*sPN&ds;Q{{Bq8
z9X@W3v#st^;_6S;s#M-y3jL3uu@9#-B|D}wub8Sw^4kP*kX3mg?VGZ04m}5iymwdN
ziW+l}L!f%Pi3wxD7UUJ6O`kZ?A`Zg1KzRwHZ`#xcUrb9bN8M09mgsT}X-W56CtM7e
zOp$geT7Bm%$3=`9r5a9^%e&6kj-4-x@T^LIl@LL8$5nAmbTm|{weAfi708MT)Y3ah
z;i6Xb%3sll;~VBs9~_cvlREnA9_{Tf1K3YgLs@!Eun-XO-s`0CD&F3gCF{-0onF;%
zRfX>?ro&p+IMm|r&#FwlX~)2!tq;pt#Htywx3oi}*v{}2ab9lCF+8@VV7D`EB*7<9
zT5(EL4GyM7=z!d*2_&Ej%$C;4B_vR{0hlPo)0YP^(3kqpq}NFNPBE!fSd<-q0_#VE
z%X{?i&)3yJ*VtU4oq?Cx@ApfaPeK!|c`C3;+$lp3K5mGvwioMNR}D49+G>P&C8H&g
zrqh!~wNoHVY7J}e3cayYV|ZxT0^V-ZQ?sPJx<s049F-13qS7=KAQKG5yM4}FgM>+E
zN5A#DH2EtOp*o)LC{hovOO#3kL~{bsgA<Uz$vm{bEdu4)!9>X30Db*rA$HNxP)%O!
zwN>ziQq9e{LYYktAEBX4!Gfv9UXjfa<Ka`oS4V-OSS+m^v`0Osx-8lh;`=}E>sqY7
zK@D=m9_&ueaB#^K+CQ4C>=+vs5*X>oH1^+{Zvlb@3MCG8+F(i7+Q+erZxn<$ufMpc
zH5g6^WI0C$w(3|i@&rglh1iY+Aj-A@=#^%P!+s4=p95z_U(>$Ys#0sxn|I}Mhd3Jh
zX)pB{CJA)|bkd?FFikcfrG5-m&%{~BuggIF`Iic09GgHbALHQWV-;q=SN8@E1udFT
zfmyNYL{{*5A!Gnc;MHbywr@=t38WQRe*gRZZav>t$D_*(on{XHIJs{)=NFZK!4TZp
zKoQ&vJv5A;+)p2rzUUm}L3`m}aA`xc0;R`0HcVr}EjQR=f)9?dVy-*|_P)S?k<82R
zz3yLD^Gp(u)>Bon5tBWe!OTG)>4@P0Sf8vf(;U=>gKh_mC=L*Zjp>Y)U}JveWd6QN
zkyqY<@G-i8n~HBV=k7yL7WUXZ(*~A>TOv0YgQUnTsc^QmktvD<0mpK=w%NXdjLb-q
zXY9P%aH^mEquVC&Kh1-ZB|AJy7qv*f>?lF8noR(V*=#pdA)*UgMNG&Ja!+Wg+!X7@
zP$oMD$fk%_$*QF6tQ3I3FybDq{chYvfy$$A_sYUX&KsgZt;C>jNJ(_}848<OV{|PM
zw&p7@HQiSZ)<Cc}Ls$<`4|CZyejn77iF3-UEkAWd;=wTE&XthF0SH1EPgY8|PcMA<
z`?pBnqtJGhdW`R>E6oZN0n5Ko;|s^}_hw;#%kSIaS}&awyd-IgR3<`?5U?aH4de@n
zzacxNaN-VQzI3o7k*SGKpW2$fi!>$<Jmb3#FSZA}j4xOOe|1Ngl6p%gnThOs^C3P>
zThyKX`nqSlrNG%IIu6>CK%{exrOs3r9W%BJvO(pLD&#^6Cft3{3ygCVD%J!;S<4p}
zm2wT}EOJF#ls|++G3<<E7VxYV=tiM(Y3m7W3IEwfcsC8rpbZ&l`KlCDi4f&>$&3MS
zk3YgWPb=aPpVqM5I1|=aDnz#LZhTS36HTH2o+5IFQmr`^bcUpMfmtQpP2WFksu4g}
z{i-AtNvJSst@V%v`}61FSSQDRagSExa%rHY!jOQ79H9&<uIl}4`ofidr}ve+EH<Z?
z;oup9mMEe6<L|m2f!W`Jaak3UsmyXQrEdpR4Mr3%N~r2;0Hx;%MO~sX`$YI=Qc&qI
z70jtg9sjMEd3XAsH6sm1U#gvE3zF-`=rbDSreqg#YKWP^s??IB{ZOFE2_Y(6%O-3j
z-pGFoasdp{LS0o+Eg~EFWf}|KfOGGAO;(DCMD2?NS560Zg~>Rr^+ZD#4OHg*>~O_h
za_LqQNZ;@fTr9%su8-;<=Vo`bX1g1-45I9e%#l2j*^g3HBq@#1>HAem*>u<Z;hVh0
zlG!A|;{f5h`u<uWYPtOdrc0pwekH6pyD<;u6_(h1jV(spS>xMgW9merI~ity^Y9d6
z9q7S*LeY>tHi}VG-Po&!7ej#BYh&Ed(;BOK2Ke6|ltu(LuCq5N-{%(sTjoUNX<;cb
zLQC&=g&_RYWD8O|AW0=OZ(+0zKNd5Y2WyuZjwk($u~ChkhDOnSmxV-765)#RyGtI|
zX#=5(zLfA=>rUNB#%rIy+-F~i><VUovMn32Dtxqe;BlI|9Eq&v1>hKRYn=8syp~@0
zpRDeX2|h7Pw9Ecwxk6;$5W+1ZCa}hay!ftdMyygV4}vgYldlNk;C_zDODtAdSy`6R
zqEt&}%#ceMpnzfbhql${&w1iy5^gaBBc^!)mekyE0B@yP2Hf+vZ0r~8$2rnBMKG~9
zD>60nw?|s8?j<oTeAM1TzpKOn4Oie157)(>6s{;R^w+Tixa)!M9IB1$=9r1azK*k!
z%-vGY;=WkjbEmIFHIENso>^PS&}TYVh=ZjPH;Vi%Tje>B*3aMiCBU|48&6xHAw;K0
zR7|kgNV`a-aqbDl71^QYH>}wHKh-)5kDC8vt!1)asw%fdLHC-iAngmCC-iHSubscS
zD&MxMOqLm0%-C*CEa0i-3?7WCu6>1YtO?-WJ7i7e$=pa8yy$LC+u67R=nw~-qL<4x
zt?@Nm3+C~uj0yDlluEPEW{rfA{l6_<(S?!qYtOUUG8wTvOO{Nuo$|w2N|xaDI&W;5
zfF`jW8)=|d89}+L@Ue{6&2jaqx~GqxPn5H9vga>Bqmk|Jjg}0envNeh-JTMq<L2um
zpPFXB%LB^<6+m#y(Zo!+J-<RIWah6qu<prIqg9$mCuBK8qC8l{NuZXPDJj+jEL$*`
zfaZ195S*(p#ihH2Onc?Ow|+}s%{caS3)k-cA`>>fKeC@SPYCh)f?YR09Dfbb+``OC
z#b-0kQ)U~q3L|&=3a#Qv^(7&aH_<O6@It0m0Gfz{4!q6`>QU$Zxl07ZdQOI|-K6)&
z5<SS;Fv-2pLp@(XW<auDLRp#IiT4pWRXx4|uj49@Yhv~(@m_(tyXKesw~8Ee#B_c6
z7gqbVsCyq@J$!jodM<_Uqzw_p95_$c_^b0+&a6kBdl3j;!j08sjzE@28~n*;BPDMM
z4NX-F+DbS<&|VoUtJjkfBHz!sGCniL0m1u2(>6=`6V~1|0pT^-4!QPHFfX7<`_V6M
z@U9$=1A6O<qdF=@nzqFN1vSp${57DqJPttk3KZLn%=U5iCBP~nA@~e!Qk?9auDtI(
zX-w9b=wVK-hwiUz-KznY^D+AF&T7924|3+vduRJ_xQr1NhVj!rMl2E<gmha}PmeJ#
z_?_}_4wl0qe?mMN{ce7_fyj8^h+FtpgZa~P`9Mcd+qEN$Chp}3MY<AQ0~|)Wbudxa
zg!t#CY7UMzgHs~YSZgawo2j-}DR$eNywV#r;EN*ZlFV$(I@B-?ph%x7Ys%)XJb#4N
znIL3v)k2&SSn176osvLN$WlN2HnvEsk0AraoNn8KDF2W%t#GpAC#%EZDJi!iR(YD1
z=dFjpxRmq532?azMuUo)52o3z3Frr{drIVBK<?~UVk}mrzI?i`(VbqDH-M+c|8Z>K
z;-NL8@GZ@P<`;61gSi`?*6^bZh=3amKkbyO?h8ZXxvhM2w!|c54jWxO$6=7q-=nZV
z?8BA~i7gCIM7jyXFE*tN4G}ENPp%G8{oqKL!RB{=EJk3F2A!Epct)OhPp|NA`9}1}
zIQeC_QlG1Y<WqcH5wAkcZk+LMJz|3)9FvmB(u(Q|A@Y?Ftk^KCvbH2l%U518zL6FE
zbDq{;EFW9<h)$zM?3PY*as-DU7iKQXb0$3NR=2U(KBegiZ9dAj)jx<q4;$uM29M)x
zy4P;`6LNDyu?*F=G2r^n?Uq1=5VrCF4R@2z&(K2fE7U9o`t`fdo1ga1Q`(^$APX$F
z@}paYhu#4$ixHn+>x+=ELNjWek?qg=4aeLB(6F6?jkCgMILw47x;-i7s|MUt78O7|
zxnTRKA~8D}f#%OU^M?H5`^4p4(A1~g6JoO)LX_L>N}HN{T>@D*06`unt^Z5H*LEcv
z`_w!bA)xrD$jLnI1=H^qOBDQEL<L>SA_X6InYrX#%DM=r>|;de<&N!SA#9xTr2VjK
zVm<S%fz6hyWkh|x0*}cT+|K1k-_865P4Nr(Q}?&wn&2eW9z6?(NBEFbw2Fumi{P=e
z@<8Hmr5Uy?eP@xKXw$3A=6d@SrS$NoNU<8S;i$n)DKFC+Pp$!o?7@eM0+KFWEYy0C
zCw3;FWPG)M(b7&7g4Lm~Jm6-y-(GdI*@z;Mal<H<EiACbs^9(}J|WQ(&6OU?lw6a@
z+??pEW5@DnfjHLSK8`9NKCMKA%cTHmMltCx!x_qNO^JEJ{Wl&>DMC_J1B!C}@qFp~
z=5`fBsNTCW@a0%w$^Odu1oTwxeryN22<Aj#Dn)nvQnE9kY<3%d5qlUzr!3N_(qz{D
z=_yd;@Ob!~4cGB8t;H<G(8Y&BLy43=eY$PyPR!pl7>oCHb^S}n1|Hi5QfpfSj`b^5
z<fd1}VEKkF=pj%%%p!m_->`Yyq6zuVgbm4)#B=3H^-o$8ays-Cx|%8JxdCe|Cwv@x
z_?wfX;gx9WT*-3Ck%^HaI2+i>+59^No&v1c!z|uatvCO=<u$eVjQ$tX8%W-M1W-Uf
z1V#!CaFzz6(w(QpZmc=<t~N++cKyYz?F73G3=J%00$8F7Jvo|tVSm;2_LINn^-kk6
z(5Q+6X2yGmi@o1CA3XfXt0VK8hvkR^Q|-zaVJ!E-seYshG}c2CQHik+Q~AX5xrX~$
zL?L}(H7Vx?$8;*&+WqAlhyCAYt2oe+dh<H4myqajWi*Q81${Kckk1Sh+bVnuiB=`X
z;V7u*RYMOS#hFWlKRYR$PAw6Y!JOMENmo*n(E_p9HQ0&F2N{AJ_Q?cBEo>gBx4zWF
zQo1vnYN4~{$p6yxAklK9D@uJfN@8AVE5JDRA!_Srb}*5_z8F=Z_(h8E<yWA4HJTr0
zO?8gy3gq$|^7xgMK24Wp$4!xcOmc~|F$rVQUw}Yj89%>-sYyl>yo{C|#5SH92xC9l
zRqcF6=K6f@exFj5Ha?VH92uD-u25)Xofg~J9fG&r(C-<i<8ItF=;cpL9t6RPURjsC
zW+wj&9Sou5AB!*uyG*S*NFcs`7z|VikAW@2@P<y_O>#6pV6OzPmmQpYmD9E0DkoeF
z3`+BXlbISvv#B|YEW;)X-jYM;k>6I4;16_(IAeMnsmS#madR<nNIlI}yETc;wvde;
zXd+f%T<p0V4W+C7-4XFYq(!4DOYjHIEC)Dq`D<LVKkV6lm`&x8Ot}~|&7AGv8#ee7
zx=+9FTdnMX4ovC#-&o1HL#JQ__Xk?!`TbVOSme%y)Ms?LqPbR~S}4DF`aHI~+Vkbx
z*a-HMM}uZ!eVpD-?^;Q<e31Uks{Y9rNL~sA6cy+f5G0U5%?f1x48i6T7!Z&tHV_aw
z5D<{9ow13Yjh(TJwTTnGk-34RGo7Uqy|IOpGrhTqwY`a>6P=NzQ*^qF5)LO~$jvv}
z&IX7CJRo7?(x6<qx}K<QMZeZ2VH<_abfZOI6q_{K|MT4@nt!Q5t4^Epk<Ttxl%RTL
z?(0^n@+*H^59*NXrKS73`l0w?oV_}$@{(Zt`ri)-#lwB~m3iaiLg%IT$HVBXUO;ti
zGV^^6U_)I_Iv>b@$ZqvF#3F#&To3N_Dt<~pL!e-jtDLrpwu8ylal^7Y*rGPCtZ!{o
zn}enEd9}rVR1@3Hb>ZB!Qj>S>I_2CtT^3*`x0BoQyqAm6>`s}NdHx5db`OC^ZG&U8
z{W6-)mO?1X^R_74u|q6$6=U#X|5GnyTLRcrXyIR4LYM0x(;9wVubs!@+gs9&A!4Ax
z2F{jjosIo>v;!im`fH5vcG?f-?hJkCVt>?)L=nVh_1J@*sBxeAGxjh{yE4ifESS|=
zWoSzJponYDeUTM}e4!?~J@_@0Ks{dp!3MZvy|_o0INV5BDh?Tel@Drww9HJn^>HgA
z5BG{FuwhqVF0ynln^l_C3?{JH2+;_0GF?!jX7Lr0XrTGl7PERv-kPowuR){T8x5mr
zK>|F*D+PCxU@^LmYIERf4!}>o5qMu8S{1`;${>rKIE*z^I;9{Dwe4WNR8+vY3f35t
z<y428wP9^)Y{E=;r!h4gYSHPT<21Hezf}(u@$io^=5Iy_&v<NO|H;$jY7F3^Hc)mX
z@DKZHr)LW!M4U|6IVE?3)C3&*9x3V@=rr?mbx=EXar@7Q#T%uqck9#uN!sV+*4@bX
ze7&*DeXr~_b>&!V5S^L76F=j%xoKfl(~<Bh2x=@hq(F@54N2FXl&{Vh%9isSJS)>E
z?J;BV68uYOv!2J0yq<3`x(i+;C`#eWk~W0PRK#NBjYlYhqMUz1BUyNgM#C0LtQ|FG
za~ZR!$iteEM+RQ6@tN2K+<rS!MQD(}GFW7UY)OBK|K<~o3x`^j*pdFymW!%cvvD1h
z|G-%^e|2x_xtIoTQqMe~2N2*Yv4FNwmouPfho2rD#u8%Z{VtMvYr!7IQ${<o!ymzQ
z#T}Xbr3WJn#Q2_ZKrk~0iMm9h-d3(%qfOvNuf9km{A&r#P~C);HN2PMj5s?X(H=64
z^>}F&I!?~vOEyT0(LaU=IghgWpUz|S$$uiWgn)Ybnz8^KhOYHM)))b{HxV+5onjHg
zlD3TxDOuAvd2EY2d>~_cREE3%^DBJNi@QGqnNp`y)T8cruaf7vqAroLt4}1e(Yg>(
zS(9R}i&r^uGV)j)lO!jDZKh)p(+gBepPn2-xb7GFGwe+!m2t6V4n2BXKzplyG%_s5
z?}h#~Sbd_u0iKZ{0qPDFrf$?~QZvmM<-l^pt~#l%)}nci3<mwnxY`(^spbBBhQuHG
zLQjiQKbR4}wEs5G(tQ4oeH;sc(o1pSJe1nQ42x2_<@AguD^3o_ot1ZhRC{z(xGQI0
zAlaPiMh%}~Q}p{6@rCny&=xI1mqjYfgnh9am>9<Pa;Os`9=qnE05cOudN*<?@Y%y!
zs%j)#cwgpiZ~!NKz|C*(wxa&cv`+N^#yJF<2zrVqFQeZY+Rc`qfN`iMHJ8s3eHXv3
zq{O(c<O|5Ca-kYoo{YJ#-e|7+k9>8z;x;?P*bN=YLrDp~c-IQ~3fN>YLr+jweH_Iz
zNpktPZ?ZJ%hhS02C^kJAFWDpviR8Bg<Dcp27vPmeO0hH3^*gd7BINYD=dTk#M@+bb
zBINRqUkZU>!AGt^-J<sGM;*tRP(dyY0VjiKqu|NS+7`ulddCc?Q1$KDo2HA=88VQj
z+HXh)E$3ElkbhN0xz*~PCUr^L@cR~kKGw}^McQZtHGFEqC227-rnPYP5v9>VluO8c
z2irh>LG)z=OG=<t&dW!wn;{_*_w!)b#ud^tGB&FZAOMvLUVOYb^;H<~{XJ|PZ*1ds
zPx_T)t%P;SgnyF<_`;TMePuEJJ+PH;u5ZnKOpwxQ+n3drW!9LN<g(vcC7I`E7uUHg
z>%2LP1(shB{|%0RjQB5b{O9<;HvE4l|Nr3lpUj~D&s^yLy8J)T(e-=LX8bq$&rbD!
zocsUc&VPf6&cw~$&e7S4keATW#KFblU*i%59o_#2QWR9&(Et0IiT}6v{V&)VnY-9p
zIsI4N{|_v?euXL-8vp?f_yYs6{$I`iU$q+>I2$;bIRA&8SKS{zxUKP&pS?K+$3yA(
zP8?lp4R{MlDIM!uW5{Ynhewn=#!e*?Ev$>Y=hsALh7bNdr?0w~OJJ!3#i2=;#&R=u
z-8c@|l&F5c<S9|1Rd8~7z2dx5cseKk0$!C8wS5`AShfa=DqFHyxp8pV+1Uq?On;VO
zE8meD7Zmu{ceZ?tBY7()TIgm@ZT<%UH9*S0RW}InHlO5KlaG^mInL{(y~>mC4~~;p
z#V9YE93VCx^yW>TG*D{P_I4jUxX$WiR86Y-_gl$cQs;l47j>TY{^R|;em}`KD67{8
zz>Uv7!y5jh%%*uW%SO3s#Z^9;<y8AdqG0yRB%jXOWpXhuM{QA+(2%T6Mp>Dh=Lyt5
z9wZl4o#cybI-BJDQOyuCn*i8ka-NOe4+*6~QC8I~?I%A&L+CeV-s)Dp&D(ihHc18@
zFaAEylLD$}pfh>d7JzS=T;^q7XDyKCqOPU@csZ%gp*HA$k)2O+u5DD6O`FV%G0-AS
z`+JXnevrU_le|qRZF85tYpO0mfMUG1w)^0=p8}1%#<Vpy<RUq{&L;ExEGe3#%nKNk
zIw|Lq3G||-ak?l<q)0x2fvHv5iwwSoMDSTwXVZjmB<smB3@QI^tEA1FmVuh0gb~>u
zel^^5$yPM4p{_Ue4_Hx3C6S1t7mRIhZ;xB`%P%6uG!MFXkM6+$XLX$|lN6dWnU9O|
zGHI7HAUY*C{a@Kj-7CL~`-t7`95gJY<e|z={_uyyNl@^*fS?HWj0gIb{^ePL9f2wE
z=KQC8)DCBL)mE4^Y^x(!P37efC$2)eYuZ2{%>));x;aR`>JwRe?<&I5!$t{+^)FRE
zHSnZ&kG82~qU5~?iEB^Ne4$4Phra*Mn}bZW71Qsbo_;`(dr{b-qbhRJyC($_nA1g@
zLygn(ypDA{=yg}Oy`_fuUJ~+XXK6ZA7h;9=xD7qK?h2S}8Bh|y7+)WWQZx$fnx0`n
zPfZUmRR6q=oxxhp=9Bi%1a{}ZswM+A#RFssiK@Gx<a|}DTIErV6W`R&86%Tz;8frd
zF;3?vssTGr(bZ&%^WOhfIvI}Zk%=Hagi7H|GpKt&ET>^R42Hx~yskRTYmgb*>=JpN
zsjirU90ARNjW5LC&>|(CMybQR95+A0hL`p}?co3cNt*oSq{<8@*hscEH=%l-)bMF)
z*flMAu9N=x4f)I>HjOgd`ZHiYFgY&Dv*ZSFk#KccT<2wSmerRHj9y7;&8UKnLXkQ-
zUnXbm6>d3~XTW;LW|jdcV&!IYq5_8+hRMMNSEZItW@f@5L3GJ9Z?7tg&6zfO@?Df_
z%2_$ABJoNBVcQiL{G3Dg+lD)Mb5)G4xE0M+HJ^-8dc)#wE$>wKPMrA-BSQT?OMs7G
z7h@E>DwaqQ1-67b>dta4`=uAqPiz_Y7O=~G9r~sAO{nFfq-}vmUL%U_oB){3W|L*A
zFmeTby_w!VFs;b5(N#JD850FVkWNd}iUA<I25HwUHj)en@CRVt=gY=!{94M;cpO0k
z;9)lFtRZ|}wpY6*8_RnY>HmO;X@O;P9Newlq(~m4T$&W?>wOoLz?nL>&$`Zc#mOKk
z`nyhvTl00xEHPd;)|PyOO@JS3Yrkc+4@BimMI|~!$%quUA{l;JxLuFfm>UrKem&~$
z4I+guo$%npFH!BSnOGeX39f~+Y?Il-S+;eiq~zo(yUv-Fz*!5W&lVQtUBX$mX;v{x
zySUP;DP&1eCfiyGQy158LULE+DV!*YC%pLkJe#B$2(j6gH~R~k{@0Loy=51`Lue5Q
zH4mXu_>*la;*+SCZK<!=I%QGTlF$qi*95-|G9I>q#%*n_5aV{eNpLVEc0{i6h?{LW
zY1q>1&EYs};oRIF02^IU3$M4_G!)M^hlR|i4}X1zose@O5ac5#*m0iEU|eQP;-O77
zhmDxGoNC^}Jj-V&u-ExTUgsbtHc6!g`i5o_Pa-)r7>6%@j3!m-3uBa)GQ8xtnwhDb
z$f$A7aGK3hLeiHb=&a-j4z<+-KZXfq*7K;&VLGOCG}-lFBP(Cw4Io!6f1JPX?Xg}@
zwp~d4h6>`Wdhc-qZYD4N_a`S%TvE-X2b@5TJ)wvk;~2-T+>D9_WVB-Zr+k?LYEQ^}
zXE66pPwBvPdfFS<M019ciA0xrK5DDFN2w<~mET-&4Y-r8Z;82y(?-dQAa_91Ymg0q
zs*VC^NI594u!vx0tSZ6!9h#P}D;U<Jr~RD-R!Kz)AryQF@L5$}6qhuS>H7$<nM7iH
zMmf~QvA9C)%Ro_jpa?rqt!U)je&|s+oZJyz0IVVycsmsoN8#LtbM1sU*$tNgqEIJ0
zy)ZCE*1oZk<jtfg+x2nL;C{1S=8JY6Qu5?Ka8#R7UCi2b2HGgAbs**Xc@A?pUuSvH
z;3A?>r2}f8CB^Q8=!P%)W~Vr|Fd{H1<g00|XhWH}c0HZ~V!7f|J7QXM63<deVzm({
zY|g?~W2(tajf!e{f<>qr40!b~;QBw`%6ipgHV{LV0Dx-V?V6o&G_Qd}s~V86&~|C1
zjo7xO%Gj<2o0aXFg6;cT5DE-MInQGZsFQnYWG*K(3~~_Tqbu2@U4_UF?MhS?`SY)9
zmsEq~Pqu>#Z@OtB{8np5)gPbPKfBAS-qC}9aKT-W>Y48`r;*%%PKsiARpn$!0-;DN
z!ZY0pW_NHAV|V`^T+WQA;Y}_}qSgmG!K<u!b5kDHaMrHdrIOE8@BRMWgO%yqjX06V
z`K-=Iczcl2>3)zXJp?3Q7uCEm(^`_;YBtSC`a(|yhrgSwE*WjImh^U#PkQiIBgUjp
za5C5?43k5;<iUNDfi=@$SQwi;8~0@AHeiUMuIrr12y;Lu)UaERuJQ+lFT7Rh$REs#
zayR-BER_(UQW2<hbpZqjNz+wTt&&j*We>WUUibGNUk`K@TE5WjYA9m?a23E+!v#Yw
zO~UfQ?d~1J*32eF>j_TWQILz<hPm00pwiw@Q_NwJ?@lZ~Z>KXz>GcdlPg08wg>}Lz
z*dP{I+oNQcheL+YN&W3_y?}>vT?l9H4%Xq=1tUD{?XEth6NjG7n=7owJ88RJ=-|1m
z#}FL%6jsll?9>R!sfgtg+`TG;(Kpv=9{JuQ?GS~xgCM2evtFm?(+B@Mhx5VvE=>aM
z=jT7+P7VJ81A;%W53LZ&0YEJor}O?q$DS~YaY$g+)1I@6nCXCYkcO#yQNp@((`bo)
zyLU3GQ8p`DVDtX~2G`c!VF6O;MtQ$YH~Yi3`e6pk`5ADM6ekwu@?6{MTSc%|V`|l_
zuWx<mDweg@wrF1JHg%PB^>w?*r1r<z%-qoGd+??OalZl*TuiDP;62lgzt8iAM2C&f
zx3;#w{`%3Q4OU~oxp+MvO|vi8;n?1+!xUT3QEO4O%ikgBA3y*43)MgbAdLpLFB>H1
zW^&@J%Z3e*kUDoxKkuog&@;Md^C?d1Ow4H7#?EoyN-?|tYZV8A`OzU?pYQW)*a}um
zk)nA9qx}8_f~EeYK|bVLP8^#lY(M#YMmJM3eT2osRMb)}+G$?S=@!nk4#*GZHt(pI
zwO6h&fw+A?Jb*Fz9w3H?2YNmo@BaXa+fc-&9UgEh{<|j94_?1KcztmESIFXfqT%72
zql4pvKfgHDSsL{1{`1qr7jI9WzxWoQq2i5X>+4OO``!Mlm#5Sk%GuWG|MkQE+hZtY
zv%WCx{PE4{@plJrpC6gr&!E{G$>$nkQeAFs>JHL}&S{FvQfJ`rUCV>A$+T)(ny*c|
z7$hL+<+G*$LB<<DDx94I5X=VPP~T`c!8#7m<^olE8R4#25m~~@SNEY%-DOq7)->g#
zIY_JHyv^%rQKIGvj{dO!XA2NYCfPY`KycEZOp?pWv)2HGK>xJP%FEp2l@)S~@mtK%
zJ*G4TtT>>`b~;aq0|&!ELDCh@CY~c5{5za2_jYWWQ~9jANw;8&r4QgUc=ExaQSIqF
zlEFotY0joAHVFM%URqdF?3=x03mUlvEt6^6khblmJ%Y4HkhbO8oj903leLHHL~W6Q
zHzgUWeDEYv8!o$r;#u?eT3>{%U>sZ=w-)DS+iZU*y;*@t&1t}F=CrNF%2dU!qvGA-
zlQDw&ig+tge~O1_;5nNi3&lpT?Bm}t$UJ@7Sah5{u_|sk)WW}hf!f?nz@kHdzN^fm
zOr&$FH<t_+<ar-v+AIxrcmNhd_vgGWE{eQiqp7TIQIsZ28dTTgwQNEcd3?*6RJC5V
zH?WU_lzLTHH%XQp18aU!*Hs-_DO7N7DyBtST<2*Szcwz_P3m%bUQLMEyBWfMrF4up
z9;QcB2ILD<338AUarCq$N6#kl#r6fK^gY!lGw`6155rDi)sULKPQ~SJ*>`OxJp9aA
ze!PNH7;;sQr8>OIWm5}p2o=n_MuBU0fi>%#HIwrga_*MnKs@=rDEG_p_u1m<5~WUB
z#rA+dQwQJpO$^^#cif$j4ODo2;;uF&qcQZm;^dvKFw{mN%|lZvd+r{>zM;tnKU15k
zTI!!sRDQNFrLsk8Q^QiXp+>T;-e%(>E1PtjU)Fivcr!?)qEV&Z_T9PBR?is(_5ecU
zAyBD^0LlV}!-JSj4sETxJS#L185L8IIcF0PdB|Y180JGCsJJZfD(9kA7M!M3Rgm6{
zH*9mwPUZkg(h>3?N&x!`EvM_N!{Zfg8m`oW5ab~NrVCHI<k;ja?$9scbj^w1o6niO
zhq<|eDVfUk28|*k4VK9lVxs2BXM1LU#Q$b!j~NKfvt8DMd<$|vkq`FENzQv9oGsd7
z1SFV4zb~&^GVcNqqIZ&=<0VFxpfyaL5A6(r>9~(bUILCo1Wg&_kcWvXpx-V-85eBc
zg~k5z3`)?M(LxV#-~^`OVz;C8Ut^`0Ug@PQO_O%=T;MP$>=qqs;AhchuSJ{lSu9m-
z`Am6LV+MfRX{5j)R->@1WGvq#>zl(zbS#h)jx*QjY_N;krD^s)Pnvnn*XqXFhT&lO
zDAOI5=U`E!>xTy$+k@nD{BsgcC$B1dxuzSv(@E=yia{58nzuK3Uedrd>8#xXKHqM~
zM0^@3Bf0_*%^D~%1opU%$9X4nsWO+CDcRJ~70QBQUM1(;2JTlgK*}ha<#AExBXft>
z!6T^H^Wx%y<sQ%ak%S;RtiizaL6F0<+d7@yOp{($^^`OiYII;Rp4(<^(#_!ZXNLzX
z8c}K#v_8`;Y{sYR)M%S=_nu76QA5PjZvZkF9BV;xDAC*;&azbDLGu!Xp=U)sns`!j
zhB_a=b@;Dyz-S^+RFMOfN1&h`4h-Qw2AL}(F+4yDw9jG%UX<e)_5hq(bzJSM6&-X9
z3N&t`%kgUP+?A{{k~Zlcj(_I(GfHU`w;BuMbp5gH7{bYRe<NBYX2B~IE{$cTo_}W`
zwkU%g5Jk>>+feZhfbuI_te9F8tcy%BwSgl^M^GrX_)#39d?Qi`smN6lQr$oEW`8T2
z7*`FI?bercl8hQJN1D0*`Sw>|ehqvQ{(Kdw+9wJTUMj81v9u&qLh{K<^_5<NstIxl
zY9SjWf*ft>BZlUWg(PZ=_J!=OtwvFZH}saEYf`BqwB(bjdOx3mq)JwUs(GX7%<uqG
zzT>~B4^G*9Xzy{$c5(Q10+Z1{Azu}A1!v6!$?VT$Pbw=n;rFx{OCbtMuOrOkWJ?H5
zQ+mt-$!m!I@nelpZ?4crm|^2Upr^`A4V^a-)MOWI)fPIb?EZOG*!@vWrKd%i)yt&G
zvwCzTW(&~-dWRb~|7MV3GMxjfflY%I9S=nrypLKpho=P9kH#!jTi=uUXM!TsGGh8|
z%%?62XYNiis1r$zbAZ2SNQ0@&j8IJ$I@_TNT1^_d#8oo~alrJ5Pb;e6Nn$2ZU`u6Y
zjhb2Ff>xgP3q9lLh|hWz{zeO1TOMZ0)`_~d&>;Gjb|;C>WrnsB+MJBYt~ELTzkOK4
zF{|$yw9esLL7>NbA%*z5W`5q}bg#&pP}8{!CG^^=DX!TdlsGgTAW=)(H1jD4x-3K$
zrPlpb_1HZvat*j&Gk{SVa)!IF0T})p?06Xpq4=-Pany&!1f*Ywc{kxchb*j7;)>vE
zISC|O$T9X|F2^NkBRA~3c}J-@1ECVZ{3zKyBr+B({aDp*v0y52To@>7r#N|*<Ms8J
z4WAM@$odsaf8#b>zf@_|b(`E;)I*HMUck{n&}9u>NAvYLsvVU@UvE~;^v~w1xM<DC
z46*C4dC8d%PQ<ms1cd&)+_yDoEfZ(twLIdp-sn_4Np((JPR>vlR+rEQ*X{~^fHLpk
zYea3-p<C0_sCxs~eBz?GoY%OZcIZ-UAch8Jy~?2rwSlYH+VS@_-DGKc=4Uz?C;rx^
zx+jKf2ps4Iz9gV)-H=7A7aV)gzp8u=2VpejkT<yY65SR$N5c=TmUCJ9N*WT63e3bh
z33vw)t%fii4u|xNB62@(ZU&&i*lzLs!g+fk|LdGfhM25*cIfFF4JcJLL%w4=pR9Nw
z;{WFsG+o?{7Pt*kZzGUa+28r}L0=)bddPWs?^UYLWb<>Q=GBB0mXVl$ALB1WdbII^
zGIlH+J4_M|_AIn9CHB@mS%n$v`SmU5HH<0DOp5^r$yQ)QZXp#feeB)>g`K(Af*j|t
z$>hPR(nBJ%1xfwG4qodwzS028{6KHg>Du47h9!IVGQUZV@>T&@dO<E5BH+}e%<fkc
zlpWcP_{lTsIT2moJ+fR>Wy=>b>8x1flOw2Xpi-9;_48#mEhfI<xq(5Gq=YQiGy+VS
zEhx<v*VIDkhU_;$dMT!S13jxIOOOsG4~(Q$Gt54KysS}}+cP9h<({M#`VGvN>c)TM
z7_-^XNc20i4kHZn3{74#M2O234@GmSN7QEMvG56Sd{tL%JIUEP9`EhwU0sDLw;5i!
z8){r&VNyV3q?xmi@=&0o3;Bw*mD#ABD}M>@tZP+e<5WCdlM)uPv*YRq+DaS?w_@}j
z+qNgoP<+}&IR3^)a-`oZ(R)G^zR^5!lC@&vl-1&I?<z^v9^4|CM%lOTcD&q)!gioM
zEQ2JC?h?^Xde6Ng4+W{={=>EK5=yXz=lOXxrx!ZTm?Le@fTd*1v&82YV^xF(j$q`l
zwZ$~A=Iy<Q1*z&FF+1}Fj#S5tEmc_kTR2Wd=AXA3)U+ztzvJ%(%T-%`V1P%McLOp$
zt4h3~Y4BYyaNZssW_ptxCEcV4QZpye%}tNaL=~#58%iCK%DvZhplhpFfafh1H5VZ%
z2w#`@u9*Jn2gOwJ6IE}54_8bkHQ|YA!H%gla0qfnc+LjN8I(E0oBK0$bXjBZe<RsG
zLrY)ypsRg+T8tH)4HNb7o4R$z6`XZ-i^`DZlNGt#C8;Xw=pHvF);m1Mz&YP<ZP-O5
z5cZI$q56nvP>7Q5-$}yMIdb`;{fp=t0uQ(b_|s0z%4hh|RX)OZ43Hy7QH`0aayEVE
zLQfd0OBFT3sDTMO2auR1P4wQ%lOayg5v+1L+Fut<fjSPlYg~EzdYQL0r2FOg8J2!?
z@n<fpu8Tlg%?1k3!0so_bAARf_6(pAj_?3gRORwq-Ej^d$r4oDN-Nla;VJ76!pD6-
zCj~v_N(RZb{&7mC8e`-hdw3km{L@Y|%gS%FS);P`i%cN9{2c1nI`QP8!Lq|vD*VT<
ziwxTKR4a%0wHtH+wH~CdNJw+>Tp7nwlK!C1C@e5$uxZp!@e;d{!UWOFAn@6<CcIHp
z!~XgoZL^*)W^gW9&(W$Ud7ZOfhfFXPB^@kM#h5C90d<oa-ycq@L9z<-MX@04^uknP
zbE*kv8ai08(`(0Vh?$_&4ojy)6dzw!HD51a`>=uDrbI%q8qMw#r@qTPt`vP=q1swe
zz}nMmUbfXAs<-xOe~9WodhnZaOM#C(bX_P>^1Ew0O-}le^ByB#7dHr-gIL4*tL)eH
zJdhVJiid9wB#qb2QOQL@)67iGK$~wAYo?LE;Y1S)iPpz}#JB$Nsz93m(`Mf0M^3nG
z(RW+;+f2RhieTy~h2n2F*AU^_9W(8_V&zQJd|l2ozSQRFX6G8-lu_axvR}AUL<+9D
z72=v7IQT-@5Vz<?J5y+AUm+t7<wOC_>hR&XEBTqVJGZn~K%4ZQLR*JpC-w7rRe_*f
z-mWs#!z$^@w0XvL(LU&Iwm&Bez2z;<-X}`>8=$fu&Tmxqo*>HtSmTbuM>cdKCtKK@
zY+-YjRAw0|v!pUhQ|5s<>C%}@Hq(8yN1MIq!=7#M?)@C9sllO#Ll)5xd&p*9ror^Q
z)`iIy4otQPV3r!svK!A*<FO>zl?v&sK}-BpmKoT7y0!|cJEUPzB1QXR%>I*bZL>Ks
z-3su}Ep7Rq<859sI-tig_<9o-928i$7Czg9WDDIBrL?DP_51j)lphL|X-Z2AlhCMT
z1IqS2%x~x*Cs0eo>x8+z10}LVBhS9b8Wi32GH8-azTA0Rox^!8In2uvWaK8v85*DB
zut2uTkK~Y{hxx??dbD82a(PbAfs|Lwn()sEJv|8GA{*j-ph}ySgU^4ndPfZe&wqSF
zc~Jh>JR9qDB!kTZqKVA)R*^s1?#uEn6aZ|%7!M!e(+jlnXX`Y=3>%X&R!i3<Hrfm%
z%4hTQVkFxXv`a$hDPgL?-PLWN2j1O6Zl!7@Bi@#X-L6Bw>(*~)jD`kkJq=om|MLmp
zmAbRZE^&i)a}|EuVOxr|J<@&)8Et)>=3cS8JFuGeU1M+r6I&CPR_~~4QUq0xm-=qg
zpkbnfS?;oc*AH2NYMiNuUN^Pj1b(rYRXZ-zW5F!S&ybxtEewk5=Q8V2wiVJ|AYc{@
zKLG{O7jKEN8+r_4Ey5RD)G9k3k(wPqe^}5Y&2-^0_kiYTYRxy%7gHM}Ag)+j-Yp<!
zpg&ZiP%z`1v5Qr2`x>i|XCl$s9ckWQI*4udHQaeNhnrtL!atvTqkSI~Z%|L!frE#f
z;SfondcbX9bGWs&{m4Jjlg;_?i${ULa@VvGJ;Pa`_Ekm0H5Z85uIGw^RKk$##M5l_
zzO(sT!>=~C9(^4OR*EsCX+vY9cwG}#0Im3_8a$TgRJ4X7!kRW7yY+@7QXOfPVwIt+
z>CV}Xn;A7nZNH&C_yAz|X!}v$CBZ6HbDYg~VN?Cwjt(2?>(%VV1*1fdp(Z-(^J%rY
z6Q6UU12P2~eKmaaWjJF|THYRh^~m!lK&yNs8Fx@^s`rmBB>^JXz5{`p2|zi5W5R4Y
zZHXY&;CG<i9&USh|M+<vbEN2(LD{drFr|ZODF@81YdLIsRC(DVT7=o@7+SjzC_q~O
zsQr~M*$(j`UtPYbzr}|E`1U$*S8eU?f_L)jxn0C(8at(CH>dh_UD^*Bg?Xs0T_!)v
z%Ii!w>%=_qivj5-pY&FFp0-Zp&}V$qf_McPtovTP4ObrNhtC8mr;f|K{SKW1Jp1R=
zHEc3Kg5Kwl9}UM@{XQ?@_f{XyDGN(wbJSxKYhj|b(3V$A{o|aB?tU!Bt+Cz0cFi08
z)w1VVve8l}WNeZ^%HH@Le9xRDV7Zs{WQvm=YcINr+qXJ1b=Q(A&nxD5ufK;)-ljdH
zWOIzK=&Ei<c(1oPNHzf9q1V{LB#X{yJ4sI-3xrp?i!zE150udibio<TXsdWK%x#h3
z*>|WOkI6gKdEV9SQ|*2(u!uS(la;8k)G2$M;=B}(y})?LM3tOp;5*jpvd)`^U(<?=
zXB9rxZ*wo>qU^<+?+%!6E{9XeH+*BNIP=Q9qhkxQB8Ng;*fL`aspfqLUgg`o8?h?h
zVNADbT$-+d5kt3vN^PCNVha)Bqx$Q>KG2}tiD-W9jQ?VDv&*<^AYYCb|M=J%?t#C#
zs%|>5H#<?)b!=+5E076>u42o!7h1dxf+TgZ*@ab25T#-54Wd9@{SNilQA%7D<NUXz
z1ag-D7CIQ-$!e?)DCD5*R13Wo+@D~=>d@OPUS-Q_-rjeom=LtPn&xeFn2pEOde_2q
zrjtF!fn0sl?I2yP2dU>(+v3dhlJV+Y&KIY9+GeqxJVUQ%%JlC0jC?Xk*+M;L#`kIH
zdK$IAfj`T8c#9<8YW!G$k$`OYpGR+A57~D^aj{HYFNk<Rx}aLw7{xRdZ>&;{PM8Qj
zG|*Bulqj%=2Y_a{vQOeXVXACIl>>{j9}@y~rX!?rs`lY9pAM1^QYtKW5q`)B5tSTI
zQ@PUjs<#ZTROm>CPP~{Wi4g~TXtXHbw!qvXD`?Uz6r=Zl=I0#BJ{3~}gDV5p<)eh!
z(A(^FyXRDMWsgkvI0%$6X5c*6g>hN2FCRA*WV99^oSFvh2JIAPv|AA`qIeR`7RLpd
z&Y0^(<70?0yxTk(G9d?vm*docPbh}wiK2hAs;l`1AMSmD3rVLy%ks6YN3knc-EB0X
zZ$>EK7Z=5-x9Xl#(*$TZnxk>zb4-v!%VWA~Y%ZTGB<v!{beeGY1B-o_KhKqm1@w7~
z-ZC_fzS3*Dq(y^|^)0QNG~S4~#30$;gnu@JYAiQ$38jhTa!GXMG@Vbi6QSqia$-lc
z)dSBKtHFIM+3*TYwU5nF&1~i=!V5S&v^xAlj8U9<;bH|kW#qZ)U%O!Ie43Gy6Q20|
zyo;Q8;fzFsFM3_4>)E)&>y&})_dS~-_jSsaJ4)N`=jZO{BlmO5+c&o!nNM^Fj&Y&T
z_X%~ZkIiS}{m04X@N3kwh_&72$<DClq2i%7iozi28k`j>pPo@a+=|`$uB9yOXC+4z
ztnYJF^3uR<D;9;yI!e$y3st~wf`-uS&u+;cLtynkYIV%`<0(!Ix)^Tvi0!g(s4`k8
zvK>=d+#xZ%U4nenG6p*=u8N8zKDq_Jr@TjZ;;vSpXlA4ra7Df9;sOc;=VE1a6{Mf%
zmqoeX{;#~QY~DGU(4qW|oe>i7Xj05fg_ppfaz`Y*tc$TPV|FxC-xHIDX2)M#<2t)}
zQ_@xSew}Br!U#gNj%8xIU(t-)NxlxVRHf<Zs9jjbw)fa<`?_IaQBw7+C`yMKx0o{`
zv7-~~mOg-R<E(+^zdH$2->AAahaShdQFM;g-xh6nW-`@BUZbHsFv@S9sv&;JFb9n<
z!jqIfR(x^y`LgA){@LGI->NM)IGeyWYV#iXnFX4_b$0Hkt*iHXZf<tvtGUog2X9YU
zF`#&KJ9;nHRwVDR11-6QG~@2(jf|q^SnU0@OQ<)&J~^>NKi~S4{3(`97TVST->bQ<
znr2@?M9$HuIC+IF$BV0Rjq@Wi7UwEcQ@Xx9&(iHjk3cXp|KO!azZWlOXtsTq(yNBk
zbgtO!P_aFus>31HA1ezY0}RSZ)$z*G4EXWoX&v9Q*;dIH?kp=5uQBcFL;O1=3qs{%
zn;rc3*iT@POTN}P)2dnZO!c&{WXmb%j#T}I>Rl$)b6|uX9vso9U75%@dw1zViA>#k
zP^RL&keKQ9^L@3}-gNGDknY}8^3a7!8@%j+shl@m@qx6zYHl}Qo5TYNNkz{Q`rZHi
zR$5l$-0|v7$`$b~-LC>{Xw9g6pvOGQJF!0oNf1T@op6MaK$LIvJsn!iO2*g#)a<~Y
zckkJ|xc(jOb4*0!P6%ZU%5><be~`!!2TkO;CC4g|krpFF;=mb#!UA{SAdfVxqhPPs
z*QH6Y9Zle1X&(#;b6bvVl%9&IFi1{Oye(jtk?#5NBx)aCI?;|D81GsQ^$o=KHwW~8
z!>xYLFJT$vJ)lP#?ss2)`K6z!?2}1=zxDI->td9XCHq_K1R8lNN8GTy)Gwt#f{nh#
z%@#F@&%JW;!k7^2pl`8CbJrP#2`feZ!l$rKy`7IUNHy%Hvm<dYv90E#D}Im`%OU*s
zr0O*d-x~)SkPCW%jBz!-%O}@4x_V4r=X2VYObUMN*F`qzp(D4lS#Qt_?<bywKo>V#
z-Z{I$XV558kT<hlc%b+$X9f1w&?|YPGH{W`G$_=ktBRuv{2a}A8cfa9I|jHn<@!+I
zP3e9Vw=;?FiPx5i;`}gdqZl6ANcQ=)R&UV@a$zesPPaYTyc*|9_RAZ8eo?^&SZ7S)
zRSJ=V(p=|wM<=fps5NQffBOx-ZqaMgeZS0#u<|=KzV4eel}WDp<C!Rj#GXZS=41|s
z=;-o=uFrtB=$1KJv{Aa}E@sG5M+`Fw&=_YaiWg7E`*gedLNS*&<#9FZ0M_z}<l_EB
z;J3w=vzyHXx3cIaCcX3k3~QoXNQ2~3BZ(9iyOY3S%bMojrxngV)zKI{vnv7UUO0`k
z)QOSBbd`yMnD#Aw#7X?|8U?k`UJyZ8&Vb=tNen-_<I(D(0w_SB9^kxYe-OP>ysIh6
z(ZVVZI7Qy1qP@NooOc52NlZ_m`~?XV@37L7P;+oo7p?WB^I*ljFk^_-CVlRNT!<7}
zAV;QM&TGW=k-9x{`nS8HkO{sSjMF<i6*@3@fqF+?fUgc;IPU!b9OaF3b4GDrcRRj|
zM;j!a@MyFVe39#Vd<hm_96HJtpQ?%D4)0!9?#{wyHfFe(ygpZH)^QENqM5XDtI!v5
zzEIh#k9g3kjn9(bot_^4@b<;&DL#$Cn_#2c<y!7}dPaXqOsmz$I2H}n#!CDBPRHR?
zY|}kyrYX{Qx=y2anO<pn43vc0VfZ$%nVzA8$Z-_n4=|`};FiM1fhX}(Sx!Pnsw7LE
z9UXBppOl>F>=nI<+?U1V14Q!E?w3!F)LSSFjRfL<K0z)woL2uRCX;Mf)t4K2x&Fh^
z#<&_a8$agf8-QU0F?2s-Y^#^n4-kSnXJD!w?|+<^shFxFBgOMr>W;<Tw6ctI?o%kq
zr_hr`e6WL|9SQ=rrodQo)^O^}1vD-6{1K^^-R<vrnrG-S{1}c<EUn^6Y>-@zkU`<|
zKRnJ7(HtKw08Uz3Sb$jI9fOG2hz|{j6Qi)B99~wpi=k|cs&q&Sbjx)vM=Bf%XZx<R
zYz2>X`yJDKPQnd914af(L3I&tRq)Lb88a@5cImjxC482~I6?#VwDsoV_zF6Lu@%t>
z#XPB1mOK1cnB33}U#712(S9ZT@Srb8Ci^n0&ohiZJeja)5>1Bk@5D$l3@s33e{$*Y
z?MK)cDKxLD{+-xrMKxTBqkMwN(PY=TKEmU70LqSn^#E^10_i#w4?KYsgXAape+n+r
zA_zW$ZQ6WH@Lr^m?w}%6)UV9ZY{3NjL7zL+;*vqlb&$!jB1f=lQH<T|e5%BWx=FXM
zCfP))(RM(T74dbf>2)toz(|5e@iKUNydLN>02LTB&qiySpu$I0s~p$zp~)`_o6NXM
zrr8qx;uf&Nii;&j1hE&p$$5csmy;V<giyn{Vt^@!@f^)-JPb~jPh71D4Cha*ul$Lp
z2sPj6EPsMA{)xu;CufX}j?&H#UH08i5&7{~j<_6oS!FQ(er7NW1VE?s`hjyoqTKyZ
zgG{rUQC9&&l{${}FGsIvP=M(xI|lN`q)EZqkE6@lGZd7ImWuhSR(L?9jp=d(OEwxv
z6B?r&IBpIYSN~pnhzyoPS9maF<WA7KWzMdv0^@bG#X1EP#9=(2%xfV}k(yHlLFC^U
z3KzX#NU4kQqSz&BkN~u+Dm46C1>8|9FpQ-WY4XYt83<0g*OZz$;DQ6L%?lP2DtK9&
zt3v+zid;EGuCmF6mMFL*57kp#V{gXE8~A{c-remaZlF04f+y94GidR-lixmcfEBcP
z&6bg_JJ1Imk2zZI)x?~xv&IWoMy~4k8B)ps16&o3hzj4dlsW$n=ces~MJn9PRgG{u
ze8#%+w6|>{C;K}qa4H4QWFtRboN&bgC~#KfQ%L?|tb#W&L_%icsD3vAkICmWckeCk
z`Qs{Y<eJahV_in>?WO>(vCV<gq=DNWQA+R-8F!}6ZdBwVp^Y6R7-90aj;C(wdX-=1
zFrUI22Z_3%qd-j`BuCx{`Hdr`FHy&}U>gO<);}6@fI6z`GOyp#<1Do-4e*Z!`bRes
z%96CET60ZqZ^%Ka6MxBCtZKm8vE8*{n&yoJq690C!8hvA4Z2@2JRvet8_!gDk)@{D
zXN9V%9nT8YgF*s|J}A@|f$l@W?~cEJbua}HRw;M89uy)RuVw=n7#@4;PNvf`LSsLQ
zf*JuJlH?e(Es}}Tgc`{-86@l6O~D3LidxW=Bw+N1v%Z|_-Mu=-hGM}c*({hxnGV!y
z27I%3mwRKZlnmw$fmQ2jo13B?U2!M-j+a)Y$<X&1O){d`Il}0W@^=CQ?VG62E2uo5
zOo~~PtEjX$OtM-n9cED&WXUtij(LpI7_)k$un9B~90Bo1ld8!j9gOXb8z_8)KGb_K
zu_-7}Zzr@$!yOa$$s6U)Q7%7OAznrvSLs5B+d@|wIP+j7s_C-SMw{p^LuIL9_GU;%
zKD?ax!C{5S0RLSp{O}RNaAR*dfTlM{Fq2=uIexLjLEBV}&6?D1Zg6AmVhSWkbVqy!
zbL))6!W_C^UHC}P{yxvf_~vZ%Y+mEop23cQkM!XHb%}n*(IqoR;lQUg9JsZ?c*v!y
zyzvoogi(whNb78fV%FA|=m}jnfd#KwU5)4HDcB$_U>05%%{-e-mOfS@V@(e!t6Hh>
zIAUQ9vR4I+1Ia)F3ZE;XI=YV<t3Y=FLXMzCm7ekFoeh(hRn3RQao%Rd1aEe7_VIjC
zO(xY1%HW4@n_y_Pdh!y`&Ckh0lk%Cq!LFX*N6|F%yxDm4=#O9hn&MwS`r3Q6Vs~ze
z&rCl)W3ulCm-!ZC-6`rqs-0iIfl(73mV^xij<X&SMhpIUSIN{e8@C<6dq~IXqFuV}
zQET!Z?OA&5=_>hw?J-OnpoNr#5y-V%<w{goCr16#zqIS2F0^Z=<&1W*3avs$pDQrR
zhOVt>D5G7wvyJOc8`oB~am{HXg+u&Jcx5l#wjXK{F}8iH6+lzr=)c|`Z=G%%<{hdl
zVjE*P#jGF%ClsWL*d|!G-nM(kwwk38<%rkGaKl&omz}smiTD}b15Fz8gFnB#BDZj2
zNAU^Ou}r;{uoK_b;>@AnLCE;hy#xBk2>9I%a|D!*h1p-Z<3|_W>LSrqwW>(Rvia5P
zfsDPwq5h~@L%9BD&Mbe+2_Qu051wZCn={dAftT9<Gm`&iBe`PH{?7pZ+b%`K5nqa)
zkn!6OOq{kKPTEzJjrN(Ib?kJuC9cx)&)|2=Z*Eka4EJawS<vi!)b49FQW(uC6<#V_
z>tJn#;Hb7p>ql?cQen~LUl7&vTs!+F4XZlb7GoXQebkatM_%|49N*{gZ#*pLjSNGa
zK_?VQ48=67FDdF}hR0qwMRUT+D8;0XJ}B|6D7$eVP%Q&hR(D;Y-qSx&lRJE*V%Do#
z$69GeaZ#pOJGwGTk1@Z$Z{)4bL+TD-;_m+85By`epbNn~8&b%UbzOnT|AzBxWlrM*
zEH#3*nnlVlb$Nb6X%M*1;U>k5h(bDg1UENc5le<ZwQ0^4rXvH>q=9Vxdg4Q<R;?R&
z=T@bdrGDT&*;Ls`=Q3rr4N=qPvspfV#Y>pFtaUWj-0=eH8IW<hbE~BRBPLXWEijVd
zLZcfl1IwQ&Jr_bP{InR4Cwat;AY|}l*-KJg?+`hTMo*D#hMT(&BAiJVwtX8qfh%K>
zeq*h*gl#Rq%A;G$hYyiRKEF^{ZG*e;MvGa>1<kgcY!#L78vOJ8A4Og(P2#G-|LupJ
z*N&_n>%qV*x~rqv)&e#S@x8s^)_71$4{B+kRLxit{UhkFtwjW4=|C(^vwe!n=V)(p
zU~%=ES=*QkJ?A+Zew!O1Psib27Wt6xHcuFxlel#fEFCW%2Nf|Y6~8`p_v8Zk7%7+E
zwRpvG(>$`*hzcrN9<QqDC3DbaouP4<gibt9Vb{k=6+@--BsQI9H)#>QZd9R)+#1F3
zJr06*3?EwjywCNK8}=+p#l5Ze8%2u^|NAU?UERQbpS8)si><Asna@xUo?K<9o6qq&
zxI(Tw&=yaq`bR~!F0KqZu$kZI(11~+&2QPBgX1ca%L%eGsTS&L9?DV>#`0p4U0$*}
z{TZ|!Ur)R&>inXD4x{Jj0V&^)vWu)P(DVwbTWSp0BDB`ZF7nBe0y++L)(0E+?jIg(
zh;IDuX<gkkd3}nP<S_rviwWM7GxiM|cbK{y8kQ2p{bv^>EbJu|+M7!bnLtk!eV$f}
zR}}Be^NB;-Fcw_vE=ZyGf|nxnDrmW?!u<xH_y@s}d57O43AnTD^E_I3`J893xt{kY
z=aVGGmaVC3bgVc2+KmXZdNDhT+XW2d8@caj;~i?t*tCw5VX17pMbs&RB_7e6_*Se!
z<#oe_!nk8@p`9dztXaL+o|qSjk^bMs?{q#Hx=<!}i@6Yrdh|=_k?D6}^WxxFt#ORb
zO0v;`iJw%Zx<F(58FwGA3DEL1ETK6Yn=51eWZUbK04Yr&<+S}LKFh^j5v!Du#xdc6
zc+aX$N^k(gT-5$QD7HLE-6EYyO>Z!Ij@ho|)OQ#PE0=`IfS_aZjavFrH;rAW`-oj_
z9t7eT`kD<uzx?+vDB^R>f_FI`XL|V9<bI>c)n(D(E?&RXsym4;i9w8AzpK_@!HYt7
z89p$mVc~jm5}IkY;EJQ(%hWQtchP(7@D_N9T07;vji#7=3>^rou`|{Fc${Pj>|<nt
znc1T`UsUTOFki4W`VL%KMuJpuzK&(3g=mYrm@@Sf>2!I&p6ES-zFi)WjmOFo0XY&e
zZ0bEi2C=>{%vXZ8FoWbO(N-)R;|t-9H6iXMw7X{Y=z)Jf$)%9jy<&zQN%OzAD5?S8
zE8_nsn4PJNRw9LGGSvdX)Q*Xt{*h<Fb)qS(s)vEGDvMSiSk(<%bOqKyED3vJu1mYR
zBwJy7MO)m1h#Kw2ul=ps46$WF-&l}|b#5h|j=Wf!>EGs^UF62#REJUQ?w~(k-ik%1
zX5PKJrHe-K4Z;NI!1|q|WouXch)%!Q8jucQULCxCar)hhgKxh(#<!0DJ7xb1zodT~
zucc3R{x*ca{U`l&w)iEV{_-jO{QZXZ67%xS>*Ld-<G;Ro;S?>}Y*LJVDaxWP@Uy(i
z>!ST-Uc!F(OIn>zioehEG+BT0Zgc&QC;aa?zXa5TTWbTzK;4UKrZk{#<THLV)%l!|
zD5fkC&&aGCZI{?uoI|W<3Hld6ACvq@@C<L$&!jcGc2<bz8q0o>@Z`rRN%PAg@Qp7A
zNpI_m*#g~QeD&y4`~!*kwAYu&$Y6kR@tZ{aPEC{g9GxC;12?ZG*QiXzqc!|c%@1wo
zIiv=H$llssrc}pg=sN?qSMCleec@*@R?TZZ=20Y8xXu+a60-E#9)304^xsFmGL+-D
z!E7k(GJev_lDwB%H^TiPC8uJtO6SeG4EejIpYOI#Sox*AiNxOb8;ZzHR0Ru3)-<B+
z6UP`-Cx3n-eGJj91PuGmgRa-q{uRcj9xT_pv4`Ov?zkCn+pn<SIsr7^)adpRX^4)@
z*RDw)E}VUy0?skHy*#e)fq$dN18w2F6G%<>L9Rn?IObC^lFHSCbuPLax^gnWPxM=L
z%uw*86@wp+-F8lP*#@(5FfA}qadgt|K2@jBcbIpgd^ONV!$~Jtol}z2F;%A+*_>Pe
zk-r3BtsppIqx;S*Qib;%qNmt;t|Rtp2mZ*%8zHw+OOu~HAHRM2%6Zc4a-#zj=eY6#
zJ-J6T_N~uk!U#}{QI#Of4G;&ZatF9@vQpt5kZMQ2^0I*?Nc%!glk6L?3J+s|eUlml
zQrZUWX{gO<uBy7df)dPA8+^^qZNX36n>N&5St4_rZSYnc@-pRR(fA*ybE-OLa~Y0P
z-xuuW^WkR5Zm{#wm^Pi$U)b-X-$D~~M!3&65ox5CO9zl$=L4MZzV;#Gtp#yq>JO}Y
zT1>K<rS(zMD6gXH>MrtEO$@Bb&X4A|pCHc2%1XuPvQ%QFA1SvA0q<Vp{fvqCVZ&}!
z2tCytF`PZ!FqvkX7^X5XD<VE*@b$b`<4(gptMhdno;gN^B{j_kZ?*r!4t#cCUKlA2
z)?LDg@{#Dy6tlhIV_V5Un3Y4uP#bXKZ#pTh(a+kdVDVE)U<}6kPW&acoN87=vX~@?
zC{8xYmxc00j})rK+s?qz1y2JFj*l|c93tgD`mf8-i<N^E&v$vEBC1Pw8p^rI3N#u*
z;tM=(gpKU>nPI)!Yuxt=4q_UzXMaMr@y_W!+*fA0p1`1+&qlQx%}|)rN{@|%qQhaM
z!cP=EfIczCtxZP?poS=wSXWE<O_gm5JwJ-PLwm>qGUqD+*`CPy{_S*yudlMYOnV0`
z^lOJGh)$h<@-h1N(@4?d$0t3ZiPA0ie40u3oq_8>?KZHZx124ys~nyT9>iS#g-3`G
zqlFh(h007FItI?b4ctE3PwiW<qp};nq8n9-z*lq7p`Hv1FI2_EX?)KyyKYpNQVNYP
zur2h0#%?5MMG1REa|Y}g&ekQKyC=(#aTGN@hGy0sJlSR(xbU_A1RXt5txUSb!&Rnq
zgcz7LM5Fv=@`j`<BQ7u0isl5G8D=oB`xRn?JoJA{`yRfhQE1PStWh1w>dQI4Q8LK+
z)erDB*y0p<&{-4p%k3z}V7O=d6fL~g0Yf|^G-s;1RkdAIP?_eXm5HBIveRx-jGkBX
zme2chj&xai7>4A&1RwDNt{>q*PM4oKAv_~%vomB5JTbB1^n_ZM8Lr+9m7*c#88Fa8
zXktoW1LV73+ZO3|P~DXj<ln?SOr^?auX2;Z^*D}u+0lu6?V%6j3?5v3*ub8KAw{C^
zv_&b8-|jVso~xmslOT4eCRXs!R=1M=8o#lg0iqz7iu4(85KqmZIc}__l`Y_~Daog5
zVKR+RKC(I2CeTJFiMiD<#o2X$LL9rF@uqQ5b>wwQRD*Ks+cj$Y!lImJ3z0x^EX216
ziLuJD#CZHI7EBr6fYA(OY5%SQAQLo6T=4Y-7jz<+(F00i_0Nkb2PjPyUX0p=m-J}O
zxM89rYZXd9GpZautU&Yndyhq9knnb%>KO5yvWDQ!W@3j0D%>#@U}py^GCT%d;Rg4`
zMh2~v;7Aw+q&GHco=9%9wKoWk^Y=_M6}?2<)0ykX&~?A<An02Rq{r6BD+0w01<rPh
zB^@)EuhCspcB4-anBhpRN-K-58XKjTRcutH0gIhf)q5(b_rs!;?3zyG(pt8L#j-Hy
z%;y~#WP8wG_mON9Cb$iYi|vOQU)*t7ogtS+-X61?%5@V*f?5ViEfNd2GUdn;llALg
zZn$$mBT}zeOFVvWd3&kZgJ?6b^e`cLdk;<qqRUpI8i?lZk(!Q?yxTl+S0ON`Z1UC;
zZBJ4Vjs;vSkm>Cq0-3zwat@al2aQv`RrZV<#-4K3>iU@#kqaGp_}$TRdR|S8Pl)5}
z@&u$qp6}ApzhRWV3)54sO*vB)fj&-chj)B(3_4;!FpX`dA@+`?y9hy~{Ne5-%BSz%
zV}FR>h3_ND6K;?^91is?7XO{t$uS7}V2_7Vme&3dLH45Q$o}L8ag(=wbRjdNX^pd7
zIb=c&N7h#L(Aao!hH`$pOj2!UI*Zv@FcJn~r7&5Z*W|{XFYBmH-KB=7s9u((sKA)C
z&aq-<5p>kY_kq{>gdt<Qs_QRWIB|`WOEZU=rU|nHOEPk)yNXU)4aZ$`KnJw4_2NQr
zsfTJ7q?~Ohh2|m39c}*ux}Y`{DE8*2)MNYH_>DI9gZq=F;!C*mr7m=pHKLHy>nO5&
zk>YKBF<I3jZJ&H<hFhWgs7?d^wnDb|=E7;eNDqA?hb<N0spZ8V&>~!Tu=$0H4lPgb
zLpI3&6ReAuFwyrX6J`#oT;B%W`*=c$u|U_vtbvPWGcy;9pt>osX}TL9(SZ+WadX#_
zZ2Tpu&Smi+rD!^ov6QN(ol3#bD1O?W-5^pw7O7-~<OPX}m~WQnk!7g^tjDcDZ2isn
zWt`cCS2Ox;6rA^C@}rWwlnBXJF)A*IBlclQ7S|XHSI?Z}%-bu^qDm7b<!XHajkEFE
zykVR)C(;x`NwD+tL(u?k4E%dtpnaE%C{o-y&^O^=)@@`MEG}H^uR1@qEsTYc{jn87
zqo5l(h}7o_bfN4dWg_2uHPy4jot9D**SljHAjBxuk{#P7k=c@jghIs;PH>SWsIcRF
z>AprfCiH>EN!|`c@4#&@PBAo$TS=|ea#;lF&<%djzwfa8zawoC89EBh_$>3^ASjUm
zWL{k7^{*0{^jLSG{<oHtG}{-;Z3u?}+H0Q}=>)3Q%ZG72`KaI!uqrN!%X!@uh9cP!
z+PR&(r8wE7|63$CYSX_|YU>)L|27frj&>@z52w^`CYA|q6_c7mhV^m0@xCHb$9^B(
z0ZsG_?vac;Vb`39I6;f-*4L|wcooT>4V!Ee2O?~RfUs#8vQDuHo2^qwSxZgsP?0LY
z9fL&d<Dy5RnHE5F&bCoxH%9_P(Y#djOa(IJUy=lDrWUWQIk5FfY^G{LW(lKknFOoE
zwMKZ*WA&05&fXl}2+Hs$KX1h!Yq&kl$msVUIR`TV>>N@^871cVxH+1iYr&V1+G)S{
z*thk=$M9%(M^ACGaW=!CViX-SjdDd@Zcn=;hZ76me~4Iyl*`5Y(ik$jxvG6tzO+;|
z&vdo^PRC){9Y%=W1F#>YTog@-8KgR^Hqa#MJ07inl-`t4PFDAym^aqfl;KHC+@!d7
zE4Pku=zT>Bf4TCJV_?K?{Ao@l15b38F-B=6awYaIQFr+?l-k%X+7sJEjy#|V_poMJ
z*l8vO3b`hg31<@CMr!(auxc{fC+UVtyMdcpd6{RfZz6u>{VKU!v^KXNh8YBv`)koz
zh|W9V4ecVtomT2nT$_sVkrqwp=jR%-rfslj!+yAj64ixMa|*GO1&Crkv^{Sa!|wKe
zGdUP3pxB=~2J1toG#wPf`HQ6HJT33IlL=qL-q0!P1;#5+dv7^{1U>(5fwE|dgO)fn
z<U^e43SWQtQ&p5{Z~ZaF=fS`5M@Uk)59|qcn2pC$5hj<FCPEscKRQo#=dVJ@B8J5I
zp|k2obo3f%B8;I*Y;Ku(g(hQHSvw477K6$b@W^S^=|GL7D{p<!ELySn<bwO>@kDWJ
zrI8J-y@0s8Vv7OOq;U4hzP|HtMGXg>Ff4MbM%Ax3zWdsAh=&oqb#iserl>Z<*?4cq
z0U(S5Ct@WwW;4*kiq9@VG)Pkne%cTn0ErOR_56^5fP`^>(dJWn6$yo6D$&|XEa41`
z&n!ggsY98d6jjROfExeDF~NS^6?*4PR<*rUw`i%oV~rd_w3U+GG_7&w6LS;iEcC=)
zDOy2NM?plP?|qJBqWftWulFck?y&_Cij#bAy`yb!bhb9O1Q68$o`4{oD#HL3aePM_
zCdxObO2JO9#<+yOP!tV%X^7#FLB0gx213&$l72L-r-;hw^xCyx3Id}l4I!~@KmMn<
z>bCdM{*Y3k;i(;2s$6nAKLCNe1CQ_#Cl80jPjjgkv-{CJ{{}?~48p{^K%@U5^J1<O
z%{OpU6dlmgvBUNSYBDy~4Z1<YI5Y#C=4_;xwS<q!@}MK$rJb}Lp@b~=vq9TQ0WD0$
zTsp)^iPXEBV$danMA-IekLEUMz%J8$!_0AUagozRh5Cj8YM?jl3h3S)4H!+7$TJqE
z&nVjD88YcJ75sSER@I~}W@n^gIWvLYbqSNuoW-;XZph^bn^Hz#f$@+dO*o6zGR+9v
z(h)+W9f*P-3IhpgWVK>B*`je?DbZy5CeMlKJ{%66*2@groQT^BvUf4}55}Pcu?AT=
zigd&(EvLhKMdXge@JzFG%cZS+*cY7Sn)6a1nNVyHW`vznj3`a`r^mK!+qP|-v2EM7
zZQFCkI%C_mZO_h^e|9f6*=#4>H`Q02PNnLt-}^jXt?+!QDX)?JUaos^!!4ChcX-Z|
zQajb6;d`gW^B&B_+wab6^a)e*pPyPzT3C6#wL7)kkb+ySDe;R1T+)OI@i1R<_uJ4q
zB3xj<?wHlBFURGQb)ln7l-ALGN%}F=NB@i$S<d)uV`r@Q-|0CuonaEmm7OEtLfSJi
z4Hq_<e1T|V5~v;Rg%P)`g|V(>3|O2gFQ!QiW6DLdnd?#YN-a*CE1AhHbGUw3bJfbN
z+nV$X_gV)^v{&mXo+>1N4s0IiS!RdFRKF&S8|ES#dI*(V0^zG;=w`HCZlibDIutmu
z(Yy2=QOc+5;NSvZZ?h-@3w2K|Bd7D6hw2+n)Be7S(%mgiJtHT4t#I3hI~C2<WS-kR
z&EaF#)yM63|7M5FQyPJ*C8T|wUbD)6!<r2Q(N5|=dUDP)ecbhi2khPJR_K-Y{Ql*u
zoh+`~<=A=Gg6?*<ki=v=@lZX*04By(5WarKGGd;A!<@7psQ&)IWM8U`(AFpy#?&cC
zX9L&WQKkZ?F3Mai6+=ut(3LR6=#mlOXp(S(|Go!tNvsnmP;UKl0KY7DDfo@$CQF0B
z^SA1C8iWiDp8a0OVgFAoLWLU&W++G!SeT^9gt+9=cMopkD9=%5Fm(!gm^gUdc9&dp
zYiWTTfNM|6Z>M8}Ror0Muq@5DfR%k0D4^19YphtL9Tf+tCyVtqI`aW}`py7GaPjzt
z9?BtSkY*fyxXRD*z$4JiTsJA`tM20<C#G<0D(4%g?3vFJVQ0FDS?hU__gLjlO}Ndd
zEvEj1msSqBcvBb75o=F^W&HN(PD6F=TM2S46HFHOfWKUaCRgv_6|85@;WRITVzet8
z8%CU{@LqHyQx?sJ;i9$uMi#86n9CskK$R<(hdx{cQ}T_o+`gwUo|<W!k6&PM&e4Iq
z@snxVp}vAw1SvH95V9nWif_92$yJ!AQVV$jDFB#>$ll~ETkO{HME}7Qtu_>Bn7Plm
z2uV4aDyx=X`?QBi*WWFT#=|fyZQbgdP^%z6_C%DQYC<f?K8d{@2mlz69>p+XF69io
z$RdQ0x&iRuPx#v#HvEH`xov-=D2Kl|+wi_GOW5eI71N?BRpVjj&fm)|Uem(Yq5mB7
zakh#Es{1S466T%=G&sxcUB?{Aq;oG4v5f3ht0lV*9CC(Y$qo?o-UP7uq{F)&Eqv%+
zbeNM%Xj`14XiXYS_)Sw45?$6JU8@b^__}cA8m3)Wvy2b?ugf^c4v$E=G6dKX(ohn;
zG*eWyQidelG3{%hQADOWU|MlblGr|w8Or!QPN2t6(x>6b|1z^=P1e>^++u$&m^!_-
zzJ1{Q9uI$9HqxxWVeszhpP6mCXr(K?I1n}l#trnGtJy%!#5QAV-o&;TT#TjmE{%0K
z4^$-Tpcgk8ZW6chV15<^p|<3Qp^b#`B^|zc(fdmzk(sOyTnqb-FXEwhNoIdXyy$;M
z)o>GPZg#5Sk*a<N_Y+oW(z3+lD~qB`;%nh<8LDj+doo$SxYUEos45$6tSrBW_pC{O
zzY-P?wuAlkgS$HHL-MQJ0H`WgSx`VcU>3X8s7^|plu4sAKM~1KTVZ}?G$dPml$Qcg
zLIMqkx)$n0+Ye3V3qEc5Ft|v}tXSSsj`aGR(F&de9Zfk0<NEt;g?1K}M+6N8f6e-q
zgBghYgLcIQWj8#}9RyV=5^cW`O)@2nI-?B`1-2WtJhP>GqvFGsY4i1M2JGh*`mnNF
zta(jilQ~mTmov}sQ+6%Y4*P*|6j2(5CgKcp>%@FBH*i&pSG!dfwxPqTt+ge5$G4v1
zD|m`IMgFMveD?G6V_*-QY2jir*jOmy1$X62rM1s1mGMa=2hkgUlmEaOF(L~`8M8GR
z<yzr0khKEtu2uvMvi&y4E67xlPYF4S<ieLDuYnc3;K)a|dCno=CaQoj^F&Y;YsqwQ
z>>7L0?kXy%j@c9`j4+!7;|$bmw266qbXy8gfdz+nIfl^7)}wxT<IKWOFIEPJqz;GZ
zvl4RI|GmN}McR%m4h~_Gm_PBzX*gRN<bVata{tQAi<xLD<c4nPb>p<E<+>M<YZLvL
z8aPQh^U+H=@a>nRQD@2`MIUnLSL-f^KGB{ub@7X(+pK3VKDV@^>NY+VV+ks<6+3bA
zd6h!Dq;w`&zx$<r*@f~bLXsB#gHPE39HY7_-EZAECb&T{cP;jJ$CeO;KkDO0v{_3i
ztQi$l{0Q!^(oL;MS}h~vJ|lmhJr%N~n?S&hIG}mF9vG_yZdDq0Oz|zUevZy)%uFke
zpd1?uHY*S;Bq1sLETX`~*e#dvf1w0zRs{FiLctUqS3Il`5C#p|o%e&^+ayo+O@7Y&
zi_ws-^J$+_d8!1~(PbN=q@XTuYjA6{GQonmO2Dtos#G*WNJgDyUZj!lie<aCfP5In
z0EmkrMRB8zPSs)dj~YM;QZc`v+g>+)QV^k{3T?X**my#9G*ys=0kyhl!zQNGR{f$?
z{jcu_uvTw(<<rKC?blU~9ri0)oO*QiBpuE{N9@47EL9^QbCl;$B9^4Lsj#oITxv5Z
z3WnOi-a3X*&$R6<CrXp+{&rLKCtDV4{{ynF2pA(UYqnFu`0CX8LK-%6^Ry?25w9`L
zBa#70#+g8*%+3acMdU#{-u*SPu!|@TF=yZk?>xrUkUL>Jl+(~X?1n@2H(%_@W`p}v
z2fJ{DSJ7;VQPEU-)qSWkaulYyZgOSr9$WL$4SAl@a72djKq@b|OO1u5VI!q*)r!^-
z*uH3LCpB85a_~}kRjMV#wb4mIj>c1qpYpK`uN%6PHg4_uZZ+6ptcxDYOw}18_~7_R
zMe9N3#2R*b^OEf3yeMFF6(V=}gTS?~a>zY}23=PuX-aI>nHA!4d}<(Dv4Y3=D1_g7
zrzU7HyV&CdM~>uMiOfw-qb^6scs}{5#ZfW3rX~h+<eutM^IcZ`rh_7fp?WJtaCOs)
z=4Xj_VI}+H;6kZ=n+SWcM@&O;<3!iow*6Y14SU4t^VNs7AfV|gWhv7cJ@x#KQr6=}
zb|1!mezCCgDg3D6`QzgmfxWhGq#DLZUhIzCxUujBJG#Zq0-ki?g%%>UfHX>%dml5#
z?N`Gy9vT)#6k7WZ_NfY<eeyMr$4MfE3c)MQYTeLt`9$otlExokYD)KNVc?QClDtOI
z`u7ld`iJ*+O<v(A+nX6tU*^Y&i+*6XmvxtDT$aH;o}ouHM-VN&ZW>~HUwi|o4cp1e
z(%D>#6maTzw&ageUD{1i>ay8)XwdBKAmrAZFsLkBP(-vVk5yD_=H506v>tU|M;D8l
zJPZi&5I-JC&x^yc6n-}uk*aXrN9fn47BmbdVe$yls#>m2ycPH?JEubRz6r^c3f9>!
zW;o*t#BfRWqvE<k#8Jwi(P%T1r;2RqD*8P=jS>v>iSw*(nyR?)B9rL`BM3vJux!3!
z-%^}F$&7(ZUO99W0+{uVLxPFd*V_WtStb6kn7y1Yof*P{M_zNGLX8uP8HzE4)gwC&
zR!TkjSQJwrVh1xJttr*MXzy}gZr9=^oK*-9JY$Z{+}E<yjNDU@_%!{(!&(OkQI>aU
zCWYSbaW$go6+EDss*sC0MC63x)B&l$GN_t=Tz$vXX>x%l1WKS(#D-^sy{<!Ls!_&^
z^MZgCp%<EArJih*{$>g)JpW42OSLdYF#x^;5xr-D%=bY|wcqXimh2fohn`Rr2YV`e
zV)St6FGDVr#L)hLyp-=0UOZLH+*_45tsuA*l&Qk%2)SJMfkn;<b}_iaMesSQ89Hz>
zBaUXILo0oAw*3`SM|U+l*HW#^sahFKg8b_(v_TD78>WT%Ph>KRl9%P|QzOR6@DeFE
zD4%QGBFrP|_rN_}r3@P&{w2eIt!jzHfU~(@8H<w&Jlfbn<umA$rHCWnkY2!YhBb!B
z>^??~RP6PQ;Eb|dw|JaeiV0yDnTYJnu)bm5ejE{zXj3>wV)X=+Udr%b6MD*1c@X?l
zh&3TGr*NX4!pWf5_@YbTGehTzd|lm-!Jb2PQel*`|7cm%C%e(qvcrM+s{+axGQ~K`
zzW-dbW5ALPDmAUtoT*?mR7%ixz$|m__C#!j1r-fV8l5&%g@#shNg+tx$Bj6a!?4@f
zO&Bwq`<&Q2Z>H^2A5w^Cc@Ii5<TZx?7A|tV5cg%U9{s$gZ9=}DDR>^1ktf61?pk9c
zBVTOGH1gfCF%=UfA{}46kQd9~A7JuU)HU&*ZXx!3dyaxWN0&YIDlq2^lV)aQ7}l>f
zUS?a7e1)laRY&!kQXTt<%9eENvIO{VWVVC+Cf>pWc<i(6-|8T$ewgdj-tinnvS`n(
zFp2@3kcaUsnDMiQSh90GjxAfbt3pQ1Sr<m^uj{P8F7T6FnS$Y&PM%dZQM}ijx9&v;
zdl~B;MxC%$AG=QzK`Y=RelEMt0$>}kfS7Ga|4bT7iV`40-D2)m*gl*EK-WBo$Fd-C
zepW_AgKkn+6cwB00IwKKr%3elQEbQ7{mqA*`CKqI-rBJu9-L&`qN8~-#5;!f@d>bG
z1UYEOxt}e-&OJc6j};E&ahHJIwk5_r&ACk#kY#Yt8**87(#0JIW)~x_2mvc@whu`0
z=u0E$E$4#F(_tyBLbAr{5VL$sHlOKHL|D>T+`O}Zb^hkYYbRJ{8U!}_r+?coFU<cY
zmKmp*|KxD&hH5NGwV=naiz(c;<Hy#;cwe?oj}&nzA{n`2C1o1;=wS#Vd#FbumL8bD
zJ7_ekKR7jFkRv{nnFa+#_Qw@k9D6j~4W-3>Q$*ouhcg@>?#eu&(CUs$Imum}MD|-j
zI`;GR=9H@z8oa~z$3#}-gBx@2^Ls;)2r#9m)TU;m69S<%>IT}zlBR}1mXm40<k9`B
zgGqmX;(#KMv=yy}$nSOB<g{lDNHVoN)ETS$=)~_T0tG+W&9Cx4R<{o>)BF_C{I(@w
zdQ?>4SP=SnAXuWwh&3}Y67JZoR?K|}^KDK+gIoIa4_jwJki`r~b8ne?&hI3Ln!P|;
z;ev<*-SKF$F5W+-Leet+s=ti8MsQH{8HJRVnw)#b>C2Kkl#@nDSZc5z&AZ1G)Tp?^
zhV+RoHFQU+kzy19KI$nKkxXYjJ<lMkohZzZZ7hNK0dX%|^TGuPa3Nn2WiI<8bux5B
zI<!<}?{&c{sXLEBB3kvAHZQsoD`Z9<C(O_PNn&uR8=U?9b51>OvP1O*75Rz!??O;>
zJd<9vCVS4<g>F*F&~swb&JWGVm1_&fMhyB~k-3yYAg%t*<>ISLx%DY!+gC7Ndzj9o
z8(DKm8)LM>q-I$hwN>g9SPlzHf(y7pCPd-4PVciTW3Y!uwTG}JHR*%Ls~>+!???Uu
zv(ctgprO;un1f0Zi?<ymaL%dOIGM4Up!}p>zS61coPTynV4SzY>&e$Z5UkKY_%?R$
z=w9ys;u81Cyqf>|xsHyrE78DOy`-p4Hi!Q`4gWGwy;)ptgtJQ9rl(SBs-kQ!Ob7(l
zX9KSte&!9Kb%O6p%oS2DxSakr0nYpluR4XG%N6zk-{yq(kt*wEvs=g83B>dY*d3KM
zS;IUHLtSAHB#vfEFK%~#FSE(b?@ZI+%{_#rjB;|eLhGb*jR0R@|NBCAI&p+-Je!B%
zI^}RNZe6%7RMbS~1#Rh5J%7RBsa1NFW#L@cc#%C7ac5zmdw>-Tn;~0R=HaCp;~;LH
zY$ztGX<`elnp1Hx#GLrq%%DF=9jWYwNL>X~e+1neXL|}+961#0V%FR%cwpL;J?ViJ
zO%TS$3(MtFQ8CtHySc|y`it5`uU}q*<qfL~lA<KR|HY>Rr&_bcaO?1q6<tB^0Uq<<
zn>e)~@+vEED^yR;*b`5&xOQ-Sze3z`<d=~-<|0<aE~d0VDZ)=R0?{J4==RW8WiiF)
zG~U7c$4wU;U$69TyX>q+W$EMlvSWGVLSywt<7he^_?7+U0G<|lVee*=*7jepZPUec
zz9V4q<Xa?!FnSlRjfd63F^-sWYy^c{1w#Xz66(Lh&q~d-9?RiDJDppm=-*qiTfL=$
zG@<fIfoVSw9XQw7^if|$mK$E*r?5Hyk{Lg~qUuq%j<Nst#2{vR8=wO$uzfYuH@~u;
zssXId%U&aYMP$5OJ#wxgZB@-k+2+`AYC*YW%iwhX6WE|Q)6h%Xf&1+-4k%O3ohLeC
zzE3!jEkgW0(A~=ZuqOuFd<GOJ+-*7U^>V)5W8$Fu5NL-7K_G@M&bg5YzatpK?B{77
z!4^jujirw6>z=s|C^7a|deuuVE%uTkJ1ZPW0ZSn_0{X5}rHd*@w~xPh9ZcSK){);7
zf!@D!@Ke%GeeFm39u%Th3RMa};(+yH%n<SVBeLrSqJko^rUp7CI?4hHE6PE+zCW~Q
zyd7U5vS`pQ6eqp$B1Q!CF2qY;^{%RgO!U}+5dO;*25!RkFr~>R*mdTpHMbQp9U7So
z{)m1Bk2d$t<_qkzdLh3(%Rz}%UTWX9Bah6t*pdSqiv$IGW5_C$UerqCz9W?0LWkxu
z9b=4t_6WeRr=jE;|Km5F<gc`@#t@}w-HgQmJcaBx-ya*W*S}?K-ec8VT?=tbKrY{x
zYT7|Ia+O7im6`M;6T^Gc;G?ixPY2-D={%lJM6PRW%VU0?*ceQ(NN|R#oZQtk-_F**
zT>x1tY~0-FQ0{)=aU>|No?tK+QoI*NsANW?f!ay1j?`KZOH|l2(;?>RWyseeSBzNy
zmrRx7cY{SQok&>2XHwrB07qnqx4E@cqRU`-3qX^PV-3@lwM03-igoPa;IIdjTrNKd
z?hat+dqaFFwZp>C522;VB8dFkF{AMd7BlO!o(Um_)bff<h(tq#1_pLY)+=<*`JTM?
zL|Sd#Qz^tjBK>3`QWT59&?t<;RzAZGIaH>z%>v<YgK&rsdUb0<TTCLH?C1})dvgYi
zO}qg0j?<Dm#bf<c&$=nfftA@Cc55^?9qT&-)_`PSEkF8{T``Cr`Fk`6uLqvmNTwjl
zAiibQ+3sG1&{g*m76LI;>b=?B7nNj^1F`WEMxn95mwmV^qQt-Yl*IU<&@2H<`nW)2
z=4cNi(`axF4>AQFy8e|u=?rH!_EHs0+TYxB9S9(m;e0W7xIiJhsZxbK)MeLJY;7Ph
zyn!k`q=9|ycx(C=i+5hYes&Z9e&#Y0F=KQ{5@G6@MObvtUbnI14O;UDY&brCO_%BQ
zbqGyIHnp9yW&qcCGX~SyO8)4x5h*Vq#P#pg=Vy534)V9l)CSncI>fW0L0+8=UjDA2
z5uQRBifr~uhBkL;J)-DYVmt*p_+cwd*0e_*j+d$hj3)-HE1YgDdqyQA8j*SALSB_6
zAEuRK@!?%`c_?F^iQa-aBh0i=3EsM4;gZE*R=8txSuRb39oM0W*B^#=O`R?rW*O>z
ztDv0?pS~=mn!WqiqTMiCS~i(3jAnTEk=n8%JR;VuLYft?FGJJn*jeBvNf@2-Gc+gd
znT-679!L+peBF^QDLDLcENgh;C-tU!&!<@b?B_5dIgCTi25QwQ0wfnWcXh<lPV4p9
zK;re_#>lf0d{5SKtgf`t^S8&^q{3~UkXnnPL#MZ|ZppuiGSknfWwOC^bh5TZV8G93
z;v;e^#pb4H=$Am#)wnT^lHT!9CSmWL4=FKV_3(1UcD4+W)4Ja1zvXhYCDbkP!9Sux
zkZ-^tdn+d=RkYwn#z9Wlb*o>FpM^MCFDX1s=U+`ftLZaGJk;!0wjo+&NKT`)nZ$PU
zw62#+Or5Q!&O7Dv{qkfc^>vfJ#`iTfL!FxeE~HA}ghdgO0gRBE5$^pB71m(Kd}?jh
z#Df*&=8*`}n2Hpx+rpmFlEJd9l$T6%12xZmzu`8<m*icyF?~ggu<Kf!%y99YX#o!9
zQ96!X`Qy=6X%T-LOwEW5CU4LS8<sj+M@fA*SwIZ#BasK-&#h1cx;0UlX10zPE8k-%
zC!H#08n2fzj#ZmQ#8o_>gZkA<f`gV`?45)7tve12uD<Ii)GPN7S(f0?4f>GL=mKJd
z8lqxbNrn3sug;+3_fD)Ozm-_DoxYARe+l{YqBXc*l~uP!#f6DorxJHiV@!B^|6=EY
zjC+OxcZ@4e0fDzT;tP**#R=xasdBAbf^x1V2t2-0P1)<3Pkmw1VweqQf92|<0w`u=
zGXgJbvwWH}e|5z<o;J6so=SgIlp8Md<6tg$w?p(=0G)e>l}mu8vz4W}>!s2xaVYwy
z&G&f8GpNj?x}}p%G*3@N-XPCQ;FUXQ&h<8?G4(rj$HgUkL#7I84n?t0{}d51C%c8Y
zQN31gIU{T+^*m>kvo@}e4EI*8FA0)cl_)dw7WUs{`L*ZEdFKV*_gpjC+C20EUQldt
z39{V^F1Zw7zDSDJq|v&;KhRgZ^Gnol%e1sQA{`%9pumT_9sf%2Is=R?4iBf23dluJ
zYPI)*H4K#fI!wfV%xqql^|cod7e!sJB^!G}@HBZEvee{9VsumtFcec7U&~B#<SgQ%
z>WW^jxkA?klj=m0jHtP0?OU6-aoDATtd`~qKb$vd!|N^Uxb-MsxMK&~2>Jhz_KadK
zy4!U{GZa|G;UgHsK<1jGhzd<{{;2Fuqst|ptCQynhNWXCh)#i;mFu7z(w`MN>l7zB
z#$^ggv<b74+6mBBof?->id!)11+v2uVN-T!uSt4B>CoeBu8~=}5OHe7FAPiRhr<k&
z&+o(CxwVkyN7-_W-FZJrlT_m=USe*1Ux<sCf{EP_(ctfIC1KfO{KSjmL>VsCgyc$G
zRif@r64?E#BCapY*;tOVJ(0Q!G};<@rFN@>u48SQ`;hh&x~<Msd5U#NI5LrlgL)l3
z*I?r|j5UDbIOF?#sBXVEV59{bp>H*s%|1wblmFv3H=GXB8|;~TCiHXK6QKBYS8j+*
zte#VKQk7g2xTtEd_b3bpBY$l*bMDPHCRXbc8-AMVu9zBm%wV<AMYprKv%H3($0!Em
zvV{sWmaASbJ5Y!tdu$Znxu1>^?#jYHxmmO078C!)#rZD;m+_rHZo3PwQMzK^u)?Ay
z;vYH%UNm95|AtF6`fX{&tN3?g<(L=gkd$H%`>Mr>XoCFkwh|GA(<!zr#V!PC53zl-
zHY<fnq96Zv_8QUBctW@g<d3cQKfrLXF(#}C2yxMXKE+^zYnFNe?lRoom*}B0KCKpy
z7B*IX{T^`(wy=lDR*G2nkhFyUQ`B+l@!E)MRn50pP28|ilv9jcGlmwGAWy4Mm6vG*
zj&~j$dslyWZi-h{m79i<7rjSJZo{iwVqtD&uI4134i)}(;s!?bHNnC=^vGCb9R^ed
zi~^ZZ3=r1GWL4}DRIFC-k``j^ghF-Xx^O-CP8!r@e-25Cuv$zb+&-8sU)aMUQJtd0
z8y+8uD1M?Vb@+7G;veM&V8!t|X%DHtS%X2|f^iO^J6FA)9-i(1MU}o+nKWPFIQN%c
zjyaN|B#(Rl?!MuZ!TfCQ{l4mdo?nNwYWscv__uz{$iov}y+zpp3VCZFh+XFMe*Yf|
zB%|qxmOpCIOF2|gFWVam2;QpwXh7;4ZPQ%5GPo*&9v?(Soo>A6x@^3Ezf|<@U@LrR
zs38~_KMBCQ=T8C6_w*h1P#H*~!6>8*8H50vKe>A82&#_kSTMkBLvrh`Tq6z1b^E7R
z9bElzSkeINxT)xbDGq>1FG+ZnBq;~GBoMcvKIF0_V*Y`*icHfO;q`3rlB7L=fi%9!
zr=yHFCjr?g_dvQlV6ko!3rZ^Zzibe|(Y+cJ*~u^vg5F-kb52O0S%;+{f4M;Da@Lla
zTZ!L(x*1XB>?(cJ7^)5^5rUwZ8v30=XQ}U@sWcD^k&CG?V1SL?Q{HY*BaDwL|FIJ{
z7z$+^g*_%7dv7`b@}Xw)r>l<FL;_UjGK;t+O_V%1g(qLW1Mg2%W8U8teBtM~JRr*y
zGfZ~@HRA7>&lqx!AE*X6I@^OlBkl?pYQQE6;5zPXVs4o8u@uU4Ncc;!2*930qJ)pO
zgTD}z*+r?OeO$Clb}R|W0*Liu24uj1iUx^YFTGUy*^U`>5T8Ucr~-ZU-lAOwu1BP3
ze!^othEjw_dlCVF1N<vA&@6n0;PIz%%}=y$5kh<(1(Y+F!bo6F1{&aHyIsP{iIH<1
zXjmULoY56&BoL7bX2^779^Y)7I_eb1or$0r8%5VQB@?-a8b320)MXloK}FX6TiIl_
z`S!eCLiCAKW4M1Wkp|TggO;yWy+dp#Q3Ta{*(3=)39QMzJb99?juKw4O0$L|d8Dn#
z97Li{0;y;NSLd9f!qkn#bJb_!%~LlDbY{?Q;Jel<F%mu9DI-tu1AUfDfPu|D`;*gA
zcZe;9NhAO$QPYI=eS5)w|Ix>;d);N~fVU>W>UlV*;iKW!5y2GTORVj*;<*Mx4#5q#
zH`#;C6#mHuATnGNh8zipe~-9)=(F+`(Q!;X5Zex1y1jMTwS#kM<hWb{&so}}X9avq
zdKEuO-^H8ped#w~UaCEf!pBu$MZrA(z+@T=HV6c{gur$#M6loZq=2fZy<jCRQ-Rs*
zq6w13tK7CU^6t{nGTD$|n@Fz(SH`n3*YJuGTcP~=-zEAiRkR`;&+yW~Pif=3ZU@QM
z2QJ2U6lgujq4@#B7y#6*1o@67)}ZfXfzv_JF}i1ApgzE|09I8Qy=9C!h<}?TkTUz7
zG0J$x8RfHR!z7%2|F9|O5J)D3hQHwdWzs_fRc(ep9k-5_u4JL~N|3ClBin*RQiQ|x
z?FF8zC>sBzk5yemll1zJC}yCJ`QAEOn|qSxBKI)x>Dn062@W)?hjeHnIuY&niWwR-
zArBc06z`Bu!cQ9S;$`8>y|%2wFPJV5DbjB}hO63Z@_e^ZR!0H<`|?a>hjE<SbSr2U
zx`h6#I!THUTmwE5!LT<`MGJ&Q>(TWYSw8W|4&~44j#(3C{8?CQ-E-~z7>v(mMOE|O
zDY?Gv+U36=!2i)c{BOt6gPs_k=C7_H>G%GBYaa|;obBlUd;AKICMIb|>8TXUU8f~z
zsOA(Yq-1Ak=p<>SWX2_FYgHwv$7fU(Ru&fI0VB`JgBDLsP^+|@90Hau{v}(To}Cq#
zFM&`=)&OAFglwRcM<y>e56)*Jf!1d%YyV&NCCteA8fPv*fL<;z0OJ3jP~v}FOqX9D
zzSxqE1kvAhWfUGGWCVc-CGD$VS@Y-1wlzz%HO09WwEW*3qWKbP&>*`&5(%^qbvLZj
z9wQGB<iteuh#3hXKqa<uE4ezY;niItV*g#kN8jC@ZjoL?O-+p&uztE|X?_^r4zB=_
z(`r>ij?O>dW%7BUMz5a_jvRJ!d&+j3^mx~NpGM}-)_hv5Pj^F>+cX8k8<v_W6P8Na
zlVqyO)zg*xA89vH>Q8N%wA9K6-#PEzjCN{6Cxw*bCUYu3u8Oqk@}^I3t+F1vu#t(8
zX%A;5Z>s<5&JT;R>QaLYVS0xj&blyBSU+{>_3(eJdtf6WKeJWHkA_ez@fKFdWtDZ|
zBc)$mH00<jSEigQnJMV<Zw=XM(yA;&QT4Rdn9X@Y=%wBufn$chR>mKFrHsDp9elM}
zcb1zxO#t|tZWo&@nJ7|ktu*qc!G>ly!b+*sQT6LOnDV`yd1cD#vhZQg<-mpzlW|iR
zzT=wK^(_>t^UYcPwB*hmO?NrVcI+yL^W9W)GpU%VJazN1gIAoGx4kGlehx<j8N+(z
zj;B1@iT;2O1%hSd$W@gsohz$mfb9sbxykGLcs(8;<+}s-?#B5IRQ?WajnjN5tsSm?
z8n$@)+@E-A;LBIBKVUgLLRQg^95s7dz1O6Ms!j5Pfve-l2JK@}(~X;2IJ|Xfr*Ql|
z<2L7|@D0E+6%bZAs_bDArnx|!K7(wrDSdbwi5gn4(he#6Ll&89px7<4s+;+@dR*{s
z^Z6Zw?8}Ckf21yGKSb1&Gh?x7LGbR^EYHb@jq+od<*lc?bb@|zbFK&DOpnXAogDM;
z8~!1J@>5TQ@aRyy39@{<cYj`w#{WD`Lb5KtvGVu{$kfRG87hp=>bPnNh2g0?<m2u0
z6PGo39>4yv7$<8gl(%>INyO90_^UUe=QnlLhU15WVrLOTp5$jS-eB<<JFAknQpG<I
zih;tfnOGs0Rmn8_iD{Lc<>Ni4a+ARKBLpy|2LBx##YN#;Xj>LqytAmj<gDP`=TP<(
zIQ!`bf!qgH9=9{+3e7sMgY~+>ncwT}&s%$3SDCc5@&0K2G?@<tQR0m;EVS;$$h=D7
z2Ve3qQE71w>96w*2sK>=)<^vlZZmvTsGAY$Uvn?tOq_O5steG|B>E#k@>T;F1yS`$
zj%D?i3Hqkh>}_Td+jhOR`3I1}SXI1n!U%pyx+y~X@DDmGfHmi0!x~#Xf{7@G=2Fu<
zlDCHtNA>uz24^Qt0lzWb#CZI4uTC=9)KLbh*eYG=r$!&S;~?=sz)XNn`#ZmuArtBd
ze!{oRp19U2yH5nqjXBsR;B83f07~93j1MJd@!t2lG=m<1&X`3UJt{(QY~ehu!}69U
zT^^U1;v~5F?QP#swYy4gCL$tr&<Ow*SxxG4$U1tcFtaN-MQ_qz<Dimd5hN_4mo_49
z7R}FOwT4pbZaV++YcpB5UN={VB~2yLY@nEuUxQD92%H)Fm{#DA>^9c&W2rVKn}ROl
zzaGDj$CNi0TwmTSc2oWV7GFs+GpIZcv6f7}jAZD-^RjGTgD9T5tnmaw2fF;8yve$g
z=S@bE)J1Q?K0nnQwKnc}FIku(O4x=q)o1FUPiwY3`pKOg#7Y>aDznfEY&5eBvj`Yl
zQ#sp#hADYto1;hX9__Cq>)64&x&nv_*mqx(m%%o+;73zScerFCaW6Xv1YZK;tZ8}t
z%S`+_+Ktd6L(%L)Z{h6PTr3$-sIQ&qf9UK(5e8dB%eUXJmxj*{9zWHYbdyLh<ju6v
z_Kkl}jALqk-tG$DIBKqoPW8ucqRWmPHT)M9v5L|1ZcvW>j0U3Br$BF4bn_y2{i>Qg
zIe8ibr5f}mCn>wpeMAK<An~i@hhB~fSK_Q#(3>(i)n!tUgUYGCt#<=(buw-QTqxKS
za<aJVY1N;`T;Rn6y4CZrdHScBnf^T$o}&Y5W(S}A03fO1%Uu;T@%W>Kc_{{Ea4t`}
zLOzkB!(KC}%{_6lFbzTv;Cpo^Y54ujja8$EzN8>77GuCsJN3m~5<Ht}&IBa+V(PKj
zZ}zVw{ChmNcGsQp^p7$edG63A%+$vBnH!Pq#lKxwAve{^dEx-NNGc>x&Grla!A$j;
zW9Zs6R$oU@Zk!E>HJo#UfVlRlG)sCb6P#mCPdQNX+HcG5Sza(_p$(+ZMY|a`6n#cG
z_83qw-^)O_0)m7$dywzuyYbbmnY5mnSl>5M-{A|Wr3o=|2n0_b)6ujDJNNr}=}*Pb
zfC%r-%&DDj#vG0!Cr5h*em-Ca{!Wb1m-}1M2hM`>N>Bqj$+`911HYh~ibeDIo6m~_
zP#l_;+mbH>tl8WJf7;X4{6_%U0~Z(FWo~Q+i{7|xX-iVFuh{(MbhYc(SPDAg+FaJs
zF=ya!O6|l!fco@QiWcQ4{pK4rPQcDC8ddCHXFdk^a(@*X^;THs@4O%+=&uZ*K7gC}
zh|pu%J#TBi_pB9VYCHIN<XF|)3KrOT(Gs{RL>1r~1S!HJJie65MEvjMNzj()`uugU
zWmDS=@<UNx-rqu=!D-mzc`7whvEkUg=Pn!WCfbxO802Wug$dxq!YdGxh)o7|;zlN}
zg&C6Zt`S3F<&S|S$Y;2|9jA-I3yg|sBMvHf*cmxJYcx~VL{0ZL&i4rgnq~EdSRw;W
zYAT#`>h=5joV0fi)$2e+zFQ1+$47J=r=dknVTnmU5*rr|9o?jdx#oNA)K}kA)M*qc
z#JZ0=!{4g`mqrno^dm`tDSL@tAQ`g~p)52;n=K8w*U_AbQfia}$KY!S#q6!DIY-}Z
zM)gFPJV<w;^>C|t;fM)PS=M$8b+I0dIB)_<thGRq(fjc<*tpL%c7{!&l$~IE5q~Xv
z<zPZE%^|u@KB|>BqGaX*b7n>hT#?wq&whgLbff!=gbA_u<A!Cb!5Z}4Wk^H0dWOKx
zc4K+3FCJcQ2{<?-PbK(efz|Ol%Xc>M_0LAlrZw79a#R+y(VliErxT=Ps_XAgz0F?r
z&$yx@cK#k82WOSd&bXI9ZoHupTZGZInT{>m`TYwl>xTSOHS0uM7iPz@9JR404;HG^
zk$Bo0Q#CGp6cR}l{_^<#_^>~Jc-UN`5VxOcZ;#Xed3k&3J<Du|ETCB$ndDQ0Iq~;^
z#^DP*ZS9$G){qbJe+JoD5{$AnGi0SId<EFNV|??})p;K1z;E7GcX+m1`pZ8~MXNn9
z;CI~Nsmro|_Q|wB16YCkJw|!8wCL^d7VHDarJr*Qlb4wmH!^xT0E|2W4PTK{6hpID
z{^+9{eF2wGTX@8xYc57V!yQukI&!frBrvHzX2mf|XbzzG>=`tghsU<eA(r5dXiY68
zn2XP;QaLs72MmCPWdZ&Tx3Tw^Xwy}Z5I^2|gAB~E531CjZ!pX2swYIn6VlSM21(XX
zWpl7{qubALWy;B7h06w^0P|%2%<l^Aas3zrS!<94b*4n&HN?LTmI1kY^ERm5>4yHh
zE3O?dI<lbni8(s%9qfnnInM+x*2e{U?(`w)?5ay&RZ^)8yc|8THo>IuKCSh~1l%T@
zQ^((VE5Y{yjRqfn^>n=0jx)49$iGaurb1&Aw5xYsbo3Tn3{%sm1LsYU2k^2jmxVW}
zh}mOBX)GKuHm%uwQjm~BQq>&sEh9=Fnt_%CT`_!`(2+;#K>4am_(+|RToR%Kw=&tS
zCM@8t-u)3<Y*Nm0E!kI5`S&xeZ}OC>Tz}ML`2%C92#vLG$4pk(_AjC=v8gprl3&(O
zN+PGy*Xmm^BA99iaHNn*QbyeaYYUS^`?%r1;z(fe;y}rPL`B#^g-|wKh+_-yn|TgO
zCV>VO(QDp!VZa@L1GsU=(A}+X_okrm`cYhmEq#CN|IS2+bEdZ^CX?V|YF-eID5%ki
zF1NC8kXsM*@bF+EX4Zns(s9ceBWk7+N4&n<-c%Q=^d-Ko^`hiCgyFi5uedm+_f(@V
zcI8qt48~3;=9PKKs+||XEO41@Ivxd#xT5rQUh5M9Z+S(O6F}r=GBZ_6Yu-q0BofP7
z$2YW13dcKnt<P+Nu)RM2j;3`0-S$#nWYcR@InbV-UG>Dn+n;a|tiyOiytXzYhHgs8
z{1$R%P;wT_#)61_T{?th<tj5(b^dm9DvhAWApS9ji2XP;D(q`4RlWWwO}m+w-O6mo
z5U3c~8#(t}b1Kyo)}u$fJd<V>OalIwZgF1FbG2$+zmjKaSKj{wf8_Dkc{Z$-l-X10
zMD3D`b7+Hzg@a)U?ggc!V`N-1GEo*UokuVW`(E}QK;^M~8OK3A{X!^ux~BuXVFK9F
zMdAhVr3$t<_iwWB9v?wloSUX%@CF6u8UZyDCs0p;O`v_4JeT8Cg{kMQ6n^iq@T|Gv
z$0l=fHC(1)$B1Wa<MWZ2nVfiwQPgE_CutGv9@CMsDKr>UnUrw<2UF>Jd!1Q;cbv}%
zaR}bQ!=`Jz;)VlW+E$_rZWx<vfb7%pGzBfRz$?S&);t6GSgV8T?xrVG&iWXK42&N-
z0Kyl%y4h0oigJaBtKjCfOSHy(5ry3``vo4f)G~6lS74kA^-hi?rImgBssY0gyKMGe
zwA?QVpF=_q+0-c4>Leaw^lrnam?S04)aK?y$ZWlk6t$6+O$M(Tmt4T>fV?Uf5hZ}!
z`pZ_@M<{1T?dh^m^9A7CV<MF_w`P-?VsDPW>Q6v>3NS@<3AA=_w6s@4Sr1(DM3)zh
zGdj978u*$Qe~wNfZmy>5s(b@3+?J5p<ZPb7ch7GtiS#-r<Km%IqBIkujmOGLL(8)w
zKTI0cPG`?t&@cczZb3MOBhTo>HAlrpP46G^Uj61_!6RE=t8on+_DnOGo=lddkh?X}
z38&6{EQl_fwranMM|GD8*Jv2+yy<=07h7_PmTb*6K#+!$?SxJ4Q3PF=j7MI5qbdRM
z$X$Z(ygyO<_9*v7angS-HT%+gxiQLd(%lBfHPBU*+h+uZCUwa4Q<3+Oigop8!YF}o
z*+-dxpuGtO2)A^Z$8n<syufh-&$7G-w+<jKsYo=;?e)rr7;_L|{Obt*NJtvp$Yu2{
zNm5CI2VWn1tWlo1;OXUD`o3ES<I<OpnbdDpwh+jeV_;?wI#IV$AKdBFHTkm6)&a{*
zdr4b0^5snPt0t|asX7^cCq7zt0IW7p&BA~0m6>tWb-uMxC!CpR%ysQG;Q8HSos?G&
z*S((bEnK3<8R<tRG?~}eOi=G&eP6Dx6Ors<E=3c=-xytbfXsq=t2afI8}#7{c5^S!
zh9tCgLlJA%Ra5spb*g>t*GBJ#yv1{=dMQ0wu40EKP`7d!Ub@S~4p`0Ycl;F%Y+dqZ
zq^b?mFTeu;QIAt}AeD|gsapEPp-N(;N0yMUXG5cI)1E?P;G(*kt)GHzG6x&F%TEuD
zxw^Sm(Yh3In}k=_j@WoL1mX7Pc*citBoq9g2k6iV{L?7tr2pVIJEbCp!A@JQO=@nf
zgn~CRYIMAu<f(xtAE5OoVKE^-P~-MfNS@@v{oawSVq|IFqG42Xhbu^uO+Sv_qclf-
zHL5jK_<)45??s`A{A23@S`$8UJ=<pQb|5GYYD%y6!~Q!17!ey~W8*V2FpMNuqZaay
z^I|BywuLrgC3JIg)X?MmRwa(#C9V3Y!;$g!k@Tr?UwT`6sYUodSK)I`ZxGgp=67Gd
zihe-`o{>EJvVs{cNFjyQmW!aGtWKAQ69IXFSA&Lsa^7E<9zfSL_l)F2ZOLp*tH<>j
zY#VCZ@%y3G#`(?V(WG$TYL>{8GiyrI_Q)1rtKk{=tp8XDmgw`kCmdFbEF|IQbWeeo
zta)3ukBwoZo1yvd7F%Utq3+l(2or|Ozn*;?zZ-Buk>CvG1svFeSf#%@$7AceB5fdp
zG@THt1JzGHI4#ftIe|Ab9r3;CEO{iLnmkV72Z$`-A8-}<+bh$4H2)!rJcX4|=3m+W
z1*Hd8f2FhU9@5eYRZH8_q9kG$pr7tXlG+@CB_Dkj&|Awmen7v<jpK+io*}?7-ldD!
z?K8Nv2dOD$aJR?gGX&4S>p{-gk4zbM7?fI(KJ;E1j0iegr>hWBgTYyc5;C@r@xRyc
zBCN^K)u*tGo++H{C+2F-kIXQI_vk?V6K}p#!mx4o^WHgA@LZp}3FG&|$<hD{0{~3^
z4YZJ()jN#v*;budRzHv$T$=tW$cB>-!|C6fx4~(c@DYF=h(PW&Ii^`!gm^O*kv|v|
z%HQ>xMt-CB{Wdf=f#2ivHZbvm59E-pDDG`ezP+Amr`zjAsd?Vme{qbdJHIw(eoZCa
zi4l4Y*z0#}m|2n*Wn{gNadF@GR}i>dS8234FV@o<9oztBL+wL<L;6%NMS6da-t6AG
zm8D5Q{c&RSCzf{;fU~bD#)R{frw1z!6VFZ*GtsvGZ|7Nhr=z!U@1fZw;QXH&99lS>
zRrJL}#2jq51^RLBt|6_{o~LoS9upY7Vs0UxJuhr`KzYUv0FD=VL&vhPDL{9#xS2{w
z0z;8kAtHF(-%WBbWYjZzbtR3#VLZ1s&0S0}OCrDHp+{0S?Y({k9O8rGEy0K%#|<Lz
zyn{eGaxT4n;x10pJKohOMCfdfx`QhR&YYq_ERaZyAR;b&*tMzuYC?}?!G#;#(;>j{
zvKWfU4T^N<lrX%jOn=6-0H5bJ;tPpror<iq;rblZ4k4Gd!($4hb$8yQ2zs?`P6CtI
z)s&J_cNaz3XkvfLu0*ouHF}D;`O(h0y(4l%m)(VFyO6z}=L#CZX*jQNNIm>n*=~=v
zapBAtq0av126swf7ossEj%6E9mAo47SghpQML({BOeo%(0k=|oSt~^CzEvo%Al9Ua
zu&DzpRN<gNck3!I5}z3VUaaY%<nMX|3SWP35BTY?%SgrcVtXYrE(%-6z)DsFAL%{{
z6;<YalBO-;2T}7WM}RxVvvU9}iih?ayNqwcU<{fZl5eHPS`G&La??m)5+$;!oG+y{
zwQ+Li^2mUfuYn!Po@paGG=vHa5zrKw=~}MYdQl(K+$b7By(Tq!%Ai0<J&sRI22kC`
z)@azKlqOed{JkgQPY1U2^IHevsoREtI)L?sjMq>D`DWt2&1bk_tm^2ae>N;VG*m`u
zplr;=^@Qnz#u2X3u=2yj(HQ*061U2nFg*znW_$WJ5R6^1d>r(<;o!B(gM8k5&yKx}
zQkpZ!oCR|BsSc;^Ljudp`PiTYcI<WBrs@QW#Mi2M&OLmL&_FDi&L{+_s2ewd7sv3B
zg;~FZ>82|0^S{n)(PZjUGWziDE^u-v{2hN)#a`-VSMNEatWLG0&b#w*e6Qo1Qzsit
z_#3`6z!g}9TTjH&3KhVF)oz#EL?RYgipIi>;VXr%@N+O&<3sR&v{0~F77_A>s<={K
z?|d)gxh<L^TXh?K4Feg<$2q@*{F-3FQB5jUW(E6&@cOHJWoN>UT%%L053)Md&#m<7
zwdDxinPG%uX{WaZ$c}fG<{7^;x00ac<+svh<gV|MM7ZiMZRUPjRH+Hgtl?s=8Z-Pm
z8J&Ci#FI;A9VG6MA=ojuKXPQQk%i)Rg}W-!Vwc%OozR_Lf9Q8)=;bcfph==7?Vzbt
zr_>4sL)vFzaBeHCO}l%&b{4_Lm%7^is9`K4Y}jxDPsu->Tl+Q?((fq64FQ2ug@cd}
z?86R=(O4@KI<hg2Tu{1avRiVO+w1zWh^GryCLqCtMy`1u;oD3W8gO%O^iJ?JFI?eZ
zCeBt@4dV_D?`lt}iY_ul(3D2{E@$x05M4<F6C?As1rqm%^Sc!*5mGQcTh0{gp2K?n
z7M7-LAmmiz@xek6`=*|dH;0LFnNCN96oEx|rR{OuJXGbg7d=4Tw$f&{N+!i`ouUq@
zU>wt!nH~89-nd}wyKVh1T!6KyfmwbF3R?hE9e`LS03=D|GCVJ!l2ZUuSAq^v%MVjv
z{!f7VrU0|l>UKL*CRXgL1FGw=wB$NOKpJ~Db|*1s2UIn_TS{MCHQUW9>i!j4l`9rc
z6RGEEJzQ5xJqAp%No>P06-U#JM}oTmVTyJnTg|Sh!-L}mbpRP4SgbJgd95#&O9(Bt
z0MK}adIMFMt`w@z*!9?D(PWF)H&H1bGzk3rJBI_((PoGsliQr>YwyKO_t&5AY+>#U
zw*z6d;YZXCjv7~h&l@xC{t-nzR}7pha0uDx<|5OTcj6|d*!IrULtNj%{DL)PP()#r
zmS-Tl3@5J+E9;2__beKP14tzMu4!p1p>#~tfcE9UZm}b~uUP8?Z7uWfL_3DAR%qJe
zp=zQ;qNg%#wCS}8kC!Ixx;<^0f&j+E<Y&}Kf!KE*rez*Q9)cH4zK!9Df7;B+4p+4z
zx4f+=vN*eC2Ga$!!+1gB)-qDNqk}!X73In6u;=4mAqnl?3*HZ*Y#IN-KDYYeHtdyd
zTsJ_rRR7&~zMtL^1DSZAmyS9K*lS;Rz@dpqBgvGo+-Wq0ZfGb>&@5C_6PS5hQeO0c
z6B-c2yuQ8`UzLtU`qqXBf*<r<Ic{Ve=JjaQvhXbHv)flPuxntnpc#1(eX27?5@Owa
zc0cKP3{)$vV>7eqCS`7Ek>%8Z?+;gNPhC1)r8BWU$BW^(<sRmRE%qG~ydkcgZfR?R
zn#jjWt1}C#ixs3#D*SA^Kj+RLNXa!iD?kL3-l6#7t|bpUooX5AtT{m~pDIpcYx`4J
zfC~00=##irFg<j}NEev25L@1GX+Niu*3&7zh)I3{{7y6=t9g-s7ve{=a>&>#k{M9v
zs67rGW<$h&l3ZZCUP;G6at*>6Z0cH$*U+Pv4f)+4Dj@jG7&fgf$TqizJ%~kUV#8sJ
zP{@YUrhH?E6<)5Vr-lui51Om<&7jwv-EB*Tp!kKeeNTqqf?ENNg9F>JI^t>f4-yCC
z3?72R`x^}Us*YutrU^%2*Kh$arUUNWFv~P}dk8(oR+S(Ys<>nMwP}s=WNYd+-T5&)
zLOU~#!-~Bsz>m4E!5n|cTVUIhjpHXV=|+rUDR!{LeuLFD1sC%e%LpCqr<jLLi_AGF
z6;UBsO3V2A90gv^py8%Nep6#B6?!=JE*7aYH33uE(%wRn&y4*5zaEf7`~hob@scj+
z>S#|w24z1G(e$*Q#5;j=y@1(Ng4hy73uimMnoo2=n`LPbI3AxZcASgBG^D>4Cq$>N
zpkAwHm!OgJoppH*OPtZ!wsBgWI0~qfYIftF?S!Fj98INr5V)QhWM{U6USnu!Wos$e
zP^$%^ubv&~-V`+Lk7xyf98yRX&+Y1k8+n|J{ECBoYYDcLzOj_2%jY6-QA8-ZDLu4=
zOKo@GDz?$fHBz#$yUDSt5v{GmBp{ahXXK3V^lugH>bqRpnr!P!6KTL^lC*6sxcPbS
zK>8qsdt8Z|`72vo$z3)gM+~qclbs@hD*Yak*#xnGB^iiHGhHO<ANyw>cRuQKx5!Uk
zNM2%l$d|&mLiDS+%Uc&9>F9t*FclW89cj0UDwFUI?^i=v+vX+ps~G^i(tBKu##$_>
zNK%=Vgv&nkf<M4Baz}fpc~q^!avAK05AVnJVuSRVOt5WDCA8b@;&aRu4mm%x!#Zc^
zpdD#Mu@uga1Y?3}2hWf1LBX=Fi=$U&h6?GkO2AODU6KEJFlj!y*tCa`BcOBlsE4_^
zR&INIwE6rFw;9q)XLIS*ybTEf1+T|}>O*R}_(a@OA-WxG@3DAB7J*h`I6Mf&KJD1+
z+SaH8-4UUWieSeY|Gw}WJQ(awGsggB+I}@bfE)MVpbai`LMWSAZAFsNw<GQwofO8Q
zsOrt20r1O4CI&z5Y$MrnRIclxv|=+L5lw@^&K&ep(%GZz?(W29RQ)0pC6MxSJr~EM
zL~jDLFx86`*{W1ag0V9GxtYPR7OP7_S|W72f)%2rX8e@Aq8DC@I$gMcoec(XnT|VC
zQHrGKbPOE59m|~Kt9B%pl?tld8{OfBh;|Z&XiQ)EttpU})^P`tg>p|0GQ3lE{FyZz
zVdLj=Dv=h~QNYDRWB1HNvHTG0;u_&8lSk`|^fD-e)eV09A1I-H1sFMOARdq?;yYJB
zR&b(9u%=l|`;V+!0V0UHoj6f_c2Ob&shwn9p;@6-E$EvsO*fRZy@iAVW+REBv6Rpk
z&?1vp`eG<q%XW+b@O4u1zR7AwLT_&-eyd1q>=VOy!$6MU=mlcdEH-%rjF-z-&u2an
z71xWbiqsg*lRUkvES(K#j*?@hDt3WGlckr6MFD0ZG?_me(^X4DT!ycPnPFI%GrrBo
z?|MjxGf&3on-ZItDwP5E^;mZvCn1Y>-GedI4jX&f;UrAZf!tS0T}q%3y9v1Gp<2;3
zwPnwX7$_G0)}54NdjtEE_VVx0MqnJKDGX2RBee**w3XMu*4TIp<W-j*bTahXv($!y
zMa8BnF`=QbmMNs4UCuXshSQuSQf33tRtWeSB7`_`mz`8!?_whYWHee`(#uw{ub~9c
zKH{F+=J=D{iTyr9cXS?H^4_=a=lKJ*C;WE8W3cU*nj2kRlz%_2aNh)U<9>0ovY5xT
zyjb3^{|j9}qQ7tzGtB)`8fP*TG26_{R0CDnzq(J6IrxQfGJylJkw4k)-sQ<Wcon<7
z;h!|A52tHPyR>$DX4IXwWz-~NXEm%R@z!0l-P0Ys$>`e9(#e`~<!YT&q3yu2%HZQ!
zWF&IGF2PmKa@9nrfZZPLeP@26)}=@<3@mdFZ|#7@E0>rxfxU`<9Jn4*Imo*XWxa~v
zG$l@->~svMN=|!v<b~KZQ1}H>NW@%p%&%d@WY<))Wg2i)DnW+LjIZzx>(56S9sIAq
z`^-AH`3@4E|5aX3w$7k1y0dV)lC{G{<j@?32b;J0n$}qfMrIInJ{RiVi+K#r)YLez
zUNHBFk0I^k&MFq{jO^BhfcVb&&Rd8fzymkvz%OY;zV?=%3HU9)f-p>U8?kn|#{!m4
znyUJx>Lt5?x(&OaEv9XxOK|Lp#fY_-!!&L+6y;^U^;fl9@}<A}2%I~=`y3#Fm_eH|
zru9q(KWZpraZjWEkbU?VU_LnU-JIoFcOKM*5BbH?IZ?n@Kilt@?_-Sbc1!chXmc`v
z`yJyOiy+Yc!O+2D&X{Cz;+?A0CHgFnr|J5w*^=rgUE)c@?TS15_LLyHJh*O-v*ZI1
z2nk0z7Kbc2vBPmTj4spo)U)yQVp4Ir&N=93qY4*y6A03<0aiqW6o6r$90lY(w~n2{
z6G>vxY9sXf+6lPWS-addmqgx=a;RU{^NZ#5`dx%Q1*e*zlr%}E;UQJL|2Xo4puc`e
zAj*Xp9GF&SE~*YP!ZiQoWMU0&RgEiKM|LQDE{az5g8NZ80oz|bL*Va}3`lRUlU;j&
zc0WoIS3G-%6jzJ%n8iVzc6Uwpa^@Y@K@aeaZ&`u_!1uc=LUQv7p>E`yBEZyiDZznl
z>9kGpdeVeaK_t@EIRQJLO~&suMX8l0v2Iy4-zr(X&)Ok5D((h-qQ2edY>&=kx{spl
zLSkdQB}C|wQEiiZrDaVyEW7Kajl?C!G>v}E0h#*-$)zwuD}%6cwH$}7iZ7u#VcK1t
zu2Vo6UF+CM2>5Rm=*U6lhTj2NeVSB_XU54hd3sUjC*EpZs3)5#4ph;n5AeSa4<YcA
zbR+Di81O0PLc@G`g`7X4y_a5`+o&?pTZ~fidGK4zRB}%}-YCho8n|&{<wtCJ>Y*kh
z$KAFE7R)(ip?c&8Pzk1<EzRlT7u?nz_(|;)zNp2)jX9jShTpW0OPiXHE3iT1J})!Q
z%@Nf6#VLi;y6=3EHzj{KOelO7yrSF-R_<ZVJ&@q}WQep$@^6_k_vW{~ANR&zcv!_?
zYhqwAf9>oj)+VMt+2Z0KrVaL;^%G_$QvfcH<(zrL!?DvBrVwgbILfwq$*SI5$s;6y
zmGOg&cDmwdC%0Q0ql<)IPj#uK_@I#S1@yo&z5~yrWgp?;Jl-YkR_PnWE68BfC%B$p
zCMJo)<ziZovq<a|xIlBn9k}s2JZ}0e*a8fmyoRsC36M+2q|aWS2{tPabh7?wD0gJR
zW;<Q(ec3T(Z@uJ)4aQd1bm$<3J_;ZS{~Hd607Fpb%6zi(88F#5(4Xe+ONW-};6gtE
z1I{9Fwjv%KDXSCB5`WcnylD`j*%Ymr#(bfK{!pQlJ4=Hu^W+N5R@Q#d4%9me(E1g?
z+TCniWs5}HAunWT&~<>&+I=@GB>}rwJ`S~};WJ0YvkdW>1$daG*L-%1nY0pU%S_yG
zol?fz#rScy+=L8TL5s*B#*ac3JRcQVXQC|^H_nt{*(p*g+OyF%82;|KY*Ges$s)7!
zX#4rd?TYh4Y|km;bbGr^K9pj;nI@i&JP$y<J}y^1-Vd0)u#mS|!&Q|~6ZC*RcM1Mk
zKhElZyQtg)5ZDU$dgh!vh9GE$dXM{Bnw+FNi0E6e3?b)>i&gb~J$qN4FQ(Ny2t26d
zj>s8gM$cSXDv0B4!$Ocdg#|DUu<k8y#}`e5k71X5L=t%n*iU8?=8_%pA=4D!w15Bb
zAOG}^p!4u0J5cmb-F4g;+QvRA11yQsD)J3MuMqrI9xn-y9h?NJUd&f@?SnV8b%(ym
zWht>lu+H3=<{LK9oBE1bnA%J^HD@w0Vr6tn3t$v&GX;+ZT-8PzyETmOP3vCW88nwV
zp`NJ}{%yT_W?G-lo9p*YS+BgJt+~Jq2|kG*1ytdDpD50-)$zw!wPe`<hh{sycf~9>
zfZ0Q)U(o0A6lXtNOsB7#9|3he-<hBzO5#Znp|jCFKhoI3{-$cihAEe)+(rgQl2FCf
z5&_c=6()6$O+4-TL2C-M@!7@f<B0ma&-xk2eg;X}KAh+R*4w#WgFz~F^DtyHNf&ck
zU47YV(x4vM^pi6fOO*n+u*7yBSj)O%w|FdSVsMdS<bogDMl-S{a0YnPfQf%`C);r+
z7Ia!$w%|G9pxny<sghuf@ftIDkAMpfeuNj$LG0MSNfR-mY3yLbew<QM^ukB8bH~xP
z3&s!AREW;f*+FLi^{f?I4X{JAc?_Kx(zPg&N!yUXJqxx_6AM;a-Il0F`nHQ`UCGRY
z*WYia^K$jHY<i|ub4}jWAy-A6Byeh0&TmTuAi&n->n?JbRI^D-{Rc_?=nxA74t!Vr
zG>@luaBQg$^nZ*ObX;5H(yaUi>bguHfpGoG!C`6kSomFD39iYzEtwHw=(bL>0|>7Q
zNcV_!_xyJwFkLJur${=`AQ~d!YYY!E3#miOfG39%`JQrwLI-v`mGE#tSW}>>6TM|l
z3k_u{L9q__mZFFO@q`e}*NqRTvNlY@I@h3eZb2R6qHGWoC2}%4I8>xpLNKC7%1U;M
zPF|9J3OP{;`|+_6xCs))OyFVcam{MEW?dqnFs2ZEN=Y-co)We7cP@7#Tb(CF+GlYV
z7213lL<#;H`aPbcs0bBcv*+{AK@af0PQsakxE!x8%IVW`DXyr<^Y6yV)ZK;3^`gzS
zXLm)t{BGXVznD8<IW?E_$L4S!6*~|5=G1XjfY(0SXAp#167V@hV|vrf7b4d<%cyIU
zmicW1`FkNP?V#W(a7h^O3FFT^d~%L1@iVJ>48T3&C0Bcr<$<X&q_ky5!}NNwh1qbo
zGHfM3+Bdx9S{aRImX2qpy%h^3c9_0Q+6%Q!Bi4maBejLY<e;`~c^%n0^m@~hwOSkv
zgBT|RK3tqiSUDt?)#@n{%Da#CVu6>`V4WhR;phn+D5#p8^4zw^yeF9#oJSf&Z4NY*
zVr5uK-VKP_)!LNo1jv5+vewdVq@2Ta%*{n)c5JgUrypE$=JX5YXom89h>uiy{cLFz
zw_!2xG>$v6a9ffB0c5uJUW$&b^LjFwR$D$PPX;$+4o{Tuww%-#%OuDk^xI=8*uX!D
zQrXs8h5<_&BKbCZmhH(DY~4DGGjprYABI{E@aTA98uh4&WN~g^AF6>ARlsFLZ`ME5
z?$Y}@@{YwE)_I9p&m(4(;ZGL$<)?DNTC-!>RRDm^!DlO({>z*Ur?+6;3T6dgC4&J_
z%$ad&4$lYX{~kt1Hhdxp3GT6%56wvyiXKAI16w4!b>Lib>_>fH+C<yPaZOk5CTh!p
z-<nd`Z>B6}i!Wy<Q*%Flat@-EV2hs(k+N?F16FI}hG&Z{Ywkxa$#3RjHOF)lq%$!^
zfQjAV?|*N=+AT)14S-3Rn2Z#}vM^N;E_;&6&qQYjBwE5u30p>}+1gXnHpTh!*t58r
zd`^7Fe#7@vy<p}u{3me@lHdM0d^>IC7Yj&WCmC$8wH-zKeulvgl49iT1Rd2-9#+D7
z#qKEn3FJy?h99nTA3z?-efv~TR%f}7XBEmm$;ZRi_h^=H3#_}EdQ!;+rDO>)dXA9a
z9<^Z2t)c?%{Nx1FEv9E6tzbPFW#WkNmh0ko%ASu<`P>HZ)X4Cqw#>)XX+3+g`ae}O
zS4P$lddt|I`~uVczWODx9KXhhw+ublIY8-`haOy;KHd*7@_nl@P}`Epcj!Y+YoJ`;
z=f^*1ER;6Az~i1d{#m=iXRh(Nt9;!Wn$V0f@M!MK8-2^IUhn6U^`qbSyM#CVq6l_N
zbA~iu6oklW^{rOV1*4;a$VSp@A3_+k#B_sjkUSu+i4$kF74rSBOTakSu)NAdP*@YM
zXZP2N)w2QP=<1H&aj9gONJXXexY#<_!q*1Go!g>YgMyWU)M&~MF^a^d;dr`*5ZX9$
zkP<XV@lGkS$pTyQEy{ZmZL2gD;RaM7GF+tQS1i{Bw^jTKfr`BKqPN}~V4#i2t}6E5
zPt7Hb^t#O0O2$zID+-qor<zsvgw5S9ax8piJ0zQ20o7moj0!<Dh)?3_;shODXdyL^
zNnAvD$>V_--$FrJ?{nnAHHh88*dgEQ8mF7z<RkQ?_BLyHhw6ZO8J>4>$<PUqzrU-o
zwH|B1`^u#v5}#G25sBej6n1CiX?HrlfXklYN4U>%1(z9cYY%SP8ogdzYx};fJKegp
z!!ph)%>DCCUrbeN9_~(RSmi)!0~JRjhx4J1u~acNDkx_*Eskg2lG~%TObFp4)mBNl
zRT612q1je>>_LTPgnPOD2^ZL^Q3FAX=CXb<68&k!Lb^w_4}5AEg~!cHR<6XP#tUcE
zmEM-k3x4N<Qim8pe0!^jJc2SLxVk02w(CM74M16d269>$r-)^wm&n-FP65gQ;f6>&
z>#dX7rke7kgS<}3cR)51q)ysfWAop$01q(cYwT94IjW#{A=<i6%cXUZd#THDUO;0k
zJ1@?`@d;@n#S5u!b{VoPL3&@a6MAGgxc>;xU}ga6-W9AaNDuZ)Ii+Y!*C5II#p*9r
z?<z1BF&KT5jQ}d`GVLi6(5Hu@bVd}icgpb+3WN}sz-*`uP9V%!PiSgA=Y)^MiJ`+D
z#+x_Il-uC`J_l4k5>ZH4c*yMu$ezjD;*W-t^Aa8m={zlez+W1(a3KMjd?>sd)k6;@
z!1;-%LnY#G2(gts20J7ZhQB00pC?HdZv(yBk?zPF;`IqjBu7skI}dy%+fo3>C1w6i
z1JjO#_j5MPI;cZjc^m?G!xu&*zH1@T<HB(;!+ctF0@PqH;bUl7wI)$P;CamVl$r?t
z5o;h1rpSh%spqy%p;k}pBFdEv32j{pV#TS2^s+Ma3YDpOm2Ic8zT<mJqGby;k7h)@
z2kvVM4STT3bj^>$pc3OlnoAk^3~1<5CPtkIr4);Dft_NqW-guQ@uu#27m3cf;wpKI
z<M@)MvjZ*kYzC1`F&Jg_E=EO?hC7~_^2B)4wlV-+Kc(_C^*cp<YCXUGVHfWL*-y(6
zW&`!XND<3?9J4g2(?=temOz?24?;s`y*lCn5AC$=^)i{%oW(|&>+wszVytL?y~^l$
z+v0l1`h<4fu9divAqM$LTHPl%SaFzVwW>}%5G>BgVnee+k1aYyD{zCzdVQ?XXbE%0
zFyX<S#J|Z!&c=IaLnw#>%Yj9tt7LvCRf5&+C?bE$)}!jsm+Mo0^3RZnG5aer5g~J4
zfh#h}!ZztED4FL+hQC^H?yNQ-C$Z~lBbIK{9(*Ga8v`W#K?nx&*<Q@yza+p8VEqgX
zuV~Y@siBxz+CJ++i#GkMsC7?3A3!S0RI}TbsV1Z7uvv-Gcx+b|TNbt-uxn!gv-C0U
z#lyWW1W)8qoEiYSL`49aj?0$?I}|Ws3eca*QwX8ws!`w6zXkU)mpubUa`;o@1L93a
z*i~kRkj9le?X7%pLNc91c^qsd?M$H%e~V808R<7(s8rsyio+H>C|2`#<z>bbb{_*2
zd7^vFNPZMYNGFr^NJ}eOd>B*91n#5tf`SC^)b+GpUE2*4BLtOHYlbSe?V7FgDYu;g
z_^R(AIZa@#ov4<u$tM-lH-eue#7v#7H@v+ky2%k0NFJ%VZmfqacJ{pk(RxKvIGR)p
zKd;91c{%OvsyAwPWVJSZpf=U~Ea>?2z3S~0e~b2ZmQZ~YKPIYap~L>5NS`Aaoj{U4
z!N}aQcy`IRPCf;&PyEFhv`nRTz)!P7fmf_x@JcTs0A3&1W9B=+-S2k6B?Rr~HyEQi
zJ+8%BIX(H81`V=;ZMY$7_K;|V?Z1HLR_ipSRKohc?|3iWRy*3)n>CT}U<2N1f80nl
z*renh5k+iE=e!m%M?70F*SyTV**oGbHTgXXt(LhkFb$j6AKIcsDlV^{N<lihO1ciB
zii6_i>;#@muj9D;^mGvIlyHB3CNgqJ)kG9A2GQU&r7FP%sTfGk&HAw_AzKl16nyv+
zA5Zo=XtSni?yYozKABc{hyDUTOtUjQMgXwe`{#<DwE2{D!EaZwFwH>vd>wQI={Kt_
z$PG+Mo8mP$?c7~EBDvD)9@eW+`uX=i5tKjDJFrMDsao8=cQ9(A`~HaQDYx0g_7pAw
zyBJMYoKQl)(38?R7{9cxt^8BM0lD)gdeg_-P<Bke;<pw(sEz}4+3j+U+lS}p%Df4!
z1(^AC>rX>#xHsM9Ecn4mI%VI!(srhj_RJ}s2!)ABCc{$KB(5E@bU{eaWm_OLtBJvS
zNu(ej(L*Y6)+Y{3)iA=r@vd`)2I&Teh8M+r<{w`L5$01*t&u`7hKe-<zc@agR=2hU
z$JW1!G5BI$&sJOiDNVQWo%b(oM%oS9BK$^1+E?qXo!d;NuQzS3K>aHkjosYZ&N|W~
z(EywDl?n1gOd!t8m{=J3JdDiidz~GFOI_X{5(RCT9)2^c@H~Dx^z&u7u^gDCWOrwK
zolDEkuo#Ir_;UU5aIi6U`x~P7RwnQoe!Fz^H-=!$@dY6a8u)9Q{`^%@-eP^M1oO?t
z>BW#xsNmSuQ5r?dYfFP0DN4|U+FIPBIaF^QIw-VA8xmlMN2KQTVJE)6d9{yM5WkDs
z4{EZ>&&8E{F}VJ!HrasGt5!qiVcG~>G_KnlU8jbsEiVLZw$?6+0cnsRjj5i3b*l$P
z*;m0F{M!6quK{y3`rV*CINW)*`dhka+-k~<Qd5WM)S5*zwMBDg`m?hwvupX4t(i3o
z|MiXmU)_Y5c@Ig~A=NoZdIo(pLu9}(5GP_flVRQOs=I__7LUKxZdn@P-l(?1PUjrz
z9w0^zy|we>qRy+bhkr!V(2TOvoiR@$_XdVqW&F!{eARlr7-e;=?&(e&mYH~hb^;#+
z!Ssv}!EMnr{r7Kc+loZd)v{H@h|VQyPa(7CbNW1{xLmHYJ4JXqTb*v4`f#%&Mg;C8
z8LZogo99PU^AEWkXX!%NzU*CDqPWFY!!MKtDZVM7#U3!<yDaTuCZU_Q=wUorX*-b%
zW3x|prVffk*i)0ZMS))5!u8(>IIq$Bx7W;9C1r6N*Uk9i{G@8C*|-9ywblG$B|_Ce
z#h*ezL0|SkmXTlaPhq~H@Ixp>XFWcoVdL+g{HWScHLE8O`v{nn1y_l;@2ar++j3HB
zTJE2mtT~?BqYK;i)yf}S<)wT1(<>WrM86I^t)l2NTM^!8zDL2hS3(6F{bB#n5&nEy
ztv*%N%zX=>4LoXWh7W5N<Hc*!O<CNt%Z*Vej{Q#^3Vi?kawv8J7-r%dfnnhO36uIE
zP9X0EEhP@~lUDr$tNz`SSKl7Jd1)Jcz(ybXit&{n!@%e3X9uZgA4Gjaed|W@JF15>
z+QC7iM@7HGdN>WN^C7AecH9p2w5|0Nw%`u+wH^1B33)_dMzIq=4C3MAf)63o5ot-E
z&o55TW*4j5>PaWI{jZ`aEt|2XCymv1^r3nSe5lf*F4zk1$ec|cIye9EidexAbBa~B
zS##g(+01!@<*Jx%yRJ%L54jqfYmJHWzCfqET$JN_cDjL5nZ;T`Ze<qekGp@*`gdp6
zh(~D`>o6*Q|EFEPzsSdK>%p$*$igQ2@lT<qx>X_DtB2nq%W+dLR`W(~k|QbxmGP(`
z+u{93-pttJA&f*(O4ilKCl@HDcf{pi>eX4#BK~=~JlpE)H86YeQ&z2;uD)C@j3oG$
ztUp-}hQ;*av`+Wdv^qu0)pTo-?jaW{#k8sn*Q+Spq|NY}6Z;e0S<w9Kt!eN%z(MyB
zOxy+W#|)!<GBwg}0g8d?yfOb?EM>5;fsILKe>w|M8l7gYd(~-9I#x&JRCbV-n_Ki}
zd`dE|M7+cEa?zuBm0&F$J5uFQV|8xA{?0%G+Ka@-E8oi!@oC>Hr8}9;_}8H;Rfm=P
zAFP~JZ4Ej#IH{*ogk?m~4v)+6N3bcGO`gHZckIQ?4XclcUb?lSC(==IH*4nD@757K
zX~91BbMQNRv-YoTjH0*~D(~Lc|1z6N_5vk{=I)*Rg&cT!FId#AhozylkCj|m>|=vf
z^=x1i{_NH=aFY@HyIb31;rSi29m5)Wg7KgqU6>w~cBC6?8DFoheAB*7Z(6qT&7CzH
z``}P-oHo2s;&IKMP3!T;qGzr;#B^U`+#UKm$1p8>rfs*HpBkYk+IgX`p=QLQc4U>@
z{qDLZ@z{(kv$+@>*}<jI=0=|VD8!FiXK(X2YHRB>V^J`poE5$nlQP?C`Rh@8jSp!J
z!iU-XA5ox37d!V*xhC}*e>h9BTJ3#tp0?oKnq)I!-pBUkZH-|SC}<3bWL(vQQ+Znt
zafKemq<!m!_s+wdw=POFA2GHV>ZID^iv?jzK$66@vY-v1=T@&;)k}<firqR4Sd3=M
zWk`T0BE*dz1K_Q_7O4KMb0F$+W<B-2_SiNlc8Y)Al|G8k_<dr7F2y}WcIg0o0eAG3
z^ezo4fZjj(QF{j75#`F`dd^qWKexA7eo?b}Y4?;3ZD0`ZA8S-GvF>9QBNh{k=eJ5}
zH^_(b4L9vJ)ZEMT<(F=sbvu-FkZUW|q)7+S(x<&>>5UvbT6N|9-Gd*gR67{ztI~3~
z6DMAY(ajj3L8VtV$9v`x7uQNGT>8q1#ZQ{5WLKqI`m&bIxYZESUXa;|@O^ppGzgJB
zc&=ujtbQK4^<TVcJoTmMIp1+xR<n4)XT(o+h;e8JVeUf;asxgYwqsNY4vJmH0T47C
zoS0Vg;652~7OTp&Q1u7JgS0<@;V(G62yA6wpi*Y|ti-vJ8-r1)e4b7iS=y7;#15Rg
zb>MZX1Ftv5PB(u+QC0~T91gf>QRE5`OiJ_b9Kw3>8Y&%pP&)7uQ|emepc{mNveY1@
zuhsl{eO}F$z{=#Qg*66YV8zRw3ws_Y-hX%+Na3IXUOC4{(Qb!#4m0soVNVUq$%)+F
z&!fm|k^JcXy2t09l_lL@nc9?AZ%z^5h)X#qoD3WS-*T1$2luqCWXV<CP>RUyS0NcX
z8I0{>xjdSE3@|jbj)6ZiwlPOyCt>Kc_?`W0ha!m2SdYN$>FS^VLFhnVa<9`LidO=-
z5Z`Tg9;L*Bu|Vmp*xfg01g9Ia%V44E87zrR&MY4NUWAhS_&VESzC;WAHI0|npWxyA
zcA7z7vZs@Za3o63aJPW3sj^(vWN`Gw_(}3%NIU^Tk}qgH3)S0yknJHn9&b)z@znPG
zrODgx7+Msw81h=}d{^}M7^B|De4+gW$aSD{zhBMJ%ts4w1_6m2(2Hu<N(>QZSEgM>
zxRHTpE;`fF_M^CfswQmdkZpWw?a)F_#RSUZto>ViFv+WtC;V-3JgTu59gT~sA2Ml`
z$v{8}KS{5VqZZQ+CAW0@XGW9hM@I2~JFyqdlHD%uqNLS~MNG!X%naJu#0-!g2{5;{
zoQ7)8Nq=^(8=E`1X}9ZEc3rMD=XX&yq64ulUWWHI^MUnjREl+{KD2RwwY#X%e79Lr
z%u6L)V9Wg*JJ{3KO3DFAY!jP7m&>W#BAWH<bu?Jl+Sd!5WMmd2SwM2NXlfv=Lr-mn
z{JT-ix36iwzh3<C2L2sw`yFW+(liGp`Qk=`7uvoLq?j_C&M{v7*R-P7t>ROy1nD0>
zw>x^Q$CpUVK;Ae(i{%}}B^lj~#}>QVt8LqKi0gE?XoQ$kCg$F1+Fqh_&&PS~P{e?O
z!ZCWH)>|miAlE<dv?93e8j&KOUE<ax&hSSc(_Xgu@TB}!X1F732(&%H<9bV5E=`pw
zyCGE!gvJVAm@P{9+?~^Mk0QUPggWnYcfYAypjwT)(H+%oI3xK@L)Yu@WsT#Nd}D~!
z6XNkOLR1q~ZowL1h<A3o2L;tzJO*Q1S6$ZKNha<xgQF~VY&U+<^1(F)pOi6shM%ko
z=RrTHaV!ii%CeT|th(|k&#+Mq@?bCau7?mjx3w7syN%n}i&Dc)T<e!-^G^V2Y!td&
zl(T;+7fWso`s*hO`zq<XehZIuthl^bEauH>NuEyjovgFxdhw;1Nt`ai62b_reG0N<
z7zJ;@gF^`8=;GaG-7<q|@AG;I2#5j&AEgzfpcK-Oj%{v32yjRNVc;e=!KgW}Pwb|A
zgYa1&XXiwijuGo+k098EOTHe3$qN-+sG_lqJ47+WfJiZ;)AHFF{4>#GcV|KZj&0Y%
zO;S5MU^UFbwTYKlL&VeEFM_5!sYql-UVe97J60Yw@DxCQtO;?&j@rOg+-a*gJ>8XW
zdzOvFNYuoZj7O30syc<CBL%rDZd23uVA_L%#p+hA;3uQvZc1na4Q^&H9V-ypyl545
z@_)DotqA2R*};EWzgiETJ**65j(P$}xfho5$~5uMZ!XAG&-De)KEB^kL0^Y&UcY<!
z{^g%v9KHPE+m}DQe4o5iPHG6t^CPbCS_TS&gHIO}mUK3!(?9mPO00cU2k>X@3<_BF
zqNy%@z6$En>OCTdN&2=U-oUkx6Jg-IXy46^nX7RHE+5+tMrp1>P-uExG&tu%kcN!e
zV(QzQW{hx`+I3kQZj&bplx|i>sON{u`$4z*VRv$`PO~z0_OLc+^`LL=ZGFo)#{wrx
zO34lVwD~0RJ;7VnKF|>D2(R7~m^6DLY$E5pZklkel2WN<PHX7W6BG}6lBsKC9gwn|
zETGyy-u!2APfr28%UOV`V7{e?c{-fni81DHItQNVD7Cxumnql$1v=CssmWTy!uq<k
zu#PRPC{YaU>4v?2xLDUq=nhW}84Vi^llMT!JQi;(t4DI&?H2!Lx8F|{)lpYbIG%1D
zM~(WaLfR`JXmSHKi9rA&@i@J0oI<|hmUgW+z}|_N(BPlc2Rz%vkY)P_w@iX3(L=nM
zPs;|nxUDi`;X3G|k@zj#Q$+&qoBxbq0@pi{er0FY+c<_wCrzdr^1zRZ-Tz_^k6+i(
zaE<#UxlG>9Bl5rf82=;v7{7+s-0gfJzue>ROMLFWnkVLed({00d(;iqDD|6`vlI+%
z%jql9#;2IUI4kfq%f~16axpEhwdh9~Y#&$V9C@<(KUFi=<Oe()%(0Xk5Y3B>loQDo
zEd%1tc-49uZ9a?iWc}@Z9lwGL<NsxLEfCA}KghD>HlbxLEJsmW^rM^7_2C$jy8<Hn
z>tf7yc&D;PB3*(`9#Ka`H@&Z5au3(>dIsT<ZcSG%14WW`F0b<)#FhuX>JKme<%y`O
z<(>`s{S4*3Fo5-X6;0Yj`d^c%SB+{nY*KxbwPK@&9ZdVwY*4N<JN!2`_W@+^$uK@&
zp+$#v(>BH<*F|}?W(>6Y=r#spq3O=W?t<-rq|;kC>3wAre}l_+QND-BRv%KO33L8I
zVvaAWtmca~o>9S;#txqGr^>lOVFp9=eq#9xAB#cm7Y}xKT~5QKF5DEq)Njg@x-<nz
z^5ERcQz?3-RgTX!UPymqekoty*~Dd9N)Crc_3Q|~DU|-?>KPW~T~MgnwO-9iIq$ev
zh0no4$!(z2++WSI><<5Emi5g``A}BcW=U6B`)xZksmI)?zyH&&^Wnp#w8ZEayT7?B
zM;Uo>P)Z}3P)(#V5MbQWqa$Z;-r|svxU!TIW3CR1eracOo5{G|<mPR$UVj{j;CXG}
zoQ<n*oB27>P(Eeuuz?q;$QZ=Yhnq@z1ZP9-!pFSNQ|{Q4v)t`^uBro(x-~bFSV6W_
zEn8vTxqAz5oi_KJRu32vZmyI2Oc!S!rAwFl_6uEM+B|l?f`^OBbv757G4Y(WFWCJO
ziIz#H8EN)Q#8m`wdwZ|D{KxDm(34kipb+>u;zAiC(sqF14O~Vw=@xT(NX*7uASDc=
z;7$_Wd}`J7G>v4cJ@?dWO;26O$lb3NE;0mNwKFgXDx2HBST)f2x3QniK9XeYYVE#A
zpFFT`O3I**9@z(@tuM<Em3xHwLIvMipt>r8eCD=9TGX?+b&c}grkuHySwaj`bk0m_
z3J*xraoL(!M5J`<|L4`}bWIimCdchY4BiYiYkCl=@AyMETbQoatun^F;jQNGx}~Qz
z{Q?u%&CFmsnZn*uSUQ@{=Zl=u`{?9iI(>x|<clR-6lJED9Kah&CW#I1S`lTPHSMpP
zlV-y!>iXOEZ;<SzyO-347FZ01H}hp}T^d5-QvSg+zIsq-w<WFTE0(cET=9#M9Cdi5
zHNQ@pUuT+M-zG+Ya@okdUd6+e`sDzu5=Yhs@rv0aUiZJ&ZrdoGiWja7Wkbxr+lp69
zYW|y~{tR+d)RY9H4V;r|Ae3^f*&hME{Mg;!K>r4kYyNlcw=c~7_N!%fyIl^qjhw!u
zlh=QHcKueKUETqAo!A!y#FQ6it(nWoL{kjsq{Gzzug%x5n`7EW&S|%DP+Kp?e>Ew6
zQ@^s?`Ic?yUzR=b)5DuWAA6cxPf3%?Y}zVwC-bvQ`zdT>=1t}EHQsK5o)d=m*`M%j
zE?aFI3G{@y4Va%P<9|(cS}#}4HJlf2wMh}AURB80TG^%lIi35^*8Me$NSMD(w7K$0
z-;i*?OJ_honDUA&JPJLl;iWxN!HS{&+o$kWK80V^3vlyzaGRwx-8_+LN6*3kcFFs1
zm%RUW$@|ajk{1maxt{Z1?g1}8g1)j--&z;DP8SC?z*5Y1H%Lxz?G(Rqg8FpDS`yW3
z&Vs+C7vz8YH*VtJcys5@W!bQ(XTWUk-}@g&M{j<7`{L;6-hG?R_@t>S1LNmAM@MFF
zujWTbBV_1<J5Txh?Whnx&DV=#Bdv%EQOV#=`d&R!-mnLEWTd506nSZIN4$oQ<m0&c
zn)*kMG^feIo#;(^6hBfA?j(xUQL1ab1Lg;J?%%t2r?^-APe>^U!SAc$nU&}!<-*io
z;@4#j@p2yy|7p03zZXq?Y1o|k`+nimBb$?O1&U42xK?M){8KTjJ{2#T#xRVn_lAOC
zi=E9U=J+jUbHhN+7eq#IU43>|jX#=Z<*FzPuzkP_BnnR!9B5|N_p+W;lOf!TZrlu>
z^IE;}Mbm(&d;v`R_}cVY6|4HZA`NQ4eafhAsIbm?1)}l%M8ying3Zxtem<cpApKZ8
zAcTc!@!Becot|1wjS#aOQr#!xaRs*_%(-F?9Rn;>TFnc(`FnK)RIqLSXLVHq(&(2u
ztD#d$fAjhL+JZ_u7#y`A#?;ND-e>B7!c)2ByyrQ_+{kg$`Ki=BMZMAPzvnpDz2XKR
zp$(=Y<#>-!EJO{Np*%wB5cfCC8hnwdEx-7RI}vwGu^;+Tn5`hh%!ByyS*S|y-!H1A
zxrwiKCUm>mnN?S-9n^FEPk@B7f$mVH`?L8@b-q|#@3^huLw(r<Sag7z3)4~y02lUA
z@>t)!I`!YZemR+RuRN(wPP*5|yV&au8dQ)Sq+9hHJRTg0`*#*3^-;VX@0djm+1!uo
zS=n5_tIB44hWc4ZiCDlTd_W5I0X@|$4JkTUeCm|&E=9r%YCh%-=p4Pa(~A)Hj^@lt
zcmg8!&Res0UZ3=auIRo$Cz=>}IV$mFoc%InH+~GcO#g&@@)kgdfscBLeWASY<z&u)
zscPMno!fCL(O3avKL2>J_?{TQ@Ab%t)qq~SfdSx04OM)4{jb%v0q=<Yj0C7;WfBb*
zu-APta*ym#*a|Cl6hTFj&&hVlUYGR6+{?CgndMR{QT)NJS@8S$b5i!cn!}CGz8)D~
zGp-<eJ5APb<YL>1T|<l2UVmuXOi*Lqqnl5E|Iyt@vjD}?R7i2o3<K;i!QG6k0NC$5
zneXakGIpS|`m4i!R{QARIoQ9eyId)#KUFQxNkQrcRT@RDij~|o&5LsggY(4*Ak}n;
z*^{skwxDBVxD(meUKEtWTY$sIJXyQPsP-L$jw8@dZkZ`O*qTnZvz@d$)lcU(iGd+S
z-F^G49svYqx$mrT(7sXalat|LNM<Yw{YUqlU@;mb;R>c{&YqXysUIArm(K5%aIvsf
z8-wDkoJ}y2cjmycd_p)ByhGM2-HCwp_-6p=T<Qipz@4&pC%(joNXc%nwb7FOBLF_i
z*>jNdHK|bbK_=#=uGx=RQ#*v0n4U6o5T}~opON17%)j64n|=YxpZofTtL(!Y?z*3q
zqy%?u9aI`>d&RC)WL7>XeqNiklG6us`7le?)Z=gG4d@AJ>x!i}7Z~tEf)DiIX(Xeq
ztF1mB!#fZ5WYrHz)$6FLrEmvIZ?Sq{C~@^r$-r7oS0$!>1rQ!HZRhI25V8uIR>P~v
z8HF|dKutfyO|Na!>!>ML5-k6%Sy4iR#r#u`AQ==7A(fvj{Q#v-8r+MK{L+z)*nMH&
z5seujzcpkyedEim67=QllD3yzk{UWgTZbS!-Hn@I@&*?e8}%A5XK;`2xzYQIe2YDc
zEE7by#7@B0%}frSN8RdqGUV^$&ewt49A!Z~lF<1Mldw;_ne-Dm!vwdJ>KUC%3vW>u
zR$zFYVm}!MkuqFdEYEuBesu6A9|S_~s9`<s<N|bv&<30Ga=BOow1@4By=PZBqSYS^
z53H6eGNj&!ULC@al}EH0A4wLh&V=J%A%hpzAb4RR3wH|*FFVbAvFyp{RQVWFA-0q+
zK2&Cxo*-oy+zg6cfae_2ahO?RBgZH(wtou*sXFJNRS%B(v|4?ts#%W=ExE6j$I9Oh
z0e=Ph-GFkRneM7(UCvsG*PrB@@Li3v<*kB_Q6h+zqjk@BcV5q2J=3cF1^nx5BFhNb
zj@g(sN{aNTq(ni~S$8JQeVFAoCR=9OPHVU0BAgy*Zk3!e|NifVb`H|OaWHS*+ZW7g
z5|&m{NH5T%3V?6;4W|%wM*}S;`%=HSWH<TxjjnI@^m-Zzvy!~stki33z?Bgb*G>BW
zem3^?x!2c|4;}9lmsPK<vr4(38#9vk7YY`mUzxurivX<pw*9wD=}f8O6_EjTS6g6$
zP|tosb^}HT=En#65e^MMIKn9H6gMT%_S1v=DKlyMfWd!AdY`nsC-3@ylOncvgy7hW
z3e3Ur6;4XaMEXq69i5we(5{;<un>5EU~BH5Aae9Tm;xIR^5Y=wiKCLrCx*(?cYOYO
z|0vJ^R?`y9Xj~hJ`bW`6)oi9@f9M_v@F%zzTy3dFW-$v3Eww{Gvf)j4W@s$<)z`bU
zkGisTa_Q;Du(En3&TQnp8+TVe5^E;PV`OCCLGKr$9-zB{7FE@)B$?48WMDX=n9^%{
zGnPjieNpz*ARn$i?5=hCH13L?V?dpxsF)#*tov?Ws>(}N8naU3i9|K*GP>F93I8qk
zZud8~&#!-_jm|G@|M|B$9vW;DgH2ifAtiEE@q0|9(`#v)3vVofWoE)d$3joeWRGR|
z^J;!Q$LCt{AljWHXUo@Zo37cKxyZXW{mr8Nr2192G07zRzsR<<X!x4DPhxXMyYRmr
zKD)4=gc05X!N0wv80Oe=H-ppzUFH|f=K61RHrJca#=Y|G-MK^Xy?g)U{mW-Zq*8qS
z!#l4o+JdN<Ru#UrnlId+7(Ubeph%fpcMKo**W;6V3WiMAevW0+l-B`phbN~OfUiSp
z)azXuaqx0zs@jMfeg-%30MD;y<#|1JqddJP^(l?TA1Jfq#8daLkqAH^A=r5U^5Nz1
zcz!kX*Kn(&Wgvlp(bH?2ztzHE4O~<(pnk7c4vJ$T{@S<jUG!PO)<y_9Hj+bPJAe5=
z)G1A!<K&I<a@S^iMW`<yxL=Rq3kladP)vW0SpA()d(U4?*?d1W<>Kl5s#^Ar;lEO)
zF)gp>7c2bC&Uld=+_XZ1z^94vNBhrT*nnvkY8r~11o~@V{Y_<fw}&R;dB6ABQx(3a
z6oU|x?lXZ=2ylx12R^5S>5j+M3G>vX4ksB%*#TxQy*B1iaJ{p6Q~xrbt;*>LY7gt>
zcfO<-MZ%yZqIx#5Z|u4~{y4JJGK35h-nKYTE7F9MrzN3LV3QUUaePrvC+H8g>`|SF
zDsTieeZ282jK)aj8<0~mKPg;8^<fVehE|L(4=xOJ5UJ>?g`t+a%09=#3%pI2eT8jD
zne1Y%J^6Q$BcGYl0seyl4|=j>Kk52nwn`!`E~e!etjc%wrHzWg#eqk==OQKnHcZ0#
z*>bzLxA)WCCYG2cA$6Whhz$XY^SnOy3p^l$@7zLbB(W##Q!fo2eP3RY|H+^@qo3cg
zg{1)$4niH~c!eEqEtjBrp@C`%1Tmp7qBBB7HQ_)=e0n8W*os68i5qbVw%)EXY)xL>
zlJ@<AFPx-rTRkv~#3za>e6oSF?0}EmANM5kM`4!0CJ^hx^0KU_U`LL1_O$NLERU3H
zmptIKg2n-9A0(ZGB$@VEB(SxSzGQ5#0@quA;>Cv}r+E+GzLXjGS>j|A=*Nf$@DIu#
zu5DjfYgh=3uom~32x4rIftByHz8Z_|O*$i~urK-{H`Gmf0Wnj9$OdHJtTQW{N|@+1
zH5{lwR4wA9?D1+#>FdwnpE=&Jr|T{G)ED-LTjT-rJwJh<G4C-bo%tIwL5<5*4?@zj
z_@ICiQ|&3vdPKinRS9X|6%&T~vR1$i>)jhzjfyo`_cgaz^GiFjoB)E@&%nrxS(!X!
z=G+zdU~9)8?w-xhkHL!idvfV~Q%)xJ?34xnH+Kh+%B9fGy+Cb~gYuBIGQYghUsUf{
z)H^<uf;9Qze($Rbpv<PXe>-@>*CFjLWkmSG+p^pRtdeCIT6;=|z&e0}v<JT_wLa*h
z=*2Er(vM>|S~vJj^g=|V;1C59wv5F6ouFW4#%1gwL-HhC7TDp=H+cZYDLgSBL@4IQ
zl}qvnOXNy+V1xXYh@750Ov6L)USO5;a%h{pfzDx?;5g7E(g#}J6_P!cJdcK1oKQL_
z5*Y+;tLC6ObEh$0OW;^fZcVOVHi(mU;#}PlIok?yZu}C!fEf8g?3xf~Ccn{GvtGZS
z8n@1>Pc8;2ch9gg21ZJ!?>imYjMcB`N2eL>yDHun(Qx0nt9r-rP=}K_7IBem5HK^O
zpDdVU2crMPo6sVQHWnh;$cl8V7dAlr?TmM{m)<)it+8}n<+&klK8rx-^VJzR77KW3
zd5clfg{YPE!3R*z7qYr%H0CE3`AKx+DG`G+2QD%eExisI>}kgjag=BmMR{V99Y#H-
zQQyx*+8?oU*U&BiN}^o6yjM{r5<&M^ASf)hJ0dA}q#GaV-<J)fMePORV3hx5s6WT9
zznwQu+*x|#4rL{%c5?5BX(p_91@c@})~HwhV=L0_YFyew6JFJUNa9Czf{YfJ5lT!J
z5#eynaT+Iq`cxDMVv{Nu4EBgz$;`CN`1=r^Oxs%rwY1PiQ|m})%x`akF*-p(6A+rp
zHOy%;op^y7O{_k!`(%<+P9O+AI5V~hZ=J1Lid3CRYEDfj0cV<xohk0y&d!y1@gTZm
zi?0Scw!0Dz%r}{0{tgTkw5z~6NxIrdP~+qV82a~p>d{>6!>S}vC&&Iga(|f_AqbIr
zP+X`Jvt8dm>U9aSeyiqyfHc5)N(;TTk{e;1=!L&1RL~Z2g``D7Ig0kUjstsCIoM%7
zbR{tV-Sb6O%!hwMp_91r<2LmdzIwSHy4$wHgwIZE6SWG8AX}f!1vQ+v*?t$xstN4c
z3O@_Zs43nmxb<DLw9g@L98)seT{J(TZImdP^IPdQ;<l5lH`4X0a=4Yy9Ddj82?3S|
z8!8K#6e!NcPsP0=);`7}pp@dx;DH=c`xF}v)LkRMFGWpBa~*nJC9zi1C|hm28HKxO
zH!;Gp*WGJfmgf~+;=r`A-HH*En(9*nMkXS3?=wT96@*Og_%>uPoIzmcJ>?_y3zFEU
zRO5P0r;KF+YxKAg6>u@Wjcgp5rBtH;v<cB%{klXG(GBOt>b;Ct_9-Q!9&SrBf^3LU
zORBjo$y~LQjJB`sLo4l%OhPSo1@L3=%LCFXMM<$wF(gGBOqqFm`-?iVea54l%+Q2d
zUYesGM*>{r1q!*rnO<K0PAzKiJ2UH$zrm0P#L}p~XW#r+6mbo{9GTfugc$J?pm5H#
znMiD1oqT>#Q@x?V8-!v^@2ojfyCKwP)jKDD&p8C$L|0N;Hxj{c;q6t!K;Km7^UI1;
z22o9H8!zpMIW;^MV>rtX-pj~4qX&z8=!e|YTPSU~Tws_G>vR7g6&%eB3}h$u=|xis
z+V;i>g2*ERbtXTqC{LQMrYp)3rK=|_J`9i~uzLsvPZ@v{mZE42TXIuxxP_PWR&$|2
z35mo>j<FS!JBNI)<oDc9_BgjKhju2r`7ToR+nM9*t`mocv=_&4lD9+7suGhP`}E<i
zn?y^lG_D<FIaxoHhZYs61=!F7Jp0rngEoo_iU5@no~u{(?kPgKXsjV_k`KmzlTMwC
z2>%=~;PMs-qzs#Ca$z=BZ#Bp3XZ%3Q0$s*s!%1y+WqFMgL57Zb1wlnIvj1*V{^Uq}
z_OX>qv{;VAIEn!EUU0OU!a@4^J1gm*DaJaMu4JL4>CCt9l-~HO`Y7HS_lt+-|1xNg
z%#rvD`zYBUrl*#L73ww_F7NZrph!1ztC~Kr1;%>%ZMnpwA>%~!Z#0a58nq(*Y}Af-
z@Zjf{gT#kF2!G7Tw8-%^Z%rdDaOA$QZ=exR=zIGd7L7*e!Tb@@b|Y6Bi_yEa1?J-0
zM}W5V5VM*ufg!M<7EL`<tww5#VR(t}HeRIoP99Pe4SMo!q5>ix`!@h)$Tx?kq?UJ4
zMPn^)9jf*^xz2KRqpH}BZ!%m1DfeC#4-r-PMBI*zs7aT29ug)Q=A4=@J{H$$htf!(
z;Z{G)iN{PkE3~mf`I;WG>PtfIH6j0^puZ|4e(fQA<(^B0hQacu<qG0<;{9y=Zx?lg
z0fMWmRc~C*E=x#X6mq9hDAA^xR;H=1NB=5rtn9LNgV(<om(^_bs$Q<DS=Bg6l)|b`
zZK)dq?gX8ygWFPdY2<W_>xiIgu{<9{VbAOHi*w+Z!7n<JisjVr2+E9JbG<^|xgW-F
z<&jdASB)>?YD79k3UOPA!@)pyQLs*?^Lb;%=KFF^PI%F>wbsigs}+Wqw4|Wrd~Pnn
z0@EINhL@op-HBWimVnPtT|M?>=aTQmv<MQBB*$8Jm4;#v67dprO6mJdb)~4c^>DJ~
zvo550YgE83(=a7o`t*56q%%HE5&6rDpWZzA;rZ*Me|-S~$+munl>74%^a!@XpI`j&
z{^<ROH!t3K-o2V%jL%SWGb*;u=MY7D{%K~P#PB0*3HJ^D=HCnw-KPupj)s0_kbrsx
z@7?qff5`7Jj54JCni<r7y;$T%H7p`DG<;Tm#T44%8!#n%y|?i;UqCQpa1@}Rsr!#?
zP(dT{V<1_xilJl+Fza6^An5TkB-jiK6ZXy56dxBW4)LcjpEP*&T0mb7TzOWjram^e
zfZi7EAZboW?cCK>ZHD{Nx563+jBpO41dis;4@PsJRR+MpR1Z-GPwXpjJynx$+dI~X
zYPc&`dh|FDsG4>aVqj1u{INE@qXRD7_M+dQojab+#~-(NZF3kKmQI(HxCC2Z9)KNF
zxW&RVaH{JuWc8I8g*3cdTXVcmel!~g&k;v&a&cLppU@ICPd=ksqJScTapw$gsOw~N
zlOU2v?AJKC``13)NEt}Zq8;E4lO8{A40<2-J3TYl3Hg1cBT;TF1(VE1DT_*N5~BGA
zF<Pk~&~3XQiA+8T>ARK}i^aTIEnjG#ou$(P<V)a?aD?6g^Cf$hgxm&`iI;t5n7<_v
zef-+bqNHl@dzc7Zvi(4XpM^R1kdQRCRuJ>hP<};o0$aH`ksf&YP?Pm;3+YKSKmP%}
zGO@oNwsUTog7dE^7alu_53uqOKHwX0_$eJ-*aNld1<Hra7>48YBsRj&8TL1#@k8;|
zsJN1(ZfNPMa4AQaR^mFTc5SOEc5Xl^fLIWcN-zy^1%pDa8+(0+D)9F1s`e#!nYqks
z)B#FdK#yZLgzY%<_z`4E8Ozp#JT~lNRgrM|`gmD2m+OeqDw7DDeL;SFZRfT#GF&Xa
zzgVH1=f~)o1!?L^T4aIMf+;;c#dgvA5<?oay#}ngPNH;;z6<x4MVnY0>;yJ;HTeO;
z`S?ZJThkc?M#=O>`!CyHl>3$XOB|Hk#?3}Sa=0DZKYEk-_#%#)IX(j&yXlMAB1=Mj
zalC3O$1QokmS|k}dnutjul~yt%9^F!m{eK`?>`@*SYf1D(8*#%M9g2abjw;U08Ci7
z`E(L17$`xRr?vU)FZIk^pWarOxJnY#WYM6N6;v2bqK<+Xiq#C?R7Oj0z9RpO3ZChX
zDy1_F2BuB53_9Z^2Atghl-Vd50*)CoNXo|v1=<R;-ASYncS;u7K0*TZCBhmivxyxs
zET$6yXp6doPzz$YWTqLV|7sNhB%M}f9p>WTQ@W?D#XT-EY&cU*hFUw>gj3S@ugWRy
znU4&{R)!=ll+n~c3(TY^SP8v3yJqcl?=!E^V>%@NTCJwlq}P)sGih9gPd1MV4l*21
zYXeJkzw)dqXMO{aek#7v``Li;4eToRTaK7$Y19LTA0PYf^bnaoq|FxbbX4EYj2t^&
z#Wq`!O;}q0OmSwmy&KkmNf6oXa<{t?fn^~Y=CkKSpc!jUx&eP#FH2aZx4t=C3(lwF
zG6A!>ff{gURh)*(J=^;f*sy_x>r*FIlilHOn)%iBlbO9(ew7`*fG*|c!<$R)ELqVl
z2CgI7J<@uO(>4&FHorGJT>{MzL6vKbMHn8zX49LWuhmU=dMAk=vaMR0bHSh%WJ>F#
zkkr<4kBwP<`g7>k$zQvYfUE6lQ8i|f?OflXSVO4N*FOx!G$nwKtojw5Xy(Qk$<jB8
z$rvh6J?=%9L;E!}k8%lEEmV|8fE0Woi2(E1Y37T}yQ52tV~0F|s!H@unRAL1;4Nw`
zI{SlW83E{Mis}@BTr&;r^<-sjW<O4oZs$h2MV{7>J*|GMu9rQmz~YCR!W3;xPkCS}
z96F^g{?HwoBHbzf87h&)rP0G)>l0V!H%yuDam{mP8sOe=CCcVbO!IfH0OHa_MG%B1
z>A>a;S|*kOC2CDZst!ex_@v@B<t2Kc$onHzh|D`dSP<bs)B=0pRd3p1#Y`w@=C-<T
zpIHmWo!S>6VN+kc3hrnW0LR$}@J!m!x^nIEM$(GDvaOZeqDGZ&x1Lggyce17L@UQn
zX>GZ^Vv`F_9W4M_ui&X&fIBF=nFWMEe;fAE?aBSN7b*tY-Mc|bcESVQT<YaBl1Hlv
zlOBWkcw~sie05?_1RhfIQN1+M(>r?ns35hgS$S)N`ugN#X*P8=BMF2OdisUj3WAS0
zKPVMM+DJjQuq9BOSD7@o7c3BL5^>v|%?)hRBlDnU^2=MW`CO*-XRU{<dk#chzpSKw
zPh<!Foi`t_1*`ddx~doc{h%!rrSb%U=SwaR(p4<BTzAcTq?(|_NsJVu5!}?vKZEd~
z?LQE0Angt1alY!KnT9C4?nm32CI&(Ygi{7^Q;Yykmkt>ThCPL1YYZcY4Pvf)|32tw
zw<t*fP(ZK0I2}QzXLD)$8AEZ_C-`AjRTCRAAeI!&=y{%PDlyu!jBT-8BRHB?Bql=Y
z2msptg3P$#=a9(GVEnNtK3dJeB-+3g%bJP{cvG#konKz8=I=h%iyo#iH%z)tTsxuY
z^#b<}R`RAYSXbmuf`sDdHoC?8nyg`cp(~@IWc(>8e^sB?!HmD2_1wT<{PaH5Fe{u6
zG*HU=GCIu9^XBDjVonC6rO>x2A67Fk5}r^X@$XsHo<+zgO8YUpIR9Su$OjP4&NiG_
z-7Hs8HLtyKZm(&Lc$}T$!C@4B#37nz4~&~VVkqVt1ET0-MLW@f?{FaC7$g(E&wEU$
z&GnM1^OlQpY-2i<)A5Dj-_<)R>d65uJjp2f^n~__x&5bJBd6H%od+ZB>wz<^Yv$%O
z==E@2c4!6rU>2b)O203%Upw5UShe#X6!IPz!3A4=7pw-5YIb6<2NoEayHv(5P=Mrd
z3+nCd=;>(<yn-z2!?*yPG7i=EqBZ>jb~|7LJ8<FhN3>VAW4v@D#8!Z$0x2|S%C;Ow
z6I^p{#2Y*lB+sPcnD@P+X}QWrQ1*_!vUnE_m+{@!v*@_bJJ~LJc5EV{2XP<x))4wI
zC9l$M_L87#WM}G`vjb+}yX;5Fmp0zt0)L<sjCQJF&2Ycdy6f+$EJhFw=UD79A|6PQ
zYeGmZN3;)=xKkAA5;*Y@{fV~6aqn%3l5Gzx7j%BdM!`vKQxS0l9XY7NBTwEr9UD|@
z4V$4OA<DL;9i1{t3nV+&Bedj#u<%99;{$c;P}87*4t3?>5)!wQlj^z<A(WF{#MSM5
zR7R+VDUPj^+-{ilj1<PIJb+lS*A!38xB%m-p7xdrEwL0F5xNp2)nsNHscz9U$<BvR
z<dB&pMu<WdQ_FNNH06740*8C839P#uKJQkjN5H>d%qB@JW8`Y6*?iqRr)yo0H{2Cm
zg7V6Hex|iEgA4>d`_a$6wgq-!gX#g|r|WXU8pTtjF6|lNJ{tZIX2--1KZ56bjDPzw
zIVdfOT}Bp?;nSJfYdtLg#^8^$pNI@>TP8Qrifk7VA&3zj?ed_7cBzn<%_9BAG~9Ut
zIZBRBsj`Wl+=!`}VsS~Zd~i~qoCGp}s^1h3*ZSUAL_%Zg+Axv<o-OtOQ6g1A|4_4r
zm~;3C-Yv-L!*sOCV~pUPGzIT1VKW~*nbxP68lZ$f%tg4Q0?-s;WHHE=NFl`_i9+~j
z%O1OG_M`JCAW;XBHNTi(WIcD0t<2AX{cMJ-@GEo(As^5H)R(yNvE>1jADUISLexkU
z?-Wjeqv6eBzvp*XqPSOf=Zkx*0fGxp@<J<`u^)Zz`mij|7iKq_#lq_t<{DXZy!yN}
zjmx+e2+uG9*UMfv`V9OH$c>R!4Gxihls+fdaOMJ$F-}zX54EfX+R+PoBGBf3J8%A_
zsVA?D=<Sx-MsA>0aUYk-j^om`I3Vwc_q%%Hl5F{<vI7K>Op2N-Axq;=1T{TrY!&k(
zt*}_uQ}j4`Q0@GQogii|f3~lR)SO`g2&fleW@iz<W1y{qjvU5iPOVKx5-Y>sVmyNm
zFzpnUSyy-#`44?HDX@*~p&5$!L3;Wm4OF~)aAaTOhY)%c;I2WTy~oS$nZc0jX?vg3
z$~QJ>$>YE=cK8Z-H2e17ShCsi3vW0;`1}YFy6rx8dp(kwKU`nYHY%Ir^0az3pH9Iv
zWeiUdOGnyn7>Yn)KhYnG8Pe$(6*%VO@N~SFe0+sG<a8W34MQmtZXIr@#iK$`X&DK)
zSUHzn&OiMEXqY(ebZpMJ)=ZcNP8$ctTspA#jB%sjNI*Q_myNwI_o8Sp&e+Jsv}j7J
zr+Zv*_3108&)8M^U%9XaJ)g<S9KX}!a{N&|%|wAS6mel!xvkFeI9ScUHGlMcpqe>Y
z;`mX7C6E&H#Ye3XArUOs1zrOt1Is6nNXgeFqY;J%FcI;3od<g{Auo;O1z-)~hxG~C
zjv~7#cHyX;aJDK7d^{TzLQmtYV6b{zlc`AYpb^d;qhbq7w=~07>JJt>?$aJ6u<jee
z08IvWM7p8`BB-MRv;smx`HO@vo|r7ke1&_Ho-&SB^H)YLdW%7p(XZ5sZsA;UNv$Yb
z5k)e(%VaiqiqYyYxh|sBkSUAcHAT9Nuu^8&oGzVIK>SxE%tP3tkn#}2fZ}yxWO<DH
zHn2%GtkoGk!(q45Pbh?Euw=DlQ7yw++{{<bo0we<&uz4q0fGLL{r5u}wHu=a*?@FD
zT&Ohkbioco<WN`~I_zXdDq*>T1H(ciYVZ<iE|rc%C|Y8p*u?VC`FiqinNAPW;yn)$
zUeG+qw-pAgsV$XHJT7~S+7R;GIxXYM{K%)bOEQ1*Ayb)HuShPEZYg_3;z{X2U_m16
z!fnf_87N?M7&_Cxyzn@J4}@-SJemaKs7|GsWYoXqwf<@IwcfG&W&7(a^-prCllUpL
zb8xBGj-2WK3s%}wi@v#C$`2XUlCdg@2X{Z-`R>W9Z;#%*G{?04OX1BihZ#gb4H9x3
zBoG8gMl$K3R}W{fD-Ar5hMEgdU-!l*r%WVVUM!?RJ{b_y7;^gL)cg^DvR<R`F*t^X
z&vWks92tp(Dq#Oi9hkq8kM`jOKcC64r!+oBh0b>F!#!tf*cj5;?=GBlwt_oTvK9QP
zq}0F)M-&Hs*)6ob9`r^Fk<%JlpN3}qEerp-&p_5v$qJY6+n2-Edb)O1Y{ge=7ROe5
zyAC>=lsHcW<#9EA8#Z%prOxZtujN(SDmONfMHY%xWR<|$o?1=BOPgC<KAYQ0IE(c)
z;FUD3VJkSj&u&ViSFf@k&7J$STCUz3e)9~jk&#`Gtrb)~ZCLQ?o>p9v$cy!ssq-jR
zf@s9wx339SX<gK#<;5w?4Q*t))obsMsVX&8QaBE$!b(1m74*^<xVfWpbcsta$zbJo
z!SN!s8wFeSo)V-r;^pohx(q%U&g#zn=1wVm3-Y|+`NgoC+pMs^1Dmba&o8jnpuFm@
zStF$tuhCya3a!ok=mxD+rzt<#3$3DVFdw<i?T=<=PvJ#n*^8}oJ{KNQgTkZ0{3#|U
zewSClG?FDw4fsBRg=bHB?$e+kOT;0im;LjLqnAH?`|^jE??3e8eh?#iKjoG0=Z6>n
z@+8|&v^q&={ChXZq6KT|u_KJC6{sQ2Q40zM+);{SL!_e?tO)?)ruFPOZQqf%82uJ|
z@?)oiwYM;1C>E?>qfpNv`PR6cVaD5(B+rrL&XEuUU{vIO2<u!<;8M@o$m~q`wi|l<
zhksyQW**#96{qPS4Z&pkks8jtsp@&PDwhoU@5|Nr%m^NTrWmu|!{=UPT9(?XU@vR4
z_TogWsDLfNIs=$?14`&-7?uN|!LS3gD5>An-GI2hjurlF14yEgBW9~77`U5X2aDY(
zX_xO@FlH^rPymjR53GC*8gJ<NG5&W1C3|<|kP)%)CgyKQx^#7${fyX23Sm}&tS;Lc
zE34fCMlw6kXYEUm4DGIv2+t6OU%4s7GJ9IhUNcfLJFV*O8H$JxmGy~{6`&SD(Tl>o
z`YVuJWqoTvZNwh8Gsy)BO7_%VL!@=+484}<ek)XdhEkx5;T4T(NCtmi(@%8bz=F_=
z6WAH3D2DfVKw1W&nuWl=J6rKRk?1|JQp~qf;rx7Yv8uF@`|0UbhxcpRZ!)rZEce}7
z=H#9KNa0|`gzb|_Ppl2EK8RdTp<-~?=tprjdqG9)udD-`V{NH9jT~3z%ahgrshYVt
zsZN`63@N>k^hUviKO9@aZG}B(qm6-0U*L`8LurIGiI4OO>F(p_Nz(A-Hh!L_B##ve
z;jgx6;a^|T5D*{1<}SJF?Q`ArwEY^q_7=?W|E_{i<JD}5S@&Wfm#tsRlU3EUcOb6I
zI*(z>qiu&QrxbNR8=GpD>yg4&iYM)U#Yv6ujMlelqMi+SdG4#mDGsobx8q(@4^gzH
zj#r2rnIq$0VE0*x26y6sZ%?(k!hEzyY0(6qLe>g<_+&_vYO{Kr$IB_|y)nLEj=~q#
zQD&cWif`DENuEE))MpR|9(#X3w+CR{>0@W&6uKL*ar%yUR<#V6PN$Je(~_WqaP`cY
zqrc+%v83|2TQx-3`YxSSGICKD+SEvLq0l*CIV&*YxATi;Y^~Fv!d73Ua<|6biHk^1
z#Zf25B&YYpb(;+X7A>F(q`vejj4F+PTdxxApD1Mr^0&DU@`$=&S$z_nM68YzC%XM8
zZ+Sr%h{jONzRS}<$~9wT35BB9=F7EV+QgvGU-O=n_Uqq~bKS<=m&7fJmAj%KyM|Iv
z8r#RIdeRhwx|%ctK&1Qi9q+V^j_+dc=lYV1k6aiOgtb-{WVO4Bf?nW^&gYJDr)ago
zn9J;F9Z6X{B?(bbVKw&6YFGK>o~uHC>)uYq6O|M(mHz3yO&d96Rt-I7X<WYV#9D6g
zn3VbG-h48j{S(t}LVlZ4M%rit!Z?CHznjmEfG{i1tK@P;7sA<mRi9kHnO<NnVyHMM
z+BE7apa;<IaN~`_r8MR0=b+z;Yj4RIftp~5sVE%UyN(l8-cms3QrCKrLv7aAvEGGC
zH+Yy(P1iA_${P6a!Jg{R@StDDnGf4ol-j!Ms-Hr*5o>Gb#0u_mrn;~TAed$*az>-8
zbDMu{H@7rrz2_PT2R-+Zv@hfmZBgYUL02+RvPNQ4G;c}u!Sz6`zLXgqX=7%5;c)S9
zyS(|v8}I3yl--fU^yV8tG43!v`J(tY#WoEKqs0sv`UnHgvtM|b^pd;QKz1a<C8UYo
z>KQW*2yqZtvCMYr9f#Fsp;+#t*b0I5FDpV<nx>01me1?*bUrJmsw$vf+BXZj)!t2R
zTBeZC>(RcL2Ih*fNd9KOctCx06mL4suS>KiaUHXoA**-A(w>&84?jEQTId0Uq-vRo
z^y!*?7xI()c4wvt8pe{2Z|TN5ngUUgWgR>7UDi$k+5otv5dZkq%q=_H2i|X8st@mn
zWf~Q%wC9U=MCw-ZpyW8(F8*XgV5resIV_p}dkKuY!#|>TeRRj>D$Pj8xs!Jr7=kho
zj1)ZyJ9GP;j4!|t&FKbQ@Zv`NDO6%Rx!0`azcs4}SNDn-cM;*-iwdHl;*GJIKd(-k
z$`G=DoWnoLrTL4KQ!h)8uzr2(zi%mP=K=Vi_XmaES3vsxWbVGP!ELrRpKwbT{WX&h
zPlka#3<~ZC7)nLkeqJpSk0E|1qTa1f&z9C39G;OP$qCU+wbSt!H+44{_9X7v9ews?
z<Fl4VX;;s`wwsTNXWak_e*%xds~~!FvBv!)`o|W*ejnj~-Mfrp)FRU9_|t)%dT~{L
zZt1#uHD{4-)V&H!$H^dp3;DUY^ocFZhb+kh6q)CHSeh<c177`1fG0Ss!!4Nkv#E3p
zotg~LrcBT#a9e=VJkN^yI1vHW0J4@uDTWXQ+9@znVTFHK9?RYY^MXez!iHqQ$&q!B
zd;7(q+)k&}+j3HuBqz`9-@TNxWk(;+mp**LeA(k&X4@=-bqFx~HEp^OY$U*iGd~E_
zO*3z75FQx+Ucsd^j4J@XZ8_1al^R2gG(nbwxaPKiZkw;1GVkneh$ib~C4H_mt!S=<
zfKBEq({Qq>y32y7x6L72JJ0lP>@**A+BriN+&V5q)e@{*%;Y-Q`%rf-bum6^_7XR$
zJbk75)1c3m^0s&(Csk@(*kqKSo|YuZbkVRn(8Ln#t<%KDbMOvO5?)Zs#%1w?#7(4>
z?6PW#&4fLvKihZ{KD9T@J$TxzH=3xI$h7FyHWkspCo;KDlfli?YC87;{G<~l#;I_;
zo(ztm*d;dHKpoE`WmqM(k1NVO;dlEE@#)JG@8d0B)rK!(++%W1MK?941ITL7qY8?i
zJnSdC1{$+Q|N98xIi@aQA!ddYrIC5m$iYY44hS&I>RNfNgn@b^7}_{z1O$POKx81l
z(PSYE3=`t7;G@}=hOB6~+(3G_)ojw%shxQi?@6b)W$M{X@z-nZR)!{6JGHd>P0IG<
zVEzi&<K;ViKYDlezF9EFVei}R?YMnt(ht$B+TN3rvEK@x)3?%@zSHQ~CK_I)WwveU
z?Tc-P6pgI5f9>KFpSIYPPTy;feeAnB>{lS=Wb*4F*zHPU)HnO#*D_BVeiZpzY3Wbd
zSd!6RgpU;4#KeZrJ@$IKjQ7hxsjnKbaA_ga-+M@Ok<@POt%>(dvZ)4Ii`G8<Q?lCW
zQ|F4Sv}t>n>83hyRl90VBD=m+VnR8jn`q=x@Ca987ko>W(sc1dD(E0s-(F0o?|A0D
zoHg``t?1ik%#UITfEgTRp1h)``RwE4UV9kgFL_8z)5rLTmnhw+d1R=28{noMB=Q$_
zYzExfQOe`O>}99zu`sMfq+f^(uauXNP!v4?g%7&4EA5z*H(%AFnZHPR5Tds^Vfp5*
zAJ=GNT!+rOF)?gh%kQPpo`NWDG*8&&@pb(}p@NCrYhjWMDqaiPT$y2~Y6v`qqkzZ!
zph%o<M-;+onOBRVSQ2{}^Ux{!Hy#U5i;F4WTJ>o}dz@4q9tZLOhYD8h(Ne?g%b(5v
zN5cceGcDY=6pqRK_uZ<&K&Xh7K@nmhC8<Yd=wgRsDO|?~?X%1#6SvR5WiY!1;xVc9
z!nZb(lr_>@&Zn2i6`|ZF^A_=TaV=I?LmPoA%+8Jl?S@M%i5gkg4Wf*L(C|<%g!EKt
zfUt5^nk)ZJY9Dbrh9LhrFFF?jPAK}mm2s)|(pLpYm{a9%t#>6mCoYaTdR^G8JY#qL
zADvg_^1_^3n3ZjHHDJ-t20loerxWTh<@FxS+<bU2zqP;t!Tn6f+|P8(VO@XB{cNc4
zXX`Ndb6>v&GfFn?se^-`5B1Bhf=$+5;*@{LsR6zK!@T>wZ0Alxn@4zFU3t@TUJzfT
zkei>PNB1zUt#GEj;HLb{i>`KtQH^+nl->Cb9G8mgs0UAbz(VCfs4#(s#Q=Jzzdq^Z
zfwiZFeFxe1sBtY@fMlVIo?xKKdUDm@f7Hut(~$-0z*IX_ybk$$qlF?=m5aU3fg7){
zBL`Y<H}d9$i)i@Dv~mN520}&p9aXaU3AJoN+LxKS_PDy#-6;{_aR8@8?!Tl6m(0C1
zjr)|3QSd|g18<9MOk3=uw}AiBV|A?3O!{LPY%(%q2!Hxbu?s6oKOPl{W>j|pmp&Rd
z>is8~zCE>Jq{AUk_bBJ|yc*Z%=CU`TfAy=qu(XeXv@Icct(k-Ul{a@<a7P2~9kA_t
zx+mTX5^_JPXR8N)dJFzmJ<WXov5k5~OBw8A1~fLPu8I-;El^@nkq|-r9Pj5#HT+{m
zm<!sfv`s;CXn4%=2Y$L7lLR5Aszumx*Wi>4Y$-IgdAs^?muWsPC!B{!2#OeP$AvoI
zP&R0&2!Aq%c1X?RK0TsO=(xVifpAvgo%dGk!xnbfBb%7o?YFk8S?E1Txwv1{Y`JJ{
z>jTc92eT;IS0aBVX74fxXn)<VmcvC6Z<IKv%ot3Lie|p-A|4XVWUN@<bDX!@sW$Uf
z_m}+S1;0GDc46?8Z@TKIo`>P--dBb<e6{lC#*`tfEt|Oa%5zo@nnmm<c@uw}v%?Ik
z)j;=5`e^ATv4T_k;RKU7=7K#Rp!<;l_a5T%vH9yhmKjk45<%d8JhNZF!FurZF@B|b
zpQv7-A8vX3x!qnVicYK=Akp&;c{=K6;N81P`|Lre2Q+c#>?6i|oc`ipxGQ$AC8B{1
z{N&$c6Uw$B{=!DwyOojnXEY7tnpTL~2*I?76K9(FxaZJ%7>AqO+(vA@Y{T>Sc^7dm
z*6?&x4}fsf?x$IEsno#Dy27V=9m0+^tfwDcLwbd!b%rgWGjDbEm>1H%R(3OV@?AMS
zaUF$D#ru`53{uKd5hBfnG){#NE&ws{MoKn*IDWE7O%n^rhN)?MtauwExx$U`=O9~q
zt?1PQ$l(kBxq1kHng2i$lt97tL%Fq6#eX~<867UhMvpn-#Sbjk52ULq$Y8N%>iVHy
zNS6RWtd6XXJtiPTfqS=GdwA$9TUhYl4pC<9<Hv1~lRjtRGz8QNkS)`+=x)aqp`Qb|
z-Cq46^E?LQtZ4_dV9?pyAVqzVyLyn=tHktjwGq8st)UluxNOJEl_VJ5mpesF8aTZx
zW|YU&D@iY@-Otq;g0XRq+v(+MGkUpt$UWfm1jFA7V|;Xu=G*~!k`0J3&u+g^NblX@
zANwsj({-`5nNWJWc-oO-s&h>3t^`Cki_HRWx4vz4Vpn;ddV6MM8g(G6>)(p3TEd6_
zH$iPeP${d~>A-5P9w-MwH`bWv-|@}VW(bS&47R+*CW*l0wRlwt%a;cOmQj$)<M(Ok
zen0yf$ZFdsLFl}%DNBO(Ar`2U7e05}Sw300q*{0@VM4j>ZCy(u8&#}t>j5NN=3(f1
z8~XBGqi6Fe=2Yd4#!#j;Aef$)%V-z^dN_d(k+w=}{My~z^e$dUS2=n0(q`$)bB(lF
z`tn?(r<vIfqmS7c%X-?Zhgy~N9o8`xEjJv6L8_G$3Emhu^svujM`sx5s-9g`ZEPpL
zIr+>B;*!R$TAl`P;VNZ?S!6%>XOPj<%Ui3pvAs&+sfd4Gcj!!l3|De`O;lkWXk#jc
z<_@XUR0_2&wH~z&wf^h_onMlHLIP$>i~?^MWDYx^*S2p&%X(yn%+P*E>YtvrjH~UV
z>{H@RYhZVNLbQf>XTR1&>TC`3xv}1@t5%Jv)2#CcS9iCm)_x7OS#UfVH}mE4N#unB
zK2GRY#o&6cs^4@Cn(!^xpnEc#FgL!bW&>=M)bHck-s5X0=%i(r$~%GcSl-#_wLsJP
zC6QXZ+0@mbxHd&bD0pI%osnvcGTU*xDca5#Pz=@Mg9de8rW{_#psImj>%5*!rq$M_
zimvNKTNNQRl1d%${0-wL5Q}lM;3u%x>h*80Ub>blncof`Rj=c+*RJ>oACwVRu|*As
z&9oo--;u0tKVRKi!SWvr;#bpkT+75&?Fx-m3swB*xrtuOfYlo(iEG8e*W4*zP4jTI
zNp`aTI~MusOBQ+KHO*{%ZEwqnsq2=wlSfm0EWw%cC7w!gfA-8+Z~DLaqkDJvhcuBy
zYaBIht*lupYx)TO;@|RCSjRdiVZ)RdhylysJtHvMHTL8dhSS0X`J~PK*o!wT2d}j+
zek_b}L)P6$=qsluu7l87;)mxHLmTK!maAs|QB|`5zTbtf`Npcs!#7qGAI`DkJ>Smy
zN!;ZU4&<|tp=5>KTo|R@G1ZTU6>&=_hJf)d;FGwk#V0mP?6UBVtjv|MEoKZ}&(40U
zu_<Nb$N|whcK6}jk#{>Y>F)A6ugz{|SbtWP4SK3I!o9y0YyNftcb~A8?iC`XHT$7D
zB}dB@1J)uAWB|z;8j)NO_J0=8+pcRzI6C5FGvE4OV^M$OrMunAeT~J+kGxapg#BfE
zmDCJ5#4ynA8A5un*RfZ*%IF%x&ynTX{1ZwqPs{PgNduN2`uJDUdjqk5uizGnxkyGg
z-L$jU`BO$LOYZ^4e_w9cH6aVoD9BDUJqI_&3lj;MZfWjfv+(}hsQExWQ6_Xwea=ZD
zdxiL<M#n@S45bZ<2k1-A5W6Ghkv>m*$5k7*ByNzt8N&aTpX$~4tjC4!j04ozeD+GG
zQGSO)#2oKumSsSwi#E5vk9#eHS<%1aU>gr~(}oS?h^?rwj4}@$ML@DHKwpRo5?wlu
z^#$XQaF`!wGx2Z($b{_osQtLx5V<#BP8g0mB+(i<ID<PG8r45=Uo00g%x%_B`U6br
znH4v*E^V2hY4~!aaXq}?q<FaXQyb~O6-UgO_TuE3T>349vQ($!PPLW^>z~-IudTvg
z^6TK4#7JHZ^0gg<&D3bh*>Z}r87cAA{V_kte!5n_9O@0+%CD0K+T22tbaz<|qvFmJ
zzkaQcY<7!B8!ljF449ReAZ>TX8}TMnW-o&-TBc3e(xyf8okUk-#uAgBH0_!1CxN-8
zBV8NdyQ0r6G*AYWMWBI<MzRAHKma`P{%GI!L^!;)l(M<!%|<Vf-nn;euyglr7b$k2
z_^R#UPJNhazk^&!qvA~PrPfPl+tubthDg8sM!D*&RKY8bMZS9Cx85JcIBlvRHq5Or
zOIL}Bcgw@ZmoG|gI={`T?0l_NY0(W{<r9%9%W~U?)s9<iDgx#G_hN3om^)u@hdI0a
zUv-21SKxYj9>0z|?DL(@qu#W~j9BTC^pz5xLD+4<W3nC&FtTe__xHNYDC?am1Amde
zrmlSLd7s9j)0vctHG9<@X~8^L26O$M>e3AJSjcHDp12(U&V?tsS!0rv4Z644Or6P4
zZo<3yi82GI>^xa;>-LG7|4y3n6DT52oB73T(#yvdW2qUAeSLa-#5m8$%m%2~vLSp5
z7fnkGdjR;2`blhsR#(Gid0F+es8{uL`fhbSMQcgfjb8aJ*j!90HYP;06yd&<0UE=!
z<}wQ|j~)p^xwCZ5hgcyDq7QPkwV<q1GA1<k&m@?zM7EpX`|FJ-Yx{^#9OlIQMEy#y
zx9aadS`9C~b$4vyA%jI^f@PB*aqO^=SO#FgioO~z0=m$A4H8xy+|hxg!HB)h5_bKX
zSmwD37BQ=<oK2;ciQLDUNHUa*P=h(2`E>y>ZIA#n)mLP0(px+*SIvimVhP*AEM6)f
z-o;PW?HY)Sevh@yr=2Y6VcNDux#I{MIITzuE4P~&OiESSc3_F!ql(9ow?qaI;U*Ec
zRNX>ML(De*rd*wA(>tGER`2Hq>%%L9_Xor4%*asZA=Y`Q)}h(=I<g?S|Js;CY9d5>
z&n_lHlEPh6^~EQEVMy`y?3uRZ`2QTm_VP;ds}YVj)I1ct#?aQeexN^$4vG%_KkU%|
z!(9LHx!?7v)MKbMX8s1aS#?3q>PxV*>VlqC9zXdJtTvxI$UA04uMNI>i)NbyCAY0v
zn>GiJv?1{WwYlQ|p(&i#UOj~Pg}v*dm(7cnieTi-M;WkM^IrW55j{Fb^T0zVMAO*t
z;sP=DUa>=Dofxs(?`x6*M}u>)Nt|vX4W|pn@gNPz(IHa^x|1oMYvCTlLX23~+P~<p
zf#{T$>#DIH7#vT1d{^U$OZp5BYAOQMYw>m4lu)4VI-~2h8QF`?##0IoeEO8`v<WP+
zuoBa>tSO}xRyPt^vH}DX9w_jO0t$S?U@(1c@VK`~P_S&phEs15g1g5k!;Q?Xaa(UB
zExL$Sak?~6s-d_^K_bB^6(M6htru7qqswBAJS;+ZcaJQw7%oh%iyjk-<|oucUw3dZ
zSDFT1R$qIUIy_C1XCHZ2vq7M-Dm*!>zSY)58!Kf^w69$a%_)nP%7IAOvW{Q7<oM;I
zW+yZ0XKnJ81-Y2<CFy7M510|Lo9aQlx|vo5KuGqo`XNYHYp8l#nsxT&b3h1XY>d-0
z#xd}Mp%ztNB&Jy`bQNB{p;nnbwfRV7k&U|KfLV97R9$8DwHQ8ittW~decLBFQA3CD
zNY*qFj3uB6xuL^&KKBaNHlO8cjq)}HSQwk#D5=ZLm_IpU`an@S|6-L_{?(qy3TixQ
zPM6j%p2iBH<!s<D5m#95urNW~X1mUtGG-ts9aCk+4#cPKyR+V$L|A$N`0zKmvT(rd
z4(g|ko#DsG+s{RH+D$(Qy#u}cgD4IW<8MR?THp`*8Kx`Ey6<jm8mm9|($A49NvYuk
zc;%C2ZOWJAcn)s^hDn+A(1VJubIxA<V%<4xh}VDk2li|DiyDIS^cOXv3TecA4=8^B
z0y&!#K6aezz+O{a7xwz_i_CkK*M53rp@}iZXdNyLsn1u}iwZwvRH7*<>eta<%*Oa-
zkiCqLnEPL%Q4<91096TP6O--378R$QRSJ!n&8ae*&NErFBh;$d-J#Y_wnOHkJXk-|
z<NQoJOfcE8w+CePRZyN`2VIm2hdc<h8nqR+i;~A1zDa*i)4{uWv#KVx`Sa3LF`ZKE
zS4}g3eyJh3=610~PNG|h4P3P}Y#|?jpv}1vA?>8O3^Q}h60Id#N|-MP1pXlkMs%x3
zW@mVjK^L$es5QhNSOt)%tI1(zWKarCI%KxB8=6`M#-H<E)B}1er-4h$w82}8i~39A
zEwX7Q-2zlb;&@)4)+_Bq!bCAFJydQAyM5Ke(hlC!qb{?&i6fp07hJC0zz)otJ9oy@
za=9$tn`N53H5YGlSH8CJBCO5D*xZtFFAR$1cn<%VYj|TA8220?jRr0{E_rlxV?%gD
zfPbTJt~WS=?VnK%cjvT@+!TAf2bl?k&{HqL4b}{v>|Bd5+diCy_41AT`}N5X(%AL<
zL_)PeA%BNK8$_64iKy02mKj?FxWQRB4A+ZP;gp2ZNWZIh5=nGZc!_TW&&>6HJ_GYg
z>^s?5tOIY};b5c|9dGu`)R)zmxa)EH<hSHw(htMchFj*p$(wCGNfR|T^H0UB`c%9C
zV~ySxQRQS_EsNP4+<`AE(~l9Tp+AW@d7m~g*49!vBjrRi$ePo0&E(L|l5aS|p_S5>
zxORR!Fr@btt*75DN$v{j%vb1H)DEoD!xk^wOtRTz=p^e&<cj$0ZhpT0#cT})e{GuB
z>$+Bx%It@#h(J!4n}&d#3)q*#=>e7>W_pck$^JX79qY_5Q`$}Xa&dFV1=-$!rZ_uB
zjJPIvSU0CtPhpHa>n7(4j|1HSwTN+KYBEs|!D3fkTya+eOWhl?Z?<&J1_EeX4cDJ_
z@^*f)lKB)HDDl`~Jw;8#5fFM^j+=U6jxN!s2adiUS5d#A(Vntm8bFPJn}-^)UyNMP
zyeP+KJz&6#s##qNvDTjy`00(|@tBR>{>IdqtDfPbX$;Q!MKi8`D9<ZaAKMQX^F=RH
z-yIF|QiO8}lJU^A7?-P_=(Rumd0x*{P!<+yn(={acGv>_sx)-Fa?t0Yrg{!)s;I!>
z*A+qNvAGTyq6WOX0fWJ<w)vN>cka-&Yi(KURz2AQ)<cKA;Y3>wm{7bI1g#bsD;B39
z_+ta<#~MH`9F9Ut>)C6@Ghc0B#-_66mYH57ERV2D!?M6RL+|eeeKfteYFlyp#q<Jl
z1gp)7_DySBDQQe$an!b`q%cjXO49OZ#cJ2sN19WZ<7<$9rLL6^ZnDbFu$)YK!{N}-
zNt&<ssDe$s<=FTZyqug$Zq!upVzsV^a0n-TnDN8vE;j^akYGi0Y*+i1y*i|cF5l3?
z->yeXHKIc#i(B?b>)nr2JrOEeq@*JfqEhS`@(jPWM8_7FoqKiI3tLV0M~Lj)okgAB
zda^S_V&}f>HnCfAi{EvCm^UEDgs$5Nl6vn-lew-_s-%895@xR3gfywwZq%9UG^S6g
zeqOE4<`Z9$Gf6&x<bD<cc7S`C!;~jlG^bfQwRiP!?{~^$APHCK?$pqeA|=P|O}E2v
z5r;;$G$@SRA!5!-^L<#Wk&i73ud1=fiRlCp)9)Bw7!hjf4@f4=Y7>KC{dPl~WUSdT
z@Y@mcMsRr*7$=hmB?!=<7&{>)y~K@;gfsmfTYwSCxLnk$ataC9s2eVHmD4F0hWC7T
z2V0bw9xmRjqeFAQIOL<om*wXAfO<ddX_d5rFpYb+acn;Kcs*jh&j}{iHfzh`&1>>R
zP?9ET@5N@(+NzpTxeHo!pjM%I+FAL@caXpZv2aeh^i#jo$7DXVs)Oi)jy2nYlqZUt
zzaxzgD1ZLWNYJRgDg9-)nxF;;6@{oCTIX&au3?vD<4MavfB#<bKaP&x{P_08(NS^l
zK7!!INz<zpw~6z=tD4JtTy>DSkLnp_O7Ii*I5rchPp+Na)!BUh(Q)aMdTOQ?Ke9p%
zYgT|8=%wj+D@7k0(^~N0CH{H1ih5J8CJ7cvEi7cAuR&p(Y#AakTYb8fRhMx9+SYlU
zxd*#CgWUyU#Ob1sCh=tYL#okps2gQ#W*<bv+*vz6`LIM0Rfm;9j$=@5<dN&l+O!O?
zwZ!;s8!pMkOj(q5^w;Sfq#G{SEa5i<+=qW4U;T}0w-x#W>n*M$(KscsCev%EXxY`C
z{^Ufb5>+_>IMvh*=H_3Xr}sXrfKyD0ac?S0I}eq8{K>r|dmmDFQn@piKp9w&`$$PA
zC5Rv-&=?7~oQ<n#c|5IJm_9b?&h{IYZW<t)U790&0_wiRx<e+Sw_F9%m-lrNpHC;x
z;B#O>@Jl1kv8|S+P9Vc{536~d2_juZuY%FeawLGQtTfRs(8hVUGL@g5L2Bo;q6LhN
zDPmw`nYJMwMIf8cPU=&azz4{N-jS(1pI#uc6`|^mj<Fk267GecZ&IC|*W?%w-TjE#
zr_=Tza8kc(8X6XVaA>%9cK#j&+XZ1H=2;5rmB+N|vYuZopDWAmDL6{~vW8HSiuK6}
z_=J^%;@I34N_R^2uFS8y$HV3Pyz2Epe|u$d3y<G`l<V-jpCPXv^xjiuF%Ud8f4Zcd
z2~Mx{EIPwTG(nv5**=x^7Y`28x#55>CxAM4K*SW}P)_Bb{Enh-JGsqKBt0crXcQqG
z8f9d1*8|!OG)#K6IumGWMDo5+#Ic#cuA^Pz;Ab?WfP#%OutX;wRu$I)G%<Bk1`~qU
zCp~^_>?G0D#Pn>{D3-8Yj{{F}@Ln0thuG&f@u_xO@=o029qTK{RNw}$V5Q#^yVv$b
zZYqWcke!-j5Q?%1o~7cq8r}}&+qBu|o4s^4-i(jIn&m;CJ*f@?HG{L2Hmi);O`L%&
z&2#Q4$jMEXE{x3N^hckyw^P52d%B@Yv;^?V$eAd^B%u*s|5Cr=D2)^sFoGS9MvGF0
z@<!$K5h3G;m*&By_2cPo6bRbPEHWcQ91I-V`x#@`NE~J)!GUz(xplF$pbR4@!E!Uf
zGw}WBUoo8k-=XZ$n>C^JGtgiwTt_n&bjw~s2^6!DEH$_%B)*W;G3N}Snt~2HJnf3N
zWM9<Kt7Vuge<j}9qIcYZ7!&pqNU|f^*X#ut_?h~}5GNpKggcr&tO>S){_<e-W=)GM
zVM*lM*DUtl9UgG)L)QT`KjhaJ(KI-c_>4rZCAI0N9XMG}^g#R@0EVh_tuTUCe%!j+
zia9HM`nH+7mvK}lzkH5*9N*O81B1^|9xBHvtOW&LWRI}Hk+{RU>aHtGBP{NwYm9Pb
zdt;aW1!Co0W1zgNErsYPJ(irNoE}UVmmR7q6J;Gy*ijF`<1kGa-$5;(Y$s^RSuJsh
zpjqbAy&^x3iOYn+f64egP7gIvi~&l!cyFvfK=21)L*6nJihEg>DE@*dGOokxEoCN?
z%E-9q<~C<>Hh}j8e4ThL_aq@PLU1d-q7xC%D03c)&NJE8(4?}on<qgwehnDM6?FbD
zkBSFm5F{Zz*gYJs=C9_Ts^*#5rov^{B}d6zM`hACE?mXx&%Zt^XQ1))I3-o5ne*1~
zKG&0*E$nMpyqQ)Ies|H#FTwJ03re>NgQ+bysV&Q6hJWp6`3CVDTr%2CmILtxvqcAy
zoiW+(s*i$EWJps#jl?AEm_QAFSw&D0CCLi~s#EA#0<hSP6@GfgoZkJ8!KnT@J5)t|
ze@&a1o7rS|<r4qk1d%ZhuSHq3^0s$NKN%Xx;N9%efdkJ_7?NVH>b0!eF0M;C9L>Ct
zgFZt9cyUHOHc=pBhh{KQv*-&)9y{sbIT9?u?y!~S`ighXe8U}n)}A9ddU5!d;pC9V
zJp&<tF9j$&PS)I)UoAOo%+{)&C{|WWhd@tA)J|INSsj{n^Yd*oK2q5Ad|C}FVgN5m
zF-K$BQ7#(thyzxL<)Z?*!C(7%vqn4W@W}9ptLrsme=3`q8TxcKZ@`t(T9Y@$qFgSk
zNl`BS1+5zhf)l6bgNJU=Y4;D9O(5YrOb;ospK5Hd{>upwPpbqWsV&#lJ9gx_>)Ue)
zRjdMEdfISymM>4%Sz7AuE`o<D4l)6snt?C}9ohKd`f475;YM}HjNB}G6i({)k2^`y
zO=OMyZH1xp`e55y4VGnDfompY<Cg0{vYg3{ATYN?kY7gyvB0j=0p~VKKaA-(tUu3~
zT$G+2W<-DA0T+z5=MdB!WRG?$G3}*9=E#}-FqN~6)_c!d>JQBZot*^};#W36pvS<F
zwYQr*p+A?Z197@WgwNM=8J`=bG<R?Ww3$lmyb#EV@uG4*;(CLYirHQ3&HkY`dG(pq
z-fu|L<A!I1=-mK9u0=)r;l&_&OHe&lGmj0CoUp%Mib*B}#|iQxHy4x}iS+qC6<o}I
z7Z-h}$HNa8w82-izgQ)v07xJbkTVS12OauDibP)C-4AnO#ZC>BuHRm&&jEP6V#>YR
z!Tsa=60N6$(h5IL?ALb{YAA!Q6hER03;#5K4GdqJRYp>&xX!_<zuaJGCgNH!{ncI6
zXE6?7+qo{eVYlyV$@&r+G1mc2VF*^Z?5mKIp*-Nk)O>mJEr{5l@WDU>^W&efZ@;UB
za@9&o#1ae`JzstAj?k>$%^63)VFmy~t?<0EXU$KDS`@nzyTY;ci6^9#)Z&LA)Z{4?
zAZs~MFjLWo<t!G{a%H&Sc`s`w>Q$grG423(+S<lJJfMb4*D$tJN?HlO!Z0dqptYmY
zMwX*aV$PC`8gE&)SHt+0bFBqI#2pAwxaQF{E`cR5W~C!qK6=4hzk1Sg45G~}5;KD6
znVR<y5!iTIl|)=3(ol|<+2=UcD4B7fYwCOrP0LCU8i%-k(9zq1_qtCg<Aki@0NvqJ
z5l7F{@>efE|L!yE<mRt>j0CG_*W-AIL*LKl$*evv{UbsOEk+cn<E$s?6#ps#9ENrV
z^zg$#{#6jb`d`Ka=pE%7q&OS=%`A_#ThA<xwMt)4fYIvg{O&Vr`qkFN8Oaah?!N}|
z{<>N3o8UV0_Ev26s_M=X=jOfFz8))F2<mNzG$tD^gL~1pjnzuSp|c->08Bvd<&-}f
zl5pA`Rb<{Wu`iD2r9~U4YrtVFw!9+DNQok5#?n#U*;#RJ4WgkRDh^aLcIG)c1Y{DP
zm1WSziVd~oLk*~9n<X)`_934b@gmE5GLqk`dI=A-ZJ7G(FH>Y<oev{APVMU2S4Hgr
z2zu;s>|l&gOf_?gLj0Il_4!9@c3EJOIF2VS$xAg<c36Hz8DQV9L0HzvgbV)heLTqZ
z{sCJqTEE{GZ@Xic-W){fuxl5ZGU`h@bZUVw>w}qzMct%^fhB~bGn9a#>4qoG{M>ew
zM3RK>_RURA-c2>oUO~|?Wp&@|=66;u1G%gG0$D-WwK!xOC%_7x6QCMc@PgZIb~VzJ
zBPUs?5{Rw|(o7uIMOK2UZK`HZPj_^yXw3`O%G=;5J#kXKqpg`K<mM!c#$1uFA`e|>
zS&|~x+gZt({BCI$rkXGd680v=m&U(z42tE&@f$ZdE)n_%S+f`A;$TB9ECb9@FqUxV
za_!^>m{rxpS%0}279q-85gJ+9c@_Jb^>;8XtC!zeMNQA!Bt3TDd*Cf$|JGE)1`lr9
zK1$UZ8z6?dh{FUN9F?n;L0dXu-isST-GSUR4pOVmPb{)DRACT-!*JiF-`$-d)=jyU
zPC3hbu2^Cv)c3{o<}4@Nt0P<X^@#U+DIM-nM87wYIe`ay9k@&_=;RuC759NcxM|zn
z#L&M*(3Ac72qH@<<8h;2r$EFY7z8K<h_H1%v{H!DbeO3G<(ZV*PDdHKQkK*YnvgfG
zpM0DNJ8%@{;p`d~V1B-k)+@t$HlALX_3mw*!J)F%@2iYb(X`rmYBqybOmzBGbN)I`
z1PWD3X0!julc`PJ^AG>PLR`K6G<#zMfWV2dw3V#!JP9d`!QoeYQR#C9HD|8)0`54g
zc+>c7cFa3(qG%3*dim0sCDNu8-YE2xo*L?AxRDc$egFGnI1G={S06ilZ4ZrJ+2#qd
zDS@z+IpxEMh+2d?=6_@);30zmd@)kd7KN>#EhTFyKOR_0*)YWJyY7;+&cNKBXg7Dz
zQxiht64m_OABKM%KKMKE$izAS>kqI0^25=a*Y94wfBE`{cb);Gc^vHuXA@_Cp_!Zg
zn{3<c4<Gh%>&_vg9cM!Il1Ij40f$p-!wu~8;6pTpVA}5u(#W_U9m1ILq%>EbpF{Aa
zhp(#3YTBDV7!=co5m>G+Ii#ejqw-+-fDE~g@vp~F^6;?Of!`0oFNbRE(DyyXz<)mT
zs>LP5xq*;YJ=GA}CB(BIc}_fgac~_)W)|KZ$yczg@FV%NI0qE+$b5?-pq;mhcfd;q
z0Q5#>!}-ijgFnSupxyEAyt{Nn81{8)*!1$Z!o!C1bKrHFU%^lMXXWg&T#8U{z(<bi
z<@5RZyNksFgP8V^>%c|A2J3gZtiiTOn3Y;b^2vOB0gAq1h=lU=`sIX2N8nb+&<MB=
z2I5al?pW%igWW?dwwG@_#_41l+po$YM{ecrh(l-G*|>84O*Xc(L6%+TUix@QU6aUX
zaT=ZsWvof$sSu0Qj^aI^dt=k-c<8#?-?zQ?T^y_%#?c_!$PWg`O+7}%B)(FjOV<Fu
zsV)oL&cQTD&pq=6jy=@oBudoTiiE0d^Epmmho2tp69jq=J9n~~fg^JX9y(9`h>9dL
zsp3(wOJ^00rw@m>6w{BbwT<{VbY=?c<M9=#9rUYmxq5L4@q8-Ese(ViB**9J0!ic9
zv>tyH&QPoZ0A7VCxLfD*i)A&xP|dP6$Ec`#R@(!lkT#yb_T?GLms&3&%Kg~i{h1rZ
z9{<j_g8y68@Y)M*cO`1D2o3H}@jb`|_Al|3Z9Dg;(!1F`!{IOq8|j?^ZPYIAV<=sw
z-Dx94U^@g0iP<_xi0!rEINS<=LOvSGXr9IP0NN9*{{=TEYaPHEr=qBlM#|~4lv_ms
zXsCK+B$bt6@$m}uL_d)hP&8T_9K?cRB%*R^Hp%1~BIKDF3@y2Ss#j;l%jd=avjtH?
zMBhV-DMDYiit`IF3x`mi7`(w;v?$7k8MAWyxve*<;yZ;V&|Om*XeODkBpExZ=t}5H
zQ`O?2XiFPr1G|uMg<a!bWOD&r<p}uHc=g8FYsl5<_i|kh>774kR1!Nl%C_bB-!AH=
z3gNKXm|k%{ESC!d*;|lTl!pvUg>DEk{wEQN9o3<Q&4TL=Mr=T<b{56Mruv_3BC4c%
zl#a>;E#EIL>NIx+<yuPgYxK>}Ap)3%+}<y=;rv`;(5?TvZr%|pFwFYE@u4WLO_?yF
zpz-txgS(TBT>8<lKuT(*#CNcX#;nRLZaThbAdc+w3c~DQf-(ndt}B0cYpHWonv?mm
zQepMSU|ahsF!CAUf}8XPLz0C-wi)6TtC;O=iQ@71Eg1Bcj(jj`EF))%utW(B{tmAE
zb*7`UdNQeIFK3f_tk)oYp{8ZFNc9)K=k*eF0F#zU|1NNZEM6va!~7_k{iFg17c(Uz
z!A(F_gf*;%5f%k*(O{$J6{JLj{3?l^54?Zapb!zVy>xP5H}j#M!O8&-S$oslf@2-Q
zd*koEEo;EXYHk(CbdwsvhTk$bJK}<#g~8((9yq6lgy>@NcWORn?KGifm^VWrQkx%X
zYiw_?TLblO&brTZu&~!d*@3$>CP=od9HPN#!OI;nsgYxx<ybb^cfpuc+tV84DB~=S
zo_AN~|DLc?Oqd?!NFNk}H|A2A$&fhwoXWZUY1~!5Q)(cZLx;nY>HKI-@3xwq;$u7K
z`>tS=+!)qcLf*;{QrbbrZ97>%-qP%`tJP!U1HPpI$m<6f#c)!OM~u`^JY<^|(m${;
zdw{6>gE*YnA6l$R18_YnDNHMEVll`hI#m1Fv|PvaY=URvGC5K-HCsGAwsMKJrrf<`
zzlm1~CKwI81hu|X2yP?#^xO=;K=n19Smff~aO@xnh2?u~E@m^#EC?OzVX)K=*DM`x
z`4nm9Ipp2iSCkZ=^aRW_j#N|V{PbwujN|)BTf#Fh%ChxKEJ1|O>Bup|_VO|*b!Ma<
zp7F-tEHL@fRegSO4xf9DlEfqjMcd87^c=$&Zy6uNl@A*Wt7-6g5Lg_*#DgCfTeJ!o
zf`AUkt;{{Z&Un~*A8?iQdqG#RA89>hBMvh*cI1Xh{vwuP=N$)lfx?lShHh5m^xJc<
z!X|lfpagN38zk=bkXXznf=UQD=fqT!L$fi5DgR`zzfN_C5r${Wi^j%*{;s^NUOvy{
zAMCIr>F)44KJqe7i5S~hG#O9`1OJQibR}kbtPWj*sotIzTj%(qo=%L=gkqkJcKt=u
zv-#BJ)O19Iv@u#8k~}AomfLyrHPz$-?jWcpk37M>z8LQeiW!cJFm?Ph!$}lE4`YPc
z)HnyptE`=9LW#Bk{_9d~B;aF9!(<nU54(;}i+bNS%|g@Fp*zh~9H|qRZ_7!I5!Aw?
zX0w&A9$sHXlPjf(8hRp$ImN-uq@Q$8u%iI(WByQFj3i)>!^7@Kyfi00gDzk8+TdT1
zU%hO!j?Ma3r}Kuw<xHts>Iob18Qm@tw>uI}E||GW73-2`BLm=Vgu(om5e@_BJ=xqx
zj-z5+^7^JMJS@kWwz0_Dl)ue;%>;k77q9<nTW1OYzI|#d0w<g3*?U!|KozoSn{l#b
zWd~XuKgVmF|8cnYi3d4MeP!9E5ygU+c6fmD>yVv<@Cxr3VV{T9z*nd6>NE72C&JKs
z*^xmf7P{%_e83Q#9%>(VrXNPHWNsxRe?Q4oAzcqtS{s|6dDN3jH}k7+TWwp}+`I%$
zY5@=UkhuRXr5FxyRxW>ZKa^7f#lcXgC3#tP#q&_O1R?ZCGWN8*o?ooo72ZfkRu;A1
z@ihOr$}wEiax!^3zvAuss(5ll2yqJ8UM5#-74m(0^>=cIxWLFIuAU5vVS|6BO}=Ld
zQ?-iz189zWA*?Lg3xQP*{S}F`uH#1zs(Af)lu}!TVwKvKT83AqRizg*mZP>;w|Y;6
zSuCcYt+qoBJO*|=pxL`bsyh$8VyC-(LXxzK+QNjxTNudRAZm+6bv>d7*dJ$2by69b
zeH?mMHI07hM}aCRU=}DJeW(D#>oPjTXqC<KL<EvaHprh=H2nB}y(0&d*Z?5v)=uJH
zLA5Jn^O$@0$OUg{_0DLgh=?wAo<Jqymca7^rORO0{4<f%ObOOp$}KCl;+ho5P8*Xa
zjJ9;i@qT9+lXGc7Y!lWv$p!*|+QiE4^|x*7wZ_=tx>4!7$cdDy8#y5Sxa$%z7hk{?
z9I<wsNy<d@{J{R}ZNdcc8)skX6Zr@0kAA~zQw{)--IQ+_B*c6}Qv%l;7Alo5DGj*K
zo4T}kvgyGSRQZ()sj;+`imKS>7eq;Rv3PxR1^MW1@f!(vVb5w(9?Pn>(xp7dgQd4L
z-U^5X^Acpg86T*$YkPk-P}QfiUIgeMbD@le9Es_;Ty9aN{vg|xoYF{}rrC|TF=Wkt
zC&@Ef*<caGXKw{4jWQ%34msF40j^I?L7XEN!V;~$989Eb_fwaL1<IKz_aFG9&qum^
zsUDIVdlC)!u0Sxv8;wvh(n|x>NFr546WCj)KCO6`zYur>)saOP%P(<O!Xc18z^W>_
zqhHHrDHuF+TY?rdgS#0U=$M>RHf24i&#Li9eByd)xOF`{Rq9X=-*GdEv{H!5AM&Uu
zT4nWFkR+W%6AtS*h&)tX9+=pZv9CwUZ`aCaWGH(2%L-w89UeLz5!;zXn$Gij_6Fh-
z%uX>af}UN?i&6OtR0o0TbHTWp7sR^>O}N8=#w0x&)*G=q=dQs|09`<$zgu$HNF6dQ
zlMv|jTOLP@#SV_F@5|NM@Vvb0ZL_}U#p|`%cPG>NC)i@4je3I;UD|srFLHZ|?$5*W
zVl{UkAM?f|zIc4EyuyY(6%7B3>M<G<EOKj!;z7ZYn^9tC8E|~+=_ihlG>ZJQ!*h4b
zwpFzq+?Gzgoc;nA)1!J4?xo_wX^qzg1+!Jl+$}>5{b{;_Pv4cZ2?$w7%p^U^3CG+l
z?C_bpso<1g$^CA14Gh<|8WjGIc!WDGk7Yq8qdXRcL%pL0iSBXhH9;O2^))WGVAP(p
zSlkrle7WU=m$Nq}gA5j0gFpF1W{Q37aXab2?RTV#_%ZY@?1>luc2Q1y5`sbK3ta&3
z-pw09!hNx$jmyPMw>nv4lyVahOmtjp3LI(pm=C$)Ee3ts)*ojzJo-Nm_JqBDoGOa>
z#e8;Y>8y`U0lwB3w0q|#ZUFWCLcf)LpVkhuE6CKwkU?RGx*Jiq(fJX%`p9WZuOAJa
zx#=d+ex!9}VsRN!m8cHX!wXs?r|0>2-o8_4SDqoVHqgwTmmjNlC<^opb2j|NZ5#o!
z@WVRTbpi3O?BnYgZch7;YVZ#jU{YGA|9sFV2Xj;0Pd6-42Muol>FxG)q3HpMM0}o_
zXcTR0Kf=HdQ1@HX%XZE&$RfV@F&s9~Sq%`dqIpwsX^MNQqQa0rc%ME{g0vw8kBaT`
z;NhVb2H0Q$zyAJEe;Ex-Bb8gUOoOV#OHC7D;44e)?kKbOG-ljq?VFe}P(}=NL3t{#
zck_?g$yqVC_ViHOnjw9&Pfm1LWUY?A*-r&Q)ny<Y*=YDbfK&;(O4<%>WNlMJKF+eo
z_swb4^$)%J7bUG5QK8qWiWG7ksy>E8n4l{YH{6@V;z%?P`3BIFE2FcAw_uPHT|%7}
z8AcOaEv+WxFD2m4r0<&jM_psT;M$nJYw6cRuHR9q;@5;mu1*hLDMAbeTB^s0WrcHc
zE!C)~BL-+BhUl_$vz~f7EO*P}s-FcwG$?dkRokmT^pND(873b7oT$zv;nASCrp~?1
zHiSnIrAfX8WycElBd+1w6KR)Oj^K=+PRm+KNTnYz-N!mJ0~>1LS3U<ZUYs+<KC@Qi
z{j8~`_h7;-vz<)1BNK9PTaEa3B>ZHpxhGBeDLz2dC>fvcbTuHk$#}@nPz(rUL<-p^
z7UsIs{pZ*_CTP%-9`?G~v8NVC-HhdxDAB5dRZ1z`Hu@Xo&AOe!T6VaZ%&$%3Hpi@!
zqqvx$ygJ+DvLr>=XL>{JRB%uq4u2srO*v#j9i$&A6Sk<$ptctoq8o_<&Q}~-Wo57=
z?6?7QF|-k3r^m8Kmo)os+QGg@nwjk7q78B(SG6Qatpj2spH?|Q9E+}HVj6(=Ix$1o
z1N;S97nno7R;b(We7}oA<avzS!3E;89$or6F)bmcfET2;v1Iz&ZP%E9+Hs=a;$y?0
z9lF;)!tJ}Wqsxd4Lp??yw-fE+y%cw@ye^`byEBLU67g)rY$rAs%q%q1dSNqtSyhNB
z0G48J%n_M)A|gvex0dBFq_P1cIcXheU`C3+`dvi9SgOc%Z|(_f0JZBc79TlkJkiw4
zH}iUCZXP)H0{&Kbz>!jI5UC{w$s1LiHN)vbpU^YLxAW$ExDHixzhHrwFP7D}^{kw}
znWxDO{02r%Yw>bsCRpMnYY4q858%I%Z-xzO#nrPe{Lfa#SC{HqLTrVt#gq5oFv39A
zG9j5@FfmK-qzAldqCV|l{K|~ef*GPPDl{_5l{Y9vjCtci8>dQ~W-+&6He-6MV)A7k
zs2Aap!P_8rMb0%0doEXl6zaLJHhXC9^L6`Yv@i1(K!Cl}@+@s-87W`Qw9=8ExHE!D
zt1QZ931O2pyjj`EX6wGw;)CKzL6b2O+J^5Db$e5hj1ciV7MGzHhnXPL6xRi!IcCA(
znkA=61VswRtvj0HnBbF#JL=uDu(nGC;swG+?~1MczW)Bktrq3_jbM+Cgq!Xf8v$<W
zg6%nIIi!u`qGQg@9d8D&TX*@#QQ-i!B~d5<j;nfFudc=TgW|GH^xtd-0_Nhb?U}=~
znxCH13Nv`>c-@pREC*N#96;{ozbZ#S+b|a4T{^USrYsWS*IIm%ud_2<eOzoU&*q=d
zb<K=jZS8$A{+Y3uJ#U1r%mzjdik2RWYaMCO&<dWu_59@e+QEZ+>A=@H%n`u4xF%V3
z(FQauM?ysS&^T!FpB|C6>76!%P!2K*jr)(xe}^0fesEI(X`s#OhNO17jtUk(M^5Rk
z=uU_vjtg#J=<U}SDZZPgmhSBwnp3)$q1sq8HgNX$d6VvB2Uy7TcM9Q6(guYM7Lf$l
z$a_psRVA>Hjd2($Qd8Z?7rmCO@jMXvQiq^U(OaHV?JdPN%SOK#;5}HeBym1F^E9KP
zGnLiz-eDddEzZ<hTNxfx#Rb8TH$dNw4`R_6nlMOnvQnnH5A~7J<&rKyeoW{tjkwk2
zzA0D09kNdi%zygB%k%OS<7d(pJrlQxBKWQ5KpsE7edX(i7zGTYF<HR3AD2~=Vtms`
zKG4%!Uqvxz%AOA_8e1lWdJJX4fOr(U$Y3lcZ5BULkV;(d$Xv|9K8Cz#TzARKb%_5s
zAtXB!F=xskn@65c4oI87X5W|W<yAqh3IJ!iHthR4fvOtLPfiT4_{mhd+EYJ$FrTjX
z)>%@DmsHK{L0Z}k2ww&sKwpeINs=kC#G#3@)_2+HL`tl}&o?bk5eeBSef(cXK-S!@
z18lGg(GZ%xopD>V<J)u=jEP30Wfk{rn?k<0X>($Xvn9w)>+@X}9uOiX)hfy+XC?c<
z>3RuZc3FBZX41e{*N&_#(~Kt&=Lm#-86p*BR)lKNG`0qQJ~}gSU)5QyiMJ^xz78r~
z=15*#jnuWP&ZiBrktu{H>3aFZRu)u~Byw|=)}43`S*oS4lzvpp@NlpV!rr9)rQ`lf
zHm73ipW&<wK!t_=hk)8CbS-x?3s(LvjtuGAt6AdI;j-dD79!KBt$`|mYK0mBn!;A9
zNTv`jgY=?7LH#E-8os?IY-Lo%sv!{oeXx5t%xD*s8`Z(q5g6{;iEI~Jw!eUit;4)g
zn7rap(55c88kU11eew-aw!P=3OKFjt^f2eSm_8=AyALzO1e6F|;BYo;uM5T_Zq-<{
zCN=<jUVef;B&v(2cvH5XGRz|1v|lFeOYu{Ylgp)T5}Xi|p4oZjs>*)JviY-AmsrzI
z*ok`JrOnl0t#2l@(WB`3Kg_+h_yiJs8oq47VovEVTUUpnzTNmReLt{tF=A>pQbT6m
zGqNEqGbZ!s9(v@`N0X_$b3zI$8(+4msV*`{3%sXV0f#8!Ia8<9OR5ztzX9Zp_-sD^
zNN=u#f}Ys2+rjy!QU~^IP}=jiTWs=zIJM1;{c^H)1j<M(^2{xUK6N(oYTp+RCh{Ow
zJ-1^AG8~)Z?>gPGn7Zz@>Q6PqZ;4MxeR2Y#n2)8ypDXVk+bnZ%XH+zx*RlxTHf#2k
zI9o!WlM1I~0}cWNJwCTGrU1rXY#W+B<mV!i98oW8$(xPb=E#?v@T}cH;CM)fK3Bdf
zmYUI+fT*OCZh*9dq52jAQOR3+o_th86>K~zA~Rv?qTNCzHgECSd`2#i2RDAG`uQ6h
z!tgDUCQz$QRlonp{uL<}yy;`)*%xv=R>N6|?wnDCjdoKQ<ZN4xYcQC;z+x&eYx^*T
ztK`!qSu~T83d7)6F@Mg_M?DqD@8uLtQ?jQ-8t(O`HSBb5!hEip_ag1}krYx64hwHl
zlJ{tgEloT_$x1ZdR4<aCBCaeFTD91-xPYFRk_wV)+CME4lA8Qf)w60vr*9^=R-AWC
z#c<cdTnR&rj4F;oj4ULTX)Lc+)hVJdjZy3;kmmGi0S@bGz-0hz15yPv5A02c-G5tA
z4K`)U&NmX;HWE4V_RySMqNHkU^INcmq4JmPsz?pIHb<OdMV6k}cU$%bOB?qjLg~%z
zrLo9FCU4QF9Q(W|%XdVUY9*zb%#?~68k;A~y;Kd5<{D6vQvOXf=nH1aWLa6K_2OMM
zJt6Z>e-}1~#FN?Sw2IRYqo)aeF^n9piPyl;FCd3$IjJv}cyXMuUxL}&?)OBO$7m_`
z7wgDDzy6mIJCM|=orpMKV-moa2*@)srlrs$^{mJHyU$@86i2gpbB+lyuw{?UW+zP9
zrD0uN4Uel+FzQ^L^;luqjC=4-BPYI7$blaYII^~5fU$xb(lky#vrOF_rH`bSh|7F8
z>x2!~(T3PaC(nV}PAAXi7D1QdMytTB7-H3Hu%iBp%{`Er??bsp_cot1Ipa#2q(I=H
zkw`d~M3IM3pySO;1qH4!AK*lV;us>cZ0X)nAc;RTa}Ic7e`{(w10y^!?lh(%B6K`A
z%-#X+VC<W}t}@L(h~`VP9%}PzHF7qf1I8D_D@e)$fOS9c9sq(&4>1g8;UHxB`#FI8
z6E4_?ezpz)YuE5Y#(V?nkEiox6>|_!CYw&!(*~3_kYOIm2Go)z^AjcF^@_%*7riaG
z9?U0`Et%$-tn0_OVebpb6!N{fP}H+d%syrDpd~M%H`~j;=u<FfYH<I4fqr=9jC!_g
zr8vIEi7X(h6XYK=Tg=p%phF>)mBnO!VeVEt<X%UuT#qkiQ!}8=l<9hb9!#&h!{7g&
zfLcNlv}#%#CIWfTPN(&1d{!-s<7)M(s%Ey&<t>f|vD0@rLKs`v=H*$|&(J4x3FUFj
zI_SX3a}c%7p_NmMff!_Bpzof%`u6C}%V-c=DwE0PwiNCGN&2ff&FR^^f#;$ghU1Uq
zs3XYA`e*p?e*UJJFKjJ-4cWq_d<T%RR0&l2!W;pt3=x^s#8Rk9*~$^f`}gkMF-+<W
z*snVxZ)lZ$lD$PUzpN+b24Te?)8Kx{-i)U2Pq8IU^LGz=2Gh}M3Npl1dtOb0`rXP>
zAp1thGF^F5_?V5-=R(+7IX!uQX0C0s3Zta<q(H<V=>yy4P4U|+v)fku^cEd*fDNwr
zP6*<W+25~W&;oYuY6)>a3QQ?jk5Qvn{G}>BmFCU^DGp8f#flg~d0Ez^jxmE=7zR;H
zYLcUia^-q1-I~l#R9VmdJg&y2k?Jv|($Yv5)1*%u1*HJhfQ5AE2Kh_n0W0ay?l2Vg
zHm;lT6jB1i6X=roTLo@G05ANqgf*r$btAfgU-C+}f72^6OMtg@S<NX|umQ3vX4NU_
z<y<H45fFfh06^Fsvjn8WW`!@cCvXE|-BeS<4?dZtK7%nELjb1P#jLu5Y)`Om@8<>D
zM<XBu;DrLvM;uEIm`_#laW?-%umdzJPn?MPPqkT_$=tGdI6yc_I0{-(d-V0X!yhrR
zDpH#xT;LYsfs9{Hnz64YS2RcN&{^M5IwO0(YdFtBK#^&|_$V;sx)hLjldZiw>bqEA
zbfa{(z4<VFXTgCTA8cu2zOn{^Nsh!+=ELv>=M-2(+!}{d+M4pXrJJy4xzFY^a~oe3
zy=GAS|Ng)KpZ~WHM2hEAUozO{{aLjt-_L*g0999K_}Y*4<Pj3^cQq>DjakUA*p9(}
zJu*_%wv<q*P68<$aZcI+^$sRN1KCBM7e<O%R^~J)@tdJpv*)Ul6_R&@kp&D*Tvo9C
zvD>0R6cacGW4^d}u(PxCsD%GKgrB&O^yxm6g8v^X`X^TOdn)>OR`l=LqJLyXf1slO
zhZWto!2IbO1IRJ_=a2C7B`j%t0<O+d(U$BXjVQ4w#|9xNXAF>40!NMoUMJNC!DHlO
z;7R$H9X})cBdgTl+nohPwKa$Q^R@#NR0IgRVGu%2+U+OjrtjLq@u=7>9=jh(kK1A{
zJ}fF`+M&9ysiF^*W%cXR#aW3KF%tt7;w4C?wk4NC;WRrlva$ofaP|d6J0<H1_zC2^
zEYInzgp(4@MtBGB=D^0w$<L7R9;@SW05t;`$Q#}H215MuVtj@Sn|A^q{dvxZEtdeu
zr}@QnVvaO(Ags>JYS4EAI*Bp%j>=!IMf{GRw+K8N_48WL1}6pTOdb_2J(ib0%uj8n
zzQ3Ld@3uO8U!E?uS44beMe}`a6bP0HkP>y=)2iGrdP=FMObG0Rt;6Us9rmdA9SINv
z`G(QyF&U%yjkY`7-F-0d07{hFJ#oJ<R}1Y9>fE->a49s$XuA^0vh3EfZ^?CAbg(U_
z$J_c_klSUv-A=yUXLee<Te)H8j#0UCcPtXC((Vkw{3&~HV7jX?)qcY8aLgxmxl{_@
zVHK0+2FfmtO||xs#X<<}D<S267TPwD*dhs)E#UTkW&#P{)-fa%si9)hT*HvkIKogm
zvWg)_Hutm8wt=Kz$W!0_%mi9A?f8Tio!b7+Va|`bL3;>u092>=6hjwhl-i32Ak@*H
zW%%=<CZ>O1Co|~fh-zCWi<pt-6+xMf2RbPI?tR8h2N_8BVm#8_&>@lI@L@pQ?}a+t
z)BU3~V3jqceMZ;NeJ(`ndn5y>m9+O%<+|;DXsWnBuR}lC9#e&r`dDfa1Bzabj^77#
z{2{g+{)3#UPU``HWO7Wgy!Zo7>kq^0P1foU0k}U#HUzWVtW|CX>Yl&FT7}!1rUleF
z%Ql_w?W;ywV_*vmJAVw=ISzmRNqa-nxIqg;^NhE*hL>82tCdseYS`SM10CSx1*v6>
zOb4B&l8m#KM*kF0|Boq+(h#?xQstBy<j%a?QmWNS<W5pgnXL-!PF&_61CstJ<}&}J
z@Kbg60f<&k^G`U{f7*=G{8Iq%L3%3OW)<`E$exzBI~(jOYD<(ID}CA1UO4P~UX1HV
zK>f*GQ9v)08!x)9h?mZ|!w;@QP$G5i@LHt?1|~<w2Yo&-=%rZBCKZdi&E*BX8_Suj
z@2q7WFYpD|ci#Sj#9oZxIkAIADW^<2xtLC$p-z4&R7!<ya&Gf8W?oA9RnTgRTu~5-
z*%*9}b=QU2E#&8rNpD0xKWsEL?4!ZuNj;tR`gudG<qzc#Ju&^n-HuIMoISEx@%P31
zCqIHYo%tv8;{K&*h$rN%t^6`X#6oxJU!7jQ+>FYVJTI4L;)m5V4CL!d&gzQ9tB@;&
z8a<iTr#37SR@e&UdY6HfdS}G@(m(>)<pHi9gBQJ-*a}T;9j~5=rxQJ&_ak-<?VaHe
zN87zvHiL?QLtif-)WBp-fLdO@GXrfj2wC`WO#SEO6%ZZcWA!(~Ep!5DH<;Or+Pj^w
ztfnWpivREry1oqJqrQ1b86((E!&JqgG_3tyw2-aM5w;bB*JiI7!*};rB!YBF!H9K?
zDN{|~)<(9du2!a-W#N7k5C$`=dR&0lRk39xH%sES*yTeN&Mu7GK-4>w?wFwkeSS8d
z&KvXjf1I40Bp-oA$Y_Bv>lpEPh0&U@;8AfM_b`++#tlCz9<m41bR3IrQC8Aplro}Q
ziP(q7ksyzFc%xzUEl5TYYRmD*Q{-n3e^JSn+TC*8)Qi=;k)0h;vF2xVgf3_Fr8g_j
z!FL?~A#x9kA%+thn~Ef}<E-b7e<kKB#zf1{9>n~d>`r9|UUM-vv+IpdP8l~_UM!>o
z4YwOlozg?xA;F*W^~7^Rt`g&dxhnFhFjq^yRpx5(_ro-s4i{v^S5)GjoW?9%CNU;|
zPpFn*)3dkWl0e4oMy|(yKXeI}OZU{^rA!uH(!*ryYD@Z$Y+Z*?nui_Sgg)Ch$w7E=
zMDYpyCg8)j=JJegbS`?Z#KqO9uoDx-*S7dWiyv`hujxr5vB4K6o61$B6+dB&7*TG(
zxSWk1e`27-p9EZ+EkQ$9MT~*NeK^8HxF{AfsqzMT6z^0tgL>UOC-x}?jrQj;{s27t
zKUFh-YRyUaiz6f(`@2`hx;Jj5Ys3S#(!eSu{}V5v&>en*y%<f!$RJiKlHkPMz`HnX
zJIfW0>ZOCz(RghCZ<k;YUD9oF8dp^UY9`2sjKk~VNl$xd{ifH9I=b$T^}9jg7K7ht
zzih~r=I&<ac0rh2CW9x~j(M%OkgWqLD%%B`1p@?07VV}kebv4#;g45N!wRY<4<u-W
z!q5r#ympP2)+$bE6#Fx~fPM4ns$MwMwvt@r7S>9sdvPWlh+n9XuahLQtUA%6c{2s?
zO-UsXeH(E6hq#4X2-d_Exi-l%JF$~p|6Nh5u&_o~P&_6h{LvbzB4T97#~#xPpG@Z<
zq=^dm@!ltU^-s!yweRypJe+jDVdb2Nzu6>74_=VUOC@2w*lMxVw=G3H<<V%>l(Xd&
z{Q2~K;qGzz2C$nihKZsdJ#Yr9(9D~af{I+C4(TL4i4jX)F=OfQ9`r3|09rQd#}p_;
zUOBXjX3`|w`B(@uuEr(llEbBG=44~8*4wl_dGajHwL#p9gWk~eK(QjQd!JrmDQD(&
zg;qoKtX!mm2)1!JC>Pl6AjXX?XZka)W^3sYzQ?^mS-(vcx28Xb!L--coG2r`SWBn=
zavt~TKSW(ReOybQ)@4r<7a0--J+>_j5a&RnSo!#1A25(A7EN_o&+(NNtnpVdHJEzz
z0p7XnU)R`OFpoW@RsNpxc|>F-R9CBNv8c4*IY;)>D;zSX`dU@9B@Addf<G88j_WaI
zC|S&>7~TAP9}De#KAW%RvuaBl@VNS=HrTmnE~5dRSGR?P;SDrde=eIPU9Vs#(W~VE
z%-za!ift!V?_--`nOcaP2I6KlvR%-#CL9$gN4jEoli#<U?HI=CZ0yV@wKEHtv(3Yv
zY?(LFv%eGbLT=v3fEtKS`;lcKcdhXt57?No5#O@Lp!j^&-$<~Hq#h<8eKQ2WTR!5G
z6Ycnyj4uLWmFc!{vLXE5e7^9w8^SN<AuxqxCl!I`V7}`n_t>u2HaBW6M*LSW#Fw__
z?`SyMp+JZUsl^XGL|^gq4K$VXK_G?f>oB3hhT^kC)lTDL9jAWRlNLhZ0^!l|vrXX+
zYPtfv3@$5hNn@l8%j$wd+L-EAkpW!FD&Rz#zkM}Upi{=s6b^dMP`2mBd`uJGF<p#`
zy5BGUo)8m7o5%LU<wqq|)qJ+9XCmfwaG%Bm@`|^%eY>Y#uk750v3Y?Fu^VR@(PDxI
z^aoz<QD)~FjswShHSrNzI)uf{7f3|t^E+a91X7!V*)M@waOk^t0W`ULPRix#%`JA2
z-9NNthV-j_=iGA3Y`zQ1%hR8Nt`kZSl&DPZm7g%>`3Fd2fAxW4sC?Lqr)#6P6+M?*
zyKSRj-H}bh?U$AJ3F7QeNi1L75C#;~B>^<r&ai?8%#=XRyTjW$rpI-4aMG!wH#}O#
z`!pi#fTP}S|8Vb4_pN+$TTaD>tovWWjH0{Jl^bH1*u`A?Pf5%xL!z@WMuIQ?J-*z!
zZxF^1=uJyFd~J?JTqq?f6Ou#{NS-m#YjbpK<bsV&xzbn$R;FFkvwP(p6>Jw*aL3)=
zrs8!mmw}>tc{)>!!w?x1Tif6#4jm!4ZG?+-R$)d+%i&|t?EKV=WO2+QO8mz%SpYWj
z!d?Vcr<h(adkDNF^1BmAI8l)z)Ph3FGGd5lg##T;sxc%#vAL(I48;!=nxIc7-n%g}
zvi)5l+lS`%sK9~%o{;)DV2|U&q8M@ED@Ch><SSfuM2ElKohLi2t7h5IE0iAD{f921
zfU&>St20W`!Vg%wCLo!+(cx%X5E;;l!w+V(13zP90Z|tM&Q+h#L-pbFIL`<j)?i%+
z|A`=oImZI^S8+s#_z6(zO!yW_Zsa&<KZBv?H3nH(gC2ivbDkw@1o$Q2+3;MV?{+UL
zW8mu04!jxNQ2d!WqbIVLo+Z<5WSwZducm-T6TjrDMAt3*;y&`uZT`;7lMX5(M9adq
z7?3z_MdSs1o09Ok-y)6ap0vnYx3++d(6#4z!Hfs-!RNBc{>s>bbtb^riUv0O24*zS
zBiPZbH==P`K``{VSgpRgp^UX$%2>nvo*A>0i>Ju{@X=%$+l%N-)%0)Y#zp{*vNe4X
zmNm0~DHqH112Oxg+%k4EJ1>}i1>>2VkrMm$TN~H_?S~J5JZW>Yq4^8tP*XCPbTp1R
zLTiV%3MiGde23?vS8M9nvn&7IT{yEf{F%^FC&*NKs9!tGj~Lc7TS-Rq)<*j()-@Dd
z^cm$!piS6gsjZQmAO~>zQaM)xXG-wCg1}@YNiMx%nSx5)>%<Zcd+0=#U_?zuSfhxF
zqKq?yCE`>PR~!s>OfwXsdXgbh3-KCLL?(3_i3RpzYBd{asz^`8Tw{{tRCJV_`5Z*T
zPIT*yH5_pHSo{pA(8@uRZ|8TOPom5><B^R%^Un2SGt3BcAbYq6g#daHD;elm$2RF{
zjH^gNMep7bx-IywF^ev5H4E+wq<KL(AY=o9yXCJ2n0y6^;7cO{V?70GF9jaLTXlfF
z_ItYOdG*)aoEod^&AABGqCixZq7PhehqswFCz@k8q9c-t?k9GrK`I}Q2r5NP#&Xqg
z53g4d!Z(db-&9K@hhQ}I#Bz<H-d;r7?#FxW$x_p-KryMbCI%9(U-aH3-neqvf))>g
z?v3w?sMf<!D^Q=%%{?GZ*h5WQMM$KK?~4aY3cFN)m#VX@M$SF6mB-5-J*Yzrp9g_V
zLA%vkJPZZ#_r5kmww8FS6x-^7*;5cMw(TW>jAuh9Z2Xp;6k~_?(3Um8w&7V*%n?ha
zhQXN=mj3o^B6(BGyajA>(T;+<OAgGhzqHr&HvtQq1xmR@ZqAQ4h8#Ae6<mUpvM1j|
zeYBZ>|92T4i1<4F>x`JhTepnnw2@lEJ--(Ju-^f%>Bdu33mw!8F&|B+&pkWYk3ki{
z1hMv|)DI&5?$dtG#7VdO^8i2iRTE^zQ7SST<0gY1$Eo6=#Re&Lwi4GiJvYIcdrFsk
z)s12SWexf<_z=9(K%~#BdYQNAj~A$#Y8vv-#Q}74XwP5gE2)|CLcKffrnHu>JYzRt
z8j7?rWWVtX*?3D=mp7nZIU{DL#lf4x25KBcyY+{{kWCh!@XX}&1CG`)R$x)wEB+_u
zRrp-at`X(;?sw1vS#`{VupK@0vJ?^+Jk2$MkFL=l2J#inse>p~Dbs^AwgFQGHS-k;
zDO~rm$qauJ&CJ(#3!)Wn^9TA^FIwG&aypN%>V1RBI^dBP{_W&_(@nB>=K8lXz3*re
z&-e0T{>je8Y-htvF&Mo3^1*z$#xLK5FUkI9d%m#&D;`Ss%h^v7bsY@J18bypaZO?J
zMXN=5J^R2$`*8cwOjB@bXdms?UKzi^GDrRck!OHz^N*>9qh~|(8}u~H<bgK%0OYpD
zhp&@|gcQ@7BtEDkBm0Gk3yjB-;dSEo!`#^Sl@9p#2n<46uTe62^n**hbX$OwWLn;@
zE-Jym)0i%>@z(Xj2T*?ZNamg+`Ych5qYlJ^K|Jsc&GNgOlgF0B3QoVkwjEGPn@GO%
z;ViAN7um3wokLswwnFUv`{poR?ohDpoeHw87T?;8T+3p4hT&0XU~L3JQqLfC>#SHb
zkacQY#gx-U5=v!2Gl!?8ktqy9mc8S$SttAjudd^A2{u}vY@`dyhCzJAd}}nmB6y1M
z*xG{L_;2i%7f}COYotZIu2m;sD+krhvVqR`c)nWA&j;x35uVop$g_D<|1zJg$|+w%
zsAr~OrzE^SFr+gx=e;6CaPEhV7&}R;kfd;Jj<*02i9P@)e%fZAl6OoC-zS${Cjsv&
z>DobcC3+6P_z7Jn(0Zu+jAWe~-EtV0fsZnfzzm`Rg1K)n7%<%FwT)p8e-Est4~&A)
z6fOz@j@;~Vv0IGd;OwGNWVY^Ou_6nhO<=111^@e<B!8#>1lq~+AA5Z#aS>`#jd!MC
zQOT&OnDOEL+o!K=R*Z}lHW;l(xELa3&*`6C3oAph(!y?ux%-1!{e`tUR$95uGxvX`
zqfM1|v<>I>UpJPr%1Jcb_9ggi6T?4E0_EhmPFg>t0O_){N>p0EZZfF}uVWy8%QqIA
z&!%L;CxDS%llhy2rC!p7VhttD7q85M$o0A_1~7d&0`q^n#k9@cdcN(89sU;RYSXSg
zRk{we&WZH8LT))$41DM$KSbv#L}U0_ux`RA3f1G22gKwyONJCLsT@Bq$#Fm&(1LhA
z`JhJdnSj7lCHNEOEz-nP_7Je&?G$`{ugu`GtPEGpSmdXW+btZF0y-~QXLfj74|-CJ
zQR<Y;=9>5(hk40QpGGvcEIk`pFroy`k&AMa1EU=zFUJq3EzpHpD;-duer7lge>NHL
zLk;%lu{NoZq8IiIB1Ca_HzBwCed-kR(ZlTl?Dq#+r*>oMy}q?@=eupRZaG&_Iu4(e
zu8-Rx7Th4)cMk4j4tHycTgeohk_Wd3MT%_~$AR~d5js5dgyh5FD;h>;zdoHK|DbLl
zyalw_)A*193C%rxEAykn<w5Lb+nH(EqY(}FWHBv3P-eSXaJ7ElH~SDZyB_e3E}2_j
z3VUbe(lVgNrd|;8V?^eVF*qX8P{fEUF2t(RLb{wxe!z^E!0zApM=dZy<UXZnlnDPB
z+K&)4761KY|BXy)>)8oB2)=dg%-#GPJ@!oP6DU=@F0U|;H;jQcXSSmG^|;uf*1=sr
zxIqv!qQ!N-#V7DCu!C&d8APLP`@cUy5)0o=AM}CZ*z$c{yS~mMI6_}%Nnh7{*(^aG
zz$=j$$dARW4L*(BEVheJOzA#y0GVr5s#V8t>;Sn5j}d0$Z15CeHdi-;QY$@<Z2Xg)
z<>zjPz-gAYo**_&hvmg;zNNn_c%}D$q_O7Le-a4VftE_B2g!eSB3gC~CzR#Ghp}b&
z6(1PdLZL_)ymoBl<DKGapi)SzA>7Nd;Zi=^Fs3&2kG;bQu{e5+cd2nEj*Ehl#<O(n
zW#}0DW2^_gRiXMQWyE`}Q9^t~ZOgt8V)HksOtJWk6{}CksxJV(eTHe!VZeDgc0Q1J
zw*iy-$|JMOy4ksZ>}gQ!L<8Wk+5lXYsw!ti)LxzgS6BP0Sm^?>060#HEud@*ViE^S
zR)dAy_SH>3>O>Dn*$%$ai&Zon$b7%vgOweO2I(}jFNh*$_05bYldky-!-PeOXVNwM
zF~01{Ys8^_T=YQHK*cFsbPY4QO74WB{<W#nyXI~5M>GEpQAYOR7AhzvbMC7xXKn58
z-p=AWR(9hv!KD%UZBSY`C-2|;A4f-Teti4l=;+>kd%B!7RrO2N`+Vo<Xwl49^P{5?
z5yYJkdUnLZ&<^ed$!El*purvHWHaI(H-kIeaAPFQIPQQklJ!)2`ugqj7jKWAy?*uj
z?K?2b#CdErr^mfN{$Wr&_|wBd@$mP5?Az7G4-fzN$3gMW|7^bg{$cvz!5__+Km8&7
z@Nn1s=b!#0KKvsz_~(cCAMxSAAAfHOcVYBDMx#S^w1>ODhyVOze+%A&PMhlb&f(r2
z^XF5SHFgSqClHsf_~Y*17Z`JDQ9|^mYd7;J&;Ipa-oF0vhv#AT_wN;cvA{+{V8`55
z7rh?#+~0qM{~G?cn3m(JhmdUz5W=#z)ej%~P&z1fhh`SQdc`ABI23wybgdFYAJoO)
zN5GI-)}grA;MG!a@U+`_*3@-es&<c4u79a)prGgE<I%Ie9_E;FW7!h^B59R!V#0f}
zawG-q>(dbzlkM$Vhj4yzdN#Z00%9_%`vU*clAG0zVc*{FOGtD$-pr?E18=}z6_6Mw
zYk+~{!@|>$cMNx>t%LWtdrkL1axWewQ}CF4Nv5dp#E#)eu~YrNT9rM~!7$X1r0~#B
zJ);Pn^OM4@;WPg=i3ospqH9-Nji{oJ>DQ~<pl!>$X4KZXWcSxzt0D|~FU@RlwU^J~
z!h=Wdvd4V!_}YIA0dPLTD><(w<881n2Okf`#x_!Y{8bXDZrjk}C1fjDgUt>TWZ*^Y
zE_^^uSooQrLIS=Df?XpIN##(T06<y?F&=s?;z_YP!2dUVU=A{b!qtwrf!YE917Tw^
zy)YMpBYWmKeL)TS3@Wq7r|X?-u<4m*5_@7Ak{DO7FRP}h!DE%hWT!gEm8ns^Dz6~{
zEisiraa1;^!HtYBJ9>_|_dz@4rk*38ksXcfzh*<=117sxBNVT>uRHN1)BL19O)t`3
zMhkUc>t=p}?!sc@md$QC3uGVGHA}dBRIKTNGUS@?+|?4D=Sgx;UkI_t$$+7UO;^hC
zF?)u`hYvF!vN!@rUX<gro^KhP$@iGu&2+Uoeop?Wxa-SRWEejv%FD8z0)5Fih&TnS
z!7tAj6qVIGpV$(EOWB;|i?&rB?WY#_Zl}XBy`0uY=v%U6UCtw*pJx8$uC~tj-aa5)
zj6YT@XS3CFE(H(K7stV}<KO)-7dDnooX72M6iv^SCteCHDwO*yLO`9DS8&3;Ay+v2
z%UQF{s;ku#E5^CW9B@dsw-2o(b5I^?;noT^8&hCJna{!;QHH8wr61DLpVKVUr+CME
z$Ab`3z+D5vcJTmg1R1Wun)U&NdY0}bva=U5G-2H5L#<Emx3Q-0SJwYX47MZZAzj>l
zW|ir4@w34yYi|k!R(&X=ZM!f(AMzMZ_VWk+Sq&hBeca!VVBfnVI%)atp1aK_2+AOr
zr`}*;u#5Newncexn??Byx(HO*KS6bh`(f>X1yS1=Qm{8*LFk{I2kBb*`O-RB*wr<n
zPRzy8z#d%m96(4FKf%0uewn~Ck3fVs99Gq@GuFqI303>4_aTn`$jvAdFpEugFZcb8
zjYehxNb4a7F%^E^Ykl!u$6@$zj07>%k7rRg-58bQmWO*%kh9H%IB1CN`|@g|Gl>h}
zn+D>e*X<CF58*_vZ2!W6U8xV(x7X>=S$|5{r_k>)t})_@TwI4&@_Tue;8IqZKn1L~
zgWbuKfp#OE4jhnNs5=~qyW?UALK~gVjsPd88TFoe!lNGXZz*b>{o<CR{)#c}?3Y~E
zog&^@)NT;>&IYq6mp&v&9mp!qqINNzzHWYm7rUNA0!7k@zS&vywaGIt<nwA$8-mBW
z4}@`HvVnA0YOSM(+_bk-N0hKFfd_7OVb{VmGnG8@wCM`QMy}6#CHUWPIHWC;40Jfi
zHZo@+tiJmFMw#wSHv~NFf`Es=6#^dqY6!SVD7}VM!!X^jD<mqkX+~4TS@`yc{kF{<
zHN`#rYlfPPco^e3Y_$agQglH2sXLxl<?Olp6zR!$ur#Ma4N;BK$1<qHw5=GrC<!Z*
zcGOZubYNe6$o$}qjaU$LdRy?<)*xk<C-vz?qXo$#t<A-GmHqmusaLsgXy-gaV3Qah
zH|;o<x?|F<;H5XY#`~oZI^)(wvk>%S%{3*31~r%=zt<;!u9vl$8HF!;R~z}QKB=oo
z@4N!BOU4vp-tN!xG4t{6>_X&6a+q|`uHTKzsrAf;@uC>aMkqr5U!dgmoXkzA$o;^k
z)D39Le_U414zSN+2>Zq|kRO4_T{Ix9!pDon)9Zh&u6?9v+dcWDo4)$P=^SmU86wQd
zo8;OIVD{rk_L~n|UiF7(HC?i-EF6aK%K#2(@>#xE4q)CuH%*ITGhi=4NzU}76ECex
zU1=z9(U+Ff)4ADRXXh9uaJFNn${xbKHZ`L#wGXg1D#6HWPNm{B4tBjxbDG_%dmE|k
zq-5;Xr=KDp!4CVr<>iQP8RV1&i!K%});<riYy;b_(_53)*fM$=6_oAleJvG4n`$|q
zURIH91lfLAa8p@<0CUUbD~fuDeKIS!-qJ(+$VJj+hr56X_MSFeUMv>#X0;4A(c5)y
zZ*aI64$n*2*~<eQ62H8Bt^_Q?FGGxSfR7d6bXqnTsWJYvs?V!0n7l+XxJlHr)7y1N
zNhDm1Ct^G<|K&y}573ZGbgMH%NN4lugz1|@nW4fzwA@L<11SLZ&3@=jz4CN8U^mCM
zymR5^Q7>FV{IR=uPmy1RtfW`EmB`dpbm}HTx&NI)tXL<H^l}%EB;21OB?>I-gDu5i
zleW=9lubZ&W|TYYt|{qe$N;|lRIdzwcLeMY!M;L;U~#quFEv}E_FEbRqrUxvjy~t(
zrYb+~Wq@+$^?JB&qt@F9AS+tvkeFRQ|AaBhUx0Ue@2@}3EPpq^G3muGL$UR{&&k@{
zZ2h(UKA2o-fRxhp_qPKl6hZWX>q6cJI*1|BTb_@9*`rX>ln5*hwwQz}!;sf9R9Ux#
zE2|Lrijt0{Rm@?66%GzJjCU>%l1fd8Wg~@w2x1tUi`@8PHgWHT738<FcbGIrhIJ`A
zLQ^EXH2Cn2GT`8VM;082L{srgutkKQP!iwXpd+VDS<Ww-ape<PDgJBNxpUbY=)u%R
z5$t+wH8!C;Z47OF-Vy@pT|SJaB|`$buf~{Logx{?uGILE%ZuZutqW&q^1yUCbgRe9
zXbIu3X!*hzXupkXkxZu-LIk=zLJpv)D>l2(A54<<t}y#n0^vjwy3vn5M=NHgnX{3I
zC4VA@XpkdB^@|C(1QO|mX%D=MkJsMzH#wq_8ovS%rXLT2xubva`K_qVaBYM-MWsND
zB21}`DB3gEpT&u~xX5^us86t~I4UPpAg%{P#9uMape>?n5#|!#QdJ)_^g*eAsW2HV
zam{|hTccXlY|<WbBMp)pX%b8iim{!IFZgXUKljW7SGsJjDLq0O17;s=ywNhB{tC`J
zrV)>G6LR6bS#zlQGtC`Y;&==<^Z0NQm-6+eQUFECyxU;*`cNead>dYWWIY-Bmfo}O
zTBqCOEF#rihSyw;2#(=Zx^J&rkBqhb0@#~%%iia%ZaW`kJU7KJnvdEqPVst8ywV$K
zW9&$gZ;AC{jYR^y^zI?qJ#w$T=Eu%X|FagWG#4w`y%&~0^!$sYeJ1op*U4oylE@X#
zS<NO1-$YJst^mg*p&Gt9<BYO|fsYldu#;J@M5bqs@niZ!V@D;p-qGj6NKEF}vH!KZ
zCxTBMjm-pB)l<thz~>{wc&3%cA55W3N5Mj((pCRS)0Ee~H-S3WMw;#V?p>RVPS@A#
zz%~{1$WXM8@ovPNU3&3AgE$6Wd}v3RQlb<8NG4_Vc@;+V#cqdUWTOLcQla=`PZo>m
z^|#<JM*>hBa*4z%2pxcbp=%v-3UBkwy0n_e_b4LS4wqJIO4L}M8iI%}Of<y4{bPAh
zGm{pe0UUCl10dr1)XUo1h};o+Pl^E)x*@@hr{9X<;hVvaLaY1ftTrdKoIGH~j!p{H
z*C$wmw5B@`BExjF2{=Elns324mO9Hs(__O+;fdzJa0L|))vHpj=P0$RG!dao)+H$r
zH-ych0{J;kZcii)3b)x9xv>>J%RFap`SVGI^huX*OH0zUHCzW=G#Y3@#>zY?7_kl;
zM=8O-b4fv-3}1&f4Dn;T-lK#p0$urmr}J{fr|&eAY~|eo8Tw)7f36gWCtbqu%53mK
z8;o*g!cYghhaNNTT9}&h+Adh+ta($P)-xW4FODie;=lMl{wNC0%0*@4ZAH7_(LPxX
z5Yiay(I#QUg=c4(NwCw)RwMy@2R#u)(YBDs{nAhd*KNTA!h@o#w(lxJ@KGxJ#!Mmn
zYO$$Ka<n)ts~s`Ur%1DZQ(sk6M3=dA!Q+KE5aDCN1G^9gfXZR6v{oX4plyL&*=Qx=
zn3EmA+UA@4a8ayne)Gt-Zff7o8+wUl+bQYPH+fnvD{R)<v9Hxr&tLeGLwA71qT4D;
z|4jQlpdKOZhI1EJE_Ad3#(iU)oDcEo6A)85JlK!i-{sW?tK#|(=+8(!5)g}JLYIbR
z+m%e+uCU!qVEJ6~)f3;Gy+H+@%Y*?0;B{jiNqVfIWjOR}=om>T>MP6YV{UNV*^%zv
zZH+B^llDf31#%`^65pzFJVSH?;;YigF>UPtwTzZYWXBivbn*_EHcH=8#`BqD&|1VY
z--2XYs};ujt+)8@T5sxXotglOmrtwd{1ZKHzVg3&cFWf6-8|GLxkI~hh?qd+yUuQu
zoLAb{0}}2-BGF#(J|$D%Bt4HXiI-aVOdcNB?a!gYaOu4wLRpn@i<nFZk%SqqG-W70
z`1x?a@Y8R-NZ#g}a>ERv3T_FNTQV5|(Jry1BY2};az11Pr14ojJGGD6U_Y_!Q3lTZ
z0%0$$t7FYGu%cKOG%y1D0on{+Cg^lGmqrg~^<+{d)(trC;l*ruR-deBsPy4mSs`qf
zL>*g01cCq}W3%OIF`o(JdQOwO<n_V!mqX{z3ObQv?6ca!gTnC{(!Y@gx3G#9;xnL*
zp^zaqTPvT!*40-08bnQ<@aIfZH^~j}g~?RgWf9}oD7HUU&BnPhOEXwSur(kvPp`Vd
zoR2ab4n3^V9&AOY{%q;gSICul3M{=XzeeM1(}U{sP3lL8b^qL!WUl*h(yntRS%LJu
z?3~2_;$>X=EAe=yb#`;+s%Osi5A(_P0Nj@5plH+@!`iSYiUIQj2GJn&o~R-m_V}9Z
z@3Y2|U@cao+P?d}4K<rw4ufZ(JA9ldN?myKu)+71VDwZyX~vwyZRj|2e)0D~ivLgI
z=8}6CQbGXt;X3-jb5FQmoZOS7Ywl?chi?gk)UbfpGOAh#)k%NABaD_UaaYNd`2NX{
zacm(M7prW>J#yA^c`<B+O;m>4zpZ{8MbacH(p|&>)s&H^qWqM%o3}OjgeNlZ_=LaK
zhiAHSIcLW6We?kcSD~F}9GmIdRbJM!_R9D%jnyOsZ-3{^$lR2NnJy+-kz3In<+N5-
z?0R}l3KeUu%k)q;`fYanaZBkfb8l$r3DrPaQdzHrzlp=n!b>73R4}2eli1}@n8(4@
zWzkRk23JOm^!uEtba;?Zh1m$JiZt71?#u5hL1%r8<c#ego&h$jm$sdic12Tn^|oyv
z7hHDKH2fLNO65CV{k(FWezNCXp`XE%$3;hTsvTto?7+|JW_&TV0fdvK6$@iqyh2Od
zw0=4%y{3Av-T!>!_F3*uYgJ5bdb#X|#K!%UwTa-Ogu;6HoiFTd8eNWnj4!ZSTseHO
zA5jB6qMW<*Whf@Ma2d5h8)}2jN2s`j9OohlcshGkn#<0z*B9O|mR_xeMOIZ-UIkT|
z^VXFKAl9n`#a{I~<O601;)XwM>dA0y(UsD`7-Jy{t*EwzAntf<BEs(Fp4s&h3ZVgp
zX`n&-;aU$1@4<Oq6HA3hP72)UVIpO%;(3)3n4O#~9iN^3B3xM3AfdMDU;6!4H99+E
zA*3ya`lJl9WV9txW<^Vwp2~abp)3?(15fCscl<~R9jd-wtU7BqUH#-eb8KU(`3kDq
z(Lr1u&o2#8k6nCTQmTwyaNd1BXkxXq*`WnNXh|h!>pe3Cm^I8Ei_jh8lNRf6HxHLH
zB^USDcjFVDF^|Rhw|;@6<hXFNy^~tzMWPzuXOJpj21x*mDDyb716e8YqXEd(^y7v?
z*`zd|MLsVU+Sx6uB|MA5fn8>|zJw)4n7A|)8|vg#oNV4;jTV7SBOW{3HNz@R19XMk
zyQ9TOb{cmV=+7#lyl95tz=Jpf7{}3)=5kkCsW(`?__L`{n`zjTyH;Hf^MePd*!D9+
z3pzdIXoAp#!NwKx$gI9@f2UG{YVND23f6Gm5j!>kf@;ep5r3^Bo{1u9=a8V`*T%iF
z5C5ic--;kgT9IPNZ4@LdUBRItQX()$oJE-LpV@y(WTi;*$Z<%CkRjZtbMyvZJ|xng
zQ_(q#IeT|!FYH_g7w&<mf;01dl~{JEk;6MXHh93+x;8Mq+#6}Nmp2EEDt0g+jC66T
zvKeN4ZYbsbycfWM<RI+VbwXx|Rx=;W#OBmY`llt`>sC1f%#9#lyPS8Or$(Xy%OtCZ
z>5qI5>T!zp-L`^;!SQsytm0_%>+s<hRYM2gudI!?Uo!YG*OREB3JMS3A8ocAgMn{9
z{r7hJ&%NDn5nDU{ueIGQKEkfMUccRJn`qZv-(tI+Y$9xX>1j~7d(~P&n>|>qbr(!F
z+UMY*){H$Q=weh1;tjTLH)6t`&q<~hekc5Fv$mMg;=MPUuik+w*RvLs?xiKQCNy<V
z&oPDkV(8gJWJ-D$C?15-&81Ow0Sfy*&JChw90^x*zg_4qnrxP4+?NqL;i4qBgab~C
zo0i)yty?C$ZKB7M$t$}Z_#r{8Pm)wypag2SmTQ1ln--u=aE*cDppR-e@=tFS#;t9>
zUlX&^0W|H&JcHGB_;ImZ)?rBItx?y>XOwZ5XP5rQT%WgQ^Vu&|Gv8X5Z6-SVvs=J=
za|#xP`V||)l9XsRT(m2fIw8itlEaz39p2>p+OE*7w(SlX(r{x+KARks+naV(0oa7r
zQB+gB1R<UHDF$;?Pjfc07W%*l1&>Q;9U8}=soT!N5?X}>s}d*$S_e#M+)$Q46)*vE
zhs;SBS;LS=275lbAFT=0)Nb%Hb9p`M*>%JE+J%;<4mZ8yT4Uu@GZQ5dH=Vm|(%2wX
zRz$mHyz0dSRqPZlPo&LbD~F8}W8KKaiS6uR(Pj(78#_VNGR)*nTeXQvIuQEKAmAkR
zhL{yAF1+qXIeV;a8V?Bt461TT^~w{|h1Js92u>YB-#h&?#kA@v;gf(b930Abnb^LQ
z+lD$`L6K)_Qm7Av_T0TDu$Kfif-0UuZTjl?oFR)e{ze)F3UO{n!Mr{`(Y@~4y<*wl
z{3V(hO=`!KA4T`XwvV}^?E7zDckV_47#WPJUx5}zn(vHrsL-1cfvBHALp&<tP)<qo
zsEk8A99g#Y<vU%y=awvWBySUKu*=^O=|`_JasjN#oOtw+-F2nG)LTu7Fm>0~g6!eU
zZO$8qXTrcn#)|2DMQ3?;JHNY!!No1PZ1G@k&ztg7X9fYUZtMjXe!j2I$=quz^tZLA
znA{>0VLSL8MvAf2&bIS1mEvuXaaHn(pCsK-&J7dd_nHrnaCvujYCQsmTUpoIEUhE1
z>=J+BN+Nf;Kn88|_>gs9kCGPHTA24O1pyaAdS+_iuxC=jUGiAE#`089iaiNBQVf49
z_k?nn5en;WYt!T%w<f6Hm{f9}wi_>2MEkc`H?eGM_PL)V)EjbE8yRC~J&7TU>iWgs
zaP4n_p__b=OwS<W&}t6gkp?Y`5=FQ|UB%VA`WL`gZwmG+@OD2iq&8bYu@7QF;g^o*
zSKryhz^(?o?#{1lKuceUmp0#DkT8AG@M1|8!KiuZi-ggB3@(-1LIxT)F?9fhF^3@$
zG<`Fx%Dc0{&Z6Ejw!FT63METSy{gWsY!ogZuKz)3(f4-0dv+P1<?_Y9U7*bs#y~K5
zFMVJOjC>$|dD-x#_x3oJMOdk3U-9ofYiRtcI)$sXlHprqtHwZoYZF!<m6HkjV??TE
z{5ZvtzN>-Gf{ab=&gPd@Q%zo)*(dTW)|l9obKe_zFw;MozU<qeg!D6;P}^3T$2q8|
zr_~kfXLY4c1Ym7T%{`t^FV1JM;BB?w_(XbYt7NF>yLCypO`X52N#sqJ;cS+0cmK_T
zN>}yV=VlFnYtx9Y%R_#2ZrFI;nht$oEwb81SqBEhpRjB&szMxrWSySFHwIvK49P+$
z9Jr&!aeuZfvHv@d0Q*-|0hqgC_!w<tnQTrph<1jF@ucgO^pcIbiUcA``z~xj<Ks^(
zsX)SBTF;V}n5Cw>;&c`USfdn^)F-j6^iR7)f|6+N<c?t@=r2M7^@*6`4=UG{6FKmM
zP;~~?C1*kALOO-#3U;QN&sAgSlm;CX2Pyc-AbIv^%w<mslISVTcWb1URhmyzLc@O9
z`n?_;Yvv$}JHqk-17}DfZ*%T$q5X2+th$2%wR`R~m7Ul)L!AIrK&!t&5DR1<4O#$k
zReEZN%5lPe33FB0po;T}JJAN9l+%1qL`?HZy<AMo>-BrpZ<pQ8!kTkZmQ=i_)%<o&
zn#no*!O3hcybta3yOSvQL*wDn6eKBx>eaORPHgxiYZv}Ld`j=<pM&%`U?Q9kQf=j9
zRXCR0^Anv6F-yQ_7@9Jh!K$fer+b_7*AA>z^1LHMLT~4vmOX}^Fo7Vt^QmL%w%s-S
zwG(R<-~uSm=F<oikCKkC=+c81>_3SR#^DHtSSTE4{hXZQdpffKvaT#;u)Zvie$U<x
z-RTC0Z9VW(15d&FnJ|WbEsWr8s0dc5xXHVqoz<&jD}1+z<jK>s7f@4?Rh}y$z?a&O
z-;-=}Z9CZI4qD9()rUPCa42`v3KGsu>r;^Uwm@LmO20!K5UWeyI<F^_X|*NCYS4?H
zClDkEKn~amaOZCUA@XA=gbdPpE(VyqlLkG**$(XOe(?~Juz{gZRW2`@>b;o+>lr82
zk3}E<aD$gT4EYll>LC2dv_ywym;lVS8TOthq(`3QG#w9Lo$dWX!x2}Bw*X-?Gd(u{
zH!2?V57Q&ZJ>#tz$1LLZcALJ^(f&bws6J)@^(3yRcJP5VTv~`rG730NYn)l7K-d6x
zTAm6zEa1La!DK7lr2aT;?YMxk0Z%^a$gwPe{N^l6-n^B|c-n;4<rU=J;TJG?vDH|Q
z=TL4Rt2}Ic(KHog)$!GKa}~Z*<Sl2SptPG$W#N}Gq|c0oQo+YuF2FZzRY4~x{{%{4
z<bg^|J{qTzy?jEp1P9ylbdXGmty7jS+0C$@;9uDv%s$=GM_Yt#yTPN5^|wH`)#C}S
z4K(e|A~v2v%mA@CA;Na5yB*_Hxn??d)sy1a=c6eOyizt^$}ng@*GD+_+Qk^YuC0X0
znNcelb|JsDWS2V<7$~&<<>cp!<;ro|L<e+N+=MeX%XRm~+h5h>IWP+6gg9<Wlnn>^
zu`?)|)wK2SG2g$drVD(UHy6OStLc+Txd6q5`7#K)s{y-%^f$iB1sOEjhwKD6!kJ*2
zB(NUGUkrdie*>;1+leLi12fKHJ{<ue5e#%4I+Z*Gn6S$_%~7>s6Jj$df>Ocj>6u%8
z{aL1bE%3IXl`p;iZ(9&%3)8jjE%=^Xu;ANy^J;~ZVhhQ-tv_(BK4ntbIOfl*<$$<Z
zXAr1J3-X53g7X$s41@}FCy}xa%-@IhF8vkg&7uOP0%T|Y?PpU`O#{7|A3DAL2Tgq~
z5rQsk(N1RD``U*1V$x*Q*Hft7FSgcM>o(EDfJu(11YO~WOL*47jCS+Ime;)KRcLKQ
zfJt}_*WWSL9AWlOflq?&bue|c4DR2kMOR)6jtBzzMRl_lxH?Jzk5s=S49G;D9{!Fq
z;Ch>^ZrHovN2g@a;$ow@f465QRAh<ZoJE~s!f+h<N~}3XDfU#Cv-GxFV{zgqh6uON
zE}xatlW#+1uC_^TcT0{7ddEhi48v7o^L(z!3j5NR_DH+c-%!2fEOq?_boj>&)zOM-
zJeXyCftoy6;*kY{X$9DH3Hd0VSGZ4VE-Mt~+yRC!S02i5tPafAarz3XWI_I>*u7=y
z&Yah^)S0GXewiB2*BbZ?!8u=~d?&uvKy1m3qu#S}u@)p#XJ9z!#Y#{c@8x;9JbQg|
zvc!NS?VW|H1A}V4yZ<$>XKOoxN&_Hp!!>endBY#~x8f<kYUUrS^=M`F)*^OE5w>8e
zz4h1_fcd$i5b0nJm2REa-kv2ReA{R_f#UDc)%V^1e*69*uq<775e%kAY!5O!szFB9
zUtzLD(a06*O^)Zyq-y>`7hAt@>ujjw_(VSmrg`;dda>+XF>5q4(SCamA50GrK96&E
zC6lDVIj#-yEIRPnLJS-{?vD?H7Be)k<(gk<%7&~@9f5ppnB{wv7JbA&&}DcFGb5BT
zjt8rpY`)OhmFetNi;&3hnC*jB@vVy}xthO!`}Ebbc{8h;CEo<Rp4M5;dx&ooo3Ivl
z8l<yfJr0-i^Qzao?C(Fi#CyVSKX*+qGQnGLB&#NGO>a0}CNc<%Rpn4M$X0?NjI=oU
zI-f?05n&>|k2Jf&{QeGD(9_##7m*y137;lEXFoCa5)i1Y%RR??A!b%K@NinY7SM=4
z_tp-3(<O|`P3q`Box-ErCIU%g%Bu#S>LOJ*N@;@vI*`h3+?Y&-uK3;<VeDfCDQYiH
z&jeSc$lQwB)d`FvRf>$D!oq$&7g>xLert2rp<GD7+bZ}-vI~7C_c0W!)g#Yr(c5Z}
znDS`%u&*X=V|oF1r4Sl|f%^8zvtC6w)dLQ+PEVVN2J6?+Y;dK<u2*SnKF<(&|FUYD
zdV(+7&uic>u(jN+nnDXBVfv5#FR&xH^{ZGSC~|>&K3hcr0W^udLkrp;X0rZa<`z%>
zp_jJHqqgngCZvDhrt^VIs5hNYsU3s3A8&^VruxS#dW<sUKD<i5UWc#OkrA4op%J~Y
z@1CkM=)z5s_eco19BEw5r@$+6rxFKuovlLH=Xfp9p6zhIGyHska-6X?Ht2f&I8V>x
zumdL;+kuZb!_Y7jO#zTAG^Grlc0G3ol!+DC{}ouEfL7J-YGEsys+>mmlipR-PN+e8
z*di7;WCNrJ*jhjJ{0<!;dNVt5AkXf{jLt`lTr3MVuqu(^kSWP&v_sit^Lgqpd#3%R
zBaq|jdI65h5%VI)EYe?X<?qeFj$iRZB<Q}{_AKAq-X!9chrr4){9us-_1DbnbL)sX
z$Zj&vx+vpre9D^Mn0_)*InPrQbyeI8_P=HrC{SxjEv|2<YjN@O8_SNNk^P&sv&fC}
ztb_`;e4_q(%In-4f=_4Td{@|{Y~dOuv_~jvtfea2B5=O2C<EolcS>{n*)m664}#~i
zYN6yY5QR+$jxU<OM#l$o){9qm42Q$$)i+{3*M)r0%_3m$&ia>VTxxrSuyuAvtYS;7
z3-{#p%Y1#}$3t^Jom`BoUauUF2gQ>7F8!o^p_j!I#m+UoA?6l)yKQC;UGX8v?cuOK
zJrubu=iWfoi(NmzvlOAm(YwR46>Jpzc6l>7TFpUq@fIMV*x-JE{%u}T<fS0&()iIU
zx(l>dv}`c!;OGG+RxE_xf?i<|+A|AuZ8;LA&N;St4*ieh-0l%L=G{ha35a5H=(c2G
z_Cb2&j2-|P5TDB*&QDgT&xr#<)%fsjL@+~mXW2YNS1G@@Hv@?I7V2GRHdJc=bEX@&
zCT0^nyvOuxsK={k@Bj3sHa$xseCV^H7It3j2OJ0Vi_W!lp7t}&H2fXfS#FiJ5n^xt
z?7psoeX}+Snn(>{Kb@5`vz=dDLX@~_L&?TwzJ66NSJkYV^r|7qpEeKDrqYCTbSAbL
zlV$}mlqwNk5@4Wl$-v=!ezB||q#as9Bwywit1aD*VbN5V_58xmmU~`n7yM;;URhv+
zYkJT1GT`%3gnvJpp_sd_D^)ai9*lUr%xABv^0JD(7Ty0cuTLH*-Qvg0Hu-R<nrqxB
z#v5|ovPeT)C02FQd4C6OH=H*c?<-E7UAOoe$3zvu|7=>1KWgwRu(!gUz?{N+qr@fr
z3byJpjvDjT5uKCTiT9BkNo1g43d^WNdq6WtB#7EARi;(?EW%Gj?@N)P^vzxtZ5zyt
zrJD}*?ZZiQIcIS{WKD>k8DHn$x83GjMuLJMK-<_E&R^zHaqRwlT$DyQIMxDvF!hNv
z16u2r^`5I}bI4t{%CXKMAXrciYtOQkY^D{_NpTa6hJrp0mxhCl6efHl;$j4qO*F^H
zafw@LF9N#!(o*?zkM}DeX6HRS?OnJ+gY91KFjkLZL*;_S+rUEpsOxvgJ7*(Nc{Yok
zhSA1Qra^GA*y_@~%;<fCQ5qN1i_>~`M97uV8mSDTH6B$IGiGFC$q>__xUF3yviT9n
z1>gU~q|Rh(k-X8kkb}U@#Wy=jl<7u9JK)+fbFVOq1eY_2_hL4-1Dc=+P^V4IeFGG>
zqP~pSv;;YrDhMWKJ7|z@SRZ`;Jc*FO@v0JE_tFqq8^+00k^W_P!7nV#ju57ASZGfH
z>gJ%)IGKnh_G|3Fk^+JE0TE0radN@PVNInP1~brx{DOgPAj0x07qd`{<7Kb7aTG77
zuo#iybNEowEB_W58nF*9fKA+!k8q7!Jd}U39zzdycbWIAV=}!el0%3z)ysto>dKfg
zk3^;2FUGa6A4hC*YcQ^JStV78x(3?_nRil;&0%dQia0oYyHdU$F3;wlHtIeKRu#$F
z9OZa6#0e7Z5fK-Am!=4-m}m#B$@d>&fMFz4r_~wD>^nT7*{JwK<o#?FGe8>hgN!bt
z?Bd8&v5dkTijcfHqcZL+ENmiO0ulEkr~yN|1JmFsH%c2w8#U+jCH8P~^N&tUs(j>Q
zG|J$N!}D^{>tP1D*q|V~Qd_lP9E%qEg-<;>S#pi{p{V+MEnPEfN}+4RA&2a1rWZAh
zXKY?H^6PnkQ^2ioNIK!XshU@ajtUEn%&*YW(%Dapig9~Q+Hs@eE(Pi(UXibEt(`qU
zh#phWV&UqVfhDhOhqk?I+mJ1E+S1xcx3&ipXxS1<Isj{TcaN>Ve{APvXWn4+5BUz6
z4m?6!``U1mVzzrBzA$#O&bC<E7gL*d)8fb+P8hyW`|xz0?SONQQNmR~0vCM6cP;Ev
z^WF2~(Z-j??W7xVD%#L>S{#;=4K(Cm;kfW}N+d=^!b&2R1opADm6M8=<ECD$=8ZVk
zj;OT6DC50Zc@9rvci~@3>c0F-y*le{&1YNvb*H1=m9A~ul84-uzKB~C$Sn62B8+XN
zx;L}P<LQN&FTs$iv>+@ihUdh`o39j|^EV5Sd9?8FJ%5|ADA$FWTpO$MKQ_?hh7TAV
zW4r1)?56SJZWAmnjnC*8vU41{wEHH6#nd8a%F+FRN*uCaK>EyPh^UuOnx?$&d5f67
z5x4x0phS9*C-5L-&Gom;V4>;U3q1h$+#BlLKc7agntZS%!sI5AI0Kd}AYFoH`ejJl
zbaCbNb}jMKa%$CL1y8KYeSCd^;?awqu}{ohyEjMaN%N5f^0rn4J`0OW&f*mqdDqy|
z8W%Xg@pl|NjAW2BN>A9hc=Y~c|NXG}0%G&5Nh7`2s@ZRFJTeF|)I@07%bC{jlr?Lp
zg9pWzp4a51s)gopldvz!8ZZK8eX=emPny4n3y7xqo0n#L?FfI@){DJ|&!OR#0ItYG
zCQ25R12Bazw>mt9&|d!4TcezTLKFja99imsjr~C~4)tA(+}1y|&%eM_4>+hZWr-PU
zs~>@Ds9Jzp$eqJ0Ye-K*l1Yo@@ob2Q%W(i1(9zR`XG6n;wdKu$=D`wZ7yrMT%Rm?P
z=iUx!6B0<pczdf-Oss-MSwC&&Y^+A!#44)Ol(Xg3-trDIyL6D*l=8tiQTEHH;-)IC
zZIn|0dvhcC^n}IsErRNcOjznOgpbYO`(z2N{Y!)cEURh9)*LWdUp_xzE%(~||8MW>
zpWC>R1%KCH!PIU&k`_f%PO>kLvh1=Qd)M_G+h;r3<a{n2C5@y>D3WhTeQ>?{-w)l5
zk8YqbGnAFQy{p@;ip2rY02&RTyU`ywB>eJpIzRf&S(rr+J8o+1T?aqOXC0jMhOas)
zcI9h9{qqPzyc>QzqrK+0lu$YMk`jaalGhZ6%jSXRmN|V-!Geb86zwe``!<jh-r>-Q
zg=P0HV0f?TaaU6*<X#$7y>a#-!zl&Q7l{X>(MXx<JA=hS%-5c6UHrGZsZK!-{s0v)
zRDxJaQl*?@6a_dA{$5Oe`(c9l``E5pUK}bL%YE(M=6$s84Em#<L$g%cd>qjQvjBfB
zt@xI2r2z5NLF`9e(LT3jcelG`pa1vo?b*CKpG<GJyT5F6?|%C)xw+j;ipqx7m|Pas
z<kV0K+CL@_#Q4=}3Uq!o$-5rg9Gk{ca=d<zoF;5`^H(nlF2B|S!je8?q-3N-_|AOO
z+YF-#vFTSa9ws~#Q`ZJEgIQi6eVi>Y2~jZ}o=uiNK}d#PKmQI$ssK}YHJ?vc<>IZy
zwdThUIDiucEcS=mODp<CLE$<r+uo+^hmE$v_`XcYb5XOgW3>3%*P;+Kt*Lcwcw(t0
zj*vba4xxh(Cq1!OgGU*7gYo0otC#U0E`{w)9`O*1!ob1lB_f=uIx8mNC}s(J&_Rm@
zw<LE?=O7h|9=Ol1BWqb9@-#XxXWy5UwbWF7eQ|zRRKvG#-oO0t@~7tqFJHfS`TFID
zU-p#UHE?r%9+UCE;x3_soi>WOYDlWW2jN~e01KGP99!gAyL_95QJ~a?rO5=~I5yK|
zSk9U2%Y``BpOPiUaW=Ox=Et=40+eogvLcp@S8O_EP*1UlUC-C_b=_LW5^-DWR9j;H
z@M0%K^?g%4o6n9WtKOjzhCyTW)_ml)h4M@Aq$OpwEsgPjg^(_FH3tJgj2}FlKt@B^
zPlIX?>Qe0Cw7z04J0W91A19?_c#v}Sy0`)%f7x5Es>En=egcokq%O2}sq}7I@vOw}
zu>>tAO$oh<zB%c2|JSVB?>y@4>?$UWP!ap5YKnEEsUe4J1y!OHFxzo_Tgj~5of^mP
z@6JHH+d>pP{1^2%rS}PN!RVcVM=tL(ht+2WA$wbiEsW_3;~rV#6=6Gq&y-JQ$8^4M
z`=o?yqcq8p<;G%CEsNuE1pY04wQ!kH+2m@h8TEYRv-*UeKa!ycXG{(6xq@V;Fyt{!
zjq$StAs&cDU9T@|+9!1EBZ2W!ezofuEa3w^m<}v4p!<M5LK4A1=sKy+(2HMk;ST4=
z>kg>p=5VT8fxznesAXJV3AE_qa0Us%8T=ftr8}Ne%exZcexSJT33tDw0gYO35z5j&
zUa?0u5_EXNbq<@?q%TTUm<&{e4eBbxH>GOkWsaUI#N!<B2mV=1dt>vNoC0S}%=Y;q
zywyI1LD37L9gSn<kmVZSx0jUojCjm#|7l1<sC!{#1$b^M-_c;zeh*&1%2>7oMN%hE
z1ESCmn#vH~(-?<%`-lbP$LyJpd><|Hy_{QS1Pqdv^i6F+bnh3FBMPP@KL3EZ_nzXj
zM{EY4PCJ#@9nE+pe-!5z?Uk0D$HAqXWtMfjhdbMV%SifpPr*(~uJ_{MY-^LixP4L6
zzHO`ERs|sN3k@xLV-!ZaPhV!a)oDdO;9Fw6dGE2KA{u5~H5wxoE2H$=FL)1+_)a%V
z_KHRQ^pV=2cRrn~ICOx`43@a^Ks#?3$9s01gzY_w{o3foT|mq!x9_Yzhz~x6;}<*&
zhHdR5VkVP~-B){wFq+#G%n#}T+nMIGYwKNWa9l9rL8r%#ys!Yi0z3KCv89#qG;CQH
zC$84L(dRx&@XlyBi+QS(UBM{6;FZhy;Vu{!0VCnduH*yUS<YYYxG*CyQdsc|#W}Dn
zD@KcmSXN*?&KM676bf(%tc}2T=HD_EjvBRj7Ky<jbZr=L;&#qlScrNkiuHyovT95@
zzj?8IJzu>jS76#lbG)`Oj^t~SK51ad3GvaKE!$?KM1CRQZyOy$e0$5|^}xihZL|q*
z=@3T@BhU^zS8@Kd8qY2c8ch%^>>Uex$HI<6Rx1!SLit$`ia_3=v!(!Vn<4SD&qf0<
z9mneP)?=<OGP|i9^#zOjz)W5H?0udPJaICN*g`&Y-|`xQefO+cN#$eSnnTR4(b!=$
zA!KZN<wFE((0Nut(elwgpZZP{7%>7r$Bijn2QF|Y_7~NWGLEMTECWfX*SxFTYEbx@
zwYQ{p8zy|IJDoBI-?g<SK-kv_?CTVE8-fleDSc2*QhZGLxkt^e#XbP)tl0(no)yc}
z*|EfxQcnYE`<5Y;lU&tw62J8L+z0Nyc``eG&(@MA)o>}W!NKv*N492HnFXER4y?UB
z_$3H4xj1Er21{?EBV?UO@lU;b38_va5}7#CxBDzU{lc9v=<vG$U5p^Eb#Nq71@q5t
zce)j!n!Z~_WVJXzZ|ra(r56#iZG1&1toiGmHEAS-zv2du@4`aMz}$QyOeVf|<BawN
z?|tp+G>~2E(_Fn>V-@Fhj{0i0SGq6#4$DHS+pfvL5R{iK?4t06=(|-^cT3Y5vMqtX
zbMmQQSq*&VlpS{trjR<3RD{=PF2*<&bBW;rOl%7~J!QK!Yv=ht9+XTuXU&Ghc^1b%
z2c4R=m{e73?bSGTnv;aQAXt>;*{_-6!=I~$FPJ1eS6!PO&%{?Yz7((P%E){+K8;Z5
zdE!K~SEw9!!BgDKoe?yDBKY`e5UJFCtNxy1&qf0>jp5<Fx0qCT#Cepjf}(pFbxQ!^
zmY-P)LxK^1Kv?YSdQqSi02X$={KbaqqCh{hGYNBo1PU|&Ne!-rReIaFA@)zFb5=gN
zC!m_5q3>Ielkf4dk8!gcx{p2g2k3-Y`<pG99Lbe<Lm-lUKaeNZZ0@oIkV?3xElzk6
z3S}Xp$tdH8ZKF%EHXlcy)J!$xz)Q~-L#D^4f@~9~gthG-+dq=98?mK3hI`?TM$zx#
z`TW?%uCVLW%_r!gLA&*&2NJ_0cDvcYvDg4BHbKQoSvU*_HZZau3OxxuWN51Cim>)k
zHvY8NHpH2mDUWH85LeI?rC;&Qh<_#|a%$63rrp6R`pl!gBfEgxovt}P!r5y>sPmU1
zjB%1J%^4sNc(E($X~!>g60eU2x{o8x+kntZ-F~Z~+8A@MFQ(Hs)sNr}MyZ7Q*}gAx
zbLFHZ$iq@3_{ZlK*eX_w)g&6X`f#aW@?{hj!CU=XBe$&2dkiZEq&~ef$Kx?mQD(f6
zBZqU=qRtatBq)-7DE9KfqdTsg`iIBf-&zaJFI>7Lk2KRBx7wiBwkzJ0V-eJ-EK320
z!h#X}KSDU%89n$h=?>_@>D<-K`o*wgI5}CpT0T96U!X>re?LjSU~^s(tV#llS<Wu!
zzj=lVbV)B<WIo1QfwQrVemAL3C5u%ROT)5IC@`x35vqSe{;22MB;m$fJ2>pU8*5jg
zwwNiZ0Wahi>HwK5@`$!9o#GR{gmpQJOgPyuCc$pzIX#EhsnuHXpFNnE1-L{zzfW<I
zFukgA1U^`*UcjOJXmWH`96y<r=M%RdvUNGrr;X~*lQv-f?AYvlmAmsMhiyyNYIP3d
z)&M)}GVa-&TEFtzV!uc0ytc`XBVWO5WpfqQO%<-|8h?q`dXw8bsu6x}s_;vlU%uxt
zmQA(7t<qT4Ut`OhuY5T(o6Jb_|0sHj34cV4Iu&lR%ktX;LQR_!Yd*a!0wm2%5<3ei
zv7){uXGo<P7Mcq4Y^d9(VbkVsS-}yQTiIy?@cU`_-S1}{J6+pi1~&G`D0hp1BL4J&
zqU2-hfX!C}?BN+w!-Q;fMu{|ZLnOq)SX8fgZOv_d!IP>e3^j!T^lO;ycmk#Z$5w{*
z@>B$wm}0t8^*Le6Vl^lT%s{yT`r<|f<2G{1qn0)PE}sJ*py;@nl}*rSfEJ+@8`5Qs
zx^C=F@3WV2ylDw~)e2~kl-olNZEC=ypb2Wa=<0Rfgl^9oH%Rp!!wuhM?E$QA-!x3I
zpK{PxC8DOM{?Zi+DwVD*n4B`SW);Gld`v>n+^<G0-M1U#hO}=jPvXVq<|4K)x8u@W
za{`i@_K&7IHeKkM_m+AQE+!Oh)x?mp5$TTR3%rb4X=Wt^Y0w@U`AGVzSz{W4Usx2M
zl6}^1)wd<>Hl0oNZrb!>t&KLHU=R-*=jREG4D!8k)m|p+lZ{|)8$~<7@3%jCt9q`w
z-A*MT_s;h!le9OzsHl}b`XqJihCQ5Y0GsImHoUgl&ET#sFY4`fSJ259v}IFmyuS{J
zzd{uBvee~;doJt8%L3x7;IC1jP2!CR$%vzul}ni@Q%OieVx5Xrr$+qOyiF7TH=1G_
z2RQK}h38Z1OT$@og8Z@kq^E@9A%!TWUc#}<sfqrnMXzT)JFG_z=#;9-+FZI4vR;k6
zdYVTEuQd<=c9Zcz96;~l83V%ab-i!SP}JP$$`P&K?2KY*eOuqC*r@4RjR}6kK0?b@
z9feJ^VL!fMT{k!VT0IE+)vO7LKQ$^uqAzvIHBLimwymU4#33}>cy<bSNu#0Pof@Ix
zz=b1hQJLkbRwc(w!^uaH-1*7YR|1*|O>Z^>edu0g)+yiy!iY0sEA018n{<IJ)+Ezq
ze~ja=SyejGC{1>tDWc;TanY$oY7ymf+)LFbPBwSzO3DSDb5oiNm92x(C{k*GA`lxj
z=1N}&p@~;kz<9>b!Kme9RVmCS<K#~Qu{$CzZXFOu4Z)bu>a!-xB^b<pz8Q2vl0{~d
zs{}r@j@yd4aHM)8!^)^@74D(5%A^@)O*JEk!fG=NL0b*4g!e6m&JsGQyH4w_mAVZZ
z-*5WeR207+#}gl3r?u8;t#w+<THOajJteW0jj+OO@&-!gG0^poJ&v^zk-DGNS?6>K
zH}$Vj`n}WQrHPWrImGKaTt(eJw09Qm7X~25+u6&FE2ZImv6`hxtK)Kh>?$E0fI`QN
zT9w#!gdD0gP)vp3x|N8}IORjsz-O>#Js<j@^!d)nPB$y+kexBhLG12o{yl;#LCU<Q
zAZ~q__XODC_3l7+G+ghtYWE;%_n=j~uakCP$NGl$6I7HBs*$%ANj9=5uQwt8y{){(
z49xakL1@Y~{PBx$Oh+uFO|Go7kM2U?&B)DK!@9v5tj*tR^Y{8|xwRXN!tqpm0DO-b
z*mmLpu#xRJp2NEc>t`j}5cFb-cVbg&F%)RNevsN*i%MTpr7Wau1X?#b=T4R%<#wA<
z?z9<Y7Ltt2a{V=S+#)J)yLEWrXS$)`{H=`rqb{8>cavHDEmrV>*8}10T8GjmPaCnE
zhW?c`gx=N-G>b%a-9Qbrybl`Dogbawo%vyIw;ASkn_=#>BU+;I-S&ZeBF@bmUeP9q
zBK<`5*HQiT*ZIK7Bq=T2-P{;<Fo;`;O3+21NW*M+$=G?N+u$SC*M86`BV$)pG`8kp
zF1<Rj?C)07C&!b84fjh{ajU82%3Xr&D<#v=Vuj`{!XJbSH8ja5(lcZ)j&<3X`8|b}
z0aBau-P`833z;ICxTqHUYOsrRFg#(rXz@(ujBgcjAW`pnO>RxXa5oAJhJbKCmY)U;
zz1KZhz5W0eaqV)h#{nO}0XE&b)MCFjd%KDnAN<PH+QpMnr_#8iY$y?kpkCWseM~ZV
zIzToXRs~~`!v2MgTryPEC0z_w*!zjDP-Hw;-vvY?rX^HberEB5LK5G`7wuNzgm`=_
zGw`3)Elmu7Dj>Ks<(X^Esf<7-)z@!MPAD*DnAbx!Hp*iPL=k`92@U(!0c@mB=NG)x
zkj8DNd+JMoNYtjEn?NgXykb;w1hHn^#Eg_Pmatk5HWduH5pzTiwb`_SL37+HpHE9z
z!S6O(6c95n7Z#}D#k_j8s(OCq16}qp*pa2tgvIAje?favT&8VC3TYdN(-N|kv2*qO
z!bms&S*(NNsoi<p)D9M#R9JW_u(fxA7k_qt{L*h4Y&aIUOGEuYc^m1}a3=%RmDE=F
zc5!&hC21Uc$pq{=vxrN>;n1ol(Vb<PYXg3EdJ)*p?cNnCmjxz=2FHtZB=8k_`}j#&
zI+@>3>ynikAR~>uA@cENduC5f!aA#m;?CK((~BjCy4z>B#7=UJ^9++#a}lc=l1V38
z2X}(XRTq_q%lUcH>s|KuA6?pK7&TU^!TMoguJyNunAE_ix7@^NJ9T{g4oZsScV?K_
z18x+Z=eQo*rPGtZt!>`QU-aUuvB$bz;cOgEIlYFvL^vK(zNQ98IsDN!YJ=UjCr_)T
z+Zg>s^9|?+4zh6xfbg4_Az$mxmm;5u_zURUwFUI{EbTfX?PwfG9eI2qkT0PkKL<+y
ze5K`*%C+k^yV%A<(;nYF(;WnRd^Bv9>up%j8g(%X-PfUbgih5gL$wWbE+7ANF-z`@
z<p*s-5?8S{C?aZtp?VT_?QV4o*80vY7<BgL<O4k^WrG4H0xwiZg<V5QeDp!~jj)hP
zy-pBK;yxxZ86ze-EDJ8UxwoH9rbic3mp4pPclg@MT2b2el_T0g$JxgYI=`C#VtDjl
zg;7|nVDZq?Dz)m9rhtaE`k)K~a?efLNf^1b21_bwd@zW}hCz-fSMI!j`?u^WeI+7_
zgv}d;C*krA$uc3hVibT;3%nQ^@Rel2$K&Fn)~C!E@G+xv_)};QP>toChZ|16?2+lJ
z%4&Kz$m|+$8&GNEowAk50`X|NYF0v@ZLO_BXHSuhqXUrzlub^?{C#+nXzqTcb^Vpr
zl}}}_^Q&3dU+u#Fswnd$I>}!4<FB9E48Qg~Pe-Z-;moe)O>S>7n%-<gVM}{Uo|^vg
zSl-$1WFq4NC0N6q=1W|f{LrtgdR~cb?M~?sb@X3TB~Rn4)yc<d*C=4{?G^Z}@7rqd
zH;Q52bf-{*dYybGitLvw<q2?uR$h<8T(6eT#cr;N(Ojb-cdW4I;KN>81!K0mva5gy
zjh2&Mv@}*=qxc;RF1&$t#_%G?t>grrydG0kX2tqAC1#1Ntcv0o9D9BVCN&fY&A!gB
z`*{lv?FpM~kiA_}Jt6F6<S=X7bIl&_!<+p&8ufo&OiX{P^61$`bt#&ex`Ph?MH71$
zUB(&16b#4PXlwAh%$J6G7G5!emBI#d_aGP&Bs5;B1|dpN&);L}Vb5j8rO!B;sfs(a
zF4=g+ReP2@owcXQXn@(7(o(9s6WSb2=gUId+OejIziM&qx)x$i)eDB#Q8K;s)|ej*
z4^XV~E>_Lq3BbADo2LJ{K2`wey{W!gJN#pKt=0P_t+$rgAZY*mCsps?nPonAY-nSj
zkG=~FB`ce>WvS!P|J%&VLtnQsGQW*|`Qi($$~A*>PYqz!jH3O5Ot?LDL<Q@tq}kFe
zeN)r)B*06s4$oBdp<<Ygc&4fk3bRlW_vz7L7D@)cO>MRTll?|k^WX|Kz>pGM3$yXn
zSKO&5$zE@cvb%O;0(mY(i%NU<TiSkYpW>bnSAV)D!85|<POJ~CBSD}W`JmyP2pGBK
zwUvui0{(jJB+oc0B~i8pEFcb5D3e2ArY)Ktc6N)MuRD)Bqt3XKpmfuq!J*CBWXXf9
z%vQqM&IL4uh?7!ln3O2r;v7r9AfpW6w=j#KlMGS4l37L?{{3`1Kb%aTOc!Sp6b2&1
z2^OZc#3tK2A5)M~zb~tTH11q?f`Ym)%IFSU0OeJzFYx2bSWV_;qdvuCD(93wd(rO1
z<Sw_IsFEH=9A=<_LB7C-v|DB)2f3(oXpZ2IwPn(NB7WAScy+dBOADdF<=wk!$_|F-
zlSQxhIhP$V<E!kVMvB-**#wCScLV_RE4P|oVbrMSRW+}A-Di{8Y!0tPv*XUhjj}UY
z*%3n2*_ys?wCG!DuX@TsudO6hjVYj|nikQ|4Zdd`u2Mrh>%z3(`Rc&-vV3lYhG{P>
zt8)xZ8oL|&nFm74AARpRzBR|Oa$hP#oKbV#e=8y;WrHS>6vc0?fnkx%E_;WrQ_rC?
z-sjbY2Ho);rc~RNX6VP$0)g}j=lu*s{mkXMv7qBf$yC$FMpnkOX&&X8xkYX2Sed=H
zyPh8}Sr_f}&@xEk6sI8U%gL{X`Yqbc*yDZRT8Gi~6(UuM`4*I`UFIyOP0qbAPxM*q
zmqPR1w9Hl!`D`i{o7zV3UjD6PksopF0cU<I!f45j%QY&75Q~;{H0Se+Wih|V1{~+~
zd=rJ=*2lp^$oSFwfFq^3)S}2QAqQ?Lq8oqmM}d0F$;$nqo_?1SA@@<*^!~E_eDp`T
zTYblFO`fdq1bH#9ewZH@y};sO2zMrYC*;7%yE3F|h8JVaMqIF^z1jeZYy$!D<Tt(=
z0SYBl>+1PS#}7OIZ15#96^b;rkOv3Lf=4l|b<YlrGy_g}hC{#(R1~cHA%WZFr0OiD
z7pLXSc~blRUmmmU8no>XJX7(3=jdP)V=<&(&dOEC=~fPm_^3zMV#}LI8%RW9T)<%2
zj(Zsg=z-!ckFcBEnt7P)AMto<Id(C~+8GR$*s+;$80NiL{dW!kSMYlyu2}er!<b(d
z(Z`;aOa#v(I|iXh(Y2j0UG*BWFzUPl0!9o2UY@MqB5^N!E)*z1fSGkQGtc30h{#qV
z6wHo_DO|2&<iR3(!aD)?<Lxx34m+eRa{0Yuu}+&8h0+w$f*I5<EFQ(4ys-L4M1`wl
zuD=(h;VT&90FZ`sfag}lO_Vdc*bJGFK?0SAH{@5QhGDD}ShJJ?ztPcQW5qAW45sCw
zXq{OucgshOJF|-^&th*!YEH|Exql|7MK=^CsUW)5>EWa|8sPtj-}PDD;Dl$Y{psZ7
zBrbzz^Kq<Pv)Z%n;e2}B4U>$T+86aPw<b<J*2bN`M5Q)cqV=y5b~BlQGIJNvnX{}h
z<G+z#Gkq}ohqM=ACLsEW>_Nnog7LxTSY+lQ=~%5oNp!~3>4_0~m*R2fTlST`;R`t4
zifi2Q3ZNy$b_<rXLyRB6+gJ~()=g4l?iB07=q=tJ!ESKe8S&37bBZATemAaV$IM#$
zH@JAgjxQ?v{hQHf5SfWBaS&beNAc!j^*=7m!J)2cc;Sn|&o0gniz@ky`-0MrQH}1P
zCT!QZ^HCL+y4PJ@it4U&1*kU96_U<8S4ym5ZRs!Fq%ex*JBR|)*a$=^c0BUop?RX=
zC#>9q(I|IB^W9>D2ac1x9?CiX4!i@zvW0V}3r162{WOTn*l|lmvajV)RW4R@NgxOG
zl~{xx<Qy?u4*nq{U6SMQsXu&lff=LE?y6xUIzVxZfFqxwqDU@?7*W(ng;~2v66hzk
z-!_exHLbh8RyV`5m}3QsCsXnrd=GIG#rEo!U`H`I3P3(V+8QR_07H5I-k%N*-v0RR
z`N6@x`!f3e=dFVSvvXJTg9CTJyJOCZN9gcj7{l+2BaaYUbnHJ3wqBGVNRMs2&#hO*
zX#q#6tvSV?gRS=$hc<nhEm&S0BFzo9<ahVcMQ)O^+7<{hHWi>j(#w<gXa(5WxB0|C
zoSs~T;G@UK#W4niUV05VPq1USeN=6bEuqYsih668hL0j!n)(pCggHgB4u%)A<ym>M
ziUhSXRaQ?afsuih=$v^%z2)o4YwS`R7Oa?((Fcq7fD(NEB2dY{sh%9uFdNY%G8dhc
z)iUHFBn8Qv6C6~?R%9y~Jnrl&uPSVr8awAR3L4Zf0QmJX8HCgA;yB<q!A6fQuEtal
zQb=AJdGPq9#beKo;(T&#D8yoSpYUry;6E})E54u7OCBkVFlQ^YXGjMX9nR^+yrO25
zb53B_XNYvK-h_o7!!0Gcd$doP5b4)LnGsS!xy^lu)jugzViVlCv`^2B?0-71*6+=^
zTKMEo^owBI>`&z}W<<Bu!4}vSIH5wwu%;kAp^y9_n4l;=3YC;nCuu$@_{IbuYZtRJ
z9MDfTNnkdg6QbcANKk6_sX&)3=4r@@(^~?9-elujL-U~Z55OW@C@2`#*`ha42{V1h
z$i=9(EA8_jr8G3BiaG4CC&dif=VDyi=Q0WflFQ`j53uDBLWCa`ZU^o5+Xwt;!m_N5
z3q4G6&R1jsO59#JS7PyACV-4jRkk<6!K&$eTP%h<q08k97_!ArA6;e=G{X(V532l8
zjl}w<`kr>0Lpn@kkfJhGqlQDzHI->)cl`QUBOYfo272^YaQbPfmOgh(mG5bHb?^{$
zKfHPvko4mcY&Fb26o>+Q9t1!wWs@Ju*$)suOuihlSi;Vr5};ZeX*h4XTKM6w!YDP8
zh9T_7aRY7?D1Le>l*zS17Yx76?>*R<Mq~aP9Y_S<{Fg7&;YB$;{s0qKR)-)tps}8w
zjn@NZk3%lnf<QNYP4fs*BIY<Eev8fGtKeAo?LCJ>+uu(~)MrC>K`YE5glCXxPDHdV
z&LQQT_a0<1@SdGAnL$Csh7^*xSNv*;w!?41i?A=<2mu=|XDuv+yUA%i>DTsloCN^T
zN{nYpZI|N4)K&c4w59Y}xP5fa8vcZ}Os;AEZbOYcTuMcF0X8_D=$;<3vdCNy@mMbZ
zHm}Nm7|C-oO||6CvJqdq-j>%yGhZp6_2{ke$_K^y*)pks)&|8=tMiD5bIB=yZXS*a
zbp>pjz*-vazBBe)!wrvwt!dA4eme=_LByh%tmC+=4j3E^z2rKSo7NiSdGhcVrcJgz
zf=4y_@yL=SyD~PrL%E$*vLp!G-i^bEuxMIX&(z0uy#@SNAy~$rC!2QL_igbUL%Y|A
zTkwgaCOHc-@`DI3jzKCgqOg(KR|Ou}f8Ooc-=@fi2!e-d>Q{&g@exa3e|Y)&;QiYt
z&tAU%t0~(pc6Ptv#SrNLug8Jm(~AXMv;MM$(9H$~OBfc!c7S~ASb}4-cX@egu6?vJ
zJDOe`7j%WwJ)I1lcYFa4q5ITn2qNUK9nfN<&#~`rN7g~EzzE2GxbU~*5Ilwi)WC+A
zb3rnDrmP>0AYXTKE$Sj-vbC|aAB`hKC+y*%cW@rCZF>Qy;hKW0Vd<O9%w_ia;=C6(
z4OqL6*ab?3e*=t@35ZAogzy90hWN+CFnZ<?qqae;bR9kvBxG)0#wpQHmE~~;A7bxk
z?kHNuI^}9j!^w4qXA;twpP;+mkBV|i7`*Rr+jmiEPo{HoAtPyp!ho3o>rp_uxXqHa
z3Qg|$(xw%=*$TEXf~5Se6n7vkuAAOse%0F@u^r6roiMzB3HR-ug#!ddf5n5TXQwS`
zIoK*D0}l3NJLER=s}nU#Li2>aE5XYK*j2<D!+az)vyE?l;pqe}O4IZCa`pGK`LyWu
zXxG_I2Q>z4Nq0vh889m$Ji2y#z`+Qdiw*0Jy}r6`vQe~oB`PwQ2#5&UM1GLzYszr-
z7%z&kE6nu4YEQ0RZ7xZ0^w13>q#!nB2Y1JHsZ2d32?kz=kWeCOTyVY7Y;hU(?tm|#
z|Jtuz{u&Yp5E?@K>1UVPJkgDk7JmA6%G-lzb0A9G{x_3}3LL6zFZwByJD<$D%K?m&
z11UN%ENbk>+-Ve@7Oau^m}>+#;IBc5mwP|a1qpTr-l6P}fak}3x2YgD?j(1dVomS5
zd8l;)|NC`&yGaQlsFxwg1K&1yxW~`c7-7f-g4H1e)VZW|py;AVGPGx41}Tr%?{7G2
zb^z5*UVz|)4#G1<WC^E16qY40$WAc76<XvWA+L%69GQZ6^oLb3`Asz{&k>F#8V@&p
z2inp{qLZ%K7)ZL4MC~aAHh<Y!@*#;Umg%hUh1ZlyCh&PfGO6u}-&ommveh1p*~Rqq
z4D`rYTaZ!wsgvTdX%%hL%o<7s%uNsmQ_MQNGu(deoO!hf$#3s$AYrt@<04`;!RLlK
zSkz2r%O0yML=;>qxH1`J8#i`ocoqW&Lc-ErG+*LxwB;WSM<XGn`S?4d;lF=tb`+C+
z?sa-yaQPuIUO3}%DIItu*6KcuZQ$aNhZm|>Xj_3VQXqe;Z&bH=C_>eM{zOC-OfPlC
zjSo%E-(YrptJkPM=xqalByZwY_XSH2-%5jBun09(USkQqXnf^gIks=nuPuhAe7<BU
z2`n<A!=5VY^8*H0d9wPSMKx#d2ic52zsGAu+{+RlFJOZ~oZa&rZ+)q?L$-(7<+$ui
zc~LP0=+B3+zsS)YqX-0LNb(vWs!cR^KnLrgSJS(n8ec#Y>W%u@{4x&SBMI+O9-cWc
zMlBp?EO6~K_nzeLfx|sEj0}o*-N^_3(dWo-nq%+Vs7E_7dTt;%n(t)I(y-~!1A+?W
zZk~uRdF0V=_=eZh^}uF_B~JN~O4yRWm0S^+RV$(gJnaSxO15%sB;C4}F=o6<kc&fp
za`!u-ozUlawD20+@td3Fr>KKRB+zN$f6e^o(_(lvsb;<ZjZe<Y;h#U#JH_!0p=Rj%
z8F&8t+5LUfxtd>0kHMSaV!HC2k-6J07UpU;HC^{NmaXU@Dxroch5-%#xAKn8umW{9
z%5=)wlB3f6d~rcKXiF1&YJFPc{pdHSb9Zxhh^X4MvUvIP223$hb6H4o!bhigKB=aX
zZmi+kH}7A5c=^-wgO{&gynOxg!!NC$Qs?Oo*~@PvG&@!{P`ng!YlgZBs?2HgKt&IA
zZLaE~Dv$n3<TkHzSuq@dK@_YM?z(Zu8cV|uSpk*tSPCLy4AB)$A}cqq3>bUV4E;A*
z6}Atn<#y8`x~DF{I@Q<0-^pl5zi!{v4*Z8+KMKL&d0$&qzCR}Of9Df>`2IOB4(#zD
zGW%nK8fzs5IPcSzkN@GHJG?DXg}-dPi`-j${M3{o5&qzmI3Tt$uQ;G<?8)rdT!~ND
z|5>a_taKT@yU5md>oUJ*ogC?eRD2v0{ynu~h&cGv2tt=KQ=sLn0jLmN>)+k=_wnZU
zSbQVOjtWY118R7CSByKHzGGQyl;*jo9`w9JqXT71$ov-x`(RFyCX%69?d*4A%Mx-+
zI>x}KQPEAEQ3n2qMJpzL6|;K5i%sWN<`O6K>U^@I`^E|M%s<%SdO8QLVxX{GLxR9O
zR#O?+%fGQ)tXOMWw}daV)%?IlwlceMXpa-!WOD=CvG%54jPV6|7w~H(Pt+$mv1+8U
z#BmD{37kN+8@0$upY0e98~G@xR`#{~B^%0E=ww*jF%c|kFSYaXHxbtWDa4g3g<30y
zcvG$*;@@LMkv!g9oM0ZN?1TO8&^$^_7lRyN(R4pBkl&039<+?fi?iwHEMw|7@gHfc
z)6S^nE-YF2i9%F2KiwU@0Qt#j9hgLgh32CfFAoFq{CY8;Q7Et8rP;i$k$Wu)Fil%C
z%5!cNUoL-`{0h<<>AfTUWpO?sgGDNJ%d9|l?WO&{17MbIS7=&+pImwqK`@%7iNyL-
z^YuME3P%rMzB*Tay6c!>jKoh5MpUQ!IZ!eQvvFNJ5pf5Jd6+L|Abu*!1gt`1Cuj$N
zJ#bS1Pl|xXiqYfMSvf6wc}#({%v7qbz`fhtv;y)_2ePxHD9rs9ceMlsoYSkNX`vfe
zX{J^3!g08xE9C?)hG1TuG#|RxF|n+=S(d4l;5xKKb`6Wu^$azFb=E%Ceu(-hL6=@p
zWy&#)+pZ+g!UZQ3t%`_{4}ovkcVm8pokbl{SwGya$`-KCZKTZtm~aBI$Kw0p2Z!PL
zNVbmzkf6`O7kD%jaUbrP56p<FJe`#%<<TT;H4D!&nNG<TA1sKz0LQ&awIm5Xd&H$v
z37S9nknSm+W>F+IrStj$0%`jy70boHf-|x^e(BnaMDQ?FH4qx=?AUZ3?c-{E&H=HC
zWcSPL{BJ?O3dYe7Mh#LJYnZ+ZX9n{i8B7sQCw+X8C=&0uM?obVk**xfrSj^0XM~_T
z#K95QjzZ!5<+ijc)!27T2bsCZOS*9t80o}hb0cpu|LSQ)nEC0XDpzOc<xxvtvuS8?
z*CGr9t?m}Z)tiUOsE@U=_pkdT`6aK7-hmQ<N7CmI-HG8Dk!<3Jlf`1Xww?mgRurIb
z<pVN)iVmK@kB@ZEfPcXIpB4ng(xHNeL{$^Xh*mc6UYC#XG@!r7iTmw;kI3tlEp$ou
z#lTvLzybn%iXo&PSNT`1nzgt|0a8U5x9!}TUs)QyI6W=QJ%0=@sr1Y&MsEW)FN+Gz
z*R*l?H!`FfDZKdSq5%-p<9sPNG>_{VXSGs|T7=Esxxet?I_C*yA0=x1!2a0R?3y=Q
zSNw3l_H|hELbdO;yQ8-GKP{|i-5o{bdx#sr?Yo^csC%&1W|tWa0GFdl9^<m$l(E9(
zwlm=F*e|igV_L$>q;Fa9C?(DT<z<SMa|5kbk0zQ33Gn{^JIU|<PSRT29vB0E!<(a}
zJL-Zn^<8V?YoBlO$f$XOQ5ZH-yU}w>Ezd?39csZGB5k^f^P`5!fBv&m!+Kptey};x
zjkKxYPKcpRXc!rjF;ig!4??Gj4PE&oi`;pgI+JGpyJ%{KO+LGob^WZa<#s}$qV9Eo
zYdjRCt09VN5ZvsznlDH#j;BcKSeUU|aQ4IaZfzr>0W&sdzf%Ngi6T6dLpz+eNyZ4i
zp@T&08)EuD`!eZ2P(U{?4Tf)^cy=id_>+lHFph+7^}LuY&F&1wxEMz61QSP!SQr#i
z1NiADRW(`nY@u~b@9-E+_+^W^t0jT$uOPI{d<MKOW+C*Q+U$m|?{Kx9S;u$xvU-oI
zho=uGf3mrG;lv6ihG^i#Tg=V9Lnw?D%9NMqbV_>(wh`vz@gF36rpD_>;vGXLpvxxx
zU6k0J;zZ4ts34&V@g2>K1*!Xoax{-_Hx_*yN$2{a1!yc(rkqMxgbs_twEBCwI>U@f
zHV^`umdX7%ugX)w>rBTTtTu!Qi~t^g960iZuVEOKt6bTfY*B6e%!0nT>Z|!81#LdE
zc!jPic{it^>3gF6=wRferJBtO<|=g2Q@8t4oq9M{<aazUo}qKuz8_LRu`oSnd91M1
zo_o|P#HaR+d8-hS?Fnsz2+oia+p*O(N5b2ehNjsFy#n3EgkZT!LpAeT#DWk^bJQzK
zokY`sOVL+xMI~qJEhayfpWK;mzodb@OA#brcHjzn<-nFeBwqst(>83gZU!;((i{cT
zB!w)U=4sX?GadV?k(}5x3d%7(rIf!ZL74Hx;YX0*2ptZ5n%B+@+diwCY6mmm3?ZsC
z&L^NA1MJYZ5-y>piQ6Mp#4MP9Uz}D&VUKCsX+KS_^vZ3l?D5W439}U2$qlbCV%hF@
zqXg*XW<b{r=-Ht29|r1!f9Fss?STbBCjo8yfk5fN&1T?6Ab2lAFOYiJV?BT}oC4d6
z4TjT!`>TSd9w@D-ui+}xTKQUsuGXRLE1?xgx{aC9L6&_hKhu&A7y%7BAq^J0dz&zz
zOkLau%iul<Pkr7R0~`0FSOv?ZDi~;ps&MLD2bC}UTuZ-6J02_EJtQOvP8ZcW9{-{~
zKG+EjlU*Hd^&3{q1G!G)A3C@oLq4(#nv8;1+VPe2F;pV@kNsxHP?^noo%r5eYN!x~
z&1;VeAhOFC6$bsuFjfjGR*X{DDJm{gR2(LwxJ*%Tm>a{Pf{H^shC_o2o-o0a@{u{%
zSB2aNZXei~Vi4W+O(J7Jh}!D=lKhAKMZ&HN8T-SWDAlBs+!`If!#c#alJe7asbBFe
zt}hz79OJefguljecUX&KJiaW_!40YXcIR(TUcESY`?4?hHLUL1h>zLk>w(QRY0ngC
zqQJ7jgHY&xdVpyY<TUs39|$7k6UQrEU)!#)2BD*VM%cM5m!;1p5ID>0aYqFlsGBjY
zu8#pzVRHs}1p&}mgNovaJKmXw%0eYm5cst#J5!{ma`}3`dUIJ+)5&51d14H~L5%*8
z$_BlCCQ)u1r>XGIAUA@@r#=t5`EMmsp$EDaG`1+Ni{;Ci&5CtUE|HGu1AEN99!DsF
zw2<?KjV^4*ZRDqo0C48MC5%YaxWy<^2+A-7t$oFjBo=YgJ6xP!rDX)ZRPvZB@`gP6
zQXyjCV$c&+5WlXADDET_;v=48<63o)kjtZEZro`p*KolPn2L!%);E%M+#H5M-V1`n
zURup2TNZqL%+x|<h(J<zeX*-c_F|1C;Lk|$@74vC{*#N<JPkc*8V&8KM=!9sgCuoR
z<8AfyA9xIeQzC1MAi_h#jKs#Mxe`=e&`4^6K!`{WJ(uM@tHa4O!z2@m?xl-IL01es
zxt+{abY&Axi=l@k^8`imkURUGt8|!2zWTHPazKs0QSfCDL%kM*4A-`~qy6=)BKAKb
z%z_{#SUl6|8S6Ag>LX|oKs+=6)Aq`M*HTqzn6j`%p3bjBIt|()@?^ZlJ@&cdl)xBn
zJ{)U%xsX_*em~VXQz{KgB!W7G5AUA7dWP9WmhO2j)abX&Y+R?ThHSGZ<#hUfwZ@$-
zMi|3)g|7lvW%zThzst4wFkj%P7OcL=;47>D-DW6vx<AYGxRz1Qa@qE8E@`<}?~zJS
z)1td&vI;#s%$GfZ<Kc3CUi9$k{}RnQ(!fc8L$oD%YnbNv(bDw#4%q18_?_tjYakt_
z=b+&eID*sc8|yL0XIg$WmIzF1oQ)$irBy1M#fBrHHXM+npk7maC|42i&=WHi(~9O0
z4OodHmEH4_Ey7DW-t%TmArau%d|(U-Oar$xLP<G*02PCQnQxDXE!f#fRG#+Y))h07
zAHY+i=E{VOkL66aND9o^la)&gz!|w)=vZrxQQL<-P1|TfZ3|r?`ndyZvF<SWD?WGW
zu!r<>;f+aEj1D^21C)hm6w;sOLC~tksKrc2e5CkE?h-$`u_na18em2Uy^cHG^YZw3
zT6C4DI*fD|=47DV2DXTfa%ndXI!9%7bTOS&O|%@-E5^&SZN+tC_Tr>EvQ%(Q+DM1X
zwfpIM9}PMmp8VL)1g}FI|8@%Yk%JlCK<D$z;={a`=y@X@trChFHsUU^;sG-;D~@jk
zt)Bpr5xP;ra&9)t%n_BY^J!Hc!|yl9ojAOQ84c`toNA<C)!l5&-$ILO7ar6l4F1r4
zj|4X4VL+)oE9m~E=(wyU<7+%@Fll5bAtY2LNbpyHg`szlt%*Xc@brpSuV7HUoLqYI
z68ycY=D!t=NjVD4iCY)PG5Eh(+hX+!%~_4`6R<cuHoqx%bzg#lif^1VN7UdAbKq64
z{ab9~0PScxUltr%m^%Mb70cC}%x`LRn(j1T82Jhai04Xh3*fRcW7D|7XZf}?*vjMq
zvPsp#0o?WW^UhixA4jIQbo;GX<0i{_E6K)+IZ9HM=<8Va$0L`avddc;@dNrzZ1FSQ
zkXqUj;JC9J2d4m10_qwYqRW*Lg^j`WR7=VQ+cEJBuvAr(%L~=`Rt+*5)H@n1&*oQj
z*;~#_o8~4C)g0mel8$>7g2y;mZVl90T5iUMg*j1DN0Q$M1islF)x~vov+eY<$z*uG
zqP;p;KHucGQ6I5(Dp^jhn39`-Qs;@C&<)f}OiULuWcq}TjLy59Mf7!#;#y=$7?rDI
z@+tPji1OQs=aT~h@7|pcie+u;+)UQZRk%Gsox=*39%K@cxcp_Lh_%nd#p?U=yqGOB
z*7HojCwPj$uj@y-O(^O~6ZZScLA|n9sWZr=t97Sd`t}XZocQgUTef>AD}YDq6o<mH
zvOj96m>3VAW3$qA76_>T&LSA*YYalJGy~(`Ij;ttGmgQ#^qQe0)UDlStUJl%^=$)3
zFaSJ`#OO}rNF=cj5=7tcv>@8ZhBcVCTUj5EC*E(~rz>sEGr_E)z*O4SPI4oiPZm9A
znoYiDE=gk)9>dyPx*J7$B#DFA))*+6XcfoU)b$LlH4{Vs_^tvL*bd4@4s_O^-7XVk
z`a{Zr+JjIDrI{SFKL^WTL-jv_zM`C#t98&I*wDvnWRY6m3GXNnTkCQZDVDpoyVyK2
zLPCuvfHch+q3}D>{G<Gd&FjOd^n(#*&yj;h^=0^Jj+^j<w3F_)2-3^X!)@vR&EZ2%
z4c<X~tcxQtg2RRa{^`+J6gYgl?l7wlWiLM%FoTTS;v=?L=jLd-D<`rSKR_nz#k9mr
z;KP$2AyrATf1SZG1OQB~!N4iUVI)}zgoa5BzGLeM$~1H@8Q3<9YZG85Gj<jnFRJ-D
zEn>abgM4YYjYon-fH`=~V!m(@^pzD3Q7m`-6;&6GE92~AN5i4nncb74sBxc=0c-FY
zR2wI*4=H-#85BR&W7gNYEpm%vW<cbid91d;bn0uMVcSJrqQ+6j<G@;MM`f|UO{yN&
z_n&e>ic1q!Em~qOmlD>c=}LF19=I*klUi<@cuT$Va!L|+pS$0EuP+IJ`}u@yni<w{
zLSO^M^m>#z$QX~29(_B`yehTJ-K%#WxMtC=><jKaWuz`9lT!?DMbA)??Pe{EwFU#*
z=}rnUKK-d@@tSj>^Nv*7Vt5axrbAWDktTq(?OKkT;%fSu0G3MAxL%0`S#HO*c(PW-
z&SZnAq%uw3AXo9DW0gK3GP@?ZvT&{edw)tsg=z$JU;NDKqOG<oXtLdtT%Ku+fapgD
zDb0z6U0tV|ey)CQ^~xKmeXStTOms4+W1nk?b8L$;tVC~I_qxxJ)BKRDsGO5C5LWiD
zW}%cd&EdJV^Ymw?HL~>3ac?29y+tHsIeWGo9%bl&a$rN;47^rY5k^`FAMq13kwT*G
zPkl>aZaJVKk}4=#pHGg?dMNMaWKDU&e&vjvLQeRRh*pt_dJq4T$#WZs*^FoyXAf02
zAKkGGrsOQ@+RCSGL>YV2wvgLGcuHjC9(meBir(;OiN%Y!qb2@=m-O76WjsqPOu3sO
zncOi352x*|7wWLj#=tNq?!vrTLA=c~uaB(9J(a@c6C*u6=4d&!oY2wU;$1PpbnbmJ
zsmLB9xt&3H0P62$2P0l4_115c;KQ5lV;-QvOA)A9^gjA&2aE8up5ep>dTNNqyEQTr
z5R9o{F>5e~&-VPqUU{rf*R$8J%VE~$UZjl<H>3UF6oz+yRW=0er~K5B54<kI)`+i(
zazx4}qbOL9I|kz?1LbUjZ>wrDTTUk~DpJ!T;{rgu-h%5<B9P2yMB4K58qQb;Dp_lt
zNdL9L<r^;E^rm&P?pJj|P_&g$$WJ+vL*9Y(K$e%RnmLC@Hf}W9+L$}=Xw))e$E=p?
zG<l3xvz)AGbQS|ILeznDce~duJW<H+7H!Fpd7;<c_=PLSO^Xv)x0`KepBn>7&2&{8
z${m^uylF`*+(Bo@uFMWYh>c4iEpYALjE!ptQM=fDw)S9*E%X9vQI)>qP6gM+KuuiJ
z#uSfUo#Ci{mexmq-cXopX^l1XmROkQ$>PIE-Ujx_|4^=`1ziC?UiHh@AD+Ma>B+12
z{)PP9tZKO|OtG-<IGUfIW3CQi&tPp9xP3>lSdKBH&K9#d*bts+oq+s{0BFvz3$UYU
z2k<YWW{79=i>fWWuMuDh@xeD7;xX8Nv;+9vU%t^Hel5m$RTRHzAo002o%A=~=|IIO
z4FDj!cH?|7{L6#yivLL0`vC{}Ul-;QEUMNc{rBN_-+iM%72{kNllJQ~-2L{O!kW?;
zYTw(k2j7pcUw!~m@7%xF`P0F{+aKROKRD>zyYC`t{8p@&J-;Vl`-Dj0bC^?aVx<1a
zYHb29S28dO1^o1myo-w!_fU~~d@5G7d2v8Y7d2zDAlm|KaBM$FBT5_q$T6s7=|IZi
z`QHuo96PT!A8N$Z3nrC3STl}`g)O37h88e7^0?^=S02}#D)#u@8f9otB7<sRly2!p
z?HY-|PMu<-x>s+i3PC27;?y5qMAB-p3eX6Vs*RSgjiZFU+65M?=jPfAYtW~VU4BV0
zycR?%Ws^cy^392xR@YYV^0nl%jOx=E74M{NtRU&tTaEl^mIEBDE>?4j*k?Y%w-C>0
z&^ekwa?#Z~^5~ovz}w;u6Phh<Ax)*ocA1e{*nKjaMgXV+*xoKv#|7ZwE-?z2-=7~5
z+{f}$;-Bc#Zo6if01NyqqYq=3$LxnEKOek*@&fXheR%%Y=kMYNBHM~i9az?2Mk2Gz
z_iW$ySXU4~s}GSQW7I{o=H|0k=Wu8%S!{i(U&t3^4hamNJ&k4;=ajIllPs+pRk~s!
z=a5y<WEWELIk}i&(z|qWfZ4E^Q0)^#usq(3q<C`T6D1E2Xdg!6<^zMvpcU%2K&hRD
zArgIdV33qUH%9Y@T0I)r=LXWJTHBDrN!vJnL&TdwqRi93Mcc+?#ph!9YCxoqp;?|6
z^j~wZoG+HbGe7<8t$05|*(VXLm^oI4hRTzwe@&X33+t?;i|SxHpZ|8TU@d7>X&fV0
z0i`cj`Qvo{3CIM#fDTC(jQNK%j-fCYER7~45QouU&GOTMX}6ih;`wATpy=m6GP-Dg
zlb@8;5;o6ve9F`KMl7?q>tip9Y;T3pY_9Nd^CJwaO$cW<e#OxEW+;193C=Qr?S8TW
z8ZzoxK)ZZcoQSQKz#!)%R>(fb>q*b8*zUU4!eZ-*!o!;3Cr}Q2@aykZj+`&Es}|=c
z@yULH?mmk+ZFXl9KyfG9mmY?Hrw$+G_r7B?2%gx_fJyuebXx9xNk)sv)?4EsXkP9y
z=PQpW++Tp5@g{pBcxS*`v`k_E8#C*J;j(XbArT|@qaYFmv+o=3dvIRFhTz0QCgKXl
z-!fxX3y|SbO9H>97Tfy;9rV2H-BtYw=sL#<Xl@O`jbdq}*(30V!6*tjmkDh!jhPxG
zf#gy(a2xqWH8&SUY$Z=$6Vvsh$<bMngr<g-Oubd6);}TsZYBsHwdm9?el_tVhC<fe
zq%aV4O|}P89xd6X4`to}4`>zfm00mQxhw6$iW$I5;JzVOJga#Be50kgJoh1>-jK%q
z98Cjz(I;%qW*c8aG_>%0R$Tc#Gdws({kDhb3*bA0>h1xYz+6WEI4`Qx;^hh6<wHr*
z1K*H5c$U3>zYb~oenr6aL*1NMj(_KODAoxdG$Nw-({hRWwM2kw_VC58bX{f;lr$$-
zGJtf3#giE(66-|jhTew_NO7ni76#+RtI2wPA+4inma;gW<nOp!H}Pkf`-t{+FH;#x
z-_zxl5V+jX1Aa4GDmpN13U}{IF}PJ$3D1=rV0sr@LbsTfv*9b&N${MY`ec}?oZsgm
z>ft%1o*Z;olR7;*^%>@p_Gx5CwNG^T@J84uy|E_kayanW61(9Bk|YG+=%Xcet`QE~
z`YR7*VF~%8ZNdTQPKK|iYnAE{Id`>rrvr&yYg){GV|SZGMlf5ZFo(_+Sdm@?(IBkM
z2Cg_BxZ%q*&>+jI{z8)CNL8}iS3QFQp`bbNE>GZR@RBTMYOz{Xu}=)+@6`k@^=a&b
zWON<szJC7KCz-lv5>r(fb7AVylz$vWR>1@xN<wR^-N~Nm3G5_UhjOAeB@t<Hio$sq
z-uL|xS#Jgq_E1)AUy65Q+GzW1qd5x@ZDpNF$bs{y>ZK_~_$FsrMJNP*jaDL}XOSNT
zQ^p4kLcFYuwnf^Ms9Dl|cIkaGOf^S@lSJ#14>|GmfZV8_7OShGm<jDllsYqEnjHc7
zOEKgW0BPg>ZzZI=%&U}rd#`{D>7U%N2OW8SKeLKc%2H~UyGGH;yyq-F2c0&3rVJ++
z1cJ>9ejQqQ2$zy!2M7zEs(@TW){n8KDGbfxj^Q{a1F9uknG8v9n!!d-6cgz}7!C(9
zG6eTHIWhBkVwb%av#-J*ge0aXuEEkYQ1_XbeXw~!&qnyOzyD~PnRsd@PdWloYtxS+
z#<(mqBYEOenw{t)s=x-M`D&VHt8>Mv_tL~B&XSd#Eeh|Fo*WoKP)+7#=ecVR7gFW5
zOx$JL^;(Q^_fy|N?}xa0I#cOXlg&`|<MGR|LCY%_vK9^00P}S^7pTog{oqr-7BBHZ
zk71;RI@`f|*!ddL@C+gO>uC7k+r6!Ly$-N34GX`a%?o~HsH17|y5@^oGtqja=|GYc
zAW`58d>9)W3cTO334{%k2Z5ny$9;uYVV8Nz>9rH(zT~F7Q*OxgPP*#&?%d>>3{S9i
zmt*Qk>a$iysemHc#?~7s&Zt-Jo!U(#yl_7bb7BwL<5=xwqccpF{>j@*AH6H~D1H^a
zi0Akhu5|N9bDT^M3g{i{2*YuSGdqkWcPb|Wl|BF2Q@k6xcD*)%VaRw)iUor<#BX%d
zXP!W*DyET#|FJaQ>9tzTuTY)$ys9X3y4iN!4&+Ymn!jKp;P0yFtmbpGc2&pFl-ZzH
zr8#Uo1<g;ey8jJruzfV>n>rp}m8g-RP+jlMRIN9^F2KQaiPdRZY#v!Ro6#OAL@~Md
zo>PvB=P4qIK<_ks3nB^F*7Po#&B%&9Q)(x!Nl-)(Q)-8=-B-66fMxBtSrdhm7=j&B
zkBpgYv<R>q-ez)kbE?3N&R}*zMhOA=G3hWy+Uofnywr)O&uBcQy4YtU)Irpsr~!`D
zQlqk)y*|T}qG)%L40)5w#Hzky<)a)!MqL@Ci3I97loM<qHQNgrT<9*`2Rc>^B&Lob
zvsoyAVHKEmXE|S2qSw1X36YsRIovarq#<8FLpDC%iLa=|HNko4VNC`~Wiy<HXeT#+
z$Vzj0H4@rXhJ^aTC#VtymJDey=)Otli?#C~KWX>2w?v5jei{52GVjzTD|G*oAl{CE
zi7>++uvQI^1^h9`N}nHy%|U+bi#|M!6Xnah3ZM49tq<2t<lp-pZ3VQ&>LqW_?$=x0
zlTK8|p!{)Ep&NGW$Kp(Lj#x}T`WRwOKt|9s21ad+4(hZak*Yl`yxbw=kTk#AvPPzi
z{X7~npZ07gLno^k=n!JSeI|KE%%xR6(=VKhfPFt24WucuAB<F`PnEbo0DrGxb-aXu
z$>5TZgN!5BFL+hmYxmIKd33kf2}bvSiNaF&;5DQ*TK;WbmH(K}R%Yq?&J@Ke?5^K|
zdlo#gjrsR-=DsHq&(VD8+w8}&DiRSZ0CJT>PzntL;B8`MGNOU1Sk9-Hc)~!Li)=RP
zqw#1%goLYcjMjT%{M)k6dwjg|Iy+M!@yR8SSU0)^A4#aiwP9Hygxh(c8!|L=iZ&^*
zxGA}0U4Mt3xcf_1`zQqSPbis7&X3vV#4zooUNxP>Z1SjL$tzwZN5a}|MJxta%X(HT
zB~M0aVoURpr(3`-ni9q^-E1LX<9(YG%Du^)xp3!{4yun<#9IklX8U@Cq2K(^v8!t@
zs7N4;E@1hV6buxAZJ)$}f7p$kiXpXHTdy~F^=h7Kiq(W4;|7sOXXWhlCyJ^60~GhP
zkX77#1lS;`*f5-UzWdY)j6}iXyqZs^h9NS8cru;71%nU@_K^mqtKnSuIGQ*Y@vi4l
zYKC%T7&01K*=lJ0rnKd9*7(VzFMU8^B5sD3w3kWN&r}U0^@q^YG#B`>j@_J!a3d{O
zjjTqw;n37)du_WQa<rVJxh1wcDC(Cil#>0c!j>LPAbq$w3;)Y8drP72P_w$Dm&RgF
z-rn$}hi18hPV}q>t2>>`ET3n9W^BV9Bz*D0fOwDUtwCo7o}Bh?`2Jy1or3Ere5b#I
zr<L-cXFZkBkRAF1<MknMaOP-$?+@Mgvl73@6xP#?>YuLvvsk-XcTKx4PF`Q%9wa4M
zj@h(218Y1RW@PQ0+!z@k*F0dtHxEeQ&Ch&V;p9<9MF;BJG<>WgW}`Ji(8#zRBVqo2
zP98}uFcRi3n>S*Fr?Xv5W@xPGf$XpWiDZ6Q^)VmZcBjYs+F?Z?=^&ChG|U4FK==$J
z1MZ?Ki={N<4u;(sQ|=`;(ha(O<DvWbCFaG5$tWha<D|;j+xfCKt~R#D*u$#bE`N4z
zb)R6kVfPhMuL1mCDl*tX%PHV5H0XJS#7m7;#c(u1<;+vUXDU<9Hk@EIK;DgJEt|Dz
zaF$7#iL{GfttBap!=FohX0C5Kq6eL$i>jg{x?Y(RUGMcbEC7`rO0il8bLBv-NBEot
zXBz%|xX+#RM2nDB5o)$HtfW@{LHR+3ElIVbdQ>Ai%Mv>@7MI86v=oCIYzBUET?2l%
zA)wNyc1$iuO#NccD1KN;(G1}^J6cO1BvxT3sbI;WO!9BJRbmN{@u&vXjR8u*k<k(r
zmt4UbaVCoMk3=a_c^;=F=<uAkX+K493u1GeA&jTh>;CPY?Gp)*4xZX~#K@b`oKi>A
zi{oNRmbGAR+-w^dDl8Y%@~E)Ey5(Vd)1ph*+`=-j){G@))uqLrV&xTv2|O`HGT48F
z(F>%?PrH)ZO4^g@REw~Cmog9+^J*7YM!Iid7K}M)4LFB)bMj*A#+6T{P6T6RUD9SY
zhJEMI_$VIJjK^_Kmz%BpK-g;Rt4Ph@d$V_dp5O-pyWoT4N|pf5teC0zy|m}YG=)3Y
zpl4_7I=q+iP1^zs1B&#(WYNn>Mc!L5tNZtSV3K?H?fd;nRTPG%K5rcyVDgBAgE79m
z47Q$`ah%SpH8RNKj`%s)Vwoq#JPm~@nV(Loa&>lI9=YP^%U~->mNicEXAQPIdp-`F
zy8Rj?fpIJvY{9)@V-QuvX}L651%x5L=7bxo7h2NoR7^1<zx}nCUYwRQ`-70TWzL+f
z;(B3DH^U%4!BktI;SPTq+&`&~o=<J4|EH7cnePREvZ7`2)+{n;RPk4N#C~2JnxXQh
z67QX7XJ~InV?4lkQOnL`*}?cvW)N^>*~n-Pf~`wbME>~8&iDS8X)`|$Blv!Pae6kp
z5D@&>$$i>1e^FA&OQ6}w5y7z?O^Z{o{WG;*;a>x!4-OB0dzgI5Q&Q=?Ek#odxaixy
zHM^yPIP$!Tp(Kg@l(ahGA9$x%u(iB6TtQGPn8y2yLkw^==-BWUff{4t^X+|O+tPg|
z+Yv0FKfQM%E~9%~Hk}-R{oc_ktPEv%1MhcEz+Rpm1Tr?qIr!8q2cDMYPH;b~^}wAD
zH+x(6@Bhg<_x><hEXvvGkMCaXQ~Hx%(MEdf{{T=+0|XQR0ssgAK(5vZPU;{Zh7$n*
zhAsmDCjbBdZf|5|Uu|z>b!=sGFJow7a&#_gb1!6Rb966bXkl`6E_H2WE^2esy=i;f
zMzS#a{rwdZ-$Vn5O^TG4B%okk$4lZFJNDR4CW(%&1|pkck0F2qfVLD0|NYj|8$eKY
z=Dg=V_a=`;pf~hVU0qdO%hBQf|Jpm;d$LT5YWS~m@8kX9gW(vHmQ}SXqobowpFRy|
znEkJEm=~9r70klD<I(X0SM5ojRfW1(S9wuliMKM9Nh#-h>ufHIy=p1<UcGp~_fpMd
zR!S&w^uP8O>ugr3JPRrz!%Z*0_?Mhjy*RFJRx)4g$?H{KROP`z58GI%OwN1zCi5zv
zuTweYpP?=q%OH$;rdih#*FHGl-(hk!pYmfM!zifYt`A(M`9+exU#fEI9;52^wv_22
z9MZt?dv#Djh6wCnU?l5O?v*edFq+B71V$gfrm+ndg_M8DU~_)HD)K5nKaa9?nu<$V
z!33r-bx^yI)w;;`{+id6{#4G?Riazgc~!!B&sCbr!lhs6^q2BdW^<SRN~gbDU%XdU
zDqYSSozqJGV3PAZt<=h8{FKynI5A`0!z%SG&&p~~#X%6pk2Wb(tK!jwD_~O9@7H1A
z)hdI^Hi+Ygb*gP<hM8&+JT8jlW~fT~JveB*LXnW`?~f+@d1<DYCKlIlSmp0v4YJGO
zEJ;(SqPx^PwSX4OVVMF%1|#uJ2yjM?pZOVshoS3Q-s<;0bR25w_V%~~RQ<Dkag8Rf
z(V&;DuP$Wa02jawW){YmWHWsKiSnVVs(h|8Rmq_5w^i^?(p|)sr&T0fe%i?Yn5+5T
z2zpyhWmM^9T*g!;e$*?e!(Lww4yqx5RrwE9ErZ_Iy>Plpic&sL^Q3}L9gRn$s9zmP
zG5c?|aVVh`2P|`JODKW~obB!1UD2e5W^W9W)hfLS6!gH2e9f(hG9&;^L?O}%w206a
z!fz2*!&GLM)e?#<@*+s$VlbX0j{uUB!61~pa7t9C$(cyPiA-USb3rI^QcRM5e@7{3
z9wCRCO$}&#kT<vuL=mUv!#i3^p{+B4f4%W6cqMTxFes6U97nSc@UkxfW^|ML2*~_s
z_RDyJ-B9sJly=Ayby80HeT5T|#nq`g6L~E0CmYU_3eb4<0ubaiG?zCLZf~=pvN`nR
zzGF71>-44G+L_zGuv}NkD!2?MW|lUs{X8pV0&tG|EflIfePyi7AaE`+m_i)iB%={!
zA&lZQJ3EWv)BI$xz@Ds44_pUVZZ8hTurW@17E$*^&+cY;rcM^?860=LGamWtMPpxI
zIf%oRS-CN5jFrI@R{$lkf}cqqWU#ICAPJ|}K_(KY7hyj1Jn>q+HoJk_DB}!{FxbAQ
z5?d<mg2ESbf0p$(ix`$(-QI5MaCjw)OIh6BUeU~@G;jDMVGiX<0@Ej{>uFqK>(E{r
zhR{r<vbD5h@Yf>^{YGGIGSeSP%OS%e$gr(Sq%ek#1-NJ+C?4#FI~twW-aMRpSfOKX
zOP<@z%xy_?n}ySh05(e)ZQ<u-QojC_y(#jQEUFvcd{R{5?QNh}Aqzu|B5&eNuNPHt
zu!(E>8D5JUez>U};`)fdWPrIEma9}%L2uYYC_X)-NiXAGkEV=^ReMPFgk?XjMCqZ)
z|N1Y$lO?RKIjjcbun#Roff}yX<r0P`uqg}M%1zWOo>6l~-@x?4nD8fd<d^H`M|V!b
zDgJ2VI;XgEIN?1!;#7D6JM+V&!ZQ$YhFi`WVAA!au`51#M`%S<<>M+Cg>XLpyn?BJ
z0;nYj`;{K)*i89{7&^n}6&||c9lm!R1>%i4d+59vmg)~lSP&nYIM5qbg_v)jpde6T
z2MTkm`qT}eca;O7w_f3FR732+?QL%c9skfwfh{Ait1FqUUAi9EllWCqEr)Mjh}ZG)
z;S=#Ve%*f}-p72-58u3g_u~DFU!I-6`04qJpI*HGO}vbs9F4yniD&S8EZ)N3`{D&w
zJ-R3U;KtJYay$~x`K45snd|&7X4hD{5Q-!hfJp~3Jn^9BdmkpKRFMOXjKERF+)8yc
zmiG|#7~G<`;41$V!1w8Sk>)Vbf8h2+2(6BkAq&fscsw0P@N+yp#-9h%2hn&G9(tYl
zhu?|QGoe3F{<}a@fj1DXWEqbq<%yb<aBx;%mvKBgI0&TO8v3a^Dm|!#l?X<+3h;u?
zR#>nEE+Pmt1mUEFFdiU(g-1mF<RD<*-$EKF%A2c;JZ+G0TbvE-7)L+u2k)o~?149h
zx>A+;2sA@R6%E<g)9)XXbS+;m=oL8+=>EPce@cD|8f27DAo{!S$0jmpF07fEfjq%(
zslI&V)8+p%utW1s6bH}!2+*vhB+8SFmLUf+qC7(qg1eU!CLLa>jK2yG{3>#s_p9Vu
zrzh6|y+XRz@vnTeaTw4Z@UnkvW<%!D6EFK`O?T`k-a)~q)EJ;jlMMcB9Ln$r@kTWX
z<zWoqtor>9<oauKKIQOwfQJE`KEoS$x)GTNvg%Ov%fpfZH|GqXrLto<l9ZkP{A4hE
zaQFlOIPb@=L$OJ+%Tz|Wm@DQ2qO5iu_;=&Hbl<W&(RArJ?0ae4xnqBZ|K_)Z_@Mtd
z{QC9ai7WAg$EZ|azwW<=e3$!INA4KX04o3?`2(B=K%4x4JFI}8e2|4Ag@*(mmhg}b
z00?IEkl2aHV29>FV8TxVOgEh0{8T(j4-S?mGxzD=yRaGolCZD_gtR}}zk2|K)d%;E
zzj^qrz`x&k#j47TDjrK<1ucv{@}L;LJb><1CmsYtTEBGd$jXu{NPPhf_6SeR6REM7
zw}S>_m@-4e4)RCiNm#~tKYR2DKozjrG>^+Di%UICn=}X5SSo}H4Te>0mm+>dUxr5@
zA0F9-p{*&;>`b31o@a#zdD$OhCcf5Di5;cFC$M^@Y1%a$xDt<mB=DI0tZE>PCYqq(
z0j{7A!aTqrVT19YAK_%40s(&ZNKL|QFfjcrAB~`&C#I39p%RFqGyH2_0o9HO9SQb)
z1%Jz>T2%PE!qV`t&N%7JbvCIO{Hx))mUK<s<1mG-Co@@;d{UsyNE47OH8Nx)w9zw_
zdIG0=p)S`&aseB7e<Xka08*CU#)43Jw6Sd?318Q+VX7g_!?R?z3<7BvO~t+QJbMcG
zqSya~8wyTST*6)bkYDuqU^pB~w_!`oI+H+4Iy$gxCTt&(O6;P<0KS<n<d4)q0RW8R
zuP?Buni$l5idY!crs|dJfx!M6#tS+-7z4frfGUT)(7;5EVVX3sAm{|`shvvzO}U2?
ziQO}=whvxM)5<4CGWlumovgf5lL<^B?+kQCEV5b@`4#lfh*uiIMmt-dU?BOY={7mB
zR|R1marUr~|6a?odYoy2;PWE6k`9Pxl_wNHf~kxx4ZCNXhSkUr4`rf+DS;v*v1AEK
zz@HH;$HU6P2vcw$)5^ISnfqVs`bufXAg94Bl}YhlUCDf1;X$C{QdZ_2!4+t;sPf?t
z2{(h&))mqFZ~zu0wyUPSRKgC9dcY*<ghE{|F=Zx!+%9@z;UO!(rt~VQD3E;>0wsOf
zz?v0Oho$`pHyuK8(>m4Gbt7*HR#lTf&#e4KpZX&>39|{YCg(_O%DFDOQSV?4WK@Wc
z{E&)sqUq+*vIdT429TviFDOIPkHdV0-$iWIN`YOFWIrUUk|oUZxELnaFs&Onv!b<t
zQz}{rcz(*D7+qqLd0Ev^{8Cmwm$LXCDWWnU0nH_mQMo((fTLZCxmbt5bqF=hB1n*s
zK(*hfYneXJi(d%UtV1jW=e(JlDqdQKHt&x^0Pl~muYvy?LNDedU?TLg5B$k#O5HyL
z7@Xt-chZjFT(9%^_aGN=zyM!dLkCx(mO|TN)K5JF3$YIj=Ti0IK%I{6=<y=7C290C
zhX72^EBNAPdRz7V-U1>>Vx%~7IJ5?NO#(sy33${8I)N&j=`)!3DoVT^cja)<=9+;-
ziW`1V;=II%w?Hn+GAa>dvUqcitIc%wH7+@m);E}{DD?(Y6{gmNaZ4wc^BV+gVI}QA
zfDEx+Vyod7h_fL!&hN=JzTa@ZGWj>0PaiV4LLXg8i99MD;v%nSDZKApR~t{j7Qnd-
z7-4v>@n1|3%}Io*OG3!6l9f&@)>#Hj6Cp54fJQ4gJ7vrwg!(+oE48@UCRwFBUw|$_
zDd=zxCn!$;By)!c5ItqEp>Ib(1p%L>k`yLaKM6Q#-&GR!9xUU!C;(^RYvi`g0L}|s
zXW()Ot-{b2g#_B7HB`XRts#v>b1ph@Hy2s2<|sK0#m?E&tpY;PC3GjaPr7~;<J1i^
z;2c8USSTU%r{7IX!1$AxEj855-`>JAu%cIGQx<Jyh&q>1BqB&h3m37L*03mk01QGN
zXDD6Ihv&%*dF5#Uk5yhJ=_6%V3-~AZ5}N`5VZ%zzKCs{&Hg^<YThO5UBnrKW=ZCW$
zS}BL~BKc$|Q3DQeY@#BG@FmPx*+b$+w}9mRa0>#P^=A3i3TX|L1sb4%vT)+{?ck9j
zX+du#@U})mui9`9s|Dx_34^jBb@Uc#!eoI&Jm<6f#ExuqQ%D&aa0XDLWr={2a8&BX
z^c|DU_~E&(QGCK&0rXteT*VxR+!L>l-bRyWMgmhO^Ep!$66G>H5e7Q_$_!0Zi>XVL
z+<8RPjtYhrtZDP@nkh3wlB7u9&eNOL+YiFw2bfv@NFnEII2w!;$s&Jv9iE%gFhwJ`
zG4-|!YyB}JuV^f@6HDIJX<cYPpc%9qTsAi#OhCT+-1tc*iWf?EY+hxCt>xLu?jz0P
z@vbdH1^5&&RW_3;&=R^55~+>-fzaa3uD4O(c)ZF#%B@A#U1r)Hg<UmXxL;IsBwSaM
z|8>Or4gc4Nb@3sUM>D);-}^Wk-WwkKN)DH*TCOjK@WCU$<o_;YGQX0Z&cnUEzpg)g
zNcR2)rDU3XnXZGox2XIP^oI{_N9I<+qgO4=*b@VH6|!XRcENAxrV60p<Kcq`hk)5e
z;`qS>k9T?1QM9|{r|pu}5jIN~vrv5O75=bY7;kT>S$HrU&$}w#j3P*i#^N|S7Wbli
z;(l~rJcu5MhtWgvP4tcUHu_e47kwulN8^$BJ{ph3lW2S_o<`$);#oAlFP=x^2O`1T
z3(TEi?i_O^<}M(&7H@#_2V~G2jgRl$fAH{|Z@+u|{gbE9p7+kgQ{o@qRHx$y2i2K)
zVqSye`=f&@eDvu4S>NWqrd*c=tN><sbN`q|j&LSpB>7&$`w(yC>EY5mT$qO>4Dl-d
zX%#)GEK@!0{qJ61Qbqc?<e!VMZ{^P?usTx&>ZsQXu^mW`Gzr6#`@V{g{_kK}rpfen
z`RU?zS$+)vEBLSSFgP9bhw{JXXZ<jkMss-?PEY@<6lZ-e<Lm7dD7%#yd>u~1DYW@t
z;a5j)5?)sAt4Mk1iQC2l0N5-B+8Y1#tD}3P@ayq03`-5l!)*Z12KU5w1LE0%rq;7`
zngxI*v*26&b3Z(D!1rwH>qtSuANbNk_|ilAkUErIpAz@^LnHg0GI$V*GPs9-#{PHS
zZheQwJr=_UEW67H&jBa+Xbi_i7LSjJEfn$)Xl4a}a27_B?Bw1g>-WR*G&?(t#{)S4
zN(r9(v9#hX_th88vuRiy0VD_%k6h9dUfo~NQ`QhVBGa5VM3b13#6i~2fm5Xp7a|o)
zEBeEWd+7HPIS`S?$)n+e>GCKz9-vG%f+wsAw34r?B}n7IVKJadGGK;b!H>#*AWziv
zVFaX=<a9NtF#R~9OD1@_UvtOA5=s6demFWT01<}bbaV@yyS)V-*;|1>Do3Vk>2p&T
zNQP5j;Z8?qLY|KC&+%CpReJCtsTaKRFF~GHEqO6~;bkQ_%@zBlYRJ3qJskD#A!NZH
z@1Cr&Q17duyp}U_IfY_lSR+11&9Ny@ADr!zs5QV#>W61jz~p^Q4Wn1)DYT^VFO&o$
zf^~(5duN1*6MVi;&+bC22MB;vmtYpA&Gqt!`qmB=HUd!FfLs7;d_l!$TNPm@`AKYw
zNZ|@x!Vj#$1^gVJ0m3eg1m_=c3S39Mc~X4niQl7MN+K2UThuFLPy8D7F4A>R{3GgJ
z7CrGx)Vq>%wZ7_!pQ9ciHy{AuZ0Je&c^~!iv?t!d50v~K>L)!oEqYk!vIj>-4_hvK
z;w?O7J@NOb2Lt%`I#-bP492Q@;tkZwd*XG}OQ5NrpfWW43VH`WFQeX#OjF2yj)J0|
z_*>MQEqmezC|rDiHhzR;_~Z-z5Pb5lQSZ~TSBsxuh_B(u|5Zl4#c1*EV$l;xRw>}R
zK0T{2F_9PZZy@pC>jd5wQ~;i@lHx67e*+2g`;hd<`ZsEU3S3BaiFF?=9?WO(s!C`N
zYs>pHD14D7vky^kL{Hh@<oxwjp3N!$Vm61FrLy?@QN5Q{)cZC$zL3XI{LQBfhV<Y#
zIfl_(tc&#KQ=ZRp5-z^|7J4~LUR7B8!QwlaK>L3KI_tM}sXIEtlzjF+!GX<>AAUE6
zxtqOvjbHm_@nD26*&@w9$pRaBc>lWxa!!e*N<Yx(zs2#)3LwyP=*fIGzJCuBZj#JQ
z&NWv3_5vO__1g=2xqSaBdjma%em)#w!atH57|M6}KW6{-96yLXgl9kJ!!r4xpx*rA
zn}=BMD!F`KCD`t0L@mDuc9N<;c<}Jz7<=#z#UI$8Z)eotyV*1N@^|0eJDx#juYa3!
zZOSWg?g2W!`|ja43BLbGZGF4An0<?F{fxu8|Lwgwed}lH_3`39{Ex5HRr~sPiL%D|
z7#{V)eFr0&-|LC_<JIad&EWX{cl=&{xWT3`Xwv5Didug79sW=6)U<ui=a;-FWBJ_(
zYb?}n7llGFx;V!FASHeGTEpyOkt|?vi~P5;`p07!-tqCb7gT2bw^9)tkEoT)<ZXHJ
zF2|L`{~=+Smz8eiTiy<r?+G;L-{5?iWt=Afh44<j{&s}_Lnh4}%_}^<`~<5wUo3D*
zXfUSOGSB4At515nP(r0==izr3us`0;Rg&Q<&E^kg4`!5b37x!;OAez@AK%?DxM6J#
zAd8WF_$`!8laJ3|6|kZY<-<i{-hVBZRAaPwfJvV+>gzYN1wqJ900XmUi$%^*oZu$>
z9cLR@+i&GVc;Q{52k<*Xw$!`*cb*g+FU)%~haUb;^D@7O|6>9C*moldYe#Q>o*wzd
z!x_NM?;0GT4<iJ}-!(WMk1mcAdS|Hl_M4f+!Trtv`OP=qe*4{b_)2Zt*Rpz?5|E8%
z_YqJ2PJM*`B=jRySCS!tpXo!eMdtTl0O{N3G@22P-fTGoHCM?S>?E!<R{q7qhYugl
z=Gf6+@Uu9LzwqX}NFF@E;r_B(7b`&C-`)FWG>0Aaiyq*;*~PtYU;=)j{r1hp!*B82
z_@!JGZ!f990?+{@{GE2=e2g3U7usY5C*O=8d<zSErREtTc-ko6jlcT_dUy4<n*Eks
z5jI}noL#B1x_MJ-d@SLkSNUv~ly5oV0@}%vkIBDsvzg|=O;Q@cFq~#{z~7iNUp&C+
zK?KCmjkAGo^Y1TUDlWd2$1r4zjgkkLPp`kxmb%XgG(qzOCIlK=y_RN=Nh!a@xx^#_
zAV5mreM|2+4aouuNP4vs0Z4L$_+^!>lAGkyvlWeLF^4g&e*D{Ny;#tIk_&*2l`Ph{
zM&CZT2WzUqa5kF3s;tsAOxS#$jOH-%RsQK!!C)i_9`qXGcyT^{yO1z{I`QGdd-o9b
zc!UffZ_1mCBFCc(kt(9qH#e^duZ|ynhYL``KKqFew{I`*KN!OZ%tlDQ9es0*C9?Sq
zmss3S?mvW9&DN0LUOe~)U&|%X00iF;a9&FFJOiLjMh}jU=lGg_lz<mtgz!JSyPYIq
z$OLx}lLxf-^{#@^;fB?lO23s^{z;=)SQ`&O;RuCyz2ojb{Pq}8S%rvV4v&bMD*2k>
z1RkH270ec#DvLQRX_a3kRZbZ2-hCJhfjP|f9E$3r1c2cfhxOMVD}-e@@nM!Mz9&S4
zZ{=0~L6aVc>dc16WqA3C!6>0EUK6?dqo=g}FQSWoMEUiPRqUBYn5&;nEo4J?^rxz=
z-TRNqYDXZEDGH-+G$~K)ts3eYZM42N5U}N$=C-U>a7M~VsQL@6Mlmep3U^$Pi+@z7
z`B^y0W4dK~kyX$Ilq-)PhN3zx&f?Sj(WCLh1LU&c>05e$e+Rjz=@^9K$7)y=NmfEL
zGOOZK6qCUJXQ36-{aBqsnfxUZL#*IvRWIbh0g%p;NoUEVvt-iwe(aRDr%3rn@Nq*<
ze}#O1ae0wU9k*|p^-d1HGf}hqM|bf1{Jq~uCQ_Zm!_ny8_}=K->G*i~-SJ@+jfbNL
z4-Tzv5wONb$HV*K0F%YfuG;<4{Rh+Ph^j@lcu@7RV0c8$2(0OV=-0|u{Wp3f#2Zgg
zYV6;uS)La&`uOKiv9x>&3|llN{X^hafE@;QIxca>ft!YhF+N<t!||D~SXDJNtEy@9
zwo0N3wWv_-#A#4@QXyE>5v(YRtAJahl`~7;He{I^je$q;Jrp=&-HHLCVt}X^Ag~c(
z3sc!)5~FYrfFlgU2<lR|TOS|Szy(u5DBsXz{J~>!dwi+wRC1?X>cL-aak#iS4VTN>
z!SeJQ;&9z&?_<&gO$xpxb{FRDM#~_L2-0$~ecA;jGrO>vi6I8efIBb1t$__FYC!4A
zA@kXoeV?*R$}VkoX0n;v&L}&x*~q-Ye3dX?8O&E+*Qi+;5pS<AB>&pHkYw?E!!qZu
zRa@6yT2&aHE3yP*#mSy$fizVyK~Ch1W$210j{(==Jqa6!^!_(yAlyRUeb$Y8fIrg=
zAqEFH{^syqb&3#;z~iSJpCKIiDfiA0q__c-cK?iVO!N&)g}&RTuLSe~)AGs5{af4S
zWn>z&$@l3~^!UI_en{W@j=o0;-*}nd>JQ_+QJmf0(&=$~OW<iQNiHv9rJp}0shY?8
z`>IA8HF^tL*8-GC*-$ayZCTOwFs(WDCcICB4f08gYDHC-x?W|kW8v$xN;N#ON^a*D
zr$H6FFL1*o#r-ED>)@*mAfH<7;qRsXy`W$H@jCoxghh9h4F755zid`mFXi=Jy?N}9
z*GP_+WqMZ~f7{a?RP(||G6IH$qEoAkKcMh!e1^M>9*@sF#W6j26i~yE6b+=Tzs8@8
zfBb<%v5r#VKkJTBT&Ziu(0n#n1u`rM<w!&dzgk9XG#6MVIeZXFk;KP`Io&X;VKOL(
ziAduhNDhlQ9*n0+6eRs3JPO8rND9OL80Du~JRYP%!2yDMDLsUzes%~S><=G6@}*6_
zq~uFZzOcy`lzhR-Nt{Dc(htUiJUqk>n9j$l_7<jAsB*N*Q@V`z4<&aI40YOqJ0q|D
zxe7k<{RA$NdAkfzqG;YOtYSRubT}w}1MJyXhXLnHtUD-ChyPONW_~WTHOMgcLg(gw
zF0>8fgWLr5yD$fip#iPAx2|xo(T~&{9`G)(_6|bvHt(+*nh^}@Bwa0&t=mAz(r2P=
zMgm<{bQeTHe8uH13m`dB-^HU*UFT$cUIoK@hZU{#ckl~KJ02h6%sF638^TMJ%*T=&
z%~!zA-tqCi{&*%YNl|0_%YNekL@;dykuCguNt6peUvN_-SCzg3;jbPJ5XZty3`%0}
zDmO3%%cR0PYq_iF*fl9XU)DBT<W;j^(-<7lo6@u%N|sR&j=z10sOLH95aOgLL&zyZ
z$f4x90a*Hjp1ycx4)BA6ZPN_@-o=<-1Z~^ly(dZbF)8096>QCnErxGzTe&|J$y@<X
zz}dCAzW21y{To#3)wGHXr2A^<@~(12JL|&-;ZU#Za2yW3!$GqRQpTsf>z?S{z`u*U
zn9JfHYF?qPH1>5}!UI50iJH7XbYW?_1-GT2n73s1;gW16IOWV}=t`rC<tc*8)?Gq#
zrDaUSwACl5`hR`*`llfiL#PvAl;q=*byu9N1S_!O2Z4P{hio+UJTI=aI=3iUC50}6
zL`nBfAu20T0W&E%kldsVU7`(N#<Sb&!R91|X*Kh>5VDrm2V!s3vwFz{ZlsD}^)J&L
z(FvbFfNCowkPTP*Xxy@{viFl{jD;{gq#lLBOLVFgCO4b}@?<Or_iu0Iqp=)62<Zy4
zSI!XZ)I!aAh~=B}ZPb7aA2G!vn;RV9LC%kndmKpHpNZ>E_$VG998^FedX`>jj}*WX
z4jO5mSt98%=y^}#Kirt%gus)SY=x3=I*zulZ3p8+uUX(^jz^?Klg672kqL|t=yxco
zuGUx2i-gAfR9&j7j0)6l?Mkn^wGp*~oLNiM87np5z$uCVU5YfUMVenGg{qcUUj!uz
zRh_VXT$&`C-`-Y7ciPOE>*+Bd<a^?QfHLC;Xl^`9*MMz-(ZQ7;etT$OW17pMhFa}u
z09C2EX8_Z6O>|=d5YL0DP^BxEX7?4{R@Z4~vfJTHX-P4A(YaT78bZ$YwPhfz+6KZK
zf3DEB^t42KRs8AdLzfNltc7p3oDj(Ab)dV9)1qH`JyfvK{N7wP`8~1?L5N6<?!8te
zWjJY}!?;J(zLo?5D(>lG4u|e4GULqu{qW&Kouc)+OB9)Lg8Zmvl2n!7VpmASqLI%E
zh(ugjM3hfk<%|xaOyw1z2iKtdNUx`C&x%@BfZ^#mU!&m+o3z5okgsP;)}+@jR935S
zE%K}auu85}dK2~j@}o>YO4v8a-cNEZ|04EW3cfrpRFc9&nPlal1b9V(r}{&pVozD!
zq%!Jd2%#xnC}i?SiF8dg9v+KN{D{l1`@e)<6m~T9_I+zXj7E(_g0z_z`qjJzYE*IQ
ze(~*sGp`8QraZn@WsFCzPJ#``2q@lM<#QY*(x)ZNDCLy^;G}rTJN!lVQI(1<cJ%PB
z5-14&9+xX9%K%`Mg7fT0nhK}kn`cjO@w^n2cKV9Mt8{&-G6xLMnH503`Y3G?qKg~w
zPARTVxy(PkgjKRNP-XTpDd#@Z!1g+OpRZiLEN6wfkcLb*RwiN18l;ZL!Og5uSXi@O
zqRCpCtgv?NHLIqQE8?saYQB|U=zM^NN^Wa|yDtE@XkN&Qv3K6<%TD7f1!y@Fo73Vf
zVyYq{j|ZRNl+cD)wSa_Z<C|lR(AiFl{)ZNT???dgS<_G?O`7KviqTOF$&OuWQSuDw
z`f*jG#g#UyLF+c(YKsYTGU~xYVa=r59K93aY_7P!Xwguy-mCUT0JLE!&I!6ri5{bn
z9@*y8)`&Le3pjr+NISs;`(7=)x2W-{{juLHKs?NpFO8^(nCn>-+!JWQmE35NfH1nX
z(OBLSGC?p$U5!${URQr#6WUs2rZAdinP)h0SLV6O?Gv09M%sYPh6S=l58N=@-50HC
zgo%4&^u@L3AlRNp!BwX$GJ2v9Hb=`Ah3F$H+ECXFX}+?67b#f_b|GX7X^%pFDJkn+
z11cLM@&@WUM3)`P6lN9tXk$x88@mkmM<ZB57%$@W&Jvi9$ivGe4RanPEm6<ATmj%Q
z_)w4TBF}-rhjs9qti=-cdUu<6GxlXI8UVuMCn*SYU=c^RxTj!Ki4MpFSfmqkldP-!
zO){U8M*T>v^do$I6^#U$lc9J%uPPWJz@J=H*zxXG3E3j7D<Go)+M&UGv4AXuF>N!2
zj~5aU`Qz$$S>*Iec3Uu7q+NRg4)GNsngTDJ@mI|wzfBw`F@w=qApU-xk&Cm(Ky6_*
zCcVd|@CDm^NrYSUExm9>eG;M(jc$uF>6mnxv=nX#wcyjW(V2NtF44dMe_wOSk@&>D
zgF^?Mm3igI0v&7secPPr`(}pk*EMwn)*sk|w}x35AyZ)A9>A+A3h1eB4|wPNgPxL+
zm%_vGK6X!dJ;$Yg_kriyJioC8)8s;?c0e<;(Gody^f<FxC2}(G9l-Ec$-np^Ndf0O
z3&&ZJm*rzlV;H4_7(apZ&m49<0fK(k{U*8-?=tt?pV9D}2S9<ElBU1Mj3@YXWH=mZ
zaI$g%`?ysSA*@-@mmzEw=gdD*fuLYlPaJMD+oy@B?>ylyB&>$)p>vI9MzX+(M^ABP
z=?vbcOXPwNz}DHwgLn#%YzpHXe!rDEH_vs)09uHd2h~;3EKvIp@3j`!e6=x<t*&>}
z0W5Xq@qP;@r0w#e$YyEXE*$6iY>mXB=O9d)dtQ{jF^c{P$Yk%j+{)PAEfZ+@ZJulS
znkTHIYg9Qz{j<h>=SntQ5=?gRht)JFomM~vTsP{Z<JhgeIeM-m4c?MH)_HwBRcB!s
zmFU7r3p%bOvuOFJ3|3qZ8mY!)omRgn`3bo-Bm@As=kJjD2~hUbV6m^8wCfd46j`il
zlYh2YwPxlQD7vf2{Q(;<<6c5s2oGe`?D;-8m+dQqO+8Vun)U|0zKXPmD&t)(JGoCf
z6&rJ<av@K%vq^cHpT)ipnp4@w`gtFw<MwuB`1Eo}Se!hSEvi278`wPo3>C3;kPf}>
zBdd(PwNrQ_opDT1p)tRFG{P0wS7cpST43-^WSm%{mnBH2u-}}ffMPQvVQr+0sb-sR
zMq^sEVt_eUC{EKGdT^0nBj9Dw*Xwuc4*((H63)@@Ku@0xJ!BO)#bP%aK4fgJqg32P
zOE{yhqgmY&(m8(!#Am~4P@>AX74x8oFsj6cPtjkaOrNK}MR^^wEf%>rMC(Zy{*5F>
zZD=hi0BFK6i8JV0PW}lk*FoY{GWUkQ1K$X9@fLPk5Khpu+>8=_9aOY(P}?N^Ho#u4
z@MC6~VQ>iyuAsrCHH-bkJWhDkgW17BL64zWLn1CYr@<3RdpCU6F9d@{bXhw)3A9&O
z44@j7=@<MfE-{IVLmEHOG<$x1f^;wsj~0iD>l~FK^wQ5?4%Xq(CFFB`C}1>hUePA@
z%8t?033k7Ow@)1`ByCgx8is-^n0|%qQxXF%%22+k$t04pz+|#G9(K%om|;_fr5~;k
zzjLW{>*7!AOyRm)51;b();=q@ci{jaluOPR9s8N@0tDzc3@F!NopgY8sxtstK&HR!
z4wxV&r`$oRf6a;^c=J3%mVPiR2k;J~PuvXUtr>z1X$t7+$=lPz#`XApuO@xfFK0lO
zAx;{IQ^I^YDsi6eccKhl38ZnhJz!m$s<4~Mw<vpl%c>4c;pTb=dXQ~QGFc8_gEGkL
z2^BL;(jaf9vR?XXQOiNjWzoNqmtIZ*_@f!*nvDY0q?5HTMIur=`61QzvS)}}+|)z<
z5@;pZ!2y+99vxfRbzr^rSr{bcpo4?*;J_^V!NKg2dxl2Li`Oldi_Z?}9(sGqJ-fuM
z^9;T`MoTHQuj2}bY$$~Z)DpVoGI@SEB(V6va%GKTUxI){XNSQ|$&f^scn1Qfl76$p
zvI*P@lxmiU|A|T-dKFjK{}he#oJ)_G84Bpmjspwk7eLk^L-dM+Z&VdEdRQ%GN8Pv-
zrXm~>x>k%w$E><We)K&u&&aHheic9x{v}5l#@<u<`kw5E15Tl;xUpAW8`R5Lp$O}v
zcg0_!co3yN6Qn7jliKSI?0{z|UV5nw#)Do(0#lM{%1~J6I4F(2t0eR=sb)(gF?|hA
zhrr*+=IN`6E_3!?QSGDuJNU18KMekBh(FWS^;bvkLUP(iB`G5{a!w<?3taTkTWZgg
zAwROvJe*=bBh12OpX%R!Z?A{;pM8WsT9~PMuvy$%zqh*H>-9~0?(<KiZ??ydXozYv
zCo1|zq7(q>E18t*LcRxnH^@SRs@c{a&DL}D&jplkjyJ0I6R%~{!7^#DmF#F1Z!luM
z$RM>ze7Q`Di{uh{=@d?ut%Td#Q=lp7PGR4u!*L67cLV6{h_4_dNve{M<oH4-vEgHE
zJeZ_Sr@??o(T9y#5TUz-V#||svIHU*koY=Qr^_?JZpzoUw;4LJVJF6GcIiBeM?l)F
zO^dUW`D6xl7xDUZW-2bQ;sSjj7BQ^`DKv{ks1K<|>KbtoUJ3vc8W?PINyHO=;pmuL
z@jNnPVEt$A_9b;&JF?186X^QcBrzVbM&i<5m=$jA9&aJco#+9zs}X%qooAh+W3+{h
ztRbRLPRT(Q0%|=f`<eUPd%eq0iIy&m15yE~m<u9bsX^~}-U~ysj1p(VM?IKCnmt68
zAR019qC?!$O`)es@zR6SXWq6zZp*VS-rg{@GO5t8q8DWW=kF?4=-vf(s<?#LLd%oH
z3SUU6f`IHQ4laQY3J+i6>Mc4nPZk8_3y+T#mf8LB{i~NRt^nTkeG0L>xu<c01z78(
zQNnYxZMOu8KS`O4tb?neR>ip@X+n{Fq7MZNF<59a`4}HHMSLuDs#w^mCUob6EM5c$
z+Ak>p{puth!KNucDMG(Pl2pC{ID!5w!j0yHqYMz6OjETgscRyGkFDsCc}>2-iWw!Z
zC;?BTG%qDLGhtuEv!s+gm^|{C*^6dzHibr_6%@w9;e8&czIKb7!FUg6qGVNtSzhA%
zDil}!_yuZNtL%TG_|8rjc$tTrM$UWDG9Eq{KRiU1YBfN=@UE5q+wc&*c{Ni48s}gc
zrAV5)K5*%EE5$FZr*$xgz7_!8SA!?;@0rc$uOTC$jA!D?B}4f>m4_K{r3X;DPo?`%
zy8q-e1MWo#C_oIS+{1T&fBSxXehdRQE0-d8;vQE6oXu1m!>k@3rn;#brvI%!fzYHs
zH)gESDs0RmtVLs<@O|BQcl8|T@Fa!)a?|WIQfOlQ6rPhiW`e}H)O9x+O8b9#EVk!%
zt89%<kHzmjibwxH+fm$}Z^i!)W)ZV`QKF&#?rwRXPqsdv(C7W8Nvs^XN{sWH2y1I<
z$_64^`3>%mqXsC~KxC;jr8C)6DSR|SH-#nLm;}Dx$hU2EKyryYd>|-r1y;Jo8zi}?
z28!NJBnt`q^m_9MCA}-oyE&0sQrP#rGQW_<nX5hX{1ZoG6#j;w)`b4Vz$S951Ip#S
zi&1bquN0DR=<J#2`Il%A4^5pYJMY75ps8=@r0iX(`5cZbln{9COyuyo55-XJ+*T{0
zXE)yRmDC84kos-{8`+Qd_t7JyE+qB0qQ=*;p~+T%Jogu}8NcF=G2rz6p=9x7T@Z+s
zQ=raPWArvSTOD5u{eHvmH}I|~BT`h%yx;Kqjo9wY_w6aoNI&$0td>A&UM?{X3He^a
zu6g3E1~WsRP~;#VCbMdtq(;8=eSZCt1)8$ok@uFw5Wq2XReW6HU7T3Ps;lZ#$=Pt2
zHM=_v(*6=Xhb|{(ix2@B^HySFvJJHMP8C|4%URC%-IQ{Bd+e}6B4!?h6#Uk)5C0+C
zqGtQ;iT50v3tLWm+p%?+9F(5O#MSn;<xgf2iIxUF&U`!dgP1JiLig69ksjVVnN+$A
zB#Igcabnoo++Lz}heb=z*b=_v9?++Q8(HK?rjdZgEoI<H`w*EGO*DI{LeCV5SGML4
zvyru-`&ueu-(oMv6#E`9ZAvlAbV-vCH}f$FfGAKt2h8n>2_-b?_h;cePLTmEhUOOU
z;DFZLC6L%IXv{2q&j-myF3v+^d61*^L9>}@0gv|IoR+@urHVXH-MNA`Jtod^fO%gB
z#R!t2(+F&E%3hoUAGSAuXv9raice7{mJxh}xUwk0I|W0}(j^4pfzo?+Ph)h-FP@;B
z%R4=xa6U-%VeyjgGhBl%b*q?YygU)lTJ82TTb%JviC&mY(;b<ul;+zrV3^wNn_<2+
zTh=vgQX55t_c#)Rtqyzh=dHuPXdU9y9$FI!a?nKq;b4!24o$=HUrp@w1WT7H74+<V
zcMqNSTdC{j)W*wTM)`emc^36pF|H@hXUS|Sjb7b(Im=h5*)PtEJg?sITQ1yPdMVIR
z<a@dp!+SKXDj2Ew5p@4liQ#Zq0ZITsgrQA5d!#o-etiS@R{Ie*SFur`?<utyh5~7s
z=ixcpwp&-@FcFxGlZl_#?o<EG{4dQ_+wm5QBQh_7P0oRNIChr`en#VVG|<z0Im&A?
zb9nzsSIgn_cm4uCM_G+@g&@D3)D15X(o@M=1WteFtz4kMZMdr(Iku)*CPYdNzA<5z
zUN54c*@l-D5Lk$1Qd(UhMXo!IwmUSIf6D#_^M}d_lqpJCZ40l?5g{a(l8}>mfkVbw
zBB0B63TqWB&+R)c%|0n&xyU11mwEt!K8%e8h6ua9K@iiSej*8Qx4t0wAkWMd0-AOj
zFV5$7vdZW;vL&E#JTaByN8U#rKxUjiw92e_SWub&E>u<x7&Q0n|K?6~K%qgbdf=rS
zc;XGbXpS_kV>X0d(!@{R1$YON4psTiDyqN|lQX()pl^IIb05sT4<=@&i#k?FSr<cg
z3mYQc^@(QZ8ESY1Js@M&MM-Y#VFG5AoJV`TzUQ#N2#5d5f&1wV9`(XL{_Uf4)gd{k
zWrL(N#+`<-Nif4YAQiO7QXEJc|Bg4fdOwH^<DNMfOwk@`$@^}S(QGWO%iBLS33t!B
zayP+%3KG^~IXEc2@Nn`}Cx311g3dS|pY$=ciY3K#)8oOj8(0q3C8j$)yzD(aYojLR
z>i<r`It04Cp6IYkUm+#}dhp<&z=&;V(ox$8eR_frNM0DlB=`!<Fk~>OK>ekuFVFn>
zU79=EJF%LMW-|0=Z3t%rqM4~dR0Kv)aN5$^ZiU#W^~F#0c_fMG`A=X*jTX7H?Os`|
z=(nKLG>(h{6WRddAOh+WJ{rKwJ3pEdpV}K=H5*M5tZMV9wy@}xAwwVg>Z_7rJS6)j
z&h_j@Ncie!#0~l$-sTFwZSV8I^m-^GdKV~+%z$HuQVvcaqYS4!Db@|)&(fM}Oe+ec
z0=W8Do0t;<>Lv4Jg_@XJM=szy9AkgfS{uB?LmJ;&3)zz1&EmhMXCC%N!3VKJ96Zj(
znM6H~&^y4KU0KjN*!-KhzqREp@5sWDV97?!`N2-Xz6l81p%(XwLLwRu1TOSbgFD|M
zOzgGq54hFyP<slg2$#yx+UEZaxhYGRL33Hyz+CykLC&5t>4w|PgpQ$rGKw*~&agFr
zlvI9EvKiVo!~MPEh=-mydJ(wQt<IIG>w^A<D<lvTWL)(DKUvbqbfB+U{CC7qDO4$L
zZ?WE_89^AeCY+)UltBPOuk5xa@bLIKQy!zc0cGkPR=_L~iH%oOyN_!ojV!H;Ubr#L
z92wCf)Br<nX>2;7>5?;{$eA`Mq6_sxce%B3v)Tx*wFM6oH3?PRfRm1BYCyaa*VY+x
za$mJ$k4g^i>4S*f9?}zZ5TR(5N{Ps``lJ|?&Lnom!!&EU6)>_DwbOT8g*L|SXl$tv
zpZ9RGq#-04PJv9QAV))o4gFQ6+O&WU8k1qTj}3f0%Hv+qtF;3GZR>>*6<`?ba7crt
zzRRR>74ZmQ87Ac<o%H)f2yA>`iCHZ1;yXb*qD>KHWH}~-SHTQJ_AMRJnP?nRDigNy
z*_(GSUcUb6_I4}><NG302DwNZybD#U$r|>9T49(dIJ$F1L4K}vJfE9h1kYZGF14*)
zS5bY8L5ZO{FqE!IfZZ1VJHQ|-FtmRIIh==@_$-csqMxF~B;}{cQrjIb!|5o3Nztz}
ze4S}vo5$thQmo<c%p6p!LVi^Fx{Nm0Q9isL%nySEezM^;Y8B?g8&0`_l$)>?8B%Io
zw7+f_<rH1igWZA#jRu5{h{~0Y|7BbQWwBXWmc)-xx2dt(`tCZ;u(=T%;c~QTw7N|=
z0Coy9wKRp2{upMCcHYtp*aPb{ND((s*bIurIt`XULqMuJ3y;u@CC98{x|}}8;2MMR
zSqR1G`3z@NC-&+6=s4n6{5h-lcOx!8$g{Aw@r@BNx<xryIT(`&%p1^*1_UHFpxa-7
zuAQBs@)D8`@CcX$@?k*GJA6Jnq5`>2=eNSeH_aOH6mxhJ#Yy}fV3Q=icjUq_7QlvM
z^Vwl?NNwov<oX@aCNku>qnbnam%PL!CvWPFY0#6fH3h5*lEDNlY5kJ85WKona)}eM
zUu;KmE|3(Q!B2TMN!S5ZHb`h$?}_5{pR?5%o%8(jjC_Tggc1{GgZvP&1<f#4L}(af
zw&Jm=*w1YOSM2MGq)?eRLbj)BS6s(-R0LONsdgxC5Yb^{Vxg3i1>QcE2F!uHLhmZi
zfHKP@n-$E~7i#vxy5NDYyvpZr&?u6mum&~zR4AwD=+8Q7ATMsTDjfF9E?!Q-wezru
z(FGxTU5Dj`PFAOOV0nKml0i^T$#vb=35lfHF$aJeU7N(|&|sk9HK*P9X*ZO1jO7sZ
z=rYGQ=KThMtf(>0{OWtUzIlU+EHE`4?jnTs!5HK99ZPoZ3M8MzIqV*UJB6F^;DD;B
z{+L8UIk~AIsRII9rpKf7ld$&-1xqJ0Jvd$9#@;-zloMS?=w^;>GsoS{9NT7&x0?wY
z{wZd39uYYVCmH^TxpHO*1H1o^#dvfWRD&3n>d@YslDqrE*GB-MYt;(v!L<gYLf%ya
zR)3-54VxZvq;a%keUbfroy_U|kW<*Qm68S(_5m;vm-KRi>L?yQ2v5e-;e$h{8DWIk
zU|=c?#-`2_1a;lK`+!a5Az~Kv&wj<rZhi(ngx|qh$6U*Hj;wL*hZ<wy^g-Z0c38O{
z`enAiXNKlJdFai^-`4=&-bek<>Ky;0%~5(qw!gYH(&lL2!7^givC{^s4xfeQ>n7X6
zfz6~Zn`|1HZQuz&j+>Te*Q-1-zzR5H3pCOHrT&~LOAtLBN8`a3NV<=k!ZXEgajKKy
z0~~nk1IM&RA<e>ZyFHU@p-dGFWRK!8G&u;|c{v7{bmKzc(q;W3W|6#ZnqqEo+-x-)
zj@s#F(a^)2nN1A1#V~EgJx6Rm9DVaZ4DY#_+%C7?D#z2vC4I(XI36EAFeG$)df{`&
z2%chi{{eQn4{2+~6RA^c-8x!&`t6Q~-;Bl&zP0iI0L37XeVnj?)U}{TcUQCfz*Ox^
zn4j7W$W+%sv|E+UBJjt@{QzTV4<8&q2)P%B!w1a`vsDPcckITPuQBj7ZJ~u4njugs
zF0EY=o#c({o8g0p#~3>0c=(N-?&@TGq^6QKZgp}@&ot!W13<p;btsD&_^PvxhsP%G
zyL*spQXjhHZ|_5fKS#FLW?6OL&46${2_Uz|#5)F7y>|T1rE14P0cN5?C6PlD<r|p^
zIM_LbVto4-{;Mx*z*9#lrwV%x?L^RC<Wx*BV{FsaqtO(9;oXl`*}<>T2kC6S;fI?V
z$b=1Rii|OpHAPUxo5q{5yA60o`a>Zz2hTa3r9j!kGg5a7xjA@7mcV%jg9OypwdeV@
z!dOY{Rpu6T_=9PrmH5M8b$u(ZZqf7cS4ZN)FR7{|RkK?i6%T%wvQX9SIxA&$8{`)$
z2KWf}2Gi5g;JY*aOYxS%M!2MN)l|0#(8E}$Z3?ax>&&X#TjTZyg+Qozpa(M^9v{ky
z(V&g{6kkQ5<KGQwd9AK{k+W;Wl&^acY{c=%nqC6D8*56UZ2Cafcv8HNtqyK#AnZ^e
zih-7=zI=m(ra<8#&H_k?AEhKz2Kp7H$!8e(=Mi%BBzpBlCnPD!LKNG?H?VX~-(W6Y
znex26P`AjOADz~*>jd<tqfPrUk=!RhnlHotwABXL!{QA!IWOX?Y-<*))4f~s-kBfj
zO!+v4`sV^avxy87n|)1eT5TAzOJ4O2jp<8s-suUikiH~;=<@b<ElG(*2Ww2VorvJ@
z(&1!FD67cfnl)BdXsm4f<)y}ygaQ}BZ#V(+ejg#PG>~_JmRPhrIa(SefWH6oA|p?*
zd)SdZs<?;FhSWmQHQ8VKW&ba|zn}<$1#d1|k#YZ&TB8>Dw6<>X{W!s9NVVRGHr|uI
zQU`8mavGwvFR0RZeM+qn4C)=}(mW^V-pq<twF*%Dlx|5q<AXP<Wv8N<=>5@MoEphT
zh*`6uM&vl0+z~yuY=uC_B1K%_7UJlh&iw7*APX>H9Oj>@uM2bQ)-G6Bxht+*O7TeT
z-7^*S>^PpP=JhN_`7J5ZGsy?@cos+jJbf7+9aB^=7Ro_q4BZIuYouFPISEQJXt?OZ
z#uCKE{=xD@HEh$H9*UYy+o~qJ{<_WLSJNi<Y0oLZGF2bChhftsTXN!-lyOxHt2{+M
z3;YP(m5JTmh#9Ue;;-MNYpZGiWC`Js=Xvq6D!fz{afc|mBR<Ukdh63wtI2+6litKV
zRt+9|(n~9HA%WmjRB4ZmCIe*+4fS>|<5RV5{NI}^RBTn`pQ(}mrcgPYSvQR$aD1RW
zpDE+#!IJdU)haKlB&*1s21*rBP3x&C6Z>jD@AWwR{Sa8Simke$Ih@_SFfrX420R{O
z@3EZ+E$-$*R-dHIqQ43Z8k!U``kUah6fwyUb!1Cal`Z0}zAIZbSLvAwbWm<6oXz3v
z<IvoS{YI4<M`g7IS6%vR#pS;?CDAX%0NBd#YZas1MA!3lqm_3}xUcly$6F5G(JQ0O
zfgi<hWb}o+juq;*8iDY}46hJo%&9lNWgWvTmZ8ucolzrm?&Ml`Yf*Q5l)keMc8U}4
zbA|a_YI|tS?sO04)Wn*5u&CKt>Vj{A=KVMoYy7i>Ih)1lWO*_>I7k9Otf%v@)3ehO
zosXk{A0?ji!9c7BgUS4BtOkD!`LjNm!~A1IVfSbC!1bAFExg4g>NH@7SK>-siwg|u
zd`=$q^tpEvBcXF~dz%7gycR3K>x8@U4RAT-?n5@+?*Z|OCQ&K;Vo@u#tzsZm<JqJ-
ziRUnoD!hv2X@!!%E0RnC9$3Z8;EG1Og66MbG#7BjuULGn@2JlY4sOVJ_B`g#tx(+y
zfYsg~LWz%5;*u3G9C)A8bW{cobO3q_4}ku8*yw>7a9z9#+jp7J_KsHPceHxxsqVLk
zP&DhrTON5yUIbg7NJ>A*i&ZCtO@xs(5o?h|6GfG|y>?PIYIN?RPI!9#s;w2R8^LZE
zcd$l`EHY<EiW}Cb*`1!*OYQyrYIu%AH!zpbbQE>GL$MEFJdfpo+;+gpykF8yBMes3
zm08ADW|I(xJaIW48QIq{w2R{Sew@J!JVK@C)BI~`3g)m&%pE$G-88pz4a8(dN{=))
zQq45P$a5m7n<L@{&TG{4lol|k<PJ@yJ$Io2W7eAtWz2AH#-!lD_f)b!o+Kx+qN^&m
zGN;Mc+1W(t-2uNqXirnKSxVfdIWM;EsQjA879_x2!!sl08l5d*5CE#5kYmv>0>TVE
zAn^5MAY+URkvhNp8s34z>;6RHH=oz6;&hTsi+%<(ML@BDCSK;Km5o!I930@ie}=Lz
z)u54{Z?Wx23zkEtF$h3Cy=#g&Mz(KWix-5ysK7!rV8nCnXO{G5U`=&Sv@yUAFpE^A
zvz-Qftk-N7=VDIrAo!|VtO18P4^h-7x{xuuqL>cG5rH_FcQc}|`sg+Ta9(O4v>L=Y
z1GzetE?M>=8H(-4kcdiPjU|8#ee9-N2Q->uU{AkJk$!FRrO=BxbZj2!`+6Fgq&q-7
zWvCx8E`Y`L2}~+{VzPE<2R+fRv6#e(^;ai&g2D^!T~H&ko>+|{I0(i746D&on0cP|
zV2zNOLWWC&Rz-7dYLumZuYfL{0Ulojb2#wEsEmzhW){-L%Pf}l{A7(+FIxrbmVz8W
zOXTsTzjzeZrsXUbCa0C6z4tvyR`2xj*-Q}5{h7_f7cX7=!}D`FNtgL6VBlusHbr<A
zXEvApym-FjT&M8Oqqn|S+m5UE$CJkC)5VaW6Mh*^1LZ3xBMu@!M7Pq`Q<w~Kat%6c
zxwc2uU)TU`hxZK~`hRTkNcJ2;qqHfCULq8{c$PM;Lrek+fTHYyey&Pn9_Q`hmR&BW
zHrK3RqQnh9c$#`Bdnl(HlD_-{Z!o3yEf#7qjY(vF3)l$QjF5)P=H#0!G(sGcs9ltW
zbwsM4+Nm{qptRvh=xe0trAXicOe?z*8}JcjQ<e5F#a+=g3gbS5{rYITLQ|7-v8ui>
ztjK{P<>A?YpF-0^Q=Zcln+WQm=;Hh~HQop!<Iv20OBcZE`u35%@cw9H;4KO%|3GKF
z=cFijeoiNo`0??}=jU%;M9;*FpPs+?>BalsqW1#cpTM8@kAIFHi@*Q;`0e{=Z?Vu@
z@%Hi4^EdGF^w|&5OMwMmi}(L{eg6K(7jK`w!!j?#c`~2>KyE>wD%8#dc9uLoM31F@
zeTN9~86ed~1u4jMeQ&ufet)VK3t+g;6I46-IYXIflw#qkN@h!=+Wr+Z*sv9hez7Ty
zEB5FLdO{vd-!aCF-nJ6T=!HUCj}^&hfz9}Y`q1P<&zATDOOW8<tt@kj+4wJs`q485
zyvZ931XxBtV*>D~vjnxkx6e_Zscp!~s{UU{8m9Vx>Fp`>8E;w{?!8G-pue|<e_CEf
zvBG3B|4Uf6Eda#1amoJd-|Hj=PUL)%pvET->mTq!Y6@n?vx*E>-dKl&(WRsmTBOH_
zmVv^4z4(Rw+VZV_v?AY*)%f9C3L*M;cq_km{4l(cqi}Mc6FtTEr}@>p^$LXmI4!8p
zTT)vuGI9y~7E)4mr799WM8CsZ4lS1zvii|$%+2!;>s5pn5B&K3&EMorq~P5%%Z#2#
zd@n9xajwkMiv_R^=az+hj1U(6AV{H2^8UaB@@+C#Nvbgvto4ffhpxz@OL&KV&Z&Fv
za}+R?(ML@5J5yF@Aq4elTFNI&{Fz5rm@KPTDuelam0WY-e?cM!GQj7LXlo!>D>-k%
z?Mm5<mt-3iJ%{lj@c$ZJLaSAdqGpmXKOsR?w1(963Ql;*Y8bdziagcpwgk#?KG&Wh
z(D)MVL8Bj~NYbmktO#Jr=okI^k0n57^rLeuI~U|8g*}5r?<KhbruBP)&pA$%Ap6AV
z@0H-aVm9j&G>y67ORRY%wENEJ1A4oqsCOEEbWi_HE`sSLdMVw@OL>Xp*fS|4U;^L(
z*|GAo#R5iCMhhhtc()>77f-bxkV2s3nQgnG9r5VNEmFVIE{{|#*nci7AV!%)<$3~}
z=S6<So%$8io-!r%#7x6a3R8cy-u$DAs=nfAA@2yWP|91Gk_*W<IXl0OK5}xEK4xw4
z=ruLPgvvGal_NX?Kc&j&G(w=N;Zct#dIv8*0Y-ma{EV(qNv&OX|0j54C<h`@nJ7cA
z3lmT%`W@(S@^M9<piNsw33Be2<5Bd7pj{MQ^Dk_s3z4argw~_)MTRu7v}Q#O$z1eU
z3EVV4mvT;He<R@?4XbIZ{)BIU*-MyOg`rfgWVEc%!#5(==#4Uu+<Dw5uY@+wY<}lG
z7Ohm4@aFv>QLd`d-y4B~<LJ4-&6Y_zDWXLAudlR*R#ZSTBdN0C`RldjUfy9OE;v3b
zAb6r#1t<Dbc?kzApj~`cSFBSN&EV}h0A2J>=_d_-PoaVQrGIlFoNMn7^dbusIVUjT
zOL!%m1YiCNp5MRy{$=z^>8B@ok)dPuPfD!S97rmF1OtYDNO;>`QedUX8MNCQY3*4R
z{L8S0hPA@Kh&)mNqMWz}vJGM!UNHNX57~Nc{z_KKkQIo5m8(pk5j2g~kA~2kZlzce
z2oWVnSOO!4!S&K1?3@zi*IJMbEOKHURT*9>9iD5)<wR(d)3SndLCa7q=L)<(`&jgp
zP&XeLVr1PM2r#g8IKaH(Fi8_w`@G74@9B@jq5fikTC&-kcqvx>E74mm^&1s3Cs=;q
zJ4;N=1y^BP&4x?$`F577@3&J}&MT|Yx@ve{0(~pz8d#m0ZNiZiJFb+7i>I>+m&rV%
z6$LctwV<bNfMx^crC&NKI!9*^xmc<Qdx;+HUCs!T6RXGQu}fbyv@4yL1w?xUW18mB
zNEX+nB&VUu2y<A{IT9*161horqDbCpG}?*BRSdiUvN>9XVYgE3*0PQP=qU}3K-9l<
zt)?hDU3zWp$rx?QCQ{3UN-|cc8Vc6Gbq?wDjA4-+fH&wK<mZgg%<w@pEy(Ev_OK#(
zPq+!P+uOHj_2RKIVuS`9$RO&qV`m&dYC2((rU&&jcv2ajouUqFa=9pSH<F*dk%*k7
ziAiilkwvF@L))$OHC`QUrQY<cJkL9hJsFdn+FQbEcs(eG*I|TmOy#HFK>AJFQ5<Pu
z-Jw^Fiowd*TWa%yH?QBlc>m&;XXl0kx^p3xVrDuzkGH3tjg0Vib>0kgx{m1%jj1$(
zfFRSJ&Gz?mbOF%>j5RK6yO9N6|Dr>`#Ys91U^#Xz?NTr8tj0UwMHnp*nIi7I6Czx-
z5GCn}1BYK*;NV<6ZbS5xv9*FNGHroTv`b8VdUnUGlivojqf6#Xkc1~uF+bvIWbP=-
z;I!vT^+eB<>YbtC(}p-qG-dr2bwN;Dh*gDd;4u7akkVc|ILKO4RW+wdn-E4hPgPdi
zvokvNWGDaLfe-+Tv1y8$_Eh#O0Z|V_+x*6l+QsDlczarOw7B@u1_R8a6h1i%$nY}5
zdzk$0ewVu6aPngWds@FO7^Wd15Es+aGZ-R@68@&*jYRSRX!;i}=FW>sUIBTc1je5#
zBSyH}V&jjJjQwyE(~)+2i&{5HY(-u+Hr4IzK1b2D5v-=avF=t5<4(fpSMvttFaZtc
zEc6)FhiUM+bEFZx$iwiXGsaZp*%_yfY}a5elosEockiLfRHrw|;E@tkn1Ww6JvY1O
zM?=S#&k>ui>llrrusK}6`!s6D*x+2jj;11$!dPSLV;9d_=OLyFi}u9ex!RZ;sb>YF
zK3K=0g81ynPD=cU#$u+VF(IYso)C<pNP*A(`%`ONTbLR2CYh$P7T11X|Lyk`VY*Qs
zH6V8uzG)Y(P2j{IRD8<9PthHA!Hc)>*QUBm!wdzl8%whD^(4T*-%(+J^2Q&WxS1LV
zkvP1_uW9<)t^K{-8nOpLK$Z`7UzHe_9xxFe?En`O7rlYC+R&M~c1ElN-3>DSjZB$=
zDN*}huga!qx{D~;)Z6Bk?kt&ofPTRsS^r@6;UC&7yLNPd?v?j{P=1Wewy6`kI<7FP
zB>u!3zL6e@70LtW7-vZ808ONWHmdRZm<sj#A~&v=<IHnYfPn@+exF~zvM%Grl3#zc
zy_3#p>n>HZ4J(>yg%7+WBt|@`;{uly@83?*%My$nZH`lnn&8dDQK~yQDTYgwAi~fS
zAU(9t{dhTD9+pu8%-S&dn5Y!50{Fh9ux`Kc_S1yvaLHIRYt_{HdL8%ZvfR40w44wr
zi&C7FzL!>FTIp+Ds?zxJgDvG4sY+YzXwQ7O>-<b@^OI_COuYa60!9<l2;R{lAp3oH
zWsDLhUj(==m1Wxk7a=jDI2Q?Oz+en;XhKT}2q1HGo4rw_!HI@vr`g#cR$8Icz<hbC
z^rGJ0ZW!*gs>HaSu=c0xAHM@G@>bY*ZI2S;@Si^sbKxV&AT03nef{}5AqtH93Oq>}
z6v9smtk<Q~=VRp%!!YqR+dyKaN*Ls)?|LYnz*Y?g7h8o9rMdJWi(KM6K8bm}q^G5e
zfBq>(U$6kc&0%j!6hh5JUM*!2&FhF0<~qTT3y_uVTQP5;+zLBPRK|SWG!or$+iKUl
z25C|vT5*eohbo?|OrzOAI6*Z%ZO+<RblRK~e>3Fe_DQL)-#y>d9he2xrrOvAu!zPc
zLl!-o4UeuYKG{8wZ%dJ(&o?*a=ty5<Cz|TS&V5`mhh3n~$nq9-8Zy&~Sv<SFox}GG
zMnjj4M144^$PyS}44%oOyuF>d(I=%(l`}$6X7fwCgJr*TTOPffRThug=nkGTaM3ZR
zYN$hQP-G8a7l0rjPjT)@D*Ph}g)JH}mliR@9@d+8>r@%n+Qs2E%D%lFYp+Fivb`7<
z!%v5(CX>?6MJ|BHGx-pttgt{4C1Ue}zV-A}Pigit#*7K<A8-3++VQE*1%{8Onzh-}
zA$K2Ym8fK<8z<Em&go;oh}g_|?Zp$qE-w$!d$sE_Ek?7)`R*R)&}T&Tw#z>n!a{pz
zrEJ~foKJ*CmtBYRMu$;mMZ>OZV4-5HdJ`waG^McVVg2FoHfIm4tt`ot7(KzJLm!Q%
zr?K=P8fbU)2hSG-v3mpxmiDz#S&yY%am0=1X>tQ3Wo(~rZ@mZ_TBU6BN5nxGN$q*4
zpXwTz6x}nUe1IW0(HE#4gVSZBa#K^@sVGE)@q~mvN>h%qG%*8|7(<K3(UJ8f<IRAw
zkN)VDeRRWCh9VRi>oh#fR!z}K7Ju+Gl!hEz(`-(P-eNH<lA1)rjI2{<3QYj%I*iN+
zdFL)#vnx%bRnO|#Gj$FqHbvMrc-H33!N!al5QkHtBC0iM(5po}uIrfmeKHef1fNJs
zWJKWR!XbhP$m{Y)`x=Bc4z{s}&>sOD+HZZScE&11s;U@x0NG?akXtaz7_w}!#A1I%
zH6x?efvK5GwP$_q(pax!pBBO<x+A`bf2Wjd3KhlAPP*vGT}7JnkF)uERNzAIO0%S*
zz*G25NdKPC;LK#Dp?ON|6S_sUAxya^_8q?e5yRomU}|mqS?HSc=RWUh8x@3ktAuo%
zn&t?-yULTbDJF<G=oIR6z{!^c;<N+3_W<bzy(cg*QX%JS*q4Egr;1CbLG9pxeIWU1
zLmiwH%}de7brfPWq<LG-#GMIvIq0x0EQN`4nu#XM007$J1OUbxY*2o5d^BsZLdnr_
z9g0P~704Q;t7WhdA5dA`g*|DNb2MAD5T9_5z(--n@cDHU(V2jaiB$~DW@;7;2;w;~
za!AWqbag4_0(b~WOugr&ekN+fW^^Hns*{35Umf-g^vFPUHXs}^@|<<4vp#w2LaWVK
z1$z6SQ6|3WZ3j<Ag$f?6l2ia#uqXo#q{myuboLS(xCBb>65G85B900+H;*ao-A!nM
z_mU?QsoqOEftm8<<UY2mNnpzDWBVpfA3U;h6_f%r4<B_GAAz*;1;sErX)bQ#o&*^f
zeN6C3mf|zyIBpb_$fVHR-m=^zvwyEuVe}dJECgDURC8>i4a+pHw*pP+v##z6EoJgh
z^wtWJ<3d`E>!vQj7Edf2T#_Y`5JxLV<B4`~x<({7FFKk$D#J*@B&hN+DPGCBH^NcP
z^ZA4hb24D6d9r5Z9!!SJ=AHBAWJUVY(dr#<$Ls;J9-XYUKjhAF8<ac7P+$69ri^=E
z(Zc_$?1?pyU=;O|^?7?&`MQ+z{8QEwl#FYkQ}I!!qK*kCu7T1b38gGp!-kV}&}5y1
z?KPU#>06EK^z~}HbpRw=nBsoxba?hsYq2QN+*TWC0Qt}(izS2L%6NbOojf?$=zwVG
zUeO_wRcRoNrkm}i+*4=NGX$|qUxoCl>~ySFp<Scm=#UEWWR<9_bT^#)UIer2vLi+m
zbpa>>^e*;l&2G?NUzD==sObvrA7FpHEzl!tSLm2RPiS(EifkoP>=Km*_9=tMX0s-c
zq4+ekW}Z2JEij>k#b&lt=^Up5eO8w1iwe#+@>uCxfnNO2ji%LUe>{zW{`W`29XKz!
z!^w(>)|)c+ZMw_Av8g&v-n@maCa8jcgSKfm7_|7jbixenZ*-&Xh%^XbDQOrUyuG?>
zdP|Bqs;x@0Ce5G6v&vF7wsPjj@0=(dlkcRFtS3_k0}QpxySEZK&*mc9!yA<>6uIZ8
zD4nQWr`d?Im8v;y(%fZp4PenYl!~{0iCw=eY{edcNo5vzXGp_>dfF2o0c6g}e1K|_
zSFFap?k7996q68$JLqY~(OFF^>;}`PSfEMgpt#+e&d7;ghmdLTY~k-(TwFdp<+Xhb
zMUBLz>5gu^E>Ei=62WJ9*5L!*?v_Z!)v=D=Y*+)bpHNKD!$HXLoTCazKj-dq%IZi^
z-+4ZtW|T%|ycOP)imFSQ!J*i#wK3?Fbkxb3oDa=+cOIGz#{2W<rl(V{^mLM0Yp^RW
zw6O%Hrr@wI)CCajL2s#p-;%euW|odEOJ+Bx^YSd-Xr~s@#;B=l;w{rAGaJo2M9Odx
zHaxB&O}K&%s9e{zutj701V`RQnxh|o<wD@b-ZK_(LABw)B$2t<sT7ve_P$|cY~*{e
zQ_y0RZhJ7K4xO-#=&GR=0O~qN7=Q3M^h02qPnkJvf6KUZU~hG3<`G8Pr)-<3bS#1n
z5lbc}IP2SHCX_tXYcV-BpEpB3>$>>P*!d|=)Kuyn?3TI;BQmS@QUG!tADNN4+YMfz
zZmbmBckz+6Zrim32^4IjIWkJJo#P8en%1E-3<jO(@1my3HR%qDI-EG1@)f!{S6cLD
zUeHM`K=y{s3ZiTDV@*#NrC^K|y(;TdL?|E13Awd3yL%TE?{BKz-z-^&4Oh`vK~4hG
zjZd~4pKLci>29pbknP{l6(n>=hlahAZP;;Ae~y{(;*Yl&01J&K-nWLq0Ap_L%b_Zt
z@F61SzGH_srN=#BP+r)lsEAIA;Jtk#zd&QH84xDf6GNSnu>-1zZ|6>DW%RBjS?kmC
zGqx@m<mOG9RH)k>ElYe?Gn+6g#nb%CzP>Bbt^%F;+oU(8b!q$rSPY8kvm(2Ro_G!G
zdXeX_Z!;J2Ks_2hAaAmy65l@O{$8Q*?+NKtmP7K9a&Q2Nk`gT$hqoS-In9Pw>KcP|
zg@8J)O;pcF)*@p?Z~Nh@kDdX-LuJ_4$K}Rz{k?rnf#QTo8NX2h9-%pjDl2jzeC9lA
zb1o)AE?}Msy9Gu)ppO!xE%W;VkBUWhd;8j)$8a3;(&lHn3@h!&3&1)<eg@cHs3E&3
z)P-2q?(w5ffe9RD`KN%Q7XyaCvtWdQf2jO?%|WcRyW%RZlGLvbRdfkc11%WIrkYF{
zbv1HljkiGT^tj-=As!lx9ivz4_VFIb6uMHSG#+efo)Rw>wKq|<FRUg}wV$gI+If~&
zXuG#R_HdZjy;Ik@Gc+3?cr%9g5smp6WD|cvReQR;DYB9P4AE_8D-_<0_T%iX*~=Xe
zp_Q%yB7XusI0707owd$zbEknBJWmClk@#Av*#~dwO;ZN!#-crAVNF$hMAeud)tVn+
z<`$<@81SL~nW>}^CKj+*|7y}&I}DW<ldId?TX~{FvENwP1}x}h1ga^~@opP~7y%)1
zGMcu_W@tz*kJQ)4qCf}s#iQ}`cu+*>8P(rd&ZX^GG&IKDQrb4nrVTPud<^SPiK;w4
zuL<FJlr=&A^ek+}i@|iq?N$0h0uHhW4L<%ADHg4n!TReoMMeRA>d1ff>^iw`@76!7
zFuXR95^yGBSUSdf@3*j?fiR-`fjxEWj^cJ{nP1Lu*Hn_czL`5KzF^8-#1pG`;S)V;
z>7-MkKN$V3i3<SXg=_dJxk6<Zk6<b-l?DKa-jw;{N$cZ9Q_)Eqp`*rnoFHw7&i9Az
z>mexv+gF%d!01gXt<o_Mbl4kmia?BHLF<Q0$ODwx<e;q(p@no?R?ohDw02EqC3+Lz
zRm~o54R>o7qhZ4ED>ic=653>_ZTY_v8(k8EDt%>_qKr0m?K_GiRka2wX0_Z6E?`Tx
z$F>PNgl!A1N8Q{N*?l)X-dQk~0LIdJ9+A!k0A2wi#d$U%62KfO*5ybx<c(_e9rVt_
z7$|`vum46!>J1)=hiWOafC4*gycq<ll+#$9d3(%F;<g3M=tSy_m_+YmO!vBXB7O7L
zQ~+9a$Xz2=4kM6TqmfDR2<B-pC|r!k{IsB*(EF-Kc0#zLA6LQ1Q_sU(Jv=HCZc6K|
zMPue|@TK#X>T8J@uq3CcaZHinqtpJ!xECqG&WxZMKwxH93i@hp9Oh!F&3<&tLv!NQ
zP-SjU+G&6vh-VyNp@e!BD&hdYz#X53VN_v>rPcfK$O-BK`Ce-+4l9RwTdL($&103+
zE{OMpCws~&SzmD26%VPRiz7I`w8+Gx{$G|IQVhL3<gl<rn|U^>0zk4MOcb7DQ%MFO
zeqwTsiIawpta6%bhco3gL#H#&>sHz63FzGFh&PnOWoRM;u<sl4qT}2Ho#c~#KMVCn
zMDIYX{Ltln@~u@0@<Np2KB4GvdECSETKh*Gq7Ho{o(9HDVL^WbU(Suxm}6}iwI~~M
zgW@d2{S5YqSmJasbRvyT(Wu-W;kf5B=nq*2mK38Sn1xKmj98lg93~{jpbHc%CXoHu
zdHtB*-cpme7@p&$I~JRjmE_z`*6poZS1;U-<bs|vrEO6m@x(!8;?0;%0o)9Qp;46V
zIlu8VwA@jd(NQ@hcDR}?VLi0L00Tqm+4^~;%Bj{+KGUw1<f9QVzxZ%6vJrx~i0|gd
zbByB8(S{|FN_a+y<Q;>YLUABE#HaR|aH$E{k_&Ce=uEnRH$me}RM`d)NcdqEciTVz
z^D8(B)Vv;kwUPQ)>yP50kIY;B&l;oCq1<8K^t-lhkz{k<WKNN8wAcX7f=&W(p<bVw
ztm9zkph74W|AC5o6d7iX0b}N3jb!&Kh6P+hF9?pYTOnp>1wE5DHhGf(GC!(voup*8
zkDqF#@CWe=z8jZvOFD{^TXspdn!$OH0`;`yhviZ&DnF9!Ken27Cbrsc1kn<&Chi%2
zqBgZnCfyBHLv5eBP4RiMLOrW2EcA96Dn_?nQGHq?7%O?BROdVt6PmN<Z`Q3$s0&A%
zYildFHutqZ(S;^b{*qm5lG|bqm{ExzOB?QIT18uAUKMH)$G=KE1c39~o3n8<F7Cu6
zF?N5(mMQN6I@sf$m%WwO%{nwWhgo&aw-WqLD`-Uryp!=@0RjVi(@4i1&WG)#wzILk
z8Fryvl<zYr)sSpF`Jxe=$??NDre=}cdb(()H_V2cS*RCCjzG4P$uCGFS!SrZ!|l9-
zHvR4xv-+pxEJa_~bJkZn?qsV|H`xs3s(4aUO4ky~PeW#8J91sEJF0Az*J5*&hlaKP
z(&C5R!c1DMqF%*RWglqomJ~|-TpxNdo{V}|qY)65McKA?*<z}jvl1gPq1mtnJ+!t=
z*Ow}LMzcK+dRRmjy|Cp^ruV*3a=usP<TeIq{=L6o$-nGz(|ey(wanKQ=RBu2{<62C
zruTRyo#Pqy-ny4$^Swe|qO`l{tcL}zk`HnZ-LdSc3jNpsm%nG6L}7q9tY@h5P*bmL
z^<L>MM!Sgbf)QV~<~#JaT2=e=+*~6jN4Iy9Va1)5TM&ve_RO?Q&@dVGwCCRvPG(fW
zy?zXc_{Gy0I4tul=(s=?MC5Jc@Wv~0(<pL-MbNKm;T0(wMGDqx)bTAJ^WhC|x&m4{
zkPazYH^|{fFFA*d1jC@Ri!D1udV8K1FXj~BcX+ciJICx|XLf?wYG?Kmvp??427=L_
z?}lKM;TpH2*~aCmTjR6Z;>V6!EmK8TjlSn~pz5m4=Q`d%AtUe_4G*YFLnhVU@1_~j
zjN}QKnxRJ~rKZ!&N;EZ-rq8&rMwd-+?B9GAuMiqPI4G*Xz0wBokqYk<Y!z~!EamJ&
zyWIw?OKsRn>^U71sDy5%qG;;L(R#x#>RqR!H)R~XeYB3=kgL-+&qU8m;e{OT=Q_D;
zCMOL+0s3C^;tpCTAZ*KTja5=$h>+Yh1nLQzrUJhcCqROV0(s{R@N3aboaPu(Yj$QY
zEDOHVxA8v}`;x>bfE{#(PxC(6IVH3R!jfh%t2NMYdJw97c1<C-OkC;&W2Wkr>^|{$
zc4b{R&WA5q5)A{p4o(uC>13MI9p%FMVy)8o>*8kuU)zT}c1IU-)$s#>W!>tbm9t3;
z%oEu-EX~fs`*F<?qG16)p#ytlYX3okB%N(C&Ah^%gPHX@F9P5MGU71JmyoUfh0hwa
zpx_0>7I$>T7YBD8JDMJ_TdkBF`;}uTTPiO!=GK~Mq9C0?$Bspj%A`U386Wt@6`cmp
zhFjLKMH@CK3lq(A2d!Fjd`@pm`<yB8spL_m<k+B=5j8Q>**}oNV06s87!TdR$&n}N
ziv9Z-nF_L*+Od#W#MPq_iaGT%oK}M|3%$oqw#A(fZJ`(~!*vS?5s<*D81py_5W|Oj
znL?!rh2U6G=StuZqkOB7^9$!nx!gAeI;&G3Wut%%c#DEmEx4Hh&bhr^0CffrCyP_<
z`<25gN^&yphPv!mDE^zH7-o$ISmauJO`#bU@eIY^W{~T;I5;pcI}huQZtaNfYH)JS
zu8lI54HQONfbt}OqL;}9OkjYfml+Hr7qjiKudte8LBp8?-d)3-&rjAcq<OfA=NR<$
zbdLBoIg6HLphqB;o-WSBA{4-ON4ZXuoMv(HtZpq-Ybe)dC^yZa{5Rv$UfZ~|GgRkW
zayV6!GCpg@scnPFm-KN%L>;;^BL^Vj#=I6WoO$g?yXp3b^d>Se1pP13gFQQ|kC!l_
zHEIBzi4^51-iThIbOfyyyfI-~foXPBY0b_cOSwfd`OK)@nrDWr)A;qSO5{ufY9y;w
zdh@QLm|rb<o}=5d?W2VZ?b#ug>F(Pyz&OQa^bGH0&`yZOn32KUrK!;rKh$Im$O4xQ
zN?qwvlBqOuhC+V+^fYYQbQ-r@Y%Uw?jh;<^N`8tm7xbENnC^wC0f`BPUEzMlII6eU
z_iRfzpy^noD6W*grKc#R_!mWEWG~{InZsWUrE*EGCSN7jT~{{Ve4@ZzFQk?-5@tC#
zsE9_>zTBMP+g>uaX=Q-Z!0Da<yDEoEHJ{52t@|C3YFA46D@8)lkbP;{<wvYTF=KZ5
zXrj<DI`gMzKRj+^)`IHJsL;ILw#uVyN!d!k^Hc4NlET}VmrT19`ni+^22z^?GW5gQ
zl)xYE>H&wznW~-ruj`=T4NVx-Mr8wPViA|8>oa?$yf`fyFu$J!3j@?>)%-}_-p)^C
z%?`y!ll2M4L%l@pDyAg5p?V1i)<UGA*v~=?b+M*vtSsba^1*nr<~z4FYC!Iz@&4uu
zn$s5w)+IQqjHW3U;;nZV^=QFS8LLUMnIvRa0<z1T=((hj#ATSX_)<@ZNPvyCSERXj
zA;ZdUuYpopq<GWl>~zdo_c-Goeulg?93H84Yl1MdM6X4i);AtD9jR%r*H`vf1(uXQ
zm7OZRl2Nb6I|ASeBWiV(EnV5VHaz8Btg5$QsB6~KlF=Sfw&*Rgu{GF3J=v++NDdg3
zjbhrP-Ig+j&LpJPjxRXs!UA<fV-=S`Ea(7hQkzsMV^UReXthijaS*$=u3#^uL4!8M
zu8H<lg`oh|wySZvTcnWIFUe<sQ}c#?WawO9_obxg3uEoc`asmHl3!4<TZ>Svu*4G9
z4FEzD1-Aq>Sx|2=XVtY4K<UfTZY<2)I9;Gi&%#YR3TugC(aO7sTY^};h10j?35L7y
zXA=uOrb}tV1ijAQ=WO7yWLsqCt<yegn{dHuLC91Cosskl4g~HTjV#e4BBOisfipD9
zTj?}6CghQ{jiFtKrG9hgJ!%=|(2^@w8{fAroswyf+wVmdm?!?lw&pE5X%86GRI3XU
z&-Apx@ERomrOAA+P^$#3fTAvX`uSUQ%oYork-`{YRp{SIXAfJRO*;^zrlBSXC`NEj
z({82cJ3JgyRJ9FH9xBAlZA1tuw5wAse}^S7kIu!J_GU(2-rUp+4nu)$VYtL#ivuOD
z2t#FSE^P}<LKb{4F3rFURR%nW?IB<YlF4W+>kYekf6y6Pp=;b29zu_>(>>W8!$k3&
z9cf1(6i)z&V>3dQvNbOA$=H>5c3VcXaUTvAQV9S?8r?(P0kmzZTNiGZ>K5}1)m)I*
zrJVrpJNWvN_FIjUSZ!AwK#*>ty**?$I*M6a+<*~Npn7J%H|X^-erSe{Xf$5zxQRMA
z_z<v~S7L7Ge=ITFtMf^;ExuXCX=}c^q&Rqw18msz6tB^1a{m2K(Ocqg4;>SsCm#9{
zb7=4L(jH(t*KJKg<I*366k<Vk`!t)VE@-aqFfa@2aJBa#p6R#`XU<m1Q=_xbaUpOP
zTWa(_q7^-<jxOvXHWh=uh=ubO?Vna9Z1B}a*8kM2*I1my>Dcb0E0J>B<hSdiX63Tj
zLb~m1=i14TIGoR~N(OTW1zS?Ld`s#^UOGb)C73z*_sHQD=v&Px!`Y>v^m7}A6BeXn
z5mIy_Nr$3;S*ul1E3<%29plEmu2tM^-u8Cfr{ldRIlJrF{-{Rq6DxyybAIkd^;DB~
zbfMDf>lQP5H^#AQ*^M51w05(36&h{rR`=1$j^({pgTteXn~h`~qi@srB>LQMG>MvJ
zYhNVpWCTB<zR<L-UT0{Ej_re{JeEX9s-mk~&Y*Drr;=_Db~R@X?q-`9eZo>x+|kM$
zGi6iP)zV$qvB~aUt46;!#yQP?sr$CIKC}q6v6~_+>2=9mlzAOh!W;o&e;n4Oj;rwH
zl}2>v;Mepn_UiAxMlon(V#!Fac|E<2j$!`)+y{6Nts9IMeMpyrs{2DuLFkm`><kUe
z8~05izQVb}jMLU#lx4DPpf<;aTenFH%?AKpay=v#FODdZ<fBsCF{rGRMP-KpTX|3d
zzKODv(g8FX)tMsD<^Xtsc1;>cygzCk06te`@IR3VtW%j-MR`<irx0;^82wm!9_|L?
zN%APpC&^$CqHkpk4LFcztXyB<EjpB)B%}nIgc+7-+@X2I&!i#F1w0>=?sCbSD7OC8
zldx`Hwq-~|3wv|i%C-BsZqMDFvOj0KVs274Zkcrtjms{&*ig;OW;P0Bp2aIx6X2Lr
zsnLEDu9!2dd~?}T8VJlbO&Z#9&`11ZhA$2&v<^4msR;;F>OO-W<QZ<pH<;~(KqxNB
z1%lP#b=?V0doB3tiLKM$=gtO|@IREV>@B}(uDKFDaTl*Q7>luM?Hwx&ex|)qql%mU
zjkFkLS5MI1%Bp&|XJv3aQSBDCrUp=m{r1mU+1cTCrIBcV>dYGH0A@g$zkGG4-X15t
zMGsO&HEnV|xtUn&uZgi6@$3vHRi3AnTAAQFPVS4m-3`U`FpQ}77k}MD{hTvr&2Nj=
z%cNuhoaKRjV%WZhb67v#kTifB+unG7*R(FCGjYKZ7RPSxbOMU%r3VMBWU7q}ru24R
z<&nnX>=o3DNU^1HYUpS*l0$N;+ZB~5m2>Dstay$!$W%CF<#}GpBh?S&bQF!*Nx=D4
za{W?gG-5OO7KU(Mlq3uas?a|~NU#4rcI+iyWCFz?2;XA*zw$yecJt}oe)c^7dX?{4
zPxbpDI?3Y3@N$B%i1HoUN%YhXe5Bc*c!f=Of$&od#%I9kaX63SQ66?Wey~9e1ba?Z
zP+d!~X`C~u(txafG3apR2OZ8hbZekHhR$_idis58B|k)W#u%m(C2~h_w9c$4N@r~C
zMhr%OZ9VO6oGloPJUMn!Rqm^HXflSGljM_-{5-JNF_?#a7r)mzO)qIZ9er@58g^CA
zXLBaT&aU_$c(>_?bCJI3PX(W^oLQ8l5H8f`N5<XDo~*k*P*b3qoSomJ*L!MTC`<67
z`6Sh#_@hCv9Hik<0IM9bBL?c!&m~RyT#$2wQIrlcyf)#mGX-@}Q3q{7l4HT2{@9sD
z+RUZUP8N88(XtN!KC4^BFv*2tDZ64w01WvKDq-_ryl}I)p?lI7;dF6~-h60pI7mdX
zIe=UdBQ*viI`TGaaiqwRaz2@zj3(h6AaNFZGnV(~hbq)}(Vp$_C`4KDWC^o^<|i{B
zqyhDd9Ss?#`B$TjiMp8R!;Z~R*nu5BPtoF|uOj>zDDiKrB5vmbb>tD5+e!Rew*iob
zQz^3MzR2}VP4bg$lJ^1Dl^K9HKY4i8W%Khxhff>AwvK{!9R(71OsuOmPbLQqM2?=z
zY|d{*JeGrpM%7J6I>DUhd4br{hLXVm-D!-sB-)W1uE%nai)642BU1L)kue(8$01}N
z9Y;{Kqix&|N5=xl<m^OF(`W#FILQaa?d|eW(nraVz3y{S2^um<lIs&%pYlxb0pVK=
z{a!lT(8_pvF%6F_$?^`JxMDm%77&n6SL4K0uS9@X<S2>>r~GTS+BiI94+HEvvR`Ts
zEM71JyKt<swyxYw9?q?HoVZWmxbG6k+=G<S@UXUUissCeAGvanM%hsnqIVfMtC<X{
zGVA{5tCrbvxGC2wSy<`v9D^y%`Gsu-K4TovvQp3{3|dOZ&E%^_4Q*26Cy{S#KY@K@
z`zh?f#ZS>LZW@~XS3nD@%y~mMju+VtqjkT?rLVN_&qfnh#`|X@RfEC%)=+fv_uC`V
zIWOA-)9G)wzCe~ejXA*!+P677cWZW0W$i9EXQ4ngrjbM#!YO}V7K&niQh*)OF)?lz
z@T1+SNSrlO3G!n%^_n!ZDPEM-C&-^TD;0-~njJStsWluw{+=^JSpy&Nsy%c{Y|YPk
zxxU1X$oW=rm(#98Gu9dqJANX9-KNc&BSY?s$jg$3Jl|!BLiQilD#0mUdcoLtsaz7I
zuuej2&_36XP!hIgs+pf$hh4MKDCFmaU9-8PG_>t2c^X_@w^Uvb6>d!TBaAM~Jq7lt
z(J9mk^&2<3p-x{O&8T+i!=P3=`bOKOP=lJXsN=f3ehK;I9ra0Pr(it+)XphL!s%=O
zBuKn^3P2e7sP?s~jEV#`rKpwCZy@t)=Z?v2Xb_>6&B1};9sH(ht2*Ws4m#{n9j(k7
zjY-@3S0bx&=35qeV?b?Dq|wpr(&M{?Bwz$W1Px~$Er;sR2!)Q!LBAvFQAs8-fNS_g
z!9?f@R-z#H2xgW`QII5ur_zQ3+4vFI+vpfC*zq`M;dRn{pwnUtPh*xoI<~PsWYWip
z0%@6%5Duw5eb+8+ZVrFt)pBm+v68u4X}VMg>f@RljjG`dKjFQJt#o>3zf0&mXljsK
z&&AEFSBL)Xm5z5JXoSa+%l)Qd{+n*VH(!bybv?ELfO_+$u8yB8NFa9>wtO71?Bznj
zvH!UGT^2b&%OypK2Zjab-)<J;F(d&FuuQI2sl+3VrFG42w8(?1O&Q1*wXx+P<TKQV
z3jI_0vj^>;JFR&r?_^~|23y0wvMVuJRI=zS?j7l!AZW?5zG8RVYUu4CCeI)Z{cbCx
z(bWwJ2HLpqPi?L>Gm+@;7^Yx5i@Lv^tZAU9im?)2Anb&~QRvUy_h^=)ceB4tT*S*H
zr7G74zn;AfNKRY}P4O_4KsWqU;eD<VL^1ta=^Rs0v_1D0if(IA?)H-;ovqVEZ%jis
znliIHbE*G38^{gEL;)a^b(O!P7_~ioM79IAQ@$={#HDx>_M5gJ*cw4Mm{TVn>(-Ij
zDXgkh*Hmq_%G2;%SxuRRd!)9Xx8BWeZ<yP#7)P2LFN26Q2|DT82L`orG_Tn4FJWY|
zC<<8YaX)y)q{3}#xM~x^vXcf@O%hxVOuZxp{PRB7#Tr9sWYvusXro;((_-CDw9<{Q
z8-;8GE#$N5o=V5+HE^)UCN?-kR~{$Z;|iM?+cBa|9@MK5Zu4#1yk8d+*U1Ww>Mpd}
zInUj*1!rfP{+Q<<O3Nhh(any{*i0KG3LRWR^D8JYY%ZdYE$vBdzSe7(>4kMC`rXu9
zsCT=uR*|0Rf{!eBb-|VCX=A}AjRhpm7UJE}gJx6II=*RS@`Uh9$uW#NA-c1$oz+Y9
z&kB15OBw9cx<+r@i@1<IcU>mvFg+QQbn!fph{e;3WcERvW^Chub`5+6g*+EuII7)c
zTcEP*Q0Shf?$Wl&U58MUDmG-AG=fdQmH+nfy%BU8xo6{6CnVK*fK}5x67LxY&@)MX
zB)XVy&9o9hshJ@>-1nvP30*#lp&@k=k0HGSaW!4aZA)*gW$)5ixxBQ8V1Q!qC89Cl
zZ;gv$NLT`X!4&PjdL94ntA<j!!Ay*r)M_|EaWCJjO&d8!Dq0@}3MIm`{=-K(MKq(7
zz*ZPOh{ohdpou>RC~_Sl9U2a#L3INZtHK&oMvI;MWxY$l+@M{xi=93@ob~62b2RDs
z&E3^;*!2>geh-57p!*NQqg>!UHuTCbnH&{5dEh6{Z8GY#`K+d=OOjewmCaR3>pKad
z&Q0_gkZ%z+o7$sNy7v%d+1iVSvrHXXWn}!C10%69KIU!wE@pWEE#R^cE2PlcNSo3c
zm!lq_o3(BNG#Tl;`=H-TV%8f=OB$6^>(;z=T$^+FuXrQX&+&BLbu{Y+OiAaJUDJR5
zrZ@cFLKP*BJ55UM3LanvI6e(Mmgn2rXhnQ{XyYaVgnZSpU2R0r8AeqK&217wSgN&r
zEp|r_az&9B(@``#)Un<A%fs9RVz8rjCU))NYe<*<BCH!8-o3V$w(XhUHqYEv(`F60
z1~qKYMTS-*DnU28GqgO_1(r!RPvtA-YY{lMNis`xY7Eq1g^5IKB^8bWvu^D*%@s9T
z*QjrcjB{V))K>dI*0oY}wA^}oye%_Y-Ypv<jWLp)j@Ff9+;ANmFKI~+iWpr|Z37L!
z5?v><n_lhZ#fWRIN>uCE*tCUmjmxo7IB<-`(qk+JoyE5{3t)QfT5?3Uv&A%>2D7+4
zbcc*Olx{6%@M=$+Ih2!zwC)j$(j!CExmo$B2V4rL&CKFOJ(U45gtLGbzc&5oSlD_;
z#~rk`#ni!UkN_4qbbxW>0m&f2sBj%rxT`-OEbpkl#QMC=*g32jKlHG)fO&L0@rP_l
zG&5Cp<S<6p1QcoY4S5FD&$~E;vY*#=d%tZOaBSG=#^&;Da$9pKwhM=1YpZnEe{Y>^
zdqvx|+o7l1i_lfP-Nsgo>#dpTtPtv>wDaIJIriLa?lQgCaUXIxcHY>sxv{kf)>jG8
z;p_Ap?`UZIxsJ)#6874|QD@gX<QCQzl8Ap#bg_eWHymCEk0B%}idfb`o+$G2TawpG
z#!n=aF?y5|C?lZ;10e?kt&V#a+fcWUPZp2FZ7B|u(08#szQ9#GWwzJ~yRAn++v#tp
z0xH7}VNul~g65tnVKs<5KHlUIYI_^i(NIIGJgYFM^42}3ITPS4IK}wXr)P#>Frn@K
z&6c7X{ffC*h)b~&SK?Y+h;wlxK8jbcbf2^$2q5Um>_kpx{dh@Q3YRf@58?&H;E=wi
zJdWgf?#vlxD4|1&EWV0Y!;&I5i0e2xy*i^mx3?Q|r?RQV<tzfGSzJIlr>Y>%;~PY8
z!6hou!(ZwFJs9U3i}=!j*!*NcJ~%$cm*@zh3_emV{2QFdPh^mbYgUfF9$wC1tRF*h
z(~mE->!Z#hmrx|Wm=vr8bB>{q>FEYYeupW}#j6lz%)Z}<Phq{^w98w=j~97{9N^4^
zQ!fX+ZjB|&M>@<L>&lhnc31n9<Xf3jb()=>O_bR^Bh(p2*W{@CWjMMIabcqqLkHi*
zseSzviZ`ea9%#xP{iP#2s_FNXUuzdqmWbLnaPBi*`zDactZCx*P4FSK^zEDAUC8l_
z%Bau{mQh;QTbA8b^Y+zH3_8=hoc$^J2@6mL6rh4+eY{0yv^F|#V)K!c(d}*ZNLmtP
ziW1(aO|bCi(SIuoGD80=?8h;+g0H6V6Y*I*9#r9^X{g|&sQv2DryEVz{vLG5NT-iw
z;Cu7~>LB9Y=wA3!VLli%Vm?rIc+~aDj_yy#0|{pje1Jm6P}9wWWP6o#Dpt_i!eQNf
z_gqg@bT=wn7vv`+avqEkW6%MTd^DOO2kG0EbuBA}Mer<(Wy^|~eeinT>Ye?p`a-i|
z{ElY?%;vC|xYO!aIluIG8|^+(J8fw<<eo3$3kv!qCG;rrfYU|p6isQdl-$8Q>Z|YM
zq6{n-iN{&lN=JT@448MYswl@Xw=J4~LF|!Wpty#xsGs9qBPF+_C%JWEzSkvgFAmkC
z<glD3M=C0g0FxY+C&{6j7Vw@Nm9;M?=$;A9sT<;nZiJ9Mn(psc(cPK`8j>E3>@oa<
zf6uuEkEHLSd>hc_1&7$Mtixm71S{;Y$LeLA8HMv%m&ilR<1G%VA1tTiXoNPiB%Xki
z5DxoGK>2s;>8#+uG_kBNhemD#=QD5_*A2yKy*iIEdOZ-QVNC~=B@)CZ@j<*3Z^Tpa
zM7*Y`1DZfh!i!jw&zeMr!_j*ktl=!W7+i^`Sd7T|{*`!beQQjND?*RV_1Yxz|Ec!P
z@tT^@pMfSn#TU@lJA1d)U%S?fexlcwW&~dO9PC<rpx(WqrioX9CZ8B5Ag(>D+~_sP
ztj!zk90Y1%8~hb$@)h;&gS(XTyLZj{lt|+AW*leNw$0Pjw<A3|?hhY?wl0N5vD?76
zp-w{7XO|oc#rCr02DIb&16<>#*g8Eiv-_#Pw*De}H+T1&hH2*D==guQ)30dhKE$tJ
z8NF4|-`9%Pk5P-fivULr^!JXA(@}&-UwnS_IAj&1b0EsjPv(>Je*Avh->BJY=g0zO
zjm=2PTCEgxor?r7%f%83nVRM#{Rcv?T+&VcT)(_#9I=K{*m<sVso$PZy_J6Zp3uuv
z)56tOGPgCkiGR>{;pb?8ZylTCjrzx!_Wli;GtQ>3;t%ng_(}XR`V_y5pT@7_k7A*N
z997rj=oK7R<LHy9u8*S+@O&J-6OjByK<ZNgiBANiz1E>Fa}Ew?5g~RdO1&5EUo;nX
zq|sW~aYmP-Ih<%Ey2ck>)vXh`p*=b8(4M?Nd;cy?qTM*(qIrwoOReCOpf|{(6Q`#h
zP8V9vw-mD?FU!aDGP6RzxnOB)w65a>5dB{<4l-SN!0Iphb6EBDbTEfWxrztfC;zpv
z6WW2l#pAelrRH;>GkjEDhE2@9GRO-_f?v^zAN!EP4wFTA*oC}pD~QAXOcMrUmu<6R
zsQOz+)kQe@5VQ6>B_d)UUf0_g`~Osf-8dV^+kvq!J=9n3Kz*e~eTd;EpW-h?eErM%
zbF=z6gk6TO;%#(2_|u(!^~Ig`yWBnbZsKd*Yd}j*{JESyX34gddZL&H(lqGVNUiU?
z=~zPN7x74(18c0=ql=SsV7D*A%}t!1UYv=K@eS`K>i{{qi^95qZ@%l6nO}tcgqzZM
z{LS6clMAGB-uU8>CozgMrXQ_khvhS$0QJUUHSiF~HORiJiu{A*gJIc7;~?Pd%XATc
zAXBkv@G5>Mw3Hm?65R|h;tO~>2VS{L=g8P}7;_Iaw7J+((pZG(8XE3Gpe`(~nf5RW
zCO*!9n}9>;YC3pw__Y7@=s5BKbv7NmZ*da<rxFWBTRB{LtKF?8yIYLf$=DzAQ2Y8Y
zMga(p_zIO<%VqwFK<oQt_F-P2(r)moAH#PJEk|_~hG7)I=?Q}l#)Bu};ZwSB*sko(
z8nX1c(8-$BLO$-j?of#^TEZ(!T;PqxNb&1|B<d}XM*~T_dQyH;!0iN&p><%-4Z4rA
zL9C9B*@NMPa`g70oLblVplj(#i}FESHf!k>#tc81;VCk3gxS#rGWr2G5!Q2U6O)rR
zYNjcKvTtG{n_$^}dz-<ugPRxv@w&d&<On+-1o8xS6A&N>_L>}c?XIH>eKtl{x;Z6E
zw_l($rQ0cRFk4I%E$A5~9Jn>3$ATi_rrg*moU3QT^edXzwIx5U>z%k+%SbHwP-*g^
zeGvfLwEKJyn^y!?YiDY~wpl#G6I(<oSp{zjMRYxlPrVGYfh~T}c_bLusQ{VvE^J<H
zjZ*4SZakt#8B(XT)Q?dSuw)kcw#cl5z!pw#h#!nIWHVrANm)*V)MNUfJ&PpNw1``1
zic*8ZPM}EpaRQ)=aY^;WP!jHMzu7_FYSv8R&UOc`UFw1%6N#@3J%c)b2y|v=|NT!5
z8Y7@q^Z)+5_-dzN<T5sHOBLc8CBzM~8*Kmr=TW0|Z9+iOj0D;h|HOKI*D$vQ2)DQX
zlx|oZ-Wg{Q`)CX-4EFIf$(gH+c3jPIdsfX>tKR$e8k(=xEi%y7CWs(fkK&1N$;QI|
z)lcQ{*o7^@h)dS|Aw}4<)YvpLSX8T@OgI`snS3N=Z3?(U&UjF*m)_n2c}E`9w9{pv
zQmVW#0^XN~XZ5A|otJFLr+i+KZQJD4lXxvuHs@G5fs7wXmdhiW3rXiiJ&H$GTqW<K
z&QusWZrk8xo@kWt-8lv;;H$2!i>`+GgSAU(8bvhj1>15&7jV(K(C0As==*}f;ozWT
zvJMfgSuo{>5$kdS<3Heu#mlHG2?}2Ok`!byXyfprAs8?%IgUB@i)cbs4atb*4G=Q)
zZFH{kJ_qo*2DrE}Z9s~I6v-*v7b@;S4mmKeYko(NNy}$on8^t{Qhl90F~&g$2T8Dj
zZ7{qZiyO2v8rOo~kNN!=UAhVBEU;~jN>{0Dok~}#u-3-V7EY$ZJE-zxE}qPyYROf$
zMHp45<OS#g-r$rTG~*!xg;QPox^r4utXOHTG)i;mzWi=+ZysBnwP|L=y&Oupi9M6J
zysN2^zjLe~UQce~0@8?iw=F`7;-t!{%L7^&<Y-{;rL#g-0-O?L%;I@mkn)c!KqM{K
zn|sL`kLrqPyo8Dv7=?F>Ct{2BBv8~8w_7s3TVw;$rGfNR%uFlrwiNTw)~8|?!f8pJ
zI)z1h&C{!i^O~21h+b5OG65fl=&0z0WS3=aue%LlRXadp+2IO@^oEc|p8SMOY70Ho
z+8sKQS)fs44WIpkSa#k|mAiInA4d)9uA*2-ng_IC%dxJzXCXmX2g+*be!v&w=m6GL
zG0n+7oY4f-GRLSF)zpe{Gzz?7Sf^>Q?8k+5;0-O4y9B_iknXp2sI#218W1j27r<{~
z^z&eFzeY12<!>mX)7p*ET3Fs<QODa}a&!a4>(Ei17@DBalmNgR;ejQ^&aftt@HG~w
zpm+bJaifp=8?iYzui|2miR(BWu(Pu*wLVB(#EU8@MS}iZay%0|g*u9aIwg5unq0>7
zP9aVi_OAw#MN5})lPsL+neNZ%%I4@8i$=ee+EwUejh$qDH<B)WQAZX#J2JTL>y9k8
zIzpuE%n7xisMnE8o{s{3F0Eoq8>;ExS@f(nF4cLx7iPULJJ)+v^Sv<OL5X1jej?|L
z1Wd56Mlk34d{G+VbOMdXZ2r9j<U<zQ4W`pD?@itlQ14mId(>$tcm$Wx+G`V*!lr5}
z$R(KL$))Js?-DG!3+r>(&#=`$Yd3)*UKthsK~BZvRO|3#2L2BJ5GY<LDT7ZL%;G1=
z9ED9ihQ=Um&yYmShAWuZ952!-ZF;)-18@>PMyQVSXD37tzXnR-51_889gZpAo-!^X
zJ3eJ+tgg?Z(;bC4yWVw4-6mD7A_2$s)@2*vy=|~Nyu0Z4IErGALfCi2{gyjOGK@R{
zBw2o{&WyIPn%~}52M0O%W7(%jwxtP0;Uc#0l5@JN=69-#*Smu%0hr^XqDF(@r|MF5
zgo@ko*-_|WeB<oqZewEKdN@3)j4MBxZCXKdt&djrQ=?6s(Z#Z{nnaJO09w-6ODf_O
zG}>cl%M=0~HAYc@4DEOmrOP?UR^=P>{CYvgSb_b%D<-@uxG)^j)CVQqFgx`#?IAfq
z0;EZ>tsl@+^B#sbJvcD#%u9O5*ft@_hP2OP{V^G~C>I(z`Jn<HOIv}^RP}qqUZ3>g
z_Oq~B7Wt<=bU6A9Isc%?Q$Noohgw|%rMCy9@m{ZQT^H?T7<jd$km%VNEW<8$ao0h|
z#EVlkT~l~;jE%6Vg?^F944a{z!7)Z0CwtYf8SJ_7;Gn4k=$~pbbe;~CRSQIYKve0g
z0vLQq?p#;sX%k~&ROH)YmQ)y;{a?AtxJ&~3QJwj<(2F0}LN6J%B=)qxegzmbH5Elj
z3WKuU>u`bz<*ZOE0B0Bk)Z_OHsY}~TRD%+^^%`KHn(COBfZaCPcXa=hBVKE}?<Yt=
zUykdn3pPDyQ4B4m2Q3qYi!Hs_+X{$=g9A!lW3U_mMxD1dLB3m^*4YKtwT?Q==I%BY
zuhz>*Np5gu7W}IeCRRd89*lK(XzdQv6#EK_nY5nK$!D8cQ-t9}^mMW*#k8L(RAqt{
z!)!izcAvkcsVfweJZ*Q?Z>QP2GmN$wpfg!RH%J7{o>_<<he|+xsH2oyFe(R4J#ins
zyH(NdW7vrM`2}^&5U8TDKK_DwdUmOr4yF7BwRrMu6cq0CRv-$3?yaGTo_pz06T8C4
zdG*ckEYxsK9_U>a_4o`J^;~G+yJ~6R&^m`^&F@~$#`1S8Xv;<O7d7Bkm22-_*pA9}
zX}Rvs)$OQi)|X4@gW?pb$}@+srH`<6OaPojz4va+iH#nlkrr}ixD4Ul*k9>xqDNLW
z*WSYAwVVYN1+IwJfNuZHx3*e91dn97PHG%_NMKIpfjZST?Y(|^CQi=~m!sk=I>@A4
zvchngb=S8mR#zwM5nx5-NhdzCwjj=}sgZQFN}ftm?Nvjc_zA7YNgsCg9M&3!8$;v+
zo9#hun51%xmiSBWFa4_jm!1jRp4e#ba=!PMzUtHIY3bPdV^Zv88R6kFoA4=-cb*dG
z=t|AFRb%%EP7FXgGBouspp?;W@akzH5YZ%0-I)t5*u&-AG-_*M<Q13?AYD@os_vpg
z*%D2G3y>HZ^5*_0Lc9aO1GqFX9GcnIURQU3-L+en!rHq6NBeFL&8yHW@!sUlp{z4I
z7_l{_NJpHvr?rfM;@i}o04zfRSmoG)OaqM#t~)0Wzv2{4PBX)Opi^v;y(igBrs#j!
z`u)`axR0*#J|?Nsu1ZXR74j`*;}D+b>70EGdbte`eR?o;Yl@vSd2Vn!zUZVQUe<1?
zX|c>aZ|^E7rk%@^*;d^NaK0yPWW;s28RXBEnJ^5ZX7Ahd*|Vv`9j>;4pw`}KeX2M!
zYojT>hJ)lub>ch~0S?iwX)}u3tItD<6y)M-SEf0#7HGDW`E6O8k)f1nFy>I8+FGV0
zMuxvuB6>uY_YA!=8R?MzN~A=Z!vXSQj(7L9bFs~_d~R>0=fYdqTGG{0b<^E3N5X3e
z^*zWg5VED4)B>quAo_70<Qc~9K~@Gnog#P6$`Sn0sIVeiWP8nmx?Ji}q@bA^c!eZ%
zdJK6@;qmB%Iz6kq0jU+L!|VZ4Ms37p5Y~xtWl#>9N$mqym0w9ZYRw{|3s_V;uy5!}
zVbVYzY}~dBwXpRb=c49A=sAo}n(@=n(e0Sc1qgdiH+58T&{kWe@D|am;no70&buf~
zGBiut2)$GaFK#E21ct{vI7oCvL7Rk}W-B670!wm=!L~NMZxLZ(;5UL{^8$DjyAT29
z3f(x;thvLH-_v{y*@0Q_{6XMyFgeuOA@39vC;^E3FUo)EUH9BamzhR!+IkhTZ_EP;
zZYzuMT%{TI6lpQ4Nln;N-nJ-P+kz!tfRN2SJ#gGkCm?KG+N&vaC~`tzUqJx!ZhHE5
zo?RNUoyhp$0Q+(}IvZB`%ls4i-YD_Dlde0Rw{|2P)TB**{PRhYA=zPF8SNo8ghTiX
z23Gsa9(I1X_a>Fl=-#TxKLWG5_ZLk4%U)jW{lyFf-Uy(E|MV7j?gtWu?QG?KXWksM
z1+w(E!@30%1;(Jpe&K@aONdQflS><ZML+;tpOPDD9bzo$l4wnuLM*L8+C^L!v7rR_
z^PsRxjhT5Whmxo71)srt)QvskF^xpxd(bGSM|%`<jh*5T&tVp?Z`$pBN&v+F`QkFm
z(NJ|y%MFXY6%cqp2_~hU-?F1w6ZUL|uFVV4l>6|dH*6f*)`^RS<lV}(GAu46g@<ci
zGu|F@c;jBR286MF(<7oq$KW0qgaIIx-*5E0IkajL{)8yl(t5fDFEM%<>5M8_kyZ-^
zI)P1n4%_6MR58wbb&%ri$qdC;78)iAtX_Q4EnH)eOKX^{*=c$Pf0k!w$gPN~Jrmnv
zGQ9W3p5h)PSj*!Erb*G4jzmdVP@uG$k(AdnANGo{8FR!&pl-~7HVrrQt(gKk8({U^
zRB$9#)QMx|aKahzjJk0sEJK2*u@7NIVWu)PiN>CG&DKSLd1lfiY&(2Kqun#j<B6vI
zO!tV`o(2~E)GfK>CAUDpYmhihu;`AEg5<4r4h^$AkyeV82C_i_ns3D#skpW;Jpl$f
zB;<86D<4<hX@d?ewF}wU_a!TgQO}AwvRBDUT=C;OS-C(6*Nt^tWrj60CoVY##(S+5
z8SQ9?$=MLaV(8UZ>CaqbE=YqV8ej2^ytSU83ofi#hP7r8&$G67d+R|G@KuN5U2{HS
zoGN+>1+55-+ulo^lLVBR3^NCfyN{xghjO63Rhm=)Bv&m9U)`Uf$)>UhAv?-p7Wz-*
zGObbR>kn!JyS}3h%%V1^OuG#`dXirm6uhG;olC9d?tZDOjP92P)Sc77(uK8gN7;&Q
zN2Qnqox%Cc^Bm|Us{N!*d!@L7a|-LPl*y|#{CgohZ9fU1DeUR#=|3&9M2g{`7<3i5
zp!$wTpdM0(hA4vTknWO+k{EJ)($3bsVx=zk&#ffDRd@GkJFaX;j|O*j!w3jXA6lRL
zXDeTSzD<lbP@9@hnmsUAX!U^WwK`;2RZd0mB5rz`ha~lhdqh<9c^wVSL|fgCRp;Pi
z!m&713sC`T!9ZF;X?MEP_=>}7Y(;eSy@nW;PaBqJE#GUc&Z&?bQuC!(D@v^)&<viH
zP5KQ_z=AL!Y2o>K7g<nneC)81Rp~7B)83t9kMf-*)^cZ7%2{>jXtl>hk=zUyMScY|
zfSF(9_EPKfMZ5dxIFspcSSB2nG}l*vDMqWMoA|~Ww5Pw~>2EqhIIVDik_YIsU^;1|
z>);^an6A4bA!{L6jEtaTK{q-~F0y@MV-QW0h;n`LrjQGD4a9s=$2a=^yNQbgLKbWH
z#iUczq>FfDs(k0TP9=b_v215q$G^#@Mq1wD&s2~jsFnBwBwGR$5vp<M*vKe4d<QFZ
zd;2j%F5vbS=;+Mx128Hpm?QTm;U>4Co%hF+H2z8k7%21|9OP3Kgps~;Z*kD54FrwW
zEzLO@V&ttj^_)rM^;T7M%S`OI)$g+NoZT_AE(RMZs6j_D6t9l<QHE&yU@4fJtQn=J
zGCQ+upo7X@M>{c?;#=TQ$9N(g3KKjjhv|x4Z~w*Gg$>wH4arQ^WO7a1;WE&%zj2od
zQrienb=--KxHlg&bUc#>C|z~x2CqM57)DSQ)eS;4NuaF&=p8wY3hjViWiZ#s$_vA|
z3vI$+Yzul;XRdeVXuwYmZpIqRH28mbBkA9(%!>c8r<#~|tMQ@98QD!iGH63oBH+Yi
z7CA*p+5k6mgsB6%=XR~VYZ2LO#DHAkR`_o~wM|FMENg!&p|@y(GslQcYM5tFa`bCO
zezMORRQH=d@iE&Ptj;9>Nx9Y9Q~wfjK?+zscJ%}^hBym_@6#%t=Q9e0Ids>a-`~8z
z10o`kvURgnQ4Btyi%8I%0C&%hb<9g>N&Y7pijiLvK-uw7e_ApIV$I6nNf!E$Y#JnM
z*pO8wY6mTkxAa7O9;<=SvWALn8TYjtr&xM|K-8KtPMnZ^3)G_#`tN1u^rvNCoyD+S
zjNZZfY%4(MTABc%bSaX}fTwzrnKY|k5f`>xp)cy<%ofuw)Z*U#;e+A0XOdCEOaZc9
zXU)nmS$uJtF*8Ij;wAcE)8#yM4O`Mz72v`x6{&U<duD?WiJhbG8DNrWA%Qk|ooQ5+
zZ)*WPp#{W?yCj9pKEEMtk5UfzXfS)9RJGiD@pSJmy?zelUBCC2y{k2HadL0Yms4`S
z$Cq$G_{%*8h-NiT)3xCRD;IK&p@Ms%r#;^~6SPWRlMv|ei9XTSn9OhC3<U1=_Vx`r
zcd=?BoT_6bKcP7bN*B|iSt^<Rd#ws-K9z}Nn3OAk;J3K9Q9GzOI4Jb^#1bzFQfpz!
zZ)`<p;;$(iv!S|<3lqM9wovMaLYp-lrE0%-=Z5b}Oh5qF7p<1)60CzgR3~-8!LFp1
z4A>Nk&Rn*FxLr$EVzw>{Ks8V0M>S)gR{X_Apg40_G~;aPV7vBP==to~M`)~BEJe`I
zu%9-Z3?RxC3>9j>w3*G|UZkY?sy!SnC$a7LdO>-nqjjO|Qu(EpYCe}4P+V%}B_~zY
z4D)sF!tp*;B?XjibgC5w%)}(g0ix9(GM-nAG+nH2l)eK@6_o!}k~{K|AIn5v2jTFZ
zWIAZ|{7gG21n`;$7l8L^hFEL5H`8ZUPrS=Q(av4zGpHxtWd3!qN>UEb+ZcEwt~hM8
zs3|w@Jx>%&!CsZ`@y^|2oqOEke}Ns%n`ci?${w-_gd#3sRpDr_<P~ew?0I0jMd@$6
zOmcswvI_n^_ELeOXXR35O!PA0?+t6QXBa@3_9@WB`81ERsXEFcc4N0o%5tZW#h0;E
zcga`o60CH}Rm{ob8p^V|v09A}v`89HFCr8zhXQ76O|@caNv%a6q!-i0Ist2KdlQfa
zNITle7A1F)RNm)nEs!yNes5g!G43=-Q5VL$M^_f0m=Y)!0vFJorehGYi*=Tf3ur7c
zwI~FNe9sXtP?ueMYOD;D$U5>%>Ok~<%MHnbXY=EAJfjfPTR^F|j*pP@*5N{W>DTIN
zeMRo*O49$(L95%duC<o@x@~++{?FYJGVSp|dQp$Jb8q6EFL{SMZsU6VOAZ$UDhVpm
z7{!zp1nBRJ4gSC$B*Gf#V8({*&sXF+!bK<Iv8WSRRh?82k&cFtGAq}GR!sXb`6ypJ
z#VxmP>c4vzYk|Hb-=LHV_>fS?9eJ&T;b;}NI}9(hVxNkAHNUcDX#+i+uV=t@>CX}4
zMJEWLdX)0BbBWV4vLDXKZjMxvTdK`h$tq}gJ4KZ;_!?c{V(8_VFL_b+#H^LUZx(eb
zF}Jp4+0<j`qI_ySRA{zu&f+Y9nq&^>1<hTPf(k<4<Yivq6->&h=q42gvj%#|yK2lF
z_XAx*<pO|Y=xvTLUBqdS=}XNaean;eXZ9lb-~bp*_bQSQ#sx`G$GdCxO2mGSC{J_L
zDbcoV6o?y%UZiM|2ZLOer^j&-E-^6r8M)@!EQw}hEf`ksEW$9@s5v^+z<DXin$%hs
zY7<k$L!nToOFEO6HT+`S&kPlKX?{u%=x%Q{=Ryi0l&#pEZR&^pVgxMg#SqY#B{B`)
z=Qac*=_B%)Y{;K2vAQAij1_<LK2SST_MA(Tp&OD^7H%tM-UnJ40q<{&PhD03k`%wZ
z->*We-G<zNXD@>sp68uf4WtQG&?4TT5c}W_xep(*phqS^J=Da5ulGVi%*YV^46M>Z
z0vedP1}xEF#|=oH{UVz&<JCM90aoWgT87#1lpZ~dCj3SKN*fLqilSgQu9Z>R!Gs!o
zBMfbWJ7+|NTX@G;40g+Sde*sgCc2PwFMj8=2=;9++u?_te&?w&?rscU)$H!XFyE!Q
zF81gZOrfx(^mK5L8S|yw>MC~5f!Osm$l)CdNW<Mm!?&9^(|LnL!Ab-zP>y~nDiBwR
zm5s5~>-DwI7fAZZ#$Cp(obH9OfWsbo`q!cVqN!narqC*g=1?EZIWlR4`(Wha>AM3V
zwQ1huppq`y!$G2-lGF`#BEVVAc$AXc@vHF1jAnciimngAay5#TVci@Jn@KR%L5(o2
zE9g&5-E<7tMoOY0a>{<gJD?j-?V-sIuz<tRn__A&z`k;1Ed6esNjJVGcF-jfHP<W)
z)-nU+8%b%|o~Azy%Y@6exI%uRxWf9r=-?*zl_xp0+N<jZfnqdYmvZ)jNbv6g)PeYQ
zSzP`{pQ*KZRyowuyA`CvyPJz(L<N-GRX&&KTEQyxk{(=J9ohxc?8I@C-5)Y5r$1<<
z?IU0B^sXZfjwI<Rqi!7BSVvGT;HnTu?!#svk+qXpOH{{bjKM;cLXn#FaN3uekbey@
zut@VyXlfSL=0flaT_KS1J^HDq2)g9=Stm}>yR*M&I>;_y2S9a1VUbCz1N-J0>!FlZ
zk)ewVYb{?LHe^HY$o&J3+jBL)wqE}>T7VNJ!ijG1o{PC@V{d_}KT@odA}Ej{h?3Sx
zr~wk?tK==B3=(D?M1!cWTaa#$g(kHPwZtc0lOob4FI_x=*oH^*fx2@S?cxCRO>Kix
zZwauFOtR&wAx%vgPTtUs(80m}{%+|Ok`gZ6=)SMBZBE-yv2)hi?S>#~NVZ_@S#%_w
z=dYhLg&gHmCv4*2w@x;{0itS|&&j(R(!Hga<!gY0tmZpNlJb`TI!z-b?EnB+4>%@v
zeW^vZdLl1&c!Ux8nwoi&F5y^HjeiHR3j~{68UGUFbabXKFo@~WXOZl~cIaFBb!;p~
zMUS|jGFCvZdWdOkkq`F#4TdsD@t*0n@dfT~%uC1QRmS*~8n?-TnfmH<e5Pl=U!5MG
z=@o$Id&o;zAkf%D`%SqUsdHJt3OlfQ>V%Y5D6}Os5ba0}mdT{sFe-l%k5J{3E1aO=
zKua>c4xH4PH#u-?9=l3g!*F?|HD~!HXG!73Og4y(=oQi_v0fEIOE@%(`n0|l5+Eid
zF~M%cs;AISzlV)^0ru}&08{#Nr|ag=9DbG`+dAibBFdYxiD!0ZL>ry0OXBuq*m3*-
zc6*01)haL~?F$b0P=`^~ecs#Hu^lsjj-6T`*p|j^pW|hW+a<B#CMrSA$<~BUzHC`c
zpS0zQH+i~ic*W-1HrZQ(J4WgnMZ%R2z0GI(qpzj6_9=Ahq9XknPw43cX!~uc=)nPr
zQDIZ@d*nQsz{Yu(1sh+i5o#wWIx3W-McYzUbJA?dR^#sSlO4iY7c0CWjy2zHsQNjy
z;-MmVH>m6L$PYic8}&6UZx}@|$4zEWPH;dmZvH@=hWn1**zrgM6^0(Sj@cGXgkEEx
zX<;{H;Yiq~l>L@89F}aE5j7<*WI)Dhaynjd8FNHk-Kp{<gO1sIdB`~}&n6Xsm*t_+
zM1?s+tEi&tyS=DvnND}~e4otu8ng8Uhngw;CF|=V4&2dI4?Q|(RulOMmV7WU$k6L1
z>)CuB<(Xw`RBdyj<j9PXT4j(Lb0{sG2DtAhWvJmVL~uMsNR<Yqc8SJTQ4Z5-+)!%Q
zWkUT)bZ0(+E?C|G@dU>LIbn0!E^n>>IY&6O87JS&zkJM0$n(5-mCt3%BN)Kv-_W<>
zob8{rl9EwJamqB=G&6!$tc*5zTgS;}H%W<tc-0cLT3u70ute&_NC$lt8G8{)YG<sL
zNcfLrmKd&r>u{pS#L_#H^!%*NTKMJ0e_?lr676NIP|Tc*rcZD-p0ARklym&3#tqT_
zxE9t_Q!B(;>BZ(tV>3}Fydy;iVxj~J#B^!pZF=ILAWgd+F6)lXsW)W3CBXaK^3e(5
ztdS>oQx*o0F7g~sArFq!kk?|mZ=Rxksh{wk*YA}A`u>LLm>u*P*NgXMUFDaTJXXJ|
zk#RLxI@FKb?@l)`-E2dTc}EpZ+cbOZD{!f44}Gooq8`)*N+#PyjpcDeGHUcTttNdL
zSRKvD2XZZ#aa=xmW@kccnL7OgEe`0OS(M9|vYFWE<0(=`-l4PD9?Yjx$pWb~R*3+b
zOEs6?Qgu(t{y400Dn4IO8>VmHj<n8ZgG&%VY2&*2Yra{rItI4#?=HL+>T`XEPV}3Q
zjt1d$R1MK8W||-RGu%b@cxv0N%^k;&c4=T_Oni@S9JZQE8hsT*J@u~~8a5)8xn^id
zN#677wN$<eN%o%xm6?34e&y&-RLx?eF+I1Q=FJ^Po*5SGUUV|}@cxUd<kGnMX{eL1
zHe8kC<o*2iB^Rmv5p1lS=jT!uP3g}rH4ZHO)~1;{QA?9)RJU7giD0ZK%K(F!KREJ8
zH5Zs;i8qo|--xgDEdfywr|K*&Yi*UzH)oX&&h{($#^&eWjN`VZ01;+l(z?WFDH=%z
z6kBQVY;BKrvs1igeMxkQ-tby}%i~?U)c=9`(8VzYAXn=Bx2vMnbVXNMB8wY$Bu1;(
z*We+BiACnl88-RB4vY?nNW!*m+ekFDfP`|I8yUULC0EU%@jP~(8h!P+vQcS!_ZpsV
zgaN*l-<?{Z@4d&mEng=noF)Ljc@Wmk?QNvO9;i0&kGvhfV}7MCG;XRNu6M)9fAcfD
zRT}HIe7x(_l@yGEKGieMCPg9&LhQzEnsF4f<5))fdjI5WUih8%&U^i`-_uoGcY0@d
zZI#3rh|;PIBqs%&2MO9fRHum(!5Y=4*0=NKhrQ3zS$7KGZG12{=4ql?6JA*%fx_WF
zruzx+da=P-^6dpmvymEWmEAgiU1`#cU|Dcepk=r)S%-cc;%=&ud^B$>T>q5s={ENk
z=qq(Efi|#J-|=GmvwAKfWoRVZ5j4lzUyxf4d+Dy#Zq=67ttVvJzLKH1+;#J8YsPeK
z-XMD3hP3M<Wb-KVSw`2H9;0X3c3Yio<(gLdzLyfGPf>StwzWYT=LH$jID~nJSCkeN
z*dz;)ds8+?Yr&91_>8Uo6WEu)qtRz3dGpF^Ye(mzB+eA+M&a(qIB{2{#8yHYvUyJW
z644E1MQHzq4#C?pPXHF{_dn7q4^4iY+)%`i0@*rrwS=vi=ou_k!z@8q8?s8*=LIwb
zhdnyrI<Jk-moz>q#)~}kI`53lzf=<8eNO}#%Bp5`Ycy{w6tY_B_UG+Qn!XC98w;ah
z=gdE)A5Eu?Y0v|_Aj`a`$Qq>`9?hNGn%-5uE+yV8pcIEDc3NU+XZD?A<RxxblhGZz
zwGTSC`y3dnJR_hIr<Gv&iqX0R#)9*oq-yqIE8mbs%NS5hf~=ahtY5N$VH4jZV)tz?
z`Z@}?@KGw3b?1b64&Ll^#AZ4);BfG2K(WR<OcRnC*kIBUD(n;|WxU@qiUw~Dnb7>k
zEYUi6k7@$idPwl~U8h<_=-GHZ%ZNH{odxfqJ9~V`XI$qgRNu$G$$7N*1aGII(+RrN
zGn)N)e8|0Io~!`Av6^;hgT^%4^69O$d~z;it@B*1H}p31-5Q6riICOhW5Ft>qb6-l
zT8`lc%{+mZ_fB0LWK9C4RvMRVC88-*Gi9z8i&hd{SiEkh!k*nqBi}$TvUr2iEg8Md
zJVUfUTK0O16ae6u-|{lEUzvmHtBa)YLq6<sBQ8TN`}5qRNs^)~cXgJL%f^yo%8<4%
zYJvJ3J#K<DeM7>yU)a_TJ<~LL6Q@;BwzM<{Xa#Pyu>8{OmzeRgmhdyd2#1-8WN+-a
ziKxGK{LRB}Sb1-N&);fAz7IiyTfNXaFA8nJZLsrvkc79l1(AoyAh<gO)xJZ>*_&iD
z>VP^e&j2H8LAx~{GS?7(yzX5MQE14L8_^R{xQ+LG8_6OtOm_s8AX8rk;fjJLZ~z#S
zGNzQoO-06d-KqoOyD{|^%ea`>nM%S(_8HaLgEYpNk_mdlQ{-OjEXJTJ=d(3%PFL{;
z*6<x&`KJONpJnrCsdWG{0UIF71#}=vFaSbSVAKRXkjS-XJC42fOmBbb7`ELN=yB~M
zKPGWz<D!&gV2}Y8&fx^p*G3eqMyzS^mOyaMV%0Av%aa)_)G}Ph@^p#8mw~UEpJuvK
z#qDjT`;}n!5|)m|&9GK$XfB5&yOf@{xbGXzdJhh)0y%~;<hg1m!mPRa|L{i5I<Hd4
zLwNT=tyXewm0dTrcABm~hK<@V3c4_WI~78$;JXV_pc0_MI5Nq;jbFB}<D}u$lop2Z
z`X;o#g$?_XQXsOWsW+<|&Ta_d2pwn49&~W-84vu^K+<fK@(~7{G9e0KlWAk`FtR01
zs^JZmFjnCu2NwnCnF3QuK@HL1Kzsj-FpZxv6>~$O2cc*Xr5%LSu_^T+a)j7$V#09X
zBpw_P5i^v;J#Y|+x5-?sOO#RsYIt5@RM1gKp-!`S8DSc?=OxdgAV2*n3ucJyL>i(=
z03eeklJ1zE`RQAW>cHhE4_wG$Euv3*bu$HI1q@dFBf1$vej7g@0BQ=SNrby3LF+OK
zj}k^)Ot5D~_XV4{X@`@nfZ#I`B&(^4yh{HfpNT44q;SkVz9K~+SyQ}(VIwu}p`sys
z&?0Y~)8V~)(Fh7Nk?<9eOxG2Bq}=;gY3K!Dy?XO}eYwnl;+nM0r@J(kf%<OiANP`C
z))Q8dHQMl_q+pxGkmv-$GIZhObYY`Sw!XRmkcs$WtjDiCv10EAN|w=SZ>Eab`bulO
z_XN(><LnaSxo{v&h8uW8hy3o1CfF3b?vY2g9?K)i6#{|+MU%m@t7L{Y_-A!3W-ycM
zD(XELecf|mW=5jXjp*J(*yQx7s5c&AQQbzQ@80l&F6tG%+Rd!>5etNi=XVmQO4|WM
zX5!qrp={?J9PDe&j`AO>S_VBAK&=;UWfDF7y;q{%Hh*szU5<tEvI?l?5;rx6hlTe`
zlwu`1zE;Z>5CVm;C0EF95;uUpLu_!KQb&%>1Q7ZDj)&9j!hcQBd}GMpx4~R(z(W3t
zQ_E;yUQBHfmg-30n5+ONW#Z14-i*Q)ZN}`l^>IUiHvyyBn2%99Y(<fz(78|a;LPQq
z{g8J>RKW44;|F3ZE(~5Xs$e5e2NuH;e}##)dH6#85jI?#&EvRpUdT3^!~OLarLkI#
zbwGkJxxF=2IW^SMr~;)?c$;1e%~4v<nL4^o=gp=Ot_V}gT=>=S-(<_{LAhRO`G-;Z
z#a*G*?x8;FS{tdhhYK1;*&bGCrt52p?X=&Ftk$>j*wlu;+O3`zu=_cy_0KM%5X_q5
z61s^;bqD<jhmm3%5*GF%<qkW)uk`(O9w_qEtmP9Q<P9K(9{K6$)y*a+1qyfiuZZhF
zUXNoGRVcIQ%Sm>UP<SHyVRWTf1V(Sygh+P$)>qB@8G{c8-;G!i>4}dOcUEiQ&am;R
zXLv3VXUTexuZ4^UuPu9};?YE%ctM*wFD(0g6<YN%D%N4>qoqJL_EXay$(Rc|7yE6e
z8$0Sb>_HJ|n$t+pIy>fRQaQe&!h00y_zEeqzV!s;B5zl%6G#rKdZ%FvIjQkt;i)>7
z9bid4CXmf7EWb*wzjs(92>V_JBO?Hpe$(`pPbkYQ!5{)VJY^%U>R3>NJUlwa%OQ`=
zT(;na&S1R38iyt(GEFRe<sa0F4nD=mWYe6PxjVMkwO6?fabiP`Z!u0CJz$(VjTNGm
ze)=uCYDXnBE~UmWdt(e4kJlySd+X$NXr1v^=rN=(f$gI~&T?c0foZY<?%{3j^3qVO
zT^_tGTyWdJ!V^%jC>frPBM(mGA+iGHA&{Dv-Ngr{yvmy8SMeek2@1}61&_~wxm$<g
zI=&2^aOwp<_Bnl0#=&ZEjmwtB!PVdbpYnJRtooFgz~faPQ!Ui;#Fl1aGdr=lome>M
zi3cq3y9P`UI2Q2nz<>)TT#9oCS#~_v;z9$`O+0I%DMI(+JQN?};AUX!-W(QCK0LB8
z(bP3!(0ZR!D6>i9lvo|!G>?cYNWhzYC~KSqq_Z`W<huU$>2ovqc-R5TdQ<rTy>+13
z5wshHCQ~tLsJ&R(Y9`P)QX55J*tf<u`MleMCZe!CZ=*6pnxX3}OWO|{d;r>ZY~j#`
zveNA>O0bcwvnLa}OK0qas<K-BY7{jmyV)7P@?m!L+F1T=i<^xoM4Jd|>v|7)qBBRQ
zs93<;mcK99;X%UTG7}pv6E-{~0{04O%&&$Noi{`8K|U`8yMJbe<1ICy0h{ctGqBp^
zqfa|81eB#OW=z7Rhw0w=MM>F{BseSB>RZ@Qi{mgT>Wb8UR^e6Otbb#2R~RCJ%StTU
zS5&%nwYpsguUJo4XE42+>nQE}+e+L-OF!W^;kdTwN*GQrx&lPnI{kz<Ini2pGZ@Y5
z$tBRPcE#d_zT47@X-^#wYvu?YgYwnJw8y`_2sI*MDrCpr3Y35Yf-Vl)+rI7e)@>of
zDH+3VZR^Msj<ef#HrptuGw`g=CVGS5%~ttS@>78R5$@hr3QADCJKj8~g4&O*WHJlA
zc#}Ie)Yi?p8xP|?yZaxFfc@l-RpIpYVPL-lyF!N1s5a8Y#~F*g?`qt}kEgwe%C<!J
zd7iA%Yc;SFZodl`P=$g^NXx-dt%$=j^m>BmW^@+0P3#yEn~f0cccUp<XQQ>y7lL<^
zrbd#jBQ&+B(h~h|vfEmptRx*hR)%0i<TNNQ03Cg(`Qye5t0#)D+TX?ahP&Y&KEy&4
zlr9vS(<9apwU&IEwD5UL)G#iFo_N8eI$^G?8ziGQvmR+rLA5=H1xUv?H_+~`t8mij
zpiwr%zE#|}*CxRNx~#j;-p<}3<3U~e9A6R0ekYBp{OM@Zua;M`V@QKtd=4IfpV$fy
z2x858-9fu-SzUBf8@o9wKpbP^Tk*GD!oyXbCIy-8bxRNbJ95I&pO+IF8DB&2_eH`&
zlwvf5cK$Im`X3aU5!dipk(S~6I|XbkR4czkW@ZFpnG=ZRUn~&Ib_>MvErFOXddeH3
zCnqW^J;7Dp5L`9Jcb7aZGt#IGrBSuf75G0WlQJRXH-!PchSMZ~QD_fepvYX6q>+O%
z?h6S3@wob37CFK;M(K{2ONA{%&`pDUsaMpm+5o*T5sH1e;Ol?-2p$%H{t%|htgi5s
zob9#MWE818v*x<Z-6i<&=@Z&uzM2ZpMbOPGNnn<w$1LILr7}3c?k4Frcrp7Ep`+oO
z*Y94ufAPz+^A|rofAQ0c_rKA7t<L=E*$<B!nYFvWqlw+}LDY~w;UzdtGx;5xXiBT>
z6lygnK(zS+>Jqw1ddTn_!=Yb3l6d5BQgR)a92Z5_t*L4bok78RLDsh4mB%+aVFNQn
z14;amkeU~QcVLasE08_)O6KA7ILI8MuCxf~jVxxcJjtb;W=G@E=x{p&@Gr3dO+d20
z^ut|NMw6}GkPY%f$8K-$qAeyn|L^gU+ni&u4Xy=qg(;9>*H2I>2vr7(;f;Qt#e|GW
zU6HT@AnL*J!Qm4kOXtWoYMONs-+MSZ(v}o31A0=N<}A@TbD(eL#PH3-wPpD7s}&5J
z+n<Y4EKFgEg@NOnJN5+N;B?Nq0V-aL%Xr=2*@{?kY=jng&ci8<>ZxKKtLH_2#pAVF
zBQ5Bk1M~wkF<Hl#0wFqS@YIk1j4Uc$HpmN#FmxHutdiRmv7*R*HW<fIgQ;Bks8~5>
z^wR1CeuhGw1K4jfmGz{9pOj)Qu9%<fT(X@gXkzHr&ma@Snr-8fFF_%)-`D7&v9=v5
z!@DIsQ++3}d%o~U8`6miEG}}4r04Z>X520=3Mv1P!RGv&wAs$j+5GYQq;O7$BBoip
z3DyfZvj5|YZmcYfheQwk48KL49Y5hafwa(yVo3bQR4i&}z|SXrL(Rfaq*S}eQA4HZ
zKwIVm)}N!6xjItBz5|J)V{w^E+Vf+Jgu(C9QT?V+R|;Xd^R)J~jre3ICn#T5w2KJP
z0W+8>$OP*uk&|DsA!_|^@+L~qD<+%7;%gDZ1h%fl0Ijm;Ox8@ACJ|y+PRd=<%qTkn
zJ{1dbsga)o?25`x^OH5<%ga~-<`WB4c3N0vC!^`~D!9bhCi76ttgaKLEkkHBhjhyn
z&T4boW|xHf^tN>2d6Co`-d)IxTcP#ICV&{-RhD<ed^AY1B09j`K;d81hgE3NLj-{n
zIOAW;ORm|Hx8eWFEasmiEzOE5v!W&5Pi1XVN86U_VZl-QeHP^5w0DZ0<_S6Xdtwh?
zV6*poXT69#|Cz4XGbB6Zpq6JXY7|PVuF_hkF4R<N!g{dQ74uzJ(Y#`Q@yXUQklV?Q
zyJJfK0?KyMNx!nR2#Hvx(=8?2NxFDJR~_k+p|TP3Q;G0C7j5(+722;R(J0V!w0$Ja
z%pfFEMU_8VMYI6#x}5l7os!~xONc#h3$fRC2(dHgpkV>z$b!g`MS~n^LeByv&-v{w
zR6Z^AicU9(SK;Vi%48m;#w)aye!^KoKtRJPv5Cugy9g0srihp!b%T5myA$PDulj=m
zC=I8bhkAYZc}4nnVq5tw+F#w?evj0%hIx$N0}Hd#`f&Q0X=!mCEvI-*1|zu~&X`OD
zl4fdNBF;2^S}=qBGh4~5qW4g{R9{Zp84*{gCu_hNS5}-p|ExHDA*$2G*%tAWSpw`j
zzH+e<sjLxN{38osWMYMvzyIRr*|6~3kv9n^tP5!MN*EP}ceDtNa7!B3)Lpk)YNxWd
zrwGuBgW{wkhOpP?eaITb_F5dfBGET8Fv}eje^bn&p;nqu69x;x*775^*ee0(6tKnY
z)yyaX$1%p*%3?CJGpfCuM=@6D&cNIrxQI|*a2AEZSu&JXYomSCDZIViU!pJ*pn$bl
zavk?4u}%~fj~3%jnQFPw(53L;oNdE1n*^b(;Z+reB-}QqqrqVS_FTuru}|DWGmBSs
zxS3%vF!B&*UxwQEFdtnWC`_L7HUSCGRZ+61=ofQ1B3>9VVJB~F+!y+47#19?gt058
zZ{>hY(TbkYvT0W$<x(xsC8X=2{Wy>y4)g8qY<r1!$$!J@G&NDC?-&B$9pjHgnFzbE
z<H#j<=jhy$u{+%^qrS%WCD*}L!&^>E&tGRW80)XFE6-_Z{q;my?HxEf9lUSLx}?#G
zFAWWdD%Pw$HA1T||5%-5C%M+6($KtR?a(@mve52lhXoVXTz|h*vk#dptygza_P@RT
zgJS!v=$wg4Z4jX7oGJKgq<0M|@Wbz=-4s!CN;SN*JQL_H!=Y3Lcd@2MluXAFhI(qV
zIfv9!_g>dK56#Nj(RI)eQk-kFXq~rZwPmRJbS7&DX!Iq`HS2>?6cofeBcl)0AQP8y
zYRSYIl8MXE(eZJ5s*xa^<|8<)mG+>vTBSEMI~a`+ATC-=Rsd`Zz;l=JYOp{p8K7g}
zbrCPE;Q^#BwZXx_OC52|=Rh>T)APWT38^(eTbF%k%?cnee&6lwY<d~x)YI!OlbI{B
zJDA6xW34-?UiMdEbPbHld~oe-c-G-b5^mO88cl|bM;+toa||<vV(|t&2Y@jchleaf
zd<1hy@2J9qDz=9S%yWzfS8zRu*GI?B%|fGdPvs2w;WQY9<gC0SXY73Ll5$)b8XYQP
zN08&W?$icaqBmYKkFWb{p$-oAaotiwl^F;ao_|#3I!W2^3bh}p6Z8t5U~+aI4mwhi
z|AEzD8{w__E<%TGp2IvJQkj?Lio+{+bUeB40|UDr#Ff#PBD!qN)ZsM~r*omHxOpF@
zv$fxR3bdieqr*pwre!3tQRN4<`UwRl2}Njt+56tZJz{(`;ynYLv0gimg7?l$zO*tV
zkNt8!?ZP+!Npk405-d+|kxI>q`?&88D=j%>9EhVpjacj?pw365DZCEGXDkK+0_!BR
z=KyB)b(Xb#QyqxSs8u8=OpNnEpx+DFRDf0ok{QjY801J==}a<`%ll{&XYFR8Za%Q^
zm|%F!qvJ!PA+eb)*VzY0dlyg@vyZfn95DqRg4O7Lsja;-p$=z&pqi89adE17lF%H9
z!o@)Xz8S_xoA<D59$@}jJpdd46LN^c>M`nAQvZ{qO!v3YJv6I>ff^G8RIk5)e!hT~
z*ye-{ZLytWXpKeOCfN*mkOD^fJUtXT&aOq6wC)AA7<U1HZX8JU7n35MYf;2}NK<rp
zX`V<K%mWBhV6OR@8dbjcium)?L*=N4Dr`2&D=Kx92G|IZ6oVyp0g*}3$48A&VC4|q
z0BC8ypLeP(eKZENl~HcD=ALX>$2t>05|u;}=`FHN|7Z*h3<#iItCB=7&JX4}28OC@
z@%{P&II%C4>r&zWT(nDfvAzFXRNJs6Dy&YyU6R`CmbkSB&b^fa_5T}Ur}{2wt--8Z
z?T(VZH~xvkujKn0aj`XF{hVmOk5>&eGX^DPI|alYz1uEzSI_*ICw(|D8a+*e65VQl
zd55j?Q1%%)b+gMI#r`{eM*ksj?DXO9f7bUc(e18X@01jq`cR%zRK-qFRoK+PLavqF
zQ+-Z#D?|d(R~?l9xo*OiUc%;D3zfx<zBoYXa^Ar<ByoqdI3He<`Eys!4N7NnD`;;>
zlT}l<p%?V}3CpL8evnS-31!Y<zZdrEKc~U)8D)h(b31M1VY!jLCmn*ZmY}w13u@Cl
zwT;D6U#b8vme7L*qdRVrF*--)JWAOMUmzmzo+VzNF3*71&%2n0;e#;ByIc+|&+wpM
zpU$vq(vn(7NmrHGSvXk}wH&jkY+;3Fm$3Xm`mL=fwD_zjwEGg6?ylD@dj((;J7t`B
zIlQLJ;k)lnx6INkpli1kjGgXoWKx=N@TfTwHyw$<IsgFaeAHI*!lsu^{B8!j&tA&B
zF$(kC2fRiBvkm8taoynTf2xg=z0?1zOdu=uh4cWPpkGD}aM7I<0XqG}@8ZR2xk|Dh
zl2wVr{tvETcipr8sbij<dahTiyr@cseF}}&O#yr!!`Qe~7(fsm5|hg#>oeHLn~Z8Z
z0vRD}S!V_utfHvn6@qPv9x|NYY?6~$*Fl&<JYigjEA-Jx3>f;IvwDvLL4)FKdkQtm
z`dMaQULL`YSv)D|s&GH^UeV1lt|@E+%MP}8u7eG`A&l~nk?3o9xV;S;wzde>>9CZS
zSh?wwNGEn15oqzWQHF&rm0MX@T8pY%Rjnki27mfyPh)$7_6sM8OWl$$KYtj^+K0jX
z&RaV`-+TrD3g=rfXwdAXOQGi{TGdU7#Z`>xc6zy6x$gQifO&hH!*QJD8M~Yi7cm?=
z;@oMRBT~GHiTr3`OgR{bElu!qUpXCEN1%0}t!wBYdk|44sI~Gaz6dwxe0c1W5kaN0
zwd8p2dmp!T`NXTZ3_hMN;F$UppP#PJ;*K-vBc!81`~#F&oS_u-)wF#B8x`C2(k(e>
zAwG&UjPQfd;N;vt=04eD4zF=uiF0xv94nk3E4IL{3~u00_~=TkV9TBlwFUD>sDRNO
zmTa=6U_^7uH)rMSvuC9emtA*;;#${iZl6m4_HzWVoA_h><>alk!$Grp<szAq`*gi&
zTc!@Bu0g?)(Db5g1}fT9?i577n_of$kLa?nJatzWUslhRcX}jFZ4#|h&<yi4jQzyU
zfSyx*u#%_1(l-w9eD&)K657I{K5zItaAv<zyAS8DvWC@w>N=aX*NxGi@VJ3rH5Lfo
zw|~pT+hqR5I$;Ht{Xar1v@8fb(m}iQL<0d#*`Vrtq&>iNiwT<c1$Qf<V+((VdGaJW
zTXbTBp^?5rD73KBj7_gEw|OIF<U8U2piVdKSF?9Z{j7D-%>|y{X+q5Q;1|YmG2U{t
zKJuTE0kTB~IKNWoY0kc&&KK)6eTgrI;U_a!&Apl9UUuq*S`s10^S+xH0Q~ePSixO-
z$3C^-*tG=MwS?HUq{*%&HZI0)RF!nIKAN>AT=PbU`m$h@h!#*LsG^EY_cSwl(QwpV
zBZ~<sH#X%4culL+OG>0s!OElp&$x(Bw$z?+cw1zGXYWwS1#*_Su3EqpRh9fwlu~l(
z|F%5Rp^!0I+w9;x6wW|0W3wuXgQXjA)+=8oZT$a<1m?@7E?+2TVJ;}b07;&kj4xq$
zGR^Shn&BZKpN*g8c%E#F=gBS4!|Daf@;sfGMze+6@S`asbV~2^`}z9aa&eBjhknXQ
z*1=R|yP2x2$yDV&Q<WLqs+>l{mtfQ6PxDGy2d`Ax9h@Mq#Mdc1<_RWRJK1*!$d01%
z{y6NEx)F7SA8O3DR(7zPwQ4dlll`4NvN0_>`rv_JAum-~6*qnaXC_5LLxwdv^#2xH
zIQty_C+=_VLT@!#L%JN)VCHj^u+nq%exiBC%Wa-<WqHP{7SDJMJmV^yu6FZ`7k`dt
zBo^`f^DN>Fw$)5~M40)<<m_yl%p!f!iz(27fQEtlQ>T}xY8<bSx9gNh0<$(lPH_b#
zk^8&(kGVgE+#h}r8l0?r?(d^L8DGKEjaV`FH*0Wz*p&hDpy8uyafQ}4hWk@c!Q=jB
zFrqc(f4S1=tb<%Y?(d?L`;%}ulXr>pSowre6UqQZ!ASoD=FqZwJJ7MY#c@Ic*>OEm
z`HCy@Kf4~O2>5E}o!HU8%JHsh2k*+^uUhPCIdL)m{uH|^PvxIvSLI#oYH8Tjx(=NO
z=U+QiKt8IVYK>6)MLA_l?sx2&lwY2q>r%G&HtF<&>1U2a57a=i`yzXvo{REO!sN39
zHoK9bq*tU0!^86E*bL`)=<Y~(`50Tl5Gk&6QGwpq?Q1AZS6v2biwW25==UHSx>xu}
zqO-A<&4d@q@|>9ed&?6tkbtUR9a?`=G6WK^G%4tFO8O1_%{D+wq|Z1s47f3hA8ZVl
zvVP*Lq_|XB%bae8)YRO&A@pr3`(<AZmT398MkF(xVM2cyjV7$&Z#-~Z#@Qex<z=^P
zgMexb%4ih!gE>6U=^0h47IAPn2w0Kr@~}Dzs(u+pmzbyb&<ab~P7Oz+vA8^(57g0<
z@Mw<ka22QhReu4;Nj5+&Kz|W0+_IhfOLgNG=3^cIir%)+x7GFF3K92wa3May-*fRH
zzUp5by%O)@>%sZaC-Ej;_iw~g`1?`3hP<1jH{vnmeLQ+fgyfLSu-+u-iOntqLga`3
zI~*>RNs1Zj8^QNJkX5*sAjLaCk&i~MCcwrg@eW1E=yM!PN?@lXFi_`^eBFN*T3iD~
zpNeZPN*_Y1<9!Y+HOks=;LvI{{8T*dYWO2ID<1c0(%-x=A1LDh2fFSDIPP`0HJ-Jg
zd;mg<AMd4?f~rvZO{)`c#Otn3+=$nv1LA66N10)jSK?}Wl)!HSfeWL&Xno)nOmoKv
zF0fhg0k#pja;%0JzX#f(qNcjtfFHucc^}y*y8$VsnAq>5V&=rml&$xU>t(LqyH>pt
zZ6T`REX{#DAi#0^`Uh`cn_Z3K3H17doMP_p?W84vE4;f2*x4KJq#=*h4Y#DxOgJZ|
z(Ok4WnxeL&Z~3yQ;}obp?TrR48GLUvbd0&U@E8~HrS_Q`%<-&7@MwBbMU&*IUQL$H
z93L)qDeNW6qkH7D0-am?<+e&)$d5AZX(w7S=>^gZk#Ej$;~~qHZ>EIm6Ot6gWr&V>
z(I*DVq=?EYfXWJ1ancWpuV3HZzDDD^gM+qSuIDP8*Q9LV+e}=;lHI^c`G(6y0}JC?
zu><!wJ3=t=F$zO4IW!U_pku(mp-3NP(*R4SUVe&sR0j537`coLGM+)kGm0qdfR5hO
z3ZRb$v*H`Fbb+&aaIhLAkK!i>2WT9!z(^>nVkbniFPemF82SzR67+_hG=}{rffb=|
z?)jrUO2iLAIY19STWFZaPJW<B!>;Vl;jbFZiE!|dh1XtT+jG@fD-Wm;Y6Smc@E^h+
z9W4N%a_IF*!!FF<EObr6gbkihb5FQA@+-TC<r#{p{KjzW$A|I|RX+!bBMlT*4g2Wc
z&Lkt6(aAXmGH``UQ+O78Wp!%qkP>=f7xrz5M0wo?7mY6|a2&F|vkIRPjyQ}W`w_LT
z+MTF@vmQn)%IC0~Ex-Y*6tp&{a2wG>i+|OHVidGcC!ZuM)J`zIYmycFT9&N@YR|((
zt_t~emflO)fufqlwX0{jl@$62$<=W#pk+J7)L?|>s<4BdhS1tg3DxvRO&)us|K`ov
z?{<G~(FLy1-_68sYR}lmh^vhh4a1RQl#93=jB8*eo3Rma`=)-_jijLhn+x)*nw=yE
z2l)vwZrP&(o*ore@tQ<*#(pLhB$o%i1b&2qo<z%&6wL*uWq&zHBlzbL!d2cjMrVl^
zdNkGeB`5sCUrF>=3jRu}KTyYi$6y2$nrhaF=wRJ8l$FG&1k>jdaBC&A5(>c4bCqX#
zrNt2d=<5qLdx7#^^u2{`U@W8QFEaW)tApILc@Z1jO%Z90n6M11IwtE>&;LifWCtK|
zb{Z7@U^QJ1=FvP1zfR5s>p;O4qGMEV&NVFY8i}Gy6q7|Wn4JZDZzXaw0u<h?T}%(u
zb8@XCk&bP5)eFV`z83;S=AD)RH2Y?{HMxSQALqI7=b0xU^(SCyCV*r%LL2!D^ouzH
zYTvLN7s&esa568a#h{9S-TOKh=Nvg_0Y}s&S<q{kzY>=oV!J|LC*IpC)PZtv9_BC)
z7r;rMIb1h~>72uKB3QuZPvU|lNM!YcrDsrjP74tlWdch}&MCqNR7YQuw{n8kg6nCZ
zP8QQetRnU3l1z^jy7&#Q53hg>IqLVXf!a9_yk1hMigk?Qvk|NvRanKUKKBVnl{dYY
z8IhZceRPF)=<dzvS!g@cpz=h=x3}<yd*t?3?f`eW1KhEOh8gq|GL?B$<%Xrm<BlNk
zc)}b%brOcm1FbTLy)WA$=niWX6GrBIm7oD2><jxAW1KJk2%t+$(Li``kojj^DEOc;
zU-M3*EcBxK>@bDd=+12+pCpFmk-m**!DhVlIY5x`6@4i9bPQk27R@Lws*gw*ox-$E
zXLD@2ero@KdG2odzeEkMd4fj0i*;4?d}iVFY@1scZINu6WE4JOcTdcc)%WrbB@0$%
z!28#3D2jTzM?G`5=4<!~4Pf}Fq0@5&sB6AO>Jtal^nQn~Vj2mik0#f>d_i;&yg+Wo
z1MxzBa7d6I4uGEPc1Sn&6=wngXXX}X)VO78c#YF{LyaWdr_B^|rQJ-Wz0geI>!C)P
zf#PPWcgHktRQ{R7x?XbQqRO;!aM09L<xr*OE~KU2vdi%`lGQ-ObfY7+107-56=e_-
zhG5z5yBFPeXn<_$rZ#HM>13$_zY*AL6$Mr7o|aLK5pVZadTb^zwx0Q_88zO_eKQr;
zZO5FW=-jm34h~DHRKPUbE@IMcNN&6Ke<-~~9ru4onWN!WTTX8~Z^Cm^2b||C>p=6A
zq8}4hJF77S<(IW2oQ=c81?j}r6pFh6!=2U2F8^m7sAKqztkHTNztDr;Xfq;=-paVQ
z<Oo_d#~I6;@_Ku>N^T_Xq#jr5&r^?AD!NoP`qQOgc4El{3lIaS#&2{bPmoef8_YQH
z(b#L?o%7QaW4~n>;|;03*%{j{13eOMwD*R2*j9&J#6X4u4Q8*GfVrK+yoE=>8h-d0
zm4FR}I9WgnPpxirVGUf^9fghol)(B&NsVy*j+eS+=#1oyRzA|<yH!ZVI~@~PaLHm*
zkz=pNZWB)=`pFmp3@LqI#mjE)Kcsg$CwMxSVSW&2rUQvNg(c0Y>?=Hl4e7L>vqoRH
zHjj0r0+emweVXKAc2{IR(?=9+nS8`3@I(!HLG1B12aXTqkela*4FbCZF?;CWze`B+
zt_Xx?t87ly89DT#3ryG-Wq_)+W%ITOp+gSx@FX*~1KDt?Dwg%QPZhcE_~jZ%nj6?!
zWDJ>UFE_byhm$nF`8mgHLK^F6*dZ7Su{-?UJWh^|{m3SG^X{{+^u7d6cMc?f3A|SX
zb#khsAT5nmf9|ulD5y1IL-d^)tjmU?2^Kn7AV(WaUC=-`BWb>+eOFCK(eGMW#T8sO
z2z;E#kcj(+8_zOsI`V`K(J8DWCcooCk{pybqVS=uzY0p{TsTTm@{Voi^ml~ZNx`Yq
z7f9#d5gv&boTEJ=<>rBErJP4S&-n-IkcF~B85zp!lI{^~I-E0=Er{7J(mM-97Vo&J
zOyW-pT^4)5L9AE0H784CQ*+<ta=v<r3l8JiUt&lu@&=Xim?+xBOCDVjB1pVtcxV;o
zS)<Z#^#nq3p0H-?CeEV$fGgxzYJJAlGGFqFQN6~@H*QE#MNPvP9E!B?pV0X;MUc@^
z;aI%uN&*T<O=)<pu*Lw=;9r3?;kSZ+7p4U}i*_%K+}ybfL2L<H3B8$YSD@5(4GfIy
zO=hExOZRJC=<oQm*->rlYZv@A44G!P@2msKYD;WXywi^g!+-&e8e|6tIS{UdFCD5y
z9|%A;RHXc9)}8~Kpr%?*S&HYtcF&iit~LJE(pz&gCWoKk-_k3%$UEhN*ZW9kUrz@z
z;$Q|hlyJidc?^fvb-x;Z;$nR@{4|A(aDbZ&@@^n+$u%Hv$$8nt-hgB65<mt^!g&C{
zpHQ9+zsr7Nz@*YA40|8F%s=CO^l>rMDi3X~_XaPF?(cW8!W@dP$JY5RX7PV77K{IY
zIo51Z<A!b2V3m)JPtcJUxsvr}b!E?8xiA+uz6$D}<%0hY@Vda?`ZtmjdlBc|VNSeT
zpow=sH1RIZChjunPL8>YL2mS*k>eU|B%4k)68~(pLa+0&PV&Ya-@yT^j68>S61H39
z51AQl7z{Eo*KV1SKKm6Y58OhCacdL#*W43Z-^k6Y$7SPwZq~X^HfCd9C;ois2GI%+
zd&a`dpesIIGiaTE1p-IXB2IxBL9Z<0GX5(^4n}u%7#9WoKs}0I-`-wg1f?nfoY7y4
zS>K7dR|f}I$O*GLI>{NFA1pYqVAhmq++f-%%NkSGy3(w7tkZuK<pS*qjpyIO?)tQ)
zM7fLupsqP+Rgm|Se%dFWMHY+7zP<fhhKDm8THoIMVM<+Bd7f5kWwiU-4*IqxN^>`6
z!mLe13u3ejM<7E{m&gWpIl7Nw>7-d^N;)Q&Z3cx|oos&_IaLGcs~T|V<n1k{9=&D<
znG0a|ia;H`4xt!1H`ENDH}xkYo#rjT$;i`RAlAz=_CX7O^c#o+XCJuwBFRdUJJ{(@
z!oyP7smC|dWD%E#!FXWvEXDamC<@bq*U&bC2TnjMf=BaCP&Q+Dw8Yc@i7JUvN=WZi
zr$~3JQ()(t$`olsnWEK-Fg0q!>=vZiCVt3T2_FB8erS^7OOE$$&*BZL-WYr}PT{R1
zx*6=7!+QGxQFI`W{|QO-pFId2+uKM+{<)DroOH7$@zkyJ&<|(+IjL?FU9<wEd)@@S
z!79<7oYMFe+%RL2G3v#`ZmFd_NLFI#KkZD#FblW0g=GWq*^&3|jWVY{%4nTWkdQ3w
zt_NQ96S+V81Vs37NsmjEkZxVh0F{gy9a-p<X-s-11~Aajz%_4EWuV;YLUi5vP<7d=
zTiPAc*a0o-!8k6@^-{3lOl7~?QXOT8PL^2gx82345N3S#7$tEIoKw!Na<==J)Y2SR
zn2term}S#I_DjI9)Oa>kQK0CZEQ)n^O=q<)v#A4XsOLd6)*?R@24&>Aph0{I3SpZq
zcCtU8;EnGDHSl*~6~-T9VWnXB+zQBMl5~OlJ|ZEy2`L86_T2L<Z~s4mUW{3}Phg|D
zLX+b5uAu%C0@z9+wL)2a2VL9{NUm}~K!Z#ihkg4l2RXc-*!R+jDEl@h?eUK7lGyEn
zpWL-uyizy4FW4-*$K!7TE?TobzX^pGRB>g97$;yhj-}AFpyB)p?U{xiv>}yYX6*P7
zHd#O=E?VINtz3J@jhtQg+gqhSeKH*1-tNC;(*vQyb5h?G+D#B9^@*3JI+L##)zpe=
zVA3su=p`<M;*V+9fHxcvfmf;9*D%TCt)N(ot}9P;-LQOEbxO*e-(w_@*yFLLBm-MM
zeiQ(Gfqr6~+Jl@1c%wxZB{Ce0MLAq&>`Geu`By?)de>p7Eo8|iQIWtX1fX~3+176x
zGU7wLReNDO252*L!kw#p%i7Yn$+mVaF&ehm$fr|zTAf9eYv!6~!}p)B&@-@!T#MIb
zcACDzP?l)YF|{;r7Dkp*h9mU$mQ?+dc=*kOLwOkVdVT8_ylI(&g4v@SEh-paUpNJa
zD%*78G2^L)NW3=p-@5+BB4nY}Oqbf~wwX#+tps85i0$ed_@JcF$${}tXqO&$?w-n+
zeTR28h@-3O@;N#Qk^zi<imM#;t9qGa^Hjc9vk&wsW4vRKi6084W!@;zS@l!7fIT$_
zJOa4Dym+|h=Ms-4*h;wkXg!M#u1kuJrjKrGlT*cyO7!*}VdN}$$znClqKX(e-@z`d
zwuB#G52_P%A9pgEV(7w%tfk0aFNat3*IUwlG4VagUHI6!VI7Vh96}>WkoEC`9mVeD
zKx$Ka3YNwTfiY3YhaOJSOLUdEW5*BS-2A})R{?gR8dfN&28jUV>K!`Y#JdFRoONnK
zt<I#<K|rD6Q5g<AhST&2lKW#JAC2Wb*s0isJe9*w31EYNvc324E7k!}^O}1zw4dGk
zYE#yGpYnA&-vc5K&h|YWqY^O3-g>oH<xoV{dt7gi`i)tTJ|2xm!++wu!>2>^5Uq_V
zIV6-fF?<O+9*5|MIgtKkn4~aL+f@ue@3P#iFV-rZ(_G%+*4>+YXLjj*Wun}Xb?nS5
znzvZ)BtlE}3xZpq4sZ_HH92sz2)h4Ib?@5Vwvn_6f8SqWakE}RXi}sSXJ$abyc|23
zWS=<k6FZs7Xmx2J5+pIE01g0JVkG?cw+?-%1|Zp)!-w~SEuzurb5~bYSKU>rU70R2
zvJKj5NAQg@GafByGi2+m7J*K97f_rNwL(|UsanSiAkDNTc2w>)nsnX9M=0N`EBsrc
zm*WwtTht*QUXOOc$#5A?`9ku8daZ8Md-XQ{YRK=_C#&Fig<IzB*)$zZzkqFj3;(Y4
zsd0YCzVf?9>0j5)#q7OUg4ZW+y|uT4XZ4=!39*{@$8U8dfvN~oVfZ1oY|nIpw%%_=
zac_@51ScN?HK6Gs&)WI$b=<1p_^rBWwc+?JEVI|~4qjXb3i@yb`}*nAZ-)$@T&TAv
zxEAL_-FP~$ow9>-y;X|<+rv-q)$2Hc^2#8(#75lClL!VdzM7X23}d{3$$-2!qt}oZ
zYJabPzlC?d4BsnJ&-=jC?<GdA5AQ8L-W#{@ejdVL{ycmQ@BC52p`5>ow&*b?yF;UA
z#)i{wD2?X-mG(l#V2=BzPhZ3FoXipR1dshY6Tt||L<8wpVW@r?ih_o(!&flMTt%X8
z(Ov1F=)MQ?LSOV(!R*!9`&k&ia+~jgQgGeDG}X^b9nQmVO5IqK4afxz#><>?o>@DE
zUxwLvCcI4PGgV^KN^aV`Cqs<UZe%@W6GT_KbmSf7yBipetQlJBj6x-EOk_~;2W@i>
zi-lW~gJ8Mso{sHrrVFVhv6>L19D7mF06x#{GsaAEj1ALkKYo&AbqM9zJdv4+M^BEX
z2(vi$5*y7ylz5^uBX4*ww+~H!pFaKjkU=WcfW~ORY5=mEp5xU!{~UUJjyb6ur(+H&
z^r&j*%kp-<<Tg+_8UwAe^}g)z(BdR@MP&9{atbB*15tu+P{ul9lsmjg%IJAWzP}>M
znORS2it5&M1P6Z>##Pf{+R`?^mUUS*D7@)lmpCPOo@$+A3lg0}=Bh3`f$<!#lR7XV
zxi1|@dR4SdZhKXcR7`XS<!@24iIP;838G^)2KF&6vqjU)mMJ7$lb1@J(5dOzK-v?u
zA5zEL=^(l2X=Hh(1Y=UvMv0EBQ-VSQhH7PP$ph?WA79|Dh}I5CJzb2{#K1E7Y}hl7
zVi#cmiec@<g-nPGnH3idV3PK5$CiClNVj-TbReRip4bEEiwR!w!)SiX`k{&?#unDQ
zTNfHSeGY<{#lCMt-45$fdrbx>?G;GX_~9$sL6Y3(p@rG!D#Rzp?SdO^yLTW~U7X;*
zLGD0(z&m<iq4X<#upLk!3{xTLzAi+2P@=6*Iv)sgft#YOy^*;y8&6ns$|qItv;aRX
zq}2CVCaq}_TR>h3?%){F!4OmDdQ0eH2Qsi{qd%WnWM&iJk7~ZGnAzq&pH5~$7KW|l
zGfEzfI$~#Ldd`+XNnC(jBfDzlmI4^?sYNoCSqd~S%byqCcRAiwExaQ;9c_YRV2Bdq
z_sD}s=_lKh=_EMb9#7dFfA8g3jF!QPUnM&In4y!EY{F%@KW^ovTJ=z^&a#<_qNGpf
z6->w9i!y>Wg8XH+&a+jv0FnW0bD;Lm<LP9+kN0QOXY=W^=yVe8fvJJy(+S$B;O`hQ
z9g64i1SGu#oAzl<vWNqvj(WMW%gArx+O=@qZDFN}^jlADAc=IbPRgv_TxW~lO{vAV
zx)It^ZK;E_{-@Lv4=EyytaMe3$u0&J5Ujgp<Qdk|okQLW(qADmLuP<T5{fRIJ)fWg
z2_v;|UB9Jefrjn>zQahERn-9-?)Ybu$dJkm)>^=+K&%<8Zl<xz|Bc?6dXG%})oQ<9
zr@$R9U!&jiQKCQIS7`|;fhi4}S_2{cP}pZR3Fh)~Gz}vEb?}k%^dov5p}MK1>Lz_y
zbz|getiN)sn03&LpF;+iO+tIKx*U+Z<G4b_;u&npVNOAwVC$h4As<4YGVC0teL(yI
z_=$GkXQ&{|If-6Zlv3~qQ`37Kxy(&x^+~D%p#Hps<YX|f?^2RmW}+YGo70E+=JY?u
zH$Tc?+PI7Ld@vbA|2)6>Aa8z+MpXUGw<ICIS<)j3$ZuB16^t;)V?2=!0SIh7{XzY{
z8!r=)sW#|Uu-PBuo@x`C20oroB4S(qX@07$;_mWKojapxm(GUiako0hr@U!-Ub0j~
zF}Rjlwc92KlyCG;H%srcAzO7U%VPH?SuV4D?Ywe_c&Owx`fK7}x;{~R@etrG1u?CS
z4e@N7^s11iABL;MEe>)fX?Kh>!w9W?wL`<nX%p3FnB}?5z^|LA?f)Q#;H5VNcOWja
z0WifvrJk{|YKg|1WGyS+urYFtelf*Peu74<S0wS1LA!XvDGdk_o$v=~Kmj6wy1{=5
zMPtQ_H@@63e(j|&0T-_+Zt}w2)^Y0m<w+7bAhCTsneES#+1}x;Ch!@EvFOAG48^dv
z=&4kIN!|y+tY83f-H(}Zv#C3Hs~97Tz?&f(;wOjrC93V#@!M>e&^n;7#vAk-s&9dJ
zT%&^z#v=5(j7Z?~WrX27?rx$VQ-pRH^F<Wm_-&%49+cyS5QLgwhF``z8xHZ$+%1mK
zg~mY8pAgz}D|xqHhu6@_ACdY4&#qt@0*^MnRlD(xnyBd?;V9N=h+nr+f10S%Kj0-J
z8ep)~2EjGR8`E^W9cAOK%Esjg$hAtxH9TXOfh%~vLUJzp`(2%0R}cC;kfhMRBns*B
z(pdvhqVxtv%c!EYXzpNo%OnCqP!L=hOfD9bY_)9_tRT9yCy*DrkP28x#aTWpa3O8Y
znuxRW;sTLaV2{Ts{I*B;i-LTGw-^D0m|Y;QY=5K!-sR&D93MGGa3l=3Xj9-V$Q*&y
z>{V!Gh0!0}9{#cDn2SBpaUM~g5n^~?0NHH17RlNFCdLS$lbJpv@%nH+EMuBSora2G
zpb#>?{T9RJj7s1)=p22XjyZ(iu+l;PO8%&nf$woKlp)&n=eDwXKHOqu=vkmELum9`
zR#wv@+CpWyuIvg!QO3huS9Zl8UCGL>5NHEdycn_<Mc1iD>{+GPMc!Evh0?Q)cocZ;
zQzELywvP^^stWTkVX4vEYJVPX89zDvItYB&3U1V&wCy8oG5j&FM{#;`8V$4OkOIf?
z*`FrF-9oav^lhNjgDPQjZV($(Iy0hhz$ZEEWQqr^xh`!OPj`T4xXX1q()@v8&4|no
z8oVRvhBwu3Z8NR0J*Mb3O2|cQ<t?=G256Wulh8{Yjnr==e0_)(3Mns}?=Ka(WbMf%
zYoT4T_92#G+_K<dBTlt<+F61S8f`Fc4c<$IWmH(D3(HMGg}XaE8vc|HjiVc$PWSgN
zp^yoAJ4bGEh!yv}zv8$RIklqDtw>BOXieQ24ueg82y2Q0Bn-EKlMQb&i<8b~4|s_7
zGbqvsV{1ce=A(*F_(fd6PdvGoaWcw70}8Z{%TW;;?cYov+r&^I=@?hVbxN_)iG>V;
zdCS`FTjY>oP&PEHH!zzUm`ZILl{L<M6p^p+*H7r*LPv_)OK$D!4qgnLo^;DiSoA?o
zNKLhYGKX?Cgt@|)UOzHi)13*p*4eHooz8ND9%Arz1kIlU&98{&_kNGylv*Vz@p`nz
z;-`ny%3i#I9$0gIb{$Q03`N={J6$PkHWNf*z#b-8P!-9~tW8cd{iw4`qt<1%jP9I&
z%CwQT#=v2-3Wd;G@eut=uQEb|cw7Un#L*kIR=07g@z-p0szgVSaf&#c?-W{UYlEd%
zTdMp_bvXd&#6xCx12<@J6rweqZ(FAZlHo8p7Wy3vbbe~TD~_C-%av*Q07rZ9G0l=*
z&z{cc(32+4uO6fb?gH{r?L=n0&My$_;8k|b9_}6a-f-|pT;3Gk1pu0c8FzoSNH#Jk
ztvg`<nUZMzhBi?)d6;b-8JTG2^|@`NL9z*)Cn1X|fj=7U+$fb~lo@^n-BA+xJ-<=t
z&p)pqo3<2WWEiBy=g!5AeMxsXliz=b)6vDZJ9*NcER?s&EQQNq(=k|do|dtjWsLjH
z7=HFFthOy0ba6Kv>KhAtTrK^ZBX4u*UBL=XPdW4i9V>{#$fCiZ2?9JPV0vu%j|Opv
zV;E5{9<nN$)l%4(Ez-&Jm)c}K(uf6~kb^LK2&>n$((O?t*K_D8`)k5T_SdkVBO6sN
zhnUon;ECJweX1ldHno9NEJFTsDj<*zkB2{=3_J6wg)3kfgCK0(_qhXs?M!jVwL9B4
zWpT|Nk@_aQO~$(yV~CXeF!S^~viVkjHL{ARnY>)HaUG2!(B%(~)5u)m;djTWR4sLz
z__3y)3_qoHk2lZePb2e1NX_bM89HG!#B><U^tNTEh)$2;+jUFYJi1PPnIR{pV|#E+
zr6^Uki;F^a!TxG&kZjX7Sc2${&~&&Sb~T=KogcmBHu^fuoK3VtxP&PR<^BK`(E(lB
zmxhgF-^r@m3b)pT{ian@w%ThoiVrW@lovGx0eINY?tvzt35m&qC2+F7owlPa%M}7a
zN&-Qq1%k>51jY-aeQLWo|H$WL3;vb0yLRTMEw_WZ%>brN)4_47TL$I8hR-tNfs=X6
z|JQ}UBKioO@Jv4fV}0I3l&}&Bpq2^2rq)lCEWFLI|9^(AwGRPQz@;s-TfwYlJRX(i
zmAzm)JuM?O3IhIaS&Q6rn)n#JQj*D>ca`Ln$(PECA$gpRrn4NQAmpQwR9<)1Mt-3q
z6ln3fjdEDT)hFmak-&YAYQe%?+$X5XEVL%`4$U<W(N+lT8<bUlNQaqfX*BZ-9Gfta
zh8w2{&_ld)R4^|sOQPSnjVQd^;5u6ZYlI|<X%s3~#Lzn1CKN!vP8J)-g6Ip<lv#<?
zT_>Ia^(x~}S)nZTno)3Oux6}M4!R@;l`u$hKV^3GpqD3FY15KSgomveol=N$qzyPq
zfPI9c;i!avTT}~8?(bn<tS_8&)hH3C#lhC%TLG?{kC*U=(Y}i|lrF#25V}QYe?t!v
zL^mqDO<7n}LqwIaut$2@aF3uuv}p*1%3iVHGPllrNnF5MPjIa#Zmkp2n^?Az8ha}@
zK`<X4x?Buh(ZnFdKYf~8s8Jr0qUD&IxA2E62{_!v8?L%&!=JRM(iW>=E>7ttavS%b
zVhN$qw2-s4=E6Hq<@qUaNm0kPMW|T`*<82jCA+%;#iS?0*ngCMBD9gcNjq|r>mjc7
zG71ycL+7e+9-Y!V`_ZnEk6k(>m@P{{VhjDjiH4HIhLWgWk^u|UkPO5=bF_lkuOmBW
zexJ(zl_}Tb7Aa@RloN+1k3aQfq$Zvx+9o$Z;L)}Y2Ek#l<aleYiIALJr%AOh(|6c}
ziX+Jd7Vp~~oaNZl$XG7;J+}7&T_S1fM#agg0kIn8BfkHjBtn`BQ(YOqfJY53-u!_4
znr;z@P$Sr+melEkfEVXWora_M)}`pTysPC~N`WIH@cnIZ5x>joEnc`ATf6Uy7^L~_
zHmg!dK*p!IzAkdYWg$fq*&tWZH2u6$59LWe*SWr&G-z53B6=s&m+2QG)27&$oh+Y!
znLg8bPQPf>GC6dz{PD{#Y@W}doSQU#?=nqwRg*9NXmde9@D2v3UDWB9r+-YpG~GLG
z)Iath)um;pxIg^yk6+k~P~0I+dfGmH_C@-Krcu9HP@nhdp&EWy2+PE83ZFqArB1o~
zi__R+1f4*bZMx%je3>kh9d7<RGJ`_GPRwgmsH`gf0;93ydp^2x#z?8Vx-wu0<~pMb
zVw}?*QjUssm9W#rHtzWR<@1cKuZD<v5ZQ;oT1sr$>uXq0c>|ms#MUX`ct#)vpd1rz
zkxwG@k1Hstz>?hKK=)&y@Nz8NiW`KldR!QPvnY~IPYr3tuMvn$ahAg&8is`<+}{=F
zzZK`j1z)Ms#Lo3!6W;Chi@#pJeen%C3BCLJ&tLz<ks5f?b<i@>HnFYuFhAC&4Z&Gl
znYp7n8utM0xNyDsi@gsa<vsoH3$=IK0)5dlV!CT`aGKTU*?D#GJWl8MH_Cvcyda!b
z4p4{~mPf*x;)kO59{H{z2os-Yrx8q$*B~H_Bq%|qP9Xbvc@YDH<GVm;3&A6YBuSPu
zF!R~`0gP$#IJGOdh{N2@JH-lPZwx|4@PmQT3xkkI%`D?$R-VPlti)1)C=W|DMMcjx
z&Y-z!OXn06yS*4wL(!Jbv@_)!<Q#@2G6t33K4ef?XV?8e)8rg6K)~RE(tWBh>>hp)
zne7QQWS?g>{^flNKg33bCm@$UV~&BK!ULoA|AsCRu-L|4JOJffqz1ji-T`1qEtAdZ
zM@=?4I30(M#rqJBvWmZ;SomYyJg^HfboHRQg-famo9*k_*(IXF<;4j(wtoxz!b9@Z
zWJ!P9pvx$(6oJ>4kuB17O8(aP1K$~&K(m4f8T~tsE{d{=nFI`Cm!hQs6^uBJL(7Bd
z0aeBdt+GI*qFrY4G=VGi)Mb2qE$1&AyN5={%jE6^-4RH~?xDxsR@l`M5&fmGC<9k1
zv^M=dITU+T;&MHH;wMh%V_N+lpGP^|%1p`_m&5%%t%tV9trBLRg*5vtA29oLV4}D@
z3u|ddnnjrYN}`o=DzJVc8%PNRmoH*?aB9#1Eh_OO)0!2dn>Te!pFwAHIp8tlMD5{9
zTkigTJM3O{pyg<s3@dk$Q3dlV3R6qkV4!j4Z%`qF&IHLYcbW5Go?~VpJngLE)R~}4
z#MaR?a91b}x)rkLLDT7^KeguVJD5gj-}TN|-lp+`VNEmh>W8oY{K9+HMaM?BU7+N+
zRL-5-(?#I>LVU8n?RBab9pr>z7E_byNtr*`t;kF|-{U|(`)0dxO?Q^k(rowszQPXK
z0rxC;@nt2tIrE^C(YUsV^O{0YT9MXMmNR8FI||4YQgy_1ngg#xetAe_m2azSjeG56
zzf2IFtUjQwD(cg%c)XDfC0aa}tWpN7l2bBdF>x=*_5in(U0Bw~o!~%IS0KPa4O#FU
zwQ`2<$pp`n&Alq3$%WBd8SAx2x@l>%J8v>R&d2(cgZ+x^_`q7k<4De><&Q)7^4LPy
zE}38+)3c1Qzqq^5?)1WRS#WcyZah~LL_Ww=R<qip8dkzk8*!MNq4p1&s2A;y1x>Po
zF@2%uf2gm`d}qTKCJTa=XqjBrD@1v^e5~W=q0!j|LE~iwMo<G6;3A0;5_K|r)WMOr
zcgGxAi|DXRkQ9=?l|kK@j?!rO@E5RSI7n*tNU<In$^G&XP-*lDpPpWD)LW-w<QHe3
z&&SWA@#(W!75@#kDLFXh@H6M1Ev`nw>E~*dAX61hPmuP8KzkcOY+9xR<_PWeHB~LV
zpggXa_5tzGl;JDHnl{@cHBd3#{hyM7<91lJuo=`8p`lqGi-}3k1?QqRF~i&)A^TCP
zMXbXZQ4k}xy29CC#bIrawN*<}YrWjei9d)4^o|Gx+SL}p^J)6*I0@=aS=>B92JY*!
zgdLiOgC|M8d@=|#{8fS|Qxs2DN%;i2R@P5$vU>Bx^ac^`2Vnvk2O!m1&no7{(Nf$y
zw_S8?WO=-kk7HG>)Slv1WwRyr0fmXBBCAETlLj#j4Y8bk`|^nF`t)gX6qDkUPZRW%
z-rwKbPn6UIEYMP{tcTwef!LjVE!Oe1@b5td2j;s|T&LDRV61U5nZunM10>W=`>%q?
zd*?I8#5-fTAa<KP55OleFWBa*1sR5g3``S>ss5Q~jt^S_@+~zvzhc5S4-1cSm*D2m
z=0{ovVu(jGOT&WfC{$)FDa_4H-rMj}He73+9d(8sQa*i}pk%p-xA<#|!6-6}7O}#F
z1;GvM`EdG3cQIngYQBgz4_cyFvP>&9jVCgCh&ifs91yKP)Gh8A#!Ac8sbXiC4xQ|G
z5teoYeYgI-el`BG)r9jg^6s-keICi0kq)!q7}hP(+)r?rd9-fx$%!d&L=3ps6f{%F
zj{Ev;sqR}1Y35bzxjHF#KkR9tYomXzj3>G8d=9%8>g)$-u>QzwKcI?O7!07-$m1^M
zq@^-f<~LDxoQKIV;*@8{1^mjJrhBS9+(%;2dx!vR3_7_k5FJA(Hmu8g?{=S9_UOF6
z=rBlh!xsAoA5B4SjrxV<TWdfCs$wy|@o*K3@g@Lf*m#XTpUjhpLKC%*3)+@!?jeM2
zq?n1ZPRab>I#06BWe>D-vB~oFFMK8aI;|5ti42CY&=)x2B=G2ot2IW^1byT%{?ryo
z43z(3yM068hQF|VGSfb~Rm4b`vAw9T&r%>Gb&z53sUlwhX+mp?Pbsb?!-xh^g6#tE
z`%Rx{)?$wM`>iwc(d17D%=U+%GoTjw&5_EgO)51`ozbXN6#J*I6I)@*C#GUvN3EU#
zDU}a~f^N}@z?|~Zbo=jC4~w0n!1s6sO#UX0!<}XGVfq~CdU-M46%|5{!NXQR3{f9k
zqCR-r#H2DCK>C1SuZDN<6IfGHKB5gj6k$?xPDQ+LD2u?gbRC%PD&eP|T1W+|tD&MQ
zw7-_sP-;%8wi;<*Z^n8vFT!CmDuUx-ik5wN8IAr^pM5M6!b><K*F|}Fi%z92s8e5G
zyU;m5!TbHX_^5*PQ#{s{Ip>$@(i$0St!9^#vzgdH#<yat`<JzWB9^d<Rf8yuK@GAw
z`#;0N+ikN&O76?E-Zps(N~wZu83Fp2PW>2*#;n9L4WzXEo5X*DQAD4D0Jfz?21JWr
zWSi)dG}@tI4KQ5j=p1wh5=|q_=J=>Z^6zywC!JJAI;pDH&0i>td~ko}_J^dhi6?<d
zNm1D`0Jbgv{m$eB6XGPq7U#{(4LOUly+C)8a)Kj7CtSjSHcgr5Q9iC{nZWdg(;f$E
z5e!CuHO%Id2(nIlc7<szW&&Ay;`~K2bW1ry=@FzT|MDnvcShA?uIAT;XLRj(j6dKY
z?w|WMHlWtP5a(CLM?Hy;If@$y%p(hdiL)O&C}F~<`8Ol%m@jdCbO;HXmzWcbA_6>5
z#Vq4qY&Suh+u$M3Dxt@4eB?I%7a)C{87bxPO-QvXG{agaCDZoHLVfRWNI30np?(rx
zLY(+hp^&NIhi~;mT4rh0cSw9&v@i84%G*6AzAeV)_eTx~3M}IsN?;efDO!<7DGTo_
zaoc5-aBWVA03{8dgj0`S53Os7u8_wLNyqm^@qWMKT(zP3x*2~jG<XC<8FZQ>-Xm0k
z{8n6KS#@F1^wcQ4L5yzS1ks>tW=)=m)lnw+V*w{-;>6kFETPMJ;Dg9}_&Hi8ZqHD~
zqKU?q*ki-got;{wN#Z(E;yNac;>V00r_F_^t7_M^0nWJyrx@`PevIJ97Jpo{;Ds<W
zNpKXSe4lIjMRjbM{W$?n22LdhUi`2E&?n~_>x4(SPcLP4IvRAZA}^ZEx+G-gs7KEW
zjHTx?;`utIFjX$I25H7%m&lr0pOF!oc|Wx1SlaPebRfmn4F3VXTquZJol@B&S5Ow_
zA+@?@(}8)5^G=Plk_AEJ@SV}0wcXgbR`sJAkKy07wIFW{Rr~wE5N5Y){<DgQR%^23
zcJ-mROOG%TW@Gs5UyJyBP_D0r&%RJkreB__C#Ro33kHhPPM<wfPyX~Lc=7qEmo|L{
ziC=!<rJYXTzdwFy(*A(i{&Y(JnY8J%&*6E3l{|BmOs4qp=lI_rg29FQxrl!)tgaJp
zM0VQ*RxRb`kCNdaaOqf*dNLV9kr+kBN>6{4h;F|Y=k@>k)!f_&gPMQHTt8#3pL=rs
zSK(mjCx(}0lyhOFq8BjCBuePRDiCt<ESKolpXKwkh1zDXMO)4V=wc6rYR53B5c-t@
zb40MkWZn~bMgRIQ6#b8G(R6?FP;t)XGsaetac!%Le^5He(_EkwZ~yEDmE~~g#*-Rv
z(@;k#O9w`UQv9-=hr0eTC9&}T6!BfQ)Q+Vf>6&v{;*u$-Z;}28oLreLQ}WmKEF+wa
z)lp_{4Lz$>HkP>4k-yR1z`7xz*NJ8^)m_SQHc0Nx;Z%V>SIA(NF#&CrelN>T7w_+j
zr%(TkI2-r(y!5r_+;|$`HNrmiOL!=cU#yP*!rk+R;_1`Gx6a+hwDxDt&KJ$k-7foE
zq5Z*X5i#9!u)r~zndsgklM-o=#aw$VNd|kP<58m~fvu(P4A*V~^QGh=ZJus`_cOm)
zUPv3c*#4W^sTaJNHfOsGq~?yg(r9p&I^k8Mn~R2zVkITpbwSJ~T43cPIGzVem{94(
zq=T&JxWtiORcs;MSyybzL(Oy+0jzzTJ=p9a-i{d>bVuVDCG4a2;x?-&s+ED+kfe#g
zHIn;#*1+LH7#vV!eUlB(5dy%-jJBi;Bj(eh*-C{Ua3nk65UN*pr2G}MKx;{Yfj{4l
zsj%-}5j$Y8VPT0b#wa7v{n&Nt5=5N>zX)U}v;b8=s=ubz?@%V^JJzK}I^H)Apr?Db
zixu5nYb6OY|EQZ{qZ5OtE))b?sUX-OCQe&BVAOetOcVcYh-PG}7$>*rxB+r~fiZv?
zH7?%F{r6=s-ehQu1M6dyW7Jp^eLL5ks+wj9%rJ4a`?GkMjq6RBR-0nGyubhAI1jvK
z^fwC*x|&rtSq*Ci!P}9T^KOebX8Z9HcwqOXpSb&AD4YpN3)a<ccr*nU*=lXA!0oBE
zPmA4IFl`tqX<OG<gJ=~$=KPb7D_{v>f!*Jef~<J%03B<sxJXqRW`Q5Lewd9;gOgza
z|7&aKiPb++ymLw=L=Cl4Yqg8{pi0iSVTfVhcX+c0-<&}avjxE#nU$pqQJ9BS8cu`b
zG6<(3NI%X-%g=JkS<s*hk@v4hECs>BnN?@kvkI!pLuf#CF}_uW{&kq;Cow$2f4b%?
zS@XiwdihYTQ(5cXZFEqF=tD#Or0VzaD#oBK@fEb<l3KBf$Ip%}Hq!7g%7fz}w`TMq
z7(oIz5>g9D2-NEN9%13*m0D7()jF<%nI6$44Ds670ohUBT&ScOZfF{CgUlGkotB58
zzTFj~BWzePQptIoz|foNxy8kB#S;!=L!8E~I>3)B_%XWFGGPjWAmm}2@Py?~SV9SA
z2~G~jIndbz=D?hMlY2T~QIoa_wr8vPa20P6E+&Y!6t`dvk4tz&P_ygfT?i!wCt-Na
zfGdV(p)VKX*DTNguo^A{ce>hnTp+Yr<+O14JWKKHfBH0K(}P<rjE=`+x&pq9c4!^T
zd8(c~mCn-?7`!Coj5-G@kOQS35<E<BF#}r_uc?#Ecpn#ynaNu_duHzRNgA~+I{x3!
zxjs(P<r8=GKCx8c$^ZWBP7sOafB(OrNd=9GS9pK}Z9^{?x`d<?RdOt8;*11PMIa6m
z^b^Hf#3Ig|k1&Is3|KJ=l>N_mcUZt51R1{DX;K;0$`EX{^eF`EktK$oB!J=cc|A*=
z&0I|e0nCeO^VC~`et|KaXv`XGhi(h5L{AL4gZZ9UG(RfENs8(@K1AspA0uJqpC=M7
z8umaHAK4pCB+ql8H%DYe5JXwuk&38J6qgB+oaje`U|Dw!8gZ}}Z$-F-)`osurE6k|
z1Ph}Nx?007B0H1DddzZRfq@ePY%>lPR)sb+^I@S^>}`|~09MtY<D^L|O&SB}@*)@C
zASM;;S??Q6D>02cp^Aq3Yi|_hxK@i|$iBvv^ggZ`0tU58mq1YwChHQzkA6?T8*YLd
z{vwgi@i5_23S)&1VlGpXcsGDdoG^=J5pg((&hZK|#~vGj%&5@n=~Ir;Wi1(j;<9jq
zLaO@&k4`4aN5&-Ph^S9touO@Bt=l5ttb$u@r7+w4GHE-K$kX4+2+{|VddI!p4l`8g
z!14h80tvshcE^hpSe!>4$%go&qbVbQYTbI}^@YsUOws_z$U4ghGXWDwMHFsejD@z=
ze*>}9q=J<A-)sxK1a}eZ$xvIIt9d~9qh0To!DzrBvV(A-VPvzIm=v@Lh{@-ge3P^1
zvJ2K+c1SkHDSM=xo1Q2W)D=T8^V8xz{@o<IbZ{Y-06Du<ZnCyX*Xu_(&`)Ohnb`%i
z++l$tt;{df-6|_91Y^TEY#50M_XpkvZxRX_I=CJ1+zip@I(hoE3{cWf0v7^q%UEMi
zh}+jnTy>;_wlq2kj;2a@cWsg`B4LJZpu2*6U-1>6pLzuE8oPBWB$8;?X^0YOn0aGs
zWXGc^oa!*>W*BNTcRjNPz_lBOG%k=pRdI5zjgKy{_zgY7RNxcIF*O-KZvyn5&v7ZD
zt2;6Yd^DOvQ;%oK<GI!2Ss7roMbZxY#$LYA0TT-lejfNIqsGN1++VYU)%lkD?4#@5
z0?j(0cc2datwW(1>WwQ>Q|k#)>mM7C6%js;Z4;=YN_QVMjp``V7oUxsluiIuU7x;C
zCI31)bbCX5=NMz!3-L`UIz)UU4&G(rsv?*ps1C^sUWX$tLZw0Q5cECh0fCW@MJ)lE
zP<J!DKhG+iu8nhs4qLLCXGUgc;%}Fu-j=aIp6^h`I})0q$@U80w3#kR6a!J%m0Otu
zw|qEuSj8RbH76ozd=RvjdeyVkap%;unDvQ*v`U9o%0Z4@F4G)u5X`>L%^+Ab)=ZB?
zsc~Hsf`4R2BDG-0XfyPw8&71^>kqPXByY+L#4T3|u@JTut)o15M|neFK6<8zaEh5S
zh?riGHhG%SyiuG@GS+wq^XB6d&ubMYyn?PcOYgMDV1QPD!9*ZSK(+vEEeFd=*fkpK
z1A{K1vxtrjwzKG<GEspM7hVuB+gPjGTBtp$B5kiq&~=~heyTA-!dP?;$NfG$K*I?X
zFcXutpmkCcQ-{P&la2HvKmah~WSA@#QchNETYbs(2rLm=sawTPBTP>poHg`gloQt%
zn}tkeGzTI_KQ@bBOatLUAlxYqc&3NTw>Z$8iJJy`Pf=6-By?ZPSP{>3uL|Tu_+}7}
z_}25v>`ra5Q(4)L=~^AgvGMLB773b<;P#W}_P%p&FNvsXI-P5xS1{2_6c28xP+LYY
zE_kxqEwP9<#5aOGz3Ifsy-Ti&4{5ZImkM@FaTBfLWfLz*PFVv}+*OV4;vX_-?>d+P
zpP6X7>ik*0qrkg?>XV45xtU^?6;4yGJJ&TADgi1fx`QFqO?R>}i4AitZ^CS1XDy@$
z>!RXfRsgez*D@UYdov%d67oz=7_M=b5L{WS9R|?FRBXl8jcJ32`k*Y3h%KBKCP-4O
zDaL_Vn|BN<`B=@x@2}aGPOw~v_l%%Qk5#hx)Jhs#M$(?Dy;&qYRatB0adD_QArnrq
zqF4TkzB5NN**)?BgXlx-P=~m*$X9w`G|p=8Nr~Pn7O+>k5W!+8F`N=gX)q$^ASeR|
z34-#)tUwH54QI0fBDq1R8mMcEF+2>04Zg?(rj5yn=Flil`Me?Q9xRZ;H6}pr1yoUF
zi&#*RjeSNL4tQ5MnsikX;0T}4Q_T(B`u`sTmvQpHbKo+yK&)f&?1t{}@qybVk5L}G
z1@hJwOn43JtD%P?2MDPsw^9+|Kj@!{5fAnGp$Fbw$MCS11Pvb3XqQf(vyD^Wx)sd^
zLPg-X0`Utp_L`|XxJ$HRMk5&1rh{9fZo?ADw+>2Sy9PpQYmDywy9{{Etz0AI3ML{i
zQcDUew$V?N*bt!~+XO7sPly4DCs@13W$;h~Q{BKjRJ&El5E^V{bEBsX8fv<ig~WEF
z*hQo-d(<X)a^uB^Fz?m1rl!`7u602LFVWn0>vqEdroRJTxQ#*11C|$-!#*acl}h4B
z3G{PyjVliI>8Mu5BOUe3El4dJ<KyTkYi$aBCAFqItl)0d+84J>@Rx3tq)<rJDrBQ~
z)=Fu%6vK=Kvvs_JHmUXfy)I^f9%Ah+L>Pzb`2fDmi{)|<4e}z#Fj)itd=R1Ildely
zszGxtinve%7kUB`v-&F|3GjJc+~4y7S{RS5ij3U!TMWDn>;d|l6*~;if+WkFy%^v+
zXUM1uav?+>$CBB^9bhvV=Q_DXaZ8`lA_@h?7~#WJ+#OWp`?s^<7cl1r0V*{EKm)bF
z%S&ka2soEfC8(1dx!c~6lX?JrH6!nEO#pMCsX3BFyn(;cH}E)T2t`J&&YDxxSL$t|
zHEdm!6EdF>klL1o0=cFl<eH)@<|nxM3sWABII_Xz)2F53J>jS1b_)hEvauO@^aD^P
zGq(xL31u=Y848ej-<nyCLf)}=?&CErFUB9}>YCZ)k`&pW@qod0&8;b9yQ|O<1nJpo
zweyxX2DY4j#0g2uFz2|elQklv1jeZ0Rhith$9>>lG0p;mhFzyhn?=2)8y!6YVt~=a
zkH8zvPMSH-duM+>OA*X)G!n`Tyaq5mo#9%~Xbp|`v@Txq$dOD}4GX+hhB1Rxj_PFY
zDheP3!<Q*?x-q@eD@XPc_ip#?;7E3~1Jn1BUW<NKkM*;X{VX^-p=i1oxlSMYCJJPC
zs9zR{7$k$vcm6DjDl5NAVG?7P3fcphFQcBKjr+`#%fy6cC9dJB(4h7ah^-2q7@`gu
z?V^i3smFUn7lwJIGl^te5v-Kda++JA3{=Mby?{bNkEA<Sx)Rl@tWK}>gQT2zeaLFp
zLt<^iKdbI~4ZS^w6boRqP1o?%w^{vFahr;G0vkBW%5;g)v$2cuxGeVTO}?*R7t7QZ
zLBnqLiWeeJ+@KiGQ4NSH>gIR_(#{;%!u@rQ-jIH}1^4umZP0;sDg%MaL^wXYXFfXo
zO5iZ^63R}|n{I74ovJRcf$;$X>?N8&AO5%9;_!M7`)|zb_ui@E_pfe`LfUG8cG78u
zgHXcoUTf@h-3YDU2_DhshB|yGM1&YguPMwTh*5O~m~f80(InjD`NbhCBIi+*U@ZK5
zQBG}CNA0Dl0U}b2XJBI`=%8ZfZjEc-d$Jm@b<6_dW>Oo#AVtey{gBE)l6X>6tWNf*
z)Sqb!cDBCLzLpjcqy1qI9z8}SY{ku#n<|xY67Gx^xmE~ItzF4TuBls~u4Jp#nO!|K
z69Jg4M-XV++iaL=1ZhP4peTvPzuCsQsJ9v=dMHU<BFP&trk5muY0D?zKsnYT7Ro57
zy-RW1T7kOFmoNZ76*qX+BIAHoL=#wQoAv_Ry6hl)VD`#pmpfdrsI{%^{@$xQ@Ti1f
zRclwF`{Y}_Ty0DHf+8tXHn8#bGC;$j-Ps6cjRto&@DE+uuDdA+DPGlX;wntE8n2$^
z5^k3QhpD_DY?o10(DG^@k2anMvRH*4boa^`rmy3SLciobm;hC!5d~(1*SosE-=1$B
za89@mPmh!51zHU*!g!;^+u`c@gxvcs;)&Yh%Vih>uYA6`h#6CVLYVq{RTdb#imHj$
ziYE)LrTwbnb(o;J#iFrG<DvP{3;5qMLGlDV#|bJ%wVoghLOwx^7qx<aYisrY__zyW
zT-<EDmUeRET{n-KGIq@bw5uk~7Ya)TVD(7Cu;wTVrpx^zb&fiEc&&%uyp9mi$=>FM
znZ_IrD{pD!dQ~)tou_oz_ue}sSjC;zq|{I{&-joK#T8zgboHGI7<+rk;6|&EqXkn*
z7fCs^1Y||BMB9hgv@kckE|(!l!deHz%WP?u8OA<eagKEuDl|%);36%|B3<c43hMwC
z=Z&7NjhQJEhaTC$rP?91PkgNxDir%zwTmWM{(WE7X3-7V-o`szdJ(?sM~S(=k};;W
z*#rpz|7WVb8DOiG^%n2Nc}o=Wk9fCXIR`;?9iW6y_01YY)$0loWnE0EN^lvY7R@`)
zFFKmpG{7+A<rt^}ty=o^`-?>!Z;VnE+jv#@P06fKL4Up}%J1uPSd4E;h}S(-Nf_(j
zVb$2kcJ02I5(U#UY7-1-hv9*`y(A=VeNThEgr|R{0^MIAO5DdVmSgo$ze}z0@jK5&
zLhl=YmW|gk)YEZZH~jSd{eT<$U=D%{=f&Q;);loxv+qnOa3eTz34FiOH2Sg2Te*RX
zQWvKHE%NZFFs3AWU*u+AkcoeSE-?(1UgCDB$FN2Ew*;ICGH8d{Rf{Gr=(3T+RL9Gc
zQ*CW;V;^bEbXAFSzI4BbeCC_?U4(tH=Hu}*!kz{0Y@@j|?YLl>yS0#G+vm+CT3{_P
za&gb*R#%S@oY^YAo!{L?Xv875=R$7Jj4=ETkzLn|@QT$@lP0>;(d+eR2T>Acy)s4V
zEkJ<Idd-_M)QfCrV<zx1_$osMBs!WHO#+bR#q5!j`Jg`F$y|A%Dh@QH8WdmXxkb7z
z|8?vikq5~=sT*%z5AOH<y?lZVYJbCyeh)m)K738f=535Yqu;>)hZ#lIrb!*jb$C1f
zfQR4P@O`*=?uH-e3w;*Gmuf{T1`awZE`EH{I5PsfP`Piy%jaSypja;CZJ3&@nrtpy
zJydi2u_-m58(M~^Oq-oRi$}7uT!YxRK8q&?t9J*_yE7AD7h^2*Ww=o&Z?)o&rID$2
z`WAN<LlNc(?NNAJy-arYQ~0e0SNobbV=F$1$t2>FOiZ@_Q)I3I_@H3(V$_Vl+q}T@
zc*_pI5YOBw88SuIsm}4VD}1e&3&Vb=O<;EHgYovie|mR%a;lvE3*o5kgDMR;ST;64
zb%-XWB6&j*;cwq;_sD>+5&rV)6ytiRtxChaD%z^Gr%%^GBODfrSX=5L&oo?)c8JtD
zK@PH%$5V|shg%H8oB3gQVTR=`h95R}+Y>hTTWlVhe`D}qb%Qbn5I{XF+XlmH(``kf
z3iSL4^iGGeCwx9vHkM0MNeclOhT+>ly-|k%Hq^Qv-l(@A6769p!X}K|W>R!~_~szE
zrhiEJDh2jD^3mZnjKl`ry2|W*ijEKa^#&$_?d3%9CP_>(K{A?FqizG(pkWO3z?#i=
zxN%LW?5VpEy!VXA1~BOdRR`gMV*xNJK@RubBV^YL3i1dPbBzw^cz~w*0M$X3cP1bT
z-}d%0!uiKe=E8;2N$6UdIS@thWJs_<fCeH;B}bxH3&%I1`;jf|A;wqm|L79qGopb}
zeqasg^s+*+n)nUn5!+=TU3$`v=-HOsWFSh%0ZxM1Cf<gk5>vTPZ%0O3WJY=P@cAC-
zTk<`&J%Ls)LTIcwr(&U{816Y3Pw@c5;s?$$3|1kCu}DK+CNr8Q*ePf{Ogm){dn5~*
z-sbje7kQbbxXfz3%rabNwOeNP^1#F<l`<&E!CG*eFpQz)AYRnMXb<IdZNOc(S0rDe
zK7Cr(MjP3hmLNb8A@5U1U>wL<c4lt7W?`72VSI%qDi?}s(^VOUUvB_i9oNOH&}wCa
z2b2|Pgf0#DIA-qGALwemAFz@3sBh{9DZ{~a0cR54#FH!lk^v<Yd$wg{SJNW@7VkIE
z&$!6HPvPheoDnS<#}@g^ZMJxi=4=c6;T5)LNhIiT^hX62kT_)v^pVH9^N42g7?>QX
zq~CNZsNH^cKX&2e+Ltvza)yY@rQM2Px=>H1pXgN4cgEjo1L@pLzzmsvL%#xyu7<Jc
zmP0#Q2u91G-xr>UByWu}yy|z~(SYN3nf#84duB4xn0GP}Dgdl<afkmQ@gN`4W34!x
z^B=utqY2;Gzt%VQyx<1vQllS4hlH&nx<*Evm4b2{k|AmN_~yz;dYQQuZ-N=c5;xFY
zH9^QLNP}GtI|&m447*<J2v!2gD$X&#GBpJbb$}DhrD?xGfyvcdwYz`I8n#X_g-B~~
zT|nBp14_qj1(7a8Z$=#TltE4o_xGllvD~of7|mE}?-o`Bes|ICQKVNa2;0DJ=IRS`
zT0@$t;!83L&ZU=0_X=4qWR)WlD9+F<@0vPP!F)&_0Tf^^)w~Wy)rlY-BeD7EQ|OCc
z!fbG?_W?f`)fStx5jYIr-I$YrPZui_e=)J~?WgFXF7KQCIr5A~lvOBuOgDi<*@sFn
zY|g+AKKM#-v%r)}<~Ax(31?=~kXL&)U0RC)-&DY2;oKS1xw?h7N=+iXJ-)|8&IAs?
z?O5>kR?~{@j?(j*sm_HCBxeulXxlNMw$d>4kY_47s*OjW(jru3YJ=Y_Y#0&7z9D(W
z7pA;-TD~&UlzoQ}u1KES;YN$28*}8He4zyY;hIBTkTZ9GzwMQYwoWDzbBnp{qd%Pq
z0=VFNPl8c$dqjGen<mhN7(+7E+w`NW*ly&h*vK|2BhKMq(2%3^qRe(6w7`13<lh9!
z00kduX#MIh83<E@A_u|LEbVsI^MSuV25P|9tLQoii;_GCEv#5$4I*wn*&yPdHea~Z
zoA^IqVbC=v=&?EY*NqAKq42HHK@AoCny60r&qr^H+ZX+MEG8P;Pkf*=sm|B>lhoQT
z8PPMCXWmIao%wU}9wm6oXWIzL$L^k5a@yXvx&gBXk+*dNi%4{%Xlt!|MFKNrvzAWV
z*I%=4`9-;Qr@<ZG2LYYI%c0D~0k3pmaOWVV9V0Q+F3Vyj%pAf@w5|%fH|Qj5;nh3B
zCWIL9HXmhhBC<vptw3!DFnboFfhT>0)=N;qX#DK>C48`j5A8dOfwze16+#q_(3^&6
z&0jIfH2(NC+PE9;(ow!e(?~7*!$E2vlh<2ve&z+MZp}POET(O_X<OmimbkW=5MXYu
zfKjCws9In|q^rzCKs6F(Z%Klz?~!|=nG5<uWh)at7r#7*nZH0oY-DoZYbKXkEqL6U
z7LR+>?}dq+?oBVJn?B6xl3|<VbjhuPTJY7jSiA=YloB2L>v$WNYu4h4Q^5?oTpweI
z{qi1XiX~u{$9;;^4Hrywr}<9Up4;W1@wijL!?jpieGD3=^%SGc>MDN%K`yntB4fb~
z9yu<do=ZBZ`Dtp66yGK^Wq(PN_pg&3iAZns3aIv1dJ*&rHxJMB?~`fN+XU6akIOfZ
zXN`FR%Ffe@2lb<qX+Qc;%p`+vJ}{Rbo6704$>iTZm#<*rK$<9%b*e$@j#`kUN7I>$
zZiN&0Hmxn1(<5P3+yRgFx|$>qjssd8Z<0zo#tP6E6JN(hCr8~kh7m&i7lr6f<AVyr
zqG@zI?c)BPpes0JYzq(K?lw9{XoQQ783?p4IMJ43hbTXR0u{oprB!XUIS&j2>AcA2
zhgGZxI9DEu_(!9Y!RS<ObTYCwm(&Ae!imwLSbBY<^AA#NVH9v$W+a8d`&oU4mVhO>
zz#}t_KIrbNyk|@cLPS7dheKnBszBVAMuGypY$-bM-hP+{^A}~A9L5w?05w8n@G(wy
zyX}GUN43Gp1%m9<CO-;nmtiL&GFqicpMkgZJ|Hjwjm|Onzrd_NA5G_s&tG#wB&vAf
zIe(c$DD$O{N_!fh1Dz^9f>5gEUN|y!uwIREM*_i%oP&A5aGMopycNt>1c$PW=o=3I
zfj~)cYDX;r8v()aH^PQ+e4|>23V}1);3X8ItwR>7xKDYzi?;7VZ}l!|<2PuJ9iYN@
zSH<!G->r(GrdZf4kTLk5u$FWe>e^L~_#6EA8{%;`oIqc5%EGWf1-YMN(lWLo3s=^o
z0Wr_a&t2<A1oz!_ywl9Dx`iEe6<0mGT8DDg<%F!!uG}Ljlgzfp+XL7uS4dU(yRV=h
zCUec1MUq;=2DlF6<*~dm3Wv+l6eB88pWkAjpL`wa$Jb;m{1vOa)m3l@pRbRHmRlr2
zyqep~4d9lgAz0)+g~O}SIyl~Xm0xk?I0L%wX2s1kW6o`OSM0*o@xuFd#oux^{WTBv
zr3HdJcz6yXOzN%5dLuD~mqFuTx3$My<{N6L{m|Tm9qh}kd@1HbgH((82=J@RxIKzV
zc#12axP4;})cvqhq$P4?;<tP4!CILIDjFW}j_(prGj7sCHi?Ic8|*x@Z$ns@Z1SK@
z-fo?(oZEZfxBb2l+d~`I!6wVh$BD9zBoUkAm0Hl+qMnSe>|(=c7*S3?;z2my#Q9k~
zEW>SZayn<}DH>1_g9zRfkh;;fwNd^&PDYRd3kK3SQ~S>Lffl2jmyH*2WY);Xg!;E0
zdebl?ywy*i=3x;g&r=>N#N?&g^t(|pN)XjaYYEU^nYc1;nC>1>7dN0^cd!z&@j)Ay
zr1n=I8UbSKSd-h>h5b9LaKMo9in8amrZpo<)bg=q@K~_0Tn39z+4$DhZ+?ksSKKB<
ziLjmcsk18VfT99b3@Dt=i=xb(nvDpvuDLX2W1J!MjSLHgLi_i)eimrX`4e?_sfBk+
z-|Gi{wQA7rAkn_4U3?D0faA%poad37#B`pG;wlm=k=&3V?c|i;HBwa?RmiT-aP|&Q
zA3ZI(s6lHf(s>oeSyYW;p{z*fd6)tBc8bs{sUjrU&W_m5?J6wi>oDF#uGPpltw-@D
zh-99TgpAw=Vcz~Cloqfn$Pl2h#ovZ&kh--_W|W#6`2)Pz(F?tz?De%+2;X&9v#&$y
z^eP1==r+_)$S0?foC)z}q}5x94->Ld%~krF1lt2%@BBg$k0!k7ziF`y<n*Cg4e`^k
zm_120rleKsXVAbxBWq(E<67Uh{{n&tlW4l%M)z$prZ7m_+H!j$<aiE{oeFOi=M<97
zGkX(fw2C@_sr6DF=*D&|H?NDOg(7lYqOyT>4RpXMd~~_!kr;Ti9pkTv9XqRR5W91c
ze4$zI!9ZVfnQptY&pr^li8?s^YewXs?U3$BIEbDM!g}m;n|Q6}r)c-2x@Q=0kEdab
z1xd%8*7wHJ9VYw!9`k1irO$n#qubZb@MN}_^4hy#3wrN*YB#o)HjDd?$U}u!ZIAyB
zYNBTZmda}*<*sM!3%bW?U)y+Z^-Yd<TQX_%I3NqfW8niuyGU6}W^;6YcLnz!96WJB
zl=j{ZrS^8H(QDW&RLiT`CHxIb7O4?2bRLr|#LlmJeB?=mKoP9SKVHImPY6o#m&D5f
zX9(ZL{KdPA(GiM_o+T}-_*F7{?1rY`$ek`W9klU-2vtP4&2Rc{LoO?K@1aCImF0_E
zBlxx>95KaY_c>F+XGwqV&u|i<XTJ05CtoMwWV0u@e}jZ1$iG9f#He+()Jm`u?qC1V
z?0QMevv^5|Zqluv;rF}167%%eZql#*b(p0=RX5%3v7VQ9!&WjJRc6Cj`h))|^WU1$
z#zdZV+56*tit^~3dmxYyuZdRpJD>?KxmFuo-aH3<VWHzO;DKg7vMUnRcy4*BoRov_
zs-dXQ?N!rUEDmG7^$&<2yAn;p^F}txBaUXoOl&$kf+nJzrH1x<eRpF6&&oZgULv5)
zolZjjL%c*3p~Egk%`7Dj8gv_@pcqK28jAfy?23~#EbD`?cPR|#SLj_j5KPWM>41DN
zc>J>VlM9{f7zF!{&gDb^NhdKdaS8Hp6#+1rr`&r&fbN81$=RLlY59OFgep_Vx0wcG
zPFp!gqqE;W&|lX!5TKPX*GLVk7op!FO5*r~Itf1zD*GGkHgxhOwna<sKT^|j(;zx)
zT#Euld0DRKd|N*UXJA?1mgSBuSyW|In5Yq;$cirvf&18KSxV>+79Vt<ygWF2cYUl{
z>D~fqee^G_kjq7xCUr`SzbE=C9fLM1x8=WGygJ4>rxqZvi~+_<;3O?w(2?Y<Wb73l
zZ&ctq;*p*wGP<zydfzfQ3wga0<W3%VzV8*`KeNX>y8XOmuXp^+dc9ZliFr#O@hAJ?
zR-rGw6?(oQoDVy}Dc(s?YkB0|8KMUs_1<|WhdWI~wxW~Go+~a_V;u11X;nRNQ04t+
zRM9#1w`%)QYmASc4{|Xu060&(h%)HTtXIi-W-swCL_E@}kC&ob3O*#nLd*imsF*e}
z<t>zXE0`9OMNm7D&&%Pza}15i;3$C0r5PNPMQ?I^@1MTR48G&#&ECWMr~@Vy?a1#M
zMVHTI{I$0SGRBMj30DYiB=<^NvfLUkI{x8tRHgm_8}d#wve8uCMq5IQ-Hs1hrK6P<
zM*m_o6s&>zD}l>0^MnYq4cpC<uZiH0$*I%Ug6LyCTy4?MyyjYt?PGbyW|0yIHViv*
z9mvv`d9szi#ey=|Fm4#lq0S!gWI#%>u+V_wC3dYx<S+}K)NtnVtfow}RG@QB5uR%r
zD4BMOX{UbL=a}|69R}?(CEU1H6B?afZk#rqYOt#d%$&Zjbo#!n)c0*XecwXs`%rPU
zgtf3IeIl=hm01UC12MT%*XmYXsY`X}s-p7w@G{<q>yuMuwP@9RxQmzSI^K;6broNR
zg*wESqauhfJzU|Nklu{wO<15O<_=z8$D)vBC~ihJL0AYq7rtGM?E9@+1S4$~#miP1
z-61saD&DKh_zEi9#n<rvZG0VKW3I5__$H(`A-#cSLYuB|Y^Kpp-JV9!`_CiTGSlcv
z9Zn+{hR>rzBOHF(1|gP25g>^OuthLyGkHV1MVFq;x%Aw6&gXb!!uE^5Gn9ji<z0<>
z6ycV#^?jslK9j4*JB6WB#BCia_2osDN`<S6e#P1mjf_&5E0PjTya+?O4EQ6u7OD`(
z66g)z-~;&x3(p9O(_)zz!VrZNn*-$pe4BM|(?*H$gQn(a;~gJ4B8l6_CVG#Qaqr2A
zuLRuI)|pIiFiIg^W9H(fb7|+q0F?mi0F!+?Tn1_tZ_ngi+k7aWMtC<9A%I2-y<0J8
ze6KTOYMmJclnZ_>jd#ml-Avi<%{Xm<X{)5$;U0I^28t}=b+|n_MVw3Fvy_jo_dq)T
zD?NN=^<y3aW^ab?^`1}#p$>`i5>E>!3rac~I8h4wQ`W+Tv=}CyE%#iyrTIRRe#Rj3
zp6~CcA8DfWLrsK6kB}5K_^oh{O*%@y`}>Jy2RdWlo{vhqn(i@5{AP5DJOR?`mQSeP
z!?MQ<bm)U$ess>h#nIN`C)Vl)PK*s~gVLDkTc}VsqpecA6X>_VRDjWh*5MSZ7@cAz
z@PAJ=1T_4SHgkrb7<zN9aC6w!wNoE&s4XW`*fwk#v@1ZkRQF*YZw-WlP68tvx}%(J
zD$MyUuILf_9G>`qFO+wU?HgG*Dntay+y-v&$X_t^wj@bIB1uYvI6X51dGyFRqr{zD
zhCViye#2-m@eWr^s+X2#FT=cngM2NHoq`*oc?I=By;e7DA|_q_A3TrJ*0sAl`L6l6
zlc$kYisSvf&-bHK^D0iBKGh5ZY>Df+U|NbfP`VICHN^iX3KhJs-BEowdkqKKfrFFX
z#?|@Z!eBzQXa8{FwdxAma%&V8JG3Ua)hY>S%%#K2clNvX{7OLrIKXnv0*SHXO=k&G
z*9U0oO>ByqeK@;;rhW)^!^`sz7x=0CVur0@jmIu%5VfhbK=jC2X$RX3vpb3zwZv&H
zI{b~chv+gm9(z;%PWFaNwfv1f{#%wT9^2!)hKuh%%J)c{B!6Y`n|?-zA!Bn=TX>94
z0=&iVV{|g#_J%o1N8LIG7{;~AP!2;{*weohJp9)1@EcD!_&vq|X#MJ>3>10X2vr>d
zntCT_<(;6ZIJGP9A}#gKht%NBC*cB?x@F)CEgp7-H78#s;dZpdkJ9l!_6g*yv&GAO
zsf&YSOws=#FlUksSOUT9=BHExg=|Kvhbsy<Sk-8Szo0T_uJCEy*z<RNrE}R-|Gv`=
zBQ<?eFQAOYLv<)U`l$yKo|?1Yn?SzlwpbCDEUR1b{T<=2ceIDzRfM?U;^<M?m>eka
z$AJ_{_xHI|PrXXc>s}?2r<d&2C&^fVGvA5X)6Uer+L=t;>S;9%5^STLVF-BA4PMp-
z+MSGVpFYj)!@*oqe3HIKI`?SZjOYDh6g2XxD>JlJ-*aUq(%DC~DqF;QzPup@C|{=T
z4*KXwYIxWm<^hlR$5n-FIqm6-{ORC^_Aj3_upU^Ny1C&oWKN6@-X0i;rCWo+bZBN8
z6B$GDX2IEbGMUaNQDzr{XK|_$A;atAO~Yn(EJaOvC#7vas*{=ITVr{5!<LY^Yhw(o
zx5ZVmeX-qb5(A^#IvxlB5S50A2Bi->hev|iCOmH}>Vi{O<g9CSWg_d^PSi)gPJY*0
zg$NHodaW0<{Y;4WcF=3yoG3LR#BVEaR|#!4GhSYkyYKMMcO%t?+#DX&`?TK-!jOP=
zfZf5%B+rZb$qLGQl04CsJW0?X9V$R88EX^KYJs)0X5;Pj!nO&u_IZ4?B69=_M{6k8
z%T1E6(<MP~&xZN^Jt2yECI-D)aSN~vR04+mC(>k+=R1X^rFVL3A5CCRJS+=52hh(P
zt%p*ha_tu6{2d;yYC7|HK^KOtJ=3=5>z*0U4U%U6;1o!TOAN3G!&s<1xW7-#ZBW@B
zu0jFFqW9AMePz|cZe0C=ltI&)*1+Md3)I~7Ho8wuEL;KmATzkld@o{yZa#6y&FJv#
z-=jId0N;4$;^|Y?nH%l<KVk5r{SdTc1zux&hoLRe^!Y_iv;Iv{BJ?^=8<~@F*l`1#
z;!vRrfeKwTok{gBK<RoRGnWgMbq32VFejY%dH;E@Y)nZC*MKo5Fdla?zJ=+h9|!H7
z_=E9I)K~Y;Kk+Y#61G6mtAy{Mzsoc0xt0-C)}ON58~U$lKM(7@)&vjul?mfWXA~)H
zMbJSJh-g~>o)0+eNBcN7xo5n;)3JA^JL>9892y%LxE=!q%vOgt+daaYo8S)bI48v@
zP#6LoCo5m1TkTZVSg4tF%<KWWli<P7Dvk{pWN8>dpo8u~mY%wK!t7LIe$3o}^k9CV
zM<@)`OB;!S;C2?g?vU;^(q&JR3UrJ!q=FGOoD-gQiyL%o1qbE&Dj815&2}>WV=z!o
zF&+*6=W4amDc|(@aZ3GqbgDY4?dVJ8l=s>)Sy^3&DPO9SPL)vtMZl>#)sp^JNVDc^
zPws^8TLLyT!3oD*M^q<cn<|VC<CnhG`l)iaR?qxft1pF`OFQs5M<Vvjv%0Sb-gotZ
zrhC3d4W`)h3Xw*k-c$wyPgg!sRyK+5miv-_eKCO*lT=vL0RE;w?(6^FV+5<lWry{Z
zlTRRqKqs>yejJzxWEon#3~mQ%aDacr%EDh}VBrT-M)Tv>!9}CY&FY=08)dl!olQ-{
zPA6zi>a0qBNjl!5c9{%Nr!kO|tW(^w<%Gx4Gz=bwj@fOjDa^CkSoG}spNe++eyY=!
zpQ@aL%a#7fe^JRd1DlLcAUNmvJK6q7l=|%gh98HXLM|o5#=_{DW9%KCW9zKKQ~Bpy
zeO9P7F(Ht?Nw+(+7eylYZPsAYWwK0mH70(S<Fgf9;un?oT*dDwftyy8@l}nF?pUtk
z+<PRu6#7IT>o4uQ`0tdi59jzZdeY}v6+?63@jKVK_`fntfz1F*po+JY9ri|zM%q>U
zik>N4Qe0Cf-eoW+agr)u0)Ce(Hz4X&MPovwHilON*n26k&*{>^EZ)F05~4N#u$l2o
zI5uYg<K*OjKH*Spuan&l*7VOmeIGOTvA<r9|BfLFcK_r515ir?1QY-Q00;m;uGR=C
z{~&pY69E8<E&~870001PZ)9a(ZEs|CY-MvVV`yP=bS`RhFJx(RbT4CQVRCdXb!}uW
zZE0>UYID@RX?xp7vM~Dn{S^}5L<5LTij<cmpkQ9dOX3+j_SjA)iH@!YBAa55A%Fvb
zwiF8g{npYOKu~t(yyrgmCXYp+H}q0nT~%Gn(c%98+B@8PvP_C<_^)#B<Ne`-;TV&a
zRkbRkqoYrsJ`HD>{jYME7nhh7%)-6n(eVRU?Ma?hg}PW*c~N4Cw=$JUDd&6ZY%Ytv
zYAN?#y?DR(Qq5#mN+@ykzxEgFY*wi}3o0SQO)tOrmz-6-IIeD1GGFY;>s4M<<-tJ@
z+gPYf&U^bN^D3XOQ#s|Ip)MNBAdGsZS=SQRJ~-gtVRAK}@?#*wD5&DD4_v1CMUuW>
zs&eWcqw4myl<6WI(!lY1bx=Wu2<%{BB<oV{l`tJJn#somMjyYXu?-i6lz+%zbAG-m
z@+v<+kFs@|ic49+1g0=`P`i-Ty2$qan%9*6RL;~@qFdH^Rl<4CRhr7erC;dum-13(
zbC>=~r@vcYyjN8!UCtYw(@OqelJh*R)XHW2l+<-NF=O4sD)lVS%4$!=K@i4|HYrrA
z;?aaFU{clZ*J0q*Duc>4h~tNKs%>V5nQ9R{E{f!4s7m@hIB2{=k&x@}k0$(iX{MMa
z7T0iC<?mn(vdiHtNmHnzyVN_ifELSPnF2%xBk@fLa7K-v`5A+Uq3c@S>i0f$9BS$I
z_P7I7{j+^>jV7+qpqH($E@a^V7r+f>7RHxkGkpJv@}aA$e6BK8$)NAIRq#&IUBs5B
zRU}=0+Q|QytNGptdRt9pROw}0##APL)GMjOUSAFlsv&??`43esgWlJ@aJov0Qa(@f
zq=HW!jYp%XUmZy?`){>zD4`VxEOTs2D1r%`?d{!N(WHiEZw!;wD!mC5^uUdL&8>(s
zBmhlBA<_x7h|m_oZxL6+RA!ge5{fMHB1qz5FrFlj0FslzAe6jtN>r!GnMlHkOkt06
zK`3!jOp<<oM=59?A%~hx4QPCjH@FQ%5vS(EJ6cMituujtz40t~C2=e;D3OUAN3##`
zvM&K<bd&oC$oy#b%Xos_Q1M8VcE}TTQcn7Pg%gp*)u}oYc`WfK8_tso(0KI%5acy9
zmp2k_Z?mDYIrQYdV>YPk^rha~ncKgxTvy2|xC|#|mNu>ZJS$`ZaE|*e6skRaWvt8~
za4s^KLLA>DqY-5xjN&vqJB#7d{A94eo~%s|TnATfFAm1AF;06HQTIg8?q+zVP8RDK
z9Cy7l9{KA<V_#o6h{KgxxiM>umBAEO041@4pGh8Mu&whT38&XVCK9L@VLtRc@mjq$
zyMfy%;|z{4*uJL{TPp2>!WVOYmi0G_7?xh$-frq}cqNNVS=`=U(afbZZ}=o(4&_M#
z(<iCxX<TCK&|Vsb&`hPWwX|dK*CP%6Mqq6+(;rF8A;Tibu&qj@Fouo=xM(0K9_)rY
z8lBhPJe+%2p<`}Kp4-gKZAo*Rh0}`wHcJ?7;pb&izW$WGDe{#psvF*XQdHsXZJ<{n
z3qy?}Z{kg_7gcbuiEH{9UW*%kxTziD`iQ_}fVmo$t5j7%Z`ea9K0TvJFXLX1ri_bK
zdr0+!Wk0S&>7mL0`Y*tfC9JMFtOnz-4=qK38m`vm5{4(RDGS@mP1Gx%QFBJ$!1TkI
z@F#ZUm+R+8cTU17{%GSmr?_)C;XOR!RCob9^TVXVGZ1lxTh1C_()FdWD?WKgXhl@z
z<0=@1a6bOLf~kK3s3i#dl^*HXO!<cxI>YA`9=hTkzIPo3;*B|b=)4$~>JLd+5FeU2
z&>L2Tm~Wq;AW&fk3UjOa)D56_l>?!-Ug2z1L+rurZEpr0|Ikc<EhDe1E19ibx*pe)
z_*GIZhi_hp*YWY;6Y)5H-G3t9$9&EY-@JbJ;{A(Xo}It=>G_MFUcCQJyo{e5jlUg<
zXYhM0-ooGe;ssVcx+nhN#?t(9JQC0OrBs)h>-;Zf*I2p`iX<0+Ne41K@u22=A10_&
zkpqp4z){8AN_8}r_Yn0M+@iSPD*qI~_vv|&<}lHJ;Pylat&Wr-3(J#uJRL{yb38r9
zp9j+i(RdUddY$-(--**Rp+8XmyFgNbHxR948ILFBiJFvfa8_TJaXdOW2&CN_`l&i9
zJ*b402u8OG@Pf`(Sg-^xA_z1D;iQBx9w2{(M@0SPAYk9$LK-N_o2!dFZIEzVoDJ+4
zM?dZd@2Cpwfj5P^QkD7$G($!e4cXY!?;n$NEnhF_6*&*+{=O=IN`49&WRy=J`n&JP
zCNgL)teKgCJi%_MzI^1<<^M9UL-S4)2haTo(5$5-%9D(iAqO&|JVO$KyO$Ft9bT!7
zzX}ihDsr6ntK?dzC)WYJLb})SuY9y|7|<T@vVUu4L*~&FFZ*XrckCzLLBXfg7@$g%
z4E}5!%J2yBMl}iLVGQ7``uz^%`fGDO<?wodhXI^E!y9<I5t#?F>QME|!;%3v=M12w
zvST=sl%4+kWH5Yi_yhnr@5ir0u}QMaR7Sa&E9L^CtacsvcjLTt-?BT=bm=(kduiOc
zV}FMK=C_3Sp#M1h`t{(6EAfNJs8nCS?!Sh7m-|;o?ikVlD*z$+1DpmxoBV(~tbm_<
zkcA?JhXfy%@Q@7v2xjz<*onwshvq<F!cPKBH=N)6R6I%#4wfe~_vzoeuo?l9u&@S%
zv_IOvdjNyg2ltM@dHAiszu$Pps>+Ni9!p>aEsQ<#pcuY9fbLZ%9t1;LzjW=$%91Nc
zeE|*j2v5utsj-;1g9c-mGDE};@<-!ISjKrjd-MoE6|mVfkIN{FOFd1SGzZvNDufCR
zhE;5rB7Q_)hDRVD9@&MVttrp!OrI#8XN3oO*&kyjzSdER9i_r2uzICw+BF=w5|4l+
z@R<CpY9NdznxNqUuAmRXJis7fgYlpr;bfiy0e<#KO~Pz2F#Rkaji8?=rje<k5{RNR
z{A*qT)s6@q3HE#if6Jv>RQS8X((tg(IO)uFHmMl=tKqqpbWPpkFomrrGg*{;QlQL8
z6Ob%5GGrsP(KD5L0;hYSF4skJ0ULOKB!B<_QkLJwf>3$1v27y>U)Qi<sv*q7vt+gm
z0%;db#l7=9dkXlX*Z+hY3Qkj8!d?B4U-bE4I2=m1VN1<AlR!&4I<RXdY#)(I?4rZ~
zzL_rMkJLZ`0F2_VFR-YZ7}R}=SQyo&>Xqw(!2TM>3pzU(1HJ};Du=w#z(kE<nl!K=
z=mhPlol5{sxrY;p-7~MY4_-&p$|puL`DyQ+th`f`2}~mI40J{;vRV}R74*-DR~o`b
zJ6oS%Ao-{1HaW3Z1z{a=_OOuuUdyt2oN0mJ^CG#D4v1%!Clo+}sf;ZRyJwq*)yNPJ
zWuk;Bfg&TZWC=>ZpAjs_!^*-4Q*a;C%DEYt`(Nw&N@>R+r@<_hN%3A?$$VYmL7?JN
zR^}bS6=<`l^5G8&H-ppG718@}02U;+tERnF!VZplz$EE}LR~H~WhQ~#E_!0&AuGS8
z^eU++kbM;bC4JezniW!qrTqvu9YS%_I@Q*7BX0>-Rg*u@to%iv`Xe|Avk9>#=SXbI
zxh}d<?_dpNREUrKkcxAn>E_Y0299S2kflX0C_~ea!+eF`MQqhdfnAVfKP0P?CCu}<
z7$(;+ts6MAqP2iiDq0A5e#)R2U1E}XS=CVdQdU2gviKe;qB0->%_WghxjX!Tqg{%*
zSckxM2sO<jNRW^~wcn^~nLf{pUkKH#Lo5X6yqTLSURs7W?~g+O?~kyrf&UvqFXkj*
zBJ{Ek{K;ub-9G~uoa6&{(vIL<uk-l#AQy1J0AE}~2Unq%Lfc~0Pdx(*u@4OAQuX0L
zosRD4@glS(Y4kIP08Gy-_~K`JTlM|k0wPFaq&RXov<7)i0zv=@c+>|vfhwHoGnn@(
zO1vF+<#5pEnt?=$8-7sYyu^pMKrYHMDiLI|cyo=b&2;uPE;*CdH<+p@^#)TFrq+aU
zODC7}8w6}&CG9|f46$8etKk=jvmrLl@5wd3-*CP%`8S+TA2PT?A6-d_JSrXHBClsD
zyzgCC8&AL%z_|<<VR)|bUrZ3qNrb6OLddU@l};?ySq4lKAuvjSMk_cwWy~Uk`aH`k
zwYb?PS*1H)fG$BP=x`1vC{F(*bB6~IJ!P<=Z%04{0iUIk6ed?c2{>urRTB0dEaSQ;
z0B7K9<hIQK&I?>;;BpA9!q66l1lpoCRKU=!A&o?HE;?~H7g?|7C^-$q&e_wg0z%Ox
zbSJn^x_%Yo)D1J>975h$C?WKx-%U)w_>-6|HPp@D-oi7mqE}^87HwsSI+sx-B1lII
z7qOPsuqb{23_>1fC|%Eo=gACt<!JzqRbD0OBV|_$_$T)gn*sn~!%EFQu;3jwcNAb-
z(4hMy3cZQvhqE18DTnhS`D7<i0}gO(q9Td#CCpgaL*hoafaLvf3j&+<X8F|$X$_PG
z8lZu)aN_mt;E^I}L2o7Swnjp)+Hel51?US2gR&uY^cHEtWPwCH=d=67j%;*ONEsS%
z22i7AiGY%DRO-g`9h1%Y;km9+e8OA-^jy_k#T<v+6R(fnMw4eo0#hgRIa3u9<uW`G
z20H!93{6yvsY{gHc|_BW3WgS}Y4h!xDKkToq)6V*)0@`Y55nOGm|6ZvA?Is28jKXl
zB7b-to}1DzMI*N{^|lLZ{V^l2Xe_f6OWxIKU1&d`8MGT*Ha8$lK)(9i_(>*;7fN?*
zUS)=@<=M*aBhBOSt}R0a_!KZzHj^pP61ox+sg3=C(BjRmw^87Dyvjeytwq*dX4)Nv
zT{T{~UsQA?TvwC-b;SA&|JR3g@gbE*GrVTs`#2ij8y@>g4wtH0t}ll0!6U!q|1M-Q
zzmlHL!@a$~u0MQ8_WlN?WSV@Lu7kU`sQeN1hYxN?=2pR@S1rug69ab@vSjXd!EflM
z3ZUWR;e!W<fZ0ak_`w5@cX`!Ow7cY|?UL0IHcJ<?P<-qa{;*vbZ*QqtcrYB#yDHv{
zB1nqH;y5}M_o92^eso_vh#rWC(L?b~^o{s7`c`}weJ37A<B|A28jr=3XnZW5M&o<p
zSv0;co=4*cBEj4X%$;HG9CIb+E+DrSZ-Da$WY8OpkMG@o@bH^&zkB@slc&#~_s+yq
z;ve2rr{f0))tPu=UW4QNqk}4Z^yvOs-{!uiT$cr`0A_e||CmOOa3*6U`Ch~O5O3w_
z;nF-@n1>_`@hbjl6+NjeQ$6kd?_OV0Mf$nqpNp_><<BRuI#UGdsMiaz9Y~He3B!~7
zzKW0j?_gP`$@F&l>Ed=-ehmLB_^<LXI34td^1tS1{V<qDb9os~PyeeFXMHc@>+KXM
zyOkJx9Zth3wE17*S4VCVURLd^NO|aq+r|R`*enLx8vpdGqkE(9>+vxROAX4yZ2->(
z_r!Mt;@N?w*0Xe)1%M^9;9LB2KRk25_iXFyNI}9M_|il8(nI=?I+R_X68HH-Bm12)
zco2#*xQBnn{&(JPeTT+97Q+WDyUPgA0Vnuq497(lkB^8g6!H*gW(9w67Dkio<lZFf
z_rvluJ3EZW133Un37-40wBjxI)fdgPX;>TqBnT9bT+$O>-CxjC)(|=()0{U%lbDjk
zLDtWKQ>6|UA{9$3`ooKR==Tyi5Rt~oqv3<;@+deSpiDM`C#(sylCP>INaMg^F`!8@
zV1{AAkIH@^Pt^2b1f-SZbTz0j{WzjaCV0AEbH~IIN&X^!I65o<5r*P)bPJuky#*fG
zTY*0+N2Y7(b5j>chErhSPDf`#o{sU)@mUyEdhj8s7rgQ>L7rDFc`<z9WhFSx75k-X
z$h+@79QE%ZWWgWro~*G@@2jD_mNRoXg<@k^BR)sXu_;d<ob8jSHNZ>ihi6m3<b6yH
zqgUoBw50JblmsJ!b%lp}XM~6oe7;Z5?n0{v2!K?VU>2s$_40@M)(#am0#Mt4TmWl)
zLB(fV6=5d%No<Np;R;;B53Ioj{2ZSF!Y+*j=O1tiTt~fmQhex%-=khiA{Fsl)GK69
z{2KKx(sfV#BkEliJ@HG_yOMLYzUqmeqaGkPAOPTO=t=l_ANBIIC*Hvil>8p*Cp|bV
zdRXYP2S-K^TP}OzEj(pC@%N|)1NiqkSCIA$#;SVa4b;ke;&s$ZpsAmrGBo@OdIvu*
zquz~7Q^<aff})=IThyB^d*TNuTzr5weuQNB<O}`~eDbeR@6)nZi=SYKui?o5RYtwV
zXz}f0(Gy8lDd4(3J*zM=kr(rCAo1Vp1l|@@0G_Xs;w@x<0}1o{ko3p;H)??jTu60^
zbssDq%xCbbN@x#j%lk7Ze32%z4^eMKPubt({Pk6y%_;w4Hiwy|viSQ^y_Z$g`!+eg
zkjGH`&8G~8^x!x-hS6NCi}dDGp3iX-F24O1dO1s8RapDM;yal@`+oyE>$i2OJ37LY
zeD*%Ufz6K}em91>o4tFDU;Ae9V1zH(BF#U^0vmaF|GNirPKl*TKhWsE#qrDvAkcH@
z$$U1xe-9IGlFUrbHCFxh0v<T^+Y5TReE%wY13iU)J{)1fKav|5%6IrbX8-maKZreq
zXFun|GWnpO-u&X5hgk0_xqMzF*zRaVEx!kLlBz#=@bKaod+-j$AK0I7XVl=k*)#a^
zci-JRo<V1?f17h{$}4g10Xn|>?%_8HzW+#VeY?1reT!}VjKjJA?Y%jD>u2iq@!~%G
zkFV5K`}%i@vc~xs9`(X~2P2vQO+d20-|LC_<JIad&EWX{cl=&{xWT3`Xwv5Didug7
z9sW=6)U<ui=a;-FWBJ_(Yb?}n7llGFx;V!FASHeGTEpyOkt|?vi~P5;`p07!-tqCb
z7gT2bw^9)tkEoT)<ZXHJF2|L`{~=+Smz8eiTiy<r?+G;L-{5?iWt=Afh44<j{&s}_
zLnh4}%_}^<`~<5wUo3D*XfUSOGSB4At515nP(r0==izr3us`0;Rg&Q<&E^kg4`!5b
z37x!;OAez@AK%?DxM6J#Ad8WF_$`!8laJ3|6|kZY<-<i{-hVBZRAaPwfJvV+>gzYN
z1wqJ900XmUi$%^*oZu$>9cLR@+i&GVc;Q{52k<*Xw$!`*cb*g+FU)%~haUb;^D@7O
z|6>9C*moldYe#Q>o*wzd!x_NM?;0GT4<iJ}-!(WMk1mcAdS|Hl_M4f+!Trtv`OP=q
ze*4{b_)2Zt*Rpz?5|E8%_YqJ2PJM*`B=jRySCS!tpXo!eMdtTl0O{N3G@22P-fTGo
zHCM?S>?E!<R{q7qhYugl=Gf6+@Uu9LzwqX}NFF@E;r_B(7b`&C-`)FWG>0Aaiyq*;
z*~PtYU;=)j{r1hp!*B82_@!JGZ!f990?+{@{GE2=e2g3U7usY5C*O=8d<zSErREtT
zc-ko6jlcT_dUy4<n*Eks5jI}noL#B1x_MJ-d@SLkSNUv~ly5oV0@}%vkIBDsvzg|=
zO;Q@cFq~#{z~7iNUp&C+K?KCmjkAGo^Y1TUDlWd2$1r4zjgkkLPp`kxmb%XgG(qzO
zCIlK=y_RN=Nh!a@xx^#_AV5mreM|2+4aouuNP4vs0Z4L$_+^!>lAGkyvlWeLF^4g&
ze*D{Ny;#tIk_&*2l`Ph{M&CZT2WzUqa5kF3s;tsAOxS#$jOH-%RsQK!!C)i_9`qXG
zcyT^{yO1z{I`QGdd-o9bc!UffZ_1mCBFCc(kt(9qH#e^duZ|ynhYL``KKqFew{I`*
zKN!OZ%tlDQ9es0*C9?Sqmss3S?mvW9&DN0LUOe~)U&|%X00iF;a9&FFJOiLjMh}jU
z=lGg_lz<mtgz!JSyPYIq$OLx}lLxf-^{#@^;fB?lO23s^{z;=)SQ`&O;RuCyz2ojb
z{Pq}8S%rvV4v&bMD*2k>1RkH270ec#DvLQRX_a3kRZbZ2-hCJhfjP|f9E$3r1c2cf
zhxOMVD}-e@@nM!Mz9&S4Z{=0~L6aVc>dc16WqA3C!6>0EUK6?dqo=g}FQSWoMEUiP
zRqUBYn5&;nEo4J?^rxz=-TRNqYDXZEDGH-+G$~K)ts3eYZM42N5U}N$=C-U>a7M~V
zsQL@6Mlmep3U^$Pi+@z7`B^y0W4dK~kyX$Ilq-)PhN3zx&f?Sj(WCLh1LU&c>05e$
ze+Rjz=@^9K$7)y=NmfELGOOZK6qCUJXQ36-{aBqsnfxUZL#*IvRWIbh0g%p;NoUEV
zvt-iwe(aRDr%3rn@Nq*<e}#O1ae0wU9k*|p^-d1HGf}hqM|bf1{Jq~uCQ_Zm!_ny8
z_}=K->G*i~-SJ@+jfbNL4-Tzv5wONb$HV*K0F%YfuG;<4{Rh+Ph^j@lcu@7RV0c8$
z2(0OV=-0|u{Wp3f#2ZggYV6;uS)La&`uOKiv9x>&3|llN{X^hafE@;QIxca>ft!Yh
zF+N<t!||D~SXDJNtEy@9wo0N3wWv_-#A#4@QXyE>5v(YRtAJahl`~7;He{I^je$q;
zJrp=&-HHLCVt}X^Ag~c(3sc!)5~FYrfFlgU2<lR|TOS|Szy(u5DBsXz{J~>!dwi+w
zRC1?X>cL-aak#iS4VTN>!SeJQ;&9z&?_<&gO$xpxb{FRDM#~_L2-0$~ecA;jGrO>v
zi6I8efIBb1t$__FYC!4AA@kXoeV?*R$}VkoX0n;v&L}&x*~q-Ye3dX?8O&E+*Qi+;
z5pS<AB>&pHkYw?E!!qZuRa@6yT2&aHE3yP*#mSy$fizVyK~Ch1W$210j{(==Jqa6!
z^!_(yAlyRUeb$Y8fIrg=AqEFH{^syqb&3#;z~iSJpCKIiDfiA0q__c-cK?iVO!N&)
zg}&RTuLSe~)AGs5{af4SWn>z&$@l3~^!UI_en{W@j=o0;-*}nd>JQ_+QJmf0(&=$~
zOW<iQNiHv9rJp}0shY?8`>IA8HF^tL*8-GC*-$ayZCTOwFs(WDCcICB4f08gYDHC-
zx?W|kW8v$xN;N#ON^a*Dr$H6FFL1*o#r-ED>)@*mAfH<7;qRsXy`W$H@jCoxghh9h
z4F755zid`mFXi=Jy?N}9*GP_+WqMZ~f7{a?RP(||G6IH$qEoAkKcMh!e1^M>9*@sF
z#W6j26i~yE6b+=Tzs8@8fBb<%v5r#VKkJTBT&Ziu(0n#n1u`rM<w!&dzgk9XG#6MV
zIeZXFk;KP`Io&X;VKOL(iAduhNDhlQ9*n0+6eRs3JPO8rND9OL80Du~JRYP%!2yDM
zDLsUzes%~S><=G6@}*6_q~uFZzOcy`lzhR-Nt{Dc(htUiJUqk>n9j$l_7<jAsB*N*
zQ@V`z4<&aI40YOqJ0q|Dxe7k<{RA$NdAkfzqG;YOtYSRubT}w}1MJyXhXLnHtUD-C
zhyPONW_~WTHOMgcLg(gwF0>8fgWLr5yD$fip#iPAx2|xo(T~&{9`G)(_6|bvHt(+*
znh^}@Bwa0&t=mAz(r2P=Mgm<{bQeTHe8uH13m`dB-^HU*UFT$cUIoK@hZU{#ckl~K
zJ02h6%sF638^TMJ%*T=&%~!zA-tqCi{&*%YNl|0_%YNekL@;dykuCguNt6peUvN_-
zSCzg3;jbPJ5XZty3`%0}DmO3%%cR0PYq_iF*fl9XU)DBT<W;j^(-<7lo6@u%N|sR&
zj=z10sOLH95aOgLL&zyZ$f4x90a*Hjp1ycx4)BA6ZPN_@-o=<-1Z~^ly(dZbF)809
z6>QCnErxGzTe&|J$y@<Xz}dCAzW21y{To#3)wGHXr2A^<@~(12JL|&-;ZU#Za2yW3
z!$GqRQpTsf>z?S{z`u*Un9JfHYF?qPH1>5}!UI50iJH7XbYW?_1-GT2n73s1;gW16
zIOWV}=t`rC<tc*8)?Gq#rDaUSwACl5`hR`*`llfiL#PvAl;q=*byu9N1S_!O2Z4P{
zhio+UJTI=aI=3iUC50}6L`nBfAu20T0W&E%kldsVU7`(N#<Sb&!R91|X*Kh>5VDrm
z2V!s3vwFz{ZlsD}^)J&L(FvbFfNCowkPTP*Xxy@{viFl{jD;{gq#lLBOLVFgCO4b}
z@?<Or_iu0Iqp=)62<Zy4SI!XZ)I!aAh~=B}ZPb7aA2G!vn;RV9LC%kndmKpHpNZ>E
z_$VG998^FedX`>jj}*WX4jO5mSt98%=y^}#Kirt%gus)SY=x3=I*zulZ3p8+uUX(^
zjz^?Klg672kqL|t=yxcouGUx2i-gAfR9&j7j0)6l?Mkn^wGp*~oLNiM87np5z$uCV
zU5YfUMVenGg{qcUUj!uzRh_VXT$&`C-`-Y7ciPOE>*+Bd<a^?QfHLC;Xl^`9*MMz-
z(ZQ7;etT$OW17pMhFa}u09C2EX8_Z6O>|=d5YL0DP^BxEX7?4{R@Z4~vfJTHX-P4A
z(YaT78bZ$YwPhfz+6KZKf3DEB^t42KRs8AdLzfNltc7p3oDj(Ab)dV9)1qH`JyfvK
z{N7wP`8~1?L5N6<?!8teWjJY}!?;J(zLo?5D(>lG4u|e4GULqu{qW&Kouc)+OB9)L
zg8Zmvl2n!7VpmASqLI%Eh(ugjM3hfk<%|xaOyw1z2iKtdNUx`C&x%@BfZ^#mU!&m+
zo3z5okgsP;)}+@jR935SE%K}auu85}dK2~j@}o>YO4v8a-cNEZ|04EW3cfrpRFc9&
znPlal1b9V(r}{&pVozD!q%!Jd2%#xnC}i?SiF8dg9v+KN{D{l1`@e)<6m~T9_I+zX
zj7E(_g0z_z`qjJzYE*IQe(~*sGp`8QraZn@WsFCzPJ#``2q@lM<#QY*(x)ZNDCLy^
z;G}rTJN!lVQI(1<cJ%PB5-14&9+xX9%K%`Mg7fT0nhK}kn`cjO@w^n2cKV9Mt8{&-
zG6xLMnH503`Y3G?qKg~wPARTVxy(PkgjKRNP-XTpDd#@Z!1g+OpRZiLEN6wfkcLb*
zRwiN18l;ZL!Og5uSXi@OqRCpCtgv?NHLIqQE8?saYQB|U=zM^NN^Wa|yDtE@XkN&Q
zv3K6<%TD7f1!y@Fo73VfVyYq{j|ZRNl+cD)wSa_Z<C|lR(AiFl{)ZNT???dgS<_G?
zO`7KviqTOF$&OuWQSuDw`f*jG#g#UyLF+c(YKsYTGU~xYVa=r59K93aY_7P!Xwguy
z-mCUT0JLE!&I!6ri5{bn9@*y8)`&Le3pjr+NISs;`(7=)x2W-{{juLHKs?NpFO8^(
znCn>-+!JWQmE35NfH1nX(OBLSGC?p$U5!${URQr#6WUs2rZAdinP)h0SLV6O?Gv09
zM%sYPh6S=l58N=@-50HCgo%4&^u@L3AlRNp!BwX$GJ2v9Hb=`Ah3F$H+ECXFX}+?6
z7b#f_b|GX7X^%pFDJkn+11cLM@&@WUM3)`P6lN9tXk$x88@mkmM<ZB57%$@W&Jvi9
z$ivGe4RanPEm6<ATmj%Q_)w4TBF}-rhjs9qti=-cdUu<6GxlXI8UVuMCn*SYU=c^R
zxTj!Ki4MpFSfmqkldP-!O){U8M*T>v^do$I6^#U$lc9J%uPPWJz@J=H*zxXG3E3j7
zD<Go)+M&UGv4AXuF>N!2j~5aU`Qz$$S>*Iec3Uu7q+NRg4)GNsngTDJ@mI|wzfBw`
zF@w=qApU-xk&Cm(Ky6_*CcVd|@CDm^NrYSUExm9>eG;M(jc$uF>6mnxv=nX#wcyjW
z(V2NtF44dMe_wOSk@&>DgF^?Mm3igI0v&7secPPr`(}pk*EMwn)*sk|w}x35AyZ)A
z9>A+A3h1eB4|wPNgPxL+m%_vGK6X!dJ;$Yg_kriyJioC8)8s;?c0e<;(Gody^f<Fx
zC2}(G9l-Ec$-np^Ndf0O3&&ZJm*rzlV;H4_7(apZ&m49<0fK(k{U*8-?=tt?pV9D}
z2S9<ElBU1Mj3@YXWH=mZaI$g%`?ysSA*@-@mmzEw=gdD*fuLYlPaJMD+oy@B?>yly
zB&>$)p>vI9MzX+(M^ABP=?vbcOXPwNz}DHwgLn#%YzpHXe!rDEH_vs)09uHd2h~;3
zEKvIp@3j`!e6=x<t*&>}0W5Xq@qP;@r0w#e$YyEXE*$6iY>mXB=O9d)dtQ{jF^c{P
z$Yk%j+{)PAEfZ+@ZJulSnkTHIYg9Qz{j<h>=SntQ5=?gRht)JFomM~vTsP{Z<Jhge
zIeM-m4c?MH)_HwBRcB!smFU7r3p%bOvuOFJ3|3qZ8mY!)omRgn`3bo-Bm@As=kJjD
z2~hUbV6m^8wCfd46j`illYh2YwPxlQD7vf2{Q(;<<6c5s2oGe`?D;-8m+dQqO+8Vu
zn)U|0zKXPmD&t)(JGoCf6&rJ<av@K%vq^cHpT)ipnp4@w`gtFw<MwuB`1Eo}Se!hS
zEvi278`wPo3>C3;kPf}>Bdd(PwNrQ_opDT1p)tRFG{P0wS7cpST43-^WSm%{mnBH2
zu-}}ffMPQvVQr+0sb-sRMq^sEVt_eUC{EKGdT^0nBj9Dw*Xwuc4*((H63)@@Ku@0x
zJ!BO)#bP%aK4fgJqg32POE{yhqgmY&(m8(!#Am~4P@>AX74x8oFsj6cPtjkaOrNK}
zMR^^wEf%>rMC(Zy{*5F>ZD=hi0BFK6i8JV0PW}lk*FoY{GWUkQ1K$X9@fLPk5Khpu
z+>8=_9aOY(P}?N^Ho#u4@MC6~VQ>iyuAsrCHH-bkJWhDkgW17BL64zWLn1CYr@<3R
zdpCU6F9d@{bXhw)3A9&O44@j7=@<MfE-{IVLmEHOG<$x1f^;wsj~0iD>l~FK^wQ5?
z4%Xq(CFFB`C}1>hUePA@%8t?033k7Ow@)1`ByCgx8is-^n0|%qQxXF%%22+k$t04p
zz+|#G9(K%om|;_fr5~;kzjLW{>*7!AOyRm)51;b();=q@ci{jaluOPR9s8N@0tDzc
z3@F!NopgY8sx#~km>?#n+(D{;&59v-^E^YAelRNs@D8I-+zjQd8G;RI3h3#{+tb6w
z_4s|SCVkZ}XF!%AP8x_)!hAX^ah~mWq6}UMq;a-AU|pK3u$#%ZD0_a(st!!y=6VNu
zkZnvdSq@->GRW%*6*ElIAaAC!UixZL%R$a%(Z7<HUQPk{qZ#CyjRMuAleI5JB2qi~
zA=UP>XNX(e)I<IfXeHRe0hL=G9b4ITV7>NP7$oJOgM;$mz%2X0!R(QHhDOYb*DaQd
z&kpGxdV9(}yTq;Y48A-@ODVLk;|hmtD1`~s61wFwd44%0u=v1oWsPEAf`CM4hrvwA
zkVKbw2Lh*(ezU`}3ET>lYL<xqiAo-N6<62)6piwnOOKct3h2&`0}JLCK-M5b^ooOT
zR24OPSS@8o-MAE{A{-IAR*Xl-thz>i^gS}q$gGfl6+jaHB}W;?-c$Pep6rJMPNAx}
zu~%Lj)XQ0+2<xMF#b2R#5T!m7q$#13+UpJMfM+OPdZ`V@gI+}fQ<7=QP*~?UD2=|W
zB=j(;W=kY7eGN{Bz~9K`>8pt@bM{_Q?W6xY_^)|C4E}3~KhxFqS4Zwba@t2FDI+y<
zP9wbwT=dafYR{A*KeEs~oMJyC%)(`#>fe5EuZQ-ZeS|++n5lWNS=?H`x4Pcz^-X*3
z^G~F2w#SZWh-xz@D*8sE6aeWfnUw27z6X9c$U=jv+14J-)^qgF1(a`&H>&m%uVvH0
zGHI`s>}VEmFk-&QAhk(+xlD?S<Pv%56i$|{gxlLwpegB2Vc)33aSL&G1L*CDuOK8z
zs*;c7_(CVK;bUw(n50do!GK87hmBYep}T})%ae4n1R@uZ_&Qdn%QL}l%GbBI89K6I
zC&p`b={$=^K-#QLi?fsYWCnE?@%nUTDlV|%0(~GBF|7tEG>b*352;4#8gUU`3IG!t
z7;JM%#1nqu=$KsbJThZo{b%m>C3RanvdT{r==#|tF&?o-;?iE26>jYwZz0T`=mE8>
z5q(dcXPu*Cw1thVA)-%C$w3wZYCS6Znfu&(y~|LEmM)9~QUR!#3nE{sLGO6p3q!Mv
z5@*9lJ(xtAJw%ou8Zt+sL)_9$p{Gjm(u31y-nKw)%d;-t-Y~Q>snD>Z7i9tG?<!a5
z-UW85xP;e2%ag<kUr4Effb1#`E`bjU4`1TyEjlz$76j!BkB=3W+5PeTtCugX0N(X|
z3bDMor*VP>SnH%w!gI52w*-klNtukSgR7xd#knGBLXmu;4+RS`SZFf&7#}r7d@OXT
zSlFp1bmxOCUIYi)FDU^1>Leb)rYS!uLcc?jRK5W?f&MJQjpl@-3=o@4Q?)9oYa)Y>
zt>}<>O}@d386~eM0Z*hfFC{lKVPC|vq?A3FJo1^@i)L{)g+`(k6vo5heIBU3c8i<A
zcn@cyWL1S(UgG;I6j%ND1!`HV?0=&8&Q2G2nTMN3&U?`^9zGa9JVcgiH9)`cu9g1V
z@DROuHB$l_=U^G7NSeDoaOrg`#V@U=bufp%769E>gD3Fsna$|0AtRxTXX45wL-{_H
zhZ%6C2T;0CrTb92|Ku|R?nMYFKn$nc!*_pw`+j_W3<EbSmm+xL9#;dL%~Tx2tR5ex
zx~Uqb|E)iP(4;>%W~|XFY|J98MPr`uecgC>^&IH%B!&KR)9f@-Xkz>no|8Lfg2cGg
zbvGJH`+s>Xw&!-MY>iHj#qT|eNB=+DQQV$y#s3dx5wm(xqM`ooZh4<iwmzTG=l!Nh
ztQ@&YjPsiaYinxC1|nPe4epPl1}N7+WT`ZzGucxqd^AEgg(cmX1is(Mw{3Mma)~>9
zASiGJR=UO;B)O;tir!8n3km!5dh-Y+y(`YUIgwgY*!R3LzmUe6t3C7l6Gvkd{)V8|
zg#N_9CUUC-%H_R_QE)u36q0Y~?3w5JmuL_VO`Rw^@55`Lsc-0{>|Lq(9F8lL5P0rP
z<nX!=#Zc|sRx6=rH{SA<)CiG~`fdUn*^l@4(IccTB=xtV#@Df-$yR?n_ZPAmzv7ND
z;Pn2XWbtHO5Qvpipw3of^fowK9bXIme#7rK@UAE$QdG>m-|+j5*zU~t?J3PjKlFpF
zmOyD<E-?-X`Ch`VdE%`GGee$G<RBj=vud5BM!xlZe*KaKnzG-K_m;#Ez%g`Hd|cvP
zoLI)HtLjt9*>IROyE_fi{t`WhE+=M-5CIwUR$^kZ4Yc-76<V9iS<d&}lyZA}?65*2
zW*&qT{MNA#{~_C=X8Y}l_Z*uGTTXl1v2~anl%B}M)%LdKPi7H`mIgk~d^`1nm@MN$
z_tv739^N~dRJsf#iW&%UV%XZ;UZQn}MN7}v629af(5HhNS>#Bjk$}c6W#CBr5SbNC
zG<&H+&lHJQw&oABk+q@wS}J1SVlT%O`yMcDN-@iHNs|ya^Dzj3C{R8J%<YK@B{b>x
zXW=|fkpV4+<`(bZfY#h4kk~G0%q)G+2gyb*&O>8)kfZfMvzciDkM`f3mcH<%iabx<
zxq>!5CeCqyd0z*`2$G@G2yAf5UYr9Twl{!i#7$I+Pf;e85qyNWvM9kj1w+r$B?RGt
z(tCDKV|2<do}iq|J3XOrK1lRo@sjQ{T!SuktC(oKJQ2@Y?e;TUobgYIUYJbN9ht3^
z=G!x1nA+`|VZJq6)-`QX8%2coI1+=c4tw+Gt;4@)9pcj-S`!Fz&_w~^V2_0kO~dhD
zP3-jqOP4AY^z40i51sd0sq5y{#>-$v`F(PE7WG&$t|!iC$!sZ&Ufp>)%U7t`FV2fR
zuio)nF5F#uDbP{md%76Ido-;o7^(OXbpKR|;c!?1N&rBFp-nt{q&G!=eFOMb`w=%+
zu~DG!DYY1e0%@7&;W^s2TUX;S5txgUiJ#Z*Q~%BUFU?ik@fM3CGB1Kn&VhM2c9#l%
zM&oug(9?W5%4;%nc>hXQ%i;8Q{sKNnS&ejsAitf|4KEPVQ^{HcPJidET%f>hxT_pF
zwx(GoL`n_5F=3WoFQTB?hL;r(Scqj(T3sPUt~-skJ2aMm%KirPhsp_*DN0#w3$M-*
zAtaZQkdt|VL&jMmpv!j(YZWWc?K>^aJ}F|k$Rk^qdH{hwjEx0`2)n*P5YwT4A_;J}
zz99G@&&(A9nsyp5&gXWr%IG(;C7^LUF_q&--bWokW}H5>%B*-;P?`TOR8|cbH23WP
z=1z1#p+T&A;H4XQ;tjlLjx?=fHiTZ%#82J@cn6XWRr$^;s=yMHGrDb{Z+tLwAI!ZE
zCT6CKI#x(o7ejUn8zSBHiDu^+YIp@bAY;}=Np9?60%nz*M|-`#=diyBhyTif`{@lH
z^};^>?W1$mAvvgJgQPUZorbYVFvB_^6|~1v97r1fjyJe^KZp$Do;esy(H?2Z`)-oa
zY%HzI+dnl4ch9<VH^G1k64qfkI4HgFaPm|qe{Jl7&Nv>Q^f9%HCB<~p<H55VSPs@D
zraL{n>^(heqbB9*|4zX=1iHPR=&(y)AtnNP@Zg}ph;3-nQQHW8dV&y0UKqtB_zKK0
zWH6{e{iUfd&;0panmgJ%v6_x%GW2I{2xkMLnW;fk1V&JB+S1x?h1jU|#ZUBkB#G$x
zPhduk7P+(SURkW@x1iHBj*J2m+5qDq0_qb!8o<jtKbjJs+8bXr8%+|dYV)YJu;`T`
zLm&I<tCC?nB>N`L_3TDS`08iG4f-D5<_f=U@AJU)dMG1$7buL(fMbVJ4o)DW45vIP
z)(zp$(wb{bD+;6nxcXO{m=gl(CG%v3nwVNgF5o*HV}I0I8@$9r8sAzA*^=JP;=iS5
z9`;4S2eCsOJkG|ML_LnsJHVV>S<pJz{F}MIwdF1E$ik6e$wtlj!A`-x2?*Pv7Waxm
zA{q|_F7#7_JKrKq?6vO?xYhGedkU!tm&(xE=Kl@3DNC0@b6MEHT=~I4&Ym;rhTF`9
zj-h}uiZQ#+ur+{`RDMyi8QM0({k`Lehn_fk5xCW@&XuU^g8qgpBoGs1T=fAzS<=XK
zps!i{cf?RBR4Hz6vEHN^K^V0roT3htK>$Lp?6xNG@c21X9;3SfW$GPPz$_7ojaO8=
zk8384EUk-PxG~He8POut07GtRY&xOok~5*mnKme*3-v;GxwUb#+6b<-1rHN7302&H
zla6R=K)e#y)){khU$tY8N)GPngNWT8(i3zLp=gy#iO941q!^UWBzDHbG;6vQFtQc3
z(|25jHpcE~Y^e~R_i(bLAtV}3flR0%M?;4V{Z*yfw15s8lVP}z4SYPx<6hCLwF3cd
z>xB^&U>NLhNQ0%m%cOA?@d#iUCgmiZ^!r5!Y<ypdSuFA5J3%|5O%Y{eIVOWw!3;z8
zEgjLBXdF^16Snf%n|Ci>zW(X<b}R?u`yx{Yxkwwl3stMh8uo))VVEd5x^qQAey(*q
zpPOC;&t8ZwwXI!OQGJX-iJ>|$l&(pD-4_2lz#uCyw0{FRoQInDERKSrpQ6Mh<)_I~
z+Z`{%=_rCp(XTUnooQg3$K~Nttl{s>98{}9epLCoj5gO%KD-{x4}%1Lvf(vq73RYm
zPPu`Uo3IucQfgeZzit=h6kXJV-GT;<2851?%9W1)Wn2Sgu~}M{#E($7sj=Gn?mEt}
zxe*)Ta<pl*x=lC$b_z4KG=-A>7-o)k-qH)$1M4(M5jRlS42s1%4VFMdK&m<mkI;-I
z$E;$yoIc0k8iVm!2*v363};j)_UZlTIO13QIji?~BQ8J4v#_`EjS(@rMLAeG7?TLh
z8_<jf1SB?~+h2gLot>fb5|R$^2$%%&VL;G3d_Fs(0=Z7-x5C9Y%^L9(b9fWQN&FpP
zlO(=(<iao(z=mV<*<o@>ZRqdh`W?|GGUT|UnnU-Oyu>9ZZ|aR{(37w=1*{2@!2~R6
z{gSv4yt-6!i4(D3Y)5h~kQAK3PkA;;*a1~GNN8E_iQ@F1v(*@#^ZfISe1)5Y5))>F
z{1CAP%`jF(Xc%O+;<2gN&us!%?CXl8P?<MEwx?=WT*r1)1XpLNb|`KT(P3j^p_G#a
z-aeKF%z?Z@?<&uLGRq{J70lKbYWBjq;DN8a%I9#<D3YYG1~vOsD5vP?&pK%!FK)Cd
z9QMmDUQWTa^RS4~1tEG}hvkJ%R;PAgd4DXDK~PS~b=}tqiKN*v2Y?z~o5bnRV4&eO
zr``BzH<Wga<q-AgGRHUO{RV)ns4>p`>U+Ard4q~9Ff|?SB82t97~}OFOLp!GB%j1N
z>>h+Wg`4r<fU2qfm_$N3xv3zj0|Hv6$D{O<u=fiEOD8iuI9=ez-aN3B6J1B>W{zz$
z$KA~w+h&fpn+Y5KDQ0vY5jhMe8UBd5a%KnvyZ?{Hcyt(4gBX_T(B7MpyZgh}M*yK~
z)e7ywwFaa@-c<uuf1%<Hn;vqcakOK7k^Oz0%<27*Q`oYVk_Hv_0WcAl^m2mgC>}lt
zPsY>XgF~npVT9RWU@8p8rp^-tb=|!CfKBBgVixqze#Ogfeg-~--@#hPT+4Qjta0s!
z8e`$~LEt`iSh*hhWwyU(hUPwb=*`IA*8tz%NBz(09RH)uQF=wTzq&Qj=4ju+GGf)S
z(*~*zpM~b@CfmY+&7?1zY#Nzu;0ZvEo0ezSt2{Em3OHj6G|~U1{+uaG5Ir47<G~h4
zx{sT}GsSLks*~XZ9C+&k$FxQv&BAfJJ(FvpOce}dkK!>jISAZ&IR=<?<3ixlW&I*%
zk-To2Vs3HVY&9E>+UaJ|(8HUVO$@ljFm1*?M{GYFee*yJ@41=WF1Ow)$J59qea2!q
z9v?q2By@Xv;d93bo?>|a0d~0$X=}w3sZ(p+I$C=A?T&}vjK&YXwekP}#UPM<oUnn^
zwV+3LSF`)TRP9TcpV|$`RM$bYTb0cs@W;pf0Apwm9~?gjxfh4S2h9z$RS3U#?8ca{
zG4M5Qp@kZnAy6tVtz8kF<c;f_;e&_A7&_&6_>G<J>STPRrjj;pb#hG4H00p}K)&#G
zD2o~Rs<V!V$0qN)dys2VAG+jk??Z+^N4D2yS#{sdfN(ttAh*WEI|f$0cKpw!YR5qV
zW}-qRkwX*Z8<`0>*g1t_eES#vt1oN7Q%5PM3VROiM9^O3R7@~qY}3`F(G-8--H%q;
z!LQK=>1@8?hnpJ6gbizoj4_opMNq|?#+$Lb4R}WSLm@K<&pDl?K-t4HQg;fuIe12v
zz<CFQ1k~2G=lQk5SV`<v<`#AMgK4Cd_`_gzeJihS(ev?FN8-XSsj4JZvs)b%4}O=j
zP}S`^D`j;X<QFLh_z3m})6>!5yEFbv@s`3yxTJH{RJRDw!&s<o3a%CF%&Oa4<MsxH
zK&W}32QwZXAIgc*ppE+!Uqzwg-wkPbt*(2KvunhZuX_<}#PP_QUIM%uYf7SQ`asrr
zQoN6?4sL27>`)+zftIJfe1n9hK;a?I0!WA-r6g1a`W2<gXBheC5pwh-di6yoBq_;4
z6x+l%uyjq|U@l&n^1QrIx5%6yoz}7I1oWq)P5UvC+$TVqFT?({)dtza;te%9FXF3g
zYZj~1y<79%nIGy*`8b98=K?>oi3}5)eNAjyZ5XmkUiA%)=}U9o=?Slpz9fI>^7eKu
zNr^=VYfQDBh~V(j;bcoFtH|M+HC9$=tZe+{rN)$m0vEz>I05p0A0e+akavNWShPGj
zS{fyQzW?$fBTuk<*pWS|xQEV$)I!lU*<bo)|1Z72pa_BmZ!TJqasQNBqZatIwr=tL
zIKgH}wcdy}-jlvk2X1I`8lto>sM2_SO05wL>K*CQJSXVh%!*dE3Q+u%Zb?1kgEy*W
zr=pqY{n1^V8p%h9S+k-><T#w%5k0qTg+Rw5MO@$(;^>~v{O#Z%3ou|D=AWvs3v=t%
zE?8K(E3RBh@ks66GZpphIG(EJ^(;pDEh*A7$p`az7Dxd+eHk7dQ&cb(%0Xug-3ah&
zq+3`y2}&_&xah;i62!&+!SX~kY}1<_ikeQ_swTVsy3OKO(<b+6&ndt%RUf*CVbdgA
za^jYhaa9YeJVibW{0QBZiQV0Z8LlnjuivC=t7-sb3E`3FdGWF;yi^u(hbXxtKFt4m
z>(f=M$$n>(-o!mt4IX>aODl3Af#6hBX^)L217!^j^>!}fQ?+gU-<vB`Y*pl+sgeJt
zP&u4gH;p22e4ss_DdXqClJwNoDle)etH_-ON)=E|>!~Rd`)WS#^*H?f5LmT}t-7K)
zoZY=JG2I#lJRV~2v7HAk?&d;PpQOy9zX}W*niMkno8Yq)G06{gWJ^?)E#j@dD_b>J
z>6r?2P;Mxk&Ef3h(A<jsMwJ>zWwixYUHWUq<-ay1(J#dS*vjy06{Fll*Yk9vm3K|J
zuk_x>TMpjQE2GSTAH{EE^o6{R73#Jcf$+u*uMlR;sW-l59m6b^q0k+jQ6qEi<XU%Y
zQFnWkzOxT@iWBd1h51}+duYw>bPwj##F~4ssM%TSf^UN6{WukC{Ii5Po5ks5c``dV
zNCH5tr}MAVv(pltkE4JeC7$!aK&%IY$^2`q27e6svp$)_{9{95_h<FM^_gicyu~Hz
zG+>8U;!0eL3k>RfP9F92xpxyIp>uJ2n*wIM7AwH(guC$#a5?4fLpI&-0r83^Q7Qal
zQ7g5rVjxxH*`zv&=P-~eyo%*%g_6H3l1u^~SjEfWiblJF=C5Hi7jVX}SbVJSsLu}$
zZpe7{Jm$}>P~8iF)!rXMiH}s`k`*u<c%RdBR0a-o0D21#fc|;d=z$q<UAzk0cbU-k
zj#lS)w0h~O?zf0gH0#7$9(hS#1Y4d+N<YYpRVRc^gpoB7Ymr0~MU}a|c2YKKbnc=~
zczXS+tre{s!EP9Luttn5GG|DN8`h}Vou1iC?fv~~c#cCiFqhDD6m`5qu@7K8kL7^e
zcEHKJU(!t@3|7*WS;kjplMseHaXB3s+1D|&i{kixoWTq{LZ#=^{A+0n=CDi59XgiX
zG`DjN#AHTFk2E$?%{0Wwb0VmlBjN?lYt;0V7BHyf4o#*#ccB4e)|(7v%y4eTq~O5!
zRI)#wBqy<=t17oLr^(mZ*+l8x0lz?KPgAp5O5CP7FShQe{F=uWB*0w5Gb801oh@Jx
z0IHvmW6>}I!VEni@bzRMV~h)tI=}oH-hsmF{zTz7pVzG7bdpSqeg-o|K(T-(UgoHk
zjZ>Q(9N@iwhO#f!ppl+$vF%6;mP4m82tYl(Yl=BWwr^gG7lgm4z(O=&#B=Rumh@*}
zO?6JRF~ANmi&Uhuod$fY*K8K&VovcO_^Mm10f#vcQPd~8kTJWWm=4AffjF6WGor8h
z=r#jzUTPq;8pJsRxjL0DS@t0ritWdch)Q6MC4dZl?50}>G@4>yPrpu)er@ul(2F^A
zY#!<RdK#IeJ3u^Ts2?ycfW`F*Oe%b0vUX?(J<+eRn8b<oS0{La!VB$PP$ROQSdAh$
z2*v;mtI<=Kd7k!QjgXl_hD(E1MRRRxl%;;JfG(W@9$y4=IPk`(jE!h!7ShGbESB~B
zWQ|uZTLtQtf*e3g<ng7ycof#A<t!H_r<J0;_dQ8g@AUE6Oc2ifna#r&FJ1e?^K&^#
zm-#DT;AZ1CMR*oxHkbXpc)sIYr|`|Ax4u`~j;r^_lg8=O#gL#Aei=>!<try64kAEA
zx6;;Am<(}p4LWSOwnx=p*Z^&Z_YEETe{Atc_8dZ^v?+>SA{4xMmNu<JOacmkqU?cw
zu1aJc=k4K^T`s6L*Q{Wo#0@`qntCXED5o2ezWf7kFs1e_7HTn#No0Nt*a+B+kcP_U
z<eMxsLL8H*U6h4&M5>?KsWp0_wBbqUYozF<NZ<lYE4vaK@DXKGmG&>iUC}iP<35A^
z`e?gCQ<HPCs=hF+$bll|;n{$nLeoQ2p3@YY2<oBe;`}x>-UuS&(9C{I7r^TJ_L05t
z{%B+1Eea|BKxe$?q$qfPPA8N2@$t*&=Wkv_&%}$Lp1=6%#rxl)_X6IZz@PVze~uoD
zzyJLB?fYkMvCv!b_VLs6H}LZG*$>f6fdyWR_y2f({{F`oZ=b%yGB3n=GN1oIZb6?a
z)XoHUmOMU0kEMQnhY0Z*Ak{?$DadqvZ@Ddgf2tM>V7Sf`R6F@OLz!rlV&SSvW=o^m
z{uMOXuoaAcu_=u!_UH<FLLN-tF~*GEwi3$dg+g1870G9T&G>}+(BwnUmiPlpkl^91
zEOUz4_%Dh2(K7|S$r}s=SVli%0`RD_1hv4o&rzSLZOF;0{$EHMruu*B?J4vbZ(14d
zy-87^zqf{eT3$x6!elc4OIWup0K~a*$^Pu$>m&tE<b08!#wQNzAMiqI3TDQ$iVRlX
zScikrrKA*Eq{oPsfx>>h_=Wx2@~wWfBHxbH_~Ba$A^LZCE5CRAFuakYaB`m$J;nE@
z`PIAi3WWeTEvV01Qd=)FatZquQc`uLDiS_Kzr$M&EteIt`q695&GQfIRfHA~{P_LN
z-{eiC;N3IJjGjn*FD_wmuFTVm1+We0mW6zb5ElI)NTE&g{=ftBZ8BF$sxcI-^@{t4
zuE?WHc!z$@seA8p6fl(0M@;lPQ&wmp1odfJ$|p<wnMYTcEUQ;4gZX@wTyx=nK_Uh+
zz~_%>YamxEId8)4O4*E;WE&Mdhw&ls{~BFFt5uGoW|A;JAwgBNhSc>6PI$>`7`Ru8
zJk{&A1j=zf*PbEJ_!8|wqaUS6(yP3z2w=+S7ybH=B|vBNqjM}f7vv^|J%dE=CAk5n
z^?QNOIZl)y`^4z)mEgT%HtQ2Kjk(}Uta&B0`_AYCdb_2lcN%_lPybCWg6SoCDc#FU
zd5PrMGbtos0^k7IvGTLU0!C9t3ndnKw<2E`PqiPALZIZCZM&i!@#x7dQoqtJk5nz#
ze=aK^MwvwAdIFp0MSjJd`W4fjG9~rIOv6tKQ-8GH{G*DhzT#*h?+CF_%3GO|3&}S*
zJHL)Ta&nbEW^M84H8sVA$~E+rBRm2>rOM|tLZGVQQI98j2QNPXMt@!WjIL2htzCEj
zCwOEi2O?3KC_}Fc6HqAn9q4fKaYdh?O<P6@a_*PoQS^tPT@+pOFKng@k*S%4)}!x5
zhBUFXW<?FjT=ZB8+%!Lza!zA^BjFtlt7)tLgl~Y^OPE@Pp;WG9w5-s>HzL>QjWUni
zdE6(jgf`D?e&;<FtyGrq=KUa1uBy@B8-ar3=()hnmPtA(qD1+xue63%R6sH#sj}hu
z>$T=y-eDvzI6f;Nc%oSaC;C%)2?r~nU3^wotWy=u;O#j8UGz@rCk=j2p@ICRe{&(6
zYwr*AA`28bCothlcqN<!U;YZ7-@pC-W%Nqvrzd%lp=0(>O03l!NGgB?1BQP{c-vl5
zV5P_zwA&kL?O7H4%dm!qwZgxMJW>FnoVW(E4PqQ#F#DDd*?MjMN><5`6^MbAt4yE~
zG>z7ehR~dDrC1RN5hX}i0wadO_0l2ioD${NT96Gaa$+4-8D1$Jo@>YDL}--LvVwC#
z%TO%m3cNr2SoD-oHy;^dWZfJHFtBtuz`WuxNfTK6yvl&@>5s#q{$hYyve}$?DOUX}
z(OWI`8x=AqSbpF;OH9lKS7BSthD-JNc9yE|w^LZoE347EYIt4(eJkf0Se=?}!jTm_
zu9S$2r?U!|$vmSK1vKcjpr>wtW&`G>Upgu}M`sYZSgHtni5~4;&IpqetH<cEOJ6m#
zE1j1GM0*5dn&!|*7T2XDr=iLSb6C<j5-K(lxk+`RNZx5Q+KI<i47>ocIa-Bbw^HoZ
zvW@}hDGiQ5)W3ACrYJjIdTs5=7;VZXQp<!&GFGS>3f8}M4(araVUZkwH|QSZ=Zw(I
z@If>!$ms<3up)U+xCye`+qY=-;;}Mfga#bQAnLVaXB<FkI$@Hg2lX^~QW>6|q7G|v
zxhQfslApbih@7Q~No+-tMW=Z~+pYCAUL9?v-t??I&pVDi8IzpaTf%C1Jt&9QVT5u_
z<)`03`c2zW9BE<Qp;wKH!OGZMYV(3Ouiw3R|KgWt=Y|8ib0L;uW;!~Lx2K(rjPQ1K
z-VAiQj_D4KsWgIsAk&`B_V;si0nr4EH7;wrkp*7=qC>yMNjeQ+Id(1WQZMbS#yj9e
z7%dQ)BJR8sB3!i)CFzL+hhJOZ;9Na!L-drfwSp}&ZGlm=OH6%wcE_xf-v+azOXf?E
zgeOrkKjLX*?kLOPwC76oM9-A!ouT2=hB!<#W&IU(K~P(WRfTTgF#Kzf(q20_$XZiX
zHK$6O5JovqRaV=xGdlHTC;#4o5CDs@X^NWmRQ4+YQ4d4g{Kk*k#pM2Yds=j~xcJcq
z1I(ioJ~<1>@G`@DnEdX3m%86@@?!*hTE8tArXe8^7t_--7$S-i{-)xMMDhV>`WG(d
z&WlQ30ePYX#-A!9M!4Hz<ByVz{csc0k#>8FS~p2-MP4>G)$Q#*N71zrtfs%Q?p6-t
zPQvI{^9JQG0S)IY^cdBLY4Evoq!GNx!|<as##H3l8K;hH*I+J`7T>3L@1e?6r#H#q
zkrGsxf?qa0H@oLYL&ulT5u2~;7>%Q_Ib6T{G-}7#;9S9urXrKVSYzvB7tdPfA*Kq8
z_Qc@1+L#-uX9c4^SjVA)`0U6|O8kh%Vy2`qA*JY^5R9TofzST?Q)^sXm>KjYnWnN9
z*M49B?e`U7x=|iAAa@qNX&0_d;KUzPe9FR4(H(Zdi?{ICrn*eS3<a+nOS1FzB*4Gl
zQDK1c#vh!xnHmU@IK0TOY5Ll&{k`29vIjvxmJfDcl^B;EFcBW@02dP%y@9pb(3!b*
zMyvzf4Kn_XOqqcxQTt!7%BE<#izwOD+vb+;ESY_Pe!(DF|6umvAKELsc65O5mG^&8
zevHhvsS~<7t}v=3{=^%;ksgT^$^+*ZXGrP*O{9Z1s`2`m3ibOUH?EiC%yUzKfd)Q)
zpI^VSF5|_LUw^c{lg?=CE>*J)E1GGA54<EKMm(wG0+$r;-%ioX5{w*ej#G@9;LXEP
zsyjF-hD($n!q5{SJ+#mLcsX4jmQe!C+A#T;s1&aP_`amDZol#N(}d}8$yhUM)ztcW
z9rx(6+`6^2oDeCCQk;~&msVn0>1$o8()jU%E#(-gN?Yw{&wRM+{7h~0lWK2Fy#M?H
zMibKr-q9f-`+aw1j1nhb1h_7hW!nN5Au*#k7YS;>U<`0*LQ4n;Aait^y-}pWiH2vV
z+1VggTA|axe0i$$qTb$a81A&H#JHZY_NVI~zXLAvR@iuLj}qhXpFa_E;Umc)Eb#Mv
z{rNf}3XJ;-JV_Z8!cPjU*QM0wW91OTF!43pKw_mz804q#dMKX2Rt*LhTZIv&x%456
zT;e-EiFv%Fr=^R3{wYRZumHf#VQ)$lLd`^8EoBkS>xdKPI>C<%kd^IQF>j&V3Oh_x
z#(dp065VmzYS+64X;LCuaf^kADxR!NquD?>K{Y*X&e~aY+ME-AGvwv=NvW^jJ>S$F
zm<83Q+SmoKh{h&E7CoB{kFG2}**%YMOOc_^H#g<zNMB<on(D;PeOxk!U7*g$@)mU(
zGSi7!JiEP}!}knELzj(2eK@Je5*T0%p2?%Uy`8zyC#6r7GeS^i^GmyfWxsS=9=)7Z
z7LVEJ4xTb_(J`lLs6%d0WDj5$fFK}GaqdVe{38j4EgCVG7BRyf)|+?hR2kRW#o;!}
zzP%l5uSIsUy%-k5Plu=`lhV#bE`Y}~`4FV6us{(dV)KH&_4HIvY4$S4j0x-?Z~JE2
z@u|)QhL5M3wb|1lcOPn%sAQ%aC)F6v>0`i%*vxtD#S_9VFAvdswd*o1MzhEH?jGmR
zXGHb3%Rd^zLVIVWY~ACWPlQI7U5E2Vhf!ul!>(&!p<=9h6DPzprLgH?{o(L7XAi8c
zEXk7?J;A0!AC0D`vGgDsXm|7n&ld!-djtxW_O(%2kELC4#Es`^aswn~Y@cp#y$Bjw
zrEK#@#6cKI?Rlu5>Kd37-7}+nfFU>07pNVB(`BP_Q&ZllC`5ztgoHjyQ;xDUF$0ts
zLyN}Ik@Y3x&499x{^*r`bi-DLA`}|yG(5~!P0>jffABPvh8$bdY)*>aVlga|nnc5l
ztW#$SO#taSjLZmm=Pp{aD@~(S&+6GTbq**tMc6iY*5=H?#*7*ehf|><sx@iQt3^Dn
z>zMp~G81M5pGZn%MBwJaA%Y0V>+(nY8iY0uwy}rM9|0WNZ+)qD#wtXrsu*|x*<?GA
zTQJKQvTU)$Vt++7Bcs-VshLZ)XMOI{Sg&KB7Q!aFBff}#r<7|76~)g^y6DJVMVj-E
zv-x{e;6m?8v!tTHQ}|6t|DMm_%w(mZc}naPx<$1iOt~la9lrk&!{N?gYHj;j=$iBA
zKJRK96@+=Kgmj#m<_NvJ%9FJzCWtub6zX%p$(ID;v;)2O0O<z3ConKlA?It@mw}C^
zic6<K?cjiYAo*!S9h?-+OVP%46k;@_d0WlIoe6k3=&&s;g^6>Ti6+Yc0NUaN0LB|^
zP=0iLG;6U!$<c8gibcE?$Qq@qWv~z*P+8oCJ!zG5G+VR~pKy=BM`6eC`E?V~nShOn
zRSe8#Y8DI#;yEyKNXuAsbt&cocnC;Lz2~KVCThfHbRmkWlY&HF9rg_L$Ut>AARICB
zoOP+QK6&dxtIb#idi$VJCcf!y2Tw+Y3LdSJQ~+48C<6|p$6Lj8_7WSo1WN7_+r0!L
zjtVw6k16ckO=yDmk|z_X-b*@xneyf2KDMh#V9M=d`zB5wJhE~XlmavlA9WWWfwb}k
z#V|T)E^gzV1Q{58Oz=pS;xptpZWNTrq|n^nvfL!If3H<x^cnap1X`0+b8Mmw%QUXH
z0!`_&uI>sgW%5w;)(Vp2LRyXMrY^x2Pb?c;k|mK4M=M9;iFR<hMkF^cI+{Ex!$`p-
zsPZu>Udg#P!cooh`GgL0GGMBCvS#HTOoq(no%7~oMf%dw>K$*#>;bYKovgJ#<j!#$
zlsm>yU;19AjC)_v!vCx6i8YX56!ntzd3#s+x|H+$Q`QrdjBBA&@lmIujtM8Ofzl!g
zr7T#(hLd&BWSxWUHJaAxTaD}V^=i9y03=(O;(qINc=l3ju_)2pRvTyl`OqVaC4=C~
zcz^$$JUH0sfN1Dm(IJynX&{ZJo9(9DQ)kpO1hGqBh4iZIbgWjPU8CaYkP7i+m8h(A
zH=O%k1heb1BSsW;0Vo3WF7|58ZqQ#}l(P7!=?d*1V1K+V&?9SC=$JxJXmXB<Y$a0c
z5|sw_DTBvmvnG(C_%yU;o;iOlFrkFSX0}x69H#<(R+j6F3eGq3Sm|4VUi{CErqyYG
zJdJ_=_eaAWI4`-w$%=^9n=<xoy34?^sX9*HyoIeMsDgikwrMvQwD`Pq!VK+ibffNw
zGzefRX&4^7y}E09ONu$FtxB>c&7a4!%2GDAa^}bHoG2ZW@1&8eCsPLl47JO<w-Pze
z<|5j|8<i{+x#y=Sov2)=*@&{0syS`a++}kOV9_{~ino4=UB4`B#U6l3Wfpj6NW+49
z+7llEWX{QafNGLgtj4|WCp)(klMskI=xN5$SxqbK2Ggflph@STxZRu1$cbKukZJI2
z;qO{pTs}PIwS5dljl`wtj&8gzPpcsk!Do2Z;RD|8mPp0bv5wwsSOc=3P)yLnLCEo(
zqY6kr=k9aL>PS%Ec|M<JltyN}72cDIs!N%{q1dgpG3b<Z)XAEh56yRX9-0lt`}60f
zr&F)=bdp(Xuq!UKu>_{3;IJ>$1rY5)Z>fXdlDD{KmX0k;W;dtv@+{tHrxwx1sHtn>
zEz>458_hdJ%5V`jJgy;4xPlI-T-UX*MPvH}N8Ux6qaT0eLg2>UGZt_`wc)@dk-6Ea
z6qeKWzF}l+<a@AF&|;KsdoZL9ov@AQs-YDC>N-alfABc;LtvXvnK^8K%eZu4Z*^$q
z5k}glY@4WbEP@UZOC}~b>)U1~lswdHF*!A#H$y(_y7<o6`6*7+RO%h<mbwZfGOPAd
z0CF84nUT5M4PKybtQ6aK@sYJ|+qDA;6l|k8GD@<Y;|oTb)}b^E2A$~dqNd3;=?;oI
zoH(5F6}mZBTJ&aK&`B*o_J++0qHFYHO-~o4V2l;LD(h23C?CoRxwSRBdlwb&Z>rtj
zELn#QSJ7BOP6E@7PqrJMY&SmXZmi0X?cdN9By>lIhP{(**l|*Sj+yY{kGB{A3ymh;
zw}!z0V{Yxsp(>y7AtL9#V~01T$30+BUf8Foh)#;&y?rCUKx3^L5GL6ZL!FYb1FDE`
z=T2v3^sXdX>(lZxwk{at=1rPZsM{SaOMF)|n=mWI)BMW5zAMqL0-gEWq&KB?Y5W9O
z42tQqBD;y6cn#}%k>{{)GZ*qeJsLhBZ?dEk-#+L5UZL>s3F%apL-LVwZ~%#t5-k~r
zw*XQ=t-l_WIn9Pw>KcP|g@8J)O;pcF)*@p?Z~Nh@kDdX-LuJ_4$K}Rz{k?rnf#QTo
z8NX2h9-%pjDl2jzeC9lAb1o)AE?}Msy9Gu)ppO!xE%W;VkBUWhd;8j)$8a3;(&lHn
z3@h!&3&1)<eg@cHs3E&3)P-2q?(w5ffe9RD`KN%Q7XyaCvtWdQf2jO?%|WcRyW%RZ
zlGLvbRdfkc11%WIrkYF{bv1HljkiGT^tj-=As!lx9ivz4_VFIb6uMHSG#+efo)Rw>
zwKq|<FRUg}wV$gI+If~&XuG#R_HdZjy;Ik@Gc+3?cr%9g5smp6WD|cvReQR;DYB9P
z4AE_8D-_<0_T%iX*~=Xep_Q%yB7XusI0707owd$zbEknBJWmClk@#Av*#~dwO;ZN!
z#-crAVNF$hMAeud)tVn+<`$<@81SL~nW>}^CKj+*|7y}&I}DW<ldId?TX~{FvENwP
z1}x}h1ga^~@opP~7y%)1GMcu_W@tz*kJQ)4qCf}s#iQ}`cu+*>8P(rd&ZX^GG&IKD
zQrb4nrVTPud<^SPiK;w4uL<FJlr=&A^ek+}i@|iq?N$0h0uHhW4L<%ADHg4n!TReo
zMMeRA>d1ff>^iw`@76!7FuXR95^yGBSUSdf@3*j?fiR-`fjxEWj^cJ{nP1Lu*Hn_c
zzL`5KzF^8-#1pG`;S)V;>7-MkKN$V3i3<SXg=_dJxk6<Zk6<b-l?DKa-jw;{N$cZ9
zQ_)Eqp`*rnoFHw7&i9Az>mexv+gF%d!01gXt<o_Mbl4kmia?BHLF<Q0$ODwx<e;q(
zp@no?R?ohDw02EqC3+LzRm~o54R>o7qhZ4ED>ic=653>_ZTY_v8(k8EDt%>_qKr0m
z?K_GiRka2wX0_Z6E?`Tx$F>PNgl!A1N8Q{N*?l)X-dQk~0LIdJ9+A!k0A2wi#d$U%
z62KfO*5ybx<c(_e9rVt_7$|`vum46!>J1)=hiWOafC4*gycq<ll+#$9d3(%F;<g3M
z=tSy_m_+YmO!vBXB7O7LQ~+9a$Xz2=4kM6TqmfDR2<B-pC|r!k{IsB*(EF-Kc0#zL
zA6LQ1Q_sU(Jv=HCZc6K|MPue|@TK#X>T8J@uq3CcaZHinqtpJ!xECqG&WxZMKwxH9
z3i@hp9Oh!F&3<&tLv!NQP-SjU+G&6vh-VyNp@e!BD&hdYz#X53VN_v>rPcfK$O-BK
z`Ce-+4l9RwTdL($&103+E{OMpCws~&SzmD26%VPRiz7I`w8+Gx{$G|IQVhL3<gl<r
zn|U^>0zk4MOcb7DQ%MFOeqwTsiIawpta6%bhco3gL#H#&>sHz63FzGFh&PnOWoRM;
zu<sl4qT}2Ho#c~#KMVCnMDIYX{Ltln@~u@0@<Np2KB4GvdECSETKh*Gq7Ho{o(9HD
zVL^WbU(Suxm}6}iwI~~MgW@d2{S5YqSmJasbRvyT(Wu-W;kf5B=nq*2mK38Sn1xKm
zj98lg93~{jpbHc%CXoHudHtB*-cpme7@p&$I~JRjmE_z`*6poZS1;U-<bs|vrEO6m
z@x(!8;?0;%0o)9Qp;46VIlu8VwA@jd(NQ@hcDR}?VLi0L00Tqm+4^~;%Bj{+KGUw1
z<f9QVzxZ%6vJrx~i0|gdbByB8(S{|FN_a+y<Q;>YLUABE#HaR|aH$E{k_&Ce=uEnR
zH$me}RM`d)NcdqEciTVz^D8(B)Vv;kwUPQ)>yP50kIY;B&l;oCq1<8K^t-lhkz{k<
zWKNN8wAcX7f=&W(p<bVwtm9zkph74W|AC5o6d7iX0b}N3jb!&Kh6P+hF9?pYTOnp>
z1wE5DHhGf(GC!(voup*8kDqF#@CWe=z8jZvOFD{^TXspdn!$OH0`;`yhviZ&DnF9!
zKen27Cbrsc1kn<&Chi%2qBgZnCfyBHLv5eBP4RiMLOrW2EcA96Dn_?nQGHq?7%O?B
zROdVt6PmN<Z`Q3$s0&A%YildFHutqZ(S;^b{*qm5lG|bqm{ExzOB?QIT18uAUKMH)
z$G=KE1c39~o3n8<F7Cu6F?N5(mMQN6I@sf$m%WwO%{nwWhgo&aw-WqLD`-Uryp!=@
z0RjVi(@4i1&WG)#wzILk8Fryvl<zYr)sSpF`Jxe=$??NDre=}cdb(()H_V2cS*RCC
zjzG4P$uCGFS!SrZ!|l9-HvR4xv-+pxEJa_~bJkZn?qsV|H`xs3s(4aUO4ky~PeW#8
zJ91sEJF0Az*J5*&hlaKP(&C5R!c1DMqF%*RWglqomJ~|-TpxNdo{V}|qY)65McKA?
z*<z}jvl1gPq1mtnJ+!t=*Ow}LMzcK+dRRmjy|Cp^ruV*3a=usP<TeIq{=L6o$-nGz
z(|ey(wanKQ=RBu2{<62CruTRyo#Pqy-ny4$^Swe|qO`l{tcL}zk`HnZ-LdSc3jNps
zm%nG6L}7q9tY@h5P*bmL^<L>MM!Sgbf)QV~<~#JaT2=e=+*~6jN4Iy9Va1)5TM&ve
z_RO?Q&@dVGwCCRvPG(fWy?zXc_{Gy0I4tul=(s=?MC5Jc@Wv~0(<pL-MbNKm;T0(w
zMGDqx)bTAJ^WhC|x&m4{kPazYH^|{fFFA*d1jC@Ri!D1udV8K1FXj~BcX+ciJICx|
zXLf?wYG?Kmvp??427=L_?}lKM;TpH2*~aCmTjR6Z;>V6!EmK8TjlSn~pz5m4=Q`d%
zAtUe_4G*YFLnhVU@1_~jjN}QKnxRJ~rKZ!&N;EZ-rq8&rMwd-+?B9GAuMiqPI4G*X
zz0wBokqYk<Y!z~!EamJ&yWIw?OKsRn>^U71sDy5%qG;;L(R#x#>RqR!H)R~XeYB3=
zkgL-+&qU8m;e{OT=Q_D;CMOL+0s3C^;tpCTAZ*KTja5=$h>+Yh1nLQzrUJhcCqROV
z0(s{R@N3aboaPu(Yj$QYEDOHVxA8v}`;x>bfE{#(PxC(6IVH3R!jfh%t2NMYdJw97
zc1<C-OkC;&W2Wkr>^|{$c4b{R&WA5q5)A{p4o(uC>13MI9p%FMVy)8o>*8kuU)zT}
zc1IU-)$s#>W!>tbm9t3;%oEu-EX~fs`*F<?qG16)p#ytlYX3okB%N(C&Ah^%gPHX@
zF9P5MGU71JmyoUfh0hwapx_0>7I$>T7YBD8JDMJ_TdkBF`;}uTTPiO!=GK~Mq9C0?
z$Bspj%A`U386Wt@6`cmphFjLKMH@CK3lq(A2d!Fjd`@pm`<yB8spL_m<k+B=5j8Q>
z**}oNV06s87!TdR$&n}Niv9Z-nF_L*+Od#W#MPq_iaGT%oK}M|3%$oqw#A(fZJ`(~
z!*vS?5s<*D81py_5W|OjnL?!rh2U6G=StuZqkOB7^9$!nx!gAeI;&G3Wut%%c#DEm
zEx4Hh&bhr^0CffrCyP_<`<25gN^&yphPv!mDE^zH7-o$ISmauJO`#bU@eIY^W{~T;
zI5;pcI}huQZtaNfYH)JSu8lI54HQONfbt}OqL;}9OkjYfml+Hr7qjiKudte8LBp8?
z-d)3-&rjAcq<OfA=NR<$bdLBoIg6HLphqB;o-WSBA{4-ON4ZXuoMv(HtZpq-Ybe)d
zC^yZa{5Rv$UfZ~|GgRkWayV6!GCpg@scnPFm-KN%L>;;^BL^Vj#=I6WoO$g?yXp3b
z^d>Se1pP13gFQQ|kC!l_HEIBzi4^51-iThIbOfyyyfI-~foXPBY0b_cOSwfd`OK)@
znrDWr)A;qSO5{ufY9y;wdh@QLm|rb<o}=5d?W2VZ?b#ug>F(Pyz&OQa^bGH0&`yZO
zn32KUrK!;rKh$Im$O4xQN?qwvlBqOuhC+V+^fYYQbQ-r@Y%Uw?jh;<^N`8tm7xbEN
znC^wC0f`BPUEzMlII6eU_iRfzpy^noD6W*grKc#R_!mWEWG~{InZsWUrE*EGCSN7j
zT~{{Ve4@ZzFQk?-5@tC#sE9_>zTBMP+g>uaX=Q-Z!0Da<yDEoEHJ{52t@|C3YFA46
zD@8)lkbP;{<wvYTF=KZ5Xrj<DI`gMzKRj+^)`IHJsL;ILw#uVyN!d!k^Hc4NlET}V
zmrT19`ni+^22z^?GW5gQl)xYE>H&wznW~-ruj`=T4NVx-Mr8wPViA|8>oa?$yf`fy
zFu$J!3j@?>)%-}_-p)^C%?`y!ll2M4L%l@pDyAg5p?V1i)<UGA*v~=?b+M*vtSsba
z^1*nr<~z4FYC!Iz@&4uun$s5w)+IQqjHW3U;;nZV^=QFS8LLUMnIvRa0<z1T=((hj
z#ATSX_)<@ZNPvyCSERXjA;ZdUuYpopq<GWl>~zdo_c-Goeulg?93H84Yl1MdM6X4i
z);AtD9jR%r*H`vf1(uXQm7OZRl2Nb6I|ASeBWiV(EnV5VHaz8Btg5$QsB6~KlF=Sf
zw&*Rgu{GF3J=v++NDdg3jbhrP-Ig+j&LpJPjxRXs!UA<fV-=S`Ea(7hQkzsMV^URe
zXthijaS*$=u3#^uL4!8Mu8H<lg`oh|wySZvTcnWIFUe<sQ}c#?WawO9_obxg3uEoc
z`asmHl3!4<TZ>Svu*4G94FEzD1-Aq>Sx|2=XVtY4K<UfTZY<2)I9;Gi&%#YR3TugC
z(aO7sTY^};h10j?35L7yXA=uOrb}tV1ijAQ=WO7yWLsqCt<yegn{dHuLC91Cosskl
z4g~HTjV#e4BBOisfipD9Tj?}6CghQ{jiFtKrG9hgJ!%=|(2^@w8{fAroswyf+wVmd
zm?!?lw&pE5X%86GRI3XU&-Apx@ERomrOAA+P^$#3fTAvX`uSUQ%oYork-`{YRp{SI
zXAfJRO*;^zrlBSXC`NEj({82cJ3JgyRJ9FH9xBAlZA1tuw5wAse}^S7kIu!J_GU(2
z-rUp+4nu)$VYtL#ivuOD2t#FSE^P}<LKb{4F3rFURR%nW?IB<YlF4W+>kYekf6y6P
zp=;b29zu_>(>>W8!$k3&9cf1(6i)z&V>3dQvNbOA$=H>5c3VcXaUTvAQV9S?8r?(P
z0kmzZTNiGZ>K5}1)m)I*rJVrpJNWvN_FIjUSZ!AwK#*>ty**?$I*M6a+<*~Npn7J%
zH|X^-erSe{Xf$5zxQRMA_z<v~S7L7Ge=ITFtMf^;ExuXCX=}c^q&Rqw18msz6tB^1
za{m2K(Ocqg4;>SsCm#9{b7=4L(jH(t*KJKg<I*366k<Vk`!t)VE@-aqFfa@2aJBa#
zp6R#`XU<m1Q=_xbaUpOPTWa(_q7^-<jxOvXHWh=uh=ubO?Vna9Z1B}a*8kM2*I1my
z>Dcb0E0J>B<hSdiX63TjLb~m1=i14TIGoR~N(OTW1zS?Ld`s#^UOGb)C73z*_sHQD
z=v&Px!`Y>v^m7}A6BeXn5mIy_Nr$3;S*ul1E3<%29plEmu2tM^-u8Cfr{ldRIlJrF
z{-{Rq6DxyybAIkd^;DB~bfMDf>lQP5H^#AQ*^M51w05(36&h{rR`=1$j^({pgTteX
zn~h`~qi@srB>LQMG>MvJYhNVpWCTB<zR<L-UT0{Ej_re{JeEX9s-mk~&Y*Drr;=_D
zb~R@X?q-`9eZo>x+|kM$Gi6iP)zV$qvB~aUt46;!#yQP?sr$CIKC}q6v6~_+>2=9m
zlzAOh!W;o&e;n4Oj;rwHl}2>v;Mepn_UiAxMlon(V#!Fac|E<2j$!`)+y{6Nts9IM
zeMpyrs{2DuLFkm`><kUe8~05izQVb}jMLU#lx4DPpf<;aTenFH%?AKpay=v#FODdZ
z<fBsCF{rGRMP-KpTX|3dzKODv(g8FX)tMsD<^Xtsc1;>cygzCk06te`@IR3VtW%j-
zMR`<irx0;^82wm!9_|L?N%APpC&^$CqHkpk4LFcztXyB<EjpB)B%}nIgc+7-+@X2I
z&!i#F1w0>=?sCbSD7OC8ldx`Hwq-~|3wv|i%C-BsZqMDFvOj0KVs274Zkcrtjms{&
z*ig;OW;P0Bp2aIx6X2LrsnLEDu9!2dd~?}T8VJlbO&Z#9&`11ZhA$2&v<^4msR;;F
z>OO-W<QZ<pH<;~(KqxNB1%lP#b=?V0doB3tiLKM$=gtO|@IREV>@B}(uDKFDaTl*Q
z7>luM?Hwx&ex|)qql%mUjkFkLS5MI1%Bp&|XJv3aQSBDCrUp=m{r1mU+1cTCrIBcV
z>dYGHe08VZ9w)s;4^l=oZE`)inON(uiLo2;><lJVo~M;snczB3?u)$L4aM{@jHvb(
zf89g<oHJ+5Z;RH;q+|h{<$-=;*uI8ySU=v7G=Ll1-gti3v@WJIalsN6$8PR)0*dOT
z2M4TVs*Mb$^mbn5k;dZe71WDJv88cp=x8*OLvpIy6_qKKbLd2@c#bv5R5)bid0xsR
z)eq!!6ph(Q!1+~j{ZeN%Vl(&_hHze#Bn%3w&_6^-um3%E>?K}g0>vN*-(vc|@<KCq
z^Xc7w_B{W3mG4<k_4^?@$>PTFa)Pjk@*Ubq^wbV~q}iW%g-v&X@KX%NXTa%kIFI5{
z9(Fo@ut5z3drnnQT}!ZOoHMD?fUJHo=y2r+9nLs(YoI%Z&UImW`h998KSX!N7^V{?
zaz}8q&a5d)XKd|83`T!#J?(9rEf|bEId)Q2?yGiaGKQIx<dcy6Jh0a>n1_8Azt=fU
zFKIm;eQ=~2c2&-2b0)^luJ|8#x9Nv-k-q6q1)r~+S(Ky@F4X5o#@)-Fth+u?Q=poh
zo!_I^dum@OOYoxkB-Nn!qd~A7q~TEjs~oZ;2I|z$B~AHUkaL7llnyeyHsP={1$9tS
z2W>%;W5J*P*qKJ!%%#vy7I=WsvJU`0t6Rk|$%SGmyJAQH4EYW!Ve??TaI?6fd(s!-
zba9N{d}wbtNJOzYfLswHH3lO(@-}O6q{xwSKAD}2CgB_)aTa?smiOm}D%5w;p6&1`
zL|O4<3A2LcCo><U0riU=4H>5SSEG%Ix|rz0j?GZmfgL_i(c+`8BK#RB@o%dlZs!7Z
z<Pn+MN&H*40g#4MDYE9i$n{K3@{??m_W{<G8GtuGd3e@k^YcT8PaDFvj)Ha_1rm2m
ztgALpCI<~fj-JbG&TmCLmV<{z)lEk_!JOxLf!NZ9lEDDoX^gid+L0Ts$8wO1WUve)
zQuf!8F&fp!A!HvNM^Ln*ZQKt>#{$UY>_kq}XaIdU$p^*l?ebC5N6C=A?sHKI8Zt?e
z>l0d^@=Wjn;ad#-UOL;*%6NJ)4Ua6z@(!K2Vmv<<5Rgw-<HS|3M1WW1D2fTE{A;$_
zI6Pzz1ME7oUuq95UN8f@aICVnuG~!?&aHNwxKH4??-Iz|gOt(mu(oiD=FF5IxpI(3
z*-;gucNsXVnGC8j>;C7fmf3Q+Dc37mSn2W{gDK7Vg>3~sV;s=3QqU$0T1v;w<f}#v
zZBpYWk#B52fqi8ADeS?;Pth)J8k+rAKntqOc|$jj7ugM?b-&1^ue9&aMiW=Y`)4Cn
zgTedOP;~P5+auCBFWUpt>2J5bK$bm?Il&9sw>dj^Yj#m(?JhTGp+GjKkwh56DSuuT
ziei3JfF05?F>V*|qur@UoHbJk@?$sknl!U1UX;}*$e%bX6^D$P9XCj+H5@<wo-;yO
z10V3JJ#<QJ&ChwczQm5m`Brh4)2>4^)*28yej<Y1rp=loL+*>n%aVpX-(`tH_8-<N
z!6{yP!Ps}HToR<PPC{$YKG%;>61HZlnV(#TU9-?A<mZH4v$>-*wCyW-8eCnsR9+Aj
zZcO(hj4sPP1@@@XDbxw|8#lV4PG26)sCMbYpjJBiM%$%OgPO9a<GQ<k3Hjw6^+{)^
zU_AlU&M8R3>1+QaNW6LqKp6R`_O+>uiUc*KsFl)hAoFYIj>&9j5TTaM!GYl&{HAKF
zI_4A(I_yy$t;`yYN!$8YBCB%dTNZj_Ky6W^(b4SE<GX|;U<5)04QCxKhw9J>g^tWY
zza#2VNhUFXYxqUMMCb`tq9FGOW|m7)kR*qv(uM-r_z~FK=ol~9@i=JVb<%vG(_#xx
zW0pQTwy{2B(#MGcX_=7_4yiqT*Dh^t4u9p<a&F|YlDS)Hx>N`1<C+_ds^JYk;k}8i
zbb4mLOXxgkYLHvc#m%c%hyLxAj&~wxgvXJ~{ib35n{L22Uy2)bJ+=XWdh@2Pj-M+?
zAa@qFd>pat<wC--|G4^H7CAu6B}Iq_h6U%}ZWiM)BmoYvOs-a`#3PNRb<J+H$b+g)
z8ORp3vE?D;Gt`F){Zsj~2koCbt$8T#WMxAJTf@JyD=}GAvgj=C9qFAQXvwm^Vt3nW
z=<OgT&max`ZY!hF)eQ*-+PLpeZLT#lk?8LjreHgZy1$*QX`rWyu@YV&?1aKm=+E5u
zXqKXPv%gGS#LFb5D%S_Up1lo7PFxF3@i3G?H~duLeXbEiG5uTV98*!WJ@*!hZfj8P
z_LC%?t<ywrOhY%CGP65#ssB40$PLFt0U(ogmA|7HwLN@9wga|PzAk3OrFaweo3<a=
z8bLRhQzstl){)pLtg2PlRBg4&)9_qbO__yzq_&^8-py`rnA@-zN17WigNQT<I_cU6
z2DNfDuh{V~VPvu>3RvuMKX}EY!fk4}Y7@e;lLl5z5?l^Uy(9(v^FG(b8bfGg)r}cw
zqg^l4V%<)((v7bhg=_;Y<g@9XO2_IoaInWFHaJ9A9w*!53Y!?)F``W#)T<G0^KIL_
zUl$YC$qJ6@F0|S?&)u^HXJ?xJnCBl#%Ovp8&5q63OdBN%9b7{5D=08*E~1Yu?MZFE
z)@zsPg>@(T-PBvCce}Axk)G*-k1Tg}!IkN0W5Fhk1tiWE;@#1MW>eHUzG-Cggz!tr
zF^oDPy0fsI)l2lx3VQ`h8SK=$MsM7UxR5<}T_)%-JsFd9@jQ@-#nX#q_CcIxY~z7;
z4SWWLJQrU$s@-K<pt9>w=$@wT(zeN6hftF$He{MKf=$4c|Mu~{5p){4XX92UB-MF<
zRnt5Y?->WsGf93Vx|naxv=Tw7nISyf_oed*T|SDTA$1auA-w}}HC@VWOK+@Y@6uVh
zytId4fMW0^qA}oajf-MPSOR{*6z#rx9slmDhEln~OpKb;YB)i0FW;<98#zZRS|0@p
zCBn1*!$&zqG^3QjRv12r#^gw#i9ZJ@avdTa8V;mEbpsTu!WvXYi=F#ry-UE{pk1|#
zojyC9_2-9kH0k-x-PLi}^%9<b4}$if`wzpTT;M%6^vW-p92Giw;3v;*GU~MXtfr?+
zl3G`l%~eY4I|-rAP4pR%ZxJ<{+M`ms_Yh>++KYy>OdVNeWc-=~Be5|)=572gW_bWD
z;Ia@aq|n+(o6;JWqaL7}wQd458R@(Gpx;Yk)*DMp8kJM)*1UCGn{)WDcq7%%@pRsG
zH0uUTN#~Va(|`V^H~ij06(x>4O-k(w9$*GIJ`FvV=iAz7MSOf{<0b-xeATgCZA8!+
zMpX*UZ4yFQs<nJAc1I6#MUfZNQ8YW$vEBO1!`uX7u%mV+cJ1M7NSFO0tQ#KQy|$OO
z?U~;;&)iniW(~LoHEhpChE^jgK{vWHv^>=XmPs~G<tyfE5jeI<GD~!74AfwSi9~B9
z6^;V4ZtXSA6*XGdsBepmb6@1tR{KEKwNiAn+<JSwEi+o)EgK?@F_N8*)|F%2a2*>j
zX-N-?7+q3r0}a3uT_>`eUhU<@h-<A%RO{H-w1skw%dt^7aE!&$V=M-p#kV#KV0!IZ
zazwYY#WbA;v$#BThm1OuZY^f;YEPRvl#_<E?h%X9BSX}=S^203TneYn%;H5ol>sq?
zvw#=BHvQ;W*m_6D9kjN^)WK|!02VlOfN|sj$soa~a2-^*t3Mws@2J1T`n=89Ijk8!
z^suymd2~GShipkSGgWrvFh<t|6lwJhc?Q+byEufhpVxJJzik?DY}o0>=JITETXQJ3
z3x{HBt8~|YZ=Gy=MccL8p{Lu6&{e$M##W5$t(obp5bC3}^WZc&_S|glGQHPvA96T$
z-q^Cav9$=+R|(MJ>+~D%XlVPnj>*>&_S(ZyXV*LA7S<M$h<{IXv4eIu99{>HAtWh^
zSk^(FDDv`KlGjScPb8EvdXy3<BcTQZAqNAkj(Zo|P`8gy7LUYjDGrm+cd<Oaz*ReC
zw%7{0tw%uH>2Ih4D#H$8QPm-W=AJ2GHHbSt-sBK!dmGi!P(!Lbt1zhY);*><6W}a3
z#rV{xXNF)fq3!<7mZBQ{in&;bOR*AH;#ypYb8#a+idV37pR^(fAn3{LL{4V?cu86c
zmoa(|;swOukiMooj^ugn%o%1Vp+kx+zKU1Fk|H;V>o_^RI-@_gw;OV&vZ=-8ECQxk
zTtGResvyqe8$@rxB`VRwU+Mup80Q;{_|kyb{A58sI6lUg=m??=K2k0G8=S{aWRQz%
zR*t?NUd~{wA474|k1w?Aqs}6iP$a&X6s!buj-in0=>|xChbhj*s}N?)zTb#XVZGn9
z%Ui>b7kP#p;LL<mF9*DCjU~%RI?NpF%9Z4HSNoLYTbWaJnw_0Zl-WHa)EP$C<f!{)
zIJysUVWSg62j9i1ef<=QH>eLDXv!V^r6W74>GzahYZp?Mh}t)B?lWEcCXmRiY2x-x
z@FBGH?VI3T$nlKIsL&0TQCinqmfcnJ_SH}fI@7zH{VDkg3s43Wpn_z5yhUfUHac%&
z^O2L$?QQi)S`uW665gmyu<+;6e=7?zLjNo5$1$~nucq)5@mV|`RN<s)sNkfi{p!%C
z8%@{#9(2e^r;laed-Mb9AmZNWUiedCJ{UA&K2Uae)b+`Z?oY=931<&{fI`Ml)6Iiq
zdzEx5R?ynQVcmT9Tu)SVH!52f<R>F?9*hxV&;gQsG@2p@>D!idEh~jZ@GOgE%ZiwN
z@Os|ro&Bu(LbGA~j%NhS=CGK!)9P0_zw~z-?LJXEZD}{;o-g7H3i>1^^eFOx(?#wS
zO=+=|+`&BRtMBBZ3@jIk$647*M}CqFn0K(MD916kEt-Ep?2%xgxQ4K(pW|I4CAXv}
zxpiW`*ClQ*4%MUNu$(4GDk_culN^>O$)TDS@SYr%wJ#^=o(avV8{&y>gpfU&?(bL8
z-I@j(k{*rhG5mvn&$$JUr0=498_?zjhuE;J!(-h9E9|hx>Sdf6h4WdL$V1HIEe@(5
zET`jWgf_Dzo`91O4*N?$`FHE-tl+>jv8*qLMs5S=GjJK#4aI4_I*&1WJrJj1O$U@E
z62vF*LA(=h#8dG^yr!rFnm|p$i&&G-nnZ@f(R&@N;VilsT#2VxjL7-^m3VD^YfOwQ
zLXXV#+9dM-srJqBnwrp`fhIr27tq!_d$-kJyVi_;qSuyY1YY?Z>{@)F-o2rwiC2Lp
zpBN_~u05;V=rzc!%^U3;1ZrU${1s^O74`0eyOi_0cg^~gNaFNn9B0?I&C}GkBRx9q
z4<CfKE`>$0+rYP>PD0dYmmCYl_Oj&$wBz^#T;rzLIz2J7`>DUS{vvxfclVoyY3AVQ
z_<y+5uW0E$#IIl(y;acP*NWDUQH#8b07nh<_l}O!QG`fee17yeWEG@yAj-~9=9BY&
z{C?ZtsM%`g$O2`J%}B~xtrT>fiv%yr#S#jcn&u?^2STr0(oOzczr1D~v4&FEd9HJ*
z-=0vtm45r4(92WP!qrwXw>7zmf6#Z~=V*X$9h>8g`p1~|{tcQl&Ze*85AmD$N&GST
z6u*m~#;@a#VxfZ^RoCO_6&zOM=#!|fkE0Lpd>p+Kko-nK>Qe!UPXwgB)}bzQ4i0A#
zA$BQBy%+9ZG#7TH(OTGXMwg;FoM<Jw#ur`HtrNMSJvr~tp1eSN|1M3U-8kQ(d5hmm
zt>BZOH^`zBr>7oH7h2A@6tf~P%g6LGvqHbQU}<Z#uHys{{a-N-GF^GV>M#0pSoQUE
zFo#LGiU-{%|Fy9b+JV2t<G6RF=5wGkd{kbBP0YPA$O}n=U(tyl`;fv8lSO#gg}iMm
zh{OI&69!|KZL?yi`ddfUML78ov-UeBB4Qt2*V`ET|5StBI2*^?fw3<=)K~66eWgZy
zh~Xxm;x9#f{mc4uv-&xNU52mXZFD{O)17|x#hv!M+&%ej;%nV&Kub>ixtu;`$+nex
zqL>EKH0aq#t?#?(SVHF)@kpElYpmI$i<5I;w=crYO`M)yoQaR|4eurE06Dpf!n%NO
zzU!8mUxfXHo6>mv&E3+I3#4-1_~MW!F^V&$AFXAF<ujiE^~PZ}@DRu~$iAzJ{Db6!
zVcAIIAmHrFbP<0bQ?Y6ADt;%llpN*~-3%|{3wSyQUb#!>$k=oka}PAMx!6(CScK>r
z8ty`%E-bE@_Am-2KF)xffJ5kNI(TyUwEy(zIPw5>HXXcgaT5Ti5(`FKIb3<G-K{3O
zTa4Pt*dOvx`}#0O0SJ!x3YA;SW&Vjk>-%K(VP2rpZt$uf!*>oXM|Bm3VHCjW34;#C
zgD2tPQ@U{2uI$blvh=yo$(q$dKJLBlP>C>F!YfN$;Elyd@#}#k>Mf5)14+AjQhrjv
z?F5gZbzsj8x{tC!td5S^gW-g7^!A~gTG#rZYw1ag@<CiSYv~on3_qFSDKc<`+0g|u
z`T;i))^lwWlan@TrYVH7Z(<^wVA*|po58e$n-~J|y1v%r2s<AH@&tAh5FiNlnjCoT
zuA>WmHbz&vIVDQBU!XIk+bM7`TTB!!=ouv(xHY54f+FIk+}J6ct7pRWE1K7}B|om~
zow!-cNG$nKY4V|c5dhn?`+N_ZR|HjSXKKN=Sv<oNTSO{Z1#b#PbUlqvy$rK~Eq>5>
zBpBDJ0GahJY+h}RQtDA|JfcS#Qm3@kk5Lh@WET3i$gG3F7EW)7AB;0(Ghk;)Sx$r0
zWBQ;yizL*vh+AliQiH-yph)|10-%d=N%h1~67Fxm*+JfF)=c8gb_cFq>VhE?iLVSj
zgF1f*bY^G&{Z9=VBcN9E|NgxAYNui3GB$2Y72+Bt#0|0=Z2$u2QKNNjLO{}t1lkq<
z#Cm<#Ft-H=x3~V3Zde`O8D|jtXbdb2_VF~ynX8O;T+MNNR?Swc-uw0%ny=O^GSJp0
zh#*>z;)!s{#=`#9Pv!8~g)PB|OV<1$McA~|*fcX(RI8s%I2uBkd?aOU3b;egcu=jE
z-rfRvM;_F)(`BGis=P1)-j{}F^`-fpmu$$Vd|r`l+vL@gcr8>m=U6#`j2}ss%Ojc#
zN#{j9ibqylCGVonR2VvL+u&uMXq52XIR-1>tFEn!u7>%8wM%IlMKtaO+j2w~aM8NZ
z=P>u^`+~vY;Gkr(4iT+cFy)33>v96)Kj4YQ%cv^}3SRq?6l5`I<M5&(7%(k4jyd*=
zXhKyD$%y3*5Hj>_bguF~2k^NDxVSNGK#GJE$tm0yD(*oJIWVwmen*f=%V%Ji$q74B
zeVsiq#z6-MNw9%!FuWd%8?-YT*Mi@V`TZDOx(Vqlux*V>SE+2BN>{3|*2d5lPNu>;
zsPbekp3I_Z$yK&R7*(g_1?U3a;FKOT;~@ftQ(gPIb6Q%gSZS^_N^|JG{BCh?9$THY
zX=cQ|97?%~J(IY+tErK{bF3d;Pj2D@(ujGtEkcUoq{^ww16mp6XkhQ9vqDw^oDyWr
z;(1(<@{cP(BrVsQd&wG)>WXQ+go+p#g?Ec5VvF@8P}CH+TQa>{WCPNrf%H_&Oe^rV
z6!Xy5r(zbuX-S<rg++VK)2oT|nwN!$UQ~xN0Uw9xsOW`cmt}3QyA5GgJ3wOD;R=WJ
zhLA>{{De(v3q91@9XgU(piyHDpZ$YacHU2wyLM?GM-A$(qF6|p2ee?zv97ykAwgFM
z%4+C-z!&4_0M=D8&B;ET(FD{o$EX+8)QWL53cO)hr)jY4$Axv^4K0(q1i-71?zeTQ
zvz)RT5H3^~z;9yo^I&klMl&AeZz!YF+Ktg#Sl(h$$J<_VbOXfe&{3TjnxN2>0KgmJ
zfhEPxuqKi4H5RC#cmJhvqmTL<u{k%d;$o1A>o^^-v$HL=K1f`|iz+BZg8p1`JQF*G
zI*NokC3#<(T*mWGAx;_guLhDuOP6tzES%|??$7AT=I9uUM!%NYRp?}mon(DCk}iEw
zM;1FfGPv&Rjx4r1LZs}>3ALc8*O5z}j{<!ztzt_Xs_Eca^sF{6)p@-aX1y;v*Lzj-
zy)fWGiD3bLBIk?*Ot7y;Fz5PwQ5xZN0*%LP{=Ed`Ll)Z&rqeL*P2Lkw?^(@z)M+Sq
z1eej;YZI2jrfMq4C79#MrRd%75-hq4>vP!8u+=|nH-RBu85RCPPQ~L?>+oX+{to{T
zC|)TkgHIXE;wQ))g-tz%#vpCakVMReE11|EFVZP(db;@oa1uU7sE+ezCqxgw21?-%
zpsuMMjw#=sGA<%JK4oXDuFs;=9fdf%-gQacCRME>0mt>$WgFqWZLmAMyXf~gieisK
z*muPJmODr?j64A(S$?X{jJC0w-`-XS2RZp;*{4Xhr3pphBDU|6bGobMcdComyMrnL
znB$|OMuXs|>QZ%tirewoQRrcO<Lu^cV`ATWI6SJ1D?gcST0wKIk5=|mqfMOA#j>%Q
zM31QeTGH4{D&iG1+GA(S6apPJMp1wa?RXQV%Q?ta<s0+-dO^lmf&IQKCcG-RFdWj<
z2PNGwJM}Z|Avr+;q)D)?AJ9|t9)>qPI56(aOM1uHHX+G|w9jMxF&VZf7aBSFp#mOD
zTY=D2^?So!pY-AOv#?qg`KLW}IQk4Z|DeZHKhGtHT3rIAw+E#0UaxOm7wu&jc(tUE
z=-C-8!!CDm*Fnd`i&HgSQ+RZYjj*YOev!xwo1vb;F-9CGd)2TR?78vaps54spK3C6
zo(`2&3q*ZDROzb%7<@?XTvzC66Jugj<lADFR2Z85U%AS-Oal8+o%yxUiyzlQFB!HZ
z_O!r$1sF6n6-7u2gR<T0aDoZttWYZeXBY(3<M#`xOWRCTgA%#*8epKB>X?^+-8R{G
zbpMniUTeGWCrChFj_a%oHa%!j3@xPxEfa-{Exp*=3W$b-14>?Fup9tJowqhYzFVEv
z*#*|MjylWc?lu;$*2_pqZg6E5{HqiuRzgW0jCFWu?GDrw`wEJgw4Tw)XPa45gyBT=
zbh0VMw4W(dWr7vMY(9B*pTDK4D-@JGZFkjgr`fwRjJ6q|Gg(77NCeHES%@BoN<e<7
zqm)}PDhEwHaUZ?ARnhKa*ogc21$E63sG_kx{(^dXcBz^UrThi8c=Bu%6z=p^APR!+
zt)YpYd+AXVyTZqL_08}s)NoB6=v@`{_zW2JTxj6CYH8rmI)`S>?_SQv@^>s~%SH1S
zHQ-j2Ywupzj>>jvx$e%@?Wk(jmrLk_;uNaNGl#IHkFa%20Gvd<_ioIIjUJ?t7IJ5}
z4B_3_U+He5M^-i0-ooXzoCOsHu87uvZvV`;wpu_0k7T({Y8-k<U{2<NI@LDqy?%Kn
zPR|gRqv9+&$fR7d!f=^&*S9NHS10QcU`6FgCqA;aAkM9+k#w|5o=Q^fRYRZn39ZLT
zA9nQ|)*6NzL*xUS?Llprq;iXv_)G6E{i^?$o(bEY*l6!^zW0~D>eK0I>Dc;XQtV|J
z;o&ly@F|gZo)YKiO3k=cWA_M73_v<EH1#i_l+kYR>S-Ym(IijZnF}r0!{yvGYHMNS
z6_^hoT~iFI?xI845>0^%kQf^B=Kd!_yaT`kxHK^wn%UM~S9gHjwOg0M+PeZr`)&@+
ztI#X)-sH}qtTQ_pu{EVgN1V5(wTyw{+ti)_EJFcU<=BEu1C0%?J0}mn;uK9zGsAtL
zQ*4sGC)rG<=zrPz{nY@tkFN4QCaKb{N=$$i@-1cK5T57hoP7*>xeX6}dN6fsik&lg
zZg4xk=%gcF)^4b2vCKSg?<y#!oy(KiR^173z9(&D#C5nC<j<9vFbtw*@7wg*v#G-!
zuC{@o*4}7+syH)iqba?HgXBqd;ye`r4$-b@Gm6`*&qIn7<l<{rra7_}XttI4ZCRX=
zp_FMb=1`#8TBamMhQC%KdPJ7@481cM>5%?Pq(qv-0rFywclWh(vCXl3Zf~XM!duu{
z($!LR)7>#g!fOciJ;*K)vZb5U0;ysk`f(oQ8OH8GRt7$uB6rTp5&Y4pup(Pzd(DEn
zT<TGzpqUzYg(P%(40%oA@#us)J*&F`sTHcj>;Y0nZNy~|)`@XtP!5_&?E_bpUr9P@
z%_5=;SX4W(Z|F*4(m)<;+_np~u=O72qUJ;BIgC%5@zc=J?U>C42zyR9byRWCR$Ha;
z7SXKX)&iQ&yC_UDG)vkDy;KS>ZYPoihQ~ZONOVL&n}nQZD<V?@OLB_Awl=(P5n*BA
zH-cgF0(ca=5CP^2-8j;$xx<m)(|iosfm!eTLEv&QIn>!9?-Ud$0f_rA%75uy_uNO9
znMQHidKI#7%mWE-D~s@4r5W}VX)&rvP1sW2wkTWMf+b#nkj*_kaNJHOAZ%RPt0{CS
zazbEVK>+e@dir*rT^h2T$oSv@`*J!u8&>(t{1f`#DDl3Nt~;H#b|f6sq)mSO^GT8+
z*<oE7?IAUUL--2@R{P5yc7C|`CY8|W-m1ty0<*gJ7fk)jUS90|#S8@A2%v`l^cHvS
z2NH$tY~_Au-W;<9vh=pYx&;#j#-PT2;ezW+h)rFSOB;SgKmc5yk{fCrVl3&BXib_z
zEUiJ>MO+uLp#=Byps-7gnRzOQlBe$lpTT?7jXmQrjYQ&m&?u)zdlYhwo#GGAVHU4%
z+U<Qx0L1_K;xfz8P<2ns4U4@M5O_cdCZ(R=vZGlO_H2f(%?r_#`|zbVY#iFwiHn8g
z-O9BxEG{I4hihIl-X3yz<6gA}gt2|oBcese;2s!+0U(v%Z}hu4v}zLmgech3db$NK
zF?t#4j4D}?Rtp9?flYl5+vJ>7G0uB+kmBvh48>O#8YT&>UVPClTw{<+YnZIrX?g~K
zmS<<kt%#~U6Wd}ky!XbQ;vOVe%i{*7Nzs>%L`hgsptPEil-DyK_KL6>bHqlVZp?r-
z4L9_ynF2Z+VD;Qoa3ogLiDTt(!Wr<4x^XBhLxQNW4`D@NrZO~%#-4V~)<uAMX3`{V
zJA6f>-80SOiKhKb_lVe@1{VF)ExF_+w?M#akT^`R=#G$r<gIlM4YNCuR*IDdvOxfv
zZ^as^xVA4n0R}oG<aIJDA6MRKgAOgV3)$HBB`b_k&x$#+SIJ6T@#8yLxj+cljdfgQ
zhBY)NE;$Cqd#x22?P!O|*$~BI=+#&0&s=0KNP{IBU-6B+wVt61F05IGwPp~{v$l78
z>p>FmRfpkSb3S66DtZb9tq6?U-b<a61eBQ!GY5^kkD`%>a-h9cnp6NJS1k))-JhY!
zrm_ejJIY}e`cLFCtx@Ug4{8IuzM~DyqBf{ZyA3;fl3y7VyrU_dOReSZeyOXB?w1DC
zozuY5g|%@<*@|vQrI-Yr!THSd9Oxyg{iIEMrMQA~3hS?w$*VQ|dm%h+KM9~I?CI(0
zKP|FEis7FabQQRu`i@AT9#V&fD1z&d?vja;7;=2l&epwRr7ri+tt7xzclT*Ku53q-
z26uJC2nbCdTA%x8D_?)UO^i2Co0?CWJup{j^?>WOI%HT?PDSw|ZhD%BB=w1VL{#*7
z9SzMyTiuRT=ip<)u{cx<Q2}bfKw3d*ce>K}io<GbMRfJOh8UJl8<uA+-)pVTsgN8}
z^QBiSO06N#44#!u`VCLOf-oRy;rV$NSx|6%?68ql=`8fq-koEQ@|`8ta%Wb`S#{`W
zwZ}z~+zb~*eg!munP24gQtR_YyZh)klj(3+CLESD*H?fkMysWp_{JKvr@!LqZ#qIa
zt#E*n2k5h4I%%Wp;2`0cuDc>3Yav*SjG$vdH#$r%vVCG>5KWYba((fpkPCGU#C%c5
zH~Rj&iHih67Hjv#q*K(Si+E(JeCN1MC4jK8Y-d@=zsaUXTHfN%RFEU6mG}cBTLKgj
zs&VMp$S68|2P<@Y`!Pc<;Pw{i=*;m0Fe)pUBljoaCbyxT_s5eo{z?WIDD)j1<Wm)d
zk-l?panPs@1dY}$%{duj<gGaMoJr*MR#kM%OzgMS@3Qlp-7&K+1{*1;K}RtZua5Rn
zhG_d>DVUqA8KtK(JF{${gUVh<J29BzTi{T~cp@DN6Fe!0>55%%|Hayc4cJf($xPK`
za!uUfGSIQVahC~F+Xzr~+=-32Hy<-}Jd+0~U3KaPuRmoNMo<>j4MH?YpsfJt9XX8(
z?SNioFxSY+3&XezZNgw|3wl;(u6O2Wz)uZs#v02s_<wjK>EEl&ivO^unwWR1@uA5X
z*-b$*XhT#Y;KXDWIYmj@05@}lsRO#_cCEc@5!r0SfL!5L_-{b9O-IWtYkw=Dw`hSg
z$B0d8m}gIN^lL?avd<b+_nSZQG20rf&Lsdzxz*ZJ{}OUR3RpdM^#n79I17dE(<+|l
zGYW+{bl0BW-@L#BA|jEpb+c7b3_hTXNYI=Bch8P>%u8rV{wEoVkzW%)+3`?+S~3P=
z&C1|O7W$BE8YFAjkX0sX2Q81c^hA6ftAWt6hKg+&_q7|RSbBm$)S5C*oREDB)T0sl
z?`7xor)6KA#jstB-og89D?sR4ngF46DU!{Ar+Si^G^<|`7q(oXFY4mV7Sk@&;@<t?
zgW<Sml2O7;0kU3a&B`!Yd~upFGej@qCHi2~<veu_Thdn*;KD5xsdf~5W`hukouls=
zV3KJefi`)aX;hVOYXLo>1;mTHB!$gBzaedpQV#cMFnga=wcLC0bnh>{eh%bazxS8D
zt2J_Qa&OL;Q*yq?mvBJ%%RL5&W;IUJwc!OT7jliEf_tH-J>NPLv`Su+5a{rUKGD~h
z%x~cg1n%|r_6<6Bv1%fms$(TTp*agm7t^6xDw+LztqN&Am5F4Slq-PXx45@aJE%A~
zDD?Qm5-$l-YhlT6Y(;0{uPGa|p}LL>6TX4AQ0j+5n>8GzYQJ~qhVM#DKmgYlt(NE#
ztb;vNCw0NWuB4U>*c6J+T(*L^T}xMDwk`@lHBaS7HDjMv{KZC~ICEGu<80|*yY^e?
z`Rv(8XslT*MbOW%pEjHfAj%aC6>7h<na$u{q@?+(Jsd43vF-SJL3yU5b)oE1`K6X>
zK9?C#Tx#YeCsox9^L6gR@jg{01(a=csuc#z#3ac9qSYTVo>z=CU94`Dz5`4Zl>bzc
zJMxhq%S2xX;qabhI%xI$Ogkt9@R|k}fcI&JSZlgB(`Qysyvst-&Ryv<s3+cJ{&lcQ
zQV!4C7<ePDIBc}2DL3vtPZUhSUX}0h&fR03d)(rGfgR18XHQSc9<m99A}(Q7;b^bq
z6>HS&d0@Lm>2JJDa(||>3jRIzQh}mp<x*u#^fKY^4QsJy7(kfzDbU3EG>@{WI?5t;
zW4BAna;K2Rm$6iL$ye?YtaQp%%*o>#%Cfq#T8$61NE%NsA`~r$0%mJXwPI;WtwkTC
z7t_T$0c&l06OaW+JKD(>C3lfj-sfvAkTHFJZ(Q>+?leeI7sk6sR~Dd{5-1h|7to!i
zV-T{7b(WC}Xe=?cC<Kap&k-+BmtA{mtPGUMI`T{EK=gjg4atIM^W$|qqY%?uK&iKm
zkC5}$;X-=p*XnA0MegWI(*MvwtJ|}#wU+$4ZG24r&)pF+?eRc*QIEHCZ{nRVd51f0
z<9hr{4i^I|2`bVU#grBV=<kaS{=gn2!W!sc#)j<ASL8avMJM91s1sOKom3E!j)ssj
zE7yfqO#3nUC|^9qEw^s!zk3&JfxaZ)pp**ukWj}Rd98!tXcf0R3@@}|pNf4ozp`a%
z13jFtXTWvo&k^HACkUW=l=8E4iPJN(AI`{bj#QFcs?Ar)Drk5+MU^u68eQOG=;fF%
zc~SPntd+rU7Ii8yx3*;2)MMzPd}=*ZXtr<8;w*rgWDe*B&0Uj%3PRuHWnSPFOv<U~
zCKU#=271W5YRnw>16@Mp0)S-bZH_Qq#A%S}OU)sD%aiqI_9FS<02oa7Dv}V!1xZlH
zyKDAJ#D0z_Pjl2M(Y9?Ah#QGsq-c=`gIt!U$8ixZF);cWx#rm{iDqOi7*_8r!Z6sV
zIXcw9c`3-6)LIv66H~-Pp-`twI+K?*{9@eC3>A23eo7DMZf`Z`LJA?2t=OGy>WBSe
z1T5^u5YU(<G7aD7HUuN-Bl4MS$e%5-x*_w76@T+SP&-rhoJ*6T8<JEOZYyTq2U-~c
z?{ADxT~+{+6u-RRuR^QchTMQ>FM}MO=bc&&qzP5fBHo}7```_^4<E9iM<zf$)Wn0Y
z_d-I<$PoPutkOaP8ko5TEYV=c4M?8-BAYSe)jSgcR_8!khS~6x9zBdE{6+vu8x9tV
zqF^_!l~LNkgc^J!3~hruXGDctc*j=^cFTBr*12>hx{z}(e&@6Z_H8fQ;fI`l=czL8
zZVX@5?C!)c-=(=O_UIK%p|GU%ba0Rv^QGMCDt69+*!4BY;T;M{!`(*1x0^T9d4oj3
zN(3!Xj(#aB5Lbznjj`10^|j9zNczaeUB<1P?uD^{!ybD2*P;KSsbO}e&?<=LP#?@W
zGHHbSVC3TIy8|J$Y2M_Zk}lfAL870M)D3kaz*)_Bl#<)=tMJE+W_%Kgt`EU-HHwvC
z-5d>@NifzyjWDe%=ub@DbPU)=N}?ii%6`K;pc_!_p~()gfWy$6VrnnIzH($N{cfE}
zH@+rz&?OQz*DMRxG6UorNom=hraukKgv++LLVlsR!ur1G;3oH#Cpom*tLp}VVl-cu
za`u5p@b3ZCf%tV<T>eL&skM1lIn>j;6{N$vn~PvX1(e)XK9}fP!7B8U9$Z@;+6B|>
z#Br0|A2KVaKWL=wBVX_It|JYOB<U%mZXDcLM^G)`st`x+!)73nwUby&RL5wH!9tZn
zk(%{z+LxM;e+@9ONb^r<Y8KY!LhuS*A&~Js`l+V~y5#p+Cr;73v%hFM$Sz<9Ky^f6
zkx8oq`{o+!p_EpUp^FP^EngirWJB)A{R58Mb2Y!VUjH^)fD<LciEi+oi@9lIZ-J>l
zQmm6AD3BqDlGaJ60TSh_<Sn8M5@sDlgQ%}tkZzELCbbQ<#3x>pBGM)=T|9x<hDY;(
zx^oxp;sEqbZG%#839yh%vgN8FO-&h2-q4NE!NLCiZs``15-#27zOS=wPTNnhbJp7J
zh9GK4wqWg9bR?bUub(r89OY9dY~tXzPBy;*qH3AX$-5iUy``AtYk-5S<~vA|@|OTQ
zO(P}k003AII3{*|sYSMWA}@A$gc13gnt78h;aF3Re+RJ(1e;qK{}SVLbfzybi0RU2
zk?g~E=v(@AY%E4akGP*QRzR<Mh-qw*5BB^GhB8O-p6Ryn1@3OlOUL9@#`u&Px5<H-
z`s#Firf0ujogSa*6@ce^$V*rt(AY!!O}QJXb6LO&JFt1`gp^h&v?VkU?MMxl$)wvb
zDt{7>Q00;<oS@-AOESF<oYa{&IdE$pyGmQbaCxLPXZa;(N#VszHi(Vr71AlOUKK)1
zI5dm;w7wP+ASNU+!EVH=r_fHnhmCmw_U~E%Q~GnK>*miKewH8G0Chl$zdGl9BFdYx
ziD!0ZL>ry0OXBuq*m3*-c6*01)haL~?F$b0P=`^~ecs#Hu^lsjj-6T`*p|j^pW|hW
z+a<B#CMrSA$<~BUzHC`cpS0zQH+i~ic*W-1HrZQ(J4WgnMZ%R2z0GI(qpzj6_9=Ah
zq9XknPw43cX!~uc=)nPrQDIZ@d*nQsz{Yu(1sh+i5o#wWIx3W-McYzUbJA?dR^#sS
zlO4iY7c0CWjy2zHsQNjy;-MmVH>m6L$PYic8}&6UZx}@|$4zEWPH;dmZvH@=hWn1*
z*zrgM6^0(Sj@cGXgkEExX<;{H;Yiq~l>L@89F}aE5j7<*WI)Dhaynjd8FNHk-Kp{<
zgO1sIdB`~}&n6Xsm*t_+M1?s+tEi&tyS=DvnND}~e4otu8ng8Uhngw;CF|=V4&2dI
z4?Q|(RulOMmV7WU$k6L1>)CuB<(Xw`RBdyj<j9PXT4j(Lb0{sG2DtAhWvJmVL~uMs
zNR<Yqc8SJTQ4Z5-+)!%QWkUT)bZ0(+E?C|G@dU>LIbn0!E^n>>IY&6O87JS&zkJM0
z$n(5-mCt3%BN)Kv-_W<>ob8{rl9EwJamqB=G&6!$tc*5zTgS;}H%W<tc-0cLT3u70
zute&_NC$lt8G8{)YG<sLNcfLrmKd&r>u{pS#L_#H^!%*NTKMJ0e_?lr676NIP|Tc*
zrcZD-p0ARklym&3#tqT_xE9t_Q!B(;>BZ(tV>3}Fydy;iVxj~J#B^!pZF=ILAWgd+
zF6)lXsW)W3CBXaK^3e(5tdS>oQx*o0F7g~sArFq!kk?|mZ=Rxksh{wk*YA}A`u>LL
zm>u*P*NgXMUFDaTJXXJ|k#RLxI@FKb?@l)`-E2dTc}EpZ+cbOZD{!f44}Gooq8`)*
zN+#PyjpcDeGHUcTttNdLSRKvD2XZZ#aa=xmW@kccnL7OgEe`0OS(M9|vYFWE<0(=`
z-l4PD9?Yjx$pWb~R*3+bOEs6?Qgu(t{y400Dn4IO8>VmHj<n8ZgG&%VY2&*2Yra{r
zItI4#?=HL+>T`XEPV}3Qjt1d$R1MK8W||-RGu%b@cxv0N%^k;&c4=T_Oni@S9JZQE
z8hsT*J@u~~8a5)8xn^idN#677wN$<eN%o%xm6?34e&y&-RLx?eF+I1Q=FJ^Po*5SG
zUUV|}@cxUd<kGnMX{eL1He8kC<o*2iB^Rmv5p1lS=jT!uP3g}rH4ZHO)~1;{QA?9)
zRJU7giD0ZK%K(F!KREJ8H5Zs;i8qo|--xgDEdfywr|K*&Yi*UzH)oX&&h{($#^&eW
zjN`VZ01;+l(z?WFDH=%z6kBQVY;BKrvs1igeMxkQ-tby}%i~?U)c=9`(8VzYAXn=B
zx2vMnbVXNMB8wY$Bu1;(*We+BiACnl88-RB4vY?nNW!*m+ekFDfP`|I8yUULC0EU%
z@jP~(8h!P+vQcS!_ZpsVgaN*l-<?{Z@4d&mEng=noF)Ljc@Wmk?QNvO9;i0&kGvhf
zV}7MCG;XRNu6M)9fAcfDRT}HIe7x(_l@yGEKGieMCPg9&LhQzEnsF4f<5))fdjI5W
zUih8%&U^i`-_uoGcY0@dZI#3rh|;PIBqs%&2MO9fRHum(!5Y=4*0=NKhrQ3zS$7KG
zZG12{=4ql?6JA*%fx_WFruzx+da=P-^6dpmvymEWmEAgiU1`#cU|Dcepk=r)S%-cc
z;%=&ud^B$>T>q5s={ENk=qq(Efi|#J-|=GmvwAKfWoRVZ5j4lzUyxf4d+Dy#Zq=67
zttVvJzLKH1+;#J8YsPeK-XMD3hP3M<Wb-KVSw`2H9;0X3c3Yio<(gLdzLyfGPf>St
zwzWYT=LH$jID~nJSCkeN*dz;)ds8+?Yr&91_>8Uo6WEu)qtRz3dGpF^Ye(mzB+eA+
zM&a(qIB{2{#8yHYvUyJW644E1MQHzq4#C?pPXHF{_dn7q4^4iY+)%`i0@*rrwS=vi
z=ou_k!z@8q8?s8*=LIwbhdnyrI<Jk-moz>q#)~}kI`53lzf=<8eNO}#%Bp5`Ycy{w
z6tY_B_UG+Qn!XC98w;ah=gdE)A5Eu?Y0v|_Aj`a`$Qq>`9?hNGn%-5uE+yV8pcIED
zc3NU+XZD?A<RxxblhGZzwGTSC`y3dnJR_hIr<Gv&iqX0R#)9*oq-yqIE8mbs%NS5h
zf~=ahtY5N$VH4jZV)tz?`Z@}?@KGw3b?1b64&Ll^#AZ4);BfG2K(WR<OcRnC*kIBU
zD(n;|WxU@qiUw~Dnb7>kEYUi6k7@$idPwl~U8h<_=-GHZ%ZNH{odxfqJ9~V`XI$qg
zRNu$G$$7N*1aGII(+RrNGn)N)e8|0Io~!`Av6^;hgT^%4^69O$d~z;it@B*1H}p31
z-5Q6riICOhW5Ft>qb6-lT8`lc%{+mZ_fB0LWK9C4RvMRVC88-*Gi9z8i&hd{SiEkh
z!k*nqBi}$TvUr2iEg8MdJVUfUTK0O16ae6u-|{lEUzvmHtBa)YLq6<sBQ8TN`}5qR
zNs^)~cXgJL%f^yo%8<4%YJvJ3J#K<DeM7>yU)a_TJ<~LL6Q@;BwzM<{Xa#Pyu>8{O
zmzeRgmhdyd2#1-8WN+-aiKxGK{LRB}Sb1-N&);fAz7IiyTfNXaFA8nJZLsrvkc79l
z1(AoyAh<gO)xJZ>*_&iD>VP^e&j2H8LAx~{GS?7(yzX5MQE14L8_^R{xQ+LG8_6Ot
zOm_s8AX8rk;fjJLZ~z#SGNzQoO-06d-KqoOyD{|^%ea`>nM%S(_8HaLgEYpNk_mdl
zQ{-OjEXJTJ=d(3%PFL{;*6<x&`KJONpJnrCsdWG{0UIF71#}=vFaSbSVAKRXkjS-X
zJC42fOmBbb7`ELN=yB~MKPGWz<D!&gV2}Y8&fx^p*G3eqMyzS^mOyaMV%0Av%aa)_
z)G}Ph@^p#8mw~UEpJuvK#qDjT`;}n!5|)m|&9GK$XfB5&yOf@{xbGXzdJhh)0y%~;
z<hg1m!mPRa|L{i5I<Hd4LwNT=tyXewm0dTrcABm~hK<@V3c4_WI~78$;JXV_pc0_M
zI5Nq;jbFB}<D}u$lop2Z`X;o#g$?_XQXsOWsW+<|&Ta_d2pwn49&~W-84vu^K+<fK
z@(~7{G9e0KlWAk`FtR01s^JZmFjnCu2NwnCnF3QuK@HL1Kzsj-FpZxv6>~$O2cc*X
zr5%LSu_^T+a)j7$V#09XBpw_P5i^v;J#Y|+x5-?sOO#RsYIt5@RM1gKp-!`S8DSc?
z=OxdgAV2*n3ucJyL>i(=03eeklJ1zE`RQAW>cHhE4_wG$Euv3*bu$HI1q@dFBf1$v
zej7g@0BQ=SNrby3LF+OKj}k^)Ot5D~_XV4{X@`@nfZ#I`B&(^4yh{HfpNT44q;SkV
zz9K~+SyQ}(VIwu}p`sys&?0Y~)8V~)(Fh7Nk?<9eOxG2Bq}=;gY3K!Dy?XO}eYwnl
z;+nM0r@J(kf%<OiANP`C))Q8dHQMl_q+pxGkmv-$GIZhObYY`Sw!XRmkcs$WtjDiC
zv10EAN|w=SZ>Eab`bulO_XN(><LnaSxo{v&h8uW8hy3o1CfF3b?vY2g9?K)i6#{|+
zMU%m@t7L{Y_-A!3W-ycMD(XELecf|mW=5jXjp*J(*yQx7s5c&AQQbzQ@80l&F6tG%
z+Rd!>5etNi=XVmQO4|WMX5!qrp={?J9PDe&j`AO>S_VBAK&=;UWfDF7y;q{%Hh*sz
zU5<tEvI?l?5;rx6hlTe`lwu`1zE;Z>5CVm;C0EF95;uUpLu_!KQb&%>1Q7ZDj)&9j
z!hcQBd}GMpx4~R(z(W3tQ_E;yUQBHfmg-30n5+ONW#Z14-i*Q)ZN}`l^>IUiHvyyB
zn2%99Y(<fz(78|a;LPQq{g8J>RKW44;|F3ZE(~5Xs$e5e2NuH;e}##)dH6#85jI?#
z&EvRpUdT3^!~OLarLkI#bwGkJxxF=2IW^SMr~;)?c$;1e%~4v<nL4^o=gp=Ot_V}g
zT=>=S-(<_{LAhRO`G-;Z#a*G*?x8;FS{tdhhYK1;*&bGCrt52p?X=&Ftk$>j*wlu;
z+O3`zu=_cy_0KM%5X_q561s^;bqD<jhmm3%5*GF%<qkW)uk`(O9w_qEtmP9Q<P9K(
z9{K6$)y*a+1qyfiuZZhFUXNoGRVcIQ%Sm>UP<SHyVRWTf1V(Sygh+P$)>qB@8G{c8
z-;G!i>4}dOcUEiQ&am;RXLv3VXUTexuZ4^UuPu9};?YE%ctM*wFD(0g6<YN%D%N4>
zqoqJL_EXay$(Rc|7yE6e8$0Sb>_HJ|n$t+pIy>fRQaQe&!h00y_zEeqzV!s;B5zl%
z6G#rKdZ%FvIjQkt;i)>79bid4CXmf7EWb*wzjs(92>V_JBO?Hpe$(`pPbkYQ!5{)V
zJY^%U>R3>NJUlwa%OQ`=T(;na&S1R38iyt(GEFRe<sa0F4nD=mWYe6PxjVMkwO6?f
zabiP`Z!u0CJz$(VjTNGme)=uCYDXnBE~UmWdt(e4kJlySd+X$NXr1v^=rN=(f$gI~
z&T?c0foZY<?%{3j^3qVOT^_tGTyWdJ!V^%jC>frPBM(mGA+iGHA&{Dv-Ngr{yvmy8
zSMeek2@1}61&_~wxm$<gI=&2^aOwp<_Bnl0#=&ZEjmwtB!PVdbpYnJRtooFgz~faP
zQ!Ui;#Fl1aGdr=lome>Mi3cq3y9P`UI2Q2nz<>)TT#9oCS#~_v;z9$`O+0I%DMI(+
zJQN?};AUX!-W(QCK0LB8(bP3!(0ZR!D6>i9lvo|!G>?cYNWhzYC~KSqq_Z`W<huU$
z>2ovqc-R5TdQ<rTy>+135wshHCQ~tLsJ&R(Y9`P)QX55J*tf<u`MleMCZe!CZ=*6p
znxX3}OWO|{d;r>ZY~j#`veNA>O0bcwvnLa}OK0qas<K-BY7{jmyV)7P@?m!L+F1T=
zi<^xoM4Jd|>v|7)qBBRQs93<;mcK99;X%UTG7}pv6E-{~0{04O%&&$Noi{`8K|U`8
zyMJbe<1ICy0h{ctGqBp^qfa|81eB#OW=z7Rhw0w=MM>F{BseSB>RZ@Qi{mgT>Wb8U
zR^e6Otbb#2R~RCJ%StTUS5&%nwYpsguUJo4XE42+>nQE}+e+L-OF!W^;kdTwN*GQr
zx&lPnI{kz<Ini2pGZ@Y5$tBRPcE#d_zT47@X-^#wYvu?YgYwnJw8y`_2sI*MDrCpr
z3Y35Yf-Vl)+rI7e)@>ofDH+3VZR^Msj<ef#HrptuGw`g=CVGS5%~ttS@>78R5$@hr
z3QADCJKj8~g4&O*WHJlAc#}Ie)Yi?p8xP|?yZaxFfc@l-RpIpYVPL-lyF!N1s5a8Y
z#~F*g?`qt}kEgwe%C<!Jd7iA%Yc;SFZodl`P=$g^NXx-dt%$=j^m>BmW^@+0P3#yE
zn~f0cccUp<XQQ>y7lL<^rbd#jBQ&+B(h~h|vfEmptRx*hR)%0i<TNNQ03Cg(`Qye5
zt0#)D+TX?ahP&Y&KEy&4lr9vS(<9apwU&IEwD5UL)G#iFo_N8eI$^G?8ziGQvmR+r
zLA5=H1xUv?H_+~`t8mijpiwr%zE#|}*CxRNx~#j;-p<}3<3U~e9A6R0ekYBp{OM@Z
zua;M`V@QKtd=4IfpV$fy2x858-9fu-SzUBf8@o9wKpbP^Tk*GD!oyXbCIy-8bxRNb
zJ95I&pO+IF8DB&2_eH`&lwvf5cK$Im`X3aU5!dipk(S~6I|XbkR4czkW@ZFpnG=ZR
zUn~&Ib_>MvErFOXddeH3CnqW^J;7Dp5L`9Jcb7aZGt#IGrBSuf75G0WlQJRXH-!Pc
zhSMZ~QD_fepvYX6q>+O%?h6S3@wob37CFK;M(K{2ONA{%&`pDUsaMpm+5o*T5sH1e
z;Ol?-2p$%H{t%|htgi5sob9#MWE818v*x<Z-6i<&=@Z&uzM2ZpMbOPGNnn<w$1LIL
zr7}3c?k4Frcrp7Ep`+oO*Y94ufAPz+^A|rofAQ0c_rKA7t<L=E*$<B!nYFvWqlw+}
zLDY~w;UzdtGx;5xXiBT>6lygnK(zS+>Jqw1ddTn_!=Yb3l6d5BQgR)a92Z5_t*L4b
zok78RLDsh4mB%+aVFNQn14;amkeU~QcVLasE08_)O6KA7ILI8MuCxf~jVxxcJjtb;
zW=G@E=x{p&@Gr6S!(CQJldav54e~?BZg20REhanv@9~k_oMW*Kt_5?2DUe~;Pf#fc
zRR)UTjeefRgp5gDk+1_G>cQ~A;S(ZD=g2l{nspK1dpJ7MmJ~1pdQzO`EYUb~pl{~H
z@Xf=uW%%-|6%3o(pNmo~Oks(If#aJy_5|SIbk4c~Dqf4rc-`OGidb=Mgcf+t!zqpG
zsbU?g=S6<S<F#5NE$E*E^aC?7S;v<GAv$UB)Q|v-EGk_#$P0=vbQ#aAlG_!rqR4$V
z7{^hAsa*M}SUG0&(&_|$hC-bK*l#nH^`wKJlwvNfn4j!ivYjYsV(8Y-AQQuyZR3(J
zK_Rl=*XW_KwjC<NyCpnReJ8MczVJvJ(uoQzE^>^d=k;@D+%7H(DgThc=KP$r+0M_|
z{PFvwa88FJrdhiQ)(beY|Kp2ptSpR&L=XK8zeSxLKjAxpw9txTNc_iCENW=L&nJCD
z&B9QmRJ+JgL#60ITjm4SpQDz!I#R^G1Bs(!ahXcm^J9yI!SB*h{iaY?3SqhPwDz=(
z_+%$1C|_2ziwMvGGngsJ1nVl1lV7nRYW;8WCQ8sNCY!|KYZ1c)wywnht+MA#)=Ziv
z5n@+P%3adTC_4c@6$^2xk)HzWipoy&lQrSX%UA;D6AM&!T3BT#qv`Z2xWw2d^H9vJ
zt`nv$LufLGbjuXZYIE9VmxTNDwshfnk<=UBUC4`Dq4miofEe9XmUqN_G)S@{I>6mP
z;a}8;RcO&e1c4Jc<6q26uGx~e;s44k=AR@j&5A0sq9xu>Wo=SN+m`BK!BP5s7Ubcy
zcZ#0o2|4$BVh>+nv-f*vy@)*jnXcF~Bs=AxmS-($6iTbE(psl3)KqH1da%|N^Iccb
zykdUw$<{KE+sTf*V@m%5%68I8zp}IliCCu7EhXDYx_CiX9qE#xvJvuAiSRxbZS*1)
z+OH<jDA04XeI(7yAS6;nl|NcVv;gnAocLj#lHz?!h&^u$vDbG9u`}nOVFBdGg2<6Y
zgB)o>&jKaS`Ry%KJ}vZ$PB(~G;pkt=WFDo)E3}n<!dXH<K*K7riOYDq2oYhXh?pUD
zgM1LX6XjU1`hx-}4X2%ldVTnLMf!JQTlp>8U)|n*kJPh<d5qr!3$xPtaQc~PX>lDb
zr+7^UBe@*Tm`ntcW@=s{&NO~nFoXOvTgj}V_fWf3UryT@5m%@uYrq*-R-8WntT=rk
zs?){U7V(o=0_-}za<LJqtPxuLBMV?;VuhE#|KjJ_u<+cGHwh=K3uyI97!`(hv<QuG
zOB&bIUAJ0lr?R)F2+)dy;-n*nu-E5($Qs1<S{%C~(Kj+M%N-PdQ_P~FR+>-~1`EN~
z@*}p`D*@;fu*K}v%qRiJF~-`;VluNcs=b^?F;?i#z}z0Vh)`Z|7KOoCGL%+pqkYsV
zyuICDqA(MnfVEh19rq`(P81c77UNEtYPr$SrSRaKZNoF01fi_qRTYLL+%~79!C?UQ
zT*t(*PuxN?i&u5HnPD(6@(^cVhT8WqA6*_OOrG;L0SV7lQL?A#7jrlwUKlZ9CvR-r
z7y4=#796aEu`8x;<$z4lik{K3X;&iUQZ3LWr0b#mIFKL?^X=|zdx>|+f5YlDHBqMT
z7y{rO<Bvp{2)nT3$R&5@=-iUAJKZj$zQ*<?*TGi9TTV;QUuQHJ>#wjY&uMA>^+Z|i
z9XLB3yl>08q|u2l4GoAY)~r1>LaQ(TSe;}ixz?l7(7a{s&^nB=(C%l41ryd>f4@|-
z51A~jS9enOzrFo~V*9M<oQX<p5TNLsDfnxocMU1<!|$ct6j5_ZHN3Mt6X-6(p;QKU
zv8G0pOve$1dTO&dhtyN|Ue`Mh&C1%*b<hw}oNKgbowsGRWvKadCTj<1^d-$T>w{7h
z6vR6tqYu;|6PIyn$;26wiObN@@o{>pkszGrBRH&;_Mo;}r8hJ?7>y7hE?P`h0Bj4u
zbC>aIus|&tpkv^55ihOb0i-Uq!NI^w9dXU)Ks3P9^T3n|sWm`bmwjl>3Lr3k-|g*e
zdKu-^)9WsinJcn8n8%-Etvjk-_E%wa4UEftaP4e(*5OGKZq{2GO@@p|9pmY93^Rse
z@diByfH4?{hb%*U1anC5sKSFPwucGKbBqU9a6O3EN5{_1LZfp}<qY`YG#G{Cth^&<
z?0oK$a$Ff29V%i+kmI@T)CO9jH(oK1ulsAE4i5Hl-BLr983-7je^li<N!joUwI8Vy
z^a`C|a&{gLI#QAUfz@Ce;jQ^DLWgah!#p2SnV05@!z*`mJh|=z1G^r?mC=_Xx@^tV
z;WZPdbD^oYc^{^;wcmUSw4ukN!$*szWhAjt<p;I;2?ZtzMQDK8``*JnVth2>Jp-Jv
zUOSJ1_s&edv@#@*{c=9-!Z-j)a_F!UEKhHdO3jM<xbF@tEjeTyh@(J_SnMRA&PSsu
zybi`^ECvDs>m;-10A}@dmbHCT9f-}SRU{}(jPpUD-wW7OfK~^R8O^8|<VafSOfr(o
z`)Cqp?Pj5FKCtkZV0g@<<3pn%v6(H`*#}2^7f=<mkF<^)F$Eri)#!eyt-Ug#4rhR%
znv>*lajJQe&>V@v#X$nT8OBGO_poaoVE$S?02}}la)`p}G3r=S|C6Ik_qWhJG^>Mw
z8WRLmufKqPzJQk4=7bGxv7KXRjYZrh*$jD*0!I2gJrp|5u0@!%?gh3OcL9KI97y#S
zlOmpLQN(;mQ*?M~o=6$Y0|--KuKAf7RlfI%`1905<*0`$Y&Oa(Ds__v*a(pngC%wW
zkx9|VM~zTm<q+KfXlcKncd9IXGzPSlQEs>9o@`miIuk$=l|&NhEwWAjXbcPt2%uf7
zl0+}g59T=rhN^4v{rUnpu`iYDQsMtxv`crfz5iTP+pr}ntWLpQlG^K*xU~k(y_Ev>
z{~Kbb`Yvg$!K_^Ej*`AN{)xk{<og<Nu{B}+oM^v~R}C~X1|?-X1;ib_+b(ri&-|Dt
zeK;^0JxzlW-D-b%hpqBZ_8B>Kv&$XD{yTj}{~>Vf^x^M+*7q&Z?XF$#loXr#P@Yp%
z#ZFOG*wny6u9e+WeNJ^NL;}%Q9hCpMZo-yc!sc2FmBo#|I6&!g-oZ8`afh@xA6}FB
zb63s{N@sE_Xm3c9Ra3X27xelG%cqNekWT3dWzJ#07xwBur@`<UWraU;J8k4)xskmm
z9fGlzptfiWYSTNljm1)5ssJyR(1Qh|J8qIOI!ER_O4$ovAR_RdC0?H{&w$s@yO@UI
zgD}dwTn;SH@StCx&ai6Il3GVeSC!dWI9U_59J8owVTERwu>3&!t*t1u_^c?j`x2P$
zuGcMl1z-|8Wt@09yr#?HyYEi7%+f5NYqu4Qo$hXAQkrn^s5ufh9f`m?008NH)K>Ds
zrk73pZU(#0Udp^N3iI3tyhZ`D4d;$=-Qeths*RGp)BmeXAS?BS^Z=fqUq%gZ(VY|l
zI{n1&;>BsXO0pl4Rf)s?53XQ$-Lw9wW1gLQu2-wPs7i)?3XRuI0el|A*tk>}KoA`g
zlglIPGuX$QjA}aq86j+0X9gUsqNw8)f^CT&GMwLRl9O21L6|~3VO)qS^wCKS82X*F
zdXEA@gW_y^3N_05S!Q2e9>I=TJSpg^a6j{2(akZgDQp7E4z_o$gAKbOjPj6?=xcbm
zy$u?+wg}bfu#}frx#^QgCw3bVXz{dBhJ`JaTUl6Ii>g~ytt77ofBI%mV|#=43nz(7
z-I6aqe;CZ#hr#^LTRTACd<Fmt=UXvo(Cnp4q30)B)lG@TRgCC%dbwM<?)o!;d3&3~
zah&BDyPOagF&sPM+-aO6QoM<Y{AgiJIT(j6P4IJHIUQI>pmm_FYv>?*5K$+nwel#w
z2sh_^c<hrAL8Y>_<aq9TAGdY+#H+XrKAtY%nEDi-pRUj1jx*^aq@zIm1C&^tp%nDh
zw0#2`72EaFEjec)K8iGq@Pp9c<lH~zKG|aquW??9b8;UXE1VxIw!p3oZs1S&=t`_$
z%bpLl1@lL!fYBY6Y_g?bM03hFXXWg(XQdLCU3Z4!TGwoDpGyGta|E!P_+$O$<gK;C
zL9=@0BAJr=biHX?rVgd9LBW#H^rCDAD%w--6hyz9UqS<q=(4apbypW(R?n4pdL&M5
z60K9v4D&OL{lw0Io>P6WlBdAZHxBT8_3H}~+QOkeZ}>ZKX1`Ip59hD4hSh-TI-9lE
zjnSX*xPf0a76{(Af6K(%Wd6lEVFi}`KSC_DEC@W(LA&%s0|89gpz3_2J-~E}37Yl=
zcPpV|3x9@r@+3N2bYg>{k-kGHw6M~QO|LJvc_U@yJK_JJPB-mWvv*7VtaZ`N1)kq&
zLd^Ey7shch-g2})@}H6cvPA|szf$LE&c2||7wa^Ai7$rXCo@;gy_w@)cIt&%5+TR)
zzMB{T{PZVS!CiXCKDFT3wFKC;gxIyD$*v_fF2-(Dm2|T{nzbfe^G1jIvS5^m7EmUr
zqKZuSG&6e9aMWERiwP+=HsuC*O{>&PN~BT2%A^9%xQI`-)Shv8TV#S~?@-AFa+bKR
zTEG-lmHbkaQgZ44wmj0IkTF@??BF~U&OkC_vnq;%r5kY8D_<sU{Qrpr=F6onUnpl`
zE-1nPNuHaGFJX8x&G6)!;UOWPji2Rso@|Tf$t};r>IKU3Je`<EvxVF6qbVbFO7Hah
z`TE^*agMr&e#%MK!Bl0tnX0VGROLQXl^NWsoJPZ!VAJGJ^GaC<uT<I{oFK2n*C{*Z
z2_{-Q*>?xXj-v7YIP8?V5p{(hYRtA)cCeeZYBDmD{hd9sF)cd!;DKNvFI8C;H+}?X
zCPhL+hBZ3${}x*~`yBo!?r-iwZ#7s$x*XJC=5v#<(sT5FqIt&4ZJu#udB&?2&v*?y
z<0_o4cJquEe~xD)7V-S^EaD8d)l7RtnEA)#>};FNB7M<|DbRs{hJpK2r<bT|9IueK
z>y$_Wvo=FcaRnuj`@8v%xj%*6AAS%ToUDBA@1s2#U%}IjSTXlEYjA(ql>zdg;iGGD
zh1NEP`%_TC<NjtaqBZ4zxzgyYgIqxF@1m3YlW;hbcZu^@`Gipu$^b>dNdE)o(6V|v
z(6PD2aY6#waXnJ`iYxLzyB?_s_-f~!*wMer@vdqI@5<q?TI^~$aWVe>6uT-<<)36%
z<z4J*Y1q}e4xI<*UprJlKB}N<jZphVIb}=kckG#zU!I}sQnvRt>GXo>XO2V<)IhTP
zB72{ni}Fyy<g)`dyOE)!SELHV!}93Z4Ci;~?nrp~7+b**DXw!-f!^2cYbZ=tT?T54
z3D@oD_aGa(SNKSxv$2-Vgcr*4oS6T6%M&t?fT~{|T7OeA1QM_`Dd=-b`VIWeHb6_H
z&p0#;xG{<!Yz&vOe&Va7xKvrooNk8H)ZDuv^ld8pWnT@JX!*HDBr~01LVp>JCamFa
zJaAmb*&rq5Ww&dCfNBiNXcYE?IXutl8C9zmad0^ZSds1WusRB=ei=rWn5Xy93QO2d
z4M(G~xICN>)X|ghXpZo36{r1Ge*woyHb5;ve-SU-vYq=&b>kN1V;%pB-nP)U)%D;C
z5%+v>AwI$1bMYa*>R%ka67S;c!THfA@g`pPZ^Tph`%%1xyqlvp;xXiXJbFrm<dDp;
z-X!RW%`OB&<cIz{94?hfiW%w~!S_CpRk)WR#XCTek4CO0z{V%>4n@f5a~w-bV5cN7
zQ0I_*-G3HZTmwa)ifb-PA400*eGV)&%Gz(>&}udOR6Oo#_#-we9`|X|-@Gs%DB}PJ
zy6y)!?sd2|p0%KS078l%@1>W5s!;k(s}pa;>#k1Rh}WhA;%Z<=nPHVz;%a-8z;6P9
z3!}Vfec%;LbH@iRuvzf|wh_5<tcDoB2il>crn=pLAHu_VAK56o0V$=J*zcoa=ETgD
zt@n=WWv<@4R=pB!A*$gl&4D~1z;XNf2X9}SU5(-i^!kIGV(#zlq$PnXyt@h5*&FYq
zA&=D!x1`ZbI47pjT(mu!qPC-N`Ld|v6sSGzjRq|ld~Y;#jJde*7#HxR_L&;Y@vKJh
zXnIjaljNyhO_t6aA1-w%>?O*hd*rhMom>0mwn|;dk239PCt5M-1=0+WZ_aSzA<LC-
zriAJfk`%>dh>m&DCkD!-h{`H}$_iF-(hrKSU*F!oM&r7JgSK9-=PI1nq-@~ZOkBf~
z-M~uuhRa0*3*%a`1NS&PLNM_$3PUhCG!iACW5B?nNFQa>086J{eu{Zi2KHPSxr_`l
zo<YVliYV)Vj^5M?ppOQ#;v2GbfwOvWuo@(f;wJ|OXdJS@NGPgeCq%O^nuKc@`VIOL
z^oE@@hW#gj6`^nL`J+5a#1BC^Ko34!Xqd-NexOLhuI$g@uNusWaPX0Z*Ir@UbJbZZ
z52z4o1pi|2AHp6TEdZf%==Dj%F3jI7bWOs94W3YQPq;bqE4zo~8H%a=#&GM$hw>0r
zKL?2;4HQ-l`{>@zBqN&9$vFlxaD_`#coutQb!zUA5_(}5_HBtodEEvVjV~#19J0N$
z3ZD^<IE*6u5w)+{ov4Ac9!4z6=dhbCzyYfiv^J-38_`3Hf7OLz6tqw$pCl{PPB6Y}
zk`?<}maPP8&%;Ho3i)-G-b>hlqMF6Et7o~D6#59s)p0JMWjn>xV1(wXu!Eh3(ArH2
z)$~VA9($z!=FQpfc7JZs1+LKF&BShM&)CO^tBn*5!;xZ?i?|$&YhWdtu@P|lrheFs
zq@e<v3-YU)og@bb`3W#?*`orU9u-#cnnZNQekK(pmj}KCeuRRaM9Y&D%>|}qe>q4a
z_~#MARo*s6XNebjG}ZVeC;Y-+N%U6={z|GpP{)7AU<4GJYSxJ8VBI#9mBgq7)8`U!
zYbCQ13c%5Gm1lXS#SsAL>kBn|f%0DTy@hRHETic!GWtEMgWR)u5gXi15owK>unem@
zChJts|3|!J2Ox2F8WjCtHC+zo(L4;lPR<1DK*1KGV^nX>H7xNOiK0sslSMO_odtYv
zC2}(Y6yB^|Ob^s^a;+ngj%|0<3&sAv7Xn1)ot6MJ`)0Z|xq_%4=eh9bnI|CiCtztN
zfMhm88~F?Li#Y;n->@7P$omCwGB2mapo)Oq`#Klr964tJN7N-*&}*2#5|<ugyFy<l
z-rFkFfpTyj<}eQzz)7DuTsMd5oWpb?Sit8`;({eeWc7okXHa@h3lSP+0!vHIDZ&R-
zM_-b+a)Q=^>uI1)7SlznBK7E!Opg@0_zkWPuYe3W>i4gK+BpxrUQ(!vb&TS(5v(0m
zSjDP7_X$UpH@%k`k(-KrbcJ{5?#<{~XgkxO@<hkCxA2C0<n~tX0C%|q+_8p+8T1n}
zm3dU<hNZ~kjv(-O!W=(!5{AqJtulwbFWVyM4r>$>M&^8#paCH43;PyhoG<<epi4~A
zKzMMF`Da`x_@FUg^G>5I^rHIgFooIZ&TS!|B!=aYzKv(WX1w${K#=eieJJ>J3}4I^
z%_uIak4PAu!n96jb8NbPYX5+F?r!?OL=CTbf=0cIbyf9zX5sW~n_C!dk!+e|6h2{h
zPt20l_wo-V3sz;o``2zLih8<7J#)9_YxoHbVECw^({lu<YraM569?4veuu7N8VRP4
zCfB`uL39wjKyJnZ@j`xZNRS>5fS&7iNH_KsX959d<`!qvxMga1jnj8SjU?Qs%@lK`
z-Atvu&`ja$p+=g4;%2IM$24wK{+YzOUUK82%CvEC(9~4rP^IQBq@~`n%kedm)j-5_
zqa(Eg9bwoNWe^gEVA<}w7u|PgfNbifHfql4WT^tb5!h=L1y$^xmQjrnZ}(PuY$h<a
zp82X7HQvm9GZoiu$DE_++_c>e4oj(2z%<(~V$y9$ZoBq>D7{1-_kT#4qv2LtPH#JJ
z!gEsxoaZa+K=YKM9}`wPt1$%Sm$f9Ejl;wR>BQC)in{^Boz==N|7RSiWB84%(Rv=g
z(1YG+Ga`)M%DA`W2wFAA8OxjUdV9A@ZY1uc9#`tmQ;%0Fx>Pm#)1_c`V#x#x5Cf>j
zZ*(P3kWx$=%sBAT*lXaO^V1Y#zhxNX4XM4^8QU!bJrZuT_l9}cR)<`~K!yShX0Mlk
zxt+tjg-5{}e)t)cfDMH>SwIR;t!{K-4P4kAg^mG~!1_l?jd1;rm%3%>jO2_~KGNa4
zRY=7<9TQk^$zoHHW3R_<6Hg@i$ru3)DScnX%Wm#Jq<1<ecsiG1eh_D-1Bp3>CC#bq
zD?Eh_>9n7-Mqjr!k9DL1lx^UBn&e`3S7biZM-*(Ce8ed5L=AaC?C~}Sjt}IJo9BiN
z0=ok-d+6W4OGxsr2!v*<Y);h~IrO3nOxPD?fU31+^R@_~Lk{xrBr~=H*>I^Umi4$#
z6}j*D<r+wu8`xT844G*!H@R_#lQh5iImc^48tZ7-As7m=JN(`}PL7WK$R>F6?z6A-
zz64Hp4kUjGyjKKua;l>sEsa%w?z6Wjs5N0j^qm>3%Z8!}7CKlUM;lCC&_FjMX}+a>
zS4~IJ?^;>K6<jt5e4NOTi2H^c&oXX0@`Mf1DXb$VzvDuZ9F#Yr@S&~03QFf(I7(6S
zj&0}kcZA$Y!Ku_2Nax=X9*Gy6qdg+!=7DOZoJT#+`3LKeg|b2!8OrOD?h$M{oHLaz
zh}kaEI}1e?@3^T<;!g@)7JI-!tXH}<Cre~gbKm81zIurZ4&&KhVn{CX29@%dDB8qJ
z9$gV4NW5iuXcgvJqtb8n1VVA1ux9Hf&Z7N*E96&dea6)?U-F7ky~fNpZb(r@O~V)*
zinQ>b(D^e(kkL`$SiI{>0t!e?X?U)%#sJdbUx78@w}O8crUg5Tb}x<G+_?)uYzbNk
zy_sxRpwxB^42<hdW}}Wv_iJ6~@A$LXQElsM7yLC0nP#`|tOLnvOKeoU(~k<nfB}sf
zWCsU15UzwT9jZki2tYPer2J^so&%eprdm!}is!&~&zGaFHU8DoTXQoeho9iz(kr;g
zJLQ7c`$%VBPX{vMU<NmoaKj0C42RZrzZ!nxVtqCIG=+?CfSU{QZXj>TH6U-vdD+C?
zfMe|vKn6>~c>uqkP@WCH%YI_Oq|zr0dmp{bKjVG$aWT^>4{fdY1}}{6?{~4n9Ez{U
z*7+@F@qaHCi~oQ*)@)JZhHcbfm5+^2(2*CplJ#bFWzSu?Fc&wz3hJNbg8vWjy1?K1
zH<A;35$D}uPP|*7iFZFV@h;9L?lS34j=76LZuFp$;~H%wn@%<o|7^5Euk*1^^2QwB
z!2zp`Jco7?wp-*6nHg;u3^Fm-Zkdrj`xPh;+(L+PYZLj`+!I^h$jz(AW#fKs*1AqM
zW@BC_{(R^L(FzZH#=^{?D?VK_Xq|rr0!Pv!PJtOguPov+{wqfgMt5}>7X|%5J&Ir7
z-d<t^r78fN(O-*M--)?b2M1Tk39~vn$r+p<EI6=W)|6=6VA?6m8dKJ~(yVu^(|;7@
z0__Qn=ikEa`n07)xr_s#t~qE`koS{*+9#hy7K_Thz5QE;hcg^n-`@OTN?liZo>ppQ
zwENo*`nD!Yb2nzftW87<VzdiKAVX1?$Od;gx{qP$q*-Q4IwqHG28CIjY=0X$RRig(
z8gS_3?JcGry=DiQ3t;z(Kpnjfp%^(g)C`|D^(P~p<}JX<$kSgS*2^;XK?{HM8;ApE
zAGrD=$x4zt*y&Hg!&2C($2Zet5toO-cwqA^#rZ@i3e$tv&^CexPCzSyNApflHe-0S
z#MA$YDv41_NbgjqNO!AKVCS346lp`5qScBpHEP4`7NprGe#lx09{-DeXp-Vfj`wcQ
z;ti_a7<@HO;jJUO8SI<Gdiw!UbRdua2}$&yJqR7!+ek+KxsgDebh9S$)UET-4`=>4
zscsWpv;w4i-UPkDD$$;t()bnJFk_K1>czuusiizfR$}Ns?M%fm3%9q0Wdrcpk@xP6
zGN(VvXq``xkSy%32VV3Oxj*{^MEGz?k4u!0Ze7j*m5dr4S?H8$OnN2;FwoGzHE&a8
zpxo&~blv$-b=j(0+8xr^0WIpmI4;liQn27mWxv`|9c744mRRh!-NmR7W_<P-C2<a%
zQ_ih&w)>dW(i~TqjzM>rWz#_ROTe(ycs5m0py-_}igkBQXSFZ0sRL`M=Rq{qB0m)d
zW#qY_L3{}cVVf;>vOk~Tjqe0C@ONPq#vfy0rC|8n3dm-Xbb<RmA|bj7DF)5<-197N
z|386Vj9Ix)V57N0lj8QSp#BpA*h(R_LRozWUEB~zu5v&?gG?NUefus4IlQ0P_tJ?d
z`!*)+@s911*zJO!+_hW0Qa8OX*etup<8J~kTC+aC356F_ab<`YCtx;?rO>pX;rt2h
znT8&;A(dff?D!BiSwJN&THyk%TzkijoL%?ZTctmJG92ID?!RTz1EIrnQr{KYO%Nva
ziI=82ldl)m)QW0g(k+7MB`$>Gk7?I{HyjXwSE<|AFv;YtpjeBpD^GOYuzXl`O3Izz
zV<eE+<FTeB16w|R6aamJeqx;3gPaC<qeT}bG8~LWIb3J#N?QB*S3+BQ*I}qFWXUE`
zk-#Vfpm*lk)^8g!;zPVudto~UXft!dovVDy+S0elwstKs8n)QTr&D=aokf*v=9*{2
z_n)uOGq8zVi`Qj#n!dtNmT1y3wKQ)QMwU{BBlPx`RQ;29_|1buc^LG1ed`vyX_<n8
z*`pjSDi~j1I0c6)+jQbF<Ee#6yf*jWy8gx@WTDkem)h#KnMziz1Yz-r?dlu&prp{r
zf$>jhmmYWSp30bghj%uJqpRxjIXVfF0gQf%s~q*KdYNSNRK8cU5A-Qxykn4w9}1>r
z-YC#n^;5ZkJv9eB0=U4uc(~{15|1U=O1S)JJ&O*mONx%Bk8W#|Q^k);^!6QL<Scl}
zVl~a8iWoTG!7i+}gdboJsuOe{cQTq{=)#DsrN~|{hgbC1The|p@jc01_}IB&9gZFx
zLL*6#_3?ro#qQ-mYEyd(mc|Q#F;U2e9!}Crbd|Vc#}DD${J{QK0d}DpRw$_ki2&s4
z9Xj8{y9Dc;b!tMb&ZN>oK%wGM84f&#)AR_E`(q&=jpaSqsn~@)mBUX7V1s|Mz4!1d
z)&WrSntL;}pWXXvQ`UQ*@^w1j10oO3_B|b=5-`W!dbL;OP(;>yTyKy1jaiUB9*suB
zf8xBur$h7*t&J%;B$PKXd<i-phv<hnkp5+uq%cz3RSZDyvfQjM)+(LTT;Ac<-J5)8
zcIka(qTG>n?93~gw^;5ZLQD1wf?J>ta1PluIdHQGy8lmg@7mtBk+cba-(O*IvtB}I
zQlt`RW<bHb96On0pE&UoJDJI7b!j0IBr&D{4ggwWB>eZc4t=NwAlaG2hxdamqS5Gc
zS65Y6-BqexnJzN24ccl)@QpGv9xZ4yWb3RJflhcAP@EIBLRZeITE`0@&9o(URPHsJ
zblt{BDBr6q{9B@z;}NP`)FB>Tk9NVya2ZbdLh^%pt!~tN^)~)$$nVxCtKfKrTjuTA
zG#yR9fNg&Z|E~0@ael|X^1DXqU)RmW?7dim*C%hiwYP(3^`7hrv6}bCZ*?Vsst8kI
z_#w7z&vb&e-fu;5Z;w9&Cm#Yepy?sc+WGKx+^XRCt-5Ko;rJ~qv)AzsUR(zX`fvsN
z`sveehYX)wsJAD$7Ux6Vcsj40vV(KIRf_=I!%y$k>o|e(${@PLM%>Pm2nH~|nwJp_
zW4wXMfV?-O*N_)#f3JVPg?GOU-z!ni`@q!iB}T3f?=3#w8@KR&9>QS$JbVrB{87W9
zoWF^-=rJa{L!)QLhSP2+jpqNA_Cm#Aj{B!iU&Ha7%n|hjkNrCn!3fGk1L;>`sD2rW
zf`+fdS1`(4MWSxeUFo3cz6bI`U-VbO?A6)(Ss1=@o9}^AaNWT))z3>E&ckm?-B^<i
z$OR3?%baqaSv!SahS_;0yiDmcRbtahZrZ#jLyXaGWIbgQL|3|W<Q?U^8yJqP8CvR$
zLM3lZWKi)3ZF3Hbg<Fz?V7cv{j_q%z3#lcsnh>NMdr{B;KF{ql#!PaI4by8sev)K$
z2<6#4k(r4{PmZPtvpDt=8_hwKc%m~SZ+I`a4^4lcKK=WUK`PXM#%RE50J58&<JCL=
z9D00?IjJ0{V-6|wsA}iS@^-%DHc&Yl1Ff?4zU=VO;v{uNWcFKf3MKdhQG#z!#yVn@
zJG@BB=y^!Kzaq++Sx;(;>eh4w2Y(jERnuYG(l)=Aby+niyy;+<I3;+VYMo;X5}iZl
zsxCW$@f@#{Ixr!*FC9mERkTfRdsUHCOmqk3Z&9*|l2n%oqGL4%_AxE9MbpfdDI{Ez
zmr9+`sp;52+7q-NQpelrAi3yiWO=3pV^Y*ciH@vOf<gj@YGrN71MFrWU*N5X)(%NM
zU5wPkz%u!4*fWk|7hwR3VeQ0)Oo$7a6&DO(lJ;=NmVHx5w|Gx<Aflh1*aPT`310ET
zXnxE3p^7EO7S_947aBT!4uY7)zHdX_4(m~SO$I0J6-d?i;VarflHBK^h1usS#3#q?
zf*WnScOX_>oZ!Df?m&IOJ9=QD^ecU^9Z(<)Qz7ZTE<}4!qODIl9|&`So1(3~k-0M)
zPgrxxCspsX06#6H)c05>t!WZlKwb&%;26=t5L4%ROXy+;GO%Z(Kc87-W)t6!YQC(P
z+2%f<PG&(ChOOi?N*;|mVrOQ0&Xz$*T!367yK3c@0vPbAMKYCH3N$avpBLVDIo?$*
zydyguZGvN9h!W%X$b(1eC)<<hBskt4PuU%R@8wvGmcfZ%B|80>p_7$t!ezKWZsny~
z^-!(OvYCmZq)+D+Ovm4gGJ-XN{AISzvsJbLk^yXUp!Uz>>14i-_h-{*^XaqbbQ0}>
zse$Cv3EHUO?-(&1is$hJB)tTi_GwMBhy$gLdbzU8$Zz4=wQ${SVWo-mTTg8uiFC0}
z%B<d8XN%uWsl~Ut5!zC1se`osr_>V<DI$!lbXAPWE(R44th;688P?LBL*5J0Um-F>
zW`IZ%iY}ZzpP&K>Beif{zolh?hVB2p!$_D_)d3ss_-B*Ikjf0!TEMA5tQo9srm@Ta
zjoz7hk4*g4YQJ8mz#T4Mqu=vUqCehOX$dKTDGi%i10noS*k?5f=JIhg4I=+_@R9TM
zBYGX7x~Zk=CVg0SW8`YAzjCaYb<m5SLk5^lLVL5i9FV)?xI)F^8End7PC=ev>!B7Q
zA3~op>>Q?jK>PyuiFV&-s36QaiC$NfQt$^;(|a7b%uQ$YNvZ;%{=9_bWH7JqQj%L{
zq95m*(}(%y^gqWpKgwX*xQq3CFd0PuJiqxMZ+?wNRQ=4iBq6_9(jy7TZ&t?@j4;Pz
zJdq6n2y8t4LH)iPFB6feHt1Eb*&pMcY7?3UKAuk^Vq5-ceyXkF?($EaJELir&W7o6
zw>rnCylHt}vQ$JdxRzP9+a?E;Z}d+$OYgHGTXihUV)rIlF0*{?ymE(lsN^;JYvNzJ
zK2dw|5a2BZF|Caa@oby)s*t81hO5La4ss@GcZ@T`2(5j!L&M2w6V+#!<+;qjubZgt
z{~(6or8fk3ATF~3FvUWpp0TlNiN>2`Ei2xzF>;N5F~v@Pf<~-YB=M6$yLiJX4G0mP
z@CRu?0V09A!G8%wW5tU%zT7Z=?WHgQ7q2O9^1|KLaq9f#NfJ3Av3)$5?az|g-r=n#
z@EM4)=)?vL#jv*MsZ@YT-Uq>~U;uI5kC}0^sXKV97$b|on;{$GCx`eYs_oYC+iaN7
zI-sz|8}u8hZ-IAQqk|8|BJ{e9NZ|8jgyB2xZlWJkgmxJ7MHJ%rZK9<fl;edEgqmQ6
zU&cEd4)M?2EsoHI#z4@Y5ZZGqdADDO*U-ryk@^GAu3#Agk2bzlyYY>hsOcZ!DAs9+
zU$;?znyAx1;3Xp(V6f8$!8OPm({#KYW#g^N#^ngewMxe|JY$%FD|o&_axVJ&U7cQ6
z5BfZiq|m=43hDCFSp!j`^ae)DsG_xK?qGV$BmzQE5L_8dE*6w*wQUuwAiA_CkQcj<
z3Rp<RSw1UpA#Kf?h_mzJ0+Co?kH;zewnz7if_#Oy7y*QsT_CP(f20H6<>L<=A2~*F
zBn-D`Q{XMg9D&vBRcK{}(I4C%{;}woi#^eC9#NhVVt8Nx*=)KN$=UxV#t5L3nLZ=&
z`fxrhW12^uhKgaJ5Hh~~7Q^L?O5iu>9DSaSIfUP^(n0=8{-~6J?{P7dA=>rlwz7IY
z++t<uS)eOJX!KfER?{NdLS?zG><U9s#=~4!cEulE$;z$}XaiQf7_t{d*QrMAS*6!S
z-dPca(zA_t6nO1ZBC5u=j}D}&3iB{wsnOeNe;#fbKRNt52z=NIZq%Q&?IUb4{4uXb
zae8tZ4YTKv0>|;$pC-iJLbAK`ZJ^YHDq(YO5F1oFGoo<7Cpqk7iU+N^E^Qc3cYtTO
z%XK=^{DEQ3h|CWfyd&v`H`Q-#Gp(^brsy_G$VF`BEwu6mXqYjR&`TYS)NdnveTWtc
zDKDGvFBQ3D?a3u;p<S}}A(mm>vfyDOPPKR1S%MH6Z7^;P-b;mLR9K}8%S}OryE{A@
z{*(@lqZ^)1_xCQLkO_G^M{aV675BZr;<yz#wW83iNK7keP2Cv|gH3)2Yl;FS47Y)k
z4R11wlg?%jc!>5hDAEXHYeQ@1ql!=XMO?s7Jh_)~GRi{(3bc>QQ4t#L-%KCd#84sW
z7+1x0O0m+3g$#mu%i8W+<d9)dHZ-d@Fq<2gN^KgIHO_n#k+1OAPw3x5M~d1@Ztd$1
zUJRU`bjwXx^g&KYO|^kChjKN9xx$!UKQdg?oe8+s*{&#^&T@kuV(@kZ&7T6zuZZUN
zevjakS|us*dbGykr-#(aUc7-GSaW@L9Zhr$McO4hT`6of6GURb9wt~&70J)6O-?lZ
zsIyC>)@8Pg?wo(hw2`*Pz+tlrh0t2@5dBK8GD3rRTm!De(Hpf^w{fcR*KBmEL`RTu
zia4C_6k2L)gQZtns{BlKIRNOyLuPjaH)wDaqBWgwTc-w+;V?NC`W*{&ermrfj+~pz
zm1+3^M|<!w&5~Zvp3dmdlP1ou9;68F0`gJqL}t9sFA(eCRd&rD?j8BwaPUZ6-W1*i
z0GfswcYn4>HZmx!J7E8rl4$*gHc>Wtm~9;ynP}$qxoxCDvI(3gA&V)2KN{`aD3xTC
z8GZ%bQ4;w*zftJVKd&I0wiIM!7^KDL&c%&=Nq0Dt-+zbG(Z#nrdD5ONl()$&h09^n
zF<5k-ma&^<jQh<Pe)cS^wk;ZTaW@?58w-0}E&ZD#Z*%Eg!3s@JIrIb_D~Q9$qQRgE
z0z4;RdTjZR262aD7*Q`CvMQR@QrMR*(#i9e+GIV_hy|XIgD`pstJk#B?NKGybLc7i
zYr;tO*RY=>8&v>DK)AmyhnUon;ECJweX1ldHno9NEJFTsDj<*zkB2{=3_J6wg)3kf
zgCK0(_qhXs?M!jVwL9B4WpT|Nk@_aQO~$(yV~CXeF!S^~viVkjHL{ARnY>)HaUG2!
z(B%(~)5u)m;djTWR4sLz__3y)3_qoHk2lZePb2e1NX_bM89HG!#B><U^tNTEh)$2;
z+jUFYJi1PPnIR{pV|#E+r6^Uki;F^a!TxG&kZjX7Sc2${&~&&Sb~T=KogcmBHu^fu
zoK3VtxP&PR<^BK`(E(lBmxhgF-^r@m3b)pT{ian@w%ThoiVrW@lovGx0eINY?tvzt
z35m&qC2+F7owlPa%M}7aN&-Qq1%k>51jY-aeQLWo|H$WL3;vb0yLRTMEw_WZ%>brN
z)4_47TL$I8hR-tNfs=X6|JQ}UBKioO@Jv4fV}0I3l&}&Bpq2^2rq)lCEWFLI|9^(A
zwGRPQz@;s-TfwYlJRX(imAzm)JuM?O3IhIaS&Q6rn)n#JQj*D>ca`Ln$(PECA$gpR
zrn4NQAmpQwR9<)1Mt-3q6ln3fjdEDT)hFmak-&YAYQe%?+$X5XEVL%`4$U<W(N+lT
z8<bUlNQaqfX*BZ-9Gftah8w2{&_ld)R4^|sOQPSnjVQd^;5u6ZYlI|<X%s3~#Lzn1
zCKN!vP8J)-g6Ip<lv#<?T_>Ia^(x~}S)nZTno)3Oux6}M4!R@;l`u$hKV^3GpqD3F
zY15KSgomveol=N$qzyPqfPI9c;i!avTT}~8?(bn<tS_8&)hH3C#lhC%TLG?{kC*U=
z(Y}i|lrF#25V}QYe?t!vL^mqDO<7n}LqwIaut$2@aF3uuv}p*1%3iVHGPllrNnF5M
zPjIa#Zmkp2n^?Az8ha}@K`<X4x?Buh(ZnFdKYf~8s8Jr0qUD&IxA2E62{_!v8?L%&
z!=JRM(iW>=E>7ttavS%bVhN$qw2-s4=E6Hq<@qUaNm0kPMW|T`*<82jCA+%;#iS?0
z*ngCMBD9gcNjq|r>mjc7G71ycL+7e+9-Y!V`_ZnEk6k(>m@P{{VhjDjiH4HIhLWgW
zk^u|UkPO5=bF_lkuOmBWexJ(zl_}Tb7Aa@RloN+1k3aQfq$Zvx+9o$Z;L)}Y2Ek#l
z<aleYiIALJr%AOh(|6c}iX+Jd7Vp~~oaNZl$XG7;J+}7&T_S1fM#agg0kIn8BfkHj
zBtn`BQ(YOqfJY53-u!_4nr;z@P$Sr+melEkfEVXWora_M)}`pTysPC~N`WIH@cnIZ
z5x>joEnc`ATf6Uy7^L~_Hmg!dK*p!IzAkdYWg$fq*&tWZH2u6$59LWe*SWr&G-z53
zB6=s&m+2QG)27&$oh+Y!nLg8bPQPf>GC6dz{PD{#Y@W}doSQU#?=nqwRg*9NXmde9
z@D2v3UDWB9r+-YpG~GLG)Iath)um;pxIg^yk6+k~P~0I+dfGmH_C@-Krcu9HP@nhd
zp&EWy2+PE83ZFqArB1o~i__R+1f4*bZMx%je3>kh9d7<RGJ`_GPRwgmsH`gf0;93y
zdp^2x#z?8Vx-wu0<~pMbVw}?*QjUssm9W#rHtzWR<@1cKuZD<v5ZQ;oT1sr$>uXq0
zc>|ms#MUX`ct#)vpd1rzkxwG@k1Hstz>?hKK=)&y@Nz8NiW`KldR!QPvnY~IPYr3t
zuMvn$ahAg&8is`<+}{=FzZK`j1z)Ms#Lo3!6W;Chi@#pJeen%C3BCLJ&tLz<ks5f?
zb<i@>HnFYuFhAC&4Z&GlnYp7n8utM0xNyDsi@gsa<vsoH3$=IK0)5dlV!CT`aGKTU
z*?D#GJWl8MH_Cvcyda!b4p4{~mPf*x;)kO59{H{z2os-Yrx8q$*B~H_Bq%|qP9Xbv
zc@YDH<GVm;3&A6YBuSPuF!R~`0gP$#IJGOdh{N2@JH-lPZwx|4@PmQT3xkkI%`D?$
zR-VPlti)1)C=W|DMMcjx&Y-z!OXn06yS*4wL(!Jbv@_)!<Q#@2G6t33K4ef?XV?8e
z)8rg6K)~RE(tWBh>>hp)ne7QQWS?g>{^flNKg33bCm@$UV~&BK!ULoA|AsCRu-L|4
zJOJffqz1ji-T`1qEtAdZM@=?4I30(M#rqJBvWmZ;SomYyJg^HfboHRQg-famo9*k_
z*(IXF<;4j(wtoxz!b9@ZWJ!P9pvx$(6oJ>4kuB17O8(aP1K$~&K(m4f8T~tsE{d{=
znFI`Cm!hQs6^uBJL(7Bd0aeBdt+GI*qFrY4G=VGi)Mb2qE$1&AyN5={%jE6^-4RH~
z?xDxsR@l`M5&fmGC<9k1v^M=dITU+T;&MHH;wMh%V_N+lpGP^|%1p`_m&5%%t%tV9
ztrBLRg*5vtA29oLV4}D@3u|ddnnjrYN}`o=DzJVc8%PNRmoH*?aB9#1Eh_OO)0!2d
zn>Te!pFwAHIp8tlMD5{9TkigTJM3O{pyg<s3@dk$Q3dlV3R6qkV4!j4Z%`qF&IHLY
zcbW5Go?~VpJngLE)R~}4#MaR?a91b}x)rkLLDT7^KeguVJD5gj-}TN|-lp+`VNEmh
z>W8oY{K9+HMaM?BU7+N+RL-5-(?#I>LVU8n?RBab9pr>z7E_byNtr*`t;kF|-{U|(
z`)0dxO?Q^k(rowszQPXK0rxC;@nt2tIrE^C(YUsV^O{0YT9MXMmNR8FI||4YQgy_1
zngg#xetAe_m2azSjeG56zf2IFtUjQwD(cg%c)XDfC0aa}tWpN7l2bBdF>x=*_5in(
zU0Bw~o!~%IS0KPa4O#FUwQ`2<$pp`n&Alq3$%WBd8SAx2x@l>%J8v>R&d2(cgZ+x^
z_`q7k<4De><&Q)7^4LPyE}38+)3c1Qzqq^5?)1WRS#WcyZah~LL_Ww=R<qip8dkzk
z8*!MNq4p1&s2A;y1x>PoF@2%uf2gm`d}qTKCJTa=XqjBrD@1v^e5~W=q0!j|LE~iw
zMo<G6;3A0;5_K|r)WMOrcgGxAi|DXRkQ9=?l|kK@j?!rO@E5RSI7n*tNU<In$^G&X
zP-*lDpPpWD)LW-w<QHe3&&SWA@#(W!75@#kDLFXh@H6M1Ev`nw>E~*dAX61hPmuP8
zKzkcOY+9xR<_PWeHB~LVpggXa_5tzGl;JDHnl{@cHBd3#{hyM7<91lJuo=`8p`lqG
zi-}3k1?QqRF~i&)A^TCPMXbXZQ4k}xy29CC#bIrawN*<}YrWjei9d)4^o|Gx+SL}p
z^J)6*I0@=aS=>B92JY*!gdLiOgC|M8d@=|#{8fS|Qxs2DN%;i2R@P5$vU>Bx^ac^`
z2Vnvk2O!m1&no7{(Nf$yw_S8?WO=-kk7HG>)Slv1WwRyr0fmXBBCAETlLj#j4Y8bk
z`|^nF`t)gX6qDkUPZRW%-rwKbPn6UIEYMP{tcTwef!LjVE!Oe1@b5td2j;s|T&LDR
zV61U5nZunM10>W=`>%q?d*?I8#5-fTAa<KP55OleFWBa*1sR5g3``S>ss5Q~jt^S_
z@+~zvzhc5S4-1cSm*D2m=0{ovVu(jGOT&WfC{$)FDa_4H-rMj}He73+9d(8sQa*i}
zpk%p-xA<#|!6-6}7O}#F1;GvM`EdG3cQIngYQBgz4_cyFvP>&9jVCgCh&ifs91yKP
z)Gh8A#!Ac8sbXiC4xQ|G5teoYeYgI-el`BG)r9jg^6s-keICi0kq)!q7}hP(+)r?r
zd9-fx$%!d&L=3ps6f{%Fj{Ev;sqR}1Y35bzxjHF#KkR9tYomXzj3>G8d=9%8>g)$-
zu>QzwKcI?O7!07-$m1^Mq@^-f<~LDxoQKIV;*@8{1^mjJrhBS9+(%;2dx!vR3_7_k
z5FJA(Hmu8g?{=S9_UOF6=rBlh!xsAoA5B4SjrxV<TWdfCs$wy|@o*K3@g@Lf*m#XT
zpUjhpLKC%*3)+@!?jeM2q?n1ZPRab>I#06BWe>D-vB~oFFMK8aI;|5ti42CY&=)x2
zB=G2ot2IW^1byT%{?ryo43z(3yM068hQF|VGSfb~Rm4b`vAw9T&r%>Gb&z53sUlwh
zX+mp?Pbsb?!-xh^g6#tE`%Rx{)?$wM`>iwc(d17D%=U+%GoTjw&5_EgO)51`ozbXN
z6#J*I6I)@*C#GUvN3EU#DU}a~f^N}@z?|~Zbo=jC4~w0n!1s6sO#UX0!<}XGVfq~C
zdU-M46%|5{!NXQR3{f9kqCR-r#H2DCK>C1SuZDN<6IfGHKB5gj6k$?xPDQ+LD2u?g
zbRC%PD&eP|T1W+|tD&MQw7-_sP-;%8wi;<*Z^n8vFT!CmDuUx-ik5wN8IAr^pM5M6
z!b><K*F|}Fi%z92s8e5GyU;m5!TbHX_^5*PQ#{s{Ip>$@(i$0St!9^#vzgdH#<yat
z`<JzWB9^d<Rf8yuK@GAw`#;0N+ikN&O76?E-Zps(N~wZu83Fp2PW>2*#;n9L4WzXE
zo5X*DQAD4D0Jfz?21JWrWSi)dG}@tI4KQ5j=p1wh5=|q_=J=>Z^6zywC!JJAI;pDH
z&0i>td~ko}_J^dhi6?<dNm1D`0Jbgv{m$eB6XGPq7U#{(4LOUly+C)8a)Kj7CtSjS
zHcgr5Q9iC{nZWdg(;f$E5e!CuHO%Id2(nIlc7<szW&&Ay;`~K2bW1ry=@FzT|MDnv
zcShA?uIAT;XLRj(j6dKY?w|WMHlWtP5a(CLM?Hy;If@$y%p(hdiL)O&C}F~<`8Ol%
zm@jdCbO;HXmzWcbA_6>5#Vq4qY&Suh+u$M3Dxt@4eB?I%7a)C{87bxPO-QvXG{aga
zCDZoHLVfRWNI30np?(rxLY(+hp^&NIhi~;mT4rh0cSw9&v@i84%G*6AzAeV)_eTx~
z3M}IsN?;efDO!<7DGTo_aoc5-aBWVA03{8dgj0`S53Os7u8_wLNyqm^@qWMKT(zP3
zx*2~jG<XC<8FZQ>-Xm0k{8n6KS#@F1^wcQ4L5yzS1ks>tW=)=m)lnw+V*w{-;>6kF
zETPMJ;Dg9}_&Hi8ZqHD~qKU?q*ki-got;{wN#Z(E;yNac;>V00r_F_^t7_M^0nWJy
zrx@`PevIJ97Jpo{;Ds<WNpKXSe4lIjMRjbM{W$?n22LdhUi`2E&?n~_>x4(SPcLP4
zIvRAZA}^ZEx+G-gs7KEWjHTx?;`utIFjX$I25H7%m&lr0pOF!oc|Wx1SlaPebRfmn
z4F3VXTquZJol@B&S5Ow_A+@?@(}8)5^G=Plk_AEJ@SV}0wcXgbR`sJAkKy07wIFW{
zRr~wE5N5Y){<DgQR%^23cJ-mROOG%TW@Gs5UyJyBP_D0r&%RJkreB__C#Ro33kHhP
zPM<wfPyX~Lc=7qEmo|L{iC=!<rJYXTzdwFy(*A(i{&Y(JnY8J%&*6E3l{|BmOs4qp
z=lI_rg29FQxrl!)tgaJpM0VQ*RxRb`kCNdaaOqf*dNLV9kr+kBN>6{4h;F|Y=k@>k
z)!f_&gPMQHTt8#3pL=rsSK(mjCx(}0lyhOFq8BjCBuePRDiCt<ESKolpXKwkh1zDX
zMO)4V=wc6rYR53B5c-t@b40MkWZn~bMgRIQ6#b8G(R6?FP;t)XGsaetac!%Le^5He
z(_EkwZ~yEDmE~~g#*-Rv(@;k#O9w`UQv9-=hr0eTC9&}T6!BfQ)Q+Vf>6&v{;*u$-
zZ;}28oLreLQ}WmKEF+wa)lp_{4Lz$>HkP>4k-yR1z`7xz*NJ8^)m_SQHc0Nx;Z%V>
zSIA(NF#&CrelN>T7w_+jr%(TkI2-r(y!5r_+;|$`HNrmiOL!=cU#yP*!rk+R;_1`G
zx6a+hwDxDt&KJ$k-7foEq5Z*X5i#9!u)r~zndsgklM-o=#aw$VNd|kP<58m~fvu(P
z4A*V~^QGh=ZJus`_cOm)UPv3c*#4W^sTaJNHfOsGq~?yg(r9p&I^k8Mn~R2zVkITp
zbwSJ~T43cPIGzVem{94(q=T&JxWtiORcs;MSyybzL(Oy+0jzzTJ=p9a-i{d>bVuVD
zCG4a2;x?-&s+ED+kfe#gHIn;#*1+LH7#vV!eUlB(5dy%-jJBi;Bj(eh*-C{Ua3nk6
z5UN*pr2G}MKx;{Yfj{4lsj%-}5j$Y8VPT0b#wa7v{n&Nt5=5N>zX)U}w5HbYP$uU)
z)}=-|-Zu}Rr+c=G72REHB?&YCsGDM=6N9HN6a-tTAlM)#PFp)*)Om<Z6aQ_9W@M@u
zC%5Rh0djqTF@PC0F5b-j_hm5NWN3^7>tmE-)L0XJJJ+46nq~;hFmbi}vv`<|>rI(f
zn_|1XzyIPm54>gcHwzBBnpHPh4QmC#+mV>_Zi_c&`|%QZVE3h;xcguzoC!$_*41u!
zGzAygYHh8+?Wwg-i``i;Z5SzOTh~{EXca%^{F9F>U<qM?-QSafta$DK9c!()NL3nU
zfgiYjn2k<@lVJh>Yis9;)jv|ab4n#d4Yg8hwTt<nO3t@oh+*G%c(VuJoIw$@1;HAb
zm8A+%n1@vwPJ`nz2&W-PKh8$W&vMFH(4Y&E_pe7R1;N6ZRcF_;3aZLOXh3x_zEy?(
zb(rNRF+9S5y5=ic^TO16`B1G>S?k?xbWn%rLqq+f>i6*~#-J_n6|~}#TCs}9&yFoN
z((o|KgX1B$X7nK#K>{}tQVU23)av;jVd3MIT2iakI<A759?>NX@!Hq{*-_qHsH7Qg
zXc};X%oxR;mWQFf-4&uEY*;Z;$$6Z>(3|PG#l>*N6AoiToW`v>z>h2VF}l<;VG4pE
z<YAlegyl|HLJ4LGP7cR8(Afm$z?^)OdpclIleP)AXRG;e6>kwPCWy8aw_pvAOL#<3
zv+Lts2qgt4VR+4eD~4vFFBjw2EYJY38ZHBOy4rbMAhcQKv~c)5OY!V~`ZQ(JgIg_(
zj>luV0=|uQXdTOWs-8TR&eIeayd>j{ItMC{1En7lJWOyg16viZsguii9~X_8$y+;n
zX72P!8nrDt{@>5JK2Fl*6L<7Ju~gy7|NiVw5Q*l0|G%I~1&xVUcz^?KLoXM)grpNy
zax7`$j08|cAPy4r6UAG^BF>zTFoT^8STPEe{m*!JSim0y8NS<TQW@3C5Nx#cDFo}0
zC5E3QfZ_CcJxiU<TulZ6%!_IB)LVgmfiazE%o=NlZVRqNPYk((`JPuaKPtsZit0H&
zMClwKBVpyAClW3i_COUM*&9tH&vT$RM`T41L|NaFil|N$mkE)a=tqNKS$7Q@aj+L}
zMYx34hJIY7YhsB63!@LZTEi|PJCnwG%yMCYffEC4GY%G3g*G(vVWC&-ZIloIR@I>6
zq)97H8UyI^A{XBvCKc>i?;A`jF^xQ-iiY}YZxrUZR*PcDzQ&dGKCT%82DM6;Kv5AU
z>k`9{eowy}Zh{;BB9YGVFyT`QV}%Z4E>n_tH-Jo>FpFgoaX5(1@d`4>9vgwosL<-^
zQ;yMPEg6C0vT%b!s`~_wPA1An#w6y5s83;?p>1BR+alnsf?I8+Fx&hxX*-h0)8EMm
z(g%`y$GzPSGgRro@&Nt<3BR>=$BPtLoJSqWhWMkSDI<Ss-FoHqh0N7V(g4WFI?D$$
z0TW0?6mDRQg|^mz1F_Vkf|U5*Yzw>ucM<E!P+Od<c|iE1UGJ8`Xuu${gK(f>WV4u<
z6toG5$>*AUle6ct3)WnANH)ePd!(G3o+uO46+<xd)8ak;-6Xqoa3PieIlEMDvbIUr
z>qj`yPiFa<*#)!QVSys8%rDg4Dl01lW5YOX7>Nk?2i^v65(*hQxE=7^4AJL0dHS>r
zP|{BV7Xog}SYuC!+t*55b)<u~G&%{6rb>8sZIUh`VTNv?yMlaQ@fDw+dIawpyLBog
zl4#dyh!Sa-d1Gs2$D=8n>M-bL7-}?kJ+lVDwHt;sE|5S~adNJWk1nwI4L!qD;1kI)
zH5or|0`#8GaVes!J2DA;G@3(Gk7vo_xz*!Y8DO+U(hmE^UcS%)6AKW29{4At#>FPw
zU$cYN`Ih_aqwC!Q%{riWpbq`5L!lY!jVn@9>j_co9~+Pr5k8J>6R4v~cONy4>L}9}
zpN*W9P5@P1pT1Bf|2jH!dqaHZ7-QNC@l7c@M0_I--euydBA6qn4#^8%ha)aRr9toz
z^gZYSfsu|yEdiQPcQd>{&nlg+jdO+$Te6yGMrLQ?Z<nLqma#yd?@-1&5}KjO_6py$
znJ!5b15wzOTbTp5d^mPk#U1H2Cn9Nl5VV$h)w9%b=hU>A^@)PCN{3d;L5^K6(;ROQ
z%)ZXeAXqfkOpipVaa|LFe`H1?wP43+GxVt&Ph`~V53+M4Z^{hBEmsM#5VjSqqda#<
zc|%}6dZvhQikUKqm|l=Jd79C@QJhUO)_4f>=HnC3YZWKFg047A@3hBYfL4IPL?BB*
zwg7A`2g^#>H5%&!gD#=7h>i`mv*@5QQGpQ`UJx+bSgYDvs6DD8ZLdnub)WBksxd;s
zSac4@{XRTE!wD2H6O*-|by5>khr~^jjr1cx05IcZm@F1jPF8GNeaZC*ED>6%Tg6Tz
zOiv%2HS}YY6W14;g-m5M2O>v5Hj7_O1K~m-+$j!triaV7IMAGln+AGMQB(aSbYII@
z5zln53gkriW)P0}*7M5jPHnMMS=o;1S{=x-@$MrQ37U`K_LJxKzH@FbiKuEiook|3
zFwsjC4{oVYTShQ0c(U3pv4}UsH-bF9>BPysORkC!X|#`*3U*9!6RqN96E8?kSp!qt
zRgLcAA2Mj~I+y{UnP|G|{8_%Ez`KF!lZdFfnPQd|PE)Qs*EJU^0V*lFgCW#Scd{{w
z4RbAT!faw^Eu;tQqT*s!0JDhKG93GRGas%J@=Q(`u5p(TTv@9f2GGS+Y{k}%X@iIQ
zpe&GxEu0r7NK&jR#(`LycMK}|Sk1-nui2JPuw01ujG#)7RkHZhN*Y^6(w?flStLAF
zS!?BSai}>V6Hc+BSN@8=Ge<MoJ@NsA=tJyKhq$!JS9)MH&T8*TiQXy}uvfYe!D1;f
zoDxcDFe2w5C<6xxg7U?zKn!6GXR`q!xk0EJsB4NbJPd{nzQ_cojme1S&?ry&ydmr!
zERe!ACP3~5R8eG$SWuCTeMT7$cvm=@bX5}I2%peX%?;f8{~rUFaq_=&;4-y9tYh))
zhVJn3f!igIQ69Sm^41nicn#~Tp@$*|2&pKyQW4=l=%0xZ5B2$>2i{%B@UWKz4Ia~I
zmrkFvjZ@&d70m`hMc}vs@e4HenyEXuOSED}BN)`CgIl9+!xG514oYFW2109VjPCur
z40z40TqEQPCL%9VOA0Ht(NC1v5TPI21T54~hyjTwSi8q%@K6I&-M~9kyH&{$8f;~A
zqo)lTYPy$&#CD_DMWio#)Fyax<Hd(C@71-Yrq+$FbwLF$(cE|IcEbUtzXM*ljX}->
zmKT=8J|?J@O5#Wf^mBEMD-QMPs8+@!9resDNG%)V<LD@BZ3=xQwWd3);BM907q?9C
zmu{7$P)OA(WTSW1N@=zf!;A&9b-aQ$srCK6E@puqV(l$N7>Dcm0KUwN<#G@W@*>AD
zSp)xk5TWCfu1i^}L31sNxKINZdIA!&`YR&|@OfR_-}3=l7>})rjNJ5F47?5O0s5O2
zI}Fc)B+Hz=7~nc*$fyc(Aw(X>lG(%^U^5x#I=Mx0OP|sr3I)X&;lowj9aQA|x3l3F
zFy{sVDm4Q@1GT`*OKABBIG0f+sFNGH+uo6rdH{SiBkyoc0CS+JIg&)Yfxpr>@Hl4(
zMMkd9np4wP>TRMmY+aNSGM^EU+Lna^xuzoInxZS_C%E|wQyz{uvccukr={UN;iu$w
z3kET=u^D>w15hS2w+YJ$Wil)o3Xpl<npurP-m!P?<25ZW#vkbFn%U%%6xpBgfWdan
zttn)?tI!by>Dg+v^OiOSww!*%2}#Q^=eVqsH6o(~#;D;{ncTF;ec)a(&H{smU8hQ$
zMZKjP9X$eKfYHQ{z#Gj@nmNyVXMa9R5zKHj63Ps`1~5IH;abmV4UPA-E?)A;kxW+&
z3%pi_F@sf(>SXRJ3Lpf-mnm|(F}>3(NA?o;ZujlrNOrUX)Ax~Hi+)y*^|O-wEI2x$
zXu24=P9ORv3S@VvUlxcMB!kX({w#_rE5Ax%5@VMN+5?y`qn@IT`^=Ne#Dr!guHmZC
zp!N}ntqPtPq7EAEqKiDK$9qH<hIyqkiDX<6td!Jpnp>d^RL1?ifI>l!q&ru-64k1#
zPOtTYq?~wt$ZFR^Vr|1etL}OYy*-B%3t+TO*YMT1S^ZUUn~Hb>8#v0!bcxWjv5WDz
zEcWY7zOP>w%hVP@!*2G97a~vGpcv0l4Tvi0=6D6t&K%gn{dJDskbb%a_w<u((1CU;
z1A)p!I6k~*K05qL;4tzM%1+UnZf!T6sxGgA@c{ztC7M7V{<q!Y@OlpWZ_MoX-l^jE
zuWpY*+G>Dy(rJZ*P{QzDYwUF02(8}<9?|E9I(#TZgcwP$Da;~>QFR5FaE`svB;4fr
z#UU#q=TVekEc|;>PHj|2?WL&!B2tWJU}Gidpkn84jcea~vKp^-%mU(OQX9Y^May9Q
zkjg-kcv4fWPWGtOpJ@wrw!YK8mKG4B{b3ItJw_#L#m$tPDwS~(?u-_>RtQh6UCBtU
zsav3~WUJMgT|G4u0hp{u5NO-mY?x^TX+->>D2c|u*~Yo3w;CmSC`nx+$r~`Hmn48`
z%O~JKIo2W;$|$J4OL5y;fx69?FaSRlH+a?}<A7E~6Ig1S_5$0w>>zw#_R40LJ6y1+
zwXN*_-m5$CsDxluYgeKB<XgR5ZA<%tA}Lcgu<`aXK*OQk*$8Hh26s2`4_(@>yD11M
zUe#{mDonH*ub$-+ZkGawsk|R-mr+&F@@gNCHl7EvScM*R_sSWjuj7nDzvMoc09B<C
z1!jcTySl&Mo^Ks+PPh(FkCW#GS`9A3c%#JI;p+K>-1{!#iQ41KWf%gle7?Gf8B>2k
znEHEF78tvVs)^Q$Ckw5m{i@=1n4r1EqOnWkq507Z_}?-?@&r7`2`Walo*)cDK0%BZ
zwSs?ZYxV#5xC>)k+-$s-c5>rgH;<Y!cFhE|t0v7C3QGoH^+>|7<|qoL%l#sCjyigH
zt%u*dju6nv-sXmx#vBeSZ)xOuRWyj5r*zo&-a8~%#huoq)KD_d_>d6A6<(Wk^_>bB
zdwa>?Myrsc1ye~ENjbCxWJR(>+lSY*FgLs|mmx^PS_i|+Y-yGm#y($hj&&F+G)kM`
zA}!1!UFk&%>i`z#jh?NInJE*89@)U9+99-0e61HM6#H1UizZqAeP7jP(GA(&#yebk
z5x(n3iMhX$F{ZWI1PKBEXR5s!V5^n&7VpJ*OBC^sc(-9W2SIfmpoCBL%^F12>k1KN
zT}-J;a2cZ(%{$L8I-1!uz%b<H7^niRTKe_-i$xr7j8YZbcvbjK$*fR8f4(Wo@9T0{
zjBiPZ*F98880+6*)!4{(?Y@~31=BNX6AWmF;eoonBqVNqPlLULr+=ja-CrO|+{ZAM
zWA#wKORe$oJI_Tz?;C%Xjn^{N({Wxm{Pg|(fE)W@4uT8k#ooKtJ23dO?@TCgBRFvh
ze818(`mxJfxq*sO7pDL%^6;oIrX+e_<Yr%xiGPAFF$|Sn;&!OVutoZ}1e^&nXouNV
zizY7UvXR47$IFvbZEbI3A8E{VRf%)Hbiapu=9~9jgnhB*<MA`Xo(1k~qq#HfxL}#P
zwUA@m=glQrU@b9nanI&fSC0^!*($!B-`z%N#38olLT=BDF#HaYUDu27iq%n*Cc4wn
z>-A>`Q4(goGDYbvK!DDA&6_gRi)?6PCh#%%DnkV%I+_?w0+8j!?2(iCpg!QqTzR1?
z4m6}16kq7MMY=Bkb?hIJ2gyCD8*g3@?)Uw@e1Z*Xf5VP`4?NF4d`-*dZHz&q-@yNe
z8AaBnNgc{{csu`qhu_=qeYkk;h9Bq)eHO--YDFss4mv6>etgn6GXlF%xo^VD=VB(H
zST5vkn3}AbY%W|qRCD~XDK(!PT85`go1H+5N3yb9gV?t|izf!FcL&eAGZSDJV=VJ!
zxKSu?wc?MZk*Rk27Izjy5#|W(QFvRuOm_BD_^k$4`<gdnD?W+IB;u1yOt$}1WUc}D
zpkVW2)QrH}yukB#%MQN~&)g^(GDX&@&hfM>e65!Y!+xhtV0P?-@%F!edUtwqs+|4{
z;i&C{Dh)VTHa0(Xh$f~Yc|#H5Z{KY9$bhdA{_^V-<9evAO2fS>+N!muPuD>s92SaL
zTk0XtG+d5$h}1bj4ziTTQ;j%>TMWaS`C)irhUG1WA2xT}6E^o-Y#y3_WAI>ggE9sX
zKs_wm2E%L9ZAGFA^!y0)PKUB5d_Gq;mP=Df3jr90;oCsHQHKCF)VdztsJ9>z?O`Xv
zCXC!>QgnRy<{-GHe@OW%1@=7h(cv|W#0K5E%ItlLjt~3w1}1{-<wWo%NlY?9GMZMS
zZUfk$VGQ)Zn$32&aZRY~sk;%p_l(E}FzE+X2jPNa0Wc{+4)@(7WY-G{@(2`jjSlH}
zfTsEY)j^hbCLjvm_VzNu`NvM?!iCaF=vtaN5JmB1NU%YG1|mu&N1|5?$2Xz-kuB^Y
z##iwF=n~^IqJdF<U=8T>vO=+%_zmR|+hrhKdeV;Q*_Pa7AWFvpPJ-Dc-iD$QQ@KxX
zM@Cy@MtSt``5x$7@;$aafmSa<XskG=VxgrN?l~Aw@c_f(2hK7KRw0P7NJCyGGnyvY
zDQG-QJ7o`hBnz6}=JsnBd6}iS%xb;NGF)c0TW0q1z{Dn%GAPKwT5y{%jG^TqUev;9
z59M@iz+JajBwwOFeOlK>8`+wcAV3iz?^8!$9LQOAW^TJ?VVI#|e1#?|7m8}rRT+j~
zZvb5#*Tt*QYGs25loe=%E)DlMX71M?=xV(mu#xttZ|Vjq!@+d{XA<7TlPmy|0VNcB
zwq;~j(<1*C?>ErTxX8ax;ph&W5iJ?V7WvC<ws?=`YzzG16}D$dB<OMUM+Fv;IAsg;
zk;l68h-UE^m>j93-*hUd-F|jIcH!mPmo-3ghKS3h-HKqkP*0|x=v2{n#@}fJ>D)`e
z44HjHzXFV|hOz0ELpxdsM$4ez7oLbDZ;dj%>UZDKfa7<W{EmrxW-`&3cQO$w0IYIx
zhyNk*ARp3WtvH<XAH8Oy3E$Yi);IRN;0EeaqaQ?vgsmdFMn;^Kf^r;^A!+&e=E_KV
znYk5jf*HjUH_%-*LC7megIx|g2@?VgyI$-FRszW?&N06-H3bfJfD_E6X}>{%$<<r6
zyMN0XwoWjGNNaFiK-#(kO2=&lkuF1TMjZ8&K~4_$_okS!+_32w%~)#h7FGm)chT-q
zq*p8m+rVz->I-vPLz=1LOEL=1rI$(f3Rx~>l_L@;&d@CHnmSa$d`KPv6ksmZybeay
zi69*#vH9s!=!;&$Y;dgi0Y4bk7MrsXI1Jz2n3I4{7b_EgF|qOOr|6<C@0<KN@{C55
zRVaH*H-SXihe|MP&cF^n_)2iIz?4enHY!mGXJ*onS9>;HT8jbSRKQ~4+!@okx`nq&
zO(MKKzQ;t)1P;LMSn&2%(~9km(({_B&V>#nXAkLU+cBWF(lGRpXDT|XjYpu;B2;8*
zgWoJ{7!k(4A$i6Zro4ArzB1C3eTNUONS@o_MvJ2xbL5?Tp#=ZonnPWXGk1T#?UjkP
zP9_p_i@EKiKb;8zxZrzFf>CmNM0%K;CeVZ!Lo(Id^rNfTZse)h$Tlh?&f#FtkfZaW
z%yuBOz<Ryp-vr741s`c>{pv3n2vdV12f@@V?RM7lfxkZnYQWd4=sF0Ck~{}3tXN|W
zB5pp}AmX1kU%1qp_&;D_&^0IMu{rqHjS2dp@U7564Hf;Gs80CLM{kPT7yWuHCK}sM
ze4sO_&e!^r)Y>l@(KDE5-bp{5`E&9fC3wqc+X%_W?w(q5+TORi0ka2@w{-)HNOYrU
zYpr`l0yAZ^mQLH(U$bucMY(pT!5!WQ0iD6iq0GbquXJE==OCsXBQex2%VH+X9KuYr
zt_r(1=p<|5)jPr_gc$HPA7yYNvPKxKKy3#wdlsUBCw+w0OHjdR{OtH8e6WQN?K_Hr
zw}|N#LKKeBn}%r3Uopxw{`fW8xEt=$QNBgfNG<!rL24h9*IROa<^`*6%{)phrfs=t
zTjAQ4xVD)PU~aB}QKcBDT3|$^tIR||H4<iTNrJ5Jk$a+<3;IK4D-%8!zdVPTzd%E5
zWOCnYCYM?*c-)&7k9*Ybg^8T*O)saLKFsNoVVmT1$*qD~@YS|hyaxu95*_>NcpH~%
z*5Zj%!3?`xA7hC9@*Zc3C194veTvf!7ff`g`A*oL+vT9~xKqKywOCqx3>v2O6r;`R
zDt`h&F15TOW5Ep`IWD1|OFF6fX=;rW-zGF=e@T<~uag~#NN@BCsP<QS5%dZ-56|@P
zlWEl31l7Zj%Qui`jd=pf&eMtq^`nz%Kl)G1B!h20Fqa>j%IUMo<ljG+uVCUpnkbWX
zszK|HT9Bki)0vBIg%kKTtu30<BVkqC0gv{&nj{d816mw!l1e+q3eXo5U&lr#N8LAu
z5kmYIh3HP>g9^i<X>>g8;{KkXD>!6q3lHM%HabUWgo}<D2(&IZ(UxL|C_jM$6~eBi
zRc*C74-5n8yvXN=Rjda%S00M^N28O$=u~cWGO{+8)B|I}iP520dVQnw4^nJl6mVK*
zB!$8IS$&3<fF-%WBQuRY=<ch$XG{x1L_lDNLt}@kK-`x`f&#s4DLU}pewYUH7iF0o
z#uQZmH9}<YF-~^7?Sb+~wZX{+g6z~LKMHJ@VJ9LoTBS*!fw%NNATR-q&N2AEz^p$X
zP3MfyUvokvs(9f!f0;ul^QDhUdm5kvohm+pP^#r#I5KsxUX5`_0>O)%gL%Mkn-yog
z70g!zhq8?58xH@0KuK_FM=b#x0m1M$!iI2sqgsawfiv3RB^08qLl&yIPkFnGw(ml3
z^)6}SH)xL?pu%@o#qt2(t%{<iSlBF(G5DXbmUI{D+EtGD8~pei;&C>dKwopp!mvOE
zxu0XwGPWTLSJtBeG0)7;UF${!_uX~8)6B2Bg&lPjS3SF0hjP{Bgsjo7+#@NI%(lkc
z1K2B9NLBc|ub>|$bIqAWl3KzBxDMmxvAi(~hs)6vBPvm!-(sMjd>!h?*JLdG6|1||
zRd5HNuaAe8TO>ien%m0_;FhH!SmZs0!>iFcINo}dUvcF)1G?^J#mzKh&TV*C?84RY
z!uxi`-*PtnH4pZs1%f+xcn%^=>aEIpBQb@SLE~VzwZ~lM8)~Ti(A<O_?8~iuDdt0i
zREzlt@T<$XJ&H+qiYuVFePa*Q{jgG`C30orw|niuTA2qb8XoYD?-EZlZqh<FiHC_B
z>^!q?Ls*w=@}N!LZk?^1+k4-){k{;}LmSt@Cd<sniL#C)5u4+cTF}~}o{X>TV#8<{
zQBFVNK{(&U`B^+H!)<VKI%nxA8c-2~2;LNsy3w|^QT{wmMvwvv2GTfF`_A@(7NeY(
zjTdla*2u?%`nMi>(=a2v)lZ-1VG$<JQyweC<fYp5yHPPp5Y<U*3D91dxH4{-?jBGV
zH=tj4uoANIK^vH)_E#So0b=V|liS#Z{X460z>x8Zvgfs?H6u#Y^08&`Sg^2M28&PG
z_}12Meu-&U+$Kbcu$}m+vnuR>q5@S6D4foVqRgF|jR>=@xin>CoFVj$3=4%q`}eqh
z7HH1-6Loi~g?CEd>j!?dYS8W=(Y~l%d=A2Z<H@g_=aHMlbe@gkDiSM^+>jvc<donw
zQdJsN$ga<D_6|=UJuSJYL2D_}c@@T4RE=VxtVrj1m;v{8iqI;lA|%+(j@ZuaDlF&g
zFy2J2)yOxkNAV_zWS)_PjNAud-u@z#7O*SG5TLQe--c_Dy0uPbl$sm)1H9PL3%#Q3
z^|e?C-*r~AuS4qeDg`F!Hq=naC#R8|3Grs6)mw-U6S7jxRr;F*+XG(j{6Z0rCcNpt
zX|W9C^r2Y|@zb!FJxMmEq*dx?(7-|?YhxVaTHm+-0)hyWXu97<_iZw!Fi6_ka(g1=
zcn*-A3U3wX6q3y|dlP50iaLO)^->+^#&#?>uZyLHB63}#vVn9BbigTmbh+q}7<jZD
z<FAMvJF9FEyK|9zp;_<2Kwom1Zo9M3J`lT!Iyn4mM&zIEknTu0h@K3>dhBzXc&+BA
zX!oSLXBcpgr(ui*NynVl_r}s4Cj0&#^JfU9&wZhz+t<zTWVV>{+Ph#2dhdE_H@22G
zi~EkqLxopukN*y8qGtq_%4;L#u4n8Ey2oi>+jwvFO^$b4GHLWUAPdD~;R8jxNLfo}
zb98=p1@|8uJaIvk_TCPq_I9YzYuGGQ%d6QX{0&PMsSz=B9+ND@&aZlW<Vl4<5v<5R
zUc!1$2ukvo#LEF^2;as0#k-5q5sHkSB`vG?RWf_*hNj@ioh~*VwDE%oRYbSVZ~AUS
zE-QEMp+r2D<%?V+__iY)F~wx}Ia9%BNq_Foa1x<szVqrQUnk*YvnRNJgM=i=zeBRb
zsCBi}O0W~|U;ohTdP&T)cu9wD(ygE2_q)In^Yqtl(y#t?n598gH{I>Ao|ksRRx%t_
zX2V$ega0Y>-<r|JM4olo`{R9z^5~p<AdnERiB|YKpb0OzRvTR2JO_MXq2n>&fo49k
zD-zXsZh5Mll!Nc8p{UR8RnuH74r9Lc4~QST5>3MMMmEYLj%LJ6Y&tuFCZe3BhW2}X
zcVh$3$~~uEBB0HkPD1`eyhIeC!!AY5EF}&abQ`0f7)Yxciv2|Fijy=f>w~a&DGcXV
z=v_JxOwK^*fP64`{Id3w3!Us31pAK8<wO8UCowQ_3G#3i0Wg`T+<QWR?u25=*`4ia
z`G6~gDpSX|nFeD{TRBIgv)?|@U)MGepp`J!NDZqOq2D1&;`oC)2|o}j`y1>wbn+#(
zMN95KQqywNAUbPYivmS?S+3`NTR#V9U|HXm<&G^`RAp3{s1cyZiZ2X-``Bn%O6U(3
zA9SC*JUDxIeXLsP-U4ZT^e?TD%SD+cbxMoBC;BQKgElI+<-c9LI>tDs79g;U0me$;
zBrRRgk>spo>=hnwRNy+|k)9_qy0G(l-!eE0dA$?lP9Au^?-k)cv&TES{k&zbcl^wH
zy;t;!c}pMhC;Q=6p)b7^dcGl?4?Dpr-bqkvdF0(0q6Z%J-gzg7J55BkqLa;@D=t@K
z9Ps67RXuP}<^5+=(K+_FYWq=ZjE|lVaxpLfI8VEXGU(2%SIK#1FYzx#JkqL<m!ew=
zJ|x6K%mT@%m^LxxEtGjHm==>oP&<*&%i+Is42{X)D1ghQ861;EZ*qL^pT5itzT@T1
z-oyH+111&i$nP3Om(OMVwYLW{#*6(4R|sw-_exu`+!`-B{^4;{rTzgM@=i0d(Nx_=
zTSAN7jt^R;qm>m#|6(*0tbzI~fy*-Ugb1?@+s%@%iQtgQsngbi=wm%xZPCxX=30*J
zV|m7AkrD_t3_Efi$kLa2vX#HZf-=`IZWzs>&K~e&KuWQ&(17A4cCAO`Fbkg4aOU!?
zrcAR`pmR+To@*K?nRbe4r+(V!nD#jx2JJE>+_+W~8l7HloHm_mu&WEqoW8Gg`o68y
z_ia3V-$LvAP;s?{wXi3BBCm#(SqEzaF}YLM>Q-H;OLgd~qVoChGTw*llT&52Xw`hU
zi<jy;-i-=%6<>yhI>eWwB8V_OT;ZFL-i+u?SfD574qji!qL5`MZbmjiSO`5AzFm#%
z`>k38BW)GM%T^iPAvEwR-mA;_3M$*h*YN*sd>vwAuCU?wCZsnZy@6&zo33zdrqNE_
zo<`97&m-6})96YaP9qqG&!a;l9DdpcA(liDAc+XDMKEhKc|*HJm!8bI^xS&R=Xhko
z_KUwWl!J@qU5$Da;g+)XeWYwYldH!&g`rc#Z5=B0<wcfCg{z8w#o7^#j8d2@k`hh4
z2t&FI_#?U&su0H#=ndcC1NjIG&j^asVwo7i5QP+*1LXvKn{{u~Mv3u*rsinl9UnO&
ziQC5}dXJQG@5za;1l-ovnM`jmN+Dfi=HjMvY3IZMl>qAilYKi}25J>=&*WX(d?=qr
zcsCOvfJO?vTQO*SuQOw6of!p`3w|w)cgtSgOxf?vIBkGwtEAiE9(UFTiY(%FxIH;V
zoJ--el#j3XKsx^`J$z;LV;%x#Z-(#no=^p$4vF#-PYWjtN;(=iQ40H0*20Cf7$%-A
z_guQA`96|<#vt;Z@9(D{X`=K)O@u~|kQ6oet#FS`I!eF$`-x=-I%D6Sk4n3m?lDUI
zW^{@?0n+N0PpIF+vd0T_=!0K=bk4rT(bnN7*6IdMj16pq(wOO6s8Bbftx~%a=(oUB
zfYF53;S{SFonj^Me@`_8H2je^bB3Q7dULICbJ*6kQy*`rEhkghHf$NRD?qqZ_hBDz
z4TOVE0wWu`qnvFj%=s;@=n?xIp7?+-ly{Bo8(BCiL<Gs)25#`kUoiEyBuPUeNlJq_
zJu?G&^vF4*#GPD*J~ozq!)P$^4p&U7mzHKP!@Plmd@YWhf*YZE1@%F_RyS-SCSCp?
zJde`WwYxm|uKBo=r;$~P<NdtP_oGwuDo&n0)eHk{iR-ywT8cSPx)4S+#Q!G>6}+$A
zQGGaj4F}nQgOlCH)%oGVU_!KK|8U{8>I&L&YZMkcv?jRKDhX)JrNhg2_Ph4{N<jiR
zz;ew3iLv8NX9-f*2WaX|Y>JwFIJ<$Seh7BM%kvKx_^JG2hOJ?Z$1Z3PwW+m0^vGFh
z2ipv@JBk^##Az)${EfDU=rTASdsF^S_J&Kf{Ea^TTb3*y+vB^2i|;?m_eh&0e`WET
zeny8OV{=klc#KX0yv6ThbTZ%ehB-<{-8u#s#<j{&4ntbl)4vov{MPXB8&5d+J;nfN
z{pzF)6nWeTRUHDFdM9Y*ouH{WwJYx;E%nZa)Zoo0;R2SrW#9`f9(IK_CtoGucC^Hg
z((ym`3FNG^#mjxEi-TiK(f=VZXOaw90>SL&r&I%lY(}exD+)JQ)o6vkpfYE!@M+!H
z^LKrvbJ<k?zS9jOHGNVqpp3;sbtpahsRt9DnzP@VK)&g=SP_>jt6TB?9pSHcw1?hR
zgt*}1=uz3294PU}ffPyi_qkI~y-LpOUL}&Jm+aLi$yk6h--+4N&eXlynM~a3X*CTJ
zY@?lF2zb&BUe*QLos4gvKF#gJ!CX>&lD<Yd_h{XW=lx?8H1et|GqhFTb7dyd*+;c1
zTf}<4ydefCU#9L3`she%c-SB20gw2{RfTLh?dgmB>EMR;FP}899$1>Xx#2NnPK*xT
z9vFzFTZ6%LXl5D{8AI}B!P$5+na(FsW*35IajFs_!|UTs!)A6YMNN7qrENc|lbPgO
zV|jPOmXNq>V+^df#Z|I>vE6MF1EbqI9tZ#sm4=80r4KuYM}pcWJZ~)Of>T%ItZQ^-
zBJ0{t)JMNge%D)t2oFGdtrxWYOo;b(&}-hDC^aF(Z!2$C32inrUS5;C@9@rdBh`l7
z93IvCwBHQEkbri8-NDNw&x`uW3d(zuJkgarNzfo2DnKh4YZK9Gfwi+{<L&gqwh6WN
zd3>}Ya|8=VYbe*tO_HzEB|&e`hWY(HA&Pn?2EAHw3$P4S0*3u3(qxk7JB6jCcY13d
zO<+zuEDJmb(9ayLhf<?*?H1(x9UiV~I`eoz7ly4p)3)d9o*B;#l4k$l6iA9o46q2p
zSg1U>zfa6<P}v@?LIKC3_tO1+W!1uNT>XKRLDQPnz~QY6)ZFwox=&3kTmkzaGq}xs
zFJgmkK5@v+=<w{{qdC6--+1TZ=~LF38}0i)Veq5<5VT_jUSoTQp)Jw$`9)2${!LLL
z^g2!(nUitYaRZ#<P@xNf3SBgvN%by3>3ShEmkX732FoolC!F_r|9P)$Oi2pYfH5X8
z9(OUmh3Tgs2ko8sgYiz(SNG08@h^!Iwm{LVgzuog%QNe_mJwCfpR(H<`mbp}59__w
z1P}O?3FAm-6e(;)&_NN1Xj=cC4>;^c`#3haXS~1Dv3I6B>gr4!8XFn79s>o;R);s+
zJ;Ixt;12INC&egG7y=z9D_^8r?NruSsF`%k>;bxy;K9%;jtv-OX&6DEgYH3=p1OI$
z>{MfZ%-n$VV1A%SC=Ap~8;OD7b{4$uknT0oWlxg|bc{2kf)O>G6P|X98+2?12j%)I
z8BWN}b~65BFi=i09u5BIYPHfS-}L!$O8t6tsyeFe=u734_u4X9SzU)IU#gQ%l~Dpk
zz^OXblKxgmv*v40?u74K0yZ?k3CCSWR3~GbDvS@~m%i2dsdBeg&-`1fFNK;*JMcJ1
zBKFL)x~~V`clCj$d%i{urr7fekw&53R0ac2S3XfzHi_<*`;vcsF@Y76R9Msi{-!_f
z>;K+k1gpknhxL_{PauXsC$k}b9GD1X8CtvyZU<^`fPciw!e3@!;RjPj^W)dSMWf8k
z>Yb?@Ww`{MO-;j2CumOUtV(`KI^LponG8^;F_4q2Q{1xUgvZe|3?7D#*=?*T%(K~8
z^z8eeigx;bs?(OAs+@z%mHx<oQOP$0n~YE(IOq5~+5SkB`t1USABUboE+xdq!swb~
z>>ZwC>#V|4`R81HR;V>GA&|aFw>z{KMI!iZ)?m_QvP^b0CVrRWvlU$87nS#1#qTJA
zn^u(ZRgI7CSgzvSdnCIQ`a~b=FYUYd@06|&=lC;v(&t$fLv!KrJJ-4RzcNgL%>YZF
zino*<_C}3H+Ex6Do+(^XTvI3BWiTgkk}6*UewQmZAnH{`V?v}hhF1gFdnvHb>C(Y0
z-oP{xqBZ}pnej_FHfI0h<m7)o;ZSX_lid#1^v^$iA2au{zh2^H*ZA)kreOC!{y$Jl
z0|XQR0ssgAK(5vZ8q)?(<X`{*8hHT#GynhqZf|5|Uu|z>b!=sGFJow7a&#_gb1!6R
zb966bXmxIDb1!IRY;a|Ab1r0IbYXL4bS`Rh?R|TH+s3iz|Nazk+LT}fQKAwjsTA2q
zekE!hTa}ciJ+7_<k&uL#1Q-C6$U6E!_jBAYcIUNEEGXGYd+xcvlXGej`<R`bot>TC
zot@eE?BRpxv*_7XS~Y{8>gf85!K1+tldhU(R&Q@?+}zv@MwtCmJt(V7%!)_-Xlrxp
zk*W5qESf4mpEqSyV~N9TlBIPvj^@QUtD@#Ai@x7Kj$Y-Xtf(_6vGE|E&dREZ-b39<
zSw*+eMO99t-haHCSMMg-#t2h;I}aXgeD)ba{Es4?X7wx`Wzy<ZHkoDA+D0U0_KGN*
z&YER(F)v0<UKY@B+C-zYh|aTU4)`R|1+<kd(&=oH@kcqslIaABO(y5*=-q%oY7j+P
z&f<Rb9uT45n0c$PI?S4RRn$=m9nF89XHgDK)EWFLnjGLQqsy$ws<Z)8Q2)~Ca#Ef{
zYu9O&r{|N5TN{-{-9+<z9PLJN+~0lt{y_x)O|mAUw9Os*uBZSxK*qnh2n*!nwY8lG
zxBa-k<0I2lh{#2BcAZY<*;$m=QIX{^231tdCllyJMdNaj7f6w8QfC6WjxJL88W6!}
zX_ZbRf)TAp$1sHayD6h4s~av<=LL+&*5Iqbrc1WGehqECseZtQVycNmw0gnNc6WCf
zt6zSxQZ#zd#d~xQ1~{#%bQ#5f&SXB$i_554&VcBYT=#!vFIBJnF76?8w{w74OvwYu
zj{fk6$Vrg$s)9uk>=_UAE&a<}fgJ%Bcys<!Hfjd5s%%P38Z_k*%(>!nfQ&0ZcQg)E
zq@KWpi#L<#t3Hvn_qHS`Jw(bXvHqpx6M`qbd*CL?M9F&(61N`3*+PvH4t@V$$Ae6?
z73}v=u^$lRUKDodC{<2+_oP4sJe@Zgv^YJ_s!+FEz3%F^H`Nf{O9CG3EU`m*Va>1}
z<IpqnE(c~yfs#;+;q{Ryc`abq6o<8Xs(W}L{qs6@26H)`Pny3{u{#G=PzGos1MC_$
zsP2lk<SQG&%A*=5zNwxwL?&C}G~f|2Oy?(pz_wF$HJQS)_rH`*TH<<Sq7olMr8cK&
z&^;iQgV;6~Lt=@nD-W^?bc80oM46|X%cr0>06MVnwc*z^NlB(r>L4q|^^dUN#l25^
zI6y#>I(s=OQ!NQLqT%KyG|x;8pSpz|jmdMB^sh(cGXq#7rI+<*Abfy1E{e1024Img
zb(vphMRb-{mo<!DL231<goQ##9i1<uv*rqyoXay1y<^Q~P!ypu+MFoGp@l)Tf5A=3
z)JZibBoTs(rde}U8fXsNDCWB;gyoDLR+4&U7ed^n82p?=_nVqKcypDHt{98@s+>>8
zsJ&rzx0Scjy%UGOVMM6kXA#Kp>wJugSIHVEf<R2Dqb`>#-7mg?ej;YvTYzq_>(DP*
zH=&h_f|dmyc?Br6azep$Hk&MCfyfQ?)na=4Kx2`mqpNrVIwmTHpq&;Piv)mOgSM+D
z8)=3K{DCs>vSn=+ex+q7IF6zL<$;@3)&M>)o2wn2jrF~T)PF$4ILEpf4(@O#%A?1q
zmqz*edfzQd#hE&$&#KM0`AHJx{T-*qt^T@Ykr-|pTZ_Iy6yV3&+HcwH1FLbSqNol*
zG9tx|N`_yi+>S?V%xw|+em&~$4FZKOo$%npFRR&G%~%~83C@MHbd$xxSvouuEjhYM
zuQL`Uu-8KEvw=x@mvWYF>RF81F3$9F3R$))lMYvwsq$;sA-Oa16n2m#6JGp0PbYB-
zN^CmxxIZWMzlN;qp_u>=0V7aq9zvt=C*2g{ld6{v<tsE#S(P;;)Puw=!7mMrhb^aZ
zTU*Pmal786axf%jM6QRJHgwVu)9cN_IBj5`-0XuGT@Z%XLpKf8v&}(n=hKHjKii$K
zd7-7q2X?UIEStf&%$6iW>v9eYF)umgya7JTW~i`N*+o`mpeEK)sTBH}IEk6aW(|hn
zs~@9DS@_BrrNvy{mbgloNlswYIA<_TXE6ck+au`A<Nyp=>Omd@L+SZEsxn~5n6@T6
zUfICR7r3pGE2cm4?>n=tSIo8piQiB~<f?a`G+;D&>c2ZVf$BEZbb3n?*key10^2x-
zv12brc?~*RKK^sIi~+Q#<h|99d#9(gVLCnSB_>htq3lGWOEn)gW!0n96K3T%7u*7_
zr0YYAH<4{bUj)4aP_IBY0IE6%Km*D_eT7v7&9PF0&v%F|UzaefM^F3P5zLa34unwg
zp@PrK;v&B!MyBs0fTj~k?CHayE{VkrVqX%WbRvXJ1dH0{?S~$P+sqv}3xHV!18-PC
zBns!&oNE~3WT!n15QOaP)WpCPyY-EYD61!V(X5a28rPfkB3m@;kdj6JfumZFs(jY0
zbD@o*TnAFFpJ%|s**fck8Ws_S8chg4LyDaT!3E#yn_+RpFrY9A@YS>y+E6CWT~DTf
zS}t;G+hS`@VlK5wEDM1^b0)TosUkBW6+Go>O+rB!;HqCB_21vx?FuvN5(7zqg2Hz@
zdSx8VE0ECA0?HLyE{(PkTDGK)=~`>CGF_9heSZl;g&{BISx5kNN>2sMm4sSACLuYx
zQcRjzh~m)9L}|$9zphnM2FYi({R@xX6cK)_IV0_dIs3gkt*UJ``1=>!1^amBd(5eA
zX+S$gYkHN%WJwC4m6o^nbSs42{zXXK{r8Y^dOWpkazzqh-#Qb#O6xZ_#X$vo?W$Rd
zelETD`*#mfrfxUFL>_0eDjVVLK}@^*B$9IoNWRX?d9B&nCb>D;)FbIDJtb`ZZqlk?
zu+du7+m1fz!CwU!lRiOaFenV71G?0~b(0G#p}}QgY_fFRvpcr|Lkw+QXG})m0hLg}
zYCXEj9%#96DCsC4^o(*B`VmZ(Hb6NdkaW2K0)TYVRhEtDs06YH-HfmMyN|CE)r8V7
z6kauDETCKo<;uZ=OD=W7^1<!S9m7`7CVAs2PTWz@i<_FI*?>yLy@8^bBO>3P7<t}I
zXOPnCX@MTa1{x~s1l1CQSYd6Kl3f`N8P=K9KmO5c$#8B9%jvs=b=Y>n2oHKYt9R)n
zp=a~@3Y+nE+HMy*WG<g$SQ7UXX3w7uYqZHJ#BvGlUX{V<>+3X+eD9EU2*O)IkW%mX
zT&L&L2md>V{lUAglLT7N&ws*|8vX?V1b<*1TA`Ff0huyR=Y2-Up0J2<NTBD_t}}~R
z=zw+*w^Mh6gmvkrz!Lp-?i5s`be1<D=Kl!-uBp7u0;JFl@?H~f_6JS*!wjbLGms=P
zG8X1CuMPX=AXpt^s-su`y!D}bu&hpP^ZKR2sjH@YUbllnYHys*^bM`L_pTdI_e&tb
z#iYCe*)!evd7jmzI&6GC9BzI6^`l1{e2fA6;`MAaO}|`+ZF{{AEViEEsYTu_e}_f?
z`1#jg2!dFEPBaj|G>OhNb0XKJgBnOkoja$W_dKRh9Gy4W6q!1;IGUERb6mG#%<li%
zg9A(W(I#K*@3U)I3RbX4UO$6Te)j^4#r~y1HsD)M9GfXDKiPanH&b@{2&=bK@sw)O
zOtWH6w{RLeAV2Keyscu|T)D;s*6sVjK8(rtP-1YfulVVB?*~ZSf+{BMV4qX*-!&_J
z|MkoL*ZaqRhb+D)8XUYi+CSd^>x)yBrHUTzJwH8oad`Ut#kWuz8s3P8UvH}1@Ah83
zJSA)>XG^93<%hk)W2j}azR-C7_~!KZyZyuGM>_X2Kzk$lT$PxVm%~lfLHbZRb$(f>
z4E()gWKcSpmUTn?TE~kd0!=TQ)j23K-uO}F^c)HSH-LotMwPQf$3EIz;E`TRuuDFO
zEMVr#eJC_{Syr$#O?hh$+UhuKvTB+ac=7~We^~$11t=wx^c)r-*y&Fu(Pin`YXCr?
ze_W--W#-As5+%m?5OY+IDNPEC1e9#2^OTr45E3a#S2&xvk96Q~bGE&<BWh0Lv+^b$
z!V*g#AZKvrgF_?u^c~IMqDqxyQw?i?ek(6cSzYa$-Dn6%4goVeZ41)2ytGG<_6X93
zuHA_P`7^uq_Hm-J$iSPD6pwsxCsJuCJ4E%Y{<%^YVJid&SI4Erx!KmsA8Kz#VG^DO
z$eO23D@Lcvcbp^MA@7W_sDBV|H0n=r6AdzFvn@gq3D$l5I|e&XT{h+&drxeNF^5+8
z*DuhTy9gL?SfKA7=20fnIaZ5H3KR0Y51clOTPr*iwubJnS(RVpS<OaMY15!8O_nrx
zT#whX5nbf*EoW3#YTDkwItp6qRaM?ZX><&t`9)QgRohCTgnd&!&71r>i;M8JaUnOU
z%jtPJAz|-kSoSN0W4!S&KB79HU+6|qf)og&rz|;oCW$Y$FF2*|9euI@Zz1`x-3e?O
zQq$M5b-7#gUE2u{K1-G#uV5F3Qq>cwj;wOU)WRD=DYLFX;M`qc%PMD0=RAg-yY)Cw
zPrlEKy<+@*x_G)ot&?W4+2GG);~Tz-;d|?jyA!g3YG0qYvrTj~F8ww?d8-<1pGG0g
z+on`z-#vhJLy-@D#wJxT_4g=}pDuK*bP=1>cCFj?iDXkArsF&<>Uf-8R#{ei93-h|
zM5&g2mp7X7ITwL7fB<;_BozTbU4U?~AF|1zrIn{=i3TF0d<r_}Yyv6|8EEE%Y~UBl
zFLS)gxoE^<Q`ahUIyd75TVJ!2Ie=(7mOh9Yz@C8Rbai!jyaK1e%2N<3c|Zl@g?GB-
z*yJqkIA20`%}Czs&zZT0xw!(CjP3abNRg2S>*NcIQM2f?UA;cye>1elY$?sN9X<#7
z7W951AFP*?jMqTeTQvCyNHB+fUtTq2-UUU7-cfpvml$b;)-Y8zFdPExxQ9Sq0*nJJ
z8gr2Y9wusle!Bu?oU?fsR{PsCs6l&1Q+j{{XF(b)b~<YRJyd(?)n3}QiD@U#Ef^Yv
zS)xM-eilS~Er`x%p;T+hXUa>9DHPm_0~L}`i<Vs_L-{6J-yA%mZGp{joViAOgB?6w
znx^lvsGe7Rt*)(YxExF$G2LN(4kkssez3o>l|-N8pOZE_c}<ziHHGwcC#?fV464%8
zthvduf(EXRXU!1ge6tl&@oAv6>I#L3YoNve#N!rj=bg-@WG*q&7E?!8s0&(r6`eB<
z+^;%8%81SKIIpsizQgN~5mfDYesRHik7xZzN)T<<U|{;7$l=~?o%U`TrPpOOr4tMp
z9hi*g2CYrH8Ql8pV1ES?g#tnIGfvxRd@8#}gT~!!GNB_w#O#-V4hGv=&>RXhH;26}
zHMn2D1ZC)1UX3Q6mYm|5kB=Sx>ufOUKq+d-DU}6E0Uk~nf_)4+S4wJl3n<V&4OMti
zj6={{#R;q9a!+P-t7}l9c9AZ|tBYr@W|fk*N%wI4GsB-jN~5|}n=($<AKM+nayH)I
zSXfzH@CubnZJDX~?+nxyG1viB<jl7XwZ5UC{gp0Ou+{|IB2!Fd;7HmLR0>UgREH>E
zt5lX&<Q@`I+wXa?zqL^e9}N}F@JrfB291{kXs&<0_0^YOgPepvUj>@>i9&?853P!^
zZAmCf^2y5MD>VfL1$zoAB^xw?3~lKHhUSkgP1IEFTe`cl8bu{u)7vh(W*@3pr{t5e
zd^ewgrb<?Wg5GF4(=vb#-|=5O502S<X!mi$c5(Q10?g>|kgsyOf-`1<WcH`CC#BJw
z@Ozq%Z6yk7uVb0V(a=(wru3KvlGhOY<Hri1T3i7~;IMH^p{K@l3!OI*gtA*~)e<@>
z&H8zjoApsx>1kf1)iSEHv>IJm+(I;g-r>T{zq!aDn$AJgz@oti9S^NKcptT{H%}2B
zKWej7WqnWPpAo81%Yf;(HlMo49p0U!&?b@^d4RuYNL#GTf>4-+_I7v#Elfj~xWYLI
z1K1<XR@A_gNHbB(mP&JtaF%sJYwz}R#c{O7=W`YQMhjb0A2?-rBG(qGh`OcSj)J_*
zr42*toe|l!M(6*p4{LkOs=EfQbGTLz=<#lwLVR5_Kd&>oSL8*g?p%c;dTmwb*K80<
z5*jv;cuHH>^C>90tVHF7I{PcDvAbL37I3}h0{YO9Gu(9zis8Sl6)#046#rE@&hcSB
z0qxfj-gSGOLlIVsx?)MSj1&^C<QV&~l;aw-kZbW>zok^<Kxo7gew6HP5*Z5Cek`pU
zD3}To7Y2&(w054wczr!&!zU^SS-)cKZ(PLHOO;x#+w7%99%9ty0*(fPE^FvIny=6C
z*ikI{db4t-e%4p{MWa7v2wi>63(kCSVqGgtK<UqlJ=20ZW#WvivbXqrZgeV7P@UbD
zlQU42<q}%M+F5ZPAm$x>ji`(|6gE8tx|g`-6BqgAyut~!O_yScH8jBWl0z42iF>fM
z?XPPJW!v=3&vY_Q{H0C0XARc?B+v_dNkG@SZ4oUmICi0bW$_#~!f482-{6`{bW`aZ
z4L{VeoGa2-(vW0S%S^13fOinloDjx?!GNAo1n%ec%>W>bcw5geoVOSDf1SLfiODC=
z4n2LN0XeGXl5d&LCo3L^`2V>Tbr*Mn6>eLpw}F!8u)p)^gStX+&mrf<y=SS~lg-cd
zF|Q(|Wf_V2_c8v`q(>VssAI;$vBM<gVAqt^ro`U7C#x`RJ-<G5Uc>0hEVQ^_5)E5M
z<ff#^(#P&CP`fktnvmlR7MZLytJIL#*%nFt%?@7c*Z!da*7<?nq|>#(Zw*WK?nQPJ
z9c7IaF!X|4Hbg+yrOfVE6O<iTjrhqko^v9&zPn|)D2s+KWa3%A$R<b7SR$#*iTr$-
zPV<Rxc&^K!Nm4`>YYG6S%odbpsw--tc0=|XpuOZ%zJZ>VlO<>elLuPUs<_M^6nR;p
zGPkQq8ry4<O!OPzm-5Dc<QTHqP(ai>vkoH+{S3{%WC#$K8y;BbQjZ8{=&|J!;P|R4
zn`V-+bv)kN(Yv}5kKAT><*uo5ftBe1BBhf#^C%A$I=YZA`Lr?}HFNQo;Bs9fjg4dL
z>6)!!p*TA(f1strv2e>r?+~|L+YH60T|nY*Y(z)u%@VyQMCBXJ6DMh7Eu40<_}jZm
zlGa<dNE#{g_T7w^%P4FI%EOXGad4FgcG7$96?iB}i2D!M+Lut4Sa_bDmvefd<BU1d
z<_ttix;%?~c`=qMG;mbL9=0Z*X63xO_pl&U9UyvTp1_vsn4!f2)xU+~R22SMql#**
zTI+ZCy<o9w$!{6p5#*f~8K0E}-q6(et`{V44>vQtNrswk)B~-V6X@oqM|+|YkE?4+
z9nq0{uWLisl&=8JAy(BFAu%Xlm-w!j{;CJX)bJB&H^PT2I+IX%qA}Rkt+pJ3oDrO}
zBszmSXLxgeCR>*^R{uAmtuwUrg%7&g$EU^E(Agl8hu_q#Gj8Clt6NluPCoe{m%C&i
zm34HFkqPw<_c5@~_pxnv5ebAnBx*<>F%2qF()~M0kUB>$TQq;Ox`u@lZUO!@6Fu{}
z{OBqh;X4M%u}4wH%sq0}edkI~7^+JZ8DTtuX>|@tVw!EDcWCbnkwr%^%V}$Wo!2>@
zanN1k%G=k=tf3*@E5^^T_M3~pa$UJD0&O)-1WsbsllnP7gBW`T&{&S(09B-MdtcqL
z4<FezsJhWs5P`udpC7az_q~sDddd|g(Y5+<N~RiPlpedd9ZLP(PCZMDZ_`;V+3H0m
zklp?qsMk8-<bj5=%~mS>$8U=a+I9uY0e<bYx`3x1bX*b9$;ERqj-@2^L7fpOFlMl5
zR8R2|yS9}HqL&8Xi)Tf6eNYYS>wh%$dbXIszGOW^tDfj}#^*X@f+>`Apx8%@u@p$C
zn}mFSFe#I0737P2LD1=isSV9(rp;;SV8O80wu^{nP{PB|=>XNomu1D*3y2>g=q*a5
z6w7FK?>N<6=5Z<XeTB!?LIGn>uVmS<KajWfaesivfArutW=uhjJak<sQS#es!zL&F
zz<!T`uUj_=n@I?<{wn)*#RvAqi^%ZJ#HR7O-YU63h|M%>wodc)!J0<$H)J$xBGLRv
zNPX)Mu5zULzl`%XKa%0nMc>8nw_&~S@)qmKf#Pq+YY1@d4o>?nU&(1ouG^f(m)gv3
zhS%_>j1uqA{n{%<pyH}qA#VAB1Fx+c;u2jeX9_i~D`dnWP849T4j+!YlJ|VNb4zOl
z;H1_RS~?s%srTn)35s%YyUI`xo1`n#`Wd%H>!7>XzK<4a$y@5R&#LJ!fMP$K-AMMX
zMV1AK#%+N|Hgr}_x-dEE!sINe&N5JENp+UG&I4<wOM5aKP503rE%sI)b`8Qi_j9Nw
zgF_F844?t_kj=a_!t}h>Et4*sGU=jKW~tyTyWuPq97BQ~`#?Ia(Gowl>m;V1uC0P}
zhfY{TrD$G^*?$twZ8j&STLJz#RF?l4-sa__eR?c|uQy@BL4|c=;j@)QLv&9R)0#5u
z_wijRKNKk9n5Gscp;5~Q)a`qa-_S<R0&N3cC&<kmAW<Z0efC9Kqw21vK^>*`%bmmW
z9QJF`K~@x?BiB*JrST~aD`czuNDjF4AiKCgj~47$F3adSka)qY2>y(~(}N(cvSIBH
zq_&<p`207mwq+og|M3mwe({%iI#%gO29pOwvohBkA%C>hx9hv5puh%<@!%0Yy+A8}
zwoW6+urP_STD)#Uqs71m`D}ikk8GS;c-bWsOXy~Bb#)Q+ig#nkSPGI1c*_Rtb{+a%
zH9npp8tPK(aSL1gpHBd<)}1K3#BJftP58LOvJ}ESfWIjj#6C=OuiD)mSWWw`F*pLo
zR>Y;*J1XlKi^}7rzKa?lX4TNs-LByE!)`#3)9ujfrl!rnFBY?M+ZB4Om<8n-iZchp
zR(17UW<4mj+O)R-un2~q00QZYx5U^DH3lJ!@WmEkWyT}WvQy9>7BorIU3knrARdj4
z`6l{eYC;6W8Efjh6>JXlhsvtd;y7pQLd~1Lh8ko}BwD*8&Ff1CvGux!E6?U&^Q%Yr
z=W}ng?*rluo>O+f;34O72&8rNfXl$<U^v`*<nQRo=6vwQqn5&Q7u#4pLoSeYRcN^8
z79!jguSiKzhU`u}O-JuK(H{=J+8jRmx~*7=V2I<I#ztga-EIJ|_^1{<k>@nDhAP6E
zG9J72h9uA&ohpSILtWG5*^ZkT;Zf6Xzy}`y3?6Mg>boRZb<`Xdvt7`npIgCUqw{*<
zUYszZdJGiN`8=Oyo6Go|6C98!(CDkdqc7VWi`w$m;HyWTKLMKM8_~FfYE!j-bR7~P
zfUP?K2qysLs2me!)4?SGR29Di?ABn*gZszN!;k}2ziie0`U_pV#g_JfnR#swn;KP~
zwg?u>Y<CQ;SqG#b&3`=owO_Iw;6uKucvF3g4+HS+b<16~vAb)%lb7dq0iS8?l$za~
zs@HXKzbz>ALv7_U`B_?ArwXkT{lqU+NTGbvTjhD$IFUn_@j(mX6=X2(d+|2>nFYdu
zeVH}ip)-JIzik_XI)%#UZ4TwnV4PO(vI2e&`>-!r7^>>69h+2JCRqz*X|+^8&dJE`
z$9&vqTP?(AUaPN$J<XC$mh6ZTB?~A!-*@0WbCN*BUeXgOPIj!j=<03HoRP`hN-UmM
z^mbl-59+Lmd-_n#F}9+sxoyi^y~#ncLGf*ReQlXw(VlEO>e<@>%M0B_5d?=D$Y2J#
z+ze(kWjGml*~;+jIi$y9@&<LDb#?nxxtnWQK%J6_O3*m!ls!ywUX0sZ5Hw_xO3pIy
z-D-JRWp&N3XRVB9B|gn>GB4wz=!MaD2h2B*Lss$)-Iyv4U+H&qY%!K+P>CxW;cH3?
z-*><jU*_F_rFw_)+^TV@y9UM@x)oGvsuU($8xTICzi!zBYLMH3lU~E|Uu<r68FMA}
zOY!`lAKSt`;MZ5>O(*nvJ9tzbVhwi&GQrR_Y|-@E7H&x^NiH(GpbCS?iE1wi7V7GE
z`@A|xiK~2^{g#wK$?{)92Q54K*s7xxN>Fy9h29D7PcX~M&|55CrOR^O+;^pzP-%BI
z&71Nd9ghin*P?W$l0CtJQhn3yAYG-mQqRk#LC*A&@v7bC7pHs5MzNVZLoa7yYWICg
zJ{WABLLM*Udo*-4ji<dW|CRUf4oSY$_;COO0bTG<M{iya*jGb-v5Z}>hqxiSpjO%V
zM5Br~RIvhQnFK!6rEOi%27x`?2QY(`eX{lsy2;vVGBGgwA*D}cI?5TRDxVGWX%cmi
zQlQ*L_yGe%Q1*E0#^roh-Y&S>pra8w@nN1sS`F->k)r*U1$c|Bp6MhZAHDl4Ki?30
zR7`0ZSm|P2K1m3N-e#}c9jEZhE}80akSA@tz<I9A;-X~VJ#H%KXbnCv)d=mh@U+Zk
zhXJplxbsXG$2pnG=<7u7Q-~nE-8>mEA(P0<aazD969fGu(Z5Mm&3uCo^}fJ~q*4I0
zY;E``bj7N=jVAN;2o?MMA|Lfu-D@hE01ZcTG)8=m3HH$Pn64U|%jW`wT>|M&6YPG=
zLLd0&xwuq7AGhcoL&50FIi^cmH1Jp-s<TM#eTZu$(bgvXv)O9KNF$d}ib$@MMAuEz
z`BXU#dQL7Twk=$};^|^_ao;MoePt&2vH7XyW@Ztd!0k<{BR{M$3JWistU#xfJXQUB
zCv25XQ*vs;jL*-x$Y~dHBpP_pYdY1=#vNX!bjg0-vk`J%qYT|q+HyZXcRwGwpF?lm
z96r*Y=>8kyK%uV_>R2DqXJh@x(dOW5JXf*ic9-WmEtUr&Lrv6#B<dQR6-PWhecW(s
zt=4x<Wy@aHmWY<<`y3B-Y2da*MB(8aB`BGNN4{=?Dxt)mS&}`0z{mY~ilfILcX8IB
zTf^;cv0d>EO$I9kmSd`mD<p=qi%^al!C;2PJ(41gk8Zv1sqfJpxO*y)*E2d7a8<qX
z;sPqP_Qhgk)k;6lF7slq`OmB>P2M?~%%T2`ov}3F(IlVg1}{NCWsXXCS><D2$Lv5;
z-3!wR&9*<e##MUrrl70oy(&vXm9YrXI+Tfczaoy?j=pYZNu%-Us96}nw)<Ew`wFpk
zRXXZfQI$3|ZZ&5_LR%+3TlxUPjnf*?e|yqSeIspc4m^o-BXkb6-{ehu&!n3Vygozw
zU)0~cqlWM%LvJ*`Xz!%dw&IJs_m>Ti^?QG1J(MN4wKsuf)Z{(#GjlX~>+IZ7Q<d)&
zZ*F$w3omri!CMnn3@C2hj^0^wE0A~40hZiA>T!4TM*5)U*joE(m5?{UJ~^>N?{9rd
z{uD|ki)>?X@3mZ&b-gDg0{dt@IC+Jb<3-iDLjDMh#kpiEN>`WXX}tC55h!N*AG`$V
z_rmow&9?43^r~Ptor#zoh}hFdbvVT8V`W7YfUSD=(ecXKT=3)T(>%T>+UAh2y|S!0
zcnzJdKE%HRvKSPf+U(H3$9@4@x#U}oGtDup;#BYSm25X{-m#B<+sC_1s^=gGJvca`
zPrEWvaQ5yx3nemjpMx?L?*&A&*ZcdPT6^r=>mc2|spNrcAKKt053q7pcf|uz{;3&n
zzBUO54zdq=j?mBk?}u?wjx)!LHyy56-?qC|DBHGP6rblI5Asf|k0fe^%|NFc?Z_YE
z3w>9G5;K}HB7i45@aOG2_9m`=2m2gS5xEoAVGZhZ=$Ai<?2ra^;CUs-Ca@zb28hIg
zGAs&Pu=^T#0I`mWy<T6{CdGC%fsLhkAY_@>awMbp)MAAsIz{z1hgHUQ$B#Qv^U%_X
zZtRrtuGR3ofyDl1LjN}y_IrK}BOvcldZfzz?#nN~^fSdCnH2b2KQFt^M;TeJA7Ura
zs8bwo!}OA0a)1O2eS?cFo+Li^>e&~>1Xu-m3pJX#&L?yjDe@0Kg?Z|&e4If?!)`h|
z4)+q9az47^2WX)jf^T-J9%}f$xOD<@K@W~Gj>dP{<T^vwj?wFEPRo)`!H>NvPbWQe
z+*Z`<HG19s#M2Py;%4aWvuk|zj4B0rFYC286yIfhfIS>|HE$#XCu!&eh5B?=auk90
z!HlOZ){MPvfO|u(HU%C__k*w<CcY<JQzr=X!=Q~qaA+af<JVceMX!|$OSyKk?dj&_
zI1}A3t9|~WiZzJNkj5(qBKw8D&hfTR9u|0N(!l@rYJAP2=BE2znGeE>?__-4H)xVc
zuKB~6sE34}L38G04x8xU^o6d^fVSv{Iasxpv*#{h$XZ7TGAYm)S1AY=cgK5lyZS<e
z%bVi3oOKjd`iU*YeMaE7#745~#RQkK;38&w<$*GM66KcEKrR)KKxJ!nvS66H8vXlV
z;jB{~$l#t`6rg*-)Y?)fL{`%!6BRM#OZteD_~SJyYHj;KEW&yQ4Btv(_|Y7XR#&wO
zwE)P2o7e3Bp?8XRH3d0VSmp61&+6F1*LQmJ)`EHxIwuhSKo*F%*yu_7<lv^t8{<3Y
z!HRofh7fAa_Oa8JLUf=7dSu+?tj4-NlG`Jve>*EG>0q0!ae8Z5p#y>!n0Mp_^y=_^
z<K7RzR$e<ZXAt*wuj9LPG(ph`jshEi7r3s+mtXCRL+7x?r)uQ5zq{9!yECy_jA<!m
zU!O~waa2QP(JWfKQRrK7z3{MCZSerBjnAUrot_^2aQNc%6raN2O|U-O<yP*wdq)3A
zOsmz~I93g1VWstcyJK@|Ez>>QEYnKg?%IvsWqPIPk%)%cVfdDqOwZ84%5e_FA7BvI
zmKzEa_np*Fv6O_4lu;TzJ38WI-YGfJ*h_i?xo20i9~_cjcE5gfByXQE6cVWa*#xEB
zU|Rk&pG?w0SzT^q#rh9N8{=|RZ~T~@Zvcc1gwXwHu_<2~zdu;i*#lGSc>m+PM8#Bz
zgcQzWtveKF)95nJzE41s51}WK^}!B>wkhb>niONrS(TG7x1h$*^FJh*-R<9bnx*I=
z{1~=StgYfsEQu~hD4_7UA8u!fXpT=7C{CxeFafc`TP|Y7LVT!;I57!3>fvQ|vl!UO
zNTUNfKsQq7awOqLINNuXWg2*_@OMn{ISCg4RWL9}QmTu1tAcHg$e3}FH%rGwF2OT2
z#t}-`v(}r7<16S0#!^Hh6#ax&EO+>?WpYC|e5qXTqy0+z!z+C`(%F}3b)I6h;mL$m
zlVCE`e`}2-m!S!Q;?JHseEZQx##WkFHUHLHYOQ9t5$Es;n4?awGqr`s?^aQE46Fut
zGY~k}p?J&lN1jAK!T(b*kp_$4qu090##G*mEYclBgsS?DIVW4dKtHH`hfFRzh`9<X
zS(N1XRVKyQz0RjboG6=g`>K<5WEy1$L|Fmf#)@9|k^~H-^$6Y$mL6^gx(tPKjFD%e
zGfnWoN17E!wY+KatHL5PE~9C>L_fGW%&`1o$q_)z#cp(-W1Qva1|}i2FfO^kl*4w8
z<`r%RC(9@9sR<0{Pkdha6SD}Rug@%hf-(My#`q^^jP)6%;SW{!?N0&y@mG$xJ@R&w
zt?~CWTU=lj=+s_6kSA=AJ0EJ0sb@2uRlrcij^q5x(JLAh5c*=rK;D-WDLDIaa9VqY
zg7&1PYW}RXJRZ`*bUA`48w{KY$cV$n&4gj~@3n^5!Exvc4~C4~2O2lb>2;Z7e2ykx
zrvQRDjOUYiW$9CN%qc++`8S5XMXwjO*2Qp9?Xp_13(%@6VEDHL*pV67j-3-gd1Xip
zEKX;yF`=1o#e`e)g2S{Ac=<F}Lj3v%xi*VjrIQP#QE*2d%F|nIZ^p?R_+XLV*=<K|
zU^y$~POJ#0!Q%5KA3t<>)xvqr)UjQ4pwBrTbF|#6NH|@mwHKa@T+{KhqnHaMI4c|#
z6~1XIbN(I9Oq&I(RJfQ+i?BO<#%JYmZ%ao?_E%PrR8pSFMt-|E;ffVdkgO=Dko@^r
zf;Dl8h|I?E_+1A$CLhz>y+d5{$7NRAb3SX1RULb6*A;M%Z6*#%iHna_%aS2>oS7=U
zkw`_>X>1Z<M9JSee!6b!Rd$&HKeby-BDtWWz)T;cN8ShcjiaS6@r-N1HVTlfe$?df
zbW~PFRvpsgESZ+N@Q=Fmk8b3XC7qh8lWTHwLk>}$cuU4&RTZop+g%fuX<plfD8cAs
z@Qr8a8r&}!jt~W@iC=1YjV08~GeSYN;~AkmAf!UU2ZZV((0v&A-SPLY_NSo2%HeL;
z141mvvso8x86JD{&Q7OkgvNdp^)yg`NRnZUwm>Gb2_eZeNuqV`rX>a?MJ6;QS!L9R
zGryeX-L*O-hC;z5*({hxnKsnI0pIN2<<1xzC4;#G5Y?*L`X+BiSKP_I<CRrTGSq!W
z9gQefj%9R6`P(f6?VF&FD`-5MO!8TsNfg=}CRrs@heZ?yRq~9oLmr|O#Iza-Gz&}s
zMvM5PNm*w$9klI@8yI|qKGS=^*c1e)x81f%!xa<O$s2LsXiq=8LA;DSF5`s?uZ6BN
zkn><B3cD<o(I&dbkSrNyk3&-O+2zCwZa0Vm@V{$=A3j1DUhI$qW_p7Joc#LD@r!K^
z(k3xAD>`;_gBdHAQlLSi`{6U-tus;!Gw6PK;R8MUd7h5(&DrSLyuz_PgB1ZE<--Q*
z68(&$3ucVEflq5VP-~6xj|*wM_5pH4QH&Ny^K5`>*6>U8e6CPn#cNiT<2iZ;)<ARM
z!t1=Ar<2Ljhe~9u=pkiU$q^n$D6ByDDnW1{8Aw6leI+zU_fcaBY}W$F5wob#GakLO
zLG-e$c#}BJnlzu_%}&NXoiEDCq`W~L{NS)|4UIaUyaaIbbMnX}KGHYXwG;fv>w2Em
z8;>6S@vC1`{p&|xdyiJk%1!Z@>BnbG_MO&czA3WqRCP<r%CFwQ2&2Q4FoD03>k(kE
z;*WRLjE%5y@c`LFXRI#RrHhZu$$Q|l^ziAb`GNRop$(-iEeRuzE4|9qsIX0p@~3_&
zS3_N3*EHq~cCiYq0He<p5N$-)Rv^k?*Y3n|-NA8f6^?5TjuigzH<6XS_Oks@sfeNF
zTV?>U!qHz2kB6sQT6njQD?$rno5hSG1UnR@inUCza=m5NjxFKRz~PA3$@YRT>z83%
z>k#oXya$@p<oAAlc|~sEtQEy4RL3;+X2N!OSqlq?eg`4LQ}>S2KL(25jhLgLbWF_t
z$`wC2=~h<>&Z<>aI;PF9o)2W~-5%<X;u?bWKRmPiEg8U4oj;h(?#DAhw!lm6{~5{u
zW+S;`(*Dl?{<ocq2qQcdJtgC}ADA$0Kb*9yC>!iEJ?q%+#3g*B<?q4o;BQ7MOon^l
zNES5PAGP|L6Df?|6kA>@T<c(Eh2R`*(WxK3VT&z`CjWw{nrF(nH=VG`<~ARzK<=Z4
z4t4AcA1cT9Is6+p%UNxQ9ZsPWQX~XonpT$-<ub)>FYKZ@VP#ZeI*#5i@U1AjZBM9`
zMCz)p3+P?-15a`Xk0eIDv^rLYb`%F?nl_^=edsaf_xH7ZYx9u01CY48fA|Cc7%b>Q
zFiQs%qGVk)VC8?q`IVT{_yv{<KvT{F^_QwXzoFCsTxW2Td`3i}GkPqpZ@dDQ46UP0
zy|>UENi<4{js1G$mk_Mhb$RDjC7;E9pgkK^8%gIfWwi}a-DI;_Hh#rZn7XXaXpFhz
z1+<fpak_J>r3wa2s4TI-Kn4p1Zm?`w{!Hn)5T3$M^YM6+1>6Qg1~bcU6svXzC~*{c
ziexj`+<6d?OscZ!+rSA_87k=`Ypf*<w)`rOZY>`^L?Zd}LZBLiyWj?^8OpWLHj-==
zmG2t-^X#8_R>?`?s=@#5hn?q+-8{B~fml>mN3-Dq77gorYr)ufrIuc)r7k5cV@>pr
zpuUESK#8SOVyV&gDQZ7QJIp}DRc~fZtuOSP=V<t?Z-l%v4)?OiFZp)!guyw9!;{w3
z@#1e#6@8@Qw<mW`ZXq8c<?_20uR1Q8N9Gz)N(JlVRW-e2Zgp8@C>T1S6V6ju^^vJU
zpj4g>O{JMd+KN^;D)ETi7{%~C4i@hiKD79Gm#Hl`tXY(bYg^?bMUxHx`z(50-oSdF
zHqriz;V`P_Gdu^6u2MXk&+t09M5&u7izht#$AfHDT?{%9&F?cnU{ovfTej!mIEv(Q
zg6vGng<Q=;T?)EbTujo-OFmA22DszviI;hmU6jya^c0=Y;rmf~kybgHUO{t91pzTa
zYpwJmn=C1S<3MG7uyOC+!TyHTjo&@3%9}c?PVtf)`0qTQ;5|7*-!O58smpD{Qlhy3
z?1Geq-H1YYbIk!0=&8`>X}Nes@y$G+IJ697#kKB=6l$;aQiNUwEmt+TSK|}^Rxo5<
z;de;`?yUPf3szn}XYSS4^FDJviDJZTO`1`$-S}%KpvbDp>`ZRAU`xNT*BxcNL%57J
zcAN}TWy`H1y9m~Jtlor|VhN4cU9PQ+JLVS3NkUsR%X{sKevugH|6TG<<&&WcWpcMz
z3Zbe;zvLX5ez$C19QcBbV{}%KjSet=R2Fi9#`ZJrI$lvhBh#>kl5A|QjO~+cuS)`?
zG=-2;_MiAH7gt4W(vB>S2@kCItjeSW2f*S*<^O|X$%EEyr8BAN4Mxu~+clE<4ntva
zNhk&c9gA<!(wDla?Lys0?6P=J5y#M1F97Q0zkfjy<}p*e%gH#?!-r<CH;P<c77gy?
z^=qxVljzbItg-8Nwc48SR;9ZPAGoL%;fgs4%rsqa!$I$5GEMGX^&Ts{DZIo}JMrE|
zEM^`<x0Kb;o@#GAj?xI$F*3nS&DNYRs?`>lFW72z2QHS8pcS02V_n-qw82$OO#Q5M
zy1ZYH)EYtGt_(=WW3fa)i9`aMdXFVrvAr;?SA@1ONpuw{D;AFFh2^z1A+9F0x~A3W
zfqy^AwNTc*Vu2n=^S_4_#Q^UW@qZM&PB%s~k-{<QW`SU`V&bR2<yml>XbLOsaA9o9
zfVBXu>V~Ph0%{UU!k*~s(ylJqSeRbX689i*jCSL<ekh9}V%F*#D>9+Zt%TE&7fRFp
z+q|=jj100mjAC~OeSSH#CY^BJy}G5U2H_>`1n9u}oug%1mwp7<FEj^ihcK`9U%xp0
z?#2GM-yP#y$Nv?x|Ak-Te~j1SC)@uRz~BCpemq<Jl1+d46n_4GLwSjL`R4WU>Cy4u
zU%hau=1n@uN5AAn-sJdMTxC_>{4y_KJ^Upu&nNlM^DK_mpS;~%|Kkb&JI*cvG{IJ<
z0c4==MKO~TP&d*UznSWMPDm6JOT;rWD@WTUwif4*>S=`j1<=PNKN38{+w?Qrnq4_7
z#C?qszesrUV-&^N<pAWymr2wcelc618;q|WeTsh|F`M@KHZU?6U|9Sn5x--NQlF#I
z18k7y<>VR<Q*mnzKLq`@?L3Fjz#?{UO)q0=<1_S~fy*m*hYo$=XFeA6>W_I8i4CrE
zgA9Z$y|xBl4L1Gvk*_r6_-!y73cG@z&Sgp8i;WxM{(zEWi&<^w&8iOhyQQCRhbMga
zCEi3r@B1}H>_t?9gG6fz(AJ4#462epKe2rb(X9jw`}Tvb*VO(M#;0CcZg*oB!#&(_
zGvMMc&~Kdp8gD9e`-n6|N9JqSbRKRw`#c4hV{&_WT;c=&T8#(V!g)K8itdA4hupBu
zr)s2?%Y${Uy3=;$qzgY$Z`CnF%G0SB{BZ2HGqTIpkhOzp3lddFC++T2b^3gZc_-ql
zfj(+ZI>F|gnw*ZQDn;w&<N}ENC4guJ#R-w_J6t4{cO9a~h&{IvdbI<8?8h5zX(dyW
zpFJNRK7HjpX?CU2KB{xvctTI^5sZ23Gnp^|JjEyrQ05YZK}Wd>PMow5*a;o&s8?Pl
zumqjHkkcgd2CT%*7(m}7gg{H%fHe(IbLy+IYObIL%hVcQvokLEiEGn_td#`{x7h|S
z#cf$8UKX|gaoVTKKAY=sT>8ExZayDuw#5y0J{ZfUll?9Gee_$XgU(p)^L0cT+sma>
zkX`3PIm`Rnhm5yU#KqJfME5kGq!nxHqq-KaqU&-O`KuTMTQdAn|Mm>xjI7<LHM*>o
z812W_TP+3eUgQ0YiT7c{ZjKOof{rzuJ%yN^W>9RWa$!D*_>jR@d@tip!#%6AbsU~K
zMuDYcnhjoR|3@77;y}MJk`t`Elo9cf=yHl)-te)lEkIb5L&iWEaN=*;DXr1Z${fMs
zr)XeYjL$pqmwn19TnWh*lN_KrS&J_V@kNgms;sx2Ek_s32C6td$`l@=!+rE$m!cOd
z2Pp3EvPdGR+wL^PxyTAIs)P-%<#D5pWVg=@<JDflzE^M%jmWO~3EA2^r~7bU%yd14
zL7~q^wF=C@GN-jYHWG*qhm8WCD7p`QVu-^{M++cC<VdUw6Mj==P@(5Xfp=&RSwZG}
zQIO4!tnc4Wm-zZBt%|s}&q}{?h=Sl`|C5c;zn=n%9zQ<mStn5nbI+%l?Y^_+I#9U{
z?C33LTiq3hC&`15>%aCEq7BiMx1d@_X0qu>oPkT+KAKPETd<?C8^56&X~cq8anPZj
z9R%JwDke$edyd(0qrw!n()a>#p%*k}AvwznSR?8)5YMo;E^yyHS+)g7UeRM{7Tv8U
z+YAFIzVe@-q9w}Aq+2|kWpYM{fmqvM#9t;aNUAZC^477U-hrlC7$j!BLTHeO{%>jB
z!}l}-_AE+k=}1~#&hd?s2F|a3K(4_OC*(nAP1G;9qZotXp7;qZJnTRqo)MTcX>L_(
z7bP^NWNE46=M?O;n+`_L%X!25{W(XrEIbGUa$kavcmdXrupy_*&x`<`k+s<wiU(#)
zM4X;bt2%?#tDzh;#LNMS8bTdY0uiv^{Tf_sw}Wz5l9PWEcQX}>&t7qp!tFSYd)d*6
zd+nh%<6OLT@nHgaYJn7pzSHD|z5RBtITWw9{hYL7g(_mT9@;7_>96)1>lq+g1e3^~
zVT719Tj;p4mR4fGVN;?{WnwaoPd*ZzYaM8#lf;ZQusFL85Wu1P8IO%yO$T151W!<I
zeY-|wUziuubYUe>91H8)3W>4GvBY@%Emn*fUcz7!yS9H<0VN|eNnG&t1Xpw-n9&1D
z67|pXDF-Nx1ujNy!b^IzX57%xkkt`NHq%EryjcPC`n!)UWRUQNPgP8KPFcg^&SGMQ
z1sdGe4Pa*zi3E>9R~X^GwU7apc5x((6jBSDZJtPOvz0dpj`R0S2^BR(+})Y$$Ix}Z
z?EvT-2y~9EwpUaX7ZljrEta&+V7W$jQR$7^L12cXwaTe1x@xTDTvo)Wq=AT?l;u0B
zsn)~1u*Eg)$Zc!c3MR`!gVUdPK(O&af89qmPMF{#7FOF2Qogw3x+=q-7Fl!5ZYtMx
z90|e<k{ToyE@k4#5|h>IUq;;7pb@E8%q1SbLtb7g_8?j(h8{X3Z|}iLVs+VQREdS|
zE*;Y`khhyB?koi1luix}(ROVL!nS~`wRC#3i9jK*rJN(>t&PU1S}J?m4P#GSwYq+0
zt;mIrKK%A*IXy2Y+9$+udU*ocA@jTK=wAy;--YQZw<gY1tw0~Aro-DlIg*YT5KLo}
zsfoR9=x&7|5`Vbck@)o8ee4hM+xGiN@`T$;9t;MGi>?1o409x{KA7#HtxGF^h@g8B
zJF-8yBy94whc0Ah#Ma2=;*beXIMSx92HM7pGsOArGK!U*=`3Vp!9chO9}1J@c|~sA
z`Ld31>aI07#p7kW7F8J2sdK2Bo&+83@qOTRHsO+?Rn_$uZ8>oblS>JQnW71c14A-$
zsk@3!>KKl@<`hk6W~<4C-ck>Q3u4YTOrd0mxTEcVKo?|DfogAV3N^ORwcluMKe#uk
zOTL6VU#d!1X>C<<dL0CIFH#(47n4;ODf{G8J=_BBqdE=nn-ay|n+pejE4}R#xs9n+
zJT|iU12Dpg2a8{O(xK()eaHs+e};MS5*U4NGGXB$_4+30-p3Ql8Vhty%qMWcY!>F$
zBq(nRL``+$BRcQ_7}s}A$=aWivM&n<DMizvl(kgFc9MdjQT()Bvp~dtEK*w(k{2YZ
zqQ6<6N0B8PSWjAk+WMQx%doI(U(KkuQLx_+>5rm!i3-VAF%lQVQTwnat7{B}n`cRK
z=B<@y!9x?#a@BbOjkEUJyrG>mN46=1Xt4A10}BC02L8Ry(Z0(C6sT?-=<9GW>n1V`
zR<~U2ui8H~4UC1>{Sgc6L_r~$1ln^Iy0-3Q>qNfyYHDYjJ8f%G-0rqUz*3_GlWl{O
zmD!Mngi6H`GPspxQDNKpQhg0{%sLO$PV%-XdIv6hVTz$)+)8S#*2@Aw2X63#{(Xn#
z{~v9O$k0(~#(SCn0!4`oAhY~BtA3Trq{g}f^nYtjNr`=Hx(#46Kx^$2t(`#AYWgs&
zCm$6Y0%pZUemSqY!caup*6G~#-CCTD(*G-(8{zbC)!MoS>Ay@xy8}-t_u-WK&D1hW
zT7|Txw!r#0*?3<Ssbjqlu7Emv2KUI0J7MOW6>)+l*{y%BYQ?LFc1_r1lbBdxE36VG
z4MWz6m@wHYg$`>8<&Gm#DY&hHSnIgeBMVJa!0MdA(aNrmEC_l1Qs^05z)*hKBw#bO
zaBKCxY0rkHn<ij}Fak>_m_uA+ga<vAm&~yD=I};Phd=pwEB;u+<!MGnzyHiQm<d4V
zkV0aVm}TSoXnw8~Uj}N}e)q9&>xYlw(e93(;-uqrhC#(BI%XV{imKkOa!C$57QX+m
zVi{5{SMS@#kio@O)>ZqZrL;U#&H5`Hhh=vJA$kwMe$e5fg-XaE)tR-elSFmLqs|{~
zZ_21A%l#+jjny?}dnabyq_}r0w~le>eN_s7y7HDI(P}sT)Vq?zQ=RP?qcjt_5p$QQ
zx_sK!+So4IQ`@W@dxK`Vht<=<u$iq;*mF`$IHUG$q@s^kR+!m5N!L``X}PJjFZ1;E
zO~9|b-z3)yw&wOj3xihU{#<k>qVrC8L%9fX*-9?Om8lqSY0-p!ey&PZv<&7=yC3eR
zM7nUQcOiyZfGGMy+4Htz*xlZblUpMN6#Hw(V0|b{(?+q)zesA%Q~Hj}O!yl1hIUae
zFkX4wJLCuw^!&R4%AzR_TH?@<50KLZUVrdYnHO<y{V~Po!N2gw(xh%5m>ujO9gppU
zFnd}lBE%v3qw{2!e+3|`7&gog<*Fai(QE4@LK~`tcuVsYnv7kg&7j3uT-3&ZM@}7`
zCNh$)zV$&|v|{qv6YgIp6Rle-1#DpK1+2R(wiwVTwYksk>st?2&~U&B!(uPhc=YRy
z@18Op;$cK@o!p$*6jgdSYwzti6lh0*vtlLIdNEMLiq9@VHHc#jep(Y90EnfmEB>$p
z0a?cVd6P})RU}jj9f?*(V`+0(n6nV1cO1$DrKnP#1XS=pP6+nHuFyL<Sz3E3w`j4s
zV-0LVl$DZMG>viQ6MYlsO!UZHDH=smML|TR?_GvuqWftWuXm_k?y?0Ds*`+gy{&9-
zRJJm<gd)-bW<bzR#V|l3j&IwBiT0aQIbbJOV_ZXBC|U@;)WmSeV7~-m1OYW0NIw|X
z(~8RJ^xCyxY6V7>6G9T(e*91Cs@vR0`$I~V2B&6Zsc~D{`2h&*JMe%Uaq@6T{4|$(
zA-f+X^KVd<z#vR~7O2mE$h?@_MDq<?6s-;@?bs3f7HBdyRtVjoVH}zPPBS)AOdEp7
zWO>jL@6s@BM<^j9{Y=nyI)JuJ#audsNQu<Dn_|!<4aBnTQy$GtQo=6NeZ$OgesPfz
zqe6Rw7HFV1tP1Gf9Ss<Dl*ltyrq3wa<QWR-GYNh?Xv%WZ<g+t6VmZ@+-c=2qP@jcP
z72J@^0Wl>;U@hYzN1Jdatr405v85t}*mfXNeqb3$*hW?>rjw}}mX$V`RNdq`G2I7)
zfrGuBVbBS<tsr|BegB{xN|0!<8%LFnM5U2*c&~`kkp!MbOJQ!?%D4N1Os*s^1(Ip2
z4VKy7?SqdMCH_I-J-cv+U|WTKxCb3v>6^7!YB)NnblwcfTc0lbC9+wXpMR@wOT+x@
z`t7=t5Y&Cs2x%SCSqh1SWaxL2_g>%v+A$P!-HYAbFK1rL5^B#$>lWF1(o1>;Jz(Z_
z(;i4p(q|g#If#8)qQfxTWp`RTaCJ#f`m%EZ<>|C2Hq(|~i|d$*Q(Nm-+vI^Gn$N~*
zV;RkLTC_U!6};t<OUI$iou)B-Vr|)LcfD+-^E+I-1Vq34=pmK^L46uX6WB9-^Mrx1
z9_}!#b1oED>>xq)>sG%5`#NR+8nPK~k(Bi_=|@}Z;}suY|M==2F=|kSTV;0c9_LZ@
ze7$3kXhD=_Tef}6xMkb6ZQHhW%eHOXwr$(Ct6uec)AOb$rsqUt#QB$z`^P@WFV|}E
z>l>>n-reHXF?KPqkLcWRp`xCgEOec%-hGzLc-vaaT<>unP335`HXm>pu^MW3ui0ya
z%4_^b`0VJ6YudHr6$043!#?+WO#RD;w{pCIN~dkpZ6bp6=}i33!9AC?LZpA33|YPl
z*A$%w$;jkity>9SoyN?wLnW=sg}mwL1jz`&n)9)^0c9QdQu(V<320jsdns+S+)cIJ
zw-66DpbN1TB82jduh&3XA{PSRs16fpgv};NFH;H=X<U(eYoC3!XoRwsAQ)f@<QA3$
zh~$>|0N))LbwAlQ;)$g3h`@p`Ra+g=am@ujVm~%KlZydbm&xQ;zK*aVJTutn7JNRa
zZ<RT*J894oz8J8l4zJ=bkOxl;*x2a%XEb*AY5dDOVE^)+&NQ7}p7xePfSri!CfVWG
z0$~v!8AA_U=Uy6<wY4g*SX%YBEwwt>HELigpO7PWC#H#Td6hk^GR(86Z=8txbX|@;
zs)5=zMwrvW^rA1x<;~m`@#{@s%J8}8VXy)EUlX3ZMqz?+Ld-eraMyOOsgmd?eXB)r
z0=P$lS;&3Xw77Q7*uXeU%8hJnV}sRa*jA?wF+0YhjnQbo;N2hz9Inr)*U41~7x_k$
z<OV1m84-nPdb9p1$xb!bHuk>KD7(;wA_-wqxuN;m>xA<&<-wkc=~Muog`Kyh&&np|
zX9wcYt0`>XDkuioCl(n1u)po1e#Ep=amaqD(B8%EKffQq@2!37Pxf^zJ1csd<bjXA
zo9<3~|D1Z-d=+B6bj7y;YS)~QdDy@sKJIo=@M?kO4zV+j*h=ibnc7a7>&!FC(x7$D
z%9UcBSK?Vi&4dR4x^Dn*Il@9Z?@T-?AJu=x=an?umy%tYjCqZc<zk)JptzQ6Me(9T
z6swTo9TO^XX1|z7vpQRaNRi1%>H`EEWGC{i#tHG%b-=VPfXL(MVW_D`)(XXcVEWHy
zw!Z`J*^3*9#9>2<6V^~wK-~j<)1BacmU(CV(MNVlQiQiBM@}KZEqM>BGsY9!Ly+U(
zU)e4z`YjgjFU2bI?yk)cG-HCl6----5K2T`HVLy}4=~vuoo++ml+*%nF){GorQ#26
zx&R2J&r{9eE8ySA6PT-?NbKKDbpr2b4O|5pTU{%-Bou!B^%F=|6f;HTE(q18@-|bn
z4^?)Cp)y)MDc6Eap)Rl9%UXK#?OclZej+Fk*6?5C0B2*X?VpsJ^EY8CGocuG4Fm8%
zJI|9aE)-QXHW0}zT>SaKn1f;dYAEH)m-j2*m1(q;+^TJYmwZ}%t92JQ8}Ia#u#fq1
zPM~80Y?BYlT{!PCjrVz_VJNxX#T~bOLdbk=F<a@o_n_+HE)`DlL$pbVFLuYjo2=?b
z1A5JWa&%qhl+KAV8QAGrIkKIJ^<|c_IGSF^^se^4S_J#fX=glY-Wti3TGVC|u8aos
z5_!Po-aJ3wTle;8U0NDwTH<cp7VTK4CF3r5`?o#L^Tqpv6^MmUqFkghaSwFGp14uw
z6!t<U{20+B_!{H|o;4%RUCk&~Hf4~_DtUyZ)5Fu-g{h5yJ05clnJ*4mDwHd!wC2QP
zY>nVDv6iYg;o^54p3883!LN#=Y&1OO7JZWDAk44&ry*VtVKxEA38<%P>yOFME(v%Q
zCJW-_7(x$AH~O6`M|#dlfg*TlMTnZWYSQH3_Y0)N+@^TGASAuGobx+2z1f048!YPL
z`zzxRj68Q<2ekV32ljKawp+d_R#n$fuH)Lr*N&3j&kuQ}Dl{g0ioiWDdfEc9!!^o-
zMT&AL)^mDvdwPa~^q+P_Y5j_f`EM=j?)={qYtmF)-@zg48P;iJ5@A8Nf_I#H5fTlh
zuWlLGiCJi=)|&jC*5>^1SN^^Rd-c{8%_?x^>!c_;PxYZ$gFJbcg*m0t1)2)t>NItT
z?9&1_+nJYaM=BQT*Lgc+S=@$sR9?SiPf+%>TPh~8q<@F0zK5Xb!467ApfBX0jd4-k
z0z=XGN7#qrxp|oac4a-_wKolLUu0LzIR^g>T<!*xE%GnuW|N#L;Xsui4$;7PT{@+*
z{2|`b0t$g*1f^71_zTtZTo72V&&m!%AOKM@#yL72wM$F0n{)tY;}AeG*R3CdrlmCE
z+9@V9ouOA9P-~4TF;hV<PF*w$N;iVOmMJb<co06Slvi!Hus$|8cUW$zac3|(=o#%B
zFF4>NS;@!1q-4)g6)lVg7NGAl4C)Js2}Wu$qZfw}?v*_Pr}NYr6CSgRhFZ=lo4I)R
zgpDXoaw$%<3K^WZKNgRMVX7K%r(dxdP&~r$<EI;KE2MTZAj}ExwBX%e=JMJJqvLS<
z9&pVgpAER;Hh~=x-!v}SRDAJB9j{Y6Ew(T62Ak$MBt;9KQYF2q%ftu&N}vtRGin6~
zfB8I;8)ur4U@={?ms-j!pft$;Np<W}Ho(_1Zfh_g<WzpeuwPQLMt{kBn4O-yYxY$<
zuFdWUXRn4+rM5c;IgEDCS(%wQLj)fjAFgZJA3wT;rL%TNu6K$9I&c_-JMScP?I{!R
zPNYKD8AuEtIeKhDU5+gdU?_~`qG#yOIj&ZL+KWQ`nwK#(@F8FDq+Es;RV9A};jYSj
zTu(+@k2J7TUY33(p>othiC$fzrXaYuY(n!5lT~sTlx47n%8+ytOjpK`r0ANoID$?2
zT6IYXwb|*GMMu#K&N2uW_m!W2quwjrK5mR8c!pjVYWV{EBbJrTg98vfAqx$C^}2Ak
zA)aPs_H|5n?Y(X&?c|M73&bSU7XiK*=)Z|ad82O)YzR&C;t8BJ4jkEkl+Z#Gwhj)_
z4e_i=&wXBBz^c?-=`Re8TQSRL&oWkQg-F$NduFV{owCLl>+0z{)sW$@tE()tx@kE=
z?;=Nx^o6pJF$!qr?XE5|^ydAq+NzzN@<PkK7!_V6*E;m0SjV_60<C2B92zxqI}jOt
z2H3y27Qa8A8@?l;>I5DAt^Z|QwwfmD2^qa#eh*JJf1AVI;b_JhXO6;-<{k7?UDNUp
zgCME+UrE(0<(Q3-p%xx_#@(YrDPy=r+a_Rj0U!c$C7E}ms9uvlAjRC26D4e_$+Qza
z^@V2W6Zca($wx%HW@(O-7y;>n1SRmLIrJfVNRFvnBX<En{{X8c;p!t};PEhlso&U3
zn=UVJ+~6RscLF*7rrT#fN5(VxYrh3oiob=k8|;FB?K=o4P7~{iu*B{}<CwF9(+gyS
zw_(%Bekz_x$tnSzO7@baSz;?7MSY_Y-(TEV5%=3ok=%A_wc_H?BZ^!6t(3l1>$NC_
z%%`QvqDl+oD=Ni7lqCM{qU5QPikBC}0xiUxwnR-oU;7K5#xH+IMcy^L)z3F9w`+^h
z2TturBBM84q<ei+j$NDU%q@&UUsG;7fIb54xYyoD1Wl#!Qo56W@zfYvZ)w(`itL<M
zVhpO?f3P_S5-!i*N#_Pv#>1j&;GDr&7dwy&&GG4|R{^Z8ymquGXufiL&OBxWWX+p*
zg{o8?BKao?G8J9XW25k)E7Gv=3Mo4<pJUuCh<)%2oROsI3=H7VxtRFUm}SkFy|G^r
zlf4`~z{o!FC*hN+fCIk{9lz-$T_le2O#_D*?9d(QsZfb__7I1;4Ph9Wkl;*!u5Lc|
zC=>$ljDTqV`XPXnIL!V!2&s#{AK0CMOrc)Ud98X}VYOzBjTT|2q2gQY?c5d?yFMHj
zDnqz+yL}0_r1C7;W>d^}-cMUFUJ6x4ja$6sEj23OXox;t3S#Y6F4q243KH{s^VC3b
zqTk>wKsX`12#_+=qV;|YmTfomDSivKsP?8b`qrCg;69L8?Ys_3RZKK=N4>C*KaP0a
zUKYkOPb0kJ6C{ElQ9x+Ih{MzIg##||{D4J!X(b_P8vn0>J9g-EX%c8j?pD_>$Gnat
z3Srg+BxvvebW0|8EMv;tBFdj~eUS7ychM{b$piya<*$-WE4lL4D5r=NxLG9jgX~)F
zyc2lrstkrIP3cC)R?TlJSCLfwa`zpuwQ0muRb0l<1w&Nn#Vxz`E$meB0><16G}ia6
z6~_zQSY@U_7PINIs%GlvLeu>*k&yw$y>{z%SVzzQgk-pmm-)dIW2uZKQzB-P2%<(!
zBDt+#_*yr}VkymLvF2B1_dff2XRf^3xZ}WwFO%ou3|FQZK}YsmN3h^)@MOv2^tt%Z
z5ZU`wL!`vVkxq!MsC@z}1(K7MxZ96#Oa*!948h@+doRb~wt5*VE(34$@jFM@YxRa(
zw&TZKf(pu$HU>9}dB0%V4%``}zm}tMhl1JgX;*ZmequJA{b~SzM1+OJ#l3&&)uqL#
zf)0WK>1Y8ipb=mCH6@M6oX(mBC3zh7y-l^nX;w6twvG9_lDycu$ZxA7(;-ChWKfWt
zpyF(mH<UzXgf|xS$!BcoK3d09OP`rk!{S4qW!t;C`L{$h7w#&yUUx?Yyz9y@w3T$n
zhr3c9;b^qNWq(WV9fkLrs2ut^dQiux<c;6q*P&4r`C&&@dVOC}#QcnA8MTWu(FuS^
z>eB;kq6w10AxljRVRC5tYMkibp4ilSN!sM=fIz>}4(@x0KwQ%6mR+sgw|3rkQLCEl
zZLFP!Ono3V-7JP=3(syu2nF##+Xm3abHH(?;?LYP7D)=B9irT(@m}XtFjtixfN}fD
z>*U0#V7N9+8s@f|C}uB^RyZJ9KzH1=SmN2*1q^^Icd9=MIEA#7tsT~xtw;NwGXq$&
zdU2%wjn-3R-<Etu=8_q|i3sErlwn*8P4r{t3vHsKmO?&2wsS2Ex~Hu)h_^TP^8#*~
zzsrE~?KUL*hM5$piXJ}i<M+>#T05W4$tcZW@;l{AsB<F6p^|1~u|s?To<_qfJmJkB
z-wJAQ&)g|LP;s6pSuXiYVqLnKEw`LVYCNTvtDCX1zP`J-ZCV<J)?`}4F@?1Qk)%K!
zO-T<{?2QCv`=&@AN4G8wx(8;92cyvbp{;OuYpvC9*;FK?6S{0vDTG6)d~o_)Oc?-p
zxmOwqT454DxWD@H7WF*jE-)IdItGNcogA{2M_Y8aGy-RpnvQcAsmRDq>h9*vR&;`K
zO9sSv$-SO*1%AN-^})BYdWH6IO3>Di-6wKu^bK+tJIR0!EMH}t9c5~A)^4AQ`AI|%
zUwfNrpRA;H*E`STXIQK$;7gnFyLR}R=Qe5oyDu`UAYXAlwlD?GwnTi%EpWcu<hkkP
zJn@%3Yh5vNUO3RCv!<P0cTm)J0ejb9T8i3*D1Z^MH{t$LWRacSnrOt7txt!GV05xX
zYo~At1HZ(|@I-z*x`%{1m2GT2Zgm#sh-;ZWtsL77z{IO~{EZ1ElYf|CZvEaGIvRLs
zq$;z4>+_o=oSH9dB^hcVTCk_aiB(Wp=an(G>2MKE$&v$Wbmg--qvy3F`B7`;dOJzW
z;uE8BHfPPhgN;s^{7HLQ#Ndas_ONg|S3n#uw$|EHC=T`R&l%84!SaC91&>k?<5}$^
z14*`GiK5hIAt|_mo&cV7XOTFuBJv<9YR=P$%i0r2r#N-8|GY!ox95{}KIE!Wz!^(w
z{#Od#7%2cPl!bm1eqU^MCUf=*?kD;o=lyb_d(&=vS(TyJ^C?4j&!xKP^M}3hc=#v$
zhhFDm<OgFnhqPhnhINxJs{9)nnJe2Wj>`B`rX%5xCV@fXgc}QpPzzs(zjvJR7a~VS
zHtd-^9)-)DRfO&%Y*vexBt>H*6m{EdJ)T@jV5@&=FKK=B(28yJ;bLm++`%sbWK(EI
zC?inR>^?{vKuq&-B(Z3$CLB%^6svvAJD-RCp*xF*R5Rc6N&RtoZB|{O^}uNV6c%h<
zWG(wi`KwChi<;%u>0D7G*GGcqo{I%@kN0|Ms!i8s5VYkppunY%`mCqJ`F5hHR{I&+
z*oT0Oo*^jl0jFb-EsTLC4{!Y-iipB!gji&E+wi5g*~Cxdb?30KFoU?jZEjB@@H~MY
z@JCscCL$NzZuZ7)1ZBrbTXqwKa{t-hHeMI)wIAvGp8%yoFm|Z%XmD4oOg<Nt!Ja3G
zQlnpe6;ygetT_~BxSayR!BC%(PC}W`tbUu{NZFMqQ612`04MFlxw0Z6{$u;B!WOq)
z`=rcnTHO%{;M!j6-)#uHp%J@&Z;?-65hgAfJpSFL59HTJ8K{u5bFJH7Cb^jwbHZN@
z`aXQTR&qAsF84MZ-1=4Tx?F=~Y+&=869~YO`22#%rIIe>SiudXR*WSPN1$R!#sgVQ
zHF`R&)(n`_4v`55VLvQ(PjD-<VhxAQ?z3`h$NFrWx)bhZTV=LV2fuBqEROc^F!VGm
z*7WjX?Eyk1q^Emwi*55gEiC<;S&$V128}f~rOv0$``m(x-r7=$=DiRS1yd^ZFl~gv
zLE%OA(9_EXi@5FV)0n+5YY?kSanQjD!e?i3hC<~Im}Qn(excF84$h84P$Dq+UZ{ON
zqB|Rvl2XG8hM9*5=oUWzldx9+`0&#mPc@e!+w>Rsb+tohXwWS#>gBJk5pswP$BDRq
z=G?<#!V!K!{xpt>+W9UxJ*KYQh?N_)l!zfhh`dpugQbW>l1}1=<z3W#JV)nX#C~nk
zewyqMz8RW*jto={G;+7pIpw|b4qbjX`V){#1?fK&58jOpfN0g;q>|~9NG0$_#J!97
zlW!T-0~pbk69u^4B*FC@a>5a!Tb3PdPa=6w-P?F*geV#J_AeSbnUSZ1zf8E$eCDHp
zG2BePbMOwIc@sQ=2sK3k?kR`VKtsKFSV!JEvurbq7eS5%_DkZODurZ-`S*5B5WaQs
z7F=l_*!e+eX48Vy7uc0XdaHyxmmwwl<6ur4E}9(`LGIhs?d@CquIsT^E)kjdpyCz`
z1~T8f_OB_^*>Lk*SV;9t;jt0f=3Og>erXw;Yy1P5(OgY;ij$P2SC~p`Rn3{1n9?`x
ziJoeo4Lu#KJ`Rhu6Uq$m(pKFI@I`uI<P&$3860i(ihL(=u|#O}!xor~X`dPlPib-p
z3k+r_IGt$Lw17zRIf0?G8D;jINK|%%dp8lKfz%ln-2**lm}!9~+;j`HW&7TYP`331
zQpw8<IO8=M6_{?77M*DGJk;B!zMCtaUFkB8z5BxgV)!i;sZ=-1S)N^-4g*nUp?(|w
zxQi~IIqV9;M*voJ!4;mfW;d-nsfxC4IQN``wrHQEO`qKIJZ_jq-RbqI2~Hq~^&J)a
zb^dB$EpbM1{B!Kl>dvg|aC1heXp4nqWhdIN*$V!--7cZzlLbzh@J@G&j$+vOnWUE&
zk|hZS_6gNg7QpsarZ!kinA8$H97=7Rf;4rtI!kerBeO)y{XnHsPPv_|8Y?Bhhh3)I
zW3YnL%V5>LbS)cs%|7Qr%nCj-0^eM^&-YKSrX#&jt6JNGKOL%(x+sQU-SMI#+q@q!
zQSQ3aT5aYklv*6ZQv@w$(Z2xW)jZXS%kA_&Z=xn@-n7KNZiWxQV@*wH*EZmDiCj27
zFywh4LCnTdw`4;_EZ9kJs#+MN<?524@S<df+~#$6_$&HC#O0&EtP4W0EtUQYPJM>g
zH~~9FfuKz|?Hvwg2Hfv1VEy_8jC-j$kIA+np#T#MdSMd`UQNdvW;%a%S^T%yL5Eh!
zNz?ImZ;Ek_<Fy9?n){5k#u!!8F4D8E+FfrVH7la5{HK;#wb1G;j5nWM`z^7<IdMsa
z!PUI$@~myUAcJS^K8XDuF*u;+C<G{^G?;BWQaJfmbeBrMI#e2OftI;JgggSUCtXUt
zJ#U62s#Cg-Bvioaq9EG(l`0k{?->Xvqa3gah`mG+Up5uT9wOau$yYXdX=F+I20|9k
z$$eaGE6qrs^d+N>l`B2T_=ABk@=Jn`&*HB`P?fi$EWuwunLBGeR{HWtO?XeE3`gOd
z`Yx-Zp^fIN#%8TD%5p_uXkRlflO(U8^&VC0TbDKPb_QjUvOB7d+(5Igb^cgUy;HVd
zRI=tJ7skmTJp2F45EgN;neQFcWA%|2B*mzfIFXvScYmaJYuEk~!@pLDFfl1-Wk`};
zd%jd~UD$fhE^#i-M$h90#S&c==;b_TLk0Ijk+<Qj?;*6NZj4e?onlLEVRA-1ovu-V
zkqe;w$9&I8J*99lmO%<E8#b!l)eqUwU;OPf5&1on{;U~juM?+;ezuul<{gTw!PS&u
zB0CbLecMZCr!;<^Gw;mN#9iGTz1>lPU<NMLj3gDT=H$0$Q|9QXMaEpItQm2=W#2;B
zFY3AV=FqxRM?4Jr)<^L)bey~Hc~F!Dx#Zy%s5cU;CsII$)bIFR-Ft*CQy-(7<pzdh
zVZ(>Mgr0e|;4FDn)Ihd`mL=Y%DJ?19dSEu*4al6Iub4TET_o(QUQZ55Re0)P%y|yk
zs^e*An&DNBJo-mK2D#jyfI&!Z=nd!m#>y;dx?^GuX@=Ja^4}6sIJe=3?^CFlquwn|
z|0sbDH>5rFD|qET2111mH3|`Pg^Aw)|8D}7x^{MY=&9gN%e{S9?S=kxUi)HwCH<G>
zOw3K-rXn+Lq1iEd&tMe;^*Va4&cSIAmPg5U=JR%9?tPRp)F{X9(}qJa#qN{E+t&$A
zSity+dC#>#{Z;S*Ch~qDKlB%@nnU%WqDr$#K{Y5y5uTlntIgL##kfJ7!{N%YGSnsx
z-I%-ve!h6Dd|&#>Iw|@N)ev89MY}I{(g)NY^Ki(F0WWYHHFz+{O!#47a_ik&6=1C<
z0a<HRzTn5{@%YJ4TjB^^QrJ=$rkn3>+$>)6$OZcVw9|b2C#{Q$@?J;0PGRr`jPt5<
zv|(&DLqbWy_FV)SicKKQwv0`q+5#c|a3_Y>v`(zb;V+@~Ko6F#9YFqH4KO0ay;3p6
z)o{BsPFSkhY4eR6ZbAF@nPltiD(NBk)EoJXslCo~*m5GBBja2KkD&YVddqyzCA1y+
ziUWi*D4c-@nBioN*cKBpXIpsxf|&t8Pw-c|zyMuf_ZaT(pF-I+L`&8f7?={LOqu&r
zg^$DN!9gu!@UV4VG7cH12ys4rsv^cp{@A>dN(s(tx!NmLi;ZMTg-45h<+~02l%iy2
zd<Mv)S!Tmh;MBZZ)gZ50w`H>lR};MP{TP7ndq4AyXWw#9y`}pNB-t{PIJa2pQ~J3N
z2sTMJ$efuko-i3owVRzOQ`r>X>EzUAaC4pcg+a&ah_D%?LzsGlem@)RU5NP{Qa*+w
zZJ=)5-eQ;o(1Dqhu$OH-<R0n#|CbcWy*g5JgEW%@L2^wxod78Hu2}ybgox7DN~ek%
zYtU~Cs!QB0DJJ#B)5kW1!6Am<BO<SPDE(aQK|>oz@Fa~y9{~P}q$`lyf1;cFy8*b|
zfVjjXbbhpu={;yTE{}wB^X1nQ9mg=!FhMZ^(TA6N$s{?K#Dh7mKd*~8lK;oYJ@kUD
z_%jqXw}^ZM+Apz(IF38mSN71pFyJmn4On~VNA8f95w3(|o5rUo%tx9(r$@9?Cz;FZ
zj6}(HbT{FWJtwY<;Rptm!YTSCAOF2bGpzZ#P^T!Tz^NSL;}IGrJbU^+c#47UEDrf6
zGrn7@65%NE9<|w6RJ~-e2AQ{*lK6+-eoB+vo)%IwOM%3JN#G01`}gZAI5rXdGV<Fa
ztV`E8CGGKD7zwUjIE{7=3G@))`y0)$4|w5ZNQWM5c_o1YRE73l{@H`)S3?GK6prZO
z(@9~h_gxszW(HpbsG1YqAkQOB3SKH|M{)aX&*L$Iw{u{Beq@)xqqE=yW>Stdgnx#0
z=<a|_)v9>zpZ)syhK`+(+%KXYB6M>T+gTW;u#Z?z%%jmCV`yNl2Q>Y`?`v>MC-zGD
z1k{)>Pw_w}EK*`9D4f$n-fZMrlKA{G=rSQG{*(643rTUAylKB)gJP3BG?R3W%M?Up
zG{x=D1S2~R=`)e7M1PWZd{GkH*T7FtZxk{F0XBg|s}#@#%aIl!$GyiGMNWcRKtO@(
z-!Zbgl0k;2!bI0FTTY2F<iuTkEb&e36zqO@#^N!kkrkzUF%4FvL>-dtCXS-%_}c@5
z@lSS0p8C8_3j6E;ISp$+{dIfsvZ!DILGm(3OCW`Q=K#)C!9hB#f*uk*1r42fti#lU
zfs&e2%e?OFB;~lVTiUK^`F-BFCGvJKpX`GR?~IFSRzxI1ikTF8>rm(bh-b%G|8el&
zW6ls<o1Q)%xBIt`ZxOcSkRW@yKC7Hu!GCqcrupG;fBq-;l;Un;u%56uvE~*;hh$C6
zvm$ppw`h6@lp8&`Mhe;;2NpSjw$>4Q;-0w5GSyAo?=%VbeOS!t(C8B++9}$P?us;+
zA+58_hi|}E$}=Pwru7o(EYuw`4$>T8_>TIowE5WrJP$z;J|5&kqy8dYnUof#rBp^8
zPp(aL_TJp|FCyyL*@uQ7wQMY>?xuEiNscV1yOItQ?C*i1uh$45?_3O@xV)-5CxA%?
zI{)KIy|44~kL96SB5)(!O8v}mCYGS?=U@xwR-I1WAOobk=3u68esgo(9jCq2n>R-W
zAoRE0tHldN#^h{UWTrl>PdWI4)AQ~R(0{ci;C&PmV}Swy2tfe=5dYt;3IC}}uyC|a
zR(ITBLGau8qMS81oi|~NzdAmp&nl}VQX$fWB4(G?WkP7n*YgJf_Pd`u^S!}MJSy}?
zdf6DNBVF`<n+o$Nd)K@&JYgyQs+hi*{*z}N>HJ!>(bds$VN}=+i*o|4;GOf8J1sk-
zi<k1GjoPKoI`_thMy@ss=&+>3?uOcuTRjZTO#ep-a5mo)=%wjF{;P^63GTd}^-q<_
zfl!t2UwbcZOx+mt93*C<IMkE-rc-KpH|hQmV_Iz(MfI0(v30CU6EUy>*DwtP#0S>T
zH~V%Ct>}fmOx40c6^@x5_bmSWZ<Mw4{PZ->+OYW(QKp#F^V)G_W#~#MXmo@d01B?%
zD@3?SlZ4VFfSad*dWIY<F20|?R3cf{<OX(laV%0Rw`RRBSUn*@g6BDN^y%;G>NrsY
z1CIr#*kG=3!jP!eia+3Bh1ey^#lOOuDAD#H<iqjyu-nN;(>+|Le<%SBp0}Z-k&dHM
zWml61rK7Kgl9up))(zDfZRAHg%gPX9|Cp%3c#YmV7SLC&z_4-%61B}sh1Q*(C`ygM
zK!-A3**`T+%soB;I`DWXZ;OT;I5`>ysB5OO4@{3f-F{q3hl}Six&-tue7`pndt26T
z+0E#8TCDXZJroy15%0WHA6<<o!y6`+vI|;DAlo(`fyjcgbI}h56}|{gY*v>cJKssQ
zySc%`hqdb~8T2sWt_x2jzXdqjJxF02+M7@0I&>daK9^o2J@qy&^Yl7-L#tz-mMUgp
zS)ZhlKrc3gz0%X8*2VvMPi(-0W__q0#()0jYrn>6;_q_M3x*B&D)`oef;vd4sBcjH
z_#4!fG!0r$C*!NfAY5cV)Kzu$sxG8-;1z=^HU1Vlllsf*FD)fq7v-I+EvHylT;^Cg
z4t++RE<KGaA=m)D`b^#gbx1yJUVMPYe4}nCiB6b8q5flUgx3;nFbX*Yu-Y{3VpgaB
z=OpXq!lK50j+CG{Szr!24o8^tz}6H;CmC7}^O_CLA%I=(S5L7X-rC0|7b{AYj=*fO
zq2P0GH6u}TlZubw14tqV086(GYzIaRb;y`nj$y-s0l66*fic5~SnLCUwWYRc={=57
z!#*OeiyGztR10$8tXNI{4lJ;msTD(XGd>{PTonL?L|Nz?In}wO)y`cMesEuHtR_%w
zHO>wnHiEXl5Rg<qq5@xBmAcK3YE8S+gwpRyojC$NzMd|G?7<X^tQ^W@Ks)zpO=&o3
zJd@>jF}z-;YmlY4vW1t*W+{~T8_-vXt4qEGT3S44h{wXE*sMZJ07K20X$VFdPMB@q
zzeEA`>1`d6SL21;yy1eT^y0p=Lt*Dja%7WZl0|{aW@V3w@$XBc(y_Z!Fr>YsPNw@N
z4$U@BW7YxamIHh+8IM~b-r}R<1rA&1N*L5PKjfdV|5fBPgUtymo((+i)f#@o(*nvC
z_|;IJzZx(RQS7QB%$-v@9Z{gSMYJjg!kqT*W!ky*$y##Y22R|lY<i#<6fN(?VQv9H
z!9V^}uClr{hjKVj<R=<o{x~DUk?`>*i7cKcp4}8*l$(Vih1y80g2DZ{5RzVt3~)nQ
zSbFU86ZW9zKieaF$`ZvJ{dXc{c)PDPs+KCty#Vo=6R;0hTSD-?*mjQB)F+}u%dus(
zq0}+E6;O2-DMQm0>bs-!>0u!8&HB9mqJ7|s*3Oj|>)NqXzKi*IB(cKG(JDpSgX7Zc
z`>&{4_8as+y6bN%{k{IfN%IJM_W1Yr{yzrU@AyAEY5qrJ{hvM>3rAx&J6i`Qd<uLM
z2U}}=QW~27&s+2VcVJRZsQ=o>UpIEVdVgmK0|Wpd{cmT|cXqO+wbM7W)HgN$)!o?I
zSjTW8_0z!!ePjwGU`h!Ji}vwH7KnrVWr?3O#kh{P7SjVr`EXIa&;&hO3cRY*;lJXT
zuyA2$k@x2I?C*7|Pj7P=Oj*rkE6zO(!PX+>rEC5hE+q)v*WP74*L(cCZ}^WmcvoE?
zE9BUZ%8um9OQ~0K*_c7h31@ZCKEqPae3;w=*4XqW!>w2TiaH6=B+eA8B_WK<+xA(c
zrXXx9obG8Nq>G*d461}D<ogMA(k*iEwW;X#V+7uZM(O1o@V^#e05Kq{^LOz{zeS+<
zZ;SAs<^Esm;2hHj7eI#~bmKJ?+^`%$dPDLpLXAZZRJB!Q0P#aZ4N7bg!)WVL><xA>
zp}D5#<ENE0Usr0TX<$7k-<{@l@u=;<x9Tos;9r>8Tq%uJUqTL~QeM%S>t|RJ2Du90
zZW(3B_R(Al{4lG9Ipe22YYsSCfpmC!z@F*fm5P45FdP&`?iJOrE{4-FL<5Uft|3C|
zWZbi*#J%o~l8mN73f1RGLf8)3#;Z!ScYEA4aHEa*hll5}f&!}^{lC^gT}xIw@%Mo~
zga80Q_}|vxe_eZ(s;2D*3yRN7&Ftr_4L`AN{G_=b9OyC-Wo=`x#-*`3m<UJmnOvcW
zf=eg<k9UZwyhLVoug?B$X3WX^U2Hq=cs(R3tQ1YXcpHfVIu^6LaiQfLpQJ^Fy5&}R
z#F<me1}a*Ud{Ar?uu86kxTZ8H>*`FS`5&VmueQ%8ss_Cz=kR-u1<O&1{uUwQ-dw<H
zXj6S?g}1GeA$59J1rf>J@%Nt3+o7???xp|{B^+Q<#m0b_3e-f6ymNSzyxP=w8R!pE
zBc}M|vetYFS?zCaMO4_MAw~<Oykpr5?*a-vCrW9hnYA>h&aSGSa0`f|7(V00_QsL-
z+~5usG0h-PJonF)6&YgBtM*bT93)|wXE<tX2R#C$@9WZkq=Aj8A^dglLbES>b^x+Y
zc9*`Z({UfnwP<P1_&_zVJu`#!BDj$zFqeiL_x9dZkO`WrH~)S!-W|xut*5_XD`laC
zTVHDNj_C9zn^ko+F}bSUaGSi7s(&hE<w2V-PLL%P#T-^we<i^IES9&V<-<+RPkJ9s
zXJY#=!`-)?ocjlUY>Xw6&iS5#RTB9XU^i|L4%7e?2YlYLv{mz!!swhpiRnFA>*67z
zwlbpY#|Ozl4Yf0ljFWE+_Jlip!HJ3DQ^id^M}<Mv;ntRnf~IVEZ`|L$CJf4r&fYn^
z-zYrOSk@t~i4(J!rdns~14HntN&3K<lw!Qig5(d0rbwrs*CNo>CpJhtQPNtTg*fyl
zh(z-;YnicZ!mPxKnVSDn7P|yZ?NbVx!3-}_>>z4a+xH3E1ak&zxnQrbDqNx@V~O?*
zVu27dD^T0p)oFa$@~F5ys_ffbf_&I&ttw5yX@;eGWfPS!iCJkPwmLA|=PnKg)eN_!
z(PwlbinL9$vY^PB_{$AM9UPq5+xN)VG<x*ns3OBA50Pz=QQjU0;Lk`ZRO{=tl!3WW
zx0b>A9W2(xjc`%<RymHyC_Z9N8XGkxyIbeWO0T~J?2a0Ry|C5)LZ-TFucJLBGPdUG
zqL>$F%<kih`5L(NRw_n{qedM@t`h{xuwPj|UeC5ZdbWK(zoPn#b_ALLXC(Y-k-dPT
zUQw|PS>!s9Q53Oj`;%$-*@IW(2j5iqp*w+e6vT$-Ha29o8B&u2AU_&gvr$QhsJ5ED
zUmj&#*Gs4`EXL`BiV-*CZaw@-!iB{Q{}p-#%92HJdV)2}(`Z7c;{p6JIC8syXl_Cu
zfAR`d=|ECU&<RPKnkkr;N3{G)aB7<RCP%G8iM{7H*0C{X!kW=TlWbUu^Vr5os`!%7
zLFSD{8e!VfD70Vd4s>B#ovBnf6ns+I@sN~;KGTb-kJ}xC49zB4Eu&cMwIPcv<v>^I
zVlIx@6kIiFJDC0q8bdm8Bfv1kDH?R(<*h??+{La-=_qHG^>K?t0jJ-6XEUyqgZ3Z@
z@j!Pck3GmFw5?(=;!W6qvf{RvuQvE1JvA6LgFj{^h|*ozcYti*CXD;Xtg%kTK2z%_
z)SU)we^c9nod{>-52ay|DN!mOc65rloD94&H-o`D*ZmP~3xUnus(Si~xyK}!h34yK
z=X>FE^YLqyGY3eAVP;EcLjErT=#f5B9WE}sGPE$XP%~e23?}qyk2(?fhEXvo)!x@l
zW*#PfAmGbqOY{Pztr+%`$m^O>>f|q>h6i{hy&`w!7SG?5BG(r&Ts1WYe6D^pZzVwt
zo@<DnGquVeKu5L*8L!L<L5xai43-HeuouHIPxa@bRb=%JMONMQm=iZq0MU%IEj=5u
zz|XTO_ZSOt_Xwq~zt}(Hc5z+Yw8wc2`Z+BIt<-lJp11nOYeCd`>sulTZ8%ziwDo9w
z!;+Rinj^s^W>a^3I{V-N+kJOKJMbffUebF+-9P0V9&GRbTTj1gQve|D2L|9Th5x_2
zM*I)8-G7Mg3@sdKto7|Kzo0#_M&jt8ev;(3GZAX}LgQI8sLaGEC0!~T>WgOL6JF`O
z3JK``jsVfafFX!4yx!=pRCSbhfCG@TXKb;0)`gy3pKCfhJ8ReYKIEmhI5U1soj&y0
zMqijeWz5+QmmGP~WB)9Eo7`qJt51(8e`L({*#-}IUU_-hZcb8u&eUcunI7e*!Pl9H
z)&+KzbzYUyk)s=HQfIR?40Wc-RJ0PkZI<_hh#t8tC5wtKSY)Ipn7BJ|Xwo#7aaNgX
z_Ho%3AAOE>QnZw7*@8Oi$TVkoaMGYhlsm4F9JNteheTM}b2|ndxlJ|8OjMY()p~mH
zP@|7beNO)DHJ4SfsFsajolB)Rctv@zl+kdCs7Y5eSTvue=4s-FU>rHjHQro2z#%A+
z>o&J?)R63`k~(*!>N+o`)zI?f(8!)oJMKN-xAL6POlF~FJ5u_>OuVg9@hK4W9Tg6{
zD~eX6Duu}s$wvM-2WGJ#mJ2hJEU}3S=W9gUwL$I__y$`$2V~i9?KY-ot3F&^u%3{w
zX>91pPs^4M)oLdmyl6IBTr@nGKN<0K+rw+F<V;RPc(~LH2R{B4ekxuPXU?dss4GQZ
zu+R>2ac``f&NnZPIOW@?w>rzoBeGl)N6sQw1eR;hBrPOWG?jLDRG7XPI#U<QkRle1
zxNvwk04^2wR;i-3u5i~@=PJ0eBR!tgownoW@CxBvCy-&(MOk?`znLi4=CW74TzR;!
z)Ic41IIdi^=Yv?&d~;RPra2~ltZVpbS=%vr;rY0<ZP;)4{r?iFJTm0W&*#ZG@TjwM
z)`9GyMN<-Cpv)B)01E&U#(<CwbOKm)bC%bcu3|G0Ui9%ZWUidaoN&~*ZVqj(s=Z%G
zD|2yYZqH-OvzSm$J)Z9j!Bd4cRcU9|NM?Ef)#trJRW47TooubSSk>s#BH~YEGt31*
zlN&CZx<X#9ZN6u+Tl(T~$@BRBSY~Hfv9YJA^R}-~uPIaV(GKxejwVqavA=QOxxza1
zaAb8XaycF|VXm3Rz#2Tn7_w7scZRULs=o|ES*e#74wQ0k3$6D2;QrOORG9OUdwW%>
zzBr=Fed#OL``r}SZ?C!pP;zPNw?KjYEFFWL7Z7Kl?Mk8%q6eoAm;1igUCphT-KC>+
zl6P;!F8X)1Bn}mDd$#IM_2{+Hm5UOWha%dP`+8-mFK?{ILxpzp?GL@s_gO@d<d1%5
z=FAqLUkp)8ZN$Q!I`>5%NQ8Fq-ZS1Yjr7N&)6$J?Px!;Rn@&@S{;z8{-;`x51!bsH
zgX)A)r%c%=0|!jmC&}P4O!gKbx$ea5xv&ib#RkC!)Z2E^%^gnhS#2pS&L?f))m+Nr
zGml<&9awv8-nz$us}_=gZuib^S?lq=o7Yuh>)*_Hx~d7S1{w!DuCGUA|La;c$mAKE
zbsN<qZ4b(4k&cqz)Y7Gqy~VMG%Y>}F9Cn8L=df-!MP#RoF=nG+`$sX5R`XoladLIi
zIzldgmpAwgA{GCyZXrWn!20Ywmq!WKd|Qsr3wrV`WSnVnD8fWuCPH*hKdQU~whP?a
zZ_~p;H#6DVUP-wj;Ms9MoWzDH8i5f7zk9*NML`-2lF34mDm_4CcY|rf!ADTldXJ^%
zw9kVrmJ|*cC+mB+{E=FV6H*5&`=GnJogo4+3GL~X+rVf?>9A_Q;4A|@X@jFf#71UE
z)pQEHJ<-lKx*D6LjdT=aw%Ua?{s0*Ye@h8wf;ogl4kjv>4Ct*emF1ej0W_&2MrJ~N
zE?f4(o;i{f00SYGpuc<ItFZlGdB)SDnlk9>{jnDc!wKIWz>DST%&59e!^P;r1?G;9
zwCO=;od`Q8%i05vwO5F?9EaP?G4HS5(kT#gyCwWfH=!>MD-%p_N<R~-x#y{j3ops$
zn|XC}aZU6?h-dy4J%8g$n;lMi;x%}CgyepB+AxP2j0vxl-)RYE3)4JPA_;vyI~mZg
z2#HMzSaNz@-rlaX+g--c2tLEgM5*ic5D?0twab<bW(0in5kvd^IlMT+FTDM_WnOz^
zh`GL;5(o>GeR-C8Fq|xzGy3snQhQ&1s3wImv5<{Uv^twk!ot#=+h`DCRNGS&apuoe
z&;Cm7(B7@rS+(5?6>kw~LKtD!#>~RQ2Y3i&_g`0JKDH<ahB$UT?g0Tr#9qtxKx`*Q
z#k<M0#XhGH!S^Nlvyv%?<LDqmh#2f5=M;pkjCZ(xQh%a_wziUq0Ay!XBPWPI1<SB0
zXU{}No(zKCu$>h!lW}3$1IWWC-!20J*Q}B_hxk}LmYkTe8%e2F6`o3Wd%=)QL+2DL
zR2!Y?R3k|TAHxTLcF>~_hy}Vj?==H0*;#+sC@k?*gJX_}kL^XE0~4<HBiuQWIlMQX
zls3<nKP_G`K-P?w7)uv3(fxSvLXN9|AH-+PH^z>W+cT(j2ND&7nj)L+RIi7au~Zjy
zctiH*-}>_S8>j@4?6{33<8chKkqBaEMTFottYH~ampBLqI~dCJFgy%5)$G`!VW+}m
z)NlzEQap1|e@?D8RC&FAmNr_dZBZ;n<?N??7!mB1oV~Q7aO$p-`ICN0RQzD5MrziK
zU$rt$sE4)fI8aH@FDiQ$vU@L>WNJGTJrFHu4-U)iLBSCp`gH|90@TC2azTD1Bhsr6
z0;1B4RpaXL9$2j<)4e!~2*^X4{JQ?f@V>fS!KQN%qGDL|w`_YFg^{32mt-1D@_^cQ
zl-IFPH*qi%(jA_elU&zrVQ0>RV0IQu@sCk_W?p!yV_kb84jQuIJ73c*uE<lY$IkXu
z+6i~w7Br&w^j_>0w4Mjtyt8}e&Tp8eTMsn?BZe#%pyt;ZFF?gkEq--Z`!U^`yyfRJ
zp!*_DK#fKS*Ofv{Y&<;nU-?Ep0Ga3Pk%T(>9v|OrnKXM>d`<AV4sN?0{{DOrF@iU}
z{5btayFbpBFB3_<ukcsVyPt#rjU>%)`RtLp%#$c-5t$Nv!J;_RdZJVMxdb{{s;w*6
zx+6M!tuP=Qk8n^4;8wzT@OcEjCSjfC6j~tl03!>-RnGYJwMhWuh^_Zf09Q}cw7ID;
z?|ev*z;J*Ntop)rQ5^z!Xs*|MsIU4G=0Bez=?tq%sz5)hMTK8?BRc~D)~5ed=%&w`
zEjmE@8uh!lj!Fcyvxpu4mBMyqG2TxJ6&u-b8VS8iU?+`OHSzq$)dETbG}@#&Z7U#o
z3%2}~IB}JWOq;;3TAWq=gaYLHFnw|^2!oKIAh|-sx#s{M)DS1sAtSDNE>F9lZ6|GZ
zj$=j58n5VMgkk!xtm;1aGfCq+#^WxC$3b}INPG30Or;MnCfeMQ%MlA8WW)mt-rUv=
zgP7bGBTSJ8J(D+W{B@M*36Lae5H0TF;7&7%I`uuJ$ccn{;S?o8a_9x`n!a_$<IOMc
zrUmh_>|&m4;YEQw8E$By0(-_HN)8GyEX9$F%s6+GAvQ1?uJan`(z~R!%Zx7qMmrY=
z0A6%bjqiR?;GYXTS}APYxsY9U>@nbX?@Qo`ygw>j-nY-)xfj0p-NM113-NS|?vU=O
z(;Z0Dd2|z>^3n5Z+kx^q0a-ZONZ{az(4aA%RF$?J6Q{W4j+bOrA_%9%;~l7zRKC74
z??qj5$Y=gy-l#XRS(ErPNN*b4wD!1ea&-9muCMKQxO_JS!Lzv^U-d~|N6?v}EuuYb
zb$mI=TpPRc336NxB^nm#QX6cO(1r}2N^^4nA*Ys2mfy=|{25(VNv@f5EVjv+JULp*
zE!{{F<z<gHyHYgKc}tn}uxXmAt$4H`e#jRa6uXg6Mk3XcX4YL)E-}dfpgD=2!Jox+
zj~AfCJY<*L!|dau3hq_!E=14A`qTHPyQX?QTi0B7hGFutExlFI!3H6Y^jww&*!krB
zXy_6(N!MF7Te%8m^@2)!<T#W*#t8<7Zi(AY8Hg1{`e$|0J7IV}hv|g^me7uiNy%Sl
zn(R3;nd1DHz$W)4Xz+HVDq}lu=p+orQK^Qf>wJuyZJO$!R)CwRAt40Kzf#$;tcNOW
zbm(dZp`dDoSw?S7jqtTVG>KeZ$w4K181U~nM3}n@UDa+VJGo&@sX}Zkpxdx)uwxH1
z3N|KkrIXZF$S8X~)Tf;hbvD%^^l(7W`hfE8a~prLH3ne%*CJr_@z#FJ)N&C??!MFM
zkO1|!c!aNm16DVr#~MdpUKN}n&DTOsaUDg8j1jwxLN=OT9#fo2`^aE^5*zDWOvjr+
z@UA#Wp2@9N4(|$TO-CNkXNxUVRctnN#k$A_1cJjddfnn0VZ35wciV>{>ptI;f5~<L
ze<~dYXH&ffy`bA#`tYe}%{|r$MVyn>%eAKcOc{A4%Fsn&Gr3C%s)hkzTjC=1@>zpw
zJD}KQciEqrO<^2V1GlMk5U?o6ALbc(n7bRzZS(mL!bYVTVnY(?%4ahx(h1z326t{f
zB8Jo2zqSx9R|&#1^kaOVF2CSf)Q2f6`I%(p6qhZ<DV*WlETN(4=a+oC1J+)R{lYL4
z8xW5Gyw@vPY4}S|-Nc#u$^9tqQE|}I?8e8>e`oHz4CYWN9$rxZD6a6J)l!ATUxSSY
zQJyU-dbn!S;pg=>@^@$z5a4tnS<4&EnaL54@BTiGsX=(7WoP2`sqP&K0L=5UgCaQL
zF@9kKP3DK_h(mT#ow~dHa{+4#+^(jE;jB2b{MhbNS)YMmk}oX-G7U>UhLErUxP4#K
zVRCf^bY~b*$k{ecar442oL9%3=TF*sYG_>u(E+sberN2f%o>lu?5=3=*X0)>b_E4I
zPlxA%Et_nSqL_1w*rGG*A-bJrc1P*mfvRtud?3Pzv;bZ5=YTC}egx&ysq6gXfl_2J
z2CK`ws$u#Of~7Z@s;Dq|8bPYO)c&10IlwAy9ZZ$Qtab+BQmn3Av0qsBKbC9>C^o5i
z{iQ-UXF0xl^SRj~z)O}~64YF}=E58F8@?bu{14#io^ZCz&OdiUVmW(Y5!Z~M0F=kL
zQ*!hldT^3uGp5kkoSVuaA1+=0s*lAeV%V@}2*Q~6S6B_Ed}-FTTkft2B-f?1_|Q~g
z`ao2i?mzAbZ6==Pdt+%xbYTtlV)eR!fKAxzz2V7@vsoQ&?0Er-&-8-1DI?*3LVuk8
z8U?&05Rpco;JlH@BA(oZ3QN((ny`ok3a(0#0wtcos!_x@VxIvjQ=tz;k1^j-X29Px
z8OnSi@1~m)gBb)F%!)+wLeEh5T<NDp>4}Wd-OndKFNA7#gH1G1K<K1ubY}7v6n_(l
z5B(^&sbpW<5EaDnjOjpsd_lo9?^>i0<E>QGmMpQMGHD}k34+H-vg)iR!C=_mtt|r^
zL4!v#R}HyNGkL+{b)AIpE~venHS*l-=>of*F{3XX9)(!=Tz)eo&gDVx;xB`E2;o3F
zaD0at6A%&suB?R5qDw{ImXzBCw-Zwh^5Rh>Y2LBniqjiBP}^wfybs@=BuD+Zd)quf
z#D0t85h*3Yz}VnZX$T{C8NlWz<`RSSKU^9<>hzMnaDVdHYA1A#35HT6Xp%IT$G1pV
zRtu3_Ls+of%+P41T-Yt|;BVK8IQCM~g5Ao$y`Q{DP;Bu@IbV=(P-8Nci{cVEWOj{w
zy4Cc#LxY72O_e=ItOmme3fv#<0&x>FGp9A+EXT0{)lUe4uDMG4uw~Qu_BiaB_d8lT
z;~fY!ubM&z<QCoh5&S6AA6LzyY_6?fj!`)ut&DTqYo#pVN(W*-Va?VP_IcX$zH0~6
zdHD0@#G501Zod>h`qr9FQ~s87(d<Gum1fdBT+3mK+J7rDVWw){>kG~7fp*?)rG7=$
ze&FWT^SR(1!_(0N;<FopUGPsjyu)>X5?7t{(7X^3BZ`1px`v@Nvl8mQucnW@F{C<g
z&wiB$oDSHzL8r#yLIAf2Mr(Z3?P9}3A*jRMEtr=dgKvoQ&SN(r@dc~{Z0RcJk1t5W
zfJq>&Jov(2zZfjh`^ayWhSg-iDVj#y6ifRQb-5w`bxa$lPQP%-q&|!pxGAS33!V#O
zEYWKPZ(F<+{kqTM+DSopX?XS32pzL<f&1)r?pTu`)SbYcQB``xfS6ZJ|5MB1jP-4A
zvlj-HBqCtRiG%l^1WkC6{Vo_{L?}c04eD&7C1}DxJF*?7LNvc4j9o~^(_gDz-jCl;
z^(zWRVReqy@|CYYQc-UEz`QqpWcMau(mpW-N{x$B0es$ENEMc`jsl&9w|LSmzY!`M
zZP4)7qfy&@Os}sJ4l3G(J;))@Vao^K@~It2Q&-MlU&t*^hW~QV9X^2)1l!t7yD)>Y
z^gnn>m)fFxnQzNcRHh6fYk(PV&jE6FvRPzikpVE><ry6YxtXcP5F<4^D7i;x1{>VL
zjvbwl@d1x|%<pH8#$9*|1e@Ad=+}*<j!k?Yvx>JAyKD^&>WH)6F2EQT0GF#jQ=q(D
z2_?X^d$R%OrWiut`h~r2Xt$h9Uf4b_OF7w{?%yXh+dMzl7biR1z7IqN|1PWwJsu;8
zSv{ZbpBxt|A7p&lOGJy?2R1i~j->6_;GjQDhZyLqsbXq_X2+lT(y_s`X7K_)b?8C}
zu>aw<npg9slOFiWHw&fZ%v>^0t~zWtGKVro<}@l401^64$Am=$zFN0o1TIFj!5IkE
z)^*Y)nhipY)!hIOR&jJwdoUoeAujGBj&A6UyUsJzR){mZ13Dd}Asiq$AU0D93-D_Z
zC|Nxm%v8yqkucT0PEl=b*t7Fgk<<bZUAha0+t_sA$-@mz-r1(6e+g_r<VQ8!cj7k$
z5sRPIfU1fNHFevkacfs`)L@Ft$L%q+U*mbc4WdVN8DB>2kHff!5BnL3zlfv&SJgao
z{j&r;DPLO=D^A(Q@6+!GhE;{6h2Fxw4lfP+DbPHSQ;FRoe>U{1F}59jQnAi{%VoBs
z&iR_n{Kyv`M^5^G07yW$zxSS=7%-N<QZF7=2Q28$3HGJ~k1mRVzMHOwZ|O<29V8ZV
z8Bpfb*X^>L{+Z-$!ZW@#Up*;|zU#Hr1)Xb=kvO{<d|l7m1&;Q)_s#>vwWJzDlK8_(
zKQ$%RY!a3BhxG6glNb7mOh;h9u%lsnS|2ZZDQPCL)w2-)tGZnD$X`H^z}(?R%q10R
zfr8{71=F#6Dlge6@D*_p(-ArqAwq@z1#c_IMY4Ql$A5=?hwlVvM-kn1Q_jwJASMc1
zOkC!in=y<fGb5r2=_<_2i}WLpgnwx;`Gru+fNPMsi^tQdobv?(N5=Yzk}`?aZQ&Lx
zKu0?$j;e79v0-Wu*`1s&+=rr^x`mls`A7vE%Yb(RkQt&B6w_ub0c(Q3U%xf6GbQc}
zw<kXYi0orEI{BVujjsZ7dJE?(_i7feGVc+Kklxbn>_^N8eFgTz`qW0ZD&HYYh_%U2
zpw-N9l|+OM2OgEiG{$h`>%I2K;cN{wH8x!-qJDSc2SRt<Xs~xW2Adh!IygB^9^Z%U
zGgO(A2AKsgJvbC-p%X+f^9twzZm|D0Yi3n&E*nqX&*#Su?O&5-#sMOZYEX!F2xu!6
zJ}#)t@$jhzhKl+Dbhup!DqUc7SLvWCQi5Uu#KhBjGI5NFp!i#Uw82WaZ`W`Mj5f*o
z&_-MouOnnQ*LYVwi(^2-wng4?=xKCa&aPI<z0D16QICV}hb<v()31n<A%%kYQWMao
zoq+2+XwFLF?}cde9D_e34TldQ2qC^0NPn2=otkouH_(fT!gGs}WQXwzBJph)$NE8R
z>+>(}g!)7%qp*xQv94*2io0!!$BRqPa=5>BS<RGLgSBlD-2rc2o`-#p%i&!j)&VCZ
zFpk1;Eoh<QM##+Ria|tc9kOs?1v%L;qxhu|%MMyEZ$#~gbXV*zmNmuDsj%@9w$3U<
zBVKk6lY4Pj{cCoR>aKxN6S`_tGf)XoM?keYCe$v^;h?wAd}zm9t>2D`sp+29)olEt
z#<*722|Iu2stbvcn3l(_*EY573}#}Sllte%Mj6oG6VHe;gJOBxd4rwPdiEaqi`IWP
z6d8C3FS1kYh<<4@sB$vlDG{v5(nrL15DgM9f^c+)b^8iqGk%2|Kk4mI$jF_3Wa;Q|
ze|S;OXT87u=FPk&+9uKbu+5Gbq(j7{X1Sn}uL)W~0U!%PugOs20eUwLh^hqPRI7Qm
z9aK0g-@6MQg#~a;qp_Q)u-pcb83fJrZ@<a;lMy3{)TWoEXnw(nKmo6jtydUcH{SYw
zCdf%A#S>MF!i7xeA3-opWw${;!w)M`$v1K@e$b9jo2GS7N#H4fhZ+>_(c<3h6s#kX
zyMwebe44{2aJ#ySU|!Y};jS-1Lh$^VylTA>hU|t^7<4^tUB`WE+j|wDUu}YZwF&xF
z41FG;&o@DzZ-PFLp(9c}QLhjG!Bz`{sQn;hr+U8409JYc3o?Ll+pazY7$4Tcz~+|`
z4B9+;8U-Z6-(NR#2jDWQd$p$SRaAGrrfxijdQIIrs{3J0-49ZikDopgIj?IDpXRE_
z&C?!)bA1?rB1WVePUsD520;Dw;i@D)1PWuGKeLvj#WiW&6eDNn%&pdpi-kN~@o@hp
zvCCe9b`pCt`jYL)lqdvf!yZ1=n;pVOs9g=QB2-PQ*fe`-Vr%lt?FO+gCzV_J=IUlw
zf3UMf&11MbGG<|_;sD`AcL=~Tyg|oRbQWJf+f5GyR;ShYeLTVS7l*AEE;l?PDEKrV
zv==Ki6RtQ+-d`Q}?iJ5xMKhlOKhU`Pb2ejVZ!K);xSkrW`+NBKM`H|cgWdy<VR5=_
zi?%*nPI1QGt)`srLS$x%zcnZ>z{HYxnzP2SdK68m<$m1zzCNzU;+O<>m5y&cox7Sp
z2e24H5+Z2K$|<4-jdAS8J^^!ptD)x0ym=8KN8(ko9<`!Z#Wsq1K?<@of)P+_;c@yl
z{A!G|>`&pYsxh!_r{(#11s3S174cn;6P$D0OjyQK*&!H)4?m>hU*^t02K~9?XSE{@
z^9dTcvc!zQlZmUtd}H#l#rkz0o4|&1PwHtBxn$rN96Qb8n!5e!(oG3<hRL={7(hMY
z+<aG2xQomKDcXHLH}R1-Pl9dfR{UgTs*t`Y()X8|D=uH49q9IuZ`8{XtD|K-oxGfr
z0M5?=iS~EZg?zXXE#8)#dClBY7A}WJ?WUzcjix+MSd!;oav;K4Vx)2owqbler<2$I
z#b>De?Oug`Jd<jHmf|=Ucp;I}j^0So#S)A&glOXzwX4y(7#l34su=T(jnC0M8Ew)R
z7z}gMnNwqkMi9G)V94HGI2THu=H`ZUX(K6egxyWqk^8f{ZN=Bqfdn^EaS=tT(x}}8
zvw3L4cTWg634k$yMoWtf4iYwCA&j#dh4p5+VbT0quQ3phH2Ny*%5nZKPMfJ$g+wBE
z*&}xYE7ZF4FhVZPk!afh82Z4Fz-XIpCZEW&A>UT>6E_{$t6h*KO=}KCEs|rN+U~Ua
zP)+@_zLSShB9`d+j0NWX%<>pR8rpGlUi}vtjd5xg9>HrV=>?HuKW(cTde0SX%I!3<
z8HDawl%AJGGCY#?e@|`-^B#3K@H9*mhf#p6AdNI4ApX3Sw6*ggA_8PKwa%7}LCUCh
z2vMoWA^fp0+NtZr+GIc+BAIopcqZ21L2NJtCymj^db1Bj@ln%33Ve{Ypq(bfIv_zQ
z(?szIevDftPmj0MSlu7z^Xh|#^@t$p({w;3D#ACL8M>=MtZ~u{H|%F(x}WeXiX$k@
zC}XmnYZ1Gv60;ikNgDp4<!wA594r397JyT%3npgA?0;Z-0#|DI;%)m1obUFXt%vw(
zUZ0^o*0w<7z-e{+U9)&TdkHU?r_C8?^(SwdSA-kn?C<uQ?RC5{Holq=fdKtN`4@;)
z{Ht$+fheOP9F(;hiqYesF7DDCFc8Rco-ro!w+SLmE(<~D<PtaRBAl)`{CgD9pU;gO
z(pq2W2%pXIGx4dmyXWi;m%prDK^<Wrj@>{RH~3QSaQj8>WY;sD@H4835J?Tk6{(Y9
z@zrGs5oU{n`-9I1|8}^J{JNI(ZynTld14G6$ewi}>jd}S#RW*5kYy5lG|=j7m;O<X
zha}a8YrB-1>|c)H06i;5(^;@nPb8WOPj6IQlTdMQ1jf`?^7s8!xagY&hQNp~k}c0?
zbi=GMP~T)CxXDP+2ZSq+9C--<(8>%xMIsaO5D*ci$Tc4dU>oN`=u<FNH{{2dsf%?>
z6x1RZt22?v8yT`G5DZD^M08t3_UdA>emF8yf@q?&0CexuvXDXVp_qTEBmlusQMV%d
zc+)0M3Sa{RC?lIqrx^eERnM+Fyblfs2XKJ@H=kfSyIY;wEqH?H#99}}?1{bk=@{6Y
zJ)iQ7uz9XR+)c;Ft>2}_d4O=RmpdbFjjxiL_dor~Ak6tykA}mV`+zjRUkw0*9>CxC
z_g4RVj!E%$yllbF*j*O%^eU%YUVZ~<>uSv1ZwN=(G^1kYsGRStHXpKWnBkkBvg^y>
zhP89K<Lav4S39c^4az()|5qN-IAQ>v#6ck|)ZgOlc7V8wLEQdOXA#74BY4<Z<=c^4
zAlOOyM?<3K+}zQ#U}v*sZ}FCF*Ohj_Wse^m^q?T4%};GjA+A31n)iI5^~DfjrpKcj
z7*-nJPuIwr|LQKSjjQ$t49<XE4$8sgz!70st2OBW(`Bc()b}82{CeJ;F<Q;x_n?S2
z!ithLP5ASs#RSq|SNzY$eYtpCd{=%~jC5hTUEVtb-qqc!85=KqXRJ1sgAYAe`eWa^
z>psk^x*Fgh#eL%yBc~h|lj2r{jF|po6hw=^W5|jS^ISff%3B}dZ|m8&4hrw4m=fPY
z^AcoJi7~uCFY=-{4}9@JjjaOgn~iRSx2dO<SFw2O1V7T8%|iA7D^u&l&N`5h$ZiNV
zE)UUBwA&?fKu(-pj-D%f0V61!$hYi$DnCo~b+ewPVaCxV8wnV__r_bul-|>^mSxM{
zrt%@Rs?iA!{hA}?snH$pGoK!LbcK`|7LPQ1U*Pcji>xbr%qXm34Ny3Qv)wXS0B-Zm
z37!d2kP)VZ{G6o3YWWbLJ;J1!?JT@i!WguTZnNeXiyyUXFenHf;~%pDunukzlD#V8
z7LNr+!Vy;K+<`U?LV7sx$6(7=%$nIQtl7D+zO3TI@#IF~cLGo6nlPH(8<G#F80C-r
zh;3QFP>iq$DKhYSGM&B()V$4FJXxV~hN;TmQU`}Qp4d7>X1HNX`Z`fR;$7;)%<UJ2
zwur*t1h$02rbK}pvrDM1$n@$F>ot0@{lZ4}t4%jkc`0#(dTV1CZFkY3i0;XZ_A}yE
zx4-4Qbz;{=^}$qFC+QRAp5fLlU*|UjWoskp{c*9g<K8@x`0?w8=%r9yCEj#o*F7$G
zEYm51I05%zJ-81ExF|Hm*7>C~Jo^?F_Np;l72bK#+SQMzH74s&QJ{huuhEi1&4G!v
zrA%N4+Qv2LVGT<5`&-&_!jKcLT2^5Ngt=;`^=z@rmhQWdNy$;;-Q^5CjCMb`4WK?K
zxo`B`K_49NkF)=YpF-@q<n5Qm@Gpw?TskTnT!G-fPuv$<MUtN!B(JD2Naf!G8KLZK
z*r_FUbD_K`G|Ujw8No(2jIPNO9EF%?yqvuW$z239I;v$ON_*oP7M69GNKsm5w><+~
zsl19Y<#0%<fux>R>26;CXSND5b@904VAbM>M*e|Yaz?r#@1bMaI~K`CuEuh@M8qw6
zjgD42v1^sPc=C)OcPAI5T_P%k$X|KztBx#>BttAQ&@w6pD{*OU7gvsW>ZrqDL)4x&
z%jpDso5eeDUY&zg&}^Yyn;AZv`Ven;%=V=q)dEKGyc*ZXwcKNg9F!{Vigi>fFqM0@
zIH1WNLK-EoYj8cCHja+P_p=B}X=d~*vNea29t#wr97If0$eWfC#a%7*7lv;Vl5H=!
z+D8L3?!sBok+*~bV{xp(QnqKt?ogu2B8^o^2crg2Z5jxW9hNKIjKL5i9kV)F3DtH+
zitJdYW0BziAF=5Q{rV!mP-#Tum_}?A%?VW?=RP@{-rw(+U&6`lC8ZBDff5pHrX*%U
zKkj(A6}J?syQ3W$sdvoCduz#WA8-MlGdlK8M5e+7t^1={j@UCY8z;khi>O6W&LZgy
z1Mcu&Tg^;`N(j(1QMs{!zo_rrQJDxsIUjNOCrS#cFm@wXbO7xS*PW@&M>{KR=4Mg-
z4(sG$J=t*BGeq}O%qT~DB4TlqS>>i=;_z(6pyxZO0_=g%_Ygaz$UUVz3Wc}{d=FTT
z4yaE=i^N7Ttw@?EH5$hb?d-zSMWLdq4`c)XIFRNM<LP~$JKdsz(V;8JQXI@uLGc=r
z@Lh382on#2BcdlsvOn5}mG>-X$~w?%7N=Knv%5s8guk&5-u?DkHCTNEtiroNv4cFr
zj)CUB?i{+C^&tNC$*gDXcxRBat1C;G=X%v(yd|A`WeGiYyp=ngAL<F%BLi<I0@4Ah
zf6)PE3J%B3Y<dM-4H7yZRR^+eH$i$wq}>4#=w4AQS1kZ&77Sz<Z8~2NWGxt9kU35w
zFH+)#<?{=f%_NY3w<X4<8%Uo6zxCGhgXKQiG*9pN>pM8|;46hZFL0{F8;e!*xSRq1
z%P~)ms>MZB&5AR(M>SXm_@|oA;>72zZWY@+S&p?OzRmB!9uJcxwhPHttX@qf0&gkm
zLM5Sb{r-jhIQ-a;u8McC&JN!%PHVS|JQ>f%;`Wkye@Na^L^ojI3NR)e`@pXA(pE6S
zr=)V&<_W1z6wqGO3)eR<odS!_Sm=QUFuf~65!1PFM2_cG^>furh?3++5u((UaVi$<
zZGDNTBp!^%m`%LqgO+<cY!Fx6=C*j}F=O|)*I@t{5OnM7VlB1D@0O&iTof7t5_KQ8
z*Sj&^$yj@Dc`0nZ7W^*cFNUxp{T#@Tq}fGrTSte8@~L5FZ%>m+#v~^4T6Y<VyU~*^
zFv;#R6$#hMqp8`V4JR&zzPeE=H%VUz1jnt+!e;@oIYJ^TE5vofTlKY$HPef;qUcm9
znX4cdG|cd-Hj+)qb{j{y>C8gX?{8ic@O+z}vF(;h=cptw^=v#{PD11mi87aFX38xS
zx7H61iRqP3MpN8LCZ0wb<A;kYQ-}I(K!#@=?Ic+Mj-k~|n&QL1K}r+2&?)+q-A<0Q
zg06bi<+y5F&)~Ew<kZ^)4Ok|b5m=ypkR69M2vIbUnAQAHH_LW<^*Ta>400rVdQv|b
zy&q#7fJ5(Mc>iwRTMX-Ix&}(!F^ztzs)!a>|C0AvGG>v)MYZj4SDO!qPX|<bl7KOL
zkT?ePm(*xF;TUij<vG-u*N{zdvw@IUfJwYbk?QDv3{sKuF@G`?ow4M>LyyyCr7{}x
zVov!G>__xT>%eYGE6eH9GTBB4Bn*a}qvvkfW)N7)y(P-y;|lq<EH}Jqowq=!Ork6_
z1~6z0(V@0j{;pLFVMgsrMgvMy$!;I5q7_MVj8Zhqh<S{Z6Y`YpNV@B(M@E#rA9?n6
z<BxBW;E{eY{RIxwNk|FCBXp=!&xE&8aVaD}WiEfMel6j%<D#V0e9g?glJIHnDu=T^
zoubLc@|?~+0)z{rnb#*Zgs+IwlSu#vH!(`po4lwbt1pB{^=hCzE%w(q8ugrqt0zj<
zOt%yY7^3~QIZo;{C}B5_$a9NhJDUz&qhGDJ;N`oetPSSQ?6VqFboFi!*pmP_oOBy~
zc-{EbG0v{o4bSU8*+jI<_39?_&$Z6{sTwB^ZIe};XD6%!13bY*n<Ua`Ii>>!Hkdcd
zlT&uvpx`3ayj9vy>I#w(oHi3sXrA21|2{YbiHVIb5-lY+I_!l;xu|wYcoHLyTb^-%
z&Pe~hAJuvm;+W)Wh-Tkgz;cs;^k9Wl*1>^D;>%|*N5yj=G!Tf+nWJ)WOHUoCY{~A%
z=TU@_#1z&2A7mr<fvPVmyudLAA#MrKaZ0w!3CnTHI?Z`5h}hmCDWZN4Z^Zk1`&(BZ
zUfBl0b-B0KWjcWA+IhVn`PGXLkt6nw)$w@F)dqg2b_@S07tkW|=ayDqboNKIPWNYa
zm->5F-X^eBG!<=Ekq(}n<8K*PMw`Icqdp6f1;j!lXDlKba%586xtrUB@a}_{uiSlT
zz$jY>RVf%;x&gSqc6Y7y#e7a~F8GJ5jS!PKM`D5u!}1A~y6sS~D{ER2QXH8uKpioF
zI)WZ(!x<P!E;xy%OPN>`hDLPKZu3U-c#}F%4GI%PE*EChxAu3D1#lY^uWguyEVkb=
za9z6ml6Dh%ip}|l?fJAGr|TXpg}UO;6q(!s+((ybsXuJpy{;h<LC^s=7~FE%{MgC#
z?XAbjkfCw6K|t3P3`g&z-M_`H%VHr4LWNub4Matx92CRh5a1u0rFh%SfRMg|+DV)o
zx@BFXW#+OD6Ym}DM09m$keaG!I}@QUygB(HHRo}(M(NC=_0C|eO$*SyL2*CZ$7@Pd
zvSlxOonSKfrg0}`KsNNF;T&cK*p6^M?bsbR-3RK_O3lvRla1rvrQu<Yp7FeYn6>K`
zFaf<cNQN8M)8v9q^8@(o#*l27Q$5F(qAbZcQe=jInALw@V#;Tq1^T<?boz4s13U&$
zQ@c3_G;nY}6ZGFUCtTJ^d7ezCXdA4(15EZY%G`k_(}c&v-yW6oIHj1%KBm*jb!R7w
zUFKTLmfJK_-gQ9tlW`!>`Q(cta(e@f)3{vpGz>7KRM}QK-6bMiPnH8bkJNsO_8A;h
zdOdeR98pYacLa|5X|C1;oTRIf%-9gOW=UG=s`%S)_)YM)-+&|pWN&T#GfG>|${O9k
z3kRbus=qH$SO=vO&;p~CX9e*b;Q;^-+-Z3}r0m(@x`E3^<<-QVzpZDlv8&e*RX)wd
z*x^eMDfc_kEy{ld`%a#OyfRTfGVf{v0SeIo;DhRpSQ<CtC$ou(VWjDvYlzl7pFjA+
zzyAS*JO0ZqeEOq(ls!M0H4s~Gz61;c#Y=tZF3)v(B#gPq7B?`!zJ-Y0?Q$F;jNt|E
zHtc5N*+=V4iEfnmt2}CZ3IGbHTxo=)Ax04eDOz<WAZB!3?~y|*6wdZ5SOf1|!P#eP
zPnF|susI5Na5mFIW@OacqISI2Er<8Uwe8j0jY{$s*0atNSkBx5tS1#7KR||)W`5<)
z8)il#?VQ`5X6h=#DTIq>{C)<ytHz<K!-`-V>}CsI!2|5TanE$T+cU7)L50tvn!9B!
zdTmu@4`QE$^L(aT?2k|NIoMR7GytKa^%{rs1o1sd5+vPAo1+&!cg5CIkR8-OAJK-T
z9nb6Y1@QeM41L_+ihg`uFP`#Ry_uKw!i%8iOU&!&wG9*$Qt<_Jro$?R1k-NJZ{%}G
zRp`d<pn|~H<VRPRYR>};XA%kMLmCY_F@NT}kv)D@&Bt!_$`fxZ3Z2;TM0G5OEn;+w
z6=-+k5Pu9}KaWqK`Gk7s9$<?i9HtOM5AnNZQT1Mb*&o41jZt4*P9_DXJi!w+ucjqR
zxoyXk)<-YmsMz`a-v6`HSAj+$#-&3q7*}ED2LY7E6<JM@qh6q25@}gYQI5pWEO)5#
zncDbhdGB{;lOLZhXYWS@?Vf@#P!I+_q2e5J&Ep0W^=5-=M?`xJ;X&Udp3R^AaQXV(
z!c%xMZH`DcHlLID6AxAEXayK!;lI6EQ=F9NxIhRx>~FB8a@%~rKd>Z4l(o1e$BtQP
zF5n915!8-$ljM&)v>f2*Xrt<6QXd~zbJD6z7N@Kt<(M}l9t1)H6yO}<(QbFLr`6?0
z9c|hSfB5L9y3U!dn?3W#ov#u0CvdmuV^a|WR~92lK1FS2WT_}#2UK4@$zm9HBN#kv
z+BtRpvxGt@kiY0n8hdxf$YYs8hq}chWJUq*63DE<0vtKU@P*4nN8_y*I}SIdEh*fl
zC4)qzoFu*>CJo>Z69xee0j*02RYCg!BEen$n*@U+8pkd+w26m~BPe>Jeo%IvIOyDD
zJ<8*RdC0tXIOMyUiPFQc-gq)S{@1fp&}x7H-8JCOemIRfRWK1M&vo(4iR+3R-Ht$w
z@)wAvTlsX@D9HMH+LVhg%X!bWnqN^QB9&=4&X_)5NC*TIyAB&uATOO1xSCDYRKFir
zkNDNl-M~XK)ou8X?&@%8k5J-<8%o@n|NIrotQ`b(+WdY2SM2CQ_+4IxOJBn*#fc<9
ztWBm&u<c#IBj6p?cvti&!U0(AfeM>K44_iF57yW^^wxkOEF@AlU;+^EcHu}Sq!4u%
z^+h?KNKQ`Ur0fPmeeQ>(okNM)^)Q~zK+nV8erk!?;9xcx`Nbai6z?Hx`x?w6wtp?!
z>2SPQF|7So$eUrJa*LDVW@xO=BnRorOa({ya_-}FZi+>=!GnH-|NM5bH@A<x8F}L$
z9H#GNT3B3~_z}p{ljoLo&dtBH5RQ*Z=5329RGCkHh&xr=o!TbqW}qq()`cX-n~^Tv
zav!|HZhGB%%%f8j<v6C3g;9;+uc0RtNh;V-0f>evPI?6>VE;u=6d86oUbt7+mu0Kv
zZFpe-w7u9evlR&GWP5xL>h>E)hJJ>CfYV;zUF7%OmA!kv@9rw80+jmEL)CYvl@1#d
z+q{}L=WS1!meIHX%i#4nhX^c;N{*fk9Hl#VEG(uk-w!;Hv>u-N5vmCy7-026J>Uo&
z{Z?Nt_Z3M4|E+0t>>Y7Qf4MUUlDd<j9^HL>p}$<keb7XrUfdLS!X}Wa4#5YZGrHvO
zxcbu6Cv@LI*ts!sBUP@Od02Yqul36N?ND2glJK@#e2E+Tn&Ra2w2h->*{vNB?07Z7
zfKi@r(SQ_5npY+ZE((&NX}AQ`CTJM&81P}rGD)k!ss@MfFj9lB0eJ0}V}!LKTb#oW
z`9UirzW|%)?^S329OG)^qQkwNKRo-HiR_%!lgYH&@foIbvmzHA+PUw`Nxf`sn0$ap
zG2Di40g=E5ypQ1PC@CcG;lhW5P<9XkfzfUw5OvN|wW8a}1Ej-Wxyn7NYH5WWo5MKd
ze>z5+HBG^Vs#`$ah;bS2K*0w|et;b4b$sx7;O#|uu3E~iCZ#Y~cWrPD2e`~}Jo(xI
zo+boPmL7E&1u&-W(z);c|AD>jpoCZoc=>*K;I4u2=>dGY&!1ArGNuoD=`DDA^)fkg
z(Buut-+`XFuRv1Ww;Y*zK0AhtXiv_7B{5{`y4FQ27W;AcYNt&#eEFN-=+nDgG#m!#
zu}GfWcUY0V;pd;bvF%am$hMXNXH$tg{z9n<E6BGsS(9L#Q)grHON^hpf9u5KG}hEf
zd_;DUgHUb?vDbk&@=4?wZWV@q4DSnD@E=@oGH;gdL@_}XV8Jkd6i5TPMCvaEY98H4
zsAxw;r41W8Dh@EJ@6Hwc2d;1U7iC)T$7zMv|6$G+V|BAN1!4NUo>Xd4Det5j@>?W|
zZ*!B771Yycj*s1*_|=imC$5{3jVGsT=8{bK)^G8RnH>RG=agm{k1F>-eX{ufs(BL)
zB3&nIk@Auj1D>rRs{~39CEW|jgfA*Dem<)&(MySI-{YWr2o77qGvpX}aTHU2>P!my
z6|nsqFK>^dW=~eE|Ja$|AR7IzG;4O#yZy8gOLs{Md7CA;MXc~Ga%g;1tnfP2RWDtg
zc3LWoJlr%x2LbqSD*$QU$IQduZQXv(5b|cv{sQ16&;In`pMUz-Ya@y~$OFHceI)_t
zlmX;Hd{7{=(t(eTN`CuL((a5@^V^326>SJh{Uk6nebC<7UV0IN5hqq?v@F&n!5_sD
z#ftz7at@XX@_5i5LPQBS40j`<tL|0t4kz`_^ZFZtK(n|+*(z*~1ubpL%MCWwpFTL}
z-hW46&TWX+R>7pUK^Pk)K9!4w7-c&LJE(EN%@BG4>{j>+$l|^o?u0;PH;%`-A4P45
z1Bc!?UZ@Qfnu+uYkz?y}3U*D_S}+$z$3G?Yk=77m6Zy3pZW4*6W~m{is4>?5sIa5n
z;@aCJqw(WeWSW`@B^9-YE4#x?+yob|D8^R^pG3Ck5z3Rs*d$fFX8h0QQbd{ELxou&
z#6*jqD0Nj3G=}O{Kx$*5gPv1|UH=|FM3pu;HS6Zxe(8Bj$L=_p*0ga08Hi(Gd<aT*
z+z)i<*CsL9(72C_>mv-UeOi_7aRPs@B>14)s_7V0l{;#Irw>=ZP5Z8W-)TeiQ<R2m
zF_6UX;PcV5sSsce*Q>r6@_wAyP(|7?Nm2q<=$Db3-$<4UrNXK(6}*j#J2W(0Oiws1
znI-4@5E#;m=92Fu9n-m3E=L-LAN%3KmVhvVf5JPwn%f*Mrk$-=j0_;vjvmh)jZrNz
z3fj~U>bo8^KE)##`9^9At<O&%p6MZ8q&{Ib!)B241lQ;!e8r}KnFD-+fHiO~-lvWM
zp<dvzLw05;u4@5o<LDH(k-+P=-C{A{mW(z?D7N42Gt}b|4lv_F9O_`JsIq8YLdVkE
zaG)Hh^_FaCb&UZBh8+<J55PhM%(32t=(20`XC3%Zm%0_7D&|^o4U$A!6zK5aaD}bF
z9~J7;aen@6P3mT(>E!tXqop_K^9-lQT-<6Cw+9z5cuN{ZaNcS@WOSCj93IzGcba>2
z`#+*vT$!_rf`&zMnUo=v7@Inl+BToNs@$d_ui2#ZRcHPHYh2IwQ&_Z2NP4k2v7jl%
zZ1`Z9yol+7><n<Z!KFc_>e@Lmx;l+h803)X(R=n$?iKs+p&n#%%OaC;?gz}5s?z@_
z*Hmhp`T<m;bU&Bh;V(n(Bs|eP4RF1(EQMkW9c~MrMX5zXu-HVkEvraNxG}`GdPoXp
z6~!-##Z?u;|NP>{>Uwqmg7u;N?Z=^Cry#iIHtt&Ff9Ws(w~ku}@u5{&RA1E$v(DDE
zkbSx(Kpu&A2Kz-Pggn|_9{0k$NprS)9|P<DZ9)HQV3=jsZvtIrcYu3Cp@`}#AM-rq
z&O(qtxD2qa#3IVbm^*w-rmko1U5!M4UXh!+_~npaeDR_JbHsK5u{*-!2+U{S`T4vH
zK`3#u7YOaVX$eq06Oe4b>OdViQr)2cMX-N9T`bPq(Y<>o_2P7S<jBq0J#;zzslE3U
zT@T$Kb=xkh_TImL{_lTOVZnF_lkn1dX~XJw1Qn#p`x`IEisI#b&|x5Nabb4fM`%{K
zE_GeFxKx-4s;|8##f=VJbsViCu$>U0N-x*mm3<9{tw{BrPuvR~sSMS(Hzg@lY-~XK
z7KOiZ?HQb{EcaF|J=hRbI>IW!?aRIS9t5wCcmxOT*I^L9>i*nQoV*EhOBBzCAOvx!
z3Ot73pv`mrXzO06{e+wgTO=_tGI1AlssIP&AW9t)WhClYLM4Hg807f<`7_53%a<$q
zGDs#TeZ(65Rp-XQNc;QS@tDlu9dpWo6L+d+eqla>{nW8@wqZkkv}}l9Ck<$X644I$
z3DGllGp`AIDs|r2DQ`gr5Ma+n0fNDFGpe4mi^+rq(#5iIEcPDG*zgcab{O4_P*){0
z*uB3`IlZv7kX3LurlZq7_Ao_5;RF;B6;==I-TP_3!L&bg8sf%p6`UhTg6!%wDwJT8
ziTL+PGBJ4pN>0bKF40yj)$7*m@EaU2z3>jP9)5|C$uP%}ip2`+f{ziIjb)s-tP#0s
z0^XUOZm69C<6y@u(;KKO9?YS6_;2wi&ehjI!)PgYKWu3*<R3-HhVRQz6CemA|J9pF
z;8O6ffnrImrxw|xU^r>mWXNvEZCG(CiWKxFFiS^fo!Cuk&OuIYk>A1ETv*_3Hlo!O
zuU_#S8c*HEQ1rLpYyx>{)^RVLLd4vQIwu_-6cV9>nVFFZfffR>j!2eCQcU(Ta2VqH
zeSt?KFJ@K-vJXScG@;Wc*2kbGj?@jQN~SZ{Y%B_uT4Kezr@k>seCU@?ve2khu(HCU
zjSR6+Mn1=%z(Xk_`nj0cHQWu{3zU1$u-P~&Pn<Q#A`I|DE^{WpmPN{B42;aSQ=ryt
zd$+Rz9mTd7&*5DHMiA)V;gOzKL_fA@3~0NJuV}E>=DEX1{B62V9(HE4)KiWX0v$_|
zaq+ohB?}&Z`xrRWBiUnx*&~yGd|G8RE%s6f9oncxHYW^-T>tDjFg_M)-YCu9&`EKZ
z_pd8{jriBX#_;2D0B=(gX-8ebwBjXXXD_U=D>cHDyabyh*IyX=p)s4lY&Q4*%s|*r
zu?QHN#6KV?D~jER;#&5gOFA9yw(R;otH$8W+S`j|S#syCZFN6xmGc0jtJ4Eanq<7d
zI-4*u`r5uH(o=zrz@RYJ1!}t;0vQ4&xm=k5>N62%zNNh7Bwijj&3sbN(6^Q&i~`NX
zSh#9Cm4?Em@YYn?W<-x(AbRDof?Ih~al)kfKr%bZVYc1b=3v&ekPo|$oI<-q?RZ*F
zkN-4BJJsNh0tQ||E$<!xe*q;>4xT|*+L(tP=Ds;ayGg;Si`~OxrlAfr3iuzS{~8fq
z-1W!j#u-36wV2BHIVb4we$H*e=0}lzbI%DS+4j<U{$!cx^72c|bVpJEX&qG@6whbJ
zAhEkL`P)djD5uAYI-Z(bmR4+}tdeNbqKJqwDlpW5Q!>fNS>~E~!%^@_ws8aEwC1^R
z5hUI?o>rGT;haAH7?*a3CVn;g0p{o<0$>=B(d0^!#XQ_rh?5$Z1aVGU#)6$ppOpSR
z-fq`K-u4lml`J9JEbHoL_5LQ;TO{Ss5#$oR6YEVCE|H92qy!Z1{D(R1TM7Z^6m8Ii
z_h6GW^yrpw6)aDQ3L%cfe#8ufAU^Sdvta3$QQ2nLoUhYYAVpwx@TyBkYSSkgydIMo
zw%a}Qah5vycB+rwI7<~+C8L)133*bwPOml|@~$V?hPwOmyJ>l384;`u46)DUBi=@K
zvoT3F#Mo^+<E^rs1}oVZhCcL}mG5**a6Hp(Bs9iT`i{hQ09FV41iOSx3SD1@%i=RK
z=fhj#3V!+!d6tl5LfY}aLxd)g?ecy&%Om#|xV<Y5Hvez%#=*cBJO2n58ni?Ci#X8C
z(Z1;)=0J0~#&IQecDdT7c4ol0GxO{;^31S_c<R_W1hc$}j|`FFPwm_iNuFqwHvzPt
zi?m1thMz26YHVx|#me?j#h}<^Uj>vI)0htlxo&KWA1yBa@kzaAx|eecAh%sgz6HpE
z0{tq4-BA7&x%H0NEHqVla5%W}KJ-6!BgiZ0*Kpp+ZN)ZF{u%ZHvsy!xmO1=&m;U@m
z?9Pq695Trtx>7q}L{5~{?B&)s3Tn*3+}*10?rI(-lJ%f_2YVBt`Dbs_0#T%<{IUS>
zM<jHWXg>d7&kY~aC05OI!7snW=5yDVEEc@_B)%T7x|eHxBZg56a6G$O-{LB=kk6?u
z*1Bv+U>A~VxkcF7u}&H80`Gxa$7S#+xxz;kSmDy|Ir@^oQ){Qcli}aHJtL5b+A4Pm
zWsoXfVS{eR2?B^-6ZGfSE)&x7Q#nl}enRX0iawFoLgf8uT_02DM(f%5NxU8~0Nz7h
zeeH=D9hf_`jw-oRmw$xy6IjI_3?c~+)edm(hu)#$aZz{6)`!1GJNFJrt6V8h#Q({d
zlxDjA5O<yRf&nGn`W`<#u^v~(mL3ErsD1=1R9XOSmg?p5|6nV9iUqjNMnClFlV|j;
zUwt|jzHW`$O?%o0s2S^d9MUap=VODQwI)UY?r_~Dwr15-uD}isYu(La0<;q=wq0ME
zv_6OQ!mYf7iVHCH<W$8yu+UnZy480t{GY2?-z1X5Y|m&=Adjex`Mv#M)1<7DD*BpR
z@dJF7*sZuBKPC2#F$1T(gh?7YEoj4oF>f2RyafV&2Lp@{q9)@^QIFBi7T-<S%-GCa
zZsS1_c*iyQuRp!OrfzA$a|sF-jS6h(em$!l*0h*E`!;eO>C#;yXXWBMK0uu<-T9nG
zEf)<qag}fnzIr|=-aPqXP<->`#n*4)*V_`J)O|^bh}Xb914dRPPZBH`#UYdGxVSE;
zvz}eXv01<VP()R$0_~MK%C61P@I8oq9DDi_BZBnY@h>U)__&^rmuDE%7ZM(hmy2e(
z(4pC&-d}wXW&i0%^N9kD{MF-N`1Yg!28WnDYLKtpX>H%`UYPAHin2Hc`63hnXX2G)
zB$h2(SAmR~*gFRu#qN=UUcQy{v4mB!U3>xClv*#&7f)cj;6CJaiBnohxvG5E4u3y^
z`B!<Uj2q^Fuwg%~`J>cqMdO{R=|*87%BYfB23o!rtm?P;lIkI%axf^cWHy*9rD041
zzZ#rZknO|#i_8Hk9S##7VMwYY|1&cP)b@XhLF|T6xM^=c3ODAzVzPT&5lALSn}>b;
zHL3ffs_RcXZ6db#u^*cvdgyLgzH%OXJ^RsAb~v`S4}Ug$IE!8EPAkX#N$ug#vBHnK
zLO8d(1mkW3BOK#hf^s*4V!{a0kT{N(8!mSsfBd*w8}8~Eq<EYy7q=F)PZ+>|gQ(pR
z9eI>`G5g5q+`go65^fv*a$14w3uaYRd6R|u2pyB<@W%L5_j{;TMWL5A!3UW+$fY%0
zx|fh5Lp;<f>gP3Cp5nBbu^9Y1dIUpB;k_>B8~(0mGjW)PpY8<fpMfgCub_}1e9NdN
zATYgK2&J1C*vVlE%*w>oSJxJ~FF~dRw|>pi-#HX|aVUvIfY5L<gn?oS-(+?f!4BAa
z2|k2)?r@V)xGl+fER9FSUJQ59fSa_v@N^e4HeF#<eE#nVAY5VLOf>`{D&)JqbAK<I
z-D_G}H)15*FnVUUdC~Q#y^Vo`#Hb;P7Jn)!Sx7Ti2lH)6ATlDK0lYE1^MK!9-c5?F
zwz)cLG~qL;>)XH7i_;$C&a<*T-Rb9RV7BQmRkgvV(Q%dSxnq65Cxh(!dX>N9hmACX
z{b|ux1pHXsy*I1f&NE5l@SoEq;E+0+)9M5b)YVxfAzKtdPLe=yU};2y=rJ5gfrHR;
zKUeG8cZ089%wOzoaYyE#Ofd)9xS2wln`LW4B@8$YD*ZxJYwCz5lDNiO|5O&AihS8^
zr15u3J@_JDSq<Z?JnvDYX^c{?{et7Uvc%Weu)6+0uBOc;<7O?ai75Q7_cJGIw^E8|
zu$kc$xWFt&9puW7>**AMkEr|MQ8|7O#v!xGQ{0ejBR4iI9r3Q^Dv@!(sJPQ<%G=Mj
z1BEP{C_f;7#@1GU$srHpM)bY2>Hq7H(KdoFgq>Y&{z5S-bR+zfZP2=1d|%lm#wOj%
z>kq|9osV3_aFRyq?`+j06MiH*WN<Kgx(0bAhq2Pv{C+vg^ws5JUJ@Pft|p7-<is-`
z?)i!tqd}XMgTek6by~JcPRlAjKr8!`Ps72XsirEe2Ko>+v!_!?^MwJNfuuag;BWMI
zL>ZXo5JKYws|cq9h+$;sl(c8PL%&08m{=hojhHXT?po|I>!6K(ZLGL#4Np9_GhSdL
zxtR(VZF8=16~&l!R`Jh`HN`(B#Vk~FX!IU=QgoQ@3N&d0iVi}6N%6Q?Qrt-d6ziDR
zWf9g|&LsEimM(i8DR)C00Ilj&VI^2W+F{QJ(iS%&vdHVvrF1vMShSHMNT${c>gmHI
zG6P)G?<ssG%GNqVSQ3X2b)1A%<dF;t2eY3G_+Whzqa@$A3NvX}j}mgzK(*#(b<+gv
zAV^~dJoRW7d0<c5UJpIDzgzsrUjIh!qE9uazHNVoz3=GnPt}6nEafGrm%@wWchU0!
zAK%_IqeLI3qMS}mum<FyI#%f`0uTlt@^Zd;^22^?8L&$qyUj1UJl4HIMu$ZsHK|)Z
zv>X)&FjiE1SthOSV@gpK08?eP)yE}pX;yci!V5L`V<3JT9x8Z4i*!jNyJ1Po2!{;c
zm`e^SW6&MtY%cs*BQa>V&q&OjhL@~%vyEP-(DkmW(CJ=bm0gs>E(*AsQ|;4}UT>LI
zc;lxh^Q!a@jvM=C!y~xUdY50H>RS1>y!<k-l0C3jP(>`h2bjLZyKxY#SYr8F8&<pR
z3m#8?azhlN4~p=C<muob#86S(Hz@XEPgIa|Xe82Vnusv5ES87V9~Ac^V9@(tNRY3?
zC%WG0t1{O&szFY!xE)EGf?;DDqQ5*p2HpUp)k<92qFK&`vXRAAF)l&<2x;)n=Z&Kr
zXPo(PanX1h7;;`ZM&qb)@60Lqi7ZZC+maO;aTY}xW?K;Ffw93snAP?z9$GDpG&3d_
z3C*>ryiqbsSL6*9MKQJ^)&esSA(zD@8cW>v8`=9_jEI@mKgO*+=b5_p$+!lgmpndO
z7FH=4qdT2N628|sqJ`#_{ctq!pqhwAK%ifUm$7NIt0BV#{MPe*##arUmN$)#O&YP^
z^4Dj2%6V2?{)(%r__HK=6e=njyD)&xM}nQ5nfqrs3cyHd=|IOD#jktPZ_<;ZJiH;@
zwp&1Y(Q*s^=(gKZg1?abwD7Kf=2or;g*7tybb&!)?!d2U$`|<DKi=dCBRhCe|Ilb3
z(30oQdKYa<DjxIU;z1&1V!fF-k(dbDv8kp-H9MQQ%g>@^xQANcHCA@C$DhW=ZUcwm
zDV>)S`Y-z#WH4@emd%iTdPz0y=Gi{cpXslb&_dQKVCMXXxhIpE#y{G|5R6v0<sh_4
zW35>7)@KgW%;1N*)*8ZUfITku#1B!`T0`8sTBr2z)7w7!kQ!oEklf)tUA4{x=uxJQ
z@uNrED0uRaCpfXul6`b%%_(hP>!{57J{5ZmyWvh;#tgF~_VVS(<M3T`v)Smyf~uy@
zkAo;u2H6qlFwLZT9IY|-P}RG>D?CzP6>jQ4#s5$PNVnEE2~lj(DYki8W7X*T+1jQt
zW*Tm8IS+N7k%TUOYQY&27G-a%b0xsm`gusGnCQCM&xdmHUXwm5D@Re;bcaG48Bd3^
zB~9+GN;3Vy2AA!4i(|X}+&0(?)dt?7*&Ciu+r$T;EPug@>{elBpWgNEUWOE-(KLY5
z1t58+jlC#n<fn1O*l=xoKaFi%Gz3w!tzpEZpku?pUhhMQR64EtAMG5GlbxiJ29haU
zcRA~9SQe8qh#aeeB+ADoFcR=PrbqHhuhEhhO%TqSb`i@N6X9?ORJTqj*exYS6TvRo
zV5Id~r_HUcf~P~~6G9(*Sz)B(H5F}8-K<)udo@$;xiiL}ddaLw+~ltuC1G6WXJzQ1
z&GU+yOftW~3vtIv?la;>+n$6B5JD}KC_9W$oEP<Lf3NgR7!h0cION3BH(ShXw3e+F
zbKT+)gOgjAm!YK7^Q~J|z?ML4Ji)!NT~LT_>Of6N<i_#)VjV$ofiLWKSiAv|S~;CI
z7i}@A9G`Sn&qPIx2!SzIjTsVaj;B`}v@@}&AgdZhBj%{)n!Tlc)R1njXRyH$;=b?Z
z<(>7$8$5<|vv8!Lr|dFuA0F8v_kk{5jEzAxykNP?{k|7=tq;(<JVW>FNXrBXD?A3R
zpVt~`SXUJ4yojm$PC?Pe{a@1)LWSMS_z&P^pJ}tfjX}8^NGpzr11$ao;{?4t=Jk8U
zzJ_m6RgUTA+NY=R&ty#(71)5Z>!WEvY_D6J_=4rluVUUykhcw`(VjLJFb`vf+n$%R
zKb7aLwiW*G&KG;DB(L5k_S3|_z*?N(vn8iSR&;J1B;&S;%UF8D8$LqAEwYCh1;^e4
z$9uo!Dv<}Z<4XT?(e65ir4a+^NZ{5!t6P|V6jT0fT0!y3*IK#=U2Zyu9IZecfK%X+
z*!nF5-g(WTKy^gUP%6>V#vJ-AFq4@hpXBgJ!;Fp@p7CkU_{Fi8G@Kq@5cikcy3V%+
z7VBF@YK0Koz7`=DIq%+)M(Vq+?f0Mlh;qPmvuA;F2#2QS8pw@X%`DT3l$|yVZQ{V^
z+gB$T!Te#Q@TJe48TxvJ>nd5pb!6c`85MU@Od3Rk6!ZAhDf5Q@?iq>tf0wVjj{2-m
z{{IO7cReD$aojQyHmugFjLJ(_*=rYtW9SJKaHNvIi%~(P!&fg~KY#Q5&tJWL{@vHl
zzkB}1s$M5GFy@R2n<yZ#O+J5M*sobbce?RoORT-pm<&(XP#mDL=kw}=Pb@{iSP&KY
zD^uAnnIx=<{t|l4Kj}6G7SIxHvvQBQ?TCU07@4q_!h`obghh!>Qd6&clig{3x}_T?
zf&@V(3tICDAhS^j)&@Y>Dz1Ua=)84k1Gi#+z&8(baLdr<W+iysw+)b>XRx0G0=l<{
zfEI+<L3nCb&*64B3=%1#?;2^6U_>@dPrC5T<BN(VlvHv|2Cz1A3&&}{SO0{;AF?C6
zqmQZ;z27F9gMn{olv&Kxr;5+C4Tmg(93{0Bd4f;EfxHTvBEx>lR<J*f`jiOj_A{2$
zz9S<ur}YlXmsF-nuq~^kQY5`%8jRSsw_RAMy?#HE??-T=@KoDDjT-qrV!;YcXrP8a
z2qQ3#wzms3s&|x;l^@yswosS0SK<$JGMQn>t|SjN8pf|D0*T@)Xyu8cwoxoMtUBc=
zMr)-d9U_TW&9t1uv~Mk!I2Q<?L^yFH-{N(C!Pb`-ihf;J-r#|2J#)A8=<W2%&A5wd
z-86ZY{)&#5{}e8iAMMY$&Ic1+_||z={>wS?CeD$!aQNHGpYq0@hd1yJ+|F0?U*3QJ
zSnt0ebB+bU^Bjeq<6Zb7lIRv>R}P<J0yU}I^J#fyB0X5iaX~={o-F>qYTiT_4CErK
zClN?A6LR;VzHwrZh>I_B6my#a8Pflc^q2fdPsslbhAI$<_8(`ea^v8?-1!<Fad-q-
zx?#!s8=?Sj)IPAO$NJEqR7yYyFRWqyC$KU1Z$i)Fz?-n1L7<{rpp~RPxjqBG_%1;p
zx<L5i@4oue6H~mhZUTsW4!6E?UG{pMmQxZztV^(-4K6sGM`ALzEu&UjnAXJ^#0Uy^
z`UU6FfJ{)9IQj26*~co59?9SyNwe}Y4-U;ba^NgsOHLRz-(Kr)QSe5-aG%Ul-7Veg
zDA`A3bq?wDjA8m9u`M@M7R`A-R^AvA9PDMd@0{~bm)j0zzC>>wmG|<ob<Md~+~3=S
z1XlU#AQZg+alSqtjjeS<NRzaslT9z@WwXhbW`hgOKZh&Dr*x5!L|X}2pQm04!JUHg
z+gv`y4;@|;ROc#Fhk1_I+A+YV*P%2=@YOwz-16@Ye-DxLpDSfY$!!uiS(9h(lY|e_
z-RJ+lCvIi9SBz_ZH~Tm9L?|OC1oG3QS=59F12crkIBg4egq&e^-lZUMx+vA!P_YX1
z$V0#J$T{?-Ie=@7yB~)gepb8D&BoQ&^X81OqdRT#a1InDXx?S(WdhO7n1(QhuiZ{J
z(G_K9lZ|h@2BP?j8IWcp)UtQsZdWknZT&>Djv;x!43Q+QbK_X+IHFri=HQR?%Fw<d
zpUUGRd%kbNC}LheR>1DvmeW&=TL+hSD^3o_b@%T6M*b;imbc5<Xb3?FRUHw7oSEVJ
z(T9xlQCyGhB4rPW0=O5I8AnJ~zn2%(r|~vfcz#cb)+DHA2vmHpcvW*uK*|m0BTCX8
z9eKHnh`USnUT3WV)3Ig6?)Ar81AfAYk9+^SqdkgX<<qNsKDkE60VwCU*5=Hi^?$3G
zX}8iNXL-sr*61g&jv|U6#vZX=W+x+L{1vq)A0xT!%pLcU`FMQd#e~VvBw^f`=wPkf
z>x0dY<1Sip`HHjHK&F}xYqRN?gpB?Faq_aQvLHDOSZ9df?Kblk1d-%ZtFhG%>~FM4
zP0d3?E(&)ogB$_hs~9|nthYc8N;VN=G@Erx)Ib7xNk-9f<Shp6-Zvsa&1HO`PIhkK
zIJDj}bxYgSP1dP5;K1Kbo8~-G7`%lL|1Yq_Dl*~aZ!;n#W7?7xPE23d@WlUw>6>mM
ze^?_s`PCC8ZSTUiz3r9i`Bl@_>?jZt4eJ6=8|y)ldnND3h<d4#9vN{>F|u6_FQWln
zB`vQyT3+pM{Xo_4(pXg&gDs=SC72J6*jVsV84h0cZ+&XEPek-Dm#3S#Jh@{F(I;=s
zkG9nQzcYof<vn#HVl2I~_T#un;e6d}%W-7r1eoZDv{5_$kI4%Buhftqof`62$^CfK
zERS2ekr}_Se|d}js@`JWu{z7Hs>l(ii^X|6x_9rSUYstEhU4b!9xm)p?LAD2<*4($
zx^0(Ld++}J&p-b>Wr$PCm>PPQlZnxVM1twOuVKcqPz^kJdTexu+twlOrY><CoZ>$I
z@o^(}wi`OMZR^sOazqh-L!q@j-mS%okHEW0<<51Ld*brM(~b)c5&rQHmkoY+2Fopx
zyq5EqaWjj(A2T!f-S3Lbd$W7Kia^e*le%5Zuiz#TbRbb$@{%L_^z^L$PjNFuiSSDm
z{jvL5)#+GhePhD)Zv7H{Pq8J0cEky^MSty)+QanoFW<%uzKx&MC-G)6`nFDae4|9i
z>s%QB<uv#&r@?<Y4gNPc4JHgg<cw~e*olruH^D#B>o6<Fzd<O4G*(?iC?hw#ee$8+
z+b?!^>y44eBs}pp{(cbV>0a?5^D+oww&ci3#4WXB|0qYy+xl7lU*%~@0#2Wj8S?%?
z2>Ob0EW7)EQl2lWc}vBVWaz>0kHbCs5Q2VFE@qZJk{s;G?26QEN~j1W?Y*P2t;bee
zNlma<A7~<KmDPr0yEpY&^~0=&#oalpr_;Kv+_F!0ieHKy_2*eVTP`a6^R!vc@sCM)
zh5ueu)qASc%oeBk*WZ_JFcnq1szguD{i5XV7*@*dQ}u+F>5DgB-T+!arN8MX@5bc+
zW{aSCRZdWw<_)Lb>|06VUusAWT~2}DLMsz`Cd&aRk3k^MdsB=ZJQSTPp(Df>LTnn@
z@jYT2<CoI2Uh%%W?VEZMjYXoCmF_T~qv?cOZFZh$$^8lAnPJ!?a)@#znB!sTMgg(!
z@EObC>REwXRYIgZH%s^L4p47^y5pAS9GH_CrHFvAd1VcY05$Gm$CUg;&y|OgovxeG
z_YMK(lP^4u{G$3BFt|t2obl43Ky8q1a#p-U8QeRJ*yqiiAW?VQjBAuS06fR%oShH7
zw*qEsA#amiiWP`|FB-bbir%tax;=)J9IkChQwztuZ=oE}Bo7&oLqfcz=w_iZwIY<{
zE5H3LOkB?1&zg&wcpN_-@k+P_Bj4A8c&iR%K$9NYXx<&zSVROjvii7oU*A!McZegU
zETmtjchN%m0-j^|?G{W=Q5w)Ut{o6$(Y&u_33_y_hVMkCEeoR7gZ_vX;>l#v#`7)D
z;9>F(&d57J{dW>0@}^U-XXndB_-ZRtFI<y<xPHpX#MXlmaIGaDIGTxC8`o(2g`vK}
zZ-6@TwAUlf8jNAg3hN^&bi*R~e%ok`%KX}Z*{>vJvJH-Mc+@VB7NBss`BH(MU&mUN
zVNH&1yFB!^4J#vb^^>B`hIx8o1DBz@7=_wAfBn*(uPZT|gHpPc?z;^HLjA3~VaqE9
z0wnSeT=04c1w{{UJFpIM$HZ}D)Xirw26rK}#k;y~{^Fp%>kqBs%w0{#+asu5aUk>z
z*U@>N(ql#5jwq4%rk#NpP5-_7f~!$MvZC9rg`Oj_xW~&GY8?yr8pZ?RSeJ)*`#<Wr
z%5R8KS)9(B3%73<#aHurGw<zSNL$CSpEeWNH^?*T_%~uwK_>n5v>LxBOVSc<wR05z
z;`JchifiT`Ss!YL3PTiX;&_AueWt7S#>+Wc)}o{J(Um{Wqy+76;8{_3P*J6`3TE%N
zG0WFlHkMS`YK=i466R@&L_ZVICgkU2&A6F8t(~WBPsZa4B%sK}A}&CjU?5b)G<l8>
zDtHX5E=w2;|IE&MDC*`fuFtM`ti<KXeYSekyJiT?F3QvBGcQJR=VLf+PONS!g2!)=
z&-^>^vtrfnR)23~k$Ylb&#^gPLB6nZ`o+t$dhtb!_&YqPokx$LnSb07tfAY-`efFN
zwsHuM{03HZAl(>oK+2x`(Pf;ixzb}*%Z3dNLYXFrW3FwAzk5a1PTiAYcS2IuUH8mb
z?4p4n8Wm7B_+6@WZ`SNqXXlHnT{*>`;|~dAg(=>a0gkLBg)CT|0`ZkGi?~%&=E6KX
zwN)cvPeO0ow7^^XW=-UpxmhbB$J@7AWo%}!4IbA~LT=m@z#xJAX0gmPVoAVFkJ&8`
znmcOhtq9ZG*OpS(U=aC!dH&_qe^pn5;_Y1hTw`H02E!mk=*W}_LRVwh^$(TUiLC)M
zY0hF(C^Rbjl9<f_2=vf#1bom?ByvN;s=CEi&u0`s>Lw;#;ikiL?HUx<1p)5ukR6#0
z_u?A$hk`CEBK4iE6FEtLhz-8_0Cy<2#vc)gYfwu07vO+o8?D<3_l=n(9|iRJjKh_O
zvel}19_*N2dd0KpLaXrumr~oGY~DYLSA@Tt<*>azr(i2vFAT}zR-{Yz;w#ykZ*b=d
z&m_Tp+!ROktejsJZB@?4r<54;ylHVUn2n(HtPKmjK(GlS&Rvs20KS^)lFb!1L0)z6
zCrGS^#pN$ozg%AZGB-_TYz~-}EjYemVrt7a6$gG}fwON<o8^@9knsA3ji>f==76uS
zr_D(A=(OfP-3GXx>M_Vk8d()~@R>WNpWk-8xPC2Z6<=fZ9xu@VXUwt*g@1gJN_J3{
zX@v~)-?k`n5|a}VAhTLc93OP9U}a-m2ODFbrIysD9-4@yi^uU7f2((v43!oZZ^@C!
zQ}DJ1oem8U62qa2_@PlE`|o5UzXQK{zCIFGB+_P4Gt$~`iAnb$-_ENKu&AgxgJBz@
z>;|VvwvJI4Z-%iH0J8MZ^w^`FQTu7l@`Ii_O~(Gg8}Q|~EXfMZ?o<&1#I+{ua{Q)w
zMv}-E4a6bfw%T8J==iH~)!Q5J+#K^;+%4|+O&wmyp8X1^4vAaOMrdM%^drm(r8UCv
z-8#ASb$FyOfL*1laU;vjroYXkzp2+xnmatL{~_}_t$iY|u6cb^cWamkN@~oc@y6P0
z7;`3DMr6z}JT1LkD~E8NB%V4(tor-1oO<qk_Yr>p6{b6n+RVzqe%+uGWjTW@qol|s
zlj!a^D&axfklc%6(72~5xkyUK<!qv$9zk5O*|Fp7NZNP89yZ`&5+Hbb4AX!i_`^%`
z8h=j=?MX&M0akBCb_5b32X0W;Lp2>@_GJ7Bgh}W+(kE5g)1frkKOeql&b=5-t|ucH
zi~|59RDgnLZ)kltZ7r6#?sB6sxYLIB8$fgzy2_?iTJeL8^TVL%)$M_JCJu-(u=@>L
z0kRUeiy+Dv(knCczDM0g>b+Gg9LcaHZ3P@NbTFw=&>-VLL6tHuHyi<Sf-6=k?HXU$
zkK#+1nLZbPmfhe527`6e2Rri$^Xd&kGNliI-0q3$*32D315xI>atCoX0k;7ju3K{m
zPY7VE%W4dX(P74Tb|s-s?U};$oRH6m?!UqV6<W73_fi2ixlu-}XDboa2<2n}1~Td{
zo`x?i6F%cL-tjj64cvZW-)DoENmmC*Yxnu7olDszeQikFB?f-vb`L12ZdYYdB{4Sf
z$Uv1GV+Zv+nY;bS+UqAg#ry8xFCIFWFsz>vrbEah)2p9sBFa1RQULoQLuz;<q9_f6
z;-`MsDK|$C5`>lhj)LWw*W+*!Q7U}Vh{?RB@7UZQ9B_?XkYM*VCrzWG3a0Wc4(ID;
z4z^1~c{P?fngelr;5(U4zdY{kT<-LdwcNeGZ)*OS)V$I)73q?Z^v)Oe9nLQvL^w35
zri&6f#{M6Nw4JX0@Di-977vD(I>d`=_an9YF>ZIo?XGk?ZU4~z-M#tnuk+@jM`IWi
zZfti8`}Ifo%JP{lD6QPMNEYaZ4Yw;kqVSn5=kezB_R|y3TTt*oA>HDC?O;wt-~xow
zebev7oi?~!6z&2&!3=rrqAF2iBGUWpl4w$F1q+856%4<*e}$Iw$s*Ol9OF3v&9)&d
zTtTUyuEljkr@@m26_LD>SsIUVsCZ`$aSvpjC|bNksgT4RL&BVg!SajWSGEb}kCg;_
zO3u`i-utmfJHj>jZHZFSRR!*&Zf0OsFXz?MKrNK<aci#4<1aHfEB^}6lE~_NY3^Ga
z`3m|Fie1l$Z#?&&sbRr~SLtGF*ti12^JRP5yIwcBmG$rBZMf;3ZWnfdZr=nr+K`)(
zlyJH;<b-V~D0D=Icyv)1fCij#Q7#l~IB(AWJ4jCj=`b6|T3wvhj!kor&#JOry3;Hd
z>pz$leI%9mj>;*5#EmEg<1R93F;$3pO~$kBPObP9gveb!U>ERca@fF{+r3`f-a%LV
z`oqkiE$3GX&_tXbhI)NDD)fQAQa`U$m@4$I(?a?lxq%nCiF|^S|0xdsKj_Gh!3eRf
z-3#*nwo`B3XbwX#yat6K2`{!TZfpb7@qaaU!*uJZVAfjF<(Ksa{7ypGVyPrOScrD4
zdBp4su(Nt5)m)=BPEDVPfHE_pDCUjX6D30rm<j9?Lt4Wcr6E-<>85}jL~7R)>GQy+
zp<8Ui&;9aCk>fR~SCi^dgSz=NCSmt14)g-PrJed#UuX=7$v+_3dg3311QwA5ekw=~
z<8=?;eBbx(6;B;iJ}n(VJX=l|_4!ojdPy{>Ezbgx0|H7Ea18qW3s(%<<fE$sEdT#+
zxX*-WqiMIwdrfWGeE46N+`lflPkG6G^1JO5J=*zNTp5X)*8{V@_l{P`W7yP>dvy?$
z(XY${+?Z@Q^c$ZNRcJVg4w={f6+*}Th=cf_M-pnZi@>@4FFN}lc`AXoyDh493)76U
z(px@+({#B54z2a<ugJ21ORM|wBmM9^rtcXCsKQX(=4#!*Y=+p-N(6SGhJQ%v)bxAL
zDttb%T&ze}A^PAL#*bx*iDi+;KLnaQ26pJ8r1R&_(#Z*Ui8y+wHQ3-+;HpiU+0KHv
zu5xze5e?w1IVA%jv9o4z%7*nh)?ClEn`EzNlOV=fS)*NnM;4+X;2p<@q0JkwKerm&
zdwH8th)m7yA~?zA(bT=Bp1gXF_Fv@~LT-aHc;Yy)Dfn5p>?BCkwRVepF+(*#yAHVr
zeurWb4x)(=_}T-)KYV~OcB@9mYH_AW`C~H50~~-)VmuZ0C0NA+K}8CA!NExNCcti9
zRBHFz25jwdt9cBaU7%vlL8oAE00yjH5_%Rp|8>j-Om_(rQT@!F|EFKOWTS_;Y@}}s
z^~u-v!-L_!fwQfA-E;xEu>)&Gqx4#Az5^p5XbS4yJmOP`+&Tl`1#l2xhDp=Z-g6b~
zV}jE{12iCMy!nzkhL2v=>o4kFd|mYe>^1k&uD(QZa*)zcn%+|}sD+xtEi8cpI&LBT
z#`e)WGj__5Ymaha?yHBR7?0o;MV1<XIf96AVF~Y0G}DRWNgTneo8>%80Yaf=1f%gM
zgpRx1i9?LU{OUt>3{sJR4!{&&xXJMeI`+q(RCN~Mj<)6J`2cUnqh_oMj2u2F!SEK%
zBpXe$FY1WFTiA1i<PjK1E=nXSTStM<a1;=Jzy?1{?IL_U1r8=?i~}9+(FICz>7s)H
zRukv$lIo$sYH&j?B2EP_%T7~^5T<<{>oMYp)p<5V=RwitjlAU2!G0Vav-{2w_hgjG
zu&M5U>#cL!3kN4s`Un~~xM7kO|GG_nrQ3v8`X6(jY`6=qKIvtkMf?A-tDqREG_1eE
zRbV15DQXW<Y%&I`QAkQpnf3SmT%)c;&?XOSoDn;E>1HDTaB?zbJ{ku{>v#-~B<@f4
zRX8f@RewWfs>B4Pix`u`4Kg_5R-(;j={TL%j+qAPXAGoc!zzZzkDrPhnr^^mdu06=
z8T^&WAj;JK7ZO2UmrqIJ)*c>V3e54*j$7kt(<;TwIeE4H>rDI;o(bN||JA2rn+rN&
z9zOn<Ty`FiaKG&0{lY>U5piEC$^H$F&E>z2%ddW1{y{RCfV*on6g!tYTjA|`EWNrd
zmR{WsORxTgrN26sUi~v+>D3LfG#|pj2cHL*DhP6r#Bxl-H_WRjRKlWpRZb?T8|`c+
zL;a)y640HWR{8atCvToVeM{D2FTZ;YPpKV9w+{BMi{>2u!F=rS2c=!#A)#4Nchpme
z%W>tm20h%vqW2}PBWdxWa7b->A3&)0Vd!dd+OM$qt4tryu4d&~J(iBXydq;b>P|WK
zbaoZb*1PfG82UJf-TNTG`!GCeE{9%8Dh79URA8g@<<(y*SRWY%J3!|~0@ZuHa!?#;
zVJ3U5?P26;Y+F1oj*3xXqvU?LZz`0o!jX0G`LH*<z@gxXKirpJkA0?;J({mOwXT%@
z9H~OCzZ=@_du61Z_{F?D|FXHP+TIcT*XW+7<yEs>U}<=l<71qh?cDSm(uJY{^Y}gg
z^B3vSd+AvZJ?e^r1NS$$>A9-la|aEAPhRg@@M}c9`v^wY={Q{T`>PcJ5n7;T#*%`d
z7bb~-PcZ>g^l_S-kT&|Xnb$vq26PGmLN14O`;Gt73pu-J^{EQ|Jy1zh#_vb;4~FfA
z!*iE@_iZhjiOPCx)w60k$p#-S>*)mJmA5^rXEzz)W3r}I@T#ODzzq;T*k;=J9+o<6
zKaCQW8d_?jN}8kF@H?4vi>xnXZfN`V>R8mXWo12SsA~$ePC@hC;1BR0%qG;cUmij<
z4GiW8+5M*F7=pL$4g9XSKfx-|{oy4*1bb*xPV+}TR(Bspcy4!th7fDZ+eL#`a_+Kj
z@!rQ^Z^{m({7}|Y2#QsB*CLRCAJ??80K{0Cw2*@dHs)D<=C^i068(-X&f$VGE4lvQ
zdiu7!#PHIC;*@@U<9C%nr&NGI?RT7Z?r6g~r&^(U;(!Yg0A9PjTKPIa*KL*zixpgp
zP{F3;C?TYo)P%FA>oVE6SLjVw*vxeU0npLQsqBJtY;s4B<&Vz_y~K|2%dB7ww7f%)
z2Uur6f_y48&Fqdf?Clzj?z<CiI%Lz+hB4dWtUno+M7;<!Y~xiFUs?)>{oo$jJ6%(J
z<|B~2x!W85MIJ%g_O-7Y_wV?q7-YgNsXiQwg{)Tw)SMUkCa{Qa>uWHS^Wi2yfCtQs
zhgiWI!eai>jEL;o!z~ENw1(NU055k^P=AKR3F8|Ay4vYm_ia86vbh7v-Es`s*4|*&
zTK6|F+hYiy+?>nZi;M2+e2H@%(Qm0|N7$Fov@U&HD=dkC_7r|pY*=Vtb4S{K;6ClR
zad7>P(Q!-7vbcF}J7(iKu8ka@HfKlhcKVjGEASI&P$<_}Vv#iit@AN(i-Yn|HFCea
z6MIze$kaPJOxan=knyc=V#ejpIRDK<3WY;DPMJ=jL^p-sgsQ3zlZRY$C^GHgLju4b
z!W;-HG(dRIVlYBma!|0$03n>|SVQD0)J_tmm&=|xK1-ypkri|uggaWD=`a*g4+7v}
z_#6x+Cv?s+W;}6i^a4O;O#<?Y=`clkA`2FNyjxyU-PzFIy0$>*Qei$WN>J88Skx=B
z8=)xw1K@UA4qN29TaGI<R?_|~0V`eChY-t3^_XK}*YPSCIF<QQPGL5pFggA~fN=Fj
zhp&SoVNl>1>h8Bwxxw)<0$hN74+&7!gD^poCNeYEyXjn4!S5fs!t_)6+!Y(oscO^f
z_fx0;S#=?K%yn=rW=Gs$BuUEdmW0YnN-|fi>+G8<K3P$3-^h!5%kEeple<T8XE^hw
z>(NgYVv~e(bD>($#+oKP9@~bvJ_SR8kBUw;m~b+EE*TU~wxYToW7ll~#<P?siKF$J
z2dctI@$<L_JEf7CvU|-tkn@q9)k=IixP>Y7O*EYJ%A(jf3hDfGZLp#(2~|We-35+x
z$G(zjW%4AMX+?CPAf80$Nh5GpTBN?M>?U48lQ25s0Hck*jOq~Ex*t+2;#WQu@n=Eb
z9Cz?-IX`jF+g{jobpk$a!Osx%*Uem*rq&zh$Lmj3K@b2FLxQ>ho)2OldKthGb9j3~
zV?DHBxkyq)Ww=O?X=l{-#+w;!x0gmoIgJQf##bsmGnv^RMC9wxyFg_tTjFz=6VmFJ
zn4w(42W0O5c_r;S#D&5;px6*=4;XtV-O@rF0!t6LRj>tGBS?s3h9pQdk^^7BiPd`9
zceA(-6U7|l-_54dsjsAtK|%ucY2aAXQNm0|=$NtrLv<szY+t35eHLU+yx3@P32?zb
z*ZpS(TMnkMG-Kkmj;dpjSOJ6NLG3;Q)fYOYEE?X6#c9)4g3IvXmxpA1`n%sLj0hQ_
zJ+P<V5z>!~jaQp<Jb;zGOA24@q5sRRJ1&sTgJvG{#Wi&1<pMN0G7g4J9qbA>uXf!~
z7c>TNxB>6wppWv?Kxr{8cFr}~$L)lLa0}oMQUI~`G!Y*0frwNT6|~3w$MZuE3w)hi
zu)q#+kxv4w0X=HmfA{4JKUCl!|4kkZSaz3y`9l9N0a$mr3tuXdCEF&*sHC=?39|IJ
zpfAg|num*mxvz77MR0O;2*0w@7l|e<TABnxS1oA@0+Gwx$rzDu7j``>Z}v<)b9%B+
zy^ZomM2-7fN+A^=X>Qbu;<LhtGc5yYS^r;tQJZO^53<Ts-W(9Rrf-ZeuL7in&UC)g
zP@+Q`TE~d4ww+(oS9wlfSDZ6Do;K!F5(X6sP16B{1>_?_bEEym(bxl+&Q~plTbiqV
z`<<V-cl9}vWejJqL&h6zpyuE^He2u_-D}(ZR$G1fNw+%MZB5*=k1bu9Db;Qa;U+t6
zHk&A(-Rqle^kwHpN2iK)oP@QRYelo`0#>v6gi}V}^q(PfBZ<~CsRJZ}e_R0~J_m1a
z<v{*MxtfY$GJ0_6s1`yxi&vaAfI_0SaMdIHO;!m5<WH37Q;$k=0(ceo8%))OKTxFx
z(Sk8!CXa1ceB%n;!;~tuWZbfx1KUuP7v)t*NEnA^pdP&?j^`ni7dvxOyb5ih`MU+C
zPH+r^m)Uym<6@?J2+@DF78xQzi}94}3;T3E@#U3v=osf}i1)O+=~zIR?}b=NSiAB)
zgweief+JANuV|bZq3JMWZ-d!G0PYA?0_X|kd)_Ucxqpn!SHAW^5c9x8IOO1T*hRTq
zFrGKx@!n8=a^eFMSe)RCfGz|c=dk#8*<ws;hlcfplZrCO-_L<L71Uxnb8A3&UF;Sw
z;2#*YJ~G4Nb%kMZct6{#R$QUR<xEA<hO<ST<hp?EcKhi5`zv)I7wPx-@2}K}r`@D$
z`BdFdvXgsABBW(C|4@%ni0lp}L@u8mLz>ZPIV%^<{AySf&mm&OylT%uzzpO|a^Z=X
zxCWEIqGTTz>;dxtIIi_Yb%M!=U}UeROL+OA|Hr(7JX<pjMn=MuD5|op(e3V}ZaF!c
zn-pIe?nQEe?==U2G7Mt3&(XaOW!MZ(4;|d&F`MDIoX@ZD06}g(Fz{m%opZalnZm!9
z;grZ1Llk&FZ>;bHzrz3^bKDgK@03K9Slgdu>~~)Med*qGt-m9xlVP-YgW^rSm{vod
zs(f=S6t<sKwZo0JB1*X%s5B)J<@KGG?j*aaDi69VbWDL59M(EQ0=_P3`u61@ey~SY
z`k{P?+-^bYvf7c3pLrli+hpbGj^u6t<&`Ge{*DaNu~3;<+TURR4%e)%?4KR_7iSaa
zq5kKh-K|e%&Ad|W-nvbL7z+>WPZ*Dc+)dMtA1HR~XLt;SpKw<sGFa`#HH>OxowWQ)
zdl`V*3VN^O9+GTrkRte512HxjBQf{~G6bc>=-L_$=L8DA!I=<q;tsS_{aNH>FrF)+
ziV8ugg2K@NDv9q$u6r6eADi_Nvq=qNB*D@pb_f8W$mn^5AGYV1TZNsR?_0@8vgEHp
zoz`pQ?sTU}Y@r*SBKI9E$h)oSfR8)p*K+E>P)8S#XZ#4#Q%;aW?B9%BU`mn`h;ruB
zi_j1oNdjh|30oa(y~*SGf&hvku-Z}Ifu=g%tTB+Eh%N{u`P4xXq?&xn(gLZZ%|(-)
z`x^3`6B_aDOzR*!VDdmCv*_+@2<hPN9!yyQ=RzXJIau!UWyr`Y&zG|qB}4~V97W1H
zas2J#^lVEkh^obmA*S`kzcGOr4Y{L@=K`S-|1hm|W?SFtte%O8Y8QUgXUj9szw+%j
z2`M}zFr0pQc&uR7l2O7uJqN0z%<Z&gw90cYO!Efp)SEX}=WCiPS^>2+RMR>TS#EAN
z<e~3%v`>|*e(eQ<%sK)g*KJ}!rtfHLe9bR0QBx58lCP#}cv;!X;k%Y*e@WtU6dkiR
z6dsyq<;1-b9fw*UU-59s!$SB}V4cb%WXu}MChb9D7UH_~&)TtjhR#_y4Y|U|*Sc2?
z9S?<>f*r*>bEk^c34maFAqFJbR4Ob$7*2SEaweR@3s#_*tViZ@j_dZ)+#*H+@m1Tp
z7hsL%92cN%xCn8rLaKBoD>FJ6OkVyCPYCA`23RkbbKsUglr2WUbN{X1)0KPNOsCBS
zAd6Z+^wV*5U))DN`^5v?6ued8Q3e4m-Rt%~anTh&cF1w>jsFU7Ec74nxvF5leK9{?
zIC`J&c}_k;j#F#gH2%IU9Wyh7WVdd-(`H=K-O$5vz^#v6>$r5T())`V91tAC?6`ZT
z8$>D~0jfKkrpHzT#yBT6#1Y?xZ4U(y+=H_>E$CH%JcnoVgY~hr;V@6ZIA&44uVw?^
zH9TG*Z??Z?F`xF#?}M-S%kC}y=a<mDNdCudQtxZfTp<nWrxl7{K56gaKXw=oG95>~
z<4**+UB}(MKfRw@3f1w`2l?K^5Y{#K6}Fpueh5+X7ck@(4@~o?9?^PF_xiTEJCdKU
z_fIzWr=M?H`G5Nr_dWg}M}jua{ga=#FCYA)PMqac*faXi;r@P#p`9MuD}6`?dcEGF
zK^ZI<cZ1!A_s0=qZ(+`V_q*iVa8kPmO?icPAU?I-qY2>^BmVa;DERigQqD3}pr~-;
z;^ged^Q!u}3LZv5WyO-#fhqZhRfVV4S%?`S|JyQO>E~~3b8Y%RiaED?#RK>M9Sa;B
zp0pdlDB<25kjSznW87o&)nBg$MZ{UIwF?YPs$za^Z{hMvItz9?9->EzQP+B&jyjhV
zQhsQ~qSxAm?~ZX04{1HoM4t@UV%>QxPP1ip#E|yAvyW!BzD6@uGR&wVvxfm)^=QF*
zK5vf7AR=V@hrm8r6CnS@T&Jto!*~Py1&qR~J|fs=nl}cmR38dBFtxseXvx-fVeNuh
z*`lpe2E0hwDcy2X=25oBKGE**ELcX1w287)kDK`%^JJO;&OkmQlZ#>Sf7o`}zir6s
z#~bIEw`*juNM?nxwQ6FUXiZZ)hHCvVwi<4fq6^IbLSQd21GFlAe|FI{&}e{t5nBr;
zwg5TXFtI0$b;&ssvC}FB9Lg?;T&G>Ea`?dSNkWEtrf6Z0^J&o|5rq$z<=MFpK8Y_y
zT5PqrV&-I?jB8C~iiqY0>xp4Th^q|m^bE~PY-zR`Sycuv|MhP6<Y#{~XM2J7<fvUh
z2nF{}bF<|~J-k5SIZs7!=Q(U%xCK8eCe?X0n^d!L4U&OW?L5rKK_=*5mTmP)AYEIT
z+*8*pXo&doqaB(rIR<?VHiSMB8G6-Lmx~AFc}n>@01-e%%h4Q37*`zp<@2YI_yb<r
z51wJLXV(yeFGIsgIiDO}|L3%xy)RA|i}QAL@7~45#qi?uVKYCu_vZV14<_8%y;Us3
z{pQWLF9`Hk)b&c<^rX(`AGkn1(L^~$;h9XK==r5>&#Q5LT#x%5lDvZwYAn8o$LyhW
zL9b{nza`}l^}^Hb(MSe`g5d6n6&$;&b(3H0I$jZ&1NW|<foNlQIRkOc?uT;T#?sSx
zrzTapQPaw8b&H}A_v&w!bI5b;P@oyt7+0Gmth@*e_<UYL)ZErb?F5IJE4sk!eEJZL
z^t72IQgxi?_kf{b^ug61JX`tY=4DIpM*s<q1#<~)v_QQU?Q%S>+$n@`8^Bg0b8R#m
zIDfzT^e>xmZnNM@@f37qt1hJ`$!{2a+?q|{>x^QuN5bt5Y6!ArwFpblh}=r>zDzO&
zpi8{EJw8wfjRMc~soa2z00najKmJ`e#c_q|kCKFsHH&h3kwVs={#Kp+bQp!VChC*u
z2xLAO3Wo)CVG(h>&3L?=8x@CRX%N&49;1l0q58m&{Pu^7^mv^+YK{o)zAHv`PCT+(
zY_-z-Nsk}7+XQi&oqnS_HOWU}JtFNF#RM8A>cn4la{_hnb}K62)1(5+g;(`uHAM<5
zI7Q#dyulND_qQVpGl#%P4fRAI+Gqr-7biEk-$fBZlq&Z?M6C@u8_tSzfQAY$rU!I8
zNnGg7cbhkX%HK}N<#B%Y1xA+=^Cedkes5?`9Ha(t>g|@cgAm=1^s|`bUSNFo8Z$lE
zrT&(d2_A(Z3rM7-vezbU#6`w$&wE<Pq8jhS$evu+Gj^2L;k$^WE5c~&e%1IS0r&CL
zy`5Ntb<a*fgfjiWglAA`Ba^e;jmcOBQuoDz)IAdQl8*uh|AhvQ#Os4lw@<hYGcdQi
zL18$_98v4}11auVZ_P$}F*_#ePQG1?y0nW0chC&`z2YvYxzdV0#m_w|z2Wp+Rri@>
zGb=QkbuR_s>ph$87I%6C#{T|_<Qo*Vy5RFq?~1mnJO_N@7GiniCUSNUDd<n_JqlOn
z{y1Mwr}zHt_y2MK|I}@}tXv&{x%>J3|M>kMe*Yhz|A&8Ja8NPB^K(?Od$Pzwh#Z`R
z67$vR)!?;7E$$F#^-9NowXI;%vzOn3ttcLG$8h>ka&yR~vZ&d}@=Z*CQ6K5}OL?PU
z0$0*|&O!d!wrH_dygWW`$MdS1(J|olats}s$m#iQc>C02KeJqGI`I*wYwWf_YSbVP
zfKg=mdEqYPYJTqS<pqitA*MYr1G^ZVXGW&)#0P>;FEiW>ju_g3eoT*YXz>1hdEUCa
z^B%3im!Q<E<{r#8h=b_T-h1%Jy+0)R&_R5Sb{t`dnNPi)2a_EXRzt#r;3=9vN?tq(
zhtUU9^+5$6TF%;@9vZaYnCR%BAtmx3WaV*D9Ti7&_hiNuxgGXP2)?&yN({H%cMYiA
zGm!?}7BA1Cc59fOmlDVjl$$>|+$A}uz2epc_M0?kaX7%!d9zr!x89moZd>MM8#S!k
z@7xBxoc{pWw_OOrPcPvh5zkkDef8wKXD{FW*H=HfE#LVqqowT<2ne&4uJ0E70|jmM
zcRKmsH4Aq}Ft-GjwQK<C^D7YyvYLSW92o-ZGd&H@nxE_Gv_xq`HQW8+^}R_mZtwl2
zI=Y9uD_PliHh=!=yEkv&{P^mt*CGsDG|TZRdTNY{owEjrT5~bm8Tc~bilqqtRz;2k
zNy+k@zGEzEoCi3fQyKm+#n46C9T(<1<ih27M~{wm2+bUgH-+xEE+V;@EQ(;;S7+x7
z@F77HRE*<De>{AM^aAKc__6~SAp8H^TeP;CX=xW%(~7ftfJA{<X}N>W8n@+FoTE#c
zh{~<y5Ivt2lo(2kncbGc#RU!zC?)p-4u#dOE-<5B#vu|5U{UzmLdfpEn}Dmsnb7x`
z;dR*OkQ79ykivG>pn-Tju03acT7rKp*tp3{b7=AtuHpSQ@!xSWK`<I7P#wZ39p~)|
zLs?V3A^r@Z8@_w_=BwW8FZ)sq(N!1jReH2sRJ|Q!c-<X=0VAjaOP|@bhr*xWg47EW
z4WcD1akPDBhnUf@UW7McxhfyKo%g+zAq=%2IUtR<3d@d{Ho^prqGn=@wr-YTQ9QLm
zqy*6{asfOz_FF<hiOSpuF~7mq%k2(|@R}<e1hzR)bn`Ii9oY1H6dot?9MO}F1^;SB
zDjwt&uo}u7i;vETibQ#>?5w3LDvuP)zB4MtAF(x;M1bN&`?{Hr{Tjhx;<F384Ezlq
zp$|<xDe#gjDDmI86uz;Z0c*~{BqsELr70K9aynsgQ>86#10^WvpaY)@-0YAc-GrC=
z{pWv#R%XS}lTrT$+j*Q2S<i#N1t<GG7tgk%W<CKqqGVm-kU#|IsJV2k18KhFF9;hO
zgL&4@eu$W3sB%xCKtD3>=3xrLYwpF93Wf11*?4FM$6Z+6i8k(5B!Ci#`!*T(#I9iz
zR@+ESnmBn+alBWo0`|EjBz%!@1Grj<+KHrLT4A17B-}AcA1JVdWX%lm7i`sntdK7h
za33v>;H?Cfdq-FDgn~<oIVNI?71UlmtcD@+fTGVsn#dybgD$R~{OOygIW8Uyqa8Sn
zsGtZYdRlbhkm*5xt$#3Ypr@&MWHCfF!WR`#D2FiVfK9voEJ-mj6R5p+V-3jz;XzrG
z?imFnAbYz!Cjp?_o~Mr4J|nH>PT=Ww$cI$8wH;<T$y@6Nl;YnW{P7RMFIAaW103x&
zj|vEJ#N!{~=vNRx(<j{Zx4e6HdfDp?-!F;iRSp^y`-O)e!$h=h+YYh=@2dx#8VCu4
zH_Cx!F!bbiFHY9-inPh7;R!KvV&;z+D7=ln!{;4>>|s-hB(J$5l&C+{FMtEAJA?v^
z*${r}V7L-TA{(+^cebAfo5XpkHQ>Kz2xUYa^0&)TacNJL!<kEmCBRg19e1~1C3UWJ
zoix}LU<RzDWa;h6he2U>NrlCL8bE}krlH$d_|S8QC`<t48w-4fntFhFF`|mWZ-$CF
zdn*!IzC1!x=k=J!wq7)lhX&2m4mJ#mBAFH6E=daEdvJR&2aYe8H$eOlNz44uIN7OH
zf@Wwk#qHIELtFWaSIKMy0vMtz5{N2VzajhGa3B$72Ov6Ec~Gmce+)^-Dwb22Caf;}
z;tlzao_k#{NydLYJ_T<J*LuWG@a^(wF|UNenFAqk_Vb(mtopxd)7S0Q4Y$1;fByM4
zoq3S?IgxfSFd&|aH>o_w;lNHb(@Ctu!)RXycbeH>>e-~Z_+B3T3PC34a|}oX<-=IB
zxG(n>)^fxw(_N%74ARp4&>SSJlFlx~j-&UAznlW@`73nDy3nKpp!%*0Lse<g$^O~%
zMH?N%qu7W(n+m~F_xYX7G)&M`Uf6`?*db7mlErL}N>-2q9dd`xef20B?QDyg@bEG{
zOx*iY49xobH=SmVXW2N@9G#;opODV+wTsk(>pEg#h2T9+7sxqKT6H41h*CHdte0f>
zdQp(EIPD3<67}GR<7w>%q2G(1@MJ^i!00ZDFY*wQhoQ**XaR7j?diOny)Pz9FtcDy
zlpH&L8#;#mtWtp5F~|*%z@_f|95T60hQ;d!1U)?c@}vZ(Vi7=u`jQ%MS3#?ek0Dgu
z2MF|VR=y9TXwSgxYwjb(1Td$yqv12^W~e}YS)r^%vP{(&=eT(1_u?IeoneyU`g^yi
z$IzoIAn1BrBx*-M=+HlrMMArZi_^wU<UvlP64o0Af~z+vF6IrWZs7ebDWK`Wc?ye&
ziIjYHtrkTcI@t0BhTeeK8OIQA22!3Z$Tbi`$AW5yOcLSk)!%Ss4fv2MX<mq0;K;_J
zp5`8UXSG|QwmDwhd*e>u>+!rkU&v$c^FRFY-|q*d6-AcL@)gl}PPq!rHarxr;b70^
zp%C#3-RNw+@jV#O>PTEsgs-%+F@kW*@E0)90#9v!Ms|XL9Yckn7;|UV%&Hw0#<H$k
zJov_Bsz~-x9<YS}0n>@SzL(fR8^Tx<4gqp?;xHP=g<!5S5!SQ~reODQ1yukwTK8Z_
zG4oJS23jX~7489*Q&OY7HJ;Auvdqw&E|w>dND3)<gKO009q8nI*~l?}8AvO2Cr6*u
znBAVTEmTk4v*OiDVl}?4LgekO?$dR5*{gYTdG%z*0*g;@mz@JZd)Xk>(wB_5L!$x$
zM0aRm=#6D4{y;18ctBmpuY$<FUTBwU3FYIvG8S_Pb6EVP3Z??{vOR@hs2~QckjNTX
zrRq`nK`6d%L9cswspr`6wPK8z;Q75_gUTSLVF?~>0<LF-jrc8&5!Y=mf+`PKW-%CH
zYY`y)C)4JroHF&jCr^afYUIXt9?zPyjaDAFw6t2UZ?mZpyDXu9fgN1k)KdI^qxnf-
zK*8EXv!6ldrfgA?k7SLaJy_m}F}b^2lFhu=wIlD`W4)fX?8>f9=2XNbWStxy*Tisu
zle&&Hg1m^s+y#k~tJ#OzF*s;i2xMT4%BYhi9{~@SEEUAEwgwZb*J$AD-lC-P1O)=|
zo$ssaT#|$yPpeDh9N`=hOXY6JoiO0i-G9f&^|(evX=W3O;bLt9L7f_0IiB$~3}3xg
zp?F7sz8l_VuRs6eAOCQhcK>#N@4@Zb{r-U>oC<g7&!OBPUi@gE1TUI$5-ik$-vmZ7
zpSRvK2Cgr(144_p_ptUsmB%4n7;(rThYY%p=B4A}I3BiRo~&a}2<Iai1lKC;<0Pj%
z#n=~+OSQdLp7?F_+}Osw!W?XWTbsq#>HIRP?o{lnC23LI8P<k-+F>9Kxs;n8h*rug
zGY?fzes|~O{L|Q6MLIfwdWS}<Wh||FSihfBXORRTm=Iu(Ya+^udQ+PnK$`)LX<eig
zYsA4rCq*enmX_Gj>|^)7x@vn^+7AojK1S=I)U5}u^iXus_+vj8u0?rZY4e>kwtV?e
zku8UWVDHhxcFC?63-CdtDA~ZCmh(w9>4#V$7YKU?W3?8o1Li0u8496Ih5MxpEHDNa
z;|c=C2Rfcyj37l$ci~n9>|SU}DWs&vsEEP%L^ux`?a`G#)v7HbTS`77C%3)(_wW7X
z+3xA$Z2J3M__g=@2fx4P!0Zy3U2m!GYItCgrLtp)7T#PLf@1BG10~~y)y3<de%naQ
zl{-%Rn@zfbKCJP1S>wsF(Ld!j4nQG6Ksh6PLz_X+*#~zX2#|>lTa6In<wF~evUXO;
zxwpe`gQH7)5`ksLM?Jq=ek&g!&uH`s(x=);1Z1X$(GvY(BuoBLR^jE16eg9fWECU>
zD+C^8rHk4-AsP+%Q1G}8y!tcus*^k@G(E2C8+UA7K&+0d>Ly6FjcZbLbA8-~$t%>%
z+2)m?ht+nm)z<BQBmqdazN=hzJu1KHhFcx~z79SRZLNPv=8(ZFqcuU<#s_Pia%T0(
z9(n%@+^U3s+`_Ahm-glWK5ErFy^Z3R;*C@lel~aR1aX`^2S__mw@<|hux~vPygxwQ
zK5NcilWk7c5+9?LS_Ax>dL3Bblw5;)Y+Gn4M^Zm{5_lPj7f-zfljZS38r!8t>J-hm
zhYlYS-!JmTL7CK!KfycUp<bxBc+{vLW1E?Nk_TH&RRm8wscXH?0}E!L+i?^Jd5wWk
z^ZLo`>LmwQ^;?SX@q3x&rY5hz7(S_fQh^3zo^SF*{9Te}-V-L{yFmxP({1An91Nok
zwn8vIWna8;XT?u+P`uPXABiLkxYv3t5L6C#Tkt)^m1-k`4b?739DWfSU724c>avVM
z1V3~~#Y_D8TfY$Q)A!Z5nNPlOZwiMtZw7^5zDL~GqG_g!`rKPkIrbmpmdJ;Z<P_|W
z3f!(J*}Pa|AtMK*!@a2>mD%ME=KMWGt4aegq9qK$Avl89Wbd?W{|t|_<f4)-?P0H%
zeRQod->&+32gyHGi`Mu!H**m9xpxdbO~H}`!d$}BaEOd9cS#o0L6%zdNJB?H`~9Ky
zql9`8G(**Q7mHgSTkQb5KBVlFY|S6W(hI&_<eb%4-j=e|U%c`{*&gq5|KRWuzHQz9
zzZww8$7Ubv@%t|vGQ2t<#5#Pm-vN@?zX0vvFbmIdChjTt1tXj5b2)oIYc6JwEMNgc
zP`83bRTV&sey~EVV4p&KEfk?8btLx=*0vHV5(Q$~TI9AvT>Jt1?_yAYd9H-_8t6P6
z&UOqlms!@e9Cg(XB%&bPStm+yfJkuSTH%!VmpcUN=a49cJ3Eif=eG_KM>u}`P?WOE
zhaDLZ-9P!8+=yyej`DK;OdN!_agy^)0VTCx@6Ttb^m_NYtsU!B>ua3Ahy&mLQpg@n
z%cIKSsQf%De`@BBM~tz9;<qfzcswd+SF2U=#vQICD3Q;f0@hg|?|?`OH3XQGY!c0a
zqsWkh28EG5KL^<d4xqJ;Owmj+fK=q5jo(Zo7}~+%ih8CJA;MfFIY8<UAyY@p@RZ9%
z^ZI>#-op+C1kGCZx-T!!@#3R_i6|DUDg~qW_JWkWZ)ys-=Re9f>PUMOA)FTwQ`yHW
zsAoOt7J>-82{qiwPx~2UzV%H~Y`4qLXOnu2H?#unz7MMzh=;(~7y0^7wa1Gwl0*}1
zz`H#A)&kV<LkdQzPr`9qOKcP*Q(jsj?q#>Qe`vEM%Mu?P2HOlW+u@+djvFACa|9ev
zRE!i{%`=Fm<!#=hE+46_@q`vk3a}P0&%h65U?wm~*6E%GXQ`5aNK;UQR}-hKEvMt9
z<5;WL^r>fi<H6W2x@Q(l8dUDoC~*1-wt4MGkV3gH@hs+zWBYnN+{j(p@jm#EWOlLN
zXOr^%u%PKu^1KIy6`@Cig6m)pd>s(QcH=P*cqH1=)~0>Uj8CV0t?%AdH|&Oy8uYCX
z;|~zc^)RxY-2f4mbBh%~0DSJ;V&Ep+jn`rW#%&mjF}zi6t>s1+vD4(Vaj(5<kq}e*
z98tv=G$pC~7QVd>W~n~(E2j1d)p#ZDX&85l9`{Tbb3Xz>@s>OY_vJ+jMK6L1<Kk(y
z3}xUU_WMc3JR`q>3rwTQrW-C2{)E#WJM`X|TIf9j3xeqEyQ={Nq&aAMB?GxKNU2F*
zOsoxc2C@ykPp`<Ib5fM&C@BnKNZmq9b%xV6q@%&CRg?MyDC1+mm^GxLKx>XqZM{4r
zo@@L%^MQQ)sl4A$$ux0%a2o~Yua|({_pUHVbPXk92(n^p2$AkFGz>YYF*GfeKJw=`
zqd0{ck;lxYS!XdhLDPG2iuRPHF!{V&U}JN+y!Shjb!*(}S|zkkgL-aZh|#gu?XFKw
z+tlw`1gf?5w38B{lQ%v0a=Ll#<0ajm1F@SA3p?g$=6imrXJlTJW6p3V__&6Hji@oM
z>S?b{(7Fye)1y6#cBZDd585uE@YA4uk<II?#IkPickk|p`svVVf}hEF4|6VIpL8e9
zHl@;e9NcU06+K*2;j7u?Ft^Q{xD5o%e>)gaoCdnl>`S(%+wE!6UCk!?{gG?-739s+
z8{3b5?swxE)fm9ho{=TWR%ivt5>2mQShDr51hOFcc?n<XLHkQc-P!(|>5XYRBbMYE
zhEHVZ*~5}A6!&a#k{c?Pn0DcA5#goj&L5pXb^ZR}S#n$R>mH$P2OJ%wbzDt3pJ(m@
z%|o~v24RV|yRZ5Q$+rQ7?@{j=sQN|mAik@UV63>Z(3Su@!ZyHbm+w}*H16K5&ALLp
z8Z~L~2fjPWKgxmGXn$lc5FWJ=G_ma6t7TB)A?6#A9I2evCo@!C4vM#&(Cm%du>qUR
z(BI=}eNM5o-9q!<>jYM0*<ri#ruk^zH+B7i;21@k^&*e~c#J%m&&w<L<7+I7-Y4)=
z^a&p$Lt8Y@s*`y|*#y3az~T@)>#bws?*IGuU=rkhU>+)zsSk>8p1k<_?W^b83Eb=g
zBhf(8_IA-g7F|q2`xL_}-88fo$z9p>4Tk=8Gh3*f60Q&T$DihonOy@~9z_<mh^kf=
zcj(0eg>Ykdk)kkH9~{8y3Cz>seGey$0@#v1fr1VbWxIC~r^t4%BUQ-X9!oVY+?O8c
zRrR$S(N~a8*Y&}YG{~+y;9~3%)9oTmNEM1M@&1bp0oxwH_d`d6_{BCdpLYxYR-_R)
zvhqfY(1`54;QPji&u|?2xn?D6rlI=L-y#AUsqMVBw?Cv8<$tGi7F>u*IIW`6hU?Jv
z2^lEau9&H`r{4~)BHjtNB8?MX1#QEDbPjx-wM@QPXpSjxr=k1qQWhBd+uRP`bC>D8
zqU|-LfAGDi>msoKK;;!*Q1=h}`!{<C;FCWmp_Wxcq%b8u7Av9hpXT-CMLnx>uO}q`
zUpI59Bgc!gphf`V3ss9x3`ZVnVVd#hoWj+g4F(@xqvn;rFv1f2iQ`PzNv`33B<1IA
zJ;gwe_p9B1--mZR`~fy~XXX5)o~fY7=mRqzFV9e-F`+zgL(f^diT{~Raj8GGY;Z(+
zVTyr6^+d!wKxJ3b^BX7Z8>W-fdRdld+`?FP3ufXfWKVrT6hSAXzKtEtJn&wAQf?p`
zETl&22+k8Anc;0%DwfqMu;OAXFz!Co$nyo~0e&3F_O4lEl+_S*QXxjz=>T^cHXma5
zab)f}-1BM^e8*of2JU(+a>P3nKf*P?D}`&F_w+IM5V}sfq};{CnEA&bVM=n2%lT1x
z;`oB;6x`^jy__x{A0^V{68a<ce?A$bCcu>qPsaPU<ONd5lW`!UvUBo~mzAWtk8J-|
zLQX^!D_R!W*a5>hAU){8$=LDChq2jt0i)rp&3gla))7&lYpH$ijD#=(x_(>ESv1?T
zS&YRyQc|tWOI8;>F0}gYg~-hJK4u&X$=W4@82GTx+Hxw&`xZZ5_A*k%2CqiqB6~g$
zGqRMv2kqjR$+YX!GV2s*d_Mr411A9D>3vml*H9}3{uy4qaNoN8^$5ymIM^Zl;CO8A
z0NT8|9l=@f`V?moGI<;nT5ljOESk0U6-6tDmtqKuG%9xR(@sa+3IYZw5d-9l53u6~
z{X_ME1YraKW++hFHIfCO5Ax^4oDYg~A4r(F_r6cYLoB4Y<G}L|TdvrQ2G02$DSi5q
zVb<RZReB5@3@v;X?>m9xC%e8oxmxO7V2t%J;#+ucxE>ZcUTV>?2J@3vm>aq`^iuG{
zMR7ORkT(kxZAp$M&f3HttSey$bhs^*cnZtfmDq86#$etoBm{MkUY&7P!vT%;ul(<i
z3buEh=S;o3kV{IHi)Y20lTO3P75hQgaov97bIJ9>;!>xuuja)n7(<IN7q@dIBjUGs
zPZm;pA2H3~k|&pS`}|o*Xo!wKzFCMV5Ia9fl>-YXRHucK&1mC#ngb#GIC5cf<iqFZ
zR?0!cI9ZGwQy^p=G)cNvslRx4?%K3z$meY8GKFg&zk<C1Yx(tS87RS}6c^&2{;9U`
zuQ%VqT}Jx5AGd>lwL6%k#3RJV9bDgI3iehT=(j(A8ig1wf)AgfDR#yp_t<6mmAha0
zuY_=3Tgo#~G)cg(A`571^-EfEF@_X5<h57FcDjqXj&{+9&F9$g+27oYd3+qSi|z89
zBd9RLAFeF%z4`2(@|CLLjpzWlKlZn4!EqL$jSr=0T7hK5HfekeP3udNxlwZtt_Bta
zTA<$DUl}NL@z^G8S%8gBgGNC-fH^WTBq~hc$*aOHL36%-F4<O0_io-0kK4_g&G|OG
zX*;<lZ`#gZzi~q>eM>ThHqFtw7w6vGvw1rAl6;$c))Q*ez!bT^>733a5%MkCGVlH7
zR>;DQzq~EZaQhdxLmh7YeP-q%NDvUSU7rNVgayfwk%v(qrMtSe8Cu*9CA8lMa-PMu
zv%0&eyzInLly|HjlqjSvLC}VfQ3HCv9vo6&5!>$V2@AVOApB5U<!uWB*JGRZ-K}3^
zVh7WjOGSRU7airx7x|KD1HpwB@Gg1^vI%X7z6t4+6!R7+>m{7sn@caFS0vH2Awa1H
zgarR~4SHaCH)g$UmnSfLGy&eC(i%ug^^vSGg_9R~t1TPHi%y?GLWDY&_9>+p%gp|_
zA<|3M<1=*{#EagfRxSRMvUz+y+|!POvw9IphZ4p>Bpq!CA0sY6KBsBmYBT}y(b(Nj
zO`qH#TeMZX2PggmDJk2ABNH&anqH|CAyOA)a19tSGq;^b0Vb5L6EC)L0QwyWm8)G|
z_Sa!Xrirf6Ux#{Y+e*L5#=gQOD<#r7$cAU<OL?X&8cNpy?l1G|90DzH!lyVl;%BR3
zUS4#$%c6MZa2>+Xz#Rw{2Hh^LoonBLzrxR7yA2a>IOOKlk9ziu&VctO!W!|%)yhv(
zq6@8?nM3Cv98P=*h8}ItSb$#(ZVd{-8~2yqar3jh6gN4>1BIHA%|I_eCZD$9tCz2z
zzj^-WuiifY?(65@J%96K-vB`r$^(HxF_7=R`qPs<kO+|zNOn>i#}wiA8gSc;F3ui_
zIMBUfX0UzFiXyUfFOeCOYNfDB%r|^r26$IB2W_jYlwQB-Xx(dw(y}$~-yEae*xk5#
z(v!vNvziW$K2rK5X=hJ;G?d~5xiTYF3!p$O8i1wNLB9W0K77MjwJ2LPgm25m7-D$+
znL@vQ3&lO-zK|LYBaDnOtX0|wZ;7?RBv!eTg++vM4E(0q3>|mEw2d-|nB8Dh0W-$l
z^o68ULIf+fXoz}Rn~EF9u)=kv(|h>)_FEsF1;+EmLj;9E*f6XMe00kPA2EI-?cUK9
z<zbPaxxlEf4zeX9@^YcIkTlgWcHI6NG-&|%G5&W1U-rGE59(WV(e>TmBlvqi3dpsd
zJm3;19~sH}8>j@<%R+=DUVps*#D2Y^XCh}(AMTPZAfl6wuV^{x^yZdd@}idC`~nwB
zfIw#zgocFBXxwX{5A4^ciGgUnV&z)&=uaN0zx)!v`{PHnslfwHU#q5;OfU1KhI(t4
zTBnM}bww2ud-JyOB728NO(`D?|6mt~Tyo;22~Wrk{E9d_0A@g$zppIR7wFL0i_=EI
zQF^E(V5leFPkR;yk^Dj_m;{OjjV8n$7HB`bq~6@A!Jk+36LnSiAwc2BaN;xXrxV+5
zk=51<dC!vnXc5g5U%EjSZD;5|M{7~@^Ei1i`^nm8G(V=AGspc_xo-OrH&J_Asg;-J
zVt8h<0h^XrU{wKeZBd6g8AzNmp?PRY*^)vZ+EWz57uc?6A5FJ<<b`3qIj!Jbgn>oL
z-3Q;3M2x5PaW%dgPpe_^!=j$n6lwq_a_nxZ=0b9?J(*n<%IS<~E4qEw;OXQ3syS^_
zIi1S!krbf`08Y_Gg7J`{D>S3Q)0$9DYK85thn_)XU2jkvK-uAj_&4%6@uI?ANfFQL
z3~vh6-S8XHTuDn7h;}vo7`iONRO*Zp?;TZ(i;6>}qFpB&@#v>4UbMPU2k9y(^fIUM
zYtDS=(~G9yP@5xPwSaIGd<*Sz8@R1^TFD2F?&s}kb3x%Xi7t?n7!IM8G3Z;10J|+4
zzsE$Nt_qLbU2)Uu1T`lR&2>i8auiBlp^7L{!sA}h&-m>b$kIg=;`*p^U!N@gziQqL
ziW4voW&_lb_ty5TDkGY){viX**PKp4{JX<fEt(+IEMCZAb2EN5Z;srn_NtgP5H(R!
zP=d&c&jl<1xba`W(V~D6{s8UwwVuHo6W#BVqqdnJF@CzoiDSpeq&=i=PbB8@=YEG&
z-2dGn><@pjPLx6(_CA>sAnd3W4~a}R6>6>(d9IPjcFSA+3O}peQnqZTWH;n>wFsp>
zBfV+6i^^lSO=;6EX>8`=mUVlqwL5oZ(L|RkKXLV?$;c>nLM70Dg<rHGW)<K@V`-X-
zoRYt$w5~a<)-zwLrxGVYxtG^<SHVT=F7{%6?+L)qE<W~(6vQnvcdSi&mTdc%%X&It
zzAulUR9RK?%u_hHaQAZV+A%3Ue8dk-Urd&0!x(Y0okPS;;%tbc^{R2W8;)xT*-B~K
ziFi#^j1eN@Apr%%ET2_#*S!!fc#r_$8cPqHEfpgnIqC(OpJyjiz7O!>A{z>w(v>gi
zRSj)*#b0rpjE9=qexX)V+g5vSshPQciS>TdFs~d#d@Kg^0oFiu(wC#KkiZ^(4JhyQ
zk~kkur-AuTAaBsPLZ*oS#LF~}BtusfF?t~i?KhYbx5BWfu&fw~R}2?i4_9ED1+m8`
zo-QCO=b+Dl$a+A3F6T8&k+Ol*Gc{hQuilT|U;Twvuwe?Cpe%>$y?M`R0~*IT*0XZK
z$=osO5%o_YKnC>kS3^827jCaLn)=~b1cluyWDLofdYT=oC7k1~IspEa8>9qXZ-uQ2
zM+(#4;01v=KL<&kFfeD!cEOob#%v5vgF5vK70%z9frhiaTr|5OO^SF;Bl{q6QhxV4
z^-;W##9xLO4dl<rqy;MM^kcdz<i^L_A)05=TGP6&ds0vEi2&=zBoHm?>?yOMvi^jW
zW8pbNraJDqFl%PGAm?zDB+9^s1D#GIM~uI&7Zyv7@k0hBh&&n6NS_EVZiEHWtKahH
z-@bbJ{hKG>y%`l)fw;MIh*yVcm4NEi6a4PZ*}E{eca((ZyRZKI)%P5j`;OI#0XW6_
zWuH7&tb32miR2h+>20hsHP0+ARD#-|z(uDEaX3+kow6r7x{KETddnA&bxOe->{~j_
z%TiEc3YvrDIT(+eM_1l-3vkU{x>NsxnlmM5dmaci4tB6@BhE6E6$=+f#d)(UdB=Q+
ztlLs;c;w)d(RmvOpDvYmuG2`<??LW%b&5uIZ<;((m_m(!1~a?g?y6e;>3&bk0wTtE
zlSsf+Prw&Nn+NCc;Wf)@mgMm`FHzv(Z#GF9VX4Npc#lpwa6Nm=L<T3+1qh=B8kuUD
zN1G+nY&^DSzlv>GfYN2BX)L?!>(3wUkC_75(nZ7brgEzL{Z!?^U5Zq?!}!TqNEoB6
zT#48`<;uJ@)?UDw+yiX`dap-A_~$LO{HAFf-##nPDl7jZQK#d!>f@_d)8z>!eRj15
zMb=^>JCFltaM*Fe=>0|#$#B;6dn%Sk%3ycmsyjL_Xzt-wT!&TMs)wlNPC^}Iy!!34
zVZ5QL9&bhfFNRp87-8PTU!q5u9=T<Zh4Wmu8eLS=&XtA^1<V9JMZTy-26Gc7%r?tV
z#IOcbZ4qMlF*}4RiCDB5#dA^03gY>oTo^YMjwloG(TqLlNKB9-64Z5vnA;{;5jhY^
z<q*n=zLQpiLI6$!Cob=9SU9M~Mn*MD4iD)>rqPXXUvIo~-L1B`DZ5@Gn-Jw`$Ez^G
zl<}qxC{}?t`05m-s?E>syN`e=!6!}dfnFjD7+5Gan5WGQ;b@bxD-AI^)o0Ke+BW57
zwoUk~@HIAFRghIJ0Fo11ljiMNU7j?v((=_TTB}<&TOb+Io#Y+qKI+*#dT7QE`OIZq
zzj#>OCm3s4m#jr@I<567G|WSjrLe5+!>_%5yyRFW66(+#I2rd;&tz4VHePJ48lAdN
z(CXAOHSQk#s$D<?Xp&<2v=SK58^pu~Bnp^7_OUpf&_HxRkf9-@EkYtfaKzxjiXO<o
z&XJKe8obO^MO^7AX5fN#R%U4iKmrYC=%2oVVd{+e*o;;Ia4(?5s8C;f{xe4=h-8(Y
z%VX&Bfmah%HEE*2umi|6bIVmZDUU$cc%=+{%pTt@{+&a?#(ARkOgcu_OJ=w?{5{5>
z3<3|W(1<h~yWO77LqLK)TyONhyW#u?%~;+)d5A7V1I^HB=VCK5bL_=9r~UhU5v|f^
zMZ9Ve)_)d#2))E7*vI|}ku`&f5Pm9K_f2DCuk%E~_VqacB_rnUeF$e5>}0xthHbc)
ztb~W+7P+&vp8gsTGLC-tk_3~eK-~r=l1=z(+V=ATsTjWb9WjeHzr5Ep%iP_OC=Yq^
zl!ZVs)+T<zRmya5teeWiExLMHb?T2c(lo93BWyC>KSqPg8I64Uit9*y%YJ(!`iH*2
z2_E5pQNbIT)UqKBU!HO|saw|6)0bpk6=&}3I0!-De>}Ai?k12AHS~2<gWOg_*Ri=E
ztn~)rL8y0X#$pJeEFAa>t8uT%o0tHNL<*R28DyLw2!;!iDt3?l7K1Wki)W~|IwETV
zho?S0AZyo-CC@#mH^7=f%C#=6TWp{3qc-^@VJ^nVmSEGw!wd>0qN@!&k!74;h4>Tk
zRrHw;MxygwoJ=c@?S^EZ|L&zED(!FFv_5KN)Als1v~nA4RDn##l|%Kls0-{xaT-n;
zx`05uA`~?#$sAh{5%LTJ0K;;ID?hOM5Z8zURKt)zD>O@qK^Y;^M#3@%_z8lCd;$j3
z2XW22W>9zacIxF!j}$J7mr`$95=wVjuoYiP**6WaN#jNa_9q;|m{fUf!%1aIAJ&Ru
zzGI5xF$JpxuFi<#k~J4*Ex+Wny3vx;K6G&Dd7_Z4xxA-Ly}Noy-3uQ6^a2{XR>joS
z9N!iUdEGp^ZKVkc<>C95Y$$qh(1<Mlry}1Vwzuy9V}wH@;P~U*V6GMOTFhK08J5wQ
zh238xJdQ_v8jR-j=s+qQe=}N|RU|FlW=A56FJ=#}CFl#aU4`HSYwf-27AYf{fTRo^
z#Bs5b0=h50tlaBJL>D&d3&v!WD}$Wd;Pd6q4OD14A|#8yeI_j(WNfc5%WG6@y7~8d
z+va+gVqnP~7oydPOd~ImH)UGzuI}frW+4S|v(!=Q%jrdV)k^O7@B|-{<?WodXP{cp
zEO5VrW)6}SV`BBQszh^dHc_O?a(jZ$0@B4rAf*@_%JL_4dKoj!)rIlXA`~zcifECD
z79u7`$4b?eMI#ys_@3TL>5UP0MXjl;%#{}PMFYdW;&H7a#t)<UhDfHUP~0)Ij$mh?
z=0R1nNfr>#D7S10AUt*TY-R(VtO2D0x~(0%sb|^ECzGF+Do)s<e2>@#xe??NCA~fx
zcF{?+_78S+{#n}7-*+_$@KM0}Zrc>qzQ@EwE{)Kn?*o%}X~&Xozc*2PzGoihCLLoN
z-E)k$idK;NPNBP5aaGZ4>@;$7WqoG1Lee*ps<K$y%PkQ&ncAA}_Hsy;syWpUza`n-
z^?>c~xX~(WSMm)qG~V79*g{V{L8@7fjiY$#JQTA;CXa;X1Y(xRGCB%5<MT4e)Q_#6
zGzZcF>J6BCB(=K$&Eq4JoTovqMHe`)8qdP}QX(H^+VnHq7wnTZ$dYn$9o81Vc8r|6
z6u%{pk`B$O_@kP9!p6VIGH1a5Y~;ikxDDtep{?y#S^_MHSgUSrZ+6UIFQ-$=fRyv%
z^5Ph-wchI_qbAKBjJ(C0;UJWeTZdxN8XtFRVq+`J7K9$lDcH9aVw8toojzdwoE_!B
zL=c=5mK25FJs78u9hI_>yIz~N8g?Z-yS3Jq7%rWj%cq<{ZmVx-EWzY>sP#Z|sRe@H
z-PIq|uk0gkogQ~n=mEMbMm{?zQ2g+Vp1|QZzkW@H#i@I}a4rD4D%@|1Hm-fR6Ksm)
zNZQ^nqlpWjti~~XPo5vv6(&*OTc?<CWgB~Vt@2gIq~7GaOQI$~#GE^^<nFvOt-Whz
zCA2#rt)0%{<<-rZ31@ZAtH|TnEc6<G)axk8J8@4daZL5T!0UvHIAn&)=C>E<y~jGT
z8gludVK+c3XX8^4>|nZPu0f7rASQM9r1x+e{u7~j=XOo=c?s<OGhRRxhd7+khyzb&
z^#n9l9R*5<CCwD*;QP76IM%WuKWrT*fmYK`STTrD%4^$I?5N>S?*Gu722q0WnzCoW
zOZPRWM8Fjo6d}&=polPXhJi1zBTqBpxYmKLXY&KF{!Q8A5IHwiIbU;dW;S(go9PF<
z&*1w@I)EX!m|OJ4<&fh!hxu?1&}2xqOrbuz+0vFDgf@rykB+st2LGT@alL|2+mN(%
z6)2ovFWqJMx^MJeu8x<R?P<g0AAHz$ai|3GE1U*@QG=r5s1nz{iHZ7PuS&WhLFRNv
zB2Z^8O&O5Rf78SB5yFoTd`NVU4FpMDr+z}2N$Xhr-6H`Hl;fgCN9uCMM1WFm^VrBZ
zgOmA$hKPMX5qt3yu@?y5vll-(l>CW<cKj5HWfVHQcG>WlEZRBv>9B7kCm*$89h;_x
zW4BHhL{qr+CTf`b7NV#vvilhc&R0nc5+atA0OUg3rU+mzJB=(AQX1#qK|JKBhJu?C
zK;KqKS6nBGJG(xMK%|hSfw*3Ht{BSd<#DfLfP7i-1^v)3gEY$xO}9kj!zY+zqMlr0
z;)32aE755L2k!eJ1<3HqbnYb-t@@pzQ1~k6j(U5+euHjxDNsV-f!()Ihkl20fAdQP
z{$L=uIYia~^1CC3#}6%eBc8DNK3ys*0d+lNCZ?G#>T}OKoz#%06o-<AHZz}XXpUT9
zjyNQ<eKmgIY!@2>kW3rp_UQ+Rkt2{T8x|A~5F#nCnbi?6Zk!PWvbTUCS2af+p`O7T
zkeho?z5=pD?Ddhrvd4pa@y&NpvNCSwGqzRp!uAczvp)8lEFKp}fn?Hn)*lrP?z{54
z?T`dll|tT8h9+KZWO0WSBcY~ksb>_M-z`Zz;$LNXWgT%S@hW~6Eg%lV4F`wS!zN(b
zv+dGtkBn%!$n&A4;(SZL;tJ><w!<S-RSEvY2FKZVXUGinMX?9Ok$yZX5?xmkc1*cT
zu2Lycg5AvI;^81G@(%d{1!cKHLgk=%V--r?qc_G8hH4Js+)E1fp@VGvI$JWS#`Re_
zz0syTqc%Nmo00h%mo>G}+yb&!xh>#ddHdpX?dzxg>h5|dpBe466)&okhrOH!+~Y!}
ziBwj(1L_#pc0_+~8HFZ$ytC`b>zABzW54ECii*8rJ*)(pXLc??&X@49UUmour8Z#g
zO-4hIix%Ae&z5Io4Df5*OKVr}%aZ4l7v`qNl)pkd`qJMd=j-g3+ecytAFVJ57|ggZ
zw4NhI6!j4Q<e+ydUY(;*zQ!Y}0b%Z>#@-G5f|WDbcBC_kT@gs=qlYvoA*dY^yZ|@6
z{gEt2o&@BU<6{>8@=Gwo?%AS;nN&lGqnyn;)bA$UnI3y__~cAhC1vMryF~|~8zE6v
z*agG3S_$oM^G0t|>{Jtif`}CjM|0xX5D*m%*=C5k1geus4Iv&V>~HAFA<vc;go*WF
zdBk?+U`FWR^leRLI_PVH4WZQh2v?Gju1hVH53nG{l!?>Ng%uD#?s7p1no~}2rrvpL
zKqTh#7RaUz1KN6D+)46VrZKuJS`auCz$QI%)BOxL;j#Pc9)5H0Mo8RU&qAc2Q?B#{
zR)<QDu@Y6kpz0g&+$!9%h^}3nuGd&;N2%U&me*weLBTQ-2JX(C&@v~jUmq`4c*93)
zh;5g^`cFClRj(_eAqPMAwqo{dal(^8b@p%Qgm(=_)H)3h1)X07han45@>@c)p-KF6
z1Kap5SaMYyVqR%({H~-CMGj>YtVy`#w9{lfGUn$1U+ONS0$K=mP^2FlgVx(^6BF0~
z$s3G6)*p$4#DoJNd{a)31xkPzOklVsFr{CbWC0Q|F5(jdtE(7U%ftF^{N1Q@2Pz{0
zdcXQKo&zzqd!Z70dVSyJeRuy|!GA6vz+dh^@Cm-ahpPwX)TUZ~HGZ2DA)a|p1r<<s
z6<7Cd01#k|m4@N!f!`#_*lHHv*F-o;pHX(RyIqYRh%Ky2j<zXH7h5yjZ~=^w3J%(g
z(GF?Ne0U){*Mk;TkLYe^%?Bzz3)o;!H%%S$b=`2{u|dt{{lu<S?fd1n`+m7$-_g9N
zbMBXR<1^80(#cC=$Q#YxS~*?XeK+R6mm4;o)4X-=`{maAe)&L$`03bqZKxBOd~C{E
zw{d0c@ifWo1idLA;ok7~{k)oLO;*6$=LNiRX29)mfSw*VOCFdtmDof!Iw;vKh=QxX
z2`#REO|)2(<nUhzp=@W8L%+NJ&|luS^mZdb>Y$O)!w;+>iifmJA*}uyJDh=LBcm7R
zqB6#x_u0{RT-6l)LzvHd)NjAPpSN;Qb=lMbKqumkAUcTIM{T|!ynFj(LHXX9-B#Qu
z16tFF5FyLDs>ZfCuyZP0fPfnM@B3-}r_HpPNA<_>EvieycviL%a2n@u0tF$Ke6HO~
zd3)qrzm&&FDq+ga$$#HZ>*wa=zh~-y*)g|aRG6Eet&*GLFjqy*(=*}p;*kR_&r1&f
zSnCX{%FYA>OxDLrWJ_5&M9Qjia<Fep=<cD)AQscWMLk<qIXV(Q6nt`5^BPev3y*#M
z$d<p;dzAS;Br5o4;CIp&O3rVFUkrFZ;h$IQ0jP1obCN6??0^Oay8h*!K)Ou-GR;gY
z)5x@8O8~!W1HCN{e@Efi4&ti>@GJX~kZxejFJtijh(zDM%)!nfwJ%=fLn*w?$OB%a
zfq?C`sD8yl_B5HpHgcP6nur?+ZMKoh1bGZQFDkKRmu%+KieAK9ay)O^_KESF1ov9-
z<y~2E>NfHh6Hp}?&Xd_h`L$0Ie-xIezKN@P*W%qEK(+ApBMG(y<JjF^j%@@**}!Dp
zp7L@~T)9u~j+KQY*~&56SZaexI*Lp94Aoz1ff|ZV+(%F%q2k_gx@YxdGOc#DmzP{6
zl8<Ql0@o(P)dKau0;h-wk40c?*X!S0XmMp9|G)kaV&MUAe6`S!f6PE$DDyWx9M^Q{
ze+RaeOD=Exp8v-W=%XIluz_1XrTgq*pV{Ak%16|d%`9}Ym(rTKehQ@is2A{Mv}fzy
zxyA1Ps6D&<m_6Hai#iTta_CGT^feo{-t#mj^gzaM>R1}XU^?9C+H^xr>J41CY(m7Y
zfScO#-&_5!dj)IV?HW}~tppgxBq%WwgY&C_;vmc=TolJQb3QQU|HmDs|Nh!{b*ve@
zD2PSPH7f2$5607SdMs@N9PJh@vWD#*=IvtMyw5)4VKHBa(rmlz)7rPQ4{Y)MdZUk<
zI!#->?EnwXO}u$;Mi#(!`1><xEJqBsCVc^0^$73eV&S`O;yc~#5OEvUBwkTX>~8P&
z{UCJchC0mkvjMbR4{NOU?NY8~DWy_)8Bn!ZRnF1xc5Y&$q!agyE->H$g+J40=dS)?
zqcND(jR%pt2s52_+F*b#U{{^7&OvRn4O{lPey;1|d!#nLGuNv(^qn@dYI?O>AO9+w
z_bYDE?RMy<o6_COZjndKjgBvpw-{ce(G*qJpE-oMzu(#1ZUQ?0XaWn->F|R7vK+sk
z%$xJ5qe~D#_w4RKXbx>rmBe~mb&JEU6wS@9WADCRu)aMt9WheSo`A<65&!Mys#q8$
zIcOw2lm;YyWg>rR_ss|^#A_yHS1+<riP8J!(A-UU?O~7!wPw3!&_=z+9@-p1DXz(C
zlTf+6s2Af?y8eXwvuor&ddb1aAS49e@(zgc5k7Kng!lU~9A+xJ;jD$hxmHH&>a4nE
zhcqNJH6|zqD1|~}m#i(PM)zwsm@PmM(=oas%hBD7;UgYp=<)h_u0H8r$O+QHTV)J`
z2p`OE?VKjT_ynIXA|Y}Sd920t*@4f71!Tc??zqPS>DBg9dy?j9=hB%Gf&0^}K8B#Q
zdVE4}2g#t#7sZNazW*gzDSs$NmgP$-30<%S^K#Zsaa^O~0A!Yjrd(EVkh>$gf*T|v
z^-gI=WDp-oyw`^0yNLidyv_ZkmsrDP;>vXL-G0JAq|21Sw#nT%Pg2LT-#6C}2zBHW
z2+@<@x3?o)10Z=6c@R|6v8$z*cc@+M5Rk0jS9dV9MuGUG5R-B3w%^d^dwY$7ci`>L
zFknUUTK)syF4qX;V^MSmdw6Lr)$~9uZ<yuWGo0p=9CF=?HD7FcN)o@xt7yz-@?5w9
zn0eJAJOZ~JgL;{m`NhJ_k6goKkiW(v?%sY8QwhXnHnm>rp})P#ViV#{O$@^SJJ)>o
zmUt`1k)IfC|3ODTEZ|2U{7lNnHCTI{li+vU*W!Dk)UubW+bRD+dy)xT7}=o3M`c}R
zoDGf~;bdB;7x}*F`bop&C8ygj4<%veZ0#O72R<FU4(B|OB<^9;R-OyV3lcjc_H~U#
z^u`09K;92UDYpGcRDA4JR~Sq8&ALIt2i)e#yu1KG!^yl^&L+KVu&BV|ANiWdv#)4~
z14<KWVkJd!q+n^H##%SLxE!|ShpHEaG^(f5*Ndwu8nxKQNxknuP1iLT3wG{~ZZofX
zxu}uAUWpx1M|cZb8O)LtAt!v>-<Y}zEgRDm8H@sZ)<JVC%axk7MRW|0-A{ZG_7)H+
zWikBVZP$!C&^oZDk+#VXD7M2)R8QzT+mC%%p><+KX`N1Q;;ai;3g&&C_D37GgK5qp
zs8JV}Sz8xovbCccY+5h(J&K;!<=xib&xM9G4t{QSFGz*iJHPMV1`h`A1?=!1L){p5
z<PLsk2P(iO`aO;gR788#b<%Ovv>~kO!qlNhxg1E<v8_cX2yEPXROcwN2Tgl6hM;ky
z)XdejI;u|U*{gDK8qEU&a=vNYDh?gpa{s+bJA>i}So|O^rWy7&kPCD7be!gl>X<|>
zn^eadA*E3)Uk&{_#CbV;nw$w1cQIP^tN`u$a)e-q=#j>MU)^5~x~e@;)gHvv;IsbH
z-(RC;^MlUCh~G5ag&yx>&43qr#EW#ukwDQ4)2M#Nq|?ase63VEWi3cm)vP^e-r_Xd
zii&L0)tXh0tsibeW~tYd5g;q&m><B(lx!-WV(L>nm2T%yilj0)c6PI*TGrBrtAC4&
zZ?E4^E;v19vBpg-bhQ*k{6X(0KB4QAVW5q7#)w>TuWI(YSyx*2LFs}rXM0V(EPa$s
z>vhuLg57vJ+xYo%wQd5)z-=-9t99cSF8Kx%2$u7i3Gfcb*Jpfr#z?8E+51yfluI;J
zO|Lg~xsfMvJOC&_*W!NCrHYW9UTE7>1`ej(#e!`ekOL2=HbUxRhC5!4F&AeDh8tHl
ztTDY{6?rJ_g*l$q=U4|R92VxgH=LqKV`H9A8<45{yg8=k8M9c&M$bW=@zUGM<2_)d
z!umbHA!4x>=xJh4B{ns~avNZlDqKlnVuoF);m~rhmG>T5dHdM8$*B8T3qiZk%b8y4
z{{F2lDNG!=>9MK>@tBg7O^jAa2qJo|L8TkwqL|7xuppGe(BvzOW3dE9J=Hz8s(BUN
z0H1SErHmx+J|IP8YG+b^begEA!U&deVGy`==C0iDU7tcDc7xRsZfWS~b7#1`03;s$
zXN78%O}5k_2usHmObepjy2c*<%J}f(pa|*HL{+wub$>EHY1xsCde9+5a8GnJQF~m%
zMDWb)i64YI^vG~hJ*yS<L-ObsYf_C46h;bv_axPqA0s1s-?S68=*XK#gkqx{wJRlR
z(v`U~;2>shgS_Zt<AK5!u{3HwDvM+Qak22O@pmQ{@#o}1+YrQuLbo3ru8ZR1Xop+&
zOt7l;nc;tCi&73X_PgJyU&Ei%I87%%XFY;R=;50q5BoFZ0=5+9sH-(GCB8kg+&^>b
zqD`VLzp!Y<g;BzWK*1XbDvbpS3+~-RnchV?pA>LWJIte0*&{@(;<RjwqsqOU9n&*+
z^O(3lkFJXGvIVamj`?V0P6vw6{Ok_L&+4%SAV-D9RxMdESdrqFeN`QH$k{{puJe=7
z`KGSdA^sM~zXs6*%~Z6<4elrzT=$sliRyy5xW#nyr%(5BxIX6M2f{s!Y71Au8APa}
zEO(ehZ?S+N)))X6IyG@ZB`&1|IzIpuJ#-h2!|wLH8rR1)B-ksbZ39Vr7Z7#$%J&47
zHxLJjF_?{_1??jWL4!9=9<KH4X6~3DZu^XS=RjP^I~jdXLWae=#SXcJ>{v^Zs&%Km
z!>cco)4+?baDW@dS79>JL|YP~Le+gdpz$6e2SP7hBwCKHK=^q_N}$#de_$0@uSmQJ
z(;x#TsGG}4s?H`=-!4RHHvTT{?kdBV7J>G6`ATHMOJ*(vNg=bXtX;yj5$}ogI<TJG
zDSzHNZsS>fQZJGV3$s6{G&fyy+v}&^9z3v|2%~tcv*nF+8dY%1l3ryB?*D!>_)UFw
z?v6omeOAp+sue}9-Wd+>omSIxch}y-Wf}g|0-|$Ww)At%+cjSwklBP=-W$8u?@+36
z!@tdFtvCgOD=n_CA%l9$$w8$4s3>Rd739G_<_}!{edAu7RLQ+Fo}+B`sk`2q8KrIb
z3=_{+mwK4)@maQQ@do<+-o5-?mshkMl;wB{$%>I^3>*<_;2-JUX33%hgU3blI@ksz
z>+r8G5GcTW@SnO^p1SPNM!`RO5CGaBS>1wrk?YgaHAVw&9Qc5`eI<XtJRXLmY*^^4
z4GQ~vLww<Ap;s)I)`z$a)E*-6(xOmqAeyM`aB%_O=C~2n950ZeBI;7mgI3Y8!QqA#
z1NW;iS8AZBt{b}>>ucT>og_J$P7mSsE%)?o`QFWfGRRg83qo0_fkQ%$nLGAa!%kRD
z*R}L{#MO|zWrEC?2C;=yB$!0{;)zHbB9&aLd!iri;u`L_|6)zWa@G@*9dX`V6tn80
z_zH{;dOLK4CQa31(vj2hgPWy0z6eRJyAe&eVb!xlB;(e$oH|^eT&cB;cujqj0!UKU
zOb&Uno*ohq=CoVH1Amg$ifi$dIiDstIFl_Y>+!M<SYRY{smoq9jJ)$O$uX%X$qAx+
z@NvZC^wi#%0Iaegw?4es!*aIn%zZl4+uw{Elgb_3s<0D_u!;afKxhOZJ9dEI4^v=K
z1qF6JDtG{X&rQ=v{ewf4D493FN$Ss?iRUv%I_ia@HanV#I8yVzs?Lkbv33}|UyA%a
zhN~tWB75lW^Iqn1859RJc1?{Q2h<0QGeg9@RMf;&!s&<v1aUwQ>QLUazD+A_24<{M
z579zFp}Rg{KK%3xs^CQR&D|M5w&Qty?k@TO(2t7>kE#f0XtAH)<lKPfdeGWcoeLZj
zIseK%oPgXr_G)pZ-f#Yr!-7}t&|<E4{*Bou7d=P4qnKmOaz3uUE6*xb85<AJoAX|-
zvRpuXB!;eRTrPU1aew$zQ_s@w&Usigp95)g*fqRG>CkW?!|NCpRgz&*t+;!?UD$I^
z&19g~V4z_QRPVfr@Q>ZbE_Q%+h3V~1J=wu*g~)+8;<F>e37_{Pj+!5o@VuBq-luuQ
zA;-m*$Nq{^k=Zt!pUl=oNsz6FZ*g18vcIPGLKoRq*N_%%5K^|fM>PCBDBh0C^V&T+
z+;bxHX5fE^2tIxRyqZ?v+q7(naXM=z%V`yeUBTS@#c4f0g_ZpPw6`cB4ETv7$gpJ&
zXUf^QLU7+X4s66czT?lRHAgeYnKfg67%*U}+Wiu+O#j&L4`4m8L}n#>$u18ZZqT=O
z$06W6n1mrb-oiXE-gE~-s_mG@=hG$T$j-HW$(b*AxRPy2AuX~E5r14es^XiuJLx5g
zD<NwUVnYcdBWwflp<t-sKR%Dfr)4d|bO)hrs6kttLH7Eis-RTE(zqQubf7t*P^ma(
zOv5z5z-mt6BApb#R}W3-E;WZ5XLb<p*FaBwV3&VA&s1CwheLQ{x>239idQNplO7bg
zuNF<-!a?cn$i=@iz?SARqI||{n+H}b2OvL8Scv90r8c>-htl>Y(-<U2Vf%6MM(0K&
zIB<)h$Ts$Gy^V}^x9FSC*Y-<*Cm=TlIvTea0-<#O*6)l?oJljdP(jxd<Sji<QUr1I
zB>dX>=#dH*+41q$?FJ_(6Nu|a49f^CeQqj5jO|9lNaV@&$1f3KnH>>++ipNYCFvU2
z`ILl*2;a7}C!vAA2KAvKZAE~(#`BRRh(@pt73vzmC!#|%kS$12*Elv1qg08D;LfVW
zX*2PFG)LllKj7gU`d5?tWfWebbva?VY~XN3VG39-A4QPrp!BT_Aa3d)4ujwo>Z6@H
zb|gv_VaD8Rz*QK!Q`S#3ac`^3YV7Cgn&X7~YeL03rs*5^+MhzU#O53#u<(ZI)WB_p
z@c~BWD|2aX(H(OpgA+!de={?#TjAqJi6J#s(f?Gu@&h)Tew2iad5*Dtfq|PtYPL&|
z>biw%B~7YK1#CisShZ=fK?F+)SY2!Pf`AM}{B?d6CrOr-aC<nfs<ZN(9{?aC87rRL
zv)$EV+>d~mg%dEeaHuN$solkYceyND#OyM1)&71QSU@B--`@~twUo6J!5HwMh-<G>
z4c<)-Y=p!(umRc?;EOpD8IIj^d-^R_2Mf~hQe+tZ?GMTc59DBno(3RNRuB#c#lfNO
zYaeYJu<G}`+J$`h!ILO08=hYsP{)To1tvd+@)*svwip7|R3pIOb^u!~Zf38Iq6d}5
zs6|%c;d4)*pgq2Ox8Fe`bM0akvZZ}F<uEIKPdc>1ZgGVCaJpN0)kVixb0geh|0e53
z+>1U!^fM#Ej?dbV<?7m73#)a+AWt+RfBOw-Q9z;cx8J}-;k8<7@&y&}QH(m5d~QIm
z$iO+{f9~DOiaH{t=Dp8~|MT|ks~^7q>g`)dBo9OLPkQJp2%_d$sn0ww@QFn|PyK`3
zWRo9622M8>0tGcNQ{SG9YitB!eUa|Es}f0UXY1iTymErRx<AAQUwr@}1-Hf@Yd|m-
z^1nk)?;Q{14Sn|dW<M#vcx2QfYe$95$zK!fQPHr##+%ggqrzvxUY7@3m6c!<>Wc7R
zTf`7aH1cGA!lh~2Jf290>YTXL*VX((J+3wh%-+^BOsL^cQT|B7+PK?z25iA3uq%$(
zy~E4)UC|Kl;O&Kq)24ZknvjcnajKF=1AjF1*<amBBx>*W^{krIj%-Y?3VAI#tZo|z
zxde$K^$Hxrv>w+BRm~Bswt|%1Vu(ZqZV(@Qy7VKIVNM1(XgR0gAM1X&&7UvNNt-iX
z&QW<>N+Lz`utT(5vBUN*Wv|7*1tNlHVJNRsd)h3g6Bqy>Ts0YXJQi`m2<8j~@SK8y
zr_HP6#tTr2UNt-!7JLc+a6WPC=8!&u>=6ptatHgX%f-Be9as{3<)D@4=WZp@EUcm-
z0Q{l1lp#p=ggA)w0bqWOe*p*Qh4ionm@x&u+Qk5t(~(|8k>qVG7)~1sWZu2S>^ihU
zim}Ro7;*ss;#+N<fE`_lCk#wZUNAI#W2TF9C-ZPz)aUMC?3g=69T)bgKt0{FpnLL8
zH*+0nm@4yN0+>O;wRaGCrqi9QUS9VbU3YMIKO@1b!=aNC$JtaLaAR3+%Ye7B-d7ql
zu%{<8KekYMJBg>*A5x8;Eaa%OX5Qk?tchym7bWbLwYCl0ge;s}e0Tp`r5m*d^iGR0
zO}F2l<t*NzPU_jcB{<x|gSxq8UdmK$w|ufP@B{Lgz(4Noa=l6&a{?qdbvZSxS1b}$
zdZ;QfQ@Ed)Khn#BN)KRQaTXjTGN=^b(bFMSp!wFdtgmKx{DX&J4Y<2Lq6(1{digsJ
z2k7(^Zn7MsjCDJMW(yBIUmCNKdgd;g8i;VXUL7L*<<#AGn(_s9bHGn<X1ULswq=uV
zSoyM;G|M9~>UNMq2aelZEYUMzSUe|g9N*M~;=)}SGe^rW%GrYMHQ%OjGah<i?)`sJ
z>Eg2`Fi2DP%CFBz_fi$_-Zs<8Q!pBS2ZNk8U|H*KbGUqnA}7xWnjywHtLWN?OhQK$
zz3x#m;D!f>?;LMI$w5@Pi)XPoZ%6m;ow!EJBga*q-Q&mnJ$kCUKkBw!I*##=_y6q=
z+7e3hxqN!ZFzkLp5@bSwe#5WmM31?KWr(_+vQoZa&4Ep+V-iM&2cN{kNJqSufZNHe
zy{-a%)r9c%!qs)tnw?ZhJsy(k(L{&qycQkq#KMPWc3huG_BS}9WbRGhI}+za&Kgu#
zNCd(#UxM`hdKFnmcm=H+nFx2OvC^yhjy)xL_y~`I#(R#xJTVKDwuD%|(DZR}aOm#L
z&Xw{*W)QS?`=0^_JGVDBY^grf&9Z%#K`VcdbV{=gSZHh2$Hx%hqZ|}R=o3*2KXD1a
z?i>x<=B(<Wxy>c-ADG3%LSBX6eWNt@*P#R6%M5>DF0>AAAcbUZ*9=$#2}3*@10?_2
z<XuYN&w#4>$+}|v<#(Rvs#6?Qk2^=8-F5hU0;|q9dyM0}Q}h|EoTBs`Uc?~MXR`Oh
zMmez-G|Eb`q&+$$%#{d-Rc_Gmpg!yyd{(mnazM)>gAaI?8wfVajwIq$u%Zqig07)5
zTX?I#Jnm`6VOK}%HPhl+A-e%D|A9wNFnslVg1tZFMek3!v|c6lPHxq}Exu>y0F8;_
zIyhoN9%`1-#5zQ<C6wj%VYYn}e6K_;u2-SHrDw??JIPpPh7n2AC>*=v#91@FCy)=2
z!5gVKSl(;Lp@?cEk}d{TG`4}2AWwG1!HiT<-w>i47Y<D{4R5S7AA0US_~%5}<UPf_
zSc$&l2=rCx*OHfV6fn*WkX9AAe@^b1(;CE&47-QA-)xUbAA0MUoS0*aMt%Q<iGS2#
zQTE2F1ueQ82R6dRcRc}AYK5sMkv2GF=j{`lKFx6lg%u-$HtYut6?cph3WV2#r&{34
z`+_$FlB(+?AG%GB2hW90!}sJPG$&Kjuxx|kU}xuWpvL^>v?A47@zb&m?mFbWClnAw
zSYp~NLxaNxOvi|YA&j3u$I{OZgJCa5c-FOXWsp4Q9EHrKx!!BYxF$V62Hg`b0o^gK
z^MPc$fj_=x#EV7K1Mhjiose33eM>HmPi2+g+HDvZ=6fw@xsdmjgjLgHj3)=~gzSaH
zN7tMOwkcEw-obvE%?;VhGQ7l1%Mkj)XHArb)TE!Z7p~j@plc0A3pJbE$7rm!aOZL-
zcPByd*KP^95!xd>e})<!-<%f&BV|)YOeVPOQGi06w^;pckl#pEfkLND1;Uqxh&F2)
zO13))=6!{cyf1f>Bg^SIllj?s!Ax<(p?W$)1&bp6`yo6I6NCZCm{Y6f3A)BsE%xFq
zfb@JXDJsQ8@{8$TDsZbPswR0W_>%YS6^BL$(Jexcw~5**hSz$DZySwNU|sE)Im9P%
zQaOTs=3eN$W`kllB<q%!=0MUSM(f+XUWS{%d*1O98L&~ZS9CdrzvV)AvrHBnEBO^y
zHS38)`FK>^CvO=$;Df!x;i7rbT!0Y1twLxpNjsMc3{>XXm7iOz7=8D&oWTX?7n4+=
zZpu5qy{;##9RxEJD{!{&E_UGSPT>}6N2asG#AW!dzm{MSvBCYK)5PRQ?G}GIh+MbH
zLpn8&yM}tJ4zG_2l;$6*sC&W}^NK=&BGG>6Ux^XmrzgJA?jJ#ff@g}6F_q;}+neAc
zcQU+`yofjvB)-Ed^G)w7183AocerC&-60&vz#QJ7EmT+4D_b?e7yTBnD~q>0(#NMb
zbI&#Au0!Nx)nyo*w0POVT}Jk4;Ka1Dj{sNgwV1`rJ;rwO@g0iYJr5Uwy|q=BVYG%f
z<zDixzU%?^bv*~y@cIOpO^|aQ;|FZ)_Hm~z96Ld$Cw4B<lL;<HK+GfOqE?pI;}<nj
zu5By><yb|&K^kHPK{nHBSkb|MPU2r4FhO6=ORvAf@1p{#z`MvAf*kv}tKnNm6)vy3
zJG?08GuPkAtU)aybA|Kbylh+W%WeJZbyL5F;->W94{5N~xgRKBH(J&(C&b5oB-z5s
z&nJXWYdHjqfLS=N)s-S|+h=w>MoZKBofmJx=f@rXf<zF_dSp69@_Lvr@^d{rRGwIj
z`ENk0fg|uSK*F1)F$g98jv30xST7J_)MxK~E*?rK40U$XsLy=ZrH$cZ*YNFjcM`@u
z(5jf>UcaL;Tb<ccO%yUf0&S4}c$P7zEj@|rV9I@C&ACPzI24O?-n-1p_%;R?)el#%
zD?9>*^J1(GEfliG^ld$2K06GTRf?fx(?EzA9<`2Y0jpy}D8(2Y)9N;&((YrPOox?l
zRfIa58N1152@VmPm>R_g&wH#x!}I|$t9=-fjBq&UP9kLqm`O*U9<rJQT1Og`Y@n>X
ziY2<CA8zIsvU38ujWmL%gRB{0sya!Av~aO`F0()pzhnGHUyFZ*I_edj9g!J*SY*~>
z(I18%@f_vDFeCNZ`%|YoXm{SL#BfYr>?Rsb;OW0D$yGPV<epO0Cn|njiO4iaZm}GN
zboeJqX-=wH<v4*#J>XfsC;g#4rZfl=x;rSalf%Jn1e$ju_CQ(%L<{>0HS{6)@P#7H
zl)_iL9Io#3<FA381-S{vDQu2@LeL@dmJ#;GBC4LRzpv!vEyi$54Nc*ef$>3=p!M1B
zw9F&iNlo$$GI>R`AXSQWMpuRM#T*udD#CK*YlUnN#rd>cI7)Zc%ex?X@h;VhTLT?i
z-_qaP+)CnySsUu4i4NnV`h(-MzCS+2roTx<Qi`;RKB{s?P0viT)_1OB8>;@LZ4-$T
za&5y?C*3L11a8=<#7cX4Zmm=zHN0-FQE2Sm|AamvZg7@h1$~}sVW$`nmcXt<R#PL1
z<0ZlGz+Q#ci36D+>4Db-0mBF!e9_Cr#2`rcj`b&GwpGu@)8&M`-K9~zXsfAXqmQa_
z37+uvLQKekD9mG^v1KQNd4rMisD?bOsmj42#>xwcXsAKZpeP9Ojw=$bYI(&Hg)=-j
z2!>AYJQM!gYt>@)PKAiv*^$5f3*b{MemSep=!yAHvJFuUjQfh>tQ+mq6PZ?a!v+fM
zn$3G>cVieDxqS*h)Hd<fhFv?*4o6+vtN^!Nkg@$%^>orudK<c}pH7<#*mlrqfzdUq
z+nV?Aad}SmWgZvWcW77^KD<LjxZ$+y-~;};A$nBa8k5^@RA$#SUlFx*j)!b!CkzgZ
zs=XR!cx%*VXrC6rdGt4?MC^Opf!_-1_6WZF+iTS>Me8jnmiOu%cEQ>XU*2s2=T;PP
z4IYW1LVib0v_%Nz4YkUt){#G!3U0$z3~swU?NHBeZ73lunFK1_U$f&2+-iceOG3SM
z8!a|AQOyE$J3N^DYS0UAuyK!qMO+B{Nh4;<gR_#C2KCp~;;Avmqy?}%cg)qOpoU_9
zsd*lFI{8ktxc|;rZ0a%{7ams3;ui*btDz65QQns=Smk998CfvKWPBU3Z?d2@5Nt2>
z1H@(yfc$L`%a`mwWAIu$Qv49v;RSy4S)nQlXq%;Fh}3YfUev7{1A#%OD%9BFiK}O7
zC<R7uj$nC@lY_A4;M9V@$R7xo9m5l$vyu#4Ay90*qSjx=w+5N6y*(73m0aGSacZ@^
z9$nMcaGJ*+|72Ji{is?-jE~>*HpkwK$BGyD36EW9$yuAEa0>@Po8q(84Lq%rlOp1Q
zSRxnR{@&uo?nA$yCV<-#kl!H-X4}>|0rD+j1!?9jn=4yZ4Pn(!a>uxn<Te)Vb%t>E
z8Hi0A1BI-)2K}YZoJfUeIh7F#XEaJm=yO`O0Y_sRh%_!7EbJ#w;;`suub23mCcE^A
z5M{!gdt!hM3^~~LyxRc!kzrsk6wG2%5)n0LWi$W|{U)9kzyJKc0H%vP=|_F=m_?rs
zyY63o5daCNW$&QzD|Cg7OGSM7i(DscTh|HX;Cx;k*Oyg$nBPLZfh>Q3D1;M{Z^-$<
z!6;Kc0Sh*(J3EKbPJ4US>)*C+X{!kt-&y6+_1s&iwacSd3~)sn9dAUK5sh$w(l(4j
zhf@v$Bx$71?X0RMVnZ9c$H`g6G1{&2;ERWmZ&WbM4c2@;Zyfqq%6s4($bavvu)=P(
zGCg?Yur?SKh+^32x#QybLfmM{Toc<t<x@BhmWvLzlj=c|32d;<R9g^;YgkKbWT@6o
z0}$wmH>WmJo;T;frqG(lOOA0m4}<WJe(&GFW$-3v&3g&+Bo1$IjO4kZjZvAW8fZ&Y
z|BcO1ANx=4?Q#%^hiFR=HAUU9XVD?lx7@SXL^wKgA9c*cbWDsdtnGE-PQYe#@j8X<
zs0Gr<9^zHTzRFKw)8K<nN4QEWaP^^rmF4vv>yy^?60v}M{NUC+LsrU6hjl*~373XP
zab&5cAEV`6Gis-Zb@kL&j{e&Y6pDA$_omMyZJAen2Ldq)qh>p=b97!hx0ZTC7WcHh
z9VAve{eH-uYnhs$4C5K4Cg#G7E3KDfmW2F@f)>W%@sbi<1CZbSP6gwCc`<v%;eg?;
zYq=hIUiCy}rbs)MqjtL=X%Y2(g2q4tL)iGx)$MCfCBVx2xsV4qg~m0K42m+&9a*X=
zPZ57>z=agL!a&LW)LO(>_2bCY<kjTl;Ml~mQlYOt`Xj(_4UGn@?5Pn!I+u7Q(JoKz
z9e?d>yHM3F7=>~|IjNZXh^FpFiC?p^_$QHT6U91~uOFL6gd0AG_!=cghS1gPP+(h3
z%d2L&Xl-r&7@Pfr8Q6I7idB-zuwS&4xs)h2M2hLghF-fxOrEFWJ!1^i2F3y@S~uf!
zus)V^2=KE6Q?}T5;;l$Bzxw;KoF-9#;6=bC{@&597;o$L>9iid$G|%`^S@wy-|RyP
z^q#X?4*2qZ8t%JL<T`uhsJ&Yi|NB{U_Ii0vA)(QTub!10@EA<)ICdpN*pU6kv6%n4
zXm@L{JFLPuArT<vHuQ}FSKNx0CorXErYAM2z&LiiE@*ZIAywL~A|`#3m`4c+Ttn9y
z|Mjtfh<yFmcQ60)-P>0$Uq65I{N;DAkwXH5{(-mPAFx&aK+Nz597YdTcn9cN@DO85
z@8>#;k;(&^I7HmQkpPKZG}_>i>3tN)Clez%C=ZX+bO>|k&8r75st?t)H@!b7rVs4c
zq$;~0Tct&LFuhOK=11^XVCY=I0}u}$!M}k!qx!p4o9^snNX^V^30nwW56LQeIafN8
zI6M>{k@BA@^JK3ki;PFTySuNz7bumIOS3o-?{GXk&?>RRvWcdVbOK8reH%72naChK
z9@zM`zit5>-*MtNtM=EQ|LvwF<6AQ=Ip-oXK?l7BcpsLmmH`b4hVmFAQ4}SaJ1E72
zNq7Oc%QvpV%D^FZ@MN*5&dxEQ$8vTtFG+if(eL=l?2bJ}Z=#h`hD8vS9rcr>C{Oz7
zIX;CVk2p?d82g)pqb=6giDrPai3oKMnIMi@>%;Qx&?*GC9**lbX~r0QY8WCye|hzM
zq9SH$XD?_2oDU{$wr&s*IfRCQEFuXkk4jjPzb`9{GT&>L<5RdffBOHqFIRmt5cua{
z?=Y8u#CJ*S)!8Kkry^~I+lgij!OKvB;TO6`yg%x~Wy>E-(s6J{3A@kn1{Jd}amKu#
zKc_%-d&TFbm$7!^;XG7(>TTR?YBFRfAWa{4;{!eQ#t3vg6j%=*GT6RP5wfz+0*F-n
zo!jhrJw|mP+SXx=gaMZ2JczaJt*fu15BO@L-iZ~Kvjx2+@47-AD3ZQEdPrR-k&J}J
zcfD!T-H=cy{*HPJH~ivJv4_rE+(81rz_wg`7pHtEFSNCpiQ<?MfiZArqod>(5UZ~o
z>)dJ<B35(Nv!`;ocT^w-P)8nY({5r?;aS}m(tWQQgs}{CzXRz*hcQs)u%uN;ce!)c
zEZfR){yUpP8d$)-q8~?czAAsX$UYN~&^6oYL8|F-&~gSB-hEZ9&!hiaSMYBo?Mk34
z__xJF|EDfyeiiVB{?di&*vp^$X7oP7@o+e_>AU>ng_C5cU>`c3l`srOozB2jDza|y
zA&<sQdT^AsYNzh#>~dh8-I*huyO3TJvV!lz2<V{`+tO0*E{8Jnr`D=AXX)sFfhdb@
zY*o`pXyBO8a{4qSr8;~w)s?(o@#gdl5UolxE!IS`RR$?M61dnoLtj0Ei4Pf%G4AH`
zXT{(Cwga(kO%Fp3g^NWH9f<yS$0vT7P+YxgBB2CH7mhuy1x$4Ud<nieufP&)=&fiv
zawjI93X$kezNT6>j&HBSgG7<7L?XcZ-HXhbf$&7)glNC|y(qsA)f$pfZDOMx;T<bW
zY}0c5_hmh=LRMSVpI1B&O9-pF_#W8QShvsEDDcT`l^Ey1Q%H5nE?daWjkRgNPIb~+
zs!VxlGj*}RE-hLME$b*t{djR1hGq)<u=N;KHr$7Wbm9yA*v(KmAXU~}ni#f)V6Vh(
znqHAnA}wlxK99h)1s`Y#JPM-U`ezk^uSGGZYd2ZW$&L{=y&XchM>Gwg0FQnwkYu}B
zKyc`BfTA`M1_3;|Ls%aHoo1seNfzty$xM7&UQwzmABKy*W438>hKWiX<s83nGXd_f
z_^4q;ifP0#ai3KnE_+p9R#O>V7KoQ0bX9l@Lcb4HIyiq*ceca?Q!|>g_oH+C5=l#n
z>&Mrmb9p@SPkfMdC7)<_)u+{p)lJF{{oL)N8|MqvXMR*IK7_vQT6FIO<ws1-Y=ST&
zl(Yxww;*D!b0AL9lkNFzQjasmKJB~J-SQ@QdBiggUe`6h-v;WHpZ}!!9@i6@Bodi9
z7I}ht2&}<w2k@;Q$Qo_Jv&vyH5Z^uP2mmGw9HCBD)Ssg#lZkrr`rym_5I&hUN9B~%
z1m~q3KhK^WFv&WMZ7)cf#B+56x)Z(syoobKvc?CT4<(N>rv*Hv!%Htb`rT7v$Hy+_
zE7h$dBwDE1a+tvDS>at!|4bJ1N6Q717>8pRS=l{y9T!HG@2UJ5l2@{>$UIp=hsziw
zm#|XGcO8WUs%M%LIfz4~X^F~6Wc!W;zS8Ra8`zaR_~YIm^cyUArT^_WUzhci9?^91
zQ_mw9_znc+#@o{0b|{rym<{>cZ^E$h@s7QEgJ=mVeK7$R$+C6^Sy`Px?Pz_@A|u;c
z1W9p-O~19uokjwH%9)MBmx||3CY~HP1gRUM%i?HMT&r4SAGdJ-|0H}|4d~(>@GUzi
z^lcOwCuZWWYDUE#o9D;o@~d0XKor3WdcbKW%f&DbW|G{0CPsE<Ccv)%ML@d0=&>iG
z$+f95hWO&tu?QHs9#SVxG~?iTgoyzj1|E(3?V5qRVLUCT<K<M$k);uHI**wHyC)w;
z=E=L+3-0DlaMlMdZn)X=?KUoN+j_jseY%XOYx8Q}DsHwueoD6Yr36i{eH=jwRX;Ah
zOAw7Y5~k~b@%u^ac6Hk^LlGZsx(CD2j?zpiJs6W419uX!Wy#BmIJ<f_LDs5OM!Im5
z;+1mqIpb9nO<CbW;tHsUQqUCk)N5ei-wcs~O$-j=wFYRO9^+@IyP<hN4dz+Gy$3<F
z9s35iiz5tRS2l-ll5wJ#)b28G+0x9!-t`$j@W>u^mC`{zH2K_c>kZL0L80&X3C@?Z
znY;FBj!AIqET9gA(k%$-pUuk);2ur$RpzRByLQ0w8(!mS{@tn&z*MkrAVKvGI^Xd`
zB1n$4eod^YeR(^Y@@;uppDoXzxF<*$U4NY~ZwEFWU3?IIhA`b{{D_KjYZKS3pTdue
z9a?h?AxGT7j^!uh&CF9BcE6paM&=E@)vFURGNnhd7@YYcu}sNQq==yKBnQPc{5z7N
zYRh!3%4@u~j*jtw(&h}L-67GF3_Z>;SRwklykzL9(vNce0q;-a<mW%}G4KkX3@G~k
z1WuB~zQ;=L%nqYOgL728_WE5~0QkpI8pobfK$LIF57qN$i7ELO2aTSdFXPKKjz&XG
zFm<45F`(#j{#S`1Vfx08LscL-5LMb=pSkYKWj&pM`~%YWNr*j=D*6yY$`R;zxqzn%
zxR5T-b%vKCfZ~`>+zif&dCNt5Nf9CJ0%g`x0A(r=PD~;-mV}U*SCgfC7n2&Sp4df1
zO%c9Gt&z1vUOxIs)>DVE$3WO1R<{piAD;{6q|uzK;=jOnxl3M2l#@YYb4PT~d%bwP
z>EiJs`-Un=SteXjNA#|jHYSq^QPh54PHKz}9*jTcJK37SK*iL)w6(<tKz~z_nDu}L
zw$4OMQbu7|kG0`UF|wn094uW%VsR6J1o@Q(H^;wTxJ4@GIf!oes*`3;!A+-BO#@w-
zl#-o-cRclo5`%(O{b`h`XqQoGZI6<19M#o>`{*rkK#kxHxt>N*h)i!3+zSVYYpRoa
z>VrXXi?lJ4mu+b?C1dTBZ7ZfvAQs8CqOo`@rpVPTJDS3_(f5S>$;9R$i8N1SL4s2G
zC!^PgPbdyH(lW<9g=kzs>FU=y9jl4>wI(yJj$nw&)u7%S`drtcpZ&BOkco!&J#$PQ
zvY6zmcy>HAQ|2BNBmcCpB_vvcvTW{EALxw2bg6J>x&7cu?nPwKB#AS(QmIAoDFhJ_
zCberb2kioNsZJ*EvpbuoW&4Bti0LshW}$-FH#TI*ZCm2~r&xdipB3AYnBhvqNMQjv
z#2KwZ6CYt|RZb>fHkZ0dfB)tgZfQwG+#X-}O7~%vA(nq%Vo*q_WTO*uE{Ui<bcm76
z;#v~yjlY97pr>=2pdlmJ2hv|!<R@Ss$$-?(nOqlKOc^h@)qZjJZk<VE&B|N0mxY?W
zI^+Es1`O|8aLmLm27a!)eo)r;s6*)y;32rZKCOf`#@s<S>>bQ{=hkAUe}jD|TLQ@1
zdt5mddK`LBM4o=rM}AloYIsyg7>IV2k!MDm>-Hr=3bovPuC!jwu9F8Qp1BB~9i!6o
z8;1?XTsW6Vkf9xEL?Bdhm&@(C{nv=skyhF;(@(uRAz55Um{qCPc9|HOZT4(w&eg4i
zn@J=aU$@Eo#+43Jzz~cOy;7y5aR&wAXHzWuz@xsQ&a4c>JF5bD2-fHEX<8euR0}vc
zQiic2gI&eC?j8<5fRR|lm+v+wyV!Efh5{rJ)_lQjf~x8_R^NidgRel*Z_xW?x&;=<
ze#S_R?lan)2n_sa>wT!vo>f+%Zg~;@Oy6l8l3fVeGqdVZ87pCM(&@tMijEzBFYnQf
zTv9kqIaVo@_7)MV#Kg`9>7kfB@J)SKb*G@%PhNm-4E4#Z7Y%D*UrJF2BQs_$=tY(K
zgBXGx_9*iW&PEq#TeIK6#YKA)%)RvNm?trtY6%_1GKjIIGgTxV*qBwZvT55vr<9sQ
zk%(^(nw3wdo^Y+bF~brmI*wdkN}C7%4)S67pQl$<j<}fG`W)Z@f@UKK<>Hz0L|Y|}
zN53bQ$)mxawnbwdPB7m`AR<$TK5f*&XeIX73L-0&#Z5&`M48}bdqQpc1(ZM1+-Aj6
zZ$G)=n|f}$CDJw?Ys^3HbUBe&e2yp^$E7)~*mLYlN5bpbNnC;2exof`tS(CIVPq{l
z3(yv4D8N1~KOl0<PAV~}P-#qkxE>Gi21W_LzkmP!|G~dqEkKgp&wu~>|M>jh?*IEA
zGA27io$)mlF=zFIoTb~5QNSZ`?UOvT92cUWN#E8bL3fk;*5|qsUS_PgGK{^)@<`BS
z1Idfa5!2UlcBDG&<O}!zwoxl8M^18-?`LPA$e9@>Z8+tQCFTZo)8l5zroYUp)w5R+
z7i@NdSpgM~=u-uHKC%0`w}E544g*_l%NJ4{DR-{y8FW`#bhn7Fo908v+f5tUd>3uv
zMeWw@h&Ph0gWwd<a~mCm2H*q~rv`Qi=ypm0_E(ErMKZqud<hp!i1@*D-Qa{Lt2hqD
z_UUc;wp^SJ&&tc*T?K}ea4#K!JDxTdK+8g#=+S9_@xxw!63Rt$AC}8SBZZH3<B>-Y
zO_g3?tDf!MBkD_7JQWj6Z9#oZW+Dzx14WJ0w|?WT5z14@>1H7(r_^sL3+%9?qsn12
zA8rMYI0ev1H8Zq@J7K8kn1VqE(N~m$nPsm~f`#mXMbJTEQS(v6#pdsO#fWA3BA=E6
zZ&tnHVpPjFJ}Jz+KO1;n$z_2bz%-Za=~#To*12f#rs8RKn=)AHyoxQh$j~+`(D)gI
z8E@+e%QE~FzOT-~un}xpDF-~6tMQCzfaw1RyGC(r+Qk)YG9>CE3t2grR<=QfgCf|=
zW+WM*FtHWD(R|}>1$a}uRc<<{y|qRI2#PvPB_QTrhZ(%a3G~7U<qredEUnRnZWXU_
znbr0Mo^~7YB}p09$s*Mdv#MBQHl0&L-XH*FhI6{H5>wnT$jC><<kM=s$cVb1*fb=q
zg{&gZMC$ZAKAu3&_C5%pFwDiBJKZ+bAnjOdBE@=lFL0jFX=*h$I2pR*1}08JYcn~E
z%$`(Pret+P6pUEeSOjTov-5!+y?HaOk0aPW%xW+dc@~VHdwr8<TRB5sJC5kInRus4
zWQ$htJY>KL4}*S-C{A?kIFTY91-Zi^U*awT!mwS-SqRz{`*Yd}TG!4SuV~lQZQxaF
z6Q0<KYbzB~7jRI2=*p><zpOHr=!qclDK6Qz+62f``x-gJp1U}ZM9G2kQC(H9Dh@8o
zhR5iPd$1=-@h+9{gEaPI5N2QqAMnH)fYfX(lK%UB3bf=tOT3xHVF`PtG4g18-ay~5
z*7u2V*6R>6&=Illum>J=-M4yCvmMqx#!F9BY)TK&F9R+DtrE_9p(o45B^3Ag6hRn=
z`-hChqvCFP@ZgY-6#n}BaMh)&_<@;?Ai7`%d^vMB0T{WkX{9*SzQae}JMmX|M?3-X
zpzj#yY16z1RY7raT8~d1Bh$KTRG1!Q{J}>5s6w+SM-&~?@D4c{1~c5KKudXEZFt!I
zq@#AgDt*)wR<2?ek0{Glw!u@TYw^3lhAOSR%-dUF*n6#EZzQP7)^cAwB=2qf#P)Gt
z(BpBvgH_-&&{=8#c^Wgy9PZP-^jxvEGf;LSv4Pp^_w_lNkYUJx*~H&^J{BoLB{!`L
zNW>OCI&S&rYTf`xIjc@e;JenHC+!s?S1Z6^bXr_ELIE~yW6Yb45r0Uz%a(62IxIb{
zT#<tIO~oQQ8YKuCj+ayLx>Mo^@;9mH%(Tn;gb<FD0P`~Fnaxs}l3qr$VYqe_+zyAZ
zVe&1=$X2nTplRwgcjQ-`)7*ij2C)B<e7J*&%so2zByAuoTGo3*k|GZ*0`<|PB?7mZ
z#MlSkcI3r&@`>bSA0rI1O7^_mN6WlZ#Qe2}VOP0V>u6rQ<d4y$xOc53^rNC)K~z?G
zb#JuI&1}ATDX&3ZpZbNv?%fW7KP~>=6n#m1J}5Hs|8)vit#X&E>I9uMl^Fm*&0zPI
zQe`uxodI@nlY<c}F5hZhhaUq#9fl$1{7KiKj2)cD7kT_|M;SO?)yFa(7`j}%Do)u8
zrJpkg_x`i)8sF@QVVqGQ+Jp8+2|R4h83V3-b&X|%g<UIqwN>tcML+~HQkmGfFmd`w
zrQFs9#J{rQhFUEB!wgRNd4;kIF_52Ee_vL}d|hBnqz_F!@zJJS>3B(jO~6*(9p$&$
z-+qmYim_+h!u2IiVwO|aSdLJ8OnhMtY`XDj%>i}e{%Dj%?=;E`<X-noIe`qej!VLB
z?im`5TRR9`1G>)!vqSRdcPyEsk>?oT{<vU<r+DtLpeiQ=5NiWQ`Buyd<1$g7l3I3v
zs@jWkK4C9t*EKMC3v!oW&4ea|o~_o*)_!c;L$@CfjBTFWNu&=4_2KYmV%ejsF_hzp
zun&U{c{J4Y%t|E2ZPogyA!bJR2}Y77qkuv;u#*G(S~Sj6*HPOe$pM?eY_gfO#(n$Q
zu=f5*lr!eaSZKwDlbyVcxmu-_HqSzNf|(B-Ty6dn2@^1oy|>@!HriMpRUH@nPhzAX
zhDO5S;6Q;Zk@p)XoS|*X<c#ne=J$&yW40~tX`A2TAZ1U64LI~ko)Q4)lRYF5*g8JU
zp39p(AU+A@&7Y6;JC>7@#fGK3BsY76^lNuFW$o3>d+H3_oL^r@JqRm44UhgQ5#uI!
zK}R|=%fZM)V)dWp!L`w#H%qJOc@*pr2O;&0MIsx+or4Wmm*6nDi@_|+aHjP+g#n9V
z7_-z%h|&$Po00pb>^^3Ca-C~xD`Nrw2>jLG^hogRYA4VT=((pnx>uj(J)!5G*RnkY
zjT%bG9G=cqh!E0%*GQ*>xE6(gQBDhtr@Z0@yOc|8ic&SVsgAVQGko9n+6pot4o`*y
z%ELf)UWvDlO*qqrP>V|WVFF?Iu*aC{zs=McL^97oVipl6E*2%v6H@qo-ORrQ;Xoyi
zP#uTkYY@!&X(a3d>W_46_aT6258%H#3_iz&)fy)WxwMl;u%~K#D%K8YKYw!{97a>_
zv{JM)3g+OcEapJBv&x@Mz9!0!JU9aw>wd@2UV6)ZTpw@cFJV=cQp=D!Z|<$l#L<ct
z9!bj7mi!(L4x>-5lcZ`m<Vg`}`{Xmm3j~RE1ybY4#=2jy5nX7FM&i$(B~Y(Az9aMG
z?SWyLQoC_goe8(zDOLK`Pgm?)Rhc{QE#zi0>%$E2i0G1M7xxq2nS`l~F%rrmob+~@
zIo9sCDgae44!>o>>0>4};BSIlV894KDu$g%V|C(p=$TU1<%hAJ!_hiT37#Ay!KXZJ
zi2QOe5~`u^jtt}0A)hnj(=R@}?Fic`Z1%asH@YZf;9Pn<El+$@SBi`IIhiWABN#I<
z3ZRd{0S<fzD)F!MLs5v~Uc!6@lYzIsp-tAgg1HHqMAs5ktP<M?*+oxy{bV@eKHfi|
z=f9&1N5vgGrYMS!-ragyFRsi24vG(*56dmr-!mFA+Tsqw)FW9mCntoBY9zJ6u}oyV
z1FQl5n|HcPGdD+PAH2w0Lfgijv2$VJ*ZMW4m?82WeO&Ccr_BX=g}Z@OJNqB8A<BZB
z?=T}Q=KM%OTG>+>t*i(cJ>00M=cm+<E;FP82fp~Q0~b1jqUB_(H^5yj)TB9uXFeV`
zw5EkcRjKSbz^&s0XOQh1RH&G#?g-36!Nv~$Tws)?V+k8_uP_P*e}o;ec{Oj&>NaRp
zaqWEoMN}MI^O#os>}nv#jg}9K%b}jAW-sUiX@?x9_-)GxmSMtONEw~F?QxmjD~8B8
zto`KOtPzQ1-<7F@-I{w$A12TGbzWdtTRi=;4rj^v;^FinaklY1UDK}wZL%S=thg?m
zlSLD9xdmkh#qYK%@{Dlr)+)?(E{#UJAxmK}A^$|Csymj5T}y~3cPx^$tK!6~mOwji
za?G;vY3%NiL<n7Hcc>$usli02*hh<U@6F1siEw*qO&>)oRf>=RM1A*s5#vr84Ry1*
zf?ZdCA%E!x`S1Vs{H#2|IPWBq$i*Y1@X?C~_WFnKU--&fA5Xoi1`VL#hqjtWOMZhG
zd;sBlUm6>R=I#|0TsM<=ZKK6wJY-8*be!YJXxAXMifL|;C$f=xTTWn{?4&E8tRYK?
zNj{-P78~7Ocv+~n!B<)a#<_+c`Y-!INS2!$49G!rMEc5(q#8EI$Br2M)z!G%kH7xt
zzFzIGv1kuA4K}QW!GwwpmC2_Tx`#E27ifDU?mYgONPe9*(79lKnb_0UD|-ucVM?a;
z|45usL!nz}(`aCoBgjS%q$n$zJl|lzo^D3)6HU?@T#sTV#v@lWGWGmlr{m6a4p%%y
zJ+CJFnQR)ENaGy+D|d0AhT9K>t!IbH`_Pjxgacn!JJqkDj%mPC4;oHi2m+Yy09Bw#
z?F{_v(z7ll>F~Q^q9@bK4nw^SUOPTPUI1*U$ru`fjey%77--I`UFnjZ@xe`uY>mY&
z$X&EE9V;-yl0+5{j{Dk6*D$*`c8LJp{9&luCtT5>pu#}`)OjDul6QMjblvEdQ%Ze#
z!nHRDXM0e1qJ7=PI^FDmulnn=3?#$K(Aa<E0Jlj_V0_nucb0^DBZ+@CvyO?9XcrP2
zJBVD2GKFe^A_W@xP9)%_h--ty41khlO*oemKMi(L5q8#q4hDL#cR0)mCX&a}!OmOo
zap0lfEp`}GnEB3Ohe4)&$xw8}O^+9qz0H^=gmf=H+JvN(>zd=RD|&*lcj$;vq81=b
z-OL%g@QDbL4*63@fS@iD2ysyCq2nSTP;gb$1`jPI=Cj5QPq1womcm##a0kKlDH+D=
zZHB?xJRHS}t4q)5Pt6d}uN>8Ctr~2b4Aw%3x%RT<`XS6hJPm)#N<9maoOiCH9fE&W
zxwwos6zApDNNJj>o$neiZa!|7WUx=R0V@2?^8{xi!TfciaEdiEyj>$D{Uh;dtlJsH
zI+#^I<4T7yENl|wp17cf&554y)G}ehqYcus!4S9rjN}?fO+g6&LYAQd^VYHB@1hA>
z0%QTKcP}RHLNYy!{TD($oQ&aP>Uf)<YxhZpaLTQx@;?3s>Bb@YbA4R90x;*Gj0m9O
z2-<X1<1;9fe6pIiK0B)>kPZ`_+nEkHcBcW)W@T3*k=0c-<jFve%3MMajgpFlrLB;`
zX@JyQ1Q`Pi6$AR{`SP6o^vTY#U<GwV5-36GiYB*<KBkZ{25kLsBWZ{{BS=UB##4|D
zWmwpV9{m_HdEBmw16UtO4Ez-&iH6l$(td+I?D@HyH5=045CDE`gy0iDC&|erF{cE?
zcD>OD=<jR%3s_U1q7jyATA$U(u##1dY&Ur5P|$w}Ct#^}$P9@agQ>A*S9XnBqlaV7
zl>h+dUq@`VawW18f@N}>iG$8x1~PGK&74xE@fvFo%Id|t>hYLyd<>DNQI$ps4cSYH
z4@R^pf;a^0`Gk?jL9nRfe$he$^2iV<6>kK1gK-Fg`-+<Mq}TNe^%eu+h^@gn+#KhO
zJ{Y7MV$}*D9ZvB6P1RQGsShODf+z^lJ&CvV%dAiP5X-EGZGC(Uk2w`lQ`=D7IU2Uj
zS=GBjgNjt)ab-WD!9}e~iSx0y$)v)$a5QfiKu=GqG^ADC=iGoM4GF`E(2oejrkhCh
z+7W9ZVdhnnfmzle@%Kv05_>>IUBSX605<l&zV|5V!<L9;g?Sw)6r1s3qfrrJ|5B??
z`#ojy=Tpy)BxImAwUV%MRw9Mn5t#+lq_c#`$$v+JM(<b<#ZwqkhG=(qs^JVR$A&g&
z^?GAKWDa(O2&zHd+{867P^{C&4e-f)c{%CIS8MjsK0@77$Z=`pvU`G7Z#k|l%B-;3
zkeVhSBH^2(`ZR>-MmHIlDHxwHcC=1WeSd2n{Quee^ZhoCBvBZBm2#gxL%;$dQeL{7
zwCqDtlFhLsszutCMy(%J1d3!?APS8FNTSvJ>%PYQ-tl{co3Uj^WMzS%EceWuJH3dg
zs$3%@BO_xaxWS=}#vtXXs(qE$3|G(*FS2)YadR{0O=wKPJ>4Q2HrBvq4nm%1Yk=-s
z)3wRE1)}I6b22T~36M*6X$yX6)QAIO5dGV-*Q7UZy_sJ_D@U2S%=A3GP--R+LvNM(
z9QE!6Fp8jL_lJDi$N2tz-w7Pw@2KT>TcK-+FGu0Dd<dUTaV;6$2b60X;}4y?m8=HH
zZ~Bb6GPZumMOyK#0E&YFG)Pj0ed@^V6}lya1##ycJN<waYeB|HGS2iYuFe-*8g@$9
z2yC7Y$D_kZLL3#i!r*AK1%_b52uH~Fn#hahmI6*m^BJSi0?oQ{9ehV59W{L+w64TH
zLWYA)fZ+siNxpH|9vI3hM8Q(i;m~m89Or=ONbleN5Uupz{?LyQiJ&;HR7(U6uKTw?
zAmjJ9Kk(hbJ^R*hVg=kO`wHe|?L%%+q_ts%Ym4K9>`{V_sf!;-6qPB-soU=%df_@S
ziyl^BTaFUHzDYR}*~NP1BQ0z2&LfdjBVyW2y7o5HTS>NoIoDm=$NZB?f-R<RvgvH`
z(T%qyXS_KRQnZFPn!{mrd4_Oy?)D7a_^1#JolL7iQP&<ru_O_-Y27!$hur$YwH{Y2
zI4&~j<SKZ5t2t4om?hnMo7X7`$CuT6h|`DM6<%%v?~+V>gav!q8_$pu5F43~7+4HJ
zBRotuj0KlAoc5mjI7v+6gpWAB+axlpOG7*}nf3zIE98I2>Fs!&ZJOZ}!$22AW-QVd
z{QiC5`|A668=(un*`sgX-sp34J$n(dQl^5%CD;eGU0nVBS|6+prXk%#gWRlVhji*v
zTS)3KTWvuk5zk<e!&DOPqeB$k6Fx7tRirz<8s7<01n@SvO!Gwasoz2owVJ;OX;jwm
zw8sb^4Vz^z4K|mu&ss^^(*lY8R0RIX;{@XAn04%DkI(w99#FZb#aW>Or13byB-7V|
zRj=xi?RdMVN#dHQU$vb#Zdf=n_Ov21>A#J=d@BUxmFoq=j|YajI|};iO`m#5bf%<>
zC(4}+@Czfr&fOVYffYEpJ!jaQ`}T+49|$`$o;ES3fT|$2BiS7<5+JOr!sQ)LJU$y0
zyT$CPD8}ePv;!}mxcV>1$LDD0r(X8M&eJEyFZO#;=A)a?5oC3C2Upk?suQS49X%>f
zPu*_^y9>;Jik<b~==MW6Mk(RX&`+Xy{@cHRXs*#z9KH>)-cj{pT21OD)dho03zWfq
zXFBkxz&=>MnP}r9W%d{V4rhnO=(K|wf5^;^B1SmuXCt}?k9tAn;Cgy2YB5(1VF7+9
zkgSuDhi@*Zr)OA!xl#{yS}}!GU2_N;KOTn%b(i6uwpB|f=)Lj_nQ_p=zq?7|fprrl
zzva-6&=dB(M_z;!NVgn!R9o47JECZXJ7EHjG|F6A<^@*5XnpX)HQWjB^68+{m@H(m
zG2K4kh-uXLy?D4-Kst1lo1cYGA%@NaGW%9VUSL)ezODcXvmAGUL_BXjoO{iAt7%0;
zYl0<JK$#{Rdy3#Q`U@xaY?<f-yELEQVY1=KiI9-<>VeKrpIR0$eryH^FZL4?mzOP}
zWs|+1Kw#aqMnC|Nv^{XM43JU3BL%!07FZ9iPhA;=-k@@4x{OtZ)pftFn>AmXn(pvS
z*IdLI>R{f`tLZcWja0W-?6s~8{kBwAJ-c-QW3HnL#`p@?<8?RnnMTK}^E#HwQqjSv
zstZpB<SobrTmxclL@yyCJHF~sO|tD}`!w|?n5u<N%1LJp_|9rLT=QpZM9Cd-{+$W=
z1aj~`%cqX=-A2`8Vh&a>c%D*q_f<7!X)#Y6LRv!rn|w^|GBp9IAIx?l*HE{|Pypd$
z06I2$4i<Y9qvnKTN??PJ$0OGv=RJ@{paIwDM*oX1XizB7E8tKEhvn>SRL%zH1w_`y
z1D~6$?|c%NeZH>2p@_mg{hk_Z(s>0tmDal*x~leVWV>xB%Ld;{mQ5!HdsHW$Q!^d#
zThGd-wwu}=epC1@F{@}od({+-y*kJTS`N3te^DWKk6*)OJA?s2ta5yM?C3itVH>M2
z_yk|x`Vr98_Veroc*zRZPHE|oFC(Le>av8y0nENYjr(f!=wiEzb!i$M2S~eb)uPGP
zHRu*z5+hrTz^6H}$1!_#1TEK_XE{&QFuID*I?qR^N9X0>{kXssOdZShsPT1y46B;>
z=_zo{`lvST=}|jiYW!C$5M&yFPDxQu@<x<!mIGAOWxo_Yg#)~wi&XJ4FG=U(dYL<-
z0Qn^Gij(CtZa9}kt4@>r96yS{8O#Oh3$S>Io8%y^8OZQ>pndM+m%<M#r{j8so=EUp
zP6rT52hA5bkZu9C9HLTZ#2e6pa);dQzAnP8yEc(H_DJHaZAaV?3m+j>hE9HaFd*t3
z2QIV`;0;@qLzXfi-T2CBF><tkwEUo)$T8f+d`y8rV9AcE3|%B~94P5F<NQ{Gh{tkO
zWbZL*+Bro@1rRY>BG55@%CKUBPEle5G6?R>s6Lvs1zhElh-QMaKqs_qnZ9>S2fmbD
z%QifRwz>|*6~4=E36v^aF`;i{BHG$B!w`RrZHXSJt;_<E+iFg;Q}x4lNkb-ta7lUh
zRZ0g^xn*Wh^}`pON}va(Dt45p=-wx*-NYo=u|AiDyC-)X5&VDupa1Xwrwe$A$5A&X
zxYMKaVwN9OuU>bifpX5^Wq7;}KNk@xwUBiM!K~D<wb+)-&sAUO0>HYe0ylxj3&#oT
z<{W7Tp)A<ppti`KFpiU{3lKu$H;2h?BNnGKvbg7zP;PS}L7;}S3>SjfUk6(CA=_ME
zU;j3Te;#1AyE#RrgKzg$D(=7ijbHv*z5IgT{ZqaB=aP4SQt!UxcYphvdU;<)_4PMy
zL?`giSMazGXwW=BXXn5XGncT0D~1v&#u(m{|CC>KG;p2d16SX?D*#c|GZ1Gu0=6=i
z1G~4DttOTza6DU*3&3zm=7^^U%UDN352iILb&$x=^yhmr2M|8s1RZrU{cd#Q!`in@
zPatc^zLSSUgZB&vy5*yUW1?*;d_W~7{S@onMw9a#&FH~M3}K?A9bD7%yl{eo$B1-K
zYNwjbw&4*i*1$#)j%PTW(fnNNmqEET{B>Td#6N7wHYAcP2P)hX>Nyyvo#!(fnL>C6
z-62G_Q_4sX>qCHhGNHra+JNha^m6}JXs`R}hQv%!BL@Z<^x9KP_F!sjF28(UopFo4
zu}*TN_mX{g)j`HhBBTrE{U4^ffb1qP#txyv=ZP}VZYNRI;~|7<#_HU8jB(udx*bm#
z?v37ACuA`0x70>|V`H<I$?z;J8U62P?&{LG)`s8^uD9l3PSD2Oa?0vX^pKJBo~eJ&
zPEJ+zS1j30y4recwGZLc@A>n-m+2E*4q>20&5KHrxS&M$U?l<z6YMtW8TPlsYm~(2
zbyYAH0lN{dQr8vRUe>RHz7g8exp}{JtV;%@R>lZ=T@h)pF?<7`upW&$S|MyG7}N9=
zd=hmne470x;S-99_+dGG;sGV#BSoaaR`@hzGID&#v8>OJBeZs!qJ5;J@5LGE1@WRz
zk?b~sX{4Wd`1zp0`9CWgqwlm~)4eo87=qa@MrvubmmWuV#RlVgy_PX*TQf>C1vg9q
zorc_l0In~B_}t_9w<c0F`_b*uCHA3a$kW@QWqj-&za7irx#hn5DnA#Rz_m2i6jXH+
zp{9@U8aXcX?7s-J|I)Y$eracyM&{77osg1GPrk&-eA!>zVNJdaqxwqQ1&!~xCT*im
zZsfbINx0*sq=acoagWaD_SGR7GVE~$jIRPPPQuTx8!EKa*6t|M)QM>m^C_Ttuo{U@
zlQ2rz_RXIb&$f5lOOM*Bl$LbSQhUXTgl<+u$*%+G{}iDlwSPCHOdK@5wqxrf5L5F&
zNy^TMxJ;gXJMs8afXSZ?@%VFsG$v;pYv5A^<j*+4Ki`Rf{5gzlGa~ADT&?!8w;phJ
zChfdhsikP`#%lT+8Vy$N$xs@6z@aELz2v8@pXl}wRGe{Zucb8*6Rq6ZqPgN~fO`6`
zlM{JN8euz)Cd;zIBp#E7*iPa0mf9xp81=TkW#hxv)Dl^>5U2_NWpbh0<v@_<YY#>F
z(U!%k7o5#KrA^h>I~MZDE3Y+Ft@|x0f-#I;?eA(dp`Oe_b03~-PG$)we}C0cBQ=3r
zkkfKBiX*a-@m~Erf8H^3)nPQ$9PQy_YGnT#OuoPh*8OR!>3`#dqw$MzTmW?wzvw#r
z-wVZliy4-@c$C-Y`u73DSnF@nCR@avg|xO*V`o&JaST>0u%_;EpQ!;wj-4?%aASDt
zs0WOw69z{C2ErPTxQLg_#Pf))uDbeAfZAevq)m=KH!K~L0;u^y!Hma^hHZ#i6zMHJ
ztlm1=2x;K_cOxSZOYeR0pF~Jn);<{CC@^@#vF)g`;CEe&PI0OJ?cdVEFi3OpVxN*>
zD&^-x6ps40VSztG<LT0!h-+qSV&1vR;6D3Z*1558H`X*50}!0%4*ISew8F?7adhp~
zWXwtf(V7yXe%q{gX}(MtM&SE|ZN#=Gp@IYIOUi(GFv{y%k!n9ye*Q)#(aVBaF6xPS
z7PE4YfjfD&<~Ua&X#Ac#QC_-=4nl}><Zah_`rBSLsvPlO`(LN0r}hg_E)}CaCTCkd
z8hnIHDzvRBAds`wkO*yM4@5y6we62Ad6Cm{#a)DBOt~7%F4<Dyz;BWudkJf+;g%2H
zpCLIF_(X5kl5N$4X*royQ`OQjy=%BZAEQk*z3xC13`$82nxD@oXt;pebk&AyEvT$^
z<ZnW8rHnK0liSK4%hUP50i!cG4H~z4J}GoYIPKlgh^HlyRSk`8DP$BK$r6f&C%;=g
zWwMA>k|v92wdF&v5W`PuF*2R^7)8qpMp;JTO!|&gxQ)xPH=so7NEyEb=O}Wkcopmm
z@cDIkj(t2lzZVB0Lz)@l8<Abxo3(4OR$HvSz0EuELr!E|becDmg~$3>NH&!Zj=80Q
zqd^3XISMmmEJ(vK(XJe7+<c;`2$0u8!)rb^!J71-Ua79sTh*s}YdT+}*SErKO7~a{
zwyC{+f>zwTHk@m$Aw7<Fi}hdWL`-|DCQWOF$Ny1GD|S}_w^Qvw)5&Aup5hRI(@+}|
z2%BLJm5LPF!Vj=FqDeSjhWRQx7Sjf0we*`aIM{Rq6=U}T2751(8u06G?1k8|qjXc#
zUB+oYNRC9<zUtm<Saqy|@XIj#T4Clw{r+^AzaoZzh#0<`$g#~7275FwCO7PMK&%+;
zp-!+du<N|scBR|2mh*I&&9J-#%a06XO`%H<8n(*va;lc{I=qRG>0OOx<wT&j0?I`0
zf6MUA;3j4gTPjwFvC^l6N>WxUt@B0+-nW_FK=L4f^p~c%tc5BsucU%qW?}QxRbO7U
zAHtnmqymt#8?E=ZmYvrTNkWSB9WC|gr~)>}6u6IfKxMh4RLFrkKhzm;HP(Kk-fR5*
zW`*pycw@>hb+q5a#)`S7dzMRzwMnySKCVaLoSEJYvcc21&s)u`CB-}46w6kq<4saQ
zx^6**_z)eN2of)EVNClR8s65h0O=e1It2ldW#=1r%|`ifSqfo~Srm*{TVm4mkksuq
zzSAlp-`y&QVM3PQYHIJqzr`!|r1(c!OfkFMq#B`*crQDiP*^4qfAt`#MKPHaLsMvp
z%W0|0#r?7U?;#sZxYkc#HRO3ov#e8!8|1+~ML9n-hZEYHPeI$Vq&fDQidv)42D{V-
z`F|sAT{f@*^c6L9C-324towh!@7CQevJY7ZNGL0Zi$ZSrB38H|SqCpW+p;RDvco8f
z9){@V33_d@T;#qi3*5^mP5u$9$acslEWeGm3BM1*Q7uAU(jW<dZDa7RyF|=-OLMZF
znvEVPniPpYm$a#b*0xFi!L}$O*CkD|P&~!n2LKwXv}{d)MD<d1tEtOkofzVTL{W9b
z2)sCE5iYo5^d6L?{A<y0SqiZu^6}y(HmN=%BzQ&{CoRqy;U?|mMnX=r!`mdIGYHw^
zI&<fR=Md&6<-icFXFfjmMK!Kw)woz|^k(RX?oGlt$S^ESLEiauKCS7B3ww;nRWHNH
z9u(i)C|CxN5)dpQv4YO?r!T-;T%UC07(E-U#_28Ca6IIe*0W7EtaKj|?eKtDvyF}L
zD>ljGr`U>A+pwy!^h|?YYe1^qv;0VVs=uzaal}{}56x7+G3~>(D@-~1=GI)-{8sg2
z>*+5^&lZHFND*<C9DKd1CLUaUcoKh;5hUs?XiPHD&tyj5@zUJWcInxceoFhFVDd@C
zDP=<8kP28AbUr;<fKYLa-fG$PddQPYJ|9>dqs)QT#R-@(W!?=|7e{ppd6`w&RW*H|
z6{n}=pmft5Eog5`oSl|i!#_b`{@~FKW`bVN_`RtLJC~2B8{9wUYsE2q8M@{hNwNGl
z;#)l+DYht^+57#5xi+Ta=1Y*1*yu}|rZs_oe^awQfR9ENv_c)CZ($vr&BRCsgUvy)
zBv=T0(|yo4v@CI5;2(-3H$^WVlIe9WYcdmpsLiwP(v~3h7I>eo6Yl9zA|3*Gq=zIl
zxgA+2^uh8?hyhR?hDfmm@$nr2ep$1$Ms1C{ujrRO^9|n1-r)vRO~<}I%y`maI6{6m
zqTE(1E;~_ay`h$-w?st5F$akS(g~u@%Z~|77f1fkBw1?W5Zz`+#wh8`*zLe{<{40&
ze&7s0sFlcg$-~hB<dhR2asE1%+5)S<R5K)VKn3i>MB)Y!DAPpWbi@gvBRKXQrGao;
z!%@Vt+s*zrQOmbBc?vSU^?Q@^JPI<HXYhRjan&j5IK|k?1907?YW#gZsk4hYiXByA
zc}nb1jzeCt5HkY+73q@Mii?JI&9Lb!<1z-W$&?!<aS00>crXuT22Wt+ge{7%`%p{Z
z8*@c~ba!5fEx2jxRrrl#wS3cOpTVI1=cN0elkR^`x_|jecbeC;7k5AHxH~%HNd8c_
zpL8E{#@+2K$}i7edF|?`;5(FkWzVZuz0BP~Ub}zu>(>-$@U`)WVo4VUsm~<!Gz1r4
za$aHSt&GFj3&m8k0y*ESI4c?+C~hpM4uj#?0}X@L2=>Bf^d_aj&wcRJ+>IqaD`G+z
zhadt#(VUYJiuki@+azLs%DpevDT;$53>c7EPE{hxeeiyriS4-@p0#QRQGHNNA##zA
zGuh9cS2LaoEP9VZdS5~?-%&Y4tm(Io6&KFx!IfQ|Ij5uJE-Y|oqx*KdVUL|Y$!|WE
z&r#i#-T!n}#_9pCWte?yYrXLAZ7^dzcQG|+_D_HSxGlFF#VUk8SAx73umK}1mx#pK
zJ3zm8*?srJq3Jus_II$@??Uuow+9!jZ6)XE>vcgV9dLKyF5igEI^r&FHJ!gy@pX&r
z+js|NwC79(HSQ-EQFYqb3_T%1ZtdP}yu)OKvPUs`h+Cj{*D%e^kY}8zSchwVPA~3d
z*Pwg3caL7T<^Kc9(lNW%5Dwt{6_hmTpy7AiM5^&<(N!(TelN##WaG>dThY2M5C{5-
zh__pE6=uy4WwjU)h;O{>$d5%aan0m|_ri@J;ZXxqV?tWso4FC?=BrLqF4@MGK}dh5
zV37b*j?5cwz^9)z=P87-<+GHTV`$1oN1B9_vuU`j?1@nfuLaZ~LW*8BrGudB<wG6f
zKVvt?!(sq&ehU<P@jK+oP$&gWikMWoXpxbAW@MzHI`jAVB8*NOxa)C!7xNw2mcDa0
zSF0V^c8I@Gl586L7YUSG`;=lz<<<}`lNJB~`HLfllpS5OaKwM%zT@tJ6Pgfi5E{UP
zH_ZMFo{XukDF;#0i>r*TJ0`_9@qyqW1OG%lD{6{|c^q_2J6Bl6l-?w<?gM-3E&<7-
z5+fuohlhy5z1p!|epBmx4HiY|y{;u8rXo-<=_lAfwkYEKZEs;6uH)c<9LK~ABgMpj
zsI_>XS=gW-=tk0vmL*zZeeJ0aVFytE#iVdkmS@-uvPx0hU@<{ivQ99|(72~!!TufR
z8Nhmnjgjz=SQ&{@2I$tbTOBd6ZFka&8#)m)ZWYv?A~UlVO@gN1V&*MsSFl!|&t{*>
znw#AMQdZkvi1l?oAyqkvVT_@3npnDKc^c9%SZQcO?aXty(OaV3_9YW(nZ?aV0rc)h
z;7Ln*^`uO<{{?p9uuZ}TfahAz4&Y8!*_10F&L_T#!S*pFH){KeoJiY8FuHoWtN<TO
zEgwZtk^bz%bF>u*j8h_)7Pn40DAOfuDm>H4C$RM<qZDI~(iy0XEzs-Ebs6W#t&+I}
z)N%3&cpc^pHP?mj5`b$scQZaH3qZQqey8zeE5eVErM}fvr=vSphphq`D`h<3q68=L
zf~$R?*98nws3?oN{1hXsRFX4D;SPC}BFs#E^DNu#co^)DWk4-SE5krk6&XZJCBJ(d
zdUP5aDz@m7<m$$tosaEqIwRZ@yqS)x@wyd$R5Sv<rbX#ewc*o0{f4_yiPP}H+le-X
z8aY`)+69Q@o@7<3SC1hh)l^DH768c?NT-fGL`zO>NXhi+=L~n_Pd#O8t`g1Mf`tkt
zfZ<utw;<YX0ZAY?Ao22o77ve1)Cq9dv50b<y_-xccZ|&z@3LHykwYm|W1tP`J8bHm
z51t&Q5Y$k;;cnNXCOEijGOe-n&z1Zm%5i6d^9-a_cV5Y0MOk#bK$}{=3!SGT1S}>*
zZ={{Kcf$a^>5b7QZ}|_>E;G+t8HdHj%Lx9yu^ACQi;!u>1e(*L2FCkgoap^n!Hh3%
z%j5>4;UuL2N_LftaY@EjDD!V(J-Qt?g~8V53TLh?tLiu9+b9{qWHX446}3<W9)tpZ
z=Xi<oCdpYJ7(ph1r$3q3?wY<C&bEelScy1U;45}p`AOX&gH2G7Z3c|N5Q>ur;YIwt
z8;xHr30|fRT5md>hKv=h%5Jj_hN{;#RJOC%m7@zT6D%&R^D;aBgWfs{?${6dohDd2
zZmbaQQ(yf9wSw5;oR5o@8#dEvi<%kr%Td{e=Gc7w<htXft^X$VaXNSFM`@6g01_Q?
zx}T5JA}?+0ZhGV-U_XT>d0E51S(hB0UH-WGrw4}3kZTqT7<XdzQIaRQV^1KHMpe6g
zsm{EHK~`Ehy}G1MXHm4Ao0g%`@s-q4w{CeiDSsY*ie0abOIntb4~Vv}WVUm+)xr^f
z)H3n<G$nX<;yUlPf^bsvr7_$PJwqYJ%C*=8hp5EFxzb;Mi7|H9LM;P-vZ7#@Y=g6Z
zd$<B(-6ot(o>1OyDuIlk`uhZ@N+W~y$0Oc-?P_SQ+)Gd;&A=+#k7X<>#p7uz+V#~e
z=|OEn#8|&MJqKRINF1yyTc4~b(WH^7S!FoJAop94i%^ne$vr8@=a>v6Fi{EQJRX3k
zJEWMrT~2k2813ehc#{FpIGN&cS-&8S7A*fA{jf-A3q#s-P%r8-A7fUW;iG((qii$e
z2!$u=)BpNGXSwum!;4k(97>FZVzg!atiV=8r^&f4-P79jTJ}$Lw{G}Ee;0f4#%N!R
z5-Q>kZ=m6~a&w|$!Py%>rv0y#TCwBVc{gN7WjLGBH-1Y@y|=Wa8ZBqRvt8>ua8VEp
z6m91rJ+x{>G{hR=ZbCafvpU(oHJ30Q1_zN{G$<HNe7KcD7m8Q%zMO<r;1DL2ef0@6
zF{~chWEs8(rFsSP+D#UQFH-!=o-!^HeGH}U5#_^_i;6C0TFr9u7~l9WstWnE(P3!G
zTf@S<FDLCGV;X9PPZ*E|GZCwREcm=6Aj@}cQ6W|k>tNuBn~#dxBJ_a>#H707fjb)E
z8pYg)_RDMcWdUD+diYNbs-Y;!l!I10uyWsW{3;Ep6(GZ-7Fg4QP&+*gdyy@Tfl!WL
ztFB*vqOM=}(q#WGp+UY|8XM#{EitvA$5NO7C}iba$1mVsnUB7?l@9x%1=Li$S}X4c
zZ2QzFQn2TaV$-LMBs79R{6#Txida&F02@|D1yX#NsI9;20q~ZXCi2jBeMH8U!)f$@
zS<APwW}5L^_IJcPA}Ldvxv7r`(cgskpIKImF*8S|n;KBdjo}@-tA&zSAs|93$YcV_
z+aD8@!84PQ%?!?o`SQqI*KH5lop--raJF+wC%0Zqr|$aq#NF~?Y_;5m#~|#1JMnpm
znu*C2^1=@agFm-(R-YzxLs`@5beE*!shs8caQG5nUkqQm)<6t#*Qg1z>geU}Q!wa;
zznltk<(%Yb0H`7#d`PBC>p5PeF2d7!H7)<)wpu<45p1(7VyS!?%!n(`+09M1n@@>(
zr8o&<dH4ekEK@l^Q7=ll4(GtPN^-<}>X!K|pAJWmB#_^_p}6JA*(^ESkX>(Htpqi>
zg|uJFo0yEh)t0H@vfdcbQrk&44L6EitkZFY6Q@NYzZig;p(#*=Bgn54PK`6qe||rM
zh7(6q54gp;fWO!j{Gi5?r&d>``hwJRJ<2-=Xf=UYz_VF((Zg6a%JLt24yfR_J(O|-
zrruOU8%$}ZeABOKuKvWt;_3v7z7yjJias6&vA!@ee19*zw}xgso-0WwZijPi8<bI8
z>-MB`KlFtinjeK9yD4CeO+OHP5wHwos(;h8vvjA=0cUE2-#t<4T|mM&*N@F(h=<j8
z*+#Y%=bkim65$hkIw(9b2v=RvU+~`_43>&E6BfViv|-5|T?3#X6*wei`*xhg76=!o
z`b`D~fcOa!B>D)xivDcyFy%6qD9(Vc<OfyxMXH=6stD3o{#Vq`C{c;lw&K6ii-|L^
zBwg?_xPK_dV34*Oh2@TRf3wiqTkZ1IzIx5<SAK15HfB}C4f3Vl7Ha6L;ekzU%l-x+
zamy+`Ufu0)enBZ;9nqR%%Gf%)V%5|FWpcxc6Z1g=V9*atCZh%9@*ARIDU0ePK1Ki#
zrmBkJ1&oQD?n{xfnml!jY;oW-)4Xd*aMk}71mWs}BQFK1-20bwaNez5kKockqh-S4
zRmaREEgp7gq^13p2Oo9d$FG_RU8FY<p2m<#&@B~i9<yQitbW)yhBa<p`QYsEl}3Rn
zobeH6t#fA=d^qrDo`NqvV^x8^2-$3VioE*csHaX!Jv4tMYoQaZ4YcG8-ZCK;)eLnc
z#V`~9_G*in5qaU5JnGQDnd%6OIvH?lpZ<c^AEmnw1!j$r_#E5)QTRD+jxT&vKTo1j
zZ)xidzo|pwNVx&aj`c~Q-A6w{Kb~&4XIkU!kZ$fJ53;?zscBE|;6#hzbE3_YmNA-L
z+uCT`NKcX@y@@<UZ<2z2L}Frjm$Jn`9>@<8EJVih(I`4w&>gMq<8Fofn;L=0xKLp`
zK_%dh0LHVvl6zQzfw%jOS_5s|-)63Uhq`q%PDREAwpMLELwdShTlaNTchS>3)Y74D
zld(I`Yo-`e&cUkL#R#umPcdqSR|>b{msm7*C)*i<We)1Q++``x;2fsJyfgA&7Bzi6
zKUs%jD+Pg|=ntvb51-#)7uhZ!3HTJ>$J}N6c{RPrM{?ID;RX~{k=M`{1^(&tH^@tc
zf3Ns&!Xv62pMs&&OR4J^mkaXGpBAU^wi$v9Y}Kh7^c~=G?&-U1ohtj-sKHa1#$zfh
zS}R<EqbqlDkEamzb<h94a?ONRx*&?yN1tzMAx)h}qX<o%H=0^(C)2I_v0aA@>%Nl(
zzq{I!q2J4{L|?NdV{o^$NGF3I!ijXVG$}-o60GDn<Y>Sr@*83vc#GpgCp~>OmZoxG
zl-of-yLR&VtXfN`uDq({|1UICK_1ao0`BE)--I1ZH!bX6OC|%g9G_mpB_i)wLt(o0
zg4!*~{lt+eqvg3t#*zMjEE~r;zY#Xq^VixKND_m4sU^sJ{9%I)^ySF;E^7)oA=P(G
zjJKDBQuf&jnSkL)-EWZ0<Lh(vIyNt9x^rfF=yV8Z0*+1gvIw-4L&%2ofNVXhw#v|5
zk5>#ji<;GP`lifZr8iqEE{kzB9Ika!N`&UbR~eugU$@($K4_2S?DMWIiJRQi*#>o9
z3p03&{;{?867A>5_62O_-ISeo?TLC=X->C=p-*NzAQ^L@l}iQ8Ey_<NVGa$o3YS|V
z{VQ_)UDg3s0L7+om31`YTHg&#(S`fkS?J=4`2Joam23Yz9tFH3kGktM@p|)DYVmxF
zWZ1FV=)<FGes(^d&)5ZS1pDVjHOi-;4Ad`$4N!`iggS_zk2=d9sV*OpZ)0pU<+V4B
zd|bF2>ldTB+xntT{y?dUKnOF83~^4Y>7Y2c1e@_;VZI>@<8~i;FIs9eq5|Imw*eA5
zYFv>n^F{fx?;gB-^!VlR-oev@mxtg~0`=CWXD6MnzU*b2Uq9$&55D-S>yYgJ{p@5!
z!FKTbgRj2oWq<jLEA+(!{yrrhCw$)g%6<R(Oa5F<0U2zG2OI96KYz_77R6{(UHKA!
zf+qg*0RQ0<XH$0#^944)`oewOfI)sGgPhE#lacCWV-tG$0{;0^ca7Uv{B2BDlkSn_
zVgm#)2HeTM+W6lY#{PG=n_@gzcxdhH{rLUMgP)#13J|;hdG^1Kk6--s^6~L8Y*zzO
zcUPZuuw`&y#vhItPeyJ<J2*Vpz3y+`S?h)mFcbH`jlP=`Yle(YD=cfL6a}BXTAD$;
zDYO3_4U4Qp-!`sMc;PlE)!IW03hE_(+u9StqWnj};k<dDb=a49%j`aPCPstcVp<{3
zf<_G+qI<rqotOwFquE9Rg?snP_MtQJ`Pi{H#v@<gFJcabP>ZK^?_M_=W&0RCG5l8y
zGKS?U1BK(0$2ujyZXTM7<x;B5VPdD!G7s&G9;OuH(1|;zoD5(Y4-LTi%8fiLW_d@q
z)9r`y_A(KgDaVv<sXEP?XOiNFOEkq_ia%~Ky3J^;>An(YT}x+eh;UnPZDUVvTisY%
z_y`T>ZUS<gxf>etC^aVjRY4-Q8YkYHx7j~4$0)n4@C|vN_8Mir^?7^&Z{B<Bhks^N
zL&vRo4@NAi$F7c5sNTPM|JKkMcjt+}TEuS{7`3_3^H;G{Uky?bpqg;<AmHXhSrDnJ
znYGWVF{9SeF&_9q7P6f27>NBcU1G!zJp49#_}~7fJD_nOQaYkO$r>&4C5os60v<Zq
zK_o(;qsG17ff+LsfW)w69Cd{Z8}d5E;&Iz2g{xRR%@^)cX^2@bJI<$PwUQ4c8Zijy
z155DmR`d=IvGUxGbW`MwS>Je0-j4vs$6X5n5NhZeJ1x(wbb<}BYG3LgGTIBY)#Giz
z2#{auK#gf4Aj9oCG`OvFM-M_*=*UO`-`o3=Qr%Q%?RXtIamz9pjA?WnT3B%%h0ZdY
z5*?9Y3<5Cd|8YJz@A!%#Y}2;6GAYXxFqo^V_w&i_;>W_>O3V7WyZ0VUe*)1NNY3kO
zbXnY*zbB+tnaxffQ7{=;9~hhU9qMKIWnPW|p>6&bhDwl%?q5u3d9W!l_<9OCSR8bY
zrX?vej?UeEAlsb}-WT8~G&*y0pPgTjYml^c1n!BYZP2}eo9mE5PM{Ur8QhuUawm)I
z@Uke!<Lq$e{^ZlT=J1=J!|`!Gn@#Gi`}faWuk#bPZ7%NDSbV(>#qXbvs@eL`-M#7@
zTEBlXs!r}-<gUo{{;z+Z7XVj4sK3(%WK(l2l`rC88%?2oh;Ay+_K&hrIVi@pxJ8i^
znbmOEq_#hnH;&fY1(A^YM;MY7Y&+1@j~%gQ=Q%-Z=D=Q`SEFH%kysp_uiVSR`#V$E
zHty@&hmrf691Xxn)-d`Gql$43G_n>BFs$MgdFMCQCL$(?F>XiP3m>58zKmpD^!&gh
z(959&FWRuFT;z4bUr_*cX#A2X8=DW<EERQl=8OCqxG;7U<0r9Lh5)8J+j36vEZ^uM
z-n;jfdGI&++jKsHOwH51a7?&Byb(p(zj__L`qdK{H^-eJYV^Y7y!`p{4COnAI#Uki
z1$5)Nmu-UKxLOkMtJs8WlpZK?OOI{#oVdXUsRq4U<+6sKa*PAh)4H93^?v<T6{gSG
zuMW7XzI&m7%b{)W@#_5g*2fvn2*T>iA}0D+_5Q<XxZD2Y>*UAVR|q985bVybPPyv3
zVEv<N*_v$Lc}*YzGE$VCYqW8u-{|LI5gX_Byuz4JXm18|yawjOjcQ0+&Jb^Z06-Mw
z!Fh&feLix>ArP;kE_|zKSccgUHv33j-Ttc~R=ng%piZDW?3<nYVVlCc`XUDbG45C2
z=9M**hX7e%4d+e<@G&1uA-XM<sRo1jl%o3-6tx)rs2y+lE`P^mPTWoBA`JMQ*Jr)!
zXNM((<<SGmM_2ix=6K@}U;Jc_QH#ineM9;hfbI<q0zk)rL5GFqb$xhn0WzT=EO(<j
z%b`WNNg+TAAK=_^2y+Z@PK_`<gRMh<);F8G$|EK1D8{kIZlVS@`d>Nx@{XLraHhj3
zM7#JEU}4AaFNjD%Sk=welXd(i#frGaLLI50eVySf!!dm;vy201tC?>%KD^*a>D;d>
zfJo%N{JPz=-;uy*?MH!bUg!meu%(kE_|4zX_Q!+Kd{~4C(;U}ng|kME!nalm<Lfo<
zhmKM_%dhXm462L!-BKNpN+l#bz>(tF%D=EzdFvA*Y%k#`R%8K`G08K`p@_hufB}7N
zzH#k<(SW5XF@*0}Y#kem&vqiCbiV76q~q~pM?T&XW_RG&_uM=%M6S!vQ~Y1HYE1n9
z7Lo5Wj}q>6`SAhqGmlWVo!===zH9EMx{!<o8S>-qNXX|kfM{(BBp5;u#<?+I<*_k5
z;ckn%&&{t8d*6-c#oQfW^9dZ9U;0!<U+|I1Bn1^#mv9v0$yXS7_`_97MIkX=10KL?
zhxxm<xu14qSt$-@^o^IQYu1!5HerlzBz&gAJx}JeB~(frHZW#MztKz-ISCJ8M~R0E
zoK87(D>lr8ZDCU77XGU637dv~S0KA$dJyj_NRHv}UlkY-^s`?=6E&(WfwfVE+&yqU
zB|0A{8z6@10oa%sU>~#rL!}iPtLl6Q9J`^;CnE|=)i)8<WXUgzVd=gi&^L`sLW3Sh
zG1*crJkYK@=@vp8fEtN0fUGbOe!!8ILLTi5uBbzi!l{{WS=R6OiO4n@ecQ7o9k+{V
zT=d%;4TPIp=JH^bxjgti=JKFrF1JtRCajP{HMO(tOpy8!H+%)CmlHP#woI6)!(B^g
zcM(6246SPSJcoc(#Hu>_x5(zeeUA;UBS;;E-vF?Mfmo2nWa6pG{6m2)DOGTTb~S*D
zp!6NR?QW-GLYHRV=8$n9Za8WdM-v+Rt?5V1v8YZqwK(CJODHYcS-$}oFg%jak%mY`
zx)()ah(8_K%HUBJ6pk2Y+J*{lHqrJyRArk#BK$8nf?`l$t--Igo{4FBTAt0PjUeTq
zIhbD*sSj7~5}J68NAebqir?MX;QC8o$bw%sU`8Q5O3oSr-~ef*^<26nG=y$SHH%2P
z1L_xtRtKj)mv!l;MUkctK@M4-mc_7hQ2=vq!a%E-ReLSDp1lZ8vO8OL-|*KT%ELiE
z!azXKnMtDNk7@Vo5uNAwf`3CDstrnB$5e?!L02cy@>NxO1saxi<<#<WpW%%g2ZJUY
zL$^Pw&~-}9-f=VCkg*4Q^aJdg1k88uF~9Ei&r1@!FzXU}?n-dCgk!Er!Y$)eg{>=-
zzPsJrs&pIrt6!_)%}Z-A-NJa?O+@ULy-qIVJGe1AHZ~IHcwbu?Z4Z#6DlJ=_fNqIS
zjd{8->TH6lIS1VZC2Bh<im^Wh+{wgk^t0#8icJfQsacKOg~kw`cdmi)a8yivnz+{O
zy}evF1fss+kLl)L!aV@<4gmWpS2<)1&#NmC^SFcM!okak@PT<OhE`0fZ-HJ7c*S=@
zF1iBMu@)G50sMYFCQ*QoKYtTwd=x$xcKS*N8c{tyIIttsCo7Yc=uW{puFe}j9FE)P
zy>tDCw_P$<T&%_1LJ)JnG9cel&nFXNtKrfE5kgpyh`8j|;8g&C4qmKQ-7pM@z5owp
zi_+&#>d=2YvI7_k2HBGpLx$duZk4WCg0X}4nhcy8=uiCy2ZUetAKBo{__B}ol&G|a
zG2~Os))9Z2l^4ZY>%jA=ih|4#zSHp0oW-mt_;b2@Tihk-;?45agi5$@!^$loL?6Vf
z7q_v>05I#cA)chuz0=tW<A~ARYvGh;FT8Vj|7DweN6eRi;(zlnG!%p6d8H|$gZ#Ak
z`@DpEt*cp%;4Ta3l%HTQVN5S9O{qKH?aaq2YiKX{xVIa(d&;E%2qi<Si-II1Wi4C4
z)NohnN|g3MQ;GcxVeDB7?y5N)Bt$?{dX$2jmLL%!VvEBeCUGEx2Z=zPxQdhZA~3G%
zI-$=Frj6VBwqaP?=<8j%+gmu?rCcuj=L}5ngk$VPx6UY)M$Dx1GMn~l)84SrV8}QF
zkg*M^YiQf0i=^<Vz`#?Jogvdw64<!SG1m?y+*Q;EfAd_7_Id#|%Nm$NtZgOkiI8^f
z<4q;hq)!}nz2COI3MbXl@y7_}TYF@dPIcw>zvDaLI{O%+NOj)*G!93hq9s97xAw;m
z4N%^!y-TiO^S%dI5G|41sXW^WvAh=M{&X7$mav-9IUjma3JCW+MpvrxAH@#Xr6`k`
zR;wB2oI|2VpNNK1u+6~MrJ47l5nmcp#F_ZgE2XcVg>b^yQL}_Q;_&;Mw|C3-r_Vc^
z0%BX3dyIDND3n0(@p#w?HT+F7vMlqi;>Tzajd!?^b;IP5=;^ExJriO-vftv_Cqi3;
zjAr66Bp=bvg6ZQB^63H@0Y+>%U*1XmcUh-K`<$KWKxdhy;o^}biC9qGOWnW2#wQet
zFr!eXZo^N56C)PDFy-_$<eGGg)DY^`)qFZ|<XVDntNn@nNuUSyfs>Y4D2C4%wOhf|
zZ%)IMB-1au*?$i@JsmWjqWH_?Ny83YUJW{B8+pt-st1&N2Ppl{D5kKb!}c64yqT!k
zWSsNa8A;<zOO4zn_55UaDH`&=dgGew3ohz+gplw{kWn{}9)7rZjY)Juh<?c|FJsa2
za5baQ7)(qxZBErR1_c}n^~^ynh~#Es4{*Yx=-3XaO12PekB1O|f^aa*qvxHmz4X7^
z&MF{Eer!LkvhSrFcUR&gY!X*yZ4i8sG{hwDZD0s$#3-pd<ziDZQT1r};hR`ihK)oC
zVBkB^R%qLNl=eMei#J)cp<HVUyzF7t@wovM@s5hPw@SPv5~C<35*-Jvup+d6;wXdP
zwnA<xEol_2FMG&tnhXBrU8aFRhwzrHTm*i2`H|>PL^c61Cu@*&=(9}=IBq}I!WgU{
zH|a<ps_!-(Qc#cDLMkN^>9IfK7%Vy&F$rC1e_wA=Uww><tCR^*A?V7MQR?#R+q*%t
zF6ybh8!Uu9Eo}A&ev%C)%aq2N+qnoDB+|ugSfg*nmcl)(uSYruF`$?vAq-mP{CUS~
z%~|p6UoG^FRI|zrvf&zT$lE=^f~zAjevVp<6?w>^$CKEC_H^9IaksmJ<%E7TH)9TQ
z0O(`pj(_)b;-5CQ#jn<9BliJGGva_d%*%$jtV#~$SlVu1M8G%X@vv$$C`pQ2K=JnS
z7Q}jAe$aM~8`5F;IT}rf+^Vt`TZY}Yor)M+);nO{d^?NpuMSPZ<}2Ta(-kCn%%G~E
zuqM2Yo(K9tsW`FQAx`Wzgn1PbXc{ncrSytAzN-5C-3<e(vDF3+p=ZS|HxE_P1bS2?
zXsLTAIdH|_NwAtB>KhB2NNOnmDGpU!p1BjKP)1L+BK`?ghcC0jF_Tb!*rY1o;RRR0
ztYdoVnK<E&M+u3Vg@eI~$#2Q-x<#*v1ZG<jO)E|JC@Av|L|S|T0UwB6i{g<I^9ND4
z@E3-LK<cer&eSD01XV8UCtwU(aKO`pDf`2uvEIi=h7H|7;eR0wz!N)aM=jIx)}m}E
z-9Ete2-#fMOnA6sD|;1O2d_<Ijdz|lHP)FG6jY2?xn}JNoe}w&+m%*2K<oaHf7GPh
z2pbX6;Gsqe9ig<WOSXiJsu9btHtuI}_u)vAHhCM7X<x_UA0Q_8Mp~AGQ!GJxmi0~R
z4<{%|MVdaAzDsrWq!BAXKp}IWQ;9@tDtnO4XhiaYOOn>FHVm00GCnx`?U4RGNMK^1
zrQAc~gQ114M_H;km0jWs3jEp#{;(KS!ve_*$)p(Tv>%U(T0$<ia5%A{19x&`yped$
z7*rFQCI`NbP~LDTa0pnt+~P-$Oc#9Wb5fu07^k)xxED~@cRQ-`nO}&|BO{pLghNl|
z>>zIeHzTYGCNU0Nv{O+piCw(ec<TWtVu+?^6F2c@jeHr_)K!@8s_;B`k3Y`yNwM}e
z+B4riBoil|zGW>_Lv!5u-g(Q=0?Wze=)$;;?z!gGy>Nf@K&I4~_X5EPVR`%x!rD|2
z(r3`SZ`>5ZQ=7+FBlEXt8Kk@9PEiE-pG^XMgK#qy*x;lN=a5e;=)KDE+S#^!T(i{p
zi}Jb{;WG88In5}+w@ii3B%s3{0q_zM1p96-O(!PBf7INLtqh3MQdL6bs(LLuF2!(}
zreuOoswtVQsBIbd;cM*Xb%C{7#;1#PnztD&{5!66oc$G6;b%6eP9lQNVtorX1Ryas
z^i=x_GZ2D`KD8o+#1s#$tcVi6B7)qf?%<@Z-|_p4a_p!o|IV*J9&Mz%fFB7)-HwUT
zfI!wn18HRSqw#(m|2;l}(mCpov213kJN1>73f`YTiq*1QbVt==icL>_p~B%+H-!Nn
z+dR0rpU*y9mR9B_(G;DUNY(j`k?gdQT+;?z&*B<#kTupUoKOEFZ&*d%5TXy?LFCZ9
zsy9RqRKHc?@FCOjE4FDrZV{xm>EI4h2iP84`lf|~2x7Wh1r4o~@?>6)hKIoIpp3!X
zY$d}y(M{%EMmRs=@|Q?-S5}@<OSj02(W+~=7*$tf(DT$kcl7wWUYJZD=^BudrhK^G
z5|Q?nIpS|vGSStV*bo_syuw6K&Gxm%^V@1|y+XDQK4QMfU&H5q?fsq~>I~=&SIyy&
zKt+@H`Y8p(H^08^DHwFy<f0A1iZm9aDL27XIY!!B4{~)8N?_!hw>OCtLT$@xavd-h
z7(4^Zty&*t?lv(vcUL4f^#VJ_x`U>1Ys*#^+gY-#Y$l1t!h)iWG1%vo-tnT0Tpbz`
zYHeqDUJi$aHYmh7_UGgJygZ#z(~%KZV>Pi#+hSRn<_&Mw)*?3=pV|(3XeVG<BL4U-
zcxrIe8nV~3Nj26UqGrczkT0{^<+5JCHr5O6F(0b3!5^5(n^6(sFmI4=8q@gsHg3kf
zcD)u^HjpX<GJcbOiQQkiR;L}Q?4>qVvBnTjlqVm$kPA6k|JJ*s<q&p$ten=^T$}Pp
z2R#r2(_@oyZi!tFwc051g29R6tRhRmee&A5a7a8V%y4_)&Zft!%%l5lhE5IbuO3ss
z-}f`>ew?6YHAE)?%Z)b)iY_BWE5D1=HRDo#rxL{hyu$NMgXS&8v!pqaXwC4P4CcCW
zcE?q>g8&hiGh!V-+%#jpV8NgHZh#Mw@_Xf@eW@atSa#CJ2A&s_vgOgs-{A~a+F+Tg
zRtf7v`E4|Ptt4Jj7xbBpny?Zo$3*~jPmQG)n${FVfTh>x;X_r=Zy^R?RM0oNy^`8A
zMHw4vjH8{ORx!W>myd%-2U`#?ITIGVzcU?30s@G$SmZ;`p;E>IZ{DRg0LRXEJW8;w
zp-i20FRXnm7|PozZx{Nl&Jrt6dLuxV4zUHo*x_Q=V!Ab9rl&qlnF=-^GOo}Mu#{k{
zosAw@)c^!lMDct&=;#K0;uBP}^KaI?<6Y3koBj+ZM8#~3?m#FkA-H`K?6!hIz$8`y
zKDCFszLu=cgR1UeSqS~XGg5J`7gDY+$F1e?eH8LKR;H0S`FFgv`HEK3*o%ctjaF<9
z(qQ9iE?$jVVk!v*qN;vVgi8L^$7lrq`(F0j<$lSFEW53dG_Y}xZKx)a$`HPz>@G;M
zubS+(ifmY$5I5Cw_g>Nr>LTK1yuRL?;odguA;+%psIL0)xlN_8igp_;Yoq?G;@>C*
zR<K%VW7!bZZb%NY{5F}mF-EJ=yfQ9xZc}oDpp-p9Qis(byd>5uYp%vuN?lWAq+Ip8
zOkdd|^8yvuHMuZGyA1m$sE_GU%<X*CKd%~qO(K~HL`4v<ANRUfP6zW5C;YN#Vc7sK
z{}lbh5~XoY%~_?(Hw8<WD~fhdTCBvXie(y})b7Q4-RP7v33CW+W&MMHsWN%omcD_8
z#UiA(#0~J#mBF%!lno+=S%MpFtCSMZwSq8+){XK(^XU??&!f`Q{KQ=hJKf+x?opC0
zS6fvW`E^iXl;cD`*4x!HdOLbe=NoNYE4`mh%VB@OP>NQ2fT==^?ku%IAOWB;yH(;b
zPX#*~6R6?7$=Jc~7LAOHzVk;V5mzvWqAVtU1f;-=!xXgLeB{ETgHefN3EYuynQqC3
zM&0IKw_07rU_tI53ZCf@)c+2YbdTTNfdR9|q&;Q7-3$IXw;1m=nX)!Us?`$+a!p|t
zA7t}s?@)+Pv&lRbHhGNgCX1nD<sPwfcE4_HPbhUTnXRh&lH#!~5of*#-&0yC9ws@F
za)kMwm#E_74Qma#!`Qa_PDd%A3d!puJdvXsS_>iy1~LfGf~<fkkn$#zCSbvEp(GGV
z^~5ja2kY2{6XuCZ09dsyJ#5umMh6_nEM)1hA-cDa>5Kuqa_`tL!1MG>A9~((fFMD(
zncs;QfupakJcgu@z#VZKG0}%gCJB)aGsA}q4#r_PG-Lc_-4?F3w>S*;XZNjiW2cGx
z8M--vokNfop0+K;fD+^}Oc)Hod%-M3Dx+2-YuZX<<Fuho3wt}=MLb=_95fq+oTjVK
zn3w;P&UoqYD9frDpP&OmzajX!Z3e!DWwQvWMZ+B8fIDqV1z%oA%#HW^Byw=$ZTK2O
zM1K=P8KRrO)20n{DplNyzLqkeCEk`wsQAJ<H?;VeM5R{nu+W0USaAT8gSaS1RVR!A
zd`r~RLL)>hd~NCjph*B_qe)t-?OV&Gx@HN#TB6UyH?$#m^O}SYFtaUR$?q6+<>HqS
zEC!>hE=*3qCDZfE(U_f%$fYWHOHwyM$0*xcsqRe@#paf1+sp9n)&FdY|C*Zu7pJYQ
z|NfhTrx*6d;+9Rp6{5Yd_^3^Bx+;IAP9bwTrI{<Gx4JbBK+_xlgZKBI4tmBjS36!V
z-z%7^_(L<@m*>AfVA5LGgV`J7YIX=BK)>0MgX0aJNGH2mD$~GKv-d1vSb$(JbnH0u
zq?>J+dDkXGwNxcm%zHd1cE5q;(?O_(<f~#!T0(FcmQI_M#``wRZ{ohulnkFTQfqQd
zbjPSylR=!Q{H<FVF(=x_km&=3Dij1pF^BA<<$>oGB=i$$>SGYxHZcijmzr85-EI?>
zJ{_*yRU}=nyREE^tMNaIX|;Ass@&$G*ou=JT|iR>yi;;uc#?r|f+cycufR!vX{)Ha
zX?5nlM%(<>s{`VyyBj#z;$i|H4kKm@@|EsdP~YS<K`9TezMqe`EJt}0C+sF~SJv-h
zm!^ucV{c+VcN$8=i>P-yBIz|$!8gqjgkjy>Mj$X=mRsZ|G<=+5f-V$_E@3hr9}}5@
zk42*k5zWW9iED-B%thAEz&A;6xNLN>wCFvUbz(fo))_Up-StfM7Nyy4?1<a8@MMYI
zh^{Lf789k0ayVr_(x@NKwQ&453iUDXcKmW-=ckO5IWU~h7d0&F!Mv`K9gq|xrxj$b
z1@|Y^8ufpLOeOWasJBRSR2M}mSrnq^ul0SYbe}5SfAGbhH~ts?cBOzYuRr+HU;gs-
z=2u_;<>T7>^2@lrufG2B>&-v^<xjDhvNBXk8!5-mmRja1lFNq36FxZT#N{I|))m#=
z!7r^BIY{23>0T1Al*&u2()`q+2g?UJ#;Aw~kE0NyQDRYwsM<-y$^`QK=B?3QSaV}#
zs7&;lLjRRsXsgx2&9qO6bP(Bc(WpAZ$s|#02t&X#@g`-ZP|VkO*{JAr_*rXi6;he=
z-?wezxUkA{t5wO_HGyE*7`-$vVLi7}E{x*hW=hlA>Ng<B+{)sJn~k8LHueqK$YZ5T
zG&3-taR4f~Oo~s#x_=~Ow1W8nE;c*VqJGuJN@&sa5VqkvKjQ)pWwq<LcNnpJthFLF
z^D(vCy_x-f>Iau%bEz}Ie;+wwveI@0s-x6`@OT8lA(6ESZLMv`=G3@f)wVgr0CtRj
zY7f;N8_9)}7NvN+NN*;+NK64pci}#Ki|e+&UN$37$&yJ;w`PJVskOW765$q}BdOzL
z!el$xVch_gf^A{VZxO~e#DM8qX|o6_4V_ln%GRzp)6f-GUTb3gf`6tKTs5_}Vm8i?
zLy6yYz4a2b1%p_99U_Fi!;<I~S+*7Zbf8dQlR0a(-Wu4#k)jorb+uK!J1lP6f|z@H
zWrCy12)9zhOGcQKh6B$P%-DQBWWxtFn6ywqSTs|9glUPB9q^}!&&r3xmvHkehA-W%
z0WL&6oEXxDr^Ojc9j5NzVtQ0u&k}iJePED$e3{410~mtYF#^sVnIn(}L1;wyO)o{a
z4-anRy_}79hWW%XX!u6L_ree!m2kgtIMO2n0=&vMKg_Bp6-Py!RWEW(o`_G%kN_U7
z*QR@QODbH?pys3UY>e@p$&6s;hVTmhR!`kM>m}T|$l78F%v_ae17@@8=;iLyy=ppk
zMV3^K+1}-*m(7?Zfc%dy0lV1Z5+D3kfwnYC-L4PIf55ixjKDevl>9wM_{KAM9ipRQ
zOwg0+`iFw=!cqk8oYxX`US8f{2s>_02|WC}{=6p3b`&A{?XEjeH)DRO#^o)ceb=Gs
ziEo#_Il80U;$XbCsVGx|ZM_!_j-Sg}aX~M(!hPR>g}$N*4jQ>{2hc<1`tjfAXf%fL
z!VuQE56y;w!pxIr>_Z}+6Z;AamFg@0*4HMofTyjWIRq_0EG2a411A~;RQub^x{}Ty
zanN|N9o+cviCs+b_stClqNdvSW8-@I7=jhf9il4%4F!gFdl_A{v?dAtf%Z5XcXnQa
zA?mfeY{Btd<b!jGDh%QT{~OcPcU99Pob(SRpnPG%;!4`;zs-2o)AG`t2mZ}{J-~Ay
zSH*DOtzUejg5(ZU3|tQ5sOD$q<GEu!-1UXCA3;*2JR6p$rv*ktrP%at@2U=@-ZQ8c
z!vRZB;OmDBY<kpg2*EOsOK964X=8S+T9_H<1_BgJ5Zdsb>ZW=%nqQ0$F)eFL5#UB~
z_q3L9+r@A8wgR%dlix|ymi*-9Yw59(;4k@Yx@<(}OUHY)Y_P`{j&CZ*t<aGCh^>t;
z?HVGGF&($xnXu8dpd%2)oHIgHd0^J>MZsQvwymB2-7;PNWsw+IDaT%6Shc`#)7pUr
zyO@faNtUyYA=gnO`T~I!tQoFiD$R14`EHvcj3{PCk@#BUOlY=66mF5oLee%#xNSSu
zf_aPOs@;Sp)c`c|WR+7>8WFw&Kh(-lPZSWEHUNjG&UE*wm^w70u6o&<K&~KSvU})~
z2+dp=LVd^2JC4c-=yh-EiHmkRaE#)?8MlI8dWvB7Dc?jYB3P&ki4<4r9}0HDv29!6
z@SiL7ZGg@Sy7UO-Yp2mpf@-TLWB3a@DAF8r=RG*%m5-J`(jco6HHWE`Aa43e0V4E?
zyL50|^W1UT)3TT?Kt)Z7xFOFTWGnVLR$NmkXU{P}cs}F24SZ=jgK+Ex=5u(5XWqNM
zul5Th7Mz7)l$6HB520r>U7pPy*W!3{N!Wu~IBAl;$$aWFV2>6sg^PR!G4pJC&y&0y
zW$s=Dx0xcJx{^6&=thY_KarM-hqRQ^`0c;3y^7>Q?@+rrw;RRaQUu-L?MQE|D!5#;
z;S95>!Z<^Pe(he^Y{BJhRQzDb)iL`J9EDGj1nooMu>*(98FToyk-TacrTi5&;7OX&
z2GbnXsL`i-yRoTSiGP~z16H7r6T;jB%3v|6V`=uW+ea^}tGc5A)JxomGz7Yk-fg4h
zTxdHI8iS&O$(g{Q_Nq}dC=aJqMr8<!H16+CS0;-|;1D3*n+9b!$uaq6&Us|29Y!(L
z5RcB}KUdchVbDEy{&6c}2_edm0*4ghmC$x`KPDt;xVcICvbu}O312OiTsVZLA?O^n
z#0v~+TigQ^IBce$(K(u3P4h|SW>RGrj#QSDQNiiRu9z+|>6=xqgu96W<#ONvMQ1fG
zV)Gc!lQ+5aHye@Jocri^e}EfgohCpi#$Z;tZ5BvHSOv3rL5#8kqLmCXia9=NZQFi?
zSYfQnTBFbpYlbdN(WPL0)AS6S(s~$d%UveKe-AGmI;1k(!CZy=^&*CQnZMj;_p=AE
zbI=OVopy7QQK^P;GTkWso}{vcyE%qQ4A6fQek%F$Th~Vz%f0M@Lw*K5Wjv?-riH|M
z9qv8M8c-26){<^H+3t7l|6AE+_pLdq$iShkWw$){?xj=|vNzt8(A)=DdURGN69%wg
zM^J5r=?d}R(x-?5<qEKSXn<#N_NL*Lry!@v&K=0=@$Izb2TS~Z58~n-chn6%acPgr
z6R@8`+ERU`151*`UiLd)c1e>UaMl+GIw`Y}{Q84thpeSjT&EhDV!vU7e^6*<nG|=W
z0k6MV0kx4=3G1sC9oJKLqt|}hWGvf1Manz_X}Du^fjWZ|Agx9+$8`fZ_bm0bWI(N4
zlM*oUKWr>VydMZQ9zi(818>Txa@d;jNZqc2Df?90)M5sVr6NDDw5tzE5tJ-}RV|p5
zPS{O>j0)aO%s=Js#AP-G&eDGNq#Wm?%nM{N#ksrkkPKxA!o7E(MR~V`xFKb0!Ut`M
z?@sGD0TVdE8m_bn4KIgoESc|2S&}#KZ0RwtNaj-9@^s~Q#il0h4xRI|=fhv;^-O4_
zl@EPpF5b<1TYM$^t(PK8ueUtT=%WCYPE2O>iQrDi*(iN1xDP*|#)$4$L9^CzUwT1^
z)l)pZHs@b{Qwkhc*iwo(TP<0KhaUuI9)WsVOtv0#o^M<iZ<Vh^FpKAH>KJ1Im$f~H
z^uO$KNCo;+AN5VKB$@tfGEV-k6ETUXcmT{ic@f_|gH9<5$Q5~{e!cO<lWO{OhD*&a
z$%eJtlUi4C_D7+;`g@|=n>I^ceF}$n#DXt@;*zQMj3{%x!K%D*zu)pT@?(*NXA46I
zTycN9aRSv*Koa+0kmO%KyEe=L(axj=H|{-5A?(K^k}AFgpBSI{^LZN@-!z5NmgvOc
zXEbpRnh{JkT}{@!q##{{puMJ#0ywV|3W9d}&s;RB$wXsjoMeNyI10AaY0VjKu}Aef
z<^OF#vRuMpr(lJ*TNpyDr_bD;x*^4~UDZHz=6J!}4Tmu^rCC}lo<-iOW#B^r+<q=m
zY_wYsr;n0q`V%uUKe(&h^E@A&J_#lDwcp-hYUS)i+FLXma)dxFJt(iyd<F#E^GRA7
z61JXy+aU=_cO?;tHktPquKriss|!vW(pzPB@o|D&H*v}RDH}Al?IcSC*BXFXl15Y1
zxNy6QT(Ky1h>R0eN?u6w4NF#h8M%&AAtuk?WE<uHXwO>?w}yiAO*>iu#||Yoy-xbj
zTk4_LB8nfcBt^bdFWa<Up4!E(y}mEiGyAjYFuIpdZXJj#({luLJ_~pk8hDh~=Le^!
zHHIu%-cBgmbFgl-^zT(UzO@Y~)B_xMWFs*eZ}=m>ZCHcZw0d9M4n0+_2|v>yMFoS2
zb#9+~4;%%$v90|r)=!LZFAFb($gc5riW;h5x#v!S6ITYJUY4^uE3PMC8Yg--ZbfQ>
z8mo|~MVLkQZ0>Hs9gdBO8FSqsj_15FH|8CB;H^n4Tg`!p!lwG1E}w^geR=c%D5bHS
z4>nm_YGW%?t)AuCXP9K%l$DpJ<O!Pj{6ZH?j|nLgeH*{&l_9y;FGlmabFEC-K)~Bl
z^|h-C5hnE^p%xl}4_2aT&Y(7A(SE(SIH^V|v%59NB#uJCy(a^fAFq2$Ox?g{th$b_
z`Au(B86oh^?Lz}|CcHr_Q3z-pG#&LvW9KS|fU5$eV%R{Yg`@IE$i({ioFJ$OLiKfJ
zGKUDHDTlOj?OJ)dgoRa$*sM(0@>0UI8e2@gi*>oKS=%=6LfPV!NriHwKw3i8PQR`$
ziq0iSBQNn9veAuhAx(2#j+<grBts-rhC<JNf!L=6<><rJR&31ZZv|ToyT;}g53?{u
zZp@9Pfn~~H(T~@UFH7(l(FMpt9gV$p3GrSc%qM_0yC?eIN#3n)EQOEb<J?575sU!T
zJS(y)!LGU!NsEz<>t#?Ev`R|k24u&`nYE{tW7pmnv-2q!2pY;rf&O)lcwr&8l6++}
z5`5Wh<b%J_d|bGzX^7}MoZOQdp$|V=az?yfXieYFkoC4_lG_#^E5}hHoQ=2Iugq;I
zb;B2#ySeN4tX^#^+whQVi-eILd}^3xB%ekCp@k0{Ui7fSECd^p=K3AEBU3PI#4G<X
z6{TSnz4FH?cpA)~=9Q~4ad%`{;a0)ys;oFYbwh6B!CM=mtqzI-wkg7(8}n%+dV_<C
z*ITTrJB}Mzc4JKKY)l}L{Gg5I10m=}eO@&c;pTpPFHFk_1+Pgt<50bSZ9Xi*hlM&o
z!+ad8jm>qeSis%^lXM|cq(Q*&NW|$rg{>c*7kXf=DsI`o$m$#2RA#398^p?r9I3w2
zl4YI8O{NW}irQn}Y6@Vc9E}&iWn`18^Hx!DJ3I_HAN~&H%Zx9Up*BLNOpAOJvHhKE
zjaNn<(ZS;J>8?uS0;5|{$M2mUg0N+y^z3o@ox;v7wf;;%-6$hHGWgP=@F5?}z-<Kg
zt`5V8WW>&H$@rJ<B99bq7qsdK0_K4WgSTGtM24LENXoPpJF~JZ?x{Wsf@mta^YqsA
zH{_?jPv#!<(O`S%wol?ix|hT-ZW87rO((TmkHfUgx0<;U#ZXCol|0c(eygU<c9Yi%
zW}|Kh@S<773Riutgm4wVv9BH0;NPkeLpMre6u#fCX8j#x$VnN#&j}?y7itpxa+yTf
zgAQfKN-oTxswNB^5G?$VsLP+3@<pNqe^5qd*tN2k27|vjgfqEn8b@Dp7|h6mIz$mi
zgXskuK_mY?<m6xt0~`-v9n~WEh8T~BRn^LFK+hmlFm`dDBiPhcu+~Np!AvNmu$mnj
zKKf7#VH{qZ(C_ynt!y|F7Maz&wyx546d@=&x)A+DaT0J(j_=qGHl{H${b6-AUUAx(
z>jC&nZ~<@&2YqwW3Pn)0Q%<aCbhq2#d{A^c`C!mP6AEOTJ>2|je<RS+mj$UF+mQO+
zG6)I8<C9$5m|=O+K?xBNWohz;*l>YxFnwNK5h$;U?EM%Y7{!X=8CuuEi*h`61SQzn
z_GAZ;jGx$d-{vd#rkc9pfGpOB3Ziw27J<c6O>7Z*BDlh=pT?5ks3&TACHqdhcher(
zi&LP9M!^@|ik6h(vn3Eqt8t1YB%!4sAnAqbcd!Oe;fy^$_4#O2!T;iOQY*dVbJFpM
z0d|U^zh}=7*1B)8QN~IDg5Z9hQQDcI9Lq$SD^cga3mar)X}d}^cHKOHr{3ck{sW;M
zL-9omF^JBF!veX=E3s;yW6DjiWtUAXKE7z};c4}G+BVkOjOdI9=lxXD1GbeQo#g18
z0_)fdrUd~NW+12sIN0flxDtI+YygH!B51<z&;(QE=*9|sfxsspOAa)nN>K(CN|d6*
z1zCxxA*(i-NCLNh$j6YLF~^e$dNzLJA@G1Z106vJS28RITB&oas*sXiVDV0|GP{c`
zW?4Ti>sc`_hMl4hw-L^%b}Od|G#A~eX;}HlUHgU$bkv>}?tW2T7J*B2=WjW)nP0Ro
zI2~8<&MF{SUD01yrkF-a<|-GJW8@%KC)%|%zEtzsTEj5K+eAKWx}`_*n>xQJc!VM7
zKt~$r=}FkQK)w%$te;6M_8tfRpLljx<EKRqq4(cl{B~&@#`ZQ?$TV)|DVKUX6FneZ
zZly8(02OFVs&4zRqHC>&j9LKI!QQAGykD(@n{+hNPhf6t;xQ`E71K5e)N~VV9qCjX
zN;n&}$ET_qhaF(*E^o40wV2><FNM$@W)Z@cgyO8diR2VM7-dut!r;b&jiXk%#*$v(
zMc}`Es1I>g`8GR|pWkJ<JI7C&Idrrak~Lhq-52S|h?AE<_qH{S#VH=b22E7;kb~t8
z0-`j|-9^sRfSwsq3jppUNK!ivS0jk9q8WY{zmb&|ZjDD6$-+L@%{IoYPCIqhaVSg&
z?M~a-k~~=)nj3n_ak@NB?=H&?=%clHYKZNHjt1~9)%kp~c1z0w8jgT+vo!iAfmxz|
z1_tE`SZozFq$O`<hM8^J;<z~628JYFDM%sTCMC3-e*`xlHtYC+0d!QXvfy=(ISS>J
zkT_lxnZ@m88Ni66b;$^#^6n}CLTgjl#yzVYJ4xRI$>PdW#1K_q&%@_Ia!_)YVExIo
z4>l!p*vVudhcVMA?yBp$K!(5I9y6I8+Vh~deGMGpbS^C&xq~w+#z4&2iN8G6@(|CG
zx#5h@T$#>gnFAL};9*ytF1Mz7t`{|M53X6TnX2j1k8Skv-f@SBynp)Y!Jk4fy*q@M
zO`^-ku0Ot3A%8S;td<6YIFLKB4{lIkV2~Mw%FTR`Ta+xatCK56t3Zo@7yO!=1oJY=
z6A!ru@CFisD%=^GU;pLnKl`}78klzh9swg2KZZZW9zhCBzH_>OsDOypZwR9wPK(%F
zT#cr$FEUshFBi#hsEufZeDyc62nE}>$oie%=49ZpMg~{%RssQ;27KUuq^11wioLEj
zH#RnU>OPc*AbuoH1HF@6*3bZe2z{rBI6fj54PR;sN2bp~9kVRDtPDzD)C9KT`0Zs|
zzEpb!D8VGgq*9Hesj$tAPG!@g4l4Wgd3Ci~TROc<xKMcD@&Rk|d-5Uc-w7FD7q9>w
z%$0?n1He3DOn1aNky}xck`Q11nvEjA-0&}1>;y~RGp>acwx<>f0TagCZlJiT_|FdU
zh7!uXEQoUBQN5)~A@{RIe_R1ZYgHhK5Ge&1$actTq8MuXYFAWACAautNoih<Ejltv
zZ{AoE;Xidd0Y;QdL3ppKi>0(Xt=+$vRs|(T@IERAhQ5hcY$ClCeL|b(_$4v*{;iFm
z6cIpWmzzh?Y)zQ*hS_8AF*kO{J!PTV%ajtE^WC_@yV~^67y_a@qM>@><cSUIx!kdj
zxod;%_Al~Dr-MlwjU|r~VX&w<4(1IF!l#az7e_AeanQQk%@&p2u#wSXPkr^(ns_!-
z_y&W!Ex#;paGXdn-jY@$vaIyDzm;)^Hi1rDT#SvjvO(fA;qg}X8HFt;x)_yVtoHrk
z1l^0K?RDny*cL{s_H;o)_-1i-0BBZ%tze78o3^nqA?v7B@zyB%-MKd%{xWJMA|MI^
z32<stb!Ea0fz+{Pi_N;WTBm|ZgLPw^X>7EpQrL#Jmfm|?@z%sUmoaYk?HLo~p2cOP
zLc5r?6WDDCS4$x&QL&7^F4fuDNO*cdZ`*`E%sFztWL3{nR`@q<ayLIXRBrr+v(K|o
zn%gm4lx3M@`>x50h(oIf({eI%jISTlF}=z$#X)DBUyw5OGx*iVdt?2JV|hDk)p$)z
zD;r08TO)7Q>?yF;!`v1);A{=z%dNfbQ*1TI!eYI6+%_=v?;d9Q#Xi_J?M$aRXn1@)
zW>%K18gjXz#Oy_y)VqdSzI$NnC`>M@4^vTc|8ryH{@(Flk0)Mv`ClaL>e9ff%VV<s
zXN6T=Nq^OZ%|;W@8`hetN*huwi8I&?QR<iJwh)BPR;MB8Ya=ME?a_ClBb>%&;Cq~I
zhsj6BTg!DF7v~>>&~&o}Q3D58B^2zzcv^gaeb=9hO26{j{7BWVd+J9430I6X8vw&Y
zSQZ}EgF7mFtM9zGX^Tx7B8xU=VX>h0sP``t{`2U4zB4_mI~6i@u^&3>t#t}ApP-Hh
zk@P;#*{DSZiqG3R+8c3DQ6Q+W-H=sy#eZMlWm&Ldt5q`1B+l%HoscDzLkt4McET7<
zr(|ncX`SQ51}`9=ZxhH##>z$oQO9av>B-1~m;`j02JVY}w-45XyLd_v;zuE~yX!D!
z<n^T!+ogtKMv(xn&TwbL^T^fAB83j=D1F_uhlaS-W^@@PUq+ypS-Jw*5nH5~8ns7c
zlv+(|X&$M#YO7lJvj+{D762)m`E~$$yMvf6v>JC+!LDlq|0l!mH8}ms8<X{71n@5!
zmn(IxO4!2%gT$_>A?9#f-Wo1^p626v#5cM(7A9|d$_zZE)}IzRo1cj!*;{uR?ID>G
zlB$S`hxCV9U&O*f;VXS(`~eH%NMr$86$w~X4`*8!w|XQj#P$F<6nwEess``HuJ2aG
z9G3cxdO3v5UDR?-@Eg6!5}lY@7MW)}_3c}<XQ5<LcNR5db28mQjU=dZ%kbI|AW|gZ
z+gtQV4P`}I1(Cde!){lXUr|0dUSl-$_wHpnjHd89trm&y^3u_Rjg1X0_BdI1Ts=c<
zfxsU5ScJtL(28_fO@`*!2|&Db04@SFn0l?@-?cl*5Y#-6@p4SB0|1-1`VWZSAzkJK
zbDR<$eB^yza?@O3pb#KQzZCiVXZeJ0psjnno}ZX)zPjqXmHxF*Ku-gEM)THi%DE%<
z-%9@A1e$<jV&dD!XxO2(Gij}>`yg7uA3hC*u$}$)q7P#T%|E&uh4?4}vH8`<5C~9$
z*KU9#`AjhH0J-V@S0foajw0l=fC*ZV`>($(OI;%C++7pPK}_^sHpZm&W&PYO_QCWg
zkiRH7qi_dg&k7$X_QtZlV9aqkHnJErQp=CY&?XJq^mZ+|?UFu&OS+oQMo~9z4`F6r
zwjifOpAIM^2m|~xL?2nw+yyxO*!GBHf*f1Oq5G&bw+L@<%S-3>`3#b4_#b`9!L3r%
zNp`wVl-q9ACUyp3*)5oTlbPow4F%N4^y4`$95uNgUZ8>UO%}b0a_<Ro0(JDmSg5??
z&?Y}CD0i5H-Jl>-rCC)$27rtm#&Ry^B?#;vAzOnq`HH3H3K()EvTMOtENE+7Ta9JI
zjgHd|xvdK=v$;ORJ0~3I?w2yaA;*6k(3^yR8;OkA*sPeWdp`|y+i=}Q4jTl~VkG4u
z(JI5h*pC#LN3R(5&+{5LNvE68u9F1Km11bWVCb44GB8bG7r@i1Zwy1wa~R$()XRJK
zD2sEOqXqh}N!o0h1bB8%!S-NISvtcyaF&{3HC_YHRB#mp3yVufXW-b{;B0ebaSVBQ
zvgi5pu+$88NkV`#K}+I?Q4F1BYtQa(f~XI(H~oGentGeCbOuE&=w*FZaqNBHCB!!3
zHa&+2QH@+>9Cipzqs-g<w)wu8*?r<S#<<9V=6Wwc*rD=nR?()pw1Eo!rr~n5X?j#n
zaN?8fA&@nhR(-$>*){g-Ld!zS@gqJ9T)F4-i<4s7e{pcQf3*Me<KzA3PxhbhAHCj=
zH*8O4_1JHd|3W*Eqt)RibO$QQa5(f`!@32G0h7mJ$3RWur!`}C4c(L!7$X-e3*e!#
zC9yEX@vh=k1)bWe4M@)D2Bym_Ax9{zoTxA>3wp8GPWy9(?G`qf*;$gS6e2&73%=VV
z5X3!m=;1~<a0d{a<U>d@!=||pz%Cbbp#`iRcrlN&9C$UTGp=SzJO(WtO!u&z4zz;|
zn0u*=*v$(GS3yc5{$#xdp&1Yl1AjpylyV*_SR3-w&nh_GF)DpOhdkAG5G^u$Y#Jlk
zN9CFcWTB`?#)Lz9iJxkL$!SK85AKkjj3A}y0?tgfG7D<u&u^d{`_5rlIarFgN}uXX
zxr-0f^grp(o3}Sy(*cnyfR9!UIJ?f{0)r3W^bWBKb<pX8J;!-9q}FBmn33_TiDjQt
zyLHF)8M`9TTuHsb-X3J20wI%VYq=uSGx{UAFJwe=aN1e>+uz1(-R#?JeKU3!fMPUI
zD%5Zta0O%)!aBSlL1T9A5u2D_cTCB#fyV>zUL&&>$ZOtsi9`5c*vA{HzV5Cu^rA;L
zusvfcbE7)eCl=OqL|88<GE=%hyaFumq!Peu%3Zz;u4^pY_hZt7;St_2^;QmG!Pw4A
z8XZAa_In-OPFES{sYb~Dut!LELv{zsgb&SJcE&?G54@pmGaoZeN}1F6i~rP-qOGXe
z7x<Rj6GQ0yYAa<j`9{y;Exvw3_IqAD!5IQ^kXtkrk!MidxPJyxr>lywl@#HFslBgW
zDL3Amn2LPQ(TI^@V{V2~BgP6h21W^VEaXzLu*fL9s7T*S-Si@!RKo>mZ7RIj&Pe*`
z>)4Ww(2h5e$VjX(hYRaiFPCchqMZ>Fe)z^|KQ2#0O;-rt8a+H!W(g$qV%{fiSr?=?
z&5|$=C<mKT%EG%)GL&txW*{B0HfR7g&YKi8EE7}$MRm8r4BF7Y!x=~>NEzhV#v4W?
z6$jPD37EO;!pO<&f`=@8Ju>1we77&@SLsf1&%f-Guu=>+)CcT1@g99I_`Q!kk{Har
zfTq;PZU83+b)j$A+-?KX$XS?G_J_*3&w&%6!RN^+3~)h!|K5umgydsgSIOY!;Uphm
zgl4H^zCObQzq_c}ww`rO0Qm8O?WTLnD+#Gt*(flBK(lPl$&(rulVUuiC<<Xy>YJP(
zs@E<@sS(gpw$8o_5o1(%c-gJm*BAU)o3FQHST{Gw=h0XcpcCk@-fW@EO|&mqvK_N%
zP@mV#E=aWX6WC)(3@z<ZH3{9v)Z=qSsnX+(Yea*k&(Uzj@eAeAK5LXG4Ix0uh9XyP
zU7xDZ>ORaZjLJ{-Dvr6ti9s74$WX~!YU^H^QxobJN6=p$J0`=FnR1-<SzVz=-VHPl
zcZi?8YS<%4Tf2(5`0GSOTDr@-UAi#|EJI@FDfAE|)nHeaXo=ePVn?}!gI!0!-fMxh
zcQnSy(HY(`q?=dOe^=zYIlpE}oaHJ75p1b~Hwths3ykZ6&Sw<`p-rGG7k+|xpIlzG
zquLf&IGNNE#^Ip3!=2$!&Rah+l=kr%tOKD5>uNF?H^UnY;kJC?`hQKaoS1Q^09~4K
zU-&lM^pp$@h|(haMhFl_1F+X5RDKbpLu`wMyHQbRVx73In`pEV*#w3UtlMi&tSai~
z)$B<*15<dK+_g9u8JmpMY_B;<o|>#@Rr6_~4=8-*Fl6T43l-}TrhLsYw7ivF93qxl
z{+2HYS0=Y=!b3gPE*i&i!|UAeIybDdjwG6E!HZW0FAT_f*@8m$t_nJzfe#vE79D>>
zR-!G*T!?cB{#~A>y!M%U!<u^xR50MLey+aWHKb?huodIf$N6`JjMrmJ02pH{*1YnW
z85%9CT*9W-w-41^{eq;M&^?EV-5HG&EeCMLav~}d-|>RT?Tl}GKGqzv?_L&gR$g-O
zN6xTm?tdPIcBFRa){Q6YNTC21-Z@D&R(P|Fa3yc=*KD1KEnhcUzHYX>3hMKfnV!sz
z*~0;W_o_qHuJw)qtWNKj^u7*jo2@fGHgIm)Mu1wKE1O_M6VvPT*k5<_lzVdA?2Lzp
zVg20kRMhS;o~=7B0c-)*$Bxrj7h&INF<r+c_VZ31D9z0bXNRA_LLGM8d*fVDb@|Lt
z)!qE#9C3+ubn%Wllp63_+`e;0)qu>4!>;l1CQewlIs|=c*h}TOoRvBOEC!c=FP9f&
z@!<t9@Sx*B#`2e4@7GD%iwK8(Ri-7Dko$wJm+A8i{ByxJf&Flkf|U<KqG&mwknd}|
zA#va(z;HX^ENz^j!PNh$WVn4P_di(Zr^@{Qr688gv7$%rEmc_qmfEJO--Q&pWjCyN
zC?y#JrBS$ULG{+n9#IJ1?dcYl&<r~cY{TEPJmdqsyRuNJy||Qs-Lnmwm3%4TvZJPx
zWPM9poj^Rqjh^P9+^LHcpV%oO*S69^Rr1`Z4n~_M>~4eM42$8bAl+ndgOreSMFE?d
zW8Od@8vl1*&UCG0PM)$;p)FmV;4iqbtp2*cPE3Q423pfqqzJp1v=Bjzgu-@%M5{2=
z%Zb08rbrf+-jO@*Q&j3mL=Xn2co1nd-kZ0*NE75Mb+=pW<7q-{b<~;U(}HZVcqwN=
zp;6nOjk%Jq_(76WQ+@M<jmWFTq(GZM{IcfnpmvO6y0ypC2ou6Yn`81)Q|KiXSi!*|
z<oKtk8WOKWvAg6`-*>HphWQS^^C4U6zP#+nk1mF?2-R<b4U*)$lds+o$z64)XBY}-
zE9)2tqQ0UV%u$cXSsQKj;4O+{I*FANt#0@b;@@pFqsDMZO;!BO#@i@Z42LTrrBz?4
zb?8H?w8-GO>UaFZMrG3m3m8EJA^~d8+UU8DW?Hz-dEM3$=_P5Dvar}MaJy@3sf-F(
z7R$7@gkMv2)kHZVi0>J-Okly`i=>(-n7pyI-frI#B$g*aCb~#yEN<Kpv4HrjR<}_V
z6^aTcaXz|6BN6a#TVbDs-gm&udoNpabS6-EP93CGi5MBL^=rynh?+KgqXnzN9Aix4
z;XTChrIOr}y}-lUhsNP|m5nZC$LywhyR>tPQBL6xBj~7_CfALn)x|82#+X!5Cm^-2
z!#R1!KDKRd4KourWLk-BYgB}hEhU+4h8>B5zo^13QDIEdOWU$_k_(|&;&LXMOB}H!
zRXB>}V#AS$!Tn9Vf}jVWRa~0k8yJ#3A3R>w4?%tY+oFLEClfq=8zE#u@E9o+c{tw0
z)YVeCm8q-OUVJQJCaJq3ucz?~>_Qjw=48yF?vF1ahL?{shn7bbn(t><r8|d(e?p#h
zdNxOEW-@ZxKMnQ7-sznW&hQT7OpYmN-3i>~p{JpD<&dg<W54sVa2M0zH}8uDSX7Y3
zQp_9mvM0<LetQ%6Dbvi-`ZpPbYKd*T2D9t<m78y5&6STAH!-J96O-0KHu;2qYc>_S
z<ml0^S;MVPiy8p(FwEr*lzxk>X2)02dUKkXRD{FO!+kB@-|_U@8jo+4)OzGq%Hdd;
zO-=-4@n*no01k4{S3SuG1-S?Gxn^J4+*8r}?5#E{2a!R(deTN3cL>u`fj)M&h=Y0@
z=V&Yj7SnIddt<HI7Leq)PDLY;kAr-0UJR9+Pg_B~!5bs_V}5G`f0PZ{^8HhUr~$G=
zhP<tTXxP6k9g4<tk?p~1+P`@!*%}#!bdN1xz3e~vb+Pp8b!)Yci-5B<cn%79UM>Cl
zI`I_@3l1I~Y-K-x2@2Hr1w~q9A8zngfGr3jh<C?$kmF%jJL(J+oy{+Z)W3@k`ubgn
zMC!`EvwTGT&KPXg<@js_cCphEMBX}{j%OfS(I@VBX}K_hwpc(cHU?9>*c~&%`2@1B
zymec5-b!g-8~|iMo4<9fMwdnCrV;o8hY_;#Mx!#93i{Z*2hsbq!-x=uKqXq3FT)=?
zPEBMz`2H+Bce|<R98%Gtp+k!yN>)t7I8Wl>Q{!b6rA99bnBpq%g?Vrkc6BYnm=gp-
z7)2ZuD7ECAKKyiA6b_9-$K4h~{%FLj<rLJ=OL65M#s2wEu|ev@xR(^*1z?yJqJV$B
z#L?3=901s>Qpg5zLrl9he;5RwN^d4(&K87IARk(ZSz1$-)@0Bk=-W;?R<GFZ?DiIe
zykzxeL!DIHN??F?Na~cA7e;=|c05*ut03Yx+Um7uA6YL<tlNz}#jr$#HM{<(k8Un8
z{%{*@Qf@EzYlnX@Fp1Fyn(^ykker&0QGJEsE=PB3yJ=WCWqxIQ=y<ucNttb0v5CoP
za$Bz5C`EW3y~9O=cX8ryAH;W1P4H-0NwDrKTVJ8rKFuP|l7*w*{c7Rmxv_1!w{^?t
zx=KHzbPu<5z(#U+pH>hFq-PZbH;gOf$>c2ow-b47Ir9uxi163%o&S_Q=lS!Mw;TpK
zCz}A~-GRN-B8{LS<7c02)D50q{iY4uJfEJ(CE`v86xB*keA|W<yIb?8t2V5GbhqQ`
zma%`rLyLO)h|}lvV=Jl&u5fPMlE4!AD}+lYjb&bpprs0Cl`xdEX0`E3ZR5$ATat&h
z`e^S*sS@U96qXD2T8osy#0_Y3JEjTU=67uLiAd3!zHpjHr&iyTZ<8rx_sO4XUOT*Y
zoHIDoJBpA|^kr`ikCE}S5*^1cs$qG$Xn63|<`zIk`q)Uz&?8kR7w&Xo4?^@E#lzb+
zn=Z(r+dIq@qDzB?#BZA_yoNykD^3<VRnY?CR`AP`sXP*MK~7JDxTG?J-jNMj!lon+
zq6WL7b`;^`%De(rTEZ~I+wqRghnlzb5jON4yYLlTd$@^Yq?Z1ur(5JS@vG(Hn&?fd
zkWnK^l$tmGV&gwk1}TivVWNJ1BB91IQV+B=<YKvn`06x9n!I*xU|J)-{wxX#lIheh
z4{fXjuCqms8}T*ZChb;l!{J!b`<pmME^817yJ!x*l>A&p?Tsi8iCz-N>voiuR4)0l
zI7bc3mPU}Yl;~Ni-+D=n+K6heT2BkErSfg8x^2O8jZ%Fn>#Lx~^pg}6Mq3ekBID{c
zdbfxWj8a)Bme(~{gMYZ`Wg(@yn49Ysg0cL=lns0&vLk!ksMom36KlsyQ))HtjT$p{
zzM=O9!g-~EFW&e50jk)dS!^N2{N=J`i~0?^sc!DqTk-t**Xr}4`FWu}vr9>^@l@Z=
zIkuiM<?QK9y`X#8^58PPlIlTyT*Pt(8>Iet35T(Q{5(*`0J?_2HX%Ll^9evGt?F(k
zV!rS(p+(N1%bbpLZJQH+(iHCl=aSGk%ro8MBbSb#n^bTTi0ZZnaP9a|GNsQhOh(n|
zy9Swp2MX=aEB!ud)V3F{zq4zUq8wEn(`x^EvuFG1FE;%#*jnj9qtb)hD}B+Z^hGS4
zTYYBH-M?vg--vo|4EvXu^8YRt_j;&qcg<e)V1rL)uT?AuoTn{oy%@E_2pjOb)q}+V
z*e=}fh5Nnu!fdQ%*7%OfJb;sb_8Jl#TbB>bnJlx|cZ6&c+jynJv_Z4({kkz_58vJW
z0f2~GqxP}ozolUHsMB0*LM)?70wq8JMH`{V#e;^WJb(RyzOE;}HUsR-=*1y1F^hZc
zvv^5<{x}WDPvGX@<Nlw|qiM{*BqyH3`qDY1W~dUmUw?rkT$1hJmZf{(Cx4r}L&p!K
zo3egg>XTtQ5_9|8+#pt5z6V~`g6CQaN=u!q{93qOpceqzT`a}mBe&kP^5|RXmY#EO
z;L2a?m4^Zm%3ZfDJ*{cW(l_QWLwCi`b*KkDhb8z+!7q3koMPfz&co51hVhID^SHNk
z9_wio)_A^|&M1+lZjCGwbVHcPiMl)}bGTzzk(z{DX@s8PYn=o{;1E0<^`V!Q*5Eh3
z*Rj#pY{cFn$iaq4wO+R2N-&dp-Bb1>nh;NBXrp4hZ!||wv)ZwKIQpL84(5>g?qL{I
zc-v_<rC4&VFS#4Q#g>ydXqI~AXhFU-!&2D~=-1H<LjKaIcrax3MO$N8NU0$H^pZ}L
zdRk#;=osT`V0&-Mw><^H>kh0=w+D-~0K@Y{<eK11>DP1N!`{SY?-|f+<ADh<=g%1b
z+Q+srVHHbPcN6Jc0~vL%t$}bL#Y^1v{%Q6!uR)GG9A+0-7&u-Ct{#T5B>v)x(syK(
zVHq)EJM3lH)TIJ+Yi@5Z!jdhngj#N`mI>HR4JF))t9>w$cPIeJGS%=Z5w=3SH#g8%
z$=yw-cH`de3Co^T)!0bw*|Lj+(^Co(>?h(-J`u5pBAhf|uZM~hKw!(8SgKjP#`6ew
z0rzMqq`<+Xj%^T3z=Q)YztgTVZ2C^jLpkmwf}Y{vdX(&#G>?OFI)M1T!cD3ync7Y~
z!hm$j(O@wi7f&P}H7*02O%*+cUU3)A!F&Xkb=SDD7f6?UEbvY@J8@-5BLMkAClI(i
z>^Rqk)FbC=4&z##W|U#T(F6z6A|GPlI>)pCMs=eE;8@3^5fpn;O`p!D9gk-L^}85F
zjN{-qfN!T7e2u22h!yt~+EH;efhS-$4r_xTCkw@^^KynUmoXhWWu30Gi(-0KWaDyB
zj203CRb-})QTZl78RHv;47BRJxR|@^){n&^NRqa1J7Shp2@8cJOQEjBzI`P>UU%)Z
zAGxw&+U)}m#7uj#v<_Mqx4tYNJ?IqkiR>ecMvr5p;#f&;fKFrlj6o`_S-;<Bfg^e=
z)opdat+M4CIACpdx5Y}fmtB4-htw%+PJR=J>tgnlQ!h710B>OcZ{AvtDauZs=tzBa
z^*0h5Bj>#U84G^Ph9I@b{H_~4+S%oJyu1N9g<g#2wQg{;8ya<o$%BTpS7%a=1u6}&
z*=PoGyjUDECHoKttaAyv$4gePG?=`T!m&1xI>QFMzB^IKvSvCC+G>UyyWZmUFlnb3
zoN)ZLd3&|xp=aKoZw1O~KFC?Ap`Z%fq^8)IH|>&6H@-OT0~TcU-{<ab*AA%_DA6*&
zuL?s#$utas9d3goU|}mP8y|loJezlS%sv2lc5r9^MtqY>0I3cmm7r0U;*ydJ{V}ya
zJvR7x@WSe)w2Nn#tGg`G0|%DN{D^|QS`RX%%$BQw5;~w>?-rQ@#_mnaqE(<visQ-m
zb`xq)%`RF54x{nguOA@WXv83G4<L#%XDHhY4EPCU9c)JD76rOGI6Wf8Q93MUbUTM{
z&6~Ny96juCQIF<suIO@Aj>=Fa9riQC)YJ=rE9y?gJ!bDohm(@J_|oyJkemHX@UWMO
zA#5-E)%}YJC4SZRT(OMDx4dn?r)4;i;G`L=ljDB338GqNosdQW>qy~IOi+|1w9on~
zi+Pb%`}ZQ83H?PlYXf@z+rPE0*Jr61GQO};s+hQ-l<(EX1C67Gs;?o~%!URLUJn9*
zvT=3QG}|l5Zcj(IMp;&wFxykM=I}E}II@6bOG#kcjl<XW?WN<IwyjUF_p~<O+wo=T
zDW-v2AC>P5GB%^+3dImyZB%ZNc!72JYn$cSr_)_k^0ck5_Yvh(QJNbhG<ka7M8e2l
zX;FWrMb)F;&VF^P`YW&MuVxY!tYjwp=GV8;Ax%MEp__axD1}!E%4j6fa`CJ+GLkzS
z5N1ZnK(tL1h!5&07%h$1M^H*`Xpuv$I8xu$PBSo*p)KC5r)}JLMyx+HM*__O@13KZ
z4+AYGRa^wy_}s!rSkoYSN^38g@$l&|32}M<OKB`<SWT5hT2viH_WnrKhU)XKx{cK{
z8{8&NqSCD@i&Plp-=wpk25(VXB*US%X)V%)?=1<A-l7sfX4>Bd!d93C%eCKR_2HUA
z9(;0}X@%<W)7gP|+vP+A#wE;7@^;iN&}>SqVo_WoT#Xq;^Zt!t<sA(>syY-bkAbkz
zzP3xW>SX8ZO`n#pYZMD9m=IkngMk44g&w54bh>V4<zR0<y)<=P!Ct1HXdW;15!_-T
zgQ29CnKXRj>CxcMgQ6uELaaJfUti7HHl+)-%|8wv`zdFtcTIC7=?O*?OTr0FRPMH(
zu_??anxw}uJ*3u&(LyzM7E~CFs=DwS(vl1HN~_egC_D=8X9aofT3O0+on7Bw1RwWo
z=1yG5@OT9gek6{H&vlw(j7u!*STP5$B??}$+VqB;N7!(Sqtz`T3!qDHSpLT)Ap}5D
zO@$o_;18d$FBE#+EVNJvMeY3apH#N{DU9f~Pr)sw^yoM+i8EgYLz$*k&3}eTc<APi
zhT(U#37`B%OK_8oT`ez|GUI)JLZ;Y$xuXw@=JoM*3-T3g$W1{B9uv&F;}Smjj56|$
z%lIfWlQ_X?Gt|r^&T@Je`)dG9cl$QG4-66&+{Q|iMU6s-0R@KJscV-N+&UoFi7Q&<
zj?X)q&eQd$#aQ%_OmePJlniehQ8zyOOncnK0$vaUd^(RJxP*nsR8hamKZsv8qPwJx
z@0ZilNG7R{GHp}AjsyYiyh=md2o%2Qn0S6e&UACvTXHE>d4vi1V^JyS4IXc9-hVti
zD==>fq$|x(v~yWZ-Ie(QGNutkO7#1!vU;3Pe2SV(ffOY#`3Z2`48d=*&0_tF?7M6u
z+sa~K-#IchS$t0Cv-8D$%qYCzV4ZLuD=sFpg~|u$J2=m49js+MGZu&v{uW}9T1jT(
zOX6LeYR!L$g#b-XLB;23j4);!BtukqbvCL_^3l#{a-QSO!a_F4>H>Lga9Jx~_*Apv
z7z!8KM<r;?Ko_9JCU}MSpCU<wPNLAC8S#PS>#7^$Y%wjhb$7i~O3yH<ABvRwxKNF%
zZ9*YcnRQto1By7uQadvUaT{W8uN>Rdm&EFM3XQ3LZz$t0SR46zC}%`gks3_3BT<q}
zTGu)qEJ@f<w75w7_aCl2d=3Jc)8KQ{eV7Zkr9+tBN4IZ>Rpk`IWSZ6}uI7!+A)XyB
z#%=%*_t54&2Z!$=3{PHg)<TJu*no;1Wm|f5F?g)G`m(qM-rdzU-M`2uoz90;-rAHO
zw?u_CF{xS;*GASGpF!=2znWH882#(<bXrY2YkT<^PKnbJf`-UqKq3)Z3W)lg3NmZt
z(s8WVWHwlp5q67W(l*o6QUn!U=SF*6o68Kkpgqh!I~HVo?Cyl4PFNdpthF@-ANG6;
zw1Cn3j@%>~cZjARoZB-|?S{);gbUUavJo=VJV#|6bL%M0OZ1L=d|9x^_jDe$Dg31S
zu$(CUkdKEWxN%ai(Wb+=qu7nxc$~ePHk#uZ&arA#!}FAH$b;`K)+%evq|RP_4rbIy
z2P5XvSi7wamE%20?)BD;0a_i`kU79-|7uWB-^?t*<MIkB!a#Gv8FvctLWKS4hrr-A
zvDc}XkG7szq-J<QWO}URW626j>D$@o?Ug8%BJ?fp`OSmF!9(w^1Z)g*_scmYB7#H8
z{U42OCSWy;uC4WXb>(ikC-a$E5l_F}+K!7H4pz)yu7YVYzF<a5&{VRO?nUnKKn#1U
z`7|^I1<xJZ<*7zNDUz!B*|~2QGbZ84V6d1O2||D7HODyW|0W`00Q1tp^WvnKq7Ohu
z;H=ZsjS<T&R!rxl>98W*1R>Jh9*jo|#%~ru@iwZ)(S~S{xE1J`K6YZZSfxixI10B>
z!PqFRFpkxD4=RE?wY~_YsGtvOaa;a}frng*T9OVA?aBG#jZ(VvqQM&BJ?4{;)P0b+
z=E!)0;`hzl8@;dBvlr9ivaIH{Ti$38|HWx@Vq)vOADUBWN<Tk}Laic!FsFRchk)TE
z<-TxGE~<GdYlbJL##R2aRM+gTJEO2g9GO3fL#`_e!hZJntncap(vj&#UtgT&Gm2si
zxr_OVkdQ9dGZ5{#+jbdh`}`FGJ&DLvI-WF^afJ*u%;(i_N|TD<tvd>nl_K8N*6K!C
z3SQ(>$Hcor$P#u@X6S<*Nb@O!hbO?yG9EqF`;p09-G1!(VM@In+N)2h=`(i>b;4B|
zbEzmXYalO8`GDJ?g`11Q0FGP3A3CjpaRa;9phXSIU%b}$cq>wzYSKLrb%Xn(P?`AT
zU3Q6EvOUwp?J*HHz{J_KJUesDz>pm@n9j?I)5f-G(WI|*?vCXq@3!RlZA3N%K`w_+
zc<mQ4sqp?S5q*j%n}%--P#IY|;2AqCS0<UbNS5K$WNEVbu;`jhyPR4;5<}oT%b`jO
zhG*unzj+<0tYT_DoIe9)VEg0JYY~neqmYOYsgPUCw{Y_aLQ#-u?yvK~swJYp9^5^#
zT0i+{RJV-4^w&0yej=cGs_!XSN&TxkMR-3#>9|Uq8A+HWgRwMjNQ_FlCVd+jeM7kh
zGqc>4k+WJpDol7>&C1ioi_!ed9qS#5F-<jL0&BhOL%-iAxDE30pcn!3w}qD_kZcIX
z-=c7f;$8KJ9yonaAZWo`YFrd^*$fMY)DC>Q>Pc8dD7wmGhtPwb+wtrZ@=foEaeCLw
zt_ry8%tydi<)b;=T+kg4Be*)U91^tFeY;YQJ$M2I6i*BT>{CzM%{3C3=}Rouz(MvJ
z4bp`Bnn&qI{uBgWRvzak6<^ng_@V}(oHbNMbizT?;U;556gP?0U<y`m$q4xNKp4cF
zzg!=-vhjR0;+FzHNA%n+Z<?PKYy72=l4@;wc9M5CdidY|pSw~pc)YtZ|LgSh)O-M|
ztSzPCVLi^;Ni`Zu!5dwH&9t_>!%M>}d@K7}f8w0d?3)~HFH=KOrjelovCH(syip%g
ztt*SUsC{E;7J7)R1;Ye_<=Uz+QYM4Zs92v68rRu-!&rO(jIHb|d8G`(LUnH;yp?%z
zel6iSgZD-sV<Gt}>|eZUjiwt>1W{u>ZSXnRtcUDlCgGYv*zTGs!o!q$-eyBB!*D+3
zS6^;y^nx96jXkcpAH~6Z_Sd=F-SHv?6A;zjcn*RK{l=#urB7?URDi{;?9JM>BgJbF
z=XwpbqVR)spzw=0Aph(2T963e^g={2j{2rL_fr9jq1<#I=Kf$~Bc?nakvIhERwL6>
zf;PPbN3JmWu;<pm&U7uYAIt|uOX$7rq8?1k$*fY)J*HQ5j&>jw4I(1uq(M&#x}%{n
zR(L4^XQS6bI%PD+c&nne@nCL(#KYMPL>F#v=4J_29*g@hS6Kn^RFySfU@dWski9$D
zSAe%8o(rz#f=}f#NF3hz%Rl(~%jtthaHvQ=+=mbz7Li!hUwcdG;QrA2LwSKb_@M(`
zK^?92`}ZA1D)66v4Ilcy)?oY0Wj~l)lReUXA50(7FnT(z^i62;9K}yHsmZuONrLMJ
zy?=U$*3Is?CI4QymgZL>n(}a13^BNV9aK#^C0c$(at<<*R$0bT7bNLsDV(k=3^Ao7
z)R1bsKOfiU<>{>Rf%_d%ia%F_*?yfNwtk*J$Hp4H!4WTaoscsYK5k1UKA%Sp^j8Pd
zogoe3_Svfpa;N3A4!Lwm*l=))L)sPqaTy1j_03p+ssMj$zhOE-J|DV<r~SBlQ5WC{
zU?*dp?-)v3^ugvsM$yhbL$SldxX7<@(HXiA3BIl&{9_ZDqwxos6Oil$6PrT|7V02^
z!<jv)rc{%XrfTr|?8aitL!jvBlze3Q@$ExO^Gi?P*qp{O)H%5?mVMj663Nh-x*}5+
zzCFi?pH<TZZCc62M^BuIj}z*Zz`nY3iOP%rf=bhe@<GXN7-i!Vx)N?&?yaG%15el*
z(A4BDmA&sYPTdD@g2?}KKQ=m>Z+K`v2j9#c`#*Dr+;oCHgyT!#;hXvY0$PWl_$r53
z2dUmcI_N*t4H~J?lC}|rxBV7(nq^3(+&Wm?qsh<>njS#g=Bnef3)ifXrif3C%+;A-
zCFD#P6tcNCwM)lM!+vxL#C$1S!G05R8m<$Nh;{;TF?Us)z1UDxzb`yVjq)Vl22UZ$
zW&H$3$n)-^Ctw3=aEvg03XYh|2(&%?1g0>9UK4bYNG;I1j$US;3VmJHMobY!Y6^1b
zr$F)=$>Tn_&yQ#`AkpLBHwrvI)nF>-_Dlc~SR_JCtfI?4E62|uDkH1nZN_euI~ZDH
z&krCGYf&`w&%&q-M!MH(Zz`mtN`CmZQhuFSYz4DcEg9CKKHa~XB2b&|Uk&b)c{v&$
z!F*yUQybEp5xJ_-NpoIdBVk_*@aS!n+sySDXY07_EE2)a6{)N*%i;>yDF}4p_U8%o
z?5Ky}ZVeQG;=@eKGZf{Zw4D2szB)M5hkUr<+#WtmV5!?PTxZJ@8Kg0SR1mHqN<3f*
zwD*>c8}BgK$aWLr#(092I12m{n~MFfz@55lQ=I@%CC56fqMY4?2lRCBo>m{jvJeCL
z0l(gKld&qXTolZ>ozw8u8b_#>%2SOyWEiBRu5&Q#Gv{nyeX!=n2)eTV!6C#y+zl@u
z838PsC{9r-b(K#sf#}3>2`A;qU2A(_r0b^but<1~3=e{gl|-acg+fKp+lfUvmUvNK
z6Uu#-c%8BWx}W`2lK}--17M;ZTEI~?petBEBdi#Jflvw79AImaGasITCou>GiYX5K
zQn(h--a)S|tEKK7)F0kZS%RPdcBwIv4nMVsO?4TU54^3rTVz{)x66<o6$5vJ9CeuQ
zTyJawh<F$8uQ&_WvpJ9>wxM-v3JY{GAvFu>+Cr2$Wb*0;RJbL~C2N-)z>Ov=!#VI7
zAT*{BOc8K_vUV&hV96gFN6ThnP65~M8%GTO`A=TRZ+T~GdUQMUpe;xnOO6dPU(j#v
zJy#yfx$;=AGl75O4Xth>4N7&-cgzbKH}(1QMMRGm-X3YISaOF``nGV{w-@-t9i9L7
zQ37D^{`u&ls%L1&1Ij{t`sKVD6+MhQ_I!TP%Z`UMrx&Aq0Ji$aHF6R=<Dp|Fb{9Vu
z3y9zj&bqS-q@FpbFIxw30bn$PxRbEr6rw84p7SlDwU=@{8+oY&U68=)d0b36%`u;!
zD5_%=rSJ(^eqB-$`prHZz-Ls+?V<zGw!<Nqc%5HUGUn!|dR9#E80U-47Pik@0FKjj
zII>`?V@a@q0kY=yA%s<+(Lr@?84^p?*&8~H-Qjo-tM#&ezmKQ$TWS8eJ4jgNeO{!8
zyyp;l2H-#+KU5yo6Fhy$qT0Qw2gNv_mKC&$EkF2VfEi%#u8&|!fdj97++YhHEH8zQ
zR)CAdVKSh>2EJ&S#0o=#o$(BZg}<VqVTCXI*`7O6=d%K3dk_dr8h}WhIC8R`;ce#j
zo+G;MSiA6Tuq8udh#Uuye$V}>$+(Rsj3r5peH(C|5^ILBzVTN@T0{6mMZLuX*|&oY
zR4x|s&|*gKvElnl^demoZ`~MfFZ6DtF%esgQP=VC&$GY%0ig1?KPW#OnO0cRtAezB
zaIT@v$pobQ)6$J(v_NU|klUr^SYzN?^`P!&heeT{&t{W)>;8R5&j;_}7(E?TR}K#@
z?*H8#b2x|lfBtIY>p%Z_^FB1Rjy&zUZ)M$$ZynW=^*ZQN*TEF;Vt%nM%YgA}$xbgX
zN9a!Aq3~?~`SIb4oxT0%-#b`r7VDc|ZilZQ=q}dd4KD0A<VA5bxkkk)A|AfR1)zJP
zy9CTItttk7q5I(tx>iQ3qdJ?r>oj;B0tte6o9dHm60~p_#z#8xce8L+-O8piMEFUU
zPrv%QJ%51&7SW0eV5{4%+l%Jcx+p@TwJ?6|+ChZ)<ee!InkiG7j)$V$b?Dv}$N+EL
zPFyp<>OO)L4uAOTn>fuuX4Vtp!9QSC9fnfXZO_~77K_S}PK_oGJ;@`R{AF1Y=6F2v
z($2uWJRk_SQ_lzIbQD}6PqzlKfpFizft-yC*K3_m7nYU?0>e2aGyld6#@!>8IDj6T
z7k#lzq>C1z$xSZ{j}BFg*v>;j?vjI|91*1N%Nleg(}V*^HSIu~>Z2E!ho-&_YvV^2
z%qM)T<{|VBM6af5#r2>lhBZ`vE^UF4T?p=6viD>YIYQ^3`>(g4$W0JNM;Pqaw3`?{
zT5!VAU7nVhc~X%G<XT~65djEcV1mrpWfSD=_%e;yDPW&eSDnobMQ`N36Q&xLN8WwT
zjlgc8U-872h?sa+NW;ms4Zz%1l~7dEjx4s04cQqwodyX|XmlEhl8|jPNUx}rdqNTl
z;RXUf-D&c9J%tgQ8yg#DRrlZ)x48wY>xC|u8o*UVKVLMTEht}rTmJ=_+p_b_h@w)t
z(a<H1?tXpWdRRSZZ`;4u+b$Zgfj5RX72eVj6hbg`u<)kiys2EzSLAsSfRW7{3sTcw
zb0dE8A}hcJjKLmneY$h`u<*%oh4Zi5#86v96Ir|VsipTTAM}L!n2DFH&K_j{mVJTT
z3ErA>I+eoC?2Dfhad7#Fb}n<9SusSL*eWn;Vbu<+i^B1eWHVb63XH4uYEqN;N=Y`?
z#2^l;A@n|~K+Od1D^umTGNgzfx$T?yLg4siu*7BMV>Y#_rWmK%9}5xiWCwhQ-1nAz
zOu<wY&99}X7qDs+An*k_@NIm!U0%D*WnX>S>?Yk<9VIFua*HnP7{vt^3LJc<6v~+R
z)t=pMs6kTK>~JRZG=BTH-FCXrx;aASmVoZ*^R!vb3YNf!LdJr;w((tZYdk=d-|RuS
zUcjm^D290<r^tX@Iw5lb-G+oEcWYXX=z8e`<a2%qEo{(|WVRJC-{r{Z_L5&^CE+7Y
zF@3tV9kUKS?Qpi@gD^U+cs2NC%Q+YwR;rGBnXDt6<F8)5VoxBeeA7HX8s6}5K(dK6
zuw4Yc1qE(m-(6|oo2Yu0{d(^n#zZ`PUrwZ-hW01$C}W8Bi+3@+%DKh&y9f`t`aPz=
zHUV7p&Qb94gSzLS^0_|cWBBp4X<9(w*UJKB@)#jU<ODugbK`Q<?KWncPQAMfN}-nC
zU8u95z@LF)ndqP4mMq$kkD9&`wpu17wEQhuWQ16<(;|N#`GYnw#n->-Hh3e`Q5qo~
zt|LOKo&%yx*pJNP$*igruE1RhO^*i!8U4B&48Fw0piD;BO1`h<$(}7^oFdt9EOKTs
zaZmbc;10ZA9e0*?qPUDE;ZAK)cUiIoJ0PLDe8C;wlbQ(9iB`F&UCc-Yc4JI#notp#
zDY$$%_X;Td@RBp>+!$HVG)Ef@5g&I{L49LK0K;J&8kIyNwc`w3D-eyD&bO+@XLLo~
z=x=OjS%nX(y3zmBS8mTJNx<h>XAL3^kd{D)Th(d+;6qiV`!uqi<mFmw?(-C7&M5Q-
znSa{g=Mx&&pqe6KR&!fDH>i)OwcM2F*4nPqJDUNuTciL*De95qFV=@;4VIzn7y{NY
z&GRuxPS-D8rQd3|0yP_Ui>yHe?1OiZrU^VzToKY;pux&#-iYPiDxDcw3e?ckr%M-H
zfe<=Og&GDW7!7o1_8-Nxx>@F~{|PNmqF4c>J#ybLUrXnr?e=hKqh&xfWSY2I+fCxq
z>cQ1~8>U;ZgDGem2EFrwM`QkBO5}~WCep??-ljqx4eLOo?`$L!tV$c-+BUvTwBhK^
zM!VlQH`XBc9HdMPR>bgQ!vSqm2qpyBx<CfhQOmFNG<ob~_Cbv_qPwKQ?8i(d9HDO0
z_vX&#JP_{CAv@YlbrMXI+W?JlZd&`?Bn`lw5`A#&$7wNL$Hp{bvxouv?0HcP;yL%I
z_JNc(=qPm*ki0xy-^~2H?`NTk5qElU=@R#pxfC;E)b_V@lQdDJ-R!DS(Z9;4<IX#j
z6V?4cejvM%;SB++FKusSfBX<8e1%?Q)1roBO;{gy5Y91z+aEooZkW@^5M(T$hLQB&
zX){Fy0{Ga%WTzlTp3-!;ROqlB7sdBVc|p&h<=9L)%bQ|L)(ZImixplD)k3!wTC8sT
z6VES_tJ9Ive{pcQf3*Me<KzA3PxhbhAH819{H<#4l<k(?gpNlugVpHdj=2cIBkxL-
z&49Z>&`i2M(mVhUgKSZWYF02;8A=vn3}srKnoua9j|Wj#-ba(AadkzWjQJv{wprt5
zG=vy(i_DNNz(D4t$iCbNAz?ruSyvgFn#+i>jd;|6v73;lZE&8QL3|XjGlDzp<_4!l
zf+Wgj$Y;}ha^80+A^{M<if?q4FKQMF0t*VZ^AEHvO%n}u%r?=wfrXAbKd_jm*N=^&
z*!rQGCbDmO<zYxC0_Xacc$%RS(ia9rAAW$7UNs?a^AH`yi%YgV8uf!>!k;jXu&4q;
zXL{i<o`b8BFF-0!)iY`8*u3i4zvy&B#7lo;;8NB!PEYQoPXp>ZRB!P<;ftHQt*T(}
zyxzw?6=XB$=EVw~<ggs`F=<L_RqibdtQGGjGsa8_-f%BT>>>_l1QJcrH^2!4SU(OL
zcryR$1!aPpETXuhT_^4&<q${i@{^-bv|)09XN~dRzs2adX>ml?cCyLtWotO3wQh=(
zW9!YR7j!P^pclrDQ7%o9<*&IKMFzu-n|rgJa@^idkN`vn#_Z0gMZ;9|7DGJLYo`Ya
zpBkfF#r`y56fHuhy3LisGpHTta-GHmk}OZ<VhIXZ51S0NG>!F#nX$vpa1QsPw>PcV
zR(#lQxtA8>B{xzv@VlD~Yuh%FrKnIa0!^@p9myxd+V-i1Zkw4PT{iDzAs9<5xaxhf
z%_I9cIKpi$I-U|HeKbsK(zncN(7G4iCQtFQlz7xBH!611{r#M%j?|LO0J==48@^O`
za0Xe;r9)k%yo3RT(sH-nXkM>ELAW@|ZF*B59DCKp1sD@242*-;H`pktJE7{WO-_-f
za4*>=Z5e}RIY`8VVd;ie>kvYLP-ZLe)g0nENEsidn1*zsCL^0vA>U23?d{0_#B&!~
z3Yys94Z-M&qETH>i%9kRNK~qi4M~iogT^26ds)Ga$Q>$NW*Id1!=35Njh=7UW+cLS
zbYlzmpJwH#Ucs9GUu}H9n&tSXFc(jg^i$lj%31rPX#7VQRZGp3E%>N9+uZowEWm%q
z14*2gaRN_3$|B-MC3nG(ol8Vf9V7FxJDbK72EKFYC}7vu6D@OS)>U^na1psMm-Vy!
zSCH(GV$CW@ii@1Q)aWBvD7G~&^}EJvTUv0NVzZ&jfg4xd38Z_<Gm4Zn?&TqvHbv@l
zUs|bHgr8K9BVm<qMVBTPGf)hYd__fhB9_I9=K(?At|xvf%?YslbKMIWfyI>>fCGF0
z<TUJecl~!5+G&Rq2-w2D=hv+Hy;-S+Z&EF+uQwdZJrR{MX7S;e_xh)$t`F5&j^@jb
zt7+Ja|M#~!56lw7l-Qw&V0K!Z7$O_w$W+~*+6|2H_3++=Uz;fD3wS{YTpV2CZ%`s{
zww4#oyYJmDGh|_p6_WGAR4VLNM1Jj|jQ3mYD(Z&5bv<X8*u!jhK$3iD5>6>)Dsw+P
zs3!cCPSF9=Mvz{kwG*0Y%8Sq4i(q(No{h`Xa*zj7!OiiVPt*&-XJ}{yn2W}JMMTh3
zM>vWG1e{CMh(1sB*$N*+QY6I0QuRC_&aV)JNzMpjdwO~dH#$$69^1DMHD$>nNa`m?
zg1!Qs5ct<V*l3Y!s0!AyCE4=>-E-kdVsjkf4j*reZ-b`FqL}aZGGQR|$yO^BC<VyQ
zYDfe$UU?iQ3@@a;#v03q#4@+pW~493fzq!UVniJd|H=!p>Q+g25hyy)mX5}kjN|8T
z)&G~8QGA3cguc<qc8OT&K3tM37!)};_w&hQv|x|*H=(t+n$U!+)<z>V`#;>xKaRJ^
zSR2pCdhvQ$1mEs_B%W`P643806P4*-DMRt%NIE&YdMHa}DyAa5@)g@caU|91ZP3+$
zr(IL%L=W+a-)+1DWmq`_C;4}(&39;8H)WfxtTT2r_aE37ffy8TGtR{6TL#A%5<mhe
zEoULWR{<7vZf~8P748flqHoivx+<okqa(FacH-E(F)9f9(Y$F=lDy)AjaGR_sCKRK
z3};NMizyiU#(?rB1&F2gvgWnuJwV^@+P^}qt*vF1lUdwWk#((TxAW2FILY89tZGb&
z_5U-Bbka5}^5q+%Er`{mR;zK_G^|Wa=p(jT*=(BJG|f|@b(IxQG#8hI<Ncm4dDCEs
z)D*NuO`=<9Om%x>>=8m6kzGz|@b^qBpEz7j+Fn4HXkH(+t{K$FX3JU~vic-Oyf-T-
zK@)dCXz716pZ}L?J}Jt-Fi#xrMThRsK2Yq)8=Hb|1wCBgX&N~mzRT7&)>J65Ppz^0
zE&AOA#BbBoCU{MfZ<6Y@o!z8TvVLHi)~FXm<hRA&Nx&Oa5oy-)G71gVB$ko%9|Fr@
zWKZh2X=LlZtrSZ})CHk^8AHI1jer{>DW>UudgX#~mr{H{TBVTC&B*mPp`MUdmxQe`
ziU@z}OGwy#JljZfFsdN^#|#o(Vr0^n<U{w;;X5Qp?{OG+`hHy2m<W1*46)&tX*crm
zWghqS!_Lzu$1nDK+0o8V5T)i(aW*Z$|IX{$Tn}T|iI65?XM6^m^~L_3bQu2vMR^>V
zx2!RPWzhQc{N)+~p}=p6AszX+-Az3-a3G%*ocI`k25P%rNURG#k6!LR-NV4=%Yy$1
z?Gt^AlINnR1LBqsr`3eifgK8X9>ol4Ges0nAGE*XIOlLrsMK?`c~VJ&eG?}<mKPyg
zaC}At$&arE(X_?T#lN5s?IE(We+OzHNnEQG!&=<G(NJ<+6ge0b2Dcjw4u6VkqQivZ
zZ@h&fnsoRZ$M$m+>J9#QtCcGZo+}8#8}?`Dp-*S3bi}OCIfn@p%bd@tY*6fqRK`xk
z-`DxBp3}ygR1ok4Ar`4|D5JY8M7M=<OqtyM3w3>n6M-Um+k&<smS9ct<_E#<uYgeb
z@b#Yhs<}^PuTMRGV+Zi<>fP7cwoy7ZeHjU#$gF%5l7S)&8Co<j7QK&Ti4%}JR`;}o
z5Ia+#dm{;eMOG8&M@K<LC~RY_b#YaHab=JabG%Bd>8~Xa@*LKi4iyR~g)z^8`Ji}5
z9Is$X(gpNScg!)+(>gn=FhJ56BMB%U<g*f03G5nJos5bLs12pIeE1$H)IW2>o1b9t
zp7D6>_Tc@m|MK-<@Rz|?U!8t=vT;(J{Q0!_3pMRyv{MxI(9&?!hmC(yUBfM8K*_VQ
z&H4Q=zWjP)^NX*)xIe3^i}~QZ9+ZW<1h|e*O{<61XpXI#w_tT#*YgX}i9w18Ke1}G
zIHPov=lSSV+e33G1vuG2AcJwXC1T$!bK^hf*m+=KeO`deBxe@|hg%3~G|DFwP(BQW
z)_}w}WKj)?qd8X_qBJd)B;d8xcOYX8hSHU+gCj`fSWC8Es7tL}sn9Cfd3BWm*!10N
zT3omxN}MD(I&kXe`NV?=oIYI{h7%xYIfl5EHOP{1h|%x>(3F6M##WqCq>L$=nYhyc
zy|HSEH>u5wY{$?x7_Gyu;S|#jF9i5NBWc@koKrK11HK*Nr4U-`i3vRBIL1YFm^GC-
zNt`QA0R&Ua-wSxJX))nOFrBNwJ`Q6L0U$eHk6=kv08u<Jk(xTR!fz$Pf)76rpKH~4
zhBixfI+&jk!vMGwXsjY!5X2mWX2noKR}i-LfDb{$fFC7+@<gQ_@^nVxQiQCl9^T-r
zOW{ni;`FqH4F}Sz@t8td`0?Fo`!0&y?p<!=dy<SHCM5S~KYL8UNBt(HgBt}s^Ezxh
zgkTp$uD+xOD#SY_D(N5=HVEq3MQ25#ojyALh%3R<`!Dr6k%*SO2{xc9w~HZyU_CEt
z0<%W3T4`q8RtRF5(N@NcDqzAremEB11m5zgGnJCGmDb~;_*&A8NLd(Dqfz%#lE_Fo
z5;Zp)4I=0p?Z%62gPX(w8VU3rX$3F64>vuWoz{Vmgjs5+@dFQNUL$`;!4V(&(S&nP
zI|fT~KKaNDDpd-}`FvefDWvz<Auc9rrVoo(Ox1zw*tZw^jyX}|Bc;6$Dgd(G5;a2Z
z&o`=|dsYFEjVv$f)nOlV`*gnJE!Y>4Po<YJG7R68Z-p`EH&Ob+(qz@OP0NQ)+2b#e
zZ_TxVnXd1tK6)|OqO|HGu~x);3W>phAGO6`3T!;lV5q5oWO}K!UIGQ&NW7fgV;6xy
z+K$AccpmbF)0K*DoB`ArL!RE1a6?!+U1onxcv`vOc65(jTkrg-?4DLOT&+sqfkI~0
zzrq|Gn}6Q0EneQO#f56o-S+?Dntbpl-y{iSxjt=l+SNS+#-7ZhC*2zn3V{^RIqV}2
zBm-^rM<BSuYJExJ#*b4lD1jo=o+>{J<!841iIhK)U^7hSpF56+{M6u3K!y&3i!y|U
zJuyS3xH%xP@>%%86cpm^V`}h+B%ps`Uw2qD7Z9>18>id2e%%J*1Z?$PybfV+z(C2H
z8e`qAjmua!N`mpRE(uiY+Uv35X<>rh@K9K+{0%Rkr)HR5#xJQUj5bC=^Tn&JJvcoE
z1f;lbWCxNqL2~^qqlWEXmss~D5}i*?fP8+(olo6<zgEe4P@tKbdvHr#__+gmUdD5G
zkha~=5_6yR0)j6ZbH8lP{ls>E*_``Hvh$O~+)udk6F2uLr>sX-l0jK?7i{Nj8<1`6
zAeI<Gp0w#B=J)-fqmC9G!qn~1Y2G+q{1zgq1n69)tK|8=!VyOUwqv`OVfW#vYdPmu
zAp7yj(i~f#>fg&)G}<*A7M67Jq?)$YUJxjNZs+mHfX-n;MO4wD{0JX?dyN{%b3VjB
z5J+Asq&mLlj<0&5pKd~cMHUc_9fp+#9-J@16H(<{mUZcq!uFJo@Ca{NJ_9xG?yW32
z6vqEXZ4z7qQ^|&|zzWM~b!k-BLpi=uW|?BNXOP))AzU|Qjuh^kKp?sQD2wMpKAfke
zZDswunjLsBbO48Y=vb|!YoFyhJ-jGF#Kc5d!F|Ay!XSGzxE>Egwui>mNpW4&B)SK_
z$H?+KAFgR$y=<`s?cK<r{`t?PMY+3BT9OGis_^($YCe>;?Q0zSOi!o*=ewTEnp%~7
zw*R)PNR_yNXfoHhRP-b-=#A&!lh+j?d*R-QBx`G_`2N1nl^T(=t!%~HO}O^~Uyu{f
z?|R>nvG>D;FI*|MqcSyJ3=Cf%G4oIs!c#6gm(-c0dSLrc_^B=FL}h`70Qr1YnY2r;
zaGz-wiu7CevWfqptC`>*Ic-J1Q5z<dI?o}Dxq;?ONP9|HzhOo7aCwNR%o<_CTAQ>z
zRRt6FCPe0IxQ*8ugKiu#?mW4IycckcsA1Fb1q(q9DMoMoVRqFRVkpm(uoXI2s7`3;
zcCH%(45zL;V*Tlw0_a~Nh{D||uw>Bbx#~0q=eJNkH1LgU&elF}40h4f-?+0iVE%4(
z9nusN<{R2}mlNZIDBm#muu!G#*2vhVcsG)9P>N#8$BbeDrK=PZoKPYXCL}b3)e`NX
z13>?@9E}cV3*4w?U=an8Z%+gJ<9KH+a@$T7KdL4;oQW#zo|0uTFEa$NW?3Ec4^j=~
zk;#hekNGh35;+p#HI$Wsez6daY@|8{q<u(R)<K)VOSI@TF>L{6Xp{<Se-*o@X%j&B
zrO22&ur(A_%H_qD2AKMAwPm5BKAmqx^H<-doX%U%D<p<ial;q^I&G17r2x#SV+L;q
z91SuWSRAi+*}k;Q2cC>}U&^NCJjd$jzqt`MB6Z+~_AorNd-pA!!t3kN4&<{kEy_^G
zFK+Dgkp-F#KJOg<skjlda;y!Yt!Q&+Cb?%d!*o~i<`O!`9Wc4ORSwC;6XM7Zu8oDd
z)F`4TN1j;2bQCIu5IQOOr2iVq!7ZUfL$i+8N*B&DPkA&k!!Q-Ro(jHF8^zCH%iMYN
zXRwcfzPGZqi*h&|6>AX-(jo(xI1)fR4~%UDt!ZcWvOzfo9m;emqHBaEgp+DI3hg7f
zG|C6ZD-9sK#_XzKThO3Nq3!GnFd|)(oKeKZ3we|=ZlDQLHyxTBd#xQmjVl5Gs$t|~
zM=0P33Tob9!@Z(NeM3f|k10^79#x%&m^YHrCekdz=HDc4JAm49+u0qY{dQ<HIGFv4
zgIi7qoA`1zEr;-YfNYAaOqfWIX?#PJ<i_Ra;eKlYr=ZG1(|TXt>x{_`4ROcd0wZz1
ziK;0!r}LR_8ay5}VmsdLGi(We`Nk;VD6%>_1|{)uno|ZS*ZF0^2Ngcfrq%mGSeF5_
zEMY-}oAAFw&0_Wx{cha7CP1%0bk8uLH*dS9At-kso}p3s0}0V16=K%lBdCDy979N}
zw!*B{i)n$D5S^yPJihG7Q897XDL@>Z_Lo7=%(F3}^W{G%^-)iyHx>!dVgfWW&~&7e
zH_O8dqhe(Au|aXBs`hX8{No#KQ^vMiRU<GVSO+T<RHn}=cM~ZuKm!g7Ds~BI2@%W~
zNR`dP1S;+uCz?Zq!2u0xf_!GpcZ^pZn40!RjK|2~QU$}evP~5e4-ge_cgtaP;x(b}
z7Q|3tvgG@Q{jGf<8B4cJSU6uAW%n#2+0cL^%RSE4SEv0e4SWy5;3oInqgZE<y%)CT
z83<RB_!}-8E!!O;8~Hkl8&Lx^ccQIe^R2o9y%|OMSw{mfKYqE7<tJbc^l$E19-)4X
zClg{m#+~s!Z3~4_Nl<~j7+v8260sRv){f71v@b$EG=gM}Upy@MWSm-SjIp}u?Z<Cy
z`%i=ft@}K=?lgf6yvdQuQgxbX<C!4ghwYZ${A_kuVmI=D7e0tEh%9zwk^Rvxu>R^+
zSd+NK%mIy9Alr0}V5{Kp!`<vB7fTK8E(#vNF==`U3KvD6)&fN!Hg?Ss4%*I$n`^ws
z*YxGV7aW)(WUn24Ob(?UOv{NoVAMd8l<D}?@3%D|A8U#EeM0|cW?etRS9$T#HMNDu
z(%NKo4ADWXm$X_KonSrwxNpVkVjNJ+9!Z=q<>Us&n`{y|rwBieBL|lhA5_e3f>SV+
zq+LGc_*pGtBN|FVjFgs{YZswz5a3C}SJLDa^J3zHL%iAg648z?eJ-*csmpi3^^_@k
z13Tgn)GSg$38xYe!E56`v}kRCBunQ}1MaP<Z*fJn;Z@mJz3jYe1g)RIDI6)w3SQyl
zkPL1{cMG(q>gl+98~^vk-CI4Jbrc3&ul)UNg>4ggQ3WqimWSc+eW&eF5Smr{aIkVj
zgqe-C?AGZ;<0MW|DM2tEOjqc=Lyt*EoCrB=!^3ami0w1))}h^dY}5dATzLneH@fM!
z!8<m^7{H~C`{6tR;xn?g7MO-G^wV<Wc3B4kpOrXj<pc>XX>RNN3?jX9RL&M&vL>mJ
znvoZmxfpxb*4W2KPdoPa$x^-x8Ukq_R%<x6fdZTj>+Y|Q6I~bx;4{ahUf@j+1@Pg~
z5x4L_B6fKWL4Y*fy=Oxn>Bb@TtZv<$8iw>nji^CDIHqV6aU*&ct}6qg#1?(fQzkwi
z3x?PgQX54kVwxZe^~^DO<z!UiF>|!@6GX{tY(a5Sg5dvA^a6kFiW5huFAyVhJ91Qx
z?QO^f;`7F!?y2COp~=Qn#U$v7yZ6%4EpeW;im;V@T!Xa=Sd}}#xXbr|@+_jMdbqdT
zL)yMzmPIV#;lO5xYXv;Iwm*>sdkMS<SuNK6L8>+22INi0b)JfDg~9Q;?LFzuYlD2^
zA)Tt$^u2AaMo0WdmMnxXveH@v5EesatR{_k*sTE1$WJi^Q;ADUHKSg)0*`Yq`WCx&
zH&rHyjhQ(7%z=pFK||bW_h8g7%pM0%-(<}l+=w3@idcou8#?mh7({K-JUO7{x$6ac
zq0Q6*&}Qa0Y#>lCVfeq1B4~<TXwtuRG2UyMh;OI85U*9_U$!jxJTW|pPb=CCuRGex
zA}ime)fZ89tdekZjN#^q9m6jfqrp4pry%ZK;cp|PG35mY&^ESGzjnlwA;Oo0HtB1l
zyB7_s!sHfOYB`a->spMD(O{%i<uj!npBkk%_0dbL*eww%fJy;>enxhwjTB`5(;jI;
zSU4&|(VLdUWSGv&)@_gg($Nt2IlDG0C8g|GW_1v$7ns+-9ieQVfUed=w6P#|FtKi;
z&74F{zuoGfsmW-h_q}}$zjx~ruU-<stK|{;5X4-x=Avm+_C3)xN30&(An4BxR7>{Q
zbFSwV0nJOp@=HQ&IYFx*Ym%ZkJ1~_*TOrK`NXj4QgYypFJX<bz;pF>F%;or*u3$PS
z+BepK2HjIcowf?9x>591P)d8h9MG|+nzF}xqKY-OKzJw{3vTe1io1vkULV-ffNmmE
z@6uWsqYOa@t=w&NsmFEGu;?)>t>nec^)@sn$oZ#k8CNuxX#=S0Rzby_L@kypYV)PE
z&Z-*&TQtNmDrHhNM>rQ*-xzRdMSfaute}?EJ4a=dhFP1R1npaQyV<i*G^eW>ee>P-
zk`A)v`DzsX`QS)uT$5lA(Zay=8d(zCk1AuwVK_F!fTaL~wiVi}BDScoYtu0S?mpoW
zLt79Inbqrv;OvtfOv@A8;bw>f%QS9vEjPM`M8R_M8#+>>P%9DL2U8uxy1<LsG#}UC
zFTTRE<0^rUqR=u2-I#LNF-F+ovsi3F2{zfXBJowvIW%f%JJ!C%TM$UZTSC`Gz_!Sk
zAe<qiT$60tLoH7Hs*|29H{ZMC(d&W5EP6PHHHdU)4aK}YFJ?3xp6!zmqepFIQ5GS&
zAZKSZBt%AlRK!MMlwv&%^-Nkd-)=P>*N=>+8|Jb4uvw=`fRe}>N%u@CUW|1G4UXnx
z&81B(YC5uuHYIFpu^n_MnWU4-bQ29n1K3fTye=DGI_cff<dSIgUb7(jSBH;{Ds1AC
zu41jD14Gm`q{-6%)rt5~IU5yB_f06de3(zbrX&><O}@qP$)ccVIv|>n%Js5~VtQ8W
zpZ22oU3ZIzrlQ6{^Pm;$Wyk2uio5)G%YF0V7?WfCG%o)Rnw(=&yX=xl1`MI9-p?mX
zCo>uqXh`Biut}sS)U-PoWgjx?t<w(sZvUvfDBLh+*-Zw2q81#p2^veVmPd<^9-Fs}
z8CIAC<vV$H_x*h!l5R;pVkD2;!L~zh++frb2d|1|n0+8Wg>PWkJ>T)SH(Z<u*#7gQ
z$1i{0d3q=|8W)Zvm3861qNIYS$M!;Gy2I1j!W70gJyHoRtKf?HI$v`Qh#><;ZOIy6
zZ=|Z6SMzC0g)gv1sPf=Tsxky4reuvjfBmJc@&)(eFzmgmgKF_Gt}p*=YjHoWDA1Q=
zPY?QEKlpR;mjJZ~R0lHZx;1I*>reeZ|M^Q*jeA-Yc`Fe5n_qodY;FLd*-qdCAi|rs
zcKv^PzJCO3A52iFlq=%iW&i8=_{C2zA0HpXvpBxIFBWyjBTlz#`-<Y#=E=7walo~@
z0$6nNUUp*bNpsNH#lhaBIoO;?R&IR2;qdYE8^@PT<};mt$B!WHpArdpH+xr2`J!2c
z2YrpjrE!RU3425P)w_i73+(}hU4!X7NV|a0R=+qD9FmW!4-e$Zct3od-UUaa14Fts
ztWIe@Q}Wc4Nd{j%sZ6ChN<tDc(H)FO3n~EZma{bqeV@C-`@$WC`Nbs5N7Eu7E|ja9
z$!5^#E-^OZ;MPK1Sq2a#W)LF*s?iN0XA`B&_?yvjZ(A>@fh*7$HNK_M0&Q3WzP%&I
zVJ9qCmjdw0BgM^yObgA);q~O;RHnDawbu0NCuSQ}qv0l;LhoULc+*hw@;YQMpTn_6
zsqN7MF?au)I5uW7Ex|lFSiyjg?z-5B44VnCkh0tWNe@S4wBadsaN<2iK5xDs<dEBZ
zwy>L*a%43&ueW@H?!m9rjhAAj^N@PVXh>SN?&zZeE`>-9t;E&%g3x!o&$wma#=GPo
zf=!^r>)yRGb_?Uf*EIk{K)b);>E;`3>`nRht+}F~idtFfV3Kg~7mr?SvGHpE+0Luu
z!<{FOkD=-BAHR%Lj9iHh48YxBbky<r;lK)_!(D%_dV<KUT?oh@K}~HWnMOh^VoNZ5
z-mZq15Wf@6u0tX>GRA^XZ>t{yf=}-6(eHt_f|=OVZFu>F?8xDg$R~{qtCuw}l_8zL
zzmOH0rK_!I+3-(9&_0aU3=k#YC6sxq@Wq~7{b6}}N*Nq*q)@sGgOI7fxSCi3#csn8
z9=JpG^n}1#@NF9_Kx;Yo3%M%EzzkGSxkEGgaLcBrQulxhP7w`H3M?705cWHtp}g{@
zO3s{Tm>|o7t#D!|K7f_+8-JSDZ^>L;d=#>JoQoR;1aS1_Vo>Ho%%0)XHMoL3Rb0nh
zX}o2p4jjc>o#RLO@rO#WIfN*Ut6p|q0=LBXLRE!E5(UKb49r6{&Nrj#E#NV{0r|H5
zu%%y|`-KUk$4_<&AH%eU?2ygnl!d;?Cn+)}h@8Uz!1f1@8<MKHDs)gXJ>oTVJ@i6@
z=A>MKqs6GbuE4#RZy{)HuqaUXux+!>v5XHO3)0p=@VKhyg0Tgbzv=@U-(%i7H<WEE
z2FDmQE{|$}4uw11)TSO**uN}ib%1$;pEc<WW;}875fOb#hc<<kjXGh{+uaFg!fvLJ
z1P$c)r*}AT8{W_E?TUzk0|N=~k>3G=E}SN&1y!PCqRPvGB@-+qp`O3J328qd>1Yny
z^Mj6p%Jh~x)xm&RCoZVru|NgOX_91N@2R;!Yhj7;9c<<@2>(?+LzAH+&flj!bmBYJ
zF9q^4WNQv6K_IFNSgcv$E?nLNko>+JJ)2}F#UP*87+f0t1$jH+96@uiz-G9MvWBcY
zV4Lo$U!9X9w~s-N0g5B@c7=l-0<oy&KU3@a9glVEE`(#L|E9<371A^Uh5gN5no<#}
zQdgLfD0ct^*Oysww#Ygsi-{Xtfw|ipe{dgIWIPhY=H554p1p&pXYaP$ge7J%W}?fd
z6y9<nvDX+pz~MshYAispz=yguEM%IaYKiu+AKjdzEaO2wQw{!~x+ql0cpohuZPkCR
z@9&|_y8AJ4P2d0WtFOLRRWaSugZ`hyztejoQ4XiAYz;=BJWg3sx#f1O`1CrUDJL(w
z!h0DP1VD#h4%r-DPSCp&vRY#>Iot#ex$|r=uOTRlmwQu`a`Fd+Fxvo}vpE`egKcj(
zq@`P6*V3K3JK_Z*3dhWw0w^(#G~DugB+~1lyseiNvq9gpXaEA;=C~Rcy*oD(Zu+{d
z(1iQOiH=+ml~U{{oY9(+)2{U*zfHPl;9>+v)uacl-x09v#J-30VkBE)0=cCMu5;L~
zE$?$uXMg(xY><n5^tV66UNht|gZd;4w6Atk-?oZKrCXhatTBl49m<ObNWwmp;oFDV
zKd=9}xRFHK-KcFU-_|+=Q0F9QxT{HPRlnoeX9v%pzSa%ib$4z2$y9Faudu@$0juWI
z0r<lskduDNgfQXDlH9TCJW3^xP30OBMiXQ~wN1$7oiOoR<c3M_QjVA(0H&e_dGnSH
zm1_OQ%`H6M#Qu+id~jaq<a*Sg@=li))hlfB&D&tt*%%kG&bBMQBRgbVtZgT2JdCUO
z6R$OeEonaMz|zPE?@$5f9Ilmh?G(Xpqh*m>!qpXb7=`&@6Oa!#(Jcvg9W(6*WczV}
zJ|3Ou71nLeTj`s^?Bgo|jX6Aziz|OL^pA&Vnc;i$AK-n!8sW)tViiXe3;`7!`a?bp
z^sRGLiX5%B#8I^z&!*LIK0wcTYN+Qnv>}V{va7rfnGNTYNfjK;XL;$^UxzrK<I!=S
zPozoiE)v<voYN`}^6}aX(mPCxx*GXo+%<<B*Qm;U!U-aN9k1+#!y3N39&^Yn0+WHf
z*A;NFYml*Vg831Aix*{$>10S6R%bq*HM6Uv=fx{;-%hmWVaatn-8dnhMz6+EjZLz4
zB0Bu=6DcfG=NWzuFX9bIY5FYY#v?QP0<C1io8_4jKflSQ`BgG~;&<-;LszmmgQ8ap
zd19AHEe*?2)Q$(Atvg5qeO*Uep>ef7AG;G|xPIv>g^MACIWo!qnt~pcPT6|#Q1@i&
z>Dn<j2}1U#`NDC49ZQ4z_S^QSr=fT8H?DkA)K-(U7UHp;kXnX(k`BA@og-g{OgEOt
z-8^QrMw4lAT1?lm!C;B@A?O9}oOf7VD*iT0o}a`l%V(yU{$72IS;x6SDjMYk{!HZ|
z4(`)blw6?niGLBo)PuVs&P<h!qn}C_A!l*3i~Kt30{yzZ%Og2qhq8$PtA1hjPkkO8
z<h2~Ha9IKseCG!D4jIFDu8nuX*WD+kj&sIxHl6a!5dopLF@)&CDzmW>_1Faqh;Kf+
z$`=@K3@%SoSZ*ZRII5w$Zi1H6?V&;8*N?+g==CCG73XHb3T@p+bACr{VE*xUob{Gx
zOA-ZQ_V_#VsPB5J5e)_yKf?fQw1?TSf`dr%OF0OIbPL_c%#PBmQ#+r96uba7o2ZpW
zL}hqD1__#Qh=T~UBf=d53N)mLz=60!;0oN-=3ZzhNV!t50pDgZ9;R9ZxxVH$LNX$}
zctRs?oq#78%peDHd4?gK&K-7QTKQ@5_jx%b;Q{4RcGuBjTDl7aNv5+Ikfm-T#Dd+m
zq?X(4HbW|et%qKVo1`gfwMZ*3kx%f{r-87MC*E`#yX`BPUo+P_D<EGS9PS_O{|pMq
zC;QL$k6t%&uXDlYkH6oE3o4(3>9pzZNFBLPZ#IHkBQ**yLmg2qHc!$J^r8h$2??l&
z*wW<Sx1DXU{K4GXpIu8#vcon^Yb<JG>q{H;q1vcon4elcvD8173vj0!dktwCq0)3y
zn$I>Zj6r0R?i^@~Qk$q1R48q-phq<tokpvyVWj#G$&y8ud~I`Zr;@B&8$+W)@+w&q
z1LNiX&pStt{d2pr*CFBvNB{>AiKB}+*593sM9D$STh8!6@(qI&;P8DpLD4SV>b*$V
zS6sNg_TG^)(x794opPLy8l7QQyOSbu-xXx_oK;BmDkBJnEbSH-z8SC3mL=)=73gL5
z_}pXT0z3ee-OCdFxr$7}sL{(->AGuKVtsKBt`GROFR%ubRDgnQ0n$9!YmKbwTPekI
zsBJoj<BEK8YK3j-J-JG9`_{zrk?ux;t`~#B93^-^-Ql%2VWW81sDU_<sAaY0LnsK(
zFyuc39Lj3f&_vyqX%dt^lJFB5#1o9WMrARR<g{4VxuaN^(r*c<K%aMH^w3aDtPJdf
zTL%QDfnVUsaZfo9F8BG-A%sX`3#=I=2ok9eiWrOG8AW=--RV#ncI5}G(1X%^?7-%C
z3<n0mB^?#2ZX6BCXQ<Ob6Mhrk5c7RPtfLUUcLQH;_PNcY^I`#tdd|Fakx$Rcv8PBU
z)r`_=VwO<}OF68r=rg1&LSjN1Uv5%x0D0;maPp#U%HGku-|>kC69CO;KY1r7U3V}p
zXt$<MZx~cC`t=2#gVx}o4@m{@U^VO;R1Nn?BdoVv0+nt%|3u;4OiV9ssOk)~c`KSH
z943u047bc@)17{#(Dv+g6w4=+?W{1C&9_}?5u@NVZ-}CczrC&WNqzUZ(mL^?v`vx<
zb#Qd+A3M4SZ@bA^o6zd$>R`-7q=9d;FWdpJ(f<mplKKz6+ExKg(GtZwNpyINZ}g}+
z0Se7R7c9X3R~KuMAP1V!V|&3ZhaC4a>Iv=zkYj5+?6z>c-+K*6?qi-gTJ%ng{N8DX
zQz*&>T8IuwSTdz_1x$vxS-8np(|07Up&ZyV%xQh;!)T&}`5o`BcR~>M(fJ{VK%ppJ
zy(nhq)etZJ`W*8LPt>1>;SlZXk&SW~&a|i}aLFeTaY!yrO7uYm4OO6vzL<!X$6+a)
zVa2e&j1DOVI=VltAj`T7oB9ba8}6|EKeKwBga^@h$TTHp|L(%#1u5Dx#x4p$RZKW5
zsr69mMA8T@*NbCVU5S~sOd%L(e-~z>?6J3udWAzp=CwE1_AXAHD`n7q6<Kp{r|u43
zr{fP68kTxXW^ovMO5Y+JU}e;E1SJPKBn}=Lg3hZ`(gzc0!dVrDpE!*g0u(;+l(o4`
zG!Ze2{A8&u-hE>+uUw%M1=#OMM(f~@3uP}+z`%}Y*~zrJ0{I&<N~hDJ_y?x%9=q*Y
zv%pZc0LWMhL|nI#;e`W^Qidz>dyB;?jUxLN{gO5|AUGD|nBfxLh){p^csi}7EN@vu
zlC$Q1!Cu8@kPTIpL#=7%kbOEMj@M(i8ypn(&rk>J3n&sdS;N~TWpjw@s4Vwx#T<Mv
zA+JGGC|2$9>I^vA$i_BN<Zoa;+oB^hW^shKVHeWCxe1d8;Wj(aRGbOw@!>;+r;<b_
zWDxEv4?AKS?%HpH6!Iyf{hKK0Wgq;KI^>+x#p}T}-VNGiZr1XagU4Ap6X_JSlu77i
zOZ2<dPZxCv7(SLy0t<N3`BoJ~?W3!8Q$J-jh~jzDQadSryQKxIvP4~Qu-LsDeEA!J
zSKB;N*S9Z&9pb44$;t<@C~6~xm7QoxzZK*Jw!I7Z$j%UM7jXMzr=N&{cbtZ}Yo-OL
zKIFRcxd7vzVR=~&=kDHzS7LW(eBZJPWM7{A#A#d->M>>Ge9Q8^p+UV}x`0V>H~E=E
zWtk(>GYOwYB;&WOH0?=Cr^Qmo>^Wb&xy>-zuK(U6vwS<uD3EP*W_)U-(}J-`Mzq~v
zAE|k?P$}`UoI+96t}h>YQI&#$a)a0McHt)Kn`$|3Q+J1#c-IF1B`IGV;54~|XfeVL
zWb^XxO!HeB7TsIuS8@y7Unz<+8#{xgE@6gETZA^x-Zw=HNZSmdvk0_GO7Furcq~Zn
zD3Oz4B2XVKdRdU11QmBz@@I;T%g9Eqm{f!Fth1T@dp@3nrS9fm{<M*8Y;58GvY(Fj
zy0@EhB!mOWP>a@M)UEIH{JC4#L_pPLAzuG0O!o!k;8@B{1aX29FWAIxRlP*|W8$jC
zK_j_;uG8s=$W|m2u4#y=DX&S2u_F91!N^KrkjS<;oDSCegkUhO-jC)2$>I4$F&-wM
zL^ld(`}2=MCO-TmwT%VFhpR1#Kykh$u_sng3j>QEWl~WW-85s_)KxO!`b8&hhy(H@
zV(~=LV14{(64=*2RMYYwV4yeZcy9#O)?B~j%oOOR<=>ZMd2b~LgR1rw9>#HEt&k!#
zAtggd*v70Oq792Q2$|SA@QA-jCW4JFI@ZQVk0-}hTcmqaQ2bmE8q5?rro+$mNJDzV
z^Hf8+WTGM6&n*E_?XE1YbI90mq<F#P-du`+USOnJOBk{)x#EO^miN&jt_D}+FNTv6
zoeaQ46VxffSGf~k(dsUqv}g08uEF9xPKk0V+>Pz#jghduMG>35`=~z5L>LxNZ##$;
z%utNnuKatWioR_s0X;_?Z3czfhGOUecDI#j?a6HFh#@L290SbCl$m!*S_7eygS7)B
zr(Hl(8u4Z#f2LD3$kKJ84u)^1Iue5m)MP^zN~87+1ni?CzeE*$1%f5;(J&nvvcR~P
zNZit-J|Q#BeFRMZO3W+HCC@0nKJTKRw%O>uqi-?cgn!)Pf~&=rN(g*3i)c+og8gS7
z?a3q-dBjjQL<DUbFE5stA}ux<#Vprnr-SR@+%3n?<j3?3K1Wt44eMXv;-OsYAUciN
zJ)|1oX$mIYQ-}pMh5mO&qZeRTOQDN7FGk}=mEfcG2$u2D#!Sb9&kbVWt`Rh-^5X`z
zWU~0mLrmKebnk{wO_QMy?N&%?93vax{&z;IQCohQ?bhWRnNZ3rtRFdgY8&j4q#9mr
zY3v|1K5N%<p&55uyf&}j_O%V|Q(0}xvF|8*0a?Sya03#UqYcq%Ue73B<*>r=Oz4CF
z@?)D3L<MT&){W3qXE+YA?}G0qM{v7Owgo7(h$6v}<>c<-$71nu0pBR^(P%+&O(4%6
zI)4S#Bnj2uxzWE<dP_9b?1K@nH^YDsCDkcg<My<>wF4O0cYs0wTmcXbp_$Mrj4d6x
z0eVVCZt#)f_&tZ2yUE_L<<DDhSPGJK?{eqE@0M=I6ggO;WS6CzBvi^*ijbjz)xiPc
ze0!NSMS^`ks=R3hJf6eeBjBk>CGvIR>K`J&dl^{g%Wrsp1n$W*dQZQ7^6J<CiUT}h
zzy|0Ff;9BuGUbj7c>j&OKQHmU+U1>Qzz9SxndO=*zJ`<SMiTAL2lr{qOo6;y!{Bc+
zH6W?Z_4IV9UYKa8=LVcgo1L66E_!OlGtD=zFlF?wZkcnKqF*b4!qPd1DVloA=d6RL
z)suXTPGr&o1UB`<*j9e)Sn@kHB)Hgwj<_B@fY<>csT+g)J2s-{CEn}GT^((?t<!oS
zWo?e@WC8y1?(4pXzP$VwdTs_urFD74h101hZ%cuB?C#?)s`?|6XHs97%&*N0@)q7k
zTaMk%)L`O0dF$?2N6>vIy6^M!Eimv2O~#+%CZn27U1S811gVX)MkN5zS}VttIl7PS
z*zYcFce=#35n{u^L60_zBoBAH**ja)k>_{?H7E$&H7N$=sl(=XP~{!?$jiyZ?RVa}
z7w@_zxnd8k5Z#fDcZCd6VV7vyh%TO>fk(?!tiaX)u5&z$`x&<9&T4KycN+=ib+KjS
zmiuv1crQ&9OR|X&yKG{<PdLOO5H;2zYe=}da_eACSzN%~ts~h%@lHs!AlD~e2D|<2
zc{O7v5-{(s<|DA-&Msg==r@n7A@Ew|v;f}{?f^p$14$D5*CD4@?y)m!BOfJkAaG?q
zn>(7|mIFLZXWktJ%xS^Ki8}xbD9jGUQjg%I(#L$%gxNb!f7y9`DE_fEwCC6m*alZ_
z$srHVmNv+`i=k(W^F?|eFWXwTWI8pwx3p<;<4v8q#Sn+m%Leo5lsJ^-dY9;$(|+lI
z25lfJrGbG{9}9eo_C#>j<Ks6ERfsq)3Ui`+3lwSh!NQP5SlF8~KCs?$`)qgPBgde?
z1hMzQt)_tiCtXD*)f`Mk3Pl&bH(?UYG~nVPx3F>3YktkI`Rk^)RDHX`C0<XueLcpM
z5~if=QeaFOmIF{geOuSxcpdrMTk8o}K`>RYzs9UQ49gR@@!r=uO+8*zDC(tOew0N~
zeko*WKxyEHL3u0DOAnV@qXO+;id94)BdkT3m7u(mV2s_HZj1e^T*jfP#?e4wER-4P
zXr%E%R-J9#F`kB0`sB8r)a-9G_T;!6ispon9IfV_cQxf~h~?-!ZnxZuV&?TJ_(@Td
zqa^sdF7?U^-|7jZndh{wimSM}tskH<#wDxGayu5CD0kopq132AOu!+ZAAU=bo^NAA
z45Fp=4CV|;X&O?@-AbZU=)IZ6@e_!&v>>k?9c)(Q+uSr^XcWnYR?Hn8ShYDw@>F&V
z#))GMLu4KFFUFud`0oXZwSlpaFc|<2D%;f#%gkWFesjFcc`<kob|H>U8^b9At-`{m
zWu{gbhQnv!DJcwFlNjq(^sK+5DQwX|Ek-U~=ZALDT5x##zm<JM$6Oi0jlyT1w6_L0
zV&Z$pe@zX&@c5rpOWz7C>Fx98t?ZrwV2|Q|n`od>D7;9ju#G}eF7vq;js}H6eIHGq
zSjL$sI4zc!C`Ood`j&PkZq}d!ysgw6+{l&}Le|EX@xtBDF_B4_+^rMV^<*Z?r>1N0
zc$bb}m#3jGp9#-b!d}X#ks!)|@PRv{bQ#!EPx3Ty8-&Z#;;aP8J0KO_Q9iC^IHUgX
zw)cl|?r7B?w%+_<XAHXPYU=PyNrT+eG2fx#CpmJuU(fOhewvTrNPwT<Z3O`n+;1;}
zf%oo2C{GvAD%5p<bJr0xF{HvE*nzKX5eZ*LFhR#t!EZ+u4k4a7RG3rTIro$EYr!wn
z8jQ<XnUA0u$H=;gLlqq549d9O=KjSyJk96Sv4ik|X9iP$;s}(C!~MB(t5{t@X$q#~
ze(~hS_}X3T^OC0?fPl<BOaKoTcmczn=2!d;+H-WJyo831XVnbH3=FONGpP`ypz&h}
zd1$+LxGbPW$3Zwo^vulxzSa1RKnAn{{3W392^5>-G~LC*{d=C*IPl?o08QkB0l^CZ
zlwU*F3c&RYM>BxzT_c)rg`*x8JOs?V=IA<g7l>hn%f^ZbSRl7Mpm+tp^MPR4i2iQC
zz(_^2C+{}hKkmROhq!dtSmOE+?U@K6+%e&P5W>=M2dD69hGJO)&m<rNo*_5~G`E47
zBGw!ic};B=r>7vLf?x8A?pjbv@CNn$1c7{k7++y8{O8#Be$3q;^VE-V?(p`)o$fWl
zo^ik<muquU<Ax#30u;<ko{Lm_K|g6K`0uY_S_mz?ENR%(w4G1OGrxUhgvE4L7UBDR
z3JsSvIXUn?#WvV3$-VO5zy$(9LGor@+W#(wFF<Nc=zDNAenEXMo+HJ<Hr&5to`XH_
zfB=zK&kydH8w-P=>lt7|aTVTH{+C!);c|omxdzEG3AGHE{#ZNcAQ*E1{SMNBKbmS_
zUcv*E{kb!fA;GS3Tq)GA>+&oB0<i{u!XIoEsqo&YoXBtbQe73pgUe#-Fzt$_MDsz_
z79h!Z7=X^zuMfHYLVm!8S>TR?@0iINHzee+M%r{b!>`-`Jiq{fUclHmG}e&T?GUuI
zL%49%n6J@Y6Jbmg3xmxx2=Smm%>>NULMskf;88)e+8vKDUx*TPILndt)%<r@@AGHa
zhNI${yO=}s^k?XYfkjZ#Dx3QhBp`@J6z2z<z(wG2u!OsKb*co@pg|rzR22wb%8zpA
zx~zXhJk8xN_@v%&ZE38maW)9K+W!J*zysC6$@^|#=)Nm19D<0^!S%?Wq#<^ddw4EX
zun{u{=tLZFhxg!g53$|=y_O$pfCAHcej;V@B3TpY_s8;<g!M?tTC8_GjXRXi0;>WI
zpkWJcNVr)IpV3Mj`=Q|q2;BJ;^-UcUiXVI2zAWo`KKfY*#BucO#`pvb6cFb7L)m-*
zq2bMWiTi^H1fwvg$fN=D`HJ7e2gXfPGkj%!jLQiE6Js!N2jw)($%CY<AEB`SCxjpG
zgu$p97yGBrtJ$GYD}o#jUEY{wc4xT!JTHes+=RygLDdxfvhZXc)2NS#LxY$0&GBFc
z)1ZHO1);fviEu5lp3LOo<d|RN-E&;|eTn13IRvVG4BXS9aBlE`siTn?0-2(c01Ijs
z!*x2QiSBoNwES`47vi{Hj0aE4dKS1wqS@}ee}5?0;20*JDdWZn*W(2;(vQbNAAwJ<
zaQ9y2)3HZ&SzeaZFjkybRZU2DjeGqXFna%y&;jq?4AdJ7EPR0}K2QBKZc^D0_^k|$
z;q#?`2KocjayMP<d@2No*SIzV<@LgCfz^SU9{`<|YVLF;CTCbc>dXbQ`^0@BA$)wv
zP{Re@1Mv>R?lGvt<+w<dN8QcAl(1bvA3J<rT&Y)xynE+xqlPI}qhX-DU{vjvSeG6+
zcH&27SZJDu>J@$#E`_j3-q1dJN&Li=iWpMBxQtsC@qthiO`C8q{uhYkr6kUq5uO69
z>Mek8UQ8jxgQKkcvaH>X-ya`9j_5szZ0k13QT2ivB^jF#Y5q;;r{@X6v9$<4nNy<f
z=@s~92mxZWc<gBxp*Ko0z--tTM47v%=5l&G&!009z}SCsV9Sv3;Tdwe^pox&5RHeb
zMRt#J##}27NhZ8A_Pru7)F+X6A%!B2hyN4-MI1PDxo_>zZy+^0$fgS_9gL5viJa(*
zk-AYlGUW0g=0p_`!#72exLBh|VTdh~SNTheReQ1*?%S4hYea_#r{y(q&dh>y&%lu@
znv4GRg&LV*lkwhHGG*o7d;#4b9SAw?cmP^N+F6SbUNmTb;JqIOrt~<`6q+6KsRKK$
ztmd_2E~8S+h$P<zBtNe8`ogXE2MD?^uiRJjd`x8+1?;EV(^d1{T}(FV&jY&8GSzjz
z<QOc+jt!hCBF5dQH+&z@r_*>6wI4Zh1*qGRqmTMk^cllK;W<2p&R?*^fU_p(FT`un
z!y$7?@+f_{E18_n{OPB$a8$IVar*}jO|bfpCwSSuw5%h^_7N3=6)6)~7$plu=8ioo
z$A{=-a7f4bu@}LB5Wqvo6?3$L>1KYyM8$Z+u|OvJbVM>5?(IoA+k<={)pT(*b$3OC
z_?&nrI-D2?vvXH(OoAFW!z1;Gq81|UA$ch7Z)*5OF@+TLIZ{?v*E|o-=VN5R(bz)`
zY*bt~MmFa2iW(3){bW?-vt5KbSkNp)LMA{c0!=+Z{uDv(em))(!;Yypq%|oT4!DD<
zKg8%-7W(s5p<%u$4`z;2-_2_(9Na1J>I%o62ouiDC#v9f*e(`2q@Zvx{2>7@evQl<
z6$S^gc`bu}Ocm-Ylx!j>Xr>U}3{VrrQm|t$smJ~CDaihJE_kiW=-JKHFx6+%YEFY7
z5f(}<IGsmLo8GZ?$M6<a4p;@bxntxI;mb+k7|@;Be-u+d9mhHo5E)qke2B12CSNj2
zUV1cf^q6m3qXCAIcZ0;Gdm$xCU)B^tp4JxvJi?aAehKBJL)>l0a^FQUXpVd~i{U)G
zPzD+RkaTMUI{?Wz0{k*3cAFRoPOPWf_9O;KisNSD=jK%pxL?gQ`)fGz#HYR_vdu%?
zmoW2V5)YF!&;!|R68R0ND06c6b_cVkLV`{K_35Byo(iwXXo?`XCe1XRV`(p{??xwv
zg5A;S_frudfHgb%@+pFLkzemx>f?|Xu0JB#5D4aSZGazM#!zcOOj%O8J3nzd$zb@@
zZz!~4ksknX8SAC|2z=g4AcQ**aG9}w%Kn9bI^}dQzc?)%{^0pCn9r*DOsMB8`SIFs
znpgf8ygS<YN#MH!>@a~+e&YLANIYwKd`+w~6?{d1UXxm2Kpbk$wU6-!hl7<8SkpoK
z75#ylKkPhxa{OYSumax8Z}|AAnxCDI=l1r^5>IrqEW)!e&NaA$G1pfQrsaf1?#J}N
z3>Q%oe!!{Kzm$lLIapm1)M154IfR12GZHY0J&V6f;3^9D0$eKwe}Y4`j!Ef>eY{{|
z8mjVrT3Q2@&ly@TiTMB2fkJ+dFna)UB-AiJ$a{}6;j4cIW&XXw1);C-Al;5+llZUl
z1ee<Pg&$r;H!d1ZHQpN$A5eIB?UPz(R-HL)Xl(6rJXX+fsH>hF>Jt$~QXO#Kdp7f@
zy=V{U;&`jZomSS&Y6hWfJ{^Qx)2^8%-=qXq4po_NnpF{>;SlE+A@bO>Lp}e()sq(8
z&mYulKg(J5NK8*Xh46$C8szcv=&9)=(Twq5e-g<DI}$&S;|9HuiZKwiawD8*ul%pq
z1V0uIGh0qxubwQ9D&CQVC9)~b;ZV2W##e#9H3xnrpabe{h(Uc`UBOG*_~Y;MNzM2x
zJUq3~epe#uH$)PDaLV9*Ar$%;Wj%POuY*YCI1;rVlT8E3GV0=t?@FTRp*447^DC=P
zkD-!c`m;d}9JsA{#sH#fFsKQnayGx<V+0rq`ArNx!^%(RMK#K&aD|U3s@t3Z#hMfx
z6Vl)zwv3P^#Zh^JcN~dja6^uS0G|+>axCHyp>>YD&?cf&%50<tq6+}7_k@>P_+KKW
z(&yG0FNQp`7DygZ^u#^rYa`zaR4WcWW}wvt2@dtB7=;(5#XdK=h>JajOoLBJ<%vLh
zQF&<q@Gkn5YS_UJsGVsFb;kLCE0bNrl!Z{?KJIR5=q2ucVyHdV#B;7GzA*?Njr&!Y
zYp~X=Sn>?aj^Dwx|ApvqdMZaGvYD9sf%gC}cRpPlqQ5~<b;<Z^Qizge{4>$N9<$QU
zbIiw6<yOVYWA!*KY7+epd3BB|*7ZDvL%Qbc^{8SlS@vb4_zxwD`B8c#>=g;;3b;g|
zblO9GpUo8}VF@X`<WwvFEZ)l1{8x)j?)9`BKp0TsupMXciv9p4oy<1z-v^{VpXIOQ
z2l88g$E)Q;M0)!IR~esc<p~6sR;b3pqy6!vKkmvJk#B#@5<H$T;NctvAIEWtaxB0(
z0}*rXR$)e4U3vzL4oYm?MJV}X8WgJSIqWHFcWO(`p#co*^7tJ~l5z7%Qxh|?p()9I
zs6pX9g&$G+>M_qFWzC!k=uWxTOO6q);5eqHVTT^=9PRHNlkV`~`Jq>e?JiXLTy*qR
z(3(A3xXV#FkW#w~#(|USnq@V+3(qoKg2l(xG@tBNB#S)ZzavaZC2#S{;VYqTKwT@L
zWX<gaWT?Gj3;Ei7z^B!WvRyqQqZ%|tM3tiJ>ser6&gs!JG1Lo8(h)o+?D=J0j^J>W
zO8&(UW~fiiT!^DEA`N==Ggvtc@C9h)-64GxboTCP*XuPyK~zD2C2ldK`-nSuUr>aL
zAm!4p9DL*N3<;F=%a?I+C6hunRUX`XKR5jFgSqktmf^~a1HwCGsOjR2GJa2Bo;3&k
zqGFQ@zayVf6ndN^{DLbl<Cvyep#Wl}2Rn$n?SpTBC^DmKK?=YYDGT9b!{{ddm;14c
zD1Gd3gN~Sgcu^~TA*7L=SB^t7j<NQ?WjUq8AkvaI1sS*LWNkq@`g5qh=VeXqtYMo>
zl%`>xp`fc8<l{>={{qJ>^#xR&pn`kKHh0SW&d)6_fcCTCE{?~W+$8Bv0l~s~x0LnH
zY$nQS&#sXvk{ht27-7VZU%l9Q{^;QN$H#CYJpTFd^P}UV*DoF)BIxFWbFsq02bO)~
zZ@RN0`2_BsI4FLE6b0dlYw^>35`IGz81;#uErQv{7ZbkAfz;Q-(Vf6yF91oNIYNIj
zpB4UVxM0HVim&X%e99+B?T0@(=9eMHUwyNM2E0;~u#)?6`ZFY`CaJ4iT(xXtG9jQf
zRqw$}?KvI{kJ)%|oU_;#szAv-_Uu!ySck=L*`5m5`{2ZFAX1oC;pekCU0Kyv_S{6J
zQh9bptU83~dCq4RYcb@JTLVB<gE{kugL5FbG$4#9R20Doqlm^coK9%sZZ-DAy0RJ#
z6X;xxe?c42mjzpO4JTy%*C;ua5-jLUG)7x0{t&b;qC#&k;dRljD>Wfr0xw5+f%YlS
zX{8}Z^=!tr3Zv3}5WGva<G#NnZkDNp23%RYB4heYV{wep^}?M}PsQ|f0xwXgb)j}P
zt)bo>wcRXGjj-U4;V1K<sGLQlLeTRMkXPbZ_^w)jQ<mz|F?wzchqOzu3|zF`sEe`R
zz~O?yH>sC!x{<^JV-~;AOmXea%zzKYSt0S{<TtD{Vp&4SvFGUF5$lpv-XH%C^-P!<
zlg{xY`}`{kt=ZxZAH4!&DD>8p0ac=XgSTfo#idgayke<Z%SR5qP%*ze!_VQ(luhd}
zRGb&xz!Q@#5Fhc~*!|oSBUAU=7Y9lfH4C>q_cpvB>tN*K=qK;0q8teTL=A-xq@E$G
zLcVW_3?}ElBnk$Woz*+&-ld>SOCY1HQH4m56!zLNms3F%C7cI=JIiIL6M0dK^|IX2
zib-9L5RX7=BZzdCPfzkQcOYU|8qw<`TQ<Odo)+UUUdIXr(1U5hQBYAHl{3YEp0XW1
zOHvV^pU{sHj}HF&@@y-H2C0Evz?aZRcsGM?1ir_!>Z#*cUn09Fhc1;M?K1v;B|l!H
zyd3Ht2ECf_Z{Ac%aOn8LGk(l`5nId;o-5|(r)1E|PcJ?De&T3okg6Vwk;?HIFO)3s
zF&4E?fY|gzasD7C<sPf5B^RClS&~KF{Ok-P4TvF&f2Qvi(~e2N<xNwDK1c4JH|NvF
zMp0`~XQ<0DCS(_UO&5FzNs||EEuO{}Lw@!wFETHQ3-toLusUbc9IvRg*1S{cLl6x}
z$N`#+dBzA0aUrT2(gka>Y2IRO^XAyC{`Wi_YG&7GW|Ui*JYa3}87JV7Cz$pfv(+$`
zII29rsO>!=n@=Mw8?=4EK3l6%gefVu6HXQC?g`1R@Lw$PB>eQt(vUdeemkoCi})Gz
zyQ3ef>OFCF;HC4zD}$(Gm_1K^58+XZpf3(Wtvq;SWNnolZ56ny5Ui{=P-+lYMkyDt
zokwMUR?z|M&iJ6|uzOa=o~%`EY3&LW?lbkl6GKecN}f(3?UE2NQf3rqj*UQYl9~`d
ziNUL*Ec|n3h%(G2T>nrS9dtY+GlYwhg`6Wj<e-ZW%^b^BTDD_Jky#Oc$tG~O7*+nL
zpks=uB|QkSEbAvh$YE%Jzz{F{wZG!m9*n+J0H1#KD;>`gM3zsb;LL+W>?zyqwFJZ^
ztsGBU1ql|@S#-fDhu2~cgJeTg=g00wxB0cm`DjxpU3%mP8tf=!>B+A|VCeX1#rCPS
zV3>U$oh`Fqzru(CighnNa=(AbN2mT72DfVt2763kfdYH*sCm7KPIUP1^#lA3|Ke+W
zi!brrh?$<6yyL*XWG8r2gr{9mzKl>CMas`1sa}U#$2vm}fxg4<U9F_GFMOTBw5n_2
zBcKczWO+cIAH{EI3~Wy2Ry}m?9$=+J7v>i374Q;d5eglMMW6ffI{5{6iEj|>D5NJ+
z1N*r_h%xhqzRSXe@BR%CKcy*0H6CVGb`)|*{$VHKCk{l(?D$LbjUN$MVU9d=qqnRw
zVBPiFbv)!Q3)a5-YaYfA;=*h~0za9touJhI0Si%;E*`9qUa)VayWAaByiWLoK*KE^
zjQ1j=+JIbn9gJ0^V}F>8$_ZB@VG00KTh_`uygaMY#2hoZ2Jze({B!aTzK}dB&q~(+
zP)KXA5?M@&;me?YLW^+E1rvF!rfh~=)-Ob@gjynT#}$2(R~o1?<TP@~%{p!uVFGsC
z)tC@bT6q*4>gHqBG`PK}Zx_WB$r(th3iX~0LQedrI(XA5$GXJ}7JPtd=*+Vp&q+{A
z4>H(a$%10SHOR-2OVWds#12uk-~p+;lEn!`;LOf_Ea!A+zGuq17l9XX58gB5Eb>%2
zCYMV9IhI!*4_@|Qn{F7=(u>d?J^LPK5q7vq(}IZ^0)Gl9a$H;&175V3SZ<(}df<RJ
z3W~x(J}GD7ghGQjET)%ivdd~q??Zj=*tOuk_{iG-SaYE8<gI*|N!tsI8u|CKl~6gx
zdn@7maWxwH8xQq=2+T#0NV!%5&{6{uOKkfV0?3N-#6Eht;ZN^?QTySV2kWw-44t%{
zlN%Bj@#=C?MX^R*ZxwnIND6D!KvuxT4!sx5nXk(4pp@7W4$<$esQEePMwI->Ut+ij
znp}jQ-Cer6g4;n|MC0(*9aGREItD-bLi#gD-XGzVgfhr&o<!|v!=q+S?!F$s@w0|i
zEww>*!OZBf$o5!Rwyzvf5AAGl1pB9|>?0PQYt#Qy++9$rE<=4^EClDk!`NSi4+}3L
z8TtjLD+tkt{nICW%IyVbXa5Tcx<_VaGN<xl5(J0niYM>!Az%t`Za9%)8u=)47GnQ5
z{|sK-o;HFHlbRWbOg-$QcBaAIsGgs^2u>SFYy39|p%cUdz`&2ilEPI}1&>L7syr3_
zc2r0a1Le5k`!pdzsOqPz56wm--(7zC@%h0o&y6-&<URY=x_dzGOb?zq^hQl6Fdd@@
zD1i@-Cwn3GK{YlHzRZgd6Tv*dks(swU|F)e*e7*4DcYqV%Pt4Z**u>+bS?*sbM7iZ
z<{ExOgHNm|O-AZ>Y1p2!7P~=dKiq}`(GA2Dq)Hx-*-Oz+p>Vr&Ch7|)OeW%$a+@&*
zp2ylZTaWQrhuJum0BJ!pR0jvPXR3){FnUbxq(R!82X)`^unLNk0%+8r@T!tW5<$Uu
zV8Vt0UB-?Xei#>#!E&5yJ1p-$$Xl0zbnJC9{A-s)OXP7oF0PpMbH9SV#}AmeOBA-l
zU6V-V4~~7_f8+^dts)D!6$wwqkI_?EA^E}Mh+KTh+yu2t>bzj1C9HI$e(yn~VcLg3
z`9|0dO|KFAW?H9Cb|L!7@s(@`sn^vE+j30k)T3Vr2On&2!gm?sG15H6W?|SDZJRi^
z5IV+CV7Q*UkXvv}UP@HzhX~V-jcy(8<LWL>RlL@mpVg6hjC$1{ys49P;+?egKJysn
zz~Fxu@&j6Y{P#I7;e2c{GWb@3U;ns-L*|ijx*A$rz>EBS!ABhyq2J?*$;dIuIP84L
z=zw=CTz>RC)w6N)-3#}nKoQ;TAII((S#~zxHwJpao6VRw^Ki_&b27z)OE1~v;3YSB
z49_aKxPSfS{smb_&MI^jd-;@iH3UHjj=}E5OHT!Ye=$Y1IaZNrB4Y#NbVuHg%wHM5
zPS!}q@ACKs(9Rtnyhpr8W$}qDl8bf0_N8R@>nQ_1;y|%&-oE-bqSX@#MZf|+Pp?xW
zKjyPV3RUADxEHt+9~PrivD-o8HIDfa@=b_gC>pBkB2Zm!=7UjH7kuBJvbG8_XdoiD
zXJUVYvQ7U)rtEWfdQZbSlapT=xG$4s9U9w4egxRgBd`#J@w0G7JFwt@MT^Jcj{}&e
zyrW4^2j*GyhxkBhC~QdH;{&~)9-S8uE9BK{3jD&(*|T$+Hd*!ucMLB@%14uP^yaKs
zv$=140Q~C%;|!2rKCjOBOL#f_bq?}TS)>yh1j5Gm7v{CY#jU@An@#$IsUuy)RSbTl
zdl8tWKO}pJtC-%Om5uikuVb8iDb-WO{%q#<$~?VRvwNj}zZPe2Tvjml1786;1F$2c
z52I7|C2_@q=>YQYujI#T4AOvO!i64#n_h4b;%LY?SdyR5&cOneq2+dRC=1vwvx48j
zor2|lB+0w>E)^afl=m`9PSHS;-B|L8qK0@i4=!U~A_2nT2}duWpHD@yH}ifRgZW80
z*w>j$_{cauDgIHquI5t~3&M{1nLHH9@=~@MJ<(ocj{^C`kL-R)fquEEL+^Vq(u0O%
zG%w8O{POIT*u}r%8NXsG{yNy(vKh5oe^gda9iRG294DwP-v?MBb2nVV0>F!O7;NTi
z08QgHk3^h2P<jfTfV-BzqjIPG7d}6DWJ*)4m;k&w{M0k>HK99&$oXU!M;H7;Cc#4_
zw8(E8%qLZjoiRi#eHa>0K{H7U?r!bs^RfM|p3t1MocWD_orDSC*&19iDz-nzAFr{c
zSE2(d$FJolth=)1-pxbkCGtmyy~j2)2mWMH=ao`W{=!aBc<dd$+<oeQgwqc+oRJeU
z1?qY#LAfR`O}s9CPY>bK9Qosy?1_0IV@8t3!+phnU-RGHimaUTS{*OL=g0>@LyXq!
z#LNnUTzr`w^Te+ljFfN2aH#6S6AY!$FLw`KK6?D}c<<op!Ap<=?C$LS`2EX+pPoMo
z?~q{<WA|O-a)+xDy9i?RK)gqy{6YoUkq_)v+5F=DgA7}|$6u929fc#T(XGOp8NXlh
zU47zl`4UBF!QBA{#X;~^Ip$~#N)lAZorD(DL{Nh=o1K_IM`Vamdj%+Mo0IwAec?_2
zs7$a<3eF@BI{`AXA^4F42<#9|eNBIG0|~j7XQJ2g<V{`B@CME&`Az2n^s;m9e=W!y
z;28utQ!{d})bM<8xS7Z-LBB~RG1p`YGrVRZFQ3Wuw{X{Nj?A=~dij7w2;)ZrxPTxO
zT;)a3qe#F+7IhV4kP`93)wC3WShGDJ53bcC@2~_*l+&{CM$O(edvxX&es+H0tuy2r
z;7ve8f;&5h_@>nejrIZ^2gjj9eY76qc4Okf+MGa(XJ>3u>x-b{E~<y>n0TA7+%%iq
z@tFZ)Yt=ed&QYTRC%HN^Q1H0RpZQcgcGH=UhC2{5@Ck+EIyP}0z2Zt#Uilfp1Y{K6
zP88z&b9IV=;eH=T0Ll;*gZ7UrOKl4#p)uv29RBo8hg+aG!BSMUeH=Vk<ebOR`e~zW
z9-3<emdrncHVg~Oixd7k_rX<Eb0lh=fx>CX?qbHtC=Ad|CxlH3ziYt3g81PuuQ0CN
zg+PSQ_ua6T{AQ0mE1O>^*`9ijLJAJC22c<?i4(rnSG-_Q#2*0e_Nkm_;L*yIM|AK(
zd+e(SukcL7X^k;{9%*?;a5yrCYlb7Ry*PhvN0$(=dUG_8yZGJsM;I~E=@Tt{Bn9<F
zVeH+YB7Zk8`5o?4anUBDg$eJX;IQO=3ylXxPy6f#2Yx95x=CLX!xoDm<EexJI7U-^
z@96$RaHcs%ZmSUA_aUFQd<6)8@pO`n<`-izBl3Rtb#RqpjsJ+Eb&;rpk;R&}Is!I(
zSzR$LgX6U(rchkS&|TaYpH>of*>h>ecIeo^fb5#QSunKZ#UEtW@A_-L33jxVaa4!t
zi_;k12o?CIXcgrC{Q(0XvubBHVwYAwCw2>aQca)Erm|C109f7(z@t71)(mcJH5u%H
zJq4}>`6i(`hUYL2|N8O>?Sx*8kQwx>uwVa$t44;m*X|c{qJYy3KhWYkzT$ie%ddQJ
z;WOPv*pM&r?3t0kmpHON!mAg2f5jFWPmQUvH=pzv78aXKSsHx<0x?qIZ|#sJ<~0C;
zA1n~jhS2x2L$-l4_VGIR{s~^)Q?t@!C|41`Il%pme^%qC>}O=q#3Pk{8Qc*4C<JXo
zEK#I8GKK*-{fgzwaqwD0+a#V9$vMu%{zYORu(dZE&A{K?QHA=dUyA%ag?bnD1lwo0
zDU#^+nuOHXJN^v{F`F)?%He{YTUp%U&%oJ)LzW-FO_BnC%_@mV21mcxtUNES#F)Lt
zt>Fy{c`oF_!Eh&6?^%dU2xl6V@KG=D35n=%fmJHniSX<V7b|p@56JXXnWoWK{RXOv
zEug#`u<Pb7d=my43i42i_{-7;TV@&+87|Xr96<1$z(<n1di!`8fX5|vFQa=27f|jO
zI0I^f_C37`CC~^o>>x0o)%IJW6n!m5Z^Np9xRp=J8OSo^?X~<E<Wtt`yT3xc;CJZ4
zxA{scEqrYZO%nI5t^3eg@|FB}9ee~F@6Fwr>!m-=RT~4myX%-OJ7k0TifiNg?8w51
z1BgLG<wFthQb+&VQ@Ia>xT{xUi%t7;Tm_3ke>Wg|>)EJKPNQT~J2P8>YmI`1F?u%e
z3&02S(J&F%i8RZG>9S48DqWt+@g<l_@)Th0p9GVmBfr-w%4_cxa*Adgi}sd`Dog;%
z;|PjF3{J>21o7vU{CI7qTsNmxH^88sYV;EGwnI(~f61=(F=W{%Ye#KTh(abn;fsxT
zD*^_g;=l*&2;<T6q=A!=O?FC_?-&G`w~qH!E608(*?=5-(W~n(U=w|T;TTXZO43kI
z(`5ZQ*0Ot`QxD}1uZVBiliv$>tv?L%6=><gA#eF(u`s5mD42RB0`*s3aLF<yG7I%k
z^@IX;Q=kRFdcd25Q$7iOS;rxXYeir&yxp>E+%E!AH0gkzyh*J&5*#-?gxF$(Aj)Q0
zr$<JAF9Ox}EB=eFPFHAS%SHs}d94Wn2^&Y%Nj}<PRgoZoiocV1<;Lvr@Fgl2y%rQV
z-u^iFgYb>vSowjWeUv{Tk*oJyH{1>nraMD#gYQKrKIC2;MpxoXdUq`oHj-i$277zc
zo7^b0|A;c?GPx#(7<Y%7dA9%j`0&Nf-v0CNNt8b*Ywt7Sok^5+FGqy%_qzF5d@SKK
zBQBh>!b~am3F-+{to>5?C63Dh7y|Jxk~ZNltO*Hfq|JPE;cni)oL6j(2v2yg3L?4D
zixC$-j$ceUJcst506TJ@zXW49(ghlU&%tkwRj5wlO93PZJLN%vahUlB1&)AtMQ39P
z|8=I^4WBAU0XdlEMi#z~$vBGBJXT86eN4SMf(DVtIL3_{IC84AYQmgJvY&#YrHrbx
z&5b9VaRnc|Rm9_KZ%ccDy!SJ9jb&KzxV^a1m6xBK7Knm-;%f&4`cdG&kTL=i66fSv
z>h=N$etlY<<tTkC2Qq_Ecm-4b2gT%M2#T41@av(wr(Rp_Txg8S#HsC+7^fE|Hq}VJ
z;zskKFKqy;@Fe0CZ?@<oMuqS*+8r>w2y9Cn*NLera8e{7p2)@h+>iaz|6+3-d935e
zH)`nK;}9eRFB-4e@7%oSqm-wK2aO7|0|}UO0}nL^FxggtvAny6dd>H5?a6_m*g=9n
z%2`jEPYQRj53zgvO&a|@@bnb-4bkWD<B{<L@$n*J+_5dztPdonl*Nfq#JmtMS98Zp
zEiPH0+0Dsu-53DR9G}YUFh-_P&+Zbfo=8olUXV2ia0KqwMye^-gTtFAk_bwLGi?SY
z6SKFWTG6nQ>LzKbNFdy1T(TGerV?Ru|M}75mp|`3Jw%G&lQ0t5yI|`le&cp1IXawI
zb21NJU;w}3J?b0BxP*@8PdTa^84>^VeE;ZBQUef=JeiXUO@uzj;U|isu~c3C;##IY
zI4WHfWZ)-vv;oG>XO(iR{D}^{LGF2M6kJkh-Df+mjt_U9Kz^8`$KOAGnP~0_k>%(X
zhLo0@b`*ta<BX)4A?sy`Z>C?%+4Cz!)Am6PxIOfbhJ`%R?O^^x!AgRUisARfhjTmT
z6aH8?DY+nx#S;b^)DOofTJWrbXL<aaW)fAN7B9uIvPD1Um|5PE!#B65m!f1hw&0h!
zBc8t@Fm9BylNJ_t&6URq$6N*kX{3e?T<sGd?#_*q7wq(6CXVU!S=n~`V_ACj4IqI1
zlY+2zyOs6y-mvT^>}6e5t=*rE8?g9_ay!K}DlA!K&QC%B{6eCb{>0n1cs&%TF8u?1
z@k~2>3A&>R=BkUbZBkY@j;Bj0JN+xq;U*IXd+Bz_MX$WPFm)p&U%YUrhlZ|Of7lNH
z+1dH!p!aNN=h;s0uRHEPy*>DMdw*x|)n4zHot;7NF+BfuXYW6H`#U@P@O^I&%Ko+Y
z{m#z!{w0=~?CL@XJ39xV&>sAB9XwXuxGLk_bh|(9?EL84oti?2J3EJ12!Hy<cCfJ@
z>F19-d-NJcK}G($M~%7xJT^bE>F6i4c8=rOLGWN#uYce<{3vZc+o#dMz@9*D8nYkx
z<sR1lo`LIX|MC>yJfo@Z(P$sv-~EA$_!<4QPXMGj?<v@QkIVHKpv3j}{;_-1JKGIo
zgLgYW$*TjYe0YSNA7aZ;X14q9Qs}R~-jDL?7pa#My!L2mU_`HAvImbE@W=yTUmA>Z
zb-vo`<?=#-2|>rpwh!<296(*wU$Ak2;t{QjM}gTcK~EOy*WKQ0ndkQ5&fX)a^eB}7
zK8dfc@?@7**q8hvl$`JOO82VV-D@DIdwvG}jvi6JG0s2sb9-&}&E{@$Ag^&Cc8cFO
zW{7JN3S0yja9{b(-f$b|aCj?#5x4&8S|z;N7rZ)nj|2Hp5DrHQgYYByhXNUG3S1`B
z-Q)8Zu3zm2WFCZ{_|FS`egq@@iI&_!ZEBznNLzCg8Vg*NXLFf^Pz){~M!d(cJ76e1
zf({;Gp+}6muG_y}?&7QYuA)7!al+8$;{cI;gyu7W5q2gUBY^yJHz3Dj8oFuse3xOk
zuXc$;g@1<z51xdT!7AU=Lc^SP=o#B_6Wbf@KE}=X?_o0%9B{~w)u>$Q$EQ3X-|LS7
zX^HCX_9~BRxQTvz9MAMmyK2inQ>c2iyYv0|-gAV{Gp^-P{_nf0*T>Wvj_dDk7Ju4>
z&L2IY&UaMFuvJ_k4Xr>~eqQX_df#hI+1V~#2hX9yoo!d_`=>u>AR&6g_@0EfJMAm{
z*e>(PVN$glQNh3Zjk6O5@H1`BocG91K#!+LQRt*~WnO-<Ylt~E`C!){PNDOkW2&I{
z*&f$+H4bQv_d-9tpX{d1VJ3inifq=qO(@_h1J?bzdrhC~-Ehzz#Ao*op54(PuRnH>
z*zX?h*=L7Kdd-120E{2KMj*?n>Ke`;^Kl-q&yB(XJffL@g$2?8R6wi0VD(JLk7mQV
zPJUIyuG;MlfNAnO7IwO3am*1AMtsO4-uodiFn<@o2bSPh#kas2cZ$<^kFz1HKU84e
z^I*nP^a~osfg*V&);uuO9;%M_0_N#`b{W%kEO+2%`ZHqeUx|vl&(G`KCJ%yBfUm=o
z#7AfvKAsHh9(e3&6kx&87+2&Mzh{o_c?$4XDgTqFY5%de<m0ec?)qag*GKox4+x(9
z7(6qY_8#+NO;8=eq7xGWOJIuNXl0e3(Q#bUQeCR$y)rCnID-F*tKb*lW#B)5Z7kZs
zkKyZu`udD1pKs-n=E}n`|FRd26Y1ps7km1|#lh|>yreV4;)y_DUxuSeTXbH3(ctEA
zgto!Int228uEM#!_dY;qf3zDjsd|btHN|Q-EHstb|0>#WM-dNF?kye1UK?|uA^R#o
zlL0cc(0rw@A;N&}E8YozF7|HUzxS8zUp!9|eDqEmnUAi1%#Y<7IiTD#!)rtbBl2;~
zhVL|)3Ml<ty;jWG-rsjU5#Qs<e2-l`R*MK!j-c^lr2zCKQFIUaB3Vu~NV|0BPa+tO
z_F_(a2PpH8a?byi=N~Sjm(g}PiCPT5{@q>!Mqz6l*wf=gZ4!XWkG}y?{)&iVaRdqT
zj^d3hKHQlpA3s`UCI^;{Ls0pBv#_@pK(Emw3)r83=bdAq5?vnR89VZjx}>gh3;F9u
z-a;G`L(TaU{+8>+Ye2Cltv86h#jc-IK=ogVd4f^y&;mruA1;x855>^@hhYhc4Ft;M
zZn=-6H4Y?XKglH0jn8Arz1;vHJ{2bsmi$Ko+1z!(59q<8Kxn3q()jTwFL~O-tJ|LY
z_5Gt>v9nVkA9F_QcSM2>q_^7+bkF}nSaR<X3ES{0o$I+wb{TzhY~*|YdM_p`UdpB9
zS)Omu$oN;!g70X?@q5I?@2#Ne$47Sm{pvxBGJ?HF-$O&sepsc`+5eBdH|t7eS=NSs
zkb4Y7Kw#`EDyt|;L@W^z@6@UEtq91k|Hz1JBAY_zTx;!f&in0ivCo=Vm6dH|G*3K%
zLy1W1>|Y<p$$16?C~b%l^?VadopBxBLbGl=6l0-LCvZ5R;Vb^v)>UT1$6n=ezjgFR
z6V5ee?&0G;Cu&k0X_)~ZIesxR_nBCaHeM+a4*6(G+?i+LPHh|^PMjv%58uu%(aqc7
zJxIhY?Ya(eMPp&uw=9j%+Q!<Y^Co8A@wk>Edv^Pmkv{XJmt<$Ys5yY0F~+A}g|&8k
z`K_+c9J3v(+~^XQCLP$@zdi%vROJiPx9;~xIbG8J7Vq<468ZVQ{N=UbH1H%1lp6E6
z*~a7s#+5i8*>5|g+dR&)-GyIvH)D^fIt~pViBCmC@3<*-FNG}S|8q^X-Vm3EKUe|D
z^DI1f{N9;H`Z5t7Oa8%+(BuCukd94A#~92?TinF_k(4NN=z01K)ESCQbA1^)m$AD3
z=G3*di1b}n3ca4q)*#eAqohyIyqY{)3rwL4>gz)ilF+}-1Kp`9dQ}&Ztrb0zS+9mV
zCZLsLd#D!?xm1<v`vMQVnkxC$AC38C9D48~sK?%P<G&0)M=HNzKW4h*tmi6$-eBdx
z4*fhD52`85*R#Sp$??=)fMDpT*ubrIZ<j*i^+5NN(!?)ATfny0ffiMdTDI;(5(*-L
zExil@@tSIHF8r-Zlo_qXDPR8-H^x^)q@8}bPu?|^&8Avz)HsAbiP5CvOWlLK5j{Ro
zc4?iVDS7=_PpN*PKz8*xqiP0>m-Oz5IEEw3oy~sf=gvrr=->C8h^29UiDq7eL(cVM
z+h}tRj`rP?Q~D{+BmdztG{yt=ni<Kt|Jf<)o2M+%+x?d-_k}+z<2Dk1rPq=8iQY#}
z8}veYb|zp;Cg3vAV|w{P?~H57>B=vs!?FGS4v&x#rzStXxAy6EB6~C#!2?O=x)7(;
z;|ae4F=wdH$mcBXn_=ryhZo&?)Jq%H22u~#ohb)q9Qj@=1z+{wJgF(1RQ~UMM1sir
z>2vLYl9s!OmigL#HLXfvY?k~FUk2W%8{UUQ@3VVyTAN18%2XvFfKp&xP0^LRF#N@$
z>@c^%@oM`D^g47>ZWMNxb@xJz@?oa4<-^>3Dy*zUh`w7;7KjBGM=CNU9|bKGLXTKC
zOlZgD8Ig__>o6b^R`7_d+Y_DpWd$vG=NxZD6h`WFvg5wibLffj9&dm}D0ZYaB6l$6
zbRQTOZ7eouLYj#o7R|SA&D`$eu;#mt2IO4kLigxPAsvT~$6#SU(({{Yj%^rK$?o_H
ztod!Kfy6X!uRb-FlMsRZ9zn1-<HLMH^Gu7$2~!pvOv<(PVL1}u1_gkjva%XcNu{Y3
zI$EVto!Z1ZseP%~cbs7z)Zti_J_)8AAMa3g819p!H9#*E{#%ndKRH(hx`IyN7oyrU
zcKoR`ik3)08B;+%vHe1gD1oMMNJgM?OFRr$<Z*kVm2B5KCR0Zhm!KNj+nqZUM2HaN
zcxN5iVO565)c}v|89ts$-N^FC!GUe7Pt>T|+p*`4)xqb~coVbJH345oQ$FTKd_T3r
zJF8e7(TF%BZPRNL8*#4GQ2sul?Vdg^rPvP$qx#fktivk}|EU=h{a)@29WZT}9;l(A
zt9>1JW9JHmjhaEfaMa=$o$Guf&jNW!v^inu?9e{Bp7rGzYM&l%#eoshgNc$C*5=sL
z)cQ>GUo+@{(1UE3Q@Ku@+p#uy+X`MY#2%EG4wJM7Iw;OS;3t+YY4i~Ww}kgw=Il)a
z2X6!VfigFaw|`G~K^axlV88JPj<dn<o;zq~5|DFtN6>1iychJmpbbLA{Usv@MBiKr
zgu$2)WjIGWt`t|{{p3t~3gpe(%rUL`2p#zhZ%M6#Hyjz4@Q=Zz6dz&>`g9gzL{y5_
zqfpRT2^8VyOetD55xP3I_d1X4pfmzRh%Dex7gl0B813u9d0~V|iwmiurOxr<sFg#Y
zVJo&wJ|U-@7%)C=(Ko)ka}J1P5SmA`8W>XP*vn_snIaR#AY6q~{2!m|vVX0PleP-x
z&}2H28bH_UsArDvs4e}o7!1&HDJ|qX2;ZSXAmZ&mTUP`FEWs!c5~~e2PgZYI2!r8L
ztH1V|hGQYw1kmBmHgw_`6QWeM)RBsAd1Fe56IY#7J^{O!4-e{!cAJbrk?J~bm}hyH
z$#$Z9kJX3DB(xOUjoe#EM4Yinunxc5AwyjG+n-2H9@keZH4D&%sh1NW#r$vcm~5mo
z5y20!EiRAt&<Xw%lTPlQ(yEv#*2|&T7&@A_cEWGi+pgy_O936kTUa(sL}t?$IoGi0
zrmePu)zqw!Sm6iW;M<tQ31b=KXe!|%*47gi+~DM25)s(`(l#I4_^@$nVnE@W&2wX!
znK6fmMTn&m1VEoWItKYQA`YNx@o34x)oS2?Ho;77Ykj7Mb&UtHPV7a5K{~K2(8V+e
zPumC3v0+F$rtqYFvi47Uj5#NS(TAb&UVKUv`|+LrmfYNf(DPCmcSxPw+vh0YOOAkF
zFfUp%s*+{FulMwXqmS#rw1cAk1<!QXfptO?b<ITOU<C`+T?Y30t^;C9T*8)V4-?x+
zQ~g^278K`}-#=Ff+dMXOU5q7)ODlMV(2hut0G!CzrB3t?8imj!6Q+{uN|Zpe=n$NR
zG!mseXctBx7^d#s*bz}!h>gWmuNo_kTN!7V8TcbKy;2#{ZC!+!cr$*lg?B=g@osx=
zM|6DeO-b|~y4%l`*eOPQQ4Y74!AXIQE1#NiA_i^?DX3Xd$nU0sO5k&s<LJ^Bx^=Am
zR1Lp5q$mbXYw*dpm-qVH&m0Bq6tC}u%=tLBC*inlZF4zaCmsncipcye0>Ao_rwAbJ
zhdvJR$#6_+6hef83QXiqgX*;WJ2(12|BaZ@M9xvUuK$K#NnpG1zpd)z9tiz+T<RYI
z8jr+S&eyYz<q0O$%<JD8%iKIBcYYDi-jmYasVzFKt3fe!nTm);G1h*>6nj}_e!&OH
z0aMUV(^+5-zgQ<Or~|Xm+iKaif#o6BO0TfycEp|;Hf+3yx@nohmGkAEpsWO?*qXXg
zXs-D%R0|?~M_hp<e#TTCr6xa0iA=6xM0c8^zBjSLZ>7L#+*G%xp<~^iR6@tWx832B
zmJlsEt;O?TgS&JR+Av1=&+dz3%6|n`MEc3-Id>rRGmy=-NXGVb1{LUwUfjTO5ZgMA
zf_Li14o%&2ug&HP*L4t(%g=xagBC+_UJ{LbO8^o=QLqX4T{%>1?Be*eU7mnM;EgN-
zveu!{NWCk~pU$D*r2=|vv)Z7V34isST!6*oUlV2K>+t42)Xn7)403_OpisA)n}*-C
zmq2@v^v0d3B{**FWA`Gmf_!8p{L&nc9IE7lM8Ib3hs7vo;$f7|P177UPi3Xf_eI~p
z#HjzgAxoGjgh7q}itDzpV54P%_#v*$CdW`FQX_2>E8rduKID6**J3ztjyOqREnASr
zqThXhcLAl5-kf+h5-BL4v30b=S|~J#EV))Q_Ruz<zZ~Tcs}fzQN1jqcLPUTR<Bu#8
zl}hlwlTI@2a)%K{bMnyX#raB1T!5bIM44I&^@;#7WkSWwi=dBQwDdb}Qt+951(+jY
z_{`?PM_@Q$_>>F0+=vFtc<`a+JSn1Wlfd+7zq?POTE$Ib0}U_?+(!?AJo#GBXmWM1
zC4&-hgQ~<{{U#IQm|-gp{GK;+RM8XZB!I?nn9Zi`55B&F!|MEg3zk9Z{C)@4Z_E6h
zd+%lRM5ln{(a)$hNa35~dx2oCT~NNVUF4N3?PK^is*g&1iL236q%d`77Lt%o4o2D<
zNPC_m7;(di#1vnGhT30CSfcpTV_NZ<hDdvJOLAEdtnir_*MrtkH;JWfiMQ~DmIe@G
zn=t{wP3p#B1Y|Y|+^-tieY;Ndm{1|xC3e`Iz-tp}rEEewqIqvE)+bRNdgP{@lK-BO
z+{ZH2W=O(KqWtwwMCaY%PkRcFO;p(XJS1++Dm0v)845CVAyq?6KzrqXDJMk2d?rGM
zA8(CU<~kDj!iu!6tpu(&r9YZx4Ol8uP2~AuXLbS`uVqIfqnFL$RmO%{hX#a!p_cv!
zJBB;XSOt`+H)R6|w4PGeUEdN-MLWKYmRrMAE=xgE=waF`V}f^{q-fTf<C_kedaQbJ
zt8&f#76AMc@K`@zJDKoR5>A<b7vkCB2H+o$|5Z^y#}1fWgP>ug1RZ~RTQZG!kc-UM
z>l`!Nnt5ht5#fLL<O9U=6K4XgE@{b>>$rnDpYlsxGokIl0=`&!J+m{sGA9-NoNY5K
zbKI79`a-yN6Xq;Q%pg|t6&Q!g!{JaOiZCd)Bq*Gc|89#6;KXmNB8dZcT)-Z0$Ie-f
zr8~~b#Gn=yYU8{WOe~Ck-b$ikcH8KC(|Z#6^Q7r;+B#KJT-W^a$wy97&0IsV_3@jN
zn}-p(&>Ds|J`a13kcn;mKO#;(;W}$w>o&6_3CF8mTxmac;Y#O&<HqYtk+i#lr5i^o
zwkLx{kY9;meg3zjCa=-hp^l^qvDNVe%+$TMh`!tU;K%D$ogB;$Yv)(VS_9!nH^+Wt
z1A@CUGL1W_XkgOF@qha@1BG#HrJuj%J$oKqJAk-H>?Qx7P16SVmP7k&Ukf8ic`3+$
zKAD3Yhq_;A@A1F%h?I*=R}Ve_*K?1gM%WMFZhf@T;DEYmmYPmf%`jcJku{?8YpuS$
z8retM)&k*FYN*gmG}GYxsFL6e#CkF~Mhj6F#1Y+Egh~z7nnjgp*+V!J&C#`?OmH=2
z41a0Ou05azyj{Ud7LLI(Yn~-e3%LYw1XoTAk!%6)g_BCQ{F-4TE2li!3Vdjr&;dp@
zsJlK@*o!6@pXQ&$rR$C7B|Jnbd~r%!r7ETHf%yOCYY~F3&S9RZ%YP9piE8?+hrc6q
zH=CAu0P^AhDC|TLc4`_qNcS%^UNAL}ZCmyY(fZOpGm`HWX`ku?+!zyP^NjS!QGf9u
z)s5WA<9|I5O=U(xvG4?cM%sAjZ}sFSO0C<H+|f&%vKKRlbQ*Y-6<<23<pTgb$TPFu
z<W{cL-qtG0Ep>lK6^O+@=gic_SVn&?0|$78t=|#2+7jApowcZ7=3mJ9{*bYMr#ha%
z*Pvr+JSn(C+AYybm5TsTk+^Nyk4&huBSsc&$V80auz`f%pc1%GM&2i<5s7B*BEX>C
z8)%0}c0H|U1`f5a@)uE%iumE>HSu>OD)xGjShp>P&S`KW@dqauDk8DvbMosWGVf7$
zYoz<b=GPvjWJ7KR1SemU>8z4fXv^G+rqCFpoK6v95}0S@=o|#6(lrs^8~8%=cmb&0
zHix^M|MbmngQTniGkkfxqZOtDF!Y`hpyYuPej|jrq;t&7A7#fnx%m*1ysiXqJQydl
z0Ep2hnBc^i);E9n5kxNtU1oV8pGmGbUr@}5F4-Aj0JjfEP4wD0frY1UKcIwt_6MRl
zW&=!aNVd=z5B5Y{_Dz-f-csQWH76dN$`Vl&eN<3c=KP`9XlC5gt2#ovwl}sWI=d!!
z6nZuwW=Qe4d!S=#?QR?*9wn*EvER5U#tz_-nA&@acl?aCDuRFB#wM~+m`Z4Vi5z}?
z3+vroh#WNq<7*DEEpKI)7l`V75rVP*%GZy>spO5uz0|gk8@-a;K3T!V+!?mTndr!K
zaDNW|jn^A`Sb)-|Mo%Kd_M60Lk^%plrSq#wNH()3uB_1)Z$yx#;U9P<v{EUEp5D-N
zAXqbS<xkGR4u}?eIYTZ$65$1247rv)J9i5N6D`eo<8g_Jj5@Rx>0veegDGoePnmOG
z25q?5mZ9yj*j^bMCK?juVgT8~Z*9joz6`Wr%`?;OpC=8B(9?3|^0;A^yz{e}WL2X+
z6cWQV_{#3xh-?%VU{q<%F*!eRxGNecPNatyb=WNqZhft^LW+(nHi;bRI2ch97$d1-
zE&2T}8K>}ZY6D@7ChSK`YtJn+mxJldT?HIQ37l`5NVIi5o5l$8rCS*tQLR5)NkRm<
zS`1FSJY)J^*xwNDGwYM;3Z0Q0?<)IlV4GO0-|isj9J%d2o8X6G=mD*WGXrqL5X8(X
z(2n71C>$5`L;w{Fcg_g^V^bbZo$eY*o(+x97WjE)E1A8TVZdVg2+tBIHBO@hBJn@*
zEcU?8_jRELYNiimiE<oUWa*MQP%OIVZ6h?3$cwu`lc0*BKGY)7{W7Hdi`>kp9}m%S
z&e46QG%THF4{<HWMykah4OcKrz<bRw<|9N<wmuuksirlF<{W)Y(EczX={1zcwz(!x
zjS^$=X?{_2%=B{reVF*3ss;ct-roAtT6RsP21PdM(Y~qidJcV?&DS)z)oSJNmZ-U-
zTQkp*rUVi#J#Nt~1S^OBTmV!}W$xd|qiFVH$*de347WL~w3&QHP3zSS(_p<q%VZar
zG9#j=)ZTo<_VDot3ZrS1w?E@~Rvp^k8cmw>^L48SeQ+M6+>7V8NX`hobe`OhCogW5
zlPxYdPtu&?B6+fO^2y6vnY81MduZeh3HXZpSkBLtopZiR^PC2$Cl%1o2XcIkep}nT
zQj{Jg<HStK*}7C5dbfHTkZ5b9aj{<)sXq?Gl!C|AG;$L;B)Gg8*1b8&XMvd%;OGUL
zn2__xr+!%v?XEmsdLO$n?#ocG$r>O@-8(0m5^06G?hn#z?F^MkT_ty9P%LX6EkYW8
zo>+e*agdZ;{;3AQqgXbODb<h}I5$Eu1#c{x4y5sy<$PlfK~NQOP}-m79n6gm8-Rd(
zRl&+!Z~-|QNY|p@Sd#@;-6;na9e9alNnTCd$G6(9?%ivtFPhA1=1~<mo3rNk8&i9T
z1{7pRBph=$U?c^&a)0-<O0kBW)tZ{1B*keJw~gN+haez|lL|sk5yCTJuCm4doDUr2
z&#i%}jS7)e2egAPkIs&ZI%NYoJ4%%|L|~*vMm;Hj;R-d>3>*%Mw9?8;*OwFOTE&!n
zxQrjJkPp|551%<7-u&r@EA+!T{O};wAHFg^JPPd(@Bj3}gF6C+9OL~liU~!8Q`Z1I
zut*0si)|kk5GZz1gNXRpiykOBO_1=-$PM_Ch_jJ43&~CRtyS#$%lzL$d$D1l!!o{=
zbA|Gda<FQuheTT@PyW`%Ebq3K3w*7uNNe|5t(D!@K4V{Np>FIpt1-_&z2jWPy0NRQ
z#-_2;SmbMLK^m+38=DgjgC|>hnnX=oatBoibHP`vV`@aQH~bVx>T4rpR#Bh3vpzS!
z)eY?K6iYYx#HQf`o)Id^SwlNlMKCup-CXOyM<sc<BcIj|Pd38T0S8#&lrVXf-+LQh
znS8{89rA<y^qS#4TSo*%^dU=ohy_31T<FJBTYx>*=_5X+>>?(--`q<^45^d^=i82#
z?A=NS{Yvf9ACQU?|8#t&20=-*LACpo%FK-Euq)Y<<ayf{-{JY^T9epD9?eg(fsKQE
z$JysngufVil9+(A*sF9zKhz8~1JHr$!~^W$Fx1ZO0XX3JPgY>W<_k$x@NXA=tNI}4
zk5cB!f@NV9*~#gBl}p5as=J$sd^@7W9U_2(;Us(^HEN4xh6+2fFptQAgjDYCJ~G{!
z2l7Q6xgyGr?mrco3EfFsX8BKa-3_rS26`)Fv;#<iTm|24A^zMG#wu5#FG3gT+75x0
z3yJvIbnfB=7S}pBG;Y|-1}qE{#d0uG{h0*QhW0_3l_icEc;C>#2X(JaYSl`(BOU;g
zSI#mrxColnwO<X(Re@sjBf~Iq48uX)Jy@c23Ne>MX$@=Y`dlakj1~@Ob|oys+SM&+
zIa6Sk1vQhtzLnbL9|4oZ!irxPPwBkz57``s)2JAr*+`Fm<ang6-D!;91!bX*Jd4Zy
zGBk=}9re_5_zxM`F*UMlF4(Jysp{I~wWE4NcGjR=ttN{j<gm_zVf5V*?yD30XftMe
zKd*KOw`mh{qDG0f;u|EcPRG19N;mcS-Z8Ph$4|Vi8y@emVz~^*)Qzt~SS9NEr;#19
zb=L05_&e6J!(ks*<rMV#M!Gtc#RcE+5sa;4Qd%Ik(qo9lGy<1Ff84@+LJ7nXXVFwC
z=b^1qB6VyFp?W&LFmECHvqgL{w7`HoMafw}gPC9-c~A*^l5J6KYVk9tWI3yr)`IJ{
zZ(op^nWtAr1Z}t7CiGM`W95d{{TA0IkIRw_Fdt^QxbuOvs+e})%H7${{6WXmjHd)Z
zGepBhx=%Sq<`YAPa-tMe#*BQH$+|;J5y4LtN$w6_W#!Pu*%X2wp{7z!G=O5YL3YKs
zqk#T3b>f;h((W+PK~-^7)>pRK#{cW%iaat(%uwkzqB4R1Y2G2gaP?6{xzMxCHaALK
zTe%rIB3%2j^cOeZD_3qd{l5X#>v8`XX(=Y8BG^QZFj<kTVJkc6D7oH|fn$`MsA2-@
z#~hA+Cl}Zuca$}RjzTL_1thCZFG3ruGHhB^cQk$DJ~+EJ33$x%O-C7|j^{ifaX}Ox
z*m8T&IYkOF4UwIvB{hL{izv!MD_1>jIek3dawq%v5o>w1{F6RDgEv-9={P?1wa=Jl
z_OAc%d+U(!$Y3JG`LWeY9YAbtQo@oY=0(#hCg@VrECEyVaSP=(A_5T|a#kwEI95BU
zxw+1U8!qk)EQKnFwY;+m0_KC&mB%UoN!t?CzIL_}b`|N|DpxjY%7rM>x{7>wt2-0U
z^FWFSwqSxQfy&qrd+SE-MY7mh%i%=<-+>M$MB{Nve5wXT*_}~XkJSc=BOIjILrQ^`
zd8UVfMYlQ!q1e?V1!HFDdH{`3%1`9s2I+9ujG>i0*FL4kbD~b*ELbPHA;LL6Y-ZeS
z2q-fzrE25nIZdfT-F|;3{S?WopPVIREjKvlpNS{NW=1c#oZG{zJ=v+2Q;!Jz`GGAM
zu#{43*YKpj(X=PEw#z%3t>h`;#xG+`|JY|G%U&iF0<X{D&k(`jXWAuBW+HyhJ)6Qz
zI5Q!`I!lQk`3Dyxyn}qTw|(MR_?N_&+R=?Juc$mg4ltYI2u&G*Hr6|W-!H|6P34|z
zI2`eAt4N>v>=FxVMxqO5mnpf|r%J^Uw3BrH`)6uvpQ+r{sWWvJWE`r>A8b%fsJgs!
zbAPc8(#Dt7oyxkw&HDeQjSBqu?a7s$eD`GEec%GTU>Vz*Um~BDDI0-2<9nh)a`wh|
zBp$62w?Axb|8bUwK~{U0f6!hb_zU~?L+)D==Ue{%#@+u-8yDU^Pjq=I6$NfG&6v>R
z&nA|Yw~mP0CRI6Ed-mU>@Q)vb79Isl@V@?Qz;t3o?hdh(P>;R0y)p_yHEn~ze?(e%
zM1Jy}3VvsQ@;l4$kB?51he+(gxOo#pO*pHF2ee4gY#)TpeHwYR@;!;eU0gYLOu_o#
zGWhO`X2lfugKOq6qw;t2gotKAd|?}AR;UsDx!dO7j7}l2DPW9-xk@i0+eBEB#AQxN
zY2?N_PPBItFXRUWc{F|wN<A7MAJYG-Jy)M~3k}XTIAeByBr;jp$VNtXO)uo!%oEmj
z7jlU3<U_mGz>BdhYOG035u}55S(DLCh<oi*?lsfZuUZvZTF!nrSfNf@imV8k>#y_1
z?=RYhxN^qO&9ovjgnM#U2HLR}Gf~mf*g;FunWG5`R9MJ1@x>hV)Lg!A`ZpzJ8!~lZ
ztTH9kN)=|vZA#98@Lo&Qy!RbBKf=R^%U+aTEW+-lowW^p<V(H^GF40jxV&;|-cIi|
zF>gkNi^;v`d7$WT_)VW7yS#QjluPx8mMo)E##!olgMVsL&u})`0&D;)-922}zS@yh
zuR-V_h46O*S06NRg=IO-q!Q$$Q~T}$Yx@opk0TJYlV&C=!t&g|lWrpILt1D#d2H&#
z=N%u}=z(eX-uNn`+&Yn%7nlUT!jKZv(HX&Ig_9@pk~GM?>A|$n(|C4oRBS)4;=NIy
zFwz;JB#FNkO|P8C23G=(uOF)s(V9XMozgXzD91kURp5XtWUz>L>L=Wedw^HHek3-9
zjbTI*L2$qd&a-R3xA_*IgnaLYc@e!IFgEll-M^OS%yNOv1MNmULr&QRvxV&Oq9T;M
zSGExAs}iIl=*_d^Ium9mWu2DQxT&#hNkQtHU3vAq7V$47^Dml5ERxxOQB9XJ$^F&b
zXA4A8>>zejy8*dN;n5)YcKDj_1i8OKGQ{uT&9x*<;o|<lPWi#dq}7Xr+z%X?@qmm@
z&z#W-Ja!#Z6TlELy;GtG?Xg{>u_&wzYp!rMzU5a(wifM7bth_}CyIMK#Z2ip{-&wo
z>mibhF|G00ELIJw`IXC1<J3B*F3#$;WwH|4xQKkASihd`h{UQ!??)7trdF*~r@lT#
z$l!PO#TkZU(XH|#*#v%@8ZXCov7=jDM7E=y(&3%O->E<p8FdG^;tnc<4#(t^TkxSo
zLO{E^KVtGij)k(&o=zBOaQjbg_ysr8C9B`PY^9KJ;UFF<F~GKIMs@`?!t?Ja3)R3#
z=JVX`dADX%o#G%#L|W_Bfp7Pok)lQUE5DaR6tm;P|9Xc}tGpQ-jm6Gx)|~BkaYfMv
zRYG`!qcz#d^c4{+dyyA(h)|txpRu2Q_dN5v$YEsinfbn31871gqhidksdX}eds$qW
zR_>GFrTrZ=C|sVTvzM^tu?>$gwhU4ibabV0IqPc*mTMr8pFlpY^j*HX(Y?=IgW@(~
z4!~td$Ylo112#9%sBCwQieu#F0casez%bReQ#j@_B1O!AmpZ9Mze<U(=G?~($z-4)
zbtC>Gs;Q{t$A8HCFhB=o?#juB4+(g{sPiIbcSJvy>tbsUW?lrf7Phx1?iMgsB8xu{
z69?P69+W?O8<;RcLNLNmBbTo=7j;5SwZ7MO>Z8Yrrfb}E!Dn)Ar@<a>NGY%z!T=?h
zK+yEL_g0WeR#zSvqe8&(qE1;@M>q*&yQp0hVFnKG^0@n5v>qYXMr^jZyc1;XO{i62
zB{Jdf>7et2P`R#Z^U)%vWQF7(Ebnclzb`pT67>?7Q$4~D#g(XOV6%oMQ14g2u}w5u
zc6SR4^Q8$v%4~n@Ue-BUtn}Jb34rUch^FA3xCTj@u3NTP#?|2KkcE(b)|GBOhQV=H
z%C_Q~vjk_TCk}~oN^43nDL{P|Y7bsZ7WTB%AND)F#=;*?-NO_W60CqRbi5IV$gDFZ
z^ot5bYFDYAnyMO{hWN-ct>Aniq<jg~3C|XN#^6Tlw*ytxmQ6z=p}Kfn{UTnqB~BG=
zBwSxM0auUJQP}jFlCN@E(X>kkAx6*i&nyz?$0700MJ4ijm_NhcN<{#E-pHtFka8Fm
z;4H2!(%5FrC5HRfnJ!UpQZQ`@w&$~D%42>of9#PjvDvke`wE^Wz%-_p0maAi5)J`o
z*I0kyi*cMd&4w_c$>R~3Gmh>Q>AMvhL95Ma?&!1AarcQYTkBgj6lTC0A#ZN3Nhsqh
zPmV~|bd9}@U2Dw={YdGup~E-0TXSYDrH;gVASleU2qe9zu2z6n@g}oBmE{3RHRc-~
z!@B5@9YXV{O}`l-g7S=V+py}1m=%^j8$XyAS-Vq^QkaW*WAPheg*`E$rCaJNGE3Gw
z&h2?nyrtwv@X=~hJMitm>d|h4J=t{XlIYAh8FVeGZGIU@HZv(c##U|&JL-Rg;hrq1
z0rQ)N`UY7CexW~(bXP#K3GsLyOdV-&^=kdoUTq1~aqje~b$!bHw2W-Ydo46Erpq=C
z1wdM<otE3AK(xIB`m#|%i>&R`0DudO*R@xYZeqg1pexLO#)L+-uDCK<!)p%~7UvGs
zXab7vj0m=f(ytOf7Xf~$j7{RPu1lH>{?i~vWG#&$c;=V*epitVL{wx&A!U|LXJ+*m
zOYa;rLf6DQyT1MVk_JBIfhB~j#{Sn-da-6rut<|t+gSQ@nd<%>HBL%qT)8D&397r`
z#wQe2HDFaDWsCSP&-g%uvm!19h!dQA6iRy=X1+*R#_B*=6M2r4v1n-^%x`2qoX9iZ
zp?NjG_45ZJb$n;kruQ^r;q)}oO&jk?<8^gi5c4KaXfDMaj+#_jiB4&&Ytrx->$Hv0
zm2xh(2r2Zu4N0u~19gOZpax7cOZf64b;8JN6HB6H*mChSxG{q1<PpB$6}u)?a~#yQ
zAJaYUp!Gma`S$8otM~baIDtcO$E1sP))CYPF;9xgF5BNZ9gp@mPFRje&p}HQ`5sbJ
z*+=v_PnP|;<6`&ly;Q}`s}>hUE1~GnJ?dzMR68TFSB1tONLDCl(I7&w&xIfow_CvH
zJDtv)i|y<EN;kJh@7a!|^9a|8o13v_TKm5L1CiPHi_D5V55(*tmj)4;mDnF3%n`Fd
zl#c!TBoHqJ7-FVXcOE#N(;uf=Y28z}Erb~PO0%j+lQg)<y0Z3d<ZDQ<mXr=cE@8Ub
zJM#uifSxG@@^IN1LP#75#z^`w(6zK}vTQU4p1cBrQm$92M51zH)AlSOUdk#ARm&_>
z+Tv2c4I`A>MoB<^n9ZVuX=1am2w>Mq8b@NyHE@x2rU*8zILFFKMoCj$UeIUr4eg@p
zl{RnlEq84*i5>-=E<%NRU0YYVMbSG&R=rtJ^<||dM#9auNr)?Y<SLQ`mr|?6!mzTG
zcj3WSy1%YW)_UsGowanHCK09qJ?R^C6@Fc1UZyEj_=AvQOQOeO@P}&8d_x^ViMrA-
z2*?l|*xu7R4R|#Dnn#I<`72pL)?R)PQr9F{eq1VC24EAJ1oF&(29`go?(nM-jX>6w
zIJWpU1bu{0XO@scA_q~NkGuBzn$3j&@+SRpukx2yQ;FLWGL*K%g;FMDC{>a!T_u;@
zEVPQ05O`T76hlLbPm3&~6qLe@<5L8o)G5VTG7?Jy_%ip<nbxKTXAbQ!r1>pJhOE_?
zj^qcQ+=RZo<lQZ#MlFJCeOQO2s>6_$XH8+7f+ZyD-Y2R=u{g>q&K`Qm8U&pyAwj&R
zgPr$4`}jIN+RK!G`)zo8YP7@18m+Q&G)%Xeu|<ecUX3ho9{Wrjf5kRA0pFuhnzO)X
zW1j2GRW?MD;X`zy&NEkPbo?!~c8k8OF;x&pkg}6IM=nrY2=}pDNS4(kV~AiaCf7_#
zg%aLs&ox7qD^}}#=m~JvHC*HKR=hzk%3NabkSU_R8>{-LO;cEGX@?^&bf;?4_(L2<
zRa~@gxlnhjBKeoKa2a0xs8jjB(kVA+m$M;_XP7^Gp-~M7vfIX2zTHM$&I1$9675NU
zBeQtjqjhjAi8GRE+a&|=O>c)w5g*ym;t_nKJ3X8Y8P4>7%WzyKrl~DjKRa$ZO~WQg
z5wYN<pCDxynXr^CnTlPV*l#*#I`IY*faPSvG@m&-olz_d?i`|LW+oRaHZnOsNGV04
zLxn4oUYZT=zF|B<ZZeJFaXw=)@$kYEf#hz~e)lbUZe&#2Vw}2sAdl`bWm*Pje8AWh
z;62l6$BE_>81h#S_C}cLtV70pwe7Z)si|LU-c!tiK_M5jQ-SAqD<^n|Mp0<)>b1>E
z6=@@~P6Rq5FVAHF)5FrzQTg!D<f88TXvzL)?Efgd)@2&W>VE9Nd}2W|3mtm?#Iq-p
zMBQ|#hkrmqG^8A0Ow{T!@;#_r8Z%jB+!O0pclOdsBqP`c&<q}E2T`+*2@?AFe$9Y5
zbJXj&r-Symd+7=LrBR^*r7!@A!C&(PXsnviK){JUo_PadqejZ~h8<he^Ny!u*dqW1
z{_CJ;{4qh^05@272voj&-2`dZE+Q<m-pXVxg5ZQkWL$Z2;37b0@ZV<*BW*vDn+OLP
z6ZFmEO5;fqnUZV{&k~X=T{E2kxR?}lkxePmB6$a(DK1>9fPBkIC7^Z1Oe*0oQiv#b
z_dO#=G$md-JVq0Z`dHcr`>U?a$8w8Y8ABxX!9yvCVcQN7vvImPN!n!uo`b@b?dh1_
z_)q#av5{h&)DO)4+UN!g0Ofn%aq)-}hq=a|u{eG*d)Y{UA1fo`<ah`#zOD$mr1#wd
z^<}x9MD^97cdQ}3qd1A0(|U;s7?-Wgn+icS$91WL52@U8aE4@Oowa_a;}%uYpl*lD
zT2{K?gEhzb#6QRCfsR(!mW1AO_2B2^dbh1@jTOBk4$v&c1q0(fo5hDhI<cMKQGygH
zhs|EKeAK6S(AV^bn+KzwM9sFPcMVxO{<ueOjN3xx`!#(K(@-DD$VXc^r{M^p1RQ#%
z(p4pMvFe#|J<(A>o$!Cp?A6>hOtemnY@sHg28f&PR8=YNbL|^-rfMzE;Hr@x+{$54
zC(MAq*W=;!Y4i^*xLk`>UEUgoIo)oqNjEQgy85_PUE=0v-TaLYZwP5IIOt!uk0%8v
z0i9zi3e|7fy+K-ObrusuNN<OaQgG>2J$}sot);WGHI2S-zH4(xAO)^4%g?Lh7`L(-
z!ex)}>!>R1l=Jg9hp<z>rSi9qX9z~Qp#&-ukQ4=gx~Pua|K`F=MM68f#DT@PJsU98
zWsm;-@8h`{F@!{&^@JZicWdv9O=7xFH+E$%N>b4pq_p0xA^tZq+d-38VoiwFC~~n0
zZn0R?gPx$8X91=qV`@|8;wa4MXJVH|ZJ%STYWiqp*7y?5WL8x~QMre(2$8jpo44?B
zr{{rGJ{&*l%FmN)9e=xMPzPW2+P!W`hGwLVYOJL_NNtZF)7Yw*Af%qRc!BNiyw#-9
zL|xxHr5aYSE0VQ`8{X($lhZWv%4(>{j)T)XgXFg`f~68Ly_TqUIBwf9Cnz+F2HA$P
z0(mlMtpfCUEUGn;v}P0|nS(@v_J^w&xJ5D(<s9jfRE465S*K>1xh>wBO5_rHkr6mU
zTjSWnFH)1t#Mt#oOh8I4yR=M5P+3h~X<h#ai)`>o%c!|8$_V`p!S9%2X+JYG5{-i;
z7UT#|IZ~(rhMtgJU;h=E6UJa*b(S5&^oxC(R28p-1%wORqu2uxQ$bld`)H3f_m3H=
zb_F-pu3Z1~RJ%t*zvfcrfHJO_x}>c+A|y(63-(VUU|+ITap6Sffb05l!J-=NxvU7$
zF^d($Zfh0;Iu{wjagW3~m#Iy_QhxlC*?~;<9q3|wMr<m;3MmLwe)P+|a`5wcfStAJ
z8?=3}H5h^C3psPq7h&Jct-kd>$$yVK+Gw40%wq7OR4yYGQ05&lYmU2Aiv5~>ZywNW
zIKT5U)kF{aNrr_>8yK%P!fd5rf9LGB4|Keg`g&y$KzBjFHtA=_uBlaKb*GT>8V9oL
zs1h6?;rA-4nOv9M9_*kROh5EweM4=u*rs}w?cPHTPZ=v_*NM>~?%b)uw6#C)Xxrcg
zi;Y66T=L}l&g;j8=5y1rFUw(Sky0j@LqIaCNhI1Wwn{hCQL#M-6!19x{mrzDM5>`i
zV4>H$V^$Iu48OyGR$B<{0kzEgN|YZzOK4JBqD$QmQkz5oo3WNEvKed>2wCxePiT%L
zs&*-DRfyL^-_+NWufG4w67A-5$Ei=FaWG3s7@&;%*4pI9&4o8vQjKX<DXQGY<Dlkj
zXe3ijCxND4?Wj98vD4&QB|>yk#DysIZKCy$CpuNyst(m@SVnjpU}A%;4oAKYPXmEg
zO7MDhZ^<Ut#<6`c{X5k3@2kDfYWAJXWoiO<JTslbcqa>GdDbBMl1vIpJV610qE$N1
z6c5K1`QUeb`zr&w<L3>%c^3^&;|VYnDS2}Br}6}zHH9I{-|3SrcIp`-Leyj4J(2J-
zAx|pw^{TE&Y7r8rF&h6?b5-d>Pqw!iOql1idXY*UDEIxBE3Myr)(5x8{_kmdPg;KY
zUS+(15>9=Vi7v*xR@LO;5!zfbr%_5Qbksb4+$vtXJoH+A^05Ebgvl-dMBqH@6dt`#
zBF}>$fn|;YyzPq|0sn4a_Amij-};c!at>NhFYo&#6ekA-tyA@NzKJ{@N%*FPnQ-S_
z8FX0MFy!6Y-P(LM%OKa+O^6vEJZbzk)U1^{MXIi4M$7tw30uar+Vdw0^x=QGEx@^K
z7Vqe)!BH+fX<v|Nc*g9XzB!ARj|821^ZREpPqxcf9ZjXhz0H9ERRMr_@YSVsE8tCt
zUrD!DhTU!1)q+g|lH?;}+1j23tDii&?Q;Lrrw&Y;@R4g>nbSCVGFansx4%axn#dG`
z7G;$7&}Ae)q|4CHt$u?TI{7g%wDo*3uw77ztV*6JVijWWBlmXeqVLiC697PPSy1j9
z>E*oVvn#aht_<5L#$dF?FZxr9Y#v^MN}L{UZMIM&3aSdHMUJjvmd>~%%801nN5x8P
z?b1~uVp$22Mz@eC+S;=nBaTCIwH2k2E6WQ!PcgL=&pCle&-y^Kc=N|+k`P%b=enS&
znO(anBi5lIVDla`!H0RVyA<HOi?tMP%;eu%v-Av!-jf%H&G1^64=6v|m9aOG)tMQT
z7Eh~0v#gLljZzb3e;{%%rz3Q_fWt46lFq<~*F3PyxPDV`{e*hdh}9x&tnH&^A<=hD
zVvfWn=L=W0r|5fIlB(jXXJx-8BpF8jPpEBRduAdMY8`e>TTP^y?*amTsiJf}YZw(n
zBd8@ztCqG*uZ)PQjTzY#qpmgU!J%V7QUUJ-2^PIc*Dj|w?UJT012fTQ&r5q~!>&bv
z7<Xq4)Hz}!y3bcB)X~-O4|`H^da|TFNwa&>q&>MM`vrZU8mhz<ptko#ULuk*Dj0*i
z(wA%9I|26FMu#5seF>45ZDQF4uqRCQggZo2136pkw4G-nLtUzgQ(dF{50+%<7`WOw
z*+v9nTO_te-Mo#F(=qwDBSQYT_ql{P?n&(kQXx^HhCgVUMb)JjD^j$3FsmKjFS}xV
zdXKEcN1(*wgROZNH03dFN^K<X9<q$&<9+<ihhWt<9fw{Lnt`CIN#`0#Fp2RuE62+C
z8=)+ef2)~^4yDK*npB|()A~Nq7k~SVpq!e7A*0hKzef%o`yHg54!fDmmd7dG;+!tJ
zbWXVlM!w9pI&9Sda|e1KT~cXe5_k$*Ep43ihM?J6XUs&0;H4+{!blNz+?d=PcdeU_
z%yc6)>WmOnXqU?5-<Vq8I56>zdB^r$(QkkxR0Za={R&x%-A%_}z=|+|psiM|nE@{C
zcnU;K!(!*;pzrv8sl$Gm6Fys`Lk;5w<{L5p{3rbZ*!(^)YWRJBZp(osr?6KdYTeMs
z^+0mS*SGq=f0-F_)R|th#J`xV#Bm6qF?aArIql?&pn`j#DO%BKgs5Cqk=1E+d&-bn
z5}OT4r!(98zE@4I8tRLta`&BOmI&KO%`Kz6Na{arofFHX!UIjFWuXu!5K-?$S`I4l
z;{njlL#s=n=$Km8IpHopYiL9`HM4+5RG_~h*Y(9QfsQIHQ+H!i{<_4M7WWptxZNve
zT$xpJWrEB->%!k(B?Z25U6#TFIPrUDU7eivERuvE%MSa~!cHB9%SPwzCkoq7Ai?~p
zP4L0YyLPS*(3>z+pSiugy%FbVWG3-NQcZ6wDcaOQ0qz1C2arGs59A_J0ULPMMpA{D
zs8HJis{$Z-HskTSktna#6wr%tFu+W&MWE|>ATAoZ`$m4{=H!YQiew}&ZeU0)z&iAG
zK6$ZA4m#%=yPdxh12>gF-;5gMO+dn6U9ece<NW^?QvG;+<G&R}h4^=>{w*One21Hm
zW`0c7ot}hxif0d`G${Au1-Z7FFn=?+wFkJS1MG?q-F&>7G;Lbrfa=W5RI;u@?7mMw
zIofJ!D0Ljku_Lv}?#JGlXx@*nR}+z{Na@9fJux$BUDfLNE0xJoz|I0HIq|rmTA`Eo
z^3xKA0w&e2C4afpQwpKOf3%a$f2OX_pA~ugyUO~g60g{!IauSpy301(R9*pYxqT#}
zY=Y5Jp0u>VCmJq)?C-Wzj$HuS54?Y)7sEk7g5%)*o4@??-alS<G@M~PCU^HE@864A
z|J3sS^}+jR`Tabsz<j}x(}R|T!>T@`U~;8LAZ)OLx3-Vh6F1d7X{Wq?LSvmapp-m(
zlyA<%ohLdJ;irGoCAg0)=4ziyP$B0>jlZ}2iuU$j{bhFc6a-BR0ZgQJG!k2!-Iz@2
z6p@BW5?fkMSVt`)4XiE`#$k>u%kebLCYBnpFf5@z_KXEetmh%~|C#QCXB#05RS?9>
zxzzp`7AfITMC)@{q{Mmy<Y}LLZrHa!$4jVttA_9H97wQR%>4eJA}qJ4F;MUaKNtK~
zK62%+@RPR?3U+#*=@h;^#VuTRgtTr!iX@{K56W{qiqmHe!+;+quuHhLZ|wlo*YSOM
zkMaG`{sAw!Cy+{ApV2zhWbB_;B%?}wD1RkOADkp!_k>myU@07jR`!IEcxOW9E*qJ7
z6IT*>>i7a8SyWZYoW!MMjfMiRRR7^_6pd2b{gEu17UzP&2+GXIW+wH9>D>N&<klm#
zh-M%EkmUWcsk7xum=G4)aAjSEgSijbY_gRkgJhU+6)bMVGg>K~)rpSx`h8-ZUDslP
zU>ZzQ7w{&-`@JQ~o#qjZkRbP2?Oi@O9SI+@_Y11)aF^1VUZ>KdA%i?Mn@T+|sicn2
zKQHll5)>koQR;agUD{`8hktdZAoTtaEBpPZHA@yHYalF^lsk|Z|L`485Wm88$$L~s
z%E`$D)+e8y2Z60SPnvF?P?({naZ3J9J07K_uep|ANL=TrCqRfW`PU_PfsAi#?BuB`
z42iDrG)v`emB^wm5Ig4@YAK*IhxO{7Rd`RIv;Z&`JDl~yi?1|NL(jwci;qZx(KZUu
zMtt`8lQKSnk5fjgIQKO37m<@^43w(4da6tXAo$1!av_ny5V#n1<-~OfhK9~1Sd5}l
zm!OG92H-?KX1H(+$2&jk7ZBg=P2G|W^wx!y%7f<9jdam6kMka#O`eAa8rxfnkJg-1
z@^gVj%Zh=G<x5FAOC;FhWWAs=TXx;1X4ur3+f<~%r+^R;ZG)eq%z!&1oic-TD8`of
z!{Z0tlWoHRbX~#_(`wgVZD>9pu25FY-S!X9zQ$5)Ovfwukr+MDt_Yf5TG=$J={&|6
z@U{(fzV|ek-Wpp9Y#~yr{tU9BMu8Q(n;Yb4dC;}v#fv_=!g93EB`4h1XkUJfRw6r@
z=9$Y~tXLqZTD1UzDw48$5SV<hKSrthD|MnM_IbkF8KzA`D3k`gj{WW<7zl%*?fR(<
z?J^S?i{Kx2+u{DQk>jpu*^J&csmd@^US2keGiDKCE`0vZA+@zX3r}&blv!pqf}^cN
zYm4fj3n@He*Bb&!Hr9)1--Q)Rd!sc+a!55j67;gcDF)(mvu@>4c`Xn`d!F<;tvQjM
z%Rr~nE%g>)mtBt~MXQvSL6zv<IUx1Drea`&$h2}dWQcvg0|+kCI|25Mb+uB^+f!})
z)^)!JntX>9>KVL$r0W;Apr3?zT5FoU3b#|CbILk6D&+z>f8HT!wP<5>R80q?oF1|6
zs)4fvgu8;B-xBJkR~ti~{=`kh_rh1lLqy$InE#k$-c9c`QVMrWHL#$8EOM(La-Kk_
z&({Y1MgX%%k+6Gd$MvBOZB#DCwg-Vj&k3UKNtZNHb6?XuO+ze3ISep8*(&%liNr=|
z@>;q;)c$<-OLR%c5OK+9iXL8PMw!DlDM%=ClN1M3AF+3LHkHK`QoWmx7ACJ{<P;t+
zwgteT`gxhS+L1H&Ji2yU;QzB}Vmu_$H2^=58aIDs?}k<4T7t&)u?=*=o1R-48E)2l
z5*Fd#69$c4gE18aK@>!Rcd5{%dao3d)8L}%xEu4N*k*}&j&X+r-W0twjyZ!<wsPkL
zABNqZ)Byjy*K(!si*TDQki+GWm?^SjLJo2MN@z(fJReo0C3OdKITT*a7IT4avH1G0
zi{s&_=q72^t8(fySoVYjVRw^FaxW7H^@_cb7YTXv?#is3GbVhx>!zQzy%^injH!ks
zGg`f|{TbUiOxsxD6Y-=>A{}Iy-GlHh=_D~?#So{=d1?k`?+GK-y@Et&MBOhL@pj3w
z@VdD`CPBjhK7?8vZN=rJUa69Ws1R5Bmo8Z)SXGy?O{KJ}^Xx^|P!@!sl1oo7k#sJ!
zrlF(07n#;nON{)1mI^z+v3br|KJoxr9xX3@>5&{{qMLk1ne=wztaebrTHV8LJRVX-
z7CGu_J!_wudKRVeEqnc@t2=#=$518t^(#C@wp(V>kTm@t>=Oh>r||YKprrX|IV#Ul
z`m3ej@342`M0GuwU>v5~uI`|GoV`zQF$ztiNDvzaUy13Zd$d^KDjhRQj;O+Q*Xx&?
z2c}o}po&HPeN{RwZFq9~P5IY--<MFWc;GMrdz<_q0sHlPU*T^hr%%IO-?^>!j|Pti
zmx8Odo2X8T6xD4<60!9@va~rcGOkWV%r+4rP=lH76P}PUQnZZjNJ_PK_T~CS6FlpS
zjz4+mBiuq2W0G(@ZBhUzxLQ_EbjskT<&y&io#3r{eh)hgb>{MeThkm*#l=0UW!yXs
z#&wNVF=#<my-kEY9?)~}X%tT7U%Fl0IaI!RB$7G5mt%|8!QMr%hAQVi8Q;0-b9WTV
zsq3W6^vBGis;$~g?%JJ_!e7Do-i%OHiQBcv6fd<7Ye1diP?u`YBg>}bI#aWY-r6BS
zfkQhLM1OsRifl9j(9*NlHO)U9lS-Rtn4gEFmYzu+OwHW8e>&u4#pos&K1FX~&v8T=
z79){ORk&Jt?dRC%#Px@)q&BBoSvS22{Hdf=>XEU`ZY*u$pvye4R{}`Fs>Z3Rc9EI{
zH2u64-8pD~dNM#%d9Lf_P>CM&lX>(&eZ>Y5098P$zsm78TsE8v*)WXGSL`AB<W8L6
z5NAKoL4%7@xfUt?6fb61>N%gRpo{;;#G7n`u_1(DVm~46w0&*!Up2`>n(ah;!X&rv
zsAXuLOCHokp!q1#adR%xcNVGR8@^V%C)Os_Cd6b;XLCGrb_Z^uA(DL2u#IYW(%|fB
z=82;wKrHl1q@!+;Q9z8}57l3037s-->D{v#bAmD~p380)c#FA2bBbTrhRU;6X3ySe
zV5r=+lR^7D<~F#;ynF{-&O1Z8vBlK9o{K>z1qLuS&pjE}UyyClE(M-^f53<XJpA6t
z;5+MPzX!l;eSDrX5|zgW78&;PIc#rzgN<1p#6Y{!addk0UbHG^QE)C6F!${BA~aAz
zeJdw~Z0rKEcMt9j1Ss3<V2H|DPUrU)$%opj!$5nZFMGsGpMyK4J+N{ewDN0sdW9}d
z5|ex5?vEQFBLf2Qx9@Z3XKyg<=$kBe)#mi|C%N;3*Ppan3LSJ<9*+iXYbhDJG}rbs
zV)8(TYt5N~@`}Ay7hAnL-zo(r@sUa58U4aE?O5-A<YSwphFFdc!MNkrK-T_Wjg0Z3
zJ7yZREs9_~Yu*wR?vpM(<48G>jyuNwCV7v>)8#OuYH~voywV#7qkHSr&SAF147$#r
zO?T#y#3Y5XvG1Np<%HXdp+uEi8w-x0p$519t7%T^bFz;>o~D)1c5Dh<;TWuxboA)?
zdxu{wsX-hxex%z2*#YjIpNfI=Q{p6YAqFSc_0R$BgADywn6i@xP=CLI`Mpi4Ncn(B
zQOn^SjrZS?-<r0KI}W^+X=|oIERYSW9+5z6_(zJrrQWd3SHSh;Nl=h^WR*aJpRqb`
z<&l;zLtE4<7=}bqLk{(H{@}HZ1r6=$kx*$7vo}x{f>t;YqL<_&;+-$jlJR{Nj43c8
z#%GbGmJ$#TI#}t>?tI<~Ij$;{VNqUvMhaLFcnb+CocW8%i>j|&Yv37~v$nwx#mjQq
zg+Y)Zif3}#LE;L>=(B1#jK$X4+&cN|xVLyCk!2N5P@AfN1>d#m%SR5i0#VxEf99`4
z1Dw*CDs)z?y>|NV4gL3)8MZB8jlRn^8N5-a%XB`IK5cGbx4u={PW~MUuLh1E)Vz47
zv0mGcKv%SrZYQ-{NT-Nn-d{gFPvE*=pojGe_YTen%eTW0N{a6u5;d5fC9G6ud*v|c
zNi!Re0{7$(lUPIOFpw;qD<ufp@V{FmRpu6%M}jVC+c;S}<4t5CL;y>@mfV%9)hVuR
zrS7R1vsOvwM}0PQtRB>;y;O>R4;8h$(bPTAe9&`d`KTyiDV^|nBpBg-XY7JTveYMh
zU`Q^Jc!qx9HAiD|i+u%7>hM4mv3>AdN1NcR>%5ShdVcoc__pQ`_MMoG7v0CYRmgC}
z(8Ja5IA5u+$HV24DlV6cE;%B&4UA+%4N!a`-@icj@%+spgiSTklR*oiL$nz9tNo6L
z)hMN)hCb<>@R)wO^gW)sJYTxH5}UqRO^j~LsAMi2-4V9xjJN2{r==}iXwE($(NUw6
z7f?uVRsl}$B|`kZg5h08N@B^Al9-a1T(bQ8QWD!LC2`&OPv;Rn%i4z7d4uD>GjDJk
zS$>$Xnt1Z{?sS6RSz^DDJMo6ElSc_qFW&wEVw`=C7{`KN%A2eTZ2Xl>LA0iI@H8f>
z3mn9l+T!bk2vPI{{3s`{5Lz%_gzHlI5<zA#K=VLiwwKp7wt#u4#y4!HU2Y6>%gAw_
zJoyx?eci?ES<qrNfcD_sl#&}ehiQC&0;;fz|8kzBg-Can==cexcg_EBfwuq50wE|&
zsf-}b+mkChtq!{=Zn3@xz+4Jw0^1MPdffci8CQ36ZPOJ&po1i;bnk8lBg>F(0bN_8
z{yY2NBmUb{QJszOL28dJ|8OJh{}*qBzSszK3+So==IU3(>NCr^iSiZ6)W{8AMrKt-
zvZg6K)gu?zf3i!4ji2ul;UKwa(6l$8)l_SaD5|y<QX8<0+K0TF6!FeiDRq<)qI%E^
zzCm0JDy+O_;LpmX>5EhI&uJC#z&-*a?koJO{!Bs|9IiC%^jnH+{)&D2+EMj$mWr&4
zHGb{6ij*=}(;%o14YzH2Sonp4tCA4E?*7&+L~Rr7Vy_cobMMC??Gjxc&xB<Z>~!{R
z^Hf&jS?~{}HKNB@i!xZLr0zI+i`Q0`AHb19D=<K-&7!-;-`a(*wSv=H3a#;m+T@Tg
zLSM>dv=4N`;uHg@%RmQgT5{tOds{9EI(dU3sXw9JMQ=VL6qKuN%2AtuH5Qw$xkRDg
zv;#_3yXs`rAI^oRlK}yhq>HdV_||=VpDBo9hvw?CrS+DDCR~qeHXC4j^Y(on;P7-F
z;3CmYjNgBj2YC3?JV3B)-IHYGY#B%Vpm`;EmAt<{)h-3S6`a_#Fw790!d5P#@TFG*
z_sPh-T!_a2MbF{t?@Hh6t3&wlMxGD#p<2IrG{tRTr2Hu<REbDx7r80eH~D|4bLs54
zx(4Jp{tdA9G4Y|?*LaR%om3rwk`tJ#h0fge$QSc8xIEiqOxIW$0jfPIN*L?^)TSay
z`kUNidO~0OO|fs6b*scfd=3+p=3_^C8hNNZ6T6DQ$VFzi61Q8?AuiX2CZN--&iXoi
zY|gOul@Gp?@K7=SeR2xk!zmz?%c*qr52ktveHiy>Yy0eIOQ{Snx%pi@|1}o*5ebs@
zYy8b3IBJH+o4E^Jv(gVf`rguRBc9w4aOac=dYWbX##cHFJG-K+7jHjLqbhjPs9LDF
zUN&KV&V%W-9ocJ|l66fa>j(R*8U!pdGf7B=LS!g{Q*h|Fn<u1XjFm$ZOzaXHzh!dl
zO@kZ90}lY{_E%u10YhWIh+nD(m2bu7BlKRfc4f^|DsL`a-~#@szq&`B{9WJlP*7~!
z_5tV709mbrap*u^cm6%q;jT3xmfiOq=4km2@cP`+cxV;6+pRe|h18#*&P&~MdXG9)
z9#yS<KhspgGJUx#B&w_QMU_5AxuDSymEt<G>7+wi)j;nZliKHZpV6t+#xuXZe<mW&
zNHw(u-omC@w{1XmT<&AMvuP6*E1r4~=|3=mTGE+6d*PNHinheeyyjvM*w$IY0|QHC
z`J)ykmtTuUKHNsGPd3sbhS4^=Cv{J3U0YYQk$rYgu1+@6rg#Fy7S!G*h5;NQMJ3c6
zend)u(1}0;)S}PyQ8c3&$#f8$#2cMGkgws(JD@#D%RQ$zs<>y%%=1hYSIQ``hgScm
zhQ@S~HXo#gbei-9EhNJc#a4W}+%wDqZRB`Im&4IbXhj^vW)O>?4+_FVX>v+s9!e`v
zHwFAqX^Uj+3JDJOP#T}qz?nm)f<0@Rj{Hd78Of=em_kz!LwMsr2%FGmQ<}oR(O<ag
zpA3l~%L^Gbqc*9a6e}MPEo(myPQIUf_x>_)2-QJ;zqy}hCIi0mbp+#+Z6x2d!7FzL
z7LEBPu-V5`midcjF?W7xXL6RKy}Jlt^)7<xeMaQ4>WLh7N!B@c=KalNrblgH4B_*h
z0tentUW7LBESq_g91PJskO>xj`NvnO?Qryx@{S&L=f61~`6m8-90C3ym_m<_`U8^o
zzx(3fuRjcM%7A7!qrHy$y9#)&6FZj3Gks=HT4j_IAK%r9d==s@esBn6k3YWOk=I-D
zb!6x=Nq(aH>78CoY@o><J#r`3^#+^WndQ;>%JwMsjEDK!R(aKq$_pum2Gx8dp{6C0
zmgc+)snWtHOlS>4l3dr9ZjhQvM-hln{v0#yU7UDzv~zV|XgOE6L(7BM94Sob3z<*8
zVQ(4H^I>DoZw<|#-7IcpHo>bYaNqJs$Sz#OyFij;x6r36u8V4u{FYFs$1X5jy6F8)
zb=J@7mhY23smIwHzH7Rw(L2b1QNXPHA-t!n*t^!($gyz7FT@`T{YG!n2La_acf=D=
zzSB0t3WE$^G1c3_H+ySp>qkLXR6GK!E6iLcjegx~eFB|Bm@PECSDuaInlKJDl$@2M
z+9NVR??_hpYZml;%7BqmI6(n~nvVM?i8ns9Z<FosJwB#mgOOmu{r7@#;ybKh+1j>g
zs1A0}uKlkCBWbRYq<(E-@DCaoGFa!{{@r+=|LO6pNp=PtTDXQ<XK$iU#ILyi<?0+4
z$G$BXF*=S7b+3iO&Bu(Xp-evXDjymIw?h3v;|61b%xw(w)4Dhu07fu(%#VU)L?#xN
z^h26-`2`+&#fSLltHBg*oL-IQ3gg6pOzGE*YHK_pDVFW(`wJ2T7lHJo_W5ukhYzE!
zk}^a7g=ij?0QK75Cw7J2dth9pZu!f=+<ISuDnz~0gc?R%=Mi~Q@qKy0M77m%F%5qM
zP1;v+PNvD-_knr#%0bO!%7$X4QeJ@uKM5$TJ;W@$CmYSjU0T!d6FD^wN|b0?R$X6O
zPsLG1u&KDSa5qzs(*4wSKJA)nB_c1<W{;8aUDHURw44$zgkQ0q0pm$k{UeOQb<xew
zpIT1>qvDjJH5N(6lR!VaIsI&L5Rhd5f%EJ;2{h10%hscqqOGDPs!T1x7W1p)-(Ze_
zgAZM=xjTD?ZJ5H8_#cLeFJ%2y*C6LZ-JHU?%n$kjD`rHgbqO;8)AhhCv{SG#`I;$7
z4@`b&r-(i1x+dDA`uRj?iAKb$(2@i`Ct0JT5&=b?MR2G)D~AnF0V0^0Rftj8fqCiA
zV*I`W`XS4K88{-5Hjy<ncrY`2Vry6$FTh3}K@D9_jNz%G8J~4eZqhSnbg&%K+j=%1
zKwlPQH~0YlA;NDcR<OD<)8K64rhLmPwtOMDyY$NY%k2rW|Beve4GZc~9KkMlQ#RR)
z#vL$7h#*NUxmQBq)mQo7u?5x_PI~i0vk0W<LW4@CgdisbFL~FZBcb0DMRm=ul$k}?
zeEbTRiy!(cOX{K@2gpPq(fc#gnq?#-x%5lxcEw-zlhLCUcAUQ3#1XEyNDnL@d`sP8
zD4-hBr1#7|^kJH5%jc7T#>Ivr;l}?kQeD5wPxDW0&7Gxr_;v7-rb|JdF<zj1=1mVN
zwKBiQx6$O9<nbUaBL<A`NtV<B1N`TYHpMJ|VK36PBFgWU$2W?PQn57NiKbyeY>Sf_
zoEUK2y`RdpTn0ydRrCA&4#;Q)*}OgGy2rH$8#03pE2?SS2UxaUrEM#kjEApx$1$?`
zB@;Sh^Wkk)-dwYG89908exBxS(@XDLGjrvLg2#owq=CTc9zGb^=czJ8&zir3R=Rwo
zNvKc0Do7imBrG0%thDD$ZW?prGo{ZlP#sbN>(bHMUxaw?*(8lP)b*!}sQOMPfq$b!
zOOn~?lI+jAq+r)B(I;}BkUxBCTQyNU6Kx?5D0YrH&^&Rd3p6F9@Sef=e;h<n$x3qe
zw`4NT`dYMoMmX;(%hhA@E+aizf?t5FgeT=I_iStaX{{-$CBUXz^x&Mng<7(7Y&9j4
zDz?e!9NG+=ksrI360+0|`ER^3Z{2vIFh0?p#@vFWgp!ABo(od2VTuJ|cL~WSi}WJr
z1E*dxGa6ERdX5drJtH6^s-c6~P^xH1FCvm6y2lDz-(;DuCdjYIJlt8axbWkwjZr0w
z@eUhdgb9RwOOq)7a-j=+_kCp0d9FhP8pyql+wtk(*kXv;hvm?8Z&-(Ejx%)@5fUX_
zyg>L3VzBRfLh~X*=cqezqx{k$iCfpnI3sOF!13;$%UiAIlmya=d7=H*m+virTdkj*
z3IJcvz7haT6D8?#1I)-9R^}#r=XDYoG!n7F9+*)3o+MJdxF?+x&1x0pS$}3b&XBOA
zLB5RYg$aQSzuj0KSksy+L>9PkeWNAQK=ULjy-?5JbR2w-E-Yz<nt`Ku@xt4G8&3io
zF+NJI8dsvo!__~>)wa9$GwMzvSLq`3dQzoiWn{L+E;h?@NXovQyr@*)rnO*0>IX7;
zUeJ5UU9A=f|2qTA%=8mJVu$d}1%n$If4n|uVzV3r-%Bd}{A8Ox{_6t`7dXavqD~rs
z#W!RFZFy`Nl2#LG_saOn0i_OZv=Uby2mf4kir>-;2M^>L89tETI-1HERsA)^SQPNS
zBAM_sQ+4%5_vjR<h_EO|hY}aS*WPVtLNz7IRQ_6{1<$X^A24G(v17@pOrUOEyxI-t
zXv5`eosxV>8!mu@yP4f^k+Sk_Kmv3oUCli$_?eIlrcbR%O<o4kwAU$f#jt?{7e||!
z^y1r)LW6ii^Pe>|W2Q*i5<RVa^N&H1Aw<;k+Nocmr+&#4WlqWTxA22?rF{W4f2xun
zkqif_Z(8;FVD@f+QxikmrSw`t^2ej}WL}*@OGY)_&oQ1su!`D!$5Vk^VS|pp%jnyR
zy?IqqD%otQ_225Zrf6Dqi6y-zH_I3^Htaehfq|6PNwC0U9bDp<FJBD`4wI=xu++mF
zhhYEs^EbdH8l9*LqLq9P7!ECPm9?XOt5rgym?!+^{!}*#O)yeuqI~loKp&&-mTU*X
z@8FN0kKzmKOW;X-y|o3FL?)Uz;seDI-x4><Mv!9u2uOTzfW(|VVe;bCd~0D%?%&Xd
zW>3UrHGT0pAM(U8dH#Hwxv@GvEp(D>r{gEuSDpPN_(_iBlAProBon2V>|{v+Lop$o
zm}<p#q86CxsH}jPZdD%)D4)`>$nlycC-ghzqZQ*s-|2P|oZ?~t3jX?K4=%})0_qX8
z04eq|z4Hht&g~WWym24D4CfU^3`aGo+J7ij?K8;#GNVJ3fE^o4Em@lHYm5K9Z?bRF
z6sMZKr<C%%Z;+Ty^}!}XL|}Vg`sR<{;HbU!a1dlq5m%zHyNN{{!-%@;ubUXvax(Du
zcc&~?Ti>dkNEoK)965k7sgdJcETumqt5Jh1m)A5T^akFrXH_`Xe}<-{cIcD_+$gEj
z#habod)#%)NIQWKcfXnZR};y9KdMAn!wLk61p}M}p=lj#h+HcSgY0}?ut~!ongt*w
z1G8>#0?-P(L^A?k`pdd;V=K8y33KuO_+?b(j_#G@Y6>00*5~lk?Qzqgc=|~!2U9~o
z6GNy*@~=i@kjp6qrzLrV9mx&sFm>=$?oK&C!<D0p?2fw89v?yRXdFn~#dogsVNg-e
zYL&W-7A3(VVb=ux9i$715+5{5Ny!rNbU%_c>T}WIH>;7vK(3n%yTy9V&YzvT%<#Va
zoVOiRR4i)MUDRzhu-;Kj_;e+^UJlw6*o>^B@P?8MPJjtNowKC~ReeJYDuPv!eFW0Q
ztI4m28+r*wX?po)vUi!vn$p+`k#X?}R)Mv0kNR%D%b~nG6td;HZpw}EkK{&V@&sg`
z&cAP^tx|(x&8<thc=NOM{`hO_H+nEbxH#nT15!WA^|O}Pgb&)}F`E+$*Q%W>b61m4
zuY&1|E~7yc0RT$!0{dqccruK(cD8PL5@cJ<mBjELM8cgMRjt)ovp<N0TLP0GuPM6}
z&n;}zXG53;w_^|D0!rn1<Fm5Oj1uFUz@g_kJe#vyAV7)Il@n9B5X6cnYPn?HOSzbw
zM@cEHQ3vK6`2urw3x6@j5XFEg{6*DU1}XM?^Yhc+07fveiL5?pk0+++9r~y@4W_V$
zpF!y{BbOoX$z^DfplveE%4JAJF2e)|MN#i;>7hRZLc@zkVIyj{fT|n$i@AS;l!c}&
z{$e4<m(6d<$OgA|Hp7}`Gjv@tvfZow#{Ts`LPlnx7#Xd1Vd@=K8%Y_T<SdJ7>*n8G
zaato8Ad<p!L9L20t?CQW^G1}o0?rxtZdPK2rxJ+w7n|^%1|^SDb^=9Itb3?BqnMta
zoL^E<N)^G)1KO!QAf?*TW5X-khRP0O!&m8mhe8lCVQUijFse(!SG0cA2us9xQy1)%
z;z`^3$wg>c(9x7=29qv;p%=mU)h?{ZHL_sruYtjL>7e7(br@kP@P^V*cDS_XbRpqv
z>Q+173<9HalDr>c+oCMa+?SimnH?J-H{;b@aI~`QH(PpsbcO+vOEgXL<1M>!-Y&<w
z&ov7JAj=3qkf!fbZI1T~w_%GYtV>P5Gi_??>|}&Y8?lpjof?f^u<5%|C5LLMZX);=
z6Tz3SMoJxj=i=SRvsZX0_Vc^HSg2maRC^WAZpn$|hl=K#9W{lIxeN^x3C&-;5eEbC
z@Ec=nd;si>op4FU4XaCw8-t-nr=*T?FnD-%#_Ttt<NpC-8Y^jBu+#VvGZzGo(;fA*
zu{pUXOA3eo2ia@%lbA5|0+^4~Mhba1bIqpWyM&$gCd~?6-l+pxM!#m%G0?v0!n5d?
zo(@@=1;Q^cUNFXX?!9F|qX+w<W9){OkyJ~-Tp}`?Yxv?#HvI3rO8_#5hAX)(Lu4>R
ze((ZbiH;{!yP^pXu&Bh8LC~hI;6#^a%{E`AfdQh4Bo9P&8kmlR<zJ*35|OUizy;7?
zDfE;m8?wMIa{eZpH#_dv=^F=t4|N7P@lCA=9)bh-bU1GgagbX286biKqttCgEa}bt
zcf2cEgh*8~_yJzDy^_p5C)J3?H<SvfX>#x>Mn@6yzo&fWr`VG)Dc@U;&!j{mPFFtl
zn`^&UAdhEl_eMHU?b{Sdqyy)8#?C;2>m6QyM3j_ORO!&vhRk0t2bK%`GY*%?wI>TD
z*F68rY)k^Y(Bgi#hT&+pSV@*4*Wc`~O(Xraz2lFNN4<6aXrsoq_G*(g`g+zAczD(p
z>*_h9R#K#$7<FQHaWx|M?uKi>>e)KoQDPqI?kkm8gG(;pcJ1U|{Gg`Dboou~<e6gk
ze<`CCFF76isHX<MNZBiNH)`H1{CN6T$*G<>g#wqY;p7)c<kGWSBMkXeI~lcUOzKq?
zeLnmadH;YCtK<-Jd&ayKXfB_q)PtyXx{0;7<|8(K0zLHA=V1IdLZQ{wUWFsvcKw_o
z@zWXcvr<3<KrZ#G1l0`@usE5SC}fSSQ{+S<3Q>LaQZO@2Q~H*@)w(jYp+?N{FD%=h
zdp$h_h3MBkIR62E?1tD}O<88vG>$AP(z<rKy<|XMFD3zz>rC+HbZBKPtJOKFMLtD!
z?@x+M06ZY)TE}FEvcWU)T#$LGQpHn30>N-;8u<uBEW6uu8`;^nS2`%Fo_aFfh=oK@
zq8$4)19N!#l;KCrdHjey0=i4KC;f<%<VU0@>=fw<^OBy(KQ8}K(v$BvN^DM(pK_wS
z>NM<O-Q_G{wc?dcB*L9}m$#&jucY00^7&AaSN}WKjp%;~>jr;z8|Z>^e>>5IvP>`U
zXssr}<<ZqD-<#z?L|eNQ{)n)n24s7hTH_=9FSSM{wFc1GbbmxM@!;d%;L7CL`!`$`
z{QVMVt#a8Y_@ADJ-9P5<IKCf`8RjSbmxSVPBcb52#!ABq_vAvmlFa6c$njSttuE(*
zS(EjF$$`4`pj`V>9jUFa4IC=EIN+8+ylvfp*08JHwQSiF^HMGIcWZ>%30AfKlRm+l
z%Z4rRf&cPkjB1TpKmP&dj*F+ihmiyKg!1cNbpNj-=!i#N!{|7G4#h7?DxITBtEvxC
z7@bvA?p`15!`1KL>NfvTT;1qeEXm(fn+5LChkq3rS5ti!PPF-DxJiDqM9Z8c6)kUm
zhqQn3?4x2SKmM$G2yUNWcD+%;B|*^-|7iBz#g(Zmih6cGHGlMsjEI94wCL%*QKp2W
z+Gp2>lb$~oO|P8C23LZ%LqAqCwp>(*JR!}HM8KN*Sm0#ez*(+>Qr6X^8U!VNAqecV
zh_l<k&Z-&M`^Vi!_T*<5XAX4C9%0ebyQB5<I_}_`#sOW>lBpAz<<|6`TEQBzI=Pp(
zi$2fOd+jY7v<z1Rhb_JUc|<7mZ|6(7)c>Wk)csN}B}rdbo-YYHbpb6h1r?t5Nh1?>
zE*wk8dDe+Je8(boezOSvhZ6Hh3IqTe&}r2z%!8AK)VrXeVV)hP92X%D&U5m}MZ;(O
z+)bbpx$H<ZB9raRJYJGpKZ20l>;9X}@6V|=2r^UEX?2)o^rMXO3#_|&`7Yh{@RuGE
zBE%xFnI2wT1BJdpim3W34#m1#(@<CMLa-FgL!YC+sP%Q+F(OqpG939%0(3+Zym_wj
zgm4WJkMoPEOB8G*0ZrkipddF*n^w$FH&o%~|47>FMe;Z1vXW#FXglzwlB@`M#LlYk
zDoUU4y2O_(5^hEVD`&i{N_p#NH~8$tc-Ff7nBat(tH`C6ikxj-`Qz1TZw)0q_r$_f
z9>}%<TB7trK597VR8rM+o|RMuD?F#0)l);8Nn6i21xpejUeANSo(@`kH&9Dv@tE_5
zo}vv3&iE3+%%5+W28ods%1Bn|Qgrz5DV`(pVLlYC!|$bVLV3S;2&4FL0T{wjPXaS=
zFZFHmKc1vHi6P}tWG^S~Ms;%1Al!oSz@5s66wDo_JA3_L$GYRQhV4XR7K=UB8NYml
zvHHs|M0dL9^IKBWh3iN65=iG}g@dT${)uXUS=q047=SAz@90i|X1)T_OgYrWF3?z>
zdy+yxD)lPf!#M(Mfn7faD8+`s&(e9}Z;jGx_MZaVsmp2an44s~4Zq9fMTf)YiO^bS
zX9UE5k|!$=Gc>n1s#&4UkJdkz4ZA}x{HN9%*Md#t?YB%F0OZ6O*v#lD*Z4cl5{>M+
zcMNpUIGU$Q`%r7eLJFY|;b*1@Z#ya`q~LeW$j;@PJUp${*S=HgCq2;8s&C#pM@Q*q
z<PmI{4~k!11Sbb|w8&S_272sEomi5kdlWNHp(Am5VDRFsr)gD=S`9xrxzH>ac54;a
zxp@->U7oqRId2Gc-n#jDsVx<6oA(ssszQY&<Lr1_Gz`w4EW)P0N_F4lka#(!D?XB?
zsKmay;u`iY*gR*14hx>pVVjVpCiA~51p(q)SbUB~%(%Pe{2?PTfm@BGJ5tH%coW@K
z?ue6@uj*C4NBqp~?~??~DBP;`vnX7y`v(s1?>f?~e{{dAo@x;XzWG3Gq`aa^5%76A
zi+@(U^f>-%phzdK(MfG6YzOcov_BHcq@+p}udm1f;gAYulmJz*F%gnKzp|>9Di3Ih
zU@!={RUhd?cDc_%^8c*U^Usn<Do^C;@{0@Gu`1t=07u;!KKu}4W0kx`KYVAKc>FDz
zRv}Sar$!2?uI~RR$$)og@2>}^HN71BOIZm0Kg~k0qk~y#2+tx7!O%`$iE;|2$&@)a
ze_MsR9w#~}P)A{_;81Iq@2G0XH^Il7TZ$HaN@sPW+b$7|qby<>j*KJ+KHQJScgi9!
z$QMF}%;{`}|K0U;tH0+Fv1&#(Pv<;%GF_AZ$-1<C<&jdk<|c=c-&*+-1ZE%LIq)gN
zNmatSYpqLV`tS(;PMqgC<#r$>W1UlAaA7Pnhlx?0%R3~F0Kh>yy>e{#5v@*u%Jgy&
zm{%B0{ziH7mD%2ewg(v5*SXbRMBA$dw%oXMvxT+MsefAZUGZ`T*wI(arf4FAc7Oq8
z&h{MHVF!%7oOO|ir<+lGILHToMaKNCWnR%Pn8t6Cq;CY(Uh`S%blIa$cSyEevi|$3
zleN_n`VxC3RN;N!Gj7gE%6Oyb)d_t#I%@5NiIg9=$ML&Y;a1p?QD~{k+sIaxt4VfZ
zFHZ$NOYApt$?v5C|4h05LzKcUrllja<KW((PM!@xC@?EmZQJxGs|i$lU?u4q3R)%j
ztA&LH|1g8306WX0cx|cWKoAhRBGCvwv5eL(e61Cn)>6omSJ;T%^>1P$`T`rFtqtW{
zx7Z<Zni=_#a0+A@75nh-)6A`41#Aa|C-5BZ$SznSQ@It3y_LRAnZ5p-zWq<9ZyOv!
zdVTAeMnHTBGHr*_qhuf;G;LP;h)|!2qV}u`SL+KOmTu0nhys|M^Xjkw#8Y<p;*<~i
zt+e$1AE%}F|593d|Mx7${@;_9o?}ja`5)zq_y1C^xWfSIO%^xwtmp5t#c`%<$WdZd
zpNgyv%W+hS(JvRezJ<PtJsboE=Z4-29Z`qGG5#)-zcE#vhaQevqOSG{2^pp+{_0tb
z8H6&@Tt1idjRa2`a-fjc_Go%H_g*1jeyrNoBKvDeSST5(`q?rCT89^sAW}*-aCow%
z2!=#81z+R;xdeVJm#TfD1X^b>Fwu;t?spmc7Ps}F<>e)=Q=O;juLV&eQ*}kM^C+A{
z?fe`dIr-<Jj6y!TTE_P3zf=N$3zYz97Qg;e$^JeUPV#%C*?;1~v2y-r*MCRy{O>ad
z;DOK$H2#}>|KH^M|0du6H~IemUh+LDh#;ir70o)nCV90(aACA&El-syPryRJGp6j1
zlld**1G*i4oJ~)>4IY(u6P}8M5zO1z&%(;Hgbfx}{{JxZJ0sscW(F_4RdFtYr7&=h
z2TqjwXO$EyjZ+nRzJ8EypTAcLL^WS7yw;i`<?gI$>*_;G;U=-|Y4~g&AX%|U>iy4?
zHE=&NarGcs!yoZ2ME~Vm_^0_6Fz!MBj{~e~@E<%MDXA4hfLU}ZaOihJ;3SZ)s2trQ
zsz0h9C0yP7(mK|$9Q*(W0VJAC<ITcJtDdxKU0E!clRz+?k~iX_8Uw|wwj9g6BdsTW
z5pCt`xXIr5ofg}8mC#PtHR}r}wWzZl!48#vQV@Pa8B|sU?D~U5KV{@{k}YJG!4paj
z*i=+3!<V@ar1mv3i$}yl-DkXGcTCKK6#oK(aI4)w9&jIbeN+L(W`ZvHo0Z<Tucmxb
zjVp)0c=zplLqtZusu!`^^<W-+`zi!n-qedPBIWD5*C4TA5)k+ry!i0#i!eDxCKG?}
z@#K48>+5(WWYZt__Y2g|XiIPYn|P~rkDG);_Zkq%>hwTAVLIV_^R91Q8C!&m;ZdM>
zuc#%N7~YfWFXc8BFs{}lv2FFQN2_uHTQc3w0W^tDF>r|I34Wn!0nbXLfeUaE^eS+?
z(!wiEr3DrB)$<48QdSS~`T(b&0(I`4R0{Xe#2wePfd4MM2>HM(z`#!(nb@Y~Myyqy
znkpUKzLb73eQu{o)~&`TgK!m1mYC~Ncz0uL?}|b)Ms|onfCL$RuNy+p8fy=5UuN2o
zIARBKH=oPz4jv7SopE>yh_)xb=&v^uNA)E1YPHw$FLucC0@cijD4RT<yJh;N4-H~K
z&+6*c*o;s%8#h;5)*Xz2TATB-9(Bk|9X!AWz+P&{+Q5k9#ds8L8>@u9_%^%!9I1>Z
zb~nG)x%nM+Te4{k?B}l&?WAUiY-mTedF87h%ZkdrqgxER2<q)Bvt}sQSO*JfjC<=Z
zMu&i`NCJs-pTUqzESx5b`=L%cp-9--d)=&uNhTvz-kzBHUfkKpz-aztHd=Z%4yR{h
zacVZWffhiqFIeGgTbsnOW6sJOkV_UBC2bM<Xd>7$D=)g(d2>&Tj(WgPVz-W{#}#_<
z`3UANqpUbEb6v=OOw21KX4<>I90Y#1bB>zo2}!<z+eq(*@jaH;S_ZaLf=h-3q=8-B
z1}~cQ^4iUaGO9Z3uT0_5R%Q6Neg!IMF^NDv%J@f_=M%~QO_nR1^u<a=p=wd=KDS35
zD%p+na{|hv<ERXF2#1r@`F(*~=y>__^ohvi?mGS$!vTgY8#~?KQRk7ms%aHL6aU#2
z2LwER$A#K~k+5F}Hc!axT5AIzgFqYAL}M6I#UKH%6J$*e0^&u_VgD}HfedfzktM2p
z^kGaR0-s|Nb=u&*q>M9(B-cZW{cv@nZc5!wDC=yJKdG9cE0bbK0-#jwzSfg5dHY>=
ze4Th)-eVh&vr|wL-iKKKH@em!$nbnn7(=Ud=?dW8{kn3td|T|nEDz7#jtGeIB@f#F
zAT~Al9-Fs@0FnDNYFl-L@SK!>5l6t3q(4;#fgjJQLzD1oI_uae@aSy&ymrCO`ClZ3
zs(n5T3=fT6*@V`*GXZ&WrP}1AFmX=uY8lK5VN?&r-P$e;++6rdhopU}u!dEEgtS!w
zkZ`;7XH7**0v5yrf1}wO7$I`d8QaXz>G;Q|Yxm={R9+EOmn1hbs&)g%1g*o9h!QnS
z`37iSg$^N3#(~p?`Omsgb-QpjqFoSuJk<q2-z4-qG{1L`|7d=#16x~YP)0cbu+V4B
z>hkMAzgM?XwS2yq&=lrshxW)0Mf&$iu=#K#IscxL-W#b`@PF{q@FI4DTY~&URKrnw
zaY$QHTWn~1;0J57;1EpP2Lh$PRNs_me27%n1T}^Ak^$ek3Jl~G&qDjROrsHYj$jcJ
zYIXii-%Wdx0eoZPF-t@geT)o>Gt|8W459D_tqze5Zt&pCJW9+2$#taMrlR;;Die!`
z4YMYiI=;#w!SANM+@sR+)_>a4KdnT>LHLMN2g+e?6&ScOKyi~z4C=whwGDwjep+P*
z_vLS|HwGvhNiUxr<cF*i)if~FAF4!}j<}<$!3FeDzp%A5p=NZ|mGvtB<kW8C8i1%2
zIb8>CR;fqZS*<0_NBJZ8gVO<mKGNHr&$D|Ve&GZBgM4#xx6BWB<&r2D7vP-fyWqJF
z*+Z2#tqh>f*EiWn`-+TITJO=V0lX)WkjT<X#@99q^XvLw6DW_Fdou!xNA)~1=mxm%
zC4EM6JA<msoX4a+yd{s-JlVs0G}cyqY7*i_e^2=w`G4cA^{n!*Z1es<c`Cro#}9-@
z-xhH}#6M&m0=ixaMCQKR`#t3Kg8AjQ7(Il;&5usN=erhmm#43aO{`Cb_o`sOwAlVq
zVp~}thGyj*FO=d#Rzp!TV=5f1CP0VOJ%gbS{^S&%k0|4K2~V0Ov^yE%TJC14h){9u
zLZ=Ylos=aRVj{1`2{YsNhrqpBM67CaOLV5qEvnA%Hb3lB#@VOoyU!+_taxV;@GCsA
zjt{@i)kQwPHJ}t~cvY(Q-}1$K(~7~JIl@x*2s^}}gp~6)Bxvl;+jc4*9a^52afGk;
z8fL0VKFF^Fi?9yo3I21}GFUpLL|C{IVc|#w$tqf-Y!?8*<eD)@g2o=MlMX+^EnV`O
z&v3(_4vpq4zYhL?EX^u-vC0(d&EGD}%5_Vtt^GBfwgx(F>Y?{-sv<JVQWKpP@IZ;9
zLaBpefS=itGujvmO`8usvS8Vwxz<7%#D)}zx!bEFV#VTGIN8qUyWvmZX}*^dT8$Ga
zq@T8EW1qnSR36XU&2N}1*()fp3+jUL>SjzDD}c}Yz$3UGnYN|$#S4r`S3&?x@P9tk
z8-!aB;{Kue1yMd2vkd*WjRzzV2PE<#=?}jMG4LMie%+YtFvGf*ZWRK7*}ZFae#}sR
z&-f!#L1Uk*jVi&moiVNdr|k@ooZK-82qbA%zsj|n1c&#3=$7tq{n)Z_q!ofx^`7hd
zj9HkrA<LEkiHsqPKe9z&Q;0x*);M!|^fFkP7S^$yxHe&ihrWNkADiNtX+}`WLNOt8
zw13szJe!zDtq)jxeujRLOZoU!%!4X`FE$=dg3OR#|M&qWF~5W$5JR^YA$74OhF@2}
z6%<%^rFQ2~)h5#h5-*TTD}Nj5KY5bFBo)>H1bNemnlKTJWrd&^kX&4Jv$TbzOoeo`
z%~^SLxLov0-a_~)I=J~p@+#&8btq3s+;v@#E&r(UFLbFiniwN!t(h;TtYD4Srd74i
z4z3LFIQrxHI<N?@KAU*SNm;fINr(rSLehMqqcu&_y@}Abb8AUUG&G3<u{#d45Qa>a
zL}?k5$MM)2%89M?^u1p@;g>E2Yl{w^yKR;oS0?T}GI1AJ)lD!9=S5~(bCk!<5t6IG
zrL)@$7A{AC3Kp(n(?&AiOGkLWHf-piwNX@{dh=((qVQLR1^Yc=k^F<gf?Btk!s77H
z2#fMRAuPBosH<V=L(D9=tGdOO^o*S)fHE0geREI;SE}ZKG|O}&faT)_VQlJ&-JLc@
zhsXrcGI<1-oDj=kjfhR9k4JS0vR7jTVgptMv490q;mL4nB%^A~1oAFf-6gy>^d5dl
z`61`F?UcZ~T|_*b>Pli9eRv%;J-499ac1oUkML)-HGzPyFN4W-SCdeueD{{25)22y
z|Bz1bzv!6b?0Etz!npkl2U&yPBDoqp5q$8-+|nlauh8Y={2kFJdT9w}Vl;lYH0!!v
zn(a7nBgk-q$5(&0H0!^%Gz2dPaGwo2;kG9x2EYkp)ux_)K1KHAc;P>4I@X!fG5!DF
zbl9i?fY%ltF_r2=+0ELom?#d*nqW__$rdo-L6O}c1X<D02o7}32o(xg0$%9M_MvQ;
znFK=#ML%%Dm7)MnfwmrH(@5@sah=`ir1>o~vh?(!VFZl~j(7I23orxfcJE4~z*L-v
z#Qjwq1*iKbz&6D@;dLq9YSUuKWPeF`UbUh#@N#$X?NLVu;&US+gEI23mvw8517z%e
zzOsinp9Xr@Q&<PMex~R<96$K*oD880>swL_PV?lSPXdY(#LskJjV0sS%<9&}Hi*{;
zA$fa#4=>MB=k4{a$rvW<S^#&Z;0q`<w4!-{QO93RGgswk5fuT=7EdRJpAQ(z?+6UB
zd?)|F=D}n_usiBI{G9{7`qeaX;D^9=%vk7nzE+nFQapoMl$*pe$TT=pYgh#4P)3D-
z!^`Zue}q%htm{b@Ib0=#x3w2)Xgw2FTh(7^RzHFhcs2krujqUVS)nx6@<(6++&Hu?
zwn@5t2)9kR`@kGI$M`ON_{i;FaAU|$va=;gujqa<1!Rl%Gc8?Nk!gh;CZ(r~dP?+;
z{+}3dOOdWc6-o<MC&QE}P={YE@4H4uRlZw3MpA1C5_;;+FNKbg+si}CmuSo9Iyxa5
z4gb}(cvho;kk=x~Hx#?&G+4emytc48yG4<iSQ;C2{Fo!ZP~|{+p2}M`X;dQ9enM-H
zX-}d!5fPa_W{Rs4IS?C?|G^acVkk6I{=_G`RMQaSdA@2m@G_@wm*+n!BGRjw>WD64
zx?-Dw%&C~Q#dbQ{E%PNjRiog|#z{V*JKyAGLd+cZ>^|rc%g-c=dKi)GXUJ&sJs-h<
zW&M?p;P?sYooX9Am$i8CYIAe*UlEaN|GIu7cvKOGv*Ch=`uWVwM9aM>`9|vhp1n8^
zt_g44Ah9=$q-jxGYB>t*<YTp|5<vE2ZqdbvR#CXtd#h#o7b$SEB(@o^YuSSx>9vVO
zwp?JPAhq@JePx=Z^HnEnSRrpE&$&qvEAiTzOanKf44G9Rn-3cT>r2Rs?XQVz-;6iG
zA3}|X;TOK!x!0`<C1;aSWyCye=bONW4~ZB<U|_|KwCpP0Q|W-|#39_}XLRY?xk+Go
zd+0$0KsOS1e1X>3IhzCyjoqUrBVLM9Op8~uWRI+TmXOz~_qwDhGA&o`4dKflD%@#B
zqfC>GQSyCY{QS)fz#l)=$MSAX<#|HPcD?R=p>#*eZ{1N^94=KJrJBz(NKbX{>&~Wb
zc#lqgtK^R6a~&WTP?Ry8mMVh<om<z9P`)_Z({c9M78l0Mh>wi|T4+k-pIT}Zh=VTk
zJDU`Hi+br5BIjc_vjap^zdCSAFHeR9H<Y?y+k36yPjsNuV&x_1e1dqbA|qh?a^m*q
zTHH1=4nV5K8npv8T5*lJ5%Vd{b2!7B{rTF%BHAG}0@{9L@PR;Km*`$;4W_@<+mx2^
zB3T*O+v${|u`569ZR+W50{$FGS)x1$vtTQuMJ>`o?7Te14ow0P@s0UM_dj|!8b-RZ
zz%ymCg(B-f`PX00+{~JfTfNT?w+7__Am(?o0Asw{nd6{n?a0fQJsbBj2+BSE_pJk-
zN<Yc##hyc#JdgHrBpQcN=?jyXE=JGTFl-e#RK6Qzr{cr44%hzHDJ7FVEVOc$UD2{u
znx_cQ|8koD{bBD}1{7Whs3swiBbBeK&)TnZ7HZd&G;?MC(i|_yYLZdEu<}6)rRRF&
z7UnIWV+a#5&O(};0~vt*j66f5QLzotj{CUQ4Q_0<BO2^ACt)>{y0Gkonuv&8oq)Rn
z5}ICNX5=&Q|3P}a?C#p{fXi$aki6~kEU*g=B;0hnz^8iqnUPDwAI*RFQR^M3iD`T^
zKl35Q3*k<D^e}VER2{zisPzv2=!Nmo!Yr^0E+0QSj=sc4^E1c!vH$L));s*8MdPC-
zLaeJd!!WYF9>z=K7kv;0&w4zu{?FXVDiiNy`xl3#{#`TD|BZ`inFtA}ru^j|WmG{x
zRfXcJlH;zUrR0`K=G6I|2et{P>3S)LOM5ss9gETXWlLOx>L3lCNJh|!CZw`d6@<6C
zND2B@sRbx>W6+AN{Aa9?(Z|F;%bMdh-bK^45^Ex(i?H&9dCA+Z@0T&t=Vsf;*i8$p
z-8*LXsTs@zk4g=0xel41LQ0fe)D!ZlXWNyci#x}*R8tANf@So5g!5=)IW`>soc@KS
zYr@hcvg*#+lxBhr$mM{Wso{!DaebjHguX%raFer8;AdJU-EnWbJ(XIHD(C=Rb!`;^
zRO@hSUuFI3vxB@OUW2w@>B`k5SEa6VeE5xyspzM&)$V`PF}<lXw80_DoKH%k3DruU
z=PzQbXm{=Ig&3L%_-}BwNjVPSsCZqwFQ31dR%(uONF*6w;3K@Y;W5AF?hEI}3mrq^
z#Yo^X^`9}e3?R?@1CR-=D_XIW|KSxyLW2^n!ah?3F*OD{MXPQ+l7d0o1SSI7WK%LS
ziBOAqL9`4tzWiclbk7Af!SlDWJHiUAok2h*scL1J3U|mEO*5VEf}dzcReFArIP)n>
zH26wG^B72Iy`tjRsza0w9t#$>GFW?9EeCVetzO%eO^XOS#i?;2qwEk=@ztF3>ZS2&
z%kyfD{Jrh`{ek{Db#%oi#{&$i+=Hzru48i>9DaKn%mPBlKMR<}AY_zpP_(abPnJc2
z7we*IV2Zu@BlEdfne9upZdAzfkrSQY1vb?WMjX*AsIo$iGd~NpV+Qa2d1&v+<tE6m
z9R?kHx9Zf<sN!t&#K+DTx~Xx(c{2+$HYzN&iab^yj<SL^iVv_jnqRD@*F(gnQyPp;
z$tLFVi`6pT*TL*mMX#Gia=M^8Gq+((;F47mn%g}2)zy-%qfUvAI+_N$Xs@=CNCdC2
z&5YnpP-ds&zzN}D9f&rwVFRKDlJ+P!%iB}&yOpQnvJtVn+**v!XrPw1!S6Vb56Xf3
z^0P?ZIN)Ki)MBW_JUH8D91Vk-@hBheexb}DcE@?+U5_UuBP6ib<%Jt@XFitT<$g|L
zXz_=)P_0i~wt6;>cOkfKdgZ|8@iqLzD95}c5WG?<VTif_lD8JKvtAz^>!~+*HUb1Z
z)(5&wni~a~$!KXUDTNbs{&gM=iaqYQ?1Fw(+L{Ds@sw4za!qtPBK&vn(N4(2LD4X1
z9^_9lF}OoCwtK`J^5ViLdHw4n@QkD*i-0tI5@rT7*s0r$$sJS`*RPJMI6x<)IMY22
zj-ZL47H8brHgFl~{U+4vMrlH9!G`{Q)z$JPw9xM1MQYQVCOKIi0Z9~NvpWwuu%Ta3
zpT<`b(;9v(ijvt?7ZU+$U3=2?l!pg9`W%EpQl2<o3}CrwExLY&;CbK~nY84vmljs^
z>D+yRT7w=EVsl-NgU|~z4}VvvCn^>9V@h*=MX9C>tBUB91oV(5Zb98sM72bowu-H?
zM=v^@Jwuh|1(gd6L38!3a5RePRt1yMZ@UZrTKL#?BCJV<zp$xWT<#^lSe(9@WJJy)
zU;?PfH?g_CDy=>vVl~~PNZ-BKWG%y{y{Ae9NIC{wc4vO?T%OXKAkF-QY*ocAgwK>3
z|N2x~X}SfDgVyHCS_O@E-v^7t2I7M}ZQ*;`W%0}r5y%Ax<k1^yu1o?`^bUgsbLq`d
zdNp^UjS%WD7etmJCbHs&skswDxeqYCvA<b3GUj6uWHmkNdgT2xumQIuoc?+Q2b=en
zSsK#x3BI4d*3$1)f!6dnM^8-rffY}}%q#O*l$2rN{NBkjl9LY=x)M94_-o?kC8<t8
z(ErXBc*9`RHTWs`N)N<#Do+BlA{VA;L%}$VOLd7w>s4BKN2ksXr%>r33@KgyY==`n
zoWRjSPk(!d&pbPP_K)uH@zmtz0_Y&_%KmoYgcb0{7I3NEU4~oA*wyO=sUEgkz$8P{
zZsp?~-P<cXLcYyC7Tfj=ZjNsG+K!lD{x57ZD_Ve??etDR{Aj1o+?_uAW~XoO>^<k*
z=_9eNs*}L1jrGe?^@`VyD-7KjOy~u62hZFWs;6EUDywoAKz=XJb#1>u{ekm^FckJC
z3|+@a0<$zCE$Uao1^W1OA}dG=zxnh&p!T7f5>S8RFt5xdLKn6PG&k@bodNJ8QNZ0y
zhYj0r+_o;4q^<H2+u}cZ+M@h|<)zzJaY7D+&`;q<%ic0!=H;L?aoZa0NJ-$a@ZOC~
zKMJ(P&!$KvQM{UhTVruNZ8waROpx7gaCe}{ud*=M&DFi>Mf!CVmAfE2yAz*x5hqWW
zM1=ulFH47{Jk|_Ewc&$rbHKi$Cf6@Na$FZYYhfjg*$(|rxvZT$_zKJzMFCf^I;Q{<
z%;5HIS+SdiNci|9c&&A+on2?3vAvp%{mjIU4>5wRzuZ(+;EcOu7#zD}3nSyp2LgI1
z+*k^($v09kZOk@KTOL5I-F@so^2IuVv2ymApj7uAK{y5TfD*FJ2|5S{&E)a5jvVaz
z34M1oao&~3wdh)E!*`kh^==~Bt7@NgYX;iM0Ab|ogq{7D*PcD^nkc!gjiDWX1tyd4
zgH67pi}?Ys<sSEA8-lXk>6b$)(AqUfy~#OE-yqf+&018AZ<s)?96qyx0lR0=j%Hm4
zWH~1my~k_1CEuysiB#Bp=6629B<(ER?<~6{Gt?Jdz}QAg>$yrK#&+vY7d;uI88j3x
zLmJyEhcc(g*k^(`dMC?S#C&MgP?9lI%93Qy2C|^QBGBZ)UzwNUm7bZl@`7(^Nm&e#
zXeDqFAuL|fO>2OBo~Jt+)o<wYo&vKC*VBC&$aul0YUn(;;?wlH**d^L+=aqIpK&5l
zRtQhx13BbEU0yR$#n1P5@Qn?`KVYy*>K?$-RX9YFl&t)?q!dr$5Zx^?T)Vp>=7dmY
z+bah^1(}|~0^Ak-Qio#D_@ACC2n5S@sOAY-8;dTjAq(ja8|e*vRX@pJ-qbHL%|Wvi
zB!qk|naF_1r>X)w=KzvEDILkHPbIub;Rn|UX68w1sOiI-LJ_RFVi)%pUI9|#&t>4c
z>1nQ7Nvbt8_=&7=N09&$&O`$E9LTc7!1xyluCLp$SYOVDMDcz;H!8+KDf%vQWEd1#
z{11&4#wpZb)H*cQO6}Js6jzS9cvuUQ9=vi_&SPKVvAr;dxUhfOEly2X)X=N2#Rv&N
z{A05s=<5Q6*6a4k9{cVI7knA&j%0AQ#mi{H42+_V3bkHsNA~jB^dz^0Cpp^<AD7qw
z3wU?lG;^2Om-AnswEmzWUP7E)sj^9RWxvTbN5S$}R@gweJUd2mO0*CEjt+JJn8FG4
zz9#Y(D!=HAXm>p0;Oo@@Z)(qN%fzSfna}_J%n!q2k`eblyUs#;fai6e6>6t`TpQ>S
z<%74Z@vH*75JTZN$HO;YxNJGNtigjS;S!@#oWC{-h4V1u`8D;FA+JV*CZK`K;S!%J
zU#rHZ0do?_is+EYU)yNPbI+WjoSiEnr1#=QmS5x2GsU8rd#9Bx2KVS=!Svqgvl#;v
zydu<H9UrfIS6jg{->uD)kBOPhV9|OKNx(#SZyfx@W52bg#J*N4=>BO=KV7J|Tyo>$
znzG50v7%Opw8lPeJ$oK9=3hLU8WeecjM>r!NbuiXgarKRKqSPkzJS5AbN!a0>_kH&
z?Y;Vfp`6(=uo7BY^8idYNC*I1K%~EUb7-dKDdDGza5toDwn+5>6=1W?FEdARLz0qB
zf66b}!4$2=&tEcE{EK9)!~{hAMfn0nFWLttI*tV4)!%tJDdEcz6ps1OwY`>s#}-mx
zjZTd@;~vsn^4+c1+#A&OEFvHx7a5|7>!2kpVnk6XpkM5sjV;Z2x%N=fEtOxhEEM=~
zr)KD3yuj5K-y$G><ke?7|H6=8p#4B&yyBLfe&O^}QBUe{U_qpz9!&{da~mv>^h_d?
zd#0=NZCJOeh(%_ktgc-(=MT0L*t>NY(o)mwr8A>dGjcDJN;MxQf+bo9v@{}T8h=BJ
z6-jnKf=3|}tZcCZlO&UR!<2WX7c`kmFk3=0rJyWliWfR0HK)c;y0C;Xs&S<HS^HE4
zgR%#9l>apc8B7f+a$TB-c*@KfxksV#A&5H(KPNK;jRfMVhai0@VA>*u9l?KnV!E!G
z`tgzJ3S`Li!Etp=*ZW0=_2ZAfn3ZP(X`&fF>JN4Fhjg1=-KOqmSIINOEi3I{WKt<x
z?7Ns32rjy&LDEBiq=LVl4^3`e60iyUf|~bK7(X2%V9t?>BTu9Tr^pnM^U)nG#*Q|v
z@)}EiFlM6`HTsZ|bAQNu-N8i0ds*BB9_Zq;pizN1&VL1jhWaRxZZ9#&e%>=+w8y{P
z9T3=j(W8P0-kIN--n8pc-7HbVX<WxBc}8_54>v)+Y1Sv>T9l~9eW)wyfMvi;qBDqv
z;otXlNfF2|muG_^K+7}5B3j$k9V&0pBlK-zefUw`@#nYcCLGILN!rfhPM_xG9a;`|
zR9S;|`m~)jL2g`wI-cOsHL^WK<;RHZAO^Jnp0Sd!7X)uJfL}<W-tBon3L1i4Ui@<P
zzv%;EE9n`Mw*$dYDBh*noB20xU<lC9H<K}!7H1W^KYwe-62y|LJ3f)GC)Hr~;Pi0*
zp#93T2T#|*wu*H6ujyk)Un2=)4?5KA7<y*d#S|Av^+v@6eXwUZ2Q%zc;-do?JQ`Wl
z=nM1|Nh_b=AP{ce031-Cys+i*FK2{<i5al6Nbbph*Jx>MGd#x`5)o;J6^_-_$_MG!
z0x9PbECJEj`F6fTpy-g1Oj>juu)|kC4Ml9Vdm*ikh096R<gyr@rgk<YU-$C)57btX
zQ~?NruYf3mH4JKh1wMM%0|-ys0zRj9Q$h>S7sOwFII3yr8&wPIDsR3VkM*9i`Xq{4
zEG7(glY_2F&$ynXyS=t6d9Uzw@_Wt38iTf9NmMjDf@cw8#@#MRV>TBhZ}u#c#w>xu
zsI=sm23<kdYS3v0-1pfzp3Ci*VUfc2`ieaymwX}T5Z3I^t{loIJO(L;q_B*am-zA`
z>tz&jClhol>%ihHQ(KVKYmLNwC`2CSf~8H=%$OztN%hsick7fH#dWz&GJz#&wrpCM
zJ+obJSWvj{(dLgr=*fsiI^+66V$M}C&;RhWiModk;^@zl<6&4Rl<nkPl(&(E0TP=8
zPTkr)6}8EcOHib-X#tnY=rm6C5Ho<zo=q;Fg7Q4sIAmE8kb2S&&!|JZ*j~db^B3ya
zhnHFHYm%Q^G19}c6HA-C=!!16jBk`RabHc($E8(f<uNZi;#S`lVNo9s{LvbMN$#}l
zbP{G1G#39hljY<M6fpzqZQV{yAEN@TOrFWx(G{Ds`rpl|H|OMq+772SPW~@$&f_uo
z_5c+Af4Mm^EgUx|G`745jLM^$brb)-I{uwF)J(fL9|%1SDnuyTUzN7hZs1`aJrJXO
zKy)t|g;Z)AAP3Sqd~p>xntWU6DIwHvsELk|gm{B;Dv<TuX<pnmZxiDe^8v90`F!Y_
zAE_*PpU~~a=LFSVI4HyojB03Pd+ER5GM*bQ0%M>OY%UzVYjNQs_mwJjEmFlw8@F^S
zA5Sm_DbqezKq#UN!|q&#nYDwOe7#`y>*6zqgHxJwgD&vJ#i?M9pbj;X($3UE4cPX=
z;yS9bvwYxL(LB|D*I|aPM-XGYnV(HjQB4uisbPv{C#PuRwGP_i-0d&^?n@z2V70T5
zM8<O=h`~VwH8$UdkssZptV**46E>v{%3t;wtO;Z?N)@nYJ8f|aztjSuV{`sQ+$bRl
z8)*Q}=$@iuW9WLUYzH9+a-kEcUO#*T_Dy9WqQw402R=b?&0?>m<scWHmitZ4SGhkK
zu5OUBspo-pPk#ZE(c3o2xTjN<bDw*r{8i7U^s-V4_cRga5xnxM9*34+pRd{^+dP?0
zV45h5QHSB_2DVQ|>>&|}AIw57B1}|GRa3kkQyK5T;aGUtcYN8U{x|DglU$iLvgPv8
zNs?>n>3s8JSI6oa(UmY!D1Rs867aS0_J_fD3gd;m7IPWGVU)ML9aVB(Ylc$6o@&k^
zDFzmq2H(KTfSh6QL|h2sQQaIb!XEHZa@mYhIg47Z$pcS5!8bYzClr0-!apbab`d!z
zw+JcHMYrbXfl<pV851oS{TQv$ExpN<JCDRai{ro$3w&xvGA^+B`p)Y>5;_@3klG2F
z^{8=iF7G>?Xo1}Z9|U)Bom~VcTpUqe#-XxGT(vNOrQQ9Dpb&WjU#%_sX;hg{FJ-2j
z-oWNt{o?=X)*N2S+`A5noxOYhz!aA|J<y$Tq?hm<PFl}NVomX@Ex|Ib{Hk0)@7YJ-
zB;;ZQCY`4)ZM3e{AmV$+fwj$by(1vr6A{X0?c>+!aJ%O2zyU~TBHY4iP&T6|sh>#V
zFM9V-{_Vael+TfA77STLYq}gBZ!we_EdyZlD=@P}1!9X7OP2ra8q!|4i0YPVeio9N
zRec4&y$ES`Bf&slhIZN{n#;;v{`ml^&}-=q6aEcf)IQj)JRb9N?agQ9ufUUT@C<1$
zI;m;)iP46O$PSiO#j(8zGf(ZaM&dg_kcfaYD+tftj9e1j4_O&eCFg238n%9QZdBrj
zUA#I3g!_?gF@41*Q^%Bjt=(V_2}-iui_P0{_G16lA_g5Y7m?hqeF@@%>4TkqG4VxX
zB+9pdLzp~Ro40SpuD-_>h_r~i-@&)=9&E@YGipu<kV`wZ;TRs`gjs<WN#2Ny@3SDj
z1=S+(hJ_!k916V?w6+&gT9}lAx!w`6v|&cX0D`ig_@`3f{t4)&)5QFP1RZ!m#?>Z>
zm&&!K(nVpgE>LC{1Rq`mM&trFUsJnDL=j5!O`wck)BKUVsE!8<1`0)Fmj%`z*fJ}V
z2$v7xNtR(An}%dA_y?9Pg=IsNON+t88Gh5MU}9epXBWShkJ9q)j|T%O&9?w@q&+&n
z14DD#vys)=J7azQ^PO>i9@x~VQ#QXc9BA&!pVFQ{@wH}E2^*8l0C1wZPV?wsxXc7h
zKna%eKGPL8WEw{|4;=;JMyp#=z@0*+aUdAF1iw<a_GmNd^uZXqvdhy!JyY{R=dsdZ
z&eM}%trWmof7vUMnp{zWQuf&1bIr+fo#<d=sFfoN*OYr~3%4c2HK%o7q;+GvLuPd_
zfj&f$O~t<gtt^DS*%N<yTh>Kfeo+^h7t)&ALKVYyAu?j`O|CksqO^m^sU*QWevNv1
z-%vUeC@u=x=$^0%^^kDeW@CcfoW0z5(;^{1<1LNZ>`FOpBo2$w5a7eXG~{DZI2&(r
z{>J-RfPM_w#3PVJ@3gyb&t^M$f=OBNJhEn^H0~fLKPhD~hF4r>5xqpkF{!Lfbk0~6
z@6`Y7NI8A$t2&henn2~yZpJpomiMD?R|+%)*)J^+23z9&;cY`1pmr%Gb*f3t(lzRu
zFsrLKc&4LEOCxLXn_2Zy#!|&6J2f#C9fR`b4F){JAUynI!64C9aE}*hqO1PcWrKL(
zQpq1LGJbb<VGz-ZxK;qQADoQwk}GCb1bJ~55T%tHLTrhjY3&<c?l{{{*aVjc4LE1z
z0}<UD0$lxw$VCY(70w^!B_sIkTM7ma)u8I99v=`MBRym2ihQ#a&w3`&oEV9hX%6LC
zDUk9^J0(h6qL*H#rYC((ihvBDhIfxMs5vAUMDMTMnQp=*X=3y)ygN)(aLjFkQ}qYR
z^z%F9jw=hD#mNr+LcOJv=**mFn9K$U*rPTmZmUV)_50)2P6&+cT7X*A$}tVaV^kjP
z-_3jnghpb6U+**n6mlY;rv=+F#gw9_&($@7PPz`<GKuYufdjQYdeP+t`U2uZzU^tG
zN+vk6i&10Zo4VWNJ#|C!M<JoQ1H2ricc&KT1?-sa4aI7T#KbpjDfXxFL1+apxYY26
zipx(ZGPxd6mPd~w%6n%Zy7}kU?;vMp5~JSr`Or4RyV(*$HT}+8q8G0VUY<f-$BKxm
z<9je%shwI&lFW;Nll%Hr)CtH@;l-d`<6x-|Ff#!R*9z^7O{|=)<tOM8B_z2o$G&Ca
zY8K9BXDLUdo!GA*@5ByGuAB_o1pOYEn(S4O%b4rGDP)!CseA_h=@I1s3Kqj6<U1xP
zLMh|c(c<}fJ2BD}M;ck-@~@sgG~D&9i2g_D6w-eo-OpnE7v*EQVE&W7?2$pZ6rNa!
zDs1Ui`O&5@7`>8Ra{gk$OW_VjwX)$JEPlmS`vw6b!_K!eJ8VhO4c-K2J#QF;p`qA;
z(n+)ocW!HiaEDa#cQLxuJ$dhp9!!xc=#ej92`?^36@o`>r^}|1Iws8F3D1cacBz*9
zs{t60ujN;&*czmwjF=S(h%y)lEu=c!qn<L_JM`jLR6yAUD)U7*t7aMbZ^VltVmVos
z)536FNIyT*83#A6NJYmmN>p5~*}F++K`Y-(0<m8)7BCL%Y#X|FL|NklmFlG=W1kNS
zfi+D@F0c%-iL5D10#q=GxndR-@Z?>idhDa!<ZeHLDF+8LkdPi{`26^xUc;%rL&qnb
zExdo@;wc{5;?{N5E{lO#_#NNKtRd+N#}sIaMV$n_btf0(6wQl1HQ_*Rz7eJ#eZHBQ
z86tOX`(^;ZMV!MaXq97sF#qVGSGf}S7v7g*5AE~)yTcx36|wrdvlTVW6I1(Uy*zQR
zC;VRLOSnxkZn4#^%OCuhS!T|EhoM@g=DYYv=!_oC#bJ|zB{!!*`Nr|DOV$BtRe0l!
zFTQnJEwcgrDOrJ88%c7BSitK7-P$)=a^UIKnWA~3b}esBa%C-=kq`c(LGHHW2Fz5C
zHH=5!*vbcTwL^Z8?q=xfU9%FIs^ijmIVzT<AnbmiU$Ai5v06P#eyOcsEjtY~3(#ht
zBqwlJ!R4D1Rpx<q?bzsL?-s)E6D;oR#BUn3tl>=aIkpUnvQZ;#0ZC=4nYprN8F=gt
z*)S-p4ZX<SHaW6aDv$b>VI~4VT(9#I?b_unIN{#-4(=LEHr@ob`JSetj}!leTDhg(
z(GP68TNnhMMdthA^3h31m*T*buaQ0kt2^%@sEI=$#1xctNiiGXyziA&(R-!wx9#)f
z?9oDw?2Be?Q+}1~@V8#*8g|%T_0eI>J`7AMbaF2c6=#bGqpyK;F;W$FkL6yfxO+EG
z9<FBa<H`G={qdx(KJ5X0-xwJkHr$mTj?^;8_OLc!wOLtXTf<d001qfXH*q!v&XQ?|
zppr3Kr2KL+#iyFXE9o07E`&A|4rFuQ@W`FR{|dPyrndi&O>GAdseakiBC_fH5tP;G
z$e}x>7@`ps7<*Bne%v$B7PL6IIIN4n>oJhK5`vdHNnd*(9=(hTO@499N=nV@Et$A{
z$IQ_u<?x0*+g^zPGN8B14t)|$UBqBt49qG90=_rs>CX&l-96CKoj<y^Gat<PA}}}H
zkex!EIC_fXe}O2-7-2lEvs>cS6OOzl;ESky0L&L?hi(7g+7c9o#a~o1xAt|4icXC1
zZn4rnAXfibM;6*_(Q2xRt{2~dW)l%CA>Yc8=*d|}yQxRC4(PCJJY>bTM^=7F4hx`P
z{-UX+VuE<4d^w<1j0A_BP&tYGxh%-+-Ajn7J=ade1$(8sHZU0_C?5s-q@9f{5F>SW
z=5IajRuMqFxFrF^Ax<zqmbUp=GJ%$f3c=t0$+1p6rA?6y*>|Y;QKIshA6?#|4n;6m
zgTk#_6P#-Dg9p6?)gE#tMz)Ydy5!gr#!ejhM;bqM4HRz$wqfdG8z|D{d>3fvAXWIK
z%EqttLBlbdE;WZXqdL>SRk=QFVo?Gm?0J0YDmi3}uCUtjA<-3$Jj!4RmBB}Htz6&{
z8TCkHOK+C)1KBNC=<?`k#vyWF%wCDk14Y&Xv3>M*6|m4&CDlx2D6c+-fyZl|$l!Cb
ze6toUy3#vz_Qo3;=_HvsG3WUb^c;xwFc`cTW+ay_<(CXz&a*;5M!{DCe1Nd1t%*Vd
zc6>MT21NjZig&u!lJ3hU`0O}+!5gJZHq3F-)O3-h1={{0^e?rsE**)S$29xRo7x=g
z<4sc|z`EG`lYUOGPAup}nCDYN*#2Q;q;VY|dxk=<&xKv!_|-o<=5{4uO{_r^>V^CO
zRC-^Z1ELz?iu9O)g5Ya46$t5(L9|f=o63Uth(v#ZJ76}fMG1)}qvD;`BUHBUzGNjO
zZCFuIOE-&&0rH4skp3{WvaJN>^?XXoK{fMJ<JX90Dz?lTLMgb{<3q_|0k$ZW0xjn0
zfUoq_f8k}4<|!S6!1_o)X_NW<eF$^>Dw%5*NuyVEE~c<U@GZg`RPOOMY!XoBPLG@I
zOXMH4iDzl%@9>FuJ@#_6#vkKs)RW0SpOK(Oy>v3>TRIqY<jQkJoZN`u;_+-nS;8ap
z+}BWX{pIHP<_gY}kexW7Td{f|tX*dZE1}>(@RvF9)vtluXD?w`Qvtix4fS~s)~L*J
z{7?>r_V^rIADlbMWuXUQs6!N`D{`3#*5~|+bW!+>XDg?J+U0R}MGga}UEzs}Y13)s
z>xIzIb2aAh0ux4lXZxY$oYoMYa;Vo8G~Bb2dsD}1HIpHLG!>(>yR5R5_M1q}8-6+j
z81uU66+Mu>wWuSoJ2a1KAvnHd^Ehm1B{xxVkKO$sBlEm0*;dA%MAqd=t)+Qlri@fc
zA1l`xeJo!)>=U!Z>2~glbi4H%-M%QJGC*_D3vGQo$|G`cj(a^4DX+UNHHI(3e@!6Y
zvTz#QLBlo2R{Mpvk#q&MQG235Difc^=X;kUQAn^&eNu(!qUBV{I|CW~oC}PyA(rE4
z8R)C6=7MO<St^DEN4PzZxf&1}^1-d1w~MyPeljL#weenqe<Uh6)>uvaPigE$OI>jU
zwcD@6&e+K_iv;DfrEmP+o+L_PJad0zw@@N0!=s%#AJN!7@A|1rtX_YHh+gI<x>2i%
zcdP)~N@t3p-MT+7drw|ib){I~UY^L7AZT*o7m^psc+*j_heU+|_d!K?9c4qrt((I=
zUPa)cD&*@;yjl~_SpmtZJAxs&XQqs7NHw90R8s0=LV4S$0S*@RgqWutZ;Yc42wMmt
zjj12(lR_JhUwU;QWSir;xAp1#CrOPieiDc@s<^okg&?yz#?e*~bMO4}RJP;g*+Z?`
zA5R0ESM5Uv7TB*;tK8FhU{fG>3)iH`Ii=jCa6Eo%EV`$9vI(`8{{?AdowAfzdY~l%
zw;tdOc89m87@YIqN({deBZHD3vFc0a9&K{8r<BOodhe9~@9dq1vv&@Ew0AxLm!7`+
zSFHT~-r148GxqEqTI)=ZI+v~yHRbG`6Fpgzy|cr;Q~DeBPRjQVHpen$kbs}0b)({~
z1KpTBI(u*do9o$fA)>43id1RnVm*Mi&h!oSO$b=!k7w$If|A3``DJMI0J8SVk^NI@
z@=uktj)-XW0c4cDZe&(z+u}e6hrgZWdKoF56I5~?fz}Bv9LLGX3HfZGUBqA9HZa|<
zVPXQnV?f_Ikli%FqC3;b%=}u~@2nacHI#4I7W2FH^z2rHfJ<o86`Lj(_SF8u_*VOY
zSJ<6(WcZ}xjr|T1jNy0IS9Y%+?YX+r5_s!8{mXiKcco`(?>zlvJ^ew-r)`|4U#zFk
zf9a?5zrK6=>zD5L!F)OurJzKYE2NYcKjpuM2TzrAc2jqYezM!pEq%_eBbUM3O<pp)
zd-<X}v783>=$!4iniAW1?Y=O!U-+t!3Y3RR;7Loern@3kY?yENg|+>{MJ3QB{|fF4
zbNhv2CD4SgCFh0MJx}BeuCKq_U6*tKWvlsACb}eo(Lo)Fcl)_V0w@dhbJOs|gOv)g
zhpX;fIOpccThPuUCHNKnD(I7AQ~u=b`C@uK%qO=$doqP5)kD=WDK2L^$==CE8w93n
zMn6R>{(XcpNM>d(dIz$3)BP*GeY>$P--zGn&0eN4=|yElXVc&|E707Pjy|39s<V@Z
z<k3Zyh?C{%XIE9SL)X=lJM@D-yE*;rXO$c*a|xCKUGyJ3RHoGl&14(0=#@!eET=J(
zGz%zCi!kPHvyvluKz_C|tBrF%(ZO&)q!Jh=eB)|!Quo#1A~2~T#JE;A&xxi_4z2vx
zeM8HgLP*-a2#wPc?<sfGo{W^FY^`XuKhV<BLhM-tng+h8c-vZf+S*6owRK50lKy$?
zX=`+$vF~Je5C*XuUsD@TQxmr-3{INK@@0IrRfufp#V{f+6g)>F|1m4&N#tO!p?1bV
zS9$oQ$qrUzjnL(q3O5Y5SKdgSw^xsBEQjz)uOqrZILQK_*6U7P+NX9zzyUSV*4YkC
zzpkgX2WV~VX^myH#xplz*lka9U{Ad*f84okG?LAwp62eLx%rQKw~aKL?(*6xt;6rm
z0hz?ez#tIT!R2M(ynJyfUw%0K@_KI)x*Q+tA1@MagLOW?NNT;Q^UOW3EyZgeS+8w_
zj4BpsEw^wD*L~fDK1^voKHs+G8|^P^&Ioy8vy$jQWS{B(wyySL51v&a1a;xzxt`b#
z#fU_@#tB@Pq!0pEcuRpc7pK=oF+oVCoiXRPm{fGdvc0Kvc@{7I$))@-2`<IRs>-Nf
z^~38EsQQb88^)bif=qa}wgG?xIU%9AKIfWVA>!<ENt#8WH?0IVQ2Sb6LLUu<5Fm`@
z`?{Z0qC_~{5m3a;0*>!vbIQT%9r^*R^r%cQd^o-LRNk%%zAy93I0*9PT;hHilT|z@
z0s8H;6chN;%x^a&=W1M=GsmfqJ$ap8YrLEI3m%77&G0DmU*^oTr4MZ8wu|TIb)4Dm
zoH-58Xv4={EYrccC5VrMNQ)e~$?bydzZNi%-<-2d=MT8?@be(}vK#ULRd!&;PWhL{
zVP*{;xL_w6MBu0k_EC?&G^3`pc0ow0cYUAsx!S)uP}HGTSq_1w{ZfzbgZY6ZkP}t;
zAao7m@lvop&}s=rXH>4RmsH3%>XkQ9pXgIYv38@(bb>A9Ad|bVm_HtL%IE<Fmgay&
z`>UxXOr>e+BBj9k{w5?T+1I3U1x?mhC1KZyjTxAsc_@i|5JkkzKXGMzd<dLe!CgWM
zmK%mF)`cc<`Ey}=4Y9sl-x}>u6EiVc#f`*D)m-iG30_|B0TIcx#$5B*xoj4YbYC`J
z23E;9t+*iT7=F>Cb0$Y&#ZwERz=+%!BuZX>`b(yi0oQBQdgMFY0XD8mzrW^+AVdF*
z^@cc?+Bi&TU*1C&H-%n0rfZ<V*5v?3-q?;LYcRb;gD2BSn``V3+YYstDB2A*-9l8w
z6Vo2N8|jL%DnX?W!j6*1>H5x>7Zitu=c{v8H;OIC8@t+e!>)9k@_L(OBR*-{%T(<w
zbDn9hL(SulGru}})U6^stGh3pE}sj06+Ef&?{!Wd)vw#id3KH2l-HOw`~likWyl~p
zX<y^uCoZMB*O!%=EX-MMtaxir>Q1Jcn!eY){T#E^Ut7z@hbB6CRNd}|Lo6bmE-m@r
z<c8uXQBy3fn4Y|g0VNtM%YrqqA<pTaa_4Hw4RF$|tHntX8%sHRx>Y1}kf)7R&rJ+?
zT(!>w(f7`kD3X$wQY6wG+krLZYx_BtwKDc&5-eP!aTW8S9C1kv80BwO*AABa;;^I>
z+?=$m3||c@b`AEKYCssy^c~|JIxiP!KDV9vjttvPg;rx$t_ROIbM~S$Ey*&VjC{CP
zAGIb%ri-W|4wiajk7`$y6uj`ykn%C?L3p$+ilOO{Kw!=$CQ=!EC*H2;;()^RAqT5t
zr{^Ch<(Ku)`SB7e9y?mJ?7^|YpZGzTxO~NF#A6r7$1co<V&ou5sxhSyPjyPlig1&3
zg!c%cqMU~2ET*V5Stg^2_Nla-4-uIgx=qgBXbfL#Q~K#Qdm{U$pD#-Sqd&qtP@j%K
z<hfGzroS;^<k8$cykz6(p9@oG(K~|q-Z@jFnZwLrhU=Kpp7eU&Im?;a@weo~d8VhT
zJ~GGqEL8MqDe&s(fT}MA#IdLwo)<|v{la3o-IIg8=z%pIx#SGM;~D7ckhtKX4P@%`
zmAnjnM?U{x8b6z$_+Zh><3W2cldFb-20I+z@U&chAl5FIp~0EA<?@3eXQEB;aUor2
zcCwM_p6l?10DJ_Aa}%vGZW(!{2<|2|EtC@0wv{!ipqyW8)#I#dbRd;bH8Gbn680K_
zFzD6&39fltuoMTrXdPS9J+dka`;$~LQ~93_QY)3mI1gt(R`MssfKWVstK@H$X_3^H
z9$L!v&&`X<1=YiT@a-JQLbBZT(J$*9EXRR;5Ne>7^)odsvg!?mZxSvC;#Ygo3YeXE
zZMI$aHNEJXM@jNL!=5zX4~ZG5w@QQL4fSg=P0${`5`H+NYmZjbk+10q#Zq^G#pHOs
zk>fRaCs&1G^3Dxq{ReT~_$NWdItd$@n=sHDVSq}_N^in>u>JWa<ODHVf&alKtST!v
z;yXXF_)6D9vvM=F*$;0d>oTX0GusTk{;%qFM(pv}iTvG9M>u*UA+c|VH)h&NF&Log
zI@3`xDjQccVhU_|W>fl}WVNN7shM&Fqq+qQpWA>Dax&Xsp3(1&vcJQ-JU-du(T{r^
z<IO&#K1(aR+HhMvQpuD(l((ObBs#Wz0o9t+w@X3p=Te>LkZNW1CvrX1G`!L$Pm3ZI
zW)_7EtqdbLA8oB+cY^P6PE?%IBO%9WO?{j?(nHp~{s$>_`ut!uk<#SR4%Rqy1rXY3
z8bk!Vy$h0aeYl5}YOV@S$gfju7~#9)jGU=j0fc}fmX)Dv(LOd9qaZ$3d^Czm^WRz+
zGc)V}-Q#&=Rh5Q4dwE=4PEB>Gw_72Y=6<~0IE5I0|NN)hZ4+uWVvGiwuJOyt!T9G}
z{k%X8yr1|fLwZ<0kRdqMZYM}QFc{Vy^a$~%OQJXe?8bkk#+KI=uq!j;VYuX8En9gw
z^w{EHH`j@ihJ1i6-nDk91N?Z;Uo=SF^;`q(&IT=0W$lwx<v7!d?ZX6f<Px)n7ByB1
zA*yBPlG>%`P{pWckw|n2^&oqz7jfvV9UeKlGPTY0?U+dK=Ny3c+yJ*~pD+5NGYMpw
zaz_dH6Z)hMj0Aj>kBp~*$Do=LS10#QD?Q~n@SX#Jv{GbM2)jwsfyuDI6o^bbJ$2&1
z6g##>FD6y%##UIVOd9w=Y~U!ka++xBW3?Zf9>8Qsc$F_;6ZI;RjpriJbz8_LW_o|_
z2rPFoh8ZJ{D&!W|w$zK(zqR%stzL|zXyATF6Db`%IO)0C#gS+q`s9V2y(#>oKY7s!
zWmW=Hq+R{MOq!&IRf=Vcby2%M*Pk#MeEp(}4B*b{t8epvl#0~dIwD2Xu?I0_e`2Qp
zrWBqhzF1gI8?~dJ&}vH}HFfep6F@lOKv;zSbPBN@%)7XPl#c4bO%?qr5jB7s-gK!+
z0iD5l;JJkMyski>p7$84Cknc+-8!(dRd!uE@v_2Xg!{N==ULG6SB>V8>rnWN;J)f^
z2FwS6U_%y?TljOpXdsC0c7(U}GR}@RT_A2c4rp0cy|58R@Ypsgh$-M-w5GuLZW*g3
zA5X-<j6N{UieQs@@GVus^4|7{`2E?h<7`UQkXV^WGwf!z>=1@T<wiMlXFXRA99Alc
zZaw6(2)lF07E=gakd~b>Qx?*d90?_w9dsA9BEOicZqI+NgA@yYtZuWK<awu(MOa43
zIAE4*ar5(D3Brxe5Bsz>+$*uzzZBaAB;t>n;Rx~|a!r3w@w?;(T6+p(zWR!YP=<6A
zu8P|aZH)RV_~k`n)H%}0t9cRpyqE;u7%}ri5~s+?w0!caeY?J0?NArv*-Qh<8%4IB
z6)>(r(I%zMR9aSLXq~;cdP2xU405<qH?V(Pb}UiewsubW0>8i=M%n?i9zcIz35(0(
zMxJ&OPHcYb8RNCd%E2nckm9v{17H3!$eYn8+Gj?Bb<ZqRmS@@<mg~En8eX69i9vsI
z!2<h}YuW|9iof5V9FL|87ufL16W}qOj)k^gYZv4K$jPA-t|^Uwd-I~fWUbkluyv)8
z-jg=A`^r`p`5XwGL!apG<ExCj-tq40PF?~Z+S~Y-rv$I|XZCHogZDsWt`}Y?;tv(3
z=3?N~cis&G57#qqXf4jzfHDVcL`xrTOCR2rFx-kGgCj7bM_>^^90gS4SwJQY%RO}#
zSAOaj?n~HX$66OoT4-D8;QWnUh%5u|4q>ycXR~>Ia4n0H`FDQd)qhixnDc~4{zaJ4
z&IGF)z1H2$FDCAIUN~)dOH5OIEs9@gyJh|T9OcCvU4Ao1Xf*1_vgat8dgq9WtkSo0
zw3-k`msOb2&I|+9&sQhsXoI9pWQ)Nkng+vPLU?<Qryb}a5qp!JxC=6oYc_RX81z!c
zjf_i%@^<Boo!+++i@d=PfxCxa#|TBE#v6g4z3D7)f&WXaM+OIyDLy?|M(MO}g(WCd
zWpM4;wK6oZ&5oLoF`YF%i|UK%cq1(vcOE`}`5rtY^DsYnYxK<MJd6*4Ihu9dpc{>9
zpDKfyURbz+(Dd58=qST3)cG%U!a|Dj+|;r14U0UARR;7HIwWe)pe04qSSehV+Qh~a
zJ8Vrn1Rs}PxaM5MbR2YtVwVNBzPbnuZh9m?y(wBEm8~|CR$H#QMqrgg>vA5X-pDv!
zb+f?hi#aR;lP*s40nqg7)C5j!LPErV;ni0=?p^ePeP)!Mj%-gytB75)Mu;pEJ#SE^
zU$)~6eN9ZM@S(;-3B_$J>cq<dY1CTMF{66Ig5May2FeD$9$p+6{Gg9;+!t~h7ofLI
z-k~RZ_Z@WDHXG#BaG_fW)WyWEF*f<Sb>FVwlpS8k>-?1=o8cGp?mOt7Zq`XBNAL<4
z$cg5hD88ayV3OhmA1aeY8wSI7r^#n<h&qiKH8k_VN;Rf6lSAmvVn%DaYh0fy@#cEi
zf*miBtyyXzz9v>@`0kK$)xB>$bJIX8&lr9q@#Atiqqau$rKtAwct4T+aGh$^przA!
zP_lFhh?^K;S_Q+KyrZF2_5tcc)f+8b>N-eW&Ft=Z$*fkw*ZLE;|K_iB_Y0M?ZgzKh
zh(6Xp9K7%Aw2lo{6>6MdF6@ID3k5sgsRII!96vPK?{ZaxWF1|4H{3dyF#-@W#L$b{
z+2)s><NB;_eB(>jLDBhR#uV71gZFA5;BW_l-K}THGV2>oq);OopzY^U(`64QQ;E7+
z({eoxg0k;5iE-2Se^VsPr09=Rp{aLkvuv#dz_AT(sb%PA`NZ+U5pQ{k;DM-*&~3}S
zQzGl@hVEzRMcY%~|19Z@>xiy_+m;y~u+z|HUfmNYM^1g8pJ$cyKn-ob9!tx4S&(P1
z&Ie)PQ{Uf}0)?`SC>F-AKPpjhhz!Q_sJ6JExko(xWdC#5;iyRIF28jhE}6A?Hxnnn
zMd_eJ@SU_i20?c2hND}qN!{KNT5h&lSR+451E?=FM8T3C8&H?XLVKKDoPc}i;M667
zH5BIoafo3VA(a7kc`KynN=^4ipkS^9D{mo|XMqoB91WQ#>j2zNv%t$c7t@Re#4q?O
z7N!5eibYzd>?3>S-HF0QgM0PISl=mQR*dj^a`<THz04>Dx;j4-6J%kRme?j{S+2-5
z#zQ0NG^$xk_jN{b5H6}poe#fk54}c6Av6N+(b$IlUxZe|tu{Z_%uHHj<qJP3hY3V}
zSLp>qya5Fk-^sJCndY>B!fISU<W^0BjJigM^0+k7EAWMhpllH70_`*9#P9mNBU=GK
zH)ZdJ;D9eeYYM)MM85KZ7G9`j^p{xsb^rXi01TcH5@S3HLKlgR1HQLtExsfkR`dyF
z1U+ZG%%r*;1SHlp@DEGE6MD9hEs|Uq=7IWCc)+aTFMdV<2>O1u)1tuZi>Y$eQjk$>
z0IT!}!GBp4brP{~T{<cR-^BTlcU)IKyK)Mfk^&5=X{OGc$8@S$S;bs=Ja&SJ(zpod
zm{xTYIOXlnFr~SRnf6o96EpNH^yhERpD;kSn0iu=_>Rs+s_RW2UC(3%4-Kbk1iX7q
zU!{l*8_oiwtPVeJ#pq|^R~+)QP2hw2#gcLX6MdL})%NW3#-QSWnuH%jGo3Wx0uBxA
z1cPeLhL3#9)*E*$UsI9>`PCq}7F4?$#$Ofi36z>rA#g4RJW+tN<BaJ#Addg5NSVc6
z)!I<hG1x!2D6GVAs;aS(X3B<a{^pD$^i`h#$!}};M=PF`eO=a(`(6SLa1pmRpzfug
zH<$sfIYYs+XBE&!(~qePu@qH{&$7_@C%_OnhrC5Vehyw$AktSy2P@*{!DrmACYi*z
z{PWxJ5^HTN-aNSy&s^_TX5apJt7eZR5*g@|M_Yx#6Wrz}*r^PAuVt$yl7fnSJ&V|*
z)H6ButL&^NLl6pBwql&fTOFv02QwNSW$nTY6IAc$Dqb$&@)EHvy^i~`82(N=_VoC7
z+@=lZs9OG0OF5fnr%CQ$EthxzyNfp)7k_-@s06b|RG+}Bt<<UTD|Tv8=BX)NdG=F-
zKV43w5YT@9f?<R|dze*^g6xHB6>w|hhs>=gM+~zae7jvyTF9HPy(yE|OW~XLKA}hH
zK+UD62rL5rI!Yy#h2*R%8L6n;;H8hn9At2&=V;|8B;jq(CpJ$5#KYcvMY#oTbxRSk
zABZYjy3Kq{0^gX>e&Ow;6k(xq^@I(_Px5gq<3?^5CuD#qxclVlAUX_xEk5A(OZ8%@
zUiJL1J)77%9yTDXQ^TfRg|2;eWtFnjQ1G?Ff#?flg?drC!LfT}`ce7d3)Hvn@CmTP
zq*G>;IUz)!k+Jb3tX%;(3}%D&qz1P#J_B2e(N+)>?x!<p*El7gUAA}>99kydnkejD
z%b>mx<zQKDb|-2^&+qKAPy=Q*Sr&DIt}-dy(%R(O)3?f)Vim<zo*shyGSG#SB+1SC
z*8Hjf9xQIZHGVASfaR@n2sBB>HeCwUU#QwFW^|x+?Tj4rCro)XT@oS-Kow=vCBJXU
zWrxl?=J8#PLp_yeJx}(>Xkrm6=Iy-GO<zT#G4dFE^o=blk9$({J3-$yE;{ti`F28#
zx*c|?Ye(W%mfL6>Y8MXI=(%5|Z-MQP&#2_fUFgR$FUMq8j_@CC+shEclDpHpB&<M*
zXLhg5t+$s&h%7l7`WS4~teDGjsGIX}2z{=si#w8bs_+^g2zINPEi6Ne+GsutENU6A
zw=ASvlf;5nfrXFLI&o;_SJ%AX(I)SRX_I%R|Jwuei|`U_Q+}=%CfYEE%gflU@_&yz
zU-HzPdd(pKW9z^yKy<A=LX|sRt4J6uhs1Oe4vBrexb<y>8i^-S(>$u0!l@|&=p^N#
zW|l<tyZ8ig0RMN3*4KWtrA^Bz3a>;N7PDzqZge&jXL~=+P4&j}7l46$1O^C#@JTEw
zH7mEr1bAVdSm6n~wwiCB9=|MmLsL*mPtMkXacW6QaGB`*7aglt-p*ja#PkUkXF(>_
z*P!V`5#-9*8Fn$v84=Em*7*JRuzV!FN8tHd1j)DS+vuu&pQ^osfauYx5U$rXP$m0&
zGt!{HAAIJ6e&*xEXHqx|yyYtUS>{cuw*2sxNaNxiUyOc4%P+baRHAgo_?}pm6UZNV
zhLhflZRfRthMRRsuBgh&!V7XtE!6>SvuUg2Mk>O>(`H<?wTXR?NamQIhfm~*$b*Dv
z?QV@J=6%>;DdG<ZcqIE<2T*Z-izd7(UclCDM}On*+O6)f)pKk$@3tyh*xZ_&jRo7=
z{`u~W>i~qJ@6#g=19Gsw2BuOGEsa9hFjqzat_=}+YOa~1@jMVnpT!FJVpEvL<LitV
zJW<}7wb6)qLQcGDkIn<o$o29S5#&_n8OV51L2-WlttPB>7liMh%$~#oQszxQdC-Ne
z&e{NfsD^eSsyQXZQd~Yzp7Mbhx~Q*(#BYddD@c|fBKGz9F9*Ld`q7Z0h{pn3EH6{Q
zX1&<vV65^RkN*?W#nnO_xgmLw4of8F-)!b{t8kinb^4;CxoR65I>iVBMdMd+4_rRb
z>WM$4MCUr9?k$pb^&vLZE4(;KW-suE<t(sq`lg;#prFE;<kAWWxX>h-!1aoZ#4_0Z
zzYH1#4vlO>_6X7Uxt0$BW})Esjnoore&>|>GnL0C7At>z@p&T@)0J?=Pp<q)t}JK7
zDOB0)rb)OOIlpUHG!ySe@_(JsrXjV4PYQ<FR#?bQ@Chjcuc4U%2FA1*|F+-<98SwB
zm^|LHSpY7{1@v(l*b&!d&^2NLyoqZAmi}z|+Li$bvgVzqmpPPly!w}^G9(wO;H{kn
z#(LuWx<2e-i(9;4!H$OngtU;g1+98hKbphRW#G-eSd;^&Gh5LatY}7<rGpPFyxx2`
zF%yMrOUp>UvSuRBn$AizPOn7Ux8l<>!TRj173VGtJ&9AHaq8=nb1?jD9~LeH54YLj
z)IL-q=F{DW^PuC5{_6DTq07zN6SJScwz4>rUDoXHS=U+my;yoINTx}H-t`QwNQuji
zn!?=Artom-&CX>5&o<nMzQ}rMa>D1qL~O(R6BALowt~RPdDcW6SmG>1{q#b#vKCwg
z7FX^zd?AsgqAruvRB9Y0i{eIxb=rCO>Tq(N!9?>)BuJ0D_8d^PPgEAT1x}nty4$6b
z<p9e8$>sW6>H$K2-5(SL<nL{GmfrU}GB>7)<Tt-rFtC|n`SE$f1e#UlhXS@H1?-RR
z2H<(9ScN7|%g-9hPj{#D|Gm>!KHajn|H&=uuaBtz;8saAHfoNPW-R=7qyFwj9aMtf
zkb*Uog8t2P>)A{^dfNM$jIT)<|I^!PO&LK!ZAVii<z>=2<nL{M<q%8wpj2E{zYILl
zX3gcjXc7}vu89Gxjgcsq@6uVx;gv{XN@q>m_35o|pa40;@d-c<2Q<-KL2e1ibe|Ej
z&bBDAi^A${w%(XVo@py=eCO#LsGVqYjVWKxbb<b}ib|7J?aUW}hr+uLKwhxlx612!
zY-tfpe`T13Sq(*kKj@=P$Xd8v%uT}aFfd3Axh)3BvtdA<#_S79A|uT%HDl-K*ZCaE
z8K<7&h=fG6-AiiP4g<qTTn!~IFgAdY(OP6AM5J>oh`;vNk#`{H^ifDq>^I4Sn3&hs
zcshf3Ll-S=p+C|c0Rre+OyW;s?kj?9?S3166Xk+<@5|v5zTKDc)0vv11)(Y&<JpMM
zo--i@Ji<=!yB}}Ry>U4pxnTp$%Yt<LXYS(SnG~~$L`Qh|f~3uTh6#hc<>LvXn-^VE
z9oQ!%wUvK(7@RFo_m3P`A;R3E42@kTeqc5YZ|gexK|^;L4GB;x4@~u~kP3}pKoEO3
zbjlv_xcp!JDf(+a@hPZ{(c#pd85A4vx7!?~v$ZEfX8i5g)a_m$tZq${oQR+B|G{r(
zukuIra_u~Fe^Y&Xb$?m}8oKc8IHVBHz&-!eFldmxE@l8PEdtUrQv2{cww{cZ=oa3O
zSSH$`S^KI4o`|oi9wI%mr9be<sv3j8=VTpCNHx1TBu2D(G&VAG?r_v1!bB%X$heF9
zf7FMna+6aIoxUdZ$`1F+i5Q*TTCiqQT>$t96PyJ^;g=57l851H^58LvX>#(#LY4r?
zquo2~cn}TN%pYe9;ASNguB)nT=V*NC{2m3r%IYP$)NmS@JY{SWIi(FUgL$+f&b%Dh
zPGQYf8WAM4pO=%vn~>|WeYmE&CA@>HasGtleghX7eE<f%R%~GVd6~Q-RCw+&7xa%L
zaMV+(GndmW0)*kS*VDO0TPJaF%*s_csu*xM^tk0m-mLb@$WwE!BP-g7nt0D%cVR|H
zG>RdfxgB}`8~R~Htf~RYSoeBUK5r<*TS<Lp`)+cIfJJLSJ3LbR2U7<+1cfJqtcAxw
zW&(^q-%`9p#{dHFT%Q*@(f<#PVZ#2@e5X4ms$6SssNeN5H3yZzWzHisOz31f3;r(|
z@6&_#JWa1oTI;$Uzp>t#RRe=3%9^k-gp|U=pC8NZ<sbWV_H;v>(G6j`pS1_aa>uF-
zG5UXSL(KgfVtn;?x^MU#?Gem={_MyOqEPCcAVd(P*bS&X%;{}Hi|yy|=-C`YvN=Y=
z7vp5#udc~0*`yA-2fd{0YdfJHXvEByQ~L5SKvE)w*~~@11F3<mrd;s1B%7YDzxum`
z-h+E59jAbd-jdi`aZr)_X0pR1wl%1q{apPA;qxqij=qTs;pdP!-65W#C1IygkYY7C
z%}ac{zhWeTl*h=pOTbe(a?$uv8rPDIE(0gQ2{O-{R(ew@II45@aaf+=A>esD%yGNL
zkjdSo$SDK(!f4W>T7bm_hkE111@u)CLt)6sR1U-hnNFs@0?158hCdCxS2I27)SX11
z#8PDa6@3zuH3{twP(p0RQsQ>3XgxXHhlb<mm?DkI;4*MMmq^%2*zP1tn3fF-xHvEb
zJ0t*%)@P!u$5^KpO#^;2n0y&zOXtr#wTxiBbm1~4Q-J0qE-=*@dB)dv6ZR)x0}-i>
zU-C6*_xhu13_=Su{^U3SiXXwVrf2Wq7!Z8&M7s0ElQ;oQzRo=LDK`l;n>7C6*&1Jg
z&8C6LiNX-iQZgC2V+reX$WvD8O2kfnUExmCssT(SORUdSqaRQe0|tD7TX+f_<<B)w
zavtx)G}1h5msgTjf?Nc;{^57f#J9|W9xqnDGKpe)imv6Le{b?@a_*gemaj6uz79@J
za}8(NY4E#=PQ)B{aE|@6y9`gy?vEyRAih$%%J|AAR2$!5Fg&Z9HsV7il>X+f)Zt!j
zc5-0J3hbulQ%cxjQtf|Eh|8w`>6DUOhSTG*UC@j&c(==$GO%z1tZ_4^WMKw2_{CE>
zeFVouvwETLcMf-Ha#r$7S9bO3p&C+Cp;EFt;<j#<{M(CjWHHS(^wl&fk@dM02b=T6
z1R))UfV^pc+`NlEq4SPGrNtXKCzlfSFlnVdw}9=_nW?);=Os|~h{Aw*G^iz|kgWiv
zSUT~vL<)?u{J^L5M^lvgUk&1Z=K*{^m(SuiWqUvKZKC7%kX+0JB#-!1VO^D(qu<U|
z0yCYErz`S&x|s~bg4`ET%2W)tv8gC&qV`^U(e)<#?E;A)YdLN4zcrQ+`s1%BPSPKL
z0G*vY4s$0`Xn8;3;HRs)aF~00`6N533UQ~CF3BSKwv%nu$!S-<o;XKi2QOs5i-j^@
zPU;&)&;TB@Kk@}FDVbc=m9t}F8WkHd`T5%+f8p)Vdl>p>xVW&Xl&TdalM)q_XpnfE
zSc%#St*V;g0Oh(TPxI!Ah2;8x$H&-%v}Oe1xJq0Rk5?Cg>|?ZKg(vw*?OByd?FGJo
zR}`r>CG)PMFgN)@d}`3KD-5w(WoD8kz>kBb8TEk>(h!w3?WMcD?8`2v>ea)mF%0;P
z>)tfIUPO_MpJ0ZUSXH6N%bF145WxB0%jfk8K8n7cEMf}G54>31&aSJ(oS!0u)C)L-
zzLHWMe;Nfp3`OxRUz)JY`tVV0a{TKj5(&kgz{vO+!0{Npk$GoU_47M34n)&|j%)D8
zF@%U#g5JEE{%ox1zPP6Pmp*bW74pzM>%bjodOI%K<fW8mXFuVQ9}vE)mLRZgDq*8x
zkcFUTf8MG^(2{YsQ*9ctgCV1Bw*RzEqo31^Hjk5YuL*>*ld7ZI=e3Y?pK9Cg0`zc4
zN|nmnp}=Y1i3F003u_P{{XEIQNNJqPOA0(UGH_Gi#RF5i6#P-Oqx0zZgKZPIC_9ax
zS4c{sG=pZkr2#}#!j6)b*(P@C1SAZFnL2MrJ@Pj$86OVCj0ltlDVx|DK>(w*>aTm$
z<aEOe<qy_gkd~pF-<nYr%bHn$Hf+A18YNEkg`-sQRuPGK9esy??}1SCj^9YLdXw|N
zJ>m2=c~h?L!yCG>b@Wo<yZPfji`NtL7ye}W+W$MJujQLQdoG$pqvfsr;&WK%QiV_$
z&rSx@erxYG3EtY>yTjk#yZ@Ia|8Lm4Wd6>|&fXpV_TK%+kACyi^xgl~(a$)?s<n4(
z?*irV?#bIM2lwl16O_Cf^+NMsdS=|#A~qFSoF)yyu8OwzLKlgeQtnP2Tgqi{EG`y-
zO@WwM958Qqs=uWk;jetHz2t0^OI4$Ptb5OJnYDoa!SSS-DJBTpL&Ba7rd>D9LNv8F
z_LViRDb_XVXr;_I>nmDn0h)>CBs68ugw4N(RJf^h8T0%YQyJ}eMrJ6n<1lk%<lFp|
zV(;i6_0VYnEb^ML-N?|j<+i+{)iyi>+eZdbbi%zRESxL@$|ec~pcX?$fsjHTG`}Oe
zcoEQ&Sh~fd@{`WN1v9&eCaiFvgeQ3<_XM6(tn;=<fx1)X!L;kp|D6{!2vwiGyL=&V
z9vyXceM4qIV!-0}G=5Pa0pd*+tAaJ0q)K6<hbNG)#|v@OcG@o%G%ZezQ1qD9Joa;W
zF=+X@3g(X{!v|H)cU@n2Zu+2)F-55fjxJAy)U$D5hG1B3OnK}-uL-M<&WSZiGwzUa
z2%=~0-$3v!Z%y7KFg)*6pqmv`;0dXcEZT->L(HX`p8zgLOwj>TO=~~UFC8Hi%r9s6
zS(x~Y5bYs3l@(AXL`_&vusL`!gZZ0)P&OGZ0Rj`9jok{-)jb7?S|qFIjX&5T0As(Q
zTs4+J(_UQisl$zrZ)Q~%QAGnn!fJ$3NP|3LaGoH+B2#n(9)9MS_!jQ739FA2a;rO7
zso0oEUm`UBWsHQxU44NwhclnMCHHk7K8Ee;#GYTiTNFLg@!dAa4G}}}oy_YCna5*q
z=UolqL236$t8~=OP<0{Lwvn;2ODj6_*IqomRl)PX)3H%8P)Gqb739q=dQi+<1WgRf
z)?JJn%1)?VKpDtVf}?>&EU>LBwI@Zr?@6(UY0<qBW<?T3xYBsOI9C<WJ1CkhA_LWG
zV8^Q<aqq0|G`z@am^(C8!vm~YuD|wu!>giJ0g2~m?HQcsc7Z4sWgQT>cJ6h_7VC)V
zZEj~-fSW_&0B+cy;BB~ZQ<c#u9dsd3tH>AUSqG97LyzH7f+t`Q3#i#~cRb}x@mCx_
zWqED^dAvp-%K3;XdfsSR_B^=32QTD<JQlhQv|o5r&ThR(Ti={${nBi`JYudi)0Se?
zfce01VC9)i$Hg1D3cywi&aZ!CIz9vy1$20LqQjr^!4*P8)O1WwOvjG4K0VR;m%nuu
z9R|wduJvJo%2|!^YR5Bmm<R5YB`jTZaTbs#$G^;wIY*c0kyXC=F-FHDs&@R>UEowb
zE{TUf$4q2Zi7S5<IOgtg=|JmyR+gNhsiOtCVwpTdppNh7#O7;{2;oulU>C%l4Rnw{
z8tWuomZh6dEh?FRhVEsGEw=uY?qzG&I9$yFv-a38*JKvzX)!d4O|NkExT^P^lIJO7
zoeb`X9+%3@`xZ}T&`2)=ONue`Mftt)TZ0BsKO*6~!T)wyT2k=xSj3vkz^+>dzUA4{
z&B#3}h)~IUX%JNEs-OTrK)}CO`u^q&7)TrD1Iz)%zMCJsJl+0+5LvFyBv7H|FSG<D
zbEcv5jmY4V=$Q%d*BTJhcHW$y?%nK4*G4@5ZuEt)@3g-@-TvxIUzv*^jD8c%vqpdC
zA3d;Vhq-f7Hz!-8OiyZ*qd`F8BFmW>4B>exSxV*EJ9%+9U=}Ert*)Kkc@(--D0Hz<
z;w&b-Y9^DBj?27n^7#J3eZTzO``k&g&$|=pRnH<&&(a^NXUe8~c33_0UzSBj&8*MQ
z;P*HlwewCfs&er0#-Q4gU)pDT8i!BcT7;PG2)0(;o1u8Vr?{jV&DPenX!n6u9>L2~
z{E{+ED-4}HZi{B6o~bGUU9ib9u)X&gsk=&`BG_!W3_MB2sjSY^M6bm?c#N*_giHHI
zxHJ|sW~9XrXZU83vh8Y~)KQu2nqFC)m0~F{8FU0GU3Ert8>)yluXIdnPjqB|P01I9
zPC8~L`1-(WJ>vA9tLg2P#PojEot!+-<o9ke-zNrFyEFO9DDWpv`RXE-zv!xSJNN7h
zizM~RMKh_!TH+_43RNj)lca)PR4oRM+9Vj#-SpSpgVIAHe#VX3w_g5WQWkK9qz?T2
zcn;h&`@ntPlQYEr^>Lhw_O5PY;ai8ghgGzy5`}fXXdA&BXKkm6&8_Wr(h0m@2}L7e
zXuKSo_kh5N7k&{W(iv8jjH$}#R)(aMcGJ{Xnax|Sji<MsNG{q(!&`$Z|M*UK@_-!s
z3tCng&kB5<5l}>0DTzgUvoeuLeX(t@hw12^y=nBAFvMc*2l=R@_$1lS`(cn>pZA&T
z;3R^@wV0#Ln=zdIg2EZmk7$ZKL}`4H>JBL*|2=%v`@9@kRh%zg2$PT23bznBNC)6t
z>t3`oYqvm!qOThv-YoF~UeGV!JZsNUBvTYW`{t#vfl@qn-G!Cd_v>mPgCm@uX(*r6
zSh8|t{M6_4uMFuIpX{9CULKEpp$+3Lk4W7Jns2*hmlaY+9f6g{-+wt+vZfKx;=iTL
z`KgUoB8J&J9;BEG9c(WHX9uqCO&#KwWiXLKXKQV`B|dgqWvM!q<wvn6acfS342ce`
z2tT!ZA=o|Jec7fY30A46+8$l;m;Up$w%UX`<$ib?SOmbAubNp0G-G5%T?SrdW^O^4
zM7_=3fKh88hdc2i)lT9<YWxIa?wgCE$8->+H$6(gR1geF!^Ea`ZDQmCEyElZ=8`{w
z@%5nnl0KUjY*Im*L_fJbe)3FwlFRkMyPYdMeE0kTEUKpYNvm4bKFr*iN68{L0+PuS
z+~OH2>3)7m5p?U0jvlQkc?}Q_k!U}jIPjC*%yvj@GwD%d091?hj2R$a><(P*aK=y-
z2VgMW`fD=l_@JjWkw%MZT<CF@jBswl0x7_`gd6Cl0+|)@%<c3>mpMMwY23zEp((DV
zTgQ44{K>ht+CBU7dF+RQjfe$ktsZ4K#+q6Sca&T2C=(2xA9X&f1D8|gku2kHJCJ`k
zwKsk+&Gz)2e+562Po9oNCjR6~*WTGkX+Y7P+ZH(h76S4MuSwe+DphHr0^!dnS|;0?
zs2I~0f%j;aR96F)Ops84^r85EqK+iwC1M?(tdg|RHzjE=4sJcSc_sMcJYn?iQ39UJ
zFEU+IB=U*u7>|x0uCB;F=pqc5xk1G8Jx+;g`2fz_wAgg6`chMiLijz_)!@Mu9Tr!C
z38CS|)0Aw4?V5ND=x2_Q(v@se$r>~m1a_$@Ql#|q(X$QnMXR1M<sC;N3_D6a&wxiw
zCc$3`$EQFR&RhOGO0Eyp$97e$<K>r+?)DH^c$$k=rk9?PT05Zc*J;Ky?9Oq+w89IN
z;oltCexO~uO*_2Kh=-h1L07jj50Ir!Rn(@GD*yiX@tm&0H_`29o9wu}kd<q6YFJMT
zl-YvRJKDdgOCb{e63xQABrLm5Rp}?<eqE3enNW5p53XnBP1jth*+U%K#j-aGS~CMI
zvUYLEY*odx?z$#(RFiX|ZKCypnd0@AUdA0*hwYWZY$&bd>rK0xcreGK`Vdw2lCpr6
zmtvDHZFB^To0O0`e{-QCGum5KZvAXVF@(br$hfvH5+PZp*l^A~QX++HK7atvnO&gv
ziV`s)Z(_qP%gNQUAo6)N8(Pg^9`llCg#_ARGM}^G03I!xM7<p%fN0Rnu2+0s2~HGL
zlDN56US$nh#QIJ>?iw+;`Z8?~qd{+^LK0ZbyvfU8xCk^asL~IYwrMsHK1wqsC3=Tl
zS(%v$MFP4Nh1D6Ms$J+2#lxlrs$owv;jlGnZ|9=q)j77*ZfDj3B~Uc&!G6;`W2gg+
z#~#1$h_bl|?ox3N4s;E_NG#~ZvwccBoTf%=)Vy3%R=!NDHlH!u^~kfkjdYnCUul+Q
z)0oT1CGjV==b{=oF@WXVI;ueC-n#lbH+Tvgob2syP{a`}V3-#=l(oy)yG}yN8h!^7
zDa}1AdeF&N0<B34^nEVEinb^_hs*>=PYJf}Fl5%FMx`;vTemvX_f#pI(5(o$)2NDU
zZ_w+AS6XT}^$euO9g!s8(6_8ilZ=4B0a&6i3Nojwd_E(WX&Y4tF-RT(O{5@70P%wG
zg4TBA)c%Bv&Arkz+_B19;`HhWHJAE)<~sSvE~CZ!)ibGA-n2Qv_?xK{or(1Ovze2^
z_>!N=m-O)+)nV507Hyh-g5)@N_<_#W>EJ-f8)=^P9eI;LU<#}WdWAI?BKwsTCY{~!
zUtV7fCpq^m=Ed@;cXaQXycz=Z5zFUY7%;0rV5}uu2Adam#y)WxQ*rw@#TPA;N4I8t
zJ<o8*F%?+h`)q*l4LTOwTyN$HTC)6z*-0sF>LDC48}6KP%}}f73#OHgzVe@Kn4wq3
zSd!=XNGG!DJTOm<p0#{iCj{0(7un94iqRX40{X5-MMOC{AcWdCQiqS@?<ldbB{05=
z9n9KWV%QE^Mf23=4XNtS7x7j%2S4Zwh($jcbCZl2b(@kqX3Ym%nNwOJ&;eWF4?3O;
zs=mWJp``UtWal|_2soRb-!1>eHnfki6ozDzz8h@Z4PqoF0G5^aD(2=3CHnZe*P18k
zAIg$&n<gK((NH(7pJS7c`<2)mk#fSBdfAsG!cs<63D4195yOuZ{A(s`Gf#b#$aR)0
ziv@oDJfNR#lM>KY*9Do_isSZyuo;1oH^qkXDELJ>i5oIF*ezYg7TL_@CAKtd5$sB8
zZ_{{7gu~^HgzHLdpAD7{VLH)wW&Y(*33RH9^|z0PybkP?t34@+Iqx_M8WIIPnCjCb
zae-5R4WIA+@+-&$5fIa#XWSR4#|A=VUGqb~vOdJ)Lf?F-K$ODOSD?)=$ur15xc&-E
zlXGJmyUurEfSweq$(M7PV7i3r#qct4s9~TNm4?}g`5$)zD<-5Ctc>*GGw-U$(1(pZ
z6VpHL#8=akctHz9R_4TtmjO}UiLKp<@gH|$+q5gDVO<Ahj+`l$aOJ3ZEu00!9zkkm
ztL*m~Eh%<pE4v(mr}Ps%gSOC69oP=srKtWgzyI=kpPyV2dTCc=ZOGRz^6nax?cqQD
z-sg)wjmNMBT@CJI_4&!dlYC=;{_!_IPaM%YHI?c#I`^k)-9A|8nD4=oy$27c_u#7#
zML!k^w0LOGFP6%`DV9$3!7CA}WGc?`?m58J4Z9QTKkkHAB9uudKGb&5^iY`QVRvHr
z$DQy>1T7l{*y%#tqQeO>jf;1>6N3XabI_?NSf6Ui@L=YYB*HBuy0?AQYW{9T+#zk{
z`Q8S!N{Ol{q?RW!Ya+!^TLcl_tnLAI@y$aDcmP~`6huY|b$-zwbS@v;F;UKy#=}+I
zhqyEj3nCwPh@MH7iey$E<`^!3h~&~E4PB0`+;GZBMsj6>RX0N;anvr`q-%#XuM5a=
z)V$~$It+L7FPCH_shsKdP{wKjXs`tBxO@HM$=)oPU-8I?cBu4o$+8AIn!<NG`z1T2
z%m^ok1#Jp-JShXtA~yA>s4*nIjhp&oOo|Z{hZanB%%~m4j}?OwGX3S$agtD1<d9A4
zVE;51YJ;nd1@JQF6y4EMAN~i@3regsq?yEH62O{FSq7>!Sgu(1*ZBhf;OmxbYKV4d
z5ue=3@+czk4P%F&L3X7o8!WqEl;`@euyeqgPM}yx2fnBt#{GBN;C|t-{Pk6YK{VhI
z03s68CUFG>>7mzq#pr?LJMqqlY(};RSIG$y!!>v4K*W?vR0o*lh^Q^uQ!ecFFA6A{
zEx|wXT3RsMvGsN3$D~u#<Pb|nRju@w4Ux&1Cx(Hema<$B$US@`Va1&cHCzOTYh`0L
zP1o%_(uvAnfgKvqWK+uP84DH?vBp53w7_$P-Q_XJrr=UW=L<F1=fUuUTI^=LaP&dq
zg@rY<2$I>m>`%W|T)VE){F?Y&FV<waN(XX_Z<?mZY)B00iO41+<jZ{pi4}L8Cq^5K
zXc#JnYi4dg64DDDYuXbdKBwb2tZC+nC2G0z-DXmwSU{%J>BV&FO;tL92?TG;2y+wi
zUAKIVR({R`l>)`eYbUPP{vtg4&_tK)*^|v!ic+qwyLPq`tE3tjt|>wEC?IwC<|F)*
z*buGK;gs1PZOBv>58^wou-PMR*_*4VR^0z}y?ia_rW~`sxFdRQLcQIj+6TU4)!`gb
zN(PM9*<g@njnA@OJ4p-|Elx4o?@l1vf;A&(5JR9z>H~}xCsK(TXTrzE0SG<mwI?ME
zi%SBG?x3fNnE-JSO({(YY`RmNGMf2qRyU<94ulx58XpDztl>7W=`w5WvqzgP6T5Fv
z2y=^jGhqY`_)M?KAx0oLGrD%@K9{HHmcB&ndwTZj;V^0P!=x}s!*d$Ln4D`!F4|R*
zW-(}!AfbgA(m5WcbR#KH3E(OylBV@&nM>R_x(u|Xry-VsO$={wlHo}>=$a`+0Ot=@
zA^=IaVWgVCQA_W*Nkuxm*Q%YVi$z<4WqSNXq}39&eR8L$z^T&(b?p+M!}*mzxAe;L
z=3@Bm5ZG5u)1!z+d6KiTINqwnZdiU~ymLS~IU5BQ?t_w)el4*Bv!J9VN=?mYqSGy*
z4jV3tan{zcLCB<We5;tuQL4`LEFf7gvnzy3Z<@~KKO>f)0GrLooiKPIuA#``ZOBLZ
zcES7>j>+NK%fs0zb0aFyPdNt<KK({h?cn>6Q#od$BHiYLIq}IIURs^ui;<ncGn(EI
z6=}Nl2vq2D%sd9e@`IU>y#q}{6g%W2u<qq6a?P40<3t+aDmb}$<>NvhytuPyx!D?u
zp~UN3LpKJ}?^{&XbjfWVDzM9)!0#QxAXFKVYjZOu<xHBPLpM|z5xGAfFb&eolNX~)
z?_(~LP1z0-m9O;%Tp?XYb2bXh<%u{+&T@q}+jr_h$;Q`*?ia?1;pOLA$YO=y$d6$A
zL6ryBNm&hDq(c+KkFXb3AIv=#Ey`%6pbd)|Q<?#zC@l5FnD7il-X}_UY{QH~Qb_dH
z88_^52*V-CZl=MIL=_WIB@bOg87u+F#B0v$_Aq^B@luwpG*qMNJAup3Xw9nusfNtT
z6k9p1TlR96{~lRjuwMhb22u`Sk8Qd5O0FVvp6%JF4ub6Y5Z`Ex*X-LF(XsE<ipu^T
z@j|UVg#@B4v4#1Ja+Z4q5zzpJP2eg!GW{hcMLM<$DBxd|)sp#{-(I>pp$z>$4`fQI
z2yhZcJ6u~NIz=MA5uo4|dvurZpE@HI)=pLa7^&KY+NT+2hv-5&SB@}sv%Qh~7h&0n
zOJOJ~7J!P<$1i!o+?JNt<k`6impI5BN$xwZgIsossn_rEb%d0)Z56{DB6q-gu15_D
zWa5g%qOf8TMYbapx1O@hd6`H0?CeH?owJb0ve2#k15rNK4|s`n?6i{v3P&g_Wr4KU
z-R)BF;9CHX5>3UL4X~TWwPMo*jA72(g9)>VuwfHu(=*cJT!$W~bt+GNl4$*_V<c6v
zvEb9`@KWCVhFK^&&5U#dNYCMCiKMkc66O|do6chDly>cv@FL=BpL>rS_57)oL&^V<
z_6*WSbvVm7d5X$Ta%l43aPC^?El-*!7pPIT`&u2{^9R=`Hn;2L5Vggvdo99dJ(m_H
z->f}ljpLf<#uPZ%B01#=c=LgfuT4}ZKqR$y>RYNH+%La46OjT;&%j;SnYWy)V$sqq
zRj&}One8h{Ab16mdMYi7<G(skwXZ#$5)fG`ErO^NT!2E?uHM?0xgm_<eJgI*<R=Kr
z3?)*)+#xEzWrN%6B*bya44&(naQ8*nrWOm)H2f;at*)_AD))FCNO)C8{;{Y2I8=Wm
z+yjF1R`@NgJ;pty+iT2xWyIL5evsX;YM2ZId9spxPoXWy?|pz%o;T^FgSB@@EPvH5
zqkK+Ujo2_vD$5G=dJ)p*OvLwfJN$^@H=3l7g#HBXV8}DV)<u|^XKg9lVt+-xu_H#u
zgw{bG1XKEw)>0sBY2$Ji6=W4S5B4fGL^<}6@m~j<hM~SF%b@tRJ6_;FLXT?t3TzXn
zDpZn(MA7zT-BaSPDfcA;OY5HZ3;y?;A|~EazJ6N&L!OQ`(-&;H?mF{Lk;RLx-~>%a
z%ud+9q!W|?k(kjczc%n0!KBntg-?xI$@9?q>PLmd1OVe^;O`Fso!?0KqqMuYo$;d%
zZ^)U<Goffi<_g^Tz_k}cW+XpUha@x!<M%LTf6FVKD#mQGSD_0;jrtu5?(7DQF`-O3
z8zRuL<Zgeg6D?{6>4+;i1Puj2jMT}NT@bEz&&<NGlpZ9I9~G=P^h$uLTC>@Va6Egg
z54$rqBIsd@k-0RYhEB6GBBbX0(P~hB2XQoS`f7+aFV`|&?%97v@;v^tGSud)4J0B~
z_!b=wgzHAkPGaZfP@8~}VBXgo0r;O|0U*eFc_TRqv#?g1g;uR(z)!}O;5!>icVCX4
zu6upBFPM3$l$j&c7$W9$B4?_~HS@{ukZh+E7@w4dBWvj@w|7GDo=xRZHqYOeNLcs^
zh9hUUZtJFxq2zS;E7I=RLuC8}&e_;ZM%of+!3Wls>+Uh#iN9y*CGu^C-Vwc2ptKA~
zoVSIYURDF`Nw2~fpsK8;LPcZx+_>&%JX<3n&<M|oxFWeT&rF-qvAp)=g9#69j-Gr$
zM+ic4q$o*stjXB?O)2Lm>g1{IBnanXiEa^HYy0YWYkK}V+<un!W~w3&j+HyWDnN5b
zr=A7o4n7dIXg8CPhQmG}DL&I4DyFf6rI)1%*y_eGbRrpyLaouX$%)?dH2?|sc9^;L
z*&x;j-5l<os&WINd5zsFg{2wubX+TkuDU;_Ivsq!Q;r>N-=A2dMi`G-X?QY`WHo1Y
zcFyZzL(S1^z5QBt9tls8(e<J0I{dpHF*_Gao2}@At>d!t#E_2U-_(3j<ScNKW*|2@
zqZmE-pU>m}exiKb3x-;o&zYxV3VZ~>RYoLo+KsHV8}ilh8Ge=K0>l5D9sl<Xzj=tV
zK3RzHlqeB}8sTch3}_e=S9>IS7Fm|btxuo|A%GIKlNx^@IU^UOXx0Ui?01Ksj{DVI
zp&Y(6`=skS4#bT%71!jM>gubPC4-E+DPj`0&bapj<~>zFcSAD3OS%L`%;}p6Cs<kB
zS>L4BNrD#0I;uJq5RXqQijl#XIR$4D@e2*Vp|P*>FptKFdXYQ^cX?M6J$t+q`G#v&
z#<lUnJ+!{d5VCYreONzkw6&*;UedB`g&XAHxN(FW{sr&fNepdH?J6O(6k&=rkVB`T
zNvQ2RQGQ(7!>v`r_23ww$CMhzZ`>{}?4&r=*TC}iv_V`V9bJ6NxY$}YM6A)gh-!Hn
z*@orV@tILBq&XweIawYgM}_C;li&wMIK40HL$@|#M*Kni3dUoGz?j~l8W;k>J!J~c
zumr`UNnMLn{gc5uwJfG$3q)xvW*oVQRuzvaslGgqyq$6Vr*~1GYpA0bPH#GNc^*mu
z;p*2OL_r9JI_bhWw~C-Cu4oIxe+j`Uz0gmQV;b4V)GY!!tY>-{t)p9=pS*92v6Hts
zywU6R6+3Y5R27Qe(UkDBNKf82_Jxy!PsIs9WM*zkVuvu?k|(F1ULHA!rnWYTeRaT;
zp2zOnMaA{!m3h_BlT3`87Dsi`<1r+;&;2#Ux^j~Y>zbK>0}DyeM9S$F{$$aeyRd?Y
z-$se85x(eG%6EWgkUlYRgYgHfu#Vj_2U3Q^7koOlt=-RoX)))~v`J^dDFIqy)@*57
z2)-`mF|#v5Y6f?a7rzCL(VD|?^hJ^<4<HVjYWEuc#fXp!A7ZDSU7|<5M=HBrVpG|f
zfgMq%ZJ&JS9;=KQiB@bE%no$djI$bpGe`!8h=0|3j$X&$g+ZKqXR~netmN9(n|;bS
z>2FVL;4EZH!t3UuAL7KJ0Lic*1V_^?^SeC-IBT|L2#7`s7%w%-HV`gth=-H{I}ETZ
zS-v$vXuVz-R~mwfJNXX>Nd0k7(|}2`upR9zw~1%wC=2h=Tew=to~Ir*es&8!?#|Zz
z@a!HbL))h^CAPt2!HggR-#_yYVq%OU&#O&-RA_)SIlXQl3j(ymdl0|T{Csw*os}L`
z@m@Fu0$X)Xq3eU|e~mz1On@|>zmt{wf+XK+vd?kF%ZZIz-!X?loz#CA#Qtfx*B&A@
z<~L>9w`^9c!q#QAy3}`&f!6~h#zMPL<2&4?i<2oOdGhvPY3GyYy=NwcYz3|GZJAXh
ztB`fnN`VdW04Va7ndRtTd`vYBtq#Pb<Rd2Vcv@X<iH{F=nWxnesS(G<Bwf5FAU`@<
zYH5hgnt5rw*je=6mR(vgqckTSz(w;1{r{MduW-EW-`0PB%T%tH$INDRwUR$PquPXo
zx>l1KSjnh!^6e7&hp6@Cj7qB@7Hzqc?(J_Hm!<7br#A<HI?i_k_#pVq(npXzfGUMt
zr;=T(=gmksTUawuut%5J_zh0T^y}LzRWaE>mw2L&#yOju1PxtKEm5Eq{jE(vA5|gi
z*nZUD5J+oNl`>3~JDy0a326{y!iWDrE}!o4&K3p1S~geiHJV&1*k>fBNpQzOW-3b2
z9%}Q+XY$;rUL(6A*8(uq_*n{QaS`yol_(rNRkc_->p$TLP^`mU+Cvq<+LwG!vqPu|
zWUrJ#c(mFUGMSMKohv4!X_ff3FOdp)$o?AY^nWpH*0+Tqm$M`*zrx$m>F@qv(glI6
zIqBDO(mOcm)nl{Vc-sXPchcvV*0vdn9I(<4CSCn1TCsi?Fw2%{g&+IpoAjC4gxUza
zX=RPWw2i~luc`+Rf%TxLn}2Cnw`(7TKtpe&Kj;^+5b&4-kD<XJ?uUB;Z~$RG*Ist=
znpxI!gJ=BmlX(}b{7GrCw6gtmO&uk2wKnXOU{EjD?05hD$t!u!&=uP*N{S+c8JpMU
zmi=&M1sf~oP#XEOh%+_hgdixq_ae}1n)rZlT9!-H4|0hIuRq;5s{Z*VBg2>Gm8>sO
z@%^}jL(?ZAh|Q&0&p<Kpl^;A>U;j9f=UcSua<1L+iJj^3?`0Kd=m0n>)#gJM4`Lgq
zI46T-iz>lCMtZ$NGe;=LtRfT}qDDvShFOcwa{f}9>eYjfcyn<{iuT}WStc75WM?Co
zZAjt8BXEef*7x=V7B|dqGE!=dJ>^^COY-0`phX~`=1Gns?Hv8|@`a{H5fmUkytCah
z8_v9lJ?sFAhXGvSODlKtWnJ}fK$mazkSE>^%mGZ}rNwg2g~T$>a3qeDu}msxVC~&>
zCGwPcvU7&1NXQbfH10Kp2mJY`hmcv(x&7w5kVFR}_5Wk<O`99%kuBjLq>j+OMSl`N
zik4-SEURQ&_06mHeb=vlg-j4gER<dKRQJ8}&P>Ggeaa$15Cjs5%#-Jc$5`Y3t%tP`
z^%j0Bi_oY<UvvmUn15*u@^=t8?KQrB=J;<tGj|Up3@_8yuOGS%>;P^j4qj9Y-K#Se
zy|l_Vc9=NT_MgaQG3kz~9d9=>(-0?mBNB<&Y)pF$(h_T8%SYiiX{1%2w#rCqI3i;;
zrLmsbmfM;}P@T9(m5bKYF;*wMqc<E~wf5_8S^Fkh`_Tw}QDjJQ*pN|(^t%QfV7xKl
zhu^JkXpIHnzEeGCso3aHjE(v-0GXzZUiIB8GY{ZV)RNP({LXp==ml+J1*V+(TVS%%
z-B>4>WlO5T?gK(#66lhIpZZAMF#<J-aAU<14^pa+R#EYMY?iK2JTc_~AZ3;?Hme2K
z5>Pr+g&&coKlIdpRr(-dRa(3if!KR?O;YE!Zo^6cWW`j~N<{{}h&&j%^5-SyGKcda
zAHhJh=VLd$Vu<2x*$HxAy+JwNa)~0<5Cs&UY6cfi+Z5jH*Ni|xEX}E8{N4<QQs`(9
zczH(y%S*~Fd-82S=OBwKtCv!PM3O!~U^t2;tQ8T@O=?RJq)W1Eg|SSp@pJDUh<G7*
zpqGK{n}+N-qgCK22};Tb5jA90%;64C)FKYED{2wAR@QwnP#;d=T#0{cjnw3~MlfBj
zqzayu->;!J{9cR`7K4W-cjxa<>mpHYSl*)rD~RdMe@)7!YGLB{+dn!$oXi2_{x09{
z-VDjUCvr;TtF&|oLLiFNIIaRSe}WMH#vR#F#WWH}sO`=<OsqQo*jClfo(uvb*~=dZ
zDEZ41jo@{u9Pk`BcRMkGPILxA;ttn@GP*`Ae?bxnPYuk^ogMkxh9aV0mf3gC1xcBt
zy*(Dw8*(&&U>~GUhO}GVe+{rmA@${C10}HSjbZZneP+lV89T7pFZ$r86SB*OUfB~`
z=S(Z3CD1gm!aq^<!>$wYmjWBxOl|oq!DW$&vFVM6i9&tOwUOQWA}cA-Zh$~vn6>fZ
zbDmMSy?bJ|_9X(r$1zV-lOi=HSXeD0_I@g8KtoKqF4pfXmI$kPnlHFbag9LDMnau#
zn8ick46{Z3=`Xv4aXGXkbjAb@3Z^X;N5FhL`M3@`PA~bMXAD#dcuaPR{D~#(6xs_J
z<na`qf}QY1S6+H^7ef*f5Lsl=*%Xkj^!Hcp)PknDfZ7r$=$^!<)&}rV_axxFReaP#
zpFc5sr|Q6IL;P`vY0-~e+_w7x>9_A?WXH1$ZWWCG3rwr*(Mxd}$J7WQ<^#(o4frWl
zFfhx4O>J9VBRFU(%)sCO{clklR_#l)+(M$+$Zpw)Uj?Nl8%m(ECZ#=VvD_#cY02_b
zlTIXh7vi6Ni~Ky4xqIR4uGoI+Wbd~F8r#DfK=BG2Rsa4)ZOqGN8oMDRb}G0&H8bT8
z!)7*PuS*>Rnz9#NQU|20R%8P?re-)%)fHH!M{%)qT$I&a7MPByuJ84K%XqE0aCNVZ
z$E-lHZ{m|4=Uo4Mm~$FJjl>ab9zO!&Km}%AP>asAfm6&Hf4TK_N$)hD3}_h7lP%Gb
zIWrOMbq9XGU<8|3W@cTgEbw1Hk~O?S8Qb-vIid4}(BX0%8-P*HMvju(fuye=jXJV$
z7*r#NF(#EJK|?#NELJZYwP34w*{WJbeNw!<oh&fODXK;q^1K+hioxmd?`FIR)Jxlx
z-=SUYcH{;N%eZ2V;_|;Yih_YZ5X_a|7?D!Kh)n-{L|QdXB62t)ro6a!3J*m$C2(St
zLzPl0AG5;o8!J%`Fu+F1-54=<?Ud3A)J{|7RiEL?`vm?}DH4X%@Dvb$ngzoC+&DGs
zmt$F#MY0+(a$SqiEM)%F0wZqgl>_tC#D{xUJunYvT2tPl8F!k%Fr~aLaoZPYqRL)p
zGdVR8w)2hjK1jf+gVjeeH-!Q**xe8K#`_gd6nrNIpQ4{Y71(~V18{;#)e2=ljVIiy
z#F|aaN-QzvQ$xNM6%}m=ZT7%C`Xfh+m_%0j@8hh=Fstth)31c|?#Z0XQt`LkA)hRP
z&1UrE8KOoEu|O}bh)Ib%tsF+#xgnCYCOoQTiz(Go(-X^FEb!rxo4QZ(!!K@#S;}e2
zcaC^63#2Wxl7+`Fu0sNrL&xHRYOa*<wLZF;Jrf+TRhD`sP`WI#8Hf{7WCgg9(f{6v
zjlO`UdV;DGB+rSNDlJtd<(9YtgB_zeNtH&osw%62b%+dPOy}~4k1=xehGiA!Qlg(`
zDlu01@R70TVmk3d>d4JfVdVO*+a>4^+As`v%wCVSVVLb~Nwx4+uh{Jx-(RXZIeQgk
zsaI%PY6eu^aJS}JCNB{|7ymVrAM#0^qzB~|2qb}jb*R>-y5y(RMnh4!jc>_D0dr?M
zw>Z;|Y_u@QdZZ8|Qxj59&qWCbGFW^ig^3(7ANtRx9$DYoLK#Q9S6Oeb)-$~$G>TVy
zHUECEqFVWcN7{w6b&Eh(EQ9K(6OT9CqHL{M{Du{TShr_^tx91k0#RCUG{&E<GjaX2
zS~$eF0-&$kw*?52_?f}W{7{Q?Z1XY~7kahuhkq5I-mkD=Zsp#L>q>la(%go4j2Q*e
z^euwI3=b|<M})mPW906OiQ?JNOitZse#vF%)-$YH+7DVI;Y@DHrH-8vOeXx6BHwJH
z=2R|dTqlse3L~;eVwO(P!);HN+y?mPpXmuO_d<l&j1%43rqvs2NeRAwBgDZQmPpbF
z;f;GT5=14VM0nn-Z+c`ZpYXW_*Lr9Zp}g3_8Xc&10h8IGbeHck5n-2stlmwE#3MQi
z^G9;??9t$aAPi)W=FLi*O>fteq<g22hQMUFBqc`02f`0A<AkD+hHoB;aPOGw63azo
zphHbiWc<E}B5nDyL>Ov){GMcR@V(|{Su!K1Yi{9J8;-c}Y|T~JjS#Oc56p`w!Z`B1
zSp}qFU1JJ7A5iLA<1#8IU!D@Y?f8eWeRpE-3D5OAqJwNUNSOz3V!dkchjPqrF-;ym
zdDLB;KH66rZ^ORx&V!@e6HrTq+bvRH{@_fmbq*q3ih|=@rekrC&Q7}&rZqWp<h63U
zN{QW%grX}li;Br;o~GOqemmbtyKb$LC24!yBR3gM)4|HUk{SWyDq2dwEeoqlpUFk}
ziy@Z5Z*gJv$sV9Q{gn5*$@INVy6>!zO{~;_DP@wnuPz+P79!SCCS`{uD1m9G&DwNr
z9V=@~cHNRzERu@mZJCi3ORL7BEz1;{Chh84wCdIA6(UDuMAjev7AvD0F@_ZlS|@e}
zntQe#xpb2z^T5pIl6m*B@TaHTbu;TWCIz}KP79@7yhAORx89eh7r)hDN;Nq1H5g89
z?ZJ`Fl_RO!O_uCiTNK(>5Zvl2yIMlroR%4s-V9+-HC0s(B~93qFsbsQ5-H*6h@`k^
zMZ#f@V3OK;dkGg=J-<A&L{N|EIbL9p9DX}Buxo}edOBuKdP;^ALgeenq|JUcgeby&
zOlsA4MZY6F(=D?!^@+T&L9&8FP2zJsqkHatqqgQu7B#I`w51k*x3b39uD32|{dEP6
zM@Vk6=4LW}YxmXg6~3&PnUgB_8M{(1bM$t1gk)Avs=u%DJ9iSG7E-mQf<g#y@qHl?
zQ#t-5!Er|kFf?94Ym^m89%i)RCJ5LOzF5C|*6WWr_r&iu?*`C{0FS`bXs2&O3XXC+
zMkIuEyTia%Isqr>-7V*d$c9~{!|;?i3|A!$GWQy@40!cfD8G#JUhp<UDg>yf^jOCU
z3;~d@JCMF3OYt&2?q+~M>MC|>lg!9`!t|?Gl<`tto1lt9yV$qW)q%ryV}6C{Bi&dc
zkA_L4f{WDk*qq3RU!w(9{H`q@1nLuKS6@^pXo0g_EW)mJYqvR%EJt9H%7SwA3!P*~
zZgDqna!5lhI(KDII;uuG{pdYqQm~ok0-mgyw~CGGMPQAh+SukD@Dg!r>kKxO?SE$P
zxZ|UBY?0up!;yJ=c?|VYcu$VPu%<iHM+2`D#`|PvP)|gy2~QZGc{(zZNH}iL0+ZEl
zc75?ncjfpNzn&4LuM*XU<HD9o9sMMyBNzl~@x!w1!_@TUyBs6Nf1hJ!DlW?$7JhYd
zI2gAcbIkmbMMpj|%f3Eu5=C@<P`wN%2;!OO*s!I`+Iudckq8x74reFMM8!uHZ7+3V
ztuOkHE4L-Iw?dP}yzPN{=Xv@Dla0rTOC@{Skm4d}Ucp<#x`8ML5JOj`?kxi+A{c=+
zb$(s(Gs!thr%7D7IZ^k=Y{AIf((zAUgnw$~6Ho<*2x^c5ul$C8X&$W5X<-9#zyXs5
z{@>x36NeXGnqY-nQ&54@2xl0xJaeKEQOrOOb%lAJ7c%jIM#Fc{3lh03{dDW`zaa-%
z%CLmtseWU4wDnAFDA!n8&ZvPUBqO<nYF`>!EcJ&-;hc7(EP0tsE*>bsXj)mw!3$ws
z7(XCcZOq-Y4Mq<-b%nnY%!UbYMg<|f!E^!RrQji)!4sB5X1@|G=Gf@H>)%r+T2yp-
z;;V?yG{M=mF$Ig~_&qP)#JKCvU*=?)+VRM2G@|CY<MU@SC?cUJ8H!2@{doE1qY~-W
znO`{Y6>;B`Yj!+&Xp2#UF)v<e7#pg7LS%oS1Xu@HwJlXueaND$ad`(~O2dx#YD`pO
zjRX`^<^zOx&x{Vi_Z;2Cr*@4Q4)kdNeO6K2xW$@>4?@Ta8Tpnha9%<s@q$@9be**I
zCT|)sv$3B1J0P?=663E0UwtLVvBwl*s$uesrlx#gj+l|Ggl{OcYhSJR(wcttSZAwH
zC(FIBrpO{Bm9*m9ijAr~q?NRNwS@oKyijSK8C19Q1>OLZrz#a!D0;gk@e`>AojP$>
zfF`UG{l_V^{4yLF7(0||WCR5{IVw0_;5>RbVh%R1SDKn=M~dT;j33R)$(E;$bdG)9
z7<)ShlvPVwMNm0$0x^0Kp#%}92<n8{!C1a-ap;un&hvoqKPeeJ^bBW#h5@w-ajMth
zmV=Ylold8pGStk0!3pN5Jt2tDA|IDrWXc@BDw$`FYE+|TTzD<k%o26UyQ3kqQPq>C
zzX)^9MHlGlM8`@OQelZ`)rykM1xdw#O{w8qw!{mPngjUlM;?L9O-q8j79WrJ>-gR^
z6-uz+)lqvEHy?hG(-S3lle+|dAreiU2R8U($zXcGLtBR-v-gk#`f6|E8NWtWmS?`w
z!qQ6mJ6dCl6i<ofTSV7kii+1dzUAm<PVh7L_0+*lc{}G{%$O<jDr1XIo@TO><q0#m
zMnc8P31h0sQ?_h0a|6rM1+zoiV(>?td{3ErC(J5ZACXTm7c4k8y%mqZoUmkm$iV(P
zZr)~NAeS*B46<=+15&2-ycXP)4=||W%Q6M6538*NmhOAgsgoG20zH^-A+groHjGQd
zG}|;_F{j$z0s)e*5TbPr6siLxPn(7ZkXuS~eRn)+WM^`sn_(G|sZ=5&3VlPNs|Xy~
zjl!c{(bko}<lJB2L*^e9aRbieEjJT7R9ODZ{RO>P9e{-?D;%cE4}0?5lSc=J;(6N_
z&RKF@MT^V}Wu~)rV?6bCCqrfzV8Hv#yZ&Mh0f^RM3z7q9`(@Skp)Cg<!r8i_r*4rH
zSxPD8vZ{MmlezaHH^(r(_7v$~yGaBIOA^&Q-XI}h!{&9Y+|wA_y(u_qYfkgc9r2;M
zV0lHL0<jZD9%z4S^0)I{lf1+$F-EALD;}}Bp?wLiYBb{JP+?jlD0UuRO^KgyIrW!t
ziwR2=O?T#mt*(5ErZ2)3^qOH4W+jB}M3f?@Yon<)CPl@BG_|3wD2@p=8wvMDUh5RI
z=c(^q2Ky218ZN7#a2fBdu#f0&4!cW3-XVUN=Kf4zu$VI0f$QDg+&FM(I*I6QJG6@X
zhAr&ZhcZ#{#aqOfo(LcZUnlhIC&SdaC9)E9gjBFmX+v3+w32UmPgx6dKky(<7^ukx
zPN--tLTVBIQ(Y>cM0&BQ?=QfAi$7WL%o^d86!UUU3~4Fz4MRErilRRpg%_oPb!ot6
zbcp-!=E(%XjC`X}ME!oic?6~(U@&m^B?C82>xU}f1bOfq+r0qH)-G`Rw^|V$@-2o~
zI-9vsTj!=Ps%*XDPFt_KrDMa9Z}bdK?$*T0G>efFOe;iYoHxz#ZbO?D!RHXf#ert6
z_;Ad;lQ@*3==l9*lO@W429t^*^i}*q>M&q`3^W;8v7Io#igJE=?q39UzU(DVUC<-W
z207Gml}%V#o^dJz5=q1$@p9#>qYy2nb+nY{+W%TXuAMYHz$4qV@h$oX<+`lHLxfr_
z%yvEm>&=J4Fv3x&%!DQ%{4w+5RMBe0D$l=YIHJ6FeQ``C3=3mIs)y1LvCAApOS;@1
z;o=LCO_4{7(0iat2QCv&JQvjL$}Bj=Nowc3m}p*#{B(wh$H)2Pgy~id&(n<4%aVIl
z-?ewOkbo)!?IA1T8dTW9<RU@Ws-ZRJ5L`7K%M%evWI+CjqT;BA4{onmD!&CYGa|eu
zfpv--5RSzmgf-q4=D?{hmkK=`jLU#TTwU{|Q}V)oa?B!;RIyF1Ip&I&pytK@9Un;o
z#;wYxc!#xBF(KfcrH}wCRH^zj{6?BF6r|R+YQeLe@z7w67P@r`XyJiZh*`YeP+><4
zdfbxGW3JHWxOf{@<RS@xECT5fk(L;7Bbx{xJ#Ap&@NWotv#Jc|Hqtn^<BEjAO{kMp
zk}o@XbT5;jMf&X<6l9j=M4ThC4K?PZJgAL%i%gj}czZ?Bf6Ovlk*lSd28hh1hg=3r
zZ_HwY&`lpk=n_tD<<f@$Gfj>jfQHiaSC_<}pVKM7aSUZdu`1OcChawu2l^`XBlZVI
zePNH6ZL%!BTn{IF+e;Q7k8sJr{x`W(X5Bgf@<RB9(}%GF%}vwMeG@dpFYybF*d5sA
zX`X<1)(_MzF~{{7){J=|YD`vj*r-=b=KY)g5=l|-O>Y%}&^3aanhQ%#i5F-QOW{Tt
zz{cr4k>pPkhynLRjeK>zJjYCvaW8iiu$7~TtjvsDR~$3aXFV!_iY0KJ(wI~im&eT8
z$H+l~?eMmbIIR{<**xChDk?7d7Oy+`UG|c;K<yiI&1$8G&bvQNnO*wq$?7jATx<It
z*WAm?5K#p2A!`*^e_XXG4fl{8?rq4zW=<w%x^Kp7V(7Dcy_Ppp6Rm9?%H^KWmQlF5
zFU~@7t2MLG?%i@5W`TbFd0-n#n+i_Lx(=}nuXF1u;T2&6^C^c+tl^6eZ-$fbS<S4N
z($7nC9};eL;@-X5<W}7=1QV#4_P!j)xE!4*Y7$86greD;05t%*Mu>S7oHyJDwubCf
zQY<;^i6uKeXJ-A)O*ZmgmSxs3ERqli)7|eN5HdUNY<hDDv^16;MGx))>hZ~jTTZy{
zHlc`H1w?KaNRIG1`?(9QDeQEHf;bP{aY#<;i}!BObKoA~s0L-=AU(hA;nJfKW@(Qx
z$j)fvBM%7Eb!+aIbji7~iJMpDx$OpZK`Db`!sRy|po6v3b9-$A!q4P$eRvE+nHdA_
zacz0baBQpz^x_HK4#tTOMD=|QiTL)Qs}p`w|8*?G{zQUIZT8g^Ose+w!N71g#coCz
z9dSDZ=vSv^fz^UkDmK^T9Jz|a6-&%iw{uU|WKCp=jhW`bVHeGBKx<H~r9BSMQ9T%j
zo2;d{X3r3rGk?cF$o-M#y!TI*QT+nZwtGq_4>9WIPbryq&@*q%zn5RC;#VGJ4a))k
z{7*tBg{Yf51?aih&2&x-5RdjvJCZS@JXK9Xp1^InR)}1-E$RS~G#)U^4J)Z~Z*i8L
zqS$iFBxZ=C#;wVL+jInBy2wntQ&h3AKH9uR?*6Sd@haKG2S4EJ1iEP3X9sQ9ewgL9
zYi|@_!JktZJZq;j+~cCJ?R0N0W7xwM<ah$7G)X?1GDU^DNkj;>Wh5mq0x7(vf!G(9
zxP_FrMxB}fI2X?e_^Hy4`I9T*vf-r1B4JC<GfxzfoPwMBww8z-U2G44yE=ug9!+km
zPKyh}abFWNAl$Zp<>JV`IPzZn;{W`|KvVChD$K6dev{sLj}+?rj>(lD$;aeL>rYR_
z%g|?j_E7iR87^6JcAfO>S-0t+ilMf?=jA~UrRkZzdk?f$Ha$;4r9=F&Eb~UEhA#@=
zJU0?W*IXR#m>Atn&s!b}JACJwyO}1Wy0U1@rkYX9HnRYG)XOeNN=OP#ow){70g0l*
z^=92w+85C~*o%qLYh>qy=mWc+nX94#|8+Ww`i}e@rj1#x$q8sq$~w_v9pnit7pQt8
zYbi|mwP>W1EhKd3>m#%Byf}KTO~b^SEcv$KWIe>@rjkqf4YwJm-@RPl+Skioq3SZC
zn(f-)$<@|4t}Xe&rFVs!ht`b_JN+j@Vbi*=bkmMOt@wW=1|_0Tk)4whzwR3Z=|Lh<
z+Sc6L;ihPE=Z}XkBYR#87nyq!1NgGl@PFC6F0x#|>=HNbD5r{B31f6s)^*p2I5TXB
zFg@O?4T}=Rn8kocZFrIcNCRpw26L9K@W}F;!4*CZtm3WR22(!84Yv!Gn&#S})kK}I
z($L$Rq!1v9y8kdLMK6xU4`-phQvQ7?8EO9UV*EFf+IkGYwB?NKaKStW8?boBaxMqH
zeSG*MA&+{#BMKh3-gsJgWCy%`k}>XgYxik^zwr(WIBfdgK?Acm5hg>fYr-q+%^39l
zJFbu!rjkgR?z!%i2DoK{Te~1^ci<*E7=S+=EI72ZJ?!={D_V(AgXPBYmaV0WNY$=D
zt*csA%e1`M?9-Pn|2*wuthSbfULGx^FGbo)H`WaAP3;;)WIH6~pKyC%*V*0L6?7*9
zyhOn9sNj<WJAfs8L^nF})>X=P6dot>E=bX(3ED0j383FA@mwRq#d2jPC+3Rjg^zZ@
zV|<n7Q?vbPw<d1Sug_azx<|~cs($+$>t^aXLNu|rm8LgwJDsvbmBZ#7^Ii>d1`pwY
zEdIF4awC!?!jju8*F&?(5_I!AOTrN7k1r0)UNdnqQn<w5^p3m@#Pcj60@<j>h;eUR
zboEmoUnn9t36?Mzd6Kme(K&(l{BjHkKd|vCW%eI>71KFLt=P4Kb>b;EYw0W_s%v=B
zj@7kpfFvq%NIZ3o>{922;t+=BY+I1?k1x&ISmW{54_@qu;|O398wrrax`RlJ@z|bR
ztAgFRuAhb_Dp-{;W<$d3wQhJ|iAOuwylBvDD#r5x@MQ_I<4J70@`!M)7tD{fp%}hb
z5*O;kRDXj(vb2W8&h&xxJ*5NOWnXPS&ktD~rB2`kICIN;9BjFr7xLM^@w4Nb{0#$`
z^~O*zv@!C}+`{D@#b6XnT!Fy<sPo8ph2KJg)m=z6%pq<B4jTsaSV|w7hQJOS?y_8y
z&`r1e%B=fh@vl;J@z2=RbMoZbDF+ig8V34jENKQp9fxk&<v>KMp5S^KCi%;=<I?k*
z;nIU!1H|tVn~Am}b;YF@sq3yQ4z|oQt9Ea~V@xfnbDwYg{LP_}PSCqU)*jl`w~q$-
z;JSZ+bFQWQiHFLGxx!Z20xT|3-I(Odi|{W@{b~|?b9`s}onqT1CVBFc^yOk0A4X?}
zA_(OIOJrgOnkDgI{O<qYz=C+mFAgl){IqMCo)gbKx5)S-JPs%-TU2-_-?FUU@Q&<O
z+D;6(P1UHPjOa$};_0S?{~0zv6UN{3FFozjgyuIjQJCL&suW4ac8L_M-O(|2H*^_&
zc1d`_=3}p-g<Q+P>J;Kj7?6b_k(!Wn<>nG8y_0;;5$j-5llaRFm~R@4DYihpsT#Ov
zJ#Oh2Ic^H@`GNS#J|zrNqp=CB@~vUukN>1WvF*hijA0<FdcUq4)0BqgId|NFZpNv1
zqctl{b9FRSily*wm+7Yac1csWdgpS9heI1xm};0y^k>bqwRgp)i3?VMd(dIZ`F@Q@
z{9&Ll#jbE1f1NTDRb-gsAxl{fO&A}yLBw7E>T5bm`ca&{Uw0GCGH>T*VP^x#QLhyO
z$SR8|)`quRMghI}?SAzJL?!9I#Y(~-Tb@3}BlTPeJ-@~~*N~v9V6z+FQgJ4vSibqf
z(^KYLF42b9yAvn;!i}vaZ`!sh&1R7OTY+pZwxGlm;T#S3T^yDl&PI)2=JMAtB967(
z-<&)wEM-zMwON=Me=G>~IHHrl_R*s0%3{Qs6H`1I$F`Vi+)rOjt5W_uRz)!hQ-oSz
zR$%@jVm^BR>!JrwRe;m{t3c}T#=|zyxj3nELlOT2L)R<>wrl~qNm1-$76X!*DFmiJ
zi`;QCS^Z-1NQH#dY!Sz*$|_>4hPkw|*zB|9T)18R>C0Yr7vC#t+3lH4&?`JxH9h9X
zczRGugW-$mEo3RD?2;q^hD$IZEy6@#9@DQ}O%PeCJEflN%}DiT!pfHKXe^B1e%z8<
zg{g~e3>XwuS?YV80`2=O=Jea)kqDqfE4mw2@C!?LQ%i-IjQO(t3t!#J73{ITr_xMt
za4#o#0*IUgaqZKodBvLyi)0lqP!ze7y+O2`fzQ~osaus67?@85d&A!JzMi0I2eG#2
z$*hPbZ(Z)FY66hJ9Ak>5RWkcQU*PyeDoae3Q{DDuR(0bja<OPDZftYN)@22qEml7D
z2D&8pmH?R~J*X7i#G**SB@-A~Ix)%4O*`(@6-LMkZ=dprK}frHh|X&-ecDRX*26xz
ziI1D1AYqlYa&GPYKG2WfA>~hVxcv`3-VMKO10C2&%_xIktQ2)zadXq7`UP#@LM+V*
zquCN=?JOtyjK-(!C=Qv+FisZaldBL1bybd~KkS*t?M+8uFudM5j6AAOGTQRQGODyp
z<0ceLa~lGYj_ecjWh8z|0?l##3%PIWc-_o;L+iVS?~DB1{B|GW5Pw42(Df9(=eS9b
z`#@Gdjq!arj^NzJ)UJPMkgMW2^#kxjhdJ@E;BHojDhw=-#1_q#+*1^_rR70y1}isz
zw2X6M%)F>$71}3^u9C;KBVH;@matmd8^C5jLV!iWqM02tPZL(Q>?C7$o}?OO%cmn9
znL?9*j;2TW(};gff9@kapJkYtCr$`Q!Vw0h&6{?vifLxz4%Xf?Lhgms?@l$TO{1K4
zG@VRRbIUa<AVJKFj#=6n#LzCiw5gnRx#5BT4iEAwbW8iXaY=!_>E}aBK|o!<_QKjT
zp<OYH;OaajKP2<#M9K-!=SIgX@WxJRgqZ?F?2sR}VX1TRVxAN8ltDFFJ=STKd2<fP
z`8T8XOihL}D!4)`NgBxl0l<$ZLUL5s1^n{y)++3J3P_OoQPXpPn+0zarC*G|e+a1n
zE?1sp;jFya9&NY{G_vvhY|qMHDff<b@*RShfk3l1TraobiTN%1+K!s9+TQx<@`?cd
zR7Hqd@Z%gZ9TxK3kxr8z``QO0-hE(A*wK_F6=HaDqiMQ!!0)IsIz5Td2O&6xsw<=p
z60em#`4>axL>+9b@xy^Q{$I2lI&r1<Y|88sh4Pgb>4TL8QX=!oL}X7>;xG2<q@myW
z{6@VL{m%JsyfZMRpdEIf-!$Pmdz<P<=acm4C;>|)SE?wipX@g#o8Tj<H$fISJ--O`
zQL+C8wB;pcVY=~}DnK-s7@={6Q+ucm5iMLvrO+XRgZO7TyfS;jDf7k+EgmX+V@toe
zC57R0ZpfTtG%CPPlfUMrwa>{k;l}XVZDZTC*9;D;NDWWl_%_whtCS-Qa^e`yuf9Mu
zwa2G0aX?9Z!+k9VCg?h{Fx@&!z$T%8Y>K}(I0SAdDKg&lxlMOW*Dz@u)RLc6S$D_L
zG`g7FriQ~+!fO`>rXzz6TAonOA_wK<YUQcujPkp1&ys)1o*1E%MOi=#$+0Is_&+g1
z7$tVV?Np3vG++tBRpFeS2Up)QGhlT4!+dJeTRPk(|IGkLK)AoRoamnVM7MycNykPP
z1@4LDXLCfmGS$$1-0YYcvy}4Un@<9N+kTRWWmA>a(G5Eeaa6aA>}qo?wyIwxTB8Sn
z7H&2MJ@%G;iIpC9OnyRwnj75enn#j;Xgf=uF!F$3*4nMPE8jEIK8<zc(AAI4b1sPs
z?%Z%FzWE;luc{oSyl!=iH~^syxa!9z7v#c_1PsGF3)EX6^$Ep$n&@blLl`dTL8k_y
zV0~Y8zu2?iN$_filMC0ClEy)=d!HkylIEhNXXUbmnTv)UBrH-wrA@<*Hol0R$gBgb
zTd=Olj?-e^M9~)Lo&JlFn9nnf=sM&mp-!Bc(8NPdK#}{{HL?j0)2p*Upu^qL3F{B`
zS>`2v2gA7Ut6JRfhjL(%tC%8fMC&jAAl+b^$+pGW_fw-?OCKcbQed*%DYpDXbg%gx
z17I&kUU#txD(j}R(X|7n5XXUSW@x72mwqbpLey-n8cMj1|MXdBz&y?!r+zeN6e^QO
zW{8ep>rUodG57(7*l1UoKO*Is-4lf?H3yWZNn9|Ituoons9LzbETB1`<KgSx#y}PA
zWAtz-9s4jp3U`zzjl`k0O;faIX!E8XresUq-}ve_>48Z$-r6=3-G1C#HQtH4<!ze<
zHziAs-sOL+6G@yBsl^`Nkr>*Td#Z$CAc&^gd>~_gVhxry-1Z52LwQd2Bu~;dTkb*e
zULFr*AE}&3+$=JS_REI#(MklmLgh#zaEl|i;Aip>zhm~neEncjG;^eAwoBQ!cM13(
z9VUXqW>^_H40>D72tz(Q+%dX2h#qfA5GUNo*fSIcq5%BJAT}2NGo*J6m^J=dsRRd9
z6tg|Wy?8rIMOdNQF805wT0$*94LxDIK!2`(>o^-@<j?NrCQdxInMV)4BR{n%h#VqL
z;o?nc+}kqG&55wJk5s1|r(u#Oh=@U{<%^(rvP8%2>Dd)WE(@Ny+rg{#)_G2|J%E<X
za{`|g?Hdv6v%?XvH9FUav-wS8=UnQZv-f0lTBFpr5%a?Zn#nM8!1g5nk{^(qJXq;H
zL^j%jTHn%ezt1Q&pO%8~o|7Qkpt~@LbmcS^$|XsGbHfvt_e7pj8Aj$Q8m%8H@WN~Q
z!?gDkZkKbZ=%pE%Deibeg!4Ej*ndUhD^^shLn1aA<|$)eN7iEsX=Y}`K86VLZw-`?
z$dd^m9<i@0d?djAIQL7jo#srV%7^GwMdBNV7C=u-0`V}RWA2EOhvi_3ERkPeddbZ4
z1AF^%TKoFTtJ;sfj2x=h6Hvb+M7x`ZU%rY8C#{kju>?KXF!)l_uq!1pLwE-{fSxsV
zj+AsQf{h7l?ec($vrLY9$g%uYm_8837f(FxV@MEUF<5xUW*cUgAGxgJ<5*=`dnRXt
zD{P#lY%V)o-2E*s+3fTR%C`nGfa*!PDIPfoHwYn|W__d~^pvm3TXsycw@l#8(p&RZ
zgQWoYOO!wG3;KCY<s;k@;A}uR9Qua9XFtKijJB*CCF{@SjwZtGGA3DOjF$LgwEr*_
zBgH=yBsMMr_t|>P`>6SR+E8r=aZq@kUg_QL&FUOCq@ClgEoj#kR@abm*w?ogfj~jk
zI%S3`>%Vh~;Pxp(EUp={F?Q5xf-()3b3E}lA%ey>W!`~%P7Bf&N<X9@U8^rGbBiIW
zT-S5x)ly0iWu>Kv<Fym2vwAhb3&JTwG*qmNsnHQDRL%Y^F*@0)Sw+x+@&xb^$>tiC
zW2tzs*+wBiOe<)?^)Ijb=pzcO9J#TY!XdumCZb=|7N!=Hr13|dx}_M+pwQwZ0e)u;
zC+5(8`Mjvb4pDK-&2^hrRL2rtSLL5bMOc|KBf!#t%|`TVIAAm|Tlth_21eZ@&*EG4
zTxGn``5I-fMj3?v{x|q5*q;fi&&*d4`6%IsN1YyIE(|MO(JUz}*<#jB?@fUYqV<c<
zB;-QEchTfkdtEO9`S1Ljy>lHRdwy2~>yd>=(n8%Oa(}a1Kp#MoL>yzN+!<rTO>W1D
zQX`bJ?il4VLY#6UY%?5{&nW%%!tL5ok0q*?9~@qwNx>oOX^6rIEY51Ap6pJg-)w+@
z7**={2#@wb>u_sWSQ@>CLm}SpDOIFsXkTEqg3Qwnxll*UN1+B7sz?imi@iFIhv_^H
zg=h(VSseEKSHs?RhJE(O!``umJ@sUds8x3<#%lz#_3hs1M|@rota0{OojhYD8p_Jv
zX1pUGdAO6Bm(>|zcB>O>AW%p_v4D1so5QBYzT?b@Kbf-OzOHR`K|vRcKwO%gd*7d`
zn}bQ{Dbyv!=m<p2hwRTp5n5s8t2#UCDE(!HPZ*7k_!+3WAa$U)a7)bl23z#7$1gNH
z0py5#j6uW`r)vTrBzeWU-~@fL&xjanI01?UWkIZysq+E!FinKJ^b-ps`>OP8*0-OU
zPkiczKJ_-?srlrmV#rWM!b{JX$o<}1-k9I*Td#?AIO>6eK0NUFy%)SodSL$QxXyzV
z5CAk51&1VWic01!o{0MwHUDhhO=@6^wU?dnnj^SmV%^tK7^~}S6^9jfw~Fxfh`V-U
z=05dWhM&LB3ocFFX~j*6IeNQTVrTiZ)7TxPM;&C?w`rqe5*waBdZ>V>!M5%6rBEkb
zaT%wcZKrC2u21$iyqNVhFD6xB)I&M&-*jq_;&uLHdm+<MZ<s=GRv2x#?M-lPMRo||
z-~SeYxuF=iZ#WM%={z*P-0+lL*6;AL4_s4Q#As7mTIp25(?>&EM!j5CdIP5{Gbj&v
znZ*Hqy+7dyoV_Ce1lQBYtJ{o!{}w%82i}eghhkX7t#D9ufAek0p$423SNt1Zg)zvP
z10Hm$9yjX+P9fcQ=+2vLbLSo`nt~Y&EJXHO7DCL2BdxTu7MF45BZ2LRc1BY}>!*0+
zW*8BXk$BJ({`3S(&hWCfF8V<yqA&mXhX3rzfA+8b`h>^|vs|UF`}yyS4U7$dtX`V1
zVTK{av*>6UCZDtbocy;Sf$YJ-U8T7qZ4R&$B2GV$QK;e(v2pyc!@`?a52#{FPA#iE
zVY}y=F2`C0JsVJn+~%s8Q4W{nv6$dNZ;G)D$K}mFkbtL(i}20s#>@ZLxNPc}l$%JV
zEo@cRgKbfNvZIjS63V@+#PXJrN<~a___*WP&C>9so-QkT8^`*VNrffpt4!-U<~sfb
z$@2afpVqWCt@-=aar%hEGcU=fh;^VRBGeaP)?GN~7~+XpG$_R3M$#P``1dS__0YRX
zyrE^PGj4foX>?ZP{0k~W`jcOFcf+;`Qj6}~=osdbS_W(}6bP^6Ry(HNRrJH(>YkHf
zqLB|{rM4m3G(Exx!MMf@jRx{W<>@cvKgH4bvU@7LLtva;G^tp};Set)kH})+fI$jH
zW|PM*S@y^inr<gGy>Xk)xJ_?a!uUjL5yJn2<5@%aBVEvRi(LqQUtDYV=CY9z|K@Ve
zKDEVy6rdXZege^RVFUT+`WM1dFaQ0#`V_AQBzzZ_6?wo-Cusbc;OXR^$rMa~D!@!w
zDR8A|6Q1REpUauaAw}p{-I!IYm*uoXv$J?2w(vN1^?L>g&%*0)x1D0?*tzaxif2{g
zcX&MDIr09^(pM3k)?h5fgpBjHSYX$l^+t6muoRehLo=#$Vi|Wv_Z{(qb7X#QrElyI
zpQ-^=4KIfDK#T6;GfDIm;_`<Z7r4ja-RwUX3l#Oob^J|dT8eR_)g1H2M^v-=&r|Mc
z^+-}bqavQ`SGYmO#gGfN5$zam@iQMmO&;e^NcSSl1ntPG!{dDu4yIx=i-0=f;%Sk%
z!-|cIFs8aTzga0TGd;PziOr9__hGSUd`f+hN$jTSOXj(l_ksN8q(-^KUDYb!W5bY7
zr|22*Jb?MSi#ohSYsZa)?vwxg0sDMjdj<T5P8iEbEFgm;yY~%+xI31pcvTuKOXpDH
zM%?VhSn9F-`M5;OAjW-Ey*MS`iU1MQQazC48ga*a8s-&h<v$$IM^e{(@f2kqZ1!XX
z%tElg!fo2(;UTUi_X5?BctuusTwV+Hkmqt}XX<-ddu5uu%_z=7EahDbbyvq6zA}$*
z*s1xNVZ{=<gqiq26W@Jc=IvRWaS?<?@a_ZLE$nFq3(B9=-5X|^9pZ&X@;#5T$D8lG
z=PZ8Dv%G8f#e2@o_Z*h-Jqz+ZC%^TcLp%#S736zPlHW7G;om!Mhp*Zak6{7yq#=f^
zvL>ZIV<_stjI~Bzj!R8ikNZEZpEvx^qSzBW1&g!C4u(FaELwTfR?DFJ51*9FGs$&*
zm;9uEqtdhHtkYl-oj8znJy`RGTkqPLWS65eGV6!t(?Zb$DL89&)-HDrW#rF|Eevub
z&Du$yG<G;lozS#Y=^r=fIQA5)8SP9FP2ST>^6|bawlNqSve|AhmL<S@_PdXmeEDk0
zj423rzWn^fy92^GRd>F&2w<v!U7@G%kA`RRvV$|4R5dK*Kv@I%KJ|GINB+h4-6Vcr
z^^U#|T>kO{*W?H8UzyVKGshp80^Y=D)-%BP*a!Ksi$z~NM||DxtYl3DutU=_?(w6c
zF0&zk!MZ&GRwcuBAQ1u5PW1~#(}0SH@A2?GV%wORsV6|lMRRP$mc7mCb;mtE)$-;a
zhTX39?=6-0EfW_5$Mf~^mj7WtQpy~y%T6ZgE#64BIVS@6W_Lt<l{CqSZE_ljrziE4
zOzK_Yq`qviV#~^?Nxf4eaAL*pOzLs{KQgIzs9D)pjG1(Y8kcdBjD`g4h4j=z_EqRo
z*fwWsAEa$Nx<k~LBa|(fpDk1fgX;s7{?fEnsA-#0(>9T&ZG8UHw5^W(i&=0=oCW<W
zli>KBtqUf>-`ToW^229~Zoc&mty!gLO$xgPA`~Z^hR$0bH;K8ad5V4c3Bz|iQN$O4
zfMS_n&o`cw2fmg*=KR&4V%(CW=R!7r_B3x~7k5tcQ(yCfFf~k0D5iP_-tfs=|H5cZ
zf=EPXzj}9Z`au7B`^CFY$-8eP);|B$yC0n9liq!L<=sahbN=L0_Eb5JJ#xluxBQz)
zj!!Ffk)koP{q_%HW`pRfIN2_vb)3T@o=p1pIvfDDFxqylU>BFdWSEVVTVl0~g$rFX
z_M0Ygo?O{VqkR_RBeY)UGCbH+96_2)6koJ+syn|Rqf~EkbG5SD){;8TuIM_XO5Dw;
z0by~;5;9ow-4ACU8!>Nss_WJPSCH;$6Z6Fz40~tRG0MUtILh}R!qA8#3<K7ZPo60r
z+cy5g^33LePSB4^agz1FGx+0Q&Ps3xsUbolpy$}J8907g3q**J_w)+E<mf+IA&t1W
zLM@KB%SSJkNr(tn2b_PxYG1)@xexKD5Ag)-hik2lA`#+0Z*`<6jA5(dACIcA6C2;Y
z+KtcaxUXb633yFWG__Os(5X2|*w;2VzPMhOi2LQ{+8pYNIWTAeMEmjxl^PWoZ60br
zl%jhhu8Osav-!H`%z#Z#>6Ay@MvI4QVmv08i;ziKK{<Dp9<?Go@5-=u#C?fEP?lx#
z1r9yRK8^Q$#9`SQ8LB3biK(Rdx#u`!m&cnArrXHyPaZgzkyYTF;Q!CYCfV3kfq4Yl
zfBB5;R;rQzm#u6V=r2<#GXqt?f2O(fWd!!8iC;!Ubt~P(!A2iL&6Djf(#kALl)cJj
zX1tbIZxVjk8pT^cpA=dNuPMgneZ+q^Fo%FN$Yhz3f8`Q@{q61_nKeRKqhwFuA^R`S
z;PEeKjeBO=<prLx^iWQ`-UrUGM=^0`tUO`TGi*C@8VYkV-!N6E+R|V$f=Wq;nrsaX
z%I=fo1UvH2uUlfimAQI-aPsb|B;p-+n~5#=ayiO<h-pw%L)%qk(`<ljk8kEZ?{8L?
z5_&Yh(IqPCuMfEWb}jZ$DBo`%hvp+ik>z5+oGicM$bUa&Jih|ve3N?Abv>S<z?SIp
z2<`<zG5ry%x=A>LxPQ!i4Gaki1+n2K6igwnaKyN-EFt_w-5L_nG!<~D31&P7XVftp
zvQd8lwv>(*juTEelS^fx|F&e?g8Mh_{N<2!uS#RibjAqT&UzRd2wibp3e|ZkMD|2i
zMefevfL6swNFq)5M^blo7%=5qMaKcNFQp|;DasI(cCV%6T!UD)3TXX@&b33TFE!Bz
zqG&yFuAP%>H}u-=^=m6d4KIjHmxNwc@?T|<=`0IeV}wKu<$eRHruONIHg-DjtJGK&
znPF|WaE}F}1B)GKk&jgWxj$f~)k!1J#^hMOZ)wtDG8P&g#1UNAkBzPPXOsN18~6S`
zp+xD(E$-a$oyK&e?!;)KWA;Nr`_e742ls{Vgc1G1*(mH6KXvjLI&*##%BmhXFU0|1
zUn(piySobXQGno1swg$`W{E}~%mL#|sgvA~i_Y<%J@cP0SO57D*G*p?-Ww9;l<6xK
zzb9XGpCturnHM5dt|?AlNJ-n9m&UsTdZz&RV6?ns_y|RlAGv!&*GRzaI$x%?`H*}S
zA>|6yE$4C^$t<b&egk}5`==AB#o#EogCFrpt79(pWnHyTpcEp+goTxtO<cH%?L~#z
z5<e=#ta=HR?H{pYOeK}Ep1e1`b!uY@GO?RS>;INhP+@N&a5_|HyAGgDMvNPdAZ5GO
z`b2xD_aDFP_3y06?U*U<t&r>g%mKZzXIaRItzH)v?={af%=M5D4GR)aaqFMIzgn&@
zkB(R#>Mg7HV*ESk-FWNQ=@M|XAPQLwV8ZL}D}+}-jYdZneOh_-B56g!Sdm{~T0}e-
zo`t8}m=6(Rz*_Q@)^wJkLMR@88k|u2?6&@*YDUcUF7%utd3q|N$>tfJ(De3;`k2Y}
zrqd>aqh<#SYs)D!4mN;?&fXc5xT8o?X-&L>#{EjLm1VM0iYuli0pd6KL5eyguZOu(
z&Ns?(hLyhZg*>$H2GLA8&`hr5M_3x8M^l-%=9xHq(!{B*ac!4rDw>GRcw!SB1%$#V
znmk`-k)E-W88DMba7^lQGDqz?HI_1$Q}{4rRZq%qASGg2k&Kj^uX4l_n^&0kv@XDi
zLrMR$&@?v!^X|Kx*Syb_fXK!VY3Q4A-F(wJ#+Cxxm1`J0m6oSRw3EG>-}6T|?v!V)
z5JUKYAM}Z`H=9JI`wH_gJaE5-5m}(1`~V+nrBHclzGW-?+WHq$Sg@&xb71+^;cxRU
zYH>YX)-8W_200c6+}7dDV~>1j=Iwy_QS{=3Fj0w1!6XG+B7RZshu-c<3V2dw5YJ8H
zt9FfUQR;&#+wL%CIdWo_St>J?dnGEuQ1m~=Fk+!c<F0T@Aw}Yy&6{SdfdDGc6x`s6
z%qBGn4-q8JcT{X;TgDj9Ai5SU$@0yo5n~XJij2koh4#ZT_e5g~c};FwbBSuW$kFrj
zFC5&$6P8}?xT2E{V@nGdm{$@#Kfam_I%$5oaZ3z$gkM8w><~_m6$(D(N=%bO&U0ws
zW;rcSMU;cX?9R;*jtT_UBG4x8Gg`V#qWX$);a6R#Vbdji5qmFoJx}OR8jT^;HFXA*
zbDaRd>wEVBhn_xoSA7rY;Vc);PqF#Qo1XZDhxF_=PQ&iQpPt71nh|7)jW6Cj%BAZt
z?>1iO5qQ3@@i*Q078~FA8b60t(rSm1(e|>S8TdoNIj4$KwndB3ZOwB{r-KFxBt7Cp
zFgq7&NJJhzxk6}TKx#VN6f1IK2Xh%@PFv?(k?w|)5}?*(le6T}q`E9!7Z~7ru;RUY
zxiAit81;z%=$upsr1G{!)1v)U--8-4t!Vkl)c`j?N#%(Iu$L*qWVIk>qI5&5Dimf2
zh6KOYWddtEGWr2`Za+-<w>+~F@Xv%ce^a&6R(MVlhihR>4_Om$Aa?fsn#ek-TVz4(
zoBiTtn|@@9Wd-enVuI*v=0o||OqSbV8eA63yu;r^ankD<wB4z@rvy?Luqb2LIy9bd
z19~~Fa>25aapPK1o_HaF&<L;bDh)ZUSrLZw7REo8_EtpFq6ni8N7cUgN8N~sim^fp
zT_BY0haL#|Win20^pWbkjt{+xo3=LWI)7S)@=ux^budDwdMFd;80xHmOWInRqDr#(
zM!9O4D&bb^Ww8&Pano0&Bc^Z)Pq*nCCE+>`6H32Ej2e(C3auUYWW&upYd4^6FRB*V
zZtX&@dtKDi+4t?k_2SbOE6ds|tol>GQ+wDY|5%0Es<tZRAE*H`$-oGKMc@`gAR2~l
z>E;?4C|zzD^eJCnUE6Bic$q6>9k%784(d=hWC}Gbw=K}Y0*M)Lp7ad1d=ZRM#&(O~
z>u3W6&Fyr{&)WX3?r82G5;M2WUBfuw`W4pTdt9E^v8GmFi6M?5h0v|s=)iMt#T@ZN
zY`a0WK^=%}E*@;P&x^mE#Y5uc2O*e>2qS4<yswzFNXO8P88fl?zhR2de;yl726{%f
z;pLoEOSaNa1g`jm(j!lvZ8*<%CTV@-Xye{%{K06>4T4eOZl7_bH3y;bNyRrwVYqww
zoRACEo41j`-Xfi5St^vKTHYEy&DR#z^gJuSn8Wr^dih%uKy?z2c%_C%;B^}m*4#Of
z{N*8P!Vqa^#!w{T`2x4i(zDl89*QyfZT5GKWdrzSpbYJva>gSAX*nW(M?(?)ph?v<
z@gdqn{O{SVc+}speGNDrs|W6%|A`695))Ry0Cd|^fcmVj;&%C~J|L=V=2gk&^da9u
zyJ3|SIz_`ObLPq|OzoBW#j0r?+a86k`sdXQGTy;kFK>-P#RkrOy*p$0u+5!K8U9-f
zehKjeYfa`!ZRBjDVIVCkf`CJSDT7<GT>FA<=A6g@w1ZJ@O|6k}ScJZ8p<21tLNsRO
zuUd%QFQ9XpQ<Bpp&c5CX=bXH>Kqc&896N!IIZ32%nh`6aw>EQPm05c4R-FCQy+P2m
zSO}Ts@#Y_H$sM^Rf8%YpRqlP^4lt5H`N+qY`zlaoDo)fXp;c_i7f(N#fn7<pL^V??
z?huhHh4d;RS4ZEf;jVuphd#<-0QS~^WQA0(tB9tjQRrK07rzktRqT5*>Mz1AZfVgJ
zC>^sKm@{nQn9u^AlQT*})uKtGuM2adozHTkrAEwgBl1cub8%z|nz5mAUzX(5Wfj(j
z2cEPFmtWRCh$&FWnuX-1t_6R%OS05I(-r2t`)%@=U0&-GW?4x-v1|>9GLMfcNLWi{
z<89h~eR{fSlN~z*bkKzD)sW~(-++(`Y{?&_+ap*c&E=<={X3I`N(Jk@^58i&b1#%t
z9AetOAAo0f$jptti0dp@<u*C|5h=BrExU2}^#?geXNNM@qM6enHQrohNtkAhBi-Cw
z{x1#Cs65#=OH%{0tesNRmG{bPxH#D2no5~c+y9g~^tut*7IZ?M=v5!;dJe3d_eQVq
zJoK&T)q(wM#jl62s`<YXzPkLj;EC}ojv_i&;#b_%IX@(LlGQ1p&>wUO4^|^4XKEB^
z&3L;i2_sTAaRh~B!?z5~?er&_w`##<PEu{D<P%|=Hjq8USPPP~hGej?q(kU#S4>Hs
zi7p1k42bWT7dG4x2OCFrB@UPpK<^6jngPUMAbCJ@Qlj23_w1}|a_aS@4OY}2SoHlO
z%&*qRjSRWB;_rXlT3oF|Vj_brMO|zQ{Oh<%k(jGlG3M9)<uiwFKqF>d6E`DsQVz3H
zJp#<fQ=50FF<sNmecI&qoq6by(^>NLPsbbcP#<*UkwEP5il^hPieoIkukHS~4G8pQ
z9n2WrK*itMsT(6mAiAHv!OTh5jMW0Xt!d8EZCDPRAcLn~>@rK=p@`?`A@NIs#W!6_
zD-2HcX|lKtTWw1b*Y&6iwZxu`Q`|u|{N|)wlXKl<OJtgtMMl~t%ZukeO-sGyo6DP`
za^LabU7_GMVmE|YNIEk#V<tE(`b=%`T#gIwA2qw=21Y!@gurYoA-U5<0!V!C1BthY
z10nb(gf?^nNW6l%#sM<{;X}4otTlgt3CBOTmH!>uxNl*>HkJ4ZAMq1NxO&aTT(TkH
zeO+bn)5<K76HFX@em*@VAiYIsZk9K*+@S<lH|1Mdkn<+lMH_)0$KmXI;Ba{PC-U+y
zvQ=fiBMLeHHe$Snh;irpNZ`2IQ5^U<rYY!OTXB&^pu05w{HI{<)QEYdjyo|0nA8#a
z{4VBO2C4w^9oZMY6Gc0s&b_SL7rqiy_LAwm@OJ5-vd0u|o#wjLa++Uhb~PX{_VpmR
z@=lvUKziU_N_()FGp~412gHLkhF)U%JeTFkWy>N#(9h@0(vuBo(f=;|4`Ij!wWQ!n
zM!Q_?Qk)Cm2txhe;suV9i0jrX+Eg=7O+{N#i8=#5KV1GKym8A9@2cQ2Kg&GyCTAZ~
z^ndNB+NV%8$7t-dOg-im`u?*|yVj4Wbqs9>7|~A?t;a5DZ6^8HyU3{V&XKQ8lGAzR
z!U@B7_yImv8EV&BrMtv3^*-eE^c>%FGRySh7PJ@k7sfc+fZ`5nrVykt%?AWAvmBT)
z30OVmu&)N3j0V<zm{<HXR{?!k&%0DCgeD0F4oJXQwDoK~N_Czbe?0Bnku4Y;d5_+t
zltDI6*8~F=fxtoR?R#|Zc)Gw{hscdc9&JV3(t~zB#Y<w%d1b~d&38l3UOVR)sY^4;
zyhyIrF$jn+La$P3MsOAD6cL=;d=MUqG!d4wG@gfPZs|W0B3u1#g*T$vr^F@}BmN(G
zHwf_jATfDyn(ES5j4wujTYL3D!u+Ej39mlfT2Kx$4&$aN{To->%3<i>Fy!*!RQ8Vw
zK&c$=jZ9^!#hJ(Vs1Es;Ru`ztC0a|rbmf^KXtDLK2^+<#>DGSvI|HjHjreF!SolGz
zO|-VyGcDK^<vP9N0$ICNd1o{JsSV4r`E2|hN{t)|;P6ZqTLA++@MX!S7$0Gl%!kw^
ztRzcj${yi&Bcv#~ECNT@%on%vKnjQySoMnfdPn4pA%)*a5G*fc9q|-Bfqz@Gd`!}P
z0M``9;K+RNC{Ki)mN=r8n)y&_)K9ravNXqY5;nm^am&2zh!@Oe^tLIzZTgJ;Ff+v@
z);~+dn6)rQRHG2Vo1s<*``mhA6ajid;Fu-A1jvg>fb_)y1H7CnK_xees6BS*Tgu+k
z2fETynqrMpU18iu)?EL(GJXa3lN<NOdum`|nL|zWw0eda2~mib>@QuLA;Hl&Lgy-T
z*vf`HDP0bymr@*kQyQG>XQ#VMcGau^q-Fm>Raf0lGD>kjj_jQf1Bf0Lvy8M6GX#);
zlK4iOB{RVa(k@4kcQep^+9H3TMb4m(oC$@R^b=D09kl>b2cwScS1ixxC?cxrAJHNN
zu^@b9M=Z4M#D{+YT*`B6XUQD!vz%%8ao$b{?sQ;jL1u3IJ6kaS&O3MDogpY(qMkR6
zMN_Bma^_iv4*mrGyKCY5(Krvfo~ygY?nw9W7~v^~<=M!^qhhOyd#+~86Zr%QihRio
zOgBU^Oo@O0bD9xJOZOgZ@qm3dCaFa@&4_lW0yQ<_*=o$o4;S*HbYo=<qLvUdOx5)^
zIqhAEW0Q)d?VYMdtvP;+LeJ^%N~`4hB<*PXBiiMTC(w}Wxrh$ie%PwlsX94pE(kUp
zEmpqg#B@EyJN;VtFr3Qjl^<8WI<CBHfk&}LGfyPhQ#b+ozgoRhpHn}H#|XF(vH%jo
z5q&cp@t7Q3iR0HdX3fU*RYI~iBzDo+!d@fG5HdU#0;q*$JR@NNfgq6|02iUkYUQyk
zH$9<BtQAz)h^i8a?*&QW@hZSXy1*<UuMMvA1u|nq2S$(is+>JPWHgNVZ#9SG9=ZvV
zBE}8!Ya05dZb6|(P`x7ZEJo=OZrb$eY=m93PiJG1n}LO;n%a#IX?OdAFus};iaz>6
z(QReGh4ukMUFm|RlPI#yPy9CVUp~k0<PVp2KY?Ic?07QznhWeGcFIdEGC<_gllkZ8
zeTgMRuTLfBB`8TTLe3F0sr*9TZkxBHt%<Q!3|XrU)tz^F{!4-6u)dxA_c%CGEj^9W
ztt;`^)qp8LU$k}!IDV1%NuaM>26jyH*MA`-nM7+b%lK(6&Kc8`=z>Gjlzeqy22*l^
z=Ta4t(2D&P#_TUKVyM#PZXSbF&C{BaYi7`JRP%meJu&+0hI?P`>-$<;&wYXdsY7iL
zOaW=^OuJ>$#p#e;q(hD~+=;t&eII_VqxHE^dr>(laLVskK?M2fC8ibL{Fu2ehrHyv
zFFE8La{F@rgT5@>zMQ|=7csN@38V}eqn_R1WBBh+$Tl>y9W#qyLiEG>3pcCx-}Re*
zIz{ymtDObf*9vMz9xwup>9#z5eCa7dQW-;(eG;|84b_^l?qMv=;)m;7r=N}%N(Ji$
z;i}%Y?^vZx%oSulfn)}>FFQqnptovZK<paWavQx-QZVdxdL3Bqd^Nxt=0G#^`Q+TD
zWHpS@4>P=0Npw)DYYz?3RTu}^|M*6>Cp5A>njo&P|B&w|_(1AVi0JE5%Nt58K9j(f
z&R*(|dpX6#sI!KN)F{^N;Gb}!PdC3^r7e5|UhX9@S<c@)CksU##bY|o->oJeq>u->
zH$8dbHeDlDE2ZVFR0Q`FvmD8+SYfVMr$m10d7B=y@1Nf!v|dfq+8_D7I;w$Zjba^#
ztE27D3kh#jGmKV0%N82nqPAH8VRCCicv;&4)evh4U%4_S7}dr;<JjDeX>)!5l(>#s
zhj6vl#9MciOWTZ(*7pgAkMRvkzl<5dT|oY*9T*jbVs3yN)EN~#I>MqYSsqNBvc_=6
zb)h;IA&h1w&_j$#dhD;;fOEhYY(zVIwdiw!LFrXDv9titol^{X92-{)Q%BKPjX?rn
z-Zjuy!VwB&eYV3yE&<5n0(W+an=AJSIH*Q!*PMZ?j(v$EtXP}&oXhVdL@c3u&(i{T
z0$?{+?h(HJ9Dix;uYR8uexJqF?=xj%D6sFIuYaFO^i^Y`MvG}2Ei5TjW!q3hZa4G;
z!pgFXb46C5W7EGit-a7hZB7b=2)Mr-k^{@QuY+3a8*Oi9#P-m-C(-xWyIuAqjDBf=
zJpTQvLSO1CrZtxBVyo7cKMbty9#S06qa#K-)X;tAM)FN~bjl721y?cqW<`hcq){$%
zm-NljUpo_2Q+px@syNknz#5h51!|iV+L+5$D-a#+bCDZwZ(BE}3$HiK(Zo#Uv07Pv
zqvr6LlEXlB5+kr-+K|uII-)zTEfjt~*GpYLuwp$h{bVO=EAoLl^s9bCo0RmxJx}M|
z2bQb{R-f#1S4lpweBiz#S@HwV-Uk+}2bQ1gQi+0mphj03Vb^Gu{Dz6*tT2%;o(rZ8
zR^OV)S$jhldzH*PsN%%j^gG)$C_IXPub4;gc}R-#iWBy|6+^|CC10FsWFh0MnHyj*
ze9K;01PG>Ax8^W^(jE_kYu36jKu|wVG_Va7=hzSVm#er@Ysfs$YQ}Y7`eQkZky+zM
z(30t%*tPY%4D@;~6}f}@d;koDt`u$~X+vIhQNQi*S)Y3c&)4UwO#77x=nAH4-9J(D
zVdS7yfBvJMCE5wuv&xO7Z+zqLSv71p_|nJk_pJJ)PrsF?Z;e^%#?o`X_4jO9Z#uBp
z=YQ0*uf}Z9(3u)TY1+1P_3LJ*Mal=>t!<pFybrh-CF3maLY`c0QI`H)VZ!Y)y7sV0
z0IUOPJgNn5k_8^AOlJ?gtCFWN0WDK!sg%T-jf>hQ)a=dw@PUmffizmH0v5O_dLLTu
zBs3WKynX!?QnIqcgTbT}KZWXzum1co4d91RBIp%7u4#JyI}xe02`XpSAVY-e*12p_
zG>1=wvtL(pESentv;a!{W&&{ZX#Ue88s;~OGp(fy6BUf1P_ZNh?#^d_pIfreWTlFJ
ztv={%`cRarXZF+kPA&OP#1R7F6WYvNH*;izIdd8s{=^Ni>CWd5b%>4zA25Pb-CC86
zJgr^EOnl;n+uEG8HpAA&vbDa5)-9fNqDQp<V>D6{Bzi-c4>1k6aA*T{0d@tVG;MLe
z%CjWjmzyw8FX0e?y^M#!geHW-50l-~yUOzW-J6WGlyJ2C^X^T3-J6F8-95dvtiRvA
z*+`2XN9%8PZ%n#3x-xqEaHqSc_m}PWyC?9Zn(qD2yXPIfe5e?R>k4S`#jZ0OQ+Yh0
zgrIhwWr4`zQH8v*8PsY3ng$?8Sw>9fy2z~{H&o9`36&zheyQbf#_?=;ovvAP?d5Gk
zrnOJQJ8r~Y@r)$b`%A2Mz=FN%wVcVt*ssypmlW!&c`>h0KiHkeoL+=&dzz7!!*4yo
zo4_3twqfFE$S-?2XV277i4V4{L;FwT3^xkqeH#YO82RXQfm<2SnoW9R%?%m-#7lbl
z5jUx0&P)bU^-NW^3u1wI16T|KaR8ZP`O{4Oq$<hh1`VNFFDlcZCNPjY@IZ!N>2`iT
zlh;43tn=EEpI0tbrn*ek0|QXa5)3^ZXvv~17nCZv_)~MbWcFQ?B}HTmm&~(v&vx`@
zbYdj>GrlEwty>DP)d6sWPcV%it4O!mhUk7%zZw3cfajl%yp){Yaz#oKL4f0W#b=H7
z53>CuZ9ga5&pYjBlG?Au_&l7e%M-x^O_t1j2hm*oV$*nRfoT8*M>~29)b$0KK3<=g
z{nO&aOm7e8MZU;w|9VZ%<0mS>F_2w6(k{khGo)Rd$u8#IF6Lwx=WZ7#{w`*%E;gWx
z$~A@64I^bUC>ujbL$a8tKX`6ACf%};?&)Odkn`xTW8Z}5rh(^{q3;%f4=;9%__xS;
z7f{=+S(E_<Qf1@W{t&h_7;}`XNw5A?XsI#2T0>jtiQVPHEPDN%HGEj2cb_a$J|Ydo
z)y1EO2vA4mktuf66rdSTO{yqd|348*w0qUw-2U~NK+oY-A4ra`SCB-RcYWH;zF(=<
zJiY6a?D_o~jOk4mOs?PlN9rZTwvputasfJ!@L-7rOnzv%^hdr&>z>8Wm|~XV5zn#`
zJBp`~S5m;1uh|uKrDB+?Yy4v!!JjUc;7m}qsF?5rpwqW@K(DnQky<I(fF_saEC^Rt
z?1#)nXwrfD`OLpfe-B~NSMsd#k(liX+JV+|W7uYKQ|U-4y7Kg{fxK(DaXbV#m_k)&
z|7*qx5d|o`LQJcAb`$RzlyL6<aMC%`8N^aQb_1RS`Xz~nKqzB6*x$NGkoIAs;tSd$
zRL_$7_w1-U_s5YAI3PFq0DCr>eWPc~V0m_XHX=;keM3MK7z@h1L~&hipoJ8m`4I}S
z#_YQ!AYXivzJBk$8vmCoZ^@@WoJWrgmCz6SC8w^gs82ySeDJ*07j*bxZTyl1eQasy
zW6Qv=4O~SZ#ILo#!qOpn_A3C}o&ZHME|{)m0Q*R1#=qAY{r9*nw=3)GxW2@3`LZhx
z!tcvbS$_l8M|zNEeyt@LkD#%MMOX8025MvGh(sY9=fk&wfBK&qgrbF(y0MaL5-czq
z={$}F3xoslrNf#M20Ook{}X8;m33Fe2B+K;_rxaVT}24UNjDmcu8u843gN~jyfR5a
zXw;G4g>c3XNU1h@B6zx1k&Z6vlbB$qRhJL}sC|$YGHEoMalkqT6v-6-ze}%wNIst_
zrygT1=H`&vHbe;ipZ<H1^l!7kFbw{!Dr^vGut0tY!K|)RC({8rVa`AGCfKdn{KKtX
znq*3ma1qu!YHL!ntgq6NBpq+oK_H=!P))D7EP^Gvbk(av#cmkrNxH`?8#|R()o*qj
zT8zhj97f^tmx)>}GnTg>z9tVpTz=G!5<kkvAJpTGxQe#}N4o>1%Vi=NyJN>JDMVhO
z$yv5YZyF-2y=Z~m8$8)?$4we4gyP}z?vwxmku9tq<xjCJdNdheDqf93!fqRu$(TUb
z9IN{5c}py}K7Zpa$6;b0*I0ow3~W}q5v}M2%HRR_jz^d{Hi9Rmt;i>@$yZ#OJb-*z
z_8V_A{TpwyN&Gff-e>vE_el){g2+5$QEi{9rYR(MhIy%88{!zCfk#lrvSV9l_N0yC
zmf)xtNY`9+h|XJw2Tf@?yn+8-a4oa*Z)CI~6@mz6m_5P>Etm!jb5SPKH^s#oCHeJm
zE(+_lY$c9jH?9ztv}t$o!(PFfuJpr}f##+oJi3>MozztM;$i6dnUwgKCu#;uh|x^%
zoTn7z@<Jo>^((Ep%hv29I|d`{I!4y-1>)plY$hUVdYRK=W=pQ!p&jfCZ#8`~2I!AN
zsg=!5W#O7uTr!%$^7(R_X$*ayUA<ONa42OX2>|LlbTG2`(hLO<V`h-oyjufux;)~b
z2c-HezDz;P0A!8kq$OPBln;NnATKjmP}=AGf+@6kKoeBv^D~#{3$hwS7}jja;;_o$
zdv!<eMAdHuvlI&fFBhu**SZ_2`=l<T(o*En!o&CwpZj(HthpKx>3muDw;09iY4w4@
z$-@j6XYOA|>-bkKDyvxKwuI;Bcx0|XDp;uPiD?U!8V4F|vai7OFX%d)YG7gAJF6pe
zh-$w<Eh0YiZF<Wru5W%KQjEgsyqql4x0D*Hg2!3$lhgwlP6A@?R*}ieGNhGkZIwQj
z(d@llyrVd_(bdbaOE>RfB4pV7M3PB_s+won>cpjC5{%UR$fkR4l#J_?UttH$UfL^y
zYS!f>ncA5b54eX=HmqCBVe1Md2-{R7SWWyMf&DsZbGi<$e-0c}fK0%Sl?=rT(`@%(
zK*PlBPj`rZ@;LBNbpdUl$>1466~j&4@mbeJ5`!Ez{RQ>AH_c~Oo-<?mb*3T4pFx_o
zLOFtp_^*!mE19?Aap?@RWR1f)*{o9;G&$R&g|k^QeU2W&`KLJ>Fe{<T=PO3yVeo@s
zFNl(<H>aHNH3N|7C?~(J?}y@L`3Y^p>?2KcqkAD@fSV&vQrRn$*Ns5M*>z3$JboV0
zOvUPQmyJQ6Oi0UEn$Q^cJ)$fP5hxZH^(n@A1k?A8I|?Uxq#11$_S~;%u~f|9N=GWx
z8jf<lVVJ#0vaqAJ&F*7PhUWS?QOBT>83m43F^2p{0V=H;aW2ZwFsbrnfe>}oAo5<+
zkt!lUH*H2MBFx*4iUu#scp^a{p*2~<E%A!!OM+y_D4;P;h~L9?$8q47*{KpsGnfRZ
z=RCQJ-VGd?TVyK<zTG28#^4g@4!cHN)aqWDBo0QC_)v=7bdJKYEUEe$%`uL4W28`o
zdMl29o2cJ3bZ1&*p4m|3gEMp3RH|n(IV)&f^z7vM5wp0}Sg!1HvQ&##Tglq3NCHlg
zmZ)XWIqJ+Jj{v;j7l0zHPUMw`j~?u;W|=hgxSD$4ieJ9$$CvYKN#@sV0{Ok(`hUs%
z>VSr(azSQTLo}+GwoG_CL$xD?@`_%Jbz7IduubhF&#k#rIV{YhL35*x8Bx+{masl_
zp(bfJ?#9znPT-aLO&i~}cLFbY`N@_25aGjl&-o&nB7|e|o>$h0E7?XgxGDB6XALM~
zFg0-_IdE<C06EG8^T42_69cm>eP=z%4O1*7F^cWDUCT5_N3Mz3mIu5zheO}hqA62`
zx?uUeuMACG@t8q>^dny+mn3u&Z`m>_NYF_uu>wns<tHA{)Ji@T7~Kq2_#`x3VIYAJ
zB8!lqS#$r&`w@F|QSFcR*$e`7x)!P#hw#QqXFHLW4+F2gE&Zm~_-{>0jT!QPpw88Z
z)Av%CORnM#LM9Q%Z;8!7sgZou9UOal+)$DZ;V;5kp3!}3B@`Zv2^uIj^7x2c`iRjV
z`D_r9KcQoiEjcq2hgu%L5Mt3V_YsPXJfOUJJMT7>DH`;D5R)!*v#ByIq^n?Z8zqDS
zZ#`%@)lwhLDhf$7KuMt8H@-#`|J`=V!}wgWd@yCGwp_|kO&{$yL3y;$DrVi?7zf8l
zan?L}l(m5B62}U2JAkiiu5<A!f3qtt<}>EB?-QQVzGN&u)%~BBof5y_&nhqhp7P_s
zZ_0k?*x}*k52UH!DGT|OV$xH73Gt|ay5gL`SG$2D>sXYU%ju_Y$XCe#s2H_7&01NB
zFiSrPlD-0E`-~M>O3M7b?Qr{lQC^EgH>^=y`t5+fKN%zt&0~NjRO+!$AiOo4UUi)g
zlfYxFth0WVlZM-};jyP-S`)n*ebw@%%@Ds!qZMbGnj%sQaox9AW}N;KXsRs~G`|ew
zf|-Qkz5I{_w*Gx!!kR<YnWQr-r8sGT-$Y!MXL<D6qFmNMDneTLUn^#Q#>>fq2QUlq
zaibfft3Ti+TAr7v|E-rud0(RV`!6AM;x6l?fsdS4xn<Rwqe-AW0(_6RTO;~@IYmts
zrXk@qXx~dEjzpH02lgU>1i}Xiw(-d+p|#DsC(_ctm}aS&`JWeh6M^tqg;VZl*p1Pu
zViKo3PJrDlxlLjZp5`d{%27Ho{EBeNh7Akcloi{$vSN#0g!Do)qAuUadk)ZpI9Tdh
zSrQLBN&>B4M#f3t_thoKUv4WP$B}P9;%1SK=a$N2jSaZ~vj}R<1$jZAgu25R?1$tX
zrv5O<lf*v`nfYbHxH3RYg7;wx1Ahf)k^HnVTultI65Sm95UVmb66Et)U{i$F?D~>c
zg(}%a8s9>Lt~kAcl&G(8wtGIf^mWDJZ+?ZC`{=9swsTmUOB<)lpE7)1c4|omk7kKR
z8l$fpWKWSm&g~3m-uA;_9u9{jJoxPOM;kGacF?r~hT$y{OTST=6E4dqO@fzLa}%zf
zHdO_nqOTDDU1=zQQOF6_NL=tqDnwo|;%?yE(g8gx7;<^<!#jAj$sl%pb80H|r%#}h
z_mXZpg2ibld2L7bh;O0$&DDz8DeREY(E*UC%uF?3YpxFK|BglQq^3m4?t3c2zVFyy
z>HEB4o4Dp`A&>O2KM?I#%uzSqO#%J&wx0%xF_+65&Fh+S#>0rbJEN)HPXqt`4)aRQ
zAyqM(ML1d0;%C?E=b-X_(;Jfa>wEKlBA#|a#@Q!RWa|06O%jR%`$a&B(nZ)Xf^|i6
z(@we4aQlvFJF5IUnZCYo{Wq5<p-&;q*%cOtIddt;u)w*s+Q+$<NSx)@dt9c6cVkls
zr~C+i5jN2Rd3<FVg#kkd#YjUa;=GtL36+pgUS*ipmBR@BG%#v3`bvl*O$j8@Sfz1z
zu=lOujfdF1510^iz;zo3EbKeFq@Tp0!4octKCLnH*U?niyO!Z$3Fou+G<?7g-q;Yc
z!!45jTO`^|X;YiZbvwrghqm;<WJb|EqKqTr>6e(+eH{cbO^Mw21l4$QgOJ9P8b?Q*
z!>z*)yKdo33*>TjEAlDvAgY5EJesxEGdZ43i3jbk<P+9214$G!p?CDD_p3p;Nf_qE
zosq5#&+Mzwgw5?imouR8L2%{f^5Pk_EjNI|>k8@DnusNc&}LVhJJZ|<?}~XgN^_G&
zud&Q01RwHbT=!6g(#@TT`GRxXmOX#Z7ukL_8UrLld^<K>oz%vW9hq4K&xv;lQTxyi
zpbg0rW3Sd&W*AwRhkx#n%F|kcN4j9iE~$uGEo}OGI4;2H?cI`SN==yQYagZa|L;p9
zyjDbNpr+bZx`#C>C50wQ5!5k72JVnz_P6?!ZG*QsV$Q)VfLIEKSD)--%B|WCI%N#X
zbSf#FbTHy)EgOkk5@T+jdWGI66!QRNfLmJ{1}1Hqd2k}$P+L;q2Ev4iC`L>Au+SN~
z_`30LH>C=$oevLph>S&xF4)gT|5bD$w3iZjvJ|Aj!l{A!e4#E?M@|==j<_5w1X311
z<5J2T#>1(1LiImd(5I|w_ruyzot@mHAQY2VZBag<^Vjtp9Tf5?-?Fzb*={z^P1TLp
z*(~^;C$aWINgkS5JC2fty<^eQINy#))yQDVi9|pH@XX+JJduO>R2Gp<ij0VUG!k^T
zN~k7Kj!ac^$;_XdQ6$Q8gzn|()l^}jA?^~@y;Av+p<WlQ^C(f4gW!ciEk-8&3s>I=
za}_4n<Q67(t5S`(2UYiTSv=?r$(EXv=PQyd;gnR?t*~~kdkAHt8oRfBhnLu^a$HL|
zDb6wgxxlBbj}+q-Kr!rtx=bUF4og@hT(IyB+J~}17a+IiXvwBeR3{nwFr5<*87#!l
zTm`FSrhRHv(0Y_{=5@qSQi>e-QLu3cqcHmPzjjOSLQCcuZ&xG=Hx^q5r5}s+VUd~g
zz6U8zz3*l8uar2h%q!g2XA4^*0<vm4W)LJDNbO#NaZx@8xF3Ds)DqvDTk)2~yY`bX
z_&1ydBux)tbvgCqMdGc;DVG5SW=TpG(bN50jm8=UHUx-Sqo+7h(pA&U@KVIizJ&Nf
zXE5hiG%3S*pa&!ZC!tR8x{xDZz8f+(o*A{EGpeLEs-D^+9*QIQdY!|_pt;2#<)9H}
zB}A*Do4>$#W9gk@_}~QE$%W+D*;XV%@*6BHHm!U>or_Z4I3@5K@=SsE{nj&^@lF{(
z(<bl=uK67B$0RBmgjs{pT5vm;{WGqf3Q^^9fWTigNoWkV9lc>~U-h=K@0&ayTM|mC
zkpz`4gKn!RVIxiktjW={GbvCZv5uQ0kA-T^1H!`CDiJR7!rCK079JVx8pN-t0@KA?
z6f%T%yhKnVrJ&yFSongdF?HiG3Jc-~y!(7erj2U~R|1DaMP0<CAy`xKx1QC%SRu+{
z!HvvV49eD#ue-b0g_-i$7L2$8Vo3Gp6g4MA9Wei{_83h=7IM!YCHqc_P(}9%DR=|$
z=7@;W0n+S%yB>r^AX~FV86m7$!Zh)u=!p7k(-sN{j2Ca|(`4#K1wXOM4D;KyZ*Tsm
z6sPvdAw|X)-R>wy(`H8k0`aNdgfpUV)hf`WLt&}mtNfgD_<=hy`(UF<Fg)h^d@nt@
z5`2VJ0V5}oS@{V_R2i2_@6~(~AD>>AC_u*k^r0t|6g&5R>yh0U^-+_I=3LP}8)LC%
zmEZ4|6uxk}T9M;ZCF4{3TZ57G&;yRov6uYFu6U$XrK8pk?g*tPBkSkc5DGIWiowZm
z@p7gJU+={;GcqC4d?+7PEUNSkSw3yEoIjQWeI|<~xTXc#fupi!IKfN|S`rOPP-GAo
zCg>5*Lta`nE>%J~!cp4d3Kj!-ZzLh*=-p9+ZVn#OWNlIu+_T(~n8W&B|My&zJcQMN
z@JgW*skW{SvXJAgk=nf;by{(Ji>I2tHhV{+%{Qy-zvDxjp2SF=Y)FS5NpaVVRvT1t
zGn&=q?&^PlTMxbE;`lnRx6$vooc-y}R8QKOYB06bkX*J5SFHDw{QiOs8S0W_;tq_k
zAgePO1TIwMVkhPZ&oDVkb&TwC68Kemfs@^4?uhf^c;4!)%y#a|2(0E9;E~&L?>ykw
z=<$!VKtg;X+%+wIL&X#$SmK{3A@!P12PQSX;3VBsP0GITmU9HkNkk^Qs{W&DY7Rg%
zlL?BvO()EfZI;XyTC&RIv3a)4&Sr#R<`J7Om`}!e&uOJx3lxJIHkIg}ktnv2u0O);
zD>9sYyF3>9ay!>^tdeNWsmk?a18PMyP}>EKhKP)way;byEz|a5utQcf$Q^#R$J<n&
zNkUBn67z(A4!%dW>iC6J=AZ$QDgda}ElW=-EG4tSn4*R{agg<#=Z>-krU_d%T|zVd
ztg@dn5RqRJS1fHvj*44)#PX`zPJ&<A*TIkO?&^w9vZhS*oEfYQ3N`Wo!ahZWuq?);
zHbs6Ie5<A-E^U^ZVFNm>{Y(l%^?bTK?^UaD(ixaKa3gUj!V~b7r`+waSk{@m31}DN
zH=UBvIQ;M@I9^?iks>Bs3U}s&TC#7}t%~K?hD{$=Ni0=A9y&OP?3-RDg$4<5HX%|1
z%!o8uDAWePtC#>aK+3-kxves5&;$@mJs+U@QTKFfPXvtns9msvQoq$7C=SuEsx2hY
zP*ZR>$N<?E7S_%k0*c0vg@4j=@7_Ms!)82p*I=WcvZkai0R)noj7JC+)vSC95&ROh
zhL}jK=1K5`pl<;Tj#MqU?mLHeqU@|Fx(lqtKT#qQr%$g=Q8PY=dViH?eR&$2-6dLp
zhCHn|ol%h(-_UZZgcb*7$sj8%P0cmFIqnz-B6}?@HwegQV>{K9FaTvq%s=bs&X(uL
zfwPAfAk@++);&-<F}}>2QE<f*-laZ@7zylj*Q&)qx>kINws%gD<txYo_2)dcy&k?M
zbd_%YIG`upVS)Hu=Nl8Ql_xIgp~N)Htd4w=C6GSJ$_pdnvScY$;;kL4V~I%`IvodS
z3V%+W=t|PxGX~;(wXq(Fqyb%{YAnl>4N92YsMyd89XWj^xf3|Nx0Fb;VbBWWvzLSi
zqK$Q_v47pCbQxtfnI*r_rl+p<JMH4;q&Q!P81%`Mp%osxEXnkvryd9_Qn(bjdbVA=
z@RYa|7o%!@b$~bGuyi(EI}3tuaihm)+qAzlocLq|ZHMxM2t)JO1&csYLyU9r#%8}S
z+>o2kb#sznQVctC3a-wQVZ-@Q1N`=M3LvGYBM7GNX=6;j#J>2p%X0F!ZAt<sSkP(T
z4y(g^WeIKlB+0o2vWVi}+C&u^15$&4#O#U^F_3APOFzx5C~!Oe)D>m3KTdfFXT8P7
zR_DU1V;y!3E91ZuTD$y^C#F<Lp8-#I$MjyeY|$|*oA6kgZ6s+dHU$#ZGSuUrxIs0Q
z$Dm#;_Ii!8>70LIlds$kT(Ed&hkpJC{q>#Q@uxV(WN&ai3k4?l=EJ4;%(S(YlZrV)
z7K+xcogr~Y^p8$`dkdl2+U=(|GK>85Y4#gg<wJug3}uJhn^ne2lGb5C1ITcCdrM=k
zw|!!XzK+=X`6|WHkDEHANu>#fAr?#@dABK7Eh|Q<h@hnX+fTBE2@fdRy(gXL^^A_S
zrW8xwbjtk2_Tt9{cB#8gIoe;`u1@U$0t`yWrc?%7=FZVSTc)^Oyw!=bE!dyQN~T^y
zB=VjyN2LcLxy^Ivp!YDNE|u9vz5?2DP*ODogvV`xx!Bzz4vECtT0C1}l)p!`Eb@jv
zb0Ja=T^pi7nRal$X&7;mniD1wT#5U>i$e_+>tfT#Eg@}ltESoW2SZArC#S89F)-8D
znp5GP6nAkEG1p6VMbiv(6ozPx;!1O*b|SocMt-cwt=TucOP+ial&@*cE9^UyPf7-^
zZprblbRvnqX@z;_o@94gQJ?Bn2Xbn}FX*f2F-B@TadHuwf5B?@z%ht@F?K1`dT4PQ
ztyrv5U}Z{2Fm!M|&wN4QLdl<GwIvh+q?TJaE4U={)bNixQ-yU;h*4U0$t$6ZR3CC&
zy<$e>f_bXWoY9%BnCDx{+}*HFzGZGmQd4>Fx6G3AgT)WM<7_pBc(~yj+gVv)&C_(`
z;@buzPT0~NG7upSrK2~P@9qtL8RaEnL&rz!2~=hTA_8RrDiE}JHOoGKmiBJN6#?Gn
z%`Cf)@DTqmxS9v@R%{6pehX=g`?;<I4RPxc5X5`&z`DUw#%oH3!~58V0HQ?+01u$o
zP{a#l8hgH!ER7kFX?$@KD7Z)h?WF^O0jW+Qa_S_7!hm9ITOfu1_VZc^Cb494jFy(z
z7Ri>7#B@`*QgKwXl`_1G^n#?2HcRHgCCFUwZ-M9zH@}erhg8KcH<!U_E@S)Z3FQrK
zlQ4YypLHy1;8-YN+-8n+tXYy6pX1gGUWUn4a#(N|-(iqK=03qL<~_~DZis44A}zY6
zxtgO1DgC6vLIosIG&BAo{H3eJ4nyV5j1SBJ&xuW0<k5SOWoSBQUx1Wu*W4+qT&-a$
zeuP?*h!#<7+4U49I3}VqHhAPRS8P$`4gaFHr^v)<;~e2xb+Y6(D)u?M3>>M7*{xcQ
zp`4IrkiDgg|4C@DY0=((T6YmWlzVbl`}$plC!HUgKa=}r&*s9*lPGyE<qB{d_eAq(
zcBW+Pl*moYr!v|80Fz;Ge3Kse1RnBiGjel=nDK&6LAEZ&QW~lSwMYV0ROJ(9SP?1I
zrBi;(^AC{XO+DFw!t@(C+hCfe@MIt(MakPn3QX;bj^6UFNCl>3Pn(2m-B^4}0&*;2
z4C++m=C@gsZ&UPqnt=tersa?6r{DSl9aZdfp#HU7b{ngF_e^A~*L{cD9Fe+fk4E}{
z=>c!WHBb~YrgS9FtoW4B@YZd3LmO^<(XeT<G?dWAw+jaI8h^*ALuro3>8d~IFt&pZ
z>of^EOrU73m3jIy=nxjkPM6KFq@<vg3lb7-BE+*?;tH8`t|iy2ZlK;5yVlM7LoS}I
zz1{G9&%S8dOiKN-Xc1?ajC&fy&tD}!-=ZQE%&`bKC^0i;HpXL4nb{DA2Mco$$_DCR
zA{H=J9|tJOA^0$&?3eQM;F_H@&1?;Z&08<usW#l+_<iRonTE5NZfj+dQVA|M*>GmU
z+yMXa#ou<CU=fnqrl&~P%5QBox?PzY`Ir?mS5=xs;A9l9Q&2QH+T5xLpQ?yZ1r_O-
zKUs&tOP3c#UTezSt!Cul@|}@_eZ0Cl+lQQ#R>LY>F<AyTy*f{MS{*VX9EkYNn8smh
zkHk75sM%4#>c;8Dwl1?hGt5gvnfXFM%=~B?>xamMSnGU~7+VD5O})w{2><PFBvlzP
zQ60r6TAVW)Q|}_mqig2?IzYY%Tg%1gyPJZ;D#SLZGb&mr%t<;<Tw7#m#KsC;4f|>>
z;8j4H+NL~mbZt%ty7tYP`)ZRtTwL~@`d&Cwyucm%d&!0Ut#2i_-*TRwJ7kp;$pbmD
z>NI9o2RBaksM0hghN9|&8F${J4WjVG3>IIT$)*;`Cc!?2S?J;oNia1acMDOm8#>zt
zfhQd&;~togYv-@cKb4sUe<g5{aR%}YIU_rhM>`09xHAvyXL4FALV-uO+;c{d*bar~
zIWE|>?v4X%w_7X%O?HFD^W#C_xH~HlPHV3f_LV=oIx-8qXxUTR(a-4Ub=J>zr&@<g
z=SBTX2|J%2I7zlDPoO&?n>t$AW0cI28yE&Uj7OQGpTGzfOqU-lIRU$-une-K2$#vg
z7o{NNA^KX`YZzF^#bV%~1>ne6j}ylDefA~C%U>MGI^V9CnHHlH^V~tVaT2(0qnoaw
zu|v~yZ0i5cyy-yV{Db_RTZIXejAKh=OmnfKsjBjbdsCrhUn&%pEW3Nc@kmou+ZI{l
zB^<%-cE(BOv7xZWsNshtlbz}`(C<=_>$N)3f0Rn6lejkx$?~YHEw*T9)>Zz;&XW#r
z<(f1waT%f+@cB%!q_v%De&Gcw({qL>S8p?74ibt4z<5lUqp{FJudZXO5M+@Av{|WN
zd;WVN<1Q-6?5N;9HJ*E>AsC2@i2B*Sl?Yl)1M9F<YY&<8r~H|_&9$7%GVWEGTl-H9
z+W-lo|8R7%&Y(|SF0gA=M!ys@6M<4?N_c9|y6d^vG?gr=HaJdF_3<J(Mk+i3qoXG7
zkStm;9&Kw)v==RV%RhE(Wc`sGeMVC}`ed;O&Fs*~MMAgRu~&d8hKlKLhr^%}IFi&J
zZOWR|rj!BLF|73dl=+EahX(dRgdYc1@R_no3IVcM##AemF4+zRXI_dWSJ*I*WE>~w
z5Zf%?5lJ#t49ioI5m6LZj+r~<WqFA?=j9(&$!@Ll2yauF1{S!x)*cT7qqY<NSQ@Cp
z6<x`8){=f?YP;1k#h_Ss<uJXXiO<EnE9B|<nu64BGX9g%&E8oe?zXDWXuv%mGtY!$
zA@Y3X-+J8n&ZE=1=7s;n$DDXR=HUO3k2xFv$>`?qY-k?T`W%o!p<nkbZa{c9WkxMH
z7G33E--qaUzJpnK5r2ijEHGrHFaQ5(J`9|weaTZAdd@KWNevf@5Do<(w((67QcK2Z
zjFzfcA~A0qU)-EeQ;X5>Xdm*%P3>Lv4EhK>IGtZ@$1_iisni<1f-)T(8Br`!8pJGJ
z;?7HZ^kf^dJ_X-tIQW8ILcP}S(@U(;gX|Ljv3%pFK5)b`AT@~!Vf`w($zP)<3(8X%
zM92EPj!*xD<hn<{%>C+Tdg(64S%K+iA3v!I)rT%>%YEP`{o(TPUrbqL@8-wMii!uF
zE%$X|K|67VPRPeoo#)CR@E<+TtXksVY4msAtP53b!a`IAfgu+Z#Yt?$E=|cXt34}m
zo#a05rQ)?+kClZaS8I1Nc!E*DwR`oO)=X`!Uun;aA6DF666Pm3uD%$pBftQA#czIs
zuJ{C&h+5UNR*h$*M>LZpjDjJ0AH@aA*FSxk`5xpM0bvP`EB8{bCikOdGe=oG;FXhX
zX3n;mS=(mL|DVnLe>U?!W-|*TJe#aX4vT@m167u)|38cQ_bg`o0hS|&SErZvja1b(
zn5p`8dnunFCv_gj5bUOPT#lIwoYQ0dKW-=UA?iu7uL2O;-w8lSmNRKPvr}quO5yLs
z9(1h!RHo{0EthRgM(SlxpbyDNwNMgwY6}|s$v}OiNPv}bY!=lT2qpiK;%-)CQ4X&O
z7$~eM?Ww3ynNYh_D<nh#e~E-$oUr|;5kHPpRe4NTjQiSVX7IK{P%3b=@`RC9%B6$=
zJJ&RLa}uL4{2`lX&ZVOsPQ?fS9Um5=o{dzoy|zm8GFpoxQ00ivZ*u}~vT#>_A2`J+
z+jj`+92YX)d1HJdFRp(bE+VJjp3U@f>8swbN+W`ML>wI^@SCMPqpIDp0TlCNROU(j
z5eY;oB$b{7b`8lb5!sstmhGdwuC7%au&>R-i!zIX%I&Vuk!**{viHy~e3o5^1UrM|
z74#x^4$7807&5Kwj@-jDgcEspj8dKkf5oftwUk!$Y#P0#4sp4nv|hrOVf`F9fW8tc
ziS%3c^fKw9Rjy}_)!#(z<)=u)d^v_k#Je08SI6+kW1w&ttV`|^yJGI0)kqRl=_V<?
z>c*_4ij`AO`ioa{>$H><m1rhV^zX*ZTH?x3;W|erdqD`1b|l{tQs6KY#cdJPxp#%d
z&$_0M4<7XkkrXi)(GBXR#<s$6b~WWxq_J@gxwbeJ1QXq@_H`8K#VAoW|J+pA0t~)1
zh67H_+KptDYXW@RAvTm^JDuzC%q5eJwvP>e2>gE4FuWe%XTu_fGKo+lbp!OKbFVL@
zEj@G$jJ!ZS=CGkW3C0q}C-Ayl0Br_u%2E~tL4wHOTeQ{*FY;s4aGY(#0QZU{ekhvS
zGo<!>@VtnuCkTVz-39>9ePR}m-u}*czbuOHE*vJvO+-Hb4*R_K1(wsS?!4*|TXh=U
zHHb%f!bZ<dJQbYBz?lg9q^`~)V!txjT-KM+D6-I*73YMm9vakL!bXq2IKJFR3U%iT
zomPZjL5LjE^%TKFEgz|aWX0eCb?fegpjeHH`#{%aZYnK9)8-wrrl`uYoDgToylM-$
zq0G8YTJ5rXjsVp+o&^q&Y*L{+C?agz8%0^`Eyh?9ykp$@jOcT-ZQ0#Mj1!E=)=;ho
zfgV<;%FQt5!C1$CHmmJXjYa?%s!b>zL@kO8w>9WR>3Sg*f8H50UuMCMD-x^msl~Sy
z)>tCJH+Pl{HLrHR&~Q+D6Y_xFo0#VzDRCIh0$moSym}P<Yve0*ny!%$Y=S?wPJO@W
zCwa+cKB;63zRtrpbOQUJ4v*#X>87)X9v(E}pnC5|rWBdzvTf_iIG1TP9{NnXBXjJ6
zdDeK<Zq*rxOFJ$LON{maDAK1y{;jYE=|%fr`=B^rnx+F-VDAS{5Pn!^9Zhb)k`ff@
zaLgR$^P#X-P25*Q>$m#@^r$81cR~y5K9(30SuGr0K95fkoafnP`Yp_q9<R;r;=kz$
zbBo7}xQnWWW?A<MW?X!pi&3Wy!<5*dgB>b5_bJQ08qczMY_;M+`PE5sX3_*WyIeCn
z?D;7;w`>CUA!SXHl)~;j`;04t!`fe80XZ!60!A>4erkvnmsVMn<NM1NzDI2a76{m~
zrJBG??0d}i%&9k24S*Y(r&w$xejBQkBw@NlTE5vJa9w$!D%*95@Re1yDzl%m-?yo9
zl9y@OX$j_IXEqKf^J^?;q7gC@x>Qu*MG=ljqk2~EGL?jeQ-PUfZF3A@6rU(&s)t8R
z>hmksRRsQRe`3ip5Q22K4Tq1<mBWoG$RZVf32P=6uuMqA;|aCRGR-uIyUV&ktKk77
zxCl%uNhNb|N#jcDXv_9&O`MuDZO(mt|HZ7$l&T_6cWDr1g(tXahIt6cr6TR|mf-F)
z_--&SZMqULx@=R#TGQjwQAucx?j0mzXRBgp4d2N(j;4C%Y$?l4IZCemtm5~l?a>t&
zoJsv*yo)GR(N9g4qGUnp?@nJ`|1FW2|4S#Oq2qKJn~|b?Y$^K^DwjYMr8~-*N30wX
zQ@{^Nl_!9;<W;6CSZzIJ{*B2nvL?fXm5s^pOt{fIhSrflck19?UJlrtITa$qA4C~C
zZMr#OoYK-tQ(lft`W>GnMBZyBXP{3@^i}QYCrrRRjtTwE5l1|=Qf-^J&Cue5P6l=3
z)-ZG|ruXN7#3<2O$4I3sj&cs`QjdTXJz(*uZa9yqoEN2!mZdf1q0FO*cu;X<9(P1;
zp@eromEGSkFr6Ej;xU&Oo(8(MOpa-!R24(4IfT-?{&ICym3X#7%1*muHq4us6!J)0
zkvcec4TK>BS>Y=1pQINn9P#p%$25flV6X`CJL{?7a~dBOIAcL~vM-KU;T4(W1!i=5
z1=R<u_IS+AV&%FSXvDSGv?s#$gxLG_y)BI1THR~iA=E0c|FF8p#ooqx9kHl@>L+}|
zKY#!f8i8_KdurgLhZZMs7IDuDOrCt~&+)8j8?V{SvVDQ10OUEKq*2qMJPS7MYW?tz
zY~3-te<Vc%R1Ir1XSBu|4r)5>!<F8cDC9G$vHOxL(X5`0j?90N@$zT8Bs{y;39V=q
zQNjxIR_@$-xY1{YIip!)w=l@O^Q5D*QL#bpEHp^uQghRwm5$>g;)?RxR3*kjFD<6M
z4)nFv>({2%ffk@jyVp+1wW}%9iLmvQ+1HNAwTr0?0l`_yy>>|3z10J<zO}D>))($>
z^=#TZ7ZPTZ!>vAa9Gwe)5ek%B{r$Jjg|FnJz3WGx->*D6^R8RWzF%qaP$469tXv(T
z+?rgQUthg8Gh@1|*%`ai*Ug?ZyWKnLV^dN9U#L5W!vkSkA(YjFU#5Rbm3PL!^aD)-
zbL%a*o@upf^KAC48!R!)iiHjbM8j1TR%P6Jnr)e)l&MijlX=;8!<5OQzysxPAe?o;
zl<w=hw&^n4s%aP-$}QR3$MY2@6$kn|-w?VNR0cP1D{9&!a@*icXj6t~iv_%DH&XXK
zdeJlSKvR+#vF;Bno_GX|+>p~PxZKuV!#8aa$hW3lpP!j2UF0+p`W`*$nMs{2vt-|Q
zJ213w%1!&FUFuK0-y&uBn6OAx?#Q+sQgV<iai~`XY(A?zE?r^NtSqtaZM`r=Fr{~2
zvk%tUk*uce#-VBwtD!O5FpIyWR>Z#dwpA-Pxnz@6oY>NeUGU%ismau%GT&v`?Ypz3
z!|9~k*Vna(iVw$crqY~5iQQ5cnbtMy`Dj32VSKVR8(8U-^a|w@w`1bc)I{i+i4*>6
z=)Q=0ihXrty-xP_JFim>5l^74i8d*LOD?M`qf(>5cs1dXrKQlJi4R*cJz}`ckBCb^
z?l*}};E;q?t)=Gwt&OWJ=tAW1WM`TUudJ0Pmii11Q|B~rm9CMI!kpaarqA*OW<<fD
zdP)jv9JZWDn(k$2q(Za1I{0@g(2KX1gXV^bNV5tT>1nawdxQ_;?0lg`jzBpC4)luS
zz~p?9C)XLq{^e{XCVr(tU&bC&<kmO&RGVN3C%h-gawI-EN(JYy9^Jw<nT|!Icx(rr
z9L{A>pSSSo8@r7WL4)}2fw&O8>5>^k9LBRjua~)h|5K1gj~0rv@2y$>COIj?Gdr#~
zjr<CeES1O@j8Go1dvHST$)u5_{WBKUIMh2`dCRXn*WTmyx|`m&qTMXYZk|@=AykAB
z-oMeyy<=gZ)h+QOif{g-ehw5C+QTPXySI~hC;3AnU*9pH%iu)VPtM=yWt&fUaOMr7
zsp&`O!MS%Ll}#S(278ua?5{R!l^HkWFGU5f{QSrjSc$avDkBK^kI3Z0Tn5%+6Uv<m
z5;=O(OE3GboM7n<km7s3`p_g29c3_mTwGc5L`i)AgkM>`{d2;JS-|hqy%2?XvF@zt
z;~w!TVm8{)WMVp!)}{wUy`7L=?&Vx$wye1ci3d{i5{&qpppA{ptxE=G+4|(d!E!&f
z`>%Oq(F@Q2bkSouMvnX)8jqosu!R{jy%$mqsIQuii5}SD#BAi;vo*N~2Lhs;uLDaC
z@FacwJ@OIDeYLL$0Sd||6B`bm^ZFtJ7I{$W&AA$M{q~zGflO=_rKCuH4Xqt2JlCx%
zjJn=-tFJ`HPH94j*q_SI!sK}p(LzsnU&i0zBxbx6^fF&Er;7+`o?9d!E3z-^`eY6-
z^Km{f4{%Xj^Eo-NFM1^2hTEytSl6v#614~D$XOnRc+fOJ@1}h?F+Yg%K679uHZ?Sp
zKSH5B4C>mlpI3nbHb;mBE!+^#I9`X*jnOWUBu>VG`A6}OW_gDgnaa+9_rs4*=^YYV
zm$pXn1&Xb_&~>s6yK;B>t&a@^miV#z_7~Pz)4-(^2+{wO_Q7N^RxyXVfj|@%yhtth
zX{CW}AyJauk!x()PB6v$DzV^`CuM8G{9m%*`9HVdoLcaPK8jKct~~kVJ71uAp#vvA
z&Fsx@eW|HltkJHglRo2^n9@O+A$;GaMz++g5V}3{To&%hWm|NN+n&~lx!s|@R?E}a
zqh*w*|Hvj|Hf9y*i7{nr+r;mkLBQCAm6@Zm{RSR)wPNDr1?F(@2uTRdGymjq#-k%O
z$}4?jXinBKs9xKF89Oqv&nr_WwrA1hN{Ql%#OKihr<%=$<JTOP6ZiB{Ntrr*`kXEU
zQ&s!2Y=FG3J=@2x_z@$Fg!nn0jyfy#>p)S34wz4GdKzxE+0$wK73v6G>2a1#%2$lD
zSV#5v=a2Xzq4MOPuviDsuSLPnBx_znV{Y&ih<`{7r;zos-#LDsY0}sGe{Rw*Jzdv#
za*>L-esm@2m0QASj@VtI@;aP4V@4VMii>#mC3=H%?lb<W65RF{=e$2G5}i-EoRX$m
zKY6D0zcJC=9!)`SqFuMQ_@6p5(iA3DI%Yo3UlJFb5{n}O9!99+><LxKz{cv=KZ^qZ
z;&H&9ob+)XS)IDN{Hh>zSgJGT-{;!O*oCVyv#Mu(1h(V4tjE%x9|tv_H=<lm4*zj5
z#9-(Z0a^>?-GLL4dHP%PF9PS2BTv{XQ20)YhRNue5Q-2z{YW#XNLN3!dLURfslQ3<
zbMV_Qm@ja38WA_TV~GrFh<{zz>Ak`ALt5r6yizIZ8ESN32TsoIcN-;vdvPtsLu!2d
z8@%(o89pB}F&G9;Gy2~$G9!UDL{5}9gJA~JP{T<;nj~(LN+F1<XyHiZ?>#mOP+$Cj
zlxywsIIyEyxp811C{$-}@C!{eD4b(GQb{#pMbO&$J-4Sf95uozuxxiq<G@L?se9m6
zdbWW*!?7GJNz<2xnUvW#Rzg;udPREZ>+d~2vM)#1{P<G5)=tOl;<&W<hdT6fb=RKT
zg%pBpG}5c2u;*9T$$+Nje`riV&5~R6t&<k4lOOgv5kuu%E5<D)$4%F{CJ)#f4w$yd
ze}AOJsyRonYQ!iduN%w>SangagGu1tQyx=GOxBub^%GS1q0FwdMHX2vvH{^YWbGMC
zZ88abD^{H5OXJ|XEAJex!K-f%Chp2B#)BFuqR)ht7g$-uBao+mC|}{#!?(@zKed-I
znlJ*Hixu1G44SZ{t2@T&E7ZNHqE1g+b>q&LbSl-8oE5EjH2g*8x?^LtEKsHpL%=QK
z#HJy|t#O%l+D9mZSdgOr<#@NBeuI9ntLO)11Oa5?c}=$2QF-_u+G8rCtJa;FAYSpB
zqj8|Uu@|D$(l1uH%_fo@!G*`n)`Xo<x?G)8-ehEm;=t^3WEM{&hyqZs6H@N>ah^%d
z$QU2Y&8t_-z;MO{_3Ybz64<iB%~fm)OkeDGT(mUqA0mDJH}Yrrac)gVG+Gpy2cRUb
z&yU!b2{+{ZRv$*NM+#8ld`bf}ChsLW^@}NURn1N3|2*{+Sw`>G!u8<x3hSPG>lN4I
z(@oG%<4gWq!EZii$DI58452g7?~DMPZ12x=ds=&Ifknw=@;x=I_{k3vrT$KaG8%^Z
z%dHe&I=snoLaOz+{?F8lnaN305I7<kM~IkysToT`(cB@}a*T<y)?mx+Ni4%BS}-u8
zIA_@M@SG>>j-nu4=HH<m1V&H=ejiFk(BV&4<aF~B;<P{L{0WVkADx2?vOVYFl-*+A
zMdxqxQ*XoaBN6${#mc0?);NM-opRsqv?FCz=?zbO#HmO&AJ6n32j`vJ{HCWPsm0{}
zKWZ$EXJpdB)*YEcPh-of$t^z+wZyj5@;o@YEz>3FAdF!ZIwY1o9rd05Ozg`oiH<M*
zUnx9$ztX5cLZ<s1^GvZ{6xy#UNZn&>xJ9d*neznbxyS=cj}T+z6munt5vQz(%n6;z
z+Sw!lt}b#@sZHQ8@~X+ghnG7S%#zXC;9G8Sf4~d3>N*|6EugnuM6d|-smylp#}}JJ
zlYi0*LvV}qt0BjBZ#L%+u1GVY@x0uC2cy8Z7twMC-Sl*dXP+`Et;tQiR->O?4E2(=
zV(&Y}wAe>cx>~0cN*xyG+{nF$AiF1=BTX@+J5K=pbwB4vF;sLc5rS<>oFxB>XtjNE
zLNqo>QTcK&k#!OsyMo9au5&<!3pMAS-ktA2j`VZv6nuxI%?OSS=%vgTWFdW2QpoQA
zCJQ@FMj)p42yNoCLHVakZsQ?r5UPs^=M**Z`h@aCQq`~aa(~M#3I1w-Aoaja(|?Y6
z?HZQAQIMLcwJ{;pY3Vbiw7IzYmjm<=YrHhkFBW5nA8*QXSPSaMw*GO8qZNr<pmXOQ
zON66M$$-M(k5d$V?F<4f+Z#tVR?Lkdk@(1E+!yQ`4Z{kIe=l&B1ab-Vg2Yhy2m(rg
zz!96h^La;J;wd>%0W|Sb6|P5w()+S2I9*;9wBJQu^jWMw$+lBq-(*C7HLxFXp)%O8
zx!fDXtW1B$+k#wLVJr`AMeEQeQ(;d8p&;%WzDSBK$aRfkYeq_Ggm3ypw4}tigcCK!
zFLCQ1!xds8wvVbde8?}Jj#1Vp;8a%}@D*kISu+#PwGKQ)Om#!;E|NMFH^fBHqq8Hv
z6N@v<W`70;6c?5cV3FPwm(Gx_PMoj^2-w12hjw()_2m4gkzPB3WdwSS@UEvA{TSv)
zp5EAiTU4OH=k;>;G@T6w`N*;_E{@`|tX?QEP8t9qZX}2~^{9v@?&ZnYM)fv5!7bSJ
z&kN>ueDs@vz~76U8c{%k!+@N~j_MbRH>%c=9pn0-U;*YvvDmG+mcb$&PZQ#oEe25!
z(?AiSk(dq%ejHDK02)JBRp}2>_yD%w{kZBq!%6h%m8^EGoSk1k8h!X~3zwuqc_5Qg
za~vtaWmz105}oxlbc)X{V3uIaQ4KG!NOQGvUC4FJo2CtxFjd5oiB`Qozyw@S4}HGS
zjRj`N{fNiqWu1UmPg}IH8+h%H7gy97?!-NHuIO(ezJTe-_MQZErM1%FEqU!mUb{7}
zh2kDj7jG+MFG!7uo=w6mI^<DdnM5Dg)NYE!BfE0`Mfw75?0_Swu`{))#E8s#XzE-`
z2%91tBCuc--pb}aQf~-OfQvjFveJ>oJ^+bQ&$!2-c+S7amtGn7NE-et7VDo`{2cT3
z)B<1%mnB^nK1)MOT}(;oVe@cfuq#AzfL@fk92VJ94LJCQ!7Y9(&uANCAR}|i=TIxQ
zaJBz@d3!B2w+u?Y#E0jD0V_uK{p+a_$t{MQ&eP1wEBN*p=}cU9n(jAu7kqQ*tgmWj
zeQW2NE}w6G1As?7ZXF0EVF&%EID<p*mpp;dG|LVu*8QSRG%qN&hQ=gHz1Wn}w1p!Z
znnxnACYM_wBAs8G!8|C@hqc}qsA-_joM`0UmWr@b`*bLi=(7i;(yyoOz)!Tvambxo
zq-YuqVs~AG9zVY~bYW~bzZe%<C|7MbR!_Q%?Y;TD2EJkw&75}+-(o%t?#5RaA1nLA
zv*pEkD}w!%)ndDK%n=j`w9Oeq97}@vm9%!k7CKAIFrm9CrbjaDsJwd}3EHjTK@(Q4
zn5UDr8OFfG2A&$d%lWF=ei4c;DvfDz1*8=8eW6BrMN6i>>vIW+t(o&$V&QLJ<-G79
zv`iB+Yhp6yv}hd_rXjno@+~6lc9wa(O~KNmF5=ahExmermbsr?-AVlv>&cm)#hDyf
zKeCsPBfep8a__WqzSo^riHISAiJidO_2$2P6=&PziZK!I`Y-3r_U$hdteu#Gv~_r+
zxvocKD}5woQ91=!8PW*V0<G|I=73zxPRWC4=5k#|g&ax@?D5N)x^lS5EGC9}CNzOV
zu%=c7eraHBe#1KtYbK;j#;*#mv<^ZK^NleL!!!E^N-W&7)U9D+MWfpZ^K*taEbw({
zp`9D5>Ld=ap3BMMH8WL%shs1_J#w@F%*x5^9M8DUPDkQJR$~E7Ux{|*)f2Dm##HI>
z`gi(V!L4%U(~K07q!)oz>Wd-2RozaMclY=mXw<guyB0#bkE&IF)K+lj)=_e`A+$?y
zROl?so}|Be#19VRL(%}|qEpV0`DaobUI8zme}qU&GuO21oCzF~ge6ubHyERi)M>%h
z-5}@Sw45H3v*$Z!JFpebN6cY~hyQM0=6`f0Ga8Ja{xr!v`vq~`8QXU3YB`UzW^jD_
zcKW#!r=KG{f0L6ixSH>j>8WaMC}X|?T3&Giw~nlnk83xknY_`H!JeII2D`du2J>l{
zXM;GAp_eIyF2z)yog6-(-u%NKyNpiL;2Mzn$gRyf&tWQUG`4t2wUAe2D<|cgMFI#q
z6|I4gTK4}Nwq#*_pw{P}j@>W4s4_Deg%F$+szh<5o_zV~Wqssk6_Vyy$cNUL?v7lt
zmTBc3U)WmKzpLQW5i8nPsA$`X-F>rmASBrD^25J!BFH_>@GH?n)B4n7n3oVgxwyCx
zB_C(F?a#YmP_Gr!iGseU0L|g_Yg!ZL7^t*DO-ilC=YVFFpzEWW%~93ZY|+ozZ?&XH
z=txR~7tiF#b-51qV|;SEb;w9XS_?^0gz5=dc49EWHcK%X?Q^KnJo$f$<obgn%#qWL
z0l1oTX_h?PB?;UwPKjSvu>S~3_VN+Oqs@z<QZ`{$;zX_E`C>=5+40I56cG){OInf_
zBSz~15t@<(t=euIIILacHJ$IkLIh&XuU{Vpe9Tvwc|Z~)Q*1mekDZw2p@HZ_Bd1vQ
zxZRN?YM2GyyvH4-HLl_&7N%e9MV%sl39Bz|m9L6SgH$g<5z1pqa4S;UC43S4h2ZyI
zoU#F70jbwh<zDZ!^g}0n#pSWMwZX87@s{%sZ~%4>iB)0XV<LOr1BE9+;`hNiNuSw#
z7XSdWnYnS!ESXtg9E2|BPXi@l19zF=MP{HPpn|KXbV#^_JQ()KAiC@u1SIijfV~fl
zI>f#ZgOf~!PjP2Iq|r0qta$a!4hL?%**weKH=F6#eNu1s^4&KZ2IM%eA{{kSV<)~9
zn_lVX;??RVH_}L|leF9pioa+lUy}OR)qOOWDv2KVnj38QWkP=NreR*y3fXh8auKt;
zqI}UPuq}p~-XC)ngV=GW+5uvoi4`=MbBBJzUo&YrPFwPvSp^z<nZ=bbnofVg(uio;
zFHFrj5%#IfJrO0Pts?2iQCat3aFT*p?vzofCoH;anj#mLfWjp7jR6kiV9viDdC{#Q
ze&yXDps}(2nj1NE^%64twTUBX4XD&@gQm+{ydTb($%c9i;_pEo0sr{OZvrp*)8y$2
zsim-?+h@CWd_=i=#|{0%<~b(6bQKoLFbHV2c0*!7`)?-9H$I{@D^XGkZWL$=@)!v<
zJaIGoHngRGQb)8I@zlb(zh97#DdUN6nm8oX5dI}>nJ)`J3x;I0tLdQW-b>?PMNNSh
zU!?Fl7EWS?kp_%=_GGLxB;VFzR9yyoe3yY+0%?xL${SVn4MIa{z@;}d3vqlm<}Co<
zm_3#GambRq{h=IM(P04sgu=}9CSi25_L@8){O>8f3;aHdCKRhOs}2JdYr44VpW@w0
z9#DJYf5fJ6X!!OeIA5T=3v9#OVCyGXpSsu6Yl`{?_)t)>H48j@ikKqBu>`AJ{_<qX
zPe5TwSH=l-<zz8Peqc>Lu%;iNzQa2iSg|}%_~dlw3ZFD@;Z#;a_O0GLqy;)q!GBx@
zx|4K{w%)(RgpMR&TD%0D-0oSGN@*7N)5xx{DlIVQq4+oWx?)0P#d&Is#JrLO9_Vru
zxF<%1)VfE5<_VZP+<Iev3^O~V%$_co9hE^fu~_{`>O78LZDu5c6O&KSaqmnVTV2HX
zA++RBdXcaMVf);F+NvdTp4n=`kK#2t7Gu*&>o)MTe0a^#D^Z`p(x25+@hq<}uB3!@
z0?2rZk1-bd@nxD~-=)x(zWL~t>OFZM4y4(m*5CSafIl9^QCpo;8o%oBh+9(6bgV;Q
zMH{|DLqD6Q*aM_ZCGT_fEnzLyoL;S#+(V2yW$Pt(uHBHGfK(tTropI|Lo7^oZ)6Dk
zME8(UU{;=>nHv~~?|4oQS+-y@$l244A2#F+KF#CyzkjszGlEKyTcv%g&|;Ba49yjw
z^%})d`#@Rbn{hHO*CtSlPK?VN-WlxaAvtjI_v6g-7@+?Y%(8`dt+4?ULPUli&fH#`
za)ojl3sbxIk>V%%a8`%hRG;LuQ@`-Y`pZ1st|fF)MLtE)bh_ng9a~a%@Lst+(SC`>
z^2j3(`o|Y6+B2dDRVHFP@?fNIU6L%uddoe6?BewJaOrywL7_IIk>2xOV122K?_lV8
z+?+ga`zMdngYlv%Xq7_HVZ{?Bl!*0Ao)TwU_$mO$T5Cn<3uf<)l@P`eV~mq`Y7U*)
zWtUTB2{FkzM;`%ZoA`WuHK)@$KK4Fti_D~%5Pj(X9LIgIyw8uA!Isj1YQX*u0vk{J
z2WJN-<f=;7Oobqqq=GP|kG8y!=MqUGqS(rJk6;b-h4cAIG&Dz_Sm1y^e@OH(p3ACA
z@Y*pfvEf$yb2qvQtbIft#6c6H@Ee^uic)>6;$hfFH&a){pd&q^YjKSAX(hskwrObi
z+aO0?cz{c8xpp*_MC(h8Bv;1NP2aRJ&Og0(gmC)Gdg?|(DI@~x<~c3^*14?ggYMcf
zBEIXZo^Uwpkopy2p@(+dlE&%8Y8&DMK_$Qt`NE%$hL|+`^qguE%Sa}&*r4L>uGy*)
zKSnRBYzaSXu7vga7{1(I{&ld+g|NP*rHYEOjK>$f#TN}2`i~uH<q&qt-Nt^xWj+0R
zX~q@kos$!7e;L{JPm2hCSVuM=o-Pm%Hc|Y{r}&vKuaa{_d{%g7mCa#V^=n25MN~T?
z^TM5eSrMCb-Xe#~5JkZ|(B_e0b?{ToNRM6Ge8ETn6?_ZhCi`)dZ&0thV6nmNi%|^i
zLqn^sb|$E}oQK=K+Y}yTUe!dqoDo;d#PX{!VB`@q{fVJ@1^P!;qZ~m{!ZKJ_*<Uul
zFgB}+DMY7zfr}M>H(ZWRY@6}m+A>Ttf3T&9gopEP5{5l<gN!MRHBIsX!2oElOfKpY
zh5a{-qYoe6lTGT<w;z?Zeq`KsJ8l)@otQ}(FvXlD|I$%$xJA5iz`xtNCXdfLgg3rp
z>yjTsSC5H``)n9a_!;JH--OnYPcx-){zJ_aKxLRYmRNq|f4weAVG!sd+4Mg6KV9eJ
z+wvXX76kbp*6wJac1H{KI;;X-qS^s8Tln<j+jlU6;h9R#up}rM`3PiwnV3ED=^x-=
zxB2uT_Qt=@5wAPn^Igi5=;XJ7Po&IRFf(tP%U%*5OYSqt+}MP_vS;9v%xMrxyyap*
z!5zzsue)PHgPJ)Rr_Br5!bD(v`+`2u%eTU<dHc;5JF@CUwd;v#T8||fxWSUySP)C0
zZie3Z(_WE7>$j=iB2uM#a^I$OvT2PYjTj+t%M2+6*`BybSTU^IVk{0=P#;wBrO9mB
zow)I3yTT(-wPmy<fpB+i+?(F5;6gsby~IIKJ>4ZdUi!1me7ry!NQFrgPUzxb%}aoK
zGu}d}e5V#w9mf2OMAhTW?P!a|b+i4cotkDu2z3G-cj^S>s8wVZudYQbi0H+ZU@X*U
zpCV$XJMynhssy1XYx<X$*~KJpEQK(8Qcnip$5K7m+St<cfO+RjMQS#OF3wLDYRH0`
zR^8Q5CR7@{a&on%(+Cr7ZGPGnBJ!<H4F}p<1t+%?+Ew;)0$Q`SO4z$PCe4%)S4gu%
z$ArR*{^fCHwr9TnVR^yn(?AEg!;_Y}s`YD`;60x_$B);qdO#<>sY+#Z+Wwag=`3E{
zj+b#3byi6oAAj9(i8O77*MjUzKJa&Z!W3f5==d1UiNPvxK5Q8?9CiB$fgg6wkXBTs
zv#t3g{?_5nUxv^0IpA2AL;Fu1Qzf8CG&ZvzgmJ7RW);ZP|M(4b`!@P*_hZJs;Wl`H
z{;4^|?(8${H#VKvzS_c{s|;q}))}j0g>HRQq|=#v`ly=|wlI<KGbv7Nma)o-g!Vg}
z{P*ygkinKiTRfC_pnFnKDs8=|geX|7nI9}GOa*>H;aynSRV{K3k4<g38B0I&<tA_r
z%qhTjHq)Ux0gu^c$gEk(Yt}^V3lu2E8)m=cnxrHaOB-IVie1I&T$M$s6ZHFsaW1|X
zp{8L-<chNY)K-y#G;@o9>?0>Z>7>pOjO&jNft?yz45{bdP~rC*yZ9`(V~X5E)@bFa
z#<M@ODNY(F*VGj-FpKTx=W-aYnmENN-@?GsgthNxI7dU|yN(h;(*gp+v)wQ9o1&d7
zTk4jLl|Q4SMUw*&z#Q)xy;r6hb&h+ca@^}IBT4SIH_06t!AOzguI~Oqj{CF-9CmCm
zN5l|ZPXAX@jcbzO-G<-E@T$TwIZV>VO%DP6YmZbN9f#22j*^XVGQr}e<nlxn(Ewd{
z?{n}X^(I3l&+*SQz!FCv$JeDOnDd%d7Qg0q=k{5xqqbi<Sv<L8&CPR>T}cDe6aF)?
zqnG|Y?9R-WV4Qcaq!4#Mb%0RVyW8O-iJZ3-vrZf=s}&jv=}Ksg+nJ!tUw=*`UpCYm
zn*6Z~jHI%lC$|JP55Q#cp_+ePX6S3TT@Lr%$JepVIMX&}CbBAw`2fuvJP8#}n{^qw
zS7G<Xmg~W`q)9i*n(UDmNm`R$%rRMQ{v&GvSOw3tzP2-biFtvY!Nk1qnuB?vR5+UT
z|93ZpYl{ZhIlsodT-y@>Q!xENxr_m`<;XFy`_-;8CYC5&Wq%tslTw%+ogyd>wDhT{
z^K2%UY>jzp<T8L}KlMPZ1OI!y>erg2{!<244t~)ceBW!~2m70o=>G`I+xaJ!m;c{k
zd6yh5Z)$6*_co@C>ocJNfhq4SN9UCuOq)<2>j4*$(`4IJL4LJj#8?`2C@?pW0aJoV
zFXae@$9~BCdNs7>Z0g9HX>up6cXz94uT4t~LHXwLfl}K<va{ldo-MejNfP#>^gQyG
zrkX<G5tCpMjSr}r<H8b#qbaD#BYmjBVm6Ho#}r44ocQ~&nTglhyz4UA7M>;xEi1Fp
z&^04_+ybXf5`xGgjw9DXjEBj?Qe`Uy)iv|mz_v@PHKpE9Pnbtc@ZGHEKtMVcm^Z5Q
z4tU%n7Ma}|2alH;zcEljQY~E;n>3BO19-rpin!wWB5=x<3~=$3e`f+ieqlk#NX1dM
zVfqIR8EcZ?@4OAX^#St4zrKeLhLr&V=kEmeU>+4_xGcqc&?s<Nm9Z=lszh$Y&D^A#
z6yvp?8%zZ7WXS<`OQ$qir>^%TE-OeYKsM7^ZkQjRIM@e-(iUkjw1W9Q_%j=#bej)1
zl(=b*#hd#%CBf>b1cgDEC9mBkTsxRhkk538wkL#q`G|Q{%a2WJ9-6xxbIS>|UD2@m
z{~HWT@rA^Z2k0?Kz>sBF<Y_WTy`6?2v)usKULCg7>6u@N9}A3?CJH@BYOdmdYP<<N
z*POw|`c@b)PXJw9@tzwotecomxo5)}0Sj}?BTC_kdRok;90jM8=OWqoLjnS=gN+s6
z&a$--?;Gx!!_g!POd$b2HyPjf19z@H$!pKXwIUsdD@g&;0*e)y*SP(cdV)PbKSPr=
zp~sm)OY^eLay!hq%UU_IDc4mbH8YVylnb*<tQqWNmRLe<U|+*I6Ko+itU2>R;<a;T
z=4jOtIA);-Ezz^2+0~7Sd@xP2&&C6!gWyF1e4XtAe<RPLZlo@pK1nv0<u>F-l@xX4
z4hB^@S%53Pai5S?)~>^m<!mIa*#WRxgKSVDlL}t~Z~`ruDUI}rTZK0SpM>Y*cp^p0
zza3&-VCuxl?th#!f?RBvURD#9k1DG=%$e-~>Ol|><9PTBjmpgFk@%<uW|k&xxvqvp
z-G!DqvxG;$%Dw&2hb>H8ZyWZv*pp@k0P1@wwj3jUcu?d4e0T%@9Rq0Nvcq9WG7%us
z-afYM=VwAv*H*frfbV_NbL6|sqB&W`)21DHu4Q`0pE@ED0GNu76J~rGXi;{aH9fA5
zKtv5f#I3iTVwD8MF;7Qe1k{J;B)#>E1X#ogI2hs1JYeHxV8w>{kQM6A5mCyR<^qM$
zm*K}P<~7nzGtVvAh@!%-9Rk{}6|L9i?cdUkkP~q+CWVq8<S<`en)Tz7;S(niV#rzx
z#h|C78|x#nM>3v7!D!}OUX64~C&H9ELQKY*O^bsgHdVD-T1F)G71&Zc$8lh^(0~?T
zEv$@6{jAIljx)?YP<G^{9kZ5Ll9iOXkAcP4%xvypvl~j2wn7AmUWU0V&5Txor?R=o
zCFc_**OOdQ$22YeX(;kA5%(tAsHnzM-3R8yap}k9;*p|hS}-s@&9ZfMxQ?49ppTve
znrBy@L0LI4q6YBq1Dd@@e6Iz{bu4>!A(P%Yxc5NZs6~iUTV;4$tQ`p^K7`_)clNnv
z1c-?CAkA%|&6i;spD{>to3p8_5lDP{ASkt!TA|{qWsdAB;}UbO>xT3sg4F($mWA7I
z$Fq&a<%$W^96U(-uSdAAfx1W9t->CbM(4#2vz-rtNu87>mCmC>Kz%}pmd!I}eON;X
zVq~~1+jUuu2?Y?x3T~dtG9tgKkG<0sS-+he!X!j71<&)mT$Vz~nI3MMF~3TnyL}JC
zvrxSbw*=PI!AF-@u2rk7<RK6o)??sjk>i6!K<XC`V3NA!EVI<^8l^0Arj5AFNPd;0
z<%ct#V(wyvdiT;>j-rn|j_}Y~je~*pAkACfgT%0-J3YxU<6b@RYdN^7mFA3vp+)iu
zGPJ)?TbL*rEIsof{Roq7u#V4;vijz7YI>zc2o!pss^-u|!W$aon7%c>Tz7abJ3Lww
z0!`83GzVcOY9$l|&s;}{r*2V3MU+HXbF)-&Dv5zR#kZ^CCWjXiu-;?*PjD8f(!@NT
z99qj;HwFQ0XxRiQCfsZZ*XVg17`}0W?$pIXKV<XlPdL;XVp$zKFbkW5v}?+j2a+ww
z9GR!*4WU+(MV)uw^9M@LOibAP&MI2Xis$27YT6g*OUE>H>mo76rvfLvd{Krj>Ka_X
zRzK$f*qV>&`npwUtZ!_7pffrhox{SK#grNwT#;~vtGYQ#n~<b1?mV1(UKHMH&(3Kq
zjcA_I%;xm#l5=U_^IDK#*$#Me18R2?O^ou)-^luUBcX2M$v=H14#V7}YeB-oj6ToF
zQ)ZN-Iv&NHHD!xer>s8GgbU`E(^|8vXK8sQR-)(ik{KyoQR6p5zhzF?VZ}1sGL7A<
zS*M;_+sM#}zqCxBes6PLtg=wWIAFz-11FkUq!&y3Wcfk%vla2VFxs_zG|rR_#pgtB
zYpi;DU8#f2l&KgfEv;%A+)79W+MM1xhteIX!O;FmLp7h3$CeH~l|Sf1xruzXc}_N2
zZjcI*wNpKjb9r2GgVWg<$a7!~<Qo}CWYea{nf0T6IG>Z#jBsPbp0f8CoI_mJ31^x$
z?sTVhK#H_$F()ssjT_u#S^^Ka3><d-9ZpISFA~p8p8_`|@NVX`k5@@VLh|elo@t)&
zL$~FhpF}?rnACS!u1;7wm67IGX-jUb4;o3w062f9=dVAZa7K(c-rD}2(^c>fz9^n_
zABhi8$dan$WlEQQ!p}T=rw_%N_Lu9*<mIi6U!&i=atgHOjWPLATnw*j;><A8+It2-
z-mdsWk(JugG?&sSK+hWLH<<>A8EM+;BUQOpdw_4%-1Q9W7@1!jc**75k?+tlBrhz(
zA?K6q<_wR;FU2f(iTaI)Y`OW6HZ>oQ)?5z2Ml2Xf^vIOCG!ix@PsDYeY+^*QX9nW*
z;`==CR25EjK>t5|;hQ$N?K8GMJJvqQUNuyug`D^DTs=gHNK>r_aZ6s>m>m7%y$t6S
z<(tnMHvco-B=#Y0Z~`SRU%exaY&K=I{0$$mUDNa4hCaRFS>B0*5APWIYADiS&DvWN
z<7LXOh$%N;J7iL-=ZYwgMzKNRc=@~bgHna%;<J~+d!Pp=TeX*y;`^%Ubth)JwcH_y
zCYtD&3%w=fA8h~Y(%`4wQ};dFmvi>jm1G)Q2MMOOX%MM}MQ)AS*08!?IwXkLQB8<P
zJ;~jttwwFhBo%9Oqll>95{K>1J80vTGiXihU3Zj=t&Y{`Pn~huy0^FF?Vd3olI+4d
zdC;3A!?IfilCylg3A{#N7yA+7AK9~oTFcwp-{7p>4rIxABPv=L6q#=VN9@aPXG0B6
zr)huBwq4wMW|VLeV>?jF-sc_(R2|U7J^MkYNw_Lw3?cc{=Q=gsmqOK`{*a0zDSdB>
z0{I!UbY3=Aa-Pp|p0{$VATjsW0B|;>lb3cIExA_g<DXnIon|7npU4-JiSL`Vdr~cT
zr(8l^n!nb@#JeoI#<F;{%@L3Yec8efF`pYwGe(}Y=rc*pbt56*mP!%aZ5NVGZ>f%<
z^U^gJ;*fYFb^ASP@q2u`1A{at=)6!g_))pqfg{(OJlKP@^*jMcNL|jAh0BEOr}NAf
zQ4qh6v2^}G%GlRPYqfeb>m<v3+jE+)#LZXz%}=p;dhl9eyF}O_E>60-X|8fuZ@VX{
zrE#7F7es-l&NJx@hD-?jVdfw_<MU1pxhVpaN}&Hnc}JSCvs@6_EeVI}l+WDIo4!oV
z!kghzLYwW&QS)1E>Yt33QBJJ0UobQ1$IpC(cg0P`B-oH&UC;u~^@5q?FGHTRFNo6d
z1IwS8%@H8eEn?6z2g=5;N#H@+`>lLnUu#Glxit?8XDr%WvFVJs0H-n8pfb8N+t`Po
zMC5XpsKtB>OnZ@Mr?Hdxtf|0rUnPr+cu1ER*sg+6Ha(?UX4gw+45d$4@oZGPKy2*M
z%#xOAmJ}A=)7jL~Y5*|~eDfQMPyjC98_y3wl@X7VxN3-?>uZ;xBuZe4+2$iXo*9&$
zc*-uBlb4adb%=nixXfs)7?4qd05L$$zp`~H!abAf7Q*vq$j=<7&oEXCsPpNWCDc5~
z`qjP;vd5(1dP;6jfyrT@WD(*@2wGb@JL&j{PntFsN&^+&0ghP~2`Y-r&cRWDz@cH$
zRT7+9Wq`-f>cCX_i=Zf9?DgdbhcC|1y)1J=gJJy-Y<+bS5FwCe_5D+vU_%Wt<$OTc
z%JR6iO<MM3Do73*D|PS!6rySmt#%Rk+O^N0vJy={sESbdO4r<==C+(%Ce7_~S@DG9
z3A1jimLqRE3kYRDhN#G62PCg6zpL4X9`+aE-V0Zyu3=>+lube1d2JydTQ{e-NHb57
zk9oq~pMbdQ<;GnSLIuvhBuZ(Eh<!}iMLbg@y$SwoZuDbHruJY(*!%nCG&ea=aAk>(
ziIugKk|O|e4~##>IK6z`g3X^R7;-GB#ISzcc@}&*4QsH+n_%g-dW)Zu137kzHPPoI
z*2@DPg20wKtBt4Q9VKjw>7+czO{n-_lUDY{Y2^S7c8@L3d0amlaAGYxfcI0u5Nj1R
z6RgU~r@)*CG<kiLc%8!%F6!?yfo;1exGOcn*A>pE3LfhSa;O^~BFqF!S_KKAnaeh)
z2v>4KY-bL{r31-k<@A;wr9IbmAzM(L>TD!C9k?+uO~FTe)rjR^F(UPf#ChOsbe+bQ
z*w}(L77Iq}YLhCqRe4n;cU2ZwmuouE2^(T-gSVK|4}|X@N%gq$yqFhVD(pq>D4`H4
zT1x9ZEN#~<Spk!+wUMWFZA>kmDjzo6{jE7y^8e?~l}yk1aC7`{Gy37S+~Cd-=dp4h
zE-T^xk(+(e_t|C8YX5YN_824dBiEikL*L#W?H~9%o?|)%=N|s>1be`<vj=<{Bl|>L
z_dbYE<ybyL0yirnOm@82K-yH9nW)+_3B-(%O{$w;F(N7cK`_LGeGGB#P0?TyOADU0
zl%l~{GW?rWU}KWOnJi8IUkV%kqaHNH!9|~`#{-raIuF}e=8Bx412(SuIsTe?xkyEW
zqD)Av1?1vXO^tc+5ZI*L-=G2P2pT|5thWn@?4Yp(J_%{nnO>#fUy|-yGw+?{<^>1#
zti#erskK+xfW!{mYe|{hCaZu|fGu_}rX(%9EP+ayeWf&8LSszH1P&W^ixlFXx+mO&
z_jZtQXj83)|5;AOP7Gs}lz3Z0EOB&)W=i>MhQy7U5BZfb7l#(r?EG}K*~5|Oq8yLG
z6@tXYi6oGhZnJbYosQ&`b#|MjtMp7R9iFdUx}uk^uU<O4)d7#W!{+#tycM}{dF{e)
zvpIgBA2Le^DSPd8GW61{b7@4$B(r33<lR>3>L_G`*q#EVr+f90TwTfritsurTi05Q
z8>5cxhCb~ZR=GEGju&nzwQ0)=+uyM!*Vq1(S;c&_CrF4&ra?JWV$icU<N!{FV-{Ei
zap9VrD$29KjFUfla<g3lHc?zt`?gmZzGmunN(z3oI5AM&cTgMTm`SjUSCm&w*9ur-
zp4g8eP1Q^Ogw>JR5vOv2a-35p;zu+T;-a1bl`=u9#QUqE-G}@w1!IwYEYk6TT*H$u
z?f_f>4|LiqIQ`J#1u|q{GK7jKJegBxTC>z%-4j4|+rviFg`j*#XWn}WM>9FeMt3?s
zft0qU^IqjKonEYLEx)Ro$)ia?kc(6czIrC*6S*$=$e}vRo8q9Ek*yT3r9TPVGoYZl
z`$1rHr<H%0OZv=6QN@kgEo313#`2UxDq)-1fZ2L`G3A^&@mwX!C6=`#9xO&u-B5Cx
z%&-Dd8+9s5Upe^^Z9_KU>Lcdl5d#^0>V5fueoQj{<paWal|c2ujOg&GRr`+BZ4(6y
z*U`>t7Tu3k79wSDGe`Q<T|`-a#D)E>7OQ(^Q~&##+}FR|qEeFUB{mpJ*j~QC5@I1@
z+RjR{i%chGF*dy4SOrRRa>x+T96?2YH$fTL9NTXL7pZ)s4^zI+nL7t=B3OUbZK(U1
zLJOPzqMIG1w(`yOWk^Ktc7bkKohAg5TB2|>LvG}+!}tiF#XM<WMIEXn=zXeig8+bk
zn)G%6bJCnP>l}-JCT#cd&p$U;e}2ZLAD3jyH5XDG5*FuRwgpbzkBP)CeUUEQVWj+J
zauo+XWKtyK^7psP1Mxg9rJE9slHf{e`)2_8M3L-*u_PvVzBZ85t0MC~*kh`$JXpMS
zI=u4M1b03D`mH_l{yT3SPNR$>lG3@O^_i%_F7|;}%bt&!k2ea|$tbj)JYo%CmA*{*
zm$qQ~&uqby!Bz7eTd)qb;uY$g_vZXdTaf<qy>^A%<sadf`_!8fCi&uR;LFrWm=MvC
zhv3UcbPRf;>rYsd%@)Xl-uR!m3rX#VX|mU@3;%GhtprJUAi6Qmi{IaCI|hI>p+Qli
z_1y+jU%LbGR=X^+#I!@Rb}BLZWnc0;YsO0Q-Zb+br;33oK4B;|-fGHV;_o)Sxz#u^
ztL_%4Duos#WOn)rE-`QB6?x+d+*r&jC{=$^vsZ*vg-}l@tg1+$d%BGDJ?1J4EQuQB
zoMATibeoja{}wljfL-wwrng^2;WYuKLSSeYBNtQ}Rq75<!hus=pO4bEOuc!a$Oo|s
zP9&k`by|@eS#%g|GYgD;F#-)$pwpQ7wT9b(#;O_x@8Cg{kb$qapSf6@kq)|k*+6?d
zW=U{mLaQC2UOk*;DR!q2OCrSLc}s?A|BsrpQpaU-VwXY`4pGt+u^a_OrlS%h>#B9R
z`0$HwbbcN}=XZ1VPrSk$=FNpahA&1LD~=lpO}g;|VmwY#uu$%T4wt7-#9a_GneGAq
zz)eBHpOt!|Ch8io;rYAIRMJp0_U)%m>l^h{0#qM=`=JA-(vH9JP_I9w9kBt4Cz`^^
zRy2{*SYpi-thYjmTn7@3^rIc=zte$ilLd&BhShA69^&+^F`CmZt(hIWn9Zq_C1yB)
z1@6fIV}Z5lkFU4Bjv|}d)$M4~t=>&?o50?0I-=5$2#d&fABH}Hu_?15LSXgdWRXP*
zC%CD$tc>}J7cDvXT-pXUl_Z?hMvQ`f0%2Mj8pf_I#SwL3pK=od<-o$`q5*uQx+Q23
zk2Lm0<hesr=2XVo_XL}vB}wZT4*ak@iv`!HFX_g(&f=I`kwi&cYODR^C_{f4p7$oa
z`74a0XQ$~^;M1=u=<uDizhAX1x$j60YDp46WFmxmx~IR@^4{)qW<~NvBq~o3bx1V$
zRm)?$&#9$Xz$q8%tn~alEr)r6x_h!Bv4bs1a;7QMjh<`8WsnefBn_8#fpi|TXa?F!
zJ3{*}5Zyy;R&Sf^W#De8+uq6g%{y7kW%+7rw}P=Nx)b_fAJU~It;bGpnak$K8}slR
z%JwjRo~N~lst;KbmDc#HY~7xR6qng2QGs73P_k;r@0<EIQUubwC%5%$VU?xV)OZb&
zjn~iNCNSAKg%2gp%(%U+F#^Cb!p7Z87wXcbap|V#2DeP)J;pZzH-cs&=rNBmD0o6`
z)g{V495E}!(bVrYo;K6+(mlC!$w-V%3!&(=>V_ofx6Y1Cx1Z@GxRQPgY3hA*V`4Dh
ztxsHPlhYTf;qE)u;z1NRyPl!}MnY8_AkfrllpyP*OdmSlCDSau3k)4iE-%)yVcEd9
z4T%{RQ-8OuB~gn%b}d{T)t7OVoG%8d?}&x8^cPZ}X&VxeFp++(ygRB~1R#HujEGpM
z9_da$n~|_Ak)xUHRjSx^_&A`UfKe3jTdn77W_K8#ZXCw(MS*A}ul6+fxI8gkNw7E}
zq-K6%7MYPOS;?~BX?sfBp2)Vx32h&LukBE`jH45IT1^u*wYvOj^vF@y-%Sp#_gfXY
zrSzi;Un3}&jQ^9{>S;vhQ{8)``N*E0zN*&K%<XXRuEhUt@tl=p!zy<yql<(Er?C_f
z@hEN+e{0A`_WgPys`+t|6Y;s=>*CQPv1YRh>b}Gbr|N$j3!GMs^@%yZh4czn3xYl%
z26$Lidf6S*hjcj>8<cx$AB)^uBnspt+S=~oQeO>R5F6#19d}5bdpI$VmKao~o*03>
zDq>f0lc3{w%h@jD_;}uVZi10$?h<a|kEOu9M_P!4yI!Qo81^*ld#HS|*0#uP77KZ#
z8O;Azzu>d*a)JU(`R4ZIBZyapnB)uw9Kk#0sis`Bt*`SNIZ)GFaFw?zh0GLKSNU<J
zuJQ$r4qwz&CU&JIzu7mKv}AVv>q5(ynB@Rx|6M%!twUn!KzV{<9lnqpR+ikZA{Xr~
zS@EB&rc>f%%O+2@L*isBT$yZ#Z>*;CwbgV~tI0yuK2PTVt6xy8CLWZ&SWQ1H{ltLU
zUtq%zoxdzj%=z2e^S5u^8Jd9fA#o+DJLb56qdoC;($on&-<YYIY@#U86-3(6$m|@_
zKITwMeRU#{yayP%x3kjyvOzH99tTzjXt*`uZM}FI;8bL%Zm#w)C9h4&p2o7|*8KCX
z=Q+EkgF}%UTdi<6(pyrrn=?wFw9~fS7~CWo9WV^H8I}M560+-k%j?Yj)UlP-iqkCm
zipVoAvDRTjg(eBtQ+dOjmJc}=6J*vRLNU`9^x_k&<ph#iyk(<YRbZO!_(^JkG3?+b
zbYlKZ#mcE3#ix?5ZPc@C_Oh>J3`Jm1qY4GTJRdHCKOrX+$1Uv(HRnS|Kt(G>n1z|4
z7E3q82l8z9BQ`#IfW^+J$)Pud%5|S+REL1DZS;l{qmCQ)pKaiqe&QecCw)Pc&d<{{
z@RO<1LIRBi3|D2#@)|9Q;l0x0Wk!jOPZCWu&Id#Lp%u$MYu97RL?OW9>hrR+h@H^4
ziU$TDO|a&8D1IRV?fQ(|tfk_(xIVCr7sNQEP&)*_gE-|Y`(RL@oTowZNo+tP=Gv@`
zm=1HN&w;0~m@2`J&JgOKFsqdhdi)+{e9a7P{nyQs*vThutGu4a&e`s-a9v|rzs|@*
z+PJ$9obpYAQf+~<N^niyO$v<*8e(ny=gp)QGx6#XU{F!@4Fcc2b<5G4_fzsll9HDv
zQSyR?-h<icAmLfVB=HmpA55cfT4ewH0p_N<b@&@*JNp~O(&Obl-CZ(cDn5h9Tou|q
zm?Btw%8FZ0IB^Q#`=&!(vQV=jj49J!bZH{_=Ie!ORaf8*PI2UDc;c!GZ_9NLblaOu
zeC-yQ89LxZPx&s;bz(%b{l%2wP%k{e2hHXPu!`*R!a<X;FV9=B8`Zqh@Iu2KK^N00
zO%?8rxbbdVutmDJMQffebCh)HY2XcJR@ZMdz_^c72I`STzFmB4L-gF6<;y1|L7ASo
zaqIzqI|ZScm*N~%;rJEE<mDBrPYG|3J8%Nr&mK4-eFn+oaxbC(n<Kq*eU#Z@-Tgs|
z{f+*26@`y*G4AA>WSss?-$7)ho7y^1<fkHeuf}l9t{piWxxm5eJn3NJWE&(j+$tQ*
z_w-yATM<B#tQ+~>AAFXY{4BN)I4Y10YJ&wCPtzl(i^fvyRz443yX|dyy0&nHANy&j
znzO>ndil~!*C2xttbNnr9Et2zEY@%6r<nl&EbbZyYHg2AXoNHcIf>pADQmtZ=`Bv3
z!p6MivlMCqSJ7O|7nByfa+%X`N-1=mNtQiwyIT4(VP&FW{^p-fhgUmz`j(+JB>MyL
zE}LdGY^*}kF!Y4@G#Gju*hzsY_lIa#y-pEw_PYiO5)FHm8>9N`=`+_LHUJ!K*$`P<
zb~}SA4Su}YViqS__<pR;&^Z=ZMXCu0KkgC07;Q?Xm^u77MMa9vAfRmDD9xmS4(e@c
z<)7}LjhM?q!5_xVy>eC1z!W{a(c?OCc(2({7~N^_TVGL7iIiS{^Fti0u@*~bzoRuu
zaawd2STSgE?Jx0JoNL85GFKGj1;tl#t`(om+;E|TpZ}S!CS(^?Y%shV|M`>``?>SL
zT%LeM3K(JR)D2QV;g_w!;Pe7IS6x7c@HU($2yJ*}<m!LgzIgewa%cY1lr&zxbYP@I
zT9qkUw`@rj+~@+I+oe8QF+gq}aiQq8oyHsWd|;K+Nq3x&y+^Dw3A&APaaF%Q2t0o$
z<mO94RhEP^zUfKZ&FwozM78l{RVN3%ZC##n#m=+6@gD(u<1*6<LO7_$1+x!?<N9AX
z5NdXu7b-XO3Ln9dGdYsF+DV0ZIsQ8$K85_4&Hqj)up>f&cyKEjqDk-)(<8Sj^YhP+
zXJiC}mUEQySk1V-@Z#gF5&DUPKJ;{0*g5K^AFqi=Nn|WCBy$YUr5xr$-_4NcjBgI@
zQ@o1vc1=tvcwKei5yU~ruqqzbMbOe>)f!~E->xkQ6I2ySPI{Bb7%y>z+g1>IF;pA6
z-Z3Uv;~nLP3|Wf{9>5jS3h&Qu#-GMstzIIjM1B!CHzkEt0YiJtu|JbD3A1dLVfwgy
zB^KQ$*f7AqhVUUyY=5{GV~M5#Dz<&K$C*q+!cOq@NY)lwu(U#&#Jx*(KP~N+1(b*p
zEY}{)*od8Cpu|q$sS3hQ@ndjf91oh})FD(K^DRR(DT+^U<1#ajSmG(8vh94p`%CL6
z{wzS#G=LKUD@#*kDXr3t9e``wtGSykRk~+(>Bi1dTo3mRyKrNHI$uu@x>X4!-uw2b
zDcj`Cdb>!)+BmWgUf<=yIp6(okBMZ@tYplE(1(RE<=+yTNhQvKWrZ1frXmj|w9vbj
z3>qAeWEiZFi$ORIF<FXuS!-NkUZrI!m#cU=6s%T;gqx{(;9xdHP#8Wk#)F?kDEJDF
zHOosY<?>ODy+lp0!!GcJ6rmh+&phT4QrCb4K>7BxGa(BoEKrRcu?{692i9R_C=fqc
zGqU(ZW+W)0^T`JGzz^}oEJCpAy{|GzeBeDh&A4Ys68wNI$7ufL1#8>eZ>a}W{8Nj|
z;e&D{zi5yMCmv(L%`f_PX=Tad9$D6|l-38Wu;A+sASd6G_Sw}ku(#Gn?Q&-74$;c^
zyIEdIcq-x4PFX^YY&AM3EX5t=)fEgmTau5Y01xQ&56E_z-Y2AYhyTA!?`95!b1{1e
z{6*+he!yYzeS0IzCD`2QDJo2}{W$oCsbSSgW8&|F@iO?m)bL;f3j%~k6H~(;;Zb3?
z`Em5E*mjO~Rt(;pPnUlr>m_X1e?8etRYJ@A;J=jX-7RRCxthJ6>&<>6*L$VKdHkUb
z2}PJu35nRSmR>WP^#5aXNHSuxC0SL)L+~Gj!J5)dWOokH<=F-nOfx3rR4p8@14&CI
zZkzU_-HG*+&M|fAX`QJ3Cc<i$CGL{mZyYMl%js-i&rZI#249I05~Xb-l=F?8mgHtt
z_pRf6keh#*)B6^0M#AFaiROFG>B<w#?2w4`tl(7K%v03Csi3}Nx2z~P{biwKpBk+k
zjTkJTFl!f9`c%X_#CH^PTI@Y?I=>XJoWcacAHWR3SGf5lzLifO?J$AK)2m*8#jzj<
zcb>5fDAr)P4@@06u>`m986$ItcYcSFjuLV+pn#6Cg$KD*niA;Tzmq0{{Mp2aI^}2o
z8wNha7jK}tp@@DPg^up~&-oZb?J(v>evFL#myhXed%o`=P_h}T1A?k#Sj6pb)pOyR
z1SU_|F$!K$sQv$r**{RQQ;j)D7ryg~X|`>DfA)v4D<qG){d-rBeb4vtWhv(5JCom3
zzWL8h{tk|NB*)saqDy5(!+3{ml++6Mo`R>Wdg9+4<A^)si9_^Vd+jr3hu8}?2;pCk
zD^F6uN&j4S$_Mn!8=gJN(v$$NFz=?rJsG~Pz#LPzs8t&%#zpN&?^yL<v8qUX*74>y
zkh<J^ZRy6`p=HabLqIOy7T{mqn$1(+8r+(oCVBgAPjBBR-afiDG%OS*3ziQ8yt>@n
zY^Ma!l-{60686<DA&25|iy`A$3Az4TUyrqiD%k`+*cGj3EN$1;@l`8J$f|gS8OJ(?
zG5c#Z$QtG#>T`+Oc~&0SPsDD5X;_Vov^b$;0)w*T_EEVHOzWV0!pPzL&L=A=_o(lc
zAg{@otaDh~aXQCFWx{k?T58le4Thu~S=1kgeu6^r3S0cJyFx(bqM-SJwJcuw1Pbh}
z^pkx!*E1W!XP$ei#yyI9A+RHkh2^)4pRGH;QT^<_FQ4Ux{Fe?(+ah3l=ib0j_9Dn9
zOW*74+$l<y)xFgvCn3AIU|Hw<oV!I8v${KN+`a$$?o{iWMZ}vI&rErNB4U|ACMaUm
zQx)>?2AuL25oS=<M)&1tab4{RbMp2ar+xLvZhjC_{*I8If@SxgVE~4T>{0MV+cNuP
z(V*8%r~DT#<aR<e`NcaFTN_4hc=eD#v_ZMN3K#*BBi#q!YKdPdvhHI=y@wK{rfTWe
zmas!jKkroJy7mjyVPx<na$18LdT|B6@;i{DbPbGZYHf&+!HBOjX!s9(oeU_I!RL7*
zI9sKrBWaH*i%ck$dbeZ#$6|N_5l#XssToowFKi_GIZvt>RKbr$Eps5alj9-qT~peV
z*`e}d<~70{QNHcj-%f=@qq!NHz6{I}uS`+?F+p#w_FfUOA1OjO=}DeF0ntp}i|Wee
z-Ljg@lF%q+ZN1ZIYM-3;JEm1sWHjs#oOl5n<e6FUuN4;yZJc)Tv*#Nu!I{}y(BkG{
zP--Lvr%#5E;BmopO!40+gJ8Z=Aw^_EWGxzbr3m|yoIs0?c8jwEA!2y`?e?7G>WR+L
z@o#qUGFoRgxm>pZUhea64Yi1J@@bko^QMqzwv<>`iPtxYP$RGH9_Z?n4zfoeXrJTc
zFE-_&I)6Z$ha8tQfbrWXCdEmgloxcAzd7#fxa13=fr%d)?=;d%6lgZ7biy3sKFjP>
zsB)qBzORxH;SW>czA1?YmHYT&y?VOomnj<F_z6KBQlqv`ghJl)r#3&O4+W#G{c98(
z=>=bYqSliEN1KP3rBy;jiu9o$<LfSikKXOr6+9<q@|S)pI$bq`Wd?<cUQFF0hwx2q
zhO0RhPQ`V4`BO!?+#i_86DRmEIf_Dq@Uw*CC4)O;iNYS8l+r(b@xlQJ@@Jezi27;{
z*o6^O8N(_$)1`An{H9=3|A<RJJp^H3pF`RKI3|!rH;tGs)XE|BVOAT;JC=WGu(m+G
zxL(B_xr(Jy)_ASwe3;3Q-26Gx(f&6RV@74|PQYy0Bf{uN=f^17sm!YPm6g!G|D}ho
zSl~>Y82aKgvJhfnMQeNfj^k+1v!)K*S0k5Awo+>{zY2lYnvfKBoM3JFI7=f`y9{P9
zVQ4z%7&i9gnQhG~sh!Ks*!O4g?&C^KD%z4}cc7op6I6sWDA~~PT(b1i7&hxvux9FG
zHDHF|_lNnMG37Frr7>!aJd<(Wv&1EG8T3zW08@!dAnPOZ(Idq?NP^%&V~v<zXP7Y&
zr+5d|ox+VJ{i6KlA0C`|1+S{=s~#xzASldQ=fGp&JM;~(l+Zo(&23H3`JCB2`-%wp
zsg{|?gJZ-gvW!%Z(yH&sUe-@)Kb48g^NN4DqB?L$0xpj?l2tCpl1#8t4T`O}7Ep(`
zw8*6?wuuh)ksGRP(U9D~fvTCOs={z;O5i&+Lk(KbEc2`4o+84Oc#rs<1`*(Gn3|f$
zgxy@?jVcXFqAvcj;7-|}2A1<_myF$^q1tXOn=&HM^#sYoG*af0!d3@KbFS--&hi}2
zU`PVU=P0Kg9p7xnvXdh7GmQ&)a!lTMFO#5(!7NQ-3c+b+X<e{+e3BtDWr4@b{3NqJ
zaE0;AeQO~_oJVYV4s4*^?t_HDG?oYnqp)tW!}ZX0hD6%VN!52?%Yw@22|?%nmC&zb
z54~c-MUoQ9F;zOMDOLu2U=S%@a+0W#QLZ??WyB9R0l82HwBk?}L4O2f)XSlg@2tl*
z@A8R+Jo<;whkVUoG?z$~U;cVqLZS2Cu1;qeK*@?B6(R(aspOTc`QA$x2%ltXO#ZR2
zaC4TW85P(yHy_MZv{pw$P)L1c^w~PG3BP#f*}(Q`A(l*u^WbkDYP=%1&?cE&j5e`6
z{+DTree3Oz@J#enC0)3D9eokRoz}>eZoete1`f$lbKmgi-?Gf={H&Rv^PGS9Zr5eV
z;=kT?sWj-BRl_3bFDkyZbf@BonB2ElN0Tf$EHgdFB&j3(cV}@!@hEChU@3+^B4!7H
z78ii{+@{Fwsbw6Y`Y}JY93wf1sWj8DVQ`dJDt=UpLB=3*xL}&$agt$ffxP;;MrL$V
zx#!A~*PV=#I8-i>7`v0*JFNbBs@OKVx0OQyLp{ES51&%FTK!TJ2rmqiiR8tXKhqT_
zNVs!(toY4R$QzY=Pd$@UjMf@WKVO-mLY@ZTs1sV_He*MGbmj)!Ab=I09MZN0?rW6e
zq)@xZG!K_I_m56rm&}lNK7vcuoG5U4+=gb(4$I-R1h3RQ{PJ2n6&6@BJI5dfP(*8u
zOya}f#Eh6RWevUT0oC|dE0qTdCe;<mOU58*{<v+Bb2K{9sOnicbL~4~>7x(^-8M||
z_n)G?S%=wM3aT7Gp_W6ngEteT_0DOml@!HnF?nG>w}4QuC-cwGbMB#oc>Q$8A(Ue3
zwMFD>r%jrP|M;4P<^N&!@H3zTrZsgxiKi_9%;WVJ<C3AywSMS+#%*?Dp-8$JdPgy^
ziqqj`o;)h!@A-xt4qYsT&N>!zHn)+nx}!K--z+U$oe2q9!KhDV6u9FJ;kC*?Xj<%9
zAP0rk#~jAX=`lulywnV(A32Febn?an^K057BmNPOc-@{t;*ZrgYo6~TvV7vS(Bp>E
z&cC@Ixx}q$QRoq`NF0*y=WnFSq7(o5$H-(yuE}F?ykA}HlK<ar`R}g$cSrua_r<@v
za`B_2%S)`bW{_oLhnEMMSW`WIKv{P>LJ+5XG2)LfDscLGDybCxK<SykYV$X)FunZX
zn;eS7AgUGf=(ST-ZZC7Q_2b4o+VbZ(v8?fNxOc*Q?ADAzE`enMh*r%=+QOev_*>iq
zPlNp(7D`x%*9qD3AzKLsWIQ4k4vt!b5i{gZ!uY^}L4NLN+^ZkwOb_<{)oONjGK<1O
z31^kfk~@!qHG6kQYH*&^uy)lqR+47hC6)#ss5jJ!SFHHwn>y2+IZ~R?|99z11`E|&
zyCu`vUp(ebaSAT$2G_4hwhZx<Hrhj$Y#_5D4VB|Y#rL(0Rq6c|eB>dVvpS1ghrp#s
z5L1Uc%)Xk;M<kmvQn_7SE^_Q>p92QtoZ_^`?J~ZX(+!*@+sBB$mbf~ygZE7+VN?96
z6@-3N!MAIfbRKK*S{(})OdOD=i1;>QO3Rw7_r=Y~nuwfC_7s*>osycy%QsP|g&`@)
zl3zqdx*AFyWj>&|wCohAi*rr;{E@ylxJ$5q4JEB!S;bCnQ$ZiJKh^=&chS~lK*0C?
z>l3LdCsI<lxC!u(MvRR)qk5A}&MyI^(@sqT%SGh#b>M%MAs*VySJ{Ggc>DO%!FE@6
z%mVFj@|gey#z>4Etl0tUqo+4ENp@#)Ll}Ovj|wFZ7oV(fS<C(903GC0!KwC}?+v9m
zESLdWC4`ZhvuF$xx-05asYuk4s*K4I5%00M^9I;_h)$di@}zc$Cb^;3P6N`Wu*UD4
zHC}!&rGfVNIZ6)%`FcmPeevp9voDvA=-G!l$-aoB{Itq+xiXEtpK%sJbLRt7VO&)V
zA+)l2{6G{hd{WZVLw4#CyyV4d-xW|lxVI?AC%BQ?aDSogZc3;Mbf8`>1~fVZE2R{w
zV`E5aUex!md8Ra^YJq=R=kBRaeYSX2r#@E<On@ytC(v1-tJ92x(UIV*&U^0Qs}5tP
zS@v-gM$)*ApZ}JUm3CCpkDe^21!4%X7#i2%!*}PelnRmqtIL6INkP$}N%G%NlrjzQ
zldH;aTHU;!k=)1fmP}y48a2sm5ezzchKh~tU1$gP^FIjW$|@oo0Xq=k-s~IST~s^z
zK2uku2r%EMrqY=vj^syj)6K-0E0(a<J0DW~fV}}BO9LrpxQ9I3Tk+1bX>MtzMDLXV
z!sx^Xe^LL9&$_;KHsLN@2qE>};?_v(SszT!FL;>&ti;wZv^E5u=5kwx4Vl|wGMJ4x
zad_*GbL8N32O&XK!Pu{fYLkYQh8kW{P9Zx&{=l5(E^pLAt4gL(Lj7T$>#sSgVy=3_
zlu=uf#6j`Iq^5*LTBG}2R}d9qF|>#VAKu{&0!uRE>c6d&1D`zTERoAo7cNQGog}$h
z+GQz}WH<`upn;K`+Ypm&jvf`of$DQCCuZc(8r>5Nx$f?rne6*aH_Xb^$oROsjyX-E
z>VxkS0mVHh*-!#Oi3cvSMNMg@nGA5`P~MY8TqzT01=|2%QHpuHUn8(HJws;v%Zn|A
z^wTdwPo{1dKkBbIvH;Fgf<u@G9<^ZPmuU>6?^=f_uUJo71~V@|!(I-dk>-qem$=Y6
z8$48$tuNOsJs8dnMqI$HezyI#<%-bUi)X~|YEgmg>sE63lq0)yxez4iFKjv<4-4o4
zUg^skW!Mx-%N@{CmCV6Zg%cM+2fPb`{!8K28r7Ehpg_H2Rj+7FPw#ugTCc&8ZLV&N
z!UA#7pQ34<)Y07xP0O};Ft|*F9WQDkPdp4B>Q1VwX{WWUb3J_d#Y3Vzb6CrV9$}$#
z%iIyS1T45X#_GT8f|Eqh!TQmS2P%(<BKhnFCWo_xq7MUOw$JGL@1NE*Bko{Nd21@C
z6FT6~)4c|oSPj&4{f@9_c{4{C)%Fjb@tQxFS*jQkhR!~mm~;?9u=FronwCMy5zs=u
z=^4K+qyaPtgS4;CVW~T7gC5)w&{L>tRXoq%9AUNgEG}x2{LpkOk^YR+L15#I25fzA
z4vFN`U)+CLi)Iy5FYi_0w`rD!0pSm3q{`1e|3TN<o%t7@nu!H1JX7!%Cx-BzI$B%_
zYnVJC9J8#F`0v>>VJc&myut)GR>A?A?3e?uQJY^*;RND#i^j$%3y^MGj(NyEj&+h+
zs&Gwy1F=<Wl(Ij~J#Wc0071m&)(u>{yF;L7#v706_>m|>(cef3(uR_M9XQ*j2)HnP
z#c4naJ}{0-y3#PH67tWQ>f!t@UZhnW6F;CyJdkjJIN_)1oYW__XY+tcmi2)l@kOI8
zky~NJEHa_G?nxVu>sjbrheRBRCcL^hlf{GQt(R%M7RR*6J1&a|L_ZY+JD1Yh=JB^(
z-uVp+y?z>p?1lni3%CsdZG%B+BZI{Fmw{rp;#5-j4INH;drA^es0z4iw;%GPv;vVr
zA}bFK3~!9%gw+5-ZCbgx)BidNz`=wATh_X@s4sA!8=#Z`u3CYj?GBfJ2`2E4WQ1<(
z#u|Xa7LCClIyK`x8)i2pbMrYDkYkvbfLPQ@S<6i_!A6w?vGUlrUMX)@@HZ57oBE86
z7z#&^5?J1))QVupQKqttQG><Fm^Yw0q=NJjxqf-V8&=nDpyEVLs3pG`oB+x3$0e5!
zZ&oCsoWp=dP}f*r_q0XJ&|HMJ&D`J+x0lz8&$EFZ&RhZGMGr<+Bs{Zufjb3RVkQW(
z!A_*fN@T%n{8?t|(fYTq=0;PDJ&X%E|6Qg&gd-*cNolL&5rB7D<234~xif~RH6#9x
z@Q-p^evKq}%c^<zZR2qkpTu(h%FpDwJw!5l=KHnG_d837ni_Y(*Y9e)ZP~8x^dnsi
zu7B@1!j7Nd$?Qnm=0nbSKJ2g*B)zIT2d_UvXJW)syF1Bwap(E&B3s!?{Iw~_0Mw*7
z8><=?^qT-d&>*ImWwXm>pJQ>5rkW3oj*9(Z&XK%Gyl-WUT(jp9Gk~Wt$hd9Hy5_zv
zmP^vo6;6x}+F{=u(U5S)ul8t#d6{l1&y(2u$;S-Ro_UMdolnwq%-19yFeo`e<|Bh5
zz+SZ&c$E0WS4tJZWcG^rz^~Q!3!Rcy>@~^F>@6O;#-2scLU|Y1RHH9r^y4c<6V!Iu
z*LdPRY1B+A<gFrNaZksxKeAM?<MAw(Y;o@&z>J)@fu7@V(rAXp@HJxsK`@(lHRs_n
zRPJr+T;NU#B#EL44iT~azW`R?X<Twkpo}?p7@B0kp|s0A&ukV&!{N7Qv)!^fqfJ??
zBqEBpzO|`U1_^ELnHWt0`)Uy9IEq!oOMZS(USy*}V3df!EA!7(LB@7}*j2u6US`aO
z`M}_piEwXeI{OI(Lb~XeiOq>S`-+&K0~U+>FpmseHhhu~bIrWxEVLO?e@yiB`i29?
zz>#_(*Uo#Mu``}A{>C#@W)5;L3ubc%s!CveRrS;K#NLtEWEW7X+737*(ik-fT=mqy
z9ytQ9>;UJw_WH)f3^)O#a7)4^!u<5K71R$Nv($<?0{65$Ca@$=XM4GD=ZWJTZia-E
zu9x0%<8UBS#MxVIDK0)n4?c&;&R4mUonMtysHzk=6}N>VI_baQ8d>#jCV1wJ@s5A-
zl9x5w&=`x<j{C>!2;<dHXbBh)V4cI>-h#M}e(BMkB9+8}c)X_^lO3qqK}sD?%<TRz
zj`a13FA}3zVX|ltmt-L`dh-Guj(+S7wZw~Ko?`Q4WWJnf+}E>sbT-5%5SZ3=R#=tk
zSO!Lt_S9Qi;QAV|u3-?G0`QSHKVCQ`MNb>l)hR#gFx%$xu?6(u<va{*3sSohpQ@=4
zx+rf_@t`<TT!?4ywBXL(Q~t}@o4?r)0&N_=?vIY<tNs8uqi#4hUAnpRyUo-0?a#FS
zrTxJzPsLod^MtVjm|SnAUGU{cyBPc5m{XZkV3ohr+8#Jnp5X!o*1}<sjN`z_S7B&E
zR|I*G`pmmipo{%5fFot7F$gtfD!``+g7%?y0#cHdyPU(av0mj>qlkRxITBo(G3EU6
z12a^n#72FF^8Dsz;1t_WN{*#yA7d}Xy?jA0Z>UNr9bAz-QTd`lG%dz=P}BmMT+Qs}
z{uJos77|dLBQp@W4Kz6B)vr=mDAKS{aezUKW&c|3`j%TT9nr{#Krar{2{4^JFIU)q
z3MR8B3}8cMYfZdbSEm{}#hPx|S3g@<XNp%KIB}B6z;2WS&C+@-JIAT<H!wRG0o90&
zS@2&+Y&29XA9E{^rf9||PVsXeLy=Ri3niNhE+hKip^h!bQ<~L{bC}!>GrQx?2SV~L
z25GfLrlgam_SoAz!TA&?ro>DbEFaC|<&+bG<nXsa6d1(sP&turA}L^suSwSrvVMQB
z*izIiXf0pi|BUXEj?If#GhdY^`S?Q`(+)>Z!(#v}v~aQb&eo$}M#Ev698I50wD_m4
zB&(#PTX?{F_GbDvG5C$MNZ(q*Z6Y1tTD(cTwGSgGx{@gb*4e$uor8~Ai*#|A>bTu<
zPfi_nw-;ka=D+=fH43EppK$S}AL0@xT4kOuVcuoNO&1awIuM#6_l@%}l`Cvm5-pOX
zkg{eipOgz{@%)d2Q^75SKBE&W&>+b?vEi$gYmUrGF=U05rKT&|&SQX}Rd`Ko`!YW7
zF~o*4ZxmnuF2<%%AfgxeTSxOya*~cxO;-<^AB<NXjAU*&=axNKd=ka6+1OE<-j6wr
z?*Uo{BMiBr`OBsCTVnaGQn+8m_`szL!Pmvam@cJ;VS1=aSdq~mmji#SUWA}M3EFw6
z+ZdFwjihRTYN#hoktq?^mOhBG@-i?gPoaLFn}X5YM@f1PRR+~ay^fF|OKw%E%MU61
zp-5GwC?5govsldOo0>Tn^g8~fPsK6_=9x65I2dGZA49$z$9t=qCYKBGu!heus0gOq
zG8i>d5(EXyJDfJ~@$HXCP)Mab788lflQd!l0)uPrgPJuRHL^ycTjWd5^zJ++nf|Iw
zx`pwFQ2+u0bu65`n76qqR*#G$(wvzax(p0d4wMfek3jrpu47R3v}6T%Za@Y6h~uWQ
z&>Ctr<fzT)9bSs^g3Vy063`tls}^wpE}pZ<t7Y`qRaw<o(kRaPY*=cMKRp*^jIziT
zljEH2hbB#*I89XGnAxn}DAJkN8F#MA;fXw7*H;blZh=%51H#>m{J#>@n~nS2h_7s|
zTZoJpOWktt+R}@_I7$O8F4kIgk5i^dE7xo>rzKX}ZXF4EC&**7>V{Uz62GlaYqrX4
zf~U=w^o{*>x~UseRT}PC^GXp{OW9p5-O><sw>9&HM8za=Y2FcmPSwe2)yEbo6(STZ
zvc>{!252JRW?bsmjgu3comyipMU#&dmKaYN8;;u-hyTJakiMO<?8s#>CTvt~C#Esx
z8W@}J81~2D#u&0p$BCz8J2nH0$IqzV=+hv<`*IW2y0)QkrMljx^k0V!a$8q~q*c7f
zx}W==8hr84LBsdZa@~CBl4(P`c}m1EN=sYq5*%SCR)?x|zsY?L#25X9k`5b14A9hu
z7e#Emgb3y_>u?`)lp4hGpB6xTz+7lC%vH)N5r-gEY=}@-AaEA(!Ns3Way5N}(G%ec
z)e{uv=#Z;t>CeWM*Bm+8py>ek8M?VwBYUJM^L`egP_13~>G{1Y&H<*2Yan>D1vBnu
zRr(xCBoJ{v1-3^_0}+J-2}B64R5>=0CzeA9FvD8u=Wn8B2OpUG7=HK&iKh)RKW_A=
z&wc1GOn}QDUT2$^G-ow|BGye%-ux%FDQUYF?3Xl-9}c~xE-;HDP0C*s%WnB+1!jXv
zj4D{Ev1@V78p9Rw<&xWVXN_7^&t9+mC|B9vsN2|b3u3(fspo#>7D7zjs_zgVfm^6~
z<m`$7?|CeDgDvK7zTaZxv?!SBC2O`_E@qOFw+*LM7qy)SftR7R?s5AhzAj78--Tbe
z?bCPkZV!ffpk%nOP>t%h>g&HU%wV-kzxk(qYUV?-773T)pGUiApGGWQ99Yk3mK5w>
zeNyQ^E7nblq98!!JxE93xa{onmM&|+)iE6LBp|^S1w^{9*G@VrkJu>S(WqOEDE%F9
z@DG^_tR!+cfyTst35mCi;r}#bJ*;g@{7Y0e;`mL-^Df7}i@K(hrkjAfwrSghf&Ty6
z`?BT6b!E$c=~s1x<|)pT0MfE7t5mW)$!~U*Eo!FbA)^1i1tf?}43zEKweOAF(dXer
zZHojzjET&ZYZVpYZV622co^7D%J%9l4f<9DzPHZGddoY6z-!qNW;0bNPk@HvwzeHQ
zqFtRbKter$!r?x#w^0I6wZFX`25D|fJap;=_NrYRhJAb>L9BWK9<Ko_+*7?8e1dvx
zsYZ%y#P+B77o|9+uIhlSe8Lq?!RBVzF9XkZRD+Z_A;*80%9I8b?)&<)6#A$Zd;!9_
z-SZ2#X_bB4(2Wrb=<1^X3cOaGp{~9ES-DXT%%*YcGQvqY)jE~(#iGj$`#dQ+%_94-
z`dzeIY-XbGtcVfq{r>>XD8^AG#YZpObHIUywmgAbXR2T~{**Imvj|dw=w?;j(gH$S
z^{N}uSN`o%+2<f>>ZB%QI&RpEO0-rq`x;pNe_Q2pG;4uB7MrOCgcS<<^ichLyC75+
zeYGUz>MH?Vx8d!CKvX$Mu?-U{i8z4a@6>8Z#$$$IQq!cy6eL3wWlgb^SWcBJ?c=~r
zY2ijn3;0O-kDqmdOdWvLHLDT$X-A?W`)c<P!y2X+psu|t+dvKUFt8JfW%xu5p4ftH
z`h9IooK}j;Zs3I5#~wBlxMmw?^od{`=ipTwSHH3m7WNmvRC$u}5ru{yqvW`eA;qt3
zxbU61J-M%FB!e<zMc1PjLFLm^*eGz!mT1QE@f9;iav6C5yqZ`mD>+9IK=0~=8Mj|e
zF$=<Z=r{mqja%^cDqA$9<KAibevvysh}+=;sFzlr9yDSj@~R8$Nd*$;l6G6W`u3*-
zOx7C7C8+1%j6I&0Nrok>mlJ9eg~=(CLpn&o`i9xx7%uA0n3FlZ2O~=M!G(3=`wSQa
zn2YJ7P7dE|+|cU>_(*_gVFKlpeTIEf3B?18Iybjxjt{y5GC{pv&U4O*w|bdeKuO5N
z-<~{(yp<88c~?Q2mi7^>m@ME|!^mN3D#U!7%)%rPj07QbjxNfE&4^~=EaeR}y&=+J
z=|l>s`>MfBsxfqY{f7NpZK5<**!2aaBh)LBZCinusTx%y(RFj3hUEOp)J$8RUs`8h
zo1pTF<+D0E6WCsM*~>?2wcs47kSy;J?+g}qj!L94y?Y4l8|Dq0M)DeNCfw*@I?ek?
zH%TY?lR?)8Q@m~G3WkdRyEqO$<9HIh+d~<psB7%Mg&r&WNS<DGdb&7q{~aG3cw(NU
zx(Po_EN#tOlLOggnEkN194Tv5^J-Q8e-94#MMkPWL$~!bKU731@Mfn(6nAyt=*gTv
zW4Dbm+{PuS+t2xyH8M6hNhJ}5_G!@Z?BN@t9TMS`X<D!x&Ew^||5Q+3&e>hv>`LkT
z$NgC{tF^&3dg7i-R!f4?tu&^l+|_#~fnh@$Xu9`>8|Gj3BKM>h`Oh54&~HxgeD1S>
znkI-4mD0cOWmX_5r{2cr)mkWd;_wR5ZM%3R?2d!vvadKfhW^PS^Qj>H$y2)8Cd@w`
zYD909IPYrAa!;R*U>g$u+!pAwd*-CBlJLu_##|tkluxe)U`rrF0(Ah%12<<~>1^3v
z?_1Op+*E~pQc-A09W;H?ExF3&c!5|b4Fg@;lju^tOhjPl&uO-z+pmx|P1P;;E2K?2
z+WJ2eKN`QeKu5%p%J?rT<q=rrOQ8~^<0>T|Gbg`?4(<{t>g1ERP|`a}`l<PuuLkB-
z&RbELl~h}PIVJ4MpOx?`=ANdxC)3sa?g9Di_dlqrFRQYz0!}62%dwR9J)idoRAMrs
zHU3K&(Y}NZlavNHuLWfTRf!x34^c!D*@!-G4Yo<p*%cZFo`*&irr}L771GtJf<*_w
z^C~@e#x*^Zp-Sg;ZK-W!`v37e|D*9corX4nQ_&O{i)#?p<5&oQaj}*2#zNnGOS%w&
zwlL#&e;sH+PKeL~B#F80K_um`J_Q*;4z76#DqN+*hUAc($gQKsAq<EP<hD<&>O^lX
zCGviS(~BVqE|&>qp2&Lqv=(rH>$vN7@OAbyYovwqVbL;f{cY#+vEkk*F|hJAEqP6{
z^DnQVu(n}g)*i_su0Lv)MZy*U%Rh5#XGq@pXvK`MHqSnhFgR^xQ}&s%_LMsKu^P}J
ziF3BLr3!>US*9@eKqK<O_X6Q0dJpl*uEGcyz=hQKH!^B)N^h3xfwB&f*@j@hgz$?`
z@o?*9Gn-qX_0tcC5LIYju30e`kn3?P@g;T&yH6q0BE^ry1&7jg(O>m!70k^C`Q-J7
zDZ8bRG`SmBjD69xol*T^7i@pyOQ+<*T+D+k?|Wg+oVO<dPLL_gp$RcgRwq;~7kiLs
zM8A+@o+tEGdk;*hz4(E^dfMkRsELf{b|R4#w;cv5R=3%bd(3uC8dIM!ll48Xmiq38
zT6<ePq`mDASuWWNq}QWCeSYBJFmh23h&{Wly%`};k!CtP&qSH#z1zA0RMl9){Amds
z&bQ1y`=)&O%PBsRS{I%1y`7q!(LOUVd!(Y~gQ5p+o8rx8x7H#~85!p_jy;&`U_V!<
zbkMI;g61uKZ(F~U{r3dw8QtTMIeYWwom^ykdbgDQJLOKCVX^^Ean+tKx^%z@d2n#~
zv+3nGOuYG(l~F!>At!O#cSzs6^&P9vze8LCMXQLzU7Qzh4-l4}GAj|D|1>Gl0?ad)
zj8W4KXflYh?KkIBvQLqo@wGu;9^6^eCNcDF9yFDNK5by@oSmPoF^X7O-di$x^S(2?
zVWc{*i29Q4=!jGXOWtWWL*=MBZ@LQwih4rJ^*ODm6F6DhfLUlcMS+~)16s3>X(i=n
zflmGy^R82pLQoEH*}kL|bx>UU3WL=)b0T!Fu5-ZU7HN7ZOcy*dVu8w#^nI%Co&_%|
zO_+AcgkI*!Y?ts7U_=og7_C8;d!7$$U`}U|Cv@;4rfy{Bm+7pj$&l%Ytvtny2>`w@
zv><a4K?#)diKaKO+K1%sI0Dl`Y<v^Vao)~UIngcDw9XjM2AAQKf{0p%8x;RMslnH(
zhuc;rG;tb@;I<)L;-Z<Gp`$mP%~1u$eIC+%fkBAxYQZHa-!vTUiR>Tr+jvjpVj;#d
zx+W*dF!ra4ZCW((t~><YgrnXF2sQ3OH%kh01CeGfZ>ZTwLVz_-ZI_s4VlKS<Y{m%G
zo!TUxSv=d1!YA3SA5E2WNos!dcnT6O({+v-bjKfRk_e=LX!pM9pvFLcs8`e>#FU9X
zhkgh>kllPZ%rYEhK@|}u!?D-~c0OxFEbYx!UcBFH&z`_(b<bgg89HK|b1?kc%bIDY
zy!)mO)v`Z<iO|ar*=6dp$~D-h9hA{dQ$$wAbfrcu_ZKyZlugpjBxz@_nkP6O5@Gbp
zjC53glO;b98u+Hu`8!ansBLJj`rGG~&uQf)qw?6O94{<x<%h7ck=DWMizBpAg*~j3
z)0V&>`R$kLD$V=qr7NYutSa2-IvKt26o>hF*A|{G9K^W_Rmr5}T%b{w>VwV~;~|_n
z-DxhMTGQf%WuKI^>XVm@UpAzUnJR5=mL^|HejB?rEogah-_AZ34q-NC4gz3UNP?oW
z6i`E4vT?z6_KixA7n$u|>g0K76Z)(<&h^(9H1gGWDy8r%A__}ImMv#tk(^_3U8OV*
z(=c?00lh;G$+fw438-Hu2lo%C>T6XjXce8WR3U|g247&j<6n42oRkuER5uJzIdk7U
zQyTT-A9d-x(#I1*JxS+TF6XU7V%qc;sCTj~JJukM61h`0+w!Mc)N0NuJD)54lm<Pf
zBK6Iy%R+U|A#Y%2<Pm@GU8T@DS$2n=v&a+u?)0KmAyl6J_-yx0Rrif&<EXY$GQvdw
zr;G1EJ7F`iY89{Cc{&Hw^%^Q$P&xCG&iQ2KY@C_%13RZgXU@iHOD*TELsUQU&76Yj
zow?gP<xghLoOaH-pVFWo-<&z8Pi9X1^_i1elq!VIoV91>Bz@yK2<o5BoH6YjI5w<W
zKb<+()*dem-K9J@rUgRRb|n6%T#n{%AoiD2!#P%2Ah|@%E^#yM2*r{_X?8!9X(khJ
z;>1=K*pq|GHb(G?kkqkACnAFx7TUgnw)@TY2rS-iAr}~?k8C$k63oG5>Mz!b8S?JM
zpkGnLG12FQD}!S)%7nhfK*4d3)5LI{XtQ?4PIVHIY7?hk>fu8e@lFHq+vlZc^C9q*
zU(J&VL%p)w1+nX>&WA4}NZuxZ3}abK?2KZaUy6h5$lW&@$RRG}!C)D&Yfn?_w5h*I
zQ<t=<<sTlHa7!jYDkoKVd%U0t-+U7j&UR;rE}Svi3gD=)`FEO)+zVxQmVeqLe`+;Q
z&ABO65khnE--3Q>Xlqh*=P+}UF9m#-xYvm5*tK&H|Bz27LrBC(Qk|p6t#pnK8J_*x
zew*DJa5-^>X&EtzhRM!zPx#sl$=nyzeFePCt)x`FCb}ay+e5B>N3haQ*9P@FX^2Fj
z)Byx^O2qn-d&hZEj%7bI+lB%|PikCnX&5^!ob6=bOSfR?K7Y5+CZ$d!&UH~}P87=L
z&Gb^6^nNXV>0bTwrlu8YHdPQ6oEvz-eHLFK4j0f5%Ya^afs)UhUyo`Z9@8^K-8#Uv
zmhD=pjWqXV&pyc%TGWC+@xisE4^E=8ugP+QU3_eULyROjIe+(sfH>B|Y+m{SLBe+f
zYjFQz`s!BXtBwVd^emB0p@YIcFa=3dQMsPQF#-N}@rCcA9o!JB6^|`g;_s85J{yLm
zHwYC4)!hQiySfOhMHk*!j=|OaKlckx>Vc6zCmajo4W9c=*Nqq2>Oa0Rgp7=Kuy0G2
z-^nUPDu&2`3CUE*)B<&$O+EMKEC_3fx-S4fK)}D`otAlA51jmy2?-<q_OG;O5|W=O
zvZ;<*2N2+AE5HJ^k0(x}tkNhyZ~7$QwF42r&Me(GE}4t~VMdK#Q8unkfoqG{1|&ba
z^Lvjh2jwnI)Z$u+{@%@JG{MI@bU8c&hJ+F8gnhqd;~p$Mw6+S%W1vcDg+r$%htd_Y
zl{d7Y6~2??ym#n3cNmUBaFmzvxSph4Dz6I|Dcd>qr`?#~f)zPll|LMDTT(i1egKE&
zcFsJ5*j8vV#R7O^3+~C)GCwe5u8N7FTIDz*l*o#TUGL`1o~HI!3&)$J_oNove(o5Q
zIHGkI<06T{E{>>-<irE#JNENbnE_jZBsTQ-fLX*2camHviB5<IpoE>)`9H9)4xjhc
ztPrSxO}r<;{!J5Yu58o9W8}$&DR=!3Oen;5$g&C(6$#SMm+Q=WAv};>Yjy|R!pF6Y
zp()S1?kYuUf6{8yf-j_&VM;Eo%$;z>?9~z-BYY^8u8RlR#cs%>P-h-QNS&{WW>{Fv
zkkJEjBQ3`aJ>GB}sK{!jL_Z*cGo`y+Fk9KEw^}eW_22+qFaq6ImAxl!!Xg;G_mps0
zFbix*f@aG?0R5~=Fs5mk+N$}3DJMB4A&${VMIEt73@u%yHq!vNoO>#UbGH0Mg0fE-
zlik1BA(3CXm`tP{4S}`I#EOJVx@B@kPlM=(0e}#XOiIk7BmP!Ns-JMYPG(OOS3Z<d
z>=7L2qMu0=LjHIi!v;=%e8L}vV1)Q_xZ~7=06*5%k3tM1M9?(+Sj@^P(i@spN)y@@
zvu#xGosS+NTm=ET*NAYX%TK*hC}LIz&%yNm#p!2>f4|D@;N57n&Hi}^5<MQrailJk
z<D!F@D69z8zrCZ)r*gfwPuKKz9@4;fvOmElmH)641vlKXQNc`W<&J^Z0B+`wCa+5?
z@whZR=IVj0NLX~0rgP^Yu@@Q4b^@Z(wjlXXq0fp_i9sPiXZxbV9|=@b?yfx<-8%ge
zT{Bod{>?D@CM;;XmF9?xlS*R$^1zZAX=2HiFXX8JefwJA3tP`_Y?X#VeB)A(@eQ|V
z+;<5NFPwBDe?Rwv%ng8Ii6UlSVDfA<OZ+yu<g0jCmJ|fMacF)gwjBz4Y<n#c&fLED
zv?qCp>77R0=9AK|pV)CEI*8-m777Ik8%8yZK!h<;61$L(F#M3rrwu~^=KRZZWyDZi
zO@6JqGCMhp;SIt<ttC9EFp}UgEt0$YlCUi<T6jC3thu?ii-Ebe&D_C5)4mP-Ci;gT
z#B4pEGB1!$)XF^Bk-FV)c}|RU@Lw;VvBGOi+@Go~5`mWcz%SK}Gv+hw${aP^@M3ms
z!I@mvaSog~$Gou%$U5Q-zoe>B=hdELr_4$O;FSHH1`7~Dx?eP0ZwzzMR%$<7e|~cp
zTc((GVu!T0!hx_J1*rC`pRdp{&Bgnr4#<lRun(*S?SSb0k2*l0$om>k=sB=*g@DZV
zIi2kbB`*Z_covVVaGfLb{jg`&<Oje-F-Pf54xrDnZxTzdr6s{fF9eiRD1u2|gu&}k
zLPpaUwV9CAp>F2G-Uuf(Zusb02~=C@t80zOR<hBll}u%G53up~HN829ie9U(E}p44
z9*5c~tOp<rsy+0ysFBVU9dkwm!t+JuJX(4{M3q|RMsR{HZ{6aF#qaPnL@fW{ydj*F
znmunL4VR~x!IqDSQie|Qir4dU*jwudibIi?jUgkXa0_%y!3o8)dG~WY#_hS5w|z;@
zdAU2=?y048AoXB>eweHsK01R%LT=A?t@|bSnbe0RcOG4qFc%gdeO#41Lsw*O4j6y4
z7UZbRq^R_sO^<krgn6<s_if90LOANGO}L&0#AhanYimsl`F=k2+s2<nj3#@7VGU4p
zmWT|O@b1diLCS(#ILGp#pG~&vW0U=*o%TX)E{(}TPSZtnDS(x+^j`5-p<2JoaXeL}
z(It-7$5TL57saq8+l5_*fNgI=!ndAu!}G0r<3S6H>df}vp*#pC48dU}3sN+oQE!@2
zq?`S%Ay*Nqgrv4o4bU&Ht_h{PGOe30yK94`BfPDwlY5YpM=4C~9UC|QkdRk2Vw~ed
z*hCm$3wcVtpJv>$&6*$k83%X0(Sgk|TfL`tdh>02PdZ549dA_fNk>z0sVVxJL>@Cm
zQ}RQv`2Jx<^G8H!zm0rC;;(vD&2Ef-qa#u``hKY~U`D?tBb8?^?@34kNYRWd-%(Th
zH>E>tp?c>P`6y-}?HB5U1fJIN7W#Dg@YPg(M4BQXDXCnMIe#9r$I*cbOLhoXit`1h
za`104w=5?No%rR2!`<>>JzrUn=c}JTzs!)_##QEXF|$lvSw9A+LW3kH%Ety2ZD@w-
z%7j8;I<!VSl<Byga>tv?HpwvUmTwm8Ou;5rkdwJqK1a+O&SQ#|?EyxO4hZlKV@54t
zOc%cQWdY}|u^q=wntu%)mXmvL;q!Y!9go!O*JzjQJ87Oap!KnMvu|<m>(nQmBE+)}
zF(fu|J>{aYK#OF0Gikb{*?{E-HX!?j2F!>O(AM985j4PXhN4fEB<KzEWGbrwmxl;A
z4*gV{BBc>Q9$_kpKhnn&nDMat*C}(_ru0@X;hj&V%u%~}{RZ86v)|+fHvg@H8W!PU
zLL7oQA3gbTmw0kiUBzpxYxqX$ir&6jmpJQ!?~}Dd9=VUKU4ka7K^oUC{%bKI*|Tp(
z+N*yHvBv)pVy^H}+qD#>RGeA4!UvX#5+@po#u_|TqbHg#9A%xhOOMOIn@8NF>tQ>g
zJ2fV%FHMyVo@M)=CaDpxzEWos*TFVLMF>~cHl?R1LP9Jd5E9&I-aI9qc{UiH&mURR
za@k0?IONXXI^YF2m<ULs?-eRXLgV@kZ%%xx;RH+!!o={z$Jd4z)Sxurd*DIYy*m8g
zgms9(`!erD!-}tdUvjg~$)-|+ZKI=S_l?rD{T_cw3wH4~Nv~FU*A^({e0ecYH)Vdz
zC-xkj)^^`Z8md$ljbBN|1yQO+Z%5Oj+|ec0iPEuLV#!#dSLTS4TOr59J&r_L9O_Ph
zx;sK(kuP%W3w2g{P77F)RgnElATxs3$&yCY8)uoUz#Xk4d%2Do@Mizw$bR+et%C?S
z=!(W12@aBz&pF`8v0tY&e8zF<yfvx^B>zU<Ro>xxlNt*mZUmw$AUdOE<q{R&O?nFe
zF?K{8T%&#`?34x3Dl*qcb?$+2ne$S2SCNEBKwyz<Q>zz(U3)QUC-CT1;u2z;r-^3q
z4wAxVI$%ngU9T$bX$>=exJb{ddrDJzRCHA}mK|DW3Du4)so;D0&O^j;V5vkL=RqcY
zvs?$n7$+MG_t9s}tAUT{W{yboz&~M;SEWhl@0cTIFfee1MAVbe`Tz?mh&3%rff2N~
zX{>ZnaVhZf%p@cu(vzPx3xiZ1Jw)6yLempBl?$j)&h8#YXnPO-8)Jl&11x^=jZjEN
zXuD28hI6QFV4-ho`#&5jYsut84{p~xU}lMQYy=ATR|1G6Z7gO<V+z?opAUd>xFTCd
z(#;eBmZd`R%Bz47hIc|gjJLJC+AU1)tQ81p6;GB&8{#8Cl`(oZn3u&BKR;tcWo)3~
zqr)tf3fh#2;>!44V;C9~)}iORfW2>}o71|>&Nl&WPA8ex*4=9O!GkXzpAW1fbmt?q
zQ3(&qg{l!q@;{55ZfGRy1ypW~<XD4Lly9#w=k~nIODNy7{IZ8djk`&=>aMK0BkDN=
zMl6kn6);p;$#<gYMHXPKOM9+GC3Mkkg2RVX<_5~Nat1G!nJv;X&zpux4Xem~Eou$8
zCAOps`^e%C8wL?^^CVnxn;^*q5kxtgK`8?=Y83@C7+#bpIvIDD<g!GrBqxf^R=zc}
zzVk`C*Atb;ANmH<v{;H3Wm_5*X=h0@)*4?%Z({j^wc3leg8K^^!(WBIk+zvp$(>4f
zw^HQEynLa0r7~J@ZLtN5*uOO+^j|uc=ZNM<Th<xbI*I!b0S{wF6QfQ|qM!<R^jk|i
z+Wz$X(1Nrd$RS;LBTi`<-G!}g`tSv+Q695~6Sch%%ljg7Yp<bqHZ!bAO_wilx)O+U
z>d4Wt7N2P71CO{oPstBJbF#U2(PkGyV}lDoLvBTbc*Ld;UqE$<uJd5IJfXC{NVTEI
zfSO|5WJCu?WVOh?!aJ*cTbt%r?xFl-uh{*NY3xh5fxMs5EryH1sE9s1DL%TOBf!R9
zt-bkplg_YWob|98GOvKQ`{^R~|08qY^z-$RN(}#?{2jhaGdmWOF(>;eVUfD^pVm9V
zhMF%@9=PqTO{8gEv5Q^2Ox6d)W|k+hx>L1?7e~Z+rXJvYTf(f7?vEQ75ipW(OrcX$
zhKPdFTVknoeDZD`x-6$EjcwMnJ)IC*mjyw~fB0DS@+1s*@?`n{XTc=MU#6K>sC?oS
zT-oi~kl6sa`GR@a4n#=_Zf(bme442YS9B|nUn@xp7i^b0rNOt6MO6UO%@@po#t2}N
zfPjc7)o#bk<Q`hd`A>YOOutvhuM*%atNtRm1B-uQ!=jh3?cw2_o{jDCl>bF=Wvo1a
z5J4G(Gp8&Y{j_&_oYJN9ZvY$PkklggrwPA^o*6}qDqo7l6c&k>b_~F}R|LjnKS=yp
z%%+3FaEhUNly|)4ZDN#v2cP1+atQ__+9`1`O@(B!HZmZSRCk+AL~tm`VZGt2hcp-q
z?Uq3tF=ANBc`^>N&7{Sj?+*#thm*-f4DoB<rFO<W>Js(vxX?akgjA6^bL2jFTITf<
zJT2yjAMO}<%oovhZ&T2<k^ny2t&H2+JFY`YRq8TDu6X{%t=s^|l?hQ}|1csKxcvy)
zxEuMvabupja*OsudR`KQLD*Q8{*guUq+Pfo39<EC{xS41c%Mpt+e|@*uiE}oX49Uz
z-o4DG8iRy>EG@A_Jv#BV&x{$iEE+aH{8?r#b)*UNZUdEJOkQ?f2SDoC#e2#U7t?dO
zO_rQ1-@(f{_SN}$5cAWnyL1Q$c2i3#+o_J_JLk>9J#L01X;1Ei#e3&*A!35TFZz5q
zXO{PTzGmOFp9YEf)c&Hil>DKCheGYz-QTotH&AC%S7lJDX@eT}H2}A6I&$t!uF_A#
z>XKcylrY~@4UR~T#U&73e*>E@3gKA^ed}9u+T7lW@%od*=6{;kZyq^u@PX9q6L05g
z^uXCNs%a^A+%cc3IlWyQAWcR0hkIko#8u?kYHCI#rKflYyT`gt9D0W(1WpQl+oMx!
zku5_s=frniIC~%H0+VD*#@Sh5diBGpt<;Fi4{p|5uJ4RW&dGTbwXcGe>I{+aW6*9w
zf<BL9=93GWJ(vIxnWg|I?L9fihX54mZz@h#!-9-2B)Ew(`SJl`DG#YhYcj!NG)=8&
zAF~v+OroI?j=5Y(>t%9O>8y{&Q(1AcOn;;dsTr{389+a%FMl8xp=!pOKHj7a8RnRb
zbetQLt){Sf&0r*9H}yOgE1DI2EYCfOVppC#k4EH4flNc<n&<Qc-FcEN;6w0-mxa$K
zNsvTp|CZREDH^gNPm7*)uSpQ8jj#&N$c}M1okv!&@@Q|3EUBfl$)jK$8pz%x>hqOa
zS_xZ+SxZt<sB1aj-RxSfzFbQ?A=>z?ma5Q&qVQK?Dt)yU1%+(%Kd<E&8u`-#Uhvgg
zda9O(&uhuq-*W5LB3FZ3ivrZ1FMCEUJSj=nlI4ZaK=?NJkH6nzbzTZd_I*P#Q-Aea
zQfhI(B?>BbkKKK5TpFqwNo<L(`-I3^k~EbAd4^PYy%LaIU2-;0DuGvMwJnK(H~@(T
z<lW+eWcjatnh~Rz=$9|$Z>`l&zcRE&|93c6G$U*gotS|ACuKKCpyQ&|voR$@uNA=7
z^vv90#eI;%P!tBJ>!1$ac^Uq;NQCOSDWoj-Md=Lgofg!SkXvx=_Jlj?rc9(TJKJ(#
zq<-+2O7_B|y<<7>2)>^i`T~s?pV0*K#DMTeyj*sbQ%mqI-EuiyrbNgUuyYMf0&F>7
zmNQCt(CX11c>mFkkU>qTMu~#<lzPX8N!MvFyA5naOtDSQO?dl!@?RNfLOke20oJP>
zld|H(U@RSnr@>`4y)YHD05ZU-4$Rd3yhjcVB1Cymmbdu!?49~W>P8$ZaxT0#49bFs
zqyUt!6Qj-NAy^t3Pb6<GBXw8{kb0%;iv%~tHRZyq>NBj)nsV~B_|Cyes?xkp4^(3Q
z+>)G3cp)CeRTTQA6J}Y9EwB!YYg(de<a?Dj8Vy5(uPHn+yl;W$F_U#UpAKWhaPrXv
zR@q@F&AHaLWpLIs4V5$5tR3V-Qs=b3zUR)Rh{d*Hcw2tL$(YRsmQo?ffgVwT@*_a+
z`=={}n;);7KNa`zDN7?7EG@bNQ6Gh}5(u(%6AS_NEU>V|YSy>hYyq%_bD||EkG@XL
z*UWJx0FiXDdkiZ9F@Oh>6ihVo(d-CUdNE=KCr}8}O$?!a@lXt`k+I004!Q@P$Shoz
zU=|iwwd_(36bXY^E&9ql6;pE);$+*f)Y+ydsfIXm$K|a)QO-<mGSiFs*)>55$y{xl
z9-FM<&@`6H^7>+@gGWlwlSLL)wt2p3;thGJiSuVyqDK`y`}nCyEQWZ_h|~tmruJ6v
zPA#(|`cVaO!6;QVhWRtBnECpN0<Jw_=r{LetmyvpJ)mnscb{-6(DOI3Ldeu=EA@|g
z%jQOebJn7p$d{;A!i9mK)wqw;O`=rhd*GSb7ca~=0K9tkv;-4i?qrgM-JJ!Ob}zop
z1}5UE4hKp9TPvNWNmBc+Hk9^tZyGyGb`}#3aY`xx92_<UC7M3xul$H(vZ1JwFtwv;
z9`$cXmnG|Y8b_fmTcom>%&7J;M)iVF1~nlvu|6*k0hH-MQe|+7O_37(H03q=3gc)G
zYC|O33ABA%B>A^p?mXMXZ`~Kk&nx3+6lKT~J->Afe6eZWbznyJe4i{7h}XpxVw+cb
zgf#dDx7SP-(G!WBk~9O@Hw^D8wYFhvDlIs%6Ac?E+w%yN!c>om=w8Wt1Cn=6@ZZxk
z>24g-1V3D()o1faAe9}PCLvRv%;p>j+jsL@=5g<z_dh9$+RkmMQYb(JZ;ThjRy&pa
z-kr&t@r&-NVNAPfoDB#Byuhq0tDH6yfV@}?UFEP0M@6qPKvMz=syuqok5h6Ui4W~N
zd;z}~KM_$y9mR<Vqr`Y_S(-+6p82Q;Hy^3ogI%&I9b;hoU9e5X*_P%60J^URWDZ;O
zo`*QFNlV+BQw&x@63q(r5!6z<QKvp2b4*R*>Xq%YwloBq`=&o8^b=30L(|T<3zJy<
zmk*H>+si53dqK{yP67sYd5*?R1d8>PsJ`OLI5cgr#9Qgvp~@_isI45e{gs2a6AQ=Y
z%+WsA->y3pL7E_R+$(NnclPbTj-17%03iXd$;fVF5a^97F7*Ozd)?!Wp%ouWLy(j0
zRU@Ws76F-JKViigS2bHhx}qEcd$kZc1ccR^rgI2%Kjcr_Do5X@Cbzk(44FZt8mgmL
z@=ibBS$X=;6zE7CV#1}9zoytpm{7@&&)FeQAF&tVI&t^}65^vVYm!{_*JLpdO|)Pr
zFH4EfdagMGc%vK##$~>DBl{x*IZbwdyrvKl3>x9b#^f2`x7ue<a`=;vikNQem77%F
zzFL);6WZBhOes{<2X<C@`zu-H#~!Xa*}=sh?${*z*xkP6j%xDbW47%`59%N94V0@S
z@}R9KC8j}Bb60bcX3q^NW=)p08HWZIrk4n?Dd71y#MErEnL=`?E&iI+j0xM6({h72
z#pZMr+7O(WB!tYC$z6pA(JT=N5|&|&Djmi|AStBCgEBQGrdz0dvQ-U|ktsMI<sa=J
zTj;<zq=>0f6Myqz=s4*qc@ZEyu>E`qW3PM&pYo8~GF!4QJMtuBhWRiTg$DD8Fe{4m
zs<?@m*9z{uRi;UZhzOUCKx(z!r@$kn#fmlPw7$^J%nQq;?pl$|C|HeG&LoGc(6bgK
zoU_xy-K7>W^iv#jLP_G=v0$fo)FP!-Q};b2>$pxkO3fp8SwCAqhRha85u3#d&4Ctc
z&2%nv6d9Lcy*%(ab+qERw$7u_^sYz5VjIG0i@V5`VZmOyrZM({>d%=zHRAO3t{D1b
z0xQBBv49}tyT-@AIUC`?=7BM`iR#OL!wyJuL1qP(LK!eE`h}buCSIuwPcJHg_i2+O
zOw2XR){)4QZdrpgarum@RPne)(#Yuc98L)U3DOaCSVC&J5+`E2)<O{IfaAZPEZp9e
zhJWE9sA#O@E?NNEwO4^G^xwx#Q1qrCEBl3rn@Jy30VmwhoD*@YT@+X;$#5NSm@qhD
zpr>Tl8iL1>qQ@qsY6t?)s-#4-xszL~wWIXb###Q=*2X*~ua~x0q&ju2a_#nBCk9iK
zrW>}bMstHiC#<uh8Z|4M4f2TXO?uF1fgEdVTq7R3Ua6uoc;xc#s*;|{6`15T;;&Fv
zn|joMWz56bL>pwNR7YmaE=c9y(7iF`37LHutW4aQ=x@cvAy_!LiLQV~{~<3&23%u4
zN5(j2?u-=Qlqm&P0=e7>!nhbX%~rG?g3#kavu%nGAc@ix1z^-=KtyX(<aShV8Z%eU
zD+#m6=4zutbAx0<>x@%74fxi;e&lpkxAp$hNh5B_+5kYJ&ZQ1<s;8CEqKm~gGelSH
z6DrFrsLb&^Z0|C4GTGzRl|Q=*ya?9en&w~P(WO)ls-uv+rr3T$!Y+|$iA$AU>Q)%u
z$Y;6rY^a_+lH~B#_{ntg{+2iUPUXq==XjzEFL^V4NxYbQu(lmhgC*qd@fqhCnhFvJ
z@nU7#$$=i&8aRE+xnzz=t;&3e;?1|t+*ysRpr<+fmvMF~`8E)&S#t7pUCGywO)JSR
zN0NdVlAGdXa*(1~o@tu<+mmI}FDIPLptkjEh!+x+cfKNMV)ZS~j{CIM;_sL<B3$Ff
zOqmnw;l&5eU)C5V3h$@H8SR-%CvKgQ`K&jMeN-WZ9%-T8#->cSy2^|Z&%AsCUQUgj
z)Q3a$@cN1PT}2|0lxLbVgCIiO6{--4Y+u-LdX09SQfUoCyiNDWjM?4b1+pH2qdiD&
ze!R>}=RFT1_MidXKRN8k#3rN>Qa9<s{HqA)5ayflSiH-3S4SOEp@$73F$*MJE{X$>
zBVD3?Mj@5=VSmuvWa1%H#qP>F8y3URB<kjMSkL{AeZJ9@ZE|^2rbObC>#xSiCZ2c^
z`8YhDKL$kQD2JXIp&)y^`d!12SImQ??@6+Fc@$KsIc0Ng%vr8yTx&&7=X;*Kjo&1D
zK>|oBnnGR=*eSN4nrbe@ft^q!mN=n1s*epWz;k#1_OXW4i<r2<1&_SyHjOf~cMX)7
zBz<>Ul9*r;ijs))h*7gg+cgb;wxaHu*d$wcXjH0!<G)*x!-x2QNLss8&VUPd&#PIZ
zpUPbOj2yt_An%ikAZ^~<u%nnC&sOJ7pGcJa5yStZS&+K#OQxu8(e${R%qpW5r=(^(
zmb&ljG=eHe(IdOsWC)ss$M@OA>+5VR7cloKu$!F(8-F`3A@rSFSC!d$xn5{HhVokZ
zm}6Bf+xC7HG&thRg3TN81ft_|7Nphl)niO|UIcsHC<?#OeWC}7Yys1$^5B>73XtEc
z`ruwOAu#grC*NfU*xeXu!_$@3P-}`&1)DM42!|PVxoAnlX>vwM>pXat^I$SeMzWv}
zrGeloO%_M9q-8FAJbY(su37~^)lAPnQq-KNzcwpXcA=;+Pfmma<v*1+@$P(X3@qln
z%(Y`EPhIb(yo6ObGUVBbAF#n_JFyX(rgd2}R`tNN&OoSqpiOJoKO+9Ae+q5oC<_0!
z>6JXZ5C5`--;f%C$VdQN$WO;&PwX%8f0b*A|CFW{w*?BB14OgUztBi7^O{$wdCuh~
zwsi<(b5GM%Vu9YE$)~IY>Q&i}?C`Y(!Xs;NEqy`{0ZEMOB=A9rm+zOEBY<LFg(xSP
zwB}#ynlosR?4y;MoLU1DMB7c~^S~G@qm9)ieh=ck2;D<Yf&+SUnrKQplbpjP*lat+
zUEqzkH_36lK3L4^zvC5m&&^MuD}^ose`l*?hID<T5@jwq-sUUrpp$7WvV04VR*>=6
z?qX#M1;|u>(RWuaZ$p#v0Yj2%?_i??+lUKXjziDRC$qxEC1uqzVWlfV^EW=i1vR@M
z9GT!66zhAYuCMEJkw+P^Z`!Hfa&`e&#<b)PO}q#m82M~rMPK$eCeSgmzYM3GBqoyW
z6CGRaGOYX)IG?)H8S`Uw0KK{cm&ge&!|h`>a3rGT({E{bo?12_Q4ZJ_9+oZ7P>6FP
zJ|J>Z8hh2N+%7P<>A3>!$twZi>pB<ZC3Y(OE`!1rYFT|(cOM!H`hp*Lv%@PtnuOKh
zpEa{D;=jV*tw0milpL9y^wW3mj9nLF+>5~G4(Js#<oa2Ev9H2O0P7+@tO(oXZi#$-
zLg#ksn7myZn4h`wx5Gr>s<Hh`^BM)xS}w1|oj9R^WX$VN==yYMFb})WsmN_cgz<=x
z80%4CtDZ11*1C9+OKBdyNfc@n*Hs0HBj}z6k)>k_MevBDIIv=*F-*Yjc*JZd*l0w_
z0MYCyjz0G+T5!@Fyz-DAvC9FvKA}!L*Qh?Y-tzJtWLoAayCXFM$6aSt;fC&GOP=F;
zv?qJ+2`D72OeQ<rkuZbj?U4}cWnBv{xzblUJpI&2CI>2UEm%azuoX64sWbgF;HJiq
z)cKzdi4b)bw(Yd;#!TsPP?|AQo9RFzrTYmtqvUV65>Dr%P*{fT<2W=PlH|T>fwwdf
zw)kX+G5h@K-(buZtj#tXMXC31PrRO-c;e|>1ks_T#yciTVN3wg0B-oTYa2II;iZ}G
z`De5AL<-usWkGdjxZ%$4yp~I(pi;@f=Jhl(IXk4n;M?bP4g-e+O(9i#6Ybr{1^}hO
zdvz2VXrh+9WQi&&1!gScupIc7-zerO>u+6>-O~}Yq?Fp`T<FuWODvAzT4JPr1;~5)
zguYVTBSYlm&+AzACoK5H*YynA4|3{srY*mlN;*v1w^Ty|-x9f`c2WfO6O+JbOVyK-
z+$9nkxV&JA5p9~@-E&K=puzd^kG6*@z>H30cG^WL2SX1nC;mh!7zgqE(sQae03<*9
zHfdz1QCJ3^j?Y#t4o}4d?PfqqF1%aYpOd}4NR!+)E~8W=!e$r_vF8-Iux|N&;IU!m
zcU~K&Q1ja`2bONctnxG#jO(LdI3!h1`52yjt1DwjG{9ytg|K&a9NJT1vSH8(ExCT_
zwQd@P9)igo?VmSK|J26J+d-uiUyIQ}=xkAa<M>aOkM#3yK)fD`mMykCYLkd!6QWvR
zl7XJQRMJrkr^^gFsB5M1L@V}Xg7K<07rKqnBxxd1hTK~j;&W>K?1|%wAPwro_A$b>
zn8TS{B{GqchLv!W<;jK1V2r7%t9;Em78UtUjdGKZAVdGba!JRE<x;#~QVBXIz4vMa
z;BmqcH~5gBU?cE2D?%DUX~GFZ;%WkubunZ%Y^dY+cd8jx8dGiajVfmC7Sr-CH@b2w
z;{ZTHI3Od?0obC}Z}U_!Ro26k0t}ot=i4PP00K64pX0!(%MBv$rieI6AL@HRe~@{s
z!6C=7gmqFv=$0V8IPX_R36Lx7C;II+bkLWoDX$rdS2(b}@88EnxKO;>r;`+%EBA&8
z*Hor)wnVdiGbN5Uq`t?csbgyA$t=cdPNo>-l7UMwM2GY{MF@~{@d-&{Fcal`3z%sl
zM>Es%yiFyZvnO?5S5hEk2O)learvUu?&%skI)a642QtL*qgmOywun7+qaqxgQt$Cj
z;b&76u%2)&lPwt8tDCDwVlb#FZId~ViI7+<pKos$3|q&25@<5w0hIp71I4HqA~`)b
zMb-ikC%i!5=vp9YHBId*GD~=4yd+d`#UDQTRCyRut~=?a7G|H<O8f}`kWz37qM~@r
zjnG(<TdduF^$GWyKGX9_s&*iQ0yWQlk?K+*Krx2=lvB)KjhPYD7&QP$eZyzBi=^V$
zk)>uYMh6mMD_k3vihBjzg_;kxUG1kB*oBj;=WKkzH%;szbpC6@Ac+;jRgcM}7*5Go
zPHW7xzZGKk3*Sk7u3Dti>gh@7?`gtcS0U)oGWR<+%l4ueGAbfqTOQHHMKQl3AxdLW
zP$uj0-G9-dh<AaPx78s&2YW!ysJpZ)+l}F95-!#Avwtw3gsCOx)4-ZZ(U9VOdfrTf
zKFL+Q^TpEXE@U~Z&FPbQa)-^FKEplHTzc`5ewMgBzn+}5Kz%PL5t2@2;6<6haCeFH
zQZcIAyZ>F%CdTVdc5`=s_XSV2p`gt%d0!B|?F7w_Xzvub3kR8r;}bp114LiVA1#F+
zlIXl1QM96=oGpcJTTS#8wkH+Ylumt|jvJ7#s#LDbI3&P2;NSzCy2tr%w=4_hmFE27
zB<E)K2!V=ufI)QFtb`+#B<afw1Ua(DJ#=Bo*KwDtSSk6uKv_rzGVeSwkAy$7ZFUY^
zmVVL!KSFnPk%dmW)b-dPcT-<%EHWh$s~E|qw)aIR3OLAe5=9yX7Pr-PYHytX87Ob8
zt_FIiee_fl(O}iYuI9$+JENMmOsGd`I*d;K_{P|6lNhEv$S1+qM{iLierlPl8sJBZ
zpzC+Xuaku3{Nq=)$1gX5I9JB)SP_{;SV6AH|IrAlKI#kur=pWlQNgL`^D&G9LP;fk
z!4<ef1AB5{+Yx3;ym%0fohvUZJ!GxWQXuuF2wmJc&W)dh8SausU73#S>=j9S1v-y+
zA(m53uH=177J#%>BxuMU(TOv{o;Wxe+{!E$SQX&`m}{PU?fDg6*_CkE{acB|HO1HE
zk$H}olf$by+{d%<Ghyn<EX4D2>OQ}+k^RE$V`zFqhTn=t@Cho-qcDpRqDQaw-}RmA
zErT{bh0uEH=p+Z&89T-HDh^N&a5g^)J;KL%dWD>lt~yLT$8nNSPh2UXjfO*8W)zy3
zs5;r=BK`^J*vN~1ZR`V&|MC!+3_gygQ#A^|BAD#NF%QgU*&ykvlASim4mX6$ArZM%
z)dod~A&KFQVOPtut_e&k%x`fkQo8&g#r8dxoc+qQ$iH=)ng{!5IEmuG<_e0U&=a$O
zEUXs1rh-eW0kDS+oUqgM$zX})b#}10jXCrMUX-3ZY2B}y^dE0v@-%%WrErTlP3I8;
zuQMocLFGb5qah7{(LDk&O@hht$F_1Sw{50X>2Fi+2~yTE2M5?G8@Oc+SD%zMXGpvZ
z$W(o;-mF>5OgOciYc>DlOLcAlS-k^0a23+p-RUrA+dF8@-M8OVQ!oGQebaorDfOIM
zzlk&JNMNwx_ycbw-T5^huuWSAS8S4M4eDu`=R&>InU_^UPQYQDGk|{T>|z5qC4cPH
zq*)?|%;xOdwk&{EgCJw&Jg~st+?ekQU9dJIO^_p=_=H7=@v9>9!DzFie+3yU!H$Mr
zB@SYNxyZF%ay?Sy{ot>zpGdelyTNc1ulOP8m@uY%4o_7b!ZgIT8`_|5M$f5$k-nsO
zmDz&2X`*JQZDn9T?5R(-0pf0A!9h0gqI03+Z_wD*o)vY929@K$BH!dx<Wf3pIv4nn
zNif*vaM;$stU02)X-9mpyWo<$X-b$tjPo(vz=+Q(|J;dGHu*f!9xDgl$)=KT1-RB{
zk_~sBd|5)ICmm!e4|;V&hg#-G+>@;$aiJ@tq?u**$eR`<b=MpWu8rCc(y3vp;6^|B
zI=Gt-w}Dfe>Mg73Qf=vmbYtm;gc1dURc<|jD6yB?e(%`JaBRh}V#U~H6X3u@%GT9s
zXkwUj1cJ@Boxo9^G>IH$%}t4Sxm;JeyvU4+s~m!~9ZPqG#-YIRs~cLK1^-@1eLnO*
z-u#;p^(u*|i`(?4{Ws!1_Mh5_k|2?EIX91zNJCvwHz5A6!;3esEi-@bd^!lPeaj4q
zHs<-{Z#^Vz`$56J@=s9`_5#t=@Bi<A{h$8}P)h>@6aWGM2mnB?)(FdxJETy+0|5P{
z4*(|s003@pWMyA%Z)A0BWpgiMXkl`6E^2cxWNCABFJow7a&#_gb1rRRaP0jHdmG1*
zFbe;bQQn*out12CH=8VINh?csth2JE&yth)FnpvTFeJwUF$@L}Nz?f6U)Qa>s=EgO
zDLI?nH+!*&>F(-Vb#--JuYdEQnzwZ``_1U{!EcW1Y4w}YZ^ozPd@=l~{mtMvZL^$@
ztM)gegWn8?_uBdR-nf}p_@7}ptIx_sGpCvz#SZkQ^0uSGq+FD3wRqah7V~C0t>TX4
zbF2Oy9+lfwTOJ)vt8Hpdn&rvqY`NH`?zEn51@pX_mh&g`s@$q_y%o%PIoWRN?YLYl
zs?J@Tl;^Ir9WJuP^~@EP<2BnlEw7s8!tUw$v|JoF^E3a4+orbKT%{gws55EK@-^z&
zq`K@FVKuGJs@bArhHiNrVwB58)4s3IJ3vsSeA(jayqbJpoz(4Oe$`QDzP|W;x;&{n
z&xPB|<NBn#Fn3yb&aM10Eazjh07-=emy;UjO&zUbQYAi(JTd;)4R+c@s20_jRO1{K
ziE25z<tBWO{u#E_33k49gVSnyUd^|!-<+ppYi)x?IX|fu!*)@Q-*3^Xt<TP<)sy-7
z#yxCZe=;vG>e<N_4bqbo)tgo))oik^#-d(Kt92FH<<Z7Ei>8?_q63M?u%&;7j;vKD
zO?0MA4M6E~o{*kQoi*jnNja|<r)LpuGL;-HuFL6*4WJhFS+%~jt>$%Q@r<^^otQ&^
zIl~3%@Ez`Ghd9lAQC!cfzb~tH@x)!RU(d_4YE>N1o3moa0U=~><=<g-xtN#G$IkxW
zW`CRA`|Pv7&5F;8|3orY9T(RH0qyM!(|diV?@s7(xtuPFRq;d$HUKar%0PGuj0d#7
zr-$-tTDdJNmhS%-r&V#*OqSDXr!Ayib%~R{IIYL0#reGXP*1A1D2vu1__SIyv%;a#
zqMVH@1ovIDs7A$jTDEObx6<0(8U>EH8S?<RfGR#=UZ=QrrG=Y;qu$H0`_Svtr^1b`
zZijDq<%@^KY&o6o>mp>US}3V5if_yFUf&eYm$R80u`53=r)_1*+!z+m9DcjPr9*&Y
zhglP>u!4mu3S6qcEnwNt=k*6ylYZWV!nd<#Q6FFRu>U~;`_~Q%$6ZweoU)$*POEU(
zH$8HM3Py@`-I-_|f;nV4fa-_)y7p{&_IgpBhsu-X9Fbt3MpguPL$}6XmE+Ui@vM0G
zs5qYWxL;QXhbF)3S-o)QXT%Wsr!ST+{fF^#K6eKIK91bNE>4GM^{fXIEOr@&+kcq5
zH0@K<RlmReD$c9pdDWhV4X=-jp4oI?QWW!Qv7FC%rB?ZEb{JIoRf@4EKEXp+#-5|u
zljdSjxIwrT^u1Bz<vC2*V^t?c`ehE|r!lGVhsHc<4|F9<xBbfTz$S#ifXBmGbJ6Sj
z{@f{b6Fw_zUYWgUS?J_={OK_Y<7c}PFsD1T<+9Mf{8I3jdQky3SF@AFshO+UEk8v;
zact)C8-Mw#F!I`!Y0wVo?wbm5*+$2jTe?<iLx2YL_8q)Oumr{KZf!;hwWX_r`cO5b
zc|*bQEimUFD$`IGFPcR;EgnUOHLC75^d7VUa_h-`aay*;QB}<f+RuqAnz+$8Ld;Nr
z_)eSINi`WH(5OwZXbKvEZ_^yh`3+sQh1<NM2kYTLo;VD2bozs<(zkH!BzSFjj{Cam
z$}9#{TGZqBh>?9$k++JErf*(UZtLtCxjB7boi!imQo_ACx^kH0o*-jDyV~7Ij!!6n
zbW<@b*BqKaF*Jgr2;`Gu+PKTe6;$p%IxS~Kdp@nl)i9m_U_d~I2>TBAlj@FJKkw<e
zt`xTG(*rAD(1D}@@Y%Gdley+<*^#Z=F~q~1)Xo!Wk8pf;w&{J`0295acJ!dlg_3|(
zqYKpNu07oQiu`rl&@cdB3e!}i?V&r_{g`m)r@7jizB<ky?uoX?1kqmS!gXj;x*zB+
zE{Q8<8tY&&nEfyTqMvHq(n!-#n#73apa_7!&EZfDEIDgO#lfNa<~fa#J#4a>QT4);
z2Pnwl_P*gT93LRlV|3};E1E6>D(br5N_QO>*T|}_2y9g3SVOlEE23ELIMTl}cZo+8
zzh2HzlH$M|xq8AVsja2;kP#ywckLZTJZH53ieJMPhr{!wyTV<w{FI(dCW`cKKTpr^
z9~`dulH5%I;WWz0MCO3?3=2g>0I%r|a?s68#WQD82h$x6=~u_3pEk>xI~I;1JaUxQ
zT|#tk>N^OZ1ddGS=AJGKPSjnI(II4vS~py#+mDd#$qe;1@UAj2M<#j>PZ*#3+YJl3
z-z;^IgKYS$?Px%5S7NfQ?oq{u8z#^ctE*hIZ1ZZe99NF-8;=LTEg;WFjDC6PzYgDe
zc4pwHtbJS=K9-l5#~CdQPPU6L=Iu=A^ljHuai?4JtKDM|WRq3Tpi*;Q0Q!6!nzs(j
zCqbueC!1U9Znk_4Q%)7uGTOpjxfj=LTupoZ9EwZl2ZsjDvJ6SU^^`41c8GaOgg`<Y
z5j||THOOFA>xdBV%A|r}=#6n>!QnVIG$%S?d5B0|?tNDLpSN#c{qX%)Z{NDUQK%t9
z#WnlQK*Uki@o_bF#I{=oRkkFI1Q}G2VYSWl!#dGbki+VBC{!-oTZOAVh2LwSV0|zD
zBHUWc%USCd8ZPdK#g6(3wHW_E6#|+ZH(}2U9W~9gDrY_DZQ!0d19wb8OcZYgeFd67
z{C)8lo<$=ZA#KFK<AiIGG8Ry=qiE4Y1$4o!xI-$uM=~ro?e1|h^SI|Grq>Z0z^PSB
z(l-L3@qJ(>_l6(JX+0@^_dDC%O*G$_*TuDVO~&`Bxg5#I@a3$&?2Y&QK!>N*<!hXE
z&%X*CkJ+ddq`7b23z*W~0>-wBKl*O{sH#5~h#S!f(2_y8vl7wZ`1r*2i<0>PaH{7p
zig<<T?fd6)x`ej_)jojA;eqc41_B{G4!r{hbqJGz|JSYEFINKNKeRi7^NRq`n%L%x
z<}iNMFjHhMaw-8C9(6c_9W{r6hIn;e;a<Cc9eai2G7#v{J19&ZuoZnggogZ?CGw`J
za1qD?98Vj!)`7^vRstwT;L0liwAZ)1fMPP}14$$dI0PWvgcZd$?h1Wa+_?i);D;%t
z{qq}X%3xDn3H)Q1lJ>_Re-8_`oe^5WIIG*L?GgmjhV}B4p9*z#mdp{NHuQGR$Tt(2
zlDX}W5$P*&R35X{`W%D>38D&W<u>iSttR}8b_Y`JcvO|1)gH9p)?EP-2|@*H_<gR6
z6iO&0@Ej)fL<h`cMJ#6}EV}!!qxUYnF}r=6Lmr{gw#PgcF$lM_#qI}jo=EO0N3NGB
z6Z}A(0Eg9{HH~8|=jKhQMvNjjB@K?|<7tl-(&SMuo=p(%S#rAtdQruMNGQEVsKrM*
zpmUD!hV3z>j1U1kOer0H#tg;R`g<u$rm@F64}omJJ=()Q90}~nyuT<6{w6P;j+3sh
zB~6r~?SNY%Y-7y2ht9%i_BM5;maPjS^HL83+<Re`#s5=0*pKSrs<`FxOxS(LVLX7#
zpFWKA?XTMDd#mU5O!o)jDH_<5eteb2OUSoq%AIKXd{NemUWCHx3W)9m*y!Y%I5>=0
zEMU}MQF+f%Hupf8S3g-TiZmxl%C%Hl_4jkiAK87TJd<d=XVv1gnFPu-af`j<{@!ux
z?Ed{}XMgM2`PUXc;N+RN2QRrV!k}4DThw>&_R~4Jm)!vk>97}5j+K73h<Tg591^29
z_2>vpV5Tyw%0q2tAX{5mzDCcPx_vUAmsf+LZeJe#<T#?WPnmh;Uoz{t)i%Sf(yNus
ziy{#ty+>I}oNzVOd{I}Onr#BOoI5^)Kx^bl3ax06=PZS51Ou@c0%!S>UWjgF1ZViZ
zx@voVrF}iiFw^I1;!erAK}4RYKiLe_o$HquvsYAp^<8;ZwK8C@vveJsBgQ<^F)+YX
z_rO&N+)y<AV>9<n8cToD+^aN*!12&f1$sH7*fUzHs275BK=lua<(FSMy-APJ6&dKT
zVtstonNN70Vaj2RdQfU95iJB=v+i1hRTPnt-=QH$U9oAT#<aCS^iPj4PpGo$uso3q
z5}F?t^|W4G!4-R2&L&f>B6SP;j-?XshHEr7JThMMp1cu}d1@p2>CRL@W2zyN4}-Oh
zuf+3vgHYo>0yra%Ym)8f>%!CAt}~|Oee=pqDv+2S1MTWGd>#I_b%aG-9mr(<sX<L?
zQ&6GIaHOg{IR-^(B++!0i%BzcY^Wo7^~nsyn-)gV;K4$Dv@2wLMFseE;~-ukK_gzb
zmAVli=&U(vtGPocuO5SY`^j|5i|z$gzYT*lYch0jXT4sG`nENZ*OzAJLDEqq?cDI)
zz3Qe{O<XsQ*-3F*_EIUl$^dvPtz)v=Yq59>n%aR|2iD+7DHmvY)S?mxlzs*>*iRVu
z_*&p`+h;&*v!X@JR-Rn*+ulf=J7mn}^?;4Ypu>{9A>6i47Cpx#1M%DW?T%H<H?u`O
zTUK4#bx$>S7=v~a6+7GCi^7cG0BebpCYres=m~z{w?8#Ku<w0QKFc$UH})VW6`*_4
z((@Ch=l#f}DO~FDH3CrFJruYyk(Trm(~dXp-CBWpU^y$Q%eqCyTdX1+z#Mj3Z`*QO
zF4F4<`q5$*ejul&C&^;w?M?#JNIwx9btpapCJxu8kzYg<!!hxGfd@qkW=r+losB8p
zbU+7j<S}*f4;n1p-wr#?R{M=5GzfYG_d6#-#g4+HV>C{9y46NX7v1l)oA0RCcZFhE
z^g=iazC;10=U~@p(HrL6Sv<I_t{=jUj{4M-s}J3B<1ij+L{oDdJ!>C+@uI<%Yx)je
z<?jFy6h*uM^hT)%+*$yJs5)b62PqFSp)iPHTmM`ohAj@EzH3}nFobFqUj4KL@_v2}
zSmo~0u$tb$i77JO-0?v6Z^Zqt;Y?DvVTKB$5_P11{((t@dKwK>ukk3g@O-5eZO3f?
z5%>koA8775yw%kG#}^}gh8rxp&lCWxn0qus#q5JQETul5EpY5`R~_!#^%A<8BdI*%
za6E@3)`(x<h&BJYXm{PlyN4`kGjRb~TrmU_SkcMv$BVcv*GmIKx|n=5h=oIf^$HA_
z<;eCupqP8!%(=z=0GOtO8TPC&KKvv8(~*z~-cOF4IG%Upn><CF$0HUoy+E4TAPo*-
zGo1)frZ-@zNYZko2UM|K3_B**#II~Vyw{F7^-q9no|PDg6^cO{IsPm>xBRw;Wj2Bt
zCBw)|TiQ<}ZuuH4*Qy|RVQTSm{*0RXha?sMSLIrHy1R{xM*1XsE$sIzFxY~tWtMzg
zufm>I<5bXeO>_?(L@wQUVOKI>#KmV@50EV!IM%cl-#OFpHGK4*AO1{Z-KW#~yoY}c
z;HB4GRFjt<s`;_|%TPv#E`Wnr6X+3jB*^LbAC`rPj08MiD?(o|F~Xm!!Wrt8un_-z
zs8nvn<9H;+h|RaSae3(*!=GC=X2j=nk4JFiNBS6{j$mMH16j=`rq~U01eNe0B?OXJ
z8<+F)HLd5>>vijj)IAz1Ooh}giAjT~X;xt!E@eYZuW@f`;jT=BtL_HraxI$kQE@eN
zi^9t@uTM_h`dz9|N6li<oIy462$9#^G1kLx`Ndl_I3Qv^sYkdPfCvnVBli;EA)%$c
zi0!C$xD|v=9xlALXYRk@X!+}r|4IXvSEv6BBc`=BPXzQFasLnPr-mtCb*|XLuGTzS
zsUx#S;)Ua`obqT2)STaVf))AIbN9vT26)Y9<kS6pHmS!|D<bFPdb+6Qf3Dlw!8B)@
z*&4&@oK*<J8!e+<r2+pf)aY5L`?6)Vqv(#~;r;SY_dWXT{u20sFLI0$HYx7j4X=1)
zosg%I24FOXv^2fSpmMS*$Opd$r_dg{hK9#s`y9Xw)XjRm%B>4|lrnHBBjc@an@JV!
z=HVIs1YrOb@5JkYPg33+>>5<Je`fp<%nq9kzC;~NlK?($9LY2K+stBH1~j|SdR(r>
zU1mWQ2Wo4$(eVN*CR7GvJUcYgRjT={mu(!mOZB~dT!zK+o5C^=Jv2RJVJ~{2DGJGZ
zYWF~z6;^x?ej{JSL<m0OZv~>S8E<NP_o3a(SXGV;EG>`g|4wc_7>V~Xltd_u#ca2D
zj#Mv*48oy&(~w#KmScb?%%Jmi&4m5~{=4E+sF1pTa#^?k1xl2H>JCfyfiU`V2ULoe
zs8GDxQH?%?Mjy6rlzB<PsP!dP!UvI6;Jg$X_tTT*N<RYsQFT;Utj7_M3y|OL16iZP
z5!Cj65(gi`cWee)7si8xP$A%CKkF9BR5cMkEZM=9$~*b5Ay?3Bj<f+h_w5a*<e)%L
z)EEsLd|5wx$v{0f(;kvx!6`t|*U7kf5bu6_9V!p&$!hr9>(GKfs6n{F;xFKDSMPFz
z_@S-lU&486X|*h-1NR0z+5p(KXEYc5@JyZ#yo5sws-IyH9fXkr<5|G((C~5i-B*8l
z^5*%Uzk2)pyRV;r_x#O|j1sQ1k?PSimfY;s%h%6Mv(7vH<(wXw>JD>nmzFod;W#Yp
zpB2l*xUxLL7D6lA18H&?a6x|z@_WG?hHwyi;HJ3(X`YP#McEQ%em=9;Fk{Pk)7Bu)
zFn-cXjS7eWIzJ{Z4&t}vVhmC*<~oQG!N&5!P@)klB*(rF5Vz|1w&=-7;6zY^M<8#5
zDc?!Uz^*3M<OR@~TR@CM$VJ$$6bS`!g;250k3Y9QrJK;i;y1H&Z^z~Mw3@&IjIiew
zDZ07sendGGGsnMSYW53lBZxN6%JYKE7M3KXzZP5>71#R4W%hKn>bz<gNk@ju=(>OG
z<r7~t_Li|XiYqhZDH;QkCEXic4z#}7^AN5ToU3MEBbi=$g9L{O4>VjQyexEkxGSP2
z{*P{rLs>y~r`V4HzLvcq*ITuD=7ZM2wS4wNbMA{4DNj`1dwOEPSpG`AcvKy*pgSkn
zn+`m>C<gj&x*EQvC((A0Sjc5SnNwf4%X0c>lD7%Z_||;&q%iuf*HRaBu0=-T>}K$F
zJ#QB{+UMRo4-nUqY79x@4=4T9lvuM#RN5cX!%IwF=qoZEf&IdchV5y6yy&H*nZ#Dl
zLj14la?vAy0YL(DhZ`}MRHOw8l6w?P$L^`TWTU`W#6?U;=v0IV75W#vtsEE0@|7L`
z9rhi*6QCVMbk|KeJKuqrC~PrtnR9N&FqX`Wh$f_~FfT9Ck316orNQJELM;QXLFO(V
zPpfjy7YrO3>nBReBv!YDTdV*b?VvcS#wEmtsX=6Sa=LIIigM}}W^&~t6>uyA-U&cv
zh*D5Yo3R9}3HpBh*2K<~xHH_I{170rkJaepdzLl63drd#oUh!gS-i@;M=U~mOS`il
zF(335*bnPd8{MjWhcF@5CO?5zGs9I95jGrnR2tJ5!;!D|+9QXvHPF=9bft*;-H9Iv
z-F2hE-su=@W?<{!<TQDFAGXg>WlkDo7Qpo2P@siQ5W&nVpa;0Y{@bjXRl&JzJas>x
zA3L;vO_~`8h&ZZ2A=)9JtyK89pfbn9ry3Y4>Icx_b|t8Efze&1gQ`dgiUkl8PwUCV
zF(!iIZ~4&%E8)If!zD1<B<n*PaZ$XEkl|e8UG*%E0SVg{dB>rr(RDeyS}6cgK(4>{
zHaE0IJr24bwuH1zzamP86bj-?O+cG=0<QC*IV*|37oyQ~4E~Tb96p2~g!p10{b8ne
zYRWa<Krbc=&n-rh9mXq&#J6D_>j$x|&%d}6>Jy=i!ZPN>x~4TM?zSl&FD^aH;r`ZT
zHB)8{*0x1-2fTTC9`-#hhj)os2b_?=I10zLpoNMXAv32d1`(}w$ijsc<YdE);+H}!
zJ7~SU5w#=IU9rDd))Ygh!p2M3I;#+kc-c8j?!{g8uh~JWy9P#0=&Di8KqWvO0oCf5
zP`f;bgWf*#p&fIzemf?nrh8gfv+;`><62oK?EImtE+j@`S{}Dv+tju*n2B*t>Ypnc
zWk7#VJR`~sisfzR4R%iJ*?Z(KTL0ZpWZ)sZ$WE~%`lZRB%E^SMM6e=D9}(X{G)TM%
z!qFYp?JJDU_!Vyaq_;yMBX|0drK7|B;YB&0_5SvoH}jfkn?&=&HalXF4iS@@<$_AS
zCTIl(fGh~TCPRq_=-o6RsuF}#t>)QwP~oh6?=E;07Qi))#%`j*avMZu5H!=j{U+y6
zMvNp<n_iZp`2`~a1-wSKUSW9Mc<cL_ASay^PgE@m7c!xL1i>_w-3I*(KdeY4-^jiA
zK|4Nen$|rffu{f-YEZaGi+i(Eu#QOX4${W(X%3&j?dmFmd09_{yS@Yo!SiSGs`W+~
zvKvxi(Dk%+9rvwm?^S?)wF&ywCg@i&^m%|j-voWW3Hm&Sj!5xDy*~U0TP+Nt_Jfd}
z>iISUSm^;Q$N<J|yZR7dd{_$un_osSX!Gc46p#pif8ER-fXk@v)tb6jQQi5Py73t5
zHFfK#?uRvXKS*6Ze)>q{yskNXnyVr=PkRu~^<e~x7?Ex`p*O4<0QJ|0tCIK-D2#dj
z%vz2X*Q9k*jGUb_w^}nU7V>b#!~L7YE_(^uN$kz&OSU6Zq7a}Bd-zaqb_gG#b~VI`
zP&KV$)9j^*t;sL98^pexRBq{;tD9Z@!Oj*nkKyjfn1!i|1B4gdAppzp1|3(?S$zF$
zH$4zoomS)b@dVdj9JXG#-0+B?;M082UaZtixZ*H*e|6luS3I8;&3pp<K;!Dq*^HgN
zwXmh*dTO}t@8RPgjWN6pdJi~;#p$vw+WKrc#Tk3InsT}ek(nj_)}Xim6HDT0&Kk$+
zQ8cBN`*H94`nVp8V-na^I==OE?rQ!Vz+wbRh@demr-&Lf#<3gw1k3@hhMF()=0%7c
ziC4*b)QVme+bHS<Dag_YMnJ8F$LZVft1-^9KZU!h#=y3nmgnacSfHO)#CJJPaL#cv
zVHr<lhhP{!{E&)&nL7g+^yiMB)s8gGCuro#5;Fo%Caw<ijmgIr>(_m30vpafsi#Tg
zl7VAz>@<sO>h`NkHzm{=Cfh1u0QH1(^Ib*ZE;0|KX!rTt#7Evd3AUwM@spLQLi(ae
z-(PC3xO{<jpxZ;fQ7=cVj+XUw@^VfBI6ns@+TT?d^5I6bcw2JjHFHl{xEvm}o0bMO
zn({zlNuGbnfe2@bk;*yPhVl8FPG0*LpP}-%dlmZeOsWN1isM}1g+xj_dLu;_OEAt5
zqK#kFu14!(Y_O23V$3r(K1cIpv`JrJFw9M7PK_ZNLF^uaA$xb>Tqt>(n;X)ljiksC
zb~j~5?$7GB6<<#W65K?^MHHz@qjnR_=AjMWJt5pA0LBCwEiE!QNZ5ddFwSli)|=&q
zMe}F9#y~vM=&P(N$N9TBZKhro5{cYpkK7HcQ0vaa2)Q&zqHP0U=mSFnqiwpGd?L?=
zd|S;=+;m{Cc0rajtvM96NRD}GyVL4JHTBQ>P98>ySfb}M7MS-l%VP{_XvfWY^<QK(
z#;I9&1h1u}7etEvw5@9BJy)<Px6{OC5V~VgdR`XE@JQDGJ-I2&d(_>)(=bsSMgg*d
zG}4HG`14lM*3O5B2$0#-I$JgdDWlpUM5P{w@W;Yvr>+xglL2vvWY)3bnOK7dvB40W
zG)5om%{~;xM@<JQ@IlsscA60DfCQyX6U8I=F>aYWJ>F7db$^`Cs}CO5BZ8z)(*c#J
z2;XdG=&lB_#z`;Su%C(Pe!{OPj-W83jLCMcMeMFh%xd5#Y50ehxAA~*toRFC08X(k
zn3x^2|AFZVT&dxUx9ux%zT0=U9^$KceTMc}+X9UPr`7Fu&Eom&CA?ssHfNyKpS)>a
z5pIyPzuRxN*YU>K_-aA~0`v>zUm#ZTuf7ciqKt-cP}XWFMvsHKxJz@uKp@L`#+b<8
zCWth-ECijCOWd%FaJu5~?@>g5J~wViYki?3d^X3=#HZTsp0hVx{<3-nb%cR9b^~SH
z;7hr~?H9R|UC(sF&!{FsBsCmYq)vv#SC=J3m@N+O4?Z9K+u=I$>sr#kbx`Bwi7|K}
zd)9@l6Wn_j7a(y$mPzo@K&!J|`bRk)l2jY6?NVy8e>s8!^sF3BXTeTAk!UJBy-{&Z
zLdCri7*k)#-}hJHqHh)$0wcaiwmhHF4YS5TeUpjcCL=)~5UxCO<Rt(=D>L{MiA=~t
zKtz-x*L)~|ZJZ0CPr+2(kRM~FF4iqkP>W!!&O{<_WXPsKFeIT9(QOggtBb|@;mAx0
zqKVQ1(7jK~LI%BuV*aI)00cut-HPnvO`A9=fDH_wjBGZYV*KM*J-hDkJ~$j4zybc>
ze1hrhZgpz6;0dA=Yh4_(C-&y2V_<Xke9AMz=D7-SHyt0hewP~O0m8vv?u@uKzDjD|
z|MVw=Fy~i28V+mj1Je9{H2@5H0Ds@#TmA1jCdJ$FvIRS1cUjQWtDJ6m`3<D4t1)-K
zAsl7XjEbG3a=x?Le8{$8hHrk#t}lZd*3RXQtE+xr?W{sHDD%MlUwK61hyi#K2ZgLq
ze~Yu*0pcnKar;A^MG(i0;9+N#Z%1x{U?=4t4T+j_b4SmDoz0fL#apsnSK0xWJ$`V|
zgMy4UKeaW5xcbOz-t&Rh7ej=Z9*=HdSZRDeT_bD$tGl!|uG$|kI0JS$C<l`RM}%Rm
z)}#YWmz~~H--D>}>v?m=Xf=o5gCg1pD@xWh;m?~E6G($y@jn~)<>GPiUHM%x(uL`E
zdG8E(S9h;wY`pB9vD#P;KJ;MekA3T|`!KWWYJh_j_l;MKoN`!9idzvfV)~C!5H0?W
zAuB@6bNOg0Z+(Qnt!LjlD7>3uN_-2=OOQ<^#_;~U$cx@Q@Wlf)whFLsHo6hsrk++_
z#p10K{77>)3)us#Osx|;>p(^#yCKxLJVZy)ZkNmfIdOJ5dampRjG%BL-?I0q{4CMe
z&3c-K8Aq3FBw+O38*d>~dQZn%mMwdm%7@gdMkhG*YmStsMt8i=e0t>36;ftcJks!e
zfy3`Fvaawkqp*fGK;aP1cFSM^xXm{wcqT+aMwk}zbCMFP<wJn>2$N>Ev+!04W6(Cb
z&6;B@e$=kPpdfgRf6NBJI=Ded_Ns_mJQf%UM_8qE2ii0U>EXa1gDqPzYi7H!X6M5C
zvWgGKlN*KK2|S%^!f1AHNIslmlt1z#wq^Z7F~TCG$iVB#bowe#^EPYoWQEEZrYe6+
z9USI(V(So@;f5{g>qPyCcc~9Ew_g<6A_{*K*b)kx5(RS1E}^<2)2m0U*XYIe3me(5
zHr-6+rNj~Ht&L%{-9?8Yx+gQ*&xl*y{+9FBiCq`f2UB64q)(K4hFiCMo!=0Yt&ODj
z$HmT$d-Fu%$FCcrmqK-wc+-(x_qg1#Os5Fq1l))9;65baqR<pu=a<g#>|0patHy9u
zc;`iHS3jQCn5;uZfeL24MoS7c2PW2*GJzdv8`q$RH7MEdZ)wX3Lr%DAS%no4=Bl06
zv&Al3y6-|JB}a{SmoxA%+Wp`*fcl{1zR`0BeQ>-#&i*HU3bE^ww_g^+zbM*s>8NaQ
z1%m%RabIi|Nq%yWyrRM&m46FlgtD_?r<T~wh4QA*Fhfjd1RL2fx+YI>6k?w7a`q-9
zcM;6!sFsZ=?Tu?#Sk_@8MQNGc_6%^P@+!uZ!y%~#l6qRDyLtVe*(%7?#p8~HRf``Q
z`3G*v8R>?+hmK|MSR@;{8q4Vt5x3|yI$G((u2t^h$uol7om`N1iKq}Ff91iiI<h>H
z46(#O%cvNv#HF=eTsh*YqYi@&QG41frxWmP7Vp4$bq-cRvxRnTX83ICL%iWJ+n0h=
z3mC=oYFr=Ja*ri)P^!2q)={azRPNd0fF^$kX_UaO!S!_7I64;J&mt(LnbEJv)*MQD
zEKrDY5HU?5Z(2qaceT)87`{nJw!P$P9}Ud73ui?~-VzFo#jyrU*`67@Ly0PjG*%@Y
zj2c9>X&^v$Sgv$421AT=%<5z%RNEOTvSXc&MTP@>#HK6s>x=wCr4f;18nIC{Cscu)
z`{ZzXf4^UT2`9Igls?P^N=U4kl9&noxZ~kg+)}9Sj&@|E-Z3NZttG#Gzy)~D=-4|E
znF<rM?vG|UV$aBIoDAzNq83Fti=;CQxWj*KH8T||AwbVW<;Dj7qP}xSWg-mae8l0O
zC@HAI*o|D#0kl6{ccwNU?X0w!n??0ItdocJWW!<45ZzBPqa5vth{a82m79`@!?P8G
zp6{dzum?ilL+p?u_muJ|6yhfEJzzOHpgs{T5*x*|B59)3XdFAVvkOlbg^H>^kPZCf
zK$=I4r}usCbc+T?hpr?`aWG2-#cN2ycf}zgOgspVh@K?L{%9Lk-m{!3>p-troL<Gv
z?h>UE{>DCd_uFgLVD$~K3hxHR4)P2;2Acc2bLei?gZSGgv!1o%ok7m7t}J1m>s5pC
zmUQlwCG^<wR_<_qs3%~L47{BPNC&9?MF*HEI2<>#=@o1>Na%c29mu-f1nC`-b_YbD
zdquHawE&=5Fpy!i>3l(uwP1Wf<~WJGNQoDg&o5*)lRyIAmKc|AAbk$})?3dHmiuJW
zJiX(u@8HOTuN3mUz^M{%ELP3qat8b_$2>Wz78g}DE6&^=)nFOmpK3ab6Q8%bRc!NQ
zIo6i=HopgZJWQ6@E+kvAdNr8{yrrlMm4wFi`xo}(@MAx^D&E05JAA)5t=%s2WIP*-
z+e_;GA$dy?-GG5Bz?gLG1G~;kTfqpQlFDJ5C!{)2KzmUyT;IHO3M@Kfp$8hk^sWd+
zOy|N8Ii6S5&s8rWN|GBzh*DR^saUYL^(CT`crYGgHu0JdTJG(zL0oa0+v1(ajNRW}
zhXG(f(5<hFwbUNJTavDFQD_KA)P2}q@5Xp1W9_}=rLg&0@Vk(|7{ZG5b09yGW*5b6
z9UUUdr-qrmJxwMVlbFbB-DM>1Mo+fDB)iL0BwQ<xre=#aoVXPF>PD&DBz++e9JewH
zp9RF`2#Khy5Z4WF)z>=KOfSxgqEn@0u7X_9FvF|bNH!tcZ5-jIGYd(-zj;l-^KE{{
zwp%KlqmsbXv+;B}36Vo2%3PY6DYs1AT0b}>rdK{0O>rlgcp7PpA1<y;9qP9M8J=;p
zlVkxnhE_9aiVyz=DNW!)r|465J2}z{y6RPz<Em{vgVU;zQ*RSAV3}k_V1fEUb{yIu
zMA1NER`WyMEZgbT>j(`p$dT~rN&RH>evEMd4!w)v{kwT@F|4QQ8Yp$gH2SHkB3fMi
zOWtS6m_-s7)waW3Z9W`69Z=~>0><n?;uz3hQlsgFW58jQ=TK)}LpH_D20~&1Ch;ak
zs-yccNJYxW{K-&s#*zmQJx-UE%4p1sIpssJAJHeR1G_1$ET>D$WE&ljFc@-<p1Wn6
zL0~EOmMD*pE9Bd<-0-G#-U6XAiL%fbz@RZihuUKKyH+uT8MP}J4Jb_|yM45ZRwT_a
zO3^GM<}p%E$Wyi>>8__98Bz9r<k{PeKfXzVNBYI|7dT8OAte}((4kH}6W&I}rI7rT
zx%{>IwS>=(i;`0FH8b~0!l${b9M1Z5iY6P&b2|435H5^nUZ2zuz9LFbCIKAW#3)s7
z@}iQgz7QVOtAX;g*k9vl)N>xLo+w!}-BKuEi1yp&IH}X1gxxqI&n=GaY&vv}ezo3$
zm+zLcHkdoJ&uUQ7)w@ApPXgd@(rxtNb>mmZIJ;suJg@&`6VWc$tDDF_*E;j3YMeN<
zO;&N9ov;oJ@B|ZWl1QWFm<|}&VBRcGPT6gPf{Rr1R%t(}D@aCg+Dt&9d2%2B``{2H
zCN{oEw3OWFuooKTqS__lNsKsddBy=cBmMh+RO?xYW0I>Ontg8p%S{H-gB4O)2L~dF
zFQ2^}70-RpKp;A2j>^F;J$0nACA%A+M-fI6Q&jhVkd532s=lc30>>DHxFtZxDcLS3
zEXOJ9H0QY>Vta?Ai26Oe5%2HqZ(V(OWg7(7<=$SG=>Vo{=k<Q%S1&$9j@Ua^$KyFy
z8~B~tE&QikK#RzqTUve5*&oq5-JjWA>hD>3o4{7lRJ2`1I(T-Dzhzt*Z31JD`Yc2i
z5DSf*v508Mkx6mqZf+C8yANW%a`&MDqih{irC@OB2H^hM-L=*i^EtV>;2*9wLQLWu
zi3u_c%O_CkwnM?LtZ79^ab&^(b;JPb2zsCmXJ90`;3S$ZWnxVj8qrC+%^S_*P3k~3
zC`=H!T$oYc+TTSMz->&twqY8w*nZ2vb?Nd;+D+&wHs>F<=hJ$eu6wW)>WV*8WO4^^
zA6=%U{;+lTx`spqK?mGmaLZ-$V<*$Mw;m@$hQ{3n0bN%x9KDlv{}#6{i-jl%6><eM
z5EYSfPz;AdfPZL~;%zenLi!47CvkG<mUWGmnaes%ymzn@(bb(nYO12`OoY1d=H!Re
zoX61`r8A4xJA<`0EkO4M#r<p_uPIT<mc8tCg2~{U#+{e}+0c)MbC?xiJHq+2V|Uzi
zAE;9+H9LDxHjaCjhKD(N#`FGR)~;K?1oYk@8E#lllM6b{58$&KL$YB`^&D4<vLxe3
zks1DBR{wp8DW827=<k-(>C5>K@EAZ%?dBZNz`^-U(0|*Ua9Jnic`}`%ZLszZFxkf_
za|fDC6CMwLdsNQjlwvCTm`*3xot-RpnQJXuZqrP8*8$y6#(_ZRlP`+M?F}?e<8sl{
zFu;sbWn1ZVmxypZSq|_#Qu`^|XK+yI_1pz<L@}w|5jg6nxmpu&lCDNFV?*4UC26Uv
z;%~p<H^JY21CkJsy|wkvC~Y|_YjguI9E`T8{=P(E9h6Q$3yfBt6~uFd2LL>9r{(#O
zvS)|u1}+<wR}*{www}Glu3ke_`7{?}hc7{--0wuUDE}4gJ9!fF%0&6dysHTWC`1E*
z52`z2Y21jP%qAv=k*0gDAzJf%{@@S){s$25_%FNg>5ukN_WWelKy1DF5-<o9FZHFn
zJlE-wFy<y(+`s_)79w`H%W;G-h8Misu$zfzAFVSbx>4e<@~G`804SVtr4f>b7)2DM
zXw{v7n9+5;M-Ht}INPsa4ZL#&XP>P-RgSm8<|yF7*-Q(Wkx_4p+VNVq9Nrt(wpVXA
zD#=?|&pJ<FIdccFo>X}J02xl2`IS3wm>G$*b8dT@sjCd95H6na`x)r28i%S5D}rsX
zn=N<+53mErJ=5`S&%kB}6+Vk<?v}OawN;fph<y^y^O<h3KR(sxU{it80ECX#YaGrK
z#P=jgkaRC?j$ZWK6<be1c2EO-L>rcNJg?6e!1s$V^l^VH`tfzWc*<+_W?t3{FM^&g
zF|VW7Hc(JV#TU?-4yzavOuI3^k<TGjp&Pq{3Ibn~A6;FlJr69LNhF{TX*B4>{F(1Y
z_V`sbAG_5nPrR)tbYjO7)v+A5h|w)ppxuo_{4t3AJU)Tu6Y8CNfGvt}m_iIa#P6C#
z)qDMAe*_yfMtyNPnG~Gz1W(kwnwBW#wjEPiAH9g9V(0gJ|Ibce1sa7ImkzyPT!on*
z1W+1RWHm*OdVzjPq-8ZlITAy&+@Z>6YU88jz2BWpetf!|y&n;@dkVrpK^XXiigU;{
zj~h(Xn+>WR5$!RA2Yr)xHh=cR<?D9~PvOb5IU?QId`{v|JXEct6<~~o|Mq50aZ;Y+
z0wL(IzrmKuZS(#9z>*YE*5Z~NJ7%T1fGeCwP&?X9l0Wj$a)6_wjjEGLeSBQaNvkqh
zoU)3PW8RQ>5C{oSfOCjPyWPp2R+k@jv}rT^;iI4GI%m3W_RJr5zDC%ez}=#cO+^e`
zS&St46t$U=rJ{HpP<{0zi(%Z2VDPYM=hXSn5(=R}{-QT&?A;k7k7WuS>K2cX83njY
zAhQMwaO4=n7cLVWjkjLxINX@Fq;Q*-3=)-clK6(0G=M)$7z8*3v@Ri31?>lj1b6vw
z5)6)L9J|=iCLTJDpy-MELD_lYpmUS;D3257A@knhknd_HN)N+&<H_{+U(ZfKs{sOZ
z*MK|w;WX-0!9=J$*Tpj@t}AYII|4PzUm%)p<<nuKAnWUCQ!c(N=RMbIenpXpRHorL
zWBPm{ArMULI&4gVymV6FYBpI@{eE0M;#Wg=0}shmx8Xm!tHYr^LWvu0C~;^0^H(Ud
zb`aEQ^ZNx{v7-y&cX=5ueGRh|Cz1fMHkmTPws!%KfOk~mUD2Zm2Vk`aDr^cdfJ*5;
zSYzwZTLXr$kVxHt2|&Qxg(I1eLeyQ<7v+2+IXR7!vKtKbxgU~t4kc#S!+16WJr8^P
zsU>EEgV|){7kl7SyoapqYcP-4{<UbQ!|`Ipu=ZOaZ-$A=El!G?p|LuX9Hc8V6&&Hq
zxsTJiDHhoV5Bd%M^V`MV+&=PV<c)uDn7)%~VR32VM<7p6o?F&AH~-Q?I6f+ww=Jen
zWj^^K?o@4eYMZE=fvQMY7m^rnM!Iy%eeepq>2>Qdk4{mP<CsnsMm2`NhMrI)sbE6|
zAR4AP=@p=W{TDq^WZ30+;a*)|maUez;e`Rv_F~J-Rv@I4?eRIN+ix5h`WXTOPJ4ZK
zk>7V$_U`?@yQ`!MQ0hkyRo|gjI&4gA^J?Clw>@QAM&kl3gV*OABCs$jIeId1l<wTI
zu$aDlKkz`(dU)zbs3wSDfYl52fFp49TYb6QS0oMmx2Dyxcf=+A<<1;P>Q07wbocRv
z{&E%fK@*93aZ}t0n?R~M1RsRX=#szV>Pu6f(0vDC=f=p5RJm^EVd<T})+_I~Lv2Ay
z!rN-`C2s6%ij&jRHjb8Mw{}FZ<JANMMtQzP15zYuUYRVoC`g8;;Sx}rpkcscz=tWz
zB&`Ok8XUsINDaOQ;I&(h5!QxmaSlJ^2d$9&0&JqcSDpQHjH``{4)=Ec@a$(MvU65X
zCev!iXPC~-id=MP=e{o|^|G~L@&O{na2vh_L;@f1K7y~Kq>#La3m*<b*+B>dM!Stb
z)HzSpif$(lkPd(4D)*?Wr4@2)4&#vj=@@O+GzAx`ZUJ>8#$~tz1s^2&0dk<%@xkYT
zw-@EPYALsxl)_-$wZSzU;4;VY<ZB0bnh-!)demVQz?iyA=f3;@2llpu5@IRf<@@1*
zy9UCi2k_}We@Y?Cm_F#Gx8Uj3%jC>KlQ$%P2YTkd0!ek>a%AfH>=-hlJvjrG#E_}$
zS{JQY?8n`!oi^3*<!^qYPw#Tka2TM+B6)J(VMX?apMUPgwnwES+gb*kO(pL53#BHk
zAm7$xO@eVwosG#aF@Em;trL&aSW_qQ5!po!Lb)l#UI*UDCy{5kRT%y;yf19Qe{jLc
zyji*v#ROG=1;hMNAPwXaslODcd2}P8q8$~LHf-pqIKZgBJ6G@@xW3_Elxe{qrxjlR
zhdEn})y>uvgz58oQmI9yypw9kZ;>dz%}qj9P*0;dK6ZQJS4TddxNb%^o}8|kOETeG
zzr{CZb_8IZQ<`Nws@wzh$>RU3=1nw+be*h4%1c@dc(#VD5-2^CbT1?mzNozT`K-P~
zFD0&hkAv<ZIBW^ekYnJ*QB3)%Gb!j-!1iyvygiPZJz25-V`qMYX!O6*tl3TP_R~fz
z-6bjHZI<8`vBI~=q480%!s}31y>xZjX{j*saMKJO1mMH10Hk>zGY@~ab^AF($eTU;
z3xJb6`_qSi{^?(@jVSIQ5BzHOl?0$u29O8wL4n9h2R=F~`RzkVyE9VFZyy3wv>`0@
zlfcmQL3?L==|u=eoLHgJvRIP@e-uX)F9IycIan&l<3W1}5hdI(+>MB?x>v<JoYXtd
z>u(4G&EgVetFSp1w6rNNH`r8v`rw><{~dujw;@_v1(VtaVQiH6R4x``l<gespvDC^
zL+AytTj47pi~DxC69SdpI3DMI6ty7^9D3t;p*B=#CekNFj;+fn*fm*e!CV*}|CH26
zT0@9U<kxPvNhF$@rG}KE##sBK!j5{2Yj2Z`#*b%_X=)~vRMZ}>><%+=6I{Ha7+)cL
z64|0hC{G$=lT`7V@jshO5oLA{6=s1D6D@wC)Kx*y7^+(Vsf~pWdQKg7{d@QjRodXx
ztebcHrROajyW?b9)5Z;CAdZ3YAt>2#KhU9Ho5W;8<328~k1(|MX;r$%3H-g1;Dc_f
zrejQ1?x+QxK3x4a?Ys7Urw!3hQ5v$vKoY-$&qvRuLV!73uli=l`*C7J6=}yLNeNh?
zUq)_zBUvhx3ai3Y@HQ&$(9m!(J>j%umYnZHU`Q*POTLqIOy^>`9BCAO?1u+i0>TLX
z3GeV~ZgaSpcD7<MGJsS&dOUYDMzzE!Xj4C^?|RVq6pvu!8>uO@K0keUriXZu`h?jG
zn?cSKT%(il6`KNP4)6&A*1)-VpE?GFdV$9d*_olZt_84-qf^{Q0<YV4i^Y6fGTI=a
z*nYRqP>)AAz>EuVsDrJd%A$D*9ZPS+fpVbMTe6|mH3l3Qc0?pR01FW?$9fZ@%dX9z
zb>Kr?>Q;QJm}|u~ND^sLpu>a16}AF@RH#qK`T4Uoshg3eljjeNmfoPxGn^iCajQ+-
z9$dWOEol_Nd8_%5(OLF#cwA52Y3|YO|A=mJWzH@N8WzcAQif1sZ0cBQ+kEb-a+`*{
zW|Puao%sW-aXsHpVbL-n>BZv2f~FL+;e%oFBBl$nGr;8rmj;=tYv;u1>NHMakVB$J
z@7YJWSM0-wdXUL2i%iD3A2464O8=i+Q>k(42T+O9{ak*BzYMvP@I>=8!1c<q6pAr)
zxGi`Vr4|XnViVQ2tRgMp#t_@;At{(u6u&4IS5*lA^NSm+>(%`W)`#-9ABTROg5a9l
zxNDLBrN8{&I&K}rhgM}#eN{8eI$P61_UV=Yc_iK$>=&I7@@RW`+zaz2&DrjK46OUN
z1^usqVU}IL33Qp=0qzZjBC4x=%=3^t3qb<mGQheLizp*w?(i|0x}LdrH4^=KMQ-Zi
zmqUK>#fu8e5!(gC?g)<~FrR(r=kqQEp~T5vAhh$QB|!B|K(hU+19jv`b%XvF!T$Ml
zu{du>_wJq4i__(iBR6OF(B<%__TE!;J#>H6ZM&@6d;k9VzyDE%1>+@5!b|I=4XfV~
zRFEp~Z@e5UikI_2hk?Ash1q={p;_U&)OF$FQeh^jzV@CJH#%_DakPrSc0z<Iy<B@&
z_B9x`BGr37aW8bFGF0E*l%!Cxu>t8@6#mM!XK=Q%+*`HuU_(&p2&)9QFZbqq5WGI(
z5gfQ*he7<R`*Tlm@+QnJQ9K`l5X7M>@EC%FHqZ5=t$U&N6LKzWk;KHv#9h#-0vwcs
zD0N7bk*H${l>}O1kmL8~&m21}U#{rOAeo%>5o`2Uof`uq?eA~LV={wx%qa&>+^L%R
zh4~2fQ^(HPh7I-6vLSw*G@ubmL_6RoM9<jGye90a)Olm4yagFRfIS-p2nN&5sCv#W
zCKDD&7t6-6*n2o*!$T<9VRSb_U6ssW_x?WR^up3YR>9qvj!yg7!xRmL6Hr7{SUs?J
z@2C9+)BezDh#S9EaE>4eva8pqP=ZY+;@>C9#N-7iIUUcsL|d^`uUoUjZ*aWy!aKxz
z_$5Ln!yHE{7Avd^K1O6VmT}&)M&zamcxQIHp>_(4gB`O>Z=kMtFo)*hzr~+8S6>4S
zqov&au%*F}e-s@XzAr;ffFO|kS8pPLOToVeiY2w4T4axc;iO@cA-f&7Va2H^QqY^g
zEFGD3VmGNd2RXS#eg|uFVS%^Vh*nd)dc|{SJarpG(cglz3FM_&$Gvn45pyr<oOF0l
zNQ4e%W=19iS_s5CB3UL$G1<$&VTkMZ1s;vOm{}RfJ`63>gifDWAA_1WQa7Y3na*6Z
zu_#n(i52Uf`o<*jp<h19LZec_$_k4%GQ>g|`5b=&52c9c=VD^la5r!-Q0_g$X5*+l
zan>M<Fu)JF%$WdN7Acc4Ff!Xtfm*Ze-OdJd6x(7vhj$4WL7;z!M|xfn{n(;0pzSuk
zqQPF9=MEq7x9L84*qO~zPdQcybSz26#pjNdEO`9wW8h4WWRDeQk4*mYX_e8m*h?XF
zXrmU{oG>7A{j=x5_*kfUqcnR%C&gXfzpnT-;$I6J!;i-SyiG}@9d!lMikFa`y|Biv
z)Cg1Z5^R!Oe_`l{#%uz!+1&p#17SbKB4B6||A3&ZD0Ux;YuSS?>2$c;vg`Y-8iO-y
zZ!eZ*$(^^h)&00t&I63DP7g3?lJNrTY{JOsYx|x^PX#stgTh!BsO@$LWC)bxa%BRj
z&qSR0mhzU9czN73^GQ8J-&&3^3N#aA;i~Oa8VZ}jTT^M95j}c==#|F`ZskeE36tsr
z$?PbH*>-1}gIUu;KI}en3hffL<7qiP{?i=oRD(MT7<dJ>yn6ur1(ZNJcm`c*V;*{#
z`{oqwCIzc5b`Ou4hC0wF;D3<*YeaZ)*B_r7X8`TgVk+O~oS?(|IkyR$A4T@fJtvf8
z+e_>DlVzgI%P%d{9Z3PCbyRUsJf9td#O})EZzJWRoE|IccxrN4TCtI`N}@@NA|l49
zz)%BD$s`|VnQP_^N5LoA#tn$mn&-krka**GT3zmhbNcvWT-qI)_|@nKn4^yffMGyJ
zlPgIU^Ke@sPHJ2d#5rjh3wAPnQu_CJyIm7`+edg-vV>@}tgD~Z`<q;Ek(5J6kW2JV
ztT$D-L^6Vr5>UAFALg`gDFmETv_TWzgH6)Vqg%pNuskIygg6rW5i<~i_{0a!f~8+Z
zWt(AhzD{3(6oJ*jt1ca>O`mA+dQ4{6Zuii~S?c85sXlt+ELC8Yj9S_!<Voo|z1n!l
zyPjYh>h8<$rsa`kM6fb2#6FjgcpKTx#w6JgW4G;$x5{!FtYl*t`p{=qzSAwi@l3ao
z&=^nYI}+OgSRL#W>=H65bbT2vi_gfM4{wPp_~}FBSwfNtX~+K#5t>A{%lqLhkK9|}
z_O3YC{J+5)2LoU1{3Bdw&<^D<;y^P;`=)=G1I^_c$CcFC<!YPSnE~I<%(K(TGs7n0
zsbl95%<?8aGDL<ywR1}(d7@F?1kipi(jpNUezJI}v9UcAE89aAgJP3?6;NhOV?HG0
zy0I;Ow7B@kC-s`?Ud}Cm+;%DX79a--^s5kdL-|+a);nUe&{XBY;o!#m(Er$tAg`cb
z!+9sS7281hXV?qOY7J3Z=J3~D`tu*LJ2&!j$RvO0O6`CVIZ;xxms{T`s4)j~cdNd;
zt9g`2)`RXH>`jE`pS?{BM3I{E%L2e3k<eA5`TT=DH+)E!ST)ZDzx)!L&s|@#Sn%qT
z_<F$VUas|x7)C9?@$71Si>t^&KBu}^>#`w%T}Z0s7GY<{I%T*Eya#R_m%*dt3LjNq
zg-gHZ=t}}mt)2c(hJWw&j6f!8tK21&L8^F#4Z0mC2q1b*(4SkoOi0U5<usA_39a`l
z`b1s}k@ur@eN3Gjt!LvW@p`}jcn^8?wI^b9VD8X5s^m^x{t?zsU=@2Xh$K8zJHWXg
zdWVX~Mcpl1AO0Tg+&d(#a-}>G|0iQon(6vO+;!Fq29$K`d;IXkdR!S>dJvqT`Vp*9
zX#uoZs+Y_EgRS%_7T`J?{m`dRp3%2{_32pnx;1Jy?P(vNW~}FNNVl+^j}3y>niv7N
z!*!R~npIP|0y{XYbvKI%&`zw_c718m`W(^=xAGDyF2K~2Qx*5XLThpAR^Pqwf39YI
zlSmG;J)=Q^Jfb${_x6KLld?*x=xc7p5AaoDx8jEUl-N7Q44m>3CTZxjpbZbkylv3(
z76|wq3@}27nv63=Jw`iQd^ce;V>5HPjR!^G9oOW){`3Nyx}^orB`8=lDzK&d^{jSS
z(_;SY+sJvOOLvK!m5cBA0Cl!>=W`mhTr}XsRl+^^>iM8}^W=v?@y(MLU%!Q4Z%c?$
z_a!AFUIX_G7+H}#Nw8oPhfJ#D;<}*DdUhGdX8rm@5ml`Uv{&XRyEaF|_aOFh?CDF4
z2-0)Mzog{j<9a?`o?%d5NO(A2E}G>+hh~F%fAv9>{ih$zCkiz3SC50?+mHSm9AfgQ
zLB4jUwSBvLVYag<%HkO0i%<ldiC2=5Shj3k1u|x0?;La#yGIIo`Bu)y5?0A}@da#C
zYP~pLJb~?k`;gZqPH83Os`6bs{QU&xU*(}PZkPkYhW)hWk5aQ0jd!M|8-;-=qe^NS
zX!%;Os^8*Es)vZm!JxpB*<h}ehA|ENYH(gbwh!|!G6$%1I81niA*qi1&&(iD+y5yB
zu^UF=roH_r+?fB0$?kDQAekI(9`^Cqr0$QZu0QRxiP+-Der$^9p}S%E%6ahh>_=1C
z;n><f{Mqc`EOxOwtsM6!wTDB;3P0)!;oR;LjJpYpaEx~e%H0Tx2_r~D;y7AvxZHvK
z@#AW3xT|N7;&HZI+*;5+VF3RPqIO4g<WcIy>?5Od`;x**xNZ2$X$7t?m{n2bO&01S
zbWE1R8{<>m@1a^1g<jeOA7thrm)3CUUP6it@ldO%pVwr0iqmGsV({ze5ey}T_qv>K
z_`9CX#9<nKx)ZE_2C4wRf<l7uEu)%%!1Qh*lx|{RCx<C8D-%~=U0dY71ep@t`ZY^`
z=TPXyp(GLkLc_@r28tzoli6hiJ7Di6_z>c`!%arvwj}4VG#(XuG2BH1ZqoL`(_P5e
zbcIpz`M)QCaD|04)ewZJknj4={k>>*uW4!Bh>>u^=$YN-Mc1SDHU<t7qlPG2{Hdg5
zA<bMJ%(o$d$cTIf@W$}Y1Ac#bHz~H-=IW@?gwLd|Z~sy+PJ4_y&&u|6r=PEZ*`~i#
z)drtN$5poHj`jVX46^U*RsN12Hqr?8r$t{8@MCfJ-mG>z&m@h*e@>TxL+WTws}nR(
zS7()kY*7R`Ndm!vr4bFH$8aPC4noWQT&-*04ZeCYf3ds89hrYJ#T;bgW(sL;maPeu
zFyJ_-^b1X`sUw<5;u>%LQ(1f}@@2P?#@{LR;EQ}^HH@?Jyho9yF-p1i3y$Z?5?^D(
z>iPq@nl_h=o3*eeqVTug&zz{;N-3hjW`<MX0<#=-kSjl~r&9zzqV9)B<@h}qhs-8V
zaYM3=+}N;m#JiTOM8*N5;!dY2Z$H}(6tZxl{DAx!TU-4lhdhiM(f7`#|F1(v+X%i8
zc6PP-3&p6=jqp>pLF;z$ePx#zn{+R)KNKT%K5`YqNgAoYvsI5w_>t(4!NKV18swE6
z#!6rF`{gLpSC@-<Np!%wnk<@=6VG_K=PPE625nXj2K!&sY1t|{Evxtdt?W-e4F`v&
znyR!K=tI=Zo=zdn7Y1+!lJXpbztP_jWnh{^2#pi0BAgB&hLN39(w_AW{SL8VVugS-
zV!j-^Yq7_ygEsoLvEs5dJn`7hc!7=NW-45?&AG-^6l2y|#XmRJ6#tkMvrx^U(R<`c
z(P6eL(4-A0ItT$K#p7a0aVHT_tYco6MObS&liaUcy6knN+zoL6w5n5um0$&Fhdm!i
zTil4qBCki6(%lea(MF0OnOZNXrw^0J3~)`qr|^|1Tk8yANgP7daS~RMM=~fJ%ziH5
zgY`v>l6>DP%%ojCO2|zE)tZ~tO%tqxAdMOD)T3SGfjw<|J@nlEZt)*`{TsQ9KGmH1
zw*49QzN5cCRSSBvl$W4h3NMo1Mb8I(e0$T35`CD8aym7^8jyqPSf#HBKp1?;%lYQX
z5BsrYz%G64HoxfdSoa1Q9Ttt$q;C1pa#S3^SW)d|nY6l(DMeKPOqJDEAD6(TS>1gK
zFVx(Rf%t8BsNfAP(j|@Th9xZ{95Q@kE;*=-L3fn1x$t9+#Gu_iBQbXxUb5QFHhP^x
z*So4hr+bA}c2N$yDBx;NwNFoay=7M6jh~*(tI|I>ZtR;4kKj)0U4DJ4YvtSW^2@+V
z_P}026|wjpVEPj8#zC-RiREi;Snakics%*Z4N-_bD8dJlr-OqKLq&1lpxBE&Q9;h3
zkw~j)BErP7SRPV;P~4AzLGOPdLB0;3=z6EG%3R;5206Lnb|h^IhK+5A{_^}7cms@9
zD{*OyW;qwiMiy7axCHehq`^C%H;!_gapuFtMdN8;$a(1)jibiBGpFDuvN&~ZOIB#a
zSrlcMZ9$v|#s&vrR@=9DXtgxb%$QsxG}of?M#(H)kvCKn#n^^e3(P=-To#jPEOFa!
zWbb=1B4%3u7`OJEXX@G~;~Ios^7w37Sfyl)?sOJO_+I0P7MfS~!_mNlY9bl|fqo%g
z#-`D(h71$%ThI3yUo~`E-ZVNkX~cfZU!UnI=UH+2E3T^I&ywU(sHkY{!T>rS33hg7
z?w{o-03)TP108P^zwSxDNl%LM@P>5TZUN~<%Psh$+ipt<{zCH8!n^*NTe%(-*2v`3
z1qO+^1HYyzU*L29c#|iL?BGTHL!*5_OP)LHU9>5wc+7{32Z@x4^=9HkVj^hArkWPj
z>}=vLKZ};(9%_NtSlQ7Ye;OOR4IGB2bY4#AzwBp_!MN#JHbeI5CDpW>XZu8droUQ3
z3t6jxne!j!o=j#M|7aUSFk0P~gU}|8wPMLzpE*o3gCFWzYY3|W_PE#+KSWh)4RP;k
zozlZkZ~N#&YKU1ua)<YH)jAWPN0~atj~;EK;K@Ut;KW8t_R*a+r?h>oqcZFJRO~VA
zhC6W?Gt7?I%a<dM!*|WiW}_Dis+u}K4x&gIWJjRGG?VIaw8q#&Rqy()@JM}CxTymb
z|3eKR-CExyM6pGu*yd%8Rio=?Yn#THX}G!NJk)tc61w=Q1!qWDl)bIal>l4o=OLkD
zqU&ZqAIimhP5P*;97Sc*9SUt^JRQ!KG`YJf$@B*sT(;vaj_vky+h8wL8+eCiZ+Jd!
z6CZ%G`~@qrTZNf@de^&q8B&Z!(*RBvfaIMv_M)JXpT-em!?o@GG`4Zk5Jb_oh7ps3
zjtv8Qy$>N$>9p#9v~xsGc9KdONTzVz<*c(|Sxm|xa;yrHC?A`^NWkxy9?2`cMoV5a
zK{#vLMJ#7bgu@|F-8!LQx0D!71iNH|k=AFOHn+A4o(`E$2z~5jg^`ZeRJ1{LvudI4
z)l9kP&KQ5{C9@`RlfQD5gmImpm7#++&ns#&$@~H@#2qWS&xjjsdlE802(?h6>@Y%c
zUevGsz0xybL~PmPkP}beY%#OZTDDrub&Ep`PHtUZhLTRtw{BGdTLQ811oy&rK_R-S
z12rX)8^`a9bp*u)zOdV2@diX{<#gIyw8f-ye9~Dx6BRKc1jbx7W=O0#o?dOx&cvdE
ztZEdEn4_9&_LlZhL%O-1!3IZ&`@Wl(ch(zk@EFp~!jXoavdhGMcw~#*2fB1IHU`!3
zg5@gr`(D_!K0xpC4BfLMEfXZH@EEjyUTdUbT~Vm>BBt&;1w|Y8e@#ya6?QM<KY*8g
zrp*R72IX!btvDhMu=o><6ZG<!*Y6ek8ootUIi{OypPs@$lQmsbU<1;wkEQ{!y>4yd
z3zj#(ig_<V-Zqp*d)i#UJd7D`dtT1|RGzomR`|a=U+k@tyn371PZR$FYjJ|lmYf<{
z(YbYyjN2wIW9bcV_y`TR$R1`C9D5HO@BNmmL>|<REB((!yXzR1Mhv7Qfm{2mZejjW
zO!>EI1;s00Yw03%x#=8ov;uJePJu^a>$ebi=QW1{)e$*EsYFW~bLg|cOlFRJlEWhn
zGdgB?#-};s7sp=GaC&$_++S|%I^PyptZx;m6+&?PT7+EWyn9C)sqebB-+%fe$^p~O
zo(0Mw9GaGEAUAF`vrH>ecG@tsi36W+U!7nC^M{ebmp*r9=<5-#t7Hw=k%j+cRNP51
zX%G!k%;Qt1%p3Z<XC&(XUB2!*>a#xi|0De0^@#Y!amz&5uv)7!Dlc7SuU!<5p(jwl
zkxKq9Mg^4)U%h<&{LS+}fA#kHcV9pM?)e+5dY#n3m@_79qJY3Q`TT)lzh({H>Bf&O
zvGz)1GCW;Fae&I6&#MnUu@nJgK~&_gOl7-dlCUQFOXxNKq}v!+KufgE%01?`BMKg1
zWWrtw58m?-79}=GO}*|-cBl2}mTs5`5(JqnXw4^p%tj$t8vtRexCSPp^VXpa+=}@D
z-#pC0Ekm1|mEdvTHb8=&!F~=1=-wUzS`cCf;i*|Yhuh&WNTi6qYotkn5!o<3>B2LQ
zFDjN$QpqtHz}m<y9H;$W{SyX%$d2reKB`vqew%0x2EL(DW-(WvDn8RT9I^;<l+;q>
z2|fu2@+xeK4Erft!TvPrQzEF_&sb9Xj*QHl);lO)Qkf>fwycs$k@SjbFk;)@c449R
z`u#}0AHj*jQ*8$|YUKNf1uHb6fg1iGjKDbB-Y(Fn-cd$Yeq{68LS5Qki9gWEWQHNT
zl04LC7{8tfB#N(~l_!qcMzP$m>Xf4xt(BH^h$LP$({c{ezO`K9Tp)ZB;lz!6i`V%D
zTVGx%`gL7-g9onl%-zzXx6>;(<1VUo)8twDD>`2OQ@Bumv_IoIA53)NTjyE%FXzac
zI7i;X;cqK{${Twg-oQI>J73LzdH?-mz5jyDITi%Za};`xcj1djqFaz%Ied-@)TD0D
zr{$H2^k5~&1qC5^viSe1c@teQkc+IIL?F>j$lZtf#)&~9F22Z7%xwl_NdG_5U-Bb8
zA^$fRsz4yxf1Ihxjf4Mk=WBSx;Spr%h9&E7hyuJ(`@p6i>qCQ5DFGq8u!i}cz{cFa
z2|bGgZ^C*8fr@T{R+9SU`V9Qyy99yg0^y6l`|3|mO!3OP2_W)0-1^FO+3RsyPDuo@
zF2Q;>xZrReiOJZuj9P7BS{G*!BPiVI7o0}}GC^75<iF=+AFDWeB!hb-&C1I>I5g|X
zfwP1yIbqm*d#%4k!5jI)eKJdRw{)+gWFL{$Ii%AwhUtUEw%k-%H0S+Td1FX$u$SS!
zbIw0qZabLy61{a)-pj|<HRoP&e{T;GSmmpOQ1Jf8`TBS?w$=?HP12T5Hocse%_d)(
z4K6hQ9Ih0f(nUfNZ6#!Vo_Zw&cM8gHbNLiMba+irovTb8<~d$##{i#RhteFuSNAw_
z%fC1LJw(!fu9O`mw@Kh+O`f?=5<W<Gpa1)wxRv2vF|PUD?BC22p^Tgm$WN1IQ4<~v
z%n%~uv@P5ba)#M?mx9FUqEu@`#VXJv5B<g?=g^nt0Io6aejIlAS?xwQ8&_Y?n=`_W
z?zG9nIZ%|Kd6%u12}Czz8p0U9c01ifSCpMiHooy1h~h71K$?wE%ie{%UBQ&M^%KcD
zhUEP+M3S`5jbp9jh;A*JgFn(ML;H$+Dvyio`MwFGh<W{30lRlwPERpz9bDe6I5`~G
z-Mjl6`KO>+-Y#dOAp{{*bwmtuW`^rWA2QBIaXq$+lszO0;9gW_93ff#US3e2#@l4!
z`8_3Clc1U*Q1QLuRn0L0DL0&tC`os8<mE0R?k?GTowWu`$Ceel*B@^U_z5FE?)~qM
z_9%jtPp|Iz<Qg3Zpq$@Yn=^;j|E*@G-Aa#~<tfuxqo2S!iYS5@d&GK~os5w2SJa+-
zjO4O2ciczj<MD|X6DB{CgmGh{gSB$64>muJyJ*GbE6!pAnQA_)&8A}#GWP$+$;-CN
zg5)q@ogsp^+ss=KM3PUf##TG9ztJK!H4hEBDBQISas+&@V(=KU-U2x&*+h)dY}PGN
z0}13M8AZ#Hw-~g0--rY?m+^r**|~w^(0a?%Ep1abS*PBB1AjYhn)5_q@D@V+zrYf!
z$b^@_&4`qYX-if(F@0Ub6aN#YZ@P*6VU6tMS5K6*y$jp+wpXg>S4~^9qd-VBtP4DC
ztOrHzmAoG#>ZMA0WW+Va$aXorj0SX-w7lwQd9}aw1699EV^v)Ywu~N^U_LlvW5G*h
zIC#~+^{LrD5z)U~o^Iyy<c=*wpS(3c+EV-f&J@Cy_tcGuvGmH?kK-bR^L4W=$C05E
zV4@$=M(y}NCM)p2QbT@pYRF$D_v1~oJZ|kqX8gwf<t_HBdW(6->MXmeB1fDq7U%8g
z-o2B0ak@Mjj+?W4xUfI9_b@4zqt5s0wp~{3z5Dk+|NQfmAx<e{YUo`~CPo($38wSD
zh8f2~HSpx=vC$oFTZg!ty2Nd8iu?G-$Bo?CZs^dqtxH?V5k>qBh1T|Xw-zft0`Df3
zJJ(h2iOUmDJ1#gx_{Tq7Hu&KgEVo4RTFzg_%`EnQ%*^0-zbi8D&F=Xs0y(cv>UJ@|
zf}2FpfkbJ^OOEW*)3f?N#mx{U!Y@_y$L?oUr(>b@jS1Jg^-J_U#g-7-5hu_V{k2DG
z57W=Td>c3THhxl{#GA$F+dAd(jS?NNb7B0K)8N0H2LI(W_}}0(m@oj5GrDzRCpsS8
z1pi2{!>k<t2B8$vSalJhjNI_{$%lGxzu4WaH%1<l@Wk8r`$3qed&Psy%OHf=k|QS(
zx73dPqZ~1B>u33Ym8T^MIDJZH$omH&=qt*x?C$?bdA_LTEfrIep$Ef14)^Fo2>MOA
zm|6Bna<C_}D^jy5p(2#D_m0Z89$RrGHNjqepoyqeRvV7(-qdH+53?E;cjv60PV2UE
z%RbpDekpd;pJ(-Kxv22Z(`GrxKPKfB{(DhX@2OHVTb$xwe_y)6R8;M%5<NNhi;}xz
zSShzp)e~B#FWz{0r=PqVlmDA7g635@L2a5hoO-iwC5eBjAvtt81%3;yOz4>`2cSF#
zfjsX`F?R4!bgqPs5MKzfX=KOuh;58tO3!-5`|h@H>Pa*fiCR{=!+egW6K=KHd7>rv
zCyZx?VUNfm%9UV_hou_@#J<C4EQ70O1#VRdk@DOu-M>3Py#eZuTbgrVPG*!M0>b8%
zH7o+uxQ886@)JE*9!hq)Zc5)f1ej00@Hp~|>Tkf{9z}D;ONRorLAJ?R@eXBh?=WJY
zH+O<W-EA|jQR)Ej9G`P`KJ?xSn5~7pO?D|(ApX5*=q@XI%XaDZ7*cY$wjoU|9P_?~
zazK+jWIzrH@s^^Sh04^5P?E3w_Omc?IeR~AE@t9!{CLDG;TDX1Ukl=`I*<WPdT670
zcVJ@?5!}e?<Jx_FM-|>7j+C;Hex2S$3*`%Vj^VdkFg-<SK;O7_K#)cAzM3WI(Xkr7
z6PdOwh*}T&BU*?jlSv!Tw>*P~$vZeB?*R4RNsP#wPQ9L;FBjpftxUaeP5$BfDJK(K
z4@SVXmVDr7CTeY5qwN=l`U<}R>d4bxk2q^EhA}IwkEGBIi{$%lqctk?YXfG#l9b6d
zILhHsyF6Ne!sX^m1$KTNYgL9dIlArg(AzewjL_9jiaHzS>4^<ohVEh%YV-W{OLxAm
z#B2^q=~lY$HV_E)x9)~5uNVlB$Uktw>m?KvJ-qF}08~J$zdFPn6UUKJH=n^6+=b8<
z@9MVsi-Y>EKeUQ7cQqYvkDzwNfzUHtN9TD;j}>`4qD11Gb_QZJ{rBz*u0{pPif+3W
zdXC8A9xrF8bu8R#7!QPFT^{1?|ET9Gzad6taXN1<+`e5DU(M&uytjiPZ5_jY+Du^I
zAkU=Z--t;Cne@}sYW$uoNlUoZ&Qbh}*Mo2?u9<seeW)EO3{j|w;}H(@nXcL!FXw1k
zi;mVuSN=GY612a8XGPsXMU~Dfn7!M^EMIHcSW;!HH3or5n5QWc{Y*fcke`z^<7W1>
zcAmC98ILQFfFc)*xBzj2flv|C<T*a5;4!SaEMYMGGdt^{sGGmIKD*+v5|=0U+3Hd6
znjtW|C{Lr$yco%ykKwdAvAU@U9=}08^Y6gVidDZ`{k@Sz?umgt$L4qi`NGQS7cbB1
z#TPN+@9>~@9zB9){&7dJhHfA0lUXm?${{@R8(7hSbYsK;DSPfmmvOe{N{>}78#Xiu
zWtt$4xwa|(?iE!#bx(@j2}xOZ-7{mciw1&dR6yC_cd637S+iT6oiDC-<rI64KO~G5
zrg&QhII@xyvS4)z#8<{F;#N(W3-j#MR*ir?3B7I80&nS?HIZxPX03=EZ{KE>v6;a(
zcw9#bxp7wjg9P%M#WK@~B>^`*X16?O?x?A^B1~^zTS{GnLFD`8`IlG!Rb35=w{!J#
zjfK$|41*A%BU2^_U5#PaKU88Twg$|kIg3r9(5UQ7Vm1dL&_l-&@Igb7$PEpv>K0o)
zpHTp*o0xQkn-0&lYfxMl1h}_Dc4Ru-i)+*$3c9R_)OWT{<RtweHu&lT+@ahWe?%az
zK`G^5fCG|kv~DNdH)fK26wv204p$z^R;%K9uw#1Z70;#%t;P>rN^O6#dH*P05&mwL
z!}j`|f~{=5FeHmxkuKSbuVin&!JR8SlLYs1QykT^a(-2`RXHD@Qew>Wrp3izHiFW#
zHZ1f4!6t|}cTEZb_-d+4HdojLdDX$6Ah8}6m%m*7a(VU3+%%c7Ibc?{;P{4#sV&=7
z9Qcg|&b~cumQ%_@!s{D0p4!iu1HQhVHY3@i)0+Qu8{m4X#~>$ZWL4O~XYQDOe%tZl
z`n9B0e2vw6yhH<>G0P?t{_#aB*+EsN6*A0!+oH%xOio0A%xX1pe9*aqm5p&7Y>a)D
zT2h;OXd;#_9>-t&t=?HOR9aZPB}XDp!P^>iIy68?42LS>henC)zmtvp4*cf%`bb!j
zNSj5?NNc|(Cf$R4JFh;#qN3&uhHZ$l8=NNDI!0l<8OBlo$kId8V~=)5?WZ-%4|?h}
z8T$usz?a{$Br7z#Q$+|6*P5`)@tfuuNg`h~5Ql)<YJc6K<FCe5Z*RbJbIfmXx47Ro
zb$B6r_A8t^ByK$$p@|jJk1!{c)(FFQ>*Uhc;gP}sc9pKijVv>p{x*~Trd~g3?(nq!
zhs^7=_KCc@=Jie8tzjZ4sWFqr8*8&+%$aN%kuk^cwDfYV9Kv~$c<LCj>hH^P>bdvb
zNBjX)nC?7kGb;!Cb%Rcn<qWQjk|LK(qPyd$ga>UyaxaQO<DRDEA}Jl0vx$Ow1aZY?
z$BwfjY2OKZ*no>kfZ*vdOaq4C4=>4U{5>(WCm9U|SiKe55lDm_xItYH)pUs2lkp=E
zCZX#{pHyj2htg#KeE6O@_hK};o{V5H4gio)0ScnMq4nLgwOHc1%Z<k1P8;5D0MTLS
zDw|em#Sb>l4}+ptw+G^xI3UKr?l)`&$V%KUf+%B1uguW<9(5b3_g1lRB*T`p6>!YZ
z!K6k(gNy?ORm!~Fa0JK+u2`wGYkXlpiZ5Yi`ds{3c7qof4AxB_?9407t2YSAls*7*
zyC<q!Gj|9LM49W#9mLrL+y;2KZp|S)A%Lwet1%=-hZ*D9m4rIAXA0MILOvt9{|XOO
zXx+x#O9j~EMj5f5twdBKl#>M*$f&z`8osnl_>9+h$J_WfaQlgUpABLrT^%5;-RGxv
zE@hYWwIOYn82FLfJ)oqzU6n<Z#Ms0m166X29n|k+?)D>Vub=P~@4J7$c<5lluzpII
z4k3?BuYR(LDDTKi0qlniso{-?qBIPOpZZ;=+#Eef5LWs-3YKGDkHbkssqjT3Ci9xU
zV{?CSz%_C~g5BGkG>wWXn98>}oUfZX*e(&})mY|e4#e$&?_@gt^0>Eixzk71a`*ne
zsrh44^GerLq)SH9J73&)IKOxh;n1X-E=uSa`+pqLcDnk*OR&0HJQ!Z;5HG6TkJRqR
zxZM@EyVC8n{X_eA_vXXD&YO!KjbTu@vE41~*B{|4%V)Nrv~uGjS)dy>+^+bD!e_Re
z$D7mJPft8=LBRusbc_GBgE<v}3lK{8O}`g++Te0gxC`_IGvu|4szi;6Nbj>tqDiq8
zEF5A~F#P8J6<W?Gi&P79jOPF}+lH`k1*Lwv7S|D-22U1LMDj{zX*|ZE;+-|bJ&<*x
zXz>!ILK1Tf33DC>%P)Rk*(R7jRub$fIa5!1@5dhP2-oDdB}z$G6}XSOnSoiooL5f+
zwNS>#t+_Ujzs%sQ{3}39BCGGExo>UcE9gTgc0D7$@!Wf+h6Nv9rHid$;|dJVm+fiq
zdfnt!*1wat;ih-GUDyG-eG}klLvBV=!s*VC6SkqC&=DEp(M4eZ8gRx%xlpX(ygB>t
zAUzeN!)zRDb#YodHqAjktIBriPP1IB|6p45kyPS4DyIk%H=-1byU3))R3YXy8PB#m
zwc=9{B6s<KUBIKsVFPP!_j+x62VL>&4>N<doL?zG6LESN>h<NQ&<FZT{k&3Ps?fhq
z3+a30243VQ@(E7<r#Sfkpd&v9BgD3LFUbGfPQ7`fISj$@8We^kyx6+9u?<Ye|JB?L
z)2*k1S!+p`U)CG&I|*HjrIPeuA=<I#5wkDA&gz*|bB)$GHGLui%FKwOm^Wrmlngy!
zCa_NoX$@<XhE%nrn*wqWsa;Q`&jX)^Zm|hJ_scIuj@P7KO{zx?>gLm!gx#|^&<psM
zcIsPwp)nvP|A1uciGL6hSVR)|sUSIw*FAjmec!uRJatt0v~&dVY&l)j=To8UCDEX^
zJPSk)2q;m&G3fU%Trp^qkFE-^{Qtk<J`<virrj#<HMM2);eTCn|GMNp<t6vY@3v3$
zXy<EjWh81|56t@BJ6a)+VN*Zu)j?23zcLSSW3u7UZ+uErq2VMtWM2DM2p#t$4&r|v
zNvP2-0_XO>=<I*wsRZ8cwy4%EOf$+#Z}|{T)8!60wAQn~BFh3Ut?tK<^uzO*zGobu
z3PW+5t91jj8Dc{#5!itm{voMT)9*d2@cG1Yu_9fC=!0VzKb9pXmPH=_5NPrk*rAJ(
z&YwF=Cnw+~;^?8)V1r+Qt2Sw7I}75v%Gs4iG=Q__lnjK#&YHz38`kGob3NB?lD(cy
zf*5CIjdledS%`*!cN`yvHgCNC+-hv^<!weGGBvx4;3StvQ}>#B^6EL-f0bhhxedzT
ziQ~Yg;Ah>klOR#o+AZ$I4AlVbI^-Vs9g0afh$cedYYzzj@Bzlytr{Jx#hD`IkI5(x
zZ~#7u@l@ECU=<Gp6)EHe2P4&+0K0insoifIu(ijn<}q}3fr>c?or1jq7_fRt=vnOi
z*D)6`-6c#!^)q+=pMLF<jUM8%k-ja|CtuqS4~G8+&bIP((*@|p4y+Z8(rdB#4vc`H
zDX4q%h)*GM>kNPwz(If+CQVa&&sDIG2~G<Q(14`z=1b}rK6+KJzo>ihb=42B*W63H
z`Vz&-K}thudQZim7HST+umle1xP|l^+eh!r*eOG<J<5f-uO5zKJc3sgS!w|02qMCT
zCA>q?Oec;faRje!mh&hD2!)mrjK-f3I_`2O4lxq*s}I#NNJRoV08@P7CdVh}*dKpV
z)meZ$+LoW^1H2uNnz1S{a`>PG!&@|yY&6Zjs3Qh%Vb2kgM_?eiD3Pda9R)taQ9$?s
z8~iM_i}3LjIGCU@4s^Ij7bwN0iw*`@O`N++s)q)v!40{HI2F7sJ54P@nD%w7$A}|V
z=h+aQ2SuAV@{&sj`*C#4?mI`^lTjwarn>*Fx6W-Z9Gpn$BWT><hDlod>o)n7ZWCVV
zf6RTd;V!uPq?dsf?f=8Bf?}l7u>J~Hfr+%Fs69ln$r!9gAt^m&*5CJYjk*#+n>?&>
zM(pUNn~D6x$;p)YXdE1^<1sjrxIfuf;i#xr{SBF^5)+gzVoVM<$l!=ui8h<1<8)d(
zW*VrUF_4Z8s~93bekyWkx&fQ*k@a6>@K+{-C{z1iNCbIZJ|&4;dw7H?FvmwbZjGl+
zs}wKi<kj}CGx1M&CU`IZSD%V)F6e}L`1oUT*?B<1{j!Vq3kz*T#C@qG`!_f?m;X90
zzxr|c2gzgt?yk{L>|E|_g}3Xm^y;=)dUZQ2z4{lH{_0qI_0NQ*S2x7cd<X|0d>&k?
zAjm-y%P|e#Ft4Ie35(`cIhmktw6mEE^^*ojKzDvx<=1bXym|igEm@1b{O&b8rFJ0Q
zI@r4|nsfLE^RdGply-fGgl0kAQBNT*$Cck2^l%T0-j}$Jq{WBAA+_m!0HNN8p{vPh
zzry0LGJQO|nw4kuSUURhij3i?JLTBZ*;PDS@5X~;=;I)E?}GsE!|<rN9C{_G7~I)W
zfsN9aSAVHsePkHy0G%5NRPXi5L2;yone4H)hmohTZSlA`Dn^BklKbJlsZhEKN7ljT
z!`|=$hk_&ia9@5s_L)-lXuj^$x>EXcqzbwIZfLvjm63Mh7xVJ`%jU9bdq?nJqkEo~
zSIu&PrQuzUk8yIgbJK4~7m5bV<M;f}U!+IxrDr|#s4EH%+~44)=c<Cw9W)3&dA)1F
zuMzd`BN$z$<8aOIuT}&^Xn~p;OA3Nsm?Q!|#RN>z$7yat+UV0}UjGal&?y86xg6H*
zH~vd6<m{r=rz-UKKqXNbzaP;*7`7V@&t3Z6x3y>{D(kUT&#LJp8+^2^rxT1<-u9@T
z-DHH1$(mNdtCETUH$ePgn`z^FSn9C-G)h=%XsL}VX^w8g?_|y`vc8bHq3zqNV^PnR
zmGz{dt|`zu1<iMZKfr%5n^4bwc?i)oFqk7`_nVeu2;R0g@Vnyv1gk{%hnD~m?4eCL
z%^&$#-F+D0x!nyKLaZ%s7Y$m;xy!o6dmn?nDLa(%Ls?HDC|2QJi$Df`T+_w^5MyQ1
zLJlU_m}m8w-`W95^gFgVhYQNA<obi_>D%%W!%Gi}Q~LFd-&F#gQUL<B-*MWxqYdYr
zYK7{F11>}Wc<uIT<?8@lw^=eQR&Xss1)Gwigpg)Z6V9Hl%VgtTp*LM&GuI6SKu0g9
zvJ1|!$sIkGKRzq;5<9{#vw|_u@(w*7V4eL4@~O}?vpd$Xw`(-I?@qYskWEh;#%zbP
z{$yAZ^&-%)jaN~8X(=4`gL`Q2bWQP@k3jO~Zg2P(c?4<O*S>DtzvH7~kO{Y>`fw~3
zvR)Zbb6)71z#_h_ufb5xhnoNa9xyW=Vg+vqi}^=0BC=}_w;&+X8fMP|yxd7a{TUJ`
zjBg0&YNv1AxA`>4<_;ux%Q0kIdxKeP-QU1$k0E?=b1ru;F1oApCC+t3zoniXVP8Je
zy7X<Wup|Q7Q}|J_VWEA^9clZ4`?TZ6!Sy>v$1OF>;^w*Sn2qPSHgbI0oE^d2>08RK
zz)zq-p<H8$Mb-?o&d0zl4$4E-$o=w8>`}cVQ}5_7WoIcv#<#wS8J9cb{5KCN6b|V)
zWjcit-4uQks;W9n9&*j0$h3zK2>^cxb0DbD0O380!3b^1LBTQugm9)~4Uwx*J4uvY
zE_>$qERnuOR?u}2?r3$U!%##$2!My-b1;;g&^gDL@x-;!3jmol3CJs^!xZI-ELiyQ
zZh1*{XG44I+5(|Vh55KBL0Jc3QLo5ugrfWpfZJ&~Y?143Ij+!HN&B+|taM!;LM$uQ
zV~&Mg$E#rAROU-Lh1rP0<oE{x!qpocz7C3nL4jweyWdXb2FJ$;Z~^u`BtTUU!URd0
z$jn^trgL2dzklco(@*JhS8P0|s!gxoPo4f})rI6S*TJ=z9dUz^Bq_UF5-Kk#$y~Lr
zvu~>SWJSGwBQNePyJLY&?jFUR;mn(^M?Y1FO%l${g=#??Ynt$QY#ZYG6buDEDmv9*
z!pZcxWKcNSit2idUAF}o&r+Twj@D})s0t&+&*K{GltyOC?ltc~&PR4uEAi>z7N*cQ
z(Qwi$i(=y_r1R6Y!HTvdR1v{+7dX-#`%0#j$&+NJ714o$coLl_jlfxHk@~i>n|K9H
z!sv(tj5hi*szYq+en_o|U-?wTp9Ot$+`+fy{KP$PdtuYn3HZ1LKSR)8H*;Z{T5p^m
zuRm1<K>$n)3F-oPK8StjWdKLa;q3{H_0WRlB1sjM;UYn%ol)BxZ)UXJUK$<cG$Lpj
zU#axWWM+R5k*`DV0+p?7iO*q9NUL9BhH?oXkh%Zom9*;+7YgryVneJwVC<cAOAB!b
zEIr^>!4_zZAR&?&k|5DY4txP8R_kTo&Eh&t6myV&H=9bQzLGiy2?^Avfn!Za2{Rp`
zW6A~$)s5J)eU(o3S&%vLVxz$&zy<$Y_n#STIhexIjEUDes*XWo1q_l0wfhKEU+9#w
zXm~Fcr%hW4F2jdk9+LIx?|!E+B4mX2z@B<XNIxz%UTx0t09N)cDSWku{x7%gxIi`!
znt99@*U*`l3((}qI2bZ@uq)iW+I2%+&=|ns2E3PpKFUu6rNy+^IoD(#w-Xk^Er35r
z0mRzVM0mspB2rOQ&>r_6&ksE;@O5&*0z1S-J_)b}^r&(F-Ip)?P=SB^H+eK**<AwW
z3;n|cVBO^|e5pv5Y?~mXlG=7A$kN|}zAW2n9xe*zzRvv>!O7Jj{K`sSB$~8nX%Yxs
zwWKKsL@sY9V?@4P*!8Tu*)#FX>B&O%Hp(9nHSTXIg;ac`xlu2Q&k7^Xv<#$W{eSsI
zZKjDn$SPBLb3o{tzA?hQ3Xm2$)A>q6i4JLK9V5Ehc79D?<vD#_an9^`+L%vC7*r%Q
zO$QJbkdFw>jrJEuV-H|DU$q!+X|DF|cYfmD)#pf-F`U5;8E>?KnuG7yY{83kuWk2R
zZT00R-Rfw!HF3*6wsd8tRJ$>Ro9wjNY@&E}uWz=|mz^6OohsIG64qv}70s>-Sk2}W
zP8ogEe}>GBBwEj;4v+}`aRrF@9K5}i1Nj@}YAS}w=)s|*S_tVZUUAj{3W?gnRgdsD
zStSgRKT)DjJu1lw;8omjFjW`+K$RLq3&xC@Jhox+jVp8yQ>xUGam#WJY(r6Alvg1k
zVH}!)di0h!o`+Cg?955=Dzt^>?-rOk!7&V8X6w0+i<#~rME})VWQYVU##62@?9=tc
zmsi@MW1OoY-qY@;V*z2l7h)x0?aKEMM*E@(jzBHHqH$(~ro)iE4Q3AkxFb{vpeK;;
zdAE4x{xLRR`Pv6T%mWYMkb~1<7v*xnc;0-+dqerji4RO*ae^-bx)6Ar!{Xazi!rGk
z8rBm|D#{#xKL_SiP>boztpVY6v0J==e_+u1$PA0u6^6y({cNvVafKR}GZjS}&K7l&
z>jJjh?W6neuhfBDq~GJezfvcjc9X8<Q*}ehPVOOzke1c_Lp??zvOAOzxqNyIX-22z
ztXwqnt6@<*hlmmLsyzn*GmtOIg(qU-8chC*l6_pT2h0QDxYifd2__?gk-eHO;pK<^
zAM*<GY|S(n83|9KsLHlRx4V<N<>Y8?Qha5&7s&;_*Bk)KFo@kgNB26EVKX>Aba0Qy
zY=+}<KEJ{P1iAUZz>i6E&h6f23jbb)QzBmsQQ-Z&vBDGl4g-M9aaRz$Qxa8TZGV!n
z-+A@-rF+x0{*I_lhSA~;iZ}IQS`B@w^3AbO*nU#g4maA0DCKUT(v(D$*LPaFlkBRh
zJm{{_F$H39SnCK0_`0O&+n0m*!5&%Zhw>qEy9KGsYDYSL=7At>la;4ClDh$vSDI}5
zJ2FVeLS<rUe}nxyT(i2ee|G3!oK2jE`k#w-w?3IQ^GdaQ>oyHyEIhP7VLTFYH%&W!
zpxCXS;V~3`!d;QbV6_|9FshMt(()_qWdLd`=)I16NV2s-ir{Ar#Moer#NZ#u5R?+5
zYil%|6DarwXF|-0JJ3?~XOWY^c&>yhDg>np3P%H|B)%WH?rG$FY}QB2CN+qW1WT9L
zApnFTqvsKR*q&o<6?SsIZzUtilD`IZTCb72)14x*g>H0;+;^}b@3y7`KJJ`f%c%oH
z9bG`4@gqo2IYADwe=~A{DM?Ns%9&3uLPKmM37CN<Y;~~pCXeR}0w{*SYDawsn(BD7
z#z1}|x*(9`QwK$mYVs*d3#5`Z7fp8VYshm>XvDWOt%K}<$pekdqPw#pq=UPAFl7at
z3yB!#V7beeAtSFmU(RNf5FKQ36e;V(@wbc9vn{b8sunYbnAR8n#sp$C<c>C;3xr1e
z!?e<wZGEe=dL|;OUHDO-Ezdmv%D3Mnr0|fyaQfxpv4UAkMhWxu9H@>mx6_u<D$l(z
z%^R>&Z{Ap)uW7Dm1=QA1P3u5pxw+YphrZX*K2@&zwHF97>j;Egw}}OrzN4-2HNV6}
zO+oZazM87xWo0Xe?^>GuC5g*Xbj;dNcxaxL6ZcAV9BO@h#ls~J3*l3Nbt;dLF>5HB
zv<Hb<i0jrrYsc;xI%nZD<O(BS>s~c<JQQXMb`<Z-ohnu*0D|d-7?5OBsjvWHIN=e>
znQ#g(Sb<`)9+}HIuG>p<ix>sOS8eNFfHj(PT!6OWBE+={snVIO%;;b+dHFXyA)H4T
zV7*+<fm{Aiwip4={kMKkSMG5$oi-PMENTJKPsi1LaUc2Y7Y}e#@K%LK83eR+uiN{?
zMOXaTA;-Np{wut((0{<^s)GIY#r$~T=zYHDIr#`VPOWj%`1`VS%*+gu-MaBkn{i2Z
zLl4IRw?1~Q<I=fG?=Na_KyVDR<L;Sm5UGF!sP1r@9$O6<<DAqGM|>ByJrqE256<4S
zpjQF%9G=Y&*2mI@!#oA!m__-%nhku{@OXi|+5VcveA+X=55D3rySMnCUqbUD`5(7Q
zy{|!Yg*2$2Rw#b?q`im#*kL@#bR6}LKM~}19e4Ns^nPwBRL4&r<a-Z8Sl8TF*lzCm
zAw<nzz>r@&FwLKOMC(1>>)Yn;NPfcJKiS-$e!gkt|Ls@Y_xOJt3EDXKPk!RQeDIGt
zah6wM&*(pg`}-+|c6w;9^dTAO^?Hj2Ww2n}4R#yeA4iP6g*pG-?~-rBN$nmq<rUt6
z_|$ffCWKdv_}{yr;M?;`Im=XmqQZ@fld~VstLo<}co+qh6-!zNrsNw|6`opWA!da9
zZ_9k8pTDuqwdwyT=G^WT58VHEEO2mm(ry5wgnM&9BFmPHagWVcf4v$M5ofv9E-)~u
ziutv@h081HEZFUMh#o0MUF&%|>ReJt`JokyUTYV=JH|mgr1eA-eKKH+b?31-&6e2_
zL)!PwKAPG38qHM6Fr$jh9tL#PqXp~vyg4d^h>-0c0{di5fcz74ovvOF;|=f^Fbb>s
zh+vy(-Waq}eJJ3-)cOvhC0o~pwF_oti?&V~@FHcWbjwMZN7)+tM7zVYU>PmaCdy7d
zZsv2$lW77t1Nn$dE{4JXVcTW@wjrw@Z=7S^u93kanH9#?s)=o)HBIdps`bOzYPeB~
zE-?QKfxW;C(5m$P*+tVpqXG6sY%Q4B0_1GN#GWwLCFe}UPOBJjD7zqXop!Ox;RC-X
z2^s2{qJ=%qr$vuM6h2&*XXifnB)$}BvDM;=nUi@kt~HS<BAOelCx#gzt}?vSGc+r)
zrP*d=RT;ee*Sp!1pZ(38?FHVGqjmuy6x=(_&6Xea@B)SBJQcy6=dgL<7W}N3ROi)f
zQq9ISNCr~1^DrL=nV^4Jw$&?vbZupFPhGE|A>zxAc4)rj81yyR5c)`D=v7-?E*_BQ
zDdp<`L;w{nM{^`$TygN1&!0l#4|r)mc!t5AT|*4M3=Jpcd~$gGpVNBwzBpYh&fC$w
zdlwfM!;8;{&HUuvoA2*Em~dzJR<R8Cn>XLSAkbe?*DHC`lRBS&-~#zX6Xh6%XEKGN
z=a;rUug3LpJ??i%@(xO<vG^Vyvxm|Jy`r`JmXtr#3s1L4BN-G5g1aYHaO|qqO@6WK
zctv0i+`E1TqK)0<48%3NAIf<fOHbpSnpEjVO)Iz6Es93mtG`*!A<wl#fo5D|Ty2)H
z@**(c^LYhPb6X#^6C7r)=mN9z=|eQq(`J%L)p4HR1BQap2UmaaY~`1mmo32`0VFsU
z%q6tZ0`*$7%kj8!rx3zz09%dBwb5+g{Qc_Fzih&}&4Me%Q_zvEx|EtEzhU%oYc_?i
zGm6O`3AZ<>A;^~1A}m28ax206GRYKxF7fL2_&^~v3Ov)Nasw^`6wE37_;=kD#}%qS
zN)kTSEXwIc3R!>pTXpu+VHDn)s86CJkojOJ92V4tMa1zo<MDECR2+__K~OJvj3U;C
z>H|OW+aE5{<8|(+IU=<Ct{Bxh@yKqm)k^axJ$~eF6U1$H`i<(;Bp-?Oh_qi66KI&I
z6Mxms3Dm*ct*C%clL{;sUe%Y?6e+CW6n!W222bqW-;ONI90DUX)DwYdqY<cHoZR4k
z7exqBs@ww+wKn8zI4jNp8Y;Y)9?<P1aiKTgZQcYbe>)+U$NAY87+p%tmt0Nwy`epE
zkQ%_Lw_Dl{LUcdU&ti^yf$`aE%=BQF`deBicoc>#Ad!;FUYoQL7a6}j?`a{6YP=I8
zdvaaR*il-C?;?_}2&1k0RpXNc+{aV*c47_IJv#vr%Jc&ho<XIJOwM*UCSw^$-4_c|
z_ej)BJ_;QC7aBMcuMa}qKH)aZz})Tzh2bP~M6Kr!q_}6jH5=*0?3k!K`F1ht(k>R<
zK{M?4io2lZN-O#lKliBghSPIZ-Di@`tk7)My%dD6_iVOX-02Y*`}-@BZ&1|gg3mv_
zE842^9Po)-h~<%+$k{!lpg*<uC|sTU<9s=t-ut)T|Hu9RQ@8E1a&-Xa?&tUa<M)5~
z{eOJ^AO3~GLB$Nu&r!wh$s!LSa&Qt#%vYyZgVz?dxI>`TD;@vUwt`8|UVaO<qIkp|
z!|6lG%^{b{qGlt@H!=N1eWc?r<&A;~TuJXa2l;2)qQzSA^7yzN&#P)i$AH(%F?47m
zr{}lf?Ng8a%yO;i#7CU2vD*TvQG+}HMv>*`g}ace`MJB77bsqYnD)R7>|%7D8JWHl
z9|%6Z%y2U}VrU2YF+Iwm!Ta~+dF$@Zd$a~$f>N)VdobG|4x&qY@4+AU{*dHD2k|x9
zafBgeKJ|7UOm<LM4G9l|r)d5tdGRD1MjuSo2Nis1Ics}*XwZIRqN9U`l*oUOmB&SO
zR2<FSlNnd!cGxc=_}-!^G2C|FHK20OL>hEkygY~6tzmXvN+3f}ZvNnKm*kxGidz%d
zZ_=E_;Q&wP&0^u+dTUy_ZJC#C)Ua;9a~t$>{sUm&b|DBqy@Z2AJYW6w)syd@y?py$
zU;XH|eCM}}mbObEAk0>}zFY7Q6tvaf>EwUcEZiBv+!9#UvH_&euS77&Y69|eWC*O!
z^fWwcey*p}5~U5*Z1;!P_a@D_z4w>u=pOE_WM$*o{Q0Zz-n@PD<EyV;i!gA}EXSwl
zsWB>c&Ke+U&BbhI;LCt3mLm9D6*&?lCChXAj<Kk59^i;hW%$DsLl<dxT$t~W3zz2|
zJv!DQG;=iG6uRHKh~#3jD1vQYot-bhhXhSfF^(hs@$ezi3!od}%MM_G?EiCb(b{UJ
zrCnT2E6(Zx5(Q$V<qkS)+?HQ)jxK2;Dz}zH^n6xOVkj|Yc3TP;7dSkil-vtA6jr;s
zz>Inshe#}dMd51;A-nr-0<I2cLf>PC*I}PSQV^j+3fozO2IBR&_MG);3I4HQ<0dc7
zp~+9UhWFdVf5*uL!DyI3bqJ$$oVP0sWli;l_%noV`0nMKuX?Y)>`O63S6#SQ>Ctjg
z^>&cqb$0{?jGziEeP-7l3V(tNQZGz2h?cO#(e|AkVn)My5#EI5s(kEr-uF_5Fw}nJ
zfHdAJEIVG>2op4lnu#&mx><%r@ze^D5=67e1@Pe5ZwUn@Dsvyi{03Vuw>v1pYp!q*
z*ycdd&BLH~VAJnWc$~;{L{Byr{HqzMc#v1XYAACoJ~|^R66LkBvzD%?JW?$C&ZrcB
z#MWFA0g4yx>t;UoYXpah&o1mT@HcpbJ~Z{Dz)P;6#DC*b_{Mq$tT_Xdn9u{3rd%}3
z>4e2imA1GIl%Sx44ty$bvqOe-6JF}~pZ^hBnH57%M*SOX=W#-0JrDjCob2~pJll?%
z`2^&Ml68qg0uh{}=F+har1_4&AZ%<5=2<)YA!3f9$~}bw{m8hRhbaiJxff3=6vnG$
z<DnTGcVTrW+PGVh07@Y4+hp7myM|3zZ6h&h;^aNW@m{eC*yomz@I}H6;A$aiCz6I~
zg?V0)aK|KlpuiH6H8aFtuvH7PLcUPIeY7}&w-Q+H9bL&23N9(;n20G>P<!>T8ivFJ
ziarl%B8$)uy107sr*EF-xOgy(cHlIkf+CpcY0-s4rU(7C{=vL~o~GuJ#Sqm9UsOP$
z9KxgnHtqJaB*nx`p!VL4H6#y&2W3sVXB3ct?CtWL1b}XPo;qgxjI^3Nfv4LcA5!7g
zc9`WPZ><|pihq0X$3F<aRApWbaJ1JvDj>uWkAH-tUqJv(pK#aT^6uH`Wv?@Qza*kp
zIcQMq7ao2L6VbYDJID^auO4t}AS4XlC<m6o(39W2I9bap(k7#ZC&b8!nLlEn@HYAm
zpLYndhfO7tyyl8fqW)0701mM35DGA6L-?tK;Yu8dY{+`u*?t;q66dAXfd8H$lo55v
z-!4bRr9D*+XD%I<08_<v+}(ba)Vb1i(qLDB8L*O)rMD*^28G!r6&3?(01=X!hHhiw
zL(d(eFaeNnEbtj>>H+4(h$;rZ87k)Ntw?0~@(4|x*JB>rdeJ~08Z=Wo*f1!HWLA8;
zBq@aN!R^5uIKE)s0P#a4E%QU;WT#dMnxV-Qw^tJmZRIasC9@F-V2G|rAgXBnhU|C4
zfkc!YfaqN1L9N36F(e(USWaP@u)6SzH{?Hh?sdH+8UOY86ud25>k&J_x67l&yb=m$
z4urtj&u{v(>i?=uU$<8`-1ct#`RCho=0WD?MB2f?fOsn2r1Bhx13S@7C$SC>qkS3N
zX=Z<^XOrgQdwK9H1eu)AF(46?4`a>ZzT8__%Mr6ocag?0NK5lWbC9q~I=c`%j@~Q&
zatgTTuh1duLX!@F>bousRi#NM`)AJ=ZFCHeVk7!&Dg;a2=XWyGFhNs!VH1{Phd@C}
z7PC1jSwRkT$Q?TO)uU*%vn^)A!^`wAaqmkpFzfH%becJyW#de9bdIWgLORFSE>a7w
z>xhLFg7-9CAm>17)rsUHO5sqjUXtDGMM1{mv?mZt)Po<6r?ne|elL2$lMSH*qq``+
z$U{gTh9dW)1;C-Ur}J|5zL+e*%z`yha_snR=otF5N&#xeAU8Y$m%8(F$mBK|7Oxu+
z^zih{lM<YYMF0`%OKP}X1+6+hhER1MAkf2E`96%IJp;3^xsMbRz?{~OhR>**p#t?~
zg|ZUKGF4-o<Kms)i+2=uhDnC&@7<yvLyxY2pzCpws2u^JL;pk;3GFH_P8&Co2RV^S
zSZ^2zuHK}$m^Yxhf%mthfTjoMDJ&u;Qu5igS`>BYV9OU6dIMr-97DJnNO`g#*FXpz
z3#uJ5Nrbmof5VkE;6tjUc_C_nBO8l)ntSM-)oz8_=6G@MjXQm>$MgDpA&<S!|M16u
zzaNxV6j?gUS48JI<tjAW@KCshgFTyvLc}X{qqFtK_h3M)BXLC$zS7FZ2*NGHU%)^M
zJhlB9*$D!63>AW6%$->?t9Doz%erpy;2V>vBH2fIz!LrkOegmGUSbDr2xCn+1jyBi
z!)P2Ag1O2>SkpF`g5ARvQ~}gz-Gd#)%tJ*PXr0_uxCc~DNsac_csi@gGDCB^Se`&4
zDWu>Hu2GwJpp)}uBggz@Ag$D$9DPz_c6-XUP(5|eidQd*)%dmwk+-+HPuJaLujb9=
z)sq<uEIz?qb`AjTWrI{pUozqjjS2`5-Jyk{H<qFJ1Fgv80d*a}3L^V@p<Sval#lPq
zSj-{JVeywLm<r6x_7sAlf*7zuB5Poksz>Dqq4>H5z3$<qo@2w;iZNn>=l6yUDubAY
zC3v(6xSkO<;<q?PT(`Xlsytws#bAW3MS$?1Oq-)}%GCFsJP~56ksI52JZsK2T6x^k
z(rUfF&89}|vV{Hxc5ro5OY#4W<|lyx1#1({eg>VJvPDTgk~NC<V0kCT<nC@sHuGNB
zj=Xb^^?KT}E4wzCQxTVtb#i!I6T<;c>N?U0@*)m%7bH%uW*=(D;Gk(CkbyBOqfVB5
z1Uy`_R1nMB8ce8Oqk*q`i;~I{6bQt3zOSltNfLTItuB#sgmXkJmAfH#!hlP6{~aIK
z;~EjAnN28$i?s;^b!u?sc*fT-eDzv|;vN0@Zg`u${``-B{KIY9{oDP$2e)hY`v;0}
zD%_zzhjN2>@uPhbylBcvuuuzr6Bx;S-g?g%xW3R12rb^;!`cT`9*1;c#36$mGUz^<
zmyV0$c-W44vW`6=oR4G>T&u8;lbrGtV_!fn)%IF>;<wRrV;lDhbFlqwZ5Cgr^UJ8Z
zQ?aj>q(yOOSR3wXhk-QYQf_)6S}Cv0JXAsX-JO&3Ph)cx>F5CJ9U85cv9#)8{eDiJ
zMG}BuLV!K4i6|@TO>K4nZ3Z-^b&*o65eE;Q6r~thT4G1DkKOy~s_kKEKP-s*7_Em=
zw;s6CL(xU!kNsS@7UhAZ&3De&^5sKCwj2_Iy+;q*CA(fMzz30{WCMFz&L`ERA7X`E
zAnYBC)mpR;n4_3vD1<f@?w2yKz!+SND+m}L=y-B5f)qL3g<BD@d!Z?%kdhjsA_n6V
z;XG)xM_2w-tG0-2Dfx_?-1hF@zxS7CyQhn@>F;;p*WT|R{QjN;vrAxhy`{RV;ekb#
z%8nsgcynb4inU7)l#CZv7q5T%Z6h&P?l|plHt7cXu*T<QjVH@S|CHM}0EGkr<&5wR
zZ3aPSAKZB$KqfY9HA0A&4{bQg+F2pz-VVbJjxO;@1eO^e_55!6t$ctyqtPcwpK2o!
zkeM1rOZ114Ecr)Sg_k!{m{huwRges<5O|c8E^6<DXf)tM!Q(pc>d)M(PV%78^ti5X
z+_7~5u{y4*n;_LTu1V3&^>G^}uTV2*n^%G!R@=o^Tets_1R&Y^u5#J+sQjiIZgu?o
zI`}}ewf-fULk6#m)&yl6AFOrCnbjwI<oz#js}lZk3$H3(+M5ITs8#RuHi}=0H&Rvj
z+1$Ak#BuT*AniciJ{2dxzV$@#{s49RtT}s4wmDf#e2i9V4e)R3bzpr{at-RSZK0(c
zN&VnS;AJFUJoOe#md6WeY?m6TQ#9iqI($fczsMH{Wl}r-1n-20dZFIpQKNp0ZD#sO
z9&9yL5j^pvuJt+(ESQ0A$59;QH3mY>>nF3TmmFZ#Zz;aV?`4*on!EyI_@w$t1saTb
zzR45ucS)LgPneAF1|9rPw~aG!FpM_X3c>i4eeuSf6+h8I@lyYMB$6=TUhA<yP&wRf
z!S@hXs*MOXRJ$B;_(g1VWqy^Y%Q6NL{Lmd0FY)JZ{X)1;-&f;iKKa7EDID6o85Dl`
z9&ulbrkO74b8kWA*nf;$A|FPQQ?NfOaJ!;p^J0yKj2w^-_ojkWW|upd^Y;*~Dh<Sl
zmM{c|;0Rumz0<P&Gd#|ci%Pb%hrM3*(Y4BayXxm1B>z+`TI1u~%t7Gi-ZAtv1xpeL
za|utwAu_t$C0R@dS!&TE4ITOH_lMSx66!(F3{~G<EN*#hwFB(>kg`*<HGddOFZgzm
zb5>t@Tgp;@@yZKjd%Vm2gTqJowsrgeYCs?#n|-Xu@4s-!@aljN>+sQj2S{T70<?p}
zEIh}VxToM3jBKvY<?Q{extKk&fCUUe-3k^}RRAse!3wp4eG2ilP=uD$k=#32+e)ZN
z6o_eSk=qV&@dxa`i$VS6xf0%Mp!0Az+cC^sW?9#A)Kx!_h=OouohZctBEgAkg;U~R
z?hvS-L!uP!>^wG~-#SDb;rQ`GQOYhKc4R<w|Kx9SBdTFJ%FFpPaS-0dNzO9`l+=E`
zKcAt}>)q?NcC1sauW<q+4t)DdA$v3}k1B_w^7E|xshK|>F~$yx-?A*@@u-|#tyaYw
zces+EL_U8CSZ9H}10pHZ5MWNSNi++NB0~-u6h`*^9AqCjfYv%PMKi?!Qjvo;elv|=
zXa|QY>X}M}2y>C-0I5HOOdT=9Q!W?H>-Y6}4?7qTG;7)GzPvogi;o5-qFAh|6pY^6
z3sUmFsVU%||0v(6BkfUya9%)6WgoAgp7o?#2qN$%)Nm(1?Prkr);CG9-7Y_$P3ke;
z&<eEsKCEUS9s*-u<m*G#9xuj75>2oH@AB+h3sA!kDHx?b3CC?Mu~Cprd1-~Xm)+w2
zq0N>oOMGw`Y%|Dghl3(JZh&0Q5pY0JF;Z|f&mfwXw|S4ce5AI<6Iw7Sz*@XK13#33
znZO`fr+XTlrAh)KO+gJ_O`Ni}oQ{`{W367(r=IPN2V=YFo>?$yP`Oj1!09L0=CvO|
z3gy1UvzRxI?d$b$BX?=X``|y4*~NaJP0IJff~HH!^BxpdgdPnFu7f@BbwCu`jmJFT
zk!VX>oAxy`KArNlzI#{Qup35d(6>H}KR`6s!^nDe14LNPEmi;l@VRq~ftzqQUW*MF
zw_z;C@K&|8mK$BfPLtEdz4od_LQLs%L=|7ql%(!k`1U%OrTWmXnA#^)<CVClVcacx
z+%sX!{RjlbTk;^>mlr7%y$C9di>KK#l!1rX?<X1ajQj>JFpVagZn#MJ6Ha^V(0gNQ
zq4x+Z2%@v^t_Bd0=Ah}74CKlnr6zqbu{P8h$Tsvoy&`|kNl~7oq%edbbqg)k8BW`f
zjs~+<P3jMzjE@0h){u$<tvNom_415(uJP;42lDZ!@_s)h)5P(?Z4{WlUIKdGyTTyR
zHI#@U$cn8YM7qb&Fyx@d(6m(g$e-Vg;uLB`9y6O}oyFt?P4C4i+EbRo<nwNUjm_oq
z-tS1(t#PYsmC!y7>bZp>M#oyWyFNK>Q@?8wsMglgPD+GM-t^qd>E^YMmvnm$#BM$;
z?3kmO@A;*kk$FvyIm4ac;~EY&qQ<zYr@b~o>pJ92kM=0qnVRB0XuE*IPlNVFHm|P|
z%eukey}KXkr$eU+ekS8R%(;Yp(w#KhluGAuaIe8v^l(juuV$0O+%|9GHV`oX?O;T4
z8t6u|FWH`Mx2H*WHJj-7N3PjdkT*|nY(M(B-;HNfV*p2cMwTdBp%oxYG`)gh$=16P
z$b#hOC48j^?Jps9XZvraH>T-~SdwcPK9Qkk4@<sK+_S|=Zm3vd+J(DCgqNl}e{=%X
z_4|Wo$!*QAdxW+faCDH?aW&<9p1BJ&58-MUgeBVUzUn6=-v$uAN4;mD>KDa>_^wWZ
zvEs@?TLSC|+W@a!zFYCqxO=xY>k9R1)TF^5`0gbCC<kVv{gJ&uc+^JF#Ikp<mO+V!
zm~TXKq;guH%usbXDBf~Hvo~(X25d4ze~+j2ImOa;3(bG86IhXDhwaLn=A(Jv)b$5~
zV-#uDi$Dh8G4f<SFR$Q_udyt8pTJMiCwz<yZP7fdPUaP56Zjqii$m<Jw~mdw|L@;}
zNs#-2d8kmPJ}AC<^5W~aubyuwaI*`HL<33N+eHIebTJ9-Qw*zg)6iNZcV*Kz82Z=E
zY@u>WxIWw;f0{dHb`5BG6j|6Js#;mxp%)7j!j0iYio#rdZ~&_(Fi(f~J)AHKU`zT0
z3OY=b?cPP4BHO)=R3U$REY-MhUwWWd)z@xBUqL!u*9S||AiM5>i?K&cw~H_#RVcc|
z`!6yCY<mFT4;>BS7u(2u-YxuFkw)Oi${Q_0BeM5`?;9gN!*S^6nw6}XhU!OuiwJ0>
zw)5KF{*Ydj|DDoVa3Lz;w2Dd_u0z)+WT0fbVy4obeml5|cqiP7G){OGv<(N+Iq-GX
zGWlYmIi|p!hVHvdSzzpMb31s?U8eVnw%3sU!S|xBi@^Q^l~;U0-9PN_-|QiPPyU>Q
zT2>8_!j$+}tc1#cn%9#T^{mRho{;>1-OQzq952p-8UcteR4qO+9C@gPX~v&(3RizN
z7<_n*npgh92utuMjx%8=xrY0Zl%Kct6azipuXg`^AKvls2iVk|mGhH&rh+1)56pPH
zJVS}bgz~@*J!k1A{%1DDrT)~i!4c_&DFzPJ6A|wKm0d~CZ=A4im`+aXWm%qa3uD<W
zn2D>9J@o}q1f7ujHg+`gz<c>gxq)b~kQ%8YI8T6NhPPp<SXQgRii@qlxcg8e&lj8r
z_;DcHyJnG5RzuWDg&1L{1KerYe2Cr0k-6t^&#O)F9e=?Xxa+aV5${m^2-p0s6s~pN
z)5qLH=sM|=au*Y0<{yKEDako5=SSs<;|r!!aHFI4a=LhYlt`0H=#SL@`DBcm09Q6V
z8SmSY7f2yb#(|8=&dEbwR+8#Ivi(~LIT2B;Xjx=q2MptY^q>bPW5+We#%AXQjE1u|
z?+plAM?`_HrS`cq62b`R`fWL9(QMCVF&6JgNwqdFSzYwF(CWJvA~WCnm~kv5YnKdS
z;KMp=%c&^uTl{$0%SaU)yc&s%?D;&*$Wr<qw2NaV)2>g;tW%)z{Qz_hoB)WY_f^SV
zL#-6}XL$9(ee3eqBPgHYV2AL7<FUB|X!GiJ1ZTnPQ=CP}<Z)1Fy@9x}Xx7?S6s;Uy
ziXkl0sMx_zI~{Q=2pFJ543IBAz>XXA57h?}gb@Ikp+ITZNEU!T$e$B)J}Az8AYta-
z`#u>Dv5?}91J6HfxneUKIOlVu^yy26S${87=`nCHwD4KH?*xvY?E3EHYN>aDG1kL~
zZ{fY+dRXLmsYS;c%uiZjZs^|7OTiBp#ob&(-YiVCB{`ZnYZH60u7n-X;kH!bDJ*MO
zV#n<ngL$)%5Y$0>b;el@2Q=2d^1nYS*xq%XGxhF5E-6(mo)vRWIt?RN><3-Pb^DFa
zCD#j!OP#{Lnis2J3@yT3+|HGZh~MHpSxD`D#599To?O=L^JgKUAv*r}W+A3P?EEBE
z4lJNhofb+qqmAon4utIE$c4#~51*e~DF+SXWHE9~fsl33B<WhE{^H%aYtyD7pR=jU
z6s~>z3ibx9<=3xepahpvT!?%6r`p25-h2yp8R_qS+z$TL?qHG<j}RYsaD9&{*jsI&
z-~Rk*6k@apK75L%*cpr5W0&Pu?tbOJ62f_HDbGOBBmuvQETFB`FKNle7*gbr*Ipgl
z=`Q9v+C?8WpJT&ke{(P9@o~^Dw###lpu!A)xU$6e=CgasSE`0Lq66Um*x#-N$616n
zK9r(q1(Fflr13E{tuIODM$I|68dwl$fqHj;WuVZ-W1FyL0X8}f8U^tH=E%g5s4#&i
zuL`>a&H4JdWLq)ayLm%AZZ~f>=iBh6?c|!gX*+-Y#tpIbEy)zxG)L!NoO^T6=IPu^
z@@?)}PpC};Q{?`pb2^hm$hT<Ay!V@1AqzMD^0qj`?O)sub-4BSnVE+mK|suQeG(uO
z79>YT9!7nX?&{iRXmLA~(0(7tc^2Ew>h7ZQvJ*#9-m!jAqL8)(K^sCw4e0%Pa7ckg
zY`eE7EbJnI@I!5tw=D=<k8Rp_w|<R@9ZYL375U{}bd)b&<V&Uv1Q%MsyXYy%CbS{?
zCZtnR%v+$WmvDA(F1?Iikwnvm0Hqob68zgW=z-<knDw?@p1|zU1bB-|Yal7rN3zBg
zPG01#wrm_PI(-HS5$aglr<7tWGyC6$NH1BB&(vuUFM5+&wfIlU=JEM(Pdg6I>O~|S
zN*Du?bhIISjJN>#oTh=R(FDXtV|PC_eR6|r(N^sqocIr<q--0GOu+PNdZki?NL`S@
zHDJWd+;$!Xm{7V-yx7J8=yxDgu6B9ZUxyi)Cb~v{9qO%ZEBz)L`wEw=lt||w8=jpn
z<(aZ*C|v`%zs#$12(-WnpW@tzpRI~{dC}!Ai{hEXbqGTPcOY08bi1^6u6+mo3O|4C
zHcY(XkegRO>e(|o1KyhmYs4Q{D?d$%F0^iD4xN8+IPoPIdbB-b0e&sGH7Epc++TXf
z&Cl{u+~gP!6lz8`1HAy5eA<SuUcP?*=J}t$di(slub+SS{LPPj0|Zeh4+I9qK)(Cx
zPfzkdB1BFg*-332Q-s@Vz-=?SIC~`GK=+E7!S+2XipbKvL}pB?mBK19-|&4I;9b=m
zw5_sIdi|!Ob*~{x%htGmbBuOlcjM|wPZq1sYC1UjNa>TLojvu@P>K`e%8XPkfC8~-
z0G3(@`Tke=@C|3xqHNU=zAYDHh~f2T3jO*m6!(n#LTWgSFfzulR%s)=CDsO$SmjO@
z77@lV@SA2cbleHkHp(Dkc7ss`%ouyq7m`v55v<&zA?j&uDsCLZ3fGlR@8R#;Z+&zY
z7|$0E5flbt!>}&!(Jdc*#Q2T0dq-E4hed+s0;9q@$d-)A%Z1iL(p1CPar<k~qygZ^
z_}>wH+4qt@sBh6l*LQ!9;P3q?AlG{GfJ>ZwWF+rzpb}Uw3lWxh{qg=2`}K;RiJVD&
zxJ$Nxh)z1bqUEI1n_GU#i&}p33tT7x0-aS58WKXIaj$_suwS1h2BP(fm21(XKY677
z@=N^gj~~&d1`jlSt(sagz08vu>aAUBohlmF6;({^&D+L{>>VC8rF<~_gIyeQ$%&UH
zJRvvmE8^(9vQS^3LuW5e8wE${p^|{1o_Ig)Sr|m}3#DKZC>k`H5O-Lh{qT}{bEgJ>
zUeQm~RpEyKg&)I-&%B>bY`aBPTQB52Oa7xpG*5i#23fS7q5mAMMa|FS<i+eKYoF2l
zm}<@(_gm$<?MK{1?QNx2UYd*HnaKuhT3&%w1;n*Q9p+>pams||p(SNY3Vmo#Q3zjP
zyPkbC-RhAShV|yOf_D)H7A1Edd`}WFp4P|J_-Z_@hQ$wydRkMc0hq|KyQ!KB$-(wy
zc2y{+Gor2N_F03ckNd0Uv`yu7D#u4sgeCwuMHdOiLx!%<j0R6@LOH1ww!0pB29b5W
zL2&?Oha2MG$m7I|3U?(%JgYOjDO7jEZ$xt?Em<Ji)%0WNvItYDGfKR7R4pzl4v~s>
zoovLTpR#z->Ovi)tDw-!oW`#?^Px{Knu0@Zj(pVu!cp)ow99Saw%%zaA2_<7x2Meo
zh1VpyKu%&fgjU9&Z!H4swru<!6M?!aJaTu%O{){soIo_!8BNPkD0zh{qDTpkdqF?r
zw`U+r7g31oqso1KviSe1c{3<Zz&w}@P)FWd+q0^SXvX@73@~4FItB6X4qvrsf>5(~
zA&1S)_|?2Qa<AH}V$wj=L`gvjA}c-@umIr3e*s5}0!H`)wBOfy26IewzfX?ZW`4x@
z=^iJJ9V3(Wkh(pQn9HC09a3@scK}vEslSJ?Km5fyQ3`q3`(#Rhu%lKyBr@4lsJT|;
zxke(}EpPQJ{H%6M*|MFI-H_MSB9!)w^rr1DDv#YZrA@n}v6+io*6p#@?%b6{6J4(S
z#MPH3Bcs>}l|cU$e$j@QRe&3frD-a1O8%PCy5_K2&wQ<(N}L4cUS8K-1sAQm*o*nS
zCjdXY_}D8_5Vy?Su{P~lvh80k>*<8~zC40bWmU~HPvPLg-OIUa$E5i15kD|}F<GJw
zW5mgJ4iPtrvmuVwtH$AOIIbaNE2V8G;x$n*Mu>=q1QZand{)g}_d>YfK>~zpEIn|x
zRE&h=s25~@o}EnjKEQ{IY$$X}SH7fIHMG?gf5mY!9%^d)g<4H*TkW}}X6E`O*85Gv
zymAcju^7+?SOe8bUyi~;0(<y1puE#d;(R!r2IfD3yg}m%nIirZFVi@Z3|&>k=!Gb>
z-(X7I3d5qpvSK7&F<fvxT!C#C#2%k`x`3>lgFXi$>jC|_oYyc#$_7%;)Oex3dOv!9
z^%q*fhAC)*vK+4W<~^qkXdL5M&&mZSbH}Jh)IWs)8PLmL4e_j8xV_eB>W5<y6n3kS
zF(hZ|X?CcVaE`m`0QgsKkP>vg6}BoIDNK8V7X;$`93*+dz??1H1!qnfvoSmk>eMe(
zIDcyf8qW4|(d>paDdIJa?1RKf`Q7i-NAW@ue;HylkUt}n7O1e(kLjwA8y|0nXr4uD
zP3yYuNj<?Q0<0gCK(wf{r_6@R`V&%)h35>J>bU2^teN40oWoI)C<7Y~bUKY3G5)$<
zSS&fl4;hpo@?=OOeImTL5f(_Ve#@VK`|9QQZ=QVjW>jDW;^xjFULB@Y0;*R}@Vh%_
z@50>PQ4*f-zWVc5-*aH@J60zK;1uhZeezhb?madql4Gc)x3S99JhQk^32K7^7o9G|
z;Y1;J%AV-xE?WQVEnhs=DFtt^Z|N{EOF@Y#XbzI+U_5djU3t?jz%_U2PW=mN&Xk<(
zc_7p{*ul1qILlC0EL<EF=gqF<9rGcwZcDY{k%Lc0=WQH(x>Vk|P9sgf2f5qTDH_?m
zY4S*63N->6%<O)<t7`eD`#miSh#2EdA^}r90bdkt9-PC6*DR}9lE>q`M1hCD*(7O%
zr5fAfJv!yU_3SMZ8JtiTAdD7hWU6HzZI(>4@z|dIDz;$(N|&9cvFx(1KYz48W(s6W
z7Y)yw%Bk-6Q<VdEDN^YU<0oSwVT`hJC1UfGEA!S^djV&153~*Fy&etWpSRHRo2GGm
z`>Z^xto)BeosQe8kFQ=$mnWF?+0_~pS&ND6Kn|e6VaExh_Zvwh!&%essaPH<gWZX%
z?&!RrxrbYE9aeFx9-^8%33ZV1>bK8^@rJ5;ycq$!7-ErPgn1Kxi5_Ko<d#7e&U4*r
zbWu$^R~kALFcb6?`JxsX%uSRq+bly7!x~VvMTp_Y>=3FXV$o(4&qXOKi06ZHVcb+W
zqD;U?Gxne(F+qw*P}dz|Zku35<Uk~qLntTuPFf8L0XPkuxV*bz;h+{98PzN~Jfstu
zMmNHJz46X<x7y;S?0Si8LX@W+ufhaV#+y2zSOwnTt5cAwHb1xTJ_4o$pESV-dWkGx
zV4>Jxo;EXtqfN@LG{opspFwMA+mx5tHsQ0v*VuGbK~}W@NKR}`nzv_ldD6^E%U82#
zt!~+Dfn-Q`l6R#0sAu!&p&38qGnaM!;$d;0V60_bvKG1NwAQE4Fb_?Z!m_pxzxMj^
zl4F@js6%t$WZY9dlT}sPc(Ju=bm~4qt5eI=xO?!cb^#HfNs8suN?<^55EB=WC}0BF
z$KrHC1JMCNhK7)~2#E;65rYRSdLRQkM@HIc@G@5waiyo2feY4InWY&32{fFcfBFiB
zsWawdGg<|}y?_#<LVfM|&m5T`l2v{#kD<#4UQJZhq=^E<4j|LaEm!5FJOW+gl``-#
zdwjR}cMb&`=ZV%c=@?xvnc?2>_ZWXN2t2exBhql}c6&Mx0SWqWz0v>fhVvgZV|oAN
zA-WI^G()GIi_OT)u@~c<_V4pWv`U{9@v22w|5@}Q^b((7ANwan)(j>>_^E8&H;s+G
z&JzXO*XIC~jF`LkA)H~blj#B)w&7l~5*~_M<j&T5`fEVQIQrd75=^23bsLySHsPyj
z+s_N6V)*8F#4O(Y@?O&{b9YCgJmkq!76QdsoA?D+DbvBRZYmGA=;~$FsXy9C)3oA`
zu*rD;7!59GH1g>yt|Rp=`|XYBANm3(c!d8&1#e_h%Z4<3dCJ|SZdp@LUy^xMoVl~(
zAOwN`@zg@Nn?OF)(AQB7a$5~u$L4~t)*FNeq28$(iy?%vaNsMf#=RzQVgfW0DPY27
zka2<_7%oVv*gg7N49bWto}t?6h^z@5p8E8FtX(^nJolj90BZ&**SfH7v3<gi+T@dj
zxfml`f=v?-Gbosdt~T&QmT`U+;!ng^(PuswiOzR%GOaka8<KtgyO)xvw7+rF`lyjj
z+taYp%5AVw1u`914%OG9F0dEHX*gx*0s`@hP}HO(b8JCG$TJK849gj={J`o%Tq6!p
z4MYB{&@3eeWrRo@3CkGZCkP($2^dTt#5M1lLEY8csh2Z7Qn)ByO1)`GDBWejR(vI8
z-!#A`jT;%*pKu6cQsuP`CzUCESSyP8jwz1E6s!`sIwOut)?Api{F2k^MoUin(7~nW
zi9)jG@}4sF?&=|RFL?OV3ux$C6;oGpd|NQ&b@S-9l_n^Zhwodmq3FdyBeM9PihP6E
z-o68j5e|uf<BxNLxmL_;F>{?{SVm(Oc7KiVI3Dq7Fq+e&1F3NQ&1h*>k+gK19f>Ty
zm_4|bpfA*R6@m|}wfCx9q>N+&k}`A<$Hhtt=)U-}a<3y1UD&8E7?V-1403LR&zCzl
zP@(CFkSzZ8nY46}vAw=5uTin-=HKgWo9kVQfhBibh*l>ujl4wOlxe}cx}U$Ag%rTe
zQb(yTrx)c_E4kmp6MRUPw{zN_foegs!2J%IIY?HFiPg`l63xBYM3E}X?Fl{$NEa7@
zlwxow%b(EcWy~;F7sgMEP{33uqD3NFh?pE5D^*t(jc6p`dwM6OH%8nQwWh8zS6b8;
z4GjB=$F+(WKaA!ZBAKE>amUO$f}Mey2UX1`SwK9a+_EKr@YL0_nGJZd29yfuws!2M
zo@F<mOnzFbIAM$OJz^K+MvzOC^!jMnMJLhPKiJXvXK7D=-_<0*M*-`*ZBtbH9upI}
zG(wZU4@};r9ZS0X-bC&Bo_Uy?bc}6u&oSOAT0!bNh3;m>RYk9{)5y)0^_krYN#8`O
z%3^IVw?yD%YHPaN%OP2+=2SoYmSlI=1Gc~8Mysq{$v4Q*cza)93qA1!sb)Dgj^e5F
zP|OmUJQA7{h*=`b=qTij&&wcFKel?(97qSKH(>6O)b0W_kB>}po(8!VUEsWGJPYqj
ziF}l4)6Z;Quus|`OUlW0SX=zsF>>xw{FXdQIy9%^k81J>8~-B9oB{u{krQL!HlUM)
zwzgks39ukyt-7_n*)e~;oK7hNQqGIZi(|Ofdasj=nlyVb@)mD~gHT3p9g0P3eB7yt
zjjb?S5PB@9VBc1VQ674A`hfLwc9a7XL2y!7QWSdkV4OmBRLVl`dTrWj*p=|?)>>O)
zxO93hpK=Ddt-hhL1e4>T)&tF@76^WKSAS5yvX8iRdfZK+2k5RC`Rt%T@xw2A0*BxH
z`ZX06r|$K_xd7;@aK9<qxc1>ruql!wX?wqnCN6xk8prTGd45<|m_&hZonpe3ZS3K-
z%2yeadXw)iiJAZrbMC~FyYtGl_O6+g(C&b=b~=ZbS2t%SoYgt6B9CLU&};lrucIXI
z#67LVG1dD5uM;ZbkQpwU-(H~i9_z?z$mN5E-2kbajZZ<agXx;N204a-nAF{q-otJ9
zPlV>3+cnMSC9wC;cmYuy;&4VI4m_RJ6VO<76et~*G*h61@8=TZSj&d|uyvdST1`J;
z#UMf{uWeVcqlQ1Z|3h;cL<z!c%ANr)-PfEF0asv9ggC>4BErZS2EM?KJk5yXS_itG
z%@4r(H)W4Q<lI>0e9gg`+0?adrXTP=gYPft0EXORZqXN)LyqSh=EFTelOfqMh5GDf
zOIv;r+8pLTI@aPE{DVft^$J35L(<k&pm2V@beG}lzR`QRI$mzJrwx;T@L}7<p%TQe
za2otY4T_4RN?iLUChCK|D(Qv<nbRGKK%KcXWk5RrO%KmU2tPjXA<;cH5F~Y-`Uzzw
ztz+?bj|4nWj*A){smmD?0ZO^eV<Y1XPUaIDBKG}6?8Q&SULbhSUi{=x@+S`3@lzz0
zQRwX2Wy52#Xy@Rk!@iN6eAI?@Y?>O5-8x+mP2tv?sA29~h@!U0?q?)8UnMa}h*(kr
zkPB^_B7nK<G_q7kX`Fut@sOh$3T{dOeOn=2ah)jc?D{MMkwTgV;(Fn^VkoPZ$GwgL
z@@2sn^h3W4(kwSL-4cxtpJ0-SdUA=03wqbAM5hrPxbKG)Aj2!uxtCD1>UV}h;j5fG
z>g@&l4Z78(KnZ~dcHcrB`W?#s%`X-BgMr}Y5LpAr?~WKAKeXhHc*5rUbg8HW)b)&+
zm}a`D&pq#SQbV3n97-D6%zU<?IdXwH;*iYt)%bz4U2F(IGHsOGryn3jjzG3-SWrAb
zh@`+~R!6|NaYhix-U5bP)f{z%dIoPmZtgw#3dj<%*GB@&9uMxtH{V6c%D9=&*jCL8
z+czxF`q*!>cw8I>l1bxPe^fZQ@5=ACLlRt73VBBvns~L5#T`<NgqpUco>6Rmw<Ph1
zf0gBxb;O~>tN2;8fH({{92`~;n}BK0woA7?GNR=o&xe+Z^DX^~E1-MW4v$b(CHNB?
z9B1F1Av4ey#U2nx`thhpbX`f<G373~N~J^zb~BTUhl8xhJLCrxl;sKum4o7qRVaCn
z-WW$1syT#nFDclE4zls<Y{{e=*JtJQMw{}C+Vr?>M&@f=*3?3C3&>vOwt#=-?TgQ~
zub=j-yX&ERX0+2*yr@zh_HrI@j|-J1Qd#8=sAF8)5&gYo6q@Yu&aNY`UvkQg{hD7X
zD)x%?uo7sV*|`8YU&6<F*&!H|+JLn;84W=$T5$V6Tb_|Iz^`#HtzEq@OP)_&n42C`
z{tE5rOMjD`ud`onABi1&w89`@Fyq3|dX5-T)I<D}gWjolb&f*$8jq+3gt?O%dpGb4
zR?cMGk<KV~MIfP%9@3zMpms>`0^IQSN3s}s5|CStk6HZ7FTo7EXNw+YQVk`JayIKw
zzngStdhEsFlQUVBl%2Qj79E6cghW|k7Yy5KCA7cI8@)}jQ%wj8B33jU&52_}KvXbf
zn<45Fs7@v|gm|E^zo93GJX=~2Cf0-H5!;!A8KHyIw>6dNpsxuwgi`Y(TuDN@F11iT
zz=9Z4CQd&WRzUo?%LOH9PC3DudgrYHk(ke0Ae%M}XzP7(C&_P_#^|nSLEumToAk&{
z_cPpt$L_Ct_|3f=A#ry-3z33OxzZO{9V$J>N>u%Vs&Bw^t8mLAx^{88USp*lrFzR*
zUX%R?1<ObnxI1@3%bc`+eY{xV4Iix`wp{}2Kj{Eey{?Fc9Q@qdirKTp2~Psm*}tI^
z-ZdCe>ohzRbbb{ahAc$MZwbwYCh^Y=Y~#0J$yITPd8N7WyOKr}Ih0YbCgGOTPLuJ-
zn4bfDsk@8{Xd&1^k$!9pT5q>aOke{fZ!rE?e<TtT6ApmzO*uUlC;?(Hf#I6KlzwTF
z1xUcSh))cxu3}^@59_<}ccaoBsEh>Y{p!<r4#e2*g-Yz{^?jH3-Tik3|G9hsf4Tp_
zC-?#%t{#|En`-&h_-#&vc;-D7R6yBPT-~<;K!7n;8iuO}ev>3)t66+s6X7I%M%m5o
zb~Sz=wy-KW+NLyJY|U`P1u#Y`IA}9QJES%9;f3s64_a6~qPv|nAE@{&V1qr~G<D3^
zb;F6r1~r%W6T4Qm@0Z)|`{jmxNAsf2xnJ6i&qT9HCohR1Z!~*r<#cKH-I)JgZrFHE
z^VYfVms{`q<pUk!r(@%_p-yD-u_<fa#+9+h(<HMK^rn1-d&A%N^J=O!SpjdK7x2cJ
z0k^{edV1U}d0^I5ViVcupk%io3a<Vpw7B{;(PB-K!+#-!vYkl|{qFihe|g{1+l>UN
zgGNRVKd^=<9?~*}u=;E4a0Z%<j9#3J${2s%XGh<0Ra5j2VLtCszy1Dx-pWDMWm5+L
zorpVv=pbevwfTbZ?(LHW<$Gs#TXCNZXiXzRge>c-8r$Z;&Z%$#0&3{L@2B;jHq&Mv
z)gQyRs4flTS=mOwX`I6e6ogpvxppt*?U8T&QXV6zgef;C|9wBLpPQ5ao~i$3$J~Zd
zVQzl5N^XwBTopA>&xF&9M-H?+FFE{Utuw4DI};2rSsyErEoJ2pDXYrK!M-h_yN4=+
zSWE*K^=w(?=t%rf@X1}xYec;)Jofb?TmDY(QRe%QsNkQ0-$`F6IlmcxG2s1#e_pKz
zpvDEyNwR3L0~#3U`j>kG=`#JxG&8MCBh!X00sN{B^tL$s9fe~%h_4dBuk1%cx`8#n
zjKTXO5`FtJ2Rnz<zIc@nrSLW*4|tIV0=Czp`V|Y=(_{|Y$ZfJ|B5okG*+wc8<T32L
zsKl0CvYAgSdJ%8Q@w{o<C&qIU+-t#?cV)$?+sI!`K$T=TPi7P4*FH`BQCOn-Ca&sT
zi+6(n)xz74B-j#+V|RNwwh<I%1Cx1s%F97<<vzJPRu+zAE5~SKsSPUWC@$eMRDY=j
zYA8B!A3=$PihIZDp4F4dwA$HTUUHR4KBDCdT$>D63)KG#oFXDT7J;!{uYYr)#g%>h
z|N29Sg$KOx)j~u5F#~y_%-{5IT+^Zd9oSYbxxDdv{vSV}k9uUo25$M3?z4w|W`F-F
zA5m8}v(U|6N^9o&DUkZ3Uci^po~?W57Q6qW_U!Uw_H4^7>Nt$ap)-Nd*KF8&&(oOD
z0~x=mV`&V7>2RlO(+xGLH*npu2@$&jZfeVaZ}q?K6|8l)Yg93{5?~mUpu|WF&aVcF
zgD{tHQ5@gQ`M{X}A9tAk`)l9Tv1ah1AQm;(sJI_J7*EUTv9t|vv|F^u8n%0ww~Kl6
zKKqP^#e5w~v+c4^Yv0a3u*LW5jXrMbG;Q^^13Wl4@#ei5SpeJN@6VvI95L9M^aX6y
zBfOJ~h3~eB?{v3A#BErUcttg_yS>}@gV3QH>M+;O2GDXntg+g+OSzV%luF@cK-Fed
zIY+<SxrvREPTVuPz<>u7{!E{pyZVQX#$Z-A9z^aU%yimmg8{mLU3JDf2er*MY}x1f
zxvr1zk=ppqT(92HciPOV>D6w1{Htu<uee3G+o79oN_Q{2MIJFXI=)EWVtA28Q&e4l
z<`ClkerI#L3F!Qz2`ogX!wdS$a{PWWZ_cBRE<pg@v%3SKIkZJp66<Z%Ee^X<G&j4B
zz59B>`u5ax#7IGV0v>-v{I{R0Vquizppo!U8j$priTtJAHzTYNubGrxy~su-M(>+L
zb2s6&he0OPn(dlF8}%A{XmbRmxF)MjLgn_NUW`xa`V;QYu95rbB?lvekPv*!J0QkK
z_{hBx-tWh7n5pcBvla&DS{bdYv+9~1(vZy5n4lP-6bg-9vbLNW-LKtXwg5p)$LNME
zM|UrVk9d@!$Lr_0`lNdyCrAfxl`#w=d@#SYbD9L>6MVjigvdqYu@={72R<7XkOkYh
z;~op7SKCYNNt&mfOJ_y|?oYG&7=qI3@d>>hB!f0z6f2(j{+DE>{Gk|GmM^I!bio$P
z%UL_cagB-tkXas@a#_Ja?vCgRZjgx7JEa|wL3||fUK^6{CIZ~>HuslaVhxvxE7Qq$
z`w0V)E>i~ECU@gJNgdCA-&{W+)R9jhL{EO--i~k$faFo+K~PD@u9jZjp?0-HK(c;c
z-NDcr1>%!JOvbg_enXq@?KKMCfww!ufECGW`44=%TqBT=MbRDX;ia`y(*w1<VU}~x
zaGFnY$aO2$e6i^%N&F_SqA{DvbKwSH=2eUE2;6oI>Sbc)7Yj2#at)I~{u+z8d;3L9
zB@ma{)Ox9h{`M-1O^7=+F$n+fT=U&q;;k4*eqyx!2Oa&efFFJEGbta}VC{8Ig5Pmp
zi|>h2%U-T-r~C))NhWMzWP=tTm35hMHaK#GlWCn^<ol-UCk>OAoNm87l!TqLwR_|o
z_;l<#oby1ExQ9(!c`hU`NbHQ**EJT=8xMQ}c|R1T*!Ck)@v&E3VJzJ@>jnuQaGNLd
z@&W`6C-Y`GoAk25q5_M5<ZB|&zM>%xC{3t|l@!I1f~AQXYu)hTa@dw1s$LY*sGd$=
zFRrF&)M6Va^}Yu+UDseN*tt8p&AjU6qDBIHC3Zv|;Vo!oFiTQ|obYXbW9lljY)n&R
zFbeEh2hFW4S8CQ4(J?%BKk-G_TR^0g#qfi-T{G%H>%f{u+9p4s*bXyMJ)!SxKlWjT
z)`=CRbvnI?vo2sMnD=$sA8ptUra6nCMqONHZC#kj){bhhX}#R{D0*I(cUyly7aGzy
z__^7=AQfis{Jwh|JQ%nau)}){bz|6(JNTU)r~sSj_c%IG5$#piNykyshOnv&Q->bq
zav)X5wicZruyN~AoukMeH0{|Kg2s(fGgsH@s5+@<ugb+~G!F>K`KEEJICON&{r4*E
z42mCM@q@USX4u<6F3jE2ahfx#V-mS+QXOlAlt!_9HT3Hc=jH5aawb^Z#c0*D0<`PP
z5rQ3}M;iZqb$>PJs`fxtdk|NH&-zP$e~p&S4>}hke$#Lldc2D@177G6FVZ1L0!1%O
zqxu<>P9xLvwNmMnwIEehv-Y5Qi_>f?DzZ&iYgRqBez*ylrCw7;fUJ~begG>|vZ;KE
zsZZ@xx}8HQlFH!N+0Bw_SxXzP{w*%Py?#Hr;PjNm8aJ`f)lwAk2fd&8gsxA9fi~V5
zBXY&Ps@d;mU1`||r3=cO?KSnX^iejg*GYp5cH`-6<LArOx(Ofyx5fCc){S4d<Qq&N
zSk7lAz&jjYpYi1xBc-Zl?@v`xF40gmz24O2MxMm+0H6R}i~C8JDnfR8p>0nYIGA=9
z3$}GY4m_ON2&s!1?sz%IT$~{oZd}>0#`J<!<e{_|=6G74V;!V$SeWnLaEc<0jd?z8
zK&I~V=9rpi%wioIJqLBhOK&TW_kfiO>-PYMh{al<r-?n4*whTmZGc&-a3zI_8FrzD
zL(9Qd-g{)_?PKRAqwZ%d1nojEXL_mo`?tEJFmd3f$Ep^@V@gssF<K=di0HKjm2QZO
zVk+0bf=~)Wldmw2#S#?tRQKGf=2dh9e9l3YGLpRefE1Cbok{)CX`-GABUr|TLEzSz
zyK=vGeF}}(4OU0ErJ<wGo#FBVka+Z;6{=A-*;0ofEFD)cEr@pO8hiLF<HL`GBBW0f
zRoP0`{mJ~KWk)jVL5B>%J<-ub?Qsbc!85Zbeh})=Bg0ActX9+y$)jJaNi{l97%BYS
zlT=@RjEwAk(@xZ)BX1rNij8vAu9T=rSLVuqgP6Gu@}iH82MSxn(y0BYERq4l#lpMB
z-<e#*pOXu1Ll7Sd-F|SmE{cz%9d6k(!K&70hX0u@N;%Zn?|!F#4S!DKG@bmM^#~@R
zhi{HN?9Y%3*ix9IuGYkq`1Z_l|IDe2Hi@?U!lD%yMhP1N1#cjzG!`f<xOWd_dKcw<
zQou#+FppAYj}Wnn)3Pm&D)(}BOwZiSW8(fix+=!Y7QA{m=A)509VkNcvpXC=tH&0A
z92FW{wPeL$MT%ecRdv`QXAj-G&QC(;o4Q_y_*)?V8bl8?Q_&tbxT9on-D9#Rste-c
z7Sqk2KHbOR`k0F!2=_3mEnER-5TS~)++h;E#R7s@V*p&})WivuxRes;`~Xn&&|NqV
zyW8_>Tp!nvV6U9E4J7SdK-A$Y-xE~cKpZ5-U^a>tw2vqR4c<6;xYn<mxnq8~?KA3~
z192tqWb{1=85ZvrJLDF!V=YOl)}8hauf9x9124Y90d5pug~>=0ZApj<Rrm3L#(Rhy
z2)%TXXgRt9;pZJGfm%cSfmL9=BJn0ngAACUZZ0ROI-68|yAY+>_`9^bs|;US1lr%_
zE0GB=nYj=oh0M0Hb_v%;yeHD@z<O?{{CVrRjc4^qy+|%B%>JO#+;q)tub+B*@W65+
zjN-A*mN(LARKYDvdX*`-|NG70H}%=MI|jw|Sv5bYRus8<XE?lfT20U0U3(9gW%yGI
zh|YD{($6t(*L;0IW)p6CZ|q*bL#e_I|2Ctw;uHw3w79;84C*Z>2a)=tqMW%`kO%vi
zKXCc?jeBuYCHKyFj<VUO?s{uxl(ykBOgvv*>S4OaXW6#J8|e3Y_wsjLUeR_?mg6NP
zD@LL*a73(uf24bxC5sLW9v98)U>lIE!@s&fpaAp1f9hg+>as%{1^?_p0BD0`bqnrA
zu1`zX7!9~_-~;ORmHhqkco>qhVWF=!DD3YI@r9#>Ua?$SAL2Gpdx*eGi$b}9Xri*i
z#RYtu<3?0-yg-JEs7pZ)T1CeOhZ|N5+^@o1sez)pZtQNXuX$H=lH_PQJ%ro0+|#$^
zdp8TpAX_mk2xXxL4hcDC?$~1uJ7G0l*V5+^S3~la2{K<A#1>MKU=rzzCn9Z#RC2BE
ziGH|?Yq;b7i!~L?Sx-!M#Cda3%&LpxD=<3f?a&dLG*yd9M^4KRZkF!&A|$o$Ml|7u
zRnHQUj9c4s>TrE>rPeayHT6*nAW2y>IpoQDdPqQ+({2$D{7F_TuEkU4e460kOtz$~
z$ICikfsxRqE_>B5^3KB~$E2PlCy4IB#}Sj$Q+s0qu*!nm`tV{8%h|d!_vuh?e=}}O
zDtB<J!cHv0Dgq1vp%H}a*a3b&Oo2re6xj8s-~sqOH%%k;4-QeHWZnQLsXuonp3fZV
zs27Ub>}Vq5NX`4IIxi~6+F|g1Df0Iiu9|d+?4i5Qdzs5+P#n<MH8px1P#-YP3=#8E
zQ4>=Mry~*&!~s31LwVEsHm$T7n6XMdL<<Fl?)rfF@Y64-f)mv@cV__Ej_38cyXXTz
zKQ1afsv@AF#eRO1a|4>|L2FlaE^tib{44ix0&?%ztHqUizxhiJ3tqWHi@DzUH)fw)
z^c?k$VvaS-`MCP7JgZb?Y&<+~&U?Aaasly?7`n1?x#*e3{ozkdJxjYg=V8%&4y4Ut
z*YFmlL&Jp(uVYwLNrpwW;_m%+Vb47^lYv@;frd3uz4Io*KXx0t*a6xVrnfuwWCybq
zA_wA#&yEZyeBO^ZYJO0{^I{HppXL#V92Z+2`zuOCX4`OnGFuZRLAD;g#ceIi{+ikg
zU1VEbLt3;!NZINh(eU@6csnl7Yxn4I&xy>Nf&U#M`1l3zYFdGB)3PPT>8zP7r&S<!
z1#|Bgr}g+0R`vtX-lBvs;3tkC!<IRmDQDvf!F}gAuo3h4jz6Q;9L*eO){OaKz<{Z0
z_e;Ps{bRpBfc3x<nU(A%yF75XLEqXPhk)~75{B@23-iEu(;Wz@wqqKfPnVb@JJ<Fl
zXTIFwO1341w8%C@{BiB5if`ubq?ahJgseq~4JC|>unokAf}w){_&ge)mbD1e9fY=_
z25oT$+3Sz0f>I4j<96uKf#!rlrQ(<|4buPvt2u>>bW#9cJv5=a)EsJ@*+INt13mSD
zUH<hvQ*k{U4&jaIMs?CEUa6c+dQjxPS~PhJ2c@?o7yr%xTbj#=@)@sf9$2v)fc!9F
zA)4cq+T_L_O52-EV~`w$?Z?F%og0ndz%7O%+t|PLHZt1XqHjK5+b;p0fZQ19Xxw55
zgwp+6zcV^<Ce7eN1zk^&xAZ(o5ya7x@N4IzM=Drk$H!l{8=Rm_Ag&)VEF-Y=xv3B_
zwi^v2ktf$5zeI#(c0~AXy8#K6q-$X3QxYB`eB08Vga-Z^)Q5(&6#?oR&qtCV8o@SH
zsA~Y9hz`*}wjf1a<JdrqQY9{eJF6C_&BO!J9EtD!fQNJFUrp|pQFw{g<%H$3fx{Jr
zDPXyL6hW$k(zh~zxT%9U41!mvk9O+VktkJ!8FQ}zS7GQ*SwGRly{#^*v7f7JjuY;$
z2^H&@rf=M9e+t<Wn{$Z3!W*Vj1Gg2%2N;>J%%!<Scg&d#P8fau&CIxNg^wR4hSXR^
z|5NeG57=z_Q4%udImY${25t_i*)Bn<>lUt+G^sKbun7rb)uzP;5iBKOb*<eC0x}Ts
z*ZEbPBw1F%?cuzt&dPIs0Dy>Otax(Ic2|pWKLTPFPQcK@p{nqwb{GHM<+5lIv&+a;
z`}=WV0g=>ve?y$rQr1ocW59zVuDwb%csDt)5fbCT2547+FXl*OICjtN>9<%NEJ(vk
zkzx3^KPV?Wkb@n18h}VyK{y-~2Zy?^eY9=Bs^9Z!7xLi;PolJJcz$(29Ut}-nEV*Z
zV>H*=VhC7MjR1e!0c^FnnY}iO9#j^i7FmUd&pm;H_W17Ieg}!nwTo5AmiFb8!>sf@
z>Cg(h#S!wu>2Bp!7ae2Gjc|+oo2(mgFZu}4&x{B=K5Ijkt7~s9tkw~OJkf~!?Kh-F
z0foxneghMQ*J`QB7gWGUG3s3MxdFW*1LutYxpyxs>WGw@_dYBB&)c`Je)#^Yw{Ibl
zJPgf0>7lP6h?-}mKJ&c5Cl>WQ^$&8BO@0s=INekT6x6^>eS0#lu@Q*%MY`**N+hwJ
zt%vvU$_e`F{tz2{^#Ozw+!}wZ0l`?v{|-65cRY|c^x5m1{iOWjkx`4R9ThSse@(DQ
zMZ*FcZ&J&T3ZDskT^?*zR)S5aE5d(m5kn-=$dmaAm!@g+cp@FDbK+88SMv|`xY{Hz
zdt1*ip@u(2`6CT$<8I>_umzLAt~g@%4lmnxMMJ!Uw-+i-o8~=gLN4mXsY)6R{L#>7
ze|0C3sJ+|QvuaX1vN63X<hA6mx@{cf5+sV$D{u_cdR#A5HAk@83Q~59Arck1L45G(
z(vMJvIT_%f<(z_ltoz|Mf4)2?ZO(W(N9A!Ti4@Jl4$*SO4%@qwy%zr#hzOpAp}b1%
zX|tS8U;uz{)nwT5Si}V*m@^Q-a|#BYHm{N!FF+}J)$n9k@Fo1i`NXZ8L;47^M<`^=
z9qg|z7xNN!U`gzigI1oOyOl(<u!@EN@Q2<~h9KD!;vmuofcZ841st3g(!&~H#uWH!
z7Xw&MM|u%OlDDy7IBh79dG{8x>(B}*#wr71$OQn1Z?$y-c6244FfciJ!O-xHnJ&(q
z%)@a}pSy#xW9}4nT-c`q^>ojI?#Vmd%ypz;s?384U<L)(-a+J<PIt0;dEIYx-ND`c
zj0CR^hfYo$XH$K^jb*tl1K!4ZUun?5o}SG7*h1;;B%We_NHu!0kfY9;d5b%<CaRHN
zl(1XY+BR$xvT$zk-TiZwZqypkJ1xdE-F|<Tvv`L(sb}|=;BX5M>gJYtDO0uG^2y4;
z56EKz|G2ly^(uAD36S8_<<ziVu}D<up{m48;eKNNNG}U2J%EA5S#XfZpi+QGPlr^2
z=3CdYzMA3j4<3Rw;O_c}Dnw4`<?lEgpwm;h$#RS`*6j?MEj;jiY0O6InY(CeAj08#
zb%^knQ+MBK$`{zp0YAZ+<vwrPmQB84<;!ByERV#f+d&E)IBs*XM9+j_@tnAEd{YmK
z3wLGA94)^nXA8R5e4ED2c<6z-_y0wui_ez8AWhvXzdj?~OI5sk+e{}<!D#p$4076l
zWv#o-;qoDhoID?Bh8X9pqH7;A2_04Rx<|=?8y+0KbG!v52T|oNp2gz49o@Tk;u<ZF
z99MaEk00~*=&A1hsM~hwIL1HT|F=JAODN6f^64GJu=@!~kO>9)4ZorjJ?0vgA?kL@
zO8J5{2R5aSNf;R(d=d*I9r0QMZYQ($x(f7F6T;UESJzEzc2Xtvcu1;86CJMeT6DM*
z3m=-<aeX4$-{6Rnxi@|9NSqTnYfxPw5eUP43DW!PRb(CE6|`<-BHX3MO0ViW_LSt|
zBRmEg?>YYR#4J$S5@Pv6)5pcZp}R9XSIQ5WLD1Ume+nGz+}_x*rTS1e%l26Yt^7gK
zDa|%up{-RPA47nTa!?$hPedvF#3lT?b2Mz5v#N*YHkZ7AU=|Mxc@=*5jndp-hYolz
zGyH+M&^ow*6q31JGhhuQ4Do0Tko;?tcPV{81FGsL>x%K0-+7*^PH|K{?i_)3*WvRC
ztUBN9F^=<2(Pyx7iqdm<5rasd$=(ke<-}UhC@aO1_UMo>S0Wr%xk1B&`mk^CS<M2-
z0WFIRKHynyAlN87l89HqiaLM@x`xVZ;jRAixThJ1T^+60Op9xU>;}C22Oc@W@YVAP
z_WqC;y+7sBdX?Baxm5$V_@1EyG$xAc;D`x%s98!A>kz?~P?p<=+4fEFy%M#!UWNLW
zo+X3qBx9KwMkGz6aO{o~XU+7UKt4bQZ=~X2d9NLZBC3%{x)@l|*alXDJlPcoGg3u;
zLx^%*I5g2Tys^%F=(+pgpA%t|_Z0JDCHjsd&{v^fOJ2%Rz&JNRT2<iwIk{&}YY;y&
z>>lcVvppt#=&fUNVva2u_5Bwn{!xcT*&C}CwCHXe*a#Qj^#o9<6{em<+Tf6#w@+;P
zG{+qjR*VSRupcy3+%ZZh5MB?SYJo5B3*Hb&s;-ZG=r%bXJQq3*-;<BfoJ>u_vJHxZ
zot?vh8uOdeid1XGPs=vA>yY!FP(To2iD|P84GtSH9U~ToFn$6ZOFugdhP@c!S=Yvu
zLGqk)6f&3Qdaohln)Lh_bWgYhbjP^P2a@du{`i^^FBVM?yyyLPLTc&tEx9;8l~sOg
zw_#wI@3o-iLf%&rR!xsFo*cLnvKJB`U2`7TrcfDp2m56<H)Jo%@DevIL+A^iHBlN;
zlYY`(xN-x4t~D4f)NFDeqp{k;oy(ovodm^SyCvjCXpivx8ESZZb6yaPlua2inc%WV
z0Sa;6V)eH{ej`-{3Y{_)2wxf^+N^0P+3p~i_Z3F+zT8QUET`v8=4a;xGsO*u>gfy>
zEQ<8+hwwN|5C$M)POX|J=o(wK*o(IS((}Efs1y^)FQ$K~z^$UFn&hqEOWwCv92y}+
zw+KDnCTgb`Uh5^kZ8TDWb+u#W5TC?J<p}nfd!h514T|BAtXp2114)Y*t#9{w8Eyja
zdB;m+z(&bl(d88WmJ8j@GFfb_<X2qPtS1uX<56*+yk+cw5B3g+i{?dh0Ydn;3ZcOy
z?OZA_P?={}er~a1^xe~P1{a`TOj3cmDewIDx}L0d5X?}lz}ddL*nzJ*g<Gf{na&Oq
zm*KnqT7p5u2KS3j6O$jcTm0o9a@{5m>C`;#8tSb&ygn*Wnt!OG?g?MaD+&dQMEjwC
zB}Rasp7=()e*_T<o+(DgRF+3=Z-S59$?#J0BH~1l_zthkH@&Y6oKYj);f`f>hj1VR
zb9jTcP+e88Y}Eu`^jpBLEZ*`+AD`mPJ=d7K4v~{pmtk<y;$;hW8QG_S6Vu8*0$jD%
zViqs=7~9FmcPMuEJX{3!)>d7H(Hh>Ad&#@{vIp4L^&DKo>l0u$LC$%MAF#38$DOut
z>;#>j*ttkgCb$>@F^`;!T3KF?U(`sswy_M9V-@)ZX^0sF*-WcpMF;;miGO*(1bsO#
zz5Wirj|!v$?;>jma_r--hHo8JxV-A_@S>d0Tz@CC2DOCD70!$EvTeaHxAm{rP5l~*
zo6>(jq`_9_exQ8aXj#LY5Fh)IWD6@lpAbH+<q#|aX5qY6SBkuCpV{#kElulpUc3dL
zA9wf*5<xWUk?9o4>tVjg&-L(7d15i<zX7cVj=;wN32&ChAe8t!W+)?Ly+DXjpS}0F
zcqpMT)Y(m=KJ#IhHinN~!?)YrNf`G)t73+G{f@?Lb!JaBQOE!Zv_bacS;m~U^dzo>
zDff*v=Nf6?P%P4U?=mmr+ZbF_KU}@8@CX>ri?KGeP{<n7xAlnm>@ZwbDTb0w10iB~
z)H<pKtd0$#6k~8qtJ{c5yN`J?9ah3s5$bGa>?WHfI7Dn>Y7`$l@39UI(+9+?_F+ge
z!r`DhiIgQ^CLMix$Z8U39cfUqfwJ-{mgt6lxS3zb&I#x?(g>aovSx&->LeM`!o}vf
z%mPLHj`16PE&dhis8@7$L}v71ky(pHe;9tmbCeImjMQiEPo3_d-FdGP!!dcWn`ktF
zr~kGjSKT0!drDECsQ7gyBGVwb#c~wV;h!j_IjLrq;{+=8fM@xh^oRDC(jZ9a?x4U<
z4hOdpXx@p~18EfyE$l1Q(1+l|7m74f3SaGVxVq1ezXo;|<R%!WusQk(L5Ij&M%WvR
zsCvHszLJx-7{e_!G=*CR#s^h`)@Q%dGLLX4HOVu`<Q36^R4LXOT@}g~b660n2+NhP
z6|y}P=hJfGDBW2v?}FsTyHqP~4RmaMOMh>3D~TUwZK#tbI*gC%5020J{`eG|{w5Jg
zDbgnTsLB~NJu}T(-?@%$sQQ<-O(agpwGB_5bf-uYxM8CbEA8dEwNi=H@VdE1p|N}a
z6Z(X>!C8V8^m(d<onk;(0=o`bO^qaumju59dlgzI4rGF)2VN5d3?p#xMK2c<gCOBM
z)}N5sRy`X}mlN`KmqzuXt)`BRKB~qgc*55UF(C({Fpq)8mYodd4MxhN8uGBFDhG!c
zD=#FXp$0*Nq9DXOu1L75<rPa5&hX$M7&^W4O!#lFRg2X-6(VwHNB;INfKRdb<*YuV
zC+0uNHbgZr?kkG3ZnRHNWLnt`8z``AHt(I?jbUiy_9^^O+r(QNcI`kr9CdB80^D{%
z#`as)(@8_=ZRoasI&Cgs+d-!VM%S!vYu>}h<vH1xd0c4Up<!A0@D35-hSRcx5BTeb
z=uvrVOm4eTnO)O-Mby$c9<rI8FgP%(_G*~ntx=nyeOd(P(chR7vF~jMek-WkBlzxb
zuT{Ggt+$|9-m7=m1#3HedA9|eTT#R{cqE1j`5iUU79o^3)GDW1NB&qUxD8t|xb60|
zLp{H>p@gtx5~y&0&5kc{s|n673H8=(wAk20H4D(~@L=+*K`*$$#ytuaaUt+0jhHPD
z&PrYy)L&PNr^XzU7Qph{F;}C48jAg;=6T@h<U7&g{ySr_smpX+cvvxuUl{1EhCZN1
zd0)0*m6t(eWWgAd@omJu$%58Eu)WX^5Suvw^0z@OU$Xy<!E5nI@k3;X7x>L*g{ml^
zZI+fHQp3S|QMYak1O}a|P-BNDuAZr(6d1iZg5^C<4#Jv)Qw#nge;{0T3{Qm4N-}VT
zK(X<PT7Mbe8f3cm_E30Ma(RQssnzm&bWK~sX&!t0lVNG}qiPv3K7P;J9D6e!D_-Cy
zJa(ZaXKj+gEgS@GiqBRz@U%`&iiihdiClR5dy5;p5B+|c0B%b_eupfWZCmFA$hU+Q
zq?xyDu54K~gjGMu9pg@t+gP;M8N%6TAU16b6td<T^p`qwA{C<LR7NPA(I_dQ&uQ5P
z9F1up(ztN2u%A4M!=jtLUgB$-?9wAblnHb0i2*h+<Y3$LZUg8?hJnFQFpEt|MAV#>
z(EvE~n|NCM{`30+m@e|9AN9dw7JWMGx_|XW03@82y@STD&=oQ+74hXSa-FbkT_=!(
z^Lce#Usmm5ehc*mvit#}5KctCA?F7NqfGe(EZD5>>>Nfr?d@5wf7`mHttMoAXO&0S
zb8n&6E{|R@z!hn9yb)nWG{ON&+b{|pPB{pWq>(zev#Oei4Q=QiCubGMXt&CPFCIp|
zQNb`bSo8I~ap+?y?}2k5|Glrm3cK0L^x%=h+F(>5ieaPYj*I6Daib-3O>761PvJaR
zE;`&!ss~9Xu)#J{Z9yQeVJ)qZp;|i)K%ghyoZ3uz-kbxQLTer`ImYQc48lM9y?+Cj
z!JC{l?<LHWIK06zlIMyxMrEFApe<4TH#S3k>_54;%RwL>qAfkt6m`R%MTbz|a?fHD
z;pohL)G-s&F)_Zdw%3I_0h`gq>lCu17Dyv|h*uf=DnErygAY0#;VP}b)rSgJme+Tz
zPg>VY!~*j1gIn_qSt&Ce*8N~4TpAw5k)@h`jFxxJsGTC#)l*+N`foc>DBe-un?8@U
zWnT3i2*fCin(e&K(Ru0ITIvm1+|%}UkXY^X`yqF(Wom*ljAxXZm<uzmv|f%`67nkw
zS{R4NOG<PNKz{c-6^#Go#q1S_1BSb<<$C0K)f1JOBJEg?+U<U%Mb!5R8UqasVdFzr
zx34{w04wk3LLT508rMiND9Si@WT~b+Mf|M+7gFd7110xUYY|`7k0Vo)SCf;2V-v?p
zg}(aej{w6pG#aq7r$z+nT;i2PyF9gb{I##`LRGh56v_$Zq+;qLnz|b$e$B?>pG2-r
z6zf>Nery^MZulJHYm^)rLRYUtfo(A@ubSnewYB+UZ1xXkVB^IrR!J(ue$i6qQli)p
zDW)46dhHf5d7g^*j4@Cf7z?Cm-Hgw{`dH2(z|Rs)*<#;`w<5{>>hH^PnnVGD7Xg>}
zdq=xsysg`((|Y_K1Ml3-|AO^>vkxWEd(LV(;LH1IxbH%d>+F@I_HI@D?`O@~>*YCx
zghnI2dRB74V=%en*p&=nL-rfTV*cl%-L1jyunOaZM1Yvv&^HELaVuJ$z?7Pqp46lQ
z<Jj@KpxG6KRB5-0nDj|v9wi`f4P9&e*T)7T^7UWez5L5}Z(qH9{rt`Im*2fc4hanU
z2i}5zz*hMKF~c8l7(H0w9iV5yLyRrGpX)3}Di37h5OD)X0wi|PXoE+l_fa69OpN59
zJUmj<A<UsSuO7UpK2+1*^!}ijKCokxs_cSnl@{f}^gdaeAHiRNp>qWfKs<N^{|4@i
z>hDr*y0eoZH8ZazY$13(B&+D<T<J*S@KAU}%73QJlf9ZOG9LBr?!E$Fpj1jO&Ei13
z!}0JytHch=CYnal2`qW^ZP?6YB7^XFVB^>Rx&?52$BE;t+FyVEx0{xXZ_TvioQuo^
z9rPC9eOR(u1~e!b%43W~QIurvpcD@#;RWC>-?$1Z1Bckblf|MsJI8<?%h|=eB<(3i
zzvCyfJN6X4iB?V-7C}^Y)K8M4Jn5(B_!Npf;y9UM>~9W^wpd>$ngPxxBGf%(f;eie
z56ibhs}S6JIIiEM8DsFNVTcI*<<;|vikPXLy`T+nKA5=Kx<NqX5E=rqh$OH)Dq%(b
zzN|3He6L-OPvPeL>Hp`xT=mUB;GcuN!(0Lq-zBYAXO|G1inJAOCz>$?FGC52U+5n3
z{-_I=Eq^dc$H5&X>^{dERLs7_8S{SroC4MD6`z}4#@daC^HA-nw{f$n$&jIdG=1ES
z5A@U<Bhc|sU_E@uVEaBr$jUwoAX4#nZnNk07}bGjTZb_c23VH!AlA0GuD*&s;H!yx
zCstU_7W9_9>k4(CNc#ThA$6TZG7=Ww^`=dCLqehWJL)am@QX*q9y)Jv2MPQF+j8+;
zobsW((AH)qiep9u#=xD8j*?$MtiE!rbE{d1Sj|<>p33FkQGpmh9eJ=#yNOAKXLVml
z_q}Qm#xl_T4x|qq#z2+Bl2#$z<<42NY%9n4?`#ffU;+DzejLg9s{G+1`%FAS*KDf?
zsiwz4%NbmF_f@ezkN$66!M~NXD}k=y-xd%3pSqa&RlpniOBbqRFMsZv(fbI;!{N}T
z@A8iqPLiR5edu^r!Y~+hIs;d!$hyIYJQ_FY!BN_(ow}p5%Yk)vXO494LV8We3cd>?
zpodOuOG~-C9Lmg}TC3WerKA4^qAa$tRZSzIfn!3;>C=>y>hR4}SMq+vo6|Euv?|TC
zSQE)s8Km$?;9}<tef10`K4d(`xSP+P6@UBN4#c)KJq$S%E*3#_Ao|}OpZH}$arLT+
zgc2lOIQF;}Fx3h0CHUsN0!y%=x1#CDotStkM4~(SnrhiNzP%0)5=FKWi2(0+FEVEa
z!V`%TqW$XkqWnHoYe+`5iH&xIcdRV2P0R7$m-V~~S#4E+UhzCEA*|}+dtg&z-9BTZ
zz$dp=Vw?j{A=N3nY#}!{)~5YB)k$lqGUcVs)Wrh3v}i4~tfMUT<Hcndnkn$Z)?-xJ
za32=Zi7)VDH$&xsR9SOrV%Qdfy%M`=dPPQww5SF8JObAie4rulD2RURpH&3D7R8*d
z-DEi@J4V>_b_n4f(KLhtJo>RflI>~%!J)?iirPpR1n}ezVSNO2nvJd`S**h+Gx2G8
zMX9cQ7%uvb*`~=ECMt21bNs%|1h~WEqlOhJrV+=)eO7_E>{WePO=WOdAYOjZRpBiN
z{XSIb;QUS9*%A{>&1lZvkIwN+BrPefA77Ks<?+Zr@j=#=e4^b|pH?eYHz_;xbGMIf
zoG(<L`BAm_5c;-j(Y+ItA2Btv3Brs}(jKJWf{3}!fjC7^w&$}+J<b&SwC`4T%bVck
z5zjbyUDy168>m-){*&f=Tu)?@NMz<%<O%8_um-ywz_)%NYqSZ^Du=~DeD|y)0GKdv
zggRMKe~z9^ChE!SgD>+#_+;7~l~Ym^oR@O^JbQM)B<nD?y&z>0&(#g+PW1lsCe9Se
z8Xs^zlsw9u7Vwk~FTL>ScTb5OAG?^ZRJV?hXrX4yVFIsbg?B;yGg-_ZEf-8;9FAdR
zW%t;1To_fpr}Ae=Udg&5^JE1bE@O~f!b&OMbrce)o@q|xAP$kHB`PD4?K=|qN~`m4
zU{~_sk9&X6Z?NE%{<q(JUDi{2MAOAjJ&$1EI}nr`Z%cpMp;UHZHso)=3B$_AJND`g
zq9v&G#ROO+%i0-aWpx6zqxCt9jBINWB*h^%{njdX8VLX@XEqLBDxN!;cyiznq;7~V
zi=$C-t!j~d+`|3;lkjmhpo@3Fx9p(Mw^3xAn2Eot85MhMo*$dbuWm&HQ3NaK0jHTP
z7sEK1Npk<07}=Sb0KcNgo{T2frp6fJi&MuUVB~s8ojB2qgXa+@26z~FH14-+2JVLO
zw49EYQ!z)DM$G9vW)AG0d>EN0?`AK!n>)c-AGo;TX3w|VxV&xa@izDAGNP`{t9h%q
z+4}e?+1{5DG`;q51SwSgxb!YTH0DT{t^>yJC$ZbrZO05ne6;Bv3`aXkGo|!kOl}O^
zNyL^VFDv5g>e&QYt5zB5!cB@-%FXADS5Y)&g$s!*pdv~^Q`l3lfq{QBL<Tl7IEdF8
zpm}<XpP}xC<^eUBX9@Qn1kHBr8{96AFo0dz9KK1$iDFW_%e-YvGZTB)XZ*k;d)QS<
z2l>$CbHlASMArm`zT+o2U(ROk+NU`t!L74^IuJ^?Af$gbFE4<5G|g9;tLE+60mpB6
zji>o{t3m)%!M=e6)jQ~X#}kPlIoA3$v8MLr?P$uk<z;=gJcHt%AYpX<b-uhE*m!jD
zLG&5Ibf57fD$1=*T(f=(KQ4A?%`t==aR)n=pO7~*Pj%S+c9t5MH}qDoPQ=KR9?4>G
z=8MEKB}<Vag2Iy=6xZ<YNQSB{)3qwE@!C2%#sf;5Gmv(NL{BpGIKyCt=<D*5p{Ghe
z%Jm1lKaG>0|HQ|@D||Ab==&2mNfP@WE4ec}j1mpbQSsXAcWD9OA4h2%drkpSz9~Oc
z&z~ix<XapxdV0Q$08v1$zc1G~8VxnU)PbhOfTGL!UnPcw=^H-|Re|I{RB3;G=DIJJ
z^>hOA4@lo9A@)G3=tBr8N1)^70-h@1Lb^QH8D5S6ieo-;GdL^eEf?t}MTD>mlvzsw
zl&L^CF^SYz5<+HPO_uImOlq)tViyrLMff7MM%EH}`RFHEPaVb{17U+$-9C_gd@h)i
zMsu!;{{rLXE_o$UP6mz59nn4S_2TiSi^q%X8>%2>nQ%oN(Ys#Sm`o-_QTu&4sWCcu
zF#eeDWNQWk6;u1t))pTC{Y^z;)&m;YIukKT8HHgz)`m01$d2N1uyh%T#Z3ef<X0Bl
z9RGUZ7O9-)AiCYFPMSFdH=R;74RmEvN_Gm~@zf(q3<_5Dr%|S&T}Gv~Jxa!LR96q~
zqqoEXHG((fdKyI`GQCl7FB~AQsZQ#t4+h08(#A+$wx!LKjI~p?t(ZQ6SR~tu#^SA*
zB3HNUXbRg#-xKmD6Ptr1(mas`2}<Rkj9wo;p*Yw`%N+9*qHzVKt6%GMtR~{un#{O5
zf*~qbgL-r5b6tmi_S0@aCK}rJ%rSMyVv?)k+40a!nR`%-{L{jgkZ1|Yvbk4%pfd{7
zrNW)%_Jb?A7m-1eB+lGQr53@b5JW_n)UM4Ov<uXwI+?uB?rffx?GN%JrpL&bg$ich
z*pMN&ZHf1vVgUwxR%}ONhAR;xg$3jgXS51Ue1xS{IhlOfT<RwM{hMdFr6mz@dwk(5
z-G^0%SpI#9K_R7*jZVn9B%=DzAx1KbYe}#-{tnuJp3ZH8hKyhzNPlUOpMZTN15!I@
za$RsSWxU{4`^DY6bta89D{t9e7HanDjQ498FuZTUF%!EO__^--L0R9U4y8wchv4@5
zv=Y`Ba|hk9cQEUnTZ^6k4fdUE2_S3laphR(ap*k}dHPKs`C(D0;ZY%BAlg+%o*8Yf
z+m{F_)N=E=(t0(!P9B(e<|24@j7raM95xtp;anm?hIXV8fl$d^F1PFUUn5>eT4}>f
zKlSQ_WN{r~R;60oWnyTy*|ViNSGN*wCXsA>-6roFS2|1qLoh=0N|lnv9TbG0O|k3)
zkNSo>voZ|ttP12ISf9tIX>GVtE#Txx8ODkXb`|TodpP_6Mq&|PzT2GaV#_fb3Xnut
z^98pFs;b{ueG3i`z5+$RLGPF87FZzr86!2i&uDWZFz}<T_n}66R#}C*<wf{2eW!Iu
zb|Glb%&JFatc1ZyrwgwuI(GcMyhk^3N#Qi*Sfx<fTSTl96FVEEhhp-;H}zrFoq}RN
zc>%gH)F-oEG^~MrDMcNO%$T{L7gg#HVhDEFqs%ur8(pAn&3*?L7wt_j_tLXtp2Tdb
zC3F<aAjX!?RFQOGV^+n=rfmnEQfdxGBECInRz972!nO9s3`?ZwIC6O@Z65eL$cN>B
zo?cZs;$mv+bAST~nvEcoi)YFcZIw74{hnARj|P9*7L9c{!F(Tqh)f;&v{476mDpb^
zh^$l=Hx)GzWrCaS3AO1LQ2t1Bn-xpF{p5yk>bdQfNZWX<G5@&J<wRofIihSFm*%u$
z&#^BZ39n}-aRqAojkZ{^x+t-Sk+twFKwF%l0Q<E3fXFdBsl=p0r7`v4dOW}z7$yAv
z{{8#^2mf}p07-T~|NZa(<MV&J|L=dunCuL7#@AHDoYfC<mTpHz0gu47Px8=mT!?-q
zeOs3V-A(RWpX*9^nX%%^F!mnHBSDu9Brh&UOkc~{k?OFMFWmpzMy;qEImuDJpPhjs
zXJ(YN;gma;m>bkhkDDc%{xYjp&t5@Xu-OS_1ynquPZj9-#O~+b29EJM3~aS6Ur2GJ
z+_|!6&|PWK-6FnjnhzmwH*I9|U9^c8wOh9%-bl6%f>S`xZFCSCfD=%h8rUJA+bIRu
zUoCDG$@~WJC0sBe;s?`pgA<;t;y4uBr?=(Xa&bC5D=&L@6&O;&y>tZbc-mY5Eema;
zN2dYC4}1MdC>PCrSS}Zh6h79CM;<{mReFJ~dbW3us4rphR7^0n1@$qRi8wqB6g5)c
z`i-|nC{H1$n}wX5Qop4vu)~gyDu>B@xD`C&6hI@@%+MC@grTBi3I-iSUr`EXmc2p=
z7P1ExK?j9J%|{Uzo4@ZBBbMchd|D2?S@nvGQ7zy2q%iaTY~Xn%mj!+R(_FHrWAPzd
z=c2)zil^Ca%3!JUDz?}nL))xC<7W_NysalJ%kWe9zB&iPMzCq69PnhW#xtS;qW>T4
z8pW|`7gw;!kf@6+WaV61*#;F3ieN9Bkz|Cz#8v=D^NqU|;7##Xx#^(x)*1~UDC#hk
zfS7w7X7Cy(&<i7!KMZ8Ev_==YRlLS!R@)bN+HJ&_BxP79i&R6*s$z}VbWRO<g8-Bn
z&gsTVOmV{?BOeu$PpkDJBkF!)(~z_lvWhqpsnhTHcmh4!`yhbAFc)|3blX&ev}3J_
z6zko+z<ENasny)zWay3?m^cls&EzaHds1bYlGP1SFk)q65u~xr&Ifk%=FPM|j$r>V
ztHD&{SulR?^-Z2_<qUc4IHJ>L;+-myEn30zkO3z=4EimiIMKD^M2d72<PL{?iMt30
z!*(raA!t|Z&uJ%UT{~~QqFqzBfmf|fcw#56tyD~1z(M_?E2moivdUPZCxXPMxMbUE
z6Ch9RYvc@j?&3faB?rz&bydBpIJhhu9-}kv!JZ_=yHvst(%6qdn1LaDz!Pf#QnRs0
z`tSEC(31Ns@n#Z-CG45T$fNCf1AW6<-zUaduS3j0N5sOz9(d4o-|9upc3AruFFjGQ
zDLq8L47doiN;vC<o-7xaP~78F1YsQRA2Jq?io4~(gF`-2`0Mk-RhO>f2WB>c=z<yW
z<;>j#VC2H4mEutQ4j*~%#9!eZ@dU(!zGI-LP4ga91;xc_JwA1eOzW;uVS1492OIsP
z3eBP%QFKhhJLF^-%y6RuE#-N&;bHfaj@kjM^ifY(xr$jlqAXk422Yu;#qR<es<iSl
zZ*PHN@3n@#k)SGD%YE^XytnZa+sA!DkH_^6R)NnzXQ=_?Y0M~dxKH=ebH&!qK-r1J
z24=6{*XL+Lh9LuH6MyUZSfmJ*+_Wwr5nK4^xaFU#c>^5ftU4)y?^<`Bv{#5+tpJ13
zX>s8Q1=zHWF>f|T{2}EoTfV{Qu=KQYMGD$C6^rO-lptt0UQWU5PKhJP-=v;1(=O{1
zLO4<a%*&u>HcMqndKt}z;o4DfI~>A>$+sXQTg8Tgrm5H5kza96a|f0h!2V0};SMG;
z_vql0w1KQ>S?>)=iaf9g)JKz+2;628V;^|ikr&&^Cz6+aj4;S5+4FKAE%Qzh^Vb@N
zUFBY_qj~X?KSq<{-nEv{kBWK)QCa2Hz0o!|v-#$wyasuF>K6{XcRK|BwD@~d^d;^2
zpvcJo*C|}J%3ZFi6Liv4W&i{=gWX$7mCclP2H3?-4o0lFe5-XGehdJ07>1bhCtZUw
zc5oVB<ng~9W#D*KAIo@P=yLI@IAt%Ce$E`+`_H;-e6u5laYlh?584|g@US^&47l>u
zHI@w)cCGByR=Ecj0TIYZWn$;T#OWiIa$6S=|H_IRYO(YWGdSVr70NEeKz?5ReOV#%
zb%8OFJ~Z{jN1Jk`<0S<)0b6-@l;3K9`!y~q#-4Et*OxenSx#MJIYR9*@r5<8>Bgru
z2h@%Gqfr*U(<n2Ld)+hT1Txq<E(yE2XJ|BT?I3Us=sp|F4#}V2v1E=$o@0Rf<ANEU
z;<>|us+<f!tPL3DTQMt)%S3%jYS{s*YA?$9guS3$*TCd0$X$Xp6Pgfuwpue=`>|~g
z-F`eUws~?Vkv<&Mhr^$VWsk1LP>v_UJ`6hK(NNPfE0GwtRqLaMm>JzC7)h3l0t(&0
zP7dsA(Kt_CM{SQJ2W$qj$!5|T_w8rH+WRL_&X_A>p%oiWcJemnYL!;nJPYLsW<GFm
zwfRpZOu#_)-hQLoXk&d;bzJa2iIIXB8VQGk0|l-`-fx_6hPEk_Gs16}-!Gnw*|xl=
zZGMY`lsy?X;Ls;|N&uiw_K-ke>-aExE^qdL_#~7!e?HdlSWZe78<y^p-0Tt3uif30
zwO2FmsWWhMetjMFAguT_Jo=|ZjGN#E9qGs{2O|%O)qj=;*G7ZhEUl*JQLsZCgw!(@
ziEIpa4mMm}g2Uu42D323nbzkN1}utU%u+8QN;kl6M(&%k`<Us;b*`zcj0OB7@K=A+
zBf+z)oj^mN=brNDUVWPPgr0j|%k~sBYA7Ldcsf@hLP!H%Bb^T7S`-3CIV~`r@`@Ym
zQZBJ6O4Zz^I?`Ux@O|5BE69L2JQ)rs4+GVCCEh+Z;Y=GsEh^=Q354Cl9%HKiHdAL1
z$vg*%Swx(;Sd=_ZNa6c+GyfKZ1C=~NbsUbbK``g1k+2J>Khm+?hXA5IfdA?+_#78j
zYn&wH(oPz|o~rSwSUaHo{LOuE7)`m;O3}_Jn1iRXm;>F;Dt|WlnkYN+;0$1_`yD@f
z=`H(leY};wgjH2aEko+OxwkeGM=M%*Bq>u{@_RTqj6S(elB(g5Cq<;~lg}705G2+W
zNR1;K>wdvTbfGmGi9dgqK)vetj?9y{2Zm)z?Z#DgCfs_bROwqkU9oRfW$wJUkekV@
z4>Q0cqD!7#+)sRG5~ec7NGOYN(%Wg~Si9e<093s={FVu)kD1hfzX@`I0V4pZ7<M9!
z)rsGsXG&R@AI5qPN9!~tcyf#cpYpUJ^2@<UsD{2fGK^b?e9nwdzxeRBBW$Oz+2;=5
z=%SE;bLsK4Jn>OoDK6&cWUAbbV9dZMfIbEXIPe{)#J|!HMInZJ3G)?92HyIHHd*Hi
z<|bqkT}xE4N^Bow7d_$ili`T_c>jQ&|Bfyk6?g2Iq9{Ikck5}rxH1bkC_Z#PEVo>L
z&uGYKi#rTck7UuDoDepuk<<pqGLi8Pum<>V-svvQ+#H>K@FH&sZ5wyS&V_|v>(`iK
zhRA#Lak0~$HW%m>?gm!v?0>|DC<}7F!;G+)^CJamWlv?avLa;kaHFE0pHe@%%#aEk
z_~OG3T<8pnmXodC0C%-eljanj`FPyWnidvSrLyM$w~h~-LAGyDp<<@GBQOgE8$0-O
zfl-!@C2YvO!YCO05q8Ap)x0^Y+n`a!wf6xOQE_n1V_NmItAQLhT0Sf;hkBx#y`T@I
z9delBw=E}Fh6#5eWpwJc$7Oo27$W1a_LFzBMkJDbSEdejYwj_9m^|y(d4XYV@$}0&
zoF(UrhtrG1*~as9O}`Sf$%f3b;<|877EQ?I7L*+nzuT(FGs3-Ft1#EOG#c%OEQP^@
z{1cg~?pPvrEg_!Vu}IRciW9F|0`0uXG0VoMvAahSA#|PHp^ki}1{0lPA1%tgH!HU$
z!tJFseH5)!DMA7e_1*JDj5}#G)XnA!c3u62{G}V@zyI6wv+@Mvypu>G7mtv_M=u)K
z>mR;<;VW-_JoTy?G=PF1+G-vx`3++50fg^;X>1spyH`|j-Av-OjTVpbkS%4=agHOS
zU4zsrrny0$$VTdIIe~GqldgcWhAbf_`Ggi(Y;=3!Wue*zUuhW_=Nf+Kzw8GgS#EAH
zAP3PA=_@;uYS<hfJ7VxxSL1R&{`#Z)dbPjCqCMC&*svA`6Dl@TCZAg99@Z#cpzV#g
z^Y~*T`E}Yr=YsiVVozVM>@CoRDVf&)BXLFzg>Iouqk&b9AR9f9qO550e1iddx*5Sw
zG)Zf4J&Ktak6h8n)boFxjyuyiT=5k3yqfH1vT0x<jdS#`+{J+!Za)yVo*gFdLr=mG
z4t!nhRKJEgrU6eqXgGZ#2w=JcRDmY7Gw`!Z&$^VP!|#fTo=h)04D~j6?f3+F0kEMa
zV`vCA0&aI;pgFI0rAvCo2RAXYH5RuZchSyttiTLQ5?MSr?rSey!|dMJB?5HwhoNqt
za7BZH3I_#H=Y1$k-t9@zb)#EODfQ(E*WMtU?Lpy*_H`HQbh87#>aWi-kPItBWB-u@
z+$K4J@m&wzSrY1vB>vURIwne@T}W)~AaXIv6siS^6lml-k${^bt_>1107{lM;apDq
zG}uW+*jWQQ80f*?;V>tdNFGZEJ8!|qfroy#*kMp%<~xTS2ATFHL(vg8JziAyHe;F)
z(!Ka-6OvM{YmURN=n2N&p(8?xT7WQhGiU6=Cn88X<WC&|g1Sr~#6hu#j*Eam!BtTk
zJhYUU&l)>C!M15w3S;5G9R$~>WEiiv83t?fa1<-9E<K|^HA6tZa#X9eYOrlGSPLQM
z+RK*fhcFBAH2f_q^(;hk-nou;2>w~+;xgV)oR?Q4rD>*izH7X=`M6n<!9LjrsPH?_
z6P$?z^Vf;ODb~#Jc8!$ukHn|3Zf6kdU{?K%D;>tLut|`6;({7BCwjtD%Y+G!Hb~0`
zL*N21l4~F}1tkCoS%wPCTgQ&Siza9ZkOi>by_mQQ$@DPxUkLedGKP<-<86Mf-6t8s
zDYu@=`}iBA8;9u6^>OVAz?_3JB7lk`Xwy-R&!AB9$!gyE?5vtVI!ttKXFA~6od!Ic
zm0gKMR#(-KCj&Vua|uB-N-7eTwn7G{0a9-fWDGD=4Ctfh%X9YACp*W271R+)pai8W
zn%pk>m_o)Fu=T@@q#^Q*AR!4DPeC@6VPPYB^kc~6al0xGV0|Dl@K=x|8dhsb`wjN6
z=jU$LY)FGc0Qj*Hf=~RMBqx`|oDvY*^+q3{zpwExU`>6BMp&w8eO4pGN>(|t-Qb}^
zLH{9~fTi9cGbC;drpB6G*)?j79*#9v0sxqQ9kJQUmB>yAmdR}<4my7s$i%5Nb4r=U
zYpg*is~7L8$79CvF+`q5RT?EUWG^K?7}2H(;t;Io6Gk2f!J>})MGFncBSWB6yb<6H
z#vusqD{9h{Ue_<wTMUFFwg%^LbDT5!V32NzRV#pWIKlfjRa>p6K9Fb&q98=~B;M99
zvp(%ZEVCZA_3<%0=2S#YZ9{SAXxKJqRqqN7DpG~VmHmVU7qu!S&d1&+lM3g;(Y#>*
zJw2(?kXCh{a|4<*Bn&4)KOzvDZX(rdN34Z}nO98)W?6^C-zzOk>;VyV1q+h^*x3L2
z-lM1wTOyVf=5?S@Y{rL;Mn#DIORYNX_ms(>Pdz)5kb&CNO2W!ni4=B6WEN19&JrRg
z{~ZY$y<<TXPhm(IqTS)ChBLGr8`_}N>x}`CIoJ^*s0MX&6W72%u}&K|z$f$N<)kZL
zt=UKW2z5^($EA_W?g?7G<+!#ev%+daYMOwEgl~@O(-5K?-DF^<V0^;Z(K<!-{jGUG
z>jszd|DU}--*4kc5{1!MDfj6!1S}9D<)ynx%RVF}*&IuvTBL1h)cR3Hph%VlqR=RS
zBwEeC?rYrd9luAo8CzyVRu%}#a?i}U(~F3z$~7`FGBQ>)1}RTf?W??IxPp#&k-eLX
zo0~arLSqW<=@!wju?9AC5b``*19ab-u1(f05Jd->lWDO|fLyXmTku1pMjQ}>=--yT
zCcSy<&HNf#Im*;!rsv^>QZs=VdaKmusCO@bQ3NHsKjhOs#`o|0PT=@{M=ihG3SC2d
zISQxcL-=%xYsu(7pj^`!f9Tw;WHms3(`U?;vGqeP(u!{dP#g@PL6S1;Q%7#E&@CY>
zh&%7t=?AP>3o=HMai(W+b-viruv5ZDVDo%99vw~+;;6tC21k=EFa#S$I6}79L|!zv
z6mUwK&lrUkXx5GE;5#DesObx#btU!@G8}9I3@3m~@{Pmxz))5p3YMA<hlV5PI0r;W
zdjIx^Xr=%5hkk@e1jTWsS|Vt0-M{?-8Na{%f$t9P*|&xhE8tGqS1>PYA99N#tqm(&
zTO1!`j}mlDUHm|zs7y&t-F^?z3)g{J^soZka+LV>P0EqTF4i+2X<37J9*LwH5z}VU
zwYQnxO0o^ix$fFN=ATRwY%zV4O=pXbZoDly<IS0nqBXS991g3?Gla8qw`btSM}=VM
zWLgc1y7m}~C5fm_>%Iv-<klCi^|)feagj+USHbIB&51I_Ea}$UyiQ3tzO3FuoId2P
z@NyG)mt^82EZEE5c!rdK*vNduz+wm*;bFRAEV#7cwD;7<Nn#Qwe8lnHCXrcP8seGB
zv=^XWA^$s0Z^z?o(+sB=2D%_JW0Ah#_wNJWSKr6m2wm{a9)0unMxUGO*^7{sG8HT?
z!9J+%;_C0$`e1D^4e2Ht<YqlPq*IsLLQ;p>Y6~KXcm|6crjl?U9ir%-@OiPVBHi)T
z_)d@_fVaVAnkS-9{T7O-)%-<Bqq2slJx2Iw*erW#u(_0d)=JWz7D();BJfWhClF7^
ztYbfWeAajMfXY2B&I%PEjmHrtnZ6dRdR32X$J;$k64ylis_ndS!@`lVrxlq=|84B$
zTOlB?TrU`YJTTPVQP5v+`qV?BGbLR-QSM}bUl;*)?#|!}tiZ|bIm71Mw?Fj$K-ih_
zw23(dR0Xje$?kZO0AXDfF7J5a@!6=@EoN6mF-8xf9eDA?)qg=gK1Vx0^|Bv!o<2E#
zvEPd_AKiqGAgi-GxWcYboj^tE=uvrk>V7-eU10uG?5qbzw;#eWN(q04eiF^|-~I(e
zbB(6r@NJ0oj;a^aYEmz$E*NB5pbYLi(}70?_QCSaL>nI|v&R5%I6Evxryb1rLuPgq
zF~VU#8__*@)C(#H*VAKBi@9<L3-CjMWSxvWd~-oPJ;Msjm3pw#iYcV(nnTd|@i;uF
zyA1cVty(%k@0DN3jDsHj-Axh?teYtLEr))Dp0Mvd@*<=_y5+c|+RE<R5k)K92@`On
zQRd1rFR&6u>w_1r;ZAs$PY0dGWFd=<>GlCfOryr{#lyt{(xI!|{49J5F?1e~*|#e4
z0<)U%bp=S6<+uwZ;(6=g+-uHTO)DB&6D+9$$~4*7Qv{#UUpTR6%S0d8rTP30lMP2s
zgoK<|4|IO|)Utr_V>3W_v7eZ@yle?Ao9z7r0_(0d0s?@f?SY$RfQ<SbDd63(z<O|f
z>dGMW29-P0Wvnu+uKRV}tohp1bcbiU<|58e2lIwrO{WQHq`JjouXSbUx23Y`*{us0
za~)MM##gu=ue+(wG&)|L*RfQViVj9qU3fAeZ$U2L8W3wEdI=HP@l}s%l5H>Br>Qr=
zR4sH;PC9GAcUHsUnm=13O74jB?@Y)ikc0PGK6RAuHmV*IbFg~B^OUN)uc|Rii+SP@
z(i#HT<YQ`=sR>B^V73#vhPpk50tg=i(6P~Tu-Ky*H76WX0vmih9=Q%V?}0P|4Y)=(
z`d@rOgF=B`0f#y`EN5q<ayB?GAhI?d_}pZD=aazf^K}glMHKGo_tapM&MVldwBGH|
zRkd#;+igQxHuzSuY&tR6qdM`Nn(2VwdR8{I-PG>zo5F92Sw$1ttEOP=)j>Yca<~ot
ziwe1W{2DIXAq)s&mE+T6N8d3C+gN?UC;0N#kASYWpJy+?OIEOUN=t`)85uoPmn9?)
zVD<%S+*hMV7u#K|OVj8$K-zt)7EQLULAUUd7};V3KFx_ej@hdtXt~}z%Xy-P(N%ob
zc|JNlIxh$B#|5Tf>R7Hvjjs!2Sk=T&Pl0RJN405BkJ<rK<G*5oAkzSJN{V`tH==~I
z9H62u`=#(H9N_(2q>7h$NjewT%iIwK$R~+coGhPl!?`S4b(-Yo_)!GTU@lN!fW<@H
zBnN5DK!(Qy?Q<W$6n<Da9oH-LM1tRPI)G3*XuimSbPKTM5S2P3-hdXAJLGQnbrEje
zwTZ;BM-pdkJK}~|_z0;obn@GS0a5QbaG{L=Z`i6FvXlYo##c^@k)s8q<p<?Nj^QTe
zV+sTUOLkOc=pu>ZKuNb5=eHU}JeI2>dyi4m&M8VNfQZo&fsXN0h7}WZiV_=;L2zeA
z_0gm);3}6yG!v8sI-zaL^u1#`@TKfpw&6Ln)paPY@LhIGpj6?C34J3I(bk?BhWKM_
zOY}f(Wfq9sR&$!2svo{f8Zse-OUk>iQaX^zEi;3vAHLvJ0zEKQv7<yq_dZ$eCMLm-
z^|>tEJ-OqE;Q#yo{D1#HUBF8`j=C|yogSSRv;3%f^|~_+lye3z!{c@Mxrj)qg{&(G
zW~GL$#kORAuKGe30M=C%xCuO7I8InM=SVXMWx);ywMF)XahyzDfDjVDIZSpNu{fQP
z#XYBla+?bY0yUgvxDdqtI?$>Q+2;EC`nNg!^8mBm%_%A!e7mnwasTaa{PNH0<rn<!
zpX%K|m%RIvdiN#2``h2t%lk5_ufK64I)Q(_g2#P8gXRG`I|q)Kxr8NLF_cI##_*o}
zr~Im;f$Jn6xccT@0f?%efjGkvu$8eK*uAxEHL*m2<Jpp20ESC4M?5`P#yS#uFs)Ik
zgG7d=Ki`u%fban)=%|zFccU90*1lzW0$D@$ojfEOyk|JjEgvNu6KzxB11c%$r&#Yc
znw;loMh`|}2oojk;F_N2g%cD!Mx=XEJJoEq4UcHC1~!UtJj3CP=I2_!49czHuk%_Z
z{$WeDA(3P`P~o0X&%rqDJfGRf6v8{`4k5CgQbvMU9|GKy2^|jC23$X+m;1Lud)-er
zBxZ^lIWWke*PdFk2UA;f`Q`KKj9c`Lb&?~!m+ZT%4l-^MAzd)<|1i}BWH*5^b_f+d
zPn3anJBg|u4<S@DR_D%RjN`V~?Rdg)Z}iSOA%k(hr8fE-8=JjMhG${P=zl+RSC_`M
zHUx)oy)_4Of;Q%sQ&xAPhm4%}O#ORya;mDoV##jO)z(|9eF&$1&!6|bOrO|t2m>u@
zUQ~+21tq!%D-l?jV7E!nu)iH%qa;4BtAeoz*o|<Nx~|yvvVINpjnJ0P&HJrmT{0lG
zGDgtrib#Wv;T!mb^=Qn|3SmRRn5L)Tlc;Oq)9g11pHNK156j^b4=4d2DIyKF!lxmV
zk>f*-Wqp1ep|#T#?IRt1FV09Wh!=H=WVZ=SBmK<7&j$_8|5@1>eWwkZ?xhjJ5X^Ql
zQcJ77^f<aJHW=6IwTw~Qno*i5xM2$DG~^xxaD5TP=N`|$HIbs(k8Y1Hu@5yvp56{E
z<74;u?N|=aE%)75`MJ;puBEZ2psJe)HGPEF$Z?@(|3#Snm&R4_OFO$XGKZe+gp_=G
z@+D5@%l_gHYw~3n)mPdsXne;tX&ZHNBj0UJ!W}OqB}`L_dvrdxuMWwOVUH_dd=-Fk
z5`KQ&P@$!^c1Mw>PE4DaPXWz?)kt)jgi*@2Z~nA+w!Pb4del~>w4{rc+AB^Zbh9E#
zejPynrwApf{ktJ$;-KlZ9a|rPn3@MlQg%kfW%BIXiN~J;O#W<$$Db3VF*)N{1D_%w
zf5r*^`A!7n&tYVn5mCS6YPFBO^?<uGY3J2SEk$cLR@2weXs~imhSJ~z4n?WyB|mNb
zM7M{a;*48+Ev<o=Xyw)x%@tPz)YE^RoXBI+2-|5iS(X(h@t8Ekb_%z*)HZ>~sJHbk
z8y~i&mdL7wKu!2BlMCH02ZB6bdnn3}wk%e?;B4+GZK}TBv5-ezd99&p-ET<|jA86*
ze^;Xk^<);B`|w<IGD|r5`>T!`sR`VIoR*_e9FdKT_v+{Q^NyLT4x^#wXb&G#Bm3WA
z@&#6~?oU%q{~IS9jbDu80;rq#Mc3i~UMTik%&_Feqr5)XzYiG3T7Q!^*&^;Nq_w3Q
zJEQW9W3Xa@HFcN!ObsY<?2O5Q8^cpaJzzwgFgOY@5Y~9aMZ8=lo=0qT)zyar)E3(#
zZF2OvVd<b0K+P8lW;|{*Y(vzdNN?$3_14KoNCW4;8ySIEdhd(>Btp`%_QCK*fx#P&
zZAX;_zw2Ujic9rx|CSbpL7Iyf`;-h*DL)^gaMZsI3;Y=xPnYgQTr*=6^UhTU_u22V
z&W(k;v8KTofZ#ND(0ARS6-MTWqie4wV^$i7)|3$S+h)Z}^JT&?0^cWWBep#W6&z4s
zQU=U}QC`=IRQs{=^EWbyUKY%9QBTaXn3aPJ+{v>w$GHkY<M-T&^3qjw5JHqAZ@bph
z-}b6e<%s{<|2jQAwO@d8sTl1sIotBl;3Hg8p>0h8ft;;|L})8}APVBBZGU9Ri=37#
z?jjsx%GFqQ$(9NSev<^*OITYCw|wya49Tg$CwjA%Y^xqj%gL;os+NxFUBeCf7;UQQ
zbqAtgP)cgh{Cq}1!v)-?t2SI~L1ncge-nx;Wt@4R+*bZrp3Vmj7@fgs(74s}Nue{s
zY43(cJS~Z=YG`arA*1L>mQXZ2`Q7R%lSQnOG+9KeEgyP?7=BWVk?Fk0C|Xu9$}$RP
z(s!i7ZCsAM0VPsL%J?NXN0D2_t6*P%&#%LC?Bn72y*LmV(##Owi0s<ltX+e(+G6eP
zZQh9=aw6lR)4ZW9Jl4lTvZ;J<%q<NZ4I*gFQJ5iPK^l&UcI8mx<`YdtfV>tOUh}aD
z)}#mZN_C~)sy@|Q)A<^`z7=Luy2oO$P3`RywBqKq;ap=4>2bVUtp7?UV%l3ZX<92h
z{*Pi>vAYVmooWx7P96*Q6o&wuhT51w*bH;1RHV=ret^9ZO~Uaq%vag5m^LV@rQe*v
z!KNdq7`qoR*n5%GfM0iGFT{==rJI`WGEVzJawNj`Rrg-Qs$&&|Uxwk=3Nsh#_ou`B
z6*2rn#PHojj%}te*rRzdxnZ{hV#R0=b%Kq7UFYStE8V8GoTtNVhUFz#eq<nP3SD~8
zuvM0qQ?-=W;Z1x@?`kwFCjz|{P$qK!TZV52H!+jgQn5mel|Cg@lCoN9oi|GGzRmOo
zk_Q2#zcj^VEmV1VB^B&43!A5|`tqv%5boR}6@Zl8XuZF+?7WUh5>lk^XsJ&}6|gy`
zz<s;}D$6CMLJrjVq0WG-vGyDFUgPgKD`dyT8&iI%qx~i}R?Icsvs_ZFO`1*faXkX(
z%=B)M4W7n*-fCtoDc<R(ShhkPZ;}eqbqgxQhv?Wuka&3uW7_A?@V15pNZ;7kDF}!x
zJKwl#Hp+*~QV4s@qF}t*5|gHfq;9wIomL6??p8Sr6SDkPQ+p@=EncxF#XrhoirM8R
z)d+pWd)e`X!ZLyQs|QIfipiuHnnFulPD@=b?vL$%57}VCwSEGtA<s*iWt~#oAP?>-
z%K4!=oY3BU3fh(>&9T>1)Eb30*rhhe{~KxRvVjetuc)Crc@GC;-TwoAx9)b4eaJ#U
zLRmRn6mr8CvBC|>I(XUHmQ_iW9Y#^~Fhn;`&})n3BKKuk;9fpy@{d?WwnIK)`E9gK
z_<azLY7y#^21x*H8-sV<C1TcFnv?C+Z1h0Uq)7a^q)jEXwoUpEwnY)SE@_g5;wkn%
z0MJmSWorT?s+Xc$O<fl2#1JPWimD?<;KebEaKRO$_n;)@UyFvzQivUqj~6$wN%a{a
z!86J@X>ra7H)$s~5^|ay-X<BHLC7B0nL95$hcG`W2Zm@p^YO7Ss&O@|#>HBrH$y*k
zZxY5qhGAg}^3I?0X-!vL*keSldKpIcp!nuS!7_l9fM5xU6?C3IeF5I$`lKVr=-FsB
zPH(}6;~}@So^7&WrTdU*hX=%(ZES>Ju}LOB#a5)+hE<KFXBzBU15)jt<wx36{dKL4
zBgWErXr}s&X&<g#Vam}rx8}O$x2hjoPk%{zwjd-$iior1;OkX2@!;yillYsAAW>&Q
zW0HY>CNuhum*$?fOV76SQ`-LolTRW}DH95ZRKU8R^XbU~go<PIR?Du}L!Mmn`M}~B
zWe%(^PQZ*Q^KP)ZII2^~%dE<-s_FZzI6W-~rJLqxL3>-`?6lk({s{{62aj$r6ZCq<
z?@d+MxqL+3;QldRD~{pI&^6ykisio%-|7KLu|?U;-tRZewJ{YpUxJ*(Mqko2tqJ`5
zo0|0jd^ED473vUu3+v!)CPp$CYz~Sg!9v)Z?t{LeWr^zo|4<ycDSGjcOs{iUlbH}i
zZJu?Pwgj=a!25Kaa8HjC@esfxJtU#Y?Z`Tz50-C241nq|M2anlkM9WZ%bKM%YHQSe
zMZfHsZ}49B4mY4`I`;Kp#*+@i5%Rkc<+fUJ*@;T)4Yf4AB_bk@IY=y!P7rloeoSb(
zIP!-k$x;)C=r%htMoDMJZU?3_&w%3e184X_twhF49*zzmr<?$Z^VhM|7FY$Qnjx73
zDqtTb5;urInI`(CBTfh%!Ljcs4TReojv|)bZuY;4TE4Z(Q;_Mc-<zE0QINqrgYOfF
zt4>MBDaKYFfa@+*<L~oHon6dP?5GmUQ(}j59P)~Vm>B@5NSDl3Tr{j}hD~1?moacn
zrraorOIX;zgLx=3cmgXYY*BpOhgt&Pm@5LLyYotH!A)DQ!fza_<(oeH3<mW-C*A*?
zbpLbG{mW0f)4ZO&xch0x-O&+8@`t+pr2CjN?rvvMetGuFYgb1F-=XX)dtSZjW$q60
z+WnhfzotNguZ=$xOS&*feI}`=A-MRG^9oCEWgO04D5jbf$oXEyS<&!7abrPs7!1cA
zXc)9cuopg~Hz^H%?t`c1ZY=p(5fj2V1Q7s==A4XB#GhT;CK2;f?tQUNQ5+m$z<|th
zsuEG|gZJx9Y|rKJtW`UR>Vs+uk&Aqs$$s{{n(<6v(R&oq`x1irj>;ioO}}-lxNuev
zuI%c}IUOB$VSzgv-M8Bfd+hW{e)F+>j_R)L{-?7tRu6D3!|YpI>xF-BgBjzwi>X1g
ze*y%+ZMo$rRw4Ac66C#r4H#j$L?q7M0s6hm?z<ljP2VB5zk|ho7orEdJ-A?PD>+AB
zuM0ZqfV&HK`9@^c5qEK`>HMXNuUll_#yc>hJ!dMYaX-O`s?)}1=m`mOYxi#B9VR1`
zJ&Mso+ycG3hG}kwJmW;gI$ZN}dT}qi2HnfOd-S?3{~u76j@h+_Z~*78prlC$4Zq_i
zQjJH8u4+N{dpV{f8)uf-iq>_3IM7!_yxo$kFl&Y=tHp>weB)h5ek_WKYbGDO7j6Uz
zj~bX76Vd|T%#A2FUv-*t$u_nOLi#fWiv*Z*WZrNCKK-mYPa%vgpQX$kLsK?7(j=Um
zO~YknPmE%CEuaPwQuL}R9Ryu3AL<bQ8M`?i76XX$TcFsB-yv6qLMdoc#H7+ii;VO$
zBO?vfnZL&uVRYKSU61R#nD5B8^qsr8TJ6BLL;Q`BWYgHcNTA%>rxa5vw}x<;v;Y9e
zUmP){?C6?>BmN8b9d{3$(1dV<&;TC1VfJV6WK4BUIf$BGTxE3KF)6-@4+IYx_$TUF
zQByq3<DhHWxxy-@^d^aQAJ|iO2}mB57$I>vJVX@k)sF4*n_BN{uqaCJbu9@o6@h|D
zKf(U7MG@z3dkgDu9R~;GI3{KoDJK3yt;PGy!Up|7H<D(wEYT9{YfpU$JAnExCWV`_
zJi}&?Rf^&UiwVk-b%I%j#yu4a_U|~)0M<KfjD&y0%1D$lK)0sd>WGPLyOUPj(21CF
ztDyE2nVGd{5;Xl5GjCD5g0=E|Hv3f8-0T*RvfBPatgrJ4sme(VV+@_s#L_j((~yS2
zN<$lJXP(22-V*J$FPTWoEN(supm#R{Pg>HeCuO?*FR&AbZ4y2JJlA@50C%#=rd$DW
zKJirywvQ>fQQKGKMA|-r(bdys1^8fU`6z;l^k*NQqpd(-oD#XTxOK`wnJ!^d;h9c8
zfvq<gr5JOR&Ol{sfnIm6%Q#1FmCPlej+0No>o8}ixh{N{09?bloAE(e0Mf<wJB=?}
z5q^X$^{u8l9o@M)Y!%2@DdPbbB{+!}T<rtBE?|g4MOoD4rx;<SlAJ*bcgUj@VP@)^
zXW4GY!(e|b18PZH83v-N$RJuO`Q78tqtn<>u|=08S2qUjd~A2q8R4Gb&2(Ii*RAlQ
zq7m>lElQWF4WIt$H{6X%oQ4<PPP8f1$jK7YE<hyrB&$-rdJGw<rcyex07$+-I(6hB
zT5@VbN~TXgXSf@G>M2`um1yP`EL11~49|kT1<`g3NCLS5iI*3&cz9%@PJqLXMU><0
z-DFz1V{Eo~m*tX-97>@Y18qp(VN>sX@Z>0kpoZ!Vce@@n!NFaVX^o|SuH+w4jyoHi
zXCSS*^GXIQ%A(^1+SKx0=sXo6U@;+jBkjDs8wTi2Z;Up1%YTq|nR(vII4m|^M)3EI
z&4}<>giI?Y(3}=EFy0U2MDNE6W_)p5CN~fbCn*h3va4K-OER`XnST@O(e1b?47N5`
zICEuLRlh0UM#%^!n?ZD}sD&!<AQbRB$4itqNzVGf2r>yg{mHy`*YwSBwl&1VO2o+m
zU$NWDPwEaCY=VMpGhhscP@FsnFXHdrX#8qP@G@=Cdeh-FWUOdacAIT5RK2#LvYoxI
z99?jkU~y@km)Y?j^wv>u$9~Z7G{M?&V})>^`syF36~qqbd|a&Du$fL<)Xb<~j><MP
z$L8xN*Bviy{WqzP)45weN`ssPkm!)p{d}Ajd1+gB(<3JV`zbWZ%NqX8y5#8W^2gOb
zJuqyBT(elfxD%_7l03;Bdjgp>s@m;Kb>=k;veL@w)g^U0i=yS+v<!`oucVf`b<4X+
z`Sb8o?0Rin(z2X<K(u`&vz@!G7LNF%mWkJ=DZ#rF*Lk-Ugp-;tjp2sq84590uEi!e
zL?tH9mHzrmjIp~GY8m*G6$QIw8=U>y!xa$gHsNgYgz|P%31kG--zPX#8X2rV9`WvL
zS3`5<UV<uV23FaAEMrkA9#2!zuCHcE4{94C#`?|aIq)Jz;$U6b`ea3kCXGzZD#I}b
zx!;0Zgpwpn?nya5$7CRZiAo^n@c=~KA;skFa;jUzXg8n4n+$-)$rO*v`UPpUVEOOp
zhebkL7}B1DdQq487_;IGALX+gWt$;KC_GW0{?`vW%cXxCUaXquP+}|;qb=iS1-2qO
zP0n@cp4P6{vVWqxb;Bq6yV#32M*CuvP!WH40}a2Gn-dia&ffSj?SHM*iXG3+yCFL&
z!`Y0!@mpf*y`?49XgLd>?ONY~i-KUFXgd$-p;aTIA=U_Y6WZyS)ye*?xrFI3IEd_`
zLBVL^!>ts$P`r}&<s_^EhcKz^t52YbVfDx+%kVuY)hn3SZn7|Zk>X$WlyQ;hV<>fx
zC?BR=RCF=ZYL=77_{M)xRmi7}4ns@c8W!e#IcX0W(@-;f!hkH8iC6_>!RI9bS-xwF
z3bBG%2Lngkd{opHp$|kLCe;-W+|dZvDCR!2UtYT}3-|)m!+&Z}4Mj<&9JJzrmHU?C
zS7}JC02v;&z?v3>+Ua4~i)?8OgmU~^b^ZDib^W@RCi`~@4f5U6*dV`YiKzuWmb&~$
zAuH!PegXH&eDuw&bl49qpr+#0T6s5M+owK}f<1Q>n?7wMp%Db)FN%><#F8Qe*swAx
zkmAEcZT(#jfVadnk%zYHBQmZWPNN6RTE3Mv(~RG;za!oeNtx2jO?^a&{wBQt%(7aH
znK?4u)PP!U4DZlgEtJFx0TEI`CKFKJ{+OT)o|%knW^hi-mq+HhZhO$~y!!=%vz=2q
zx%FZ?b=SWq?v@W@tK~L424N4}iO);aOiZSb7k*F}{JEX8`ZS>%%9>86yCfA)<t)#K
z!<PX2V))Xv24aZ2MopMiM=y7uf<ZU@<y4R>=Ojl1Ko$AmLo!`j&+#I45uVPgY55Pg
z)$&n@V4GbLOXbU8MqGK$Zf>&Od`iqK#Yqs$!yj;9naTl*dQr-CI0wE}k|X9*x6Ehx
zbU1<}f&A7D#Vt?HX361(?0WNRC8)_Qr2SIf#AN)fwoDC|^~Qjf+D^J@xKZq4osKJ<
zI4u(S#Q@X{O@SgDL4KWZYMgog^ZOYzoH&|#z%AAV{Kcl=2Q`*FwYn<R7o?u+QQkQ~
zs|mycp3SO@9>%g!mjBRmKn1_;p_Cgi^`;`)U`jjXn|@7m^(Q74S0_;Poft<@^zkr=
z^@Wk)`+MQNH8kV#TuC}{JDh9Vpp4>Lw<n$Zp)c&v{3!g`O#y3c`hnn!fMp<4{hOwp
zr8|8NI8!71?uk<G0usKterz5?JgmOUHnOca_oS(l2%q57LE(u(xax}jg8%+tuvD~}
zu=s7K4NLCm8UO{Uz#%Eyx8p3fK)5*7Z!$0d#7~GI(MRxA^k;*IDVMQCaRziHKd8zt
zQspF3MUcMozoLFdiAuD#75|l9Oq_uw>4KNR{X;PZgS6c!EO)f~n}yciYL~C})oW(I
z@@r$WF{>hOkT3PNP(xo04{T~%_BQ~DTUPP$>TZAY3rhLwh}INS#@5*ttELtxlN(l?
zm=6*FgMMH#87&}}-w+K;SyU(SF#>=vRaFcxU`*t6Uy78~<f&U^ivypT=3PsItNynj
z2v-*zc_~Qc-oK=S^KR{W1eXRHEfW^6I%Xzm@vuW9E$y#7_^1Ove$`CqBE5m|G=@xq
zZmDqdm<_{c^~1(7ta0<o2WN+`Gzv`NjE^vDojbeW!+}5Z6nya+s|xf*$Y$G9<kcTX
zJ#|v*q4_IW3!P|fpe1MUmI<+_W~d`6hMD-cS6j@C$P35hQHTD`R7Y6U$$(q?^cTGT
zDBXQ1Fl&s&=h*I#!p~`QeBq<|c@m9!OIvUFO&t<P$_-d{tWOH<KKc>*@pQXA(;9Dw
zbaO9xknQbFO?!F=Ct3`j6K$TfjM41c)<)Y#dXgOJP2?$hlN9VD5);e2lr0AGKz@*5
zAu^tiM$y@V?r3cvcPrfA)Cfezg$mmVDgk!{FrM|5+`|eCyxniq8ffGGHgokm)UBg&
zDl#sxwQBPj($nqQy04?Ui=N)0mJW5BjNN%&GsT#44pz-BMtJRdicvGXQn(er#G<h~
z+0GCwb5P&qE=zd^=P)Jaoss{tsOjtZ$vPBUDF_5be@MlC`1}UD$aeWiz^C{=<}TaM
ztLa5PlDjquH=wAByoSCg@K2w=L0&5Sd&Pef9#Q4^6bzkSN?pgeT#$eMv^a&g%@AZ@
zt4`gZ?*Nx`Pv2$hRN2Qy4W7a@9#dh_THy*DUAc>UJcX#Qd;a&8YbLbP1yQs<`g~Ih
zY3e*0MQG~0(bQr)nQq;W?K)&w_nj>G-PM*1{a$t@`kE~ngS(|gIvM;BPNbWqNg;xi
zU?s;PM*}{Q-w^Y_TO1cU>FKkvG?fFR+ztZTwUf_h)mlPz<y9^Jf1#NQ@`$z)a4&EB
zChTCkX<`3bG8w4l`1Bes5qZZN3e&9@)NV=cCyq=REzeCdj`Rm)**MPmjj*|%zt+Y;
zk{H}eEkWMn4;yTtFGtRISyRXfslH=kyuBopvd>n?1Pn*&euHElU!SYjv3W_;oio!z
zr$ay!aBQ-dMWCe|LN=raWb0YARfg_*ykgK<)U1}%H)Z}Rz1doES&XaUaIKqCA~Ywy
z$^gyyy4@D_L3=D`pLcCZ+~lUtHmLJjn8920kFB+rXg@!;FJLq8rtG|HPt?OobGj`I
zeKOkt$(RGJTq<C0QGO~3b7-hlxZD!yUy<wYvJS8UC^m(wtfLXv`fg~7F5K77LKjcO
z_xBp9T>IzoDBvA=)LpNM*PFjmi|1P;!;aNPA0Acnv-9zM#x8Ip*gr3-Q9cD_pnfTA
zfKtpP)IkJ&)LHgOb@_;V8)Ks>uf1vH<HFrozZlKk))#g12TD~0LYQG>h;v#^2gSi9
z*o+Sg^9^AbxBJL@(Nd!k75EOg4Uo`L<BD{dFUpsF_u%ED$1jif4xS#oJOrl_sJAvf
zJL!D&WiQ+O`av&y@WoeMhh+EfXD1^Hwu9dveDzf?`^#Tkp)Vfr_bKr>;q&HK?)%qY
z^5<#_$Y4u6*l_>+`D-q*C`O~|%9r>PH1U@Q_z#yjo4RY5FR=O57w+Q*4Du@(<YYdb
zj8rcho6yS_@Xw#RYuv`-Z)38WbdM|-8z6u&;7<0{#{bSR_P@K`6yw3dLu+U6$M0Vr
z{Pg@$fY|-dv;TE`{NksVkB^UGyBdhPyZWSqErSCy{&2*2GIA^0!QsK~b$|2DS~q-v
znYjOL^xd3TGh}pHVOcw+DEREv(hTBFnf>o*SY#dgwsDQZ3%5b3)*fO|P%rV@)}9a+
z<v$7z=gs@9!@k5@X7{->F&YFH(+YVOG-}uo-ScJb#6&O|%{CG!+`Ct{51on6$Bw-*
z9{B=)5pyVnT0E_L_qx$2+sEjM;lE;#F)UXZC>)<W)+zaQ^Uzc*mr`X86FZfbd1zns
zFr^TOPTV==WB|)}XaLSvZsb`p%R9QAZa<W_mx<6!Ii_?=)oIo|lN3K(qAC7T{BeuX
zZAN2F_mw#7S~_b(gxh*+8+&rw>c-N-M`$>A6OiM~-O!LnsWI`d3KFr^IPu=R&HkA=
zM%itJZ^-+!*C_L?&*KYt^WIxO{4=8(I&RH-Fk(?Xc6F>m_5RKKw}#HRJ5T)8B7Vcb
zsLh3*zlx>$YLJQm)r6A=0XHAYf=E@(tbJCE8MTg%@xTwVkmZcWK<t<45+iot;kVJl
z|MoZC0gVHZ(h>DZ)@YG0QA8aO@X*N)A`t=|HSYBe%$S(~B!(^Hs4HaHkk=^|kJ~;e
zT*cyPzHpaHL(F>FaXvk(m3$!4h(SOfSb~SQqIYnJmFIS(n<8(_`o?qeegrr^?pg?d
zP(#<)X?bR)6Ksf8`%(vy(O#gf9&ZCifc#PiYD^OW8E)61!EL2GdJwuoM@9<x-rkp#
z>ZUqt$Lq+6Tb9XSOrzt_!iwuCbe7qa=!gts5P(7dkMqHK$5#wto3_oBNm-_V!CY0n
zpHFrdKNjv*TGr3qz4u`H6Nt`0a$Z-X%i`AjJt4KqY<BX9g2}-8z}T$sP%q0b^Kt|T
zZS%h{RDx7=|6)SRgH4IS*Hg&B;-GUhElHVibnfm0+3tMsz5qv|(V3h3?EHdUgQTq^
za8E34gYFI7T!$2L0<GB2;LaSEJ6U9hmqj@qXNNQQC!f|ehu{1hj*s)%Y*KICzklX>
zou9aEb8)}M;_G!Ne*bh-&DMwR?p5c|`u&qpb#nhAcSWZ6fBpNsm@Xijnq#Sa5eM67
z3hhI5Q+c+3l#R+kF|NfeiloS_hQlVc{jt1pwAL<&gw#L6kgQ<afu?@!h&4OU30gA;
z_WHaU4SS5l;_!UsUKZZpnZmYlU*A5A+~4GA06wyY(RUbCjB}uowQzu86|cxUzp*wE
zF+q%RJK|pW06q6*B<rH*2Ofc54kdWehE3%nuN(e~0;ogdmrU8%e86U@sKYZ~<k!H3
zv7;D2iN!JmFx}afbBbsAMi24cy|>JRzscXG^ATifp6-QX!Uf`uDANAb>*&?5p1`;{
z?hH|*7bfTB&zEN?-#OHoawspL8_&IL6AZ`Il7L^uCS;@ZK#5y=Y_sRY4L(RU=-n!p
zHT;xg9GITg?F_8<>#wRXea?P$z*Y6#3k6&bZF`Sb=hwGB&TvK$R$mq|(Z{OyA4bF7
z_8(s-Ki<AVC~<*ccXoBkRo4aUA63iNWb@8z0tt|jqU>CwjWhj5KM#x8IJf5&#)Lw9
zGoa%&FduGIL)vnNc>4nYq9_l}Gd%0_kvk57colWwTSdb%%!aVpN9yYKUk$P1B~Jo%
z0^MQX?A#CA6yDVrIS7bxzxp<>teHFn$O3CPcQSyF`CtmsZK+H(7|f>>-KU_a#pp-v
zc*}SBJ1%qLZaNoX!0)_1>s>!PEFmn99#B5I$`>`q8;AJfCv%KiL|*J0($@fVZ)gBX
zK(@aS06GQ?IxH-&>%)T!kO>80xf|VC4lT+}3IS610OyWFm}7u*YJ}+-Y#sWuzS-PW
z9w})@F^)BM6E(2W|H|Q)cjOF)GaW`D+QqK`3p;*)K|~6|s&2NPtm8K+R>Un9>PQXk
z>kMZZj_F&OWgI|T&3wD@;RQ!Z=YCZIL?ZX)*X^eLjs!+)KMHj7LN73cEuAF6Z~lI^
zKOT(c!y-hO=D1EPoHcS3zO_;qU$1dLbd=&*etjoqP+i>bmg<01Dk0$kjug*U{)N5D
zTb~eNdkIIeA`765NuFU2MFbWF4Crg~jcW&t1}sg9A$-ST>)2R)wi6kp^IeZ59giP7
z^6{21y939*=jMSSa$SC&;{UQ$W8(j}h<u-UlyI-hj}M5Sd4#g<{7!N5U2{Lxg=8$q
zkRNwPLO!nnL~BzZ!4P^d&W!;pkB#98cU#nbZhnQ>`))ih=I#KSPvFq}(x)o=f{#ol
zDX6fzgrgWwzQVx6AFfg=3W@0&@Bmgj%-^-m{j?*?N^v-&Z@g4pv!-;h31f64;WHKP
zc`~Ohp;F?ofiX+^jb@_ANq7i5N<3WPbjqPyv0)}`3zI6h@K=RT*fjLJ0@)SQgLqd#
zatwd}s=$DtpZyY=s8MYRtc@z<?t$|u(fL5x05MDtz{bn~`=AXNDy`U9Rp&e4*bQ|)
z8BtiOzKN(NOMX!dOZOFlzG++%8uU1d$(Cy2fp+Cdw-DL@)JTj0WQBq71CF#5@@Qvp
zMIDM1PR)GFvVOl$M7GiB+nz1yxLr)+qTk+VAl%$Cmj|oN<-zYUmj^9#xqT`(VTBy3
zshw?Sg4B<=;VVGBoVY=-Wx_-q?pi{-i}-nDXjQxCIRvC4R@KqJMK%ZSdu(tWLFy>{
z27oOL#DX*?6HiU%9|~+qse&7{s{vdDrSIr%cRLLex-|1Phl~Sp!%?$1n$Xy9O+R9e
zMRl^N#R<n;LTS;?`VGK<;gNifG(;-Wy(khx{OQP629L6!aKt#%HdJu4iMH>dD%<=K
z;eWvq6oUe54SuclOiatu@@zhB1Stp2!Th2~eYkR$(8OyzlDBYF{O-mE*Ixod7W}dS
zGYaWZa@G(42S_We=h7viA#_u!SwzwuP`@~|Iyn8gtV=g7iZp!)a>(+uEQXzn0+@Rf
z23p0e+H1-6>_u>r-PyAHhQIz$9uD#m1_FZ4OcFJJOuJu?=sd?4{2S^}ZBX($rb-+N
zx;lxLud323(6F>Cr<Rxd3~$^x7&PG+y8Tgwu2X9Ej+^O*j6K++A7IxcV7_~g`E|E{
zUXs{_S(ngrSAx4G9CJ+)ZW*U4Y+af3-R<U9rQ6V7{aO`oURs0c7RKvtB4W4fb#fu!
z!Hv<ev5`2(``XHAdw?8OY1!fgbW3z<%+rNYXA@M-Ip{7ZQQJvTjQuI#P9|=npFL+*
zY+7JU&1&Q>G=}iJa}A7#qhjjQ#I<hk?d7^55cLIrOgH}$?g5y00N78t${}NTUR{Bh
z#~mye4qirt56ojRv|>_y3-oHhE4~wQ(G{qUwZPB|;P>k>i2{85`I|uFqwu+~(^oRk
zi0bjdfgPbfS(&UvcM8^Vb>8^laNIuco$Eim?UK3TVlCztf|vuA0r{4CKA8|(4VNB>
z5W<2)#3i=|uL1yc@M5*<hG9VT1$Zc1ls<P-hyLS{9l%&H$eyeiGW33Qt8~p0j2*Ps
zWZ=|5f9f|lApElb$OdP|mwmLSM5R59A)jKlj`-88yeQUM2cAz=6l8|*oraI*EM`T)
zpVQsj;x0)SZ<ennRKkTDR&EI)`XFAtxQ$f?fLW&v@g$w@oz7MmM~voP3#T-D;hn?#
zFWclhV!i|v|C@)Qp%^63D@_p{<fp~o=Ox^0UCnX?cUeHE`~-suV|rm}O5O2pXFgV0
zLwmu;z1_IoQ!WKSC>dH^6eJ-jYuN&(hPz5vqO=E^O6*?<W6x4>SIyxdAp)AxqZHh<
z1c?X{TO1BCi31rtNCfJ{Rh+aJfpJyW34L}jZQRzk4a3?-U+>D@-ooK7<#ORaXJCRS
z9AhWCbw;T)VkVuJ*|b-i_J)lHL&h0^jBQ9=L)$K0B!x!>2A-Pi44Iaaz{YKkxppYw
zuA)Bpo9AM**9)jw*1#NMZ7Xq4gtTiPZz`cCed4g|{kH8@IH{J7KSnU$+9R`csw=nu
z9p3@h*~bt?s`KuraX1PUEeV>swLgAnfbwSTU2+AR_dURZXo=)b<=IY%<+U*Pr`tHN
zgw>4B`Ou3}K)B~Ix>A+@D0aXuMVZXBTFo%$91=bHL^PCwZ3eb3&Ab<l_|ljn&cv5q
zDSh=UgcHV&nkC#3hu`14y<4_Fecss=5Zl7sW3+2Wp#*}D$HPvj;ct?WWtn#sKSqma
zyu*d88zzrLPiKwjnGpMt{T9zY5!xDLG!us*`G|HFOdp4kPZ!7tFk-{`@=of%%Q`jM
z=j==eI?F5#7mp-K#DeNx>i!)zKA}*A8HGA^8-5y`7_k6`DW|U?*Q8sdhET7r=F@>A
z*AjeN?N97a0zIe?oV3J3F?`0T-3q3Da~h^3nSR;L{(I2r>7elx#a|{*8g}6FYS1a$
z$Yb77J)qn>K<RfzF@-H1w&!T!%|y*6<DAdVNE&BaYUDPl=O?>M(UAAm8`oT4a8bV_
zgoIy$jJkRB@WaJxOrjG)^h;)W8H<*Os~LsHU}CCibE>8>DBw`2XAWvXBsUX#fD;}?
z$970nvV~xKJcIxggo9xoJ@1U|rT^V_Rsm7+WBYNHeJ|y>yAmH^lejW#gW!v#Atrfm
z14B?FMoHZ%7n_oasz<{Q-^8*qY$Qqm1K)|ZLfht}wD0*^yvd>s<yuqVWe>BC&kdl6
zcT~i^RpKp?7)2?O=s0MF6`}PLM;ZLK6>>{yNuywW*+X{IT<|aNG7SVegtuhnBJjh@
zk3@eWvI&4WS%aiQpKV&ear?0r#$f%pNk{rneYfe5f_l^zQYn#0kNp|PVA08lN$5)Z
z`+AG|>SI(~rA&wlL07hnQkP%f-VK^{QBUpNU?J>jVY5H*lWZ_qrZm>v&PC85kuGk-
z8htCa6z*YtJ<>Ud0mUQ<VbC(?&pTdg&WdOMYN2nWnpJL)4cBl(-tGw&Tpfw=bJSw2
z$U_c2p2QZkr{hkJyWJfuC-kGa8FPpOKp!)A{JW<U|Fp3!eziUuxerL15eM91UN*#K
zRdOiD(suhI0=^-ShgF+FNmASbino`yAlCcxgSK<rkPgGo(P%>CR+Y8bGVH$XRK(b_
z-U0LG+gW^nb!ZYcU->?qt{}-{22}-xHQ{yiJkSqH#fjYxabmY2%&U+<(}0;PrB~GP
zRn_P3ZWvIFtu}B7Ju7y(d8m>m(4!(jOWixkfh+z_g4GOB-&oj0QbYMqaj4?*%$-1m
zGJ2{N@lU8ae3=!FnS}DgCRO<kFSrV39n(wC#0hsiN=Vc!91KoOeoJ=OEqYBPFx!%7
zT4}mRL78_T(&7^c_(1Gh6pxgcKZv@8zc4feQg7vQrY^Z5sB&390b|gD1D+mC*&im2
z^*%l_Z0H6G{|jjVp4d@4YMGX|7G*=}_5rR($mY6c!owX~*{k3>cx@VMyz{iFvCgcZ
zpklnrHEU1kjL6U2uC&qtTK9+iqbB7>*ocS*4>eNg2&H9RvL$3xjaYuQaX*W@4@Z);
z$=irb`#Ki?05Q2Y(y|<!VhPf-tZ!O>I6+A&()6+PU8<`mjaUH!3Yi0)N+eoS*@J9G
zBa#<flC*xcVaOzr@xkG5hxG430uuu*<sKRz3@vm$%2LIt>=Iv4;MYd*hsB^87D!%5
zCdF8%{diQ=5^}MH!-)+YxRV>>jl^@tpqkJ$Iq-Fa@`gi!L%`bQ7C&-iy5Livllpwe
zIJMQly@0yD+fkLz{6d5t8Nmc69C|8e2YCy)8DUK@iE-efor-!%?BdPFTMsx9Lo_{`
zxQRDw<jb(8uEKm*h3CP0{BfR7inX`Vp8576nK<$EEo+$?n&Zy*&Rd2SSWYfS7shpT
z&o!^^h5MriGNs167YIfO%j0(t)~14xK7-zU<E9Xv+C0V@nZHHLAl)T*iXy=OY!cub
zgqx|r1}AkmhkRN=?^TZ1&bIC2nx)2Hl-I=wm#Ih1X+{aYWh!(g0Uh=TfR~UU*mrYj
zIx#8!qvm#OWk8&ksuC(!)oa;tDTd25B@=v7P03_MZOgb1Ut>3~3#`>LK3$~Kyv<<Y
z-*Khm?60s2KeIt~5)pJ3>szoP0Ew}or`lJTfe=*msTC<Crg&&&MU?Or5#&B~2Pbv?
zj^AIDV@Fl_cYgixXd~SP{75kBc1(;01hOU?NF%EsjrZgD@9`0o&QXVqWiw0NsjsY5
z@c#T!td`}XJE|U2Y<lVo6%MbuDGcz~=E2SVeD>M0v@$n|rs&i}s?KkWWT%bfnl|8i
z7T1u2tg&X{eEJ`G!z%KI5PkR#B8TQxy&-a-`mGX&51Ec%u}%ANiy*a42X~M<!1mbE
zH!T!I5Yyc%XlSLBC-ZVNJOpkBWenzKD;egAZZhvO!ubi8zeJ+DvhtK#x<y`$R$aTr
zsJbG9o~Qn~qsQ0v!eshL*MO8X<-_%sh_tuN5r4yyiLTbfhR8_d6()jewy!mw-&Sku
z6|!~k5%W#{8b0@H@Av#rXFzYbY7U14Dw@34Pbnb2`Sop2!JykF7i|buq_H4Pxe2Dq
zG1A_8kgJPO0wdqNy-B1HYFk#5>wvMq;2BtM)%qxNw~4{IyCSiv7uYe@9W;$wTeh;;
z&XQ$iGf6BK78Gra!9K6_ju&O*>d=r-Ydgd9ayTrsK_SkuKOfiU<>`!?j*Pe(tBF<G
z7R$;sZ+Nq|7P-;*)OOHAI|0iQ@yBn$Q-h<{kiDKws<HMEH9Ka5e3{iQm-YI!v0iA8
z`B0S&{=iJ$jEWG4d4qh@n8weyaWn3<>$S+Tfm9ig@tgEZ?EccVI_*ehFSW6XHHLVi
zJo(UtT*%4#x85Bshp_Ww<+R4;+LT8+=z$oR9-EAFOYC~6)kcvQ3{Dhh6<GrAlh@9L
zL*h|khT8*oHa%Wt9^G#<bZTgS^_cqozMoO|;{-LUAvy_IZoElQbQvL9`CXi@8JF@q
zl_(D26`pSzG;b-MCC!mUYli1!FxQo{JFdDN1c<nt5$pKjrWx}E3;xV^1AK^--zy*O
zOBKPyvXeG8@VuCmEstLQ4rj2^2Fp~nN?0GtZ=>mJCGnEFpwDd7gq2V^E&`}~YAn6b
zw5A{eEWJJtAF6tO3o!trg1*u1mDHvw%Ggk29PRwHiUA(Dd>lMF*n)V;nXusfo#{Xl
z5I~&8A|HAVl`<B1^DeakICj3{QG#s^W$L7RVeMnVP~J{?yU=fSmRNbx8v(L(h%FGt
z4i~!?)2#_JJ@skIRIvGwafN<>r372;Z1l*g1|X;+is#coM>psbpP-tZf3xNt?}9eo
z^k+CBDrRGJ2SQ;9!R?b^w-pQmCb0_esXf&7wPbZ3RCNc-Lg){kk&1J@kaBf7ZY_uJ
zqmb9JGL6K^zvHdVSG1DGUMy^Cv|@9R1{+s%@oLl(Q%NWgRrQ-9RPwJrMkDy&_p;wE
z_e)-6*=>!afsK1?Lp709hVUI_cR`YU)nvC-WW(BoxT%)A_mXB%7ZEq(_4Vcq_qJIN
zId+9db=8m0Z7PLTwA)}=8}(-u|3)dWg4IGB%Z8|SLvoPix5>nfF<Oo0m2sJKo01y@
zrR)ikI;;laC9z&vb2YwF>Y5@W<*MIh`pOoW7pS<d$%Qf6W!OJKeN2yHZs()^dDQ@H
z63Ij$DuQ_ZxYxaMI+%|*;g>}V%LZ`yr|2J+D2;P!&MIBLDOkc>QM7~7VkK5pEYt9$
zb}!cJMyH%fm_uMI>mU3}mC56_^bIsD79q7IZh()j43<r#Y!ETb65ME8rIdiK6@)>w
zZj=w2PnU>&9+jTvC+=d{=>`vSkCJS;+N#3HuY(Gs94GRz-mad}+tF(}-)Q4n>HTb4
z4*LU!QncCwOci2uXQ>SW2>^}RtrCxUD%jDOKn?dz#tweBXk=XUoj)pxxPmzpWijz1
zAO&6=rl9TSBNrYWj7l6!;EsIDbW1ig>NfYf)#@q+3v&NZ@JxrG{&%3Hd;IPW445@0
z?J4{1UhvPk#dxpDl(jKZt)4)TYYMaYAe&EnheCv!P3Ez%$zyCcSqvpB_lTXd`*mY`
zLaBqvY*p2l6pw9*IP*pLp3+M3Fv*FOBh2@_L=_)zSZl}~#<tyeI!XamNM0Y|i5%6?
zS`bk%kU@ABWCcutlsB0)0Skr;C4oq)Cw?J6SjR4$Fi%thz^ZlWVXNLUI^Z~FAxno1
z(Y=LCXAIz#d&hnOo~LK}(DSYX1PQXu{7$?G9DQ}=F(icq?ugTfi9S>^Nr-fq89rQa
zFb>0^8RIYOws5Vz#bK~NyKki%J5Air(9H?#9D=m)v~4K{lpv2`!e9vA3uYlw8MPW&
z(^eWArwwgd*xTtY;^`{ppxG$oG+lkhy!@YZ#!H7sSys*X1RW6i4Z+WCGw>}en?*=1
z8s-oO+-X}X`0_epZoJ<ok%Jp=!`BcZ`kN5S5ZwfxHf^9&sp3}jwUhxZ@wQY##TVAO
zp~c4}Dz$=#g%%{niUXJ&#6>x(I$;dpTcVy88X;ogYf~QpO#&zzP0~_r-&!u!HB0!_
z5`8AVp$);C*Cc#^nQi$>e#f9I7r%^PF&I^KVR8a4nVw&c#_V)NE>*!>lDY{xM%mU%
zb#Ia=Hn&9EUWRY4{%2GC*W47iIBjkH_umvey|6bHw`>Zo5bce{M{SDJRrxD*3YpU>
z&0HzH)va*=n%?*yyubH!&@-O7+VOJvUcpqwADZdDJpcUxlh(Q(%-$GRvqKO8`pu3U
z9B=SMI@#4ynFg+!y=Mu-0t9=ZW5<~%-E70myEYlBr7E#v-s3s3`wc9g4ni#?Ulm)@
z5`xRHblR*m-nU_X6Zeg#WcZYkT9ad<J4U^l4B|xPZ{5m>Ing$TOdlvzp&&4dIb<I#
z4?MRZp`S=oAA{hwiAgxS)YKa3cAK#D>2T$)BI$bFZDnm-jsH<htF>EF<u(t+R-EMM
z0-7q|ost8?lMI9tEXjL)1y1@)TSeVXt26gC+UB=j9S~RD-N3;X7Zdn!7%^LruXNXf
z`X;9dN_lYg{d~M-Im(+jVK;fZvVIr4G*y%xdlUP)(@+{-M7`S)Nw1*_zG;pi4D04L
z0)g?e+#)xj;o}q&bfHjm36t^on8*x#EE-*iXg<D8Tq`VRF0y_GzDat+WuuFwMeo6^
z6XQX)&Zxodu4k&ZD9v_bN8GlBCrj)`bY0=Fm?$-r!zufbM*VQEh2y_bsE>KK<ChCN
zKV_WEf#H0<s9{+T=5>wifTSQftsrwPxIdxRsQ)WuDyip1y+xX%x+qe~q7X%Yt?x^v
z`&8-vgD?KP@xSo5D+Ppk{lTC9@|UkSzxw(wAJ^WOU&ify_4SuuZ~pl&e~QhNm7!AF
zNI7=4)G|+zTsB0W@WDYRE+2WZuBh$~erdhPLGl(&_mX&}R9<40=BExlSU$)xMnyb$
z9EBK-5{ptq)lMQ-CXnYhZ;kfCnj0%aWun&<`mgjtTdfvurhQ7JgUFVPM%5WkCW%@@
z7y_P&Hz_NHV!p=9Mn$K?&suY<kjk9@zHJl7g;kbYtxC?W2?WE&=%slH>$#P3VH6iP
zQ<~ORzX3t!Ru)IxYy<_hv2Vym9xGj<nSuF?15m+bQhXZL{Uafx70d^4vDu*(^{X~k
zLW`z{unph&85eLUt6j&v!-(Z$tre-6kEz}6&FuG6Ke!Z|OPvY+`^XWKm9`^L9i<k8
z$0G<1iL6a%Yi&C=r^fxNw#^|1uw(pFd#LW%NG_bTD8=JNdNb)oVhTXI3-{q$T(|Z0
zvKe_wmP~58H4{upt=(Oh2)FPYNgXE>CfmUd>jtP4Yzu3Ci!in!229sVn?+D*=(N&S
zwsysthOV&kS`+IR{4=%Ss;RXVvvGbLO8l<tt(TxJ7{u!95FzXxmPD_}vaRT+1BLpU
z%vr1T*1#5y6s@qVtF7wYVR6$I#N5*>6C71WxRn}SGQy-Z9C)r^#^&=O8$PJPq=gE?
zqM7m|OiP^XfImfiRz4iQgqvqEeCcita3Sj9#E>pLEzVHtFm?YH)1%^gmdF$91B2w_
z%RFu#z!1!i5peFv9Dy_lLL<U&dMUbncyJr<<!rPw%qNaP!#5JX7l!btg!_%dkscWk
z;8ni)VOBk<I4a_-dXZ!DM0`?)1n_9RHr=aRQsH_AH6N8{V~p=iW&|@ggjevldg|_3
zFX7Hb))q@(=Bi8^Fq>6JFL$5rRnxI6vZQj%_AWQQY{o1B<bQk#*u@r?_~5S!w53t%
zc70g>1GaT%1lBpA<nKAcH=e=k5FHI;f}T{@KNNfymLhQHyq2Kz^6~~l*l}}8;Njo(
z=QUZjqX^M&cin-y8S_guE^i6#yADlHe7p3`(H-3u2jjI(MVS(8>%C}j{9Mk83wp5?
z?)wHT^c78T(8zr|fF3H>kN-YLqcMyZhOo|kXf_NKW}ZA_9}@AL*jHGnRA2G8zBZ8s
zJZ=5VA!q?&DWO9jIME=W+TUi@m2?J)gT{;P;Kqkf>|%<)Z*DjcHPyZ!8`smv5Ug<S
z5M2pqC@{3!%jlw|HA(0Xw8z=Fv-1)RQLo))3y$X^ADl~6VGt+y-<YPptC}9+q<<&@
z<qH!QSJGDhZN{^nmY424@Ne$x0iFZ7Du(-R{o)%HBzKr%;Bpv8H9tEa&mHUGt}mSZ
z2$CY@*|0o4EifV~#in<AS9Kuuo<X%34p@Q$Uq57E)1!7n2$p$VLfigG8?$TG!pt}~
z5TIa!(1!O^H`S}r{9=5FX<1u}05^)er?rIJE`GDO6_DMX{7#~_<R>p*OOK5Nf5~st
zWg|LYI^L^ggFU`*d{a4Yg@)uuY;AmL*ARh>>A3yQgpIBR9f2t3oDrhR1G9cF3ik4|
zZSDN;mg({@i^RZ6Ira*}ss)Cd)($M##Z=TxvYd4cxsDpq7YM9i&2SY{X_m{(ciR+U
zL@_gp#Mc^ULbENRaEnA1lD0|0ZQHRH%v&s1?Itv-2B48AtDKtBi0~cwp;m@^qJYq}
z0XRH$rn^tY)S(%5)yv)las?5S-9wi|Xy(EY>N|ekaa2Y?uX|HZT(r}HV-ye0xE1`;
zQv|b5`6f~k!9ra~q_|T5P_Pq@ZQBBe|6HkW19Vo<rAHuNJB@Y{R9ih6!(Z4zk>;2?
z@4*?be6;+L23eJ;IZUMlannx<5TQ@prGw*|=Z@2!mc?uVDr!o^4SDt;Td~iv;+jG^
zdyWCZ^BL!D;7ijPgkvu-pTj#m^WOD+wO=5y;4BQIq%<ym2tAwW@@($77RQ@Q!XC`R
zNt5(V=2M>md$fQlT;wx|nP<~`p5)~ybN4E^%@q06mCP|iH%bipiL_Kaq@|R`Z~u+$
zRU{XBhuY1#-6#f^BIpKhM|xvb!R49_XP8YD#u+N~Yxlxt3od7);s-;nj@gIcD13?}
zXdeQP9XMppn8UY?<W<8c<*%p#Ptue&nC7TPjXu@ejZM``{L^$FumXjg5au3G28&4@
zOS6yNK6+VQ)g1+(UgAciA<%{NZW}G<Lfeth7!(yu&IAUvSB;`Uc{r^yDnn4DaesHZ
zGFeOlhXC>3G$^}Cj>$K3&LdOpFp8;$cyuQJxw@7JgYLQWk6RH-2vLR<IHVA-gtnXe
zF(FCA%}vsm)m=<Z_-e7_!XY#bLFcF?USLq$;vSg5VKe=V&e7~@nolw}lPbG#q_Uih
z3Qk9M#dMKL->h;a+)WH9mjeeVI;(LJo5y&byve1%*@(>M+(*Cr1Kc3%Gyy^}2D8d-
zvp_1sDwxd+Vw4>atz?i<%<)lc+x8>G3S(8)8ijsXGjw5!E(PnGrf1-k*27?1?lK|%
zdwA*4A(i0{<|^E;7ctz+{N+BopFMz`gI0j<w40NRN;Qm==|<`IB$X}P%`r@3fc~5C
zQ^}X#x<0~K?qv@g@-yfu<2mg&EhN_KaPMK(fQqQGmUPR>cE5A~-^w<-Z_QCf1`cg4
zyXCoeFQuZ8z44}m=03pEqq91hFn|R+f@&*FSBU?XK1CELSAg9^13ZhfHw~{m1vyQ2
z?m$+LZ>KFkSmO745Et*bqi*PlOM6tFfc+HGmg*}VSdt|6vfuHtOPU0Mv%WacNtuo0
z*B>-HWG$WII@QP&`wbiXgF-XQq_`^$c>T=^sExczSYNg1xSqNjz4qHCW7+;GQsx;*
z!yTIo)ES%rX*H5Lt{cF)XQ{6x18U`(lz@@{VPiSs{Xnqs2*N2IcvD7|!`6&P>UI@O
z*{9m37BgTh75RasU42N3pkxWGYQdy*!fpy=RPb(M{wa4SF0(0cmiDtJ<v1T@ULb=h
z&fS%VWGF)r?!5yo%DW}R4Jlg_K4?pPcUs2@n7|3vaHUOXcsX=q$$V$ZlDvUuOOJU)
zGMD0(rz^iJHZ^H?=$w~5AO1S8XF?;beCRWC@owJR;w#y2y%bq`z2$L69|fp%Vltyo
z1b0HtM(Jb0efR-2Ms&XlnzfGm(hEYYp5p1XIsfvTQsB74mQuvoYRNi0{2(~<2-MSJ
zvh|qreB-)!t9&JbSv+r3#~2H^tnD$R|7Dj$D$t+$sBelT$@FKFaq@Sah)G1n17POK
zi}>ytbV^Y`uE-<x>y0m-RMV$3TxxzvHmu#A)VhkZKML*D-xJ;5v{~}%Q#iaM7JLa5
zmrS*1M49UiR^^TR{g$thAB!YBTNpaviu>D*6R3^?lDG$hB>(!^wP6m3b|x*jaqnRY
zVLu*`RPiPF#Q4mg&)d-WrYV%RL?;eEqlt6Sj9{|qYO>}f1?eIL?KOQAz<Hfe5VX^O
z=AuzeCK@y2BpbZNQLwE}YtC?sJ*w9!|8EPD<q{4%1uMMW!VqFTedhMm4JnrGss^Gn
z#|!3eIE<Mo&C*)&Eb>+@10M?D_H&71quqKqeUwzwpO}&P!CmE^=lSULNhqnW{q_!1
zD`zLt-lEx%BLr&cL3xelGa%rePtwwmu=V`g4oOJ5D~U+7$-KXC^}pI)U2xiv-YUC`
zj}zp&iA(NJ*`Tp)Cs`u6)&R_sG@7Euh1*r+ibbhIWSpo{@<N(#ShC{F$aS0wF?s$b
z+b{<}d){)mH58n0+R*|yb||^&b<&64QV+crQT%u%De|Ry*{1dK)Gl`I^?j+H*`G~^
z(Y<_f>p)zYo+F_1S-`u{z@xlAKR7+DF=WZ|c0$pfgLR{&f3M2%t!+S|9^kkm8;Q|)
z!yox=!y3${)%)Uh=&5o|_?ZSNDi}<xbNk$T;3&|IZS8Ndeqw}sS$H8tc8#}F)KCS>
zJ$DM6xH1s+vYgdfaXkUkIMK6lD^e5GScOC_!Ys09b9W2waBNJ>nClL4Jm-zMG4Id=
zZ%ty^Y7RscHr3~J`8@pV%cBQCDUIcPu*up|8(W!b^(@am!zAOTth_WOPteTg7rIz_
zOh}pN+xShd49UHIF`Cz%Yh}s?0^XLYuU%D$FsTm-wa^HBuo6{s2DKrJ_UpyPNi|ZL
z-K{w$aTE&fJsGh4c->oK>IODr)pc~uZ+fH32!U^I9~zi5;SE}eLO|o7>8L*%J6Aab
zTooV{!v-=f9F;#pCf3L21VKd*s;?`PIYb~$Ii!_q*UHl+EUa3@W@W;bmlCGc*kbBk
ztjl%H+O~NY$`+?gDwG=q(h{n6`gL_tbS^;}d5PDMjc#-cX`1VD+!UK486u%F6ngdx
z#6Be`M<1@XVq->sE7)q-H8!_+n1v~FV{R-BEK~l9e!PBsS%S}qE<hIQXzZ;^i1!j<
zJ^{4ZJ<<10@@{owDSR9s=O$u}U<9D%S&>x<cGaCoT8wO5FN3<ERZ=21AUj6RtUaw9
zyY{}Aoln6)&`?GS^sjTo3k$iG<SV0*;LC0!AN-Bx<HB7{Lqy-<<et<BefZImGvf6^
zYx;JEthYUr+_v~wIgS$HY`oQeWo|>M8@|Zg&0W7|^=ez$hKFQZB#iXnQ^PbP`7{y;
zEqvJUqK6e`A=r>K*YC(3nSxm(UipuyC=ILVl|N3w(_sEIuUw6ZyCcgAw+d!gWyR^K
z8*&>D-r5jtbx;hjO%Vp&m`@wg8yr-;-eOhVaooVN8)Ir`V*-if2W>PT2thaM^Qx%`
zH}~UvVOmBgcumR~hwA-n^I;J_EYtxS=HpmxY_4O)0`?A=qzjQE4FZNoB2M=yZ2joG
z&;x5#am)TiR^RBRGBf4hAXZl7NcEMLEbBaOGHp0j)E@g*QvfsNXuJR}Bb!v6w~C6}
z;bFk}@OL0zW_+;>wGldHTI8dM?eAP`yfX5L4i=A3cU2k}7~O(8e(&@Uge@DTXOGM8
z6n1W@^=AU=Mj7dm!Iut&5BXpQZX>vNbr?P*BX)L6#=mqId8BZ=pjAf@Fb`Z9y!DbN
zGUVJxQl_=onU!U6PxVm{L{rI~r?;lRAwTtfGWVd52HQioeG(tiy(ETllQ17?I;q`y
z9HwQy)y$PBhDz$I<cU`DTQzOAo4i&q8+Ai~7tJD8xaw;qgsb?CeeJLY|5lY4x=|XV
z@cni*>+c{#PRj6oPAKuYP?O-7%Ot`cbSOJka$yElHDTa@VBv>EUH;6JFA^pAgEBJ1
zu9dws82rs4oXJ(wIQo*qU`7_yA&NK}OfT378u{-bCkJa7;CKM*s20ID#CSZcs#bOb
zdIq6_v5Wg0!KSW)wKjqXW<nu_)$Gvl(T7?H<M85ye!m}SWy6uM$gJkIb(OZG2tm=&
zh3F@WlYo12e8+aMF^!Sw538&3iqpni55Ql73xHcV=$n&PD1xe;a$-fJyWI}wgQC;P
z2ZJ7(P$1jv;pSia8-bR-EJ*d(hSc|#K}aATpXA!c49k-aN{EOkOOrRmh6{v)>GSG}
zKzUVU@5lJSC{_&5(7G00l;g1@D8bIQCp&;-{KUTdHeb0n)zl3KWU)R}5Uo?R2rQmz
zVvEod!4+oxG?x5EJyFvu*>~E#oA$_FoB~ZW3cl!8w4@ZDErD2CjZ-Wk2`vQyNiS5t
zgEe>xXYBc@&qt#Q{uiH<TIn61la5CWuu}~EJ$r_*)_seOGFAc*1o!id(#{O!SSHe3
zi8}vX*dQZI+f|~m>*fJG^&Zdg9|-LjiZ5D-L3B187RXgziB<a?Q*MGSyKG|d@kMJ7
zPpi+<wz1Y`L}xrW@28R;u&o5?BuD2ISjS#4EeNPE13^8&!A?)amFSyd129|?K@)z5
zCYUNmH&);a1U~s#a-bPiiZZBBq7)r2$Vx;FS+&VT61eq4K8Ey+Ii5_=v+)}bfd||f
z=m<Kvl3_W}N}Xd>g_QIHi+75Z*<EBY%lc_q&x&y|>=b>tjc`u2TRBajx#&(!!^%hQ
z+BaOFqxQ6L_lxqf2wb8&f6JN8{Gxrq>9~q_Rsq54ivGef#WYGXSGlMhBL}fM(XOTO
zrJB#y8ipy}Ch}p^Ej^Oo)cHlhBMd<YI?_N-Pr}9p@_jgD{Y+Z1_c-wX#Iw5^KP_?y
zz5fQ|w@ceFwzt7Trg1Y*xzyX4=mF_+D~;&~s6b;<b=!v(U28RD)B>mu_D1F4{c0WD
zq@$630&{Z{k5PH9n6^ovrkiN%NT=FR!r7=jK2_B?>;O}Dd6U(u#RPwQDTMAYix9RX
z6ld*CB&YDfD5HW91~(RL9JR_dmh=KI0{`tpeTcKlx7msO{4UGgIeya2p`*Q!tl`q_
zzDP$#oV*0Ox2<U`PVo>nXriiz94vPb5T$YME^?j*^vsA_0B|QklG<^&8bO2=&G5VU
zjjXhAYdpe87WTPrwlQXP+NraSLt#2-ciPUD<jLaD+|Wyo)8%P;cUf*gAFa((Lu@Z}
zG=O)h&gYZ0TUr*-a0HZ_rO`hL%o6=GFep#JVymbjEqN<5%xu#Z$Hn0`FeLFxK??ac
zDWT>3Be?mnS;q$qprc}y1+RO|Q7ET`#POoYEN(B$07e|GOGXftcUJ)rTARW)?pf{F
zN%|g07FV7khN${_9zG9}gOa-h>rbYAuqm0tP9_66jG0DpS6$ZyGW-Sin91zWo(H|{
zYv2f{b7|?w9h_M)24coe{N<^Zhj^CE4QG7j%5*Nv9Jo*d54-Agxi!^uy{LhEaLt0v
zR85zDY@?6&jypu;{nJ+u{uF}g-66zm5?wxa{qeO5`J<U*wKN#Sf!v9GaDxH^gUl#Y
zZsvpBqGXX>om??m1zH5W;Md$Fn3qwWc*s3~H;@oi;m*+f`Y&Jq*~jhGz`P6a2pFmO
zG5jg^2vT73ozn$G1w^!dLm2&VTEyn!YBYU)k-_44xk!dXZA2sFtG|gwDA>M5*6;i_
zCj*Z)GPshr5(vmN-~<07E#;S2>~*!dv9Zxp_n|xl@gs2>=$+)Uh6Vsc=sQKk@e#Rb
z_)=3iGJOu}m}SvrWl;K}Ca@L9Z!g>OrP?b%2_`Wnm1-PKg>7bZDw`H{P}#4~tE<)8
z(&=5og~9`u4_K4mlMh+{PRIbefCcDat}OH%0Ok>6x+Bhs+=`Nvg!uB;Y!vzBhJVRo
zCs^{HaV?~<J+)8>m@wXU1I1Ove|CsBlu+(vL6jSh>Md0Yxt}fi;|efZs{%oUNGZTT
zwnJ7E#ZcQ<yP`@exy27lO7m)L(UDPl^Tv`0|Eb#vFrr)v!h2O+ET!FP?f%8IDkwRE
z_fau0^i8~C6X~t!6WTn-FNvx5Z*2snhyW_P+&qeAYr>Q_%pQY}xv@L$DGSwJrj*#6
z@5UA0)uw;O5D?uF4b=-LPi$Dv<&J&KT^nq-f00i*9ZcG2EP0d&gGJ48FmGrOK6T8z
zIC6oHgVx<{wy5lejf@t1>Z`BT#Iu>gHyGS)`DJ;7<3x(_mb4m?Wu?dct&BUg33TG(
zVr;aP4HBOTkGHbVC~P^=#i$HpweJrn=w38!uQQLwwlG??rwbCoH;c0aK(i8T1zQ~6
zw2g%cSx2pkw?@(L&b{gImr*Mb0Z|Z0fK!{QD-&)Aq>eRPY}U2aIu%SBtQ+G@W1~ft
z!Zx(E^xoTww<g}XjB&GX&zK<hEG{Dz+QqD$z-~jhS_(;tie>b5sm{(u!qW?S+a~m3
z&XMyat9q8Q!oO*gyZOPPa^p9geV&EV+>YU*EXyR@cTHYI99lh?mXn!deEpb?=~a#?
z4m#uff|RMB!LL5v8|z;j%iCG2#%p3)**MbM8hNv3Pl2@_=C;5AXKN5&ZtZQKVyih8
z7VE|1wt=aC_b}5h_QAGkXFAP6!{g&Iv$AZ}kjo7vW-rpD-Zj+n-2+=kVRBJ@n2M77
zpBp3h_m2O1Jn_oQ{~}>mmj+f{9+UMyE3E2D`l}{vHkyFmu+~&n+K_5VoWW*@Qol^M
zg&=IUIt@Wz8$n@hkG>Nf;WRb_-{W*UOg=i^TCVH3IR6lYrkgE@8aTKrp<oZj)8hN<
zyZ&5M`jyw_N2+$+Q$GqwxMHN)02m&^vhc7T+)>$EedoPRTWr!0S+p?=iv_huy?>GL
zpGWWWo#|QKsgS9Q{m@Zwty7Ts1a&-!r1yEwMlCW>eBRd4-iU*W0zrlChOELX{`>ka
z%YqeKt&(Xbab`E{ge;*PVh|v<6UJydC0ol%>l`OGcmer*n?O!7RyHb#I#vTqPevBR
zB%sSQa9`}ZeXt(f#Z!V1KMI-MU57CvuP>e0E;S4@iUe?VhC3UcN3LcTDRf9j>FcIF
zG{mhoqsu7yG6KEK(iO;#*doQ$s68U1)M{Ew^GL;2Th+RsJ!sIh07%))w*%1I9mI5@
z)wrt)c3m6zKN)_n!Rc4tn5-8gfPc}rT&ZhS!X7RdBz8>=F^Ajo)^OqTG#}R^zR|t0
zFnQZkX5cBc{<O&1{7fXt-nz?Z56P5}R7F%gq(9X9A{G`3U+Ej;4_FXKA`8%}NWiLk
zINQ3o)gxgcwg<qW;EUZ+HFz&}eYYy+u+(qV%OPa$qLyod-{?)2=)}~r$UNhzZ{MOl
z3ni1fv#24Plj#m>Bte~9hS!Dwks=A--l9ipC@az`h~)hncDuU#it@qn8l$1VcQ4an
zG=<k`wMcZAmyRB6Y;0(;$H~Iu>KS4S1op_sA}sEJR;0^nGBn3d0OF+sa1o%v)N2j@
zuH8w7pyqjumt%Sz0NA|Me?asO=`tsn<CO5=Bk%K)o8|%og#bzVrO4ku%O`vTZQbMb
z{KRbY)m7)M^sj{idK%a>nzx2i&K<G;R`LfY&;%S46W=~Y!w#*TNo!r*2hj@t@M$Q7
z?d-o7eHcS%{?Xki#77Z`&96R&K!6gwb^{#AXM%YL$W8aZ8p+sk6d|VtOwfYdfBkJ)
z>JnM!?wVK*Vxsr5F($1q>*sE<52inX{6)zbg*za7R`@`%H<tAUV~*3Yk;R~qT7FE1
zHfhkNw`<95m-HE2($#b}in?)o2s87t1vw@9bU+zF7~r2F`pA;zF2L!>wnrQj<k&(E
z-AARlMR<E#UOKnWXOLXO|L8*wZk3`=veSK{+;*!ru`>Y6Zo%xE%sek?D4;&3AJ1{&
zsLB2C0u7XJvgl2edrycHsG}doLggKYHu+gWxx*an1_hZa&8iAA0A%bimUA&LL16y~
z*&3wDS1dJGz>p)6T?@WqL0jY6YAhRWbewL;ZCz-Y&GjMPIpIKezmx$EIsV&#-X#3n
zNMyvuX2oRP`)Q!thU+eJ*dT}&BPkDwRv8Ayex$%Wdc~-Jp4YfZI^BeJog`?k6hr$3
zL)Qe6foTG}0G?KTV;F*-!|-;YUf#P$S)AJ(Ezo~W(q_{nz_W7-wg+>{(izr)v(yZ$
z@fvuhf~z1{SX??f1IN||XPYC7W5~mkJ<p$qrDm{85(1nFS`t5uV(2Vedv<pdM17dO
z>G%84)Z2umGbn07FYCLCWAFPeA+`~>={Y=zYUC>8utR7XW!~nu&G*I3?i0T;#zhV^
z*LwlN4wZMaiZ;!q4OHki4VR-$)1z{N6Q5)cfvm~2>H}uTuCZSiS{7Q4AMsh>$~~W7
zoD|dki-W`cqy3*BAMZbZvj2Sl==FBIVS6&G$9|jq7utawtqwP#J5Wi6!=djQ)-7NR
zm^=<U25J&Ntr@dx=%%E=7`a$k01u5ViG?AKcNMQH=+stiKypSmFkNN|IYMFOM1@&d
z(2K=(+Mg?Ix3I~~&XQcE5c!E*@ZBbXAnut%4>!VrJAmLMA3~BDHqCticDbMnEnw}y
zi+P;oz^g%>aWzxoF=**vx`*v_pdDnu+)HJ|ZeB>Z3Q`jBC+jr`&473q_zN1Ll=D!*
z+K``qR>A3xQR(|R<f*oUXpz}t(-_G<D%VUP3q?gTCLGdB{8S4}PBU_RaEJ6{1Sw4y
zaAvZVSx_r~egoy$cMikK!BWIk`c!AiU3{RX|4Dz|yuIO?4v1U<e6(u7*>xTl7<>Sy
zcZgM}gH9LhInJvgwJyuYjErAREc=|=tvjyI*cE~1O6m>v_8<cl2$@7%%N3!X(I3Hm
zAtRE5)6Ux8{x)9gX5VJ(o3Xn96r+Jsp@!>#D<G>7*5L&S8nbhc*u?z0V@i$<JRX4e
z8kw~~Uh~FF9Kr{~KHgCEb$5-S7d^6p?HN;<8`ZHsv9PWq!g@iGnbHN~6<~QMl>lB-
z?($`DU1Qn4ACn#okMM@6w{idr#&%xP=m@g1-|Oghy2?0DHA41>Jwn18vO7>Fd}!vf
zGak};;0<k?`Iu=^%ACeu{HKl-ZAHz#z_;9<7((Y)TPc&tH+mLt@%0<B-}B-L&Jc)$
z+@h(7JcH`S{WFj{T~&;&qzE5O?S1u1x$)k_ROEY(MvM#_b2E$@F;=)SFiN0fA(x7U
zMMmL8MfzUqrWf&~8ZJO<Q{lySM$$)L$Chk_cD#v1Mq-6ITv*3?xm3#+?Tnc4!#7U*
zad{eQx<dHY=;5g{OCYHi^FDFQx*)x2mV|jgIoOm^7T$%Dp=^sa1L=shK?AUH-lU*m
znV=FVs=F0t(1!jU&OkCj${@!!-Y_DmIH)d8z|3VAMowlIJY?bPkrD6VyM0N&N_UET
z{$-zpm14M|K48a*_vm}U?|tl%#9;0PG^IXv12{3L3w^`pb{mjJ&cdv+KUB_r4x9)L
zK2JtrfC~cr_g>r}Bp>U#N(MI%C;0#)G)pD(^%*Ak-9^o|^{i_Gz>gPfH{DxaNl4Ag
zMu8awnq_lNp470I6yqU9Q3#t--{b^Qy>>ZDjewT2b@p9|7^A|&%Wl=azTn5&e7zmR
zy179<kH(?^oj`~6W(!?zqJ6=V?U+S_`n+a#L87gnz#dCtXlakCN$5VN9-k{pl^$<g
zBN{Ayj)p6aUnr0ES))8@2mwkq6uENi`c#Eh_hD{fRDP;gam*!74BGHOhDzR2TldPG
znoz$ug8uT@F&U=Jl;f<=>IyybZlHO%L;UPj!yZA}+Ev8GUne5c(p}!|(v3-A84^2B
zp@$%;2D`FEOVqX(JIXB_>^cJWUJInXqcKj7&hU;Q-Mp&)yCUDs`87-8ELSOrU`rLe
zQGk0{U|bh;KC37QZ311n@Ds%Q<npQ=)waOG$)uJr4hPL0?hJ==-ujWDw2#kV9SBWW
zSCh%O8Qx$Bx8)1h|7(in#Ed%y=+cb)!nfh3r(|eAlor`HLVz$DfW0Q6@{1rHVp}ZS
zjfy%G>%?{4M5B$!CNO+p-ClEIRZ%~$W>3l)n8MTKuEoK~*kq(;d(BDm)MP!YnokRT
zK;bioAv5n@s929M<!g?i<*n@E5V6$qw|qgkGPzX~9_p!f(KwD9Ugw6_xnZ4kB+*<8
zUc54RVL;Z)78J5~RnYkie9#!P==dA55^YK5LYzbJ@A53=wa?re*4$&Df&qW^bM^JE
zAw5fntr(|1&c7pMydGNuz!+Px=9SOP&}doZ5;nEIeW>Q@7bM+;?m0~C&S;!yIe;sc
z6H%G?ju%93XMEf9vF4C{_p*Sq@{)r;a)wQF|MMucBegrXZai5>3I(|E&PlSd!kcA;
zD|vgrX6rm``MS~ab+hGFP@k{N^ki<#9u5e+R~@Q$t#=Gyb$Y*~_jOp?Y@PA3fpg0?
z0@UhU*#sk+m|myH{<@>5+>_&GXFNO%>*tQAqIQSzY~67QU<<H5cAUn#2>VWp={hd4
zpLgm&X>MjXJNyI|>agS98|R9u%V&nF?&croh)cAii+9wa)PUFG_MJ1T24r3wc8!lW
zal*RQA?Q=XUMk1stkel$F}MVLxx65Y4=;d$2OS48mcQ(JzfRI#L^$lLGA*%$+#hVc
zOrK}qp9{7L?1!5atb7m>Mauz&d|%rQi32YIhT92eY2yqHrv6VQ!|hAC|G`2(Rp$RM
z1+i?76+LoqsmdC#)HYT9E~LmUyJ5vcDajBhjly*cs<&?Th(hpgPq(myX4r9H8~&c<
zAs^t~m4!;}#ia!7o^9By<Vy*c9W|XK>s#9D1mYoX^fU+MPF<w<#7+shwv`sDlIKQs
zFxoU>cN+|6SPWkU=_Y#{q=cL+3fR;f^9BOZ_`maVrfVg0@|2wlZRzR+f5DAq_1FD%
zVj6@r(3-9yMcBopg$QCK6t){AT7{urPW<gOMY6E;j@)sdqEbg9f-pG6gGj6K-n{Ka
znjl}PyWL_RPZMIRqs}Cs7G#UXOF0V)joS8X%$0n_50adk>YFEQL|!c>1=<ASmo<L}
zwPO_1tv#Mbm=Gq~9Fv!tLNBSn3Jwk-$3I2Yka#7E-6fy;zH1#c%y;;m57|=p<z+{H
zbTO1gsD2Y{kR;!oeD#J%?y5UI!%#q5S;s&S^%dP<j(SAS+Gwi>Z&4i6Nvxb`b;E}c
z|8AohHHJfKs^V`p-bTS<I9v%St@=u>LmyJ5MF!7RzvCY^Dw{S~zz8A`2~d01M$dgT
z)52}e>$a9iFG-`6g~fh>+g)2rWmLejSf;fl{F<t(Cdvsxe9x$50t*gbB-K2@<c+QM
zcKenfu{;qn(M3XIapR7N1;l5yx{a!+P*gaH^U*aLiGY9G3i~AVz5`y~d)b<!Gl9Z$
z>L9I3#K?H9UsKjX)U??fEm#%i7-JF-?;(yamE@l61s>i$G!DP3Y;-9*W;fN_rJYlZ
zatePKK}Xdzxo#}2E@pW&#-xfm0jYf*&dEFWv2A;6n3=dC(@JbxqauuKDamXz>_`;+
zMHOy|3S*L9+Lo=8TnNPymow2^;)pG&!ci<28;(Q_?r-811U&$);?fM?z>w_u;PI+{
z2<r3S77cVbnc(r;2q6=K$4H^b!|^7ju9nKJOkKV9;$sOjN!=BBJ&j*r7rK}?Cu0tE
ze|!lsynLKFv^=WNd_TJ?-8n4$6Y{LnvpHHblabT@X{aamPVanhhIbfea!f(%PT(#N
zJq^7phg9tw`<<7CyO<8Yd0#BRqJk`zV&15iJz>u9+nc~onP!&OzsVp}OKjUUm|e%O
z+<YTzu6(?>i8*zen6wVE$tV0<v#HP}M~`;R8g6x3)Buo&VJ>f=^jl;#JHCq6o72Rk
zA{>Su?rZV>j;G(&czmm*)+4V{4#&c5av~s$Hv@J9aFBz(>PbE*$UUIXHT%luo{HXQ
zZ?#!Dhz#=8lQz=0LztEd^s%!=9Mt1DM`JOtn0{;C8*A0JfF#FtDjJD=9OQ%ZVyN7F
z+6w9o-WbUr^IIGEqioQY@1G(>4Uio&<ZTT^!~SjQP&A&4Y!6n`{>@X#*2plVdu;jY
zW&g>qi=|($TdRFs1e~S8b5OwZYU$V4iLYQ-aPa70EBpCNP@ujqDAFSPaD%r3Y(Wq~
zygSB&91pwNQD>m&Y<@wc{#|s?*Y83kQdjn!<s<5M#$dB9$7dt3i=CDr^49TmJOkN^
zK5@rO%Y_lN#R6inF__xL?wAqICy;&Rt=qcuR!aNgsB1O4EJ8Ppz!x}-kexRgmAO>V
z$L2kV-lrW#gfIju(ZYNg{?Ku1BJ08TXW_ZqO-1LBiVh7OS`1OLVj{+Q5(l3eFQX_m
zdQrd>SAj3ggQKvkYZ1nrAP~YR;-EmOCFk_vr_-WvXcRi`wixn9BVH}1poU(GEB7e&
z&wq*yQYXf}qyR4f!>kYm{Ocu-p042lz+RO?Hi#Qy+O7G+An;UrGZ}NXAe;jE&`QkG
znyR!WgBC&GcFM7O#dc@6w;1Flt2Z0!q}o;j1GGa@r@Xu{@>{m!u_9ar5x>z^uRZ(7
zdSPPSZtN+BB_gcZ^+$blbBXbX+h~(=d%0gb{DXl>j5g4WUk8Ka)NG9ED-3rzx?9^#
z!^$c1E89cI%dJhyY}1NOOiq*Aa_vSb!t3ZAE*iXx6NmdCzJqFlN6Sirbzj-~3dQzm
z7IBs=9QE#33op-&ZPUH2TSnJa`WdBrxTOO&lDqq~f=D1et01^xTp>>;Zwa`a$ZN})
zXShOyzkcuhr|db;pRc^-Fwi;K1TgOo?4=fI1PvKK`(&eT@bv08ZP@1d^h7QZcRHY`
zR(j&wHmum)nm=8&VGX3a9ap!E{SzKq)YC_tKBpgBQB81#bL*A_mdIZrTsmni^I`-o
zRWPfBp`10VjaO<LPtM$uJgn76dp}B*FgK&H0DVA$zg)1_TBHmnZa|ycF-_<;zhk3M
zM2gn*h0{Dbwfd%fn@l0QPyST%+Tpe1oWY^qQG|@5FMDfvjEtX^=s12+4a?I-!-KCj
zw*WHI$3|L)9;rIHaHkV{5TfrW9^SUubU_x~-eIN?T^cMTe%n;xH3a%!ak9{<iWU&J
zf?t+Q<&l^Ra(WuXC6yWUj%?5pHYIToHP{ukqX-{Y<`uBg5{4n(j(2Q6)V!^au%YkR
zg|FD!!%ZY3we&|l-6E%nUo98cL~mM!j2cOz)V%Q*8~>RyNMV!?6ZP{G2{o3HdZ48t
z7t1ZgSEn)3<h5%9(;D&hXHig)Os9T%Xk#UCoh@?Qh_3-RX}5YC4#$e#-^4L;S%W~>
zMRVw-<mW1CZ$x=W^pZGUx1+SAa><v)Iciw8G=ik1M9)(F)=O&CMpS#%dRlNTm2YF!
zZ3~`jl<G@aUj;R$pQNBL+KSi{8CS2-yG4Xxl*&S}ysp6-{KHKz3n|sb++4R1jO8Du
zY~Ul29ogeXy~a(RSUX;tQmb)q)R?jJ4ZSxI&MOUk@xJ#DP{kI_VhbteFPAM_)NjyD
zb#uSois#qAR-YHm&kOaLT}pzDr}}ozvGtTGXHRG91>M7z2bbxUR1fOoB9<%IAoa&f
zIE)qK=YcW?&@}|M3F&#CPXIz`Rd+iP^M#KIEpi53=5(BE+no55rg$GXmxRV)p6M1J
zxpV~Gq=J(`RJT2VYsZI@DSdWfGOAABHOLe^P-uT%>Gx5iw!Luuon508<*4eIR{PhR
zJ=;%zvFVS&)=Cc=l^)z)>5E3CFJkH3>NAV({!PRCM$~&_*uTV-|97#t*F$x?Yxb%K
z8+<Z*tztRgJZ)L)#i$)d*nr=y9xMjHcHw?6-0#H~W@9b0#&=Za0i67^*O1`Yx_oHP
zWSPajBV?P{#w#7B4VrcD*NrKA`0nlx07TpxwT~_TEd{Gbo#tW_Vi{EuC;<v6+6X-^
z9yBcF`Rf<-bv^O58DL*VFAj-`S=?)%#Y^(@$7w)*0yhUA_y2qzO=AWoIq@9Um(C$I
zLzT$=`U@Q4l57XJEZqY?`P<wbI({JCl=bUUpA6HHnA_jx2C?GuJ@B#?Jl9fCTIyWo
z*TU@ry#UbeVkrh6x%H-%N8d`f^qhMGSN>YBJQRpf?z(O1X-!*}zA=9px+{LJLp|s@
zEWuw2e!<h=6cgWa9**WTjAulc$GxTVSWly{#`Dc|Mu{|aYh;n28^T0R)a5~$!yUtl
z)Fk9eBlHYk>m(oohv4C;5526k2EXyWj*Y%%BlZqK4mL!p^|B3Df|=Cop0Xd&gm^MT
z8x`Yyqd9t-)sFSU(f0&*Fo(={55u6s+fK77#gcP<$=v`hww$~{v(zg`3-YBImdbuW
zzm8@Q@|Q-%gCVOg+8WD3N(J$!mvo}k(+WF7#~5D&+j~>K?I{RecVKn8Jy@g#7@j90
z*92cmzn%*p_9iZS&wyqd4@`hLf5!ONKDLbst5~|an@Hyx$f$d54TJ+JUgECzPqU|a
z4RYM!FuTCQ!0|$G^)QSj@fTN=z9XXy%ZL%%VK2j`E)}3#b9;LcmTYk))N*UJOu%kx
zDB)II?SqNDLjgdRsfJgHuodFHxq-e)?ru7@8~1ikSoWl<#ztz-mR%g2o>GutKM{xW
ziHJQE;iUO`JyfIs0$bk1QqAHuo=3O~xJN@F1r8>4Y=d9|CLDPAopzOB(|2MX%5f(V
z^b7~rqh!aVc^s6}0mSzeZc=5*)OO+#2BcGt28;2ycp~wraT(Zbs^~HFio0kI<|DAI
zyT*;ZK)U2(fp@yui7P`I0mv6RfxzWq$GJA79ywQY7}x4FqYML%CODWD`49uwIi>|L
zsv9K$$2t~`pxBdY`gAt!csvWJ-^D0m90$h%d^^?PYcw@QthlGpj*6=ZJOR6LSQ`X6
zStwqemotpHjOoxR>vWx66w|XJ8<&G(w2%;}A~SW2$~OVZ7~d#lpjGF^#oS%Dek>M2
zlC*u>5woO9SSTb}3Uwv+?JN25x@)KX$dwJ#ZXb9cX4;dbb<n!F^=0|!L8q8cWFKKP
zdK@Da$4YVobQ<Gl3{qju`u#o&9MM~;ZmR=sl`Y@E0c*3nEmpF<?D9)Fq)u6L@|!?h
z7qh3Fdbv3Qcnbq~^VV`qQFih~N9wDqzmeD&IqwC?Snyjm1gS;lcirgG&MwE}<qgOw
z^kOuxb%UGT(5O319yFxAI+JoNP-%e8Ml+D(#o~}D*@rM-olDR?Ub1?n!Q`D3j<tc*
z88+bc-HAe$HPdm>Rx{k#^%k#(NjtsZgyXNx+p8@PJ@fv2D^OPRLC#7I1y$fCHO0of
zX_s`m@x^f;upq1dK6iJ!c1W#2iIxF=RTvUVreO%|a2p%}3tM5?`1l*)*}S`B_5sMV
zgFE{-;+s?gNOc&g1dXy3my}%SkE#9XvBA%S7gjH&T|B#7-DQa$IIvviM-=4MdXOn)
zwp<02&;j*&x5ykYc5hl1tpZ(A98bQtn^1#lcF`hm7>(b4{Q%iUBL-=E08x}VL)m6v
zz)vXaU^6<mDA3ix=@BW8(qS>9+c|t|-pn25=wXM8dNg-)MVG5`RE8?)u%98Ord|MC
zQFkitF?&xsoRrkXmyTD3-0Ww9hrLV;VSCxH?q5tO@vFAyie)^$<!$>tEyIZfC(T%$
z9QV6T5Y;m4gft3RM+%Q(f}$*;eb!f5%!{nrzZc<5=r6)q8_@IL{;hSrK1;=r@r8|2
z#l!`re6KbhXdE?EeGS28HZ+LvdJq7VjjOAs*<ML@dpf!`%CgFY*`BgBho3>hkp(1M
zN&?$%9KN=1FCEvkZGD2hr?vUsjxS43F%8`MsC-|Lu^A;-D2Cu_qjHPH3#`Lm+bqvM
zo$jiVr)_<`k0_^#(%c}S$<y;D5=Q<?i~1`qsvh-r_N!afUwKu3HIuMlB{SJKzrKwQ
zX$tZR-Q;6IDZENhMk9%qi)XEok=)^cFf&R9qHUr;d{9ThXlcYgf>LrriyUgjk@~K7
znt_=NZSiJ3ZR5r>V*Q~x5@-&1?;PcP7-%u6;v(3_=N3M~ng-ERT6@uqhfjw|h|Bw5
zN@GF8YN{;KqUtEJ_eZKWRG)X%ZLFTz;5Km*m2Op8q{1lwCY=Q}c#F~^84kToYmqK|
zZ%J_U7L@=p)BZLPw!$n}uKgyf57!j(;FH@-D^!P{&JM)eE+--|E@5_(x1)A}W>aDn
zi{cXDYRo8__iqd<?`YUj)uCW{41|UDwOyiBCp%wn`m}sqqgY76gy>os3<U5m^dQ}(
z({(c|2Yd7BrK#fz_A>oM^LVL`;1&}Z3?;qHq~Q}!j|O)h6fMCJV%4eo`fAR$DP5>-
z{&DcwPdQV)YnmfTPcWKT5>9BMa<}!2O<_LKBt4GlA+=777OJ_kpu%8O)rH@XmRzV;
zTBW8%;ZbluE68it%2Jl=?E3y9__${?cj7{Z$18~NBXLxGuG1W2Tw+<riaB^KQSg%0
zrZ?m~!iHNMt!@cf09|^+@;@#KApnwUD(p}IfB1xbq0sAQp@l*yYUiK-q_W*lVMMQe
z3T`o_N5_FlocS^s$~3KN{xeL%LpOIc48NmI_~bWQf}3pYYI(tw8SncOGR5}G9er3d
zuaCD|kgs4vZVF29m|)%=m+--7l#zE_#z&c%#0gHDp=Ks=meae~Ujtye+qc<$V34Tb
zHddM}Y7{yQC@|bkUAwH{)&aRrT+t$TeBRM?o~}PF#-fj8l5>TkWO&<%y7Ad(+T$h`
z@PZiN(|HuZB`idyiuzUlLHx22-6d^&znq>%GD&rmX`2dmBnW8dRT|<(pzuw{#Pb_+
zrklIol1rh=BTUF2i%LOn@OX3c{^Q|Ufq6?HU1^4*oy%hCuFMyZF^wQnqTg?o)#H5P
zQ`BS%q$qjGPk`fQ2!4}o7VBSR-(?%wRu%*M&XK9f;&VEmoiFZVM&Shq>xBDQaWR=K
zR6ao8!FgWmU@haBu|SmYw-AfeN-`T?67S+vYyLwl1ZZ*!Dn3tRgfZJ78KT0gvr%=D
zk9J0r^Biv$7P3KB7szvi%Ub!ur<xVVP`J=ODnVlgx&SRU!7IG~6iFg<5{3TEhz}%R
zSKSzAi)pE?yX&P=dWK2;P^8?)g=$o76AG!ytjqcsP{cWw+L=L!+Yobm<=CdaBv#K;
zXiW8cLm7X;+Q`>KIU}-))L^O|iIQZ}y4LAnNy3Jr#YNh`|8V8ua}da!2A`Ym!(6y6
z9m4cJx_vvWDyI-8)3io$HE(PV@$7Ihb_0O8hc@pyID8Lbc=Cd?7D}wd22|`Q+tQ<p
z!DG$Um&Gmc?yk1!{zX3NbUvi=)~5WpB`U0mN!6OTHnQIM3~ERG)wH_8=wFYg(`wpT
z+snsrN}QGuG(;8y5{b}KK-A|{kXa*_j$_3pv%#v2uv-+9wwa!mBB<y(H`?RcTxQS(
z?P2!Wu^{7PcPAWm!rF*qt*t5eu;*K#1&rQz<R;O$Lp1&1+@6VQH(c%_T(F*yjgXn<
zIV$UzTSsYLqIcZm%Yr?=r}L;y;V0dP<wWU+d^{Y%jgxwfHXX(t#ctfj<LuqE(Hzfk
zj#Z-?o~L|69(-@HR#{^vb@u9WFr!8~7%`W|+HGy99PdeTueW9l(CWB`%mF_8SA&B3
zW@ZT<msd~`2AUJjxKoH1BJ58;1O~T>y-vk^wDrUyHNy)c(_<wcOIBD)-_Aa7uSBU7
zp>J`|Zyp>D9(s2rU}KoOU(P8J5gbzP|7dJ80jptjZLQC%D|gF1na|9Mc>3+uc3k9e
zuwn*t6-<-y1v65Drjo66FLH+mV%S^Fr=ck*c<$IPPc;fkkyOpk&V9R>F$qTogT>59
z5c)H(ImS`{HxUs7n3oQo7bnFOeE>27XPu^Qj96~5Vmc>HhZX522$AmgU_4qdezORQ
zw^22YHbjHOtw7K8u@ke!Dm_}lQMio?#ztv{ajeFBP!Zgz^+hN}1$|J9+wwmQJmgZ;
zl5}`zPtF%_l+v9S4b}+nF`tB_?t{cNN5&Hrzi-~&=zYDOy_go4Wi_we@<xOBFHV~i
z6I<u~(40b3`uR~5Y845DIpvE!1PmuB_l1LUQO#3XGdwXhuJWIyx@LFX8HFw4$oxqh
za$Q*v_Or)leOC{Vj!ZZD`r<U7Q50jyUCdX6gmk%{foR9ww#!i4=dTdxNkpd7@uabg
zD`co)KCgaLnp6aD-BFmV6!EUMRyWF0@FJf&Cf*f7mavO5Lm%uwnok)#JOO5w@#wMM
zk4)z3_G8ZvQ|j%|UVTzcpSfeG6Ry&jOGSxU19@r62iyiN+*}j}aNHXH&}j{f8`#AL
zEow;q;<diVTan^alkS128{8j-%ETw{vP;~O?U^QSkBP7WCeEhi*_mSohU}ohbY4!J
zHnvTRCVi!IcPuw~w<X7KBeEd~ayfj$Yrlv|h4*iX=u<@5G<;it%E;0I&)8wPGRee6
zvJ9stOOwrqMb~87<<tU_7y{>64pmw(JTs5|&Fe^I6;t!!{23?%+aH%+i*W21g+zo%
zh1^=cg_}nZih@jYf1M9jEfEFw;O>dl`pHM5x@82WzqWDo69LUreNVwk>R;U{!ut_Q
z$5rCYNWv@`jHPiyVpP&K>D$QY8_G49ndPpGoYnGCVZ!5TR-P_ijOJ(VSno)TX{rem
zSnFjU`u#q^ZIF)##R!<cExas&WJ56i7KK|B@2Wra!0CemK?~ke<D!_$W>_$!cHq-h
zPr@of(Nz{ZgdX(Vj%S~cZ+b_J)4N`FRlr?mJ_5cfAI;(Bg6?=2!PSxFkf62h+m&+c
z!4oK;cw!h}pL*JEu93h@Ut+Na4zky1kS5&MJW4n6ry%gM@;E=K__{{K7c~gwtf4BR
z6AqdVHyI<MxJj%AQ?PnVM!>fR!XW1S<@&Idjpw5gzZCd6qUUaT)BLPh<1dYrRBO|-
zlf1Lh!~gdG+?9gC<K30{U#F+1<^xz|Z7B^8>v7gjs?ksi-slQ!rnTiAUK(EETiMt8
z6X%p>-{fF>nHrKZjSL-#U8W!Ajrx#kU0KXU?Hfz8&_iS`7$y)b*H(p*G8v3U#rlNM
zxX#`i#^M8DY-L}`D`gNCs(TCJt;~z_YYER8yf^w73&~eu|Ke3^G~I|Ih#Ko@gU`Wc
zJ!Bs<3D*q5cGpZ19;VduHXCXghVv=E`f_8V7wm{@>~YQgC=TYczs}w6ju$DIfT;Gy
za}ZqUH$Dw1eOl|K0xWK2Z`Q6IDPDs(*K4R1g&(8?g<r%0`CqTsf<*YH7b1#r)Hl_+
zp9)wE<)-^E_XisrG3D`y#34|(8kwFFwCN={a)rr<J+}sSrfZ4)U_K~XLho%C^<Y{~
zW|e~OF}<R5v;(PV5D_sa4SG`09Sx1K!b=G_8@(3NDWf^YTNSm92Xhl79?oVUx^R0l
zH%qYcSloxX$_j|5s;v0}Yl&lo?A^h>0=ymZTyQlPd@7eg;_%L2{=wH@P9HpiLq+o8
zK7{bFh{US?+FMEo_lMpe$_wPd4;|<V>S(Rszwangf&cVt_|X5g2HR&Y`@!Uz?2+#K
zVETxL(bH+AZ$gvjD1NF*O~wsM5?nXv{nJCVZg$5l`S-%LG`|Ybl!wD&h{5&iplZ@7
z(ef*jbC8j=$}*0+AW1h%;dEVLh$$tZhE&`A`M5qWPiLJE-0z4|{J9#;_UjC>_4E8W
zHrD73j(EB2gq*SPaa%I+`8;x<zdD%i3~30r&t7GaJ1wVm$fZldhJ#Za(zXDI%Q)Dq
zZ^rsl1^8S04buto`Oq~y?Z@4Vx&TK2I~nVI$57g$4>lh%igxxHiX9%tMShKo&d_~G
z@O2I0ADhS=jX%hofMhS2*c@80PzMnl&g@AwrJ9s9RfE@OHx^qS0!2rs<Ri<EZy!>c
zUwZn+<}{9>&dGhT?Ar#GNQTzb6`8W|?KwvLteP%p(@HKrdg4rcoKUX>_SKzBR9^fS
zRGL1N4@!2!C>x*9m2l&7Zw+l7c*53zrY3Kx?0u(k>OOcAME;-qvC-Ll!$b2q_-5|d
z|Cux7rW5QT9A5$t-^~9P&^iRgS2@HwNc9fVLI0s{&`5=rw2dgd?YFqoEJG^g*1_T)
zO@?mJ^Z?p6R~?^SxMqzsMSN;xuFeE2A!ov%kj=HJT{><W_M=N6=1buU_M4E?aGiie
zv=fMnxvSdj#fGB#ec?%JlqdN%cnV1_>nAWmo_7~L0UJ<*V}$8baKv0jpzYx&FohZP
znxKnBYJt{u^fLQY=<BjJVu~nIQ;<VH1(MfD9{0h0enguAi5~yHQQ-Nh22(M&X99@8
zA`xn06<zjOIerFF8Cex?Gj^-o!O$9eegKJBi=vr-7Di<-(!ExDQz0Ey^24{4^6SK6
zE10!v$*>Of>HgIef!cKcYH**-%hB)%<`YAi+K}dq$W@I_n)3=93HxGzM{lFtX0FdT
zTgPo@kqCCKNM(Il7FWPdL7)@2KTn`%M?D00YoGuWA7)yfp(qEX<=mh2)xnuQ<iic;
z_V8f>OWmH~I$NH|AdL~Ef^ZE{;sHyby|--Kc!$A8wwn+)#uKc>QQ()@RP28R?$lkI
z>I8r)Io4qn<?JRrpr?EHwE7s9g&4>W`1Pinj8%!{qF~1DoQAK~I6}2lo@(47!yqMf
zor7VYIcNLogEcos(3SNM4k7;GZg}~~2w>4faf(u@t9*(HL?@0*I4MW&TH6C7T{mrq
zMZ#-jco1Z)BqEh66e@z=PAtl?#EbHpQ0}wD>y#DH{p_cj3@E@F02A%d0*<NyUBUVp
zVZ{Ipgi5gH09%Wk`S1)pi9sk(OmX0s!nJ_*4ti}_Ep_Lh{_uv%5(EXXOO26q_^Cx~
zs>`^1;BDRABHQx2U550i7`PkcsKb2cdSeqn#JhNZ#aXzX&4C=T4Xs;KSfGmusaZ(Z
z7NX1{lUFyO!YyGgS-a!_ZZugL&VkPWp)rMEihv80wPRTUOa9n6S~e4N3b=OPIAZY6
zfAT_p%R5ukquZGWZ9&>ta%_<Kf_`)Fx$;=fmB)IW3H%#xXmt~5P^x>rV_wj>sn3@$
zB6_^=_DEaBk~^Hzw}s2Ty}&2#==`^j5&(Pm&qo(kJwrPlP!{6TFXz>$=waNk=ktqR
zc08mxy%^;Ku+=}Vk(1aN4;?eHyZEtKKm>Pi)}2)#^~^zi**b^|0HYbiorD#q5LIdR
zoNp1Wy_DnG$V(;Yf&^C2<6_Ebj`{pVQ5~Zwg-^)x>ynbtZ}#B;KBG!*7afSU9S*_7
z>-?IMF*iTevtokBIA3hGuzlVFaGb8gkp){FOM(pykTtgtA*=$84ytp@kXWkD-q2y}
z4##^~t(W!teLS7tO7qX%LBcBU^CCUuJ%`XU00;W`q4KDn;ORpa)$UC_D8~7;te{nF
z`N1ax%m90LeFReq9C+>H23zo8c`0<X0$d~xlK~Aj@I}icRu~fOjAuA3{1puiD}33{
z_S}&=pA{(EgFs-?07UA<k(2EVZ!@>|9MN^h+J$d}Eg2d^<T!xzd+tw7#%(lVEJ<qY
z+ko?wSTl_EjlU|=8p0<k>Mb6~z8!3!a<Pzy7BhN}4c}Ly7wMXK>&9?<p?4#ViP&O{
zx{il`p8f3)0F}S}LHXgxw8D~J6{PKha}8}yCLraXmTn}Y1xlNT+%7f88Uxp=2X#L?
zEQ;)WHk;I2_wPG;K6nqu=;^4sa(HlY|L^XY!#Ujl^H&>R|M}0G_o1P6<Z0J^E9-82
z>!_Bj*Fm4U4yJe)^NV#^28>rrc6xa^LU#fWg=hQEj}Kq$?Cn4Q-oawCSl|3|JAC~>
zcd;ICaACh8FN&kdH7ZUK@$fY+0NoSaC18eWRWa}j-4AcjwK7^A)!E!#r@`wGND#!^
zRG(avpoPOQKGKoDn}w_DRyLI(!cV$<`qkI%`3oelh*n$xTitfuUNpbfMG+FMh4E|G
z4kE-S?@Wo%OqtSjJQU@wL-)2o26*Fk;+g?g_YtIU_`_e{#AyyPvz`zS{sF7%FqEop
zd){uhSX7R5YBX`^NgmncFUyKB$K#Qgb_VX{0YSK(dOkR(qu>g8x;2Omg!={#<ZN8H
zUh90iu(U)F7|tn~`8Q@T?jEVc0rc3s=!<0{U9<>IZhBdGbf{v)b{-OPmmC!3h#-Am
z)}SkyCLBPjX$RU=AHBdlH1%y*8$YsOKH+0E521G;dNoxmt_MXitfBIAX$y?(LU8Aj
zy(gQ<5jy|ef4v1oZh|m6!eGCq-Nf+Gf)kGJ^0dUvlZr$j*9t3(2tWt}6J*9Nn;>V$
zmubXK0sEx7>TGT(dL#FpFx9X;^6qnP1a<@ciYK;2#KgNo8cwcl0Oq!;grb^uWU+N@
z$j;E|G)RC#qti%~glwBZdPSw&6OvE}HxT&gPLt2;DU8_M*w`?ux(Bzo%`I46FLc4w
z0InkX`J(x3LHPpQ`Y*`bmYrut6qU-2hAwe*_v`!C!|FkM+y1@YcF}+hyfM6~@Rp9C
z5Q3qDg*P4NP33yNBF~EejBMsukec?I8}XADSphC!4EA{I)1AwQg-?zvoPXUWhT0mM
z$lA3}Exlj)peNMFOuS@u_8|MW><i>h@YbBusT6i*U;LbigUd&>bD7)BiXqy>R)J9q
zt9Dpj6poi9o7tLBU|g+NlbXC&O0u~o260dgq4!Y*Y9?@BnJUMXAw~SiZQsNf0>>|d
zB`zx;v#C`z#W>aeScrfpJK#IyzPIFK3Z|-Pel114fK{UafiK8`Z{x%5^4e`K`|8VP
zH|fUeC{YQKTXbQ^C@!#2;NUZ*P{zcs_Uv{;4U)QMhclt4@!P-cw$p{y%@HcM1awcI
zr_E|sumnC7G8W{ujqj3M;{l@lW)H&k0#<!NG0Y1&MF!;337HG%HY6;$Thnqx*GnHD
zpYua#VS|<=v#p5vE=Nwcm;5R#2_I>S>C>(4n04rBhqDzQgwbimtHCc@&cW!gQgz(R
zWF6rgfA#7WdjeVIo96k^@P>y2l1-$6?IQ3kC~y<|?n(pSMAftG*L(LcCgS1yaw7dS
zv_FAI8AG&Ryo=#g&Mm&*MR>^7?=c0o3E-l4j)IpT)IA54&-E!E!;h~`(*gp&UKS{m
z#|SwhC-A|V8<(SQw=vsv>fL2f3bpj^LY)N#{tOh$ME?x8WYLCv)by3G)iNoe<!{L%
zBgB%O7Ww<gAGC=nzWz<O!5f*5(g^8r9T8IX91vx~eq<g`W>uwd1@1~{dORq|=-1s~
z@Fgw=Wiq-}@_j8&_G}sB6v>8Tku!^ld(u|}ci{EvxU;kq#bq=JcWR5e%aSG70SVRR
z3-0iq)I^X@w8};8Vn!;k8)I_Qgo?mS!R5obS3u#1mz+uG#>j%EIoe=|__(7A>Ki)(
z7!K>us3aPx9cSoTfoRNhzEw3oqbur0e`7<-Dtu7YjsBm$a(hNe0zS_=YY=IGv;;cb
zs#XI4AF3+dr;+s}FV|9YpQk8uMxi&z{L=<MpU}7l)f5S{n%nBRL48E6<)%Eh)^?rV
z*$k-NA_XW)QI8ydu|6zounb+t5U`GEo{vFtx_;>@{Z_jbsM)YvWDO!<AH0J!P2h>*
zijeLC4OTw$MlAPM>CDJdpoX44UAo{3gwSCs)G#Q)XrMc@|0t%_%`$iWPiT1(#R?$p
zk^6@ES~?ePw}(p`Ed#0{)5O)<ZW5PP53c6hFx`S3OhMZ)=$#il8uJfRB5%Yskv6{Z
zHWl({SO*$?XCs+lRoeL0w()JE4M%r2+Wp44u?D&4AZ22(B8DFu4rrS~Fd@L!1u~$H
zT7IRc$zvz84{D?l-6aiXKV~xF2z8sjH+MGYfpCWo+0kyQlVF<M255wH)7s}IX#nn&
z=!0WFPK)U}Hl`7qMGV+y&x>LZ&$&mn52Um~N2#NL<mKu5X6EO8KMPfixYL76m$;|Q
zrI-<;w!fvDq=_Q!W><}h{#8C5ciy3#sP6yq1KEuXZwOd@X?rXC<A*TeEA%3p7Bw7e
z!uq&_aE=k&{^%if!<<HjAY=J7jHLfgn<**~z{eIQI|VWFl%~6-LWk|RD85(93wj1E
z$7ae|-V|H1R>%iftnhNE7P_s_Vs+!6cz%&wosN|Li-W`cqy3*BAMZbZvj2Sl==Eym
zZ&h=rY`5$tbUd0FtVSny%tZ(uc~_!r2HXvTX43VM<^gyZWQ$5vvx2$GP_htXDAVfH
zghBy*JczpTKAJ3zt1I$k%ojnm%^EkOA;gedWQKGB1~Ml__T@$h2?GMjy2{YhTt<v-
z#G?j`-Gnr4gY)bR;-i3_5!_)nH#jX4BvCd)KAYx~^S(n734j1re50#;QL|7GSWvK?
zf1qV)nrNtFwu#maEOgZQfyF$%ery!Q)(_P*k$uxE4?{W;IM=tt(+ri6zAz~I@B^Im
zstI|Uhv+C?T(afSs2>y){)BOaMHLV_(+h|399)%r0aAIYo=H>3=2gf3MW-7gUiupY
zm$IgDdU7v)8c^S%dW-i7U)<bnRRw$J^*;8gAe%uqFIMOzhvk@$NmEj*a&K8+t#~(?
zF=k5ehI>h37jZZvkZ6j&0Ztge`f<>}llfOKC==Xd5yc(tI&mi{hd6SVpB#mv4U+>r
zYmE2)Ek?&pizB+WlTCInTf-r(byK7qTW?0apmRwFy)br+a%qYzf6dh>G8k^$+?(x`
z<Mwuf1Ry#vW_La<8m6MR7~-K`J3UbN)EMO|_NNJ>Xc0QqZLSoaLG3`7>og{iWO*tV
zOHjai*kq`sX{<lYj2(7{bGR41y=lF+;=^{!y|frFxsj@Y-`!+b+qQ`;MTLS9Xo5xT
zNIn_Xwoff|+sp*%vUw*9!B|?sRqvB+9@)>q5pHYI@su#>qhVT;zGYT}*1hmHd5V{%
z#G_8RQL&ru@8?8yq?Tj`&}BN^@TIzgGstQ#9qKCOB@8H(mb>*v^LiBu!o^W;)0_I>
z*sCrsz?e8;U>vl*!A42l2~}@xa*8yCd&xFw%NR7vK_VUuOE<JyhY$*cGFySK<`B<8
z%J?wFG^7(X8QG)?`EH_ZZ%6(op1aUe(8LCB2u4>Fjp}+@M5^CMqEdZqNMa-%H2#R+
z%L;Bp?oi<}%b>X*?o3~9^nANEBN5J{8(X;lG%H8-3fBDpYUBIWEXO~Exp<nSpW>EP
z&e|VE<3GZvT56_j!AI5E=Em=40scE4NaD1N6L<nr77;fpxeI>mTq26<7@3dV*)*mw
z@SRIX0lU7QXqiK^uDZj4i^zq!te@q-f@FsjYgR#0T;$}XMjydKv8{2b-!)#_(t_I*
zn+;VC+_>saAl*}*QKY1CFAu@ADN>*N(n`f5{G@^$39Ec7x-_wvfnt#4D=Nwpu`E_R
z4+#2pJ@Hd%PJrc~>t4tREUwG|9N+^Wr(wUl>%YU$PCJ}Hz!vsBzh=$v%}OnNlWJjo
zz2Q*qiKvt@ix0=V*FP<FeW=cIG+%aHO~YRNzrW3SV3ruB#12ISv(w_l5ZNF{rt1FG
zZeWbBhxaD@+C)iTzzag);@}E@gA#eOwY+HFeeZUeAq#t~kenZ;Qen3u@@o%eyx(G1
zQ8)Ch>p8>39%j1(lH@~^a7rmtnfu{EHQ}#xiVm1Ig7g}#ozP5EUVQFe1jFm{Y+Rm}
zgFKK5ZjSGKqFxX_Lqj9LTr}=0B7&Ye!cjCJ;9R0c^m(GsR`?i_A|WQ0s^<Z5euW@R
zaz+r_)6-+P(RtGJ*uH(JDN7bXQa?Eo^cCoYz`ypvMvGiSRj`&V$(|qRo(oSBo8t&~
z_;_1<8#GlG#eBb)2?Lo=wpyt`DL{5sLn5H@%HuF$cp>dI)>u9ymbuL~BYi;*lz!C^
zBkFMYS6+}+w@SK;K+%D=bTqzX96x`n{=d|W;v-BU^o>roOT<d|;gVdzpvb|wpHC*E
z1$(T&39Y@=geF|IHX5PX|KV=_alA#w+IU9Ri`UB{_;%+b@qCMvfPQb8s7(J#8HyK2
z(#hG?Ls=?QF%{vJuh<rfBdJzzgRTxd?V3U-dWcW_ZsQ#&!^#;r$-h%=zC+WxDcfvi
zow1|2|G>To#GrVaaVAdRGC0PN01`-PIScu{3b3eid+Y41aA)`seVazrRWTJE9jTSF
z6UW|-Q9;m;=1r55<P{few8}d|wQG%MIAdB}Ou^VU29!4`KrFSFHLpeQ0s4N|{uN?v
zZ7r*u%;L6+tZPNPosTxhNd`AzRbxu5|DR!`leSrrFW(StL98aVT8-PLVP#@MAF<WS
zX4B-RX`T|TtE_mUxws@8@Aq`cn+8Lqrl2iq65T>$s@of5j}Y33>~d0rzh_$c#Nl$%
z_5!*@^ZKZD&7eLuTh{83)h99Hy;(sCnz#c(OaG(!{J&K5Nm2fVdE#&{I&^>bfnrDA
z*c5at=-~oS)5!7gUADHdrb3B*YK`4*(eEZ8ew(H?!E2IylT@$m>?W0x^#jwiM!g^+
zzb*bw0^XpCNVArgQD~?pv5chu5LgByds4?uBU|@vrC2heE(q<*7y@=|1l$lwF-`Z=
zD;JErl;Q)@Dusk@My|gJ^@Oy#By5dQMEF}@Lc;Fj*+!a!Q3dHgW{~I-Ba^-)AG((g
z-yu1AkHfgr_v5n0M9}+Vhz-9?yOEDC^SG}ccAh>tezD)nj&^>6C^e6YvuOeTcV5@#
zdKkk_gfs~|<1^T-FZS=G!}u2{%HznqWsMmugVv|#FV_$V1%68m>Bz_JZt9_d1Np4r
z#K!<MP}}uFVqN%o^m6y<9tJ*N7W_wOpXghZJQqbB5Vw3dttO-n>`=h-C}v2TDWZ7#
zp#2rcIfr{frJkeBlS&fon>gXIya?HX<1->ieta#6rY(jp{so0-50RbyJ5U2j;##E`
z*5dw+hLYo=$ib*ExZPlI_)}aH9VQfi<1G}?q{H7hwx6R=Z}7)ktz2R7TtN`tus=f&
zeL7R6BW8upIZU8f=6p_NgJM^tGIk>VzRq{`oHpL1f`BIou}F<W8QonWx-FDr%H-}}
zsOv+V2o%ZN7PJkq1Z$EvKL~bz1%%3nulLkf&3!6+ed_TWJAiLj@4nWyjnc8{%SiY{
zX62iZ3>0C=(4v8{=zSzhoPgZ1x~C<C*qH*|8%Y2xvYJ3YItnU6VH;zui>vyJD}$7n
z<5gl!e=UKK=dj*%s8Bd5jCl^s2gN($cm-3EE}(z9V~&BI*4bHw0g}cTNkI7^pOvUe
zVAsIvWK>*0Z78+n!}ma;{+S!z`~-vdjK^cQ2k(FVm#+tdzYM<m>h#N#jg#W!&!@#-
zsA(Ugoua6RmWHD~Z2Xhz8g3y2N}i2v&hLNm<<}dVUwr+={aICA%m?T7pe)=az;%3T
zT0N{rb8OYT1*_w_o?nPg3{ph+iB+S;8Ks*%&qt@)9-2cbz{v&z8H}?n5&LGD8~-`S
z&I1eU^8#EZIlCx0+(JmBQ9hx7@?j{n1|+^Ai)u(5&AHkTrD>@o0k5sT0~u>Dl&)kQ
z96=(-TC(**U25e@g;vSVtE&varte<U;=&D4;v~V*fm1)vCmuxL^y$hloB%<~F~qH`
zL6(F=jD`n*rUWcBw&Ii`WlYh`#GMA{ja5s$No`(aJBGHwXdQM9r<itlA;1S3N!y0w
zoSH!#@a+&Uh0sz@OyDucF)pgZtf|aN;#_eGAedVIUch@ziwQS^>0AZ&aTtRL0NMF^
z1WT#{h~j~X)YPFBek%zUeE50zT&u=2v{|y#!TgLE2Ed&_V-?|oAm$)6D~1xfg0Qs*
zd<Y^2{3r>OCo1ibr!x|lB4l0l@CIjH3TKiPr>7-sIFMeA#}v}SkMB;~cTwba?{XvG
zlVl7rA-O;M*<%Vm>NhDJ+$iXo*J0Zs1iK(|^(8e>A>JubNe8j8K~T>wIx7<G^wIH0
zTnV1uf2r4rM6~2humMfET?`Qf>v>TVm^F&kN;B)WLJ-T0wlZc^0Tb@=!?Ext@Rm=V
zsg$Ixv>q45*OF#L%EFi$jk=eTL`KSysJYo_5JBH)H(q2L+$0XrNTBaXD|qRBxar~S
zv<`eE%u+**A9z6X8u>d4j`+}zCY*cPF<6rG$wy{TsZvPJ=j*CUA-%^AaWPRdeOSC=
zst#PozP;FY%!wKwDeZkw0g&yMs1b61zEK6;vkHK0WO-4q4*Qtfr}G_e!M=!mD!q)6
zVfdzeD~vh6iP9IACabP(T0V5j9)E#+YpxB<bbU|t(Tl+rrBxq^wIbeANDK!2s4WIl
zVB?7fLrwi7(@U-O5-8wC;^pify9fl*b|e<X^N=r`u2gj644}ps^7O8R8^Y4*GW%=7
z)5-<6qkHVydgo7N_q4L%YE}9U6f&#+73SdB{PTuw@$zmhE>w%|w*ME`<byx?CP^U6
z^=YHiuI?Ey_GBJC>E4J?2&90{VIOfI8EC6N0>Kql>q`nZew>0q2^5+3RQXvbKeOde
zr2L5ln_)8l+;KeQrv`@tGISVRlp!?ii5W7*%>jv(&%zg`pb&2#Q-ePw0sRa6y2F~e
zfRH`eINiqe>oyQ4V5{%qbqIR{21?%480&UzT*kUl5{!>^NuXNSUXKk=3lr>yhr(jz
zZ+Q7UHN*5Weo0MXv@r^rFJ5i!!Rav|AjNefJCL*qlIw37HEj2~#JVq$=zMAd<nuf3
zeCqc5wMx!|0?pLigInst&mGY7GM>AGwC#SDnER|35PZ>?`(<<PC${^`=G;$`ou4G;
ze!`ufxVc9;Wj(Tz49cRrU^{2qfNWz2vBU`Sq)i_&zwZwnb+qUZrf!E$^TzSww-8As
zK<6r5CC~pAjyM{y9oxMOyAMZQ%Q?3K*^f__=GgjF|6azT(XQFBu%wG8)wH$tf<OUu
zJC8>ObPf|LqKXdXNBHR5Yt%rV^CA9$K=M){)$uiVeANs6bQ1zBvVd^xFswB2;Cu<5
zh$`o@tV^F1wx@K2M|jKf8K`l0Z)M4$F#b1cli(VdN;Y%_R#-->OQX6T%JG#l%M_zM
zgUpr-;kqevq;Tg10?GYHSv(i=;XEyEE9>Xg?7)Me13276$7&^A`z+V#;YAT5CML=X
z?gNe#2HB&*^>`q%Jv6RPitC~#(LL}zMwZ|Ca82{-Ws5Cn??wjo&wnm0%H4(1l1#8s
zg~zv2^P#M5U*p(kdO{62-}PM9)T-pO{kL63s>B6ElexyFq9=JlZ#@5=ysik@3-?AO
zSzAlR_xF9S)QFsIWh>rp!o3gpf}DVU*ZYo)y&o=o;YzU`m8t1sVEFoonTN6vo^si_
zq|PMO1KWSXPi;vjDho6O$mg@lq+N1_`%JS?q~E%iP5cjC%>@6*X)F4T+AyKic@AOB
z4K!au+Ec>%4J)dL%R@wE)(9Kc+NABNDwwc0Au?aXZM@bPbmNF|=gAf1y?|px4V#WH
zSO{uJF?#C{v#Z7sLwTNrt<bqbbwWe8bKMwVICb3->rdAdK>rd!6z)!eC4)}SRi`mH
zzlHLlfp1)Mw)S~ru#2Yt#+|JJ^LMN3kfxY0-_W+ZoERTO`G&cNg(_{gM#eV9yOE58
zQWR4@W)ur3U8R`dgc6Z3A)z6xmS_hZ0Q#rpXmmJR;6^nAiztYEdm7ju$2)70+jgq>
zQ8mHgOjKd_lq`#RnIV8R%j%eakZLH8Ojcxn%!iqm$dL%Ip{xw_i-mAxBh@h=?L*qK
z4%!4>qD7~PX$vqzqf}7)tJpnFn*hQuMaJBLt)Zw=E-$t;z|@DUEejp>>3l1izxp=i
zbl!SiAu+Uy8^#FGX^X@w1z=7cGk7!LXpqss;&{Ew_N8S$@MN_6QZ_B;IaWvi&5f`T
zsRK8(hvAvsyKm_fUSE%PAfJ_KQHDBxabu^CEYNiDdFSv?#f_MiV{HI!MVmV_$vvwX
zrn`zam(V%xfXUsha!4+o5J!G+Z7kHKMiE6h^28dZqfjY?&`HTB{nt<qZV4S4nsvNZ
zx^R|x%A<)HhN<B7RPdGBD1HW8=FX!(gMAG2y_Kz9l*8euSc_PY78$_AkpS9xU~D63
zO*^xf4azC#P^L=}T_ZFhoK(|MXdl6)Q9d|cX#m+ZW>*E<f(BIzZD&`25$T%bj3O>x
z$fJyL15J>+>CoiZYwh@HToC|J4I>{rLIFomQ1b>G?iEGq8!`fYOo2l6sOmJtypfbP
zk!BG#|0Z$U0o0b;&h8-Xw?m`B!R%KY+;TeD#Fw*aIfUl}WK(2i!bEyZ;~SzRH!eR9
z_gf1%1yvrJ*8B2aXH0fzh&u)s7>WB$R86rtozHyJ;PIdl+wpFnVN3YSH%0+Rk=4;L
zD2a#DoH9VU&Myl-sPJ(%t=<>Hx(t|Q2@4|Jg#R6C7PF`5cjN9g0ebzRdxinMdD}G&
zLAe9*42{YkNQfS(5VHm!K?Qv07(!aL6=tnoObfJx=rkqf@nuhriix{U0pjSizYKb2
zo{b5eFaJTQk9sP-u}FXx6QGfSrX!uaSsq>(6(ggM4T>{WwSTkcAKz%3GPd2S8i5JH
zI#{8gGJRILn@D*98gN)pu}eTph+xJ*s%#b}P;uWl(HtTS4ro{t<TGo&W4!9X)U-EZ
zJVp+eDj2?%ZK{}ffT)1GTMnZWuL*UxAchK)CEqvfZ|wugSh{7x!uirDyJs26h6Ws2
z?s2xhI_+O+;Cl!LH@W8?#X5uRy|6XUK)8~`-*DMz+3pb8$k$Qah#H`|6Kw^XZ`Bp(
z%_z#xIvRla@ymTIKLK-~e{;w32=!|`nGo|a?u_qgTPTc5f(qot=n4mrh|S=#c6_#@
zeG%%R5hQE;;$guj<J4MXjMYtVKYnA|e<CDk-RH@5rwL@>O^#HSs?$sx&jblSY`660
zXS2f+yO9UH@Iiz@WU(WQ?2mqd^;fsTn#3h$4rs&z*`{j*TLp(7?q)x^SZZi@QSbnc
zNz+SExG4Ix7AOL-v1^WS&~`@LT;n~yrY{e^;J_3id+q3Bawzp+T29;nqXv?sOvk5w
zzpVlJSWC?B6Z$tZ>-rJC%8QS#sVzK~)+VcChz?@Cq}9Uc1ncp~eJfTM<A7rJNaBPk
zCpR$OWRt)-Mfh<XIk=?wpki(loPwz&?eZzd&uS4H(NGd%q_oUjy9jlI08bjek|wX1
z7ZVp8;?35Vh<1GGbCK;xUA_aZr%cfs*b#@IW|0y~IF*11UK{_RMQaNrSvrpzaBoe0
ziz})PugbpaW#?TZX#E6E;Ye9l@Cqk~WN<UOTcABvPsiQc_`fgi-s<73qcG@t<?m-J
zY@5i7DtL*qJPe2LJ8h4G(5%{rgOwv9%xtV>w@xn_Cvl2O34-xpx<c<AdQ3XvM95(q
z9)24~Y@d0z4(;A!qXwAc$~yqP(M`V%-mxjh04{CZ59bLGpOLk-z%+!RpOz!H%Q_JF
zti(|(CrEHfb6f9c5b2epa<=f2HA#ikjJ&wa#n`*H#y&oJ+OfY+mhxTD5J>y5TEnpo
z6yR)FcYl4H=)yn%pE)M=0&jXKfDez3xP=E2vCDG^0;K8gJsa{!Hx8+1b?fHTFr+tX
zL=6JMF-4<@8_~OPT^SH1w&;VNGV%FXFvPBq+9)y+(*#+lXO77$C!-RNnWLSbAWB|i
z3yPBx1pkks7x-&eoH#;#ff$+Fk)v{KZ$mB+pEm||PX+f3O*W<~CP7c!y_c45iSw*g
zgstS`8mv{os@ws_UA_mDXAw=+!@cDm()I<jEMf@{2R1ugE8x+!{fQ*lOW;MwYO(GQ
zQmp|uAa6RZ^Hg*z435uj?@4c78{`uY=~T6*?`?B6I^sXFWFdT!mDVDFuox<1HEG1d
zZUuNoeu^oWN?cm18TGmqc$|CDx7e+_sWM4y%*5em4n!0W8sbj72cv#r_BeR@CTs5C
zM*Q$l#43E=(2*C%AZnB5$pJ0TT`$-RZKe)@HZ#9r1A%%8!~cyGK~wBPlm4xX@m|wJ
zd^_!hc&#G;vSq>NiQ!3nTG3{B-O*MSS@|xlzKE)0m4usP3^z~g7=FnZ4c<9F1##~R
ze;Xl<DK9X9wy~A^wIiks5xyj}Nnab?y=Yh!Cb!U1%ZcP&*J6B(1|zL1pDFG5)F{2F
zk6vQMZi!F<R0{a>GqOu<q#*O3_DB=L!ch^5-n1kp!*pJ@Zi57nj)u6;*|kwADP_kp
ztAj|rz`XwL2xapGbhRd;jRmoTiFFfg<|JzR?N$d(O-3WV@9k^&y<3-f^^yQyEsxNL
zAm*Yq7fqY8?}@HCV)fVtL4R(bTC&HUb3LyJXkHqYUlL-=30nPFlN80-fvF_g3TZY#
zQvNs}oOkf%*>brHC*NmcF2~Pw1=B&%zOe>0=$<0#v{g{mjiRrDQri3FfQ~)Yls(=P
zRjjE6!b90uaD%s0+(lII`oNY3bQ6(!m)6P{We7TG<!+-(J+7OEMUPo&B`<ESx1ljX
z&Odd_xT3L48$eaJ3M%F#YO!2Vn=hqxR^1rbq9Kk^DU+%>!nw%$#(+yJ^3!@_1+}E!
zIVz(x%-Z}UXy3Zq&7O^-IbF@@oA17tbdW92SEK092S-xlngn}@76zu*$dcH8R2e%C
z!?76#ECm>}t<Yu_u|<Vln~n)^_X&>}+JbP%tX@Y1XP@j~TAttzH$xm)rg5ulxzRNw
z3YL@K(2*L2T8ZdBnCckT1zyai`M3su@fDUGR|#|!g_b$!#+1X3F~Sa?#bOIeu*sGc
ziLZLjp;1fQvGy(Af<PkP61pw|wnfGS;S3q&nq<=+YH{LMo%Ce6`Q9CmUJop0(Ze~c
zL8LotDCX^XF{9z|Y@dV}J!&J1vIxlqIXj~vAu<A_A~p)66zgfIXVR+qcB|>Qeq=n|
zFpt%T%{om2ltk7@x@Su9Vyr7@a5NulE^TU2(~(`YDPdcS?Vv-+B%M^In`k&1z>d=7
zb=mmRN$-v(mqerYng!9nI(%$YVH1~h6>A+G7^1ErO_u(zPQ;JO*{EQ;Z$ioC!+ZiZ
zC8?lj@-2=}76m=i0nv<9u9saD)3aj#v=_zix?4On6*Uf;2d!8yJ4R<#+~vPp?wb$C
zm>lD$art-9<Q$XQWtU7cU<g(9em+?`nbD{~LlPf?O(I31rrp6P`;bv@op#uF`$y$P
z;f68GZZh~2wcwad&{%@CJX(D8*t})Tu)-uL-^sJP@9zVVbW8FPBYETwwjFxo2BV%h
zcvUpR>;w5Jd;`Po`HsK6;o?NV_Maa;e);px(?hY*xNsz?tPA%QB^5k9wihDP9iG+}
zrZB$gkxFP;1y{`1`I>7$3>h$LOV;>$BUR<RnonCQe1SDWl?Pu^l_3~0C2Rco>o0AU
zFSr+nVeeHPREvjkefeiwi~Dg!fxaYrdeHy+!Jmu21gJfrI*?J<tw~#7f9n7F&tIx)
z+|#1STY=Eu{OZeMa{~y?b^;#&5#GGD>;Kd9{UccWV1h!WToLy!`(MY$FMfLY`1lx}
z#qs5Rv8X#9ak^dGR}`-{Prf~g1FqE-z@n4)vJ-1hnuEqJ4)!L^!RAD=a^nLIhmW7%
zIKFH$pXvNNegtv<lt{q4*}H1W7tJa>=xZ!4jYITH*c;lf-X(-zXb&*#8cgRw+69ER
z`o*E(kbG2qcpz8C`{C>KE;t$;7}Bj_bxQM@lBb?bGWhCAWh&KC5|WUK?qEDxPyuMS
zoUKvl``jJg7w#y`FD6+&nilzRp<LBWHiJfYiLns}w-(~cGJq&CgBS@=jcy1zn<!<*
z-;9oX+j>C_T!F@@@hy!OXu}%t?HxG|J7KxH6o6MADQ+%gT4+uVuO|nmGQBmfwWe1;
zG25sb4L9KwdJhZ4n}(8?*CBiP9F8?gZI2d+x%=P5u`!cr3FgVc3I=?1*TqI;*i3+h
zl;s9UdN?AZ4NtLy6YnwddGq}shur3~h26ZABdf7_z2y^h4}PU?yc8>)htyL>L(;N!
zM;{e%DMV^$C9cL7gudf_#w`Ok-X#YSYyu@-_wJRkTNod{t_e>!-(X{J%C~RL75!Ay
z%2EfDgoD3$^kR#RSNqR)UL7CqJb8Q!O@IIRWu#){N_1cV?gpcyj?WJVRuCQT`g7G2
zL~iXuK>i47Y9q-s5@Hcsg5mRaHN1rQooIF)61kBv7KD0R{SXj*a(|D05407`#HMb;
z%O_+<4wpneX=GTvtbwTv=>-0Ttk5i7ZAHt5e<FhRVZ3I5C;=~_%v*&o_T=gh%hOZJ
z;D95A(p?yYOa;c(#1bfW8;0<}9jd1%1lEFY+gJfw%ei03RY?YBpn}RBn#qS-Ha(TP
z2V8K9Xn0a!$$*8h-}wyXl{Zy#<~+j$Sr%-C6Fcz%tc>6I)4YC5=IY|3kk#W{+$bP`
zqc0bOG9P0044<yS73`_vI_65_EjxAKDBkKEKgy3kREo_ZL}^_0vhxzSCB7G`Dm0QP
zAf9Jn9;$J^8C7oqkKql-x9x{5{o>p&Oc*_WvQzjNrZr@TY%ZrP^hG{NkugE!6#fUc
zKXBZTRK-=HgOceHuc7Oq7aBAt<q8}vM(uS4?!|lyL2H9Wfx3rnn{|$5d;nRHwg!U7
zRXrDsEwKDmAK3UF^VYecY*R5f#-MR|R0DJ<+~KA+^{~SJWjU(@%p3fyNoO$QiIb0r
z=u<khDXeVN36tLLPB;^GGle8*Ajdzw!-3oIes*tHL=+qtNO+I@4iI$VG%+ox5+xH=
zUJfjoU?~7rK&ih8_5AHkNc#avM|0SoA9NH{rnl6o4hF<JaX}4_1u9rhlOzj!Pt65d
z3rmdeU^ACN_^<LAnhYIr{yy!Y6W^(RDUg>TTXR4O0#RMSV$BM7;qo4U<oD(1*(5tD
z2Kl_k;L_+X$lD3$2%3WhHp5+%HDu)h+jLj`>YN<8eGGC8P#l@JD;(?)h(#^`nOfKH
zc&uA@AskEnH$6_TkfsqR>~Hqcl!{Q5y26Y^xdR}$zRZfVMb<f4Ox)lK%-!brgZscD
z<B=dX_r8hs>>Wfsd$;8#EHR5Q6J0)~@RkdSy~f}H4i|z~V*!c<KGdyYA=4aHOSFgm
z=;j<{84vQAYViNmMWI5*`)KiKtNv?!e-CZe-H(ZD`u>++ef71fis_yn^#3IOo!%RX
zayV^eYcK-kamtd)Ew^LEr`G{ZIeF0)-pjZk06P3~$mZ~Jg5H&o)f$7z;U;j%oo9o2
z4MADF+?%45lRqGY*#_X8&C#$MY<t5YE!_gUmhRNu5ibx?IA-1yK#6gr;g;VckzNnw
zZN03R4f>u%0}$vo$JMy#-MN`?)7Nc<CfqkpbmWStlwv>OjMkK#cC8orZPGmh7b7^T
zCOv5Vj(}w+_C2H*BiRxY$SqZHox^r*d7qOy``aI2gIwgJzx^Thnjw!F)F)w}eYKnV
zwpBzb-Rdl4jX{*}P+mMh6851C-#*O#dHv7DjU>|UMr~91w$>qlIwwKHT}@i6`W??c
zJ9z%|wQlgPyKCc5rgCF{g&pPyST&yxz#krgob*d3gb81k<c?M6Q7U<CD%Y4Wnjj0R
zZ9*>Zgo)oGH%xk$a>V=qFcme(o40JJRO>fxZsGAJ_J17YgY!Zs*P{lNce=EwUSX4O
z-UhqQ#<+-ewq5ZZ*&*X%Z97@xVO+(Zc&#aHN%L6;mPS5!hYC37aILIsrwD!<EsNX|
zuCBPlD9i_&fPA=#Zb`W7m}x&C+m8$M@#sXaux@kSO5YS_A72S*%;9-lT=}D+e>_CX
z4Bwmo0Ph3V2v3d^t2m-y2&mxDAM#<KZ=Iu3<Y=`ej;iH&Hm!#90ea3;Lp`^l4Ox7b
zUFCJiY&f4xs^Dlo%S*@pI>h-LkB<9%B2994k;qQwoK|s=kJo09-eFqQ)yN;?t~unm
zMpf<;P7v|ycx5jf*6`i+m_ud}m<;5-u7HbOgN%(6%#Yw(yeMl-CqvS(I`i?YnO!A4
zFJ5{3cA`BGORn4L#tHE>dNqz}Y?8GT(cy=mNMVsW&+v125pO_B(`PX^9+}w}XeATg
zEYFnq`As&>uafB#zjOB=x{}2i6unx=6T3ueX;_Y;c0BlO-9Z}Y>pI#BjjQ$f*qtE5
z^-EVNTnr)1kxBN~6!fTc%GQgAx+hal*N(YK5VAkb7mfq$SQ^~7-?l$J4ZVxMapjYu
zwwk215RdJI)H39gbl8RO9QiV2y0JX&<}sr+noNt+V!DnE21~RLK`(IUyu<2J@wZv>
z{3K>sJ~Peq_v&NJI?fGJ(I_YIXDSbIaG$24<N~En{EHB#9^4giW~yu){ZzULIg6WJ
z<kwLb=-2IC9?1ziluZO!^$W9q>htIzujP1!%Mz&IJ2$v@$QZtJZM+k{?mjVfoHLfQ
z>6B-V2ne-}Aw(BenT?I8$1YeveDl#&zQA~6aCw@-awE~kQ4QU76SSOe4-E>xejKJk
zuNNV!I5!JcXzMnb^E+w-^N+vdthYQ{k|+?f$KRPpeb-ZsXfVL|83tgZJ<Ns`97K{|
z%0VckTj)k+c9dqF+W9P`;03VRM6EO;D#HUZNYI2s97LcU5$+IBpdmd34#XV-SKy{L
z_d-KK%9Vl*_%@62Fx4W+^)<H<k`dv>6B=>r1U$iD204(+GYsi;?ywWn%1?{G&&w$Z
z4=9(iyN(vq(p?}(GM&wUEOi?p7VNGiwcKX68B!r^J@i`KBu!DPMOt}@e1fMw4TOz6
z@ut(*ZC}a!nz`0l0r}$KaQ|rkXHY;s*?+!&^tzFIoeMsH{QXW`Q2888r%iuH>d1Y1
zvk}}HsZn?t>WFHwd6I^p7cFo~NI*TrmL><k?QDbP59ZeX>{?=y9kyXwV^JGhU)rb-
z)kYP={M7P^rT(#8fIHpTYe>@wm8P50e70#}3?iF!=RjMO+C;6OLTQr)J*v^@G+Jd1
zBh`OMmMpU5Yny{Rm1N!87#bClSIL?f7%%sK-Z^^gpWBta4iQH{0yuz399_h*{_bQX
zN)BS)a)t+zZy2NihwsY?igxK%??uAC;==8<_l}g21|1XZl;eEV=nS*kofL`tt{|)D
ztU{_+89^{)X}7rW&3J{jEJ@F=Krge$=N=mu-~piQUY6+3Rb&!Ijb64&*ImmJ>x+AE
zeZaSUfi<9{0u*cukmkW&Yh+E|N-35@ZPPg%SLBmZD{M>e$yJiuw<ea4bT<lgy%-GU
zD8c*b4zIll8^yy$4aA8=Evq#jLP2<jA^#!ZP*%H!ChE3Klc4mGgrCSDo?zTHDvOyU
zr^UL?9mT?weoH_F`n)5fhlXNeWndrNIv_9&`~pvod&+rmxzCRdAw&{eV9g*wkVt({
z#8?c^DAF75PKU~{D?ea`9+c)|2R6TBI4}q<>8Mb3<7h}eL!Azq@SE_4nC}x}9fjz<
z8~Adw&ut!^7Yk6-bLO3ke0o-nJw-aHW|USFvy4hu%3*aypCM%t5);z+a+87s$Wsr2
zlNW7M_KxQLj!!h00BAn@$vZjex`S~+yET1!!=QrEuP^W%v<44-NGf;-t6|@uYPd%l
zVZG%NsC3);CkpRoVtR2yRcD~hThTn>FlmHgxMe<@?(`#twr8)SSU#a_XN9qBzU@kj
z7zL+!Llj;7?QNw`>buXC)`=ITZIV=|gQHvj*wH<B+fB~egjPpa2V*884SbV*;SPX}
z{#Rg?)PL~RwhCy9mMGpyqQhH!qesmNP-qsqU;*~Ox>$<@InazA+Y4?v<hY+vPjD}Q
z99!dIw}s>V-fKW|AM?!7qIY8C_f9jMLQyWzLUc&Nk}0JtU^2wb!cD%Kz9VrB<-nd{
zPU}k_MiV8>?|65;6N0dh&JQ^R3PthiMKL?ChIr}M=a^S`qW(M#hiG4qY?Q-rrbRu0
zOFoH+Lvm?Sq7N!)r~+N|#YD6`4ol$-D~A1LbVxDK(fw%!S=L?H)K7TXaEI;xnbqqg
zJc!0arYSM|cNZ2fNYR!tc2NkbV!~NTt%p)4l16a3UL3>fO3bWf3c*18yD%GNkG*Bo
zD;z2^uf4gpcX8@mDTD5-$eMdQb$9SO9e=RUu+&>Ji^JGc`WE2;E2EwxC^^U>aq!R(
zbY7j3KA1og&Z;o{#A(zJpzw*Otj%SjiHKR`CrfSd?i-7F<qDlBz<x(ES_gkzD0_(l
z26jBlPNvlr$ls7rI-M59KQMjw*lpLE1%|Q(K*mxa;<}9tFC1``GF*w@TP#*-6xp}v
zm$b0~!Lb;}443Feg!-$;(`hwjdCMA-oHh3g_9{MuY^bUnYE3hT?9&->ydJyV;GnpF
zhB{bZK#{n~8r~);n?qbjWx01N=HP<~c@3IEv1*T3XTZ@$Hnxc(e*^Q`79F86izB=Z
zyO0LXO_)3gx7mTF;!IGF4<8~tl_WADgK%GY*b&ok*M1YEkWU%y-$X$#`{0+<A?Ktn
zUJtJEZqP1svzE6UJkH9QNT;Z!OhPYPqTj84x~N0I@UeUnSiqCcx2hm&A6>1R`YEeH
z6wi~E+DY--EiG7;CF+8M#qQnU%ijpR+UAkEzI_?&5Kk>gRz8SDQ5z|&>_k)gtsp0`
z?Onh}c7|}ffZHcK{X`7B<21xwGc7>%A=j191sMMf%gb^&clSQL61zL&`<7K8`|{)`
zPUDhLk0~4HTbAz)4eIUE1x$*&$<G`r%N&`WN%%A(8NY3%X-`@@EtWcF&-vobZHCcy
z{r4W3<=bIKfo!8Q<5MG@7K}wQqU{FzNX?^#N{N@{6pE^LefiLfsuT>A8@!gc3pY{U
zRLgOjx;wnYyEgbQN%`Ucr^y{eixGApo0orQn%~l}=-xuVl3U>ZN>QBI*cmK!2{UZk
zBD8t-zA0Kj+GYryMW9tudLO>QV?lC9iJS}*f%<6C%Yx)2sJOe5KT~X6MmBQAq#B%O
zoz3ju^YI)kbvOU=r;Ti5V+;S6{dBa~z1@@}Ask4CTC^UcZhfEU&)vEv0;(<x@%mq3
zx-TFH$5L)0h!c!>!6tUA>Lt=26IU$`8p-{0olZwYwj!Z$O+!pgc}-G`72$^oMpgoY
zM7G7@bg<qh1cPbyel!<I4$m)&@h|};x=}#epMMN8@!=<_Z7eW8Ty04Nit{arJ+XpX
z7+Cx$lZv|NrWwnou96AYFFJ8U9FQjwizkW(>*Gh0z`p*WnwI|n1HDnldn2&6=K3XP
zra(6>|Gpf{dn-8@RJE`0Fpd*zg%qI)DH%e-Hf9YGZCIp1$i&uxNBm7P5o~nPu{J(>
zJUPDFBHf#U;^%tMV5ZP99e%Dy8qyn{ry9~F6AkHpZV8BLcV%&%L&k<9#S13)=28Uo
z0wdL0!jN^z6(<z5ypI-fHMk;wF`Sg>WB?|bpiU9K%ANR%R(J8FJ)0MG4HoZlN|aOK
zZfrMijD+niirDPkNA+PQ!mxOH+d-^ghGOJ)<=-1s^leiK=sDtOGbq$H6hjZNyRA%X
zPi9j`3{i367+_YW%)C?58VHpftQ{aZ?E;$8h&L1YGo7MAmaYqRFnl}Jkr-T{CL6L)
z8ntI2U>_CvC92>n5G;X@hUw6d1;)KZ;+7`$37Ki`BVhVhVqS4Bc}DT|c^Cb(%|`bf
zeTxYv{NolETrIX#Lg1rWL~Ak<>_7WxPbRU*BZjgeB52cid9l0{X|c&DX1P8)9b5<J
zZaID?Kc;8!IkG}&SpNbS59L}1(P_-?A=Lm+Q!weCLM*5$^uIG2y#Tvf3SG>3F&a0j
z1Rt$Ou#As3W;z~xZV&@^ji5o5A2+Balf_paV%nCVdpCS)nhbqtw?b0m7})^#zcW&e
z+Vab6w=Unvgi>B%{m9W%+hC6*)$nRdV+X16S-X}C&A8j*wR!!vuWe|b%4%DVeMi{~
z$Qnk58<4;pZHP|udPeywhZTlrLMH@}AKQ!|Do`7@ZiJ>f!*Pgx7kocCg4=zvEkL0~
z6bX(jCwCV=7K@Jy_(pk;Mhl8-0(th(`75X<NvQtLjsBg|TcW9EAB=dt83u$XsZQA%
zx2N5$9l*%G0~7+_3V>(`&4f;2Z0X1i&{HyUgO3!)?>WreP4<Q@f8Kh-Qjny3mpdPR
zw{$zE$iWgNyDZ%#p;Eq5gbW3&4h|6K+smve672I)<xMN#@f`LZ0Z&CLk*^b1{}2J*
z%fLEce#84Ca8I7md;0B@SH}iW9N-B9Hb7Spq@fR&DR*4J`)}m^d5Q1UF7Gr0Mj&#@
zEZ1D|HJofWl4y56xKCSV3gqP)27i;O0ZDbPr>9Hx!bC$oH{ev-?Bs-T(Ni;?X})=d
zDWiXN%bdd${aOhWmd-g$(bQW$XB|APp5$Y6B9j&%u&E!$w(?uYlHaKz!Nn$Y#P#R_
z#105a-5A{8u@OBl@m^Q%>S)Vtoz?>>Yja#D3-FJ3U-v!q<>kN7b2CUPt;-`WoK8h~
zTMEo$cOQRI)gO^OllsDBer;Zmx9~RFa_n}d1{3eeTX)Agg6=!feV?aqfq_qGGX4}d
z8P#m+A|rq#NNt=oDglVrS~;f7(S2;kes^iR(<Qcz5E~8-dbC+2dAQrn-r1UtJjW}j
zK|$cINiir-9X7v%D(}EYUQQ-%zw^$$c-J+_6?<rf=#Ff>D`b!gyF}AQbnyfYJX)q=
z1-1roo#SEL&#*mrR&)Eg+ej#{i!CF!+>evOdugIrl1+rzWfSv#!XXZUsId-NL&DXS
zTL){(;sWk&9mx)gcS5QKxjykS*zIS}s~J0yfO&T{AAt>bb^#MYzj<U0f!8Xh1^AY5
z2N-e~NRrsU4mrJYkDXB)`6!74fh+Ub+|dNL9N=j>^X@2MP75|p+yPiXVRk5%dITqx
zKIWq)%-(tW%g*aV@sF*cJ;#Q?Hn?(24taRCv_aNg3_V+%FVg#X+19!x)2Z3LrA?C?
zZ|c-7hB%a7HkePR#Gx$LyF}NV_DcseXai9x4Gf(6Sm0Z<CxWvcAHR91Ld0=Vm=oPw
zph&w97KSXs!rqkef%TT#XS*98IR*tLh`kSPH4O|n=_)d*=3pvPD7x^y36o%^0T&Os
zg^inD^J{+1UpKv_>f04A@p{tj>oKO3FePP|0%OXs9DoAq+q(Y7>&V~UT2H_Vf~kW2
zHD={uSf03z_rBI?>hYpNQ7`@Sqb!Q@OCd`GN&`0x%3FzEdbr#g6=?rbtRey#VJ*U}
z1m%?kW9;5^TkK!uG7e2Ojs^;2q0C4}BaIib>TK(d@ie5;C%5&aW`CoxC&%SbG$(}Q
zXf^k|t0`wgEJx>YyX96CGp|p<Pl}oxCBffysaIC`R!<<!Jg0S4T*b|8{Q!+IE?I4s
z+p*|GxdTTCrA7r}0uK57@LP)Xd>b2L5G}1|FlR_g(~x5BRuY{;@69ZZpFpIg1$pi0
zV6!6M=B5clqewQiV(#d`s?9-?r?O)(P8@3(BI}@kF$Ueie=kt14UC0^$pCOr*{*h2
zW(EWHo8x89i@|%a3vq1P7)}vr6&5}%Gqu7n96k$ANnzNU#8|hYXZ;;bVT%T8F>>iT
zKeUV1g2UVYt?U~*=E@Lm6h8B$y*0oQ6W=@jYij6)$N!{S`c_~`Z=W}BW%mpKdldiM
zL<5aN;YCt~Z4{Dnna{m&G$;(}`)K;aGR{Q7X|cRSF~Y3Vx3n{Hvj!dDZKdYmMz*{V
zvNpDi7w&$JiA=)eZk@2MCo@?-HC=<pyL9}zJPm#MOnAN$_EJWT1W^Wr58N50%fOa;
zlBa>&AY7gnXC+A90jcng@^LN08TE&^y+4d|N2~s@_2v&dW6)JsQ-@zl8swgi`3?;~
z$&u6jdX`V{(|im^0{jGTD+rk2etQuNymu!;dAfjBp|1OzyN;lVAr%I}4t!;cNcb{>
z2|At%emkmg2=UCJ!kpsHxu2Y03x1*2U|i11d<4xnM%GOns^BPRP{!>x_b=YzX+Ecp
z9fS`&Gno1lN1$XJ?$4E5#p()5Q!pj>izhe6*X~-Mmpt_V1Z3`E0(iK<3mEn^zv6Gu
zo}(+}B{XzAt7bT6U})W+NrfN<jUPkEL)*Q>WdSWZ4#F{_XKoJgt;TNzGN29MF9C&5
zpx7Lz=`I%T-}Ai2fe+^cXd)jB2wni7{2IDe0Ip{^ngL|*8qs_!9QCl^Az<b;N7t#l
zKnyEfHdaKy0=eA*#Vh!o4+O(T^mhXWMk<;;dAI5QaR*L0#HG8&64!@l&qN5}jtTdJ
z5SE5JIE7C$6w4BLCIK1n48b{|xed$|vF5nQYihGNJq0Nh{E}C6*Md@lH>mF?2;>XI
z_zHXBKgYiJWA6T#r+$ochqo8*bgvQii~}CIT$_^`Hw<AGpkQ9|T%_6y`bks4e}4_r
zLTKS-NyDb5?R;9E`RywsET*%v2;b*ZXt=D&$$|GNw!wBu?v?)rE)WO`k~izp{&z8a
z0a9Z^--E013+i+694QXA;r=D_9PD`q1c<zPesIU!SQrFd&j1sOtMIn+zr?Bvmm?I&
zHAs$0sAa(P$J#*$!I%T+caRSJ(NqKT5+0!J&z+eJ33iR+N}+yTmuCSGh&AvN{$Q&}
zh4)6~M1Iqk>Z%wXTozM@X;(BQnh&bB07=Hf0CcW?eaQ6}@&h)^0(TsI$4u6^At8q~
z(x%fHe&q(>0R{;40>;Lnv4*s6hoGe$!iA&8e2wm!2xFpH7;L6NhzA8~CSax(T5-Sv
zj|!sI?s$axLX@DxS&p=?=D)*wpFhJk92L*p#T=TaKSMtZEP|3&+1#ff0YNmPI6v3~
zE&_*xCEUfUQze)N4f5!rszC5kev~`cW&I=KY3_c(C-sJFOJik?vq8w!{ue+49;gmZ
z-gg5-_g!(}5JZd)u1EeP4Y8}-!*ij6jhHz=C*puRya%Uyi1h~Owfs;66qwfY6Df-q
z$(lgFKbE&7tVc@LV!h*O+@W+9SQTgh4O?(S!p&;<j8@{<4-Hp9;LfM0Z|ay({Mh66
zWm(Vj(a%C4j-zKc#wTE)fH2=5%H|6Q4R6j%+#f_B7=<}SCJmU+SNtA6Fm9Tf;VbiF
zTuu;}7=wX3D5qgg9wcS`2!;JWA^dnJ3`W(s*gt(<%?^cH5#(^_^2RK)JHzGYc{v>7
zCOi%Zs;20dg(vfvMtwva8oab`jt4WC2K~z`2+bW#glm!YWF`+M$NVDip5w~zOB@%@
zAyDmO;GPbJbAty=9gV~g$P|?XSWvSVuG2A1bid=H<&Oiu5XbdmJa}5xv%obH&35Pg
z`$NG7$1w3s88=3_9xsrQemoZX2z+vdyZ0)ejy<Z&^0K6cvEsa{YC^he-0RnX(ff~t
z4tW1&px#(u;R{UhdFr2Wlgfs`Z)Io<pD+D0&>xtVyXj)*Qz1CK#<dwJuNQ6$tPa%t
z0O+h#bEhjYIl}@{XD*Q4C+-so;p0n&8ZPi2h<6Znk3k(S$3?0<>TV9EgzXCY*x~cy
zO1(nl-8+XHHB6}*4Flx`qiVOry7a)Y6F)M;Leo4{ukf>QDTGb(hW61*;wPq5#E=5U
zW!$oe4}_X%+JuAgzd$4}C2`)2@DyNGZvlMsVhSN19A)K~W$kwS{`dfLMDIalTenG$
zsu$EK$=HNQ^KUvoJx>shtws3BoDy|UufR7$2oR&iV^6yXy-|_@X2ZT9%G^CQm($~U
z{+x*b#{QE7TZV)W&ydrlpL7R-XgpLcvU`*>=2~$`GU1)E?-hZeK8eH&DHL%${HF*g
z;=q~9eQSq)1F6|THeFEZV0=_f<V0VL)Q#eiA(sa+C#rxLzA2K##TrElLu`?}%3oTn
z+LOI--?pS%BRWJlEw71lW)_@#298|OT=cIm)W{5*jQ75hDJ%Ep3+VpnK*(vw1JEMU
z&RT@<qCxuu@BJt+rN@b;(Cm;;9oT7QHLo3W8I@v2B>6TV`Ejk+7jC^jK+t`8<-VHd
zV=BWaU_aHKuA2AmVzNnp9?*T3sjmAa$6z^jY~V~0G44ja;rn<#oyL=>{m79kK;4cU
zebld_&lna8&*3q2{(>b2oHapzAzq6f4w*}mN9n^|$>e<IPd|-?qoOU1+dpt<g4KUK
z!OQlgWgSVjkEjr=NSVOGC|M{nckEF)K13&jLpsiny$A+`03JfFn4=X;H}exFD#ja*
z1v1g6Ba+c@Z%@kE9^?b5ri-JgyDK8Z=fpeF;lx0gox6Ht64baE9;rtZwGe3!$wP5}
zQ^PNcDWss!k+QnF=6P^FA0q>f#vW>5qvE<TvN4}m)PT_GC!;E#?IP5{f@UESG66yn
zXzB^_rwDTQ^YNG%c1*n?tx3^vz#UBeAx77-(4Vgg4f9QTFms&xZeCO2;7);8S2*@W
zm~d`BQ3bcdcCpYQ1%-p*4+(JbYh>Q2FgTFSYZ>%os!(5{WD`L_GllSGfSM?lf*pHF
zJ?@WBLH56M!E0Sc&u*@UsXm)la~cGRuuy8j={#!M^p34NhPSA4z$(bi9V3SbUrq|g
zfbPuxqnHBfIM$hf$jA!dLxg2A`I1rc(xZu^$9&rw4KR$n8ze5>3n@|hvZfI7w7wAF
z5w=YBODHcL;%+;Z`!0$>bL6vG4CmQ}GSC2kq+1)<0Z7IX;FmeE+r&U{Vm;lqCow=$
z95)j`H?MlY{c5J!U&E0nKJ_J$Z64~rgqa_cc$lPt9>{K!$ZtSJnUlM>JD5Ec5_Afv
zPX{&gRCq;3Qv|^^X{PBMOM6j$H##vC?2b;qpNaqhtl80*PZ6|>{Cd|?ABVhf{SnEA
zKrokU1N`tZhFSw+%97IE`H9;}2E(U*L!lLm`~ZN<STE&A;PYMrA>4t0%Z&9?_Adm~
zDW`+^#cAR22hW$md{)h8LOox}kJo<Fyz;-`-O<iZ0^c2AhY6JO6W_l=;#te%Yhs<L
z;4Av`n$!XV;!tz0eT+Xi9ITYUnhx5p=nvHVVdv?S;}`pc74Tku!^cO}{Oo)@x3_PW
zc%qwS5uSx{uE8CQxxRWZEhj8;Kc)v}xQLqY15T~}r9^DZ!RnHr4l6{;AruUrk$_R`
zS^QlBS5deZ;94>G6CA2_OiEAe;{_AbP?hh~(i*6I&d_>E#Q&!b6!Lq7*#nRxp@#WE
z-g}e@U;Qg6^Y0Zd2z`YI>2@TW#DA41xYWKc{O~HeanW$9@!p8|fWpITpVT_D>daw7
zV{4b=v4Vy}UG?NppNJ@u>VWg!vzb5bMSDOO$6Gb-w6bPaGYDn#=^)&icFipLCMB?P
zsLFiPtcv&yhd93ok;k4L>iHM0p0wzG{-9p_S<b3QVtVQ+geQ#9Adi<vPfZ_*W{m&(
zlSn?;k@$HWH|T{_jDe_?8{tHI<$t{<__1)9*>duF^<;5W@s1=ckxg+9hq?tfz6$iM
zIq)k19Z+vW4C?dh3SQF2AAg@uYQ|sT;i-l8yAn~qA(HrmQwH}7q0q-D>%lvH9YiX}
zk*NKcY#K<GQ5R=?R}w`Jt+^YUUs-i}43!kqpAB;0z-`Sl1`t()K}{f)v-t%dBfwC|
zZ(`^fR(?7!s!=|LD||#z-R1-+)}-K=kOmL2WrQp#j>;3f<47!n8*(HB_=MP$V-bf4
zt#jmsHW8gtW+OEaT>x;sC%n|c{}L&cKDW+zG31%GK=O#9C+<OC8~I+KT5;$x1FbGd
zaHvPcD7+{w_PNPLT<kGq8hlDBPXyYF%1Z-)chRp@!wz;p?MzdsGtLKGnd};-EQAX8
zad%5YFLC!1L+!C9o^ws{jY0Tm+^@o1gSBSGl4oFc{0^@DFGPpaQ#m4$&BWXfya#x>
z^XcLc{SAVuOU7T5LX<4ypNanUn3Z;(V?LfLw<=a1tH)_kljwKIt8-MbuIDKn(luYN
zM-_9)vM(FOe<)GRkJ2MyuShsoz$F5u(;n*kY_2c~OGx1*r&{@E@m8+pzglc^uczez
z!hjNo?Kp#1^am*EWVVU_J|Ok^EPo|Gkl*?{UM(jg(%Tof%J^I>PawdwLNyj1?T;`0
zaaY!eeEVaT;PHe359cWOIF3t{V*$<?h?sM?3Nza3(lcOmP-5dQLdhr7piphkVNX%J
zQ(I~d4PaQ8$M0B@jGIrInwXIdO-b%U4GQlm{D{(5k9i&`YvxQqcgnS1a*S{V$1ybx
zJM?JhXn*gRbcYAe54}=sccIGXqNA^Z*6h*3U5?6ul-gY|4xCiiEUVdFc$VQ3EIzKL
z`DC{uS>y@-9brl;d5c#LUkP;s>RJgUYi=hXL+uq?$k*lrKCNby?dlO3)u1UNsuW#c
z&jJH;PLH06p<ZB;j^Ht2&oA?G1c$3s@-KccLw#!ILL7w=Y0#^m!OCHPFF-5r4(X$y
zvv*IsUauJnq6z{maf>0{N8G{tf+Ac5DVKib;2VEuNT94=zKn}2nG~|A^5EY4x#5Q&
z%#}Z|3|C$p5Z)m}O&4dB@p}UEtU2fx6`NG}9r=u+(BmB87hHK6$28Rn1rQ@W*g@QF
zAAI{mkr`bJQUJC{SqLW^MmO=l+>c#E>0^f*bj19_i(2UmA&u<3avYj*jJ5wQ%PAcO
zk(RtE$hb`>YYWoRpF{OMFKcpV4cla*G!63%1zpu3A78Th7dU3AFQDoK72H#{xl`tM
zer|CAw4VicaXjASCP{Y+2o}z}rL1>mGf_@^c8yGt+<+a$2qS*{>c!6UM+e70K86$F
z@z0N+9~~dPe)0GaK{p?qixn0=u<RRu)14K`Cvf+~LGdG`C<sqni=XC`@EfAQs80lK
z5zIcmnDAW=q`n@G?gS2d0Z8)95&Dz)tngpM1ru&pd}Sx*Q$9IrKm5rtzYH<{>YFVz
z;FY3;mE4chpCLgtNnPFIs%0CK2?4FCdJkr5&+%Y*%*KP`oW-_K1xoI*XP<h-IxK$6
z_Efmu2PbX=k;1eJKcCI%%BsGy=O!wZ%Cj?K)geUBb3U_Jiy@EP8UU&q%$YwNoCCq7
z0bxX;q6kJ9MKqq_bV3t%tFb56mDOmNK<8@w3)+CbEZC}RI3er5M#-s^U_oc1G1^k`
zhoF5C6?%IKuZwnFsR{8Ccsargv`=|XD-A)aXEU}{7?tjW;9asE_x&YtvrHv4;L6$+
z8PjJPi(`zg7w(jLDyF9sc!5H#3$?Rp4fXD*?Ph^$gav;LKba3j<t!o<f}VeXyb{O4
zchv%%vQ(Fj(Q{)sq+Nn#;G*qDU5xz(4i^l*Nxg*AjU*Nrv-pK(ifeCX27D;a3W+Bt
zzhRvb%MwD4Jx33ZSeK;o{`hyOXTr>wbdDd{=U-81%@%j~=oJ`4p|_?Cs1ofPygkz?
zE}eql6-(7xK62=ViuvUkehzP@Y+8q*;=Jevo|tTb_=xYu?&qEunY!P;I8d^vS-9o7
zx8Vg@2O}3pKY3Rb<wyV^YAAdl^$b}R@_kEWFggDvQ82LVtlmNQE(K*;0vTnEDnx>$
zu-A^coC>Na;XDZ3SuR7J$ctL6m*tLDOzLukcmz@#L8P;MdXk^H0};d0h+ZGrvH||{
zv>1o+I#wuv9!wLCf{OB}oGJeEl<nwQl8X5Jgno>8bnw@gXIn8eNDb@)zJxx)yBTyN
z@I9VYPaVhl64^aDbg2Ysm+|*2`SBX%<xux9=+%UO^QKCIL&q1M@nhzT*kXS0TrodC
zC4*Ledg<Bs6GuaXRP|VlRF2Php=5!Nv8a6l#HJ^T^9M00_gGaex#;}Qk}T@xXJ;5`
zKnz*@Gkv$1c1!{;Z<;dnIdb>BIiEH*idu_0LtTzBA-mvfy5KuVn!I>x@iev=^0Q}o
zk$Fj6s2AXc)j6Byctx$X=AB9(f@nZO4$x%GGe&5L3sKdOE?ARI^A>BHH^*-Ezvtml
zGrK-Bquk2m0c)GjI01(|!L;v~t%kA0QRM+fZSM)$d>UcdpzQ<p*;<VvOi8hwaH>#u
zPe^u!|6++J;iq4ghQtZ?+fn6T#LuAL9sN*M?}@7eFP#@&8AKh!?0NEg2#;C>eQ^+K
z<-sE(Ypd*NtH51_U}d#|QiHfMO1XgTJSy|EiVk3R#s^J@-LpFOWUXpTYgeFfpQ#U?
z7-GU!@^lJmmxPFsGNU+iYy^Un)P(p+3|<{&;h!@@lwmI6`iIi!pyL^tAzYL!<Q(ZC
z2VHz<=2))MvK>o`%!>F+Hi5gvsPabz9aBs#=|PBPSw9Iv4nqS3hIrYp{T09VVDzN|
z`1Gq^>3EhPvV1B9XC5SCPuXU#B_J+o<#^I6NU)gBq6<bjycT;HBpaeSKXx~|&96ny
zN1H<F(j!06U`HWKPkto=L&r}mwok1E!|eO$Y?%f76-EqDtb6H^`~5>cI`z*mxLtEF
z*kb|<6xf4D&Ff8cqQif$AK-8J7hmIBe2MQy%=Fac9S8m;JHeYGJnf3|WrW%&Qhp9e
z^*Yo#)){gL^c{ZhY9+0G;p+^hRb2}o0cF4-%LDTKD1Jj@U~?+B>Y;P@04pWBFt>28
zfR`YPQ0PD``rMb-$uGD|e1l*|Aw7{A*v}0@jF~s|T^25U_iupsDNQ-5@i4QpqmV=L
z4?77zaUe=&$6uOn{D{B`bL5#Dy=9dF>#o<X;~{rhu=d?w^Dur87iJR@_{ogz1f}*5
zScs~0@nD7Yf_*F9<?g8Bb;2J68gA)eycZeO2IR`?V5}k?`@>{ZPPh^YQvjISvR2;V
z<yn;`=9tMfi097WpOb&^h2&9rR<izwLRy2B$YN3qUk3FPT7-Kpn8;%_Wi#Beej#cl
z)Dnq1uIQV*(m<6Vr;$T$)^WQC6R_j1#)OE{%A?>=Hy^8}!R<wTyC|ke&OlOCsP|+L
za^gSL!JAGw)-7JJ-~&uUXP*6dPJ&u`kiq^+78Db%K|YRLk{+Zac8H<{4@l*eEKVQ-
zXLjymIj2MOJyX`b2)u}U@SYiGk*CTrxm*IsvAptl@UjQnbi<IAUWD%G+4ne$u)|H7
z7EH_#_)|cU<Kns)@S?rMas##00|&fOP!taGNjVcI6dJ@~F}-AyT~=FqAL?_*t_AnS
zN7nwwngfL=Z{@>G+FoGP$iJ7Zgvv4ATM6fntI^Qkc&PtFU@n40%C!=JmKu;)V%xV6
zKvs+=_R-4?e|iUu+7H(}SeFfD=%nqO+>p44SC^A2iZ$wbtI(T3Qdp}7vH~u4=)GXh
zd{ur2rNowSh<<NH&CfYEqU1;Z62nE%<RbL!?$Xs2+z#p@8i%*;n1UA3G5FCJ(w{l<
z{s^ZeltFIuBx*++9yN1v_x1RVpEay%sSUCVW=4-iw#UM<edUOHXlH{X*gsWeAF=RU
zoBo&L?t)Tv8S49DAvgyf#{MdNSa=D^&@V7uL5M!=pFZJJZZ9}H`(H@VJu)+sIh7Za
zAUH%<Jb8}~0aJK$!-)*j$VZX05c|LRXYk_ov=Mxm)XYF+>R}(XGY#%W_59>TaN0mx
z<G(=&ogf|n27WA-6t0>ocuewB<*Demqe6-pD8~)orwIu{RX=5YXf`7G?()-*&kufi
zZnViF@7cH3-2-xGdhpbtH)=wG=@>mg34Cxo*$c4`s<C<SWnP4s2<8Ef43YW<%aYy2
zKB>z|(Jlp9b~#|q=K0*Ab2(s~b5{v6*YFz}d}2juGE%=w!}gT5*bPei;WiwIZXl*0
zRq}YuUW$GSh1;bwQC~n|G7+zo+l(>rJl4M1dW^?9%*L?<NDG>wIykUBQ%wYe(PMHa
z4btX3sQZqGRZyH1K%)kQSCu@H2nxmn6E+O!GIq@H!?=hHmg8L8VR`pK-ntB=W3Q9p
zU%Mn)B9Gf~amB2k`xW#(e!#?CqOcwAnnWspaP0H`BTpb}6<NToNO&@SjGoF0$qyb!
z<l;-_Ca7If=LH)rVWlJWdk-QF(?0ykH^O#kdX3mO(>iss3(-%GuVgz&y{=~1mSaMv
z9{oZ%_+WbzzRM7gk>)8j3&Xx>+r+tr&@qMr!}Z*S+=65BQle5nM3{DLbn9>*S9fu$
z;<e`dtd7iM)T{pBO`W6@@1&*ona3~(2LHQ|AJF3Czt3?A=VObJ!M6(h`o|?4GLMYY
z)zI1kUgYl!KI*Ut{T^3LMvh6wVdq0e2fSP1@}uXeo{gLDUbrs>is)|tICjU#va|WV
zG0+R%Y{tZyhhyHIlPMltddVgSFS)^Ecviv1{p&CHFUUG_R-vod%cs1nAqYZn40bPG
zdMXh7iz%wjv5HI+85<a<JMw;H{>u1uvPLp~m&Y%FcJBD#J>oqoi%(>cT&xSWFD0{I
zPZ{tL2a0X;_SL@;t)56I0v7OjdYu~iF`q3`s2cyky}+ILuo#_+-3}VBam<g9Z$b=1
z(NJ9%f$DNIAB?KH;QRiRwN;2g0};7B6Z;#KZTcrNWuLp#dm7G}oczkbeVHul(AYNe
zBfxeZfrTK9pM^8pfdvOFT09ni9Kbx~9Zh;VFwdet#0OGCVMFpBAL#w`=)8bfA+KIj
z;1_nzo}JUQ$+ADVV|Xc2KAN1PH)q9~&3)qo;9nmYXMp_jd3DBL!pq^WbC8e9BAw76
z5H`NQFs~ghZv741Y|<Z09qA&jV(=r~i@+@XA=yh@#q|EHY`mX%9pmInsh%qKXEV1~
z=IOPX-7EF`wK#j@vVyT6_zKV&fE^)y7@e{&i7OUN2atb%B|lzckOmwRF7z1O^n!yB
zM?=QJlKgyj4i=~kEw__HS-^Ig75onF6fE~6N#3=0sqpBayq8gOiUyMG#*$AIHN>lV
za2fLw2@noXIC=s7d@7Q?nfK!u%umX}zRq02N5=6<@sHAVHJ`Fr5O&PZ<e^BGm$KF9
ziS`<M6v!ujWcN!7^vg{hdf$VQ9yBDQd0{^1muIiUF8&qI_!U#}*TLSF&8Xe_qq2JH
z_|#Y8I6-asKEMi@yWtWR0A8fSU^8C>Xd171B;w?O(o^UJ+_n52l{@9X@cF?bQ<`GM
z1mM--r=EeY3Ee3~&L_J#y5JWw2_7P$MSk00KB;o-j3Hv_!_a^Vnn_x4cWYOlkL`E$
zgyy8>%x?tjBuoI$*5Ha!vHdyzc#SQ+5*<)Eel0&?-IXo(ZXQA}kv}@@J+_%S@F$Bp
zuatuF7j}ZeWAEtY?o<CGoPMC;jGT}uP}frl$~Adu;&t(RdI+E9$REFCPs|e;Gm<nO
z?koQLn*Z)rWaXUK>UbGGM?L@=Vzg!_W>yg7;>+xqCw}E%q<k}mLsb`^U?_!txqI;P
z(c_oLdk0SsUV;>0cW3X%?_VDL^!!nHhYXV#yYCv8J6x66MG&J0;yn`O7b?h(d|<cA
z<`?fDWZ2?8{;DkMC>&vpZWZ3l`2CXa>JyL4mncFD?hY_04uZGJF-K!ilAt>7B($I=
zf*O?B?8F2*B14SYD?n-6oXiLB3vc>IWrB55a3*os36PNu!H*n3V25bxYx;v5NXWH3
z6TOxvZ|Z`EH*h}5Z#oyCmz`_>YeD7!&mhQ|nvr{@hUbIB%|vDi`b{#4xh7MX;WZO^
z`Anw2g}Y{RWTws3%Lgn%7(Wug1q7ksDldW_MFJ+WsH+%*l!za$rlknPn(g^`aIGGB
zhb35|oR)<*YWA+#qcgYgv-1mYogvo%Zvr9`+}SzAH?2l!v=`_&I1U}^qxBfK8xs%K
z<^)<iJ7betUj!X@Q9V@0#M^x3rrG3<&kPV-tJbk{jv5s>$<>*Gg2!F{%%|e9o6dYR
z+<};ZPbeJMv5E8O6<4D2%FhTUAfxbhq7dhwt5XaN_xnHsP==@&w0~S#YFjV~jVbr!
z@TYG&+ycD`mZGZd<KV#}=RA(qPaAFX&|D+1Wd0enVOUUJobcbd53Zt`BT?%N6i!2S
z7c)*qVSsKrA#76kT>}ml#1Dsgg>mgJ1R{LC?}oMHH+$?^+5AGu_SAb6QgDbhfP&ab
zobau_;st{u{s3^dPvtxVk5;BUqJt0GV_!vhg=Zp8YmD*pNXt8d!;vvuGaP~K#rbnP
zx`cq$o1=l;#qY*H!ibShpJ?GDDX1?BWA6qP`MY_^?{J@ri#8c8On4Ushb8x0Xgn}_
z+GjsF@Jk8MP5PP`wpauiPbCb%F`D9gNB19sGtDt_TZQ<(5Bap^D?spzr;}_nzZi=d
zk@vf=gR2y4{6`e6i$ooaEY`Hu5wO|I>WXO@9IrJoh2lbn?&7}qw34vPo=Y>fL&pXN
zWY^@)f}tfZ{vfk{*I)BZu%oSvqdH7qoW}4*sK7Txt04F94;c8ERXej0yR`Z_v0K=a
zYWj3Gm7Ssj!187Q9`#AEW^iMx$zTWUDR3>wHwn!#Jcn`k*Oy0VC-h>3%%Eq5{rWFl
zH8Q-tcE6Yt1)OI1ffnEK73Wh}e&vG;pXoNjhJ1-<&x{1V#F70GUcKP^E4I*hYD|^A
z`J~6Nu-IhE(&!ryh>;3^Ylkc`uK@`BV1bA>gua&@vJITEkJq{PPw?uVnw2I)xr+GB
z0q$@7vl>5TKO=)C9;x)p;D+c&A!r+7i6Y&RF$}=zS1ezSgV!3`Ch@FD&T%I8FB1EJ
zt-aZ32LA4jD%4l~QsnO`)VruB*gnHekwmxGB&5FH@o!Lw*>o{g4j1g)%Hj@x2F@lN
zvityUk`(xBR!KxMIQqqA<#}->#_Tn24R27$b0HTFhC8`>&q8EEIMb+vk9vVmNJNJV
ztWwcVglBKKSfR6gK&Ge4G>yLMH&9h<0p;C*T{m~(n=r^wkcUddUzRr5GSjHYaG8GN
z0D|uXK9bzk+sDfQJT9?&8Qn{`fO5aU8BiOv@99k_fkvQV2Z8ylw%-z^=xZ^08&(Cx
zt$b3>K$anIujR)epR!)x{T1p3ze5+k%~w)s;cH`PlDKbe-G|naujI$;;3MF8Z|=@q
zFa2?@+8E&7UB_(MAsftBTpQPCM;1mLKnxlxABupNI{Me1%6%ZjUA+=pY}%jWDp(Bq
zy8+o-&qjrE8YP?Bnb`_lYZNSu(X)YH06v(HhKayVq**phmu*5;>GD*LFTqrjrvPjJ
zB$yl>`Mp+AUVE>QQ#9jPw6|nbVFFMdM^GGMa6+abh(E97$7?g?x;d@70S4_<qnDVs
z9dcs$OLnb~A<I5lJ8F|c6fyw{Uu?Wv5ikf92R>j&7>|}G4V;8*vQx5r#~{eOb-b@y
zIrclr2ISa_UR{3yo9GJ+$AEHCl7@PkChO0!mfZuLdMI~zMSRPi{9d?g{b7)=KuZ@6
zdCMP*g)u!v!PF}esK4@pOO`2-S*VAqCls)o0xba61Ku2*@=55+Iu1!(D*}t*?Ur5R
zei4YGNeA@gO=``N;JD!-#1<O_Q8vpuJu>=x5vaCb@n3Xxx<VUUHX=CBYfT79*f^?A
z^3e{fiUa{v{GG%rH)e;2FHyPZwV=51_Q$~=gl`PT$`1_fqx=bpT)pSI;dXd1-5Git
zd@nljA@|}ix)NW~yK9-Skrb;i*xQ@l<VK<WN0c#_$u%*=xI5I$v;F7Chc9;a_Md-G
zqWnQwd!G^SOrorNIU<C=*UiV`V+p4jap9B|W=gqFP*0#@?U%|gaa<0-5Qu+~v<ZJ<
zO-N89ZRVp3ck}+`ykcuac*1*C5Xp^RjJWV|{9?-CIkf)-*pd7EB^bMrF3<>k4t{g2
zLUj^f3Lrt)DGv&a!^}S@a0J9FIvY#)uQTOt_*6Lx$iXZ(vha0G#!;N+u~M4uW9rQj
zG>AOLF>chrkyE8r6Xr~k{S*`}WmKJQZam?PEBN58A|79RTiOfcy`QmbEW?V&?Zu6*
zy!_;}Kor~)UppYsj{^UNlo61SI49Rqw--3@>(lBiN9kKRkQt1^E12>>C?+REP|W;;
zUk}|q_1bFZLSs}WPHm^eIK42jsYdb@H<}N9X#-e=ClRN3vqc{<DukcW?ttM%U|Zt2
zPE1vSlOh4}L@w^<e(ab27n|eAV;x7nQA770haeev(Rj^%=jJ^hr94eMXjGUTNWh#M
zc&Ism$+ilN<=r*ZYrcPLPYw*l4ifxP&U(^(Qn-tKh~49F(&+Djr>D4Yh(3oOkBlFP
zj~5Z+j%~4KeIPNVEKY<X=7o5<nmb-<amfPBZcdKt#sGNc_*7<xF*1#Mc9&@NL~1Ja
zf~-M+BXGAiQcbxY9Ns*UL{KW6X)`dHn7s|viiVX`H%U`P0^v5}lEnxxl?a>r&yOCz
z{CVf;AyNdNgptVJ1zSJy8@EHr(c!$BlX>t01Nas1QQtVmC3G}@%2D0Oi1?@H`$vb8
z8i07@$(&SZBJ?>9KT#BorRwSz*E03NQR$)}13$T=4KQ{-tCU;iPjui7a?fL<;F3b?
zKHGV9e7N%j^1~cG{{HdHL~~DwEJwF6q_o_$qbN)pXC%!GSuaC;GyPi5o?j`NwhwB+
z?V*1(EaZ`H2lF2aRuX(v48JEnoZB&<@W;AI$pvXFo-oj$emF+af@c*x%j4fPlc@5v
zcqxvRE&4IX%<`5TzPUZU6eYW{1;5N4@%#;eaig4_w6M5qt~^dS<}x5iBQ<Q`YM=OU
zcW#`#V5b)|aZIPr%C_4d%hIcF00Hcu6oj?gt*oc_hGjotFYBsm?fz`sfW=po+bOP5
zVaXzMei8!U7ZSzvC*HQj>!Cn(=^x;WXWHRQ&>c-MS6!5Cld`&TJY7oJ>0fycH<>Wl
zOSeNVdgbMXsT(2r;)O#!G<4ni!?yfqXXlrL-m{&ZXFI*W?zsQ-_Tb;`{hhs6d%a(F
zb_Tu2@ch@Ez5nR#@9gZu_q{zR``6z0J3HU|msn=9s|y|M>>Pwbd+^hB@K|-@s*HEj
z?f$s4^P_KfY6>0h>>Oet{OKFp!Nz{1pFi&G(Q6n575VEPHR=ZN*!;w%qo2^)IgV!s
z!Gm4B{(<N4qqO;KpGE@%djhp-%zogPdszE>2Cl39%Ts*wjHbFrqkVjT_XjTGXY|uP
z0g&drr(pLzF4tp#64&4R$L>+@Y&VPz-tGJ(uMVX0;SqLzh%G~z+3vqfp}+ciKgz3L
zq+U+&+M}g`5xs)R9z1HmBM*RmX)wyw`D(A1%L@f21RXEiKD^s=0CiP=!NviKN3<>;
z1!lVhJz1z<cYCj8p4*2zdyk;fqfq|)B)+=JlU-V2U-E}ga=zOu9T>{py#|81=V#FG
z=n?fB<NRYkx7TLhZ0;rp@)`$Xr}%wihPWo7z(s%o_m%JL4YzR)hqnS4aqF+HRl=)%
z!K;J!IFKI&;c%od2tSg4D3H;nz-2PsJwA`&`qgeg=0W(0|GdEGM=-*lXvrParUvSO
zv^6)OvA|V%HkU~V#o+Q`#Cr_81BTKg=-?3+dc>&fy8Y|rF20)YD%$fJCk$Oa4iMQ#
zXg(7dVP~>20?03S19Cj3p__KkcNvEJYL_@v_;+aV;7M2+tnxiAG|Xv-p0OP_vAxmm
zW894Y9yTMv0f+opjmnjNe98mzz5W=GmZ;utukxsdo9M^K@l5};tG4_zg{oJ(JKvx0
zJxBOF<60i&|GukweN3(4xc=^D@uywr{LvHYd`FcGTg4U9&<d30=f$qA_r1oHoo%;~
z-JqVqPgm^wr$1;QA$r63o`knM?JNA)F7wD?QnedV!N2;Avl9mJGi}bC_sC8_kEcjc
z=%jUJUVgD_h&eX-VAmf`q4S?(s-XAT9@lm?4rq<{LO;Eq?553OCV+m5Y}UI?DBvms
z*8RGBO`q%CaL^vaXZH@C-O(VgKX#DV?;h^iXNOCA&4D-oj32#5Aj_%h8qOc{aUQVG
zjluyuqM3h%1=3*kOvjIA!@5p>Rm85^?G1ow@;erGx@K|A5fDav$RpnSAuuq17r+OW
z;8(@Bz!`Un(|C`wA*?@CVBYg!##8hQ8peSlc_r37Fw`EZj`srQ>3wz?({(I&;Ai?X
zV(eduio4Ix>)j>~f>VI6!;{2EXc|7A4D23w>}eEW!O<93<QKnZj_!F1@K-7Slc#C_
zvA5*o5YKr&CUbps@BDz^*^j|9qiOFkKh^}*AuKvEA+Q9d2#!`(`57I@H7(VpTHY(e
zqJ|^*ueb_+0bU0F^Vi0r9sC%+UZ}6nnDY5n9%-&T4D&C0(KwM#?tihTPh1@AuEI+?
zLoA*M1omY(nzTjd^%o6p4o7Gk{HvKa0PiZC+k5W=g!V_fF_WsNI8#%scEdtbnf<S#
z4R;jrAm!fDaqP7*2O6@k0yG&QLkrDU`Whk(=)U5e@aJOh_WgT*+5W}zB*91Tw2}Gf
z>c{+8u8{-EJu|#UbTA?x$87jclc|8x&(&+iobCO6*AwwQp3L{y#bdRIK;;M;KUNAr
zPZCA<kS~(uRD-ljcm5=T;b<@B#CL!)|0w7DUwQuFB6=BZmy@W)@ay00HDDCB#(_OO
zPShp=sQmaF5aq9kC>BSMFz+bd$l}ADney?YRc3Nv**FB1-!}_;dja$sJ+grP`FGwq
z1}f3zA)c`#52;J)Dz}ioe&j90F)`GfKjCk=PP_&bd(wJ?*jw!SIR#Yzm6#_O<p4uK
zyuS`DK(zef66yC)49$NSmXO#$piJ(T`#4(TKtlGDOd{R*JeJ(s4FKX(aS~z4e<YC2
zT^Ia-9y|(!X8I_NAAj<ar#-y7?YUpyKk5}bI|cGFXS9AtB-lWDyX`>t{4azh_a2e3
z4X@I<p37vH(Kp9NzW1;9VzT0;TuPqh`38-QfAuW*j%FOcM@;<Q3Yva=WcS~%9<(SU
z*n9LnH1zC;RXUx~R359=u|$sdpZ_0wf7YG4(qs*zKZs`xjOj;Rp_C9Z##qJ}<2$$X
ztufuNKV(EIGqMr3*Iv8cs_#@?Jhc~=QrSjEGh;^F5CiJD=9l{7I=q2q-Sj7hLZOb}
zZ18rk_#azWsqLQnl*8TDQQJ(o)|kG7PrIBbNnxNQ27Ki7!9d?-Vl~=$p#(VKlOb`Z
zpM*QPZG<qfnrJ_KJGVqLZ-eh35_h!iIK=e~g<0P+^gUw}D~Hazn0U+IS`5tD?Uw>|
z;z=*bzI>5$0Q+K$PrV9T?ey|{U7a{)x>dQ!C9X_5uy=52C6DlR=^K~(V=`Nb@hx8G
zzeLH``^hh_4Xc5t#5$=lhmUPcu3ub;f%k2nRFkJUHhb`9_A+#ssbgRBkGRw`^o;8g
zw<P2!|DS8B@%p$p{J{!HooC^-<9E(9P#1~tR`L&i`VQZBo^)(NI;PCh(<RKGh>0GD
zPA8=*1-hZW^sQ@HUVL-v)LI1U7AyKrpJr>|D{oQMr{`TxovHuD&;|MRAqhsPU+13c
z)D-=xi@?-}9?6_neH9H*YOy)g%Ya;`Qt5qx2VQk$eCv+GylDp>{0H)}ch&ft=HZBw
zZ<vqi&N$<_il??$*)xMakJ^KB3Ul?efKGHevX>wfIx;G7YuwmHpZGh_@g#Ndl5Yyv
z_S#co>QTwny-$KbB&4O5!6W`s<;R7;Rf!s-^f&3{pW?<i1VqxQm;2;hUCnID<wjjY
zXp$I5I=$3ACYPbZ`^iei8Jd#UpVgGA7xH9RUofg*z<5dTo`_30FdW(JO+A+(Euv@N
zaUz!5`6W7e0S-CWj7@XRIylN}PfqEVIFI~?lCO;iEHyobbN{nb*4Iy2q_+E;CG>?O
zE9E8<f2CKE_=(;{RvYv(dbY;DCF3u7YDh2NcTT&Kte(7C{SD2}cX(usI5YX-y*1CS
z715(X2p&MvSA{sM9?$p_h#5nDMJ^|CUk_KGJG$u3qu$w|Hc0eu)tR!V$B*xoK5(f2
z@|?zSPWiw00SO+fr!SP}DY4i^l+4xkt8PsSBeUp!xa2vXZa5$IozL#cS#4@9OB0m@
z|BIe+F$Gul!tfUhNr$=ZjThU&Q|r))xiQ#X*6r&w$oZ*GmQQ{2$#Aj~AnIm8Ngx(n
zoTxyTdlamY_Z>oAGo3A0XFxhysKbCrIKd&XZqIb?%?MWT&RJfFzz^i<WT$<t=Fkz_
zJ<0!tFLtCd9(OS2c<*V~Y$!HpM4Aa92F<r_P2cWgzvjA(2IO33ef#JqB0BUfPr<@`
zq~|u$EUPf6lHGCejQMTKfrK<(FF!R-CLsX3J%Au@%7^)c=9m(b6DDmpn3QYfyRsy}
z4GI8FVP!R<kS0c!Z|Rg$acUD)TlrA2?>NIMn8PtDeG)`DJ>H?pFx)36OMqS|{I@2v
zezL9%bOD{gEd;e`X!%iR6eSUZDkg(_V*B|DNdisbkhB2hmbezK$m8ZjOWCe8OeT*i
zE<x2dw>x(wh|nO&@y<Fh!>J69s|Fg`GkiQwG$X?g2M4w-KT)GfZ^xWFRtH~G<6X>7
zR|k5XjQEh7@BP>e>#Ra~L<8c4G!3s!sKvKpP4)YNwtMQh6hk)<jA~P*P=!?*?o%@+
z+I_M!RG_q>d!B}xrpBATLRljx&@CI4G)A8~-^VjAIU~xJU?x0`T+Zrh^pz(MH{w7G
z<iRv0*VX3K&)E1%^FK5AzR-e9S5vu8T-u>BcH0tEGsGSgnF@}y1}YTJK-@=$B54I1
zm+*Q^pS!7NfowoIke0^j>hB5HC!<;#Y&QPDX)^f5a|i8AJaWkH2t+MTE(J9$Xnqh`
zUt;8RsB23iFBlVYOyN_i@OqR<d<4m@+srbh^$7hqgEyp7zZ;f(i}<(TLJE(e0e8yy
z7zItl>Pa9dd<2T`3nrDUng~~&+IyV`W*{0tAw&*vcnd4C9SrvMXuU8(bj4+&p2gPD
z;z*UFr=TjPJU%0%n;0ZMZP0hVx3d;-WZ>(^vg&CP>D0?-)RzJsxgZ>biReE)*Jb}%
zohEJN&7sM7l-&MZr*ocJUZZy6mBj#nibW{_-$BR@l>h;6|Jk@6n7|1NY1M{XC#^Rz
zguZa8<zIVE&7}}+Jm_#|>szsl2~j9p@<au<yfG=jiHj~#JOQtm^N;d+wwnw=iRxMo
znCIjkOWFzU9Tp!dlF(9UHga#E4{^pO-rE0ehYWG$Z+{{)c`RS9)XYQIrCLse5%a&z
zL$Z-FB5LnrTU;FNp%eTkmbkWiQlnzJP%rypW2gw;+6uX0Z@Z3*ECxgnZ(-TcQJ76v
zv|K@<o2JSN7E`lE;)9=fdv8M$8w``kMpFtGv9^v-;07nZL_}cwpzJ-iapB?C#CXCt
zn-|(LGi?qLe-I`L5P*Af=n~|&h&X_<#gi2W7psQ-*?2R#t<{+t))fZCII))j2Ijz~
zK<CoHKW`gA$A&)Xn8c9w$=W}uF=nm6MIVO7d-0VZ*H7>Cx8&X)_>Py#xI^mX*1kXi
zU$g}Lf;kbAL6s~Ee!ZtA9KBmdrkoS)13c4Rd&UWk<TVqNy%j7}cj=kyyY`3~QGzYg
z9!92tCi}Ml{3p&WzkjX}s(EVYx)3JFEv4M$eKQI@0ze{PmpV~9X!JpiOqfZw6EOjo
z1xGLA)A*Bgo?U9eUzoZNZAS!tKGYUdzN)P_Ze^TdreTiI?23~xZtK!d#hCGX&A$_x
zjC0#_8=~WSZ%QKe(A|Ej#Evn_i*mTV^v()wT=`g!4>53AB!Ze1g#2!5NCZB2S&k@e
zp-acuPgVb$LyBVHy!sw}dwH+F{me<wPVxGV$efQua}rM5)-;uKb>fXsqKM4j!gH%H
zIg0vG9_Z5$pEReWLLLMtsK7k#G^kF?zjLGh^S=-$8YOd7uB*S{S0dOh{BNr|xd(jr
z9T&StfQBP6lymiTLwSOUH1qnmhB7ye$(>)ov-c#mcWQ@D>vB*`UZx_JQ3#a}F~(k&
znOpEdLckRC(|G2Y!!Oi{`{~FG#I{_vt!H@0mC`G0xg9ZQh7A+rA#YkHvE+QYCnzgH
zDK@5V<m+ob^yPviej~0x5+7qMk5ZE#r6@_LVMKSDqP{mV0&hjnYFt;hr@m#|o>fA}
z-nZT1lNJ#zI<AFtZ-cvZ;+xP#_|NW(Wyc>pBNY9l^_)8o`YCAUT98EbRMr&ei%z(}
zX%O2wj)HgU#tcf`bC1pD3fFbuk;_km1%nnt@?0W?c8dTALXoc#_*^+WYiwiplvy5u
zMBt4qJhIll&`6yt&7aPq&!qx-Y_r;+nhAgPgIs`x=sy!_<*UHv-dD}#5CU?E!XRHa
zo16OIv=>2pkm$x8sYN($?Nj#xvVweMMf}nnj~uGxgGhj7%!kD&XX0U$&Q0AM)=y=n
z&i6%ML&C`aydg^%No+xl|BCCjFrcDkg7YD6%qGW8Mu|q+CRV^b9DK;}jIYIT-Yszw
z!CJN;bw$1V0Pg}kBfdHFZXnW5Kx6ADXSGmh5K(e1XY8S^!F@ThA66x}l8-#anuG`d
z9>yP8MlyZiW0$zdl)D{97|h8-=NIP?>4*R|*O4@}B+?aOVbX*OnG-c1yeR31o3wNA
zFfBs!n9aRUPxHU<85a<_5sj1axI@c&QUuy2p6<;4u%AS&id)1Q3}EQlj~>0`;43ww
z$+f{&5|4ljROa%kH<^&e3|p}f_q>^th8`t80%#0}*=(Aw;Oi?mtJd$gU>L;K?{{GQ
zw)Ee*<30(TsH~41dKu;Z$bWNsFTMYKog~Z7D_@!3@yeBQG5i;5k5YPxn^D)JFk5Hl
zlW0yBM%o%A=KSaBTe#muE{ZEBLvF7nEK&I7u&nq@Ly*0>CFv`OQuvCr+d-+Qo5)bM
z#9R16OJRnw&5%IfCUxyB0vMab>{kutyj@3XOsJ3TA~WJn5VcWaq-=aMn0aq3))&zn
zdgP*<lK-BObjLDPW=M`rB%Sq7MCIM#PkV}pjbz08!Y5wLDl{BtH2oO55X&J(puF<G
zlp`Wwz9J#QPnX6kv;ByCVMQj_Ho>Yl6L&OC6fiWVnn>-#&g=vnUdfIq30yXZS1B82
z?Q7@-hD!P$>=^DhV-?V)-lYj3V0uzpw_Qs#`|R{K8g30;w=8;1p@u1^jE>rQN+h#V
z9N$&E)M3<%OO-3`w}9E7fW!Lv+Dd+}l32<FoDk0z9RUA$$dd%cnFE7s;5D=)pwmz9
zOQx_6$r|(Jx<J2Dj+tpg_}@M8cVhL41A!J-V#So}xP3Zb$#=SX0^5TDcrkQ(W@dDy
z&M5jg+j>Oiv?uS>ZE$TT$Qfdo{bzSt?t`bDC<kXlkto5S)RJIuO#ZtqGJYesp^Bsp
z+-U(Dyd7ExIZRw}M&<>zu22)_tzaTy@bgw88Lis}-<#c&z?~OOhtpQ6nc}YIH%~6G
zl4#}%e67yjoLoDM2!+<rH&J=mdxT1C>;EmX<O}Yy*0pLgO^k4q>gAR4Vdt+@{x@#C
zej<-{SFm*BK*sfwKoR6qVmP1w?WDyk1h%hYs6u9S9KkYqsV#!<wm$gqx>YOZ^3&M)
zRkGGV@X^h(AK8E4stk0)F3~bDN#yju{hEfpIJMHxUGttjkFG5s+#~jq|IemrLVC--
zdA6^Gfh0W?<UgPEL5_XZFSPaeUwTB!1-hFDAAq~LN0K4T2XMDOniz0E+cb+!E25^E
zt=qsD(Z#jW-Cnh9BV}iSa4I%rSSFY$Kz>k(a0Ws(862C1Xba+mZY_MNgDSP6N>uD2
zoQdY>TGJ%BjxvV7v}V^1Gy`6(;34zJV3jp9k<~&rLIlB;)k2W8fcL^#4Vy`t6>|Ee
zL!N8}KD3Q*0iqhzRUb>#MH389{ZHb`b;j}{9v&5bIH{^qeNy;8+<$Ym2mx2?FweZ?
zt%bKFdg-$o{*KVwY+CvO$cY0WVG{+|sc~T8+Ye~DU@9Klw#*x%bx{5?lHV05f9eC=
z7!zjliuA})e{tZ`wOq;5e?1R%RVIO8;R*f<l;zOhs>zR}PPZkwq9vTN7d>Zm>N%Aa
zSNf=7{{s}{nVBwfBfDyEY8B;{yuX7A#NnT_da7cWM1D%11-Qc2?+8q73GKBqEh?D#
z7qYHDr0n0RiY4$h=;#_x46cxNOY~A^AV5SUY#YWS6T0k(kwqIa5#QGgAmKEqc=nTl
z^T}yIBAL4YuxIxg(jiE?9@kTYhRRR*Miit1et3CJoE?#jyIw}dZHr-Z8kmUOfeD6+
zNND(*-1<n8=cu|hQvG4`Yll*@A-4j8lCQ~hR>>-~lZ=X{&=`ZPN(^ENAkWCmISLM?
zYa+fk@P+2-0+73H4tF{K>6_gKsaScY`SEy1D@+An=shLC$O9?-MhJ0<=a`8<N{@4L
z^T8+CToK-QFivIw4}*<2!HLmLZ~pKjh+Yu7%<w)wliYB=pqK$&H1og!X77)h=(4eb
z3QymDKnnZx4+L|}0+`&89HB8D?1{MSn=;eAB|{r>P8=AOB_b&LsGzdc`9rbMOu465
zb%b?oZ%j>ec1`XmbZbDokm7LnK)=-5-B`psQc{;gw{cSlEvO^0v-cF~_!TNu1pmAZ
zbxfl$mC*bWIs57sR=YbNSZWH!)+|t4&d4Uu6V>_B2Rb0Wd>l!YTxi@uZMwJ7BgxH^
z72M06VOt!DPI3(HFTl6)dPC0&Fxb@SL4>e=lh{m2tp8?d{VFq%^<;@FWAKF=5npMz
z$6fJ_3<{#AH{=uujtpG)vs17GkZv!lNd-t8yu@oE+cGETZh<hOr9N#uA~8wg4Q)wr
zSoQy4##-q!W}TKn8?LpbZ~7~?SK4+7hD5a(Kz{Ih+cJ$yo)W7$rhEKzq=6CoS*~o>
zHcX1Qe%4c~YSe>5qPH45*}WZ$4g5TeDy~@u=NArlMMK0<;@m|Ic8h~sUrU{k;^GQT
zB1JkDI+TRONP<`^`F@v-Q@A&kd9X$U_OqpQ=a!zq!Bn=cL=2<+%{6rl+Pa=jS_B!=
zt(1<))}M{kAc9#fcxPUoF?B2KZwS+w@kx1s&PY~wm3=p`O{kP_dk}Pv>~^1Z*u&6w
zz*WSV0idA|QfB2TpK#R|ZVP%MfOv(wW`y^#nH)});u<8Z8VZ>$aP!PmF?%)5e8r>@
zo*YnYoW}<Q;(x+f=)jxr>p}@sydKgH<p{RG&?K{<R&+1gT2v-VuI)TceJc3sP>baD
zl26$dxsg#n9ir2mqw`GaS6@;CgOHYGA=SdqhAo&AsC!K_<pab{w!Rw3pr-VQ<{Ujt
z(EczYNi~$Uwz(!xjUsLFX;x8l%+zxLdYHJLs(Jt}-rl;CS$0jS1O+C=(Y~pWdKOum
z$<8#mRZ8XXmMFQSTRppxCIS*2J#5kR10!$#LO@e>Rqnr#HBs-!k{Ovb7-_ROXj9pX
zn#QXereJ#cmd+?JWm+&#D!sXe>EGkQ6GoFKZ-2(>EIYKn)tc1j=WweAeY75=Op6z{
zNW}=fw4U6MCogZMi!IDsPtr`{0(r7{_Q}$1lB{Eod#I%g3E+zTSk}#qowdG8vzrF7
zBLUFO0CIYbep^|*i6}iu#)+Pbv$g3r)NXY)kl?J5w#9s1<osBCQW6+fQ<zQUjo|WT
zSa)V3XFNR}z|spgAtB>Qo_aGL+Fd!i^f9)>+a+JE$r^AT-8(Cm5-5GS?hesx&D@kp
zU8Z%U5GpIyEJ6`}5gC6ZQIMEi{;`6-qgd8JDOI0o2sc6~1#c{x7MStPaJ?~$5U7d>
zDCJFa4(3J$4M0G?%1~w2yM*ivq-arZtjU7Q?vy=){JY4~B(I|B<6CW4ckZ>=6-Z_^
z{iq6vO{V$%##H{H0fpBQ3CHXW7$gE*I=_2LrC7txYE5-GlH{-o+uHAtJ>U_=NroV&
zh~AknTiN1&&UqH-=T<}02KgXS2b6m+hpvvxI_3Z2I}ouKae+}c3V^qKg)swfgJh^Q
zlF`-OgsN5{Cf_aNcPr$(b^6_m_1(>%ez!uuo5k-ALiOD%`rVOles}+;-yPf$1mqYm
zk5NciA*>Px;Cw~yuUTliuYfDD6KkBqr(X0x!)bzeZw7X(mjs)&R9VPr!f&lY+g0ZN
z78;8U4HcI1t*kAPhm>wru{%V{EO~ObHfA}ywXElAZADtUPiw7gxAqmfTJu$7w`q+z
z2I?H=DpZYKr8PDUt;PaZV++z)-QC!n&=x$IqElyP+L8;XLdXgZp$exFvEFcV9?7qb
zkW58>?#}q!{8lxvyOV_6<P)2Q3vfnQBWDfeR~2#GNOy6qJr`@_@s502`8wGsP`o=7
zQ(;vrk-(t$@s&<JEQlaK*-!5n-m`T;;6tBD6%VoCr)vv+cybG{$2xt)rIB5RgyNgK
z$cPmclem1_a*=%)S)hm5tnvXFDB(}Xr>hT?FB|l_uSAof5m&M&$@8WgzQeQ5l^U@P
z9BN-e|26jREl;1#2L7TcNn!#rp;O}seyA2G(w`$$hzHogp|AYh1Mt4_pNyD@Nf8pu
zxZf`LR_{TYAF0Wekyv3Bm?`OfnL)&Us<-Rudpn}R9RmP@;T#;01hvIdgM^)=1dqsk
zgaq#HKG0p7NAg7+xTM4m?!P2`3EfCrX82B2g$=PN8g46Pv;#<dTzTK^ApYDFMk!am
zD>fIXDh{5J0g15Lcy1#E7S}2)G;Wy72Gk1^$!(xKJQHu)Q2r;qhQvwx?rYljpzgFs
zjj9ND#QN8H<O~CYOQ2a@`P8s573eiTG71CBC>+%7b0vzT5L4MtEMY}bpY?@&QL-Up
z*1XazUDbjTGkIoMPqW0&x03Vy>9K@DSTgD2A)Pn=C3{127!^D;8R^LnEN|4cJ&oaq
zpeR%^XK}Zee69S|Nlh*L|B`_nQUkkY!@Qc9psvhaGoCkOnFeKM)ma-Mb9L?wgYS-T
zU!LGclN;OldAUQlJsXh|HHwr4-yjinI_9-jq^ZyMj*jv@ed2xHaCnX-tEE4tE_@lj
zDpI#Ujp~rCv$jvh-&o5I2YeVcQqbcYs5(>z>wCjRDYgzt5rNRiiXjHm2;2qzaSO8u
z69|qti@HWR_f3rwsbX6Q(o?a8c?)r$E#ilvr38{w6lFXb$OQAqfk)VrB#UZOiJv)T
z$XT_N5?nX^`hvbpKfNj%Xu9k+zN3a2D>sztx472XTb5*iIX}(4o%4)U#bo<d_Re(V
z4?4PHJSEVXA=)j8>y)EozA#*vOq2x4=uyuyS$AkDAjqi#N!h`xtn8Zzo4ofUyj0BT
z1yHOu$gUW7B*4EWPh1m6+8stJpel~a`pUH0_<wy~kw-?69wyxeR3`90%{v4VE<cL+
z7J9bX=0=KZBPAnCglj)3^2M$9%9Wi%|6hRTb-4btY!n?#;cWs-n5;;yu#psWl3X8{
z|1gTq)GGn?V-82Zll9DSJIWeDLZOr?<a3NKeG{ZIY#QZt6kp@s%UtWMJ9?d_Rj5wq
zJR%`Mlpfe}d(b(@1TpoIlBbm@0&9}oCv<Yz(U#T4(;auVi=UyAR?9!>;xqVR<%EvI
zb6@)kX*Tcr55Kqe33m)8KwO+!Eve99YZDV@EHN*NPBB7%nqmf+>W>@fwh<AB=#4W{
zD8`}ON6pQ3I?Ql!r=cih;j87HQTQ+Ct*#t40m#{wpz<|Sl(4JF;8wXZ(NZ=vk=9S-
z!&}|yK%NIuEU*O=T=8V4hS*y-iOEJ5Tj@Bw_}>Rm!1!o7PKiHNqb0l33h1%gAhJY5
zBJ_|(prxPap=Z#m&Os!06*0k>X__8@BBbgQIQT$1+%Kc)B+s?4#N9cOy4lQIN2(#h
zFg|Ri+-nFV)32mz<L9|du|(T`e<S@A!K<E}MPw~EIOkuHBf6%?Ex4H5!>hfdQ!T6R
z5V-O^Q!rr3q}HzC$a<scPI7IRcQi}MQL2q!#hCW7Ps@-kMHKq3&fw3Gz~E%sMOHc@
ze$GCd!br&IP+^sw#E<-gjSb#Gp4$69vh4d3ain%sqsuEQ50LlEq%}fAMxcz<j^Niz
zp<xoYXB!qHyxl6&r9Rtaf{KOcl9>fb?$xQ1K?LO?o&Ww!ZOt>4y*hWMGG5A|s{FwQ
zRRpTbJ3HYQ>m6-esoZf=AGlfnpR`ed4Zl6PGL!C}%)1X9fR`*~Tk}ig%P?dEkY{{P
zR7kGg_>M%PWw!RGiRnMh^3Y3buk;7)<-LEfZ$FcLOM-mM-*4RgU)s3v?nR`^P|5gj
zlPQ{n9)C76Y`k?qoHnt{#oDv~I|~2$QE1^&Fa+<bmQazsLlh;{UGHtLw9-#a(_U~N
zkrp12pM0l+-`Su2&eH$mqtoQ^5wiepPDf7@o+{%1ED#*qCt+`&1`e%!Pl9llSJoYq
zH$J%ZzWbtHAI1LQnpte9{M{TOpIH!3*oNu#Xar~Ow)vNFDFiSD9MLdW@nv9|2uqT%
z+`3?TPORlZ`yjzWeo&A+<L7YHlkxGHcwd#@>Z@+xz}W_8%<NBsNfsuumWf?c3pv;G
zgO%Nd#34NC(5x-+qHT*BYf@7LDWGkpWONeZUi(V+n(pYAt%~d{Yd;)~I47+-R)CE4
z*Lmaji?$(-oH2AWt|Xbky<}Df%B>bMQMppvK}*t^lL-p+SI9DPV3vBSFW)!)n-a4P
z={Yb^852IG3e)5^W#m9$uOVta`j(s@;bFvOFC;!J!sw=4wGDOTi>`_>RZIaWU0Jnl
zr}v7CH>IM*<lgZ-Q1Un2rq7U-uB{JcWA&jWOR0>Ji5+k7PfhA6z9v(E4Pd3a$7|D5
zJ2L7s2puHv|0ZnpNyAoHep62;K^{7}?=G>1?=W(>0YN)yra~eNzx@a4Cel5``IeQx
zCO>@9aS@Cjney(9uTsjY6N!0=$=@psC@~eA5d>B^c_Jf8!ONQtKnp#MnR~4=`)L*L
zwOWLM$^<3J`?X+tWj!{y5<q<QSdEC*7?S6tuDL`x_H{4A23#S7MZA+g;da~uw(9jW
zGO24cBa#S$BUWmjUAukFxA-LFc{lWn=;Mfyp|8aGYk1BK7ueiWZo~}o$S#;EWKS0r
zq2awUg;-w}8x<k%S5Dc<%xtXlq8j%!Rw>CR>Si~&d0q?nm!kd`#T^zTS${!IRW8Z?
z)0AfeK~d-+XjFLtxkuqq<Mg&Dn(qXkzs4=Zui(vf!jr<K{gIvXf{#h7ml3%hI4t7<
zS)86ZixW8PI=Ui&@nL$U1P{t#yGC147#YS~;cR?Msg5Kq%9m<S)Iv=ZcX*1KQg8gF
zsp9J)a*8pZ@ma4)4Vw9tO-y5zG^ZZU>a}6964AH_Tya>pnr=zNs)FqY6p|)atyrh7
zKFP!2_VtA+c4NV=>XMKM{F)9g%XXoqT3iOEpPf?RWy0??APS4R<KBc0s)81+<da?E
zp-2KiySh7G@<L99w9lT-m}hYJPj0vz8>zz7A5MN!NVKrPj?}8$Hub2kAVhfnjjB-f
zv?M;q&7QL>MAaz-l0>7GR_(bqZ-$g8%3ZmA9HMj`7yZ{ej9KOMxM(OgcC%*fzRN3$
zG^i4q8yv09Nv3XyP+E(;ghPPJd^^K_`rV7v?;>-N&SK{JZVg}wos=3e!=}>61m<ON
zrQ5hqf{FGwKv1|lNoPy2<*^NiDYo=t8*p@`FgfdM3Y2SL_*0=huGB@ox>23aUW3*)
zVivY#NEl@X%mFjkaHwo|jap-1X8<S>NN_OKwpA&n6p)H#KtvtYg12JiDlqqXLsA$h
zJY5U^i1H~i=kZ^1Jq*x0nZ2^o;C+G{&<eYV*&Wf3WxLqggPsvVO@;04nVSVHmB1j)
z!+gQEDgfn9+6MXypRkHBRL7Ionu|IK&#&*5k^1QHpsAuZU2vFOnAxw#8&dh}hR{9<
z`VX{w?wuuLqSciH!6?CRyoysA%n?ok*)DPy1(<omyFBiG7ph0FwHBCdF7E{UdJ~FM
z82L;1dpzj;AWp8z*nGB#9a$ln2g`d?<L@WLB$0fHi>V$Vh2kpI)H8WPBdG1G-q=P8
zD7(9bg*hl1kTTof+IMx9Rwli6Q2%oc7NHcp6W1U}<8{lF%D5VQ9n!$j&#J7g!z?)M
z%A~EZW-UPmwZtLuOesAnB(<h9zH;BSk}95t^22`9YpnEP6*-JiAHk9rL(3I$4D`ZM
zLcOR^kam@7sj)1$sfmvqQ~J#T(d0{DOn5d}GX^(GyB)|9wruKadDMl|>KE{)Epl>T
zEzi2t{LcY*3^<&wDdQ@a6-~2N5W@3x=gcC4ejFqBTvP(5d-==%RT2U)@&;NFgP0?z
z0Az7(FvT`&HXGcxp7aFpmI$T|0rq^gba~7V=8xU+MK-(EQeMH$1aQW<<WXoWui4;X
zUXAe=z8I&8qY!yAqJYd92X>0A-HHjGRmL>;@|jt<`^c52^{o~PGhmF6H#b+zli`&k
zJ0xwo#?HpBmEwd>q<Gm-u^Zg2S-p5tCjomPBFwP}B(bP2SAdr6CbK_H>H(6{%Qq^3
zb=e_1gr-mHPBX&(<QV0)VH6P2ODcUeelRadsZPN~p)cl*L28I4^~8i0Z>gt9uTF1y
zw&z~qmU14!N2^Wcy*Hz(C$kOqWYa1{qH^Mrh-*P^^OBcPm?h$4Y^24olm16I?a7jA
z7{95nZjiO-7W(5rbp<4w5RVt$)ROi_uhu{9)t2BK=T@Iu*XNv1%fOVp*FqCxs!roj
zV56nlX*f;tMB6)}BO4{ONY;)u?6&}TT{|V|CM4tws+{~+NVrq$k|Luuymr7~aqd8k
zCV1%1hyaTy=PL1X5!9E=)g<ofdcuyuf5K$xn8ptr(@XrmtH1;yN{S+%vdP9Xz1oYR
zc8(b#Y2tld-~PRHfv@De5)xKz`z!jqP;n&~M9H#kEcLmJRsT*3CnYeh+!BTa*<Enq
z6Jn|wa4C^8Mf{g%d?3JC5qAQ_2+lqVWxO>bUt}s{H6W~jJjcmcv=j*D7da1S63lmK
zUCnRZoPoG2M{RmbBMeT>65X=lp0r(;mjy9ya)jAZ+~BB3#g*WkuDT`-kFgxg82u<0
z$qpe^owq&-bAO_Sa1V5Vacae0UXxCkcx_@wv@}aDoO(A}9GyJE*SlhtplXi2y7FP#
zXB~7NC?DTm-74ii*ANGA2)>wj(M~&o>Kx`s?bv1eJCEbZ`o;;%64^OuDem55tgHG6
zJm*QWKX+T~9=?~UxOe5^qF^Pw9I8hhrH(33B=#!b_yf5L1uPmw2KKoOM6PxN^L(e$
zn6sgIxnHT~_UJm>kvtyZII)v5)=cT%_kSQU`)-L@NzMZ?ddQVQBxWUa#|E>+C=ium
z|DFKimH&K9vFgq}%WeAO94n=H3a5n-BZoMxXf(-x3yd3U-$tH>2x~{F_~R0$tG&}N
zzz8^*V&Dr;Izu>!13?o>9|n?^w#ko;rofX^Kv0(TDwRl7PHftaCB!>fhM;PxRY_Z1
z3fM7(a$Bna$Pcq#gD{Rv_7#EYI?LTiY&j$|B}pRKv?LlUM=2FdRW(7E#Wyr-s8`y&
z&G+oJNgsL=bgJkSYISW@)D}hW6sh!PUe%S38fm#U+a@8b=#i@^VYN(jTC4+`RPN3{
zm@4<-N++tP9^F|>C1?_1>d}+FK}X@?D)lmrp`agx6I%&zECg?;^2;~mAxr>Q3IPGB
zfdkWbTBp&Drd#nS5;1?36pS^OAB5C336!6f3YP&`L?&Kx=D$3{n^m_+)rdxrl#)2L
z_&x-EgimLhkU|0nQHzf|_WFv&g#YrMc;jA^UtV<`Zc9i|+7<^&nUJ7VNuG3-Ty`_x
zs7peSWfflx4S78cmWZNP^iz&c0fbVg7^cZctODRl*+W-ao0^+hw8D_vw;X7)R>3)<
zAAEA-yAqOjw~!UJ@UGQi9g;#0Lt2eBhHVOVP*UbTk`;-?QI;`w-@(!#I9v(y;WZuX
zya(FH;rwVzG5_}a@b=tjhk-F#Y2+w`ZZ&0#5R<$b7`{CA6<OYjZFB~?M`JV@&t+j=
zsFYPUL}uY*aHgy?S87!BEjD(Gx~wrv5JwQRvpXkQpfK<6L%VJ)t0hz+f~uHYGcgrP
zc&k0vG+8dGtaH92x>;9Hjjvnrh6dq|H2yKk&Ua%J8#TEJ3oYet#D(rub>@DE!pI7X
z#x3WoZdDS}WhGpOS3l}h?w@qZ4%uZ*G-IX(>57*M(r_fZZG7e0ZPejB(4j2Bp7b}+
zi`6|E2e%SgBbl~s768}ucDNLAkqj*!!85v3!`YDGO#i10$7W!fnxgfqV`tJdOlA}j
z30}IHQFeijN!gOA*wu;srqZP&XD9*aO*TxCn4`-X#lqmuVs~bGUa@2$OXdfuq)2Qi
zf2DIuv%%drR7c23rr<l)XABA+UTeZj2pg5xeT$BpBqnVzO_d(VqkGJjPC_#-OzaAv
zp7FF}#qtRP`Ot&C;ivlQkS1SlyDg<?>erh06tSRD$A#=%*!jaq2i~Dk<m<b7ZPHN%
z%80BJfzHUw^CW!fpl9jGRCs7|QFnc`Xnr(we-vKpG6iC_KXzm;v5-&-9eeJavnQQ7
zU3aJZf51L8q~u>rl;_e?J*Zq7v!tfDBhoML?4^-IMvx7l89dMqqGlZu5cKK&nuc!X
zh}UsXh3s+n(i8Tk5TOF2FaU|cUvq?Kj1tj6yoo-Zc>^J%TDJ6tomx}#j;CYTBk%<N
z>!7FoF+$1!J5+b{WU72!$7k0r1FWjvN~J4;(1gNcTshL;0>EbQ-)9XiV?RhX5e_mW
z*qg<bLX$*EHnKiELrAVviFAVAVu_#&OfHcYNjU&babdFr<XTo10WBq_^9LVD?V;@5
z_goyolz8dz7)=!BV`(1jLtUAV<rcXzhREiFhf)y2wk`H$?R0Z?v{C?`gZ!20>6qTQ
zPx>}8abldz56u1A=mu;4<a*zc@QA90*~Xu-H-0g5*+_UFiy`9VIJhnjR|H$q`)+~y
zNrj$B_SK?wtRbzVIEjkLdWpFgrB>=qg^-%ly41mkRBl-yL$b3nt>1Lq;7A(O&1hN6
z$P|1q<~SF*=U6__QR>=~(0Z;O++<uIrnRkrqIbjrnx?p5SiEP__fR}1w(}b$Nb+%*
zv{lPTb&3al#e2AU(27XZOj~-_NJ_<@_Q;KPTgX(urVC%{t0Nh>_zLGV93hl|V^3GQ
zs$?!!Jw2=^ItrK*{_mN&n%jns)d`U$REN_5W7D0iB*lHMeXX`st>qY8HBf_FS+wbd
z67Y9D9$ufv{?HoBwNRGgtzneY?&g|w^RlO^jT<E;ZhqFyUwn8&$cn*1|GIrVD?kb2
z9Me#!e#`DPwo0S3m>fcSJA6z8ms-`+$IRbaDluDe=L_e%GKU0C;0hD`oH~wnE6X92
zdW2d>R$ZrLpT8W!PW~1rzjYi#&}s}tP>z7)CjihzcI5t-3!f+w%Go6jEWYj7fWE4A
z^k4sVIyWPRfT&DQ_|dbs=DyfOy8CovmgA!Q6s<u_OWbPWf0Lv-DAr0W1koA=HZ;Mm
z53767BUJMYxO765+D!6rBx3X{GOMAsFECa$eKfLaTuEk0MpZyDxktYMk+qJUwD5VS
z=7AJD96zdJ&y#Bvf4gi@2VeEtzHUi!W}u8}ET27yO^+W_$f}TVM{V)`+TA(pN27(h
zzO~9TtYA|_YX>E~*10C9XXMq?P>&sZ=Qjq)ZD9mRB`|s|QQvUfHbYKOS{CiG4dnxJ
z<jxu;=W|#{YmyL}QGjF?vIyFrwq9VD#f+qHq)YM?3L<13>!szkcxg(BONd2A;0tYy
zLkF`+Eny_au1`XOP->awWPAe2YO31m>PJ{)jYm2On!AFG&|g$Qv6`PA7zxJS5^Hey
z=iDgN{6as-uCM-zlnG-nuR6<)X846JJ*tYA!2*JX?NR7}hsls^GWlqYHTRDxNp^WV
z$*x@g^CY`RO}pkY=7<um5Zhd>St25ebp!HG;$MfPRdL+}`he@|YQa((?RioMqN7(Q
zhRxP2cyumOMB^SAb4szvyi$Jrli7h3_8n+qd`3(TzzV4WRDN_zy|VZ7d4Qd@>1%v_
zur(Ng<_j@%*%v|I&8@ogzQ})%JIZ98boA=)qBbrgbx-CUI5wwUnh5=xd21fgXt=m@
zQq%+w>Pbx1Z(y)mi?J2G{hhVhKGEw^?5l-A@Z2Rq+QeTSvx-)k)vdzGYaGX}BkOK}
zeBaBEW^`S)d$5BNFn!;V?hVz@LX+S%Y4;wgb|!&hb{%OQ;+~x<%v$^Fj<yXhuuv<V
z$^}ohZ@qq6XFfL_^QIie1{r09=>sICnuMY4@~U(%owV8u0058U-|wYmAd(Cf{0d#(
z9ldh6;PoAPw8VmE4ydKyR-)W^CZhRhkt%IJh)wbUY{posz~rrsAYR4)J)zl=sMp1`
zRUuuEeO+0P4t@8R6R4ZZ7bicBmccA0F@Q4eTVs=-HWyxGQ8lD>q^M>aj=h?-p^-#2
zo_LCOwIgrX$jp#y6$!yf0T&|QH|f<spXgL6liHW3VHx0YfQj|eIvlt<JoN-rDZ<;;
zz9gGm7033$?(a~$zc2SbtC?3a7pW0k@l5v!<CQEl<ynJhOG!RZ<cJ6e1g+F?rg%8E
z$O6CXn_n5w9Y1fV&AVtg8jpaPNXnC|Kb0r&tS$^u{!X7vu~SbG5uyU~?uo>f329Qk
zuU2(MvWk!}jnUw@oU2M7da}JuVZgkgC5vR%K)LU}TWQ7SOdot6`@hrjp0xb(y~cP6
zb({Ju6<Ulbt+L7EBec0>R-=?q=%jf3xK+G$dEB-9<Y4`+342|jhrn~z$v--uM1luF
z{>m)<ciR{F0q)(t>|yS+y7eKO<pPwTUe5JNC`S(ZS*Pmid=m*gBL7_pGvUj-(rB=h
zS;)JyyES=imR`26nh-NScv9ePs8XBg6tTRP87<@s_G=k4YA>EB%7_2uHV@~rS-7LC
z21mL0q#Qw_;Tbc3`sOT_9tkw{=J#hYN4CoWlff4ECiw-F0sy|jSDVQ#j~5|+B;H<W
zMz>*93mOSXj}Np}YdhAfe)i<H%l&hoIx=Oy2exgc&*J1sBa6%4{*Fa7O418jlt|ja
zlM(%pCqq5A`UM|!^kY6~<N1PTx}Tz?40$98Rfx5Zl-sS#zC-Vi0Q|s3LAkFbmh+y^
zuF$T#(k!PC1JMSp=uhpjxnBZ}I6mH*B%xXaR2EAMELB6VmvKjQ5mB>`N|n&qrK?E9
zu_EM(ZXrLkv1dD442NWCODZE<l;?SdVr=N0a{`Z^^?_aS=8w-LA+VB;b-_<FySCFs
zj6*|!<~^nZ4|8I7Nw9erD=6IPX}`5*@flLQCodL>;kBw7P<}Q`VQ&JXGc%|q9#@HC
zSs{HI#X7?NNW@-NMdwuAhBuOoj%6>7EH$Lx6dXUk8Z^SR2nTEXWLG4>yCyM4LY?b{
zE80`^yDdo-@zt}mUL%qRll+gbEMRkD0up5%c6Ccl<d^R}f_tf=aLqKdBB24)4yJ`l
zTe?d|1k}ci?1@p=m~`*h(a@*>b%NZA-lS_*(3^HiQzcK&@!9iw9?Gn1Q4Gdirhytq
zs0H@<D)}m~>i=O+DppUHv?p<TPnxtRw`9Md-&3KKxcbv}zR0UWQYr;)a98SXtve^c
zd|T_#gSsvu=(3Frs{r<duAFdhXsm%|Yn`_BOrR-CHF2nGl=#6AEFBF}J15(Splb`n
z@~G>VF)}$upLayYpY}c%5T`w<+(0rKDwOaCMXo5j^kM{wb`N@m!~11dj8E;6mG}sh
zReUh@?z|#8#!abA<lRG>iF~?_zxfcX+NNWXN<uRbPt{3Wg9JyS{mn?P(*8!63X{Lp
z^c;s`U=A(Opa{SEK2rC7J3|0YO+t;)X_Mari-i3SvQ3BGR6fholx}fO7hO81Tm&Oa
zW?LS%s)uO<z0WSGFEa5Q#jKVlM0!JjY^@B_fgyP337#-gbR9P)H^yz-rjsPOk-BtR
z_{lfRWAblIjc**8_{O|rdamd<KoZKLa>{yz1jX*AqfuW4m^;vxtJX}xm3ACOp{9PJ
zb9T^oe81FTzsw1Xt=6H2b_4T`n0x+{{s3Zr?`d`WzCX8R&yZ8tD-p16sN;Gh+2iY5
z_1|xLavb%f*9`G5CM&Ys0cgq{oe@qm@4~C#9%zbIR0bjHR#l{PTHT(rqn5;ELro~P
zz3+R~<eH(nXexK#8D^0%jpW=iN{A%?(^NUJG%7sMWJ(qaaRR~gPN3wV6h98^?A$lH
z<cp5UWt|ho@=Qa4!Ksx6?4bhq4QZ|~mIZXuV41udo5`<Bd}(oSkcykVV%n8iC08cM
z+)Nk#{+bZqYu9DbKY|Otm+7j!v}chY1PON7pB8rNBwRKsWj~Uzeu4((Pi?$Urr))5
zb%5T5o%+np?d^>?M<YFdFG#fXwv?hx6%ybMps@$Jlkh+`AVsf%U~QDBFcTSPTVO2!
zq|9bKST_<ywVDETG4=+S<hAfr6%T|&LwDcFuiTnkF-?&Sl8YONQS-14eU(aH=#qoZ
zNycvHuf)EMlb>%!4e};{V6YlkD3NjQe+#L8y1wz>lAJ>PJC^@W&^UaD>u6?vOy!*(
z`D%)152PF@_u_fkww^10Gq^PexTXW_iVxj<zUusJO5=cv%uH9Zu6*piOFuc8YH}!b
z9LcF8wZQDh-kNCMkHf1DMwL|bV#A)9nYb=1bo`TgWHG>I0gxOyyihIQN_qKd-9mwo
zYS*HFT;M5&z~R5z$>zUP&F9ZbyZx<VKC-MU_Gk{)c&~1=%r>Q0fLm^#ktmj+wUi?*
zZSaYP%^UmMmdc@xJ^O+4Z}g%$2uNrgye0FOf8Y7XYmNFdjK*Z|e&qan(QBR>&c8l5
z{|vXEgAJH3IMR90LU1TaM&9H~jX>C7d1pl*rz38v2-40u{e;FkO-Ny|LQ?a1=ZFmj
z_~~DI1owf#Sncu%O3?hM@pp@^C};oGKPF|5LC~}iy+rCoBd0~?Mkh$8Xf(`^*wPZh
zDrgZXOm&%14RcsomS<=-vA~FdVDa6NXDmx%JP%3#&vYL=o8VxmeIQ=W#^%ScGzpI(
z8lS_`B*q&cPy6I^!@l`BUN+rXDSUTlp@HoJ=J)>=QMtj2fr8)rx!^Zakt_d%m%N2I
zu=D#&W$)!EYN6B-(z*rNk&IqED9`aIPM;MB1AdsmF5%X`u>(+F$M=(ajPHl`5BSI(
zVN~k+4A#CPVgI@!$yD+~xvQk&!CAs}M`T69mHe@9Bu;2KcRF6K)JRR4xJpo`mM<Vk
zN~ubj6WLs>!BC);>Ob6#qETwQKaxdL;#`myL23C=Pomy1mDZmN>?))N!|dZ9lDn6h
zDp9V8xnRBtRaV6}nEilBBU_15*o6sA!Qw_dqm<HFo#=S4-{;hs<t!EmrNIn!0dCT~
z-&>;GDFV>|nQ@=x-sO|iNx(zqenE8|?ov9_>p1afBtf2<$)TQ0SfozRKQHll5)>kA
zQSx~gQ`(nrMt@b3AoTtiO8fn!H75j0#z0t@u<bxj{KIz?LHr6=W$sZODMx2>SD##Z
z9t5`T92vSf!d`}&#yR;r?KqT{z9LzEA#t6Po&XU-tbsJXF@clkiZ4W}tkWz`E~_Xh
z^#YM|uAmk@I&oN}?pa3n)Isxr0Aq)fetdD&Lu#mLxOj0<NHE$)9@+>qk3T8iBZxSY
zU=`<_X70*y$q@scDy*KXP66;e@`0>RL@>lHM%`rMx&%N&=MoG?QJzcC!z1%=lsu++
za5TR=KkAnd-R({7QVsOdg_X*I;?oUOr80-_9(_%YhXxARTMSReoK@#@ftAV%o(bfO
zNg_)ic;b>OL1nh=+D*-{sf^uJppd744-jpGo1@HtH6xxfjczE!miWWt2i22p!$NbF
zV2E+GYpymlpYvBJD&}_k$7fe#F*c^c75qqy9%xqtJufY18q`z<;|v(v1}f8g>P>I8
zEd{0!sZXDQe5jFUgzn}VEm{s#?Qrp;j;=5qjdRI~_7&8Z-=dYk%%gecVizkF2#!`I
zf1q?^(mjYvKA0b)l>L=D(G&YT)h%-`EX%nb?>hCnk5C|tg|_SGa<j`!<SK%D*lvfr
z%SM*Bre!jDn{+BeUpjf&C`_3}1iA3}yMUzD{>(qewo+!PRR~U|4lO9EVlJfMh*@R`
zB-vOkqInfo4CRg18p$HX^hglPdgrKzFZ5!SC*3tq;Osfl=eTACc1oT~qFbshz)D?*
zAw^4*mO+!~-dPCsy&_>?gFrWOH)M!?xBmz3(K~_k4ONL!P}^f=`_@&z2a0xw<?AVo
zf28Y|x1gT*cv@?Uw+gpYzH`nvIO*g9Hh<9}3AJcqbYv|Dt%x2m?y8=(1cbGMUEC7V
zrdJa{9{<Ek#P`CX<6xlfOTd3flJ2H=3MYj-rs^5MKo;1g4>?01ROM?EQ1&PgRxj<h
zI@7+1$i>L^z_WNcL9#umN+xpZYl@(0hy^Hz9_A$*bzUZc*auBsKNtAfpEGZwODckh
zD@L>P@HW$G8@5RmLXnmv$)EZNyt^|wET)j--F!3vc`YrQ@N};&00h;~B^j%oWagen
z*LDm1e>P2wh6Jkc-zRe7=B~`mu!?LuP`f?0o~m=xv#TM)#d=SIBK&*8oG}Y8#-a|0
z1Ss$><(pLPO{C=1yKGv{#vCcIS!9k=+~IIH$t#UxP9c-6+*zTAVfQC>zrXI4SjoQ;
zQnLk;w;UrqId)7~Aue7CAE^Q6Gl<M%MdFZu)mzMZs>Q<Ve=bjlqoSIm#jeV+%UszL
z_JiF`I=Ow4GpJVVoxDg`qjy(&!JIK6(p@**Z0&{6<YbH$9+}aSjqR_{%wO7u5}k-A
zWfG_m!|WbpcTpvX5hI4UWG-SoEPGF=sO}{oLgDG&l6bexl7+X;B~l1#=I_y0;%F=G
zCizO0EJTGk(hsUqm7r5yh9-y7j&lgHhO{39g<O1og%Zy~YwBCddx0rEwaCaHXo0Yc
z8<XFR<pKwa<<W4_7az$vCYs4tkV<POj%o+htJOVh#?u*<B$1=8(z5oku4PgB-m=qa
zy1G;6cnpP+Ul0B{lHD>(%t+n&!M;Flbn@^20V<l$mZk8Vguh%0{to*f9#q?X38rDZ
z?WztYkF$>nE=Inol?Gx%?-1!Ox<`Zkt<up$<OnHTcb!hTxu?5?kFrG6-z&{&=)#lR
zZ%V%I`>s@K$^V9_*W2g^sn@UHI|_f5mOk}&ee1H?KWh9PTnMh(c8WSFO;k6%NW{|n
zOw;AS#JD;aF53izI1OgHPxwK`NX;_3Bgxdt)0gcNJuuT39e;B0M%V=^#w6Ex+N9`D
zaI~zR=#;@v%O?v5I>Afz;vRMwYRu&ayNo%WipzV{%D8drjq3`iqS1lMDw~LTJfh#=
zORJX3zjV90vnYIXNFZ}@pNuV7dwUzc>dS2VXnbd9&fQTQrz(w}WIm==Qf<{{$*$c=
zDSYt8_j-7$N_?&bCi$pUOap2Y`>Hy74%symjx#yC=&BtO2spG;LFm_~FG)rNKrB5w
z{nGryA*rv4X8DCrD(LBy!PLmT`?up=Mu2XDu~YOF_AED~W-k)iRE4XR*Lx0KE?jrK
zDpBTSE9<5+cRx<3lzL<=vl~O1II8jv?3JLAu#|But6ao7^GrWygm#X~nH~)gQl9NP
z$y0&{^<)nHPlr%rKsnup%Z61I8-~$2gbspF?!xhoVfq6dw6`dQYk|^E@e+2$p7qHJ
z`uA^iu*udNYeEPn_6ssj+t()VRg)~F-cGP5408L9T!!Wavr;&7=(V{J;qTb;3t!8<
z6DoUZ<6{=5wKbkOtphjD5JbLcm=?7?WpHv8<-|!3P}X@RQ1P}vs~N^Ghw7VNH>ZsI
zdH1YGo1pfJ<EEQ=&I&HUoFdnik@BoG*~~i)36;BM7HFSG+XnZTk8i=sd1pvBwwROG
zv(e|IssKjixfA310C^VeqUXr-2Xr_9!|$!sy-YX#J%C)Rv-6yipgh)4$gq(wU~jAI
zYs_*W1KO32rO>12qE*q$fODCENoTK@zJ>?t8`&UaSLczkdvLE|KiOWzLF7h{=l2G=
zhuo?|PdTDXJ>sCx!iCZv7+DTV^VOWZLJ=nk$-Qy+#|@B?0c-gC_c`;kcNli?O?JC%
zbNc#|ocY1)Pg*Vd7A`D@M}xMtOnA8z!S*wv@j!uV&6$Sp3Y{hwTfJJ}DtbEKk<Q#1
zykUBFsCGY+uuWo3CI?4v+_B3ZE7z~W#JF%BGX>Wcl`ozZUkOU~Ntd2+q#B6F9c_P;
zj7RP1vY%2YxskBC((48Td+XRtUN*!Gdd;78SLTp}BZa21@22N)!p+4{pe8#Ti;SR=
z1~>kzZc3_SvJXI<#ueZ6X$nB$7%Y@{^yv6|hhHqQ#uqexq`L!20q(7z3ZC^-WMyz6
z_$J$RumJ776x~;tv6BZ-eGlIJ-T*;BzQ3eVq%=UJjOFl-2Kw*FZ%xy_9ed7Nv^Cur
z7LbNjj|iYO{3FKSVrRhS;Bg&!;^mVBG6H(Wa=evCTCohxP^VZJ5*-a`)8qMr(<~Ou
zv#UqKpG7QQPZ|eG*F<PulnaPozCdfl_hl3&&xjD81%^gSz&q$#r5n5Rbt|N}EJ}t|
zc-0BXBkRK!5>q(c7fY_GzI3XAQ)JHC8Y>hp#A((7L0%}H!D&W^D;%58s{Sw(J8N@m
zrLE)E;*A7`K{!EGsshG)*C;3-Sd0opU;p@-s}5~%%3vx{S)p>+slPYW-&=aTHjicb
zN^LTDtu&YJb|!t=+yKFNrER6%k+7;~IY9MWcN(gt{q$4~yTsunHw)<#@yNUDh35!L
z_W(**FMn^rd$3$PY@n#{;b2aK*;&Fub+%U)dtPE-147`Q{9zI*<QxW&g<GWv(Hj1D
zgPBU-A@e|RByAgKt7W{4<bwdvsMiTyrEGPIOIxWsYQ(H%Zuv=>^(}h`)oCYvqT4q`
zEp9Y&k2DSRf*IZ^%27%ud>#lIxZjLjP)8Q~gaiyJB_hYrkG#rgNbazMXJrfzMAg~{
z$7QtfGF|J1=-l(O2g|E9e=u*vbeQNqRINf{BgP!Ae&cqfULFU7ODq{&F1zH2;5N{5
z3>7Z%g?#@K9mn%`ivu=R>`odRgo@2##IN=n->OzTK@NS=IpZt+vPpX!m3R)So)VkB
z8%>OE^l)U>AKejt>Xf(W&ZosJY)H=DBVkdkco&dHZ&n^oZwaA&2XA<nl8IP!WFp2S
z7#A)7UM6B&W+JW||J~_>&q+1I^mM`T-%J<W28IvDuSSkEy*riHmx;_bvS;3Kb@C(u
z>V?}s0E)Bkf#O)=OZt&zNsWJ!Ac&^4ikgN*bAf{xQbT+l5h03BfFGse<$VL)izr<x
zUjj%721p)A%=Yry1Qjp`x%h_7l)H^#N*OuMlP8ycwXfS)Jp)lJ2hbjT=u&cHrY?=|
z&tMc*;Xh7~G=S*V5}iIF^{)9JF3|ShSs(<1NtF@Ad3$nYX47F8#Vyu%0GEp%&0G7y
zT92DxfMwgd8-gGPNjT}=-VIuAA>9G0m`43K+u$?&>j|jVKKLZX#+HA$5BC3q_d#Fm
z1G)oLnE-w9Uvcr7;nzgziUexpelH`Lsw7rZtex_a%j-YcB*VtfH;HhLTsCN~8!&0g
zB}ed7+X$r%SW2x!UOkF9=Bt!1N()UrsP*0;90t`@UL){l<<Zo&sW|790(fMfo)+&F
zu2pyXAPovv8fMNdMKd2lm$r6N{H&!S>tc*wd94De%GDJ1=~IDhn-1Q6q29{O!^7QQ
zO+8c=!7g-qAU5}I_|Yy><?wVkM&8U}-!{*sGG@GgA(s)I#Y&RFN=0?c$6L5IQu_dg
z<Qp*oT3r@>HSX3fU9IJ<)?#RlH`FGFeBrzDEQ7tLvJ|HnI9+-wR?|v0F0r<gB|!(T
zHzWlol&|RB#eRZfwM}VhBe2Cn-7gnO(3|o;CDpAuDfNc4{`m|*KqIN5s}HVqAK#}6
zqR`^DDz%i>vQQlBVa=ofY;WGbPyQR8PySm(s)_N(&yxR+f13OUcCCGqv`j7Sh#wV~
zB(IA1_w(yw&|1NPO)J3+(IadmAPPTv#j~Fb^vi|#3sCeNul`ofUSA%<&v){?uMXAv
z-JvILJuS~qN})<X61vDu!M;iQLzPSA%+(bT$MSA~t&iyr<-Wpk6zZhV092X43@!BJ
zwnwgTr$*q}9%GWmN{dbHNfE+O{iiY%NvhxE9+MLK%4>>!E7gsv4&en%RGbSf>8T~3
z^7QK}0wNcw-HPmP1;?;l7n*=duFCXP(%76~tt%I7C*o0J{QKk_tcUYHNQYDL>R(Lo
z66!GS(bo3a(w5>RxMXK_@ub&Kq(wx?&#!Pd3-6>Eo^IwYbj`>*`0P7Nxs7;EgU4M{
zBHpQ&=^J0E2<+^NQeC|NJb5bbNS<n;;#z9L{9Jg`Ycs0X)FtbhNY+pGPc;ZwWTrEZ
z3WZ2h1gGH6Z#U0K$q*}rMwreeHhxPd)|+}amj4}q(d~n0CjUZXZ^SEAgG#qz^AS$3
zq*i6kQ5tV99N+@>slK{LYW!Va_fJqv+x7wHQ3F@4y|HgWU3cz1)!~jcV3XbVEw<?7
z9U$|$CD&~gdfTm8Dn+6`L1mY^<M5tTsvK%s`+lmWgjM;nS4d7*>5HO#jM6`&8JbAz
zz+{m2X&nQ#b#ywP-#(-AskLX`zJDel&m>wZG9t@Wqc!g#;QD-LG9^kPJoz9peqhpc
zLSX*v1X*?{#uBsfnu~#F+GY(0{wq%E9knQ({8}{fX*Y6xwviSwi?-=KsXM~z%C@47
z?9+R4b+(Z<MG{DYp!PP>%-;Z6DWSsfBd`GYR_qxt7Ja79p&rPHrUUOR&M5OhJ|?Q(
z1JOxb?pd9Yl{{N|YG*9jQAVCQviiR?GN#h9`4|m=)1)tWAQ=uQG$PaGo@Np#1IIbI
zEDml$3*aCqgIN1~Ob{4~qjT!=FtGqtQ$Pq6x71}Ugg2N%ad=kwW)^u0cC4vEx&nDy
zMCa~c3P?fV;EjbF1i8_yYrp@bvv9>fX_7unE@IS(+N4-gD1AS)eEr-z`+oG@`%BMa
zPY1#MZhxNXbobK7;f>F>5q;MNFVX24oaGzOq#BP|>Mx42-1?=RN>Gk=?!p6G;L@Ak
zr^E}Zj(B00<d}0O-d|=eJ!t`B2%7gK9`JthBD9F-q?z}GaUqy{NkT<G`QvM%<#5Q7
z^opKz=D!?;d>8*djR1cTw4kR)-C;=c-+l4#*B^#8lQ3pCrM-^)y9{%#BQt`?Gka!F
zN>xlIKD?_F*(yX`_+YWco__qeBd@oT*O87(XY>i~r*~>Gv4JLc@FY92t~S{0PA`Mb
zSGGq1XFRyqHtMK$WFAPt*LdZF1YKGrX=v7~kQps}!Gy%XC&_gE#Qjl|=_djN%AaGp
zor@DMk9M~13MgmmW<Yrm>LY~-eIfJ7H|#AV`aNvS`K_k$vzx_jLNNQP3*7e{vabu*
z@XkvZv0LcN6?a9oNq&o{vt#FJu3Yr`#wyEab<6ijpH$xL4L=k&)#w9cz{q1pz7XEg
zRqS2sFtRM0@eA>TLch_A^ht2I%^mRol<$<Su)^TNA*2dB_+)Q&HT@*$3X(Qpb%lxQ
zq|w8z(k0L-gxNvEd+E_QtqJ4k!i1ob6m~?q=N(BRe@#Q1PuYJ4OgcXScp8uUXK6M*
zl~0rH?;XCSQ-gt^z5TBR<1BYrtg^Lj(+C~xpk4bv3r5mfgM{a`g)u*9V8~#dd;1UV
zeg3D%Oq1*kIJ9sLwKDIbPsE?NezP@>%TwPLjF=mzhPu~6)#hWyR8W>Y^qM?0@NR|f
zgH{cO0-4<y=A(6SH~@!W_Lv_9r$~}WSX2)whUFJ{=oKI0qpx~XxN&+lnj4H012Uyw
z(+aEc1f(!&SKVKb5V-IX4{DzeC$Q)*>M{w_=U)isK@p&??R{j{;=TXRi0SV5lBaLI
zgC{Fa?-YNA7SDM^QdE3DxnP3Y>a>`epMmD+%lIZ!OzwM6KYL}brqg0WUD8Bef%ZP}
zD3smDth*-@!^d4&Q~wJoG>%e~C=OOtNm@<CNkuSux6{xzQ;^dA*mOGWnsOxqC%$Hn
z0r6c^OPMsh5if*Hv7Q3niDj`PjJ<Wyz0aRoPdu%<l;kiLNyQUSJ-a#oY+>M$<o<#6
z><0-j&_~P0qnMH{qb0H;EddnstK+}G7y-u~x?Hn&<_w$Ygembn3?o;l`cPNM=3`x-
z!g-Ps^aBdafb!@PCIY5ve;F7jZ=;hlQ%W9~eBaCpdr(D8lqdD;iI5PDh(Do~(Dj_9
zhz^Pb3Yh`TytA^X?<5R@>1l)*d>!a_{w&1LOLQNS8tCyN5?~W~LW2iAmnSqvrC<VV
z)DgEsInqWa3uJuN9ob0FoWQ~GLvQQp>Hqzt^17D(|1XhyLt%o|m7e%!vNYvdMp@-c
zLDZ!d-d$Nw5c_w8>~0tckHQEx!MilcUKHFw2xK|U*;hi=)tA}cp#jhru6g}CvjEm@
zp`avF!iM9MWC!QxMDbkxBV}e#GoL=fh2p3B$ddZy#~#uSe7LK`lI-K+o6_qFZ)TC$
zM<dcW{V+KqY$uT#R?hpDq(##`6^Kdgm%Z--G1HbWCLRri4Ml>D`(dQCeoa2jKeg3&
zmEzl1@k*K<1xdwtckY=p9i-Sw{T|;#lWUT<gZzsaBfcj|QAdpFUp$&rviya;$j%BV
zky{SmC_E-QrS?uR_48s=oXyw77~}5aTxR9cJE^LQ$>%q?q7~%s_L%JxSK@2PG~TPA
zrl1~R)OMw!Eg3N$4j-0JWb>A!Z-)BA+q5*fW~~%hN#$-n=55nS<6F~H<A`p@1%JZ$
zfYUvE&{EA~X@h2(zX2$f9%;(yldIa%hUf>2M;HC<1xq%KzVVq<<rruUF+p;v0PP!L
z*n8IbA&zzR=>iJb>BMtylwe5`Ic+liS(g;%+C}O_?j!PtFJ-1il2W2A!~uoNF$;|+
z4t1X9faE_?nEfZ7(p$;V-;%k=^p#}$3UJzGN~^=zT?T5d1epL?2uF%n_Sw|=<62V`
zMSwlG=)p04_myDjm>NouDAzi1vu`qO25z)kOh{2X<iGK{ytPAw!t6vx8nf$;67n6g
zcP>d?hAEbP-9;pSEKqBl^Q@}KOlwGP={Yu(Y#9L(kqsU7hGI!KdKr+6&^;E?`X;4(
zH9;ap=3vPR#cdy^ZHy{ej1SldBaj7sLyIWC*;oa>`94!vJJ-I31?29=?f85^Y%#=S
z!?LgYHH@P)$BD`Wge?iz&JzxU5DfdCP`Zf7IjK$D8ZQ}SaO*l5XQ1o{INaTf<WB2Z
zg@05Yo^QT&aJ>cis`Zn_^M81D5&bj8h@^@NFfB`1+L`d3*NLZ5MuZwmU_=djk~i^U
zA9T(qs}z)H^_lHBMZS^-`7+8ECIln=eq*>^bu%g-7-+)vjS@@)#fK=hLN$NWvG+Zk
zu&8ut1|H(Y3qZ=p6VHT*k7A>el_=$K_3x3g?e5*gxs$+Fxd@M5qENCj64+uFo8@Fk
z(y*Pp$jsiRv0y{$0Ma>K&~3<ltOn}-JJU)}>=Vvmi`mUae`^VTyb5S!k{JWHOPo0P
z$u@ob&nFr!aE$Rpoi+Um@5uVuvh5g>L=z~t%J|9xp$=}823H<?|6U1-Unzxy2XcuF
zAINVVMc9mb{+gmH@_1X3w0D}9x_YNubc(D)SoxwuSqk85A0`^18WT+_cdgKY7uVzu
zn4cY)G2}Q&mu_9Ynhj@Z!{uw0fLx*t=fSbvOmDbA+4nXe06LSdVwe_GOvwAvrzWH#
zDT655>y+72SVMk`lg)Gz@vTq6K)j*(&l;LBU7~D>mR7#`*PzD`8tOTX)PwIRQZhx6
zQ`8+T{9s)vM?lS;ndC+w!-4ASCVkGEeQ03RNYiyGla>(t;V3?vMJLgbK~42@jAsx`
zqITbMQy?qYpyTc`I<-P)8dV~cOjgwTullXnm{wh4Mz6`mGR6!IvzmyfA){5wE6`PY
zCH!*fRpZ;xSy==ZJ-l)B_K!b*1AL*unc5#p#dpBp(EOHJI`X$##n&o!!f*CZb*-EP
zBjqH@H~$T2V^rOu?ZEpD-uU?>zOae}p2XK%Q(z@fL>)JLq`2W*;zQX8^2;9qhmRI;
zm~$meUaZ1yEiAnK3w3DrMEq6L7nkQDM|_eO&*vE$tK;)RCrbA?exY^M*-yNmq(m;s
zS>8eNP+VeX3kPU=3E{q!E4B-X16fHj5Yw&dg9hJ|3KltD)98$PC;hWxoai{+PP}u>
z3&6BrFZJM(EJ|=5K?#tOF4H@QfZ{Y>p34>Y`KEcUC`34@C7S)G1W$c=xi>v3M0wV+
zvDlEMxxTXZFZw#mCQWIonR`m=&ie)l=2Ra{-a`bk_Y<%D1!B5~1227sxDJKAjSQ9;
zMwDH5ZN#9KP2zojJ43PB`c~^iZZI|FNcD?3j2zx#sQf8Oj0#Y>yr!X`cVLy1wPD>S
zXiCb1PHCKt@;6<+o4LHFJ+};$|Mz(J%T&LbNcH<svB4Ua8Hfz<-^BBE+h9YaT7KxI
zXZM0Z>i^Iv02%4&rFkO&RG3wm5$@7o*0uXuN=-_Oi?_#{R(LzOmvXBqGz?Rl!%w%z
zO^eRyCt(~+1pSIMks2g_)dGTCN+BdI%4tkUc1(xKb0;%(${t#+98+X=)DHBxXoyE+
zFF{*;=S3fS75S`EsLN<i5(E-<O%UBda*(LwL4%W&6%h~jBUz(9mmF@J8W{_cbxR^{
zp<1(xXX_@@TrWRoX9oop3s-d)b(8t4cajn=P06f@gBArglT=H1M?nTBKnI=9*-}KQ
zzF`0rajL*P0`cNir_#d>y#$jqF1_naUAn3!^|gGUU3-E<U@d*4u6wUEOs)<U7pUuU
zWBenz5$LP{>8JDWt+Y{2P^`IeB^Pdfw%(urZ2d+Ldh`~DJbply$7KDCCDuWMCQ;1h
z%)+&57t+{WNRhwtrZ1{k1_l2EfaC@C&&+cq6m8Ai-15Xrx0frC<~<06FFB|htFvZ*
z5Ck^_CO=+NRua!GOv7hGSOm9Y2hak_;W<OINt-EE#5bNr#dCbtXE#p(62&Vko^pvC
zif0P8q+LtdkcR05b+E!4=u_m1$<+<q#TdgA11517RcEQA(Cx|3O@9H2U}6s$eNygD
zOvpR-QEeJbVF|yy;$unzL(Y-F&?4d5XquM55Q_wc2@Z-v-PzK?bOzjomyg0gR6YS&
z8uE?Ve}g=QW>VqBfQc`g-|~(PZp{>iHBDjY+Pq`CSM!bi>wgRHm;qg6w5Wxyc2rIH
zWO$aIEU2xUf4io%!Z1J-g=c;mWno&?7oz5kC`$#LGw#}~gc3$2VD2v_u{#Y&o`mcK
zDy10LP<2MpJiTOoNzo`-=Qam0r}lspV@G!lFJ3Dp+lUQc6Yo1zdq}dhCY}qJx+LU8
z>qiBvL|`}dzfLKLw5^_8_=fo$Oo?JJ=?cj)el?5dafQqqy9-_LT{`Gk#T!PL_`9Ku
zlN~PXIX8$uo7(lvHv>;AkCa>wp=nPRX7<ZX>B$Z?aGUmO);k$l=9?`wKPs&NnIxJz
z&GDAqSZ|j@)#sWK{!hvUK!m36(rixG3r}|_ps+4B-JZ0msj`z1GG)U~K2#z!y1=F%
zS}7c=q}o~ETg>`izG``N{GH1W7o}eQgP6}B?s}kV5o6_2%-oU_%MTSzGCL^>pYtRv
zOe8da@kSgB0KspxvGD=03_IhG3>!w57B?CljmkkC<6!Xcstnn0!p8p(SZItKaY04n
z2FqL$Bu;nKPlx4XpA0GN|1YGfQBPu))C=G}ViP3f+{`tTcCQ3G?VXv)_Z?6&`ZcXw
zf$~e|pGCLSY$OF(AoTL$#9?gb&PxXLd9W@z+Gc2JiL?a9C8Dy~hAY-&;{GnW1RHZ~
z*n-<ILk2Ts0?*@(Xn8@E8=5fwifT(KWNh*Vj#LHKbmL{}Y518SA$_P$J>8A4{D+i6
zBFZ%z*w`5?b{-R5BPpSa?7q?F-HiEl`r7{IL!C7U=>rDEj^NSZ967{0YN%%b1@^RR
zwgIuDH}~IhtfY}2RmtE7c+d8VHzsKIb$mlvf0{bop5$&6(f)f%Tz-xy33KqB758-Z
zBjR!8GrzfZy99E0)OPQr1J%CChD17Wfk!L@>Ra#l`Xf%Hw9-k(rZQvxdBv}+=bmx6
zLarT&C)wu3KPFxhxP=yXx-~Q}yFo#+^ttwCer+14uk9^oL~_zw7mp@hY-_GIS);?V
zn!w|;vR7BnDHV|d<-w>Eql+sM*$+EXd#I;tbSHs%tlO_tLWL{2guAtqeR0E?0^Q#?
zH4|nE-T$HFRlKNl=wg`~ypiHo=xbCISNQSxpYl*WbJhedTK&lz2;}0kT?q`SQ#&ao
zXmplU8F)Vailu)*X;iX^waqYRp_$SXm3k1cjyIw5)qIB9PoRaqy1a}3g&1ggvsd8=
zw{0h<Pn>jG?5ya~=#S0vn!xFX2vwZSbojBt)JY~H5rU|`I?0w9<|chh)M{KA%1k51
z_yG&EXJ5|`K_dB84=#Q{6}ur8S2L+3tD8m!>u6oM++I?^u9p*!$aN;@ayqpBmC@>)
zR2!e7w)ZF1BmfzZwQXavL)qY&_$|o1RH@#XpaH>bX=-^0L@e9ebQ_onw^u46DxZ4N
zorw8Ju%Mj!Gy`LJ`jp~D%sRY?J%YE3wr9PFljui0C+r;033KwCB!67~t2`&)(UO=n
zCO@S?c~zO$!@5mV!fJ&plRJdF@=CX)RBytx@#ONLB7y#QL>s~X5TXtK?AB9d<Ni9g
zg|tgcceE&zpzr7^mG9kfAEKpQ^nb+BQ3GN<#isG;{~w!1Dw_r{*K~ixEb-u?+~CS&
z=Hnas3jThP6IIy+6#P$5!|oqbcAVZ1#|#sb{*QO!uklXsKx3t01bec+Su$pGMdbLa
zlvbs=r&nHmV97vjCQz<@$&S?4*BS&BJsfb$Ak?<5;cD2`?mB7N5%H2O^LJ~6%n4St
z{*ykzo6CkN@PX^{Y=ml!`9A**WF41Je}{wv_k{H7UUvVtqvwb}UP0(Mc+N1FIgl<w
z@SH(EJPpj^arf$EAFqCcsoVUwV(LcMVnzN=5f->cA4JH;W#9yxH_c1(%UUdRl1{X|
z`3*h);@L&MQhxkdoe<nTZ)RCh!XH7Q5C3Y~-Q|_8DvG*wKec|;jEsnT7L@4ey;hKf
z<Jo7|nv0%47EG_K#|Bq|sY5+h)3#iY4;=AKpM<}f>R8}p-@s9>f=<>|Od13qekrKx
z(<rjrz{RS#*88X3NA~1b7iSJs%pT#*Q@f+}^J4AbnZ^NK(#oh4nB~^=o*Kaltvb0+
zE*Ev4r}xTPHfU*{1`b(#0nP|tsNdF?va$P1nb`hPHYVv_SB@_U;&cHk(ghWs_DLfZ
za4!5xr+HQ>Ief<=YJRiu{vV~}k>m$JGoa6^o1c4UtEG2ALBk9?%r!1R5S(Y@k$Z;E
z_=TN1Cvw=4UnEJh(-U|}PW=etaj*MtQog^Y${t8fQKxlamcfrw$uF_KX6YmG*27<V
zNQ4lIsAhb8vF#K31}T>6sx1_%ZcTkvrVEi$Gy#2%?xNP=v|~h$YM}Y?t<2|uW_ELU
z+Jw*x5r^}Ou1e%h7y-@QridUrKbzLZkT+ER=6^}T>t*y8vsg(Q2(<0Fl1NsBG-7Ae
zaTNv5cU|I27O6I)fsrg;mKD3zvm1PNqCIO|eoXK{&1KwDNkz`AF5U6+w6}&0b>nGi
zTx8b(8BzS1JgK?oWH!}wo|a7o3p}TL)ln&%C6=Cc2$m!|yq<giJP)++p&^#^Dlr!g
zHA5Sen_&rY%wO-R=7^RK%1AosQgrz5RLK#UFrSjn;di;4P{!{Af+#Lf00wa6lRyRB
zi(PyCk0)tPB1k!u*vpB%PpxD$2)1A}a3>QX1!ITq%w9j3f$lKVFkMK@psdGo;-yCz
ztGm)daHo1cza_<6xO#M-favUWaFBG|J5lv89sAV`0&sog1Dy%b%)ukglzmm!0!`()
zBOe5WQm^7XoFf1hn1y11NNni+ERPrd)+oNF|H(65x}4~a+1a&Q|GOk!bT@3C2#<Ao
zGC=qz39<q%Lz8-gni1IiZ2fy_usig@e<`(bEm%a}e`V<a8YfJ_Wd={##^1C`6s+go
zvd=-`Xr8O#LyZ*!CWJ18pIIWj?Vu2my57c}^(;vk)0Fz!cRKx~2TEG?-C5A+>s?PF
z*fJLkzq;_w4(eo(ubwsNn9`|96#v#PXe90qj9g@TicRID)9{0n_4UGFw?-A6n|D#V
z<(Vs+^M?5F#Is6j$za>OCmB{HA}kuG2it<7ckyKKH2qU*`zA-jCu6$eBUy@i>#HlS
zU+=ulb4uJW?}!_=2|H>u|6ADy5ZuBdb2MDWoi!H^DLDz;W-Q*3icP1B=&o`{JiL5W
zuW~)&WNv?-AE1ZeR;{0f;IiF6@OFRKk!Jm~`(2e(gDvpg1z;m(6lHdR%f(svvm&LZ
z@mD=bHgSy}YE54|f)}Cv8BqcyS&?{sMGgqZQ!uU6r^Jkjc>KkcQJqx!KZ^u_L2#|=
zNFUS7dJdxh&$>MSEPtf(M4m3c*q9xo!tDqk)ScnO4*@ntX<Kx{ceatk+oI?cBDr;H
zq+sgm{*Uqtc!&1xx^GI+%d&rzfYATb1OziQn3jR?EHV%@<@A;4reK*&nRW5EWt{7A
zqS66X2(}9Dw08N9YKD9he7@TyXVIgSscYS~31BQ;5zB6*<Tvo)em1_-6?x%3AChCv
zCo25UuA5u^oj=5=4cR=O?%>FAjs9QOpY2P3l*}^Mxr^M!%Ade5`+&`XPiZcyBGy=I
zm89jv!}mLJp68U+fsl)J&H=%Nt;{R}MtLspkTL?$2J!UDGTleC8UgCk%Ymm~VKnU<
z<;fwny$Nj(0J5)hqrHH(SM^M}QL^)dmCdPsTJ&x4k^$i8D`rwOkv7}IXfmgG4$Pnf
z#$7U9B;e_$)EM@1-anBsf3=(|+6B|_Jt5~CK~>jWnmS!}sM8&iC>O2&UNy3|TtZh)
zZ-P_!*!Q%XGe~5-R^;l8J{+91c0xePkK5z;!>MpfV93ZfROM}8s>;<UJ*Ssv0cRrf
zjcoM0Ea0Ch*MA66*oCxKgz_8QyEDnt@dtTkq^WJ2?mRUCY4?o$Tuni%c>lD3u%I1g
zkP%>}coeP;wH&Acd|M=Hp(mEo+NG<tywzF^De@8-vAg~yGNLb#5z5+-u62VI5~rDw
z9|@g6no+U$|DI-UgeqV=AUJ`iZwF?Dk|c{;Qr8=q+mzAk|1!7#?aXbBJxHx@J=F*Z
zk6x<nP<%|t2M9fzkvk&PXQHS*%L3Kv!iS}svowwXW~RGZ1OVZbm0qlJLBGmK@BeW|
zdjB6~r1yVkG4}sXMtYW6spWr^Cf@%?Y2p_1r!!An)3ctxOBBbMt|2{%QEe(PHY`U`
zNhZInZ~GSdI`DAdX>=QED|AHh5zF{1MSn3%okt!{TB54%3E3FBC_eNIvJ65MsV|>R
z_eNqTjbxyZ)b^-*H}_5<pnt5|RwDbbB<z!nRQYV_0<FW#M-V9`8#q3hQUoKSihQr}
z|GC_KERU*uq6Ao{aWBzysP1>k`Ua=<pylKvu2Y?-=`I0LBvW-oQu8R7L+<=6;5hl`
zf|Tk#sz%24>i<{-{sxNxC>C%3U3va44^H$uuIxYY;27!tv+KW+H~)Lm06Y(>fyV#k
z-Tz<S{r~0N|6kty|GK<;QU*Z?&nud6d`(hnhv2|y&03DiRE}_kz-CO@ALsEKo(FU~
z{5X-G_!=Av@5VnD2P1&Dv73FBCkSiotNj0A(sxR#d&o34dZWl(0862P9*>+L_0NhY
zRvPEZ@*IAUX`j27$wM_)8obh(0_p6mDckB(N#Q23>}l|9?jcFB$mjj<=V{<xWa8*S
zo`yf7S_uA+YT@6eTEM6W{XY(`s=<HoT%@R0@Bw7eslcJ%34s$qrlNFni<thXev)u?
z{Y&dmMRM>190Cw29*uVcBrSW=s&$jvz?}bqsdT&%7u6UhX0_!w$vIMb(t&6zhtno|
z=XY9YqE&n|Q&+Di9Myu(b_6>#@sfh@8zv!TS+%Y|h}2VB8YkI8dhI)*<bXv*#WH-E
zdq8T3kzO()6xu%H9lK*<9un~{00_6r3FJWbamPm$Fl;*FlD}E$efw(6Csn(0_=|Vn
zzBfcz^s9Uki(3!o-nXwpxaD2G_#)E1zIzRl3ML)_ufdBC-@XWwqh&Gi_a4u_2bR8y
zRzf2EX@9>!)r@xH%YPSdweE3~aNu48;#i#?=qF6&nr}YTt(!y^Az66jsog6INJg6P
zr1~bErUJy(nnb3het0x07O*8#?Hoaq=oCDQaGszSss`+=NE)~V2SKj_$1Bdi(llC7
zQC}T@5DsPe5U&ex{wYxBK1gM77eU-<P4oEg{ELteyzUG9)Jc-sl-vlF%2Siog4?CU
zE2hrvG)lYG_+${8qRA2yJ@OxRgzZCeM}|yTZcHznb~KZo2m=YfKi>pgL|xsGw)tHC
zu)t_&>x}(#D6~CsL?7OD5Y>}VtL0Y9y_oUJOVlz0qHFSC?v|;SJ{5ui-KwisZ7)Kh
zY}{LIP?)j(FR#e?SWhZsNktB@0Wg=^p|UT6<X${UwvAD+UVNL~evM=@6T6#VtE~Kv
zye!!?g!P#y2Q@=fLpv~yD_6}}R*=>m-C)o|P;OVLWkR{WI#?v8_{?*xRdDpkf<%xq
z_vH<_yuw*BNFVB?6OwzKebn_5m}D+u>FNoI<Heqg6nN%OCZnY$<9L2D7Uw2|TW22B
z_k#7kHdRR+I%cc91E*wxQL+}Hj7EYav+|;fn>Y8g%%}tRB=+ivI$NO^UyoqxGRlSn
zGuMT*$4I|VLZ%%1%Yo<iIA^Jy9+9*gxQf(f7~f+>t)*vC8<Y{t(X=Ys;4KrEuI*eX
zt&Fq!$`l@LRfd1{D^N6xCE(+efPYLfe1hbEqvZ-GeX)`Os9F%(&+SoxigqLQoIvrY
z5GsQm!jU9(ep%oaI^Fy{aU#$;yG}obaDE}b#?14#ba|w#Y8rLV#D8|h0Rea4X`yyt
zA?(+l$qzESR;s|~z*81AQ5S|(D~Q151nH6kk9g3t*uTruCq!gZjVzJ{qmN@64EP$8
zfYS!|C1sk45>h=h*N<0cilx*okN+n6lTs<F7%4_007cdAD<v7Twm($I*O9~BJvN~@
zJBc#keF)WmqhAdI49`aiFEm<D`~bYWhbwE#x5XYzbMNfUXn?3$@}MQ7@~sDs$L6gj
zK$3kLw2k6HcutCM#0xMbiBFY*=Z12ss3g1^&pKxAJ9^r_u5Da%?u{f*wJ(OA=AJRj
znb7ifIu<WksWv$&Oq`RPTn4=?7*#@Xx3=>GI|;thAqihHq+!$@A#GIvAKWhfSyRE1
z-~{o&-zeG!Mi?Aasy5R!I{xwL+Wt5#k5>T2CCZMpI^94nL5uH1qAm@Sjscodp`wSA
zv1fH*{<AJr?Ji_Sv<sq-=ehvEn}~jgX7=v!AI-zsGqr^VWs(Ez3VlYeC%^X8dvzmA
z%jJmibzv@dXpihrBz>QFn@>xU^Y2ONy-D;6{tsRZUIcD%OOStv8aQ$<4rwcLiw#Zp
z`(UkC8G>p1M2z%7_D#CQhsbbE08>~Z8KA8zPXk@?1hoH3GH8U6BiO@)Qk{EOchjEa
z{@&<N%pws*pCgUhEF=Jg{5v!{L=w2cgDdAK(laC1fpnRQf^Tt>Q9Nwub<pJLmCgu$
zHSLovnpoZHPh0w@m54S7|B&oJ+0U*#4N(U8ZL)_!JNUdd!Oy2p%e3Hr^4sf;2FFIO
z%V!Jok<^B2YUt@tSr%<4RcF*RxO_gT7p9UXw2ZF2v0jruS@qhu0wAhGPS>8DPU=v0
zR_lb`qx|Xp!QlWoAE@2V=h;3FZ}<TJAm5wZCG*2gxg@&9B{*jKHf*j#_E6<r=>n+o
z^>q@`zT_ZHO!wecgWMA^NMI-><7*RtdAJrhq3pXBOgw4lfyOhyRj<Tflx%0vl$rHd
zVhnG|V>L(G@E&coRi7Ayc+KBa7DxWyIB7kj-YeUD{J%UD;Nj!v!J%!7kRT!-(#`-~
zt_Xs1-);RK(s{x3@;i*4!Qtjd2jJ^N$-2_{i((V1gW<d=*qajC2Pw3r{h{eq&hbL^
zJ>)VJbuy;Hx2i*PNUbv%`ruCv;l+sZj2H2s88W+*BCV6noTwpGTHBZ@1a?Q|gaR>2
zF2)JdL-t3{zF9<=YI938rp+xX&L1W#>{H6or+K^2I*F`!XW{V+JTi_Czs%(|KEKsa
z6mob~s`TIT#d}w3!JR(BV)_U>#GHg&^LM0W?9SU}4jvs^j#h4julE{yj!DkTtv!RM
z4(AE}bJx<iITMMnuqDF6k_ZWxXpOR50QQpW#T)_}Iyg=`{0O&HjcY!`4UI4~n6up4
z`~PEUR>6BU$*tb}bzxSn8#-<6pJ}u;&}d@^sc%zOj*)hn=(GR^CJ-u=IyeUSnJqb!
zji%4E`QQTsk1d*OEu=ZDNr8|%y*eUHEUtyK?R<S`-UOcCTS_q1IFUm7DSI|_nJZX1
ze7pIDv68-m0=6J87^iB+5>o}Bd7pR$*CXAsO#JWy9@0&s|2pbF=c^6E?FVuH(8Piu
z=Z#s4`rF0>5{Uy6xFGb$H$n%z$68-EIxEbuuB2OqpkH<$ijyBx(?3%F$Yi|O<!GZi
zuxVyY>;K(m21ris76kB7VpP8-Yd7(ZAOF%V-Qnu7Vc;Z22olsguI~&p;A}&dE&-w>
zf-wF}7lBP70{L0veCff<V5J*ar*^{HglYcy{`G#Wi)W^YKq>vigv`<YRdq8n(T`dm
zK=%9$y^%|KlCZ|*!4n$}Cthl}uYdXgOVGZA7Z9Vimp*l{MVePvAQdD`cO`e{P!=Rp
z_7N|NON)JLc|SRlyp$-c1Bma&6FFfb4$Jah!6Qky=wxXNNf`_2Xj-$$(cyB@EqU|)
ztLWh78_6pv6Xc;hCvn$xHMZQNOuSI_(P&1DAhTw!aI!=+8k<%YJUiMlz~SZ(=WEX(
zy83G3C6~yuwNC;(KoJt>A{DD?>ds9>y<HefTBLDF6o}oip9U^uNg<S$HhCP1tx%lU
zN>APUwKHDnqPI3k;JMdk*|BBf&LI<bo>9{T({Emq6l)If*jYky<=HfLd%?bC2~fel
zRcM+Z=KI7A-meWCDqyXZ5~$w%nXt(JQ(?h=CoH0WQCLvxHdR<0{~cjb{x^gLmj!h>
zEOm&PfpnF(*pi;HOauUv;ng<>b#SF)OL8=t3ot%j2FB!^*xe~(bchrXEuBAb$(gV;
zx`<F$`gly2fO-{DAk+|55D8cy1zr+N4U(7|(=ohDR=0VsHNA%)Qhvy}Z965%ZW{~_
zr@9hpM;~5CP0ubPa++E5z$5Y*ZA~EF>nEY)x~)mbQ@(poQ3-|v@Bfib@IUC7<Lo)Y
zDZ;q@2M1Z<-hyN`dLs1Tkh#T;_kTi{kMlR8PxR6d%*1H?ZfVwawKUtYXUC7>1dp%&
zY-!g2Y-tEq4!}Mebi!@VObkF1#<EQ{{d|hd$#H^z<aDf4r(^p6f74-N1^`)`f5a@R
zPiZ$RzhWfGD{F!@y_U3qxek)$2GPfoe@0NBD=H{ofD-URXQmHj!}R<Y$|U-U6D}16
za0;~5D4SYd2aGFor?Ta@OiR#HhlUX#GC1DZe=flcsGGejjyzp)9uoIgVdS0fpMcsF
z?u6H+c&ki{Axrv8g7dN!m3)`IgKv*IDh!_;5gC+{c)hF}V;mq;_w$uG#QD@yyPkqN
z!1Xgl-{JVd1?FT3Tv*?d3UG=Z|6<}%j39od`>HJ&*Jf6?I<i5$KJdxg^Lu!C7F%zx
zZ*{7$q?`qiW(uN!VnZpKM;LW@XzFPyCyS^6ShjFF(foYCRDMT5h~>NF4{YvDCIq=7
zzr)`-;;V<I4go)Urenqc#`Co*H3+{iGq^U1XOJmqrqZwo$f1l10SA|vcmD{drdd~$
zEYi1%2ySaH<j{ILrnaiS(5!xXXV7c_U|!Mr6tY5UtmRM7fVXjATWGR#x$tcpfA@*$
zahCC2{B)7pzu?A5I>|Cil3CIHViLv{>}N{4vI0{IJ4{MXmGVrmJL-QzKrIET1eKpy
zuqqFxOkq0wV)@uLQfl$t@-dPULy*f;w|>cYw6tCxS}vh2pY5nzXf*s+*Wy`)0YXBH
zDA$m*mQ!!}Y7yGP=Ij<kQette(ePt-{6ba%={X8+nQT!}lJVmkdrWx}#fb>W^f6sr
z70H3vkkk(*!52fJner#T(4`vt7|(MR!GV`KZF_S5g975bnz4%LBBCoasmH8BSzBzU
zqueqF;i(#V?<Pv}3ElZRArm6zxM%l46;^&GQPkszTt7ob^X~Zw1}yEbd<3UYB;KjE
zMsQgR2d^e6H~$s!sOGQhcY;P0aX1q!c&uN{>?E}8i<EDq>Tl-7dT>n$;|7trVG@28
zxuupP&&)fPn<@fWKc*F3j%f9SYqhspx_^<vCW~U5@oJVm*pW_~NF>U6M)px#9p6``
z=s90iqJ|OjmhzmN6rmKat;y80Bg&9e1+w|LA)vm9yx2ZWZ2M-s@%|8KJoFFvZs%UL
zDwLc}N_7$auw86C6Fnqi44#G**D|uJcu&OxrgDaGmuKkGx3d$^@b=Jy3UF?u>^Okd
z*vU*hi@)wsu@Ems1*XNTUa2Q3covb@s`sjpDN-y~?ls}dAIje;MWamfi&64@V*LDF
z55S*3)yJxCP3d_;#CE-IeW7?qs&3s;J{&Gp9uqa6Cy$=%+~Lk-ZTJYzeyeDY=4<UC
z2~dzSoR+M91)W>hwNSn|+tYFS*%lYZOpA|=JX&8$q@EgT6o`W^b32<PZ;O2C6(Z+j
zJFf#oQ@=W}3NBBE1UD4hP}_T@;ZIbc)1c!e*nEO_ts)g*yEL);b1iP0Bo07o#A+o2
z6<BeNnGy3T&2q@#&HjAtpbzbk;s9+oF8D}*uuF8Wv<A~(^){x}yGTw3_I5g@SnSFV
zdmB4?8-YIu5|$_h!pz$y(V`Y<A+%neVuvQ4i1>#5qx&Dd8w>+gQs9|V*g|P_;QH$?
zXLerA=dIdj$6Jl<0Pym=nTIjn?aXpew07j>QqRP_47_qr{e5eJr{XX2dZB0WB+r9=
zG7^QusPu(NOc$f4Z5X!lEDqld@>22P8i#9tYn6~m9~N4<%dTiyDa}&^=O3)*e?RO!
zO98?Q0o5enZBp;L`mFpq8DF`k5;Hf+UYg?tS&dT47FIq<dGu_L+`_yCbPQn{M#iV9
zIgtO?PsuXW8Wr0R?YPft)!@b?I-<c|eG*o)L>EpvAtxdrS0~`EfPbc!pJ~|){C|*F
zFTK0wJK!>#c_d}KJoC&70}(gfF7c_}ex_y8@JDmsebjgdN?~dr&COgu@w~qiA3e^j
z@>Iv~K5D$fKYFQsG(YpqI?Jbzj)Q~vXl`aXKla~!)Od$~w4i;oNEmh1W*7#h*F$@0
z{GtxR;8~3)RR5VB8O7nPME}B&)V*s4>c4Rj4HF>()s(;7qhu-wsH#w0Rdm{Qw1nIe
z?SZekXIgNIrkAp}w1;!uuNZukTH+Rz=V<Um(t*x2k?2ZQL3FE%lb~yr8h}DI2Bp}@
zea6Zdea!kZj5%)NT{cZ4u_n^F2p^B1OZeK=^)hDa*lZgqn`wa+d&kT?G=sV4(5S&H
z*CF$hkBN?pYC<k{?7Cubd1slHaw=g{u#~=!a2`!4$A-h7<A1PpO<1}pskW1u(loFE
zxf^gZHEf9~ZZGtN&{wGZZF2qz{7g%yIqq$@=km%?10A5Jt}O$Aavg5Xo2*}bwt$z!
zY0!4-T-ka;QmLvNAAiv?8T^!{+Wn6@rZ#noGB`w$^F`S+p-AcT{6%aP<*nVl5IZvh
z_YKZADZ>Hu6t8Rh<%<{HNX>Hkh$!U?e1z8~I_7O|zi^?w(9r~5h}11p_ZeeL50bn;
z0hrLbqJ=v7A6`);G$_$3>@!IXQ)8e~wCdU;G1#+Bpdp}5HWMx;5oyuyhnA+rmtXXB
z?z!M4c>Y#&2UvKuGw{eHRgDx=;SI^q9Mk#E`-x&yrRNtZGoR8#gR3Ak4}ti`D>8g7
zJ49LFu})ztg|COzvM^WO>a|(Ww1B8noEjT3%8p(YU(H&tmb6z}j#q2s?``Yv5A@Hm
zr7AvI4q(va9!xcH9qQZQ`0H&j^9T|D%wq<3kXE)q^1Z@6Sr&y|jEk~?`Stpb%;jNa
zrYqIBQ6b4EndsckGf93h;D}B^nG|xG`I)c$GI;OLeREGPH(rYAFzA@ORV9uF6>FnM
zE?z$0PK*=2o0*@oQDLcN;IaB}k`=5`c!0%G%wjdQ9wIay(^zy&HZhl9td{b=ie<+#
zc-_=8(*?<yz70cymaLM<+~&!xtrkrcbxKs!(bQA5dX<qx0(kjtY5;G7GCLl7Rs;|0
zKeU;N8W6RQltZ~$-kuBJtsI4xwSZk|YfwF-eOlalzwsX*rT_TlXMw!2$D?Ag!A*&2
zaHh*R7<x7BQ9j)LLRvxWj`PLa4o}EMh+wZL7jD3P`B-_EyE%!S#UI{6l|FIVs@XW*
zh2XX6l|7TeS91@e9CI>2@CvDf9O@G2-CE4dd405ur{3UMix2QnALuf1cI2hzqQ$kS
z=ugo1*Ll>)^|;@%3;I=Yt5chWQ&!m~Yof9d;lF#2W<DMcibg?mAb+BXMjWD`-6Lkv
z7U#dn>xWOzF_KPF{G;KLFf*9JPTk~6?x3o;ezjD^0s0`tneK6H1kD3A*y7fvealGi
zH@;FgiW6cBHq`H{u97dl0e1H<W0Tl4$|hwIkUlZgyYryp8tN7KX?!Kpjp4_FsFYo`
zArYX~wI^LiRd_I?FF+_n<%#9Q0E(N|qU+`co_mgwC6*la(twISUDz*BYtTVItgp*y
z5NcuO{%?hPBr|b8r!?hPlxVs%s)tTVJP#S-7SuaMR7<32tC%W#@S>vGGgN6_P`NMw
zG*{mWN3Do%RnQpy+FkI^qQ|xqVNLS;g-zY!axZd);?&KQ1mq0%B|wUN6PoMGis~~W
zR^vU2^xcce)G}<Ed#Xrqq+@_(cjouj<(YUB5;H#{TU8PZ;WI_bz_A5_gVyHCSOkT2
z-+PP5gyDlYZQ*;$WAV)K5Xb`utkD~4txP;!@(#TPvw6)?cr|yvi4W>87etgHBC=u!
zsksk9dJizUvA<bZBIa}9r8Pb3I>h}m&;Yj*F#Yui&Nc5XGZduh6MR2+t%TpJgsiD!
zj*gh{6APXAsW;}cs3gPu`Ms56luSMp=8DXS;@iZ|N|K#`kpG=2?}px{tC3Uil^%%Q
zRGxTxAudeNhB|Q=mFg0M)~U1bj!vx&PJz-x7*f3a*#@U>IDw*tp8j@&&m0?k_OEX6
z@l>bf0^A^O%Kmm?#T4+q7Fem>U5Zmm+tlj?sTsCfz#K!<cD>^)-P$WWL9V?$7P~eB
z_eQsTZH7xQ`4@JX5h}pFc7CHDf3(qO_C}w5v(dMA=9Y7A^pV(A)rqH9#CkIny~4HS
z2ty|Z6Iy}U!HoSv_1p_XX;bbzNbco{uI(47J8-cOX2M>_psN6hrx!$|rTmJxK%ZY$
zSOv-8H($;N<UW*B0?Kdb=cKVjn8G%m;soBKD*%2Z>bITduwna+-BxKy+A1%xE&ijU
zElMp|UfOLHCgeZ}?G%1AtSud5UiOL;yRFfV6apR#-`z;}qCi{xY>GS*NvSD_H5RAS
zcEd=igrxfo?hF*kRR#dNxw_YVNN*=ex%1LfJMnoNZt{c~R2V&WQgkF-$BKQZHhgex
z4%k=J;Cgez##NcK7FN)h?a=#_P20(XgQrI*^0<Q4IYp0P`nGG!irp+k!sizOYprAD
z>dJt=_Np`WGaWcS#PGHHa#PlR)9#X?cj}HQjI=Kw3F0AtW2m<}*+^cuFxxn7IY6{_
z_o4g97wQDV%Bg3(V%>EF;S|h0O2#%P&>$EzOOCH`<Y3oN=)0qd^=@)p3$~p${Gi!S
zA3BV^D)&jZra_%F1V*k-SlQp4*6c-BhsbSB0PXnT=_I}nCi9Le;RlqKd)$veBH5iD
zEJA_Su0e`S&S~lfG1X|sqHKG^1Zw5@l@<xuJ%esE>skQIIWgxQF4HafPUTLd!RAuG
z^9A;3XJLP5*(F(_uFwJoHey=DH9=u)xAt_=gF%`>E3xF$z*gB$@`<!<CMctKNfnEb
z53TAaG|ZH)B-*pVqb14Lhtw<aN=-~#dce1|j4TF6lnS^A5D}m7Oe<`Bj%PY*HE-zi
zj-s*++sj?@l32l)Z0N$f;<NO+*;<%D+=Rk9pK%6JmiNy>13B74UR^U$y3h4@@QV$^
zKVYy@<{rVyl@LUdk1Tz-qySH3QQR#tRJ*$(wuDe++bat@1xcRX0$dgSVu!-d_@ACC
zhylxXsNM+)8;dTj8w;5Zo5U0NDt}6Td6&N=84ik|AR@eL(Ig3me96kMbB-P9llpnQ
z=2XO+6h3eTUS^JbhMGFNF_gZVOImSvxfNg|{#tsri=L*b6%(a~20oDxZUNos>L37@
z?>H$eFn%L(^>rK8>R|0hl<gODtxOzLpYI|&hDMIX|Ik=rh(eA<E<<B2b$(?(am|<u
zhqW;0!6A2LJ$4X}?S(DGCH>28ac;hXhFXLz21fwgZ&pQIfXI5?KAB_RJ>hyUebtc^
zwzhB?ESQE)Q~{yZtLejDKI=~8mT)4cd*H(&8(_`u&b#9565DeA1{&)R8sb&M$$gqM
zDevp|q|K4Hd`pWM2ybUcOG^p%{@>_e2QVp|I`1$^?x6CE%7wPaGxiRz8f;TJZCg4t
zh0lEM_cK5A3sFkQJ9C`|^Z=*pJ}t^lUAQL3BglF0Y2#UWW&wu$FUP|-pTBHbkgUOj
ztlJWzMx49WYJ>9#<Ha@gk|Co;gQlK=zoCRrm9J%EQ;%7xV+Hg^<gQH|<%MHTQOwSz
z5K?>bGR>(`a!j#k=H6;$i*Y^rm^Zz*`mBfl1fvM`REMYA-qKaDuy<?o<YHiEGgz};
zf+1icus8O8;;Y{pGh$vU6?FYHr(ZV4J6Un<+M2S-leVBnaJ0rgZyj46QsrM9dm5B@
zeu~-BhDPw;ZEOVmYJnrfudYzRvvv6vgY*nTE#JNRf<c_w(latyT5}J~Hpm2dxA>*z
zF(IZ3a5KbfwusgF6fm>Ro1UDwA=${fFXb)iV2l>y*ISY#ejuqTAwdrxC{dv3Mf=D^
z$B~Ah`kR-dBEB3zy_io`&ui&93?T{A=+u}s?jcPg-`zS*y+K{gB0?dufhL)_23o|*
zMHG($>c#F^+tQqnYY%1I;^b?Fc>*8q)HE%O7q!~rTLit2boxvsUTESAlpkn}SJ^W2
zF06h^&Pf#r%!~ZflOdtXY=iv~XA($qPj_>^59>zdut1NI)s>s(;=$Abd$$%fTC97#
zR7$jLCfUoRK+UI)T?y76Er-Y%#^2FgMRwg!?@`DEBTekc5_U<oVahw*0~*Z}7+XYA
zq@WaMjQ2TYGsoIbs-A>4s&OFuS^JW8g3<?e68|*|6HLu0a$D+$c*^t{xksV#DHuBm
zF(=amO#;D{4?*6L$CNz^JA(iE#8fde`Qsx~Wyg@>gCpvgs_~1=>Zc#yn2}%u`JpL4
zst<M4hg6$g)u!raSIRTZC7W2mNTE_TXm>Fo5ZrT3jh%=7NCkg8=j)`pBv|9Q1vT%f
zuzfm2z+4~)M~+Ah&W$Nz=A%1We;qAa=`l`-!I+6xRJcP%&iyg<bqfs{?vt7(@IV)z
z1%(R4aqi#|{^^rMx-DUN{i3G<XitB+J0hg{vPT6GyfeSkJ!#jYx?Y)v^S6#s@{H<I
z9&Wr`Q!h)#l_*hx`&gHp0ZWhR3}+Ar!@uwA2{$0WT%I**042{PeQ0f0w>Z2-kI=7)
zHQ`5f%a`A#n{b>YNz!%}cj`1R@6d3#qskhz)2HpM31;IOwDAa!u9oKjEkM%0A*wwF
zWCww|@{GlUo#=Oy`TH^<=-pm;q=+F{<%NT-{!JeUOG!@?yd8*xLdh=0+RVRk10#TL
zzUxf6v>vP2{JC2*j38EAUhz@#dQ|mh4^|K756Y!HdvJ6eEUQ4J{p#*@^fQtG_Mk&O
zj=nv?HkLR~3N}gt=%YEoS(sp}{2uN9;89DSMn9mVGFtfz^?>m3df<HeIvp9F7MdZ{
zOH6~41<8*5uNp0etq0~fF(M+&u%@xRSot8`Iv}N5f)yb8I^WE92oN1Il0b`o19m)k
z)JnuwyO)X0v9PJAnp_g2!_-WI<jY>Z_<_<Yk|_W>aPWv4Si^Ak!E>>~9zk@P=I;fy
znj%_qJ}>_A!%<Cr*Qi=pNqKXyyw!V3<`YRqv5*kgO^&JxJ>y!E>h{{K-Mzxs$?r82
zV+^`}C6aOM0G>r?8TYxM*)SJ{ZuTsdy)1&WD0SqJ8or=uHRv=0-aB)F=W=_{>`~ZW
zhtR=o$ro}C0nPsG%3^xLV-RyJ3QKu;i7zkGUPc*rHZQlb_6({rxdlmy)<DdMMB-r%
zSlmRtj4AGqSX~@^w@#T>PM2FG6IhaF%VdMuGt=*eC4~D9UH&A5p0qfmHLe5lajv|1
z?uVyM6gzAXCx4C{56wQIBqtZ5s!dW4ATqh%<elA<5t}Tz14a6p5^!-6m&U0cV&+fg
zS*P&HOShAWKThfZQZM@P88wI((`8s??)n^izm(R#;`X@}BRxJ_VYJDMD&&$)`9@js
z_0`mTl#J>skGZ5HcD-#85OvYNpKKwR<W9>>BVk$%WASf2NiMm80;XZSjoYc|B2u8W
z$W!S$x?*!y|8H}u%{h6YmczM?llzC8^K=ZpJplRtzucUd4UU@=8e3j^TDeh0wuygV
zo&HYTX}VRM^MsxTg(0NnFY8$<C-5+b{)bV{Bf3`-fs|?+fCl0^d~xMjihNt>DL#~K
zsELk|Ja~<1%1bJ^(|ovX&g8={<UC>r^7&AuKH{XveMGkxpA%Gf;h+#FFsh+}>7xIB
z%Q$Yh;6J6)H!9xd($c#Ymo{Qws#4b?MXb27>!tGXcw>+<?F$KkBFZrA&Xu29GN{Sd
z3ueDAK65-;^*A@^0AF05i{uE#P%RlPBNuAGwwDIQQI%zKo?}IGRQp}~DY_oPit%QC
zHbn(FMMS5DDVm*~qK(r!Xp3{Vzx>;mLL^~o8J~p3vp$HyK>%TZVc>=}NuyFPyo4<&
zd-BaZf;9n2Mxg@MY^N;_p^Bwoy5<vcq4*?Zq>wkGdy0w;q2r;n9E23e`c{y7{qPOQ
zH%_V#Mdl|u@Ckxv7CS92ds+Xy)NgW<%Kh0$b%Rt&z3_}%`T+Dr?^`eBmX2knefF7>
zRz2&o%Sa^L)AW}|@W{&|97=k9y()uj^Q1d~X?ie59ERr`*gk1-he)J*FaxoO@K8Bb
zP4Rk2CA<ZLV}7Y``LT=rZ`Qk(5M-K|meQk@8rM?O`R>N7j^!m%k|GC1@^=z00zVsX
zf9QRuE?y>=Vm3uIjB<vrqe_lzO;ah@Q_VUg1<#<+;2U`9ks}O#h)cmXs+!|<*F8Q;
zE}2m#r}4=(dC<uv_C_bsgo1CJ|MvvnE+FURmgM4t{JHS7`d!hOsKDsNXpL^^H6~qo
zB=lJrdzw_>GdoH`0-M8kE(emu$v}YA&QPldjmwMVvQzmL*lln?aPL;;(mUhd2y#gX
zDy^(l3u9Nx)4%ZYfivdS+OnSpl=<{hHp=M@?7h_+|5vwWaZzSJR6H#6;rIiS{O$BS
zcgBHQ!V5TPJu7oH#;>*nv$%Asa{0VxpPrS4i@}$89@|vWsy>4V?VSeJ*4OopV0X_1
zC!4j;xAT#9Mc9D@NHB?T2g^a3ETW`lA_={y-9tII`;I6+$D|qPV-cw7a#Xy*N~*OC
zNX>(%r-llw7O9V%{IjbGd*L6d8+v)hCv~d&5_Ws()09SneJ=TCt|Z#Z(pUcV0Fi>?
z9VYo}eyF{-TRFVt7s`>($_LMpWbh2hE-IC2_Jx6l%fJkiRmG{j^ivP*v%=q75Ria?
zGAoG6-i&PC+s~vJqD;tD3^Z*0YTc*A2fKK+I0yG5(^@)&Iy=Xd9oBXnhlC?p_QmAt
z$h??;HMl^B%tj)&YX?DAFnutSE+(!(OoHys;}9kf#@_84VXN;^1tJ;Z?l;I5-h&O9
zWJXO10dHxCCJ@6xmN3iHy2u-G?S19Nx1c}--mmbZkvXAug3|STN(B>B7}p14l{QR^
z7C<=m3;$H~>^}j+bR6k_NZ<xeaB;N>(xq~(*mF@9tn-x31yP5Wo))#h&DT^e5>a<j
ze-l`u*EDM+Cko=hf`K{_n3aIl2e!<}AHwBBV3J{!hq@7&_5Ouri(%Q&-cnL9vWDL@
zik6r+MCS5$Stu>%{&>(J(tHabFWRH^JCHKRJrh!$zBAU>Ki?S_7oN$6I%V@K&3R_8
z{5j<b)Lvs&rLfTn3;-aiN;8j+n!8K@1f*ao?^E4iL#7aPbKlYrZj`o_2)J{2G!6kn
zci<s5TZyL++Q_9*9uMlNdJp=Ir3P~mpG9fKfYSP>4vAQ2hY}pJr{<n(R&MJ=g&BRN
z85ww{>|<LvEFq#ft-E5Z8`BdqtMkV{MNv&jxB`tVgsIsRe|lfmML>R07wHy>A+?37
zh3$Nx1>KumZInf52Z2>Ng7^Cxb@aZba7Iu}6g1I2p%3aI!L~`i1PM9&WY<j#gzb#C
zG-k6a>90xPSB%E~9*(*VABsZRc#ZQnJ~AG<Fp?%7fgF0L{Cs;h+a<@Blo8J%OE!w)
z4s!65(iLNP#ikNbD^wVhO3Fmv3}vxS_0LWsq;FkSrec5*$h6tb*o4;de)P@CfSMG0
zQ_^6tC5|87HkAEo7h_^U653VNGhtF!fTHiHLej`l{I1t{OhTyQgPod~h>pf^^A5wE
zVeB3Lv0#wdDwxI#G_zHGtkfXxw>V*o7b(6wvkZu6McgQW)c4MYcFFBBD}b!Xctl_2
zCJ<ZVXIlG)lPb=%5H?=vs8Hstd?ZqPL(r<90l6cAmBRXCa=!@n`j*6gL+z*fxyJ{D
zwn)tw`XJv8owJ_GD<?+cB$h*AR`e2KrZ!V?OH|TQtUJ)xq~yl{Dt7lcVVXsHK~(<A
zo$eo8k|stU!mYzZy~ga;J6CO>Oh3Ovs<^UHSFC){1F9^YNM++Z!(=u<yq*+6aZ^n^
zr@J4wc0{mi*8<BTSB@$C9i!4{|Dh*2ARZDMJbcicPe_A&p5{%D6q7ohI#<^OFKK&j
z%Os>b2Fla+=tUJ1=nG^I`L?5xDw*KGEIp0MZt`MFZmAoRG71^g9U$T;epr<^FJZ@Y
zZzw=h<RZRfOQAb;4<agfy~Ua%R9t;RhspMco;-RK!QDFz#?3#s{s1{MOMvNJm-lQ#
z+?p*hRNdjcB`Wbc@1!MERjY`oI=u(OO%zjONuqhdv(jA;1(k9f<X<$FHI9+`1Pc=|
za4p|V(!@I1N`8VSQAA4na_Cwnu43VAc9sz(s)c;P&ktgOMpstOY=j;UOh$I9#%0Xy
z-{jNk@l?J%_v{Gn|GdGc2q}&cN>IwLb+UC1?`H-Y<3Ix=NPg(4Gs9iZlGT5N-XQfC
z()~1we^D!z%jG}m%O3fHi+=h#RAEE6%8w>v!RVFjk&71tQVKUXs+0};Sn&(C+Sk|)
z8TP%M+FwJ4Ztxz+^qkQPh8AK6$|TW}+u5xVw;fWs-^HL(_w21Rde8-`;6g6F5)xbv
zB?MR4PL)U_HA|R93Z4}&>|!PNR|BvdU(2slsnr-n8L=oL5M(e8S~PXIM=fQvx46Ww
zsCY7qQRWJEBF!>z--nk41aPu6Z-wTwNc{UuB^lh<0u>#?C{J;@W*<6x1+8*3@x*?`
z7{J&w6Kv?-5haX|RHhfBlzl$Pd&V?HS<kS+CQ1EZ5|@HW%ofske<vRb%444FCinLd
z9630afpN48h^St}Dzrm~mpEB?_r`^DoU?_k?V?>4JiW#{zL8ok(iV*|P!fxp2x{j}
zF3BO97hF2Rkz9KtOg8#@*K;vMw%qnz1AU9|hE=;N%l=^c(J?QxBk(W0FNGdj=KBwe
zE6S)>b+|LNG|UW>+h)BybE!xCQs+y!jZ*Hg)ve7H{Fqu%&V7TSPA2EO@JPsu9`(gx
zle{4|r(XHS@~bB_1BprD3@^U8)@ij&2l2;b1!ip|#3fPzZwqv1-zdR>hg;=_=7`R<
zyw!=6m1IWl_s<5o+D;oVRX0}99d%zz_s7)^`9Qjxp{;byie#!zOXuXISd!YW`+<7F
zz+#7T^$hVPw}P?kG`=i=nthUxz`X>ecPp68!|TeY(M#VggwDrX+?ko)G*(%|ndWnB
zSQBNf9NGfX$YMQNWzAAB*d4NAP*iJLk-crQWUo{n)g{C9xWBkv=SAAJ(k*B{d;@ni
z;u>eh+I&xQ&&QGbI<3$mAD`HAH$U(kOU!pe>Cs9+PlSOkT?2IlR(H-LP!mT$2q`Gu
z5+nZqqVJSc!AGU>*LHc7c{I=>`+{D?lwTw}{H^EPHXXKCeYCi-j{}|boZJdTzu6+H
z=rFLZMXJB<v9L=O_wMG&!O9E{yyP}$e?G~JPq{unHd+pc32@~{BQ`9tJ**8FY(|>c
zR`Ze#!1c*bO_)x2vt-H>C?$*%C~sC~_*4;gMSYF5g;0dTacs^T4ykkeA0c(b)b{_i
zsqFv;)h(G?L^54Gf~GnhS=6Q!H#DO1VlPV3k9#`Af>t3HhjrmOodwCRgpj35%2$qu
zM<;_qlV96O&7@}amP}l(qvzz4x_85#X{-bQ6j0k`hwg}`Dp#;CczV480ofb$)MtjY
zz#gdR)*o%VnGfb-;prQ0$j(7cEG@-yy+HV5jM$x4=9c*Lgb%L?pdu<C0O$p}VcY$;
zc7g=MGA}ZDTe&$!?IuQ8wpelR5sN?5Nh)f#XxY?A6^8FXvyq6BkZ)y4*d)_Y9_kS-
z_&Mxq4;c~dk&zLS#Y*R;H=0W-CWvRomp#q>fP{5I;Uw~>luy!iOAt+auAK=7_KJ07
zT{22VKJwH_%Zv=*BK36UZXKRh5jVWNC2_+cPB1@~rtMhN!IhB=yx;!Gv5p)yOp*E6
zb*T7JqVky^UEZM%MJ-po{H<O5o9gj{2eky%9ug!5rjSHx<j@etR`mEs`abmw6mA8g
zVQM29D8A)l=PAb^RreExjbH17hGjIB6kRr>I@5p2!hG1oq6kXZ^SERyIb@5ju&nYi
zQnia5x?mA?!AEkfT;dTK^+-@lZI<!_*)3P-@8~IpA#z{LUWv{F<<vZ}ebjapSkP7_
zR>Wi|uRe#K!(kmILFZ`sZY)}GrFQ7-oi{X6X)$wR%=0DaS+MG%H+a#ENG@B-FDWFP
znY>3v!B+wtfUu~oiG%=lTsQItMF0YccdDwA>dVIa>R5fj8>LG&%xTi(bdjY6hW;V+
zFE$Y_odhk9dG(ujxjES9yP`sXbusrR{hV5zP|%4m$ESv{{rx~o+&Vq>3>96U^E=P-
zseg6!?Me`uSZ&5v3;791^u9U=L^Z+{=`jucz}IRjP|+ieSfd6Ol>zJ#sr>?Qz)UcU
z6cSBF#XGG$C@tT8(MUtuu!7*FE<_r(BS?bt$ElHCC2+16Q&RV-nVV|A1~fIXr56i|
z!LuG7ix%Op!Jy<RDNo0HrDpzscS)S1{0jo$lYmH@%;oGuY~!J*FIkXSyrOd<#TtTR
z5tg8GkC$PSATf7p+-zSY|Da7gCpP{Lp9t4uCn0P2IZlT<=~VM68EMo-mqdGuM~!)0
zx~+(V8(~{Kk}VlZcubx<8Y;H0Tp!<DqIe>*5eIZ9R*!_FD|0k*2#y4FnH66>4D3ET
z`N5hJ%q=gduX`{?nZ<)TzQD!@7gjQv??4r*=tS{~TqVfwoLi9&3U~2rWpz)vJ2F?~
zC~QSfnpPW!7eX`7RhZ)o%oh2b?T3b2TH$uezFJh!ZZk#umJa1oMniyQO6q2NO_O@r
z?;;Uz_+`;u%<H;8^hh?=q7GpjUq7aK@AQsI+OVPJ+C*7BcK3ty%ZqYCtup>1VlGDt
zD$OH3MWjl)Sh;q0v3zYYP0S*z*V!x5>((!NeOX2|faaa&+v;SLN94?$ws|1ZTX$P(
z24DJOUGnD<9W+XFYPFwlYbjPx|FkEHpfd4ke7;v2iDH3m>W#_=mo2LjUIxVPbJo*}
zgBUKOrKc{nnvI;%XQ|*5<ly#5=4wFL#s{}*-Y(lZ)5(|s)W&;-_(@Q}p~7b3e<o&L
zuvB$LP_I2iW`a(R8H6WaEp^xT_9QI|!<hRUvxOpA86M<R*@xQh`A|=lut0qV5xmS!
zYoqoO?^qu6l+F|*x^;IB_MW`3>Lx;g`*#9UexR|1Ux;2PyG=*N93mP0+j|w^Z%i6e
z_d*u8cokI<S*zEXX0;|Rv%ILII~DV#C5UWD!Jx}H;mya?@wQgw8!YLGM<IT$$VMLk
zwGcQOQ~%c&#WG$3c-KIUZBD1&)T47>Bni6kMF7#L+Ga--aLncyJzGJbz4PX%UB?Ts
z`%0xhodr0p%6ANGuZLKv+S9pbG97pG*QAU&W!9w#Jbq&=y61Yb@s)OefE=+-*|XNY
zD8SVNoWbt!_8d`j4qS--A=0uX`2nlGr0&orhj%9O_*!k9^8cEx)3CPA@sGC7CxFo7
z5BGwVzu!7LvUSFetwXDs3F_wJHR7bKt#hU)YqE8AxOIwuVe7<v>tJ&%O#lhRNnF<|
z+FEFh$)mLc7qGRS4aXrmh^|aZl(x#~_0=5+z~s+o>Un~K!p!<*sC^&O^U8twQ>?R0
z6_sv?(DVW1j=gS@^wG9Ka}G{^Go7^*NL>^3a20b_sVf||$;k2eYM?R1U)(k@udkt_
z0KiK?-#L=4G{K@e(?HMhTAJ^y8VV+qYnWE@hw=36R$+dNXvh_sI^Xrw{KEKF`F>Z}
zopqr3p~H>&4$_F>ch*;CuO7|0x>C}2Yd!sDJiWV8v$VIKelni^B<0aI*3&P>(-&{*
z>D=3QPaob?zmNLUu_*N<x?CZpy7&=)8y+1s%-K!dF6qf`eY>zZyAEuYZaYm$?{4Wu
zbz(X7%+XofaWy3d@!Ec2Y`$=)kOGs(iswi`GN!vClxvu8`-Qdn!ezx%CH?aD3v=^@
zLd8?0u0`vG&^}M(46d)g+g&9(fU?nioMg2`g1JE+i4XI+M}i>p)pJw-%!8E*v4gAj
zTv+Gk$yu<@Atm_z{3<AtLtXyl%=uz!J@hBHKYKEUC*?!cF)1FWd&WM<MjLp#KSn)8
zEBbx<NnlLRQFIPu^RD_=eE)W1mEMW7=-phVG3iBRMQ2lEFw4_am5w@{^QyIzhUC#j
zm57t&`Da&EvP0L^vpe*YKD#;p>{pc>EPV-<9$oYwJXEID2ld<<vgnnGr!A*8lQiik
zM~f_GZ`0Bsc@TcK(rbxx|Ikr$J;VtVO!&j)=A>?`!KJ5jK!|azOg<Auk?b3puKR|P
zJ9(e9ed%kbCEQbns681eNzhu+YJQ-j#re>&2sGh)QE|4lbhNb(zH6&QHj?^z>u76q
zsj%*3cMzVi8&^{sM^h8KDGW&JY4K%zwUrM{xWzCa&J#RGBH1x5!%1XYuYquSpei}M
zDO!USStE3`#=-%^jg@y&$nDi38_Pbt((7o63XuN;{CVA}&F<6=2p*tDn#%0Z?CaW%
zJwRh)M`J9dF`lFegKpccfhG06{BhT|!6<1hwp+V{*5*I%+cr>qxyx&-at^;Y(N4q}
z49t{=gz0Hn@~oFHOUcU*=U-m$b=H>CWBoZ?1f8z~$)DHNow?(!CBF5U_SV)*sZkNv
zvJ2Z@-Pd)X!<6RS^9@_RQ9iQfjF2NXE0GF2_L=%`<5EBM;8~VAkXId^=!xk>3`k&W
z9Kl6N${cW2x9BNDaeA#43WS{58MA&1Nv&2a$Qvha&O*tZMas{S;7SaPf{PMDKfFGJ
zpuarYLECx7ONC-9?H@RfBNBP*b1vx>;>$`)(kzO*X~i=^+1Kj&`D{o$0AVEG*WJVs
zMZ(dJ@FAubXZ#rJQx2YP-;GwK2W5iM!s)%Ergl{@dg))rL69$JBm2vkm*T(#&~ImA
z%+!lhzuibURm0kxS&n?{$?No5q1(h?@Hn(;nirY>GH1FKePlDcT|7Up<J5NN%xZW>
z8$RvgB<q{ofcQ8Fw7?Xa+#pE(V;+O{%{fbT`GD^ZKMq1KwGHPVldsR%IiJ$lPpz&4
z*Xm@0SQ~k*KB}=7XVidJj)#QCUEQL6uIz7)6kn(mm7}Lvz2xJ2Z+;|M;zU6{3JpVh
zyy&fuv=V~W8JQ65Bn@(ndgaW;Ct8$Nf?X>f9bpSuNZ0O5W{(Gz7kWftr5GO3>S`+K
zQfcZMNYOLCzwt@l^))F<K{N7Ysn<24U<P^=9ts^FMQL#TPh15bA3ZB2a2Js><eK@4
z)t*TR{z6z>Lo6KEH%2>D#7iux&qhL{a<2CG1R1aPfQVcgW3D-@TQ>7ZPA?lTJ);<$
zQdy8x48Q2mG^3NC;u(ZcJ0#f{Bqm;d`bP$o2Fz>KdgMFY?KQ4?CRHOD`B$j+!$qQk
z!+iFWE68A<P%Fn&aWmMt9I40~+mW0MrdDY1q+4cl1@d9rp>hocyP={~2&#Bs+Jg@*
zDKV6_rPMjtQEE6<wYhXj0atjuI+?mwLOI-+CA1r60ppn0(IoruNf}(aR%h7oOt~6r
z4kw)c)!CzJ6>(VIeg1q^T;QbOsf&NtBYD!iZYvk*wPRymJ63Z7DF2iug6O0j#@<i-
zNOh+JE7l2?(|lLq)|}K`l2ocYT=(X4%+!2M1sflls1#9ov1?wifVj7m;D1jx6o-TA
zQfbB1<XsLZk61aWMFSh+g8nIcA*Wn}A<eo<niR0Hm=mKL#Xko*+F12M2YZKA^E?n$
z??OtVMDS7qM4CxEFs6KMKF88l#(XS61=naWMSmzu{7?f%$XVs3gQdJU1nCU%CM_7l
z7lR62jbNtg5&klD!#GFI%K+-nZKtji!*)}l)9B^s!Q0KOt!T|kwDc(79&Xh~rH7H(
zB8rHGnckSA+Eo*JUHGR@IT!XIJK6?|&~!)uFPVvsNCtn2vn#6TpD=pJx$2lX_@_yE
zGakA)-9fxKRKc(W#~M50r>Cg4TxDm(W0$ALF7<{&BpQgSA*Bb8RqDx#(k=;)5n@6)
z(@Z9$2(+XCMiVX5#AZGQWNzp-$-G;XPJuu<h^ODpiR|mXy)*%go(TOseOdC5=R}#C
z{ziw32Xp)El8vK&&QGmH?+8wN>r9Pi7X5-AqGM8bQtNqVEoW@T+@crjnVziX$SjYu
zP|&AE&#9pUdcNopXQFC&ULZ;H3xmRTPY(8?2X=H|GcW*4r>Cku;)44oY^l#zvgEst
zeC|OveKua<!Jv%CgZ7{&Q4KwXZaBT+Xu14A>|8EGy^OQv@`EO4f{piinfT1iq$1rd
z*Wn8RfCv)XCQ4)2((*?U#Z9VJNFA(g>S|O!xwuxEN2aTFAWnd3VlHPS)HMQO(5t%>
zS#zdfDGXc@I<};HWK|H>C#g>+^E?}*1}cwh9y32x@h1h3@Hc*|;%}v05!IFs&dK$U
zZHvk!Rl<Jo=`6`LG92{5n{f)3W6wMWHPFfWscIHk^M-^o33mhWr@bic%S^A<+pfEs
zUUc<?lyEr1j?~}xi3zASN`qtv^=lzb!ydj80ywQ}k4DphtLX_vO?QB(<aD`_!!`LJ
z7lmf-&NWT_2a(+HCt<`o2^8sj&{G>>fGW*O?ZLUX{qY{;6fjD8|G^%tN((pO`#v(b
zNY_KX95Xf7kMAV4GONxq+YFtquj+M5u<_K1+}#fcIC>-@uy02<X39M=7@*oZQ&BJ~
z7gsbw3S@YCQ|gXnwPi9<GwJ?CRSW1lw;m(hW2UV<qu&{&e}{K@e747<ANM%KTYX5q
zl|}}&=CFFCaw&Z%?>`+$aBBM!YB0%f7rpF{B|1+NReI`AWV){ib`wWDt#p*185}XR
z;EP~%G!=&388*i`(Qb;5g#D&9b&=*IuCeCzzsQ->=f|pvoF$KDgvMedfOtkz;~L=Y
zU6QowBSa&ctGpHF>l7MV$nG>D8Ce5>P;7)rt>;>>4>d+8h=~;*wKCECw-(09Gz&m=
zcpeyaqG89DPK$eSYNw<&Ti%;yf4bQ?K^TAi;-{N!<0}PX>=|WyS=k%^c%NV7sbTjM
z_oPn`>L*hFhRWLn=>-~Zx`h-WUi5?ojsUpvU$M5|RYmK{OnVrvw^zeP9u6HgIM~Z|
z;+r8KV2cl>6{>JP-td<VQb#@8Kzp-6OHUcQB$heMv;zAuLX>%=*TtenO5R6>>>{CV
z=~+}T@>%2vT|$M&-s(l1cw>JDmX1tqGIcRViPLiqfO>9t8@0?AebJc+vPiju1pEkn
zQrsm$c9V~cr=G)*ni3BucS=hQ<uve~1$H!2U}ey{Nz;AFu)qWebl^O7-oO-FHbpNa
zb?C-MFsV!$_(UAw$h)$dXsTniAM1|4Xh<lNFJTk)Dlg_T_vs#HYJ2Vo0(UWn2_ya~
z<P29P)QeKQmD(SyUbLKNV01^zC>}jn>9@+W5h>64<b@o)Dg2{9c~MzoMwU{b9Q;5!
z8pWD1igk!pnYun#oiNvX{h}%d;Ku69Z}Wc?3)IOvB303`2O%YQV!GR==wC#x09Z}g
zvZJ2RXNw~Bbn-wGJvg6$Ux5B}@}U{QyS#$bjq1@(20avs3P9~`y40j7&fvmx+(3I?
zETB)1dkEza1((-u?U`9AyDpvhq-11(+qh<CK+xk?4d#LENBBZd{AR#hkOwwoKDmLv
z28>33jJiWNAjVt=M_DWoDjj>Y%Bot{0E2dH8|1|V@DCajKtEf?+Q+BkFwg@IOfepq
zL>+uT6|q>iIUe3t9cMCu2#Hk*6mf29!xk4vP;Qicd&aY6&mx>kK&;1X8Vz?AiD2@+
zjmI*xV#-3WlH(wyvIXR#rsILxTK4?M+D9S($67Y4CFJc?s0e!~8hgxeCT@P*DZ!-C
z`C*sVnnxuRdzZqvfEfHyQ5Qk7L$>J-B7T>_Kubwsj8|O_0ZNaKgivv-p^Z^qiLtzl
zw6aAiH#H}MotG2O853rX$l(;pmX=RWeQ(z{OBbrzI-99S38BcwGXlglsKF%Fm`cki
z@~ranR!@j<2tfi@>Ke?C%Z(*U+Sbl0N#GW>!$A3b)&uD8E1_pu+$3k6gb$nFI>UIW
zv9h=FF@$(+-o2$ajglFipnaz0Pxth?V>zZAVA;Oisp0h*HyHFM>n*T9*``^atML2&
zWO?*lc)f;Kj);!#XUw<V>bhVKK(-B)Pfe-$+nX1K8*9zRgoY~))Sff}+*hWS$mc-d
z8u~<OA77>1@|HhWb+QCRXYb=TyPU4_VD?RWgLgpWrRQHLwhuL>=3-z~YTgYz2Z1wh
zXf2M|fbs%tL`$D`OP|h`FuaNbgA*{LCt%@0+yqqOnMdXfi#K%^S8h%h?m*aM$6A+G
z-e+6t-u#W7j~oIY77eqhU$c3AaGjJGb8r0otNWTHG3E&o{0l#&oe5Sedac`gUrgNT
zxNt7;mYAmSTGX>p_R9MEIm(GSDt$9YXe_G7(&s3cI_HQ=tm3zGw3-mAmX)8<&I|+7
z&sS&XXoF--WQ)Nkni_LoL<o6KhaG4i5o(j3nhPS4t2K33*t3+xiL^V0@^R&~o!&Q+
zhn(RKfv<;O#|S*5RvQ7Fy{j~Df%c1xM+Qfd3O+p=#^|(e1R^LhWpM4-wMj5yn;s`2
zW6Crgi|UHvIAbdtdmg^tTn}c*Jj{>IvO6<6596b!k7ixhXhehBm&{V8_Z4m+w7E7f
zDzLEgRgO!Yu#2KN*Hx@s!(fGCl>xnkj*%QRC`rLIl=_yTHL>x;3{w-&z-P$`&YX)V
zj)mrstg*ntR~MncO^;-tH$_XNR@EjU%TCr@0j|ovaW@ZQXCxeNx|!$n!5kN!P6MYB
z{%HzztOF%BK4DtGc<QSe=Po$GJu}KWN4BS>RD?DOBSeyknl~uZFPpK2z9O8IXi)8;
zh~hLBb>iNDRB0vYm{t;D!EX$214RH|k1rPBeb7hn?F%`L3sBo8AJCJ%{SG>6n+<Ym
zxX{ge@?v7w7>#`0+HY5I%8oDOb^gkb&G3sk`yKR3H|wO6BY1@i<VcZ96kgFR(8=z+
zPnol#?1JHk)#NicLaoNMikLZXB^y(k$<eoGF{L%tHLgz;d2>B%!3>fltr=P&z9v>@
z_+b%l)tzrWbIU;K&KPnd5#w?>rC>&IkQ{nyykAIaxQ>--&{ByzC|SA$vQ2C-rGnv2
z-ce90^8odsl#LQDbrqJbrgrzDsFxt&YyE}WfAdeedqCx^o8Da>ln)i~2JibiElz`#
zf*NNi3HxBhLK%(^>VCi@#}7^VyIj>E`9&q?hFg0xMgT#Y7<!RATmQ0kT%YBQuYJil
zC@ND-n*vjG@Lugb9PYp~yY&qDWPQzp<SPsVwEbLc+N|JYDp5CU8h)pNS9ZOYVA|CE
z-xTRFF*@U9Nb1AbEL$VhZ*0O@YAO0zF0x#3#7$l#03hlgwA<3}l)(79ru%7n(e~W;
zzltiWI-qM{x24Ag%!IR<Q}+Z~k#pbY=UL`BP&?bL$I=pA2Ey5?^Fb{5-1m1yPogRV
zihgnHk5UvI1C7Z%s4XsOrV&pz+5gyaI4V#Y%WoZrOJ?ld&BRJ(kt*mAJSVNsftQ}C
zVX2mDQigYghMTDs*2s^E{nHl;q98vHHFQg006a36XAmALC{-d*hQiz<?l7zkB-6c0
zw?cTXq!Rz>NmMIA#v1_Tndib42Set_F#xC2%yY8Jg*1NwF$?Z8MDc%P86u@p_Q7<$
zJ5!8ka4-KDsvBj@3ISeD7R~Iuml~izKj&AZ11rpe5!*;FwH4^5xUVIb1~p^l4jBr5
zuyIuKc(^6I?=(U3z7}Q=#wN)B(l-)omGQA=dV(S=U%GKPOyKXkQY#qZ{U?z3Rz7u2
zH>L&fRiXGHk!s?l)G9(~M@dJlz!xThltCm1v@_C!-*x#$wgPOfOWqAZ{a*UU6dbgq
zz4C&VQ>dl%m)QDs_x#zg3!eWGVkipY7Lkeiy*G#}4hjBM^a(`-J!ZUcq`Vpg1Xefi
zk4wS<n%N{RlEfG00QOT*z^vgeXhvWM>UK7Bpup#gk;H1zODQ3MwReQvFBL@TLo7xY
zkMiC(AwFaiSJlj}tV*S%tU|0CsWa;_l~-1l!B!rKogjiVEC42^Ro!@2t@;e6FJq;?
z{?zfr4802d`Fl#C`^D6eXvBAPHjrI!@}PPu*|)E`R0CkvYr5(`Y}jz-X~lB*aVrEr
z6Tjk+XEvS--4`a*3YgZz+^e={UpE@z2Gkk+Bzozj0r#)3K_(cKU)DV2TejZVV>wJo
z&f}p$&@8BQHMGA<xD)6!#k^--40xgdTgQpeRV*C;SMn{3y{eR<pres|a8XzZ;Z#*a
zEvJ+X+5FuahwrK>0g~U;?~gty<hraQqkRH2z%|_7fPV6IgSpO%5EQI>Rsl^k{+xQM
zE*rl2oRls90^A|zg*RBmFTkM+<oNR3V1e5lxQpA>D3$V-e|_thuzbei-H{gY%vEk_
z@$E0X^l=0t(|q!1YA<+t+x+xeg<kKKTvaqtP+_lUkarY&I&FTHWqL{QK|;w^jPrBL
z!!&U~M1zx@UFZRV>K$3Z(gN-+5!6y^xG&@2cZow!jef^%S$~c?<-fFyvuS!Z<PO$x
zi6^hScsCL7r$<i8FMCA237pwdkMa+pRai1dE$GU#oA3LnG)Ydsa_{Fg+xywUn0k_6
zFI=5~>moN~c7ZrzkL}>w?aIVrzo6|+S#q!BziICadK3@jTskVcBEGL9b<w0QoKf^5
z7L^#Bw6K_I3_kQME#!pcy6ySIBx8Uu*t@H~wt%T_DFF5pQDjTIna_#m8WY+ryq%ch
zDr8EYu-*7EKJ8@O$L+#|3=k!DpWGQldEu{xN8Em~S}fVCp8K_D9ZScf1%y;;*ffjE
zwKG>nT}lP}UQ6_cx;a*;5XBoDyF-|tv<|*NedF?;0R2lmWm?%1!r>Wc8$ZBW6o9^9
zCP*()-B#LXU~4hj3If30oF(lVXWKJt5RbfLOQ%v3MY?M#{1&3NE33`!ME&Raomu5+
z!1N}|qU_IADmz<Tn_N5kRvA-lqPWB3qnBHHst!`ZWV622zbfzsi`#Fl9)llXc`F?O
zO;UhO)ire&oz`m;9ch_5EtUKUGaGeRgn<0Z8f&V2_bs{U&}YXSE~~MxrZUrWWO|Gy
z23KOvOfTK^WdIrjj^1Zq+oH*Fk7{n;=ZAtp`_4JvPKY(P!wz-L0Nl!O7j1pzy5XvP
zPx1z;c72s%x$~XK<>i>{$r1jeZ8{f1Sa5rCmxTBya?I_OzVY@+Ng+c@`Yw_hIVbvJ
z9P9cl9DSDq>++7|mP(MuCj#7RdJ9Y6U@w}_JcB*P=_B*$#v}otm1kh$lq&2SNz^sx
zca)_&V#?B;ssDCB`vSbe+LV5)g*i3MqUzH2YVyCQeV=gAoO{jU_hM^LFDG=Z96^;k
zRe4C*DaS~64GxJ}y|{I4gc=DVQHwmN>Y}MBqUI#Op{Cb2bvyP1I{^Q8i<ZiMG-XZ8
zs_!lZ8J4GMR&G?{6Q^-M%}w>j@fW~;e0m!4fsjTlDd#FT!vtbs9vLwSvrw9ApH^;U
zZ)m0|=}BhoX{VNC{+5Zlf7vm5<?IYbNpx3WVdkZ>c@3H_=s>odo=X?f1QFrGXpKL9
zh2JBoJOablBIvzc-$YdH`&8#0ctnYoMQxo9fhyVFn~?(g{opg7^fRAlJ`=-H;4N3#
z&$4V{x#NeoL>L$D;1UUFDMdS5O4P#`-xGUs0?8uJaL{|9>9W=kaI-GS36&XGcsq`%
zjXI!hHceez%RE>(+6=3vDzWbo!5s4A@P%9uIS>%7-K{poybl{JEBpyjj%a^tfhaC+
z(RP<b3D}zL=x_X8v(-JedV#Ix>{dk!n_HccF>m_VzdoG79Dq&qT}s4pK+e@+plcMt
zQY&f=bETEk+7O8+=bBmS&I5t*8N7clCP8U9zD|j|6V0tz8;zJF&crM6DCoZetCz2c
z9H$~r1H+4Qi1X`j)nKK%AY%V)rX-ex(l7GKgDO>(X#?b;>YJsd=9KeF^7TNe$p>QP
zqPpf2Zz1ZeAX$D0(pTrd?EPZ&qaj5Oj|HAMxk~|$^<vtBq0D7G{f|!<SIKZ>f8>!l
ztaq4uHyO>1QfTtk>5B^C%5AKv6eA1|jbFhxP<o)H5PwQ_&Q(O!Tjb^HLqw{Vf3Y&k
zUf>VQnP)=tbu}qZfrPV!FUu!@LY+zi*DKJn$YA%sX><o14%vo;5vA>O9Up?qLcQ;6
z$t1?~&MCKNoSd4Zxzmf!8=;o2g#UeV<<4hiSuHprD_}QuM%BRjUHPAxcsEG?*NSIq
zLTmUWk(X@=f82OqkR<Tx>lt5QNb50g1989+w5)<z;w>}VzeMhz&yr_`S(jc{3k2{c
zt~Dh3v+ieGdLYM|caC0WQPA;%Ub@B*UCP?EX4V($iSMggug5L!@VtRE9unNqA}JPV
z)R6ko92QHSGv8uS_N>lqMQ5-`8KI5#KCy;+^Wn@)<gX1SBRZtbM2<DBm1vw_iMDIS
zr)2`~*%>R&-4|*Sr$XUWw<qUX_}M<pmpli3+40;yloIC4-iLFqV~zgm{OF;}&D%4x
zpSw14HltnI?C)9ETKc_MdMq-gn1Mdj46aDc%8s1E?9Zm~SaN3KvVmh8ZbV;_8feLc
z&%KG*hWBSCqIhjYexr-Di8!*zT8R4jg=nQMxQr&Q>}~i$B1#2S{irFmILZjcZ4BeI
z^RU(N>^y^k=9EZ~5O?i3pmLwcjBf*vI1f~}i{~o*l|7QY^;b&#K|<Xh)cE7?ZFpMV
z_Zu=hra9v`zpMe+OtJg;v|-B3s`5kmT1({XkFEw_bf_35B+iS^8j4SQqx1j0Q#U@{
zvA6%7JJwzDQ2oI!e5mcyEUC7b|G$0u%Y8bic)yT=HI#wwy>#o?OFVAc`<aBVB@+Ip
zchj0ueuB;}BG$a%IiK<QmBk?80#9)@z2rH<%!;ae(In<;vLqUiHbf#^zDH+8i$EfV
z8J#svucxzmfrQ`;$7dio9Ku9%1GyQHr1y-FRklS5TqHVgvvmeDa!grZ<2y&^K<7kz
zYfO20rVI3)RR*4E$;}s@gQ2?*$X&4Ax6<KyYH8t3-%?D%w1xt~6ZF|8tSsCn=H}pd
z=xH>C+ztb*+0Y|TW3~lli%D!QIb#>-)A<@EGfthv0f~kvo0k-+9eSF9xEdx%z)*ue
z25XUl5RlHTAn@8>2hM?9&_^L5vEL*QVj^B&A?P%c4P}eA&=+Zs03mZNmY_~T?k9re
z?0y@56NP|y@5}xYzTHm(r!zT63&KV?#<LM-o>Q>|JhV;#yPxmSy>ZzixnKj#!-DMl
zXYStOnG>@~0*kPDff9Q=gZY8I<>MKHo7Yj3-`__hla+sW=w%kD_Xn1j5OHlmingBQ
zd0_GkZ|gevK|^;b4G9z~4@vcnU<!?0K=67uwCWl0c>F*8DfnkU@hPZ{(bv?TX@nZ^
zx7#daueB#brv2^I)a_oKt8Ps(nuwq9|G{sW*W^d}a_u6pf0KQCwSQW83bOEQ`JxcU
zz@7foC}@y0E~X(Z4TjMSDQ9>Q8czmG^a$@qEEVO@tQ{(zBi1WRgCx$_;vYC;W!b>r
z`Bz61QlM@Qi4bibhYj=;I~=u$Ezt=QBJT43Uv;0#ROFarrLRdLvg5t<9|oCQ1IMgu
z3jiBof}((E`-$(g=wPy%JUGl@nu~n7NErTeX!8y`4kUvy^QYMYm|0QB=gRWgSsGfp
zxJS7!lX!_HHJo}n9~qkjX5oU=FdnUTGcS9lJ6Q3N1_b%+rrzYJCZw}$AFrum3Gd)y
zTs$F#-@ryfAAu*Y6>3<1Uj42BHJf|P2Kgh`8+DSZJmolz?qK-rbaHOd&WSACvh-4p
zDjEt7oo%_1Gl#u0a@3ORB;{&Et-EKZr!b`>3ce7|?2df=g??zUs;Wow)18i#uNw;K
zmO`JIZkw#6TT%MY4o}qnLDzteUj9j=X5rC~nE>C<w-hMR(XhWe+ueo!^Z!L-n6N)J
z-RX`AD%Xk#>bLHt=Ah!)1bKvW3H?hM?|+fuK0P{*)AZ`BrLNj>8|s}|)zdhkjQJWv
zEXhCq`KjEN{@9hXr~4s8_k-?uR?Zv45i9q@=>L2BVeZ}!<Ey{vx#3f^M+E!Dvn4r*
zHmNp(5I~SnH=wpKr?T-4W}oAuV{Z(}-WUltjFoA>x+ZsIle*>})QYaJ&E$Dt4AWnZ
z>B~b835X<6GaLK{N&`7eS?{l8mY%Pw`dh~C!M&AylSj(#gt=StO_AGXvcr_MHNr}>
z^&f=I(|kGV9?JV)LuPe{c!idPiALgx<>WL=_;!EANV+Hwj&XN@qbB5{@uQ@zB^#AI
zE1e0l%$r6sQ_(vqbLMeaW-w#m>qf~S+V2jgTuQ){hIe5!Ls8EEVuB;Ral!%mGI1e4
zWMn1>Vt#c0QeWa?CL_(2hK{S5nse$&qEBLxvHpraiJ6&%VF%bBHe=7k;fW|cIorpE
z<>Z(mW67Z8*-lHO<|M>+2_cvg4GXw7F!VYkxQo_TBrV5KWfM(3elO_M7-UE1GLAAu
zuwJSr8B5ZB<|H66Rq1!y*LD;3Ctm{zsSIE8HE8$xv#Je3$us`s*aJ2nL8+!@?`T;M
zeDXwY^W~E`08PHmJl!cf@f2e;{^8jeU!KjTo=$(l5XMr}Nw>oU&1dnXtmKV|ojhFO
zPE(2jOeBkp&s2jS5E29Odx2Yc3N+-;HAgZY@53}ulxwA{|Ljbr6;j#oJ4E7p>OfET
zDqopM5<3Og$)JBX`L$&3t$voTQop|T&P{U-XW44-yNQm(9CvVz-Lt#&&(H3UCUzjc
zQoKs}%Ep%)Un48b)O7>#q2ed5=5C_Gy_yW<K#1j;P0gp2oI_{R|C$hYP5;X(61nuJ
zr(?UIS!D2Tm$PDEZ3bB5W>(6=6iD!kqa6AOj)@}hLci}EuF@z|bW2xu_2pm{l2ak`
zuRG$hZWi6!i_>8-MJse@YDLEST#AFid1iu;`$8bylrL`H1ttHYqmgFu_b<quM4d}Y
zWzQ~P_jG3RYEsDvlqn)VU=IChNx5PxKpqxP94(Q`p)5CWsr<ndh5n&IJnuYk&!_U)
z%4y}hM8)kPmzW789&x9_vR3Sj*lfkqGYENxBG*x7Ndy+ezKBo8Vz7-(MG6zS_1cTB
zGrw==CBU(k)fWF-V+lb&{(5BP`SAzP&&eY&cOq++_Y=;2ys8UdxwDr~Nhf82?Re59
zsUzQZvMoC~?Iy2B*2&nx3+eA-3Cx$X>P7(+fXDQY9H1pBlB=pBc1R4PLIcXa{A9=n
zy!?3&efJC(7A9#DuXVp5?L$1GK_YQtC2A|QscM?@ldGOQubb-?39kn{KE@uzH7)$c
zHR6hRyt?p`J_bvce@Z^7ysC*#dx<aL4Ml26C8^edpPl?5G&Sg$6@*x=GSi6>;KxBz
z5BNazXo$L+^3dIu`bn2#`Regi8wUKwRd1S3F9Jx~PcXwvES=Efg-ZxY2%!7#ljqe5
zK8e0wQl1o89(W<Romn@DSw95`q!%~{btA<p^fdB*7=_|nzBpm2b>D;9<n-4sBn=83
zF_G~zK;kiQlO&rNWzFyO5D?7)I<3K<h7ST-;d%3_yRxxT`{J5vU+ToQWUxbZtOGZo
z?&`Q~lb2$ekNt!ven6P5T7s#zDP@fUKjyuf`FW$}Kr4x`ooiDI8w?q3v;C)SYW<w1
zw0WAGd&L!$o<<$izOIFs`;xnM=b>{ukcw2!3<6I3Rt%6-R#=1l=;uh<MNA`9PWIoq
zmU9~e0Uj9AMemQw8C?Xw53^0+p6oP!UIHnG5)6vcmWB>d1v?2^W*XSB6^qc+W$L&c
z^~m42V0<_hQi4wknyiCr1lNnwsSo$4$f<@G(ig0JAT3QZztsaMhAp!IU08oV)~c7P
z`$j6_tpYOcTIvq}-UH#{9lw)i)h6eEd&22$@}_Lnhc|R%YUsuMck{<R7O!XK&;QBv
zwf|>MU&}Rp=3F$1Ld#ow<8xT&QiX68&(6ltezkX-1Z8dS-Qn-|?*FFA{|kGU%wMK#
z?cL$8_wK)b^qc3V@BUXuKjj?D);^5A3*5%LCug%9(yy*f(D7>21<ily=^<N#!c?Sg
z>eK_fDq7wPRSIfKSvpl<DVsv4xL9~5+hJ<;zntc${+4Wnzj9bRdDtjxs>1yk_nzi3
zYXRkh<ww&KOAxS!6g?ZvwQlMKXKG>SDp_2U1Z#<#m2%yzuV_sLXeOAGxRf~)Ce<2p
z-o}Z;m}kZ4%4o+iGEIpc`>7)%-{z+jdq)SUhE5Azk=KOjMux5ox8)TrtKk^fKF}DU
zBknX|{$%M<;!xoFG*~h6g#YoVs2thli$IlxiBmi%KdHo9u(F$I!3zJ0f0i<GPmno<
zI&XXA$vb84O}iG;-$h=bPu1DG%jG@m(NR}bFk~7U1`K{j<Cl379o|&2`d7nBr4%N*
ze+Ke;x)3*QtNlV=5#iJbDUV*ZV?R$W1|>gN-uzK#^`Of6uIq};O&`=Trua0$%H=45
zni+d~0ET79l(7Emn(+9jL|C0D;|@87Aa>UN1$J+Ft1}&e-FYXY+$=A{PDqYqa5V%Q
zVlLI(ly6yLiVm1;TDgJVRD4jdy=3mw!0;*Y*<*Ar9iU98nXqbLbMT@^@;4qKY0^9b
z1Ry#a+XbMjdkPOV_*5?%f3QUWzkWmcX$*m;oVesu#~T;N%&IJ6iW+=`)d-7_LU@GW
zJ3&50COHTkRLmjqE!?M5Q=cZ}R&}saG0~8&^k@Fd7`cbL>H=pLIX?GF?&~gW4BOR-
zJ-_@gXn7L9cUz+~L;%HiGOsUW9*?|TbQOFDrQIVf$5Gb<)p>8*MuN&NE!oUpdvWwu
zhR!`l$3_KD!UWh<@HDsRLD7>C6bCF@cQI<1bVBX|$~hJj5DhG1o^5TZJt?StPpU#p
z3-*;TE07?<m4fnx*{VR@K~-!K7^qe~Gg<}tdYQV_@FJ~Y?$4AB53nY=`r7vmuL?>9
zB%Y(SV{ne!1!7o~Yd|2{xz{CKtRtMaxt*n<ZH|$Jwqbt)w&BK2HHk&3m<z#K1+Fm9
z+Dn)))EG($bOHvkfZ`l?r&G=(X~pSNhT|4M$7@8PT#T4x;tiH%$AcSu@G^OjM?$xr
zatm+D>8%%N>zgyJm-N=lBW6o8Whn*?m=6pFR-VapT)va50Bkky;`$fU@hJ!>pu@v6
z9sWulTp>V2PRI1jbnIyB(=)9f+^w_VIFJr^r4I{C&T5QTJD#cI+_Rr7VvV9p0ZYUu
z$8UPToCC{qNFd+*9HZkARXhIc&a-M87sbP0V<yt6#FfADEOYm?bfEP;OG{4E)X{=m
zu~hOQP{;RkV)L~}gypDtGz;I(1}elKj8$$fOViD#27k=I!|^i37F&PH@v=3G8LnoY
zUS#aeHkpNbTJW`!(kom&uIhcK<T;8}M}s?}$Hhs$eT(NYD4Z7oC54#tBK_X@twDpR
zAA#`Q;D6iPEHQX_3@Xi~XBMaf-|}o}XW|Nc+EU}BRMkJP)b-72FOVwCg_Z*{eLF39
zdA9ilp{`tI5|Bd8T~7%r<4k?)6M@Db(bKcuuN4@kZM``^+qv15s(^U$-PrSf-)eq+
zw)xeSx-J(#82cuer;Yv2J$B&A_OlnHI!?Ma8K2cAM+1+<M3yr>5W>?@(iF<f2YGQg
zU<MkNt*))!Ih46rD087u;0)@!YASb;iphLza`^tje!u+P``kgY&)E~{RLufV&Eg-b
zX40N}wpcuK2g919Cf3)N_d8BU<+zg!svLE^(YUpeFYVL4jKimItwGFj1Uswl%uBr3
zQ$$jYrf92zvwKe|j^N=b91{7ZEZ!XMie{yrswDw8uudzmy?5ECyNV}+*KD}-9GS#%
zQiG?74vTwm7G2>1PfQ!(%~;HsmI^<d;hP0YuB&KKM`f~UdS!7`3Pn$+%n>AX)fvrc
zs3OX|($Nh)(UJW%C0i8g=$PrC>m#q{*f(}yQOxe4ZYAP@4!^fE_`Wc#+MOk@j68R?
zl&knr`9Rm4Tez76NS<D~pl8w;3;g8LohpTNMpRIUss+!|mjoHQo$<PRkP1k^54cv{
z)=3sj3jeK;#(^Im$7!3UpSG`ia)4l?w0CtA0pB{-9TcKfnHsDzM1fSHn`v7uY;H|&
zlgijVL==OB5%F@UUjYIbo_{0wqYPG!45_AQSAL}Yb<@~Ydd*pnjpwtb=M(LN;jPAr
ze|n`mc|b1x1+AKl#{@pkD62?OEZDn|dqnDoZM{8AMmO`W5M#pn3YGKYvyO6;Bs=ei
zUV8Q2XRdgYuoYKcPKIvEX!Z*VVMOPlF6<DRaUew;Vn+UZ_^9@HIWTH8UjRiwy1%|y
zT)$w#L%1LwfJd!+*-kCb0u_i3H$t%Kf(1OE2iG(!Z&8qBB!2bv%U}bQcFgJuE3xO-
zRWAvMa4M#uc5eVGtQ=@R^*PTgL!!keGljU9!_%H`!*I(ZQXPV(*KS#<LW-m#mh$xb
zn*|?hYC$aiTg<GV+GrVKXuabAhskikw&YnGaCNWi4sV8$MCzEWmAMwVXlSK%YL$&2
zg^o<EISDL8DwraC)Am(h_H1`B%|{ZTl25fAI^vu9^R=?ngc@akc<LEUzol12qXQZ-
z(w{CprxG(aU`wKy=5D~K5s<~5co{3la6Z<4f-(2?MNwlq3Wl2=C0oj4`spw-DO{Tv
ztUzNhi)FWxpTOdJP_9Uq84G5pAV{KL+~(1@Hbl;@!H1a`Jp6F{0nDhT{zan{)!t9t
zmnX53Yy+f>CqTsvsn&i`qL{gLN5zZQl&1!`g-CoK&l`BgZe}~=u$lCz2>?39dd4)=
zE_Mg*bU0zCfCCbkZu~WwbbQcJen`PX6%h0^OIiT8VZajLRKoRhQ-Ms1aAtRUqbeAm
z>ojg+qmmTY&5c97@c!gf8|`KeE+75SGa;~mrB$Q!$5=FLVUKd_9A$*z@{_V>bf7e4
z4!JV^wgb6`b9>_l(`-)P#licTbaHeo&=DtBs=m%95e5{`xowdHU|=2(cuAU8P_atO
z5uEM@j)^ZAhT59w7t<C2^e87(S3#3>SWuqyq4060NF?MTVy&IDa<joV<z_FBcEPrJ
z#rxy5VD#rvvYpa_OxF}idjd16qauc@E3yx|2>fMs*sy$$QzBbFg1a^@G_8xi*i@nr
zeh*clcW^%Yg_Wm+W_W=#DH~zCMh?6AnPZ|<nc6sE2pSALvz!#EKw5fqY{Oi^s8vkq
z#gX;Gj7!f`08x{P_fG=wF>r$OmcRC7811T9#?ryXYJ2ny0L^79)h*9RK^@Tb>oh+a
zHs`pZ+unJ~<FAivKTy8hrWsFX#3fGZo6Ad?N5o>Q;%PGxD*yFgr(?SE-$l2dO-|$T
zA}LR!Qo(vkp3D}csL}pi-U)&5k|?s}B_Y$b3PwK>m+OLzNXM>2<!?1B@2ap$%^c#;
ztb@H-(8?HKjkOCyW@;*qbyxM4gIY2d${t!Tm@Zx4)H3eCGHkCTNJA<mhj-;<;?Wz2
z=0o(@5+(d9FU2NZns5jhH>neK@or;7X0*4ml6q!FL4(5)`WRFxh=fpz4d=`uBx1<k
z1I+K7nZ;+XDCrV1BsR>ln_MgN0+%bZp|lL<FfDl+h^HJS^Evwk(rD2n%Iy#lLxW~|
zE#ixcccyAm0+egzWR{@8pKsOLt`TdipQPzw_~)IJLAvlnCrjRN;VA}CsU9v(yKEpl
zlX?zH@BzEBGSd@?1Xe5Xt24q$yHFzvhfM=T!=7fsORMwS&P83T3v8*~PA&CGuxH9`
z{jNC0Pz4x|ZD;R@Qnv__QgI6oRF%F!tmoykc}O~(l1Ay%yd+aveoU)2pE1+p$aA^1
z^q3o0{gq`?o65kZ>L+&RqUu?G|K;2`sX*D@y84^@JBIyDw)Quu;eeJX%n1$3*ktTO
zB^{*=zXN%b`j!<v=;SJ%(xV01J{zbNKMa|Ug`N^9-EqkDC$(B)jJIucrSGUhIHCIx
z@}yA>+1?NoVr;hb49vwHkq_TcH*As;830uS&_Q9?V@{X&Vn!~~HmVO|h&<pKB|<0y
z6C6jj9a)t<;ZCz}GX-s|vX(eZDjLlNe$3}SFw11|UiEa2m3L)FF!7=uj0x21vze8v
z_>!9?@2G=2s>6)q_1V<@1JP;Xp#9F)>fS)enZzpVTXH6XC=?hG^y+FZM3yV5IXZ*t
z$*(V(Tbw%-b7E=aJF0U{UhDw6h_&%9H9Xb8)7FtKz0Hd?Utc4#XR$^y|Da*$sK&I9
z=NN7_Cc`M;4o8><9SZKNcm3!rS#HG4<dZh_3XYfwYmT`>sFd;rQ#wXp`ph;=Qzt{L
zx5L*kFse8(M**I7^0rF+tAh%%oiiDZ*N6ku6^;6bbZtPmw6A3dpT^&j0%1$wdY3zx
zwf9J~7?ft_sJiP@jh`>#t!fUBloCF{PsZFNV@8#xXpdPjzE<XxJP1_3mj8o}XT7T9
z<W49jJyg(n_AQFdrsH?RX|eUqGn|M)vPVBOw(SP73?snACf6xu;0x9H^tsoXBefrD
zj&MsR7q-zl*KM9tlaKqA*cyTKyy@E5AtAexrc@D+(Owe2k0i=#CM+^X@sq&zk4rlR
ze*Hoo``1lOuvuLjPGYKy+Xq5f1g6~-8_J=~7g-~Al;CK#R0<77nNkT`8ny^bB{p|y
zxFxcobd#WR69}J)iH0(`J#<*<e>qk>mC<7S?X!{G1!iW|o>aS>cPzaO*?=B&t?7}t
zy{VIi&v$=$@KON-#Ng+7^?B;1fuLAd|Il07hj=LHn-ArQF1R{)%IHeC1o;Qo2TwON
zH>QbeeHRAk$fTMath)rWB4jUyCC?&&fnHP^dMD<8+zG6R5F79@(uc2{trbHbHs(xB
z|F{!}rX#<C7JsbFiS3?*KzS#&W+%pf+=*?|EQf}58>AJIku>1aJ@cB+c*G1r@@1o*
zcZSvr%a~d&$J$Bl1ka!;G-L<11A8f|Z~FINe)svw6(NweMb?IV{W52-LD?Ms)9*fC
z=qdDtDd=i&9m~&87LFVn^Yf3t{5<hKs|-}C(x?=ls&V^Z4P(9si{>6Yp5KG7LKOX2
zB+$a3J-1jY|57ZS>4Q@uRLN9ia`rjE3=Ojr>p$*<QzDc}CqCtNP$W>8&0%(8`Ny4b
zN(3bv1+?i>+@iw?F^LOzsuP1FHFD6EDY%_#(eS9Jjzq#4B)YeKR9gOSMZ6$w>F?fp
zv<itV7$lb`(n}tNP&)*H+^p_^aPiGUDs%uUd*lULb##8wA63d8+c8n9mBzqju!ndu
zjte3mcZipXmXb&|Im{tk00BvvN3OXnS-Ihqk;LQ51WRiAT7IZml}Qx`X<p|+ZERll
zH5G>Y_LoaCkT{v>_ArUh0<>TW%5nGl$8)_|GPmB5^Ud(+*OH};bA-^S&VI?x=`zB*
zVPKhj6+=n^u!ueVB}xd1Z{wc+9FuATg`ok69W!c$@lyqQe1AE$yd%{8IAl}sIy4t@
zcgtM`U@~S^n^7Vk{s&SBimW)K*}`KIvYJd;3VhUCu2|~F`Re}Q<Az*nh<0d!p6tqS
zA|lESgN0vSdKD@Y6uV%Q$NIQ1)4ZBiWLQcDzM>93{SVsUeqr(W^<_*!G~hV=BKFcI
zkpzU~p`Uxj=wamB@J<V52By<i$_Ns))wkzBM3IX0{-0%um@S%9E==_U#ShJv;2L=?
zE|}@kI$XJ-=M*71#BxwoBg17w<T0j#VW_Ajtro;<58p{3ahC)aF1_Qmv@e^ww{{+=
zT;zji1_KnIl=O9mf@nmnF)$=8@K|AYdDO8f$db|TLXGvgH~gg5x*j1MeUb=ae$5O9
zWcHEtr(Y|qZ4YT~O+2laYqDI$Be}shP2E{GBu4Z^B#aSu<-UZ!iu=tGl?_Gw3zfn(
z)3+Z9;`x>(?T89r&~Y5sG{MA>v)tcqlBH4TA5$6gVmj5PDxQG=f~RGKDG0f)U7JQJ
zJ{eDDIkEEEisZEqghwBm=#o8qwi!c7%GOoaGApr4vVq~6GC+?!Qe$sE!as=((JCI#
zne4%aOl9FHzViy3Jy2G?zKU|i-CtMB*Rrn3G5d!*qG#vKn@!4n;5t?vP6H)nz-XP0
z{%F?tESrUq#BkBt6r=s_1fm^S)1n0-#Fi3efYH)JG9e=){A(O?&`bRFq&#6^Nnp?&
z^inY$4K9Kx#VG+vcM4NRle_i0rF6xC^Ws$jqQI9m+<GP<X04rhH2E;G`x-|ux3)JE
zM&N(X^qL%E?159CO9S<}JVl3e332Xm=GDPc(&T4JVvdFvG<Y$&Pyk#ssRG4Q&?aF)
z10kexIdtJh5}hIdQc&nj>(Q{3xLrhSJcX$AOx|~cbPUhIQ58fX;x~6RF#ja2hLK_c
zC;hx*rw*x*UaOXo*NU<M%k=Px(5fM5`{YKEky5J*^3o;1hKnnA^5~V}$Hl1I(K9ca
zrb7!2awIopak^89$*}xPdFO~yayIe|oChT#JuI;UGp{HoN>0sJq*5xO#2PM&cGA|N
z#<-+ld#jMlQ7ljN%p>V7vn#+wZ<^N4KO-iffR@e3g)n#_KB2(kWyl5UYQaPn4#DAh
zNyFJWOC!kBPg%zfKK)M9>EQd2H#uga*4*ZkSz*Z?-dLUCi<XJN6PMl*1F8G-2r{TN
zW)5p%`N?#E-jSvniVgDV8JF@ExnuQea3WQ3<(=KT$>Ty9yu345x7ivhorLRKO)&;e
z?_1Q=R3&X5BQR^3!0#Qx5L6kFJ99H8wMv@4MJH4l5uraHFa^oXkr#uK^D&#Lrff!s
z%GYWGu8@wSIU9NU@&ud&XSu>_?K@qeXrk$T`wQbpbMJE%WO4e_CoJ&xlWGpOce3i+
z;D#oK9bqr5KAC+iT9mO$q8S!5Ce;E)L09sLG2syioKF<-*!n3|qL9d~Gj5p04u(UL
z!Azqdkt`J;s~Or>GME97ao3#J&0)H1;$>2hQqzm79|RmfqXn%7q|7lZQz+%MZWzmH
zj(cQz!F~<!7Kk}qJv8OwE4hjEc{XRGI`GoxLwut(UbAm!M8&*UD=PYX#Q(H*)CmZ-
z#1Q5)%1P`cGDHCrHlD5OB)KjjDZ#Oo00H-+td`8p?Do=C&@}Y@Jdi1+BEZTE?Qm6*
zs1#A+iU94d(4)JA|I``Dcy=sv#YjmmR6X_hI)oMCx%7d_o9&%kzX-yPY>GlrkN`B4
zK7Ppw-8OW*CQrhRxWqwjNOIpfJ>yBIn0);nUq=X8+te`hA#%^F<9bveKqjt8EcYrV
zQ6x4()#@orotJr_&dzS+nHdUEQt-Kzdmy^U`T;Moj+tZ<L0t%GqAZZsy1QKpntKD-
zQKWfSvjKKfyH-ppfHBN@doW=p(KT!WWp@T@oNM3Vt&WpZA4N+2>S!rcY%KV4I=n_V
zzhM@VE;A*$0FrU|St1#%kZ`$0!=|&CT2)(nMZAc()@R=%CpCX+<V*5@#669aQ6A1R
zPM)NyOE@z5Z#Z|Yi<Tp$lMB=!-El3C?!|*`5$oHvG(>H2YhR17SuYavl5f_YG{tev
zvtx=CY?0LQ2>kd!xYs7C(=Dcn%WuhQZ*OjKCSnAbjDfqbGjCZ}#iFHJs$L;FGu=@V
zLDUK)^)xXkPXFpaNxt@UO2A`rVh{vH?-CTccJ<c0%r#*Q?;8QbCO<(~L?}uG%pHR8
zTPBvhPJ$aHrtw(Ugs(5aHkDWirv4%CX_?GHqRk@+ATh!_$sc?2k3;!KLNOpXZH3d)
z*kjyHy1m9MS4M2j>L=L^tA<V_kRvO}_Y|6fYlK~PE}C@C!PdJYX1{EfQMx9jMQoVj
zjAeOxy9i;E5pjLh4nJY|jV7rRp+12d7?O&xbrD|XDO%FB*k6%v?1;@Vp%sn?-ju$i
zloSY8nn>Km>DdF+%Gk?95b4xMLVp!y8v5#<EQ8+H?l@uo2sx^$8?a3rs!$>xvO?RX
zx}$zyGuf61C#^f)&%57midc9{`uS;fkK}NynYv%gb=#4zODtYW1t(}aVrFiBiB3=i
zJYia^{MNu{1Xof=7B$tXAkTf{tDhC>`^lNrD2^VT-#|E{l&iR%@}mlEBr};~LeB{F
z6}WR@YA=UOOLeFYNlX&P?;ynfmNq(;gxF-SLKlb@^&5um^aiytp-9OL5#U&~w?9^Z
z78QY1sFfUohJ+pl@?<An5N>wI%)+pw8YB=O6|5)pO7N*lvDu7pJbSGDy3;lys9}qd
zzBHmjPO~y1oaOw{s#pF1aWrqb3WPRG>m*R_*ne80JpQvXRMx8rAR<Qi7X1x`&_>Ko
zWM<(|lYo&x-r=2K`Y*7&4<xy~lPrXpU#rc0qYg6QCPPE;Wrm5fFH29?y*k{NOutjg
z%o1u0k#Z_)GnS>8`Q&#<Zc_}TPSU_h>f}n7cSLZWP3cb7&mV`P^H}A<8;-2qx~=Oj
zhN9KoL!g|o$3XiDT(hB`dbA~&f={d**WF`s6MxT8OOm%4I!Dw}fzC1@G2Rw-dRg_9
z8@&o+fReF>1{I9ybK|<3)NGBsKcf+)uHn8sJxxZ%@!FG5Cj7Hmdh!L^APC8kWE@p-
zCT;UK6FEPTCr@rC!6_Feuols^wyQ?BV&AXB?Pn-&x+?Nu8My;2@-w$o>Y1nS;3LtB
zcC!S|aNH9o%e04TX=ownlfnaRb)%U%K@x{Tol&>QiQ04+fPi~H&TQ*!5UO*ok9JQL
zxq(o;#&!w9;*2>uu2e%?*&kDt4!++hhnBAIP9>5f49BcEJexkUnlm#c=k>Uu#^|-$
zeJwM4geS(R($94j`CX5gnS7;;R&>CkZo;!cItjU^qJ<(Sfio}ziBX0k^WcBJPXGIb
z(s3{7XHBwZo_Z;e5dc&fk(g;WFmi3kSH~IrD$V<a|H+*GH-q0i25Fzn2Y5!LfI@w6
zHDVefjERdq5IqYFv*gw#PK5|SdD@A!KPcDaB`Jt?i3IxH;g{ul)z>GBFU`K_s-AZ9
zg;X&49hs3meRc9-kYP7PJmS_G_I|*eX9{?2NV0cPmA42Bn)ob>`|6u)x`c@Z5{;@>
zZNt;kl1pSTW>zhkNc=(rZ)oSsl*^MLB3~qr`Ks)mktm_URSnys3~S?sePUe~A>`x6
z>ZE?&C`(V3v!oT*@;6Afabrn1{0rW_lMvdRngu{;k-->?8~av66JObOqON#i3b$4b
z+j*lQ9b;+}zjKo~zau5o@d{YJp0|aIq@RngBqFv>+98H$PQ<eujcomLXnD&h=h2*z
zxLi{BBTEJ6=!?JxMHs!G)O~Jk#*BD^`0a~_4Dm3%W7X57fqlj#ieU*lN0T}gspgl2
z>Ex>DIxWzlt(bP;0$MFRq;&boY2@vU>p#7R`dm33!LEvjHlIV$BP9IFbtrhBP#axX
zr&jVXg%xF6xbGi0qnGL_a!3R7klMvPhxJs~qH%Dm^RriNA+!=Thc{}u4xt6$j%EGl
z9nJmD1ZwiOp(~E;ea)E_$I4Dg%n(Lfv{U!#y^)0=YHJgjw+2k;MQFWTkZgWVaaZ*n
ziNm;IaY$z!9Yd1l++S08E4Re3TA7YAFz^FSq>^soPX>v(4JHWqJrtRm;EQ^td`CTD
z;QZo$H)1(v!yG#44`1-<(6n*C2D+V`LxU!sdFMoDkr|Vvs2}*Ul*i1>|EOv7L{7vO
zctdLzjnRRmN*+NHH093Kyov!~3qFQcJG)4YdXH>%yU1j#)1x_}_S!!B&M8(IGZLcM
zE|?kJu4(5q1Q$>e4I*Au<2iZ}gYN}l?VZiSMzE3#TkZ8J<8;0~v47LxC=oA)i{6Jb
zX9A?cf{++Zx6JMA6o9PRmLUWhX<nT4CtFYWu^|Xj^i1FXu4s7F1XJ~Tq1|Q+!By~S
zL8m|OY0@uA4K_oZ<u>uhoaEp=`UqExr021NVxQe!Aq#>1;n_WMg0{~kMr^&wf>|7>
z^G{-0i~`52O@35pR5UujZl4Q+t;0JIztQ}9wn~^4A7n*dI0XVvbwR=EgKNQ8F#$4s
z{!Ut^3$l01$-cl9FGnU$ea9?nbW+q|5W1(~UipROnBS#A-!hr2@>`p^s-$ip4WkF}
zi-mHWhIhD27iUvQa^&s7(##&uInPWC`3Xwb+cKl_RX**g6+IKz0pQ~;(@V_1xaepa
zN)-r69Y@U9akRSJ63-s)GDoW;QuvLHNpg5i;Cxhw)KCtaHT}|fF>~gfE!)&#TD?s=
zfXn6&`u{m0U*QPbzt(?u%T%tH$IRqyHPSsCquTg{n^sX67^$ao^6et|hbZ7>jY?@C
z1|_+b-0f}}m!<7ap4SI}D$aKU_#~jr;-{BBfGP!9#|eX0&zXaeSr{{sH%AwlpbgHt
z^!DwQDoJagOFXqlL7R03f`+P+7D=Rv`qsvykIFc8Xg;bj2E?_gOc18Z9Zwrp<THpY
z;lqC*mrwU}XNxLdEt3xS8m%oE;?q*m5=6%_NlZ*cyRS?qm$`EzdyNc=TnoSe<5$t6
zRYSn*R-_2@SQc32jQ)fXKoSdgX%A)CYF~6c&5pk0h`o}=;K^cJB)N-Z=v*-&P0LiT
zeUX&CLxNXdCHsq6GrlbZc`{2$Iahc)IRD)rOuFER)hGQrne+}$diB&SC!^eX6?@X>
zC1cwRMb=mG2a_&;6|ES*3v6Xex4=*Rb4~h8Z$fSa-n6vDVcN$2`B&wGN6&cB(anFf
ztJ}5Dyr=Lsi7V)hSO|E`fvZrX2zO(=04{*oo@*!lculX>xxq7D`eM$-Dt}Q5ETwE8
zuBnqGS*;B_Cm7_*HS^v7`r_reXXt}%7ZN@q#1`w<=9c|%W(DIaW=(1tvj{HL<b)t0
zym!LRYl`N8@K%<K)CW?+gV&#KELHzvlakU)b4k`ERD3^6aA^7@^sp)E1q&qIUirbH
z_4Q8^d9g*SE^FHzU)Y%*|6W@0g$^L1Vr4$0ksY>iinB>*Y*8hk$3U&OucrlNnNeh7
zL)7SC-Ovln8E#+7M7?@&k!vnWq#O^9mZfq}K{_@f*oG8SJOWpEYkhA{U}3}DCL<-%
z*i&{Tz9bJ016qXdX=daoP=3)bCnsop5<wn<!aLh7GcnAI&_M<uSr@<wzBIBmU)EIz
z&2#xy4SC|+z#O(TUK&K^Tu3a#6er?H8q1_a1{TzfS0Xc+r#GjVii8>g>)l>cP{5ym
zdI;$ho!f7|3u$v8Qu$|$dH>PJT8MQEeiA>3D&aT%0SD$^nu0u3Q|m_Ge{%e{K6!Zy
ziI&rs@4vb6P3LW#crGehIjbY4xwOg+(?gtTyUlTtJNiZI7jHgAgdvIUhQtl=`Kb$I
zC>^mTf_xPGkSAIOXR98G2Zv;;rqt0h+c2|U5u_t-v5G}&YDuaCzR?|y&Wif=k3@YF
zMg3@miYStySaio&TJ)#V9DutC#)n<68Z@f{klvZDc}`3`DEdVmzW<A+30HN!Dk2V`
zOw`h2vFuv^0+a&!Olm9jYEtRb$mbe{>9TBz+OAul5S92U0pb4t$KIQ6H;yY?!Vjdg
zmgZ^IF9D=zSyn1#r7SD|c}mUmtf&8k2oMMil$}{s=idIhd#ygV(jq|+1OkDG9eeAu
zbjOI$B!Y_-1w06&K3Vm{i-}pNLeayt<e$`3!pN+bTx&b&7!`g%n)cAs{#9vzgjH$k
z)`5)zun_WEtf37@{IeBIRjU+<@*?tJB*I^mm`e-JM|=ze(Oyj4w2Gl~w_|5Wc=d*5
z<`}9GDkAo42IWrMRMH&Oi~vEbwW);p-V8@lNMsN!c}JtjOUfPV`!=3Ski|vSOQ|u^
zxt?z@7{wCSg^0%{H6^&uC6ToPRHirhvG<QejSw8q>o5*X6Ly-@dT*5YB&C9g5wfb|
zaAPMr5Xboq9SB@0n*r40Iz@6N{-qUClV2K<bGeeLZC38SM%r-Lhp_HDGzmI?e^M8T
zAj9fA*sg+@+x+LWZ0ZmueZ9kzgSyEaxi|@3zub2-4*Q-+7>zH|(s2g?A5x>Z4$Pzp
zqV*dOWG5AqNSvE?d*=kP?)U>*RXb%e42<+He<JwfPmeKzzNK=+!`s5`#1uNw83u_v
zTN4WA8nLbg$sY6@n3TIXVzv#%Fuy9ZuN(%F(nkk-EM|A)JOB|s$eE02x4QBaHA{Uu
z)j;2CcW0P;{yj6|jyN4y>lc06(;MWfq1W}4Ry5NZXo)Eete8(!{jf_y{6)XU7E@dO
zOmJ0XHf(n1VVqE(b7Q2mK1oFiXd8gdmu3~b_?&oB>z<jdW{HsRNz4Y-q{xgZR#1y5
zy`SqD&<``NtMWTbjO+FnOKwwGBP6qtP>&mC@f<kE1kqsj(=Jt9jVxiD2?2hBSxd!1
zFW(+M0chk)zULVMmGqsEO(K7037dp=KZbcccc)+ve9;A#-fYE)1OY_eSoAdo#43Zs
zjXSkIX)d6K1nRb@@j0~teA7J%EN>N`^vLJW%-*CraKsRQ++!m2V;{Hed_MZ&dl}j9
z?2=n$;r{`%Dm(O2oN))a@qsmx2F#S|5}38WrcN!d5wtT^Tj1}1{Ur*(sso9OTT0v-
z*(MwDo1j)?Ln%(yq*P}umJdbyEP0%2(sx9+Li}@JF`I`nS1)|rH9O3lZ2fLXV|iHU
zCthKzirhb`fO*-@V*i80N(Gar=AHazn9FADZ7JWsDSOc+)jrB#MK*9_W`++{^?+4i
z6jwyYrB~fmf$13P=DYrH8J`swuD@%;F)vV<oA{)s1=l|x7o3JnBXR0l#E*cuPl1^i
z)S?S*;2cxJUvGU~(L2p21Nz1DWJ`%;!A#(K-2vGz8G#{|nOS@)tN1rhWCgELmUi=G
zPUt*gZMdGnhG3Ahkt5D_B<boWqgpH+1=Yx5g-NAJkkAezi^a>vAbRn#Qw59qba;I^
zSw)ajT#Pird9`j8gSX+YX1oT}JKKETp<U8;;s(>oq+$)?>c2OLf?hwEV(IKB15!#D
zklCLPNUNrKLXIbdju#J3aiQp?gh`BZae=1-*Q{~$CQ5Astglg3H$i+|JEgS$w6j!s
z)d#ooA%PoJs(vBsJI(&19Dy)CcTQFM^)Oatkt{fjT%RH|OO=0V<q)^^%8_}h-opc{
z9+`&{ttoHOoH|XQkWyZjxa||@Q01Ugmz>%M+v!FEALQ56k?9kenL<w(jP3_~;=`IJ
zDz}rGPSH<b0&Mr~fSVvnwc^(O$&_2gR`aP@Y$e8gX2{W^LZXe8%^sOYS>$9<kH|Xy
zL!2TRW%XTQ`jv3n_06d)^?S=5^2rkTYQ}xf5H(^v1v+p=%s@P7DKJXB4bh_wp-C-U
zM5vZLo>=8#eUDDuRC1CZetAcXQckP4a|DlBU~HL!EIfU39a5|uI~LnhbFE~o^^wi&
znV@*BveYZV&1I3VK%9&sE1r#H{ojpP=nDv>CrC9xrkq%*(n=Le?uZ{S+%uYhR5^32
zaIzX$hsQuha;|^)m>>mjSXQwuCE{u34PyZhAKi+smlHpvPTZ^pMjG$BU1k2L4Z~>9
z?Dc3HhWXwWNel1wirsDS{cBqBhHg}lkzS)^sTq)X!_``3*=LtbzkT+c+!8S(@UIS)
z?o^ljaN1}ninhr;*(PA-%oY|W+KG*q%#qHi&Y7Byf?6(0IElg1D=GM+){~)E*wiAM
zds_kHWcMoT?bT+k_k%|9X0H}s?^RSQpYbTWboOl#-ilRC9j)QXmRo$RHH*Hmf@tdY
zJh0^^OsOAA_>HFcm+MK~KBg9q@vVT}>ke#Xfh6)}a4<jA(wx|&%f+Q$EBx_41t{q&
zESX!JH|M(4UYs#^A)a8yfi!%}pfJZXOVyE7ug)2{`)Z(gHZ)UFcbYzO6}puR>z4L{
zHb^LwTX6~XRr1G#zEY%?O@N%r{7mWuy;osG??}wj8G5(v>5AJ}{`@mN{N-MVzM65E
z+t{>uBdry|H*bU$c*_z=7$L6los0yLzbFw7_v)J-naVHt+=56ww3$v`Y{iTYl(m4t
z>`*q#cbR*z!v^bjlLGOCZo=Y;+&q6WNFNBp*pqp)(p=M<^)%_;*^?m{8LmhrQSp%w
zK+F>$%uhsycfxfQ<uWpGpeFn=eqF?iwtQ(JjITa@O#nFfT66O(nUJ#$w~(q0M=E%}
z;VRljXjNB7=EV+S@c6q~?xO)*6ACdOQes-;GO7(<o)Kj2<eRZ~cVgEGPxO1DYHT)0
zi3RUs^=WX1a?EZqO&&gd(p{WA*;g8G!@ly)!;{<+P$PxgEm8>n@ItP2P9a^2cjH{<
zUvZEwPP-J4HN9}8t#Z3cN!w3^fh#iWhRJB2XWSBWyWB~$Zmp6PX?xNmHyKUS!OFdo
zY5?OZS~S2d1FNf>$wm3A9hM<)abdP^4^W<d%I~_#^mm(3-&rBsScL&|$ixp?I!Y`=
zgQZMr3rkSz(oUPj=h`+_HkO9EC74(wMa#P~BMX+6hebP<DKbsT)wLMYtFs$4jYxN_
zzxzEFKR05qD%!J7><TmwY&UkvBu#38xl0xE?jzVw&s=@RYTd@4K-a}dp|p?przP{&
z^z!ubw;D{T2Isy8!<j89IJT*9BrCf~fqic)Jln#6J6%p!O9+_LdV<oMA@`|fs>+<C
z2{{s`QeIU0BpjcR@)nIqILZ<HQCsgW;WDe|muHp;W-&d-3kVB1H?U`h$ay;EMd~L*
z2O;KlV$x#28WI!XA*QSvxB}i09_LnBn(ai=*C1J&p(b&-p259zzfePSA#0k}CE5at
zzgt1$Yu8)<v-!MI#v>0m-EcGizO(ykcnY6Z#w<u7`<&gVi#d6_J4ULizUuF*{LY;O
zY=zXLsi4HcTYO(gWKvE)NKo9-_X~|z(8^;4l7AU*xe4}lBrP`Yp5^*2&N=ai?K_24
z5ttDe8tw6INnKHH&xkgVZgym=+@lBd?pEzYWVbHTQRpX*!cDP)%y$h<23Yz$G&HnL
z^wexb#r^bzp6C#PA?)$_^V1JxAzmlP!yNENT}3=?G8LImn0@w!GEmBEQ`ARj7YBBR
zI&ipb%#Sd8qPt4u(I$yhRFS$J+cWv@8#KR)y0zs)JpIDCH4t?OTD2?}OR8%v+Fi~g
zw-K0pu^<NhLg(0tTeQsE95PIc&fOT4j;e%CKY0(B6k4Wfey1DetyQB+5Lk(*cC|$Z
zwin#jI>Rj`@}Jw=?c`(~StM5Kcw*jOo<e;JK9Ex|tmw|{$pGkt@g~_B))PT$!VAV{
zo==Qq5KddPzhtqSU0?pxT{*qQuV;kkt3;6Dw6x_<$3Mu)2nK=L`><>~Fg1PoKF5gZ
zKjfI1fy*+7U|*dYj>fI095cUU(UFAAvd_<&MC4o_Qt{IcOdM?3(zWY7m#;_!2`p!`
z6K9~}Q;N2hI-xcYUB`vn5|Ub>$xq()K)Ulh4MNT@r>RR4d)|@)B4}M9S;M*k90uS*
zSEcJM^Cm(Ufi-b{-f%I=2});2ToE}@+sAAP$lS_tO<#m-YNZiS+=eJ+kRq=9mVas-
zte9zG3jx3(lSTYrp^g*h7G9bnG)8cI(#U2Qvo~|1{ZPz62Xzs7o)<FA*}5-F60t1(
za7*sLAn;hqu!Pa6eqnU9=}c`Yk62nxsG+3~BbkG0pITY0=7$L3f_9@US(i+z9VoMC
zTDiyJ3n5mRJR%Ei%*?b4#*aE-g})M*h6!axVIaK0^#0<N;GvYkvz5ePzY=lf*y6qG
z-&1E=H*|gCs|d_A!OyjE1k306J+H3Br0dUG=42(>>BMa8p{B6oi)S(@B8?{rh)N3U
zc>U$066wX6Upj~tao>z<;yZa<i!p*R<y~nMo2fxUM1QCxRfkxZEp<|TV4|#Xc?W_?
zqmK7#OiyAZ1k_9B1B7zVjSj*09N)#~b&U`X^g#gqRZ+jV!`g-q!n6u`_?E0;UO}<&
zl3CkxowW5PZyGbRv7Y=pfU-Ig&95a~eO1M=yA)!IVG1$cX8Fh*jUrj=-cZoifm-gR
z4gKh`dRC!MR{KEBkYz|}WyPlzyHt5ZYh?#&1^>Nip|Ux1C}9~0kb%IjS1PXV^KM7t
zCQ{rvb>^<DOjsq7jx%WZWi&QGb*R3`2<UNoQuw>TdGu(^957z5G&9kS6u2cRJ(`uX
ztvDO$y!xgw@pcX<saCXJpmOE}RP-WZ2qHic)CqNiv3T9;&l%a87Xcx7Qp$Gd6wU(;
z{b?2A1h2yz2ZyW&okBlnsF4G66D&|sLa>}gKBBnDlr4T$s?8iVrpBwdvRbT|70Qfv
z$0KGVsHaVTmF0$uF3^LCj*%{<ZW5876*ZYll8yz7Qp2}wi5DdG1@POqJffDHmZEqq
zJ{j@X$#>UKC>erRN4;6xeEdcZPL#h*?h*KfNECGu*no=_gXsYeZ5>C<-a(G&sJ%_*
z{1zKop83iLOO9|BsgV+`w}@E73<a!pT+30yoZ?p==$V5%@@~ODnJ_cv6}lFEJmcxC
zS)MY3N+eWtn=qo98)e7Fb2pqkTQWP4Erx!~$=8(Wc4jNtiyA{d#r&@z)AZIf0x`mh
z`C$Twuef;ItpQZVI50@TZ43~Z*63PtQxm}8e=p0lvp%J^5~#Pon+}~sT@~nwd<WUI
z?yg~68m8H{0ZTd6_SOQBEQJuFYoPcXV0YRyE`Zcgn!vl`Q5d_Bqud+|hD`Ml5lR>s
zs#`@MzHStr?83FK{3Yl90v|H}q<9%{BJa4F#i26s7w#|F#Zmw)L0RK4RleDi=R0|H
zU`Uv^eQ}%>*LAW;tWah;MK{6YZg)CjcCiJ#&!X$E+YtC?A{(kB|82ii+99;{y~F?H
zt|L;>Q@2P;DWx`YS(UY`$=v&pTVohsdye$4-6Z~l6^Uk^?vU@VVbeBNzSH2^cT+>u
z7Ln%L2jW0=!S0F(1>z-)?9bueBxUFOCV7chVvJA_S3F{UNBa`o)Lq1_p~AH8PwYCp
znzB9NYUVG}7890=l<v(5TV4A^N?(K@=(WNov`UE82?p$(u70L^mlO#T(u{_>qBtSU
zYb4Gad971Sj;FqN8SF>2Z@8p^!eRVw#d}0|bJ$%P>JIV4G!GX7e8o)39{le1_Rax7
z(@8{c+oM%HG;FcH0hEJ+Bi<s$^h`iF_&T9q5E-V<J<*DwBc!5?O7F=kn3YV*2TDqq
z`-X>bLM=`9Z^AQcF-?oOpXyQpHP4GpeSZP|Tl~oaWY!2}q?nfrVn|DwFBsAxFcAIW
zD7+|Lt7`)`WkcM5H$5i!W8@o+BkJ`7xFazA0E1e4AgQ%!GCx$YCdhu@+3p44wDy71
zzxA33i|;VJ(%CMIIyyIRQDvJociMW@Eu9*UB%^0=a`z@crdf=fI9eex1H5ULcN^NS
z2`GoaERHl=#YYq7oy4J3ImhoWn=Da+GniBi;jZErQg{LTW1zXlitU8?Rh09~bN@21
z^JFh^&Vn9rwn&bSt8B{3@`O_vk|-jEhgWM~<%DP{tplYz*Z$8MGVG+;As*Ofjju2~
zD9>dR9wXFWVYcrfIBh-@Y!S{uWhP|y;E$OXr(9NpRC)eIBM{}io2y?kWmpIkQjL>_
z2wUbLP}1f002g0~6pB1pgx=FsI&gV*;;En}S7ym6G*bKK#YF2;<mU^<DlTUyLbq;s
zo@Sg~R@^J&uAQr;1W_3f4_W`#pn44^*$8@84Xqo8fU4Pq*+d?YcA`KyD$9eLE0)CX
zz{rdVZ%JSs;f91jaRecax1~95>cgc%55eLpAhA~0IO#mRu$~-~M<hXP^JY%CVjrk^
zA%CYQl6Y~euPMl3V^v59KxZi=XbM%5J`2B)T?_?dwXH_*Y^ORjLZgLFokCZ5Fco4F
zZ?;sb(E=N{B-ofMyg9Djh849)f*gwwdPEc>#@t9E!beXV@HhM$qTH;K!i9}3&h5D(
zTX6H}B!}cnN}k-yBu<fj`vwJ;WjWE@h-@>B$tVw0W6>g0<_+Fnk?)_f%of>dX+{Ae
zT<IZ@!BQKuydZSbh7mf1(|ft{A+$_$qDSDEG`-ao@#YtF%5NPz8Bu^r^_$6QP3D2V
z3cZNKkx@_B<71l?iZ8c=319Y+#m6IrF|hkhACy(Mj(@xme&X_Bq(BqUbadYYhww}M
zLSyy-W_gw;$eqn2bxO=}J%u%69*C-vbse_pHIwQ7roSXo6nE2GMG$m@h^FS!(n#V3
zTDDTSQwFeceotiZ(*$9_F;OF5T`$iG(@fi|Jw<8dC=4qzC)X7xjPzNL3IJgVN~bg-
zrNre4^Y$@v;9q;Z?ITX8MKiXL`&&iDB;Vp?CqK(U5)`OyW1(rQ^vHR)rx~-$oIT0>
z<&<l&-qVJA85kmp89rvMLh6s3CZ*w?u)~85RM;-ayi5<wU`-5mmao_HhH0XW%`v$;
z5LPk@F!u#nC{(p(*44dRUc)@lufGUvJ83h$X`$8;R^4^(Jr%nmW?(+$n2AMs(cR5(
z5<9DzB~to%Y3_r+t<T)MRhzu2dxjtaHPhZ#6SIhz(?b{+F=`EAbAr==;u<5&Q83$Z
zAG{j!Qb}>-tS64_IGmZy7q{5Rds&uQqp(au9?bT?gFMLWxwGXhAjr~KdBi%n2c5^K
zTW)#ay4!>VZXFQ)T%a<-=NuL;rlzph$qC{*aK|0d5_NazHgJy`RD*JDkd9wBaOutn
zqjbRVV`see5e0<lx;67ly1v}l!Og4k-1dRGpn*X_;PR6W(YxB~nZ2<Q;1}|>K0M~3
z%#88&__aLdE;g0~y6}Wn2Sdb1BI3S*{Cj)Y)tNr2=Q@!Qf1)d<cKT`x=2Uz4XrQ*6
zVk;wbjkp&A-m6oy0BS)h6&q`EhFr&yiWR1)+qwQN!4g?gV`g}8*hTYOP!Ci~>43v?
zQV)jVCQB(U(KCeO%-``3a(AT3?nB=)sh_~u_Wgu<5Ti)`oRTRAJ@YpFYpJCwe&uo2
zFdX2_{~)AM2)21pIG(H7Oy|S^@#xUBqZo6_M%5%t3EY-ng`j2I;t3Gh;vutqu#&3n
z76;iGiYK>B7KS)r+?pP_%{>sNi_C;MMHLI;qpe%y?%rw(uaYf%_zk{Jplh^!X3+NQ
zM_F$B^+v%J{5h4ugLXQ@J^uN|PW0w7)Eu@TyAwF2Nb<>)5h~OzA}**cgD8O!L*X@z
zy}r7`Eu^zG%F+a;xp+xHO_lb{pH>N14JR=c2~&ERd*YAe1l-iOwM5Y9YI*?D)hTrK
zU~*eTT3i@T2AYHc5w?RH7f1HRk@w;k|JOeSno~bjVRmiyoAk_kq%7ZeM6P^GJ|a(B
ze|j2Tg+A+Zct;Jw6-&;mlb${6HXR@_RMPjn1m~f&JhON2Vb;o{=P8nOgg=&L#^~Je
z#owEkMxvUU3%;EYo4f6Kt3hFd@7(Y;(}Xiu)`;1xGHTIgmSBx~*(J#ZNdc(~*ElNR
zNmN+gth-1DB5(&gF)?|K?1FH5V9zrPRYu^yPRCE*k&45#FzXFD{VYfkC)%r{JbmQ?
zRbOPSgc-jTh;-6~gvNYxVpf6|N3XSQm_U;i-!+_chuGRwRw=*bHktIhm&RLrdf6M4
zTt+~%T^sgY&5YB=k`-Ke7r1#~-Rg+bzYztS)qRzkcKB({|CR8Q2s}l0GEV$@Xb^}8
z2|{U8^WBa#Mbig=D0~&!^IAB_+>;W(m#v2X%ieXF<@#k;xNk?fy(1aXugW6s8c|z@
z?GR?iTeV@)pBR%EK&TB*S^%j&?X_S|(lwq}elxDZCxKP1wclc{r?};IWm3~zI<$PK
z^I7_Ncb63WBk}fcMq%jHt@!4wvscQj4@Dx)KVFM}A#JT^{m)v?$c~oGbE*M@XRPLO
z;M>JV-xBhtmj@!uaqkVKg(r5z+ou`hez#DcR`VP0u!NJQ{~a_Sixa&u<gzBr!QNa!
z@4w>+nGq_9km+9PPC0;E7r3)4!1hOOVuAti)4>WuOR~dm57VKQ2&Gl-9ADX5x`<Eh
z3aGj&U9~LBi_I^6?edTFAx3CxmFLyT!uL{qt#o3|$llB@Iz(PWQtt`32X<lIy<IYQ
zHb6@R5s$(=Ij{p*vqz+$BX1$4d`IDL66b<cS(;GovXT1vy_(JqB3mp^W_o6>Mqc=2
zS2)I3Y34NBn|7<<4*d4KC8m4K%p&Tye`4LtJO_v-_O{aWrfg?3mMC7>TwunlK@Q*{
zoQ}mG*I90akwi#xm*skBwpjvd-egG(0^RZDk=bh|E<g%b_?zC4cY%1GB{U!#)z~oZ
zjft**=)(&|0w>`ShGS2fHX;fp@SdNJ0igjlUZu?brB^YXgVdVcDo`hma<i7sG9spi
z7wuVHD+5SYB8RS17sal0N+=FsXnwXOIsW((tc?vGZvCLejyR0~7O{~4MXWnW#2AO|
z$+9ZAo$L8&IHH1631c=Q9A2A-2ab5MBhAYO&7)#0AAnw#&N?2%c59Ee)@I54ARCI^
zdnHk!PE6}J941R=NYKpSKZWb_QaZX__7(H<{D{RN>I4#i3%9(-;f~uWA)o!5JUhP0
zKVbl~-Utc?Hpc#$Te!ZX7>t66C=kdWbsU*s8AwBd)Lkew%pq<>4I2jJSSlKthQN**
z?z3DI&dqlG#;p5f@vl>K@z2@KWAgObDFPF`83yiWB6$Tu9fWS#ML<M?o*;S}CfCce
z<I?k*;nIU!1N`n1lZmz>b;G3>S?jJV`?bn5t6*=cu(YJIeX;d3HHStnLGKP(duZ2R
zJ{shM+x`L0xt8)L9xG?&XjWwlu(m`+W0ET`V!tr+t4XNM$%E~7id~mj<mnI6m8)HR
z9A6+Z+AkMaBI7bpDv9UfSN|Kw6@*ECa$M2Ir(MhRoLKIqMMfWCaX?1dBDy;HmSyrr
z4`i#-Mq<cqPDT}BL?2=w&$YAKK{IS|A;i9ypL))v37c<fs(`-nJSmb??FzY8yW>;r
zYv{W9?21r;Ehb*g3b~Mh!70R-FrW$}A}1kP$<6gqdMBBl6BfUurtyavGT$tiP)vb(
zQ#EkUdfd`4a@_PcL0IL0k^`yH*alY3)+q4De$pVt_F@jkD3Eo$pBIa1^1||hJH9|S
z;}p5kLY1buI2tOuQh2v3bJGL6j;ULHa4EyXkqstHHOvM2qh=b~hho!211pq0$Smc2
zzs4i}I8;btR}+rE&X|cNGHmgPr7UkIjL+I2%&vd+H611WC=TAQ`zhv^cMG$YvjHrq
zx6uExv|@(U;O&-CF)x1mzJ3E<lJvkLA>mIgPoLtEdM<>XU*m0SM9@^Q(@pLjbH2Iz
z#LZL2TrSau*R>PJ`@)^A5O3PHD$Qh&&0Aq>vHtzdG63L{mA^TgG=7-tU&Dwv)pBoh
z60oq6Ntx7kX{P$I2-M?*P6OLNi)L$!{$@ce@puxOVk%oddohhl`JXW=iZPf1(*m>V
z@+Z;j(Ys$4y>}|?o93SdQAc+kdV$W>L6!T7_#YU$W+AY}3D8A~V*j!jkfcl@Fnw91
ziIZvS7mGA1Bm`#5I8Ieo(PA~srM1ObpCxC)-TF^o_PV+FUQsJ)&uu1N;k~Nqu{g!k
zgOV7GUQAyhOUYwbB=$dAfdy$1?g8_Ne&cF_#8TZU^<;0xsy9<sw){q8Vf^;vR@^E^
zUG8F>ps2)B-|HM`*Jrt)-wuyMfFWAb&9H)BSmK&mD!gROm)$?`)vY|i0gHMn%>?iE
zdU_`~$OSOe_Rq~5zGPS=t9S`Q$DQmQg5(Tf#*WS0LbSj@dTQVY{H6E#{7gGYwF6J)
zKQuY&awk;?fIQ_GPAsjH=?(@0z9*7cVy>L)wkNZ$8>f(~L0fZUlS67QE8c7|@ToV@
zRlxTIz$A%4rIsevK?>@az{t;uId*B<A+N5mK~`k@oJa6M+BHLTT6?L|)|#CjcFApg
z(hLRNsw|Il%k2+=e*7L8eww4*zw~%F^0EtbOeZy`Y<;m9)M?GlJ&(#1w0-Nav>^Ot
zE7YyCT<8nhp0*<^WUj(EPmoV8JRH_l4VM0}7aFoR{ea=<cIPnYs6NSf#}jL((lUXY
zP$SK4@IyMXPs`Vl_#w$MC-qM>yse{kGwY42?;E}^^3P_r2M~hz6P|{yr_MdcO)A_+
zvifOw@5Au}7dDo5^G$<W6`!deb{{${iN_^(6FO8$V09w4Xujf}N~j&J33@Z=xA~K0
zoC_1?MH{QAzCNH!%GQo}r!ZNjYGvF1?T`fjii9vTJ7JzCtUTFSM(aH3G)jt32Rbs9
zBmopn&+q3k|D5LBM{YjPFf&7(5Qv2H%QHECKygi)nTUgp_k@spAtk#rO=Ht2ryboU
zlf2w=j0#8z^P;1bcJ45=%PnorW?f=<<iA6Bybj%RzHVGdVDI_)&=Lwz*KfRN_DpCO
z$s(pYPpJ;c{5g{%0`$1i?FzhslN#Zo0HHdhf^Ap|T)dd)#5!eAELM+onq}Uc({cXI
zs5euS;erCK&`Og2vB>@N)0xm3)pg0fe7v;^yPmQU<ayMD9N=Za8%60CBjg`K5`fE<
zCn+~8FSb7$?gEWyygb{p@@LAuW0QP`pkg4HtS#5eZFFXSgTArj<?FVuWV*a2KtELm
zqSpH)hqQ);Ja^R5<hQ={eTZuxSo3u}V@c%~o}_4+E*<bXs*KJ~BIiNKOrg>Wxq`%N
zWzYV#kU3NL8q4}{AWr`mt%goq+&!N$yD*`A<3$EwWPydqd@=#-YU=ytL7g-7J73<Y
zkD}i>|Alu3Y7{iX?(>@_PUm2A`{+cH9v!7osRT(CS#{rjW3mT6kt!2pebe)ca2*u~
zpI};EV%nuUucZPcbBPhoRyeYU>Il)ol~f8H_BV)qmctvfC!8^F%+Mm9viG(0n_EU0
zKIcZvIYgtl`z-luUR(P$oh95D-nwmKTlShkS{13`85rND8hZ6`ggs6i!^O=Ph-UWq
z6s8UuX<#_7#lQqxM;4Y_X9(Cd^p8#P_XdaH>?AA3n?AMaj_JxJ4S-tl^U%y#hGrzY
zsc~?X@YaQa>BpddmM8qONI5yZRc$KzqP#BLvgBW~XGXYVQToq9a2$vS{&#E;Mu;6u
zJ5`(-4_SgbRk&c6;jLH93>n@0Fp-+{k`9^4fAb}$x~D#2Eg)vnVbNuQdxH4c9FeC?
zHFO`hduE0!rFi)E7eT%4evx2hQ<c)u?K%!`RCkQ*X$!2ds^8>Qqo;rtZZ!rI_KtlD
zksftSIzj@L8{X?WN0NDHI}4sL@PJp=+Hbfk(lgf{jdkA86_3qJE{Xc>(s0<k`5)q~
zsvPyY?sbbe0HKYu8pOvIB)^c13!?`M%Ud8-3B~U;$I&o{FkI48P7Rd52EKZJv17lJ
zz||fn7p^NMfP*ggAxFR@&1Fl^%2f-K77aT<Sfm6>+lC!!d=dMQS^QVG&|K3!rv<!;
z;w;cR{TCx8pJy7#b<9x)oj56>nTDKTBKOg0WD_2yS7(7BhP$ORmK_|j%**i(cJVM!
z^|#?S<-Q^@F$LI&)?fZcrol9mZHuDshX%QpK1jl)z+|^mZ1oF4z2<iefT|cN+{G5C
zteeh5*N&JyoCLO+p;?BX`l-kSQL{B^D7QNP(`TIl>bP)R`tgDhJVqL+AUcAXJDFd_
zU<4Rpn_Xr7h+1d%KxC}c6i{v^@xMf#$|NtNYT){^fM$D6$Ip8kBUH45(ZiK=8o=}@
zJWyIR5`)?`O>Lf$&60YYksbAL=d0DErzP2VYu8Nl`EhI2I4ADbv~8E%)FwH3SO2L_
zly6F;{Cf02;%5`?sSJjJAi`;jp^W>9C0N>W+a>6Y<RRIUH%Z&vxJSiuc{-A9q;e)P
zv&gK|FB`^3YYynTloN@*El=EnoyimYp4q4J&7(=k%#o1Uu3q0gBmjSOhzL%aVP)(P
z=IuNq44Le3&*<JDdb}e6oNz0{&QJ}A0`Fsk##sE%h~6<|*7$2p5*$!b!Pbv^@ph4-
zuR@hwY=2d?gj#;ec|vf3?%d$s@iivMmfg)womgx$kM4U%eri+lI7EcP)tS=q^i`gl
z6Jckcr_MP}V<dfuhCzMhi=cD>IzYw0vSh{W>Dd+MEen*n-@~i*HhE4HJphu-a{`(b
z?HkeRi$e>rGdeebgZW)z=UlFyi}zS`-XLzri1*<F&19H4U<Z<V$qz|39<1~M!WwNs
zqi?CSf6pl0o|XdcUXp;?ps_HFbh$Lu!X*iTOT!bB_k^8N8Aj$Q8m(_C>cVUK!?X`m
zZWnQ>(4`rcDeiefc=NO%h<`=dD^^shL&7x~<|$p@MAl;pX=WzFK1K-bZw-}ZNZ*7F
zkJ;ySJrdS_TKE;$&I_io<RkQ{BJmAF3z;V-fq0luDtBbZ!*Vb~R>)7Vykuti0lkAb
zqka43RmI0ah7Hy035?$fBHhj7PhTB{lTyizS%T(k7<?*S*p)h%A-sbeK+l@GL`t3(
zLB@omc6G$0Stdsv<XGq`Odko!izk@&F(TNo7$rPs^DVQBj$97$Ni3wSJ(G(;4mQbB
z0+&55?!gY1Y<6}7-dh8;KlP;C3{RXx(5il$Wqmv$^o+0RTJ}uxwID7(y)$n$m<fQg
zM7aY$p_{h^J;EIU%m#$FVPL3u4iX&9XvfM?qRd?GWFp(HBa&stScyMIhYwR0Qv5?9
zVdKJYpQXo)kDATrE!A-lr-bKOa_9DMR^Pax-5mF9Nqe@mdWP)6zOKCp<OyoiDH~MT
z{39m_Zl55;!kQ!VVn>}MD6L>Q#}khdB3f+o;~lx@q#*5}^g#yEt%}kzw+Nxibv=Pz
zEg|$!)>euLUOS;4t5*|5Ae@pxbFmgC)ZmEKsiyvp7@X|PEFI`TO#=9bWMd7>u@XGk
zYXkisa|l`({p+hf`B(ufCvGgIaD=b8jp!G(m8ZoVY5b9wZb?EjsIE9mSl<OBi8-`g
zJ`ZZSM=;!Kd)uBB)sckPRlz3`4_0Q(h^;hWqY?cY4Gr0<U$V5oD0Jjme5sx*e>c9|
zV&~Q1g7B}uz*WKSOi^ZLv4)sO3BNlE@*quNSm}ypNioR|vu%1?3Uv5vP<$rA781CN
zrmx!JdI`vX=ils2>loS7yBb)JEIg4G>MmpZo81C#|B@Br6a(Zg7!_`EJ3^Eiqg-{z
zD3K8gl+$dyL@ucC^}_99QI8?2mmeJ-plQJ&=V^#y2rS2Hr22NJ(r-2{K#VH&d4x0j
zsCBkA7%Ytr!?6%=^^_M<G;}C1TPmi%N8Zyh^AV;2aw^io;9{SSBVjs!LxEXBK^BKS
z|Jks&onfE<@vwKSVNdn#5w!{}#dwWjw!VEg`Vk)$1V@}bR%g#xiH5SWw;AuqM;@-E
z=5=*OnAPgUVh0pTP%NNX<L0obvF|uD;!mb*c&KYrT~Lq(BL<gdm)_T>>h@^TcM1tf
zF**VW^PvSvWdH+iQKv>7o<}>>v_{!;vK@t*^|r*k{okQ$J$a#72_Ql|VDKTHHeD0;
zAh{|w1t;2*eMXpA!--5RDdS<COq>t3M>Un4xfhTpYt7~Z`=R;7hi>UZ@BI(WCqEP;
zg)07CddB4K*WU5Y{Agc!Nvyk3&l?Wld8e<v-b2Fk@;3){5u~8jzp*ShY<M%&!E5nE
zn7=6RXNzu913Rp=?1Z;Gz!eiKzK+^gU1yUxuDQEOgs&&uuN!msskd_a{C!by3F*#j
zZmP)9+r{#_$funr?jSws$iksb8=a7V@Z!nC_&W=BZKp4VI_Zi_F7<4CQ&V($vcKWK
zY;O54sRE<E$&vr2JA+iNi@xoD%tF0Y3PD+6uHm*fL8}$naf`qH64AJk7`QLE4K?XD
zG(O$xlttF>@Nx)TD_g`6Q(D^RRKe3nLq0~mTvqx4=PWbG4SAWxQGLBL;Rsy3BLF<s
zv!|OIjDP1AJ>LZ0jtf^}RK!hiSag5$ZN{O7m=xFi3;u*L$eAOaaH<{$>jggKJM`u)
zQG~E5D8RrzWWQt|#B4axvMOt78CO0Ln2u;?JTugMiYIPH4iO27=R4s?<MFqQm$h|?
z4>}J6`Oi1}XHWifaP!wbVkykxl)CQcUsnqlFMnC9G-aa<Ln3F<(K1Xux&Ar%Z$b9h
zgY&w|Y(?4_VBtfYaUi2m#gk#<^kGMWx33-;#f+R*)_KBc&owWOwFY`NfDjqXRWsup
zF33|c!E@dgW2KGjn|&bDP8FBno7a7p|F3b~&@m4;m6Tf8s;vInp}=HE0lg)1dtZt5
zD<hSCnC0+sr-_@G;YmGRRrDT?)hyErOOjBT)peM4@)Jd`@nKDC$6CDK9Hx&rDD#qh
zc-RDb9zrz%rrCv0j)9$+E`wqk?j)_Dfp*VwSPs3r#2Z?s`r?kqW=7{hE)b#|On=(F
z4cjIrEqZW6VwgN?86d?_Ai5G8?U;I2(Kmmi2TlfwMmvmU+J*?z>;#_!gBf$Q7{~^d
zr@xT@6zAdV#;M>9fpK8b)L|WmCcKP%A<LnI{U{Wf%@Dg{*%MD_x}DVY)@?fDHoapB
z;}fYB2>%bxWDVhpbV0H$-Uayg;zoNm*FBWDHrK=Txh+<sz|ipbGYFas1IT}Eej*0-
z`rps%U*gq(YVYc;BG<R+|4e=*I61jzG6B=S6h0=b6u45X2`_S|&*jWykfQCYZp{MK
z>tb4=%~|$|Av{f7eV!qrvG6+FXlGa@cBwm=;dzy~93JO)K^(t}bW=p9HTFu;9pk($
z7TB$4y;122Eczvm(40z{SeBj9O-H=o0_mMw={q~Fr^@|Q!^;sp$D*hBOcFbVxYps$
z#p!W)H~Y`U0tNYT9dy&Fm15jzHOIU`5!I~z^Nf31J&{z;_}c0eSt%p6I8+^dBp!$R
z``pJwlgBv}(v1jHKYOz3@KoP~6RFtAA|Q#_GZh|>#PcUb7*kz^->ejvnU37u#pcJ}
z_^>WCKA*nGq;=DDBlBF$`#^qkQjT2Wt|}F<u3?;~Q}hgY9<Y1eC2T>hJvWZHegDY=
z_V~Q^2>3UhAC}QqzyU{g=Nk%NcPdeBsx%mu&auReSlNrQ(qnD&Nr{#`Oa`cHaZbJ!
z@gSz5dL#!m;)wS&sw>pOemI^_q=NbCCCbFtyl(`_LNLF=W!mAfA+8$t;?j^{MOJcL
zUkk;K7jkIl>T_9JWtzOrI8HpQ<Xua3SH~Q_GLLWAtLd6y#S*%MnfNFZ-+g4}?OB{~
z5l{}}-AA}vn9~fFj`!8wTV`1u;(<o;Jx{X7+poOmJburMylel-d(O@G9F_4s3-Udu
zzxAFYJO}g(@;#@?@0s87uN}0*S8a$VumF0}4nr1MGf!WS3~OY0r)!PA9G8N#9@l?X
zzij!RMXslK{uSqrJq&$JO|<rAs#ZbuZ$2rPXOhtRA^Ayvp^UR8rqkFEoh*<wJXqg`
zJMYGsWY<G8vge29(?Zb$DJN@n)~;+0Wz5fwDhzWZv)W0YHBvZCozb*Z=^wY~H}({J
z8SP9FO<w;c@nqi>n;47@*=n~K#1c?F`_;!xzI(M~1`~uYUw;1N)d9|&syiQBL@rgN
zuF%u>N23dQ*Wm>%su~q?maKs~pZdDT6aVD%ZWBMRdPm>)Er0rbYx4UJZp>);mE-SA
z;cen8>j_|d>!bYE#iB2e1G`Geng(EnW@X&q$0J=*L(qYB`}?m;hUGxQ0c4jN6pE(#
z6wf~3v3tyRF#%IgAdZXX(25Ovm(#0`dmO6O-QNti-Rj?4D(_n)F5r#l>ysV-!+xZc
zG1`=!<k4HajqGwx<nPVyi1;dLk^|f3H0n;z=^2^R`@}hY-C)Irl~HqguSVd^ieH)2
zlls3hr}wBxIZ(8ibbp$ZagvNj1lffQ)Fbvu%u-l3XJ#LzWjnbeG>`+7Ety{}RFHz(
z<CFf>uvMsGn^D6ym4<C{`P8tjPyCZfa88^AgBx?;^p$-J=D<I*Z>{Bb&lcSbD-v>6
ziq@2{%N;^-sA=dt^=X@!ky@nKr(ZC9*YiYt5C|le`RyFzS$W?Z>0d5h{dvV5Idv{&
z^A}I^MoMw-G(Yn-FGx|t<TPTcXJ8Ba-clDv%MV2AIs4hWi<1ZX*1J#MeMa7WD`EBd
z&))s$G@tbDvm5U|1_krJPq$O$HV#M)v)l16CO3XrDT@>hmmPM05H1@=pM}Ww87<Kq
z7V%Uv_^u-XU<spL*NSs-sXK-_NVy?ayI7;pHG{rs65`2~t>oFSVtjno%UnhVn~DlZ
z6Nci8cFuL@7vzoVE$?ntaNAl@r}+)xhE$2Wc{Cs;E?G(iE585c>|$f)O-ps%ir)&7
zI&EV@c!Njp!a7FzcLc}y9z+)!adctGTADKsU$71TZFyyjKquwLr8u$r-x>PJPiGyt
zL(~w#5D;tZ*gP9QtmPrp#d~^vU_$h7t&c`rMWL3)+x3$d%Op62YXeR`VRfJ|wcLmA
z)5muL?ZcH;M-2$^pZ7Y(6UG=-@sB4}z=@6TUhT#gb=+05oP@e&D2UoAeCULnB;{)x
zJYHO{N(A|Gb7hWnX&jid0K$BE1V)Vuj5ZHN9!jdc5m&!jMc91Pb7sJ{rxeH|ZUe)^
z4KW>4OhU+1te};<NN-v(ns;TqJL10dAgIPN`2xot<(I~LKH_+6jSN*27{gSe{L*v0
zvFqc_2h&Yt^d}Eo$dD>9OYr|^VUsNEy1+cr>py)ab|;0#|Eo4O4D@%Yl$n7f;6Kvb
z`7Q$O)5PxrzG^pdsL{Vrvt;*^v@*{U*{*V#880PP8)Al9<JkTWNI8{om|`T}NBnmK
zU<lxXOqLl*S1z&EU+(>hSp$TXNcQX<vH$Y)o&0nbxM!MOU*H)F4CSorec<$Z60>H`
z%2Ott!nPxop<pJ9EmP&FEsY){K$LW->D17g?0=C=U`PJ>bw_NsvQ@8-POe=QKfL2s
zGqt5$u7|h}F%61pXuFC`nhlZ8@y)#F{msfvLXQ@Ax)??M^%3{pu0;<DHTvz-$b6(I
zrCctVliF7l`0wY8=T~5qZ&GKvuE$f9(GtxaL9iewq(5TCHVI)6_fMFwfe`_oAPn5Z
zekrIGju_W9B!r@<TSK;)rosv}!G_0xj5;Pkw(2iHiPF)caKis)a;Yr!-&Sl_aR0`g
zzZ|pfRcXwW&KV)p*^FWXq3eoEp*l*1$dBkM#61`!&#LSQS)%FYNXpBOL#7<7=rm;Z
zrL>qSMOlE-?zNPEYZyyX0c-!rxpqXgqo(>S6m6!?wF`3XmR`HNeQl+vK?RZNkI>6X
z{;Mp;oK=BqT#$&KeBVNbseQhodYumZ8Z;IOW?0)V-7~@X$YSqVq#@OR9*&5<KWot0
zgq+9^EzK%S#zG^4IO6FBv9T5ZY?6O=<KBNyC`LMQiyU|IpphJ@2QixHm3@<FzI2Oh
z!2{tqVI;qBG0OMFPn|pl&79waYN`jnOSAvjmkLWr>aGKQ4j^cgDk_P*S%Q#9bHMmY
zN+1uEzWsn;4C8;k-2CT9TpfLLc<)GnQ)aDH;GTTZLza}LWnPE`xh67sA;oKNUY_m_
zXqf`cgV9Qo(Gzgp<h~oCMFL>g`81);N93ajl~$-@xs;imm45?7T>FO;p~avmc!D4C
zA**99^i^FoPv8?Gwj}2q7|iyv!fg2-l~q=KgyQuN?nGFtSTWw4-8&^P1)0muqve0g
zDO|9();ArhLtO{(C1b`7Cy-KEYw4kb)A^5|_S$z=<8HzfxmL*af98O^*s~;LoK~+1
zi`1HD8s=Kahlcftr?>Ub-(M-Wmqte{4fU4Q?_&Hr=-GHH)amqhbRG&>j9bF%9x8-6
zK#fL6mUddH^df0RqE?YXU{*u~7aoFV+?Wp$qP|-4c-C~5pu!}cei)=r`p~xdq(DYY
z^)B?Bf_Hi<i^&!lp3wB}lUkVR?WWTvL8GSs3TvwwGY&NXf6hJ_lenWeP-)q_0>k}G
zu#;u7Qi^M)`TpZK_(m!?By)$kQZ9GOYKE18@`F5_?go`iInYF{lP6dj<0n&bx8|8R
z2hzm3u90llX)2nCO?YAx9ff_u@R>YXW|4lelNmCTDR4rHa55+DHZ@i<gH!l0gH(Ox
zGmv61EjC7q%GWvKg)J(~cT5-P!;vhUT528}fpGU+&1>GLN&sZzn>6yxxHi6N9bij=
z?Zh<<8cNH@BZ|mgCGW+P8*a)oS7RZ3#LwBM)XXLe>7l|r6b{^PUqtFBC_lnyS}Pcy
znr+z%zqR_s1Qu*5;sjWJb?Di=OIln{7j?^@l0h1UA-B~v^VlOFdU=QC=PqV`s7{<A
z5=Fs&h#!>uk+uht^_^B3L~+yjrd^{~l-;1pc6*Fej-5zlmg-04UWqg?)b-CWcv$Gs
zXe%5~NFjJ<`=$wLAZ*Gr1vhFUGe}KBGX$yfJ(W?}l`(iTjBbTVvV8l?2rdXOMMmKN
zf%d~P_k>{zc}-nfb9rdENXzrfPaNDrA8Rc4Tye#Qv6%(X%PWbQpI%LZoHRe*xy6Kg
zLZKnlbF?qCMj@wMiD~A?MGlSIJf~%+h#GL1-MeYQae?4i1iZv~L`#=MR9`U`{Hkj*
zY(j)j;_bz*`+yFm$rwQaQ)fuY)Ct(TesJ4A_VjVP>S@1+GhDPj!`7#7deRey(Tm$Q
z4YZGbxNQ$K-^U8uUcPz6NH<~LZM)DTKzvWzZ@TRrw!QVWeF?23)gFVP?NveZ>W6|%
zPF11oiWXDbhUc12{|v}Sdd!LbbuQHShderPh0q3k)O3U?*4V@j<}yf$w#m7g+YKcU
zK<&sjXDOaZxma!-ZJLVNL~W1<xg?I1@AQQK=$zH_rH-~m!J@rW&vP0vS!lWM3VNF#
zq|zr5>s5*nR4s{lDBY3b355=V0l}|zoxIw9jK9I1yAM;(EzhiE`!k`!-&U<86&{Yn
zX<8W3W7fnLhz<R)Awo^+7FqK8X1{pZrWToD^+5ZmSRMwN&`>@$ljSyU2G_(Y?@;ql
zJoIJ`ZFlPK(SX4Jmt~AohsN`5;4Y`dELc4<Y1}Hj6E7st7~w6-q!Fj3DZ*sl!}!NK
z-HIMs)LIPSd^!;Ss2d?rF;+;73pBBV&;u2}PR7}tK1W?P@kv)P&eld<=TGa<ATJmB
znc)~c>5)v6V{Eemo@i@j>Lke;8|9&8s)RDFm&HDGCQV;4j+nwJJkqA`lqBmSOsMc0
zGipAnD4ljXkc~F?thfKRy{KAbo3-n;zU$hZ&S7AmsF%NN`LV3M!m2;?JGDn$@{e_>
zZECAR{(-t4(+rFdSOjhn|Dj>%mhNtGeA4BXL0|Ia)wQhFjn}y{(Q#Tn?x3!8Lncha
za@&F!ERlKv=Sk0?z!wo1WovhcvW~XEh|x~B{9Nqs>W=2&F)>fu+&7F<tzR<@zQ^@>
z9cyX@mb~Evat7VXosKm3*36MJ#I_q`6V#E%=JL^&@4WiiSv(m|zY+4Nh!Bkq#QTa#
zi-Zf^m<SWg`x~aB{I65P$v4mGCcIjZqR3XdPmqayloRQDHsL(mn^g3XBX;{;qYcIj
zZt#W*H~WGstvL*hPb$7i3gg?W=Y-^^-nxy1^$uAw%TjVQ)$*3=X)3m`rsrAt#T>TB
z(#t<J0aPdPWLIi<6kB&eVZ)u1$Ui(pO&B8W%NQynJYV3pS$g)G%40F+w9Wpmv1|Z=
z43wLFr%dojELx6;-_cMsK4?-k`Fn`=5dV9AFCO(z*uDmwiq!)T&ws~+Wr+zZVAQ$o
zsWW}nS8=<_RUZu1HH)fbYWk3Gq1~`b3Z0@+l{s_e9;WtM{bH4_PHc}tSN8L22HEW3
ztylL(L1F{vzTTZNX4vM=rVRhBMZAP0g0&{|qy}=n)v%8il{Ua3z&yb{S*`;?D04|<
z`PsuLw`SJJI6Oh0wot9yY9X4i@@FkX?ibKW%o#~y5@%m;g$qtzTEGzYFpix-hngg+
zH_eC@(Oa82vC1rca4XCH?%p5>Su99Q^K|z&x8#o8lE3h_yDIm-a0ggNpit!F(|r}#
zFcsVBj8G;v<cp{KW;9olDN!YqiaSK)N+G67IMdO$YPjp)NScpx7<aulAXp*Q;3}f&
zX%q&QhQ&`rdKCwr6#9#Bi(6U>1!~0X1{MrkI3=`z$K;F>MYUMa=<CAVXy>!sXsHqN
z*ob6O%Um2;f?aHApqC{hbzOzE(UB*u!qumB4q^%vvSz)wDObTCACfHfk937O?|z>=
zX4lvH1+%OqpIEjAM487Y6&$Rkvhg<UzCJzOw8@Sg0vu?{4r)mBq;Eh#1-9f5((N%a
z(5-%%DZdLjs8q0`D-WJiGxtKt!XcFH`vE9)N6g&li@45mRc>>>pO7@G*|HmlU%!!a
zbao^|Et(J=vf<5jmPBbbIMU7S_5afNj7pB}vNR(w&)Ru3U16`hhO2`uuBntMWBm`A
zHm@5IZ9y62iCqn#hUdu2d2j3r&qH5|T^*TG-0O>8RrCKy^lHmYl4&!3#qBh_9lqkG
zaQQL8k*v-LG5)YisID3@|5BqsOT*h$Nehv(=^-cv8$M-V?xsJ`x>XA<Ig)BirJM+l
zw1MOywpy^5H6%}kB?v+{yJAYRNpvwLX5e`zys+ht;@2dyi*CS@09aR0)C?g6133el
zi4v84xo2ltlS8j3Td=0?z;fW1RerTTZe(b<6@UNZ*5bk(5)v8iDAHnA;Gc(8io{yY
zi!sOQPoFh(;~6ornz$MHk#d-f>Jbz^9@@M^jaiy*?w8G3-&uqnk(?Dz|8Sf!55qx6
zo(RMSuYo^R9Aoi)ZSTKrK%TGbV9x0NDgM?@-5D_g(f#xt=1jU~s21RCO>>s+!gAom
z7(At6*ID`w6+0&nOJ5QOzUdNIVQgwZQ^al9X<Le$u17tn74~G3;trbOHz(zW9P6e#
zBD}mRQfhFrym;=HX{dL6dwo-s<2xO_D-^s&?1nH4Nk@ieO!kKLovAGz%W=W|t!7u;
zz=VgG518*H1b4Pf0EHiXpzs#)9|Wz0kb6!5g;y}gIAkUOe8e`2oaPTO;P~gZa=$|x
z=PfMQwh}+#BYpyjR&UsZOV$Itud57xTA3wsfQe(z&*y#uvRg#v=6N%@9ZE2DQ@)i2
zF>jJxv=QiW9L>K528WmLlb3&ytt#^!QHc4M5#lvOh&$g$0>#yi;=si*OF{qIii;`&
z-KEK|zYE?@jhR=yxDyk7Np+xKU&VOKI2Ay=Bm2U4qEkl%w^w!h!dHUAUNM~#-mM%I
z_JqQ#(_FV&PV*bhu7?D+z8MBL-f24wNDtggX%ChQ=9L8MfFzK{%uD>9=dwJxY*i$P
z`Ne`+BC#PY@85_25@uY`M+!n@w9C~lg|`5LAk_aYUf?A8w(h-BOf~b+RJ3)Hs59Vm
z!{txH8MoZ<u8JM=i_AiAbM_fU|JR;McnYC%493pN)MH+w>p%Zx7xobyj*;yEBj#zU
zCDtW<%`_i-7a8RO=E&D3x#_%e;e_Ekeghw?425c~(nDfJ`T$aTdX67BnPqx$3xW&#
z3u72<NI?fRQ{K^-=0gIMSq;sQ1gsu&*w;f&Mgwa-%qxDFtAIYN=UplmDwD(lha_Gs
z+IqGgr8-ZJKc03T$QBHayhlY+Y8#t}YXbc;y?u|G9Zwgy>kzpC$&)Q}TYA*ar+7&$
zFR#p*CF5>L)NAJ)19fRe`4!34Is^gXMd(#3%?PYwlOi&5+Ydq+ktT9+mT>bZ%`H)9
zLRPEat?)*a_>_*sa?JmgcZ2xOHxiN;r>QP|#rR^xwYAreB+5VjmhkGMorUBe<1lHO
zdcJX4tsI694nr;vPUYaFV3W$>-pWjtTAX=&kLrkjYIT8|TmrT9OIMx=Y!+MZnqW~Z
zk!~GUzca9U(uj}Nhe8ihT%skzo@sHesLtt~mdMMksyUnSPi<J0&1d89P+8>2`i2*>
z)(RNjfe%ae#P|fWVm^2-;U8HsQ_u)M8=*hRWf3mAVZNx92T(vXzN$AA)jJ|%3<>;3
zf(Usj>&T+$`TN^C<P(zY1CXXT1xMzC$9W>zw89a!6v{_ZcYel+ILc%}q9&LoZke~8
z@PhfA-ZrDR&7QFzW}cWt`sb+_uNKBIY7`oHGeqcMo7*gnnm<nf9CHMi{&*4TkAXN}
zfRj@tP~=7tMa7N-ORanMNEcd4Q>k$(7L41-hU;I~#;@Rga^v23OARapbEr9;*3U2_
zAqer3{i(|_BqSO~=u%}4E7^!ACClOPQi_9bN?3FA>~wd<Zdw%pv>ZODl&bql#wqSc
zk-ZZV0MWx@mXS7MHUJV&65nXMVkT5Un&k+xZU(kb8{`i($QcxfGl5XkK|(^mqZUBw
zXcUh9jCJ=Mp+i;hBU*$Q7DTV?fQ7c5`0!6)OL=Z>ESV#ImJ5wOF4_sPoenH5$jj}1
zX9wnAdFKwiGsJ{T)bXaFXzKG_k36f;L7%{XcP&&u8s}lxb9L9)9O)Jw<2%K$JR6yK
zlwnn2&-I*n0-qo<kuRBX>4vC(De<p=PBS2BY1xA<9<r~7B(=7t8PE<@oTf$`Ta9@6
z<^o=n7_1CI)Dl95sk+`KXT2L?Y*M7Odr-xvHOFmH*g5@OX<^)eBpq#cM0?!v1R9Y&
z7qMZx4_nGQRVPQyCBcQG#me`bkglg<XHW|tM>AQn^6kb~$CY<0?kKis<_RQw$|XS5
zSIcthW9l#BFaj!sEP#Y)#K4S3JSE3g;_&sIS*bC5m4NIm30-t{u-C}?gA9+^{%c_w
zk4RWLAeiEZKsu<BT6wI)O;4%9Y6V3!qN+sUdm&PIx(YCjE)Yw|VT0>@i9{IDk<nAW
zs$S2J7>#27rRH$lLpMKC#IQkrLnGhREhzK|rdI@>#V9?&P1^yTjj)Rj=xi)<Gp?{w
zQ@imY?e0LZ!dH_b(I;Odx~&Yj5IA5c7G2Qn5k<EBf!`+n%dg2h`NOr{UqB-*c03t;
z%>{N4JLTmO86s|}Z~poDP+|$e>vM^D`AAZXaB;-MDL;{&+omaLYx-*yLe_dhb?054
z|DiZ?Sl><mdz2fgmYzoG){SuNddL)<FWR_#8$U_-B+yr`0y`x6^S=<0Ok%N^XZ$P{
zmyBsjbd{lLN<KR;gDE+~bE(uwXoda?6ZQ`gV5n;4ZXRP)&GUxRXlBrGRP%n}JTdy4
zhI?P`^ZQym&wYaNs6%ZKOaW=^OuJ=L!|8}!q$7@V+=;t&eII_Vll8e!T2VPEaLVsk
zK?M2fC88DH{FJ$^bG+iZFFB+ca{F@mgT5@?zFfZ87csL32|NrLqlDd{VEFG($Tl>y
zn=lK^BKl$dg_{NY@A^%DId$|9s+|Yg*9vMz8ZZL&=(aq4eCjDeP8lPV0}`~t4b_^l
z?qMv=;)m;7XTKc5lM2=f!d1Q9z_Ci(m>S4@0!a*LUv`EnKyTH+0N6FK<u-bwq)gcD
z^d_*}`D%cb%YkO$^9i=i$ZD9NA7*&1lG~tC*B%;Rt1u37`1XZlPiQ22G#}hR{~<p}
z@PX8!5V6;#mM@Z6d?s-%ox9ZE_IikkA!iK}r%|liu|MHMpYMLVG+Vd^yxdD5tz5i$
z4i<_iipR{Gzgt2+Oo2h~&CXt|P1gw2O2v3955YZ!EGIH2)|e>P`H&xa)}|-y>!&vf
zt5=h>_D5c?j%naYqgcn$>S*ipLV_FB45LNQvW3Q%xNMd{jNF<M2G({!Wx^W5Q?5)1
zKDBYkI2N~KT3p{hC8(p;A*`%5@zx#X&^F_P_4kCM$K(#>T_%ixE+Bc-4vcC-F*m>o
z>Wm8>m0;19EDR<tSz|Qkx;z~V5XN&8<srr-J@MCUz$st?7NVWKS@5~Uko3BnSXKbY
z&KU+gPK}#IspIIg#vuH^=o-)~;RXe=GTUJsm*C?`fjfJ|-Hm$$6jY<NYtFz`C%&u^
zR;$f=&gBmhAC}O)=UIU};jg<J_Xtmafxom4H^0vszt8gK_nEN?l-74Ix4+Lc`m8Zg
zpT#tW7M7H%ux%*TwmbR(VP)BcxgsafvAN!w)=p?bHm3zb`8!yR$Z=&d&>^kOowhe~
zVtZ)Klj!^W-7a|&Hor84oqteO$V*+ow84s9Y}DHCM}gJbV~WFJbj(P98oJBe$h--6
zPMJX=&?+Y1yy&o;G|ENp61-UwYZroOYER`j6=xa?SfeVuKxUId6LW^ZdHYi2#>?Bb
zjp>r>EptRKQ+cdYmS3njdZuhJ5Shg2YnV2qv9(a>-fIbk&(HNj*AJ{%4@~#%JZ(ij
zP=|fhPiT>n9(dsCy!*hC^}uT1K691i1ItJ5JB}qk@Zx=7!Fpi1Zx=}v<O4OZ(g?Xm
z^W-;7R9}U8eDzx}Ww8FzJkHwNx!9>>&OwzW=4M~nqyf7x{=H@%HRlm2$16_R*A@(w
zT9)*1s*$CPv1aZdLy*0(1`tNC?#yB8q&*o0w@h_mh;V+MXk8mB#Bmt$PuFmx){rTl
z^_=UN^v7x*W3rH`tb1m+R`V**tGQI<4&3t*?4hm@ZX;PkUiDDF?C4pac!$roXR1v2
zl?d7jCTiV3P4i*oz*K+yt)3-X3E8vCoh4s<=kHlHY&gKur?2;{+SljaO8-k^mb$al
zn(zHRTh*Hm9`^Zf_3X1T8#Z)~#?X<rtz7-K(P@#ofp=>QCkyWbE=El_i>Qz%msymh
zZ&#RdyL_%aDiY-CP@0Zvft$>LCo03)1JA1DX-r_s)Hy080cMk;HVHL*=Rba6V@d*z
z!q&k4Hbw74%aw!%1D~g_pF(O?_IN0mmg1*SG4b`EKc)e^5K7^^f=4w?!~Y;+lr|gX
z+!|zvP2D?}O^fF6i9q)2dV$4~qaPMDiQi2DhaN3{Sd7B_PI08QbU~s5Fcd15bil*q
z;_q`y_L;0y(XaIfolPH#KlQ?Xc;Bfd--)<EAa6pOS?Fd?Y`9=fL!%$K{WabB{Gkre
z(eMLCaHd<UvazSN>zIj8ymVVzkk;nd+C;WC5OKO?U#ECP``^Z6B{ZTpl*I@WfJ=uZ
zP#0cTAVAX=_p1y`@_o4}^Yju90NBfT7)($?D7-M)J-w@}zTUm*SW5**t3U7F%-6j|
zc+}m~Tg&F_-J6fKsByIUV)rJbd*d6UcL?{odwPG_eZ6}ENUC|=|GazN(aVR5Zn&->
z7N6`o^9fbJ6OspN=UEkq@*Neyo0tKu2H<D_Y?NihbZ&~=3U5QztQ1Nq^4phM{$?D>
zhS%wuwbov~CS+Lq<w&Yv5|gCW2P-Uez)HR9t!&BF*l*C-mlWQsc{Q(4IM`j(wT`G{
zJ(y*r;qV(za3*lWgk6~U8S=wk&)9P{QsR59fKj(U$#A1g-nU)ge34I17r2%Atl3mI
z*36J`PrRg;A9Is1=E7tMRnJppxgZLNH-Nn$&;}4OmOstaPpW==VNegM)uJ*CYWf1D
z0}o{2m2T#j3wizX+B&PP_+{-fW2(zk8886UEJ4uokya|oDnTi7i$67ID`wv{T~Q>)
zXvI7$_hQF=#%D(2K9hTb)4Hd?S{?c}SOnAfv5It)ZHVqS^_$^83V8bI$V<u5Emx$}
z5Cku-*L&7z|0vr((e`t){k+qDCaL{ejLXBhx;hga&~(MjcM#3RFE)$E7Wf5FQM9AS
zKwV#uY2(eA**`7M%=GneUgV41_O3VNEPkds8$;Q}6YXL=HY3`_x$I)z?P5-Lap87x
z>hEIK>S6=Bs2o#R-7r!%U9vHhG#HBs`lIKTQ_?M4>6}hi4keHNI`&O?Y8rZO8ToDz
zxbR}fh<uA&cLDX=nnf8+AjLJF%@5&9!wE-Kn)Lcl^^_Wuo29dbp4eMH%v#r9^M(&Y
z^zKtX%15MuxTyHoF#@zvd2DJLH3eA4Q;I6;)&Ea~5ba;JFL!vorNeW4)yI+3>kR}^
z=3Sq4v+p;GG|%t)9D8}c1z&p8b&{L6|B*6Dv2A2|f--;(BRpEV0Ml<8CjF7`(Q;?;
zGv=11PQ<e;z>eZ+<W&!_RciJ{U7#4|>KgZ0N6@E>A-E89Es7(2gY@#f9nNbV#-v0F
zHlXQsISZPVHTx#h5SnYCe!1{3bKOHo^p!lTd?IFhiguti+Zwi6+*CSIVy-;BYbfs;
zZ5<B*j-^n{IryAtLc{<Hub8j7xGDDxiZl<tIhmZ<90I8y`yo#P`;w$XAk;4%%x~Qz
zIr}(O(FJW0suxN4dvWxe2a`yL8<2{8h&`LmztFQ)u)4TC8x!vCfgzF!L<QwuqI@nl
zP(ljG`~(G96ZTc^k54|yK)?4vjsMGyx8$>L&ZEbM66lBhk~3F3)Ta>~K6>8j6Y~48
zHhD>cJhn9Cv1Q=ahOT%I;?~-qVdxMw`x$WUKp-L+7ev=G0DYu0li%x%{(Ib(+m+32
zJYV9teA*QU+4t$FY`y^JBRxnnzpRpsM$pK_va4A)1GO=8#GsIk^YP1oKmAV)Khc^>
z-B_(P2@aTzbQZ^g1Hys$+F{KEgPmW)|B19}%BHI#gEQ`ldSVlcuA%|tq#KQ8S4S2i
zg>2&zR+%IgH15dnLYU%*q(U1#5j<V1I7b)7NKBa1x=ZT+)jmiIm^6ybIAEOuieZZX
z-?i7@B#qCEQ;)G0Q*zXhAB;%7|J{Etlm2ZM7KXuJs<H+_21}%c5Pa%7aWWf{6XxQV
z-UPcfn{~LgPm?Su(k#MyM+r@8mi1LyfTZKiIS33C@~G)GmqnaJm#%tssMwDJJxLFE
zWn-_Bs`|}NBa7$Q55Xv0|1wppWzO>U!#CvN$Lo*UQQ{~0_@jEf5m)hc;AD58biGVu
zV)yKnB?ZW9G&!pl=}kjqw3jWgd&9nsbKIt(GAJHC?@kH$581-{N&XZ|pGVUnrs35n
zB<!|fnT!c^&9SP_p0~s@>&qA3auO!?af6jNqrfJk8`DZ&APOFG?|6iXV<YHM+KO`W
zmT1Mb$s;J0Wxwz?vwz}kwu#^7#`~<k_&%voK(Lq>ET$b$fi#8S&M+^*YeO6ZH0B7(
zSN3cN&7QSU+!6fr5=oki4!wEn_^632M|bewORi;g{z4)fQW=OyhWQhW(2{ASFc;-9
z15-(?QIcN|=c2G)t5)JDcH_!m$(HsIKkOB(=~_Q*6=+I2!k&A5*jY`LPacMzpGky&
zeWK>Agc!~2!FftSE-y49pTE+EyBy6<s$)3Du47>RyMUWqjm=a<O|NrW%xuZ9JF<g)
z;k_nJ#`yecBqg!ADIi?a0!v0SST<iyGmV|kvzyln<_)D~B*8xehXqC!U7Dc)V$2NA
zns;kJ&eumA^?+2L#g{3F8Gu~ToV0|CoaQ!0OY$<qB_(^#FPVag2Q)opK0kAP{!r{v
zTrDUHRve-3N_YHD^!vszNwNOV@SwI*=Sf{fm88gng@5rOKKAS3Su->s!uh)D?=gng
z(~1Mbvxg2Y&f33@H}S7pI#yB1?FhNg>BL+mRIpFGGt>4dH3>A(<WPahU(nSz)xg5I
zch)E7kkfvFP(*y>`}B@k{NDUbG#7=-c|BLA?<pTt1rM|0C#eB4ng+z!ts|3+Wkl=O
z+A4J{W7!A0WJmF8qobE$*KU4?Wt(A(Gf5>8dTO3!>+4TwmIMnmKe5??8-?OJ-B;K{
zv)A^Dpp$hyN2d1X#Y664kqzq>UD&2VS;4jyiBl85M_|3q+L&&F+n)mm72p!EUnQgP
z!Zh1I8n7@i`_mmFk~|4K{9M2lXwr6uP`z+hcRbcjkwhRzO@A5v{!NpZl^4vIew|r}
z(Pz-0tx#g1BL1r*{z~Spcw9QeEcxPaLAL5t1`W>cWMOPpOrN4haQbP^hs?^R^2M5w
zXc+t;I18d=zRejY9L)eCI?2hetNNj2S$;yBB>O~D+~{102;la_lQi|p<aHxZYjzzI
zzKEYk#8I)P+~r`<=MvH~mLxPL1CJ0(LxhRNMFWa%9>er~<BqCH9=SzZg#-7iSgaHq
zxYCXawO*r~Zy01Rk{s-~ZFBmVlcBkJPSh@FWX6FbN{j*jae$(#MwE-PGEA#HSrkNF
zHH^F$b)<3#a7>%AiU_l|<D$XFGMP#MNN7#ga7TP%`jQ~iF%D>i6QcKU-Dwi|rFE*r
z(hR2o3O7%00(S#P&=xsLf-m<7QZcv$x}&ZU6}7roCTWB5G(M7IH=ToUEJ3QiMstFr
z-53{5<#n+Y$G=V0ZyL5UD>Bb)DDvTjIUFk03z?i1G%k8}^8A=tgla5Tc9~eJ#ha~U
z?N%h~rbtTEGUyt0=8;F}U9bv3@l_}C%D_jD_Exh>ntEJKJ#fUYU-skE`L!bRYd(eS
zUT^ciWPWu(HB-4DbF3X2S4>+byq%HSkwSSzFUGlTN}t%K_KD{<+^H89=FuRx(Z-CZ
z=QK-L7P?fEv>SJ$zmgMpt$x$ScjKMFD_-uqQXe9Cxac`wL=%H>Ox^R!22mxuh=w-B
zzU8a|MF*xPZX^e;jUFIJNnjorM08?cR;913C%IvYr6fkN9k*+l=IF#V{o3k?7w2&3
zyILq^#!w3^fAE!`i7TEm=#PHni{z4oPU0;)CRGSJX{AtL39$UY<C$8?=K`afp$eXa
zhARxz4?<WG(lZ<GUwPkRk1neH(LS3&cuv<sG~*E7S;=fC&hlYkwRff8^cw%tOw^bk
z{~L;2jW~HP#kk}u-XdHQG5nUm3=|p3SKY(0r^gM|=n(!QtmOsWr&dDI!GvIea$}E=
z$fb`M{gKZG0r@jJCfSlRGjXWp@e2VK4Rar%xX2?anYZ(9Lz$vM`Uer|GB=wl(+au@
zrnXTwDDc*ShBK}2(X66+L<8gl+5_WjMDgEkr#y_$6{|;6dTPg|^wjLheiM{L3#}s7
z{he`ej1*H%-=n4l1eZ8gnArhzU2~I*SNWS=ZLyd$r+uH;l=dZK!Kv>5ywsHV{rkKE
z6QG};1b$QYO-BxocYh#91y5PZrxcT(@>2*#1=JPi1iab}94W`5)LBmVzaUv9!=GZ*
z9yC{FCBhv2G)Vdil;bm&UD4^8J?{Q5%4w0%h7HnSAMxkD!TiuX1!zE}_WBfJTcg=c
z$LTl?Jf_Mz=~p>vxGfu=cp9da(ChJMEnnLV@vAgiah9nmqO=gxeT!wq=`Vq%*FpjF
zof0S_;NlSpYyEX(!j?nEnWQo+r8r@LUqoD$XL<D5qFmNMDMCsZC6~xYyq+s~0CNx@
zH@-8v`VC&9<#~zvKlKtR?@JVa|0RSn+;x>S@R74Bw`^K-JPouzfba2kZ$#d&XQ-LN
zGbFqQ?R%-jk-XCKzg`50KzJa*E<QIUw6=Zs#90Pc!z@)Y|9xpU5d@!CIOThWy%=pO
zCUDA=1jyZr+r0JQXO4r<+@v#A|Jt%qftx~NJ6A|-`IAsxXcpAf8+p$m`VU7-P%BHK
zVJAtN_0z~U3GBYQWcAZ+1r#{)4M^H7)A8I=Ijo7H5MY)+ZMdK;7?41B7z6!~vcpsy
z21Szi#}PBXOc+-Mh)M81N@3Wq;4G3KHh!y#0ahZFgCAmD=0<XSF%N87(3)LY(yCDH
zx=3SNXvh_(HxLmG6vp<zhXn*A;y1rR#(nZtd)xV|?X`{b^-meTDLZ8(!zZ&mBaN}w
zEpnzv5a(`=GjI1{unmVJ5*&Q?dZUdPL_6$S;ll8q$fMsWya|_ulP0Z8tg;DL&zh?C
zPmxxL|E@F?xG3ZVXCyB8MXEzyFy3xp+tL9&C>R2H@1qBJwds%>p&$WCoWY6tCEauc
ziqlZ)+K%k;-a+S^>ov2J*C8RG0|-%>nd-gPOdZw#idFBVh(yWmc`Cx5@7X`l^F_lp
zZ_V{m9_C|TAUdp>qh-9G0qX1RFbfi+E!X#1)HTVBhXHwiK{I=p1^)XTu9ccYqhdCT
zFtVn_$FA4TQDyvQcO>IC@Mio(B<+k0vwc%j>iM!u(uD%sMZk#CJ=ijWaYa+pPPs~O
zhmL7Cs{AWCzJYN1x7R13KOs!n4eEvkb2-Mathu#5#95a}oZ>eJT%yN!V?zjM`~-gy
z_Rs=%d}bAe@j~dtSVJe`jF>V9m5`8JWtf(c!`S^SFlsXfN_QenStHU|opF4$_pH&K
zhsb>ZSP*o+bsI-4=R3J1pTwELvn`1`Z6ZQsE2izfWjI&D@2vGlkJ!IE8(DU|M~;7s
zGrK9xX;XP^m-x)kmd=+<C7NfGNkp9d64N5D!yslRk$awC7Ef*v@^@0v=!8?ab^K<R
zD_m$@T&`|~JS7Z7b+CeGvesrUhqEbRpo6u1!e(v&h+^XNjy~>wHVAhK!@PVj@|59)
zeKwk~uRZE22DCkhsoY*)Jfn8x25@%WVENh*Z3Ge1?1}?tnj3LlG0nzlZt~_eR{4ae
zL!ON50g6w$xeKvgaAe!D=dZaTyU#{r2;7Hnr=}~4+BmTjGYj82@hc%(AKHPl5qV(j
z&l-yiBMOV~&s|Y@PD}7bmn_*C7164tO?D3l1vt08TY5~XDKow7lXUz4x;DaVMI-}i
zs!gSP+>ioNXp)pZol<1rjwxn;s$a5g@Ds<(Ig$ksL&30W-#(z+tIeQO#$ZgRlEOI$
zBYx2uk;or0;pTZ)h<ic_4?qRDwV`1^(k7J$7vc?tBn4g|Oqhpaw50b6osny=8~=7!
zs^HT3@bHDm7_{hu{cQAHMHfPQC6Omf`57#i8miA1>hg5tanWgr>ybj>WAQVtq^4m!
zoO&Nr|D)x5%Bo&Jtew=U$vp%@1$ot0;1i;LUC*IGA&&Abdjpg0X7k+C*m#}KgRl7!
z8!v?9v56Jqs885C6&*eE-I&yh3}>7O0yF@{3@%5X9LZ<0bZlB=MB<~7AhK0L?SOJ*
zDws<i{@k1*P*!7fF3+!~<_ZmMm#D~<%8QKjx@cX-i6R^XClqSsG3i~nYDSo&Fu5gn
zFu7ZmYP>tBYM<-kL03q&)SN!w5MT*sq@He#6?5HVC>zy?z1=&!#6cC|S~5v-b^#~_
ze%WeBF-`&G!9J+NH1?>jghj&r3g4i8EE^;Na(9kaY}Tiu$k2z`g80W^A%5g4SQ|4N
zP^*I0ql`1JBZiXF;=qrBfkPOD@h|^txAZQwVxIAKC82O*u~kn7u`(Z)mMPzRnBvs;
zUPX`%TvWKP%NC?WL}Jx!%pfv4kUG5t+M+xTa6Se=qa{8!w*oE8ckLx%)NeEoNOm5g
z>2l`Di^NM$QZDHUOp=tWoTuBl8jKC9X$a)922Dwonlv+96tS<bAg<6EF8B@k$#4<q
z@rb}hs1uAXWX4zThNO*WJ}v2dDyeO%r#6Vk;uyYN=QuV<ZShArW`s)#5w_^#FEP$o
zdZ)-eIDK|<Avtok6>X6G1WSuQD<4qTqEt7I2>gybQ(%0*^vq_wPsY!*DZ7GO9tZp}
ziF^j3)nKxg+|FSCh%2T-6to;7+7}HHnu1+NZ&$lly{Q}qCb!3q1W{@vEu~AJ+bTNP
zh?4*ta_sC(3sf|$<EF-AQJTw;ur9Vrgm=8K@kot@Cq}ylaVx5}boCX5<e(iZ5oAao
zVnLq@pAa*q?i~7H!Sw()UyjK%aZTYy;9#hDi<mM5Un>6Avw9b6L0OEqkr{<SfjaVS
z_gAAZSKiu^5jQ{#sQ#Fu%7o|u=HJ!+qG`uM?)jsn+er~x=m8-BZves^QBXQ8njLc2
zd$8DIYqtC%1T#yR8lDy%`JP?cLjHj1;w^oUOx>xFC)Sl=PP_KyjsKkD)H*o?$oQhW
zJ>_KD?nx{lKG2&GM)a#%1)6FotTbemUs4Vka3^LPY%~dO$6TH7rM@e+M|c!4XcC#V
zo`61;5vlY+%_s5k>2--xW9&~KdPecEOYgTH*^QANHOXGi6~(hL78_Ri{eDS_3#Y3U
zIX+b~KDB>pFp?g6#PK=xk{{U>kF@G?)Y`%Qpwu^VeV*;0Fqc-WJPT|d&J<ziy?SLv
z{zIA%<)4a0mA)g(r)?JS$HJe_WU&OdR6jd#OxBzxn14Y_qJapC{sBV-J>qxBORL7E
zN)ktSNjqG@Vj#a8sYf|_57eNWgNMXe+Y|-#to9_{u=%e4d!cC^!fHU6q|k#@8`l;Y
z$MM!k?OjhgnK-$}6U{)Iy%SO4o7eT<@u5vmLL^T%q+^dHwrfVK4XUjf&FgY+^*_L^
zfZlO&bY0Zj=yhDr{d8xlC+$o%m|AK`u3LsH%lnJ`{(=n|I+7FO3`jP`=`e8dAy+f8
zKum^7NvgwR*HggH(hD5wwhKpv7l-p+r(<>tS219{z}Sx5jeD0Nzr}=qqBRlX3*n||
z2^lJC7{LhNr|i=kJ{y`W_=1A;K*c8q!d1=@^d?c0?5dKFswpo3%}C+<{%p!DeP&5z
zp|z<@;+kj6>TJgtU>>u@lKJ$S51f|9wLluEVKavw7>QpSIr<Y!z9PfPx6fl`FSnCC
zrz#25oMkzjGI1xgPrD@zgosq0@;l`HEz|U3oI@5d$PIpez}r-xNhVEW5c7m^4!%dW
z>bQke(VziAD!`=GEkjRADkYV{ghGWnaeVcX=Z=U4<_B9gKSDG9tg@dn29aM8Pb_U{
zi;7!%#PF(OP6Apv)W!bO-PaX+WK9|91v6M06jJ076nu&ZTUky>HH!Q$_)<+rMA|Gc
z!v=If`<WDg>gjZS-m6yKq!Tc8<VM0!1Sa4k&$!!Tv8pq96T&WrZ#E-?as1}bY`nT^
zB1O!!6dug^v|?YZQx&VR4O>1gl30;`GIFpF**CpP3Jnt4Y(kI(m=I}_P$&z4Pca*D
zTTRxW1t4~Mfx3j<^SwO}FyN!MzzQn*R==SRM8hhtkjO&Kx7{G)W7}6)IS=^U2_)b9
zTGid#WqQt(Gj{_9x}P<La|r~H)L=Y8jHqViQHZRUs4c|&VKq;}CIoE@;BO>m!A0LW
zwiCr=MUh=#rTdBEkT`jI^@y7B8Pxl$Jmt%i*!&@J`8VV_z3GgK#Po)iLnTx<C?^J4
zUukNq@y&6&I1+JdX|_QoJ{udUrcC}TJ7WG>$8~l*KM9--yZ}L#PO<I*&x!G6)`Ws9
z`goW6C}JeA(_O3f2FY3RCEDIOK^Cu|3e=zT)b@J!n!Z)K_>+L1az_Q?Z(Z(8fL5Nk
zqsJ1{oU%IPNmfAmEGsRHSj&o~R7tn?s!k;)N#}G7pecMgb($+lU(Xnb%gx4mB!&j$
zjH<CLPc$cCa+_i^FLdPWl}t|H>)un=%!WZBjE`Os(uX#dp~kNDfO2D$*>s-#KHHwU
z+V8K6o09^39b(O=GlnL3;xZ!BZ=QN2I7s16;NsbJ?K)H9PFzi@_0a*(h{Mv^cJ1T`
zzQvs$pIy`b&~Vt34YVD852F6eWA`fp@eDD}#XFnmzHmowzSPY*g1Ip4$T_$*Nk$Fl
zI}P#E(;0yDosR66zNd|$_!9f%)2_<NpSCH<nqWDneY>j;?3E>y^%qIWEs-%4|JEkT
z&lrjt1|(WnlsJJ*!(8}jW<`J7T^lp;an3^=>#gQ6byp`k-WXOUfhVSR{UJ~6sL(e9
zM(&R3x9-@oW0o=Dc{JNd(ot**;HhP$CqHm^YASC*y;tn-8i&#a|HL5QxE*L;@y-tY
z`j7hKJ6q!qae&F*;cA}8aq7{^ds^Dr0!hUj;RQuo*UpfDBl<??fxUmw6z%SpHzbQh
z^lA1RspMmWC<$dp+?z_qvXRztNh8Nt+>yovZ~M#=9UZan^L2`&4>xo8kxEmHKP;I(
z?Cw&oC{_$l5z$Edw;yEx67Em5e@{Be>lqzON-09T*^B@+K+3=QE9=FNOYBm2lX4`!
zxLu0c0n``NiOs0ewM>|!bGAxxyHcwYCt0vR)3waFgvi-FXO0{XVsM+6&;jgW8eIyo
zjeXU!lc1zZ2nc1{5;L&-WgHBNCA4_9!YEabXj!BSeddB^xt$3!Np*0yX&4cbniC)q
zw1|g+3q1`L!D7=#Bq2?6tEP$aha<|BC#S89E-=&4T2O_a6nDW8F|kW^P4f#2RDfuW
z<FayOaUv9ZMp~@Mt=TtvNS=IC)TwDLD(owhPYMIB@5#xpbSC+|S%rD#o+NTwQ;+IZ
zhj41dD;TJ-F@|V6aZVAMf5FoAz%hseF?K0bb!c%Lp;)X^Fl9=|E_75q&wSC~Ldl<7
zwbc>=WRY7sE4U=n)9{Z6Q)=}<SWsGaeJf#yR3CCuy<tY=g6UW1&gjh7%=0Z}(r#2I
z-!eBMIjOw&TV_eM!Sb8ladw(5Jlt}P=d3KT#A!BmL2bh^C&cIu^M_D@(t#UHbN7Zn
zjcO9Hq2r_V1S&Iv3xPTS6$9G7nl+w3N(Z;VihynNW^!EzcZmBJ+)My@3$z5^zJ)Hv
z{ahD)hPd?z+~Ifez`8+5#%oG(!~58VK%YekxDMdbP%H~%8hgH!tb`epX?%4OD56MW
z>!kyMv8YZVa>^own1CW@TOwQk?$@n~OJd377_BT-Es`c78R@2QrQ&#ID`j{W=_Sb>
zZCA_#N03S0-$KqE?|viq4LORRZW4pjB*yO56U7_ZCSmmUKkHc3z_Czhxa|U&SF<D|
zzQC;)ybP0=<hbN6ti#}c%>4qpnD;anyCJGI39;y!=4yc^r1XQFOA1JrXlD9D_)Axb
z8ivZ5nH-q`m=k-l$e;Hhz0h<Hz5pZLZMaiJx!%A`{0O!75G|Y7vD>Lh@JmEzY|zMc
zs@THGTmDHkPmzhk#wEg&>U70zB<yo`6*!_4^Lw=zLpdMK@On!Z`jfC=(;~S2W!*)T
zPrj48+PCj2^mSrv@l5WUKbz|=PvYablq<DyIuLcE`GwN1Q_?muoyuhQ11yHY=1qF!
zlXA$j?buBgVyX)|1!=k%KWXR_)FKH`QMFD4Ak?K3e#i5Vkl9W3Z4hDljht*SJyYl#
zXh>1xwv|d!hoU2@yf0EEDcR8`Ayqe)-iiPlOBjDT7rFUqHssS3Jzr*Mp{i-EW4ixa
zAE2YEn~v1GmaA@S)#_e|HuYxUaF`=FcjJ*kA2L1Qt+?okLdBF^<b@Uc2@UVuhPSlg
z#wQJ%7E9v?T}Zp2DzEW(j5(ARc$lvGLk<%=<giJTki!(J)LNPTry+;1NcOpGh9x8e
ztt60;ViWP5)e6_gv~w$`UUftCzNocs-XCxAB<t;l7YFu9(`Gj6r$vA`$0S^T7(aiV
z{CtaaP%y+I&Y;B1fY}7kIAvxd7alFBK`0xje+pE<41FA&Bq!kGnDSi8&x1>L+BEYt
z7%^|Xe5JZ@cjtGUXJi)6V`8nfNk1i6+hoI;DRX1{rx$<QX#zn=YMUM*T^ql%Rp<6)
zZe(KC%v@Ay5`L2*yiP$8;%IBD!h5O)LX}XYW1eIk0WV!&6#1(uL${id!|QiOs`bhG
z=4>BvQb-M}aLr`h+wA5%<!N=oh;Sg{J7da*nLQGlgotKGfvFqkJKMO-56rMG4Q1sE
z0kQJqS*#NxQ(>*kU1DGnC^q#fo5Ba|ZY3ufu}~dF99mp38cy#bwxer@|2x342ph}Q
z;d_{Yvnn(-s3$5~C@e@GPF!1LX#~Uy`3(DNt<zONKH8={Zgg$>2D<dkiTi5vI$YiL
zz4}}@QM_;+`*X>4{iRPOH{Wueo;hS$6UhKMaq2XtRfl&@-l)<vm4u?|qZxBPpb4Uw
z#0=J2n`x#N$s@rohUw?x9Z4-UAZZH`u{%21hJhy$Cu1I%iEHO?O+S^A1#cyA;cy1r
z4ap%p(<eIseta+w>KAfSD?&|2x7>3^keCjI;yEqZt?o_&YqMJ}1I=rLwepi;;5a*L
z&_`=;6yTLVyK*s0ylB-^0@2Ut=5;pDcBfj$Yv)VX&X=(B>7kQftMUY96SAkHkv&Dp
zbhv?GpTl^RDdq`mV8QhF!H^S#YYOWgONv>U417`QJ|3gb1-wRqbyh3}4om>fd-XU~
zjNj)_a(w*dk*xFGnwcpvIx#ODbQ-6D>omHl8X7k={l=#L@64MHA}&72-?>$dFwHo&
zM8-3hYnrAikGVGsTJ~i@QLwUmAY_g-O|@&0HD1CI?C$2AWE~p{V2o0ISR>h~&I0`|
z6}eukQ~gINXgZC1(~xwIy2N6Kc4kxMf9yNy&{nQVqY`5*Aepln*08oy%}<;_WqK|U
z;p%P2%z;3W;1`d%aWnv0$kN$->sciGY*y;G9{*m*xNAx>I4W3Ajpv?e_yuAjqF#1j
z<$#v6z&a__+9T%tDSzQ^b1mnxjC)n)-u_d=wm*W<KOA2$d|xiGTZKhG6$KMPP-RMZ
zV$Zs(x!5%2DyjT8PEqygA~{4VG6935rtOF<Suq@KYelq|EqlX1b!;&GiJW`JGd%ZX
zu?NlU$jCxMx7)E#fXRi5>1>Cipb|K`(;flJniQavq1Oql^TCYy`Cmr{=s^S?hgR5`
zl1B=au~@5A%aE?v9#v&tiX~UQFptz5XXgalEItt3F;)A@Q;`u&6jx4|JL6?Vi8<xv
zA612Jt@8wLQ<()8pu5(di~^&W6aH8ls#+CYymryLePm|41v15;Sa&rqy~>Es#k{N5
z>G_(1y>2@BlhMsSSW4}-bkBImJs&gAgj*ppeC6MI+~vU|#=7B!f8%3LJs)%Uf5^w2
zPyS?d^A9#856XLvNSH9Fdlomqx|=eW7MzN%ysz&=bUfd|EVhWh!f+lK+R@kl-(QRZ
zCtzRlRD)hJ%zjeC1tEkZfrD*)QEAlDYMP*>DwasN8^;&7=JU*=?mO8>yh&60Ry~6)
z0*_6XSKIB(6Jsg`MQ?yhhbKmKiImVVOP9Fw(jL*+hO9}!cNz^pVUtj=_4{lR8}uK$
z#Ct5?`I!zJO$<m%q72xeN^bI(<;e>26b8_-B(LL>IU!l@@lSKV`jK9_i*a6H`q`&n
zRBGx&*Rkb3aFhOU>GrRtta5NuV`dq}qt282I<cgkxIic5<EfZ)Wf=Gmo)=av@vk)c
zJ8#y7LN;L`D#O6=QlmJ1ji{v=Ib^lxC9c!kr-PKWwrjAmkl$+U&jukds<d`*e$$#M
zq4hKEdGX_#+e^ay1gG^UqjdrRV6XVaPtX;gz*0)9de*A(jP#ghk%Un&l<lLqCi(WK
zFEihRJR=}1;c4w&>J{F8vTWu!i^scilFiK7HZyD6%*Fq+ng7pb{%ba~FvhdVX6z6b
z_&ZQ#srvu3nE#x`j6c9?>=5bn^1hL(+6FUKzilt&6Xc}M;~0Y7w2sR$S%GtUtpDqF
zG9RLB6#FayvHP6>gd{bSwlh1U7N->cPV7NP>d$2=^44<6)nuGr_5}Knj8O|EO{cb?
zv7ZcFM~d-R8OLT(t$|Py9x0M$MGoaqnSg=9LeicJ8kGr~OSM8m6z~_Iy_&MaFC%&!
zsY>#gn;7@C?c5+}hnQ60Na6`2tK>-u({-+CFy$mhVfbS<&zwugJ)DXWfH^)aEIk{m
z0()(h7G<;+Ct$}BpWh|`-e%#h!69(UQg-hU)Hy9>wDZpRMqWh!CR|2Nzdf7j_0m_p
zVU@-N@rVdI%-%Okc}AtVV*@DW$GFUs`XkbZQZFh!4eaWXd!nT`3oP45SzKMKIAouj
zhZkiQ1#{a&p(Du+S7q;^UHB~f5IJ>*$t&nZ?i`dGcQ|5Nz8#5%=LjY8?ii&!js1#O
z;Tx%-=-D)SD;?r;wP(E?FQfV;aIkzOlnfcP?CE84L#s^B0!zM$sLKzLg!yy~PY8B7
zE^m(EiN_G(FxZsbC3eHyJFAhTr_xPQbk&VXN)-vGp7d9*=H6*3DJs!S;Nss;n6<=}
zp~7{JPWF;;Ani%EC8UsHsD|4ip7Y?UhhKCtA0IyH7a|E_Frr(OM~!WT;p}RbsYv7E
z8ggxMs{19nTOH^q(2G%-Z2q~akOdfgX^e)Pn6*1eBi97rwnJnnHFY|-<C!Za8*QH&
z{t)>0b;Iy_fRGK#7s@0;jeHHzo6dKADQ)SoW1!;&;4y~{<w-D>kUW9c<zi<ucvF^A
z9|+Pz2H&E!NqCWO+lJ$8BmB2lB=JMh)PW(B=cDIEWF<iu{O&dYNbWPUi1Q8)&iiFi
zV|VE=KW-!P`S;l8gD<e0W_9OPPuQx{=)OTb$}={4apI}qJO<80I3#s-9ufPM!RE5Q
zghr8t&aAj3boJPv?h-b7^2PDxK2oSVU+BChv<gDYkglf)9%}hW9pokk52#yrCj>=m
zRNM!;E^|{!7MeEim^IZ?R^@~^L*`Xmz%3=xb<%3r-E$0(zR5grP-N2z-9Zsu+ukaM
zT5lP~ihv#C*5^cqo9)W(He#G$M7D-fJP72lI#q5*G5y6R{<B$SkFqlYzEEvK(I5&>
zWVkIgFG|)6srd8GnfWqHc3P8IjZYN5t#HN?1ipQ+)TVj0`-xzK+MAI2>${0}9+BdP
z@jTE4ValsVZNEmoLZ|5lIl!j)W9vNdn|_j)Z03`S#o+5aenAd!03z^MC!cOQd+6~|
z;|;3c{kW7O6J54#T^Z*xt;0i~X@6plT`<oYuiCA;08?qlC0~iL9sor8C1HPStUh|t
z{?{QW4w+`>0NU5@!#;!`Hd#k{8-Sz)LOPl-hv<AHtW^{D)zJFw`w@E75}Z4s1#_QB
zgo&&Zj;^1_C;ZLx>^l9HW=fCO<`41T^n|&`V@BLXRXww+`{XgMKF`&t(}rP6Y|+6E
z6?^-P<z9_v*~GP4-=O^JBsnu_f|^}zm>u@~C3v=MzV;ENN|GGH?mYVy*93>Pe|!bx
zu*3^kz%0(G5!PB-1yPRgFI)H;of%jlAjg*C0WY!dF+VV;(oi)3ZfKqYv61X;q*9WE
z+!C4i=EJ~s<%M``*X6xeR@JJ>?q|PlQ{^Nt(}L3y%*W1r5>T?&SiD37WF&B@sKSdP
z9FazutlV`f6|PgTz|4ZS1qLvReTtas;SrPi{EBE5VSl?HSgZ_8Al+TV;ox&sZ)4uE
zNQGa*nu!D~6VmW_LhZ6lvkT(xvT4vdct8j)1Jg=UeH>iUxRN^BvOQZ9r{+wX%Rt|M
zHEVMvpUBf)8bn#+32v5Q9>Q@cJbSt)p!*EI8_Y|arv!{H+ZM6P^t5tB5nAK#4i2%i
zQ!%uL@8latQ$2IGl;x)GB-egc@$1v}<SGfyrOYtiMP#Yyr>3${vJ~}qr?0O3mN?A+
zrIXSSZMu%lSkXMTlzj=6OCZY89f`~nmW_xh;0L726Tn7NDbp3Kww^No!ekg*lVQrr
z#$<RVWau43*+^hJb#N~)2W-Kd@{rLtA^@E>-JCE^X=z<4FE1wjj(rJ`_u9!h2+<ND
zReSmg6R?P5LjUB5Bbr)Cv@P0ZXz@`egSv5R7&;cy``3`fDA8HRNTsWVatZ5FfPj=d
zVBM&0IFG2D7bS+4rPbr1%%g~SP;qP?cSLTXgm?GL?r#{F&W%m2nClDA0$o@p$23y%
zi6Pb-LfPG5wZ17oJYOSCr`<6d<jqS8d8DmK9h|!cf{=lta2@zh(#tiDc=^U-n!*7v
z$OHL<^;GaVjSmYvu^=!x5J#-=h92?~GdjJ3>Vs8wJmF@Ya@`Cx;@WH46Jd8o<o)Km
zt$*HHf7dcYC{AGiVf`H!dmF2D#G(R{pYRR;0D4bo1j=pgsez9kS~SF2L_IGtdGc|%
z#IvStyk;}Y4h50|kmrDs#!QFuEZDT`^uq_Tb;pGMk<<xL^{df>(ei3IsOhv1SMp+_
ziq9y-9!Q2nvvM{%G5<xz%U|qj@a#q>w4!xHsVdA{xpV9BPM;MPjAo79vLN%$vyRS2
z#Rj>v&>)dZ%}Rq-I*yBoE6N*Fei+NVv}*Py(AQRPUz^$lT5l@tUOOY#u4haq!ZtHz
zUppb!E@v_X1ZOGt+7WH{UJuCT-oEl#U%0>5v+3YmNH|T7_xjLraxVNy$WQL|_un}e
zzLJmjt{;7QzwzkIyKXW2ext=>g^bXta&v@o8**)abMxBFoawG+=j=vbw+GVf?%;@x
z%}DWkq3#?GkA!E1&{Pk9n*J%3+L`>+4>U>3t+(KMrqyoEv-z`bu*57Y7CQ6~4Oc!`
z)o|-+wquG+rbZ!6=4HDrQznZ750t-waMmGHBCqe-rps)r=3i_mx8z_S&)1w(9O&<S
zM~Gff0^Gc<s0okAZNm#8Oc`A)=I^TANZt47WzWO|%}8d%x<9bE;Sn%$M^3lka$9$e
z-n2y^-<o!Pabc!bk<&=%d-SwtCUvsR(s$qQ!O*@bH|?i(sekGH7HPsKgh8V6K(_6W
z@`7ZEL%l9w^I7F_sYTGNtgz^9vos_xrE_1i&(+znET!$nk!ljEp&{Eai@&7S#Ju-*
zRVy{QV$)Qd*U|!A@ZW=(NztPc-(}eByYrPp=A_%#*R_al564fYvYbS5-O>}8)iu-k
zct~Gia<)|(Sm~Vf3gt7mL*mlXMCh1_1O9sCzKD8?eRX8LPWJvQuTu>XPN0p6wkUzi
zDXR;kQscmQHQ|t@rL3U|4_h%kVz|qXiAO;0H#tt=jD$w5rKbPA4XZ5ZD&+8NCz=hX
ztd%E*`U3t^=R9;(t&xqwoZOeD&+r6hK*8X6N{VS5cbo{A9%N*sLX*2X_IEDOi+6a=
zY;RStNY9GH!J~2*=jID7asbL9Y@k=11SZ>yJh#p<@-HVVG4N{@_%e2wBDX%tFSP}R
zaK7tHdL!}0Q5HCV^WYY4$ZRYkwPQQ*WN@xy`n-cL-`H=B_!&fZkHmrK%~s49;V_;I
zdbuq8yPpCydel#xU2ntkcgZOkp4oG~W#reGVyQ&NV1)8`-GlRSPo|6{-Jh|pCZXQv
z$~%7Jx%Lis(B1UD742qGcJsV8kDwxm@cxBf9vlM$t?q~yQGD|s^m8Dp&>r<|q25mB
zon#M*Qhmn&E`tkUKRJJ=S8YDw!I?LRrKX>p2j||2EH-(t8|qnwvA5c+Rp#6fyA<WS
z^7A7{U?tMNtBfDuKO&O@a}`*NP3UwgK;*cumtOW=xxmsFAcgmQ{h<jYI?7)9NVu}(
ziIVNUk6&56{d2;3S%B}<y%2+VvF@zt!ya)dViwxa<X}3H)@Db<yq%F(?&VTswuHF}
zhzBb35{&qppo@*nolAyg+2-tm!E!&e^RM}1(Ff1}aIs@KMh^TP8jYcKu!T7@oflFI
zsIQt$hyd8}%xv7;vo*PgM*^W-YywOF?<_t11M(2dZFQi?01C<_6Z;LG@&+RQ6?rh~
z&4n6t{r1}`0Zi-^m83|0jjSCiywt54jJn=+tFJ`2P6<JX$e+s1!sO|TSfMAlFQe~p
z4l`Z~dYLbo(?x_dFD(*|6}gv9eY${``M4aJ2ev4#`87SVPkJQYhTDnNSjeqm60`^C
z$5{@Ac+f0B=cau;Ge3m#d*;YYWNK)peuNx*7}T|8zpMiVYmN{JTDT*Qal8(rJEL7-
zN1RRq^N->m&GH@*GL^jn?uQ@y={*u!mv%<!1uCq(&~>s4yK;B>t&a`FmH4p-_7~Pj
z)4=5u2+{qM_Q7N?RuPA~fj<-$yhtthd97h>ArX$<lWT0cPB6uXDzV_xzOpr8{vWd7
z`9HVdoLcaPK8R8at{nN~J71uAq5LL3&HT-8eW|HlZqTl$lRo2wn9^aHA$Z@WM79L2
z5V$?}ToxY4Wjl0?+n&~lx!t3rR?E}alVy}=f6FFgE@mC*i7{hp+r;mkLAcnIm6@Zd
z{RSR)wPK>=1>$h{1Sts3FW>h#<I#y4<+VOCG^d*wQm^g6oShii=as1w+q39$r9@Fh
z;`3-lQ_bYU@oSFCiF^9Eq)eSYe9l&ZDWZK{Ho#lgo*&{@{D|>ILg^e&N1e6$6`K?W
zX~=x?(z9@<&7Mx;uTebcMvt>>TE1bN#X73TKYzp*327()gvBa=K`jb?Bw6zs8gqlC
zK>R}@IE9p#{m$|8Oq0Gj{C$&t?dhhzmy1+H^`jdpuiOeobIcwRh1TKJ8Pmz=S6s%k
zFVP!ZaG&u{mEg9wIOF|cG3fk~%PDE94U%Wt;0qJY?a>T$Cfap-i~pemBTZparDNtJ
z`z2Aq8L>Db-eE*KE}lq*jBBia{=GN=;2npo?<9}&$mrD7#a9KXzfzqu|324N#x7i!
znN>UMqpqFQWi^)e{4lLYbn403KaPbM)Vv}(YeBp_a3C@de;fWu)O>p430nn<-ASP^
z89NjD5Q5z!&71;V{mkl-;Mk<zCaulEFTZ5IsMUE)oam0FDXiiBbzP(P2G@^hiL>xY
zrHE&!k%1jJH@Dwygaq!ywHOPjvGH&4%I{|Ae8j|97#Pjyf62g%1<(-bP~Hr38OT75
zrU7Y^_(&>yAPS;|7nT3+F;D>b;z#6KYnLa19n#880s}muI(vs7XsYqx97~Z(su3%E
z*3KWeJ-OkW5zc^HyHlD3PKHh01FzDvt?LEO<X}dcz6{K?%)YP=vhv6)GDDw!?#YRL
zI=JSymr}KMB4!_lq{TnfftRbh4%{xG5G13KUL%DAzqv|=G%5d0qXBA`zM^lHv|yEd
zvsZ~2Dd$=-Y#%smy1+GgyxwrUv^oCg2TH7&O9X313{vu{!EAt45cN8o2JSuO3AMsx
zrFqsqfrB5*>_%H;iS;5I34TXbp0UuT)4;c0#X-I_3BJ1SF5w0o`u1?@uDfD9sFC9L
zOjvh;l|DQHWBP}36J9+m+dTh6I|$<`BUrguq>av?DNDM#V;sCf-HR$p^R!hr9(?Jh
zQa#B}(IQ8qpJb{#7FH_(WePF&+vH1Z8nW9Ok7?(7gcgVeB^q20c8A&Ltb<*}Iw(U2
zAPCQEvdNB0zkk!NQW<@;?%c%gikBQu0_}#q5NVb{vBGT<k>t=VJZ8Qjq=eGf>YVc?
z5knM5WLIOeW*V^*0Dhg4Dz}fz9M7gPDwvxWuUCQLgk7iV+hH2m3c}5GYz9mp>~~zV
zH0~TCXZ{al&G5_Io9<_{EHV!$NnD>Fvrp4(Nc63~ieQWs#(FWMVHuO^5?%S_jJfLN
zrptesc?v6|_iEvGNPCU7&b`f=>+$I(sHO20|E-WWU$9foeSU^e80dFK&`q}Y=NUb%
zw6(-SWHR;o4J&H$jl`zEl9!A|q5g7fMUW0}a+;C~J+A*V^<w64(iHfO=*2Ojq+e>r
zicr*c2(X-Bx~w(aaeETWpox|Tj3~Alb~`-X$y%c*NSFCns0M)rQ~};ck_B}1!%;Nd
zf>==h8=XF(QRbr)k3qKQJev|)9J=82ZGY(fSAHTQwYglIwAUIs5NuNJyPfx>kSe|9
zNl!Qz$)@9(`;*|ZcU#}~bnvv8*!w39p79JzI@r0xa_ng=Sv9fYM<R>Zb{bv;C%0j`
z`W!$pEI@~|vZuqmvmZ%axhK)^mH!Kc7w;Du7f6WokYn!T`bly8s$A4Pw}v}3x0wY`
zz?qA*uk->jBu)WVqVjOYib#{tnQok|5wPhZ6_wfs4*jm0D13CibIB~ZtS!Fe4mSq8
zaHp=*A=?6a*hPefK%dHN4}W~I2{ZXGT22VAkbX6!)9%d|+(8j(`ZJ!F8}D!&_%<P0
zyP%t%&G5KWMnN^XdDm+6tBavtv6dOw1XYisbg#}S6f`U@xRGfOL0nIGM4C=W_nm<E
z>wbQZVyLKBB1G1dI7#&t(OUatgJ>j@BJkxNB5NW#cD0Z@T9<%~7Anj2-<{7u&hQKD
z6nuuHO$bg3=$$N<WEp)_Qg8-%lQo<s`43ZDgSPD1p!~z-vGH&-2x&z`Zi@1EeJ1IX
zy!5NR*55KKg0(svN$GFX^qFG{yM`rX6r|>AWzd5E^o6q59GN&VkFcCebNXW4h4}HV
zEJwAVer)R>cQ{&+Nc=f>9<UlX+LjF53;sAmW!KIy(AvClBxB9om=TGGT*rOMZZR&b
z!S440XGI`wKrcv)i;p3I1aKR%$2*^Q?B$q}^Ar#gKU9r+MA*BpJA%{YbwRsZ<VByw
z@{`0m1@=Yq<5vUd5!WPx1zX6CLCnhZSDY+JoE6ad?ia0dnoN832^vA%G<uO_T9DTo
z$EJ)F%?OXQPb8znu!K`J#4mB{AEPzmA9hcw3Vg(`4vta4C!kX|-0n5y_1Q2Jy0r;B
zluLC((=L*F6L-Ww(6h25vJ;Ci%;$dw{Sz0Kk6@496l>0it<RkB1qg`3LC11*dG+-2
zhjCpyVr7JNjbN^)>iiVu$DYpE&{`Clz~}XH-)ZI=tnrCuUtGw<by2-g44hp4Lc>Tf
zaOy!3O?;Q9VH>~O^aQhD$G<F@+wt-5#r=LSPHF`G2;u_LAA71%C|;;qM;46RV}ga2
zTg6sKwXR6V(}dt<hauDBEKr1JB!)wx9jEgjz{3zgRr-TuJ%H->-)_3iaQf`OlC_Q%
zvWwg2p%33};fhou4`u#ofg=S7EQ>2o;;{N7r^wubU<qa%)$kIFG1qI?d)&nQXxdx}
zLq+VEXw~}zOu!{|&KFDFSYQU&Pk2OL)d@`Xyh97Sh1dRgab=s~PTWuzislw#3Yd6o
zA4vRG+A0mxlGkqKwL9ZlDB=<I@3sc^lGK9e*(8jjLlPC1Nwjf8t)^H!vMZOLq%Y9M
z9=MPidsBf*jL5u)md-VVup`3x0SiOnt!$1X^@iX9xER9`E1g*E0Fa>coO`^9=lpwo
z>5XxZq}fk4Sbxvn=a{df7Sd9<E9tuMR~lN;Vn!+qo5wqYL?M#n^P(i=u$Gnzy}>68
z?(tK32HO|{8H`g7hgz_OoBijj`&((aRZ#M!IXvGB$S<<*pU;d)ZZP^-o@Q1O!MDRm
zN8-BAbicT_;EO|FeZ?`Gdpo&w{d$`_05;-5>qv+PJLo&b=^BEw<O#f`S$0&R?H6^J
zc|k!nG$m2$#U_rXEu7fMJPm;@ksQSNjTyazI(%5@jo~<OK(=V%-d2j0Q@eAhgy=H{
zq@1s(jld5y$Z?3BnxkkI4c%nPudj_<7+cLxhJ{wcRU3}Ulb&MxU_P&buh>Kz=iR_}
znEQge@zuq*%6{|gcX5u2KzwCQ*nSfe0Yw5-bHUKYia>iMcbzbV&cZV6=l=Ss&(|w5
z?4%rf9Rb>};XzYYu9ydtwi&;`L<XK0y^Hy#&3+NGEh=Sc5dx$X!d;u`H7$(#s>3Ca
zv}T5Dh1I<SmEpoO&?-$BtBJ)}(8_d_kcLFMO0bA<+eIerwgpRYx`<b2cJ%5Qw$aYj
zom5Y;o}B4fUdT!HBa6k)z3F$Sk;`}8WtDdr5iHmlOkHpB(^pltORfqNVXpsflI+m_
zG?UtiNk&`8H=5acLO#+bQu?IReU%Z7OD%CIPjd&$Vs=U%Kr`3tGAhzgVqlA3F4T#`
z4Q4qt)G?t69D)rsA@EBBtM41$Nmw&sV=`=2c%`)tdYJEwIT&8p7ocF_fu-&Z`zjjU
zO_`q+v|$0POH1w7P~9eRdi7jRPOX`l8cgLD|2iNG3xKKYJkIHYYwUa??qfC9xAfIu
zS6)3q%5Kbs4sZXU4;0+0S3b{4tw?$qSjD^;=v&wAlz8`mpMi#I>%MCtp8KR)^@nN&
zDQ+DVRU1N_1P6sq!t5Cx)f0Yh7#<S&H<z4pgUmmZ;_nLh2ZIyDSDLw|UC2xTk0ctg
zF1aBXb(BsEF75_7|EA^Sm|onkobA9SxEM2s1RnmoeVzQ#jU;F=>HldydHz!pc<(xP
zIh;o~GdR6{In&&UGtChmyU76<e9U)B<W#k`k_le}>#jI>TPM}&$E_RFOy1~8R?jaq
zSzX;QgV;38vtiw#=`Tt}&-vM5`{^w{{PD`@JPU3CrBB@2rSm9Xy4Bd>71cRjlRcc2
zYZeLW=UlYLLCVzs&+o;;@IWQccRF%E^@7UGY2;ya(UlZ%zENAs%jU$*8Y9i0kPod9
z-JiH*B-5%ozBsikZdU=P6PBy5QLDBSd--N%KuD0?<wuy(vkboxFEkBLJqB_KT@!R{
z`;!c}op?9y>9t=vFE9|*ojII(O>4580+mImNfFi9`EOPUaz3ir>{E^H4*i?MPK$Mf
zj#M<b?o5tbm+Rm@MkIGThh|h{v5@XW=$YshCx#M?vOJ+_S3`~E+5b}{mmVBjPMq!t
zK*F3$v&6wJNl1QiM!dO#{YTKJmrppIY{Cnbp9!-P1!^70mwU3iPS(zli10^V(v7?r
zF<B2r(3B!*)%Lr<VdI)?=v)VOA&_8x{oMQaF<NC70sT<ecvzk|G0bBF!G%TwvF!1+
zBgw!p54>592TE65#oa4Rzt{^pMg9_2U)=g#6^RB3UPK*~CzQBWcoQXj5&MPU_g<W!
z0l@&N!&Bv6pS1K%XLrTrv1GNuoQV;Z%Qx8h_m7G7Uf@|GE8Zi8AVHS*(K<X|*kTV)
zX=d)6gGy!|7>A#$<<pRe*tT8gcaa(R2Pn<zDR~ht!3~BnGWaV82C+yy7+~rHqrh+=
zG~OfuVL$HdhqQR+ixqFZ*zw4%7h7bR`(ktbwte+tFJFDJQ9#b`Dzs4}wR7T2u~~9A
zm#<bYxsftbeWX=%P}4>G_>$DcuI{2iKS@NkH{77GFB49KH;v?~R>*dP1&Nr)6;+8w
z-E1+`oc)-X7{<;z#RrI4CYH}|!5vl&e<`HpFYU;4<`rn{WgeHfXpa0POCxmUur!6_
zM3|?t@I;W5V2b1vN4eaiK{N^qxHCo_L#(B1n#vWHD#A4MjR6kiaKS$xdC{#Ae&ziz
zps}#Sh8yW}^%64NwT&ZZ4Jg2EgHX#`ycf=yNpX4#;_pEo0sr{OZv!u-)3kqssZtow
z-LqX1KBfe`lZO6b`y4Y`y0Qsn7z8w0`w_98gEte$8=uRXl_)9SHV*W8D~3Fc&fHA3
zjch%i)Co;SJhgD{AC}}}%J|`%<^u^eJbwlI<;&7fZXs#vYC1@I@Uk;lQBokg7x}u5
z1&LT=Z~^0-JsH~!&9f$@NnHhcd{=>6*=UZ%+8agn4MIZ+yQQ}@>2P{C<}Co+m_3#G
zX~dG;{E-}5(P07hgL=#KHeqzL_L@8+%&(u`2Y!b|(}Y!-RbzoNG+kWv{dljE$I_no
zAF(GK8@_D`4i>1{0-G>5DEJAgr|xz0nxc9EJ`~hq%>&P#BBn@jB5^6#zw}K_2`C!r
z%Fv*$h%5%l53I=t*7O6^cX%fQE0zbUnVcV7HIwE&9LGw?snuJAwD<-J^H1wQcaqN0
z*87*}&5_zmE0TbR+r6kVC{4|N9^2JZr6uM#6s-o|R7@nSI7&^BZC5h80}GDA@x%y_
zTK8nIHvu7sTSm-JVP=m!*s~?GV=*WZ7E2mQ@y5xkO?YGwUGgb<?VYJ(tBV*jgq9qp
zE)tC(6rP7)wiJn+XSPJ}lX#7eMZ~n$VhlVjA6|1rNYrPrL}m3<yvQqzD=7_~fGnQl
zGmM3Ee3_-#S9$TJV?KVRB2M0i0~7YR^-p~{z!{I@NUhExO<r|e#I2NPI>;eVp$*@O
zVUSHzpaF8BlJ~j!mavv;POsK0?qNHfvCWD**KWy9KxzyWe_&M0VZ<YQFp>g(_IgMn
zFe^3C%ngl`cRVLYEL$*%;q2+gk6Us8pXG7;KRnqf89|W9t+Ks!Xi>v2N9GF9B8=jk
zeWcXz%{cj%YZG8aCx+mS9t=wKkQ}%8`)TfZ43K&Xy4b?I7S4bPA>zT07jCajxk5P&
zf~np6M9~rhIH*H9YCv+>sh@aW{b?R;Hxi|&0-hpPI@@uzjxBvUc(2@n2)aZQdE}9&
z{L>4T<QbuZDid)Xc`(wqu1Mx$v*R9>b#Zoly!O3^_)nXtNbh+su)b7=cR2DqZb2Tm
z`;*7%!FbWUvP$;nxaJ8HN(6eQ{lwW8z6xlu7ElqQf!XiIN(kdXF-FHbHHRhay348Z
zgP6ITqmKZyO?*DSUeIYBpL(BmMP{-`h&~K{OyWLR-seZmOH0W;H8Ot>QH}oL(b>TX
zWvUV@Q_;s2DG^NRqb)Dwxde`g=(Y0QBUl3i;e7rg!kFV<Sjm7te@LJ)p3ACA#o93}
zvEf#<a(BASt9?Rx!(sD3TdlK#2#tYN+AtcRo2e^b(2*X~wK%~7v=X5?+cq@TZI~l3
zJj5lp+BiZ<qV*L9kt-AGrf=I2-=BSV#BB!3c<MGnDGmb5=J`KITgEH<sC#ybi0k^Q
z=NnEs<a0#`=&>EQq+vO+f`<4$0Qnyw2YCNv2t>nA&#5LcjAR~*{VDG5hOHa%WAv)Z
zmhijgN?3}Iq08O%Uq`zt2<uo{s&**Lczn@Ye9@4h``D324k4!8ZR`hJ*3++-W?aGB
zIXTb{R*_xiw2a_~O=Pp&>DupL8^zD;$IpCum0Tj?v%)j0Yyq=sP%|PZqM8vo6(01<
zinyfn7CBsnDD>TdHct$TfBQ8fDRyo11p@(8#4U`Q9K=n&K|Su0#rAd}MlrO{46VA_
zn4qF^5$*<VQ+SSfRTJ%cL|iiywXcGJkw>8P2ZrSpydSxWas)03%V1Mw|FHFiu~|<|
zaXIY@T#fL%;c;|g(~RfVmSLIsqb)Ba9GrKP2JD#|6iZ>OQ<4uz+Fv_ma#5Ek!oOjh
zeE8@)*`uy~`&Mb|N5*Zp<5n@;iCL5(Q+!zRFC7(zTgLka{JX77@A$k!xZpds*7zxO
zHI}Gg&z9kYpJTT6P3RZ-bWj?XKh!}1AcmP=i6uq;*K3UwhJh}GO&@~))3rOkEXna@
zk&pjjJ&p$IakNl_!>ZFIN*utRg-<`deFYL2UZ{)=O9GFPk3i;^3DP5<{t?b~+h0D2
z-sJa*-*xAEzDs!$NBl1E36EI|X6|is)k}h4$$ci7@tUww_6$stISoPyuUrl(q+^xB
z@XwJs`KIj)*}+6ueD{Jb(94&Ct$F*!mwU44MO7;y?O36C8?Km*0I@XZ=IEOD4~p<v
zze^PiK)ZT&-=%c6nTjI~6Cvoz45|6pow><IF{<0@Dh@VKA5!s^$yC{&x$#-M!W~dG
zWVHBzFmi3(o8GO!LO#R2gg{Ut-6iZ?`lHQ#d_NjGg$WZ*IN)HxOE7vf-an}xr&dWF
z#gvOgr{luyNQ=c{v-_bvnr1|(asnN5>ICGNRb&=buEiCIXvLNwA=KxdBI2Yw@~=&*
z?VzS=`lpw+#pGiwg)n<keFNoV2^s8cC~11gyz`|ZMVLbe*e6ReWaUh&?rI_vq6}U+
zyV}ud1ckP?KkQNv`BLYG17xj&gWC!1N_si}tVvrXq+A`7J<13vq}j1!qTWUS^0+YD
zb6@|klHmNyzyvv?la?~6^;<dM1D`&}PuFjHB=RtXwB|)@Kq{8Ad~v&7#wpZUCv|)B
zX}2Y;v>DzCuCMse-))W2GP*s1^I@<KoR3<@#75mdI^aj$FeC|8S!`=AiNAHY^Ow;x
zeGWL(<<S09$K?Dk61~jq2O$ybh#3Wv^WT00$G(ex+wGXMFSrXHM1N{Q@j8bL`}%eh
zTUJ}cbDhDQ+a_ZbrqDfahCDgbUp^k@gw0E&`Ah;6n>nm<CIS5pC;vTqCd{to(AEJZ
zj^}~Yj7lr-DHIBp8|DSZinWK|PdF7;N>$61!&6gRZU)dVe6<anV{!_RoXvEo&b<@1
z9WiT8@|rbG2LkhnQHJ?XxgaV2VrAp#RXM9TldIY%b#8wDFiyi)`_nXxh+I$hpV}%u
zkY;YBkA2W2(45o-B5;GrF|hL?%Mtb08!G00XIGfz_Dpei$U>|<RcrRAGsXD=m6y5#
z`DIbr{8)|RH52DG<y#m4ny~iOwB~q(+|^McKw98lc((gVQd6{ZV>8{ciE?CgjA(i!
zQkIhgqxZ`EqE2kjRbqRSWhArR_GY#tBLpcD+tvL)kk~#i1BdBa%n>mJ*E9c({NjeB
zb$8)c(z>cTOb(MYakFDU|JozfMW+#TxT7Q>ob<1_DY*tw#W6sk-TNH8NWIBONp1Z7
zw6Da>$3b<e@8!H^mBp|5)wz99>!|G)K^9N$Sab7IWH)lZ^j!Z;?C7<BkNXSrWfd3Q
z8+pV14;>a1_U?Z4MB?QwMVu3d$ZCZ~LXHwz<97Pz`qv+`$d>~31|+}j10$0xsKza+
z%p-7Be5mGMR~h=+ZI_RI|M7W5GfuBfm<gu}W0pTN@lFDSvu0fe>{YORx#N1UEs@c!
zvL*+lJ(AX>7c)mzn}5q%06@Vrt#9oNp8{QAXE1>-yygI1DAkQ-@c-Qn;nt!7&dtw(
zF1Pjs020hTQ2JuXY+-TC=6<%TOo$~)SJ^*}l}Ra}j!p~|hg!r`)N?kItFtCNHFkMD
zv%mB}Z36#$z3SJRrv5DhD+j;m4!-ZT@Pqx6lj#2l%iH-omY4tEVR=^^EpKXP>hLyZ
zjO!DjfqN<MEl1~-9!r~02<t%<k+Wpm)H8myBEwh;bu2J9h5=K8$SCCqO~+xx{Ms|L
z!ffV9m1+7WtzCDonXFAq459eu>XDMyM6$EufSxV5P)QQ+qXazimZq9Q;R#b;5seP0
z;^M*z;~au(Jkp06EMC)aa7=8p$a#MNo0)j6?YpjsZQ*IM(6aIw4P7R3z%6jrBmsyl
zf;Vz41a_EID^<2eBwaJV3v9cz-cT<6^ptso0pHCc4n(12A$g-p?|{cWVOiO|aqxJl
z@jC+wBz4bafl1RSHh>2ls|Y4uECZ)d$v_m(_*W({WEGZ#X;d6#8>WBIkdY?&{Vuz}
zTNEHq{G0Fa!LS@afcu@89?YY{9G9hd4;uart1^-$f|N*oxLue`l486z3xjb0o-A3u
z?&*|9>(uq0#AUr`1qfw2t1a_`5{HL?@YN#Mh1McJ1b=2jlmzqfj#4u%uvqi3pfpz<
zm6<RovE;S8glmUWitL$<(DsCoB_A`d{`jd$%|mmaV{Q$BwksM-|9^vFDZY>x@(?`+
z2@|pmi#$!{sJGJ)RJ8~JtHYK$yYL&qV}Y#FJfKI(zEvDjy*2^jS}@pH-wH$KiJglp
z-g9Gy#S)7d_iQ+0pjeJ+LMbLuPmB4Cqj;3^TqMVSNRXd(WMwEY+txz7Z**V|50fY<
zg|zp=<aFbY+`0BFue})8iaZ>yBn3kYEXreE<Mv<b3HAW}49&!Z9%lwE&C4#!?J(y)
zYbD2KT$hg2%oGYyA<Uv|a3{0EifIGy8ZMY11+k&bnGX`JT`)5<t5(1%3ms^QjwMa5
zZcNsL8InUb9v>Y7FA}ipd>{B5c^0)Ib>Z_#Hn}XfaW<-qs3SKpsKm)4pAPq_Qf2Mh
z8(G3e(wQAVs5Qv`Br>S*ApjiEf{D^dpSe|RLqJJ*JdWp4q}<yP)&i!^oNWH51<f=y
zOed=et4Ebm9T&{@|MVb;hjBdng+?{z>_lAD0yE2zc3f9LqL@NU9a+K?0Oa1j>9ZCl
ztalCjTO3F;LqPJq6kCpsK0Ye006w~d|BgYkajD@bBzXwXTW_CQ_VY6#Nf(svD9HQJ
z^qlyvvuHsU@vLbFo@<$&@u!Z+0|1bs<3t(zL#?mQv!=t<5iqD>h*<TuQ=pQ7GUn+B
zY=HXkoaDBClK6@^00(2-n1^h#3arpDAF)E+IU!0#(p;c$`7-*r!?Z@)Y38{l8&O2p
zwPQfrwSx89y8R`+2ssg#6H*-cLC*5!m02+^DLiokA#kj<R4jQqxUo4AdnCh26oF>W
z<@H#XaUwRUvpX_-HZ6~icvRJHX%&&gS73|hoF;+MLIYZWwXily^AQl$o@AJPob1Re
zJ7)Q?Bqk|y57&yXmHEO!V>gtzY=sC4y^M0nt&G=!r<A$KC9xA_&y$2vr!=khX()m)
z5%VS*r>L(}Jp|^(ajnPo;<4glS~9RZ&9ZfMxQUx4NRJ*O%d>0GkgOf#Py>kd0lnTM
zZr2huI95Hoa7phP+<O*o)FOnXtus7M4n~4$53#qGy?vw^0}P@)OmkZ=^JSFAXAINa
zW@hSY)Dhnu2`p``R;RdXl_NXKq{N)-x*<J;AZb5kVBz-L@oZyxy<!Ru=A*RzdV~iW
znR}w$DjZ;0bYAQT+vOOT1W8#^**rc5)E$IC*&<`sgEfTEMTW~VU6-<$aQ$$s*ygD$
zBPy!;#5-G)wcE)dK0*{v@I24UH7Nv{>A9vElc@x{+uvb$ma5m`jzF0@_~`Q5wP=;K
zJpX~OdJ6nRaeTN8NWsDp%u%<TWtMVXqm*UNv=NsXd9QM``f$cm%w4QV7xFV4<r{e%
z+@Z4?2LtOrn)kj3iD5@idU~CV^j<yi8#%bCwWfrHp+&L@GPFNYBA93ttUU7}{RES3
zxQUOAvfAc)V0xuC2!wX~RdeVf;Ry|MOy3$`t~<Pt9UgB8L8j<%nuF33wGs+;XRadz
zP`4;)B8nYsxLKMwleE8`;@eHtlH&`BRUa_)CpZdJDPkTE4XxF^8-4)JvuuL85^l7F
zOY|}c48J%*Na|{!AG3M(CroJ#v8+xgw=zt-mV9+2d4kM|c{<(@A~ac4Yxg~VsPxIi
ze9iBz8r7_PyfNNG6mg?wZc`+t_*~$mlP}85MO}l**XrgX088^R+uXJZjm@1+1$04o
zqjOwZbC}XzgA)>>)JSujHjzkS+;=$eyeO2_fnCy)_b|<D*1j$|jt)F81$mX-kSE@+
zHYU-+IM4iTY;Lv@>K6L`i7UYu=Js3*5|(82>ykWM#yKj^QQTXTwRmf?>T^uEWPW+9
z4a<7glvgz+dfu#<k;WCpd~<YI7KHg#tiK)8XuX<s)Ty<Ntc>_e%XH)qHo3(*3+0MK
zRy;cpqPfLxv9gboA7mq26K4w}T&pMJAlXo~P2{%5x~G?vI=#%8ihI%`s;0rAgiN2!
z*}ZcT-IHny?U*!F^I3UT>CmJ2qdtk7FlU?4WSiv%dk|ST)iXJa$F(&$n~j0I1lB;l
zk%2^-Y<h;-JlQAm1v$b9|3z#j2al~e#`T+UklElCcise~8oL(r?c&n7!`-DNAb_jD
zA<f_8q!d9S@yzr&aN_{)W*+-=lPx49&)(uurjH-GE&tpX{Yaol-)FfxSLyUcn&0Fn
zxwAfKMD@&Om(M?;@Is8(-Nyc&vvu${z9=4VpUCE4$ddBoRZ16l!p}VWpijb@)0gWK
z<kh{6S)<>)at^eRjWPLAFAT40;><8o*#`#D-LCjVk(JKUOqS9pK+hWLHyQemsb|{i
zBUQN;ae!~t-1iLY7@1!j2*>5zk?+tlge)w>A?K6q<{Xd1FU2f(8TgHd?6~=mHZ>nl
z)?5z2Ml2ag?#MK`G!ixrPXu%NHvOU4F#~aI@qHe6s*0gH5dR;(m`z*K_HHhYwNJ8F
z4OLbl=e;~oj}R8pRI5SUl9x6nNB{U;#_)>r&F2l9+?j3?hY&Y7feV+f-VtXtn-5z4
zhL6~7=s|BwpWg5+@5I4}cMN?M6X~#K?X8JHGG$l9lv`{Z)+p6;#fV2k*PvCr`d#}$
zIl*%Ap-W*r(0!Aw+RI51d)4&16Eodf?hrXEuL6VV88QYvZ`|bC;4i(W9(uMb=j^L%
zNh!7o5=?E=U`z{(+#0o=VRb)sND!r?nh=lb%iX7~Ms39;;c9cM7^mJ6hwZ^TXp^-w
zXie;0cbszyMX=EyI?b|kZ*R%lJ!3v1DTPh)pf^ccWxoz2Bl%<-c#Xh5_9MhUvKI@f
zmbbUR;YGV0NQd!8w6QQ6ve*WWgqPjUmKvN+)Bc`qyNvb1D6=F6b)aZ{z&)C#I*^Hb
z_M^^?a8<DwLdI#pbvk??C8tFqDiudi2Hvy;@-SxUv}~;9G+*E}Z{^lOV!o{bcx=cZ
zuk1Eja;exSKe=K$%|r@6ks>DZ-Zy6tq%!V7d4#$Kf1_=QcU5$aRq<q7BOnX<w1sbC
zIyanVjMQk+XOWtlMna%1l_F5vE+m@XQXNCTrE9Lk5phQ9_IuRg_xN%LhG|X!d7)_V
zqjIwYC$9H+Fb8Stc>;rw!t?eZooBW_g7|rYCGtm7uD(I`s`Zmu5?SWEp3{0owqEtO
zKEu}OscVJJ63K?R80qGYxz1r_?SUkdCV3K95T%?tv!v4&G7a!&>4NZrk2^Qyh6vCp
zf%Y5c9kIdAYDtu|B>bsUzHmc4`Z_NQZ-zSwZMLt+%rCX6e==G|g|N<H$;?O}zwj~M
z6*m>rTth;2NlP_1OJ-8MjCj(Xu)iA6Bg<cy%>*EGEMm|yN6NLYN!~%H`>lLrpUXp>
zxHSz57vxu2v)P<%|K|zWoHDuw+t`DkBxH{0roglnd3K&SiO!k|HV;&CxQOR-33=@*
z)MV3BnPv98biwfXloc;VaSH^+p3JOhnPx>{)%7o?HdX`JZ{U;PQA7gp_1<}Y06vU(
zn8Z~h#8}_D47E-IQ=2v)>EX<vszg7#Vookb{?;LSwBj<Otztk%3Ch!@qV`-0R|uz{
zAqO+3Za!elXBU=G;UH^O2Rg1Evx4ghxjP3YQGpUYi0d9`9qIh6BO^Yg*;xAwG<k<O
zWLYGkC^9?kM)3g0hQ&xpP-&GR9zd%@Q?@UH+Iz9hmmeKUI77#>%n8+n^*^xd)k!FX
z0GQS1PjP|-HKdXA0U;#I<E}Ps*>kBNd1kC^!3(g2s_nDdMVM>XK6%QzGyR|{0^ciL
zb8}kQ3UQe<w`*g?6HaGLw5?l?T<JU@l>8W+B99%CRIdE4W*d6gUxZ^Xyp*~Ik(t0X
z1#IWFrF^U*Y6OYp88R+Ux$_H9bG_U->p`fx`PV}!Z4s?cD1C@$UZl6dpG}NG%(>Ja
zt_e5)pq%C=$q6ni(J`^CR#Hs_@a%!{rx=o#uUiQDO9dm1C6x%)kGsr+Pv>9_ws#X3
z-Bxe$LvkF)&afu(e8R$bfIkq3QfIyObiAWfYB7P7M>5mmqs>V<5NDJlwAVegJg0E|
zWPpUV?6BPr1vso#)I_jqB>RCm4QQ_VB%wLS6<jnpWCGi6Q5;uljBhJ^P8BlNapO=o
zJVH<j7Ox79K{Iu2Fb%HdeAvw$JWB_1%gWa+JxN=xD?oN2CDqwV_Bn81VmgA4_^L6>
zzhWHf6^Ze{&FDIft+25rZ7ddl)^#OSY^(CBNbIUCt|QlMpHnu%)`o8}XCEloKao0d
z<#RDFj#Su++({xIRE(5Xc34WSJF)<#J8KV5>nfO9JXJnyGW&aTuH^sEohzB1^Whfw
z;pX(i?YO~_A&z0?0bEwX|06g0r0=uOpvnH>SnLUg<;RXKe}<mDJz0O}?|6FY6zn_r
zV;`*lvu*u<8H3s<{`%lQx$B(Ev3!O^YSu()?DSp3Wm9ElVrR=F@-ji9sBV7Eh%)#G
zK?)OMF$A+WMT1E!EO@|DS_Koy-EWq9O-RaSx-yx4DLD9#de9W76@7}H3|V5VJZxhv
zE7E-q*`(^H?`!7e`V<X{S|G6ukY-agHQ~i$VAE}Xf#I(s82&V8-aa5Ig2wFsMJTB*
z^eP4Pl0@E`RPQ3UEjXlS9RfZ|n!U~jBwXNLOKRb^Sp}g21hIQD<zd-p07pQ$zX>SH
z>?<YF62f6h_HWd%Tckkt)OSKF_}z{Qj%*gS@ZY6N?8IPI$#%CR>=7q-Xl9h6W<(sQ
z#faY+b8%Kt%`VP2n?0V0;>qb0+~7W3o=L`d<u*%a)A>XWR~NTgx=JtP($VGCrE7ZW
z=H{jIdmZIiI7E#<$Xk&MSGO+wGEw8#sUNd+kg~U4CqpmII+sS2Co)SGN8W9fu8u-B
zi0vt`b-Gud$knB6ps1{)vURORt1<4_9%%p2uxh%QbFgshrA=E_*!_+*xxMyh%&OR%
z_aOr+X$0j^i9yfak#jd0j(K2Jy@eZco+!@)Gcx|<Nyc^sx<t`Q9ok-v_nIlhDarNG
z;>2)t-w|z?V<vYlUQu2%T@hf(b7DV6G&e6v64obX$C=6n%3e-MhM&+-h>Lm#Hp+yf
z634HGb{`V96nsVYu}Fsnat%*{xC8hAJj!XW;QUR?639q_N&YF~?qp6~Xk}7+{hdIs
z+aAi9E`;GbI@R7wIF-psHh$1y31q7^{q`!4+45qUYWY>wOdd~z1XcIyg%nBTy5u8=
z>J)D(erCqD=DXJOBt*^td+HvBflZHA{$?)e3nQfycWSqg(d#?QQwpgjZDtE*>+Qu9
zXXeCnm9Umru#R}J7(aF6$7wRd3dmp7sVKSR<VUm(L4=!+Sdd2yWzebj=>rBafB2^l
z2;)@(bp~^yu%}k-JJzsG6$D%dIcHgPKh{|YkiE?vMNfATW%&sg_Lo|$9+=JQ?`!f<
z|8k2;Bd(X&U?_2V`2tG_gNSK6FUc-4or=Yf@L_9}AuY%uL&R|e%lyNX!57T2!!B?^
z$#?oN<@=nuOW>w{^;g}6x}TD8H~mRBJ4#38i|fnKeBSQ^-LN`M2+*{Y5gTzMVI9VY
z_betx2P)oBC86$fg&Rfw{Fg~#2e2m1TeHcr_-DdnAOHMgd-LaKT={X?wOn!`#T{W4
z4yIV(!2Og+-ZBsw!ac^vU#2%f&m$()FRp)oyFL()(^8Wu(IyE#q_%$okS`R;E*L9f
zipOgMH@z-0--A7t>c)e`Tc^VtZ%ts<lh5DUGwr|f*5NG5D6%M>Fxp&*$m{YDc%|w2
zg!#CkV3~|V+s7lu02b-XjDKnhW`EBV^bJ0mub6^OsHLn>xxBaFpPGX7pKrBmWF`Ly
zKi#I@l;p@KZv$VZP6C98hCBwJKB8k#5Z!*lhU~RK2=vDP#9K&eKTMOYc2oG9TWuvs
z0szr{aZ&vGR@*TEqX`X)TCA@&nEKosh<DmmktHS^nzeI@*)RK&-&-?Q((|U7_cT=u
zOj!v-g7IFH0uy()>CLFd=~#8QfKe%QAR(;NS8$1OGq1=SSK!8CUO`Fti<+S#r1FA#
zLSYp}0;SV+q`zZ^vcQt)Pc9i|b4#~L-TZIyp9q{4Ut?1HMO0T4AS%R#_Ay*RB~PWI
z0A&?8*Y)uzZHv#F=ZSm}>)S*UT3)A>$B{*O!M5|j*cT%ZM+M4^xnD%M4e+a~QPmC}
zL<w2;dWX4-uNmu@>!%I0Cli(gPbS3K5vtI`QI_I$3bEQjtctf{nC$<kIV*KiCI@yY
zG2xIQ%@Dv*P=q-uHL|H%mx~X-{6gm!A#{F^L83o&3Uin&7w#Co7iFb5Z6zA%&JTj|
z_(;K0c?&vNo<0+AK}=-21^f*!1(kf(>WP|*Ys^NMuRc?0KF!&epE|2=)l&&Bee&gp
z4w=d~{>DSS?v(b!h9sJ33L;yvL{1}#HB*S*3M6tJMl|w{cAWn~hp|nfA5sZcvw3)k
z&$q!?PP?>WcI0Bdpc0js-vFYw6aUx3YO`;j?|dD_C$+EJv7~#wndG*Cz1?&~VIdI>
zk?%eVeH>ylX5)gu=*Oudi}y{?PwiM4vlTB|O7OX~3v9MXIH-*oMfwE7vNSYmU0aG1
z>b>@JQv%_@0_LKDb)=dkXb(>`@<n8~LsPy~M%oVqlcA+X>lh6DupEme*HAC%#kjuW
zgj;b$$xUj@_~a-De;J<lCY<>jq@ow6>2=`KrYY#)owUE7wJhoFNCs+U3Es<z5bEik
z{!+^ayU&?5$rh2AJb}?6m*8hDPwYOYR$gVMT&Q!>i?6gC<_XlUZ^dDUJCfo|Q#Knt
z*NUqkA?!#RF6{&9J7&=gw3Rx9c3&X2hnTG1F4@Vz-B7o^m*tudvUJOG)i!RyVpnu0
z^x-|EM@w3decm#c%}=)G**BE!Ve~vtOAl2avLq(0aaY;8Jr5}ub3lRuKTULG)sEgb
z^=+i)qxYTMHmHSFmfld~HB2^MKStZYB;XV-lsGcu_O`(Q0LS<mcQ0M4OIOCF+nyWS
zGNJYu-U!?Pnu(dmEXJ_liL_N$sO)gUoD@e>zu$V=Ov_6T<kA%*AvUdaqLZpylAhl=
zJ2KsVX4BwC@-3u^_wAhtynMGlaj8uXU#N0>=va#ff#2+Qf(A$jRXKn_P^VE{tdlZb
z=y;b*v-CbN1Twk2SWALs1K&0zW?0Pb-L{rQE&kZGaD7r=##Ly(8mNJz2h!4CNPVVV
zNCdz{^0o5rC~gr<{7I4?VqJQqJN;}1!m>ngW_nPGV%Op00D}V3Py}wZo^P4mQFy*{
zNX3^0qJ6wR(AeYZ%yjX<@{E9*#hF>8MY2XE%YLWr8Etzi+nyw}efqt&L)|itPULAd
zO_b8=@~hD!M_qq6Ik?_$RpgeIkE(NxpgJ=CPi`xt5dlwi@0}(c>-Rq^&eP=VaPPjv
z|Iu1GE5n90?N~Jz2?I_eDI(rc+$H|jkWU==6+=|>lOiX&a>3`Nq9<a^<`q<Si8)Nw
z|2CF5s~Vd#bAAiy6|UL?eL#%vu!{1sd#2CmaxAu}=hQwGxwj+~s7SQ2-N%K!8nqzy
z$qhU0ksSAUW*)6Ds6#z7Q`{b@Tg6R+aNn(7yN=`2W$(EOMxwb-xQRcN0{0$iAQJ9+
zks@N))2#2I^2J)aBDXm!<cVgu_+R~k&%((G3NYoHyR(l1Ue#TaBN(s%@0q7~a>I7M
z&Tr*F&2qs_da4xiP+%G5$Bi<|7dSb5Qbw8Bm6rTwUm(nqsrk?ADqmtw1DyR2@#MG8
zh^Zqb1&Vd{LULAFal2+*w6|i#zq6XoiIXjxJlT$kldW)LvK_y$nl86i(@Cu+3sU<$
zUHq?pL9v>6Q2JyweY5lt18RSP?>=<?vOF{AZyV3wzI1130?|jrlc?^Q;{lEj#MMbt
zAMkQ#CTg;YvOhQAXeT4Db4>gAK`mj`sf6(!Vd&m2O4-Xsz>s?!OdUYsHiVjWfJD&Q
znVYCR&d6JnVyB6$u{Hm^?|DwH>EKx8#!f4|jr5LG>E?{WC+)JWwgwSNMu!W-U4|uq
ze}tO)!16hBKXhbez2-E9z9#aED=cx?QXxq~>{Q+|r{!ag#Wa|;i15h_1cCSzt2cp%
z)=ooBWR%OpLksL+M>m-hlWZ#LP4y%`lhkbEo?WGveI-LEqIw!oDEQ;~Xc_zo1EDx;
zX-}xR7&!tdS_#4|#SFCsx*;x*XZvrl>CxjW_C?M9yd`|Chcu%)1B6+lH<}uC+pzoW
z0^jTt|Ik0_3#xQ_o@ardF_qR3Xc%C)E?aijXi*IBjTWyHN^E<QRibe@8rlx6SkGBI
z9xEnl0G2nOm!(DPgrikFFaYU+4aXDl3z1#d2jpfg6$i!jX>GD3wjqVuAov}`5nq`H
zgYM)q3zCmvLmDpER%Og|j5~b^Jf*}`=yiO7IRBJct$fh4_bB6QW@O8|Zdb%g_PH(M
zdYL!}yMKbr8mstqG9EI<-9zA%Y!ZBG3xrdGTk366KwMA_Ys<fACM}q$S8o6VimGoA
z^zLn1j*PsYb~lo=yF7_@7wq!^tPb);nkijO_Fx8m+ajCiH?TI<okQ0!-`k%kmJ}}^
z=-!f<P;D7J<EpUk(bTx&GgjPrLWwhg-8UVYlBJpqVN8ksqU#aKH{UE(tGeuNc#fk+
zqcc~fcRQ|opxfSN;%j%v#Lxi`ddByGt`H+y>@TLuhI-*CK4`u`Y*l2}6b_q&VR_Ml
z&8X&;d>7j6h_{%{Xqs?;!fkigf(_EWE!yyOnWJJ$Ph)N{tGaok!No(IE>Mpw^4;=F
z`=RIFEMN8Et!HO$9C^UkPJyfRQe2?s8@~aTyuLxTpYQ^?BPWRc?2!{*XAnd#_Y%6l
zJ<&TiCz%-5y&tC7KhXWIBI^<U#e;m2jMJUjJFN56&Ospei{z~uqY1lp*lgqi$3g1r
zDB*M$BsAPA9L?ACTo#)UK#*)2`Q9IVl$!h~w);0Okj-g}br}8GiPIHhsc|cRhi}~W
zwmn@^IL1%iAF1Z7c(Pu*G{rT{VC?G9bO=TwdkKrh8~Q0_0Qibq#*v!ZQxh5?O+hlE
z*C&O{_av{ysYBRUw0velP2Vcoip7%hepgb6y(@H`IhH+fyFB_jU1fq{@#ddR$5%UQ
z`j(-UBZnh#ESqKxY^*TSFtmdBEEsuw*J*(%&xgoTz0MG6_PfRj5)22G6Qk1V=?mA`
zH2@my*a#_F_Ira84Su}aVfH3k`hKj=(JvMdMJo3OKOPXb7;Q_YPC5KIL&1s8Fra+i
zsJf&94(e@c<sa^#jhV|j!5=5gy>ea9fD}Ev(bFbzcyAd`7~NU#OJ7k?hm>A_^Fti1
zu@)=mu&0$taXNG#Sixs;?N9MpoNL85G8Yu&1I1Tzt`(om+-#wPzy6)CCKMG_P%wO$
z{P~m@d%5$#T%LeL3K&}K)D7}K;gfB^-t>Y*rF#Hk2v5U#f{=YzHm?4s?TeScC|Bkm
znv%xLmyV2dNGmQyo0ct^g8N+HbGg(<D+Wl!BQ6x(w$pdxo)4sQKI@M2iT8AMA<?#R
zF0SR*hk)m=#M*q>r^<>@!#6$Yx`lnmm<Teytn1{Ax2wwouGn~XcmC5~Z&GGj9|#Ba
zv}E>Ka8m#KXF*Md^FqahUf~-!Y9%L9OgpVGFOh#o1g4M%v-w{M0d_<P5RYsnLlFty
zVRqs+FMj^naf^&7&}xA~9qT!_mtB02HDW$-w1=Jx3wuYl^y4-05Q+Rmh9HjNwv@wM
z=(`!xoAJ$|eSTNr-L8ow1(&N1gn>8+8CJz(x(HTU1X{x^_gl3U;eDz?ok?#R8RI1m
zZ@UTtE=FoQ*Zaj3>$;=-h#@s`!2`2G?%>14&GXZktJO;+lE^Ou=cc4^Dj;W1Ire92
zC1IA$GfW?pZ^WPn1Q7<P*APC$nH`R|qASrXKrOb<b~uw*NLUHJ8FRwpuCa<~67DY5
z{oJ!V7Es1TFk1((VPkfV(GhzEqACa@#ZSSVaWrU(6Niv<%(o0hq$obUP0GwTUWuoS
z%eLnMuP;rb__IJt)5uK(L@Z5_o3zR`_JF8uuNQ8PRB4*o<r;fSNj*F?>|%{2ig@)O
zb*mCTeDG~hGq%l{HFl8-vT@`YyuHPR3%>v69udigS;?5|U;yi2#=jyYlS-Tds|qu8
zN=5QXNSt>qi8DAH$?#Vp7Xxn^Vy+bNveu-;yaLKp1y?a~C@8Ir1UFNQzyWHASTKBJ
z3<LK?1o#GaHOotD<?d1WyhOdP<38|(5}^Y0z&yqg^3{<3M^*N;Gan169Z-!NJq{%j
z2ex5t2n+YE30dru2?;{ye7c1l@I!nti~Xzm-B%1GKJbB^=iD<S2~NO{V-WxPg0<cK
zSLA^z{+Y$)=s^LJUlmA15l^v><|kddwzA@~Lzby4rS%ajEcki@SjqRKJ$Ahc>}~Z)
zJDZuhL##6SYGPONno0n*Q;1L_+l)>FOVvhsbp->>mX;%_xC6fYBa&LC4+$CF(f=Pa
zx|t(kSIiy*f6;lBA8}NCpWeu93A%QAd<xU-FbV!<HduAinD&QYvI>4L8$8^?asWNi
zq-?N9PgK}!ej0x%o}Ht86=S#Hv(+Dob_x6SU(fGS_0RGl_%Ee*_e&aGu4Zqice7te
z@7`!}5r1ey8WAQ`Lhd!Jr8mqb_5au&lT6rrMHW@@82pQ{S5ujZ?93s0JG;QbWyZ{#
zs)f^S<Y=kHZNq-DJF)5Oyi%8*(usy|5{!0L;x4WI)}h?I9?K5(?DT6(@RgV#QOPDE
zIA2I(Ne)(Z-zLrhxk;A=y>Izuq$#dGXujtht2{Bx4hclh3r>N}B1L_h3JN!N%Zgpo
zUj<4wsqxxTfWdkRvs7WNk3+me+(t2_#m*yV^Gor@@k;>u0lpA?29samTlv(_j#HRB
zz3S~(oCpGN=NYSjq6=1sz*Kn?D{u#&F*3Jz=XV(CC?O*QqUIP>c$6!pDS^#{2WcV5
zpG{1tQ*HLYVc<i2@dj!ailDbq*XX|gf=@8Q4r6X)#mLBi`k2nH=lc!<6`Qd-Ac#pu
zMcn<?Jr|xyVDW?tqu`Z%I{fdL{X+#a)i8r};VZA0X1n&+XMYHrLh`8FzjyW6_k15;
zR$flOGWktmn}2WecW~SzIo6gHT`4OX#v5d#q*l2106b&WGymckN8A}t9HOt<Yo9SY
z#y+sY`~G@bdvXCz*5|rYKB8aV@a$2RZUi`mc{d5}N$hn6#+Z6Vt=dr0D{fV$YtO1j
zi$g^svQBrufz0LJYfE?L4lP?g9|Lmvt^oh))@(ld*6`lMG0EHa2YUM<@%Hh(p;Mt?
zSg?E$)79nXW;-Jort}sKlCZCK#W>W8TYMO|D#rES270VLyvQcp!7gCEU?sb@j;~rh
zLKeX*j5yXUOxQnGa;(7(q8yiqm}li_{Y>m8n1=Pl$c7UFCNL-~ZXc8fz^D%DCXAfS
zAAF*ba*z62#qoxW$tH)j9Op}HRA@F@D$qF%hNSvflpBYBHbU_VJN&TwLO|xCVD*5t
zEMEBx!s@Mb-#(h_nGKOM&plP+9>uf}*uloa>dUpx)}3D{cJ|(v&vHZFO9!NFk*|Yu
zZ(vAw5xkQn;B|5C6cx(q-s*~za9v!VtaE+N-J)n&-JLe>K74+6s`bU1;q8lOro2GS
zuuL2i+%T%83f*@DLHUyiFeq!I`*O0Ftqz1Hd3OmM-TCb|!oc4V>Qb=m{vEnsD8L>E
zpR_I0P8R2R&2-9t;zDjG6pvrML$S4C;D%R^3A`GVxvPKyAUV<lz^az`jhgBK7SMYb
zKx(RVeq#wZ)b#VtMXqbTKm<m{ULvP8D47>m@EgAa7fRQFrKUE9&KQjNCWD6mIM8{3
zQW<=nK7rOM(HzNfOi5!xsl&UQ@IO_%6A*9`PD#y?7I|qy&o6mWwxH^JEFzgBL7SY8
zf$y5qflLmS7&EUC-iUH-FaCBaBofWdu=I6YPIzUCl8p%}Yqj-?X#H5Rzez{(;)#Z4
z@?I=gHt&|vWLAVUDQk<FMl<{1bl5X3mLg+ef8fIluprOO15n7@vPs&-%wF!W=4Nj5
zK8u@2L8*}xnLZmzfu|+Y5yihy^1ythLW)R)$kH?NN)h%YIdvAD>=x%oLc8$%+wD20
z)ia%=li%#%b+j&Qx<I_!nq7Wts6~vE&(hqPH-$X2)xx?;nZ8Ms7<p~~NLQ!yk3Bj-
zha4w=vH1<v@dMgC=D6hii{D1kCQb*WprE7N&B;JVC0_{XOZ?DyqmfpkKr>0DGiDDD
zS!O3el?TNS1C@aYznSv&P01>#yvG;o)zeMC8qw&^&;IF97`1f@6f&MawD~E0DDZ6U
zKjYX&FZt>hN;(-Jv_**dS*1s$C>{nes_r`Y=-f_RHFIJnf9j{A&s8%xWl)dk#gr#<
z=-uRAxL#0UR9vSEMot}=!xQKCFgb=oBk=QtVkLtpWQ7_Yos<$ce(~Y}2;gUuMp*iK
z0hom`Q^~?AInkwaMCYbpl>3NFe|gxzz&wYv18_(njcyw;HK>(97{H`9M0PCi(x7O8
z>Ttb?J8}_AJ*>$_Px&yDAxZg5q(l90CbW!d*PVgIvPVSEk-LvkVpEw;A1EWCJ^yPD
zU$LB-xG?m^X<Q-1T8h^0^cA<!pkhrOxvwTJn{1>uWPTL_Eh{1U>No+|@=2D)r}i1l
zUc%6HE-_lH@0o4QDyfyr&Dqyy@&4mRL@L^mX7?bK&=b6aG$h&3m|VT`(ik)ARIo<s
zV?AVsnD>YIm<gpVmc=k?i9C~GKCr|Uavk$u+We&wH9s~d=A%N2IgbRJgN7I}z05FO
zB98D5k~@XlO8P}P&EGuO@Csg4)mJ@Inn6&IwGM%&z<1&sV(FlJ<XhOHor?vt8TA$C
zale*X#Dil5DYA?di_#kJ$X?ZbwVTSM<z>x3T~Hl3Apvp68_6h_WAP<es0N)@T>GbE
zTUyA{6x2j_`os<WwP-}{-$J2Gzp9X%n*H}d%}|5FGt2z4x95nkB7R5UPJ<}yHcZ{j
zQ^H;@aYmH}<x3ZTS#qb$PlL(%tV_o3*idb^R!tcW=z1dLVH(+SNg=C)p}Ev`N9TF|
zpEJNMF$sxk+0p6Eb}Kt6GC$L}fTySAefK&Esu;=AbfplPW|pc2Tg2xWB1jf^e9T{D
z)(5Txp1Ex;rAYIbtuBELu-ku-_?JczAvqM*Np`p%y3UA**g0wX4(wP^2t6g3+<zqQ
zE15!XSa6Y{L?TR;i)xCM0UsDth*z9sX=I2i4sIF2!)-t=l+mm>jzy3k0U7mjs5Cn3
zvCRwdZ1*9AAYU^W$|X|d*T3GEP{_QuuhUruAhKdeB?rM|Dj_9nzW34v!X25KkbfL1
z+?-`;Mn!bZ%?A?|t@X)}4pLtkUA9ha!mqx0Hn2Tf2qaUIJouZ32Cv91q)8?hBTX!S
z|7Dh9UwS(vHxoTo85b^JM_&X%rw!7g+iwaKfg^IzJT&~tw=A<dKW`>zIp-h0+I1PQ
z_^)?eY6^O0)u>4Ni`s52-KjVnCim_2$s|S&%S_KPN#F?o-C5pIFp63fSb(7qh}mJF
zbp#+dw=HseY8eNpLCl3M$4CxhD$O)p82se5iXPQsa52akE}3R?oMxC?5U+l&kr~}o
z-np{mbtj!9j+9Fz!R}-a4uOB3YO{^M+Zv&Oot}J$51&$iTK!T}2ri70Ipf8bzt9yY
z2)A>2Eb`4#xEs}TPd$@Ej8+v*Ki`<5LWu@|s8d?kHfJY9bLNKJAbS;`9CEe=?rW6e
zq)@xZERT5g!;{n36*DxPPd(JQSD^B^4b74rmcv;Isq>FNy%tXe1y;;XFo*#Zv05XI
z_&7W>BVbG!La%#3HU8Dg<AGR7bxo3zG5VQ5?Hc45jZQS`cUCT3`;J)dC?r644O8I#
zhp1@QG4_@MDaTK!<xtq*%|vLua~f$Sr7%0pT-eVoAkM3A{`q;qJ@gN+zua*MrDA$*
z8Ts02lV;*SzGh+hf0#Y|70?0G>bbv&r!An%lg%gNlA+GEe&}J&Z6;!&J-QuvM=`MK
z(cxwK9x3tnd_xY0E|EfK9Sb;{yU1AGQJku8mX@xhgv6_0(5EsE-0_CsTIFvvE%q!>
zenRVG4&(Lo7{fbWYKEwfoJ3<fdE<fkIct#-|A<GtZcicc$LgCk&kqq<K5<UyX-g^Q
z-`tN};?}e%^oUm^4$0paZ=|}S6aV?!*knSk$zyQ5UtR5z|KDx-@2>oJNB+C_$-ldD
z@uPanODwEr5MyJ9S4WyvQ$2n}?RGjs5T$%EqK_~taQf<(RDK>UD<UP7`I}UjUViXR
zjzwY+)rxuY+NmnHm$}*cX=@&B`E#6A*5EkYJ7GR{YexN+0I~o+t7c?u;m;`XE$)G*
z!Tt^lB`n12glzecsssZv850W!N3G$Q8B!-<eBi(kKX-)e)sG9N2mA19H9J3>wP2yd
zvdU)3ou|N>z55e2IDIv&UG<HXdfD!}V~QN_k$OX&c*Tl;zNs_Kg(Hgz{eRc4WUx5B
zwO=uv`o&}345#3#ZV>y5RLclYY2yRr$c8c}(ohL*)OO#<Se4#i!ABm!Ijgh0cgh%w
z1TJ-az|^bBbVPC~W0ly|l_IB(_BmiME-6lH+pgn#J>9@rvVDr^Yl*8PJ9OWK(ltev
zT0z`L6@0svN#U^(uhp?Y!NdV+ihyq;=C7=|(q7z*tcl3U^guC5)fp*eynYh}Ss0O8
zEcr!bq^qHnP!>Z9O3Ti$iagh}&mZaU244yGuc1WLE9=<FZ7SS@_QyJ)?=IS!4hisn
zaC;&(<wQz~7B>MK(ujdE7ZhrenfVnUblRy|V7Z8Vu?hUIGQvZf`6@e532&c%IKb}8
zo>_<;PCgSrz!(X!gEc#1RrKu6X2kAH?+B@n_EDkSK^Fh4hO(Zs;1u~S4u&Qi*2(~n
z5<*DLNi>1^+!a-+R1a!J^~B_Wh}T#?c;jn6G$+mmc~E;mi`-C4rvW)rSmF=P5-&fR
zDnJMP8l^{qdVL_NzIgF$*r%&U^z1_&WM4!^epY3=NSTJ-FF1*yxyzBMD6T4m5Te*T
zejv&e_LYY8h@HCxD|t2A4+Rto?k$V)0dB1J+n;E<n-Zo19jI4}0SykpLMesn)EJU-
z7xn#Xo*4~!THu=2iF+zYpDo@Lq|X%t6I@G=33L|dx-=tQbRyWQ%Yi%Cs^f%dLVetW
zkt1&F=eniTq#c#=qX)}bf!IMTfyQO{_|^F<Re|Kd>Pnz{QcHAflH@lOq|5^R<f`7A
z7Bz3?B=xbnCleTOMoltX1Zhs5p*CZCAKG#K{5Jx(vg*giKnO&bHV4Lc7j=%l&(swe
z0?an5sdS-vBl(fsWHa&QiX|-Z&W98{VDCRj%|HqnzJse)eDG|UJDMlaJ0$=xI<dK5
z)_>!xZtk5exC<9TK)tuTH<EhR_ma~K-em|2u{8><?SQAb+>~KE=C*7M<{~7{;u1Ls
z-C;-oRWR}!BG04&rJ+WalvBuvkUuh~x$6tH(58|}lu&q>=lWZYtC*+WGG)?MBx_JS
zGbtWnvDD~(*A+U2*bA+e!AB2xgMg9Dx%zJ_-@vDjIz{C2(uFIMaVHtBmiAW)B^ir?
z8EBv*7dE<Nm!s!Iahm!yk@GTgc#OUi^tkTsgPH03m2Q|Nsgdz<_Z@SVM%72(Cjv5i
zPEw%+eG(5`WQ&*5G&33C$RW2UOSn=do(i@Bn4%Q(cE3gtXL^Rr`KK3KLg?q8gpW+!
zFnQ8nacn`GX9R<=2t2C5NGa18MPD@zQC=~fv<wzreu14F;v&sCaV>G7b+&k-C|h5y
zS$Z^F8w|IAPyK9rZL2jQv=`5a-_@f3IMl7o@Ht2J=5irOP+Hh_JpL810=&|fHR`V^
zh?YBer7D?&sR}0!f{u0<0{xf5t2L@E^Fe`n$Ese@n43QIh_T*)8{1sp86^ecls`ku
zI<2F#8Jd=D`DhTB2s2*P#GQB&Jl35&SJTdES%-S~^2^6W8RoE-4?PM(mzKF7?g&nB
zd5TqjHw7nypd<C;I}b=6(M0mu4a^K@2`3*$#cYq!_1=G3(~LNSJ>{#Zgih$-LeJkd
z%EW4*rYm=ZJ<FR3!l-t5^o-Zy(M(ara4>ZB;kcwD2!ff1;nK7WN{%2F@=ee9bs-0!
z5g4R>bqGs6SR3^4fdHODRi)y2{`Lf`wPz7elgx+aSc&v!oDBmTWHe-(@8*z5?)>HV
zPpi<ZGV0ZL74>bJMPb15gXyU9v(JCfRdyHtiKAx1Knu?lxW$Pf{7(HWt|T-}eh`i+
zR>}1D?3pl?2}@pKF&&oY_)K=pq1UJ_u19bJZ@WihV-y5Pw=Ks!q#ma_$tzX3ro4f`
zsx?a4ALgF7Vj6uQ0&|-NuHF4H&@<zW$JG1CkfB&_q}FId>AVh|ZBs;Bn7-mXB&8l0
zL?vBm7#s=tXU*|&c^5Czs!oU>&?Fv6I7EnWf3_f%iS79!pxR^uphSGpNJ}JD7&D7P
zsIGg`#>09RI@clb2BQ70F3x1}*m>`z6|cnsE%J`5B4W_b#lTLaw03#?ZJ&33!xFC_
z#u2-r@Ye!sL-5*QPyk8sHu-7b*R2?p6nH~_lir;|;t5sxcI)nAp43zzNJu2)#r>l@
z<1As_k06^?ZsBykPC{=m+rW^u?k&a(9OVW`B7mP(pg6l@fpE4UVUldC0pM%V7W|=8
zGv2ac_EOR`UvdFCferI<DJvx?H@O2FRT93+W7m46yji#3P*iQ|6E<QD96d&0QJ2yr
zf&oV@$}+|amS<zmfVPl|&PU|>)fsPC-@1WH5H+EK{Az3hWWk@5T>iUxkpyv$LmE2W
zU{zgzhgPAv3~hV4#UXC5ZkL>A13jF%0!E4+jdVzOVT%HH%CL?&_MJ#Gl*lUA_^Zs-
zll5<(O^v1)dKeaR^cx}oeL9rvwK@<1FqaKZqHdZyBY560;^_#_D7WLc_<(n;ns?td
z9%b=CEVr-xOs+dX1hZ$pUdw#Fi$tcWQ5VGgu8!M|?FUXj(#7ER*Ny}0_yziAN7^>^
zamMpmN2MU?RoxkQ`x!a`BNp1jSx$=w&u14&%2wj9O+f&l=ETKV)3BW11onXjFU2IA
z<2H}cnQA^T`YASs1xLCf@w$}>^2%Pu%z&H5(Bif+>6(YSSSv~ER(LNuR)<}4q(Q<t
zzuBWTW@EakJWrzOC*Lwid!{WSc7BnjV}>U2fMLmrEuR<^{`IQGz$3ONK2oX(_Oe&Z
z2YxxepXiOWVs}aIV{h@$H4ZF-7Rvj;<`sRJpaWkinozdup2idJNuw}QA#c?Ui+ehj
z^^xU)9gj<~V$1LT0nEsG8|WzxM~r4@3|})Q3<R6`P;(wGBjnzuE(PwCJ(BR5pbZfr
zI{*muCndM)$(VA-k;w}jN~7HKOlDCg9DaE++byfJ*^I@4A);REOB-5cn9$aNiNO?D
zuLg07qgW=q<R=5=MK&(blxrH^nEy%@Frxd-F6(u3F%ve*2L_)^g!@X<*-Ie&(FK1@
z>`UC)QpDUGvRJ-{d34^gVP8JWweX$;&~`-qFwxQ5dkviZ#_D}s6YqJ(-gw633(ru=
zI7qWBnavcaDu4A=)nBFy_KrLz`+$<tcEA&nhNwvZs^`J&a1pp;M>x#2H+L>dz=;}#
zI}#%irl+SZpnmX#rPj=mucrkufu(3VKj5NWBo24D9T5t;UV6`sBY{W?XYaL<xOx{o
z_!=S|U*%3ZeqB=GsZ!t+*cOWDod1MtWRbg>(^)hod;ZBgUe{+sgDO&c?jNob4A&r`
zCEz=NH4eLa3t~C?rN;*fO%jLT$$=6|cA!iL33NEIu!nzeq;JoAkqX6<l4XN9BTJdX
zTNLPU3}Qd1C0-nJ6WhL#>~d!DKu_ZF#ZZ_)BwE*5U{$8$7Z^P{P(Nvj%WKTKhCOHs
zgh$@|c;SpxIc-rqr~Ir#Yg?R2FPBkZ+mG6fkW@`Y%|$tr3IWBz;X*ulX9aiip7Wnh
z-u&HR7--Y*d4F^OU-bvj7<I#?>C$bTKWzJ7w?4D_r`88|I~8WtZWG1}U~avY_Q9v$
z>}u+NV@hStfmQBOYkS~Rd4}r~C<;eGGH?TfU4@Z}RS`@<>ND@pfiCXDn2pq!#<<gr
zshFN-13H9y|4&Kw?Q#x<=_;=pG~_$Sk#O3aDX)(onIR-4cIgY$;y1TLr?P%pa_mI=
z6#F0U<x6^bLlr*hh>GNd$`=hrX)(ORqL#npYGOAJ=Rl{kkZs};nW4vBpusS&ei6b#
zk;a0GLkv}{2Dd8Jcie*Ih(<mHSaFn2faT<Qxx)S}Sj>U2eT|qcDDi4tooeW$YPw-x
z{cK&GDc*qG#Azi1t5FU#BkQT`oTDaR!02GiQzJCy!G9Z}p~=`WnF4u<W_;2VKMyea
zIODo3vZ>H9qWc}{)N(wXS>3pV$=xv1Iqq~IWbR^&);lCcI%^t_gUtw>PjO;M%nZTm
z$vjrhIH5uge;YM{QTq;+4EZ8-0%rJzbp0rc^$&^}MNNX%>J|Ra_#x@IynHniRB4ic
zKc+FyaPl-f0fa&e*NX2<J^pDl9Hz;Uv~Oa=f9blhN=o{KN1S5m`^0cJP9lA03HOM!
zyt8<hc;^7dPjn<x2&@x(lRHNqv+n5XE7ftU<(?Ee>})T_Zp?rC2^$nZ^FQJ0NI%Bq
zOthjrU&1uYoSWVwl5rpsLv9+EpDGI9uvAzi8zH5~TJ@FpX3_aif^)$wdcL6lD!?Df
zgs|bOm0FI>DKTP&l%<p_+RkHKpjCKHZ2LMs?=hl=l57-T|5->)p+J-^@VAa8oa7|?
zq?)cCH4_-GJQ}&%aKSBWu>3_7#pV-7MEWq{G^z*S7z{1sM&>Wq*6)egx60mr7UQ#)
zF8baS69c)F1%~ONDq;1-U{VhJ@p%z<_T*z1p>AVX#x|0W|J6`Wnj%vgtu1{9W#v_1
zRGC7pJ~zdnxsQAF5~_r$k!c+x6_(tnQr90+_(PHEMp5no(r2-l(|0v<F6edqQy++B
z?8`H0N^uy-+&o5nHHmjtHBGJ;;yDeUW6%!FxMeVEr2GepllM4n;N#mLkARL!c`O_f
zmnTWU3cv-|JO?#vI%*(|1hdGOoa?=LLK6E`nP&^*52Nq`1ld?Pdm(NMRhS+b$D;)^
zw{sa2s2nNxK^{@}&0NP|<!Q-k@7$0I^bxO31D`drYQ#}{(L1~p)CHTtSmm2LUj8hy
z{a@W?q0^PoV^?KWV@ad<=Cfg`MauM2l)=d&SCowlb{Lt2eBvlkfg@(KdZ!3xUgzAo
zDu<`>d|h8P%)7-<S&RdBGxGmR1aCI(b0fa8wP_&`Vj?xk!DmY^1LGJC{I^(F)jiFa
zVyE1&<${(|X}fhIES;cz&8k~k6-&If0j<v}vnif5U($E>*XgG2Ownk#W5X*&TrFjH
zwRB4(4DxA~3kiZrBF%gt0-UOov#O65Qc6K6{$maO*$&Y}zFof{D%4Gqvznb+V<Sb8
zPZWh1PZ=A1I}iu|!cR$6oE^JV#e{gO?Zh)CT;pK#9mD<@JQyRE={T{JY{zC>@%S0l
zJAD)+@Lq0$ST{EEtyI_Bl>Y0eL2m1cV6=+$Sod?^Q-e<)I&AnJTCST9T`_HFxBW!O
zqO`QtE`bepVhyND_lqRwKyooisNb+b!+=C>ctOL)ONc-ovrhIg8>zt%|I5OI51ET3
zhPg@^B;x3!iVG2%3dG4G9Ju(yNvWpqFmxhZp?ZRf9367?EdANI@|q(@{WBc^7ehDq
zYNU-6JKm2X6s5HbKRmy8#W}!qaSgz3wqVBGtg@bCi9{hT=fL)eX%wPxBvA;#iYmt@
z@&s}S)n!;K{rF9g?C=8&;^@OiJUnZV>2asOeC|VkU;<PA@cP=kq`9dH@UU(|@D@L?
zP07%;WIv^C{BU?Ibun2SWm4{<SaqvED<&IOm`$$U;+h|ZD}u`vw@b_#wWyxGUFK1)
zvVWpTW5+E#@#cq~`IUPSUFueS2lxnlLQNQFqyN2!vD_Urn7{jagOSsqpre=6*mhl*
z$voaR98z7qb{Pg<9@e_Y<&$W-EIoS{e&Uu-U(vfY82W&c#=b)Jr{Ait1i}oC&6|J9
zr{+G)YLPG|{&|#p{>zA=i?iw_&60xL>t9sd&x&!A@+XK)dC$-h_$+(-sHF=SaA}Oj
zJPA6mLy?f~>#akM${scfcq-~vBg%3IJo_W&q9}>vO`y^5pMu{lJNQ2hP7iCl68{u`
zjfi~{+`P}Rui~rer0FIgtZjBSVVv`lRafF#R>Q!KPBu5MNl>>uM#?wVP2Mkv?3JzU
zFfi1|V_2a$r|pN1E?29F_)iahaCnS8Z7uRAyWiXogQS3^-fyY|<EnxihG%>txvOdp
zFRvi?TfbTkJ^?v4WG6-0Ve?bSixd@;hjau|_Vt3MsB$yem%?jXvO`jSkn8_06e-y$
zp7hmgNw`rZ_yS^cf8;mL(Xz<6raB|mPyJ@(3gcC+p?Z4vvvx-rbeJZM+mI$1PHUBl
zH=8apJ?3%KNxs-GYurVzg)I|fXC;d0=>LUeqB?sDL>`@V#{mNxy72^CohqZp_#I}_
zZW$zk&do=)3rk#|)v}w%myzv4(H9ztRP~akGp^aZN%X1O<E!b%|BpQ!zGfxxr(jd%
zfN($In4Zd?n+rl%(UnUQRv#kW%!(3BKox@ozc6NuSOxg`Ta`*&+DM9*rWGb}7@{R>
zh9%^1%4B7q2X5&KH%eD9IMRLkYz&}G02kN1LeQoyKtXn;@ep4%Om0A)cV%UP{LaI`
zE*yruiTrlL0@)1v%9XfmBwyXYNwQBolqGn+Hg@O>!89%~oH!|e#SZ3<H{Vo-kg_8R
z1V4}B-3Bs=U$M9No|z*#swn(|^kK!&>+pdro2M{QB$6%A%H;Elt`f<l!2Z9O_$sRi
zN3uL0{=fFVY`Jk=$@X9Ft2#oWW<@`VAWh4%N+rva{AO3#qGoCyBJRImArk}=17*8*
z?e6G~dmc{IwnzZPn8;kYR)f&r_G=kNK{yYsn?J2_i*8<FiH3CCJ5ARwumOZ>H(VgU
z(#p|;T2KToxk!;zBmpk4+S;|ZKOJDQ)=1_+qku>3(E|>4T)d3%mk1nAg&fgA2DCTK
z|5jn5?##Cmr1v5VV|96%xV{3%0H<R1pp&EbT5acz1AZgIvQ(br)c*|cB=Uv_20d<J
z?_0j-D(V3Bb_K^N$KUGZ3IQb=<9~Z{fbdpYaOPbEXIj!Zu=1gRUrjAtDH8bjHkpKJ
z09dhr%$agcHci$u9a;&u&+LYPqtc2HP`6c+>2zYs;q@E0Z?T8c7-82HjE<Ee5wvZE
zYNcXSwS3mibryK@D^oLTb$)4?eQkom{mNx?bSAjF?D7{6)LPLxP%$OmA<h{r?kp8Z
zZFct*ns4Z71`SXbZYE6YU^>hDicylz@h6Ru4QF`UObQGI#dm2Oe8%I%skMg?oM=d-
zzkwL5xQLuyWfD3+Z~qnF8~R|LK)!?>CWdt8t<G|+bI5*}Y>ku{D!N)#{`Vo^zDPRt
zXMnbzq=1Sk$=&RfYTm96OnETp&#K!-IcA~}#Lee?!y0MZ8}LQMp?MZ`96R`isDs36
z%0vbjM^bg!jz1BKhbg;j=v@gOf3-UUd0HEMq9^9KU$p>)Ze%P)u%-8OhQcNoXR`CT
z1Lj|L9{0d`{6~Ic>@_Q3K6jZvkq#SFGU(rSE(=_gRc-V0S`AD*add^sUAuTB<c)*$
zmM>U0hVGdHnNyhP<S1S25&9nwb)uz8oOX5J@JgSKU=<R#+!o2Pd-{Z~k%-Hx?%U8Q
zP)4r>XhkRr1nT&Kqqbn&<xE9h=UdbP9En0csVFpr3?i2>OQCu>O2Ai1Q$v&X08J{_
z2#*E*IgeI+`xREEskq*Lg_TLhSN~_?MUyuh+Nf}&5b;$icmzoKQmh8qNJ?N^X5{zK
zLRumP9Xxr9CA}-TJ~2PNTA<(IoE264vS`aMtAt(Uvl3qU+><2sWV+hlJs_X`{s&d{
zp(^tdU{w;n9LrhX^LdY8B|7C<^S^}h>`Qns;4M(|n)5PH1;_z+4aGETjY#j-ahpU5
zU9M2zcxY7hC7>yx8o5$2uw+4YUcqChUC=`aP+CW8OKc<4|Bu-DAC1`QG^P2QiJwp*
zxF+E=PPn`m<6AjvF65n8CRB2Kg&wv0>(B~vK!gSYiBD|@1j)Pl6jg-jw)*|2c$JM4
zf)P293r8IWwWIvTZI=+$iQZSr<n<~gqa^|53L(T>;|6=N4)l7<Q0sQ^b!s$Yl)1}c
z(b6vaZR^spVa~uXQtm~DZYJ6Fm)BTWTQe@}kE9bCkCH->Py*o6&)u52kasT5FfEeJ
z@=pe)A#G&@eI_hDA^Lr+QJhy&Ff}Vh==;eqf|&yh;RW9deUo@Sh9tWJ6`(;CG9%uK
zG=ov<vP`#=aemA;1n9*TU0hOzTPIW5+z6(heqd0jigIW8<k~M40&**Er4GbSarY@c
znkVy-P~Z?e7X4Mvl(*b`kWXHJ=z3ZLI#al@B-R&^>4EAGyJ+=mA37!1<dO&SnD528
zZ@oMT)byC*44M$DWOY(f<b3zxzZVO>;{kcU-XjHSFL@v!p7#0di4>8!nKER=X@`M`
z&26^i{<2+@wlrqGPUh~3Wxo4i(&_ZJKcHB$4S=JgNxgjN)6g<b4+>^>TYu9co;;a!
zhzhr_yR98A6;0)Yo`z`QeCwMh-jof0S*6FIU(p%go9Wj%=_TV62UId21nX~Gmt)pD
zwH`C-TAkOK>c2uq^>S@WNBlY?MBb9Owe>sMc~7W_(LD}*YggX9lj}=Q?vv2HQ)a~#
zCL1IQ7wzdPFAka>4;KD@Hog3Yjw`=1vc_jG<N(h44)C=b-?94qJNVU)w~9E}`APBi
zfKk|~ZzQ|3pE}!FpmNE94r;nVodsUD`R05|wkXmwt~SUkgFS27Bx1hx0%0GIy};Bi
zJ3m|ZDL!R+Z%E(G`_}Bnk?OoEh!?b@!&4Rv$)?>*sX@(IWG@sf>PgwF&sjyC(5>1=
zghI<I3MB#`lnwisRgyOgWRl02b*+*FT5_P4?Mqfs2SK1O5LazI_d)jRx`0G&u_TXD
zX@N(d7@iP;zR%RsGr&aUi7y>7p_5QD-zD4wDuSpU7_Cuhd+r4$45zd32+KPUp=;^)
z6*_C`5F#D<D@QS70(3794SZZoKmlbhmFY&V`jFfhM`%^>jZdzbcCN;V6rm(*R?%y8
z6HX~&sHM3+)t@JI{8;gD+emjNo}v-nF}M$$w{kPIB!u$?Dyq2mP|O-Bg4nJeT*B>5
z!_l57`C+$>_e22}gDRtIa*zxYcShKzMf2+_L)1bz%6)(k-X3JLKx-QrG7Fw2Py<Q-
zYnItAKFj!2cz0QgF$y-dN%*ofLJwBssOy#kQ~A;19Y_gE*9B_H9e;=^!eIft+55;s
zh@qfRuOuUe8Pj}@-4Hs^xn4NT`)ZIm8$_6n#$p?oS*tNIu{T?|Y`@o^?J#L=j~6?I
zIF?g-jwWAwS=Wt}ch|(B+Vm&14|?9vzf5aZ1-Z3{j*`XBQaBbibhS<m_7^dOggw&D
zrKx4FlKM9p5~1_zjC50flP5nBX7|YI`W*^T)HgIA{q6J0=d|*&R(YaTuI?#z<%h5;
zjKvpAI-`dBSEnGYfI<4(FVR(!&eh36N@G_wyvTKOa@7f1^7D?(eOqb_=OQu%iN}RN
z;wi-kov*_~JaM|yLO`{n`3uWFDQVRwFKNGQNF6g#+FUOUUP^x(+chm{c}d^QFy<~`
zf9zY~{$Vi<fkG*$Zn*TvMcchMDr4?rzI&;Y=b=g1vu4Dj^r8%WF`h#C`-+IXQqg3?
zJy;@VSke$_i^D9q++jekjze-=Ze2p;H^`y=1FQO46$@HL=POl!GSJ`)e0J;$&+uas
z5JnBn_=K7J=9tn-5B^b>&Z>QNK8PpjJS!BObpU)#?tpS9%lpSVo;$HUW%Dg}PDQ<L
zt+Ml}($8qnV<skFzqTwy=Nvo@AOq+7y>pdf=j8o6)j11~=y7KkB?_T(^T%hiZ)&n{
z92-Zim67$$LpELY4z?3F6QfrC%AKQgP%W=1G6IDQFYTO9X3oZ%IX_hAl<CabSZ%2n
zoOST(C$5=O6umRId#Ccr%$d{9S@$y<^y8Z|=k&?UNxnXFGK&(0(3!J#%$&4u90x(;
zvzardorA}QQR}BO=i1ogxs|(wgJW7GbZkfBc`6iWriOy~GHNv^BHyEs%G0GDrX3+s
z0z_u_Ls({zYLldfGKZQRL`Jc~nsAjIgIFTgNMEt-8*IDVW{=U{?G_7xX8J(8k#=B?
zCR2a0PR)>aC*1ss+Ks8+Cf*k;i;<haiva>}kJHp@ok$Pt%s(|q1gf2tg+oprLU(sU
zt^2wM{>+EKQGCrKvxRzMw+mv_QQZz#;tyOTknLhwPmPRHgIx-J?8v1z9>DmPJ+xLv
z{<Wj24cgS-q^V2V)XEPB9=HW*j>0<?-X1Rqyhm?*wwZnm-i0%twgO2gOoE-LS$LtO
z&G4s9`lnV?Ni#>FbP(z*{}#niLsMg-JI860eko$H_??E|#ICIy_y;_l4j~a2$@GdI
zw+v^YI{2mWHoMo5as2+$(&7+Joqp$@(6MRyw=YV>72z?rK$m(=bVSr-51Dit;W9s6
zYlQBkApkmQAm-;JwD;0G$9X}Hp&O#MCaTZ_)d~hivBj|2PRG4`i$?DAH_MDDEh2HL
z^D+y(Og4`)3ytW#n*Y+h`o|5;DpPMLXCXK@?}E=Pxl(9b1Uf7Ode=p^J$-IHiVb*7
z4-awOKz~}kYh*9d{Fc4{NjA`;9{h>ptp$!ZfL>pdrH0%0SjT~Ad2ldy_r-vC)55$5
z&Oa36-QfD$f9MXn75S=Tk)$;Ph$*zN)(2mp&qNfiXAnrB)180eJ8uWmWM}zf3tu?-
zz`bVzuH@bzf}XNhaAnsPfwA7g8^as8y8q|Sz)2&}GUT{JVZ2f2ePsLYLQ}}cRR&ju
zkxun(+3+?QrGNwoj7vynLarW&qipK9FXvGsi`RW2v$VpJMquTbOi1AHw|k*IlK}io
z5J`2!GQe=Yze3bc`*>nBs0zk-;#0@i4)y#xvuuAjuoNMdj2gYXY_&8wf-UwpsNvC_
z-#c_RC@*0u{MJgP^lm<*|2;Oa%kdesA++cwZuu<}<zPsgwM7(O1*e4OH+E`z9$hIC
z@}|_LQtzZm?H&5goeDuI7?hLAxREAS3U3SAC)+voquuCOf)zPgg%eyMv_J)Jen3Cw
zcJ4a{u`O_8g5mGR)Xsy|GC%m*T;&r(w90Zo2-Or3t=`RjbDEl8%^hw)+)0hK{oJx8
z)rdB1L<^99T^vz}-XsI-JNENT@c>g)B+;bwkU7K*agux|03##=l(f$3{2!{X4xjhc
ztQd$OO|mE9{Y|9It$d`zFFbNlDqQ~q>q$X5pseCVgn#7om4<J;5FW^`HM;|k>TwNW
zGvRNSJte5>Pf}Hy^MTZJJ_?^zm=&U!y&3{ygzco-wZI>{#Ex<l8@>bn(O|2R9tY;r
zWAva%kCtO!xw-Ky5TVpunKnPh1EsrM_!h8Ywea=)f&+HI2=!Y<dLF<2^62y4QNm&2
z8<;{8CR-K*>}64cHb=wER?Q!DS;#2~Ym7!B%&3Y~!KACqW@=cLb5A9B$X1?66!u94
zVfSxl9OPFaA+u;lgI;YteIliZZs}Ce(;)t#As+Z6ld|uS1AnWg)zfQa{zT#9Ll9Jt
z@hs>4OhOOv<8^|&H~H~N{m4Zi_>aRKqizHIu_1os0vDmeM&pmAJWP?^P_GiqXIqrE
zS-ZDBdZh3v3Ws~GfUI=!iC2mxmAt_UIK6){`dR$nudo-qYmGK(Jr6;uuVZ<O#6@yk
zvLF)072)qUx3l>amV5hjO>gBPjdZ7*6YfynhnWhvVTOT<Hd?E244l?)<Q;X|mR9O$
zX*z7x16h%{=&F%*-yi`O2wz(<P%tb=&Qs_z;Y9jRh!EL6@9;;0%7neO2OIF|7wD5M
zAOB|Hd=nO>(MprR`7s4JKM(0IW62oVa>Y3XcyC`19D(ZDjVZk_NN#L$F}7g_Ir}c<
z*Tqwgr{@=56fpy$R^r$<FE5@ynx*cVly--O6(AU3%|rB^V0Oq&vF$bBn3;LyX-_;1
z<DEv#<cgB7pZp_q1XDX($W<Xs)YLFWImK8A<zmvo@B;`<o0_J}`IqPF$X7~f@Uh~u
zY$Yj%Hwpl1EZ|AiCs`cR61lZ609Qb$zX^%rqNVQTlQq*<b}7(Tww@h$h|G(?Z=z-R
zK`hqu8S{cUL#^DC8JyewhErlB!~Jscj0HYpV*gZYk)Si|0>3gTG1{q%0QK0^mF(EU
z1Gyq28*1JhJ#7nsDv}(#B$Ux$wVq|9%*q7Ll>eOt1mI!0Uo=3kjdID9TR&WXerM<V
zC7*PBdo=dJ0k<1De)g-MFTgO-;{8$wc)SD5(`rFGAb$U&4&Z3<zC;f?POCzZ>b=eB
zWM2ruAhg8u>Z}Ua1v1?ad*7J*2(c&?D0j&LC0F(lG4ond*L(CrKsdz`8snvslF8N1
zH@UJl6Ota(&3%~L;H1tp=UgkrWDAjWsrT4Q_c^hUss8N&cm2L3EoWHKYt5Fq(`Cbx
zP<n#p0E9uUr+h48qzfg>mf@jqujE^gmLC*=O004%BH=G@?c#~KZ?Q4NzV~3g!M&4`
z7;ghs%hOEbz*oson%?n>H9Q#h*7|`WPvE98^a<hHLb;^yd}4Xe{#=J;d#>eeUq&SR
zv}8M`mf$+-;r9G6SzBCl8c77~&StIqC3D%+hb6NfU6xh8t9tZtRdx(r$+z>o*qgB+
zM-~4+_C6O0njY055_)7|?%Rgjgz(SRBIxjdILm;IwjLQM_w$+G*8arfGWi=7%0Oji
zfMD2Mc2}mdQ6AmF1>XzZ9I-VQN33$zbM?3^o(h<yi}+H|DrZQys$aSC{I0;%nF<yc
zKUg160TEH;qn7R#W*Ho#y$K14dfE-ox8jWlDH1Ak*MEm_4orN71|x}%yaCNdq(_c!
z_P3e_MJV!)+CmCIzPP$3Jnh1)j$U@x8VN^uTV1DjAS+dpo7X#k9Q_&1E^ouQz=&80
zx4sr|M!lbA%rMNNkNu3HmtO0?XzZ`vGy6Px+uoD@;n&6+k!I47EL&oRzNW#(TuGPl
zkn6pFSkX)oUfORhW03f%UPZH;qu<H_DI0yil$bBAThoE^e4EuIBypp7#)Q)-l73CN
zqAx`6yehhh8A|nq@)*IVrDTOXTRvPh)gBcE5mJy;ugH`?kJ;nsKy@NJgbBs^f>R~<
zw|H5W6JI&+D+`O6<->Tsx**TjK7W3hBl(M~+~?|KxrVTPG}eSBNkN3i1{7VWN9Zbq
zBw;!<Mm&Us+fJq9Oj(=ceCdvlN)0?H7b^yF#I^7>s>EPV<x-iBUnRSNVZCAEQ}b8l
z1K+#Sd<)mA8OKhRXH9u3C-=_6=l6sSUa_fPE2CuJ$?~xwXOF>#eXGX4L0!=q+B)k{
zMZzYwgPb=ODUWnNCQXXe8?gLP4ak3?0W%`*vvoIMgbmQ#pvs#{67hx}naLuq<skS?
zLN|vdPh3>6jxdv#Us1vnRPnI;*9mdjx|&um<&w`L#1VUW<3{=MX1~d)HUBL_83vPK
zN(`dXJ9_YK7g%saRi$fH)$ol}6~BG8Dt^!f-)CUQJaHETJ0K)$K^BFs`qyGYGGyPh
z)K>QfVvPPFRQbS1Y0^@6a%pDd10VccoI1})2v(z@8a>gR;5cu!9egbVXRdHWSHpHf
zw`rA%zSLziSl-|N)G3Qt?UlNjn2fLqjzPSwwki8W362@U4#Zi{ocTyB_pI?YpTDsz
zg|8Kj;*eQ?>!9;nBN`ydyjMyG65G~qI<wweO)E~K5g~>rHon%JpBiHU+at@#?$u)T
zCY(Y9%9nd5npAA{`;vEcPIi<!?in39xo?C%?f2M8TDXO`Nd~n@tu}Bd=X;9=w5hP8
z#~eWtv+sdpDw8AQSDIZxWM`G1BQgkeWQh%;S_~^J9ZThpIVuUQkf{VcrdYBV)}4ZK
zcZ8q9D>2m<;-GXK6}Td6DC3vHWH@V+A$2IX%?eq7J6cEnavd{d!~Vq-x7Dk&4x-8+
zD;hJ!VUQks*6Bvh{01f1)6Poktx+Q&xi)Z5dB>|wW(bHl5Qta+?~Im_H&lAp2`mt^
z*x|8niSV8Hr#v(GAVv-50B-5iQubDf1V&IVk?c~d7lKxM(Rn4*u`2{4_$E(w?PQ19
zUo#mcC5>*NZ}CCmi61Uf?#gbGOdVCZ;_7~WXq+Qd2(paP_R5`uX5-*z(rlaum~_l?
z9S|d&Y%0vfjxnzVE)JWyLYxQg$*MS0BEoCuTk-@04Ms==ItgJ9Qk$ai(xMz_ae9-W
zN*0xr11E({N+AON`@CKlrtHWOVvYfto|vvhKxJ=s_b@=)d-U3910=j&$%|`%LNY+x
zbqXn*V_gFSXItO@;ZPaN#S0w>UFUe|CDNhcc-vno{E@V=lqZcT<^y>&AgbYt>=tP+
zQ@~fA>b(nRf&wkP6GmZmOY_7|p}S;_=trw`GThi06hShK(Yr>b%y0JI%qN0j0|^!#
z=Be_}rc4x6#_tlf(4;^PIn_D9eG9%#;|@FD1ZrbCLH1gAD**=&t_Zvr7^mmXMOP#8
z8ie0e0*>H6ON{PjB)J7uYqS(tjVhFFuT^I4d4mV!-ZOCDEb7e8tQA*e$qvydXqaIz
z7gk6;Wu(~gk{5Z*WnY?8EiNm^+$K1DSY>XoOd~V!Vww38E%Ur(=yb1wu-72Zz{_C^
z+}1}w`7m)0G1Je$m3i11sDZd(vLl`COTHIX1*%|pQE}*`U0Tvx5;@gQ6o@T6YI=R=
zLv%0aDN8=&)g>}0h!z!7<WzCVl4h(Wnv7n-yrQw#OQsV0i!y`13UniF(<6~Pk<xCY
z!IOFULX}4$L~v~|0P}FaF(aCc3aVz$5lMWuZ1`m7Bu+yGaTxnF{pl1DEmQ=b-x?~=
z=BIl@1HXPCM|AOxxS}DVi#y%);R_U^Eb*IGr1nDm?u$^Zy~Ns?jITQ9oL6LYB@my~
zktu&#a-#7Lb;5ZpBN;$hlF{CVmt6>l4K5%HnGphFu|IwI0*s4yoddk(2%q(NP7OT;
z#1vyX$vOHTYbF0He6qr&wTZrR17#<3#qNi`gu8?rOz;`qst_^S6!C{6mq!+KM4Z^G
zu{R%YvN=?=qaIg7?iB%cKW%*ee?qdGe7-Rf>E9oeqQiAv_K&4>%*lRAc%p9IhxLxI
zoO&fn^0vJ-2{Mh#b*Zbak&OYdnBgE6x2YC!-|)!J)B%%k1E^Y2`7sR_f+q5fE?KIy
z9^#<<mKtgums(qgF3YLNSDQtqgA>E)P!P8Khl?`LBf+<mBbWa_7d}AxA(^yF#So|H
z!EV=wzKMvNFMJ250WT>9s_lF&d1eYhif;AsYbAje!FDMV7+f1!TtnpCeBo<w7>-5a
zun!)a+U<NjlZRGv{uA2?%kS0ls03=3)qWAIfx)t{@#B}T?cw2_oQ>`Al>J3CWg>ik
z7&sZD8>a$|e%f0-PFc{|H;{};NNR!oX~HfdW=643g)I4E3QNR2JC2nT6u~h04-$0d
zv*{o}n|!Dq;flAsO>Oe;U{b7CE<s;-I|2I=3G|Awks(v0xY}%Df;~~()El;X$bzoW
zZW$!8PYf%VC*vR=r7iw^e@H1kth^;+h+n(zv@_;VjA(?%h4d~f7!{c_N9Ka0<z6pA
z(h_#~VUK~seBoX9HbtQ-0PUF$Wwount93|uNNpy_74u%~$~8b-g)lMp4<mAa+mEn~
zyO9eJH)gpjyJ$Cz=Ox7zgw0j?A6X<%(s|2M4qLzBkD-g1`&9nhW{M*5s_#FgE$!*+
z-AP+2aYxFFB}J2{Lnpa*nK8qb!L;TEJVTCB2TYiE6P$u$^0Mn%pi##z-V>HMpPtKY
zy5ww44pu4nU!9)^K0nR6%ZGsAHKjnZnb=slv)(M;tId$4=)q1{y0;$Z$|Nf4MV}An
zzTr2Yul;Y@PlMEaYJbsMO8?MNheG|@-ruBSHxOr1SL92IX`|HW>j-GwbYSjHuCh<V
z+S0#lDXHvEF*rOGRxN?}`s-kPUIxnp+^ug+X?=Gmw(Cz4k^iaRzFBNVzXzbf$KNj0
z>3OsDsYE4gxMMaIQ+m7BaG8S8Pi>7Y9Zli+tEnD}1UK;xH;;9LxbqH6jF=SrrbDOR
zB0C0e&WY{1c=SHd^#zPd+R<6`<>JRfTZju+9;_s{Lf;ycf|cUND_;dG(HA_wN2Arm
zTzr-!zDogU_MoFaATI&W*?V$|4-p;G-&C!h#^sn?$Y<kavgHFtQ64gL)F7i`G|jAN
zpZFONnN%4g95Yx)>!q(@61n|b5wt7Q9~lFx$0=D3F%ROyAIL4JmNO=gGf4v?9Fvg@
zZ>!X*Dehb|97x<s9gih~OhrBBF-Kb1l_RgC89Ndlv!J*7Aw5yPJRk=6;LP9^?(j*|
zAr)bNi|@@80NI42qGw!cQVeP{tf42eqn%9Wffd9%(p3W`wPfOW9IQhP%bNy#zEVpo
zW#!OoNlOZ4E$54yS<BUzYiXyH8lTlt<62J?@XGC^uht^akInw)wH!k&Rhpv;zFJF9
z)bj9oEd}#iZtYrNHQ2QX4DI=*r`5vJl4LD;Rtz;vZ<GD_`#siR<&Y%WH-UKitKX7Q
zi~TKeP&Iq(?tA0X6wOHEN_5?)Jk>zOR0;m$$j@Wes0Ji6mz>O#YT(pOZ3F!eL-^2u
zyjxn3g#Oh}JzA6yG4dt+)>{2^>pV-ie}}1xW;ay8fuQ>*6+1#8W1_V=Mi;AysOjm6
z!h+=>gN7&!lwgB6b>|iQ+aeX6XSymfY>VIs?wuCYi%?iF>GH(;>83&zDYlhBOZ8w0
z)!)TOd&f%P5N|&>^aUHwKO;ihM8oXItWvRcP|Nr&-AW}}euPUA_~#lT0%tjb&$^Es
zc|AR;pPvKDh=6b=)*>W6dqR|B<Ac|<m)`~^45rj3rzXCAKK8FP1fe?Rc>%_&9i5xv
z<l|6UzD|v=YI<QNNHt@`P#t_-#`9j0We{D-gD|@Jx99J~FAxN+!c2H?YU~6L>HA8M
zj*m5)hiGO<3=!N{M&hLAp!90R6#|a<1?9r4;wy~4nlkdS>Yam?LM7>&9;jISxg`b2
zZy~<KRUEoy5oURV4X}YrYg(ql;(L)K8V^H_mMJ{>>ZXN0$6Vf~b~=m|Y?F;9xW*1c
zu;p6Ymc~sJX}V?5tQ}@QQn$3cxEIc)@TDe%KA?stH5c>wz|bBf>CPjnHGV{>egAZ&
z@a4xV>rbUUe#%md1A{qtAX=hWR*E?W2f+|=&K&+qEM|GX%@+}0I4A0WaPD>Lu4ay_
z0qULey<=Dni1j-F?l0cRN4+C#F~!)|xPL;NZhQ#ki-%HRjEq6*bdWvpL}uZ#jI*%l
z*D5x<K#35A)#I<sQ$95}p_*(PKXbOpNh)ED%yM>%PlTDtblQ17Kf5|SA)Tvj-B*(r
z9GTiuSzcf4bo52Zd9uhW#cbw9I>wNdBQ<|^WqMH2laHNB#9T<`K9SMD+0@?3-KnK_
zL_e-7EU*%w8sq#KR`uNcRL|C&F!Y=I5GA_*d=KdAaNQ@h6zJ)jnjmCqwS}_Byk*iK
z;wft|OL%1}gm7WtXLaV{ZUcPEe2<he`_hH^h9FnRo|d8k^qmY?*6mqvY4>95e4s;}
z8hDWOzqQh7RwOm<>O(NDd(*^Pva^J6gi{6qq}woACY9lH{>qOeAsdP)N#$}x`bqz$
zXtAK4r*Rybl0+hFNsnhA6QxZMLO2s+5^Is1jVYADCC)@j<rBdb`bq`R9>jh~b`xy+
zwnUO`yUcnvQlGjnk)K!E&q{G2PZavr2{OWF_13}HQsw((onW9YsS>-q+9RC6H)?my
z<rQoqRZ0RY!2gETU8ANp?o8zcBUYkj0_A%S#ZjE;2~pB3J8wU5-$chf&57<NA<gGg
zOSJZ^p9rL~W293rd1NvdP^7-=ZGDGd|GfQy%4xf>rP7}W3B1u>;5+RU=({_UH|-bM
zRl|gK)i@sz)OXQ0uB$L@CWv)0sJJR&1y71zb)YN>EU5bEKs`>$al}8gZ;=E1Ui?&0
zD(WImg%ttYx%IO&uRY(zFu3{1q!{dyJ?WSrpYOuoRIOcUPJo~LT0rKoLE?Ex0+X7w
zE!o3xC8S}jP@X_7u^Dw512V_NB(7bV-fBZ4AlgUnV9-x>Kpi48!!AsN@LxVdPW~RI
zaPLL2gLP66u+3;R_IZR@PKny9S{aAPL`l4rpDjkr3JKT3sO_&TpdDX0CO?k!xBj+W
zp$eUe%Ei6X7P_-<Ms#2nmji_bcuhxko1o%uQnh&&aNFx1Z#4QCU|YqF??G?P$>a=x
zg!+kJnlVwcF{CTX7_b)$p+nGDt!Xx6K=%WF+SZuzYf2`YyXw%_7*j)W@&dE;^PQ2E
z|4b2%#2LojIo>q|P2z+~e|*jlS@wv%aKDMg9*~k8js1wEp1-Dxd8oq#L%1uY{_448
z2w=@h5@=WX-VO9e4%3*-{&>xx9T+sjkB!bMz;30#o}}!j9~JwutygvqdHZTr@vW%N
zUPY5aL3Cgyk+;8+M1Jh4RR<kh`eBbvx{uxMTlT1?KR)K$ma3rq@m_<s0&53tML9JM
zB1urqNLD@5w3Q_>)@B@PAQ&ZVk8#>@s8X@XW{T;crlf0Hvr5pW)Rh|rP>iOd(8S&(
zBoAb^Os^_LXJ)AoAYld9sE}Ap^^ZadIjB%mV!Fl3CtJ}Vh)Uu42!Ax=YoUeT0C7?w
z5B}x?&oR<da1S7KuYIqqqONR+pYl-H`lcFRe&oo%485=rhZ@faH!Di?rnrfHrxo0J
zt4^8q>IfxN+kFZ+5)!NGDVfL@nz?vkg;ZTHkqL#1@yeRxcoBM*QiF5<w6Hg+MS|Uw
zB#iKnxHc@@C?2K!Xie8~56Loa(0&rr$X?aY27n>ARqTgRsY;Wc`BKvz%S?%eLqyL*
z?xv1Z5SPYz9O{nsm>6tBTx>~KF=H5Tm#%J$y(mTJT;CGMhFp`-9S&F#mWTz$AKxV|
z{>|D42PWx@woBAr{u?$xngcQ``WXxX(~?`AxvArnD){uG8aSWU`M~&GQ%O32IO$d-
zIFl^08Wl2bk?b+LJBL#OJi;^t8Ik~XR^mcz*INqwIbiDFPX=D^O2WR>87L^LP(m3g
z)?PWH(0v=%!O)u`RQ5|DZ6<w`{F^XMQI3bKc5z@NA>(blsl(s6eV&m|t4SHhf&`nC
zD!~UVFH#Zp=1y*n){e4Uo8;M7Tbr<qOkUdFg-EHT<(loiPVJ?LW*N4OMl+2vCv5mf
zF=|E<8)gohoAjXBLZQ{xxK8|Yy>eA#?!fZyijtlxRh;B?;;s-zn|M@1WX!|aMA~CY
zhmOpcU64t)A$w!WQp)-;Sm}5(-rq>Q!AUomMHJckV;YVe`o&ysjB(=I6Ow;Yt{fN{
z<FF5eNhz>ejVvCVzvDuyO-2tSgp!m5Xwl_RAZt@%W<YP6__kD68e)OgN{d2Lf#gHu
zgcJJ=`qj{QWOPoq<?hqTVrj{nus@=_C5~{am6cMT^QAUpne?Anu#S;Ao=5E+@+H$9
zUflQdtH6m{9j<B8r8>BTl0j`0lGg;aPe|A#QjKts-=#i<;SD^?jAujf?2#mdx5iJp
zgZDRF>pRsa)0yLlEWCJn(h`5M@L+5@yaq#{-Qh3xd}SyA0OG~SuY-Xem?}4Y!?UE1
zNWJE}aKxK$ow&0)SwK&7{4ed~6w+*{NwZ|+>4s3KAzN0OQLb1C5=?1ImgzC7Z1P;B
z?`}_qLBE_ZGK1R2uc5k)DBb2Of*}^)V(qt2YbolkkaFBDuFaG=u^nDqko;xcSJ}b)
zDe*)*=F*87C#08m=B|&bq|hTR)Y;gK>DCbWF#MU9Z-C0FsgwC|C>~xv5vMCp|KXgD
zb6=x`;1`7&1|i!Q_M2X_-JrBt!%*F%dt}1wZq((m5u=kmNN;_t!pi3@4}<k6?%Y3F
zEXc$lq`^@;(?b6%kL3`eoAH>x%XU{s8BL*QO+n@_6-ka<oCFRhI-q?<Ayx44|Dd_)
zyi?>9yDQ^pSPVm*kefAdIrlr}@kaBs$<0mJ5vf0}zZ$1|c<Mo9<M4R?7?g~oba{Go
zf^6;LcL_dT`40Ge4=CZ`B&bna%B0tr`-Pr%r{z8E^&H6>ze&mhU`MKwC|(ZODKQ|L
zVlE_snMK4`IAJ$xj5XT7b9euC5rs5LMAn|O#fxr}=rVKDQ0kGS?@mh+4ot&PfHRMM
zYV}C7rs+;mlwFhP1Pc$%YAvvQcPn!C5dRO!We0r>ylwZKvNZCk+_lTbK}e3Gc@oj1
z&6^!^<n!a%=-lZO36MXk$p2^-WN!OF47Dxk-gcc#Wwc_H!ffYfZu>HMpvIK0ky&jz
z1QB8EeYR2hG6l;<%Dr;TW+#Qj-%iU4@y?8U%Iv&cFSK2S@mgNOR8=k0@_yyaH~h<j
z%^UFoDyQWv$g1b7r<m-#827qS9Dbqucn_5P1x}~xgIlF5P;_3k2m6kRL6L_)`7SfI
zZpTNPj;^eQQZ|h0)Qs^uIL!H%iw4R~og)g2^WYig!DPrRh8NCCny!tgEVV3Lq<d#u
zu2w@R)l5!5RnnZux<=KSf1#w%Bj-Vp5}krUygQ#71A`_ncWqh8Q`@l#H?SI0ba-aA
z2W~IYNNk3>U0sn3RXwz;a~LEaNV^($kC=Vxno@>x9EX3~?n)othkx0;Z-NM*A|b#H
z<fmn>r`8w$zv?vrt-;V@rUIdFA<#_YFVynMoW@mVYI7x0Z5<-B+|zU=%+DKT?+Fuu
z`ct+eGj45w@5lmNgE#0QAgOSj6gCJT`F_Q>R8I735al2POa8S{w{Jn!I!vsAj-BnM
zvw5J6l-9)BQhknsc@chx0)PT~bDCL7yONy2W!z{xrCs2Rvq$78ULOqp^xw&f*=Ob_
zkd<Or;eBVTbbfSQED{w4ly37CvoOiD7AW6<p%o$S+Fh)4H2}!n=Y4l&6E#GX_ZPEL
zdj}H~*j8}B<v4WgdyodsFDR>)jwW3ZO26?D@22?$p~FO<AYa`xadTati#$T4J~DH?
zVR9izMz`V)k-7sOeDc}cg1+o%Oc7&bcNtC@Nkt@^r}AmFE4c1Y=y&Q)XTBSogP_$N
zdP7cl4{jgxfhGP7Prqg1c<T9pgg0<kcv!X^L%~mp<e&hPVCdDZ3cEm~pl1TB2iF0F
z)pagvNbE$|9fH9ISXq2mcOPmC`ho*^vs1TyWe(PYf7Z-CkNa{*w*X7jGV)>y;Gpl`
zX?w1UZ7%|oETC7)k*jCp#k>Zmk*kYTusmK@xFxFeDSg|iqZ4&)aDEml-;NKVm&SB0
z&Fd6DYk0d-PvV3IkX0goO3x=_f*$TZrxG(M5XK{)1Xqs&Q}v`$VU0@{xsZDJO}tR8
zxUMLOpFsCCdJH}(C38o7#DNhUO>hEs$0Of_fQ?3!{7)GjrP1e3MFT}zz*io;k$*Wd
z*C$ko=NiQaH(E}DgIr5LWOt-SB(>|Ts!UUMY{4-uM|-koj!;5M!=%%}9SH}xXO0A4
zFY9`6$&0>{ap|XKIyq)?nlJpA&|V8jx{zS{sliOOA!)Eb9TKkD%q`n#!w#0x<DfkA
zbpfUW36bt6Ob?I0sg-a-G)wz94z*{1##gNGmZZGqUu<z>pTGPY+}NC-*<_z6_x|m9
z*MoV-pT1StIc2D^j*d<k6C5;x8h-8C+U1lxXr_Di*(5!Yg7$4FsNriKxbr)&l`<))
zT(%&2Jqbw852@_;_Borhz~Vd;0M*_^`t?-<ki+1;HVQQmQ44NZyozek*H&>@30$jh
zl(3BDw=P5XbT|tsrLs8}`gH6PgJZY`Xw<JjU0t7)n^bL)p(5Y+WQ_U~x_jd0dPa!{
zm^z(l%k7~8UrGCxN@b|Gc>1WB3PD}OBqG`p^<<=U@iYbow<|uPk?z<%x6}w1oFD&a
zJJ<pAxI}Izy^}B)a%dTGC4wj%#_`L~nXUj-_UM}=k)39788|vVUo$v61@E(+_6Xc}
zx27v6e|wP>xvkwqsThPwC>*Mu6I{Zw<@<rdgqhztO_*ZcZNeP<Y#V0f(I~K5A4Sa<
zDSFDq=;T^mIZcZJH;X9-yz}GGoC=eTkDbth^-FJc(>QbxO73X?ygB-(KK7j*RL*d;
zXdR?HEuwEM=gIPse%=jA(__)lV#Ap>i76-{t_M2#=gG+&9k<kUnPCTYjpUtp<$sw@
zye6%MZgVtAn@H3j_eN6qoEkrS;<X|eg9b5uv_P%O+$^k8DM+AQC0t}4xo>F{F*R|M
zuN%jrAls=^Ch`%@xlxyBL2AigFN?ICliYeG@b5Tb3NHBIO;j7yX;#AIf%1eALd4Ys
z=jvkUn`ohq+tn#1RC!Fb%QvE!wOvfhz1rx)t&Ri42C4BFF<`>pDly;aRMl0~!;?S?
zocHG2B@+H2B6eS3NTI7cbt4{Y0{`iIK!1Sb)!<NIs)Th~LTHx&KAiU}tprREcJumn
zn=;%>)sok~QmL@edf&f|@jxMewNK|Lx>oKr3oa6dalTAbd~;={?nixxJ5xr}&U2ZM
z)tpQ*%pgO5V5pqY?-Uw9j>RWM3#0N+&Ub*B<ZaZ`E6=-B>Nk55w{@ZUK{gQL6&P18
zs_CAtRY%9Tj?EATKYb(#Th|n+$8Hq-qEqTQ-U--jhR)TKTFYbyR%F%D>XFzBVoICb
z&0``LmcaAv?ZQ{BV=kdHh;<-=|M5V<DViEi&(4cAaKkAR5W2Y*ildq)bd`KVVq?4{
z%x|S1E`?M$3n{f7xTv|+=QI+3BJ!ggT*9UZ+Hx%@mL?QSr(a{joR-h@e2|JANMk(p
zm@7tIE(S_^!J9IQ^{e}O>@-n~|D?X*v)x6Y>vi-qa~9(RiLDi{HABU|0q#Oc|Jttg
zGwkc)$(C%^zTle{_7FS&wW)E!^5JSEWKs;L<SVCjUpK!6Q1%PoNj<JoiPPxmN$Bor
z!dF)%pwJ3)yEQB3q8R#AGr%-F;){!7eno<l+M=Mu)s?&dqD7JH0w+zY#dD7K0L-Yn
ztQ*^n=4Rp!)$_A|FrT=k1@p<IZ;OW%>C<y281zYo;+-psPIn>0U9C@_+><?Q`t%v@
ziMY~>i{rD*%=z_XB?HQ9L78xJ3Ii|B1)8&qCzbM1-QE$9^A38syTAK_n_APzW-4Ky
zGra9Mvk!0X6sZaaxryZvJ<J0IyP7{5YCa^pc|D>iMNJzU#B5uUaul{FRcK15G0p}I
zz^fvED>n`aq7F&-5S{Mu{F^Pyqje=oz8J~0nLT2ZVjigYIqp^5i%K%{;rc*M>~T*y
zu;6vI$yJR!d{(5)BLhe_Ppu>F%xvqOgIA@WWW0~qTV2IE2kvw^G>WaM&$kswgH$z)
zpr!47$%+6D@{B}~Mu9<Qb)DH6=YIym6DzC1&S@VV)x<PVH8HEXvARyHrVUB-N`X#A
zCVzZm=(cJ65{~gn@b$r4l!%WS5>x~A(LCV#&Ee~$5jpqpRm|ZlOfbZiv-_0?Wfh*F
zP-6dR07VydhJjVlNvo)6RrL7~#sMLr0zYsSFVM)89GFIgo(0bz#53p0$v}^pDzp?#
zw<%#4caC%ICvJn=G*MT&(>i}eGF_3u<DCoR)YAKS-;e+xZRJ@R&?7Qgh8q(HD`{KU
z<Q$~Jum5w&X)nFL+#|c<&bogqcepMXx*S5zv2UgAO1}2-Ec{G*dNK>uVL7#*UzvD*
z?()%8yD_V8MT7SQjOLJ$Rl%W0r|I8y9qKKOB0ht>dTL1_2dXo6g4~rKpANjNHwhiu
z#vZ*tPDxiCrjEln&7miLl+XmhDMMxy>R_k_+2LaL3D#Ikg??@B1BdVO5a^semVQ$$
z4!@#_Y=tlnzDcY>QdEJAHcbfEq{%V&xK)$pM5w|M!yC=0hNCV*@)X}~ZVMVZZ;)a5
z9?RB#rJLj5x=PK1{WBg!Nnp|g#c}9}S77c{3ttm~rPToW!Uk5zY5Js*!m@^cFsO_f
z_Jz77JvlPDUnRl6x_-f7`b<h;234BO9YhvqRNKPJxnxEYtbX1-94JlV$naxZxRl!_
zu_`#*gl~eBbu8ckcFG5KS;N&QWzBuXvy6aLd8gj2{fwD#YFT$`_QyBs!T>XQ2WHSJ
zq_x}AVeW75ur+tzep5_6@7ejL{&)o1O|9R=lXWEc*Kquy?jzm#wK`xUQ|y*+l41?Y
zY3VVpQ)<o28sQ^gIL<i)K6Q492AP5%J9RKiV8~3CzHQ6ERy7GE7UqG0@n+h57r=tG
z9%aJ3@YEs9JB(eGd>4K;Kl)c7v4C^bq$$-P7JVDE)=Mu(f~g;!)r}JgHRm@f)WoW8
z<he={6Ap)`nhalRlG;saPe<`{CRU^moUV`~D4WJ>w%S%fzQdmQWD^%|=Mx;Dffqds
z9e0Dqrphd@lQ*c61P0wEqk@*;t?68#LneV>leb}8N3-Urd`&yzfZYX`d`(kA{-K?Z
z;RZ*1R{iH5q>9eqsqC>z;GAqC<(A`WT_)LZ=g5*J+<D*~6Uoo38#>gG7I9CuiqwBD
zjFKqtn<KAVkknUm(D*g#KS-yBnc^D#^y~0yI@|_UZKAh~rh~H54e7@64GAN1@G5LQ
z0WYza*?#BPLnyYYS+RWV@+oNGA!F<6G$j{IHu}J1*G{1*Pm(uICCg2TYq`=861<8F
zQ>}6g&~^-s6&i#>udi%qZ5I4{;q>{?{dn{@qv<sgP3O1iPy27gT!cUM5#>E1S#oyz
zB$0u-qE0~dzYZ(iyteeTz4Ph7UG^<K9@?CH>EC*aqwNR9`NE&#H0Ff@sr-Nc=l}jc
zP)h>@6aWGM2mnB?)(B087B7Y=1OWBJ4gf0v003@pWMyA%Z)A0BWpgiMXkl`6E^2cx
zWNCABFJow7a&#_rZDcNLb1rRRaP0kyVjIViC=9>KD4PU;1%ekzwhWq5WL;uyWJxR1
zcDyu?GysO=SRe+$03;EK5A;39|6+e#yQ_O<Kv0&md-iNDB4(z$`c_?4U0s(Ce>l%(
zWnN7F(7)6D!*M>&{?Px!@HCyxdyBJC@7MAV-9MDYVm8dmKlBg((CclMv*G4xHl9K?
z{o5NBv#dAAvJC~!()sDi0>ffF&W3a7$jV~b<$RWwK@n`5{^_NY9NH;n+-vweDMs1b
zvtqOuXXR#ZI+>nr{^k8*_I{k*hW3itU$%O8dOKk;DX>WeHb;3m=byc-Jad2>MgXN&
z^$Z4A_D0!px){&Pm9X;3eB1zPo)6!LmHoF`*#7f4T^5UZd0nw`n2xjc`Z+4jR<CM0
zIgggBI&G8V{A6{J#q4}FdSz*uPgVngDa~fnVw_%!W5twLYE_w8v_A3oGCMiTCiB&k
zm(J5Nn>Va8^*7}mv3fb}*C~wexR{-}AH4yzaea||cug5x>Dm(cWRzVt^w6RGb>ABi
zny2V-F`3VhK+GD-W#f#dd%gmp)5W|f-{;enSYQ8bzMN*GH`xgggW0m7%xv}N>3DIH
zH;z*_LF32OqfbZabdDGm4qt1P<~OW$45hZ%s92nwP8RcZ%HpP)J(^|dI)w*|!JsnF
zwI#>-WUX@3e63<Ln5DIb4u~+HM{_OsRqBskIvWPFT`5rMeWk>-$Rmuc6p0s$aJ1w<
zKwIb8Nf9AjPy+jq&ME|;rp$`(#YsBL=ci{8g$N44+~(={#WkSj`B}F5YnjdREGB5Q
zZ{#mC*$~mA5~FNbM|7f6An3qaZ}Oj7YQ3@olkoM+D@$3s!aSXw0Bb1c>G1s;waWZ#
zI?f)=hBt0u?ee2pdVxIl`U+K!5S1HeC)s4Qs>D2>kF!+;%EjQ?GV`Js&m(%zeM89>
zQ0T~sw#Z-r0Z_u-{NjsWCdn7cUnVIa<TM>-$zu|Sg>B=<&0i+J0PC6-vw4ENA^GrV
zvV1l86$IF;<akz`B`s(Vzm%KGTwA+w72xgX*%RP!uaOdTxtXWu(2oibol*qy%S5~Q
zXp&@S)A=$vUQ9?(Nam;MJOQCA8Dz<#%tqY=cyy9oridQ=z^Isxq1bplK=hIkWtY@B
z2WwIk({?BM0H2f1FX)lVUD+<Y$>xjMq)gIeG0Fe2$dVk|EHn5unFC1}FB4d5kYncA
zh{u#BC*xuO&7T8VNs$$V%>yAW=gA@;C3{I5n%{fCJs4;6gkEm#;^U0kO}Iclx_uko
zUUk}?-MY@rXV|gh<lT8XUS#i*yi6t;(6nrpOcvuY3~dJ82Z0v|7<4}ymzgwBCdVl}
z^%x_j=`1}<2uQM#9GqtIdtM~-tei_JkVFAzc6wj+wi;$OFJD5luVz1Bn{9&8hYq}-
z6c>|DUw~pKv2!1N*LWsm=v-=VZ%>MSG;dsu-G=3=nGrymbT&(uNgMh<UW{O`6QYjz
zb=mpN6QkpAoRvq|&^HIko=(Pt6_aytc*OGo!)Q~@o<K<c{O2Ti!B9Ga%Wej75(t^D
z@E=Az+M0U_@8#ZfR?G{01+-*;K11?{yGG#cYU@;@9OuKVz12;=>d+dr4hsU(!tR(7
z8(+$I>e^9jb+6<lP4>+elUq;P*`=-~;z{RUg5ErRD;Cd@%Nmrvr6>*aw$?fX(=Anw
zS~r=k1U5@P&!E|}K{l(KqUsDaP7%yVu+tIbGlIWzt7EZXHVCbXW3#PWT&m?aJ8-*s
z3hM#IxS<ZtT3$+fw;iHhxn<%#6Z9)dOIN20WowD3o3CS;t!SFwiNfGVDt0|e$tVGw
z(5j${1=d{C67*s&{c7T8{PorB34@LnqZ>5Ymj&qrD^j<bo#dhPtRFyVLO(N&^$h2~
zcpe?=XqrYU>Spnq14p9|EUSvA^B|nbDr&o$Ett@t*Ro4=LIXKrUcAmgew)nG6C~T(
z71>Q6lah!9bOsI=6V!70h249A{i$|@s}R+uw>=P5%b!46Xt(|Z#QGr<Yna_Kdp0i8
zxuU^lvc0v%ANvV!Jb33C-mU5T6aDz#q3eJ%uBmVs0XcXKbQh5Hc=9f}0LUP5X2}W2
zv6JK-94Jb_p$WY!hXrs_6<h|(<lX!f+40FcU``{4?NF4!@+kPNl!qpI$@61wOLlnb
z@UWX8yyPsKpB5fmh`qWAjwgcpUQRAZ{0&NB_oW>CT+m6J$9Qp?4^O!t<!P}Pk5IhE
z`cXTFGQ^``r@<Q0*xx0<#?JE*O2Qy;;v^vq><f*xVZW)E4sua;ImZ<R&H&(GPd(};
zy<Tqyj0YMm9Vt6JBB}UImrA^O(8lFFp2Ry8-=<+bdMAT;hz<OLOzKTl21Tg{W>q8`
z7~%1RI5Oj*_Prw8K&f;(9WUF`MwdF!QE?|Am@f+;vHRb4XtLnog~~=`bxE1N&%)K0
zMJXn5+>nD0tQnx>7|tws#-LsjRHAS++62Jnc*>a|8=WKKpTmk2qbzA7s`2{5>cJ;M
z+42krs31GN<f+O9`Mg!a;%3Ki(4p1}>;oX{EIV0@(-{r{PAXWHA*Ij~-DHHzTn5<W
zI?u=?;tlkg#dK%{#+uLhaJ3%3^Jy>zWQKZYpBZ-@q*;bnN*O|e?ThkOSNmBeh{_k~
z3|EW5=qQ`eAA9@F0irVFv6ct4%!b8m^o`QVg9ly3bF)9r;SaRl7jjA)<Gjd66-@6k
zccPxdi$PJ0vvflEkL7o7(z65ENlkt6bo^h^7udcxo2zuP{DjV#b9&!N(&KF6AKqun
zQdi>e$Q_^bl;*aUBO6c~SffJ`cs!Y(?(#RRDcx}86T;4Rj+HXp1lzkwo;*OML6UE5
zm~x3yEKiEGnZx`DW}&mIMX&hB6^m)rmJoLG4K@frZr}cGjSwZ|mUwF9C{>*soJ@aG
z#V22A*G?aP3a4(3t~Yla!9nkjcsb#hwsuuV#p6>KZuxiV77GFI((QMmT}V!mCX(Qg
zo*@|~ecZK&)pW~oY@vz6;tW0o=e2Zub)i{)4y37p{=8MC{L_Cd(s4W8>L-!n4mLY9
zQS-WfN94hlIIqHkmsMyagE7+If<eOp@D>aU{-j&7wsdYzx8<qAc}0OhD@1$W;Q)6D
zemPK#6*-~B?c2G7b-qQVV9jO8&$sc#Hox%O@_b7#?w+IGl6rQ&9lpaO>{c(g-|4~N
zV5RFG$LvvJ)_mAXK>*FBu-wxnu`<^7vgBGU=77Q36g4Bnx-$?iN@PpSX-h&;#?Aoe
z7)X4W8jeAbXq4gbBOaBwE*^(a8v77aK>l1&RPpQHSvqYKqz)d~Rg8h32X<itvJnH6
zlLx8(J@FXMGS~oZ(hu$0f;BWoAcn=72o0kCd(qh%(z6RMzoA-)U+>M5bI+K@ygxdE
zsx)9})x9?)C)Ax$_1!9xaD7D+qn?2yW<L5`wrm4vFC^Hb>S62cThc$hecS3LEvJgY
z2O9otF`O5())C|Ht78PkI;oBA7%>rL<ZuhZD|B|of@*NX(4#LXs)`J%=qfc>gWn6J
zWMJCkvS85{4o_6_F<mMX8q@PW-m~dTqNZN|e=Qm0w(T@^WxD%bo7YVg!ObhV`!er3
z9`kR7OAw>JT}r`S*l~as9#NPU@yC)sdTcq`t=SX^LiA+1P4JCtdUG?$$}te#jZt1A
z&)b0Mm~Y@sY4R7kj~UML>3o9=ZBB{}nD&i92DqJV@G*%2(VS6pUFw>f3pw!w5``I&
zM|<p7a5|E8A>)u^yqo$S+jzxb85FM+h-SZGu^tAiC8A)J$_^JZJT<|wOX+M5B-D{v
z*eig~b9@IKhNA-ap{hBMR^=S={QK9h-W)u7dC>PY<or+5G9r||$l?5fr@iTjZkGsV
zP16DG7Rtx8TOQ<K1!qA%=i|9Xt_6YoXFQ)H8bLiDP$cRgACSFkhZ~-bWUP2P!nH&8
zqdTOo920|?9?KZKoO^MBbzyZiJ&rLnm7TD%n@t{a6Stx^kXtFr9C%bgVaMZ$MLy(c
zyN$rQ$^LdN!2Ru20FysMflq*XxW9e$8{xwLcbZ`1x9j2KKReeq0{_3Wsv-QoW@Grz
zo%LFT|KH`aqHh_WY8uC)e4wrG1077`Uf@4>cW;JVj^wPwGFR&Nh0erO_==E&y(E&<
zl7~tLV8-~D<wqh|OLZ?B8SbY%iTYc;qGS@4mcghUOO#PS6Z#9p>JL|@2O=`K0zyu(
zoUrs=J);0I2N`%CPOv*F&?&|r8LNi_sqTmCj|t&WrC`U1eR$l<CyOi=>l&p{g<%i0
zPT1_$38al8rx$EcwDjaunsBHREJA0+c|>K<&%`UgK(*!<IETmpRSTPIL;s^$=BF~R
z=f{ogYZaTqYAYDkwTxqBePl^%L%5dttjA<5xV6~K4cJKxn;FV#_{2$W$}Ace(-8D^
z*uqWWh~?AgISdGKi1?Ei+CDHD>MK=#etgx5X$Wzu(w=TS8Q@2{0YNRBd6(DRimh|h
zdwzWL^TU7hgPov(IgteiG3s{3;^Z_fUtLUIGjUvsR#a9m7}$CTIA>mX%_5Al=`2GN
z-%*>cQvE{2b_-DMJTDfdFX1?OpwA%9oU^cTI1%WEigDJvNM{pnGr66#`pGYUXu%I{
zCAqDPv-Qg#5V?Fud&%o@mX>q@C$&^4xXq<uDYJCcie_XJZ~|IB&v@<uWAw!=8Ky(L
zA$Eem8~K0&f$q;xd4d-4Re*9uDDTB=65x>?L{TV9Lx?RH^EsV)yV8JaY_wNs1Dag+
zlLAW>y-O;$bkED!gyy=nE~n#sUay4WfdluPmn_iqsBpX0lUej4lD}Djl5)L*GSU2O
z3NKo%T_?+Vpr{ok;2w*i^zA)*X{0xJYm5ngf&a9u{KidSA!h}*vE9K{@3nU8uTMxe
zn=Z;zgzfJ^g3fyR$`MekR#D@<g?;xoj~k8CD1u}#-yLgC3P|7#PJ_96j}wK}&7g5!
z-t&cbE4cIljClrC-AyOmHq7%u4y`WxLAe{C?qHUs?~`=yao0nlZ}DAH!o#6|fhNKq
zkZ<k0+F|pKjBIS&1jl`9LydqF*cqq$Lp$wmGw%gEm?<S3MB3H2dv$Bt3D!!XVqYq(
z^12;2OsDxA*wa6OM9*jSieGrwLr2I*^Y&J!H!pse!XiBe`qoCw#;=U*+phJ<z(-|u
zZ``AXe~4s(`OdA-1gdH*l$X!6^Hp%hj<DV9_1LHb7C{U_a5>@zLpzOKp~H{Jkw`4H
zPv`S#+27nGAA|yC`gmMi0FIt*{$r7qbSB!ov%S4@|Ngyun|z}NbGVTW&(be9%4}Y4
zzy{jL@Y)RU{@<|Z*LUvUjRuAV>1qweg@REEl6Hn>W!+?;KfM(=?zyyA!n)Cv4d~~3
zcU>}%^Xv@wa_TA(*B>C8Z{x?#CtpBCB%cmEdQFs}RsUL;nU{|NtKO3vKpWQBI|YQ;
z$xdm!j%UD^v&EF`Lhbt@LaM&SyVcA2SvFaSk?bG3e+WDi=*F?)gK&}+XBq61$eH1T
zT8>&PQnr(HAVNRk*p1;YfFMvex&uk)r;#6q^SlTU==F2JobS=S`1SMM=-a`gAK>E-
zK&gIv{hYtzzqf0?KY#h``OD`AKSL27P4D%q{pSbIe|-8@KgCtvJbLo>_0u<RpFI65
z)Pjy}CfoP7;!@u|dhzTn^_oiT#NYqphevM?0E#biw=%AuUcEi|?)jT1`>xa%FwD*5
zPL*<ui<9jwog#XOp_Tc`L<`{W-8vSKj?ap6PCK=1U-}E|rT>{t%Y1C@6fM3I^mG7q
zVM{DK$v0X&Cf(1`RRwR{$%hN~Dqa*!fYPdMWI8@6$R&-hyWk8o%I4YZ3@~qUg7;~_
zMbk?lhU0VqLI<loPKqWs7k~^4+@7VAli2Q8_*a3HdGrPg=seLot|MGYz6SF|FS`MN
zu9PI3%PmwO2H^Yr*@$-7zo6-9anare35y<pCKt0dEvxjVW97nQ@gRn}+N^^Yweids
zb+x|POSYkh+t4lhZU^4&MDOmwyL<3%JMhm50Dlp*U4LP(PAF(nnBu)Eo_A-CCvBs=
zUjAdIrmJg_R0f2+{=CMv+sP;(;p-<WLdzb3Hr*ca?eA6$Ja!}Vifz`HVx7>&#vjN2
zgo;(5%v%BL!Tzv-Y|Mo0Yc(;>I~8FWVRMfGEdTll-~m1go%yks7gFfi0#$b0d*!3P
z6|CF|Z`A1{u1dR|0+(hP19tVG1GqVD$5I-Uj+gt#Y?dFRs+0WH(A^efT5>o-+Z?p$
zPRM4F#WJ*cl&yaO!U}My(^+u=O&$PWdODjGvpT<v0?zFDS&mjT?THb+YRu3lVm`e*
z8x&*Wm+kP2@#L8V{wcTG`&0?UL)RKvl_HRqI;*t&E4H3L<~N;AlfbQ>2DaybVGW)l
zx8mWF5(M9-FWbi4n~X(7)D0a)=!<NNram!c`{}e8XO;ofQ~iK)hD7r+K#+D@3vDQ<
z4$_lL>Y)F6+kbt4UvDb$gPi$&K6x}5eV<-_yTmgL+dl)bshE=TNFJy?v?#tlB*0<(
zxX)5I3CR@|6a~6F2{qY7MiyX}ChayGXOTl&)jrFT6cO#Y>|uU%s6C1<Vh}ANmpC0}
z55}m=1wY&Vt@P9!)#X!q=_;g`ZT~i^a8+Z*VC<9MpbPn=Y>%>&S(cUcLWF#T<!-BV
z)rhY1;t7{-&lq$)Nco5$0UE%3{k+rYI(F)0kOJLp(9wLHOvfObmTU;#%X)FC{3J(P
zvSW}?=##6)wtgbtICE>VYZrmjo+MCgdL(dbZbzEB)mu~9NOfLQ6~DPdb*`1{VG}nf
zbQ#+-;(Yovb#A*Cr+~Fd+foDQ9=V|KiO$>qWyu$NDow!NA`jnC7c|}V8pOZCF_I<{
zqzh<)goSgw%^Jc~EMWL2r*rbsgCaEZNjgB2sx(3Gp&454#j^rv{0M<P16Xt-B8tJq
z>A9b<y(SS7ENS1m%`duuoE`NL*xw&#Xug9R)z#|Z`Wo21%ia3QKi5@WMwOSQGRJ0k
zVn8?uUYe=v-WRo<zFpg!FY4ZQgqk4=@UlpgDU{r4*VO3NHQ6z$eg^YR(%#tW-J@fj
z$3y;hn@)7QDCeA|@3W*_%-F8j`4(}xyi`vm7K~x%v^QQq-`wdYcks_q^`LLt>GE&w
zZohGwSL)TY`nTEqBFiSUcx8J!-&WL0rt=;7U2~kGrE_NjC`woa)q6mEcTh_ed|b-M
zC4Q_Bx&2d=vkkT-1MU?Mxa{J5iP!unpGmB)wa5zrc#<C<qjpF6-k_cyw@H$u6FID7
z2ZUohpl|R2J#rA5oskMpR+JrLw9{L3<Gu66>*s5AaiYLz%lm#-I`=1082HZJR1%@y
z%8D~W`$>VBpUsVIH5r+2=^6L#dHD>)&&T;}I5r*_0l7(0gBp(s|Fwt1vZfGqz!u7C
z3PHDQ5dwSwvTjOeqzXt_y|kwM)5)j~c3hfzbWl7J0#X?jlrMu0Pe!XtXMy~gl7vr&
zGyF3n`M-9uQ6eq5P>1(F77d2~z>W@!+una;I#=0$FHm}Sp16v}??CbrX9*Cg-c`JT
z?F%RxJf@dx;o}$^CRf|=eB5o6cWX!yihd*{I?2&UfHlH8_3*<))P!~@*QiG)^X)H5
zg;0B#mo8Pt)J-<-?0og*eIV}e=c}d;Ri>1dFHq=CMuC;497>MX)a~lFk0yH6wwD%A
zpvo|IL^WW-10$~!B!bZK2P)?fj0Y>XT(;=#P#fnJ!XM04$(riiZ}UkyTP9_e&W5L<
zB@ufw&dHDne{-2$a<+ht3&fjMJ-6z7-kqbxaUL$g@NBvsnis|U#Z)XF2cGE4DKA_R
zA}424G@_2sZ0|wfkN06*_@z2^hrFxZ#vb4$hv~$@s`h_}=55=d-|r{QfG{1pwZ(st
zAhyMk2k)HN*A1VKfc!;Dv(uamKD=umdF<)eap8^)_;{9&qEoUQCIHF?7JiUydrJ?F
z9|Ui2Lo1!+!2<!zVkGnwsMW|Gf2p-IGIFoGuBNV<&o$EFxWFa2ib>1o-41B7u;DZf
z3Equ3k6aB2!XCbO99Z6HCymo`PE(0^!cVkvE4CN2TtO{TtKhU76kDlTvGzsv7>Jz+
zolH6Qfg&@tB5bBhrFnfGa?j0WzB4m&I45Z7O^vMGZLZjg7(HkGEI*^qyRQ!TwS6Ra
z)><UIWAFQ}RGPJ0!m1m{t2G(?-+(zQuwwRmpv84Kuwt?w?A6aU-}WyCWk&WeEP|Dd
zGFU?KvCx*6Pd_APu-$7~mWwkuVv2A6MDH$OtdTm0+d$csOSoGP{t$_EP!9jCN_;6E
z`0!u%srCXSAHzvBkUdJn{;rerkouM)+<SVQk@(KQLd$lc%Up$IUMGN*hx8T^9~yP!
zmtI;8kAT3c52S4m0^b6ofCa_QdWF$sw6Rg=`zL}qdCg+oZ^B+H#gLb5)M11p-NyV~
z$-5k7aM|c~9uHH8Exa-zFTrApf6CMRcuqg22o--VCj9aUHSPptx7M$V+zej8Q5?hP
zfy}_8d|OP&B^a7{h^8KBu|P6}4-Mc871M|9n)mzIe*G8f<wNG*9wSB>tatXfSWJwJ
zDvg&-t^dH|Z0cpeBEN%;EZRHT2JGIXw?iY`Kd_i*#d)UtrmZvGG|>dtO?HQN@1&UL
z$4ibnArqTCdUo*ijcNK6R%Jj+58N_n)2M4eJDk93WDr&#wPe6wv|Okb=wH@5>Dko+
zRGJTa9X7cq7k3w9rpc0>`}oLX7@5cLg#}8DZV>$nvNQ*Zr~qY%9+=Vj@|D9|3I_kH
zw|om<_q3u|^Eo)XP3FF0Vav8oYFDe>XenG+OmCNZoS!Ua%sD8Wh;De8KzU6zI$d)O
z(l?@=_OPEE>hB{f09Qb$zsISD(d_0Pu*Rpr4BO((`ylk776-gNxB6)8YOTtgWuex<
zD7@}!#uzYPGauyPXGNI$sc4=InGUrJ3k((A)i-pEq6GWkJU%jyFW$KDZmtUNFlw6d
zK@x$#agjrwz@w&kLHeJtv>U{(Ep_D|uEGxcJLpQB4Y|@brh8r<KtfX*_f)0~WWwbM
z2NIMa3Z)<_b10v5K1XBak#*&1mkV@{VSbJfb@qTOEd~SxE$e3aXp~Kq?sag!xY1FO
zm3ZS#(J|1D?+i^u{meIzj>Y76As#hg8_0*M?qH025#G44FSqdXwQd1!tZ4oZ6+GHm
zKRXus%*3cKen^hUTfl{!*zo5?Uy&IIm+B_lojA0DFDXaX2gYurI*4^h3iH>HG#FgA
zpY1HxDX@qoH!7YH!VeUt7qP*x?_kj=GQ=di5aUZOXD?weX91aD;^w8V4M9ifTa84<
z!C6t6gs?jGMu=n%_<c4{yL|ugl&!+9361R3R$c>GRa;RqlF*3J9%1YBTrN3DZ2M>;
z`Cg+RtHh%$CUdqAX;1UZY`hOs>g6l`x*QwF4}A43J<G=pkt$pjG`vs9X+z=So9QLJ
z^H2gDLc&LOy@^Z80K(OHi7~z5Ykatyap6Z$_Sp=@893kR$l6AR5UPIxt5jUXksd3C
zy9z)Bsj4lmerY?ig37fpx79N}q|s0}amejXcmO;&ofY%>IOA{|Xm3Q3{tCPTn-Znh
z`8Y-ptgKJzs?5g;#M2*HBZ^d*4(AJrvE8s8=hE!xn*)sA=Ysoj5M-eB4}9Q0Z`Dm@
zYlCx<#dkNbIl(Fi#SbKS9MXY<s(a6neE1&6yXQ=tEjH<5#BKX18T%Tui9#o$G66k*
z#_3!Q$!rHwZCR+lG;S?WTz6ayWM26Y)z}4#SGk+CV`-y0C=-mUCi)=t&jjKM?Nwqr
z`y?B{IcOLo3y%FA5bAXKE@>pdBdNP$!B;MJLJia$&M|dDv6%1PVD)eb2%Po8261L~
zz_8i^)0q443uMFDTuU8Kq*peQV@<5INv&vE^+X|9yR|d_xR{_pM~PuhfitvF$<i8U
zeC&gX<QHV<(PF_0uc}LWJEW`l*7Yi@dGP`uzCj?)N}>%C{Rym#w);_<`{>}Z1>~5_
zs5uTR6?`cDOZxUB)qUuC+ILXuqb?JycirS2)O&{q;di1~xy?5>o5{{Q^udD%GL^(Q
ztk~GQULqlSX$szPBk!)C0;)}ynS4Qe{qR@aUo}n*529{nP({;EDx<8Q9-LsD9hyy<
zAAAQD>DBrZM3C0N5ZJbVx6{H){Lw9_ofrJ(r-cfb$NAV?-YXH~X5bt##8?JU#-fq5
z5!_$9`QthdxtVZgr9<$sIyq1h-|g1N{g!p2(+(<tNJW{KIVzpWj%rN{vy*I2IQ3{U
zB1O`x;~yD{*u22eClzNGl=;4Cp@TI|rljL(J?Kh<{Xib1=zA`W)D!m69@Se#P<?71
zrdE0%XfEqDokLrLsvBV#JKlTCTHGki+J~GXZgrD$`TLe^aYt8pl?2rS{XjWQCx1<+
zrF_$1d9Y;mQ4`5DyzV(DeKt|%KS4v}83A(pJ}1S3r{MDky2Yo<d-(N4qj|#%`F-Up
z!=eK3oPCRid}X^6!~pb_4TsUWb=TE_Gvr_9<pv-Q2-+JNT6HHcGuEZkfj}nD*RUdc
zTfTN_c+~YyZ(MZOgMXY~QX3Tg&w@3&j|z&x5*U2yhuvZ1(%$&#dW{14vtq`k3D`^Q
zrf0HryplDnQPrqv)<Ge2`vPw*+m)$F67PtsbacBDe3#Iv?eHyL>`;8hcBqG8lS!aa
zx5C^d^#1VN<I<7(pV$T8Fjfa!-MUe9s?Mv5E7q1nwDMbBJM|lSN_UkB{~W^FOI~+x
z;rjFWG0^NR*+?kPc6z5duEOt(l3SmMiRoo0?B}QB<ahaMoRsUE-xu+)k=xgx-FJBn
z+9|QOXa~S#A6djh0~>nTAoNz*MqHuBh(KDQx>XSvIee*MbSZ5bTdzv^+~Fxcgt5Rs
z6q1$-`2}=9`3kX*(2o3r@XV|A94fGRvcxJMbGyU~1BUzIQaImIIiRT(utD)d%P#nv
zMt4Y(OS+t7IOK+)uko5vU#FMydP$|1ap@(MUb@nHz>uS;?Ue}@LX6#iVXYYd-n}-F
zkgNrT8}KlCI2<-~cYTBvp8qn(fLvk0^fD-jy{;>`REW!KATAZ6pNHMxMkX!M`?GB;
zb^VY7t4SGM#ab*rs~c@yLnhyfGce_x%8ru{2?K4ndevm2t&ZlWg>C0lJl6mS@@NJS
zNbYp*#o84U%>?%wCkSqpE*yw#2@ZiJ@$t!{E=L2;Il6I4dL9?5wGW4Em}ay-*A0ax
z7}(=t7@aq$;3G+CY<3mLn{E4u9dM@Zy_K0y_N>ImpGaja=nE8a>U3vPb1|7z6(;-*
zEoz<s5lF(EVvcOlRQ)m!$OS%b(oHa5xVEW%meK*CF!WfLh8&5@{`Pc_%X(G+Ar?Oh
z<Wx9C?a#BRFFabz2nn1N>fkxW`|$)h$?>G^X*6}sak@#4N$dIoQ6AlAZPLAv=r;JW
z?`2vXAQ~|f458;*wWHTho%LsNmL1Qs^0Xc3Zh}Rxs7XU{C|+hESM}I)BW)X3=5TUt
zqbjP$NGnhTeF~%stt^9Xy183t=A>gIMqtF_-lVu_+x!Bk$v#VSnVGF<T6pL9iyJ{<
zdL7OL2WF=w*NLVW?TkoucO;e73WN}iRpIg5U#4i!QO>fUo%N&^z?7X8Jt)<LT4q5c
zD7R)x*x1N}UQ)~qY08Fr*Kt!Wk+&%YtnXAWe);pfn5SbhkGGq(a^cJF$?V9bYIkRo
zp>YdQ8-Y%B3I&PpxIl)~tw7^CB*Rk=T%F?BMW^zTbOMW)v?=4vtT+J-EcxEI6T%G#
zA#)>RY`UA~d8G91gpuJTwk%bk_^yhSGA6#Frdgu38DPLH^!G!w%jaxl!uFf^ne#0{
z74on~>lbGy=|Db8#+X12K9HMYI!X8<v=<KmF~B23gndW5mEy)FJercLkRsp=gvSet
z2ZFDI`n)q&u$GoCT`M3S!A@=5k>M7u-XUDyI!4053)`0Mbihz5U`_8lHM$*c?p;Iv
z8aOm|Ake`W(iVjmSjG9T)~2uIAqfL(3qcIoxk??Dl$yK%G$m*?&NLQa2^f1xM1@Sh
zwUVWwJc!up#c=b$PDap@B3b))#zZLCY`U0H@x+k_{7{G6yMcrOa)1s`(53$RgFZF!
zH$KjhsCva<qfdM%d?l7D8}fHTca}jx4J8F&2Ix5|f|6NUo)7IY0Rpx+h-A)a{f)dv
zHICRK464-+>CtFpNbmaNbn^b;(UmaCjS3(dMmiel7}$y-2>QfTkxe&{gJxkW9=VV@
z9IhHhHVm2+0j2TRX1-~8kjt=DGxqAV&_FSIRk#WDXu6`i-hidPtNWt*r;Y)cXk(aP
z#^=s@-6H9?mOAK04&<!$Xh7Yn#AMs>Q6q;3LSXROuyQN1&9c#An1S3k98y$GlKGrY
zN#FL~I&r3(Y(<BwK#o;q5BD>g7`_#6kc*o_k$viX8tHUxd9}F@HF}U3l`!=kpwDkZ
z^Af;(7Ia#7uys@2ES9ej%7g4T^@6raS8(E*46|{&Q-|W(_~B82X0-x|$MvdMQduF9
zDG35AZB+HJ-qNsr_9`MItHS1Nc415)*gDmT=tETNviU{wZ*Ske{^8Bjw{M|sQfg>d
zY0m!8{ln%L;`;J_F?&DGHivLLm|?!DJG~wHps@{4KvG@|D5#+=`fsx=9f_$=d)P^K
zws!6$|Gs$tK281x#j<fKSEQsN8j)^<k@@@Q2gwVNn<r%!$0Xu-7w3@&XL38iPzE1~
z2w$mR!8kvoIFH?A+)YkHvf~sD=lBUq;GkVA)15)w1^{bI;}|Bcckf<@?of8%2RG_!
z4|b-jYHym_+gn?4?a8%muWWj<M$;TOjXO|ne!9AO>~hq1o$#}C`bSJ=_F=0}1^UT0
z^s=8|IEa37r<>gECwIHay?%19n|#?%zU(Gn^^>o<$^CwEzngsBPrmLZk1+gMH~AL+
zK<&ry2dY1TKT!WE`~d*Z;157Zx#WOL4!PurOJ-d17)zoY$sIf;1J^^4E?QgLJ9qBh
z`|_*%UqAZx@sp>|T1UPVj$wf40_6_}$)A(0%V*~Ej{V%0?_1;_dG`o?CF^Qs|Ik|P
zs0ydK(w7}qBQGhM1o{VIwd^15^B$)rr=KVO=fM9=13ZSFyv7?OjL#}-dY;ZCr6C4i
zHOC_SFq6DrbXzr_9d3zj`M<RS221tf{axe$`fx9#`_cKLkJt($BosMB*xN@(h)rLa
z6TwNf)K0b3pjzrqwN%>oJ;RHBSN5)yO$bbU)-X}bwfa|flwV&n%5Z$&e1mfo4ksLM
zIEG63yFvMZEq|}B{Fgy_GY4Oz*@`dsRbA!#M@OB8S&7X<XPTTtB!}_zG$nf;*m4re
z?i*UAhskj}MW_^w+9IY{?VcOFJf_?*g!TCTA@0OJ>^FO9a;~0cfRt#6%bS9Koam1M
z{-93bmcTx#|Cv?58_M<F4^Q8|c?!*M{-5?~IZhvbJiQovJT1>Vzx>kv<(Kk{_Tk3u
zUiQl`qodoM_QU=tJLx<;gb&@L+xF9+>fS;5n%C_=bslyeBJ5v&>HKjsn4NOGGdmef
z+Na&5MBWrfCBaBrj)MVn!`z(XAY>&j#-vNBT-p<)Nf_633xlm}@6ZB`@wn%}SdRD}
zz5oUN8veXT20>xS?GhXww~+-Lx9`)xcRNQB4}p2J{XY--U)!}WscT=dnI<~PLeI+j
z-T@c!J==;qc8|JrhyLBJcI;x{I(9)(7j2xq6ZEsNa}Qhv#0nFi(h<iC==UISmZvb4
zFcSWxV&?_M-^%4-;2*BS0CgOT?oJqp4tjxVLJZ&q1HQnBKD)t}+k44H#c&(G#e-gC
zd;>r0CMPgx;E`S9^GP}`q7l{))CCqip_r5~FbZ%1kKe#J9wuMHUfSyH2Ej5<8lj+q
zWJW*$#!jWr(EdhpqTlaE{f80lz^b%EG}2J9KxAy3F65TI89<67z@E^TlbSCB`ZB2b
z5=G^c`Lp{h3iMY~0u_~L83F?%XWdO1KZS0f?J;s#rFYBLs~0c7#X~vQlN6p^@EQPR
z-iJ^Eux>|Om^Zj`pWpg+rRFJOcoRO@GO+i)++wl1vRsF!C~0>&-Vgj8$J-2bVUzYT
zNN5Cp7{!0$X4rp4Q-P)Ka)3AnNFGr8aGU<!IdUKS_)&o3yAI`Z1(CT^Awjf_BMNH#
zA0}<x>D@#N)l-XzScEWypb(4;S^64M7*WEgALl_o&O6l&+&+!w@D#}99a^C~OgrIE
zwOTCv3DUv>GsEj;m)VfMJDg0-p2FvIZ{cy)7_E?y7bFr+LhPMf5qCi*K`TEv)!fD+
zh?^7l5F305e&W}iBfE{JD3in6J4bwYv7dJM(_Q<Cd$cX`D=d?jV9&7)zqC`J^3$D4
z4jWUsJdY~-HLa-}6dczUtcJq_$?+U<o}W(eX<MHL__U)>Ak(GBwBH<z=Xgzfj;;hJ
zMyA3U^%RuaKP9=I(F%XwrYii&_L^TIIo+c=@_0gz+xkdM6Z%)(fRThpICS2KLteUx
zy6Z6`)lT@(Yj|8mIuVmxey=#BvSUxgQk5a!p{&>b<A>9$Zt}+u<<+0?&zS$vQ5w!u
zSDkk%JYw;h(w%peW3ZkJE<x}erL*_sOP~BFTDp_*IX(W2w&?6;pZpzu55^0A_z50P
zX8ij{_<fd*^2HfH|A0;e=pDq5a9VC<^7{aO7i0dtkG}=Px7bd~zaL{4p!Nwr!nwMI
z9V+?p4L(lz_kX}|n6-Z_id??J>AQ8B^Y7OPv*6#a;CCwRz9eIQ{{1};UVguT-^*+~
zmMYJ%+tSeA(0k*QfBzLh&E89c-(e}~_;cy0bo}4p@#3___V!}Tf+-GI|3JOUhuPmV
zD0aMceE;~kB@ssF=(&0EbWUH=Y%uytzWig6;;Um<6keRAvo~1qD|kD)EARig_?e-)
zqJu0yA$a$W?~R7?E-(MFpqIzl-J#SSjML$Jc(>&qCx6REug(he^}v#Y;Yjd-tLnpf
zet^-FTldqQLAE2cUtgf>M0#&0-H}NeEN0{7MNy1s<_Guh%ixCT_j7`H@A&I1mDc~3
z&gMTaN*&*pzAlCbDNWC4=gY6RW&MWxuc$*`9pBs1HxtZdlFbP4mv_IumyO()G9SO^
z*}Sh4GMwdSC5E_ejfUHI@95iQItixzlEB>`$di1(KX7kO4!)nf#sR|czTDEcKcP=o
zEBzY(s|A04Mjg|E!HY_n_owOm9AS+HUwx^t&eD@-=tu#rZf&`C5AySjLEgLf<zPp<
zyU!U9U<CJvuBH9qQ|#f_U*Fjo%0MrF9tlKOs>Fpy6#x3`FTYCl<#*i3{o}##zBcj$
zP0HQ-cSf!|Kk$fmj_<;M^&O8ec=sO}IY*7Q<ykT5YnYeO9ez1_G@ZWT_1eDswSQT@
zUsA&Zw>qQzjNAS4Yy7W!$qffDi_wYT#&-7gmI64=e;&+o+603g{ExgI@4wPbd3>B6
z%M=|KKbP~L9^oYI?A#x?(u=>9Iq%jj2l*s@Qx5hE!Y}-<yge<-xkA403Bkz$@3_%d
zx*QI#Mk#D5dC7ylzlHymV!S$T72)~C1)|mH_*jvGXT#PyEhgFW`wOKT?(JOX{mZWh
zLL=T_C~ZQP;ppD*-q5{0!Li*%l$2@6&-a(IcNC)H^YK>p<$b9-PS2lxKSMnGGW+s4
zwJ-l(o-%-~<9qu4V!}iGYIy7r`XwOh@age!A$v7dGWDOd!0BjoKl@VN2&FKC|4-S(
znIW0~$<s|!2kV`VWK93bGd{Y5|J9<@pRczvz$5pnQc7oX@a0f&{XcbsL5H_=gZ-y&
zu$`^JPU>C?rr-Z+nCTS#r);sWzPf+^>#y}4w;a4H=a0s`Pqv14mErv-4-Nj4NvFs8
zStdB^UvOW5OpNZx42<7A<2l*VDRuP7qWf9;n#P8hr~rSoJnPFZha(-|kJLR~v>$~$
z4bpq}bozdrE@o3?-e2GOYHK7!=0}~YJHx@9uVhw#WMcHy;LH0ec>GvSXKzlp=rK@N
zdHWwsv_{)X1Aipq!?^v`_PzUpb7%Qzf~=j1#n;<ke<kBNdov&YoSrdfJ=S$O%gg!l
zb*a2HlYX5Q!(m#!k+%bZJxR~gUkgWCMwmHKKkz0M*=dAf+p)~(_?}KYl6=|7I>q>E
z^z8uWcW^)3k=gT1Aibw0>D|vvW$ya7JoTd#W?5R9zRDc!$+GOeE*idP%m-fZ^?mn}
zrZqi=qM3W=Cl(mlmXh#kI!%}9#nUNI%JE1hW%}LUri<fao{@AQcs$K!3&N87_wERi
z>7E*H4Fx5p;{~qAXq0Y^WG1J@#rHG8|I8t+;uB7tPV&!#4Aw}$eEH>_JGzHto;)hQ
zE|-H@K>`l)LFI(6m#>%=Zh!f;E_?~(=cNck_Xl_HZOiE0?oaP;eYK-yC!?j5J-(aX
z{Zg89L?OFBxc8O5D^EdU<z0MFC%ep_O>i%!TlaQ$M*0qO=;7RL;eX|&At{;69&ep5
z(|eA9Dvg0TQsSm0#=I&g#f7p)!4A9SKq`}$N{Q}%d4ES4%AAPr2%eQA%(GX5*7E$c
zoa2gsba6ZqM4K0Q8O*%t&Rv-j-qEniBdMv<1fcDX&d|SqH>Vv70;sHn=j@LD<E!$l
zc&}o!@*hVv6%k%s$R<dMM6$qdg6T{tj)hfk@H_Gv39`7?WI&fAgFQUXYl^{v&M1Mq
z$**11KNs--$@|?pO>U4g-Rg7;)Ot_eOImfG+?@dY$^d=^0P_ICuLeRwigWsY_^US+
zoiN}Yo3Li6CWl@hzCVf#Ag~xYl|7%#b@+z`rflE-Qj6*Y9!}m<3a9rJ`SnY_pL~Xz
zdw9NY9{JZ%MY*AX^mvTZM{U|A#22xiic|$u(v6#*$b({PBbU(Y-h7r$N*Go~zG8=b
zwT=Hfs?#q}9lY`C&5IX!g5i9WM`1+sKmXY%XVO49lLpF}G*r&0$qHYPK7`MAj{L3K
zRj4X>^Ve_n-f4C+NFUnUCVx%TaC_A7TCbZn*S>Fprkgc|+{HCCg`!SgUtjnY>kDU*
z8PYkc^S)B#W-a1<)gqpw1`$mX#1_JuLMZw%1W{3)sOFHK2K;nSR-4BF7~DpUqckzo
zCT0$J$ANOi?`rWAEq)ReAK2nf4LZ=`gQ$2#B{=gacjEDFaGfUbWDsfIoS6(JgA(;*
zs0t%x7-C@ij~~u^Gg5G!_fF*R;Hp+3Mk+DX6xP?_Vv&i+yij|FbBv?D)!W*-vwdgl
zK86m(Yx$kt*BDH}rQA3N!qnR$!<D-oEYRD63EjYognF8xuQ-e0-rc%;kDzW=p|;s#
zXiIEi@JE+gu)Bi7h)xUCmbGD&+g(yjc9VH{4@If|3Rq2;9xT?I1<3<XD&J3n?}N(s
zK@&Ql+I(KLF?|f$lC^EM9c-3v**YDMHB#fGzQzgFIPo<GuEwCg#(-)Jd=0=s>T{~)
zsTjJ*^6O4O^W4;)6{GL=U*O{An932}+4SmxXA$SJj#R>w;+lOZtaGwYxW!*@Yq2l5
zk*?+l1iZk@lYX+@F#wJ3+oaQG{Wk*II&!a0<khx+HIP?3N5&q{Ux`sB`*Tb*U(Abm
zUp|byN2w6ru6?+oOQSwr!&rE@E?lRbPo|5x(fA|%{4gU6tP}coK>w!1gS^9Tc>l&g
z0xKVS<?NgHk~>BQ(Ke_IUDloG1K!yU^kL^HY`7kF0Gesj9$_K_xpP!?V5`4y;aR3y
z-G({XzVZvJ&4}4lD7;i=Tz=HaDnXWOzBQUv0<#5Nw$fa1TPL<P<h=Tr%q}aQt9I4R
zoH~=w;+ShzO^>NuolP!hH`aWPwwS*N^a1IDq>d44RIsyZUFAWr$3+annXbt|VKaD1
z(Z35<C2TA(At&RG^T6KsJRMVpgIl-G{c@b(Q1L^%-T;@rg~gFznDl`&gNm+kYdw8#
zhe}AOthLr4+;py#)-YRp<hgt@2<KfAx+{`7nPA1JFzk^l=X)MmO$kJA!L=HqFLy0O
zcVl=BL|5)Qh-dj_n@o|r$wkJon#_I~M%zO?uC~<zo-JvDZ+O#8)q;<>J1%yjvdB%i
zQNr>IO!tfS8hv>i6~B-a+ta}R)Sp>~+r(9ez+B^+*x`2j0xEOvr47tBe1Xxw&=e^}
z38%dczo<l~Lvcw+pxSbfE_M>JGBRy%6XU~^9SE?{$`}0VHkSSZdonZjAyVU{TI0mj
zIH}ecRBH@OjX|{rPREo>qS(>Keos4GJPqBac~=a#>m4ml^U@qijI<{>vl?COzO$9x
z`>vo0|DJc&=mZmu82!;WpJ;ho2W56PTREmxa^SdI+Sy&%WCrKvS=&lsp+%g7=&jEH
zwwR?+wN>y>X4#TrVYJr*E=NG}@09f5&>ZGQ-0I!IkZbUCLQnU;md61-Zo6PRTwza&
z?nxQSvaqV7#WelL;!`K$_Vp7n$xg_@zk1k>;j+ZJL+2d$9SEKJ_9T!y_3dC)2gvdu
zn?wT?QQTndj*8@~fT2;tdayRG2UezY^!>`N1-HFc*Rq?yTcdkoTI20%+$#ghnb6b%
z36DP%ZTW3ho&{1|Ww$$N#-_dez#qFPGvGhdt_O#~X~n~*>jbE-XTe=P-*i0_?W#Fb
z*NLEAHIKrG<Y!$ZBKQxq<RmaOW*T($Sk`s2ZP!Z>U74gV?_)Xznjkkc3XN<NxER$3
zdd|z&6vA-wYW7!56Piutnp4Z?_I4TBAE%S^RBI$3<ykA5v!=^N#6qtmf3A~k0~wjh
z^)xkkJ6?Gw+a5BMus=tX9lfcLcJioI6ZBi%25S?c((LJ^gupuSi`})VONTqrb7N(n
zXb69ObSb>?_Xkp8aOyGAO~}uI|C#z+;9TcW!+eH+k5+y)rLg1JvDKpu_g^ETbu_&V
zS}?jz>XISVE(shDzQf!EkAK_JtN^qA64e5c5a{}2y=v=DSdbJ*jp*X3>p5zTw)Q<?
zEWpq^J#)rzL9$%nq5-EfIBZ>F?BXT<GoTbvKjou2<qyKnEHDR33)o(XsWH4e7A-&5
zXQJb(KX#Al@cjwVE`D`XOP44l^CKTcP@>_sg%0ZlhCWgZgO+pP^$A)eEVVnuXl`V2
zibhwrtu4*jl9m*#p@oi<uNL$FSYSM0`H0c4V<<>vt8d3eF|EGEOTWrHpjGi(lUhNB
z28?$&%LiHQ_}(5%fP^r{#9Lxs)r>1|5!6%?ozX=V`G!!!wOd4<C$BX^3DR%-;jwz@
zh98c_-mu#7a7}`&Ifx}DoCQyWqKv-vxk~y{MMQlmA=p}l!yoDaNhJ$uttl^S=iDyI
zib<f0v^)aC!4>*p01?4Tqqg&?dUtCp*4K5FL6(%DVQo-NfXY+65wC&?V~<qU&u@m7
zxif5;;3LL;PC_(C)n(}<%wsDEXkz+}@qn<CNq&aryFlN@%erQwah>L)>=VaDxAnir
zs2sV$aMI~4{D|a6?p;3esPQiQeU?o%P?84A)QHy@!2sW1q)W=*usAslV^yu1CYx{w
zxPkMPoy^CNF>#O&(C6|ZK8J6;m$aLnVIu4K1BtS1S)Bde9v66E^*KW%F!aNI71k^M
zBvf7lOYgZ~q{BDYJwxmyr*h<0;OO}8`>$U1xGju7AXWWE>oK*&arE6lIWU7j^ND$G
zxx!9xwbgNMDr1oGx^X&PrE9A+ZFN1ssutUQY7&UJ0Jq+rpe>OKZJ#{p(scbI`a$)$
zX>7ETEa!t<gRF?OX|m90B|DZCHE|lFn&aYRduv4%lUv6}(tL?#3sX#MI4_dZVm$J*
z&2d0R`SEc^HV_i@_?Yr|NFL0It4_fudIz~gbrcX1X+bVjJ!CPb=UyZL>6ybPY?LM9
zaXQGxr4;y!BzCKBr{|J$CUJ69pG6f$ILgZ@h(ub>$M!|^_{e`Sb`i&7gXSxhHr;Wg
z4CGcLx$@<g6YpV=9Qst-!3MtAOtb{LF~f%S32Ko*t(qOmCzlW1I;=50QYD-ptWQpR
zKHYmTS%b_i*(j{ZnYw~n(}Gz%AqZx_b-<}ghMmtR?o-KGv#K2`H7>GShP<3RtV6E|
z-~dC;IO4k%F65Q$cZ|IU!T}&}dQI2N+R9Y5T`AFpbh!s%tWO6i4&x>rYHhW4k$p`t
zraQClQ8omYG)~B*iuc%-<3m;}Af#MWc^q?3vkCAwbCEVF<{D$w#hA>-b5z&5PEt<}
z02nGWC?(RxX+}$e334%e9Y$585Q96qNTr)G)<*+!^lTtID(3H8x6KqlW5ktZwX>u=
z!)J~y1dpeSlS~EDU5e#f4)L6q9|Ladc*1Lmv-A>C+uqRAk91ISPY$<^m=tv6;@*D=
zdWsPdrC=CNU0e7j+0Hg76otNl!DY9%?**62+Dl9~={w)53m>Sf0qZtgpich@zOY!v
z=(XE`3nxzm0Fik=Y=YbIu?Jz+f5KH20ZHPIOLA5?SI!Dxxwto&#q_>^^!K+vK6>%P
z)2?4>?IQ^rXLQ{J+XzGa<i3@Ba*T2OmK4O2qRK5`d6&RZUiOmLXmfy#q%R4>&!Fhp
z0^`;a$9|HZV3bh&kX}|lxHc|wK$x@iJyUT}<9N{n1-*-2vR}{zb(R7`XOe6M8_i2>
z9=nIgl_q*{5k;G};#!**&+<#y6&TetCC6tV7&}|hj*UVcKar1n++15%3Mv1#ng<2J
z1~#@e2Ej2LmS?_37aG&>1GW_}0De$}>(<X`-}I<kKex7snoopwBGO!!>5fvIxnU{3
zgMox50+>PRS{abp+bRYJGm_5o`RUosn4GEhzl`pBMrWq$^D(;`3lNTVDvYR<yzf0k
zH6)g}J%P#^=pY$6o4Rc^z;as!XrC+E>G;$V*u%qZx*WRG#ZXXKb^G2?k8;9~Kw9H|
zkbws;E5<swkJ(=hXQ&CPSCOJP@HQt*Ynr&)d)b!JzH>^aFuuV`#vl^&X7UX43}*>u
zd_#HS43p1}n4khKql_U14=@!43FiY&Fi%KvoX_ye;i3>kWBNW2_N+06CphXcRTpJ@
zEK(S*e+OtCFYb<TRba6ELfI@(!svyTP>wA$1^WH`80k1C)>WcE&VdQ+^zNxdLOp>~
zW8GYY0v3RpWW0e8M<T|FHfY;)SL5&x^?C;947QmBi$I8hvye=5qB#{S0vC+27EtAc
zOEu%1BGsc=iQAh=BAiSonMB4^6k2sA3o{sK#J&$6xucu3KtaFq1dG-Paq3lOD8PZT
z*$HOZ!co7Pi5mN6=ivrbxX<VsW}qm0PWM;?=S8{%RA~Y-=C3OuP=bzz`ecz1*N(E(
zNlxj^c!LaQ8D3OiDE`iFRGd|@(>Y%&)K{pa8g_|gCdDWVJ}B3CPuYqLJCPc3U_{If
zH!P;m7C@qu=hm0PKl*!SC>MK2i0=#hp%l)T^+Q5kl7otd<^*y*5f>Kk<pOf}WH-5e
zJCANmtIjUiGU}q>&*A$cVk!E&cH*j=Q2HL;s-u!>Ruq8CB~FCka#_uzOP}j)4+TDL
zhPInh1GVG8RytK%snzOe&6sHXD>9>Gqw8{`xb%$`3)8m-qr1sl+*3L1{Ls?KCm4v6
zn@EA^77dSI<Y%zerT_M}JFTF&zk|E3=uiv&+m~N{8GLaED(3;FAF}g&m{HcQH`r^m
zoWq1R*(GP9kl%8G2d*?ns*9@DCsEBX{Y%Da6srx=VT-OARa9x66|mwM=GE)b`5h26
z^J+K-USOW*#bS8Mi9e&41dCq<@oX_iwT(}BELpFA`9tfwY<!*pZ%UJw*&@TsPWJ{M
z9?f!$=Yigm<wgl|)bTHWaE<Z>&i0Of!3nloEQk2s;cdZp8K>*q?)mZ;nWpfhw9Y2X
zAa(l`>275r>Fu`_Txt*Jm;TIxOBh~P>yaqJ!cG-*fOl(y^|h)XZwhQ!0YhTyBThBh
zx@?7?Koa1?qFrMkBD54}(^ncyq2eVF)+ms_NZijS?pBB{VQZEJ1@bxk|51sF_H_4{
z5aE0ToqQ+D7bj3ECXdIg4~oB_J7Oi^IDZ*0PVz~0SHak(Fk=|;y;`XhRa`AKqK{R8
zD2cy-vNhl^b;cvQ0F_*+<*Ug-F|Ex2<Zfdv=?qqs6F7TXx;jmP=(<%#AT|;e(Qk*$
zm5ywjZ{UY@oX{~WEWk&ju-H1C3VO3CmhjwM+>GOhrmf#~;BFbN9eu#znkPXe!RrA!
znQ^^2eFHQ<<5LnI1xD^Rp0Zb}4h(*$6H3I*KsT{$Pe7287$_Sh7hq-a@nWp%;sS+>
zbS6#>3+xvi&z$5drp~DI)nt3K#RSuoYXi@Zy#@x3XvG3fH*f@nj^voA6Te9ffgok@
z*fmFeV0L_r5?%7`Qu|4@1iTw1$}HFjCno~&Ck3%59m2T~C$pejMd|n=1qpRArMn)C
z%+62**3-)rEkF9f%U|Yhu-JUoZYj6!rL$q3p$|%JT{ZI1Bn=4~J7?*LS1Xok=x`BE
zDldVfLabmz8vxU{+C7!fZXtR>6P6`RE)Xet4He1C<uzN6Ect1E3X=$gP1cJbjrfjC
zuL=F}llqD)roBbAe^X<OP~6J{L0t!CmI>N<Tb8<BDD0<aQ|Pd$#@Zk)BOVY=f%uHd
zF*m6zJA(&s>Wd&d&48-*_*E&h>Uy?Z(Jzk1Pv|217$J7;(7UGT=*UA=_#gv(qM80V
zqf!sGsg@}c)|HGxGyxzbyv6%T?5pEUa-iaceeD*dZ93TvZh{^uOg~Y1=@3H|9AvRE
z#ES$b4P7NUP}bH%%MVxx+`YU4ZFxi4S2Hpr(8dqVV2%O<6}49MeLloN+F;igvs}!@
zkTJV!ovs<#f$wwO(9#lT9Xhnh{X(jPw-o6l85M$*OlN7R&e$0DjqGk5k<0eQT@1#N
zkzUew(*^?v_R)zGC%MZ-xmyfoXt!EcaDA_eQimQ}qXc8<Iw)!&Hk#;E63PjO3ojqg
zH<f|P?LntGYn!^V1==NUO@RdI&CI+YTMcjTz5h)x9cq@{kS48~_mG9L%DGlwn2d#3
zki(i&6>PfmxzcVpi&1L6!S0cQVQ~JP@~3=$+HMt-7CT{E3(7h}Nj`#Vz%hzbQ)3=z
z&J!)Y`H^D-zxB0j53e`n#0lyqhYh;HZc?Z0led8a??|$e)Y{)h^;a9;vhL8BH!kMI
z>vS|C8#l8lr~1xYZKA#Gmcz{%pJV-tK{21BZJ~cN&W`7OV>A#LuZgyjl)j;Ql9l$6
zRx%uNFgdFSOotw0Y0Ne<!B~sq;}Qe;*!7g;_TkGx1}Cyd^Z(3dh5sO`cDW+N%P;C3
z%m;`+>5TY0#vENH?ZI*i<O7K9V2Ssln|O6gvZJ1l9f*zO9qMu3_4!u0#LEMGL9!}{
zxIk>>&??t1c(qW1>`etYlg`LOqe1~VZ|@MnqjoGfn5xMzog09EDYL9D0}iQ<el0gy
zp$|W%0DAN8y?bAps&MSik~_Vvo|?CQAy?ZpV<p;gV%J)3ZinN1>K3dz-H!lMSqnTv
zF$@rwIW^8MC$7X4Tq8y@j9E?tw0G;PyG39buidrE37m6C$3t8kHcF{w^O4yzb=bzb
zA+poQ6fv$S9JOCfXyP7$s2x?oue4R7_c&88NC}NeWb9jMp#8R@fN{1t+Kr$diS#S$
z@u^Ac)NP(CH&v`7x^_lJDaK+n2@>(eD}f9v;?-v|ZE-uufoRvw^Z8ihANtu3q&sQd
z2|$%zg`1jfgIH!FD?2w)*(HYgYK0|%LT)k@RPyOe+bh&m=;>XX;6w=M-5Tp?H%d14
z3z2Tlh~f2M`Q(k*Us!Ss`@z4yXWr+t87_I4{St?`Kc5xv6;-!tJ_)k4j1j+%^iFs6
zk|X2Ue{VK+`1*Af4h`KQg%xdoLc;+v31fq5vScX5Vge3(fPyUHo&jITY1^{RW|u@<
zwp~bGp^|~`rs;T9>N!wkOeZfi7<HNno#3o|xH41!YxE`^gA_@@X;I4X^EaFoW%)=x
zs=>KaHlwBvJC3^G(F_qNT(p6_*L9&A1PT-7|Jmw&b+6N^RB;ooy6UTXPYF>Y@ExKM
z>cqPd8QsBdb3G)Jm1@=lX;oz|_sP|XEUf5rgNsQdM>Ki#tSi9|GQgj#MY*f0U(;hm
zicaXlqX-yz_E11Ohe6i~#5_w+fV@Uva4ElS`iSJXb*&c;>zC_2aAf+{0^!i=!<z0;
z5e~N+=55_6ilBAtC0DkTb_~1AVxKV@AUpI;YAn2=r<$+%@b=heOT;=T0J9W~w{f!q
z4P9y~bF*DGoOp_7oVeY{CgAzYXU|_gKls^O0<5&Q_o<rgovD+--{$3$;%t90<y+Qv
zr=N)LOyHCtH_jI@1;qu=t<wm$jNkF77%osJ85fD~jIZkzoTFcp^Uup-l(k32*-N?*
z`tIQS7wjG?ml&OzcieHj<9Cr11we1=U^+(=DFZ{`U&a|a^lIKeO=0YBiei4`@7Y}o
z3I{loFWBi})b7d!yDwVldpu9d(177@kidiojg3=|$0Dk1Qjng3C<Gi5@BrCRdIIm^
z&|5fbrn*_Ti6W8me4k$K;~i+5ZbE;wj<v~0@09FTLi*g50jb*7Ipg|;pq@UT(6zI3
z3EYj%8C<LNHVpv~8~)Q*L=(JDkoDYu<6FpA$L-di0Ol<UFcX@N`^m$sUHLyr^E!e<
z9XZ{)NJmjO+TjaI-GWhECLzKdhLd!(+Z+HaYQPVn#*scK9EK=_J%k>ls1T-Q#lFgw
zL9l-4a=pJ#MV@5CajMCWA7C?5p;uf?fSt(hR)eD-^X#G*H=}KI6K^e4<BP3jV^oTf
z$YEgQBNeyV!H($ca$YEf6@_k8Yg+c22HBl_tT~+ta#a-F@fYem$XVKU`?XZohG}ui
z+8OMsMS*&Pm5bx!{PLk0nqxUZBu2J-$Gcsm5v~laKEpt);2#f@)&{D|<*}~@pP`)-
zn>F1HWB9t+z`dk%;;oyw8;9`aNH^QFagoY)!??3c^7`ZU5sdcYhzwr0EZsv;JtANj
z$c7(relg$-Kh0b)DS078&K1X`(XKSF(r%E+5kG`0y(lw2WW1(9wlBSx-qQbMwQYch
zK<<bYAFxJO_ClNNcX4b>{6R8Z`<AGxF^6<pehX#S{naZyN2oKN3k>Fl#15>foJIk0
zi&SGWCovPG0L8BW#G^65SPsy<MjyUM8y$L(lqy)WhK*9x2|<<1fMzFt_B114ap~j+
z$suJBnyh=sTA`ic-1zQvdh*R?Ln;<PhOw~LL-B%ts{QXneSvA8`U!}A0M-x8K>NT-
zjlXwAy8&X;o;FdfgBu3Mf)VIkUUPhR2?*oZmBp%d48EIy%*$BgHX6c{ayozR&CfL{
zx0DRf{TZ(h61Q(rrv`N6@ff{+-rzNd-ZfmhLG_08_3w1cJLFAf8Vw5ltc74}`GvH$
zBSD5QoP;ixxQeBezoLyANQ|VSZ<RD%FbX(=<P#7#;A}q2(6{HD?228QchpFx!A3YI
zyfd4D^NQQOz>2^Cy!sxv>YEKb=Z*9t+$ZP65OsTaIsCefg9U|z!&iF<;H_hJjo&c3
zGZ2wl6Y5P1#SH32Y>AOM#1y74IL$cGO@@mZ$`r9pAEG$*&h9Fa04ki5VFi(V>FD?^
zVFFbHYJ0h#|C4N+{K0br-nMM|IzD5S+(<2-?BWrZPh!;uuc_!&1;j=I00uQ>h#@(o
zdF&?Dp<ePvCjQ2~SFY5?odASK`bMv9&1JPFGpM*Cyj6)5Dai-wJ;t&^?iQ{T;)I)g
zhYQR#H%vqP=C*5so;B$ub4^=ZUitE;K5%1A3cpKnAmgZYZA`@}(}d9$x$Q5MEb-%J
z6DDeS<z)zS2{4x)rgYE&mFH%t^}(14waK<Gn*q8iYS*x~t}35Z1UPl3ocIiz7Y?8E
zJRN^Sihu|HAOokbpTer}=DVP_EH-7=Wr1hU81bQ;aO%Tpy7!S(Hq?PQ4uCin9g8hK
zi+#MSXHGUMcFF8A?f=Q(jKi9!%y%}xXUL*rCZ)|b@+nfPiytr<9uY1QzY*%~U_`M>
z-I6v^FgNDihN`R#tEVp^{6<1k167ntYl004pIsMX!LrLM(5oMKFu|rb3rN6}2vng}
zzX-U~Fqo_2xk~;{H4u)gr{%gHV3%yZ6~)YW-A-8pC>N}Q%3oTYri|{EYIZG6ln1|q
z-56m@s#47t(oOAqZHm=oz#!5_A#Beb9YJNJp?j1VV2dL4Z|#b)MOKdU$$Vp!m#D?u
z0I6lZLAM%13jTDN<IPr$DDyo#+7g{xDaLa?#Q}}<p(9)Tk_Q&PO}$;T`yld6Ks0wF
zq8W<(HxM_@Kw4(w=oQ?b3$?;}4Jca1m?_dyh?aIaL#Pc%T2^o~gsX_z0C;Fwlg><)
zTXl7<x^8`Z0G%4)!GbWHr&ewwuMj{s6x<?y^BY94-y;A0E2JAGvo^tk5>>%HZbLE$
z>+0L`W>a8HY7u(u+rI0Y1A1y!&(V6K65cUi7PN+p;(|IP?nHfy!3c#*>L{lI5@hlr
zmbg!NX>}R~6$i4kjzLIXmW!<1y!++7uU$PcvKEmAqZ-Hv2MY`sqNLavlA(s$%pwLq
zNMt8ynNG0uZtS`UJDutQNqs!rPL@4ITHinv(>)e`F&ilY1+!)Q3y<MEpSoi5>p^V+
zH`QM7swow0k#N!3z1IoOrca$tjg~kf9M#*H__WP0j*HnaBdC?Pw5!9D`N3>KDG>|;
zh#wj&)6stqqq^~JJLT5KB5bYSYq$vl;Bd$%F}!`vsarCwYL^49=KK86DXNI8>1Ef)
z<h;m7mW55Ncbx}|ShH>DI=kY17hxwm-nsShusW5hKZVQ7HT9SkRwN~)s7}gY?491}
ziXL#IO*JnXJD_c9$TwP3IkEQmF>s-u6vFs%VF&2_k4NNUVo*XHEy$2V?pP!+5bk)f
z>B0A10ehCd*8qIn|MR@$s4s*3<OBu7vOwn8DwAwN%ar7ERWtqahhZ^8k@%NC$Zc6q
z!0xYU^(I8_&b_bhDM^qs5|0#Bz#h5C2l$pPU?@WPo+sEV3F|8DCGY<D!7k+0^zz+q
zO?h2HSDaqB(pR3I$=cN)tcePGlvBYS1{I#nv6#jCYQYOfZVi&Vu{L31Q@3oV!r{A#
zvfT-b=-il&XaSy!`6Zf{9w=#Q`?fUwUi>BwlU=7S4I*4Cp?#9g0U67r<okBIrO{A3
za?K3F1K*(M6SRLMedCL~oMY?-B9abmVL;g!Z@7AA#Xs}$IPDd)lg(_h@x%V+s2G-;
zKV^f>N3Wl6nyZY>805e0r^nfN`F2D-gPr!4`}0=1xZ<{6Bz-Pd22fwQ@Ih^*<n4~V
zmoL%j(ODe?`u6#38Oo+67Lg*_i3fskU63)yHYkb{dUs)b5g&9c!Cb5*P#(1QI-9b8
z8vACkM-9Vtw~#$=(pS@G<6>!px44m5!#_m!x+w}St1HGBffff%FM9F%wOey?kfqDk
zO5{sdjm?N}P*d)uhv|HHnzS=38zNKBCkv$FC+TcN5!^s<%h2?&YU&Wq8g7VoC%gqa
zAVQ5i0I0OG1P&WBQLh|qAoX|g-tC3Vt0?GO5J3zhxe##TLQoWUHb@zaCKA&Lnk+^2
z#79)&UeMM%xx{`)f~!h6PCz8kD(Zxl#g7K|2*z}V*RYR?ew5gFN^BImH=SnaUjfVu
z{S8y>2|1k+WZyc+1*1u^S19O(q*f%85i8clDejet>%kI(=P*O%NY`HwxyjhK5GH1r
zV#o#@tTXGJK>c^fuu}z3Rt!u8tfBZ?wCC~u{w6N#TaBA;gvEU^ui&Xc+0e`7FtL&f
zq1SkugD#9e0BolKsk3b01kTQ)K#r{->$R9~v`7RL{l!Pq10x1XCIxG<5Sc23N{P8#
zb-IiUY@JRY+MEBU{mU<-+a36~M?W4;FaNk1q)Ai=50l&S^KknpN()tEyoM0G6#Tl#
zW%SQrv+l#;fF4*e6uhF6tfR!oHzb%HfXoi`iOpcuKvf79w7#xg9Chm8&9^T&WB3&H
zTE1s*P~6N$s2}cX!N<jHLLpo$ZJcDVQRWy4D-Qfap-;OQ3J>VmtJx1YPgUEvnlL}F
zpLdgkM?Z9v?;gE)_7<Q1<A+CY4xYZD-v>XvdVBEQ^EXfS>G92@CvRWFrzcPUx~AdX
zV>aDl3UdM*7vp-tjuJjE)>*Je_%+*v^umMI1oa7zY`tC(L<dP{3?UG0*WRZHVI9l7
zc|qvI7IIjr?@-Lf>7fo`)HAy(RKADAtkdv~Lwj^8A$~N{LU^hbctmy|Cg$OG(t`h@
zEev@*|1!TVWhIfB6uwZ^QKhu&D1Mw?CavHD_wuGDjb~Yk&N{fa_#`{O)La+5>+s5i
z&&xYcx}2M6p7vo&0`87n6mX_i52(P&P;H6C-(p<AS-PADM_(?`cR5Uq9ENS_@e><6
z<T6J-3b!laqvbTz!E+%<(sq<$<`ih~PKLedqCC}aVJc-0`+*L{=TPNm6uY!kMdp?=
zx-vwB4o>-w#@R6%{f~rh@#RQj<r*LP&EZk!@My&{f2s=qt@QN<=)k*8@PJhHNcmnJ
zbI<!S0x{|V#__P9e83fY*oZ?3$Zv!61bsioKwBOfY@*iOiz|mVLkUjLe|=PV3e}fN
zxLFLfUVR7)pA6mCuoq3Qq59#G(adonA~bl;#2*e>>U!cLrL1cC@W>q=9dw2rXc_Uy
znBv)E*T0C%;vhZJZW$pVA7>csCRjd=Kc+Qvf5ZH%`3a?r;o2!}><C|Bd7;T{bWr=%
z8wVQ0K<rRx8#tF;6ZDa71Kl~`2e*;b$p&RnaoCZN1Sp8YF-)k!$VB#}210!-+IhLx
zxHU;@qQTASlRXjn$qi^LIlJMS19}g;T1sZCCV^`sd<-~zjLM{(jGJg+xHhE@heLa0
zYA$D-$I#FIEL~!ROOQ6k`SFrvbnp6_4DxyGmyaitf_y%Qiy0o9#><B;=oK#6uN<@P
zSH>Ueu!~#wE3D(Mw2r@;b)+zL9v!sS;jh+r{<o~9uBUCJva0dN%G#O&vD5wySJ^^Z
z<v<_pW{ffgQ{N6Xo+rZ>G}FMe#PD!4*>TK~zdoql$2Mt2u+^wixYsC(XEtZA;KP$4
zY_p><mMgT6VGM^E-bE3F&UL&`+0`34Z&8>F^hJXep);2cMVyl6JB36229%&2Dal~G
zm{qO@Ko&i4YFLd85J;>H8AVppMo>a;-VhM~R^vS}G>`5S>bu=rOX8x6q(*GpYXi~e
zc{&>0Yj^D7uO`mkN(HJR@~7$eSmh+I4aJP@?qbnhVWB7AJ<Q6mWlw_EVoE30K}8RP
zxOZq-Q0eh)Unj<m$CxseQ3J!s&s0a>bQeP@R#`+5CHTWy<0{xt51VBfdrW|mMl&9X
z{Sn7y0n_N1<pv$8L2GB!vb@+aXI5BQMKIE}P<afr7fBl~TRx&-#P0se-B;;t#KkG_
zN}dQjxI$fy&Mq{>s*y!403TfOHmj3uf4X63d?ibfYz7(%WpRw&@lR&y1s$hV+e))H
zbqD&sIo$8M{GU+rVPL(@+2w*)CjXpyUz-PKq@7q(h!r(sztVg9dKsKtmd5_Xg`#eh
zwkh8UyBBV7q0LFLu_&_*cF^2lhC~M|ZTm%b0^JM(8+H>mCROK^tKVX%6F2lb&JjIb
zRA!8hd6W}Nh5t+SyLPS+@e7WOsZT@F$-D`$q+&oRK!2)0{V71K&^Sn=5KKcfReLIz
z=R(WPY{C&KMcuMx=!Fxb;SrB?4jB5SAn7#foY-o{cr!{z>$0dy{#3qxtK?5rueQ*G
z5J~0pGdOPurEJQdS|O>%;jlvA^c9gRO5Bb38-9~4zc3l$dqhv_kecUg*y}`MOdG+4
zB)u|a^uZD@*Qg<2_JU-$DuJ;Wj;Sno`A9t^OZ$zD`(Mi#dKAm$HE>HOzLgg_-CI!a
zJnfJ$Ga4<lOosVvs4*tQ+@x<)vs?tiD7KZ2$N9A6Nrqj(Gs0cf+rooKKlm}nX0r?>
zoec$osT$U^Q#l+LW#$Gb&i=D3eeVvd&_oMRFvZACt$u7_dVxku*i{fQ%mz{Lcr|oT
zv@bzcAejRsK*AN+C$h>*4J$t^O8q2D<yRNB+U>niZyGd%)bjtDX4ao}G%pZcw$41D
z+RIl5Px~5c4ZpFeG@b@&OEWprP?aEs<6X=<z>9Y-u}pF7puPLYA|0Vu;qdWdhKuzs
z;UG8pT%+=5XmLT&-q;ha<V#O()u*>f$7co5%~Vjohmz;^m$3a@qb!R~X9b4ZDLu3t
zP)Ths{9PbU(TuJ_fbp?{SYi``AX>ow#SxRx#Rq9<hvEZ_By^sKME&7r-tlU@>tT`>
zJ`<0!d75LC54?q<%fVtiE-vt_^7>8L{}jWud-uNn>XYi-zjxo8gnQ<QCN%ux3!c?o
z8*18r-3V&ALf#j};wE6Rzm@2SUvgaMr|T-UJp~9`2ZBKQcn5JA_Chw#>Rv3PUNlu&
zzZZ^1dgqg$c;8A}p;$s>6h7ib4gZoWojQoOU4I$k<tm8oYN*0H6`1Yb?G@c)h__eu
zY$NE|09in$zwK2$yB+il9%G2>)2>#)@ouT86mUL4U|QY%|9Eq-{dULEOrvF~<2M1O
zsAK>~Asnuu$7J%A?06!*BUom&ICcPrMG8ys$hNDI#V9JT4<@8xz%1c5<8Rna5$g6U
zyrO>RcB(T}zqy(V{!~+PWlsWb-mrB#P293}TQrug#ruZR4T$|I7)wEwf>ry()h9sz
zyY}m^rjZhFf+^RoeRYj7eA54}%zypLH0`YaU6cP#y9Mi3c1y&BKi6#6&)SV9tzpip
z<Dx)i{koPb`i=O=cMUpn7wU()qDN%d*<YV!84bm8J|4Hd=S`S)MJ*n@nuAn46qT_Z
zMQ4t0b&SgeY0>0}h2dV=&VD#2oj`C&Lk0N?hJWLkEh_`p4-Cy9Wom)2lM|Fk@fZfj
zIexKb$T3oCKA&Jzo3>M0_l?<FN^w)2?HB`pSkZ1uFZT2Ys`q;LcG+)0I;gHjdC8Gv
zQ8A=va>?6Q24+RKXzXao&$EM}!SF}#k}mtQlw$;_qnG{u4S%1BU6Cum=0jX+sZcOp
zKo!VRfk^mKh0<x#z+*^Vn#k3PWizFE#T6<NtC}<;t-E1&UEjNQtQ$#OLb|`<%G>*p
zeA;dt5ByzgL}nC~yOMQnvdVcjoo1sKOh4As&Z}m_qN|1w@^6k|4Bpj<k+>LT4=Z+9
zbm&r;vEiE`ZrnugQsWi%mXYz)8D*nGJ@Q#T8jZ8q#S`8#K4Y*tX|IPQQz7H^;ZARB
z*V7<rT5ERQ*n5ru*A|O<=xr^0A2}>0-HG11g_9K!KY{4G*#NUz#ZOb**DJ-Al@od+
z^ciIT%(I!O<Zg^Uu|cdNQT#qcrO%5vyy@dnaGSt5-5d_5+ZbHTJnvj~8;dTZqRX(T
z^aEjFj#hozzHBPC42mf<H?ZK*ucA$;$cuqC&DW7h;LT+}vV%4=j-TCKi&c|^cQA3W
z!>uC*9lYE=>csw8w?eB}s^U~KL1S{M6PAd<(N|8$X6vFnvhQ!<q)2ULoEHjW9FA1q
zDggJQ5y-b7Lm^65;OGYnO5X+2kH1z$b4D2a4U8vO-I`)UfnjAG4g~v-`iT|ZXR2KQ
zd4b-dU@;5EX#?E9EG{@+=kurA+s+Nlxl5v*{S>oNiCGw43ZVMi)fZzK?9}&U4zGS=
zJ)0C}AQ4zFyozRzM=#-72Hf>{oSvMp{{1oZ9kT&F%V*hf0Tklt2y^G6wthc7PG>n<
zs6l&62Ld~VR&C@oMt++<?*5JK&e1o`jO5?GW#_E7c%u&JJjlnni|g)`H_Xdq>{Xj%
zn)x6u0SRk+37%J^T92nm<J5dxT)yy8(&S!Q+zOFDHr9G$oed?@9VXOUu4?L0In<zD
zKKKHON_%uHX{`7ptJYjT;ho^_$z!a1h*9*W6deKE=*U6Hg-?vn8%h)cB4Jp4EFgN0
zs<uwliIMA;i?Fg|%F98HrA0G_8lhsw@d6qO)gF=p>kIW>S&!^TzAk|+STT0lI^)@~
z$Gj?8Mb|$jF1xlM83a)&o(HCVC|A=jQG?U(*fuC=N4ixt{391@a=$Mo8g|bGm#lTQ
zS9-T5P36=H&agi4L|8>{*^s@)8L5u$lI6BHKj$qCxPc#>=`Q8HeaM6DCx`g=C@?rd
zG%-6wQz1}1PdIv+_q@gwzPeRsjcu7ly~SB%4Bj(qUy($3fz@mwHWsCEItyQ$l3MsB
z6|iR6jyY-Mb8BT9Z3jUvSJE41*zn0XCkBY+emYwfBZ-if#Kr9ePH^>9Bl?)N>QtJk
zkR4OHt`Xlg$12p?i>kY5EAdR|o?EY4Af3=Wb78J%*BfJU-rh@I5^AxBl210=*<E3y
z9BlPRqY*i5vN3Jy6*hdEuF4L+MJ!ziPBvi$A!M+DbpvzXIkHRH?e+ti6Ko{Pmgu>G
zoTQ_Xaq%Obu^w5OQF>ofH~Dk&!I>!<H^C&P3lazNqMMwmWzChuMDuYfkROsvkj{oW
zwR)M$b&v|bVBS>oE`Hwb-NPj4&%5-0)W~&wW3*4nUC=d)sZ5yR<70Fvz2r90LR#A4
zvM(h3q<}R5Rt&>eT>-UQ_X<biE|?pKWP9O9HPeU?k!JQHZvBn0cI;VoY%GD*3~nWy
zhHrK6-1xSxA0l@KHx8^~;{aoPd86CdVBR{z(yF!ay44pjfQ{={%eOA$s6)THJ>b)2
zY<>}$!LDm`O9Uct4SqCPzLLzxk*Dt<En_cVlPCku3hB)pkl$owF+K;DOU?Z)TXyZ+
z$LQx3ym>t<F1gGTmsQy%^b23JQ#BJW4@h1R9OKDsT#+Zo`AM%Xw}<g&ekODje`|Kr
z8F$f-BzZebr};b`=l{%B`aC=G{KY!mF)jkLj7-bYgoZ;B3ipDje|n)wC`=@iz~6&1
zotAQwzy<Ujpy9YE-cwag>YPs){DKP7^+<4a0q4~G(!q0&*MJCmgb8`~ZLc^(ukBjk
zgspj<HxdrLs@>NQw(v<NaaPd4Nh@OKPB_b#&Et!&)&7tB9=g5={;Z*f9MU2w{(eKw
z^a)@fu-7ti8|@HXbj=eZeM7l}UnUQTUGrdp?W*#UCmb^;v>1e+Pjob80bhnro~L!Y
z&(G6d(xxz(+|J?FQN+?I2FM$~WP5h~;8@A^;#4AT(e}bLG~O-C6-eI7u4=bjlB1Sn
zH!iKFRAOMkF7Job<C}wS^5%gLPjk4xJR1~aXBB>so*ea)7SDjoTttv633T7;eDhy@
z>&M)WXQW$~#EO3D7dP2`Kku3@Q_{Tm6HcSt_h>+?5}{W6P?AXZdOhyoQP<%_x6(7$
z6AlA?Wu2QaV=Q4f`|)<`lx2_5|7J=X1^113$)Q#$1>)O_G(-GZGk~-;qwkb*s|6Wp
zjLRLDI>bUpbZy9ia+pX`&uT05-oDS4rL90^M+v@;YB<bpXoXqvIi>={lA*D@jWKjp
zpEA==k`fsg9LIz_vq><s`E|1+jWd#tg3>0-A@5w>KbY?9wcrA!Ua_bl=&UJ{JL?Wf
zGBrb;R~HjqThD;K^6}BQEI5wbV5zlE)6&$cnTA@J!Dy><@+LbTuj-QCx4d=hE|6|M
zWB@)dkfOahuIaq_+FsdBThMiC?e5^t1D4vf>tK%8L?$Q#<iC6dIR9uoW)dM)J3aNt
zXn*2VnWexS+U&ku`<aPzWm6Ov6YQOK=tjL?x4Y$f`?GA=pWP%*AFkT1Vum@Z_8f82
zH)z8UzuWUnpxyCiE0z$FUlWyf&zz8)a<gXU0O6<>oEv^4wXC6coU9Mkr-5wF{I<!_
zIi1vssv_Tsv`Tsr2~HY1FjG~Q3mFXei|NX{h#$TSbS4t()agw$(hn`YOMAHKQWmPb
z9Ei({!E4h6?hgEWo}&gQgj835R5`K$B=-~R`x51PPSo=`ES3!E^U9Vqx_;f_c17Z1
z4YRAx@oZ#@9yZsk&H@y!p5`J^Q)D}Po{L30E42l=LS-mZcXq_G+JE`sL_8Tl-wnlm
znUesAve7<nPknFJtRFnJxxtzNYu(a0NrQ|>y0=Ke3)WZRk=D}nZUy*j1;`rkJ*~u5
zI$bwGtDF3<l_5Wa>`0?;C_k0c-hYwohq{GfmY)ZSLq1gs)YT3u_y+zj7XFl<nJw6Z
zGtS=(A4`&lPWVFMNOly%dzgI4CW|vbK7a5_SOK#z@2+gTKM%Nnz3^#U`)?s|Qipyo
zVY9gx@y!1hN|eo=)DkzFqfe9~tJ0$(M|BcjK#^`t@>Ys-Rzq4Z&0QyzSRPm-N_b_g
zCZ?|A|H#*EK5E{MCZ#m(MT!yXD+l*YCY?1!n3g2i{%zN!sJ12C%PxkgAp&AQ%PYLR
zqLJ-Z6WmCVzN@bc-weofPrjPL`Htzga^KYT8tAqGgCxujy07HF+EV%4w`GC3W(k&`
z9S6$2s>`yIr6U-u*svbwm!5%P)^C6M1VCJXO%w6QZL2MpY~g*XwyWSLSvD&77X!s3
zZl`ht>uY>kYDe|+ZP{RG$_;hch9DiK(|I;4TVw?e+_IM1YSldrjs+(-4s=BQnk|Ni
zdH7XitKGoRMLD#!A`OM+U=WgI6-TI(F5?M|+@z;d?PknUQNbONW9T*wUDM5I*ITiD
zYCuRT`8zb`u4-mYBp-}A$es=KNmS>4;1NBGGbLASL+j)gJB^jwotl|sxyDR+d@cP}
zSkYT2=)U!mZYbTGhbwoY-wpC;qt3c2O429-SyJXqKiM;{54z#@rAJ;X+*q2xx|uK?
zx6z+R1!b$K%FoDuq1n3H@c8x_@uN6uacf+uwxO{9jtWKX##`OO>ez7S;$9OXoWuky
z<YJE10vM@#G0>7T;@0^*>VJ43lCIYv2Ic$H2VUu5Xw?XCs}bBRPc0h5)Jewo=$J^S
zviMvl^rE|RtNiAjLFeIU8&I5l`k+Fd!AUfGyr6U8Q;bI6ZoT19iexj42@bMRKf!d>
zgg!moEds35`?bg??bgNvpjDXE`T=FNcCsT)w6vR!Mn+F*_oYr^yKX@-rcJO11RTp&
z2I7s-^Cyh*QBexHko9#)>JXGNv!wH0h@xE1w#}=gD(!Ca)`-^HryHUp@84QX3|Xuw
zlNymMkTcrvvt=Ly#7+~Rk03`kjtYq-JLdiV-Vrym>1c$tcES!LKz|Cz;Zf{R6UrW_
z*SEMqlZ-ZDi~^L0nVRBQrcOahA=kY^8NLP#)G3<v3O2+CG>rohr(M!LE)5+Z=y^u5
z%0<>CBS#5@JI~I@WNkL<R5Ob@5v+=k^@xbzyhfYnje<=_L{~w78r^NoJXw$M(%3V(
z3T@l_@tW)L<YUqnk+XVrUMGE4N_C8wQh)m%LUDUThGAp^cYli!({%vBVbb3=hjKb*
zOQ3s!J=v2rgW(JlF=u&?()}JMS3%jG3Ssy98kJ2;w0NJlpj2!a)8=YjEZd2aCz!PX
zLM}HsVw~GYz3VrwL#$0^SbF^)Yq=Xn=PN#IUhGw?VYZ2+;((#su0-yArA)WZJWjjL
zu?<VdI#<8jVARCW_<fY?)|g4ecueJc&g_7uI^YF14xTm1s3DEPH(cKMT{x40A+WN*
z3lz~X9y6<X-Ep0~ZMZQsV?x=$bXt!io(l?0ynS(9plm`I2<uD|*r#&>#B)%W0Z6w*
zlmy7pZCR~7Nql5t4u(Umn=PE6m6HP9clDvW@2H7)E|Qmj)#Vsr*kAG%k_w~z_&6h!
zgQj{Gs>vVojslUUw2|KNx#Qg_YWCkDUwJnjFDMD-92oFCpS~mY*}HU-bLu~>;a-&Q
zBF&M@`A|b?gWOu)5xT-AuHU`N3hGoxpFl!2bfq;{lKMSk#A93&R_rie)8lJJ;u4On
zSJKF6d%d0=G+FETwgbNiGQg7SCPVh*z^$agG>5`2(O*wH@k$&?F2#0m9nr43@ri06
z=sfNOrREfGHIj&YDy^#~1F!3-NuVZPv*)X5T4R@M^M6$^H#Vp;=MW5s(PgtbgF)Tc
zoJ-8*7K6XKYkV)ykn+X38@b~`Wvf)CU={y!Gjk*6cYF=oLt(ADfjGW$o7i^!qE%Ll
z*2piJ7Xt0PL!qi$u${y8h(Y5iC87YrvF+|RRu?|K3JFt`28;Q$8#F&VWtQZwFouY8
zHJ`L4cVnfBTC>pcBhXUXV*--(v~pBHKB~EjBt_@EAj6O>SxiUi+}f=s6)8BJf9bBK
z0BP32ISaDdNmqliDD6$zfSz>*20>)xa1nQ7xr_D2$dsksMs-wM6w{)W7JX=FMj8+>
z25_svJk?xruTTTnE63(DQq5W2UMbpR-c_v|r5mF;TzBi{yehe}n1hj&Ly?t`KbAx_
zuV9$_Ak+v`okQrz(I-#o^#fjE>lKj(gG%rD3Ma65a{C;gEJ2G)dP>pMupYK+Nn6=;
z>a0R*UbZ@sfEQckfi)J^6hXQT1>_b1dnsoO)fc=+Mt19c55v99OWgeJ*4tL6Q*$^$
ze$d2HBNo~eR^}}b%2G~<Pttjc(KOSsPb__wVX`gfWAY8h)xunX<q)%l&RP#lQm&ZN
z&=>+I*I}`k%qszlME{giyQojXW{pJlfw^64*1F<cEoF~7?wp5}y_A%J6xWHy|ILS)
zBV$(&+SGWb&V4lxG6<25$vhHIc4Mn}rFJ!S5y7{)gRE~VE3Wq7>usJF-KwbVk)&Z%
zM)xoe=P*CADPCbbJWD<L+^!t)5gZ@zWgJ4*u6C<QND+RVH}M09LVo&>MT&8SM>*#+
z`8JzhWZ8tmub|;_ell5^@K2$IQLSp6aX8IGlV4L%=~}-g6C&o?Oo^(JdHQ<)`HNRC
z6ZJRk=?hF~o^5R3-E}$B*!>-Lhi?X|*{6>z<{EX+YZqIHW-bV0gGs3z4tDzW@E;I5
zacxbvgSkQY4PZyFe4kHUpe%8FcI}hi{n2GkDcoq{@S&fyE@=}lTYOimA6SEQiOM7R
zmQcCfI=WF(A1OKx>+bSd$%Cy%>fyjk4Ie4uQNuS&DEdwYtcw)HpC)9_7rnl6aqjVo
zmd^QaiUE|$0If0QF%au?Op!k(#W@F!z`c!mr=|rZkLA&lE`Yaz%(cM9=pOyeO$Otk
zP_*n6)^j<}hvg>ESh<-Fip8A!SoTimXJdCI8Rlv}ThIx%ERbtWQQrLJ54hA*N(ihS
zFw{>&i|?7mVB~mcmjIQM?z^F$>iE283!Cpaxp?Am>s1fie>ZhUTiZzD>S#$@+VzpC
z><NCfz0+86LK<qRuD+c}*Gp~<{@qO4_~$ml@pQjrpzv?}T^8c`F{MuCIi~n9DD{^q
z28BW3e};c|Tr%x^LJ{e?RnFG{zfn27g@K;8wpnXHjml?eO+Rn%1i7`2F()7TBVs)=
zI|8gi%sWoW*n!N!B%?uckeZ4Et>_?zmN9<cIA#JoPNuJij_uI)7YR)(J^C<X9cS0L
z^fi`Yjis%z?0Bm!zcK6Ey^USJQM*Bn`gQ{w86Obf*9DysCnwp2HGbKIGS;0HlVV;>
z@}ZiK<(Y;9@%xd>WDKQ=o{zHeJpG%}Eqrrkp2E{GLEuzs0ev^9oQ|ib9$XjckA0k{
z3-eS0&z@zY@6(e>K3|MXvKj*am?yB7&$zuoB_C1t@IA-BWU$?2%SgN=LHVE@el#1&
zb}0GS)^)7Z#IE_?*e1$L+xDn<D}V=V`j!W<^4#P>SQ)3yO9p(CT*ig{TXFmBZ!Co2
zU+m10OI*3C9bP)Ac0@VIq#Y?qYZ-v8mWh{CW6@5Fi#9jVO?EmOwiVwJRD5YKH)1H?
z>?L2XF;$3O(Bd8F7>9-Z$825!rVZ&V$+*AZ+Fw+LWM`45prL5x0IECiF{hSq+Ja}n
z_N$Y55|VK`m3-zRCt0z{%S@Int=hVh^c9B^ZNP8I_rG@kedaBC?Ix|+pxiqhko08t
z_us*5;GtZLQ~JKBgNJT?j)F`1^V-60m93t{j6U>cp!~RPX?DZTl4%uVhuv|+AZYE~
zaJv1+53cCdJ4AU0jv821(RG$9o(C0Sx15<xbrlUKCWdY_{;L@S0OfA29?VYDU~XSC
zn4PA<+-@FB9NRe*jzK6IF2)pt;oJY;|A&D(33+CPliG63CR^rb`8b^=7b#|%O()4m
zb8h+ACBTCP$<Ad4uSzco<nyJ56?BeflrkA_>{x6llL^LZfWDwh*DO0*oUyc+jz;95
z@P#`s(CsVKMm-Wpv%?uVzHm=Ri%f$L(dFT^;5eA<frsG(`!0ZBHtAjDAa=t!gJTEc
z)8_X=7~c*TgM9clfYM+pZstL2Hy%;{^%PXojE1rlI@7UzqgL*42=Ofo`D}F!FXca0
z97@VDT@s2U(BZsHz}<4PiS`0x`|NKWr#$+vBkKS66ZA$pC2CY$k0(O1nkZH?7cf`z
z&nFV#uOzkX{G!lZN7f1{oTgLK0q6lQx#TpsUDJub<4w<2KuSf{F&))3wwA(rb`$s4
ze?gLK!1SGDc@>IPx9ple^u5q-^{p6e3ZOWCWN$XwsJm+ipF7n1;5}N*J@kW?szEKK
z-c;J9fR;6`JuT_+2xT<I=z5_JOBl*iy{a9i)5lEk1vO2g&a>R;a?jGsD2K7lBaHcm
z`A0qh7*xDN5NezJmSRGS{-J?fazJ^fy)<_rIV*~VEa334fc||Ahgh$grdKan<q~BE
z5Ix_PwAI;d&_;)3wNWdrZ6iCUhh6){y~Vx+U!-#i7EywX1Zz9X62I-R1~;6TNov0C
z(h%)d$Eh&<5Udv$X{abZ_g)oQ+{bPuK>sXE+3AWdSHW3U;{Quv*{XQvC$FZrJF9xT
zvwm-PR`qsgt=?YU(DjV(zIlV#W=o&RqOw;^R$r6e!fhRnLS5ixw@nyOCyxZz*Nyi&
z)2f<T#m3jtL5`Pju$*S!XtrA~DLwGQ!>h@7>2qTTJO$G-&eDqsilD@Jh__7B$zRiH
zsfOrcI}oQn(PAMdFa2(oOG2Pkq`1E|Wi@PFgmVH&65(?z5Pt6yA_(dAx53R)VML7M
zR0AZ!FcHB8Lkm^jso}*1v5kJ>D44Z<{siLHOc#=HU6EBs7Z&R5nVlP_?WwzZFwf<o
z;}Ar~x=QcbGE~&#ZUevk6MZ-`^>r2IaA06roc>coUTEXnF890|w1F7amtOAH6P2Je
z>slMgMzy4Y$!k1yvTHSCvBSKOU3$CRS~hA~!&Q7Gi2)oB9{u2gQ?9&u)XT4Qj$zyJ
z%scl20Bo5#A^#TTn5LiG?!GJ=r{x^COHd0$K|?|USQ~ApciZVE+gqrWo+lf7gbrW$
zTuS&dDe)By14N}M8J`7>zFN%JZPm89L5<F@X${df2w?a$E$LE0$Tu8Y$su#Z6Z@us
zrsm1(Y%<Aatuo2DboP%$YC{>Kk0=nVVa6o8r;EYGd)e_ZnoM!oQlj9)8TR7hqBo-!
zrqlr4lX0C*;Vv>W3_!2HasQ^Xeq}wyGaMjf&nN$}NJrHoI7Oxy%yn(KjkzpfveOBm
zHdVl>-rVEVz~8{4GloCJ7uY2JpI`Np4Sv^dZ*0(NNi#?i!?qqH#jYPhbr|)96$iBr
zQLSh^4K=SHkR6nciQ3z-?L`v^vxkNtO@pdkpPC9A?aI*b|CKpx1hD4#Y8NgZB)41{
zD2W)W23j}Rx=OV}ZCK3)2<wk_omFjI-F*uF9<P<lIfu10zi-re=z48sN6T#8c+mCD
zO7C6kub(r4tRTr#5Mk>ko!Eok&(_j+B=6xMR>7jH;BCaDTEbnknzhiFpS3xnKf3+E
zlEPTSHLdIJ7nE2Ux*V-<O?PbR>M}phXSKBEfs7G*B^;4%inamJyms=D{?q{r>)H)a
zS^WCWG$4F{6m@-zrlzhRyb)-<B0ORSe(i!e>7tFnse4;r-NQe3VobUjG^o)Gj**EA
zT5zF<6w2Mb?d_d=!3D~cUf<Q1>LD5S!iCARxM=awj2STtgc=ZL0z+FYcRMUiV^Tzv
zDl8ZVW5c8kD@V26`)X_Z-u-X{O2*pll9p1)cv)=$y76gEM1(tN={5>xERDtEX>N~<
zRw}KbupQxh#j02E*$*1}@&$;Q+r4``_d1<$1|n@m2qNMJ&5&e-JGDzzfWTR$*|^C>
z*z4)cQ%T;Y(GHPMP0NDDlwbAkeHr01+J)})zPe`(q+!n5Xe2c1RA=r?*<DqIL-lr6
z)Z@9rsgXiFFI&F(3N%-A1-zZ!P7LttJ2A+*YF}3C-M_0ft4LVCNNw5Vj;Pud)1~Eo
zi|sga&~I2;&uX|dQ-LmqhEGdgG;4WC7MOf&QAgZ_ydqJp&zc%{;Bb{R$*FwVwWmrp
z85J$i%`8XP)rn165sG;<+tY2$gPBZs+)t~u#yps?{-|9F(+O-)wt|M70uxjtZJej<
zs~(zsUG|gdHYc-0beQh2ebu(NtXfiur75xG63b4l3DugJLj#2qD*(4`8c;t2fte>y
zLf@t8MBScb#QfOgmwl6=R&s$77bC1jjTKG=fPp#imnxOioLpnOzC5{OQ}(2X^giL~
z{iLbn{FC8K;w*+2j62bb&y7%G8#+bX#t%HntchOg@8y*>BAxDN!5vYsFZFj&Fr|12
z!T#uCGcW>snLCJ!4Y}M-RBl);w}Z126&uCH(rz+{%4BgFC@^$o)M3#U7<H3O3Iuwq
zkqa=Z1O-!1&_6vF)2uPmg@&1#7f<pt)*p(a(kl(swlcScf}9tWOpIJsKFR*Ro49Ob
zNj-&ZG{~n+)iyWL+GhDLp1*wh_PeLg|N7kltjFg6X-|sTSvvmM{^gg^?e@d|FTeEg
zSLb1;J-z&xoqhZh{QTpl)2cmt_445D{=v^Lo(9z^%-QgxT<*i)(`=T{KQ1O^HviZz
z2IKr6i>#e&JUram`1*+d9c3o~n}M6{3xF_YU!eI4LJvFjnCx(uJfxVMXEVAk$dZ%%
zJezPj8ct`IyrVUKNA8b!6V367(*$k6^W%I-+0&ADW&Y3XT@a+19lbb0vd@=AF$>Yt
zBWY(RJrE(k>?W=4yVJ`S{Qc_QpYRX7%+6Y!FhdDiJ}@w9ke=JFQyu5}sDZR*84@Y@
zAp_`zc{>mgvtcY_2kZyhrbfPiPVS&+<U&g2fTQDlq#Z18no;xd{{AMmxWO$7lpLfG
z6bXA<4J3G8yl~Ul7N1Bat}d-#m*&OzaL9LK7elGl$pyXL!r)2lYuKaLZG+~<|5dAe
z{HV1L(OeR_5aV$raGakwdl97WfwvXPj+#f57da+;Z|jFUM@BynxY7dr=&$e)<U)V)
zWw<Fgi)?Rs)7Sw}kM}P98<DJj_1jfotu7-8qQ-~=0!{6!*?(rU0%!9)jQDc<obud9
z0-E0$Q9Sc$Q@+Qy=(9@JO9uscjC}Jq7qMF%|6*i#gSqWS-~6pBuO6^tY1vQyc6ik3
zSHJImO1oVXWBj_FB!5m0s=bk~@a1n0I`;7f-D+ym1)Pl9RF~vxNf|>JB!V0*KUh(r
z82rkfJA2++n_ye6E$*VO?8Csrl8aONZTPWkn@dL)u5|={=%6XiK9n$y4<bG+VWuQ1
zl7A@q)ltXGlK}w!tj8n{VW5a#ak_?j9OWm-YVLgD?d~AAYl)^+ar>K5oUT9=t>H*Q
zdoe?5N(@{RD%Wuw^q2A1RvBAU@kgvb9y0_?U|dWxmioU)=mNQm6wgFs!_>~=q-=aK
z$RZB_mp)`sQcO5m))sduxr8I`l5XG2Q^4TU6t@XQ21c_k?hQVo^~9#+o0}j9n{KlC
zLk+{4rX$MdDESfEWHBMRcezrR;B_oZxzpQP!BTK0DqD!A=Oas3;qj(n`*l&SoA%N4
zK{`an5ZWvGfL){aSDjB<a!rjX@ebO~oR(r{mL;@?dBiq2H(uwr;RZJ4QKbAma3ok;
z+pJk%&hF>42-^IQCQ;%IS6sy3+J%>IYp(lYOFD^yn|2d_`;Pi2{&;lb)mOZig{SqN
z&a#am8|jS_O2fR#;?)0=ggTPYO(a#dWT{?X=zPsB@Pa>#kfmenqk=TtgJ04A&yW`m
zDXwLOqd+lEq0PLKOvykd#h){mwjG~DHs?~DD;<9Y8PWw+;eCu>ukpZ9^1(sQL^QKH
zk#jv&)G!q-zmYsr{3E+6v`b0zNdy%WtY+fM-fKuu*aXLCBJ==*75Ar~u%ChArfv!G
zz^sNaeVh$EZGNN2=m%Y!3b6832!W1p&;8OcF+rX_8%fG36{yd!{0h@L$D(|_7Yi`X
z{tUkQ-qB;H8r73wm{^0}fQ+HjdOU|YV0hbGMhu}&NDl0#Uf^fj4Se?JBd(23@O+};
z&vK&j2melRF;I-N-bFf_v|G>lG%3egf+c5b41@d29~?*wcngnuEux*aQ4^yG-ICwj
zWm5!px$HNMl0Tba@(a~h`XhY5<|JAL=gS+ACT}($Rb2ucTo^Mh`F$Y`HnedO!@m&N
z3JI|RB#xG9JT<SqWP2wP<<(J?+dI&!;ft7<JjKqCtB>ba@A3&SqVgSZfPXB2eZU49
zFRLU5{oEbz;K-+zMlcYh5ECEiNfV~V;r|dI-cQ!R@j0%5?P+twNlZd<A0XRNimvC1
z1P(r8^myX0K%(CX+;_N@c`WJdWO0Vj6go#Q1R4mORAvaHpU}vnv10g<HG3%25%&+M
z=R1P)P8wX<-f;oVDdjC(994Kf<KTt~g+j1tY4b@8qUTae0kEIM<6cs6Xaq-~3Erx9
zQb@`wtkYYU>uM|~#)!T|j}i641DA>k$hAr(G!GAL%$VZ>9zP@|7nWEpV|ou~ob1Q5
z=hJ|!v|6r2<7%+?=e}QKGOH>fE*u)t%eOs4;;uE!$9jtXw`@%lyVJvM>4e(=RN5u_
ztH4aiRWo6gAcAUBufe5*=EE5JO)VZaN0eT(c^_e`Zr-?quo;kHIcPz!)(FwVhFnwE
zhw6&dUT68_EWHd8G0#LDtuF@INj`ZrN2S4fY41j(zaoq_!$y2J-Zs0|+h#Yp>T-iM
zT2s@m+a_TwC;&^|I1~+v8nf3ulpvb8iMt$WQ(IlsX(F9N7anv<3YA3J)M*dxNvw-5
zo55|j>7Yx#Acn(i7{+gIW5t>@G&CvNT${$i=2q#TY;*5B$~9@ueA)D}E90xbf_<#<
z>UG=6B?cuwqNs<DT{a7^@ND`pw6BDBHY`5J($kcOUKLqLbkv}YK7|48`fP;<aB?}=
zy(!dg^4h&Qs5J39g8v$|p4YVz195o(!WZFjT$G7vNltR|#9%{sK5d`B4wUYYTkbKM
zOTRgI@rV=Pa3h!P%gPmkhMN5ePiyT9^ZmTY8Rf8*M`P?zivNP#HOwY*Ti(Kx9sQtl
zU8}S5D}lRwJzkXU%L?PE>loI5R?J?^XYD9Z8uhoXQWyrEG!q8}sw;FV_S}NCXE42g
z_i!&FnDP8YrU32Bsu>MIgzc(-`4GI3T<(UEYW$2F7<yv9hzdsw5D|TPCpmw3<^!Uy
z7Ij#vk<=R)yiypLix;mSES~R_EMqmXnSey%7;q3hZ<r-DOIZ)VeGY&St=bLN85j7V
zpw+Hf=TBS9m21{y?NBvsSZ5t;7HR!?zP-jgzqJ$nn=CaNC&;f#Oc!w<&c`zS?b&?n
z9qp2pTQFEEs0UbCyQg_0OKrS=sl|wPV{}SQiFyDF^dv`Mh&7am=P?;ByaCRTp-3U*
zcjpO)ER=$<L&kHachJX{5yI)n3o!Qg_wm=0Y&ZsP$VajQc2zz}VJ;5Ciz**S*tNhr
zlN<S%M6XSoUU>k0SDOoZB`c+kVxV#t<rBY4Ml?z-#yNCau9=pPk5wuAdX@vs`LeFK
z_mSsnrLSg-o0;q;Ew<}OCv&F{!F9ls=?C%(3zq0%b@Jd4)T@+3<(7;*2>DZUJi`FX
zH$npiT+<hm&CN}Gz4$H(9zVlS_2N8Q|K`cpo{^)sd)Pi|@R55<A>kxK9;Q#k$0zym
zG18dQzh?u2{GZt)EU;D#&p>>t)==e8Y{~SR;=@i}&Hjq_L)oO(Txnd)s%Di)?qDTg
zx*1v<?S)_^Q1emh57KR6-HsYlC07Zm$)57}n}A{m$OsnQ#?=G+5C*nQ0R8+!=&{Uu
z46r1fEU&JT{p>{HZ3fW=G;is%Nn3v!G<8``*%T3%u3`h?7?1>==_esh_=EfzimZK$
zBl^u@M?c1tZc`Z94=$RSH0rTUwXf11S=+HQ1Beg<jSc9Vyu@#p!Kug1k1HlK*yc5$
zx$ko1U7mWG@vB-hQCT<o14n+Y#-C^n;h*R=uO@l=!a1;w1vaEUnY>GBJ{ww%YW*-U
z4~-0<<iFyUUgGr;5TG(V2J6CigRY|q^{DH*Opka_W(YQL@<2Dfn?K2(T0u5@yyg+r
z1m>v<DCi)}QVPa+&t@A0LK$taNH~eux(s|bii=_H8L(t0ShM7|hF5m06~DS^KxQ$v
zk{N2d3DTGq0g@aY>O>uNy73~=uTCJ{Thk{a)>Fle4fg>myQeEV+&@)^8@w_O*ZA!l
zuI9Q>nVw+B#*5Nbfk;+{SyM&x@W!at%f(=$R7CDjwlX&Alb3wghB|b#@AHa##!#z)
z_`v7wE3FxPW14zpI);;@8;~`35~a&+CqhHIZJ^*?8pL&$E?0u)ot;tWr{4fp=)Q+b
zq+<ht=0mx~(0D^KRdgqS#cHSJFjy3fB&79}%=kK%WgQ+}X)iZym!)}VRN>Ib@G7;w
zeO|Jo;A1J~#Qd%2*wcmvOyfsFi+8qH?=T}3-pEr;bQ4eBUB2rk@0Oe(iC9u-*XmYE
z8VhlN^>98?8#TPDx?ks2RlORt-Z&p&tw+e2$k;b-BkI!D<of-sguj`D3w+_q-Q<%v
zL=y?Ql2mKg%uEpSSgx>KE<}!hgn?B8O*oy~7K43S^*x^m%Oxyvag|W^{?VAxiMt+F
zd|tY!Xl>E+GWEB!>*~9+J#c=Rulj-<Kx@l-5llvvwiJXeoCEIyQfO~{iArB=o~qMg
zF&^oJv?Y=|P29(i;dtA1_0SSgs@?MSOwZf3u|#F*B@_s!GC&r)hgECh(3$Woj+^dQ
zBEfMOo9jcz>D^7lt_^z*V0*>AS*+{h(<%Dtf(U}u^8KJakD;2g9B{`hR6EGy;n7)f
zqtZ~v-8$rCJ}N=NqF{Os(yf|ii)lM_EX4iBDL@;f>b~om(3)I#xd_@KV*6XVx}E8x
zcS(4$UH|x_y@HD+n#yPl;k;?zS9LtJJZIP{^fZV)+*GMtgG3$|_DRsDQPMG|(<`d_
z*%@xcT*;2$vvSyX+SI#G;IWm;*Lc7gCR?^~zG}}%G5^qvJ+e}JG}AqOUJ)Hxi})+_
z+qYw%?*)0J)v^DQB8XF4Rc>eYX`I46MCx9z2W1+w`h+;D82T(nTS!_gj!tW2SQg8B
zaWwm5C_tO!(PZ>=GICLv!h>`ejf^#?yves5@5R>Sq(PzI!&4mHdRL;F!7-9PVsFu4
z0}D`ojT0!<6<ZhVB6J^KafUT)7!^ojsl+Mq`1Lo^zDbNiAC6+KLT_*1t_fWQU7`lL
z?Foj+<zySe#M<QlY0QeSU(=#2^TC*%Wt)1mqC>Vjz8^4mu#a(q*u%<^E(A=e&&2F;
z%jH<Ihr`-Kw9YsstvErKFclKX+?Ihn(14$EeDrCGq;oPv{QN-b_yHQ-Ni<A<%JqZ9
z(nI7=IFPe~a%`j%?UJMI<e45Ge(O)N)q8TbRZhwRjr|-sAQhyhF`_)LE;OIZJA2bJ
zRsFfLdQ`0~C*}(9FYnp*5T+qmA<RI-2gFYOQB#hXYHlP)O+KpXVedlcnjzt$PYT*^
z#4(PMRK-Msrp^&yB@r^`WT;?pY`t?wov=?<br#!9G{Io=Sej$$IFlf!l-nhY0eKXS
zMnE3TCZmXq4;M2J+v2Su)lh~r+<;6>zvsm?)*WFdV-mwE!-^44NajD(Dk53d5*?%0
zEsEx>vm2yh{>!}F$WLISWd5~MXPHs$HU?_|n0+gn#p#z_|D`TZu^(&wP_;o@`l?R$
zgRaC<9yPR5!do><RJ(41Rta@6Z6NDMJ_BIpBu6Anc5EthaSA)jOKb<H*$jh9PskY2
zvWb!;E{;8~XI~_*N@8FmqS0UPQ^Z06$Wg>qJXAs`yA%l2TB4OWazw&a*g{RR8WpDa
z$x2&}hH`;8p6MEz38yRJEPb)6q((;~`|Q>&YVs{U)~hJ4C@0oU1Rm3$fIZ;iReW!!
z<9z<@l5Uc9CJ(EM?<21TiRQUFGUNt(iBasz4!$k3*LNFE=M<BV&$Acdj2y$pdLcqs
z=}x6v_(&vkFO=I>j_7(`U^~%SHP|{^MT5X@8?M2IfAdZW*j?SQr7w-+F-pGh3uPt>
zU*To1T%-EDMHQ`}IjMxg|ESpilpZ$C_-eBA-(WpHalC;zg8olB<wBd@(n~a!P>aAI
z;z(L%`(mttK6v!IZHZc-2YoA9J)U#QQ2W$PoCnYcB_dZ>(u>{SCNd#c)n2+D@5YBT
zcQV~N>V?u(ZsaWzqihOv8gWTMO)w9_JQAKp`HbQz3t4=aY+!K1ZF|Zk(o(gF3bjHY
z!|)K0k<uv;JG6<Ei3Hw&v7&`8Wp5+l7Ty1b=t~YV?pUJll<|F_99C3<Y&e@>#SKg`
zI176h*3KGhXV`3|HqV0I4Wp3bAT%8OovahdIaw&=^m$46wr*}@LW>dQd^b4oCZ_qC
zqpwY1ELTG4<R!=x-NObe&#(I7_1tbHBzWzGswrkIq1-L55$8#{Z0_ko&5RRKnl#PE
zL@L<Sjl{Vf8Vp+^(zVhr+Jp3ymcVJ*z~Ni{N^J3McohT}-@=5;LO9xaDDvBSrdVE6
zz|tHigLjN>*7?jmCbRNUTm0)B%7j<fo&+#+&m|0_xzDt9tC!rm>hlKV^ownGi>OUx
z9$bGutv6TKodk?&nW94x@Q=v4B^|y$nc*4vF`6v(ox5oCL6(L6;vc8eecq|AbnreX
z{3I<;<AV6EQs~w3afun%t3~-sP~qQUJJj~UeF%z+@pf30UWNmU=D@$KH+or(d`5zb
zUwXelcb2{~j1xU(V!iJyn~u|AXlDFATgGO(oP4BeqgHhmYI3^K(+YN?mrsV{#V9MQ
z)%iP-cyoalhig<Qu!Ub8+k#hCF8}xaS1-krGCyAGOzMdF5;7{|X4I66<CK|rUtN=Z
z!)JZ(CX{lVBYCZi{uNm|<^Rl{6*Ec%L)nr03TUXU*mNIoM$5*dz65oQGw7&vOv%q(
zl7TU$Af}gxR2}n6IOy`K&I;=ZQ%&kyl;pm?d+5J{Aq%W^)};(*SxsDz$ibiSxWxq;
zE%rE2M>J!X@mzJq^xvEPO5~3<DvB3~t4YyAqI%1kdQi^P(&!><ROF(q#_aP$6Pe(u
z!8l#k=rJrZwL^7eNxDh2YPvp>gFQF}AeQjjfb<U!ZiVonC#GzpwTMp2Ns($WNXFlD
zBkR=WVdk}_hAH}j(>jY|nM?75k*C9AsC|%9?t?ClpaQ+;P!<+2_l*5m`X+S{$XD&C
zO5DiIdUzAs&}*_DsO$QibkXggPz)1Qsg9#CO3{0MsOh<cqv+doMXv9rR@{&zHZp9<
znoNW6@P0A<cKJ8t4{vAY(GWSYRkk+EV>Z%`ES}K=LSo>(F3KEBtN=4A&Z7E}1vh{r
z!`o*7Ar8A31FJFG4)btfK*^Vj@%Yv32efgo0Toj5Ri@Y+z*5r0jI&v6H%&Woh4ppB
zH99@2@bnzd9a5VfVw>yqGA|$YoeL?s)0MCi4~?<4@Zsl^^BgbcGXD)u-V{qUrKNji
z12y_4!o$3G?G7HrXuKcKh#HgI=?GhWKF`i>GBLD(YKiVl#&vDJqm{E^N0L#I4Dv}j
zTY`L?&W5La!6mnp^=f6LT<A}~5#%Vvx3%^MxCl~~eqxZ>UUK<y`SEi3aaMc5r6GZW
z2tcTgt-s7VbPG$ij%33^b!C42!iT|mK71G#eO;r|Tz<j=sKx*<k$F})k1GXy5CflB
z^~AHdPsQ6ZMO_+kSB=eFH$sDLzc0Gf4iJ_S7C0NJbWmn<Bd+EwBDl0mxS!sVG&n-0
z*5mK>ns$NK(?xq2zfm!%`HNG~%jJ;2BT^2TI~j)78;LBx>d~{lzeOHTEy@7M<HeuY
zT5Rv&boW4OVTh*%1>j?lZ$VncNqx=nKp%!g89HZ4c9=#mTnyik)1KKD+q^PnJ)_fd
zY_Q<reK>crUj35oR%*QE@I)a3#HBz8nWvLsc2GQFAEX!LrY?1D9?o7l27GRBbya^f
zF31%jC?gZu4&UOgBjVP!ubrJ9+5uWNA*OZbe!Y*ZULi3Z*x2(4HMhETqv@<O=<o8?
zgO&zQ^MA>>PIFZ5tsK{Pd8g5N*J&KgHLJ$UP`oLD-DRUtbuG%#@LOy^o&mx+l6aby
zl$~qrqh~#k7ie+?`%$=^!rm{?!~_+uBaHVpqoaAmJ5aAos#uCMLjf1ySjNUL+Hg7<
z8K?ugO+C&><N#2h2*U<5NLd^NM~^8Q7uhSw=H;+Aj!*Q$olNQ6apU^Lfo_v)I0#7u
zFh=eE8-5vt9igi)|FxaEe1^L92~^F#cUS8x$p~;P22h~_Y@={Z?c3GbdUycl#(jX@
zM*IyS0)}4I-n(Ckm5l^&(wKYd_$HPw;d-kY9#(N7(bR(0x42nD(@_;yvAd}eOUeu-
zW^7=TW0p|Y57PGLUO);Y0+Ix;_y8c{!_bSCpDve(Fg+C+-CFX9T@~h;%SwDgHt!=_
z4-2|-z)cuH)UjSA7-A6iwRTryvjN!bG8>}F0gjmVu1KilO23XI<dTiLw`kylwaZv~
z$s}S{Bzl&7fL4^#3FvCCn`9bcS}1b3tFwLL@jvny<RpyTuM95J)L2`aI!q-+cWi*^
zJhrs0Yr+@_XU+MZ4N=l?R}<Dq%JG&VM~NE2jx9GEggbjJf!+O;cJVI!{bmnfVz+*+
z2pviug<k!76p)x(dQzyE)5t=!rGOkgy2-Ddrd=Lvy}xFdSV4JI!h!YuPQ)>o4Ct1=
zb9gV^I2cg@vFj6e+GeC_lm2{9-9eoZRAb6(u?%R=-(kY=y;Fp?E?cbC+}Pd?O8#6a
zxwIv1L^)LgPv_f!^YfkfHj^{F?{WJN6Bnfi%5x5p`A+Y$V-mBQdOvf$pW}K<skgNC
zY~FFoE#~sCaUZ&vIOlc}zWo{BdR6dslvX(|kp<?kp1aZ^ijLX3A8$@?KR@yO1Pbmc
zBuxG@^ov)83lhqOq+FIw)WUdnxkQ`;271EoMRSb&4YGm;zpI@RONv9q!V$Uj(K}2}
zAhbNr16?fU<PjkD?>x1r!U|0wB07!c6dYKOXR?;YpP-sTRyH8+o~$!Pi>IinBnh@5
zV~$*^xQm&%3I{VIW)SCl=T<tgGL_&~EuDl_K@H66WG`(T4Ge86Xv0U>ICY(i^3XeI
zk&d>TY;~@&Qy?E(q1gF^<whN5@6u0rZ&{se3!7#@F8fyv?kc>*lx4UnPY)-y%a&{Q
zGD#QYW+cV$?iz9;nM&{~4Ne|a;?YE55E@Fx7+}(ihHUEpFDE@{TQV-tcjhz)F%2M}
zWofy<tnR|d{>8NDH&Th0{QV6r%8e+6ar>xHg;>@UJX>$qS_4fEE`f&`2}rW1lcnKo
z%JyN)7scS_TDWyo)9Fz1OBHBEo$k9z>8i|zUYf_{Rp{RrDCyfNcfM{QpJC^Jj*b5>
z+VVr_N>=9S<o~%{ADqzuLy*pPL8=}v&55l^8oNg5_<vfu5xVtQF>591a?^SPd8b0x
zVyz?}Smd&|`4HobD$nwX7K2JJ>HeYj`qlpPgXcd!ef#|7v*$0LAN>6J2&f1nhGO1W
zJlVBDbQLpEd=f}2M5Dl;hT<EBr28?wV^X`CNKd_-M#k$Ec@8~rYGh4r)sEqo1$Fab
zjQr|_IMDX^R&CVP`o>~FO#TtcRug}(BnS~n;a3&OzQ22W4Q+33Vu-ZlGzEfqwiwUz
z=~(HyMj^pm7!DE;P^N&C;p+n3=U`J0mJ~4l{{?=gL>rZBs4}%`x>94={4bOHUnciC
zncQdRZJ+7T9(rAAFjTz<miyjY_ClVrr2V#2hvq~3ePw_flMPBQ!c?J<AW$6W;qMq$
z;b-c^|9vDOC%Xt5+y9`w{~LED%66ZMYR$^D;Ih(LKKR{qNx_}-$=^w2p#abM<Y#^`
zfsv$T>Y(v5{uI`Fjj*}*z^d7#?4jxY5nrcP-?zgHpU<opORBRFy}&R=zfmM+kwp*x
zAVxi>s0<e=??2c}CntdU=&59HurZ<q6dM(j)|{oTbh31ahHzHwlCF~2Nr6tpC(Z^Z
z63y*cn@RR+G3l|U!7|scOhdAfqk?fJV@Y@XJiM{>4#sK(_(8^sxvgA)wZ&izr>RG;
zpOgJpI?TuU94~`i3g40g^-GAo947Z-Le~K0D&+3E6^cnXswPJH@o`2J!U3WmeHR!5
z=i`_8FLM*=rz#(_Q6Ay|zEa~Uzb-`CGCTu`hj$mTfQY1B1PSfo>y?=OnwMJo(AWfB
z%;hC-cmhxHN@99uk{}u8RT&FLGiFSr>t|{FFK+HC3*Dn>>q#67Ezg;C&UbouF}04q
zy^aA&lp^k>yTukB7y%(uP&o4l0G8GTfJ^{Dz!6reR_#5nOm;bwL2iK|KcdRlGpS>W
z8?9Hpj#0N`cGdB)SMa3`%S25?4z9YXammoeNvL_|984RzkUe8d_eh%&+bOrzc;Ay)
zV?07EiY+w|a}*JgVX5qp6ck(p2wq++W?|FJ;T%TOBM@k)9$E2J<kda14XP@EFuq2}
za4Xx#-?2aZtXF3qZhu{QUN-Q0GHQ)gL7<2Cmte$2E3u_wz7S|VlC|tPda(3Q)8T2G
z>?N#NV3!UtV~^(_-Hqu*)d<SjMUXEB8Anjbqrf;2aE}=%yU#`&L;Zr=WUz`b%qkd3
zg_vcdsYT+ZbCu}P=Z@y}Vu&&MyRznuGUeKU$;NOU&k_9s>tw`K_rH|ud@94CfnX37
z9>fheOr^&Ea+BYQo5)Q6Yxv1EykPlRnSoX9|I1iG()W;m4^|K)lrz*G!?x8JtXeW=
zDYJdQTUW`N`58{owiP=B##E0^y8NHIAdAL)G!Dn!a2RBhQ?k*kITiMkyn!ND=&?6J
zX(Gn#a6<x)x|LY7S>8^kISA94gbHy6(y?KcK$OEz#tuz45VIY!{x2E)oyj2S)cyw&
zL7A7&N#a&+9u*3L?PDFchU20%7cW!xYWv?k@!xPy$Xfo7-WBUG=!)?0+qcPO;|B5k
zWrO&OC~Z{5eQ7lNH`q3p|GQm&_wDj8(#d$-U2#Lvx@@h5x2v&q`KegC{4^|G{x6pP
z?pV6~?}Vkx8)B*YyX*!b93)>~mt3ka$iXXdYhMw*VU|Uq66VG0bTp#7(Z*_FlDp3o
zAYs#|O5HzrbnyJ~TecQ^^>QDNQXK6?g0Q$4E<U!(Q5bONI3L3_e!Fx_Lmuva(!)49
z^s&cv+UKa$JMTeBPL*LM|Ei{qC(B8CmJhX|Z<lNg$IThXp2nu)(fY_o*auE|v9V2w
zw|j%)vga;I)!;6QF9q}d?eZsz5u)7?2k5$<VDYw3Mi<!Boo`WyII5dGOa>ToBrsMx
z-wq0-P+$-`_?&O`E;1KR<$PP89=i1NTRdJ&#Jep&`{tvR-|%&J-DPAr@QYbG{kFKw
z%Ju;N4ep-D>9SbN>1&i*hn?*(Jptc^k^%GZz5Mw}TXbG}p@$wfg@V=LQRf;rJt#`a
ziJ*e_$!mX5{OWV-CQN3fA5eY!iZdKtDlIT06HS4?7iNus30QRLeq&qu`?Q$l|HK<m
zN_l(P%ggWFo3@X4#Iw&u__xWp3VrPJAIc1fo98w^cfwLU5}{+A%Jr-nPGx}yi<}b2
z4BwY+E*CB`!N>LeaJ3tSazxxf^+Q<A8sFno`{n0e;#6ZzYgEZ&#DKLm`&Qzf;kI3w
zSjRX0mf`J5=MU-65yEeWZ}u>n#sU>UfPECZY(zhGRp4hyc_X)+28dzzsG3XjATMQG
z-QJ7vJX{U#LVR0J>1UHs4$QhFzK<T#)(#~-PxCQGk@A79PzQdT^TKK(F;B9x`3qW@
zC;6FM+AeGK8<w~Z7i=inb7<-N^peB%C8zxKom*7~U8MpHYPVsxOGDS}b1vnJR~&FL
z0>Hkc7UMEV*Ml+<R!AvEg`nUuh(5(kOXA+MWrb{PCU(&cHcMGg06I4GJ$=)3@6rHn
zK#{-DL;dkZVy74gzmAHMV9@mT93I&0=nnF!(zIZ8cAEn62feXvH^QxUIcVvcK8M{|
zy)!}*^}^GzYgtjuv<wcr&h3Rf-BNs!BZ#~K_r|{@BWT@@^>vf>DS%oCvLY>+HhiGH
z3Mh$_b|Y94d(VR5+-o-h!h!fI{n6NGH-e?H`GTCUWY_MwAcf3t7WP7bm#r$OAG6s!
zAKnnqvQ-~6PZziAW9U7aj1DLsGW<qidzjAKCaxS!`XkKI#_{FoS<8hz?C5KW78jQC
zQ=*_vbjWKa+Ld%M6wjs2u-_bGuc3ER(~2xG&UO3Tn1=XqaW=rS6A*{?S$Zi)pdg4N
zi^x`hcCm1Ljl=ZFRDvhx#2%F!1my-tRdIGP#pod4yDCAyV2{gh>5~7*aR%!e#V@uh
zMIPLZY72R&tB#+7`V?|82H-Yf9SHsy0FgC|!6<F1gF@c|AdE8&b4XH!SxKh!%Irnr
zi&IS(l(Ov7^XT0mBZV}q*MkVS=U;n6$r11KbUa>))W#<O64ub50E5h^=`crml4!hq
zcn@Vs!?Uq|=-NV=jYRmkNb#}`!#OY6ZUpTZ3(Uukp-VVy5j3|LW@M~n{aHL#LeobW
z%gVG^C&I3hRZx)qAabds7wL1D9CsifxOSoa+ip@3Q1BQE{LO{Hq{9eG0pWQ_ftnUn
z2(p3Sqp{wuj@6{-!KTm)H`sT{wfof6X?JSUn@qBcpG2y$!L>vjfzC+KX*dF}N2r{p
zq=wZ(W8Y=*&Wc+5PEXuxHYW<1IzCD(BeAYA8Kw>uW0UxOb75-m!Uk2OKVcoo3E^QF
z@X@DJ3&!tEA>yK(EcNPoNKKas8qbdMS*C`);Q`fPr22V$Ks%*=Fl0E*1ISrF9MzTj
zbV!ZhqpM=!R9P0s#xY1Yi~>a8j8H`c6BszrohVP(sW@2H@iV3s(T2i!5{)~J!G+o)
z^X@8K#3feoy<-V5TIkED42!K)$h?(Z5x-XSt&<MEPiH4^ylwkMH#^|BP52psepbv>
zXeym?emwtN6cqs+H5s-oMIgr5hfW8e5rnst#yV);a*?%)#&D4#^U9dzjTbXoZl{gz
zgp0_~YJ8=td!}aehY|TYaxPG{g+t<VRHvl1C$WHXsT@$l|7V%jYfu-e>_BQmD%}<A
z9W`qUsSBb#kXqgrXoVsn(iyTMG0+^i4?RZdcI~-YU5A-scI(g0L7`Ju$ZUfO3ADR`
z%SVAHkkAQbLxJi>VwoEq8ew~#lT0=lT+S&4-39)Gxk@R*B9EA5tpTSVM*+!!+IWCh
zU*wcBFJvv|r$w15F5`=jdu)CB=RX^a2(z@YSFv-1bo~<J)nZB;FbjD};)?CLUoh`9
zK|zF#Tft#I`9PUjRWHDUW8+}VgetCZvup#pI_Ey1!wq^b`}-(24AK_!WUtH=f)fD~
z;5L#6v2r&t9?6D?t|&6BPwP+nhYuEXI=K*q9pR$v1e^mt)XXKR9lnu+3jT5L^w2=x
zZZk0V(H%?>)@^CReO1j;SjX$Av~)NU66rsIzAVaY<{5=ZUsJ~-nAm*4@GDoAk?dA-
z6bX$ejuWeC@(Pj5Pt!4y+^*t!t-jd_@gnKzM76KgKN4zeuc?JJa%8|!FOn~kK%E&1
zkfG=g?fJzFq7TZIsh&A7bWNE5XXzoCbWX;yQcnhElbVd65u%%Am(%pJUedP(XCjVQ
zE6XnNor;vE)eiUxlr6$z<MpN9gd4CrUNadmHOt-by&Q3G+kK?d==WfQjyGCBE5SD`
zw&F!~t;6QmTI$Qsy42BXTjExG*s_I%Qf<T#ZnDzBVl%}H*ZO7)ec8Cs(XNs^PR80A
zwqnI~1#888#;GtzBbh`Tqst|$)@xD+XaxVb07iWF-rmN6{J^-Hs$nvDaM-98N;;F*
zk~M%sqEeP<f`6S=LYL$dqx!VH(wqS9iW~bR4|Ju5(Sj)_k@T&Xd<P%lV9JFgS@mLu
zVndQ%q)Rs0s0+=&EjmjaCqo!7c9EoH7RtoRcXLXe00M*4**fXtVq#nH(SPkNGDd<{
z<0(u^lJk5E^Qtxof^*g*J`J4Cr!A>zg+)o6yYxMV(Z-0b>IhWIDVj#cXxeiwMno(y
z0C$8c9`tCIUI5@H@F%eOsxN)$)jW6*cI~8qU4)w)&s%uBGn5~lxWEJ<P6#7lh9Ldy
zCEsJ##{r>X4zlktx;u%)->Cz0s;DJ&=92+Q4xShI2Rm)IOfT8bC@hYwXSpoZ6>6AH
zOcZV0Tii%p6PzpO0RH`*8c;_1hW`FejX2uPcP*c*8BTVxNhCsRX0!8rNJ?bblo+{u
ze4J#LK$$1$yqGO}N%9;cM$EEuiV9{VUljG&gK+t|*~f)ipgaH|wZ6zsvdO5Vp1mF~
z@Z?ASAG2({RP>E{B7;b>w9Luv?j$b}vG`mfECWs?7j#|&082WzP_xg;y^eI)0?u|F
z-Q$-O;v${Rmb8Hub2ji35?$wZPntfq<0R)o=}t;=F-C!R<E8?S=sk8IKbu1TQ#|~j
zzx<HSh<+ziyR+;c3pmr2jz?rCy=d~f$w59JX9|CvSSVsYX)_Z$j&{YAa>G+;?A1um
zed82%G8E<dWabDTK`2mz!`wzl;Cy{F{P5(Uez1d3`(b>DV72lIFis#H|CEjpZPS@&
z9x2Tr%A1?)@HsL_r;o<OGJHn+cVx4+use3xCn%_4rlG5UnU@>+$)uQNrrujvG>oyZ
z7d~QtG~{kI>*1jhxBiKTA(M6#m_$VfYu&hdQHfe7EjQCn2Vj<h&+D{?tXu0=5&W#c
z7#o6-6#Rn(f>dL4t&N5=28Hi%PpCO@16rE)LgW-MPAcJo20^)i!BG#Y65o$q_bhTg
z4CY78CM}4*220o2Aqa#cqt_#R5A&W6v$i-nZ-<(Z%9QWpby~Yn-U+)%ZJ~uia#W;u
zI3e%WrUNeSoSVxrfZ>KNa-hMm+hJ>ygxI+mxuBFJCm7|-r5E8Y7McVsfTm)#xAkU^
z=L-g?hQMY;T?3ZtII~7iej>V{kn~jpMbKjUs+JaLA!{yLS-EF9M*Sx=67J0NperDL
zS^ScOMc~;O(gAo6rL4exp%LQ%7BF9dOtSK9F(GsO6!m6vj+Au*^6mWeY)vePip7E<
zmgC=)K#aTGP{&DuSV<m&S}=vxT4(u0Ra6`Jke@Bioct=>Z{$;WXka*d@^DxoqNSij
zaP;h&hHALen$aq!PMPKm*ts=ltS)R?3Wf^m&`{0Zf#`HgwVrf+tD%1Na@EbfLeNo1
zAe7x!EXXX64vnwnB&OFCOuzJPP}HBS!ovQ&)n<Ro>T*&Y%WWtgG|$ozoDxAo&5xJT
zUG}h0ITb~xbU=a`3M3M<i9jBpT$h*bSUZGc=uDK;m@ABZt=m}-WGKpC3l#4Rc9mQw
zAcEP6=(1+hTwx)?NWvr1Gtm%U$OTG}^(bJ@aoKh?w@7dS@w6=A1elXK#|7RtT==+F
zyl<Q;7C8WI3?VOfX@`_O2kX^hhSKtRT2cf&_&0ygEcdt=kBbXL7Bhk5rvqhQY?GY*
zVuu!mxGEmXFrX!zZns&A&g8Jej(Z30EuOK+f57Fc!u58a<?tfW`&`R2_7MU}t$<<t
zW08U|GnsEtf5*izW!})HejwMUrfpn0DD?g!M+XEDm_fQ1y1}FZ1b`WA&Y;E80;V`8
zImQv+z-9LzFt~?gZ<_O|fMgCQ=6ma7ts`Ncym8DteV<Lbu4z2H%w~qo&QE8>#l)?H
zEBJBa6aMqjS5GScfkkRR!<#FjL7i%W<l|>;-TxDIW2dI!sC9ZIkn1(v-1_6~x~VV?
zKi;Wt-FIPCbyr}$vDbGYs{R7I{9-4l?($+M?Z;c4usUqX&)E8B8~fus*UkLh-*MgJ
z{{RWPcI=;h$9=o=ui9~;tRkM#KYITCm_j@4g)F_t272xGydWJc8h4}JhV#c!V{aAC
z|NQ65J51+21>zcHktTRaU;f_43%)IPDHjS=cu@iUVq3)C@hr>!nRyQ*e`O__)^70S
zJGm-64V{HV5OU9<@Kt^NU0B_k{`X_aZ8O<{|2IsqcX+aH0R4*e20$XqmKx(8nUb_D
z^OH&Y!&NtlB+Hd{fnG>8!f)7`XI_=Yyxoq2=#Zk{G@qya#wo>=ANFF=-P-y0AULRp
zv>j;WJ{hqkbms|iS}e08fwbeCeXOwcjLcNoFe8i19=gox$%1t{D+Z}o5sLkT7oS2C
zAa}%Ebysh@ae(p#_9DFch+qf9yfJ8V^<jXcQ0p3qrfgLcp<S?Cwpi<wu1r$xkUnux
z!J%x0ePX!66K@%<+9u9UJuGH3%99xca7OYGnOyX||HHb|{(Zq#Kh8KOIJ-s$i)>aH
zTdP)V6GPL~hOUNw7;AMmO3{Vpe?G7mngNDa`fl%%X<%>z>^_OLV8s@o&NfW#3FEuu
zIuo(eEC%eqT`;+>HgQ#l4|1MlWXLCm7Pcjy79SEx`EZ$@O<nLwIw|sGo5@u(r{KuA
z(nKbSXs)-O=+!83jp3agVK5VGnr%i_mEOyLwVOTr+273BUg13&lyeNB0OvFqtsLs{
z1d7Lb{)9Xauz3y>ewK`~X*L;UlVOgUf$Ft$uRabkL;p4{v)2mgL#UH`46Wh~kuX1A
zq1i%W(C27F=pvDkS8aAV-(k;F&ews6fLF8<&5@OH$>C3T9%JGUJZbMdp<vHYk%BK{
z#ZfvN9ew!AIG?;vPUrJ!+27o}xVY$D-02mwlg)!Sn>!<EZ1XDC;eL1U{R;;Dl$*ZN
zGd*AD%L7f2OEi%VNqMG2NZM{{%V{>ukMm)tL6diwVu|@1Jj@<x6MTxc`dhyI;Z|h0
zZSF}oF%W=HT;aCMN*Mfn17t-M4&YorLDj~_VuI?Ljq`L?#@f?(rAAqGp~e|3bxEob
zIQ18c8RoeL6exx{#nl!Kt4x9bp3X9inp?W4o#-&LWCj+Fr-RW*Pm57St4`y5gBXfN
zA5whh$(5UKnYIf4C?Lf#Z!Tet7P!@<TnvX9>_QB;fnqfY*TKyOjo-~a{}mI?btc?g
zJo!7atENj$*53&Fz?_Zo?Sx~pN6PJMt|8c#HAGm3#^hFm_thj*K)NKe+m;PQ&^Yi+
zhrb8lB0%1p!u5XxhB(aV`XgoKV=k(kc61@@c7JL1ezhBkvnJ}W>Iii{6beTab$$}5
zzr}F4m<3lHAkq-17t%*nYh&@Q>-nc|F22WWT+v{Q@an^7y3UDv_6bXEZvM2z-?-Wg
zah;VuFpUPuN8)=#UN4Rb)T>-4{;rGTse`jyF#(@O8Cov9&M&huQCP((e$VC&j@ZL*
zAPW;fV4{Y0AQ){l0@aR_8*DdG1Rtde4v2JX!_J12WQx$}!b|7@b0>`peLZh;CQ$X<
ziKINq&pxN<Qfj^gCGq*1`Yb_O0H@AwX*~!Lf8@txMr%Rw*>lSD5Ki^?JWY5g^jScn
zORA7<@<LqH`0Y7Q3!T)!J2A2+x8(vm%Fy9EiL@&!Xxny8|1<&j@fglda)Y%Q4nUPM
z9WR8}pwhKM&UzeEune{C^EqGlXw*yD3KIMmD*%bN8zC<rNgWYjK8=H7cPe9~ThAZ(
z;$H5p#Yis}$Mm{WxJz(d+9ZMlv_Sm6k|wyixfOj(uiO0fhQouR@S1fqS7bH|Ck2)3
zotO=iJ0761zhjZYLFrZ(eg64eQD&KwfKOl|76TZ_*(OoYU&~DnR|h|)i}85#?!B+K
z|1B@eMFwRM=Ej}vukU?z@9R5XyAy^46$@m3i7K|Klib6|!Ie;At~j3>+-*@wD}=Xt
zDac=CshITS)%R#CN?RNRP8UjUhPhPcxfod<#PpZ$BSF5@GYTbe<$KQ=>OaepEY^}&
z$H(PxmSq#(1~OkD(2<Fp9p5!)pM2;>R#%&Md?e`xc3Y@5Do6&PD6(?A0EV2+rofly
zq+Z0B_9zT&P;{ONo4&Igh(5g{a0@sVXuI|>-LFG~_wUnb3A}TY=ipns)XQcL%sPle
z=u&R(+~4}Dk`Eo#*JQ`xyIAw8-P#$oNLh^u54@*n{Z?}7N!*Msn5qjZxED&+;qKv1
zyM>9i4jEFC{J~Zp7ug^g%;3mOGxBNJuOax}k|{BAyO#xCxz|J*ge6`~v2+;-JFhg5
zAzp6&0JzI~&XC2e2<$g1&f;)@r?X-{hqK;_TCgm$w2Ug|<x5zgSF;}w`_>CV`1v&)
ztm1k4_t%eJK6&-_Z%==QC2##v&@yZi35bZ5&~}Obfr_^FJ@5RN#T@ns<(8mtr5HfE
z{7MXittK!(M-72>nVx!Q#Xs}$I3;aEHre=Le{)m}%gvv%!6vP)W@VGn{P^_c!P|qM
zUq9VfW#GJ63{S~Zqo1_S3M6X9#iZ4B-%u*nPx#w>0urQO7E^vtv8ZVr=!nkW=pp!w
zO;nqckM#}8$HlavMGzf)HK6gqM|ifMSTClNqS*HIY&u6D5;8%hIF9^dZ;$8&(hdKn
zg&3gg|J+%$mR4vf=gV;>Sv^prz@oJBptAy&d?`7)w2EH2l@g-oi-Z$HsWCGwDKai}
zcpxpgQ*aophO#J(Ivs~<EKo!dwndPE-;L1K;Y{g!Ebs#M0g|E$6;s$w3NjGShq;ri
zPgC@dMH@FgY4(Ergezpf>*Vh^nIIYsGpGh-l#TPYq)^seu1AkPbi>P62T$Ak-*)sf
zMpvD~sdTWIXYCdVyuc$UU<4Ns?X$S{aQG9NkbE9QgD4qGfVQ_<ER6d3V!ZLwmATmM
zvhJyNp=bTb5ow%NSZ#lKA%dV$TuqJ9R*lk6ilbJ9l&G2|DL^_WeoLe%F`4@?<~Q1U
z!Rn9-uUJwisLr9Gn@9fMK}^5<{&1ql5j)se@oz?C;z2G^)G+2)vUU3WNiVOBowYW_
z-=m9V*BF1LhuE4+BS6WdJu7BIH%GXcWbfiCqkKbK=)A~B2{E~Z6aNiUl^gR3isk}L
zV?uXDn{rVs#v@TTW!B=>Q-XvyI?Aai&GrP+O=PKickW}YV8+Ok(LST?JPnAg=h5Fn
zlKoEAvu#k!MyN;BtV<FSh~W&1OAsCS<~x2vu&FYdXSH^H#GHUCw+#w(BI9o9rXswR
zUL2_~7;ln|`)at|Rn#3><8DI&IDxpUQ{$f4)NRJ<FcOm`PR>)D_)2&I`#dBh!bqe7
zvKFRxs%aQ!l;@QQcTCc|1}r04F(Ld#TQ#pM6o!KCqsaizN@%$^Sn3f9nUqLOEEF54
z?Yx)ueBuE^pL;xzxo?MDTpjtdoToTWc6!kYoJLeo6%%c%x&UO_>8$h*mIZV)wH{dl
zq8j0g2`E&DFx3tR^>%AXN)R)F>pM4ApF9u`lsVr$lY#_wZ<kY60K)P-24VY*Z#7$9
zrfabesY+`t5jojg>jsqK?#}(MR9?zzP7S!VR~#xZ#F6yBPrbjw0Gcl0uH*7>>~y-<
z37uams#o1;_}NW7KJ+T8^{{TYw&NXhfHNIoW$?9nVC@Va`QgMVx4f!t3a;T9G3wOJ
zzoDaeHhM|NI|A9Jsv1e&N=2km-?JxxLn_<D4-~V(KiXip8b_iwWW8-{w;F7c#%1O}
zeoqKWpBt2Sm;K~2+*N=xmw+WGR7n}&?aNA;r7cqpc7>RMGpSj6+xnuL1gm7iVqgg*
zLRvDQ+w^hINr$9NK;#=Le1Tf^0CQ?Y6N5kKD&_3WSY`QYK&H;CF;8s0xFdT3nwb?W
z1QbUyOTJ&Q7Q(dvYcNBJ&zm=3{18pcycamxnOVYWWHKf7&47Jf{Ux&$ECd1Qkt-6a
zDoVE?yUlPg5oH4)-dFXYuKfB5Bpa((cVRVQb>b$kCqLS7x?Zr3|HJSUy)B@2U!35}
z#b7?ml)?oYLgDPzFZz@0|EWb^wN^J=_GbL~@3-h8gUqH(+R?y(Whz;ubV}X9l_<ue
z_zsVveFeBvOn%BIqvGO?9{3G{jHWXRNQB>e@y+6{@+~R_#H^;d=*G}%OY6G^kf=y?
zbUt<*pI01n^0?<%Xix4!D-9skhb985%7d<~U%0<`p<{R)8_{J`VOWNr->Ml#5HwXL
zwjy%07!;;t2^PmBE2snQbBE4c@hBSYWQ~zX_i9=g!TC}R%sRU_9cG=(a_va#=o}aM
zjC4-eE>R093&bK+g10SQVCO)s)rjP(N|8{oPLthkM?uEov?mx#)Pe5}$2oMuo);bA
zsSTlny}L-hsfSQG7^>cnCxE(Ip3c(A`((60GYh$i(rqVaLlEfCG6Sd_qTX<TE_Kr>
zW^x<#lKlb|Ju>|CBt@rURY3Uini_7yK+BGgF;v|-26{M4-}_#aXK3~{bCF^^nA03+
z_=KD38BpJ5q$|-ZQ#r*sPTsk-c*kL9gk(T_@8<asTZ9h`-S&%B?F5J%`bRoRWLI%<
zTEIYd>QpLzzOf@Td!yuHR^ZhQp1(B(G#@xmaS|z!lFP1DlB&Z7TfU&s8yGv|7{kqA
z%9A;}24d(~yxL)tL_B+Su3=eS*`!9B=c5(?*_h|!x`W<X4l`61$Mekt*nRuMSw5ZX
zVeigY_rKismsT8Ex>l};_H$LLuwuiWN)3lwVIB%quP{d!>y0;PKx-p$MG?NLg##l9
zn1-LwKnp#!-5zOq1v`ZbAvI=eQcSXzC}ZWWTRr%OY^uoiQ4X+%|3TA<t&Y>!VI9WU
zARGeb>ZEQIAcat_GF8@;1*Kqja1~V$HA*<JlbX3_C<D(Eu)-~*az<;kwZhZcFv}X6
z(<JhE63HP2Z@@;wyaSDruNXPjGXt$<cyjd0^cmJvY@ynQ&#G51tJQ>C`N-RA@zYhj
z?Ded;Tt1qJ!s0XVvMB-#nGI1b%Vg9Ynl2zvbw?J4&RB-y50t8pN7My*6;<~6+`3e2
zC?D5UU@=E9d&y6kHx-zr<tYY3MKxeXL^gnxnih>8gpup!e7eVzdYu@)QjHN4JhwJt
zQ0dh)qQT=up!tljk>15I;+pM6=*k19Sq(<SS_BFI$+#G#W1+sAdPIn=Ms959@uWDr
z*2?1(Ev;7Hw}q(@n=GL};tF2f)KdI^qWOszK+)R7il6?@&Df$;Ua~cc^<a6Y#^k_T
zDvP<<v?A}|u%3@gab>qAb0*>viB5pWISU-<q;4aPkSqe2J7;xrHaX8hz#-E@Bm+ab
zj5=A!7I1LcQb8?ib2OpaCj(zNi}IBxULdgC`9900nk4jioL!RSi2H~|D&UYU-{BPa
z-|=xi%n4D7$%tdPgf@YAo$6gVo(LPpx9(OUdB;EB^*&{-@7%xt)u+_EyS=sZY4z^y
z7{Y0Ahky2zgE;kLcqDjHq$6*k=KUrplKHH3o-xS2$PS1s-rnQf`>Q+&=^}{3203id
zJ(#5+#YsGD5S~KE9v{v}GYGD{u#c0R$`E5;K>2Fzwd#rAwVoU6xK{)l+i~k)@@+c5
znyc=r+Sh8*qPR118}4XF0I4TmrRt&HO1aC-BNLP#cut*vnwYC-Lx))ID7e)MEUns9
zzEgLd#To!_LO?C9h$ySqo7U_A>vXwKt0JX@MjX<0z9^;0(i%HjeC*z5%d$;hJAOjo
zWi%h=y7dsg9_d{)J?z$nYcU>J)_mtoEMLwuw&l<e>}@{SF2wa>jy{MSB^$-lbT-OH
z9Um*?f?&5OR%=oMFrb)hC`2|D@MH`uC<d3{3IV1AI_+GFAjM91o+~1D&n=}?Qj$|t
zL~neek_Y#8uyniH)FouAlF!J=ZEJgb^QR{pr}MM%y$yWYy0>$06ToaRm<?yC4kaA0
z$Wj>uqPa6y#-Lam>_91a5#GhyN4IRO=BnFHyVsj^BYjxm^RmK|<y!xgPjLY92?Ejy
z;~Uuw;+?&B=fMD(RI#)Op<X_`;G}Dp3pqGD^saGqiFYE3%yg)ibITv~1?CxzUSayw
zFcJZqsZq2<w;9=zzh8Ud<%|?YnJpAvkaR;OaKBc&XuT7n-k=YK^y|=Ff7YGqG!F_7
zPs+N=4NK<{tASPB1gX|>O^P_zZ(A@ug$82|^Gfi+YQ5NMtJXi#092N~>AS9a^!=s_
z9^Ucq+Ta7x(z=sm9WuDfXiHGm@xfYkIdk>d4tf6r+^ST5T*IqMruOCle$%WsdK<+j
z#T#8!xY69Y<<)U|9N^o5ynL)qfSu42!TAH^<&)xUpKWt$E%7N@X=s3dQ?G;2H>IvZ
zJ`8JEEk~ui_atyS5~rSeizds%xmFIRny6DW;x;*aXneoO7l(9GEw_VP{-B<ivv^dg
z6JuL2{7N2dGgMVP$)G;idG3Z_y0)G~age#=E0%JFPeqCm?;@WHJPwY}S2=L#2`;QR
zEXJtdgX1<AdyLO3eKO#?TRyQpnx&Ichy~2IdBjqB7@B9ZX)(s|<BnU1OCYHS@wnQR
zbj<MzNRs9U$yV<k1*t;wvY8|cx$1^qdoi=+0L8VR8snRCgT@_?hTYsxApu+Dz3JzX
zDj<HEDTyLEZ6mqZ>T#@n()yd~^P-`$o~pMAqqn)b^3R9(<}AN#54T)Ld#Bl@>Ta|g
zM)@)`$YZ~LEpSM;6YSdtJ#=9HxTuXv(xCo)<Q%NL<{X1Vz+i{R82pO-ridj^u@~_S
z^JU<Va`5HS?%XRva6y)zv>n=q0JVpM!T;OZ@C0A5|3~49(D)(%JSSoGd2!@LX%f8O
zrgSq(hAqw(jK3VCLm5G$SmnWH;4b1#2Cg;JG3r+Ufj2!~j4^qjTKtl&`}lPa&sXUz
zsH%BdjN|VUJY`Obi#FyU#+gS80=5O;a{73#JzC7vBaUBiXt)3z0g!TGZTO7Ixo+LU
zBKQz|<@Iw58GNJE2_&b6b!2_q_II!f3h*1lILk|tgKNb&Ua*SfW>?b|*DyYWsDMxS
z6j%@1iq>|DUUPKZHYtoe<}_ipnV&;HAxBY?BUrR)NvYx_)rnd0s3?fTY3^6iE$fB?
z*$um^Sc8D0PX;9n5;%`@ZizRT!-`G>Ljnx$HMHJ@H^FLu$|jG{Xx(jINmYch!??Z9
z>cbIVVpeG+hzylv6zArg8^QaH@~kL0S&x#)GUzcHKbU<RkH^s-tB`C$y?8VPJHY0(
z(M!zHVj`h0;<M+}l`tDSAiREgg0F%Q9y@}sy!iz)cD==;<4d(<np#8=5vl_pZBrX4
zP3pM6Ndo*eXXKST-LfT1l%nN8E)grr<5M;^=6kbsT~lV-njnfSwddh(`cWo-N_KXm
zax^QL<WYsNZICc_koohAzUBU=p5<FY9P&wfyBmb25E-Krv(k79g^O0D6HA}*8oXWA
zmM9B|cmf?8Vm5Jj6p2`92J@P~lZ7LiLHrsjpS3z?;rO71YQnYQA6<Q+Jfk?1FNctF
zlnHI%(Ym1p^9+A~ZSAf-I+vY=EPN?NtxqZIIxQJXll=DWPIXL&`OzVF>8RbQnz#E?
z3sWs<NRNBujID3OLx&dvYYM~bu(Sw}Wms6>R$R*;&1UJc3&-_WlAmHd_wv=!YFQ($
zvIZ%NC%~(~7jdGXt4K9$J`h<2yCNn@27`{$!iOJ&qzF1@{kWzM&&|7c_OX{QZl+zi
zD8T`}&PK3HrU4?#K;6z3ps=rBT})o{_vOp<49#)4!|sL$8m_tT0v^p5c2L${>{Nz-
zd=lPr1*11vb(|R}@3cLC`xKbP^T`=CV)0Z(tuUNJE`P)#zdqU4^=Dhql>}%%V;wrx
z1+Qp7<B&V6t_67_n9TxP!&!uSw}KVwou(yMjZzVXrO;-X4`Gf_)#fFtCvslJ_QRZm
z?*fZu-K(ENoX~fol`si#X8AcKHglS{x6(72^R}K5*>5?bpRlJq8gmKNd<0lqxI!|%
z1A-d2;lWuO-djaw`85yJ(KUO_?-02jaUa@+M(C(-)W7Zhu{=dX-cZQ=Yav+<_@j=n
zZ;CvkTz;6T&GZMYSVzSKvpmvu9A9t-FkCFXB1(3sfcFbda{&ZRvK?vJ2oN?VhJ8+7
zks{xIG#<;OJ4MwWeJ6uC>0uU~b~{G>ur`y|SHa4Yby=kzS!Vu9N>)r^qQR^!Zb#+{
zzF$ph<th$WR(mBDuR&8AaO*I%y;Tb!J!0EQWeKSIy7tm&8nXrIcX$lIQ^H>2Pbo$e
z&mA8i%9_jBUIh@4C$~{Dc|a1%#ztOA^lTIYCgHs&c@%v2(Yy^pGMR+_F-+%zTJ?Og
z$m-~DKs8%}L1A@2KP=|;dObM<tRzmBXx8<h&YXj*M%ElSg*G~oEbL*OR)G0rNY77%
zo?FcW4%;*Jn2jJ5;6q+2Q*BAaH(VYVN*$AAmwCy7kNBA7>Z^x>9EQ=Vp~`-+9jj)M
z12UaWcWv>?WY(FfSg3kpujOKa9DxHzwi)OzB8q{&?mEF;GBqFN7?XTVoDS(A^*p9d
z?m$Cdch|$tV5!~0G8$k@j;PeBP$PSs7>z43-PN^}F5>UJn(w&Pcg8+8n1~YN0g$(d
zO0c6q(NUXOPSk@NhW%*P)7tV9$Yg_>mCDv$w>}`@N2eORf~xQERQ?VT!BE5tL~qi1
zAlE`LLF%#wQtov^z7w2?Jhth_xHScPnb0Ouy!sV0@%m^Fel~mck;tQt?A}QFUm=-P
z;rbC8jABY|#^sKG>1fn8N29K3wPGrGts}LQ7p#0>rDtQ5@A;oFMt+SPEaGPdz^?Nc
zj}FaPu=c?0r_%1v5+!!zRY$wwd?{V6BdOA3zdd`b)`(BvH3>{*0!3ZX139lP&^k5l
z8S6>C=H|8Xw(3_$zO7CG3nen|pBGEd*Gq13JLE9ZAPhTEm=6At{K;{AfYbsx0hzb&
zt*{8^X^TZduUyBg-CQvqDNs%LPGMT`#832q3#Rj4!{Cbelx_0FxFf&^8I^?5=q5%$
z>w|oD)u~)W`)LjoGe(C|uWczmkGka<nlNTw@gmgX)l34MxPv5r{#ypM9Nk?<N26`B
zAr`gEA@I7++sC|IeT6;FhE+w=2c~;sHw;`IR^=Lliq&BW*A7UyqBbS7h$~VmX&1@R
z?P)6ec$`n$^sCF68nV%=^K5nuzXHk#=t5y#C|L&3BW_5M(_7-Ijs#$ol8qH@4C&Dn
zILjyck$y&DJffZ?eM!UYvM0I9_;bz5VKfp6a;QChNKpIOF|jP8aE9hHbhD3z>LZKD
zY}0gJ?(=*u_gBp;QTM2;F1J?Iq`^cN)p@wo1qoV>TQd{43@R*}E7SyU!9*j=9;PCf
zj&b<3OY=%ok1TsMxm`WY9aA}aS3i04f;z;)C$~reD1ZoblL4Frf=FPZwu{Wu=PD*+
zS{da7?%m8dgAUwV?y#OZ-D~VI&vkG_pb$}*@Dy)30-^k>amME1Y|WyX8U%Bsk!{2R
z8qm*2n3SXtb+ZTjVxNqg;2@pC+2Z+Rln=ch=5aorXR{yKJ3H9ZBGv?=&RIq<yuIk#
z82tBGq8&or)g{Y;qL0Z^)(J%<5b<mHrSQF61cDM(Np9cvr+5;bNT$&WAQy37?kX$8
z!j)MeId~sU?%QN|?+=INbI!=^IqQe3x_O~$Jpt}K5h#1;_Z0WXdAXcv7@!t^ZpHIK
zM^afEY8tO@e-!*t%nk#LHV91$__zR)7u?_0Om--M)=sqT7u2{dBB%|G7nH!r8$5wV
z2-VIQSv(ZF(!kGim2P7IO!a+uxb&0d7DaR(wrjS_DqggGRZ^0-&FY~x%g^{0K9gJ}
zL<nEfvjNeuf;ZQ_y%(-!T@b)qJUtk;rfxn2iMMJfiBg!z;kcM!HZ>-LxG4_`z81jg
z=+X`g(D_3yg#MiVUdb*rNS!~r%*(&wB}&3&dz9IiF#58ESBjT(p}1_BO6R`P`P!9g
zPEy!w%cN3D;4Hcd8ka%iPIYI&*WZBubaj-3SWi8GM{A{isB?7G$I{OF{P5hrr)qfX
z5~V`$`VlNqS<k#AGL?-~4y&wS$=@60ubvdJVvg29Ja_d2NeQ4}OI$gMVOYy#upErE
zO=MVc3Q=^w(r@X+yFY&Lg?stvs`tkazJ|Oooq*2L6Uw(&@9H}7Lz&IK#r;(BY=xMP
z(i_TXlnMR`kA+@5(W8S*VJ`$#7p@K<^bHs%0=^`}$KK1Qe|>cD{KuznpTB(e{N?k5
zp9LkLvA${136@gr^{f5oLA6Gn{%XdDOvA%8sUMw&XkvdfB9q|CVn8*NR+fia<;dfL
zed+c0ia7$|(6=B}>pp1pO8;M^B~#|-laLJywot;v{5%W1R?IajA_Cs|32`AK{`nBK
zULtj{AVQV(gwc+}!Jb>TaY(q8$K0Z=J;5Ep6&^?$+xD&MH?*s%-sE}EyN$s-#cwqV
z<wQzBnjyN_mct*VaV(vlLhxHey0@I_9w(qrEnkUeD%ahOD2EZ|<k|cFymcjT8Oe)2
zohEFyuwX6y2gQ|s^1*Uk5l^qK8d;4XX+MxMn)px1d}2lua+#2$a6C#+o}xYwS+cD$
zbKv<^_MmKq#%jgaNT*ljAOaNgPAE{%N@QA?dmQz7KDxp+j&ufb=um$*2Dq<lL#Zq5
z;sr144O}UE-&dEmc#`Ug%6mso0x+R`WllV%3|i1l8TNG>o+IQr`W`gZd&@_n^&p9o
zD*zRx#a^W2A6eg~GUMCets{ledpno*L*rc3Xq;gLlyI1O`+TGaF+|*uRO5HQIr-62
z;=rkyzIJ+i@KTc(eoI1!7r&^XUU`}ya|oQ;7?V64^?GN20Y!p<hX-mdEyxq(HTOe~
z;mQl+JomVbzLzWFPeMm{SNK=~_6g5cAVrFPrRB5I!n)&o2GlY{ch!(<$J<pCg*67Q
zW3C%9_N8V-OcScJFiS70FEweHM#%SI>L<cXL#rX^;c%R#Ghr~eWx7Nh6czb0Nv_*G
z7fbMtwwnwj>RLV*SNB1dq+<+}t*LcK8izwx!nweY3(l@+qELosO=`@jJ3aT5g8-9#
zD#knCiL5azpktQVUv;Nu8njTx(n*?cd3AOp;e+3z_+jU&!c~Qb2qCs6Kb}^Lz?Cu)
z4kYmCYfNJrqKemr^b%M1W@x5wwopX<Zp8<L=CV;|n?j)1bZixzx|=-B%kqS-%=rdc
z6fo^Giu(<O(5ql5ra_Aq*uA5mZqB)EIEKgP$AI?xd^59$5%^J}>Lz+SgtV1EK1}!<
z$ne!082;4ppgnhGsLa5aSJ_yn`i0a2gozUPP*MD?9NKUu;N1sg0{!cBePko97q1)%
zdxdwE;Q_n_gJ@Fh=|-MLAJWP4%DA^-gou3T?|#G*GOQ}Tu^eigvRupy=>H^};mujf
z^1Tv`HVF7VNj###AzlC~36M^&rgg3=B@Q^Cxro@G*pu3ByvC$K*Ysm`C)V}%S9e0Y
zBaBg4jXAL`85$Kg+Z1E)H5YYmerdnuLYXbtur8rH;?1k6U-$Sso=em^;Di;%q0#bN
z2|piK^5N#CpjXj`4p}s@ikxDYk$g<lvV-T#8Bqg~=1YC+>>`dQtZRy)^T)zz*cyv4
zjd<1AO=$&K{k}LzHJ5l?EGCU5vI$-Za6?G78V00k7oKFpy3}-1>W@B7S;MfFlOcve
zuoi;!rGC?87d^SRu6~beudEu@3oui2YPAE)Vf((~8IjhYSiS9hfSs6snB<Gny$>id
z$`DRvXT%YE(iBh_-bGURv_m@>i{2>HkBJfZt=r4X*W<-WK6y$DKWewIP&R9IB1^{t
z^An}BN&A;S9L#d2Z5nly>a^4#T~m$GmuCzunNlMOqt~dHyrv);iF4B!xy;bD^{{}C
zG?P<MAvAW=D=f_cq&emPQ0Gs^f+SI!b}dD76UGFJ!hhG5O9ELpUi!#pZ8gQys}_R`
zk#DgOSifYu>!V*F4;xY`9Jw7IXosgoQNmFYWeSv`x(O!Y=q59gB_h2$Y8(Bl8NNcd
zt7Qc9G9RgQeTf=^=TG!h>x?jTHMBst>1YcLcS76VrH8(}4*K#s=*t-T%tN1D2Yq%O
z^jQp@km8X!eYh84G2e;YbwXFF?do)Krn@*HUF>(*)VYUoz7hsizl>n;;_=bQBN076
zD`o)TGAg@VQFa-XovkPv_aR?VHjm1luPA$-k2-PS9NiLiUe`=2aix{>l!ty_A4Q;8
z5NU?vTceU5&^7U3G(H3=W1c^WgQxPXTNu#Bj9F@}=$9yYq~Ou|UIeJ{!`n$}Ex0dP
zk4))>0590yo?UDoKEkZ3j}>7`h8LT`T5`K$7b_>X&idn%FvB-v{oc-&ZXP}Fs4)vO
z1-k^VCY?wi8#J(@vzYy?H#}5WVSwd$fU6ltSk5yy+9IU*3|?3-R<5Q}u^+sRg!p`t
zP>MbjG={}Y%-F?Si)w<@LlIgx>F`g+7|sUW2SzOOv&EQ3?A&V7@y0wqlgQO&hoa_B
zGL~u13J~=;P<1KoaC*w2IwqlACCII(Gbs5_6PA|ZC4vBh!PaphxQ|2V`v}bemOU$%
zIrAbyj*3^wYSfBO73*BohY9Mi2V7fa9Mc2$G4?L-F~B+BfQkM~dHZJBbes;ekyFzp
zDR#pJHR^e2b$g%&{iWe29Lti7Tt#EX;Mv3#Fh4N)SY!U0w~ZIWr6qGTiCi+M4<Js9
zx+X85V&rVPGpsDDMjf{Ut{d-F6z-ztfE2C1?3;MY2S<W+=~jGX6{=7@QB==gW~?-Q
zo_3JiLw%)o9kCiL^6}`^j1_Qh3`DeFW*7S6MznZca^`O49*c5$&*TeSJvDTrsRtC%
z<hhd^s&F_krUcsvd_KpceRtvusQjm$3SECVXqhO=DZK+}0&N0K$5^~^h7xUhV^%eq
zm%s*#s4B)aRO53pPbQmmtaTl$O00oM)PvYP1e$u2ZQ#Bz`ZUcJeJv>}C~Lt52GlJ}
z_4UNi-;<?t5#{_UairUeOnDEh&roNNfGO8^$&-u@5*AMYXQ7|XC~OxCy2ay{dyTGo
zr14vwS4pA3nPX(4B9*(Y5pZCGTDSHh<gyZpwGF_ocLNd_Ez`~P6ZK-q_u1?uqpaYw
z4b&x#bMm|zInA*QZDWi%=iRZsQHC)pmP-6X%s_6>&!UeBNJBX+rrF=vXpBEAwc6J&
zZLd=7RO_0G&U1yTN<B+#y1qG4rPu2s1)d8ti*5?DHaFLGG)ylJqX1c68yTp8<n>zG
z*2aT~Dv-t0y7t=;wTxzk2$kAwu+1N%mHJSzHtDj2$Yvc^GLq2XL2WP;Cj+C8)n*@t
z;?qqBU*ON?KGn^T6{SKG)g$;JC&KOPW}wQ3e_$A72kQYtvb*V!zicGiN7fISB0Q-z
zPL<*M^{klgSL78V5hOt`W3pXWBX(D1Vb#l%-2J0awsC-{uk=JU5U1oWn1!8S{o_dP
z6}fobw!GxKeq*a4zMkc0WRJBj&^T~fUcM~m&nK_&1oOB!!(08)LGhY#gPr|hy~SR~
z8DrC_i4X|U&wu}huu7gfVK5M5G(?>Wt%hRsILwpVJO&B`vY6Ev6FF`|NE7*0OZ@(Z
z!ByO_6TiE{5MY6@%dvfEZlFsmeW4?K4z^zqpK3im7jn3IX7w7&r~q*c9TnUVrrhB6
zOVY`P6FTuRDoGIe8cqswBfaD)XO&3~x4U<`caK()U#Q7{bAOFjPmIw6*@-S}odD-u
znt+NEvJOJF23ehL@E_xN$Xabmr=lgrzns8PejK3bqS(nt8cpS?Ce8W4O2w@{8dERz
z_x6=%^pYGVW+ZFw&xpgUFi^kFMDRKzK^G7%9RPXp0LaP=Uqvbt_7G4NrRp{J6mS^l
zLg|w?RS(EdV5Y9tEm2SlZ>%mvqTa|*Oo6aVN+%+25!tJ&#rjb{7!pPk<q2TE&(p#N
zy+>;P)ipqzp`xwD_VGa-M-OTP0~jNl>vl2y_+9rdY~G!t?jdgA|H(U;_wHJ|b`6;z
z+OeUFW9^Q;`R?ed73}BVBVwLw5cj(6gDL1O&Lf1wt-3veiRddOw?F^RV9fblw+3L%
zHX_Zvt1e>D4*uTWy8559O_I06MTvICz%2Oam5$eBeqF5#C1&u9;V6rupR@+)taWw$
zCR;}szWFZuaOvH!T9+*-Yo3>_D<2IiIAH#d+@f*B0NRP&L}#e8#@=lJv5Y}{`lhZ$
z5Kj95b=rAg&=5qJHg;0(&``PNyuP6)-p*#t*5V~uuPN(*D;_`8>2AVCo1fd7LS23I
zH1FiV&=*6MnGTO`U|1RWenO?t{MR-a+PH?fXw(_7$wAqh8~_o<xw`7yVA}aC^#)aq
z&t}D$pw$eYyGgVVp(@$ZgdeY)Oe78AjQ<$8FDDO^m+8x-Z$DO-%Xw$uxw?5aW8-D#
zj8(>Z@SX$9KXyZR-MyMwHy!L&aX;{i(Or&{$#E+Z7pd62jDl#%dkR_MW1j2FpzzvT
z`1^eFJwTDwR8!(lxOwrqsfsbY+b?>e4-WY1ff`!{gl9J92yd&NR_=<$Stq!j*4Zr7
zZeU|-U9q$FWF)d1q8pbzaujWL$?UQdXOp96m{W>D(LlZz?^AtD$=5CPH1#8nm~5nA
z^eJvIDR|q)TGl0dTh$MlS&eqEZ#URdKC6)PnXhhna)s0pCJ!up_W|(xn_5@+SWs9Y
z8jx~`M!ROP09xjo6TBcqL5(tvZ++Yi6()zLLS&CHDlk!_S|w2aYgnuq#p0LTw@@LQ
zjND<?1Gd2pe6mYJ+~U4awq6d5%KHv)(=en5fafHxlVY-gb2e4cSFZS|KXtuuD?z(+
zMHtQI1*s3GXo461#${POQG&1pDKhYSG#<b9)V!><cnX!uH9}QAmpVMElZiuz$Qo%l
zBz=vjAIUEHQ4RNtLR-{iXO&=o6gH(Hv1%}dhDBCck6N$siS45p*<W49nbJ#*Bh+3Q
z!)QH5M=H8U6JF0qT3w&ZIqSqGMs*$(Sf%OH%e_Ea59K<a&K^78*VZ2<trnblBK705
zg6XAFU8CLvvI~dHRw#6;B2K}buLgHs0T+d)xZVg&jPq(__BAZ*O=V;i&UrDks~?VY
zO4ebbKzTFX;Fc6ic7s@3#ss!&ZCw35Y=DxT&YHHI*yV~;t+Q}dlde`X)h;IJVYG1$
z3&3rlYe(hwn|yGbKhExFJ_?EJlCxh{!@nrna|%?}y8_|AkKj#MM3bK!R!&jAlg7UV
zGeU)<5vP{e&4u%(a5sHSX9649FhZ3_)C)Dwcr`ij$z2pP8j96Mly=57qAY7Lks_FF
zSe`D;RQ(lWRl;Gd29bK6rQ7xQf5B2=rY`As9IV>qN+$onH6<fkQPvPd_J&CcBUjUR
zW+Lhqz2c5m8wuyCj`7qBg3_Ea$Z(4IBS!wJ2VZ|J_(pVyDFs@li@{7?S~+pJjXI1r
zMCEC*7?04mS-k^i*%YmUCUfiBEbztDhh@WKu`flf77B{fY?vSC%Eu~tP%gNk)=^c3
zsq)$6kOz-BQpv6XS~@MxHF>n>&#EZpk?~VxYmQ&qqELu(5D86TZ(2bVU@iQM!Z#_&
z4w+o;qJahO!nLX+X9<PI;*xWkv}{iTyF-mCOElIb9gHeOrMV+Wc0{jqGXX=5bb{Hb
z)ljWxq$rMcHWnFm@PU}F@Y6T-6IG3f9MgzvRdY%e*tt(Pr}Ovw_|fm&cIE3{O`wE|
zHB%*KLMLvxx0bZzi^JBAjMN)O<h-@?*#%s{<BW~H6Ok!Dz|j3Mn2y*pvNlde=q+L<
z#W;&pN9b`!eyue!6Dq+&uZhY{6&$0!b<1QT^xtKR<DV!gsKMB4rJ_Tuf3#{(UB9(!
zwarp3D&Jt8+{;JTZ1x(W`#DBbM|&b-ag$Ni4JnAjvzCBf-$>?Rca^^T*da;XQOco^
zkDDNTAe88k`b4xyZ4|2o`6kNr2E?J(1|D4uDw^^m%7+a<4z+qDcsk$bMz?4bbeJWD
z6o;}@aJ+^}_^vo4L=X=`BBC2{<}=x_%9_=gvUcs9#pzXGbeE)+a2)&a-5)=g3RmBu
zsPL|vv`A)X1<>Ga>j*gOVf^m1S<i<3onX$crYvDj>NTBlmUM8+QhE%s6>QG)e1!JM
zDBG!mv`g2&<Nz~9hvQ;0UgA=thR#LR0YGKpwRcR~0f<6(7sbkI5kN5)AiX$oJ2MEj
z7K|BWog`7OQj&?4{fn8+G?0L^C8nwCYMWiR^r7d6=zVI_JiU{*?{LebuN29=D5<h+
ztX9p#bb|7)#5@^f^NTE-BxkTjIa&s|qngd)B>OEdjo3U|46P-8nBPM@9!3kQ=aa33
z_i8#2JWFvCCJ7C+`;+)_xV{gT$vd29!1s&O99B^V<HT56UcTP%v9}b{4eYo9Oi9Pi
z#dTimDn_`JRDf-cklI86<wZV+wq@!JSaQZ94>W}7ToIC(&iO5JJj=3wX6*`5(%dLY
zl$tV5#frVPnTSc^A$UyL#B<qbb!Ufb)D@q?E#5iI*!bfI-vJ5;x;DF5N$u%<NYYI%
z3JZaVx(nOu+!$}wSbML@6s~6rZWZbogP)O39mwBEvy<dg9UUUdXS!L-J%da#L1H3z
z>#jWkj$T=UAlY3_LB_RoFb<aJnjKe#es!Z%ZkoOj2@cH6++_g?bA&`xR*CC1XVrZh
zYo;A%MX{+;YFI&C(6B&O4I|n3Y`1ZQo5n08ozC@hf}U@)GqK$==^Tv)CZ7z)i;<5U
zqEY6mnVIUQNov~zhsN}(Pezm6stmjuX-p0-@Xc)Mw;mauNVJp61V{|6VpJsOcQK_2
zGIWkU6)vYlS|L}x>~ffur4w*U6LRWp1r0<eS);I^`$2IWx<-j&fyAQbd0s5a@p3;x
zgBs+h$mx~xmEOBP#sN6&D*E&9^=nIEJ%gr^Qa22vQ@yH)Cf7dc`K;1s)x<@m!|q;P
zzd2kwpwy8BirGWN(WAenMzaaWP{K&3SZ0=EHpS}=gwz5|<4vko$F>t76<<Eq?+im{
zLh|6C$LX@FI-20bT$Mwp9lcLl1@^kMvXU;XCfjJ2mBE;EbPCfp!N5{*mPn6}Gm_hC
zrQz%5c@2cBNt8v#00A0fbf`6^ziAeIn9*=1qYhP5$*v!*qEt<Dj8Z(xNO+7cC-f-W
zkaX8kj~Z3>Zsgh9j6beQ1&{2B=_lMwCq5;Z^bk-dpQvnO;!<dS%DViu_OwLDj*FC2
z^A!^~CDG9w3j4i29+Sz&V#@oT03yREX8B2u;VYu_WE#K$2F9s+D<>+=>Wkq~-8E1>
zEp}|2jC!V?^+d^<nM;v^AzJS+$4OodO4y7edfbxO&Ow7v>33_*d-<-ZYs0aN_-r~A
zvEFMG_N)N*J3Wj(ysH0Z8`sX*4fpGRvw>Kb>#LjSKUX^QSFds6&^EOf=d}a2fdL*-
zqD@w5loHc{0vpVV#mT9-ZE$drY*w1vPi_j65u6qyywE(^rhj*iP-7Ct7m21)Djl_b
zrMjqgmGC5iI&N_$0Xn1m_uZ(}6CcN<u7uv~I}2E;($yA1B~|F)z$Ee2lUM!ZxeFSI
zMCS~s9CGO~kjj$nZd@Kk>`6>f;eVKo+y$z>$cTYc3_@BGq~n}yR}z-fkZqdtx*%d(
zM|=@=56_6(Tf1u)?=8a$-gUXX)nqzA>Dpz!AGq0zHxUqf5Oo}$OR=t7sg1<Fstafl
z`EzTnZyMWUT4&n}R+rm*l732Ht7s_JuA<s`agP7QxH8rRCfw>1A6Y;xH0q2+^oE>-
z6xesOFd;m=Q1g}BdjS|@>tG6bgG=ZD{My(EtuJOXc5|U0P?{iC;vA_7GIq-)P-?bA
zp{7F93ZLRA2m{m*0{}=sx4)<%=z%qy!JgCwC$V&?Ce}niBN}OUa7J@@Q+1%~CP5In
zx-g@zw&O)1fKM^;T1RN8#r97OTvwfbO}mLL#pe9Iayrh3)p_@pLQU~!lA7EB(ngbM
zsoQMLt*#&uUeSRZ47prwe(cKdL#`*ukg;;JK|m7=#;tc!?tTK-6}1otp(3e(J7OYI
zc9UMOhwzVrsd!sVkdVH{(v>(l%w?g{qJ~-ffwvD^5nXL{tEMW}&P1t;EKYrwifJ6J
zQ5y@<y4782(}Hxbn{3y%vCoN0)@)^~5ljufS=@;QkZanpaE@vf*g!ZRH>?f}cgO5n
zE!o(5W#OcCt$0*N&t%*`Ov+UgSOLA&t#sGVXOIh;!>d1<EMJL@nM-brU&_rvTIRzr
zDKb}~kolG3Cs_d-X;xpwo!BeY{Gm2ZCjC<EI~r3rpP^`~sh4Y0AjrIYa{!Cz2HH(t
z*~bT(7NH^SLHyxOv6yFZFnBC>*_WG9s<aHAoF2qm$-A@rD|!r4dcVmqeC0Rqvn3oE
z4!ZvC<bkv`FA7vvy)O6)rVSkH8LANUML!Ws!%jb;<%(U8yUFs(nsCjEX$km*F2=28
z>j<@wA;ef6$`I0$!P^acnwD&(9_!+DNtw=HQqIos-Lg}!WB)6rti^MJ#PLHT&0|uT
zuxka(65a2k!myV-PAA%Ab~&G=_L{oQA>8<;M)N(W*$|d1VRMJq+9zV*=!zXu(`dSR
zlCcG;?Tf!<l5FoC!}xTnzj=*a1Hlb?B&*yxJbKWk9>9`y8RWxY9rNM)ZvYuyA2MPc
zJ=kpk$<|LE+Tl?xJfJ~&I{rqG?KK|T-%pB*$%7EEf?=p@!Q!F@U}TB}Gvp58e~fP3
zG^;92>Bo=BEh-%zEkTBF@u5;}JtnfG-O#opx)~<Z2*BBfZq~7Z8D_X@C~q@l&?NOh
zJbwy^*rquPj}idr5Z{svf<uxg*aYTLG^Vh39tN-90wS`tEWN-%aBo~rooIv3vUx4l
zC&D@&zncAk<f|KnRbN4EDFJ;*qu(B<n64!MXSObt{$;|OdR3BplQSyHbpM#Mssyz;
z;b>oMQa&cSM&zFJu&<A2>957?VP7z|o2Vt|!#*azxk?UlikFGI)c4VtnlA=oQ3IUd
zJ&}b$mQ2URe9n5}^t{MN32NHL>2!)(368zf<L-)CVl-0r0<(jZDC0pT?Aqbc6}QY^
zlnBcwDelB<9EI>hpD=qdFZR*dPn`1zT9B^}-^hhxn0}Uun#^5#%?om1dU=p@t}ORb
z-&yBg-$3~SBS=}jk~WL}(g(f-?EGpw-I{l{1zKhC?MM3JLBo5oCd8Ca<TvDtwq-K<
zVX|~og@gbtd@HG&E7_>j;g*F6LP@1S+=`1(=)_Q+VyElFFx}*tFk^KXNCN<KvSh#>
zMd4&S9rK;US(1*&noBKi@_|_zM`+PAluF6;bX`}v!2r6IdD^t#LaL-7ESr}b<!L%(
z%TGX?A%za#=U45pHR(*)MDxhD+<?La_J$jspHQ8B*MlmQZ9p2r*ctkHx7)Ok8@%Ej
z7;w906+4Jfk}OImv^teC?rsv$<#yC5WCvRSj!|qQ?z3E5>txq>s@C++`m5%*Z`)W4
zt9u%tZ+;ZNNN&3$oa3d}K*Z@>V+II-p27OOn{LN*aSg^@)0ZGsvZ)*9Tx=qCmYf#H
z$Ltgk5>tL1QN<TLBrW?E-|hQsNJ`vXE)XduGqGu5+)mokGGokk1mdw6^a%)f^P&pH
zP6DC*@wh1d|Lpzyej7)UAdJ3BskgTYNFYSYm+k>AX=KT6Ye%+pB)Q#Qnm?)t6v?tc
zfP(@>vf23SyvF(7@q2`mam$Rz%)*6|yJvQLE*4Rl8F`D0jEw87<7u`GrRO1bePT*~
z!5cGuxWF`;th(VM8~<?H`FacKFE^zYdXK6P)g(Im?rMNI@i}OEB?GxKNU2F*Osoxc
z2C@ykkFOCFm_47POaKFDQ}ucx)frARB^w4;dhLiim`f*s-D7Nukc;7|<5L@-KQo?d
z{5tc|OZ=(a?WSa!I6k<I0`u2NK<}mbl|3b52$94*M~HNfp<!^KglTc<BY%DqYf!2Y
z30PLmI*Z8(n%=irfpaW{Lbh4e02}L_ZR7hWL$x(-wXG5gPN5z+QX(dpHGn=zP+51|
z7J+K5J?*4K=;Ws7-UphawU3u{eGbHKK6&bq=x)a^^@Pm&bIh4m35A1=s4=YSai>Yp
zTDiDJdlc<VO(Bz9-)dK68niF6dD`694gTJ}y-+_LI!*Adj5nKF^^@+T*`}my9|wnC
z;s;AAd@~sx<hFSgxABHe7#W7mv(3)xQDgz#Zby@DQVsgMEZ59+(K8#{jehR6;~CZH
z!O@<O=iORpg^C(Gy@FxM*1Hl%F2lTpuk@h(C8X|b|IPHqG@TJkBK5(i%Tq^UK&I_V
zzEa$?#Yt|cSYo4U4R~p~^G7F8UB5p;llfa7p>+ow9i(MkO*xxo?gGt2pjKHSEYbF$
zHP*Mms6IYc?-{82Rq<eDtQA~YXv?}~jARO?3bd|COd5dA%IIycjNYX@&j2QOjfODd
z$pylrHi9Ne%gcfxl6Z(+U?fK>$MwnNRee>Bd&S{dRYLxcx9Aczb0|^G=x+!Q@&rRQ
zxP|7wmkF%O$%nFux&k+{BZx3ol1o_+1;;4TtmlCYz+(g>X2Ks7k|%nfz)#U9e2ffj
zK7Cf5%qrwnr?1OVU4o_Np=0BAzkE&Mln%$hPI3sl@1DH)_VCs7^#pEqfstq+X*--x
zUsT8Q*O2r5X$8JZOW>glJy}PTyFL}qwfXeh=>-3M1?j<nZXdco{ycNc>=MxOD6+6c
zRJE|U!!eUwA>0^Vq$teQhYCU+!#vTF1OA}&ne++#UB_<DkS}v<1`~()2da?2J(g-*
z=yQM5s|tc$eKW!+b0SHrMzBd#j6GIZ4lw7_b4*npzQ_=;?LK@za5RWtYy<OoyYO#C
z8i6A#Z?y=G$leRSZ;bd1$DyBVR<dRqsvjguStg<twH@laNpwjs%73PG7HnL|AWsDk
zc6~m_AjD+mOH?{UOP*XS;+=3S(m3H&(8~}=XV2GJ%H(^GhnbjKDr=$p9>(4}w*#{o
zp580kUW0j(??qh~f&B+6ulRzx8`Q#UJ_I;SaVnvXJn?h!P6(C%JgY~L_dWM|Lh}FZ
zbS8D=c(G+g1R%apwfMwv<e`>B#d;(m7yQ{^@ZmLTUiot)EWw{R&V-%h8tz9@e%{n$
zOw_$wZGX83?|AqFOdHS28Dv>@|91|JD9=<m99~fB#8FYrX46^UbCz!668Eu@z+kd$
za6~#`ih)D*L_~Os{7QO$16R_Ks$Inccv+Tb+`?G4#hRf)_S6?-tP(?5nVlT)PJU8u
zAR4SYH4j?segY&jycJ8uvRVa}nQsr{-b0N%UvZe1$AN5bn?>eqX?UVS{2Y!YggcG#
z$uCHs<i26BL$wLM<F9-ScEKV?yhHILT=RQUxYQp|A9D|(?W9Z8A++|%KL!a?l5<?n
zj>;3q7mUY{O^Djd>EiJL!{tlp53MQXyKX41zx|Wpo-KKS6!K&k$moN}wo_J;>OLxx
z$UE^P9xJ9Pd@#c)`=gTy@X65e%$dZLZZvEWx6>nN_94+-wba2SBPNW1uHTn47R^SU
zp}eCyP8z9;9v51D_d;amJ0CNS`MCP70ye4ReX5R`pXT8hH&s?Y#gCVrj8t(-UI@rV
z3h@3hvXs6DMN`j-$;2kiaCSnfHT<os1HNN&7*43=R|emdYNa5Qj#n@2?ukbX4!c88
z?&4tk@PpQ(>kc6I*+0cEiMoJe83P>>Z)!;1gx0A_Zy@gLnzi;7MJtDwB3ptvE^AP1
z;ioN&Wl`6F5-~uD08snQTc>}h&fOCLGZZLo8_68d2l;bi&U?lAR6-9h_s-*Rs7Wkj
zaq|@4aPa)YmJ2qcfpb1XN}s-DnDzHUl@0^P806d|zH^!5C$G{wxmxO7(A8M%`ql3Z
z*TX!=OU+x>V0O|7b3^xrUJ8D=DDK8R5zm2y9=m!+)A@XQ23g|WpnBx2un=}YVf>Ac
z_sA&LEF=`9XAEZ3IhiSG>6N?Nf2v3HEO2A}EC2hmf=x*7TG3!2f*nU<r1DE>4@-pA
zwsGW&{h;f(ZoUKE0kG?16@QpIg?%+IR>2rr1O#kN%YFVjS;#cEvy?!thv(0tfHl6E
zh=enV2e`_<1*Fmg<3h=1G;ux6fslP11@U#{gI82N_#(#1V&o9<d`p{~O4l8~?|t5#
zdqwy(2b&~!TdwLdg=-(bKI4POT7Lan21;-##f7-1|597{*Uh(Zo00zB$L-)>?GD0X
znf)Wg#~obWV+!_G8|b$`e;S1t0a}UDJ<t?8W08Aov;4~4ul!d+IBzWF=_#5d;1@z!
zvsS;PB^P5zkwe~ib!_DK0it1Y{%{>_gR!r~>tOtuU4RC$GdvF3#pdGN-83qbaJaH0
z^c>w(Y_DBoB%9+C_s8CPEwG5%z@KR=kc`+S!J%54CP&TaMtzN9Ro5$D^ADayuqcEv
z^d15jYbbQ_*d}aQfQ?RrMuFnogWQB1zK*6>2|RgK*d@R?z)R+mZN+qN^M-ibHg7iL
z+i=r%a!qd9&R@TALvjotnL?ve;K0Nn+m(MD0s#HNEwuhgE9kyhZ?shdQ{;ZrIk~3a
zRkvJ6=DpwE3R$@E*SEzPZvWzTsKc#aXJ#G(+W|4#=D@>46DKE2Mjl3el$1Dg<<R1G
zD4~5F$axmqC`nGf2vg$Zaa8iOEE$w2q%A?vhLBMMdcW=;{2eUrqIQQTEbJnI@I!5t
zw=M`=k9FF&w+4%@s5O_0{BkEc%2zM)CF3dhpUvT2^pqp8-K={|l@#+9DC;Gh?VC$4
zqgN!+wE2gr2Be?=ehGSDc{^quHWw!_do%%FqtX&cO7)Sf@zE6WEQ`E#Cr#b17d-?V
zKpji-RHD}<vsWRA?U-8Q+~P&=#WGaX)DU9iv;K|=j#bZ-xM2}vAd-$a=5d_RJ|!SN
zLYq$G?&uTw@H;|qA5J{yIHPEs5T}vo)%ZG?O!~SYgQG+?#BJwMKzSC+5FCJR3qs{;
zmsj0on2~9sYjl^P-qN;ZTbN%?{0U6tIpzJSC+8RPOu<MrZmq!m#mA|aurCHN?k<X1
zdD#*bnS*RELm1A9SYC$sD(kvMn@l~ID{{<G4lNoOXVCIL>d7-Y1KyhmYs4R06L98d
zW|MLm3-BAktzIE`<Nne+ZhlgdFW6_s1BIHA%|ItWZc9DZH9!!B@<3ovZ3)UekO+|z
zNOn>y#}wiA5^(E`E>4$&IMBXgX0Ra@BO*)t5}7fnRtl?pMkVRX0B@^SN)FJ)a@y?m
zo06h#ZQS1+qd6^Lk`EBE`izs)=_932l6LmgM?)!2B;}UMqT)e;STq1jt%H33i%bN2
z4t<~_eSKffho_EP{Y%}{j>v#Nc^FKK;V{BjnQKdUORNnhvC5q+EFz3UrB*cI67Ga)
z8)Z<G5fW$Y(?WLhNm}k?7Y$KQYg2LKeAdYJ^eXqkwC{aYfPEB>=c|VZ3L^w!Xl(fC
zmJdEc>>S>`qigWzonaVCo%n8gF>lC-yqs$-BuzDp9k(Bo0|Ma3_}>A1+4GV<sBh6l
z*LQyp;P1UCl<{)%fJ>ZwWF+sdpb}Uw3lWxh`SJcU`}K;RiJVChF)?ZzSwKW59beIM
z(&^1DzvM+Nzxf3&lmLNFDu@eO&aS1`_Lw7>bAz;Av2rbX^e2y0Or>Jp{qZB()Zl@p
zuT@h^rk8nAL%pR-Emk~!T~WmpXG2dM9yO(W(Ep=d9CFFYCT*C<-e(zpMI4<MnQV1U
zXGz4d5Ibrw?O7N^@(T?ic&#SH9TtqMaYenkQ-eRR=_l%{DDH-bvVYJLmsX||+isE7
z)(d&hlK*HC%@bd`K^7eayq3?=TGaeJPF~C*-mrN_^J8jy=D6P~*KIfACTedhweZqh
z4CqKUVB_){tSTT|0O~MD9BwMmJhY^2NTCnyk1BVjUDwbq4zY2YM_w4#+tUi(MHpI!
z+<ovpNyK<uA6LWcA;hbv*rk-K%1z|h-Bi=dJ_C6&xh|B`8PQgB`-IqN6Zcm=Cy3>E
zEXN1;I0t~^=96HYnyFLgn$h5CO(+Vf!gkk#&DN*u^$HAwbFgO07B4E?X8)xtR%duq
zsP=~6iRMaLvOu)0>BrDz5vEdS=&0qxdczmA>trJy{glOvRu>M*HWCL`P-r`X=8(T)
z6UF)E)IFRpX6_mo_^Jhjqu^U;o7=!`z129>{?ChgM(*d$>GTpiV!A+1VmO3G#-ML4
z0_?VI_<jP>s9hBvxx3=V)d^}&YKVwV({dC_UZI(^iC#bBx2Gpd7g30tqso1KGXLMz
zY}zYMz&w}@PzT;ydl4o7vw^44023r>+P^z|)uIVP&Eka|HaFu}v+0q0)n0R^kjoNM
zz@fj~jL!uu0J!mA!qK9D5&i(}b+w+s91{~d@~D~4ju<~1h}_C1?Ov^vO3dZYy%wps
z|GP!lAO4CWxPK}oK-f_$9uk>sD%4ym@?0X3ZI`$D6@FH`rEEe7TeTr?s(C2w80k&Z
zUW5U5)240G*v!Qp<-il|EH9eqa^)wkev}1|=~$=)`mgYdHpHv~+-NLKQ;}2h*Hj#w
zidO5Huhr?=pq5@<*Ioq|t-aWb`MoCqKfCzYD^d`*%-pdMBr<+ms)>AkQIAK=_vI0k
zDywRqc?t&??p_EH2&xuReE5hTHM$z3C0aj5oNVU~-c#aih@<tY@e;Fp&n3<~leCeF
zF+xP#gZZg)Y}urmVZ8DvLAmq*^c{#IL_%`Z>$(8oW4;fP<P3D>LxY62y5es*PR2t`
zZNE~hnF~_qK)8O1^?o~LUO9&NSPbX`te)zmD@S22fjxAhsN?$Nf;b<}1vS5{0gou!
zwquI;PrOXyNHTO)5u?}lP`?9K>axPTK(MSwaIuTwg6rWLY_pCWOF8m%0a-Z*9YW3q
zKz}J`HKiPaEvzSMycn-GydS;4`U|aK!!%bxSq|6x^gTVxhf~Km))P$aB(ZO~e+mK8
zqnE!L;#oO&d#%yb562=X>{cOTNY2#L>`*P?9JbW~@UPq;r;}05QO!c$DE5JO2cf|W
z0&#u@l00Ex&Mq3*j<8%K=1WigLWT3UWT4?}U(Bc5;5cNxrjdP+I4OVlgZe05Na8O;
zj0W;&oITG~*h-@F3%T*}c8KO#wAQq)?Vi*Vd?LWIL0h9!W<zED87arybB0WH+;d?v
zo#29;!%>nb11k=6I*lAL{<fZ5EIGyx8I&OMWJn`@BD~lL3#3=S<<Gx=_44)GCqKL$
zZ~%Se=FTBr9me<vs#lNjyE|v^!rb0bu>K#u`O7!2IRy9}s}looiuGGJC9OJ!T6!C+
zOwBWk3zeWYC~(o~LL5$_II1lcmPKLozuxl2W1Uj)2K$y4^Rg7w+$ZHuA$bnQBj?ez
zH{AkUbC>Sezo2GJ$=RL<GBAK0Y%>*S8K}XFqvE{TmAqp<WMir8DMSuF8J)Lr@M%+d
z=Q@ov{T}3YTc>Db_jZ~`3R9>N&|qf!+g(-5Ki%(ZSwO@XuM!EE>Irzv_>cn!IR{x*
zb3q=Dvl0a!{$}IhL{wv4yho=TxSqXbB7+m^0)){5jZC%7qs@|OHXe&2!;5WLfU+z-
zj<@WxuRog}@s?8{Te@g?-c(L?zn7{UxJ!{rw-`Se3khSCl`9dOr(Bu0#@Y!ulY5}8
zK=0*fh#_{N<#*Gm<J%!~mzDpKsMB#<_3`zq@ddoWuvVHG&r2zjf$T$rgO(FU?>CZ2
zhO?&MQ?Wc!2D=qk-BPD3`*166!YZ!SLsWAsp$;-${q|Wg-cVJKHzR--Lo8B^FmK{7
z(W6X{+%m|*d9G`XE~;tgN<)VNW`dp~U(_Ijxr!2In`J0sSOcmy4>A0h9YU2vEZU6X
zxhQ1?@qAD&jGGEalnMA~#vXJeCP)zp>e@rhtrM(>9EhZH2<1fINvlC20LOt7mv=WT
z9MobXqnag$2XrFS=tj7&8}D3ut2J)QwwK5%M0wisDoikCxT=F(YOS0gRc(H5-+cs3
z2|j6p4|Eb)K+i(4!8~pHKS!ICU1^BXsXl|&(6%YBvTed=g|D&cs)DR)0g#;7nlx|E
z>hfedDJ@^kqP4nVvjvhN-AUe&?xUW~qlaevuGFvVR}YI_g0Yl!$y(&5(@On*^%|Oo
zCQD&i+lOB}-FV5dOeEByIdC%Wscsk=+s2EnRijh)30j?6rpDca-!$`(w2yc#3Fr-C
z;^L@mF!MKQQqX^as`W$%RG(d(d2mET2#y#$SkVI+*f}!NM1z;Ps)#Ec#SC1s&dMwe
zhTJ!tp?~@chN&~=V>4O>!2N&{gF=1n_|F`fAd*#nCXb=32VPB7)uf36!ww+R%q>^t
zs64_viORso?D4(gOAZA~)38K4)>K5J>m)PW>3@OoCxgI4D>Nbv$9B7?b03hP3)dU{
z?{+x<K{J;3Pwt}&QBN~;+PT<_%p7|$&T0O0Hjh^6ZV|6qg!Ol$522U%1pC-OA+lyL
z5yDSp<GyKZ?6jUJ*uE|Ypk&0{hNK+IPNofL*oOPbN_Z%4ky~5q=`R5x<LI_8Nic~D
z)U9VC*@UmAZ8tBFis75z5wp1Y<-Md?=I)L}dB~HeECh<NR`Cn2Ql^7r-BccK(bdbU
zQ-8FPrfJ0=VUzLxF&bQ(yn6uddPaTAetQG@hrYlG9^ijb!5f*>vLOv$o^m&-Th?X|
zR+nU66=&}3I0!-De>}Ai?k12AHS}dvgWOg_*Ri=Etn~`vL8y0X#$pJeEFAa>t8oW2
z!AP2r0UC)E06UIB#tDL8xFD%w`{-{mC?mFbhH9%LvL<kN>T{>FcI{ZF_5*7MDc8EN
zcCmfJkJ>a>gt-_aTY^m!57R4{h%Q#}M3!-W72;3CSJ7P`j6~<VI2l(Q+YQM+|J_MR
zRNCKg+W4rE)25?grInjtqY7j?t{kc_MO|Poiqmk)&;<nI6``m}N#@vsh>)ir02r1t
zT={|3hqy)@pc;mJx6mvl24#du8wtx8;3o(k@(CDB@5MFmnL*vt+o_i`JyN(RUP`@c
zNpK?lg01*4NdIYNfQ_bZWMF^7A&g0t*GxI7OzFc~QOtMXWXmB1s|2pjh~ttq7iKNL
z<g~iclG8r4aOruXkgU19r%b(jdPwaH9{%(K8oE}+)YTl{1`K)KJlbug2?{8R#?|*^
zL(z$YMr83n75N6Sy?qB5BODR|#~)_~bFG-yV&*c*u#Cnm?A{XLaXjMFU^J&k2U6kq
zo6*uNB5CP5I}%xZF?(<$L0_otA_N~;YVTDyNEyilBxUFzj*FEP(0%cB<z7c3y0B4S
zFeam18RXmspRcwyP@(CFkSzZ8nY46}v7N3guTin-=CAd(&GatCz>+&IM5_~-MqVOs
z%Cz8J-Ot}l(5C?D&h$b@spnk1^`wz-^Bh=}EN^GDJw4TeW`X-1G;^+x%hTFD>CdVX
z&Ar(~kt)mWiTQrd(AvS1QVb4d`4c+5j2Y(Y!uV+s3YZE-v`9n?5tE~1rRvI}5sd_V
zPw%Ak#)!M3*3?zzN{jlUfni_qxE2xPhtYgPBvVu<Zkbs}urpBepsL9z3y5cwTebuc
zp1OK6u>nt(fKmb7mX6)jv+U-R(XSUOPT0JBkJtsd5#$n;)ZXAQgD0_xk~-_r`DbZI
zf8W+5z()b=x@}Wb`#uvBximtPt`AJ!rX5SVeQl!lyk;I|la8^C?m5O=MJq^sr_kN3
zxT@$ib{e_4vOcqGA?e#lRaq?U<(3GXOl?VbJ2@mv)tu^w-;(U^dcgK~+$f)L`#WT4
zyuB~5g`RkVRI?l!NAXO;;)o?m6Y$2S+eMDiQOFsemtLlRZ1to$kQPvH!Q3OM-3DkD
zADQGl^>QuRz<Jep7T(tq`6$ySm&-NSC#{er<>Wf7Eq>z|Id>_3PaY*Lnp5#d)nNgw
zf01R*fd5&^i7{{+&`CmD+pn|)SP-#R?b_b#n7_Rkk0}FE&Wp>7W4P9Guak_LG<z`e
z7H@`wP)2SoibZRD+^UI<tuPx9dR&abzO4|WJoM`H0qbY%C<i8j;G}RtQRv-+aSYi}
zDZ{brb=p+@wuEQ5*4h%orPFiylrzX}bq$Rrm>dta?rAQyK=9k!`h)tFeZ(!(<E{!l
zKzGH!X9op}AAZpjIQ-_<uc<IUb*~rB1wdDY`%TftwGVfKO_3Z)+xulSap9BIIEL@Z
z^TWErBno`%6ces&V-K%YzRH-?n|!xP)C7o_b0?PEtyiYCcg?JXb_b-j(>c7nx;Zo9
ztj>86c^sRCUgD2>!y3j@79$b&v=GNs?+d(4sE9*mxNLrViQapxBdZ~o4;pp@q;fJm
z1;GxcYvvl{7zScecTai`xBh=2G;iImaXv4By?=&th~f~3Ga7K<>8zfB#;T)0>9C}k
z0v&umml(%dHspt`<0Q~(`Uxur5lVS&+ln1E{MG#*n$sXk5MERE40!3j;gkrt0=*){
z8SWJkMouvB1$N|VMjY2V(DiJ70M@@LdmJL?#wzDq4$jP`uFZ7(0q-;T{*n%0$Svj;
zeSX#Fc+O!y+ygY}lPy!I&u+G~<@=${LH?s-EpEU+Xi(fNAk;P_ZCwNk=hsVj8NTir
zy_c)w<z_qDF!@Ixwp|=5LHr7*!C%y%s5q*`wQppiKG>_0Zb*<h-H`~?nM+d!r1Rf&
z@O*^u<2@e|-D3kmQrD@UP-fCP7JvIlzysyDsL_$SoG=lfl-oQuGS1*+KA|CE-><}8
z{7UQvg7@sjuMQ=D<)9tEMq(L-&aPcHJSK~F_J2L-8p+8=ZCJ~uso~hI(*@BKZoP>b
z=AMNpYK!cCMuPK25`%<@B_#m4)V3)Cn9EKhONEri`F9WxIjW)HrUcNp719;giQ>*K
z&ms^hq-h|o7oIDIvU+*kX&E427JNZJ^vfX4azoQC(fIHQCYh*5SD3h<bHhq>8o|E%
zen0^-yfU482}O%;YbX@H%DJP?PO#sgTU`p25V&XeE!3gkq1@m6Qh`4h2yPCMHGuqX
ziQ(~ML*9rdY`#yIib_CTPne0Bj_38c=bcV!$Ww|#Nkf~N&o(qiE-*(NlG(l*KXA5-
z6#+=bQ|0#Q2Z)g)kS*&M6b}$0DX^K<5io9?5d^ZgfFV~kLmi=>!CR1<dr!UsvPA53
zk-)OYgM0DKwo$S&oX#d}tLBC6E0$+@>^E6FE{+1pr17jjDjeJo<qzv239c%IyrT?F
zyxPd(_9;d}P1{mWC^o-al6b_w$@0oN;!xsMyc;bb4#N!xht<I*VA`|p(yfn-Xt~Jq
zp{3${OTXa?=pNR?BUDuh{=^2y*>`8i4D?m81H_SjJSq}hR}ywixl1lmDN%ym%;e(X
zAS?0~`2huGxkf_epm<{yO5US4#u0{U2I1UG3ihFcZ2UG`GOC94SvlTlQ=U<q4!6z7
ze2vSRT4-(o*{j?Z@UOgm@wxW((|&dLJe0deJ8i{_D&=7(=K=S)P-!BSRc?<u#<d;L
z-)lyp$sX_QI`aA@r`*`D`IVw#uUHQ&f##X53y||Ae5{upf<dVbSbCGu5agl-xBs(?
zGcpGFE$*eItM_%u^T`Wy(__kCp&fncu9EY$_RH-fv4f9R7z7MvTo_u<5hIFvh<|d>
zI~A|aQ7B*I5!HY&cT!_#1HWM9Otv2BjAB;=68h*N4N3@Viv%yg4R3!Wi;*V*x#jqn
z#ee^MFvITHqKBDOLy4oD%{tU=C*7GIJ8}5rOjadj=WV-12ceCSC@buOVOy<)_P2Sf
zw<&h22|+=`iiV>(acl^P3WjVmL|p>a$*6`94;1z{^yH9dO$)-rdayiVJ9982ba1-1
zrZOG$HNl2ZYJP+(Nl4eF7Rm=$5M#>3>F3f4h#$APpajh+Cpc5@yd@wK^LYzo)rJ9W
z-4%C|{FZ5qZi^NK4h67DkKA<c;wC(Hf8ED#?%fE9yX#4a6m-g!zQXEI=`mKK>X%e~
z1)f`lTNcr^i_^^#EA1%NTh8*D>^~@2M#8||xf5FEr1i_=#R_luXbG`x6IlOQ2cYV-
zMKt8#=iXM#o-Iyz5~$AJhE8}lU_`Cc@KDhCMQ|9h5GB7QH0zthKO5M_ufdY5;t=yn
zbL00UjVN*`gJ4a<Eyt}U<B>5x2l!HV85Ph%u!AD~SQ)h5Zkw3E21wpu{IUK>BqSyr
z0O7lGd@N7`#9#u$HGwJp+9V5*fN>F@7+77!$XXuOcjNCyr8`g=3DEo1r}6BGvE2)m
z*wgF#u6Eu1cMbo!dH{d9|G+2s0w1m)m{Xf-`PKMsPK0>o9TikS*;QQc+5jNH7%L6K
z^#i|2lCjk+zORXJl0KvCX7}0}KM-43l^ktVnl83x*l+=ikqQpljL{Bh$$WSrTi1gY
zR*&djYt08LJ`31jk5^3{^L1@F@z|i|YB#ZKRr`Lm?!I5G*mpE9YMuL)-S|v2n{@J$
z7;>Z8TPvq4yYI&Q_iDw)bDFo-eZN|J->)9%5I-#&uMKq~laEzd>sGFeJ)S0+ouD`6
zBi!kK(ao!=mShFIeO|zgGXt)N1N8LREO}toRALp`XrW}cAPTPjDzv!%Ezx30lEZ%?
zgtDDU4*mA>Lw~hv>Fr8_)IuYphaXr&6c1^cLRkGJb~ruFMn*5rd1Z`0ciGW*Sk)B$
zLzvI|)Ni-Dm$!0Ib=lMbKqumkAUcTIM{T|!ynFLxPWj%M-B#Qu16tCE5FyLDs>ZfC
zuyZP0fPm`z?|W(er_=Ft7S$iZx2P@+<5}56z-gTQ5fp@2^0{^|<?WGg{Zbwyse~yv
zC;xpft)H8d|DLJ;b<5oPQDJU=wn}b}{ah6_PtSzYi$@N$JTE!?W34l+DmxPlFj*ff
zku7EA5Gkw5$-%xYp}U7FgIG)h=k?^G%F&Vdq2QCdn%9VWS$OR0Mz;K|-lNR-AyL6U
z1HY5LP;!1V{9?fS3IDua4nU0yo|9zJU<cGQ(Dg6(1kz>tmuY5NnMS4!TLSo1>*;NA
z_&W&4wijO|fM3~<gmgV?ei?)JM<n|8bq;n8seSPxA4=gcBM*3y1_HL%qWTpJ+0$eW
z>&R`gX(Bcd+N>j$3Gx_rUQ}YsHrdRl6}^bJ<Zw1^nkU9{65MOSmv>>ssq4sJOhA=n
zI8P=c<<~w={83n<`ZliWU5mGa0M)|VizL_*jAMI!IkpiLWdoCWd&;X`aqT|2J60Bs
zWGlyLW2p@)=_p>nXQ=*C3)E0_;y!{B2^IH_(><$4qj9yhzP#i*k$gnU7q~VVt`?~O
z6*xsicq{^AyH0m=p~ba*{Qveth=m8d@zq>I{y77AuFT)`a9q>A{~g#?F1gzHJ^zm%
z&__M8VFTBEN_W}AKC{37B_C1OHnY%XFQp}O{S-+3Q7_=DXwR0tbBpc&R(p2!F?+V=
z7PTD4<j|Qw=u0+ix#ww2=z)xH>R1}XU^?9D+O(l2bpzKen-H-r;HI|x_g4SQUcp*-
zyF?XJD*=Wv2}+E_;QVT!I0$nI7sc^r&IiW)|G35U-(UN#jx~c91+l2P2E}glU_33y
z$I>>y(QeTqYgq4L-ppsy_t|GWEasa~nr)YTTKjhPfi1pYZ}o9gr)jOX9pJ&ai8t@f
z$O70Fe}4vz<%q%7q%UBr9^su_EPS_3e5bn|B5uQ)#4D<a-R<1IAA}CwP=~pGR)Ci4
zVTskgUCN~_rBn(p1FANu${G6I&P;5SbmE@T1qM8z@Lhd&?&%*k8iQHgco4aZFw<$P
z4F>1}w$&MH9n?D8ux6jj=ej(;M{46calLv&-|=)(jjy-s<KJZSe#0%g-41QKDeb*%
z7kR{7>G&dfi{V8YO;L4y*CE92UTbr^3F!Qz2`ogX!wdTBa`=8Uo1RA<U4a0)V|NEa
zb7+gIB-Y!aT^x3;Xl`~LJG*+py7ttx#7IGV0v>-v{MVnWVquizU@GCEG$83K6ZuQK
zZ$?-lUNb4XdYO$%jNUf~=5E4k4}(moHQP3WHtIF@(B=qAaZOg6gv!ljJs+OZ^(Wk)
zT_g9=OAZDGAtCsdcR-Af@R55Xyx)uAFjLtMXDJNMwK7;%XVEr0q#>E9F+njvDHIyJ
zWUV<hx?kJDtO0_Uj=_d3M|&@Zk9d@!$IIur_@sLwCrAfxl`-@pd@#SYbD9L>6MVjm
zgvdqYu@={72R<7XkOkYh;~op77wb#yNt&mfOD9GI?oYG&7=qI3@d>@{C4)9!6f2(j
z{!_A2{!k1o%a>FVx?l@t<)j(oxCX^O$Se;`xvXF>cSp1ZH%LV4t<sLjAU=|KFAd4J
zi2yge&Hbg9Si@!F%Cz#`e!@Vc%ap;k$=x_lQp>a7H`fmcb>tHW(Uae|w<BBvAbAvd
z5LD8#tEHEBs9kLlkSyO<cQCX@f%v2llX2;`Z)o$qzDB`2@U~|dup)Ua|AB8;O9b+<
zD7u9`yt0;RdZ3m!%yRA-PV-3)xo*Xp&sRMqiQnW^G-fk-F5CdjylN31fm@G3y-Ljd
zVqxY-u3<9B-(nHBZ@-AC1mY^2S}*m`UteXh3US9K2I2pmYrcI;ycOffPmH$zpraoa
z@S_iYCgtN2ti8!e@LTR{@jX#$*{j9vl>eYT$%HM8Y|!GPvMe*s3P+A`GOg2#d|!3_
zq+#-s)9sgslCX2Oc8{DrpN?IJbM8qJ_poUT&xPa#iLDX)+QuS!<DO3-?}wrk+kPY}
zKK7z5jHUZ#-5}uuZu4kXUV@<EWH!B+j5^t1QGvxj@->lXU(gVHlqS@~N{Zr0!O}#H
zwQhKR)o;oVRVNB*RFB7R=GS91YO#%zdaprE*ESdncIJ-mbXIk8Q6qu95<8-n@D{W(
zm?bGfPWZOBGIbSNHl`^u7zK8$gXUV6D>ZA2=olWmpZFr|%pp?By#K-5t{HWpbzn^+
zZId5RY=@bsp3rx;8~d<A>%@xEI-PFftP5BQ=6$X9M=Q32Y0f;TQRi1#TNh@swWAtr
zS||5Cik{cz-PYa9g@!Z^er|RzNQK!s-*s<;2R-)!c6g7WZVWqe2fwoe6<`zn9!3W$
zqP^-mX*p`z5LR_z>d>QH4y5YX)}j*xHf|lNa}?Qwrac=&(6~`*=IUA<RVVf2RXIP6
z<^cgY-%i~s_8r}F|GiE-gW?BR{2(r-8Fp5X3v>6hoaT(`m_#nCRL2@2rBN(j4gEUA
zc{zESoCy|pF<N!30PW^#fMEORk;Z>t?=E_6)gGv758`U@S%2y7Ezz?1LFZz`uNv-L
zk9WRgz;iv~c{=1spy-8ZR6k?VX=Hl7Rw|vc7Nn|b)*du(ahh#KMYic;$*RZJ51Wu#
z>NRBq$Vxfp2e2|Fo64t{`qWOP>p7GnsSJ*t?JTL5wKU=CU*qE2>2{L~PET2^aT5z&
zEkzN3(A~r*ba^riwDHaukt^<1&3-%UO3OYdZBS-xuc?=%i?V6GP8wXW8&78&KVPnw
zO#m6VHO7CvZ2ZC{Z!m#iIiHyT?{Iv5#+PS|l&YG&KUGD!L_^i|dQ+Dhc@oD1fC6+a
z?j~KT2-)d{wmxOxVA^dg*xCU(@NjA)q&8-_<>eT2afV>Hab?3A(+gIShtgh{!*P9%
zb&$egVZM9ADT*{U=J~V%nYz!X$J9Jy7VFsP8K^T}dRuwC2dq?BzXv!(EY<=&P3)<}
zre;`f1I$u|Ybi|3unRRDS`N1I-XSY*A3HZ0bvJ7vXczioqL;e6cdJVZ69=w(tZG3#
zrX*z(qeT*eh+b<@X+vBTQ@JTD2&FJI`3mD$EJ0CEb<eG8UPU*+=NwciBgwlDND-OZ
znbaSxChDm$f@NG71a6tREBAZPr_hMqV0DCB8an#i87?mXiAR68P>r(5mRba1>9~Sv
zL9|;p*u!5LAAar?A$^*t$`-QjPi7|#JCackI%Ej$iH;^}k4u;co|zr-gHVSa8BVHa
zwW5AV9{plXs?mYMNa62}r26t>WMuD}cA^#?c=L!*Y?PyRr9@4-Fjoc~#LR7w7k#We
zP}m}tM(ssqkqjU%7Tz`f&g3HgoLp!tg7{GA_WgrpQG6WjaLb+vR<%4c{NLE3ltYdE
z;ScIp|8HrWrjx&AJ%UN-;hQ55`!~o1Y$?o9TWexUe0yfO|Hi3{R*AO!!lD%yMhWW!
z1)oAtX)I7!aQ{Ba^e)TUsDO*wVIHN*9w1^Br)5(dRqo~Nn4X!N$H@J8bX^QD8u04j
zn2$#0w66%w-`wH&n|f>k$U&j8RZCV3R;2i4UsVS!a`w=@>-;2izN+hGh`$E%FG2J`
zGZpP|gF8wF*FGkDqS_$NZ!z8c>C=52ERVVPfp8C_+QJoZ1`(<#%N-`so6jMLH3q<i
zPEDLpiAyPg&i4UD58Q?0u)8_0hV^j`3HHiyGlitRbBH>8?R$dCD~N-{7|ce|g7y)G
zpurm_57+w5bmo{JZu^XS=RjP^I~jdXLWaeA#TL1RY*|Z^s&S{i#j7uq)4+?baDXet
zS79>JL|YP~Le+iTr|}*j2SP7hBwCKHK=^q_N}yIBe_$0@uSmQJ(;x#TsGG}4s?H`=
zUoS*yHvTT{?jpmN7J>G+`ATHMOJ*(vNg=bYtX;yj5$}ogI<TJWDSr+fxACk#sprXs
zh1nlenwz${?Q~Ob4<1-fgi$=!+42TDjVichNv|>m_kX|Z{jNSccgLW(Ijd$T)q)~d
zZ}t24Ppk2{yKC>`vh;s#0MWTFTlzWX?S`)p$ZWzb?+@MUw=Y$=;V%<fD^7vnN{gEt
z$e`YEauBIMD9VX@1$nTK`2&}~p1Kz&RdVl)=O~+f>aMrxgwi(L#l-W~l^&*he3ng9
zyoG*WyO+P~@|w1TvK(JPvSK6}Jx9c*@Q-wFvt-eM!Q-NN9c%-Vb@*2o2ozvG_)lFd
zPhECsqu`$%2mo!6tZu-)$n|OI8lwR>4tzk}ypq3P9`{31HZ1hjdWHSHBEE36&<mDJ
z>qFcGY7Y^3X;COQ5KUBexVVIGGu()3h8IX*5p^l(K&$B3;Bdo=f%{dMD>YD5*Nxqc
z^$qWePLdo=r-N|2mV5fXeD7vK8DuMl1)(g|z#$>W#2tIAVJEDn>stCe;%Z3VGC}4`
zgIGf<5=<g}@kpc%kxH)7J<$($arL*{f3c=wIqQ+hjyRiM7L)3-_y&v)I$LyvM$@Xn
zq$8*02RBQ1d=ZjbcO#l`!>T8VNXD&gId-@{x>jo$@tXQ51(2ky86EIsJv}5K%xO1>
z2mU0h71!b^b3RRQa3)()*5PICvA{^^Qk%VM7<ubql4DYjk`qMt;NytN>8QOi0a#^0
zZhd&Mhl|OwGxzCGZ*Mhjj4F3<tHMq!!YTp`0ih9u?AShjKS+T^6%^RzsNezkJvU7w
z^$!kFqGWD>lhmI(6VE4(bkuW2ZMHNKair#bRh<`=W9=|_zZCg<3|CD$ME20#=bg;u
z(ku39?3x-q4yX?pXNHJ*si=vmgwqiT2;zVq)PcNdeVazw^vqbL9-@VULU(<@eE8`X
zRKbbro4YfBY=*P?++FkmpdS|%9#s+0&|)vY$+-c|^q{q?Iu|%5a`ugTI03nL?A82Q
zz2E#LhXt?Pp~YP9{2Q}R&O45JM={5y7qemYLwQ!I%GkJnK0WW`D$51LN22e_hUL6t
z8h87@PU}h9-8m17=Cdzt4%&t{FC7}rWq2*aqDnF>sug$dw+nmjsG0QC8uT=*p6Z=9
z5&p5;*v1aft}wmbsz+Oxtq?g7M|`$qIN|eN#8LBu5}p?`$on*lIOMq4^4Q-{Dl*%K
z^OM<{C<(Il@GWj@S@ze|p6epp>ITxH^+L*4_lSnSd&S|fJg?oO!#yW5ZwCIikKp4M
zz^icuzD*YmF-~XG(Z#q5#I9iO{qnRPp2Et00NPuW5C;6j5oFjhhco45SRuF{90xXF
z9^dh2)S9E2<IJW*ei$%ds@nb%uuT8Z?+;)-uta7hJIOBh9B$CJX3HVqESQ8LJl?`Q
zFy3?rLaJ?<#^>V;%#odI`;s$XZgC~sl0sT!8zTO=c2vbTb9d596jwslBE*IgMn>2M
z;zPku!GC-n4NuEjgy{}KGo=PiaR%AzkE()F4NK#u@6dtfghHj_m@y6000XNzhKqDm
z0AJlVp}W)^YMj}Ayk9*%^`2e+<vdey)9?4;jp;^p(kNc39F00q<i1)oIfR4K*^-NY
ztA{PkWkmUmmo^WqSPnpbn6MDj<CNOu#vV$WO{URHj>7um;*HLYMsVO3Ly>Ll-g+Au
z?QYRGpRe_o08c<}40JSZF$6;C?ycV$tvHiraG`>>C&(c^Pf`SN^d$V+`sk4g7TNLf
z*YyS`C=-b5M-0mdEPZY&M2z)D!${=G^~Wy}VVNBfep_!qLM7=M*!q-&hX~)gv?rl~
zzXkQ7A+1G#+Q##dB#1_^4i#z}z$c<ZG>|n&QQJ6H5TjIyi{Q?x`RR1z0cnoJ_rA}=
zIq<J0_sb}}MC)?Ga@oM)ioz7ITt12*)j{c689?0BLF@;?E7V6jb?iu#D#DDp*MO_g
zcc-kIXyOj5t7_=y>YC$(yGugFI;QD6_u3yrw#4Z<L}1|!)2V@*3gZI|%va{p+@d??
zOa>>6KL2KBT(`o<j}k*_tfK#^c;$O+HvK3G8S@-t`vL<ugVbzSAk}pX*GQUFnF`p1
z1hMM0!3Gg5C17=}-3tOT5b@X9b(|zwR>JM!tg6n+bAAATh-9dEa?f^G^I<mvVir!o
z(88gr@YiM=|J~-YXc4o^$W^<0abN+F)V$shXSI~I6~P#AuZU|eQVrfF2R1@t99R$S
z3h>1oi42GCxjp_KtAhn;cquXr|Mmyvga@*}MNb0|DJuvEy<-1B_qB(%4OsOxuXZ6H
ze)J?t%Z6vy`_%D4M}f(Yp*%)&tu=;#HPs04w;jM*i<{YNqv%0pF=~-jc=+5CC}@xG
z-RriH$XvTvg=}eGPC3j<-;)-tuv;7<Kb-DXUUkti*4zlU*xO{?h<njTh<;{7*zsBG
zvs_(!YhksP803jY<d@%(76lY4zx)m+3a`~tlP{=%k7Crh<Z}ahMF!3p|8xI-R@4zG
zHSgao{>S0rs~=x~b9e}e<Y8$3Ne_JmLDVcO^_k@bKC!6hseh20Z1TOxz-dz<P*4Li
z_3g;GhDIRP73r?KDv`vtw(j4@D<|lyyM1i%%?A)taBKXr1O#It|J&#E-tj=*(r2%4
z_LK69M@B8Oc2vlm{0+e#6jK)1c#~RwRQOET%kp5WvJz}UT@n6kix?t_MxM-0xHL_h
z#}jE$ofDV(rkZ`Iht(>9*<n4wgc|-7<&QM1jk}E}z!r=GyW)u5JG^Y)6;t9JyuDCy
zI-R~pO~_?EKUGPifj{c|?62-5618{xdRC2UM>fXSg}jy=RyR`zxde$K^$HxrxE|JX
zRm~Bsrh=5+Vu(ZqZV(@Qy7VKIVUBt@XgR0gAM1X&&7WPIlQw5~F+=5XDTx%#!w%7M
z!4BKol)V=J7KjL*g`vDk&FS=FJc0oL!d0Vw%VQB2j9^Yc0M98Hc-p*5ZoB}c=v4ia
ze!-XUkLM$|ZVu@q$R44PEqAcLxth;P*ntaTuN<`U{M@Z1nuS#~1c2Z7mNEp%o)8C-
zJ^;*b@h{-uypSH&05hh*SGyR%ayrtBD3ZL51;c4Wfy}$Nm|cfPNHJFF5koEjKzysM
z6R@Le@q~fN$qR;tZ_IRY?qnX0i~8Ihj4gAgsN=#u6{x3s7IaVE>1L)Q4O3+vOaRj>
zxb_wz&v?9*)ywOCqw5at?q?);bvSf#;y9b?18ywKZ5i-7*856>2KMx1=EoLFhog9k
z-9FXm$U+WUYvwKP%$lf1eo?}1S!>&{O~}Hz#dr75b-GbYKyNh|({%m)xtPQ|)Ji?u
zw*-e<cu<>L=A}&4ddnv(13w^-3H;;UE;ozRF(*KRQ<qc2dc`79rH85#GlhGJ`6In7
zsB|9&7H7dhB7;f+9z7jW1)6VN%lc}D$3J)oR*$>uBB~HMp_jkoaDYya;U>#5%2>BG
zXtwacvkPN3Qcv7PQv(qW*Q-N>pHAI<rzu}xH+%d9XO{bX+B9tP4J%(3qv^$w7<D^H
zp##Tl&M(k2p<g^FZXDm#z2eec852j#FU!fC?ls?L>So;cz})-)veLz87r-Em-7CL7
zBi&0?ygQtZM^C|M_#F&#JO#^IcbmiILlilAKF|y?&RIp*K4cO)s_1o(k^wh7IDF@L
z3rY^6%3VD3`FS(AfB(cax;S!N<=K6H%-^S{y8EMUnhVD<{%QB~KWa-T&FAvz9m24?
z2}zI%1^NxYq7yyj8kQkycgjlnf+YtwrH)A$86JER3nLxzQUY!#v-G+O^i>nWH*;6l
zO>1&eCG~hnsz(zYuJu}UxDyK>rjz6PM6$oZ5hZhP`reW_Cvw)Hx<VolhWQet_cx2k
zI>IYx-N;0^OO2IY)pzVE$-_r@3^d+z{N<5ZptL2#@`a|4i~R$4XSS}CA2NfWwcGm?
zIM}+qv0+Q~p`Kne&oXG`50Xx4wgL-nt@`*F0(_Lc;s|{rO5rE2;Mbj_eltC*I%sZl
z#rp?l@vxBB;dj?4&HZ)gfOj&(@0km&g&RmAncFo3)<D7#kH!GWzczW7()Tl<s(!LA
z7=QVl=eg<>N7dub5omWEJ|DrV^UWUPIPVmF1}mp1J%<-Di1eB4{jgC^tObp-QY>kY
z4hb_Q!eNygG~BNbx(1)sEPx!)vdG{Ap5+FDjj|(&conRu1Bjq&sLU4L>MxHwnsM0H
z(R$6axK_w+z{|hykrNDGJ)dCj4|&o1Q!cF+iM^9sHE@gX7&<^>qPPx@n2?8>r8Kb)
z5o`%%xqX;z-vr+)QHz^JsBh_6GRRgkmYHEh(liRk?l^JQOz#Qg17z?<Dh`(S+HokN
z8i}NfffbEyU?s?tU2!lYRn#|xD943E6HUV#>&%CqyAS?35jJ^GF)vo4?>GW|75cU0
zr5pr|a|5JR1@51dd*-wT@gu|Tq3$=^W73D-IwmLP*rHM2e_-Mtby$?Wv1&n!?#6+Q
zaPeJF0F_!{>Pe&x4%vD8#HLSk+(BW*h@cJoK|{qIql5zCb>OKM`0}pc4S}TU`pAcF
zljFg2q0{i1e1v9XY8sZUSL|<X9rV<g-=0>aS}T6NXo9;AIqwMt1QC{)Hp|f9umRIC
zU||U3C(yC<v%_H6ivgZ>ZCn{7&pAgSb7?O38Zxd)&yPX(giAnojO)B7*>2#EZyE7o
z(R9yy-mfR5mR=9Z#qp`E@}b>^o?*V1f|d(;Pf1ucJ;r!);7-V1NPKk7d0?ADW#Ap`
zm)YEqy)45^+_Vg#FMQTSX-G}FNqgbS4FI~<V6;$kn)?`y)fR4DZRPGHDE`(hAvZ#M
zgy+vt!{eLtf?%X<%81DXmpuwlh;xY54}<(hstOc3WhxN9G(@yn(onM9K``%YjO2Z_
zl^j`4&za26&I@LW8xGae87f#5>E93GahM<sK*pR}HIL9Wwra2!Zvg;AK)b)B=X*s_
zDMpfCO#f1WTSZYd%3Hygyl<~KG(w1O5qi8$)J`$H)=PZbXruz`ddtiqK8d5s5$rSf
zLgzK>75zS0x4bk5k`^&q-}dz~+yvh9j+e-Qjgq~h%PIUV7rL8eve;P3uehpNk0i>+
zqhgo5W$b|WcMkgV>5J(l2;rM5ga(tebE&{UWu9I5xy6dncTdX+T!4NtNd@Yry!HE=
zdbHR=FnzHCXZ!AA3%+g@ZlShhI$KO!`tQ0+2?h}x+%Gy!On%gE@t6I`b(=h-Q}ehR
zsJCeG`lvu@{-KJxCwwulC=@6X?T7xA7y*8I;v4P$5kx3>rWhGhSst~W5k7K9{VU0f
zh!a8L+rKv7^u981MvZibTb9)w!k!Gw;SJhCwN<^gRTF&CZvnfqc*`Swe2O#oTx0G!
zL{3&+hQUdTmo407WS<63Obh!6aMj+3S-jk1Y$qSzq1fH?a1q#BTXh*mYj{)cCGYCX
z9$??rGjI*BPk`A3Ip;Bcz{YMLx0=GS6LflF=OR6s;9>;CJaR5-WO+S)Q6uHr#xhWj
zRpc9_A!ZQdbX@f-I{42?{L2F-=ohon>+kUUpg=0{F0zIo$3E_=f9R;f)pdJ^m*s5Y
z`a79SQA@~N;jB0>n+E)H8~=J;)vuwrDgF0D>aBI|d&<|1mNm=?@v$38wy^T^5#iHP
z4#6T|7S0=WrO4a%nH`VO(lmbO#ar<Caf`no5k#{dnNE?s9^{MsTn`SECl+J=ThMCY
z2z(5X@Mf7Bgc5(p3}s}j7YH%xv-dt1_azjDI=gAqXFlxG#_+LA_;$NH3F97URm^ZN
z-_e+@&g`is3K<}QHpqTF%b3%ap2W2<<-W1zTq6w}ibY!QUFKzc8-t7LhpX2X9s$F7
zG1i6_3Rz?Nwj42^9fZp&#Za<oAVdt0T1T~j)v+OzVhoOHbrVr(_c2eV!%Da+LY>Ww
z-DI-_hlou~jpBpnJ=URN`hb|!J`71lI2?2*k+KBLq@zy{Sxo}1BMnM6P*z^W65Y@b
zSMv+mIRV{98o|>+){HP!og_nAxY#_GS)hpDF@B@3#lJ!w^@`4p$c#QLGHbEu55tdm
zj`Crck^1cYsnZ>_JMUFuI3_Q46OAVD^xv1{svBf-PbumX6~C!OWEv#5SdKzE{1c@#
zC)K2KoIs@>@GRex{?Hy%8UzX59TeEf;ovp`%{vi$AdLc|g?)t@dLMlFLXl=l;j3K^
zSNHkxx4_PV+yvtkPLF;?&>`}c5%$I+s*bO}r{v@f#&AmwP2rY-@j;cK_1SB+%p=@M
zP4Wyfc}27!Rf=^+SB3J$92SHs!gA$ng=`PS`M8`rN_W=DyC8Y-F4c-#107r5(%;+M
zO5%rE8|tKq4&$TxgX6QjKR(5#zfnX|inNJ7s&Yn6&rGwHcdla_s{W<zG!iG|+J>i2
zx>KYHT(MD!mG;HCwNi=H@VdE1p`m;K6Z(X>!C8V8^m(d<onk;(0=o=ZO^qaumju59
zdlgzI4rGF)2VN5d3?p#xMK2c<gCOBM)*q4CRy`SxFGl3;E{*DWQ;i)PeN+ug@Px1D
zVnPl?VHN|8Ejt;^Ta1)PHRNGURrU`sR$fR%Lk)rkML~#nT#;~9%PW>BoZ<d{Fm!t7
znegA=s1}QNDn#Vgmi+Bs0H0#<%SnAkPt5-!+Yr^jxUVSA+GwAi$h5K>)>B}YY~DM&
z8~xD8?Nj)nwu!ek?ApF|IBMHw1-NO0jP2K|r;~=#+t6+Ocs#v?Z3mqe7+tfvZTcQQ
zUYwJCna73Z9U7K}5AP5WHk_6ne868fM32gAV{+4u%IuovE25Up@sQKW34;TpYOjXr
z-x{?U+NVWu9{t9Yh<$Hc@LNG$AHlbOf1}!^XuSr-@?O3DHdyQ7%eyt;+=?PD!6PwL
z$nU6$wg{oTp;kH8I`YR-!EM-r!L7HaE$aET4JCvnlR$-gOLlyYTTO7bNvOAMqs7K1
zs#$<;hX<2i4SK=#R_;--hzo%~X~b-Ka8~ltp#Hj=KQ-o<v;dapj=35Y)KKg%HO~W2
zC*O${_um<cO<ktr!o!ML{K7zQH1r-d%KNeftGo;%BMZiujBg|MO%}8Ug6)NVfY{6d
zkiQLL`33vW7`zsb6hB0Ec!A%1R;Y>s+GJ@NA~hVW7j@&tKw!|R3N?0k;_8VSN`cXv
zBUs+!WIwDqIJMv}@(03Y$M8hxtRw?h2oxKysP&ieEkULmZx4lMC6_m7m|86_N7uA9
zoaUj&KN*%rKdP1y<Ky?d&9OJ*vEl`O!ebX&a@Hg%+`>W7rub}i15fMZq=<MRmdJ&-
zzqh!t`_S#C3E<WQ<afw|S+{jgfP70>L7I8X=E{~;Ls)c^+%fJXxs648oj#m>24d63
zKp|_cL4T<;CsH9=PGy9`8I6(>`ka<cz|oinB8>|N3;W5FI4s)i^%7sxWS1ThqD+``
zPYkeuAqVT8cN;)IG7Jocf>~@zBBJK3jC#PKZ{lh3#b>($m@e|9AN9dw7JWKsyMOgX
z03@82y@kdv&=oQ+74hZY<vL;8x>g|j=d<d#zN(so{1)mBWcdR`AsmT(L(UHlMw#*n
zSg={$+B%4K+S{|<{JwEZTaC#0&MJ>?X5K=rxj1^o02idu@kWFh(Fg}9ZNeyYIOQNf
zl1A#>PO54oHngF8oSao0qunYGzIYh<Mg_y%V9nR@#-Wd;yaUdG{P&&;E9_<~(}PD2
zYlBgND29!mJ1(Bj#f_HCHL)F3K85pOx#(~^sU9SmzzW+;wFQB=hPAXthHC9J0D+!(
zb80i?+4LOP6k79m$uUmnK@k4Y@4XFN1~)lt-b<J#aj?NLlIMyxMrEF=r!7(aH#S3k
z>_54;%YGmpqAfkp6m`X(MTbz|a?fHD;pohL)G-s&F)_Zdw%3I_0jtr)>lCu17Dxko
zh!+|ADnEr)gAY0#;VP}b)rSgJme+TzPg>hc!~*j1gB$Y<Stv6d*8N~4TpAw5k)@h`
zjFxxJsGTC#)l*+N`iCtj6z{0-O`k{FGOzj$1Y!_I&30br=)81pE%o{=?rAz(NUXNH
z-H<!iGBrUN#xqJy%!L_OS}(^e3HcQTEsVqCB_+BBAb<FS3daBPa`KA90mEI_a6R(8
z>WIork#;Oc?RGcPBI^4Dje&ZGu<@a*n>U_HfR*=iArEj0jcX(s6lI({vQ$%^BL3EZ
z3n_Gkfs(tawTQ3k$C0VYtI5g1v58})LSJ3<M}XlP8Vy+4Q6qwMF7ZmDU7p%I{@T@c
zp{iRj3gv`yQZe-rP2G(Wzh-0cPa@Z86zf>Nery^MZulJHYm^)rLRYUtfo(A^ucsID
z#@6PKvDrVEfeq)cSS6_p`$bEcONnAbq?m4O=(StK<asLIGsZxzXDpDSbu&H(%VRl*
z06!OC$`<=h9Ev3KoBzBh$4L|*coA@kzjw4N#$nw&9oNJ67<gwh{|nalO+J)B?>Vbw
zk1y}1;l2w+uCrH;+PhWpzn@Ld-dvnhNN6<Tt0yG~JO-0Hj$O$RR%E|%Eatz@o9!Cx
z4y!OuNCb$v4Si$46}O`02~24^(UTfgU>rMK7BstpkSfhu5tBYi%%cPZuAys<|N7WK
zM85vxhnGM7aQN!wo9Azzzx?41a!6p%-}4syJ+{j4i5Y&6!|1^ZZvj0E9%5|i{aj};
zQh6W~hlmXv36R)DqYWOJ-baCaGBJ{a^6*GahcJiUta|XG`cREK<K12{eqhHYRoMmE
zDlN+W@h(}LAHiRNp>qWfKs<N^{|4@i>TgqRy0eoZO($MU*g)`lNLJCwxzdru;i2$|
zl>bbbCwnznWIXEK-F*eVK&g~mn#F;5i{s&eR*4;!O*D<96Ik--TYox{iS)wbfsJ3g
z%ND@#9Vd>nYJU6q-)>qmz9rL=b1pIybkLiF_hHFu8PK3$D32i$MNyKugHk*gg%^Ok
zeB&yt4D4eEPv-OL>>LAnTud%!C23DF`W-)+-La?WO|){#un3~EqkfVU<w-vs$EQ%_
z5y#2&V}EmSw8i>5(F|}l5uxrN6U0$#eOSINT7}@&!*Tsa(;)_*>W7HXUtd2Tsfd}{
z*$dhL=Yxrxts4YH4xu3+i%0^?qY_r+KQAhbGT&(~hNp0I{`&uMU#`1mAn?!r&Ot5#
ziSLrutF=oAPDR=Zw-eJL1TRAghF|Co@&2d_mo0xVO2@$+CG0-O8&u4`#2NE`{+t5U
z?G>M!PR81ehx1VFskd>nsmYL`fHZyFjSuwH86wbOUtm3a$Y8rZMaaTF3m{VQ4{oz(
z^$^v8Xj_Ld5_(vc^B~r?x30d5KH#f~dM8#`PUiHMyypsaph)`u=pl8TL^2W<-}R<V
zcSAy<_&e$?-0+J>#SS`eaR&+f0^4%&J)H7^ywH|rCW>Q51jfLfjh2$XgIImxSm#Ew
z5V4x8o;;Pyy`=&%fI9MElXer63eW1kknTHGFN~$9`|U{|I*frThb65-y34Jz=|xjH
z&VOrlNCOMlSM=jZ&R69R7ujdx5xQYpJxDb@3|h|M!n>!6^?CGv>k9s@q+JPg1^>2q
z=>OEk%&!98&|kVx9eeq6&y3zjIPUlRHhq_Wyl|2X73@RDvl52EsM8s^N=4QVKIGBZ
zqz6Z7t7hzu&Nc_u*`7Gkxee(xAuIScjDQ|Gu`Mm-?s6zIdupv}bC!<&7l^Xh##S|r
zga(cYEyqt&QmVr@Q(ejX6>m<*0MV*6(_%>^TV;^KBY}&ZGxXIHn0TM@7~^g}e^&hR
z%NE48H9hn>6fPD)bRhcQEuZ*hL~-@1k%ST?T{!l*6fo5Z@Fn=>tO850zPF-j$(@*Z
zDnz0?`I>6kIKI6O4-!ST5{UrscPBDu2Er4G6Qcd<cB1?~RI5)$wTX>(gm<hgu}#b2
ze_qtHDrB`){dvW6zl5-=^Vh(p#=3pRMuAUmtHd}5o<gcqcG*I1ZmdoFb*hurQf10Z
zo2iQhc4^UC=%S9Y)DP!ZVQ8kn4_l8>Wy5_~NGHC)kKGKF15#zprHNsi3-(Ivrtviy
zCDNi6=<^6%TkwH~z@s4gt^cMX@HHsrbnQkLGqPiZO>g=T?h#ExD8Qp13nbaD<`5iu
z7@(+)gh2pL?hw{TK&RR0N|MDod@>Usm)Df)%7@{i@0e|xoMEC8M>&V@n@oT^EIyjD
zBE>Y~n7Gd>5SP8Gud1;OE(^rV585gmg3#|nl@89|)U7Qs!PJE2?EUB*zeLiK;^y%U
z>0BNU{1YE!UCAffUG-_PV0DwSLqB)>=*Ia%^_d@4gAbwa+ZNqBLHQ9=Gn*jH2qo=7
z`aOu4>l}zv^kjQJ8P&r~u}}MMb+^0;ULNs`gV(jq@ArXv<>x<|zQ*-LCW%C5jzu1!
z9s+By+W~y*2C_z*@T_uJ48(WGIs$+R14pQn74_%n$!MgWygv9cKZH-l)1z`sYJ&4p
zj-O}G_L*cI#I_ftOyaq^0o{q-f8NBIB3a`D&WDmmnbRDe(&42S9{uhqvE^eI^Ofq>
z5fUxbY&lHe^{ntNsQ*S5^G6qRCNU1jFtW0H>^d%tD&JT6GbFEMU6FaRf)1B4NG@Te
zl<ztU2~^KCCvp&nNYfIPk;wKP34Ep1`5V}kJowYjAN3n7c%}dHyKl>SOpj=~_^Ias
z415cMa^r33Z#$IA&drAW^1Cpse7s|?-XL0nN?%NXMY61|URG8oP+MA`v&hJ{7C}-R
zV$*M}a;K31pmJv8@TKCplZht>4ngXMXtOvP6gR3C*~iV@|33*I7d^Uodwk3G3Vj<z
z#)+ButC~@<$L9I5x%}!zG!R9wg6?se$#UM0gPA1vpNWy3nF;VKdhE$)a&2miAwEBK
zECNQZht!E9%{X`-VPt@Zfk)#$TrzMsjHl&zcrg}pWNE~l&SU1l?#qXPdGfCIg4^5)
z&icT`4Oe@<-Nxl@U5~e!PnQvOZC=f5#m&~oPs#SamZ0gik0VH->W8Iw38FDa!gL)l
zelLmLu5LSKDB`0{_h2~MQJN{G2V-($;Ep1;EO}WGXID=~$XYeZNEdEWyizuwGhRi}
zloc){u7HXt1x;Z`y#{*z%@7&b#NZ%aYk=nIF@A=+E1Cz?V4fx1dk{3+v2Sp@IKlvS
zWi$9D87GQS?Jo0%EzL~qU7zs-kL*EPDIMeklg|ye-Vj|A6#9;z;Ot^Dao0Z0F$r#+
z1=NC2x&<Nqvsrlw+@oo}$XqptO9vdk;WeJ-->nJ(Oa=P}5>#)Y^DR##g5+51H^iFS
zm$#!S-<MbQ*~J+YcLWKe>#z0Y?ZC#Piw~mD5T^T#A5l?mZQ`2sQ}}VQMQe^B<cK@i
zviyX+nR%-H_P4Xt$h@J~dUYa3ru0Y_gEL<wmMK|^6cH4jWUsh^e+M#DZJDlBc~h^g
zqhs8ov^hO#cR=(cLyt2IR*1eXFBy8Obfa8<!28oU`T0+L47|ceJ&L|Rf|De%@3E3Q
zv;8R1;0zV7oo<^J0RC~5#<AxV5aqk_L-qVwVoJWoL8GVV%lLAQqtQ?kOdV)i^eDQV
z|5aj0n6B~TP!&iHM3wfIXRiDDq8^Vx{sHOxB*Y#_6@3UH<p^|qF^8uLxR73)>kKbP
z0L3w%xEY)k^OlSBk|ILb1<I_Y0LoM#oESxFED0eqt40^@T}*1QdSn+7HAVO$wMNzw
zdHLv9Sx+6t9s^;6SlvF5eS9vMlSXr{ivI%R<t}+8QBDSp%^lG_?{wnvri;gm>>H{e
zWtnhAEz!GP+L%lxL{am)9Mu>dJQ#n>wz4&Yfr_bpWowHMfc~Z;G3x>KY@LyqqzuBa
z9&5vyVqiz{I9R$2#Ns9b3GyooZiauoaEnyVauD6_RVULK1ved2H4SuOQcAW8-tp8U
zO7sd=^`}v$qFqL%wLMD4aa30i?xVNF0X2fR<a!!KAu_#Da4#GnuBlGysSgIlEz-tF
zUbdypl#I1gwyl^xfmkHlipJutm?BrV>}U$xM&A?iClj0fB+@*Q1qn*!pNw7~KB73-
zNXs1a6rynjrK?}-bgU-g*OJV*I)Wi8SA%-9?{i&;e)iICKqea6cg!($$YPSK;@R=g
zOqqL74E)o=mXK%(%CfmveV{W6)1|_l<@SRsxfhW^lO)dELZueLrw~L$7}c)L473Z>
zr8=3s&+crVmd%gyBc{j5n1u>v-`J2Lw{3~{pJD-ed{%5nVumXbBZURz5NEUs)A$HW
zt8z5@dU~asboVyTa7#-f;`aE$SGo_Y46*$C1qOwbN;Wzn=aPu(Lx&j2EUqQN-uOFc
z13Egl2^unjeIWg%MScSIkqk)foXK^;#gy@aTkRG1?$wzz)~vi`ds(R2sWaZMVZiXd
z1;<S6qUYzj?FVIjk6M%-0Um<e>C#GAW6Ujd!`{NIcWy1Vx*O~}*%Cn3-s8%#(8JJs
zBJ%W`KJde$P{V^l!ay{Oj65^iT(>U~QmEzTbEWlacAY#h@ytc=>=>1v-#BbA=EAu`
zf(-3QBLbn4+gxs!?Y~C6mbB7_nSSck3CZF*!mLWQw#&rOY_exdbFOYB+)N_b__9sj
zGp=-)0)}9O=#?rZjXNj^KbvCN2Ojkeb!KH4-dPpML$E%NPt($HrCPwrkur=G8SE<7
zb@y=i0gS{vzI@j?*~OY;HWVO<u;vSH6I4~dvAPx<9()CgeuLgG(=D(-_A^Fmbf3}Y
zL}1`YTkk`S_N=lBb;FDB7y3@?knBRxo|#pT%2)}5lTH_2S9I+7dwGwp<dVW^%CSnJ
zv@?%bB_?(@NDsy2fp6-=qCEx0Uh)ETW2jFiooHA+`%;QJ7??40K_{xz?Zpu6um_oM
za5maN+nU`LE-u=eVD6=7$2^JIR7>b6mO+dyt*IjEz{aeKl}+0YTBXz+ibQ;S(5!qs
z_JnKcjTx3m(Q)MRQrg_}caRUu|2(~_a>T{d*5?2R5HuS>C>PI^C)y}+Jo-JcOdbvX
zv@IIzaDw?h0uh-y^l76GMk}$mR1jIIEN&`lBFY3;+Y@TjFQEL9<~A#qI{f5@Z|b@2
zmPp%pEHVGM)8<5C@j0Sw9GB*_V$ZR!9SN@|CvgR8`<=E}vAQU+hmp1LEI?D7p#b}|
z{D8<YIjO{?LZvbF;d(s44U7`L*xlXzANaSc1xT{}*%x2@+h?Eee)-3Y$xdHqd`(5n
zS^Xeq>2_ok@CaP{Bo8geh3IC|x3x*o-Q>Raxvqql87i&}WACv%5_H)>^5SyD^rf5~
zsSaED!o6QsYDMM9NsjWp><kn+Goz#pr`)l`+@NlHIK5!gUuM<n$t#EpHaWqpfQm=-
zsRBKp*#6vG!7<*1fi2eM3n`A2J6HA$x+^WZTg2B*^C9Hzrj2ZVh&J)EcI$S;8_Cu|
za0=+TjSfORZ~}@`13LtCJEZ{otHrG%nco1ugbOA_{9w9naKe*S9EW22^tOCo&QJSi
z<yGgN0z*o;myW<4kEfSF%R-yz(P@D3!(M+9%0+YUmlyM?6h79C2OdE*ReFJ~I<|L@
zs4rphR7^0n1@$qRi8wqB6g5)c`i-|nC{H1$n}wX5Qop4vu)~gyDu>B@xD`C&6hI?2
zouDn;2}4E46bw3uzM>S&EPI6#EMyNXg7ylFnvWtbHh<qMMl8!0`LrB(v+5NWqguZ4
zNnz&w*}(HkE(`nsrnzKK$Kpe_&P9Va6;HF>l)+NxMQpJ}hPGLO#@|4gaafO7mf@%H
zx;h8LMzCq69PnhW#xtS;qW>T48pW|`=GU;vkf@6+WaV61*#;H%ieN9Bkz|Cz#8v=D
z^PRgD;7xI;+;mWTYmEjF6m^(NK+L@kGkAj&=!6l<9|p2nTB8eHD_-M8R@)bN+I7U2
zBxP78i&R6*s$z}VbWRPqK>*4O=d`gBQ`|7f$VbKG(`voQh`O8DG$gHstRl`t>hwE4
zo<PU;-V2~G%*CBM?KagQ?O19e#d>!ya30ZVYBV=E>bv6xCQf~8GdYROo>W<;WU(O%
zMyzZsf;6_-`M{3eyqVU=5$qo)HJFM#3&zi#uF12loFQ)<M|3(Jd8bNbix%)aWWWgz
zgMN!BPIT=!ks=)hxx*n};x+=puw56E5VR}y=d=^FuALjNXxr3n;8klAp4f?ND-}~0
za8Q3}%c+*XtTLA9i6HSQF4?-;1jtkS206oyyEu?U$$|4xT~)6t4lc`vhv<yEzavTU
zu9WbDH1<OfW?%>(@WkqY)NCk{{@pGGT5_Ky-b~`Kggw(3d9)pGpl?{~U1FT|I>Zcg
zL@Ye)o(ElbtzOh@hqaIK(i0V%(nIvifQvw@gtMOO$#QWC#T`CH5XNEmfU$T`+$;AV
z9Pp9CU!NT;+H@5^GP4mx7tDZPOx#TXMlNhxDGs&o@R9dU{1x62Pe45AI|h0>oxTTE
zL2-Fn4^JH<)3|F?m>y*O!AAe6LbE7G6dlv>4mlYH(_g7TOL<;xc-a1=qjtb5ebf_H
zu3{FCD9cv1!BeJd@w>o=Dy_WC+go7Rdu__zNKlon<-U4I-rM+z?c=_p$K!GbtH5WV
zvs4fAG-i}J+^2i#xngT)pzK6q1G6{p>vJ?A!;k@!k-znPEK-C@Zd#X+h%J0{-16V5
z*%Ua+Np(^J-?i*KX|E8uS^);5)BMsA3b1J#V%}_w_(RHFwtR!pVd-h*iWIc(Di+bv
zC_&J0d@%;EJ0*@Ff0KH~OuMX42;oQxFt381*({YQ>0~q;hHFQ`ZNCp2Cf|aLY!Mp@
znx<ZJM}EaQ%^g^30Q)b=hg+D)+@pg}(h9PoWxX4c6nS6~sE;Ns5xCVP#y;@YBQLg-
zPb4q<7-5iAvghSKTIQW1=5I9&yULwfNAuz(e~c!@of|Eo9~AWhqO!`Xd!=n|X7kNU
zc?t6R)Gr)%?{*0MY4LYc^d;?iugJ*%mnmGe%3ZFi6Liv4W&i{=gWYRNmCcm4df3G#
z2P0No9%@~O9|J(`hau+tNtd9E9h}A&dHk<O88}|m$1)xmx?H>}PT32kn==RZ{<H2H
zU+sutoKYa!gZ4%VJZ#Px1Fn2^jb(#{-6(stMecz`Km;;Unb^57ar#K5+|~uezp~<n
zS}gtJ1Wx#Qg|Z7Vke^lmc~K$rb%`;NK1}P8k2d8>hZhvs1Z?HqQ9jiE_Dft;j6LHT
zt}k&Cvz)rda)jDr;wx)l(~eI|4yYUVN24ryr%`4g_qu1w31qNwToQJ3-_U5>+Fsxq
z(0w+T9g;u4W62ziJjVd{#|1My#dC)RRXOT`SQ{|Pw_;Wpmx=n6)UrKP)n1mf5qm+q
zu7Sy$le+|KCNv@RY_(>#_F~%}y8U=yZ1dz!B7NAe5Bh&2mOZ)}Lph!Z`!HycM?+1|
ztVCkmMy-z;VrF!oU?f>G3MjOJogCQLqH&(Oj+zch4%iH4mCd9z?%T_Twf9e=oH19%
zLMt|$Y~^jt)heyDc^1kO%zWVBYV)5+n1F%oz5PbJ(Z=$q>bT&479#~QG!hO62MSz?
zyx%zC3~f^;XN2D{zh68Vvu$}#+x!*>DSI+(z@bm_lmI}V>>+``mhoZsTyFM&_#~7!
ze?FG)SWZe78<uX9-0Tt3ukG!WwO2Fms57uRzrKum5LSE|9{p1y#wK_{M>;ag!N@~m
z^`GUzwb7tAORMR56zmXtA@z(!A{)b<gAG?#;4rz3!7R*h#`QUc0gGZ7v(!t7(gxVg
z$h|4MkC~oa=bGBeSinC5e|1+q5<I)w3N!?I?kJD$#iw~s=(*>$Y)?U>h7vM|r!y5I
zgf!qa(&-?sMIm66(*oluFSx-r<q{jCRLyOwBklDB-?yEnf((fLlYWo#Fi@RW;_YJ-
z&NLy^qEddCK-eAZF{b*5nL52l=GjZkBI3lwqU3o(3g2(1v+qGTP{|`y$Km)E1ap2G
z3A=#$BOTkl4<MR-_^%Fw&v9Y3#z{ghZKV<HsT!Y(r32c_-`x8L(Ue=Q6zz<HIe03I
z+1Kr?@@JK=iLxUP&H%=`-|@3o-m)Lp$6NVJSXHIeGNjI%duuasw4#Mak}|a=zlZ&U
z=#%RtsTvM>QbgK5`Hb-bL1JBj)Ht%S?iOrB7h0o{`15B8)a#b-$UJ#_U|6QqZd_Go
z!mW2ol^*)(ihZjpbLYK*+)QSDm;oLTUGnVWUgA5GFqJVzLRo~9-cB>e+WlSypz6fo
zw@f&F%%leVO^^%p7y(GduoY>nPW%o%Q_8yhFqU&TTBj+&lVc?Kl&1}mUk*k>HT2z)
zVcc5eb7p+{#fP^YVLOG*K6m&=7ljO*OOMCpiI3_^aWOw5Q{`p=V+KY6^f5TVp6@^<
z{*`_x3NhSEn6F^e^VT=C$vRgsHzAYgTB3?oV*4Pw=n1c%3`g9@`v>&=cXZ*PxMRl@
zMe)(QTaWAcwOPPk@uBr$x#s$NMngth++mn{B=hOX31OoeNo{Z}6B%zGYk>deo%Yhq
z&C%KiFY=nu)^TTSU0C?Fe2pn)h`dK17hBEg^b)<o-N34?y^q)sWkJq&m=P9pexx9+
z?5K=ZR)mZmZdBCqQ|d;S8B&3LUwqJl3#~!Xa<bJ8a90a8X-?spkH-zIX<<=SDtiua
z>-fM4WcvmcDrTxX0<%!Cv4cP77-i{L!iL;0jDo=*VMlCU&8BB{6Ev#0_CA0jDh_UV
zOp9)IHIU;*%ZK?@Ur$uC7xaO&Lk?5?w&euNFyS_&j85J9xJ>UALu4G*e)4XXh(xmQ
z%GAMb$vvhIlV|-}FEFevo_<+}v*dj7a5|AV+jyQX=~sd_*^pUQTo=yCd>V4O1!V`t
z@3t!PjBxMPD$HdrjYhj6OJOh}|3s#$Tb793NQftQERwXV;>4?#Ks#@8%(CHW?Cz07
z2wi4(s3V`L!9=InM~iar&C0EbaC>P@A4MxwijV+AefNA3<4zh4b+x&IT~~i0f9(eO
z<>$}O$`g$9P9lk1JVFW|J)go}|M>caue|p0)T?UH01AF=s#&z;8^quP2(Nu<Y#5rm
zS5$D_Oyaeb7LW0eEoIShjw7R8gVZXfxj~-DM(VH}!8qATS3p@qmJpMCM2jpox}ET{
zP;G;+v<!@M4L|f>_JWWsH#ZoNgXoC#wH-;-pB^7OV(?d2<7zMd`m_6by|=`oJ=iqZ
zuoearDmGLmpIYc1)+k<}^^Lgm_+ujZwc0@Eg85})Pv0!;EzpK3nb!X;aYhY=ZlP79
zfmMzm8$FPstZ4GQ!GJy8jNm7lq$Ri>#Y~Jxu4rWH`M*rZo#`B|c#3*njrKCxG%%6I
zIr>*_<3J6!9|&8=4wLtxBVh=8zOHtvUqT(zfTtcboW2kQFx>&FK$F_)`PrpsT}sm7
zx5Y$Hrk5RtdK<iPe1g0H*ie%(Gz1#~w>vP<oK@S>B|YPVn;6*|i(8PpXeT;WV1^}$
zEFK*9wUe%4c5mzw0lN9aP&ZGwqCr80g951aK9nVI_oQgM(JiNx`tpQpuNTgCukb|s
zrj2#l?0_%2%d-q5!^+Uuf8+qyNlsvV*MoPKgnA>1e>Jg=iIQj+5*s^+T#Pb>YK|fW
z8u?Zv;HHRcy~GTFl4XrJmlHn?wo(yx)_@KMy1#SK&j}`y$I|}RA^14((C-yn3@Xfg
z>!8IT)4pUVI^wFwi^|?+OcO%77awgxQp&Z>vELRw!Pq;rL?}@U5T<VCj9vId1WAYd
zsU<*An+b$CD0a|s5fCW2Dr$p=h7$8xV}~c$HVsQ*EF8Fl;QEvd<IOt5U~L|bV!_p=
zXY{9L2<TUiYPCiUwn+wSA;esJ*>L?3W+9%2zh$MKg-FgjH_;BkKZ{&k#tp@Jc{Ng+
zW@_t)sTVgNPcO(|pKJqE_?_no&P0Own?&IhYi4-621@!z;?r2S(~EU5i*Cl14r5r@
zB*-0cK@FP|J>jWk!h}Z~q-BF4Z~+*}O(8V}B>)Inh6>DE$Bw`AY0wfN3t+u_F>x1?
z>3;0L5c1(<3?Ea++x%SHPcnp4ZakIu@i#~}4$+_M<JuK~IR|A#02N2jrlT64L80W6
z)x7oDSv7)mnCRTjbilDYQ}Aq7b|n&7T~$M#4CJWHB?QqZsYqDb3K^VwNWDdn(Zf(N
zppTwioU@-k**O-hppHlaB`96c<hIer6f(wutsibA4UuOA2}!_s3bLW}3meg+8$%|K
z+eNVt>jQ~_zkwvtuv!<i-(U}We(q+?hBP<?fFBzn_{7gia&k$`DFLxvZ}b8B`xgHK
z*3_qHgryqSXEidcWR)Y^4IVla^dG_rSn3@zL*m9@YOKk%U8Bb6;aGDe0D$?|5u2@C
ziR^@6ncQaLp!1i3Oq^OXr<7^D#2SRMdhxD$JZ2mpLgZ;wrBOmd_EO@55p9Yf4#9dp
zV&riUEb6#lw9tS&G6YJ+8v$Nn9D?A!p(Y*ab@@UaVjvu`H8_Wx<DAh4gLFfzS^=cP
z3GQyHwpvboAkh{?L5S{2ysckmecJn2W<6}{<70Ttsfe1|hT_gqznPv@ooh6xNEIH}
z_7fUh)T)#?AA6gODx3>P^M(O*^rT8dTGf5d4QSGkFq{befIzIeiBzvGu@(|$UNz~N
zW$hDxue2<&2Sn5rEKCAmW&g{2kD@-TiC9*c*MdT^86P$p6e0F6wQ9BBQzm~t_3S`G
z25M6)2`gtMQrI1lSwKxXONgBOcO+=^js;OXg+677c890xPtbC#Z-Z7ZHwHxJU`vRg
z8r0?{u7QDKoi=WOPv*<ZNmssFvyb)>YM(-mOCy)v6SR8Eacxm%g~f{0GyxF_-yGGa
zAw)O2$-qp(_=K^eb&BfyTXUb*4K8Ig2C0u#>&vp?bp;*qb@A>(+}zB46M(68&qGAR
z#s=8TVaW4r4bVL_-I}ahAc_t$C$nms7IMicZNU$X8gW1jqJIPXOxi#2W`2oQjxu$b
z>G}0SshO-8daE?2sCTb`Q3NHszvS~i#`o|0PT=}}N08qQLe~&qj>2jA5I&viN;0|+
zDc3Z{A3AkAIUORu=`-fa*!m$C>6BjuP#p}QL6S1+Q%CNs&?_Nqh`aCD=?AP>D>6os
zapq@nd3rt2Yo~;bz~=dIJUW~t#8H7K434I_#t>{6;RxAY6M50RQot$cV$LXZjb`1r
z556Okj+(x3wJyazLWYANz;FV%Bo7>p2Zpi=QLxl>I5ZqN$GJsxr1zKKMLYe=@A?rU
z(JD@+3KFdbxBcaJ$oT#8JAOO3-yRxHtb#XXU#)rF_>fx^X>Bycy~XiC_9#Ke+`|tf
ziprGa*q!$fy>J_tMZZ>HTaFUHzDYR}*~NP1BQI<4&LfdjBVyW2y7o5HTS>NoIoBQR
zL;jOVf~}@sviWTB(TlewXS}%+a<qmHn!{oBc!qFx?)41Z__z`bJ)cd7RnvG3#hOIa
zW=-D&A9DK(&wAXk;JC=7lbhi4t>HwOVwSY>HLp_=PCiWEL!3V3uJCaac$aMABdpjf
z_B}&Ni<o3S;>F?>G{VC?V63<laNc|Bc9NLP4IgoQt0Xe(OG7*}nfC(JJLLb4)7$Yl
z+cd*DhJhZ4%vj_f`2G99_cizNH9`-3b4K?M7W&@YE?$MKl(}GW8TLUP7uWuIqc7Hk
zX~=^}$jx@~hHhPgg`^I%)mB6j@eUR_%v8dCbcmvR!so@digd?M<Be8|7QAg;W@RS&
z)W=Xnt>&*n8kH@)?J>efVzca}!RAqRr<J6=sF2vtMBtyjP9UC+*~fnI%}L+211k5T
zI;m8EG#*EoWd2#O?o&Oo9dGwE$vhMFr?&gX4GTxco>pWg{maD5w?aT(d0z1P@xV}b
zM?rtR=~EAh&Wv>NM7gs8eqjXIxx0g>U<FQY&jo^WWxwnFjwpabE}wLoN*&P}mFIKv
z9CpQ+4!(HM|5Ja5J_Jh=K*e7sgyxh`;O5EXT4agH?gr$?+|Pjgdr_08AwYDKwDL!0
zPt69~y{*rxA0Y`SV69{1>ZWr0KiVq(4w^szr@OT;<`w?wj{OY(7?s!f?`2iJr%Db(
zPw_8D^=EGG`1duWr_%kRto9gI>X}=BC$vmoy>*Pv+~H|c_{qC5`M)2@rj{cNo$9l7
zz1_2f_$P2OWbZ;ELiogyK#EL&s8e#QAQ5qpyFn%&K<9xS-=kikf^fT1z2e<L0dWqZ
zvAh-$xFoxqyVVAXtfPL7569YEoS&n|1(zW6d@+IO=d9LcaP_3Xt#a(~W#wk+{sqly
z1yHx(f`cHe6S7P|)jX!uh8p*=W0GI$x$;o5({)pN?GRu#`pV<T-&KD-2KOkM^DFSG
zX_T(u9m?<Dv9Sab3rE75W;(1<ZU*q&$viucq~Ij@-zKMP{M#{f=(SUHE*i&JI6QC<
z0oR+)2ac(YEtGwl<N*UBS4~=%k{3X&2!e0fejEdsOuwH@FDE^2{CL1C(FI>7Ncig3
z$t!JAWWa|hZ8YzW_#_6s%R8#@4soQEh4kz6E?OvGz;g`0A>F&0qBNjyTst7h+%ck)
z1U*_-!*?RnmIYDkL4QOG@nke=;`x?m;F0tW&d57JeeY_#>D24VIpnpMueLJv!ZrB^
zsANWwq#s7WwJ!L;(M;6ZpwZyE3qyT{-vD*sX|G3|B^bk)71rmdnqNXV=&(q>-zHk4
zGQT!O$H&=^j?7UGkD804Ik<dozEmg!&#zS(*5v56%R|OgVP%A_ep1v~F;7oy;4&Ps
z+z)g^Z(h3d<@IJzO1ILk+dv@H-@6;Oyk;OkBLBz*Z!Vyq=-_P!0y=k09H&U#+=VgR
z1^L6fx|#mupuX#Bx{gco@_2m&wJQ#Up5bow3ZBwqMc(*buxe*22o?BG-Ix26QFnCv
zwa{}!UeI%%<xztN!m%z7@%Dezah2Z^qmmd_7&SRb0c((90k;hPrlhN+DCb_hMc0FH
zD=3bbesGNbsK4cTQ{h0L>8c%hdV#(iM9gxWIpFmQo)sOFE2?x>!R*~OX8Bsn#tt!!
zky>ML5eV}%MX*j5ZC;A0gz(vB_Oy1MwmlgRE6Ci7TrA>3g~GxqGfkf3g9;wQs;d$P
z<MqRtS@*?a<ExvqYaT0cd2*jE9&u92y9Kk0@?^W~Ep*)Z=#Qr-*7iJt$HIuaUZQeW
z(zW_iJg<k|f@CF&+!0?&*f59duORw=IsWS9Sv~(MM*J-v)YhX%(9AzNZ7Qf}EBg-r
z=2Nm%<Zhy{ZZUiAN5|3>d|b{hhI4l&xYA=)%X)WA<Mh=&Z*`EsBqq-8nK36j=YPk?
z&u~_s&$p@4{mFE@Iy;|VZ_6q69KY+CK?+m6E(09t<Ap5PK=8y@#w_AmO_>Yx?9^I~
zfISJlt<wT;>CKwRHM3bOBFF2u$-TgD$Z5~*#ULR!?h0U#Kz_4WW*V^|W7A`H%Y){Q
zntCh3^hl7vk9qH)@9jwaQywgV$Q)=CSF!>DS{$@|bXfbJ7a+!JFlaXX@q@#=m$M(i
zWEgefHm5QOO3}5KCi@?iYXg*^7v7>ux^P;J&)o_{@&$iGf^=;>#=HoBfnGShcu!|J
zq!8g4V3=)Jet%TXA{8S0y<!jo$;C@KWah(DcO?Fz%1yF7FjK|}Mw!xE;<4&}R%QqC
zaOn@ptFB={1UQ@Z#;pgwkVkq!x{;e_vK*jgQTy599^-_wkZLx#F8L#sfQwlN2sL>j
zfy{sT9U$x(s>B++Eenk62<d}LM?>BJ7Y;^48Zk%fp>)JL7FL&F6f}39#wEV#6F$LX
z$dG#ezMj0nuHJxqgR)Xp*`&n{y?)~}F*9<=KD45nPj^Xc!<nNzA|0xr7RpDqhw|$l
z&PjF0nf>a?lgS8V@v*xJsx(|flmvhF;E!Ma5pFI2Wg9;I$;x=2qfiqR^MFBMkXc_<
z<EG7eBlfC?0d_4!>~0%}PT68rhzXUY$){(kClC(4N532i?kE75hQgIbNJ_A=C&IWr
ze_h3v^^C5|P3vie!r6WWYw+!KhFi%Pui~J^+Ynv1G&t)Rkr^5F=D4i)w;kSF*ETpV
zFCUdehN&m5C$OBj1L$rcJbr)-C)3%rJ8umIOGClMkt5I-pqnq@LFM|NK+v}74E5<D
znLWgV=h!-T;T^z2mot!!HY|qy07{vrs<H=>Z5+G`6#C;+eGY;|)Q}={^z;bPMa%JJ
zdEL14IH_hBEGt7VIv0*ij6o?|1AQD_4B>48yc!x2$*tX8i++4t&!6&Iy`7b{W8OH%
z^6X*^PdXn?3bQq1^czE9!YYQGG;Yjq<+CRZFm?wOgvN~Sq+(T<YR3Z$XA%kMLmCYn
zHa8>bM)vqsH5<CsD^ElpgPqv%M0Kn;mOJ%7f!~?M3bZ+Oh(82NJ&#WyXn=a>9v~Sx
zFog(a4nIuiRp-suj%B&5IJ^aThqA~TPn3_2W;-T>X}ySpV(W{Y|GCxmz+n_4kXjE*
z!sal)g7hV591@4fA@@2nML80Ev)rM|UA6Ji^6q91s2uszi^=-|LA$RY^b`dCo0Eso
z1{3v`&@<cafDwcTU7?dp&VIOj{chnYJQ+`q@b~~9fEj7<P@&rI=$iiROs2(2d5#N&
zpu_$K1&G_`-EPm46z{wMTXO7}l_>@?<q_15cC(qkJLd>EI@&1Gf(Jx}LI?C#<vbNA
zW@k%tR5}9%0GY#Ry^}qzu0HB$(`NX?M?ckd&UD@EnLqA)jgZywBX^5FHWeY5=Rq+D
z(tc<&p@>~n;VZ7MqJPFP?nN+o*tB!%{AUS;P#}NN1DLKN3CHz}<8BQopDv&x+AUoG
znKf8|Bd55B?lSQp(0E-8)x238fJCb=aeyHv4dC|^1_2HMtqTv)EduQahzPg&ZxZAV
zXdK(v&|IIGUPVLE6ZM0#^Ta{tChJiiC)}3@BSl+-A>Y$XlpY52q&V0xJ^t6TQ_!l1
z0Npj<&VD$JYL}T%d9I6RPFz>q=yn8ZkiS4Q-7-|kA3&5?d^?_&^RLTU$F-VWi?ip4
zH^f)hmP-d%$gKg(hgJF{_Q1ybI|n|^HrrB9MoX&i#?>Q!HFVeWkWBURN@pK!uMUUS
zt<4+WP~y(~=Wiw>%!GBNPMhB^;EEkx2)|1e*-FDKC7eZoSWhB3)|)w6k5Y|yMd$cp
z<`5OE_#8JyZ*E76(cIj<f+>0-U5-75fKRmd6=4Dpa1f<nJbQOhLzs4)fZM`-Uhnd%
zZXgH)^(iyN#5Ti=W<EU&mi986o}P!j{nQe(-}GcO@QdB^>0ITn@@fg@5!=5M?TGb4
z!3I?fYrhuqW|*kl;-t748mlu2P4iR15x$(gnxPxk2Z`oI6jZ11GslVEx$UoBQ~V(=
z9+yXS?NLK`vAn=fovxujlap~Jkfg_lGG~1s5xV){@8+FM3yVt=KLUAr^4!AnaF6o~
zw!E|uPC)_7f`>KxUHe!lxKp*=DLozcX07$c(SkU5e)AYhMik0(HPWS9PVJLTuN#kf
zbc(D+5}&L;{DJ@KdqM#zF~j@KQ~;u3ij!Ue3W)6Ki6X-;hjaJp0=cL<G<abEw4K<Q
ztPu$5WIKEg>gGE~hW<8n*T}d7d4_h~mA$>&b$69i0ZRSoq3S!-N{5YMU0=<n=Z(8F
zr|!C&*FJ&e7(?W_CnvZUGAcQG0xqBDj)k4h-RkTG9!OgEPyGnh1Q86ddZ8Y01de{I
zFG8o~dfysX$8!mKP$A{sngL1O%21E?KEBdluH!yvB2h1Hid$h5V1f)j=t!mzTzt#b
zm!<>=J|gVg7`c%u*UdaEz4JGE<^6W3El5dtQ_a7|jfKQ^=P09+>BlU)Pp;;7yc(TU
z`r)eqDUvj+OqdQ7Btz4138+obFwj=MG4_iwn@K}>NHJ{I0eIt<gB{EY#1HvFD<r=F
zn?jzaeE;k<vvSel-p(JMz05?m&g#)<Tx|ha!FA8giriCa=U$hi`l7L6d;nqxTlWtE
zksuf|d7RlOsfFyJtCXgd76^=XD}ktUo`#@tJGqZ^_#0QbLsc!UkYjTYha^hJXhZ=T
zE>v9u>Pn2ua0d!LNb&>ZK(FJ2&jW8R%X8IIZZ#=|!MbaMYdFAVj^oMK4)8P~fU@+c
z!zh3;b(hYr`~L^_wu2I4Dd6S%;eopb!lwuDX_r5xkY!9C^wL}K^y+1D=Ag+NlD`8z
zb6<g^x^Fo$^?Y(X28|tBXc;nfQ|qDyi~YEJwbP~=zWmK^7)E(9pKj55KNiUoI9<D6
zJN?f-b7R|~(t&N=Vt-6#7LLDAYC_RjrV7LxudD@Yf*LQEBeBUfJ`7|@Tu!bRsTBhE
zt$c4;3&|GWZ!!M34tNdarVxAWc{B4wp5a!Z|EKW2um%6d1t+uV#W@(vursd?TS_Je
zo-~ktS$~l@`CC-9rGkxw4ILEwTUT4XV(S|I1J^hFi!v?vgJQ649b_ZsY__JNa#o8<
zIqcPt50NMy<|ZL4sHZ`p5+he<Shad&K-ik$yHBLL@U0K=jhP(*m|2u&88MvMlllLy
zX47a8={i|QT(<s!XY0AVlsGz%Ba`@=MVauWx0rTs$tzHnN$vY8<d8S-EslW~M=@n^
zYMsu}23WbZA}RJSG&n@7UTO9fu>Kn_?}n^qkF)p(&m4#UPn|X8$NGqABbIKH6!JDp
zKn4%%tpT%WH9xZG*|XrsxD7sx`7i#Xf(I>9m236;dMo5v<T+a(%TQOnbm>aDf_u#a
zA9%P1z=r_f!>s_s&;IPg-)&u-!tWN({sQ16&;In`pMUzBw|;EG(s7V`el@#F0?;Z0
z$b<NxKxCx@ajJSRA;^coNKug#$ge@e^X+VUMz$gy)cEuYHfJE9y@-u>XQZ0-H*asF
zX^GU2mxaZE+FR30FB&f`A`C|R5=<S);wWp9;E$r?_RvIdQi*{uCJisqz!iq!Zp0Y}
zM!-qE^SnMxqaVqE{l}h&OO&mGZ)1hQ{$prUUabgNB9CEW9sV97_Ox#%S}0usk#m#3
zOyb?`Y=9Rczk9;c)F>@QCM<o}j=fEZmOu64)yHU*$!xqFVU&RmoY6!sCY$uQ*xKJh
zjSFsu&<kL<!dE~R_w8UyS~&&;ia%Hhr#Bg)5gBQ2H}>gO89QB523Ri#s3}jkXRN_=
z#2Aq#Olq(V#IU!<xRu`8WC{G{v_#8J|CH26T0_`t&vKJ)I7)``kf)IXJ6$SCBZhWX
zWV=rLQ4xZ?8?6uP*8^)C|BLmYJ(Ysobne^3m2EHIY#MIxctZt?4>gKkwjz`#jj<ZJ
zV`druRqT<_0%dj&6=s1D6D@u^7X5>uF;uq#Qkz2cf+B<Za15{ELsaReIfWP;-Y=FT
z1--PfQYaOuuG!($vguchr6bm$3pl=$jcMZwGSH2po_+{QcH9q;y&IF5+);Fg{^kht
zL!MTpdz`@Ei(=rBY&^Vxhp?j-c=~Ylo3!uR_nkJxz+cjkEe7KDay~jj!0-cGns?2R
zRbT}Pmn&~Zn~W`Bg?<^i`3+>LP%5m$VJ3pNL2-wMhKuP5rzNv!n%4<I&8%oH`A*WY
zuIl${pi%g-A0BK82qX9>yu+)R&fXTavlWYh0i<)uRU{kDHb%9?AZSxRsPB5v_!N&|
z<Qu6e=p^HdI7EgyVK#Jpkn;p@1am-rgfC_pp9Qgp9L&0hPY|#MX3u?h;n80ZS~<`{
z^8zOv3%zEB;<^^V{K<p4g#=!=Z5NCAwq&$HLa|&vB3^_Jj}T)-Ye0J1d7eu<K=QHl
zHXJAiYP==e2cHrs4$4XV+M?J83y}kk5Fs&capG+aLOLqdicb}Dt+)nB>`e00fOr(p
z3PO5AeLBw1pEWBoc;iGd>|ibrlHuYOtGGRtr!sIgd8>H@gGSP_mlAD}ZvRI~mLgHm
zut?6{VmMp8J-B13%>`-YMn5xyah5}&SLPzp4-IQv&-YVUH2azkmf>u-6F{S`Redl_
zUc_`Y?m)ri2A2kzs;A+Z{nd$U#;GRVdQL_ide1(}y<#6e)PqcJS!6QK{ebyWRr>$r
zno5mRKY&V<?&tCc{1s(PCkK74CP|V^AWNYbL(Vn`c-FP4E&NWTs%=?CTEZl>c|EZs
zP!CDLtfKh4VsTZ4@IQa&Al83J>qGh5k3+vsG0H8qan~aMOMm&lRecPir^=%Gs%DsV
zwx)%Q+IcxS637wui%tl|EPZ+03G*h++4ioh1cZeC*T68#uHOW@%<cg9=5w6(ji^A~
zQIg(F1y%*ZWq=*cs`7nn>?kxc<_;f|sq2}0S2reTo8;odCj^AV*#b9Ti1ZO2M_@kt
z&d=wahfb5dL}=&Jh5*$Q0m=5O4%Cq&)l>Ap2=>pX^Z9u*xPSkoo}XSEIdXG$AA^AW
z+T17SQTIpPG#6EK|I5$5{F4gk!%LWibJa_mOTK5#F|hL9%FD4jKCXzd2yp^#abdRK
zN0cx&n+h{LM(E;Fi6E(dCTA?hU2?Q)Ngi6MlFd2m%Dx4|R-}5*NA87=REFx?o01eN
zJ}EqI8hx{u1GHywwzAw?we(;EAF;pe`|6tAjT(v2-FaVOXkz-h?|vNw@vH97J;hJ!
z<H$=g%s+~Mix7f1l)fJO)xfmM`q9?DP<shE7q)16tXIHf_tWWN9F%?QKG=!U7qu**
zl0ZxDS<Vw(_*Bh(&Jf)IZa|U0OC~3M#2WoY>&C!HyL;>Ln9ShWXa%w`AHjZ_ERAch
zp%QI;AH4LX0gVvD)kA0(*Di|KmSJ8K_EhS;wNqY$3?RTL=OzrMol*6iT}&q0@_nYK
z68J2fvEd<<>@d0;p>8+G2)B1J5f+#F`1J0^baYz6&v8Tsj-V7#VfDb?-c9=rrv0H)
zY_Wbw^&kndt2aHL$HCY3HWm1`+L0z65;+~uvecikRIgpL!*6iB^ujyDdiW(mCc_*@
zDi$lO3qD3<HkNVTvPR^l33z9=x}mlTjDsDsOs}V|crb_N;UD5poU5;ahS5^)e%R7r
z$UlgV4d0icCO{BK{;M~Uz@^|{J;jn*Pc5=X!9XFf$&=}1o7=GBR1_)bO<<Oe%sR1~
z)SQEy+#<h&jD$QK4e&M_&}xcTuXqj($8KXNFmZ4;DIwC~l4I2>M9jUYbJF2nambuB
zGcyB|&t}mJfi7-Hz6bwhF9U}muHP4UH1c9*Wgz=7v_ylr-%=lgnmAH7q$-)%ao&T9
zMWIqltXOx{H%Tnvm#=utN%$c938HdGR#>!=QWb=D*t3F%QbhD~F>!#o8@Ly+g=MpG
zRGv6%kVP1v{%j(0$|A)M|0p^zX4@%HYqq`J+JKH?Qw(QQ3P?=;9Ukd<Mf78f#(=il
z_=*O5ZJs-P#NVd-<Y8wvOFiXSA<(iU85f^BR<hvnw+jQi<B{yK!ff^tQ9GMxTI{6|
zI?QB7Am);FS}G@a9cP$FY4(avihI0&ZMhD`zZN!zACEnFo03R7>I$Y6FCja7VU2C6
z5vJrN*d)3B%Fqvu*#u^_x&K`QVK2oZU}zHmfS{}>wjYXX*@HIebhz8H>-(%4f-`Gp
zCzfT&owu~rZrm#80Y+D+2beU;c!9MxVPy2ReNUvP0vmx|VXO<(b~^+z1d3ML6F_|?
z%u+kNa_HnXfyB$h>2x-#C+J(t!AgN<!b#HGsWcQuZ)K=-|BxV4G>qs4qE{X(xRoar
zCrqjfB(tR)X4@VN9A-@m`LO-SDYQ$}j;H1L_|G%6Qw{DYVBi(h^6mlf6DWal@C>@r
z#ys>e_sl8UP6`%n>>eI74Yj9HAY_|C{nvo-;+{V~OSzs^oQu(7D&Oavpu_t)Hwl|R
z&Bk)xYmsbwX+3|kOmunmwPm^^DS!`nW-IoJ=aXZQ*j;NjgO!VNdaS79DH~NAnGmzV
z$|{K_EsBU3qXI(>I3<&OoMo<=Hyi|?WE(fYtMb8ws3lwki8qeN)zwxwr;k6zr5%Dp
z%EY??=HMd&U>K0m<VupoJX}|ZlNy%<aZXysf}KpCKalkDVIl&Qw|#_XB}<4_%euN*
zy+0=lix7dN9F!7@Rx!~#vEEeS63GY#N<iVxf0)yrr4VpV(FRR;4>n0dk8TN9!Sa--
z5aLMeMa)15;u9Y@3zmKvm2HO2`8It8Qs`^Q({$xXZTdum*JConX1#|#&T_voZ~aIg
zy>gZ+uu4WPy%1~jl&;gOjfcGL3AUl`zWiQV9$7{ND+5F9N3-&>a|>g=Rwv(J|1?Ai
zkr%~S(GSUKu#%RdvxJA=0ZP8JB<-;<-9|!VJf-hQYzJU<uurf{IITycY7!|KxeS+u
z7ht|D3Gw2ShsdiNk`L$N-OZ;ePJ;XOtUiMbJkv=py5};H@c7?84#IXxaU6eO;cIKl
zdNLnJE$36P2`Yhpzk1#)-ah%USA6&6#kYs>>#zi;=dURo^b)vdaC#&}pHEu=3V%ni
zikm{^*$B%xH0#&xiwDwzVyF7-1v=#4YdCsOAjl&)m~>{-IeO;wieWt)UYv2rX|TMV
zPcP=$(--Rf)yL%VpMEx<$ZzGZ{t+9#{p`Pm{9#D9wi?@aQ8$qHsw|EHU7-lxPM+tY
zQ;zv+Nj4_Yn}OxLPwzeXR?ddvrDwbN3brW~hR^0tV7uT{^19gcf|HSytIGH6@b?m!
ze--LDoU$1pHteP~f0mk!JfJc)-6#x18C6otK+D&HRs9|xVI4$N_ALa(n892r4P)y0
z)!>AZEN=AAGY6=2I81ni9*#%;XJ!!ic>END*bbv`(_ViRZp^T(yds?)?&q)A$6u4W
zKdZX_w9_VHi=Vr(WZOe`!}68$;OoiHrn1AarG5Cb*}++CV|V(k<xgq{hmI9~))m6J
z-6k0K5*XnaZxfVz5ftN<PD5h1OgCKaK>ql7vDAC=+4SP%baFAjwF~8l0sIsEC>_xe
zpF8jPI4~^S*W{hxw&ADK3M?rw`x(}yXiY+WgpSE_c-=15eGS#(%&Dv311l%#)dX%x
z(E%6htcv=1Ly8QXHedd|-^R1kP*QL(kn;_H*OQ6Z-@;FKg7wcp72sEJ5hZ*>XHm4c
z{7GCzA<mgw2<0o<vy<cGjXF%5&dW(j6CtwV98x?<A$jskIzS{e99yratZLq7cA2wF
zk}(Wr$dvG4aFdburX<0W#)D!fhC82v)vdkobQdx<U13ms_GJPHSJ<6k3^kx32vH$Z
z=&jwIXm)RCX?+?DH+t4o@uKTd`zNb|#Hb<GZ2nYI?8)g&9n8ZJk8(gNXuL7JF52%e
z?<TqGuC9&@GJK}jU-MHvKkYE?JS&^it!};srpx+TRqK5kpW_k|u@KufD0cNK|4@<2
zO&Y=eG-!GNW)be*o76)euAiexP#!IHG{=~K%$!vU#uGUtOH4tIQ^Xm%OckG|yTrFs
zFi+Xb)w=QBV2n3R4(M)iN9Lc5F{JfyI)<pJ?(wQE?|U3pgMOjrjyj@=B$n3J+_6uc
zs^r?nd?qyri%c&yjI;8*LxGDh=#@4zjpxd*Nuv^R{lSY;OW)&W4Xla0AFVMh<@v64
zI>}_Pnc)<;zysRiUatJO9*+_DfV%HP7D|vcOh!*}L$ZzB*syfKyOyg&Z_Pn*r&Tl5
z&9(zKb~sUfK>my^t^Sfd=;KE8y|wB8a>!^K!56~Lwl+VJ%Y$x&pRx@aw~Oy9yTsU}
zeR=(%7^w4+s~AqwK>eMqdStv=qC*A;qoZq(k!u($ea-KeqfFmi&1WUi0dKi5pPrm}
z#=|{dLC%0?);Sog&acz5MRHme@c~-cpK)r(q|&0N4-qF?#Z;3>Ql6tPG5sA;2BtZL
z&^W;=!s!5_ABoM9_L81<FBk726UIU(>tNPF>yWJLakj>u$+NoD<<ZwtOjr`aTM~l=
z#;mo9e{L)({y8aTft^F6_sEkrDlteBx4_1y=!JL%qQIvFoMZqR#~bJ@i7dePTPiwF
zM11X1#7J2#0S1CuxxzH<rNA!uE#hI2wzv_IfVV@J(!JoaZygUvriRzzKF;<aG4zLP
z`aMNMK-pSrL<HgxqK*?UeI7}#a4@?${{d^-CU?unL@ltZ=Q^iM1YiJMFA-_3V-m;=
zcxoUm@<5wj$aDMK#lP)zH?lr_syX#_`!no)OMic^=JaMMuRy0CUL=2ro)7r=o{Mi(
zi6${cIUXC^f8?NAR_Pl85C$L8JiLAKqmp}*Nx(LJ%%uaNy>2sr_QsAa0&;3nH+*Q>
z$qF#mU3sb9iZE$)H{=gizF6sT30#`h&!zA}&Ak|i--d?@Uf&{J(#URD(lWv!!#Cz~
zO~@E@N0GS(MriP3jl`hsCI~Ti8eX#6YBPGBLf6}>LaVmknrBl;^eBEu&WE0!^m@yz
z*SF8z>>nH(oBF~dxK$a%uTOQYd|zID9azZ@Xc|=!i|+xZFY#6Z1S^(UzR`L*w|&8Y
zCM2dtA$m_`swR0l*qbm^6!-Oto!GDu<Qy7_w3;R&Oe~A#A$5DjZUhW^|A_?o+8f{X
zPG6PwHz2ZOJ2_VWdL(TOVTzjIO!WL1cmoW6B4JL7>BUSa8>yL#VL5UC4^h?6XH!Qx
z&Nz_%{Br7PU`V0h7>%Q;duNWp>|lQC+Lo-)h=cOWFq?un4-7R0!mOri@z82%q?w63
zkkDL<$}1(abVY8cD2lNSu@;zt2)QgK(OBZP-^t#0Vnoce{yA>#InUHmOvcp<z2x!P
zvam|Y7~SbClJLF84icJI_QTP@gK8og0fBxYMysaLwuTH7@LSLK8DBMYTHa1|sEdgG
zmcQ=mDd$;n`75rf!kLidQK+bB?7{$A9|?ALX6|=$6o8S^(t(yYieLAn-=rr+d3ZzG
zW2gY>#qcTcM|<QHCHM=uGzxD?W^U!WM<F_X13#0PJMe3o@&!JWEQJekd=WYdcu{}f
zXdlpD`Ob2SU&>Jx^WkEUAZ7eINNo~KK&IG{%%Yl|P2A<(Xc_LK7I;aV8`|Sf6X#|H
zhv6xmmlOIgdl_UfR$rFQkbQbdHSOlvKG8hpua?k45M*HH{D+w*lbOap+r|*vM7QOb
zCP`zhSn`2s9HyDU_jRo$gw+6hT<nNho2s>hxVN=V>EWjh0AxHg#H=8>!#lcao$>cl
z@q*$<kG4_p<RMRRVgp<I=+4F@vVAS1GRyl^>@n<yJ8?R`;POyDR|Aj3_sq>^gW(9O
znmRxCBF77|BhXQQNcA{aV(g)+w|!T5q`oTL)NybAp;2$#T5l5Z#-dYf^RgtwjO%CZ
z@G>#eu(?$p)Okh{y7;LDXGmC-owd%D01G~pnMhpXc@$kYdwI_wZ-nQAe6Ul_syh_g
z$aq?8_h@qWRL-IgHdaZ?TO8Z%<+j0IsMe2*v-4@5Pg~&zpe%pEijT-O%FI5!>)pK!
z87rb`0H+H;^3gnZq8J39CL-gCYujgXQL-rh=FVUgFh>wY+Zskp3VMI^?DgJ<z!&3c
zWq3qMqCy@duKTSm8vrpUJ4q!CBvZJFMRGgqEsKdjOQCv$B+8q*8wvOw(<2!<yGh_P
z-cir9X~;1wZ|p=k9Q>Y_2?g7w#AqVeCL4^jKFhSZwN>!6$b3R19WN`4biAgbjnR@-
z3$?Fi%00KbjH{Q-k~qNr%25)=CHG9%&_SCv1T~ptet{R_mX+LR#ErH+2^qj6H<Tzl
zj8L2x^@p6V<yCqnjEF6J9F}IQUTZP4&Od7{=CZ{h1}C>JFGES5h(;@6RRwGb#Ksfc
z3)=;SU>Tfq6f*gdJ9w-kC@%4ZEom!DNNCv<qss9~XZ1u>#E1|W!o!#$vF3Puy+S(^
ziwd%;Q8Z$XYA)GZ+D8p(b3KE#wU7J0mzQ_eD{t@^(q_>uLQmOc;yygGMSebQx)|%y
z*uP}C3gkE4Sts7h#Tg)1tYw1uhaQ8L&ufV^tSzWfUc}UXr=V!VXQ}=4o)D39f#w`~
z#bFd0AFGZz_F&>_fP8`XG02+TzM78989dx?ZFhSv5I%|F?M8;R%Zy^JA!|sg@mtxk
z2J=&Emb#`nYpY3W##T~4%*d?rH?%tZFJV9U(Z+ns3=q+NZJAl&zbpecu?)P0wcA?8
zgd3aPZD1O=o}uEuOyB;orf+_vNfM@6jzZ7yE_{)sKtiP|e2xj!sBX^3<+X8hu&I`o
z<xk2caY7l{7;<VvX`J-E0l4@gM={qKkRkp5NMpf|Gz0uUK}yq~{UhZx8)re{&X@3r
z{UeBY3`^EsFEv!V`3%cB5*Z-h-U=%YB?k`Rh1E)b0tKs2&Ei=cc+1xl@Y1^lT1gm*
zn=>#9CsgRadim!0+vk7z=J5Fs-#-80`P-jS|L==`_~y?~O!30%$PxJ*Zhhmr>~uK9
zp-;2ABv^IUGrvEJ>^fPnO0CwAE6358I9o4u`c+8k6On(N>_??hN-R1JxJM!1PaYh~
zG;-i9VM|UJHedhAYf*3`L$FV#rgcmACJLMosazp6nbFGj62+>iGM}Eu8E7mC4#Fbt
zJ7@XQX0w7(1kqGQ#SnaK?NaU+yE{9WYC2mT;<oI5oS}<HWBarZA!pXKFzMt>Oja3^
ztgs*XuVF{<DeVI!Xi-AeXQ@g)*b-2zkgKQop~Yl?>Re~)FwgNuYsG!25(*guU)|%#
zE&opc3%7Z%o-5r$$!!uiS$!Y(Nx}!|?z1m<#HI@OigC^FW_L3+d>Lur$w-lAQ4=2Y
z%n%~U>>9fGoK`ZgPfsikO0_ne;5$S);Gu6ka*q384&V~a=Hsx#&uTZi$q>`y5q7kP
zpzY6qqJ&_Hvh^~7=w`I0Rr0mn;v~AF>}+;&_tO%HVk~7qnvGD)-iEvJWw@!4MAj-I
zZ<HXCq-8b?ORXk!Yl*`8ktPYb1VJBbZje3Sn=pzPBaMTX?cA2rQ;b^+mv<{p4##!x
z-rh?7Y3M_!tr!2!5CRIql_3T>8T<0lhv?mrQ_B*h3Eg-5L;>83%8Vlf{@(fR1ogLx
zJ=B&u{Nl)=<L$GDWAlGP;0qLGZ2cp$e%n9}vsh^U+vfbfT9Ru!&Ch+kPVLNqZ<m>}
zH7{l6WFv*)eAd%rmDZag$9?L2+|g^6M!5-~y>^u>M_J7qX?cSz3Aeq5o*jb8LEl|A
z@!vRoaJ0Di$0tqn-M*Y_0J-f_@)MDAJ_pB9$jW-Kw`{#5jWK4|dT`L&cpthSyAhPg
z{I|$Ap4*Cbp!`?Z3t%qb-~J5#x<`NhBX(z_#LTJpb*rc`HCr?5tI}dXW)N8IN4V<S
z+xq2}v#}8`1&Bhok~isgbwJR>(ngFSTa9jh+ho&TDjwT7w2H=Wt~iqU^(RSB4Xb;#
zG@WxlY5}h3*UMX6N8+ViwuO%q&$|n}1DU9=LK5t2i~|dA7WzHI^w;2-xz*juNb}nz
z>BvN_mZjgnU;KzLidWd6U5riuQIJl5uASvsT7IfL&q-?Y<*Cp=p`QiQN{WkIsLVB1
z@x$dGO!>zrYKCP5EX3u^I5)_Fx#QhnR;6^dPyI!lbXkJ;hidyc_XF>0^SG$n(*g9q
zz|_1g!Qtgfc_Jy>jVXMl>ko0)*~HzDS7dpQAD-AG@x~DXVm)KV6nI0^0_aSdK9#^f
z*u?_(e5sR#l^vxrs@z!kx@{9fEtZN$a7edE_Z#OhTbdOOz#S~R#MXPzw{Td?ZWf;!
zr}3=VdVOiq`W&3R8+i#8mk^MT$P|e8z%t#fzI);St(tUu;5I(tP;A5TbVB~;@`y4H
zAWi@GghX-P8W=36#48)jt8la6c*bsXZnzacz!!<T7Wlpsd&ii8Q@(&nrm7ZU0UP_a
z!DOL8z|kC=5j7cSih7K8w)kGcX2zLu<u>jWfp;|5G6DSU1U4o=&I)r$-DX9AXcfp=
zT5;%lkd=;5Q}yzgMUJodhCM_f!)wrDHcwCCpV5*oDljo>mdlX9!sXTyBoI&hCh{YK
zysiMLIh|g@JdCMLb6!sVT%I>t81)+nc_>=sVNQ4>xzqwz7^FRih_#1HWIjowPbBrh
zT8`cUE;MwNa|oHWMMLdO={m288{Y5%+UC(iX%N`iefQcw<SNm-!BMY&pEui%>P;o|
zY^17ep4AP^KT7_3m{w4?z>Vfxq03e0kl*OS_NKri1@j?9$bZ8*yL9TTP%3FnM8F<M
zZRW@)$+pvcV4`U-oP6ds;I{#s9$palm)p8luPrRr_Fhse<jVB52)T%5y(5j(cU{}>
zKm8HgC$u`g1j-?IwdPPzUt(k4Fs(=(m5i%Ua&7tc)d{8=eHew(q0g;WN*%&=l~p-5
zM|YR@ofMOL(ICafF=a(IeC1`{YX7Vko=(rGPyT<4SDzjc-#BiW2pbklgK?BsuCh00
z5sslFP*B^=e;4gGW!5I528&_FgjEy}9wxM15Lm<S*JMg}y2%ib#L-J75l@#;9H6r2
zv+BbuFZx7aEY*s*bSm4XU{6bAo}t&gv)sz(w0;|#m3z!>2lQk%PeK2bhc_b#17nNl
z^sTAxRq^JmC+btGpl^G>#II;@5oZ^6o5eAC39tR^U+Xmw-U^#P=-rC>0dM}ezhw?m
zvl2Y++lmGB4EAzBAgakjKnp_b;FfMy&*64B3?d)tx<;BL7-v|fCvAA<@g=c{RFxc)
z0j!PO!Xemaf`tENL>}3Z-O)$Y1~s^i48y=TG|DXI;!|lQ*5Q!FMOOKPi>Ic~mW{kh
zFah#g!Ol(UQ{n=>m(h~=j*Kv$);s7xQg3mBZCNEwPYgK;UNH?uY};8+8M4#uM%sr6
zPNbAs4{FrN_Yu3S(u8_y_`NU!lfvY78Nu|9GP3d`o8K1d()K31J)QL(IghS+sL?R;
zB9Jse3d;-bD|ax-f)X-I-7j9%oWy~0!}$~-^frjX63Vl_&0n<63K`O|WnD$<j~6n0
z!W11l|7WM?5Gli_7o>f1FJuRxoZVV@HG|gwROwZ_qi#;1#dd+lrxxp|D-c{S2kc9{
zm2r&w4LyE8#@nvd5bGnA+dlDPq9e^DVO*&-SgH*EV3o~Hrz<gfVwEtceLpN!O`C*_
z-T!tzUTc{YI1E_E-*|CQo-v8+67=n;c3^L%pevO+1;vizCBXLuU&a{immY=SyGN|n
z5T$W$iKdW1UNk!mhe~JA?&T_cSWbOHoosCo>1DaVYfX{YDxuc~R^x}`>GV8tay^8c
zj4!anI^Tng!I~E&V_MUEJCUd@QB(dGw1wEjXJ(01?KihNSU={_`cFF5^Q&o7v;H9@
z8rB7#HrBl&=h?9rBkGm1ATTaQ#lUvizlsKQowU4eX?eZ3wo`@nrHI|jW3Xl95CKw&
z0m~q+lsw|Pd+SrPzE=NVn$*oSsqWZ9x{zD*qYbtHXWHXi-cvUs#?l8E_&6?7IA1s0
zau@~Y0ZjBmS{c#dA7f(wFFVVRwzK?A3@JA?nOs{tZPd~KQbPZxN@yPmFUzi~P@kvs
z`FS(AfB&SOpI#jGhtsqBxUj!A_c4pPqt5s1rn#t^`@6fJefC+(5T}$el^>U*k@4S+
zOy=??3>kX`HSpx=u~N&vuAY5UP5TO6`^P^%Hqw%Bs3%`nQ=W1}5r0Fu&^+EP#fp!>
zyHVxNb(MSK^2F1Q3(o2G@eh|3>V1RdmPp>n`O9dpW21`94F2$kBJ<vCpRXd2v+AU7
z=Cf<KNdz58l$N~YNbH@S)&DNm3n&qOsnT_{KdV~p6|BlFT<_N0!S@tL@6h_aKwI?J
z4!P=@e*R@LvBG5HlbSkgmQ-PF|ACFX29{Yy{L2>MU$zMUvPJkO*dinhKxE@)ZR3cJ
zM>oMg(wHGD$KSw0GxgHEouB3>_taD`gLZFCwPXJ%`;Ob1Z~R|nz+nWO+*?kp$%@xl
z#E8P$udDfG1sN>dLBSv*5RZs^ef#9cUh&<N7vCO2MDCSwKXTGfXh<DBtB;S}-xG*6
z2^RSjJEu6T8$X0Y%v6at)P~a1Syhtg>h1KEqfO0{=7Mwv0?GcK%!Z!i;1Vb>P$Smq
zA74yR`d19c_4%7>eB2q%uLi}_a`K^UURSOzcrSp|w7Qx<c-9jQ_@Hn-eIrqFLiQzc
zIAbIi1~Y^nD%?@O?wJrpI*^f1fB-Bg_q3-V>A1msZvK~>Bt{2bP<S-Yu&SVX*!R;h
z-snDnpFXko?TDfs?x@gD+kUQ${BF7WXiV~|gv77@TR9tclF7Q}w%Z3io3APwE>`fd
zrnWQ1!oJWQ9RlDv@)z9`Sh~hanC;kPCE|JO;oM8-t)>+XEnSve1yFYKEou_0bM!h_
zPZX*x6MbN}=I#cQ4WvCnLVmD9m~Ep^HVfm&W)|Vq^UTEMW0<Uwon(7Isy<ZXRGSSK
z*#pR`=vPMl9Wn22SP&d=d*<rk>J6t&$B$Kp1s?NPY0IBY%f_vHw&iuy66X!QnocvT
zk?R(#{j3{9zb%bb&u(8pxbb!hWBe=b$IsndF^!IQ=jT{WM^%U8se8Bx8IZ4M(+>b(
z$H&rykHE3wryjLLa_bX1hcBGbS%HHs>uk9#o=it06v`mW5K(eRoPT3Nehx37@5|W<
z<R4#7)nj7rBR^7eV66i%ON&MMbH8{7@0D`GnP!+ZJG#c%o=doPu<QeuUl62YQs!bb
zy*L_I+my|iS~0+HCS%tj83%eGXc~B3?DRkTj0V+!IY|YV`UKwIC*ykVIP9i4q6?ov
zHXGjr=A3Wq<xoW7p8ie%Q#!BK&Y$^ZtD8x**+#b8hO%t%tz_ABVz5Vb;yE?b0e|&x
zrrdE;r^6o#e<UbC-9__sI&+h2Olmwa%Zm9gs?;m?DcJ{VZG7sFZybG>tRTJwe?iHC
z9|7rRC9n}=EgOL%Uxrpnv+0L=<ldM;W)2TOKYDz4Qj#nVgX|X4o?8<Pa>5yB6uO0v
z#K=}-P_Sjr_!Ki}+tq?NkM^CT^Ji1L({g<L_Ou?ppFsBXRgr-osFqmt0=Q;<RU3GE
z)NU~~{wo&9o#~foWJ}57(O?>aAC7Bq0v`2?pQ_@roXpYnUnQR}Ka}+tM2pZ1WB`C*
z{utM^DCZ2gRF=CrevW@0Rg`WX-o?!sBtwcpHk_Is(r4+c_O6egDnG1}uIn{=qCEGM
zrJmF^l#hwxg^HmuBi@iUlsn{ZpX(|N-N8iS*dwEC3bOC6B<OZ}1`!laN)XP-&@nX_
z4ychtfSyPr1%;yuCAG(XH@<pSjjzE*yB?lGmovBduGs~ccAyNTU%Z_b_!h-+^nm)A
zaX!*Z#ACUviuaT0C5;>gGxunTi+)+VZ5d6Opu=sUkwI{W&CyX_6mXSmBAN-x0-ewS
zLiM|2HuSaZUbf*mz=D|E3g1IEW}#H!i3xop6VV3G41@V}v8b?y0D;I2(rI?4{ZKA;
zPeKTn)OV#_Z(}|2@bwI){ZN8a3G~1;#f~x!-S=#>MNEPn>+_*<@8pgng8%RT^Z)z*
zb^$N(I_ky*clP$QnwM{<fBm^L3zTyXAH&b9@aJ_zO6|(JidPtAO0l&FOXlaAU+W6M
zx~d9`z~hDM#Bnps@L+~!I4{7z*c--iGED{1Ua-tzvO9>7FdUGcqSiZf`A{K2AizaI
z)(QAOZfR9PvAey!{iuZhJb<6L+gx^ErLp<t7ykGs_3<<Q_ILH|?@PY@QGNTIzy0!y
zPTnJ<`tmC`q9gdv7x42rph0?p&QF0OW-eg~R}3|Bj4^zt6pDV=(X{Hk9J==A8z$IN
zze8S`qv>>9l@s^Xvem>A>FhA9Z!}zzx#H=EWvnBiN17HuWN5nhp3DJ+50ut$+xEND
zjW25tnSP<D^|AcO0K8{7(190@Vt8|^Y_d6eW1jK(X-UDh-Jrx=Mz~;Z*;U>}Kb<;`
zT)KA`$~ownkUg5iPs~$Tp3(ITmotP;Y<%lCQ@A_I(XST`T^ywDgTn$Npm4=}p~5?%
zxfq_}E#V<xYE9uCbcbaFL%5t?j7RPYMZYcZaKdsLuD&}a(>L_-`O4Ma_R}3iK7}60
z%ht>a1j$}ZZQ#leKTJ;;q6gN=j`Uu(@2<MY7$mNA72?;YU4VH$jIl$ga5qy2;C3=i
zJsyJ651a4#m^23C81}XuPvT|BDgjcq_#?H`-`Uyi6*4@#mW=-Q3-@$Mp0&YZ&GnWJ
z20Ds4WfOs3bkVx~Jv%woRK=^O)1;eiw>G;8w|>vx_q{^j*m4OkL_=mCDplrz61{_!
z2rNvno6<9~!{a?_$rKVQ#v))h!gboZYJ1E2HLGugwsddaZyoEB0VPQV!e9hoGJLZ>
zVLy^NS|Mzx7}NCJ`efSL^-259u1}~Y;)mty6Avh}K2k*hwysYilacE~uH|mzol1V9
zNZ(1x&JT66x!47!k^U^hpAQnw|NA-_eWwkZ?&T4}5X^QlQVY~xejMF30mkimEo0n^
zyj<ypDNCnU?m<|t&w}{e<GI#XcoP_Q{CKDt^89gV86Qa|tw0y1&5--9RQ|ly1g-^G
zDyYi2H@(GY<fPKG|18Y@b7L3&xt(1enM2QZLP|b;{y9$Ob8YFpa!)=FqxvH3i9cIw
z?@8OJvj=&zJqd5ToRlz6Delqz+`c=Ut=ye)wHRN7#W)IoewnDya!0$PNK+@KP0Xi&
z=D}(tIw@h4y6uNQFP?4hwwE8ZRVgj$qNVkk6A9g{iIQK2rT=4ul5fO_Zv&*vTr|D5
zYwH$>sd=C*WoJZOCeL0?JpLHg<WGip{3$~kvonr0@HqnVC!FA)HX<N@3M1Q%i28=R
z)jsyt3vOf5&byV{iq>wdrZ3TGuyRj^lJEg<M5*Z|KW+U)uZN)GjG_H3&_GPIHni(>
z$JGG!^ncDy<Qvim+i9dM%NmpThBU->3acTtP2d~U+j_{xt}fLQS+x+T3IAboq1AFA
zaMyl{qWtK{n&=`qZK{6Wv5-gQRijg>p!*{!f-yIFuMqC>gnBXy&3$;Tc}XG+)lp(2
z?KT9w7&}px1(j0E%vHNKsX5xq#|CHlpJ4I@CV1|jR89Yp6OP8ua$dF6DSpv&_`es5
zeT*5Fe0Wwir~2=gyvAC8lQ-ES?(AU{9pTBiKADh#3s%@tZ@D{aKvB4jm>jq<fL$w$
zs1pW9_OM}($6UqBW#W0nR##npDfo2vzM<ILJcx)GteUSB%y_{2l5B`t6zMHJtPh=R
zg!JP4cOxUsd^UYw{gVhu%iagW8?_AHaBMGX931k-$GBC0_(NV824>W+o<p%wem+Fu
zsQ(%^7=xOe)!@f&#wO;S>kRJBZ?ezH#x0m+vNJ!rqaT-U^<6h;h2j18$$0sO9ooI7
zgs9&hD_+u%8N&$tp0SPC^CUC`^718%){p~%RQs{=@2_MMy&{<9KFY=&aGa|UwAPpc
ziVi|xbL4HsN1Mu?PRCP6{I~wc@$s=O0m?Oiu-@^<mwdDAm=cdm1LXy(E5vz66%iT~
z4@5y6!S+{{eBk&SaTnnl)1l<~l;lFm+a-Gqd#l&29KJt6aw_W+ec8&wYKF7=d_J8i
zNQd+dY(>o2DE>Ts?o7(F3he>l4?2rsxlLDXxYmNo>O_7NiYsND`JO#i{#u@04BcXM
zhQ~qUh7O=fB5&^k<hND(xLX?AQpqSfvNaS9&z4&~Wwwe{l4h%DwPkR7!6LO8CYLOV
zmem>+QKk@R?C7Gak-JhR=-p4b<^LM&3-I^P;rB&TeOph;vBa$L{9Z0SmG(76yEdPk
z^B{#}okngb7LM0x0>75{Scp&64WuqUrPt&&|M~MG0;pNea80x;hmx01G!<FotpGTL
zt=N(t)F;)I`l|X=Urpy6<znTU&FCEqQbFrc<+bAGv*BE04e4QgTB0;95!2qPNz+>4
z$^WiqQ+8JY|3B?P(<x)&p5hSDt2`V`AZ&&?R4P({g#~anqDeSjhWRQx76Stm<Zu}H
za0UmPj-X=fUck%Vi=+npIf;JKv7>ZT(_I>F$RQiakqFz@J$s2&$2thV48yM!W~y{1
zpAhrc#PFMl;alo14)$nXOm5iifLJlwLz`e@VE1{s?MgSbmeXO1u0$dW5-dM5kTr!a
zb)ceaso$_=U8a5}_|4oQ#JoP2)msB)bkgk=_|{EAA1@Uv#8^2M=ddhgwbD9olpw^4
zzkq)utn}wL6aw#ssxP0Uf!$_d^VCycKDA%MofT362tR<<`-5fobwrYoB0Z+9J|0hj
z%`p}3;~P*}E-4jqpw9Rl6HjN2wO^_48h^hs!f_?9&~BjcVk$pWomeVs4pz)H-LqU$
ztWBEF%1JYZ08RPRAO}2;`+U@*SQ_BcyDOHh(8imjf^^+372-p5ZQ_!6c?)COT>!kN
z*8-$(?CTT+M3$XT-kM4M@L2M&MHGxrTVm4mkksooe$y%;-)4=&FlSZcc<ZVqdidsE
zu}9V4>T32Jh{*YLjNvnS#Ub)(&nGV^T2eEw&d;lnskFr9wAS_F{@DKa4I4~2=tr;{
z@_Pwb)+xmRd2laK&JW;lLQgMdplw+Kj=iQLXyl#$HNntv-j_jwz9K*yc@GC;U5v`-
zUKhnpL6ACI{rj?W6!gF~>Gnmeupn6nZ#&zvDyeb<G07Z86S{eV-dHRbxi8BCpO)t-
z|A<ZGIF#oszm1Lwe-FY@Eka!akOaUM7<}t45worUC&wuT`cl!PNc_13rV?6PkiNh|
z6p`x^kSr9>vG-vC4OLpUCqSZlIl7hVvREgEI00cR>M8J+bMWGrN4Vgs(RWai@?Y19
z%hJEoh1B?XlE$R^gplC-YJNH$bu7*q;U=BrBnY-S;cb%9c{OREGk0Hj4&mac9vY(c
zy$=C&Hl0l85C$me&Cn0s8&??1FzlLwyz?*ROa-qZa)ps)$}`I6YZNT)(f0HMc);x?
z65vjctj6i<H<;>)AZ-`BY*^_EGH`f6tl35&{E1C6b+k8SMXGIB)mVB4VAmRuYWFNZ
z(w^$CYi%5x8aBpE^(zCP^NaG7qcXSWy5%F)k8P(*vYsszYK%ozI7^Nag^{u427+JW
zZ{oIXfHRhmPp-o|GNZ@5HTSe#dNI(y^8P2Y3LK6Ar<4hWLn>fh(E0S}8ia}y^j0gb
zwug=p9if*J`Fv2oKnZbv1ZGTycZ1c{QJq3wX4B$wI(uJK$H(=scGDbR)7j<}z-_OF
zzk|a3!LtRB3^ytMZkoc$<tu7|=f{*zQRuah)iq_3lUP<>0&vm4c!!Fay+3cW>KLNe
zvYRi*PAq4$@_H#~+7tNiM}g(%+QJ|UTA_~6x3CG$W@04c7QaLc%PtFHZ@v#IL(3A^
z1^xpO?O}0Xpd{1ld}zo_$Q9M|?ovqZGN{1&benKbj}q|^mPdNXt|r5geL^2B4?+xp
znlMC!`VN1-lg!iYU}=xqfVxuj%bt6H_lkFT02S!i*M}KTx(q3pWkk8HR$NY^(t1NH
zO>a3~Av@+Eu|PUO)Oq<eq3Pn-Uz#LK&0L~;?8sO(uJU|)L~-x7C+-Ap<DQ=*+HNC2
zQQh7kqEMbYz-!#{aCHDV<!EuJX60yG#40e=L?vucz&^zJS=DP4-L4}}2pz$($Jhvt
z1|+5Lc8mW>)Y8V9BBmEYtl21^<cd10==4CjV-dL1dV<uq42$cd44z$}*b(QhOwDwH
zKNT|r7An#uvlSN&>q;V#DdRF;ToV`6DCG;av4IEktIW$2SUF*f;^#iJlJ$+bB0##0
zcVYl9ZM_R0IabRz-MIsU`qxeOubb{)H{Cz{raOj!YMbA7KJc^(L*0JU-R6$l>@F%l
zocz^mSK$K=z<#p#)n9vsdxQMkgW!HYQ((EDjXxAix+q|`WCD2js91JiVeJ9^8z`ol
z70CHuR2}W?j~9v?3#!9lIQBxrpf!TMP>kNBH290gN3C&VfoymYA&f&1!9vlTvk{88
z*uf6PZU`^9_v>wn;@}7aESSGli75BM`*kk1=W=;A3J#+Ba5{s?MXoU?ODTSs&Uq%V
z={@M_)XfK?Hq;};nttn8apSBWT-nu`dpf%A!UlJCx(9oSJ$C*kU)+|@QQg(ue>y8;
z^#E5g%>Gr96oO}OzT>?Mczjhrm`Ze8Zn=t8ZUAlsd86O}Mp#}!U=2W=cYuEHiu>*l
zho<ik+uy-vzk?_r;|d(C-5I=QZ7VrPUu_FI>9DTX?(vPtY$AukQG2KYcqzW_ngZtj
z9ETc>8mMu9>kxt5{p?}r2?=t0_ipDMCKr=4iqS*d2EDt2Y3_RDW-8X<mUrpHz2XXV
zFZb@z=N8rxDNDzkT0=O1^H-~+Ne2zT0}0M1<Lj=1Am_cF(3Ood%N#}Px<DN0Ux|3T
zEw^bT{%V51@@7O!yzs6g|4~)v4oo?GFWd+c9yKsECZq)(%tDl#f9<4l$u_pkQE{PQ
zkpNS!%mo9O)gPGG)b}YS`=Ara%<(ux!1YNP{LPsfE-QOt6vJx)HHeU+PpNbebiI73
zLlTKNuLMY;=o@lnD3k(_A|{nCT4bbmjEpoiXZ{{PgwbgOcRjAhG2ekPwf(Pjx7rum
z4)G%;$p+XzNTA%>r%&}5RBnlInX~|~kUu$M_!I&+8x}52A&Ft_2{#B0;D<NNz5~CE
zsjjK#eoU&%f}T5`*x<Vo`9ScHf&WB3D{6|Dc^q_2J6Bl6ls+V}?gM-3E?JUi7}I;j
zdWb08s~y|rH;q2mlGrCb>sk_G8Uh8AeuDjDiz3dy_O7kNbsQYf#B$f~@ra3+v_vG{
z*EtAKKhTY&87*71#QNG(AHoix{@3S~o3i|d!yvm9#SIn{lqLHFvkbsJ6^jzmgk{~}
zU}XFw)<&Y70lGEqR#!}H+nu%I#ylw>n>x;_UBO!UVm|*=*4*qCkh9wUOsucVb5fO)
z7{(Yn=ZU2Q%hT9OGt~v#Z{%>JuSC1;M<&uTi^Z)LbaNx{tR=nrrA)W~0e0eWOhN&y
z=T^@SU?Zz+$=bxP^1by9wta%Ed?|7wZH1D5wzUFZOf7{XsK^)l@EmOwbV4pIxz*4q
zYec?Al=w?`@(FCc$tcB`qmbSAlUY^vLQ3+;fG<i5W=$?(K%aouVa`x<UHC1taEWs_
z<AbsQq=)TejW2@;Km3!T-BhQeJ6D&jS~6D3_=U5HzLE`B=RofZ7@|;B7Ipb4Mp$XG
zRdb#(i<!AH&$6w?!(e|b1IpTq9;$(;CNhYYM*j3T^ynl9Dz@liRL<p*>$YSv`4(TM
zlj&sJ3O}Ya0)D1Z(i8ts(}quf_XlpFa-raZH%@_~MoyNHb^{{0Cs~#1-Q$&!W|H9o
z%nV2XBqf-A19*so{G?x$zr~#4ZTzXHY|T}oncHQdN}0v*Ea(A<wp*4YkQ<PAc|nU`
zk3!T5aM`hla#FnG^gP$^in3uyPz%)<XhZrALA~?AlYIgmk`CxqU2wPC5eN?MYTCIg
z6;0Zue{SS|q8xWVJS{+4wed~{E6S?l1=<986FScsws5hS5bX<`gUv8NA9`c7$w&T1
z;4<?(C^#%OK1T5Gh0Ta?CqkyxCeD)f4;b%<adzE9wPyTqTP8P98Q^NtUT7ENnvAVb
z=AU9cx*ey&U~6-QGgp>Xxg2l1L3FIBg{tr%RPZOqOO$s>&icRzGHH4G=NFB8rtfxD
zO0P&foa9OMwqB5Tj0`qGLADz(216*GKL{V<@+4tg*b;n98?@eaI1L#qT9w`A7>rb}
zZK!N#uNy}XTqamto2fV~=C0#E=&PgPj{Ts&^91XO8!LqS)KC9Ftsr*z#cT%OS-D}z
zN1K`%^~+J+M00FPKe_IBDfEw09~;OYr$Npxkm!)}{oGEAycE`EdgScFehN+UGQc0L
zOOEa?e_j3EFUB^q$Uu{l%>u@qSbdb_LAF^AZHvOEQCHo0i9uFgIlaE54h~~C%eiS8
z8eLymEp_XWca!q>;iowD+PI`;JNbfWD<!j?&2|e%e5-BZ{YfQw8*!bR?I7IL{Adg>
zM9)w(I#;?R*3)Ut>0kedF?QENEu+M)s|CAc8(jS1;TnjwN;sRnp}gHx1{p#1_X%zl
z|1kb|#JjIu4b78#39957SY`XMj781lr?fjus;<<7+J=a+esg*byor%GSU0vlS&Cit
zIm<<+W|iR>gWMlMuF|8N93;^2*XM)`Brs9QWa?gHn7p&UTx_A`R4c@2i%;TB28+hY
z6c6j>6=}3!`#1E%BB3n|>8V@ws;SEfrB;PJlPKGK>JbZmQJ?;=@7%>clhlU(YxuBk
zo<oVTP>l!1&kAfsbef#2+Wp$P+A98z?$(J<^yAozH%9wvoKX?q>;vEfc{x$F;Ot#e
zQsSJ?uTm?jG{RGeT+P{xzVb(6=Dnr)!)ZMap6y!Sft!NMK+$#{(vMb+h+eTI+)aSf
zGrLp#A>G1!7#u`)(V$Si-9ZjrC|=3?`aJ9chcKDiPoF>&!|IV;mf`!QRG(m8UuP>r
ziB$i*r;Lk4A492oMENk|s-laTP3I+fjPLvxRfT-o=rBHUbv`T%<>YP&8I!0PK4CzX
zv#C3hDj*B~UJ{Vyaa&Y~HN-j?IAU?Ds4YSth(MfAFL~gOMmV6D`_PvB>`Jbo1gM8E
zN~ngSBr^_L@xaP`>&aj9E49YT@Tg_2X+sE355ry*OJg9^lb==BKYyaGf9~bU{wAS8
z9xsgz@=;q%5cF6ueKYTp>-ZJCE6ed$E9tNwT0qTdl(jv_y8+ui^NAGfy`$LlS(1cC
z5Qs|@Bd3TZMF_|w;}#Fxv~?x{w>}cHOdi^<kI1-oIE@}KYvmxYD(jx_h<8L%rZjUi
z9}%Lz3*YZpR*NySM5dbnsO_d~=<9`&SR)`pF34nNmG^EFl)*ETk<ARwiTU!#T-O~B
zI-Q$8FdRGn@AGDx(#dUCvzdGTed}KNFt$cs!xIqpz?=BAM$N?etaO~>urm0wnzQ;e
zp&ROkZl_I>isy2cm!r{ZSo>=9+Cc*`#HLXb=F_*YzkUG*-S97`f?PW%IT`?}$Okvs
zbZI@ui!@dEbvm8Ze{)Bz9ES+D#U-&+z7A%@mEXl;QG8v_h<T+r31WHp9S*EeIY3b_
zO1Ta%fNz!Lh~>;}^GP`yjUh=Oe|1A~+f%Yxa(E%T-n?1~S~7&ZU&?+=#t*b*YIv+C
z16pc3>89aE@in&TxXPK^B9mVXmYP>nRuQfszfU+d&OCqjegS|pS5ptT#ioLP5fuDE
zz_PbiSEc%b)N?(`I|pcW4zYme^XXX+W7#Onf9N@&f<N|9%MF-%QxR=2rJeFkzoNPN
z8xyOm8z?F##t{^KJPcxeVPyFIUifYe&3HVQl1|(X=gI<<QCw+w(zze{wH=xtg&(`A
zV2w?0Xnk>Ed6B98BDJ%0x6ez?)Chm~M5%WM3Ex~lHjg1*R*#FFVi4z^G;K2B6MQ--
zyfFw@UDcoPzuy@w6>TPLe%o!sk~?|^Kt-zXhLr7laTZ%3T%77R8yEoMCqygJ$K{*S
zKRY~3d5mSM^FmMM4{Gw0G&#yN5u~5`zoLG|nMSm?Q~p<aF>wZ#qzhiQ?l;v04AQ=i
z!g5EaKdrQNpk2P&cQ4I;<@d&BV^&q%AYbcap@zO59@x~j>~8=Pw_?iIt9$)joKebG
zN3>>`GPWr$Sv7TyGP%)|6Z1g=V9*bopO3F0m){5tOIcJW@iD>zVXCTly?`;1+kGig
zPS0PsO}032$AEW`1Xumvf*{;naOAZhmHYmhF3!#1dIT2$31q_Jb;rykEgp6N(gJ_&
z!ABkV@hdQ)i~Iq?+ZZwlx~;;)V-5`8)en<vSmWlU56%vyGzv`Nj6Y%4I(K%(mjf5`
z6nynLs|xf($Y$G9<keqCJ#|y+q4_6S3!P{M(2_HFU_vaa8R|%iVJ80T<$#$H`QVs5
z>d=3g=?IHD8E|W#{(;vY=erLT=E+EWj_v+9{5ea<7Yfy%N71MU+Iqtu>X0~6Ucho<
zeNt#w=tt<s)9v;QG(HY_aIblg?eJy>o<6}Dh@m(G^QdKv=G3+VZ5!!PcBG5QQ*@CP
z>?0Br%e#~<2J%3DkYFJ)xfqY5y9M3R+6up(;`t^Z5E&O5>}99~yb-{7);DrL)?nc6
zc_V0`jr(Qp+IOg1N8?mvTwrU};WMPC+qG?fj@n-L^a-_esGBl&r)9$wW5zjHHM<z$
zwd*NH&G1R#R{RmG#_nWKMqrtP`Y!iaDhs%WDKYPy{Fg;d-&`DRL$$SnKv49DT<nLt
z3+$r!ny&=>6~D*aWBZ5c?5rHiTbqO%P*p`<Lthm5PoK*mFBSfK$^T|NqUy;p7&^U{
zwvKT*BmewabqrtA5M*GhPTipI0M~QB9v9ox*vCc<p29R9)8M+b!6i7lau@e_3Q=G8
z{NI-jOn}k_QMA7LJg92{bsCK#fI3Y;UGHVnt^2WEg$(PylWYEVIgp{>D=tM}GmtU3
zS6ZZ#!GdrjEtV#Q2vUNz9EThY_(Xm~%mWWNE_Bw@XJ=_D2S&LkxX=zxc`=`EWmH#Q
z)$)IZW-7=d+G@bNysb>w!8~YT|5`E`sO|Xl8ZHre#~KRLtrye|B=-|Xri`{{k&PpL
zgDe}zIbR5y>-lSK3?zxcz0?xqJ^r#m0DZY~9v7*Q6H<N0#CUH>C}p3mkO>%$)cp;T
zdHj5;KF8)IsXJ$(hfbG(Cg2FNS42xoIfQIT56ITDE>vFK?Rdwavk0t~)2A|jmELTt
z`cO@#qtRA3r$k66zRm#6_`2N|^+9_qXP<X%N!;XAXB*UcEzIBw{bOtECECy1_62O_
zX3EY@d!ioJn$xN<^x13&Bx4S=a;bp1Mfs^D%mGlVaJePYzarO<iw>{?C^m(stfLWE
z`fX^cUc1uHwXU9t@9#BIrS{L`QNTCysJq${uQ&gs7SFdxh8?So-VDoel~WouP>`sM
zesH_`a`q!!4816v@Fuz=@dI~<`T6l1^n(HJY+N2yV^r8)vUgn%s#K#FSP-Hip>mV_
z#vytMt^v8zg!l<HJ5v%+GU#`eftTA2v_xR{FDA`teLU~naKG4W0N@wK^&4}sVb(VQ
zmh|S|ZwtjPVj(bb);`SLt)rJS_s+l}te(B%yeSxqpB&bHd5l8}>GP<LTbu3O1a-o~
zuk1HWhy5-~-8KAr9(T{Z&<NmK!#0n7=qoJPGa&&SGSwp+NQ?CYZqs>n`F-pF;XhVK
zfDd~l=NyJhWN%%&>R=;`Gy8TrQ`!ZyyfimuH9<?^?*v$067@df#CY`UE59n%A4y_A
zW8ps5JxH(wKQCqVpSnx!WIDU1Lo3`q{mSwBL$3eP48QyOUW=KAtl1u<tC<P0wVXL-
zZjsgKfr5*DFb&PSV#8D8FRTK{J7eQIBGrsDX&oxG4(?z6z5@*itmR7+7)G&*<jfmG
zQXbLxHFZW?jZ{=m*^C=9v_J_2z&4Ir7*T~#3Tq$W3BfO>ULjc7oR8~aC5Ownb}bT@
zt|cqxYvB&|)0NZfin8BMATC`U(9YZ_mZJJ|;Yn(UF0$5o3Q4Y;Z()R$MCWs-HC;8h
zMjrd%hxk8(r35;PrO#^$Gw7vD7qJh4)^+qYD`$dTn|nv1o`FFsY9yN2MCHa6KjYMf
zK=k-;ZTa<MQ;8r@dqmubR#n&izMgzvUO_Ons+*b=1+^PV9^v{$60xOr4;?hasN&#i
zCcf9gHuA%d1FU5>Tdmn%D!o;QpZawF)f9nXy8r6sKDwyKqqi`hc$Eo;fHN;iH97&8
zWH&O4H<j$Z%6}62)W-~M8CKjyqJF%rP?Pwft}cO{YNlruh$f+D48%yd+W-X+tCJJp
zalLPyrxS1i<4h&%E6(lV!wi<XGsA5Lp2#4L5u|eb?QSIgumsx6<740*UN*7@*zGEU
zmAMN17Mq6sFHn4EopNANMTrc%D0esE0sXpnPoW-e3o(#4!3{ZewZVE3_ukHFgwS1a
zwLV<0{ESix>%@KM-_K{$IckTM^Nho!<ND-cri|E#N~;3vL`|}v<~#p5>2$512?Q^M
z+y1hgjS2|Y;JAdNdR&92_J?ZbrtPpuc#Q%t0tv+ms_=ROl@f0guJH<TZUM^O$$ZX8
zk=%HGY$#eY*jPd26yCt`bXd~SDhMlv<)o-;h>Zz0cjZJJPG?04HeJ;W2mV307I+^*
zuPwW!-W=2)hRY!?Mbo_x8YAiQQ=6!$l4kofZ|mL`@_182dWIop#=)&RJ_PWDjL(-v
zocqQ15c3mkUuO^%6vc?{ZAa4Lk`&U_u)KiJb7b<GWL1=rLbT<u+!&B`bOC$@IML%s
znrLx>vUV&hV96iOA{-{ke+_%b`OWCZBR-j$9<62`q6Bz$%Ml>+1^x8wx%ybo)yH-n
z%orCRX!R0FDAhgRF>h!L>hAJQM139~k9@opQfXx$`}P69%uEv`0FjyJ_-xwDzxmIL
z60Q;Y_0#DT5*ke$!T;gntXFUxr17h9IjkTzSAzgnK&ii+#FNR$F%w^3|3?L(9qN+_
zn2v#<wVW(7^E`uPG=tbkSaA%Z+4&FriddFyY@FoL`g1j@W)wz5?oY>#fC(m|C|n~Y
z$zQPgZXYh-6Kdp65wpR4yaY3!OL$?s1C$m)`~orvA_i!H@Fn_l36_2iC>(XHNrpxc
zrr-qRo-{gW&X66QESqAVE@O8&-os|SqTlc1?R+5Mf0$y}AoiBe4*4l+1>AC=6S?bo
zRyF5%`}iO$&9Iu3vw8|p5%PmiwlL)8>iP(ppt~y3H?k~xd9c1zdb`HDNZLHJGzj3c
zmPxEJBsdx0<FN3rXlU5r^M3J^A|RpW!<`-v0Bm$|<P?OLkC{7rj_A5;?aaeq6>>5}
z;`8|L3x8`eZbKo$*D&BdCDsfB*x+AmD-1<Zv|BQ9+do(k6DcER)3+wICZ?{5w@!xJ
z3%wg@OvDzu+vhD^{$=sY?_gDa`5oV)l%s*B6}I$}V=2SEhC$HJA?(Mjb|V>IW9YjP
z!zFNR@a>@brS2DRs;W4h&(E8|{rird58uNzdOV(9Iy^YL|DW!f!#Ujl(-%8m{^?J<
z_W{s0^0eC?%C;NdHu^L-+Ypv|+u>e)c5${X+knx}-5lJ5udE$2tRu~T|NMu;H?N*N
zeg4CrA^&Byz5BWL_N2F1j}N%8-x$SyST`8UnZxb7&$t2fPIQj|h;mj>hU1G-MejpO
zz8&q34j$~D)95K*q4nObwWoY@4%DBXRdn*UO%-@>4vLu!5&opdr{8@I&p#l6MYQ4q
zIO?|R_NpWXG{LA^E325Deh_cMp`H<;nK7m5_*Im*4!zp~8Q_E4iCc!Xx{pf=mp}aL
zK^&JLGwTWQ;6Gqj9fnfVV1fE|bv<>YQ=^GP&r(GuA+&BBkB8A!rUgW12nfP(nv3Bn
zT?LoO(``8>n+#syLM|qi>$NFo*OrzD0%Mq2p7~d1FkqRab`yW54}Ioj_UWNTXtL-P
z;ip3tBewG^A#cfHRgY<<@5>%^#qNtT?gC6z=mq8h)T6LBeq_PO*D)KASru*(*95~l
zP_yc4SXHA28vh`$(BMWIIJVlyD2<RKbbi;Du0RnLbvnXezo*^I@X-hvuI~D{uF%FQ
zkO<^j$-t=;gn<b%V^^FbXUC6e#7<du@aEjzQS?UMJ7KC}d*s_)1_Gyn{)#8IM8w3W
zLI7v?HZ10zYJ{Sic4V<_tS3h3bQUB)0q86eC2`UYh4hL_VV3&}qpK@^x|8yGJ%tgw
zJ3BjOSD(TwZg&8?>xC}BLqWqg_1{P;1Y9h9M1%9Q@;yF>LG$h|Kt$dVKjP@^*Z0uF
z?g6~u?52-hG+?vdu4>>d9YG-k!*msxzhg2QSA3{k&zD%B7NhX_qen2}Z(kMYTF1*C
zAANdrd0YPMxWfI{O)=EA&_vemeQxXh&IdiAzGmVrYl;WOABxYAJHc0T$)Q~Q$?O;3
z(ee-nSB~lAGPhY&qm!x;TSR2k!mhoUo>h*Q#0XebQ*qdjZ48%ibTNn5Js?5Du|hCI
z$QZ(cjNK!rnt3>YGM5l#q_lk#UkDt(43@a8ax!O-l)S}X3(?}q33!a$_dp7BYpSZ2
zS5nmrSTzdxNI2=XX8CZtz4n;Px%xcqCJ!uNy(YJgMZBf}NU%}Uiy7g+n+|(4nd62U
zB=yV=cS29&xBuF0rwgrzBQ$Qw5R$)7(`Ht%^cKQ)@mP@8MwE7}uEP_29}W@acY9##
z4_NgXWIDmLB6N#5Mg!u~K)fh=4GBx`_Ou?;^OA#T`YcIW*q|lJ90A*u%atQ0-chOS
zBoxvV^S4{uHS5sR4rdTwgwbuqyTKn@?!oA?Qf=JFY#ZSmfA#7WdjnbJo96j33OEl3
zGfdT!Wg_qaR9NUpM#w=ifUlzFMe*ysdzb(Sj7FuOT%sK2Q7{h;zQyn<=QiJ;BE00#
zAxoI4%*j#f<p*`ot;$_}%g5`-&!$-g;XXf9D3ga9v?FqYH*$p}kE3oknQg3$3fDs0
zDuq^yIEU1p8~ay^Viou9{hE=UiZ<j{(^tY)%cKOzkCewI8pqD6^1T(WW-!IKUvv}R
z$aIuP$nr{3o@JO>$v^J#WImlLTq)529=TSy^x)A=A8|9v(FlGi`M#DXd$x>mie$sF
z$eG2&J?SgK9r(OH?kw#@aTzJ$&K*(rSh55=AfbAE!5iL_nrNjnP`T<N=NT+gd+S<|
zu1av|_3LsItmClYH3uZJE(fy`Z7@W9+))*+=b8Hgm$fmu!(-7n&d@>W7VIoEoT6`u
z+XRT^(cjt8vI+_8>I(k&g*!7!5^%TZY;CzyMOp$K&RVMh(5Eysx=$nPG2rgrs+=I@
z429kx^UoXnd_v<IiGUcJ)vRhq3EMYqwcM0vWoy^z#%4h67Act|$QW49G0hhfkeqIR
zaE(6JZUvJj#CD6UK_sW7OUT$aFDFB&Lb?k|lHiS4?yb|Ak)=QjJ$-s~!4n8qhpA9v
zP=cn{Pv-x-noSo=gGhZk%ac7Dr<=4#uIvM5)I4i@J$&fy#m$gu;%03xi4Rr}uI8JV
zZovtzPcV=-xH)*iqcQ(5HN@;N@FxP}D{oUFKMm_Zqwnl=bBPB9#v=>kQ3i&iI~qnN
zvZR=J*eiWpDT5U;{Md1ewkre^q5+;E1L~;d7kZjJb~5`QAn_{P$uF}XGnsINwy8Vj
z#^yW@0Rh>`lRLvSy*!`Cp?!?@d6WF;g4ir#z&?9k6oYuqJ*smcwGBE-8?{JYo~~bJ
ze%|+s(8P#4{c`CV_msI5Ghzh$5xpe!*1+th<EnpI&L*9AC?{(AzrP{7k<o${t1qwz
z#qV#zgfB7h5l7q?*2i6h7w5pA{ob$Cf;o)>myG4pFp~Z|ZKkM}018`}?A(gsX!&ia
z&|xpGir<y;f_{URV>cI`)l^%uR~%bHV}+MPwa{&a7V8`T#Pf^f>U5>_U%h<u{O$9<
zd~^8xhi{+%@cix1>zThz)048-a+)Yxq`_*iBtioua2WFOFObFrK{M(4Nb>+Z46;Qv
zs#(EYWkd;1DvUwr>U+qj*8_hD2wc`jlcmY@5~Wg2c^y>StZ_3MLJY-4W=N70_wyYO
z`6m!aHd79O&Lc(`@u&e~cOm=i@U%E_>@LK`#y9NlPSLnGggXVrbYg~lGAqwd`wm6k
zgR$NWv(}d5%ksKmp&+oJU_1Xn%hEK_P}gjV)(I9m>iocBp58w;iel@BsRZr|cHjY`
zcWWU5{XjB~q7qW2ZRG;E=@kh1S_bzRFD@B)H0lS%guh`NVNn%?&h$*~SXF^ko~mck
z)Jaw-|Dh9H|8-=rjA@*n+-n~*)pw}A;(MYO5>cqPt!iN3yztP)u*=#P$P2u@ZeFa=
zNe;`w6SJnIR^{HZ!CLXIkL#1U61?GAnp9*&K*_UEqAB_YxM2Y6CqV;G=3l*_OsF9j
z&L!r!IdV7YH6gis{FEpZO-v5(u2KGz0moX5j#G;xdbUd#?kybBRyNW$LTB^CMD)eq
zO^k2zXo@U<&C@6{7*1a9DI8xn11CrTq6=fb@okZqimoukL%nu>piq>Iavl5Aj8U`*
zotidR3eTW+C^-ei-ggX+r*g3b1+0fv<TMHQzx}W<cGv~Z;a>E0(fVw~AA2qDQuk;3
zi&PDKbCY3h+a|IUVsOB?#IGh;#Ez?8hPCYzgl?OeAU!rWvJi}=72Nbb+2)b`99-eH
z6<tpmlRg?|94NBgYS6kDu9ByCSxP+Wwp^>9AZkLp6V+R_C39F^rqhWp)dtQW>$!BO
zr<9j4pio-g);sC*DpZ7rqr9ef^~LdYdUgiJ#2EwQp!E$lO6pChgB7&MDe@HVHQS^u
zW6&%IiFh!o&nS6ihENu3@YNh!M2Bq1Fb(Ev_A*5yn^fMr#&dTs@;~w1g_eS54tOFM
zT~jow+i4N0{vL@+^|kTsbTSX@N#)*+A8^^=yX@dj<PH@cv%EC-!<*^zot}q_MC3d1
zXU2JSV+;2m=k>T*!<zpeZG69;<@l#C7tfRQV?46TS^HKr{uV~n(lTcYKAxWJ?)+vJ
z;J@L8Bu>jXfp0;|BH~6RcfrEW2SiaeJ4Ai>H|}nlRCr7}9~=ej`gWpa4q#n#hXZGk
z3v=CkU;YY`9a5}W1xa;Ql9w74f`wumaB1H)UfTizlG&y4T-}SS=>*a};~7Ot8u#%H
zm^MY~b6;DBIAeZNtsDufJQQ7<Sj<2%Nb(g`<%w7pE1rk@>PFIu;?SxIu>5n|3mGX8
zJ<R|d;KM@B!g+Vke}|!+_H_aQTR8XpnKi$QwIF<zgRs4wIFx%LDs{}}!!_^qPfJ}N
zrY9wuFFUR#u^0dEZ*v})C0<ivha!U6X>nqRY>*>Ub$@Fo7~|XFy9rBEl=Kz6AOs!`
zuJTtXkvB)ni{@Q<x62G!IAd%J7@fz;9z~8T#p8X1T}9ncSvLyPX3j9%9grlSf}7k`
z)-dk4`X4%0uRQ4#9WXG0^ct<5&`eW4+;ty<;dOm7sgLVn8At_#lN5=pUJyP*uSQsN
z(YUXP2zu(cj-mkp=MpudyO};)*T;|)2{Ex$Jr9WUD}*YOJA&Aro*sj@2|zuA8r!3X
znz9tpO6p&Z1bqQIA@Hw#u+t*fPz|hQOSb0+y64K1#B?0t4IdwiM?q6%QOx)IA!8u(
z$#yFjC<VyQdPoE`UU?j53@-#;vd2=8+2%IejQj&RQ2KR4jHt`uANfF5-74uWE{alI
zQPk$q0P|J0g?9Zv+Kl2BrVzQj-w`X_hez@h21O3eeGFI59_#x7+JPoC;i;t$It}n|
z?&S|G>rCaAW~|L-8Vr$@L>9rXJ0FSX5mEyBdtjn6{Uc>4IvO#48fZg}B{CJ$5I*^a
zZJ{`_YW23&T_{<N1BFiXr)5*T+kvFLpl@?8ns*B3J2b7EvCUS|nK+vJH|#4!yq|L<
zW)B%0V@LoAq_hS<qN>64lNDIhxwCb0Qn@>PguYGV>18z&9UZBaiX+F~O;AD5kLFF2
z0y(j)KB!LkL@2n{c!tWslpTzH<Aw4j1&F2gvF5etJwV^b?WGWFYp|^GUM@JvI<l@c
z?RIW$j*|^;!m7rcSpT14q?5N<k&>^7wjfrMTCKrjlUSLU&_`^wvYVRRq~<BnzRHeg
zz{NG;dcUV@E)s@FO+j1KWV!`ls@sLJM+h(?yPVwM?-?kcI9yKNUO?AKpO0GC4C-TZ
zWUUTa6^Rk=Vhtr|<_#!;VgIH1{6A3hY12(}xEGz}91?3oB*cZ%jjpGM3p|YpQ4Rm|
zxY*j+QlZ2?wZ`sa^t+iAU!|$d@R}sw^l8sq*iEV>`v<0JNxL8-Ulo5Rv)-VJ$g`Fo
zqR>z&v5chum^KF@ds4@#k*zCRE0&C?3j%x@L%@!mfEywyrs;lq<$`gSQhY#OrI69h
z$n!U&o)D-@!qyl?gn#vAB<xZaYYxWK3Gj1o-D|X$iNp<F7m#Lw%0DV`_|11uUVMA_
z>Upnt`{YN6QuC}jnN{F_=XGtahY1G#uK!j&fpieP;??twbQu2tMR^>Vw{D(*tTbqS
zdj4?@fl%P@r~EteaobEiG;~WouQ<B}EE=fo;NMqn+tAD7wmBYkMnYJMuia2bv*|gh
z1Mvn+VurMtB8sOE+Fy<8=6qaUbADI<J32h)G=5aN@>~LlBOVJEq`@9_ph(~97&N79
z=;A+MvelkHCE**Wfp`#FF|5V?JBgCxtSZ5%Fu2`d!1QC>6CEZL|HfA+qDhC#IJTdo
zQ2Y4DK_&&pB?RFO=QH%sr#n?T3Ry4kw^-)frMf|}n@_mo-|PHVFX`Z&Pa)t5u2`hT
zL5Dz0*7A^i8G*Q~59;|4hxA7BHYh0HeWxLL^Mhdb=V%R;-czL}ba$}Vryjqu19-H4
z_l>q~l#VlD!Yz;hg4?Pg14OgNOLCYV*AQX{k{~z&&jGN=Y6AV}D5wa9ZH%=puIW#%
z4pL%{SBWkCv&8YloFEPPYz!ymD9|-BEfnvF;}y(Ex`6)ajyVQ;+7u^K43IRzNCL_S
z`J_fw0=ouIkH*y*w1!#(AHD}F^-tXJE{-sG&tx)jXYl@)|Mul@_;156zBvB;Xy>Rp
z`qOdsZv<KfT$MvI_Y_E@aUTx;(ew&lAw!^h4x0hy#r@Ad|8i&dvoAlpKc7y|E{3Pg
zu&&%Az;%3VpuU-oFA%Ev3RcG<Zy+a9lZj2o*C(h3ro^Di9-2cbz|95%8H}?n5&Pza
z8~-WC&I1eU(+XTBsSOZpj0`v~&zrs-3he=jZ^)t=QX!B{HK8<ZRXHc%w)vCeIp9@I
zNsXYdaXABe!6U(RhY00Tg;ps}r<VmRn|^!Esxvo4iIW6Z2TuL8JoifkPM@w0uM;3>
zJ%PBD4akykh|%z1q207g);?lpHy9G-(Q~%}dSf*@r>~e7*^U7=7_A>uZf8pVdnJnx
zG?I=D$2m2Fc*(Crd=vtto|wSHy3wXO%$muZB+eB+9(p*n^1UqY6>TQG2xb>5u#dwS
zM1ZCqRXtiuYEsVCVj?wlXoY1ptp#6xetoVKaLQ+Ar}Gw$G=>3iH_${yxS$ntD>Sc0
zK8+S)E2POJ#DG6)TFN7)G=wxvXCyAgIp=05!g_<VE`>8Gs^jAt4jf3YASs9$-$uvx
zx+?A2Wgveh$rxfn_I&n>Zz%YvKct+C0VFRMO*nR!lp%hqYU)LWc&9`q-HL?+f_iq*
zS&?X`kB&d$O7P<TYrRh-q9t#F9RSrpj>6gznW~{>)+p8}&8#~LK`a9)V~J6v9EkMe
zP<RuSjd3P5B_(B4b*2(9&ZREpO^j-WT#iRl&nK>oss<7CLc8%I+u$Z)(-qw;dN@0+
z10M^sl&J9o4`@CkfA^GACdp{Ry{8?68ICVx29+8K$E(_^M$k7!fq6n)Oa!Js3>j27
zT>E49FmcR@8Xqa`eNX|A?bfIfa{qj#D!Sh)0J4$gMZG%gV{V`BcYFo=DpFK?86&UZ
zetjT}Ie#&7JM2VqulNNL&{EK;dt3sUr5p@+@C7#6_0fx$&B~z9$6~FB?-UY)0Y7T1
z!4%kdB4Mbhe`I<IS}%hFZX{mL?y-xOKww8=QM?cN!Rcy6FV3*k7(<@E)$l@CI$dUe
zO?X;);C6J6UEA*Tg`A#NHeBrrq#Tr4LAt@6Ua|Y99SiZpW)QCxMEBbNHwW^;A3aDC
z$Z~r+=ya-kW*K`jkDhdIL@2bRjm<>Fsb?K5Ow&rheY#ivIRk?ds3PfG@y9&WpWFIJ
zQvXPT%`ln&!Erp~rv{e-GISVRlvilf6EkFrn*$OnxdWRp1%-Ie=hYeJ1qA{9EBm>_
znz?|GJvlgOYRFYfoLO6w{xpQW0Rts(YK(2WHZEh6)CA*WT@$F*mDgj#uWJ+RhKIsp
z<*#`AJT=4gGJZ=<WwbF0nlIjM?ZN3WARxt6k{w83g5>%UqlWEX*Vy(oGM&#%fPDVO
zozEcYq)N_%0?pjqgInsgpF5!Ehj{L8rET}~%-rX_fZ*53+&`pqKeF9_Nauc(?ffV+
z_apB72$E}R0i!}zl0jK?7i{Nj8@2oNGL{%&7Q1K6@B2$fT`f9<sXL*wGPz#-5hAGs
z=v<|%?ESyS6-NWMW4l*i_u;B*x#!j(`|-_^j;&Aa?-eW>?V1A%TYCNNbk^GXnwA3S
zb{UTh=-iVrMNI&)p8WLik`~BwKE!_@ki0a=b$rDgU-m*j-HZT>EFc^^3_A@xI6s2V
zMV0fRZt5e*LW<@ON=Nt>Us>FrPY9bG3gds$dM5dS#n2U4VHvHi?UMrYld>ojqwUz^
zfzLHNqdeHcozoKN^!Bc*6r8rCw{Cuz&R_av=l~A)(6L%c*Y2p_K@lP*Cdvx#hH^w>
zwr67bc_4B;G_IakS5-rzd*FMFEWdMeMf2)GE<FctA%mg})2&sxyHJ}$z@<%id~1OZ
zbuE02V|Vm~l6BtnUe?sA=DYplo+8uC14NU#<WbQpSU$e+{CoDfB4jVT8<AuUmWuE1
z7Y}+qF`p)9gJR9sO?dYKUr^GbZ~ESmvG>D+FFYysqB;#d3=Cf%G4oIt!c#80m(-o4
zdSLrc_)}ZbiOK>E0WfE>wuNz(`%JS?q~Cg$P5ckt%mn`^=_vYxnwU`PJclsm1kIO_
z_MEVO$BOFV@eom&Ey9MaHfejV2@r#=jL3WokMUMA=;VrV_sJ#Xy?|>(4V$hn*a!lo
z7`^R>#bq+YP@gAZ8+0yFosj5uu95+UTi0E&{&vkR=)XlP3U8;tl0m1Zs?&HmA3^;9
z;425twmwY;d!6cU+}#>5|Lf@$>51Uj6XqM*w#kigBg!|*3e8k$uQf8Zsosrb96C!m
ziUpLeQcQ3{jYyb~(GX6TXa{rIi2cAK3L<4M0{i25XDxEu%T<3nJ;&jktIF<Iw(d`y
zHe6(N%s)solt*S8ekUo#y+n>gc!{zy&@UFkk&RTxENLIomUYl3@B><OnwYlBQej)0
z0KzXt#@vOiSFsmLt_OO-RKexIu8t}?9Yph2Wiw84ujl297ipI4PFo~iseqZS&EU;|
zqd`Uki{te!JC~OEz?;#YOF6WhpIu%3n2sG==Puj;55qINZ;$8}-rkN*Am5dFQHHvH
z@nGk#EYNiDedq8`#f_NP6Kw!(MVn9Nl6zJ&Oq+@~m(V%xfXUrTIV4xlh$A`wwSOik
zq9|9MSi^J_Duoa_Ir*e7Rr#tx!A(Q6j@L>T&N5H=X<~+r!5KqO1wW~S;%6{0ZysF?
z_A$`+px8RAN277I6|o>KGJtbO0_fy{v5lZLoy=Y_tY@G@nJq<hjnIT}(o9F8eFl$4
zDR8{f5VC8`FDteM4XPA6&aMI@(iO=WMO=I>KV^(NXoA$uhbG5f8^=%Mj=%ynF!G5b
z6mSIvHE*!tUQ?vLBO}n)6ev{RPCJR1H<Hq3(k#N^-z9E4EVbpfiw&gxc4#y>nEjfA
zTTTa4d^wrbBl!Ii*%aBCFp(b9_(YWC#^vYX{?-CcL6wIFdSAZljL8lS@x<T;BXM6u
z%@mu{x#K~D$Ad;}$GhD@NcfirMgd2W)zL91iHFmiGOTh_eyI4O!k_cm^nE3)%aB=?
zupz=t_`gHTYW@QKZrr;jtX_ZQe#3zF54r{r)O#tOp;7&p5~4>M#H_(BsDSSrLr5!F
zVb<!ytU^nOPAV~vAA53DoV(`~AdXJ^%S+G9voWFb^>38=sHf5!iv;NU9B5>q=}0FR
z%fkz!Vq|>Vpg1$t`lCJn_(hw_*uI`l$6!LR4OS?qOrKBPOQb#n4LEG5*d?GPL@;9@
zRW=I~sJaJEG=~U-TQqD5@|i8)F+O!*YT6qy9wUcK6$~E~yDBCgAS&SQz+rUeGokJP
zVyG}#@_obk);^Gor2`Wd&eulSJ<CXT^um$l9%t)o^8S@(ecyn=P3gHuvCbfSFNEe9
z2v?K%8?GB|+Xj)1d>h4$r~#Tc(ID7-tFAzAMp1sY(E!YkU*2Qo5tsx0!ClK^)UWYm
zLd?gwGk&KHP#Be6Dv%eWD;%suYz9}f<Fg&@tI!UOAX(!V4-1NnQ)`1UR(HMq_`<^f
zR!Gpc&y(wJ6Ue}u9jR<pCrumA1PKfFT6*)ddBPIAv0r%Mg9wAjVn;UFU;VPyU#whf
z5|@}cpb-mXn{IH~rf~V;Y4($grH1wt1rOkuG`$9ei=t0kfg%tayX6Q69cRSNEk5I0
z`tjf^4owxZ*NzIaLurPy`rKVGY9Lw4ba?E~+ZK?It<3yBp?@>8uD9@2zP@!!ZQ-%B
zHCY`)bP($$tu{s{SdR;zTd}$r2UPQC5+_VKxq<N}n*?4^gdfL|gG-7JD&`KsF_=oy
zDW7rttQN5m4J9K+%FE2Pi%>TR@C5LsfV^a0Ok8k?H``t!+VQndMYbbt`3<<8Geu9Z
zBMw2$A|;e?DghCEHvU7`tq@4EbQ%G0Url?9D+-2JWncD+)2<P;egda(q%3QAg_A=v
zxEXC0Xiv4%arbuq&x^aaemLtW47%R=`^6f^Ci0>RUZN}y!{Pf*+oK?)P5W@Mazuo=
zjkWCd=~Z$Q=ctq*7!Rf^^xmPzc}JWGIc&qjM{&gVxp(W(?maeYfVr-`1JJ$(eGt53
zbBqBz+PELi6Cge#TU&u?2tz-v$L^GMAn;j@qgGCk;F9K!-d{kZSC8xYwU?|(Dx@^>
z;xZRw@7fys_~>cJ{ys&{cR{Z}-iOs1j_sfTXUDqx>+3{U1_JoKV^YuXrH2Ce@Y4~u
z@PkC`@;d|p(scKp4SA%2L+V)#-P{_6^hQ9`ARru5G>RCAK84%LfGBfBAM})o&uy0>
zc7@bNk(rn#$U=SZn7sOYT;nzK_Q{VBB`-OG;-mz@|D)&y{@E2Lj!-2KBXciuRF3U!
z$OYnVGN^khxMu*FOjS&RzIE?j+PWpqvsMwdmXB+&RspMWw=nMUJ)}H~XsRCGE%%VN
zUo*=hmhf<4v%|GoJbJc&D+%^8coDK%Z2OB;YrxHtr;h796%B=#<F4&J>&<I}eBvdY
zYnJ-nrn}J*|B)pd;j65*7hwsjkup{jAb#!ESkK5$F}J1?mzG*ay$%A8b1y23-MUki
zN#<Z?E<bZ2qIl2{cRD>7^$WAd!LP51^aLmI!$TFT@Y$y;FOEUfCe4!zT7GxEU@yST
zT>x!nexn3|dKtt2og6_^>_STaw#9faH4)#-dm&z_$iHk^a5pnNiBBuq46i#H6p@wh
z(&pDub8M1vbBx!`6FXkNY>Wo)oS$29?+U+)kj9i37(febt$yu@DMN&>2{5TN>F!lx
zRhT_OOD!j|Z(WP=F&d1us(h}r<1?f5rapR^9a|Bh0;m-5=O<*Bnxr7}MNdf+!opDz
ziY{6blVLh9+cqHqq@yA3bADx1N=n(W%<3RgFEFpa8lh~SfUed=w6P#|FtKi;&74F{
zzuoE})np{;eOK?{pWVL1yO&+y_3{Ya1Th!wxoFyyeNXhv5v#|x74-K8swI2uIoI=w
zfb`L@{E-k_PSEbhnxrVs4ooEjE2P-~N%=SB@U(+3&z8qsxcTmgxg7tdCzuY3_LViD
zLH86<r>%pkZWMhLl+wO0hji^JQ1*JyG_j@@xE{*Jf&s2*_%)(}*9W!$&>$l9F71^u
z$`EwW%H5<(J+4J!(PMU6$&1tdHZ&&4`Dbn$*EE)CTTs=lS`~8>wOFpG!<W-Kt8UEN
zq9Kk^DU+%>!nw%$#w?ds<mdIqYSprO=cta-Fl+OZpndD^r9B%(bH16;H*bEHbdW92
zSEK092S-xlIuG^`EeuRA$&%Q9RT(=D!?76#EVnRdTcOP=Vv7p9Hysn;?h{@ybOhm&
zS-*`4&OX`2v^>Eb9)>uuO!BI0dC?^j1<T3r=tzx1tweMmOmz(F0w3nHa?*gm_!`@e
zy97FlO3NHHFy*jgjIcwoSZqNJHrcWw@pbPxG-_$P)*j(22qfYyq3fc>w#b+voFSuJ
zN;d7K7AJnyNl%uW?`?SX`o&@vJ>0{3iF9X)V&2{ta~clM_S+DnM;&BQ79qJHXJ<4d
zL`HyA#71G1V?7P^%vv?CwwjLHN5<2Md91!{wrLWeB(g@*JyVM}V_U5TNAt1f(xw%G
zj_jgM4GS%{gAO&bbW)jaqTy&*c9bS>%fXjUdK;Qt5{-VERz&~mP?$7f6PJ7wYaJaJ
zqOKuLmj16##NXEQam94sgpw;q<vG}t<bt9}Ssb4%3VNmkq8X`NuQ;n_C)M-gUKGD;
zvv_DKY8-$Etyr%(L}yk!<-b|(o0~&Sj`8E9{!h^49Fp4QYck1zAxx+5FV2@vW<0LY
zki>^zlSomhX?JT>+!WMXr+w|a{kQd5<%TgY76tqhL2%3_Xe_~69xXn4Y~C{AwZbGQ
zkL9;}?>`43>9*t+BYEa7wkPz(4MzRq;8oEKiyQJ&_zH&I^Bq50aCIVJ&wqIP&FjBB
zdGSVUG|n7Js+-D{qNIYS$M!;Gy2H~NU<%_!k5od-8n|k{&6nH)V#t6|TeiiQJGmyO
z(~DV4gU_%<X!785YBB;NrfiEpefha<@)`HyFzmf*gKF_GuFwBuTX8?GD$ti~PY?QE
zKKN7hZ(-FQP#ego>-MCruRr$x^rz2NGw$iSDq9z!zx&1K)$R@un!OA@03z%k*!}<U
zhv#o$?}G^n)pAwbx8i>s9=`hV^*4uy@LL>T-dER6$0JU+Yx|1g)t1?>M{&TlW(sT3
zDSO3{wI?k>V;2W|6L4@ik*q9yz~NAMcj5T5^NYF8zvD*`_fLrgyqmpirhL(?!h=d<
zacLZ)U&7wddG#(K{6TwwVb@?f57I6mw9}s)3XaG})rSXib-W+GPVa)F(Sae|9!`&G
zJ~Q&vlSu|&J!wp}I!ZzkGSR)9jIXHzz^&(76#Bk&m-m^w3d^(eq8!hva&)a+)l4>n
zq`S=6h=bb-ab<adC^3T=2~dk}2sxXnWyYUI$6d8w&;oZL88v>T(E@GQ0=~T?*I_4Y
zSC<0t%1?@$3z-(u$>H<l<*`g}i(75!-OtQ6YDUA&IECKB3h|+#<mFAsUVZ`B8l|>J
z3&hg>-??LB&Sy24CkHDS@X_5C8<A0(01GM00!VteBBKLOv4b<;G4gr(eON+n^ZB(s
zyp$s=IlSKT3AzWrQa4_TmCi%zDWf5QY~9hv6+8-&8d`~~@dcrBe9yRTVBlSH5J3<q
z@w#`fj@`oe@^v6Q-P}iD`}M(rd7>YST3Om)l5p@Bk3J08c(woilfNFmdGhTyhXDG|
z-@J}gjNFJW48YxBbky<r;lK)_!(HE1JwfEwE(GL{R!townMOt|Vr%gF9IS_z5Wf@6
zu0tX>GRA^XZ|h$If=}+>x4#A23T7gxRe1R=*^$E|k#8CqR<B4fl~+20e<3S0OIKUb
zGVxEurF|Ih86Zl)OQ>_8@WtL-{ZV~<Oc@+-q)@vHgOI7fxKb>EYO64W2kuZkKOwLd
zJZNJDXfH4PMy^XTFas4d?$AtbRvdb&bq~1U9MSNkz>)#G!v5s*DzAO0vNPuyX2`N&
zE8N(b0<bdP_qTa-K<4V=qfj)HQrsvYfTOP$FJ(Ex>=`~?gR9t6)pg93<SRRM;3y7s
zjvwX69~#Bx5TZ1m_KMRQxFvoUswOm&C?K9^U>>S*?vJMjfXDC!<lDAjpg)}YjR~X2
zB0GiKFs&gwWV)TQ(P!m(j*JN+=kPzU{ek0#q$;inU6f3Zcn@6<y#UbMlxuLb7`4|`
zxEJ#+v|2kX3e-L9*{pLc<Aaq2X=@;O+|+Zy2!Z9V`ohNVn77UiWsj=CH3q=try8I`
z;SPh^)x!$sm*uQ(VfL|Dlg?nq6DJ=L(Wi81Q&`!k6DGagMmQ5rGle8bkmK*(;lLeu
zKf8l95d{YZ65hA|1PHotnwS<;iIRybF9()Pu#|*)ezXW_KOpI73CHtBM?qzJOP%Uq
zK&%rN)bLoKg5{(nS=f657icYPF@A%?TnFL5%4cXYbj11lw1-aoruwNuUWRPV0VQaO
znhG{+UbzRC_W&fnFGtVLi=%2-UNjh78vO<NIN=;Yb8wAdxQn`htUO?w?wVhok|Vc|
zL5=~6BlC8JgB@C8QOn;^`}&y2I@pA8EcM^?IK4)iMxd}C?WHLVp(%BR8Hq}_fZ+Nv
zuTHLu&e8R`8(f9C+Z=yzA6R6(62#`-gV-+KLDaK%12<ubS&W(J${B^Xyq4H&ygb0+
zLhx#=K(W9_8X8tI;HX&!9`>WbIm$8_mU9L0-<zsZA>)0tc(hgjwYmQkZPwi%=MMD!
z&%gNMOVt$9Jw53EQT#i-HxlJ=8WdYF0_AbalFETQvEtL~7EL*M(G%XwxF7&J{N<3%
z;pI7cS3*{63?_$%z#(^83@;i8%HrkT6s4T}0U^vbEY8UV8g_$iZ@8qTTVU7now_&T
z86pbD%$vbdVjO9B<@ZRW*F$+*uc+q3zGu;32{g>fbW-&;1`}TT8dd<|$~e)HtD;hh
z{fIN#QgYg@UgWn)?+o0G;HaAQp!FvLww>7bkY0>rOH3dKs^T_>?HYKWlcxCPcW^+?
z%JDD1i@j#ZV+Qp}7-(OeroM%WNTs39L)I8X`3~j910-P|%20MQ|NGV7uNRU?yBoo#
z`fbo5fI25Z!&6OKtL7cgzIge=i=Q>XO;6X(A5G)re1#L{2-x&uHUxioT;!}@G9gST
zS&}<e-AB3PvAJAh!f1jlsIdvTyb~stMQ)h%E$4`N18XX3ko^NTRBH4WH@EO}5&J(5
z%i(FIlj{*c<()1N)h7hGe-P|ClW`I2Y`fw&vO~t}t-WlEhj9~s<F%%+CCz6OSQ;tt
z4i#|E;a*wSP7(YjkVS3@Pggu)6y}3XKyDV%D+x~>Gwm<Q_TvnFJUY=QY@5zo>6^mr
z<0k=)IsBefm;P$#ACAy6!}sP3;CsLt;mL7gQ;sMY0xCH4hkO|5Tj!`0Ia&?GQMI1T
zXVcNe5IyG!P|qD`Ll)l^mt_+&8(y5BPlKcRysRDj>k#KIULE)OMmjIuL!vmk;IxXv
za<Vmt^bWJCnU4K6?!Y0(HJ+9};RF%Cj#u`=Wew%7#}YD&z+@or^%S_+Ey&n-j`<Nh
z#Iw4=bTT9jYYHFFn%Py-^Wu}YZztOGYsqap-8dnhMz7?mMv$zXh%P@YB85fnKEvYh
zAwGbVrq5z-JTh}G&`KtJS)M8J?xL8Lm)Z1*kKOx+o@8+bMXwg}#4eLs8n&Zq91lL<
zb}J3^bsKGkCe!VUiMv5Y+aFw`@GyihM<&@{D(F$^l&u#Jbx)?A4vu+A5VF50uN?>2
zu{5}E%l1A!4c)}wc<Pg)wwk215Rbi#)H39gbl8R89QiV2I@uog@|e>eozJS{YPO94
zgC*Kc&<kvwcUV0tewk<QPhys(m}#beS07^5aRx|LqnyBZR375sK22501xnxeXCX{I
zxGUn!RNXlGsdN!?7N=d5S5X(}*X>;%$q75u%>-EW8}t0w=g~o4%kc^yYM_Ge+~D3J
zWBAU&cqe?_ePZf3XDnyasZSgc5NaE*5ItCBHa4OjyI=wFEytJTHO3o*$I}e98;LfK
zYUG}qpyhODXju9E<1iI^zX(~yxmmD6Tes1i-w_PVKmLxh-tufoqCm_Zmotz0uBU+L
zWq|SX8i0-Vs2EM*B9i=4ZiPa+g>GbKM`_jx&Yh5g7naQ?YNZiT9UhQDf^;3?AOh`(
zut7k9M0yAuh`R(X!A<SL3k?M+*9tb^VOEn-4kF0)HMbFx5#hrVfVh1Eo?tkK9LV(v
zhIBf0*okT7XVrgR)H4zuP%dTn9Ia-xdq9w6x|jo5>Lwu;?5QQS+-^4wsSu7HdM)mf
zrl{2-t^R;~f~P(S!bYBWvsvu6uVj8{u60&GzIyrQ`P=7z0R`l@&wqIS_U9z`I#>MR
zn?FB^D=MFZ*(~*Uq>fzC{!VafB%tsyv=P-}dXt8r7cJ|Qk%0OYTbdkv)!hc$AIz=&
z-L=FdI~>Ej#-cH{zI0F@s)H(q`MK>AOZ`K60C&2v*N~<WDor<~`E1j|7(_Pd&VjZl
zwTaq6h0-PqdekE6G}>joMymgiELmj9S2hQCF3GyJF*GV9uaY$}FkV0Z%aga?_}}fy
zUWbTdAORdeB#tiPSbujj5+w&QZ#~Bg$pZ!{z?=8=If{1aRqsW@zTveyYwsN?BMmwx
z*r_MwIOz<t+8tGy_pTtT=d41iR~bPtWNEj!@L;?`TehU<cc53;>+>la7vKe;>|U1W
z&sAg+MvY#vPS;(_66=S1aDBk9eOYTjNwrXLEI^tEXD!K^KFBGSLu=DHTvz0i(<p4q
zpUHKS+qWi`k90R`>3Z=pn5zWer%!nAP1q<NHfkV_Bx+fs`49@iGYa_+0f&ml0XkQ&
zWts$~k0ks=2Jr~vu2EggBsr_Lb?zt@ru16^Dp2tg89e}siIrLV;MM_wY2YvL<hZAt
z2bcT&=nz6Au?5x)5(J6V2Stq4=!7D@;pud!45#u28}y(yUpsL49m9b^a7jmnsvAc`
z$~o$E(1hQFH^h9O5bG#J@7=+VyM2cF_O!YNMLlQUIV)!;^~6)8qv@Q|YGRgA2}?Pe
zUQ#inEJ9*J8eaw}IDkC$2snAsHWlw^-tYKEg9(7<v!8vFldd}$7qnZ`=MM}j82$bN
z&p~_e(1)agZ?GHo3#x{Dq!HFfE`v&|?mtm@r-|vs4OQKNHg83G!(q}0!*I)dcHQkq
z3T@9`N3ncD-Od_g**)kAM2v!yz7RzhzZzElrrvz6v`@S#ZIh%*9UR^EZAbUupqrhw
z39XK<4#rGG0DM(^<}QGp{uf}C)PL~Bo(gD+mMGpyqQgggr$^vqQD_#rVg>fUx>}0_
zInazA+Y1gHa@;SdCwLb?j;+b4+rshw*=s;bAM?!7qIY8C_f9jMLQ&4pLUcsJk{P8d
zU^2vD;Uzzvy(4iA<-nd}PU{aoj3!E$-|^{sCj{X+IzN;UC=|u3XVv_4I>JZ4zQ?@6
z6ZPj|I7It;WTPC0Gpm|&c;u6aI3$-QCHim*fTo~}K06mJkHb>9!>Un#868p#bo72&
zLzcA(oB9bK8}73G_j$8T!h>i$WSSDQf19v)L5jAFv5P`bRp*?Q)Osj&B54HI>%}pw
zF2&4RrVtFYABWi}d+dQxuW+cyvhn8H-o>eNsSLU=BWv!x+}pwHbo|9a!%|<#EDmE&
z=~skXSQ+&NE+q#!Bn}<`LFdzB(g)Mhgu5yXKXV%;0u;XSl(o4`G!rq4{A39hpT3Eh
zSFX{CTG+=Vqjl?#8)Y9+z`#!C#nEhf3Gz2&l#XXr^*2o4J#ojiVS%9>0g$m&h`8<`
z!w0uGN*S)i?=2RqG>YO8`X%k`KyWO^F~cRg5uyI-o7rqSV|mLKlAJB~7o1i64YHx>
z)S=d_aL7KJ6UXbZ+YJt?``^$8+sjg9Ub2R_$;##s*HKyS-HJK*U`AeprckWf<J}o@
zw2_@XqR3yteD*{~Xw2dWZ^J31finn`2Vs>RXfDnK_4x21uBVbjW@Heql!qNL4V(6x
zA%%R)X#XY(df5lRqz*YJb@6#{g>Qp)nVYq|<=}Bv&O|yzEoBmV*%JM3{o6%d0)~&}
zo4_tS>3pYCh}uU_>r_8wHHhMQ($YFBep>;-sw`0#94vM>TVF1t<<&Ni)b;9ZutPky
zOS1MwEQ;DlVPz+p({BYifrWPlh3pLBP65LwJN--yyu<v8J1{Ma>O-z8p9?Vl8Py-^
z(S>{W;gi_C8Q-_;0@;^mi#Ux-Mm?r%oL6k$J`L(%=>}%S-Q;Hujb)BZ&m?>rk&KVq
zX*!dZPK%|EIdi^xddx7|t}pMAS-u@+6v#HZGd?xaX~9?|Bic*YM*@!)Dm6Zqb116d
z`ud?4)hHM!C%l%o3pY{U6yzAD?hYUE4hH{AQocCAY4!xsW`q;S=H-tK_<>%F?h5*q
zJp%XFisH=1&S0ram|@cvq0O`RP0<3<HbdwlT3RKg_u(5n7GzJ9$jLAfsE-!CEJ#j<
zin}NI_lk`x$VRR@pAJup&TjF)%E<*->hAvAA9sqKodNz|@#EX4-PNWX8R0-S)S~qm
zb^H56`GecnOhDCTAzuG0O!pP!;8@B{1aX29FWAIx(`JeE$HY~OgGO@y+@{kJk*!E5
z9B7ECDW6G-vF7?=f|0eBK_c7Ya5~uT6E1^+dOw;AB!}k@)nt@eC3;Z+?7O!?CcgY6
zwT)ejo6CVjpg0{!?1?qh!ocE3nN-w6H_uq6x=JQoKk38`aX_9-ES@MDtdAc}0{iB>
z>8$=680d{V-W!3nHCL}WGX=V7`S0~azFWz`aN76=592toR!9**NX-xuHkma<v|*73
zAro5%zU4B>M6lCE$J+Sn@#Oe&K)N@zig)#(!AzlJI=rh#8qyn{<^buM89=(96#-H0
zsjRL_$k^~!@q*d2xfB7tz(_&M7_u&T;)IHp_t7G*ge&q7!}A)Q48TMa)G5MOxf@^6
z>Mq{2Cl^)IfW>>966IL98{5skk+2=0h|RuzR3By{ycRE3UBqh5P>kHJ{M%Pm4^kzd
z=ZK@jpitXT3_ZZ^o-(aHn$H|DM8$<;fLWO`_fAP$AXIW|?G}>LE}$umcr*R~*?SkZ
zHj*T5^sg{`_8h|+bG3~x+cQTh2_b_JATZ$GerO>TNFXFxC4oe*|NF^^H!?G_ssy-a
zW-rhAX19&1D(@K?8TWuc(-j+J>AF;h!?&Z3jlo4~vbG4NS$jqT_Fmk)XBGT_1WV+j
z5p)=!1%bVs#4TCu<1^E&^1`e<So4aG%`?icJ4@`R9UOGm(O)^?gnRrX1z#3hDo5a>
zNyN}(#M^(ausxZLMV=xkGa`a{8ZRf7w?*dIWW?j9zB|pjwmN1zzQT{GMxRqwC>iTt
zqT;FC+(9g6X7>wfkf$k`bdM+&)QI{o^m+$mSBucak{2VxQRUFldIV3=(SezcTRt<0
zmSH0>sP3N|)Dx5CS8m0$Ey2>y!Bf^`=#TkUNNOCtFu?sk8K`>m^2>alyM4VNl=2Jq
z500MN2D@id4Zmz_!a-_y)~@9iXZ+me&GY)5zqh`9l-0HzRfE}M${Gg44N73nHbhs=
zWQ=^3?E!~pVkZQWABP!1RG>C#JrJ7e497n9o%j8e2yUyeEnuNVDiRzlCyTS)c=qQ4
zz9H{XZ-%%glxL5fzr1P^LiOLx=zmvwOE%S9AtPRAhCv}p23KN@yR6-<&4R(cgA@Yf
z3cz4U&G=4fZ26HJsHfb>4K7lgyq7R@KNfx!%b(wzVJS({oy(mIzuPq@CT@}?%EEou
zOp+=!UlbujE!H9rkmtL+5Sk*<IqwaeX$3uY=<H$fRHPF7b!h50c)^z!$U5KtruWC>
zo;=2T{C3H!(*{ry;E4k^P*)VBVTG6}b6wE;f4A>DU4E}l`C>L;1Ou0y<ttPC6;F04
zCDC5|!+iP_OaWf5e(*mQ)PQVtsi&uldVZq5o*8gn+U(p3^QPy`c&zE>7fhM`tLMzw
zPtom_U4<v-?57yidwR|~cv>=S_SuQdwm^YR-7r2YzjZG8H#H<;Y<x#j4-X`E;FZ*k
z5&zDO=y_T1b>*(kw%no9x<_U69M@q1{^#A-T@Nev<$s~)rk7NPE|0u%Iu+$}DKIY#
zKYlPs{zURj^u@{i=6OLrL)&P}vFC{zPP}K|8XoJIx?fE3`!fA-G5Cp1#`pM;p=MSW
znOcw>RGZEkm9r3YYc)A#j_%`g+V3vk?(_-UMv4tb7d_i7LLP2Tvvan_m1k%LH7E+)
zHH=%`D+A5HQ<dMzN8a8{(*EM_=Ed(zL2|`qwn8*lHuDM#lnT4crj6|4Ng8;zOyvq<
z4PZLw%Xnph+cS5ywBIxbiRE=^%g9gW$7SriG+8VuCPLz}$@xC%5~o1aTnE;W#JWoB
zWK9|05%0EWvx72Eh+35ElbOM#m4*GmSe!`6yn8U|kq!649ZiV+=9x4kTB|#X$+tv0
z;E=<FlC1q}Thc2pi!*8_A0;RdVwtZe1}B*9AWze=b4MX_TC#DH4#)zEvqOp0!#k<0
za6W24c46<daNe-~u?e+j$PhXP4`$0L56>rUko7Z$o^zZp^3U;8N9&nPr@`s%hG}xs
zhdPgo0fn->(3*@!pirLHyQJ8h`Ai2j7zUzJ8W_6uxxio9o`~*xe*E`eRERh!N^=6=
zLPh5LU~$MIF6>MhH$rc@s@UDQ$T2K1Vd&j>)-=$=q^T&VT7s$ALMevtS3e0M8hG=V
zT3GwBoc-FI%GY&gsruUsn0P(u`TNmFN|-LPOOY|9-wpx+_3e%RCi^JgehWPT2NX<|
z?5{a1kF4dTIe52;PE*f}3Zh=R?PpmO@=GyELrMcP4CJk3FFoFF4GK8Fh*g9o1Jv@G
zbxC<;gE21sSej%1YMF6rDswd;jD<2I?e#QV*j*P}caEoFEB(W5J<;snY3wO+ITX(E
zAvxxnd;Y8`XGScC`*^<PRw`!R3WA@+2^=NK-}OnaEdMPTQkr>5>#C@VAJ6qeI3{q(
znrFG47M&<};1ocqQIVKHLO%cUS44V#jtmI^Enm+N+#z|IhCJf#MWR#cJ)6bxA0X1w
zg1q_Q5N1Vw&P|hshDbKpF>`fr)$AbQscZ<0OG6s^$U5v_%t3ef-#Zp-6JcS)WYBV;
z?2>j^76OCLo1tYoaqE`sLJXPKr(1+trH#**nTEnJ9=-@qp)j1A#8|hYXZ<%!;S&ZL
zLgbVC{7blLb71)M|0?^2#eik-9EHm~8FCGD#iaR;|Ct(kOXL4Twe)ir%l7tfS+4AL
zuz<^m{~bgFO@+csNfkb8A?Y8b!Q{HrpKt~r=nIw?4$Oc?lonUNv~mF@A7u-vP?QQ5
zn<G;#FYq5iG)b(Jf>4>nNl<05yb@-?;swsGk{t9V*WJFTv$0#^EcrK=3FEUERJP)}
zgft7j@mi$YEyYP|)E&~kaHFXtkfwo2pPXFLI5L}Mzd&Zga8axumC8pKQGKs|L|G1)
z(tI_#zFd6wc6nj_{l@ab#^$@FR~&lnQt~|W_l<Y&mKQ#LG=(-d<hul(@SoS;neXr4
z%I5)7CSi$<HS^Dh_fldO_j-c|S7M8r__)FUNQvuF498zCu>Nk-d|abJzO#cIPDaC?
z>Sb-6dfB9Zww7K=8-{+w6-5D)kZq7N=^%La!n?Kqdx7(6nNu70TQj#>g=n{OR6p4-
z`4vm&fCyHU4WhYay1)6y$|xT8%#JSd@XVO$Z*%e0lK((6G5^1|V&)_fGn~+wvdH>v
zUF_P3U|~*(U=W55|G!hi0`7OAqJ!2$keb^=dMVIL`t97FcrDBoCO$24&iFzze?JAM
z&k(bzK}fL`1>ux!GPO3qE3RxfF)5#(trhXvL;<h6^M@|T=g*EkGambeuV;dsMJD^w
z(|Y}SDK*OZV|2*yzhaQ-wS37yIsF>OI$C5eX&IVQpL9igqT{g6nTNdQ1Xg}ZKJA>(
zYl@qJGNExGLLn+CbZb0rF6wrclsY<~YgIF(MWQ@!hONrpNjhke&1yLxe#~a1h`9NE
z<=l01I-3Uw&-FHM?77EQH)aDUrr{C-GJBm}k*t+%z7R0WUT=mCPv3aI{<iR+hRtc2
zqww#r?OV>2`Rjl572Mof2rw00B0LxS_?EbD)nlMJQ}2Jh{Vl*V?D-ddotuf;lEc}k
z)(V!b)7{HfDz#AAb#hA}&HJ*Pm&HHMpH*f?b4Mp|;077n?M#mW<X6xo$4}zRZ*7_X
zZ)JVy6$WBUr?5|MjX5Ed5mUeYY2g)ab{i(tHtu49x;UVmDay&lJXxk9g#Mtsayca4
za!%Mejm(zG3g8;SC#n3WyhZ{5{EM~Pli|HE%V;Wc-5+u=6E7rmBjE8#*A@X-Y-k$0
z>RyK_yW?I=VT2P`s_q;<(zw;Zt%nG5M^||@=O6()T#~6gS9(zoLRVO{BV}Rm+`eq7
zrM%AO!*ytk<+dq+m`umMg%|Fl#j`@Dq^?Lm2D@M`->R$VnW~UwQttH2fvP)`AW@8S
zb4*G!>!grEZ#=#PTgm%FV_RMjR{%{wvcLQmQf@czo82A(G*U{snBiCzulcQ#xg>25
zOp8TYxkp-OvpUD4F07!BJBA-vC{9|p9B89=ZRS4i+(BMx+d3vGYBy}KtD-Ll5j;}m
zE@umk`?%ZhFEqyHPji$cV#`WNfb!xSCtUnZ;)}0d^#<cN6f7iRE6~-;-r#cej;)7Q
zZ@y3B(Tq$f4N2vSn6*t!Vg3-!RBF}Z1(IL(6DzCLi2~51_I$E$46Y3~<g>)cKW4oK
zM`9(Bl$Xh4wZ>-Ilg^;mUKSv>TEYkOGKL=1+NIdO{`w1GAT4rXIx=DDtAL92fI#uA
z)dQppV~%_3B#roV$&g^}>K9v*WPOAEQS3<Q*;(7*W!t6+UQ^i=;=X$w49QvRn1yQ4
z2Op80B_+1$rmd(`Fx)k#M1^sxZ}+rJOWlOhtnk_1Q!>k6^$=gb{!M7`Uz@+p$>gBs
zX<jG~WFFN0^;s&;i+OdPdUc~sz6-D(_LFm-2=~`4)M-da4`md*$a*2NBvD(kB!M^l
zqNH0YbHoo9>o48lMqY!<7OtLZcu$1#K~HbO8HDP}8&w#e7jDers`}<d=-y3B`&xGA
z=C_sUXZ7V=f0?C`K384+B{kg7?&Epx$LDv5B`##j5bjR*rTfD5j|Wff$@)+4$sdL@
zV~kRmE-%dNZ%*bI0yfXh+Xb*TjABc7XjE;V3B+MWcL5kg)NOUxs-?@4@&rkmT&tqt
z8V?rMp~g4o&!B3tNpziXU?#Rnzy(CdlmlGeac*HguRgLh8!hz74v+0bV}!XfHv@%{
zX^ommN6HLZt;xtL|5#<oX-o`l`FrzsXZ&Dp6F=bJomJ28D+>*ljOzhO%vRWr+{Z9}
zXjv<YHQN^}ttnsO!c~t}bkuBFl9xOQ>~aw>u^_BzMt6;<TEa<np^i0N7@1)#7z$xx
z%{CEtlJFVFp5#Ao*0ZO|0VPh9z*y!qp#h2?^lyN^=4GPNfG-LN;S`^-(V9D7WV!~Z
zT3UFMTgM$zuE<Bs*ReIyx!8G3f3>qr2mVzv|D5^22!Fw$09Am2$b7k(Yme~MRiK-<
z_(Dtq3#r^XRVXcC$I@iCJyYpLca6OYe+#8Bu3m;eyyIxMKSc~G#yz;C=ml2@Uv-x;
z{^bS2A}~HVW8G~PKH+9%<QMm9-*)@w{O$bn6BNY@NdRAPT4Pl=FBX@y=-+;3b$7Uy
zL5Vhf=VEWTvGm;zG>ZFOk0dnC7-}eURx;EyK!3$HPXv+a^5634zl8<z@Im=mX#PVv
zbZ8r<3;*dPa-!pvPliM1od~t3B^xS<Ltvf%ZhEI!*5?xFnfCj4!r48xzA_V>G5#@Y
zY5+1`n7;8wasD*UC@PC-Egj>Vh?&{v;FaCPZaQWf+TkO8o<7f+b_AfpcGN5>R1w1d
zU?0rzNqR9{w(v_Ktk-_$Tn0^ZOEj-z8*X&r_bDyP`ig4q#Ej4G8q?!Grs=Cuya0PQ
zOL^P&SeZ+WN#GAfnplGPjJKU=727;P!|T`hI7fd>p@=5t0-JEg!?(f`EH7+2Gk!)X
zE{`j2zBpJ9ce!?bj`szvw@=1yfz=6fympvn+HR|hWv#!-R)xXY!PxjQhUQmxPM<86
z@-e&2kzL6&lUUMUHaoG|o>k=Z1xvOFszM}NtNeEX#6YeDJqX9kwv>+l8jyw53MEOi
zO(d+g<ouJqkl_OnkvmqHjQ}I)f#Y-&^sygG+wNFjRTmzxZ-zP{0~s=9QVXF{_uj>A
zN{P&izMcx#ox;aUpPy}EBNfOyrv+u!XOsAbV<1_fNBjgMa|$`I3t&ZEim9A-_}|LP
z3Xp83(chNCl7`x)(-yq_p%>xDGjrK^$y_%68FSf~GneP5@*^<rQztu|31dG{!yFs6
z32KmnqroC@T}~J1c_wI8yPf86XlgO3%4z;4M1A)ISmz~WM^d)$u>%R0G>s<qni`4I
zL842oJD6l~S7vc}DP2du1?Gcl><w*DO<~m14X2vr(JTdqmS;$qY3^NbV;K@k>PF05
zXzE&2H=EiVf6e76E#{McEizyz+0Q8rk;-*z6^R$Fsgzxd*nIhN=ErAC5gQUPUdT2v
z@4K%mA<TgI4@QGwJQ~lu0!z~NDeGevg-=FABLzAF(i}|g;=B(Jh6&Ai%~$d#9@TO>
z|K)RQD1u+f9?C*`mYih-z<#Bb*7M0N!4Q`6RI?1E1ya8lu&Q5)S28mjNrU8&-K%cg
zX1`q_$CDtzDZh#&mL9%`$>X!ph#k2f(AR%-CAlj+jTPbiq69UlJtsvC0i&<#{eE%+
z)dsF%mIRW<o6{~L;V-R_FWK6%p1n&}@x%3)O~hh@4*q11&FRugrwg%*kS@MwGFkH?
zn2@S#>5Z}DRE2{B|A*$?emtvmYdh9&uHwx}YdBeB|Bac5P1G3X=Hr(?0v%gfls6}w
z=<Cx0jt9w6m6lB(foF7TLeu$CFAP~VXI6KnLay6ez}!sI#>&FJGv%awr3-^z8wnB}
z;`v=dmX2JaoVmyQ^V7N^67?mCK{|YCnE7{!51^V%ep*(J3B%6dfy6xKVqqT|Ey9OU
zcPJ*+T%c0}+Tb%%^aWTaw7}3C;Lhs>L;<WrDi{d<;c@)uuqd7M7a3@z>dD1%VFNj6
zla&-tAv&(bU)^w)r9TTR?!#|OlG@-^np*H;4t9Yix`mVGF<DJa54kOfAdz9o?7^8|
z0N+-y>jA-lR8BFheQjt2=_K*}r$<(&v2b=TyJJkyyV1R*Yms2kNZn?zH%9U+4~V~1
zOQA~+zg%H^N~B3*#|;j~n*PL|wQ~pF9EJYj%(nc@@Y$Rt*ii~vVEDFlm(axr+m`^8
zc;ngwvxQ{b&8(NS@sa^>7PSC*LZ|yvcPot}4dzY@r(+trcLwg?&Xez0^CiOg<P~iz
zrI%!XpfO?>p@lhpld0M55iiTh4LB1w^SQ1m#p69se7s~2Lk6GEc80s(mSD_q;$ujU
z#e=b%*dq|sFs!soC`>q2Vg?U|F0@i`Qw{!<%`rR<m1~W(M5zoJS_}*ciX$03Nd%G{
zRvg+3Pq->}Lf;*N8$WAqBOq;4Uw@XmeTKq)lFFt3U6To(r5G1eTxTj~WSU5qZ4TN?
zg7(^(2BjrgnXn<nhR$QUAcbcI2H%>JBqU!-LI*cH=EQ&mIV9K<=cpL%u}Er`S7Z+H
z>QfG%Nby$wys3nmH2cSW4tuqf)SQn0j9`9lk3!O^uF_G#e?RH_t5D$*uc>?WuYY8g
z^2e*+b9XSy?-3NFw#f2Sj_gd#eK`yGr{^fJ9IF|QXwrzUiRxTl2p$c|;KSDx$Sy^h
z%*?f#5z5&oyG*3DMY{Hu7se9m!=j>qud-zcl1%9p`}{e@dbt94QlH1}J37ji7;?rU
zWn#g)h@gKGU)Zh#D+8UhhlC0!6Q=br7|O0-x!+#YDLaIdOj(xMkmu~8COn*79a~3~
zFYeJaXC9>g71FY%?6+k0nOQ(aL*Dt#9!?gga-v?z35f^+0c^Toez*01Usz1oKBq8h
zEvc4@K0T$&>q+WfbpJayP7BVxbw@4oqA{<W(w7TdQOs3*Rhfv#Nk*t=^P|hCmbK&S
zh*7o#=t-r;`IK74Afe1By{7JP21JQj3vKA?n3f9Z^hnZd!IqDQn>;k^MCB!<Q%1ri
zUM~Y*<d{pKra<m@0_opFzjSJ;;ZH?)Ko{*{k|eUBPFk9{hBPi{X(`RUB$LbHlVB+4
z>Q~d;iiJh}4gg8NEHLWkue!Y+;;m#Rv1m8bsb1Vzv^-qR$Tvn4Q%wiAYCZ&c81nUk
zi`oK`nMrto1CCPH_OEt<e*47BR&HO%i#AA<n}?xKxVj-wtn`0rKB>SU`Dgnvm0d60
z{?d!+2rUWKS*RIn{>a7Yc@Uz~YAv(fhmwh^$ABLGk(QNlBYw6{a^|x`1s`quj;>`+
zmTf3sWd&a0Wd_Wg%E^=}LaCHKr<djrKWB9v%v~#hHAUle$JV0TWxm9M8}JX3Pg4-;
zW!6^HFS=<Qf;Q}r<eag2s`|oP&Ak%cjVLAn!OiL=9r|w50*>deH9v;XVcDjN@!tgj
zr`(#;g$S1@U*;L})3g%mfQ!%-=X?4IeXWqmgaYn#A?hkDqtxZo=euFEF7!0N8!p5>
zscxJo+8;2xP5DssJQaaKGG6>ld-PXpOJN?~yh-UCtO3O^cZDTmveTOTB+6nfp*d1b
zDre9Jd}%{@yF*ySI)d;s*rKn{Lz8;EOk2=i^%t9b+Repsi67a+*j)JAf|Ob?*S~qX
zbWdxaZSX-G5RijS8Pa3nj|EV`i$cq`4DZYTXgQQ2X_su|Edwd+@$k}S5Y;f%0*kkw
zZoyjb+aEa2>4x~Ah^$z`_xZSq6!lQPg#^26JI6)%k8V;R^XBJCe8)Ou5u2;LO1CRX
z@`ON52WGTx<9Z(K2ldB-b8q`h=g9v2@x!6Opn+hnghIjyhwAg+Y@EZ)Q9~G{qBKuc
z@)0x#F-+r9^X`I;9Di~CP8O<VMO|b55ZM~ae<~+8k?YGgkfZ8wWnOU2<S0J^)s;Cr
z#NetmTMT*;D#bb4{4qx0DHW@SCuV;WS-)qVKjAe{;KC<Hv2*cW(ji@VffCJc8yH$l
zBubz5x{|P+24~>c3PBrVZ{>2PnA~mx@zJu&6~CNHJ(mylKEmiI&VulNAr9ahJJpWb
zrl(tD$9{i;msV(9B|PGf1^@7qtwaN22d6<}nRgC1W%k)d$me3R%ZbZ-Lm0eyZBAt<
z9grMo@*_wFgZz6OzC!_pqJr+bNmnc(Q`N>c=A%8he@S=muO!>193z<aEr#&NaXHZ&
zv@Dz)kH`w5PT#DD{%{r~Q6%eQ>AF;`Cq}Fmf(iu}`dA`fW?EB;5W{?IkQdxTTK}?P
z*hw<s!^5|Mn6VMkW_r=`+(XkB!yLSxpJOWL3k&?_A^dhsVWAkkKqe(nr~P<TXiB))
z(&Z$E4mPhw;Eg16=E%|1G#vOAE#~!?0&r1kyR9EN6J7L4@=qI_44C?qfjtkpuG`+A
zId&W2dlUe(Fk!$`hq;%xoaQow8gCL~mJ279^^)AhuWP^gG*u#o$a*%}KyR<$%kWCE
z!osW4bL*CWbehBX)o-aY^VeTs;v~}#Nz1&U8R|Uh%o&;|Ii(yJ#y9Mq8@zh$`A4_N
z+$2SM@ezuD_;t3$ez659d=}pQyP1N2n&&a*&t|xI;~*w&`lKiX{GV9_{Dapms2~O>
ziNA+N5@YKR=T**Z=e*-XfwZ`B1lXYtmeHIhl<1o<u%G>+(;1=V1rT`qZYhl$^KvjA
z5AHOz6ILd`nNxK<7^dsZIdOReSI|@@nUXq|={{VIVl#;kf>=hGMqQD`EH}f2|A{-D
z!jilTU&Ww07Z7|hzGtDqFVeD&=IYy5kijdc@Y7tNkfdCyl^249tH?`kwJ;J$++b9^
zryzcx>~9Ix_ou+dcIV+Ehfoj4Bw&Cg%YuPz<mFeRj^Cbp1!+3UCpcunQYSd{cNr=x
z6}-ED6seU;;H>Hi#>Uf%#lrs8QXT|2XmiUg{rtt5IHf`-q>->|3b!U>b$Js=cIKhn
zpbd`Um8xMcvdo_O`|1D48(t!BxacNDM3MaokwcbM&xjmQf3C#gj|CmS;xo?UC#=+G
zT-;vjK*!^g=CoK40it`ZpkXei<QT>cqIOuu5OB64{1v<@v`dfYXQ})rB)TtFo}#5^
z<i%{&Rg8Os2N?A1x#vYaz9lD2#z(LLdD4_Wrk|`x`%`em{}9Q<lGeof$Vl)Cvw~_D
zzE`<ZhFV*vkX4bCU6VKd^Gf3Up8dNx$MLz{#!_MOPCum<@z<N*mem?8&6A5}1S_^N
zFHQO3O_kF?`|L%o7@-`9<hZEe9r47rYJj{HC<x%p=5}&dS#EMCHjR7r)Xt_-D`mD-
z%p`5{B*osceO}i&UUXBg4jBoxwlnN>+wE8z6!IKbCjF$-y+W#{m6Q=zW;eOYyv+(_
znm^>Q&Mopo!_&Nrp4#zHmfp<g;WU8J(2zYD4+nkiAsU>RHTW{CQ*QU`CbM5`kNJx#
z>-~WRy#*>l9_A0GoB9~PaO1(aUrk@7EE}N8pk%zzFNyohQmE5Tsq9@QW~vezLu@Ng
zK6W9u=;X~`ojV!@@NV{%)0)jmz$v1<9!M6`K~vz|l6F1RYNM1F3{RA2m9hk^_9ZTM
zyWNX};VzRqn;x$+k6xK)=#<g^>M^aXthgC1{W(F+%K+VGG_`uw6f*)``L|C26(ag(
zA6gV(<)43KaNd(}mTQh=wPt)z>Zq{!RX=+HB5!Akbo}E-Hs%W#{3^TwKctl3FTUEJ
zR0M-$hc?#Jyqv<RnR@w8xPz58*iKceg!QHTTWb1RN&G}z(r0FB(oT3PbI~vLvKq^>
zZ(3szyI6XEe)&b!b4N%PFjdes`uRm_(>%<WQDYnzPF`YwM=l@rQvDNUW?8T#_)1~a
zl9OXIgE<NnS&p1}mpTBFH^|T^-nND<Rj1$!6Bi4H-_GpYnSMKJw!4$We!`PJ2*c*M
zV{L(2<LR<XvKDk}ts^)l0vbsr_;6-)@`EfT#A;`48CEs4f)=dC)0O6^wWu4kU9Yg3
zU4Dz^-N$owoAwu;5Q+snq(T%SB6xlhVJc+sV*K<uKVz_=tVtr7N@YxG5ilcL&Jf-+
zTh1pk&X(i%sqDXLWg5iE|3t3MRSYGK%V}X#rWGqBNHr5OUYT0fRFVp$s=7nrE4f#H
zMkDyYm)V~$_seBu#cd7JzziRoQBCA3Lxe{u&LG)WO)kw9*@!kF-P9c3`-x^)7m;qp
z>Fa|#+}URRBC#tRsH=W#7p}01cIz!`Q~iaC|3E450;`32BpZX;56D5D<|cDE#?)?P
zS;nWF+mzhED`k;+iK|g~Nv_vTq?)jlx~7$pO4YwDXqGKyUZCQ-=59=&UFJ+YPJN6=
zYi{SF{yEhE9g+iy-eOe*>HU*lqwc6R=`}|=U=fl5QXXkbb4v4^va`xBpA{^b$^G#I
zCn#U6B&v$1G(35y7bzA}w_L~N&32-KFqw8bw}!scROP?PutbEUF0`N!eWV<Y$Ul+E
zUT?)PPr$~!UCI;C&0Rt-S`U;DnohS7`y43QEXLl0+<~N6uFh3qG^bvLA&H3OU<s}K
zyn03-N2lrhRU6mZ-mgd9_DV}uDYe_Jn24T0cb0cRC=pR$cB{l=4ht@7NI=6YQ@!!>
zZsy*Bi239@FLi-j$s8);(y9C?=`aQJI3LUK=wMXVv4nW!XQtb=30AUaJ=E$d0;|>Q
z4iP-l0I2)zF=-_4eu4lCjY*f4{r0l=&w0jpFH4loBc$ef0<}lY2Pz6OKat$9O&@YD
z1%+7}<8zk8P_l9d*iCW2&KyrFRUeLDs`|3U)3!vC`NDtC(@M!O;Y2DC=9isBl^=hI
z)=)Z3+jjrdRZ5@&d3_2_>{U&zc@c#yG6~PTtRS5ss^yxX4dacnfk+11ZX^E)9lLnK
zGEo}<R_)6&x9TjTJ&aRhbHaw`-db1JAxeI6@7yn~=hd~o^qlJeRsyz}f3sc$2EUr}
z9FoEY?l7EV(!7t|4QBPBHj{*v4hzA@8&1YyJhZ_0D|B0!YHx8G>{s)xYsQX=yBV4}
zk)4B=7GBNU3I?)Ic1>g%y!S$|5t!I0W;fu)@U5Hfi^c}sPL73rINe!#x{5f+HcDAm
zUp`~m{(tC<pB&zZv%Lo6v*5t1pAq~#Hv`wgQ?sz(sOOLlxHE67=*xMExN&};KnFjZ
z4PQox=r|#kA({#7Wo@8oWS8-Ew|~$acVsbN=xb>Q^n|yi5-J{q&JA;XOj4y@;9;Q!
ziD|_FO^)KC91j-#7|6FoJ<T*gq=m0peE>B{OPOgBTlM+ba(P{ggkNpZU#xFvM)2k|
z34hScKDkOibY?;OGPM@1-XMw9Mn5?{w;h?;>4;pag0mzw6EuW!SSzo4yz36<9Eo{n
znZBL<pF{CK^HA{S%xmj^|DllS`Li*5=1@q5)Y+K*sY7w~Qu<2WLc#5nPh2Uz)w6K`
zvflWAIDhX^YdP@D)sB}>pOqO|_xzDf_vPsCKYs8r8nuG6(I1Q(Bm#7Yohdju;9i3e
zkO}mHy^5(*q60Hbfv2j)dlnGpS8&;PY$)?wH(Nh*m9iy^Rnm%i2j?L7Gf+Ni`C5#=
z24YDI0Jp=^X|wX-ejem!VL#B6wD$z4H97{~3Dm2(L7Y(j*`v&mlRCzf>4SwT2m+&s
zL-Emai)S{(_mk4pr<dTliP>;=c~c9s=H#xWg|tP>t59^%LAy=d%B%jM{}_)3uR`bu
z$=n}#m*QNQl;{E)D=<$ff#D$okpxTjy=H-P{iQ=i-H*A>+*7vApUXNhtQy|HtSxUQ
z(cv^=u^@jDuSNBPoF**g;oW!hahByQZ{m!|zbyF7u?x~=P(|6XXQ5v@^`+@Ws`qe2
zwpU+;-(*MNhxOw*1i|sL%qC}7!^J7a>QbQ;6K2QbVj|1pbI}w-g!#BOd9S!!z{t88
zxF+#N%BC305WHLC#WWl&yb;ilcHb<h-h#_8=R`brgojVqjp(|T!V;vEQ4Z(Xk7Vlm
zd(B_}nL<SEWM9t0`6=UM2@L1*MYX$0Ymy{P4%ieVR|CpiOYTpsHCnl$OeM)APCh|%
zl*DmfvM2`8n`G5iT1BPRjm-~h{}=x@r3f*<+1UE{@%{R{_aFaUdvD*S+k5x^?fdl)
zAGgwG%F0kF-$*&_Y^i0QR&tpUdC~{7I_dH$FV+{TyS-o9a>_yS8BO;S@k&wN#wu-I
z8SoJKpu`xp;=zklh|yGHQAAW-%!!pr==s;*0_{a;ZmbNIfv*wzuj_=iS}mMS`;?Oo
zV&Q4gsJg>plBhL=KH!=4CKaVnnyzuOQLEFDXRWzaKo#8ouI(U>i>NF=%~f(P1%Y71
z7`+?3r2YJq=fY@R+=9~BTm6OvnV%NY5jQhILBrTLu#x9V_iSbmeC7eD;4*o18rS_-
z0Anba_sb<_hg#IH+ISIIWIcq#@ST5=0tRHY>$r0m3F+9-iZqx{P<y^NvpY{K-laHT
z>Vn|EC4)>}bQ}rmD77FxQaX8%HomP_pVQ{ld|uVDX>b5Lfj@PIlEpBRizF?|qw!LD
zGuw-eDM0Bi%!j}7zP)+V%|@QGTV`vTJ+qLKw|76gMSO%OjOrwrFl+}GMK^#_bSy&i
zTVCTZ#6Zxs(q>^*GCHk%E8B3#1&6+1=d~u*ZTMf*hO4Gty)YZ+p96`1>VE4jm=_G<
z<@=BV*q_)Ey(3Q@MK>KPw4%{mXth2!u!TWIFWA<X?ds33#gBPG%pJZ8f}`3Ie##qO
zZiGqOu&24a8Jo+89MC}-BF$H@BwA3u$7zXkJCIK)I;+`k9}(vnw~q|hKn&3`PmJ-x
zUVP0`hmrX=9v#QiaZa9C7Z{}3zi+0Sr)BVF$GmXn%IuLeh(aUMZ@jd+eR?nl?`YgB
zw3|aipz#|UzL$nj>JoorU}PBv1kB23Ka2<41Br?_9vn0|c_Ke4LjrmXy*ACOXHwxh
z0=3!eUiUe^Gt3CaW(a5Wcd%#ptRv#NU~Tclnwcu2%$kh{$4AAzXfW!VB2QFKlf6%y
zUS?yK5b&4p3A)7Mk{=wafFsRPw`rsMNXL4yN7gx{<X<+3uRo^OJ~|r51ic(gcVgj%
zZ4u%*r#9%keffh!*hzCr;Njk_OcGeOvk1{0cin;FjOC>om$QU+UHhhou3daHct^J-
z!Fa=_QkfFM)|XR*ljrU@zQc=8p5G6a1z*_&hmG7n`=zJKN%{MPjm9`$7_W8Hg=XVG
zVZoCl?0q7h%kUK!>Z-5&TeD5DfXC5aFaR2pSjys|KP1s0f!cqJLs!x<B@XJ(K6^Jl
zei9c`{{7>J1foXm)wFRvKKfvV69ec<K!d>0<}9;|mewS(KTssuxEDHIGDMvkW{a-p
zxY_F1sKO*paKAZC{gP_B$CKXa63E9vSX`U7`ai}p>rwaK+z0N>svcm6&{f>7n*B?2
zRFvFd#DU9c9D~Vqr#~^IhhbkN`w=BYYA&?9S64AdL`7_Rb9Pk+wqA{@rPqN=An^4s
zve<akZV28oPfBRpAKS)ws#+Ka&J9>7njp2|Jk^8hgWlw>-{7>YbBYi(%BN>;33FWB
zVV_sPp6=Z55Vhrga`LtOu|e>c`)%~ph&oS>_u;9*UfdbFsoS5s8a6-T+{T~mnj(-1
z9uL0@Vgp;SXjhbT&RC=>0}K6L)Y{vh^Y+gDo-<wf6#_AlQii<Zuxg&*#@>+yyEPRJ
zCfOY?2IxA~h-M(TLTHAoh{|BQg86<9iU^<tGfIiCHO%;C=ZL~XAPQG9Y!a{?cB}>S
zA(X3jb2O>Jf~GuK?X77Wv2+K2NR*+TRX}LmKop+3)6J)NWWWqvEie4)(G^8ZHV;b>
zp#=<suW#siLs10+dfl6PlA?=?bdB=GnQn!@EGvY$f_xKs5y5<2N~HLr{;A-izqZ2`
zB>d-#`VJOd6m<C`uwNH5?c`u>^%NNX(g{jwj-~Tuy5p6Pmb=m@s}h>yR7w;#{W2yI
z`p_^P64$(GDD6=<9?wWcjYQm(XOFTKyBsT~DVDQ0IY4-GEO{G*X}YFx>@nwa_?_>(
z-&b6<Q%Wp2_QU8Rjf)$?a+vAzdSa*+Lz~-#J)DITlXOisM=k?)Z$?wNYmO;qUYOqV
zvf1q|7`}?QnYcMJC7Ya~n<WM-Icce6NKaxKcl_5rzeIAOPiS~JKWB;&Q$*b`ccc&2
zz`I<F;f#=}mT;yDD~Wj#W()3)d+|<yt}euf;MjjkNznfAG`6RZC1Z|o8@a4Tpp<_=
z0}iDrZ7}AjM$JCepEHMQF7nUE`ves%<fJh71TtLA)(LU;g*it@gNI~MEzoifN2FI^
ziPF2R&AAumT?v^%p<wPzXi(9hml~8?r<aT>Kq$6x$2&a)Sxh{IK=I!6QZD6EOs<)Z
zj7+s7Af_6U(FOU>6<cBnbVr^4xg7}+A<K|Fh2-Ov;JBF|Lr5Ba{K)lXHH^unuoh1+
z92TeX(iv>Y3=C^q%!42}Zf0cx_vpgIs5x9PGZ`%08C2OF_F_p#_8@psP~Ui9N*GRz
zFqc^lQgjabaoRk_(d1bw{nxdW*_`?4PQPC_$~ujOP=vvFV2+tb6@C|j!%Je60*O`@
zD5IF6qh5UuKT@nPQDwbC=!aJUUKp`U!JGA<XQGte_`%NMWqka1|I&a%UWPlGtEGOO
zh~f2uW9}DL7dGhRuoa-W?Iw^>sfKwnOR4mGHkB>$<{T!`ul}$8r;;!KX8Q1BdA+b<
zfM1p#8P9Rvw2)Zu!|PubGOJ?MSWk2-$#(x{{`<7BzVusgRl&evUdv{CUcb&$QP{Kb
zYnPh)gSMWX)nURw7VNxKpZs(!^8ci75w(;rSi4_>#S3BfN5(5pt(-<XKY>;+p2saa
zA@ciYAQ$Jjqd4>&rae_2i@ir_OEpVJmLxf6*`0WMO0oz+vc8z5vt`zDzwT&qD717+
z*BSJJVt>a0|3iUUNTe8+hP?j9G1X>T#qY1$bly+hjo$muLB_J`6=UWxNy819OW2v5
z0I?gnIj%E{^E$-7AsSFSm&F7E{J&(jBYhsQHV!}}#e*EmRAqlO(<3#fil*#RZKK5n
zA}kg9p{;%SkQ72$$bqUkkd&XW8-a{sIZZ-8HO-AHWD4D-D+}A*ezUjW1TviB+^{^5
zp|nZ3_d97(et!bFF=orI58D#|Jg$=jOymR`P^H<`aB}F(mbuQ9C3yzUp1kH2%6t;G
z9A5dSLQ@uZ`_5(Co9&xPGPXD}ln?zSV7#+@Tbd>NdzqpTUw?8iqpt#1ItiN5H-fn#
z$G!Y(!F<?ZjS=`OuUT6(UzWWPYgy6s+MNGsPRUbT{zxh09BRoHW%yoj<^X6}i^<-k
zDbHU`7r!ZA32zoJ$J7wUcDX{^V@m%kE{7<vGICMh6iKq6KL;5n|EUuR5>d$jgm`iy
zzSjXb<zYanC?j?I%`dhGqrEY2wY-E4>(a8V^^nf~XmPLpp407*d6vBT7WVHzf<Li}
zPfT?=5M{o}kSf2L-@geP`DcMdW=lgSSTTQ>(g{?19!ShX03`qQvzrGwB-$CyfsNO{
z<N@rT2P9Se33w8Cmd~AeVEiL1ln#+jI{b`A&R#RZ$)*RxS58upUj(cDN?!$ZU*{+Y
z=Hq{%qFGI5HD-a6toIgY!M3`sCBrTEs9xv!e}_x*w1gv^LMXib#396%^_{z{IHa^}
zS2d8jbDUuAhlDW;N{h7CdKNjWmX-?z@cg}m*l5pQPJc?O>2A!F`N7Z1Jv+_b)wVCG
z+5V7+NtCk_w6|<FWDtScdQx7q`3woTC&PSch(CJn?II*3OD__UXp?!zaIL)i{Bpr*
zMtZC4F8-V#*G$~z{<H@)ZQBV;1k)NVvrQU}sBxaVO1WYob%-4&tCXCO=HErK;>uWd
z9EAiu|NFvPZ~@HETTWa<EcvDlE}&}%$xWxZKJ+2>(0h@JAFm`uuGI3vdg$e;UF_!9
zccqqt^O<!Rjhe$}2V%-B8w5HTd${url$uGWesz^_$daeq@kN)-T4!4NGU)c7ZG#Fe
z6O0?Qkuw@+_+x*EVGYKk!EOBf>Zx+s^$QwAR4|&@;`4J~CP#s#w5|O!)=vU(N3jz^
zEKHd@Wet_L+%vbpr71&EFT3MpA)XG&G|uYTq!n9})L5~NTEtmouP25JUX<9FoH5s2
z;(X5s=EibD>&}`aB&#J5kv~-b2IjMIcyzo$m@=@O_cmFd)WKG!TFW8LKISCjL0S7U
zD0#_dKBr(T9VFzL=!fx}&H|J>J?Kr6#i=r7BLVN6s^_LEMVQo=gxY9ce6kW%b0)Q+
zi1w4&-Q}RCGP{T7n4l=sx-Z)S+aKr4Pnf!q&Dda?V)L`!sCI-zH_sm$nKLm5twbTD
zanN|wU5$$mO$xYb7b$LMfN5s1{4o=;E<Ps-D!fqrjWU^I0MeMlwlX!X>^(uks!hyR
z2DBX6Fs*?trar~G+)}W&^Sle~5l1E!<VK;igsPpDWN;TR-jg))p4pJKr4$#EHP@B6
zDPf9aii9ewupEA&*r!<K)Q5*pX=6sm6@1FrHD-^vpG8pQN5HXUpiKEIy79X4E#%M{
zDF!H9bvE|aC9L-nARh~w?H>4jF_*Xc5n}jse4HOC(uhVtYMvL8D&DSoF(oZ#GH!W+
z>XKGTiQEY71afBWX=TW@+j!g=k%3@<84>7T=ZLo?<fmM^GBpx@xs=HV|3lMpo>$W=
zqIo#WCuKq({%Oe>Xg%MW=FXV(4(}v$EdHz<M~QIOe$#$s=0GV9-^$zrUVk~%t9@En
zb1OM75=Q>u^M)CW<R2q}(87l`Cwh3nEG#tSn(HrG9vQ)`8Lr&NyeJJX(JTKs1y6?f
z)3oxS59$t<6=oNLQ?(FZU6~=zqrvAkgriQ10kJ9Kpc|7>CVGQe6{oj&sqQ%4z*8J!
z-pS?!61g9=(Y!|lOQ}8|vWoD4KYs0}6$k~VP|g@oUzr9UX8yxWU7&tGhScWf7DKT>
z$OGo$g_I(V0*0qVoaU21`l<Uu4{WZA+n!%0^#k41LNMjOL#(XOk?Jd7vaIvC*=f_Q
zqR!Y~H3kT#oEk4JS0I~IozE2&&tH#VIe+;lps!$jX&GuJbjm1h_EKd3;#9*`Adgt&
z;_2I6mF5j*x1dFLc9wYw=Ny#f@Vfk)g3eEB{{?}XQKt0B<V(lGhh}R`ZX<klbr?QI
zBjN0x82^)}$N_~p1#@)-9`eYA!C5akBm?I@NSR)xomoW|x2LZHFPh3ddHQHN4tdY@
zDb$0$8p0ly=1<~}{9bZ~@gv84B<rO1>~)wg^Bs&$iMXw#zDk}LN`41fo9!&E<;_OT
z5a>m=NGM!&wQ_{3{7roAxQ6^zm1K2OX^i~$=hdwL1Q~L!4BzF1vOX7T67upXiLhHb
zmK`g(uq@SJD2qdag`J$b@>wunN|fL(%9I&)qU@!~;BP|VOdhhv(f1MtGi5>TqlmM?
z^h}JPnf`7|a<Gg6j$2?I)x!IR1Rf7BRV$kT)hJXjcd;rFY?6Vu*5)OmnINRFnjITH
zx=;&#98R3Dva*uW%K9r|wh(Gw=kC(yRD__^)y3dv6(=6{?Dd_tgH7WYJN@?Hq5r~Z
zbFK%XFUbYKY#jA1Nh=gW)lNBSMWf+v+mlwjxY%s9mf3`Y$!521?zQ6xwDe^L)#E&%
ze*M%6*%eRU<l4rJ%R>ick%(26=5mM`7YMVa`-2B8<wLx1+vf)XvABKB*0uDa+wU8M
z;_Ymg?FoR4ALP4h^US;%jLdLI7VAO<VV_c)AmXVkv{-y%VMRzk4JCi4o+#^;>^fcg
zIqgx%IC-2HDELxb(G#WQZt=)6)HtOjB)%mtAX)a+f5I9(4`#yqQ{Rt)D)_(np43Y3
z^gU^4M89^5pno0SA)<BvBt{u8S|AGU=Ln_3nB`bOq`5BZ{EKuzdLeFCiN>bc3wY!_
zp6P!S+R+!E%|QmKyP**?Rrz48+9#ZHlWf`TA+|ogZ0+H2btm68HnbVh84o%uc}Wk%
zRsuT7UI&47LIyKj0u+`-P!Dvm;|WxW<`gpvBPDrh{BPfcVC59YN_2r;pJw0YKnqkU
z%Ai7tQgpbWP$C+j)i9Yz4s7i-`;?xs$u|@A9Qcj<zyszEGzgts$+#S8r8-<y0VQ5=
z@x}PX<Svt#-DIzujN^XXUW`|W8<Cu9&r+I%bJ?95!)o>n+t;44qxL8^{6+UZ_Ee&|
zf4k!_^NaQc$90uHSuq8xi&thLQH)W-T;*<H2sw(?$#yN7FN4YWRmL#I*+l-5bxTjl
zZ<6L+EF<(m2NrDu%X$)FTp-tn0oK3RRzg0G{6G2b9`yI(CWYSrmE*VDwrOm?c?+2g
zXP)O$AI?M%NSAxjn0BZF#-!@bA6AO3)hnYmKy?uHx~<!nb?_rU8tFg4+&qZKs61DK
zwjof{P0Z^^r`k}$*;IRStEzE?1I**)gRE9_Oz=NHxk5iN3m>+`7Z>eKN>1T|QKkw~
z7~HgA<9M!I<B4AAg{Qw=s1NI`^4En+`}1!LO>>W5W^?FhFQm|L>3LtI<3ODJ#Ogk`
zr)hDDTj2mqRCS+&<tGG0`7rl0a-PiU1tXfX06!&2QYVgg!;7#|GyGfnjooQWt;q;e
zvao;C&1S}|Zaa0?NhnOS+Kcn<mfV}gfO&u~B~F*a=}S-L26WNd95&?kd`B&Mm)H4Z
z`0AOK?b1jDlpjw<|HLxe=%1cI*(QsvIH9!UbBSRgn?6Zg9BG3?62B-&p>UHnw48e+
zHy<(U_=5xJs90s*>z;EI+FQcL@j_%4bC&G@dJ?V6jv!UuumU8s4hn~H&k{pU;=4y#
zQhCG>qU!5;xI9Q^l?)TCKLzcRP055#G7RK6W*XwInyzCe_+#mD!Oo8DdDz=NA&PJ`
zu`L~&i*q6F6EYJg{_d5Qhd7eV45xo>$}HY@n?!|TdBjy`Nm^4qC$og82h%LsOeJ9Y
zxs4U(JANV}@7BAGEgwwpCqm5Tg3F)Xe}1h({%GP@Z4C!;fIG1ZZV+=|kTF8#F1R4K
zELjv+CsPc&fK6ZqKanQMybO8bDfa+#AU>$VPp{_tkMBRYxV?HYe`fKp7<uty<Wt%s
zNG+4=91MsGh#2|}arDDcoHiF%qgm063>RnSA~zgrCK{oz{y{843+<m^{Vs2tFz|Q<
zgDd;i1_BBiaDo3Bm&(fr@w!@HTU%RJ{7};e@q;*x^iGypV*>yn`o%a!@c~_Ae5nzR
zOy7e#W?70^X?0!EAh4ChZ|}~_mm0DFT{4LYQmLk+sff*tPGvJk9n@V(I)jIowWZU$
zc!t6)u3WG|eowh%-8+j0#0AW+4(G~Z&jBJHIi@?qoRwQ4Nr{gyKNX|Mw`=aDh@EK5
zmjl;AgzZTzhM);Ex9c&kD*n{~UfYIp@5aE~d{uu^rI`Bpgg>T$fVC>%MTkfNMzS4P
zO~h?&Uu}vispKblc%roI#wT1EU1#3d1>(OlCxJ%Pv<2zCs%|Z%&24S|<+Lg+IimNe
zVr1x>^GZylKczmg&2#!Ch<f)njG&Z4fXXhnnTlo`gelLMJ$fJW!0vciS*R{AC?&S!
zyD^1}+Vn3l1Y~!_0PFdiCv8|S<t|*z-7whh%3X7~xX4Kx14|wy!Vpn&I+!;#NS_vi
zc}e5~7YA+WbGAigHyp@lxu+HNH8k<erttL!cc0w0{L15GjPV<^8Y#<42m7BEq{A?Q
zPP(`?Hu|*C%J~d9{<QEHge?bNOqCI+cKz`L&5Nw<^@4-rurOP-=NAOPXN!viK(-Pc
zg|IlinKu?eWQ%H7oHdGm*Kwx9Z&R(L5QtiVoaNM}>dJ(h0;zM&IX3IsY8?f04b}tW
z%)mwqmHaUbYw5H1DSb4V=L(FQU3-BE@^T2vjD?DvwUfwg3RjDel&n~0Uzfr4b<fiD
z7QDkI^kpuQ^KDl3g*+?#AM@mHZg8yJ_&e@CM?z_8C!nH2lF1(5SN27ULQ7hs?r>}f
zUpJ-;ylQfagT;RH4$9QO(61Hd8<SH*@-Ds_^j}%i%FLBMuaRG0g}1<~WzKEE173JV
z@#S9qwu0DdhJ@vM>2ZgFssHI=rVpxQ+f*2hnxx@z@t8$f_R^5c871a&N|XAtp_YF>
zuyra-E~^joqU8Sf#>o9=$A7&TI_2g6kg%&y23CDKChLD!Sk)Klud-{imR;zz(3)zH
zZ%Fk-oWX2}QnyXdg&@qfI`TnZGeKd)9$hCo!fDzJJd$)ff<6|VwcL`S;@pE5ny$|Q
zR8PSTaun>|c-s2@x~~7ts`Lj=o1ap(>z-Cp0SR9iY1S`{4B@Hpux`0iWuNt(cQ$Ql
zlZKQ<n~<<vP<zz77dig(?0sGsT_=kJChF3D=&ZNaDac%cIvGT+_jyx{TI@ji`LmAp
z1_~+_2+AKfCKb-)@A=Pc3s;<Lm5iCBGrMsou!J&zfra>-V~nO#vd!6Po#P}7UI3r(
zAdr(Cs~8oeI#vVApN!p*AOYQiUfhGKIR|gNyLg@;#Ertv?q`QFhS!%)Y?n8TU=%rv
zt25k%;dv};76OG1>1g}<F+ViKvo@noVe+RC^i!6ugm$bgQW_i0kH~0iWv!)Uq}Eki
z)mmNH$lx@;koGV?zktr}AdMI18g~u6UDq1_za9Q^hSDE6W3uHm0Js+!=1Q?uIrebg
zAaN<EVa?$_IcqrodDQGDJ>lqn4cFwiWn~7Qr`8|EO))>Sl4NJy6=)A(N(faEiu?43
zT3;l>LQ7Y=#^eJR<dN77n5#(Os(Lt|b@5P-#D&BjfQP~_ioHSW*4p(wtC-_bf2UrK
zSLSEba@pk%^d?W}#MHLfd8ViS`5En*FPW=5OEnbcWcmp;k_DY-hBprYQi>#g`-~nb
zqpZkRLFDq^blMg3Yn2a%*66hz-~E&hBP+blSBs>0dE3#(+S-~HdtA;OtX?y;P+*T{
z-wKNtNh`7>YBDy*&RK{fv%s-m4Z&Wo`0uNqk|C&hUNCcv*M0%BT>T#m-acLCkaL^@
z4*n!RZ*$Y!ai9=FNvCo1w$>a92RiqRCzH$In7>?gJ{SMZ!GI12E(e;oj8o1}LjSYq
zk8YqLIVR?O`!gDLYVF##wxs(2u8<G^7z`11_P+~1^eHrd@8>YYpF$Ap@BR#eASHNW
z2H3NovF3|}ZkGP1p^SpT2u*BY4lZcAuYX^bx}2<YKbu&NVxliE^f_sLH`zCvT_2s0
z{6)zbEp-5UR{DV08&CB`V@{`IgT-JVwfr*~+H8Yidb>Hf?Q(qvpXh2d?xnghXNWWN
ziUm0meVRq-Q5fK_6n*50=I+SpCu|QC6Xn=q3f)Dec}95qTwXeJ&c~Eo!~IyH9Na2J
zoy|`756W%#(k2Qmvh22y{bM0`exe}{`ka2e$s30ztNsNWDF0YUy-DTXv&f0m(Z8gH
z$^`>9&FdJs!_3;XVwft82Ls9gupka&O)2Ii2;v`Mj|MdPilmkb9C9RO*TSzv(3W9a
z1IvaVI!-s`wvM&TX4+t$lP+}gOBvw6@jndc4dLHfPDX5Q)|#w4KMi)<Fx{mbHn5^`
z&z7e|tFi`x{YcDt^y1!1r<w2}SzOA|u0w)mO37*;$m#|`WN4a1E|90yN?;hmp2PHZ
zre3~&jV#Xd94**?&8E%9B*?RKM79SLWa;$#AX#eKgZ?Y>OeI%Avaq-}c!sX6HOV#y
zi(|^ev#{UX_ggK?Zj%u3OxTk6msAX$r}kdl-7KK~vheH5$_h30TaKkODQZbC>$*zE
z-gjM6Y$IvYQFs*9$W-QG`_MGXyv-e(N<0qFi8~nmxJfwIc>&T1weQ9Q9Gd$uP@y|C
zQVxe^8RaZY{6o$V$(n*zUBC=`YQnEGEeq}TOL7;Oa{H6J%XqYMP;XR^t6$3()&1@2
ze)ahLbNaw8+gX*}G5H^K0wr1<A3}4XLWU!u?=sdcWDJ;l9WDl|X5*)2V|KO8l+-e&
zT&%(cZU?p`;TrOIU*c6oorYC2D>()Srpr8mj#yYZRAE+Tcrp8&@6Y9rn?Gd1$+Edh
zDe@Cs@XaBiAnpqWJj@7N<^rOdyiG}F#58w<>~cvL8q?m97ju81NwgZ(=?}(AJVq_m
zM-jKPNbN8IW?m{I_TYsLR{<rFd<wk=sTmRv6McaZ+H!7HxHjdd9}nnu=cx26P0CXp
z4q}eXo}1=K_Nj8&1hQ1rO2#aObi|($yCzo)aC|VA^sq-MO=omxij|pHEC1UMDkr{k
z99E9DB3)$#bw<*~A87hN@#ojyen?HTh*E)kv=V~ZH!?0V_#jHJ!Bx<~;u6_&bOvp-
zZnsYe8Mm8Ub|38~i>A-CD+1;U^@ezRz(9pUCgEtABIud@5zH4Dk<_miU;W2_^j|G4
z{B_~YdfHupieaEAlyMy}1?(>PeK>%iaiQY?8^o`<rtG!B*8|aBy<jhx*8Jfl4*o+x
zKK?-UH-?SDi)GlrE(fMEKUBy1#^SmL3F{4IVoDcC?|{fVQG#eq%gcAY>zc^+-I(-X
zWQ0Eidn*SpZ*1ozjRqkr`@Kco&XO|DQ;op>a2Y`O19k_>gpbW!3jH?j17~QP&Bu&M
zDRUaf_>T-K`jl$+fZs}c))2b+@F~w^@>e~J-}v>fu-|jy3CR%1gZzZ4Sa}BOru&yg
zT3k}a#7YYA5Y(=!SIUj|M;eP%BpNXjY(mWlXr!USj6pzx9SfyYT38e)yijDtN!|1&
zUJlwb(%KA|u^mJD=<0+eGoc-Sq(ny63bQ>69qTPqZNF$|#2i2Tz-d2S9z)Hq;J;;h
z*i&W+ka`L2lWtiT#G7nMng^AmLut#>J73b5ony@a9kDiOATrLG6l5$DR02iCTX6<$
z>fgW&B@;vjIkEAk5!s5Z!QCa9xfE&SFuRZ;Te_YJ@nwEjwdq&EQ@nOBS0Jpkh8yYw
zcbxN{eJ|v_i#?JvnAaXm(MQoQCkJ)GH*T(&S!t#$f?al(O2_5ENrAz?<wjv327&(X
zb-F=HKDJ~k1+du|Hd`E_*;Wd^);Pg$ku}?)XI*vy+<3`$)4Y|Pq|~fp6u3ZvX2qOS
zCe@CIalefy3jR=PPR;_V(=Mk{Be11xvhX(_F-C=lx2IM6`jQ`O_VwrVT4xW)zoo{a
z7CHwU-eg-?k|ySFSZ+JPrcr&_vv5OFM?VL8LKK6oJsu2w_i60$Zwgc8k2hT-HCTL3
z4c9t;u{_#kjdG~L2Pj!n=*sNto(iq*!raoR+*BXZF_$DUXvPDXDmhDS-K$V)7W<_m
z=sz7hW`R>?+UsmZ)D?Q<OCIO(330Pm4Lbmt*RDb?j-5!MmZhh=eez&pS=u1y5qgM{
zYKSXKYK!Kb#YN>7PIet0dZ%`!oue^N4tMxsfVyQ@-FJn)v-8WA<XOI?ATL{9!5?bj
zj$)4M!p>&{1fk6VS1G*BaG$%q>O{@kU`xs5ZDBebv~*Z#x9xrFM#j=Uxr22eG)uY$
znT)gH4cf#l-<kf;5z9#kcLeCtg!|03VWy{KXoQqz3;%8r5Jv+D*(6qeVWoX+i<#l5
z(3!PPe50Glw2`t2^dCgGmz~%kPWA`m?e3UN;W4?XbubESGV*3Sl_Ys;vW`@3j$(a5
z@w0>>3*H^5SdTR2sl?E7R(9zSv1s|P!XP{Zxm9yK)brY9<2Y&fjWqm58rE4ya+;e1
z7iR%n1WUHOFhj`RmoA;lz(<V<iO#<%E72#Lxsd1J{kt4VIdz$P{hm7rRBIq#-CSM0
zDWzvw6f4G&i}P;~ne4|WyMSqE<(dyJGef3jl}k9N_19n2T-}D`H=%p>6Z>f}&S}{%
zS6WVlGHD*qi`=e-+jFtzn0$A#fa~tP1b>tan*smlK&W7AFFt$l>^>qC;LJHE*@NZZ
zJcYP&x%a79=W)x^Ov}@3%P#?aVVUt1aLjHUc=65_QEjSE3_*4NdC5Q5es34v2s~zB
z?x}-7wH6=31S1-mPV>ipzNn|XY_FR_zuoZrXRfC>F_-c9jiD0A7T`_aP#SNnu<t4!
zz2Pl(^Uk|avWJ=O4mW|By6mL)%)O%O%AKLAoB5}6#O1W3i!Z86DYIU)=TA;=(1Llf
zKQ%7i#HHv~+oVtRXQ|uoj=MSmEC-jMFZXw__;3OkdeCto)AE<1^Xr86A_c>)s^F3k
zk-Lj+c|qT2<ey8n3F3#FD_Hr%q9|+!6>@!j&PW_&3pm`4ze_WBs5kZBvl(uWEdNIv
zy{F9ok1Sw?Iac(@ou#U1!19i%>UU;~JaZaecq!!)1WKbYodfD~4|@tj$Z5}S;R&1(
zj)U89e3n~zzurrBqw>z;lL+i}*l@6uM>bq`s_9&`{z+S%P&~x7WlceuTbD6D$SI4i
z!%8z%$x)*^7;QdcHwTPo7`M;7bW^+y@`Ri(6tJl|HZuT(@&C=qnWjqS<S;u5ebUvj
z{uVZ#s{h8Z6C*FAq1JR2TSQz;<{&|igd%o>z*QXT<<fDdc_@oZ7c7sv$4VU=5k!{L
zdJt(f-mkwcr!+yX($eQS_VJjISRE}6o1+-EShAI4uh2-so&$3wSMd*<oEr6mCvL>P
znhj&N3FI%Y91j|f(VA{WG7Uc=PPEyFmzn}ETR{{Y5<*UXT2({NE34Rj;?s)jS_cht
z9sbRQY)Mw^%SHQRi9=cV>OZ^<lFfH#zdA!C!|IN%ITX;Rg~eb6Szoc_%~6lxtj)H1
z^p?dji#a=IwYvU;kAJt8jT$2%HC6Fn*M3U{i;-|8P+F}hwGKYym9{c?sronh5k_Ux
z1`8ZPgdzcI&)U@U3Y%&1F_(RNm6Ki)qqG~#{SvkN>Q!Dw1un~F=C;IN^XjUJN<t9V
zGi#a1g2NTbYaVOzYgp^I&(8#jm5IPamk~_}8$StHgnV9BH&c}riV7xqKDtIG5%Ax)
z!!8NE>p-^m^};KIXFP_N)InO6$dU2pe$BHMLes(7m;+UQj%i4e;r+tn%S&<(dx2k`
zADV>URW`cFj=7ZA+kH5vG{`CV5diHCM!EYY(&~8JOpP&DMV+%!RUOXBIrfQd``j=y
z>4t&;Z9tO0R?@aLD#FMoC7I2J9Z3a$QHAG3g$a^ghAoFqay}GGx?B*=B^|LPuW%}s
zOBjyC8r=U#?;z;`u!~P-_$GoRa>3(OeIL~4e=Qj3a5CQGHxoj}2amCZQXY;!(%3b`
zaxccNPJ8iZ5i_Lj3cX&XUvL+?m@_963boq5rx;!?&Kz4F4cL5t;h}5pVM{+T%{scC
zur)J`oT^v8p0#)S-34d(o#RaQ5wz}-czNon?OZu*)s?`0=O{LeY5U)A;~800z+x#)
z8!azv3uXA%AD*5Hnt8JRj|B?VlD6$?ji>2XX1*zFu4aGsBTcDeVzzaXO>WC?O{P+p
z5<S{98&IpGIH3jk#n0teD*YRinv1TA)|+Euwjy1IZrxv{&v$zI^BPZcm1sTXRVv|F
zgiOu}$l}a^%>c~GQD4ch*^1#Fup%{Al+8Vgu8OzXxZ6q@<f|ubr12ABS_Y(#9naE1
zJuaGTEJha7zXk6DYt?xHNiLGSXe9PytJ&(rZRO@Oub@8QnUVZ!^VtUe)gI6}-~SOI
zY6$JXkaun%8u4$-4@Kjs$oau)=6`coa&BZ8=pN^Mb+Z55ud^q=PUlwpa}jW!44%UR
zp0g*vp67fe!-9IL{%PUsTT-Cj#)z~iKHTK3Ku3^75WipWMb4L9Vz4t|bTPjGs{cK8
z(I>zANTjCh?;#zL{2mx=Cf)vZkL+ScT@rcgcsh=NoC`kbj-M>&M=&oIkcf@R)GqCg
znS%KoV1Mz^oqO_Ll=j77*Fo<-_T6LxU+^$|cHY#e0;U2VvwRTV=R1s8#Ne^S9O5gW
z4-KVeWj*}<+CMKX<wfVP6%7~~uxPVnC5Ra3P#k^Ayi7%@(VIf1xN7<QJR}OcVv9KD
z1eTCSkq!!!x8;&P{Av`(28?{iOLGkQQzL#^PC>nTc~rRrvH$!}YlF0yhP_+?o?nb$
zhY;{@Ip^wG3Mc@wS4GGM>xP)`*8E4y(^UE}1?FsCI7RZI7ZFRZRHavT&{oj*InS~B
zh3$@?Z_&$3Uf!&)lh?Kq7_c3Zy5;SQKz=KBJfR3zt%y5lFRwlRllA<>mX^|<Vq78x
zHAQ#Tr#P21{74(~q})#KH-G)Tfk_%{s2R5p0g$8FG^oE|xKD$7XuBDZa?1QF>|xQ#
zt%H==K`UWma!l@%X*ZQ3JW0LdO`~_|#NjT8Z)-5*tK~(4byqp`6-wKug@E(K#-Vq&
zTg*IXj?L0@-3qwAq@P}X56^TUMshztEiV$tpOqKf2&}-9$yow^&dF;lnP;Rz3Vz+$
z`ENOMjy`|!k>fz;un7>_oybcq((oEGd3MQ0&EWCs?>eyA`)S)U5kGZ7p;rFHKZjw(
zey;hemo}^y>F2JiXU6^yytL5MpSXRl{%l1x!57?H&m^#9`ij?OF(1mD7(q)Ff?eWJ
z&YIL_mO6|l7jQ{#t<}enKguf+a7KQ+=&a3=G6Zo0=D8hXLeKdf2l_<DXjxx4O{1gL
zU%S8MrjV_|pK6jAxHgnCIn*1Buz={x&KjO0<1cjCar|!3?q1C@9(+l_1;9w38<{io
zl&Vt-FD|A%2-$a(FYmC~{DLC7{fU`UbZN4X`1__xuPM;~3nxpRs%Qb}R`|;kQz=<<
zK}k=;u%t4B{v;Xn1eua^5oO2~b)o=|FQyf^(h~$j`Z)e%^S<VDefR_YlU=xqb9?xa
zl97h^M?F0wr%AthT3nNQGgru{fh3ihH~l4y|BMV$9Hk?O`uPtMYCMJN377g@EYBcc
zoyJI`*QGEpZ6Ln>ODZVHf=>PNOBgFb>U@IZMw$)yk?&R?hQkR(@4u#F<cbCX(1kfH
z=gH4i)ZP^4f#@aYdi|VAOKO>XyE(@h%a%-#v^>$Xt^O>Nnrb6e`=#}?;M!Jxj#Lj@
za8#qM{v_$ER!#6H6cmBBBJGLHyO-%b1O#uCDnhYll8`m{A3v5Cd`fj|ZmwJK#`3@9
z*}$hncCg1y^_p(-GPL8xl;#@urWy<Ee0}d3fOAR%SA50!2dHARY_XXw=9tSlN7NnA
zb;Y?)Kc(llGF6{v+0QfeSzJoIji>t7k=T05lyg~U>LuO7C%0TduTVXxkF&H~Aq-M~
z@dSnO0{OYejDG1d0^1zv`HI{C0BKeCb56_`xhAy8nRJ<>epB1#q(5nl_lM+?&@e1B
z{Ulc|uAm=z!AU5pTSV)+=t9YKU3Os@Rp;{>Fa`G*+TB<BeX7y0J<tA*rz}M|9xMi}
zu1wdL!+us~>+TwyTWKRxY2*1yo0&?RY3ba{XO`mqvxfJXsP}<k{}ZPC{}hXRJydhL
z#%IfPz=z{=70ZF=8I}#b7`4NQ81S3jqs^eTotfV=^Lw@#9IU6T@eP*QpqqbuP6>`f
zmk&*uJY}(O5ZOAnai+txQM2a#o4}Oae>eOCEg~O{#Ko5XD}vRtPII<Sv5W>bPy!WD
zxRH9CZDcIv<?ANCzRCHT4X|%VZygeIX7PIdERNvk&(om%1ZEB{?tf>Jn#Pz+a?*2n
z^W+@zW~dUmPd9mlPh>lIX6rWG<ezhQSabtf%Cmlb(kCP6$eP<f=LYe@?b~p&7QWZ=
zR_RISDz_Kr6zC10c4tpQ@Uhu%>^%Ecnyr`I8@%&Vz4KHc1#;7QTaP`Rv-O$z+o7A{
z9UbaH&*2I9MeqxmhNPJItK{LxP9yM)@bh^6<UHQwgRqA4_56$y`PeO!MFJec(B7y|
z2W9p=MkrFVAy+b?XN0Y@0TCnwk3@Y~Ug(AfziGZsjK0P_@eW}M)<>#!vJF#0h}7w_
zvLDficsOPomB9N(Q}mcsA@sx1e1f@{edfDg{Gj~X#cWfGB$xU&cLTZDO7aFxQolG_
zkSi@~sq6>z>(mT<{?b%&Z^-J3&W&YZOL_69lXSAwGZc3Ejyb*txA$xJw`H}0(?!~y
zrDfWr85y4EM6U6^lx{y~F6>RZ?CW4@KJ$f1Yc8KT{<Vv36NFXln!4+Z=Q6;kdz~8y
zhf=(xyRKd>>@^dT<F?xicU+h#UJ9=6hw()G#TQE7nNX%}<cRHbmg!J;)k4qB?d?QZ
z_J}K?mf5SP1nfZ#CEQ9^`y+_Fg8(2;sfJ$?VavyRGXp)#J>9sqGkm*4ERn6Mp%Lwc
zWoPxPD+CF46EPs46R`&oPO`7x_=*T1@X482s#%=#eZ;3gdJHh6U56lbYzAQxB-EY!
zPP@v8={tyrZhtW+=ot@g8Oe^Jd2Dq@EsF1JsY#V3Q`?EBARs^GsJ9qT7tcvN8n_Is
zXI1nZdc`oBtx1n8>!y6LXN;FzEbzspg-cTg8Ue}|I;6nm{=}I!Y&|$vOBmO|)dDgM
z7@T0%G;X#zaGfDq2%?r!3Bb8d2u4(FdobD?j}{%AdC*_tC}I)^$1M2gyavzN)Rdv(
zwE{a7R}<JKyK&kZUUFC{K6JWcj=9X~(2;dIS-6Ww*YQHX+lqTL8v@nJObwy(?|zjz
zzLC#BtL}@tiD9>P<C&KveSYqWd7_HnC`MTdbZzY0GyCIwDV%o6l=ah|KX8xCv?t5l
zLF?k7FUy}EbRO}^<RgtnkE5sJSlQeFi<$8Y1gWrQD=RA^aAa?#WL_O|tDN(V9I)1x
zK3gl<<%RpV_L901&B@=j#7R8flhn)E5zt#2z^}iB6jLfYc}_>_tEs=1b1<567ARxE
z-*X_K7Mc9)K~J6RZomI@1NIg==uHyc;QEqp)LbST8ELQ1q?{J0WR@+AW?-+E5Qc)1
zD-;H7@t$;#_o80O5P6reA#EsiMi}t==aIs~LN*--j#@yCO+U$g1Zk&dl5qSyc>D0l
ztzPiH^T}h@;Dfy@^(v?WKk}xSnKw?!;!>J%tP&I~B;O~7x0}CGFTg}kE&NN@5FnYq
zhC~j}TStPzxoesE_;;>nmUrju1C(cnPxjvlZ?+Px)S>{D1*3&LDk*oP|4i+FJT$m@
z$j0ie3^y;_uBE3EJxE}=1veruuhxUiQ)XLMKnWdKulJ11fn)dP%c51FOT_UMzC8#v
zsAiYi1PP<@_p=`)+sMQqogYAyWzJMK8yN5(DC-b2I<qO%RsHH1ilh9nm?`d@zGXRc
z137xwo>5QDJz&u-tDGu>N;>SPkEy9QfOpi~ijk1_(Bb4sU0mt(uE5QHY~gTu!5YFY
zFWi`aIibXjw&zOAcwEb$!|(YroRr`s8>>^|e$Nv`&6#zMG>S+^ghvU2qCA27LSJQT
zUKFbRms2p~`%A%W7|`?o`G4l_*I)8t$hg9RQYDBBihQqOJkWI1Q1#UZn_1IK#O#4z
zpoRY6A#1kRh25TxZq2f+ZjRZWvNfllUc#~9f$T{XIFI9SwOxDpaZTs#kGJ;>ZN5LJ
znWa5W1NWxay^UdPhU5xyn_O*FZjtl`>+siMmS>kv_ob4j&zikYVNMmLIfFuTZ_gho
zVdM=q^#+@&NBw!>#_Z~i?CMQ0iEvqACj0BnZ>dWfL0+kwX5WGovl7T?WTWNsT^q<q
ze&T`%W|SL<HVXpji#ipI79(~MlyVQWl|#L7q^_$%HZW6wTbx<Xym9j#@#dG{O28bL
z@9Z_@GSFgDMMa2>&ogvHXc~m4eC<Ux9zHG;AD8!kl*R(X%Bn2#Mb)Xu-hWcHq5Aw;
z-Nwr^8$2gYLg~3Gi@Y$(f0xbz4L+l^$PI@+Piv81`1KRP(dVcHn3#6lfIkXjZ@Kn&
zS$&wMm<As{XIh~;{KwgWINRl%2#ik<JGtD^e1T?GVwD!f<%FvVMv>*eIjp?FVaJ0-
z1j~~}m}y_zC$#FY^L3_APw#6g7Lqq1nks_<zx*>jNW*lRZpPhKG#T9obxgtK1^tA1
z9O)}~j)@G1l77mh;U7Fb46fr9E#45~rBikF)ttkobfJ0kPX~|vN6u8An(RpOCzzU8
z?mDrF%Fpd*+7#v=G)V_zdPs98hK<UeEUM7z4U*U$$PitqS6Zc}Md7L7exV?5zE&1l
zt{0}OGw<WRFg7<XWq5p`2tPKCipzD{<QSJ+){tUmy`E6;!fMkQavpQTa~!Rn30Xj0
zI>YjReIkSaNvcuUfB^q+3HyAZ^K7A+0w}cepZ|%nOaBNXdhJv2j43@k4h++oFTJ5m
z)~e>e!zA2y^OJ_*KWP&_{5vhdgKX?-d&!iU`TZeGvE6p3KFqT0<MS5eFR&pG3fkZ?
z-n=_q!UdmEM&9W%F3QX>o!~SZYG#<ua{4p&*R(K8pP#e);2=@nZLAw)QA6l3!ob9x
zns!COtpjphnxb*j(0RwBNq+rN+_(BjK{*dBN~X7&s2hLzi}tul3wTKk@Q?E-A|}j7
zrb_jz{Db6WCb~<$@%_{IG$oT%SDCh{5Jv(Jc21>X-3S!C>6m!#K#p~D(@&NuRC$B}
z{Ap1s=?%*3>#ODVb<BB7C|&6Si+1kgkztwdC}SE{q|1K4gN3Bu9J&-W3u;MO^3uE{
zid$Cj-xt>7H=7H8TUcB8w2)rxpN>ooi_g(y+?lO%M&X$R>m+_Gz8j8bDj%Thpwmor
zu$KNfut2ooZz&dOD9Oxx$$6JfwdOvgg#cMfLB;3Ej4(|$*bGtr)pc)h+3Xd1!%mYq
zi*RMVtj?q743+g_hEFwX9YcwsEp<s_M!EnkHenXteM(6pbP|P?aUedh`MQ$KIOmv_
zhINZhDy3(bs~<`!_j#i-Rp$wXRAtd+{h6gm=UAFg3{u>NG_}|5hp8_?>NyO}seXST
z<1bkoxq2*TWKt0g=Cxy^Bn4?*ll)*wmJDT!i+un7#*2q9K_HtLd^70Y&qdnOAxu}<
z?b|?AcSK<_gVqpN^GBFNe4#Pxn*mVV!!YkTIefQic=m;4Ewr%`GpiDga$b6LYw(yz
z^{3(%ICs~u>6N?YaB=aEyu7t}e%v-HY!H)bZsOXM^~PVQc8b0l4IVi9S9vrVj22%-
z%|6`{S6vDkVmE^liC`-z>T_O@*+4Fxjuo4m4OV4@{e+mb+4QuCprY&i&>q(TGs7-u
zzbyRa!UAL2@PxfZzc<#gHmqskA#yEX15@u8EhmxTA+mmO=FFsOXI$=5un>AeW<q8L
z&#AJ8xHXvOh`r;=_px|<k0z-$Ej?*IJdKogn*DZ<I8OAMI&>U&l)EtpPqKI8pc$H>
z!&Or?98LKvJotX&THS;*sf$;iSu-@U$Psff)}^@(b^DP`?)6(R25PmRQ04%a{VRh(
zT{Ghx8dr8uAqLEeXS^6&FGM<@ZV0m6LF{!DbJ5mwHYpokkcpm9^6|tD+tSaI&!1m}
zsT880<DQ?rILvzJ)0ML}0daTQK_Vi$q|AS8Y%?UQVRmgzI)ewp<z7z4!HzimZT7Yw
zH|b*K4CX4Broanlq$EwHSn1w14IEg*-oa$#o1%gpLv}f=5hF#?U~=7Y?Q+H>9vKam
zGb2&x&t@Vqj#mCIBoZvlky+2X%Xq{-01H^oBp<s8V42NI<2l>3-;t#pM5Mc|_j@ye
zZxKPsF&gw!2O@*wUVzW^wUZ``ReH1>N8x!`Fm03;2aeUu2gTl<S~Eg<SkMKvcrO1#
z%dK1<wuBCk?a77lW+`1K&X7jT$NWQ3YLz6eO(r}^@%!s<KlHhNvv4qq@4JIZVzxIm
zi2vcZIcH*T<UC}jkd=P^DGc=z2}E$q$14;t98&H(v&!*cl9x5ZA=AKB{x5l5i@WX^
zVT&X(e=ZD}uEHf;Stwtxn0f?sFx^<ujMHR{D8`h#SXhJ{>2fkA(T?G^yS}!|Utw3z
zMr7(5nlvrr@)>G`&P#sn2B`>sGgo15r4;QN)>=wsDL8133=wY%F-f?@GD8>az&4*}
z@UTt9tiVxOpGQG+$^2{24b#>u;H+*BMm2K{EqYd(bEzmXt4A+c`G7f~v6+j40Et^8
z9~S2Z#`WZ41{Y-{f9bt`Ek_Y?s-b%Tb|e1LVwv>K`xF!R#PQ5WZe<`gg2eHtdwp$)
zfwnkk2%fh$&OEYBizZ#Aj=7ezwA&NcZzi%K334TT!nxbTT!r`F6VWG5Wz%qN5hycB
zM>ON2$dw@zw~}SLHAR{ne3&f-nRX?$fK3d+^X#@&S}?vdFC6D}tg?!!`AGf@mVs6K
zU8hC3FoZ%*gh&P4TE4}H#{v|BOiO=@e}rm@RA3M39;DWZi$?X#2!j6RjbkMzpm|>3
zBeIhEukMuByTsCQl{hmcVYV5JZQ}uoQAyWq-+_!iqg<nzh169bXAS8nKjHph+`XC|
z^d{HlT3@s=rcsk7@M?MCkCl}btXr$uZ^b<#{ys6YM3M~)@y{sSQt_@<+HP@HNP(aQ
zZ+YWF%;jKMG^F{94_42HRivUX*=!$r&`~>%d}6xkcMwj$FE2dA#Oq9YL{~L?6XIOh
z9gicp8no;av?eRzP8srGn+hnJm<G6lo<3*y$gY`YVz~wnayio=CcL6)l%<qE1(sKo
z$IZ)uuxmiRtU>6GGpZuoaMZNtWC9VzkDT2Q43>PdBM|NZ5G0hpWgk8*^e4TZytM0Q
zke=c4M$PN^m3+yhq<S^FzHBb8E%X1ad|0vty~n#L^M74kT?HS=D(jQd@Q5Dg)#aeq
zwgrFa3Sy@9$vM1ayuv>%yw{&3r?mJcd)v#rAt}>H-+{Hubi@3iKIFBoEap<}2bN~O
zhm^ITpMbYqd+8b}lfl%eM4#Xr*V%jhSX=;%PYdttD`gPot2+zfPYX_*pV;u6-g{$(
zV<EXJ;$QsI8d*1@)QSey(*Zntn{}UkEJ(N(0PNDMpok39)^j!+Y8%><k-U1lwzll;
zh!gJdmH83ZC*#A3Io;_^@+Kgvz5av*7y6A$LyAwYmh%EEep>kT)zqNkR}|;^6>CN5
z2XvtH3lxz1b^gjrgnumih+-1;O?B?3LKZ{KpnE^}jkUEj=5c@|Ay7YMGCk$srXzCX
z@{{*x?iJaYzREcd!3Tv)@ILG!X^pzW@j$Ka1zzDEU8Gbr42YbQhCM03qp>lTe`y2G
zre0grX-9LxTou~pi#fX_Zk>aH=)&`x`SAo)URd{GsqzBAQ&nEM0<Ute5!kzveFb?t
z^1Wbc&g53^dWpmDj`=5Fe|!7z73?d*hr2=HVHt>3{a3#s9o)Yx|I1T3>;GRm9$3CN
zD71Rn?7tZ&Zwy<8bnB-2|7)K6gH|UdmujD2E}a2PvZr<LnC9nKnAoe8Rf7Oy{zr4s
zHwo;mrN+OJJhQ_xti)B6XXxIfhLpc(!bm;I>BW8uYdG79yc+gfSOu>QcRsJiU^J(X
z<f%?l1LLXtmC;q*ySyb3aYf`x<@DK3mkFD&3Er|5g)7S$sTU(kCHo?8j7pA{(}{xF
zu$sA&NWhd+MZV;W%iLpQN}%d%**AFulPXM`s|x&_SAG;<ca!mGmNO*#DXh>i*ecE`
zozVN7vG9986g=jQ<hV<Dq_Yi=>AgEvjBIFJ<n%Hz$oP$!*nfbWmJ!FCWzRy`vW#Ha
zZSb;PAFwu&B#*}t{e^idc_L(k&;D5c;*Y5N>W|<r{-|WXCi=6l?M~w_?qIra`uP0f
zHcP+eXy?AM?BV$(d!Srtdrp3_C&qnor{Nd3Ztj}~{$KP_a3w69|6(EDeeuxzi-&CY
z6~OfifXuxGWc&gMu}}~V?uKR|FS|Xmo?`y4+^8YNV?yiuAN|nQGXlf;GSFD|gIjXr
zh{T>Z5>s9Sx<0w(g8}Km11|nda!Y*7G>|7w@{Rw?Z_EF}x6!|R`t@HZ8LGMWCf&CA
z7yszg$>y1Dx%fTXdzfGLFOAUr!E%@%l-g?`FUNxhyXTmnM246@=EiKH9an+6B2sgk
zWGwUzkNm~GyW$`9Q3(?<Z)8eeWner&{e3(*h(~1IZumzk-o3-tnctMAlj6nGXh|l$
z-5WGfrKCz(!ijpPXJUY<P>0rlrqmn`d$a=N4rl)K%pwx8V19}in5IA<Vyb={&k{Ub
zbI+mvkD6Pff7YoIYTVO{dwQXz>hxXywt9m;b&?DwBVN_JCT$~>f%KijiBsP)1YXmx
zq$n`#4aQ`ftJ5xDaIh3wdZDGLwR;|2f<Iiqb(z>VRHZc;jm&)PtEy^{e|MTm{h@yV
zCPI1_(r!cz-JAbtRs-`NeZJr{CK#yMrZJV_S2U=*p}eI(lcd9o&TRp%P;GE|<3G?C
zNyoJ7yQMd+=CC_v$sV;o=9!pNQUE}l49#exChw&jI{>Em+Ebla?V<ValHQ>?!k(Bp
z_0&xw1O2xw$04vW{~c7#KV+I|{u~!h_znJ6_qVJ2)#Gz|Rc};}t6$3(>fKSHba7BV
zx+s+^=4q#}w|&8F9i9}9j?H_1I6kdk9Pd<*N)0^s2G{FrJi2QJ=-%BR8S~I-eDN^p
z_IO6kOM0e|Ip!$R0+P^&{z|M7{U`<PyW!x0&Wkw<w2)VVx@q=TO-fOVbwM^=8p(Iw
zK}xm3m4^x+P|N1O#_aBL(8GZqb?>?)iASkHKlP%y?`Cz{8T8bU8JyyAtxG2FwdS-q
z1AsIIi48qe-gWzYlBV1x2_Tw$4%+ecC}xN^Xu|y-x$hV4xMl9w-a)U4gJH3kn+;8l
zbexnMblXrOY?M#nX5e8I+ovXdwhxB?7?bRkil0U7s*`$q?%wiHdL{MEed0Fhulcm0
z8c;ur@%SN*`$#%LgB`E)zf}B!>zBG$e5CsvlErLfL0ZLUX@CzA&SlKdL1q_RvT6=Z
zuNQHsIeKr$b!;vPRFKCq>e0*Nf$hXJ<{vJ4wC@)68<usv{@y~MIc9z+7X}b-CqRlo
z%`L_pcYMip7&{MqISUq~Hl;fB{bCe;y8x5!`#>xu3rw)^p*DzE>=$z03ErWr_(s1?
z9F9>)5{ZZ>BN=|&pBR)X4~Bv$<L<eO$DIL9=@O`F6x*u`SP(buq@OpaWIVYP)Y`&!
z(&v+Y_xr@+umot1P9y(IbTs#3iX>yAI=4q=o6RfGBH=ftNNoW!SR9Xgd?e{cJszC!
zh=~vfrO=Kq&7lQw#y!v&=2|v{9$$HJb9C$;6Uu*KA1=lNauj1%J`egmAiE3x!H@>{
zx*!YSGrp0ps5W~r(%*4UE($JOAX)RIKdxVW?IztzIhwfm#!W_A^6WX)5~K!g`;{Bu
zy~N)O!gshxm=+}<vOg}EBH;rtZ1yY7VdC$9>SW4WYLHaP-9`pi`3Ey@v!J6Q;k^XU
z2i<Ah+a8SUd9g?Scp%mG2B5IomcSUM(2py*!zY3XTRv}zsAlQvwlkQysi<;<%;N|5
zdkQQ&1)81VX@;kkYZA0I(VD`!;5^uL=X^K;X6`^Ge4h^a)1==AL|xE%E`bzs)H6^S
zX+z}3AIl!fg2##k<l#^58siw-A(BX@omemE$sa0%fnAwH$b=qLN9LCdp)UvIuGy6V
z`k|6~jG?t9*O~$9F}F_#L;$lOqjWPCa?da=y_mZ&_nEn&5|3R7bqL+jqSM}Nw|NZh
z2_Lj(tA#1>MdqiMjQL82{tts5+{?*CPffoy1}W3Ogji_^8`Mvq|GnJk^Y0;O)PJR`
zrC|Omn*SnN81rA*{I^YgQR@Vc)DA;qhl+RTB8tD`rQ<57+iSjS8y(OPO>(;+lIWy-
zaYSu)lHSJX`m)bI@7>RbOZ$^I<N6Z+ZkXcqc@o>xLNL(x?cgK+WrG%)5)Ew{)5wQ>
zYi{@+e7EM;H}fA+Z-jPE&3|9be?;sZ6J{l<jwm>y_=uq*PKcn{{I_TR+cp0&tw+S6
z`R~iW2m{BfSvR=*4Er%A#Qjjl?ik`u{@gW3NBrt>LPNNWyL??<b`#+F%N}?g^S8en
zx9fKUMw8s=S$y9;W*ECXc%a3&oQ!(2hXG$Xt!8b^rFIQ8o=<p1b_cCvIYNy(|Jye-
z;X^z+!#l%c^=_F%F^~*yYu03pzy+rE>H4_VKVa-~$``@(`g|LI`02LOyzK&yTyHZr
zo*tWHBZV455g5!=<~Gjx--M>dKX#<x2|7KIK2D_dLw;*#-YyJ>N4NNq+|JH~sYD&~
z1C`o?_O;CNs(XGp!lAwDHR`e>SA%myofc>SSCieOOM|{{9wnCzLc-S_L%T}J>tn{}
zb_LK8Mr{7wd*HwHu4A~sS?z&;jWNa}qDpzX=GQf~+`Vrw&m}9?Yu<0yM()QMW2#>B
zp^pys%@VcBS694H-*`ITu#?|pYrbJ%JdAG`+c(txhEaXPNWR(S{$`i^n_azcvf$rj
z!M_=Dp@%QrtidO-{6Wp$(KaIx+3UOJ0k`~BgZEc%;Hzx;*WqL|q*L_O_Wl){{WTem
zj;`euZ}eB*XkIfz9rlSD;F5Po<JNiej$bF^*#S=cpw((7M|=eDn>Pd5GV?$aIc^gV
zKtF)P=})^z2*83Q|K+}9pu>9XcA9?kz|0RGn)&MoH*5}@v*tsY8Q`7W;e@GjLoQC}
z53l*K$84M7#cBXWy9(!*u^G2}qUH{g+2v@!hx%Yv=hBI}9QNg)+uci={r1ehlch{{
zl1>b%PItTC<iEmI+bzao%Rb9CC%FIA2Dp76GiZ%t0<>{C8SgW<MfVFKMy8YGG=ABk
ze`VR}PjWZ7rQZxWdk<(B0xtZu$a>Nr8brtU|5#))BqSKn!u4<YjvLDMF)3E<k6kUQ
zW0+w>nTe#sP@II-L_ly<DdNuI@!k#EJB>YN%*<_SC1XN8d+Aqy$i%A+-e-qtE)4sV
zRmVIqrgLzWT(G?-*bn||Ub}12+*R)PU6+X}X#;wEdO^2Fi!Q1M{)gpGL^BTuJz(xJ
z8eNx*(GuUhzlOM&C6;t$@?<bHrw~kge2oTr)D@E+?dIqftYLFZ#04k_^}wOQ@fO$l
zL32#%&HAW9Y%LbsP&qr~<Y?DJl-G8431-lX3`->3k%1g9OW-rn8_1|zR0<s3mqvXb
zvLCZzpa)SG9E1UYo|8&$^9Kwj_2w%4F~-oCU+cDnfU`ses~wmW99vS$P*j4|rpLH7
zT-@`LeCiFZ?N8He3GxPT1Kqm`@n8%>rS5eX9E#x<^4^<vnxpQxbI0QXAu3{_?p4<i
zd(4_3+*!i-3!}9jreIW^ejBU7N>!dx8#_8+22I|ITvh}ny6OdqQM*_y$3ihD8`%2L
z8*fPAc_NJE-jF}c<{ZgclXPl~3?XXAC`;L*Rt{@P<b=17A?~Vq*JTlJLIH&sq-`iC
zzHNc*_-`>Y+}3#NJ_aN2Xdq_cYXMxH((D0$#P(%kkp=HbwSNy@l=s*aF#i=23VUzo
zH0bZh;0ApbItn%eN)R;!<OD;*P~n=g2O4?{`q3FYP)Il7OG4xPI#~@lK)8$*d_e9d
zHzK%x7D-zW!P7oIF@!jDs0u2L0=o)G`9MO_<#9e3U>1=GpKp=Pcb!PZfu6T}uo5P#
z2=I0f5LP<bKP*y2zVAha=-IJpW+6p_+~M2J3j_Glvb)v6>NF?LpPo0y{sOm!pgmx}
zhY)}aIQ}`4?Pli+<8Se3z$JytZ}qw?T^!-!x*qYB-~wF92G+e{puDjsoAA+|)lATX
zt#$z@rdQ!H<P*qLW81}NXZcTC+8FbM<q#SSb>vZ<!Att7OP;Gzw!u+&Z14V!?VMJw
zam$mnKm9^-NKQ8t(<fKCGxQms$I&233L*|-(5B*aZrdZQyZm$$m1p0<MK>u8?i!Qf
z&<b$cgVy8@*V6@D9L&Q$PHuZ}C%+uMFx20P*0)qftvPK7j$vG5FA7vp@<5h0R{M;>
z1oM)z(ww%oZ9otjfz3ld9+mtMt<J0)KM2xxRYX)I9l7qUDXV<82IlQxu#77V9omKL
zC}AdDkfh-Uu_Ffqpp<5N@Nk67fdVJS6iN0zwk<>0aL)=8k*MULY=B^KFy-IVM)xr|
zNr@|hUl8R_%!Qx0vvlTuo%8W+$$(gJX4)`V)AW6W_bq-nbHC1I;d!KL=u-!LGxv+{
zgmqM?;X-ZzRa{<LIKRAfmr66h<H#i>ceyQXe!Ajx&l&6=kEBia9DI|_axaSZ2)j2P
z#xX<N7oJ>q61qkAXsFU|ziDND=B6cO5Jt}rw)3IhK-}1_Sv=Z4NvKOyw%pnYj$6V4
z>phW`*PVWHNK(T4SRYDx1u<7p&55wGZ=3CtByP*34DJ?a;a?0tWa;Oq>We#bFH8_&
zLWmJso)+H|B;*`Bic;{H+r6OTg_M>@7QNT6jynRyEum!%y>{8WCM?(kL{iuh;#{EE
z<#0eudYcKgkL5|CSn#;^VlM>eqhxo4)swv|zu$($kL(Hbk$TWvxG`K-PKe8wqJP7q
zjls+t^ZH|Q>d(ok6*^mJ8TtERWUHAUmH`tMg?g&qLBa1LG%`9f_aXC6%~1=Aas-QG
zvWnu%F}cgwW{}8D$uAp+N5|_I8!WzI)>fJ3Vn@Mdnwx;9SnbPg+Qc6mSh<nqli}?A
z!-d(Q;V^FR*&c`D?a5-It|+Ih0RG}Kel%o^1jXZ7hR?0xI<t4f4g6W3;fZBYu~~Ps
zPy$;$P;zAUEU<YSlQw2@-4VI?NQ&IW=3`6fn@O{0aiT%Edr+2S-XB@?mHtpjTDW^M
zUrMq4G%I1GR_5$Nc*-`|-)&b+Q#I-aAM_mcZBryL;L_aGDkQF#a9?d*3t||L3y~|o
zZ46vsD){Bpv8b1RC}>eSwQ**Fky0r;K=;YQ`hbn@!7i<h%*j+4TXrZj2BxADfRnk0
zp_?|hY{R}+6fMQLvnC?!v2vsf+HhvdeCN1%4ND1wj4Xwm`0_z*-MFD9rZcB3P(;iS
zYjh#<7qr~Qhw04CLhv%UbP5fSG$xm7(pZJ?ogF@r^#^_}%z%{fNy%}bB(;gJdhYr^
zu+~d#4+CqFgmmcz1BP~zhOFAf$O*v${amP@hWR%W@|ZK3T>7Q3J!_8GPW!^Mtrx12
zX&XD2g!s4>ckjhes-YPhGi*!1m4&vx88B9|s}mIOCRN4zm@5bnI}X;<ntSQ>^<y!>
zWmhC<S@TrBjE6A!we5k^oDa9oAbwMix~$q0SC2Le5Mx%bqM%Xw%G*#VUBPgYJtJFv
z^a7QvB``%fI~3Vm`JhqVWAPD_$H3YN7!<n=!rhaCy&p5`<^>)lt^z`7I|~r<W3vx^
zAu!h14s4xnri6bd{QHXTl&j0I`P!gwpt$eM;$#5ORD%*=X%nfG?sn}LB%E+MYiG^H
zj~ob|?f1-*Ss@hb+IIO?LSy6RWS6aaD9=s1*1Ya_$CEY$<``0;eKTR&sB5W^d;7x{
z5q5^DpP`tQ+SM42y+XB!t56k4grW_eCzst;)d@BYO0Nk|X6{|a=-%FMh$da#uD#sx
z;{Y}AurGi=rs#Z3ax{}M_2hroS+E;lT^XpdL`HK2k%D324kt{{c%PlN`;>l;XcE4x
ze&oX83wHkrT6T}NY4zf8f~9q({iBrDFB-V`q_BG8vcYqCIvn_->WPa6&tw#&rstn9
zJN;b7+Ny?w7ic^6s^}y+R6#v)>EO9&O;2oL{fy%F&BYJ|ph(CpVHd!fC*jhsTdXN=
zv8s5lx?jH7DOW2yqzK-w?;l?@j?ed?N!ZgOM~J-ZBa#1H(DleT=6FDNTOxO>SpC>n
zREpc8$m{NhgkXndof1K955!odpTLIhp*iYXO$Cm{)xh#54!O766%jt&b^F?ogAG07
zp^O+;w!b)l)BSUhOF<a(Gu(WZR^z;RVz+~&dSazy3s4)hUdL<><lDN?g>s`Mvdqo@
z9*nxzL?4B+k%Lj!d|)~ziN^s|6W^zs%L_!P><zd3z@B1CMiv~+5v1s1WT$^O;%h5w
zV#%L>PW&$tY8J&Z)6k~&CkcC8AsVTr5D?V`*QGVYgM)MW2{fDTIq_XX26PD`h7owS
zjAz;}M3_oON7l?r%>Ky2w>WD!xzeE5)!kiOO?tgO)Mon^4?7puiieEg93yF9-~PTx
z*-_In*l$EXIGGmUfJ&_KKSUF_O6&TG<zL<isy%3=#xF{X=Fqn8lUfE3PF{ppUkq;X
zQ(%SUNOsWxf&qKEnOaJqd)1A5venipL-Cy=B5r%zG+$22us}d0AXfv=jMMLJs|ume
zBcoZv++^1BP)yUj?}I1lYq2P<$bzzFjTA4$KHdp2FOm)s3?4q{2n+JCUiPWrLWz=2
zvJ8V<<VSu$Rx8CaAu-)kp=#uF)hbtPlWCWFC?f+-zuUJ%BP9l6nnh+8;-uSjL$j81
zHD;yJ@EQJ`Tk`A7{t$6uDX2qx?2Y}r!EVc1Hj;3Le_P_n566xo!O?OSwDzZ9vm~el
zqSsa>Gc(h@ePk1Gw}DP4#owVLO=+%@0KfzeBmx}CS&j?G)#w7I?e+bJV>ya5we)yZ
zn)MCvwe0)i%o5aQZ;P{2dpA=0S@s7i!8%TygK)_-?Rr4p@i1x*?X&&s8sgK&#<Y_z
zV?orpFAk<PFNN*k(Ou2xjy3r`cZix|r`RFOcM_bkZtA|-<zO1NDfc3jvr?2FqN1me
z`T9E=^lweS@{Z^3yDY=C^S6f$rn>+siKTro?_J;g!9B4;$0In%_5E`KrQCqx0$Lfj
z7g^IU1IGtSi*RMI<6tVNQREb{ddUxN4%k)_7GW~HHMS^)+wxO0KcEn}ps*cG*E~9L
zFTP-l1Z1sYwU8`Yi$tYtC*5R6?;Qb-{e+Vke8#J<q#uMHl8BT7nXV7fWvl6IjSF-+
zi>B}1*I=OA3&vo-+Gh_<ZYh~}+p{1j3dgU$o;5+X)}&XXIA##VIzu@FBpSdK3A+xw
z2EEz(J~3pB7DDuhGWIXJNr9yw3>|1Z;+1wwj#kZi_RW^h4hs9F`o(UUP+|FN*-*g8
z=LhA6RoqyY0)7w^RA_Yi&dNF-S<EPpZJ0I5lhl$Y_6d;RW(N8bme4xDl__+&H4VsW
z9{^rTkwE4T^eAeQM7{F*mc&uQSgiV`0cFwG`=7N5WZ>#6d5S>uEaA80-3$jHZtn}~
z#kky~w8{hnffq(&=(Vwd12>pboEl7fG{n?MA!dz@2fcQVN{(c*Wcq((72)ln7t!IR
zYB=+vh2ZKUv4zcYx))%b#6z7PX*V%V^g};~`3+!LEMGInaL<}Z_nV^5CljrGez4wJ
zW_8srmj-tVd?8@g$lGk|sCx-12EICpHFWx^M^~5Z$({NIo2c7L!lp@X2ypmU{}a+j
zrY+=0H;J$|uzIIRm#wiHKhd6MMdH5e*;|4QM2E`Z+i2z1_!eLf=Fkw!+35>|dv)z~
zxXx9FJt;4oO~r*h*cZ-e@xls+#mVG?ZRY6hT{qzg#=YhcQn-g^S6oi*w*&m-#Z$h2
zZ9O<Ea#dy=_LD!@conx5oumZF`(juKH%a(Fae3c>xl;YZzk<M}Ux8(a3=c9&#U2TA
z&_$^pWS;ad&Ah-r&CT1lMmrH`d{budV9056G|1{&Q^F<30d?V}1`_M5vrxH67q!$f
zd%HG-U}`6h0qPP>DKa%C1MFU33Fp~OxK`Y@gqCGK>Z1q(d`*SzdY4q&5ExUdx}YGt
z+<CQc-+~Xgk1YW*ZjlC5=48i@yU0;<7mgO}3ORZ2tguYu4R72yiR}Y?g6tSC978OZ
z_=UN4C(Yhh>knp%Z<Calt5<pYo$i(MVsb<2CJ+rEPM$0!`}S6^_6OsJ1s$g)aln-E
zy~ip-_9ZMBl@aySwIjqY#6kN)6xSC6C;R5NqvnI<{w4P-$Opvmk|-)>6gb6JLl28Y
zIT8P=bs4jMOYR(D!NrQ~7{j2K;Ts=s4}#O%hBZpN@GwN$eQ&&H_%ya_EB7sfi!Ha1
z>bViV1_y%#n=)lvDYn6@k|WBDpJ(nFwp1hc+=YX@d%lMmu6t(twI)Rd8gcuhhPJEY
zB6P^=bXM#q)~$<eq}j@u-I|CZ$k^ThcK7~gQ+Cg+G?9p2e{npp>Y8p+M$7`7ZYD14
zBS4y3JMMo!eo(J?nLVLD5Kbr-2A;N5mnKz;sCQ(G8|szAZcgQr)nIz-4Z~XU_yrtO
z${G8{IseK_@(4DVp$=0^7NoUFEXqQAHVsQG29e*uU3L$qeqm?+r;A(bA*k%^s{mju
z4q%7gKs(g7_zQl?*X(`_Zm!jIxND%npwl%pT;FRprObZ0Qb;?1bG;fX_3)D$zVNCi
zb2}XPVI<A~DZCYUEer`{$I9!ZJ}I}s@j$K@8(9laa)p(GbFB$v_c`;etpsWCdlNd8
zAm3pR|1MB}T18~0)i^*TiNjJM=F!k8EzzZ}WKh|>Ue+|giYKH+S0DxPjg(MJtats3
zwAAY&*M;;VrzzGR3RWMwaN+4va^>Z|^*~IH@m|zO6ersbJ87s`-8&&F%E*3%pAv^+
zgZGBIS;wCZP>WU^G`X`kj^T+622%({x>0Y0ftzG;7qdF{p7E&D68jf}K6P_|FcD@H
z6W57+!9|XThTPHi(Yi$&dd}X0^68{+?{mMH60-9^OC}RX5s5N^tZ8NQT)sb&^H^)#
z3o76&(Ht#u;bMoFmyyW2FU)Uex$9a}jj^l29-&I_T%ewB%q``J!MLwv!?o}mZCm(;
zfe<TWJCiKlED7oML>11}ta&{@G+ePZf(lT8Zu8N<hvY2LUJ(9c^Zq*349~+-Ec^g%
z0xUcUH(NDr+e&VOb-*IoWlWmnNQ*gJ0jN2=BfH7Ur@CUO15p5?FZ&{~t~nOLfz`3f
z?hC^d+TWxXwjiRK7B3JPYOOi)7TWx7tmK70=%|lAV;>#)F&RQM?~O{uUKY|Rd2li*
zc@|qFc{*~^PIEaZBkl_uBjn;*7Qimt1s4sU2)2`y^`mv$xgfEg+-Cd}hAYYB`kJj9
z?M3IF@jcwZ3usXs+iC4688h&vCy}M5iPYrf2^viGcjt8m7S^YZj+pJGsS7t<(S-#s
zbyREzZPq53zcol1Ad!e9_CoN?79#0Fs9JIp)c7EHiy+ndjU?71;?U0SQa>P-o_@oF
zHt^ty?F*qoxy13nEeYC=>?z($0Zwb)2ktX^@@v661E81fE^OMI70tH)>DODILv;)@
zN+~v$H58<Mk$%1)*YKUez<P4|xYcezv>37$5igI}np~3{iA*!e@4~JWVqMRvVNj7>
zd&2niz0_@94{)PgbQ90QheynUq<vv)TM5(yIdqNH2k+lx{^C;;wz3A21WXy<Sgz6>
zc=<U_A*I%>lFt*Z?ZfHxg06acL>CSwl;?$&O<UB}O&A&&^g!GfV?)(CS2ae)g1hiw
zQCFAa(8xrB18SFuu|;B)AKsn8UZ-LqaitByVS2qM<TDo4HR=~rzp@18u{7yPG+1r%
zVB1q=Nk+O9fmU@<ct^mt`^Bzq{1Db*d4Bll0v#}&eaxOdmdJ*D%P#6@Fjh-eNg?{N
zH<uQ0pkO6V$7O!+C_{5TOvM08hd7%Hz)sq6Ak%dYILH4^H~2UG%dhz@zvOo=#j$0}
zdvet$2+%=h&;@4+pq`v>1e?=Yi(s<?MXk6GUpVDGy*AvGhuh9^`VE>DZH!rESC>xe
z84VXanazMKU(R#Ckm<f_j4+3?RpwKnPLPIl<pSm%7v=u4PGdS^j44-v9E5)EIqT;=
zzFQDHKz_RUAj_v+%x2<Sw#`_?=MA(KZ)mfNTC{Rzf1EpdM*{MZn(vzaxqK8rgOG*d
z;#ikgKC3u(#2B`ZB-kbJfg!d;?39ECz&7S*Xp9P**$CDrcf&y+n?dG9%BnXAGHqQV
z6J`8!V1wFmEIsQE$q%+0uA|zt<590BeKklmEftE=3jFM>A@shGxP=BnqM)pK;qNiF
zs}<4PbxPED0g1iOt|NGfD=SHuW75KYG8`UW94PNpdUoB9QybSD!OP`ZhGIYY?Yxkv
zEVMI6@wHn(Ss=f4EwlJNXWoDjG~&^{M8pyj(S-}@3^-iCg;kqrf9AHfEg#yYAW|Xn
zmdie&1{0vnD1bV-ARh)xt)jyQ-E*FuWf#|K8x%>;uNGu%iR)D!^2TUI2I1Rezz~Sq
zDOpBUxhad-L&0FTU4z4vE#b1*i=_r_VPM@uABZjU5?PKE$$Rbf#dN|{H_#tDc;L@^
zV2Q0wgq;|^v$<Lc&_s}bAE&xjN408&e0YT1zQo4jc3%F2LRC_`l$u)5iZB{l8q~Go
z%-eWox12m89A^RnzS{(lj5w3kt8GEqZnZ9)dYzSs?lp^M9Z1<=nD&J@e5nV&!*Yu9
z!>4-<gL@`lbceY}qO4{`;(xbksdm`aLAz=wv2drUV{MWXNZ^qc%w>1Ke!3sn6j>^u
z8d`CPo#n=!0SD&5iFW91uo~No`ywAtYtRoKT$uwOXDfJc&Y=N%EY7N6IAP3X3yLI%
zaNRzlMaY(S`x3|07V((EAA91FBfaz8X3zB<8(17$<vn8;C2R~lO)r$)9LGzuith^@
zp76p44A|4JA-u1tCVY&63rMxS+^FddL@wF`XD|R4`jUkFy9hKum)(Bb1uVQkN%$+2
zBw(6z!0*Qo4fo4iC#Y`vZLymmKTKego#wqcqn2j%hcwWaIK*SonU|(Q&j|}UwtevO
zzqY8_xRRVG1Joz3p13pU#S<-1Xgntp(GzpuUy-d#D_n3NBQO|rc;&JXQ@^nESvQf+
zJR9i?Mg|`2!pB-j%i;30sCp7E)CFfi;EgMG`_?sEO6{b;;v%rZl0wd;NuCwbMuO2D
zXZUHGb&_X&037g`6>z^N{Q$07USdp96#HE=k0=GAWS1ELBsV2zY=}OQir{yDU~O)}
zy@f-Eg_)ciqH^_=)N_D2QfUi?B@C=u?U=j_p1*Sha~4crU!!dBT2xxWI~i~IP9gz%
z{p5H+%;WpF*8g@qV43*Qo*Y+-Lg|*4UK}~p;ZHKc5MHRTf+^dvK#!0~5Goci>37Za
z3!etl(Kk@d#u8tHL$c@_otuyYs(*Kb5E=}D+s;)^<>|7K8q*_@7|=2%Th!4@d+KHL
z(kyk84Vox$r1&uu5o!t<hZ7fV$XWX`+hR~0;(6O-0)il7x%&)LQ8QPy7CipzCExt_
zq0t2Nh<u)%8j(zTyb&r#R2C&Gt3937293r(#9qUA*>r+>^HXB6wkC-cI@@^c#pWnb
z2G>Vnv}aYw)n;2!!e}HF9Kwb-_t{$YK;eNp&OM#`6nz1?fY7pR*cpkJ0#U?QB%&(Z
z$+_#Mo=fCd-JgUUlUNBI*>G3#Y`LV?WGrEByQ9|RPS8A?k%}k1r2-xAY_9**@Grwh
z;(V<bqZhL4U*Hsq#>FhQ+t;4@Yzyq33^a@#<EMrHM8%{=tc$P-0#4?r<u%d8z_nhq
z(=K{Tb816c(1CNt+1#!{=<WqOgrC_T=XRgY?2mJR-x>a#i^$pP;mt1_@B0jY&LQYL
z!=H2Oj9}U>(5dpnJ5q58%nz@7$e?D7^;k@AopjT_2&d%bL1`dx71L|2&DXqP@|pW}
zE(#1`Hvk}3Or!!-In#E=hAx0fc4!BKUXwjgQowC)7_0l@!S|ZZ9M|gux_w0|xJ3l$
z2Pqq-E{OBYhdvkE67AUF*i(5He#|~{)MeQatzZ^Js9MR!PFFIpmKp8!U^EMcXfRmt
zOoBAv8N`#ikVt)#_yVOFUM60AawNa+hgPf5fwP_$f*TyiV{m$h?oewWTp?Zqubi;P
zYATYBvrp-Ij4nD_GIkb!EM3`YyoIk#KWDAnwg;nX5Yo&V)A5CS<w~+#Ht5SaSlKC<
z<vQ+|%d!uiD$xVFRDx@BOwIJ&`IA5sxF@gZmJk;SbMXksH+xqi&NSz^7<OauI<X!z
z;RS4mLu@nSqY1}}6!_Wh#nVV&<9O7BxN)o+wB^XKH&u)}Z~+Pvy$B=m8J4U9LWuO;
zPc!aHbLbWS%7D;$db^>U+u3bB<=GTGKop4e9hzun!6yNrAIg@&`ncOy>Ui*_nYxLP
zHb9)kY0>pM^F?Fz@3Ka9x^C<{zIzIzR`6^|2Yx6^pu)a?&kuNSb~PqbxU+Lu$%^IJ
zxKm(vVg|FC4cCHe&s#7!RM))UA6$!}K{zp2#19PK?UW%y-=AhU`5%Hh77wMX*!O;#
zna1p-^FQSFlCBc;Uh8Jw4;=;`zO~i!ihT&?b{0IHtJ$5Y-{;~qh13vk+;*L7VMv`8
zlV80nAzlC_R8H*CxUPOd)l@jEVZ&4g3D;0j9i!$@z~d{hG@QmPT;a(Qf9#Fw++*=5
z1}BrTxYJTo-s6_KaPnpG6!-cT_vMO?WKfX~@0lFdbJ)I|*-P!r9#M-mh<#)|$!OAV
zomu3Hwp<?*ghJXNk)-=EL?D_A`HSc^^p)d$h<q(cwd6~|fSFv`&1{runM;mvq1=S!
zt&)I*foCtQW2TGP5cnOU9P)RJHEn7Txl4NhZiaA<TyS-VS1u(4(UG87imWD4)j~X`
z;;kK}cm)f1()gMDJ%_Y(pB=VUd>`Qr#Ji<wS%gu1WdqE0<h1Y)j!5SsW%LJqa-R1I
zN5o&8VH{d&ivQ(Sf+lUxBmGX%seyhD$BAMR`N5je!B>@kob&L{tjnvRi0x0N5<Qz?
zZu+_zv{QkzJCbKpoUI%SubtYwXRZ0cujZJYjwC{$)|`_eg0ubF<FFb`RLG@&5%8WD
ziunXB=4QbBI%#P6jWWz+TV449`yVoWxb9oV<ht)|fzq~ha==|cKEBy>LE+&7cat_p
zosk?$<}7s+7b?@~FvWh<!T6+a`=!NzjuDwOMiPL5;LN86p*&5P7XRWRl-0skPA4$Z
zMk-0T&^DRWwj_Fj_={qCSO76V&c9t~Qj@To682bD#rYDOvi7H>%rHa8%Xm6;+&2Ft
zAQ5Z0Js-N*nMFP#w1jMj4F{%z3tHidHFvt|jyXJ3z?WPMm5N>pGPF3FH{@gdleKnm
zY7)nJc=v2=A?9BMaW4*1#1@@TGal=k-xI47j)~e;zMF1ZN!lS?jo6tnn!hq$)6S^r
zec^(l)|{S<#d}RFIw868L8i%$8^FE$#mG@Pt^0wf36i2#abM1MLA{n3AKI+JM;GMq
zt%w0Cdv4>V$>VVl*3|{uOalnrdB9_0*wDk?VA~<o4`E*jaT#FEAVRtD*s)hVj|W5b
z1WzILf^-6Ai?^+txU%!f&Ev&7gm&(_=4_;gu6ABy)*2{F-lsPzTykskMN49>m`#CT
z1*`kV<)g2Ky#}A_Uay<Pt$~DsypxOq_Ki83@Mi1`CSdVr9H>6NMNlZ-G>RxCvH++k
zPxh<F4eK^Cf-{Vb^WuN<Z4Uj$;MBB;wk6zG$^!eupi=_9$#~!_?YjLFAlX(E$;vGe
zf}r=c!r4WmuuYB`$K^`-2v|T+)fnk3=#N?byP-42rd>GJZ`oj3I!eUw+75vVI<WK7
zT=5&-cEaBaxeYFKV;8V|OM<j*Z5>jkZ6mPH+_mB^VVy&YUmS;1xwA`np>)%(cH~zq
zy~G&x*rxk(HtT-itSWb7$1Dog<kS1OcoR2!!9Tc7?lcp><D%vWCje7@7r&oysqER+
z-Pqa`<Fishb69CtiC5b_spZyYmv-Zwm82MbI<91pC~0aE#LBkzhSE+vWug5s#wkx0
z0dPDUn+ucz$GHa%O=LZ6>5F@yEMuaHQREsw!7W$ZLP<F{NZc!zZSNWx*s!XEs+-Ew
zY>(r<*jL5+QK@`%5!LtVM|5<Hg=n{OR6p4-`FGb=f^S9EjHS|{_1O@q$Jr!DHvI$X
zjz#3I-2CK=6If<HiJ6A}03UtsAz|{#MX!MF=)&cj;0VWcANKx2lEf-2ha}ykX)*4*
zVApyY<YHa2@*Xvy%zHnQwsyH}_O1s^969@AEAMoYp{bYJJ(b?B(IxZlt1i-{bSRVA
zfMW}3aTE;Kp(bzL`T$*c?;IaupI6S1r5s4lhCRfifMfyOtuVPqpbRA~n>>TZwogv_
z#Z)Ar3;P>^bvbUKOJ`T$#E#?fW#FZ1z*-H?M|HB6MYLp~ncGv%uGo9vE;iJG_?WKe
zz1%=2HOkSa`n|BB#u3x1>q2Ukod8xeP-0}pg`1<9T(Fn&D53=?u@l~!t{5FO3n9D;
zgy**r*Z3lEJr}FQretm*Euae)&>FO3sYG#X>(=ERsyh9KrMpo_BK5YVZM$A%R>*^6
zLv3g3Xn}zP^V(0tK{6&@qAi@Ii~mS}y*riZ&O0vp-w8o)4Bl2GEXA4ITi+|}^t~^n
z9>IkV{$m6DxzM&wB>>(o5>-dh?};yKjjgTqEz^;zq`cR4iJFq=(>+gPH7^JEHXyP~
zG1BV}Rj?U)4D6iR1KBwGaxU%J;AuU`EyhkpBe^#`*o?0wN{EA0j>ha#Kl>*t#>?Gj
zfAwK39k_~Ga^pf@qeB^wE)hgRwe}GXhy5${%NX-gn*hOL_%04yVW^^f4_?YUK804%
z*i+2h<-kXFGQTZqBiWe_Q|@Dy+Y-cJxtcBj`h~qvp=;go@s2K7j1pV*Yg?``vGVY$
zSxIv=x$9dm1()3;@lk{1`tCu7(%0ttp~IL#Ipd?jgJ2)JO%n*zY)~c+6y%DJa3+Gu
z!6(9b&{26u&_Lg0TFt&usSA3+3?)FeQ)yLIv_?{52Z1oX+mNfD{Wkxt?0A!9Y-%?~
zV>7-U{N%70_CPAXXPd^S*}GDdnVDhY(wGDhB`NcYBLyhHJUc0vF2SEpeOPt2isuP|
zuVpiL%lFf79jDXgC82PbJK<QE`g99ZfHTinf?#!=<jY!`4ElQ#0;!vbSzp@<_#9+X
zq%Zj?w1+cFxbPWA_{7?FTU};g#u9vy<&D?YCLyp@z8Gs$|6*?dD{1ja!Kc%>d5hGp
zQisA9$v10nCkE_h+@eB;MHbuXD27(z&?&dwq2!UTlPx8Jbd3k%G0Y(;_u~f}I^GE{
zWqjZxWNmEnueS2&loFN|z!M{uHj<4Ez^&4=^DP>%`q^*&p7I;PSN(>nT4x-eZWs~d
ziuBFWN>osWdT9ebHzl~UxB+5R@cF}U9)Op)@*~tT#Z<1M$Wq4Ck8<bb0iz0_9&daJ
zcD3^0P0ncAUBohpXI2a}vp--SVq?R)w@qZr<G=QV(r@2Idk~X|Ya7BqCth-<>&nf>
zy*#(Y0=C3mSE`Cg6AgWBaSeSuvp>$QaTPl`ok@$l{sp`6)|A4As*O}OVvCE^E9-G6
z2gyUF@-4(S8!Zl8<2Zm{k$s815Oe+Hoa=HwwP(S{;5Ot=Y_sB#X<-}gnD(jLzo&c)
zGJ0Bn71sUO9gu+&AzY-7@I_)B_}E}D4DOVge4BmzZ9s5>f;0Q$JeYElomP@rhD14F
z>wS~6!XyR%vPaFuM-h!*L7gnJp0JA|l)e_#HjvcVIkP!vy37Ed8D2bsHz-H!kptiY
z5_J3SJcJ^@DD`T(NylrGqph=saqK*<?AA+6AoGAbg}K->+@F#CO{rZPp4Da}Bm=VD
z-FO!GoUyF<%xZ4WoL*67mQf3851>VO?tW){;ZHZwh%BMJ61u`w-X1u&VxQo{Wfe5N
zxeWo1vOVI-c?1SH{rjZZCY4UhXJ!!tCkL30(IVmTnf#?ixp?4IC1RD{X(j^y5klh8
zCiMoF&0aw=TU%i8v3V|XUYRi)m^@+wS7&c)FI#uO_*7Q=-b-5OVhQl3(kCYW@*C&w
z9<mYlr+@j(|698(oYa>ag+imSTrHHZmZQRMZMjw`)S~5bp-?wJqh8T`DpdK!uK6cA
zrUG?(St~483elB$xicu5pC^~x78h+r^zB`7xo!#<%)h2yRH)Z|iSNY{73ovKLbc4@
zmgw_oB)<;}g+nfL6LB-9R+)RRRd{%K8!ev{3MY{?ylX~zz+H1Iv*Pl3p)e|Ph234Q
zOg}3${z<faS}633d-75Gs18f1p*D`G#e1Gim;e1rQ!l(NEf0!?!g^GlI})>C>(rcC
zD|&rG&Bb4-xiL3n2G}jy_L5>@xk+7|$~sVc->8kPvS~y1s!45J7ccRrMQwe=Qhaf(
z(~g?ohb>brdW=%@xh>MBneMpqxI}C8!2A5QO&=c22WqKJweM;8<vK6jb&=nj7lo)(
zMA0r)jCv8~aZ|JtF&}HUMefwBMYJCAYM=JG0Kd9HslzU{RNm%2YH{1cpzWKVZJS`T
zTg0B-P*V-8{&)HvwP_8^#N^*fq0Eb4-KKxde%zV9zHuLwD{8$5AddM>MPQSlg8nUU
z70rkzMXYW`wZF&zmigZ*dT|Hol>cpV!FN39>PMdP;Tk=aX$wmQUXa=j_eIbdozVtI
z+tki3w}93F(R5Pygcd5)Q#36exH%Mdd5tl^LZi$*7R&*wbRuqzr(2cEuHoGhHPnAm
zLtB^zcCK+tPZh=;+i17GiDld<ax-7}?BiSl+w2kyNBcW}ZX{e|7fVx?-)01>1p0^A
z94-=bbCV*Yr(ub=WS_UBE@+EU6a6Xo__G;ml@E8tZhU2%k0*Cr*`ZN;1XVfaI%*c&
zZhc!Snqr6e$SCxXCRCkL<2!{z9yfoj?9up+8tTnH0mc_DQz<XUgeEYWXt_m*U|ZnR
zV9k?lDP{2YW69yQGyIBxi)$LeMS|dH3m^H_;f&vX6$B1^Ta{x{8KP(hwYw3{UBoAs
z4hU~SV~S;&$?DXoi*^n$oB|jCCs!UA<nD>>VwR7nI7U<D%{k;FbW`LdsxwO5z2;iA
zeGgjoGy7q;P#I%1J2cuOLTy-}ZM!aI;EI}@(~3m^cV%k!U5ODCVaz7}i5aMHSDCSF
zs>_2{;gC0@$(PI>cImEoLhU}51-@KQZPSqf5?Vnl#xei9%is8H*T3<<bpnP?af<bS
z%RAF}ho|?9)3%Dh4cmShYP5CbUh&8^TB!5y8eJ*nDPgj;q6Q0Ix6^H$2_Cb#4czEX
z?n@q03MafR4PG8548{>}L45$sHl<Z8k9c!-?{RkTc-G$>j8$>HHwpdi^NO7?Za$^c
zU*2Wd-sc?$EHX*J=W~~zw~A@(;ZK=CrxBxTLapz)AkN9*Cf_obg1WjTjHzLFVzZb7
zvKxH8JQjW5XTIxF3XltjaT;VlMobFS*NYZ3={)VorA_0Yd6q{JAhOO|B@lWod&G^N
zUdbMrtsMfin||*Ae22U#F^{A|<KB!s0^oHzISYZ*l$iqi)&3dK8EqB0{GmOh=GB*8
zNl{S`B|cb&Hlfx24wSS@*YSO6F9&`r0>8}ykMGdZDP_<ERR&SM=E}#BpiTRRP=MKz
zuVr<Q;ysnA?fC<7(&KHP0?FM0u=@bI0bYV)7;|w;gD`wd<gR9<%1{GBdsl7*gT?qd
ztuuV=FbokX%0!MqomT^XRRdgq#5v@-;o{#dlpl)|fYS`*C-37|kV~e^3Xu7IWC5uw
zfV3u~jX+X9@~~GyhOcppr;J*gm((l>Q1iP|=oH61z*(^%Go>m$9GHP#G7!)886UMh
zKmSb}ClHf0xj_h<(CdAsHyPy0+Z#ohe#Kn@d@{|&LDdTObQ(}E6lmwq%s-X)C8C_o
zq;SYL%UleTVgin^yJ34g{Z=?<a9l6?o3APtSS5AaR>x(_QA9U{_bVWiXADWFH`|1;
z1`PhZ3+6cAa>Z7UiOr<U#3p~Mte5Zj+c}Nbk%_y6M|qcd_scx~MoFM^m)Nh6^2kD!
zCl|}i_EZ_c9cRe`#$NS(e|0$~u0}iqU3X_V7x#<>x_ng6Cfn-W>*DftF?d;J8YGJD
zzhQA6wgoTlGFex#2agd=b(>Ej@55oqU0_k05zgt538?z_?d97d?HpLmeekACATqUe
za^SetE5-!PBln_LY~VVhfA@}YXO-#fFhV{&=5g_fy9Dv@mERCRn!D5Eg62K;2z#CI
zQr!TBed8KUUTjcPRX*Cg2_L;p1#ut|B4G#}>m7HBmd35g#T|7buuDuYG^;|A(E{Ka
z<~>Jk2JFYO=atWUXzvcVhykjPSAw_r0;tu%P66rjx*k@rI%Z;}??t*j420U7u3C8J
zna^B_X)Q+2HARY__IBhBWn{X8y9cBoR(^^RKH$%AM`2UGz~$=CFfRbU8i21;1XXbO
zo)Jq8?~-j?>Hxz{&>`W=Y1vk*3iYx_E$=d3H(w5z&H7f-b>31#l{Vh-`tS1Hdt>jM
zs%0Xo{JYX6ENixY$KvFMS|LZ4o35GXcmSRSqzoWB*ylCBj?}{g<1X`imr#`zlhA#-
zjk}_0fTn<-M8ndmMfX)gU?)T+72+Kxw5z-`j}>OFzgIBzcNHGsTjq5)%McDUm_;Q(
z+v3@sKJd^-xI+?9TfIob^cI&8s_FyRIv?{EoijgFIK;~n|I#ecYRR9S*CoYn4;fDs
zzHfV0dstD7-7pevogn6YG0mU71;}(N0f$Df4j6+)0z}tbsn+L%P#G{a^=*$Q^o|xS
zI(`e-O_&$0jWOp0^y+w9ecSC-nY)Oj#soF)QDcG{_uJ~*Zl7vYcqL@f2cX0wAxm&&
z5yiY7Ijs0t^yN3AIpw);rqSr?b8z?`2xVFZ)yAX1^%g&t9dlIX;Z@h%vPNI7OYS$g
zwvXxEFQW#iE$V$8bVpHM(!<_0QK98+8K|6*isw<hG>5m{A<zWO@#z+iwfdI-oWCpM
zs(xKY8D8AeO_W(fnRO}ifgd-D!;(fqn4-v_l44|^h~vWT3al|gtpsG+ju&{+8rKV7
zsufT<gptN9+~^e(COsQN`cwHrlieGT6qKY$X1*uXO1bU#vZ}@aqNRiTXFVA5G(i0z
zLj@A6-|=SzfdMc3+q~jKlmmrQ?YrX9wCu4u8awTmJ<9-&<gnx=In@SF(%$V6<3`uS
z`w~ddA;Z>32GGNT)YIf&>Kc8^^;&$*#|<y&X##`dCImvS4$A0*#l*uRZmT`KE8|@U
zB|pe$DtOE2B;Ln6#&%Vlfqt~X6`BY5_7U^lhwK`#7azHq(YKjY<UMR22j7@SxCh$a
z=aVr5`2c}Ijj8_HZ5i@P+$sGsxN}S{W&{dhR?K*lW!eqJ+n@J%2JvmxuhY0>83cua
zcrLpk9s_P+Y!r>u_TAwQ=<g~D`gYfLM>rkIgBnAI8_<BioenXgwJ&P_`nUtA#z)ZZ
zQwGz<+ig9dhoX=}1RZ@oN2g&ynaw0ske0?kVYIpD0I=ea%9ts}!ep0`OThymGZ=-&
z>JA^`4}839ANi><1#YG8%GC#IVY?7{IbLnd$^wE>15#^MOPE%e@T`}FI4%nUyxJC0
zqAb)h)9mt^x!P#o$~z5q*t617D@$RzJ}Oh&Rl*8U8;S%7=_+87%~nBLJz|!jaKjgC
z;Vs=B<-!4P9PX$w*!;IbN)MU91KRzLsT`=as5jI#^OmQ-yTyCmc+WzUx;!PjwiXkz
zbhS2^)nu-!z)N3VEj>Wa7_2w<QK;Y0+BC++58U8&5eVWaH7lCV_uX(lRC`XtB(33E
zja6uMUUTtSlqeq+ig{O3;C0Bi9{7DQ8uiW>x+ZTJx7OEo9Mx}_8597O)0h^4Hd!50
zX3zzZU&G}9QmQ^GT44g?cb2ws6^NMYCAW~f*<qM_{Q3(BY_N;BU)-TEF!`MqZy$oE
znuupaF~j&6aCJyPOxKd34zG)ylAx9ftxOLD@SSM*aENOIDia+I)f3eqanDu-QZ>3l
ztDR^S%DCG-D+FR~<SCeAgBm9#;=)^U|DS{9h`vqtEXYTD-}k8DQyw*OrqvFMwF>8l
z-0idqei8gSsBNlnz6E}XwK4{IuZi*kV_u~rQ|=eHqMY%q;v7=%ohYf!8zJ>R;noju
zZgypRsd5h+G9Yn|K@|jUhg)=h_6xI0cG;>zcvoqTBueOmFsXk5ms6F88ePk~A}ldL
zQvJRQTB-tdQu&KllQ7mC6j${YK1L#!Wf&@}-Ry%T<k{_b`5<$X=chcUGc(larnprF
zI|YK(+#Mt`@A5W4Msc>u_sO=DIOipP1ZWaPG%m`Q(HCG)11k5$?w4>^Pt7WWysKeD
z=vBqO!l17_;m`uQh=km5^kYr#xhks$%%($tB{a-OW)m9ku_b+0&b9gSt8CvugFdK<
z2#)c*xnX*Hb>YWNSEsBvK4UEhb9RmXo)xizB9DkBDDU3w3HN4*%=)oAV^Mo(^^1<(
zx!Z&Ih&U2R<Uud8bcY~tL|qshG(bVLaPXa^anVk})`-4RF~jI}FoSN5cZ%+gcg3nN
zHQvi8L@|N_4X48FezdJ69j5ACbkAiz6d!oLt7S(|L|^<!r}VLY!+>9%aLMg5aji`T
z$4khp%gmQ<a)Z?eNQLidHswxKQiIc{sr=P6Cu{_du2vU;b_KLFfkTN77v!b`=zfZ{
z26%JJzfa7ZYNMS9OT}1*ySyV|7swYgF~coTOAjS9g->YU>r5V|xYbMQN-#fb(=Tf!
zt5u_sQUg)N>nOQ{@@jd{%&k-h4#BZ70RF{xWESY_7fh|<37>{&Bg*F5Df>g;jiCL+
zp9dU@cNKpqnj#+|m@Kb@L6EzQZ#)p6OzoGyd4<OAE-s6RjRw$KowY=ma-Cu3#7_V8
z2x@U2<tdZKyC;0pe3jn>kDWc<22c*cyF+tJH+c32WT)Farn=P`7&@}uXGRU(LnKq?
z-@A7#=>Va39?5UI`<SSyAChR3w89k;RPuFHYn$i2!aL0UW66`H<uho;nv;^(REy|f
zmr0KDO>|rG8s|b2jW@wOAF@QUhM_lDzSAw<^WbX_5p(w2Gog<oQd!Z`)}h}%0wce^
z?@eBC%OCQ+Rx~t@!ODf#HA0vXFT%+dBqi@5_h1xWryItg|4lx<4Vj(L(%kBV<v?RT
z?WGRXO)PUghnkTK-GM#gePwn8Yj|SU(BM64@SWgo)l2#EAy~t0*+)9iy^56+6lzIi
z%^%AB(p|}mc&j(hF6kIc8ni>WiRp#vT6%>~u)=4-3g3Nk+MRFL+b>(xb?AFmvx~Y`
zvDb!KDpv3vzJrA9z|r^SZsz)}KJi86kC8fkhHqlQ93$a!$uk0Es!^z$l81cjx=SDW
z$3c;mFJ#P91I?H{rm;Py*F{$18X5`A*E!BN^NBUw+AI-?E^k?yD2x6s=iNuV8{pl(
zt-DJmX+&LoU>P)#7o`F;$Ge7tY6_nlU3$YX#s;h+E;OMk`QlrP)}z;a2AjCP-GFw9
zB>qqlxw`-KQ9em6CQ2LoerjYrLt|Rq;j3$Kz<&<B>SR<DIxC9qzj&rAIwLJoRNlhQ
ze}LH=_0=iL5qn+2En}$=Luhr%xR1*qY|B*o2Jdd!Amp5n7OTTdQ;Z5DuO$#R;^t6z
zb0++8QX%{N$PJ(L_Mr5+<8P;6i3nm13B(0Y-tnDr*vH8$SlxQ`SbSS&aTQYxSi>6O
zeqvY6i7=%|+Pt-^Id{k(aQ%^}nLza|{V@>D6Je6BwpF%EWvIDhStP#{Ww#Wvm@Gug
zCt{*A6r{@0-p6uk56a(k>(PO<`<|aj98=y?3v6$O-IUD=WGphWZMCI`eXJfIM~EEj
z%$RQ~MP2Qjd693BNke)CDw8dZ${?~KZ8^Ly`(lJMNbc~i!g7ao2%?0&?(aIuL%(=^
zU`dS%uSdOq0L*7KD$x}%U;QoaEs#&gc)7bqj7+q%4%^8MrcxVM0xPFPtbcKUQ#kFo
zVuys3K(g(=-Q#t+VjbW)hGS^@1ITRAp@EZKul9CRV09SgPoPmRRQK1I=h<faqFRe>
z$@*A$Mt6B<!Jv@JM*<va+RW(qt}YwU5JI<8>^;}aIqgeHz`X&nZlzb`8>PAFny-l(
zezW-gi#@iq&3tR|X=tDD90Xt#cn@)?lOm2NW9cJhgwU8O7y}T9{^IbqsEoH5zc-ne
z`L-Jg;V%{<(f&D%4ams%!2cYTaeolU+O|w}bbMQ}Q;ohx__<rCv|)*L1BCztsC8WA
zPJCadd9a`nLsP;#1DGF0UbpS1YS1lk(|5k{>%D!5sP|z>!%bp-FsGp_l`KjM-Y$vO
z|FBRQ*`*JgUxk={bBA|$gXKkImTML^A=O{o1+PrQ9+l@eVF5Iffz=9zKxVZ!^L<}D
zF?~2LYqYRd^c!T*Gfk(mSIEHPH-#q;af$A-3b9}Ost(*2jXBoX4gmy!HMJzsR==hR
zkBu*0^jH;<1s${Pe#IidQ<7PbScnPw!%LPvGQt?SyNM(`DQoTB=cc>LYV}=ZMus`(
zAi(M>R<#S1yUO)<Ubd>M7Q<FuHvw*aEWQA@7OIeeW|1n12zJ@BFoj2@B=A|~JBcdF
zXRAdu0KSvk`}5FD!)-H5!C=r`v#02W56+$jO_}`z#8f?IuUUav<#QR|2?YnLJAyYr
zC0ecZA?JL@>~QU)kXPOi1{(Cp8{N=aP3rb_A-V^_|4>)@?soy4-3OWkD2pnyy4bi7
z^;z=rg6cZs9hj(~pX%eDGZ6an5gem6>4z?<3JcB+6yKcRLe;f!;#%lLm>6r7Q2gDz
z7HW_HSFwdvYktkzbk)pz)Y<wI0}%=AhdPueEP|CT{+a(oP90eNlRsDYb6>yCf4!+*
zzuk9BF!~Z%lMS=TgCgHFbh!Gw9=o@)EasmtJzm}R0AGf#Kvf(9s6dr?(EN&{=sT*6
zxEQO$zZ6iT3RGC&`(#$U#~Deu{K>lmFw_wL6FK-;Jh?w$XxLzqs<O#MV);G4WLqBh
z?gQTK=ywV1moXmu@_Ui{zA3FS9zR?KwKh8t8Nb)Jtsg)ZOKnV0`Q8nH3h(Q8AMh?H
zmr!3{U=AySG%RGTSGQI@hIioK<zC$~%+>7;9$T$*XooCS4~gm?mr`nlYseIqU$YaD
z(;hS)QEyXN;i|HY>hD|SDRcH^jY+<{!v`~@Xj&A*aXK|0A+3CbB2^l=-t*J(+PA9o
za`*(++V=J%(xG)KVme{8?OE;#Rzo}`vOi%MC8&botg#-fz{hR10@%@)&WZkctospG
zKWyujdtz?Ew8Y3X>i^kk@u_RTkh<~~e^%>iTGvn;e$fEn&;U52>L&GABPxHdI)Mmt
z)xl%*by{*a)UN+b_t$HH=slCOdk--1WwC2{J7YWM9cXTf4`^lzk0O|ssg4b=hjH5y
z{IUE^B=$n>o)kQ6AKo9rWzJ9&wfCsI<ql`LP$F@7`AC!u?t~gvjy_b5rkL-zXwPZ6
zutQ&}M<2k7gsS`5p2Fr+;JG3!dQyf-Yk4Ja_kl}yz5bD>J;i>2tg%q~K;&cnD@*Kq
zY~XvyW-VW#6rguj%@uuxEpK(L>WPY$b6@gBslz+IB6rohXf@)lM~1~@IWHUx{NU-&
zHU3y(2J3ESdpHpMF2a<nQvk;`XqZF$&RZ~&%S7}5{I||k3v%t_65l;=<*w>ZD___>
zvImt6_@Y9S7_rFO<v%gl$09J<p<Fp-TwrA~|HlI1Wqq^iJ-&D)Vdy1C4n8?zi(To}
zRj;r2o&RA}?j0*{%R5+%d({5K5oZNsP|`O~c9D-v5mjFwfLC<`d(HgPp;$x)Sbl^X
zOoq-k(@EwwC^I2XEFVlxU>)6y9C0P~LLRG&ouL~6sx-EEWTKJyfL&y*MZF2$;y{+k
z%%)1Bjgl29V><}hKO9)aXSpovLOpKL+@muo{&3(HZ?_MBySvCPqS+$6x{Yl8@(tv#
zLx9<B<h|N>+0VEsc=nVnvk_e~o`$KJdrQs<=0uja2(U}1w8_Ws9p)Yvk7z-<Mf4P6
zX4#B8-i8_o)eHu=oAJGPxN*RQ37kGEN#qSw7`Bexz(&QZpx5A<lU`>G{WV5FCz<Qe
z_BtpY-tw_He9ZJ(zS`GtroXUT>mJ-TDqC)IqCEgX<)eB9dy9%-Tz(~V4cny9oXPx;
z?PMdz9etHDbi#ISkMP@2K|4b8?)sm#+_w$?ld3(c5^LGg^m9G?`Y`-C%a%BOS=&$k
zq^7sj>kru?^|=+@B9tRxe<C)RU^9~j8_}?nU4yOhccJ5q_9KX)8Z1fYw+(*F)QS0d
z5VRov>hzWjpXqHISc8W1C9<Y0(Q(k2>OwWvfbN$#5mk)|Kl5`h7_Taj?gF!@!f}VH
z@gVCw$o%1`YU-^TnX0A+nO+C1jvB8jpnm2rYPyB`6D{x<>gh4$ujI2o^QWnHD1Sog
ztr~CsI;eK@dsEe(1vxb`)dCwZHP}2ub)4T=K7c>_Gk>Y`fk6Gt2W16v`33UZO;2+-
zz3R_`98bQU-dF_>s*8NE&tLUjanReJ*Kz)K{|tV}Ux$2nP>tooL;i3ShG8VuU?ip{
zpASaQzRmCLSp@PdOy*;PXV0c8tETzv7}VU-)lLd`#bZ&=u`u2-W+xw;th#^S<Qt0Q
z2SdYNoRaCR^JiycLKf+seav%XpPWEZ`v60W^(+1HoW6<8OdEm`M3m^@soQoo^44c>
z7^j)jvT`Zj!Tck#b}~Opg}YeU4)<ag1i{ernTDXO`pCv%hp)-{!Z1k~N%eKhJLSSP
zZ`Yd2u>KO`Wmdh)r0^q*4y%JUFX$G3I$ZnWNYi!r=QpZePTXrd+l^fpOGfxVmd}d-
zuFOsiY%#)qLM_Wy@18T2dUVWfp3tFa<;q9d9E>;d<`QfhOCxGqO%Ugo%Q1`gSyFz9
zQ4k3yBJ641Q+_kNdQ`6>@9>Qm1(@>F@L{G_9`exRK`Efj%S^$FDD3VMqOeJ&&}Hd>
z7~SqZw!}ZC0$8V(YnB82&eM7<z7IS$Iwd!GW`ANfgDOvW@$2_h-C*4+LLkES4Y5yd
z$$e?y{OqzelRbucT=n%9xJ#_U`xpkq5b3s@UBI5#M%Jzml^mo8cg-p&XVO}v4Pipj
z6l`E@anQ5&>3s|nBU5gFD~8FA$iSleGRoHO(0d>H7A1HoRL72ukG?9wOQCw7`2e1P
zSwc8Ck*9IA;~7lELJ_yO%G;LknFL|)TJT&hX^WA&BWyn_8|;po*0!_~f#17;6to;4
zTV59U{vad0R{{nPq(p(AvtP|wwYRNU|F>)c6d~|U&8(o9pP0^G7c>2I_nrNDwF80u
zwR$zZgiPqtzk0lM48UeIyR^NCA+JGs=tZQ))r7gXs%Ya$@i#2Wd|@eH8^o|LWB1Da
zm(M;L!J^4_v03*5_VU4~=&VCUT*2$!>a>JAt&uGy{o5<1e8V@%yq^V9rL16KV-E*r
zFDqL3P)|#QO8X@xXQ)^?LxBuWDg`ZsAz?$O=uTQ2zIBl4dp<w9oF3#!BAkNF96Hg6
z5Y~kbui@1&tYI&)6}spUu020|aK&$8|Kc8HCZ3Hx=m-eWczs<rh&y=vVP~s}mjBkM
z|H#*lGnEIZEYWKwnaWn0N3|!}1sFog*#$IcNMffWhKIdL-CdrRX~plU{!ntiufA}2
z1;Pp6OQ#!`Ecv@37%HD(2^%bUK=c98quw%%eHkCI@|}@F^i_77!-7>{AtCW=oPK@%
zn&Gas#w%;p)O=dDE?G`>%c_v_x4RaLvHFC%-d~;)g?fx23fu6Yt7<gE*09Ixe3`9Y
z9&^Z((m5Mac3aVF4gk^G;X_>JtLW^5+o*_@4@Vsq;(q559YGs@cjZDod>J`iUxAfQ
zg-(&7sRs3-_-MSYXG(R7*<#sJ5Bu3taBb)Dz;ENN6n=e}Dhz8d1guF<q)MkZXC~q3
zcg6m-`Z_a^UL><h&E&}{qFdj8d5z3$o2hBeug&6!?&Xy2Pq&(tTcX(BHwVQL0(5X}
zHh2<K1OkJqHcK7EO8EX27G-VrdHDb<mE<c7^H}=Ewx?0$dz);hU{!Pf)fS`B3;g+G
zjco2<N;EzUkpCCkQH=u`)C)V+K9jM~=-6vyvTrr`^0Ml1Jd30&$st{I)lEjo`*%Bf
z{9O06*Akrv5uqC`8n8Gbx&a>+M%$Gk&G!5Db@791<gn1+9!4OT%U*UIu|3Wqe7K1I
z5Tq?c2R(gslm`3Hr)N=P^Q5|S1beQL(?WMU-e9H4c85LH?us`AxXE@06MK8$C-%{8
z7~RfO2w^|ESsA2o*gNv{Nhvw<bsxX_y2Gy>Mof3bVcRRoVHC6DO>JahZVwb?_zk2s
zA!mDs?2Cf)HKJEc_nkca>m7i0H~m3qu2C_)0mr-n1DI}aB6{N*{#3I|-NRC6itmc6
z{On{#I4UA-#n-v3G&%Byp|Ev3_HkV#Dw|_9cel{c19Y3ozH%V#?|Yvq0`RgmE9-s3
z0-ZDRs#qUV=mgAANBdr_wZ7-5*KcF75(ULR29-6z(>+|+W-Z1Dk7%KD0Q|uE<^vxu
zNj}u<2mMO8yXa%-p=Etuh24c}pz=|no^D-5zLO8olEL=9V(}DvK7Ii5-BJx)>jvZl
zj8CM2kGg^PXkgUx4ag{W^areoG$8AQ2EGStmtaA!zuA|LwS|lSZugs7+|}Z&;y2rz
zhkf`OIHq@t;za>pmAa=)9PGO|Th$w2KMqr|y{QoJedUZ!-}hoG6#|ZwCu~h2+GH54
z!M3vc9Ucb5I%t1f==XU=`cg#bt8QMI%@#sYdcRDeq+m5!{lLhj@(v(#2U_&;t8OVl
zOCuX{mO_AmAguI*MmEvN?Gud*gGPjQ`@XMR=|e~W1~<QzcP-sY$ufEJiK%_mmZOY!
zz680D5>9x(eOp{(p~d;lsk(S-Jdqlk1J;P6Ew4wtQx5~fFQhvGz6BD9`Iz@L&bS9&
z7o5cr*}kx|f&d%3+WmN`d7&|DhR<dd-`RIo8XmHfab@4MuzkLD;#-I=KVB;Erq-hU
ztrK5AImP9`7ZO;+X;sxfgMD)C{t{ls=AWYnoXul#Vk7DWW*0{iBZ%G{TJ%E8S>mY)
z$~pG&B2c61$~yU$!JqePNgpuF%|AQK8H*e-%X>)MJ}6qEN}|A>f=~h?abO_Q)*n%O
zE08>J0c`~mwLb<D2t=4s#vswbgW9?^Op2uu<$Ycu*i^hb(a^^5%gjbwPif;6!~oac
zn_s)at4vlcy7pTRVcb{+SN*enzh~Cuw8QG!<Dc#O!>L%{$iT<VFA$wUE+ld)xj=`2
zjSoddeRPU5Z~8!rd9g5XuLdH%lFBexID{eYHxUoYE)PAYd?a6Fdq>$XvafeS!jP$q
znbC)D)jPKRtbYv91josV&Q=AE%TfQf2#@gVGq`hYb*(>F#RlhEa{;H}-5N0|>4R$T
zNF1<J>m6^{zl|d6?@evP;Ju{>FP@U{sa9%oDxqM6t(kU;A`_%S@4H1kE*qqp_u*P<
zbXZhC(I=hf@CTG`eZ*|u<u+yz9ut;@Olt%;v#vyouJZkDG3V|U+f!4N33Dle3m+U<
zMRXx@(LHy`n?JVU4x*1y<b89YH{tJh#i%fiy!`eYAVxZeCQKZ^Gtt-d@t-Mn0z_|9
z8rQdN#8bS6l*E0!htSG~Lv^yKS{DUROA?S7mg3}?&_~Tj$W8|+caGU@f*5^Ghi8|?
zfnRnj-W}vzNL4gOe%FWvCxcm!-ZP_nvc;@rwaYe5CoF5H2n04vQ=@{|iwCN5q498y
z4Lr7C6QiSoI9AfqkgVyZxCQtB4x2=kBk^pc;1ZFTL|Lly^rrmbrs!?vPwzY8R?@M-
zIxF@X;lOOswzUYT9Q$AejeEF-eV3~W4rA9m)(9p#)usy^ju2tu<P6HHgUIj=7iv~Q
zA>Scd+{t~MV{?fZfs?kAlU6#n2zn%8Yk~rWup=%`>b0n|eTQrGgyr}E6(SNoN{A~1
zo)r#fIE(fXNN&dkX{tytT@|f3m`wG$TMWlXeO%xE9WN{Q+rj*1ZRmU|OmSDqsWsNY
z3C)$gOSgQ*Eq&oUQ=-a-Qv@{?3xUH@i^G4$doJpF)Q_A`EId<AJA5tFj?)9GuOom)
zbG?NyAuS)>@G;J}pxw1Zg4kEe@V>WQkTrIr8*Sfoiq@~V5WT-<SN)S3g?T7U5WDQW
zEKeM9dqh%_?LrUWVKoOszCjx^P*jgqC(5s}HSHl$noPnrS=)7b=1yXnF@rfi1;W+D
zQ+&-kJ@4k99+5t>^F;&BM^iz!1oKTg`QPA-9KR^|<XW34YVM#q-`AlcluxzE7?s6C
zr@d~`8BNw6B%Cau*dW&T7}qH@nD+?7vzxFmzIJ<_Gx0KquwfRR!o-o&466+bHupgs
zt!`rha1WiY%g(51=j+8=xw<wpAM1~BBe;{R&?6D68BmfE!_Oi~0($J-V5qm5$iw$4
zAoVozTHg)WeLrpo3S?$g5Ls|@+bIz?ae+zWSQRLeuLjaF!X?m}lbq}pYtPRWMAJ+y
zgjHlQ<aUdxQ0rUgV8G5*#P)vE2U`9vB+DJ+-|cs@yEAMmLa5@tJ>+WT)#Bq$P7&u{
z3mhPkKVUez{*}+b##isWJuN;Wkn7qv_O8DF3cjI_OLpTMN4ho3M6qb^i<>C?_8U~u
z^s--khnE{);UZ*!@lsgy_ut@f%;e@4ihcOT6CEH7$vLQ_b*@|6_$t;41}8-CN;j}k
zy=|&idU$7+$+{rYSj@7Y!tp;MH3I)r-tMF9pa}_Z<gGKlmkcraj$`E`p27b6>te>N
zg)Dp#Oqs$#mA}3d-m~f4*)FH(V%A*#&S*^eANE0fpRX|)(OO4{1A+`Q|7cj2wcKd(
zdfch_Ds!rSXM_`V%Cg{Zn>5U(kDW5FOHy7$>m|D>O?JqId~FNk|IoCy1?HVtnw+qu
z$*H*EpGCCW1<rY4ZvC4}Y|SOl8+_Sjv4^*Jmr$%y<mNtJ4b-b4UVXoGE}vH;yh@}L
z9m6qRO)g;y#A>8_ynDE0$>WHlQ(OwD&MuwTbo&wI)-F{PfpxswxLlqUnM0sxYsF2x
zeT%F<LxdfgVtt43W`583fTi`dLhl=B%5!yq5oH=0y6OQhUh>U;x1mON3kjTT-yeG?
zTLjbVfAe)Df^Z=L;v8#4(boNJFg}q8$>`?>&U9-nu6jSW>Ka!)-BnfDPUEgv*Z>g#
ztXda?0u=#HM~`Z)MycU*^i;TB42n=D*{|0v6$%ofB_dbK>&2<)`ablF5~^eeMh+C$
zJ}SFZ3xLkc8(akS*D!59-+{WY&fEae5Z?}b6+ZL(!<LUt_JJ;5kzst`TmA691qkI4
zUXI{Q&=}zFE%F3_=Bkd+X=8(ha?zL0ARtsARcC7D@PUPY<#$D?6Mx6w`ji`v*flmP
zJbVH7R6|s-JwKE}d?TDIM>B&@*$nId79pg?apD~|ytAuZiwA6L#>VI34m)cpci5f_
zyJYyBJI;;NI`b~WyXQFfHHz`bIDjMJOR%Nm0;1vED~acKu}O;y<;&F~j;wiq_LgZR
zhOx^swt?K_m!qA{U1sCE(GH}`m`kq(^2s(ZEfOzku3x594(dP|q%Iho12M-2lhYcL
zhHH(D^}nohY^xeaaftTca-50UI|hLL2k6449L(v<)&YNGuf@ty!l$|cT;PVVMH!kL
z8Z3EO+LmR*!o<8V%)AA^>-?J{B9u>pDK-V9AB%5KF%<&Vt*%^3<|^A?8*tC(TO7Zx
zU2-9&4&K>f4OQ%;!~jHSa61p%&qtcaiRF{N1Y>Er7@2D=KbHHFkA%?qilsMvP5a^8
zmzn02F_Uf2&N04-EfZ~2!>>0LUv>QyMGVXwy>0oqtqzL*1{xgNunT5lZ&jn)`HfD+
zBGNRvzgC^o=mX9zEH6hQVW0W1VPA+>-=zavy+<7455>tX!nUUXwITNWqvCbjgL>pU
zj;zmgw6}VR14EE}E$d7n#co;{nprn<2Si8Q<J;o(B~VY;;h{@HB&LW=!h`7N*0%aZ
z|DLd_jH+=d#Lppn-$}@<nzhI-7b@21o0fOqw^4Vu=vgEv8bo419h}-@5&4*uLhmDf
zqL6wUcLaszz}I}aQcgKTwXg=b3x1DK``4!5XEpcOQ*psCB%nvtn)(_9y4Q1SQ#rnK
z<X>ffT+H1uS+Qzi_uKup$98WkjwrblQ{{@?bsHD;I#?)qVv+2o^hIN@_-V`#_k;za
z>FUy3`SRnCCvfs`BeFlBCYB@_0&H+y^xms7knp(|douSf#&XpQWwTs&phC+?O~4r8
ztszve+*o!=oQp80jWfUxmpZg&ebne?bgBz5^6>>?x^IF4G2cl+iFaX%Odn<2hafn+
zagPC_-kEo)(d%#e#R+p?W~9g8B+G!i<Q^-{;P%sq{jO*qK&%1Fe-tb)W3%XC-67u-
zhkT`o#l5S=R&b#VT>BFiPhv!)QaB=4ienW<9SIx%LE<1IJtW8B>|N1HeTew!^6rYm
zqbUh=Bw>GD41CD^5XJnE0;5z%P{WpFnI23-V+qDO9Wis#FFruze<H!-iPS1@7Poy|
z93P7jK_1^1ZzL_oEt3KxA1?EpbpB@|&A(zw>{tSu-_&5aDDgmdB~Qi{hI85(LRyM+
zT(?6JG#4ae5h=g>h}-x9nIA~FR9P>Hw0fIEMwJy0@5J3;Tn%AjL&mjuBIitt0y|>e
zXyW%JKih^RAbP|_B6;Hm{A6D5ikKBmtlxr4RPix3Q1TpSITfDxkmV0<8}Ev;w3~?M
z{+6xkB$LlOA#t6h|J7T0;~a5C4BHUe*NIztqvBj&a+s7$(6u`W-puy#C#&B@;v>mN
z-rI;rBOKU`k)$81I9*9i;?A<UG+*<*GAu($LMT(HCpQqkjzwm3SAkI$)I5U<g0Le;
zM*RbF+%-N*<vRdEt>2YgPLQN+6^DWJh9$2UFp`4y08Nq<XUriuAEQChyXKd@xjCd<
zrv*eCoqQ+ScoGduD$4CTt6B>z!<RIjjF%sf$<sxq5lQ~WrH@!>_KyxBf)#EQ**wck
zxC_qa77<U2q9ZBd=rDOYEDj+(`pz*j#RlT^8-QoMVuMjfqiDhfPcFkx40R`@C6eWX
zQmP`MZeX9ukwv#S@I_R<8Gz*h^HeMNNS-IXfiPRQgCYmgC<>sR+`<qK>v#ALp0ka&
zBQFTu?F~SfmF~E*UztOD8cv5J5m2x#vY6h|NJ~4jp=8V{BO@tk)`_t`mE1J+?-0YI
zV10)~0m@dtXE=zyYyuvtZ&?`<MQ{i38HQQhRzIbkqO=QQq6L+9eKIQgY?ix^ERr&Z
zX!r$A`Xa8CLcmy@A;FaSUUt5?2QZ{@SN$f|zrv`LccaDvU2^12imYe7Ek3fbMt$QF
zy0_Tp$ZPaLM;v~KI!glg4*4xbn1r5<)ApLeFww?vY*F^{UWMl1jvI6PQg^}VPgZFN
zyX>X^rTQJVjffG{KrGWnhi7%zMYA_0*s4i&)=W1z6j!4mnXL}R>m=H{89GmHNy@^8
zMvxc}z5}oj^!!lL(;%VpA@cW)N<(R3EofmAE!;^9l2XxzA+K|=@(NjslKG1$T(OQP
z_o&l)uQOk<O2~yqGSuihVDblG%{BxELYoybsbKD_xrbfy5wU55I=3f;9}o-vbQ5;1
zAE6GLftk6NqXoI|xDSf3`~g6J{w}CvI4mM+rcwujOsO+2zvepAh#m0PiimQsQACo&
z7}=A0xa~It0dN8%5aX?_n3KxQn)GxVJ+jv73_fHDZ?UBB`+%XX7i};FLe;aPB!R5h
zj5d|BKbfKj5jei$vw2g*W4E{|A+Ogk#HftH4drgV6Dq;EBd(UppkPMn5~n1`zK7N^
zkt`#CXjpn0asa{69)zx$aul|Ylm?>Aq1&kn-vJcuf@?q+)ws5rbq>jSQ^pe7O?{0;
zW}}c3<cK2LdaJapw^2&%@Gh2JDGu0nM)ZO@8z1QEimqTHBH;d--kl;&TFLWAn;d($
z@W6Uov*SDnq)pqxEif(;K%FpVCv^LfUzgueOYuW7;aHFq+7yat2>==SoSjt!mCHja
zNSg*D>IbCi8x|2*0oNU6MvYwJuJYXLtwGmYvNPvq+>Da)--W4a;&l?0Aa6a~x-Dj$
z!xGW?-C{3#WytjeJVyO&jR_X3g^-_zU1T}L;cFnZ)8RT_v+HH)_&p4d)(1uHi8c|s
z2!X9n&<+Q=y)Pk1Mg!<9UGX*4YKI7+accATom29iA)ogX4((lmBbIGtt7NG^iiUAs
zIJlED|LuVpz$BV7M!1~CY%d56QVfyu7H&v1h}38F&TL_CJN>dws;vB}i<+@305{`o
z${(Sdx#6INbwITaEd5=w6<i@Z+f{C|uI4s`*i46jDhKINhYKue_X#>|QaLR5C@3<4
z=INS~HB6)XD@5s*n%~pSF;l=-tSKaQWxl>a!ys+pAmE%gV8B<qBcyXOLP|jJcs&js
zdh(q)t?ObxvTqp)vnb=Vs^29XDsx(Xn=a{0J1{yL>?v`;>Do1$Dd)av$9rz>$D%wA
z+RJN25|tsx@~T8zsWa9)orxde$ldKU`rB>xk1IaP;+ZxcSRuqXJL;8O8#G8(ff&kZ
z6wn8p;552I6SeO!5Hia`lC~Wi6j@aH1@&BIj+>(qbN+0Xl!0XqbXi%yZMp4P)h+6Z
z^~4!dL|-?|Lkl_M#B2~Mfp0eDNu@kwRI%NIhc*d}M0Qt~Jesw4iDcCoAT7o02BLz2
zDzn99%B<WjAV_W^7K>in{oV0Py&}_2A1FC+L%gA*_B-TS8r>HCp|}CrGJ_ve1J2VZ
zK{f>-H%|Hw%80Hucn~Xq??uL)$O7c~1KQx-J`y95HZ1Df6AJpPIo$R67~vm$*b{Vl
zi@&>@u-s}ODWQ7}(w~rerG$GN(7COC+h|N?Xm~wEcy`?F_Q`qd_9OYQ2}Lwp5q#UY
zwjI{Q30&n5i`uJScqy-U17c7i93Pk)v2KYhJmh11po1Z+uV$5D&hwo!Wu9-t(36?x
ze(5!gCOQca<Sj>TEbm7WRNXY#wwX%E6m>h3<C8`$NygZZqws#$jTeFgHg7F`;XCrM
z04Y4B+(J%8eqB4l3R{syPn7I+(NM+&*(G_n_KNC~1OY$*TM2oGpl+^V8$N4T%xM$$
zL9Ufu$y`&pf+7AIHC+C(zAMS_c7<1u&XBSVvHHQs6XcF0H`^NiwmwdZklb={kQ#_&
zaC&#-6QMj5frrXSEPtPq0^X+aL>%CqLL!9x9*6<<9If<<^qQ#gs3%1GEl0X5uZjV%
zdP`Pw5~ShC_lIFgRPa7B22pecW{HrgynlprqTi2v=HA-y2no}_GdGZw`qI-Kr*1S;
zgMB5d#G9*t&g)&TfEH;anOq<BOD`)-+*GSydWYTluxn_)vW`xTC=b(#vjdFQ#XDCP
z??`PD6b~Ip!*<deFq1gnkM~UUw`GHOCH&Wf7x|{RA+EdkVk-sbjGjn(oHxv+3#_Oz
zIGvBcwX_oajaMtkhX`X%VL=|h+N+Uxn#bauqyc4Ks<Q(cC?qs3jp=+#Sw$u8`?jnw
zzZ(!=K;qQ=xCfDF0eyeqv_m)BDWUTDs0=66k8%Y9^L`)<Q@#9HQAsb6prW22?Gc@=
z%_6zkRqPS_zQ^V>Uq<llO7^VM#Ja<m)kR%@Ywz+y&P7u3aKJ%Y1xLYX<Q~bU`Y`u^
z7Kts_D~0!9CJcAB=j?3C9LcooL|&4`+$C;Bov1y{Z<hYOJ@hF1hUd`gPKqi`eYd!Z
zd$6^ZNKV%K9Wc*3o?nh0K`*WH;0{-1H(yT}5<4Q=>j+3+GXk*bryDo&x_d8lu_r<5
z$R!6q^2G9IbUbcxoq98S_L1t`2~&-~wXI$eR#_jMX}w{NUR#AlZJjRgy~5zG=uv58
z_xYODgD3YBE39MH*>}v1f@Cl-9>6&Ou+T-75gXycK3LO`Rj{*;{A35YiYit21)7F(
zE^Bbv<!hq)DE7{??^dj96Wp%CZil7Qh*?{`rKAbv>bM5i6a#{_RZdy7eFvN4JJ?^Z
zPl^hTkgf!%r5mer$<PgI>^_1Ue4#o(-001qiMxq9&r)TxXsdkZTn>Z=;dQ*r5%T&V
z$3~|rkS<m=hQGZ`Dyac0Oho1>Q~|`?e36@v$d7PuH&!C9NSR|16B3<Q0-*K8vFA>P
zI724_vj00ek@d;0ZmV#(^9`3c)jnqG=W11wT)xI%P9$T_Dx$xfOb6+n_+ACA+`2^Y
z^$k=#9VPP$lig3Zp5D>7eC@^Sp#Fy<rYoF04$@1I)9G93bezm9{IX8Fojd@p3jRA;
z9T%ODl`XE2`xs7xo8m$w3s4)P(VO!3+*47#l}0=ESsHz-8y(6<4A5AoELi1F3=odO
zc3AI9|EOWvxw9(o?cC#Bm&oXd&ddDb<wpTGWGVO#2`kI*qjB-w&YZLVv5vEEH|qiJ
zeygJJm<htS$73Kq5WFs;WJ9oVBy-s!`;rKeuC8&V*5zV3#?VhFw&rLaSW~=Z#QaJj
zC|0LJ-j#E7tX9GhcS!4*1L>;F&K&rDy7zqam<KJaUq=?;G!Dvx2rj;rTl^o~dj7?*
zpR-Me|Nq{m=ZdFV|H)mQTRe5dkw*Uitp9)6`Xd>=9EIrM{~Un-<^uq+Q>U4p>a;#@
zVaL%+7B+v0268+1z6W!DH)o0F7Eetgcg4W&v@N%jPpQ5L-U^NWB%oc>GbUYe8DkQ+
zJ~Jjo%2tm?xX?E^N^aq!@QbhSi*OkLK0v|0VOuDPZSkHMn$8YM0d9A8JcAAW$Rli;
z3TwATCjhL1V=9RGkt7N#pTRzT{Z>nVMT{e|ncWWTH|t#lRy)}g7tB<#)t-20LO_1A
zZOaLxIk3$kL}zz5Xe?D|6<UF7Hg$R=N~Wyj91R3kdtH3Z)~MssYAuJey~Q=#t7(!7
zCfjySHDRG;P$JrLQ+eGh=9ZSxz5ZhBl3@}__INj0A-V5|{Qe6<KkdU_pkSHZ21@M)
zx~)D$w*&lHg=tdZdWyfDeJ9A+eO>boeZzeXzeCA^C#fukV#3AjDHP{y+IYMMu)l+n
zRupnfh9HS&V^a>o(6wg+?`%es@XRoBfN@RZk!7IK$Kv<AGB;B<o-#YS?6M-{L<Y1=
zx*`t$7<HmiFt1ZRsBl`DzEW$jfl4y8awmGa_%Jm@w@Ys^wf6noZF2il`g7Z32llW}
zSzWhxd_vO(q~eS-8m#{4M0@HpV`C(YZ5-k=5{h<Y#lKH+kVo=7fJFEmvTM3x6Df9Y
zH_8?pPu0MqgJ6+J(e_Y;&FL-clA?nxtj;~mt3?)f_fXVY6c>JSSL+sb%hqQ7&_zIC
z`?b2(pUfZ;D6R^7G=?qL?7>P-6Ly>I!y)MKKKxu>p0J%51e~>DPlCM3=L(B;d-Az4
zN`0=9cbhph(77M!8Qko7AJP+dS(HDPBnIvSr=@R6q@x*|3XO}BSt*6I*y-bZ0<?5$
z9T>@dEn2VZ3+*1`t3C9^`2D`FVeV15#0ft4>}S46qCFdOR(xm?zody^rUuLI!|sna
z0<Pch)Zoh_J9vH+-|yXz4K}<ezJ`(JdmNxPP-b5cYF`lS9?&nOzFVw1sJ{n#9qm9P
zC{jY{gPn_e>SW?32P0h=0M<6|G~~TTFp$D`$!bpb-+j?qjWJ`6<RFJ@(C|aFS$A%3
z=0L%qtAR_4MD=nt7jWy3iV#@u-m(qPJBa-^VH0xtFr&XUN<;mnAR)uTE6eM(3cEA<
zvQ>s7#iR(;q1}v5Ns`R7G5A66K+AFw{Fc5+-c9z9*RQID%1vn<vu#b*#N(QE<KyDi
zULg8CvL8<hl{WIq(B7IoIgqVQZ+o4BX?<YPE7^INg*fPAfOqT$b`H$3%idI`s62ir
zvwwqDP;_v>Ik`vfTT`r-)=Fj8k+((&pv4PPZa>a4y1E(Gy*7S?Vbl(=Ikv&jGx++*
zc5LP2*~}#ar%cUf>Im#gus8lxG2qVn-SVy5>lUSUKG3K8*nVmfhJQ>gb(g0)E=mxo
z@R+mrapm5AoE)%<M&>el&;sZIo_5#CTBy>CMpYY`x8X9s&98F8tHH{LCZgKy0#`fv
zHp((8Ggs{JL4xA~G7_PV$VbQQVkJe_)Nw91a4;Va;D)*54HHDV1<Nv+;UMjih~`18
zR^AoW!}}}A98b8F)d-cX;&dlZ>i1nVz;EHrw>lO6AbkC<q@NH23$v~kY^u7-M<)af
zIRq?IH4$8T1)F;^z%rxSJa}qU?@MfY-VvzHG{N48CH-_S!>Zfx-j((3@A)G3!J*eE
z6zU(?m9lx`yE1h*qu0lI<9n{E8l`;vSPF_h6kS9e(wbH}l_v*T=^X~!@|uo<S-q`;
z=STONjr&h}vtqgldc9iGPf)sxkqeD$IB)TC;RaSN!z;k_9oxKC+ukZf{OdT9L6ou>
zDZrT$L>5_VKNfwwnA;-j>sn-B6mj61OV-^U!@UL$ExfXvExr$G2sShCo&AmJdMshF
zh=a0;iN?jqd(pyGlH(*DbB2Q^t3obs;C9F;E;>78SmVR`t;1;K^gcqg;@cx}Y-ZmK
z*3+Fxuz65tRj5+ghZe4)h$z@VfXIryO{?SLphC1#e80x6;cy>5tnp>hp00^C{u)rR
zeV(o1wgdPvgmFYjawn)Af0RJ>>-AKVWQxNQrNecx%6veuGmgeQI5}dk3B>z?hX|~w
zx}KP?-XpN}7swMh1@|W3_$Pefmzk_874A30AaetN#!+4lVQ$G>V7<-642%TETw1~!
ztZj;a62ck|H^o3}V^f0Wh%1KJitgxA6wfOvR4BY#|7+_lr>8R;22~NqWIVwb)*orm
z_4`uS+zk|-VOG3ZFJ{+^yulB7<h~GFsIC>QlPDtO*0xHgV!uOS<4O`ai}v<W^b%D{
zB>C~driaeioO8g}5H=x)*AiasfzD}dHEJTjF@KGs0ZQ58wU0${?Vo;ejnY*sOM{><
zwOg3To{VK8lXZ58YTm2o25#BiLS<Zndil}AAq}i0wk-6UnkSRXqF6o<Y}Um;<QVZW
zol!~5$O53X$%^U1tda39*pc|*Z2R(h+aKH+jAB5&9$|4#-f;t8-#7U1vaQ<Lu63d<
zR7b2IjJ{oeV`Ko^?^`Cx>M?BXcX<JZ4cIik=Yt$yf)fPI_W^n>*vXdP9R}E-d+aMv
z;7JLEL2J{1NpC}HQ!wvsj}1h#|L4&GObJNy7VW!}zl)QvA%H>7a6(Xk<sSa-HV!|!
zFyx8-tL!KDycbxFZ7o5hoUr>fhI%?Y=4EEtN!%BA;<AN!>U9DDtTUphT*;kv+G7dj
zi5PO9f8chSkFeA#4H@g4f8j9>Hbtt3KfMi+Ic(&N_0-0%GvhnqvBIjqUJ#!9<l{PI
z8?Z+EAjhEhh-3Pe1sTyLj6lV2gnv&MA8ftF;{a+-sB#O3c!D7aF*5HE{Ayctq8}w@
z7eaQ3<sRl(IQ)PGYV13hD>T{c>K$x6>*G6IaM!5)wU$PgyDoXqp+lMoA2WsHv#{>{
zqN_sI?IrR16GO0%#q%!n8Rk%I`I2R4<a9_YUL_~BO$?b+)7p3-*KD-D4u6XG#c=C}
z^7k!>gG6uL*`EWmGK}Rv@XGd!Z?Tb$&IT{mthk07>HK3+OxRcgwJE}ax4v}ErQ4)A
z9CF|k0u2$I9s8hHBq!Js?^6)xwLbri_7n6b9yGG<hu@j>sNW;0#xCEewFD;Dof7II
z%+ry-UneXlKYR-uyek1(IA{(I^6B+s>Sm1e_HF@$A4{N>Y7dBB^j5r<9?|Z}d-)51
z!;*_Hz=+M&K9*rE=u8GzZ@m$A>HIrjrG?C(X;6`HjpuhKWJEqHO^Z(e?EuLm;-R1l
z*_}B<GY|+nXFZ@%rIlbngW~!|QKQ2eTgBAhMORN>{EpZ{)V<~{`#j&1QyJ~$c!o3l
zdTQyAikJ&W<TNUm7P%9*Bq9MEu%co41A@mmqGI1QQ2Q9oqax^9s&%5(=@azB$=s3E
z-W8iJ_fUzwDh@0BFVl>V#r_CaM@T%#&P1K!L{7?%zVr{|&X@i<rp=|7M6DtO@hz@+
zhy`AQYQ8=4D<nZZ%sy^Gvex5|KmoAjZJ6>zj;}IRj#<O+p<xK`6GrI{Q=GzhxY1?1
z-&00FWQpmV#je2tRG8*ORF@m3M!wy0W2b!WM`wn~A}nL2R^Jf;BQE%eQcNqqD{UMy
z8_|*TI6=Wy!R5~4f;2tn-+is(;g;Z5_l{%wcZ+WilxzGZ?#J`jT`!4?dfOik!~=us
z?>jn=Q&2PnPw@lCaTvf4nav*yH&MqX*xTgz67j0738cGrKp=Zv93PNtYY(Z(Zb3yJ
ztfvTsi4tGmOAKKI%6%wt<71>B`yMGsC0qIHq75)H1v=5xO@%YK)I1(J+<3=9soLy*
zvbqt{qjH@bxx4F5<hO6%VbpyvGN<nH;W1OMw}|9A0YX9~n8vB%DGdF#!DwZwcJJ{B
zfk$ceS7EC3P<#&+FK(bCxE&Va_fQhNE3wSlzP>9yh}o?~={nqkFL|A{S>=y#*MC36
z_#ekY^2pyUp?N;Y-_>_Y-vXB>oaYl{Y-kC8%u(x4B-|^_O$NXFexTx#RyQj?d&Vjv
zvpyhS%;Xri6MIV?!D|4)If{=baF{}PCXuu6-jw9JJ!Er4cBTVQ__oNyZBB6!)gM4|
zHQ8ykG6qU#1_XgNT3{8AsHOLj-0~*~jq;Hx5kouidQ`St6#w#>cN$8?$3*D812|z7
z`XB=f5Pm8kVHOwg*4&zk6XJ{s@-ad%yA=@Tu<`l^j;3pM&6|!&*Ki0#7-+uLyTx${
z5if?{i;l3UMo6<#(kuV&$k7E=czo8bEvLK%tBBpV_<IUcyT+2+a}CT<pI3&XX&rT0
z!Zg69JUj-Q!okmbrM_GPb9=fM>(NKO+rTr_{;rwJ;89H3`x^nRyzSFgGT4g!!nt?3
zy%wtR<MfHW5u=!fD7PBPjAbLeA_wL;9Pcsv2L(p5XVbBjZvqmkacgyWdlD#?bp;mp
z@BmNYeb_jL4A=$9C_`-V)@9n}Xtoi%D6bYz5(ptIgMA{>_3NTstv4kPlHK>BFO*~c
zR{pNaF@JazmdC1BiMJR>K0{_r<Si$UseKZRx%(hgp0scS)XQE3d^QG>pKk-3){wie
z`Teoz!}I{d^jYxLfCtW@L}H<@{Ua!R8#WbDzbB42qMAcQ+Xw-3VAuZjrsO3+w0=0a
z+kS1X-v;82=pBe0@aat_dZ-nu9CT%8cf4No&Syc1U8s_7qbumLKy>6BK!r}v{bVIk
zBtDEDp(EakbXwX0D1dsGDYE(q=m{Zi%Clb4`kF*rrD02-a!x5y`37<}3Xcnt&_#vI
zwc_hB1J$f}zv<;sC$yiPbw>lAi#^3#XzJn385Q1(7J5r`f`hU@Ol9G{2!xQd<dN+`
zgdO9VzC~2*he_bo0T%W>pQ=Ie?LMS&a5O=>G+ab18jU#$Kp9%W-Sv{!SJmOG25mkn
zR#{qdcz{4Nh%<8r@jL6WzV+dNb1fRORk*=?`yfm6__pZN&%Qo_Dg~VML^6Rv24K(|
ze1rK!QRH&g4kA|Qrd`&k*RpHHvHES^gm;jek-O$Q_=$r&5Ig7z8F>+rC22B0V2Yc2
zTx$bQaBix+hfv|rTI}=dXteX;tzgod6A98~O0{ju332jt1RDpnZATfe%?<??IKdp=
z;tIcoWgi;`)vJ!|jy5AffhWSaBXKdzEKc`S@d&p1Wyf){>(DyPV7f4auz`JQAMN+I
zQ_)KTp-%xXGhsFOf~XgK+T=ds3CV|&`%t+D5Z3NRp)e7W!r2@|w!~CQJfurl1vu2Y
zW90lAe3OuQtP#Y!@ARj9<++K+9T#)$$eQFJuLHpMJMPXJRQjDw@gxv&!sfjQuFI0N
zg(`|BD5&^xqp02f*no$!L`NSsiav;<G#?Bgk#_cfb^wE*V*UUs?5CZGg_q2AP<%HQ
zs7Ku53AjjH2OpSFJm>fqO$O!YvG^J<KT43IO%mXl4PSdF<nmMmEfZt`KD`GPLMjdz
zBgBtEnToi$zC#n0*Z6zOe!MpOX%ljUhMZD%k3(9D-H&@|HTqlJIZd=!-Gtk#w2LEv
z(-`ybt3qB6wpqSSg(4)g6VbAYp3G&P#VB#$hR8W^_Z8v)>8Ua;T_f7l);n2x8sgRM
zdwD`l7L+wv&(>r#)T-N%$I%U2kd(f_Jq@kYFsbMZODxLMb+J<r>FCzGqK`L*urk57
zs`xiQM(^LHYH$kOcR^8t((Pd}r)X(Ee0juj$eZmwB-;QEo$zfazKIl*0YZfBEIgG(
zs4J^}4V(~1-s^ddWiioxc^+^`&Jx6?%ZCt4;qL-WqJAX({S;JG;F4J-az;qU=AByN
zipxRpmdTv0B5c3x4(@(<=bzomlm2B~ynF9Gz<dS0)T}QWpxEJlww+Yj&0_Li&guO|
zkT$)$uHvQ*!*91T9WX~_2ffv4vE)5@#!?BsY`d?m(&8u>yqyy6rz1VM)ne{a*x5y?
z8oPxulf!rA@`Uxu2Cs;Bqre$^BHvI}6wWCmM&py>wRqUyeDx@=|FbAhKva@H#A{~?
zXWf*Z!&y&&rAJ(xkD|)itNt|hs(S3jlzs*Cv_Xd)elo1o+pk`3-rNIdAz$k{GpLQb
zb6?=R_Z7T8iA*BFbYLPlmq3hE5{>>j=#z~zUxMk8xP<_E=ZN)j<~F`cu^EWLqMqNO
z=eK7XuWo#`hKi=)qkmk_71pf?H}epc*8o=6#diW%0ytF$99Y>}`@^pw_;4%SgIPsj
z{0<0H$&r)En8U)FH3|F&F<GsIi*K0%WZ}LR6<~XH0$$)AfiiBzG<6-1Jr(F<3ko`+
z<{xSxK5;VY%>I92IUt`G_UHO~<i(lw*+?`YtSW+CVP%!xRmvo)>_=l^x*tp<WS9DN
z6p|E&ug}G8oI|T|w7*lZ3n%z<>65A8P)S-VA+mvPGFLn}kI9~@Cb?V`|M4z*jbQsX
znliuoU@w$aEN2&#_KmEn6kgrYn=`8DzDX?caHkv?`C^>HgP>Cqv&=PSGRj|j0GQeU
z`ri5mi0}?aAriZA!z;Z-e2PR$&4N;ow$vI*eV0;eC<UVqp%x8~ENxAs)I(4Tq@gLb
zAsU+-&P!4zJB)G#Aq-f8+btG0OKsrI;l1F^4d^jHVqG4=6JS4T0I>RC;*qsMA3%d!
zY)BHX_uMsNsM?+l!bkfnZT-{+51{L0k}J9_xLZXGk(#5eqK|)qq^Mm8kKIW8Wp1ct
zXy3-AH4<W0_J%T(0D#U0Tfj@B)W$v_R@47S-G8m8&UMSe=mqgT4>=u5T|$;I#u#Ia
z&oH*hIdk>DdaLRR7>{?n-<)ghwNHizpx9#z)vC<cH{Um2Z&zbT<U?H?hB8dYZ?CSx
z?;G#8Dn9h+aCc7bMILC!2Qs5$e|0H-52>ktd>}J=)>l{I_dw{}dLXar$lB>2U$As?
z@U(KXki}0GAK}!Z%%rpWi0t7<3kDVcFIL(5BO*86d;o+1%_?BBhjvvZ1hx!UNn=RW
zQlau4ghftLs0`0(1`Z3<el<YudGT^shoPUdyS}B~_O9;e8DoWa{Og-ZZA$at6>vv!
zPCr57c=`x)Q-RNW7GazICHj)?aN5p@4$dI^A@%iEOpjXc20NAeK$<B30dh7gY?LN&
z`LgF&A%YY_+#qFaSP7fdt=a|Lt$6()e4LdkeFzM?9DkhHGlgYn?#QWpActDL{bZNq
zlZ7#YPYD?Rc4c|W6rM7D`ziUXCp8?%vyMdDW^Dg*$yj4L;{i)12LI-f*{~2^YyIPG
z7HSH@_u1eN&(F6AtS`L9V(_OHzi$1Lv*fF+{`ISbJ+b?X7m5$X^*~1PX27sm@XN{O
zWHCjHfO7d|-F5Co%?l`5fQ<McHna4>oLS~z4M>o&en4A*%{_Vj6(jD;K{%=}T9jQs
z*lB>!wLb7EqUZC?C2lM*v;o|Sdq$sKZeIf%?!msgRC48T(@ti9H^}0BmmeTy{J1sH
z35II?@_1rq-QyWs5-6A57TQe{b?ZrfoK@G9GC8zP-i$`FVjEx#FGR-=L92cQNS7vF
zxCJy%G0~6a91n75v0<c3%bXG$qkLnChH>lWU)*0~gKivp>$V&cs=|9$fA0wFOdV`W
z;Fm{WH^r%y{{7soeCY13&Rw~~PqHzNKE-B5(xYeMIPNP-85kFhT{Bo-qLG14T7MX3
zQR^O0*_12Y$<FEDqbI#6&MGkV``t%G5+ujpS8Y)`(F=z)2NJbA`3yIU@cCLA+brq&
z9y`E~{VH<OJ+l{zAu3l~W`V<*$rWF3Ua>Xp#rx^^%bFBI5!YU4Wl0z;K0$)%o15d>
z!n<2H*EVaPV?|HDmxdYHxU}#xeI@QDw8}2PUq2r5AJ49ny-z>uHY+fYuhnPRZT|iP
zjA(cZC})3yM11`z-);D2;sT>aODePs6=0n$2n{SwkSz4D_Ho5+>?bg#uaA=0%_H7H
zw|!PD>P9AXg4~hfiTqik>#k1JgZ%2mhTg3gkBP%{u=47#rZA{U8+{u7@y`h4BST(*
z5>=ZGR+6Sfbmm?fRLNvqs6>mxOTOQHhS9I?e|$B$JAtHhFE{C*)-k@~uGIQk-I5Cq
zpD4pnWGzw!Q>Ti}DfJ1n58*lPSkWPo{(@J)mqi>>N}N~5m(d}fU>c)p>@r;1%Q{X5
zAAeN$?SJh_d+}=QrCoNziP%7)d-x8m=;3w1q!TaVHm6BQ<@eJTs`MEh_*-)rif}f^
zw#+PacAccnOLQI+9VOt~#N5A>6D>3U7KbOzd=c-r)~j;R7;sW?VwNYSaL5=Zk`%!!
zg_n~PtA@Y=5o9yKd~zt(v!AG?$YREid6*XwN7nP7i0I~7h6_Y9WFPB!UT^rw>)@a<
z51Jtk;(>xPGk}2nW)KD;CH%>QP)g|KngkZ;<(>0lLcxqY4p}1{sC~SdV&alZ*&dFK
zcvVMN%PfW52>o)Jz^rX8R<>KBhyolc)Il{3&F}sRG`Zq{o}O6G8Vt&BE6f0hb_CE!
zPi1M3`ioRa>}m*S9;2}AixnD4p9s*_O)321$eI_%Z8cDVJhY7u?8St83&HKkj?ib7
zH1oh|;4wl2#<f~2EHJ|gA;D=jf*KA1tO2!i`YRk^vd2FTrIx6B!r|?Gnh=diilWH)
z+trO413HXT5nqPMAvP~*J4DK;nLQTW0OgitCbu@oBYuI(nmNW0i9LkKK%?jb`ESJl
ze&%Q*Gl&gzUn4Ze5&<dJF9(*(^cx$IbayM`$HsD%+Y5T5d&Pe`{RZ_8S`8{N%~U$s
zs;G$Gt|EEpx>4Md2*x0+L#Z3ZJ<T8BMm!~zGoYd?+^6`b`+x~R^wXrS?Mr$yeB$*G
z2&4@=8Y4P`sKB{w$KIzd3aED$e)Lmh`AD<09|(_T5i4U!@20_mP{zmol5Ew~q$xnf
zyiugGbxC+;-IZOA(Aa#!0v}>lwc)xDRWxxn7bD@tsTs8Rny_1_I4n@@xzPa<cf@k?
zA=%(u=$!&$I)$d-oLIeuG=$#M#x^C>7|LswAa!2u8*qzDaCM3CR#G9DE2p5I(%d4=
zu@mL#v=SIrH!}2_V;06e>4r<&U81<fHJEBhy4v)O8>B9dpc7k*t_Ti-d!!rUFW(>t
zxJW)pg{10xJjp@xkOz}RIBa|8cQECq5~mC&knCLJlno%uRfxA}#RAQ>Qxau7Wo4m3
zogF4FvHp^8k#KI0UUAd$lNsgytDti)^{8xLCmACe^pzbVbo&?*nHNLMD=Rg+Vrs7@
z45&|2HaAqQqf}1ClMh0h?_BI02EN{GJz}=_?(x9ynhV(_W#0__x*|~GSlDh`=OOv`
zQ_>>Nya_sEUHj$rhBB$&3zDA6K$-8gD7Y}$qTG-Uwt#^2XR429Yz2#W9zfXFlNhFZ
z8^Xyg5zw0?&W7klvK*yo=Ti31i;eV#<JUwkFEf-0(iRxoo5S6`3l0SLJwFuI;Eza8
zqQJF7?z2~;H*|-n<3Wb9aYECE@+VMz*TX$iu&GO_heZ}kR`0xIwHbBgp#lMTXo)%<
zz)z#4zY5RT%PNwaLk+`g7P!no6rgAcW=UmZ;+R=fqw=clGGI~~#-*oRA6f||rpfaK
z43PqlF5+)JR{+ti9j#YxBpJB3Hy<=2nv_(I$uO_*=S+dU6t`z_jdiX`sr)_dM|jRz
ztZjoF{(fb<DAAGgC)zB{tF;{>F{49PF}L7?D7%2~RdbF-wMBV*;N)<KJ5kFjt~LTV
z?rGgM1e_Wbha#*I<UkLAf;aSdd6j)#!T@ed|N3gsW=-f|x;r(^V5iwsV`Vg+5XT3O
z0(KZUq95B4YCU#|L-!H|P!ESHnPud!H-UKAmlV2eZRBmF6&6|u<Yx;2jC=K_FSp*!
z!J+@-CqMJaFY?5~p-v!F1}a!vd+~v)m*ofH*HWSTf&K6Nfw*(9KYYskK!Mn&Y*H5+
zhqbWpf<zihC2E0Fse*h#?dj1odK-O_n?ZSK=EEp#3^Xz^i(_*isK4o%I-0IN>7rKh
z^Vm6l{AVg>-HB$p8@-ti|L4N@T7N**vxu$pLqqzy!RXl}E))!HyiDRXl8;df=@R@<
z6;exzD3x}Q4VU;wcT^&C4}$BuUq3KRWlU(FMpyS-uqwUi)u|QEbM>NE32jIfWxjjQ
za*{cy3j6XUl@HZ<g9WN$yc(ZLbilNNHcnM=u~o_r<7MtDmcZA$juiFe3o%K$rlMA%
zP|=7*jt|XBU$0sC(6}i6B3S&`#FxB6lf`n9oczYfA`h@I@T)gmtRZW4d-Ba?IE3RY
z-4O3kRBPEybggzlk=tPqEr0DIYlepd((0O<sk=x6u+WQ4m|aPxA>OwG75OGhTYF`$
z!34DSsy#@LmOogU!W3;VvcBi2)>2Zx3u#!?@?v@J--Uz1*LmNwY37EJjIb<tD&NUA
z^{kmARcyf^Uk+}(BpD|3{`GHOL<fb{z8C32wp|vkCZATYWTjg2g+)77Or5(B7~tG(
z?`{m8Cf-SJu{j+;^)9U4c{iS&r#IA^HIswd7$+|aP>N!N)QGVD1N2%v_)6L^g$b1<
z3$-Zsg<;eb#dxc?FPSQiy5&q%Q8ssfrAkt!E~OrB&AI(V8bPZ=Eshv5fOR(<sf1MK
z7zv5$!M1`nmUNPCh-TQiO>}2#H4w)|2_f53?R629208!eYWL)v#vxma(zH~r53$~6
z0nL(<UAXocDz<9@bXhj*mZyU+E|8ii3)F#tn)@1IaC^|h%a5h^SiPj?EYz*@kYMsG
zYCd2^brx>cWMBtY=}UCA&IQ*A%wt}m8R@0TO#(~sQi~8_B|E~)2dzjphXwzZ?*JGS
z3h$=SgWdwVQ1BpVu5ZBPE8-RVuUR7LmUtLb4AjVbvVz+a<bQJV(BO)(+Gv~^>!XkO
zE44qaIH%SJHyTkTIsg%vk=IV!IC&8}Su*{3Sd#t__}_(?V;@5g7jki-VwrF|Scj!5
zv6fIV#VXxoId^APq(6b_m_p@!qbjwu&9#nK1_LoOz)%QA!N&-tbE7gTd+|s;^n6p7
zFW$p<`zXm{t6KKoK2U7H#~;KiI-~Ea+K&=E?k@!MG`DE9u*HY`OQmeb=<Mo+rl3Hg
zxQ4%iE@B*2xExW?12L4=T`0*+s=_r6Xox>L0BNPZj$Wq7Jyy@6Nx9~ZoIOzXvyu2Z
zkMo*o8|_19QifwDEb2>_!zjbH){Mu##&#8NodV<w&qM;Uc4i*Gzxr&U5Q5)MSg@a}
zgWKfc_A(tznupjP=o!J}iufGuGm!hkC%Hquc*_Fttb7eS%-M#?+477fAp2Dx)DOT$
zxh8?8SHy6qmv3AMM*F<?MW61z$vScg7i!-~`s&47uc$+bjs%S}68o)wAMx&SVQ=3$
ze#PUvdXag;-iGzueUJxmYm@Jg@7JrT$OUXe9<oWe${g1%NF`1%aMI$=Hfkj44fiV7
zx?c4mh?sNscCJW3Wj<^F(t;X+=^F$P%tbJ<kVR(z;y{)o%FJ8a$qlBhS3?*mXE~`(
zy&^BVK-M{sr7$}u&I@l#Hs3R~axoUG{p(>Bm^-zreMmw8HD;WeGb)O3>7E_zsCPWp
zrKz}~2gB6^2ZdhWj}eW;fdys|Dqa2T7qzj`TYe5Qm90FZewsr<eH55hkd;<FSD#Hy
zje5F_5~~`D{%hBEYp@Bqv{7BAjO!TEy7$^T8#((%RF8FTcj4`=<_-_8X%=US4Fu7n
zyXhtVWKU#tZ9xN+KQ^n8ilFG|+-q%0>t!KfkJ`og+ZXV`RVZO{Cwh2q;#@}I9SU~I
zURS`8QO?E&M~$T@?6JhWmWu}iJ;R1x3I*aGu@Mw~Yq++KVVRY{GsdHgQVpij_EHP(
zh!-F0Fl`JI6bH3JAtNH0WCZxS2+i!*NGk05CkM+Fm(X9X!|Fw`BEHB_xka30)Yi^s
z-X6EZO+T<2p2C&4qf<*dhBeSsNZ3RMh}Fu1Oy&1JR%^9!C<pS#nPm9|sy3r)kh!YX
zz8K@_JAf^HWq9JnVsf7mx?zdIg83`hr(UUnWEWXhVpU{~bk;V3N!d6}dHv1>zC|ve
zF|v}=cPy-h^)ZTW@G>A3^v8*1@?e+AK)HtW@Dq57Ns9oXOMmGn&l%xy>PPINcN?08
zxOQh1p5^NnAP2yW;qRHVV#6QHoR6i1UTg#ME?(gUK9h*8rzr<5@A!UTCyZjJzw0o{
zfF!(OX6FoE*={FPn5o(ZXO0S_F1I;`0b8JELNZVJXKkZ7R;GKsZiYLZ%kpKqJ}{P<
zFouPkfic%A7DB7gSUg<O3wWP8^RNlCS?%mKY6CKoyzIP~xupY3fW!_mDx_=JxrYf-
z86qAxoWgM0$?&~TFEEyJkUqc9-APjDFjf(GW!ylNVxJQnO#j3m@%_X;Jm|o+>!x6n
z^%r21EJ#P~SlGKOg<e8v|Cxped`(HUd_W>>c1P_yy#YYQx>x)}EnD!9e}P|SuB5}_
zbb<czF0KYpVPNQWq*#dvh}`zFN-F?Fnzxsw+D_=5MGn`Hg!E7`kF*(h0T5?djzLp0
zwpU~0;>b6_G#`FzDAv%XUEI>f@E5S@T@g-X%0%LZBJ?>1yo5jKfTETa)SA+`2N$~5
zex!Jhlknj5(+L5DU{B6I%J&;S)LPh=b#Yr5b}D^cb*N_)KTXhvQjjhT*3nDEJXLyu
zHzTD4cqZ~XAW2^@jaiXV7IVs5*(uWFE*f%Haf(Dp`2B&BAt#w<kLK$#M4?(UZJRy3
zYYR_+<TUNKz_r#vCu8UZzw~#5-6;Os5qYX^AH{qBQR>pQA|$}qNq`=M^C!xV74*~O
zCRu1tPo{X3BPAY?l4)S3BI?vZ%ufT+zhV*$bGu5Ky_1UVd(#0HngRHd^RgDvL`Q72
zzWopmrK_$e>h#9UenyF7aYmTQ(hyuCeV?@>mNW!|ppV%BW5h*%_5pRkgFhfu0-*gK
zS@$m%zPD0YCS+RL20!GP=lt!cwqEc~g08Lu_Vi^;nu<9_*XXE&AQ@WQUycc!RxozT
z9BzKqQEq2Q+0X|CL14J>DKRlmdGZYCC-~f=jdueusvra~j|3~4MvOFhBuQ_h?{u)p
zRng(!Yy7m4aO>30skkJ1$q!2$LTa1j8GMxJJ6#G<OMU2@BWeBtxa%W=Ie758seuSz
zFn$y?SIif6l&XgJAK5rtid*LP<~=U+zV@Pe3M=#Tc;@fTH=6p%`_H<!v-iL%tZjG*
zU(7`hZKkHCw&pt4((lf;5#=IPZI93`Q{Nk+KXv0Bq4ydrrb<^gk}Fx0@w&lcP&wP)
z4mr4`oxu_`x5GcE@ogFkfL;`q@5#j_kQhwE(%xR${n$Ftr`$Zp*9M`z5{j&{+`+%}
z`i+UDixKN4+$`}D9lQlSL12EIaGf^!3c8>e&I-Af8YzVQ)+}cOW11mSz-QeyqX(g7
zW9;neYs4Qc(Zh8QV!ZoeigY9>g96@WorA4GnbV+WB(dB*Vg%L?F*V^L@IN`w^nK+G
zO&_Sh#&)&D<fS-4Wz@+{2Vt@aRq0uA%G$6bt^VpY<aJ@gdZqxxpEpB`?VW|$5y!|e
zY`VU-I8Jzb{Mg+B-t$i4fxV5yuipL|M2dSkSgCs_L}YL5s;><uE2T4-N{M&WDFZT4
zYLXbq73K<A$7r?e<yEz)ajc#a`AJWZ+pz3CJjz?*QTP;FiB*40-G6oCEpA-?dE<;n
zf#{HOF?)x|g(yZ74B^8N(KWp*jNt_eyCByljq+MV9z8fkLls6g1%15byB^y)d-ZNU
zN^KxEo3ym5pS_FNz~uTVjMZ`Fx89e^EDw>6A-Ssl;^4B1a!D!No8SSc|N8h2sLcW4
z_pGZ0Rge>1Kt(0;IIS{E%!W2FpgP-+B_cIZ03MW0nLX~E%iH1hZ?#w848km012i|n
z0BwwezbRYWkc&A%H~8DmbN7w~R8K!rFBQzm_H3$dB2=VqTf+(Tt-G;UVhZ&#2$!{3
zr@WaeWRXka41}ga*p7_~(VyM$cnQolZY+)`Cstk#|8Mh(-Ay1c_1!DDOkcz2G+Z3W
zSioDXpIU(L;oH`-sW;s>z+GF&T(zsD;@W?P;M=H&b5zz@&xw$m(dVU2(a9SeVS#(o
zK{{-P4$JpLXeRKOIf<68?IKvxmO0?z9~pFQhSU@N7r{0W#Cmg(c-G4|<R<VUlyw+@
zOv>3#2_4=`oJ(t|%YYh$R!)ccq_lH_qc{fRH~1h&*dn|kU8X8FMsF^ug<$_;M5B?v
zi(Gb1HQM2`e95!4wWp>di$fQflid9^`PaI{m)!l*xJMK%9>3#Fydr~D*u-4#5jQC!
ziZWFz&{2_f3*=PfOgz{df^inu{<ML!vd@^9=9t}&W85sI?Imq(z|2AzgeL&7q>Wrc
zbr{D5!L9H&H5h~V10=7MP-In!?Txe3x6WSRv?czmqO)0~pGi<yoDwV;rF4uTV>C(>
zfL5a4R74>#ch9y0{nv$!Dbv#j5X%~@<`}u_n#Nw7ZSe*ii>T6H#_rDEDfk>ehHtnu
zH&R%lI+Omt8=qK0^zw3&Sll4<4fSaqy9K@stfg68IGC22JM<mpefsIQ7-gCVAURb#
zf_w+gXA!&J3Z33%=YNS;+d=$&r^@`b06OT8A_GxT{9lW9CudGaqx1F<{uvZ;;sYX)
zxQx5Ai~nj4dd+C^^|%We`-?nHe>eB?ZWOe=xtRG?*oS#T<S3VMS9b3E-%s_d8w~ii
zwkB|=n~N{NYEl+e3P*A8{cl#$zZi(QsfyX@ay<679+N65#Ea3N0+$wsUI|R>+*Q@&
z;ylB&9{6_?MuMe0o1%1PG@H?lpl@Xqjd3kT;zCUk@@EDs-%}_in3Vt9F_Ci`bIET8
z9_cD?|Dmn#1tQweVJ${Ju-o)E|2T|<odC6Qr5FMEx=gEE#tpg2#W~WNiDt=J7EQL=
zwYq`_c(Jm7>ReJD|LEGf-lHq{*qX9%d-h>IN->Kav!$%&P*h0+BlYk0y^ijR@r>m<
z7OV%L^ZwO3R@4FSy5c$pIV1>O)OO`~K1qA)WGfRw%a7o>3%2E1g)qd}dsxgco-^P8
zKZ*D4?QrL@Y<!B$bPq_-_pl0PL3ipM>!AN3hyap%t?>i22Yh|@xd+cVJ0Xk61YQ7$
ziPMTZcG^drRLE=9%-(<hD+?>{EQfzsx=d|v^Xjy!0~=b{ND*HwB5bkHs^9+Gv>CUp
zgEc1$WLX<#Pm%1M<QTaR^N3#l9!X*js!s6>UeTE334#yxcJjM#sGn()?rg9mw-1an
z{uoqxNtq+RKYL(Sur2uDU<&(S0RPa7#X$RfJuCkvLkwQf?S8)eV?V3k`nmqk{S3+*
z|7K^8{%vQM|Etc{)RbQM47!8qhrwf@9!e8v@K{e4?{#?KWC*sJ8^p>Q8S<BJgrLY8
z4EIJZWcou%LBIR1ehp#C>?5Br6vmsVZT;qg(hAWF^(;zI{SH?bJpkT7<p4ia0@!sd
z2fF{y26w2mLHgS$@U_S5#Jl3|dHQ*4B;@UC<7x=Fa~tjL9P9}UwfGqDtp34C4G~{5
zai9O+3`7B54FAE<;g!!M(~emn`XYM2?ON5b(Zmay)txqeZC3X^u^&2jw_6nnJ+^G@
z&Vl8Uc8E9Q&4&NSZWe4VZwvUVs175|KVo>YbqF@OBf-)zx;YN3#fB*o-yz$cV(lC-
zP0dX<!YW(tctx@5cY>rM!es?Q@DVFv)?UQz-2{78;+np}=WP^2DPy}hMFhAXzt`6U
zE3#X_%Ioh0%qC*o+KUXIAgmbW6RbSuv1I&sjHort6vdGD6ud^{wGaY>?SDop-GQf2
zMP^F^7Fw$yM0H=-Yz`t~;?j2)-=@x1myFvhd=yQIR*i;Xuy1_cnUnMjMJF||l)1tp
zyr-LeMhs(MG>JqhI)o1}1+=znF;CVF4OB_veMk9m@f#5`YLkmwf9=P@M28Pz&IZ~S
zMM_3krAZ!$faME%ZZ^R#D<A@$b_&_Nfe>!zAgL@-%WjST_l)^`DbdK0AZ>~9XDP2(
z#6B!o6{!VRYD>a$ih{gSPed0rC$e>RQjq74ga7VAb8BqN80bm;?#343jxgjkpz{#C
zmV}UZB+El^j!a``2mv6eHCm|a=v-<>Rh{{tqH`l>xQGK>ck@_QxiMZS!dJAX0;tgJ
z19*!9HfFS>v`+I8gUygCdZKpiit=^OD5Es005GQ25{pYytB|S}#B5hzGD5dsF+~yC
zSidBh0HxZdcDB{Rg)U=JQg-d!hg8SfDt?{mmy9|$eqiMzcI`VPhTPc22RfPUUfihH
zK0?4IgLwnOn6%Hd1D1nTWL})=uo(}Kk71Q}M+{qLa6%^wMwUkF*1>74Oa7S$Ur^<|
zh||nZIZ_<LRP>qz;jM1<8zdCWOJ7|azt)G$MURGJjBK0=4BToNndR)=&6CSyPOI?j
z3P3xK0p^ymq~vek8^5+vxK;XF&!4;ldD3pVOzhsxJM-6OiZ@Ej=iuyEn*dNtfK7J`
zpqdzNt>>6izWMl3At+_B&8gHmeSmWqJ>1#qEQv=!f&3DaX1}$KDunthfmueQV49Zu
za%87fMJ}xs`?Vnpt4uJOJ;_<rGG6Dz0BU3t_6=$`Xy!A0NFLE_#G7i#nsjse9(M_5
zny^lxut~U3+K@S)Ig<W%mtWyC>WlK}!kd`SSS*A6YncD-6@BJ`TyISTW=WS$smHtc
zXhl(${%Iia_YjKKEl<>s^wOBy>J|!+Pd{fN7V3^pTbDr4k^aMVjy46Ke_lr#x~r=;
zp_Kh46`TD$hC&up2s@R@GP5kE(Evmqot;3%>s37r?yc?Fj-6!rYoHuI^YMd0p6*)S
z(`VRI>Q%;o;77m?J%A=ujg|Mv8r4lQ`AbYN(HBLYXvpPC@+n=|wmora%)Y&Ke~fTl
zc#btrOyV60IAUo-Y?u>LCnEGPz{W0gDId{BY6t~9%a=mbJ8KPS$^sDb_I^aE$2~HV
z$Qd_Ri^QsttAxW$Pd1dxbXNnz)#Xl{y%$r<3C6OY(~&;M1O9jzH%Qw!&SLVeLm^(S
z9k6kri>s+DVhf0hrQI=v`ZRSUKeqh2J6kP8gz7n<Ytki_w?aqa@p{i5E-6O0#ItVk
z8Mem-AAW4%mv9Rw_vK-!!14-#iN^FJ+PFz;<QD|pQDekw^##O5KR&#(_L+rK#SdAM
zN^h|d8<@3cc+TCG9jz{Ue1WAxmN#L83bheUAsd)BeqW#cqJt8d_7l}9^<f)n6t8IS
zA7k7LSO|lSpR6tO50M((a~GOn`mZGl9#%R^@w3fp0ngBI_YPOxtwnUI5O&?TG1VJV
z`j-imp?5#TN0Q<m;h8Edup2j$Uwd5xJh~a$Vex``Gn&?`AvQl4Tk}sC|A1-xD+!we
z-qpy_F$kCNhLKx)=i#q(Q<S#6!^c00bJu<NZG<yI1rCJ)9K~k(OSWhX_024%|IX54
zK!FP~FWisF&QFP)T4x{ff|$hw;L60{R3A5u%5XdU3nN`3bg=DcU$(A|&z1#UwH*>X
zkr~>hkiiBIc=!TZv7cPNA3^wdgjccs2zN-`{AROz6|Ee5gpaK)H%`q5(bnOs6EbfY
zmiRs}8J@?)G|dHR_n1kHvy}Yl=~RGTcvlcWm`)R$B1Tbffd#(BBKz<p$)33B8hDG$
zmFJk)Cy>!J#|(gjQ{#Xec>DOkcJmJ3TtB)fkcwyaY2HZ6UOJ;MWX*_o_s=WajN`5)
zz*hAD9}TLBi4`U=`JR9W9zx@>@_DnZW#k9@;c50uV?))&-~XG&&f`hF4A$}9ibNf3
zgxqJ`f<VVCM!;#zM|OBhUF)e&M>j9cQo9ati4E5KqR~fRv9``$w{;e6y-&2Y)T;+?
z%V33{TSW^>9b29PNPTatHkKcPOx8S3G5prBI31y}_BDp9p?_$791&N!5C@%?2+>mx
zfyk-Uw5u1B>6l{Twh%8Y<GJg5C=zrJljw7o+SwCjzC90d)MXfb?f^O$9A&<p0y9YX
z>U4lbLu**t{BAvy&`xIqzgRxE0qP|7qiK?<>JdX;kjKziu<8|X|J)tYERA{yzt&4G
zl*4u17fW@`OE-$#gT9#Yb%P~;KLZe$>DOin1=a|>9JuQv#}YQ)Rbw`03&g5Qp#S=c
z66<fY0BXrAG!~$eX<qIPZ@Vk&L(4iY@jTV2J0;>xGO2m8!?Fx5WTXkz$-eHZBGG|`
zF%P)vrp=e(=V=J>lN;>j6_9i^S>@5(_stX#VA59%5}r0X4q@_q{*G+97>Jz(@!Hh}
zWNc>`tEX?^*b3jsscn+J!ItoJ=Jb|!=x$A%^B01-yW}aADLGlNeHNT>6Iwa4br)N&
zK(AUcimQPX-bu7<ZhywYEd$h2Kx$4l+Ev`9+*2?N+~xZZ)@7m>#VehwYmWZmQW=)E
zU@2JM4h5-&V{FCqAT%L0U*>!&9oiWIp{G%K`r{mPsi{E5DR96(60?GWvU=HhScjv&
zM<(AO6~?l?D(g-D9S%@_07oz|O}=EsUST^&fZU(yk~#HWncGZU=}taiO_XL3xvaq5
z@$La%3FQHgYHMrDEqDWp#86)l8CvL4_Nt=M*_=LwinT#o0x&Zd!VjUcIk+e05OM^f
z)!@s{9ryxmR&V8<Jh^Q$w-3~*U8hK>VD9VIAuW!hi<2L*0Qlx{x>m#S;HzyM1i+_`
zDaltw$H!RT{rJrVCJ+Gil~jG`q>qRTBLZKaa=oDb;mOvj*aF_1F-AY;5jCVnAY(eA
z^zRsj<3bCd78(z%69!`^`36Gc(vo4dy1MTqMODJsUDQg4L-kVv(<{m|zunc%>XDFn
zn%Yt*JGRMcDJ!B5LQ>UsXj9m2D<;Fv_AuQ^46xF+m0z`Y@U!a2X6z!ta;j&5_AzzN
zXhZVh`ByME)CVeB_(`jORP4Jb%#jhg8f%~{BU@$zqBKxbDu9E*lo*ePwWM8+3M30t
zZf3Dx^~hPm%w5_<RJTGlND_9-qTyoMYLBoiG)o&5>dxjh$(M`;NngFszXgwy7iP<k
zq9cgqU?J5dLBXD>DRZnRNisJu;6R?E5R6!esQ6a{tt!gdAW-d(Rw_<Rr5nI6y@$|G
zwNb;N9S<3$C7RJG2n8jpOBNp1oayzoRMplwnZ8yL%#wf<I?#8Q91T23f!xi|lHQtD
zWLlR!s5e^KR03^bRn#Nc^}s+02XX)dc7XM#j)dq%YROk_Di%^`?6884+-twfE2;|h
zn*m(`ZZ&bp!5ordl}*~a_E_EYKVD|_JaMoq9h}&<^oL+j1*V}evzX1Q@&fR0`DTC@
z!I@^|EgraGUAsn9ML&oPvY_GK!pa)MW+ld`u)@P6>OgU7br;&N!g+0eZ0R4td!wiE
zYxLiD4NhwL3ah|I_n9}bbG675Zp=Y9c=_4tBZsQN=7z>pW}xI^XIKwn9=E^);K;Za
zdkokpZ?)zsn*VVxcjYV!b{t^agBecWtib{V`f9-s480vcB40v%GX}R$930qE`FJQ&
z&9q*Xurhwc9T8rNVV;>fOO<&m8U2~rV<}!~#@u5a<+HOA#;Io*$=X4#KII_K1;h2@
zr{}-054!|K-5ltb%V(^nDro7&TNJ(uR^D3NH}_08(0}w~Ii1!1O`Ot_UZ}eN@l^Q(
zVp%93Y--_H4c-``z8|G(y70BNQH4+WDGTuVM?$^3Z7u8MIjepnmV$Ej;e!!fZC#YM
zBtd(Y{^g*0QRVvo*#--(dv*P@R8)KsjbFCocC$peJXzRl7ORKLQ~O6ue2d+)O+=kk
zP6mrFuF{6ZB~9OwO1Tx(tWH9DV!;<|Z5BVT%c#Mix}?xBhQOIf3zTwyT_C6G3J`7k
zEd|C{Y+e%Y+OUFss82;PHyA%^<Mz3ob~Whm5kWWfR8?}B{s%RhBinAdh2Or~+Tmvk
z9E+u_%ZT(MRO*K}(~FZpc~)?`v?XNXMY_e+GaQlSg5#oVH9@{4wb3({+3FO?JBe|7
zLY690tifjbO4Mgx_@VV)s}J}{{8vuv$Z37tLm$iQdf=QI+PfX=JoW3mTCn?c<I8$j
zaV7vy?m;)Xx3f}NkV1&uHCAkEhyR{IFTbnWKZa#sKBe4{O*vRWKZRP)UVNI5)EURX
zCIz@Y*JTBnh+F9Dc`M?tBtv;;L#9_1#S&M-^V>QvNtP_}y9<gAk@z>P0Kxi$ook1y
zEJDjhSVS2K-46{p`mMKPi9D4J+wr$j-=>0>>f2M>$X^EbDZevZb)Q$Dhc++_d`(2L
zpYY}_2Fi7pmWQll$qfzHurGjt*pVVZHvlKDdyylx+g}FqQ=ol!vfXBg4HYC#>oT^D
z1hAztV-9}Yy3Hw&#zy=SwN?jhwMqTI)K>8pP}x7VRlHT*!~emyLbX$<edFhaQjy9l
zej!DoP2s7u35Tldy6T9CLnF6j6MPo~`+JCZKud3B-n)ehxClhwVX~(s)WU**Eo2<Z
zS_D3@fiXRopa03&!eR|yc%_Qq`ql65KEx7+rJ0!*|GKYXnDzkK>QGGO9M`zZgs~gq
zbHG5>-VC6+BgJ%|W)G`N!|B7yy_lj+$Ja~Z${sNQv;B@GUEZ$`?OUyp94arXRbj+W
z@;nlLVPp<Lp78YvQsfA~gmeTe!FJraj`-W?OA+m6DnX5`%?)!nivL=c$gsa4i?Sk3
zzmC+&6MGAL28>E3zIh8Ip*{ljIe^<{RBrU<IC2&sZ&GE1i%UIVpUyMF@McnA84Qvs
z2o&@~lX6v$>CBf9-l0BoZm-6SYB}a=kfzZTo9+;xzKTswYuwDO+LeelJ&{5k+STOf
z$?O1*5j2siF-fDnGgo-PU#fe3z`}VHx*nB!!rN?9e4AB;;Rr@0!ym3+Q(G70kkzkw
z{(_QG@PsMl%M2N+k%V!BmyhN3(j4}a^uHbU(>f*`rhIp(OUrzzQvYORVXZ6W)U)u_
zW_`S($$Eo|hdFuNw0YiwBz(q*#X%H$+WTkoN!Z6wGK)kU#0*?WD@<49ya0bLZ;_30
z5~PLY%?essn{ZQrFI(6N)pPbyZa0+r_{R}FcPmuVxggflu85-PBY0zC2SAf$=zq-x
zqN$x7?y-0h0C&a5_jRWg?`uF0LS(p6o!YUs&)b#vXwcMC#-J|WG$|zLv%Pm=()1>b
zfy{PsO$K)nal1FZkkc1Am!-YXYee&)e%kv!J(#KwfF^3&VHpMvv*@$A=2I6ylJ-Pe
z%1^_RM<nKaCvkH9`spUhhn8qO+{h$J4}iT-fsPXrV*h)M2=&*399~OdP-a{a++2gr
z^>6K9$B>mLcyF@9G`HVK90-<uQ3)x8)zcXc(SD54ke(v)IwqalVHIPYSvzvx1{qfQ
zq`uDxg(LXT5E5neNlFYfk&ZXCt=7WkM_i^8U8W6w4|k%>cX#3tZ|=;eF5-v55tVNU
zj71iA44E4E7vB(AA(~>KSC5U@8WTI0hLq`!je_)dYYL&xnGJZn(4gSzQ$<OS(6Bz)
zrYlGjE${1p`=l3Y3J8Z6ZvvDrB4bUNl3^BfI$|_3n|$7{=y_*$fzNy3EphqWIAWUg
zWiM|uWa4#ChIL2A)qB+!f<sZ25GF6pik5I*#Xkcu_i|@OYcnhcx1ym#jWdl~LZSVF
zK%LScHop28S!#tkMOagMy-mZz$bmtah`5!JQ*I%pGADU9>%s<X{53_$&!jvG+N=jU
z{4|nV84mnBG>vdsB#=CG(wro0c_3eNuSR*fFKgkum7XP}W0nBPH?xTJpL~Gamg_{<
z&)}9cr?d}d6Wd6GwMNPu%t1zuprZEY+;4u`e#0E(;?%P8gWux^ZqWcoK)Ao|gim)J
zK=48!P6_-#oho*=hAyquvnL(<+@`>RUX&VDHPTz!gK%hkkEQaZg$?|94|gAG_0N<R
zXqAM`(fzu>{cjHs3jP})9cB4wwJOXVrnA?3tO)XGS{<u$^Ic4t$G?3SRaIGPocCgn
zV%TCqa1t1#fk7xs;diblF9hTGnS8Gce46m%c#gL%^KI8VVjiy?WzryR?AW~}Y5Rn*
zfLI@u*H~O<_ijvoO{ygc_?A^bh=)<=qWTfyQH-O@j`ZtsQa&fMzVw+0vIqv_kEXlW
zi_&6!gjKZ{(G$<wRn@n8RM#=IM-yYv=<+yB?6D(Vy0W$Yjvmf)HJQj1o!a9GSjr?L
zp$ijB3Pp-JPf;UT6X40x9<1G;(<3cR>|D~KsB&q|h>4hXLh+waKSwAN8`J@+&-4+^
zvOT5F;_LN!o*|FP+=UhTR(}N$L@V`z{wC373IHc>a{vfrd!WJ?9<^}?$^(?S+mWKI
zrwLiqJHnHKBK4;fEX>|PN-B$Xwo8IC7Wk2+HM^STrJI|ZFa3N$BA|t@^$Y7yXZhA=
z6u*SzoUQqbwW~5W1Zq&FZ5;__D0WGxCYb`nS-)m`4lu#a1WOUhtLt+iP=+fyMZk80
zcA#b}F91-Me~`S5!JT1$S?}y0*Emoq>By4yosdYmRh8!wSi|0;A^)oy^l=eB0({m#
zKq$2_##)3_m7hIIIPGf=(nIG3j0S{@WFh#oe?cZ1E=4zowv^`%mKQQ4ECDoVZ#F6(
z>@3`q`b{iq!fVnK6^0vE4pH)RNs;yz9zcu2Jk;Jj#4lC?B*5PZ3`XA^JUmBG5p|9L
zl};qy8gy(LO0Nd}vXd?gR&+em7JhCk{VsXE!-f%DeqEiS#sp1rWMh_*K6qoZYk0+%
z#!ic?h<cY`P3!5ri)#d8*gs8BE4tQ}%3)iuUu=l3TeUFl^iVmt<}72Dj%;@8(nYL8
zg22)$)a02MyeD3_wc+Qj^i1G&_=F!TBg7T;Ti`z)wp8Tl#k*rK8%yB0W_dN!&t(Y3
zeeyCqeAS5e*D4Vc--A(dj{8U_b~V0)ow$~F?W}R#Z*#wY=v&h-*|+~@+RZrNO`l)h
z{%YcR+)9Wk+i5Zr)!2BZ&pMX-#NOKC&r>)H)c2_N+l-BM?F1u<*@|zJAd2ON?)$YH
zvltECY^+~`!LyuEevP9XgI~Q9kJgO0gL*$LxseaTK9GaSQO3cKwx__KF9gpbCtR~;
zRXa9*J9$9>w}Z7<lUgHK-Ok}2oe^jm%4RalIo`7*ZP+emL|3u479|a{vCYyKwwnL8
zW$Q@ZK6^DGczPA??7=?MVn6!fgHWkE81F|)PAw28Z_OElid0Cgu$C&Y5%9shHy6;>
zii_bkmKEClEXpVdPff6xoAa-p*mN3KbpP^m&-3U_xjG}()QeA4PhvoLda)99^4RAN
zIQdMWuUy`bf~i$vEK+hx;0A%Gd9sT!4KHP2${|gicr>Mxu9Y3(HFCmPtH8fDBhA)y
zuEKhg7Er8rKOVPh>I_s=8GbqZP&X*xtG52hs2c?5n6Hc2^SshM>f{2eZFJYCBSi8c
z9d_160D#x~3L-UjkrYA|RI;`&fINO~Fj&WPG^sq;1S|&!d&IeyhLF|Sq-=DXT*B|d
zdiT+mfzvHQxDm7u6i0JAe^PO8Y|lcCw5*^fb>7l<UJ!YP#|pY3%M(i{lZiS>z_X<X
zyY6Lpa)uFkr{e7Lr<ICoJnGQ3YcG%CLo$Z_70Sa=fjr7%$Zmi_{RMir-GJ^T0p;S7
zp6tn)m`RxH{%8pi>>**!`g0G#4NF0~FIbWNxC?!9Af2=TmbsOJeKt68?iGYmUu_g%
z_Jbnl(vaZ4W1scJRFM{WrA9C#;9(!A`-c+Soy~+NDq&U&`m%T8>q{_e>k0a?B2}z`
zEeVfsrINh9E_k>`bnBjp{cj0gz#Qq`1uySd(T`RK4yO0b6I<G<>sa0^=LV00v%-o@
zgACGJ;;Io9GmQ^S<^WMCDOZVAXc|lCF3b)gsBm+)wCD2CTHATvoi9hFDLm5;osH6r
zq=GPra&u(EruK@n6z|lNVyQQ*u3i0T^BO|^!I235_3l{&CgDgxGlV#Cgz#}b5xS_%
z4cU9Rf{YgS^$OzB%}HvbkfV{qGMErZ=FM<^y#~_0!coP+lPjU=_)Y^daDYWL-qW`b
z{QWLgiz5j3){yx!*@JZFD=S-T6vV6yCVISEThoK02%9GhR)bo_D`#|6SA#?uO)@Du
ztGkO;n6ao^```ompqLom1Vyp5>UvoTp012}DNFOmtOtXHnp6h?#t!W)pE+|-;oP<0
zW$aMyRJ@WWz6bhuX)0h~GJ%R&x=o}%@1sbZKPMD(l(Hjw67auAM@gaB4n4VN<fQ;L
ziUr6QfLj22(!%C3_08EfGbXUg+j>p*fJd-i)@RC|%e8I1d-p<O>NSdYw{!J#^$>bN
zQ7HvesAK`bo`FbybGc>ML|(cq)4q4=AdpFlM<Pky4SGwjXxSlCSQ5N(Ax*^dC6x66
zD$)&tbUQ43oxNjnyl&Yh*lRdTcqnBKt7VIha61^hbFeXNUUZyV%EWzYonj);OKVJ!
zgXW`KExr(hJ~t8R^-sThh4@j~8FSuUXbz`jwmf|183sOb&0mS#(TKASjHB`17G+8O
zWquJK?H>_gVb<=)xAmUhJnA|{DGTtd7GFq<jp!OaJ7oNIdx=X-FIOs#EguJWCqh=E
zKGrQ(2kM4N*Wy-3E87Q7EI6>HU&Rlmh&tTWz`TKUSLd{0Sa=g3BPXOsCyz0(iY8ER
zC-!U<B3PY_QF=PdLw#>Ouv0^C>|=|}RDA`~?WJ8nrQ8%2j+0+29A8Qvzc9z=;>RCi
zGKniJwNNw*2BjCOtZ0rJmOkJ&3`((W!K1$=M~8kGPn3x%HdX<?fpdQX3r6Pi(|oED
zbg-%5(7mk}0S94I>4wEAszGp{<RPB^EfZ{TEo?4lETZJdHXN>=c4oAebyK{st86mz
z<z1AdG+7+eoL_JWZVR1oX<cAF;XpXT!fu>o`3^=H-lifU<B849LbCbwu)Z;kE@Rn+
zH1(h&N4j~2AvLsWBaa}uOdf2Q?FG9aDuQ%VT~0rUIUW+*?2U@vzz-B<=MI9L&)jFl
z7Vkh6io3D4UR;U8JK}WU&i6CE)mGwN>J?llb+g_|kgi`viO-=*5Ic=J!x4_28iL%3
z;>Ihy-WQj|ojChleoAd+pQ^eW9MxW5SPN>lc|=e<$*1#2c2+FkJB|MHMdyMrl>LP#
zkbWxv9-Gt5BXkyEV2I6X0l*&xnFv>?X@PP6gu3hZ;{+7+ieG%g<ge=@thx-K5Ro>0
z0EB3T-D&+mX62|598>6kZEG!|y1^#=<N+dxkx98^aN;;<Ud0byXdSq6U^x6;r15tw
z*Cjr)#JA61R76|}e`EhBAURIV;JBkL!VG9k&Ct~0UO0h+Oi`LW5xZqd!pt53w#J5u
zN!YJmn35FKHZIu<zjQ;rX%wF6Yt+Tr3@tsAcQm!gyzZfi63T}d)$VE?*PlCPp$Ri8
z(6>R_rfe5Tl26#QrgG|#_`!T`h3kVzu1>&+gB26{Rjms+@f=J!A<7G!%A={`$KR%y
znBOLaWxf?a#J3EQnIZ|&{A2_oMNJVNc3v5OAS^8H?lQE>G8{?#TzCw}q=XvTD+kFJ
zO!QnCs=-_;ovhxD&xwDZkay#dnWABunufR;R+jDM3>uR1O?Lhxq;SnN!0<n69hxbE
zl`f(#6fCW0BzS?e&2p#7o#NjvGFTgge$>6Fq2NHAxjkY9VP=o+%kHDkiS8RIKu%v1
z6LZBF%?n_F<UVSQ=FCXRCK0$CW{?lXBWb?=m|R>#t;SQVx%1AF=Z&SJu=DoodCl;=
zrUs&z^QH~4f~WSZVLlI-z`|?ooY^^gRuyN8=TymL`1^_B%5oevGzLHE>J3@PH$(^F
zxh@he#vb6XRs}_GiyTbhH3jQ7$a2@04<ru|n)Ep$tFGw6#S|)fGnkQ$gB{ZxD1x$y
zbd!3f>Rco0wu2Wdq1jNzD0sHc6aU{d(+TSWoEHse@GVX{@JEmaQKAI9Sg>UY;hxUo
zC*Qynk<NA+%%!>a*ttca=FSP7w}3*{oHQeFcW#}W4JFt34|+MRK9DPVV7YZJ4Dla>
zdwiWAZ=buIBOq09FH_WWsauEW63dxX=4r;+t6RhmaD{tXS?~Iv{#}Gd-C}5M?a7`j
z^m>j#djl^h3DRKkp6=rWek#U;VR54pM%#?~5l-0)D$gfxy`H1>1*M{<w%OV0vtaN5
zgc@{Hy%>Db2IpCSYFzBoEFOQ%Kf>hMB2~3^BZ7+$h937qj?<j=4a81VoU(9WHuoWs
zhWg+|wyW@wgs676qKIt~!8KFty<bUo?PMQ#z!A22>y$j9cR*0MYG;t8yJ)nj)hS4Y
z-S>jIxji>sDbPRdagVbUU0SW(3`sT~oLND7YjD8#3!6U-OF%`8NmQ(TZv2wtTlG&k
zWoCXTm>(`zKj<vt+9nJ+Fnh~<t;z~Ra!m%9D!)&yWSB`@T3*6D)0*LP>8a70F_PeK
zMLYe$svj70YNICnWg7g=*?QDjLbEngGyXDPOI+niMy;jGATW}4%W$=e+C6v?(^ERY
z9DMPxNHg8C7HyUX`U!Pi*{=P(JZ#A_Hwsy5T11%g+S|2$N!Qu&k%GPy3S6f2O?e9j
zVq+RcHuTI~IOW%vcF=#;^)P=`dX<q<g{k()kr<3lz3@3`xiw~JFTIS0S6{=q%xi{&
zIplK5TvXIbX|9f(7xIYe<8-U(-gm45J21tt2Kq>aA#63{uC=MhD8w^Q01Ik%Z4l*r
z;de<QysYK_U*Hw@vl6CSxmyIa8&&p3YRRm67WrCXQ_)l&@^w3HC$~6BiMYmx8zJ>w
zAEO4RQ%qiD&x=gdt&7m!YRq_%IWJO8UgXS+EN))pD6UhF)$qf2A&;_`q#IcA(raG&
z8M$P@Il2`}>bm?_TvdeNc06&<6JHZ24v!|%s{i%jNtoAIV{FbG^!o<8!7CuPrq#DN
zXpubV83&nGJp)11-Z5Wi4#O&}%ncj3RPva69Ag?lCRclvJf;@%lDXC^My~jsoNSy`
zYmg$<%K#LW-=onFbeL-u&ayV+bhAG5bi=TmF2|;g5)-sxX$wj}iEENKIu)EaUF@d7
zYdRRPppFm|27HXcBcc5AV@(2o#h27E;1Fr9;Frg+UDU%9f6z)Yz(Pp3EBC^OsURFK
z!6$iw!d!NLJY#uvYgT`ng#z8EA-WWquZ3T0-{T^G-KtH00>mHc32+;lbMV;emfj7*
zC5D}wTsG8qnn`scV5KllMo8>)osQo@rATyrVYlJ28q@|Y!v|_t0G?_RA}4P>w*R;d
z;6k(KH;A?{f+MFz(XYlY8ie4$uv2)$oZN9_UsjRRXMLe;US48-`#AslxLxB$D(1Ln
zxZTiGA)lKkPSa*^s3qQ(FZyXwD5@VZzOL+l6IW7!D?&V~9fgzLDp@YiS(w`rdMjjO
z9$WV$eWKpanfSL0W`A~KKzsBwG7<5{yfrtPFPlZw7l_H|zAhl0-7!5SOm-Ls93;B?
z-Is72@7c^8!GsH!ZVwAkdB||qbKMHP1;8Spa_y~28L<GGu6fQ260E<IbZ=nPZDzEW
z$qLZO3J~7S2IkA}<`3suD~-yS&j=+`m}!L*PN>T*%f^j{bZ#RXvy<OMR#jlLsizf}
z^$y-gh##Uuv_ftXmd8+OT&WQdCB^h+{r6UZNx&et@CAhVVyj}$=RHJfIQ_#qZgd6a
z^XYG`FmHi*DFF}tT2!rW%|Rt~vCmK8GkmX{8{JzXPg4BMX5fn3*$NG}t+Cj2WZs+D
z+~Yx?6o2-fUNUAB8HPz_re+H-_WXCR<>s;VXi=Y@>G(5AgNBK{XJ27_27J}MEWG60
z1Hs>iZRCmQz?@2hBzX==o5BO%?X->epf!M_DDcgdyW7T1+YVQ<X5f*_9>+ENvS!*C
z!*%9VXVK!N-`BV>#zLMzPSf6eTzgr-6X+%=0&D{CVBkB-E-Y;5BIamfds6KWD%fTk
zv4|FCU0^(ffjg|=I(#=p%|{O-Ef}!3Vs@^KW0x9s-n0dCOP0jiGm=n{uzD@;5#wG8
zUaNDCNm90S^P+d^TI)j<oeJX&i%U!t3)~f0Zd#{M=H3G~0BN9^&3rPNR6XUlc5IPa
zqwwb2pv~$LPHs<(Vp>cajnHuKQaa$`xTMZ%5$9Jg%R8w@-YU0cT|7p*5F5zCJdbzD
zL2VwxT{w1?PhO=E&Z6|6uH&8*xw1-IS(JhX9&P?`f=5xG60TaZA#|rZ{JY55B&6el
z&0zBu!r09BIxMt7Olkcl(N@XH)HmlJam}$*wY4Xd8%I2f{j~|z)Fp=j1AV`YLY;!d
z%H$-o;%Z7}Rl5hpR`AkqEVl!`&U@Rq;b^fs$F&MM^;~ZQingm&<}3rsJ?LZl*7ECb
zTFyW;+&`N)|0bBdUlTRP&7uVFob>7gJ%W6JrpWwWb4Y?@jAV0##|U!bL!+Knj2}^i
zzFiwJm|jh4+Q$r-m6CO?^%jZUtM|e&-Y>9UUXyX?0!pno=9_x<h@XL!@G56uE0RS?
z2CGezY<bQIQp4$;$?*G{kp~__K1{Lqt?AcaOf$of`)6J3g<bgfZEH1ChV52phMoUe
zBQJo2BS?&|uih*98*NX8f)sMKN0v*Hdr4@K{4^z7GGxKTq5EGB^@Vc%M-$J#{$>qQ
zlYeexvBkBI+BQdYDK61A+_qhDU>3W?f_+lz|L^;SI_YB@q<=@`^SXx|Dz}{5U37KU
znP;73Nz|+ORd3a;+?U`zFSzbAieT;&aa1ZPx5Vnvrk9i^=CEO9apK3V6Bn<cI+n|<
zNpRv(LaW^}Q2=A9-e^fJhe;r3yMG-qGklj@dK;4$#G|xcXr1m|NuUh(;<LVM%!H^T
zoMLDUkGPAC0*I!yJ=jqy!fF+_c63=p_P;Fm{gNSu>@hCh1=O)*yG=>gKCmlc?w`&)
zWte#VaWj^;F14_dfBkqPg{-&_MP0Z?BYTNrvOTP2pi&5#UF}If4!Bi&(){(cf>Wk2
zNZSV?tyFLOsvQR+08IW(IN0=(0Ds`2`-fdJ2tSh?ubXw|C?(zl9J@;Z&si#t-|90T
zi!dnd8<3-K91^&6R_^1s`ofQm%xw{TsT0`p&FMMD-&)?>97U90M_3T4tM4`U*)p9E
zvGcmy_a7molPY3ysGwm$iTQoZ1AUt}i_<0%t(qv56qkDfol`@(cZUzy0E?h_0lKb_
zU)NI`gdx)#6^{|+g-BEB6z*?h+iG%X2klVkos`br>iqOw;<n{5jxK)8;XYC_W$zsB
zVtTNF`7;Nq_Jps8MM+Yqg`?3m!YP7z+lhbntlc*%LHEIgFmOVtQvQx)KRh|Xg$Fqo
z4sgq8baoA0{h)#(;&M;Q6elsv*3Lr_sRz&-M$;jBPECxMwoiPn<YA}yTe^^J_|B=L
zubW~pgn?*e@X*oTSzILd3Frwa!hSk|h>&bn+JcQ(`i^Lse!7Qo3Wb%$MpCihdu&}`
z?`MkFtD7DK`wejkf-f2zL0NYaJV2GC_|iA0oA3eknvu|!cdwC+G97p7AD1aj!KH?J
z6g^CBtp1%7f<t;waETeOXLCjp!8KHFPf6sffpm=v(gWIE@~nUJC_?`m99@%%{{YzI
zNJSvE<;A!+*|QzjP69vTWpCfu=v3C8Ii@BRvRMA&K4vehVm$h#AECY^rsGDquSmJO
zaLb}K;2mf2)p%vI@84x9CiwP*BCeBoWrT|kA0iGmjj100;GxrjazrXFc@-^&(}$Zo
zDq&`i(F*s8l`ujAs88cpm^NJQRNRoL#z-hK#MaDMM-rh2n)9uBurjL2cf^y`O~Jof
zxtk^kE}GY8Pp{A3@ND0l4c@w7Pe7s1xErhUdH-Y3IzwLD{Dc4!&E{+4r21YWoY|HA
zqUZY1o`Cj7SRniqm?AuYu06n~ys2)^t~Qfi{3^0fQl<RH!~HaAiMC>bs@JS!n*1VW
z{9eE=uQNZUFy7b;6|;IBu@tb43+O}L*E5Q*@Dx6t!k<1yM|yA4JKI&buDhBxumkEy
zAy|I`@j`2cXwman;^<mBB>42016~arZ?7O}b#+8FaLLE^vZPP|4ddjiQjdqFjv`TW
zS=%cIpsaE~hLWm)f(Bt|?D42tQ8mMA;i77z3j4+{AvDyfQnU%Gfof+Lc|eW_lqd09
zxW(8wJ+UQLn1}9J>L;EG*ix_+x;fBu6d;mCwGH=JlkO=<7O%0xp&9+9tLaS(D?8)l
zj@WSX+jx4gMHgX9Dg)#J=X+VW)WVbDdwGhFMG3xt7GI+}x;+Zy39b<2g?a<>;;)S8
zJhq-qFI2T{kW}krr>NRCiBq4dkI^7pB440j*fOE46$>h4h0hYp&VW+^KYnEojFdsA
zw=H%2s;ZzPk+Jh1@zJ7<>7#8bc>KJydP4)`?tMmxgi7}5H446K0uN~oe3t^atGJ4X
zwI*uPh}^cIS?*$=S_m_?=_|&nG|p?r<2@p)4Ufc{(QP3T_MR6YLTQ~qp942&Wpk0*
zv09)a88#P@^49L->Z!e`90#D~AGJYas-$QEl~8y#ZJVzr$l!VNryuR1aoxJ`pzMjw
zG9d%Xb{=C`AgF1|wYyE8%Zc>k*sk_Koc4$kl`9W$haEMqOzI*S*CoN2WG|$UOk>b$
zb5x^`GIlyoT6|HzG|+vS2Z4{QUB|^CdQLI8RlJ~}_j|5{<hu7LGQ(_&Z78kV{;Q5J
zH(>=Eb@MGpz-4Iv=J85ub2(w%f`=Vn*vi%SjyeWg;p{I@YzSoL>?(iY0nN$^wGxPA
zWdwCT03AjPRNzvq1AOmu<^(L$NN~66t%BHnYX`{Cvu=#G9z){M1WW%wsKWJ4HP6^`
zO4+dB%g2k+5DT0)Ep|4Y*adr!HGOKAX{G5bgid6b9)bR~nz>oLaHfN*)Z0eF$h1$Z
z1p1Q325Y0qOq+(x+vdO(EV!2WY?zq!D>pS|oN4j&dkBsSTKqj715357(aiot^<%uj
zBc_%k3Wd<pR0(zCEu9ti*>(Yf?SY}zr}nD)wEobRUCYzk!Fp<+?PG~miq(B0*K{7C
zNljiyz({K6nm0bZg|(A`xpI8F*(@8-w|qr_rUpgtYL+=>>X7G5UJ)j5E3SL>Jc>!s
zXM%=K%v{D+IDK_FE9z6y`$WD|2gnh~^(%ACWmkxVa=~Sy2`_8%G%hv#>xDH=4FSeU
z;=+Mpj>TdHn{Qb#XTr^z5ECs^WQBXJIGyK|78kBV;OJiF;0>IyADB2(A62ZtT{3n<
zVgnZso_&t2Q=9CUjjV(nzt0RXOt>x?kl)_Eu;e1F77)bdSw+^46Qka3rD{^5MUl+r
zzsOc@n=Ch&9TK?7=CKCd%H5P@Y>!d(t?V4BlMNO;fnQkwmiYh%&{vlNuwCsy&d<L}
ze5!?Wg0s{*eBY`cXXS5276*T)%B;jalUrinWYKt*(3QNl?;TQZRA0g+>X%I;c;tRg
zJEi@ZD@DBr#w6DZDOY~kuyA?}IiJp1Z@cx0onFN{*Xm6sc0#0~<fF%`E83dU;NHrq
zMuo}^YkV{l<U)3_Oo4({A#Ic(wtF}1xYE%6^XL??L@AHja~moQSA%jxuU*dIShHYS
zi<Kp|qLMNMlx`O7N+T}bqgUyUBm$KLEX1c={F@AVrpYy6cQqzUHDKwA|7t*8oHQb`
zf0I4GH7J&7dGQ)q{K_yQL_7*hWbE@Cfz?KgI8s-T_q0HwCWZCOz^CxH%*BQslCJ$}
z<cx%!z|F__FRl665X0(CPMr71Vi^l(nTPQEi59p<BagB4mhAAGFY*6pKQujHM6M(<
zbpg%0j>za{yRgzVlQDJ3O#|}}F69A^K0#ox%>~<l1vl_uW-j9os5Gt80TC5@O<O4O
zZql0-IS3+K&{X!~@R?J=k--lK6??H@-95je7W`u3#0L`_sKXSyM`Gk;2HN50EBcny
zxB2=(B@w!-3G1}EnV!d3aAfp;WqEE1&4Y4wbqA_qN8&I9STqIPxTDiUqocXTsOwG0
zy)ZTif7Aj5qvbSD2rpFNbcuM0d$333ZaQ2qB&0)Z<T$)0U*<er+2hC~RnGR!mpN{j
zN1xuKC6fIdyd^tY-}WfCoiGkr=qB!(YJrJNq}LW02j_b+01sC!vE;%uW$@_e7{@70
zJ1}&Yg~zRzV(}-3_AS?Cqb7f9oA6dv>pV&{k&Z#;of)*Wx*5#j4lfpssS!e!eM@2p
zC<)Z7H-0@C=XMq2#oQ@+7sI2v*#`0@*m@uZSOg^Ya_ee~e|NRIbu0?Hp8*59-#`2p
z_-k(2o{FYh&HNs}ivW=!^J{M6(mxw-Wk~QQ`TsLF(WoK=6$`!86P?}cG>$n{?`)Rt
ztpC$b^J4l1%`#1hBUT(z-0zMm1||&p(BKHc{}&ys)e`LF(E>emIc!ld-r3~hVGo_%
zE|D;E6JeQj^2nr;{CJvdo{36Q-J-pdkXF4mF{>tS1wmpdz4hMr2!C}XC-{Eg1D=nj
z3Bi{X9b>gOE<8?14xtEQVVg5ES7$mbx(&LgsJPPO_aejgOQgcbYomMtcCtUf9T%_o
zmiVfY_=4)aNGsnl!5KHKn3NEWdk-P(k_ufQUx(lPU<Jn>w;)%WG_HDK>}LzpTz<VG
z>8OBRvMPK{6J?Ivq0+n_|4i(Xk&*Oun6PGL46TZEhihf`_KkQG*bBfdpwSnspv&&<
zFk#{k>v8ADo7ko}2L(*(Y0l<iL{z|#?)xS=HWCOw_Y<9>YBO3>x^!K*Ot(J}8?vUf
z*vqb^!>Rg6$~m@+<HV7bo(WXe%PN;OJiz5>OhhTa``dVZ0i72U*v5`jMiV47COz9h
z#Smg3ZfqV@0yKC3JDlEX3{ih7ls3vSmn$&<p?#v{6{YqHJgs}?*o6~-QKfA?0Ub1G
zOfCtX4bTVmi6hfI<d<&J+l;R$R;viI)w0d2UavZ?QTuVs(qn2Zwm?g-3Na!y(!Ol&
zr7b5BPoQgU%PImtr^$0NJQ(3oLA9Rj61E&ox6m-&AG5&KW5OQqr|Fk4cGkvv*0e(F
z+O@Rlsw)^~Y?41+_I5-LQxyt^09BXus8sIa50?zjp}c@p`wkA5_>lRA48r91t4yNf
zeT}CCECi#Zdmn2yc}O)<Qw);Y=Jd}O1=z<WVIC8DyMKBoFT86@2tr&{9V-BPmvVD=
zVF&w3vg%Wrs?WX61WsU9$}(ojP`3(GQqSuZQyX8RNFba^u8zlIVvpXUt#|`=6J<pO
zYDm@Ba~Oa}D%ar+e6T}V4Je;nRD_|~08;9?Qp1jnZjt3S5+Xv0M0*R@xGc+PWADVj
z%-@AZP}`bAB)1Kk`mrri+a_?l0@Z{TSCWwoGAXjljYUhLgJWE{TXG=tP)pgfQenIL
z;?Uh$sV|@oGIpE{?qksfHdYMg)`V3UW8ADA|EvvaA@B^G&R*i%F=8+$(h*XDR%AmK
zwM7>Wq^t5a%C&}q+oK$AbK}Gc)Q><HbQdI>F-#o=(Yx39emOvM#YvQUm9t}<-zXz!
z!{H9kU5n=uczCEj09}4#og-l~2^M(6eGVHlLW|bmB}Qc_j9g1NC*2cIIOo7CUIg7C
z!?q@)lB9Q~@pQ&u>A0b*wo)Ys&}tk5J-A$sEO3PcKxxa7)`l1T400_XQ(bw`FBAqY
z&ZIyQf})`d{fM)@DA_TGw>-GQ7wl>wf<XPk<5OUMcr;Gp3P6Y;)PXbs8jCRj1;`J-
z%~-UP$2;X!3_P%{nMlLM9XjJY6+u>|Fgc<o?z+VIsNA$at0*Y6ZXrI|x)0gb0wb7<
z*cN~Llxu|x1Z7PqJj!-i!><p-UN)_xdyiP-$Y@RDZ$~zeL4%+VT``cCyVtC7BcwQa
zo>F^&6#spaUuhe#0U1bkY>9tm9(?0ciL9Dw%&5I3k_OU+c@Z?;`w8v&B8{={umd!A
zv@K}%V7<J0sug3t8AuEXaBWxfWiWQLH(%T{4JEjvn687qQVBCNgIdM`)ySJe47#$S
z?p1JLO%6QTCot%fD3SsWjdj8lHq5!Ga!W}Qxq{*Gt7tFTD4t_N6ME!UDl7(@*=7bu
zCUUHSWo9)U&R;KPiT`F_OKJkop=~g8+c!ooIgayQ4&`lMZ^$sB<4>hTf3}Bm9UszP
z^{!#O40e@50%^F;g{T#eg>4*3NLzHzfYjt;1di3p4`!(hr%JV=;$B8_4g(Q<au`X)
zjZ;YXO{$73h;AzLqlCQ_THvDdbnaV3F1MK6eiKtan^sf13E9<;8w1CMFtuL~DbbJx
zhuDaJs;Ky)B^c`p>C@h#Q~V3tliJTIY(Tn1-ZxI?6xlz$oi03?tb{t$fdmfc0%>%C
zNf?aN#;4TxK{Iu*vrCorsdo9<5#x%Ay$@d^zK)KZQsECbmnqiYR4`=MIA1<fO2k{Z
z5;gqeRf-qlE$hiQ8I_Zx6hx5CWd?vlVb=?0oao+2X!5sq(yN+drbLN6HRV6GYManX
z3A7@pf?cnbmxuV8rbs|7@uwZ@Q`1g-qg>p9UM59V;@InGD{?rFf7WJu(BR-w#fIk1
z#nf=#s0gK3^{)2ep9MJn>k2*+_O-y1t&+VNf4f*->=!Hn=%hAaI>t;GA(C;d2uA**
zP7~rYBrg*9MkhPu<$Iq=QEjxMYXt}nZi!^8C^!)=?<CbVdrZnnu+E1U58T}_91ukv
zv?SaAV8{8J=hKBXs_bh%8U=O4F*s(bELTWzd&p-=lc@XhB?mQ<Ttre6OsX^wO<@Ud
z<x!Aeti$BjYH?S{Msgt}wdn(_F|{{I8!UxF=rLtIB=*`X*CN8B<_ar8oh+maZf*q?
zL6x>lvF+x`pwF?&dZ}zx{nJ(`se$J(Pp)?|m*dc?7pi22*)iTsqbmms)<0YlHtM2A
zLAInV)+Ebbfd$qZf=U^sY|gP65agfdpf{D!8`8Fpp%iT6nXLY(lxWZ_h-{z3*4Zh@
zskCws(9<0An!jL%jiZsl*Ba;C(Pha+(mU4KKFS}<=ya@Yj)FC;8qF0<2<TqQ3FSF_
zG2^V69P5ZT^L7!}M>PwHNm9U8+uPtlns}UL&ftDD0_lJzQKjkiEu~)^kmE}6qxI{v
zMVW0KZ+0c~(TCBys*=hY?w0^Cf~jNPl#kY$$&I@EB2&3+x`lpM|9}FVeKAY}@9h|s
z;M6WxSb-HLW35(c4u}hbajgo}(EGx`fRH#GJg|j*(fDYuF9uE_rIxIMUCw3YeY;Wz
z1F^1F43|oQDq%TeDx0^!XuWy_{q7sGB0Op=xHC^Oi?snsuv>G)Y4@0gtph0)_GIeG
zFYOSdTU28bu?on4Fvh6@ywujK3MM@{AK@T&M|3hu=)(?_f7}HP9juAz7woA*ekD`v
z&ObbmGc#z>k0q$R0*7|WdWrCBp{oY}!RF2^hcB3n`bnT)FKwy6>6mYpQK8KGZd4nK
zvZd8uNH4gbp^>^*&^25_AZsvjfJe;kBCQ`y8GhChke+oxVMiT8h4mD9=+m-*yPqi#
zTxI1?lN+Uo=Lp5)pZKpb81DqM`8%P!cfYgoWNs@*VVwL>FF5|hCK%x?D5}OzqoUn6
zbHz{n2JM4<`N=QQ;!R0lxbNmjdG{9R(G15{;Y+@}^y6PHMbOG>Pd)`>WzNqi!xOAN
zb?}U0^6F6;{do11`Y^ik>OmPPdG9rglwN9VgFNdC+$x4UYa;pbo`|=)laS0SW5~R~
zI2)09WsqhZ63*jpLN>1qDZ{e(A*2keWDvdk%F7S_%KU&VSX0)Ou&Gkv4T?t=)AN_S
zz_=P>G$_*tS$tVad^ya@*lHuG9(K*VXVAVub3<HboK*;P=<&0&Cs`t|vPAaQC6>r<
z=h3&C5RKoaPAa7I_)ar+IX+V|LjsQzG7c}ZXo)3x3Rk?u&@>%zKT*?-Gf*|Eg2_MZ
zo>UPl`Ir=JX{Ha>Sumu{PDzHeEx%t}eZS9|#$KJ0jeQJ%*<Agi!%KZ|VCd2fzCtGP
zZI<8WvMMZZ_{{Um0x!KJF+(x?litn9(lx9MTXdI_b>fccaB@dr<IqI$8st*l#wjD*
zg9<4l<QmNha*g8$0V&zMvThtbxpvuP3TZ(R$cif+u5wP;#`^HhFNddic*Y4EQdl-m
zzZ}0$Nk-zNsytwC&N%#X#xW)N1c{ortPQQdDS%S-39vISU|lb$$kLjCG(id4+s~b2
z<;E?UMyNn*dHVLQWzZdBisD)7!XA8YF-q9o4IO|{w)juyG;~Zkna0EvB^w}!dvoNP
zM;>^ju1~|EFv)_3GKU`VpRa84qC00<rXIq<9J=SBm#eEn9qPf9<ZbSfkL$v2m=*E!
z?k@R^{JDzB+{*$ksP82Kz#_lT<NK|A4<_`MRTQ1rjxy>p$}gV5s0|cRSO|_f?>|=l
znc0MlXjL(w=ou*P$d08FJdvT$^Ug!@QwA1VOQTa|aa#)L$OQalFwD+B!UyLx9ryGv
zY))xafp^6|Zj7V>EUz#@;dAK)7-$&5Mtb|8G>Rr@kULf&CM#r71R2%IHguw9?Zr<>
z7Rcg+s7$tDwW?4nr(iE?1~(B|J>~sSKD>i3)|lh4Rs1j~;<pDA?t_yUMr-)5;i$T!
zd*tiJNe(Igwo9HVf?GoM-L$j}yx}=Rna&K9K@B=mdV@7fY}Q^e40rhqH*8aja+3U-
zz6^chN`@<nROQL3B4+RzZs}j#OWYa6PuF&oe423F%=MNjL{fE21HpO`J7yA+l3>wO
zWYjl5nzAUaqG=}Nw`t<`ihbm;Pe_!U(6RM15dS?^h1A#Z&1Ki!p>}9}F9}X)qW31n
z#KRQC1k-kN({cvp$EjIrXIC4)`K%*}Kvk_iMai}%wVT5`$-Yj8f49vkh9Mil^Xl`8
zBL}5W5Ah~RrGW61X}rrRunh&DI#yVt_YsA$y0w@@_oSvDo754q0$?p~mTN#h7l8%H
zpJLQYy1W&Wyk7(#d_fC_dqw-eF5e3Gf%mZEXKh4=Q2LRbCU!s@k-BpTUmH<K(parU
zYFaRv9fM?o;Oei9S@pCOQ21SyH#QcX7FD1{ciTvd+j;7yo##b%-Z3W?x$5D>*FIzA
z4fYX!q3eIww&gx#b4h#8Sb7-FIygc`*uobCy|H3$MyNhmk67#>E4W%IPT1v$#bPXS
zkV50ex`u;A>tUhH^v$9W{n^-2IgDBLkmth{%=;AiMJb1x@P{(L7;*ql5JTvsGgx_s
zAZEA&(y;t_J+LKHVD4MNecgv@v|tDo8agJGGmDTUg3{*Jd3hH9Ardl}+OJ?(NL<H6
zc}5P=8PmKeoMveK;6NJt5<jiEWQj}cYE2!EGUG+4d%cjlcOG0drQ2q~c-Aubd)8m9
z_{BOe#KN9~uu^-(%A6s3t9^hAIF!M^viD?K(|CoBPHD~W<E=9W$J6Rt8r+H=QBBkz
zhx9ftPJ?$R3f#2`pDt>ZSw8l{L5uTh`@E$49}an=>nSVE!-=1DmZux^$AzCW!bd2a
z$aU+`!?LgKnPV>$7jWKbkd^ZZ)?!)2y|O*7hqFS@qo;Kbgc0VJGA(EJJV%{Gb8CT5
zj_h$xC6E6E$Mzgy{pk2lT^co#@5O4h00uEnHRL9la}c>S*VAs6?m>J%vCZ|gn<cA;
z6l(_ShPjaO`AW4Y_MQzdSIKj+sU}-P+p~SCAJ71g2f-nYCbzbNd2nQ?|CU7u$<FLs
zW^r<>H#ZTTUm<t4KKF!eL|g@BaUF9TW*uXPxKCHhRPige+y@P97Wy-3R5iqsR!Ig?
zuWWdJOGgWM0ke*+M)8dzSZd7{Aw7xJ|BaT6bfVSf>ZY&Iviyy0E>VgZIzi87RA~N0
z{&t?<Rx)v?w90P_p*4gQpKh7J($cJ!?r40oJJPYOJZMcc>IMBcEWp~GK&kR2{gJRc
zE~Lf>@qdHAlGJdeR<vi5H#|<m`scuu{D3H@SRQ6^cg^B%ZjTxSyv+(6JbS(&7JIjR
zea6(B;aR~SxoY*-tNNBy+8O)Qg;S|4UVN1Q?c#w^sh3OTo^B5HTrkuNQf>#<?*axp
z!oBlCSXwt!aY7N|coODJ2;-?Dg+cOPa#^IB5pC`6-(yZLY70%nQagq`Q6KnLD8=<O
z$QQ{D&P2tcq70tXQWYG#ct+t5o^EdFU-jzjO39#-ioTL=v+T__D+O(qgMfj)?h0)t
zsBzyi8<=~!IhG4)6ed@2?gER8_#nZ3xz~~88OC8J9&%CNOQhDiE2h}k=nH#F!Q--o
z_y?!UjosU7E$!G@R%48^maN0D{h(loNzZmTcj==Ia{MiS7Vo2sRE!u4-3$;nTgkUM
zI|}FxZRm=5WIRY?UD_A8LKnSo3)hw^ik`kezPYB&jC$Qd+^}<Jo(R#IWiw@#lu?e7
z#;9<`Fzugs@)?B_!MxyhS);u!XbfR!2$uO_iPUD2rRfT7W9uS5o4-=X!gN^(*vlon
zoV}nRTa_Xaa(aMe3z6*}*dGV?A}!TRGs^<}TF~I12@@X;siR_O1@l>KKDUnNM?saa
zWCpt<0vBgDJYIB}5K9SfBZxkcKysij*)w~A@gkNdJIWDB_I55Ub8s>jN<nAf{FRc4
zpw<?lux9xy-YBf$1KERGxl?FW&h0~r77#7JDtpDk9~ZqK*te=%=6GVZvy+WQErOBA
zAV!Lpyp+JGIp<`FcOnb%5yt5OY@*AJ+=Ee7j9o<fn0?JAHOOA!3QMV*r|j`}Y(K`&
zXjpFfE}R(UL>Pq}v;EO50Vd4x>y&KpURCN26GPsLZKGR-r9OXi>8S+kNo=X#<fElN
zI5n?KNL%T|ix{bH`R0X&!I<h8ornW212!ZJ)~w6vU>j9F^|>h7k#~8dOX*wQeR>cR
z_zK2~Uaq-1HM!4pssKASjlr2N(LVw`dVeAq1$A<fPwwPD!(~R((@%s<=gX`XTtm>C
zetu+|f-Eo*H}=4i46u-X<*>5lGb&z^is9TTYM<xDp91ApgAi$pFMDOjZR}x=<-;6^
z!waWc36oahQE7FTI4Ehn1@k<Gr69b^F?)TLU<oX$!(C!+Wt&`W2g10H<i5sOHe!L%
zI(<1IV<}3HAvW3)X#&JXyXC93b*BJ~lJge!=`OZn1jDp|w*BJT(m6ZfX#UccLwQGJ
z>5hv6#F>1<t+zOn!JfZQ`TJaccUfs%eMiB(5)}jeaw&Y1#p7hp5v<=Ig5Ebn^bPib
zU@^njxf2U|0naGAxqPw@jUtShuugn2?V7$aM~{(59@L~rSz8<AP6sJm{>Jl-@gV1`
z=OZg|A@O`}F?>EVI?B^q&&O@1V@9MoI)fP|Py|SQDQ7_h(7qTJ*Lnyza&%0WMzO#(
zzK&>?IWxA6t_chVNAQJUcWb}6JM`+ZRA1+A%3m4HYBT-Xyd;8L?U9V)pntAHIPvak
z>l~w*PP{jl6gGg)D%^IRt{*NnNc<c=9m2v5<4l>SL+{KW<yI=&|J0CzCk6jG1kuXf
z*fKdCL^H6J8!&gI=l-G;3-hYHnqmP5cjCdm6yv)`V9sN48_K(V9HihIru3(|5_0>b
zi#R2s#i0u);pRR@Fz+zWs5mNygpmw26xAHt_@G!+H{96hWOH6}*^)?a7J0M`F`AOE
zSH|x0zva!8i(;6vyyhU!)rBPtjj~i0sH{EBaarO4Gj_yUrb#fS&NPpUyQp|s5Kt0c
z53WGl=*t|i;1x=maKe>L%<E3V7%xZk_7|&4^dSvR0?>*M+2fD_(QJH9$6Uq#?GS*|
zi{bkuZXq#TziLLf@#L$e&=4`3rfA(tll2!B0AWs_X4Z(Y`W2r;Da3nZZs$ES0*v>c
zPG0|5AWa*(Wc3%<AC^PGU6u7v$|lvAH3ZN3lIwA}YO1__M27@JNX2?ee%0HAZprGm
z430Gm2*g2EKTc|CymkwR>xMUnCvU4Ma?Bki!fF?<Vk4k0K@wThfqo{VA+&lS-K|8!
zPXt36*03Th3#xH4lSQtmp0XKrb7{=p#Vt!F!r9&Z@{N<U)9zeuuVh)e2g$4PrF!}6
ztK~7lo$CegLI?fUqj97Rs#h1&C+Uc@S<{oNY2b(6d^EP`SMmC4s0QDmf=|a5b&4&0
z)54t&ohWVqT^`U%H!P+W=-VJgh-JBvlRbv(^3_s|3MgdFJ_=yV6-6iOLk^!x`@H1Q
z{U^i{)_E0)WR;7FU`uAEC|)T<8hu8c(-LlPtbWE|q~7OI6C;S>R1jameVEaJyN>nv
z3!7*E%i<t_^#(-Rg*8I!g2=&K>={d|(trl8>S3Ye$QIUDOY_J1_bf!#v6zC50C>Zy
zlXTP<RA=0|N0i>BnCIF7f?OF2Qm`?GIgLcb%4+B&MOS8>FuA8_6ZE3JM|~_)tf@&w
zO#rK&oG*JUQ_Vw}CCVw$MLLD)Jd;RRC!f4hG%at~UaUkLGv9Lc$U1VPw{Xv3^n)9E
z25i#O3M0vD8fKbtMa85CviTSqqOPq!6nf@dB%<J0E!40S!!{F*t6_sk>-WsqOd{Ra
z@UaIQgJ>1xd$2f2Rn>}R9aF?f=Fg~-Capy2AxgFOCRx^%$yn*FQTxr>rlB~AwY(dZ
zTbKxsINl!0Nb0+(b6pwau^u48Q;SpE5~ReF1%<<w8L;t@tmA#u4C&6y23ImV+lQ$G
zZi5U<Qyx)Kl*R}m|AAB%sfntG%ygiX^+Ze${};7IS%k8rc9U9GkXC!B15q;<lc=9d
zGeDQdaJJD>tz%e^<G!=rVW2}JTE1h#IO147dr)8W<KKc@Lg>%qEX3%rCOfP#E5NBw
zeWI%ES&%A=XH>;bAwIBH=?AnW3xCuIQLMpq?m*RkL_F_su9x$`oj8%jSeTluews!0
zP_7qre8Z?Ui(Ul4=0_+aADj`wh@G+*OrMuew#dJ`*!jSVP0)DlvK~3Tw{x0$$s=q%
zW7Gq@uldM3et%vfT0JhZyio(UVmsHCqz30Qxhgq&56QzSqz;)DfjiVkrH}SKD(xh?
z-6~F4a0^!Dsf@(nfrWKQK~=!eE1UOJZ&D`O`b4EtRP(N~Q8fZ-2hIn+8vhb1=nHAU
z)$}@J=Cw7kOj|GSQ{sxGp@F*c@`A^54|WdWBJVH_EAE21CY1(4c<gHS>E+Q5CX=qY
zD=;~a7k24|9I>6Z$<m_(VG^-ItDI~?As7WO^5-$Gkwwh0E3J*H@iOGjn@g_gBK097
z#M>0PJd;|kg`a%wghwEvkuU#G-5CWa^?fN*=BG>ok!i#Nez5f$$YpU=jEIpfF_*T9
zACY5R@bEeZ)X}6Q8aR|UN@0r<DZCOTi*4)NGz8sEvxuTRQ`o_B#4hR`WctV>(-|^T
z2j5<7O*lbnw5p1V@sFb$dnS0i{L?5VjD--=F=<D%soN2Fnl)~BA;}RrhfgEyu0nyJ
ziU408gGB<{9K=D2r6_Z(4TUGt*MXwiVmY$d112!Tc&o`x7r>trUP#=2HNpmaf$87N
z*vUjQc=W7Zb{0<uG`FLu<_bjgY0#ccvu1amWfOGqh~#x|J)Cx>Mw!G@&G1wP^c<$k
z!TiEEm%c9pR_4NT)h8LRFKlKL87N64ZUv4VD>8MnDRo0JLHCH*-7W>@^8oG1D~F}K
zKnVt`$?YE<0G#!M-h;er6|v^Yc)UHr!m<wRSsWql--lT%#;rV0<P&i&2W&If1n6xl
ze%8ljs>080E7-SRZ<FZenlTRD(!u^oqMPsQE#JyFh23JK63n-$jJ>uqa|cWTCO>e^
ze2be16_`T*?`nTwpsi+YtEg?YO4hE}i>&>V0ya2gL6F=|b5xbGcELI6M0qi57abIP
zXoA_`hi4hT`>KlIhfCQ*2b1y*%i7D^DTIO>`P8k5@8(Cu7yO4GiRkYzLwZS4tA^p<
z_`xO=JeGsqlMVm;M)q$~Cbe6Ybbw_;V+cW;Do8WNFq`_;k1V0pT7}Ds+Bjt#UpmE)
zPo|u}hM|x5%IG!v|8ysx^VmiF{g5S)Vio%t(0XL?DMykIX8yK7l+M&H@x^b4|Gcyc
zWs!C5X{hpBWVtR=28J7bPBt}t4A}7AHGEo$yW-vRXu_K{-R_C7OcnBK4}&F(=qM!c
zsYiOj#@6IYCNW3#&Mh!WNLp=NCB=gs@H;b)`{C08-Ei%~XFtUJn=L5kOfJMWble_9
zV<LlP;yOdLvgf+ToYp0tOIJ-68F$X4APxCL^6H2oRUh3UC9@#khn@d4TcG=#Dlvjo
zAw6UBM)^dr1Rt>t^c<v|tGH{XO7`4J6!BX*xe9|%bbKWY=+X(2l5FfWBNb8o_BPz0
z%tn=CwX6j41sV?*seb`$v&YKp?h#}+@UrT^{Oe!;>#kT>D?t$GP^cPjK5)pJSq{Nu
zE!_xA7dMJ!6~`x`6@u|2TYKYySrz$8I;8%L>mA77B@3F>tl+!@#MJ5&vUndp^n&)v
z$J0@nvqY3%etEj{r&R8#eTu?s(OrDa!pyH<lg|*`Me^o&hAce4#$Ei`VU<_QDvr;}
z38Fr*-tl-rcYaLJdcQqi1}wO0T;l3mPQ=+!lMrlo*!}L~PXJxir>oWjBSou%6HmzU
z)kmiJ^5Srs_S40U=fWQ!@Jz(*77tjj#%`p=Cy)I8<*Eg_o|f<&7lkZXE&c+a4lb8f
z95a`b45s=(pjwC8iVSo!hY|HWQbzHCDO33n@8ZB5`G|KZmVmY}4M+wO9!7f)X-}yf
z#LC%VxG1o=7EYXudW_o84vI8J6zUw}uMir@Lh^d6HIvfynIT1u4@DJO``WxgTCTKk
z{xoP~b3#+cnF)AfnAYgcX|4JHg@(<etB(0(UyHmQ@=sX&|KDuYBU<&=Sgg_2*0{~?
zABTH<Le-5-EUN4?49U!JpRcw0f#lL*?=|`6N$9Z~CqfADu#>zNeSo_plr%ww&1(K5
zR(57>{{=z4`g-n!n(Z{HcQEygB!c0-uEL7X+FP75*l?hgu<xbY<l@EYOS@W4?2Gcd
zyHgPM>oE@7({b32HVU`=0&u4MTpYxcJthZIZo;5Txf;pM9Mrsz%`szsE>@*PWurhG
zKIBzL<~F!{g*KypM)`W2;=q&n(en)NorfYMkxP{IwdYIC!bP2=S$hvC@-DNS7{an%
zVIi39gMAVGzt7Y`cbtDOJFaLP*om#XL@Gdh@0Qh)+v*z1oNn}Q-3?cEcW1l5{QN9*
z1NMqVWlY#e0AVPicRJqi^WXZ-e|MDU67ry@17aa1nSAQ02t=y|M6Gq`>n%9&QT4yN
zRkg8h2_VviTPRg!*@{Zk!H&pIX>2r837e{+uDh%vak5l4QBGvs?%UQUs#UKHO`W+3
zt2R3$u$?q3$me_kE~+Lfh5X@_K^Z*dV)4_7RUct;zpp_~Uj*Q^z}PK;L0JjmZ+C_j
znlN6%)VzZ0rR|IvnbhzuR#~pROmoQRA=cSJ;<7VOGp@MeARAGACh4=~ZOW0hA}z9A
z{Tk~V`~hKKldK+KX!MTM4VWQ_e?UAKX@o6S07y#b-4S!@It9P5W2WO;jNV#xM9HnY
zxMes^GX;<aR;X7dKc6P_(#QZeK*+z`_t=&MI$8B{bt&3iY>@ANx>7s55;Y3QcbH}l
zYy~#aVbvrEilm@CpfP$E7!c=<UQ<SPmfA~W#L_4F#nfHQxEi9NwsN!d|EZf{J73rT
zyqi~rLBeVjfIt4-KB|w?081cqk;Xpue_%7O0<~>A^Y6BCt9@KbPz4xpr~0QpN6Q>a
z|6u5hur4$zrfGh&aHMt0>i<gXjF<;2{eA1W%t$LIlTEhD)hM(4gGjh&TG(JI7tqej
zMk<|EPcRpV=hu!)PVHc&lJLUoN#y<1OZZDyr=Vf^>~G_^Pb|S5JAa#|HpSE6m#h9#
zRIr8t+e$B0th&JcfSuKZ4TE-A?0-@p7@J2x*11D6lpBLKrC>;n;am6eWkJ<fwKB9Y
zYV~ht6$7Vp8iDjcWfQD+TswQ0r4!5CQANjO=i1N(1#>8@vEF?cFgV%ds&3^lXpAwn
zvWJ~`1we06MI~9*-q+)01HBc07-_4epnQ=HFDh$lura7Js3?)aDk}dh1bVdvZtNc=
z8t7`hFza(FoX6H$PI26sa2r{TQ0P^;=ldV!Ze+%J)m{Tc*dJv(X$|W?j|H!e=4x=I
zz_~H9Q_?K8zHBskY!6uCHCIj0q5x8UR6G=*kd}$IFHt@Szvz+hJ(W7)dJ6HqYb3f%
z#4<Uo!b@lx1BZs?)fr{a+`tFrD{c^bDxEG9W@S7^%{)c$fB&zaLQ^H(y#Kize_wCo
zWTYCgRzlU!m$1*vqa1RC%M%0J)8Q^%DLYXI?B@05*f!Wbt9}|LA-%6Ue!NgKGTCpT
zYIr}-6AXsTfnJPF+iQ`6tV&@km)nuGT8WIHM7&|Xf8|kX(y1)?*2GwC6nW;CSfaaU
zunbQy_lkDG6wt5)3exD!k^JtC2<9iR@|p>MWaqQO%@j-xNLoTDH3K`lpB10eWlnL8
zgz+<qu!HsVP6VBUrQQjdHBqx%iw?;<(IE}tA8DQatIMqL-mUp(NM)P2jt09eKBGg_
zbMi-3gbHhH5`Iq~V#mt?B&bv$=ZD1IykJ$cmk$PKp<WI$S(P;$h#N77IZaj>;%yEo
z8wGf*8n8fCigDOa3*VMowJ)Hz4_B^=aL_=}(%F3faAvfhpp!5YgvzYUSg=;sVdj8`
zJUHlSc#yc3RTQOmD_8{w!5>Hd6&my|7AN(#x`>5u)uO^tawT{!T#cNB*u6(cYzimC
z%8n$Y&lS*uFa(b!C+TMZSk|WRAPbo%W2!c_hqa%Ux|fcF&cN)j4r40b0fV*7{B>}@
zj>ZQ(gJx`Gm%0d~Y3D>eqf>NK!3e+l{hPnH<oB!dThZ@r%e%9px7NcyZl#hZSVuRL
zuP?NPcX};T64&oNM_y73>wNDN%U8H3XE}3j`#*CTJGFj3X-~MW8_V&y6Ex3QG(0R=
z$r(p$f1DiJ{4m3nJNuALtU9;jmK9^I6>SIym)2`Fj;}3&W73V;ljV6O+EFj&`?glc
zMj2LvEIe&tORHir?CBOYN7Rpk67il$+;esNu`DpWKlt{d2Wb7*576Whu^Wn$>b1o|
z$sqdsaJyv~lTAs>c(+>SfBs;9Xc^ufyg9u8b<6xk*VN+=@cE-_l3mfV{EzuEJj8pV
zq+w5IcEpfH2E1-*dvGZWfr!UeZvqx89vC-ui`TGX+)`n#uxc=YMGdYZQ4AMeD#x-#
z?0-l8@3MM0F!2V43B>Y7gE%1$nz1n+KwkPiRu|FAe#Z%Lu*70vmBc_C{Az?x!&?zL
z3?IDCd&>QJt8Bbdy)_zO;SY;OdX^(%a2~+~3?)%3Y8-<x)ECghZEHhBTjk1v_cN0v
z791{(p*$9rnmPuug$4WwhYLj@YUJkL#TH_IRZGjO`)nQFwg_eQPEXi!aY#w@7TQ&s
z3qu$})WQKWCv8LFR$I~?%?7JiO|7@P7M6j<%84=1RtQ9xd?k>=k{l(Lt3J6Z!QCOt
zT7M);IWBvy8Y6i$#|Rc90jf5yy6-y6mk4U%rbjj@;e>uk2JbN@uq;~Qn*FE0T_nQ4
z*RIn7uG2(m2G2J1IEZwJB6-@f(oMHRq!p~-qmSR;e#MGpqg^g^l)<)*S@RgO)Bp!C
zx#q1gU(CxYmcZ6!qcxNwOd^hQ7f&;W2hS?WOgtI7d<K^Y#@AN1oz4!i*t|x1Y21W+
zV-y{w1f&Nvfj+UJ_cMgj{9{uPOvR?Tj)cK^9Sy?}VH-SXWBUaf2hHWIW*CmciNQ1R
zp#7KZi+Ov21Evk_q2AA^XVt)V3D{s2sJIIL6kEvdQ$5K)H)7&<UK$5Mx6dnI9b3{x
zpz6Ndh{in_WIqsLxQoUsxa{+bA2{{YJv{pQAKiaM7r;ncARC%q?%nS(%XeJB$Y97T
z7lpG-hVM;{5OP!G3h>rslo&hVqHd}3ByrB3=M<CY9L+f=`Q5knF}hmywEV+UjK|2_
z?2=cUO8N&?0)a)Ee2O{GIVI0o#?DdhVvahr2^J@fLDihh2<6W}1YIxi+ihQ}LT2!L
z>Z#yLU&81z0m5c#FZh$rB?J@6m#PZJ_s1~|%B~ozMs2RUT!Q0^_7rF>Xb`lXp=k3Z
zg}`cE{&x_IGLQTG6=JbNTV)V@*9s0UHr_2uhVtn@E^D$(2rHplIeQjKT*~pJ1>+U|
z8Y{jVg5&Ui_kC7TNg|&!I%RW}6xz7)4O-{QJrkM$GQ>d^@^Je+SdPtUMHw0&!#1Ec
zZqbe<i?k4j`wFz&?w5zaHeN!iA@&e?rw70PmxsXaJ{|sih@D%u6B(;u#=fUX9ei`a
zoF_U|<*$~^`I)Q^Qgazxor~tp^)5w%b>M4vOdN25t0aCr@kd$F+}Mg1tZ$Fl#|ju7
zMcKzh*rc|!4L@GO=yON*u_mrmWb{pb?rH8@ssULP7T+$bASnCH0|8VM!?HaAKs?om
zfnrT|3ftiljA4TXa%GW*W#fRfRtsyUY|GTP0=<3Ua;^|%u8W{`FtBq7(spTz*E16B
z@pkr7kOSSS9z->7gh3$nWx*@!CEfX8>3w|}yl$`#4oC-IZ~y_(3y6;?plU)R*_}NK
z^)#Az5(6u4Cb!JLWL9tYL1$a<J5|IxdP1S)A_7@20ayo-vX`hklH}$^0GBT=La2z#
z8cy>(e%y$OleK3+;O{|vfB3{HC=P&z)5(d5%Z0M~Q|#x$H=}=HCE3|N%v6{=(Ciq_
zVIcRsXZ5~@yb-h7I%Cmq0Oo8{hc>*Ko*fYAY^Wrix~A-N&g7`am8F1$h`#+$ad8gK
z<reV^Wm6@mZOEhE=yny&%GK7ESGtbcDIB|(ckh%7KoAhQJBR_1;U3UZhkrnp0{8{^
z&=krj6F`~2A&wp_O`YT;>M~TZ=-(K@)dV-dV0OkV>JY-UnVn^T5Ce@83sSuAgo34-
zBaQOupQQPf+`H`kpd@HiCQ&W5Cyr&!%1}lb3-A|4l@}?%PSgz`%<g|BJA{3(eHv3K
z{?}~Tn58fxo$M~$wXDC+78$TAR3FtW1|<p}_ahF)LypdgMz=eY{E|@0P!R+W){YEd
zH?QVk?BQ0?5;(#q3W7z~<o{Hwlt?Z3kFCP#)Ec4Q-(4nJrJQV)Kcxfx>8H7nC=&le
z!=Uwp!Iu~^%K@87-mW4B@)7QSL43EpT}@w?2|$h>+-JFo)WNo7a>~r*ob9qiU|v#V
zCnrU#R%ZqloJQgE=j3(M?v$GLRoDyj*s=om9(+k|3|4eOA;lEd{Olfun2!>Z#Zy>Y
zaM7ICe-dm6-ad5!j$W^~pRp({75`-Ma<gDetD4G8C|kH@KZeunzaIFzE^yTT!NZ18
z8V!t(xuu`x#9USEyN5iFO94Rtkml!7RmIEz!@XXqX={=8FqD)o%Xm@odjUDTdKPAE
zeb<r!v~8JBqQx_(ystoeml6uE&sIQ@?U9(PpX%U}shdyom|$=40cL{QMSXE~=13Am
zonhU466KL$sDJ80T)jR@M~w)6byK-plZRd(kSrg8U8s}Oys{kuj$1M=A4{-3J$VIn
z2iBj!<`T16J%p6Qf7>f5w7S5{L?PEn!#`c)2D2guXW&xYFKS^=_OM{MBS_-rS-^^u
zM!!5&yo(L<_`!aQ-Y!-9o6F2=;m9<4r+Zt*OVb)ZnOOQo#e(S>Fja;G<jnYwgC#H}
zJmf<>QhS$Dak_p~H_z^VmymRSk&yf+?(&5HjVjtEHOI+fuD<bg{S23<XPzxB)DJDu
z7;Wug!yX=~g(4E3!@IZ~k}MtUDFp2fUPQ^S={nhDC;?<4Tt&PUr*X;Hx1z7P&YvPz
zCv_HL0u#`kPa|e=Fzj|usq2zqsVvr&_gw*D>Q+1SlhoX|S#y?*yDh8ojyg1?HfyKP
zyGd|RSF`Eh&*2Gi#u<elDfCzVh^x9tME0FhE?cP>m7JUU*a6pB`iPTI^W=scmwu4u
zJEO=zw?P>zYG#2+y;?iSNH#@X3IFOJ=4(fsjmeraZ*irWz|rdn<F?EHs{;z@mTTFc
z+A~o@Vi<5KRz^#gy~s|Vm-hQQfkJ9UiF-NYT%*!#dZi+z*(URh61&uUhQ&%5*SgeN
zT45U%T5C|_*eP(Z49e`)LJI3mRqo{x40h_oe5;1+WSa)YI9}``NP$<1Yqi+g>;bSK
z&R`9|6|)eCXn@eq^2ex6Y6v%F$v(;E<zWi?7g;wNYkg=P5<(5+lpAvUtwPEz!=Pm0
z8$(1)DR+aZDqHi{hCpXpQl_&_$!k>+Up`m?{?s15$@47{hmd-97eJJ&BT6r*;{0ax
zNKY&82^}#TK%A|I6$Z~WvKa=eZ)ZBx)PB?Nu(z}DfSNfuEHLD=>x9{tT1xz_wMoOW
zIZ51&WbTzQDf+4`CN2Vit%q~k&SA?%5&z%<NNnED!4(I4d=&<0lcbByy*O!K=@ag*
zFEnwAG(0l6V6%*vU?*|6GeOK*{B2Af)YWo-4epQc3z_KBX*(;Wwr$YaZApCrv=8II
zeHCsW?nQ60GuvNIWMB`{Y&>=YS~hS^c5Le7w-8eAQCa?htu=8<a72$<20O=J&K0yj
zi?~2?Yz3`u=1s7$1XKH|C)a(K>ym;5bHnmEQ}+7$j~82K@;h&`5|m${75Xeu00e3t
zqLry3Qw<{ab!)qEWWg?D*+6|Mf*Jqa{B*xJz<22h7QBNKn_%AC8eVnV9CL&r++H})
zsGd9KqaHMy8B0<5{6VV-5*o9oGm@V*sfDX{F5)qJsBFLKDj&^iT_){7TA3if<)b)u
zuz4jTWsd@zD|f|$(P<wdSE3dPzi2Rf#46a+#cc;e|3yrvtfLbihzZux``1OC@#tr`
zeW>B&fs;C@l{*@Ma55Y{X_I+DA~3DuFVMf3&vL!i<s*7tT^XXgbkUJM-$*XuVGH{;
zm!^ch4oXkfh!<f)Dzs$VL7w9I`uIL~A|qg1x2C}-aJJ3X6axMICc&hu$6mlxQ!id+
zBPv2;_2Vzj$1C!5y_iWn4iE7D7w1b)ne&fghgf~?!Eb-_{2wSILyhPZ_pf5Ky~iin
zkW3Zn4dT`O+H{}<w{ex0%)HUoiByvQd<_gs0W0rt3GJTi&YNsw#>Ag5f+5=$lNJ{#
zO|ePOwlp37;%zYeVojQxDkfsHYbIiUA4=DwVux$=IIi-)jjJ11z_{QA^!mygeq7@F
zFRp-*!7Ges29#RH6+ZvwEo5x)3RCb`HL9@uTMLvnR&Y5Gg!onY6l`L3*>p9Hwr|vv
zDEU)Eu>Zsk(Cp+(VScYcE|_vy2+xl&3{qej5u>P;<(XR;sdMaQ{t3OjbJ>-JA$Hj`
z>5)qeOY5T=CuvB@YvGCOX<?^nJ|q4J^QQCg+p|t&C0AKz>)pKB5Dr;;feT?57UCV@
zI0;&Fkvw6H6FPCP4kqUaQRQ9<1X^kVuW7wyy?I-zDFiR+5ic2-UAX;Z1S4oFf7Qg^
z;H>EE7VjCJ?J`DGx9<6_n{BLzA!e2Np}<b)ty$&A_F?6OTKB-?QA#$$F=o0kIwcFF
z11u|_$C)9pGIIw!SX;*klpCa7G%A`#Ln$*=iAlc4TYqsuU^9axyGgM0APv?e+8Jqa
zz4}wJ&R;Hd;B7;L{CKg$4~+>EXS$v#a5xa=*8W49<XzO{b*;KU3ci-G2ZoqCI%uqR
zbw=0EG!Zm9D7NA2p46I_>52mLnX-D8hUg392kL{UYacW*-n&r}Ky5=p&kudQL%oy`
zbf~RH(RH;GGUMm<$k48gPz?x93dPjjQpjprD>r^}ll4i$KjVGNI~r|J93pElGbtk^
z00!$00<YwIIKImcwh$wxIb9j~T5TBJIz}yOX&H#^Oybcha@l^l^P@#PtGUw;6SRaL
zcQ2WZlW2;Y7tl-T<S*a8uczt8{n1~V7@+J&2$zcgk54L^-L7eXRv4mzQCQf>6AxBP
zqN9~;Tf)_fui6f)t%7C;ItZitB6W+kt`n&b0j`$jOXLADDPRP3(<|+TtEb^w(qn78
zj34SLv9r}BMDN7sWCQ}$W=W%Y+F^=S9zszsp}RJMUbzu+xq0>kRKMZ}P<HfmqGqb>
z^Xu2xaFE=a&(`M!u=D2=l9?VzjV{QB3}){MoiTIl^)&Fa`bBFNuU{CM4FQtT!4s7_
z(Ob`#Dt5LYzQ#spT5`M4MmT^Vm318Zia_a3_69MB&IW~s8T@T-R?z%fucFT)ZZ@$E
zs#&%hwUCtA8dNq*dpk3MX9*3C>=3#nQHHm}JVyGrV*Ds?$9-z<mF?3Ew;X-2oGIKG
zP$U@N7+kVNn7traQMYuj@<w9}u6p1P>V<y9jaf%CG=N#WAETr|&GOw0jOV1gh;Bdo
zu`%(~#%gX~??)>1tb|1!c0}Va7jhX9r6`BbI+>zMU@E~Y%`n46l6i@OyoCBde(DjA
zxpPeF!{i;J#LIdiAnNvBV3Ghxp48G7Pr5r3XU;|Y%M)4e8<1;k?X6S<Po0TEXzPR+
zOLP3DpAjpDTsNdD?e5U3?X861RTX>jVH4wgJR{$fMcNv~L56G-TT)qGwZm5z{5%6v
z8v_2enBnr~+JQKd@^FjVvDOKX(b`erUIaS<a<yJoy0pZ*U+nC7cvs)$RkyC@LDPey
zB}q7Fqf@S)lSVk0ER_RwO>0Dc?Jbk#MF4yne5giNhpXMZ8!cFuFEe=;Zb9V?QB#q#
zcl;*TNh2b|wzNhdw}Q`+>L(TiGu=v6R&&l+te?Za&<CB=g?nLQ71B{%WzZMFQAHK;
zazQxL9YUs~xx(7sKx)#>Ev0+wRd9OO#lUfwE0RfJR5q6~HQj0K>!z;BrTxrJF1M$2
z>Jw@UMi_*H*uGeFlKY}LrA%>_p&7Sjwxi%s^&8{@qrWXwFDgDf%qRt)b6tv!I0ts}
zizl?1@3L?Sny;q+`=INT8hZa(Q{&wXlNCZEt=!O#APZ)EkYs(@FoVLA_`K-zpr@Oe
zHJ9&^VaEFap+Ob3VeL6`cZCQ3%puY^h#6NGW|Dh<jWk_*$naZrD!hI(dx)e;^%Sio
zvEM)E(~vP$M;8pwYqn*kp{2~K=FXhL3nD){#!smzy}qNRMVk9RN*x{mOwNJ%ub;-m
zZHyfvfkaYaP2ImTZ1Q#y4)p=PK-+8{8Z^_goTH6sYHN%7ke=C!EI&NM*9l6!ChNh!
zLo2nm6MQ}|2(-H_R5&{h+G-xMLo*AEzTKV*!9W274~rP`+P?9BH$**K#z5)f?e~aq
z4i0-vi6bt%i0l9IRwHu-0ZxZ&;t^5V7A1uSv1;uJT)XCYPSO?Gfj;hnJ3CF(4}V$N
zXJDnCgZKUHM0k0jV|81<;`W1U=%?s4XLEAwsz~@|xpl%vXNuPHjzj1`;oT-}cruAr
zS=nN<XKXy(+CD|zjX!zB|4Wj3(7w*zq5QMU*@o7f+m}84ttLf&k(BX_mT-&9fR0=q
znk0q{H^#kA&baU5*~oS0L&gNs1chKDGz7=%4TJf4+@q6Q&`Q{b>|~ajFJe0c_*0gK
z!T}d(O{Y}6l^L*JP~b;k6#dI6x@bL|D0wwyW_3nl!6;X<R#Lb&Q`SYrt*9J(XF}vf
z{sA?E$V{N=dgQ&w*h^y*?qaFg$6|AvJ<O6V1<e1G30^Ow(lVa4)|qZ|UbCYCbWL;S
z5Y7kp*r^jtb0;fmyY7kFK3J57!)T7U;ngmhKfkR>&8z%Aw^i5u+?)-d$vQBf^v%k3
zL%gnN-Yt!#OOo8gf$hwTJZTysb|_1`I+G!;LJp9Ey|75RTYjyT_%zHKIfWrmd#&nL
zwzyYhY_?aURod7bD$BvspAOJzm0Ao;L%qJST~T7fo$bjX-ZEBu0nNcSmy#_8SVv!8
zhhV*u+-K&B!9G{{A?3AufVZH-#V&0_-m`~QwoOTvp}V#BOSyT*F7j+>rU#yT69$O1
z(_pbs;ZR>8mC-x_>DMUX1rIlKe}ZJN)bT;=4vNBe8$g7XF;toiwJoun=yZdhy*u3O
z+=+yKTj;Jl7fuX3l;O7~O^EdXgw6REEa)`sd%GU?5UJ(rAF*~P_cM3pRK%TjruJ%$
zMIt|q?_nCUHD5&2f9II_oHHs#4)&A_XKhA!l*|Z*2HUCjj;=cZ`Bnf~^acT?4f2}u
zTSF)A9=du3#0FL4Y?F>vZTX=%2VVky!gltFo@a?J>WMc!W3>)zb2~M3Fappu+O(AZ
zFLE2&HsedMk*x?`Wc;2O21l-<C#cvr8&|_YT@<iqWM48T)}v9fZ^|fHV>oa%3$~{N
zhX?4%WhvJq#jmCJi5%`8Q@&OHKnmB7rEr&1JN6zM;C?pX3T%<_2?KVVm~|KyGwRsQ
znWvk`k9wo?4vvaEcp0N9jHzC6Y{x3GjC&sU!}WB$^2<ABfVrG!#!>IA&>@E9EAGDo
z)Zx&Il#NMvZx-t3M(C0%nGZX~vet%5gfDM>XC;D2K_k9m`gKcybd~E^No3>WcWc6c
zH_IzMc!`{DmSJIY*8=`BO=C=tb)DYRgmXERiGjp*AydXZupn<j+kDG*+%l0b$L8rs
z9x?CQ6L1szsb@wqo7O{pH<Af*M*y(6cj^gp&$yZ8!)NR4M#OoZalx+k>7+LLNeUcd
z1<MGn;V=LQ57Y>SwpjfF0ThZNQM9XkApBIBV???mCC1as7UQ!<)gk|gnz9VJiFD}`
z<d3#xj<Fd8ihC)D-o6%xlz*LSTRR=B;}X?b3EouW)Pn{=H@6Wi6*71%w#^h2y4&Sw
z4Q}Y-&<eii$aWvXRyf*odp(g<ZFe&vxtn<e%{U(>oo7h#9PAN%!1>f6MYVJ}cOMCU
z_`|NYKw)%_`mxsue6e+;b>jM2fm`uN;*`vh*@FWyOgT~peO(stryB>>4K+FsUmjx@
z&QdqcoUlvVzg+p&k@0p-rzrU&XX*gPz}$r7V&=>XOpx#%J;IRG>x~0j2DOWfwy&3n
z@WQ)~<l8P)bYW{LWe)_TO&R`3j3BiVnjmr8r=ptu@E(o@7a0`SI#QB&#Y5TkJx}7{
z_J&`x)4$yC5n5LDjcJ|KTSQYYQT=X*4wWCOT?oEgU)VAl2JWMf*^gdHH9Ul3{p6K9
zs+e#ctT@`e>4@i@u_v#BNmJ(H!Z)s5x%l{19x0~}!rrYPTI(Qs6FYGjAHvhcxE*Wt
zN(kQ)53zftm#812ka&o?_9x^KX6n}aZC`bQ{b=uAQI~1HlpE^*?_Luv(6p8>@sI<e
z*1Mf^Bi!cBXtEp}^GMEvMm-W{7tFn>{c!u)x&rrWYM=zK8O+?Hw5WcREK-6%2N(u7
zFI0wmM)WE%NKC2Q2=MdPFimbUuH-}68tOuaa$i5d$7vri2j5RT3u_G4`S<CNJW5>K
zr>H>c;$(McTQPN<g$dP+#bWA8w5wzMd#UEwIZ?c{iFN`3Un_%VvZoCH&dBX_oI2M{
zuv4cG1dz$jb^(ZXnl^Yt?SfoB;{LX)>%b)a@MY))0tb67Z?UlFREtPYVQOaYrI1+%
zD|DV}giwPlUq&8JCqC$))id|TS`zAh*aO{7k=;On)s5u90;7cWoqs-SMqS`Lse=Ez
zb0mQpGqlAOh4KD(7Z^#wMF*HFHTk=f4szFi70ZiYu)Q6kc_{g7RRO46Hn18>Re{!;
zY+8@f1J=ae?MW^s>)i7Yg*hh-@0FXdgqxyl!lxJ^KjsgSQ=HhBG#T01SxfY7=OpO@
z_d6W14ePu#tPo;e{=?vOPj)0ha`A=1B!e(#!nYxJrZIGHMDP>~p}<xVysv|Ul_l$l
zRPMGdjU`89o5I+wJYt?>B(ZX>s1#mmi_zw*gB=AarzinK6wuD@;w5=Hk=QfASm=ZI
zs>$tTXlIMY=+`p~8et1kTkg4SdDhgC5wf;PS=KDR!GOVTD9K~obx@Dpvy4E`RAQuL
z$(1vN;iGkVyRL*RiNn-?18FXeBv|vkCs4@R2xG6nXw^O=4bqp3f3XDrjsa(Jjbv^7
z+GWU~DQ04)a0Hoq@hHisv@+K@744|}=VB*vuqv5@O*^g9Q9Q%mjNp&qhY@{IBXxpz
z$}ZAwls~a2pq}jvS(<c_w!XXAOdoc#0I7B}C?n}gsJ<sb(vwY+;PY193R_pi5qGl=
z_>aTZ-k}Tv?H$Y@KG+xl`qqe;+MxulUB2|>Xh%!`{B-k%i4m%Amm-BPSVJy`k4U%l
z5cByTMqm-%YBkFw05Yua$9Al-tj?G^vnUqrZZWyaDlb-@(y2lZ!Fh96nNeS-QtVb)
zf>NMYMwzj}Db2kUcfQ!dRY8X+xpxv^G{{c5ce0F4&T#3>WF>Feol20XeFj@47OvFI
zO-|e~Mfo-AE4O3>T49RtX?4_Ns`ixusm>5ClDwC9P+Fc>0|==+)-H+L+{_+fA0pgW
zc#~~+>tg-r1<s2zZzNV$I(m2rYRx!FZ6x}3B^mdFB4$-vit*YnU?lOO>~c~D=ygVF
zb+{*93mK&rX>38{sH02`m44e{>8|WZdyb*jK%tG*G0;LOIZ%1jH7JCYMjHxpK==uC
z+obi%<&$(eT0~9OzJp4w*`#G`7p)4&Z=m&Tv?e!R6dx!6gFaAE5xZG9^v{G!iS(SB
z#6l)+1z?jFksode0G015Kc_Z;{+Z8+xT)84;<MF=pYM|Y9AeUVKo<>i+L&;F3`|Ju
zWbh~ZDth#GX+#yZ@+hI)K9~HHd(bR4f?~PAa0Nm0{vJmB2iUnSxb53-LC1nbV}lr>
z+*O$bu>>sus0%hhJYN34e>`2Ti3srZqa0(8lK=TA4Lr&gk3xuSPx|W3pMzj;4NTq3
z0)jVHT)MfWQb=Wn6*2_E!LUHd{K0{YHq1#-^=Wv8_ZmN{BGf(ZH<^u^(YGzjeX1_(
zt4TNK+7<#%-m%AL_i>2ma?PcbMZ1T6d}}My<3a&q26}?sT>&|e(LA0Y824Gi<TH0r
zNBOCD!Wyz&6MHwKFEu0#5Re4A2$zz&frH7JX%lW*;LB>lLT$vVk}C(6eC*9=*Jf}5
zk<iY9iC%pI!-`oH+Gl`&y~s#;gB{}ov-h+&umB<He+AHVDW<`}hA^i;-%*0{6^V6$
zb!nTCn!_^V<~I7Ka)O~(9FW?+xFuGour<0##{uF}rvblM9T}<8F%_J4e#2S8*1gyD
z43_zR0PplNARH>a<oa?PGFn+e*P;MpWEW=eb!7aM2Si}=v_*K@sRVH7$iw%s(>!Z4
zMy!HB<@46$aRvE;t_p)9g`tWH8RioR(JfU>t8s`#pn;@k#pajqB~8?BFjMD|11b&^
zUC1(~p8rz_8YQLXFd_!4v%E&x(fKzube3oA(Pboan};1E>cP_BSFyR!b~90CLITRD
zu+(LqOKGYi4HwYhxCggtgyy0Wka~eUWI8pV<G)9<n-pL)oSfC%iJjHX&85P+uZT?&
zj07%XBq4a@agLI_!i=)(dqM*?5>To-*zekxJKBxHRG~R{f+b(3KwJE~4i>I^SRyA1
zVyM_p!Xo6Rjplh;Fxzz*2d~3M#G0aWE*b~H=RDFXleOscG)fd+q8Kt(ei<FP;*nbE
zLN{buUd$iajNk3&j))T+*m9+@jbKQbKrtONG;#EA9XOPynLAMg-ahf%<x<KyIunWD
zDTAfmry`Y$j{~ou@meK`*Fa!CZS&|cGy{88F`R>|^ZR8jdW;oHj?ck;^^EQB#^ko(
zv3jW`9wV5>Sw5b|N9o|)UdXJ(iRAGGUTDgody!|DY9SrSVu??Q?FjOu8hFAc28xRc
z4y1_e72(_(sf`e`>|Iq}JcTywVx3L%+sr}qC9JItuv@TY^C5Lj=Rjuy1dS7%!taMD
zWbKWxzqC^l7j31<z>}g1A_Q}rC+27}2lTrbEv~K)kb4}J`PN(6l@4@jXHKlpxgmHf
zcVy!}y|bPX?TJ15AShDbt%%xAu?zNC<Yp=jdhr{FoaGRArY^jdE;kqi_V8>GZ!7f_
zwvtGoygZ=NKY|l1-N43WR6AH9r#6?h=57N^LeJ-(xJ{Zfub;mI(ktT-S=A0zoEy4O
zqi=#3LmLxBOY3NiR~7PJS|Qf6>fgA|-d=AA^wpEkuPun=<2qnOkL%XU$v)erRM7QH
zH=_Jp;hR!r3jg4CkUw@{m_FG29@*CmL5uNnU#|u~Li*-{CL?GuhM-T_ube0+Vi^!Y
z-CBCVjU=A_VVO=F7ih)?3;Oq@kYEkfD}V6H-v<`XeQM+EVK301-erQSL@R#Aek|nK
z-b7WgBI=@-zU4hEu5Z`3+;@FD-xzdj$sh=qu4A2;Ln@mPDVEEYSyD577$(_%bb+Pj
zHs$%U%(p>4x$>k)z%oZRt?4Ihy*Od!Q&HHL+B?{NGd&`M*@d^$H5F5F-GG{0!ks*7
zL!mZNX8B$(m}a4Zi3}wlonnpW>iS2$)MC4%E@UJcqxrhVv|G(fqY>06z8>tb+exZ?
zEi2~iBfdM#oHLR%o!ug_;bwf;=@c_oaaD9wh*X`-l=?tNY_aTEt+JHZl7-e%Z5)7c
zxSVmr!z$a>W#HWP_(O&?O<5602<E}nrbyNAmWH88?#DFnFZ<xi?j?rg9wjh3apG&%
z_^Y8upit0{B%UcrlGk0SDiBhvSZj@sPV8V@rm^M4cT#NS7L^rW{O-)+#|1yI?1Uj^
zVzX_|3w=%RjTH=<%g`+gjnUoEp2xHXR6B%@>1V^pn<B5>-`q>gT&<zPki8(%w_Zyy
z4$uJ7NNn$=ix>b#cU}#&ExzsTj!q03pjL43+T2u8xc9kcYW;Az39Gog%G8jjU4Un!
z=pw*afcsH&ktfnD1O-t6cnskQ_u#?5i$pK?3s~O=6urSw6o!0_I$Ld$D7X_M=IJ9k
zK{9qGMtg*{_=VD}PVqu7@E1th(Rhj58o@E5-6FN<>aBtjk0ZXVR!n>-jGj*f%+#JD
zAn~%Vi5Wp^SDom-EJKx|;G3qNbUECl3AQSjBbP|m#FFaGiSEhz<7Gv0VNjYBJxS*v
zB>@NUE4_?!>8)(~q-=-&Y0nb8e`)~KvG+z768PXc{RQx?EOo2zWtR#J_$tEOS$mse
zBm&Iv8G8t5?b=A}>L1#SPw5(f+}PluSO~P;OA`5Vcc{fr=w3iuCBJtyUp*q2<%<&z
zE$B<_$xJB9TmTI(SWHg}x&%zkmmom9AaAO6D!WxNJkUwdTS{v#2fN@R%q2SAEuqYB
zfc8l6T^LM+wIUc76A`;sLbRYmM{@ng(+)A?1h??(Mxe)<&obD~Ud|vV2Eyn7*i>VW
zNXQB*1)LJ(>Mk^pH{CcPUyzr#N%S;^bBN3dsL5w|w3R*0$O`83rR8;9l!keC1roNB
zl0fF<dj$dd79HkAnoau=1#cR<#zm^9Q;5E_jw~xo#SbQ<1XirV7DgeKtn`k##Zug>
z2`uYT7fG)pxd3Qs5d)Z&*j3OAOGH~bGay}O;s$$?S#hNPSbtlF_XC*O<Y!F;SY=zd
zlv@Vtp(>D3GOAqJ#Ohg3C2G@@XkYU49@TPP$Uv!uVwvlDY3jZ<(o4ZqTJ!NHC03{&
zV+D8}WZ}TQW?CU~k`7x~4<ILndb(F)Wie_v24Qi#@Z!|1zyzz9hHr{eq19b%8AN`C
zsZwV~!`J17?*dv<Ylhip1dJ0ZC!O%6H}KMZ=z9h>-e>v|8%qf_H9*wCpr1*Sd@fD2
zai+Ww;JQ+h;+f)&M&=%=TlkS39r)0NBZ@bR+A}NrtICF@(ymnszRKANb|tue6T65?
zlWzI_=eW|bSpj(AxrDdM*I=)jMNOgYQrgh9cIO}RQrlRw#QCkD@@Y!QSSGTEVD%Q|
zL8JgA{DIt8Wjg<5ghkRbQokeSXWsz4W*!pG18}c>q5XREBU-G+4U#O)2x{~E>!BJv
z*YA(yYi3;1avdIHTv5EkP)hXv0dmV5Lr$^kYyl_Ke!hOz1<I^j^SKksRaNaWS?*>c
z@zRn=%?BUkxK$?H5%`IySZh_JdQXRhumskRU@X}{I6zlG0ezIm1f3{eEd?Fpr*z(q
zeYU!VmIMn=8KxZ)hg;oaODJ02fR+&(<qNejRp1T3#bCW4?|)G_>QDx=54N}>mVEak
z53gezE;@OMO4YHEHGw2t_Dj}@v0dnrk4H39iG)Id>JlORt(IhojtSOX9a?Z#M&=A}
z132dJK*6r!(lPp^f)qYuI($_RPDHR4wp=!hA$yiMa7FUgEtd}Vf_j8$@S)2<d!$aI
zIW|u_#%AAf^2nMpQQP~(;M`!>9!w{wXetRKNFAATovx|tZV@erjjZ@Cz6{14MuK`M
zFRy%ymT~K?!+RLg@l5xYZU%^58rsd7l6q)zDyz7qZX$!(nf)(9v}#ftP8eveE~D5L
z+{Fd;>X16>Wc8SSwzBUb)s^N7e@OGZ;Yyg-)x&7TcMksU1NY@&!Y>$gYcFa#m>?+_
zYvN`{S50JCYXj306;zGP9FR4Hhl8(tgt<Y<r)^+dLMtr>i?&;|PuJ~!v@LJJwYe9H
zm`!5a@d^fWf^YEtcgx|o)j5sTxqvZ)%>KZP)~l6xq0Xp`YOlo{Jxi0EpcMSIIysD)
zAZZOduDfniDdHK(X^=_v^<bqSvy2BalkYnu$WJ%PHm@W{qEA_o_)iyOYL6oidghiU
zL6f}5w|rd!>_QqW>zb41D}d6{qPXXMX7KlJ!dX{1vwo_)m#{v^a5#zlpv7%7Uv!ly
zaB~|W5A-(19gc;c!0;x6LJPMl9>LId>o8GC+lAs}9!st@0c3=2TB8&ealyd_VZp3@
zmMuZmF7(pZd`pmI^$0^J@#W+RfK=KO+m$KXpAkz(s=wfUipoU0B?KhA2X(Eps;7`U
zORiLBkO~pZWsK+?$%)cecCoKX7C?Pm*K~+72eXW66oS8N+uSekjv`n8a=PW}56@;7
z&~rl1Z9xe(;$C#+K8(-zHAn>P4LtxaS3Cn5#e#@>1^at>NL<R1`77y^p?z9KVf|pS
zu+H|1wN84?>IeN?V|4M1pyk7bXCQLulGVbN<R9K_A$ev@y(uI0YGG$UFx$zRTdt5v
z010>;dsRhsGKNY6MRKm_^yvC!?TMZ#qpDZ(qRKO?`-NAV$c>z5S#saV>8u#j5}4A#
zG1<_%P*|QLfwmr8bDHZ2<r|G1pfE6z`bEiJYG*{Vn{W)qLjQ`KE+t&C$hW@j2F+9k
zW3an=GW8lkCze<twHLoac_);MG@13LL=RN2E+~Gp^MDQdGFi`%VmUlVuo@p8s-Sn>
z#T`%}+V@D2_EhWCoKy}0lwMf)W*Px&_~nO?Je=lWs$LwHHtM69xjbUnA-=*mfIg(D
z)ts8hwa4(8YmfqcYZF4h%efU-Bx=H6(v5FJiON66u+3XfwuhaE#?fH|Nb$5F#e=Uh
zJ~XF%eAVFE+_VaZ_`<40u017#Gw+zi_r_j%ybrg?nIl7D!HC-ut9dpRkH;g@+Dryk
zTSL*=B!O=JEur_IQ+is9r9vf3s$<s6epCZo@}V2z8F6NJ;+WWMA_X~Pbc!q99{H`-
zWdPWi<iM?*Hc_mJJ;BuR*V^=Nexjt!Uu&TP^|<*opL&-2$Ph!gDXbV&pRYnO>Mm)8
z(so*$diTysoU%yAoX#0QxWW?{48Rn_N(dh|Hy0C54Hn@~YFWj0ESP#tYyO<r-4J^!
zNtpBEUT<`J@b>;<|5zeH=3CKJU@Yw4+bxDQSrr{d7?S3R<<W@g?lrHuw~BF|EdE<#
z>E}(yYm{+JGE@t~OeL(Cz#m8xO+mH(iVP;CO?E#Ta4W`Z*nlnTRSF5ZcgXFq0AqI{
zmp#(OTr6krx4hKVjJT_Kh2LEEL>-T4@iJFk<w|;a<y@`}Ts+`GNICqf0;Di>`l_JU
zXpOr<a&B*kKqpqYj~w}ri>{GwHWlLHVx&$I3IlF0?_3tnKdl~t^E7fMWf-O9hLH^l
zR;RZpjiH^n1Hmv+I;<%wx03s7=Y7DhWPzP9NhW;k>R~x#5Enf}9;=OJ@o*=2ZX8LZ
zwTzZ~lvLLf*)}NfGJ1bn#)X{_L<GjVV^$!Z7g!@JwnQv%SJy!b^Zm_49cHuVh?GW{
z(nD6#F-1wix*D#AS4`TB#t9dhp8v9@U&8e<miZ*zZ)`~)=_S1ZujdTru^Abyv2Ib-
zrA}?}_{KP;5?T6!;;s}&z7Fi_Sx%;uI%E-1+_`YfS>~wuliZDT^<z<?ZU|A&ofVSE
zuf>e_+yzcf+*$|n?+|ADn`?W!P_8I!nO?|!UT(=cxwj1?M*~R5cp#XePBpU0weauA
z<|}ZFP0aEavUvvM7~MJ|4Bp;M2{qHGaIx8TvoK=R)+3F@v^VJF-D^7ehNY{RQeq-X
zP_AT#Gf3W1gCJBuO)E8~Pa%wHE?n%z`sQMBJ;+W@M3lE$B%|uv5*}d}Gs1RL?#t6e
zOF@_ME*eu3&C8lFw&qsXaIW+rYO7%TEZb&3Fb}EAQp^S_eChoI=&s&kcI}n!;%FAG
z(CSTAXk{V1*PK2?!M?zXSv!WR*n7^RtDDOY#LE^%Dx67e6qpicPTBtPe8DQlW&EV5
ztz9eJ$91p-@ac^x#1t;_7m+S?-wWbWYU`cyQo+F=qrY465rN~1e_{8NOE;UhBfgIF
zl!X*z^dajp3_7c8rWwKjYUN-Jwpjytg6Zr{F=89U9<|346%$X&Gr~Uvtz1u$Xw;6F
zeS!g}ANg&Dsx*u0L%N|C&}aeMH?QpFZG%j4^%##Las)+S&UFqq(>n`<)yj4beS4iA
zq8NOB>LeyEz|yfiLS*(YkJ$MPLaVB`#id==lV)bumtL$YTmrU;Weef@qlT;2kz`Si
zi!qDtgI`|O7!f_mKn@Al5B~o=a-xIW=)VOi#%wM??oAA1Jg&V^=@a%;31vL#Oom>2
zM+j}a)^IINzIGR~Gri5(0NGKvAO(~1C04~So>E3pvU9}UXgHg0lr*`%Q{)LOb`XQ9
z8>gs>OgL5e8qi-5PV)uuw!@rpgJq2~at&B^tdzYFCScISy4LY*LhTbI7{32{NGxE+
z%AxAc=+d$@^7WSahf(Ka6jy+A8QF8j>Lv6WSnTPIiht4BFln$x(qIKZf6l;)>A?<i
zbK0LwA|!9BiuN>*>m5*SG{GJ*->KMz1cyxjgFwZv#Zks-=f>A=ILj*+LqA@<#2BYq
zw@<2K^G$^(jj)jq#)uSmcPE>RkrY*7RV5w-0~CnbkKda)u(AuXbha)knG8Wa^xU4H
zVY>ww$WETT6niOGQm<7eXG+Arjw#{v9X6vNRoUJegxIy*2fD}g{o1+NL+(kXvEwY6
zY^Am*#&@u<_hP-6p))y}#=IC`fBFg|IA3e{49#L!5Ih(lbA;DPoFXkNmPDR`-OTz{
z<9mdl&d{wVa=Kmq2Un?EnRh1f@+T)oD>zSN@(3dCRHf!Xo%Fnj{5IWrJq<a&N_<tG
z#S(wZG5{REifeF+);J@<QaA#6`iEgk_0FVJ1=yz^faxPofnJ>5w^99n=%t>Vo5^=q
zI}zaf2PncVUYl5BJFKp_<YEMXjjG-#7<g`q^&&Oo5|I?5N%fHD#Y`F&gb40)QR=Kz
z%>e#PNVEtIgx-d=#vWD_nnpz8o#)26=g!EV4JKXhE}t>{qz`^}?{Us*pag<AcxF;I
z#=J?B+A6fUI4`nJM8iOS_oHE=T2VG23)nY`{m&-}D!T>`s@VW_Q#xt3$!+MVE`1Ih
z0{3CGxx!^DV&m%8(2eP}AK()7S}~}(4(DwNYm7BrV3v<hF;2`pv;`YOmg{Hws2-}D
zm&VxAdmImw+B#4H%rHBK4-6ayJI|*Tm55&8mmoLqxzI~Sz|EbL3kP6O^$vKdyX4nJ
zex18ZWG+qzgY$89T4m(M<8DTOiUvuU=$#ziupWC;UtAqo70}eGX_}g$d-a@;LG+P9
z)B~kzG+^Tm&O`Ky^nbs_-A^)1BMDqgTzz7Pr)i5U!;I{*&gsAUaj%XZys>*hhSBqe
z4^h8vzfBxLQW2{dVpnH_%(VLfJchQ6tKBK7e1&&@4;RhF^@A&ZL-bG(wVj2Fiiz|e
zOB4v!PGOS<J6@jEl{v!e<V!aiJ`?8f#1LI<eq282xA=n;<#OK4?%Z76OpqlM^c&fQ
z*nMZQ8-JuRO4=Eacy_Z)kh1~vHZ*BnYv~&HfV!0xaFJWQ!U4?b`RRUHQFCGR0EHvN
z=7S~k51npuZ|=zH+^AM59~1Y~!+jh1+?&K*FY3R)YqA<f(L@V&&V{j$tB9vI&wX$f
z!!cxqYaaH2lvv4pAS|1z%>IQ{6bm1|cC-UGC7J%v*G>6yoPyW?cJ%a8rk$iiJ;i$n
zq|cK`7f2a25v9?&`l6lB+Si+R3VNN3`XAN*7+iwxQe#(-JjMb=s%FT^wWy;J8lcQ*
zjIeS7_Mxhd)K$P=?V4v4O}R6TnmLxwG|BEp65tq6`a??n-J)wUehn*=F`OGxpuu^x
ztO4n3w1gVgbZ(3^6)PgdE1a&*k{!JSILj6QwXaKtnK->o-0N2yh(HWNu8rx#AFOa{
z!Ob78#NgJ9wMp4m%7)0gH*q3hv!y4Um0F=qieCv^JiTN6rf`1fc%S<vefL!&+xlKC
zRBxwZZ>YC7c{lfa@);J5$!wGTz+~&A4E%<`+`S}RTmeCLt;37-+x-59Pz8CPn?~-z
zfK{?EC>JAwnMcl#lU-?29ex>pGSM>y^P4Q^Nc8O7%O(kfnL%J^h5cK&2cl?0W}4*9
zKIY-g?XphjP1ddX<<<-9ZPq1YRXAe4@|%PKHJ(UyXwlvm?Egi+?+ZN~P*m%3P0?h<
zOwpylx-V(DWF?`Pu8p&-K<xps4w})!o@m7aUkQSt7kp}0h*%~MhUw|D@<I5NMS+w7
zmTt^?*os8!`o&`ief3sO1&duLn?;=bn2jH$LcmFMEs1n?YsqW5qD(9Bj=hSTU|#7I
z3ssDAPApO>in`5FBNnky)}$VBYOm%0{VF^0T(W^n87eSoObMSm)k89r;CdjgH}+j;
z(Z6B!wN@yqn|)*8t>AM^gk;p6c=23C=HVwO=P)K?Y|ddkFbpDZs7;?GLTro3@8TS_
z2LxoXQZ94)_qL?3pR85R`I{)HUTNcxpvkP%W=UowNJ0;rVx-x84wl$h7nF{?2;JIm
z59ddsJ<aSKF}WqR8udNgi8!fr=(>WY`P!)?;-PbU3TlvrZ3Zq^u<_PR-4*Yc!yS9T
zb1{@sc1Up2AzpYulKQQDoXwRG_ZDpa?BRQ>D~o$yo_+(NWQj3nB!&7m!BOr(1TSWG
zAumo?T?!v-xK_k$pP8wxy+2E`du|_ir@0qjihJu?ct>~UO8BrA4%cY84sJF{R#6q=
z9HhGuwU}AqIzhNoQw9Wc8$6?`maQkQP>NsS@Y@xdmT%OcFgkXRKXx9^YMt}|e)6j*
z<LVB<aqyA7u^lP19o^n|unudbR+YVKh>UIm_e}#Al^KEi<=>46s-5a?%%jc)-3Yfp
zV;ekh#UG_pUBoyaqadgEhy8%izY|spT`!i*0#r`Xq9~;*STqL<4D+HZC9^0a+(=dx
z=wcR@)tBJEY23@0Igw5Tk&)v#h7Z;1K1$6t3dAG1I<6J58xY3+pJ|Q4<}L6_EQJoC
zcR!gh6E>B&uWOA8P8{!?TN1TZ&BK97VGba7-X6&=;J$1dU`TAli)+zl9V?8O36q&;
z>53-uy}Qr3E@al5B6bv(q2>jX!0&TaJNjjpQQ*&%@JJ?B`??bxyZL4A#C~~4s$70}
zkG}V#d*4Uj)}uQ=;9Hm3=r1wPCEWi3_MpfA_^Rj$<7>NV_=236^N@Q7Bb)rGORnuh
ztfPfZ_2V@u*cWz8GiQp-Vq?xQ>io@Q2@(=?Uk5}08kxXpO305dfG`AOFtsHjV9Ncq
z({Rjj#O9ovuwAusU=X$m9bnLHiMpbGI_D(7Fxw7iY4$Afje~35c%SA4)H8jfY2^H=
ze#n=;E;<o?)NuTxl?+R4OY0PhM9hgn5_W+UW`KoMQ7sQ`(8w^vF_Dn9^PQ&{jflbr
zPGL?^nshMcAK1C{gp*>;7in-1-n?q})1R5(c&i|#dG4#Z;*RiR_>Twz^E(s(tg*H=
z^`q!Cnm#dT#k9&X>M^d^k>ihrY?A*0aVq$*aPEIW7pXDMX<j&tiai=_L_aKKT5Qx*
z3~OIc0>_$F7}}SbCRJNBukSl1+YWaU&GvTl0VdA%1LO*Z8*~Bg%(9Jpd+;#I$8aym
z)v)MQjx1MQlYDc@DIrhPTIo645RU!_-!N^;CRVgRAy{qwdY(z#F7cTC5geN4c8gJv
zc?q3%e`Qn_);PF3`R9XYYVF+^5h<1uGu4wmvT!j3uj_*<@q-wOK$LKTO0Bo)iCUBL
z*L^v}hu9fJI*DN?iYdVjhd8l2;)TY%&`fOe`dc0$0JKz7U`#D2(zq)#=<5|CX=Jsm
z=^%k6E4QWDpY__gM;ha4cL1uGpC3k&nN`BiCP6CSpNq3#4K|zK`#7*@GtSTFy1&r}
zO*B8wNHWR~VfJi|j9#O}HHKt5O^KbE=ztqZieYX4g!wAodc7&%<klp4rczO9jran%
z_6F583K<n*8fz9DMkt(1A-+h>S;-|0;G$TgPNH_dbO+91{Mn)a9AZ+<N#lC<jhrRz
zu<R#D)P>?hePlwX3w&TtSfK!^Y6|+hb%t2OSCwzIX9KUlfS$-1u@OCjoip9%YL+40
z%s<UpUl6te%qZAbeKaMXy^-+(K}Socoi9Mvuk15$?7;>dc-jTE!1uH8djYuQb?;Xw
zVANnG25hz7WoD=&@q(;IA#%S!F~(7amTXQ~T$sx;^>(2O(>qK}N!A9YW-nMp4{-jw
z+MyQjKP}vZep$Ly=Hm-bsNFsRQBq>yfx!JRnR=@+9E5S>#$;ejLO)9cy%WO$D)RAm
zbnNLajGt;vC$q~mMJdp;77F4rTDuT}3j%@1aqY?-ucwDg?wk68t`4y3UK-gxh&Ja#
zNqBy&Se`W|j%xM^l>8@3M+J$a4l0Afbm73pIMEz}k9gEyPR^T?k2Mo(4^M6e%Su|x
z%WHf?QJjBd1#)oh7xrH(`nHL+DA<uCMc$N+K{r>24b_mBHHzUwyQJ1f5!>jckKj`k
z)97WNWBq=)3wr*nG*ov;W=l!L2aE6yE^TAjK)?WDK%T!@zg$|j$-uES<F6_h9OaE+
zql_B}bn0VAXN8oZIkt?_-KRXj;8QZ)9Y|VI{*HBCTJmEORjI0DHM&_agx<2r3uF;A
z&w`KO=LG^YV{v1wD^~ZLNu9jfsATLv{jb0-Iv^q+%#i?TTxjrQ<nP^1c%uDPK_A<m
z+Dkd?Ss^8^Hg<|6EhQb2aGuKgPpgyD_j`8p{h*awK6HAYUD1SXt3t*oQ$yrhR!Q8p
zewM$_8#~LKyM$FP_OKMYjnyt+zmJZz%Cm&XMR|W7KFiUot+6pfdgQ(yX^+Jk%4hJq
z%<;!O{$Bv&X|YC0=dfw#IaZl%PDp`oPtp&Hd{37mv>u(g4<20n42CZdJSp)WUN2}u
zDI05|RnK^n$G{KGKYr0Q>1xLYr4_+44)vAb%lf<F9Ta9`yT=?3GI)x$w0bU10$<t=
zbJH)C4Djd@-DXTna$)+7$jGT)XPyagsHftXSh8S3K4zA7#M^1^B40?s+<=jSLFge-
z2a7-W<-5#@KC4z9SS&*(X75#3<I8b@jrzS<@~~!b*nG=?i?+S0dA?5F@;;7xp!@{h
z9W0{xtx$Ch-bhZX(?yW}vHKDU`AGcWhem6?hr|#X^*#Po(6Wt*mkC)S0gF1#Z4)Q-
zJ`Q(Ldu=bFQ?4G%BRl#~86oF!g3LFPL~B&4H8=PxpEY8XQZ%g#QjkhyG<tiJU2o`h
zx`U)&5k28rMx3Q@_MNevr4qTu8A)IyFM;Z^I062AXUBDLn#CNzUwd%FUsY|TZS%c3
zev(sB@zp+0Q6ORM(o0hC9*wPRA5L@9g<X<I8;Df~1;p-16r}>QPDc4bMaiAYk_<`$
z-c^rUqCoe389VcvL|i8JT11vLKfZ#M4d=0aK-oxR8D_RF8EQX{i-0NSGdN_c8Et}z
zQ~_pcXs^gzzW)*!$If2ozz$R78OJZey^FG*bc;;uKk5y6Vizzxig?mj{pG?Qx8zWY
z5hIWZ@_{pG5C^h8vXVYnPk66$Mo$g*<mfe7x6T`|s=-Y0@INo`>y|T?rZObCMMk0b
z1kgH6l*1YZ_k3=EXE`MHPZF;R{P{6<h44ttrlD&!gPy2AmceA*YatTw2%J}nHC(Hs
zioSP0Sm0h-DFXo)Zo)Frn_44FPpJX?yP$o@PPjHd%&vaWVG2zaS^kW3MUMGx^)rT8
z)cj^FZK!`{$!m6udmg}bpU08XgoI4jzzKm)mz<Wd#AT_d8^DFOz!q3-yG%^8UXFCh
zd>+0>U6`;tYplet;8pMge=56=Jdvln6dJs<D@yM-Gn{4cB3yuj{S__41E=OZR5#EG
zTmgPb@`SiAF<%OP{ISY*WvCK&Dv)WUvWef(^0AS~e&oTWWI@}%^^3?bA??uGh+|OS
z7Afc=f8AopwNSVAMM0P$WJp4V&N+$1Iz+PAd4RaaD-}y{Pi~&3;|>D}3TiuHz`|rH
z#K-XsFlRnO$FM0l756QQ^a05fFLW_bJvUs(uONP52?|)juTI!b<MbUmHkbU}tdyoY
zE(_cob7IF;v`p@h{wh8p@W`?F%ViK(R9UroL47~|<g%p3d52Y$raD6*D^w2dL@n4(
zw?b~yHBrTrwS6PNf`iB(*j+BcMJl7~E?VqYGzMmJoO;!%C2bD?0g2G1;bdBm)lWK$
zY!`xYu6chQA}(ZP%YcQ}FM=TUlab8CoL288lGKz*O$Hc&dLQq}IdsNrY4M?@ENFSs
zhZMk!+7~TOqskSIJrFb%U3gTTDiebQ#~u<5T0lIqv*}CAti|Z<l;5x~pKOx@5Db$V
z)u>sJ&p7d`%w%TvO9|ZFJdcnxs;N6*R%GmiPn<dcft}{(&3$lY@PxyHLpxWfB9<}P
z_1<C5mGb~#-b6KtKW!VXGE0IAtqF6IVr0nKtH%}f-M4_WVQ^SqKma2|U;;UMqf^m;
zc{M3?dkz2VexlxaOP&$pc!ey3N={o))%VkK>IYP}P^;Zvi=ai|7oyACiyX`US;4XF
zAXHMq{AjQE`;@=0`Fn-o<;~UkYwCiT-*;E%Z~1#FV@Hrd5;io;PArm-Rd?_VNt2Wv
zhA^dP5wGx1qr^l^tJwNAhk4MN5og8nJz!`jccs_^EdK2S_^itcAAsYs`qvLIyTe3i
zGU}iY0Lg<3Pfh|gP3%Au_<HRMuZYN^iXU>pA^tKKJ0x#6NxdCAq~82_t-KOgX9s4F
zYZ^G%d0&3{K945v9WhE{zvU%2f8#gB#GY~@CE7PmqBf^bN2X6l>PnQAdq^p*L@()?
z4FZVCDKx54U7<Ja#@3Zq3YuNrwOCRYHQIsTYTPyJjoxg`db9mRsuEC{YR-uds^t2W
zA-0d2m}a3mIV9>FRI&Z{&WW{Yd|)LA6m!zbSis^v)OOj#EmH(1ycy0zWo7q<joSIo
zP;(DEhIMmDI0`hF);q?BH(cVziJzC)_%HU!$j_08d|{LYPqJ+X2H=QVS=w6FJ}1<c
z06qGu^5#0=4>Nmm3YS#vOS!ChS@P^n@(nY|YxAmx8b`D7xn|AQIdQ#aSH58Qg;S}1
zfOt=<FpccFx;4*H7=yDJq(BDmH)7HGWogHVTHe8McD-S86$@5bw*C=2qk@)%pN7al
zhZn7<n^Jb6gAhaUrB6JM#!Avr6Pb2>ot1rUN9q(ZzcW}r+OA$9FGMAaI|=v}X|CwJ
z2TFK%fJY^5(p<rbZx<jSbge=z(X=4O75_m>c6(8^VIy;-HmZKZmn_PDo`0Am4Vol+
z1{9gZgozT2C{)Ec%`|94prxXWmdeJ?<xw=VLK2{J0#Rx6h;o<CA#aCud1+OkMB>IA
zEs-ZO`E(8+VU>7VrQo-HjV46oBV<3w3mwc(b)(t#1(go=8%A$%1m^bp&m-1i83jia
zzatBxFII+2%AC`|m{rPDhtWQpehM5)Sb6<4A_>-ZM!HrG#=Y1q9!rG}#UE5HB|)>d
z%XbI_ksWnl&ezGkpYy>x06%caCNe_hyVxh~`RFUd^AS8SM2#BJcw#f$zKJ@hJjJF8
zq_4{sQFJ_9aIT9>iwM5uO^cMdKgHL!z~0EiLG#8uV0VhIZovU-EeVIjp;m~D**XVX
zVu?z^bjs4t>AJ;ll>T7h>0S_8=u8V#XTF%C$6&nzWG4$}(j#GuU%tm!)Xo~v@-uG_
za;X9C?0%ZoNgWW1oUDkl#5FuNLT`dKTSYQT<D80>*DMast>r0$dC|=t685}|6h$Z8
zvE~$~){#7<mlo?EtOk4ZTYFVDunxn(21l$>rbNQy_2Qx=mGoMMzLi}7y16J({Z8rO
zkIP@v-1bm*!o^L~*VZnNGEp_*Oq6xLNL|A&R@Oh<#)Q6yC!1^Fs2V3S7&3Wjwm3AO
z)!PaaM;c3cB)8UBO_g~E9mOk&)6;aWA4F@t84;DJthZ@!5weyMotngko9;UiYnxm>
z$=2RBnNH()$F;kwc9CR)Kx0|`(`&3>vZ&EPUm3-!;ZRU1)fl$Ck^>MEQPSorCrd&H
zh{%(0$KInpxNJJkiDZAn$bvX1pu)cU`9jS6ZJM#%^cE!;DU9D9Dg|6*ZR*I{xEO)i
z;t#A!<uTDN|5S4bu6BRTJ5Q6Oq7vIxhA`F0TqJ`Efz_H}Oy}Bjo<dAGS&yj@TGM$I
zU*tjRKvyTqqknn1Ilc-_n;)-}Rdm+Zl&`CFVha>9t-%g$9K6=JB!Qt<Iw3bB7im-(
zr4BaO&h+DuPogy~g`6%LdWjg+A{#?PY%fu4K)qd$4EHt0aN+&i*G;g3>=UXD$(30|
zAh+H>z2bTvlE+xyhDg<U$uaM(gb#|co2%$88&)o34BbP?iDk6MSi$5{?jc6!kuU$)
zsKsv_+OH`7{!_S23+&ptGKK2$r>p3Ngg5;n$@t6RW7e%A%T9_;xHLD{3CnvWZTwaF
zQ*;lt{nlXmjqHwx_t311x-I5qB|ZoSL;6=&;E$ohu0$+?Zc*7@AED~9WDE-SNw`16
zNs@eE??*nc|62x7#WR5Ff1Ck~(tHwYk1~NlS9vRUfxL`xrJRR6(X$$#smI@vY3~1a
zGEFKV38DGxTo-PFtVXktQ&*`t5$JAF{zvL$o^NE?+yy>eXW9NA$(rq-Ze*yISE;nU
ze=E5)vSX>M?c&ebHgBT3@uZcf_pT_)@qaCS6|4w?(hi4E_9a|Foy!Y`_*d}#zUss#
zLPkZjC9W*w5;gQg81a4S0<Khj$h*Qo)@3%U_^G*1!@E+S1;)?6&!YWZwk*_fvc}ZM
z{C~mJYA&BqXztvwxJK@OVR4-cityGnjP+mOg%j)nTM>H<md-P2dq+qQP1GLTeS4Kf
znEBRqbZa9ZaIV-t^A0&=X`3eOZ|vvAtHvr<ZIfEmY8S#`Jvsk(k(<m}dW*ob&CMJ}
zIu!~OTWU|A7>3olMjkuJ8PresdRP=1_o1#=YFeMx<ciRwI*l<@mWE_5TG`;Jgt%s&
zN{4%Lh3zmSE&wm;?$=w48Z{6r5h#1$RqpNE?oU;SP=m>AE}VzXbYssQ?GS#HNVGt3
zwRUU#*rVC~!jJmcxg6_?jEGNpYM2H(Ju-}#abd~+Rp=%#Xiu2RD|+*Y+<Y8Ith`R&
z%<&vR1KZl?6Y-oz7|(%};QqtJZ-U`8s}&F&8C=Cg&y_F-g8KHAO1=Flh&pGI`n*!y
zjLV1uiFH|=tHiI+{SnrwjYBiPF`f&Hl6!FsgHj?G`gIiy-Q0tC_A2zbI{XNB>HsdN
zmu5rze?0`}exxMA_Isoa9n>PvwVBXoT|%oab_(IKPB}}geGUpN_6PHO__|=eR#0pz
z=kR?c7n)r{?{76uvS%sq1p8HaHfsrI5#_4hdjyk~4r&~@h-hvq%|*g`ms91R;$KUM
zIZ#{gj4bQmg7dr-NAOWL4VO`{1F!m96pZ<Q6BA(+jG>_G*w%!pF2?a@vSO)^IaaRj
zf-BfxJz(I~KuBW1ih>{JN6<nnqR`Y<6<dRwvur!FPOT7F^+f7jAiyf?<?HZ%<Z;~l
zspJ{lSZMSM$UB!7^gEt=0613g(+mqypMGdgFrTbu+E8=qR(Ma{jbLvvny2n&Dy&KU
zP!gp}Uu?$nbUDCiDi&({rt9~|pq#fcgtq@a26qnHAfiFfA8*CrfRpiydE3O;TDpYn
z(YpV;Jx28SmH;@6-QPABJs;9{zwafQrP|#JTZ)vx_*S&+Yp!nn-qmu%&>I_Hl;t+F
z?dIhr*$B|6ft^HMkfwnT=HH;5q)NX%N18M30Q0$aYD3l64^prfLdES~jC<Gkd$^}N
zvCm7JT#bNa5LD@jx7Ri(%1ict;_QhDEvNLYR#mO9u#v@G%*tMaP!3l=r5vN+svfr>
zZIGnsb3L-BAMkC^Pw(?=?Bt6%SwGr-1)1jHo9@Eas34TdjW&NW2U%@?-u!cIiXkRz
zTA4M>wCW!%&C!2zX<gFtmu4)M|B%=Vr35YH+n-3uw^3BXa*h180cyAg%)VekjF_;K
zS_&uycK67pj$c!{<12%QLP<?g!79H#)W3CT_UmtoZ$9A2$di`;yULpqn=OH0Q*VD$
zdGnB{w;{8`*d`C)8M(G15;ZgTx5}GC#)+Rdyx_dW`9>km$-OSbsavHla`l{WMl-`8
z#`p#Me-q_%Dc}_scYkyEjGQYcqFB;6hUCpN8@l5w=m>PK%pC2Vw)NJJPB2z>68M#{
z!0UUOWe16Dse?KsjP7K_F=3F`w>%XYD>n~>Ug>1=J5BnAXsy5WX@jltJ)5_Goh~x$
z3fn(<ErG+yn#$|u8`&G|&#hz8iRz~ywg=UTW*Vh=C^ktkJyktW5K`o`0EWcK)<UXy
zF&2+(@N7-3cHpLC!JX1ZnYw$cKBG3`{QC4APp^yGhO=o#p7SuLKzX-TKhe2v-Y!6t
zWT!)VZZkXz+xbTcI%V0)6<YQYl2*9G4QyVLt0^=N3~<(X!s&g&_k>GK1a4?79QJnH
zIo_c_qm+fCu;c=|$o?BoA^7cCJ8w}fm*!*AuXYKCk#<=Hx*S}l7ULRiW(r~qexe?z
zp9XZQIjst&a%JZ(<c7E~87vtA^`QlV|GS*HD>-pS(vcYdYvY`ixLnVEjDFa{npv|-
zIu(RZ+XomjgFRm_K14}|A#5yGV~h7}?2ub((e=8BvuK^|4bqQ!Z_8Wk*f9I>kVBOg
zFb`D+6nnM7h}F!!n;1Dzi2i7<!dg{#r;h!Yd9ADDw6VOYVpOeJO};^x;Zs*kp<oQ8
z7gl>r;L|KN^E+B$G6!Cy6nqy`QkDkqdieEN+{ul1LL|={($yKF@~|a++eFG`QIO(_
zgQ|{ctApRXKj*<Xz-kW*(a9RIbw+3$0MPL0auEzpjaWK%kC139E5(YsJPF*Y&HWdY
zxhCq@qpenni(OehdkZI(RsStGV2Ez5BLN+B@4~)D2?&>J$ot(n&!U^?gU;pT751_u
zSJl>(X8l9iX<23Ru_CVckr`aNu@YL1z=$b#5}whRC??(-`GhO~s2uu7ZHZBWeI3^=
z9AbNx)^uzdTykfTSY=0`jq1*5a_C_NPKw!5h461#*(U?Ad2Q?~8eDy2oj2B|^tLRl
zu`4y(Fwn#{Db@i{K1!hCVlN&-tL<f+C${TyNrp8Y@FTy-Y5{X==g=!3uxWvX+i`2x
zJBqt<=H!>Do}h;WyUXmt#dys`YY$TK`mE%{UMw`<WVqon7iR%fX=B=pNhq7k2^JZv
z0=8U#Co9Nc4bidI3CXo%AJOd4-gpjqFtH(KWiYfr-L8<Mo7yw+>aEWsiqCWQkb|iz
za(eBP{QO>#v2Cqo^%yC%b8|66{~ReFT9RdIrVa(1b)10gTb;m4@J;s2Qi(K_*oDdy
z71yvV35SRKUB)_Hhh$7==`;4yu(~=5a9=-HxsZ!$k$PQo3Dwur70gHNFndqy$Xab!
zYi6Qm)p!CG@x0>&vU=SO?49mOKq}2=sSt;4kgJ*?tMIyWXlaUXJ*bL;z5pR%u%lOF
z`oE0>mJlQVZXEG9NW&lT>(?Zc@Y9)T&`P%*2`LK6-Q2z<6<>LlskFdG(_B-&U<1Fs
zzI>3C>MWzq8Z0)lY*&#N7;gmFz$ZOjJ0F=7li)Kxo+d}ouU56A0d_%FxXZ=!R&qF)
z!kagcoM@1Ts>l?YsARG_@zU1Prj+e^Nv3#8!|n08y+kNqr<%1oiI{F_C*DHaMyN;A
zv2sMRU9gl7){L$d&N1<Y#-a_8Y1)ZLc5t;4r~eK%y-`8>WNIHDr7pH0Ny67Nof<Pk
zGNAm__LVFBfa<5WmE2t2m$;y9=AkBttfHu=)s;mRCrX`MNVV`+7}qRQ5OHpb@%dWe
zWtDRNQQ~F$aMO(a0bxn2Wr}1jWyW~Hy<vE+i|S_d63R|+Zks1<@Oe89B3$o_Iiq@E
zqitIc*&Fy3ny$*X?mEK)d8$r#aTX>&tu!N>W*s@?kh!JnqCK^sojzyC)#*Vf_V!6&
z>hEi&{dXMsr3)CgC$`Rbi$=pc=ExCjcPn&GeYu7>_b7$Kj%gL4OU;W+*NXMOGoGf=
zd;`lB%ts^WA()fdiY!+s0J&k>!$Z^&$nlc2j8GM5N^5)xRc>dGr0*H~c{fpLdxCEL
z!sD+f1%isHU7e}_($k#E=;)@s$j>Ya(#QuLLnANN+1(=~hFaSn#<|Y8*m>84U)6IK
z%$Cy(l}hO0t%)m`%qS$WWf)#crh79<UU(yS2$mH|H>eMYp0{{SDXa;)7G;L|quxOF
zLjmyC4nsV}xo8+g+8WNlS3l<spNO8o_3#LmTD~seYkvX6RNo05V3(if7jtq)+h7EI
zYG9803R%>w<|FhFLm^0ZFyr5~JfQU@*V@}<)PcN%#!8`9(x(+?e7+Xv;!*G?UC{@B
zc8B^Bj=Q@2Ia++O&ku>K5Pp@t6ZsyMyB84L#)Ge83MS<x-Pd$2X05|HYo$tf6>)e}
zT0Rx~y8Vnb*2p0ewT6O8S%yB?QATCZF%D_p3Psi<j;9w3IeIvpjTsFGJV+D#5a6ej
z+(}t)iu-<Fc*9zRJSXq3Ek$7!*`Vz^TMUx-Ji=-%zPsp}!%&<;4zYhAJ;uJE81uze
zg7u+$y7}`)?Qr^47;B5Lqalde;p0`nY8^jlqN<GOvmb7j!LVlW1o}asZB;54@5o@1
zdeWad_@S9<)@y0_?+NX&z{eF)kC<nx#}b^8*_jnG8H}WD!GwS^Vg|QHv_hgEw1jKW
zoEwe4ag7V3GlN${8pN@1o=MN-Av0HU%m5LIU=EP7(T177L54>c(7C1~E2yY=UI4Av
znn!RvH-@!c2(VgNYf;w_(4_u5f%DrM(-q2dF6f5Kq87ALG(m%6g|Cd&o>Bl8bXV()
zzw$X)6h9|Z`-UR%vO-~6{B7yaZ5=Jd(NkO7Mk1$zt8QV?O8mF3Rqg?9BtKdfD<YD&
zTTFyrnp<H7_OjlUbYF-c-?$I+9US&>viol!<GDn;Xk>;5Jy;<nt(c*C=Y(b&OZfj{
zb2+S3blj;Jj0Evs<|<o_8cYx@gqx?(fbhW@HEd1f@DsE5dx2Qf9DgqG23D+bG<#4f
zO!@^Ag14gC2!&h3im8UxJTbsw4xOYznJLR3r+zs<@5D`<j`@9A7J5@x3fW%rvR!#p
z0UJX#3}kvQ)hZobO7KbKP@p1&E3L8!glrMGZdSx<_rP;2rw6l^m#%PWv_jTFT}nbt
z3WfofhnP>>oLv%?yW}Nol<la964tHe?g^)h9>RCsSviin-?OH)WJd*{!zoS$sP^;1
zQ1b2*YjIh?&);bw6_x<;d}MdlLg!^=>_h7J@u3H$Hh?cv`{ar<tX8Q%4kv`f8+{;X
zs_`*NwPn9pViI3ZhW=~Nz;AwjNL3-3TY*i)%QlZhB^D8sYgFBM&j+h{6@h_P>}`Yj
z7A#*2t|E;1^q7abq}Bh|-hVZx(tJ;&;CDH<{3Gyg?z*d+7D5Oigb<pTIDrttdr!oC
z_vu=h)dnH${rt?l?>TX9wl>hFy1L9VxiZbz@&uwN>Y-vy^Ogl^ANsMW6YpYBG?pAG
zbSyC)tTySQq@Yl{zrIJ-1{&F4tS*1ixBlS12z(`_;OOa1>=#e3*o#Hwp^KcSfoHxI
zR@QQ5k8=E;DLgbjxHgqVm>A~v5;Sj3b7$?jYHahwg?-pFsG@m_;$5i-*e8e$nBWoe
z2Mq?7Iy#i5m-nMY3VPsKR9SCEeZLJX$vS+17T!-?1Jd<`tbv1^W5#?7xSn}q_2}d}
z=9sHX=HusZXR9aPwe;}D*;1(@`xR&Nyz;yZ1ff98z(^MQMp2Lk3zzTzb`!8e1cNu1
zi3T4@9gVr3Y$Ix23^nsOtbEHpgLrR!lDqY5YDA_;$xbr^lzIS(ucUcy7EWF0^G4Yh
zX<|3imsp9%#{&52#xThTkl2BN|KAxW*nJjT(Ykhaw=!iGfn4X6PrIy#Ifl8-y5IUC
z8J0se^}>?j?qq(5OT6y2GOoV{{?F3(R%=^e774om<aFM^ELwjHv(U=Hc6n?68vqLO
zVKwu=V<&bKJA^0~9V24sJ~P@N-zWLKt^z2ee@X7CXmYQsBb*`+qW%^+Az@NRYlm~&
z)PViX*^rY!x{6u+2tduG)^|BOD6aGEZ1c5-4(OM9%z_8?v~zB!7j(|c6RvHEfQ}Gk
z99P5e<#h0ONRC^NTE6>>a}WRcL1TzH`k2E_Nb)18mpgDC{L~{mEGmN|<hI0|q}t3M
zI!T=>VL?x{r{;ry0!+E?E5E^ibN1<fb#H~Kg|)0nb(G=NPz~o1Q}(AmOnbNbux6#c
zA~mX)Rh($*8YPY};?j<k3|<$88Dc0#4sR<T?|v)uS}tQmPae@~`&(nB3W{X|TH#eG
z8l%M87x(M*59$o20#a#deXScY?x3!qs`)L7EA<0@V`u**fP<*V1fogH%{59QLy1;!
zJC$(Q{Q9t!IV^>cE-5Y;q+@u3UhLPe<qLA0P(6`Ns%F?fYP@!2lQd8fmjH)M=0@$o
z<Q>_j8)M2FDKpj#yrR5UA)5-^kL*JfOEHRLDa`Q`_dAqg@f(!FH<*G~*Ob?YG<|!e
zq8Oc%oqPRPSpi1w7Tw&O%|pzZ`YJJgIh%*@G<OpzJUrF^1++w>j*cJ(ObooQGZvQi
zP&kKLm(8uXyqc*<Ek6=MA4klC6FIn$y=^UNY7<y@3?o=oagS9j3qZ(QBPTix8!rzz
zt_!ZY<u&JoI;^5l6-^A8y9)a7YK3={>hJKmQ-Ix8J~JATV(CVTG~g*QqBbfq_*XFj
z=-T?U7efMQzSBzT2&K2nK6X{Z7Sqyz>XAB;fXd|QM^pk%)^8-}vq6HsVQE~>Es(BC
zMmf%ZT3)zhAFEJ7<3LGPZeG$GIeEwsucatby=)d_Gp|KuLd+2Hhp8LZ@vIkw?$(6E
zNqAZalHTCy{LAVtsf(t?gK(X`TtsxE65N-4CW?X4(_~LXY-6y`+mR$XRyeCQT7c!<
z(WlAwc2sIs6GOUSkJn^nrXk(9VMr5^-1u%tpY}GY=k%7hdN-AH_4mYF{ZmwN*EfyN
z3Fii6_-~A3!%JCO1^m&Hy~$h~&8~HM_#23uf3vq;7F{@=voZ(`%8vtfdf(82L>u|k
z(lTY;BzC2>os1PpX^gLC*x6xQFJf0wLa+v_%4$i?-58uKkT+?9E!pL@GSpEogY<A_
zlSU%P@3S&C-A~YUEbSF}Ge(g#5|&D2FZC|c^i4Q>O^w2>jOJE3YsZ)l=2Mm&J%PPi
zJFQ`1P}(kF6xN122~`Xxl5}m2A9Yl-XmeuM(ulLPpstFXdo3EvJ^PD{RtzlI=?hhi
zk})x|IrMx-qUCC8`@1aUIN7GSf1bqbNN4QW+48l&N|^7>%5%URt8Z{sDY%{~jd0aP
zwD6qO+o`7St&TEyygRn+dXN6L=bAde|M2!4SXM5xp8;UJ?R!fRn!lwJ9oTvG|BtQP
z9~EDf5YygXLL3lH>cn1)KY`~=bB_?sY2_qq3UxXSMhS}`)y_F0Ks3mvo$L7pHQ|X%
zuIN@+O_p{hp8**q%?0(Dp>%thc^$E-GzXS2c_pcMl8Xec=W$Ena0mjA?k3_B74NQn
zqFhpb9^{i@1Yq@xiDFET4Dm7fbC?-T0}qv~M_ig#5&i@O2x?%Loqicpz*KC@J}e9#
z$l=uQf5(!R(A-WQD@cGL6>GzHxXW+1>>)D_Zdg2$B0NJ#!aXxu_}%o;f7aw3W#H;(
z6X?A7M;USMs|7S>cZMKjjXnN1hLirho<VlmDWf%=JnA%7h~LZ0;3kGBf8i4Cgw_!=
zsdL)#dT@>o?kEY{DJ|PlM`{<bWcpk1<r(a*fTvMgt7U*>X+iaSMf;dn|5>ZfziP6Q
zlRTulGc)hccALLUW>pEL9=(-NANp=4?YJvHd$+w=7rkRmEsE3IlIxrHA;!~(F64u>
z61vCwQ!~!_qOuNk52AqdIwlhn7&R;6perb@ZpG(zA%?eyAn2|Z1Zup=#=h-@1Kqf0
zHxR8Fy94Y8Z~KE6KU!bK3;YXGU^W*o1s+qAP+Hg3mX}EYFW?d8kIo;0#xr|_c#Cwd
z)jVGuhEGSC*a}NV-p-1oKy_(QO)La=e8yt76G98W2gkNbS6LXh6zx~{qR43Rtu)RZ
z+3OjtMECFX1%{5_a!>zIvU37*aI?mcZT`I>tMN<+J7hcQg*NR8OwfWU-8RB9w}ov=
z;hOK7$L&W#l-1quoE83l)_gDJZ-!xjGij~Vw+bH}w+cj(Zo4>cITG4PWf8w1JwPKT
z>P!B(%urh66e&y@H~ylmg>jAL`hOoPhnr<8?;CL3QobCE$2)vO=i5TCv)2f+wPpmV
zVSq!eswV2s73)MxIA+R90`6t}PQoM=Fti0=`2T=;>z!=l&V&^b$DX0yQcqxfnZE)?
zosk*T$vi|Xo0XEZhF4*GelmXx-H78oafD6&2W$5~7?EoIR=V$fV+imah<~$^=BDBG
z8yVMcQ4h6qr$usCUs&9j^8W(iGDG0d`ypE<_3OTy2P*jL_QK9$9e#$CM+D)PB?a$4
z1%i>wtD{MK)F!eF347mY%uKJDDK-DD<mRmexLgW3N^Iv)aAKcNSnP~7lxNZt#$%eG
zxX)XI>aU_XYg<h`*(HW*4cUaES;gCbpVw1Y;fTzG5$vu%$ChY!V(U#cp!!iJ<>x)O
z|K;@EkBj*K?PBTfB~sC-3ljf@pgBY2?g&2ddanL9BqP!BNC?L0qPjc#KOJ&uuk_E)
z)_*nb;(btdKC=4L;_y~>8VjKg(&>kIp3uA50w^sS$BpDd1yQPwUeX{8$XJv&Q<?ey
zo`Id2!@cppAFFXWsyf`lbdTn2zXw;OH-TM1kBI#Z5xQ#LHr@UY!aSP4tsn3aNxeSn
z#kzc{{xi0;b|rhq+;c07Q&oqkBX1u#dD9M#ZOs~_Bg-Gqy7CvWtaHNTS?CI2#yhv(
z|Js04S9eO{709t~J||257+sn<DML$c+|&KREJHQfV%0s`XaZHo176C7;5%eB{M`j)
zkpGtpQxSz~Jm!BR^z@gs*MG{A{TdwlB}V0&n#BD4KcS=lCv^0m3>~?a8IPrdqCF^P
z)*#JA01_{7Kx)>-{&S3J@%mGE$YprQB;>#E)CK{&`ue{N07P<ujQ@_ke>1w~PQYk@
z5ZkQ?n)iR*2wF{z?qq*xRk2ua4pd&-!gg5O{F4y1lobfCMzT>nsgjV#H|F+A%%<w$
zfHb%UH1({fN1zKs244AJ&uU&soqUHGH@XW;v<DERMR{3I)4N45szYo{112u+48>V%
z<O1-&wnsx0Ut>iY4_Wt(vVee^@alTyq<n4`k|aOVHZXcKiR!QJw2RlO2llCd>mssQ
zioM`%Vt{!4=oQpxEU?46x+p-`(<>E-u|<B}CZsIBY~x(Q!nzX~%I-cv7FgXB*~u<S
zRQ1}2_<_fSV}gv9_ek$XFB$T}B_7r(L%6e(*mE~W6FP2)i^pSBqPZS;@uNmeL5eH_
zD+3_s!Kv86Moy|A2fHUdQ^%C&meZd$0#5cl_KN%|@)OoPtC+%Ph`75J7~TMy1`~>h
zK*V^0&bzSgK@*mDjXl@P--(Ni)KdE-C4_F-$?b14Skj4T>YsJ6DlIEVn^JVGWnP&w
zGgWl+7-_IbP$mKT&mGHpu1@O<yAA9j7uF&6Gt4wr$gFCi)Z7YXIi(ae$COpoXn(hU
zl#oYdkMjFl_l9MX>YE$$ck@KT@`(2Arz}MoNl}P{%Kw8sMuRf;1pjG`Q8Yri+O>Vc
ziJglO4?wVnMfMVNsZVjjU?vxEo)?X1UyGrT!(u#NAX;<5`q(Oi$hW>vn@T}llx!zS
zXUJFG+_QR82GBxfi`?k(bA229EP$GqkUATcwp~S?sE!#f-KeVE3l>UhVYf0EGT>6|
zmC=-r49=vND3X|LB&pKAFlYMHRVq!+_5|Oq!GDQwQ}zTLpS?Lw?sZ{H$(%l#UpxG@
z)0L5{Jlto4EADxp0q(QIw@2P*fctECAHw&0{n&l@Ylpvf^siM(b5yJm%2%pW0k&Av
zjWUXCE(*#LQe%9!A8{vzPyUD6O#gCkL4@0?F6*dDqwFYSh*)xa(<+)TVkIlXrt$kZ
z06pz(VTdRzD8&cf0GT~tYP2z$IxRe~ixW4@U%QyiYiyt9rbCRxCTs1y4E{DR{A`N7
z`nZ^RSu<4IWnJi&imgn-8E`ywdT7Lg1iTdal~z=R7Us?}O*tcMpCg5jNx0|uH!YP0
z-pJl_DZhUDY3%8Hv8TWMTTjnBwl~G-V_U5~p7m%K0Wzw|^i5a7-k2t2O-R`nbU@b(
zyAw?WPOQEetcN>Px9c&rx|1=LPW>`ISmD|$UcOylgw?B9!(`X1?8<*}r5s0Ey7aAO
z9upde%KpyS6L<xnH>%HLub_)r;$pO)qOV|5`G>Dyi&xME2rp&lBRy_aj}(}ka6Crd
zK#t=Pn@gvO)023p?jkxKlQ+j>iQ}=%mJnGX<5R{Xxg)-H#yZv+%~)rw{;kg79lHy@
znhD3_6#0dT#0Uiz|4`(Dw8g^|gIDgEcwYe*?Jp8n!kI@|-ZJ(KtL#ixA~kY{2n+XD
zi7O?|s}n{zVdq|TD7DXe#!#x80B(14)dXJgY%gL>$U9Rsp}V_k!v5+6Heq(%gz+iD
zoq2#)mF47EgDchl?o9hFhe-R=Wb&H@H~$I^x1*=+DSz|T<$ojW&;B;s*AtYR`U<rX
zKyY=YE0D)J1#_lu-tjr6Ghd1A+&T_|4^w-Zu}O^qCJ{V#(H$a$GgMIE88NJ_C3w1`
zTcsU95P66ekXOkAo0J$M*Ib0r(?@J`1}>1{gh3gwD7zCoCDChDDY6fb64Qk}__@3X
zISem-gh)dNi3y$E(NcVBHHe(q{o^?;%UiMVAFs09Lv^br4lxDZiBgz2`@(lknBi6}
z0b3H8zh=Uy%Svpky~i7$M8b3B@9H_*F<2~iV@Y#QRLW#CwcFx4Cnl3~(9d~UMT{sT
z$wmc4Pl^x(@v8@;>^PoPY>-ca{hF}R>a|_!q2N)j??gmWQbn8YfF?L7Vxhn=!8-5%
zzZ<bDjPsxk*X&+VaY!UT$v$`@{kC55t0R?7MQkK>Kdb-Qb}@GBw9MrSe>>x{^m5)=
z-D9)5gO(Qp+UCaMcc{GmPqsn1v{0Rw!&`e`-*Ag=`L}&A!{z*Pwb_p&dyGbEIMlw;
z3x@8A4SGUEP-OWiJyvxdSu=7Z%dtTxZ_iuVBM=WZ=l;CZqkd724v>@F$O7T(#2%+%
zO2}MZ*%KL}i{~Ut!EMZ+>k+d0K0>(VSrMl)J|^&~#}36ZWyO}MQ*4>Ckn8OopD{NN
zB&AVHEH`62pNK^##t04f6NusV(kE&+X3B=Yy=qlY71@o8?B%~7Z~f#Va6tVp+i(WT
zCQG8fT(P5<!MB>>(>vUU=P}+Ut2vVw#oLcj;$vKHJ%&0}%oF@JaQo$Go5yXqD6uy0
zc-3vB&6aR?oTRZ2k&U!`yQR1z?{u@*-Gg{Ikgr<V0#HyDuFW?e;E1ib!{&7^m?j7)
z8N2LczLX|6h2kf2n;}S;3U;K_Fv;{clG~uV@0y5s6-znFcdp|#>vp^$I((W1m{?6g
zw$<FlPmPFye>?TUQwxSM>h@ii?Qc)YyB0;vU3Qn-cU|8&6?a`Y*M`f=B)o-MFiWje
zV_7XtBHU%Qpx`x?V>DG|sdCLyMVl~?jQ-qlw?z>qzL&Tll2IiOI$l5s%-ragnnlIU
z>%vSff^vnn*56as`l*`0O4wQ@ZmxuSr}ihy-M_R+ud*t#?LPmHQoCnZZpV`>p{)(?
zx<I0=m0<8VIR=}in&XG+HUS7u841_Hl3aUhDPtbmE4-uTas<tZtTP$J45kBKad6^x
zAkn%F&s&eABIe>;n^LE%^Y)_X=CA8Jp1B<fwBKLR7lW8h#H40$=5auH&4Fj`M_~3Y
zI&m9og!<UvM9~`ack6>45nohk$Jk&Ei4l%c@v~m#qzyY%4_AMgE(1d*?_dv3%1a&T
zkVnJ{k)|%%nMrJXuZ{!`a-GH})C-lPG1c4<Fc6ZNHK`NSDpXADP_`_SC*6@5Cj#P7
zpQ$?#W)z)pb<}dRLaIlil36yA$=w!6zM4*u&X=d|c-9`2Oa1Ja+8sqQ?3811*Blu~
zTvWB~$k&yOE!w40Bx0RLx}uE@%7vNl1RPoZ2YK$k#OftLXmy2Na&{Mny5Vvt%Qp)2
zpXrxmDv?iYX5WRGnWcSoIQVstFOveey<ul8+(=1=3In(!H}Zy3=!<TVbB`*i(}sCZ
z!XbuA?LwRuP(<lu9qfP?+F#5Lb2|b8S{b`VM^#ZRQD@U(sx(vM9|wqJ0AL}O)w6Ew
z-k!+eY7^DoosOlW?((vVcn`ZHC5OT0RFVwPLZwMPb<B&}uiDw=s_5%|LTXQ0OSQK5
zXITLI3%QXi{IZIq{!G9&#uBJ;UNiD$fIMk{ezBk;-r^C-uC}RNG}76Jc}zyx6DpB_
z_~T%QXaNtH65T;%dDCskX+1G^UInMN)(~_0&`^@D@l;8;$kfXuV@Ed;a(mVD*fw$q
z>!)iNyj$d;g<S5bfXUq{b6{*Cxi}%M$p}a#_O*ToEnUoc!QR%GNFOy{{JTC>hdoJo
zk9vQ4E_tAoB$Y<a9z){q8_?A~oGwW!`z^W%l{on($)Cq~HXP%^c|8wt$a)d-A`JMj
z)&bYif*gMs$C|UlS+@V#SkXENzMWU)STRGdK&HHjtT138tBV(2DcT{y&66@281Eyr
zH~Smpk~`D8?_CcPLa25MA*<TBLxYd;mz?L_y?|Tv^SE!xxJ8qpsK@3W2G0*aFNAAy
zVox$Rf0nSU>{mi*@lc(ufVar+R1`lm%{fNM#UHf0r24B7Ue$bKn_p(0I1`%tRp%Ju
zh#hms(bN^<0ZvhwZ8dGn_+uZb=``mX?<=iPudu;VL0j~91-M-@C+?H-!F@{rq12Id
z>B|9!RJV{pd$dUVA)gR#sxF0}R()`2is9_NoJZjBP$3w<ksZ0nZpl5|q^<vW)*%^t
z8KXlq^tfjzN^lp?K~7P<AQsT5MDIGXk39S&Ta0=Y`j4Eng{9>(A&Jb&o{W-IFhm=O
z0#8md>)zLNOcqVBnKs3?2|o#o{8+JQqG>tnpwd<&D!Up?MhN9l0GjP2cubBOAZUr=
zhc!~CDi)Zku*s(s5>_=G-_;4Z;t&GacM18A-}3uF@++e(lDB!fQbxdpZ_=QP>^`j-
z;sLe&Yjo+!uA>zkX?qUTL_bd`20Fl?G>i5`T2in_{hzN=Bq=9#URhdNO9(7iy~!}S
zvu^wb`TA-F#XCj*ruj>11{G4L%3MPrZvHFdU22DmFebkY&v6qTEtKaFmPli{7w7`X
zlvf{m*R`v{hq|=O@#Q)8bTd0GU68WR-CsHqi}*ZkhoD0kD(xbWyJD#b1=#q^YJ$h;
zXmn31WFDW21K4T9Ps@yMdnt3c#m!Y;cVN=4Mgk#L0mTFT<jt)|04mz})W#BS94Vm1
z!aH&C#PkXu=@k|<#hvz|tY&pCLs2Koht3b3<BDXVZ|x6|{>w?MX=$%klu4dde<CSJ
zH{n$2ryCIyqC5Lt(f0vl`>I^vIaKD$-4hK6668B=ej%u!PImepr389?(`6<>je(XO
zZJFifL{4^Haqzb665@$UptQeY@zzrz(55Khz^Z<oseiV%5h%)T?NF-N6>RwjVWR#s
zzMxK92Acf8I&o%QaTw?F^4074Nq4(-Ns&7+4Ole7;1}XHE>(S#c21t^i*m#zXd6?8
zRekd7BQz<R8+`r2uXE57=w2@DHGaP@$ct;Pz`-0G4k`Nf1z($cYFb8pl{CH%u5wH}
z!RwjXCpNoOFqEyBA>{%E+H>f{A=9Al#4cb-tXz&N%F>YqsuHp;K-aj|@MIH5m}EYB
zH6VUMe7?yIy4g*nYV<clUZc@6>XZ+SKs|^r`S5`-balG#4go8~cpIk~{b!Lk?-=zr
zD$i1JR$hbFv2{Q+p0SHZJLqsdAUB9Wv{KlqIzaW+QL?mfNjw?pS;b7261L&0R<!Ie
ztDs)Wv5U9MIpNrSHY`R3P{cnJ`C|6M(x~1K1?R?X(EW0Up5A^%SR%ZE<}Q>2P7>VU
z0jq3yFTK~ATj|fbYY!8`RCm<mwXTZ_S~^oIRB4G1{VEaK-hANA^YTlPQuC+GE^SAN
zno6u71-y~J=}^Az4%XV4uO&)(5ZzGCaV<1<c36zN&e{LqmY*I%{E=HW<V{I#S*loC
zcd^?qC=D*nSje_0A~!8-jwNIE0<+5t^hK<C(Y-;fOeWDBBmi;zXR30ek-RrD4}%3?
zf$Sm}M{Pi(8)=wl8L`=GS^dXd0Z2MVV!=G(yW|tGZB{~+o3o^w54BgxY^jrYYnuP(
zyWb4~A@70Ukw5$0;$?c3it)P(_h)-A2xNa(xJ;tP%pnv<R6nRk6o%2~`7RrQ9Ki%I
zgTh_JkCR&<4$;`=8MGW3<$)J$@_6ZJ)cYDr6{vn_z^(;?raFHRGAjBP{vAK^k9hwq
zD-ziLyP=0r0HX~7;vZB1-$JavsxRW??Zp#GjAg7~fR+HKEDCpOzXVu!S-{8LLOuLV
zYsk3~*IaEJc*>G&)JJE$$Z$*ApRvXwRr(pw_d%F^W=Osp3t24&7%`0y`Yb>@e+e23
zz%-014f~<1t@nk7<!tR7vVBu~A&ZP=wk!w<a9}N^<=N}0OeAWEd$g<sr$(N~7W)xH
z@GGzbZ!Q7rN!<2ZU?GL=S54qb$$n%@a7VV`E{ARc_EXwv;BX_<-_%b-upxCv+bggt
z3#b7zX62@b075x#C|*7KA1y_Hf?r(Ol1e=j0BKqIH*6GeJ|Jt>Sry~X2OQVh)ymYO
zhdnV>RHdMB()A4~iYJ9Z=)NxDVGuf16IR^`>h;X+`A7>D-rYUWp4Wwuy2w>;%f_(k
zSnkv154K6%9@3nHu9|!RQ;y7o)hxaPej#n^We3R14RbbyhJ`N>Bci=sF^#v9q4GX{
zke<gPv5}G9N}*`Q%k*HN>H|jL2W#M}ZXRpVWf&8XBh}St7o)W^q-_&M^fMEgu$pUJ
zIUzKe7|&XM81<Sr5XVz-=s-hPFx=@kREIu1gH^!Y%+(NeAJu%)4j<vBj<GgwC6wq+
z?obMjZI$jiMD}V3&tzl>`&OcUp3f@QvPnWx4Ubc(fHx+EAU5SsMDR#A(s$92`ivR=
zJE-?EHlMwV#^x8%V|?EX>_d<}()k)$zg`IzYHcFl`@@&Pl1nM5vG*-zEP%UvcyGAC
z8=>9JL+tDKJeAeb6Fb^)L_c)T%f68N1Xnf>V#_DNK~)_xk*)`WW!+yTwYFRGLuR@E
zsU@m5L5?O@miO1aY<YVls9EJ(5H$^X(|d$L5NbSO>F>^J@xx6?<y7JNW3WW`?-*kj
z^PF9{E}KCpTn;Dp9eQmg4R0>7aBlR%smgZd3*c{T8BkcSQjSJ|;F57)A-12gGt4Gd
z!_+BjCwB`1qVTs`oVY=mOjo~tq(K^c^h<U3s8^%6G}z~>Q^*=L7BX{UyrhW{rt)&;
zM0>Wj67BRF$Bnz5ktb823JJE2)o<SZ5<hvd!yPb|-0i)ghqAm<-l4wN7{j21KwWsQ
zRQ5D?yzw?<ZLz#W88crcQ^ee+u3Ei=LAb$<K`{@bAdz>13XHQowp|1a5T!YlB4iUs
z6<C1_XQ_AGlPzy3W9L%e-ViyqE|20NVx8RDNFQD;FWUIqDAGHAdzYx$@!w?@A@1rN
zZ>_(=dN;F=IHQqA9Mep?Ir-H&F!L-yi;acq8zLfu{39B;!n|(12ropW&SabcE#VZl
zK(CI>K{6Z{qU`g0tG|b5oQpw$;AYlcA&S^e9RK2qS3_rhw!;#dC9YU@cP9j4#<$zJ
z5WT+k{AL@+XFIIk+2V?;%I1Wa$?$Kkc-6+~IiTdRyfuPog6wUKZ6VS2ciwU3w{hmC
zBQM}wh)^J;xmadqc4TFFMey091S(dO*V!vtAhDRc37+sQA&xtL7`H9Ak~l@Ky&B%Q
zw!i9PMN5j_-pK~<b?jFDI*kv9D)M#N$MDW3cP;1prsNy;H)&MSrg0&y@;3$*UdFc$
zury9)%%TsYw4OOe8;-H9L@qXEkPnBnuMT1T9dF|CCVuPm0_+wb*V#V(a$Qt$bxwbC
z-LzPYGj}_txZN+;h2hrQ-M%im!ScrJc(i!u<|Y_zhhMH-Lg?b~cUSh?T=%!`O1RBt
z&afL(Lk8nH3i0oJtRiOfc0@p!|EeCdFb|${I00W`47<-9Lal9C+k}qW78_9V%dPis
z_MHnAokm(Py?5AitkwYvDxH;gW9-(~eX|?4wVSktMr`ZElV;xcv0SThb8fPtw}U>|
zCYb8jjSx~k-T?(ckP*R0C>c$1Tqjl}oag5PKWE?3+IOT3L{;Xb!VcdeN77B^sUBSj
z0a7L<8m4G<5>Dn8ubzawQhkW;oBDSt@n&dFa+#`#Pt`)Cjryz-zHgS1kFFJBXJxUq
z*VuGEXmIQ7JLq~S0b*KaT9U{2Rq|j;#HyCWAW1q$_|5x|XrBe`^Lt5O`Uo4QNu*QN
zH1|Z?W}l8+8qcUU?seT{w5v?joqBg;FR2*&ZQ6{!GQ2?k1UJ}YyX9?~p9){FULd!y
z)%DTZ+!{M~<Jv&u>d$rp>LR-!;o$q$R|$vtk~>OEM^Um2=QsQh!>^yS4{Pxbvnj^Q
zb883nz9LJsP+>YEeQ!)E^_)lrTef=90(v?YoA4yul-W69HX`R40%q@B6WaZdfbfkV
zZ(*nYdDg)@*}1c>*;m#|GKb32U^|^cn%&DEQ4_T?ck(A))C;U@U654xDLrvB5s}$D
z4CkNL4g_rZ%eIII=`FJCR+DuoYX9C)6Kei6e6JO|^jqjpHV){L_`}-#FuVFegMYhx
zEem^;C6+1|eCvMgz+m%NxrH5sx*2^R+Wb>QcMzjW)t+XOG5+E=r&nKC)E(7Kt;%*J
zM(9RLFP{-c7<++=u_DS~%n6_5PN5fonvTgPhbn^UHg%kR%^pSwybMg_@;gEt3_yrK
zlK0Mab9McDPhYH~|LF(+=%j!G;Kz3;WZ~}YN=`H~zbqn#o;|DR*HIeJvXfh}`hJ9L
z?|_P=gJ?;FN;|~Z`)vdWzYiWjy7*n#kl^DLC$sF1%?sK+VBpUnHs9DI(s%(q)?kL<
zWQRGS5(1+ADX>0ZN9vCS9g!6Fg{F(%63|Z;gF>S?HEYc~l(^$zk^oJwSfcI5-;K+6
z(=~5OJYH*{wY#rhM;7F6_~+`y4Dd?)pS*lOBKnYsQQ*X0hq~DFnLJOA09M?)3-*d7
z-faJXUQp4>>0}D@^b%5xEdLi8J1m^HV_4{8I*cp%#_0}&*woG2G4S&_a;!$h>3-Hy
z-yo<Qy-ChO=IN=xU~AFlTac^c&7^G;kJM}>pi`Pihj6|vv(EQPpaq&lN}|1?l+Ak1
zV5E^&ou~x5ptB+jS&w*$VVXl0Y7V~U1E9D~9Xo7URatKCtn$f;u26dxW3iZz#aI?(
z?Hiacr&E0S%HD^iLI5;LN3cBM;=~JybWeg=Xl7?ptYSB_Uazbqru2O{j=l9ETs&8<
zByLQd4<oLyNx^#9OB?nI*(`iho3t!?HE)|?<(RsMVO@4Oy;t2DBt+pgi<8>}ql~D?
z%tc;<qST|L{?>V+s~<mgwu?p24uprN$eE#~S`N;H4|r}!oAW1XMUG|c`5xLJ3VY6;
zq5$Vry)0X)+yAEpfi4RIJ3-xyR0K-9W_!ciDfr*s|8{k48I7@Vo!!4$*QOi@Q~s*}
zfB*izQKxIG#t$-nbZymQ>_n3Q#8&qwYl3LLfZtiPvHnlgACGp6%G|M36IHqY>3fIg
z9_`G{H#_qh*m9oQAU@Vf*wZ{>B5K;Iz<7MYL0a8)v;@kfyO4^6`sZ|}{t}DgeI;N2
zv8gsM(;yq=;|7_IXIPCjqR|EeA~g)nOD_rxS&o1@5qkarbg~Uhz{T46=ZKDC^7}HL
zyQon1V35oJyn}goRe>hMdTD1hS%b<td$65y1K2tQ*J{u85gT4nvU5qhB*Sv$wsry_
zUAlvHn!wYvHg6Vw19J#hP{=d^)B>}X2Gih#VS>4T08v1$zlxw?*LFc-S1b1*(`s%*
zFnjBMl^-HYtaZ*%FZ%+n)**_X>Z2oE#VywP`iyG1xf9h`MbyoAViPaXO1UX6*IjXb
z>__m0k-*1ZKN#19uGBGwyK8}O+$R#Z&xJePoInS3|EN!1ISY95W+gp5!IbZtIV+_=
zUCVpR*8iq~X(ExOX)Be##MbE(uRe&ZNcX(3nXP&#O<%<hU5_IkfAchEFjs~kkgRE#
z6?MwMMvfFx5l~k{*SS?e&Sp%i*q<*V9}c+22G>Z%u5tSL8kiSU>pjJ;(f!%{yejk6
zX`q_<s=f|(9Bm7z1vA_?9F{Okr`IN!{%J3?`*=fdID^eNnsI5q3nh@HRM_7(n24B?
zLT0L%&X>0t9Pjek<^?q7l0~(>zUNRjniouc!bWogBRXqU^Mhb5YS47{Et!Pv6zj5D
zXY9EY8o8%nwf2|B_q;g$!pWno%Tjkn&C*tTbP-RE><H5Eq5?SH+vPqMAxJ%h#}zY#
zF}5TO5`+UtSfy2#N@M%Kxw4<ZlHA&@V`#tvSe6@Ud~KHYr9>YZvMIXH|75AAgUtCA
zILKy(saWzmn*3K^-5ZHziG|($!Ht$2mAq+_|DKa|3klLzo}PwW&NwAFq{KtAkwfaK
z*deU2&}ni#RI-eSF^w)Svglzw$VBGy(B^`0_-$E1fevQ#>c)x?bluIXnB_pOa*AE$
z_ch^P>EOBvLg*{Ot*ru5?OIFp81&+hxF3rJ>f94%(1rtgh4(O_){#9v(8CgrE6{jd
zwy}sh<Lw6hLij??cL5}%pz}Zy#0F~qWM_pk+v&!S4?++c4T6Hi#n_I(Rua0}Li7T`
zU48tH7j*-Wik?7v-Jz^WsEFtP*aRG9aH7J*nc~P7e6Ah5u+uC}8Cp$O3~v3Vf1%Rc
zJz1(rAq10`J{dU7kG{)R5^e3nLkv*PM*+92SHNh<-mwx-cTjGm*DnGc(_?iDy5k82
zc*DqM{sc4epSI@aD?rRl8S7wC72pN62}xa3^C-wZ&$pij1}rTWnD11By|yTGRcne^
zZ_tL<7{d?vnhNLKx_(X2pL*SXzU*1TmZL)tL!`0dx;m!FI7I5sdlP(W8g;<zTvE#o
zqtKzz{QfH|Qc9&Du^07auCJYzJ3Th*Zf-95@$Tujj_|O^HFQT*EvL?oI3E#`&7=9x
z=JF*$hwA=TI$W;1d$=J0ZYOl;2Gf(n83BVmN?BZ>Vyi_I>9xXLy2%qnl%gT(q3o)>
z9P7SV)ZSI|J68LySc7vwiDu)7FS@5_z_Ps>FghuGp{N`{#p#T+Nk^1skL;Ngg0?_O
zYV}qG!x>*+NGBTUtKfnNwdlF2P7cd9g?7H7bN!wPf1J>^#!#Ma<V0yk89Ugrn5qm+
zRU<t>%q*;UI4>mdel!&iS(QDi>up=2#ZUU(K5C0eq|&87nnLpG8n0?5J3@UeU%r{W
zyUdt(TAU9zh<TUFK;Z*S6r%7GWrlMgXd(eJmfB8-;fT|7K;Aq{Ni<tYO|SMcODr(r
z3y0C5oQJjph@=a7eR3tQUtHa>OhuNzJNQe$IUwy_3?2GtdhQoLBR0Uso<79l*MW7~
zPgBYc1@@Ex*m?R7w>0?*fxJdazbztf>SIKWTS){v>vPm8FFlML;8F$bp-yUuUt6O&
z4qo0mSO&2Rgi@7BQG{I(5JOo^n{a{}kbhqZ44O7Ah*|+SH=AY(f{V;S${G`(U6rf8
z9U(i^odI3BuV9?i4a%dauc-p*xGxS`LlNSCdfwp^(2$1+ZcrmGt;ZC@8M#r2f)VBd
zp!1%=|GdPL2EXp*qOQQql#|E1h3I@;Qg(0Dph}zXlrbT6?+k)H29U>2_7qDW<izra
zNVlrag&o|nW?MT91%T9YFo!x(H!l~O+Ojo$RdZY9dQe_@m~tlNaF;xz<80h`%r%OK
zF|b;2qfa&ELBa;&vQV_H6NxKq4a#s{_%EJ@W%A*FwjvL(UAzA?SGoky`Ja+Mtn(El
zW^||(puvveGSlp~b6c-`t1TmGj9CjKw=HXCWy*dtPsZgcfw09u|Lh-KwyjVc-IdFN
zS~|UQ4eR|_?uFgI1ie;Z<5&)TSw_k9-<Ji}qcFR>)7x8}%kCWF$HB8`+Q<PUU!skT
zVk?GY!gc-2^y>?`!0PE0Rry<7Z*BuSk0tCd4{YK3bEXoeK<fL1G!==LIvA7b0@qaJ
z|7(=<pn$KFE;-?NYOL|8UFQ+nHS4f6MXEC=6(AcfVBi7BGX)Gt7o_%xF-#Cft!047
z^UbO7vuBF(FZKi>(f&aILH&7EII-+Cs2ooCcFAvZV{$)?Hb8<T9)X@9+d`jmU-IOw
zd(3+&dY6fmCMC!imR&3S*Gb!)itRF@{H-NCr3PX?Ae+GdbuZQs3#u;UEG?kYwEFEC
zuxJCL6%@D<@{j+BB387<whQPv^c5PVwNwpHgs0c)?q=~BOFsX`4%5Ap=l5o+QXpfq
zB|`_H)Lk8-az9s*N0X8fJX+U0@{&iJ$I~{LlV78Y&ubTZ3~7N{i%HD+grYDCId=Al
zmoyDD4}ej1d8OF1X2}<i{B0!x>dG2HwDxM|{`_DXL?cnDGw-tbLpNDcRj!UaTmmz%
zRsP>^!}E!w57C^AZ0uHZ1A6gZJt&{|jU?;<byNVgb=Z4UG2Lul7YO+4A$qxH_Ay>%
zn<2fh6ym9alZC0;*<_-J5odkE&e$#^6Y-kBRFcnrr#YAo)feoPoXBSHF5x877ySNf
zcV!%GDV<0G&)zZJjNGvd&=JfT(4+B(lN?qZDRhV9GRV-&Oi7Lv@18Y)M8WXWc4|_Y
z5feMeeY>6sXIa|o=}2+=&_2u}E33b#AV52Wl+@P<eLFbH3gnOE$@u4yO!oORCTXvO
z8%Q2@;x=Prlr5d(Dch5=3Z%@{MNR2GZsJFCS!vHAN4po|+*bkV*Vxub>5*N%=)cNc
zmYBU060$BwK+-OKfc)hPyRTkSPFPW<qE_`)ijSH1f(HC~?n#hGy*JY|y&DD(vSC0w
zLCWvfP@=tABzSK<qNlSN5tW3$U4YcRgOFgkjWI4}?!T}L`kqzh+U7{q_7<B^p^V-d
zIZhXYf7nC?z*+TF0M7YH6`v3AC~CW^Quwjg5|Hx}x1pztJKm}%xpseU-asRG1M=p0
zt<e~9ojr#B8HE#8@LM4LFv7MlN3p=tbmNNMxDL8e<1)P+cKe?%)RYUkBlYt$&1EFK
zEwQDhN=|eLt$sOiypcKoIYIhT+fli@slAkspNJHf?TKhVTBo5nkj)H)GO{&6mR&|b
z_;ZV?tz`PDR|MYX{C2@_X_<6JP>N}3tZrMcNIOKXSWVT^=B*B;YA}v&XbL&*RvId<
zBRf+<{kWlC+$Y4e^Nq?85VR%-uuW<-h3`8ahKP6PP~g$ZpF;%CMwOBReMw2Pv-XVb
z(_Z+%cM=RW;t;`__DEtmb4@Q%w?3D$(~ayiwNSD;cC4QAa7^a*81T|XHxTtJ2gjxb
zsji-ulonly(3Sf*t{E>{#z4fL*CBbwc++CJD`Uq?xg8yo_?cOrnYneQl!|$8g^$pf
z)`B-(V=9jj?`z@#YV$5M+Tgh&e;>Qe2f8?N`Knd@5_*_<j+H4o^6yp_$(VeNL8n|Q
z(b*tKZu<8+^r#nt@>jT<w&Lt#k@*@(+5}jZq>}=NPvT3Ui{&rbk4qx{{2X=m3Jfxg
zh7fr*(t0{5A@p+ieq!?}O;BPoH0)s^u<Cp?a$$=?Bri4vqf>82ww%I4RFSJ(mp&N|
z(FupQ?+&DvNpA?8%2l(M9(#xk6?qa=98yHBw7w<sXQxO>Pj(DU`;lr5m`EKR5~(Ha
zjK2_XgV4vJpneNj_`CQ{VjkMNcW3IdQ&CrQ2R<Cg$RNsEM@lX3R3C8M{^~g2h~`~}
z{<J*WI+>=6*qd|!B}rfiaN^6r%w7Ph*BUP32Qcjx%eeU-*@h&+W5&*%TQ4E!>9r@T
z{t(KWi2*Vg&Em1Vg@m7F{qxslqYp7FP;ANndj#!=c7zZ))k|^IW@15JD<0dEU9!M3
zv}_VsrgVkHo67R6iBU7VG=foyY4b`>?sXn3#ffh)Q!v_AC%UN|w0gSe<<v+8U^+l7
zz_m6Ln|A`>juRlut}t`WoLneCU2tyC(kS^fN9xOV1TE#Nv_knk@N2!pf<SaT>R`M9
zbD$tw%JAqI)q^J%Llz|OR3ANkGZy!-WIMsNo8U$!Z@NRSDE~WoAklGgz!lUf(k{Gp
zJ&)y60g_*A#rlZ>HCSLr_*{o5h5Ts#{i3-kgW!{~8)ai$Ms*|VDY=>}OaxAF9W#P<
zbWiB#ea*(M5jI;J!b4ax{ZG&!ui)-qEdiQGUBRN++`+UyBT_y!XVfh66zImmyp<CF
z=K^G7T2Fu@PE3`xP)bVA9PCH1LFa>x(iI;B+~K>92Fg0lV&Vonge$VARs$V+yPN&>
zQP*q>DAldV;m+S4EP7M3SfJ{Rv)T{QXOSdSud97tB@%bxL-;1p8gH*lt#L7bXE$Cq
zlWr)DUW3hC{JImxkExI`{eEf!Bjsc-ut_y2G=M-!{np(|7_n_I{Vw7oj7B?B8uc@#
zLjh3ap4jS1m4sj2G9bn!&Y8x}IVS>UI-0@~WZHnL{W2r*^&onM6hU>egSXA)uOC+u
zFl9uOn!O)J<W5B&r$iM}R3Vq$=)J#R-fE&My(hyuDM`o139*$XqFo=iEpVM;TLWv@
zm?I+5JZ%s>)0)`G4<Ne$Dinx5Sw=pMT*`=V%UE=Iv?hhHwG5L+ST7a<0j&Bgpf9@!
zpfo}b>K#O`ZPWBz<v-FVS_K))G}2U^#m2pQ3k$x5h0uzgw3kt_h8!R_yq4jX>4%{c
z>$@fbEejz$a7WIYF=v^{8ZX5%I@|dTxds*wu#Ecul4YdXYBa(+0v{@!2|cJ;^{>nR
zznUitYeW7?K1_c}`IYmE!PeDEyt4MRfE}ZpV<@8*(&SKLO)exQkVZGddX>vnr8uY|
zS(uhocQKw2s+DQf*j-*3D|hG`<GwmUqc5xfmW{bn-vaZ*lIvK;uV&}r`>B>W)lC~q
zlosK3E_@zeOa=ze=vlS5&Crd0*)pHSZ}Vq7(<5mE)4Fis9HYOsX(?oyxx2KAXQT9d
zTVr1uq)D=zB?MZp4>x|R8QsmF&Z}Bp*2{divi$}{GN2k@`p>eQdP-*^x6(@YVx2_Z
zfQ#f~hKQ#Bbhb0C<|eJ^-~Z7u%)RQxqzDC{M^aedrG7$c5XG&74UGtWa^9po8%O-O
z;+F28=4I_0mp+Hb@gi>8wgU3t;J9OWGnen9Xh%Elk7-C<5B__ytNxxF5?Hg)O}+1e
z{cJ|%R9<>31d{4?1XrNOSEUieZOfgjjl@ExcJlw8v5>ko&)C=Adsm2X#BF#TH6bsg
zx7z=dM}Kl93bTwxVGL7#^eNnhy^KXv9!*5WxKtcL^|b>ZVIGfG9QgCG5<b1K-SHfk
z<ZP~$aHGCrRrkSNKkNeSRY^y_0`vk~#dwFZ<hT+)e4SCUHV6EBo@_PnG~G(n(}WMG
zJx#rzgx9JHn94s5T9Ur6ArYR|@4jeK{p5>^b&zIai;nlT5319%f?C>qH#AFbtj{Nt
z_@#J%jb~S<M{+DF5NZ?y*q3bAEBkx)*@ZDxJ(6loOB86NS_y&Jat)QZDj*dBJ@xQS
z4C6UWw&V$V(+fNWaI)6m%*erk{Ed6S|KziD_K*Ng4D8lM1z+pK6BA+=rO+S^H4dn5
zaQd|2JkFD(5~p9*;F+~Fv4lWk!52c5qbk-#8v!~2#I--cVI`&(@QRHsXBw~5Kwa({
zE7<z_M}LWZ2Te-TT-T8C=(NQ5>(+6q`iNZ7)0DsZ(A^|@ta{QTD{@<&>wbmey$Nhj
zb9*GbIVGEEuGCqX+F12=T2P6v4cUZunUe`g=+wtE1RqASVXLIQB{_kl=Idn<@@$sk
z2PYHqen#pDMwBh$tC+BLfSAK8OZk+J`@;nHhT|ZdtL>Iq{P5&h^Jn;u!*D_YnXMZ|
zS8MCBx?ej1PS-b?)31T>?#HNT2RNYDIj+%Lz)PuXdLdl^ep$N$VN<C!HJ3I#LN`)q
za0-~?cA^2V0tL9P2Ax|=d$J%@X&#V=yG1uF6U*Yd(K4|NzUpTA>ZK%|QD~AxEiq~b
z$&1)No!v7QQ@?F%DPtdr2kRScM~2W(h+o%uh1x`<I;g04&N1D2DKHu{bGTGZHk2cx
zEJ<pHr6xUbqSvjK)`*(8$fKmUfO?LgPO{PVj6Xewvfr28p`Df}Udio(e)ZFDZQ1>J
zl<%f?LVhi}NmWLBn_wYxGWJ;hQ*xJfk<othuJY1fMR($?4M5Z|!66>59?BR)-dVg@
zBfSnzr8DX?j*#M-sWbw$UTVQ0MGnJojL})svDb`yu*V6;J;o>}T1t<(6i*$&#28$P
z?BW9QccqL}U-frL{?*ujCx?)?=EjL8ck!rg&A8=TWD7N3V!waGOK4#Z>Pc34o8y&)
zOI{&IEiB~Xy)hi%Rx#&<T10wMADkg{oW7r%=eY?OxUEaU2@)Jt@kq4gu&Zdb0V`#r
zWC}f7A4~b+v9eI+m6c|KU%Fr6FfKes8NC7N9p4)^Uu1Knm_qEg1~`*up5Paw90d|F
z-y0-K7}@5F8QH5+DONQ~5oL8|n?)vpAzyHWI;&(SG0z)A*d*Oi5$uD+w10--!!=@A
zKd&8I&RSH%%gUjNGBkpBY8x+RZm%X$NjPq@+m(1<D|LQCbV>(Dk?6&1Haj^&aT}$_
zKFVICM{cY@npF&?urr}=aqq+B=yJ0EZaF$`==V&)Vq`^D1An%epOc6bG+6k?N#bU?
z`>>0JS<+v%W^*S>_3RxbD5dghMsy@81tlsaG|=zkDHJETXVfw%PH%6g9LN)TWQiS$
zUR81z9@*ALKVWA``Q7^n7*rcM&)5>XO2*!bLW1AO)%^Rwa78mR2&xw*&W+i5q&qh?
zp-;WcAaq*fx@!uo5o7&`WpTiN<GV>E*l6{|je|{Yr;LNk_%x}Qm#XgF@W01Z$iJgE
z?=@N|(^2C82N2#Q(oSre&Wj;?j$RR$D+;ThK?lV7>u+xLXlQy(+#7%Oj*IwZ4-GUq
zwF<d8w3)CxhLc`=-@F9sYrh?*e;4^8-@rAkGK<J4rXO$6c>L9iFELg%uUU-Ujmq$D
zldH}e<yc)*{6wZE9bb`h0F=miy0g}%vyN;QmMW{d=-=ur{^|{Br<%(aKhas|$UBU7
zf?nUGv&_E#%W=|~J80?!%`yw-&CcSFUUW5eks=VJemE7@tE;&UZCe9YG_@%W!mS8O
zNy!rGTigv68tZkk@fNB>jO`r^kVbN1u&H_tOdu|kR!yjNGFccgXm(i68cP!ne&p+c
z5xJGAt5%g?_u(l4#C%J0JI_%ej5WR&J%W)Ud&wLwska3)-QgYq(VDodB4VyjmBgoS
zkR=hI*)l?|(Rko8mD*R92EnMtp|vgKpCE1&_&=LUH@A`{t4*wL7DK>e&;t}LY)+oY
z$CTOrE&zPy?J(SGK>|8#tl{Ns=~^K#jJ8(8pBk3;V*V%1n)!yCPVLB2T1HxEqU4>-
zUGj>8r_fu1(P~2VS{>fOeJdhM<Xc*@<@L1%{3>L(>IJ{lacWiEF0kY`O~0hw!EjA7
z%{z2VksU+KPzmn|IDM55s1DtSQ{4z$crUY=p-gk5SMkRzRC<ml9YXP}m1K>SHIz=Q
zf$&y6tidr#d#4)SSOY#@#S%3fxY76JZX)cm!{Y5dt{7@Di25|@8xVpYLClRJIAHm<
zEW=_;=I@4?PwkP6bl>3gCtYQ2mk<#cpo)=P?^{S)k>ha*diDBH42qWXr{mW+zLmI_
zOu2XCggr{@H-CGB`0<e&c#;!R)|o8LnF2ZU(%gy?u+WmI1Y=YqaraMqOy0qGZi*@-
z@n5R4$XDuBLCDcRZ)mCu<2`P-1mtXBV1^(wsBPy$Ha1fSWKm3*C5fMlRf)1B?O7#O
z)qfxHMN%LH8049R1s8NP`2qId0`=#MQzs@vDBDPBN-~@xj%qs5OGw6F9aIjB^4Oo*
zPAFu>E9G>6#!ai@7OA~l4Sx<mO6Tj+r;|0XzfwbE$!e;O<Cs?Q-a#zm@)XqP?Cb;O
ze5c^pxEo=e_s0C3%yT1!Z*iB05#tq#_&h3s0erudaNz4E6>y_8LneemLk3O>yKvud
zKDmVEYhqL?g(U0<z+y02&}e*s=qTVl?OZeBQ;e1l^G@1xM%Gl8Rbac_iXl&-UhwV#
zS&a;ocCtiL<oG$iiEy``q|ZSf?LMHqxa9og^vfxi0%Kxi)1X}27{fDgCQIeeLDbB!
zA>TnYuH7cy*VfbrxG-PFL-&u72OyBrrX7?$EA4-7hmNr*^CHFySy){v)Y03EY@7Z8
z0X}W;T|sGMhbz4aI0<e~%OwisK-V85sVup9b)nu2y0JK{5waSjdN(K#MVvR^GigqB
zUjPvT_zF*%fb-XTUxf76?!*3$v0>CJ>Y~n@(7BdQ+m!O8JkY_t)fr*s!AVb9@9X>#
z((`MDKNUXk!3o=C;;<S?`78y<zIy|cSBieBFIr%yX-?fw9Miz676VCV<D?Ao<5F^!
zD~JrOZOR7;XHQGF#fot;9+#0$9;L|_(Xy&vqxZi^bI;EZS{m(TTo^isCBL4;zn+ee
zZRjUU@sd!ji_4;SzvX$RQ1?814lQf!&E>T~C|qPuCJ3IlPsq%khth|g2?Av8(uVQ)
z9WNPHgR8VVe1>OKy#W<W036UcR3c08MS(}Tn)PA~9vYo2Db)$a{HYQy$(jg?KkLrY
z-t#Kw+$h*P1I<+OLh#1;)odYkT^)3>gU%Id<J*_{6c41_2`^LVaIdLp-IL2_@Ge9>
za1pEAS;aWWreI5lomwN!mwpT5qxvu8^lQR#q_0@N!jO)fpOX1CftJC`iQ`E}&aZe<
zz06&HsIWAh^L}IWs0m^bxuKbiqalUO&od_uy~qR;_A+7GRdQMNc^9A<Vz15kHzOY<
z?*6_z%SeN&DBy?hc$63U2BU+eVe=P?vBz)=h@M;BLy1f-V#nF$D%zzJOIej!SBdl$
za$v6!SdwgWQiXF-<snp8a51FUJZ4*mwP<2=>AQzhfF9s4FEDtHBgtFfpyaI_w);6n
zs7$B9TG#P9tE)K=nmSNc7}Hug4fW;x6$JuZTdCHSG5`~S<v)h4(URYB^L}V!P|@Mw
zj3#a{X>|)ClU87A@X-gXv4k(9YctFY)#q&D=j3ospJp-6G566!P7eVyA2|a#?9G6b
zr!a>wY_OlZw;$pJ+LyGjBK5Q4&s5>D4T<6$Y4`6=ty#b3MMtBASSfMiy$a@{Qnuq*
z>BK}CUPf<(x2si!O1AcL4+0samka$9d3H4-z)*6-Rk%*)G`;@GRfo)|Z@`(KilALo
zTC$R+lh`I`Y(5cQz|#bU=9`v#F;8}O83jMFOt$}qgy;gA?f$C6=g808$aBE6>M!pj
zPcoGPQaI!FOqzA<ML=A-DfM>`q>X$`#BUFzUqk$X7;qj-E+Mj-mhcD%EK&=_l+|X<
zIxfsiD!?bn*s0%mUpys<V(90bpp-63tijW|+PXIt9C?`6V~||;HqR(bl)(mpwDiLx
zRMRLX)ZF2(5RruF_n9oVedrc6QD(8+i~VAyvohZ;<f-d^TZK?y`Or)3T?nOZ*bSwb
z6ae)Xa911WEn-%I>mZ#Hk5*-1I4^BDf73{4qHZEp+#$ASCo-F?7D99Fv%C!zmCnc_
zY~Wq7%$8Shn5TGuYkL=2XqwtxDbts_qMR-MbmG#SI7&;-_Ff*c<gYzvTZfbmr2C^@
z21YE${dnYF^#xQ?YN@jmpT!rKTp2D&Zu46=WVz*8(@gZHo~hH}uZe;vE1s}UXm}84
z28y`S3S+ZWV?e+~K%i=(k~aea>Cc#{IJWZ`=$FWwDAi1i$e&@B$O*}(7W%4YWs*Qq
zklcZkYKp}YTYRm3h?e0@?iqSq@CzU#Q6<7@Oxs#c8vru^)w)y<;X5m2P*nFQjx+9e
zp$MP$g1v--lHuz}a{(?%$%NHK4!B*8%;a$GRvT|m7SuH^zp4L$mQclM2_MX~saXl}
z$Jj~5vHJdCZ;0?j_j1iBw=G2Rgqj(#W{3;w0x@b2YY2}c{cQEpWB1$BG=y_c&jb)b
z<(PZl>rHWPYv9MkuBM;A844{c{Q~vrvrVzJDRMAn`zkbGXs5IvM&k+ZduSgJCfG$h
za3<1>-wnx^^wu@Tvi8eOPLC`Q%*mBTv9zc^Vh$UYbs8{Um~NB6tqZjEILXi!s$(a!
z-w_Hsce!=rLAV@CsPbbc5`{a%GzpLeg#{(DL`~e^`X(6KSM+RM9YHuDS-ub?xSO_1
z!mOs;vIJaVv&3Ko9_#M(ugIR3mSl06Lj?uEogDJef_`*Q8_ej;93?Z^xkA0-v@Jd>
zaFgVzZR-GlK266Xhpl=>LNhuLf;F?Ak}6vNpbJ82wMVfTvY%lor0-<t;yU6Spg&sA
z3bgoi9k)-};r|C*?YJKY0+=HQ>@!x2rHJ92UhSMv?aF9#<}kY201C;zreE~}y_>c(
zET7l_AyF$d<o9F?Bl|dJhPsSQYGWPzUbS}5JF!rYHk0R55JmN8s4Htu0U+yc7Ex8e
zEQ-kMA*w{ZFX4f7a?co6&l=l#vKJ*4ve^0~Me{Z8#Rlsg#Y=KGc3xD)dbuWMSaJ(M
zAP?JC4gXbj;YK-UgB6n`bcYw@b`oxse9pqkMhVfxnCk%=n=RQ!=-qcBMwBTL;a?3x
z!a?bhh)RqUwMMQM=wE}5CpAKkUah+Yo#RmV#bAkTgZXvdY|j%iMh96A(QS!qA>MD3
zG2-q5;SdQURh{iCkcBB_;DVmm3l$5&V$$@g)#2~gDy|8nvFU?$u#=o(ttpeVZ0L7e
zxY+0zx0Ct$>76g-A$+@gh06c_p(-!-*OwN3zi#k;&8y@Jl@<jge}$S2;%^Z~X7>VI
zsPFboK5oyx$yx<C<%pfl`5VR^H1WP$D6`&$^@yPXWg@D%1=AZdCpv6q^=O=Tw1|a-
zS_|&#@ErZ=n`Shc@z~)D@F0fAmP{CB1m{L-%@{t$7r2CrKkVc494uu0;nNM#<crDQ
zZRtPqDY>vzYf(gNGbX7FUCMxY-x$;6Ue$YQn)P1-VRzqW?u~g*YX0>6*FKym(}#Ir
zSC6pk-|}SmpFf!bYOUY`A?4*0;*c#JN+>fJ_IKOC;N}*fy-K0*GfWB?WjZq-^va$S
zEemv?&f!NVT6E>ts6%Iusol9C_ZHi%>;9%DG<Oyt2;YahF(CO=rx7k9IA}NR%$M}>
zO2X``gF%u#8zJ-ch#)1*kd_Yrh(P%Sa?E^P>zd5a%NNpqOE`EJDS6cs!;RXYb1?6B
z^_uMab$Qrii&z@2WF~tFhWbu15m(UHP!4(yX=yr{2%4_!Ii!}i5Fcn=hI}Wolo01E
zS-71dT`4bsknhOe7UO3|z|jrCT4`cCVY>2PSp#etufc=YsRv!XkUNtNX~QHqOx10x
zX4sbGLI(S@@LuSWn~S}#MfoneTAoMuNLHBBDkt}fQoLsEbA}OGWmh&(@db>WF7h!!
z9>Y?k3l;GF+70zGmvgG9Xc-?h4QjkJF8uo$0)a7S2&#V`Iiqs>j7Ic~tXjHZmD=5n
zGj!ZHenyC(^OuSnXVf)iR_u&z<Q@;f8I9l!zsa5842e|i-H;sY@y0zGSFOscqiZ&1
z9e}=hk5=>^Np+62>iNb!TK-aG1JP;~)ab~N5f+QoPWM7RiKJRrrncFc7^RlOjj}om
ziyBC$PEnU%pS>Vr;L$JF1GtQ3vtJt8k;s=Wt6>1|fKbR}g|zf^rT26hUf{aZPePQ8
zWr?y_4)CS^il?ksLIaTIR&Zp9PHx=O5csz(a$Ikjg9MacPCVv#B%tf4AHVu;3Ksq0
z`Yz^33e_QRI8ePILz5&x>OkdS{j1OjegD~?U5^2Uf|63Ohk_^Q$fC!nk>7={@||xK
zwZSyAl9yJJjqywBW+%=auwq^5kzI~r47#tKLkKyG|13Vv`KYf}9jObR;x(+q$Vkim
z$0Vc9GFslAg0wlJQ}qi%pN-)jV5rqzoa==hdbSWX-1C6h4w|%jYzZi0Z@_CVcemP8
zKm)bIO~wb5?E`|*7TKZtVJ}{3)}CT{ZzcG5Re@k~CHg73X2ro#Of2{0gmL870=8Om
z6((?`Tq@vWtIEiU-$s{V3)#~KF+p7aC1@KI(**$}qS1W*5j!j>Q`u7>I)?+ABWgO2
zcM<JfCe1`g#ti{no!P++gQtX!$nF8V86>HQZq@HmdXI=-7jBc9$X%SNJ;m)hCsaN*
zm<VX7;9Gr-BfjliNGC0UP$5r#P<s}X?9g92KQ_}3SR%Z_1)FXe^Hb|;%FY-gzNYgk
z6dKPP1~$N)?)TT@6VzBCh&sB5xey8C$nNSs$tWs(gGbBg0_Wt;#zx$P!_^Qln)(9c
zILRO70`3R3O(Rw2{z@V7FiThFH!y1JZzM+XZ}Bq0DmNI)xIHNZjP`cYJUaj2`D*9A
z8{zi+{I>9kO*uhXXluwS3p1r*;?}_iHU<7*c|zDyo%j-$@4pg=DaOLqOy?B^$L7AF
zAD3i%zYrP^ttQ`uAw2__-&<q2D9v;Ni1qV(Ad>DS#7p;m<2*AZ$V;b|pz$uEM4}}=
z!jW&?*ph{%Z3?8l3;KI=XCQ(ZyQJ1TJqoS<X#Gp?S{JpF<6^|s+nt1nruIb4Zht<Q
za{opgXwn?nhYj1|FK^GeMI;F-d%$A|#CS3Ltp8*%%4P6snNcGA)RW$=x}?&5_pqz?
z{bv#>gCV$QL^R4i?SklY>tQ#FG-6{L4NdoTxVCRn3^W6Zfi1u}uUi(8?&Q6Bj|-*-
zGHDekh`j6mU;(&#T!(K!J<mL|vR9vqtQ5`70IAh(+ehAzHO>&+@1-Rq66!0JW^RC+
z7};eWo`AFg#VZX}N?~d)GIY7rh-?I@l82HK=&X{q**z46xhQzwIAA*MC9}{9Kh<b>
zSwKNUZOdfvQ&YB3k7Ew+GCZ6lcqIy-(!q<7B#L(~Nm81cn7&43aL=lLWR0Ot+13VL
z?~IjFT^$qJsMFR7p0-02(8w0jn5H~o?L~<6vXmcOBE3>uNp4)d>%pYM_hQ@Co;8?t
zVe1g8q~~nYRhmk(xNw5**71-XVsy2AS)+A;i)mQ9><`osdLSJig;V=1kq)Kf8*XKW
zUaF_@{B=-47^aDAL)fm5Z8(W-{poQ+{gQt;?sNq_ijAKlppi{deG{%wUsLq@)q7Q6
zd611C7PJX>_<83AqZkl`>Lp5GWFe@9{+fGaGWeC%pjHM}Ydc}x(NfmIugwP-6+EC;
zM?@`vQH+Wpbpl(MyGK6Z967YEL!;nG9%SQJI>oOP=cmAxj*&xa!ug~uPd}C?dH<>o
zlI_{-2}yr+w$QhjtHSWTu(Mpu_n_oUNH<*U16^NJt*+OsruKK1hxp|JAdi@#s}r@q
zenIf)f0xUcO`GO`hU;6(O9!9a6B(y}!}jQZ=e$}H5SZ+ZtI1OCmECe8#;tJc^#psd
z-}R|D#whj*oPfT`Qz$VJ?>dJvGmhzejvd0{q4`{5q-tVvzrhod#$2EJ0pGuV!neb`
z(qGrbQM<367_HJ8#M-Byg7ji+O3C#8Fv5rW@DyrR<BSHjXm^I~X)0q*x=NvbImRb(
zx;Z5a7&D#XK05dO75_p7#TE6*F?w`L1}5QH#>&c0<G5D2Aj`(qp5I4%$G5T;9A4|W
zUgF%mgV9=!kJhcdN6cMp=$7{23->o-wOha#y9va+J0R&YguZdu#hS+s$zv3=(OW{$
z0f%P#o#n)PBhT4HpbLXJ?evkn=1RcqA+h7BEid%V;*HG)EE_;;C-1(sAVKK?lo>0P
z0-`KsZy9g{8Z<eLVm@jyY@A{8*v?&|uO<>1**qtOqhLwh*G7SnD6(Nkd`2Nn4!uDT
zyaetb{6(hr?;zU#i>GL^3d|vyRNuK0xLv@d2<IKoE8}uQ2^F<>%cx;(wX!G1qT%d;
zq`Y><!r!{g`PSV4*LId5ru!DUcDy@?p`UNHUCy6r^Rv)w9%cGu{B_bb@VzLL=@`+6
zKfWCukgV|aXj`kJGj3E5U7QJjfFTGnh_Br_YObA{NZaM?vKO-GQ4tmW`ps!SgX0iD
z^~3U(>u)vhuAMFLl?Cr3>b_gm(oRZmsYlp~xX-=~Bgrg@$0)FTxWNN-E$6H*Vp_Tz
z*C@ZuVO2wh=A(@LpCGQ+IA@IK><@HF$uG_~LE;&9s-Xlq>?LUG)wOLD!Bfo-Se3uh
z^LQIBhAFR0wow^pIuE4>mSu9ZO@BRgB=oX92aT7cT2*)*{q?q*XJR!iDm9fSnvddP
zr~sn+I90cZa?kN)Zl#zDY+g7VGT7Dq{@vMzVb8sg`O-Pcu-Ms07)xBu6blVX5JCIx
zQvOCp*Hys&4j#g4P>1Z>Dc=@Ne+AFnMVqpZH{~fO)nn8+{maYN5FzzOghG(1bZp2~
z4&ky?4Y`~Y6q>NkLbDzY?mj_0)DG3tsFLim>P1Sa<OnxyuSzQJ2I;+2mxVPY+M>7A
zWil{)t=cAOhxrIVG4*(9S^K3MGXD^|er@S)SZ?+wJ}vb|$L4Q#Yu_m?(%CPd-}IKF
z_n)D6YlFFpAKu<k)XtlZ8Rmm!Ggzyb9jOt(Eu#kHtgApINSt)DAad8V=OpN&of?zD
zmo@HFNiJI$Nbe})RF}OIP*7MX<<UYRCjJI`1?Ta2L~~ZMQFQe#{aihw?UhyPW^`uM
z3*)VG!F5!NYVqr_%M_=-DDBB}c@t-9f-5(7D^f~{yjKhI;8Y$#`O$`<rQ(qRHN7ry
z;n@36eO6<3JxFeah{v13rzqjpTk&Krwpml-*1fehc9@2YE_DtG`xW4;jVxEN(=k%%
zG$(NdcN+oj=-uTl7DrkGaac!Syp6{BT_bO4RhdqH4x2VbmhYhoDVXw-QEk|R$(T7f
z1Tj_d15z=+U9~#0%kezP7&<tOEb79CE0D*f;a65g!%j!vJfhY$U)VRcZ;3}8Z#%3h
z+QxG?y25id0)$zGY2WJTFw*@F-JIScTb(D#(fI80pn(Q4{Nbn<LA6WWk`ndEhBZ0F
z56wX;LDZ(}XNg5RZ4=JGBH|hMT7m!v8}G4UyeSwX>YW6!Gn5#%&rIEKTM?Y8IfwC?
zR`#mlC22U6g8k`F7HTq;nM{RoeD5P7t@MkoR=?$tY0+Wap#|5cI|8&B@nHpuU($Nj
z#uM9cfLQ9x!4qwP2d@0O<*}sjxMjvG?Zko-zxSGK!`(w9<kry+BG%vjri!W3ighKh
zQ2ip1cF8U%a;55Rp-4^ND6}F$SoL9ozzF18JrukS%Ha5H!kU@tMa$&~VYvMIRjt_<
z8)OMOXKbiB^3OV?^wr+v=wM&h#DEN)RgVpz9;IUX1020iVaOl(q#T3E#<>1wn`YJa
zDf++=pI0CF)@0qAn>}Io3zwscDsb9_6G11m34=kCw&+=Y+?$G>)7cI4rQhk(wKcK<
zn?t0CAVT^14c;$!Ou5P4yCP^82lIl3WD|?Is;?{yh8Lr2Gl?x+sVJg5q;jWU*E}Hv
z+1z5wX-sK2E!KkVoS;p|&s+3)De61@sZrml-FYVOVzuTp4Gt?JQ&Bh(s{|`e(L!_8
zTU{vh7Y$2moM`CKBp<A1eiy=|>K+#EcMe8%vDXI{P@i}}igeq+t89@2GC-B0I$<a_
zKcXrD&>ZkDGF~EDa#(`2YY#WIeOd~=M%qmgRLM={sszAaA-2@&%JP6X)Zaf~j{^o-
zQ}Gj(4Y0hjKvLXI6zdLT%Q(p=B`+2(<Df<%i3Ov|lJv3dM#QiO6{)1h-m$Q0@NG@b
zUzXlqwl;OL8@OmI*pR%moyQu|%Hi*z6^(inWT70C1;}@C(5gYv6paS+w;duEcPj1%
zg3OpIsrf~?wrXTcc_(Ys;%+Ap!NwkCPTK{BkT?}-8x&%l$>x@tV(`*;$(XRjVisk!
zFr}oXE;PFc$R$ku<jBLCYM9Z3a9xK)bb1*rN%5|diBc`Yz>w9^xhqkq$V9Ukif>F#
zM6~+PvZ3(j(24q7ADD0w&?RJpln%{NhD)VCqEog&0rUlCOBK!Y43ap!UQ7}cF6%Qx
zaM6b7wQ<Xsqzu%R(1>)lZL>)1fmB0uXjHr21I`FU@=iDRfHfo2=)Cj{cVBk`5k-C9
z+(do9al`UX2zyvJTb`a$Zaafy9ctlG-Cwi%5;}0hyzjSHk*}g^4zlEWJ||)N%fq=(
zVD#I&e|R~&oP9&~n91|nD66hJ?U;$m9^dG+yy>(~ddm!6I-UbcY;lRC3<y1t^o3Z}
z8F{`&q+KR0^&0DptIjK9lPT{}hrh}~rPXK#2)QoZ4ku!eYk6o_?N&C}RS)2%=$_tS
zJHCP83V@^}0xt<b;JWJS-^xm@R<3dG)dSoxs5kGbCUW4eY%wz3BeG+SGL%L@2)jk3
zqLHsfe*;V3UQ7i4jZ^cgif||7=pGE~v@}{<Tq;*Xa1fhu7dfap#H{<2q4sZE7kdXF
zg<6gWBb-$Sze@kagSGGHUR37od&Bntm^F*&z<A4#q6@CliqXwmE!V>UEkCKk9t;L4
z16hRISeQGv+P-JV6oa#y=g}n|9X7re*wtH#aLdaP$wHNeHvtq$h1!q!RSS1sfEcgu
zff4GP<1{Nm<$spWqdU+`ea=2zSmJ0v1D(Iq2p9_-vHF?MJAc87@MlVYWXwrqtP@&B
zvuua->+Z~LMlw^NRHl$~bG39Mr<u?>7R<>x1Q&6)rug{}>j?INj49SI`tbgN?L;1h
z2KENPo5l*;M2B^oE5_*>*)0LS_lAzw^KGsBZ_l=Y>~i`N%W~%gY5{ihB!Bvr#P;HP
z-!c3lxtEH!mP=2H3U`id{EBLwjg0VUPGQq$E3DbmGaJFe?k=YNxQRs2GkWlComu59
zhG^w!#fq6c@EbYl*7lNjGF>)iVsMf}@=%?D&KhipHYgAs4v%8M*vlB}K|N1jM)zi4
z!;V&bC0y%U3?E5drN8%uS@uOr{pS?R<3tYkdIp_r!{$IUPzPsp<bI?5J9S5nehE3R
zz35kloM8v7OVK<@)vB(p@_PS-6F*I=n?Hw7xAAhUNDN+*8&IojqQ+Ikic&X6*bJP+
zQ{c$b;8o~L-!;!ib^V(B0nZ7E;P;BiMU1>K9qn#RrpPQBqqq)r^x8-opm{<3TXMtY
zYvDV?p3d3?Q<H{(xhJaeAzvw>@KZ3Tf#SVI3Cu+m8}tv7E^W(2Y48vWD-a+zNcZ(I
z+ZC%6lU&<KlTmz-H4&EAa3c$syM2u?<2!~Ke~TJk_t{wJdilb-p3H~e3?vAoRnl~N
zJmQ7dw8MM9#&=-5e~FRZr$8ZYz`*zaaXq!Fm0#H`u0E9&2A;&3Mz@6;bqLY8sF5oD
zV?2P;B3eOXemJdiCX$KLu4oNN-OyNBx+>*{xSJu$=h`@|{0mZV{u38bPOgJ*1H;Br
zCb51>Keqqu$4WhWSJ4}H$xcXE-Obyp5_zS1k)3;40?c?M8RA;r&UgO`K(}7H23P5R
zZp_%jmepPe{bWF1q;og2sjq}!5xZH<+Ky#Ob`5(@)CfNMr)XJ~nVlr6dmq2Ax#f9j
zs>oIjawX;xTV$Eqn{&+c<#oV<aWG0ZNH1Ca-OYok0%4Lla$$9FiblBiY=^l_p!Ry!
z(uuVTL7~yg{cV>}AN7#FxoBUlqL+xvQa@wctB(OisH0ZZy}&kE<n3!8C+;@g@Nq`Y
zIE(oIvWv{r0W<~rYrTu-k1&CA_}k1LDWNfpksxouU@dY2)$Eqhu3F$HOd>|2EO{F6
zu9vK&$&5^GgML#Jpl`-g7|tenQkVw$`|5^|y!rOXiTlXCZ+XJ=JR!g!v#IZD0WxS}
z4{0c*k2iiaU1gqcr(5g2Bw{jf^Ass%5doJmG%m5m@q|QNy<7<w|1-;K763_<fmD`9
z^CUX%vTmdZvvFEA`$N;xA)HX4cKw%`P)3=_p5Dt7M!7yq9Hk*CrN<i4O1mvkB<VhK
zZ>w-bHFbAR=_5~O0rr>dK}psvn^Vk{E^?(3Q{8NZxnMfDpmDlIU($Uu#}yHtMc<(W
z6LYHWg!$tGqMjO^er9CIsv-dYE&fn$m{hsDLL}&zu>TNj$Rbu0#6C<)@cn`)L=a6U
zW~(jR&!ej&Aa^d$t{wKkFHCb$Qh)E2+m49|6v5FjMmth^FuPeh%TiK(5k1THB!<e!
z_x_^{v-VHVt9uI%>7HyW)cD!jw}Sc2685|9q!V3@o3oS~)tk{Pq|Wy5mf;4_3F76&
zo&8S&=CjT3Iy8R_n6p?#h{L|M{IZK*-E0Jh$d+c<6aAgHrbab@D5@brDi{O(Mg6CL
z*YdCLT2!luzA93So)9)D4CFb8goS<woY9ti-9*8?rGxG6<PLf{Ajlr%@qP#?N}UnN
zO`lo*%g+b#Zgo^GVCm&gbGvvp!lIJpJ=37f@)E%pCtO2#?2HB~f9zeRhKNQ|@PUk?
z`y5vN?PYV@+eJM{0)ZdQ+uk8f9gnPpiwBz-yn(62A>El{Y0F}3XE0<=_Cd<K7B(4@
z%*7Ad6!&(}OvIPX<r|Hi6_V|9!e;WonpTlPIk`c9Hgr-em<)q<;!LU}mYB5UE-G*9
zD5*4Sm}4Xj^sQfzWxZ<E;h(oEaf-a8hDH<x&FZv=!YpK+?Mtj#MQN6{!t>I(W%SW7
z-kR!0x8}~YX8k6^et3wDs*SpC?DXJ-4XWwIMH-|5f@ixuMvL}#I@Y2M>0N`dr!#h1
zQ*I<CgvjJt)e+K(_auoHM-l1f=dcK@I|BT`ON}8{{~G)DJVv!IqThNLR^MXsOI^9w
z;E2b7D?CdBvnRAhN1$w^%J{jEwnOgJQU*g)Kq{h}Ewn5!6Z*p$@f|2f8mWNm+G=Y0
zrl#&B7OpE-zhnu$)X0padqc-RHG~K+T|G^3$@;z|nDYCy1PDmP+g(aZ&i#<E$o&J*
z9vdOIDB5NFER}mDyI>C`T$Hz;sQJ>-3NpIus36nHE(AASuy>B2#k(8@DSITvq8Iy3
ze6ouTmcv$2&YvQ?RJ0LIZIvY+@-&h~*UiYqr`T|7ECy>9PA;-Ro`luyu#_J`&ezCl
z;wJ5*yxrEMhiv4E%Jcu@sS*R*WGS6V0!tyyPrmo@#R&*n+1+J&{>-X3r_vMZbB3Of
zQ#7#rd2(@r12p1$#vOC|AVYv6VL`xfqebERMp9OV#ZH;NsajI63na!GdvUFVhK;mp
zU`?NKW^HC%kFg)D!E{^0P|<xM3$HTupl;X$Mp4R@%9g#2vA)D180%>>)_d1ueZF%*
zVcYgc>MqNH?~nDjJ;`#nR0-!u&%zTCIuAAbKHfdOq&UKA7<sN5YnBo@GJYlTpZZ<^
z6-E2d`}wg^2G1xE_7Ovde*Vsyliwphvg;y-`fBJqzi%}DP#n@~N+7G!GGhYkvIZXM
zewGOT%vqwo6qe@;sz#AOqo(0j$W`1G$tooA^bV8-$eBA+p;L7ikvT9N60FLJzr@;=
ze-GdpEm>K>H0odEYno&TDJ`ZjNT9!tX*c**BN*8T(Ib9}wz348tdSkGvU>Uq`?0o^
ztBQ*{(UlNdHNv?MD|HVh;i0#1)EQ+TgbhOoH>xEag>o#q@Io7nJcY~3b{%?n6mF4I
z<%VbcYw;1FEKR-WbY^-pd#P3gpO|+exK)YI^<ZW<A*llu--YCGYKS_*ZA8RLBOAP=
zEATE?mi{^rl|Nr=hHHTW3=mjU3LsY9UqE`RLa8J9=#6aZfa%l$VhZB!mQ=<riENLR
zQZr&&3uDx5V)kAnt>yGV>(V@*T|@q5RrAsc9rM?-Z@rDJkb4_U|5dQCDjkbk+0`Tl
zOn)z-?dr%jgMUh;&?K~>Ud+OYNuj=U-QB;kE|xGQv{!)IolAvkze0T=`h(VlWf`&n
zj74ta{e&RH8PmQw84D4E4xrYnlO{|V=?$Ickdu9r^-gzFzWEH|t^@V3igSwAVL6)@
zNuyen6`_^J*v_0Ou8qG<{kbI^Gs0@O!0;)dn>$dvpr3d~XVsDi+PcW{kP%d9)To~~
zL>syy3<5ipFJA2a`WPQ1GhRdx8&D7KhrtHgIf13BxeTV93uCZ4K?&A272&*Xl_9-Q
zPsm?qq$cD+k;~Mcg%4{<eQ^PQOzrfHoNH7Kw}B0c7N1X3Y_BjJr@~SeF^k;lR5!e0
z<)~#QMZ%e;`G55-e4wG7J-SgU;6)_})7R#3J3(Ky16}FKDWSRj{4vG{%mDKrF5}Gr
zoNd9@IJk)|p*{w)=NdM}+9^Y}E&Lsr&u9GYT{045Ij9`A_U0-LAoEFr&YrMxYMvZ8
zQB6v_nV*Y7h(EK>#2uDU10i)oQd90dM=YoEF^0b3^WEy9vLfYdJNfVSkPf)I=?d7p
z2&AR!>CrXp?B>zo(voyp#TsIqwaeq6>d^fVzB1qAME`ZN?9W_=giPqqq`iMJ=~Ann
z4%Ei<dNe1dcp?OOt*Z`~9)(9M*I~e6?p(bUJ>|A|jD`-8cxC%QS*Oz22@@P`Ods`H
zFbXEoH|TrATWYKBGGLIVVwssqE{xzL8eJWW$}!1@#8rH{HSaQD0ZiNX#;Hj>ENzt0
z4~$aP?~5Bs$`lu2f5E*=$>WadlsfuljTBWTnZ+wAQ6}n0r`1A+OK(rz?yW?ufWODT
z-3tu7id6bJ>-%sCP$muMeqh0DnpIJ~SASaGvi6dwhb&*DZnO?m%fR#vthwMr9pT6f
zJJ4#+fS`T_epK5xx;r*$V*Kt98@`Kt()ZQlifbtt7V!AZ3@I4W5b4pise0<<q*v;B
zQq^8CmoY47#7EhhA&_is!XsA$M~%SfMj`FseG(;Lh^;5Y)3Q3Ezw~k-7volxGSwq;
zq#(gjPlYo>t787E%9@HTIT_6#CZURhOFVcX2UkBzlSrdmlsCi3*3TvM-@*-`Ms)Ng
z_Xa-eLpo6QGc0#yddyi_efpy;*6VSW<%9n4KVkE&fv@>;img*D)M=wWNY!yr`V>p@
z<{}5VX(egdy+D*S$VEPY$<|>6aL4m?hrA{>L?;T^Mm=vXT-2n`y}QgaE+KArpBJzE
z`FaUnZx^|qrx$W%RlPFlGEo?smbcr#6V#2ph+ouPuOOhH>dwBp=~A*MUj?o|b?zLl
ziDiI_y-|t2_fIoORQPXim3B#N8G5TCx07<s>T|qXYBE$&E*mX=TQ??Lb($tm0kzL2
z{=e4RYbuLCpjdHzojKT$xPb0_?<_ndP)-(DrB~T}i8pgV=RU4yZs>6WJ>#it19s#V
z-f-uD+(LUzya_Ay>catwVuC<|6g#+Zj%Hr~@RNr|qhfT1EX7<L-ics*>XH<f+Dq$0
za^e+MKvfK`Si+dN5H$rf%EM*KD=iLQ8_b$gDhILPwN0rf6qpX}<SxQpR2v$CA?=n>
zoz&s)RmQ;p)2fdF(_lHti2Pj$*D$ep7n|cw^viS&a>Uxfybr}m&y^6e0EKU~v$Z?B
z0R@1+Wf0?9P8&Htosy^KF!%sOK)b(<lhjX=Kkg7^m5n4$bQ9vo_@3+N9I4zlhc%PY
zdVV?B3tW=_QEE{^C+>lEUE0K>Lu4^e7PWZ*@K7(Qv~BE^wx;ELuC5TdZf3G#O}rjb
zf!wY8oW>|_jfHH^ebHrqu5(nLzHPyV_*e9Xf|fc)n4$#_T{kfu`9eE9DQqAtV8I+c
zO{jJW0L~17Bi-(vMjpIdDLhFnho?RvxC3dDq#0ms9X><I>4&j3MaB7y)NXmQi08@c
zYU<G`q)8*QGuwx3_m3A@BP-{7LqrwiKA+*85QDVCU(ZGP!H>u1B)?e8dpugy9QBPP
z67Z6_bzU_vQpm+xUx^COPxlFrPvLH94@Zj;bT(F)x;VW#6dade!Q<=oW{N`z!4Z@$
zR*zFRV3PFx<eX4nS%+FkdYH;n!AiPy?+Fc8Rf2RPN~oJA(mXESYbr%el?`@z6xKE@
zNMGxJM|i=FqZEY-0ggZSxS&9pcyLNlL76HLY08oTk1f?JPA6^f?=pQKQbz;<xop6A
z1YZ;ajwaDu4I}*Pv>OUR;<`ww4uJ=gW<wq+Yx9!LQ5v=RLsYf)rSlLa*kK`PZO^Q0
zY0%fMY7nGj?J&DqC;>}>680V6hH{kNOBg|JY^7WhBdQ@x``(LbN&4aj;3h9Hp?H(V
z79Bi_aN?PDv4QR$!wBt`C)_blJX4z#?tz+%0$e>pfb?w7S=<5vFPzXOpGj>ZVkhcr
z2!pFP!r!JQm9LTJ)I8V%eKlCa<bqUD=Y&jY^C+F{memU8?#pxnF>4E@rF{3AVPI?v
zb3qkRGwUTK^%@x&c;X|0FVA#sa2z*Q%Cx#Kd|B+GOJy(@o&c@0Bg4{VWIs<rlrvs3
z;-fo;l(#gBW)~Y;yi+;aBjKAF02jnxu_<WfOTG1&(Sy?1&M+nr2C78i*ltV&xsb6_
z=-yTte*v&=P9Go~t517Bf@w4%7kRfp*p=pa(9W$&5XfXLsxq_nZdnbWg*608rw?%5
zBb_PIFAt{AMs_D7wwmuLZs;k>Wr<&jHqZm9KNSOIiIF!U|I>prUyIH%(+*9$=-)xz
zVQ1fB1P_X94mA9Qf)XpTRp7wQB8(gP+_#8P248j38H~ZiXAm<YTjI72GX5!p18`kt
z_8$F9Muc>rk<rvE5p0hkUPSxA+PmeHf!>-ZV`>aZ5je_r>VRZcTC{vT7!K9c1xlCe
z0!8z{M|&t}4qs0wfgOv66gQ8h82(Ri*mTg+dlV}vq0CW2s3D6j;=av@Fz2_Xo{nxr
zbRq-N=re1m4lRkSGHzmyg&9+mV*!L0fH`0*v_N_jB89RZb{V3cI{8LuG5E_EE#7NW
zgTds?F))49GkOjl{ag6Xlhx~2zJ#7eYceubH`kIMNQbmR2)jbzz``D9*>s|k5aVeU
zb69CESR_>mQI+m2epsHWLTRdZqO2Lw+w(qN0b{o3iE}B?*bxXTw8H#_c*Y{<G5B2u
zR9e>SZJ?S2fnGo$^kteHr45YFrYz{b_24zI<U{7;ZAZ?;9JtqC4UIhG5!)l_<FS8z
z77!QD;@2gAUGdipem%|s5CTy|Z2~$>>`^*_CTMaD&>AW*o0(c<%h?@oNtv{C<^-v>
z_DPuKJ;9AttkNgp+MclnCPSkCf-Fz1j1ohYB3&0%WV1-e(ej$(Q!`CARM-f$;gB?)
z!+@LAA3V7=9kH5W>vAo>+w{}TUZgX@B2xRShw&#Ti<L8^uCIU}J%lk%Dv@FRgKE_h
z=uqF2=Yvtn=(bc<aP(?rLz&7|A8=rYXkF(3Bn&aA$H&MbIE41RC5A^G(XeJ#>;#uu
zY~`4-r1#OIeUJRehznWzktuZv#Xa0go~}&tlpaR=BwT+@9=4qt5bWseP*GS=O5xG^
zJ++Nio^~yimA5+u*wKTeVO^2}Y%hs?uC{=U1<|NHdN7VoKrB<4C^L=j3PpTEhcpVO
zXpi`Vd;AbOdfW8P1#pZo!GI#vW&vE;30XkL_A^*-H>jtQJ9+_4aVF!2z}{V!)#Zfn
z>S}YACi`zXAE_dkoxdp+4~NcGeWzJ8H&`?acu{kPC{WL7N}cdyZ6=iMZHrq^-Euv=
z-&$fLNR{Ul^U9;9Y*QD=*U6i54|eG8C)Pn2C~2>4F)KtHFVY7mHO<f!OtJpzLM|$Z
zb21hdI=tQ-L$E%DHcP1{zJ7#Q?R2*PGuz1}VwOyiCZVdgY$$b9#!8}?U*}P%R9kky
zl620+%^*-@TfGJN6lvMGVsf$9@N!#bf3fKO`36PA`{Nd_+?UQc<H8uuW?V7@2lL=~
zj4*P9u+)@{)45I0fpOnMI5~7vvvk!n(|{zII0yI%bzL#0QM0<-bc^+2tTsubQ21@4
zSpwVAgbI3oozS!q%Fo+lmb*-*;;4+MGt*jQhpuZmtgxQRcUZ_j1rj}@<w%>SKKqh1
z&GZWx?=QTJnLi@#bYxea8umYnVXQ{(WK2`t{}ZV&?CK2oi$D#Wj&vwaQuV}4HhEc`
zUXu9W;7WXiZ*5wjO<)N`3)MxX?;<XXi^3Q2QT%!LuwD@TB4zUKi_TGCLiujX(B9_x
z=2s@KgGb4J0#{e|%*w^208-#73cOHxPXIpLD6$#!diE>&hAqq|Z-eZ?#0kgg7Q}IF
zDD%;)^oEFjHAeDRz2e&vEQ>~YjBn>aBsWLswrN&Hq!Ilo4Z1leoPytZ%%!ZZeTO^=
zSO~bo7RYcHKEe!@2$~sPuNQcToH8p^R&_ENA~}mPlXPypVO0f6mawhJeis|oWXoz`
z1&s{tja|~a`Q6%#xKuFU0!g~+oDwTFtE15`ub8(fOj|~~7d5lq`6FM-=@7e8FYyD$
z5~z9rXL&HDW_J9je3#qqc^Z1eGNsIL11p32TEtJ(Uu%i*mqpr?o_RBW7!H^8#&_W`
z3_<ebjcnzPVVISmgri_vds!A%m859Ny+mxM1(S%w89j_Q(_6lGu|rzJD<MB7@=6Uk
z0uVPh7^m`rXLf6hmTv8&>^UHtP1|!@XPXdE$cAs;U-Q#avb40p&i=JRM&Vmn*hM9Q
zZ(cN_&To5lVb0NL+rSFpW=!9^wN8aLn<nzIqvl#I{YaFROXH+wV!rj!BkdNMYw!F;
zj28(Atke|VP=^^?69yXDCJw|Vq~}s$w6me}*j&QlZmm*cqxp8gI^{%${D$%w8F2HU
z3C%2Ofm*o?5bQAO(o{hG$vRvvm<{?sUZ%{#7_7$&Rjz>si;*nYRuV03=}|zP#Ma~y
zHj2g+*MUYG+Q~X(E7x{JrT5gQ5~>!;yx_8y_+d?YkB!$z$7+JVFld0}F1IouUYlci
z0yT5;pswi{QL5n+$V2otaFq5{Ph&}n<khqr(UH5y`bLeYH$g#3#HTHmuauL2<bnLH
z5RBeCadc%lx>EG(Mmi(okL{d9i)zpvMZCHsS}XF<+M)p4N@LBpd4l3sWA!E3C7rX@
zUF<+cfU<h`<yurbth97~ZA|iBpkeX=J3(Ek7vk0jm!BSBE<`~Sm4lwrUpzvFC0AOn
z^`AaM0*~-xbCNSzA17+RHG&~k4baPiYvC_iw`Kh5a;t;ge57@hmrB~z9M-BvnytEZ
zc|Ba4GF+P+s0|F!CKd$!Y5$=wns*8^8alH_m;<30$?<ag4Q{h;7_O{OvPP!YHLg;7
zhqPBaDToBdkW<A-xTk=~Y)5bj`AbZ>FXTxmJxMWtI}q@qn|8>@t;eb)o21H6V8QAO
z)>Cgr#)Jv$Os44X?!@TAu6{~~>MAz}5h_(l!uK*_f<vH6im-{i0{(WijU@Z`vcM<x
z&537oE`<ew2no)eW*|diXW0k04~yQSszq_NZLh=P2d+!Uu^WrS457k?GRPhXLCQ9s
z3O=yubkWOn1D#^r9@+#}J70E!W+Dn8S_Sd8t{5uTFIe<en1$oB6@zDsOLMLzt^XM2
ze3!@D)9r}yM$qHp{~2%pWV|h@ntDj8=t)J}C|LgQG2l!yPqO*7(=zVB9N=14O%0A^
zQ_Q$qf#F~hh;#m7ylrFKAWebEl_}tIRc#m%wdT4K+68S0I^jd30AS2sMGP*Q07;ei
zxB17sCl>$QMx4kP8Ty(b)8-Gs^c}$gCN0lc(kB&W+ZT36LN>37eYg)~qCUeRK2O-+
z$GDy@e;nfrJI|Vn-#{cT^ZXnS1)+iqaWl~IY!Dg-MqPkNta^^6ui1CuJt9{bbKvV?
z;FEeQyNCkYdNtIWDw7>8iQ2C$`Jod~?|n8QWZn`J^b=9DVbF}4?yDxk@E(!eM<RK5
z(7YO~SZ<M!2x-9IA=E!dl>9pY<`B9Z)H-xW@y=Kh91i?e5rnx--jLrCj_h9=pR<B-
z)55q2m-QDp71A@c@+s2Wh|;jTaKgp`Hs_FHDC7Rnfy115K+okYo0G+7-Mqm4x|kva
z$$!ArZzU;ARydMtuPF@*@OAp7lAv7fc$faGtLU4Ws|fLt)|aK!I3r_a6aA={oVl$T
zB9u@#sPB`^y@c<pae#i%I0t@!WaN>X+B-WMQf}0h)U@%F59LImRM9B+r4gug#Qd4s
z7}G7IpX5(GP*bH9D=YLh-$pr#;AJNE4dGoXww|73F|^ldjGrCl>icH7fffmn0ju~J
zBe9V{Z#QnPA8vfUZy_N+jFDcMo?zm5mC=!kVb?J0$*5DZa#n}u0I{K-Uv4e((<Q6Z
z4ypK_o**Vh0`!C}l+H+pEpk6>F{y~bn=ISGCL`W<juqEBpyv+hI+CBPE9E1f3#1e7
zrsp48RRV*sg!0@pqD<StjlCpOhZ<5X;4T-LsywC4BL=$+Q*JoN)i3YQi6m<0AAmf6
zB0h-122F?5(T;7gWC}W)!3&Np*h6sXwGCUldm+L{oUJs9@kP7X`rvS7z+1>!k*~r6
zUXyAA|C0I>AiCnM2^tt{ImY!<4w1p*hsn_hkOikVam+K0Y3*^$;RCYI6ZFF|%k)l`
z`7^Yjp8pbQxB`}iJ&!tM#TA_Ks8;?<iVkA~+$suXQe}r5r0=3g-#H$0i^ud25vU}V
zcEd>$?U2SAM{e|N_wA>|2LO!|J9bsVxnWai!8_l!$I_hTk>;u-5|SZQ(=iKgqDCwY
z!TpVVVC+>i5lS2P39FXSG>ki%I1g7PqSMn4!+i(@K9cxlQxWMxG+@P9IQ=py(D2xi
zlR%|+<&uiI0>dS_xrom8hWI<R%kUtyzMv}CP+|(JofW1kET*0p4FheGA)@bP(z0~b
zko8p8rJph%1&ldCzD*tNpb`odUe#$W5*hc7m_~J`JE_h3aUE73*Fzw`zl#=brZ<x&
zfW?b8vb5ORqRyUX+R(Q(9x}`+T0sy_7l~<XR!<ucbI}a(_Y7jZMF8&U2s-{2Dnldb
z(k#}uk;0}a(W0j{<>Ic9W6XtlW2v>z+Dl2{Sx}0vzr~79H)9o)r?$1lh#O?zDcIN0
z3iVQEUcEODdxRcN`viLex}i<JBS{x|Uw_rfQp3=~=~;mEdbhEO4Gn2O9qr%?kxst?
zC}REahzuyCT+tU4cf*<rR=h*~=Ic?%G+0jJbvb$08$17q=gN_G1bC6oC_`|!|2H9V
z(qap!dFCi{qOqW&BEXXgXEDOot=Uvv>pq3m(o#iI#5_O`9dUYVGnJ|2t@8pC@p~jE
z8qE*rs0`&Xjypq{cHj<_XU}CG1U{=WRFP-|{i$Pb_8HNw_JvHMYf;3w3T5j+xom#A
zTQ!#$xK|dpdlngbe?abS-KSQxOJBo6=bt+F5b4C-^uN%F?!kt73P7?|gD3i>8xYmy
zYjzKj-q5tcAo*Txu1n&>Owy}SU6x|zI$xPIW_8sVEzGf%j%x=U*Vd)HNcjF$3zZly
zuI2l^L219%{O(Yg>&*zuY;ARLL6hepoeUX!!E(#cQbjDV%afEbkO^}Ygwyq9)}%Dw
zVEyaP<#R*gln=-vw>_ccc$dw$TTI7ldG<*DcUC9xq$_hlAgHUdAkOVkCU(}*F#Zbw
z&4bqM!x}<3meAz+3y~&&m}FvAK~og!wU@Y^jFDQ6wMHGilO^;IzB!vFyJiA}U9SZ#
zbn9A|6bZkLI=yRopEK4`>gq#bx6qf^*$Y#Wc_fo-O?$j6e!D&jiTVKC$s6-6=!W;8
zb!!|-Ho!)kC}Vtky+WRKvr<?YsO14x{`!=z_H1qgBbn}@_l_juTWsAJyYAlnu)6v|
ztC5K$?PeR-wH-<(&wrf*fJh8Yum9|Q9q||-^KYceL_xN`dzTStBm_Qn2e%IIFzI=u
z47G-!SJb;XQZ}!qc!BDJUuvp&eg5P#dVX#ohf0lMaHs~x>sB3Pe-E2AFQBzphQjZ2
zuX5$fbM(sNG7c{1#KxW>f~o<5lB@a%D;zr&@OPBS=#u~yvZ!)tOPXH~C*Wfw3}-~E
zQa4r~oreK43NCXd;q1eOr1NJPLH=isoukkXqawiil4I-USY~$B(-jSWeh_J*rdu>O
z!=8JIwW&3^z>KlY_n^*C2ba_WZ#J)Kxcpb6=<{j}0iX0N(X9IAGky<=`ua<r`5tP<
z>CebTfkARDElbglamshIhnTj)F%6E_K<|p~?;hJjKVL*-U|eK9^3aZmQWy7*nUy-6
zun9RYS8j%W`D!ec8}BHgCzigO97`UkS)_pYI1?VN$4imWl&u$;_G0<^?nBlcBVW{B
zq@<?hy~L`0T)dq6iTG~L+bkGn34RpQ_}0A+u3@fYk3m21YhOU5>rl{pkoP&R1xrX*
z8lnQ|Xjy<#d<&DIJUD@ObJTs1<WiQQIyZUHSvHqq1H0gg$$s7#n`Rv8T2$_-dypq~
z>DtI!7BpT458R!U;6P7{OyNUAvS=@1O?0L(n%fg8LiL}7!U_FZo<y|%gZf5{KU_b<
zEJaheNbod$DRt<C8>T1Lr{LQu(Jjl3`<8|Z=p)n}0Mc$3g@4QS&B>`9pP^|gFvX|l
z2h81IHt8^;kTH_mZ;K6++h^NDdcLOhy7PM{b}A?0Cuv!Dp8_wK<pt@*cRr%mt7-*^
z(b0{*rr-fMvk<dyY!<XmpxoX~Mpi@r?mNePVcxGkA#$ArL25-(DW5m83-rwD!KcVN
zP!rxcf9ei{1KfdDL`f2$25G(aX#*-Gt{2V2!R9co>BOlXm%g)1OnIk#W5f3i<yrv0
zH+yHt*i|rYCPe6;(?se^+>K;mzAc0mq$tneFQg{~$E))vIKmCtqoDh=e1c8UGCpo~
z3S$zb^arGT8xji~+8W^dWgU9aIowU-jf2H#4;GKEhAoD)O2mP7=g0(hH>W@%*7yC4
zn*$M`C5p;Bn<LJZy4j7`wU7BFvUW$TDio;P6oLiSw?TL-x#SGlqkTn6m)zl=uAlUu
z`WllVBD_qKATg^N`KJo8P&IST0KlR<)YDmrQN2oq>dG$M3E^M`e>P$seOYGpd(nSa
zXM~AM9aI#wWmCxQ!LRHzZ#`L+*gmO5=(2LTsw;5z7bh&0t^6|efK0lu>M~;nZ&$xb
z<P$G{F?c7x4qks3fl%7v7+Qo~0(>T_gQbzH?lfaFr>BSA7|EU<a>ME)cQLH)VlT>=
zm@^iW$DWBHTEGY0)n{8fhX>m-_3Qs|h{8MRX}uar9hP1ZfXUc0CfYrEo76j|{szcQ
zjlA+fwu;&_WP;BW#9~!K<O-gVd#tj$er&JCb};g5I$m@}T$*g*3n5}tS(}{a@@H_^
z0NH`Ukoq-yt-BIKp|!@R4L&Umv#r0d7r|?~#+KjhMfNikSk%TNJ32wN>Yil#vLeW(
z1QGYPv~y<%lEa(vFAqI(x3X$=pIO6<*Ivdwx?7B+6}kr2O%L>qed&dj%|oS|WVfCo
z^VI`7E@dCa;kByfnH!gY1%GC*?Tn2I+t=9LNygt^WWWmVhBY_y5B=~mFnTmuW}U4P
zD_&FF+kYG(-l{SwMyMIq_~7@K9Z+*rPfVetE>f3vaU#jQsf}!kztAUeST~<_!y4o9
z94XD?nFC7mVnQApMQ%<WIkhH@&ftP+yM+5$6?|`|n{O)})YHx7t${$a$l{o}3Mt<7
zFAJP+lmc`*wKv(APfgo&Y^RF^t!Ii98Dj^XFu<_#EmQ`3lk|=H{P@TH;bv8YWuPta
zMdX-^r<m~%+Y*8&E+S8R(sf>&c{BSNc7F%<Vjjj&;yzMEa^74oulkh~KWO1r5!TeS
z@@|P*N*CCn{q%(;Nm1{rehK`hhLkZ&h3g<Hn}*c$fjF2`pnt6%nHGek&j2`zUCehw
zUZZvTyy2?RHt94a1Xc-i%X0Vj1Xvg-y8?9mg_t356y__<9rK@Rh`*vuD!A|t9OVsq
zfb<j3e0Av}%68PASeza9tj3z;Pn#07%hsTyYiB_S=mI9vpzdsAad9L8<SahrMMl5Z
zEtCo`SLpoJ14cTg3tm8xA7=d<4}Pn~VGqPSTJE%6;ef8qj*dihyzrG|fJHDbh32*3
zEt?id-0@ag{6W8!|6c2SgLCC&j!y8V0-c$UZRCaM)?L021AiC%r>`xCzvimf?{7uX
zy@t7a7K=qozy-jGGl`~`^8p=IBtp`GETK`n9E;A{Py(iDdr|oIYf~@oa=DREW-CxK
zE-K$w9;A6lx58`<Lva$R(?SA|QD}2oI8Z-Hetec7@xyBE7+j~0iJ8Z#S=+1=Q0X)-
zFoIiCGOLspqALP~b5BJ$G|TXRtiUJN#7)lDzFO%Td|pwQ6QGvwJ|9=4x&wfrRo2pJ
z{u9nY(-N$Ad8AFtbNKqdEPE@bbaH<5*(E`{bi(DfGl$FczMv=a-H}I3V8A7}6LGLI
zzysVb&PG&Bbch}{bY$pfjVVVuSvp|vZE9olo8P4t_6pw}9r$OGlf={9_V!6sFx)td
zDfn-w4OgZbVK)69Svb3C2joM8T|~BLpslFf`?no!YwHl1WPu#Fh`6cXeV$CY1qf{a
zez`XCAyA+tu)||rF&7jXKv<qnb{cs*p+1+a$rA}~JQgd*)`c$$f_l^Ye{sbs(6o|t
z&*C6+<5XGRnMPD!*N;H#6uJ2zTwY6H@@4$7JrHt7Vdl>M;HvYcf9Ij35X7h+8{$ok
z=Xj}iVB6Wj%rxkrVdPggi=i@uQ{7$Fes{G+br*H4-^TA2r8S-1Oi~*C=x2Rjir%+1
za7ZMTCJ$iT!cgwuW`mXBxeT}@ivo!1ut3b6{8ewTlS^E)%Xtvio%19-Dj~>wNJrKH
ze~*R7q1@d{MOY`<J9Db{5mge5OTAC3&Hc9<>T{=KhV*krsYU#$U<_Wh+n?9};)KZ9
z!R2-EyAo8Uil=}ln9^5b{3Z1%6$|PxyWJGlvto{QbKwo7YW?0AC!$E4NyQ&;!N-fg
z0KW<U?yS0M#!9PDbVoW5o4x~$cx$qXmh6`@EbN!<aRsBQUb+B%Y#A0Sf0MW%a$LYq
zjByK-f-BW|GfcstkVfVO<OWB$<zNg@QD<^eATjs+v8M0;VsSm@9Gj%#CyeGe0Yxsp
z5q`jUscsWU91yS(oKU#O#;)0#ogDyeRb34!p_CJ*UU2k<UIpR|BknUtrg%n$_|eSF
z>aE2&ac$t<!rT!bhRez5>R~2xnczK?ySSI&VG?5`GY?nItKfz;T`Xyweh*nm<$HV#
zwj(f(q!%_a-@t((5TtYWIhcHs%Tl8)sP_x3mMSi_0pj~Hfd1zAbsmi78+#zlUfl~<
z+8j)L?K2y+E0G=z06{OsiZ{KamsNJfpvDOm>?{-NjU*y)H?v21^g%&pf;ZH4e9_c$
zMHHEJD8vJCB|5%6<7`X?urSH{BFoc30-2iHGR_@H_jF!k#_TTAXw<slsRk#gLiKYf
zdF|Z$-R_pvhOeEtx6K*p#as=44vsOew7))~Whfz53*;B$GwJp(PX=SDb|$jot+7hq
zE%0#Ol%FXW<!wO=em6sIz#D@G`EG@1RCB-7tH1YZnn`@y7VZE{nHInuZHXG3l$pI5
z4J=a<clcb0RB(l(xuC0=TuECx#rhTOa__if$?sSCZ!xz(gbp5}YmIxdM;!2LxO!`&
zctJWqGj!HW{sC7!piva;H1xr-(l-*sL6xPb`rwQZtUcX-U+l_u7P>W^aw8f@Vr0;&
z6H|q=YME@v?OJVzTITL(>BuZR(;_%X2t%dqByz@`-?w-TWmnePaV4D6%Aw36)^j8f
z4|}e7KtXchtb)x*ug;O(x1q^YKxl=4Ugi{gy1BSogdb*1?B**7%yp#T&y?|Tqh8~0
zJoqPiL%P(aA(_^c^KEYz2~*9)nv<H+wY|vvWYhHn9n4M24mHwPh0!p?I^wyh_cM^2
z-2+PlWxw?uwZes7N&;TWeoEmep`Y@Nxjia`1`8a}KJtK5QAz-bRzG5sZEI!VCWzvR
ziJGVWbr*_y5i#HL?fiueYXA>qfTcD8`SU>&<0l`4i+$5}jsa2tF?Mf8!Pv93OzjZb
zEy_VvYk6-V)<L_}JC$KOCbuUkLU(0<4{f<mhdy@TRj|M|LXpLznAa+A)77ZPU5$Af
ziJ-+P8hn}(Wwk&Va07C=aje1`Q)%RcOvSLUO<vJNJPzwfe4aGoz%$mP(N9oJ>Yrr1
zEdt#XwW%br{8X7sFW4KF#a=fwW{}n5zz1Y9yXOjun?TjkU<}e&!*u#oUPlHfLw?G|
zEL#@kw9~BpA;lpg+#_dG{mlhFExD_dg#APvoXgkG?l7#A(t$%AJX3i);YKa7Lj32n
z`I(M$j*jz=j&sJ1uB%&QM*U6N{=Tl7UG9Wg?+>?7)tM=_?kFGAUf#-!P?vvqnkx`{
zHR99UY9~^}bL2o`%<B8z;e=R~@Z7o5-1EtxfYaQh-H<=8in0W+R6_1vg>>L2aP)T|
z5*_!kBXgjsA7a6XlK0(<kBq*iKQ8njcdRw`@LKX5O&zKSnh{aVZvrjz@+I+$B`NC(
z+P7k{)h#?jvLuyF&--e$-5EMV8-()f>r?D=!+f5l#KBLh4QeFJ!<^0e6c1t3&F8xL
zoR%_jmrN%H8ezQpo$P+KvK`}>s9VD_eqYE|L?W@={?<++FKp=uY0lDS^lxtD>%d;>
z@9{5-l&RwA39VI4m_AdacN6Kh&KA4baV=1zOCYc5g01v~Bw=mysAtw%OoW#*c)tpQ
zl6$eJg&Ce0<s{8Jtz1HCtvVYT2?vR1ng)x!U=<rxYR!5zGN5YOaI$>y+%#=oP&ES@
zGeHJlKk^&4R(%WqdUJX3w|ymY+qG=)3#?;D2J*_phX78g87}lCS6`jH+;;i3wlng-
z)tAO<T3_b-z81u+`d<%(8h8f+wLTK7MS5-sI%~_Rue}N29W-l`p1%Afva9Q_nK#D^
z>}@v?_f2E%swJ4_(Jv|>a$4nSOJkU{%Utwzsi~Jnl0LwQibLs+Al)^z6{i06_5EQH
zTz-cw*W2dFI|X;Tp|7h6cIrB43cbCT%hh!@k?S0OyiVOpexbHhT|DNgl{FqBy?3S(
z+cbC6kaMY3s|TRd+r={FI`$v4AZyvB9SQ}zp<ds#9MLdaB?G;_`u#eIbw=KV`?@+~
zoj-cF;OQhNUc&}$9WavX`?VADGOsD=jZWbzvgt&D*9%zTtx{b8jqW&y;*WyF658bg
zYu0f2<|YeLC6xdcy?I2JTw=#5;5{uJLa2d*U6;6-YiDrnJkPO$h7UvyGx8+DdFc8(
z$*wC3g%euzSAB8$tuK5-ad-Z^hvEeq8_7m!RyolBXd7`plq5uVBXw(BE_sFTcO(JM
zNaJkPQ;`JJ;|Xwax@^g_00kC3UIOkleIcrDh8fuso;QowYi%s2AQsz|G5Y6PaKN1b
zC!gztIQeNr?eR$byx*Izh6zqDzE7E=9cub%ovh%L!WV?Ee7EHJSV5}TOe*X;-6xXl
zOF{@XK=Wv*LvmW--tRhYleIkQ*$#NApYsFht=4vgR#6A!?E-h*nNfTORrIsDwr)og
zBiy&fbMO|u4UazkbhM}fOE+E4{HmsvFtd*N;J(b}D$x6STp?!EOt@h+RCUvV_#!mt
zmIEpGQ_}*&U3y?_&W@ov@4l>0vL+8s65deIf`Jrd=k)r$M9lBdDJY+tI?&ZOX{^C%
z<wWvcdogA4p)+ff|3?>aH0EIV9LQFLRK9P1#a9Ooa5wMCr&685S%!RU$0aOL1MQo%
z`V6-5OE*@9HG0R2c`)VWnu#jAfdYd=^27f05h^v1%Nagu$wpwFP`Z7BL;%P~TcfU_
zb`&ovOT~!U3;}~8DpRDiS#v$55%%23gR3{a%IN-2!oI8>KlDuc%z%)gl}@lSZy>B;
z+YIn#S&~d{2M}D-%Iy;Fq&7l*KM-)n&R+A3JkK}|q#+|a-;+QgoXKvQA_rCA<vc*Q
z#rG@;foqR+3mTyB&y-YM&PLX3gf}v*OJfv5jUaQXkL#db*h1q{PUsz=g}8r0Dcp1>
zufH!V{!+GH|4}Y%@mXpJypyw$X=?T70hcC7bp3ay)|&fS3B`7$FbH4O?EY_O#jyH)
z3DUJwn-8S1YF70%Uy-g5-QA-suzev~ZetnjqSi;}Wz`b;e3+a%^${KnSn62nmjWX2
z<_Iuaf8DOD-By>Kh{>0giPWEsp)L5Q>X`p(70Y=jg)^O9$@#ArncOTVxm|hk-zX*t
z#L?mX$32XiP-op)>@_B<<dH711dle19)}pNWz8_^KK~hQZ#<$nT!%3UJqS)t`quf8
zFpJ>Ru2J5>btBOYmo&Krf-Wy4pI*}o%3}I3)RMiwHWgJ`b6=UUp&h0P^cdSoJoQAF
z<j7c>n{b!I_S#(`w$Z@)QQI_F6W0kdcD!tBBdojb&JFxUB;kXq8uOH(>2*I>qZm~F
zIF_)}gmn`m6~IyIivcJCM&AG@En}<c@*3;e-#k!a>9_A$jIA_B&l$0ravB;_a@o63
zRTYeOwNc-coi_qnzfnKJhPMzBT8m^JRbdTO$o4jqprR32oZ3O;^-S#L7%>ltNjUy&
z%?9|3xvedukzGB^uWB7q14uF;=E?M=7YfX7)SjB6Cy=$&h0Xp8HUFIrOYa30sF!$a
zW6wah2_TQZGGRAu9dMn-ypP$r#`Rk1*sYg+UJn%VRkAI3TDnG<KHRq{7@%9b5+zdm
zsNcGM!Fiv=Bf<$$sB**i4|vcQ^k?SBctxM65)c6hdz+>9pvr0D-&qloP)CWRufV9Z
z8WDpemi6n6FfbzF@ukCP-4QH=RY6#OjS?{d_Oqn=Ha9e~L{wmUlrwCt^3o*iYgbcd
zG!ZDoNgk#V6w;^&57Vp|ttbU|Sl0{{EqD};YB%rX9-@Ij#`&=(P?b-@U#XDM<f29i
z0$W>nT&;JZ-j|QkYV@Z?(;$d+E+aA8hR)n+wQRld>k0W8Y{8aVrp&mnGW0PJK;<A4
zrA5dZr?nYzT0QYu^XVUb)~Y|Ccd|XNZCIR*jHvwRNiWL=g$bZ}Ck!usH%QJenfva$
z`upMpmLBpP>P6ddZU43Z;KLq!7{&#b=cfC&JXrrI2@;)Ps~!)id>N&kpiHb=9m^+w
zb*JxEu2Y;%`xk{q)agZc;JDt2bpp7mzZM?A-*oK~>)+dYFO8nihBNG1hqC<_-td-1
zOR)#>4Ht9E+r6_}uy=TRU4Iey!ZSSKbQTd?UwniP<+>l5d<O^P*gxj}grY+|U0*eC
zZ{T!Zz5-dOmrTS>H8!Hwz?<FU<eKHZE?3Ir^wr14xDYMNd)YfNOR|Str20UR^M9&p
zR2!jV%HZjQHp95=QZ^h~7{MS<nnB*N-22@9pCd7*zyHzj_1~!_p_f06+TgwX5O^`e
zHc5K?Ge}y2WyD3)g#K^$FM=|MM=-vFIC}-sJjHL%Pf+ZEeJK|mpVdDYlcts7<)!g|
z*#-ZVq1pavXu5wfH0%G~(447J7{T%YP^s#ABW*Y35%7Er86xV7TA&UWs!>(%g8Eo>
zH%+iQN$_ogM)C(-P*A4yh&HOT?{Z~$m({Sww!W@~H`5vfsMe_(Dmme)pxj@9G9?F+
z1MP$a$2+ejNyD6}SRlyNd76-;LrI#rB1`=dxfB1>)HkcXGE{h3L6@ew1U1VDW99>C
z^b)g^<)sYNr`&xYS)>2)EK~Any;{s9Xza!myh1gdovJZ2AU#@p2_0Tx&%7JR&4(qh
z0&0Q4UkaY8lq)JkFYkL9tEgOxyaD%3!kY=m<28v}Yn1TLKcFfDhKQSQ-HW_+-(;7!
ze)l{pQH2?Q`;!tG5AbyYML+#ykzW_k$Nd%JUyXG|_q|6!iG};WbY!UdgxJH0+;(dh
zq)g12*au`dy?syG`$<W)YD!v8;b0c5sLz6tKL>X(%OS`~<p~u>gd=elk)p35Pg)!c
zNs4c;Al776=ZsY@(7{i!ZufMz>tzV+?!kZ(Jx5EAW>=@PtIRoIX!R~AL8_-D2ig`~
z{)-5zDR(u5&gpU}tbwnKVTBH!UbW`%&yXjnlS&GgaVIK`>(&;?kQR!<zw?w1#cwIv
zl|k~ge<~Uo)rRPs=<v$3g<>cvP#m0#@K7(TDB~awT-lwA{CpKU9@^f1Z<)KbaJQ7)
z#hThXmO^A}5i+gB+zu=7TgjE!J>WL)L)=WFdH&8ch0D@Ar0p2*)dnD@{&b?FJZj{e
z+bj;y^LGZ4+SZwvqhp)V=!+Oh?jrKqQjfw#HC%&}Dvt;`LT8=hi@bshRCJ5}PKG7m
zu>Qsark{E-LEcUaAjv!1QH*??a1nOA$gB4Eg(bA?)^tG&O&wTY*;8>PI-?wdo{~GU
z5-TD0xrgey&=<oF8Ni=Al--EjiBYCmlEv<FB%4A<0N?hy;6(UljhCa}@B)<itudft
zCwo$f(I2-7nX`Hu5N)086cQGl(~!m7Wzv?H#js7=2NeS=nBO(+T1Q8JkzMOuuFlVt
z39eBjM5UN_T0$yX5GlzrLtuQ031OkQ*wZ9A<=}PY<$L#HWF^|eH;KATc%ShctRht8
zhO-DbW;5r2+!hcry{CH5DYRp41G<=uZWxdQZfuDkrhs;Hdohp#3DGA}cD+neoN<E`
z^6p~Cz9#}K2{BQ>&01K@v!1Lu4A`v=kpzTN54>sy_Cd1;NQ`{zj@)5VEQLxEWsU8`
zg~&JJST*KDN2^t?z#nA$&Ew@Z*9l2yC+!U{zxDslZOeUnLSO5>cxTTrDBENC>-5Sz
zeV=fVvDO<?1ee5)>45XFl`bGqoGLiM=bpdBd5Hr1+yRd6K61EPIKj`-<|J==OvnJ+
zNLh#XCXYX20|UN>gv(^ZJH`@1Hd$ObZx;%tPF!EP$SbF0E>{<L2xMizNEGfY0~E{e
zpq*^zVU-yg3iJG|lY>cZ3MWvPZ9w$fEE2E!UoHRAu!^>ID#p;}ByhcjO7fTa5kO2e
zPMD@9c#s-3u}Qs^P30_}&u4C}jwoIGc0LANGL7Lpr)D8?Bu&u@b+D~w6S3DnwkKXd
z%uwBt7G*jY5V8cQif(>E8E1^~hSYw(rg7(5DjAtb%?^Bv9rn)PN6x24Y74adw*vqf
zXa_{5)dR4E`W<>-r&wo{2twbWGj`uP15O6WnKwaCiok<+pBF}w76+RMwYsllA#Q?u
zrA1-QGi4BlX+p)5r$_|Cw<56J<Vs+<$1XZU2M5b@T^nG4)U*~euouo@?=(_Kfp<4$
zfWAR|%9hk+JhnwY&R{5MLu;|szIM0XCC%_AyH^E2trD`()wlPg{q@LwSB0t2)GNy2
zK8DeS`XmwXE#0Zs3OT3R9FNmW<44r}s^HL;wX;7^*N^zz?0nrtUI571*}wLT_R@#~
zYfkto^_bJ3zZpO4b+%`uU1dJM-C_M%8I&NOiFo1W0u8GBW^2QDe#O~+%fR*9{&<#t
z0Ro2hbjA3f?twhu{)cC*Y51~1smU-4G>K^&)JVX3t9vL^o8$R;rt$S>sU+c)EhY5l
zq=qMoX4Ht+%GV<Lg{ycU`>)(fATrs`%4X|ASh<P=s|hMX2|KT_F%f)P8!}NX@&1+-
z9F-JUas>j{%G#=_b52v{=@e~}dx-Fb>(0@$vdo7o@!>{%vBRX{V)^q-OA4*6SYA0!
z(H6Ux%L$L)(hf?4tCl55nshy&CG03#xdS0F;Y82xsq#9+79Q=-reKCe4bb0RXbC+9
z%CEXSZyTku5}8SeG_@-cSb<`ht+p7)GCcaLhS<UIy+;E38mUL<6>V9bTcWT8VmW_U
zY+S1@at03r8TJ^Vs$wQLM!mu!k`Z<i^}-+P!Q!B6YcBJEOyg*`OThd!PUv6LDB@GF
z0v;eCIJB2`@a|mh5IS!sv68Fie;=()St*|+gY}kU^G9qx>?-#mE1#XE__A+9`BvRe
zm}JPwU-voB&-%k_av3~Nw_D)jT=+QAruM~t=Q=BVx;<HS;vHGQJ<-cA(QcHV{3pg)
zLXjT)l#3Z2B`lB7aqcg-4x@-|S>UTbo@d~J@IB_T!+Ii!svdR;mg{&17!f2orggI{
zYKw+Nw6!?|jZW%7VDu1Yjv{Bq7ltg;9T|xaYSdmpJDtG3+1)S`2g|aNypM>vjOV|2
z0F;s#%Zq)Ti9K>h4$o$mahD9=)(j?86Hyl3ZLd2?w7Y*ggSJ5VL%;@Vd388-CYwoN
zG#3RNF6tRk$Mk1JepI2aC*r1fPd%2)=+`+B+X=|>Hcl?cIldiR#G={RzeWh)OT?}M
zql~@v^d=DiXyfTm+6md85f@0(v5b5zQanc_Hvm3bzrk`sMbuiZ2btxr{~e&S^7;%L
zzsKqvSC`;*MaWx>jgQirdWR5xybr}cdz(=uB;3^(HT8g0z$vqMNtUt8nsmExdTN<k
zKr$$R5O|gsJCi0`6g5z=w&pVdx37lWid5}A2`-ql6zNgj^Z+Je7#=6!T%iX@+V%o|
zENzqlEGTNZ6SP#*c{Gix1L7k7<&zvq_<_9t+Gs_hNFb-WfY9oQot)2NBJ=n-%H7$K
zFqR7pqq0g;4QX}L@(#TB%t-c=Zg#}a6J!^&d`FtPND={}x5#&t&AR_m2j$4ru)_dt
z!mj}mr<)XpQGYBag3klXD`O)&pct)b4qm0*>ppfjN`h_`3+8HF$7*FS0fO3ZOC`K;
zRpNAawKSZFzJgl7l<_6RncRE*S((1uuV7-!Xnm1LCjxv<V~NXjcNYU%LNqH^WR%43
z-oAEPbyzC`!%HCQ&>hL8)g}_YN=m_)KNYC`tM!PwdV_SNp91Eu=5h=`gFnC@<&5Nk
z@)!r6v3-_zyn#w_b3IbXEE)*bjz4Ti@{LN{nr5vB@6Cl-ZIuvGR44!_W@Bte`=Jgf
zsT~f*n;hD*NPqsfJ8FYXyPG5%dtz^!$J03=dUnm>LAC=nQCGSMNAncpKIh+8$LI2x
z2X9mVd))yu`CWaEu^=@k^1FJTPccsxQ@sLrzYx5W4_3yetaN8Di)0;CRJ8;s{ZB9<
z7hpbUP47WBD4SQ^5K#{2(Q|YKUpLTu!I`SU<i^-O6rEpA_7+N?VMwb0G1BH%N57-u
zTpv@*+Ow+AtFP_cTEXjGu^{Cqpk2-lFp^(7ZYUt63ceFPQ_#|Ea}Z(}+Y1S4`=ewL
z7H(@0#tPpXjN36MyjYsU3qM=}m|czmCzy&C-c*;W3Wf9z+P?vXbOI^9PJR|AU;Z~S
zf;kdXA5w8*>H-jZ={Ny&+8lj~ADu{v57Ed=AU(hWYJ)(tTc2=vKyR%zRW+CodO`u3
zZ=b=}t8?t@HNT$4zb@X1<0j^pdf}H@d|7&ke)$h5t}{8@3*rdjvHThd63={H$dT_G
z36Ah(m2y%?=o<^!6ob&Fr~F^mvQp)d{kQ;iHbji6qid=4k{sK6ATj^N?|vRr(J^A+
zkTq-UZ!GJeat}stYqnCs#in*pTe_1_IAzeSPzSvT7qYpD3_A4zceEYfC--Tfv&&n|
z;L=PA5e_PYAvmM@RH6X(h6&Xch~S;WyzMQxB@|||1Qs1wQwV{R23508gmXX&6m+$j
z-be3YebtUaSNJs9*wM$;m1I*qWC7c5V<Z&IzNZigRivu=Wb6_exncU)Z_j&@9hi_9
z%I;xpm&I`2K6EC=T0@U(U|-Ka;&UiK_3cB>E(@>p?qOjcrFMP$aJEm`=)$mhSh+hC
zd-Z3pMm^iN9W^3LBR5h4dbDN}6qxy^+`sD1DcPBgk@CQ*oYI3~|3FvdNRkmG0$L~V
zO%ekzeq<;>+v`H6<$exnR&?Y0f#3~TT$p$loP|qAVw-oaj@4PD*s(<?1tra1`|41=
zQ$-JTi!hr~PsaVOX}Q*WLM}_-Zs?U!WzZOc|F2&Xh3~W~Q$6jc<ML9O<R6%;{d(L`
zu#pQj+DGVSkHVX7^^yARPljZy$H0P*^Dw{z=9xc57ss9xdY<mim5ZjBj*ne)_0#)N
zpSe-R@HGu>@mD{s9qhwe22R!BQU(Dg)x?WVK$7sqsuPWLO&U|g|L`>2@`L}_cd%Gm
zN&A+ImRH9DI&El2V&76u+fQ*Qa5l@RS>=QGtCM}+)#*WWe1COrQ!tXjxm6wdx;hsN
z0ZPxl-CK8g?B4FoTVfuxPebhR40eEH^EDTF*-}{8E5=^S<*#0~IEt}Xy%C-if35;+
z6uai`=c$;&g$M4{oRO?;><%jHA|u$EU(ZEtNXCy%I&C@*KhAKrJBhhyBnkg^G9Ed{
zPW#^{V*`gBHoqTs=3KmlbFpTX4nQ}J#?p)Mmr{sT=$${X=+x)-3#H3b`<lqVrsoJ5
zB>EJ@G(@l_x;YI?k5x4}t_0W==WdUwI1oz}0G1QJiXvEy7GD|q?B6gfeh(aRR!?V)
z#b7ECsgO-Yt-eOC3-L}dmd~~@Id1GKy@#Px3#r#J`fq?8bb_K<q=Oky#@1yuj)J&t
z=iT7^Mi_OD93&Ntk}Rsuyv2?|s<HOJ)hj$O-fdL+Nn-&Y<Sf~chLwoM!c>B%)s<V^
z+rO-2>tuXkDl>e}na2>4Q%b<&nsJgJlkTr8gJuA76A7l77eAdf6$>wZ-mEfA63Mgr
z={$I<k@GyW;LIw?_rS93lElj&c*R_3SAuTIf>l}0g=Qr}4i-ehlKdeBzoZAx_st5|
zvvQ7x5BbW5pzeZ{(So?|zclTN)$h}cG5MTCiLE0!x+J2HT=k*gMCL*L0R*uEo2R-&
z2|=uGnuY~gMcbDd)mT6>KmJ6L>@)DubPPeOGD-EKp;^wmkp;q?C_Y<(@(ZZD8IrO1
z6kq4f!P*1T-I*p|*EsLqumBbg4^LpaHj<pS)4Y3Qb3d4?Ykx@x#j?EmI)7`^nV73<
zH%dp0Mn(%N?|$D;+$=F!u)g<RjAslX=|K_gt6!>k+Ub})*s~d|<mHngI>1t2J!VLQ
zGE@*tWOAu{hahP_6I-ZE;tGrN$}xQ2>MBu%`;Ki2n<c}mX!erICUg|_gM)nMSwi&o
zArrcb`bP*lYeIbYWN!eM0S<OubV7LTjOz~9?xB4^SY%<71jT&6G2ib=s~t@e=sF0X
zqMOkSfZwo>eHNTwCj<jqBRKXG`#eM(=E5J!vT(X$>WvfvBomvgB5TnwQ%{@Xtp}-E
z!!T|UL>9nwya_yucnHCLF9_9YWyD!~5I50U+i8K(HPTSVt`9Y@v$s(@S*SXTIzx38
z)C{l2mEa3m$Y+)4<dlV<qhJ#o6K86Fl{xrQ8|~TXe4k#Prh6DiK!+}{sMaQkOV?*q
zHb*3V%vV&-^Fi~5N&~J7v5Pp%9l1oG8IewMZ1s~!FH{qpKxOE)XBC5r*T)xme1XU3
z&GDz(#{<-lCV9k2K(*q>#+tlPEb%ImAOw!KwQzM^56g2VlE<|m<FLER;O6bZ+5VT4
zu{z!3AP;MK3CxRH5r4fBHt5D9Or;65prg4=jU@?FnIvziZovdtB|I2iSshWbCHn2q
z5en!s6SU%FstPN2YGa(yNan)4rsRs><|yQ=oOtA1j#Lj5oKYk6Mt=2PS=3NNnqn`X
z)a#MNJ!qbM?VF&l>DVQ$`c7u2KQYVy)}{UF_P*zUPe@qePEg0lnr?BTN3@|aPj2N+
z2h5wEOx{#yf_Wa=`VH{)J%6f+RGdpD43IS}PfE()b}~dOn_oNj%%@Msp8m+E-^ZW+
z$d0{Sbu8YhdMg$FtxNl}|NR(ttf$AmUY`VPT9qf1!B*oCy#7|hO7x7K(Q~8eTb)74
z2hdtIi5HyEvJg8%eWZynNf8J@u;>P}VGm2EgW|}3UiL+|h;_yb!a!gE$rR)22xVrA
zm$fL>UGXkTWF=I0JqdceSwkcxFN8`DVW@T&*}xi*Kpi+ZyGgl?TU2KG{DI_bceaD`
zG(=J5QI8zgTFNb*-$A$Nf`Nf^0^jK#>{&6!M4M+gu>kMmWT%tP&je^An+`>kYfD4|
zgkejAg$>p86H1jIpo)x$W3@zmJHr8aM%PIfN_7%HAK0a!Pzwpm#C3Gno!}thZoE2Z
zEl=oXZM=ReFzHsRcMSRP+|K~(im;|W)4QmU-Tn*%HOmcj3TPustvo(Y=TLAXyUiL~
zP|v7|&>QI%VZN1ZF8)(HnT<OpW4k=AfI&5vkMBn<K^N)qwfk#eHc_|WSqsJ`tfnd&
zJY*^qgEe?Db2Rk?E3TcF=wA016t8qV%;8>8s<f&U<iu7HJiWntor}rg?(o(pXhU<K
zbAvLh%P*|Im#uwEhBdgk-+Mc7u5`~QdXpE)@(I{n%6rZCr<0JGrAhv)i#lEst2p(q
zVbLvNPIc0<rFX4>*ni?4KyNvRkKZcR412V1_!;V15)x)P<L3TT&n3k=8oIZpq&eVZ
zUkGYG+#(moUgh5>pHb2Kr1s>NP6*VwX!oNxIrG;^LXyb-g0ZdtevgKfc4)fF;6@;Y
z-tnP1l*DS%3)Nv4qtr~^MLC42k01vNa+u`3!P(+0R6#%bhetBJ(sPm+kCI@R2LsM*
z5GTi;@~C7&ankG8L^NLsysIsE<hS3vf6WAjb-8*|GQ?0tCwP_&av-=nSi!F8m)9hN
z(CcL1a?|QmaQ>cgSqj^a2#<iWS>4a-zYi&b6MrCRKFa)5cRR-Cmi$bt>R%Exy8%Hn
zSeNg!b;GpWvb_6Z{r3Smh(6E$x8|PNyhE(H@KE35ZN`NCj5i!S?_a;PUbi><hb}eK
zxX=Iu08300Ya3S3HYpv<k}w}acc^mvNcR#P`G;QOJ=eVFoq2rA%hv)#z85G{xMdys
z^_;7#FGzxG!eK)j0a|r{r&XH5N1Y)edS$mU33e>Igq`bp;G~Ges+R<E*4WN^!wN~T
z^j$hwH&A>uK!P>c@I<ZltRk``GXVgptow)Uk7_FkhD4H;$X?|yx+%P^0VDwtwY&e<
z>_K<sY)hu7M&v)w<l!zqMvWoXw{2I>k4BJ`7K{<A-K^uAX2wK!#P@Yqk)H*>YJQ$n
z2$S=ltiF^lQ#J%D0wYsv-i11OC&-i*SQ~>u)VN$Ig(5@D%YFi#D+b_L$DXRzmzAwW
zZCOa^`6FS&xp0e^_f`>#yRs7xzgp9Cm|AB$KdA^N)d|87@d>$?!KEwP&>^*XEgF05
z9wn@|V@1e9`WjX1c^FLUQy=$vkB*x?gcU6-GPN)9H~OU#wg*pLNa8Nf(m=qUbeE`8
zGYJc+?`}RBSYyAa`}4!v!)EO~!}${Ir!FO&!Ax5f-5WDh;<3i^W_OGLHbBY0sT5-$
zW|bSIH7WMOg)2r0Nh4+t-H$a?8prl#OMmwQW?`EgN80NCd&@Yj&J!~{M=^&x14F<V
zk=?a8S6*JF>8Qx%=FcF;af7z#he&*4@I6akE`-}EtA<$U2Yj^p;Z<ZD?b6)6u@rcD
zJB^;ZDjzyy<&(lUD<~gQU(T(Iq=Soav@sUl*;iPibTwP`A|;-vURSpgJnCF-F00Jd
zoUz&k(P~7m)n^f-t5qOv0IMW-aEKH5mK87V=zpyzOhjpN0zXKt^S8V)mhAbBWsK#I
zp7KN^^t7k^ZPoFY_9aI459OzB-aZv>dc;G)_4(^aap?Y7FQ%2V|CvWzVm5X}l9GSw
z5|d+7Dj1DRoW6F6uMZkc?4Yi(CpnFvd_JE8?DDdW#bQc$=-y;n`DbxdjFP}@HO%2U
zXClM-Wz_m9vbhv6f<NF_r%1_5OQNiZ$hM88&}Ds05MLeft!fr*--6D%mxo&~)gWX~
zw41JcG9qi!bS&uLkk*|jTK8nrD~X%hTSTkPa2R87wvs12wnY4fSkEgPh6Cy3w?`}I
z=gxNz>MG(+AZt)(mU#dT{h1=lYx)9-p$RJx(PGYMn1YO(-&Uu%&_c|vw-RszQxv<A
z6Xx(AeS+Z5rhsh9s*e2A-#v&qu}Sr(plebOXvaA`Oivh@7H?yQw*Nz~gCc<4QT%2}
zJMG<m3eUaO_V~B0@jWQ$P>!@U@1pgeei!DpC+<4wr{5aQk#jZ5Pr=Yzi*nHYrXKo#
zu2qh~(E$+&W)t*xo`v9EV@Nbcb8iDxZHmD_K6VA81Q22u0)YKV`7veD@<xz1tnjEy
z^3C7VX^b>?v0sHpM=@Hwl}(B&0gVW)$OR#Szs;^&5ioQsf`itp5U_c*1(-1ILVe)$
z@IRGqHkoED#ciV`x|ckJ7WlHGY3J*LQbYlhDh+k-X5!-ho^fVv<jmb>$$XPRfyV_r
zHFc@w^j{NRKz()fb6RMNlZt8Ef0(KEe+;Jb;9Dh{X12Aj_(iX>&AyL9=1U}MtkzZ9
z`CuFKhrh?O&;IXh`H$&fiPyX7U<a;SB?)^fWOIu&@Yi@jBPL8JasWgQi0KxX#eat}
zDZ<#^Qy$#px&hpG3AVD#DD*1k0L}3dors1bbv&&^0<-xNAcyQ+>H8p|Z+dhobl&dE
zF^u56&|ow+rPvPYIi~8Fy%W()!f4w&Lb`xtK7)|I6Nt?VY}qC4brGi8?P@^Z?%x8U
zw6x1bH-cr6oRa7*+(#WpA>fF7O>m01b&;=W_zN*d<ZFUWXr8;}yJZ~4eOw9Rc4KR<
z)`0jy8RCca2!JMu*LX8Kc!6d0XY0)$ZCgp#SzCMY5%?C8_9^HR19zcLqqu)EpM`Xi
z-pHmLi<YYWF>&XeOj$&!;QkyZ@($*(b<zFV?{P174vk*hmz#~ADbfgljDcH6!C!ut
zL2=S%<Cyig#n_)z3^c6i+>!7v#p;K4VQEL`i}Fi~#)lUWHI;(Y@wB!`Objj%iW1}B
zy_d3Yk`)0p^Z=hMhLnu+8~OXOOg>>F;?#x$1oyoEnQF2Cb;?NR?IPt)R=^yjSC0Gu
zC5Ph}FVVu*^bblWmE3AVLj0ZGBcd2o132s@54}@_>`iTrIuv+TDbQ4bm*1RAS+_fL
zwBW41)>a0h`Y@-k>PNaseMK;35__Mq>StvDT_u!r$mrEP@w`eZVFP68iO;Gjr?x2-
zXx_+@!N5fo{BWVhrxYf((|m9G4ol&G2}NhjU1E1PQny*GY_VlkeT`Gj^>Ao0nqM?y
zf)6|PO|&_njaY5H45g*rpux41GX-bfZ=JoGP!+3y;GKpTR`vVCiyIVZ<L(hk864%3
zLwlmf{)h0d=qkvxbM<EYPJK(y;_FY6rI9*xE~%9)!9c;g(?f10XwHbLP8yH}ypm%?
zX~%ow`W?JV!R|^*sQRUq1&O5WSo`IlJ51L)>$h{b0jzX|_TG2*wSdo7g#te6-r(^;
zvsgRIdf_1v^~gXvns*R!D1ZMR*1n^f1M;sTRv@=6V`}W2h1xOi#)`>;37!NsnSXSj
zG-jQUZ)^nxJXa&iYb3be&SQ9MUT)~GR4H4>B2UPXc{@|a3X|eQa_PCG3F~E73V4V?
zZJvN)rr29!CPbNDMSl+X+%)L+*4Q%ykEMirgEhIW?Q7tc$k3g)O%Cp#VNZFtnM=Yt
zzf(W9LmAb3`<RgbbfTu1*pNekTX(KZFo~yl;65(FhzBj~Y*_&<Y}+3hhWi*?6R!)|
zQLK4Y8kvOg`kgHnWyKWTAONoo9F~~o(BDp8z!+8*ALs;ymqg-Mmeq|NxvKxZo-ZKP
zGk0lb*I|VlFfGEFn!>zTEpA@*^Iy8CPV<N#DOyUTa6jYJcKi}1g>OZO1rmXFuc04U
zfGAydtvAhn*5L~(i35~&%|&w;fmrsXN_347<^c$|dSc^{bX6zZ#Y$ZxL($A0F#kRc
zM{iBrw503}t~r-vFD|DH#zR=2%kB+1pHaYb8|kqYiSvbksKDxmGQh#2{3H6PM*7Ee
zbNPnykEYP(4q(n-W<>fu>8yY;s|_3Au0`o}(B4Eh<jF0hBWgiw=m2RcW%YVW@`L7|
zKMifxiVF><M$aM}q8t34zC)#rUJuG8CnS6x4qa3Ht!p`e*awXFFjC<KjuQ%A`ybwt
zs8*M{(9fWyuP7a_gvT{;m<IXoDi|_|ud|_o^8E}LMPGNxNXt?)H$1&ujv$h!c_(Z$
z*wh94MqmNHKd&6~$d<{mY8LmZ2?o@TTWFA+#5d3)CK=Z}jQ{+9amqpIQgMtr@T}!!
zD;=;*n*FD9)Ouf$r_oV?kJMw>f%(Vq)r?-z08N;-?4mDpp!~HSb`sQTgsSr?4^vP?
zXC70_fSlEW#fg8KAl?#z7yqA*Kc$@j7_G0OOUmU|dI4E=4V$v}iC3w4J$x78W0$i-
z4&^b0cJyPvM#hQJMQ{2iobt{M0U4=7(I<#jpf2(1ng0)sHlZGWZV!ur?mfRzK_5-K
z-$<H$bLVsBgon%>NYiN5gGShMPdK7))xJ{xJknn8(ME6WZFM>O<|#B1>zg}y&BDmh
z8<Eue0HPsrBHXgdNa?)47-j5mlaTFWWp6ULPRgUGI^u0YC0Cz~?C7^sEJJl&6x*R<
zy+8ZLP;aPTFv&$qNY82rCDc!zbSL-{TN^At3!#_wSH8>)Bmu=f0WcQoE(^k{Ur)DL
zG%br@N-9k2T9PSpqr?U`TCHss+DMh<5_ha;S9bIo8I(uYwPI7`*>>!Q%QHDd^p16Y
z#`Eq}@TK>8q24S5TN?DNQ#mK^hgTqR(~+3JMaSI63NGk2WrKO!%>?}Qf-J;#1_B@J
z|M;K(<Me+Hm&@U7@PCeni{)nUFy8L|kN?;IJOBUr|Nj2~P)h>@6aWGM2mnB?)(9|g
zI82Et1OWNN4gfCz003@pWMyA%Z)A0BWpgiMXkl`6E^2cxWNCABFJow7a&#_rZDcNO
zX>KlRb1rRRaP0kyVjIViC=9>KD4PU;1%ekzwhWq5WL;uyWJxR1cDyu?GysO=SRe+$
z03;EK5A;39|6+e#yQ_O<Kv0&md-iNDB4(z$`c_?4U0s(Ce>l%(WnN7F(7)6D!*M>&
z{?Px!@HCyxdyBJC?<}A6el7pd{X<zSX2Y!fL;vs(z20Uy8*ZLv<0(|tzrA5G%X)Jx
z+fd*vou95OFf7L7Y&eI`tSpvY&Sz;E6v4LXpI$o2p`BvJy@t<|VwAl-D@KcPR&MsD
zlj+&!U*0cf@5k9~Xs?+4Wvh3mw-XkV0-ID|bCj2J{@KgQGY7a~1W;;K&tPz6Z<HOU
zi}Ac%2`it>#|@z7`S5*M*?+5r?LUvxWwDr-*A**=={Q@jpQGYz^{S?m^JuxM(>6KI
zPgWOM%+6P%SC*FfWHk_&(rh*@#_6><R!n)NR+X7W>l1%3vy-!IGG9G;={zm7dBZwW
ze^cHOtC!P$ox=Ezi`kj`(HlS;*B8l$*ObAPt}T&IM%iUU4;|WH_q`FJd5Rtvllcq@
z#H^uQHqL0e=PM98UCfK}eLh`@_4VK8%V{=xlbrxDm@OO1%vOJ%ju$6+<2Yp#G=5w?
z`gD{|=ZI0^@U>QHe#2VFP-=^fip9z4WHDc-EN-gVqgj@&Q+Ti#3@Y<nTXLLF)+#s6
z*D5xHSz2r8fC%$>G}nS(rT*xpvtcmXl>(LCS4vEaJi^#Yk$ABPM@#+#v~`}H6cNG&
zC9n_atU>^4%B=WaoTRgSetH&Bh@cS6ZJv%_Tmx#JpJl7Rmf0-NVuD8dM*cFB4G}#m
zG0KK@L?<c*!VawUCjY6W)+;M8317dwvXr$e%+uKku!eG;4&Sd)tIW@)<LuFFc;gn<
zE<c*37sz9;uTbR(QMqw;l1)adO3d^5I9pYqTnw%)GcStqJfip9H<WGxg^rwPiwp)3
z043bbFTVI?l6;Z;Ws(9yPSatQJSLG?*fxIL{AKbBu&!w_n<vN{k`Iq2%U6S6L4dtV
zj%USL(t`HzOS!4cwY3{p0p5O|Jpm5)8Yw}Sn|XQ;{ip!ZDMcW^Otg!SCP{WSoiCH)
z#e@WfWPX~?6A-$RL6$7aY}8GFM<>~3is-=)jEd<PijBtuL@yapc1fLcuqH(@ZFiCn
z@HyH1f*z^dmF>ctY`&OH$|Ow|ll&ixEXkqGGJ{`}Igo_$GJ&NAIcA=XcuZ+>GA;(t
z{5g=76j?#oJP_h?o-FcFvX``>`Mn3+gK;)b=;hWfKF+A!gbU=O+qdEERj1wAt?S%;
zh8;Uj-kqo8MfNVq%Vd%PP0MD<WHBDY&}Ptm5O{%rLHDz9nMng>a-70bk1=AJ&eF4l
zfFv8q!D%MH=S4El%DI#RNfdBqr}tHFt6^sI@+CC;YW4%R*(Ml$=)n6)aWU!i1t@kB
zJNMCdjb}oJ&ZYMD_N3TH^TyTKZCI|F83Ck8XR~yfw4wjw#R&E~A?k=<m!01{F*^Rn
zS$TvFeRGiP>0~@uF*yf^M?4=ej5gKm354X&e@=oI45cHu>}C)rfspA6|6#<Vt+|)*
zUhYk2#k{~*Kuh-LGbDewYXsh|woWC=aX!r2TixWV4y{4!upl5U?2ak1@uhsHt{t^j
z_ex&UWZ!Htx%H%-UFvEgo^<{t=*`o&V(}cgtU>8piqbG|Ypp{t-BRVKb(7gjV6)`&
z44OR~WV5;{s?Jd36v2!HI~_qjBls(~Iu;9NgV3rtHru+zrCNTo1Gk%}upUs18|vV!
z<)yTD+ac<eTPEH!LBEo;balE=ww8#x`8t-_il*tEC=7n2V%MXTj1s^JtqQ7GV9hlx
zK`-XguO@!RUti6hFz9G8x<QkDS&&Y!B6X|TNghhi`T>L{^fS{~&v5>W=h3l_rfH<2
zZWg~ea5VbBvZ{DG55k$OqPDBqf(Z?JExSY~G>{YK#p?{@x5+#`L9(q~k=^t$DT!D>
zXW(!#K~1M$*u4kXpK3?A3Q=u(+XGRx{0XFmcI!_-tRFJ5hS@E%XX7HBD;jJj+gn@w
zv7hk9gLkgs-I~5X(U1Qfx(+zwnhJ*zkb}oScL7O{C-0IAfD966mYjebJ4xQbfuaN)
zn$Wv)SO6zg!DX;a-px;u9iO}d<}`BH4n+wpkAmMyd1#`SJU`~PWQV5?54#D%OU|<S
zY2m?z*sGi1cp|9p<>Z3I-=GwBU&_JH1)aosj2EZ*@Ra*eo)(Mo2*qoxAGLERLp%z0
z8mtkG{apfV>^vW#Bn$#4P7=bvzR*}3_M3|7AQxqqb6ip23;+)H)T3_F>-A>9c%aeJ
zk+Q=hl8WDSsl=NHZCuXdNxVbxZ5r02cQS~F*uXEyq~26zP?UOLRz<Rb5gt#7BQqXq
z-z%~WluD=5@v<##bg2U!6?X!H`LX~KyZ>#6CJPQ;sBA=5mz3%IEL?qAlwtzM4LSJ0
zngL3V;mm?(4C*C8B??EQO#p0;r<@70(K#aiIjl%A%91vs8m}*`9(*E{EzfX(3bNBn
zo~m4s&s!xdZgva@9crz>J^-@LvXjL)o#7DRq=Ho$QVK26O-8uPWq?ht^NdU)-axNe
zOov8btofV|SL@+Bp9WJvW~g`enQ_-anq_#clp!S8z9?^XwV!2zsC<#maJ2}Gj<N~;
zvA5qGASyE+Yk5G+Y*@@j-zc3tc+gcmH~Zrp{y^(}A*Zx4&Wn6h!SpV3C+a!87!<`g
zODBZ?Sbp~=Jv)${)YKPG$NwdLf$e*<xk@L?Pw1REr}v#CJ<cZn;eEC&btMju-0?|I
zX>MydvH`V$H98c5$CLT#E`P(C(hXNWA?$4DSSiCzu)Uk)$pcgxB>BdMDVHe4@}x+c
zIn0k>7CO6H^ooC6v6xnE31KJSV1w}E_U+%+2vI_AiKj-6Qq{S^$@C{xeDZ~M?eyWN
zaO&3RdUMAS9Q6K(mlJ+zYgcttJU(^dmVcLSu@LYs-F_$9h2#`zA_)%Z8Iobr$6b3^
zO}8A!7MeIL&frsUUQ4%E7n<egK$;rp&s$Z>KmErd9k<i1eiA9}V6#ILHLvS;L>_F3
z^C~=eS%pS27$f~H7&IIJZ^5wOPr4;*OXucvTb?SMR}=`eLbUfC4se&?mjlIEkrP_n
zzMVT*=UY??)?AkSd>dbE^9#Q%&$smA?m6l$sb}Zg;X6FSZuN5eogNGhR=VzS%pN6X
z&4;ZN1kh{>%ROBZD`RahORmLY4j7zGQ8PlUI|JdOM7G47wj>l~><n;@fy9TY;TQyo
zMi~x2;!%m~;&BM2u@5l?<j)mF6~FGCrPDS+>fnK0#TfW`U>7zZ8!<pRd64Sg6OZ96
zgALFo{m`y0SVLn3Vpyz+&>-r+7oDvkJ-hJo8>)r)_1-Kw_l#-G`=cYMN&}Ww-FriF
zLfsiv->o7E*H<(#>KQm<=A*x5%Qk@aLV`W29=6`TCH>Rex2<l{a;hkNpyAIJ!+9}l
z9WnmCIz~{eliJvh5ff2H4!0n@LT6_zs0KF-J^F&8s>q;<u2O?F_`N_%2BtkO3l@Fh
z@I)ma)1@+@F+K0&J)6EHYU=g>*OEbQ+fGwgrn~R8dEG=2+`N*zFY~VBG5=P$1TpH{
zr4-zS9S3OP5rt_He=PZ<$CjhrnoWTqL{FyM1mC!(H#d{490Sqa8097MybYL+`3ByU
zCV!#(nBgp+&NsNw=A_twY2O%RfZN#yACnjm%^5Y<rLMWTkP}ZJQJ4{Vw8wr0rz2Sx
zG7dS$yQ%N7jaLkoLGem~X!aWx>tV23A_`Wi>~Jx|QxhD!l+NZrLLHffy#n|=$9K?S
zI4W=-s+t37Rn8I5zkmJe&B3FW2Yp{d&i^zmBSPtm9L^tj+MAB(c8OrtG#$`xp?plc
z<v|Wsa2DiqKAvmjS`f&8#`8I%5!CYmMWPP!0ol8DxZ&wY#)_vSTsvexx<l&9F)^6w
zv5djXxfd5$7gkr(;}}Cz*$FGV+2kQNaVu&Axs{^Kfkzb-c07()<U@|O+X$?i>~Gfs
z+}~aWF!?hS_ynkj``bsq5ib0HrwKNGyB<FNvvYkT@c%oj8p7{uHirM)S+7O-|6M*S
z`j+vjrg1FF2ip2R(7`nB1^#n)_h!iDNX|+ubESS?=uAw7uLwEVOCm`vd8lLnW{iJX
zek6jmRQIxx;eN`KsK3=KN+wZh8I0PoL>UD%p}#<^{%~b_AR>b+Amjwg2}|GAGYSxM
zkb&pn1iPaGonrivv3fX=>VCNXm=F$C3U-XxhsV8qvdChwu2BkA81_Kxgw1Z9K-wsB
zdcg)oOHWRv35P1dB6L=qM^py=OuX_7RBL{LbBGL3wXnH1^go(qek${Ne%#2uR<S9p
zwt`Vz%Q#lnN0ziUgln14dQ8TGTZ_%yfSts!nW3zPPn_hY%%X8I4MAUrE!-52SU!E8
z!+;Qnh(CFu?E{mczEb7q$5)-0h7hMJ?diso0e++#5Y)1ncX`dN*g8kO=f^icKm0d8
z*a;e#6IpN&qi$C$PEOPE)y3pB6UU`!MP>DZfvtCdbLNHDEW#+8&N4Ld9kuBy)h|SB
zw*ckN^I}o@5{{Dx`V7*{ISU(y6M=517-zkUbT;8OliNwFpZxNN7W~jwlH1BSTfh7P
zk;`|qm%JWlX-OAwQcHz`+guu!GD}CTXht>xC!po?jOQLOMqkX5VLHScVkZc^kq;;k
z=>80qCuk901t?d9@?Oj)0Up^w6os-hgxG>HpVOJQD-Ec|Mtg-epvh%FDX>)0yQFeU
z_q>cvXs%o9ayriE^-3rnIB?H-$pTG}3b$K5nME%m`I{9eDc36~6V1=2@S@e)b+ViX
zids<u?y(q3-`=B_MtXy{#+cw2_)p8qZ`=eHa#nB~+Z|l>UTe4h`h;Y&>7qPE*!~_Q
z=&YBo90A2@6*b;l*mr;PxY0O`B1i`F-LdARfCSFqG?=URI8j*L3>xR<JzsdYf=eI3
zm}gMc-E`7z!#p44(CV@ul)C}y4rW>UK1t^ucReKf7T+Z$JRJHLXd?Up`PR;>9X9XC
z$i~J^aNMUh)Cf3%opHK9wA1c3^IounnNq?*q+NZxSGT5}V67A?_NBrquiJ6MbehkB
zJ^d3%^n6yY_=R^pbcTF1Z*O&a^WujoEYf43Z*9bE{L09_?OKlvd{kEV#yx8Ihe#Hf
z@7xMapsL0~dHGB`Uj=9E2;040kBvHD5yTJ#mm_X4wA0uXI{b(niNsR-bUvS!{mo7C
zK`3CRkH^IY;ON=rKNeX@XQItJ+uJ+$@87$($v0{+ha1`OEd6q$%;x0=Y@m${ugw7O
z{|$?Nedqq&Xkb{7uGU~&C>W(6X=i9w)=dWb(_4Y#o=bZrtQ$?)fPSub*Cq2f&(3f!
zr>+ul{Q<K1Hh%1U@&!~x^69{%*F+gw^{<7QdHEQy>OHvuv|)|CQ$UEF?3Bjqcm{kq
zTTIC=)V?1gr0QF|TfLm0Ws`*%$^N1Hhrly|ZX7E<2q#%_mcc%WoEbi-<*2nHWjjd+
zBJ>lE-5CA?2m*DZJCJmK8u?*3&x-(oUOxxS`5xViUq9cCz8yUJ0Y2^kl<K$F&-p9<
zd%NcQ^Ow(_zkGi1GZf*`^j^Q(e}3@%$ER=gQ(WcEqbF})KYjD|$<x0=E$G;0vVDIm
zF7@4`7th{Ouc^dN{QW<Ec=YA~p!gzpE93g<)!T#bp1*mr?@E0E!`w{nR4K=}IN9FP
zDWZoMTA80rv;h9ztz!Y{_^c@Bv{TFWrN6*l`k&df%*WPF(c&vXPX|yJw#2fNe51u<
z()}D=Rq)20e7JD0;zhv(D6QH?rsI=>T+;Zu3(i2JY@W@|0P`j%c%KGbG`$33I8Fy3
zbg<gvq-b(;0m!hx?O8fGiS2%ce-%iXM{lrz&J(@kI>MFYYcNmrvKs*CN=dT0+(HFn
z0KU(kjcAAc3!0u57wv73u;>A3axrVuvPy3{RxUgi4`QgR%{q8d8_#@ESL>U-WE*<8
z4c)TucHrGk^zI(Ky9e*K1OJ==@E1Yb^%wT)gn}l8Dc-B%d3WY`(l*NL<v(U>y1Eug
zWkAU5&ueVEos0q!zJ9VIwCoXR)9n%8{%*y<V>dFd*k*kx)(LHF{Bi70s8|KcycMt>
z><<gb#!Se*RukjAQxTRCHuo67@~@8o9^j+UnIC(3A%&hTP-VxxS3c@n!OETRMx8$5
zs<hiFaA}q?U{?=1fSc2HETuu|c)5SfX8AFyI>}!R-EBdpC5I!l%|VOqglraBEJK?|
z+4>hCtN@ofofQ|*<N@%dr?XixtMj`k;LM(%<!D9Io*2=q#teNT=F`iwK`|zN*$%%L
zPo7EOpK`0cPnAGCbghw9DFSJ!vr5aqV(a;1e$(kR3Eb*wV0#W2*5D~}D;_Q>LGW$*
zvTe-0$yh{0-Oy2lzR0#{>JwA8pH7Q$W*I;|)ek6VNHi}41ZlUm(1wEQAU(OH4*IXR
z{nrQh^`;U($eG{glSh-$_vz)gOFYA{{WB1oiYY0N<bm2li{k4;0vyJV`z&>nkX%tg
zQJ}k%P?Jq$WC3Pr(r&YH7CE$4?XxUN5z(H@9_B}f+N0<q2GJsNiPK?X&=*}U_}TVv
zrKjeoE}zm%S0TM@`?pbrs~R%~W1sv6UC1Y8dz78bvaGBZBIF}1cUz^aMs%GQPq=h@
z#-Qs#%0~nV&;aJ^=bc8^u~R356zFb)j^^WJItJOaWJB;?){9H!Cpp@Z9fO2IpIkMz
z^%MEVnOl=xy9k{2B!ObnBY|6UJJQsx-kQors`Hwv_{|-vbFE|#o47%t%h;X~=hLUD
zbKAW*1*}clmKs3!$OVN@bl(0iOTO4sX#(~ZdH9C9py{sHApRAOku;GYT|f&YES%$Q
z))1y*0mDBzos*Xy6rq_<(gB)Or3rcu&Cqf$o)tjjM+od0z@ifoQ4B6l&;5k$HHna5
zN&D7qe$fTw?5Kyp{{A>a^Bvr%u2v7%*TC*w?$%fSxvugus=PFnIX1%+1HwV@(o9|V
zzNqc=?b_aaQTMhZ)C^I8mqnUPq2x}xrbf4}$&OL=Gnj9Z_QqE49v$mE9`d)_bfViu
zIp-{WpC#pD#&*Tdw}{K-rFtr{U<^B_z47|_=1w=cgMW^y2YuU4mw#(_`;F7QQm>}f
zzs=?sSvH}?E8ElgwxU)to$tu+n&T8LojVgiQNkjq-UH&hgIcQK<5E5@@neO^?VqBY
zZLlpFaIbj4Wf$j5yyi#wOk#DdMP3NNll=G?wL8l92KDr~O_C&?$YC8jAROZXeS;6^
zk%Q3ej8u5CqU;c(o!+7w@0~ARKVPeh69q<F-uJW8xj%`*z<2JZk_h!yR-6&qPYTTZ
zY;I($$;f<5&$xHb%V!{dKF(*uvGKqN$W4kG)ObwzuRR==HHD}Hwoq162)bp95a0ul
zbyGScRY1b(r8VWBPDXXG<I>clgW{18kjki_d>M3jGFn|a3*^s~Bz!WQ;h!1F|Fx5i
z5^2eWI=ug}XfXT-c63<W_Wm2wxyt@~fzrG4#8otY2a=aKOMpoAuHp@BUqI2|F}++1
zAII1*x!Q*3<8Gt8TSJOa^dlkBNsdMWtP$3!haV=QCbUDjMm;*2Z+}TDgxbTrbg43?
zZnAM_=c_O81968xUo~~8GNrV9fkJmO3am8cP;#`UZdbQ`G|{WJy|jP=Rfe%6ssR%o
z7<ru_5rmFEP&tQSJXpEqvPEx)+BmNe{$Q?3)>P+yn@`f&GAXlkHarb2iP)QQPKHGI
zo6Gc)vjuEiAl|I%xmD-$?i?+S^Kc1<XVdl2yeQr;reg6p@I+TmdEtr>IXRo65p{%S
zdk+GCybt5TFV(3#<X!DH_5d$AOeYRjwf{RbZ`%(2em`jjgz3<&E&huHu`P}~c<02v
zZuooz<S$a1o#tfl;a&U4V^6=13wLb5$FqDCos#7+0Z=xu@PlOATY7N(Ab5KlTInPY
z9tdC-BcZ22tw#3vORb%ek$c^BHFec|u8|JM1unr=Oj<tgc0iMb4X0^H@NUF;<Z4I|
z_VC5y!16{rX`GgGno7hIexj9IvAvk(3TlyB1*hGh*h<ZcwJ)m2K<q^5WXiD*6q%_N
zVKZGS&Fk}!du}fCotcrtIYCQrYGmzhbH!G~=sD|W`5ArQeRaUE?IXFf)*|5@d*64Z
z(yZMQR^32et;yj32FzK36|>(1Ew00X6_fp7uYR`qwtq1wGqQ(a5v**K!4is(g|@tW
z`XMoc?OxNeT%5rXQ+)F$dUpY1jnp~Z2Fk8n!rglChe)i0a`<mm;!E+shyS`ywHF}y
z7*3*r>`@x_cb%Mv)VCDj-qYiZ#CHZ3TDA*a<|-ufIsv3Sq_>Fp(5NH7^wMg01O!%n
zAZ>dP_!bxiEGTx?D~u+ijg30rKM~ByYZmK%6ZTpuhP-5>4kH}tHs<e2-sLER%SN~J
zc$hkD;gtz_2^LfQQ=aC>bNVqwsQ7C!;g?6KaVH?VwSHaXX7B=z;ut;;WCkAP+hRg4
z!O+Y@H1$A>1(G3rXaHZRm_BURyx+(6>%UMhA2R>;7%|FVy|c%~Vq#=eX}oM|{RbXr
zQ!fJ+`5kOz(caNEVD~1y9U9^OfyF#4&NJONZJp_+i6*#ivOBbUC&fHJUUJk4nb_pf
zvxBE^Ow*^ZDg#n_;Fdv~MqLBi;RIGAgRuIjB?JDV<wCVU|FYgm&#o4r(tOzKu*p5S
zxVsoLO_uE3$44H+$UKHGEKq86gXmX~r8!VU1t>%Gz>Ln9uN>Y|K=@z1<y-i=rxnGT
z&%xPkGWQh=TefvlyISo=OX0#|db`x){A4j>&OzZsbi>00%4@RG>6&Yhz7g%ThyCPG
ze;-*nPBn~XH}`-wJ_Tmj7H{4Mp$D}%;O)89M`KrORpu-UwFXAvbyqXSfccvFAP+w)
z!qiVi^JK_$s9jiKsOYY~p<@&!*azqFk$HUa#)WrtRd|O{(~J+22>gwU9P$JnHN^|k
z|AeL8Aa-r3EB|m6cG%xRSK@5Qm9{b6^YQ=^n$ozZGG!nWE>Ad+pbSwc1yPwp`K0qX
z8Y_>iD^I&zpnDASbA+g~2V7|}ARuU2H_Jz(Y@&3pgY(6Wj*6_r8*hq^fp&anXd>!o
zzJYWsCcg{ur~%tRK2&uFW891I#)W;kg`cl=3vgpa^M9z|(a!qWvCwBGMt$)^azx$&
zF66|9KQH=<%s{wQH`(sQp%r{dIkG-5b{o|}tV2?mzlNm2;IjQ}XR%I!MJ%~d@r)3D
zpfJ6N4TgOOi$;+lCfS7;UvfEn34=Kc$OIENFMVwYIzr!SBr*=pipnH})u}f^By+&;
zvw7O(`;Vt=6?RQ%WT&?B8o;XBijt9pMvV3dTc_u8$w^|{M-$2S8vR%$9%V6^vwcW=
znqOw)eV9@&U-8%F*f@URt7qw1K5mFq;i{nFeL_wf3K!o@FX^3!65tRLKC<ggTv7%Q
zuEtA@=?!1w!`+MvKZ3H)W+=|U`A$dHHZp`z{R>#7;v$apSTWpH04hjTZE^KW+nE(q
zu7$a+p6MZthPsJEZg;{1;KAvvn9s)<huc7VBZ~A_;1$@ED80_dF@j)aeM(nlK29K>
z{>U0pq{4JKUr3DYhV3|)W=G!~VDvs0+>e7G1Fe7H1NV8WZYo<FoQo{JyMfIKRyins
zAi?914jfe7dxqr0_c-1?XX0$JNf#q-+egXR*O*NdIuVr#==n2F=W0l1JCJJ2Lj9$2
zYk}gr<6<E5%7>`NE?B(E-J~5$8`VLXU|coP2dRH15Lalg64Tiy*#OQ#!x&j`?C*e3
zr^|OqBLN;s-4zSIa<LO?pyqInsS}FDeD?;chf6@<tQR(jGqVGR)fSk>+=pKv8_woh
z>Ubi(vXLBXVx>)LMa!xu3c=c~o%zSb1PwY$408&cp@mA8);Qy1A50{_AVZH93s!hl
zUDDejUB$PqS6R)A7Xa}M0&!LnZII|sU|qD`kJ8*n2bV1%$7Dv$aagI~L+M}Aw;!qQ
zL)X*3gHj)LnP9!^Chwr$J3I)#6UEAHzPZ^<cHW^69z2k#B*tOI#@_W33DHYa@QxdK
zcl{JlZMw|l3)<_4zv}*~acX!Fbu)u1ntoClW&QNv1mo<`Y|8xLJE%yn)}J7Pv<8O2
zw*9-E7GC0yZb9w5;5R=lRKPsW$L8{0i5NEn=ZGQ3GJrA`jiim>{@TqS*LldzgflB0
zf{)e7fs*)cw?6K-tP`DfPys|L%Dl``=}dN1Yg(9{WOKr)N0SjLl3pGE$WX-Q1&%(c
zIJ=<C_e~2OtZ6bO9Z%~)R~qaG@*qXub7`cWu#fhr-YSCXQ}Zyj()&PjS+D6F+8R{d
z2*cR%-don<Mq$=I<P>qMo1Dwvw`7Yuy27g@s21o4%4s_JYdS6En+D5+C9{v3NT%U+
z&q3+4i8B8Q8Y0gKklXh;DHc2hpFhwoK3(3!uO}MK8(zroD_<EF6?o_DTQuY=+npc=
zps#E=jLxmQt`3|b|1vK(0C7Oj-pJ6ZJ9(M0E}aepGI_p+71`VJwM)aJu6KIlqPrga
z<NT7^py+=VtkHc`Pz;v9;8Q>B4kMTL#!uI46v&?yGd4}YUSc;rlcnR8tYM9+MoqI0
z3Yps%cx&0NOihw_M_i?&+nwOMgidXTZ}DP>;xo2GJq(*n0*$&A<}RW4hvy!bj@19e
zF8GGAI@s#gjiOU^UR7MNwj83B-|E__-_TRKt4#Rk5Y}Gux_b-PpU;nhW@pJpLUFd!
zJI!$werJ^2`b11jFFRpBKOHB(%U9#1T;Ke@h=+~bz6R~S%WKe1iM>TT04Dp$A|4vp
z(8~s)x5_r+3N=Oq(hAkBionR>OAVt-Y17zxRl?^EPw^p)1^%Isv{cA1paaTRh<${1
z<R64*UajX)fz6X8R{5CQC0-aX+z*$+`IgE7O|5_piXU2b!QV8xLy}z5<s`!)Hw1l+
z*OdA?y_DBWD!q(LFRAp>mDU4>97S!fOt27Q?EVXD#rXH`wTXmeEhyZ8htb2~u%Wx_
zBdqZJmpKOH3Ja!}K|$<wUBRV7TwVilsSy1<>;^Y7X^GySZCk19ha6Z<%IGTAV)0qs
zXzLm>`Bt2PDd$vnoP0<aXuH*`CKGLSG(RnDJE!8g20)NUGk`#Hr*kjXu9#>hxZgNI
zaI19TKx9jB2rP+@PabtS8hFmpjZ4z=xKOQqIAp^#qxHFNC^W&q9v8#tyg>yYNlIh0
zt2o|l+ehqxGj;E+%zUzEB|iQ{Dq}%kpomkaJCmA=$)u_<;csYB^8|=M66O?hWQ(Ti
zmw7-g@NtuFg89O=P3^Ok4hV&z$GSA+NL==}r+Zx1tNIVI_)#FI!YOKho=tt>(PBnO
z;G|Fo&ne!IC&)>TCv8uoscVkYO>#_H*B6NL=ss(c?uA6R!Iyn6)8YWph?!srJ=dxo
zy?*MfKZ~>Mc$Sr??Lc=EEP6#v8j3^lG7Gt?$DSK$+qg1^lWQAQQ9VXlfg<QrAXR8(
z8FbUl-8wTT9UCzMBOdoA#YNlZ7eGz+S(?ktY(>+;JI7z#2ny5da3(k~J1x0RG{tCV
zM5?<ZsjOBYglMb^kKg_>MSG5NmIdvsC$#{k?5yZPsV3Ai3nD?eHB-XIMjrH%VrEEF
zHq^V0n{tV~O(|e~r+V?rpXbFq9g}&y-K>=hUv^JsM=n*nJDUuRTZq~SbgEM*NPNcy
zGNf(=8rLBio_gTw6vr+)m6xOwSiGc78E0n231DE!_r9GFZa4^;8yREM-89c5rEe#U
z3@@=|sRG4!Riu<L@f9`A60OYu17@MWAEI48XCo7~-^9<HZwac9hc#NiI6FxP@=-Fz
z1Zwbs+!WJE!WW^vcmRk29vLF+JKC)jH!k7Plw5@r0cRjQUQj#`d>z#1ow<Uwv~=lO
z0r3cSYU7R!w{Z0i;riAw5)NM2wrr;ZhEf4*dgrOp?QnDN8uHh`p|Jyj4#tqSD7?Tb
z&VRKweI*Y`7+6~fV#v-_>ae8L<OQH9L9215u>ecJ*h?ZRWcsa@EDhyB#8xkcn+J9>
zf|eA?+P^a<LcwO!#f*w4jy&LpI^5n3Bn*%Pba;X;_17QtsfoYwagIdQD+U{V;yd9h
zu~gZRzZ1H%3<_!}DF8D-&ruPS%+m6FXpadHu)RSfb4KfL<Ta{s#1>&tt$s+4Mk7Od
z*B_^o_YaS*gh_5x0MRhg(MZR@Rt!PVC$5TYx`7-t3sdpPh1B72)iAPQ(4+_`jlVYY
zP0NE^hOL^hSEq#riqWgWO{hoH72Wj)EcIR87u7#?49G+q!~8Nnch>6`Nx!w!K{s+B
zXRSvA>Q*Ht+lG%CIXn;ogU^PQTaj&+jTXZU<i6pMqH2=N=X6T?w)fVFGu>n>I$Q;E
ztSWoBpV7qdt$2f6+!TuJQ|Hr2r)$fr&3&lRgT$zWsqX-NejA#X0Oqrx)4GGLo9bq<
ze1%XRWWT8wv{kx-6W3&zjoY0%6xYTNj{-ES6-Yd;SH+Ub3W-cf5LjuWs)zNKhV8Rg
z5g}O>HfOU7V*<g}sZK;6qFR^DFOq+I`}Xw@Z=Sw=3vH89L%T|I_J{5tHop+pm-ma=
z`*F58gyX>s^G)69?a&8}ZFmBb@?t<i4Q<hXn`P-pOnutJPO`JLb0_)t#ryYZ@;4}!
zjZ?WIB@NMtbR&$+-#<S{UVz*@DYG~x5y!hYk32Y&+X;p;_((+fO8pAP`5DD|>?Y%G
zavG8yr)W6GPf!8}?OK`c4B|EbSX&y$Fmb(m_d0ZkvI9T3QCEAgGhJ1C)70MH+KOvW
zu5Ei|(~~ut=D2Cxfok*9)y-p<qrU5epQY13VluN2TYW0fPqv|#{RG27^piW?<ZeH?
z+fDBElY8Cd%YO1@H~FfceAP|v_mlhG<m-O&bvJp0;m^9sx9|sQKZZY0{R#Ym`cL5x
z0C)y}07A+o2V8Q<B}ZH`<C4c%66Hwl;3*ln9)fhy+S=Z^bNAktU)}%u(YKGEJbl(W
z@}+PL14I`ne>h0~oNQe_GoN?t=eB&`BLB#{N9ZeAS1bF6)@nypIL(#5?6?|vNzo+G
zKM1R3|7f50I5j!_Jn=sV{%0ECG4$j$-XLLoR$0^YbS5bcG5D%E7U74P<o%-Cs`>12
zOKi*ktraj>st@n)A_vfidm-JA&KG^eRv00n$RWbsJ~~2d`pTRLPO7DLs-*_iQg^DQ
z(!TE*Ui7=NccpAXVB)ieiDItRzp|tJ`kGOO<NM|toTG3!;dsL_RLb8C$`5S$dv)c%
z49c51_!`Yte7UdcD&Idk>NLzsY#ut(<QyV7jHjn5+4I1blTdcw&?-Glj@v0hrD)U^
zF~w^4+~DOg<%S`w$M+9$C-z~#*-Mji^)v&dL_=KO6#U~ve+=*kbqcox_DTKEtODLp
zuJ3+$`u5FJXnynmv`@=%`talF#o*&<dEWWum-a8elwY(DH*WW`Uw#=K-R`s>_D9)C
z=iwoI=pNm+pZ-+$4$9ZOZvUzCu=5aM|ME-ckDI~ll;fS*$zakx?ItDirZ_4IM%r>5
z4450{<{SqhD{(O<T}tKBo*+%axTaeeY-M|g7HEveJqN~e#P{$8DCpPl=RGnA3PWy}
z;PAMOEa13(pZ>kuIf{4)%$x21dC>pbu6;>e`;yHx(McA1R@V0pxQOrBR@||B)TKN0
z?{>9g7X#O^3yQjE<LsTFpM{-!;3^<inD~^AI9@=%2Z6IZg{g#*@Fx{JFEIXAE)N6$
za1{oq<5+Ze!a#J;3se(g052Hu1xEDQ4ZhsoOD-yg+wd(O^djRM_*pkOfk6Y0>>8g>
z(s2=uuzsK}u;2;Bq=bP{fD3s12FCF)`4aZhR%bT|mU+?$1r;PS0s=60Dt(6bH<A<m
zemCkrjA#c|r5&P?hKdCuW8-uox9rUTQXB#Hgua~Ad>PP}LCu#aDxb`s-DgptznT)L
zs6@*U7#KP0Zp!#6bOUXVk;5vzTee=kc=;_J%DJAT@a%%u04Vc5gc5*tJL1B;!Ik^`
z*0(D)PZ7hL@WGaWz4zr7i`A9oIy^;5yUX!@;O{uzW~d9Bw2whTBk;p0{u4LD{wtaa
zEOnOy#4$kffZB)K^zY7*``E{i0u<kMD4#2c%$*7eqHP>eP~-nFY3ok!CR(VTT13Pm
zgdqflU|h)3*O0=95=Q+v5BhQ5sczu*X*7qYKrZjl3f*Da34f~9V&PAa78aNpUN5`M
zhV<RxWNP*lKA(FFkF&;Tg@n8yk#G`X@8pWO3o;2>`N65?HWoqLoVbVB;6v~ezwR8_
zZ8Sxh9NykJ;=_ymw8Nk7+E3i0ZINGLnY;vhj&1m*odT7g?o@Kvn9AjORN1d-P355A
zxVB(593DuH=ZN$Cbb?RY`ZU0&9eo0sE;Xk8=3qR>Yua;kB{(rM70#%qpw#{;$@Pp@
z`13YZ;ZL^L{0hnG9@UY@6MEd%M`D`Lzv>2zBs{{Q^F|!<(oNJ|j~S_U!iQeN<0{gL
znB?+%#UYg)dm@&q4EYXaz4jkJoL+U4KYl2${)B(V{D+RxaGtvAyi?&3i`SIyysI38
z^;~cXg6}Auy(eG#<Ui5Uos7@v@n^I}XE*!g@9=vtUhu<D@NhEY-#^0dvuu<v&iMHU
zbRt0SAby0?ax0VH2k^TX^Y4B9Eg-(dc2fTR7`p(qPxuke)h+B$$&YXFal*g<1AfD-
z{bNz&@)b_st<#);zebn^|9%C(Q)%}l8T0e+?{V<*`vv@7X5+C`d4}DVhW>`$8>jsH
zuLx@PUK;!kOG(F{OHZZa{|=8Ar!BU(7h@JoalrZq>Qz3>{+>ax<E`WS$Hy&+Fgi!i
z&5NgV`jTdY(O2^2ABz-U9lN6N;w+uL!Gd4G+tFQl|IfwG4Am7KWcdlfyLWtVG?aIF
z`Huy?JkIV8rS4#y4&TGOE%!M2TQ+)iR-ms3mK+R6f)89(AI|dwjGo-OpY9B@9jX2L
z0$nH4dpqflOwwR68!s=4Vnj1PxPM;;H%z~u6U2MRUuUVb{<m~C|9MgB__p+QF+50V
zdPX~6e!VU0H{5?k9s26{-j=?ZU@ntvMu5M(`}MtS<i3>o_&v|&eVvfuEI%tT#C2;l
z+`fB9-!9WhFzuHF?*2fY<oo@BdvkK|{p2+c5Qg{VmcIQ7eY#rd*Z5y8`13RBm<|kH
zRLZ<RP2cATYc%-kONDioo;*WG3TSm}%e8xupJxp6-n}meJKEiS&UgSLxIc6)?GK+~
z55NBU&dyK<dinE6Ai7c|E<B?6*I$46RjMz)<3{cu4~F-(ksoMM?%uyMa^3lXN4#@<
z7yhg7c!a^b|H#NWYP2oSib-F?yo~Pf%h99h^bN1q_T8`j%kuq_8XmaS8Rci(?w4QV
zf89%NICxo%P6Ri$v#+-lz;XWbV3yM+80_GG<n?&}m2S%8<Mddj=(zZ~od5I)CuwKr
z{=k)9{H@G+w{AJeC+VAVuwM{<;eX}rX;ID<@_kPTP7Zj-jlR<5aCkLJVN1zN9_;-s
z{I3+_)p4r`&o3?ztwzVkiWEE>w$^De$(G+=DBW;x=Q{6SemxKx@diU_6S53P_lEa|
z?(GSV?JlCEOhbOYzm&bB5EY+~x3VwqOVx3D{_Oi1;@Owkm&d7n`S<da0c;)L)Att>
z9^zNSV~5Z$0a1rfkB<x4tErNy|D**@N2B}Mm-0p^g&F*R$|lYX$^1{AZkjq+?{p+%
z`cIzm(H;D+7N!1ty_EqTxmT4^I+KGhhl1<>sT&MByrmoLKXrrcYz=l&_fjzZ{#V0H
zr|3Uri+%Og{rg{kt?#(y;9WU?H0FJ>HN2|~?>~8H@SjXNJ<iWE!CC);`vPQQbVp`j
z{N@?Y$(By3qem9q&(ha4HpD~)_@m`nUw%0p>G*!6?&+faDCB97-n*yM_v3Uin<Df6
z`p#EdBOx+B>RjC!4(@y<v-%?wqpt>E-dDln$8tJ*bHYWBfx61u|6rmu+EyC)BM~3Q
z?XR})-4~oY%SRJr?My7b-v0V48PD09`S9oTj5+JEuFF|o&X=!C<*k|Y>#P_K)AEhH
z9SH16dY=ATIMOo0%!&GeH>t=@BMjS)Wk$#MbmEcZ%SP5I##f_n2ROfj``M1no@WB-
zJuOM^er76j*T3bdAEhwM(#rHz=4elrW%qT_@I7Nb@Pe=JyO%Vr=`j?|+&e$9z{s|g
zgiq6Hx=b&gPI*#}M=~kX@BTJj93S(Hqyxd@X*OFBmfXL0N03bS)NpGkC@~!`a6Lw&
zbZaCtIV~=}p9%hF4rvviaO!lDe;#D8M*8K;FYnyZJtXtwQTcVb9Lx$5aF7owCw#qp
z#jJ4q%dd6eOCUclMHsq2xO;C~M(=iidVlMy9W6T<Ev4-7-SqC4(wrj-+5N%2uk>Ac
z3KA>t;(I#TW&Uh}dokU*x3e?ScbG#D=WYxCD=!U6$z=9;>wKBsa|Bdr49t-dHzhIV
zRXHgxlr;)=*ewTAnY>g=boa~qJIYYzM0`i^tQ=vUy%MyR=cnZyR|KSs<B=fRyuiy~
z=1q6*%9QYqhE*O(O_e49ZFh8r{{6c-?N|^%WhFdkck~}$m1o6!6`Pg+II5|L@Zv%?
zK}sZ&1%4AuXG(D_ta^jrk=IC&#l0p2x*Qqo;c;G53=VWg3EWM7?V|p<fd5b4@78H@
zgPiGBr(2-bd-7h=s{7>b1mIT&@GAhA2M~TW5E4?H)Az$)y{YJg0r%L1HA6Ky^!o7q
zQDgvt#mK4b`DCucKP)h1`}UVwR44Fo@}5#Sy{E{pU-JFrGt}I}^L_Kkzm6)(4F#mf
zW1K!}(=H*ti1k#YDxi{X-1I~q6jK|ygkJaNvvg9zurl%$JLIcv{NGWXeu3)XjaP48
zyucF-=c7CdBbxvD&qg_u2FjT<P|l>Gaz;&7_=5Bye7<w!Z`H0sRl%FTeyjIRvy(yk
z(B3xrYodnRqlVXd-L$#(eG@d@tSRI!uAwOub@KZ9!mn6gIE&1X&RL!Jl_EE55$~%O
z@f<aXXp$hd5Y`kz(T^dBit0o)hx9byr+c#6JO;qvHfkKDiJ3MrbHF<elq-H$i=Sxm
zlc@N>7I$jUffgS`#VabonMb)3k8gwPG=V3BNb}~*WH1?&s3${J7%9UL1KWT6aNe7d
zg6q6@B7X;0wF)s(iJ_*jz77|QOho2|+B2ME9QCc<*4CZvJ6rcLbSPfS@ASULU<xkf
z#yJqC-WD0I-0fh2-WE*g23920(+qvZSq%5?*4=vqb+Zb!%@#vjVhe*my3~T*6%<Bv
zTA;S94Wr!dl47!(%)@&qO7&O3YQpqjvED359(YpueiD2iRK5?I&;ixv^P-LEW6+kY
zZL95IvvkYW>3FP>8YlHNPN>F-uQ6~n2K6-tRAb<401i^0Q!P)$&_$MCcLJK{ruM8D
zeYgJt7dOXLj_}T=R}VakIG1&#5~dW_>_cIllYPQ1{(4)BeZh@%HAf)e1zw)?lkJWH
zXmsBuoi^*g5zy9=dvzkOw*9MtyxKW3_IUnEj567uW1{(DUc~$IVdOnZh46Om!xdc`
z_30YM!ozjpI_-QiUCfQfAL-|Z8ChVR(7yxvHzgkA9d^U}HwF?|`Oqt8-@KRHF*1m@
zL1pN&?nEE(&TgO&J4a!|^{@lbOq=!y6B)>zqpAa2{e=t9GS%uf%)$1RUs!EM%%(!&
zr8494qfS-{vRw16(X0}fE#R`1=7QTgv8^HJ)yHIZS@B%8t8V7hnS2(<T(fF=Oy%lq
zayh%P=5w^g{6(M-NEak^j8LP3omJ~94}v`|Vi3-BO$G{^!Apw%UAQV?V}S`d8F!oq
z_P*!om@*vPx^?cC;{=C_AKLW>xb!V7js(M`51biPbd6i<>2o_&LPBM&wFcp)bEUL~
z+1ew|<&!};?~>46k<7^iD@KK3k6bz5^T=vSAbJa~)ewETYazND!)qYAa@RpT%P-qx
zirh^uGLF?`_RBEZ9^!GetrqZXNfUg-n`WvOe8k;xu@jX=Zo-WcmS14HU$ocg%iE~<
zg`@ypK%u|bo(BG>{>(DmCayXJ<{H<;4!7GEP?>WtZD6+H3yl7SrbsDDIPGotMI|~N
zic3NQ)s};Fv6G0Ek!gFI7$2VOK!Al-zTj84vGf<%lbNv(ks2q}8Yia4NwvnHT4P{p
z45~G7I;LC_#f~=id)ndRY3M%9yJEOq?`UzFm*z-fq&>lz)#zgPovrNNcLi1W_q?-4
zCzxo&=#R$vM9bScD6_NK$}z2y1IOLc&hE-4GdMTT+Exk+E#e$RZ+!-^#Vn1gt%83t
z%a#-iqrDbzIRcV@r=$mm<}f$nR__jmT!W_*db;<uJPzn_+XdU<3VTv?Ps&i1g;gCb
zrs+QxpE?n@ub+rXc0vyR)x&NKmnF^}I_JReK<L!BCxP6lZwIS7K$ZvDBpRTI;s$GX
zR3u*o42>GrgSBxzuri&a?^kv$xb3yNmfZy28r>7q8gEzQUKvo%gr*iqc>JMg%Wt#t
zERf<VyWL4MHtppH{@6vC0sonHJva<bD;_>wCqQ*Q3-0Rqrt6t#SIwEaP6X|$c@#z@
zKkFh9!GEA7CxM|c)1a%zvaXYDyIz9m$|QApAJZw&1i7J6Xk?qf#i%~eb6&ot5QdXi
zv%g}R&}=f-oLWA&x68=>IGvoQS|j-=&sx!(HC;9$7J4Q5bDd-x$jDT#r>V)?@ya{d
z_K=~3{W+rS=uL&RlSi$Zpx^2?SepoyW=|(21lEaP?5<T^I^2n#8!P)nL-^~XOW}>b
zKadK8Q;(5uLVgbX&(!Av=Q@WP<}>_zwDPMdg&oI^tsZT-{~8gkqv>tXg3)bKmkg<P
zN#J<!9p)x@{M(jh1(@}hs1}HXK-VAZRa<w$f}}udL>Et8&rxf%weJaI0fye`nKOn9
zlH~#y4LF^_Ve1lO7ccRj0i}rgDId)#e-L(NfjLlG!1hW^jp5y~X!*H56CGFmv3pF1
z?@x$!@vEa+x<nzFANeSP5)HR4bXYGi^pRp1w44L4PtYP^sog0?b0dpWG`hNNZE4Py
zw4`7SEp(iGwV40M0^<S8M~r?QLqRHAeLF6SY4t5$`c>Wmt%~28)Cw{*V7$XwKFDgv
z_x4x<B!n?0-V*bwW?XrTpr(@Oj4rCkH-r+d-6HZld94vjkbc__kJU>z{BSJxhSiRT
zYZ7G5K`b%hEO;UmW%RAjRnnI#BI-*C!PY7q{!kA{Dp^QtO?g>6=XOa}Oafh`<q;ST
zuFwwyhzM31wVg-RyIWhazOJhbvZMqJYlCV6RG#9Ecoj?-d!({{elxVpongxaA2IH8
z5~4Y(E=wn29$P^`6Vq>u2ZWtW@-sBw1^PB#)-@B2>ogx_pExeMt^Ykn<;V?&lTK&h
zM<h3L@A8pHjd$7avuvt?k~CPRM!d!d2KfFWT~hvr#mQ+Ht7_FW*@Q#D4V<s+WIle3
ziGzHAK9?8qIehEAq}}uk6Ist6NR(yE;_UbKxWEIe&lw_tp&$0EuwL;eq4FA7de8kL
z9lp8l8Db|nl_R$TN5_BPfAzA*ZDITYsp>CUkEtb&qwfaFff)pvPt0@66?THFt&Ve3
z8H0@1jnnBWU0bDTtLp()wb<@clR(4;xb^k~ZHZK9`{YTNrt25c530vaW22R1IUnR2
zWJRP+lZ8er*|DssiPIR>92Y0sTPv!V+&Vsz=1VkNm||MPd6AqJ<B^|jjsr5vkB>95
zfsmlb$CSrI@?cI}bqYSwJIE!fqkxb|3v!|AA&WUZ_aXsE&m2Bsqbw1R(?K>arNCb#
zv0HsRJ(rv_iIb!HEUGZVQC?0#B+_y|wlAW`NB)Dci#Qe=G+(K->5e01Ah#OHl`p@X
zcn^c*(5KoCHt@w}q9xFc88)m>P>Td=)$C9{xqRr>VU6jLD&hQKeRA6K>E46M8f0$C
zMqy3P)D_g47R=%aK`{HR15Q;k?0i0PpGwY}Rqarzagp6J<mKF99ePCo2N-h35#OzF
zA+Kb=W9&T;4gh)6Yr1CER;H@$N{KF{%RLBVeL6^S7&qxqYpb=3>}!HC-I;ZdvLUdf
zaY80lyvMd2AF^5jA?2dV<CuGzO@P0di?m5G*BGlV#$-00qq^30l6rCgz)+b%DUmKt
zGg=Z%kc-*tFsdSj7~IiCD&35+J{pjtX9L+$F@NW}ZKePkBd#o~oh9WNK67j#csyO4
zWGayEQY_zci08cg7;sz16JAT4rI(1>_J*E*q=S-sa=3NGq@W`g_x?-JQ;dix1;cRa
z+QK)<cD6yGDD({sF1x*bFSu0JUShgQ-}zQu_&{9^ShwK<b^1^6g~c*PuiXY*IC&xf
zh|K$86WorEJqWY@6RxTVND_ZslC#3Oa#jG##l68SruY4$zrX$Q(Tg9RcKu3gA4%9a
zqw6NvMi}BJ_pRiUV~pdsq#%|QRc-;xy9AE%vX{I@n*(eleMuO821U;n7`K)<_LKYs
zqlDsz^s@TFwQ-RH!kne=nTm@V$BP~)=w0-Z{emv2vlI|IlVmH{XkKFT*gZt9G|_{L
zDB83Y*V?>zmS4iIz^JAvIX(ly*x8D9Y!vGFiG1AS=GwYaNcp$bJSYe@u(7Q%2#(>f
zJo7cW(3plFu&sCj@Pi^;w|++ZrbpfSxwS>qd?K_Hk><Kgca-AH4NLJI3?wuWzzj;)
z%7Dz?Rxvo3k#v^NPtR_~<V>~yWpvjwIx}6LkJ;5&fN-o+VML|meeWTvA+f~m2~^fV
z2g%6U)NQK)mfI>o`&`jZ$ETLS9v*Jf<<OljhJwPX+xL!oloNgg(i-=J3_N&QG1kF-
z%>HUPLrqY<iWJ3xw>e>2)5O)@%eIX6ol`o6@eNio29cOIlV_M`I7=|&8_E-Bn0$7`
z1Ql=@Weh2JfT<`*I3I9=c|wZge1=yJ7lj}i)Axa}XN@sD!BLN?x+vRYk-~8OJ3#Ar
zad(8P0)yoj%4UHQMlZC4a%`a~(C_ERNXI#`t`hxm4oqODcTXh}>Is}0>*gX9umIE~
z;|+v35;0D+LEEOg8i#+V*E2Y0u+1b`1VRj)g=C@=&8b)sxL}O6fGQ_ksu|}LsUFQr
z+}=zQ;bc0=Br>L=(5f?8n883J_I>ck9o?h_3i_2NShPlnQ?D{Z0S=VSPB6<Bj{4P1
z)YvyW4>zd7eMZ+X14Y?$y2lzgFVZETN)wPVe_aWI5_B}wCyRu*c9f+~a!O~$8)P`k
z@S*}k@ppEk;;f3D&iPuQzCtC{uuCj6DMnfFLAl0z%2s69iPVS#BVum2VKIfa01~A<
zx4snq(cd#ex!5~Gd|%)XrEtcq9}?=498@$kCy?ujxUhIH7m&jzyUFd_d30l1b#}p)
zQ5OY&4&NUUOVQu86Ib1Y()aLI9hFqGq5xbjaUukl%W587`dn{&DDY`BwB3{%s2vBk
z(y7`?tyV{C#zf;^kr^c$U6&ihrEjcQn7%a_-A&%&p2}h8hn7Y@!9bkcL<&T=Xn6c0
zKZC6<{kON>X$8go9o%(Ahg#_0zWnmb;EOv@IS(-Xke%nljIwsU!Cs@~9455ME;$p0
z{FW0uaHTm?T~xI`iE4)FUouXkSZ$CFTXfB+qDt$mfEC9uuU?PN?|`70SHm&z0`ojC
z7Q<6c{29F@So|u8XNx(iZG6IG$$I_EA6nmK<MRx7Q<}WY78zc4x;OanXqIC<5A>ES
zH%gGBj(_=sYm_f=ws-ssPO#l#ImGu4ZwtQ5I9=y<&zHZ*G=(Rnbv9uJsoSSWcPkS~
zZ@;bJQhPYR^k)`a!tlCUk3<m`cB-HQyjvTruT=$kQ((gi7!p$-ajMDIWh?vyk^mnT
z?HU6Sp`}2ZzS3X{6)%CXMuGfA;(k7Hw?cFYTeB=Ekk8@&k4j9mr@P052<Ic{<U3iu
zIDt|zc|2x)Q2Yhm5i0@5`OA25l259;3dS~t8N-P0)k>wP;%cc8eXIgRN&E$rtpSIr
zGak_esN_m5Uri2*X>A4|cN=R-XRxB2z}eH%)oBVu*R3)Fv5}~Vemi8YbY$av13#?e
zgpOfh0X`aq#n$Om(3?%Mgy-hsW*kQ}ZT+qTcgt|?=mQSdJP9fZUJua8jO)$m8=(0a
zpOWw>Fmku?l)X}QVDLMgP$F&yx`}0b0)mvpK-nm{04s}+7h_cy7bsk$GjVEIV87^i
z<|JP+bw-`9Cfl1WCYYvN8+d-~H85~QD;99Nfg>n%B*#RZ_)TgE1Sx~Zt~u%hv*Tlw
z=#p=j+E1z_;N2)uX2C`{IT46IDTqDk5YB}-nFZx4O2-!|NT`b`-SuE(c7`Ibo?fPC
z`Oyzv{xWxi#pbhiOSyF~oek>@eNbxas*#5#X-Lr6IZH>pTCr3^hl_Ahc?ld9Vg(!8
z0GPhj?x}=!3(*Ujuq<J6fk@G7s7O{Wui1KJ$xriBm_#6KvR(vf#CK$RP3VuG)K^?F
z?JcVPn;K(;;$9vI>N+s9Owi8TveflLVLv^aLWe~))&^-A@qlm&#Aj5Fxk+8w89abf
zUj*4{22{1juS%I!*R$n{esMH@LKoS`2(fF2-Zf1}M;@xe2N~cK&GgS1m3pX6wM>z)
zu4ELV2>>bKE#6OJUma(X0~IgqYquzE)5&gd6ZA-7`iaU*hZw5hAd8J5UL-JS=qky9
zvbG*te!xQD?&TF|%NxqRnvofSHhyRZa}*e;sI{W+^C1q>2D`qP<zg;|jM-i5bj`>P
ze4p!vmX<i{(4kH47g8O(rAQ~qs1T%NI!i-!#>TjBWOw6;T(&RnVla-3^pd`tHW)at
zk4~I8$z3kW-C{69yVbIS>w8s{I`r5YB^X23K~V#-(L|?`P);~pc=>?7sSH$Z4?4|R
z+tigU&@ORn3M5ExX66OiYIu9^{cnQlP_yiYG-=hmhb)X$&b9i&WGuvj9M+twVAGw?
zm3G5fj8gLrc8?ScgY)l{Kjrh&cB`1Q*a_QOP}Uhr@)1-6j!~SN8uLJNo@nXKj~pBL
zt*>Q!c)cknPEa>FY|ssMlR9OeybTn1N0ODK*8VoCzuNegb%(~haWOAmr=t<sxS35k
z)py=%6YXWU9B$6|9P3{UiuoLE3;mmMc0BJJqk+J9O|+Gy^bOUMthA4`lHrhp$yq&M
zI`kMzW44hA##$U7ml(*$uBRlo4_^*4IFUV?|7SKU{0C9B%M~GBeo^mWK0y3QXT;wz
z=IAnM50+CPA3$seOS~7|#H(A99rb+dKx`!MP>=Jj&$r4YULN2Jl2t*(1!60QR=IY;
ztA!F|Zz{l<bVe2$6$-$4dxr=fwPV4-R85BI+yMMbnPqhua7cCZYq`k^efTj2(3^Mf
z-TTs1g=2S?-05xg)V%czx!R@~E76V<yVi1ZI~?azw_w%jegv4xTHqOqVSu>Isd08W
zaV4hU8ZnY#%yJr_y<1=1EdtAU?XFc$;G9D`9^&G#QA#bFkIbH_!#36pk)1xKh;c>X
zsQqd}6ZZ&2?WhWVrL7XZ$C-LTN@z?XW8X>x?Y9*LjI+(rZUps6q+eN&Pfc2<Zu4BZ
zsbU?`wKFnGF&3jqkccl{31nCiuRfD$i`zjCM7wUD&&MMF(9eD#-AU_C0IKvV+|+Cv
z#4;0E*|~|zE-}nkD=Y~Va+9f`l22#aUZJK!Pw(0UCqh8))>ucoQL?dLh;(yC46g^v
zCvU|5!jfay5B~K%^FE)=aLL2$mpH`z`K)-asJd12Nsy&wjQDk=ce<;W92w94d$X~_
z*RQK^Xy^_ptZ4fa8V-<27#mcRB||9|6L8oA6l4ka4ERD$+m>xMyCmYW?LzVjl?;40
zO~<QJ&w(OiI(ebNsMAd71ZU;Lm6`fqqc`aoq(}-*i&BQ4zu~MX%SZB24bGji88vm-
zanuEmW{5!Hq7CG|t_$5DP?#wH&sOiNd!1ILikooNRbSP6N{AYP?+}GhC*F<7=ni(9
z>miw}RI?sPt15H3Pp(d6VMU)CTudT4qRFFYT?uxO0sdqy%3W3cnjRxkbV3&%MZn0j
zhXUF;47yGr=2?0I<TV0=OZjcnM<mCsYrSw-zg+KuBh$AQ2!~c5)^vx8aJbblZ|hD`
z1g%>yxw56SW7u65`;5^5*`aSzW8n=w)qKr|x5qwPBGy3xn5AI6jhhu{=u%Ueo9(jU
z#8W)u#O+2l0ncAPd;aqI!Oz|jV5POaPt|PiOq~q=HZPwPXZwpO-?Fwl{X~3c0;dGI
zalU{lC@y$zokp-_{EkP(aDh6>xJZ0wd|j{L9Q~S{e_j@&tUW5uUeblocL(3UVE0hD
z#OTz#<BsDUzl)?O0D4mg(>a<*85jcpGS1MUSM&a93S)m$6!Rm0&+b}KIKY{F!A=jO
zc2_RgebGwa<9Sks1`L0L1SULaY@BjD7ExuBg7geTA>fdJ2gruf6L=4Y-ojZk)y=w1
z6p57Q`}A@j??Bsh6Z)fdtW7?8r)0Mh(&w%WNY%E^8P_ia_4N6KuAQAr;BIWr;99M>
zX$XMW@SnaSn&5SUtmpn4-$K4RZnypfFmF+Snb36HPabCN%Ku54*AX1*$m!NaI*Pi{
z4qs5}7L4LD2@&ovoTQ`O<^W((1AYiKj`Ts{Fhn8jA@m?cg)l8E_EoM7g7rg}>-~Ky
z@+2FMQ%!#S0Gp8tz2ag5>_m3A8XWzYXBWM=8EvDRcx#~=Uu-QKqf(4S4g(_}skqG!
zc0^~F^Fk@CD0HJ*)3Vnz$nNB0&FM^#tD@+Rzfk8v&eFEqucfj!Op8<2&R|z93e*#<
zTpS<gmk-U*9LotJF|yq|-t8idaAj!q83tkn|9F_RHc(YAk9{@x4DFoQtm$qT!`ICQ
z?j@ZQZ{5V*ID{`py4jwMi&VB7#+_Y~*B`f!V6+!UWbnFW=^ldW5dp(MHvEY5ivef&
zY371S$qONJt~e%*cBOfhc7sfg_#s^BMVav-<24Pked)dQmi{NJZ38?6a!0KAfHk_Z
z7usaMi(^~j50dHHw?tKqIi%b2TPVBkuU_dnLY?tkU@$i%c3@5AGzy4Yq#BbsiJ2e;
zD1HSX9*qIUa)9PF`tUv4=+J|tRKc1xY?Pu-2&!BLG&}LLrx^i@OD8u-4k?4sWZgs7
z3hfN%#&@UFlW#T~Qn3IsjD@uxiWmG-?SCKY3rzdePeAMguzp|$+6Pu@{JksM4G^35
zw25jR+%PZ}j6mn|n&Z1mKp4laELOE+@ZAJtUd9@?(GZ@L)A@66ey&NmrDTBa&v<>1
zxP6N{HJ}@h$LRI*2Cq5vuHn)RsyC#sf2UjCA#XC%Xi(^9Ed*Q3FQl~{2{L@)By_RF
zRV=0a6>Zc&Vk8xPtEB0IQNR%-pMbalXY*NxzCGt;SM1Wfqee0fHo`gKo!JbWSKRIe
zRs;s%)%U<v-)!JHZ=@IDJ~=0bsN2KK;n!^(EGQ%#zS=_oZymF1{D#q;fr!+aP;Xi&
zW>7C;ON`7RrZ9cMX~v0eGF;41rig9&5XGr?c2|i6P~n^mD~RMvN5^jo6Q~+c+spm@
zpJdzQ51t$Fwq?`T@foY+Mr!$F7mv7n600_NO+~LNAT|;JFsLa*49OwQV>hV|^^!L-
z@i*?ha-}xz1Ry-pH+pSrE~_<}LB$o}txBXwNj^~TF_sl_w{WEpC*0&aTwt!bVH)B$
zw_OwTtVu7KYue)S%9lU&fg5X5_+5$v8Aq*aV=7LWCXBYoZGWL;i61wcFj2!RFGHA1
zfVuQArGpNrJU2tF55`QWO}2g64A50kyN0!ORr#zUz^OCk#An#NaQK|(>G&H`1U&Eu
z8906Y6jp^d-vza0u_?PQ3p{(qh!5q2Qy)&#y^o}_p$^1x0K}>2SZwiG?BiWMbFxvf
zOJ<j8|4#;I9M(i-zOw;7LlzY?DQ&iqPmxkx{D8^uh;WhkjZkj~BZ^h(mb8(AxiRlH
zRApsYJ$(t`Hxil}sG?L_6KqKM?79#OmR(+fUj4v>2{yf1Kmw*jpbD+}MZleg!CV#3
zRq}VLfpA<sE!Xt`yJYjNC}zg%cFGz+xnLbs{?h6+WpuYxvukOhJop{##t2(dm1@3_
zZff6aQ>-Qf29Y)jVSDcA2r45D-J`?+TNJ5(YgdddvT~eH<{P8DL@nk9NG<aXy44s`
z@TbchZ?<YgneW-rmgw9{F`n}&4rrtg9ogcSJh1R>>g}T42a#t2qPZIp%~0gOfw*x7
z(lQ%Iui*Y%s1??0K+!VBOp%sCw6x0^LTy0OvVxl-Tt&<Vz(dQLbY`mDs;g_&b?f5;
z=+p=g7KGtEwQ?JIg#fal;1=<l-ynkh7WwaAA>AmMwFwrKs0!|J8<II#SKpR5n*w7}
zi_l}=_Fdl`&{MN|j@A>E@Q(SipfzL^7t|qfC+b@aMkriTM>!RcAd?TV#C^g`tJ5&3
zIFO}v3_|j<Tx8|u-7oKb?dpk<wTLVj)j&o#SYW^qCB@E=3^mkd7BToiB0E9Lbb_UK
zW7kF4=~NF$>f_;dvg|3+`Uawy?y>NT*+>y6m@V61cns(H)D@Fo4{8gzsrG_bO{rju
zgp1DZy-sj8ed=^-w8RnNsNTlJr)_?5T+D_UL9M){T^*jx4`vHWiC_>w{LomLj{bWX
z)s1i4DYrHjVQc+f!%YwXheJMz;q7Zq-I8flyBu&e-{*%;QAJ!$FS|Y_=S4oUENp7M
z>pWP*nr%bZ*%j}*2s_#F&aID!)u~kdDO_HzsmH9aA}Jw7by5an@AOVr^ne>}s(I1a
z0c}%5zR{Y>iM7X%feZbl5XO%SJ3#M$JR%npgA(FsL53W1$0C7&aL0>H55DgT*t7J#
z2H@lVpXVh<eHr8@Cny+}1v1B0nPd}MrX-)Mn(3E642v0x#J~JOZp(TCc7IK)Hz9I&
z?tOJnNrIe_c%-NT_Q*v(z_)AxLlMIFJi%T`SXXH;dH2T;b|J5(m+y9K%Igxk;`G9m
zzVh@;)~^0wO;pgMoC@wRsPJTt#Vp=e3tl*KYmnTHwFwiOx@9{R4&P0b?M_%k=f-qI
z3-DabFVVd8KuJ^Ex25U#;x}=a>^gO65aC)0?UQT{$XF&N-?!5(jfUEhYi1B0_y#?n
zp#3B18(-w*9AhsKk#uMa1IosD!__-0{+W-*X|I@_Y-W><ANDs##jxD`DI07)di{LU
zTxD#=ApdPYJ<i6<w<GEq?6kMspSRM*6}R;w>2tX<fcnaX4{9qVZ+Gmye2Gqv&gvl0
zx6fzGP&PHOh!oLIJP?HIf{Zz~K~bF0y9?us_@HA6=3*^@@}RZX*_8d$*f)zkY8a-w
zh3t8gzM4K87fTzw#f`)o{vop0O;K=JT`|T8v^Z#b(Tmrw-I|kwEM2x%B44^{Y({*8
znsP5aOy|SXq@7vW5Se;DSs)cZNoOO9;0A(QhNg#AQ-^TYa6_~^;Vsw!5o+WCK&6!>
zaM+lMdgWjPslSW&ZZBkBMM2+!2x1t?g@6+mf}*&yLCRn>k(f@<WGSjAKB5Zug0|kt
zCH6ZKTvftx0wRG{Q75b{el)O0Fs3uShJ8%*qr}EjVx!Q#=`=(C3SeI7Z<u0F$mxtA
z`_?%w7)^@3LP0MiwIZ2}Sg|%vaj#5V50)4_hZ!nIy8eR5O~$^3FfqdvLpI=GomuAu
z>c2yVoho>;VqhX*4aL`@J&*VIH*s0tYTR@qEbfbW1y2pihF&g*iIr3cy~f)dbYc7f
zU^@j!on-?jaCR02a%=@zuf=?$MIxZ+FFu+c7%@;XDOi(*$W$RzO3dY|(`95}>va0i
z-uyr9Uw#?g?!do2`tfjj`Nz#5O`<}0nB111hucR{TBsW1HH6@$;MYYiqkjgQbsr7~
z^uUUt;1!i*9VI@#A;IhbWOkrWYzC_aszR`!^>yvys8a`TzJ0+N!>6d%@;!Tl;$}8N
z{cu+cJ}zbx3gKF5<0ONPGRH_*ao`^cecHuPctFQq&3?dns@lfYg!y^>yqg?6`k|YA
z_vpp5xA^oQKRkMK@bnG+KKSX?+k@|(zj?Axk8d75dHWhZJ$d@qH4X0`v*{L7m=oBz
z7}pDSl<;}6&VoI{uh}M~7ap`Gs84ug>-B;lI!HQW2!Uw3_C7@j>saQ^3ql{Zki$xS
zhhjEP4|NEmp4nBQ@;xMGorZ55+M`nm@uQIz!c(olBeMH2F%P$s7W@}&VaV(Gm-%fe
zD~Zgc@P(?5Dy3aV@#FL|X$2p+mp3(OJj+sa*1^5SC)xR>=DOfrhgT+iUfy}q<=jN`
zv=3VnaChXQfHSpvKm|^QYD*;k7UKfW(&aoj`f`E3%VA>VFl<YYpV-(TmpSrLxLpY!
zEvKOlo(n;ewxbj?r$B>uGVDzk<*9xPQz?7c4|FI#hblj#*rlZ^GPjh`l_4T@aLRWy
z&W_ROe<XB^FGmt9*Z9b94v#vAM=O^3Q&sqHrLQ+Y2i|Rh2c)V;%J=G+d)}83h*1wP
zj)(o^1Fq1+MjT2&ejB7G==(7S+Vap~6Sd}ETsgEEN^pAq>!ZR`sJ>Lf&0?ta>O)xg
zWaz$zy=Zz3)en!1W{wLHp}}(|{&2`r*Ao{hWmU_ENAB?Gpfl`1%ZNwD6we;J{zY6C
z2kDV^%LobiIKyB!!SZSRF|C>V8|GilPbg&!*G_3;NB9cM3r%LDgW9j&IM5gdVuwQ8
zz`5+2ppR@D=*|H@xQ(PvHYkgV!;XX`KtU9aVL}x~CbB0r5b9&m&da^Vtw~xF4Q@`K
z?1{)vZa`bf*$vkm(0ka`QZidL30xcDW5D5KR3_zQ+(ZMzwJCKt9NHsOb2;NYhJN;E
z=@KJcg0wNtkC!Z?d)L=wkk4bkd_0*H<nuXP%<$MWUOsd|uW-qJ<(PH9GX7A9UEI1~
zVI6;^b^O(=BZaB+=%BR@f3?2zzhy0TJ#8bERgFJZ*47k=o%V0I$`;Zp2l{9?W0WbF
z`gW-CJQ=>AnFgjMhKHNUj$@Ae^+D}Ewn;03twxo?y+%<yvpIVOAD#?hn;nI*T%mmo
zV>rz4E{Y&@uH${muHMLbi^5!>FB+@}ow<A{;*>PsDIDrIpakVeNe1J^ta3E~vgm<R
z!)k1RKw@RcD6*P1f)aZ3hJg6D8t;jrd32{x-|gO75*Jk@HDcRd8;Cy7)6w8wyJHW3
zHF5S<Do_oPKTXHSDkphuC}wPT7mMx+3qASnVOEAMdlIx3Q#!E@DtZ{iy+g}_N{?^*
zIx%iM#+0dy8W=`?raJnjyBJEb$|8y=!5`KdSHXsQ*euJ~V*->kn(;{Nk2o$1m`2Ae
zH|R(WT05hb<;9LUv%<<Mf|0I;%449tNZN4O@(~3icK28AzDjQ+E>3}0@<ial73y+y
zcA+6wjVx*b_~44SS)FYA(+xZ0D_M$UGtf{di(~YTe=<ui=s2y~R+_!3JJ9#d;eOZU
z|Adkc1M6+hE*HEq`RC00+B`TT?Zlcwtf(3LmEP0W%i!d)H1;Ph6m_GtP5DmPy>NpI
zZBB}fMVW1|gXRV^Bsy4W+b^;c=w=Yuu$!<ksXDJ*{T4%=xS`*1j_B#4GGlbiqnubO
z{9mfywR44tUvOkheHxNZ=1qVl6$45E`cnn!PXS_u#z7i|U>c&S+Ecka7g}y+6OKqJ
z>Xt1-FPs<+k9eeWz|b!RNvBcg#8xxLn^8Jimqk_br}Fh%C4Z`VwS^vpNGhM7!FfX{
zWmEpt3Q08%hZXv!uZUDp;%>y>@S9}$g~<rtBYIMY)I4XyUMCV`+6XQr>6Iy?50-ej
zMhyY87bLq?35>;XOl85#N9rM2+HY*!|60b-qgXDlfm=H9t-Q$T-hz7PX@`WF(P*J%
zGR$W~jWHqSCViWl<suM9v8`-8&Zi|$GVB7L5$>wq79KqM!H+pMn`J2JY$y;+)v%tO
z%Hg;uGdDnS_Mc_xdv{ocCR%`kDMoH;^<xXu3p857u7ZeRHi&}9tD%FUeF?Gx$s8a7
z60X2LkyT!5SovX5>L*z$zq+v1ZtsP9)1VoomjBl@v;MTBd4cG%b>;!pUcNeb+SgcX
z_>E1a@ia(Vn#qxdsst$<?_%BoUc7UOWr|}5?cF~X=?J|FhmRLCT&#Bq2f4}T8kIjo
ziwlbO#-4B`UwU$@KD|vkJ}ZE3rh@uClsvb;gze`VWm$AOD=^ef>7nI-N@{!I?*eg(
zW^@$-jE@z>5}ObN(E|1_j+lflK1f456dzzDq4PW>>JK;bj#uMd50kX;nRt}V(;TCG
z;4Ktg4i@8aae-%**Kf-Hrx>o?yZ7~1pH%Puz5CuI+%rcsq2V82@T~6IP}BbFMo`NY
z^1dh*Hvx<NtwcxslH)o*U012?DL~jd5Cqc4JBZ7$7qWR)_hK3KqN&pQy>K+rJD>c-
z`&QZt#S$W;@DVR+_?KMi)Iq%M`pXb6S3z`FLlxesz-;$!ujn2_yuGSt8$r)*uj<+D
zpl9$HLtLMBwE~WJOGTxC^9cge>hAx?n}hAQJC0@=ElVB02{1(^12_uda1A{sldojQ
z6X_knGONY0128O7Sb|5kU5zY8QF(nZAq@j&3AY)4!)}UDw_o8E^*gsyouT^8)m-qW
znvyGf5^(c|t<!1ZmbKfWv2-ooH<WHb>`%d13aS*W+9$3)0s7yyUw<`?lz0<NxpwWV
zYmDKO{&!{m>sO{}XZ`P*{CC<dShuoUA}0K~X1jjYZZv5Pb5<P}1uE;;wOr9}#7Dks
z(2=`PKhzaHBE!!9`Yg+6D30^-xa~b}!n7-D@!-`Qq~f8djO{2ob9}2~TrNn9CPyp`
z_sVwm!#U{$f=e1I$X77@8_#T68MuC6Xa*@$3xu7VphSwtFgVWfi#0=zky7*d1f$xt
zozl8*%+^who9b-G82H1Ac2jz>r$11=*SojNego1$bv4RMjwFkUAw82z-o7$0E4oEv
zM@xR59SjYIKYEvR*_WjpBS0O!?Duc@`%LVLTmd#8;!;b6g7E^XK$Z$b!jCGHPLl>6
zL+a8*u2w9YDb*{kP?1>Gq#0@54ZG|5-nC=hNa7OG{S8;%-iPGVcH?;9?^+`=qo~}K
ztZS21&a>$>8@*uqv7UBbH5(RPHH46Va|~nfu11W+#VC7NvBRQ6m%@w<-wbi%CVH0|
zuc)_-jHk{h8y)JA&+^e|oW(Al@RsozgVjlUJtUb58Ltm_dRx1m21(Oev+Ks*a|F1y
zSkyyrYvKFIVKM1W^wuq$tbq6lMBmK@nAIwNn&Q4*DYmSf&>Nx8Ap2*Y%|s=4WAup)
zVik$v_aQ2MUc})|ACH3D1jgy+a5&w@;9}-^=d#;abQu+0hDD_x2m^Dp>eKdRQ?X@G
zOrg1f1&@9eZ9+v}476#!j!Xh?F8h%kw3%`I?Cx5unk2k~iHjX>9Wm(O<@Ql0_RqQ%
zTE$Wor;-U8lS`ejL=29;azZv+7v+(Ce+wr?YAfTsP!QvAr219?xEGB;z6BWyQL+L@
zKUh%uE|7lwwJMr3!r*UUJh|%D6dMW*E9-C|*mu-VtnfZl?E=UP^cDq+Sujo;;QnQC
z!SOnuKi%GTZeY$`67B4#n2k!z!thc6)!(kZ7|UR%z9(~d^&9Kiq%Z@Cz=GjbG<!UH
z3C}X%uE*o_<b?I_kD>3F4d_`u%Z>}65Kl*#I~TR}`{{8y%h5s&+FLph*eSGXBd0O)
z+w^hwZ)|stzG-G8|Mo3AXT8N6bwKAqKF(cScc;8zUM6F&+8oo&2XP5VSldhRydu?l
zJWU#>=G)@(g^!XZ_sZf{i2Sj!)*I_=D3R_kq26*;Q;*7_2KDm67f4jvqhm>9#V1*{
z=JE;e1b0s!W937PqBo`J2-rqP4ni(`Vtn3Eq7V=X!|G!J(Q{O_b)rs;T(?|=l^s)F
z4st9lnlaP}6*G<(&`_xMkQ7*7sQ1cxWIytC32ecNvCGyO&yGFjRmm#4{xNacwFSu_
zh)VH1FzrLRntq8IoPNi)K|wpxt*YT4xmc6?eKFCndoH+St*gD#yESPlr%rH&^?@hC
zDtgO?>^06vb##|3x4ro}Z)v~{{NPM?Devt=9&A53#J@*@!3m;?*&&(=f#P|>(aXH&
zHKy>@tvYLL%Pi_G&LU&*o>}{fB*F`<W(%>gD2>xu_}Y}z!Y`?SHOqF)Nh6<IE7NE@
z2y(fS-Y~<4PsTYhKrHvu*{T>xgtR0sZZB|xtEU>#$E;PS(oBWyn9_BP_^vrtq1Ikh
z-9=l8XF~Vfdes8ygyxwGb49z}7?bn%Uh<Mqi#?Qlvf<9|3LE8Mt3Miz$YGO>X;ZJT
z;oEdocJM7?=|XU_2`dO8gAJ@3nETF=UCM5^AIO|wBT=?Q&kf`x9gU2OAMuR!$jXe;
z`<lARpOX*HOwqUrCNW)*IFJ|J<Wwzdt|TU!k5hsCkYs{%Hq@!r%UrI5RQLt+rkZ#0
z^LFnZCP9DRrT?QwuHze{eM;_vu31cF!VDiDqeJN>w}}?g(hiq>A>k(ltO2lM7{2NX
zsNK3(I1+ck+&CoL3qPuvMudnovlnseZ-ljD&#Gf%39M#tE8#SJt9$3hw{`sxxih$N
zU=<q&7~{(u-Npv<))|&ot%cXEzJLL2T)$erbs0w;`qk|LpDttbi^vRiU87qf5P@s(
zqsj7>WIm2OeFte7d-<9~8E{reZ{~pfCM%2aIj~%6?r+($Yu`RbKd<1;>sfKhWuCaK
z$}XW__?n%nnRt0X@`B(PPiEtaJUPx!dUd%yj5qT$p`-X)vzyMii+&`@+hID*=jk~A
zXSUMk*^%cj*6EIM5twCUT9zg>9FkDD7exKj3r#{{BAEpK9+c^{l$!)Dpzi<;$3^j;
zs%lc_e8S)tRFJMmf~yNSr{<Rqo_o9oM9?El$h&WQ#Tj~S*8(SO&Fj38aOhR-zJ9QU
zPcn(Kf(A}n5j%InS-xx@Uwp0hf86)b^+oV!4K?JD7D@5<8*-*k00V)&mWkVFhv=ef
zo*3yH${qYNc|h!%2McUhm6tr>m^q=vApCryqbUpcGIa7ht=oNmp7xS9g~{Z04!4dX
zmQFE1-uNZkv+D=PO0E~D5^;;R7p9@{ZdtBC@>X_LyXBG`wIsW7X*H!10}FO}KcpVt
z9CVX64}5r<!~Nyipcp%=@PqW^sGqcW23+PMf>cSM`&Q?h|LR*m=6*aQ-MS=J^h>|E
z$?p4k*L0bZ=DnYA8s)x616q{`wc3Z0M7r1OaR-mO4kx;mp1GcI80ahO+=Llp3B%cs
zw_B$ydxZWsQ`#uFZ^TOuwMr=v-(I8{;?J4^q^%i!r<7YQ$Vg*c?zq$;7CNG9Lk^U~
zM3Q<|TcP*%eYPxZ1u8pA@O4zfVRl0+%!<!36(E)jjpc2Op{x3onSPR#$hhD*Cghn-
zf|<>)n;mJKk#rQ4HdzjN=j#5!bZ4&x7bx|LMGZk`O_AJLcSw?{8S1>cnCRMi2JDrO
zkH%%eapVR|t#z7~rdG`~)WQr#Tb+|P+3|Q)m-N2nty_12bn_tt@Ogn0?bUHj=grsl
z%5K_%u2XAw2X`K@)TUhrbG#-pK@lMT<ukzfN8>S*2&vlXsYgcp6Q{~71?JFZ_vPBp
zOq?s5qPUn~@3ccV>ixRiE!W$hWyAjLCUN?3)ov9t%vrVPh?BlS8;1DZo@WB>jyGGe
zgpmB2sI+_LgyfW)H8TeYN44PG@EfUR4ZY)JeW*SSWOL@XO^(j#q*hcF`A(!&(u+uN
z($ImKs<K?jV7OmQSKdYZ@LixYkyxirZ=#WYXz5+r!%dg6Q03)7TwV-bn=Wv7;NSBc
zH8>%py85Hakp&>RpIG0QDA#kMp3h;iWJsS^wxrSZ>lU{w5*KTjU3HFUBUALSxn^}1
zpm6mx7m1o8+u8G6EZSMAEyxurLz%j>BbL?v%MT~w$pHFpDDKOg1UQt9_Hldad$VT!
z;Hk|G)(lwdmd;5UWIWQnMG{`Hz6y`Dmacazz+Wps)`0J6C9cxxx(Qm{<bSOU`59zK
z8hu0gshsxyi)264Eex~#JV+e!sZyY>c2L1L@PD!Jr~J%p!5*A({$}`Cl00<67YawR
zqZr=9<U=-DoB{IrgI~f5n1y+FW#j#M!2RomPutpm3xSh5^m_@L&Ao_c{=ZP7Z0@9%
zxY-<iq7+$`9t}CFlkftHbYqgYQk=6I(t2s`I;q6+z#37)D`Pb=bshglzHakT^L8{T
zrD-oxj8I=WxNkD)tSQ2@B*FG?yCy}oE#Y2vF-#2+5c^qP;pG*LY`2==MvC-ZeP#G&
zK&E^0)eO#eOuv=;rmojOw+$F1VRq1cCI8iy%ICf<3(Pf3u>9;eQ0`S-mYpme!C=LP
z^*F!u3=Fe=`_m@?;sR`%h(B&yZMkF%?^Cs11wYBMQMtbuC?0V;l_OYR<I_?*s-JJm
z218SBsKYh{=_sAfvsu|9D{$bJwbWLt?rCr=IJt44BkI>|F+|M6uOeIR28J%mp{*5Z
zC^QFykR+=(LY;IOPhjLGJ)LSdW0r~v?uZ;iw`u5_ZbrM_itSSaLQ=`!p)q$=GixIG
zVAMhOY@kn~I`;#Q=vka8xndhyC%4#XtlaL@%p}V-X3FDh>9@j)-a0||t(SB|>E1kC
zxfA_vkVhMJ)>ToGMiI!8GH3e9o_T%H4Yw~n@>=1>(gfDcgz31A{yZuuTSZlVM*a)U
z*42i`x6g<l#Zik}<4Uy+h5dI_C~7y}>K0bVhC3Jcnh@b6CSV~KbF3D?NZpHpmYfl{
z&gW78!vm3Yy#_HT-=9A4N(V!$Mu1z5;AVMh(HN#qGQLO0L^_ql=Q^Pm-IZJAH}4EO
z4@cX8;^fl@74i&DqS@mGoeQ60H2QYy4Tn-Bn_*0Fkd68YrmH6O>EUh>V4dEtMLub_
zHXZ=2!lc#@D66%T9ciMa-E=fEdP=)5brRck3yLvqf;}MMShg|{Z-kydVU&-GQpkm@
zuR~IYpp=;<o%cc%<#M)dUL{p&cayh9wAMb|5FL5{)?#AFVnvzMh-87B(SDyT0~sK8
zn)rMKIl6IFNG#bg@AvnPxS35yBdoO(b{GNrQ$P-nVuzYg_CUS9#SNNdv<YJrpghdf
z6vr}k3Q`KW?iI@LHDI7l(X3anAwHmK9EdpWlJ0S7=m0^_Gm2F%vMw1pN+8^Mc19*^
zvstH_S=5PORfMcZL<HwG+B|O*Y&s&k3i{LNZe!-jdW4t8p2<~c+uo1YT#qLoleUPQ
z)vNP5>9bO*W5ksD+xHNP+Z!?rBNMp$Ta1{l0|*Y2{<b-k(=l5D-3#o=o~#)RXPAgN
z%X^gW_c*x<%I;JMyVuvKY+9nl`@99EV#Am=SL<TgPLw>stPK!yxycdZ+&=1Ezi}O6
zZ8F2s>-Sj8-7q>|@mcd?uUZYWO(Ycu4Bd7ma_=i;x^?Dp+I5a?SUT3Z`rQVjCWglE
zqg=PfOd`f(D&KQv2Q<|IFR*d&tVu=<X$-#M^2YDNnG6hpl?7g)h=%c)S<UN?>*Q_2
zjiDJ6$_A#>dK~dwP+;Qii|Ybq6T(1PXOh4^of9CQgSrerx+S6{K#p$9YVAqlBNKBl
z9BSQc;RLOm6zIOI58Zu7O}ulFy!@*!#|XpzlDCjl80E*u8KE3B)w57d{+M?Zh%}{*
z^p4LR?@m#({|@=eyXkmANigTYfam%29jVXWrIVaf|7i{PqI?%=j$F=%8cG}F*7A<f
z6*h7G?p0P$r#kus5~`sqt+|ra?-?T=<C?HyhxwWwUn>%qaBRJjMn>D~_3WU@TF18?
z_(hNbmRvU(vL^>_B@L!I6n2UJdfJIs;z)8Swu9@4cGZnfR0BchaVID>r+BN8MC4Ox
zT{RhaT}Mp<HSwA~Uq#azyIh<9tAe?)L6td&U^t8}o7EW%>c-|=VlKBB{MB9KdwGVG
zFV5Y_9TzHFr7{Jp_@A4Z8!^A*YuFwNYt;?J@s-=ew(A$IvRbr8e#yKLXy+XYRo#N^
z9Ii(U8c!(^1rUyHcfYZ^@aa`Zn4&aT%%|O;`PnJ6BzJ`|M4YSnq%FA{D^=8*g^nMA
zmeL**kgTVbqXP0#%~d2RI_Cu$hGfZNI!fo(ZZ)Y$!QuQ%cQpk_vkuN#kkwAQ8k9w8
zZ^{PrtTQkOA|r>3xEsq|tT#rcEbTU`quQdF7Ok}CLqjvtfPgW8TMg!^=8AiT8o*vT
zHlLAd&g%9`(H`@zYTYQ^7|r3jTQ}!b$(6+%jHDcjtc3irB&vA@!`ug<MwsdxLPw51
zc}lMz@CsY6h%^{fde2ulfyI;C=lEm^T3pgoil&D3uw6^q%BE9i6<YJM)rkbW*eVaK
zv9P8H(rqXpw+PrvIb*24;5{<3Tkm@q?rmP;=5M#&wmO}f!wK?(CYBnp(5A35Z-G#j
zazcEP&Qpx0nT~y8>9Y)zZ8;y4Z#b?N<_au_m@RbHdSH@r#gvA|5IDIGi^XJK30Nfh
zr<~eFeG)cnB(e|8?OL<e73XRxd(?5~Jgn@cqzt6EPBi{+KFk~$yL!;3#yfTHt9g(?
zh;&Tmk$AEjTg5B2tEr0!zRewEeN$O+wFh5s^StO*MQx8H4Wlx;hj}=M`H@ZW3gh8f
z>e1(R<%o~q_<%3t5VCf)TTMcW@Z-FRA2<~9(|;^dj4M3KIiJb5+595QCKP@J4VUwi
z$;yO(3N4IkRpX4qX&##Vnu1E#`ZbvlG1q2FRF%xr*Za?3yn30aziCfjU_$e3WBcx|
z%bCXR@31?3Gf>SwePl7$sC!<!*g`aOK^PlMO672{)31mBfY6C+Yq}lG4Z?2#J9_2&
zeCh&aiQBVlpY-mJE^|uZMiYk*{iJnCn|RscyITFg8l+299>KSS%I((CjgtCE(Q#OJ
zm(NNbY&B932VQFUND+@3zF9)icQRmIq#*t@A$z{)^_7crk5{yG&VN%3pi~BEjVX_T
zSf^u({4pucIcNm#ZOl70Ehu>`kCt=+ybWZo1ujPS=x=T^7!QS_Wv8&7%XvO5H+ja&
z&2&&K=G@1!cRD{CyDP~sSM%9|POxQxTx*K*<}ZK1rJhnkVC{gRei~YQ&nyNb$3wdW
zsGM})4fRyV=RI54e8<Vf6Ng)`df5KEsXN-*MiN&?OWM+|k4$Ax@T2XW#)=ctP)l|7
z?L@j>a%=GKX41w#w-Jt~`y~T~f8+165YLY(bu!N}#fL$uzf3VG3<Cc%{JZ0lY3CD)
zNYAZuz6SV>%Hb^x^t`prS_5iSK0|Bzd3z_wt#yn!`OqH`>yg<JU=?ECaZ1JxWDX`7
z4U&V@R2*nU2Qjpa@%zRx6X0<&eLZw+hqk{+Xj<vfhZ*ZQyT+xju?%Z0ZH;BeTW$G`
zS>Nt$?D~z`4QkZ48`#MBfB?TP=!`fy$tJAv%O;eu?yQ&;^J0<@)qE_^G#rTEk6b2W
zC{6Tyl#S=<-;{3Qn=|tio`wkmr&0^(yFul2JU#W`x=4TQ<2+rMrxJMfEE|2Fo=o!j
zVq}ul5ctPDfwg?b?F}mVh_Z+8IsPSs?Iv4B;w1^n2j%di*+{lS$;Y;?W2Gi`&G*JO
zQC`}%N5xwKJYdteJb;zwCJ(~OIBi}s;G5(!F6`fm+h>1cAq@XwXO3Lr%2n;~(n+-=
z%0VXWNJ(1D0Bp5Pyrde7c3NDtxq)u7)6uZ4_?DpJOMAHyL-}Se`Ff41LiB<b??A^m
zEbKpK^9nF+NM}jL{RP+lqB0~qi#!DlMJoqT-GPrewS3bSJPWp8oy?PvjMJ&)GZ#6@
zicMZ-vTSM9)|I5MIFx7ueoMapwfpZgZ_#TvY0U=Z-sym(C%eD@4qgKf<yxH5_eC8%
zbn9~zT*{x<7Iv#_^(1EWp*I8N$8Afq8+MjVs~9`%jw1#^Yww2B?LU5SMX%l=$~$n>
zz^aO_vt02!s0h2|%xtQwXgD!3bffWK%@_bEcWd=vcA5rr`<lV*G!5o<^I+oG&Y^G&
zLeX$BrWg$0{{Q|z4Ae=;Gb^0bmSZ;AGC#}5=`6WOG1F{1Nj{o$%f~JO9xO<9E;D#l
zdPyLkFEy;7b2Our$#`SOVndlsFjfQf1zoyk+1cWZrNwkKA_s*p+<Ad+U!gYYkwBUq
z&dBkFdpcTV8hnT@52ppk!DJ6S3?JBc0R*#2?;;1W8_pRVI}o2XzZb&zcDNYi!?yvH
z22*h}4_dqNi2ARmpqgehl%>#_j_n(@a)(2RZ&}D^t7~{E|FPmwQjY18P$Yp4=Vb!!
zmXl4i7Z}@Tf9p8q(SIFL|G%H0H_|ClqvCoz5t7wJv6{Jnxtf1IkpO=ssb%LEh3-1C
zR!HGAostef4|vHXr@`%-PW&BjdbR>mDzc90sHU;C6xOqwxWE1jl3W9(?<C8sP^`LT
z*Yu(9g?6iN#b8qa#qlG1v(ZM~T|4;Pq234Y(PHkQAGA~rYAN-m(k=zGta0sWNsmV;
zqbWw$3w2n+P@d{l?J%7_W`ZxMX%cmw<wlo#mR?3VjBOra%s0$G@(IA8;vIre+vK+t
z6I%2S4djvo$~*0)xeLizQ7mKuhld69?`t^3det<&ddVu6C^LZQ`L?93&TfM?IwY%&
zT4`+?**QJz+Ar=c_9gftol~%g5@aM;+gX<QZHG0u;lxZ*^L3YoXtz2}h2e)_y|_q2
zMe(`!s>tF#b}Iq;XJN`tS9G}w&ax8!UjoZk#WO#7HND+g)!Uu*d%Lr$w>xX~_UeYN
zXMFd~8^ktS`b-v;y<)QZn)DWK>u?n60x!F5!hkw?B)GnAyw{ml)yyh3zLpMhyo7`0
zH2X%g-FivsffpWLO~y-~8#~}Bn3i#tUQAE~CB{R%WtvX@nodhKL>JqEIQ5AZ3psh|
zce7j)0<9v&{jDjhVe2BC6F`y(pId?Od!G<NNUy&QZk7roVjQO$AQ6U%2rd{}sPaw?
zFD{5}^b<$HtnKqB5U*yskc8`stU9`|P-oBV+&FDd-PMD6E)N}tATrifde@erq8@h}
z_~oDI!;z`4t1yQH1Iyy{pBnN)8{c-h=hdJM#HhaXa<`tS1f^Nm+CVm{B@Iko<EfKf
zs~L+O=7sFi+vV1>QOg>x;wwoE;CS%p2N#@j<;|mBex-8^+m2`6xfcLn%ghP+w<yOn
z{oHo<W!X3_=eS*hS|AD<5)#1LXgj^zPB+=!Lap>X+1Mj=_`>H>!k0;juV5G;Dox4w
zENJxAV!m#xw#^M{bbd{1h_*oh!>4IUmkL6@;n+$JnIoRqHw82`PhMw}Nj7VhNyeqK
ze=JfP$`E}-fnW_YCfPk*3@+Zwj*rn~ip!P~1s~3^7Z(@38MQE_2I!uQ>ud^lk(prt
zdi{<2H=Xq>>nWb$03mxm`Hw|9susa1GR0u7Ys+oSWdW0&P5`y30#5bj9;XKW1{R$$
z{2{);Ch`CLs-JA|yLNkHgH}tLL6R7@^%yC3{Sd0ds4uKIsC9^HMdN9xdHsOwpma>s
z-i~cAnn0L6Gz4iHRPFlIRM==&hKB#I%wZ#dHOE)GaPc6y<;p-w#8@@Zy1~{}svT;>
zYBoSvf3)kYYUAqeQ}FkAtz6DItfl#Vqs~LuYb!fiX6wd-u5VU)?^=KToC#zFNuGiT
zTQ}*%9`t^;mcAo-4+pUd7F`8zBPP`n?wZxCg~t4>%@O_4?FW_=#u~0^U3b5r#M02^
zXaIjefWLifx?@XMm-%r%tEDv$WQ^D=;fQoov<-mfwUdwZrw&+H*KUBy;@5Yk0pSCr
zsOwuaHFf>qjX>)a;Sn?NYZuH(7i|nq-P`)=9{#x#W75r_L5*f`j7(h6f(t#QQ10$+
zZ|~d-E>NcQ`mVlI56Q3>E=-=qMT?JS%!pYa)POJ(7}{dF+hJ)MlOm#2VZksM8zya7
zIjZg6S6kcn?uR2#GS+UFw3I@|%W4bIjZbSLBHTesw^1--X)GR3b9-d8QfUo^?Fip1
zR=tAHe$ddDFF?%P?%mtD*Xe{a5NRty5D_<Mh9o20sa>)H1kNhW#!V)|UQcJ9O7b?1
zc8GjxS{5{>{Hk~F%Lt#*E_A2&)jew<4Rh8;BcV~JI&){r?y4#rs<*SE9?um{jTGW}
z+49X-pt+(e;O+EwVt`-Yi9yy?`?6Z^{#~tEMZ)?;YRe{fMAfdCE-mj{Y{!v<e#6pw
zR>P&43Uo0vd|L9NS<6GRz~p0#I^rhe6^Uwn*3`HIhpVJXPUXw4Jyo*FsAz$1W;wd9
zPHf7GP|Ty*o^ER%%w)Rbep;<H=D~#ZN9|IWPGEzw6*S}&n4lVI<2+?w_0Z(&vY$-1
zIhiG*!*qx3tG2ym)sjjqO^GF!SaxbnsMgFJ8YrAt0l00`fchB-%shD#`Yu%`>h>ff
z=Eo+#?3)a=k_(i$7-2PPtZ*U#49tPQRH>xq<Qm)c<;fkJvL`*H_X$t$Cru^ipA2Ub
zXED5B+=*U%ZiEus&?(wBe&9)FP4rTKFR!c->2ya6?udeYslS7QDaA_&_D2_+ff3lt
z+(BGy$mMpTa>Hu59h{x0*eEWRc9TI=CX35JfuSp-4vV(HsGDR`AkbTlT!2|6D42SJ
z{^_}xW{sIHG|bGrc#@y7{!kp1UTLVdmANex<h-C{V&t;&N%r^M#APE(>M3NSK|W=w
zwz-McHp_qU{N>ZP-#vZ)*Y6HsJvRSOds58K((%XkFTad#w;%R@`K5=yIuAST>E*}l
z?Bk!{=N~tnR_)oVmj`e64}N~}G^kEt&W0c5av%PlX0v?$aWN^g`NwuK80Y_3WbI_*
z;o;WC*GK&CC_4ez4BTvA0E9970?k(tdf2JQWQV)tA;si8o6&VamYn40*@V;4a5}r>
z9j);@a(~2|XpT>uCTIhmALm2Lo|e2T^M7XVf*{T8=*1C|eZDM;S%{t<Njp2~fe86!
zH)(C(onE%!?^pN!gn!^=cGl{I8A{Odfq_wj^xSrx>NwX&4Wu>8kVwG~89*=0+kt?X
z4PzNQU_a0{HSz^?atB2t7g8z*93AH)?O=J+jGB-4_cyV{4Q^4O<RFEhNZ8wIAi?wE
zg`38<_(U>sb!q*&G%v=7L%tik7)q^9F6iwR22WyN!ydhE8#FimuUh5fN3DH`=90*T
z7>_G~<NU<giy(Cmysc1n)I6fR$T8u2TR+@6GWvPIl@{Pfe}#u27y6Sg!%e|iWP8h-
z#twjbym#r}h-CGv->w2{bs0$zHAWl|Xlh^0{xh2uIGg8T#FyLWl;=JY(EQGb;+apI
z@;$yqpH;G6Iw;6v<eR^_h~4V=7bC+P%xyRN=5Jkj^?)5q%YO2=!=p~W`hE9P+U=Sc
z<Ja{h`Eznm?TvheFMoT`v5z<CR#THM;AGUMx+GUi${4~R5#(t3!HNpS;8*tC+4J7o
z1lw|LaTj%E9|j(lT%6Kx!;f9tTspFFtt0S52TgJIp@eaK5b<FNGbK@x{6opFjyhhR
z3;^(FJtlDo14aCb(>2uNC_h0~bLR_hcL%v$OEj&D+uw}hbOoYl4M!5%iy2Z=V&Ixk
zxsKzYzl^`O%GjEUKVtpym?2;S<6@Gr)c-|77sy?tcqSSfrgj!5W#fxM7I^@;^dXCq
zV#3L?wzx~lB^+^=bo*YO0tTO^xJ@WBFq(C7Z}1VVCpIPD+ypt;bd${=Y8ciu9Z^0<
z$&b(`iwViS%aytWuVY!to!-_8mVz@;*+MiuA6dEzk2ek5uZwcsw2!6_(jhX2&|b+0
z>>9nl>U`3YYidl1chGj`v=lS5ETJ{bBeuc0@jAZ^H?S#>BIWOaBf;9*X3hF?c0Zp*
z(B^+Mi4t$P;v)XmF1&nObKMVH(n%EDw43<bcho=e$D<pszT&+sJgxV1mTe5#NN<!-
z8s<$Fr~a2D)RBa4BB`n+OZECf=WA|(7yMy_EFEJX6{O)F{EGg6hP-e{aV;wx1&VPB
zZRV9^N(M41{+zkA?f4|JIhW#G>G&(ikS?eS?_>OWjR%gB4-RrBqM6l+oa?EghN)=z
zjpUKyAK6u*T}qlyBB+>PH4|6%UPFSyCOAG5p$8bOxIg`b{R|X0bxVi`W;KNA<80t*
z^BX-zKj_+2fR(R82y}#d?w5v%3G(#WNK#IzKz)YgSD4m07Uk=`Sb%Z%XYkecjvhPJ
zsGbbN#2WMlWDK3w<2lR$!`t36VhD9Ya$q<00zcbs;Ils;acy*h=MxowmJ^jf_;-Sf
zfnuEXF4Ebg-FnWaNjcUMEIC_a7~Eg};6P%)TX@uK5$&{%nixgsmi*=}n<B8wWxr{Z
z{MihXU#Py)AL08oC($Z6U*3Q;d9(Sb>Js4K!kBT%?+a<Lp^b|e{)NC+NQey}akNz9
zsd?=s+dGjcua2VJ-ho~XU&O@ZDRzcjeLS~%mrsBZmG6K9{9^&^12)ijStT*(=k9n1
zM?SSQf`K4~nD|IfnlLpE|AzqaezFFR&v6B8Pn#o7ViJn`0NIXGbUjxjaPSeM#}j`A
z68%o#zQe7|V@YQxi!+3#&^dY`&_Lj%GD8^sghm#P6~m9L*+ZF*xPL%B-w~X5(%{PW
zjtgi`DR1H8sKWah2RBS86oO4ln@?g8J(pSvfc+#M_mYZ3BRB$0@K&{xLQ+;?o!+`!
zS7SLbM)W0mjHnkLxKvC)u2m|bd3b1J#vB*$_#rX5u*7N^(|b7MWIvugp9W;5)p8{o
zSA)Gj_x&1^Syc&f;n0v?zU>(jcdcPQ)>HJqWow$)ogQvWC)@_0(k{_o1!h97nhC1}
z5mcLc4K5utAI8vcYVoi+qV$^0`v_Zg^Tr*7&43KcK?{PlMu;9Z<eIuZR9B?-I?E?#
z>1B|Jc_!*;eKE*R^2wt)Dh<|4dp8>W6=Ad)HsZVSw%N7bHoM7Hmm93nnwoaqHVI=v
z0a)_Jp=eOln7!_y1kuDz+~r7{+UlZC6X_hf@Ssyts3gj!PJ3uiVqJ9E3~swk2VL?7
zF&t*YFn)6zE7qi;p-Iu^+B6n6w@L?Pn|t3;u1Ry|%chrI8DISs>|>2ruiH*8F(~;F
zMLm4%vRQbAXVZtFeI>lJVevVZo~AtXs>nj3qXupCDGX@WXDd8_lgq*GO`&#^*Y3?h
zrHR)O{MV@UysnKHh|2>Iz6g)wqD)Lna*~rL1{=cjY5V+jpmc}aa*xqm`pv<MN1OnM
z8@X&>R;~~<)a*}qT5DgJ@8?C%D2J^)8e@l2{1@b|VK$N5@)n-#=m(waTAh_&3EbuD
z@uF;BRv1rR$FTmhV)kM_Ye#|7sK0fU!Z7HhnK&p=U7=I4=N7CzgX#UdhkFshjOQ;h
z1!!MZ&1eWBY*+ouhv1FmayN`r<7eE!&=d1TR5)6Ii0IQh$@#-G9}s=DsKZi?q~5^b
zmBPSWym<X!@qDLb8LNrS1SAs2fP?6H!z`&;%6b6qa{z>B)o!rPxWESmt#-{if7)8E
zT(c%?hpK7AI_p@oNbAq@?KS54t)1xKWU0|OL4H+Yx`_L5K9=ck&*o$AXqT+qg27Tj
zJ;2J^J<S_gYUBM&Ek?8(qf=^1)B{+cCpiK`tf53akI8W14RD4GMG7ImJ5MlVp%jE2
zGM+QNgFd#55Kc#4fU&>7kH4N|!!d9}K9Uu%tMW+-b8#46RQWi<t_9wi+{niydTrYD
z$^+=T+FZ~pSt)H41C_fdpZHxeqETuw&Y{zC&9r=ctV-F}vm9W~mvzOxk33f^eKlL$
z%w#udv0X<xnLB+5t^=M-Kaf{gutX25lLv>OUZor=w`Al&$e)_y83tIs5gI7qn!cE9
zZf@f1#dk^Y_!)+(7w6IXH&4Fyj2yk)!}d{wkK9`d2`3TqFnuCEKFN=dk;at%JsS|@
z|I8j?fwf|I2I5n-hAM|*OQzQpA9nI;_E)?g$|kkuO5<WyHLFB&2P*;7&CuFtF9a)r
znvYU{kZud>cGQ?Exk^w?_LRTh1Qa_!MzH8Mt{&KjFtBX`=;t3ok7eFtfF<c<d3BZS
zXD148Gl(vrc}t&7+WOO=smp50rii$76&n!8fF$TlKM8TdALP$aWbIoV(Qghr`Z1<-
zo5IL`aM8@9QIBn^eU<je+K!zWK!g}*Y(U@SC4RdMPCagZTrru!Hm?EAeU~He^3=<W
zU)7q4%DT}XIP!Bf{zPjC|3t5OHObQ#&Vg+#up#xy<XuYh+0bfK>xY4PXk-8-{}s3N
z60eVd0F~h}SQow<bRA8oM_t!tdc=b=L$HC92fFdy{7LrI3bNVbHIJw!Fi%xLK?h-$
zQZUAQHrpT&%4mZ{!b!x|W#GF}Tnuy1fF(P@nkBb2ys}%Z_|;7VGK;a5%uw4+kjAVC
zkmTr4C+euvjTeD_bpq+$nm!q^o+@r^xDQa-Jzd%1{;4|L;FWQ>#&6$nHP?m8^aMLL
zUX-p1M6xo>nkt%yH%7HyE(RN=B65eam9bHuyyUw!)S;t&pI6*7hFT582R?6KY0cmp
z)6^@|F`OLTfULQbC|zzl5gO8M0|oEWAg;4?xe_$*?2JM`{RXf?_dQ%99UBNVAIdF;
z#v78UqB{XBRy!?+!J=R!A+4um#@Ded>+tAGd%0n|EX_ls3Wr99SE=>w^O79}A4@SO
z=5Ia6o;EaK8b1<RytBP}hZ(8xMxJV-n|Si>@?AH1x8wv##F9e0R<}~pScn6xhx3uz
zsNq%B{W`Cz>eZn2#`y?qJwnbz#=dbIQJ1zR*Y9s7{LLg>;0ssoCZEJ1nn=i%q*}XX
zW`dB%a)sq`A#(g946G7p!s*<$80^!k@A*VnE@6p_tAw)mkH(Bn-1V^H^U_5{Ym1(j
zslT0FSKpoOf%D6J)feOdT3gnOU^1$-r66?S9C#OyLVM#&RQh7`RGk)!@kl46Es@-5
z;y!*1$J?%}hn9#^?Ut`+dfu*$B`QlVp+Gp50kYUVtXdO?&V*-i+;q1R368_qTpv14
z?`|S?ZP;@F+bizPVqG7fPSH;nL=dc&?+5L94Aq?FfIDWP+Cd%<kIsr4m4-U*)*&bJ
zQ3(<j1=DkoZq+nfOxvMjA?`O$0oou{_g&Y7*5ta&MbH)z+uzdF?MxrNOTvro`o|yb
z6<jRQR7PV6=S};*s^g*MIm1?=r$OxDrb^`+B=WehPl7g$l8!l@UQyN0&Tu2<N_GUF
zmBYT%rrv!5kF8X`#skhU*|LrEReMH?`G;ogk(Jt`neOTHis;B%#9yJ`z8(8~FUTXU
zj{TPuL7dvEayzq6;}q^8Qulg2DASnLC&W?3&}TW?LegS!bXp_BvRK}WquC!r0oo*w
zCZng5k&D6<9;Cx)WUM*mO}^!LFSaHp4GR4pp5o}%yAst5j*;{cdy57eSb*|toIt6r
z*t%dBq5JTPGpu35s6Y}+B~FRQufLJ@O=1-Ka1?VDdVBkJP3S7<5;e$ePcTF-C)*Gv
z)+YZ?V^)Oynigf5560{)+ti~K9kSi={eZcHeT);t9#)QYAz(^<CT5RYF2|BR9M&G9
zb;c=a#R<BEsgOwKwhZKf2K<!cqfb*Los%Kr=Lb^9576jNqG9?|t{)_p9wL9jft(eT
zV<VktmmF;;&-C!{TYr+R-jlPfa#9v(?B~b<sUS6t5#@Pxq4`|i*_)oJ>d%$cqiStA
zF;{?pdC#_oFb%;9VFnsLAa?4HnsUTcb0axw@=;X}dlx#_3<(!~QqX=Qj&Y2nDkc&%
zb&dcliI6!bLj{9l>zzC5gnhEAv)E>$2?m?T(i}_2nFKkd+%91Z$fIa90`h1!8AW7#
zxR`m^7H<uyhBBPt24rITJujxQ?g%>>lNeSRR*ZN;GXJ4g5y`Ta=or0jQ8Z_r-5?e7
zU*_dTegYdM^RJaU%ZzHbF<1k@>|4<+PQUE>FLil}{aEXVstwxGS9P)<bS0MZsG*e-
z-l|!m+I17ON~nuz16e=v82~dUIU-@QV^f)nQ`lKvVmmm^W*Ag@LdJ-eO_U^YaqM|L
z`yzQ&5(66%jsAL{A{Gijjv}t&p%Oybr9hz860O9MBNDE{7HX2!s4&G(R@!njlncc1
zOxMs%I9&;6>5Ek*H98X6XSZ%qlW*~{UPW<5Ik9dc@R<Gt>;V_A;(I$C=ksrubd#(z
zd016^A9*cEG|$zMAvf4djAB=I@NJpBzT0p*r<i<vp1lZX<QO*A3lYLfcPib&M<SVf
zq1?7|MA!2I+lkJq!PeO-8U%LRa1A#6n|DgU?&^jueQ6wzQSyafC^J#`3NL%*8rA15
zs%QnxNhK8iN5%f9^ss5hSCgIp2J7*O;|;_S^ncPR7uxieUZSytS_B3WN76Fe7h?_d
z!K2@8OVk2A=v&F^@tjkJ+NW;fJb*qZ5xKgOUhMuhkqNn~_R{ruH$J4flj+t`FO;rw
zBX5xyWmBNjh)W7;f_V_;k?=IiXB1Ca$l}9f1A`lG+fy!)ma0uus1*VkhKGQRlum)z
zp-rSrB=81|6)kirdm9P2=>9iEUviLf#}a*~jPC>Gu%Z%V!`TEYZeWVRS=hU<cGg%s
z!)7bBc^33;7=;`Mq2b`~WSvOP$wDEg&r8C$b#o&VT8t>?yTO4sG0oQ;eQg3`xe`Jr
zFF~H@9yVBce$@}J=XNV0!D}y6O)+Z;<!*6}I8VxDb59p)W}Jx9q-i!LQo*KfB+l*7
zVAv9ou9be#9;BbN1WwBa4&UlmVvBFXt01`e7A9O4!qLt{k>A!c#qyd0mgYDaykm5;
z&S&m1nU#;);$P=bCcL`#B!HQFE@2qWeWtBjz2w$apEn?<Uu?TuL~SDT;QI4vy}7#X
zBw$R-6dj6ye?-<T>G1u@4A01q(PXLb+(n}gvMlTu|2UoQ^G<c8gZDw<Cuw;a7sPj!
zLa&aGOU$@lEy`bl3jYq<p|%h1Lr`3dx5J|JG8|Ym2mWQf(aUP&GZIw%()$Ivv-Fi=
zoaiwV>wRb0bes-DGvoK!GB(rY<ReuZwW_mFlhci!R<IMjd@>v_Mp;>{&fkf|n+v=+
zT%$sPE&S@(7QC`@`M>YKdMTci`SDU`Qb){}kWm>oqo!OOr_99r>YD5uKI?lop_Jns
z$!lfwugKCV|7Z5Bm{B4a%8uMuKtpZCru%?1S~ec_C8%SZK}V%yN`CH=42&rSF}*yb
z>X=``L6=u`R#;D%YEs{#B=_~*L;n>FSzxWRE@e2&YT|lC4*rbCEiTY#vB!Zrq8Yo4
z=c+5F|K99ZB7dw=QM^E0O^O~8)mzrogL0;pMi*J5A{T8nW}hFL$OKmn#_6&~k71Fi
z9jYTs(oLdO)Af-Y?7=Ajv4qzKq<?sDD})a{F=ZRAMRZb5id2I^GX9<$S*JD+Gp{u@
zOwkvd)>$0OT#6rzJRKH8?SqtZA9Qg973e*Ovao=;XY9w)H>ra_zG_ER;znlH!<*2C
zUX%4eUDxNNi*5&nVwk8(bsU9Jir(`>P0uA9Mc<|?a(y?o;)W!#kzq^LWEzBr_lxPb
z%fBIicsnzXhRBJnvb9+rvypaW@r)i25(DpbQRY};1(;EB7S)d|xB(m)-aZ2eaoEKe
zSdGzkn1>4kO1@l-$FF8TppAPCsE~@UGR5WqmXaoBoXujpY1)x1tgj=k(dkizr{{R?
zklOSR+gzuYdHJyKTu8~Cu7s6%XpF6e4?mxr=Xf!f`EPLYrdX;eE!`^{sL?kO9_GDk
zckn1i<NbI>)R^2(N7(A~d3JV_iJ=8lOLS*4u50rht(*-zl8lOEkWbRt66E7_Haz7E
zF1e+wS1TjsLVx;=AV(>_t+hYEMUb-e6NAk5lFN_FkC)4jv)T(T4G9!P077+a{bkmn
zTUfGnBpVj0EA#6YJ`B$D;lsG->l&Tr@)H(7H3oQz%(KFITq)p#82H4hC!WQ9D&CeU
z>e7h2YHa4Z5gKg!ebJ?MfUuOXz}ZNpgEE^NaW!WV!KGco{q&Zk!4WdG9)GXbv<tMJ
zF51KRjfzRlUz~zoE{FUbk#fk~$uP9uNM!j{kDm4YE%JD3Q3gOBFaE^VVtWUty9Zhe
zLp&`g03U;V3(_i1>T8Y%`Y<HQ&^b%8!!&~7V)%xf_RO}}=9Mw)8J(76g9Q)o!?~07
z>X&S{QsXU$CkhcDE(Jo!Je>@)gW?JMAiW?rb*XFfaQ4bE;B$MctNNpHL9Pfv8JWm-
z_!f5^5x2H|?d<f>4$!g*F|9lI>wRSP3W@2!#-2~8xz(*3O=q1!f0wTwv^02{|4YVo
znxk@W<+#4fJB`k}PUB#%Sv6jU;!O$cE*piaYf+Ad-(myu3=qzd#M88->|A3XJ?nwI
zK$9!jkHYN~_I`mTCa8EFVZ65)9nB-&fqG?9#ZsIZ3b+8rGB$qEhSSN&KpoI+>Ty0I
z2Y>=a7&e$e%Hkk6dQ8!{$X-D<FNeKxe4-cbWJ>3b8`mcebemkmK}aHiF>3eU@XH|V
z2wi>oukF<3Gt{k5plbHLyINmKMu1~6fC?308-;6X->%ly!viok?gQ*L;%^8MF!ZYS
z-u+6fY$Sk_#@tiKH?e#P*IU)_u!;+brWUlm#myR;j;gqd-A#>HQf4SIV*{fcvxK^S
zkhVAX0#YCmkR*7;2LKTthF-M%bh$)?>8Z%*){;l;sxZ%7R^k(~c^}z&SkRRNZo&Yf
zj`b?R5QDI<wYwUd4ZvoX*$_<*aKyBCMM5Q4`gJ5Bmu%F%MFStKUB=Q&CK0nD(X-?O
zw4$6&Kv#R+B-04fLXpE=o$V8k|B=TaCt>7%WpJ6M#@gD{VJa!QV*^a*v88QY6UIn5
zYtHv<h?0i8ny^Mvj<*asO4JB;Y`NJW+}Udh?C!6$i+ADgH+ujRyY*{D=uq+~^y=56
zfW+L=lS0LuMi!zi1?1?_O@8e(?ebvj{WZhH3d*Ar4y^BYB96giK)3Xr!+Yt*!H5co
zU7xtqHX}`&^yho(4(g1c8dF}2Wk7TO4ikp&og%b#*<!8c#`bPd^5;s)r7dYA%Bd1~
zI^PDIpYO!CnVjK$kK2EkxF|hPo^y!IcY2o{lbGGq`<d(g9M@Y)y``;Z^Nv$)F_(Xh
z`_RS2Ik%JW?a%nutAekiw90XbEHH=l+?5Vdbj;TMcyoID`HANzP;gHnVe+4$U%V<@
zkWelp<+5y|7RIy7CE^?~&=Ynqnq%Z|kQFreUG0=uQXDE4j>x5t-eGzIq2+NN=wdM^
zj{vcM=cz>%R%ikd(P=cN;J|u3leIMd1l1I>vH@}TWSuEmJVjL{Nw5tWbL3LRUChK)
zIG7nRgE-$ix6+A~sRXxb=_ITQYG76;duiinU}#f88$P<msq0*nhu%SpbhO=Mt8<N=
z0{Peq#m*-zH|j8Zmwv)~%j#rX*faxj*}rOVSK%e5EW=HCdN{FNwp_E9NxC36BPo7&
z*N_v*RDxG&aPp`Uk0uI(&`>hQ0Fz!cWK;itIq5;$l5v5)Gp9L-X#n{wOUngjbr(kV
zFQ!GmkxIPe?{8>PZbT`J+ed{e#ImN~*?POy8fbEG2|Ub5K$1P3EDdK<whvprC<Zsz
z!mXp4PKT0Tsz591bl+7<S7kQz(mXD&LjS%%N#9Pn^K}FH3_JgGZ2W)GmLEb_vNBI6
z|Ih9E;EV<sf^@bEQuTOgPHaum*fm1O|I^Zq(5=UcSu07Go7Nl1I~BSXYbE)>BA30*
zhZtv6d6rMK7*u*m_Yb|-ulAoGJpb|O+vhKzJ%9Q9;OEarKt&ia6!XU7$*v8etC)%6
zlR#P_8U_9|6yGo;-H+)VliJlpdg|pgGG4F9bLfFnBWrT2b_};HsGARC<X11mfwsrD
zYNM{!Hx>h8@{dTin)rJqL5N5Szp6;~{oUJZXnS)LL!>3ADG<c7#dw}i$4b{V3JK=I
zaFBq2G6kdzUl-^;2b+4Zq=51NFYq%Z+NfMZm8n(Jl^V<Df0^9>GP%#m<UTuZ`%H)S
z(CbQrq3S)b-1pwH7xI)P?YEseG#}dUD+An^Y*2a;rV51wf#N_9f5)&2KT{|E?;{C0
z*+tOU{s-;--?%GLw)<36YgVQOmzB=)!SAL^3htaw{!Stb1$fRUKl6hLj3g~n2aT8U
zr?A#*gw4GNR?Q}54^8)v_&T-vz8zlpd}h5^Qk{k91%@&DjUq9NEPD6{G3q%*Ww=Or
z|G{25IRVT^PbGVUjS(%N*r=Ga<}7uklchs6gtKCobd|(T3UneqaW*)SXl}>aOtM#t
zNsl!Rmbrdq8j_716^t_(OS<Fd;f<|#FjgbL4>DHFZRG;2Ee2yaO+9-3ob12SVLs01
zcp2<c_?8@~UqbBVFu4~Kx&|m$A$QlUP)x#6H8IMMk29hW4iNq5yTBMYAHU3hnVU#I
zRr#2W@(>5`l^Rd^bs@@@;TcFgyt{}6L?rDZNN5jVuf*)vywuW%#wO@uE-!h*6L^YO
z64Nu21j#V3%2+U(F=HZKKTG3(adTH$=pId5PvTf;dCshJzSFylsde=2bqr9V6mc)z
zEw=E$2nd;i!kI?^u(U1!WC8#Jj<8a-YVUbvvdftaatjRk5mmmPNgY$%XuaxnjJh4O
ztB!}gf-h}YCTb#baMewXONKU1Ld`ShVA{xq>=|3SN7{_oPPwhd`<}!a;}K#}Y^i~m
zqlkzMOJ#?opx`1v@bY3Y3!7#R=P;Tcfj~p`$cm>TukM*`P*n+p@ijt*TiHJTj{V_h
zy*l%7`|HZ{vVqr=QERLU0zJIH1S2k5i7gfLg+S|(tYy#9gQb6(4o}-;FJZ+3yL5;d
zdp!T>ZcHz#Mo`W!f_yQ^ID$$Z1;&AZd(1%DeKy({>KEK5gH?oKR>4Rr#4H<4EfP1K
zt3;1JcQmgTLyXDal{IgaDc1%}HiqkXj_4OyCnKi1|D{~#QyC5o1cRvXAa1~6DmDI>
zoBU4PL}vP5!%wc^1<TLM46JJZU&acOzK8sKu!10=oT2s@wynls)sitwneF@Cx=Pl}
z&v1gat=J(jrh0VJ<^R+LSv2OOaX9vd!yucSl8s)?sj#2q4HUUTkG%;>6ES9o8xnBT
zt;Cwm@^(7SL72`YRERT>jt#2>q8xrQc4)eRnC+1Df63tQOa@7(_CJsa%Dj9|61Q^m
zs8A4WAM3a^92cdzc$u<S+yCx~|Au=)*7AS!u2_dbSA>V(zD+J0H;Csi8^m8kX`?Fc
zOQYGp!M3^l-|h0dZ<l|OPR8TziW`d7Wos?GU5%y7PsP&Zr(x;xf3fs;$I|70CoEmw
z5KGnHWj6@nAo=>b<Whw}4qk~{`-<=lvn&dgFfU%GqY>SWHdYIh+<m4137bAu>i)r_
zgXfRmvbET&m-~2>;%F}tgvG^h@v&8o!hk!+`5310+of9?@^JT)9>&q3k3Fu_K1ZeA
zc@Ii*sthyvS2b-sSx(Zke5eh5yJTZHZq7LNG&U8F)<-_VK5)v5jcrQ2-5V5_J$Ff}
z26s_>DVX<fmp@UA5bcIIK-cvIi?@9;y1=IHe2YTFQQhQWGQf}{fw9{8c2FRN0)x=O
z=X|Sok-2ax=iB=9(50W>;_+f4-fj8WHy@?^hOfKpE+fN%U(C|!x5Z^vwg>ocaQ8e;
zm&IaEU!&YQ>}-eW3HUCQ448-S<<C#rqVv)VJ@mLK6s!)9I@h@AK~YLh1QonbUi*XM
zSD#xqVKOWIfa=><oZ;wFX@MD;XbSwjFlz)%z@kg{8{5*~r^PJ)C*FWk%G=9cUVi7^
zw0*oIo_#LDzfHzf=wqM%P-Z~fJh%C|6PDtU2p#KGu4m0~DhoVV<disO_`Ym&xp0vQ
zKCbVFtKBG+BjN_CAHr(Z_#UU)FF*GZry6Toqe>nl2CS{ww-WaZx9!TrI=<<*3~x_5
ze@K6h5Pmy+vxm_%7N`IM?4#IaBl@YU0zXU28@c5)Kn%M_)m)kfc`4iK_FjbN;c9Rf
z;@fgcKbwqlVAdt^ee{sFb|~q2nvXGxln-o$I`HG17giIAd6JdQU(mul$<N%<c3Gp}
zu*7w^U_;TKLrdSMmmIDyIpwGC+^RC@DivT*yA8Wt8oFkmb17fE;(&`00QM!d7?(l1
z9+Zi&LP{|z1O<;l^eJXq68D}hD`aCcv5Ri7S;~3>(6OQK>6@l|mxdndk1rBC#X$IV
zRFnjRrnl$tz-C8xkWZDS1*@~$6o^0QjcvOTZneunOV{){?9S?)5t67Eo`zk^iejc^
zaM*QjFXZW#;)@(X<PEqt{v{bf>vpWKo3u{>)IyLIY00$V1MO8nNu0DB!IIc}77XWJ
zy9p2u#8>H$#y-0dERD?<<a{N&cFzSVWPY=-7XrL&RYCoj&F1;=hJco>`k;BbxLqGZ
z@6lv*K=F{_HwxRsblx^`<!I6$VU9MAFGtT>F6?1PUrV&Ou#}$?1#O~3UNh0Iq>G_=
zE^UVW<`{boy_1?&WPx$6+vmnK#E*-!0iK<JIJD2wOF04sK^$2`wgR+^h2v`+rbng{
zJUJ)!sN5hZH#n+_vx_N42l?Jr3Hk+lTz*TJ{6~&6Sl1|iu~jMZ;BHh~$U|Lq{1nuu
zkc%+@w+ZV&@W%j%tXT|3X-gdx`W66ToN1Utk}AwfGNo5$FA`szYPz75WtW~u?*<tu
zq+z`tM8G}&+8auac%P@^@lvEVJ^_%hh6V)~WJXPgIm(kn<K@G9C`%fijrBv<7RqcS
z!pB95mvtD<dC7JoXvbJ!K6VUU!eNV`xy3LeV<qd);;|B%KEha5ro}oDc9pDxg6s#8
zOC`NXpTp$10|CLc3+>-_lZt?X$57yJE(9hWMo<a}&qE5-w4g$e4g4OB^>%fvCPfc6
zg<iP9zDus%r>0K3Q<L6gl3n~HQjHC+CE^HlMuJYm5qLd9<uoNVtQH#kE{k_o)Y^A?
z;$E{kQOMNsQCb;^b&bg|b*LDd#P6F6Q-c>as3QFd>qt%r55s_uKAl=HerF017v*HB
zSJy*ox=he`c9hRDHS7%!s0Jg|&*KByDfNRP!)YEs&idh~uGFVPY6Kr$6$_`zvN$%5
zLAqfSAo^y6Dk7M`z=`fedBRS`!Lp8@F|CL;6vmTi+-VFh)E1d{SK%Tqv5M~<OMuZr
zUq)qEY^6fxt?Y{UwW4pGbntyTJAvbE+b_D=0l#g+&j|FhVx~e<>5TK^`RAgj2;iv6
zux%*<F~&Z0IslCzyrneOLGzZ2tW`9Iiwv1p#w>5Vn9*`OZFDDGM21%5D^=YyHKRX_
z$k&l`fvPPW5}%_wC9OS)1(ZwWfExZk%d}pDx=>{YQX5j~u3+z|SzAb55bc4~^0q)L
z6bX^ekQIr6=D>aEF-o^<&&}#O%oMX*e{K#6ow`D18&pW3-3?qm3Os>?PAD4+R5udK
z-008<+v}WUvdQ3bPATXv@E^=oN)Z-$#4KwKIQ2LRNDkD-1HAeor<8diYcW49%1m(?
zUwqtS>(f8~*<eJNrH#Fcog<{{ml&@WQ`&%8$V(DeY|s6Id8Y{qB5d3W4)e(e%FL>I
z0UjJ12V*8wafO>@8_?A`_W>Pl(0ke6N4a5;wwNb-Wu_3E2$%r3kvxc%yNU5gHbitq
zkzsvWf7(BMu%Oe)g(&O@7iA~l9PpuLE=le1jT}_)k9((w2KsiJfw_<FV1lr2OB3#^
zYL>z}UPq;+!;z3k{|WSEQD!sGC`9_2Iu^mi<^zUbxw4F8x00hsXhd<GSWS~xh+KY}
zj*;Yc71wL^%}$6HNlz!LeXahHP-A;dEu@hn1CDx;e31m|%us*~MSp0|FJ=&ZP_9h%
z%z>e6!u&r=56Pr+GM1HkGBBIeWCV>6-7LGDrkC}SzAZQtalBetc8Tv)q%^H|z)zrT
z5gr?_FZCwefYtGu$$+U@?uPH>h<n@aBb`RS2OD&}(E?ftzG1NyFRE)DHow+VUw+o5
zj#k?ex7x#&Ei9C3BZhF3l@1o0DPFkNH(Th-#)Xb{mE3VM*4D5UE3PY8E9Ns!g*h6@
zB;pudE?Ko+lR7{n_{Rk>;<NYmHV)(m#?@2}lgWd_Mzv7VnY@;)0UQ#QvP2X7>#P#G
zB%c`7r|p&I1aMc}*e7|QD>aN3OgV|9Z@uI@_y`A6E+omS7c&$alJp{7vdKnWXa;W4
zS>iYu!g#TZBqg&@CRV<iQ|bf|7@W@5Ngo#z+k%h&Yj2S;60{mmVN#Nu=UbRpwLuV^
zvmWtj;B-E1Nlhy(O5)t5?=g%vMs!t2pi)lJG%`lho^vrGVu1m;BUJIAN3-+-06&30
zfz4Na=|ivP!Go}CCk5;x+~j!P!sDHx{OH65CJ1pt7y&Z`>1Qwb9<x3U2n}<PeUH)I
zNhJPG9hg%^Euk}?3`lbDyud%$X}e{5$$my*ab!KqWvQ-E!*pVzXye}EM(Ud2Tsa5u
z@9)%rGSWBn_jhW<(QdwL`CQF#vXf0B5n3~wo##VRBEzP{$mQeXB)bI4JW1!pY}rea
z=NK_!mX%XfFeCY*sK*|J%g@a|F4O|$0RXA>MRt-+MkV#^^>~3NKl1;WW#gryZ`2bR
zM3SXtPHuN6d5MU{=MrHVa3Z;&^BMqH(z%72eNOImq{9|)w(IB~zoZZs>1?*74YZiE
zfuE4*I=6e$^syZ$ITuQIQj&`?3cMRP6?jDNu><+p6#Ady;RpTYhjd2tJDJ*@W&c>f
znXYs^B0K3tlh;iS^7%MZ`0K<%5&KD-nb>i(E2fkio=Rh{MtbfWr?8WuDAy-5NB9Ur
zff^j<HbMgD>!aa^CkOR|9faBs<3j|il}~_i0_pgtbcAS|&OGx-X$Dc=++>H(kwH3r
zG$xkeGupo+o3(}AvBN$=K@BqvUH!|v+{jNR#Vj-R-om0`jD@}M5&NSdcdJ<s4~@9>
zPdp5nw4=ZzDmqx}#?^~T)H-RonRYq=vlM(@r!{2VTDOYeX9dRC5R9bYA0!Z@8l!7%
zG@LOge205N&50Y((zF*Mr+{%%2^Ta7$^{ILdQg@4e(btuk@I0NKWa8<LG(3Py2cJc
zARHOJ9^reK_k5VO#mRX))QnW7d>^mV+J*8?*hOj!EfkWYBE7>2dABwlaB=6{T#f+@
zH*}E$4TjwgTbm@r&dtaLr6f7QC}%Fc2zRm2BwztF6|23iH+wu^FhDf~HY@5HuvEvH
zHG1+B(FKL1uNo+V7SmU?v_K14bJ5DmJ<BobKcSIuXPyUL0rAV?mn19#&&H4rz<VfV
z1?~%t7zeO``3hu`m1m0ynd7IZH=A>$tP_xL=ci|DVnI|a77Vc*|E2_D+~tNkP71_I
z@(|R5DXi8y%O|R$+Q5hWY;oq~SK)pmpTa`}!`YLE!wL~C1to%`XV)}T!=2WQRylRb
zG-trhtvO?LVbfADR8WV8YW5C9r(3G^r0ZJ^^{bbwZtfL=jyeLN?6zV-W_fgId@Uz2
zy{2ILrEi0x{$v#v_V2AW`&(9*lj>M*L-C+_mX6?*2oh?3yp-;;hlR?iC_1GB63kE_
zk(f;c@&M(!ymZIfAsj<zqMXKDVeD(&&Uzq2QT|$>cxSMy<T?Qn%uYm?HJj!N3lT;V
z9+94jhVVizP=c&S0dtPawyU{Cf(wYJWeF$1oXj~c@V4Q?$F<^p<5aQ80cc|gdAUnF
zr0h9ZuNE_ume13YBH+Ql`Fm!$$HjPDTp+TT2_!!qDEnfY<m?wav?#<?@lb{VE#Y*#
z%~EtGhaGm@J8*CDj79zfE>{(<xBD!I7m42ITAs0w5J+kT4C5b*6oi?{e1rNsE`}-d
zhBoyBxjr>*<I+K)_ZK-jAb`LO(!J0PCKVt6%wTf{EtVEA#W~3_j`#*HyZ?Z}JtTY6
zoKFQLb2u^ITOVs33G?KQW9I4mY|?d2<KbmCGi-K#Ix8+FZXH~~j~k!xpO3zJQuz-o
zQu`U+ToDcGR0|{@KWpp$pRgM{H4R6t(<6agui@s_A8*%9g=zTlPJQdX3#+QT0_%;v
zz6(+H7ue+&J3)1q7dvS`-s*(aVM~6-)<4_WAK$rd=I{QF>mL6HNYJ%o|Li;N+ns;a
zjtgZK@r?e_^Y6zL+G#Ij={+{kYq#eG>0r^g8|^lnKaLuEt8o73KUdyiI`1hE*C2~D
z!Att`_cmVeZMjRiP^iL-3g{QxBKD4FS@zG&dl>mEE77!egD>C7RpDvqEF^-Edk%%K
z>g(^q>elqXA4_hV$qxL#VS>HGlXU~=SEM%p5?Qv?828AOq-B|(Oxho=x=AEiuCxpE
zLaGsd!`3|Wsx;>9b{s^96#b_8Jnc75DW?3e7mM!J&c6r2K|Q4HKr8pjh%KQzPl(fE
znH>qF9p~(0g{@~~rpksHS!DLmWmZoXtkYRBNWF?s>>s@N6q*3JBj&2RdfSZylrOLs
z;nhb3I~eATL7S@&1001~*FZF7tC|Syg5|QsTBmenl4^(aiGvCbWh?9x!xf%*%V^a$
zadzrqF`H4I%pia>l8?ybqUZe|)}8k63%2@k#yP>+H8NOav%=U~wPKqXnx-~%HT1(+
ztGiK(E;Rr1fxXZSFuc-tdzVZDgBxJ?Nvs7cwg7duVQNnp-zC?Xh@ECJVE^rc$#u1f
zt2%s;^CTlfJ~6bgE%~(gkVwjh%k*sOf=|*(ktf?su9`UoN5+*VGD$>pz4b(|Mu}?-
z@9YSJnOM_oGqS4mUjD1y?Ag!$X3q8s@6n)~V+aK}r@?6DP>&~2JkIkc<avP2bC~e6
zWRy*_$tar)bJPq}ubq4KagZ7Mw`rNZR!AR0o!nz+6>o@y`SA+P77~L#M;k&HiHy8z
zv&;Dod!BN>4nzdJqLpZltc*(zf4cJ+6Mx`Id*=xSdxnY>d>Jc_(%I<f!(Ybv<b85F
zpHIvF=H|u4MepKHub7=|9=zGy8A)TCSFsNFyMymvFzBb;^p&3J`8r=7Xo6g#iF8QH
zGaW+Gc2iqUvtfRm4?7K-yu%br%-`T)_DGxHQ?%9J^5qY=BExNSPr8YL0DR&Kw_R4k
z;O844E23}!=lTh%HZ~R$RM%{rr?WEFp2jOR%Bl-B&S0raQjNf=zgWyL&o!VxG0Z8h
zwrE&o5(MycmSNP~(nak=hnXcauy8ybj7EA|j4E1n8s{6tP&E3G;yX{S+;q#dRq#gv
zDUNw_32U^#ttRDSILu%dVz><yt4X*HZZ>HAZua@Fm~gH$;pXDW-;rH4U23xaM$iZ5
zY>aOw9Fsj#ZeMc^!M3a+!ZI`_w;H^!CYb`#C7Io}Y$$@pfoD4WJpdO0^5zt-{~IvG
zVMf;<DJvgyQRTFw3t6}OOSAW@-AJ4@QHNDWsPmyvIHIWYlSut7hQq}yxZ(hjhCscL
zKB`(9i+5emKYerYJznFA23v$zA3oD{PTaFkSZZ_gr!D@*)n<t6tn`6tG)O)Y-y`yR
zaZI3I<vQ_qT^vsxoZX5E_%zDUa^ZD;nT?6UDo*ixHg9mm9)1H^m;eG3HM9f4XrmFR
zcAVT`yNM$BC{=Jkq+1(yHk>3=ghm%$LJycbX<X>*d7CqVs^?B5<w<__IYpOJ^Cc*W
z&)3vv3DN>Mb#_bZL5TPxKPEF;3yRO4Q>KS-s=w!H!b73Y0uo(Pg=~`-;-bcH&v{zt
zqz2xJkv+LB7uZpT4&O<nT~R^Xwrl#Q3Am5PaCVX#tj%x$s+8$?A-o2at`&0D<CubF
zsCA#u`MO7=UdmRG;J;V_NW9$$dHG1{hye3x92C1#86(|#{=gUaa&Ik0da*dB*PX&$
zg6q;I5gece;`fy_!PU*J=wo`_=C3y#9u$Swted$avspMPs9f*FY?$2f0FC_}ixdt@
zx4P)_&*zFV%bWy!0u!+qz(CG6iGu!GZgRLf_%U6K$D4QWeZBo}d08$pD1$IJ?reX3
z@2h)X-}%~|FeIp0AoEL9u}z)i9!3tXgc5Vb`PATUi%MD{ywyuV{whnwq$jVwM_W<a
z;vjIkP;xWOr83XO$nqejzjPl7@}-_pD1j^Ad(Ke*S(aq6mb^MXE{C%$oA5S}`2vBC
zOyunNt~vYULpQRz+Pvc<NjI?DLak9jG5|%9mE#34<ZLztzC0)OBF3~wVPJ!z^Gw+E
zo#jCE=@o%nz_CEvwTJ0`9U8oUpH55Qotr!d-{PfSHgjOsK^#Jta&zbY)>oB$=%~IX
zI}YE)npf@C&ZtGoYD{?GJw@xcl2cFOW^}<+T~NWjP_hnp4|m!vOtf{#kdovNw(_{h
z2FYLsM`oIlPs4r<!S|L-iILmAEbz*`Cek1*@nVXl%Rtz9rGX6ba`OkkUDk7kEN(?$
zzfo}(hXXvF74tcq^;Xn^WtpXAR534K!UDaT{ealFUI@a^ui;=7&(puZe)RImtG9o9
z`ZFwf>yLt#VUtKeM686iOY{#^w6*Vf=f5oGutzAj1br*T0Mg}GVi;^Sf%!RV2&~KW
z)H^HwnUBXQX&bW1#t-|OqheTY{*(<iX>~O#n~dhir!NoQ9{l|J>Aorh=fz@pN}d}1
zq;*yxQ7bMct*-lqQn7x*-{upLApNqK@_UL!P2)gEbpA#U!Dnou+MIl>Z%{rirVTBE
z=-{gXjSoJ;v;D++F`X2}wx?&)Ir@;02`a^L<R5!`L@$tT_%|)Y0A2s*&Z4!nLQ6Sc
zjx)*Xff@xCrIiPr6|m$>$<d`%^vbQ25ItWcoES=tnPEwhaiPNlX~~^}!(cU(MPbzG
zI8<YSB8sprf(-m_gsu)}O5bCF7qAbI6ji90!gf-Sfp|X5on(EQqJJ#fxamo=7vv{g
zA^Tk?f5*uL(P)@KH7KKOoVO)~vgUF<di0?iUcNeb+TQ=Rqn|Ol>Ksm`gT*{+w@Bax
z9zg*kxPWM%#kGgSpU{Nl^B@{T$yfrkz13o2)Xx{=ji0W}#cr2%Pqhm@>qm}A<E+AJ
z`^yUv1dZZqYK*pOlzvhiwIZZM)htN?(mC;4B1MVG+=ns0(bfxAhg5jQk~%?k4h`Kr
z^7js6`rY@36FrXD!N!VzGa?fYa*3jbF~^dv)8|imd2Q^hwJH7{T`arC_$xic)?69^
zN+#`DF&nx$!p$Um7grhO8`?tWMLtT1$t9flZ<wmwm`_kN7hoC_x+~h0i()YziMlDX
z7Pp=fB)rj4PDN?9Cy;I;OWnJ3A8Q3OMxKoJ8ExljKx{pa{uYw#cdDLkgJL#9J)&k^
zl8`_QXHZ;%=)gDM@f(6omC-z_wd*711XQ_gP@oeTcS|=F;jQ%INQJ?8lWg2q!|kr3
z?#LQ<8xp_?#9f^l_r#`dGggO@m@IK}p5nw;!VB2vAt4b)A{CIeFtt-n!#JZnuSB?G
zlHN678Oe$X;V;^%d0n9}6m%a=26$FN%e}!;k5I^@L}Fs0*g$RPy{zXG4;cE~<AKb5
zJLKZ($e-mr#c{IJi&o$?qJpZJXj|0<Ak$7~rGKz2prfhv$Py6M2wzM<p*n=Ab~vcF
zTT4=cm<e3pxv~1>fq0<I`R<t%B&d74oU#HCmgg}D+h=^M+43@7i+xB{T5E~O$=+Hw
zpcHp^?ti87QdV<nz^%RFP=O(ir2l>D{S^k#bP0DImxp7g)4fjU{8CZ9>PExQZsPHw
zS5d8pb-T44@0bIe=?E)>uhj!<XZXkuCr-KLRc%vn4bO;Cr)K^Q9mTWJOFG^W$Tn5g
zNb*)HB8~c<Jpmk2*&cqNm<|5X2E)}j615@gZDYIDV3Ra1GY9f}LQwkLpuD^6Czs)_
z0-U)7EJ2}4$^dU)R>~}GnQE{r#0;EC&C=V}7u_USB@-3{OCS-_k^$YOk9$r!BxM33
z-%#NT)T#%VQzM!f{6SYKXK%(T%U1(3bzY5mV(Y~n*$dFjtY9IaIFecN{era+t_4_w
z8A^QKyaD5fXj<mIz{$?c5>_LVDXDJ;?Ca_;nWbPM2tbcqkx*4px&_&7hJ%SH8vyaX
zst0xD*H0kXSjD;vs|l+UH+enz(T3CYf_3~KhNtLl0k!+$1Ya%&^I4`8F4zzXXSaUQ
zpJe|}E&8gpy5X`n<IjJ;MHd-lHf7R|1_mrs$s(mw>JF|%F&@Qtcogj`z@1|9Q$86L
z7jN{yZxCcOol!s{{N9Ui7I&3zQ7Is1HO)mghF)7*-!*_lMXICovE%r>;+T`iJ;y?O
zau-@@0I5DS5l~egbY=a*{lyC%!{gY9E}II&GW`5j%`k$XsWPz@k)y?+FeOW{I3`&^
z9cZ6Bbmodj(P$@Yj6}Lu)4~YOmug_v*}ds7>tvQ|M_NbcxX5RubHa9sT1Z(S7NHWn
zZRr9#2WqWGBv)06go1UN>~=c}G8U&j!C0aWd~Z0;p%eDJ=m<}32p#O*Me<EOgv!BC
z^?p17)YbBImQLO$qXn8-$W4@PJ2@MIK!27QK;;nih68k|n@%y4+o+f97pUlw;io4l
zIu)w|!k5?7a2p0%c6^MX>drCH!&&;?_o6&Qv#*(p6yw31=0L+I+)U4a`Zgn7iDsF~
zDb8{7&aK5e4m%?x1KN8x&xhC|d|>FdU#w~;K;+Or(n%t_ii^_%2C`G9Qt|VR9iiD9
zB^R>-uWs=Cttp`Sz<G+3NQsnOcCC_B9X8nV1%=+g*crzdZU$4H%-J;%L&xIP4x1$6
z*{gF6%j(J|HQGEMwE)P*JRjE`^v-gap|UuhZyvzz+aJ#I>0A$ccfPv+<+i`H;>gmq
zaz(VCt5Ss(8}?LcINS>JP^fx^Il5SHyg>t68;L85@Kr4w7(u`^{DcNt=&9}YNXskO
zDO3olF<X;jlC?w`D|g-M!8c@6MYfM}fHnLNnoewWoW>68FvbSq5HMFKb)x_&gmRUs
zvZgF31-pZ*sDh|b!hxOC%soRHc%Fb2ZXuO3TBEHMp3a6@*3g_Lk;jur4k>s8HX7y~
zXq0@#$g!RoXf4B&qgSTSu%==Q)i!)qy?R-#Cfv$L-d>BJuHt2{XT|06(L@v$pMjT6
z5n#w{h-z6Tqwdgj0fDMJvM_YUG8})PRDC?6F378>vd`z%rCLMzxTXS&IfB_se#*S5
zz$`6KF&HYU0W%`90j$)tX#60ITsP;_J)YF-#PF4BjF{lLwGo3#uci?V9xnpTXM~OP
zE{+k`Y%fAr9yrZvFe26>Ncd02#ULFE_1)AXLToj1V>^#0#o4u19-nAwwfep-OpVxN
z3H=dQ@am?P;{OxPPrLw%)+Sc`^mlH?7Nzo%tx>E8%R4nD2i{Uy%+011c?XB}d|Zkv
zyEU0J5tm4G0zA%H;6NvJ8)<}O5y0FztCO?Ic@6>&nHC}$7}90b$wIb(gUgl*YFV43
z3DrIs_`+F~uRQSrf#uHkSvJ)qp~vIwk|ammM=VkShiv%{r@;S?kMm(ph*C^O9K$8F
z3B>DE@5=E+*f73zw+hKS{`s!=DQkV_{{62$rQY4`tpHF!ufLs7t9Nh55Ke<T{IjPV
z#Hk;{Bf*Oz9eE2i?>9k_%x9(Zj6wEAc0gqD_8#ZnU*$<i7eO30$YF!-!7K$SPU2yM
z@Dw`s_;5a&L2%`TeVpV}h8X(-%2#WzRZsk`_1sv;y&~Ayj#~$lZ`1kJTy<B~zE+bK
z#hsDca7Q}=NIm%~RS)%6%3Wq2nV|f@bL#xl#9T!iI>d5E!L3$cY1O9kox1BR)&O`D
z0%~zZL|MJwv}Olbr^|g>6)7b&;*hTMMJYv=*4WYFWA{E=mTmgl@e=|sqxmq`t%vaS
zNbjQQVYe<^i}Ap+<~wI%`Es7IEr*6+Z}Y)+A+8s5^g-k(*(jc-vr#tc_*fwq1iMAC
zT9Xoh0mWoPA+o7}Cu3kiF}MU*2rwPcY3EV|DR#Q^ToJK*ZYiablANL<dgBw7Jh-=m
zrQ6k}E+Jc$d`3=gTie^4KRwwvou7^GZQ#?^y`6iT0A_>1Y&c7GDB*xbmdYRy&7HY2
z2F2Q72TH+<@Gjmyx@BWESKW5nz22l7>B9=2mld8Y*ZQY?iUW{O5Rgt7-^gYV@9e!h
z4+hAjils#e_445bCtbT-$idm6ca5V<yc1DmrbE4)TmGmoFwbc83e%^CkqFpKjiM#G
z&B&Jg{n`sJXQVL7Y@zUiq#G)M`?cCd>zxqw27M@`Ux)7cv+h)<c~E$GQr1;&SUQhb
z4Xo-WNVSe@QpCA_+k)vSG#GQ3SAq{#>%~@Ewf>O?ptAH$-*wfa?>AlW@Q#1i1|Nu)
z)}18lkilI>TY|EV57w&7nXAus$on7QR;BXe8eUa0wKoUwn`XVy+bBLM-sq~rjpo)Z
zua48>0N)Pe<zsaM?1Y{O&L1EzpA={NY@1VSiBHi=Lj(MqdL4wmDRmX{VOYazIV$D7
zCxO$EIQ7(9G+7?bwQ@MsM4h4$x5?o{<NHOvIHZ$mxgFf{2ld39#iL4{7~6v3SMp$+
zp{n9Z2KB+tb2kLjwe=*5gUlUYv6L%(DpHJi7x`4+ad3RT%7H^qaACb+F-8R+9JjgH
zV|-relL6n|@`>%yES;1>EMUIPBbL&`&^((>i!p{Dcici;0!clH$JMT+V~$rqk~BX^
zwtDv{NEMow%_LdKRX6n7i<vD4D6aj~7~hl|H12pb?B;$73D_d<O+SxR0rAsJNfgOx
z8_C61k7MnV*56d07Y&v5RJ~0Yz0K8?e?G)FXZdA&xaB(9JIyXtccbMn%9oiz9{crc
zfkV2TVBa?Ap#$^BMQv1)2KDD7=V0YE=NKFU20J{);8)}~MJ#!Wy@+R+F9Uy+gD;nM
z=Ux$l3$pyA?a)31s68AE{@>PyC-{Q>KMGfb#uowLISH%Jiz6>eli>X}rJGSQY;m?=
z{N)%O$_Nt0Di1aTcM)$gaIKk+QNIERyy@{`jL8Gl;+JgQ$FF;MzDj37Rn6049DkqS
zDRWX>v@r)U&OBNWur2tO)5mk|(PE|^ar}Zq!v)|7fRqbs!)Hv+b?X)u!H3{0ub*4U
z;2Wh*AUQRxBkSX~zk^j!fZrI#SzeMHTr0-$f>k6pyPCGRhVdap1$@G%z<SVDw6;_9
znxo^kNnzwMrwOyo{2clTIf{}T!J<t|N);!mPRxo&ML`@+bH9piSvM5OZrEML8U!4D
zGALn?z<Hc=OT57xR&*j55@2wzq4g%b30C`4HhF|b>u&Q(sv?vf#_e@hACCAEvq~dD
zWT+&gI5+3q2;Og$XGOuudXz+#L66b+!R*_3JdXBQg=7=z#iJqE0XDCVUSf_G6A670
zpFO9pgxS~u;q}WCd=-T7*b#i?%`cd->n$D~U#cb3)FO(AP#ySao7zBWQpf#G65y{n
zBd^@)mMvML6fFmGiC9q{pR%zr-<z%LnljVY1W{zEJr8%&k23jFva=hNqglZuk1B+1
zgM_hz%%5NME%!I|EZ-91kWbp%-5@lD$QYfNmBv#jT(l~kSo)0D;O(lmL|H(@6X@6w
zvx&o_NW?-jnAiNBEF94c;@435tkpRS#|JG`6Rr*a=;{mQ8O51=IfRs>OlSj-)(tI~
zXZZVTYj^F@x$G=t;Y%rMeM(u^X~|fc<hO5ks$)9Lj}Ey@N9|74yxpH#m})^odfX#t
zY<(LZI=m2AQy5-{rA2@&!@~Nu;#&S_HcOXXIIh2v{1ofCm#>yq%NlW&HAqoB0bT{Z
zh!X`}MXF)*fygS@6){ON7<7~tKKvLYMbI(p$2E0$Zr;7KkG*_xGwsSn2@dFWHiBI;
z4G>WV>UOpOg?;_%V)B~5FJGo-XpX}jb~ilGaLs)e@MylUgR=Hwr!xHGlkk=+7`@4=
z<IF&Lr|tRMr@$<pPtK?ji>E4Th2b1>`6Cwj^~tubKih(?BtZKa>(Hq#ct!gehum3p
zEyxqWY!=uW&LY&i6|7M2G%dMml!_=Ug*MB42y=w0HZM^<k@G6HALbl<7g#LoUi}>6
zguWB4gh_xi%g-sXnbW+zm7d9*xAlz3e#;U4ggxcam`kYUBf#3i6_W8C5Y)I056;@~
z-YP1~uX&)3uGwRLhsgDa`_L{lLPve0{%!A%<tZBShC=3F3(0c8A9aL%Q{)ll^21DR
zrax%KIw~fZ<&m!A_<}Ql;bQ3(QL;k?ykBsd3m|Bc?MTZ;fUq$!>~s2x6#4d}@mMC^
zDXRYHI~mML53}gB+cD~gwVAxW3Ra%1%PRHAGV@nbvSJDo4Q6d|J2F@B{c2JxS8=$q
z+AFbm4Vv13TZf_Tty%!-5!+5GOF-4vwU<WIm@P=Z!(#xR67~{*N-?5%?)U&v)?Ci^
zDu94Ixs8&^1CmfSHu6fMXQL1>3GY40qu{%b=4}v?$t3iTVLBJos^^nMR!4^es@W0@
z3ak71VKJ}Q>&Y2lC2_Juv#tkq<{Vr#vgW`kw9$!VVGrxH0?a2vdVV7G+-e?h*q*7!
zYy_bIAM#R}YD*%%;qt&x>X;<E%u5b@#K$aGUp*A$FpO3WRrZ7JST&0rkm+o?Yl~MV
zv(8M#Le&#{Ef)*q2pl-F%|L$<Q4I8T*9q>Dsre|!nB-&PbVvuO=P`A12O9diyB>B1
zOYIhx(EwX=M5RuJ8rkE-Xk3x$uCAqY5r5~^e8;W6Gxo8;M3fj0fV@Rif*l2lj@ry}
zq8{8Z>_@Yn)|Qt*CL7eORJQiI^#KV#I@RD6RDFl1@^^>`h9X`ddXv@zxfX&6QkON5
za<3Eeo!~^|u}we5ttr^cgf@}l)vuU|*GGHsv)QYUL>_fy_eRqH3dy7j*N@O(6jO3D
zE_eJ(N29hm8g)&p6;r`$9jTqXVC4fVJsYEZ&;Num@@wQ^5kE5kcAdv~bZEwcwFhQD
zm3DuYD6u22I@%5AOX+GINtGV^?b&0sMtu6NNnk1yDC&wH$a!sn)~RvNSWoITH?Nhq
zRlhp&ZFK@zD3N*pyjXg^UUG}uA%~F$Vc3bnbnuVlPmbdQq!!2t$h>`Tg+(||TPzZK
z<vL#N=8Ex1foj5c3e$ooexe6lFrD`r23N$VY?CL(9RWVbs3eR=H!%WQALO&EPURxn
zPjjG{F*=NTZA<xi)Gg1@gfa7q7oirfW)k4U9VGel-!iD>=<Yf?8f}vev8Y`Rf!B53
zKIY}>E9`MLtSXv5Fx?ZoVc_bpD%TiPtPV@Kc0j@vwJDiJT#-^qyGVv^PgB{)<9ynt
zUtP}Bkd0oQXR~AY6;MV%7Yge_$ufW*aYKrn-V#@JBmkq7Y^-QwNROt#Sw7K^^fL<M
z5%nbLOB!aEJ;_zZpKDeQqmf9EL+$B9g4)N9iDemuGc=!}n|&-)A6Z0Zo2K(}pXYPA
zziM8Ix<_4gxwWb$4JNv%&cmfHNYHBBnwhv|P+{3zp(c0>CK_4xFcrCUjKim0npc{7
zWZ9$1?doann99++`pKIY)FBo=xkU;<0Yspi4B#XXL;@4FU1Xj<S1}pW$|xUj?`Fms
zbl~1{hxOFyUSp4Wu7e{2g^0q0r+CW|2<2CeGd2%rYZlGaAebYKY$F!XfPOy0q$Gu?
zn?2wc`()e%2k8{f7SAW6eCYi!kMr?7oBhb%*}<L`u_h38&N71G?M2_l;J?Qb?GWm&
zE?Eu~eN2|JPADRQh+o4mh41Ae5R|A&a{IPF#gphnGL2RMxrp;}S6LYruFML_!TV@(
z-zLL*e>g0kb4G5@SwCFW%?nlQ32^6$K-ojTr?@}P%jHbN0JZpYE1nNJlFHgp(|C3J
zqu`HXb{Jr^L1<FI#|4nQ;QqE|vO@v1cA{;+pvG+xL2YQfpae$V;0ZKBsCLH4;-S!$
z27aEabQ=R;s_(<YrJpRfD5CSQU9(+Q@uKakl9Ie_Ru8pVe#W=(ndB-VLim!N4Tz2v
zyt(e}y>Kn-f&kv)>A|oyb@L%eyj4R<l)^*~$HfG*sWBPEO?go8wE#{>mv&fy&L46i
z^yl>VN_L?^>ip4VUj7X)Q4%iOqs+d9(U&c}QoN)K#bwJ>I`@^%*RE7^lEPkFCY4eG
zXVF#AxC|P1syhq5{s#P~tD_{udg=i@S}XNKoui{ZmUh<Xhv)u1Rl{4CC>4U&k6?+)
zdgdjOscfWjSY-uE{@y5m^`w9mbF>cPxvL*YN&p30;>uAB!&)YT<zS?3BEyPPh@$(I
zeoH6b{qch@+{;H-y+3~NHROfq1ay|3P`<r-SJ#Oj%53&6?x&JxE5vk^-cUxPOz=;5
zEcD`u9vx%~dm*U0aCHEoZ@@Sa@Ff{O_Fg{y>!X9`KR$i?{N=OfFP|U$EGPku^-YUT
zu#{@AU+q5+sx|WTS2I3j8Xl%e{pd7A6Z@kPnFLoB1FE64vOLr(M;;gKORv9I%n=BO
zz6GgT_d%;y`u`#=nKD10glt%_g%T#_=UL#jVy;mU5%A7Whzl9<&xfe>5~+g)5vr^w
zjCLFj_S~|KL&B{*<`!-33GN84@Icbowr^Fxp<PY&CeMT3Z4BlqeydR^CsGR14AI55
z9R4VcW9jr1g5M(2z2#K*I01cX`AR%fx$bU6IgBtT&))avtt)}cNM7{mG-0!a1#9U)
zD6aIA50>MKczSi!$Z7;h`+=0v#D7BO6Em8S%Y+<-<57C@6!n3~l5LHd1JAFr2W2ZX
zRx7?nI=w0f5uliNLV<c#BGba$<EYQ`(G{+7q%(*^hx)rQz<pgCN?l<WFL+^Z;7Zy1
zzPhx<lT=Ss-aC2{fC=R*bK)^&(1LEtu&>+j93juq_n@iXTRsx42T7D%0jMY~_97ks
z$oe*w8Q%tP9Vv|7+qtwK8t0-$;|wF9gu~R^=OaCcA>xLl8o&F^$&Z#22TslOwbSE+
zmzuorTM|0F_(cu%%G3OqL*UfLnB?K8*E{<QC=vubJWz9KL7pJ5xgT;2S6&$BxyNnv
zy<8E05<0@W!p91*Pk6QhDN^(+EuWPZ)*at7pq3%JtA<=V-maP`tTAvMbKQusFEt}#
znoymES$a`@sY$~$LcRx6KM`gcS`9%DhvO`r34_5c(<S1dsK}Q|a^2>+Sb}%7-DDt9
z*Ydfzx(~7>9b=$uO|3i9I2^JP&INv4aCSu#g)%&AQe#Hl>A9yI1eokoG2Z!3WQ|z?
z9ka~-syj8)poKD)PSSkKtFs#kAN&@@4?9;Ct|~l42(dN!@w8e5u9S&zAc03;V;a*C
zRlF{wm$<q&Lo<D|g(B*AD?T7JmyJ5x6au}bW2@lQ-Q;OrmM3&&&Ns-SfN7sm+;1R+
zUIjxj4O+Co?i~enbIxVMF+4s$2DIPjo0&a~z>gADH__W6q^<n%VZz@)hOgeh@TZOk
z?YS#MWd_E)%Emg?FQgVAOq9TfisEnO(1tSs?>-<C=wGMnBO7tOc;!ggE4-@=58y2r
zM3Z7qH}W+4kWQ9Y#=Q+AMC3z%_al~&VO8;s<xu04<ziky|0mfDZ_ZMd@0Dn@LBQ`x
z;t>rF@d8jufOL8_t#ef=alir1Ma2HZp44{ZH6{(ZrXQ<2v97<rx)a(RVT{6R%!zHu
z(5SfCrWk{-xu|pVOZzPs%51@gbqU=OZ(dFPy2sz~T%y(iC#*0Ijh5d^`1!b!4>vCb
zy^1z;$fAi=<P^h<<YS_i9Xwyoh#H7AU+P<D7jZmcT~iF5KNe2I)>wpT#H+?`N-MzX
z_r*b~xy0jQF=;H3P4G&98$znpFd$94@FW}7rKXcofAn$68iuu;3^5dfwGgB)^_woc
z=*hix^?O`<W!11=fSH<8s~uPl+xHdEh_nX9>TTx(?8N-TBwv*7eL#^>hHxr7BaYaU
zrhvlmE|SWp9ooTI^hTL}OpL&9-Ckb49xqPv$x~YRQM-kOvRSJWSvnS&pD3M8+Q0na
zV3sp&)2O3Vr=<qznre)`JY#6dlp0AGy+*y{H3iW~oSVkTWrnV;hXs73nVf<Op|P7@
zVQCH^%_;wfI)5@2B#GLzYblzWFeXqG{=2SR63Dvo(nmIHt0|sdwHRE8e2ay^`X$?4
zAN>M(*pN!$$nE$*J3K9l5{{B6Q=kmhO)wEhH<^(v5$WAg+vs1-@D;jUEhCth`ADVf
zOVkiNf1;;aXM~}vp#{24M_XvP6WaDJJ@n;u(3jUiU&hd99{TJ$=(Fpf&tm9=6pzg5
z!@UTL`A+1n6S`7uSEq|J-Ngy%V!y+t&OMCtl`yFKWdws4kB>$kiRk%RF#`aXQQ75+
zvdgIKY(?3)5BZ9+c~tg%McMOw)QJP<=$5GSx@J;|E3KTTJoNkeC<4WTNHZMY8kO{b
zu89Yu@gYbV^ZZF1Je6<V!hkkr%u;JbzeLF+1&`MEB0z;7-cC|$!F|bkWJ)gtc)|Ae
z>|*=y5oT3=tO!#wyx0uZlG_!#SUI_M)*qjQ8NM0o_ja~)^XPd;jair}*d=&1=|lqA
zpn(;g#q4Lj;i19`11!e_T+KMba-O--79quF@WOhray6BT{orjR#OITQQuLvqF)U_c
z#xCAkR1>5giqN`Ahkr80a5m^ZFk+dXEygrr=T?)BH|F`7M6ND76g7X6u}pJTfT+iT
zs!M5y(^C%BF$wJ|L2f;rLCJrbu(T8}5d;_vwvG$IeH=pHM`#YP>{+?YnHLdqRJ=-7
zqgHgPSm&ZXOi+hC;MywVm>#%~v3G%w0nYgbO!QyM+c(Rm<8+vfoSH64u^TR^QO`rG
z+XFS|FAYE8Se9huDjG8e&nB*b`GLvD8uQn@ZM+yREt#W9<dQ*s0C8H>HF^0IBWKf{
zVP#o0>bM<n-FUB}a2GWPq-gbJ-^5!!I1;Q&x8ftKP=)G=qI&)^W2Ncyw1eCp>MOPD
zh}B?`k4LX&tblW4Afo*;yU-UmqQ&cyGj}uhSd`0qCSTy{si7N9J)npt&z<B@g~Nd{
zCD=yb^En>vyAxkP<v;CI==#G!%S2I5=^aQDXcK5U#^Q}LlxWi%v#Qa&1U6ViRWYui
z8lRJSGTEeKt?O7-Vhu#19>ne;(A1l31NVi|r)jq6Ye`W-Sqm;Opl(^JuP287o-Cb<
zDCbv+Bi&wP%6nLShB|u$Ou4>Go@8{8uy_JE3;k?HVY^t+EgrwzYjo8kjo<3LN(u$e
z93vAIsoZsqfCC%Uy0sS}mz7AYZ2)$?8<4<gnQo?^s24-N&t@kXWd)yYpe|{gljqgQ
zX^v%R8)M8l?~e72GK^8NRN^0E26B6T7JW=W8p>fY&HlzlWBggE)xLgddzE6RTGv!`
zo-0&U>RDpb_05SYy<Qh7@LZT#bW@nMxw)>RVR~^G1<3N+$Up@ouh-JHHXcM&fh?xh
zwcm!QWi%^9sMKbIZT=Xo)Q5_-NtY!=HtV>Ok%R^hYJ;IT85n)6Hv2FXpKdz%0)IC5
zscwd>C>5Hh9>EVe5pG{M164Ns1H&LYSPvMI-A#x5Wh2=>vVO=E;YqD=stnh!XT@~C
zBCi;UAPIUIlkK`1vAZe@t6rYu?jMD+jRQn|r6;O^I3;(%EbIj9A4hVp$i?fn<t5+s
z8(R(W^(;Rld#rVV#(~rF@?|l9K6!;Fn8(E#-s+DIir0)A?CcNgE%rLj7@JN_gg}UX
z{`)tCRr1scgMk>MA?j3UH58-AVV>OPF;F0o#jM7d$Z-=wn#iwO;`cWUuHuHB_}vwT
z01Jd&j_pHp16^9_3mxHeu>FGgRO|7%ki*q8tJhdY1&CwlsNjY$<p#H3l1?_9(20*x
zNrK4Na8i&P=_OA&t4wmZ-M!Pjd$fxDLQVdg`)j;<VvHWhPIO`G1UT=~1XP@mbr7;O
z$m(o^{}{(Z)@oBa6)h?L<phrM;{Z(;#ZErbXev)NY0d{$DsJ`Bn0l$dx34^-m*g-p
zBUy8QMjU2^f%<hOg4Y=dx`1%$0LY66Kvrh>DpHxShk&XmRj;|HfWtT!N}s%`dO&^x
zGj+9YiGo^qV|5`C^+twb3WQx!IuUV;$X;D7){pwZkT9AkPXP0Mo)$LfJyP?pt^wi<
z6>TlHj}PiNdQck}z!=$Fw~Oh=@49zk^X?pV4{-zkPu{`2ch}mrYsduAjtyNLYj^C;
zcSl#PU_bvJ5%XMwxYunTOhIpP9w8iV)$I{XL|-Yn{rPtWW6tloH2`b25ozvSbrFMh
z@b~uC)&HDrlDr)*O0+WuX2D0Vbi5|>>uOynF@t9eM_Cm8q%}xqt*h%d**e1T&3D;{
zOYer&x@<vN^So?b`DjqV0rP+47L6kY&`#_oIzyc`_HF}+WenoeH+3z7aM}l`)6N5f
zh9JVUv6FI#hRQYP^$k7ob~bCa7B9(qO<4zA@%W)mcM~?+{M^<Q>guDXc_#;kz8I>^
zba-?F!^*(-6Doz~zqZNH#x=}Eqt1X$4$9u-0EjTo)m7&P)6Qq9H>hfSHY?5qt!DV#
zO`?SeRmqkn{CM4DB54R`{Kvq3IeD18OkXB_`?0!Q&N~Co)y=aR8!tO&tTNVv_Z(RM
zu^YPU?$yk?>0q~t`+--C?sA+=j$4tqNX71D6huqjQ^*P*^ITsBh1cG~-{+I>0g9}q
zni7A)&5PGfRgB@?e$f+saKKj&)YvK@JhL%Jcw6<fa#t+QI>Gg{&Ss%@0~=H8ik-D5
zBaz(@-MH+LqiC~BW|y5fn;bpEoKg&m2J*dlpXy^uzHXtXsULB~WFrNmPjQ1u!P_?0
zvM$-%s(#4KYP5rWyTO+7S%sX>e09r{E2NGvd0^qY4}jm_)VjjQg2D>XfRsZt+BJg(
z&@$hg-~}NHYLsbw>*H>yFgZLGB71~Ufr%Q`DuMD}!(z=S7Qf`ag$mhZ<PNhQunlhD
zlU*9(7Waj+^>ScT-gkJLh9NxwJSTCT6q5~{v#E-{a>Ymesq2MX3EG`2!e}-xNPRd(
z6TI*@F3akP5`-m4k%8Bv@%Xi;=4GwLQ>av~5vuCB)ZtN`OdL8y)=0x4>1#y&NOsAO
zYPeq%+M*^qs|5R_uqh3RRf8!sEV9aa)Ow9iY#+tQ{^~l;lwN8aq4vrcM(Z&;Qqet{
z@Onnl>iS&HStm9zs`H@0DovkW?gi3%DA)OP_SpHpw*D|_wcyMXsUM#eOfQw{8uccS
zT{v8}LZMR?aSHByHMsK%xF|Hm^+sr7oL3{WuVG<tDkH0K&WoX4{cxO9vJMjk%A4^9
zx1?CI8^qc&Ca_&=<Ld8W1C;D^*0klsE?1;#orSBKbhVnPb}>N@qm6S|0B!?aJ1V!|
z<b&h<adtoRQAk{uoc*#I{zcKAQ=qcm6$t-*1aHD3n*8Lja*FbuH2y7^5h@&wIJLxX
zE}S=oyXj*(6WGXx5vn|*UZ{D-tI2^+?xL8{P^>nhv@@;|Wm$uX6v1r6@^opY>aQ59
z5)NxMh}82e-LAj?3ziBqbxFVDVAU>HGWiFtDH+*{vW6hCH%w9(xthK+6H&M56?e4S
zNH|w@jHg}@l;)H{hEv2JG4fYE`1)(XH=;vKDbO-q3}))m%8A2m)M2zCDo=~Wc!a*q
z>K!=Crf3y3nOoOpfiI>$EE^t+eJN_SP*9v^!~8f`K336#a={I?j;bn5mCq)JJb28J
zN_Gv<(rIz7$)i1gRz)d~jGrP~bNtd4g+i2rNN5Us(+Z*hYvErMzDY@T$mDVt4J>dM
zu2mg5ODHrJmz>k2WqT6X9colrqOm6FU{oP0%^g9qBYLHq2^eam6U<JnhH5<{MRBaN
zvB;={55#nZpT4P|sA@#ym_}Tynp3L4&V9N$oxk75kACO2D_{3&0wq+enJO_8I&s6j
zwWK9q9JY33q~0(h=dGpBF5m(lXKd`9h)nqbhVGBSbi|&KwQ({+ZxJ&o##y8~LXSK0
zYps!)PzfG-O;m2G;28C-TP72s|1Mh`|3pba4aQz86&+&zqg8wA`mJ57ZI)_L`3CFc
zUOu{Jv)2&a&oQDp+7l6rn~bV%NI@K)wFLC~Mluh(tMuK+4oT{cQVxZD+yvnRp+tw&
zC!$4aqgXA-H&LcHAP%)Q@aSSt(Uc!iK5Y1LsMRCE)A>F(x<#X)!z?MJIFzM=<26*m
zcf}zgf_M-T5#5M0pUH+*)~wEywQJ`rPOk!^yCkiI<JgDq{`kRExcUx7g?HVgMKVJx
zfCg_{N5EMR<9DCUdN%Cu1ao#ZWeIaquj!1lq=QqI(qoXVU~``5BeX|G*-jOtUAq1y
z2beKB92b-E5|<h^bS|n604fWwy<^f2Koq*WC{|XB0E)Q)>BWiLnL)6%V9X%vB#C;J
zl1!}ZU(9T#fdrf_F-=`p+w8if4?RCb?^B!R>7BfNhg%+frAX#QNtI<|wQ3%w6O?}?
z=E)$NUu4-NIfFII(K5gt)od0g*>8Di#OBdrXf5%>{2t=*Fj`POpKK+(SJQ#uS&Ex5
zNob(mpTv*D^?k5R-r+n0zF(Z?u!=GmC&tq9^7Vd?y``9LV8;z$N;-BfuJc+~F~X&!
z0&H`H)FuijFY-CGEmLQ}k~0>0pdn1>ijc%~&To<9S(g1XYgdSp=0;JX)Rb{5R_v|K
zL`)J7!DGrMp36q7J3CyXuJ{yg@y=n!#vecU4p2bQwb{i=YESP&l5TQQSO`SaUD#gd
z#(1m7+Ivl=a6Maat5DAv{ET$!K>kLWog|;?=nzpp)6H7$8Dx?P5)-*wckKyq^vV(h
z$?j?jGOneAaj-<!?6@lQs~e?q)AWT%aA0QUE(=JQBP61-N?flwtM1!aGwnDlicOVL
z!wTwxh6S=}7|F(GyNx5<G-e^`bgrKh^n9D0iS3q2=V&xA`D8d=jC|w}jWSow%v3i`
zQrjLlG^SU5GMeO8W#H9FV{&kTZ)Q`!^~mr<qMcMGKw@YWqar!Kiz!Wzp>y=9a5*K?
z3c2cKm&2?qoq$uCkW+6fXdpVt8ifVj4~pZ^HA)l<Bo;N#^I}nsm-`VK)F4MiPOp@&
z^xpL`4!~ho(Vu^>Ut0?688nTQx?vcd>QzNFx%NrVXO%vyCN3%+cK7P~&Ee7krH&*}
z%pM|+9{n{nnoT%{5=J`3GP4}BDPC_Nq!wTrZ&I~7ww(Z}`0}xSXBavYk_QJpPM1~H
z(F7;vsvJV?=zY>Eu-B!Pm2_z}*+#pp491+JQ<%0129|=eM0$Ljk=#}*4PQ6UYamoj
zqAW572+$a#L#;9WO|$63jD|BAb*P$3cKv7-rD~dEl;TlF!eewfp-0(<q`QuK)Tpv|
zBhTJu{Bcz(cw|pZKjCIN@hQQihk!cyL}eQjmqPPX*5$9YrzJXeT%??uub99oiH_z_
z*zfi6m`pYnQ{MLk5E(`>%TIC)UlFAz(*O=IFizE5IZ<g=Uks1xu7T=lv18+8)HC(0
zCrZ}LT#6J7(RznDPV#C{!e$)N<CesB4jP0?zguhG%Xdv(8;)JXXVa;O^<JZ}X9cj|
z>0$KYRsA>HxOT>FxL^O94aB-!U)@Cixzd@xdW{o@wyC{1uN|-r4Dg5&ZL&(El$Z__
z*kD#HPEN&bgM*7?v(nsta#NU$;ItUwh33gN{kwC78j~=-NHmpF>8R~1)kU?dgeM8q
zaf>qv&>7vo??$Db_&6qYCG=+BS-?t_uC@>=sX_+_CW)_}yy_><UC=-zI%h!TkV}t&
zRF-Ua<MJqCPhyG+|HEwLE>QJFMhu){5Ymz$9p_}blCYeHY}1_A1rggi;)|$zct+gb
z+FiSNZy8qbuFLJMCer~**Dmw@z|CH~iGbLHsN?Wlign#eZ6xkhT|kS-pId8v)7T!<
zI@?~by4>EA^iu*`MMJT671hp*bNna9m9Zu;;Z~pc$O3AiQD-coH{>Lwz`mP>3E|;|
zny=j63&0p#2UEx!TtWxn*TzO@eKDJ{n+yGb(gd**=SWSEv0E;IQnMWjH5Hmx_!LJ$
z7@&q2Kn+0;tl<pyq%Js#rAsxjCITAKNV|hGn!}r_164N(g2>f{8FjTCFA4#Ciiy`c
zLPIUKe`4Ue>hx>cO>8MP=kJx%aXzfhySEf-ia(Ro<PMNFnoLXGW@~PB1&Q#A4&-3S
z<!bX|SB4*QJxPX)m75I$npiMyy_0hH6S%IZg*XTmNd?>y6Opo;^m;vne-uo`+hT%*
z^fi{Q#K~bU3zZf%%-RpUeb|cVYO7l{Rk3y^N?l}e>bq1-<7kcASculG?n;{$q<h_D
zyS9yePE@jHD_f0VYVghCPAq_2(~gC6RI9)S!uhyibzrzVX4h)T#?~tfC#`G6qdIyf
z<Nje%uA0CK=&f$0yM8`{T+kd|{n2FkN^Hzra%22bZVu8iABIVhxeA5MuM|JY3fM@q
z`YP_kUa95}wQ(}(mtx=1n7a84MN>_^T$=(x=H;6MSVT9_Zt}`LKG3uX4QUVJ4{wUa
zJd1<DW3kJ=+>BDCW$@(mAl^#eo!wv2W02DOO@`qszj>c6;mB~%^>-%^q^)^Tpt9<9
z!B;SC;8@R4g`h9`iC7wT`Ux#p?0VcymRHt<YgSB4z$bJuZY^6!sD%t6#_CXpkd_SI
zZrIbbWGnSp7q3gobpDcZc82ekoq8SnUomAZo)aXF9~x;Mlgfl$D`1xBejgQvz2tE^
z(I&IY`7E{9)NKyo#y2&Z??KImuv`h7JG|CD5d%k8?2wv9)6J8NEl6!&{4JAYd+!*=
zr&ImSYwQ{bZqOrH<<8;JgEsX5maNMl9|r4~58r<S$ng4*5$ou|ZUacRe)7-`k80ro
z4a(E;H-c=h@!0-;Qd~?Pgn$(cLtP6N7c~GQQzV!ncL@JubnB*BRcT5;eoSsr>F{U?
zGJJ~<m1^rTktOYhwjI&UFquXG&Ng(jjt$H(!&O6hn<0ZHsR!cuQ$WNv%~^Pq06>TM
zmShkdl03mCFpr`!g}w7Ic>NX-k*#Iv1rCCH<8tam8+4Y<YpFgF*75k&><1)Y-6*X3
z3TjIU=tCO)_Bh3KCHX(Ib*c0(6W-LTlH8k|QBkJ*$DCCqsLcsS`(l&wG0`<5_ne1)
zeLPElEoKk<g0bC1EkPglG5O6^a*$KJOx&fukH*w|F%XLy-~{i9EDW+_IxgmO))S}a
zMLtSU(>6}0Q`Aau?42HWSIiQlk+K(<9i&7V4=Q2T4v((5W&WZ>SUyQ{CuZX)gdh5Z
z*^7CxkIsJLoJY`te0BInE)>J`vsBb%?$T>skOR}pgPe0^xtIFRI`{ep$`=?x%IcN0
zS@f4a@Fig9SKH~<yt6IPDvNJF(iaaJ-itLMrhFp5Az!pDlhF^8rK2h&1Zd$~N!?t@
zMx_q7EJP4WDh1+JT!ca=hUyeMT_1+&CeMT!tHVGV0GN{{1NJBiC)??m?<CHWbUfBv
zYH^bf%+feQi=LrWN~Wjly3!2>(5=kVrUe&LB?V#Gyxb^H(;-`a0@@5Ibof5MYKN^!
zXTm0$N4Dh#6eh4Y-01v->g>B7RH1AG(h$bZ(9gTwriI+#74N`++cm4$L4=ZIQ97a3
zsg!YdlYlO_qfQ|^*aC2jVjFRv<=R>&yT((srhnF7HNSn^##&h2(*S+*qxeN~+a2K?
zFTDmLPUjjkKmha%*5}=HJD!VcFz%YZ1gVlu-7x236S1@8v^YLyr+|={^6Q8yzThEg
z*|+#^-)BQo;^uOJNHLj-O$+08(w3GPW40p@kHw%*K){<9RVa262<?ym|Lpzyej7)U
zAdJ3BskgTYNFYSYm+k>AX=KT6Ye%+pB)Q#Qnm?)t6v?tcfP(@>vf23SyvF(7@q2`m
zam$Rz%)*6|yJvQLE*4Rl8F`D0jEw7eI-PYq&6c6`JjAX~OzAIpW2O%mm`0OTH(X@n
zA5J@8Zz28Vrqn|3QT3skL}%Y!4G<?j2TiYJAXf${HR+3qwV}>HwxRd&HG%@O=W~<^
zU;u5ZUQeVt!)c~u!{AD<9dQS9=>)KQj7<@8F+6pAYUA@~#&eBdXFhs~Kb5=PluQ%H
z2e(mR{yGWhy)?hFr$h`Pl9=ZRk?t`x3=WhqEiQfJ&u?N4N;M(@%c@ytF*!lg`!*|Z
zj-^n@Hme$7W4*I&d>>_~w#KctRYJij)B{IK#00Yj&?gBh>u%d3P_4D6os<Zj-1OZ0
zKy$SA@sh63f!NI_PdyUd?f9jhkXe6@InyekaIg_IhE+Z8GznTO7uRTyqMfNJWRmM!
z?TSo;_C+>NoBO)K-@CUL>Ze1e3Eq|QW>c$v(w#Khl$7n`;LuC_U`d5<CZmJgHm~9~
z-mnQH!?1a_*;ze`ETG%%XwprpL4TL!nz=4|W@Ee2&%Jg$qZ&Op+7t4;TMMmFQDdi9
zFf7@6SK`QJn3wRC9<;xN)Sd0WnckSDGh#`kKKOKb>PQU8v|Y(pihH&=$qf}tY*eiQ
zFHLv;=me_k_a|sFf6F7Z?tr6%w2Z4MXS2**pm_+?Dl3E~+8(sV`ZgHV$H(eD1698&
z9;}SDf-4JcS+|UlOu<xv)-{Pq1F%^cz3r9JyOie{z~rvc5Jo(?KzP(f&?ISjSujKr
z53vi3<VfYXKAF6#uc~pcI6SLL$p7&cU7}_VC8`<y4dFqaV5kPS(ERr@fmJ#AP&QFl
z;6`=?5ynb#DeIx&7)6@(Jdgo+j9|n}_=7_7MDG*$Df)zuk)h3}&#IGIg}mzYbvdd_
zu+%(sY~1dbuPL0;;TYIS4q^A*lNa9}zIwi%z|Af&5)CA6hx6%+>UjPda=t&Uz;|g0
zJd~j)>xgpKr{cLbpME=?;J>dRJs8mKL-)s@XO5X&0$LtL7Pg4078Z9nW|Av}8^enf
zg}M4rL8xPxCt7mAACx|mK7qgM*v%R8Wp2%2;t>Bp74o;oQjH6J?r(ZkL9nZDMi^yI
zBx%(MHi?R{#|p~<=6rgNsmj9_83MN5hwlfD2Jwq+U_Ngb{;fzOaAf7J7NHT@d%^dO
z5uf2W^mENh)=We7gG4FIM6{x|Lwz@iF6l-2&y>!BjSCs%so=q`&*vC~n9O{MN{494
zlWRr16K+KsC%g)J83O6-`8rFPeDCov6H`lNEp*?**jwjzU^c_kdqvx8Fi-NmsOuuI
z|3KvxUr=|0T6oQe0Ea0~CDf58elFe#q4J++^$7C5=Uz`p{=c2hq>dafwycN%#22a-
zpBRoj)N-g;k0j)RKN}1_yhhC{e{O^&_!GyOu#;TF{Yc8sn|h3ix_7JXFZbXb4}XAZ
z<5@X_EX(fy&Y=<InJS0F3rd|hDyrFRI_rDR(oJ0AJ~k2<OqLCfNGD7&aHyV$2v3n;
zNzZTKN;*=tt9Sq}%kqp{7|XU;GgQc)`htvAVhAg<lLOw#Ps$BMgLS9oL5tl_fMkZZ
zVyReGtH3hz?P1(|sFCL@4)gLjknL@=$eb+=PgIDX!?A>Lr!hYH1?iLAHw<>DHo<rN
zm5;$LSmcOzD1L-%eoqRQ`UC1??jf|Dbcs5I);{^iAYn>!j?39mdE)qj@fflRQF}RE
zJU(E!d<p%bHKlyl4aN1he=^*&B`=Udo(uySeGu7p%1Tn*M@15OCw|0Z#WaNvW;kVk
zbTR=x89JUhlbF(thArZDdIZfrB)Y4XI=E!Sgb~p7`*Oyj*~l}LcT~qoBX!Z^LaXmy
zh|GNFW5zKbSKn2@CUv||)iLwaJRIYu%Ic^1@v@VVDo)7@0l7#4-akf`()XZf>Nzo)
z*n}C*PDr(ezjbxMcT5h$3AOyn;G0sd6ok_8>V@4s@rc1;cL>T|9Bdzc&{}le0pvdW
zr}!mN7jP_NphMzK4au9(I#uZn#C=_}*1n=><?vEuOEAY}4T>%Nv}Lg@>KafY1}G5#
zYQK5w^bgg!djepF0;O#unFIPDe@@JKuQ;Dd=mF;5c^nQkiG?g~p5hx0o`2YK!DcjY
z&SyyJ)0Ygh{$8lkVc-~poO{G~E_3|kReC2^OT7!a8jD@O`n}<LnCEz@dCMBiP8wlu
z=-$vv!4DV3-MA;>Igrp}SMO*#pHI&qOS~IYkDL`2!VV~mzwz-N8O54~go5;p!E8Dw
zGbJs(a(DYr^@yGYZmfUhe}7i63CUe68Vp3R<4BBDehKYiiLlx>j$E-HbRE~tcc41}
zc73ek4^yYGuja)n7(<JIfURk{&tE4CndWwu63F%N{8<#R#y1m@a3=8pSJ}6KRC-`s
zDA|lAuBSN=vX7%6zK(qGimC@+#5h@u93q}?X>(KQy5sk~&%1N42%qL)ljLs8Rb8fV
z?c>*HeDGMyuV2eR2`;6$5cl+7Y776m`4(<7(%<{I9sH}^L0Bxae}wqBgUfqN!QN^E
z{r2ZiqYxuND^a=!nqp@xa*u76U%C60|4Inwjio$2MUw>lLMUt2>X)?SVhkyA$Q!SY
zjr=}9G)&GPuA^-*_LX=Yj6bsr&>(h($3eT;T%5a`Mr9HXSC)jHqnnEDwQG!IbA00d
z*juj!7Ev4cGi?Qu5!)m<RBO}Zs2Sa;uTiY(dgW{W!LtY!g)oNRLjYq9g)Sc3ge?oO
z(P_{qP@H>^n~=lT(ex^TC$9>-1Q-W+$y~CnnC@-f5RcpD&1QTXZrV<+$xYk&>o;yl
zjsYZ7Xmko3m>6Wc@{dCRpg*{U)<0<l-52YPwrXIC+;2K3*YvyUmg~s8_uE?`3pf7y
zwm8G>U)&CLxb^GI%tK&1AZFVfcz9^y<YdXn!>Esv5@)U)THFpLw66m>&te-T$;lUC
zN}N27N}iS_gA#?bB?#IOGHO8Y*ZqUPgT-Cc?(l?#T_g~GsIBtW1%d0aPW$%OV9^z|
z=2DSg?nFoV>P5a}JO%%=IlPOWas;-Ub&si%V%`E}y@a!UbLnODiX@sg|1i~n^z+{@
zK@Ti%$E?HV;sj=oCctY{S^`O_K9V&)nnIpsk+<%osoV9Uhkyg9V`-jB^txpBDg?0|
zQ)`@Cyy(4HhKiaRLX3RY-!Z|l>Uk13EMg2q(h<izjuYCa1jI*Z(`noteIg%zM+ol2
ziRT<=6pa(&G!nfUUk8&(Ul(L>l*op-?K}!7&te&Z1JG?js9f#xs=Ev`GEH=i?lRO{
z+O}*9^UH}pfr&h)yg&8i{6d~77>UNM6}Z3nIQ0_t#URGrMKLQcTcRR!knLp%!#NSl
z%Mf2>UAJhHspoP<jv30KMFZmuTK-2pc}8czdlO-e_+x7V&iu@5QZ8cwej~WmD+F)c
zUwX&QPfGFy`^<QtP&2X_=mf}ZsmHno2%=CP2n?z%L74{<A#wuAPHN?tBHUgAZk^G^
z>2eSU+E>gBHl$)iWNBX_GbYtaVU^FQBz+m+ZPiN20lHXDo4tNhQq--D`<r7lrv*&%
z0U}nPadJ9+r1VMB&Yt>cD8-4S+)`OoJSY&024JamknewyiD1v64|Jrj@5}k{)N!kS
zshipn8Sp0$gK04wMi?t|Z3%CQwZSA-xs!!OgmI|UiY8pboiJ^q42m*B;*5P-$ZkGK
z%bo0^A?j&uDsG(58rhy+<vy79y{`(ekHYbM^$<Z}gg^|94Ika|!AFRl!@GBM4gS0{
z3`40C-%T&(4H=P_bFGD>sfMxR_G5BD0Q?yLJAf~HUeX8kExPFX?(YHoy%&WtUQQlx
ziIb0v<lPli0_$ZV!V)h(-hXDlUePm=Gbth_Mr|Vti0Gu_D_TxEy}9L=yr|_jzrckO
zAkaw#aY4)3we;E^a|Cm4kk%_!u0@aj<dKT0RLr|SenguZJka#DYHG>!GEZu#w{)q+
zipQ@js+i(z=!wIlrj!r*f3%B3E;-qx4fELhEW@veqw^w@t*+@Ti8vNwNA0CO3xi00
zp&<mX)r7dif^jvjs5f_N@aHxCL|qld-SANM4_e~V%5-AeEwb8rA@5o8A1$JJ;!8Kk
zqN9M<@;O?InxDtXi#fy_HqU5&Oij-m_gm$<?MB>0?QNwNUYd&m9mxi4Twa4!1!N0A
z9p;F`O$C~VmXr-C^r8Jx<<7M08rsDnHg5CC3&VPQTEV*rL(7o6556af7?11YYIr?_
zc=Z&!lyX(Mi5$C|YI@mcAWtUOg>pJ0+KO(U5F2gc{;KB$u^f-(_~0Jr0C3!V5{y$b
zb?RI*8a%BDMIlw#?s~A<`gFZsfnjhC)=b&rMTOh!zjVdw3~vh6-taroTuDn7h_*HT
z7`iONRO$>JwR~7__=0wwY{a9VvUt(z!Xep4;=l?DZAZ`?@>gu4IKP~_hx5hET>}GO
zwSaIGd<$)J8@R2v8i(5dc~Q^E{k%DyUSdZ~7syErhtS9v^sPmJ-IfjCPaqn#tHL99
zSKPQdLCr}G5z%Q{jzY;RG?O;b>u3D-^knHG3UPB(xvx*=|GSz^d&LQu2eSd{z<X;i
zqU3)z@H84=f+S7*cZaW9G(o6YypY4@X8dY4J#w$wYt9sMSwadp^p~6Qxqt-#H~vdF
zS`;wCAE3Ri)-#x6VnRnAHPhJ<<7WerTiK-DtCdoTx%|1;A{F<4w+Q>gUr_}2Po)G1
zJ8H#4B9l#pnoC8VOC+-G@>ajX&uX`nO$cGDHsnn;52YO=y=mHuFu-owv`reDxwxYo
zc%q%<MH5}F{KVCdvfwct3zb0s6@Jl%m{ouqjiqTSa!UT1ii1<pYCZF{I$ayo(#z}G
ztKg!w7ke?k_XOZ)7aw~?3gVWTI~IaO#&1hCk*_c6@re1pJc3eXRn0R`;o!pE3n2nQ
z)k2C7AMv9`S7Wq9>&J+b?cBk8N}LUGv|cq{Vs`Jj#Cd0uHc~N0h=_YIKUIz`n^ZH5
zR~{uOmmYw=15t!XNRE147XW<B_d$}Jfv$XLkkD3F{0+y+c&MrES86qLLFya`*DtZ&
zZ>P*F#}FTj0eyhgQ=N3>D9k0WhfWlAT%TMJ=fk<6=9e|#5k=c}OcDQymuVbHhOR1N
z^!gs^cfd+rR+twEmh}iOb}?LVJzRrr){$c=N1iSqE9am?$k_nsFXgPJltZwE^+b&q
z<JE@uqxV;Tp%rYH<|-)5;d-CGr)T+a>KMm*f~lP(_AU2MAwYWc@>fGVE9Y*nHJbY2
zSOkULDr5}FnR=QXswJGmwmJa*l^f)AGO9VMS;!m3KJe}!G<ZQE&d)%SCk)KlMFZOr
zmTSa(>8W3+aQ>DIG@R{=`E(l`hpg8$vJVm`<qv;QAH@qv{AGyIK>m!g=eY`7NpyZ8
zH$L7D(L9URn%1@5lX`+r1Xwm`YjnzNsH{ID<(PZUkg1M)E=;BqT#$1(N)lyY#eq(z
zkt4?6)^m#`$M_+G5=5R1X{1kt7aL)L^y;_#`S-70zJB}UhqnU`ppV?#ImD~O82>=^
z>Jff-=j>gW+dB%@|HC(b`Q|l;0Ka2(VgOFDe(R>BRmV_EZ)26Id1i5;64V9-E;?O^
z!$}lJwZ+1+D2)EsTfTU#QwrW--_l}UmV%o5q}(Ya&%t=)Ji7L#TYzis(jEI3)Ql-P
z+w(vM2C#!|rs6CEHF$AUoHx6Ycg%-uEOkAF$iXM0^EM7XZ7T0vr;(=LgWPWG6pifO
zPV-1%3N->6%xr(Vt7`eD`+Y47h#2ElA^}r90go9Ua^N86Aj@hl$m4NVqQJx7Y&@KZ
zYOIU*=#&H3v$srSa6(;xFj}CIsg`-PSu)MWV^L&yu?-7QmZit>mR<JsXVW9zatdTi
z7Y)yw%Bk-6Qk4UDDN^Yc<0oSwVT`hJC1UfGEA!S^I{{~M5408Ny&MfO#4fb_ZaQ^*
zJ7n&%@;?%FI&P~zzJ4{nfHxS{N;BhmDP=N{eQ0pda>D5SMiR+z*7SQSmPg89x8kZ>
z>U3ovZpBSl#kG2fYHlUeLB^}!J}br>s_OA(1n^>rMT!yTP5dQ#l<ARM23a`Ib*<4w
zHSJt!=up5+&{O1#8e}k6QNnDq3`GoUK-K0Uh99#-sFH|9n^8O$rK}*H56XpcQ{jj*
z0UyoSgO0=mDI!5#dx*Jpf)$YikyH+$oaj4gH7Eq&IB??f?uLbfT5M!gv*hrAPGlP0
z2={g4oojEk#!cDw5?O^PPg`Dv38oBJb&yM~l@p|@&Cl(-kANw`Cr$8yP9h8FStvG`
zr%nIoXp^!l4KX^^XV4njHsw{eP57+vH8x#UkX0=Jk`r5#=IvQso=hjD<*Qk=RyS<6
zKr*B|$ve`0)U$c?(2U=e`gQ&4VX;dvma;Bci`;Ztso$?&L-WvNDJ*OI@N1_VFFBTp
zggP__PR2de4MStwc(Ju=bm~4qt5eI=xO?!MW*(CE5w9fyy+KS|9F+}b{w7Td`Y%wm
zp6Gz;vx_qij)(}s5rYRSdLRQkM@E`x@G@5waiyb}flJm|nWe#y`-U_0PhY_>b;f*b
zMymk0A5daYsIMLWnIjWKvdYioF?997tBI<bG*MvK0c4uF<*FQ&N0=v38TgnzzE^z7
zp<rnmmT1SCifDA5WQIHaFEIXO5O`>XMx^1`ZufNV0}^!MdZYi{4(C5;#`6BjeRLt}
zX@*Wa7n_lpV=u-z&4143(JI|7;#G^V{%-Uk^b((7ANwan)(j>>_^E8%H;s**))NKW
z*X00|jF{VyltbCcv;hs<a6efI55+BVYim9IB_L!R-S#C3CQ*U9^-Lt2@YS^K<^@tQ
zeDgbE7B|1Vmo&@V-H|8{dGeHnKrz-Te!*4Bba1Sj%EK+XdRcYqk2caYt@tBsGTuK%
zgKLv_55Qf|sBhVCZ$SUh7dXKK{4XkaBa>P-q~Xg`?k081+U&vVlFX~(%$*$vAqf1B
zrxwE91oEMVzKm*++iK`KHW!4oULiaP^-j%L3?Y<-17Be^?qDVuNfR<aBas4N$1%t_
zK@bcVBvou5{VfJ%#1_v`ZFNM}1P)Jq?sV3!9qZJ7V9g-qS{K$Xwomv`o92oz7h_~g
zuxa99dIb~F#R{ItGS06;{E7G~y6c0H=zJF^<BDUuA=&4@J1L1u`x{OhA2o8?bTq8A
zauaM+flSAhL-nPo3+zR48crFyfIz$=6g4Ty99s|(^7I1$!*YfzKd|}`*N6jD!;tS5
znx({`j1XxfVHpGb1i?c-0fXtixaK`GsC#-l^>U_13KzvosaGutPNZM36(0uaKdlU~
z(bSC$>`yp^F{$#JDJPXFeON1s`3{_HIiz5fz||RXT(aiEtmT)SRySI5+J_b{Jx>&p
zHJA64sdrBgseQr2pI$&i*Qx+dK(N1<x|-wLfFZA&N4u>wK><b4xcZ)KC^~V_h%El6
zBHtjkx9<RBghL|W_~XoAt`+lI%v>fJmeH7n-CH6&jz@eNjOO&{Kq?%6Gg_KOBrRQM
zM<R<aW)E&8=nJ)7gx~{9?Y-&-DI=MHqzoOzaj}vDx-Y)2-0Mh07dGk(#$=Q$gPhyo
z^VQY{Dl{DtlEvRXla>xLw$qj6H7YjU{I%Y;nck%sSaQdOXmujf$V=o+nHIdO`}vy*
z`V=7DnO^89^_;7>o-`6}o&&3r<?W2Nr>9!bEO5VrX3q6-d0M+C{aIC_xi_0AQf0Y4
zG2ibQT03}Biou~Qe?q61F~eM47(XpS0aKxf7KvyfVsdn>R9#s#qLF~_>7A6`7;#tB
zn!3tdX;EJ^FzhQH*CJy4Fq&_OWQq#KEi>x~b_Qx5R5cl80r8A-%a#DbQ&&$WHsHw;
zP%5C?(y^O*mfd_Z`t?G^37ePi5xXEaf?T4K+8Z2Z@FX@-QfECn|19n3@7tOL_$Xjq
zw{41Q-)CYXmquvP^?}LTv|~xPuT9jR*UZCg(lNHtJ;!*fXa%Y76uO%gR~5a+P9ry0
z)@ODtBz+sHDvPDP+!BG4sV(VlCx>LInp6GoTaw*f57_>W8|4#je}@c>xAz6M&=XIP
zYL-LeD4t1J9I-@c0^ZnkyT~y*3OVER(#zD3t)4Uo(gNx&n0q9(+W^htBa@t`UamzO
zIIkMd!uwhxA7$F)a=8Zkq!qHHoLq;s#cv!V=Pt$X$)lu2b1MF*IxK+oFS5)T@INa#
zF$Qh}I!S12`<0de3nJF4UE7--^S2k{F=ar?d2xAh4A)xjb&^q&W)DW*;>~an%E+xn
zv1pBtTQ#w<6=nlMkBc$bw-sWPhhCjNVEv38<-kM`oD?o73cY(Ujv+fLWjJ=dPMfOV
zmhkM>T3cecbb2nIat67ruA#96ljEV*J<X*S2!4B8e^9@&kGN%e+*P3m=&l&}?4UsL
z!!LRQhu{4AH5KNk?)AdC0O+c4zbV?d_Tf&jDUu^;d%uh(E_|{Y$M8LQeppwSM1gOe
zV#1Ye?BTV_R~eIflkYZ(ng9`V?!=P2^~$vNu9=n4?trv*I)|56H)kfC)j2OBk7KjY
zOZ-u9Si^YAVkF|87UG!deSwz=6>-Q6m(6c4(R+_|WHsdSLBno<R8EGcAlSil&0K>V
z!$3^x?n&?A*8eYr=B?W`&gUht_s?(+Q5@oMMgtB!oz)Z2SalRA9hNjxpo8z{6609Q
zhWxN~oCI1;KViinLMg9pTd|{tzq<cJa~ebm!fVQ&0WaM*oDu<7pjU)A!@VNH$O#6%
zz>Yl4h~ruZx}MDs!1_03k3;0#Smk`n!I|0AwV94T;C%+)U(x{#xy9U~&#(F%&pFJ8
zdw?c=vSkYO+0B-=d_S}~$bWRK#SQoe4T_rugxZFrt&2e6{Cepw!`D5d_i}Z-+-yf1
zCjaQewu?h0h+p9}_=_486-Sl0_Ki%`2YXf04GA)*I}(99b7{(ebpD$To{tcIyyrur
zdu$*`>N@ok%1m0v;%^@bc%U2?H9At46D9(ba+}9S#u=Q<Cp1Lt`<2*>Ux~dy@SeT+
z)uH6C9JJ%tNGzk!*|p1t$7IpY{;vmJBRTn~4QtsnH5|Kjx*(dutv6A_+_MlxZIRv2
zNN~PLVvrEAqy!+B+BQW1bJ=NRsgTk*{|@3IM>Q1OlmPm+Lb~EQQQX<(Sp*`5G!4Y{
z!gIw?Rxgh`Ed%7sf-mTYei@`$ZfLqC8XrEvBop=M3KJJ}Zdi#<BiMJ}4=6x}SEh3>
zp=i-<4TZv2Id|0A3HBRwt4o0r0{85`g*x;*l>3`sD)0vb!ObDE29Vz^F+6^3$Q$v5
z&G+e2Q3<H)2{SR%@w`6wywgbyc}j68X=pR^*@ouG1?GrDGTT?<2hMh}A^^#Fs@y*P
z05Ng|vSs~(;sHV=1vaxf0>+Iqf<X2bFyyLcs3X)fcnflK@5xs{mWZ7$5?J<la4){u
zHcD28)7gY=)x5BM#qunV{U(dY#Ze%cG@kWGg@gN{{9!#L!BwS@ca))tR~uQ}KE+6=
zX<O<E#pZWQ5|8*dSzcL397?>3ccTTwVYuPousYZTOncT{y7iF}Ef;w{v{amL={H;f
z-NSl#gsLjRpV;6y`|b>xfxaqsfH=~RM@6FRO2UpQcgaO6B}%ZHnOr;^WJTU0KcJv2
z*GQ-w6mP6T$$Rw1IKoiPAe?(i!9H}5jo)TVM%A!BE5{pc$}?)y;kFr>uW?yZ3(YMc
zdzIS){*|{cKG(i}+OO`OhjQ0wr>%HVr9AB9Jm4M|Dov!a%I#6dxV8iOd(9{`+2fsE
zM_#|=lpFgszfx4}73*Oo&^)ts0dl^CkM*)cFetSFOK&n7f?TxV_J4M9M#ccY#l5t2
z^}a57K6znodQAB%w4*QGRdT-8ez|=lcJR>(gMh(|3q$KUVnk67@lOtVr{dK)3gv4&
zq8bq9PHOCI;1{f%$<`yCQS6F9LLWV(K?y-^k>CZm;q8xPG4doJw;Ug{`0sxYX4oBD
z^e~fZC~=gtS%<pqq&w4NCk~&S$*QF6yluDWAhZz@WrbZZY^#;f{x)y*HpNagAt;Dg
z(Qq^;jtv1(!H{i+s7s(a8PyQtfx`ZVo*eS5X+fA+50*!4XAWkB4o=tBRHlQzCfE>4
z&5v*;3F*4jLiqp-VoaGh{ajiB@#8iZl%P4~1ZV1<w**9DK5v1n+AyH4yW&og-!hHS
zZP9|jp#V1Nk(=&a+=R#OulxATy&EBMcRdM_f=;>8S6Ce?J;q8@{gSG$z;ml`%ObjV
zak^Pzr5&Yu%UNEN{RaihNEo;~cS6gYw0?QKSm6yHEg`mT0_#8P092i}h=v^e+}n!T
zv&9Kd0@c~u&<XDbjHq=Q9tt|Y2o6IQqU5)PW_^?RX9L^#HCS?09AaK+Zv3945k(GV
z5UfeK<+#;kJTm6z0AK1ZqXJq8c2J}rD}&bCZ4(pN0LdGSKh__Kgv5jcAbeMjj|EDA
z7))TeCNQO6n`8kJFfQT~1FNeTS<A!vZv5S-bO$OU0eZjsG@d;%wtJxxdwPA})vmk$
zuHipd58yBNANT}c;KTI;b81s9zZ$>Ii4f1cqk;-3yNc^w8vq0tW2IrZe&9DrGPat<
z_cakt(r1+2>|R^r2Vx7WlB2Ck)5X>d8!mt`Qo%u+G1?(5nGY{y>w3__>Ji;*t@%L3
zX8{}R@v5m~zOD@?9vjqL?Iw1uYTvKc-S?{%`;O*Ct#iM!8=r}0lTKa|LvA#CYvpuh
z_uZKPUai=8PV?5f?^kQ@`_%&-;-_WfwV_UA^06vw-O81*$I~RU6ZEEhgggB&x_LF#
zlB|HY&kMM5X2A7ufSw+kB@fJ+N~|IqEtKpQM8VZxg%;PpC0Z;=a`-QVP_{G4q2FG9
z=&yDyy<JI=T4-eS@B?dz;vp?l2&=!u4yUKt$mqp6uZ;2ME<5@TtD2&J2=jTL`t5f2
z@>UM2E}J?4=tSHRL<ceZsLdCIcW<7|Dc?J@+lu>SKua1CB4k-t)z~%%c20#05Kw*p
zeJ`#5bUL2SqWVMl7S*L;JS&?BIE}MEf`SlBKG*K0ygl-*U&>=7l`!Sz<iGEw^>cIb
z-!t{UZkby@D$LE#R>{q=pR1zg>6vhP@yLOe=Ou@KtaXM}WoLo`ChKD*vZbsXB4t%M
zIoP))boWqY5Q}Nxyq;WCIXV(Q6nt`5^BPev3y*!>$d<p=dzAS;Br5o4;CIp&O3rVF
zUkrFZ;h)#b0jP1obCN6??0|X(y8h*!K)Ou-GR;gY)5x@8O8~!WJ-sase+S{%_TsAq
z@GJX~kgjLVFJtijh(zDM&cV(hwJ%=eLn$0)<N+_zK*07|RKH>&dz#E)9l1?5O~eL5
zn{}izK_0`-i%M+SCY$-Rq8IU&9L}aq^Tc>gf_p9a@-D16bshPO38<0`=gDNG{MyHf
zKMG4!-^NwFYw>mvpjvo)kpx?Uacr+I$2NkZY+y2PPkGfVuH7eh$I8NyY~>hjEVV%;
z9mNay4Aoz1ff|ZV+(%F%q2k_gx@YxhG_JPRmzP{8l8<Ql0@o(P)dKau0;h-wk40c?
z*XeF9w79m9|KENHvG9O5zM5;uKW8A%mHC?<j%(WYzXRLKC0852=l}5o`lv@XY~Y$t
z=`MTNXZH8M<Rj|ZW)|A)rL<(Op8}~r>IHli?b)(-Zn6E}YR|4dX3y5#qL#y$96A#S
zeaVI`_dJaWJ&^HD9ZO>vOov-tn>N&>Zs59Q6C$<++|-u;-s*qZD_HApm#AWDCBQHy
zL5YzVoL>zT2VpMZqB!2n`M{X}AGetP`)l9Tv1ah1AQm;(pxBKbjHl)JSlR|S+AUgS
z4eLG3oB3?|KKqP^#e5S=v+c4^Yv0a3u*LW5tv+t*G_Ccv13Wl4@#ei5SpeJO@6VvI
z95L9M^aX6yBfOJ~h3~eB?{v3A#BErUcttg_yPezjgV3QH>M+;O3ea*rEV0_ROSzP#
zluF@cK-DHyIYYnOnTd^(PTVuPz<>u7zN^p9J^jN*V=${54<dIFW;$)P!2n&rwmM_2
zgIZ@B*6efnT$ji9NNs#4u2*m9JDyIe@%46n{F`jvZ@5Lb+o4T2rM;K!B9E9W9bY7G
zF}z5lDXOmTI)vEWYi({f0iAy|fraRFctL+%4&RSv)AOjKD-b|;?CwBl4sB7D#Clt_
zi^HxJ&CRZ3XIC#+*Pfb|7%6B^z~hgI|N3)PER2#IOeH*&1|)rDB7bT3%?K;RYbIq^
zFSAjJ(fj7W+)a4xVUP*6X4_`aM!m)!+8jYCuE}bXP`SCR=fhLF{)GFpYvew9$-%%N
zBn02`4v6s)K5}n__j@rMW-8m^EQP_jRtC%JEZSy=G$b=MCMX6dg+gPOtTm@b_iH<t
zH9!#4G1!phXz#`F5sxzTc=<dRpL8$e1nJ<dGKOA+59YUaPLp7Kg3p(c5V?pv*5dl?
zz-Pk(vS2%R++%_CVtuJSN%ORG>BNY@{b^PoLr_{hKB2e0WYFe|V#PDxe@a%$ABurx
z`I1UP7i__-oHSz`*Pz%3ndN~gmlf>g?ufSF28l?$RoW35#77eEr6Kt?5#WZmxxe%h
zYq(5YnO45rPZ)@FnKIZmxf|z6YI*ki=K2Alj(h?kdh+}Bc7#g+B#$Bwf=XI;we<21
zwW}=xlI8pA4u;k!5T6ucGA`Zr4Q;;H*C==g-u4UwRwS?GKk)5pi9kLUMYphrSJqNZ
z57hF8S<XGfX+Fsz*R5Fd`KqTR@teGg#%w0fg&TmGS1rOLaO*LsSBaTlEX@4KHB1Ki
zTP))C?H4hXKwM>0>!lw0>#HnQA@113ApE~`&9`rfw_+UmiP82Sbo9dle)Pf5q<mb0
zwKq8le#?C=z9&j8d$qWo@*lJ(nXrYC4O)CumSx6S;m8qArgeIe@2jq#G)!J{y8ZG{
z5_Znk?vb<S)3NJt&OJ%u9yV>^xsbddu{B~}+gL<z-17<K{ZN!*+mA%W$6mCBv2@?8
z8zg+dZ63|aOAs`i%%&HUQ70QLDzNxRz9#bQ3mRgN(uA5=Nl_drSemG@)(y|E`c3(v
z>O>)p>hbu^{CbQ=Ew*t|?=`6D+6H66&fL+R&Z<r>Y9z2%Vn@^x-hx&Jvm`~x3E%cs
zrmjNE#xz9+qri@J&|J%MrDkmr9m8Yy6JLa#IYdgC_dj^sHKPu+4y<XUZSn((?JyJ7
z6Z+0}V;@#%omf#?r_)WGbpcDkysy>%XvKCg&6x)^>ijBe>%vU7c2t8+>*T&i(ev88
z+q!$X(2&N#&&}=ysW3a|yY6l9pyyt|4(~D4jbTUb;CFVQ0&Jq+!{|Uov{zjxEk{io
z!m2Jz9eR|@fm9vaT6BWI#;rqjjv{-|v}a=o8aGPKTwSZ9>ZG2$D(9!sJRl(F+o@Z{
zzN1_2zt?GJQ2YRkAH>Bp!_EqFVeX!m)0|NqlgMS2>R2PBG>YY`p<jnMFDFlvGr{66
zMyrk$pxs;z5Nsbk()jP|-9@jh+5=VXL0k<!>o48CC0aH==v<8WRl}X@@y?eFc&<l0
zPlp@{6umHw>Ss(kjZDwiN~KfQf>c$_+JojTPP473$TnRpS@qcZVG}Y-y{3!+St-Z-
z09K}CQ~4BApW3N(J%>^xmBF#Ioh8+>mL^>NYg~Lg-EMNh=_!jfZepRUr6}SLx|{ff
zE>DJmHr^Q{a>c!>*>7iEY1s#*4a$t|HTAM|Q8umDNrMY^<LPYU=gal72_OTv#`v$7
zjbFIr4JHsQ=Q9)F9geTh`0|XAQdP6}r>ZEIXsDWAZ|ZU*PvUq0P=Kz*-K0wuAv?X$
z)~5^{OuLN*TRR{J9!_n9)W!_Ayc}aL&JYYYu54Iidci94P}&P~IIhpJ4pKNQ%y(}%
zMUlqFJfAioQ}_Awn3`wIVjUYj19iqrZ!3@YfRzgC_W*~8#af`Ji9MCr)C|jQfLW?=
zErp30cA<tt%fVLOJ7neUW9KHL?q)3n?LuEn^ip^CZgojv;=ompRV|3el%#B8v`9h_
z(Q6GVZHS9vDmR4%p%jKDUtt`JB`E5t?zvUXtLO&!oP#Q5BzgA%DI!xlllr68L_HNo
zu#5|Xz%4U(<$mw^6dJJ`td4L?Lr0%G!{r4a@#yass!=xCQi~ug9ak_dh<57+d-yBk
z!_U1Uq)!u7*+SO+$?T+IM>6U`hYZ0z(a}WhaS0Q_GqWRp5bDq)!%6k5R@4v4qhG8^
zH9AljDg51$R9}9KjO<<0PSm0UZyphfjdIkkl&DD;=E{JBn7Iw|qK}ma3R}d|sJ*Bx
zk^#iU!n?-bnOwx5lM8J{5FZNNzJIVRijSimZrL-zs+MPl{~KGBa;ULC{6YQd|1FKv
zbn>^XM=%LJd~@Vs{|32$ErmI1YfVgvZ_h0E-#B&AD$$l-ShV88C}Dk|;8O@HjRgt|
z?%zk5-eox(6>w2I%%fD<14OLiv}}r_%DtQ&(=&7P7`Z=>u8ZMC171BG^U=th_7$P|
zn>!qTQ;#hGIVd!?YRQVhiWI->tLmUd&K|mVou7oxS9QG%@z+59C5RqqrlLJ=a7W4D
z+Q(#1R2#(kEvB14eY%f><uMmO5bj}ATet$wAVL*oxx*xS^Em{u#sIj`sfiORaVaIx
z`97fNfxB=Vb~oqMus*IK!CpCTrjWFE4pE1%eNRw%1#yrVgV`ur&_1FNG<f6W;ab0$
z&K&c@ZJ$x^9EdA<C!_C4$gp^?*dn)(Eo(_qHSV;xc=cs+8hG&)4sfOTDojS2XiGv=
zsJf5)G~NT`K<K55M9a|?2tV&g3DoN253B;~6^S=t8f3r(b#pmM)!C%#>xC%I#^0sg
zU1a#uBGCReUx`e3$;^cyDP-1_wM)1*;ysaG2i9{v<<FtxHlEcd^*p(-F#Cf_bJI4r
zoo?#w!2`>QFp9@ITi!sYQ3baw=~brS{_l6a-_>X5?ids|XVvVaT2SQbt$zRhX*E7~
zckO*#mj15|AUfA&OFzfF-SG7RnN7Im{h@pP_N59p{AEIG#VHV6X>oG{8Ppq24kGmj
zMLBV=AP@F2f8g@hQ}^PeO75NU9A&dl-Ssw|P}+vOn0UUr(!+F*&$4NXx6tov_wsjL
zUek6^mg5UZR*XcW=ZM%8{*mr&mMl6jcw98EgKa>v4*%)`fdb42|EY`Rsml&+6#TOT
z0iX?%)eX28xjrpjV>IB#fe)ygSMvAE<9<lWhK0Ubudu&Y#21bhdcksOeTbVt?I8j$
zEehoZqKV257nksDh8t1M@B-;8qAmp;XcZkB9Bx=KaK8$3r3Q-Xy0N>lzTsWbNs^=K
zbP#UWa!=ov@7*jYgKWjHAe4m~I3(nlxMPns?1a^HT}z)wTn))vCdhng5Nk+9f=Q$=
z9*MLeQpq*CC;H(ouKt$$FV<8nXFW365ogoOVp3fe-+<9UXN!)|Xj(OxbmX-B;AZKL
zFG5o5ZbTDqSoI_k$+)#G#}3y=*J>>zUQ-{X0Fsn7qXV9-r-uZDIqe4Vz@KEb;#xdq
z&Zh|u&SXo<I=rks78nU#YO_}jBX2!Sa!l$`a)Rg{d>k=39kn+m0IMv>tq(8ua4}hS
z<~|+j?XAX*QRNP9RoIC|SVe##AT)xI9oxt62Pv?qf&#l76+8gH=cZ|-{=p$il*|oq
zlKOLJ;`zjpj(V=B&6Xx2j?}!bs`H|9tQ`jLmm+_U;i^f8$R4`;ypy?Hdc{7CT~njS
z0rdgn%n&gz6*V!Ha5^FZK^)M7I*>Q5Z_`Mdo*ApuL$pv(=&lc#4?q2aDmYPnb9V-i
z&2UzqyNf;m^y8w!qbdR#TI}UFIX9r09<+8<=K{w>&c1OECm{EZy_#RE_nW`uu;7(D
zw3zFie`EH^dB;)jDCXGoVm7RPD9<WY85{S{r{|qqWx0U(Nc3IVu$*^H<8J@gX+251
zJLh51eD<ZyLEG@=r9;EH46kKaR7r+Kwc_smc45yQHItrNgPw-fQ@!&h!asH!+t>lx
z6{fda^=J#T6(R@Xh|iV`Cw$(EIBI@S!t-JVd7owxha4AM9{U?gMP}P@ellAVB|)|x
zzQt`V%l?|$b6sRx-9TEjUP#&M9?|f3uQ(i*=e2uuxaUOX&A|Wm5q$gtcr~uTx9OrG
z#_4Q2x)@i1*cHsZU!K;(Q&`y#KzoZ4!hoMRf(%>caHgCLD+Kq0<G=>Y<2(M0T5~jW
zoY{294+92FRoh<zmgyh*{Q;~8mdLDRC)wqm!wve@Y&is+1(Ps@$6J^O#+&XyNVP4~
z_<VeUIkIzYUvlQlEv{r+Qb>zzL&P7~j;i=(?oN7%;!4O`gxFBR$Ozj&d?*+y_>a${
z;b~cmFx^3DrqrM*&LDgJQB_c?VQJj-9XimQP^eTKGp1o0U|==JaFLD*;H&#4beEb#
zjWgSi_p7I;-m}ZUoM$R-`u#q<G2N(68pSJ>qfrNn+*gYxhj36jTXOMl^{}P6j3}S+
z(&m8`%K^v_6Bc56oKl<I*h6Wv$uxS&QCNRmywSPQ2oBt0D6);+TW=$y-7Wg&^R@mG
z;0ef$fsV#4hCnFYz4bez6=%{6E>zI=1UaPVNs1tjo`hdpA3ajRB0E0*y58UfWdd>i
zh+!FlrO!=;h_T*i7>PW&{`e&#EVCoRZ|e<6s3ctjTc48f5aC;w_9Qg$x1c^Wq_qf8
z+ju^b1kniAp+ao~_(XJw2C@bzY8%H2Vw5Uz5!_idKb?*|AkC5Z-uHPp2maOMei?<A
zXkAWNE*m&pQJ4aj%SREUIw)N$1BjbCi2WdVh5Bfxjva|oMVK-78gLc*?v!;CP26F1
zRSo@IU2~jpcS)#N$25KCUi)LnmN-3!2rRr|IyG=pVSIpr`N~|HTXe^q$>4<1=ikhX
z>sI*qQDR7qRrEg<uY8ZqrXM9CW1eGdUtr*7keclZq`Ge58cCBXQvsWhAXc3=*dT(X
z1gx&LdqF@3BK|tNj*}$IO1M3oRn=K}&JO?(kqi}2?%D2YKI}$7%)$v6S~ye{{@QHg
zzuR0EEn;>VxoUSW4lE#&n%5iRtd_F2A{Ybi6>;rFs=?djz(z=n1M8t(0lt_ck>Sui
zx5wXOb+8}}FGYso-~OPS@Idyr=xG2VWd-4&SL`3?zV^_z0js{|)h^`2kDf$n+3@Uo
zpE^G1C@}dkl*eeUwZ;&zrWyhMwgXseaWi{u6g{XcMlG@m51)Gi1?};@d)*cinQIrT
zkS*=YDTi6<d(xs6c8eqAhtu84t1ddmnj7I3dz-8qaWDD^(a($sJ3ecDmaA)TEv(iO
zgFMlQ{PH`}qJTo>m*2re;k8<7@&y&}QH(m5d~QIm$iO+{f9~JUiaH{t=KZ_H|2RB+
z_2cVr4i6!bJPgf0>7lP6h?-@kKC`^QCl>WQ^$&8BO}-ZyIBhBf3Tj}cz8x9Y&<Mo3
zBHeXYC6d_I*8Tf<<ph0ow~r0J`2a!+ZjC>dfM6`-fBT%?J08ee`t0@1eo}t%$f!lu
zjtZHRzaiLzV#)#=Z&J&T3ZDskSsrXvR)S5aE5d(m5kn-=$dlO#m!@g+cp@#TbK+9p
zRI?BDuv#TBJFF*|P{W_1{E>#WakudV*n&}DR~)f>hnMZUVoJP&w-+i-r_=YS3AwE2
zrz&YQ@JD^0{nedBqV{fI&#F=F$j11(kk^vK>SpR7mmpE3UV&p6*TZ_QsyTwyRFJY;
z43Vh74dR1OmwtpY%ux>qE$0;cW8Dw8`Lm02(&h{=W~e+aC6S_e*dbaj*kOB{ve)9@
z0ujNpFqBuRIh|gNM=$_DxN6jIc`V|B5zGk);5h{YPn%cCjTfL4ovMG*FZdGv@qFag
z%^`gR*&`IP<qq~YSMym3J8(hlm4jBEpSzVrv#^SW0Py?XQidSe6XGD!2Y~r4{skPI
z7t+HTV8#^qY8L}oPDgqXMUuC%U^s0kka_nOv+K|ZDaI;2V#oymh;OxZ0(NvQo-i;u
zdBM=|jhQaaoy@~=QJ=emv1RTQbzIn|0`+vyg6_#X-OO~PVXDl731E5!*WN<p8IQNJ
zdU@S%blt(-{fq>!4u?)o9A{H~z>Q_OEdyT1dS7YKz@DDW{MbV2a1>9m+ou{GS;#?a
z&Ai2(SrgUBFG|=gYi%3030XL|`0oC>PB&@^=&c50ny$Y;7n690TB&FImf&y;4{CGE
zyp*Y0Z~0_p;0NR}fq&fF<z|sO<^)J^>T+sWuUI6i^iWk|rf@GYf25ZMmF~m9;w(5w
zWKb!<qo+fvK=Z9@SzpcY_y-Tc>T!2nL=_?@^zwHc4$$c_++;aM8SAzN%@!Vbc45p$
z>WRB(Y9PYldUc5K)2X}fH02BIW{;oX%yOSkn}$ukVdcwWG`%<yqizQ&bl|wn`2~6=
z^o!@jjpLiTS6sR)W8!G}WjUGCz2@6Y-HiJln0x<UR=W7?0vM#Rd*#<>q<g7~cZbvQ
z=qVTtzk@-Jr(jv@ZgaSNh$1J?2bv+qIjiW}hfG386}|3JGT?>>hwmJ3LCHZ>xr=8$
zKW_&2@1M9v7e|h(JiE`2`TO)#cYoAPbKy9~Kka`0M{NnE`CLA|Ll|~9Aqg^}K)>Nv
zbfSk`!!ktePFX2mu;jp|)G-Mo!-G#^VWcBoO2F-8mR?tZzG_1FX71{`X-!V5q#h4R
z^=P8QwO)%3cVgkgbaGsuNcJ~4qGaw(-&+#rM9vyiS4afHFkgc7{$>$bM|cIT8<_}q
zsj<?l`i?y%dH4vAfyR4|zdSMvl(vLezR>h>v47z1%+{6iLuL@Pc6*-!2V1u{Hf*Ur
z)YFURSq82ALDDJBR$!s6RUaQifRD0Q9HCD{Dg4A0{JL}0Z>DEe2hDA+c>lmG9v1RC
z{O%g1xxWq_@J?p<J#(S8a04kMbGv518b}!8(HJ24*Cy{$`hEsf)lb$1<1fGSJXf9K
zsCwKv0`0ED=Ob8kzS(0O=bfU@VC590=kOv1kv@~XA2!N~wV+W}iY4vQAz`LOIIMDm
zhWqtF*Wk071&{+;78!iNv)n+iQFbH|uYwhI01<QzmD$2u{pE2-GY;E2TCbTF*9zGU
zc=`7|a)RNj=M(JxAuoD=%BA%pv3GK-25#{kLkDO~6xYEK6Y@~AlqS|8f-Rvew-2-J
zo8WsTYH_m&^({S12H8r+GBb=wnnvN+9VgD3={<pbfDGP9#liAkI}SxuBaw75u%fXI
ztOR+oD-LF)iu#5S<+yNYqG@<zo%zsn_rX6W!Y1!2=EX|%9Y>(ALcf;0l!JhAZh*9^
z!2NS_&z#mEeq`7^)ct0AO#0AU$K=EuTQutX4@~@{4vVrkRxN1J-8irjF23stpi(PL
zJ&ClzAv<rM*z{?RJ1DFe5wu}HXsEbjlu#hN4m{NYU)~kGA&^vEANkO2ay)o0bQ)fh
zkI;-vO~bPFiv6vvgPt1m+tZ3vYsIe@O>oyC=RKi-Ai@&UW*HhBHefmiEDT}%1Ui;}
zb{GtMF~GB~jVpuXIp-*3F3sg$L&i1f`7!98a0%#+ah>-h+YS8jEhAnmn(lee`}Ks>
z((56)I6jqCKD67=GtBo=&~hQ~DG95l#~4oz+zHtWiI1*14{TGY47`K=GMgK+mt}Z~
zo0cK;h0mHO4XH^tX)j#40YKLpj23E6b04Fz+QO}?t=ydi#oxLm<VI+Z@cbESczknS
z5R8;f88MmQvPS_5aSpNiVUXWQRe?gMOa;Q1hKM#x8cMc12<Cl_k-V?Ak|WFMIg|O>
zdBIF^!=ZXQLj{W>{re$24ikg{$e2^B<`KHaRt@&zEr9fVuP7?TNb-y6Un+2`D5^$z
zEBKQ4?G=Yc2+=J<kGF~1DTdd2iEkT?RA60inK{HKaa1{iedb>1yk@<k-zV#qm*zmy
zB1Y@mzFvl#z<b{D5*e^jvR8CDg}>!Oce6|u8!P!0S2gRAMEQ7B?2@;P9q|6nL4Q7d
zF}(yKd{c$cV3Kw&6&R?@vkO1BSTXwUX*q!l&@U#bK;4wLet%Ps7F!6WFIM1e-(76M
z*R8@W)Rs(Vi-}ABU3V$LAYz02MW>0$kJ>H%vLCr_lZSL_9(M!v7A;;M6)4R=R8jYY
zFXk160!5<z(7zHRz)w$nquoD(2nEj+BV#JdqqZ}`NA9S9C3z8XB1nAu*XEnvR|d|g
zk?wHIvbsaqlYu$BL0hP{s@Jw^f-m|lU{@Azd8Cg|aps<D%w31b$*RjRIBD^+g}aRG
z)4+*oVIKjm+8Z&8mwSxu<l{ROyL%ok0()z#F2iUIZ_2&oU47XD?Av+<uHp3wFq<If
zJjM^$*zMz1Q#f{lPEYJyq$d+xjDVO&&P9zZug5QHq+Hur2FkIDe1kN^41%1FtA0fX
z|2c_&dB6nyVpe+n9ey7aNCn<S))3^_$6fUg9aXrxZtw82oK0MRCzB~^37IRL73XEs
zfM0IoU$3kBH550c|9(ilwa$G{`MS}vhB+ZVb|c9aR(?Jrd|JvOSOm<%d84irdD}j-
z<1t#A#_zm%3qC(?@fRe5Xx1asDU#QNe375)!GZF`V$6RFS`8e5j{y?iEK`F};_sND
zjEwaHAx3@n-sj@Jgu+l~H;wwthh5qjK6VM;Zg(eP+ykwO8Sdpf8ne}zJ=H`Z10>J}
z*^g%#bK26AxE7||H`bhMq=7@RNb9}Jyo_&Sa8dnm_1eNCU^p+v+R#EFYfRskBj&S%
za9O1oN;VCIh~ZJ|s1~p~HiS})!7;6FA}Z}Z=E-ze30Fm^vzf7*Y?j~<v5BcseDJ)-
zIy6il5R=-6A;}1bgYG0!mVlXb^ywk1NuYJ4LCFTn%BxtS8~WjDejz(2pxa0zcsj_M
z5vHn>WJn7ao98kM6!AO8Z}heJSE!?2(b*B1(T7E5Ef)P@_z}-hJ`6KbpS?eIx`TG-
zy-Ezn<i&2H(FC6U`;uIBgG}xzMSY^;H<gG?gX9*=QAme>qLk*OnpBPxsMG_V<$KZ}
z+G9$CAfda10y{Yz+(w{zCt?qzQ9!h?uTVqpgAZRQ(o89Qwaek^K0p2z*jbR9V4T9~
z(XR+PMBXyO-dIG{@%8tVoV>vpZmFRu+%hmes1me3d##pvggdE8o<SzBh!&(uvCinK
zP`;SMf>1?Ru6(VK?V&gymvcwy&N_J)Bro2jT5)TjW6N9mdz)KH{4i@noix#5d{lpM
ze3tjer`Ys2ibzV4Hql2_&Zy~`Y1Z=2b!<b`zqFl3;)Gn=@YG3niZp>MHY%~wzBsp5
zDv=sqH`gdMbnkycpAa`VOR$1IPqna93<yhLmm#aEk;L(m;CEoJLhHnVOpx@zYl47b
z1P;FF<ziwGBz(vEBQo2nC&Tf@h`imUQ9W;}v16l;s$mJ9@bz3w$bl%#VxX~QCxdy5
zk@Bd9Jglk8{sG3y3yEl`LC~Nm2=R_960T}_#S(=x+}{s|PVYPu{`(u%V)0Ieh}_ze
zzx@l~Q!IWtsn6(%`Cnukq8b?Y6~$Q_?b8#PR(8XB3ha{2duMl}9~!xR3P02~@z#c2
z+t&_9ZQHB>H*Juy{aW>O(olLEx~(6Nr<btppwj}QYgV^S-^0g?bFwe<xX`>q!?N(<
z9U{Vp)3SpP`0Iw~QF(1lZrV|qUDJF;)Y3T~aymI-a9~vJ)iC{Aqc%hPv<S|l-<T4y
z?`;cyE2!%u`1bE_RJ#<d*PvM5tGC|<Ydw5<w+5VBQN$&9B!&w49W~JwA(S`ND#uz!
z{#Yuw4O=j{_4c$yJ-@c0gs@~1sBmw|j?Zzc3C=bN^_Fe4*w{oh3()QGVDhU$FSy>y
zJqi|aA@C=Sm@N;^N?sb&Usv;|#vGFt!1CNNSEGU&iv6YLdEn{fJJI6)J43Ol%XD0L
zSTT!V80d|L-lIl&U$$VCmqBD?!5EYAZN$FGg4RH=z0eO3n>hgTw?QnwVE-9|*W!`l
zhsX{u@SD#HRZ&2jEG<K%hJ*E@Zrm6M3_4Yz#tu(hJyAm`FnV(Y%X^&chcySM7W_s2
zK)CD}o(P?lWZ(*cV&fIH{xZHL$aLfFq42Ea@&*l4tL5eBnzn}1JoNY{!_w$S)iPpy
z{GPWt_GUa*yueR*>_SV<nk0o=I0)JlpRI1-X`P%D5f8)?x$yS)7B_Yuy4^GZ+?s&=
z4p}hkw$2HVZwV_%GjG{k*|KT~i*AxT#+@X$v1qT;hqKQ>Y}yzoWX(0`FLmZbDn!ev
zj8HhEQBp#m)3OOT8q+|eap7QLKY0>|MVq}|;%l1h(j!8Y33Kj=0X8t?VBPa>1L#MF
zfx%EPi%m&H)SQ)34><HqJT1QXY*zr&MV|DdK6uQcPX}%Huf7O?gwwLO(D((qLdK;c
zzWlpfCv02S3S|F$Rvp(@RdbNvLcM`3e}E{2Bav^&`N6>`Q$7I;Hmh4(2hmP@d)AxZ
zH*RUG5gFfE<<ZT|Tc|Y`N3R&*f;2kbh%h4>;Q*yg7=;d}90W+xNS)hBRgJ`kHgu1Z
zvx;N1TjjwQ4<p~GV3-@M`8wV>^s$t8z&Vir-cw<P-E3ug@W^3pFe(tmu+ekJ#q+ti
z(UQ3)wu8#2a2_ld9d0MpgCrAJVVkM8AQ0EEme$Bnt(^uS&=YS?ZKgb%o&%dgYaTB-
z#_2o=!aw@Gw}H#xCTGoi3G*ZlHaJG|T+zm;%v1HWC940%W~h(-C--*Q55z;Xr3ad#
zuGq8a5b9g*S!^O4ow<)XW@0)f#uwK1x^O38HM)46LUz;wX<!fWB4c0Wr?6`9L8l{J
zr4_jPP{GRb`i}KUYkP@UKt6tOW1b-kWv0WrAB==c!=pH|RMU^q@~#=RQ^dM@>MKY8
zumy$U9reBG^GI9fRo{U?48o|{&g&eVm(H!FUZ2H1O=k;<)mFC~a_3s6CMd&rMyZLp
zFyl(=<(MTQzoMXpad^C>MArc14}Va>_+MU5UU4{Jxa%6ON1j(5QJE>yj^(J`?nYWf
zeV?E)P|pxHK6G{S##0Hf@_sJl0ZyTDjU<DjjB`hpYRXf@-x_csg|0AAayPXW@m2je
zGBtTMIXO5sajaD6tBd{!FkC~U0V_LdM3BxUUP-jeQ+vl>yV@>PbqhwJoKQ|Graq#n
zyHVoTY%Kms<T{OF9n05`O(Vh$pF@0&k|RUt>UAivEym^b^kUxF+Wav#`v)_y;rtb=
zB$Z*mXeo0kQEZ45(~S+ic8i!iPsMx27^wA(1yZzb#^+#pEawp5=K@UGV&92Fkz{`J
zpBLpgi2?*K0xt3Qj&{X3tedCfdiWj#?`-CO!TP?*hZ5*LXSM9{<^43=ccI92_R3Lv
zw<`Ykv+3EJi*pJIjYfR+q~w6dU~<Q?D;dIy>^F|Z{P%gYU4z|W6~+mP05P|rZw$EN
zR<t~UDNQGOQlkotV~5LvW>*kWrCBRt(kF>|lz_lBbgl7U9~+3s*MI!*@~0mTU%h<u
z{O$9XKfFN>2@Lvs-h#i!R{1?K!|!nzJy_u_pl88Dj4i#N>nuhp4`kvHv4JB261!-$
z!6VcAD3DJkMsiRd9;xXN=Fpo}4_;Iss&Qw$+bhNo?AW9#yC7SoMY%uTC2R8|_$x4U
zuHXTP2an+2z@1V3ZK_Rob~2>t#A^u~2wo4#Dmpn=I+8d%6dsZCpDFWXuO^F(N4>kd
zufP{5m6A)dI1q1fJUq}UvBR>7rjc|4OCEjePbV^wUU)pP@oRV40yw_o#Bo;5Z$JOr
zO-shNWLk30MP`BydUNnTELklB8WarWF+`#$N-}p)iU*_c0&tgaT!oc^eeB@Ld|sWM
zV?d9K$>pph?I}jT<0rE__7uH|R!$ifK~#3sPm-cM>8IoP6pB3JIGKLzZw`*OSYIca
z0nR2O)E#7kIBKmA%eO_V5Zrn=uHR@n#Nbo?5E1(8>*pgCF;hExK^x$FFmbbWgMi2(
zGz4T3Nnm+Y!ixOoMTJr3JI%%L6mHI6|3B`_b=M38{@LF-$R!~0UDA5Bb_v0$NL%4{
zVmgH2WhlY$3*8~!A9dlf<qt;bIJl#P-RF3NirJSqW8Tl7Q=q!N;&ao<SiA9X9;!X{
zHf}aG88Q@*rjNVvfu1@;1Ul>stcMR7Y}cm<S=eU*L@NHlZT74lqB;<5>o7(_56f~M
z#M<`O)mPC6d^J(;#0tyFoZgc6T%isWN#7qmq^^@lM#AE|-n8j%NGKG4N4<p`e(|W-
zLFX;*Ac0?CTQ0tbQ$COv+S1HKam<Lo7`U_1Qu22Yt1leu+-MdeR&&*pr*gTsR3HXW
zM;>g_Zemj5S=|@XeW&V$vGjDmJ?TS-F;L~Oq*X|Fxpg+ZXe!6~Z><h#U;+DzejLg9
zs{G+1`%FASH*Bj1siucP%NbmF_f)YykN$66!M~NXD}k=y-xd%3pSqa&RlpniOBbqR
zFMsZt(fbI;{eIu3@A8iqPLiR5edu^r!Y~+hIs;d!$lAe&JQ|zy;3#d?jNQ@M=D<4J
z6Gu9?A-yJK1>c4d&_gG-rKQ|m4rOLftyOK#($W6{Q5M_Ss-}_9z%ila_-RT?b@*ng
zD|x@-&FL5*T9sy6EQw^R3{rR`aItfSzIp-^?=v1_+|B3DieG-&g4njEhdzhG#Uh9f
zME|?x6Tgfou3j~gP=cfj#~zmgraA$>1mB!hU<uauRx~ZS6BAE`NOUJ(Q!N|Ex7Xo8
zqR3Vv5#asqMCQyucp`B^v|rs$l;4MH^~tC<vC)q3j+G_0X*vAQi+WatthTB@uXyg4
z5LR{m8ralWx6jxp@X2kJ80WxKNOj6CTgc6gwQ0Xjb<$d@OnGTDb+N!MEm{j*)KQlD
z;ruEL%@p`y>oKZqxDN~I#25Ino1t<*s;s#*F>G_eUWwf_z9yqYTGRr49)W8MKF|<&
z6hy!E-&6#?2F0AN-RNRQc8sv;O&`KNqG<>Pc=Tg|B-_;-f<q4j6t$5s2;j*b!ukm4
zG#gz>vRH>tX5!=Wno?c)FkJK<vrUsTOjP11=kR@#32=wSM^jd$m_{5E_gMwvvRCz0
zHI~6;fq3~rTZKaq`hBR<!TFoIwIwE)n$VoRAD!cuNLo_dJiZ~F%j1E6;)AR!`9!;`
zJ}nlkZc=vW=WZX}IA5qf^P_6;A@qIQqI)MOKVoWT6NDL|q&-N#2N83f196I;Y|kg7
zdYCEpY2U5xmN&u6Bc5^ay0-cKK2Wdx{72K*xSq%)k;u%k$RpH4U=4OVfN$ME)@T!+
zRSt`R`0iLo05D<T2z9ce{v16SjntFZ2Vdrg@X2_3RE|kaa9+ys^X%C^ldOZ-_JWj2
zJXbfMJJI{kn>bS>Yka`@Q1U2qn!{5%y!67O-#sO^eC%SrQr$X2qJ^3*hY7r%72XB)
z-^gPA=wi+!#^D%7R(6kF$AwYl`zn8i<dv)|GEY{};W7rvC9IV4T}L5->Y3(54&o4L
zTB0%%*}fxzue3UU1G|z3f7<z@euD+C^k07WZCQ`$5lt6A^*n%qZ$VIQye<80hf>+O
z*^pm;7lxIOckI<0L`zWViwUqumbKN(%IXAaOY3tM8QIn%NQy&j`mI&&G!g(*&TJgM
zR6KVw@#MfENZk-^7Dt2PM%5zwxViiPC*k9wM;C98Z`od<Z==XKF%y4PGb;AjJU=#<
zU)_iXq6k*dJx()O&iipNljQz0F|so=0e(e~JsC}|O^q?c=ckTEz{vHGI&q{K2hSsn
z4Dc}UXxxWO2JVLOv>XpF#$t{vjhNGU%pBN#`7kg~-ql`kn>)c-AGo;TYR|XZxV)|F
z@iz16GNP`{t9h-s+4}e?+1}R@G`;q51SwSgu=FlLH0DT{t^>yJC9&JpZO05ne6;Bv
z3`aXkGo|!kOl}O^QN)%dFDv5g>d6RMt40~=!cB@-%I0&%t0<bX!iB^YP!Xk|DeS1%
zK+nG!A_JQk9K>r4&^$fH&ro+o^MD%6vxIvOf@VAR4Q>}l7{IP<2Hzy(L@}z}W!|u*
znTfsYGk)NaJ!mVXgM47}x#89uqHBUe-|-WiT}&qK+NU`t!L74^S`bRNAf$gbD=&e2
zG|d;8tLAX&fa5p3#?$<}RUv?>VBbK3>MeA><%vX)9BciCSX2A*b~NSt@~S?&ID_Jj
zAYpX<wZ6O^*m!jDLG&5Ibf57fD$1=*T(f=(KQ6Xt%`t==aR*zLpO7~*Pqp9vc9t5M
zH}qPsPQ=KR9?4>G=8MEKB}<Vag2I#R6*utjK!&O<)3qvZ>a}%rjC+(erzh<Wh@NEV
zafZPP(bwfALr;}%l<N<8e;Ox0|A~)*SNNz$(f3Dik|g#$R&r;yA0--`q2jgEZPNn4
zKaSEk_M8Hud{=&`o<B=W$=5h&^z?igU#@X98ft>615Jw_MVIrxN(>3pHGUkb0?C1>
z(%$mSbzfi9;}OU|Abp>N*aNAe4<V!+fsQZc@Kga8(u;GQ;pGURIOY>KgR^4Za*<wA
zL<qY;nY9!^nF@pxqezV<A!KIN=)%2=Nexzy>>{G32w$Yu$XX&VAN?xpsl(V~AZ!q;
z+Xu3b&joYRXwFsfUtql4C9fpP$)K^hBf96EPCVXp@pzGaLlvYf6RxNwde=)ElgWfA
zYF?M48l!^;<B!=^wq`I;F}1I3ZSeun-&7=KJ)oYgGZK@OK^WF!Z8%d5>?j@wOP7II
z+(aNjer3VU@UItck;+*PqT9XdWIChZremt6fi6r+$yUKTo_a)yUcsvVG|E)8%c!)r
zN69#j>gvIL^p-fFM(~zgPopSArZ)=ig#*Mj)k!_|!JxQB+8D{pwzQd&v3AO~71JjW
zi)35TSiBWe<m#3kO<~*UdqVzXVzZw_nkTX#L8<(c(d)xU6bBn=nPZ+pG_Ig@^=qAu
z)kOSSk{MS=Fhu2QP;d5quItdxUfK=FL__<IIi?O-OmbB`J06-Ta}SDve_GfQ5-mYl
zHutIzbVgyiRJgO;esCrCA~I-_#F<;D)FSv4f`|yC+O?U1c7eK7CzJQtoz2s-`B8qv
z^cWelP{HgQ8#3g!E%E+SEI^OXitR|ua3x}-uz(!mj8<V9A7N=#jz(WkuXK~{-sTx@
zX-P!f9$)xM_hFSGmVdv%ppa6@MknN45>b8V5F?qzwItXZe+O+qN9Q&{Lq@O<q`$Pt
zPryEs0jZrcxh}YvGG1`2z2e@zI+MnlmA7m!3pG1+#``r47~Z$wn2BBV{9L#Fpsepv
zi_#;&LvTA?S_x~6xrJ`nTbT9Et;JS%gMBAk0?68XTsanc7<x}co_^B@epnQ0cu+_f
zh-Q(IXGWXr_9a3JwcLEJv|i1wlLscAxd@&eqtf#mhYiMDI9EuJp&e;NAXIXj%k8rL
z*NE4WR@yMrPrW)JSzJe$RjJl?nHZW)_H1d+)vbh^NhBLzw#j?Ol@3$D5R4GLQl+GE
z2L<70Q!M+yqrRcetPI0Ds{(ll*5~nQS{klY3phDahOr`pUB$ZY9u7Z%k(kGq?>Z;D
zSaZyV0wfXEe8Fvks_HjZ*Mh@?uRzgn(EDY&1s2GD#z>9sGuoU84E$*8eW=l%RaT*H
zcoF_W-)S9^T?pDUv+7Y9D`9Zb>B8%Zjvaq5@6nZ9QaDXHRw<Nr<`JvJ#Lfokp_n}I
zO?_Cjr=ZwNUVv^4^~t0Y4XbBgN>K*`GiEO6M3uU|7=j)4AoC5*MjL2bv)jVOMSBy>
zz4YvuCo!992_3~Uh_R(LRU{qQm{qZ|Y1=`ol$t}4h;I*?m5;}sa4o$t!xAYvj$B?!
zn|uBa@?rU(r&m>uxR~1d9N++gW+MpY;+gV98zqiMzbBT-qrsoHMPnUKFyBWYB2$Mx
zZPdYNCH9sIA}f`}O+`&anc!-BLT&m5lt0qkX2nv6pWN_GJ-6KwX&a9v<{x+3oJcG_
zN0g1@(wtW8Irg<9;q~Msu0U<S(-tdM7bW&EvKF2NXo@owV4s#B5IH6%m6%khG^RdW
zj|aGcQNkCyySx7b|8}(iNwz=x;){R#?DO3(|Clk^>FbQIsfanNALK0Ej*J2xfoq@S
zq2;&`-AwwnHVL|$-1k1$mGCk{#g$>~J(fp;E*nT*T#lH&l(Qq%VJly__sdGHs2n-T
zQNEX*fg)#Sl(gZLJC>Lm)J+ek7i{{=tXe&J1#!V9Czusb@rXWEpyw0YpL;7f#+xv(
z#kzbU#gTI7%AP@YrA2p(__}F6guLCfk<Aa$CSKNV-Hv!8**XYL0X?_TL8u2#Kyhkd
zhk$OU6kva~xK$+c8^D)v!Gwq(OxF!gc(RJ)P;8&xmha2?Y5%Oe>fBRcND24S5xC>=
z^b%-UXcIj;4KRM#>rX<tXzu;;Vm_6^$GY*rBZ#I-FR)d|_U;k&B`ltb38uE7J|;5}
zho^y}M(SI?@zx0CDdcpskdssDx0D5T*wIntFqsdxf=8SJXr!hSw1qoisOXr2K?l)S
zl!BRMuTX-8?14qlUSU!5QN+dO?|a3FW%(kXmIH5Az2ah2%QrqL%)CDvcwWh6fgiv$
zm+a|Se8|?hXz-@uX||g(Sn9lpEw;$eHY?Eh8wfKF>k-Q`{1jeS=U~_fHm#Hcp3K#F
zMl?Y5|ASqlI5y4v8a5dcb&-XvoJ%X)pu%1e>}4~Oj8K@^3gBqIbGHJ#DGrsJ4r*_$
z(Ex&?4pRw;xz}L^Z*T&gFhcpmKsHNjbfIg-YrM#6`vOn9j`)(K49jGZYKU1?tTCI;
zsUbHAK$+p3HdbPa8wMHqsF-|Otrr<lcN3e2q_vP$#F<E)e#gfX=-A$S0ThP0xO1o7
zrW&LjOHHI$@9qW8BRWlu<_1T7cih0lsc&s2Cz08cD$A5CHblXQm5oJ^#x^@2*wLFe
z)A~4q{o|wtQ;}!E__@<HdA5}^<c;HqPNyU9REccS0-lEqIN@Q?ZxO|bt{o>*q@y5r
zIOI#*MnD+0>tYgucE$djc7oQmbK@0lo4O6WYHh+3J8^BLV(J18>JM!>)$*5B#u7ad
zBtFF@TUVO^d1~JvXV`HU2a+f`a6YQ5>Q%+TW!dl$opJYfBq`pN5`K`zeh9)04B-Qw
zSUmuEK!?AOnhizLzuToiOYXD8n@Jp&uxA=0kGA6t^bKphON_H#hnRtmh=qsU^Pual
z)r*?#u=X)tdZJ=edWe1*a1m&gaMp7@SuQT2xWlIi!Z_?6FcuGrd*%Lv13pst>$8JJ
zo37$VW;TN8f*J6OiMt8F$c0TS#i8~cKJwm)zrs7>35W-M$3Rb~)Ayh%C@xRy;i+R}
z8h4Ef(}RpZ*ytZsXcpy&qGKA~At%FN`YRP^DbK4758Iz~)DBpsk9xw&Rm|cMW!cI$
zc*=AweiztKrInX?dkYMEuT9w-397QS+*c3DdmBHoecV^{cwFva75EHvmg+&C#*8wD
z`*bfoS8VMJl$}UyVD{#HeU2t%7&2fo^0%IkMT$_#P3sa8v4xM0TmD-$n*v8UsZL7Z
zyOy0N?G++dE5KlMnqN9X0XA(z%$to7e@MB@mTxdREIqAUk%IPJ#UeTyB?uahFUH_?
zr^FHDZ&J^gX_xg0Asi_I=2g%$o24=(os4F~aP26#?e}5B<Xe!DEn-7K)6{G3$geo3
zxdTfLVE-lga0?Tedvx$gT0vH{tan3_A`dJA_0gmy0=JsP*azNv<i&RKiR5J;BMh=i
z_PpFj%e+&>{H=yzSGiN`XkNVJkI|&KbE75ngQ8wQR91O)ue8n0Y`%FZFF{_P`h~;p
z-4202E&gtbzN9_x6&d;eGKH&Fxyw~`f=-&s41l0!uzO9ZvYFCW54+gpV8n{cL#^xZ
zV*sfAFvOfc=@OK&gVXpTkN@>31IMfSSjGcGmy1`$DSM%GbLQaQf7V^&s~s_nGYUj|
z(B3G4hs`--z?HAAv23ug8)dJy$UU$Kh(Jav6FV0sP9Le1+q!`GS619mi=}^@zzILE
zP<9~(^0VqcFDhidE-@z3hiN_X(WYGK@PY!HfUUec%7@zDeu;~Uv1eSv^(9VXmQ&YQ
zj!=6{d}R%6+VN@00d?d4Xp}|oG|CL*UiVBnfebc|OTupM8ybyU+Y4L+y3Yo)L-OZ$
zESaN`=NRDrxL}5-c<!*EDn~sKYXe64R?G_HGEtwBTDFI(+RJh_VlQadH86Q|a+hGu
zgeHWZt=7!eUToV#w;vCTZJyjoq!0V`LH}>WvPV~AD900F9|kS*XsGF#l}L=+sP$1p
z%#7|6j3i4&0fjcOlLPx&G|p4kQPUyG0h__BvYE8TeS6uk_WntfGv>-zXvKz;t-Ou7
zTBVgX&q8^EnGYOXZT=Gp6EKjyx8G<t+E^Y{9T)u1Vx%C3M#ACXK!Gcf_Zugip>4|K
zjPM)g_lqZEwk_{zo8RIfWlx3;IP^)L5&-CvJtPp=GCs_n%gr7TpM>(}&&To|%Sp*%
z!_sY%n>|AMwY{CP_G;!Gbp|%)*OyTb!irDBqkl@o*aR==NJnNl7<ovn{<A!|HX8J1
zX*E5Mf*oQnq@J-zWMjB<u;J<o945Chn1vb6xIU*aU{MTXmU;<M+5o#5xi@9^G1HUl
zTvJ;a3;0LiukNZxf@fD-frdcO9p%xz_%!bcJ@>qp?I~!~P(tSLbf!XtkOsU)IvvEd
zC<KghT3|fo1vl8HTw-ICs<};dq`jWt`?k|mkO8rO((h3o2CDN)ynSrKnI?o<RLTz%
z2)lzl##H|>Q>PcnJbQ^*M4Y%-lsr#J;rs1$_B{v(DtUzJI2_-CV9rk?VHZ$;q+`4H
z0YtM8|J7meIWDZ$I7!H*tu%r?RpV2!bU=Ign|uEtnsTd^qMcDN2Tx@&`?{S~{;cvf
zQFi3P8NgWgJAU@cTlVAncq@MitE!Y*hSYg;Z*3-yR<!U)Ql_@#_ppBueR7>7Rl^}q
zib&fhpD|t_NUST68b>zP-GYtiLTfY<fBr0idfoCJnI~@#49k?-jjQTRxb;q{(nCL8
zv2Rsn?z}gUo5`#XGr$9)OP*caOMGV%rZUDzD2s5?+iB)lyWgt-RGm2dmI<einbd&4
z337oRBLJxwwjzzyiQl1TN?Dg5#&Qlv>og^Ja*PC@^0XoH%fU#fhQ2#8j9ZI*&WumL
z`0%zPY^Si<=MLZKqL6`e>G8Nc@ljnVF6L)ss@x1<%)lssJ_ZNa^Bt(fztRsyA%=Si
z^A(JG-ui|%S?3DoCS(#_OH{E+Y#(G7J>m6};fVWq|A3zVjxHP&ckGy=C_Z|3>v285
zHVfD*KD0h8*Ia+kXvk=bI}B5gWIjDPA#7A5sSS>0BIE624e;N*(_WgnIa>SRMP3uy
zI_`|E3k$!NuQA08k@x81VyiiwUZPjH8(6iq_YoVSEXer|Gs0rdj})Yp9hK3_ijdL6
zjfy&cO5Nx(Ln^TEiw|0Gp*1L4PPV!M?rNbX%_%(d@wlNiEi9@^WzPX_9UnM>Y~P?l
z#Y}ZaU=|8CcJSvMqbwau*pT~$Q84%;?1;^)+4QV#f<_hB-Um=b#la1aY0=HD26EhJ
z`7pog>xpXif<BOT$YF}#wwz!YCftUU(WzS>m+8G?h>XM9Pu|TEkx2GknL5}lxySTj
z@~mI$1%|c7(=Y3AmYgphPA3v)8_&}v{Yua#8#2p^>%uviPeU%ZpzNUd-Bv}O5$@eu
zg}Kb7(P%ehDGVm$pU6~o%M!603Gw8PMUr+^oOsm|Xy;9iSvEY4-93^Bq08(Jb>uTO
znCKMyXi@IHS-CY4ZZECrqiCf{5fXr?@18GW+)1OMt~OV&>*_D$uiYTO{QUV@d4h4?
zNhFbrM@ZqL=Tq40A78)lmDfI=dQ}Y?K*5hqHH(&fgBW}O;k7S~4MTJHiVCiqNxZhw
z;xQhwr7Swmab&b>kXpqwH^>v&NFA0V7$-aF3MgyH5@M2%XpzN6w-a6#s%`L<mVt4u
z;fMaqUJ#Py<^}_D5FL@ewj-(f)8k`D4F2kBT<yhQe|BH5_m)_+2b%^P*1}*y#fHk{
zQw!b08pR8=z7cmGe@rC5RvYMCFuzRf>6?YU1==tr)B3+9&Zwc#EwpMhu*wl+qX$xy
z6-}Nu7_g_C5&T4xv;^0qn2GVo6^%?i|Ci~wGo8Z~Pf^dS(OxE-1}4%tNB_!g9H`;;
z17YjfVe&q7Bn)BC*VRt-OQ>TS@YI8b(-(pOraM3tXi{4}KfCm-OG!HXwwUP2^s>WH
zZ-Y0EPmmV?8)`C!hF~M$b_WKUvuazqq-T6^6C+z=aSL)6?L@~4%&;Vp#e?I%cG5M>
z?u}g{KsSFF>gEYoG$^QWPyn^whqC1Do)m32y5*EoU!HL7^}^Zi6`p9{w6RW`9q>hW
zd6t1>SQ#4oj~w7S$q9__dhpJYP;VshuO`+pQ4;M!Vq*u9i&3Uf%~7O4Bj1Vy+!S%G
zmzV)ivaAv3a^k1KRw}~I8qmQ&_jeBZIl)BoSlZt@1Rn<;`n_U{L4}!b9kdu^+LsJP
zM_l!IQQ6y!X+lW%;-gJSO1ZW<_S>Q-7<-472qkI(!qm;2u?wGwAnA}lwFC%iGl38X
z#SS_y0s;kBMQ!lVP+~r7?C=EJreP_Jg#&jGT%VF*yjf=$tj)twEV#P#jQ-RN0sYER
zt=6c)HpyTugqUkD8?GP1EX33Bx2)8&5XpJxCfXtRXOWA`xS=>NuSQDKOl|!z_2TB^
z=>-|=lWl+szw<o7nMg2ylPH{G%?xkXKuP~dd>ZR^da({>(apHhVGIkK1i2$Fs9|%W
zCp@)GnDA(Wv}`a0E&wCBDWs;L1OOq+P=R^t*ztEh4O#+Z0jzf~ChkHq-H-hjLOz^~
z;bZD}o1bg@NrrIBji>TH{s!sBA^LNDT)P4==b(%TpyCMHbX4OrD3pA%nzueXt45Fx
z6P??c4mfsa3ZBi%u0$fMt7^!TfgF{&gdiFv6$wjQA%jy7skaC+dKfAO^wG16bN16G
zJI8_*)DcOb1f>g_+&21{LdF=d^}~&%A@YnMAqf~yK{k|rVIz8UW60!jyD0WyeIPOL
zH;^P6R_lWH8|-1v&)uxqkOqeU@M9wcpZGaRPA-W#B_OuzjXpqs-{N1un)(!tuvFvv
ztVV{Fta4<#!9$0F{zEtcOT9y8NZc4qjWxNpYt$G$9BZxw05JbLVzZSik)04MliN%j
zbpA4siBoIllroK%Sc6bjFWyy;$Bg4ch&+v|G)id5UP^p0qD>LRAz05xj64p4MIHBx
z78;O8hCr!!Bfu++LlE3I)TAT5E?=la41^=L2Ip{doHP1hkZy=oD}Z!3!QD;OR?Ddm
zB-(-~2+=)>xAn`cPkSHBtcPuVd<>5{6;V^$P~17{H`BAKbBzWSslwyhenNwbT9p##
zV{emDg>&I(-Y|fUo>XZ_tGds*0Zkebh7+M55QtSbk?OT2)<VL}t0q0OtbO9|m6j#;
zfQY(+g-HOc?0<RhQPhVu5z7kmT2Lr9<HJUSBE<fsR;~7X%H+?do*hWYKy7LzVdbnu
z3cDjR3#dtF36Yckjs%U~u^@`4(5DR1?(kIo30jWzZP4oF#(>BiYzYxmgWBB0H84=D
z)5Z<($$WV^>B?7Y_R&5<?Ni8cY2>ndf>v)it}V)}uvn3rCLki=o1^+Pgy=>$8JH;;
zpD=c`PEmb-Ywpv!!KIAGAoa0oeOWfVuAn2nF5X>;o13|B0x-4id5CD(*Z`Y340)cd
z0lJ5#Ta$GQMA1R!WL9m{LM}O_E%>2PBMyi`^lxCFN&5%h%rDW(QKl|4J-=QkHIo%X
zZ<Xd0_3jlgilAiomwevG`2Kz030&Xr2=co@=o;e7Q8+Ch!lzSRNk;b}<(kI$L#J*h
zr$gj7ea2iFTR-F?o${*ys)GSENK!_9>d2iHdL@JnarYfN{eTr~MaD=n&ipJcPp=1h
z?Ub+)*gPMOM~9PyI4baj!O;}g7=jHW93k6lA}^X(3OFTQ%o&BQ(X1Qy!FNQ`QPUT$
z)}`1-$Z!w@7)}6}<blKSz))5p3YMA<hlV5PIJbz7^#1a@Xs3VqT|Yu3TE)p!L88^*
zw!i!i8NXkC$8QJs+e5>NRq&?lt2M71A99N#t&OI*w>Un?9wq3Qd-#DwQJIn)yYn8R
z7j6Ty=+_Et%TeOjHz`LVyI9YB<Yf)sc_fl*L`<7W*WPA&E6Fx6=emP^$bT|Pu+{WS
zHlHm%dhxd8j5l{ej@HmYb2zLX&k)Yey`F&^A6J5*=d<asY8sEBSd)m_tm&KJLvDZJ
zS&usw92c2%aua;MHJm6@%#v2V=5<QK$%pBCh|`DM6+UhP?~+Y?gcW<mzGp~j5tGbE
zyjZ+~MtGP9j1`vx&U;VYP7;&3;UkW3l|*KJX^3Yg^Im{@hy34hdOIFxn`Su2Fwg^$
z8H@Y_zkeV2zUDr@M(BZW&glNZLf@O)#jB8&G8Zf^!#=3v;@UrN^u?Mm4S5g=x!Eq>
z(5*|bkknze+KNab-oYY=nM$~i4pDSZ_`KLwk?#0uywOV0g14>9tjt88`WT9+)%;aR
zqq2p!Jx2IQY?i$=*gVSaw34(J6%zZI2>i3x3B=Pe``9nOIqAE0K;>RkCzT42#^VT+
z%s&g(eX2*c<L#a%nP;N@)OO#vVd2Qw(~8Wbf0=msRtU%|&kJ5Z9vJHGDCn;@ed;06
znUOA@D0eo%FN^>?cX#j<tiZ|bxj=BP?03E25e0C_<&#cRsUupW@_bI7!>$<9!50tu
zf9mhhhhRwpsQAl-(3}zq+&r0Fi!2e@-GKa<`x%gbFKY5M1c+{uR{qHBso7w=xAj@|
zBP0O@taXfB-BfP>M_a|;LG$PTbhq}!yuv@-v7g}|qw*U6y{xMDRLNoJDgNcC{>;rC
z|GtLwRJvc3)gHr2J#!22gqG>6w~o=7J3MU)KY2GM|Mw%=)N+KOQ+>9sw|kZl{{&8k
z>|IDi2%k6-NRbH;bxLj(Bq9!SH^}4z=sd9Fd(<mb5N=nhSG+qYAkINFme(Qzmt=Qy
zx7r|)b=0r%;aHoC^K<mL;1Xn>FD4NEoYlGvuAUUQRgOKrtlTW!zo1#I0O}T8a1exb
zLY4`rn#YvdP~$#!O!7-TR~|}sx^7CZ9RkcoUwIt)yXvpU;2uSDeg$4NjnWmoL;3wX
zHkM#w;Ye81Oouhf%>bS|nP=yb6r2SA+vIeOe>;W_y>^PuMdKI?hX?K<;Cl1<z%jM4
zg|bhRJYYcNs!8io@&c$8LGUfxk7EFn>GzZA<)p`r9}jpXy5P$M318hhd8JK?4EQjm
zjpp4EpTwYdc}ErAA&!)?kba%sMGNH%c#h#Wq<dFWlm_&TYX=0GJ4SSpphwGU_)cWn
zvLI?b=#OY2o{UCKJm2yRJd)nQ8F>e&?_G^Ioq9bvhrIUk)mElnxF-JqmCPuT^uq|a
z)&(Cpnu%H)G#XrYVW_Y08=ww6?e&PW1Y;Pp!ulLl^GgT^9Tv&=+eB+r=GUg^_&EE~
zkvYoYQFC!L2ba&ymkMRz`L!y;njGDBdB~V5tc=jrPl`G#=IMzIT!tf-`+;ug%}aN_
zyxt5-=~mix8wiB@dw0W@*9-(m<R7`<%>@(`9lY&8K<AE$;}ofzyD)~kAb)sQH`AXS
z)OTG?*KtW+9<Ps}cEy3vGu*9S!Bcvy$Q!>4R_#m$p#uM@`*NQ$>W*%|7J81z3wqA8
zJZkVjIM(GM-u{m|uJT)AR1(7qqb4UQU=1=X;FiJPlysF8<=l(6=z0)t1;r855023v
z^|w54DjeuDU9}@mFVL5Rh*^#^2fSXvv!Y{iMU~Dfn7!M^EMIHc*deAdQfmw@0%4w}
z2-eA>%}X(r5I)<?p4QIOwkN}31(|!1i$z?hP*^x+rpa@BP{CtZbydP(ynZ+{>%LfQ
ze06hn&0{4lPwunDBTh<rw_tWro@{r$g^oKP{qgj~+MY-7SQv5FOH}Skx>kRR=k?HA
zkgQ~pJK{?T8|HBR6-56p$6viXtLI<Eh`+^y+IsW|n)yekO$8NgW#8f7d`gyz+)WhL
zEoRUC=vbP9kIUJ`aPH0oS9+{!S?`W%oW9!Utqu~H#KhS>Gv;LH{O|bq8P4kS`8HL$
zKbdY<XXo?lZ8^oB<99tXNMVZCWq>1nypRPO2%h-Lm_=NxDRW_-om#6AuqUCnbz0yp
zy;&2vW;Sa@<aqryxfl2iIqkW<7$oGzT>%Ud$Zr<QOd}R#Y<kRYdC=TZQ*T9>9tjfo
zG4CDpy&b84%7Y~knFEdDN>(61i-VSr4r~AO0>oGi2F->)esFmAa`q#b45KdG=2Qkj
zDZ2L3WdEabZGaN=!dp~H7f!43xm$rqzTj_2kgko#m>1zM&<m#*@98Xu6e1i0472UZ
z?~lq^q(WrBR}4ZRxp*mu%zSw2j>KP7xk;7>X399hC{ub%JXYP$%IrWMF8v{S)in%=
z0B5t_xb?sn@<=a8H*)h#mIJgbYCk*NW1MgnQq2a}C4Zz6a53uup(ZaRkohma1B5+8
zl~{wfWr1-WA$?HkXsG-D!og@rBj#v5l#W=(!s-%?g67WCxWqSo!Y6nP8B)*R*ONEc
z)f;ecP*$oco3yy0*Kd3#W=0O#hgNj+=`Lw)ICGRoq(c?dLixz{P=4LRIjQbAvtK=V
zG8us^K6W=jm4<7GlHkuC{PD{_!mZ`MY{RENSsCwh6l#KE9xw<DGV7~q+_YJ5#9s9<
zz^;Xe-EHI0DO;=xF`=?F`SeWn1j51h=$9kG9R&c>P`J_vNeMRgL>RZ{udCRyp3!x=
zX+5n_INPsa4ZfYua4Q+(RUEW<8=~u$24@{3G9#nj9GCU}w!?et+6Kqv<)f0wF!iMM
z1eOzb0NpKw#}AO<WIDTc=dGb&X(+fjas>JUbn_)Vs9gUO2--HCp*}q%vxj)_99!ou
zyaQP1at5-|hQ+WSKq=EyRrVmVje}Q#LVtX!&q0ug8d8Lgo*p5(XgR(tuN!wBC)Est
zWo76^=faVRF(_qgppT=AA-qk1S3@HrxwX4%(T{KI`BPr2x3jW#%p1p8o?VRLN$0~!
zVYX(Beq#tsSjCW&#*O){eD<UP#_phk(3sJkRIKV!?Ra3}Od<h&NTY$n=4K?_$R59{
zW<$4n<%#HHuoF9;sE+l<a;N?$@H?|ufi|ZO@rPik=kW;y4N&jg10*8{rVzo*;fLwG
z>b&{du`HJrhqnOlP!?I^iSp6WY{z6Utru}nY<;owKexIbIE-QhQtM$!*c|3pkiG<s
zL*fuQ<X&f{C`Y1imOE6rt2RDb-rdXrl_P(8F?l~AX!jL_o`S%CbMg?{V4~g<dS=@l
zFoN))D|B+n*$<bm-z_|aC*$c69v|QXFe42fDpdO&UDLmv$+S2r&vAheblBgZ0CC&A
z+wEDB;++>@OO740GQ~iqJc8QMZZ`9G=Nth?M;k?2@PMdL=z!j;oTmcC>}+X{N@t(|
zAafY4ce2OT)khs|+6;gA=%>2QnXa2X^T(a95waS7<ZjW&rXmFMJSYZ1+7E3e6tRmc
ze8u%u^v@W^y$A*mn|4l}|16;p3gj<(0Mk_@;kcf0+^qrS(*;ySyQK>tvjz)r<P`VN
zT_zp`8n26?nm3CBkZAQK4lu-|0sMZ#AiyD@b>ShpMWFov5#cufO@iD3jbj@dn(GtO
zt7s^CqJB_zo;c{-WIf8`g!}Sfq-bj}<a?Tl(!*e$6bBoo$NzeE3R?9Lpt}a#*$<~t
z?J^T8&vo(4iR+3R-Ht#F@)wAvTZSt61BeofZ^zSe{&hL)xK^`karXT1hWP5*a_ImI
zxiw(<uu7lA9@uz)=fJ1gW?SmXXi4?mxO&8|hVFVElBr%^>FlHJ)#1>(wRyuEO5B<M
z{LN&9nXs<ZY4iI9T(P4I;diMbTWOf3gtG_`>q#WXdNW7sQL6E-=p0|n9HN31pW~+J
z&FyG0nwz^<Fhwt<%dy80@QL=mB1`}R4x$u{XYVd*2-A)ea9g;~>s?;e4FqAJK4pfO
z*k*Xq%%^9;(q3lM)AO*mpITz}o1TmYezAK#ovZv+UM;~qV*8h(9kE_0*r1AG?bkxy
z3=@@GoD?@hV|6B>X?`j=!k4pGGjzlHAkn;tg6b50<~Y$ixBb;?ia*4~<MN2EJ!%Lq
zmKXS`(>3&Gax$(2lJxjc=B)1{LN_1$-Mo`&VR32VM<7p6o?Cbx?s0y>mX{X7DJWoB
z@UUjTYaa^*cdE8KrKjWGthL@aS`Y`%ZysaGh(dX;M!Iy%seQ8Pb>lIQPLZ`p;*<4<
zKk#3DPbeTIW_Z7u3P3bWandV50g*jDQDoTVaPD4RAQx4K1}_YNwi7#(H3A`>Y=_T5
z-F)ZB(BG!+8X0#W&(N;BvbT4;?yiz5K&c-+RDFk9>98@Z>#N!Hym5Et)LnP;+9$9a
zV~9NW<OKIZMkPm2z~%GYv9Qy*Tb;eY14--tsUM-5Ac6r_FVq8$z|n8@Md-9#?_1;Q
zcrHN?Dx}<7Ga#v38S2sA$5;Bxb=(I{B<jUYaVu;BOpw6`9my1ei*LF5(v$$fM}(al
zBR5jzx|xTicm77Nyx$JB1t|${s`=Nrv5?sA9A#88{g`F<$<_RhSEG|kKYTSHMUrNf
z3DbdsWM~>L0ksJl2HMIu#(ptoGieA9DTd8D0B_uKu!C8F_#r=Nh2$4tQ^@m_@1MP9
zRxUc++xf$@mzl`cSv?w!t1TcaxbC@Gk$Wob-0N~wUo<w14?yf->;54i5(Hx=k24!3
zwU9k@mD04*0)f$PB@lJa(-1UnC-;#Kf8#25sH&wEa%>LbkVNSijVM6Fg{o^nU5RlS
z?m)o@Nq&GF=yiPXdEm`ud9GT@ttO=~Sa)r34F|Z)aXk6j0iGrVP?jEb7zHq<?$X(H
z|Np?=c2Ghr1-yJeJaE@Q`1Ali?eeD-vW)42UV00jUcF4t95i`D@^_$T?kkW~_bo@J
zo==X)ps_;>EkmYmYF)Hou^)G@cG^_Km%sT9!zeH2(=A%>$0B(Gr)&3Xr~lb!ZfrYL
zI<T!<?2pOJ!tobMO(;6cRDpQom9=0^P~+utBsRImhk-1K%gOa3wL;*&mG3QUA=%>l
zEyf?$0k5Il6k@MEZ)TpzGu$fl{}kRAw&35m;AA$vI0u6ncIMS#OUdNGlLpc+>n{=~
ze~XH?RIrh-p@U+7>uRf4Y+b{D;QEGtQKkidPz<)MgKWf{&DK;@&T3I9hrJr|Ari&I
z+$3ZL^)x6{V&v)!t5%N;2wO9J_lZ;&zV#u#F|#88GmFwJBZf13GXLMzY#I$BT_@{^
z%ho^eY(1Bk5=ZB8WD;MqC=<T)7Srx6c?HTcseNCC9P;M9#WC>WD5eZft<yQ$04ujv
zB*p%P28U?XE6u(F)_>#W-H_GnaTfpJnd9*Psk5g1SRXNM#L{h&Lf&Qx$lzhUHDDI4
z=0_Gidlvi{x50-o|HXe)@SsJia;<(}Z-qRIJZI};8S1K+E?p^CaIbmb0}s~#_z(bm
zxD|l-*`Iy*yRC~;_}${!UjUrs*`GfA^G|>C){jkCIu3HruVz<C09s`Lc@Q5Ih^%xV
zPF3$E1o;pcDJqfz`88;GzMW0a$X29-8lPUl<_rY17qRi~j8wD!=Iw1XEs^^1valFX
zduw{>MdPJKgu!TEf~f;p9A!-s{84n=9-0VFDlrhoq~RqRxWX{pjX2}L2so*Cp4W$I
z^dmX2|JW08iLzDjZLBcZe++HPs}%uD<S|UF!{0;1p7zZ|3#BU{a&GdMNxZwA4e&zb
zcTZTF8l|PkgryJLv9~GF@~2+B`WTHenT?ktj55%HGn&Z7WRo5jTl-t6aly?HdI9WK
z_zKA4z8!2yE60F9@dqp6^d=)TA|uW1#y-6&W2bA%0PE!dHRb8{j5U~!7$eezNe#Av
z81~i}x6)giEP>ygmT1}OpOX4WYY2PoS#Ht|N69cA@-$Llr%NSi#L&))Y}aW&DngKV
zqxE6^dSGqif3Y64r&5rc&V75hvhC%YO~VZyZ>V7Lp+@n`R)q4TF;*jY%q-)-iaioq
zpv>-}!YmMCqQy_gqJI!HhU!*8YE!6QP-IXaj^Q<Yh$`JQrx1g~`^9pkpqDmQ3Z(+o
zH9NdoHvNjRbi^8T0mpZ;F>PEy2D(wy(+@$(j{5<!cViNhJBsem-yC6n$kVEHj}!QN
zQ4BnijfWTT5O&l8Pam#+llEQvzSD*n_)8kH#X#I%&PPWG7=B<&^R5}P3alXEa^=lv
zld%P?&@Ur5zkw_jN`-Ye%tY`uDDKeEa4|jMv}6`d^Ex4@nH9|?-$^>wRsCKKGzvfV
z!-FjWVFdq#cX&0^+1sLawqh|bfOIaoie#hN#;BGU1a0aE^<57dpW+dWd?Pglon(9w
zhsZD|%!ZB+a-QIgU=FB{@Wm|Svmo}6gIV|R2?Ex@?78nQJo*blD+gL=Uf_gdq1Vh%
zT-O4aKY1{>kihG<?P4+CmW(z?D3;4d#Ea135n_yJ4M<Nr&vR)9NIsU{h6Ck5jkjd`
z;8Oy{K{<(ETNL|XA#%VGA|%EwPQ0x_NJphw@u_0271tn%ok@Ng5RU>{K}c_?PsjQB
zvt~sGZ=5KG9n9rHGF;qZ6}PAIR0gglZ#9o#&`4VLQlc%=?f)prQX~o*7RlLL3}=hC
z2X`#Bxgf3F=x1gy&T=U9%3MVHp<#{d`F;wEW?$36GMw#p0%+8=st<<Ai<qv)9Vocm
z;L;#d^)x)QzdCWvIMt+E&&jAm@7YJWSM0-wdXUL2i%iD3A2464O8=i+Q>k(42T+O9
z{apTlzoLxk<e;zBBuSD9WGNJ5$k_$~&$>3Xh2M!(wJobiOPGW<uP1f{>LDqZRTO_$
zEUu~${^#!;#QN`OeJFqXap>16M!BUn?pox3=`a7cs*geRR9RGC)eN)F*0hjOJ1-|k
z0y)Bd(FviLr7w>=Vcw)U+un7RfRNDt8W?8T^_xJK*&X2Ce2&w;5f!LAO46IDz^XvF
z46vhFRlaYH9fd~5+~H#~bv<+M>c#|ZlU#iGgn*DZTj1skkv_uX2+U{S`T4x_&}p)l
z2<?2@5TJS@AlZJ^fjV-edW!xR!T$MlK0j{;_wS$7^V5qXM{dsUV-S#EoBQNE>i(#k
z=AvrufBD&$e^LQ`cnOnmu6k*6$@i=|23Fo%c{x_c#}zRaAx^+8F3k4(h!VzTQ(=b3
z2whw%5hT^m<c!6*OO948$wMnuvN>m6*|%WWid66U$i2{!%20iKQ<6f(CxypNqi^<d
zfc6Z|R+f9KmL6>2BleelUtP1iQ6mw$JMSwDO-x_+-LHcne%1ZCr}$}o9C=BG`A6|@
z5ke4$(${0Z8kkmDKib+CYA+$@!WK=B^$M8memXsjgR*bk2Rl*vqLw985@^Xi%Xy*;
zpQ^df8KQg1<fM;SqrYg~7#L}HZ#^E989W=UKo;gB*iVzCaSb+9qK)r^m%cQh5n{M{
z2<_t9MG@OF%xl7)N}acM%4?7T1Q_Mqgu%2ks-Clp$wXVe&-7FRpM^6vJcN=RMt39B
z?FJd)_AVyE;!+=<-rbmvPD}VXj>y0flp-pu9@yKvX}`g=KXi&M)(@#3BtdrdrswlG
z_}bp40^e3U(!@g|r{h_c`ZJd5wQF|x4UU&yc!yXIzeLDnnBz#rVuf|V$B4|vGR|Ap
zh}<**@61*=)K-CUuw$0#_0$y)=FmL+L;Q(z^)=8iTFTuITN(`c2hp+N`!du72m;A}
z^(GRy6#T2FSW@e$MfNBdC<HcnGM#L58&;f(A_ct(%+irrCw7yXbC8o;<adyfkcXoI
z-ev<@P4Vg#&!OSiZ43n_4$dYeL^@n@tXhSLxfgX#I@~J`nUiK_W?=H!EP5f(#SO{#
z;J@r;;4sAX`vQ+fUd*fvWFLl>Xb|^X>SIt7N9u-DB@;W&dr+|`RBDM8>yG*+i6#8<
z6^}UyA7np4RPM+Mi#AfKg3u0oR`5`Yh<+|64ls8E_X4)CY&MR{6K4&w2m{ogO+-#v
zq}bsfMF+-gI|XXZwzpdw&{1rP;cQ9)iOIjiBR#K(er(Yg&~_VN(O|F5bBB-k+jO5i
z?967VryMH;T9zc^;&aDJ7CioTVPJPWl08<K%|0S(XA@0}y%a)+nal{pT(V9}<pi(e
z4D%?>UeQT$kN2-F*P-~=!p899u?KHc5@|<W!L;HfWM?m|u`M;il)MC+B-dXV`k^tK
zz^pd+ziS}urC0<EP2wLAloiGHLvby8&?cP@cUyLSpH)L}X6@|6vMjmtmbTiBTje~!
z=<4(UlO`E2u+}DwjJ~$-iS$%pBhV|1b%EM$hd_ov(Mo#)sLzC1YKK=2o!lmnczHOT
z&PMeFeQP;bDbP$fNqRe#hQjEr43+L55@d>o5xqe4%3}q$@}%N~Np*o_wv@wc+k=6_
ztZ5-1wjVi#c8S{Yv>YG*d4_hX!5sw*yn<TZJpg_JB~T8YL08(ChaTphIYrw^!J>`b
z!(*nQ_B0BFY%{3;8W3LG^T%f?*RzUqF<MOJ`<xSWct7VRVe_ZiSk8Mbl5H=o=TDZ2
zF0a0}Om`#&@Bz<k#a{7zatso?Yt3e`a#2o?6?HsiqiQ1)Vm4S=CDEis5fNilV5kA7
zWRj1w%r*0dgW!{F;|6$DK9~@-go_~Y#__ni+6w3N@yEEdLvTo$csIZtd_({Y12URi
zNwS!S>k4sF<B}lGNy}KUlj-vZl3qScM1b<PkMOKy3DIg<S2wHo=VW0KB9N4WQbN%x
zCVD5<n<`u)8NomaDBSrEbK0{M0?sMgpb786CTZx=E#WFyo)Q&89ErV%83;jq;sa;F
z(l4X3&9FJ&rmsK>eGPe<t{kaNpJ?!UOlH`u_t3{#?l<PGAL*l4&Qb+d$*83lVr`z%
zb$Ye&kheX-Hq_mh-%HCQ%ZOlQV2J%_R$g{)VXW8c<QwdthA1KOq8KasAvq0J(o%Gm
z@bEi8$#<5dJr<_hNN9|w^c{)q0IUx733dsm^=MR0A|)f2;j-`o%$Fr0UVQQpd38hb
z;at4C`BcS8aKE0_XOMwsI_X9CTqY78|J%nw*e)rK;}0x+ZEaak=Hsa4d<r%}CD89z
z&wIt&CqMRz@1DH)_7Hv@mf-aKHHCv-0{09~kA&#+X$wH%?+8|LQ>Z)}VHt;J{knbe
zKw41jRG+;-hx~gDNAC#)c?1WO&TKkI&zxQ{tY^cEGY&Zombdfi#aw&(LcPEGm^}W|
z&*l^Pt^CzLV#Bwe{kM=m4C&TZWBV@Z2J&8&#WA2O6v5lc^IUYwF<&jo#w2<(u$=el
zy(izw*-*UnY!_d_Hl@Pw+58D?7o1977n@#iGLmvt`JNsAUIO#4LLG-wHUq?l-L&S<
zQnQf<RHmjIg@GueN@^Ks`C725-{T{!gNVw$g`gNSm@B1WOg+CEoKTX*jsAJ&0F@4h
z36Idj@yP$o3<4jIpJEW(VH9rK>yN^X8J3k-q_e~Q{1yB7Yf|@TRo9<(+C*&eb2pZ3
zd+2UhzH%OXJ^9&Gb~v`Q4}Ug0IE!uUPQSJMN$ud!vBJ-~LO8eE1mj);BOK#xf^si{
zV!YC6NbHvBhRYquA3raadQU!^UYwjxF6Os(p&T)Qe}W&SBRb-9=N%shhK2i@yc66u
z{B&A@B?V?b!@3l$NvMy|F<B0;+oig%p<0|dbrpPI<s`kDzzr!n;9{LsQ9o};k%80Z
z%fI*Acy<~}3JwNxzTxkBG7<Y*_~}lt{u!tO{0c6jgm369iWZkYiK{5YIdco4d_{Y9
za-6(ThiTJ!IVou(L{^+biYF-~Pku=Uh=hh?>-CgX&D+c_b9PBGhM^3Z5*`e0GV<P(
zBzV$zQ0&BT=Toq{wHKc5LdK>m42sXbOaS2uyAzC|1~ddADr5@1wYw9|?hP%iPlMq`
z&zdS;bUkYSWOa}jHN=|DpGt~7Ii0D4c^KkR4oC%!H-^_m`~BtJBv;+l)saDl&-D6h
zeyZoE9mbt!WpldK&DX$mSzoJay-(wFTtXriV%rAAu3qIIDpI*gBiNq?O%K2<!rgn5
zdg#OTb2JIcqot1K81s*rvr55uB8Oy&Dadh(I764I;?s1O_;w2BDSNqEH@+K;@rKC(
z-7W6O{F5<;v>r~!5H;03UbW?YkHc!vFVx&oM>LVd(%PCk_Nh~qT-%t>qy}M;>7|Bo
zR-Sh#a1jQ*(q^XdT=_L=R3ffFcu{KUd)%ynHIetDHKwIJ-?dIBnG7~FoB|hkKwI3)
zl^@sRF#;b@_kGAh39^RC=qYYUwvihfmJWE=a+T<<IVkS5YKFSmcHqViC&~}VpRuLY
zU$O^%+=#xnHvL}?8Eqr@LfF~X<|lG_(2ej@wn5`|@qJ~N7@M>&uRjz6bv|+x!$}&b
zzq3`3j5kYk$lzdfbPY0c4P&LR`TcT~>6@$htRy<%Ef?m~lM~N)xaTX#8PLo+2ZPo5
zby~JaPRk-bKnwdbPVJafTJ-cG;zX;MY7$AxbMz&qzaz@PG=~rxCs;)|9YFLWv02hy
z($ntc;yq--Sm<OO%sOZtl65`K*4Q(7R+qXw`dW$!OG0={VvxX?wN~-ZjU~lDC&etV
zb7=G)dD2ED21();*!UE^5U)TK_>_Q?3_#;}1Dz$21^9kTMdyi#uU(25Da$3mKrky;
zn5MlH*ag2uJPgtnHzE@7cIZ;N7hLwO;{nOk@LJr**&ZZ@{%}pdr)UT$TWgJoKpaBU
zapI-VBk2_mW;f?QU`^ZPZuyv~1$OmZ=ah*641nt;BF%M70+|6%4WvaLXwwUMZhyP@
zx1H`r)`w3ur@n4~hP`j;@6Xko-Yn%6==8&j<PXvF0UzIU@r^3cB&I0GV`KY|98}9H
zeM11k;6s{+w@-dla&IyT*rt!UbRe|XZ3fWZ*s(=GPEG2D4=p=c0miy3FST0{Cavy<
z{K3i>D?KiOOSAg96ke#g7X$Iz@KC|)Tck@G*$qotMmS{n#$2um8H4U9GS|Qe4SuYV
z7_{94A?8lQOIBNLMz2%odRtX!)z(|{Yzm1U#qY@Z(9@G%Z<+P__PLw=gJWY;Uw8z!
zDuej-sjijp%d4*gE7<`}qbg$YJ;3xO-YS4##S+UmT2JS;FBs5-#MCH6@2O1HBu@u>
z6NZZ7zFx5t8#aQRLnDz^(?o=cWwAV@Zm-ylfI;s+ksx1t<GbGJtJ3}kM0RW^$Le2?
zq>Uj=Q4^ero*x5mfWc2B%t<l5m<eSgHFGg6C+`0ts`~kC>L|w<2hyKkPCX3_DHI%|
zaWr-B%rTf9%uik0k`)?pP<|O^QxNBYp{78X)pRW$S}lz<GjRtJnrl&crDT?_$PE=m
zF}5Mr0y7XHm&GI+OWgK5+51k6h?&+u$E`i*nOcg;xO$<NJU&|%Rw)^yJDo)mzSr16
zLi5UgI2w3RO++Ig&@aSj)im1HkYNIT>-j$8tA<X?+o=w95wYL$*Ihm3JS#4L#Z^@}
z6Oud%6%~zL7(nYI!OqUi{cer|Fj87N(DFv{>z?$R^rR>cZ%BI#6(GGBJ_Y`0kDQ_e
ze<7Df;VsF`tz7pgM8|L7XA*M<eoa%pz=x8ha3PK_LPr5F>hBxv1Ntl9S#I%5IjUkl
zTnrMVj9&+-O@ax?6g!exRI{^*ySy7M!+q2OFNt$Qd;DqQ+^pa*Jf-t;LjPqigAB&%
z%d#1=PcNya-8|bTn#cUr5?Tm?49uMWF!N+G)A(oG7-E~~wj9$WX{;4XJ}`~LG&A_V
zuC;`)8eor$9WiTDwU!X~w$>><{ImgpjE9Dp6(o0fM^~*g{$46xQ2gl8HVU3R<Oxn}
zU~3=U*_cGOuVqwbd7p|shTU){PRAEq9?Iux;Bok#x!G(m96?o6=jUGJctLgqI_eLp
z9tTT|Jyi9!?+TC9SB0B8?#(|m>Wy3LO(Nb{bc$_WmV}sb{j42cCT1Eox5|S$&qzWS
zKegZt35&9`*0~a3!G|&viAy|>qU&Za?-}Hc@O+RDcFI|Ghe8_}PmApyP41q`S@gli
zDrtF(W4pcFHrNZ*`f+h~KF#xKE8GB-<u6$A5xGX0*{65CyO$wjMKlfIbOA^{n&(aw
zgW%IdWL$A=`%ErM7RBG(8H@tv2%>0P!-z>i?~k6n-un>vVqC2Zk0?o0$b-anzqMrp
zAm(Hzsic8q3OBJxZfCt^F%f7fRBw<(c~f^I0l#B<BqL`x34F#o>UlN|Ifmtpod}16
z-}5q|V7rtUO$6IygOS!}nKrk!3Z533Pl%-BWrdNB*HpAITC!@P_SH<e=T?_-^^#c<
z2iRXZO2WA0p6MDoXw!zECX>uB@Iu_OlKYIf(Y7Zc19;?y5@m-Giu0oWkn^>?O3#E5
zv1O0L(rndhEoRpFXRXCtwm8J#<ksb7D9IDiXeF$wfGvU8c!GOjyPyy(gL95TCO>iq
zk97paCBCpFZDk1wEt_IgIX>yEo`{MV5duSa7&9c+9FMP8XlG(kK~^=2M$A#oC3{Qz
zs3C2xXRx;Rao_jy^3HnY4IV?<EV@PLDZ5PEhex)^&!<fnV_h2imn>I-{H8nW#Cy3o
z1LTUeOc4LjW6<(>Es=(`1vScxnA-0Y6m9q{wV&P-B62R!oI|fTj6&mM)iK8&Ok53+
zFYrDFS+m<$({VY2hx@JVZqEh6Co#O;$gp;qQLHs&4M{bAD?8R;ernB9*EDBsHA&6b
zO6rFhnN|LVR)_y3><2&Em~WW@BHFJlGb{X;W#A^3fw!=BTg#YmW3#&rOykxwRQ#9e
z+dtOy&5txm!ZgcK=o#LHFOn2Us8of|F@YM@&H1>zHf|0!)zY&3N!cV$C?gv~PK_vy
zlfE|q7hmKk<~jp1r2ijjEclUTfd3~*Y5KE&q?~5sEJ)n>5+1RC1QCy6$-3*MhH5vT
zVL3-41LWIVVa1{3zyZ9lTIo-qVD+h4Jc|Qw`Fa9gdbdC;2_tcH21en83jJ3v-#mZ&
z{4d`eKL6p{=RZ7u`!nkQeen<9{P~F~URWJDBA>&pZ(Nt14u?4OX;zm6tIm4n_h*q^
zCks}o)f#f;I2sdY>!nV=3Q2t;@~@Nqs5DB6MW+GxDCGOegF~4{4xA-y$qB>e>pyud
z3T|Ww_Q}+=Zt31cffFK?D}*L9TG?KrST$AV)AKk3jU~ZBSj2tjEMMAeRxpYnnyRQ6
zf{(3T%Kc(@X9rVFXRAZpmfeptbn$3xpY|c-%$gP^ot%luDnpVL_9Oo_><B)keSicl
zO33;wRmlfi0*V!K^%Os}m<&*z>r5TyIo@ckxDQoAA!FdHdmOpt-|2thHt*GQrF$s3
zO#&yY@8dp6_#oYV_T`S)RN-DRuKC^UZl;DWBMm$mDbg%z!h@a}LL`}8Ll>XZO6K+H
ziN!&w)`k;&hbRX;^o>W(aUaY9T%y^09Cr9w?M62lVtPEnj`k3={TWb{5G+x)UM3LT
zjMlVDzP4MOL|2rZ%}(xqS^`mwr3^^35o+1na5ugTH#L&TT1DiI5=4@;%!Xm9)r4*>
zQCL6HBq5g|=wr<dvgdmfMiFDAaqzO8+j4q}ackl7ZpF#rxbEHCTgg8SeF(Mn;@=rU
zKtZ@N#2_bQUq1Q}y*qMhS%Ng7`);2ofO}DyafHC%JHMTv{x-3P+ERyK965BnefDr{
z{!a*efufA9e?-=A8^~c63(bGqoZnYVa&4#ixv$r$of+`$GE=tZrOcdcq%fS%dU~wV
zdQ;@MPo0lDdd<=(HvzQQu9D>_t9c_WZ;&P7w%5?JLohk$yUQm28>bJB78n2cq=~-U
zmvapuw_QqpB2v!h;5Z6dSr7J>t#_m`#_U=T4tg8!L-%7hf)bhk7Wu|=Td@w5{|b8n
z%mw`0pTS@E=+A$|?rfBpIrYA76*Z=2Yi4~_S`5ex0;~N9SABb1zua;*HsYlKQRr6k
zCf%+M2%1>hh%scV(amq0Y}!l3V;hH7(fG|3M>4<uB<ZPPb+4ADbM8kiz!m*^d5h~v
zyp+qf@NwdKcY${x6ZKU{f_;r~VByU|zh{{K8ay+%x?34(e!C<cnW)vW^!xXV9}!0J
z3LCVG(Fq_5(&^8&vph@7PnG96No~G775XRivtU|Daghs^xyCAfxcq}D|M*1Bu#A9(
zxSSd1201Wyyc^7_l+O04zlf7AOYr_sZ6D`;;9YGV7j=6&fc_Vlnzto5yj&?yBxSoX
zh0k>TA?`YxxEu0{EbsBd6PqO7I6^?IXUv!aZ)jQook`QD68HzZSm2&7b+WLsqf|zf
z8w+2zZDOd!Qt=25=@#jJ;~Zv7v!VgGgJqZ4dJp;*4r|%X;#1=^o)ufKFHKsXgOhh7
zFQMWR0`d`=0`VSLrn}X5FZ{n%lWq^(#wQ$#Z8)Az$p2g(QN{tJ>HnUPD9&30gXNTX
zWrKMYZWbKR*lo@Yx8eu*B5~IO-*;l~7&CCn7cj|G)gmllW8XHIEEEVhnqxDfCgV&|
zkI~K+-%HrcI5V!?#=Ro&j^<h>fWMu<#^lFYVJ@lLtOyXT0y#@74qXqj(h+K^ULLc^
z@fF{&hbUxt4O-0R=_&j(TGB-YCPvM284_5y+**PJ;)&lxengPh6(BXI(@U6#F|}#V
z%gLY1^F|A!egh#7MT<Pl32!8qTHp$UwC519_Hc>JCu#JFq&`^7(L2C}hOTlBA+xq<
zsGTWY=QVM|8$LkWJbEY%0z13!Ui*h!C3-hF>h<sQX4_G{sf3=5RF%!Mx`Fve$zKoC
z3hEZP(R?d(x#}G98(rAm6nLayK7<JQZ#ZX{PMsA>C9R1F*aNA}9Qh>KcA5`NG!2H6
z&)f$5Hh|N^3*!EATi5Efg~i(5OKOE&nZ6bw7qP5&q>=irYy17DKVtiYR>zk>IpnU^
z917}7Y|I;`6{(|=aTQ9gE#JO6!BnFUqfk2Zxz$RkL%6Q8D#zyN?$W-KVp1;}q}Vv7
ztjLD1yv$qepY_7i=^6FO|8Mc?(<9;=$1M|K!(wSLj`GS?_U0_YF?0k9YP<RGqTQy<
z+C<b~G0d2-iUPvJgtiL;Yxw<|OzBQH83K|xdZ{Gh=@N<qRQ7yUeR$<Xp9qYlS`n8{
zW!n_&X^G4;^qO~;Tlt*UZ)3A^kGbuDp3LSc=%4cNW&~kiZ1J4FHPyW;-kkMBeM%Md
zZSR-(6%8)p?80udI3_RQwV(ZKz2?DNVe<#QTQNW2%^&x-%t2~ag2#PZv4EbzUJeLE
zHF*eVL5LmP(#`5Q+zy99<Re|zNRtHP49oPS4bMEjBo>jXl4CM}wUJvm1p7>o@V|`6
zBRjG?`l#BV2Dg!682E-pnZ;auDy_si9J08`Dt~bC)b!c1kyi;OKz=LOxk-IWT%h+d
zS`y!p5$4l+2OUW2El#j4tHkMvAt%8rroo79JL@S!cDmh2`w+p2lrrl<jT-qrVwY8#
zP)`lN7e-)GnA|QSnBGxFR(@pj+d^I1-ek9@v%Vwe(KQb>8b)3Ok|s!DdBJ_<4klSp
zLT0J^#jBc=I8bglp8|y522of-dDgf2i`H2oLprvst7!f4LWWP6qGRX(?DQNWW%%@h
zv`_AZ>;ROrTMMsd(E6V$y=r&V%?Y&FF3|YYVjXn_g6rjgeTla+j&Z-C$M45@+qD{E
zeWY^RCtgf+q?sg)E42nomBAmZvbpJWB}PxI5(c&Jho!1%laR6d-_FNtEt3L=0n7Ls
zFAmBxCXro&z8%#L?5z}ZrBbJ$*m1lB_`cxF7^D5tqY!-eh}9aRG|ny26cWgbW~bp$
z=?vPvT!jzIsZXertqmf*EEjmKDe_t+^xD8`{BS&-o+nPOhme!;1(sOndyp|$^MYhd
zYnpE-61632%Kw745S#eSERm}H=2i#m#~fP!NvC>#HEn9vKZHcXy1>)Mx>w{pJN9Bk
zy;2qg#>J=@*e?55(SWX#me(yUulLq=s?fd^v3q$8wu~GiKq@g{8N`*6M_hMreQMU%
z>i<iVx|t@`9a~5ja%+CHq4xhwdwk1#>PEy^`TzqT$3+U~>t<UHqu@M%iGD~cBRc$J
zOzi(<XZg`~mcNN1<)$W+Yip;CI{IHq=-*Tc?IYo3*;N(l^K?ExZwB}8pVafyi=+N<
zdUhWd_Sfb<W-)iv`F`Cr7gckAclWc;K1&(mlrpCB<8m}I{=1RMT;7BsW3QkFo;*EP
zYT4J-vu~<tU!iON_{YaaTJjC`<m+n6Q;sO&Zzva<$GfFi@ez18s@%D*a!*{Ic-nEn
zIo&?~;j%)#Z?N1F$s0L;8SQm!RFRp%AO28e-ka_7RRnTYoz%^Ib`3X)paY50l9wEb
zz0<S$-^F?XCBiRNx{mf|Rja*%Rk?-h-I_c2p5o{oTE7=)i~ianS6$Q3zf2}pm`r?9
zQ-{rxDy;24u#wlmGRug6*&_VQ7U5sE2>%3IgoFWzY}~AE9MSRUCiq7hGi2rX8(3(j
zUYfV_)BNO~n(AfH?yaeI>>p*{aa;3^|Eml*jDVAS%ZW8v@fwR5QCRzRHNUJNgM~XN
z7(@i(5pl0?pZwS>zI*cG+e3)Ry)y1cPWlNAsiSB0@v-}R0<k8+BA;UC6o+-=hj56Q
zD)ENeP+B^xN)lbYoxXCksaeuokj_9L+251d(32co0tE(Y#5(=siwR2qis86Ee^ZT*
zJHz?apm<tNK9tSt%GCw$1(2FnSMvwYdZGaUY(SI09~7>qZzM`i$i74lXN=^+V202`
zg*)okJrklx2Qu;r5P${cp7s<Z9XFWI&Hr+f#OS~a3XkR)Ruxna`+hpc8{G%+(<k=6
z9Z|Hy9Toa%+s~De-z`@kjY(dWkoeVqD`&$_GFjK$cKe`b^HoK|#R@*w)OMy=*cZB^
zLjXKS{-S#VOV?NlvmKkPL_BXjoO|iK)wH6arOT450Lo6jMNMLLj$Y^Li9)qyq7UrW
z+}&WZfwV_R$PZQsvu*UrW?}r;%p$yco|(9O43jmolWgxt)rV@FYO~=YdjMG#{mQ7n
zBj()=3xWe~&s-f`z2UU!__4~cz+?U@ZTYil*|>Gjw!Ds7;=G|((`jZka@}IJpLJvC
zx23V_+3gDmH{MQRjDN-b__>=arqS{4{2Z(4sOoS$bq^OI1M>B3`T+p!_*k0o5ja--
z)T5S2Zhb=M@P#uvD{!!7oh`S;lj&%LLK$QkB1-Ov^KVSZ&*261eK|XU{Nu~1dQ8lH
z<VR`_taSipX|X7O?ibJCy;4p%(+sm_N7p#pa|zcDmVMyz3xae^%3O@57f0i2o3a^G
zD+c(@Wb8U5<3JAtO#`oso&IN^(V!YIC#m34pTOJuWL(c3husuMbm23|X5*W{obzqH
z9EvF1)87eTO6S$u`7^(4bu)=J+sJm?P?in8l`NZ14ECr_Jf~(l;IID8lsj(fbofKz
zj|2s%yJ((HXKr$hNsT9FSuy`bm3qZKCHp|FjZgjYjic|96~vd|FDN<iBOu+Z1U6!<
zWg}4J%g{<`HvLeK+#55<%;DkZM~@FrN|ME4kljMsb8CV@PB`O?Lbvdd7};tJ3bxD{
zpJE1WyIK(E(Y|wZ{%mS@T8@w3p4P+n6Ud&vDl+f`)e?(d0N1RqY6DM?+AXHWf5ig1
zGyM{cY$;hh8caj*!*LBxz@vWgQ&n7+lR3KntK{?Lhq4}nXc2mW3;+<!ALE)9<(vVR
z%5pcy&+*Triqg%)ySO=nWJoc{hEvl+`YfH*-u3ZQ<%d<$b-hMUl;@tZ)RVe~@-b1o
zP%$)S#2eCva);dQb6tg@JD5ludt{VNLH6C11l>;0AcDe43Bnl}I;IB00X32c&=YB-
zpm0>7r1seF##hg(@io|J*TYlja^^PQHM;=Q4wQlPi?`DP-=a8<9#B6s&PRHQcr2Gy
z@qRMBq>;m5<{m9^(JyPaEu$$Dbhs@vG6?RlIXcRV0<LmRL^DBIpc6VksD5|MhQ5~F
z%Qid*SP+w2;d{u&ER-rdF`;i{BHG}YVKARA78TYIAP~7hI?c|sAIin<NeJPR`mVI=
zZLB9AzMjFfA4+g4fgYHq*iojT`<`vKh)J+xeLhs~o!oIm@c;dP{(t}9F5o3zN8Om<
z&fcC@^YZQVuRnKYfpX5_WB7R${=AMzsa;uD@d~3%DYh12$^2aNYh3|YS5;vVc)W0(
zIBtd+9?Z}T=LPr|d&4+Rrl}y>3zj)db_Wp>h6B=5)Ov?5A1WjW1h^>3IsyO3Ev+gj
zcDJ{;AC>T*2k;Yjo6GL2G&aBd!XN*nK7PjE{;t0LeaW{!s&Ak3w_kqI$$Ml}Uw-9A
zbOitT0)9RRG)OPd`6+P3%q1-0ilIi1F^2DyLecL!npT~cL)YGX!vtIEcgQPqG@XvC
za^k*PwwhQXogIetjfP7yS3Lc&jCCaRNYes{3{4l`lR1F!fzldo+kSVt@n!8H(=QaY
zK9(ODfcFdsI`G0#3~x@AO*Thw%ribeEh*Tx8<d#K2p7yPyUM%hr&Gs~OZV<VIR`xx
zvPX0HiFpdkGrFGPa)!`}jc@&C3U^02`t_ori-XjCa9Cgj6t0*rRCp&e7sFG$B|HR7
zttq^N?yziN2$$1~@yK1F=(hzPPFPOE)py5a`i4F}U%A@be!7Fmr_cj=*_v5_AlZwl
z4P5!*hv^AJ^uRjVk>1Pp-BlMEgT$4tLj3x)3oy@zF?I+Q?q=!$+)k#c$3sy1Ve>s7
zlg3~i!``;zNxTeMB|yp+f24N$J3G6*LWXD8lF|Qu;hrwZvo=_)x!%&jKu0mBY$DK$
zE?T$0XD6qcs(AHunsl@6)@C>1*6;cIzE|iQTQ1>+XvoY%rOG@|qIa+ofrSZnQ+h^r
zc)Uj~nL<LvSOn}wxK3MFZEsn>X7!EGmhR2_tz%s>pd_h47>oc+hHus<>_;+3D})Ud
zW15~@pG;f3K54(%^$FEP{IGm|;sIsWN2&<G*7ZqbGID*$wcL%oQ^`*h={qUe`JqlW
z7rVeT(w}Ac^FhM-e_tn~@3djly*xq~g4r%cYJu9zkE6RLz_?wnWsG}~mn*$6W$E<F
zJqXM7SrDIlJlFaPZvw-P9}hJ{o<9yP<0HwW73jjW8FJs1%AePoz_kEN1ywosrnmTv
zoK$-DpM}|fZtTK8x3kM5bLiPlNXe(qKgY>@t}VS+?#bt2R9}QW@n>u8J!u<t_8@Pz
zC*h5klM?1B#XY*8+jobvmAf;p7UPSs7)RmHFB277?r3)uY3jtZiTM=JJXnoHCnbzh
zxBc+v#k1|*_VS~)Dy1b|w6tDxBB7f#QS!^M^nZ*{@{JhrZGe=Si>B9hZQTMfH4l`f
z?2L%Z<k_o<#~;I*{K*iHKV?W`cE+&=K1V?QgcJPJMg-(fVPv}zQQvU4+Q;5{!EH?1
zdAD*~(b|pG^d%Y%R_@7A5<cLKC^fz0r>&pp^$=8?F|?lr8i<M3hIXCqxEi3I{?FNo
zd_x*xJB^fOSz{94kcQY!VKt<-34DWkTMyaT)umb@s}=$^;Xh0+v|0`X?%GdLlph^g
z6I~>yP1Vmk7V@aPYIG_Ubblm8Fy<!j6~aB9P)}x|xew1ZFG+-<I!bJ$-G+b{V<*b8
zpi*j?xoX!YHAj2-*x)Sx6HLCq1ke4Gs_8#+!qNCy&a0L>#V>je|Mx<%k1@lN56{Zx
zRR8^w*I4Us@+Movojr`ABRm<`ClfMo!3taIEq6x^C<?a`lLI#fuxo`8b;97t9yaXp
zn5%fXOgxX+>Z+?R1)uKTHxzrD2N4m2Rr8gC84q}0k_}OdBE6-D^`VoEkY1esZe*mH
z&!+FIe-a^S+52F4qn5!Nj_pN_gG1i<7`N&Vf5;2Nz>NCUb0{{-&xa@+^<TpVV^EW`
z8vNMJ*u=bZox$DtP4+q2xCN6;cIHQS^yAX4zUv09Fueah886?kL%Y|M5cS(*#Y_4z
zV;F(oGqw?Xo`i-#UcO|}8gd|zYCl%~{gq6jR|K=%N7=Xoj&l`))*4el(Lo4oj=Zh-
zXj9qK>3Hgh|JMIFK0dZ3K)D7G);s?Al5dtBQ{r)Hpu9kJg*fl1B0_`WfhdS0*#63r
z4;+6Z?jl@cI+Q%0l3XZxyJW9nZ}qyB!}ljhPGx<fFI!ny&2Uzq&!;m5>5#sGt%w;L
z#h<6ook@9Cp*;ZnL1!^6x9O@4*IH0noyd<uaixqi-?PWcU(2(Lp<9g3@HlAP&;c|_
z<n3L6{I+TzcS~biDj7vbwuYkN*>bC=%vP~V(rgv2whV4BSfn<?<dQ|vvRb1e$`k^P
z9bI%aa#zX(z56M*{9l880sj6u{Jv<aZ|g}pmY6l3-^-<^(!Pdh*XEOR9;A@0)5s0Q
z!tpvy;MWo#3-PJCfz-vP^qRcpKYw0C05!`Qu8DT#Q1bGLrXq{H6#$2@6<gAS`lPy2
zUsa##tLdDhT&!HP8NFjcDrh~byjI+NHk@m$Aw7&wOO&Q1V%l3ZX<92h`QO!S%I+%Q
z|EE1@I%O=}Qyc<%m4|}~gv~IAN<|8=umH|RGzrJcFkfZIVqk!R91a5?&fs9v5mb!b
z3wYUkk<@@cC(%zjc9d>vx=X_iIb<U_5@GwgXD_kpSO?*kVfdB8OqI^$6Jq|F7=9Bm
zd`sQM!5+<v$ql<55GzJ|XcKG<>^?8IUFoLQaym@Wl}Kbkg5^gBvZm0b4pek4^&7UV
z%hb;VznMFPnAhjBdTXGJPP)AU-?~ZY<E3JS7%QjZ9G0c5R$Awc5`<Xs7w~U{mHym@
zLg2kn_2rW^u-hzbo_gxbr}j&@vqCBW;Rn!qf3WPnjz|(xq{p<?$KxrmIi|vWd;==W
zC8a_R)ES>+;_0lh_AB*W<L_5SIIiRs+6@$5Oy!5F6H8^y!HT)2dzMRzwMp|?Icdfa
zpecVE<bdaKpO0D;O9Nbbcg3<5+IW*xkgnUMLVSp>O<WQ$Z(&Tk3xN0ZT7dM8eVu}U
z$g=avTQjL29!nm!h=TEHOH7&`l6u|7Z(1ef+pKXI=B#QQZ(X%S58vD?_Ne+>UCo{Y
z5jmfZF?>d^I7B|}`Q!yfOKRrT`FS-mm6o`i*1BHYAKU-FVS@<={RnnLelG#bI;9vO
z5AFrZ`2ieG=;_4_v@J`(vDZ`tjlA=}CKx)-`!Yz-R|IGy@8Mvqi&6R9>!P?R2vTRO
ze_wWvf*!ag-M)ww79{K7ZD(6nB~@-9CYi%%LN`y)8;j*4_hnh&)ABs!AF+uXhw_}|
zx6v`-??E`KMW{;vk^tBOgKym>V%8Pl<T#~3Un-gui9eUXR6=VD(id2WB63{<l7-?q
z_C742p-Rj41V~gbN4HX47VE?iCm?J^Jq6x!4qhDd2p3#6`VLA`{_8q%S^9UnkQyIP
z(wJ1A5E6V}%}=MJj>S16+@zD71i>~ZyiGDXuO<z2=I#s6AzU2QLqoK__aT7JrjzL$
z!T=?`8Tz4n;|gOLhFw#TcmAcEso+&at}wDpc}Dqsje?~;+Ma#@54gQV0^I45)i{0q
z22(u|r0rst4J%zi1`ZF1HQNY;Ke0)sj`pUkNVN^C8cWXr>{<g-?VjaF+Ee{?t&L+-
z!^W7Yer4cueo>xsROa?vw|u1fvF&t8*0Y5|jj_lIXUS2bFfz8>K=4caP29E(aK;ky
z$#r-~X7rf1=AO1oF9!No-v4A)fx{8tlro`kNCm75I-ee0gHUmT-fG3w_Ruk+BlJ=t
zpAQNcC?U>|z>KNzZm_yKs#D0zY+77SXYY&Z__!X{Zkpq3I@_EAxb4;OcTku=c(wqN
z;U>l3O;b3zd_^tr{Fu@y3cVJxx~5EW63fa<0519$?@%$b_vdX^9Yge5cJt-fiRElo
zUM~erdjkLcD6sroTNq?PE7TGC7B<1zOpIjQ;+KeF*<~T@&G$iNXj$UAz<(g3JuD6k
zlw^9H4-J_KxuSaBT?)xv1{HXpZWHe5Q6e6~@<<Qa)nqubPw0c?L5KlR6NZRT-{H@9
zl6krvEbUPnP*;k6*>ex@UhxhOpaLEH`Y_{3mmvkSj3~F&ipxn<T5o8j=`F`AWXBvN
z7Dy+EIxoK_G+i9~OOs@&nM-t!9T}^}Ri1B;DDK_%#GSxx-1Bop+ie6Ws@oex6v}f4
zc#T^gt_~ol94!vjtQ>8NSOun<sDup)*oQbjt9p&1+jYbVp(8l<7#qRSfTZ-@Zt*{f
zTH07s#PmXlH5=uVTv2BgogOH6ECP30PmubSVR3zw!Lth#JL24xshLjjr($NnLPfe{
zw&J2;T}dP|Wn9LKYvO_$rF@|_Ht=A6m3esrD<^DG{M?6Dvc54_1W32>P7L6st#{!g
z$7=beJ9l7E|GMe^b<_Rpru&EAbjJ`-ZS&jC2cA}8sM~M4+uU)R-9_bxlfQcHDty2J
z*iZJp`fIOnZ;+pR5Zv!)3M}`t@rPnb7X|E=OaKob70d1`tUaKA1I1Lc0y!Uys-vC#
z@j`K9L3J1m$6ja{v_`NOiqV^t27l4`s5NdZkPR;)gmDNWSSXrvHbM~>JJ_Mv4dDg%
ze!Wdm92{YQ1@pHm5#>I3zs|+>TrST>!9i3XPG=Cg$Tj9<Da8-dInM+(y$3y=y7@rV
zhI)ip({CLsZk*MFE4w;#Pe<2X*x=4i_h2uv$Ijp6i`()!s=K=TPiJMU9^gub*}qDX
zLh$U(cf5B2kFN>{Q;BZNEmyJ14Zw{cZxkHB2+J!7tO1Dg4$$viao_#n(DWT*`#ad|
zcM#=cT!DkNJA>D(Z6)XEt8GCi9oF^QJ-!i{P2^BGY7bQaFU8kgQ^4Gx<4~hf12yh%
z9U_pspFIpcAwh2M-tD}@<YID0F?xvGpm$d=&0UY&OvO6f@-BV2S6qSa<=#E|+`>8{
zW$BnxYX}E${%Vyp>7e0vAi>#WeBD(L<h<7ty0UR*nWJc37l;G>D-mzE<u;APUrq2=
z-i&C87v6Q`KdS27fhmXYg&RS_qXwqNgtWkeS%`A;ubosb*~XSRDlQZ(5@5=exnKaZ
z`UCTt`aZ>EA9Ny_IUa`yxIQU^zd2LGWo1u{Vt6f}1`$&9DU}X_u9q)$NFovEl>jLe
zeM7Dcg;D@g#H7+ii;VP+k&%Yx%-`dOFgk7EuE+H_<~uN^w*QsxR{LVxA%3JJ*#P?o
z36xv=^r;?$$}JHtlNJCL@+U_OpF-ef!@{L0Br&W#;Rc}r{P2d^ci@*X)iw3pk4be|
z&~wKV8+=zH9|#^Y@Smt>MNRQCkAtph=L)Ns(uXA0ePB=BB}?)QV|uSx4-tiXwPU;d
zrqSnG68ofQT}whtL!e;NPq2S%QN;Pz-nDhOj)Mc5Snm2g9x?HfmWagrItKyj2fC3o
zqh*VhSYLbUL)Zb-|N6XgQ<mRw7-W~CxWQtAvSgoNmI1h@Vo^exu&f&#jEsN8+DMc$
zK)0sd>WYbNyR%l@m?!09Q^#4gD_ARE%;%rVnw#AMa#q`)iS>1PPO5Se!x%&7Jh60O
zc^X@3rn+GJjT~<Dm1wv9$V6IZvAETOZf*pgwWL?Sl<D?Az)l>FNhpBz-0Il@Y-E)!
zS)2G(zPG-?woj0iFGWtItx)pMwpQSasijZ^75QQxo};aTPROMtw;DQSjmX!C5`XDV
zK7p+_8KoF=6teq%GONm7NJ$<U@I`6CtjQ$|=o9cd%o%E~3%_L+E^+Q=d{7pE^ss%b
z@nsO<hksJEo9c9Q=jyUmOU6nWzi>9uSF+*i9O!)kLlmmYqAowh2rEstYR)reF*8@@
zS+>=980?Q_Kv{dyLp2c9L<Z5)$e$jE9-ZVs#TH$R%DFsp-Ih!y-{Q-3GM#K&;m4Fl
zz|S;Fdg32y+VJV`{=h9%E);z5#wk$L$jK7YZa^gWB&$-rd%QBzOfp=6nE?raqy)2X
z01t7HpY)6Jx0o}$jX(92t+`4xbGs~5DYF=!1w8=KcFU3kasv`CFKF@WQHVMLE;|-c
zPKtM&p6B{qQ8o+-YM~kfZAjlCsCPbivQMBx(gD4y3+{G10>QyuO*?m`qDi~-&yD;~
zl;h5arv*r>Hr~l#MOk&cK${?MLgzWd7A_VOqJ4pLuo(vELvM^W`N-c0TxOmJ1&77P
z#|Zwtuo)5VM98$-#97k*0ptBJ&aQi?){Gx+%j5<s16)no3+-ZDld%=b{8Ow)x8qb8
zY;CS^=E|}vm*Z_Wh>jJtP!%483jXAHiSjPVSsxfdCM{3@{GxHs^xdvX=@p5GlRT;3
z)(i5Ek-;V?$aVw9U<k$Y2jN3po+OM5TY`^igVwtary*lStFqf1gOTdB4VCTeb>rxP
z%LI#SGZlx$+;#j1eRUMvu^;qzo?tz3V})>^`sp926~qp|n9bljD>n@JXj3zzemSa}
zXpT+kC)XV>h5k|MV*~l)G|1Tn5*>2BpWA7Xm%`dikDOiDPoYU(2Kb|O$<f{AudBcN
z#n?s`8E8_nS-`jxtB;aA$TrKNZBh6%>Z&_0G04g*r`MO%!C~xXIX5jsqw6cHrEWd)
zZc_d}{1m5N8<(_fCtnb4rDV3V*>2&8Z?#RlKdA(7Bd&9^9fX^jAC2LK=oyMe=Sr8v
zdOEE+{p%kw#_n3EWt7-;wP2TQgNr{rTm!LI31_o6l((D8AS0;$KEbWxAI2Y#c=xrd
zp?PvIL6tlMt871(v8b8+ly+xH)s=cs+Ym9<Z%)sFH!%_i>&Dh6OR=jyXSvAKtTG&9
zkozOZReF?@g9IA>`kat~1STq(Ox<e?lXv!)i!HRAYK0hW@kzYNV9_|4;$hvqB8?Vo
z|Au~8B(#MgJ$0*IHFY_m)T)qY5@nlDJz~Kx>eK)Aox9j)lG@OJ4IkFcb0{$us`0@1
zS%IyHPLp$0yI)&ZTgBhe-8%7!ejI!8#%N!SGb-YneE@tQFDI%NoV`m*N}TigRcb|*
zMtBO5t2vv|SN=%Mytg!eIIZWwvt8>ua8qy@DB8|L`q8Qp(JPjOy9sc5W_OA|q+6H|
zgM-K}8WhU6JIJ96#VdJVpNC!G5GGUm=@V#TSUs}KGJL<3>J!ZC>uhBxk?NoKlyQ;h
zV<>fxC?95ARdg}4>AWP5@tyyos*q0`9mXfF&WDAeoZKxTV-hvPCk)7PHg!i*1!TeB
zO9HYyZi@=BhFAv!M=Wj?wMFOy5s35YB@f)u2nQ5%AKH?iUCA|+0QK-i3Dr=PWX3@&
z9$2|=J^5>XrPf#(9<{7BZ3w~XVc3geX$*vV^0Vst=TFr2&%Hd^-y}51<E61dK5B~z
zf*uQ|Z{}Tc9lwHiWjX$8B^~xd3#d7bvbN`VH(=XmK9PdGcNCjGOOntC0&$6A<P@=_
z2mzU7+~R?ow$3Er)<<HN$wS-q5gFGGr_lputsDeaW!>`~@s3E!lxA+`BSQ3d;rkuS
zYB6S($aE6`wcV5reZ5c;YXn5d1)0pO^4@KNGI(Y(vYEj-F<%~;>$>AXr*rcMhGWP7
zeco(SI=Ss?HgnIvZ`~^&#@5Jdcml#6coU!2sF^sQm5x&!RtA4ob5@@wbVJ?H?X*c!
z@m$XGax{7kYhR6CJ7^$=*feUweERnF*Dt`J8~)`~kZb28M*~0=`QRp-F0JQyk){g2
zPN%c_Z|<m-;}F5NxFnX!*TIaq^1E0pim%HVF|QOSK`aly!+{kl2Po=ADc9iz@U4;@
zv7EVWJ}GCTF(e7(uWl%AdrCG-4liWan^!AAONNm5OWBXf_<^=e4UhF?Kuc{W-89@N
zzQ#5kS2=TAWb%u_QuAucD#8`y_X(%Qndk4`F92}nYU%;E*i`T@f`UH?SoYTHs#IT)
zdag%#=K!tFAr|m_K0WJUEE{F{4?PD|@W&o%xdBseDxwXhv{Sz6S2S0DV`6o614ZS;
zID(>&he50_j10fu3*W7w8IR{u(uv#QTv>oJiYpCII`>1rwnOuy@MAX>tg-10tuHPt
zFEX`Xq;{6>_Ib&f8sYDrDD}=D;hXEn<}t*}>T$7C4C36ArcEY%f=>s9HwNLVtNIiE
z_dA27qRoWOZ@X<+a!1bqs7Mvwkg|O*&SDFMi&On(0|P+(glHxDxO`LkXNQL=kFiX3
zUg)X(K}~*=CP$ejg7j1WSJclq(}?zV%Ku6)CeFZ;bivEk{id3LLE6_*SnlZbr<Jx2
zw98lf?xoqU{NC7X%&LkT<ZFE_)X>+%1Do2G{S83kR!sSNb+5mRGfMgDh}H~K#x}(z
ztER3|CO4XLVm?R!4Elld^YJz0@*AOHDU0ePK1Ns|OjQ-H7ceGryDvq`>G=z{$rcCh
z81N2~;Hv*y5QLixj=UD6a^GLm#km<=kKh6zflOGu?wFaR#lsFjTHvoe_^1Oveg!6U
zkv~9q8$%{Rw^ev}%z@#%`eAYnYuvo_!P%jdMu91u@h8k$=gzM9a^PZ~g0DVjRe^p8
z*=&1?y!z{?r*29;H2)-Pp%bkDT5<*tOo&A_Lmf#m%*21a956E?9~_fM9r`ab9br)?
z18(ipKk)kFeD|TkJQ<14vE3hsKWFLqLZSNeC>r%ZTW|P79TG>%3s_F9PYUe{{RsVd
zy4{|E#>XKK?lljx9p22q(<e9sF%)ND9<_|ooZ42PZ6iI(j&u=uiY~H(eMDknd6%-q
zKpw~s5-da}7vphsx1c*(TjAGJJl_NaBI81Xy$qFrHv$;X`bO@@8VtNWZv+jralg!6
z`wn&MXq<|S3v8`Ae1`ONySDAmQQPaDKB1NlbyLRfv}~AS%s2<DW)~y8c0I+Y89pi8
zia%o2*q!Xj2rP3@-{l@lWdZjvCFY%z|FWp*n~S4usJ2!R2#WrYi~VqSfn5||^Ob<V
z;`f+)Z2vHwot0yGYm;yTs;bCq=!*jX>2n$6rNVzN`QMC3R6RKcL#Nl$)-f(;<exvQ
zj^S$>f(&fcsT=ei;Ck-Y<6@f{``D<#Q<%nM8eF$FxCBR6?&2O#A?oX%|NGK`2~fHq
ziq==32X!r=PNPu-P^Sr~>%DBcbw9SNkYU|-a?Rf^2Qu_~#ii(L1~LZsN{e(dSP*Wc
z#nPk@K}xWe<B+2PpU7{BdEf!Zh0c2V>?}>?z$o_w7uvxoFXq#&jOxm(TK=!lOa*yF
zTMc-Zx0MMym<KKFUrQzfwH=>c!zCi`SVLjD^@7@g<bLAFl+pGqvT>wukY(dI=L=zT
zJ%6o@fg~}wms*0n$6q!Gpf6X><02JuLaOhW81F3!rR=j6G6BPpy1zj(kDpJ~=h(a?
zb>}Sf(CHG;1RO#3ifCymhmZ~F0oi)ih03eD9q$-)7J=1r`c&qx(wl8nAF9c8G}`Ls
zlnCj>*BPK0U$@($K4_2S?DMWIiJP42Y=b(lg&AC-e{5~NMEiN$zJSf#Oxd|<Pt?O&
zb6ORKKAY`;WXyq9E)_7hC_j~iIRI)EF1JMbSLFI}(E(Nf#isC-bu{8izYR^*YggL2
z*3~od{k=x2)c$!q3iw7Ibyr*B_2!?{;`tWIuw%8+n_)Swa!R8H3KEsk4{ldq&VGc8
zp%;Y{-b8mKe&FsfKR<qhelWnDjmx8Ij0)RJ_O9zem1^_?3qmv`RBn>rI7BbOH6VAI
z5I>=2XG#J}2K}xw@N&C>mI&<r#iTi{kLR5m?iZU40Q|zZeq$~+%=!kvlHUCLZK2pj
zECeRb+K0Kjb@X!P-WfQA)w5TeHw9zylf&9Ck8wyLeIC_uYqPzZpiWr$mHme4u-|2=
zyM|xS<L<c^8Ub8u*ygbheT4;kCM1AErg~%pX|aC5Z91<mzmFXt{Kx7D@L`YSoWpR5
z?5%589c+YgX5UU{O1of|m*%FdCTJ=AodC;AqTWZG7>|B^<yXb}BT4LMEZoPs2MLzo
z=cTOvQ+KJIOlQ}0XocISUpZcX$n`&(;dfu(YcbQ1HQR%9H8UZ$mNUo9EwUOtP;jvi
zrlEOPY<Oz?g;fA~XKY+Yq?&OitwV*@!TrnMcc1}*wR~v;!zfmfoOxqN$|D-Trp{=q
zk&5amn{h*i7AS!L*v3%{BdQQeVeJDvA^64AD+DW>^Km__<Zv0+u0`U~wPeM7E!@F=
zx^jA5QTE#j#HFhP+L;^0QdEB~JV_1FMb=tRA<1>~EsU^|=zQ+9rmF_m$YUS;5dUYe
zlt4$Z^m$ET2EBCYBK9HBx{lsv<xH?^bMHvhGcZU+jYJchsNA^XXPnv)h#vo~Ex&$j
zDiH)~kBA%5s_MGm*OTwdD+tC`byJg~pmrn4BV4~oBDU1-p@U`^RUBN+#P?d*Mt=Bl
zfVIqKt2Nt8rMK$vQ=jg?nj#QP_g}r-M;G;Y^cLn5uQI_9aONecMknBs>_%qsrjp%P
z`A<Th`k0|D!-~5|)Q^`HY7#%x)g`b~&Gf7S(IoVYffxyQ8=wGUb#ekcuJ^6;bOJ75
zoT+4e#koCvn88waX1LA36B(p2f>e&b-HpT_mOy)Xd<?w9%SP4!yIn=FGFO4$V$-ny
z1&Z&iQw}VuD3M_o<?bdtpkMdyDb&MlAqMg$xFM&mHdrs>-rG5i5V|X_)`#nrpHWI-
zow)D(`}u4-NA0k3o^hCTT%TOblo1<IX;omIs7dzIeCHo0ov!sWf#8L3+h3NmQ32r^
z9G7rZk8AMM{!q=_v>g@+uTkJdAfZ@66<$xEQsQmGHC{o^EkL<Dna>$1k{i#D4Ml4P
z8!L#M!W%fA4of;(1!2XooD@|Ju`$8suAGR&>8vQhrmLFaz&{Ar0`EiUwPm-|n}hnp
za5==KXu9`7V<cUEY7-Sz(rlmRZQa{K9&c($&oIQyIJi~EhX9_C@%gfdbHDf=Vt#_{
z>kOiTq8QP=?MPZ&l0v!~mKX4Oj!a&Ytco&Hh_)P-8w0YAE`ZMfCwd%76D=-K){bQb
zEcwG(gu^8HuVL>vzZv~_#3xhJqt(nqlmO3eIRa$9pr4*SS0C%S`q-|68ROyutzIGt
zrMl-k<_(QO-Ce$ksL$i$k&m}RDy{5e-#*}%nQ4LqATskDpG}+jH~)E2!Zkv_emb2(
zLZgWz_&;2n^$L!IG=4QMhZW@JYLJt7G8s8$;_K`Gs35dMeKG;lF%YztlVxU}XRwTB
z5E}_AjzKg#|AAi-%d(A)lRR2~t|rxt!idQI>DUo4!9)~=YosLk3s&Fl!v%aojoc|>
zHn@+MVCHiPFKl;!(jtgoKn6j?01XhnM1L;9($4{fqmDJn&<Mg5oPgYuMhDFqvZIq_
zQ|!}a>@LT9*sNFd`+dBf4+Q)VQw$r#-tyTYKSiy8TMl$0cRkOl<{WPyA7rH&R+Dm8
zPXQ`Ie(=c_hTL3TA3+mzS0(yJmPIcQ)|X0e*H{-xn`f2=0esdni8Y1<C*yk@7XB3t
z4I6ykFP>5aB-DJk)8hevjV_Lyg7ES&b7#*HU3aaWc^IrhPKHQ)9{+veZ%xK+C`9-g
z2HdB_nqdGN{EKacp(u)WOD1mn2Mb~%WyEay)}+?N)HU(e$#8q2cO#97*kX74yrs*(
zEPnYNtjaIH<6D$+G|;rdmR@o!Ww_Tc2>LmM{g~BmB;#ugeK%sb1da{99aO*6{o+kk
z6{qw0c{8|w-_i5od$>lA$J0xP2WR*H(_M2ohx>o}V&}_0{b~0;0NO^LcH2YQcH`Sd
zpXO#8!cuQL+^f$n&bDP6F#5ThgM09mwPS{Lr1|fk|8V%`)sv^sfA}-xzpS=*KiA%#
z^cL&!0T=cgqu3AY24gvMxPA8-H-O%W?hyb{&g#i<d@-u%eMrf-qutTLgWYo)J>@I3
z-rKeIlyA;~`qQ(DPTsbu0uRnXF_R&}pY-_jyRYH-2PCkFR$Kr_-FDqxmBfH17*%U!
z6|>V1;!QZzGa@uIrZgSDit^T>cUvF>d~iE)%dl4WaY^CwhkreY;}T?MJs}?a2kffD
zP-+@1P`|FOr;c=LG;!!zs>mdS){W!wFuKaLfXEC1K^RVRF+8QK;1YSdEyrY&!3$i-
z#iVk*Hs$Qv(h@;n3^U6!|H=#oER)o3;?MM<&z#IYJ+uf-7QG_;bf{v)c77$~Ejg^}
zF|G7{*@LdweNo0;fT;?-z&wC@6!ylCEExGZW&<*-!Y$&OU|0ugR$UFNYScjE9|RT}
z+(-k*R{I#G5psmi@A}deD59cHM;Pq)w3`_|8X?2gT_4vK+BgLgfm|yYIF*7hFhOSQ
zigV=b_%V&xDa#JtoVz=U-pG3=Of_tee7nm);55)*@x+#hnD|r(;OyRp#oSYkP*l^7
zEVhmH#0Z_vf&?f4okgM~PTHZ6UQsE`a$jL|b;VD2Qa-PzFk*LSXUFX7Q+UPg4q$h^
z&;@uXX!xf78%c$Li-nJ9aDG<4$LBC;-rWU=$UEXk9KHSe9(ve4fES$I^s$QuY}VUV
z4ZNizD1=~`t^)ISOh)6150&fr5)0H~6h43S2uA$vs{&o?c-iBlPj4=7%by)rxc|B-
zhT0aI$lATnZN1<5peNMVOuS`H@u2ua@fmU__-ZaWl#4%^{o*@X9^&B2F`ZoIHj8R>
zQZ-_Wh>Tj;wKvnV%JGsI0jp{%4*Ri<;S!E6=J2`)BxpER2xbTwLs*cpd*oCz4+l`@
z5~7Thwr}DKf#a9K5|>p@<_waOxA<!zT0A)ckCFQxNMUYGRn_uJs(JydMgboQC*9U8
zA8xnT9&<TYpQqjAfd#DB<kqo>*AxH=Hfnk?Bm8&MVUH$r+)#t0p4s6}=xO}+U%Tye
zq4jWt#w{5_^7m=l%nFv?Lf9@I3-a2C(vH=2c!KZ4A)@?l4{ZGbt3HEFCzw`*ZV|_5
zKwKJ#7e%ijVaeT|)?<2Jau7|QB}oe#v?Q4$V4HHea>T?tDwUmtLYiX!c5Az49eUc~
z4C0G0x~+IO_+!gG7+qGXjr*8wBb?)}UcF*(Agg@SJU>PO=iy+6sd}<Z1U`TY3mwS_
zIVcA3Rn)vFe!X`O699qHsPvOdl*2p<=Aps27(V6P=KE8GmmE4|2{V;BIcmN9pzgU<
zxvOvac>Va<G^-%o=Z6Yq@^FK8L{9KVu8`z$)a@p-jg?X1T4-CP&}tFqklJ%&|4LD;
z;@-VqGtyJhhTLlUO4w?dlmPjW^4LV<*jZJ+x8l_drug=YZo(Uxj`9duUP;Qc3^ObF
z$333Rr&EP1B^tmZ*9w;&Ji6&4Zbms8!7nA>*Yae~mN8C|Y&aG<vzWLieI>X9pV!Bo
zrJX1)BPHCqBkCSYmS6`YRF5xs!+TN_t#k$|S6$>hgGFj@T?^7x2@bt}U2cMP92UIh
zfJD~iU{<0HhKP?ls-pEgb6?=HHYRs?EE>ldIw;+OorQ)|^eu6l0I@v!J3CrdA%R_8
z!5_bHXGTc^?iQV`EqAI&OQ6G9Yc&A+l!iw4X=FVH+}&H16QrD>&>Lj_d4r!%Xj~%^
z5M#5NRqZHY`=+gyoARt|?K<7q45-~AC6fdh1M4}a`C<Z+)9nwg(Z|}YVA6!xZjm*J
z<dk#?8T;ntWC&GAcR@)Kyb;U2bviS$6lkHRPmeBm0^#Z~6-o?B(DeGr{C`)o>0)UR
zsZVElvS;ITllI7!eZY*GXKk;C58b`E88S`WtnDT7!Ro=)d=t|xIKlM^2J!|s2QPRu
z<{zepm>mZGL|}a7Z7SraVI64not<tj@u0wXWMMqYz;JX&!^lLI6cZ17rH?CRup)*Z
zJ8sc-g<wK7z%yh(9ku*IPm{+^W*-D3UWGgPW%gqx6OPa}b;sP;oW~&`AUk<-XPBm!
z=kqwUkI_DFk{?|Vn?(%RXU~gb5YM?sbq=JqK}Tt$7Rk%g^~=o9`+gCc7;&dxE?wiE
zGM8dTj9@>am!#ernB8<-^)JiWr1K8tL{0zqH)J<5TF_$k1@@r${Y{wgB?dm?i2K6&
zxQp=O9Qd=}`;}TSr%~XNv3wdv(toGT6x9+yVGEO;TQM9hzbzFy?8Q~_yHZ}zZ_sk=
z=EAd@YD@NtV@qhP@N%dYx~<S+edC{aevw?Au9W_(mv5fGeg2nk4xj(<?eia=zx{bV
z^S5bwQubO-6J?7uSPhm$Xn+I`Lq7fm(wHD<CS4zC9)O2Iwx~umE10W{D8WgEG3Z=<
z4;l4(;12<T%lc@tG?`waRH`YjgKC>KZbn0hp}5ElNs{7zzT+YP1Omxs$^p=M#0VoE
zHDK&6WS<?L7AKC~g}B)GhTYvM8ux~9r=XZl%#crJ<@ssfp~!nM)|+A0+H!nZUN<Zh
z1Qrx*=O1WUnkE|RnoZF<!9qu!A6U%O`^QF6Z2d5mz<t3EJV5krEhL~HNXAiALaMZ_
zTmUz{0wG_^;2z_}B?FH}{h*leH;f}Js)Ep&p2;1nDv-)k^-P*N$qMB^bb{-@jtrJD
zjnk8R?PI3;4%JtDPxL|}3iY;C4eXm29=aHIS^ENcftT0KixoP_VL5nW)|Aw$+*>wS
zE8g{SeKJ>qH#|#|ii`*-c@|1EMc)873}F2vXyD2Gs~40BHRQs%#2hzA?k2q^BzKRW
z5{06P$pPLq%6~H8Sc}ndYH>u*b_v71g+toPM%qT`Y<`%CzWBR|@ogSWk>#&>8bt=f
z$;&;3<LhSN1PMTNVazwaEfQ1F6^3}I*Uk?Vijq;TV}F`4iWZ?$)8<Oy8PpCXr=ZyT
zj=}L%E|#Ex^{|SZCgJ|K9~Q<AyTCczi@q*epRM>~ujO6p{%n7ds)28AGOTUeM3zDf
z4j7mC)dY*!an;MPwta%oZ8H<3$L2;Bg0ZxMo8BkeJhGpIE8MoC>nUT>N5hN*MYdZF
zTKB?L@)R#iiAUX*YxNUEO=x$bdaJf%4y(&_I`O62z!_vcmk#xm@)8CVO3T}NCw*Rp
zituoh*YvKwIG#?=&cK*BV_+P#zQIOGy$N-&f)+VNp2EFmo3v#Nn&lu74@UJFC9lj7
z%3=+^nq!OTkPR88!CcK=rf6i7%6r#%?(RkYC!V{|Qqar+PXwcDibi!iEh5$5BT=co
zHol!s=7Bw_+`I7uE*pH89o&iBp~7R9m*#$WGkw0(^Kg-fd?)_QIFD{@;r`>i9ye=P
z^Z%ob@7J>&{}krpd6IsNM^-s&--^cH!l+tW=4`>o)05qu-^>F1H@uL<X&EQ*El62J
z+^FO(SlIc1D9UDss1N_f-A$7Uk4fi)qkvuCPPEJctZVLY;4E@suAA@6UqP}%iZ!bs
zsm@CBQlmn!P;3J(?YqWnTOdF(yELAwdvP_LK)Po<qew~PKE46drbvD6YwHka%ulM7
zBVm<?qH7b287KxxzM`r;5zAu5^Kf6?NIFp*S~UTde{OprBL$+T8Gr+PSjbs8@9z2U
zFtpRYP9R_l=bk^a=6A6cgs*ZCwzm_9a!*91j@f*;=Dq%Dsq4e^q(t*&$JHeE;{W|^
z&I7Z=Yf9`;L@+xoP7IL^a%8IRZ|wwQd^>zMVQGqzzJeEoz{9~+{t6}X=4g4*yesc^
znIQ{jjBNp<^H|xV$Z@53ypOP}s2eKlMq%2_8D_f!lH^lxle@|q#vNDxL&xfsC!L}L
z21bxxqqP&7Y08JY?n5xVu1_ZQaXl;psbFxDB9YY#!e{8!2x~4H_cakgPaW4$G$7zy
zqDFK#(`W1Y7?L6(CYGw_0danXP-SvQ5Zlw!WAHWssAo`Pd-PCKmLgh7{mYS{FF+>*
z{<RNwTI3q4fwgSO_WVHiTzQh1jw8I`<74qCXsRrV`F=lS3}impZsh`{0NGg&iGao{
zkHd`Ng}_VpSPC-R+-94Re;@}+zix;TbvgVaAIPd(CEdkEQHm>y+B_OyzRI@HuK!1y
zQQX25BA53&Vx{}=NS?x=$icaf;mX-#eLp}u(1a#Dwe&%!0shUs{DEbisoc_xwb@LA
zA+nOlBKURZBk?>!N<e=POjM?SqzpwzBgRhyZK$zCreYexC*QCw6h~IA-nP06C983u
z(24%EY>Ia~khB-{ZSF<$PQiSKrgby6*(y2{M|1y%eT9hkbB@I9A%kNK2_S)#*5F4}
zHJE;~0*g9#woXnecZZMAw`n}RtY)I4Beha-<k-6jDhT?~ylGM(CzjO*)d`;n1=kwS
zP&t^ggRyVCP~M~fvD7}+ycWF&==-?66k=@+mNnkX1t(cY*0rYH&aKUHvcXMQ)tD3O
z|1*qq@-{0{@)gk*#A;HjHF#_iD-#p?h^<z3Q<Iz2JSEy!+3^gxxF%fh_jJug!Vsw`
zXp5Rmw*X9ayD;_$0Y+q(lN<a!1LYHk%gNgd=o;zsQR|vPeQb`b)gh}QG2&gUp#;sm
z0VOc(zcio!2WmcTx@ivgqO+VsVr__oxKO&$_4IIor!gU_;eQ?%TRU4Sl-Q@%*nNzC
zH?!iaG_@ICljNH|?Rg8kNwsAEz%(ss7ewT%;_qbE8&nZ_*78FX8Y(50k@O$a=0Idm
z>NqvBb!BVCk`Z-5fG=YR*s&9ELnOsC-A}JvFz!-{56G(&GP)Ug{$|t@0(D8)8l#Bt
zufB|gUCLt3!FW0We(tS%jrKB;xWVfJ(kxK<M<ouw`R>V!Zx3HR?-g&K{0LEMo>eEa
z3jFW9uFdr@!Jyyu->N5&4x(4QdcKhk;~$_Xk0bNe%@dH72CYxeKdvDV3jF<)e@8xU
zo2iF}Zpr5rXSaYw1GOFe`^s$_dU@P7$D__j2uty`8|r8_JtuV_-e5`0kTz39@$^Ca
zt5MyYkIQS$@9KX?hv%Hek4jgbO8{}iW8s1{*rN^<>02Fxrj!j`{0B_7+ViI*d;>KQ
z4?-)3wYYyLQF5GBB^VV3w;K$YevEsf!-V4B_zFcd>2Mjx_Hz_!AOASWq`<g@AiUvx
zh93HKr%Fd5>jnN6%bdGZHz;=V33vQ^o!{yu9lY}?1U$hNi_|#i5QxcI9+EF35O?)K
zJs;wb-bmgC1?9W%G$e0+5bXXOt)bF;s?>z;4)*%g<5zY7kJj(L(YB4!aVAW-1rk7T
zTQy{WXx4a14%6crLhL{i1V`XG02WzIpdTFt6``<=vDU>k{mIoqO3d*pv88{OIG&gj
zq#>V;;iMb|x<;mj;vI3kf*DB{&_CTV$3Rb;;$(^ek|r2QK=~k_)Tl~e*TCt~xH^N@
zP;21B_duooi5uR<5eDy>OeXFO-v9F7z8nt!ZTQ6($DbeV992huI<EeWK+Axua!BT$
z0%<hv!@)nAUcoD52z1Y3Gr+vK|JmnX?(BZ{<!ATj)9Km8@U$7$m3suZj*ku0H`DP2
zLN#B(>Nw;L<V0#RvFZ5w1l7Ql7*yFqb0`J4*+3wJakeF5-@I_+KjqkYU}1e)fy*Sd
z0fLQ@0mtQe)3-yRJs|N7SyV$R1hT0nl%}mJ=LFm~e{wtrys9aw5%e`KXFxA_B$)0H
zp<JraD#hvavVdjNZ?9Q(=7uP7lHlsVsh^hTeu=>8)79a10tBrm5Vx`cSrQI08XhdP
zn|8_CN6hR7L!vx-?lwSgtVZYb74st7F~A0+^<&EIOv!(*WbuJU(y`$<r)Cf@`E`ho
zLV(m06L?rR+Ej;GGntdbxx&Xo52seXm*u^p&4d@h>_P?haTtRL(A1-<M{7w<%DGxh
zq^1t7u&k!F;LFdi&y@mB`Rwd;-olZ_FaYibny3gDv|?_B=GDlj(L!v6G?|1L@JCHc
zdBl{4kcR1u#HBdr+zdrnZ*bP7a3)1{d|bnU1L+kc1u^5>==fe&r9Hb0<j*7-Lrln?
z&wlX@1t0Z?lyfnF<mI9X$L^9c#7|XCy{HiHl&GXzv2Z|8&n`ME67BTS@kd+<Ufh4J
z_lZQb<V~;xpc=?gSUVz9HMGnc#TuoVbw?qHWgulNF{+dUk$xNsZ=$j>&ZMTKq>QT0
zR077i)TO+MQO%Ic@kr|V#FbIiAc9_KH(q2L+$3zeqMJnzXQy@GV_}vOHGbd$&1dBA
zo^r}08BMtNv|}*C@rBHwQX}DbRa?~v`lcu_Pl$_&!1RY9g9?Xhf9xJ6jyX}|Bc;6$
zDgd(G8Z|=hpRZI!_ge)(HnO~^SBHJf?bH2^uV7zAifS)o<Tc!{4}>x2FGg;Mok;E#
zzd!<73OaR<OCYn9g8>h|z$UvsdhxPZ8T9#BtQGN{LSiuBM{PBj0vk^x3^nzSOfNy}
zWl+G4#LL+|cF__D>_{w%_aQ$xU9ITF8I~Gj$kVqPUI<I4%j~ZSPb&}Hj_$E*+nv6U
z)6>d^t6hPVgEA{fH@MR)cK@_vA%55l;<bY4Ui<&%KtA}R2T1~1ZchiDPIb>LV^8MM
zlkSZOg_g9jnTR;`tb>JVS_!yM_sTzKU{C^8Bz-IXn1}jvTmMMvA4#woCi6cyj)(lz
z;8H+_4ugyG3XOVVhD>pDKw>3#U=yaG5bycCI>Wr6AfSI`KX+I&7Z9>12PaJpxoU|s
zYirV<hOjqapyW-Bv2EAJWo(j~V0^4=0@b?mdTjW0ZGzqKP*|+|6>p!XW|&^aZ>gz_
zHbz17#k;LNI6Vdgq_|450|`u!Tt8yeu-)q#+rCDo^O*^d&)>N786=%l$$3zqnVWlX
zOTG4U2lV_9&)u!G?S7t_`@9zr{5qNYhji{ow)+q1+>f%IA7$o##GM~Oa!oB@RLDv)
zD2wib?VN3+cAs9x5+lrF_l)^{f9a^JMTanTCv;XO*NZ<wB$WW2t8|sU|JS(UXux)C
z_X_MjTy-t?+!|y*zFE?-^{M^6f<>cUb6{ahufLtnT3cV!QUKj9<B<WKdore|2_V*!
zpB`S)0(s7d_zwh<mj=0xuejsOUg)Qr5nz!8gky(cr-29ONAS6*az4~eeFRxZ(fmQ_
z2;br>i~I8lVY5SF{7+iXBtNhix&kXKqt&&2Qeb{k7KLK89eX_Rxn^gS2V1yvS^}Nk
z-c^-?)0Xts%@5Q0OTP>qz~LS`Rx9b+9rZgXLd3*GS;5^<j%dvGOe{YSM2?5X)${7A
zYDjbse2<akcW$m|UOmXA=in`5P?TZ1wJLWPYI6v<v<Z)IE%2ePg|Bh!j-F7m&YRxL
znp)L-w}0GIWSV(^Xfl^PDtZOW#}}S|&pua#?1gtDlB~f}@%{bcLC+`V)8uSWtogbL
z?>^uQN?P<y-#aq)et7VOC&gY=r=f>|;p-!29_m7P%4PSGx|387Z2t*=YD+p%S)d^R
z=1kVMFs^c+X%>p~ThFqI|Dl_i;2$L&MSoBe6H1-u5XPLK`4ZBe6V~roQ9V2!A}X^*
z*s#?mZO=6UVz8AFnQ!4S-bx0YTruuGxrDqIaE+*8)Aa=#L4XvaxBalVOokZh^CWD8
z&Lyf765Y;KGQe=_x+~V-uDJ#Mw`fJ-?G#ut==4-|8ZYM~s2>1)<-pn2r^#TiQ~iy*
zTLb2QJ-s455gdEMd_&tdxiM};`9@ixnJVqIM#eVPyOE4TXDLUqfYMcp2~MaH2@^6J
z!s!z2U@jZ6A6P^|r0hjte;n_uMQ(e!>Tjp#IGl4;+5O7a{fX0ti>!|M2Wf`#$ZW&!
zB&E2Q$dL#yQC0@}#X>l;k?NQw?L*qK4%!5MK#NWj({@=ZY-<xh_@&60yRh{t_Cm?^
zKrfgoxE$EkQAMYNX#T2f#!2q=ynOK@&63?|i^MAxFtfE8ycuvb$Y@}3yxwK!(lQ@-
zGum@0hnDlRtE(T=v19Apg&W{ucxLzQ5#7Su+tCT+yD~4zP}eUW?EIAlnhw729R8`e
z5%YSY4WO-P^T}Lt&uWHgQ}N~!I>#L_xmziR<mwr5B<H{O&jdvj<;oLln2tiF5JD#>
zpY)|FUo|MWX=v8*TIs@B<|#i-%&;*yW9X^iCv{N#3<l=Sql>{l2KpWpTW9rXG_JNH
z7NkW6aPCL|ojfqM5wxb0*(-+i40I^7rHHN(nh;K!=_s_%;L#`rj#nB&c8&RE#kQb9
zl|skaRbWKAA~~aoi?8LUjBy7|kh=NM<k)ND_-Wh`SfB<*K5>KsuArdi4L00siqv;x
z1p1l+h3eaBClT{TQrb+KML7Js#BGPAw%m5HfwbQajRps^UvqHF>0pX4C$oA4zh5Go
zB0Cc%(qkH*h?3m6{5;&>TEHo&^3Xu<%XghI*`Xnx7~Eha?u)3IVskooJZSKE(1`7L
zw>t<4|MI{n;3%>>ItC^2aGFzwRc^`;6<<{Nb3U8CuY`3OGRqP+M7Rn6cW7D7U!dQO
zd)I{3>yO-T7|{Mf*8qZgFU2!7s{c|#^hkr4HMj*8@SS4_X$33HT78&RXbI6tCFb#C
zPp*n{_nZR6(P@8q>6v*pCUn03jZz==RC;5P09~I0jSMs$>EvR0cwtnGjBgthXQo<z
zwC5kcXj2*6*VE}3ObE8Y3I&zv^Qn7@)MuaphYc0G1hj+*W(=gt08>D$zh+?qRrkP&
z<`7|Ui-s*hKC|UJ#-|QUO?xB8W8`qDg5iT=SH;8wL<QU(IE>DGCe$533>79zzHd0+
z+6R)cbYQ~5`PwMEXBo+kUO2Mc<7|CR-oMhU?;9|<DLwZn)){2)h0r_$;c60p!*!!=
z+aR)$Z=<*oH9+$w8U&kf)fMQ?D9X<^8i4un%X_Rm0&}20xNCWg`Zb<Ri1`?I#_zNN
z3Zt@11@dBag@cud&ESf5e72)~722T@By0TQVL_2`YHcva>aMpRUs(9x3JKcwd2-!t
z0vUL-BbBY{q-o=sAYs8?OK*NQPgr6%_6sk35MdBm?8qkjt6$doi<N6l;u13lG-82l
z(+w`$6fQqJ&3<yR)X<)y-~k+yrq`fwQS@mmPy}LQw;bW1<BYhu#b<m=KOTI=p{YXl
z+EHP4D9vzIpSuf24J1pM4v+nL+XC{jm6_is^lxU?^%lO$*SBt|Ej*UCCaYtJ4r0Be
z)yC)q>v7?8D^?fdfNK6s;)E$DH!$90lfVm#@Z&gga7pn&#oQq{22)8o<ui_-)gm^c
zp=88Jd6~I(5$Xm3o&dfSkeAGhi3<+#X4^|dJHGa*$abVHzX7*%rsxTF#386zq=XVq
zB_M*&#((I#6#_|?P9p&Bt7&g>MZxf@?8{zp+BJgKPv8`elw}RCaB@fnH>1r0?WuM;
z?%vM-d2#pF4`&^PLDxHfzgXkgL|#<EOO)kdIDFq}dlZDUX&)|Dj)*X~v6kIFy-IH4
z9F-CT<H2-=-aGU-?}!s2hi!QHD2~`Z_ii29y~jokFxQoL0NU4}4}y1Wjxm5o8~4L`
z0>o!zYb!7fVd%&8*qyQt1U{>A)XE7GT+-ap`wNKl>Tx~4_L4P8g_K5KT;^izU0Y)x
zA3g2Z->1m=F6b4=`><NWu^klP>{xeyeVypaKmfmYOzIiF^iTjFemde7evpV=eup4H
zn(p4SA&)e0NIk2en_I(>-Ux^q1cYOXMiB$ir*K;t5M_?&gPt<+x$QE<u8`U&G85AT
zS*Y(FlUJXQYrJOOKKT)%<RwQ?oRlE=e-ypIKfB_@5vl}YWbQ?d%CWr-xj@`a26ayb
z_Y5GDsftO^x9;6bTerk{)+)l*@^KB;DqvOa7REikhm>a#P1VD@<sQ=ZYi3!*5*{vW
zcDPoHN6+?eCBa?>FG5y}ZGVw!4Y*nI)N!4sqM`6|+_k-Dy?JerPrRga%~IdnbT>NU
zKeA*ae3iBKA}nDwQpRcm#IM~N>lyhe=GIi=(o)N)*FoTM?nPy>TX(85$sEkg<!3HL
z6b~BWPNxT>eqr`F`1Mthp5P>Yc&K6(KKpd##W9H5q<L~d%kQoi>;;&)3!u%+Z<HWV
zFJt(>lOt$~T}bKQwixfFCgOW}FT^Vq`IjvV?q-H3@o7by;dMuYBC_&b+Wb0dj!iOd
zj`6yAV#n*3jnUwp^K&ciUEx;|(wOoB189M*)vp~fWr*-K0Vb6u-Mvbz3bRLOspUlW
zt!ptpMuV|dmCu!Sd}fs1)JHF~V=E$50F?s%{DkaMlN4mW=qYJJSU4&|(M3yQGEC=X
z+a@G{bTq_$&aaG0Nhv#)Ssg^`1?KfvBb3b((AAoVHWtJVCe}@~nUkpLw_6>gnv5j9
z@9I7Lv)h+=_p%GTULK*FAm*Yy7fqY8?}?r{V)fXzg8tq>wPcSy=XzcdkUkogKN4cg
z3EKTwlN80-fvIF*g)|!=DgUM%o_6r%+48sxH{TsGm*d~`1k*v$zOn{1=$<0#v~^I`
zjiRrDQrh?Bkgh!i%3kl8Cf3vf*F)J@Fu)ZJzeZH>`oI<d8bqYtrM)sn8G;U4xtnyU
z$F)c-ddyBMd2zbmhQ<Ur|IBUUn#MA13#z(Rt72}V7RwcN_;Olj)s0zOG{i9~Wl}Xq
zI2T#pnB~%n{Jh>+ty)&^9Mw@8W^H~Fv~S(Lv}dDe&Nnmq=FQKN4zlI>Y83tX;7Dp*
z=fNJLg@NfMSrXf?Dr3iCI5xw8<rW5QE3{cfY*AtNregx!eZnh-jv!nz>$efX*(bZ0
zmM6Hw!w?6SNnUj=FS<mcU^)369jQ^Mm5A<xsg7Y?;KO`YP8#qRUt`;Gmq15RX_<ot
zrW|&R5q2mRi!G?ZCR<h{zV1DTMlEgE+9P}gfkeC|bX~OA78x^yGh~!Y$)>&3;>52y
z>B(~Qy$!EkzgWzohkIBrk?t%}%-j27PQ&5Zej8%+sDmuZA|w~&?2Lwl$Ow>%*eHy0
ztf!%#S*zyNR?~6&$ap$2kJXpWHcbMQMAk^UXKL|gY^&AaXg=0l+O#6jkzKT@VWGu#
z(4l6QPAbz)G#m}fj?(09Ir!2^Z$pzyqR~&&is)Y*3X>*m;*xJ-t)l}&)HS5Z(*N~|
z_}h9uu9)tdP;%v{JO`VSTu?MAi{q0;LC<tRG$WPk6=&7#q<Vhbi{f`}77tBDjRWwY
z73&p;=*)_z{5Q*eb90EvF@BuX{|TC$LsGkZO(q#Igz5DC#re|7jK>uklK2p85-AEb
z?QV^Vn}T}lw6A@)|F%A>+%V?FqJV!Q2#(nVjU`yiqs2#$&08kCR+t3kvHW)L{pUa=
z-Im;9B+uN%_JqE;!KhyxyegVuaYKFzU%{|@zT-y=u1*B(`44ZudHt6sFW!ia#+f5Y
zbyK-glvMEa*j|WCcX(O@Okup}kxFP;16R$r`I1{e3>h$L%eMG(C)eb3dNFHh@ENuU
zO&)wsO-5kElx^{+FF&_UKI2{-hP_v9P%R$D_4%J{EAGct1^SZh=|TU?2Y;&mEv(uD
zY6BT{-JZ1d^~e67{`9$O#ywqEW$PmJcfa_&+T8&{vzNgKK!p7RyZ=A_@cb?8eK0|x
zTCR%wR{W2{!&g7P{^sxyev9MF`|7&sc*N;;ZC_Em+A{m~C=R&ROkpiLWv@80_M|0f
z?BZZ=0uBx*l9h!II2;P^E*xKWelgeicl-$A{wa}wce8iRlrNf9cu;99E{#L<OV}Ga
zuihnuKWGmy>>5nxLD~g`cKVY;!4dhW`tU%mj`zdY>0NL%IxwW$!|5^2XGWfSGRfep
zCyl9AM@dLRCc2lC@ikQdxb=LCLf@C}@;-A{VR?35l;c@dj;@ufn#pF6be9<$ad2B9
zt}HJQC1wyK0cz0=A!jqS%=pvjxU2RHTHp>OqsFf^TA&SEz_)kgI_!k)>QVq+`AKne
zA=5%SIeebHJeKKgajPx8`<dBB&1kq8r_g&?AwD#eyu1n7%P-(sqty0jfmpi#J9li%
z`K$)><X{B@KDygtBQi=8U?F8$07(y5WOU#uc5vo9Mm|r!4@<~xKEJkymvUq!hu2#^
zLHFQS>c&g4(s@WdWi%v^tvmX-f=3}zLo0DLz93YN?-{oZ47^JYA_xK{Uia?Rv0E5l
zz7B+^oBIfCzdkrHPxNC^D@z+p5)S_2(T4#WulB!x^4G&RPrm);5J3O=o7a(wksHy4
z0k|8CjygU+99Thgxa+&BCy3nIg@F9gs;Pq{)5wTLYz<zYgZ1zd;&-Cibx7n!##j*Q
zZT(9?@X7uA_P0P=!Au0T3NODUJ92m=@=YVd>J<s5@=9m$FJy&g>1r!lCjN=Iv=8Gw
z14IdU33Uz>zSx_qKdO(9DT4!!6l!;25Hb}QSBfQ2Z54*_z#XdRCj{1l2W_kX?d65v
z$aP5uW}t$`9h%9_ibGGe?g1B^BO0C*STbN&*q?k}<+Tr0cIG_83|SUzg&R9l09MBP
z{x)w8$Xs1~6pCh2iW>z4aP;-!r7TC7J;SGKa20#1x{kS$d}XH&9L0go@uU3sL!;On
zLX^hSUU6Cjx5V#4)r3Y81;q0V%tJNK{qghw@EE>;eA^Zb^oLWwF=6yrWT$W&rZr@T
zOt(`u`m8+9kugE!9R3HkKXBZTRK+!+i<0RP@1g6V7XX@@at)3aqxQNA_hP<<R%?ev
zfx3r1n{|$5e6X@0Z4CsEn|dx7A+Y>aU)cB^^VYec>`^ti#sIkdR0DJ<++k3=dRXE7
zvYgc|%sv)t(izNn;^ZSD`jifB3M(6R!lbv`2xr1+rjP^)a{S#p9JmATXLqnBqTs+l
z!u!^r06`Z{6Vrk!Q8H2G<-n2&mXc7<j}{^A2P7RW;dtKYD5y+tsZ$*ch;`zE8XgN&
zu$+`63wuxC0<DED#&2+#>mdAB`3y~ljyQjx_RxvnR6kY7%aE-(pad;ZQ^97<EBD~?
z9)RTc<>=XYaa0Y<iw1*BqrV^@C!8Z_4z3XlcTqQxl?QCoUGvLRa^&_g$T2{1WZtfD
zutQ5MYWX{AUmx>W2b&O%rT&{9r`Jf+2o(0Cy)>mEG^MUEBT?xV5L{p8)yZ|yIl4Y~
zgR3xio8u4e1B;ATg4o=95ZlE&h<f&J;3h0Fi!l>jIiv8F*Ajb;mj^gp2wsg9C>Hog
zL&Hi295u_p!+tb4M_DGra;^aWds9^^WW0|SkGAT+Hus;R&AR*J+=0IT`4?Y&shVQC
zrw9E%ihrl~Mxq=}gJKItpgc}lQaNxZR(yKhqA4dYdcu1d7X(0uzZ|kTygWzmO2}%B
z!Q}7|IOHyi;Y9;MS-jkvqLh<AAcWb5#W}e^!)~zc4VScZ3+!6HQ};$ZLqy@2c{5l_
zj3W)N{2qz)dMIz}71ey$_beJLfrdGmPO9F<V8TmZ!wMi=87De&Ra8o`A8|%oN>01g
zi~Kg}oq?MX996R(wEjfEwiEjv(u<L7i3#LDRov#VT?6lP(iFe^4i3m!IsWB$vDXZF
z%%DCA1MRER)VEL(sWjAi$Qpwv-=VyCfF$fg8Om<vf4}<s^+FP9cO%$TzYRJBQ0F9Q
zc&bTj)x6``7cYN!@v{cF>FL_}qiLL+uW-T~0h?aThTsp6i=6dKCWHwkOLE7m`zV(@
zHkWHm7)_7`H8vracf!Q7$PJUe<s30@U`<60vVXvaN{#;F<`#Y~V*kfsIXta&ay<g5
zywe4u`h+0&4}x81GA?4BZCCt8cF1_WwU=%2FmB>+yw()9r1@+DOCtr|p#ttX+$-za
zDT3bwvdAsr>53<e!hEm^$ju^pCE=-Kru`+^ew?9?M<@D(ZPR%xeN&iy{3M_;hu@Rx
z(q9ez!x36$_}+X0d=FS7JULEm$`J)aKm~{XkPicW>l~FLN2`H2s@9YFY&yCaqUSsT
z>bV1L$l|-=vTQ<T!;ACtX>c^3m$hSm9pc=@tK&Z3Nav+{NEAmGoK|sIPPXQd-eFcX
z)3LwC9XRB;#?#U#oFL-Y@ycGftfAcXSVCqIm<;5-o&p!U1sNO9F+YNbcvd%<PKKmm
zP2uBNGrLN9UVQTQ?L>QiExB!{8z;om=#^a62$HoE(dCClq_D`{XILCQ#0QYl^jXY}
zM`q3iTFHbj%QGe3T@<tOGMhf}v3vi}lPu1l=+#1=*kw{n!**1S<H6_KZl!^~ZlkTx
zWV(GZaW}|l`-5u~9)=L+$Rztq1wAUAvi0Jj?#a~C!7(ohLiQKswc`LgmIn82+1{t8
zp_}*{PkmC<R+F?A;<1;JT84a*4!iK1BVUG0C)?v*9&_5G^I3IV&9)I>utd8FdV!7e
z4y#ASFZ1mENzAeoGtKnx>O;&r&H$-uloR-l%0nF7r>QErK<OL*EQF~CcSW3;svAc?
zl`cZg;<StMD(V9Ly1mOIIbnyonE<PPW1b)TJUYm0IbPvI4OH-*8{9i&4Bt5z?}V?r
zPfQ)>jOA=P^@$?_LT%#}q6e$Y#zxd*7c3yY<@mC^#&~1!c$&d>BhkiDjofn+w4Ck?
z4J*HY9Hv6=7a^-SHw#v1>o%J6JA#4v$KP?*Tb?aR6o}d5a^_Lr^%M}j3^0CP1F+E^
z6{9I!M3P_1tx!m}(2dOOD9t*-xf4?G!m`;!tu!L4!viu%kgh`<M4%lJHV7z?NDqMn
zahJd)xT#%up`jq<TEPZ9%xW^qK?J$J<~BkyB7ArP5Vudj6Ab5&1GzrIkWQx#J29>N
ztoqN3dPc$n%BAd{qt&c-4+xS>7jqy>-6X_<J+-8k+wG<y6~fU&uf<)`6t!BU)gO>g
z@YE+k*vJ!aHjCZ%mCP^AwayC2S1;c@fBXC|pn&}L`47+E{+#4q=ZZgk^XDgVMdfoa
zo2CAa)R8ON-wAGw1Qb4oHlkWgZ_*I-qGg>j5>UTlOOu1Iy4zs;gSoZ8yOx+_hhv!6
zSTx4gmk#Pfbx_4HKev5isedRB;7&L88qzdErRk<LpKV$ggUBY`InWlRHc>mMP}*cc
zk6I+1M!T%nNcA6*C5tTi%I4tCC0VyNhDL?tRk9`q#_Q*QdGhuf|GQn;>kx4aB!B~m
z#L-0@>+fzxqU0dvt><_ldB7kAc=NtKN6{|5>b*$VH@tRd?Y$#qq(R37JN2X-C!Jwd
zyQ3=e-W6o^oK;BmDkBJnEbSH-9*kFL%a-)~4)h9peLiL50=xi}-OCdFxr$7}sL?Cd
z>AGuKV*PLrt`GRNFKZ1bsTK;31xWMYtR-2~2RX%ZXl*)&>xz7G8ij57Gr3N3`_{zr
zk?uw<T`yh+bCuxx^a=012^+=3Mh(P~L@jGHA3{NRMj`(p;84*xK<DbUOp~DWk%XVf
zARb}dHL8o5BxlvO&K<?VlzvM<1uA|bqX$4Su`+8P+&UmI4g3Y39QTy-;BucI9YTmC
zw!oS}f*_Ilpop;=olvAVJe>}e;Z)vWgC5l8YX=U$V>mDfF6pRHb>nDAIY*rin(&+O
zhM4aYVjYF(y*v1Ex6d%&o>teOsOQW(XXWgqo_LCMG@VmgP0TVXVJSz`ODcwxMMz9Y
z<I5lg2au;80Vglors5sV`yJnCFagkf_Oowt(sc*pf_7{A{DDCQqu*cPIcN_a`jAxc
z4R*tRLDg`NG{XAGWl(9={U-|VG%>xnp{hI3=B-F?I7}L07;c%*uDkt6q3zl0D3(vC
z+gW2Qy9Zr?h*5CT7ozCmSHsHR)SJ(h_K7#8ZIV=}gQMHN?dTpHbhEQIq1DmV!I+5%
zfUk<r+y$`H{{pO%`VYR?QvprU62&`7bohwx^az|R3e7@Stib+PS8I_V2b$4id%=N2
zj{61m1n&aKu{9ZWTR7f7dkskGW1cx$^iGWY-f4zYD9RaHh>l2DGNW__OokXNyyT~|
zcO<T%9N2TrY5l>6(L@RJJ3d|SgdjXe=Z6vkg`#-%teT%rNBHR1_n23BqW(M#hiG4q
zY?Q-rW>s?zk9-mlhvd?vL?2E8&=hphXXm2jaaam>ST*V|qeF^;j^0me$g(zJQ$OKj
z!(F!jK5w>3co2<;OjBa^Zxa?TNYR!tc2Nkb>YTHZS`Vd8B#q#Dy*P%|rI=aE6oP^F
z<1ia#k3BHz6%G|yHr`y@yEt_&l|lDqWX-*odpmfYj=xxFSn4a8#bN9z{fcl4E2F-^
zrQ{%o#K8j~=zMxi`e0g`a94%lXKtfJfWkMPvNo5AW+G;hpDe-R(>D?G$~8Js3;UR4
zv~K-zqwFIJ7}&|YIGRl_LH>q}(($aS{)XwhC+@g5EHIQK05X;e5!W4L_}~^tDZ`cc
zy~SdcMo~OMzoeZV2#&=#X1GK*BGg}fGn-9kEN|IDlC$Ohg0qUhK{hm<I@FpK4%ugO
z;&?rFyTL(q{~Ow1ds&LiOV;o<S=k)oIx5S(TQLV8%*bod6pB@QygNgVHnOuv6!|Nd
z&z|TAjaeMwZ8(KAa0X%WAgr<j&Bd9Z9v?o$^;D9`j10n+@~|VOVbgvyq>yhJ?cYQ}
zFZ<w^)FJ1jE<O*g@NLj8bF-GW96Zj-nMkLorA$IETcY2sf4itl!0@qr6WE0(o$quC
zQTym=o$9Bo22nguT3TntZz~{Jl_lzegT?M<>&s=dyxQiGx?a5vc8JGzN!GrIMNu0m
ztn5T{`mG=*u<*{HkewmiDPZ_yr=N*|cbH#s2c~6FeaLm?a{<ObqxwTVx^VA4d=k4i
z<NKCfAp7!c5vOs<sK=Cz^NQ`;r$HSo-N3B4oBYh7vCNU_nS@UxlJRjnO=r^5X|dEX
zXU<noj~PbW_2oS>%eTXf0@+4)#-~O)Ef|YrM0*MQNZ`>zrN+l{4n-AQUqAGs8U+L8
zgxB(R;U?;vf*ixt-QgqN!Qg*M$`=PX&7L6IjBo<ky!^2NKhSH@T|vLHN8tWiQJmS>
z87y@PGi=%-w0ZWvDOy0<W(ZwGORJ>xK7516g6xSBIT<Db_0gi21<A=!arY$uUa@fn
z*~nGr)8T2+*)9H8Ik^B!-Q9ot<4&=&Gr<2Veti41yV{f^BOJ(vTC^UcZhwC$e{lPn
z38=a(#Or^B>Ar#-980;0AWksi1)JDy+ANX&n7C?j&`9o|+jKf2vK0x10}U}X<uge!
z)?7bKFtXM%NMu_aP6yk4!euZ}??-ci<na8Vnv625L@x?}efKuV#Fw9>wy}$Gb2*R*
z6sH4;J+X#b7+Cx$lZtxi<{8UWSILCyC!M$<4#<;<#S=w?_3@)gVBdT<oz;H>1HEy_
zdn2&6=IS+Pra(6>|Gl2bcPlv<P8;9gVH_vc3Mm2zsTo4TCbNc!HZ0O0WMb>Uw_GNf
z2zI*YSQ}qGo*Z8eNcW~z@va^;m??Bjhj;ZzLwdv093WjY14#F?A|R?gmDN=V85`az
zUNCz$mm;7S7%6BOL)IlvoKVs7K3c?;a7F%McwVEE0hnllIz{*@cjGHs-Nl>s<f3XC
zuy~JCq8tl%W4qZm61D>rvDvqe>cdQg*W$&hi&(80ijmuufBUNHL8=7w9C36Q6lxoa
zp$FLAQ>L{?^O+-tsJL(pFe_8$-YIDdgi3C$-9rBV*?SkZHj*T5^sg{`_8h|+bG3~x
z+cQTh2_b_JATZ$GerO>TNFXFxC4oe*|NF^^H!?G_ssy-aW-rhAX19&1D(@K?8TXL1
z3v5bby_w+8bj1c)x-Qk>@a?E$V{nn0tSv%m)}E1oy%#s{Sp`2J!4mms1RVxwL0~T@
zaZ48a_{=n`yf7;d*1V!)^NjNA&Jz1+2M67C^jA(e;T}Ip!I#CB$`SZz5-~Ix@%Eo9
zY)@umk*5gCjEG>K#><K2ZIL-P8S%KO?@qI>t&Z7_ukd54(dU#EO2+z^sCX(jcMyx2
z+5LhV<Y`JK-6M(xHKP6tz1{)Y)gpAU<i*HvR5^6C9>G&|bYQ0Amd^~LW!MM|s{7{#
z^~7ZPm0K}wOR)5F@RT(f`eVKok{U-Z3~>KX2CCk?{4$^CZeK45rTl{ZgQKUm!S2~q
z!!O&KaF80FwQIS>89%pq^SplN@2zhiWwk9w)nN9RvWCHMgA$mt4bfFI86#h1d%)qD
z*a?B;$6-bg6{t;G4}_*V!?BNj=Y2mVg4-%=3s`88iUbGC$>MA`p8dIiZ^(Ppn<1_V
z<=JEBFRz+}Q2lo^`rnn_l1(*N$cWdOVNi&Y!IfC!E^BvdvtY3AAcX+A0x%d-Grm(A
zTYlsQ>M1vJgNqa=?<LIKkA+{w^5-{aSW1#~=W^%5?{>|JiJN4JvT)xulcY+`7e&ZW
zi?zrD<oPZygr-Pz&U*uAT0xH;I(t|=6{*C29h&+LUhw4wvd*`^>HRUeCy((Szg_a`
zv;mX^c;bK!)D;D3SRrQ0To?5I-|hQOm*1;XzL*Ud!N6r_`N|Z3#gko1NwgRLFrPjJ
zQ-GJNAN-F6H6UAE>gnmCo}Z|%X9k>?HamC1yy<x}9&5V!1yg4K>N#`vQ*?V}SK-My
z`zZ$Xo}RM~o|X)oeRd+VEl^-nH;m89Z=Fm2O$~_{8{d)C!vl#OcqMgX#J_VRdS2Fh
zUAe2XEqCa&?oru1$8}hM|9SUy*Taf^`CsU{=_Qq+%Oh``PDS}#3d{?`j~@(@Kao5W
zeQ`3sd0vpu&^Fp~?0KSw6Ytr#hQ~Ul?iW-1zDz${41Qvh@jX6dsF~G8rWPaz)uyvX
z<t)V9T1`%wqx<-r_PfisJAJ~okz&KqMb9>ikcXSo?3}G}<r!K*4T=JH4dYh#%0Tn)
zRONT_k+(OKw7>YfdGY&FkX&(@tq{$X&Ah?_rNZvAX(PLMk_MhFQ@Mgz1DMYFGG1BW
z_RL)^?KjOqVtHNKGV+u8aTz-=O%_XviIBK#a=uTx#3>Lp*MT)8v98iOSyRS$#Jerp
z?4ZmOq88=)WM*(_Wnq6X7AF!i?;cEgWW&91M-yVdc_s~s*6NO8@-2}LIOH&)By0cL
zmh{TY;*6TfM+pjqSmx`A!3kzN$kTM}+)>D!mTa7)1G0eP>`)^0@J=c#oR1oiUD!J<
zoHwk0Y(niBGK7x7gV}P*!}CcSWc`ex=N#vY{B!)&(RwD+X>fYGVVd0Zq0ZxCK%p!z
zv?ikwD3qu5E-5x=KGQ)BhJmP*28M2ZF7Q{jC!)KaAOHOq6(UZG(wxAzP?7mQSRAs5
z3p-QBjnG@JDt0$6atsSh7<xCJH4XGIX(|e;mS8HjP>SLE)lWi*2HrfT7S?_&XTLV5
z@^#%=s{Zx@CSFf^{(kh45~hpnQe;f&w}U`HeS4$7$v(=r-$GBo0R>Yf`)kh1BWrnS
z4&H5|)6_Ggf~c2n`&kx+{8CKPkkY^m19>aiOOLl(g96SkVijS@0JXekT~c1zV2n#Y
zmgd;MT4tP@%3KWyW1-AQdp!*ocGtz$o#ScPO8;<MPc-{?8hc7y4ux}kNRGMYo<D2K
znGwt3KAvy6m5Q0Sg5W1{0!K;mcYV?;%YRFTlxAMix+<#T$8-G<jtN|{=2>p1MJLJ~
zI0aB@R3s*lkk7yT6_K8wBSQi}%hxjmcSxS5A&<Cwk?53q&t`G_2Z*$^Aa6c6gjtcF
zbJL`uA(9Pt%v>E@H9JUnDjNdh(vXHevJU$fbI=|B_m0KdL|E7`8MGWIyQCeKg}|Wm
zW@wpC+`1*Z5JRT*=@y|@Y2)){rlBy5hcCiYC=BN&G1jf<S^o`F_=JIm5c%Xj{}OK6
z92oxmzskO0F<==yN8vJ0hFk+(F=@Wzf2M}s()j;SE&bfZvc3IVmMeQ5EZ{QYe+SV(
zQ=#xuQiac2Ncu-<FuCsZC!E0t`hw+!12dozrNz}Rtz1CKN7+Iu6s3a2=Ezjb3;c%=
zO%m&*AXFxC5>y#1uY_5!c!9I4BnQ38b+<3-Z0wdeOa9Ge!uTu(m94lgA<cqsycX$p
zOL5W~b%(Ss+-NEZq-kK%Cnr}lj?8A+FOb<VTomg^rSj25RNt!~QI-RyG+&LbFBjjv
zU0zs!zp=cqvH5Q46^CBClswP;edFD`<%N$QO`**V`7VJc{O9#|=KK4%@_E3NNmycI
z&HVG>y_A^6z24x#mDr*tK5p<oQsR0P!||63tiRhdAJ=G*@9ZFllhLrJdRbeiUN-5U
zt)*AehM^yEMNz;cWE<p6ItZS<@NVt@Uf{f1=G4ah*37L|A=<4R)lc?Ie#O!`Ac7TT
zgJ^D<?r;9FGKz;iv!jbVJTqqc+gyCL<Ui0%%>S>gm^n$r3@3D^EV6!E7rQnhSeO$c
z7=)q2|L@eWfcssj=%Dowq~`XJUJCS*eml1(UJG-DiBF51GrrKw-%r8mGsJ9a5K?SK
zK{#cbOsx&@iYpsVOv<NcYejrEQNZi&{Gki-`LkosjK_ZA>zN>Dk;%UFv|hhnN{w><
z7#%YFuNY){EnhNFPQQk+juzQVT85_7CtcB==s2u%<{_^+ft8<<Pdn%Hn&M`lOlTa4
zP>4zj-5QUZi@Kd9rH&5hTGb3`ktolbVXLxtk`7vAvs%uFAF~-LB5r<PId|Qh&gKEa
zbG^+Qd+xE-joAQ-X}E-d%wA_#Bx_}xF9gi8*PCI((>LC)zb*WyVRKsMDEvEY`<63h
z{`wz%1vj@A0!&4h2+zenz9sHk^%!W*)cap=e+%#od;W!A=Vqd|<Zw2swSr~qboa8A
zN-b1&o!k;g^S&(SW$};mXO)@J+|dafxIxBtJJVwT`4x1@@ss%STU+M;TUlRvg@M@8
zDeRM5V@?QV#MEzpT6l$<-G&LZjk{Q&E)FPXigL0sPnM|&p+6|ETn>r1oD+6VBeP|)
z0=P!-Nh<#-uaN)%|6;B7WOy&kGMb89_lF$J#0v@C2zY$bwM76H8=A(hy4PXK?zk6I
z7~#Z~syl~|G;Vcp>mh>N(N$i}IY__`mt-o>m0r|?&=nT#NLd&>w=Y|2DX+8na2*<B
zxorv{CeyKR;f4EX@vM+3sVmZt!7iA~x9Tc-rYdBalso-$pz6*fNEGAT9Fr2wIw_>k
z8;>u+R`UMP*p?T>6~Bd)+s*rCw?_btl#(uHI9A1Leye0IN!tU{Vv$zvk=EI)&he-V
zE9m2n;RhCqlh!Q<+UQ-IxsN+{kXPEaj!BBz4IAvL=*vL_k5swK*+Sz!?)Li&jj{RD
z93_d^vQiSDy!gfm7k`uZ;;UD^!T1dY3rW}tboH_~xLmzs>!H<~?~`~mBU4I4Qn?~#
zZBtX2KSVQ?TJ?B=<d^-#%4&6@05qvRpX?ihYr_rsEHUzrS+Bv7SV<)1W%5|9v03({
zGw8LK1&FPd@WH%{p$D~gDYmb_{sI_Ci(HtFOj!CVpkh5BP&{k(0O`V*<DNQ6BR*X+
zBv`xp#g-&l-(Y_fI}&<!);4(AwrPUbR5pdU?_LK(a@IO#p&InTM`UM7iEX-RE9w*s
zcg-nLVVvsQJuTBxH=#5ue75(L%<@+~#MiHX6B_*2=5KQ{IjDJ>7s>;f2X%jamWuOY
zUY)02-Ds2V0<4Gq<eVqM{WS}98WPe&83ix0UWhD7)Rrts;0?bh>6XeI@x#UXOE<WY
z*Wj{+tEU>?6QO+2)0=Pxp}O)$6~^a<8?(5ozIhS4chl0omfgAeZDsmdeL2@(W@)6)
zRabvW4fnJAc%J+5`5j`33z;&6yVHH?zHt5H!Bcy({?mK%hvCc^qZFpg3p4whlR1Wf
z&2#g10jv$9*wP&uRoiC*ahTCv00t3tTOGD)>9V9eL6Rods%W^zgN1dd@y+=&s9J0i
zT_+rviER>a0nst#0GD^1TbR$Qk8I6G3w^S~V>{6pVXn;0Kw)HBqh`{PGJ{rYGP24)
zR#|cy6GL16-u&GeKbYIZ5BPUy)${wxLW3padO#Ah6}BVyF^nHt){0`y_QgtT%2&8>
z)uR<1HCvYCB~JpoTm(!k2y2?rT_dWNa8g~UV+|KZW*7^GLYP>yO~jofe8#aS`Olm6
z?5T1<i4!F-mN`vmfZ_-J8=$XwnW!}2ivmJ8#b<1^=FS(Ht^ul+7T)C6afg&E@)7fO
zY>jj-b{^AT?JU!Qf7Q%CXFf2(UvMZu6<{DTUvB2wBRq8#=;kfH5R<?{Dz{D*N=w+W
zG}&#>RC>`}W3R&BLMe=^m*EfZINI$`5rc|x4=yQs!4<++-DQk_d4aG9j8D#3cUy%|
zxLFzb#l70M-Tpa$JOBIyMe#xsz!#j>Sk=vo#U(BJx1U+v9j;|iqD|kq*c)yveYXRR
z;(pg735_#`8p@oN3^fhVU$M;-L1eo8w><i9VSzk+P<|Gg|4<Gc+J@=Ee>#br=y>Im
z;m~;}LhWhEhDzcPSm(c+-YJ&#xdeKq{r;VBc8{&E%minQf6SU1fQ%QWZ@f{QKaDer
z%3@ke$M_~<X7)LFWjC>#j+usb_(-3p&vT|70jRJYHA@Orgs?x@2Qz$<UJREl{89+(
zwck0HLDSq4&Fk2P8(sK)N{h0-qMAD~<FmWQ^tg{{`f3y}z~0SL-nKnf=2Bx4_(PE<
zmLNXkZ6{jAHc!y-`ZYez(H~PNqKUb{CY<r`t*`{k3!Bc2pHYg-<BFRv4%Wk6u3eww
zeL?H(ld)T1b;2C49cG!f+v;Lj>u<7EVQ_XZHhzqu`IVj1CyS+g%r0|eS2E2cmh_j+
zPHeVk6*+yuk}ZO&5Xsgm|6KqvkSjqC!tt^#rQ^Q_WFfUeNz!Z+39BtR|D-Qu_&`MD
zjumDjzzBNaINbz&?1$2}JJwg#g$L}Lp-#v^hD@2%La5ZecX69iBJ-lJr^0oo@bS{;
zXIt1v1@g{mL7Da0B);JoNLJ_(Kf%bHLJsT#SW%Z^DyJR(x3aPVB%5jUx8<;;p?2xC
z1#f@oMfmZ|TsB@ZmyLhMTsG#+<@u@n2#ovG$qr}2*bme&$3|^}8l>Q8un1h2(*=5-
z30l=|r#T#&T1={Pn!gEA-~9mAc}dxkl<j-$K*A+WqlvwyM&fjk=u+zrCRyB-SzKO9
z*U@i*`JftmLmO067`1f6sb+aJOM#)~84_lid)M1ohJ=#35i=K>x)#;VrZ&f4b2&<j
z`J`Wq3>ZrGb4o*`a@|@*;)QD}W!EA$U%s6A@!3+uh6IckvQ5nU?yE`&Ga&wh(O?*l
z#xt+LlC*uw`j|!GlM&HKfsTMQ2a~%v@56&(LUUg8mHdfEwVcj>`P>?c;8(JTvXGu7
zXBh#oUumWFd~!=Lgrz*yECXqQ)Gr3C>Q~~G%*;m8AUS0BsvEc2Z&%3iBuH?|uOf-1
zhwowX_-r&{NA3so^&eeH?g~$1ML54GK@DopNl`<<=&O3apPWFofoqs0fu!-~w2Mgi
zODp6{wzjNi?~+yga6M)dvDl!4KiOk*y0p^iLhK@>i|?6C*1QNNr0QCFW9&Fp;o!jk
zp?S9-&nn&8j`f?XcyrPkPS)6eV<ut~HHNwQ_~nm4$5s~Q%?T&^`m})KL2^{3Wz$FC
z8J(KYbbizeLsre1)t#x3>-H8fH<Prnvas(=IVoT1!l2hif<%XSewUD?BbO*=?(zQo
zv~Gw*eMw@F4qqB({$1h&s3w!2mX%||urqidF^{=e*oQ`o@L|*)ib*vW=+uBV_>2^N
z0oDmEF!Tnv^LhbM0PBzn27-Th9RE2iN+<nA1{$e)a&cVPKn~huCB;*Sj%)E(H=JeZ
z&%%oP@Y|B4Hh7h$7QC2)U7(3>;iP#?Ruj`hZVMtvWLPqLaOM}lw-xMqKrkScQw(cg
z8yZ16Nqqn5k=1D|oZZXr7!&kvbT8>zBp5VOw;Ak>k^IU7;xE-w=#s-PSJ<8sX_DA+
zgM+cAKe1=++<`Yop?^5DEk84SHfITTl!6u*zAfD)bn(IVB>*Mfxc0zoAsKfw>m_Zx
zWB{B+EkK^o>HgH+O5;d_xzobwn1=41f%~`f<U7`Ui7-BSMcYd0CD|WnjMznJVNTy<
zYIb|X%W`r9&cw}pu4_v1c+V3bFWJM8!RND`;qJF37&Dys7}8_$VC*LL2n00@EA0{r
z6Hb+w!9$@7trXl;gFj_+439(QS|cq{Dno`A14Dx1NCr<5fh30&hxWn~u8N(|cZcA{
z&zjo^NZZucpQUb}p>Ut1a_N89WP)cY#>EuZnTi>iCeme_gZ7f3y>_NSX-QTlY)G-8
z^O!D3;aP#fx27Zs$(NGQ!Of02F(5$>3HHP}Dn@%OlA7fenM1t#l*1=dyp=z1DxoIL
z{&AnfUM(dxr{g~(n4jCDkaVi6bX4%)Px}5URJg=z>R$cpADN~6@#^>79nA831O=%r
zvOJX|I}>wX&I11FISMStYK9}4G~#QbI+quMM?*6B@HGXpOHn2>bFF5Ca`wqC6KQRc
zuD#`jv4r}ts3_p8Y*~UNQ+mZde@?Mpt^l6Y=dt^aj<O|&oUurmSg<Z4=%2(Fw(G#k
zKqu`Xp#sW;X*~>vvMX5bw-<HF4&fwImSr~NIlHI{4`)}$))D24do<0N2kC!>w5%!n
zEt!307Ld`9cYd>nlf|i=s8@1AB0@j_o9>t2ZT;UD78AD5DU4c6s->b&PwDb{lDZe&
z|IUrmf^%=(QH#82%qyq#<pNg}a}{4zCgO3D5$f6e=rXEh?f5!klq~^zQfYBMrB*RW
zDDz3LsXLqjQDW9Y8@f8Cr9wJAk~CYe<>TQd4-Gp}c?s#1k#LFE%fJ^o<`SqWko%oL
z`uET;omy)6QxP7}MSGYeiEOBomL{$tjSE^@N^>vC<g)lA7|OZ&)ik$aVNt&WK+-P@
zjJo-&Zm)-UE15|w+Rb#T7dI9y4_7ntjnTwZ)4{Ep4?!M=e7)eJwt!@25?<hdqtvzi
zt6iYqKJl`Z+t=};4HD(%VdxXCZU_`B{a>0-Dlka?*?vrA*Gsp*^ddS!OG0%PYQ~yB
za&dYdgs8My%WU_dWTNUZpof2?Wo6umpRJRe`Rq`^N87%mYnhW}8_HK%fme8$0W+s^
zGNp=8Dy7fqrTN3pSzQNn*9u@w(Ky|)wdi)4FR|bT{Db7v6oh)2wbk^CZW@Q64f`WG
zXKbFTzVKFauS9nviU~k)vwBH~zT32b<N0gNk0Eqewy9$LcR|1@x8`&q!X?U=dB*%S
zt%N$@B6P+1o_<1KD`YaEfID4?x(drEb@}x9ZrH2~J<aci3vo}X8z+kP2h46$KGZx<
zMPQJO7eCV;{ngr1n1?rSQaT4~Krzf+Vab^6wB|mEvRF%Kj#QJ%8MFak+ECu^5EikH
zAp8ur=qvQlq#iHR7PMFW#U`J2bFp0FNA@r_7yh;&r54QfZ=NpQ)7obne9#62<X}^V
z^jP>~0Tl3}(6TMV`|>|p4rNH%B^!CmKni<2ytElaHB7a@;_atfu-5zb2aa>PAwDP~
zE0*wmK5imKJ(O=D!S345aS{Hbn-s{r`FRrGu?|_p<|?n!?Mjk7AyCtS8Liv6o(KCu
z{juQO+dk7dvOj<Pa40ZnAebwmkTAlb`usN==P+~B5C*9z%~O?p1kFJV)40^UyI>>7
zU!1>_g=$$**O)&<wubVb%E?XS`mzn=s5)Gk7hE$r%8x*GWzG&UxN6N7gI<J6agH{B
zj1hQB#p>aS+22Ig@0sUMcnuV|@QG3ET)dZbNEcq9MDyDQh87cv(x<(yBy6X_8ThqA
z(8kzXxtu8`x0^tGwCr-lFQ-z^<wL!XFgl8}ApBp51Ng>HwWGG_>DJh>-=E;66<Svb
zkN9K3Km24X(SX>&Y0y~aox@F;eYO$uxtQ#7;_}`Q25(-QQyEGJBnO)O2$I1d{~m|$
zP(Y!mp!;sp6-&rewXu!)Xb<jR(%t(j$+juS2&R3DA^dS%PV@#X3n#}TvVy47H|wE4
zoCQe~$@*BjE*0yE5vzruLcxVTmWY>`)>I<IFdrM_1^1BFzib$Gl1%vU@NFPwY=pF#
zUbH;-(DcPH2e0Snn9BLW0>60(za3LpC`K=kNeR?xKOPmD5-zrMIf<cz&8rc3BgvdO
zax^s!2fjs%dHtmTT$I{w>qpK+7k!fa(*`F4raon0&x5Y(wl`>w-A4Ex1;8v!81U3#
z?&U3~xeTGko5Yyq!bxSlBzN)a+HXEhm53p-o=rB;+bj4oyi%;N@T&COy5%38<}iNs
zTk6dG^%s~p$@D|gGH+;xI*&SYhUQ65DF=q}4ZG(CuU>op(JeAJNs(TBgyJ85oo%sS
zY(Wa2g?ImMrr@9Ed5rn987|&9h)J71DGCAqXBGkf;B^Zsh`~wX@1c>z*!shHl{4Ep
z@Ayz4Ep8kEcBq48G^YtA`X&tQXTRulMre5f1m3<|O5?`79E`_<J5B9`l?ia>R2>h7
z>3VZcTpqy{G?huFq>g2}4_BkuOyYwemQkirS7b5E&2Zs=;!dZqB=5pkF{sW31fPuW
zS!nQ!v}~if`t}uM@CqvYG#4l&DVJ*Hg&^T7@{(IEj06%l7!~g+h~FpsTSE2yDX_8K
zdHBd7)Wb0e7+}e=U|<`0`PHc7x946#nvU`b4w<mj2@d^ThRR9>@9rN(YNZl5t9pX5
z@w8&Guz$6b2LTS++;U4le{m*Gsn7{&B<z~Pt;twj-UO1Jc_=q%gJXE5YS@b`vuFN(
z`akl9m&h9~x=9gHWPd{BkY&{~A_vr;D{=T^LC3H7jPv*jEA<%{x0gE5@%W@UEfz$8
z=$<QRn2RYnhH-<a9hNZ!oUI6d1#b%N(&PDAD*p+I?u(VDXz3YwF<W&N<KEx_20eT3
zc~OsV$qAG35o|!7H06)!Co9ta6kPE?L^83YHL*T261>8!pxTA+Rqm9b*48OxRU~EC
z<c<Hlk~qI-|1QpPd~Ua~RG7TePpL)x_2#!_wFXP`<f0kDifznGQ+{|;<uuSfdyy+f
zC<h`rE^2s3Jh81BATI?90ywj|o!nKHo7{;_<6b?rv#HcdnQav_Nt--LvA1lW*L98;
z-IS|CMnbLa3_IO+JJtq;JjazuKk0O@kg91VWyF=)O|CL;vqG8X4>_!Ji~P{=H1DFP
zc081&H}iQo4PZ1hWKYJ!L0@}_1}A0>zRc>B+x@!9>=)Z({-Vlye_%mxfr^la`Ge`E
zKE^NHcrfl)(^o0W2B<P9887rp;{LJ}>a<fTdzXoss)WW6+sc!VUC1pudGlB2jz$5z
zn|<Z9W^)p7iYTuKlErk;6gan}T@SU|DCGsi6XjW@ECH*1iHqHC_u^o<%jC|c$E(bv
zSLPWyWwgI~Oe-rZZbnOgPEhkQK(`r9tzI?7i~v{u?NdO7h`!l}76n-O=N}oI_avO<
znj=}Q8Q+sSDr|n$&t8DY+nFLA|M-!O`N9Ri3U9y<DdqQzul6Su!64b8jrBAyr*LYf
zUj7sAV5JSVQ`IVAeJTHzn!Z*NKT((TnVFij6Q0Uk^h>?0#<J|2))>StmfoLVeo^(@
z5t0Q=6?Bb$ev#TV4>M-e7{`T^ml)uY%SXLb|3sNt7Ay(AQW&-5<k-w$jzUG2BWK>F
z4uIqhGBk>}tzk>mDfq&~#e(6tGy8U?-;SE??j*6F@T3pIusQBnTcFl>y6lpy1>IWf
z2#$$>Mp6kroEe?`AWI3c+F4tMRSm761*`FNr8#OX>IQAsE39Uh-=cZ<@tobJ{e>rl
zVgV1S5JiXxo}WaR3K_f@KYh;67;GqOl1Qdf8B<yW%*d8Ag!jyr^NEbJ<@kLn`)^vA
z266H~k!y1mLrLRuTG*6n#R>^h&4i3srj|98qynj`?ojwj?$w{s2>$P7_UFs}av521
zTZ1$(!^dV+6S>L|;Zce+NcL5eOLIjwqD@FQHHY_pq8Zjjq?>X2`rr<CwpqVO><S0!
zsvp~hE3Bg3ddu2Wf1%<(Pzt=jYGEG9#-R2Ca*(IF$sCR`wHsNM@hRsvB{%R&S!7<~
zY7}0Q>va>UCM>0{X=S8R^=}KBWlNbCsJO1V8xv@kITMdlALG%Q+qtNJPBlP><Updg
zSQSBf|D@NbJ8DgO%~1|mgk*q}N7~Yy(mbc^tn$le1xsdffBe7+$`>n%s^TdPPu}T8
ziiOlI*Kv8Xov0v8rk&2Mq3<+R`EN2T5h1AyEht1EDTgESPh_&!TQSTNurY6!@&t5q
zm(YvW1LcFJ({02)2TC@JvG*W%ASsrsb5$74saIi0A|g3hLMuP7p3%qAX*z$^#<jNh
z>ruD8(vnq5?RG0Bq9@Ru<sA@8L=>3aD)E@Zf{Pjw(D2GsZ@j#lxpyF9KKaf|T_9I7
zhl;p#DnCj(Ou;<P$1*%R7?pJ_As+de>2_^`mF!s$wYrMHYW2E91kW@8>VA7n8p*q#
zAizRn(q(18z3lySo-y9b5@quUskxp&?NRfAih|5fBsXl+hn!16VV1`DoFy@otlR;1
zQ{1mJ$CFCchvS#3zHITdEs<ot@Za;aQZh_9kxGR5WhYVP#~-3Kln&Fj-9L4e5~x64
zpMn#6Ra0wTL?Mez!ZR-`NN0#@xh81Cc%y6}lEJpy$Uj2IE}pPV)CPc6`?AcfI?HGe
z<J8!kupzp)*41^0l3(0A_e<+}b*(Qw=Q@CufNkdAtQUd7uckbQq_BZI4Ck0M?_+m^
zS$(L@Bw?k)Lh$j1lW`aiEinEH-4>?WTbu^_)qLxkv18(HhGtG==isG<SM#=lf$WoA
z6IllDy%1~!CN_%M4R|qp>!$mnu|c<!V__docb1;6A`Y^RQkK=1&setqA3EbFhd1JE
zufg~%IPmIc1V7Ksz_swyEG#(cIiv&b%-bsZa-Je?oZlzV!4GG{mk}a5PKafQW&(Rz
z8)zEYWqjT3A2i1uS<DyuTG|0U;ccmeiU*-{!yF%zRH+wuSZG0FT5&*=qqr!?gGE0E
z@-0zMGYt@F;cHeOKuyw8W}3uSeSWrFUe_YwS6lQK>l>O8yg5z6A2hR1uF?;kS<t>r
ztwpOhNMg0oPfpKmM`m_9BA2S*EJ@7-4WS&?%IhBQy2Cj~V%}M%Z)gAKQ2ft46udd}
z+WOyrC}ev6Y|NfH6jC8|HfDe7P+Yx~zEZbPa69D_S4wa7Y#e~BH~t^a-+R<r4m@+U
z<K@$5Wk%LLe`M2rIr{sLAAF2Pt>A3*2jd2b0Nr6{3Qi8V*B}IB0=;0bV(OIWzzkF1
zscP|_1%&w(T=pFs$~@Q2*3Vp}Y{_Dkv|`@DImrDCl#g1z7Nf6$SkeN(?XYy(tbDki
z2l-jp4>Tq1JppQsj)8Xq^=fVqCzOBoC^O`wjxlBWV4(_vz$oHSe6-x+nGNy%q%`&E
zC3tRPHk@7F)WWPexoc@5ZPD^76diQXZWFiisz2yI#-qWj5IRCK_eb8PI2R@*x`4(C
z%u`BWc*sB`!IFKiS>RlM=}=MkW3Dszlx_3pvJMQZhBq*4%bQ7bIE`2=$X~>3QT-sN
z2}^l+_uYJ)WjV{6I3w~e3qEt~f^->FQFiQE=$B4?X?l_BJsgqk)mPy+*%A0*{df*R
zaJ($D$=TI#af-3JR4B!S+3~oT$g=ocG{q2MKCVsPD=rr>vTg>hNxYG=DaJAc@78!R
z4F?Nv1T>`GHw&t_;4;iP5zigr;S+Wvx~`?L1Sw^d!+G{2nfm@-^Vff-5K%kXm$Ptw
z$~aj9!?}D>?QYVVBnguPHU-JmfHK#T`x9%8R&FR$NivC(PtY7Cah#Vdib3=yS+$i`
zQE7E!^TXQz#lKA{Ld<VAwmyD*zy9w1$3NHJ+qdcV-o1bOe*MG8t+bi4GE~YpQcgQt
zYMG~%TxLX`^uer7x_ruu^@Zwg@0Yfma*%vR)BQxeQk1u`N}E>(JVZVyF-EO;@FEpr
zG?iEs5mgs+Vr3F~{`I#&dl8x&D??@AYlQymI-#vr3un_l<)njHcv>{7?r@kSY7L<e
zcxJsxMJbe~Yn*J<>U88;Yi<=#1^2&eJBZ^VD$7rEm7GgKAQ&-5?*=bvKR@NUFj^P4
zpfvVYzac^9r-gLH%}h|xF!l{><hjy4n;8V3c>pT7Odg%ab^jH>7z*b7a*5fY7WJz(
zUIZ3d58*I;=U=3N0a@)j?i@x!IyST-4dxTnp6|`<&eMu_DGr#rAoy>|Ad?pzN5VQv
zEl7`)P9CI<Z|l|Pv^h1OS9NR}9KcTCPo1G;F^uFQNsIDmyp-O|_F`iSP`V5A;jg@J
zZ{BpXk*DmI*_vk0ETrV^-Op|jAK?k3I!PuB+rdTA4WJYqi_rX**EkF@5Ol4ySy+{f
zPAlKaHr#Q+p)c5Zt%-FT{uj03s;O5m%*OfWK;oae-+Bw?1%r6`KBNHlC$>cI$Wuqr
zO@|7tXfzjEt<Mc?VNlTvw)JJZ`txh?V_pz*08Bu$zlX1a;HY+lpYn#68)4Em>}f7<
z#^&-N2Xs(|Nb?mei58Uaaa!Ws4&+mc&T6*XN5px??IXiA5JR-g6Jxxv7hki~VPyV|
zN5}DWoRcTk1qNyM@0;o7X&JoPF)y6CGJ7NqqR@!+8!xSHpB~J?I~w;2?dH%BX#B>8
z@1-G>y2RfY7+Hn^0kiVi597i1K%yd!2M0|~p2$zikboXTuTAsnnN+xrKyCKA*L{xf
z3^RhU8NwO;9qbuC>xg(RSX(@?W~Rz0vu5ML@lkOv8jSj;$P<;*Wbf0am)V#l1pMWD
zf-bSR<Ojzp;7GI7ZQAHQ(y?Cbk#!C!`Iimi>yPQRkB-JMK`#f>omhBbTZDMdsSP@B
zU;f|_cG8>@c(`{flLVISEJAe0U3Z{3V|l5@<t(9H*S_hYYZu=P-qCGIFy64KRHlTm
z_2tyy<heVJ@9^T2=l6qU!B;lHVI%j?e(9-lQvN<+qcM&b#%tYlq1iZ4Sn%Wsd!LBs
zGJM5_y6P+c)@&0j;BoX941mTYma=&04@opgp!Of*(3NydiG%vH&)$uXpTxzKfB*O)
zfv8b?HEmpvk3Lx8!~nVy&>%3hIm_&#r8P<H4-`o@?uAa53{j_s*`n(?Znio$sxXNY
z+;2`(zoeS(@uYXU1oCkZ7T2b&{*STDdepr)_knw}st4F1bQQO&X8+P06(x5Vao}<q
z$6#{Z=}!#lVb~YRend%;nhWjj)m6+9Q4yQooL$v{tyiOJ>2=@|2z>pEEH)ms8-lmY
zlM>qY$F?z^susq9a|0HNCP-~KPxYYspf|beH#jZpoFYVx^68md!W<WO*yk0nr#tsM
zL~XgBoO~^RY!LkAej7bCqRx}!eRyiH7k7qk>h|ZZhRu&SxA7;trU+z$$HVV}*uWMn
z+7;!TGZv}Jz(T(lwf6SsyuEY3=S)|Ag+NTClp(J;tePjdv3F#_ZcRmlNp{DJ0lH2#
zq8SLT5SrmCqB7X7V7{M&A_6GEj8fuj4Ku#kIim0oh{BZ&n*?l!9c#gS2<58X98GGl
zpeavQdu!T8EZxB$5@o1o6%ZOX5QV4ibn_`588Aav%L~7HbVU)9&BGEzXaU3E>l=FB
zP*j0{UiYS+r0C)zU88()rd#1J%L-wxAm2n@L@-~M5-Gl@e=4}>ukEk}3IF+`zJo;<
z1zr9K?AOIiJ2_ZeJq3opbb?ZvW9fXE?s(;+<*qc!s)Xh^l@i5Gzl=$QJ~T{+#5Hdk
zN_*6e$1_q<BM~>{*`sX5F2{;#iskH04iMfPOWp=ynyx7vd(8P9e&;*y_Z3&|loAV$
z{V=*n<Kl*}9A>(_o*1gd(B?K_4`<=TBwdruk;{PHo6!{Rnq!KY7pC{TY<7DKhOZ)S
zCT@;Q$tGv$W{JT{PFgA%(vz6R9sjk@FOgj66B-`Q&zWMx6j3+K9qEHL@GjS4I3r}L
zC7h|kN@8Aw*@C;{Uc3{as|)cVIQE}X60|=&jqNF9$(SSDMlP!nDCHl}fJ13Y8;m)s
zQL|6==ggs+i~RHPK0yTwIVsFNfeaV3bwZqdVb0Of;2~L53$&cW5$P3JqV#TSbMA$C
zS3+h`D407F8dNmsr3U5J=_R8I5Q=Tw@lFpx786e)P`o$2luNl3lWV3UBU9}Nh^dBT
zbV2@e#g<qC-BIU%Zbw2y$TB2PA^CVEIBw?05R!%;KXQFp4P$aCti=-yhs9~UbOu{8
z1H;-D^B@S0n^{@FJ-YBPY7Q67Oa=>g232;4y;#zbJqTVD)HfcO5{45a%w?8?6rF>9
zoHmbfG<lXv|8*^8HfKJ%)9=@fvQA?m6k#wPm}BNqh2MqX@RAs%K%$ie$|z>&s8^rE
zj}$9RR9UYO`r%c87e?$-@Mb;enJA?<ez0?R86W@Mzck>Gm*I})YN=l*VtBpanEQp*
zg$+76Yz1g;y9s1es$rhYQY!tPO=U~GIfqH~tN*M2spQMQnLhkjUN3AI;FqOG#&euE
zEhN_a@cNg9%&J&5))U=IvfaO#|2{3OFZ~u=RWNXv*Rt83*RS(b6!vWV+NI|Hpsi<T
zb(k=a1v@X*CqG?_{6FbiL@nhD*6x>J@j{sWk@3n?E2q)UPoUL{=W)wUi2VK;$i+GC
zC=NY`X-}2MV((GfQq9tlB}vX%b|>DRk}N`ytS@HiY?-y(uREF?3N4+|bq2kl*xzx$
z|4?8S5-EnIA+Nu2OtqO-@%yVbo%d6Bqxb%Ekg=?K#h7_a(r`oO5_TphK<q|tj_b_g
zybiH%hz8WoWif#O|1X*CNS_C+jRO!#@gRpXRoNfS^hnLAqA9yn+h}ot2up>2Xlq|S
zB!y5Ga-eDsB;_aUMj)eDPLt42O>^T4nL>Bz%EETH-|Q_ofefcOH!KfiC~Xq%{Z3kx
z-=9EkjM=j5!?wgfkLx4>6FI>KRB3iKoE$o{Wv(-2NuGhTC$D*hGM|Jkhgbfo(3Hj9
zzH{03X8UH6j4h4~<wJi781F3KmS)NRUZyC-*Pk5B=&OL0PJ(9ijbLubaWDT`FdueU
zV+8)nYt|Ocmt`-+T2?f@Hs^nuQ}Ps-KT--ghgz~l8NL^sIRIMLVzM`B%JWy##c#@2
z!kfj*F*Ss-U9Qmfn9~1>%OMJ^j9k<=MUpJ&&q2n?f9gbnL{u^WA)cIw?{xr9c^FVC
z%1GUQ^Na1lXm8A0EiYliy0mO-J*2ZgTHLF@=XCpHo+Yooh5b8_;7_dL6H{FdM44|g
zq{^@6_iw^R{#hWA+0xJnR?Od}bOP0$2NLrT0Lg#-?B+oZiFSr_VB_^Kc>w$80ZA2q
z0-gk(<#T5q82`u$r9-5X4nL!jv)7DpvgyI_m6H_Y7r|=3(pLf9*EtG;`S@R`XjYS1
zjalF%>%GNUu&r)u$#Ba(s@Hk`-{F!xE#U~K5DITUaR{+xedjJK4k<0$RSl%>94DCj
zAz{pd(ju+3o<+{8rR72aJby1CHrlh7)1Q)Rx*IcPe(<w$&rY*<we3r4wm;-y66Nd!
z?Jb)P8APDAo|M;YK0^ZT$uM6U;*Xwty9f!%(u+hS+GO4_Tr2NBzg%#dk=`o1i$5pG
zH50eFKkWfc+jhbd!L&xpY?DSKYMke;Qm$A?9b(7HDkUeR`FD}5xH6U<M<GGa|Guym
zTmbX)mJ`<yOTKA?3+UQGa?@$94}FL|^j@Um$16#ZE493^9(s9d7rXiOU8&{Zd}bX+
zqvr70ftWJO27yk-9`1YtrDoEpUtJ{}vgGM@e9>jI)|r;R47&Yi+n_?r1mgy6<c!7{
z{@CAPScCCsa2r3rda7J@{elJ&6^tgf`25_L$x&b_ZEOFG^^*YHQS5{e3sdG!SwrP5
z_slJDY06O4%kDT?h^Ip`jk9_-X~otgHCAk+7I7BY>xtol7bP|(XUsL1IN$Suxv`wk
zy0az;$!ZBi<PX)qf%$A49vyEGrVK3Sy-n69b+DDG)^bR*k2%SBP}aT-N?x*=&nXy7
z2MKv5`eFR0vjF8z4|<biajHz&NWeR%>ba>(5hnE|p*ETqpR7dHoJnmcqWxrccRA>(
z%<iE%CMXKE?#p(-_Q(116Q*utGd7r}*!-+FsvRNG&GUyw=1j~%D^Un(95fzvSL5PC
zlLD^VMT*-QV44{$f6PRzi_b}d3NKWDqfF))fHdZ?txQcTdry$CY7?`S0WC*1Olx3^
zsZX&kw-oH{Jnuq##F0q_xlt%Bp=xI(8QjH-_au$HXEtPQDaD0k&2=SiN|+*<BB9DE
zEQenx_9<35_2J=D+L+OC1)nl@joBmaXAu<n5pXOSC{zB5ZoF=M3psQ~iUA5&osGS9
z3G2NC$j5?ay9a(>%;l|qgcv>@ALmDkG@=oZn&*Y2inps?Oi7EGj9Xryx};T7A~!-i
zft*=;S{ZWfHXe6IWFQz|Mg;oTIpQq|`6-vKOpSzJE@kq;|Il=t=hgIzXdce;Ntw`x
ze_C<|TF<wpxicoc!#l|wi$5#JQ6ikR-?U$uIZ%qjw=(yD*Iy3xYM&O?+)B=igpoh^
zykQ0-`Nv2gwD4igi5^}s3kwao=K714M@BGfhAa0mFG|Bp^vZuu!IL5WG_5@7gSvxd
zh1rGRR4v3;S7ylbXz;lW;i!{hKx~RQ=*DD}iQZsV#px|xsyj|M@D#_Gcd|KwMD7P|
zH183?QmW5~tRg(%k6-&~1wz3olrsj@SEj*-ng1|T7pR|)A+@==#ZW8|@_@N`A*D#8
zfZ-_-r}^ZMe(Ju^1DmVjw&#~g{XjRh5KQ^+5GyNmr25L2EbBaOcG`5Ss5ACgjRArw
zr^ZXm704!4=W|8H^VcI-&R_ls=qngsT85eloid7>y%gEMIMr|!$RifHc=~o%rFnzd
zEojl5on>CaIR|Aqye|Kyp!1X3e?g#Tlqo$j`O>lQq1hUf+X$as9fpt5NI1JE#{c9g
zazJ5D!CW1Ihdgp&aMnu>$-ub}Ql?jFXI7EL?dhw)i>7i<o<5q6L*8?J3iY6`hOmdF
z`IGn~zn7e0{KzpM$vUY$dmZM>d<SDwB5o_GuaYN*lHWnrW;;u3d9zV71bUGz5(-yc
ztsLPhe-mFjt|7lwC0X568YBPxc{S@lL57?w!*@BMtj~p-guHx8BJ7rqWyeY`EK4;Q
z%Hoh<VJD}qd=|`?5+%5cGG&IHD0^u#_?u8TlZUKv^u2_^Oj%I-DB^4|Jrg5nroY>g
z94upi;}%#)weY?nfycv3)yif-H3}8XU93t3n`GdvwRwqXCI~64X2*t)F4Te_hZ85P
ztgNK8vi?e#Ergoaxx4f^6(J~fbusu^#fgVKdwr+vVAD9pPQN{P=)Z8<oa=$;OL74)
z8%KRh(h7x8wNp-7(P+5a_M{arE;d`OWj3K;ve~Vhd+j&^Eq$3m^*9fxUq7`%cE!^-
zxwbLm^3Xw9Bx04Nxg27~1;VW9{@?*i`4BJM_W40TEN)-3buGQ<_WK5*cstu=djcTi
z2l?*WJTq?wBQqS5#kx>I*r(Jch<GXsEf$|xSP{}sL&@K%C(3#yyH1yWPJ0wGP97%)
z3ceIq^h7DSTRgH1HBM;>iEqgZNS1x|pRfkcgPHLD)c0ec3jQy?C$-W$eNP%1(XX8%
z=wF9-h-lqEiBZOj7KnoTIYOy0W;s?6X|BsU{~{fbUWnUOqOocA0v<V!XZjz7cJ#$(
zbC5ymZfL|zRX$j&_6eulBwKcSh^>z=TYETM-O0C&4Q)nr#)HmEUeW`xm4HsN*Fj*N
zkiiU>0EJ}{)B|1Ycmh?TImOJvNJ(BA|JyeqSUJV95?x@|r`fkT&;nJ8GN@3Z6df)o
zl!yjsHB2Uw16w=IKBZ@D^36m&2Y%x|@PN4k4MHbZGA>72sSa0FK#3Pzd@+78xyvMG
zH`(hZ<G3HU7vmM;MkJ@&vy>*`Tz03%u$n!?_O)m1s6C1ef6={<J(Xzg-|jff{Gxrq
zab2ZPR!qU_;+0uQ6l0VySGgM)LXKi}vRzB&%V08ol`%|lHj%$%-O^L?o1}Rc%LskY
zfkoTEvYtd37s&Ntfb}o7m5`4k|4+WV2mQUcNul?D<@oKkZ5rEe-a;nBndiCGhcnRw
z(&b(>rX8w)F{!%qhm~S$^~$IXP#r|QZtM1C9sJ0TM*0shHxJ@5D$kXmZ3xtK6Z1OK
zsWy~wHr1Zos%jkJ0P}eHAgk3J6a3FluFy}+!iO#K#YKCQl2f=~l&OLg1~)C(IG!ul
zc%m12;puM|>ccv#{B_~d{`}iQ)7;~i*&I6B3n?^Qdfpf5I1nd4vAWOgX<D4(RyY6?
zRo&-c`3V70KFs}$oF}t-!HDK8z)uO1)QRKW@FJ|#4F8sXV|Ut8Ycj%=EbQNOvzalg
z+fLne5(?9-_Ts#|CHH1AU>@L0iPPn9`qERm0bR5<hYh(s-%*R+<#j$8zIvu*yEGC3
z<;RoJKe5a<`llyQw#i~EPADz;Tw++rrcV+VN7~?!#4id`DBPqCE$1G|%}2~S{@?&Q
zDpr~Iy5}5)_Li`5ybzhioMk(Jo<!@iBS@7utN;nEgTi6lv&4{-`0i1bR30&esQP*y
zE)SAfCBp>kPeJ=+Q!=5G3<EiinTEKlrt6pq{#bfku(M-(9`?3Rh$0+KY)i-H;#`RP
zgv`W=zk8+SA&w+7!|7j}GK=@!CQ+eS9&y!KlGaqu$t)r2!8A)YQwf-UZexY{j-QCg
zyY+5k%Lmi@i4e27;PPkppI@txKbkmJTf;#d;7;s<8^jzKWQ<U`3oghlOBTh|$rQsb
zU=x_ZPozmQFGHSq%00jwh!3jp)2sRZ<NFUTZm(X<pIJOCMqd0F`IPnuQp@Bz2Lqx4
zB8GlL9Q|+<r_IIHXjU{M!^N4o$PI^@iAE@_e-Mk%Li;CJzsuVu3_M=J;L5(Wfq;Sr
zT;PAkrSkGYysp;Q*4CC4Kh*R={2)#vy_03u*Z=^Celbo_d_Wf&UuuLS)Ayi`S(ai}
zT3uH(2y7+s+q?7frG_j(mrP=URI2G{Dq=IEQ`yW>2X$AH&fwu?ZRzwbo}qAyD;I2#
z-%~DG_s*gLaRKwI!@089bAX6Pj_J-YXXRE%QsU#wPsJ$m?V5WjVkg@2<-oNNVS5sb
zA!x$P?Rt!>ihnhL*S4YDyD=~~U)7&fDW-lt;g2aGV66&x5h7B6k!%N66LDMHSDT_r
zD)~tso+vH5@d;N(*O@nVf%vb?NuUumZ9#gks#{BGb6cB#Ijssyj_7@=7#aHJyb=@X
zPpMCA^PGMOqTam?BPgX1pt8$trlQ#fVahXRkKV^TusdE>7OKk&N{KD`ZcO2#HvJ0>
z0offfz<U1XNgLKnxeFI_Hw?DBa@QO#E^^Ywz>-IaFhtax4(3e_(x=5>UJ|*$#X(#8
zoNZCr4F@t>?rBAR4NW|=DSW-b-6yv#zw$U4WBdlKM#{3%!TzTO=`c*7lP+$JjXo{3
zay|o&KP~(PVatIRQ)L9IU4J}5^CD||z2M+DEX-Ez`2_*++2Y~=kgY^VAuLXB=8Z)V
z*`nGNXN{uYb)4z&+f*wl1fo_TXF0X0x-#LWK<Zp`j?KEZT1UZLgZ02TGqBM@C4UUV
zTKepLN*_(;xdP*6*Ir<Pyd1(ZW1%8v?Id!W!qp-qB`cQM*JW^h-Lo{k1@Ev4eVI$-
ze4AB$A<qi`$2_^48yqV){*JrPkx-i238<)$WU|Nim3@(-(2~}uI~*Ir*Ny1{ubQ0V
zV6or4gEI9m^lOFr#^ltHyo;{}{a4nsGIOQRYvk8g;VtlLnR8q4fEQj-e7RS@tsu6V
zAz`^*dfZ`P>VJBe>4PfSHWfyrCTVzFJZ4dry)@)<Mv1wc(xm=usO6szY@G^|%j(0t
zD7pW=F>?Re@n0{7PI>u1B<$*wfmNT5$@<?FR`o^ttL)mWWfyuaw5A&58&W+HXD}P0
z)NRvqAqcarj(pJ9Oi<XcN7sptaGEv)k0jlWppQjoEw^N-IQQU%rt5P6)l+bT90j{K
zp0>WfuIqoZD*b`e=BHHcx~G*?K*ASBn)M4KLwG7YtXu9>*=K#{olRTXq#<R|CL}Bu
z)E@QjMUMYGd!H9Z*U935iMq5OI_s@<3Nn|VP6m<declwK7CTUW{;Z?Dfr3f}g7U|W
zNrf}{d;T-q!WHLQC1WP(%x>HXETIfwU?D!|7^CTwY;$&6=Qs(27r^H`2;^kPDn<pV
zj@7{OCu27xNI<us7x$oQ&cPe+E}ka{aig%a``KZP;q|2x+vN=-7)8$F>I`>bcpl4|
zg+QT0I@-Q|%nuFmtj*|CnEWXO{gkCEp&e_Bl*UH$BQn}rS!-z-sdd#>wN@84GC0jI
zq&>{fFQBtKNaKaM#$5w%*R{s~Z->8}q4WpNm~1%>0PaPGxl(LZjy;?=NL&hPSaY~f
z&Kk~t9yR+(PdK_?!!`MBS($<7sr5&3Q_Rn-B-vSa1=>TH5<*pk;y(SM))$Ge(9)Hz
zG5Np+c_elN<|-1nsvgc~T|CqyaUrn>;Gyt~VsFs8wRU~aD(1M<->H}5mH8R9Tz2^b
zy~z_gF|{prp6RK7enxxdOXlj%QVoSUnSMfzWI^Yd;mreplp=}WKBGs<C@b<+5V`y}
zop#0iTIGYGHF|BwcR!`W$O^CX)gmcg-gdOHwzj6l9+xu*tJe%I6xgHLx5DB@(uypJ
znvBh{a~9&rEO6{sL$KE?{`=~uWC&`W7t9>vwO_z2SN{itw@;Tj<Q%7fgFng7+uSsF
z94LfP(rMhhtu=?jfzCbS$>cIP<}X*B&&7XpFrdSM%Yo)C<COE0(Elv@qZ?>Qj)^(n
z{)~p5TD!KbE$KdhE9ApJ21A6M{qMpLeG1Lr`#B8prx3*YyFY^<NC}>p0ru=?tob6L
zo2CD0D5GF7LK7R9gA1DO>))59E+^~U&nA|mnCQz3eNI~6P4>-Z*GDHLe^GKqOC7+T
zl|CT$##4RKnA7RlU@;g-E&oi0HrrsB-fm8AyIh~aC%PJqd#P^B8RE>mVnL2XpJq{d
z6bAS!MIU*hxjS<D3EKn3L^-yYLU&PVo)O+YmzU0*^D!mYa6eWk2e(R5XS37&gL2!w
zw24BCEW0ga|5yl~pJ>Q~KBpgV^2VXbs(---%0CuTZ&JDUEOH`s^e<_la>0O2^EyWE
zFtc{87^X_&!GJOVEQrHcQ;InWg7`<+qXA96BB`YUha5@SweTwuv}M@Vz_Q_oj?+!K
ztz#{-nKqc`qzm2rQU*A1{0{?qL-@CrlM$PnwI=J%PlMeyOm``V4XkL~v*jt#s;og^
zKN52uy|}m1X(oI~7MF6g>yV(CQnK0yvbsSK8JZ@M3*>3F5*UWC=P<pUsh6)`Ba8Dq
zM+^2}vuU$23G(b5k?p|*SvvhbNS2!Rp#O?IQ^{43EG+H~o}p`NO|s3w;+XRAEbKS;
z{Z`Ae+av@$6SgG&B^5*Gsl69>Hw&o0Ed08%vO-P$mSgEmidxdkx~|f(_g$A1+eq4U
z6dpx2GL?DQJ~WLoZ*#|{5|6`k;tobXZW7LQUVwB$?Yr>+hvq&EROk+kl*6G}MmY-;
z|By38vZkO_7cj$~n(*sP%R;;TlH3KR-2UY5G9IlQ)Em{~>euo`b$`3MUp+qmoIbG2
zc2;F~O#TO*K#5kzhtOQ8kl{$^yNq=U83X2Chl|0g+4yPMm|bl%CAEwx7priA+kq`f
zxQ0C5mv~iCr(xC1N{+#S=`v5CBNkQ;RhX3-Ud%q{`*Zo@<_}qLvTUwWiu?o@d~--B
zi2H&84>Q7+xq#><Z&Q*PG0oi|yIj(R#<X|j#oS+L60Jsc`h&3&k5NnYQN-;mQaen5
znU~6lJ$PZmRX|B3pF*!eYKFwaL|<TpwwzlPu1)#r#{;_EIV$~1lk!xDgP0?;=cYN5
zeX3kGfh-lZk}*pm9r35cuF2H`93RXjJ?v3R(;3~FVrAyl%K!F*%8BnBhn1tPNLN`w
zoso3$2b%s*{Q32_A5zmSqEsLst%P9qjf{&7K8Vt5a20g0xJ33Gok1I|+wBuV#_cAT
z-AB90qUkg3ih#L7y&>KnFi@e8NjO@j2zq9J1oH((B=xJsSO4)J{Z~s1e_eR9o^}_Y
zVi+h2Wn2eL0lN!+9}XaBT<AE!2JvgIDSK`3^+2>&FW3vFHGepXgZ~hak3UfTjbUT(
zVi`8D%YmuP57n{0vAC{5!g@oQn9>E(J0S8-lptEu^738px+b!HHzqw88Q~AX-pT>Y
z8{0Waqd~~Zes58?v!smkR3orITm}&SfZc&I;bSwGLcfjsz!}<R^D$#m%ACeA{v(5m
zKBbyH;J4DAHH2<He9AMK{8i85H-7yq?Dw2_LNWyMAU|O$R-S>n>HcMr7MD~pv62Ej
z1huQ`m2%_#k;WnwiAKx>n@}?X8fmC7V-S#F$3iKU78V5xFBDmEQa8PcmxK0<v^E1~
zY{!s3x;kOWOlZd+DUp%2!fek%$9l_D+b`M~F~<)-aN19o$58Vt_-~mW_LNxyq+UY%
zq+8Yn@g`f6=0WA?P};Ke&X@FM=U6j9N30DRh>UY41sTf(l|WJPR-8eb`Zq8`$pn!>
zPHensM7CmUaCb>&E=3wS%r0cemab<)e3{=>ZTeO46tCUO6$mS>;fDIa9p}7f-wS!~
zVvpnu=Cub?^ilN7$w6K4jhicGR+=e`V3*yc(s4O(Qeg0JxltI1L7@M8oo<klk1d%>
z0c<vg%@#*!wv~dfHBRtbWX*QyS(jY^H(s*cG;d`mDK)DY1ujsaSuy97Nwwo)+;1a_
zf<Kg+le2*8w9Bc~2y7{vEd0$!j8Wm??P=A%zU0T6ef>GT*4YE{Z>h1Uh0XzoH`x}J
zq>1?(mfKFSX;feKEZmUP(a(XN5XE3?j|W5FeHwfGo5EE2<4xB{4HlnM!?liIERS|s
zqa14R0ZP^sx-$E^r$Vc{Ft;=+H`Rx9%q2+-n(;uUO3qSS_bQZ{#eV4s`cKD>S>TkJ
z_BvY;b%h@JlE-;`Lfq_C!wx{^wX2YeV<%FmW$Ec|pFEgYmNv+FgdU=#8sf^5+M;=9
zaZ$O2lU;|0-l<(_=V;86!yUdDpl;b!_g$gy?EJDNd6q9J$jg>j@P}HsqnP8mu=Cjf
zL1=TpRSIu2+~;nuI#KgB*itfiTbK?9EgcrxZF}Fkk+HN-?qD4V&62J`CgW^)gEn!?
zcc%Yy#BvhC9Ra#D;XZS1nCU4Q8X=|G!oOPt#L)mkHi?yASZN>IVrDohbY`s+-{>YX
zZKP}h{Rh$QWhXX>ll{SXyE`URcua0;9gG5-jJ(-SB}tx|tRq#MqgY>1{48O}f_Dch
z)+0@MDlxR2m0dbSEL#4nFbEGpZq*zQ^}Kf3I8GXVBMrZihIQ7FoaW}h#aRFs!ICX6
z%n-8orAy~B@KIwzqVsRcO7zKQF623Q|1L*TPF?0+zvm7D)f&iGH&<70O6ge^#fov{
z;`|##Cj0TpE?^p3x#ok*%#dkW<q{5R{q+|$SGOVgP3WHe#C{r#b6WPxm6j8sOq$2@
zBDZVd_FSwvCf}Vb;JSM+!5<~VX2AbB5GvT(i_acByN?J3ICIWP_F(xpPa&>c?tLoO
zdED|e)ABUi@=HKpSY|v09J5;oUc9qKRGaD(Lr|T6Uh>bi-`j;Z0*@J(d+H!it;L5h
z!H7nt)BLfYFX|~T+v}##Z#Vq@nd>P|%w;@&W2gkO1$fgpl*St??7NCbZ+MH{yz?%U
z>|v(6!%bkOE<5QxbFZkna%ZUOX8!3MaXIbi;*081%B<Jy`IFNdv|wKBPmPN=aVfgh
zHtAFSS?cz?<E~Bs%fTh+%l#cJKAZrC9&{YYwEU&${5qk%NWrkHD!3#><nCfyUeNa$
z`R9^tg81R)3ReEGC<@y_g<M~sGZF{c0uHz1@6ya2>P`LkY=+w-%m2|v?<w>DBMVqz
zjuky}XQ?V0u)Jfc`kmP#&zy!AUP`$Hfzl{U=Yaa$!=Azra@zA-cmijH<KQ+NpXFBG
zulJJOsJyfIBm#RKHXQ8akqwufYC0FKf6`Vb6c2H2SyNEv)@6(ja>}CXu+mIba@42}
zMw^e=%>m;X#_cmN-4t(wJR#=`1#D`L%?tox{C{(Drm2!SIn0hipLBJszlDvb>c4U9
z#K;S2s5M>177-VdIY^Krp@`iea21DoxpdrV9?Ig<1<T{^u~NrI1d-*m9z<G=_v>%V
zDNT^8wDft7eLN;4R!57&<|u|OmTcwND>Ra@=fGUaRs6#yr$+tYi5s!6X2Y0m0{P1;
z$AgArw5D5;Ov6uz6K(e4rKZ5kRuBb;gpiY;R@IR6$|`oB__X4>)<MHuhktV+Tap#~
za?$=+;!qa8`VVh|Wb@tGug(z3u)3pb4h8gSVKG=i)>kZfbJSxvYqPB$y=8ICV$RN4
zt*-yz<KL}iqsB-`O;!BYwck>~VkBG%lvXQBt%DDFrL7EJs{T!Wgi+bF!2(ARp-6z*
zvo`g-!e&~0%w^wR<)oLyDDB2_zeMf6dX<+^fy;84xh?V6yt-<lk`To8%vvV0;BZCq
zn#Y>_8rJ&l^D{wWWg;-qWkeIg#!mtkA)lAk%~WNDqJl}DkFJqP1pN2yuuDSkI*{#s
zz3|H58IR#5b&ysia%8-@U-PVm&~$J%=0KI7V;YiVc)#%Y@{-)cUf`GKhbG~7m5na4
zV=m?Ob|20u4RQ*81VDR(QSQEpv^pL)Q)A3kQRl2wRfltOj(uX=J~zxvx}l(zv~7)w
zF!D)BX0u^OQo&zT;W<%Zf~1#W%b}B;55<x$7esSOM{LO}oQmZVh9j{C_dn7*NO}P5
z;*%M^i6Dtw@OV|<2le@13kEuzjQ9A>gpl#UV{D<6hvSblb`7!Ii?OTIUi?|a45_<9
zuUF|8+=VXY%*lj8t@iIJhL?*o$CgI}Hs4=(=$d=j(oamYj;<$c%?u-_>Xol&?VWyi
z!5Mz%IFo$@t-B;%o_cCKR}NcsC9vN)iVb7h{`cE>Miv#YSW44I%M05=8UFQ$r>BBu
zo~-|4fkL&UZM$0IY5J9!Z_1jh*`NJLQ|g$QZJlJ3+wxnJsnn%Jk2cK))aocsXhDAQ
zbNQ7@|Hh=|qN}3y=9rkRNSC2o_gCrjou2-@#?xFST2FbEN;noFlXC*HI5S`~0JCz`
zS2Aq2Vz>vaNX->xbC05{;;lCBwo(T9>PZ`E{6v_R0qJAMvvg38izXY3k;U|H!TZ2k
zbzVS{izF`^iT&7WwmNZJx%td1s1JB%B>&ocwt;`O2XxN&e?*8HLOU?zog0Wo{M+(F
z(Ksq{ez2PP-yD{l8yN<=$2nh}>_7MG?8&dwxz+w$1e_;>=dgh1?8&d^IbX@JpkAtf
zTKM{w6sWf`A}xv!H+d`25hM}B?-zWL^JSM9>`WM4%rAiIe@|WX$?rZAsVVz=NJk{U
z2L_u-w}0IuyVy~eMBX}{jw2xFf={~RC(HQ}%!>siVq-G3OS@yHU_J-fUwm}up1c>O
zeKFW|(7TU)H<`c}JPe<mH#Mq&sldl9AB6Y$4kH#Zcq}o8_zLJlL#bI=55K?m&r3^r
z(K&2I1BM1H+ALWKBE~rsN1rk;Q&DR4rjRMFT0TDyiNdbfB91wMC8SZLg97Dkxug%j
z8pW{zBj54T97F!ph+mddP_JGdRqjCSKmXI(AT6e0FIRx)7bDmq1pHghxq6lY3V`fY
z5wgL$A?CX^|IzX^l|D>?Ihz+wk$mVy#L_EO>6IO{74&`1bF6-0yW{6u^zxFIH|y)<
zwXFmOY=@+7dHW)e--;biD8f}M;ttx&YmfhAJwLIfrL?CQmq<ZP(OvZ^&Ls^$(#AX~
zx0CzLUw?04k_H=U#_dA@<Y+bx>Mt1X)8HQ3ZU&^BGQSFYSafphAZ2#YN|=}&llx@a
zO{EA=Qtx=v=v_K-xC`Rj8Vvbrd68h<RStcH()MW~;5@N$=-urWGtZf0v-DiI0<JIV
zr<dQuGaZPL+|N(Tiv;p#<pnnaEAV7;mVlpg^4dz~8L5zhUw3x?Th5%L&tH7xIM6w4
z0)%!a@=}X5yoOAkU9wR#c)a?%4s7;*+O|x@PhC)`l|S*%VOX)BYyRq`4eLevx$Ekg
zvHt@vE%fv!Zl9|^TTxB$1^3o72`rhu;&oZfhcYKd&{Bn9mpGKOCbgNR4&%uMT#{RB
z^)cj+@=64pk>4&lYjdOwLEM0OZpWC=bAHExK9Mn6))!9G=xFuV?r*s%WUKI}nj{9U
z4dqM@^#&s>Ao{YihUdum3te^`zZ<l>SF?-<UlMQuFw*Bn<_tZh>XgEZi)jx+_8sNR
zJ8U+;pongNVx|;bnk*##zNyk{3iSWN$x^2(T0puL{_@0BO4eLZ($g?3sm!21Nd`SZ
zrsP~i8FEFPD8S>3X$7wI1i_F#jz8JFulZab{y_g^7p~&m9)6@`q#^!MPtV9{(yyKt
z*QDOe6*6idNu}mZe+lD1BZCx2=?J2J{)2=XPoa9kr9KzSGsst`G1BODDGW>-h_C;W
z3JS8IQ@{KY#!8SnpWwKWW&?iYyVZx`a6-}hujv@MqCo(3VGhfA@^clnH-&j1ddaz7
zKc~`?S|;Ca&T+=FB@-kqPxNf7Kg*=1+DO%YX+15tww0eF)x#DX)o80fN&2c)6Z{DU
zMWC%ndm{7hWqJ<*!5gKDP^_6GWDWkukL3lQQr()H>lVDR{4aSn@F|fU>~T}QrklJB
z?RYVzxyHSz#sWKE-+Kn&oYKG*Uvd5cs@N=BY-Wo&=5o#vbq91^aqiPk>G`cp)#q9E
z^GtmfmlAK|slIh2ww^NOT-KR-N%!!{EmzPhR1fOoEG<_EgVbL<L1DZ=e(o`&U%HII
zHb;8CA~yg)TGjoW6Z1u`2`zFaUFN9Y)V4Y4Pa5O>A-N<p49iSE$(4&M=to{~5{l{;
z(Yh|WP%>SYT^L5y`Md^9!99j{_mzI1YBX%mv%ljhOHqyoi$SX^)Ai-BpOx9Vy9Vc0
z+Q?Mec)rqRrqX6wI`{IKrFj3W;e96RePG!Cgem_&#o}HM)ts*J*)kpQ;rLv|a^QJ}
zWkWAU?Jyz+{ATxPGiYsR=J(9}o^1vP>nUq|gJm}8<{zI^g5%KTLsKSCS?n7`w$5#w
z=`d~7ta<+?FlG1O4gWxk$VVe_vE~1YVD+rioUKzVqk#>SKm`<Tq#kD*8B2Njx{0rE
za=vB*?Ay^>hs2y&yq-UcBl!9AG$=oTnS+b_-<hPQF(#9o^c>ziIfuL%szmP7O&;MB
z*$$rBx(zq^=iD6@-9VP|tY4q>$p|{K=JwCILA-GLHk_=5@3p*DdeXVd?S(l7dIPB4
z*^>}_Z1x*F&%Tvr>m~OF@BCEnJQYZR+;ra7V^8O7eP;f4=%#o_hkDR+cmjSA{6eN7
zDJK3Zc{sAu2s|VFJYGLJk2m=stl@k;KchrGcFSau0EaNNH|o<tnLUpYiqve#l}zXv
zVe4!_1PQ?-Q6H8Ux}m{uny(Y1uW?VjLzsf~k!qc6!;}yrb-JwVM>HZHj@d>f@V?O$
zJ!Vx1{ctp&U@m5#`R*4#DF1db+ms^7rM}JGKrXhDyg`%HFOC-EO3PX*`vLtrH3Of&
zG*#Rivbv&kV_DczUi|4Koh<bXg`K`*j<3P({o4I)S*_r7k#=WknKo%ghUYnvYrHR|
z+s~N`dy_8vI#`;|d|}d>%V&;%?PA*mVHLZk?mFYS3^3|m=LW)|6ffznt5*wq&4lE*
z?e@YQ7bc3Af~)&sJQ08Kh0=E>lxZ6|VmqB>I@DdY&~tNpI}w&W;!3Dx_Ub7Cdr(6O
zx6;-A2qNzw0LW9S;g>|%^6}oxK+kedH*W0=-|i4gWUFduM0;V`S^eq?L4w^x49Mq1
z>_LQ+?CUqaA_53}awe8)7Uz5)@hOlV0}N@`AxIsYL6`&ybtk{mt}<f!4&tHPU(5-5
z#)Df%vSVl-TisEM;`>@^Qf0~1cH$`r$WJ-yEymNua}tjRE(7aX6+MSuF^pzw(j&{d
zDIe?^<0Tghd~s>v(v*QlfbxY7DR8+zai$Gh56;yR#&vMDfD8i$Czv&jn{5tUXNVSp
zsHIc_aIO=A5f$4WjP}N(MF(dd^p`k_n8d*`3;sE;!E-h>WvF<qzz)UL1h&a;oc4y7
z92SZXo$i=pE^|6`WSveH?&8sPywLBq;@-@LK(#VcL#X__UuBMO<TKE!`{Hh5*sa}o
z<|Rp=pSxn7sNy$@QI-N-8~gUm{y1L>r(H5-{j}!~+#@sX$uf7)x_Icz@}~!#M|?8*
zNTbo?=&3kXHaEaxX8Zy{Dy-Sc%8Cda*;^@@SBKmx=X@gvto5bO)=GAH;r^|?q^?AB
z@^>w95|8&J^>TIu^p*zj>u({&l*&$?(~<gW>aXP-jHa9g%2@FC90;gICO>=7QzyII
z??2suy@d{XlSDVTzT_J<m&ry(+N(1urv)mRWecMj*y|;Pp`hdng#lZ<C*9+{s8=#X
z-eqh^8%muK2E6`xq_D7%O~-+w7Eoi;PqH6D+Uc1j96t}<K74Yk7rgI$@|ZRFVDC!3
z3aY@5yeVepjZ?C?lx7^O1O*Gp_le={=C9NXFws*B|I#%CNan90k;C)Wk)UwyT4p}}
zo$Hz9-8uUJ<=Nqr{ddBftwbxeC_rVwXd#bE%H8NcQ~Mte4Q?K?v3e`R%?r0{>8V5y
z5?F4*jmXQZ^&s<<*_IVhLI>9CJtK4A*uD9(Xcg!ZaXf`@4?+#9*`+o?!f5>c><7s<
zGBHT!2M}eMGnLH-2K)!gI>e05YzlQ%zdDBEC_gM_iaV!oS<c)*jvlsW)Kha0Sai!O
zr^=v`4*Th2YU&N(9W}RNB;-AGIC)YRS312baI+s<I9y(^hOo;EH|AeXC~>3hxzaKo
z*YfA^d%g@OB{<2(>Xf+O^8`_IW}PFABGM7zQG%c-PvE}LSJ|2ug=+uh6wLVkQZO3^
z^!$JRpSk<>m%JD<u5h4K3F3kx-)k5TG#xcmef7a+*7OoFd*Bynp+9)Yn(cLAx2L09
zvn;EdW45Pk&FQC?a4dKrdlCiC<2YPx*Is^H(|P;j?L9-A@6TywX^+#uz3FvtV;Gwu
zxkB6~R~waEB)!2p{B@Y+*`?EcspRRiX75v&Q$=acpwQgg^G8Y;d4o;8!KUg_e_psT
zyLuzLdJ{|{TvnLL{(AFU>XJr~SL&wOw;;u=1Tq@gXt{jX1~QVLxFCWV<p!e7f<XGB
zP6eaIh+PDw+yiapP%j**>#C3q%oN}jXVx=s+<Zs8`6aj#FbC#4dri3vw3t*;5n|)>
z3>^`g2H`1Rdy$QYkITfz<^3O}vB0phDvNwkbt<y=pHywAK7UrX@$$?D&xw;zdalYM
zFO2fvrL#bT&nPW&!=ca9TI3gg{X}r|IVu4rrX4rnkHXknuKitBAEqg$!H3V8R;UjD
zadsfib~z^k;}gVAE_XCvpqZ6erA2W$;c9|WWchCnD{pYv@n8|b@?;Ta+Sm38tvc*{
zo$1rl`<jY{<V}dC%3#1R|4a|kFrB8GakmvsM)yG-Q*e1fKVcq6`U;+7BEzAipE7Cq
z2Tu=!>v%<rH-vcUR9$^F=ddYVXx{wO!DIiCGu5XiJCghfrY4rVPHdv`bNiV#h4}|f
z(!rP>(%gw*qp~N9DztioBz6ZfL>KCnR;g)Gcq+JGD9D?yl|`28h3V?d`?xQR&5cVL
z9v>*ekBy_^a-B9g#wC|Eq?lQ+CltJ}+H{7T$K3E7N2_N-7EqVYu>4=22q8d{Y7{mg
zz&~8VK40iOTWF>L3hn&of1>QtKf;J!`xHE5O3#i1!*u3LZzz+ss`>9Q3HROnq+$3^
z+Jq1PPD}708@t+GGG%6de+W}-x811^vn>1gyao9SY{-LxHh7FT?@pI+!Dp0_ce;#=
zGBZpkIL(Hd8K$$G{*3)KEzHvA=j=W>NR)RQ>jqiW5IT%7Fmb1*T~ToBfLxcRXxub(
z-tlOXUw;($tv*sv&I5~*>1`(J#$W!TJ#NwhUJ?WR<2;Ip3G<PuQvE9bAbFXI?vihO
z|1>^L$t2ZPrfn+3k-&qUQ)yT?0tIh6CZ0QxW8K{JlVu839$^4~T2xAUgYx?NYPo$K
zbKVk4SGvHWo%?uXSmry*n1&VUvfuAuA?Y`VE=A3PT2hw0G%tzbmKFT>h4uK&=EC0=
z))qc3q!;_ABU8iTb2J%uW~-c0cqYL*i64vahU1ya2k1KJG!q@Hr9TcV5N-HdibWbq
zGBaOt-lbEmxesX}K$cQa@p&>MOp^^ZLzI7Y-5XpsdxhSx(`3#fTv;!x^XNH4Wxbf;
zQ_Wh(P-19HUDBA5E<lS-n1y$rQj!RrL}6tdh!1SOt|T+gIi{sy-J+99=^5tghf>OY
z-l$B~c|svoS#(){W+~D+mgW<K6t^Kw?REQM>PwJ%4nuRQ-yg{MOV&oN9?Kb-R78V$
z?bs+uL0Z=&KUk6_L)qdY-@m`{;^9jW$R-Bg47&Gok+yUQ(^Yo+Hc-_aQJBo2HN@5Y
z5#|tIXw3R%02KEy%zI7_-)$P6eIZ#3ZLGx1s)VDQmmb|3JSI~8skjBs-8F1_<*qqg
zT>K+1Z*86*w~Y!L#H5;=xHe_I@fWI{qOV4S2af(#9*qX0#aB_YPq)NXmx6}a&7edg
z*b0jJoEKy^kV~gy#pY&%RT*JFAtr4$JuM=r=sG{N$92HWunXER3xBz=z*sgsVQ<mz
zjdiRIYg%}STnpI1)cZxtNo074tRI{?GpX7cm%9`!gr1O@keR`As;nVy4W>C_@3``P
zEFRyZNvcgtPnr);Bc+{YzuhB_6TPMm9mgHzZp^`x?A<tMhGyt+)l>~fQ~nAMzTdc3
zH{nd`;?-x?42>*u#9WMZX>LQ^eq@t-{T7UYTJ0y4IlyKA%3x5}%s7X}l^s-w0dwLR
zFUHmjk<O<Zf-H9sdmY7GwDp`#%7zzYq9>GmJh8*J^z-EN=NDlrh3MzF=VvbtvmW|%
z<*ZFW+?{rih=?vJ^B)`A49RMkU0ajR;K6XYmy>a@BMyI?z3s<Mx>z}bxeBH!@WL4>
zNmD6Sx_3<j2iCB6Fd6x#s9?vCT@Gu+NRc#{Tz6c%oH2<<MuX+dNEG_BnMjPImA?y#
z1PgOy*7NQ%9<dL=0+ut$$8G{xX0y_G&Nl6LWGM#`>2B-&-b~<IL{M^!2L055$e_3v
z;4^*gq{(8H9xcaFcper^8>Pj8V>R<Zv3IA|j8GmHbU`hi%m2`FE0>2Yp~GW)a$&q#
zO4o@qq!IHm{}7Z~C5da32~Se|{`%VweXidu9E{@o?qHIb?M)5he>iT=nb;dS57{YX
zrJsKaL%l=-5!~|e3Iz;@l>5%Cay*#iWzBHNG;o#wOJ3LFt~*B9B8kkO3qz)>a0yoy
z%GWEV9swOpH&!&`G#Mj`G372679mHvoQz4dW4P_EukG?z*wwQUnYxB1P0P4^h8m&s
zl3%+)DuUn4RhU~TMZ1QzmQq;?4w@rF#G67)5-zdK&;>iN&F2|BY!fjna8%akQP5m6
z|JrlIwDk%&tJ{N7&0Ir^o|WcYDoV`i(Mwi7U=C<(=As}#;?~HA#kqlTJ-L{{MH$Io
zdaqy0QAC_-=pKOGh<~(LCVlfh#l$^vJoAxT8HkM_aXji?UmIeeEe;xj=k1L%k8IPT
zNmr?3uH`K4_Qds@iEK!MTnV3W?lv)3;r;hS^odj1G+bK*%1qJ`&A2FXWyr*>WSMSF
zktPQpW=lb)T}drq6GQMkyKR*gjPJ|~$9WyAtYT_Dl0SoGVAX!tX%Q|Ap^y_HQUSM?
zZ}H)=0EHma(%<4Ap;{sp*h9JpsdeI_Q9Uz)puc(JSjh=!p4az?tfc;{JLUB*v2<J|
z&P+*|Z3bi8cz|M5(ly(6AfwMH*Jx%Tbrr~2LpsV&xIY+ouVx3m$+fxG7j2Ab)T9Z#
zT3+~LWn~5H)@t@!agT_<Ps}WlWWz%IGYYp<ysMSATbvbAAZWo`-nbBRIT#iVY5wAa
z)w5w0spv~K+lL->)Q%&cm~Q$VgwyZK3lA~zI+GsJRn6XnI2U%u;|Q(>E&Bwm$x66W
zhCJA&0*WT40j{8@&)Ge)Yo?i4uEB#`&NPS#uV@-&DdkUr<rU>|^Ku~U8jvq*5W3@x
zst7k6HSIZ>Kt%B)XEy|cC7<jFgnIx43FU9uhffRrNv|g_?fMy{XSlpk^E!SdUot7F
zUX89Vn~Q79{C_JSmTW=q@ovieUsqRG!3VO+`lK{GqQ`l4Iq0=*!5_MUm}z}-4lfz6
z@J|cx^(V<GExyU#_A+ls$~4k<VC^#9Fn_2Id95ppxm5dsrJ3&`Wi99@;4Rl)x<<-m
zFf}UCC-}y7_Fg|07Xaha!aMs)8HD-j&O-Rpf)nQ_Haw^I-dN#SNUn<b7r(Sd){Q8&
zqJi~v0MFiL-De*Q60QXRyYwn3BEz)xoXv*XhW2D6uimb$EqgoSgnN8te#G_3_;6xQ
zcY2e&35aU1KOw<|e&f=R;?t|;ya0=z7Jhv-HK_O%#kqdPT2cA|9Vq<*1>}C6zw#2{
zAIm<Xm_&V3ox7=!#ZWWo-p_qwZ7q#?93V*u)K8gAPdT{hh#a~6<o%g@MRumIa?V5W
zLE#d-54%WOqwa7#P^)`^SGY$PDHRO^BIl%GPYUp8Y>ee!+JLjE*A{i!(OfWBg|_)(
z&Mt{t=U^bZ@cd?eJOPy#)_qv2ya4c2l~=C7tDI{D_U>d~LEeshFPNG$xs|(K;_$m;
z{>j(h-adQ<`-<@4Zcunw24YqJ)o(}#_b<!;@>I_H|Cf#jmhTM;tzI_!Z^p?R!<Hf4
zx~cyEn&<wY)rrZa+9#MxX8@DzY27=f`S}$l_G)F-Ai$Xa(OmRR0()zz@oyy0?63?g
zaTVnmx;LpI<u95rQcrSvv7f>k&UPZNhW!>+!E3{v&#N&Q&FLd~s*}{fc<O#-bXE5*
zZwW+P5xG)1eYVqO!X|8jw`@h>%5p~P#fVbLzQ`M+lB4BxqF^?xX09X>Fy&N{FFE5f
z_t=;csQOy=P2Rwy3e)DQ0zc=KAH~<*WIUSX49R{9D>MwYigQXQ^gd@S{N4`*k9i|G
z?ouA<Y{O%E?~WBC8yXimy-W-;eq$!~A0Ve?#4%^tvk<l{BUpADylmG8tW6}z<8efP
zVV+8!2-)DXKbF7vBkI2TBlwFyD%r1z{_JbJ)A)-!nC_cCKEJrl(yuw%xo<3ccz($q
zC|BB^lV9wKabMhN_{FW8`=){a7kw052@B`HScrFDJT(8}A=`ZgaQy-xb8i6|zW_ok
z6hwo&p;^ewZjY>|n7=DGYDn>z(E9#IKeY9Xz;M0{G?x9~mfScZvFDA%l-Gc+Pj2~O
zKzi_ii$9ax5+5@S<cX7f<Nxy8^1twH^e>-&{TE7xYVN&Bw{8B#KRR`?d1hNKe$VzE
z=9m3TBQ$@o9Oeh5_8Q2`@u0!(Ip!ykA?A;{F<WTIRiLhj)Z8W+3w^^Qe{t`w_(y$I
z!bHp)nbKDo7!Oc?9}f=V5m~nz{*j7z@33{|H>K&Mc=0q^l1Xp(22E5csZy43qTcD5
z7+@;Yp*5f>HHX6<tpK^hnLj<Vh(s)ypCSgPDbR<Qs^7-51P|BTbEyBL=GN$+b*h9K
z_w?ePUTCR0eV4zj-k?vNB!kI_SM{z*+X!VKedloE)VB<Q*YqnX3JiOLG1=zow96M9
zEQOX{Xeny#o=2D94;OG<CiV?gX-!5WGavh^sv6|qon}&h=pTTIklux~8&N~|=0BR%
z!2Cy_FF1_}25PoxOl9~L4eD+vZ|Tn@>F}a+TYxK68(iM_4>U&7G41+p=}oIS?2cKo
zN9~V!CgzkB01zibGuo)hdnv~bfGNKAR3}z@X#TsTcW92VCuUAPb(6?I|1HaL2yD!M
z2UYVAnP!?l$AuGqgTK}N?dpE@_?%wV8`b0L*YbsWcT^}{9F&hPO67`q+9~X9UvOK8
zCxxS9^PV4$PXI|kw!iBa$2--dQUlMu!S(tYkM5cQx_387#yoTyUp!2@J)TkXlAbAK
zjya07fF$&xzY=RiKT1LSZa8?L^J2~dE##G;Zkqj7lTy@TU64(eM)I9^kWy`M<)Oj{
z)Ux@nF}u4Q^l+d@-McPH;!$eQPrYdFyIGxf20b-o2B&yj>ypWPtvM~u03c04VnYv=
zcildpq$zhv0*EG`gLZs9iW%Y!nsC2I?)ybMZkhYFchGC%U|8(sW<!%B9Vg`m-8Pg6
z8|4$Y8F(1Q_Nhsq?StVz#w2^C;%5=N>ZIPDySF@)UP*m(pSVr>Yd&qL2Gq}DJbsAd
zK9Ww*V8`qHFBQMw`lap_AL%}aWHB3AkXG?o8sI~Oa~U&qkl6*7teQj9>qQ)Dj^5jG
z9h*x6738sudi3&mU^_95`G<=h?Yl+&hGiYEzqb%*j+r0Ig#pCd36LUCbBi&@9ba-C
z#?Av@&VmK0O{orjzZiwzF2JPwJ`hXE0uwBJs0|_(`-Pl$f_LaDzR_<Jhhr3yL?YtJ
zNQNKxCkCa;gP|bGxO?v6ac4kNx&*2k#rCQK7Q{_E>E{h98BZ<+wYIRG^!cRU{XVfc
zECHIM)5!l49nHO%BFUJj&h3%eX7dWPNcfE@Qd@uw7RTcrA4$4Vj|V3_Vj{#rDYWBD
zb7%paaSt?xxt0x~$5&q5938vIgz{h5hl}xm9L3m`&x3vs$nJuFFr)##F31A-jBn&C
zs?8pZ^mp8oi-HRmNY*^*kLy=oyGi#_jwUX?ag&jjJbO;H1gSyWe&q&uFY)(+@EtA^
zrbP*e?2ikkNcaE@oBc|2nE3mjI+^m88YES6w~@hB{=tmfEa<36crU^8L3bMWwg)47
zUhI)S9!Ryl0Vu4tB`}65^y5nI@QGl;md{%vs#&_a?F?paDykeI^Z3F2o&w8Gfo5lT
zn&GMCngnf4w5D(_I1e`6IUi1dnLAJk-={<VH0k#NQ5STcOCW_D^$b)-+7P+%$FhgA
z;ISeBdH9pN#yG}yh$NC}C)Nvk@`uV`U{~f4GNA|6k@+P<=*t1QYj$OTeyF4#V`y#3
zwPt{N%<a<w5x^|SDBX;O+%rr|FXk@HeP(W`#A6pi9YS}s=(IQ6Z5~5=!UwI{YGDd|
zk@@K*W4@B1|HGgM_i{4PQ`2vaLCW+mAyyi~2KCeDe=j%s{Cfx*^<U{~DVYC?=D&y*
z#{5?{|7}xW)H=Z<wZqWZq2e97h~n>f>9`8&_L}e7Mh7%RliV(dBswWy98sH{q_;7;
zzU=eQd-wC<(*ESlxW2@{8>TpYp2YUF5DfHvJNSry*`S4{L_?d#H1Z+enj5|c->v!e
z&HP8y8=;+3^WRtV9}#=UgjtEIBMOcvK4Ped6C!9f|LvLocFliG>k)Bi{`>MT!ocxr
z)(!4H!+wkjaX*x?JBGNEKX=X15x;tz&=4-;E?<|I-2{04vIkzr{O#|??fTt-(Ihu|
z7T<S|8OAOT9%wNxC!^l%VZc{Tt63X!sa*q&=M!F$-9hVEj!>h{|Mm?{_z;iI@Xqj9
zy<6r`3?zfwnl%|CaDl0Px<0P;4;Z_g@<lMcKHtV4e!A^6Z@a)F*V~MZr^n{lNTG&M
z1O_vexs7xFH=(KVj~yv^f=*AQj}vMAkl)&ww+qAJ(Jg)?x3e>0DpAM$K&AGeeJ!)R
z>YiVYaA>c3jk@f})!^Jvrv)0o)nqs6(x9)KN6BS_knnZK(5_PQ`k3*#T>*525u1Pa
z9{4Z4>liL@R(s%IV~p{Ls8XJ;`E^Y#ckdg_bIFSJn)lnak^6DRn5x%&=%a&uvqY`(
z)fF$)H=fQn?BqAunr|2w591rg_6>EvVN~BRl5cjozuD#fW>@c<EciEB@Nb4(=-~@D
zYw$@de^9e`w9N=a_WG`Qz%75(;Qf^w_$piebvPLf=@fmny?@1Ke@%v?qicD^8~v3x
zn%B%whkc?3xa8f@xOLvV<JZY}c7PK<XtkQj5g)<(=FLF1%skLUj@!fo&=25n`qM5F
z0<a*-f4MIi=&&BUou=PBF!O_lX8!uY4V%N}tocx826$(8IAN;Xkc$)g!)re5G23Q%
zu^K?puEP0cY{u=LsJVk=b~zgGp+1<^xpZPKhkZHdcK4EIzdf_>WGR!Kq!UA`)7|bj
z`LA%*c8jstvd^;33GP3&0dC*N3|ixu0Bu}O#{0}|(fvY*k?ABkjbC=?Us-ngliUq%
z={G~p-UAwjfD3;uvYzyZ2GQ~TKNgt`2?++YaQ$1p<A$<*Oo~<eV^@pn7-rZ|W+Le@
z6enRd5fB_zinw!lymy24PGgT5Gjp3-$(T^jUi#G^GVyAI_t{~Z3&Z|o)iDo@=^R`o
z7i{kd_JjYL*X~+0ca{5n*JYwg+JGLPUeK-4qKoQ*|6#ck(agg^514z5M%U$Hw8S^>
zuOTjGi6vc`JQ)nlDFo9VU!#E@b;YDdyE(cAYuFqUaRCZKJ#c7nyv22X&>WL`vp%X2
zTZ_duRL%}LIokCQ<+Yt%f*JH8!x9O1WFW`O68KE?1~Tdvl>$firBUC9?8mGa=t0y4
z2Vnr9=cJO``~ibWy}1g1j4?Fk*Saks;4D$WY6m6-$ClJG6qR7L=`n5%7x%m*pL&C9
z`_nXAg1iCTK=*D!JQ#yese9c8hhn&ey!WP^=BPXF-0`?Th>BRKd(}0>9<wG0ca|{z
z!f36BDHv6!-^OaNQkAFF#*Pk{L6f&4mlZ*Yu6jXY)Gijwu~5v(2DU!*#v4+2o(N;P
zH{=hqIY)BVB%K-~Lx|cj%2KwdmBU&RIpHm2h`Vauby>ulP(UFDX&cIkZ(ATc{#(op
zw>6%+kHN@08i-l=S^!t4G<(1wv3;3XWWjq<?cakJ<vlh9%zuT1!rt3C4f;DWxIv$V
zj)KjA5=0FFIl<5{RJf+>frj3Kesl&86w*!jlF&H6PF6z>5H4c{ACSArjR>xvMbZ{T
z@U)Ll3?U93s)9<Rz^(#PK9G=fd7KXhm_;PQ=UZg+T_;j;py%x#tc1xb0=(S=gq2SA
z4~rC$?|V@pdUkA@SxAu}cldVm!T`Rs>~3|iI?ajmr{|5azrbxFXb;%$Ap{@;j(^T%
zyV<$I_**<0a7p3vTfHtz7e~0bu19<&xByqOfpu>fC~xe^CVaGKH52q;t6cz!=~Z|P
z`2;f6*mm*RS^m?OHpV<*IfMp79eGq|@REM&lIN<FZEzGG+q-{bJExUv-121YPrr~H
zlG6>v^vPB341LDuaWqJhf{23{w5d3q+x7_SE<fEw<=J;|(M?K&yT)WVv;v&=pf$O}
z^>hIj2lKFxliMEL$uCDQ4E1-S^(~cAYfc-2V;I-iivkstJdmZ0)jne|!MvobG^ed?
z8xVv>VDr$AM<qW*t267y4}!E^6%iFlN3MHo$||3&fq6R^EaM78hjt-5N|;F(Bx(3T
z?8w0YD5cpRJRIS2pumYSMUuUbZOafg+_S<&Bq}*58z5L5O!@b;(R~a~QsRo>7ex6J
zbKxiMES<Su=X`uyG9VV5nKlg8G<_f8eTyH?+^=(4cpj-5`qTm6%>Cj!VI37}xR4t_
z6_=M5&Mz<BrP2)WIC2TeU2aR8pRPFFa|ZjzBWcq;2j66~+>4?;!tRZSam>*6g(ugY
zgl^G28mhG0Z(5n3xoJrmgwgYZ?R=;=5I44K7LT@166z9_Ew^@p<Cd_%dQW8Kb*G;k
zl9cd1)`wDFLCh6Yb0Vzl+h+SDiQ6(MgS!P<_!q+uS^7Du`r^*q3ll_`5MqRur^WXK
z2|34(q7*#lb}y)SA*JP!Mep^i<BmXaOK4d`uU$5;2@CcBkrZ}>I2R~(IUEp^-eyAW
zV|kJ&7Cf%K*bBk=DA^rh^<?kL@3$fGBYOgUq#iUEZVZ=|6XNov=-=>YV=(i^y#AP+
z`g3w>h0YdQM*e;n*=pv8Wx#|*p`NODQ1H75jf~FBeaO61bJT*O9Kqt4tfKgGOztwa
z86<L3^2^5I(ee7l28(Z)wN<9M*io>V<|g1NR{L_BHt`1sR&HeZWH>wjaA9_6IE>qS
zw#T7(d$O3QE6OP=fWNqm9}O8JLGgH&;d5)a&g|WA1Ao?Mcw$*pY}VZ@l)zRGlpL8o
z3vAxTq>Y(ecSJ5ek|KAp`PdTrX433goM;g49+V}S_eU0er9Tvs7Ve(Rmr`s$%}N-l
zl{vc*p0W-0ciR=yRE@g92R%o9+Y|{5xHLDl3W@6_+*e!If*8i*LgdPC8v_@Z3Vu0t
zEb65n3R;v-ZJb$Pq*Tfd(0#J7K47DJuuE$rb23%NmL1BBfvM;O;AHM$=%&pr+pzBy
zMN2X6tceJFtQ_frHk_F<-#Knx!&1T^BTFGCzI;$yH*Tnj>C7n$6cIDT8eNF|1ueJn
zVLEfO5WEa7ok9a7jmf2&G*%&eXNON@{efQ#GazMrQgR$9Np0e*p1b}Jto0Jx!@yc3
zAzgaGfT5kFA**&Vazd~`KNsq!VgAj8JmyR$mwqX1&zd8))4uR*>xHUh+Q!Z$AwF)!
z-Fq>VYG}sB4BHZLWudKa28@;L>IB8RNmcPa<_ZGDj)V2I=3aVz{a6fe*%b*|);yIj
z;~`9bZF}G}=fkZth~LzsF01y$)uYV<#F!PVC}@<v@-`GoS1_Dp&&XCEy+9>v2~1JW
z4n;OsK4?_;SbW6fF|c+52E}fJaQCEO@5hX~d4WfXtAJ42&H{w|*z7}J2#hth16!w?
zDdFD<|GuI-<?1qQzBcF^DDFG6I2iym)u04e+C(a)yIuPQ2`8M++F5h)BL{+K`#rN{
zRtUwqwq3rJ(Ac;+*=4I9%5&4MHLv^K@uUrbIfhhd-%OY`>RKw~-u|#fgq>mPXDDW+
zb~T1$uTU-GDpUm$p=g8W$z``yb%ITU(rdz#nR}Npy0`ZmqDfb`YcF^FI6w_N><i$J
zDLNmM9L;1*J^9~t7VO4XR|cvqk<lDMq+nRM!wJ(f-e;%nKBb={nuIT_AGvV&g57_D
zmffRmTD>@&U};@x|0t#Piv}(}DXgBjZ17y34hO!ddg7wNGZ_V`>G>zjPCu8iwyNRa
z1=>!%DmqCHRZve{I(RNx(-T`*Kcl#Pb1?(~C=xPD*afiWNx1au7Hf)ItSa8C?w2oi
z%GJsaDT24_`^OiJ<MTae685yn5hCyUNaQ~kbUiYTIUdm6mdM>IRzLO?mEyK2^1AyW
zA=qJAr$kWO12I<VC$OP=XpZ_;Q-Nb~HL$#iL+<T%MTAdx-M%*DU_;M%C?m#|?Jo}C
zbpIUWQV_=c3^$*p)i`gS*zF*xo>(c_0@Mbr*D;#|`L-@}q1<SREOYa}2czya(MO?d
z<Y3e_ADE6w;&DLL#P{ju@&XYmd&BKMu&0=kkp)L{1Sz^0+3DYn_}a>vSn}te6aR~Z
znnkh9G_<MxNx~jih(>BD1VnYgb!iRp;NYBo0?np-PJGvp0bPQKVFaEn<C*pg5vG#S
zku|dtvp=%%EzTNFt~BU%b$1t6lU{ERwb}l~!_I}Z;vpkA$4DC3x4$n^cGR>C_8ZX;
zPNoGopb~5R577j!(z<?P`Ik3>Y7ZKz@r%-;Ikc_&q?W;hlNaID7lT{;6j&iSl3g@_
zV8C8(rj`=uUUlQ1Y_)aDP<*F|h}+&a&6krhED#V0$ko6z<MeymszNCA$Y|CuH<`6O
z6w@^C``}6XS}ckyvY@P4BgG4`k9R`Mi=;yYgNF|~!h$@kmwhU@P@<%hEW;od`H>%x
z)k?8UNKE%ss2cfPwaOLSWZI=3%E*Az@AmD`NQr@%W|7&2IO#Us(5&TLjag|le1<>g
zmi#)iKSZ2Z3hK}vdt*Ouu-mehjU=4m-<CM?!?B}CaI~BSt^Fz3ED0)s=(SbJ%*=Fe
zAK3)lZJ^Uh@ptG*Q<|$J05E|Ai2z4(mgB;4HM)Rldwsv*SdQXMEj?b9W_<&EE&IMW
zvjnx-+v4oh-i?%gmi>WBu#OYwAY3v{yB^SYJdBz{`)vQZhWNCxG3}(wSP*sYi-T#+
zOJO^BbXPOFV@-a~9ipb#DR#*6odl<>o4RjyIhclR%Do8XtQ6&ksOTwVzW$B|{ae$o
zyyLn1F3WK3{Ow_b=`KJ@Vrd`Dd)GIAa8Inz@dyrbegB+5DL0_FfL6xsMb`Ao!1007
zB3v2lIG74*6gfq#Uh;#R1GbffMVJh4jV(&yw*1u04=4mKC~ODQHIGi*i!azB0a<HU
zEhLN9B2g*ZNjKTidq;p{Kj9<>pYiG|=?9^QBqF6irt3p=*=jml;{sjIqUpQ$H5lmj
zf-%^y_Sr*|TT15L_ACgB!ttxGXHAf;HR;tTju}L;&QQ((i3V^*!mb0aL2tIcPYfBO
zg%CZWjQxvlQef!^LkAj<c%|Kvqg8XBeY54WgTj8Pez997R9OC6HWcvj`9Zm16*tzU
zfFHyJ6&jtsv$Bpy7Bk9Y8)i-NB(>y;eFEgSnSuU<CA1E3WeQzxO#`yp2Y{DSB#`+7
zJ&KwnQLntdC2^E67OQ?~Kw0$l{%36h8MyjNo+8jZOZY8$H^Tvl+xvogF)sHgtunzt
z;Dyl`dTngrzzwDprv}p=4KX!Rh*@LfL9d;ok|UWcnf@PHMR<GYMRa(n8qU0EA-K9o
zY+<vU?gdyU@ldBn+D%Lo{m{>0egha5%h${?+_NUq{idk%$wX_PAFQ{QSzWcurNNy7
zUkI2r@;2K#>Rv*Mfv-+t4V`}K(bXk;a;JX5ChE45uxXMT0v!I;|Ah3BX$$$$O(Luf
ztllZoWoxX)Pqe35k+|=A_Lg7+(V=qqHd?tgz6IEWIW)v_cKX8LUR`?~u5;C4Ps$5t
zQ*mJr_Jwm=ys*MyaWc7Jn>l)W*G+hWaj!Xq6z-wf6_-={?EpV{@s#ghTMy2PT$LGz
z{p1feUd3%iCn*8)z8Dt5O%gs(T;4Zeu2lc<uOM*gS6~?;!-I@cu}6X&bWy4YnJ4{A
zGcWK@bMyAC(M|*!-;^0V7;@Si4YIn{lyJ#$KwWsLfyDaiEL1MiMJ=_=-mVQHnA(YB
zfVxCeicF2k0K3;$!g+QRt`)Z}p=Ftm`Y3_`UsGYb-X+yG1jf{=E-1(@cV6w=x8MWr
zV@rUHTciP%Ioa{!E^^e|g`)+#LQdX0D=gD^!y7kFV*3D}AUnnj#}LaUeqpZNNwfFW
z`h%I`+a%@X>Q$b8r+ekRnA}jh2}A>klP62bzP;6}{lU0lLC0xH957{k@3D%IeF+Oj
zWkfx7?FjJ;anQaH#r4I&$-epRsQF;If64s{@&PftB#Md|1x~Tm(8D58PQ<@zUB;~6
zk~>FOaIqpg#xUq*_{PWEgW&YGVU5x*JPeU`-y824K8@|#%6-e=V#_V0dTxZT!NDNG
zrcBvZif!<!<cKok=b3wkE!D_9ci|xKp6_9X>z>(utx1uAM%@0Wq3!Cp2pzIIofZ3u
zb?agqX|{4^w<e+pGPXB>-M#<Wl-)BcO(de%UmOptx~7|y5wifNn~BT%2#}`Mj{Dz_
zAJi*eW>4r3gcFK|fu}9irAd_{>K)nQhI-|&n^U=DHJILd!?2b-egVgna>l-K&cE`K
zJc12osKeBf1!-*(i?Yz3O~Vq4LF6}Zm)(P@U)Y)d>EhOU2r4`KDgYRZ1K6QA&<?dN
z{(@ifHM<{!n`<>4?iy$?=yVMY*Y}!DDYIX$6w(ghT(8DTJ^bW`FTCo>+ztnR7>P4L
z3U38o3qu0gvGO{pPs(j@Jdo?fM%KcUTw$f)Tx$Z^ea?JqD?u9k-h>V%$amPozYEl#
zRuP$LH4YF-;;>YRc{FrNOLVC#8B{i}mo*Kr;t6Td6-YsRBPG-l>s|jME%my{bs@dT
zX^ORng4KsETzI;aTzR=~JrI*)ycabR#mTnAP8up!_fCk4GO{1xr^KPy;Ju-4*70Wp
z)S?v!P44WCV|XHi!4yJ~ZqyrL;3iqz#jK9KXFTe(#Qw#gPu(0KOoSQ5#C0NHaFOGo
zA$PQWv~JOcp0l^0d^+jd``j<4gzP-flF7tTM50U}Yg*Ynm+z0{Jk}cbf(kfGG)IeE
zxY!})WhAoh3-jAq?z+}gW9(|MN2t;}7pUhOb4xj5Fzzeaa4q~s+ZMiIAjHbp&LoRB
zOG3ImQH66gYhKR}4Ogs<paK-2+kEuzAvsI57li-VyuVI0!}G8d3qL@c01HpT%~nm@
zwvyXm9k57t8IvYC(qhh50BR2J$ZoRosje96Koo%J%f3jgYmP;5V0Emr`@%4V_BZK;
zEr_V5#S27+T5FEHg*Lw%D|w+0I_jg(*hfcxOokB6d!tgZmxXjn9-K@{p2ZePo{pTf
z(_9Y9i2K6E2)VeH1+WWu!9~L-g6$+_{b=2GE=a5=w;BJ0;Yu>OzGmx2d(pXPd=Gc<
z0$LQuc3L}1#tgjaNo1*MA~kt=f(BFl-FcmXh4rbUBW8PP>cUM|bYa0u9TnR_o3#n%
zZw*ogNF*YOy%0RJg-E&(s+QaYH9iR5B1pA<BZ>8hIJC37)DK9dr{D0P4Lo>a`$DKt
zE^$0?OM<o|dy4l`fYX}yf%}Y}{95qN0O)1A3!64)MYHXH`t{c5P#wdJQi_db4Fzdm
zq@ORyHGF3<u%28#ZnYZ_ErzT`#LFYLCf6iKBGXLryRa*TSl4rE7*u4}o-jUrFLj&O
z1KcPV-Ndu-;SsYSX<yjdRs!`v4qapQ!TUFvzxdRIt*n700aL~|ma8-eUVe^KNU3$J
z<nu&p`*1qFpsSu9(S?Hv<#}Oc(-w7g6NUx`JrMWB*ig03RgICc;4VB^)YauUG%}Ik
zfZ8QuY>`;yhj(YN*Qr=YTxo-Fm|pJ*`HV$%jrzsZuPlLiEKPb64OUw`*!EOel94V&
zpjBNI-Vw0vezB_?KZJEyo*zECKnF}`AG4>AC9)ykvWq$zjMb7=Qiy)+&7}n#C|HTp
zahcyc%Fvt-Q!&8OA<pIku#<Ki$aI|p&hfv~4gO94@@sy}FZrEIactT0o?P__0(6iW
zbir8ys3+$e!RB<<BG{}zQ7i7l7fyLkuMIcl;kI*}euHL38)H`4)uoeqM#BY9W-}nm
zm-E~&WV-JfBg~;}mHAYt6Qm(sxqx}cMY+GM)0mDJW6D(^2ce&P&iZ+e?-m3Pke_Zo
z$nt3yvzhpoZ8H|}c>`_58`|um7OkAwALowVk$`-p=DVhUE*}NZAY`GqIM(Hr&nk``
zF^26U33ds5V2CXdJ0+n3u#Nc{8l%EyHiGrZ-Eh#yW{`Q2vg!?jOk0=8L>d1a*r0YC
zOV7GP@`LS$>!>#Ec+{&&Uky@CONFAe0zW%z2)!>PZlQsYC@5=Q_<M})YDM&Rof0)(
zKw|H+>j+-r%1RREn6$8;42Opo2g*B@o?Z9j)W$VO@N&79q1aD;J1-<E3+>ENeC-xc
z7RYa1%PfA+nKxhrjd*k~5wV0sbm4+J0}dB(Vbx~ZpSi7V%ZGL;h*XHY<+4wx!2~EX
z3ZPCd$cMpFtLU&n_nc>E*~PWm21U~Is|6Wb;(C>byfIplLHITqFa)A@N|sSoZptF|
zP%zkS*WfT^OSmldVyQt}7+Ckv2V%>-M3y5(@?Lv=F`Y2g4fMwj9{95!SYm4vVJC*~
zY_3)UG!f+A$EmK>QLS1bA08pMFR`(>otOWhP?gj!rKT3NB8-NX26e4C^ERH@Ehmo%
z$C*HY?=}G>BhF;?YFkjYTdfPHUS}nud(EO*2U0c|rhOp}U+Tf{u$-d&@abN|;GW4B
z-C-`0D63hK_}^_>svUN9(5@OvEZk}8SexVo5_qHqbJ^XmpY8`XMV1PvhE^P6XSuOw
zz=1h%q8)l0tj6}@zR1VZ8uWt)SLVRS*$N(<b7+7bi?b>iP8f69f+EQwT(^&C5whjo
zzQi%LMLeeP$DVlPNbh{N*>ioz1{TLwdC%BI2^#}X(+g!c$MMpv;`>5}C%o_h1NQW5
z2=8mE2_IwN0#a=+H)?tVk&E`g84SRMz9b?4E&>hEWw+mU0Shls68;J$37F;_@cZ#Y
z!~OEs396fZTkIyt4-?pAr+IJAsHIu`Ar15;4)IuY=B267bHaj-Z6Cb+uPv%Jt|TYQ
z0QHHhC+-Y-@k9$08qbMD^u*lvS7htb3K!hR2n+@tUb!s9)GsW3)=i`{&qn%!k%0%h
z@Ua%sa=1J#s-A=kb-@`Bc;kxQzIDx(QadTIxCpGUq>wXdl4pgqkzjPk8GhPko#a^`
z00%r~1>EmRKY**2ml#tN#eSE}BT9iN*<}U*$xX=_8=_C7BKX}OSesjLZ{g5kVJ7E>
zs9ZfI^&DW1RN6ve2?MKEJ0>rK=kFZBoCVX@*C-pj7L``;PR1L)lSqJGKRF%{^Z5R)
z^}ihtSSEh7C&!hdP`ah17e@|t_>+t<gcmBTV9ItZ&?96Lgo;H>`du^q!l%J>^bJ(A
zvBcNlkSzK}=O*NU>fhZUga$+4wsVzJdAe+*#`H)e2DFUH7IpN}o_g85G)vuNgC+_b
zDSiw^gqlLe;lxE7a@M}gwipzLc-}UdfFOui?moj*)XY__1&{xF$v6LfXfy#mBA;ic
zMkJFSZ-mMbl|{+QYENgiL8Gw`vDYwOHl3i}{FGR%tw~~q&Nd!<u{jEq!SzuX?O7Fa
zwb@pbFd9h(hp^$zeYRFTP<Wt@b5G|!MPEQJAhawSc1Gf*Kos#6iKq&9a_+jR=Mp(q
z_a`C8BvwL4Hr$mwTP~?J8B3Vk?x;1n6Ex3eq~b|$sX)g&o9jO{{LAo>IA1Hq=!NY1
z7dVBYaWRYS_O+)z+XA~M0}W%x_-WxkQ8B3z>mqD|fRj0Dc};XNaIF{Zw2R)-oZ65U
zbl{wEHn(dKx_iM6;b->8x!tET`{NwocZNUbB67BRc=OA~`#!^;a|k-m@aNn*Bbc@e
zbgKODj#OL%^TX>NGN>72Jr>hjC*8C!!YO%qP#Oqa#q?Th^EGdneCB?givmN~4FHH0
z6R7}I&a|Dep$lM=9ooU5*JKZr6mXjx#_GO!@V%xp$MyPvZeNiKZV>_cLCS`y3*tQU
zq0hy(L_0P(_EesQAG41fby+q<E0_fls#dbG)0GUYWk!2F7|ntq8VnXZlOPRv2JxgW
zBvRibzCdY)mx&jj9Lewdq17sM;H>9`;0DL>7@XdrJJcEoSBTfZD<`b6nu?_3>{GfP
zql=D~jGe_FOILOpZ{cgx&si(C?ZK!Tgfz3pbbR4nxsoiG4f=8pR(1+zxsE&Lvh0JW
zO7ws(mEhVOQ!{;c{v^-@?#U~<CB#L-Ts#8u&EA!WGtD_JhTRyvPOQgFcmdnt5Zlc7
zXu@$K1%9@B@iY?HI36`2ZXBxyZ8<XRO%<aKT!6wvFTzNCh9#?j5F&l|(~P^)9D2pS
zG9YxG-frmTc6M7&c{T+P5Cvj=hbEd?@JRsZhq7g`KJNCFIv#v!rfwpn4G?E>T6De6
ze9>6_yR1>2t{eM~@1DY_6+Bzgfgj2esIc$f^8?<SU5&{U?(7^^vSK+l?iARan8B=O
z!?obr^A-#a)iv+;2iIa~5Khb$@dJZ*J7vhw_oo?7{)eEB#Y5>T_Pw8GrZGF|{13Uk
zq^ktI*SeYaLx+KfZ*BFwVjqIJodr+lYIbMp_qjMtAvJ^>w_WF27*eOj<X7)Xh!;Q!
zl@oh3uB%^AH5JZk*f5nr!ZlP>$EZ0J@c0TW4W}^+S9r3-AA6%Z_gFlN!O3JS?zGgD
z_qe4loP1e4#l618eYv6|8C0ahdnSkV9JViK_EI~uN7P~sVjo#gGMe;TXBN4lE!W2c
zp^!F6B<X$(5s2nO{vvt}edRbGB40~VE%{O~U?x{~GaF@E=8_{^C^unwt0W*{;Moi7
znCT)m1b&Aohx{F5O`94-?$REBn<1Pd7hK)pl}iahbR;O2BCAPMwGfY~cxy)~UcmyM
zG=3(3&mk?{XNPSS-$!@@@os5a7GV@$*#L7LIW7EyBhtA@8T~<@oacSQ5%Cvi7>Aac
z;(xi7ph?^FNWW8bYM`IPaiW++ez0bA@Kxm>=REu~>+)(SV*8V+M9*fJo4#%a?Ns3G
zj^x=CXDi3TYo|8vS!;gqt2t(;BZ&~GHRoiA;B3G4IIIQ}6>{lc1ia^kVm?8Oxfw9O
zP8wQ%qYN|IR#$$&{)bE-uKSiTx$b*gptNnB9B>zqk8d_zP<Xh&-K5P?XC#M`IZNHd
zh01g~OtBwzFh1$qerYkFV?-v6kpy5MIP<ANC{Gin#lN@+Wwo%C(+P~UkxCLSv`r?p
zEs35W{-T&3Ru`JoB<!YyJ(g8*zQm@i{V6Fk%+T>No(>(i%|8i9#2RkThc0$zk&g&1
zA=_cYfvMnvR=8r#ovylL4i6RZB^N`bqL+dUEso|5`56CXtsR`2#Bm<pJzHCd`4>Ul
zi-Q!gMd#Cu$NJ{?#Oj1&qIQ+<rkhrhb_iD^c4my`uZ-8UGirKYxS*&trzd0aUek(B
zNUnU4X|m%6aPNLGa#T+1ejsXsq^MQgm$O|^uO-HZHf!+F1vz{xVt~q?+qh}+cpQXv
zb-^~%077>j@R%4j^sqPBb_n%D*cU=v23RwQP%b=n>{ZX>!B9QHQ%Joaoq*ZmZR;kk
z?0j<bc(D$lox83%8|k5|o!6MP2FjB6>5U4P+}eE6l2|KdQy^Hu>i%*0=xbrG!RNZy
z>n3q)AfX`dB%^?RV~!@g89RdsSo|3Ws*i6G6pA;EB1(xY04mCp{pxYUx{ZwB3}fTG
z_@8{6L%%UNH7%lT3HOz<z&<hPlt6DX9ym+8ZvO;Gw$((ka!Z6D=zXnlcF`zolViql
zxl%p?77$c5M*0f+V^;re=!~&x7moE?HdvO95;45CL!g2V?7TEr{6@E(@b^M)gA3i*
z1uWl^AZ=S)hm>jC2<$U=t+-2A=aAwT$Kh1&>=Irm-L$J6`4vkqF-ASM>AsxJx*s^J
z%H7y8i-I-z^gb@$#LZst4{nn?&BX7xs5!z3z*OJG?<ZU;dv<j<wl>B1tW?k(R@znK
z)pk#6xwYA)-FRmuDMp`;D;Xq8nwkW$vaP+Lv=dKRXn%}x%9BL^9M8t)0;Rxl?tw!S
zSr1$K;vOi=m}p`YxyDa$%N4g!QqBz$_sV74yG8~!tSX`Ert&n~<G3&ORk40lDj!`$
z^}YHL9o=Ff+N~VbPxedx-L;kATah(msdQ+4Hbm-iHp!7q|3JE95xFZjKl$PWmf25Y
zrlCK;N1uC0n0#{4E1)~NaQP-U!g1Y)y}ytovC7IJNjGU)jQcLwwVnpKSeLB4M-3?R
z-jAfMT`rrw>j4u-&i>fSJDp@`>ZNv1rMGKz$-Miji!>=6%49a+*g{$y1;cfy$y>KR
zKo{OS$A{SGl`~{12hy`)5Ai4<Spat{OzsgVLrKdf&)~7`laqci6-nsA{zhP3j$7!`
z*%dgk<9K`-c&Qq&R)h0VovdXMEg5L$_EfVg_8z#44Rs(srt5hxH_%Cqa`dTwFKnoB
z#I)+VkXmIYfE5jt7@2Y5=4d7t?4>-4Xu(PBgtw+EMhDG82(JR+`EA5Cz6e~;#VWBW
znOjH;=z;~b2JKiXQ5@U4b$N%XPQPL4Zq$)Ty=`gRt{0gV^5ED|+nG9AVBo;K_S0~X
zjER?M3uo!#Khj_CPG!3Dj*I?xLeLw7w-pIXapv~c_X<0G?+d9%aN&dh*Z_Ynw5?MK
zfVYc8)lu|&;>%iNYioVWbfhXN?{!_GrX>1w&(m1V%fY=3i0o2~^twY8Y=#~KJE!(Q
zHjciWOM5nWS`TuIv6InA?hOw%<7<f$;vkiyF}u{y{)vk5a`)L^eHcpzuA-LQxX{<=
zP{yN61d&j!eT2hd|4RKb#=O)fK(H9Tivw2}swm%sm-3EJp;a{Y6f<`@@R6O&Z;RSU
zcBaFW`<Ugn1Tk2yrVD_6VJ}qZT6cWBqYD<J#8&;<mMcuGJiKaF(i~0h`qoRqW%o#Y
z)F8ROdyt{@wYh%iFlJEB_-ODT*oSV@1Ohc1l!*fcx#A<7iC}W@iEtitRNfIZ&^MV@
zvu{-Df?hB~36SknT2&RTk(Ag$AWZKz<mzX?&3`L9-eeh@+KtiJjIRejIV^@fkjn4b
zrtxX^t`ucvW|+7%CP73=%Dm!80SYkBP70<=@TXHBR-LWlc|zc8+05PY{q$SM>9l!C
zC>-WaI2NWp-NF>$%rllCSRE(%vX&-;{+@(D>Ly~=*R}#a2bmP<OMVLN;fxY4e8v$z
zv9{e-ml>F`1Ycx%<F&O(2yB%v#@f`s*c-q~T0Bzl=`?QMBDJg3q3}iW&Dz_E0lOKu
zsE}ci#dbQ1p_Mpv%58TjdF1P4ONk&|<AHb#b4bel_`!ybcfv~<ANUAa8=L&AtvouV
zgk=Tr#E7MhWMczxtMu%Aiw3NI_FKQF{6_FqzoDwu8ONs^Mg+MceY3O@6_lY~+JMhZ
z3GOUzfEX2g{_vXz;3cm72(?Txm8&SSlri<A+<AGxr~;_R8()H5tvq;>Gn#f6u}tEb
z6$8!e515D8*s$(x6WQ|kuRWpk+jr3(#3bU{hA_~Hmz?Rka<g$S&uy`QEpgYCsv^=v
zLtk55Lm$uVk8^8W#ZFFV(ju>a!7jWtrLduDBbANV;v)6RdK}6@@=&RK3-QfHiv!m<
z4&Ya0Ut%xBTt7MIy4+9gS@1Eq4Y?EBtaxNv*oHf%ed_k_Dc^#Op4MN5bw73oWZ*;y
z7wIE>kyr;lHW&<pJEbPyW*>hW5S*ak%>FnJrkrG_m1LG7Q4ZL8-{h<?Nx{GDQFHN8
zMB`UbCyT5n?4k&zuSK;DBsF%<Yz~?(Gr(tt7mwf#$`O0y0Jwkz-M%{yp~x>vy_#;)
z@!I5Q>#SiMJC7^7^%4`vJm5}YF7^!fXJmg<YL|v*wb=;CfNXa+o&`Q<EGs^<n%gs{
zS5%p0)PmXrXc3;f-x*){(@iuYODL~|u5gvN2hOe7C-`t#1x;^mLx7`fk9cw(fdNkc
zK54c|rPK16S;WA}0j6WLNO*iEe`!%J9ynErSfzKGiNJq^ka)C7y}@O(SCGus78rbN
zo{OAUX3PdAkJ!M~+1uL7)*UcDmDRrYk`}sH0=%j8iOIkG#<{zPY{dQPUq18y)-DSt
z_2ovP&?qcd3+1cjsIXgGt`!QkXt`V{)XmSRS2UjrRerH+{)vvMK%HLJ3d@y3bY))d
z42tIG$tAbNMOzVldskepo5BV2uc;Rm>UCe@d$B}C`c$w`EpxXe`g|J6@54gjkjvae
z+>EJJ=H6=+9v<FC%O{1xNhA&Lno%Bb*WAjixO`qHjEY=gcb6;E&kBuy5-pz=3jN}q
ze3U+_!%}Lfjbm!@o+s1gf4|by3vWxygJPku9#!X##4Ol4HD}g}UY}5N@mFeY%ng|V
zc8j*Xq*z#PQWvMP4%FT^YGbQx+K|0!QXALBOZ;h3TOY9$UtH_7qvrQv%T$XVqttwE
zi?nH`JFYw~(HcGQK7Vb~hX?b4T5416dm4VZ&P#V)<oD)9A?g%Sv`ZDEUW9qv6zxRJ
z$J%X?J2h(&tw+4tr+qHKuWnH4uuCnKw|S3R-1abN`{rlcCfMv2v1d2bR0FI3oqk7c
zS_3mN`L|Li^Ws;x>0h%Scc!mz+(+e#TJHgfV}4T+*d(Z+f6H4%GvY}Rt6Nd+@A1E7
z{<n%=+(A0!f16zJ9S^$tk*9pPMo(qh!cu`3q_)F-5p+gpw87CfwX@4Dpfx}=ofJNy
zg$nf)O^XL^4uxG_V+^p+D07bmbHFN{h+E_7R;99Qc(+6i^<UJ`7N&unYuwUPg>lC=
z+O2P588?dD%ojfUIG4aSy9C40{?4Bp3D?-g(v;=58Nn)n{vkGpi^SaAq{!%LSmG_&
z=PjuV+G5m1f66`nY=&Cp!(Fi(U)kp4$sJdAXw)7-RgSringzF8-<FD|*dabL3O%F=
zRj1VWPT`Qp&0i~fG`^#Tdb3Y}@rBD&%F8jK35+IMZV@8b7Wgz+^JH5}8T|cNa(L|w
zzarq`nnrMuAUN8>M}BoU<9A;Lfdk)G<(O24DB3~oZiI6e@yVqF!duXoVp(RgIyLH|
zodXP~00zLxl?Mj7dt$qo<s&MN(NuYJ4*3Y(6nTm2j1qURxmIo8gI4{_e%LKk#u&{G
zjrNF88y0BWu1guXq9*6GViCYynVNl9VgyAPvx$FV1}fZDW-OcP^59iC<jrXEC3A;e
zx+|VgyN_joFV|DsbYy^pRuGGE%>VB4H$L0-Z~SkafT2^IV*TIp&NSZP={@7Lts-#4
zwqJ%CZC$xnJaUZ|>ioM#S4w$Gm~5@6!GhQAbQ@=a$82r`H@cJil82PS32#e-mxl?1
zal~6t9{{sWX%)*O-kjZgoZUN~^*0A&Rb1~)LVx?bVkeB7PwDiRcNw<#dB*{ZOcL<<
z+~w!3Vj6q+Q)bX<#ORt(>w7MUb8@)Jx6GxWu5JlqYS^9FEargh2463aMc?<C@4A!%
z<icT`2HB4hlLGbiq6JMlPdjpH(>Q3J<xvEPtn*e0gkH-YaigbKvPWiXhXC!S-#Y-`
zA#X~|BdO51HzSV#c%4qpLLfC|roeu+e+G0$TSYE^Xb-7*^`%!*RMbO>50;@#Xtlos
zCGFC6d|%qjf!~V2Z?nMTJG69488ktaL6on#@^K_+)4m}TV7BCIS>2;}Pi1O*{y?1c
zc-yBya(4jiK7ek3m!KHNT-?$i3?CD@s~M>>)PT_5l^eleF}_ag3?DlTLqv))kz-Kj
z)qr2s0M{RJ4tZ|4_;(BC$KnLwGz0m``}h^)lIgMnWPTr6K<Wx0t;uL3kd%)+>{XEA
zYuw@~qt@mnH46gN{H_!_#W4?XRxHR&sY(wAW}uf0#B+VdM{Uo~e-p<E#AHow5W*((
zdY|b{2D$R~Mp33;aaRDJOmlHiwSqmJ2Gk1$+W9l{Pvw1yC}%S%9P-UF7sI5OfFtZ~
z*d9;670wwP*Ngt<tI7pdN!_;9aoKVd(GB7K3drOcL(=KZHX*D5gFo+rInK9SvDIT@
zGbuB%$=@pL<vad%PUCfC;x6G)-eunXGLOGe66o9|_A8`3vQXv8#WJ%!RYq{fS+an!
zSAE}KU5<&X5zj!^-5JisJ!63`AJwzTwtDxvxO`m<URId~iK6>&Se%D#!Hc_0)>Z7m
zV?<Nk=99?#a9DB|Skz{Ob2?-Ks{Va@`L;+q2Uc?*yeSiiOl_SUIBxZdF+ualz33Gi
zxX$R`y<^;2WjZ^IkPnY}Tzuj#K|FlrHw2L8?)12zd5=B9UMIX%H$Y+ExJHu~8`M;l
zkM?fDM{iR>97u#n7(&N-$DN|3acgpMN1X`l64MLKs*q%~0Jw&E&rzEJ`?2hK<?|le
zy8|v_fa>Fw;4QuYYBjJ^K>EC{hZU@jnONz2k!}wIq4uV$7M^+LGgo3-i_vpUk>aPl
z9l1jpneO230V#-;pJId$_%qy5*px4Dx%xBA3xKZ%;Oi7Y6&${2#8Sh%WE+<{z;F|E
zNceJEw$-Xaz3frTyNuV(mjh<AzLj*Hx71Ljjd#5MyL|WF*gL0cnTRU?u5<~@nyufl
zIJu!#$dToyYvwr~fM)?I1BedxdCjjQ_3*&B%lzIYRAt2^bf0eHu4o#dDc~p3u(WE?
zeU%W{2~kOfc!vq?D(}o=g_-N`6-@nIg$MYSdEL!2gaZv`Q3=qtcy^}`JoFLnkOb6L
zFVZl*#U+HQ`oOi$$Gk=7%nua~@$$sKG)uHv@@MCDNwM2Q#uJ6_+n&`PRup45jD%Y!
zh<RU3^Ji}XGM!4mq0y@Y#$b^E(KT19_4y!F224$T+v5qnqeY93-vV|M=0$5`%sBzQ
zI^I^_c6(LkE+VNhL5+LVn4re}w)(c)ry3Pr30d?3DDg<h5?onCF|S7sD?S!|`Hg5!
zdG4EOG`jj69KHuanU+Dd@hEV;#gApj9F=)^)it-Q(U<Fz`wgz`V|w??r~zt=dS3_K
zQIwbTuy;*VXn9)(DrcnPc@!_r;ca&aGy!vby2WFyzU4pX@5;EUUzbsa7x#1%W!6w;
zUCMmm$Bp8!q>&J&C^D#|7}+P{xNy4yYm87U0hzYr1)j9V^}?5G1yl}Uq%jLOdc}lE
z&&H7cRKCz;_XZ>dB`K1b?+LY1Zu`Bgsxg3Q>EQlZ4~9GqP(R2}fyC-}{24)Dz{~zN
zulNw<K%rFou6Q&pd#sMePWxrgGJqpFEO|*zwZW6LcYDOR(KYeD1QK+}u=SAv^spfH
zH2IghM&EM17GLvm!wY(vz@WGZfzYdiGWuXK@vw;7Y7g(qc-KM64>Fnx-ZDCg_wkOg
zT@`1bA8l}j<^jHa#C-Q5y9VsVM{Z{HZ6+0Y51YrqH|7!UfwuSgWXwQ5KwwZ~s=szy
zhP)DYO1}*59FvO~fkK!SGu~vGc0=*@=RKZ5d|UPFG%i^NL17@C%WjCrfLj<FMI*I+
zcen%kyNZIo-L>5jPKWZK#*pC#G~jQiLyTzci`u_F?f|Os5w!c1!L;#qTMy`=DC7`9
zN1xBpX;@HZGf5Ssr7=(#ZSFY$tT?1HW{R;e*=6KX@BqjRMxn8~!-x0-AMe^nerimC
zTdBKp^?_R0E<|3AR~xgkfMC>s)LPXNrWGbU>m?zM%Yp!}wuO`^3$@HNyS!$uHrluH
zPJ<oxthCh1Qkbrf%G7q1utL;^A^}3W3YcWGRghMXm}My3@WonqOSeb4aKIafJ8BFz
z|E-YHLniQmcE4jP2Wl<q4Ry`D<>~Kk@m@FHv(Th2Psy&W#e^(ftqo>1nX4-B(wA3D
z50Enk>&<->>Nm7DjdAe<H+WqHf;dXeil*~@H=GaEp3^W%Yq(Zp6<VFwTs#&f%14D_
z-jx)19rCRQejkiRz4L{x$s5M4^|c*G^&4ge1wiFArbVDlR>zbXbV20Ta5;dKs*j3R
zn85g*rEOdVBIbI@E#z)?80H?o{sICU?BeYgcPI=@e&@y8hv2Cu;u%rQFg^xc9TE`J
zwPdKn>td%QsHH+H(*pr~CmKE+;@W`9L`OsQL^Vj<vsHmqjjqsYCt8Iv?sm@#fmj=P
z3g+0L#z~2|@Rr>F=U_RaZ__;s^3mS+J!<%rM@^h*wZmeq!ucV0JFS9W1iubyn<|`d
zfnQ>+j6vROqP)PESLw)<`^Bv&XMC$Thtzu~N~-flNWD+E^#h!nUD;l$+{1<pNStF(
z1%cb)7M-8{!mN^AwyF@`RhlD-68a!a>R-U+ROO*Y*Yd6iOAL@yzwd&Usz9Ao{^Hdn
zj5P<vRlS9ek;r8khRSL;`ydH<b~|1^$lT=lDbMN53^lqbZdJiffnYUv2Z_wPybX|1
zoNe-bvMnXfd5IqZnnV$ei}Gdk1sK$T%6+l>CEV3hv&tavYS<8ZRk5!y=qpb+w16%m
zAvYZTSd)9M%Blgg=@4KE4fB!NgvNVpNuQN-ZNB^}+c(gl4{9QUV?1wenBHDp_;J(K
zDJzc8Sj)kjU8BEeMXaF6Bcch)yLWrSy%{32e(cUz)E-*>qGNaN_8>kYjsy~U(2FeH
zAqX5%7X}9nP!KH~d?#sKv{SG(qOVlUFnS%#pj+deqPyc=vFb~W_c97mjG#cnsW7`A
zZEHz~sd^XPbD0mt2cGY0+0hfx7eCS|eXQRw;8!PHa=T1iYm>q85;E&D^QD{IVD$k~
z;d`1*xf7Mt;Ph!Ke>Kes8^NQi)kUCP0WD47P@=;Hx#<A9pCYXR-rVx<6EmmUXeYu_
zF_z&j??~7M^2JQda0}GZLkUgc6B_tBlZPp8^^&?0%+K2N%Ua25)o7&DKveNMO75V%
zTHZ5rE7gHRa4Zaff3Y2z1^W60Q>%Ewry<&ivblE3{?K<LXg~4i0f*vU#UF~M$VUh!
z%j;ke<SyeI55y-^`{i$5p|QJ*%OYZ<0kl?UEfJ<%XP7y$(?30eTAW9D%B1n`3Ewnd
z<u}1&XOFi5ltb|D(A?4up1lFt={Aq4ZgmERj%@dtQA76-$&~r`?j1`yK<J%E@|*5H
zCTi-3B-$jca76@_d>z%==6SF14s-ul@?>fG44Sd#q~tZ#B0AV*lB0YR-Ilz@xzI%8
zO)$@gERn2X=na<dbc^>q_}W9noc;Dp=;Me~R<yKr=(mr+$gl5vlNa3bhkUOU4UJ>4
za^ZE25N5=SaIytS$$Q8>7=_pAhB4@WlTU9$W+${Xw>n`t(3nqqsRMNr%UsW)X5>P5
zV2^lTnH|9zp4c@sc#j%<CwN=+Qoei$)^J<)kq&gPV&w#dS`u0FhjPDkSMnm>>dmuD
zI>wR)?GSEadZD_OUf~n0@L90JcVC=#=iBx6%NBJV`kvM7qOMi!wPBWu6?}*9AR#+&
z^u4*8xqhopd{Oyhq)wmVn^-W%NVr_`i~yNx6zZnrA>X?0(ue+WP-Nu`8S~UYGiHxz
zY>(-6k(IcHMgsG7j`PiYVhy)8OGKi}Tb3ruqQA>|_Yv;~c(-rs?vhCwQ5PRr22JEe
zsQ}IKuA!is!skYp-Y|@@0jr1$O{hw~_|~HJ=ry0gCa!Ncpj{$~KU74n?mvB$Pg0AC
z(#F1@8d=ZKm{xcA>KYvIp98Nt85M=jilX~3p6QCtNQ)Gex3KdcVD?6Rb&7JtUYBso
zSSrL2TAecP<1z@_GL^o;yIVF0Ip?Fr>M+w3qr%8*351QfITYTU34fea$UZ-E!zaBx
zD1Gku+bLKgf>=WWalw;!d}kc?aq<dQw;nwf-_}`N#S{b9utvC_*i~~POevB!Z|!Q%
z9r6cUe<W%qP<=~(3`Fxpn53(1mF-d)YVKGT$uC9OErl#53(@k4nCJ`zsdBXUv7Fk2
z@;BXjbRg}%=O+@!l=svE+nZrGWwQbqi;QerZRuejtH;L?BF8#2=9@}US3753<Qrtt
zkY0hxWJ{wmh-^q(4zJ6;7~u?(JG`r~++iJpC}FSryH4`ZFJ2#5QlrA_QSToB^I45b
zbOp>;e~Wty<kK-;?yeCd6YZ?Sc5;KM)W(&-$|(`+UmV~RPCKsHAt5D@Y`bswcwMeo
z2Y8O*7@Gb7GFx<L;AGdUz1<X89ftW6Xw(bU{Wa!!w%NX@)?!<-J{F$QUEWzRD5Ua{
z07sfOGdjMj%LX)r(Crj^&oy&S`%)5cZ$PYD=@t1#X>PjaYodnVEWZC@k1cI8-&%Yc
z+9x~*0T>0|LmcX)h$G5a`bZfeG^Ps100g4HIJ_+?<1NPTP3C33?M6cQi-kzEe-2{<
zGV(p}KSyQUAH=b?EmIvG-&X8YqpuNu?iMO-SYq8kApikt9T&M1-`8m#ENH~gl<>{~
z=0}m&ZTqPjbPL?{op1blZyzG+eOS_Plb9dOY3NENi;{x3OQQ8ZEL28z>BHt%A*SEl
z;T_&!dC{2VnuSeB_1AX6E7Pz?<@rrm0F7i|wSpm#S?$ey-xp6zACAi!Evyy&1{w5B
z)2ZwgGO+kf;mJc>qPwg@>=(bP1NTK^jy1MJ00Cf4ElIT1uW7;nLqNR0W8;e#Jyu0z
zLC0*nU$F@Alw=kp7Gi?_@RFsEj4(#-ZXyX!%36E(x#_O5T76fUkzvj`2(Y?}RqX=h
zu5$gIm#ylm#jsV^O@Lb;i!Z>fg(_sAS)@uLf?c*OOyN-}34B)hPNItP*=kV@fbZn?
z{ya3(aNEpMFc@^#>?yk8gR`eWQ)d4FF;$P*YgS-Z`CP_#LcxLRj^GVYiB@ZU$T{CJ
zJ6!uH<drvsfd)PDMmMxple&Ffi0(n~Kh%}J`&|HM_kkt>%A(4wE;cSieU`kupt{a@
z2PP`$r~0_(41~UX1jlGi`k_mz!h&-H#W&}-P<1VwxE4AQCdOJN6n{6bg&HKlRcv9^
znqRXvT{ZI_b+-P*Ktuxjp$_E<i(sXTf95}tQwLW6<j>Xp+}E%3UvH|{Z};62jJ`zH
zWWy}-pvX539j-pF$L_5xi}~kEk5{)nz?Y#bP!)#&Do`aJG{52~`i?3iF2?HcF9p=7
z0u>hcKA9EoaYhm@fAa1C3^m06L=HX{Pwo#G8a9}us%$cmSbonh*_Ow>`+#>l`dtG1
zWsJwZ{9fd~Z%S*7#}8LQt<4TZ#_#oQ>j#j<QX3OgzIOwl!u$H&2fPc)CDhj!n8S)7
z4GUT8)vZ;J;T`yQxmULgb9H-z$5!hc+96BTL!!FJrIcFX8Zw3D*X%^(v<Hnx)Y}wR
zxT<WU`ukRS%A9>!W0LRg@WBiznij=yoKDS0NGl(qNR<Yz_xyCc_N^+t96o`yw!Qs`
zbZDK5m`)gNdzO2G)eujK>`xd*394W?Ype$=@NrwM0Cx1HbE1D9>wbjQ58Ha>o|s!O
zEip2U`hRv>eCir7q^`WhpVhjW)-}|IUo-$XGyu-1x=B6Oh|1rqP9VZub?_K{otE4U
zwd+6A{q-6kde7wS-UAGLS?pTg&e)E52b!DW1Dct_qX?#Ds$;|JVcfO^e=L6!iM>#}
zCj}4NhxdnYnKRTx?LF#lxx-m5lt>(2J`yE^JE4Y^qYss%Ddsya+H+bi?9i9$(Fd?1
zq3V9Nr?B}Hc&-SGo|IwIT3*T9ec;kvuYcrePq7~$Yb=yL5cydD$`bn?8~7fwS<6=_
z1?Zhsb46ca%UfNmdZMD`+?RY&>hO-Q$X)d=T8+5tkzp}e&I<<vKY03cjXzeH!MdB-
z9u5S*i!kNt6u@x}8s^Zx^A?QcG7&uh|E+V?f?WH!#CH!|xvRR<$`^Kz>_H_1zNpY7
zMl7;+`A-b?u?S3dC|6Dy7g(9h|FJ-LS>LRBk1t+H7<$Q(gHMjwVpn=~)$8kh=YJTL
zd&kP#@(vc`9<@Jl#96@@l=RJ$UF0KEMAg>^;8oqgUNgURC>D_cmLK5;lcDp?bdtFZ
z%1p=;%LkJaSV#9FM_h@$kjLs`XXr+NDvd23nP?<FU>8|yQE!5`IFMyBv#FA3qhv+O
z*bYMW4+mE9SuV@EP>)+Q_vlQDKODHl+wH^O?k=*6XtoHiZX;X2d;|IG5MXv2d9OBJ
z_A_n@o;_vDY($rgr(tU5-jZ{IIg#Zp0_@T$ZSwJZhq=eaBU+Gd5j};NSvKR2x1k0?
zHG{$JW_&LmZX7US0;i8k5_tm^hOJ{auu<_U=ry?Jq}Lfke~l5)N#;7Vy$*_pw|p!P
zA2Yp{ul6;Z=`ZZox(Bz7%9h)lXb(V8`KVsO-l8HHmtP58!!{{2XEOg|JK4x_M_;83
zov@wTBm6d0(2mf&yZ&b__ie-fq-u|<#9FpA{anw!J`8`(vL#Mm*7lP>sp&2C`a`xz
zeQrg!2<1rFpNI`6*vzECMl|eX*I;Y>UFbNY{Rm>H220ZUZG+!3bz*)V1TBcaI=v;s
zXL{QP)}Y~hiL5D0bR0CMx=@WZp!+3GL{($L&-~mA#;XdXyTB}}aNMD4Jjgl^GJiO#
zntH27rmCqyrq=<hqsFTWsGs?Znr@-~L<>BIdU_1`EBWlt{AsEk%Ab&WtHztZ4yxV!
z-c+?`K~9ZKwZH~U4K~kE9p^We58%)K%wOt!AW%Q^L0N%Zeu4aU)6?8dullnf$CIz8
zH&(%e>LMTP^H+UW9Q5|*b)3K5KZ76g*C8JsRAc$@kUt!SVHk-u7>TLL=Y!F+Z}WS5
z7J)nqllhq7*|Vw2s%btu1~s>IwUfeK@mSPzER1)I*~!NytM1=7`Gz9-!O*Z5r(`<o
z{Mp%<kVU#@AM@PUCnr$UKETjo{Yrm4r*C32(}rLK5hXf!>b9MYy!F`|#%boXtXztB
zF#m|Goy^Zt;VxFT!@bxAK```urXeV+KC*Gx;cK$KFia9gQhnX>PPuT++qI@LtiQx~
znN_bcDf|ed!|I^T3%bRh4%fao(sUjE`HiZV6ZhKAc4ODYk`exo<?|wdE3;DrTa2)u
zP|LE_yXQ=$9vyR=Cv+%Ux$;pq2jfk=xdhwB(umqt6U6!Da?GNAmXu#&6hy*_2zy%h
zl-~@m9@VSJJAC6s0jB&ke3+?~hdlInPzosXGE=Z33cI_6C~Q(GbXhteMz_0<E%A@3
z0M@DHn&kk$^Rym|?*osGPRUK4*`Jurpvn_o{Q7-WH(0ld5QwmSL+q1Va$g!aKfA2W
zWRGDUSAD$&?h>o;K867?M7k|!7qI8Gk+thXB?sxjU9$?xnY0#ZLzqxB1sfP!9Q3Sx
zdLP5Y$dudPiea)NGO*~rjIy;m^xlWQMG0OC)v;saqpwQvQmEc%K7c1+mJkk3<Y^r3
zcm@-(P{i%6^0p;>CPCP{7Ce_r+G6DH2;0xf2D{^?wJohg;P);d1ue(NmX`&-KgdY$
zm4LwmDN*3(>{oME?QJX8|1FyUMF@OTGb<?OC#JL4#Y{ileP@4O?Lc6EtzJzpArrdv
zuO2TQ1F#v*E^RMj$ZJp@dJ(B{HDT_pD%yBb{0)mTUs%f51~Kf**u8T9<+G1QuxPSf
zY}UPiy?ih#I_ppoSMa*GIxXQ&Yh+7F|MrS0-|$T`?`MHjDJxjm*u#O@%Ze60)YB57
z(tb(F87fxJP$0vTN<j-@NZ8ORx|7z1ZyjX%p3jdirw4hG2&Z5(hfXvigmt0AYj`yb
zYuHO{g)TaTYtIiKT=AROzqm)4iD#n^Is!s8USHP@;tn2v*x72L<-axRKk~KXOyvP8
zOZ1varm~ghQSC`~0fvxrb^#3<lGy2p;bCu5cbBJSTJd|TKa||>t1ld0fpEh2(&@$}
zOa5*MhRSDH!UhW-5Pd-OsJ9GbU&cqQd}pK(eU;tjuwWHfNJ#t|r(a*cX1Hsu@yc2?
zHJ_HPOO{jJvMQwf?XJaQtUjTx_m`(cp&lcM!ZtkUsv6C(HSF;^UuLV9#~kvcbk2s9
z-B$FP13<KP_z;)*Dmwe%HY#G}!%>HYxZin1N6?1fUAa&XUq(*XS74=6p;KgNszH4y
zJ{qs<nNpo%wpg~*!+y3DT-$j(@Y{GRg<l`03d0%<0c+9|snY4qnMpYMU9o?yzRnD!
z7s;$rGkLO#=+^gNUL!NxW@?)AYqL0_dpTwM)2(LZmMFIO%|UU50395g4W7glfxw`u
z%~A)k625<hMOmADUOvD|CHV@&JeIz(?P*l`-X_~ASk>HrwZ$m(0)PHkBbz&z5{(Z7
z<p0HXRO3Jf^}<fI&txn#I`$fw>{|`KysSDL&m!qca!40lb(0bD{@soqKi56&wM6GZ
zMCe9~1}u(<Zor3y(RO7>v;Dq(UHsr0IV|+IhY<+ovX>o4Y>#sYA1<Ol1ZfM=K~EnY
zrNRF5=~>j+JgM#+!Jcd6w9ws-H&|)1-C<9)yW$N2ZnE9M#NHnGiG6e%Mz`}6LfDUP
zRt6~?_KrM#Qc8||-N&!K?(l1e5z}39*!D_t7{%;(QyW>B+XF=zegmmZ$l2Z@`=a1{
zjp!BAeJ2n9dIzB0O@9!YYg9~cz%g&Y0H)iUh~Bt{Kh^9~_psEN;=AH1KRcNbj*3WI
z@pbMhO^&=_C~V!1eOwob%H~+j-7Pfq0NrM?uN+AG``%}Y0K9C?%6i|hK<A9SD%OV-
zIsr4((Y{w}t?xPN_1jpiL_x8SL1j(wbPpG{S&K2kBU<Pj06(z4`M}3Zk`FceLBA62
zF8Ww{Xjz|EVRxY#sC-nYr(0K%@8kotWUzg&SUkm^j~{@1w^Reyx&iqB;}dD%qi*0m
z8W^>F12W1T{Q+wt4ahp7f$zcEC0NkwZ}z2QZQ<g-+x?~%ceOaH_{}!wVIRH*j_KW^
zcu~MtrS2&c2m3D0R`mwhkHb`KZz=?QUpb@G_r2Ikg@7aF30qT$HW>zMu&u0qhljzi
z4%#0V`h8xJz7!Gqs+(74vxQKU-Y-)qDOgQbKQMBsyaUMGffjxIs#{9X(#VFKr4V2s
z2rK=dkxevm`$Qwdpb??nzVGW+`VbO;!Od^wT}!u8vP_<QVrn0?<tXEwFF`J(gcIIx
z-xk+cXmNgXsxF=yPo&1?fHmT1%j;3^)Wg8=3+YaPZ-E42KIVOmGwy-c1!r+YwlD0g
zAi##Mc0XQfUTDmk;j>xAclMo?hKKBAT-i4*Y@ctP_!gqekCzI(skLZ->%`YjPH{Q#
zg#;FHT2=MWV4qyOzl4{u`RC{XXY*K`*ob<8*~O8>2%<NK7QN7NmUwD{a*lnx2-K*$
zvQEBb@aMf+(g)0P^Uuz5#v(_|@*dK*4~mwkk|=PeAe4Ye92khS^+(j+3M3C)KwE)C
z?T>*30ug4EF-Uaqptf!elVWK^d7oDZHWlwqG_*1NGPBXvQ`$HMF~GI==GU(9Dw9=<
zuKkun7&lhIRsU??@0m3@?XbG`_-Fh6a4Hr!GVpQp3q)s-3yGXcF3=%h<3mwVAD!aN
zn?8_YUMvjUtAU8Gq%sT^4q=G<O~iw;%R|p8AITTl-ck08?CYJ7Fk~uYX7u4(^^R>n
z>mLI&!Eth;vsHoPa@4;q!Xy0p4DMW8UF*+PvBA04T)=5~w?<4#`k>l75(n(mddC~~
zZ==ZidsEvmcyH;!i>D-fs+F3YN+=j%Yo?u|$ONg-`)*N>%Lb|DeYlny9TpW(^hxJA
z`~js~A2FMExs4fw$Ao1e(;C6etSix?t9*Z3%(=V8_S6(*!d!~r!UqRd5nYH}bkAM#
z=8tW-gXm)vdEZ><P5Ap=F)B<WFTXtph>^~r2@}WfO!PH<{AY@t0MXl&#`SF*@f5Ei
zC2=3`A+)mLP@OEQ)<wb7k_2Rir8qez^ilH>veN;|onv;JAVy!);n`(z;FsNscLzBa
zQWcGn-!)>v$zax__sr;?Y%yzD?XpeN3Cr3k0)Y+F)Tki#;(@AMXgpkF1CMRk#OSCX
zj+L}DBx|}UZo&P(!zNMXNIV-UxI`o-QI_gFy(xdVDSDgv)BBFNm2_;d&WgQ8I51nZ
zZ7l*S$39p=;~s8d-{q=;!`L;CHG+vwwdn$fBSe@uIfJt5AToTzg_@O6$ajbqcXA)+
z*jyq;;H2&3q?OJsf*wiOnxH@-?1+n#dM)Z~-{BfPVL3iPg@}ZY65`5$XNAKV&Z2z;
zlG|}Xnko`ZS4ArhCR4rc7Q^vTAJ?~k$IHt7b}+wL8#<o~Q`}W@YK?VpLUU#B(k)+c
zOJ6w8l&G@d6hTeJLg28};_#pGo{PF3^&{sK3(u6(4qpqk<Me>)>j<FHTyG&vNXthz
ze2nugXm>4<Aoi6qyzgxnWR2bEM%y=?qV+2-MDMTJRsW<$VIB$-#4bB8%M(Z39+8w}
zyU+u8Sk1wZZ_vgJ6xCzZiSlb~O?ya`CX=vD)^?qqxszCC%wUdBfp9hP6kqdB&%61j
zN2HJJe9?gO(Nxea!F-cW{x>)y$1e&#xz=Winmee@_jRZU<x_1kMrHBPX|G#!Mw7J%
z2`39EHi-2-#&rq}<~_pj>?SOXuic*KOuWn?Y?wu-FmdEG!)n8V&3zC@tJ_!r+(YN<
zvNI~$`FinIuCC3@$ND4O2=3%6^hm^N29%`4@UuvgfF64{80u{%^6<S1NIi|b)^`JT
z-;djY0-0GAL>AoKc1nazTwu~TRt1XWtATWka0#^LBqzJY+VgV-(KJ&FVHH^nx!qza
z)cV#r7_f5{vAy5)ftJ4u$#Tc|cl({}?hKoX5URLu54l=-wfMM`Q^fh#0tZOs4;YTF
zf8{f<@zpzTPm7NT<hu5ay{qrPf^X>KlHK^mk#5a0Q7qc~;wB2e{RUMuz3dm?;pN6x
zxCj|wyc8Dw{WmxqGr75iVjsToL<a~%at`Wfo$J;%zKXSi!3oj3(hY1>Z=0%>9^RQ{
zvMz`;7PIW9aQu%*jllnuxBDnNXhH%UdFzbtB|}WU<5>BKXR!bNx|lI*Aq!swQ>JiG
z<*)CA_iQ?Mw#zBHm^GKbGa6I=hkX#==W9$xwAK;gfFQ%nKN^;0EjOCH9(O9f%ABg-
z8R0~ovMl)9CJnRcW2emPl9U(GddY4|lO1v)U)#d?KQygvfq5sECMRrZaw=~4XA$jo
zfpcD%TmR+~TXV_t24A*W?BVU*B^0X^xw(&51NCZ%SKlw4%jeYyuM#Om$8d~SlS`Na
zu^Q<f?;b8$@;Kt?6qf?3vrFeS-F`&5wM!L6U>)x^E|+IT<`5{_T5%I^-y*Be5MhU=
zSl=PMncp)$U}=4=(EA3O@?0HYM45($u6n?WmwdC|ZK%=RLINk-_s8DJ7QyuT-+Ud3
zAY4d*IL8`Mv~@olj87y&GWxlJGu>K?tKQG8y2e#ccU4uk)3_@ZHb4XbtJcM!Kt+Jl
z(W6?cQEK=cJr%AOgCdkk_Um;^g@S}=iO7}mdT}bcz7PGPgeuvAkpsoGkIF990-*Eq
z1{Xp7HB6h&cc3n;GdDmq#J2-qh0px{u;pWueV~h1WEda#RzJLN0YZ6%mm@e6GzR#4
zi#!3KxvC>{+Sp*BT=b<g2nZEO)tOp3d|=^U`CU=!#NY9^KIMiZc8!e+4`0AN)eseI
z&kv;#-w5Z*(ahjeHpBYAMF?qeoOp)~@9Zkq;sM*5vGKXM!_HdD9k%DfE*U=Oj&mcm
z&b-U;?m5nVjbc194&X@m5^U+XfM_`PO5*ulY|`RF`Es?0BWvEDy=5ASVeGPuZ6G)K
z<!EPfm)ZDkv;*lf=F)3{e6kHpi^PkX>z65&gE~+KsS5_@K+Lhh<g~`5;aX#3{V(er
z+p5M<9HRZV9A~2Tjsal*0lKg$2Xp$eb->@)Yq4^a@TqP97q}s8QHCam21_26wq@C{
zFflI-GjGA~I{&7K2<4MticJCO$Ku;lOof1Tt1Fk1xyts}2Hf-c7RRq^mt2UcgLk%A
zLlyfdF#r)7+|I-H^O5FpV)>*m!B|=@M&??}kLAAPBO!FYV(ATE(|$PjWu`f0%w*fM
zbBr%y%S0R1@as**S6x3v5d$+vZ(DwDtAnDyfd+>*?1GutTh-`xexp;dh%}AvuT|$X
z`har_%gd2S*k?X$*cal}cj>@Z?-7UiLveD8u<a>8ZHPVpsCeD>pdR^-BkMCA?X6zo
zzz`%~%Q{m?v6~i#X4cKz0nrin__la`3DgsIc<7Q4i76tJ@F4oRwXJ^9zbC9JqiS3V
z@pH)DcM>wIW-YSIg^D%$rsduDZPeW@dKL+a29X$02dDN}L_Q{^(EEs=D5T!T9YLWv
z@HJnqlvB=7Evy0Vg5M+5{<Z1%S<OB6R9r9&3FuL^roIM&?)BW-RF3Z)`B&K=7jt(^
zR;*gs{dT|YvEAE>BT6pCRJmez-Nr?|4i-wDSR}hCebLw}ei}2xJz;@py1MjMzWg}k
z37kCKi0luji6u#f02^Evz4xjNBz*40p3J?Av0U{+*(}!`sL(P}6EH@2YY5dVH<n!z
z=OWB$;|%b_r4FrGA2qreo$3ONe0+hJ?wg=M%y&{y;$2uG(?{9%AqdWH++%>KcjjGc
z^!l5Aal+h}8R_vi$ui(BxyMQ~xcxL@zbo1Y5Np8l9|g<H*erTjcgXj|AzvwCaqnue
z6<jC-*ZzdXlNiyc6pqN1;#h@IN5aN`kT}Rl56N*jdsnnlA0mFbyu0G?Xi5SdN!VW(
z10OO!L@__4z$n!b)UYL4rU%o|Sc0)mN6eh`iw_X_pGfd{BDKn!#cdxK$H!tskjMAM
z8%c|C%cQ`_hs!)Co&T9g^RJi^JC?xaH#Jx;N<7eA$&;~#;hc7ckd`7H*X>XQ%>~I=
zM9S|z;x>Lj<_8ikRn|))t={I4QDw!$J8?G{S3{WCkZ~=Z$T`!Zz>Ziqn)rRm&$b~6
zh#ql~NZz;sKbhCNB4$Ms>$jj1ReX#Mlsv~-PK75vWch>J#=D{{?Iz;6zh$dB$>j4+
zNL**>fAv=0I7eI&!#0HWb>f!Zs5sY`946%wbnQ-pH?w{G$?A8J_(<}R_cr3u2nTj!
zB<aU0PFGTsxU+07&DVUd49ifG5Xuzl$qmG>W0Be1RbZ3_HP4`eAneGIQU8D(ca4uy
z`3`_k>vtuW6C`O{#bF@5VaY27jHIAFK$9fJ8FL8E$7oRWuK8teZVoBeX#vqjC*O%S
zo<zfvigLTos@4L_@Fh(r<K+ir@^q1DM3TR8=_3}J{i8#OV1*k+HqSB>?t-(qMa0vh
z=tzn<I!vApi$h3{zH^LBv4J@K2H;t**kIJrD4KA=lgscEL){5!iDdbpl&VOm8`x)Z
zWYH}Sd=Zsz24H!>Jk<(5lIKZpAk5b7pvZwViUMdSw=l%R`W?Q5=WOHc$O}Sudjk+=
zr8}<dSLV>3hST9l1QcwGET*?K($dasC>e9g$Vf_>bz-bfB{vQIJH+rPSl=O0fU?!^
z84jW^n}CPvTULfd5!?ZMhG7=B)lX@sDD8rnXhEf2pNxt=o8|5!i=@mU8h(M3zKCn3
z5HJ>JNHAr-mz^)}0Ssx}RlkY#uP`d*-KeoZmmGPMBI{Xii;rxqQQx?P?k)B?@)~{6
z5r^NQ&XT~rLw-vUCZT8Jw7sS<Otdi^Ta<mgSD`t$<Hp>+)Lk(8lT{kRE_>;JseXrT
zBVq(K5X-dD;aMGa(d<nLwrWzHHPa0a#nos?W~)Q-I*ImfhR%~)lCrR&5hTWg?*J?W
zJwKH6G)Sm?i2Qw{(okAh3tHGj3wP3jq*SzF$m<-eyh4_uWd0%wSFGd7J?gaH>&#cI
z5^|xD3^n==nEU})vkifP&}M~9Dwz9f?qQdFL~Poi&g}`|2gHIu-Gp81N2tSQU}o;+
zXhH5f?t>yMe*n;*zYFRZ4vUDIsnmfWQ|gS%uer`NVh8-SBBC5@6p<t`M)ss0Zu<>E
z0Gz-G#CU5f=A?47COzFokF2#igAZB4TP*4OK456;MH@_kQ1z@RNgyjWqfMpkPp0TW
z1dgxxY~B>{*ez~K$m=x>F)CwlL%Cb;gi3Jkh^wVCD40>Y#3{+K@1b=}B+CdO8kU}h
z96)fi2cc`G9EI&8rGY4O=ys~YcK}7Z;2ID{HLk5@okMcol(B?%Q(t3|*(l@$IiiTR
z-YRYDZIn_wyo+U5iUYQt5xt<!#s|8(qAQq)2)Mtdcc+MxR`UGOCdb|_Jh0x@>^Khs
zY16iF3yg~dP$!Jp3Eh6=*X4KAQv6U%I2I&@HiaTu0zgJSXJ-{b<?@gU(x$<P`T?o>
zhD8Kcz;#ENQ6rbQt33C5YtZ$U?990tH>0HdcVViUc%4Kg$XgG$Zi^Y`utaozx7dqb
z8FD=Vk5NBcV}iwMA>`*_7g-K*_!>y<bhysf?0Q)`eh<T=^+8d4qD_P@LSX9?w8KGe
z?@I`h(EvJ2S9}e%+95({oZ9?-=ahVB$mjipLwi@?h-F*ZDp~4}qG6mD4({a4e|umC
zFo~v&5iVyj+Y3U26hoxEg&PtLBJ~-)Gh5i(PQR>^Dl32LqGs$0z|A<D@<-@qZa8RR
z9Z;<UOMjPa1y{(<c9ol~tGNv!Hq#-X%0YV6;Q~wAeS!{~R1V8M3W`jidAjCg4b$lU
z3Q@YH=J#}S%oOkyYYItSnXhlqFi2ZC2sq~r81U8Z2<e=RkP;9)UXMeEo_uFc>$=#F
z>{~{{EXp{o>URl;%AA(prb{~04vdZldrBN|x^~TG%DHda@t&Leu_%v&_VQYhL}kda
zyeiRF>WuYHXW~aVa(6q8{&t)F<BE^6c&3d9RtPc9j(R261`U!`Ack@p1@r+YIE}8*
zMD05agv_##q;1CrMHW?lK|NQQ<K}3@oIl$oWnh^DT~^j_TW)(+b&I-UJ#oeq(bo<0
z&_d2QF&l(R;G0c(QYjA^Rc!a*p-loKk=@lLk7n&%B3X3?NJ}xhfv8}h%4~6&GAp+W
z2$GwK#iG}Ce|P*+ugJ912TBgy5O3(H{SLX7Mz=+OC~iQu%;3k=fb%p;kWB%|jg$U^
zGNP*u9>faZdy#P`vH*GhfHruykHko%4U78rgo6HR4tIS%M)(IG_5@wt;_vPzEVmj+
zO6XpL^e3cVDd8RmbZ)EPHX4%|8eUHko*j3)eR3YV{YXA+LJ`eY1m8BUZHF~+0$2IN
zqW0<+Udrp;fEZK=#|P#{tXm=r5BV4$=wQg|t6623^L*z_ndjRu^kn9_UwRFriB19p
zdCQR-%lnZ8RW}W`ZKe`3McvNi_@q%wk}>w<D7@cw<AvaW&09-f_>Md*KnhPOw~$kj
zU)PSX!d7I_6D50HG?Xzxc1a$ty`s7#K>!fIRzlt(sGDophR+%nbJ~P`kZWaEGS^hD
zV2Hm)4VS;H?@BVfUE$TEGo)-otbXwE1i2&0&9;WWt&fu;B)41~qy{1xoZcPzL?{nM
z;Gr@S%irgufVXKp5eImukO(2a2V#IdM=QM|y(Vfr>Iu<)%aQKNt6~7G-jdav1Zg<(
z{b5)V6}*p(K@?qqSt4XA?;jzZ==UR^xwkevLc;X#%nc-^zVvj*sT<AIU|-29@#ZR^
z^Lp1SphX%<Cf7&((#r}HH`VHw-eGq>>>ApytfNyS%ENTx>;R*6@y?aSJ5rkj#X|?u
zu$}Y<%p}hD<2@7oZQ0;m3I8?WMZPI+i0kgX*h;}UqbHIc=M8h|0xPNvPUj<VEv*E9
z<JAiCA;OqbSdhoB_G%=a=CODuX+W8m>g<393JFb1V>;hbR#A!jzAY=v?*_ydkT^9z
z?m;A4K;IuY?a<A3N~nB3D#Ho&qg;W&ydMa|R4+ePRMJZ%sHi7Mdqihzvq)}s6???K
z@3HyJml1rsl0B<5vF`9?by3&f+PnOabCFa$9B`0U!BH?8xks|8KFmF!MPkeKO5r`2
z3B#T3IXjy&M=~utk(XpKcZpk3Cu&dgo27qm4?W7h;W@OrlcGvf-z~1<9&D{8l9Tm*
z2h8)1=a-{L&`Ya4xWiT1&DRr##EyveIs($yi~wx<>Bfz`?%oSs>`9P1a>>DuJhA*4
z9gkaFr{2t-eWW^f!c^mLZL3#=Rn`Y*T5p)6*H&RsTc-<ruQ0ePdQ=+OeZFS(;K}{O
z3hP*P_8oJhAQ=pd2XGDmEOb$2#74NV57snf73{1dKiNU9qDs|$fu^CH%NksE`I@Lc
zioNsfyA|u&1h=cO+hOT6V%An~DQQBvI<CPr#eiUKl~WdN-@)ei4))jUlcItnq$>ex
z>Bj0@GIWC)yN}=oU#JccH+nN@;%=hOvsBqE+A7~Umjj_ecpdL@guFh;vC*jtq>ELJ
z;cqXKN@~Cg6OnleRRA$JU*zT^@*~{ajg^QiQs!91ghc0+0BAjN?75R6&d`Z~?Ej8V
zWPP%$+bSIHe8VM9wU3$lxmuMZm#^`c6Umsfis&yV(?Pl?zE?pjw=NNUeFIfbN6Eax
zWcSmpr+4%%UwiR7sQ;me=?W*0gY**Qboy309Vhb&zpT@4Cl7$Dg8xod$3-V(Ws581
zK8DlarnnHv0@Q|R^rrkh_f%AGrO}RkmPX&|Mu)Ny12ont3s(6P1B9cn9oD<jKWbQZ
z?ySmtJNG!(B{Djq^D@79`BA_PSqi>G!piddXk2`^Gw1AotmEw4&3b^l->N7)W`gkT
z@fe5?1h0!I*$`|T$y~O`z9d4Vt7}}Tb-7rMG4vCPtvQ+p))a3UF~3p>iq)x*cjX)%
ztCcXs9nyN{K)NckGY7t(?mZtp=0OYV*O3J{jf3(af{SnE7XJsgo_{gy=WNsA|G&5C
zx#FqTe{xsn7Ec{<q>=wW>;GT2{zyhIM<F`+KL_By`2axd)M=)tI<3!J*m3ldh0R~0
zf!xl$@4=kk%~_(k#Z!~WT`{mbZOiTCQ>rh5w?d;o324{!j7e8q#+byd&x}ctvelyz
zF7yqKl3VyF{Nn5TB3wq;7D{4UyeEdHvqMsV+npWHU_(Fh2%DzD+HKJZ0IT4b3SxdF
ziGs>!uuosV)zV)P<A`i#w*&jldKZD!PBz5_GgWN0Cmxy*kl$?Ea>8g1Y;y?F+1(8q
zOBGs$R^XaVogRsjDJwZg1A*0E7hkhA>bSI8%i(Nqan1H>nxulsww+T=SZEoPh_>8R
zUiXT*rDb%lzu3BDm_(92-c43W?)xFX|ANp@`>+=%SZ23@QoDg}s}Irb0Do3tnpC)+
z;%{f)2{LwH*StgDa9_jkP;%f&DvP0*a4~xd#W|Zc9<KrH@1Ud=g&dP1NaESpl!GvI
z?b*OPo6#gZGmIQyT+?`D8EEve_&u-8&D4#j%#JR*tOz-g0qv5mh{HcdooE!y>r@Xa
zoK~i<)EaD{k_@ffiJmS#ObyZP(pyZeeLr`b-2RmQ-1gXkJ?v9f*X<pj(6j-mIOB{4
zt3Nu?p8Cw#7ztw=hxm+yq8(ZB?^7J)kvtC|5q^j4ny%PHirw3dvc<+zHSp*lSR_)k
zJrrScdds?`=wJ)0a}V=sk;UCT6txz`g`eEjx`o}cwOK!O5fIpZt*-SaGe`uAtHK_Q
zVaqjpu#(e+-6s2R2s*qEKbMy$Y$pZ*XKmP%AaC-y!eZT?d~S?VpR45EW)2N>?ninC
zH+$ZP^u%2j<&Pzaf&0K|>01)%XvU^O<Dz6%N+B(F`Z%8eEuC5iMsi<^*6aF0yT|xy
z4}CFyzprbUdlW8lg3mqsnJ<!P&xV{8A6mpOX(E`Z!Ls|X`{Rv(>-Re~`0~gOo*%{c
zd-r354KIqXVWjyU2dE8{*%yS`7X-Tp^b4u)7OM{G?}1)NJJ1M<lu-I$=i;6^nYhWp
zNEZfxwaq&Xd9M)+r0`v`n$!JvU$j<Z%$OrN$l)3^{19!{otv9EP%!9f;L;*dy<E)&
z-1?&;1lGH^Y{T;oV*gFpgq%Li=x>eEP=6^%$guFr@_Mbp?u@={mElM+DMEE<H=|RM
zB=c+xe$YG6vRnkerEijVlRf11t7@TgQ(DJtTaz{MxMtn>xVW_!h<=ak$CE;(jl43n
zw`NZcWNXvgUZ-GMA6WECb{=LS4*D429lL>@19R-MH<c+WkKf7c-=Gx~9UO2@?veY}
z6sx7RQkiw+tq}rf@q(1wkF$)fZiaQQjUQncwF7L9Z7}o<zCN-YTlsi4bIHIdQ}dZR
z0=p9IjXzZkxU+t@eCzhQMX8++^yxmfpPGc>A5%-+<*AN~5=1II=Ini3xwjuD2dtuz
zxr`pP0D6F@-F31Ss`R2!)kfxRxXf?!tDNv^u=1gasCK)+)lR;RvW&{i6+3*8;JAQ{
zM5rV3(J{MNNzpZRoXZUy%*O+`VeWXt1d(pRvJ7T8NP8rrc@V3WcSZH^{z@{(6K-WS
zLS?Hs-N}>seHRVzTX^%WPK7@RU%xBqC&a+Qtg8i^s;=_U2?0Y60n1cP1eadH=AI0&
z%&0aGo*LEr5}TfP1Zp!)us32!Ki$i)>NdQ0Wqtd5zKDHr=rsz3`UiHUY~J{;Ox?}s
z^>N<#o~x=xDIY(Uf}#&a7g2|_rj<_R$w5|nhrzbIrlVk1Z|mUs(Y<El{*&IUm~Mhz
zua@)^l<s2WLgO0FTfAJjftAbf3NU@gHm}vTw+a#eI*w!zr7T7YaHa&2Mb_GnMISHb
zw#fRr78w{t9JuC^b+^ZGuYp4guPkSa?}HkG&CGjee`C5HOIR%8plo8IaWV2<v~ZQ=
zI7!Ex;h@Q?kjopm9WsiG&JG#Y_^^KKFd8|%j}Wc+_DCF?**AmrbSDyQ9@JSCs#Nx&
zg{vqc3N{cRvSM%3>bN+l5Umv7uW@TQ+=mZqd|9-oYhsPR22^aHXKT3a0DcT%91)V-
z32Mh5C6N7kJ=G+c;;=;Na9yl29}w(}qcIOoj@WAg@xI_80xPPnC+4g72yFcY@&r!7
zy~#KJ319eSCaX$?`wcP3+yJ0)l$S%8TQV0|Z!<9iBY`oOmaqnEo8q5@u!h4;G0@uB
zl%P4{iXpb5JGvCb^NI=;3h&nc+Iq|B>CA>fRm3qFPcVk{M;dhfzSK2$1BGXp6>rvy
z+4UlC@IxNCFT@tAYenlMiU_&2t<tI3?@-vdl0?p;y?qqDM3oXretfX$p>sCp9Pl-S
zO~~Q3gjai@b6Q)Cnh0>rU!!P%Qnq;QV^LiDr(ay7bk)kzAm~f&7ACSMW0}ZgogJc@
z_v*QUTXwfl8JD15e)Moi18a#b3;m|%$>g#qmJbA*b@2~5Mtn?XR1!0?0BCKpV!AME
zWV{P@Bz`#CzP#S{2X_Xe7*MZASe%o0+`!lO4L-bVt9G_)ooEZy5$gw|Z`a=#8Nl}Y
zmPxXD3|sqMUVvc(HjVH3Ajg;B1VQtCfL;rBvgLP&0XFC!`wA3zQbJ+S+B9I&+mPB6
z%zN8o1JUgNd2|3%0@A!i`|jlL;^b=xV30GM5ENj!hrhdx!;dZud1C)6`^i1;1y*BQ
zOAsk1?0$`*o(_+BnOSxc_r;yKY$2X{od5vqj3_Esa%Y|PSVDOshTP{LxSi%BEVW8Q
z#yaO;c#MNhk?P@3Z$o4b8#!Y=wejoB_)d7Nu<EZDgy%l_xDMF{tkFKmG3Y(wn7(B}
zMsx`yQ1Kh#-xJ0MTW|3=fSMDk+`=KAU<g8t%sT|X+7_MYM~T^mkR4*VhdCAwKVX3x
z`wr#`O*XrF2OH1&_zoA`HEMsYrP1ZCOCEISkS4;%OyT$}tb4!cs*rViN&NoA5bR^|
zyvuxsITTyIWZ4-x9ny+d$w_S!L*~@9HXg_|8?CRypW=Nn+`6IseGB3s(OY-+=fJEC
zWBCufvi;&)Y-FRe!HYF3uHi;H|5y|gHkLqbim>3VFI{u#Hfaur95{tQLj-5XKIj$6
z3AV)h6vTP0&wr!+1igs|jja3OcP2gR_eiR-%QtE*fys5Jgt`dxbmZ^X3Cqb3-vS5k
zN`Mv)nuCLUdi|KX86&;DTL9t55@@B`1ELqb6|bd7w0rVi{sQ2z<l+l3Vso{RWmpS3
zlfl(nZ-iYs{|;DbAv0(iR3u#E`P~T_k&jB#;uAnSK=O!qD5yeqXU@<J1j5c)4`@_r
zB^c14xV}-;=&;6CG4*%R)zcThBeoEAuX)Qp&-dh1MteD);S9f?S~{d6=E4y<jmo7(
z?!+yLNB{?{XjuM$;4zM<*mn)oK1TDX2)dSPooIFX1pRO_cVxA9#iq+WRAR4+!wUb)
zG~;8jKf=`!5)ZO7QKvYOld_{P{R6r4rGJiTbLk~fs|Z1Siz^;tf!Cm#Z;$*6Nl*{7
zk6Vze_4p%D0Bm_1raY13t4x(+*6@317{dF6QM$tvr!XFFblL9rlo1eFVmfEBYj6M+
zra2MS<%X$|Z@1joDPQ~1nPIXB%UG$^cSOL53qGP0)5`Bk8;8tBbmTlvP_R{SxwE(+
zP0#svU#obyCAihS<Cy;4;@bn|8o!DA@%(kyOX8y5_J;%Uz@Ym3j?Uv06b->s{J?P>
z2Jk~>^T)zX)UgTnHaWgTylQI#>8>3R$X*x62jtq?Lu#^HP>~1gDFR`l#Mk!{Ll}W_
zA4=T#80p8pM+#EOR{pwZ158YTPBe8>;S4S{k4FwS-f>W>HoKp!ZiMuxTqj5F?z$8C
z?b~-4bsvn(sk?l5%+%{GBDqe0kPr!`ajJL<L%(e>TA8ZddpttmQCj^~m?}LK-$TWV
z8|VmbhlTh(lmzceEVH(+?}`s%b}Lc34!7V-UT1Aq`6Jx*-w!eV$FYz+@^?#Uo)7YO
z^_|kUz~u?&`2-moTEZW5)cO+%_eyh<!SB8wsJNun&5F;Sv5Ls756BlYImYe8-cm>K
z8bEN4;^PS%rVyS<<m|gQCAn@7*&LCb>A(}dE%I=iQ(Q##2asG%c3Q2Bfzp`)L7<Hm
zSj8i1>3t-({0Ty%d}K<*&`!J_l`R*=zkKGMhEnk{5qj?cPFRIL$iM=Gp9)Br#Ra@I
zx2EERIAel*j1bIj1%x?lyuN{>=~`X$rlZm|90Cyrns4=Paa=;gi{ba8BP^;B(yWy9
z%D+2ubU_s!pS5etDR03lV)rfno`Te_vE=q#19Q~pmEmYwM_raM4X`N>kHMyJ@bg}&
zFW11_p6<nZ^il6N@C>!TYvwX|6jS#8MnEfX`?Qq|wqn0<?p<!Lg=+jbePVCKD5fFG
ztwu6q*+{R*fjJJxd(8epfsyRlbZq6DfP`w?S{>e=1d3%{fyF&Mz*Bf1HjW_!c0n@A
z5L>);nYKBaZNx6htHqN9LI}%XpNMq*x+qucP052~_r2%~<(R*fzpHZ0A0CC}vFcUg
zEyj`0kXaLX%gJMEp9Ev>J_wa3E!+V0vKIlLje+Fn+rXwZ<nC*Je=PbiJ-{%17JN0}
zfpaL4Sm<m22nyeZO-0o2iQ|o^<`B^~Lcko@wST=Sc?l4$9}e!eUz_W<fw&`j2O<Z2
zdeey>YK1BXUD??kuNS@ZSx{mZs-)ZK3c4&19XSV3q0@6eSxFR$52Huuh_@o0mUaLN
zpx$MQtUdyILWrC4tXH(YCec=D*wUw*Q;Jl+ft-!P<ANk~QQ>l}_<GDhH7nk4dU@0d
z?Pq7*(ZJ_oPw^I-dU$h2h4-R`-V&YQpzIG*S$Ho3AtWt%WP1={$9Sf15f%Gk5_olh
zg?-PbYEXQ;4{016O^_}P7ZHm_V~zq)hE{NQz2x;(b@-}5n~#cBmX;hIAkYlr%$z~|
z&U&nGeK_D;i-v3!ZZO|I$kIH%E&BAcuaBTg0Vh3?Okj`!81x3;U_Mb4xtz6wh!whN
zmo@6O>{@ZGew#Pp9pq-@uK5mr;vf&i4thdHUPNR`n#>QF;^rRL+Q1W>n=0=iR5-L2
z`}{f@?R<DEnDpjEf^?ZuZJTmJoID-D#zAe{QO0YtLxBZOFo(Ce!f#>O$A&@msw2Cj
z%}7w-i7@U+Tnsad(>+x@f~|hpah&Wrv<@?vF3ccoV4vDY`~B@y^pZg6Q^3niSPi})
z>II)RxsP~4@}cBDRPF(UwR=%0OoXIxHV2U{F_jVz=@M1}4z=zWIll(qBxD|I1o7@W
z{V890ZsKvr#auhGCOOFK0Py{eyR!zBerHoW2}GQ*c`t(NvLtPxilPY$Dt_E3YPUZ&
z;Grzh(T9zq527f|2Lni?o&BF3z#yoYKY$ARX(wXgC377V-;D+85w~~(E)v(l2PPEH
zIsQeHK{<LXzQ)Us5~OI81bAk{*WL-aJQYF91X+Mj?}3GoiUY<7@ncY?A}+4)&_v}m
z{@$`5ug!kigdCwEr<C2}kd|Wi<6c^g{uXym6D?LZ;r1%+;t1e0#{B!Lkk^B4mTyy`
z2+8b3w5*~hb6ICGN*uT$at_>mMfiVus!U7Qi1xJgPL`gAcy;?;o=}qoWlh$zH5m=H
z>NezYbi)=Tr7v(#Ln}2*D*D0_i}G|`>=Z;gy7jK;<BcJ#Oz^EL{>_ik`**1toI>|q
zP?Vr_dsxgVTG|g^9<dzqW_u6GHh@DXd>e{yBE@8Y5MetDPh}D6%Bo)jC&ZEWdR}8$
zOmttK2ON^K1hMJzA;ePny8x4@A4z{d1r-&zWLAls5z?`Fr<S<lauB>_GH0s@+b_F=
zyC2^9XSedCe;F6=-g^%)UqLT5>x%{`cDSEyCslT{n7o&BdcP5*P4BL&xM{=i+pSCo
z%u(4vZ*^KMc~73PRDv(t?rW>GI0^=Dr-b|INDpqcn7b5qc2TOvZlTQN@Ljn)VZE}!
zE8^WKaK@g<H<T5Ha|(&k_@sC(9`-k1J<99<EXorQmE;fc+L^*xH>Kxr))Qdq5f|s9
zsB-qIKaIVr9(ysRU%@<W&>@GP3@i2atCyQM_W)YR*SgLOYUA$Q7dY>I1+PyclSnWf
zm<Y}#5F?dDqkj(iWaG@2V0t8OA%NaFVtt&sjjvK{24b+N=XdD&?U}}_8(*!VqG|Z(
zAJ=n*bt}TnJVfO+fYo*Joxqg<PL%-%R<_pu@GA&D+zR(#RuLG#1Hx2t<YY4Du&`!L
z0{=lwRx9D+Tc!Y6xUWS8*j}B07q~~Dj9W2HUB_cj1^U>6f=;OUhZ=}aoQyiN|6f=R
z$mfOqxxOBGab|rs5={uJieOh*S*3TCGKnht(O8)72h#}IrG6cSB*o$Db8#Ez&}tm*
z?-cC93I1IAWGXmRlGaLyY@nOW6%Wp1vZty^E*Hgryo+8V*#3>C%&$J!3uP6{*#)J2
zBdaQfS9kR0j4HZs5=%VXDF;Tr7^m<c=#<1PbB&pd^4A^!rZ#}Sx4r=)yu(q5#4g<M
zN^cRLB9T(Fpwy!+wT4pPrPLZq!Kg#1MZ+UYTN5eu5R?LGXi9B}#^#3el9b5~qg+7<
z1D4=+i-pZn8+dbgFL-kUdd!blmq+jf*pC_jtUj1{WNpv~(BKvulEmvhca0dTwr7Lz
z(f&$XKefRF=sKC?iY^Q8RuMy_=4h+v<DVcYY8S#|HxhrD8)_Naw{dBWgqW4Rq0A%z
zptHdi@Y3l2qwc@fQ|G#6Vf2Fdo`;+cr7j`M7-Nhv#%CDY<ea(sU%gdz1&qf#-fzye
z_Sz@I15oU-g=$q-9eV^<lNtNw`^M|-Y7B{dsEfl;hUxh2)m8X?<Na2}haMg7&dI&V
z1MT=gW_0YYF2(O5HT91VWJb^W>MHym2%TFG<W(J6JN@GemQD_yR&Exu_^IL}oLZEb
zbXFgcJ^X0FpyL0<DqDX<<i?v1fDoWr1x)tPuBwE<mf<RC45?ZwRKA0-$Vm#7;W^E~
zVS(DO2FN`xUJmOp^mBICx76F-)g3)!tniM1eKV;|X&$@+?kLXbCrBJmA7O4P@OjT7
zY}3C)U(y{;+ZoZp8Du}CzTS%IQS04cr*a=i6XicZ&Sr&;(gZGF_8cojkV1$Xq>K$K
zVUxO5yMVhDuOEbuvr?rGfkBt!j}v>Qunf%|Ih7COP^-6}?2>%4Fh=kx0ps7UEKixj
zQ>Je}C7<=Ah68!lk!ahD?O!e#YfNW6V9CVb-#juK7Q$<-f4t2?O+olR8~ow<`4)lo
zg|}D?{?y{vt$%Wse3jL|ewDB%c7O3g@u9dL$SB?n7#0hDIoX^nrf3mRF2Ah1&b_F4
z0VNBN5g){6mOhv>%N(o$2{P6XXbZ5pC$GO^#C<skNA*REvg-#s4G_B42R=pge7?EF
zjRl4_fID%|=(Ef1Yhc4Y*jJZIt{iUK$qeuYS-kJ^1Eh=}w+1@FP>o+6Pt2@)JY!1&
z<+9sCyJ@0sJ;{%=>Y7p}ht|oP(MVQo1B~H?==dRM)sFz_(!>k5faWPC`q7-@LGCOz
zjC5(4Q(|M3Zw%2eZr%Kg`)h2_jYDtUmP0~Sc<<`(9f6&xgG~wi@(ApvIJMHhpSzV0
z-QCr>D|h%wHpbDX*sMr;^h_MbeMKn)<D#)^2Fpt{GSEru55p{K-Qy{na-}=jIsJR|
zq!-0m1*U$#`-n(_<oNrlElMYP;jrdFqIM^r;bsv&UrS?~C0*ZR2l%mHMNYbB_Chg4
z<%-KJa5yu$;_J;Twx+#!KmC4LlR_xs+Uu+=34_HaNHBeKb6i_^ckAZbX6<vV=;`;;
zFe4k67G9>W#NC8e*#-FP$3y<(*>$q_>1W+$1qSl9`V70x-+zD+4Q~PE>`#!0uRrCx
z4c|;$VAN<yg_fZLtg{87fyD`ug&x*EuDFf;1g7-$Q4+g(#5?G=&x%Fe$b?RiJ5oH6
zKWlW|)roqLU!B;{yY=ERahMKPULDpH1~qA;Ps2a{8G(Fc$O}-SYO}#g(v*nK+)INh
znT!jSXi<2{_nXf!`qll9uO@dVkd*G_CjHYo##h{xT3@SMa>3yfWf+RAMXF%xRIxdw
zK4JDDJjWd?IwaCx@Cx{{h(k(=^UC-#I>Zx9V^ob@hD&={$I0O1kLtetuRUomUX8u9
z%WgOk8z^)S-=P&fybhRj;ziu%GzqEve%eBnKBEJFYYsyZ&gR&bnT5`-leBq>&SRpZ
z1bmyA`<HT}W#-@F@T8e9;{DcoRSp^hPAX2!^28Jl8RJBfB6y|na&ltT5Lh6BYzCN5
z4#j%*6SWjs%=j@6^CIHNdj1m;-8{>1foO*8V?EF74Ig<O95m)ZGsHnWP*7$D5Rl&t
z!XTuCKY0*J3B6pCzyiIzb6!j+n32aJYlH)}k2h0HTyiPf!?6*s>gZ~jrH~t;UrrO4
zwXMa<c1sjdfJ22ksHUO$-9LdQR~*pO6YE)nLHTWk8356a02=A3EbUQ$kt&H@4dKjV
z6qbFlLL=!D0ouALg<l+5^TN2T1}cz;w()_zm~d|)xE<LM`mB;>9ykp=MrgpeR%?X?
zW>_I4IL$^-!y$k*pmt7wg(FP%_{X8t5_L~FyuD8oqA^KP6d8ZJx=~|5hjA+6%P={_
z<|S>1NEtP=$D$jc+_KE%)&_aRFHl)C#~329hY%TP6n!B7tr)=198F{fv4QSugvMAR
zAjSISz;c;>V<VF8Ze{$~Sgvw=L2q=g_)n+bpx!~NK?SCnN+(+t717&OBoAFTihB~l
z7=(2wb)&ea`2*aDr=)TQRCI;=6#sM|Fad~un$)#@NpFTvydDC9v|&eML}w5cIG63%
z`_x4N_0GbNeu^v~X_oc_;n6H&Wi094G*}SI__$w^t(uxN1*n)eid42P3D2y%vda+~
zn@?EaL(Hl+To<B>CeG$!B)m8^gBD*Cb_*4U1*$zaIzZx%SWZ498=MQhQ$S3o&=i~#
ztGAGb(0kh0reqpJdCd}}&dYrRZgB~&E-~IpDg<-o6x36iTckO5qCA~e0>kP?hJJI*
z!nh~haA~_s6t}nrQw>R1o4#>_)Ws2WVr$VA!9j43bVK~*8w3Ft$tS6hRDF*pIcOg8
zV6q5@ZSVXJrrcEGl;H%Dook%30c5!f@fNLEpt*KRqKv1kEHtRI!^9=lU-B&y&h61F
zZaRK4quhTLbnc}dmF?>!V?=|#vO|P!A44MZVu*QVrAAjw?bU<<^=ZoHhN^Xx%Bgtr
zL1^=xi=D&3*PE?J%og809{62zA-kmPo1tG<1WFtW+imMSB>#R&TEv+*L1(OMzr5a1
zCiQzk(lZ$-^Su@Y7baVj8`8lR5Rm>%_3@0YU=hy)2>W^x!*p*$IJqSPdXvQ25Zy?Y
zqZI92%Kmw=k=}6pn#kp4hB86g0%Ln~xVv}3f#AO9hr$~C5$Q=3xOT{W_G<Ko?hti6
z$WS&;XxdQz1gh@<F+k40dbno_HgzfWu*hP`>YbOYHlwaQR3HEkEm5Zf_-VBCSK%3Z
zSw(Vls9|``0+%_60u(L5EU9cv95ah*R9>}R224uBxb&3kLo1=gG<m*&AyVMcMf|Pj
z3Lv_*qxH&-Bm?*M=7UB=lak6Y8RixKoGGxE;`S`AvCcIqmA|L`2+ui-wQZ2Y->+;J
zB|38cM4P2~wYEbfW^~9Z<`!HKWf$<hYR<8!wkU58oE#2uCu&*6)kXlvJ*~TjfK#L5
zP=qyt9Owa1@P-~Qud=U87{G1mUtbN{tO*@Vcc-Qq>@=Hdtc=DJ;`qQ(zzzdP^kX|h
zt;a5L=w6}#>ful&vyA-pCJ+z%l0uiQjl7Mt!a@sy{A>Y$aj)L=<<`47IP`z~<Yzwl
zMV?qV)Cq*jKm}`SFFsK9viu<YS}Jruu>YMu5O)sthfkRwC=mOUP3mIfuom`RkVr$R
zL@jVCRgf>JJw19xZ=)}AGbj(ud>Dm|fkq}~acu4b^*23JN7L0OUDQf`9y`a6|4ikq
zJJC#cqc`*6|6KT9>kp`U7O{1HXh>f-7(JWBg@U1tmr1-v@-b>5U4kE~LTX77rP2<v
z;S&Goj!I<iL2zC7>j#FZj0x@2=<1#eR;3rcI<>-iu3q#ip$(~`%y;iuPBI5oVPC$a
z@}W9!us~IeSK~8@4wzQZ#;FP}wo2Jyyv$w268L)8k)ob_Atp)JRMaXIDjKoK@u6Ai
z>op4>8W+W11dAV=_>xy>vRF=%liwIw<N+22e)WcnHDs-BPrkVfhj5&w8{!>`YAw5o
zuGKCmayty7<*!|2&G2wQT3vH9br)#>7J88hvn$Co#QS!jBHv_bYp={Tn1I$^wFl|Z
z@&`*(n4%3v*7qFMT1x77Aq|UKUM$c3yKqqWI`4Zn&D=1O5tao{<vZD?o;7o%iY*xA
z%fXG8B*TQ>zy8gO=%BFL_aa@$w#&lR<kJe4tW-<BuxQ7MsdE<s1Dw0<-HoBs#5?IN
zHm3uq-i5V0@5Zz9^oClqW^zy)<K$%lN>PlE8WGlifL@CSUr8ILFrl(!p%&%7FpQd_
z7;p9VB~!&wx15P8%I5B`R7uLzrPRZ%Ik%rkBWQJ~#StS0u<nK<m5|CDBOy^e*jCWS
zl1|bM(F{AciSBHz2I9CVA!J*sy)J^%Am<-l?Vg;|IAm*4nwHA-A=cY0pjlF~3)enF
z#da-#F3V=!@^tXU1yU1bfjSUSb6+D2ZV!5R`LXmKtC!TAg}QYf5=@>&%?GTg&ce-_
z4D7%veTlBtx!^j1dCV&`BfT`aNni<HY7ru=WJh@UpcTpHu;AbF9RPzu;oTH^&|5$k
z3LXT_^$nPOMZ9AFHA^Jj5)WgFff{*FR&aZQ{7+6E8eB0}8;vt#ee@B3rS``a=hXV(
zMkA_32Ot77^4e(|Cof_rOQt^$OVS?#|GN-#>|^NRLM|>;EE8@A>#$TM))FeFSf!gR
z=kCmk^d~SKQ>eUeRHc@-xz_Q@U?64&7z)8C_!yydZd4{^FCM9fo^R^%#e4W}A0>Hg
zRm=X{2Z{~&_=9*wXY_ql`%!|&{e@tj<`#_>w)l{Lsg&&)on5`q6ck7l*YH=+MU0~g
zmm>;#AcoSq3niIJRk+3h4e>_@Ag$Eb(aRLM$Ld)$Dc9VQvj@t4HWFXwab7cRqkZU1
z%5cntMSbaV7-iVjn(^4z*skKOQ-FNonMgp^&dlTYSD!5uLh#!O3-(iWaGN~bUZ#Ud
z^AOtuJtLT05uc-d26BJ+BzMRcZ&?7Im9JrkIomKfTb{85WWVZz`T^J|*Cf#NiWu(n
z@{J3@XrK4K=+oUdSw}A6LhTz#U%hzi6?G`lk)Ux#V!zezBi=nO?Co2}uXub{FEUTq
z+pwOy5ApzRZSo!R{dzSOxqxlRLpBLlnd7<zsl*8ePFmdAMvWxB;a=rh*Q-7R5p&Mo
z&J_u$%xCRiT2Lb}eS-jkxd<i}vgiyz9LRD+nR#nFxxuvcY6t`6EGN~eSL8(($T|nI
z6lUkddEsrz=6j}AF2-WDe?6=MbEkH-4@n51#*9;QMnw@W-Lr!o^^V87G!-}WV7PkV
zpwR34F`|(;u)qvLrK_L)qBb^q%g;fkvXy7lPjg79j{?&QveK&O>a(e-QBRjqVpT)Y
zf9=|C4K^W{Hmb{%aUDZi_g-6PBWK@;>aou4F1)?f+~L7B&Eib4fgpNxH@(E4?1_x7
zEogx9$7VHB5fmMrd#z1ry(}c`QM)*Q`vN|=3MEYLL=W#xoXaS@L%}ZD>k2qB%Guc9
zsIe4<J(if)a`9lGXV}n7p+MXtHiDvW4cFE&EVB}L#(0!bs=+kcUTVP|@#140rj22O
z;-FS2WJDyBi~wI3p_%;}Nrhei<Y2kt68g(^SiLA##1|PVw}_LB+S=L7+v9e)=?7NB
zQ@HYWbZSY*um+k637g0Ov07P>sr=r@YOOX7<v{*8lPteL)n-%;GFR2w7h^nq2e75D
z3{SjROzty6H!Lw&Fn<O6)GIZR>>|rbtct9W&e|q0DI2FLuiv@Ax5x!FMpknAj)k?b
zK1R_EUIwIs{y4Er9_%t1DA$l4egaQ1X%QfF=`a1{IU_ty{fJ%kZbP#W*Y2#svwYnG
z<N&xa{5^A4Z1`iD^RblBi)}#O#VfqPXA-gXH07Y>9p4Y^gi-ADcO6C<kc2nP?3}?X
z+wFu3GgaH*%u#{V<u=DKU<=etNaiX3tZg*M%5<;S&2Xo4S-woy2gWiJ#;}kxFy>mt
zLTD8li-#+E0q;|19yVb%tDU_@Z9qnnmz@_gw{&0$kk~;+g>(%&_b@>!L&W2TQy5M=
z8NT=F1;$bi(&zWNJ4p&1#wr4@j2nnj>~n&H>7V!`zMt5K2OYR}-4txH{sL^01?i|A
z3ww8^&`SvIKhqF_uPLdP4@iW~?x=mIHvp(u_llpWWefiCFYwFEm2_B~F3?}z#nk{R
z3=F-F6e|${k=tHYX$62t^Y*e-+X=n1$l)52kRB@Lkv0P_0OBmmF=$H0_G)Zg9Qh`g
z=EH9d#TweQi(A?l{sK0=E5eCPnMmAFgg(cBm+%K2P}H)5T2mVL;6m5hj}-555+0m>
zIw61%?8(_j`F_KPS_}KKE^Z6MPNlD_4)u)UrwQ6n3ettaI(mtir%EsIW~7t=&qQ7a
zB<bs=F)K34VorH0J4JfjMMKUiPLT)+zduki<RtU#(R^KoC{$~vZL^1WZQ%)!oTmL2
zxYj!8WDLFFm;P?B8^wP+B2U%rqj>K>N?p2Egar6H3D9G3{zTcaf_|FZBn$27$rO)r
zq{IVKG7ZdBM4dW_`Dq~fS4@IoZdXaOcT%x^Z#uw2GXP(5Ue+R-=!lKhw;#fxbk!9_
zo!*$)&nR&$&ImJE8iGrt@3VHql7?Uq^f5bNjJU|pKA;YG@CT$y0JPsD>;A>U_f{&)
zgiK4@;D<c(oWC8_)(hTA(A9Oop1zDpQ!&Tr8Xa{IBtvWa%Q1n|3dT;E!_BWc%Iyp(
z8~UIi2n-iKB_`%6Po4q&1fN^9@ooS{6@&ohkzhsBh><3bB<XGRoembcDmwgojh{9W
zZk^gW6_-RW`C*AeNNtlmgO3t@r%NGfsSkZ~B+WkncYQ=K2M=C1H4xzo#*c#Liut0B
zQq}POBO7N+am(D^yvJqU*IralVP$?E&-}glMpHj||5^8T_8wS;wG9v9i@E5b&D7M?
z)?CM0`rX+!qFkh^?Gd_V>U%@<r*6C>^j?F-RO#wQawTgrUN=|_Drei<AqTg#GgyM=
zcK8Q1zD+{`(2K(IJ-N695`$@2+S^OJA6p0dl$+=H+90%7LXlOLJNTDgzcI0NF=E|>
zn<ZYNgSVh32+WTYuG1!8K^GLmSs~X_BZZLPn&oU@Ofy6Z_^jJz^dPisjGbM5jrfBl
zdbsXEjCWs5k&XmqP{7-)bFeiia~kxFB$m5JjKKOKrY2kj{wD{TzOTHY=>rwm*shkC
zyc8#>j5@jLAWSx)Dm^PsSsRw5)nC1aye@25&lG_8^JZwVy|XYo;utxGP1n~J#|dwb
zAG=$?d)`Sru(y%;)!Sc#NO3O*D|PRLi0qAB^|irdrE~^UDe;avWk3c>O%fxy!dxNi
z7_FAQys8#8j@45lKj{f_8<xF?M|n#;3ZG&tvFeYh`>$@i#f{59Z=CTc5FJu3X73QW
z5XESMA$%Ajx~6x9F}y%w7v$QcQC^G4qX(yGsKUsmppUnF*JC?puini^sSU(tla^NX
zvv(02m|Q=Fu{y5&*85VK<ss5BBv;j699&jWE-8h36FdO*UmxEAwK*XCo^`dL3UZ<g
zsHj99r&VT&+0X_CRA>9KM5HDPz=N_Wv&X%2c{|+xt@a9>L6}8rfaXRRpp9|xH)U%Z
zaxo|927lXm?%uJ0>gh-7rGh!xo=w$Fgo@N{YdC?vbvG7EOrc%|;j$L%ls8j_EOJSl
zfzVV4+p$q0`m-AzFM-*{jm7cg#LCOz|7~8ey9orQzIz3i>1+6$hKmCk3wVq5Qw#7t
zeA`+!^``p<xN8fUt9F%CT>H-ud>i#}j><agIT3O*`n<F$I(dU5EO2i+NQcePVflUt
z%>*7ZC(+WiT?9+oG6y{TBZIEZkb0v3BG@K^SZ@vz&wBZW+yq{PvJL}~Njcjop~HKL
zb7?Jg8Bl}J%IPqlly**V6vtrv1|Q@ITZA{H%T&e2=*=ay5bR%!Xf*P7k;|^BMmv0#
zFL{=>_SAG_ap(eblDoeq|5}&$lDl6T_lTm!<9ED?S7fjXo0#i8;wD8zQKo7IIx4bm
zft-q*i3fW_FwO$opEht-_8Ak?9JBjzjGLvjy`-%Tm{|ye@B{#sw2@1w4&%5WxE21U
z24fI^faH}DimWQJy>WK>*4Yc3w#1)RbT*6hGYJZdQ-TGfl#VfEj7Et9&`R{1iYNr;
z?%7tL|GKa-WqSGmVp)UL93yvK)7Xo%E#81*5moxj*xlJX1)t-`@C}#dMhZ(*XVU+7
z;}c7WUS3WTiyLIVp+2o+x4@TywKR(h2h&n>hrXk{Pe1(@qfGMvB&TXeknh0xEMnJN
zq0_tU{4eopJBYvURGGgPKnML%WFRVv|7+3i<jm=4blx7qKZ7Dpd_W`;mvMJ?@n6kB
zuNh6g9(N&Qf03u@@8(|Kje@o}7c;*K`!H{a9OW|Z%FccN`>CFFg8|>x)&%Z!bMXaO
zP0FH5;VACC|II4;7XvXjRWUnVj>q2CV^SrBcrp4@;L^g-D}jlfyQ-R8oM)KU1OINq
zNU)S=Q<Tn(W;41G^sS7dF|Nf(T&O8R{>)(IdkVz_lk$H%CUQ<=F8R&CBVFa~KeY9|
zKtvllti{L&cANg@ABT~!6QDM(6eA#CmuYp&xFI*WI7eDD(JVR3qRCdfR#)%<FIM(X
zolDB&A6;A5dvpaKTT>Qp&pymYDQ2-_wv^QziYjSfr2gH$*U?=up0QlVg7pA&-oIMM
ziaOw3S6s&+hXkRE+O8bWCuwh;Y-K`d`4K#K!L~fB5QZ3g4~rSba|RsXC-J_$9qv4q
zjZcx8?g0t<9#+9D=uW+39rQm05kPXUHGY8hfUnO!_ux5aCu9+szzYB|aawW5PWy<H
z3VE%X+57K*Wntx=<?s(nm#OV-UY%BTU_%QVDdLMoge?|Y_1k}&HsiK+u;yfeENjE;
zDU!XD93%H(9?{F+BT39b)hT|#D;kqLLGYp8PJZ_d^)pS<oeh@c_JMK6AA?FSDRboa
zXAjH@wgn#?Okp1k;2(Oi7-*lbXXW2yh`|fG-OrbQ>}T~`KiB`cpFw%!-|XzszwPYu
zf7RKVn$ioOL3c3yFnA2qLumpH9_z{Cy$%nY48c}&gIHN3L;muO5ENO1;oiuFOn)dT
z=y%`MuOTd%edH5{!gv$4t>0WwS|NI&o<#|&-{I<_2f!Ps9N>pa0K1OmK==RI;0~2G
zNPimzzV>*Xcvsv#Pd{&sguGpCTnzztZlk@OgFS(v79Rti)jv3?A>vCW?(_effhfR>
z;XfEUyz-f3+A#}6UqtV>U8_1ans`C8y3@w5&Fa1<_Cx3HcB>+x$Ci!VIj~&P4)JEZ
z+3^3^&4SJ4Z2^B3)nTOhM+{H44#6gOBv=|oH^*VM*f2%nJ7n8atepd<skzBUSY^u{
zuP9diPLNbYxU4`3K4K-z+Kafon_#a>T+=uByp3WgWo#FxhyeHF_xhS(MRp5VdHtP$
z*+h(6dy(N2gcYNFf|bWSmW&^d5w(Vyq8Rd?g4c+=7D8aK{m)3HJMa{$$ZSc#LTeR-
zsO}4!%|S#=T>9?f+tk_Wl5u;5kD@8js?jhE_KnXwbCQ0c=%fagGFMoH_jI$*h+zzj
zCXpybhwuTWfYx>`=E=IDfhuXd?<hYmej`FgZE|tzul-n<=<q?z*+BcENXZDRG|2-I
zuzW$!%_i7o1w^3JP9d8&5W?*oB$Xv<*{$*ao-v;<B^o&rq%AT2Eaer8*oOtHBDLU3
zZAn;8QIJ>aiRhx{M7GXO3i8}>@ZVi%ZjEgj13jtV-Pj`B5r(`5bRL4&k`VHaWO)eA
zk!kD<Apj(`MhkTvolDKAsx$vnbZ+Df7jb~=ZXU}jH^vJ^_=@&a02P{j0B=#i#*CJf
z)@eRsuo+TCPt>kmQNHdOWt2u00LHXhVsU9|6;kzrnC<FIM(Fk{rYIsC>z5=Gpj6w`
z&bC^(&}A%2%C4RJkm^`l#ji8{l2PZz53GE|u6>8ZkQ=-BKqs@^iyQUYM+n$tFmFH@
zllGZ*z;dvP%!^YUHsb;EF|6|Lh+)eNPUvL8$kJ%tIyjAW$v^Yp3#yzKahmxlM~Xw3
zie8f-yw$CKgM@;4>8p$5*ZPpT=+RJ&k&RP<fm<yjvz)!Vd2*S|X%(Jb0cgiDz}zyH
zl>F^`<JVRSw@QEO`IC1bPueY)iQT(-Xa3qu@kVL+9Go3%698%nu<33AR1?Fk^&E4`
zHy=ML1f?vtIh8u64{#2nhdW!HCGjXIkY8fb?6<a2g;1X*Fw1BZOw)2-j_kCm$fdPn
zzcyrHl?g_(Cpn8+#_OCIK#gp|zCrB<&3vX0$s?MLcvCG|lWtDm<1WEW6V@pdHVGF>
z8#3oJN7CQ!@+*8seNjGLcoXv(i)FBX4fDUfqR%{#>#d2vEa}oI^>`N_ttiUUKMe%_
z9zxN&<%#-{UK(>--9iEK>E|rOLfz46>k<e$(to(l(Wc<@&+AA-cXib!l(N61VzZye
zP{@J`VW%=#W|qY?8i2^7vlFOzy{d=7y|q2tv6C!+4V2?&K7KIB(_PDZ`V4zYy~-F6
z{0P{g2hfD7vGN{Sqq<2Ze~Aeu`l84a4Y^!NKBWuWwkIx)*|)duj}fj5&#}gdNxUNg
zM=WiK4Rb>3M1&p&*w}?G<s;fi4WWQ%`BI2_XRQHESpY)b-j68txJO13IpgMPkytfy
zm2jBp$%b;7?rLDTy4;Dg_hM=}!C3ZlI@0HOz#k9e25B3|Sxnw_D8$RP12ztHaW$1i
zYynZRv^$1SpQeuF$Cf{LXRC#XP(259O}fPLR_I7PUhmn%CB^8Lc-AdG!}hq~!;dZe
z5^mw-zC0`ySY9D8(U^Wj8#if<{DPo6YK(ZTzJR#s$A@>;KC^JD_#sPD=`A*51GDxF
z&$+v@qt!)^FR)a|@+NFhp*Er^WCPR2@9VQ)bWkGGexf?1K5Qe6;uY=vV~l$N3t_PF
zleK03AyT7z?m{z6|FuNH!%9afezsXH;29e3-r=gdwTMm?!mb-Prg}q4|1yCx^zMiF
zNK)J*JX3`QcH>6!Yp-j7M>j(|EM8D=M$>vV#O4QMYyJu2A24lyC1G>GyBaw<2H_Ik
zFmh|}Jp7eziqe*M`1nV0?z#`Zjc`V&z@adJqu5M;$rg>FzL~}J-&tA=C~!gMh5HfN
z`6-c8>+C~b5VM#7T$vc0>f@$S8E%JvVWdlh4z?Zb%ht8=*|MOkwnKs^GDEu*GT7h&
z4_`nl_LIx^BM2Xl@G7<+;SQ;r-)wfTqLpKh@UgY!#;N%r+B$r7Lgo#_65j_V!}FM!
zrnw;P9y5t?mXbd`oeIzk?+OA4(`jN;#3<@5u)w!iWFMX+*%LQi18<SJ@*ETU1TvcD
zm;rEbY8-F_Zyz7nZr<UW>qi#_Qt`|_%^OMCOK0?jtQqm{{&{7aaon{8*s31jqd_$>
zvBCr<-xKh_Lufo!K5w?QjQn6fJk5S-Y^b{U`+w8ec|56?!8+bsk*I@>ko$~V5a^i2
z2sn-T$PQ1bYd!Vp=;ozaYS#fSvB7#@H2UZ(*4EkUw$7rh_ldTadiCIK8LaSgt7t)~
zW6M(jsqc-|#_~gu$(qM0hTj?%rz14hzQ%Ah^bf6%BjPF-;-K>qA$rOo5IL2acJ*R1
z9aBu)7UG3vJa>H$MS|{O5`FGcJA0zcx91^_x(uVw9YE)Tqs+HcU<L_aoer>QXbnr7
z->qj7+UacI7t7~1K%K;XG)*#9Jz~fU@)#NmR=oo5pSwevrBM&z*Lul?a=5PhVyUiq
z=|+)z&=)hlZm{I<X8-~-{n{*{z#4&<19yGoSi;7;YRtxLfml@u^j}|5V*QO4KrMNN
z#sX9_&C9*vZFgmTXj#W4o~Ighr$oF-CN)oXSeBuMj5MJ-+1GtlBs#D#<^fmTwD~gp
zJPjd!a)aHx0+Nm<t2~<fzL^37O!|sJ!qY~_Axxgn-;pgB1F^FpUc1_WjO`3#_4ExK
zTj3iywN27D*b<)3oZiw7-K~jp{z5Q!mpr91B_|8E&w>+fLMunM?qcf|=v6C5aW#;_
zJBgOf?ax@aWq?`=NX^McyNcVCdkThuyL|t_x=i$<c%^f7&Cx$xD#OwiECtKkp&+$z
zjIDScgeIis%bZW8LpviN^fW3@f1G13H5JG>1rFFpVpdR4Rxdjb>u}Wf$mAQO!dSLf
zWxdJ2!vV?<;0Ok$$(O9yD{SWokoz-TGN;}vbDN1P-N^^6iP8)rmle1>-aX(ep*-MG
zZEbD21#du+80rfmLknHXUR5+Yo71OIu{LN+0A}Vw_#sp_2lvDrLXJSR8hqKg17D!c
z>aDz!C$~-J_JKOJ>l6tU%zfQDq{VS`aq=S;0N*@L*J?N(e6@{(0Ql4~CHbo8_!#TE
zAHTW41OlMGlBy4#^bv7kMBwXFt{2olJlR?mTfmz$#^}d9qK4E6WK1WN{vD%mTxbE*
zLgRsT!eHzq-#}<wS~9FwSNENys7e^Si(2V$sD4UddPRBWx4XJoJrXicQ(FpU$2M6l
zWku9MNUGWnZ3??>#bnso9;Q2q0an_!@~id^epdb1j9nyHPW24XKBmqYZAd;m{|e@Y
z`anesKWX)kihUP_IWj_5V-0j=WXo(olm==_1#mE!665i(mbA-Jfn;II%`En-9yv>x
zxl5af>Q=}GNy2VfG+ZoO?GcuRW@)2B-Pyb*`I509>8tnox8PCo!fg3bbOf;+ETp<5
zDA+SKWsdbEN#+Iy9LRGNf)NW575{3WRYf@)1gibfO2vt(bOZRM_YnH2HflJu;~}H8
zL^C=Cp`c`S$-={$Grhi+s@ggy)7L73SrU*!2m0=kqk#u0kh>XL(p%GtOzW}-^+qe3
zN}w&Qih2aQ9vCR$Kn`HQ4zT{zkr2H|E&0k##X<^=9ahkhd+m35MOC4GGoUNLttJjR
zm_stGvPpZ_9;=)F$IGmqCk}R{gA?19{tyhRz%&$Q7PDDZUI6|r-wf~~IMb}W#RE62
zYuAXX=m(KO7Bt*jSXpD(ti%`<R(P019Vkw%?n3)jIIqo*E&U^SZ}c>NjsE+t!AUJ&
zVHMcuKJzAat`>R1jXCHBFF#v-<WM!(+|ZcH43u2#4C_J6;}&=T92xgwj{zIyt=3#c
z^FQw8uAD`|jst9aFvIDaHCTW^UoH57p||5l<V&b;#^Cmeg9BSC9}h*UnbxZkR>qIG
zBf?8D%rjGGsWNXRqdzlyEX6C$n0u_Fe0EmCIQ0x8Sv$zpryS(DV7Pw#^!yk0VV9t&
zn*;rF`Ha<61ueaJi^5mI%3F*3=AP*W`j4J0r?c9>iBnqA3sv_&o+^JpEDPm>O)VU&
z!5bsg_oGxz7rwSOs_-d4WdT0_NT_$Wt!14&XVq`SQc%u5d@!P`t&7r@BxujlzZ_IA
zs$Bm++hCz}udaWVii$6y@ymAHZk8yQCkuPcV)bx&YX69dZ?Su}iKvsx$zbutRobw)
zr0H8yDYt@})k#QCEck-0&En^E88sMGmlPVt5I7TQfl}_T3*=N?0itccrN9`A%}e54
z8&<Fn^{FW42IEI<+&;I{t_B@GBIt&ms!A@?|DZ;5WZNyb@Y`2gJN!(6W3iNV8IfLu
zO8xL=dT|mc&k9bLwuDT)NVm9ph9k0Ea9nh)CdikhHhRV~Tb%-VCoyhM$Wld$HP}pF
ziTdmdKeXO!^#LD=|H^3{IjxU-=wo?Z51dm&d$(hqr+%GR3wEDwd|3}G&II7eJ?JL)
zc2+72QV5Z|#)@t2@ZU4&<#$#4$FK~{r<5DADF-X)r%>zJi%;{BI^!7FqyX3Fx~w1*
zaSL5NZ$<o-WGL@!$n>hBSmH`}ep}}y$&w|0cR|r1690x3AXtB}bM0`IMQGUwizp+Z
z`=KF6zx8%3k*Bg@JN{Pc+f?vUeS2yf`OCmQ<#&dw?(+)t&<2KquZbx36W+YVK)LSH
z@{pA*xuM}2_60ByJ5nU*2H?bXFLI=I`^!Ln3bgM|w%ZJ`p@PI|UB<SN0Jc<S%)yUa
zw>bsU*oa@E*6N_GHmU!Y+A7`xD*LClinpqJ_&?ZIsCEjqZ~VMaDpGmHFQiDcDLj=n
z;ZSv5R~->?Xyle`g70Ere-9B4Xz8uYd$(`_7lG(IO!l;dT38UUg^WX4i@*mqFsA47
z^FJ9|Sghd-uT&9Szxv(Xhgia}G&A$!U-vZ((;gsO9g3-(;~ICFFm^+H4j9PVn*mgJ
zq?qp0>|u3jIDJ^T7gMz9_<BiP*&_yEw%@U&%lq}AeXBK+L*-?)DvbC^o=3tjjLad(
z6TUt{iX7pWkd9y_*p55b5q}$fDWcs>C8&|LxnT}R@n6dl8TJ=sQC6hs*O5ATVsBy3
zfKkcBH*bL?)JLE`2XNbr%8lL}N6rG|O{$D=aj6IF(|JZ1-b@NCgF!L{fr5T$Qm*PT
zo%s^NJJe^+?bVo3Eyr99(lnZ4(;WiTSFy=yjhneuyAsi+CsL?GyP6z5nH|6}f+kWm
zCTX;H<_Zt^OLeagSU8VD*P~KTc$;mCZ?mc}9Kon$_`~&UYU_d=vidd8Ur;g%o-n0+
znIS_pk}z)Y^0B;Ln!|pQ{<p(^TE~RLl<y98X_+ro>Yt1(taYWFdKSLgtdCbTS#MDB
zFei_jHqTp-gwGhUIEX?|d;e@c3HumIW|4@4n1Ksvh3Sf%7vRt3EwV9Ag0!%_SwSmn
z6K)FdWeYo@dd@z|?S@hx|2U%OZiPxZ7sPtn6;U*O1aD020BEud{ja$|G_|wCJr+*_
z;I8=izV5W*eGTYAhzvKXQ#;o7dAsr+4Vrq&7}VvPCWQojw)ZYfn%;ylkl8M-$>1&`
zZuiC)a{40Yva}a^jc6X!PkY~|2UGO{&_r!JEW^NI7JW9?eCh&7(w<05`Ds}4h{T-l
zBu=hhKix$6&=QS@8<`~O0kHQe&~ZXS?0>Hjq5fKs!)qxF%8V<5n`^MS{;eJC7_#yN
z?@e}?=Jp$j1HrN{Dj|iidOE`)+K(|B(o;lU$E0&RtYWM)Ye&x8Aj2x3)b|;oa0DM3
zLZYlbNr{0b((#72)mqs6h|6@M%e2Ao;ZBtK?oJ%y&7JwwMf@;0qVf%avB=_%AyWhY
z;u``hL{kj(>ah`9V`AshkTTt|QIP&_O(E1dvjLA68Wdc8swn9Z8rCP<bOmXm<$e8c
zpY%da0palCO@Q)6WUMJuGR%TbM~p^hlh6AVJ@3pe@OclsB`%*EM@*Bx?B$JyOuX*N
zu<ppXdawFIa44!0!sMk{(Gt$9_-6p-Uhd3jZHC3*Ry1^|ai(!gD70S?s8brm##bLB
zORZ3+2y05Ow`q77IWPzl5w|jO$}OZ+<|NN%UD$w)zorQJnUqICoAp44pGI;k!-1cN
zrV%cS1d@kNnv;Yr59Dj^)hI9bWi5QS(zAqg%n~5^W)_kDlMj&Fa-Hb<8QhZQl=i`F
zVjF3&)<~IyImpNnRMh^Q`^`_=Z<vEzoLW|X@O%8gE!v&%>8=9^UI@e~fgh+-#m?5y
zrL}tYq+_4k6gbd}QlqLydP{o{4vp`zRKB#Zfj{rz?nABqnbHESlCU|tUl+Ll?cqVe
ze*>hWEFY~_g}K9Y_Ii&MK^{%3V^waxiz)N?x9_5=Doc&?UhGi}TPz4p0)sR#2xTe!
z&h_MlU>rY_?{$Gs6Mh`e@wR2Y?RrPd<CUXK8l;UKySF55pAZ%h>!b1-i|g#(jp?sR
zwIl)GvI+?CFbZ8%KSDf;adg>{emzdg=VaEGJ`+I}!C?H+bQgP3TC9(-s`es!;#s?@
z`c{wXI)?UWVhkEx9*2oNcBD&Jw$|U#!+EYI6Pcn@dprS4nPen%VPZ+4NHOOrY9wm{
zJXzX<wfl2=q=ku{OIj3FF0C0c5z|g6{uAow2xVe}IzaWAKB8H+r_@<|y*|$~<T07M
zutMMJuK<E*rC!kAB)Uui;N)!%0D)`|R2ajfHts-qfHHSGQk3;HA&YuPcv4WL{*;1+
z**i!{Wzo)dNl?ZDKeDuDSJS+7b93{hpD#!RwD7flVg2bW-};Q=myn#ZHGi>oRpy33
z4XU)QBf$*CE(z5nQ-C<@*KE%LCfJ!^DMER5eJ%vba7CvG*ly4c)NJJi0Lt<YlD9Fq
zGwd(xo&Dn)2P!2US<=1}5-GQ;@>~LI*jqH@e^rA%F2YBE&-w=lr8dS`i;$}FvquT1
zea%67=)8c@fN+s41b_A~$V9`X=;qLt^4!7lLWYDTfClZ&M#Y1jg?m!JiA7C#O?slj
zaO27$N`5XW(%!-YXi=Dl+PjDN#Y%t#_&b5Y=$nIw=LjmI&Jm!}iNsrjj!i@9)u3N?
z(q+Mlj%V7!&uyjOC9ikbFoMgkt5ejNph=Ew%repkZ)|oAulUl~X>k=%?-HzOJ)L)P
zjX(_hrwM9B*V<A!Yzy{_4bgS07N(sZDhJn`Wz5o%&2C+~h;>L1SXzaeJQIWW#Ot;;
z{JfQ(3A_%U@MC3!xT1aw{KvzViafn|ckE?j2^`lfuV(tW457GBUWSLS8u9*GC1T=x
zFiOsGAL+!d#+R@Y*Yd8NHLm+@?)MLUYx*Vo_TNmq83(-S^UK>`O+1fV2{C0mO=hAR
z8_)Dv$8w+8TU-2j3TJ`(9@T!Ev9Ye5U?eeH@r@EhvE0yozjk95qoJFP^-C~#mNUw)
zag<~5t9Rnjn(=l}@24d<@<G@Kaxgi{IQY@_6!`On;92B^Yu2o4$Hs3bF9_gvuoi1l
zYXqy?IozW&0xd(?OlCR9dzPdP+r^CND%RGbq+vF;S^C0O^WU~?9m(5guO<Xfufm-@
z*k@YoM?ZWJDs>0r{Yc5F1>)qbIb%?f3aJ&=QUx{wKA89B0@_+}G2F(oLc5<u83o~~
z2^Mp6{?!wkPUDL1Uw-a+9=$17XT+L%@rmk53<yszR-#TG``iI1pDFZ}%llC<wMvXd
zN=^yfAn-I#b}^>mr3_3tq^T2+rgYM^vLn1kPB?27_}6Bn*_zH(SZ~q-iuLZt<91D*
zfr=`_FNYuM1_gZ8);}3_gWw$VbrE}>SGq@?Twt}0?)r3uNIs;)&e{k7@OocCq{c3i
zLa2gD*7gOE$IlH0>v)bPl?R)E<=|kCIQP;JvO1fTjc$`m_+41<KH4&Hx<v>#g7$&p
zXm00ED(;Q#S*Veg74)ReTl&rmBG2$xK{sT1V(DZuQ6~v_w)9}vy$nyzFe2|%oL&C3
zQc;aZ9lCby<uQCn#<0Iac{nPNM|lj{4N$1RK<~C2(7hy}TwKzVJvkFI33J^aEg^zE
zB+OZV?jg8gDM<GPE3zMVp-&E^lNP`-w^Fdr1}DzFf>7$KjRMSmP~==168v}Uv!0kL
z(ju?a2xbI4>;rZGP-45Yneap<%xXbj_D+0#31)3QK|fZciZ!q$;SsJ>lGoP-57&rp
z-7~TOEx`+zBi*~;<sB>f(dxj#^uBpwOIvjv%X{VA;8Ac^SdnRvL3&GEHKJms@qx)4
zASxy0DzOSpV+q}b*&zfKZtj-$Ts~TBJI}lG<)}1;XZoSDQJRrd5C&0hj%?V}UU8P<
zoqAF%^@i28s~>G%L#RJE62ZUTJ&V9390_QK5GRfhKF%jX7nQjodk<HT(Zar7L0q~y
zNo^EzG;&x569UP+8P2cQK-yP0syKLZB{Uu1X+Q=Ju!zQc`WAw}-^FTi1i{`KGG8Wp
zknVhCWowOsn3cgqk9TWpdQcQ$^JKwlP^)<5jE?GRkSL=`CPim;cd-gH7IkYMd_W%*
z6T_RJD3(@TFDt>*l`$`6Y5th?V31Ig>L9?_p`GP3XAUZyyB55R9m<`GSMtR7K>sdH
z1q@6kP%%rliS*}v6p8cagkp|Tc0^AC{`cr8DHPkGC-;oJ6re`20QmxN3t&%L*gU4b
zIooE&1Xg)lugM<p2-eH`Oxbg}wvBi1UPw&6M)B@;u70i_LN6#PrC<t`EFjo35Xo;Y
zw+x%eOP6KZ_f8!IGD-1BB+0u$Z|M~+J7fw=f;TRtiFm$*vOYjXx<Qa`hlQ`RcTA4g
zE!zZp4QB}trOaWqY|#;J2ZMJGHipfMj#EpSxKFK9OayvqjR|tld~~bD7lP2|CL+E5
z>36RXKPo$8&btfE;grmlhtE92z(=n6E3rEoan^xxG~U~yEUCZDFXE&9BO)x!+Wq*p
z-qV{$U8g8z0iM<33u&<tUBhRGjK6L#af#{WO2x6|<KXT@$ZFKby2a{1-7x7|-0Em$
z`@o3>2iEkf_`wuWhr1e>H<0e?oHh&#Z{lO*g!Jg-F$PxA1nTX?o{d5TtCKNGPiJ|k
z@2v-RYUqu9Y>}C&uRyxJv<s+|o5I3z@@s|TOUdIG=J;Iv_(M!4afPK8ie|x}^g@*t
z%~8YB2mFRXDYh+m^ta^b&=2E@GBL%*D!?~z?oVLB$b5d9PgQ~rHWeJYxAh|6AZ#k#
zusB6E2=0?S#M8fJf(@>P&E<?mlpNWH!`0KyjMlPliWhd3O-8=Fi;|Qki({Je3ogNJ
zp%X5x3#=y`2uE1hjgu_j!3e|KR3v0PvAJ1DHoqR$H>S~LEW41V9#rH=H_tGnhE{Fl
z5k!~CgAKF2U>8J1kZ!8W=?5{#Lt>k~QPCUtfuii(L6GyA`>fdF9jHQaH`dmRD{**7
zoDSUie#W=jO1w+Gf(xZ?)>{eE^{XiHIaCQ^r%`7(!qHPhkULS_c!k&d;*z)%XTQr&
zsjci&Rd<7<+UpBzLCrRg2x=$!bpFWBisgH!(SN?^To8t`zwiXoPvzfZbDDXC&H@Y!
zu~{tu_@f{b;R-b^FwUP)cl~~xfP!A}i*K0xbzOv2mjM(a(xwl95UsE~tsls&92J6N
z3LUU*ttC`9*o2=vKm;)|DVGdR90$#-_`wUU16K|Vhrf$7{*L9k#AlZH_W6s7h%4c5
z>>mXr$B7vnceF*A0gb5{nmXJICvcD{O0y?ow@gWx*#p4V*f22(`_&6ml7iaCC41qQ
zZm2hn!ZUr1x;UGmrDyVvrWTpkJv325`4FSpU9IE#bH^++VMYb|Hb~o)?E*>i37ghb
zP8||In9r?neGtjj2^ev(VnV;Fbpa=ygDEFOd4W@TG*$fg+Y}S?+oZ6}w*rXxmLW1z
zBte>=j6kHQDZ<0fE8`D@g{9qHhE`dIBZ;32kKve<P$PTgAo+rco-0E&m`kOT)!Xqo
z@$VDzZX7aGG)z;|5I4ihvb~%^LsGuU&VPgyu9*fH{zt7tGexk{Mbw3YrS*&iFOarb
z?liem{M$taYlF~_x)(JR9EdZwN30;s?9qMMee^leeIo_P>1$$Qt{9_v0Su7bM~%^(
z87bK$0++)K@}YPn&DS53i)*OWc#1W5-dXazu~Zax-hMr=8J^eFKooP{v>{gT)SflW
z=K&K~c&(i?J4er|;!N?JDwzy_KQUZcj-!Ug;3r+ZA?x^t=pa1TMZ(3{102?>py+Lp
zgDJeGVBH2;?)vh9<N-pHK1XEL6<xTPLPc)|GqQ28W10g+P&ScnQqNSKYee04@M0x2
z8_F03&(?Y3|C?qyVO@apqTvj_#YqSL2+|-*lwcPNwk#ps(^>rF8<--}*-nGGH1{4m
zw<y%yIid3wP{^8-W(4let&_8%<Qo4$FQ?T9azzg;x6Xwj{$p^Duk+*WbC+`jqzdk3
zih3?}>kwUHIg`pf%{Y5?i}(Sqa8E1iUH{X+i_oZB46Us_*^`A{&oO9k-~}Z?8Z6$^
zeVo8g#dt6*ZdAf(n^8Z)DSJWX`Q)wFbF{voRMgZqJ6nAg3?6_`gKnx9gHPJvJnK)5
zi+!5K<B$1Am^@pgs@85qaPh&=<6g*dnzO!v*olf$77onjJ|xmmAH2wR6+V&>)$Udl
zu`MFFW{SP{E6J{%>;n%t!ZvT6k|*>I2ntv246<|=jW)G91*x$6UNASe=cX$K`lmha
zah9S>tF@aU$;N{-D@bn*4)}gy^M_#xsE9F%inY&;Uvhk_{t2hd%nt?g!{zD+okd*R
zgdqoJZ<()ESz$=7$pBO3_o<Z(Gl@&fOPFU`Gkh*RHCi)968x=br$1Qr17l8Y)P%oG
zgTFajk2*_e)@EwPU*>Cxt31i5wR9N-M$&E>u69wo2QOlJN(Y#OFCG?Yrd!sc&GJA$
zp{^_2wV#)VEm`J9Axlk*2vc5ryVfu1Iy*j6(3e7i%apz;Z^1xpOvA{Ao|y}${2J2^
z`p>!^=C4YxGE%BA)gCz#gVCuMJ_jwg#tiMHm(lR*YdDvA&2TV>TrQc5idren)sgc;
z9#MUqZZ+Nej#Xd>rWn>hAE_{et!CV{HuV^Vc;*RULCvlWqMR@ME=h!!wfz4JyyAXV
z!c;4Fi=cL+%HBvVnN`msUn^`Xn#x1IZl~?!7AGkY*Z6QFq`vE8)ZlcA$&2iHk%_u>
z5!zdg880&DMXJe*oOzMO&5Inxb?UJie)ulrQTCE_11ny7%}YNcmkc;Zw?au>m;Z{Z
ziV)n6C+>OTYvRP=(L`GHzdk$(^BQZ6&6$IK-(WX*1;p00`W6Q*k_SEGAk(U6Ac)#K
z=IhL1ScR3jVFQ;+9&?XlOasW|YOj*V)Iwe|*Luas6~B{{jk9VEQlxqrfTHqyH2Q%K
zbFIQz)@Gb;)@Pn>7?#uJ*tAh%f;KE|LFp%PP4Y&kf)l5U-4u9D2Ll$=5n{rCk1=>8
zlwW?VN#L*ek~#()BFz>2@))*@dU)awT1f_22<dj^UidH-gu^BHBu`M7%kGb7EU#|O
z>QA#!pc^$rmm>4E@N4aRT;#7?wdqfQ_(MGbZbNep9$VegyFs|buyd2khWbu3sZIo}
z6voL2iG8lq@jIv#iLNi~Hau2?+Ms3lK<x^^Q%yqT<gLf{AGZNqX!iUD(H2H<<g_UI
z)%Zn&5F8kG3U8Q`JC5wjDsuX)FO<#8ORR4n=U*SUYurf19QO>j8+t0_bMwS$+6)f0
z#M|;kKP?JH^&`gDmHltxN-A(gh)1=faMD{P%jG!>b6Y}hg>1}Y>z<@f)cZLT|8~Lb
z&rS?zkDf**BHoy{=0@{nvxxcvF&W+01*Ee(rl*9-4#R+hM0daY5{~0No0%h+aN*MJ
zVF4-+8P0mHTcNiASOiqAy)`K#7C_TA&v`+D^>>o)4UD?YjP^2F0UB8W!n@hPeEHq{
z;aqE_Q5o|Yp=1g(t#HB#b-88PxY3Z#ZDeD1@|(!23T!s@wBoYf!TSjDLv)B%$SuP1
z7%Gh`H3FifnBJ`a-YPH&7~~edfG}TdRqXk^he!>le^|$juE2ag{jC+|Eif-7;GtiO
zs@1JIsH86T`6+yc@0D|-drRa=il5mGTyZ;Fq2abQ7MqUDdlQ>`Jm{0+&)(BZ#*8Av
zFv-l+Y~jV8|L(QiJhmP!>eDkFe<o?rFtPXSD~!*8uez6omz;Yb`1`PpJP{q3Q)!SS
z&mn13c;LI8w(%ac25=MwzPWOD+qh}l;Y!vFJaXCNxMpA0OdDgk&YbEjTD<i88W+Y`
z$P>tE+MADSFAI1A-2_E|O#mJYd`H=Zg$-TA98GLbs{KI)+e{-C(ZZ|?jE69AhZS6h
z@205v=wYM<1NK(T&XsZOQp3)hwqS0_l30625(*MlujM^r+)Kf0b<QzK%9d_k^iExC
zeW;>SVVq%ciHTx?y8_Ei>lDh|d%y-D4K%ZvPezlfr~KBAEmCU~-h3OhSv|tZ?TJxL
zi)o_~8tz?62V5MN)LAX!{OV<SC-ul%<+iMg$4D1q16i2o@h&;2&11L=$FB0ps}#an
zl>XCo+>;_#R%t7XQqaJo%^yziDC$$fRZBL6?sSKL7a5y`bX>3*Y~Df`oB3Xcg*J#O
zt=}ZtDmj_@=KLeBIhLxn_Jnfdh)1!%Hldoj<S<~M@0U@iQ;=AhoMcv9P06fk_n_Dc
zUiyvYcEHzpZyPrpEmr5aRw1XJ>uo^McD2f!Wk9(HeN5k4e*I0$8Hk4aXY=OY1he;R
zqQ<ycl;E9{UVWfPkT1{_ncr&;Nsx?@Y_9MaK~8*V)YFRbBZ|<sYa<5Jt4U4!m;tj=
zvd*>MBC&h*UO2}41@_BpG7eopsTIe3Q_mjpGmsKq<qT{^vM9-5wP}(q&ly2#IK49&
zeqS^4z+=dVDfYfK{rZb(W*Bn+tc$&{3;(`tt!B!w-3raH^FM3k1(0wAiShN-dnJFP
z?Ws_ZLaz46a!GP82`!SJresToESNZS|I4AiP_F-I;`!I#tU+q>&y6g$xb{)o=7=uE
zCEAADwkr<IVwYI3PfGp&eZNpAeQbmD?}&U}_mD&7mUFv{uFg91tdlH>dKJIwt-6)_
z61?XH*L_A2%zYw`N+so%SUuYGlG4N+Hmod8{J3@E;x$yqa+x&=PCQCzwOb|%U@X-e
zEve-&3FK_|uOnuL?{Z6TWAcJ{l-3Ka)4eMRl;K`{)_0AW5Osu842|Itcd=0b(X_S)
zJ4!`Zt>V^>E{n+im*u`+GQ^NQ#>KmUI+kp=De2k=b|uXH)0w9X6R$sR#`4ys7FP1F
zA8(|P75Aa23)g65FHuakhqVk;3L&$rJ?X~*w`xzCzrI#*$`l4^`yiy1>TO@O<3I#}
z$-fB)n_d#&4?J}LuuBHvXOiP}v(6l)#Cw2acM0G*OU3b9edc2k2Bm!ia`cTu0+-Ip
zef(Bm__2|>ErKs~0$aX0J;(T4%bS~{i1O<Q3nF#(z2-h!rt=|oUU&QcBZPEPMJx^#
zGz=&)zmIvKZ}Vnx+9aY?6NQrEa!;UhYAE;a@BtfO5fm>#*Y)x1dTN6(WO}3GF`~Q>
zX)2w<{cUVpO%Cm#9SXgZ(%D;`pT0}nwj9RM#g94MM@pvbox@#B4>mA==0Me+@b$1L
zNeZ=aG`dDOMKEtW@z0*M`$i?`K9~>&PAFB%-;wNxCnvb@Am_pXZW)cvuA!?RR8T}*
z?n#;AB!=1Ac_<?F0D8k{Iz-Q@i4oKGiO-ch>=b`X7m^L%Id$}PQw)YM5RD8TI@&vn
zi{w55Jt0NdPbUx&lFdq6un|k&5iQeC_b^VOu(H@lDi(Z?tqbh^O!0bk(}Q5YAud7i
zMS~+K>rR3PsFD<4`sQ>KKA>JR658_aHL_8r<4*nKGNmcF)KHJ2hpCO#zjH!xNbd<Q
zG2``Y&PXD-hRW?JiF`GXu5m$nK)Xwx^=}?U=zoKwYcla40DBy%2&A^W822W7w&U7K
z;77dd?He1N%Gxu>)TBZd%U|5b?1fc~N5AwV)R)9`+z9s-DR&ocS+oYc<1D@!uWa`H
zyDY^7-=0v!brP?PaM9sI#KER9)#D#LbUILuNW~?uqQ!9faC1i`%<M5*;XbhvMo0kl
zY5WS)hRdCb8xqwR2}Oq3ni=azBJ@CWzBLb4Mm714c(S@F_*W};(*(gq^ZM-R_1PPq
z?VGc~TNmsJDD)Y3V|707e+*h@$ZMOQ5I~~Yd~KXm-%EruyRu*OTp!vK(B23Ogr5Ra
zga^>I2l$jX)y>(}X3~paMfORml;3!`pC&EQR!mU!nw3nGU&M^x3)tm#=EoGq8+)N*
zR<9$L0=97heW?3-M)4J%!pBqi)5qvY?@fAVy9(EJSJMV|KpiOr>rWtFXw48UdLBz0
zT}y`qpB{6-tAXR~6(p^$j;IDM`Pg2T6bhhWoP1U4@vziUBx){ed*uL>Rqn@7QWa3p
zAPkK?9#t!<W>_s;RBcpY-}ohjhB{S>HbFH|?d&2C$nk*kBz_CG7#pW2w!{ka&^=52
z#8UxV3bsNw2YQYIM6#&1;T~(!Jq5|)HFh{OqrY@Dy=h@(XPn#-8*Y9ZPY<@}B5X-z
zfIQ%QFAJAicrtu1Pw}xR!S~PNYg9+KM}a)S6@t7_Z$MuBl@XoC*0bq_s<sW1YMty9
zRof<U>QnVG8iY&a3lt1nCX}^eL4~aFSz_54a4O)(uk3-5GU)WSrH)@!6?7yrcK#zi
zTC_2Jv`qz%pO;o|Xn@?k&j^uF$v(YC!FNsIA+3S$QUG@qSMjjcL`@oz+ZHs-UF=f}
zVa7In#aNZbdChpdM`X3(kytajEkwfJ^8!RDtrO^T;0CR1E>b&I3sfY-<|0zw+I?I-
zwHKA+0JQw0HfT(h6fK|<3eTo(^YsK7Ja7K=qdhdPTNfUbJ+WCPWI)-@V+;!fHBGs8
zx5;xkk$xQ8)gFk`9#Nul<pJ)nqvn-KT?FI0Bp8$Ig%px$3|eiDYV=XYPUlIBFY1>D
zx-at}@R7CaxHv@5DF(NS7Zmh<&y|o|_Z~%Nm`$+_rFGkX)$!#ftYD*VzU2tG4DH`M
zUP)~(C#+lWu;U9`x%%Ew$6za*{pE=bfy|s;<qtfdSy`c00+FnYpw0)N!)SpDT#9vo
z?|sgkfMps9?pD235W8>f02zALjnUR)NIaTg=^qGHxW1|88Cy;%8y0-|crhAcf%B%t
z&ZZN)VDGV}Pwg_TG@XUei44;t(7#qQH;Wg}bWoLg+ejFh_Gy(sU((oMZ8Vu_(~x=F
z9Jqo7*D{|C6SIEhrlyQDEuMZ4!BIhrzo%nhskSwm*`KI>j5m11)N(|j5L%ilp>DjT
zv%)^xE<mt7Fx2|gUR9sgAKJ2Od3rloPwlgPEU`+lx=-Yq&LcFb$?FIhN$p(o#;3Qi
zb}}$mj&C=cWdr(_uL#i8py*xAGRI6E@|?*l!sKnmb+4XBF$wxi(9nsQ%h(F1uP$dr
zeM)+t$am@hIRd$UWsbS*3IIt!w!e{3F1SoI;bl#p#-)aTy|BiqA;36ETsSbyu~@8N
z^DPVJOt@JSVxnb=tZ=Utr}LcB;=*+Z9No(tyn!?J0~2TJqly){OU7<UY~bR-v(J%r
zYLor4k(IFH_n85P3D+e9^4r@NmRy9@0)p5)tH|1MV${2>R82~>D3aOy7um{fljR1p
zLjpJ1Jl3FFxtp?#?J=spm7ODXvcZBU@GA?zG9SPI`sz{uwyPb;`T19gPqlDPaF$w!
z?_2fbto*IW;^6O8nU%O_a!c%+EE>-ex{}xSy+g{4>Pxsp{jzBUkKE5`r?fwFrKtD7
znB;mP<;pJ`7EZ4r=hHdsZMQzL)2mqLTD{4{PKY#=eDqj#MO#xE+*>)-s8G3KjgMx6
zT*xk#DNxWVq>U29cJGEAR~p)X9-RV~DCJRmZbOCPYEW+IwaXbCYZgpvv9iQgR8oe3
z(#@h>X~e~Q^eWwvM4*y@h4_?<f0IGaG`R-suEu1k1}t6iUk#{>lSV}LZ?fmN2E`IB
zFJ2>yUl~S(h(}?GjD4OXu-b?bN9qdlo)$>dq_BP&_!Rz@x!ABn(zQR0oRP2-xcM0W
zr8PerVpzS&iSr&=EMws;^ALVN(E`_K<S~}sk{y2YCI0{Hho%RN$dyE<E}(hW5gFZV
z7goAvGNul>X<+`rr98mVCkPC-xnLWx;07Md%w_xmm8MlXAfjTgX$vLZO?tB;2SH>D
zn#x`rK65HKGWg-3VlNh~yXRNbf?rIW_+VlKb(muJNQ|7!Ks)?=Mc<P8HeWxeBtmyJ
zVVyQN)AJY$j*Q-~EYB^Wc~H)-?m$)SNF0U$i>81ZcXWDabTro(b-f9>7sdwRk6M6W
zw4CM%;e`sEE)g$r5B7-MO^54+gmj3F9EaEB%bcexdmMSB%Gtj8GRF<`=+k?&M6#cQ
zw`51_+aBe%6UHG6-Nao}EijRZ^x6XB;CwFz;NhwzmRy*o3?3aF<2Z$B2Zrvl@VNC-
zEdJ!szU8`X)Z|ZX6W+>dokxi#(lN-qGlP~^H-kCc;l-jcHA2X;Z%GURC4qYN#;+&i
z+^%B0m^(%9Vt7<H+d#eqTMwiFi-5#lZe4Bh@2*z2jzvNDGhjgX`-lGmf6Xo1Q_*y*
zncw4g5g;;Te$7o>`e);<3<=&O|9|Et8dYSVVxgCMqO+Tw#xbYroz2pn^?&+lUQEBB
zS*8hb#EL_T``uB+z=S~`8XO_`|DuDnT7sQCTA+t6hb;=mJDXfQ?4h&UB@$+CA}o_m
z9+^~<A5W9bGf_#ZTeNo)(yG@cX4S;4AV@5wx8D06;jfP51m6#Q!1K{GA^4J_W32YZ
zg~tiWArwI@Y;$Jj>P&}4w?X$56<2!vUS!yQiB$M_ZImy-PWA`5<Kh+H5?@skUr@al
zY2`a6IOB#DlM<qF?;(U;QlSgv>+qW&tl-$=7UXJ^##Jwj{cK^H%db}?9Tl)kR)w!=
zqRf#yRGQc0pNU;EGLpUy6V|MZp;eLYaINg#z7cN%djYrwH2Q)SblJTfCQSTcJ?{K?
z6WbK$pnyp|&DmUxhzc0eecvR<MgrmIexg%UZANQKm#zz!>GlU=L)MfQd)c*gI8`4>
zImdQ!oH(-5Gl9x_S>>{Z2e=%Ki74fFe;cnapz~q^+t`uHXo7^sq-Q&*7(xuhjm?8f
zfadOhhtpe)A?i<s(ndMvawP^Jv`>`0qSRi2r*+R9yKn+9s<f>qpo0dD$t9t)0s5dm
zab%i@{L)Q&oADLJY864YTDE!B>s7}!YCn!ydQ7dw7HH{JAx4Bo+Lz6}wB;n?33RP(
zSw-OIG<i;j2O~TxsMeER!j_}y78=I;V-~o2OxWZ7H2o6B&e~YdnpS9CyOuUxbp^wW
zP4cJ9-j2v&szSjKpz5+7mC9ZG;gaDwloya{-@)M$A2Q#NL74o0l}U8Gukn<Cg<zC)
z?_<p-52;3Kia}D_oc{Tu0Q<Nk%ws}t_fPNSg?DWUL5QoWV+COEQf}@p>|j4hR(&c{
z^|`m1zzNJsS;j0G>Q-S&>Uq6lYU4{334}Ar)$v$N?9p4a6>q?9qO7Pu4XOHi4g>H=
z<vP594|XW40p*j6iZC=AKuSGVYS@v{EwbE3LPRK$Xm8;fmt`4k?49_R`Mb~vYFl%N
z<hDUmKek0`+XRkRpqkL)N-~l`CPj9+v1loDaEuFgOAcfnYAJhGDr{F@9J)Iz^##;H
z#*UN0eJr}b#)`q*ny?CEjGMLNpS3|P1fGG@*-LyoMhxaeIzlSYifqWDw&=ovbXDF)
zxz<o{dz8a%Zk$+w`Vr`Y?t)}9hN+_<diNUNF9&F@IEhlPa(0aK8)XD-INag6Yw=tH
z4-eG`pv!Npb0kbA!2)l%&tYRmXwe$H#HcKVk!uO(q<i8C=Nx#&i=aDX*w$oJlJu@L
zp3WF79XE8<R;mO6T8(3%2bar{1+I_)C~Y~?+VG;EL9PX4sw)rrg~GtanG`5OP&9O*
zA91!9B|GNumIqh(f?X{{5U5{xd<x7DkH$${0SFO<I*=wnV=*S60Qup!8H;xEc&EII
zfd{rV6KS}(LuZ_)BFL%~CP&o7U6&Xim7Dfw6$ORXEyO2V_aWO_U<7j!+v0DZa;<QI
zpsWdnN7*iG`1OI<%cga7?-6Sp8Lesj?Z^f)Xb|+FD+cm%_nI|sgcK*wQ)&;8;=fPw
zD{TWdAOp#cE%C3+gKu0akySH|8MU`W(m=W}FM`H<KcPKeq%rm#c7W!Nwgt@|te00$
zwPMUS1BoF4uI*~R490Hu=8Jo#p#*mn({<2SDq&`3P|G-=8hLYwL04APy$TMj$$>}v
z1O|N)MN+__u}+x6hB+5iZYgOZS1>$&740P(#dAz(LXX@^g~ebq+sxp|M2<DE%&exv
z`Rm0j@!#xgNloB6v<+r%`^Ly6$8p}vp}g(u4H-ss{Hc`a&-PHR<3swZ-ZhMu!LCwB
zAPv{K5Vhj5u#F=LX^ZX|keYmqz_D8S!7P>GRH;@}+{;MLVIYD}4kM|!aSG|aNmX$L
z(M@H3l(3gV3tV)b&V7r><rb6MZ({0a(`srrA-no<W8k<DruOS0B^t8e5F7DN6%}8!
z1Y=zxecD@eihp5yQu{fD4M>;B`^M><BKxPe(}gFKl~9K|kig+wAdN0C34?Lk_>}rS
zXr>N!cB!&H)h<6fVq8(N_u)&#*U^zvD*WN*GR69v3Wn?&=gVhGiFgZFqK1FGO7TLx
zWj*;OqjGYTf(Wv?%m8pG?0UhB6WtpLP5#zSdR24Glqiv>ru?T?Z4+84fmQ@nu<Nz*
z@(^Fs6bYy${<LF#YTAi!l#4si%cQ7E9D5yYMGnXD&)RGc8XR1z*wDPWm>SL-6`}O1
z-qk+*vjE3`UBO4fz7}}0RkAnZZx_pp{emR`ozw<Q$CwEtL^6&Q!N_0KX+nI4<V6DC
z=wyeyeD5<Us*P53tpLHnEs<;$1t-Ggous;Ek4ZTR*7@+_fx8=q1EQ#dmSp=M>^Oh(
ze7dkkm3_@eqo9sB2FFa5<q9co5BV%<5_Mm`<e)~9i%4pMNtNcIDJ<cwJPHzwb(s8G
zE$#~0NG^n=Hhq9KruHUjgQZXiJ*KRO#9n*lT10r%Twx`slZAA_&8?s!sM3}xw%t4#
z^f^{pFO{vTf7%KqHSiqf$@Na=avWOqLY2%gJI0%7bmd^d`iD!xMqSh>$d<Ilnq=84
zu)umlP${F7%{ev$g8cIw^rjMeL)z9cl!9$Mlhq%U5)GOKk?nKXIy(h9l~xV{dYWTi
z^B2spaWpdcTH~BMx-7X!ddE83NBLtJosPB5QLu(pqq%|!0o_YEp*)8#W}G#XV;%8k
z-Y(+$sAeHCNeb9%dmB7R6OXgZ8QhOXARW*osx-a6rSyvfa$G5Xw0?cID6_5O&8}oV
z`Y?J|RZ>~Q{Sp91Fm=qE^3hr|xlwmtWGa_Ux6tqEA5eg^FNSI0y&a<xoZ96IE3m?3
ztko*b0dZk4u2q2=dS4hA5E6%j2ez;;8XxWT#lR_~)RI-O%ekz)Z&&JIAlB82;ZiA3
zB`jx5W%Cvotyhnr-+e<?gh!19cjifEu{IzHc599}?H;qRbs(j}o=iRYr5%EFi)u_F
zRss1B#yC}gm)d$&!K5eWBOJu;h)zZceb|BWkGr6ugEcYzf<0BpuVjkd`G*H`W(F<#
zu>`eO;LuK4FA;t%bk*QL*xZ@r@CB1mKMC~fr7iV09rMjHDwJ8@jcQ|2wzT>S=>_*Q
zG*b5px`s;#WDO<`@QB%6r1hgI!_Qg*(z7lo?5IPiu%03heOeZ9_cH~8tE~KKa-$US
z9HDsp6aQ5P<DGyue<zgp?sqnx%x&c;jFTVg1;?M*1S6aUMb+48RJ8kMuK20npnZ@p
zKlvqEyeSC`_uU*R@7@AEn&H?ge94!We*DX&2wGX~$){kf%=sB*c!JfZ4xUj=UOg(K
zAFrNLA4XSRJt!k3@4aS`(o2nPkY{~?Tg7l^O(b956Y*Ae5|Vjk44D@gXCpGN4AP84
z!g<_H$mW$HWmpzJgp^^G45D{mdHKO#nIDh^Ys$J3HdQLTLGj39dj66Z7*|7#24(sn
zi!V!wFNawfTWuuO!>*b44B9tnZiwrQvkHL@J$`ofBunH~mdM_^#1i@KJo;7>qVe0*
zNrjXi-)Y7!$7f1rNZ@fo#^GfaEwLm|;fj|Snx+HpCu+KJ2C7C?F!_hwlPY2*ACrPD
z&Gf-K3x>4WDanww<@bxL@Ap~L*sD{rv5(;|o2y@Rc&QH#3|+dxSI8v3&GOq^R)ysa
zpLu>+;H8%&W+-NV(z_X1x`vfui|$ggPTVmaPVNY79GWOzgIucHIAw%;P$6Z6T%$Qb
zu5tVzASIhu){Ubl*Djk(AuT8ZS#hPqRn7_9SRcOm<?s{_&p2U23d`o{m*e*-$w-`3
zl?Uw28HZoaIHn|@AW`#{wW0Ml1yHI!0e0pEtm_38Sy~g2CMZFB`?+(h+_)vv2o-28
zPv73P47x*1Q9Mgs*n{saMhUySp#w0=7XRs-hK?yG)0mi|WCH|oZ;o8^$ODhm^=UX1
zCRxx>=FlVl^Oa3rbmuI~)I&I!L-#!Na&=XxLp_+1yv<$mab4IAvm$=p-6fxqKUXoC
zds)B*^}QqjSmgJ4e7}|N!GzwjilP(SQAS-x`NcCBwSgiE3&Bz6{m05bGn<eRttti-
zJp;uZ*|AiDCo&Xz-gzi~%D_TvX>_VAZc70jnSj3xhS~W?_~4wT<DUM7%_*%a@UGa$
zjgd5f<rO9<d@j8J0}UhCNN*pMM$rTfa>ok9WQ8n>Afr0jhECM1z4!^q0$H38mB}`&
zRuyXH6zoOK;3gugr@SA^hj;MB8gm@BiXY}g{PtkNeQ*-PXbt~0994I8k9^%Y$sxtx
zcF8kEa7(DZo0gV=H#}!3)0u%Xs6j_cZ?I;G&Dtx5;Vz%yhHYw5PLf~Km!VHw$#6xH
zsysPW#0);eE&Ypoi93V%>DrExPZN%tx!y8`NUCmWAXqPA$4o*}5-fU(jQZwBQx?Tl
zG|hzkHci}Kv5y?~35k*uI<|fW;=jkLkop?Fx$L?-)DErhCBX?z^xmYHc$k8iVA^hO
zTF$`yI5kV{>}umTpLHY=sH)YcDB0Gec5`?q+1JVN@3uL`Fk~ZmUVUD1<e(JlA>JgZ
z6cC;=jdwW(wxQrt#|mroKB6#Iw-%G=p49YXlR83H0IcQBat+AmBCr7YQ;d2^m$zb)
z_lw|zFKEGVuV^3G<y+xC@E&&jtc}PJN<XsG#13d9Qg;sFYa<Ft8mqNPO$#QoV~|V`
zT>Z5%tDcqu3csuJ#>S%4q6)O=ZX0QFJ5SxT^SsE;JLaS!S3R8g+Gni1!9Kz-bp7wz
zw%mtoE@|%>OAo_Y2S>;VTlj*YH&)Ee2-OGc5sN)!1y?J@3A-GzSd2vuQfS;**Kn|C
zJuH-&zF8EaKN~wLhcT-j@_e|0d7mP`DCJNS{!r!@Lk{2xVhEjd1}o1H#0+;p8kRq=
z2exDi%zZ1kulrDq77U?6L&v0YW)YG^P}<x&FVEsXL_!8r`xOieiR+js&&VM<W12UG
z(+sU297tnd;-@v2EOCilt*OINX1oY>uNPAH&V#F_blWT#&sqk5&-#lMzgXvmSlDwA
zR%(w}nKMLhwGVIshcftA_MS{@8n4jNDXsZ^ymiLlcv^i+gIm!fs)_pJklyCSY4Gku
zfx9;0(?zW^%g0_gXmMU`pO<w1!y#{UJ!PeNIPtU2@^pj#xbSmE_y~m)xo#bLSoXC&
zbL@rU0?s=PvT{DbS}cpWSGLFXa8~Gf^tA4QFv8qYrsd3@=ctotZY}W1kv-0-<nf>2
z*q$S-A07XxOQS~ey;!Xlz#!(ShTJ4`4kDN4dfLs>J&5lowz-~mvt-qfV$ERPFc&gD
zU#S+w-m~H5DtRt8)nsdEd$uq20~+A*AULGa<knU&4~`7=-?Hc+*_nOIEKY9q<|d-^
zE9B1B=bo^Qh^wG1u48V)tYhpD_vvbxDt^V5`=FuCLVqTWs)kt7D#;+~l?~5t>1Y8j
zVAiqKD85kyORd==q$jcZztNJBPPE!w-Sib&mcOyhB}y?vC+OLX3eBI$-_G;fN+#}<
zR{3oqw1$x4(=8KNTAJ0;9gS~xM>@8Z2d#-ly`Ue51z5WiC{@0sKN5Dwh1B>U{%`PC
zk{YhmiuO$MhR11G{~VZ-9}wjf%fl@0u36m8?NNh(w^@OMXU{jpV(*r(&zPDsJS+Gk
zSFQefRo{|IJ7b@^a4MC>i;wcZT|6)<^>V4))6Jot3x;|@%I(1VUBF;RxOZL%OY4Rz
zPAEbgPr{rDVLVl&Fi8GOE{jw%qOINid(6p2ZJ}vcYR8Z#>I2^jrMR93`6AiDnW$J)
zl)-aas)Az|&nW!C)6EV2t6rU5DH&8!(O1%Kmc7|#rJ&7n5HQf!U7^hcHSSwx19LAo
z$8sT!!sH6hU0`t$A0)Uh_d1e1!#M23LoVujiPTzm#S|MGePK^2cwCkc|KN1Fv3pys
zr5!uVYK&3Vl64ri9~2BR>DdnFE`78?j=$y4;(e5niV<U>n*rixEBQ8OM*+Q|4P7yh
zj0b6~OZx&>=%N>H;o4F~(bE^mH`lb8QLkHw8+Pu@6CpaYY^KbTGRjfX7!|G<ru`F7
zKBI6Vm>1kGYqZw|jUfyT!7@KAk=jhMG+m)>Y+b}>^H&O4m@W$ed%1*{vlkR(t5PIF
zP7knbA+p^A`{UqVq@{XkW?6t=3mW`0VdA49byN(kU_Oh@=hpH3D5w&a%wTs!;Nt9t
z$BQl#VkzNm1kooFNDlNRduA^%Uc~ZbM>!(N-p-|E4o>DmDd-HGzfv+0)Y>8x)+~R;
z8-+D|AbU_NcM7e_xqV2{0;1(tWv^KH<DwS?`&M<!98b)4cCxXkMKBT>#7Oayml7B?
z=bS9@PGliI!Z<yEO?0`DdoZesv5QC_v#;5t2H7iIVJUU<ls*2A?Z@~T4a+Uxg%hKk
z2&0f=wm+IBz=Sz|ostdSt4iHrV#r&uZFH-!)aP$5J(XZRi7oY;e6-XDr{<LjX)B$0
z5hK+t-@MQ;7*idi6LG+0z=mYOnsqrHY@^DjJ{KiB@-B~bDSgYkPY+@OU%^<>%QaW0
zCij_66=27vF*wsD`bVHg?@t7ypiVCG$({UXxXfsJ`iYR~e3{jPYY2MN&yQ?VkOd~<
z#vWLb0T$A)99Fh`M#W1~F`PR^?eo0&Q=r^x5F%~yWv}eGjXlh<e3%1qc;QqlVbV%G
zDy{Ak2PKWSV4kP26ohv<X0NXjEP+LJxJ#_9Y?G_)Kp5AN+}9Y(Ml3K|r!OaDEJf)t
z#70{pO@P>Fw|up>?i7Gga^Au|-NjanV3-!rwqIOZI%g*w&0pGbDDQ|Y-EmQXIFoO<
z^%iF`*z@-(f1k_mE-Q_z?<km8qGF(5E`@Khc%1Axg7y1D(EDbHzQH~aEN1vRcVa;=
z;2C8%mrwSgQG_uQ)`>5sUDH?Q=rQuhgPIg6Yiont=^%y6-*~<;9^`!Wd}JjqB%aSL
zhR<h4M|pbd`MAw=%!o8cXE4JAiU6rE<t&H*+84v(S`Pt7j*jWlC>FTJ*AdM!XU4YC
zHG#q42)+>PZtWL$hhANl>g(K1`75JYZKhwFmqd`OJ(5uz^v_iYC*ECconti9iTCD`
z!UoV;h1;&v^~0qGiJ!x#Ls+<BoGJ5k=$#p)+)8EppBhr|q~Je?AX>Q_TPCN2Xa=@&
z1LltO++UPpVP2J2Q!L=%PCVF`Vtn@q%y}$sLwUE4gA{zjl>RhVLT;aQ5vN47ICSA8
z+}y_q<{jo46-UL8Fp{B$qMBnH9~6t~h8r85Y|cwATN3HbB9E3KMpN?j%Gh20x4fBh
zQ4CX-*Bs=zy0C<yQI^UAm9?iiE=xRM#*SFaGzrGkndWhE7ZooH0!qT`!4+s5eVGFm
zyh2G6PPmeZdEH4E<K>9n{$f>$KBS>Z09w%@dmJ(#nvKutn5+1|9RhHAF?^rIEhL8P
zSIr1Fo_w_w8X{)X6s=onvi_n1Ak690%o;IPzv6Q!g?Nw5?Yw73fbss*$?G2rq-jH!
ztp4Kq!*VFNtFj(S*`yk?hTu70ay<@LO_jHg=#XFtsaQ|RuX>x%Em{4R!LeomfjFq@
z$4M=X*KXl(-SFn{<ZU%Yj=7^mSnc9fYy|WrNFr-G(9dKvgjO%4yOn78iC{>>8dij5
zK{ZZhvd9(HQ#PY+E{)l{xMj&iIJ>)FzHyRv+MUbol`Kp5AbB;uR4;#hwLB)cbG-mw
z=%C+vG>()(_3C2!Bpq=!YkG1u4gAoXkH!}LDqdd=)!;i+@afp1PO+tLTDa4p6U7an
z%L7{JhQ-tZeH)|*u`D-ovd3^;zFLY=0fnsDM*(cPqUdCO$l+6IpO-wk|Abh=I<F#;
zta33CY{|?N#VdtKqtB>wTEgv()z27=)cZVYVgxaq3gRoc4>KBY*RdXdVe{;NSsVng
z-hfEEutsQI5ILBOJ!5HA8qmO1JuH+Q*~0p2Y5q9>o`uLd7E`bh0B=}zl8*X<>Wn-0
zh|;?h^ISVXkSjw$3O2?tr;&(QSq+_}=*p}UCifI=f?l-usE=ieH8rWI31HQe^JR}^
zs(C20L^&n8NT)EJXA%kP<dav5rsWOWi<M|&=3A~FSx0X47Va60esDw2fK6IjVI+A?
z!%Q=-sF?IXHXlPn)V1}8LeHFwL=+sWg&LM(*k+<}HEa-R{hk?{Nu>K4KK5W^5UqlI
z4;BZhs#>wEV~RM*{25i!q?IT=M5)%^B+I%o87sXtYQI_AG!!SXmUp9a3lrfH$J;|0
zNqskUt}BB))&oR%YH?~?f|Pi&pm5kS12#UAb-a(7A>EnT;7Uek`!IFDZIEGU$|EX@
z(ilPHKak2IHBt4DnGTe)o`~t;|Dv`ii%^!-Zc@t%(rOQNAZq4f67_Rw2I$fl&Nf=A
zbqwoq+;`SH40LEj%Xdr|M;yy%59*74{9BMq2>p4Sg%};yWQR3o1vvGoPgJ!%3sPnA
zjH=iv#0S<Y{eZS);g1?2iZz(d9jMxmi02*7^>QA#6DP753saNTPqWA#%JqVdZy2>^
z(Tf1s{0L>_gEK-Hu~YVf>GSf*7WsD<J0Ezl2^z0m)+49)c1}|-d4#QJjCz3gH6MA$
z@6Ss_tH(u_H)`NkZ0FjN)ZknuS0zX9A$eGZ)FIO%aEJP+^wGXYrJY2#Tg3?rZo#TN
zm5~@cu&@p(s0tW*W%HiuP0B=DpQu!dYTi{gszxB~!1=&e<6lAreIX6FnqFtjytXEm
zY3t>EN?egNG*DMwUhr7%!OkIE<Q=AA#a%Ghq|!hLk6q0^y*%2%WYRTv1t#b5!Y;j#
zBewH4S$cFJOd?ijm6J^<1f$?Z{yfGtvWPi$rL|EtUWVLxbICPbq&{SXc$*@ZXHv_x
z@RP5d@CZaS^5y@jJEH)lzAt6U{FF%`GL2Zk54L^-xh$@V5iznQ=F&FtBXW!j9$x2w
zI+~P31BdcPDQr<9g;%0vv2C53hM>D?7EzRE3OiVi*hRgAOdok<Izwja;M<F>2`5O6
zR#j0k{&93;&jgQ`e;UPvu@FK!Chdqebvpu2v&QW%Bsn7I@M(nIRVWZt5#Y;Xut;E=
zgE&aB6lIRJq3}fdI#5(wEJqf5zyxL(Z#B8;0{C;n3yIsWM%Z94F#UTOJDF$(kDk@b
z&f@8S=5`d-T!Dx_4cfD5*6hx+Y=SNxk-YA$htsaqD3f@q8J^03p2KuGm|ytj()VS+
z%3N5k`XuA^h0Sat10{*Xt-!HkMW${xrEVxD=pGTf+oiyK9-uvW<*;-YD8XPgx&5O9
zfU|zkdysdnBGx<^kGDrySk{3(izB4{`!H+8xRvLLd?L=}fNkcQ0KHAc&-%DbRrtAW
z1^f2vZ4%vFGsdA?I@mu+bn|_^<y-ltuv=_Yg84R;vDbEH?tm%4<Oi;qZ*dc$0#oS!
zUF{DHwAHL_6}7Ea$=Vfrk+pwPzy^mb2$I`rj;d1DE;uKhC@*I1qJv@&O)wk$@GRqZ
zUsVzOa4CD}U{bzeS$laqg-~!KpSl(C-Ta97g8%R%5&a!zNH0lh)iC@UKiGtV$8xZH
zvf-cK$o@^rq;{*44zO%!3?XP!1!=|@W>eq#ktMWRt8iIS8>fupOQ-np$&?e=F!b?W
z8NEjTpYG&y9=nLYAF>2etYSX{T8}I~<w)|u%-<G>(wW*NzWD9%pO;plEV8aW4OM=N
zEZ1eqz;L6_$)=`{0UO@ChEFSTSG;>3O?b1W+dUDMsX|`uVX$No9fbrw^++$+*qU6)
zB<85zxdkQ(Nvn;kq<F9cerM)!KYTi%8?IgW?1z|tvjydx$%WX4j@yH1Ok}W3TxW<@
z_FVUv)4IfS>8i;h<Ib5Bq#=JuUL7%{>Z3cPWESN6u=Ag03v{1TB}R}cq-Sj2D4z(H
z;3Kwyo`aNg6?e^4$(~z@B7Q3;S7Gppj<19PT{=Nhl8v2aq#~-{-i8~L*{E`?mX$!h
zK;z*e^)Fy;_E?$SJ%a28URM2=fBox!-4zRKB?tl?3RUCH2M&2N%ORMor5l0i;zqHo
z;`k)ALNI=0Yi~R-t0G@Xht!{Oy#x8XWI?l<6`Xf~m|A^87VpD{UeI3ocseR`mWcAp
zFHd*=l*&D|Pf>U+x{I$_nECZ<@)?4=NZuUJkcH>hxQjnKtnzAE#qn7=LDUD<J036S
z&W{ON@3-g6fCX2LOI&@+i8woI5`ygxyWf5M380Jmbk%xbq-a%e;t5&4`p7h2UK~!-
ze!95vT=?Syo{6~K;sNW`*p0OK<dNUMT(uzA(-NNJqL2lv#a{r_!R4}wW9D*_!Bigz
zRO?V%k%4aJFruDE$|ycCWhx)yT^yJrAMq~563`Z=0m(qZ!)Wgz?J1RmSUDRE7X=pA
z!ikenk5L=iL6OFYLY+hW6+#19NM3KXW>UI7Go+~Tp{OEjUz;~b%as<+p9XDgPH5^l
zGXZZ5(;B@wtu_C@(6D)Q)iIy!Ymv7@{t1i!|C_CPM62E!i#5918n@Z~<8Y5psJfAf
zMU{PqA(<KO^R-q#kX$<Ky(Zs02|ae>L<j*Mc9Pek4{(=+k|wCIS<QdM%Fe9qzaXer
zU(cOTvz;dO4yK-wL@?afRao&^dy7*B8xFJ*_PunQT)a4aX;-U>eNldQcM8IOJ;q^s
zIu6^>M&XuU0M3-3i-UNw$K*iDO&D}3S0lNZgPQlTIcChy#j2F3Y!ryYhrH^@+y-~A
z&}P)nC|{3L9C$K6dY<9E^H78&a*49O_I#;XxTupfYwrO?-er~(Ls-@;ECjQCurH$j
z_nA8Aj`Qzj#}$nOJF#__NCk-R-LhJ8TU|q$(~bVEyWz_2?ris$pPz+pz+SPaj0qbF
zAPhzHPRAR5{#(EK?~d|ZLLT&VKrEyrlTSSrfoQdWsI?A#y#)t8s{U8Esy5aw0YtiR
z3#F<oTTzKR*b&(&jg4k1VN*5Kb(d8nPL|3h%888IecSp(wd$3jsWUfW)n;b|wv%QB
z`J6AnMb$*5kUzXKD1)b5EPgt%>LX0<_ch4rivXM!7`r7fC@UfS?ar`56UIxJnpbeW
zw4E^{lN#Q|D$A9ZX%6{3#5y}jTz2MZ#uZl_WFxB2Bz?BLO*zt5q(!!?Ut@iPKOpRD
zlGOtYjoy*E0W$>g4~PdNjj+WE07>b*J7P{<r{EWM%ye9f(OavID7kePw+yFgrU25w
z3iZn5=hK8<8kzeZ+mb*ht6r`yMZ1d)^8HU&YKK>%MgjQ_)69Xbz$QAZngl_S6qE-v
zM(+Xx;@r_|%E-=AdufbV`b58&x{DcCLp0P@ZkGN(bu(<|>-wK}^QtgNSd9Yk$G_W0
z^>G?t31lwP*vI}4Z01#<woPaL-8OEuk4p)v00Zt+|J3JbnM3Ix44o0yg+|3R&2JWt
zv`$(5Uum5Y^I)aFZylEzY2{?H$yT`<WtM*s2^UQZ8!Y7l+IiVXrL*b@<^u8j+HuLL
z9jsImUU)r;yq|grf9dKJG%TO}Z5;QBCAeefZ`0JKcpCh2)nAGV)-YgO>7|NQ7q}m=
zvzoAB&<>0JPwE3>^9aZ~cSweEW6-7)45=}E>t4PrsQRi_h89Mx{_U({;B-zSkRGUP
zg4K>|XYaCfVwpRt=$PzW8@ixi4uv(=yAJ~fC!1W=tsDl8F{W1buoJHU=q;+KB+J_S
zdc16)x8e^YZM77XFS6l9Wlaq>26YA%B{En=<)4K>ueQLA{i8$!U9A^peNKh**jmde
zjyn@>BdZY#y(;&7|D)WE%s8*wYk&y*qiiRwVg2W^;MLJw4XzY8H%4|!nx)p4jV6!n
z0ZY8*stH;YK+2DbhXNGRGST)W$_L>WJrcgBQYTzbA-;EwM3;$JCWlpc2~A_*(6GEZ
zqwJX*_@I2n4PsBF(`CY}jK`>%rwIP<|MgR7s-&CuKbPb0>usEjR3p|(sQUR5_IY`f
zLymBHVqkkZ+@&jJC+dLRyuKXU2D@j~Ps1dn_f^M_7ivZ(`z=%r@8@}f!H_x7i?L~Y
zEmDwGDQx9(JF-?Qkr9-LH_Z31JW5SEl?C6L7^{sU&-@ZgboUIF;R)tm(Jq(*8kRso
z8ofD^-`x?x{Nz<$GvSZyd{(%bf~f&XO9-WAU}yKU;&ZypDXx()ent^?u%6zDpmVU)
zJ0Y_sYL;u!A$cb{q#^txt+Ri1nHAo<HUA8$Y!lbfV7J9*bclLR{-}yjVU10~@99JA
zcsYOsmFnaCkhq%{tZMf1!Qd>^%RwfqvW5e3Bjzxt$tpv<%^_u@0FPAz7RX954*O~0
z+j6V+1@!je%2g2#8Yo&io9`dajP?_B5@v!>nUxs}*2+4}9Pp3_2R#iB64$bdqSS5$
ztKcB`<H)~4gWkpBq~2B+vGA>0R5(hm1kZ)5k&_U+_Xvqi;bd6Zk%aWQ0$LD;;IZT+
z{R{xh+VmY{A@gKR)u#5a_R~`L(s9rkm>t$(OvO83u$Gy>4(`{{_<(27jE(G47lAbG
zoTz7Xif$?x;a9(Z^Y@ngesz8;`n_#=cUJV)dick!RPqGt=w|Zug|_fcuVqT&`n~7K
zOKM@A@10`#3isqJXU=W^XD(x>*3T#H3D<RFIUaX{<{68IhXpG+<7n-VlS7*yX1H=^
zAF_#6=XTt(Vyv~I4dLL@dacIswIy&&x-omQJg-DM>cxED*6P?O!)lO)r!8!0RV;=*
z-J<4*`cY6K-V=#?u5Le;1%~$r-(K_pt^fJ~nmi(QLvd2Qwm2vmM1LP{w+v&lDQOw+
zR?Ga)AM6h;!`p*5hxfm3nZM|odi()Ce{@Z<D_WNSF<*v<cu$lx?CH#o7_!KK*DY-i
zE@dGQ@!0B3z+%M%<EC!$8di*3D$EsD4JNRt!Br%R;lfMhShk4$@5ujMRu2az-oP+{
zSl(z5C&WQBHpT<UOTWkJB3jw+H~|ipSS+lP7>I*kjqquBD?*3igV%Xaxj%1}jaRC-
zMguJTVbMs>azqTyBbb1pBx*&CV=#vL0(!V@ZHQ>ATv_mbX0pVB!=*8l$HG!m$3V8Q
zfFI#-p$J5c+}yj^Ld>sfX?b;@t;5?Ep{(BN30p1>DT&@fyGnCm2t$ZkI6&s4Z7AGo
zOS+@kVD+l0^>)|7GO$=VF$UTSfe4eY1X5U%qr`I6Cs!r7J7ihwk3=cQWzSV(B#-78
z!D1vp)#g?AU1#|cK`q?$$R;J6&@aj0J;nr<MN3?>|Ma(uMELjGby~o6nkdcS*@hkm
zkq%KLPg_>H>2`>;f)#x9@%!7aSdnbB%Y}|I*tRii9z&KI-~cAqyfx;Fd0E90*t%@A
zhEjw{#8K|zX~yv2StXf?CqtLd;1a?3+RC=m*&!C2*GMmon{aQ8qN9|6^nfPNCpPqc
zhESS+Yzl&@*fiIXFgUNHVHhH8g9mMFzd+-lxt!Gu!*Mt<cqSgS|B`(%Z!d7bw4puJ
z`x*7D8rUuY8>|8qSHYiR3)y|DC;8__O#IGE;~?nvdF88POS%YD-Ip8DxCevm2O<o2
z(Rc-yeSYx+r=GfpM_>P=`;X`X7-<V+L(|K>`#om)jtdwW40+|EaF)sNy{QpGZi-w1
z-kOXOV<%kHEmfW*&e`*vV)C4$Ip-w5`_?{2SF4_ue|U=V7@3=0@`_VQ|DZ}But<|n
zG3Pm_<T=aOIm%tkQHM6c;-oRCnv)r!{27R#>ji$h?Mqe241P~N6<p~{7+oen*i7vO
zf6}>xU?TZaRl)fFIEF#l6=T(?&2^VcaD3680<8rNg4Qz>ZN8)sSgp(d4q{Q}ai70J
zEOuzC41(`k!NJAGyJg8xKK;jKO_m8^B~&YC&mxISIi9p&yux2&#dkw+9RBaV&nhZO
z<a0)+Y_5_*8#lf|>s+~KLK8rSILJaCZl4Fsu{o_ML*rxE2Gqta+OcGj7UFPUftK6-
z@(|d@OGq`u9wP7b;P?OX5ZK+P!=DeabIW!jV-?KU_cW=4Z!VbgM2D*U)si_slhr|L
zE`zIc(Y(3drAV+2eC>{j11@lt#E&QbC@Y#9ThW5`?GgJ}0i&ZR`<Muu)Rwm4$4eM}
z?#MpY#FdJSzRAx$&3#KXAdAA{+hr95WuJK<fNEk`wkH6Hry4O(tjSJcJ6wV>Y_LGC
zEYh%S9FW#(Va=3nnc7yMw+~#-6{5^_5ws2lb`C+>E=}=zMxs65&Rz;~pj*|0sOF6@
z2&BF&cxAn$J0C2)uP=kw4c5T{>EH_vARu}H@i7HdO=u*$vqzzxMiWnBV8zYkmid>=
z>g_)0Z0mieig-s)D70KeAnPRn>mXA05_LzC+`I_j^2J366>(X^X`aWA8!>UR_6!L8
zJ&5lQpEw1@0nl(dIT3NWP*#76{apBF^e?O=JKKku3UddV9m6>c<evAe-q(;fVpdyc
zEcy+=oNemRhBwo*0|K25m84VGlzq;b9QC-e6p#?nw;w7l&Y`*7B7UK4s^qi{dDI)-
zuA*7F+S>9;*HJr#WB2mzopJ#P0wQ+@F(5MB16u0v56DsgzW^VaLK$TODDyYO(SxO_
zlYB&7hAI~Q8zZ=y;074X&X`3VLbx`wvkVYopiyE$iuavRuvBxTQ9k{XG{2I2m%Sg9
z1dYlhs-^bCv8-7c$|z$2{=%s8A_drqx&egQ{jX$)un)FRV=Be}nk^f%6h@?z-G#fB
z_1D=V16GCVqngE_M8V^J#G!b|(K*rRc4v}b5=t2=f&jwWkpb-H)f|jH+$vfENBBfR
zu;`lnpK6s7sRjSBRXCkmBh>r5%S5Y`ldbZnbf7=|G#3&@;(uruw0<!75<_M=U^B_v
zRm4C(!rd>3@3yzA>FY89$kBuQEH{xl*p^IAnYo;^U6u&UOKR-oq-fRZ%)o-vD182$
zyl&c^Qq#T)dtn}1R^Z-)FUgI;iY_Rmn8KQ$-J=lmQDU-q3Tq24n)CWkf(^mjr!K(J
z>-F|C7Nw=)pDbQ(7K~|CQ<({63)k$&aGL$s1Ao^Aj@mzX*f2_?f$=f7^wXS}tBQU1
zkmqqJ0O%jm{9LN4m>FQW*DEz`Ez%x_lG0@vFDia7Act4a!i=r&S~7sPE%QmVc;=M%
z6=?5LLgDq<3MjHY5_9!a9b7VX^GO~P><vD^Oi;V1FRsoUNrI>|tea1wJTeURPhE(s
z*GK875y7u+DtBx0(CY(|<s+~Qb#j_lwj;oCOUC763AU#vub}S0`V-h(Vm7OXkaGBM
zdnJWd7kHT{<T`2ir)%6`R^;FeT#EZeE$qo277TX;N!&aOSaH(mm#2z%v0)xR*l*F>
zrD}h3nRzW7nMUt)Z_9XTTH_}ZOTVaCFg*jN%8-DZ8UJyx1g3<Ce27PC?@}sG*N^Jv
z+1>9FlI|}OlK;eAp76g>Mcbt2I9bfqH@>c);qvs%v!#Xlp(Prltvzhm!y~m&M8b1;
z7nehlrGq_%pxwcXDET#ACz}i<fGmWoh_~W2E*bk)^flM{Q{?KT&O%IJ0=n~Q#4HYm
z-R>!MT{0|{#k%soD<DkWYKMN3n)^0u&XRGrWmVo$hlbQ<?euv!2@dLNHXZyqJR#0F
zqwphz{>mS5RTqiKzEjF&D;1-Xb5kEX;5thmaT02t+>qna57K;R6dC9?C}Ty<EHJ58
zYX=$0rl>37U;V>;?TE86SySdMt~3)kdL3chcKLsGKq1|7E&Ee@CTd6w11`nNXz8*S
z+3EAreqSe0NUbPwFK3)<RGLk%RHQW9WS&uCmwL~zSSjOLms(3JY@<SJ4Qd=a1rC-$
znY~&_VZEu!y*z@!PMw%<)sUTR)4&+Vi(LdM@Jey57F(M=02ag<tO2-U76K6s5c*mE
z7_~_a;ifFvC)vC_OhNx5>qcX(53NH&sDYevLvFuSNV#Pglq`H>h=?iWZZK74YyR30
z=uAt>bhasZtt#Tn2P?pz+M_plz9r%iQqS%Jh;nsA=>=7s-;5sVY2`hkBW44Lv-PmT
z;JHRN!(jF8Ooy7<Z~7hfb`~B`Gbe`yhJ1FNF#A$ViNCcrX;?NViMx@^y)q_6UzNqg
zMF6n%a8BDfY`G}nA6x*5&D%M+;$V-j!T@cObg{V?C+#bJ!rk?SCQgxtM+O&cmJt)|
zB<^-5h&hYDjj4mWTJEpG{qcPv6J0uOXQkA(4LZ9msV{)`Vf?qR!tKMo=q+|;`^$+8
z>_M81$8JE&2Cm7DO?~_pLh3y#%RjKSCQb>C=uyjH=lILHg7#+-7f6n+pw-R12^N-M
zYCrYly6<vbQjlP7SUzXUUSI$5V(UzP=S^0E@(Z*=pCt-_K+Qw6GBsqXLBzgpZ8wfA
z*kvpms4qn@<G-7q?)L`xE<M45cW`18%zInIt8SZPjxdDV3kMq2bH{wtgJv^hDJq{o
zXca+1WA=1L^0OwjaMjL5JZ2A-?KfTJqgk!Xq#Z~r6Xdsi6vqxWuVkd`QDAfBu2?WS
z?L*{B)FR;*4Q7v61$(-<?O^D?i0PDdbixBM!CHF%x~MZA{S3DcHJm(fQU|qiM*|Q}
zhNCBKGA~F3rd9j}`WN$AuGhMJM9-@$Lv)ueI@0GG$t65&VZY|ml(5%9>B$=LB5X*7
zmTWu7Q#@ZE-{($b1Z?ZpH24J0w%M9OpugWFm~{2n3z%x^#j9*YMQE&k{KffrMV_t~
zGl|FH0p9=OeCa83{!#1@tIs|7?Qfp{17&2W5uM`xRgAXx_#_*WsUp2WyqaH|4wT?F
zuF{g3H`+RpO46UNfnh0N<sB}e-E-Y}lWokH`13_DWZPoW;v%IfHtE@xro&&n4TfK=
zNpn-hL~M4=MC|WF>3US`aE%_vRsOeeb>j*c7rcO8Us=PCOML&u6)-Y*h4IXQQp>o)
z=ij`Aj16943jV4_6_$T%fzrkbE(d}Tzbc=CO{^}PuBOrUjd~I#e`*N!pV$GKoqQ?G
z?={E;Qw|H^`4NUe3M?aH6t%KEa|<JNj=ju3p_g|qyRtCEE}JGja*1JSeN^Kl4Jmmo
zJaIiO>@>}1#2;babRK?t)`_g-D(h^$n>QQ6A!{#iA?(6JydxYZL2E9OCya4IC+^k3
z<QyTY+$(`VOD*6vt+%W<Z%Z|W;3YlcB?Geyx1Wq)1Wo0yn%Enh6`kGUJ;SqI#)#_H
zJ>PY+jrB0ZtTI0o*a^KgtNhqLtejBm9(X)T$!0jlOgBcSWPx;mW##iYGXz#<?tlkt
z>llG@gS3lAMbl^~Wu_`I$@h5cFD?jdW{_kz36>tD!J0%nBQ361e=64b%cTyyZD^1m
zFLwB$F=66N*E0nU2g2Oie@K(Oi<-QyRToIX*An)?5OYTdjn%Hs==zx^f<_0$HhkTa
zTGKLJQD8n(R?pH9ePR4SeGql+gC@p%H%bDiZAj?(p|5wSmlA>wwbdxPu69CZ{Jb6+
z+LaNi0l`V3n7UgESxsx@#!qgtK1ujzyl;6&qYa8fWDRB}WrPI4VBJCBm3$A!ciF)f
zV#GA3D<fa44WnDfs6{O;1F@Y+JX%FA+b?&1w1{Ulclu$1meAwwC9`o7O>y%AdMTa!
z<=gl5G~KvA`b!f7l>G?dQt|)sNky~UH4V@TLo_f73mbXj!D>l#w32O0xLWa5+hMg;
z(Ck15VRT=lZn4&NBK0A_)zW;4JRl|ojG%6MrM+<VG+ax1Y;BkELp>#Swz`Dqo%o!L
zK%m+zX*5qeOtH#CDC#A2*GAAQH$pBq&z^wlSNs6Vj-F1`OqG3p{Tdq%l6&*n`n&*k
z{(M3*(*vo|1=*0n>^-3~W{$m{27Xq*XwBmF3nQ~3Kr%XbqEaV%>-kc}&KAVi*yv14
zZWr1J2N0yPj$>aDDBa24Am-57pwKXbzs=1GnqTWx^jXBsCbmH}%XXs{k}_L^%4TVA
zXD0A0p}~<ILYE}U@OGHTNdH!hALZ@1PtCoueVXBxqYsudg&PBk1mhcnOSTBJ7X&Nn
zmhM&FXpF&C5Bx#B(2uw=>u81sFpKwNloY60zMFyZoOBn_?PotWCZ5_@&F$;`NQIu2
zu&Be1XdLE3E+e88<?vZ2Q&b5|C3vM7W|&AaFHw+}P#?%oJ>oHUj!Au(yhD_DSuX@c
z-QEjK5&+4QTH4}CcW2_vxoCfRBI|tva*eIMm5Si0Gf@a_oe*Pbj^Fe%V#Sc_hE%29
z9a^=$l@PqDVlO^yVw{g><eRccTZ1^rkZod1D$A>O`09e6XFzI0z~2@#T;5ze5JyrT
zZc#hdI^i)|J1X3ZU?)JX*2_wlmU#DzogEMF>btz^*3~>{dT_KP2?uR-%GGny2nUm;
za-gnhjmWRPWwN{ofKP)D)yV2_wVQXN1?%!<Chx*6sGK2cDsuLY-{d-JL}b{O)(GTQ
z@HtZb#DZX^TdB%w&KZmKbJ!R9pp&|AFHEdLI;yJ-`XV^0s3Kl22xq!O$aFMUSlb&&
zO}e?IbZ@;1PVc%HIPP*qGAWG8=2E7nJB@wa)HS)ZpSj89_LNS2LT$kagK!Yr7mH4E
zUo@wbDb6x9<F?Fp6dbC4gIr+rw}t9O#fOI(rQma}OR*8>z)pVggf{bC7A`^a)%1TK
zbe&Q|?>}p5yqjUNLTIFw8`=?M!Hf@*tWO(eP<Rrb7kwV|bThN&@;x%lcpo4%sG>Hk
zJxA`Y@W7urL>dP%<Lbgpa__H^rfUxweydJ}*KcMIkyNRkqO~OU`{#TbGN$V2g5i11
zw#+oNlv&l>nNxT{<VVN&DHWyHceJ!fbN@%F!vlcHIWYhA)0nu8u|p(~NGhzU`&Wid
z-Y&wSKEM}fo6SRmW?GhWv=L2hZBZZ6Gh316hiCXYL8;edJ@|KMrPg+W&*ue!c9(?;
zXU9QX%|mu*W`WVS+fyMJD1hK$5kp?vH~#O2sAtO<C|$h$9udyLVUH<s#AO$8{a@Z{
zWUe5<>2OUvA}ZUWq|hK%tv!Kj*BsADx*|K!$6at|r-}OEFDv^DtkiSxzMq{4FE4bg
zZtGXvesB%_6ustbPL5p_3EwQYPWb3d(OTYd2puTA+oTOoCebP@TWt1>ji+1Nr^vhU
zCy)4lNm38m*V#Lie|9<B(3*4mvZue*q{uIlGM>>AZgCmVk;_Aq#E{{}xYx-U_gy?2
zx$b<(m_VAK5Nw2o;CQ`ZFh7rbbaD$?3EPmJ%u@43Y=;1U%F<9c-~z4bl!~`91J(-)
z{0NMqe;Gv=t%nmOucpkb&PXg6<x18{3fE@Jx~RAnm1FNrh`h)@pk@%62{c`gy!RM;
zX>7t>EH(RBY;LoMS+b>o`F}FO>t$40#<SKs({0Xcb~J#lY0ezN`QRQqb%JT`WJPV)
zJyF{Si_&ly%@H@e+C}r{w>7DGmEY&K>bjqsvjH?&2j-K$S-EbA*A>mXrLlBLlAAcN
zoq3TbO(Vn(WocJuGQ?HL0aCCR7AbejueB1NhFK%0Fa&C^Ro%)K_lk_o_G+|B8=FIA
zIe7Zh0XnTxi-BpV*EhB+N=&%3Jvqc%#%eF1IoRe>vc&-F=*#O6tXGoz%v>?p=PEy>
zymk-p7Ie7SrESQ2_OQyfDakT)xAuN1H_zBbo(;|Pz;kcH0FibYEEXyp>MNu&nkOLr
z8YR5o;b!hnkPMbOK8W2xQTT2Hh|n^IN|T|sC6*JNZt$~rhnt-{k<f1o-IeFUiGhbQ
z{MMuiu^xc1IsbwMorZmH*TWtnwOsup*6!qf=B}KIxYN$mUahf6<frjHOhdNji)i}q
z95bJDMy1HXo^s)=%?OW@8NtwCJJsINbq65d3LuN#AfU8CUQ>Q+=)~PaSFeEBplY0L
z(y^*7KNRQSOTbUq&OXueEYU?h@up|2)?saKr-lwj0J=t-meT)4ZbRE<d<izP6~T*)
z-xI^&$W`<N75ir6YB;Ei0``pTOXkFSG)neO86|5B2d-wp_H^Lz06n=Z<$9#}we&ub
z!`)-bx5^(#;rg)@?s96!-eUvY&jwt9Eiyh~z>X8M4#Q$b9lJU6bQAeeZ*<<lQIQ8P
zV>E>^)hmweSS6Nm&*Of$o{m?3dB+Sem-Eax>YWuj#IStD{da&m99ogGF$wR@LjBwb
zT~a0UVW(Ku+E9t`<*o0mL=Y)x#8*teZV8aCavdv)Y<&D~O&IWId8G$0k<-mGENt#t
zz+a|mjOnqi(|ek5E{8HPkhm^n%D4v><V|RsZ`qDpCi3OjJRQj+=3RRNZel<6%t&U_
zdZ_P4GC}SL02cR7JwfgnH?w^BY@OYRIL|XK*wsFr)J8u^fkUid8KE^C1_0rK8llh@
zt6w01LQy1&c9jo=pDJ^VNOz>fczW4leAcKs<R4K}mLWHhE`5Uh(YDMnHiJNMF9p%t
z*W!@!uTyPnr-OA|qB<+Vn`)eT&>-mMHiD%>29L$InSw%hyBw{-4P6{s!S@{5?nBrL
zM|*CsCz7h|ZYCsmGmoGd=fkA)3@M(2J%SH7pE{(dmM-V+Bf$@U*wq#&jLuO2H9*S0
zKlVC-FSd@fPFz1La4Q~3oRT>*dvG9zDM!knuge1dbmPFfp+@K7%VX@qS?Z>l6Lx9)
zmn+{oGTyG~6eWM;OdY@&n46GX%$#|F2@>9;M;MZNy>Vd6pmveb_Vp4GUU>JBeA}gp
zE^IBO?16x^DZ?L$5u{c^6C`f?R8+Gc-ovrrB7@>uM@kZ}cqqHR=Se)=-tcR7`j;C%
zLd&YYF|Ct&i)iX4s^9I<q4Gnu3&D5m3tL9Rz<m@l`_U_@hKEqBpS*HM6%($56-T=_
z9r3&~_T*JCY06w&_{Nnh7azaMBjxl#*t_*ZYaK*yVkZvcLwLFvw_~kd3E^AfA$G6y
z67@qA5)V<={)9ZjOx=3F?W<0(AMM>M>N3rjazp+9-D{!+n%43q9&$j`dbe|KgxlO1
zO_qaW9?5yos7J!=g1I-fA8tQeSKxk44V2(DgPD7j7S)fEMM@Cp0K?$sh01Wxh+ZWI
zi79m(0e;>ZrpZmlm3$~$LtW@l?&}BmIPD|m;QNVZVU58$|2`d(M~Q3u6ctEaob2vw
zE2fUKFrk{USWI1sc6E$@FV!47CyJLg(M}-XYh}<(_LSk@8M&Q~Q|Gz~cIxzj05aLx
zE&$O^(*|#-U69L1+~0O}9hjsaz6`xU;9#%iEf)5iY7yxvOwH`Q6f)~zh0arr5NeR+
z%gE#D#0MR;dgk6(OG4cbd!V~1vKuI{x{(}MV3e@F^Ur6^s0(~2Rq%gzjwDcHhPJq(
zFy8;}0wXE7=m1ltCVzL*LGIeGVtEk^wzoqx4<&!CDgc$s23A9<D$rV!P3uv5z?#^*
zJ;}vnoqHalFz1Bfy>b(la8r~`_!J}L$NV93iWB>iCL=pLYl*(?oFrY~eupErVV#$T
z6++C*e;AzZ$&MsQF1|3BWDw>|_%`IuG=}bt2%cgg6xb?)_jPcvvSb~R%H6i5vE+zs
zQy9CIN6d4KBv!5!mBLGHG1`1}u%jU56eVDY0@~SKyd+O25_={X3w`ijHMzYE?QGE)
z{d#6WBWyux%RRR(&zd?iLe@4Z%bLYE7%<okC3%dy4(hRcmJ#TgN{o~&xpIaue6%ia
z*OibZahUpVAkC$b1Z%$c1PWOjVeAzct=ea#LHcs>FP7lnG2kq&k*tkhy9^mL#Z2rJ
zjv#X{9wqsdR^~dVq8*k0T<k;+RwZ+=X{S{>if7oH5&SXyFrqJNq)zZo*+tro@+bBL
z)U%x-OOr0r)^``1>BCMIAk}ULWh7k*)%PSwda_9peBP>CVe5)G;%?Rf|8dybJCs47
zy@MIV2O9%G-x?89JCwk+%a@)U?P%$rpKjhTF+%n2Ql#(&Yskg$5$Tp5Vm|-F2rR-|
zt!9}7K!)}G*p4-p)frP~7R937Ehbl4<;AK~I#uW)IB)JMGwSP9irp$pPzv<QC^I%V
zrMZ{l&KFy_D(Da;_f7(g2H7e1PL{FB87`fftmG}bQwb8a&tR*>!j-zY$%#9rD8EL1
z<(7;<D@+kSt&Vz3)xI(y)fvJ?lK1isO3U+V03nsf+9h$Do7p4mLxlSZZ?f%fU92Cy
zz<F`zjl{}IM-LA{tr;h&jYQwBB;$Ti#H?ydF<$!xj3hpkT~5jXz0OFj4)?@sA*0kH
zjV*{Ab(E>0(r-H~-IX0_&oR^*D73LU23ja32P%)c28FQFXhT5`2tR>to3viJe3DK_
zi>S%kcTlM{o3xDWqE!L;4YZz(*5t;E;sXU>&<83iVmAwi{+UoIk)BhNSjfb!0Bq7C
z^203wpz>Yi=hOz!Kl2$8H}#rMe6||#^Ih_vLrfYE=%PVR8xszYfeDG74E|(aMUUPt
zji{nl9wn69=aPSN51PeBP%IZ1t{`aM-@}Oi06Vt@w|)C9=va_wY!D-qyDF0)mY@Xy
zb-^Zx$IJiskEhEu5dpq_lw<5s@;@J?fk)ZmQ3#RkNngGBa}eyUfvJ00K=7uDOE;HP
z3aQMnLWV#%7#1j*KRA%lhB*nUJ`Jz%UgJkqgu2K5CbLm9`nF}cPt}EeHR<MD+d{y}
zJNEeOJ`NFGuDO)5X!o#>Z*66ITqr=yKu@r{D<B6ln#U6a<33B6eC7`7C_nX1SVOjJ
zV((`3rG|t70+K)%;ZjmJa4<PDZNg0pd|6FcsEt@va^=91kG&b~+6*or653fX(W_5j
zSTT!2`wZ}}7a1vUuw#5+_MY|z79b@3uK=1Z#WXnB5a#sfJ4#T#BC#&8E^RYXb695F
z+(zG2PB8R}15(=;x5Nq+wnjJUI6z$LG~gGjBO_Hhrh?PXZ#XO1y7#)C!7|?u;GJFu
zghQp5TwjhuMk`C`S`=W6?7|Gbj*Or3fCy}!wg^u<l>iPMdH6ndnrCgsh*c1%eBPQo
zt{`8~Rbf!1FjP??!+ZiEx}}O~H4c#oG?4VH*!=Rnq>0)MX6ih0K*eFA3t7h0^M49K
zqomXvM#Nxsme(jdI{&7I&hm^sx{PFQ^RQz?Jy;t2DmE9|ZYIi1NI)4Cmb%PyDNR+R
z;Q|^Q_uy8I&|FjkQZJB)Os58P{P$>flLCx}le3yTv9sE_xl~y96|qTzk-$ZaBm|E<
z&QX$Am{E3pPiVkK0!mc}`(68TN4rs&Dm3R#u;j}WXp4W>!NPS9OXNgB3>EuHScKfP
z(L7HJX1gxq;C0xDSW|S)MdKj&oJU$^vKD=wMv1~p6hp?!FQX$@JW?xN=!Q(oi}@p)
z@w@%p5pjY8Tdp*=5ez94D5hhECXW8C1Bdc7b0><x+b5p8TuM1dXCe_iWw5mSRHSn8
zao`m+UaKVW8VJm%Z5};_W?-)>hI4Rre!r|mkFi3@@j1A!p0WMinA{dTRxh>0V+7MU
z%g59BC>@;J3z?NTkvzV@3r!hxFY*jiEu;fkEb%F^9YLN{15en*KygvQffSLwBAi<z
zwGm>Ly{pQLr_hF7tg~r;n>mQSgtfH+b_=#_KBTVc9Oz7dpmBmz`27%tti2KTmv&0x
zqOCL;cv4hBgkWy-#2iiLfPNRF#ntrza*v}j-+C*%(t%Fx%!w5`Hw16xj%?hgch)na
zJ+Vh01V!q*6;azMcEKKt+)SlGFMi{YvmD~i)P=Xw<pzVm9-b}YZKa;VRuT!6mj_h(
zM{t6r8`!vvY6mOi)aJ6*+-+b<==t0ew@Gv6_49W?dSx6UtJ<N8b3+$u^i2?BXk&tC
zX&sI6szTmNE5v$M{TtWW+v^R1zIyWcwFQxUTnCKkaou`3*=O673c7yjMwFi`d{e4S
z;UC-%^2ZJg(+8X1Bl~(GXfa;y>($^#NZ(x0WCSh75cCQAl@sMeECV8_TT3svk;KzK
zEYoS@0?pW9LI0i<60D(m<qux@`@q7vPi>q%>;?MMyG&4(XvNRikA*zjo2V*QL|ydK
zx4ehN_3iqW`>t>28-s2w83f_db*vL}NM#cu#d6s)OKPSM!z9~}F0j<xraWJk`8LQW
zSDq9JSmwy4HT{IG7bnboDhm5jdk4F3rblEjyYP0preZ3t8&H!=xRXb1DAXp(EZ^$|
z(=1dlk)h<HQ>^h^UH_<;T5NaJg^WaFG+)=4cB^@5G=loX*Ml8)J4uzVWyPF*#CM08
zb4HS;vs)xK+>8%9onpo+u8NKdk*brKQXlAuEtVatRhAN4vd~(pjRP<amosj7SY_L~
z44k_jf5?!gDJudA!92Ly6sh{%(l9j1{g?*+WglGGy~L2*qXb4LPJGQ8e>L<76bky0
z#4{yH^13Tk1wx7yYpwCoi5-l~G`76>PKvGEqO#(P-<?_fxZnqtoiM~qY_`pLp|9z^
zv4TN!8M<YmF}fSt^O)9vYKPD<{cIR{Q{=V#n|q0wt2I;@vKK`9)@upI0UAIWiS4~~
z5d*;J&Z~j8#kalP(TPC=)Cvw>o0}>M_deH5tsgEoVHKBGnHuu63-D|dT?7~la6gJJ
z@<f`2pdcy$k0Cta9z6JWk?7@q0qgsKqBl5-!jP{~XRA#T1$RQkJbgqbNXE{@XpgWK
zzfhXhDPHIW{sKum8ZU8MBREF1Tcj3Uy;V@+am2UPiir<}(esIbnc7nXBwqG4F(XLr
zsuSIpWvEgVeACpEE{B^m!Bz!x<PzzcSW>+?(LGszysRiL3`&!tC+QrdB;WvkrI&Fo
zy_HR$l<m+z?OB5NPYr-N_TK110v}wbzW~0KrEc}T>{5XNUqzTZYj0DGM1UDSV-EqX
zT^osA{X?7aDP04Q8yh?n3xT$KNg`kF4z>6R-3w@|<oB-Tt49R0d~w2|1%0VKnF&Ri
z3!vczi|I*0mw>7H5(H=$<W1F1Ww$DZ2RaFQOKHvJU>973xkRVCC6xIM&>jiC3xkQU
zRs`c>B4XD{h!%9{NUr~Q+976~;1+(}2=rL<Sq9tL%NgXvKo}hWn`-P430Xm<fK!58
z-Gv77rW+^Z3-a<diJr!A4v{$lHTevWwz8)gS;2h1w7jm1(lGC?K*Cm163Co<uOL9*
zqQksMvuQt~;7vo<xJdPM3elI=k!6Lc_`zh9z=~Da!YIU&mEJM8Sc-c!fn`1FBI$J`
z7XU3SVgR!ey9#<?iD*k_2Bhmu++a^KD~{A3>u<~OegHF@{H%!pt85FGa?4;nR0T3h
zMwKg@SUu~hL~WW9?Mr^%qgt*D87Q?-EOT8iP2JZ<dMTJnYd+qj#0u48tN^crEF8Gk
zOe;iA(qRkh0pz4mPxnf!EJh8-AS`YdUYxoWm|zvt@J&%Fw7QEegUGKiRqD)W_`1CC
zT|i4}%`p3nfN?_Qq!YgM241=keb2zg`%FJ#V=1Ag28cQs^fO74&!ver&XgAdTvtj`
zJX5^U$lN1!3qP`>10T9@MDb=(duC;SRoSpq+O<l-S2;Vut_0U_Vi!?q(k;LL99KFv
zD*!J%m+)5k8thfGs428vN*lV??)*buY8z{oIKLHCK1~T3%S84NtlpwLh!lW?Kal&X
zOy|Fhut<7F>UYHa>>GgB%tOL?0PeLfv|n$2M2pq9L6W5zL2aIYJye6|`u&l7&5TQ0
zuES%DD~fj*N{QY-KyG<s$SGExE#QRO&)3hoK$&%GK6gU7s;XTk%iT;QURn~V`QU>b
zx5|V&0zVNIYpse@@9B^bmcaTEj3pZg2j~hYppWvHpcBQbrJ!T{l+N3+&sMk4l3?K}
z!?Z)<aI1T42}R2r&@y79e4#d`3cTUB7_1lM{Vys<9m-(#!4_A<lJ9=x;dN}oMJF#&
zsX8{YCXj^7e#ts9whLYI@rY(Bkx(d5T_S|P)sigHF~Pd4LksT8$eiJA0LL62DA-k8
zI!2#Vkiut7hp+0vi3rxhmdl1QWX}=@u1Max<<h}kP>(PTK6DvqkJM>2$L49r*z7w_
z9$8Z+YI~m;oEz-ggXshnO(kIjsUvf)(=~P7Eusankrm&?m%+HhNKg;u<&|&IGH$(f
zcn?E5p6TAw%>c1WL%TUsQV&f|Wfiy7O=K`Tv;ReiR!wTd2?Nd5WfZ%DySSiU9a2Y~
ztRB<PR`xxly3$<X4{4q^TnY2KdKj(v&cWY(;J!Re_ywbG?L|!o6C?#=P2BA0s)-D1
zZD4w$f~t|31G0wjaPXCnFgGaqv<-|)Xr;wq(RPdW>AKyIw&g9jHupjivq@|_Ucq2a
z@D1MoZaMt6I;XKZ7cgd!*&mqEdbJWS)ESjg?X{SrXK9iXl!CujCx<Z;B&}h`b=Pew
zMLYvJ4Kk^|9;_5(mhnJl@_mN{`ROLv=9T0~^eHP6|LI~(?Q!Hm&)m`^Xp$HCmaj{I
zT}XpvU31cW1yEXA6!*N(4F29tIO_^$)=!o964vJ!4kwWxw76~Ni>?v{Zf+ywf!@Zr
z!?Exa7~W)1XyI1HBN*Cl9VRMiyHK3WW68B9fQ+zBYm~wwE;zU#ESR;=vL&e6g<kra
zZwZpD9%1MtzMMP(kV<=EyE0|_Gh*pT^%uNPQJHABgn)$ipssaR^%Qbv$(8C1QXzu5
zj1iq9IZ^t`F7`Fa0;rGcnhsIsV3skBLhyHOoBIXcQRM1hPPbhB;o0m0dQRxMEhxc8
z+>5T<hw=Ho28n>Zp$FjQif16BSP)UKV1F+UiAy;$e<htVv`?!jtRE~E*4bXM)=95f
z{h*&~j4qxLw0yYm3`7oHvRc@Z{KK0qB+rbgH)W(=E$j>kW;<DP%M~&SAOVkKud1j{
z#!zXXNX`|V9$mkzJ<&5|RP{<;RC#7~zwl}kxsmfMOYR#vofTtR0#iCTCL3B83d?gO
z(AI-%PIDche50`g6b2?zzbM&D?Tl!46OO@H=wFf3rGzUM`PR4Hpqa{G40cyfrd}iH
z#1bo{_TpD4?}T!ZCbQm@=z;3h1;uZ69<V`QChHkeEQjX^R^!7%74)vVxC07A`yMIM
zo@$+%lgc50(hCdUOe0_ozx)uAhtnKP)r-T@Mtw9hmq!dc#8(&x(1$d&no|?G_82~M
z4N{<QZ9?dGIk)19L{0chy76r&QTgW>wt4Hx_OSENI67<qDV`Rjc<@!mhvt-zuNqvN
zn^xfvUs#pMwWnlo<{h*6-q<UT_u&>fb7V*?7;#%-HP5Ev@pwd9o5{dxYbZLKB+$*j
zCG;M2N>6LCRH$T0b<BF%k7|HRK6FDoBhKtj921*Oq#$REPI1NCBfr(U3;-LG9JrO!
zCW<w&Czv|^TATjOPn5LzYb{iu9yg!nQ_pfA8Da=Gg%yM9^HnHD-6gG1+D?m8@7`I7
zQx@r%(>VhOS9k)00hnS~3E{)$=3>IB!6N)gEvwj$1yiqS&7Tvy8)8o-33FcD>y2&?
z-risAA4??2d@Gs?jD`JsyT!03tD?gQL()94JQ^|Gz2-IdRx!?##eZuo{k-XTjWUi&
zhH62Wse~01_ycL8DX7+8k->zt$?iu3ZpC;F8?a@)N+Ch_4!Io`VC*jBvPZg@i{<S7
zmY2Gk5qA}@@SDq?sN)eWUgoN+TuCploXfR=iw8UiDTiNGfE0#KUlsHkt#MaK&g~5m
z=)@}bkt6?c(KXV|rb1j?jMPa&VZiO>oy)@cr`02Ho<`2345PH%FtS0x>hu<+F|;#x
zAQ&b}hc!jzR&sysybt)5EU*(M$%KzxJuHU|;-ZJhW3|yN9_|FsjU$P)meF#LlInUQ
z+Xe+*M(<C{xUds~h`?BP%nHQw0&8T&mWbu;>N-eazQ38M!)*2(k<tiLddNyTrYI>`
zSHsotib<Q%IN>7G^Iz8VOSnG9GM}XTjV<XTy`(qb^_;;xHY1}o)-9^K)Tu2V-x#M<
zB1>OT+?C?U*MVI<%gK~dhb$tBI~R^Q%N#X-lDm<vek>}~4I%2evqBR2wV3gqyTHkb
zTkAmn9l~sXb8T-I$`yqz(+j!J%Pm<a_qJi=XaMOL4+JyRsYW)r7XBUCd<BlNiCO+a
zHqT%jqgzLW!P}cDp=KHtE;ie47DkNPdZe+K_6D82drc?buyhquN=!rv%9YG;2FW{W
z5QGY-X{E;WDTFc2g^Rsd-&`!N2ieJqi1Jp8WK?}y!XxZrM%Zr3eR-N_Dd;lZMPo{$
zd07+2*4*kE&XqnyZ53>vW!vlr<{@=iirGMgFTH;N-PK#nuD#M-9L>TNTD{2%tt^E1
zn$w3U*cVtaYsXL(d(T;Pb#wWFc-f*zg)^y*0#oA5Dce7uFIdI6jGq*>wQGg@xDJ*8
zKD`lzn8HQ=BGRSqdqG@EZM{=oDmeIK^mi*hB5+*sFYJDD>1OkG#Mg12vXFv|K4d+H
zL1%T%G(#9btsJbuHftbHFrB?AMr?!FqxN{BV&X}8M)-%ImFp=IjoJ~jPcY#0Bfrg1
zm1a?WNH_EX8ZBV^=9Rs?ZICIh9^+9&j-Uw4xz6EcdS`*KTG`H_Z?Drs6ob!Coy5ci
zSUQ$Rh|K=w5j&qjXjS#LxU|c9(#-7o(u-AvOTZSfY$05K)Ns{0k}T?RF=o+y@XN~@
zBcdl6$RXkS!T+B}PIQnP{kI^+n9T*qy@_Fr$F&zKeZrn9p^PV;$<S->2%(MF8m^_u
z*X}}grnfm8AUg^dq+n9M#Htv^Q_3hxc8<6k4QJDhk|x)8iadeE4q`BM;}lhq38xBQ
z1NsZXX}$p7c9=76u&i-Lt^v!Am9iJY1Pq#3*E*g}sC|M2!}nhgi3QA9IaJ*lU0Rk#
zzTPtbFzS4a;tFssBYVzRy@Y-Pi#@$j@h>_XCJoj|8ms{5&ly-TJ=j5RPWzKdgyc<C
z(VpgUy#uO^CfFn9I~BW-;E?Hm5UBXIILbKf-1yoJXL;pf=*O#<7~@py_DNN2zNzq}
z5jOI{7?I-c?qqW@lA<cCs>Fj}fC5qb@q04|R(3&_&elaGlOd>wp4$^NY_|Xd*~yca
zVlU-N>b1(`Oo`anF(sV7!)6quD%)Fw5WAN9K=-)5UpqH@$UUhvcAO=Xt<?6!_zw2<
zUaS{0bS6jBm>1*gPhVjK=W7k0p;_z-f(HX+j_^8(Q>10ZlE^c#n_1s#e2);+8M^gE
zPPfbd;3{=1^Ufq*{^Z1H1?P!O9zn#Ns?;2)lb#om-=;gSry<8ziLc7DSmJM427u#N
zaScw<8fPR}3P&JM|1eCc-kFrD0Q=MfFn#1H(2KMCHmd&*z0{L)Gx_dnCjxx`07baP
zYZGg1ht(CAT#Nv)QPmp-1J6ydUZjRxB9cNhsUGsYm`THe5W#&eN}ZLe8Ni<ji58)O
z(A%)q*u#oK(}+mC^V~T1+!^_^!KCZm<uit#^uf>WJ<eGTlt2&%&rHh3m^W!sTZJ|k
z=S9|uXc)-vel$!}E6N6B0sBU=|M?_AW!K<AH5;IAN+-=WxeYzlrO$yw;698tSGa6N
zY+T(Mx-q@>16+b$D+V>!;k+$jjj^T+%<}Om#)+ASwqRq(a{Wvn)kAgj(imHMkK<ud
zTL&tD8D_`ufq|o7=lQgv6449%66EGR7kbGExVdw3;Q$P(-T_Z_m;AcOuXA^a%*E+o
za6Yb1tBl-u+|B4u(I6=ky_3Tm)?;t#i>o860-9PiO;a;;ub%TUh(0oidZ1K|25h{+
zd5B(-{_nTA`$>jrB!P>Gt559kG;NV(n2}x9IsI2Z?$yzQH+C<`FnZqbA?nxdw}~T2
zDq<Bw?CNZgnRY*b$IzB>wL2x1ukg<A;i9>?esINah#m@}wzF_iF_Hdbi2}jeDQwbU
z$IG+2GDmoweCbBRXTltw7@~{KkIM)B7JrbUT+W->otvwh39^KOej~dOyYDP^<Bv2(
zNjn1)&u*3payDSzh9<3REnUMNP`9!IE^>=kIDk1lKiw}YYA%c(pm1c^e6VExq0>$7
z%^f+N8`Uc1W8$8AxNjq$dy}~9Mg8}8O;*DwnrOk!xiI!|74g*Oxev}_IEJin&BH#B
z5-XVxgk@8e*}t%gV&TKrj&|UtB-0=Ix+!0dQ}FuVj-Fo1w3BqGr+5#6^m!8L0x5$g
zqBJ^JU$paC`+D<EL9cUB|D*aJgG<m|YV7Kf$5^09)eJeg7Iid21C$w!5mrvXK2+6_
zx(fKKUGt2hDR-t(Gsp6oCfVIc0vrQMe@LmnTXapvuVG~}hI2y-G&qlzH6VSBmQcf*
z&W(|#Vnu{_h11npvZI#(XW0Uv_I1fH6Q{R{d;N+75r{#^wK0A8gB4CKxcS4C7~Gn%
zHYxi`*$`RxCQbxww)CX4QY*Ac@hf4Ar+2L16wVJF?{mMT@4iZ8Ti=U?>g`nQ4fXaW
z@8*6_KEt9hnQgKkm~4HNf!`3AyO)HED<H_Ob$F3}o8R9Msvz%k)5tv-uu2vN<zhrI
z^T_#evMWuh!!N^6CVHk|ev{=KiJqN%*(6~wGYAZ=uzw5pKoo7rOq0CX$2`2bUDgS`
z$+|Va+<IZX&AMc)3P;RWev>eu#uKRyE!z8n{lCcfeW8Z~ifUc1DVnU9DY_I`_a!Zt
ztRxiEwQ-ges68OoK{I;T6RlX_D?u>yf=}%V5zFMkFg;yXJ_w((D3CJ1(v4XUTajp8
zzjzFxuinb3V6p3Dvxt))v+<);2snwZC6Uf<EqN_hlxYRtu~%^u%qyK@p^8z?iA5?!
zQMWm2#3DAzn$#ms?X~>BUu7qrOEz#RLj@*{DdBUcdPs&6To1(c#=h$;`Zuh;)(S;+
zvu_N%6?~3~kc_$$FP^K&Jp2UZ9L8jf%{hz*hC$>Fwdu1&h;0%1U7Vx#fPgGk%4JUf
z-j?+BleNk@e-j1OD{cG{G?|s!EXj-nN$6oyj5M3i!4ezmg3^%}p<Day;rvLnr<t82
zCby(kqrQhb5hs-nU02XFUpsX~JalePK@GC7&A{afHr|@4yW$;lxML4^E{0Od4hc>=
z#0w8dQoogtv$+!D-h$1aJ$!F<WpVGz({CV@EHUPcq)^``ILbYU;Kj@?<i!cAOW|V;
z*NT|!Gc&cd_h(6V&+P;6H2305ac^A<@95542_M$N;TkR1!ObSgDyl-9gLF5d7Beec
zCkS_H%79>QgJ)FLvh~CjO7SZke!D``@{Jl4M#t{)$Ijzft&<+WPkt3;T-_l!4nDFs
zwj*V>quUz~)?uyGs<KxNk<m@yzG>j1G9z%m{JRlBwNu@VdDOX}8{rmcY=Z}`_@i{H
zix}r)6y)^&upbcmcfv}c>&22;fXXRa6s1%Ji{@Z~VP15lWEN$F8_B8yUChF=`V#y%
zje8k0C(?-^GIAWp@S$4WN2%FHfp{cW$F(AM1H#z<Gp$kByair~rO+Yt?k5vw!ln}U
zb*)jsiQ}DfOQN=_c{ngB%mL)i+auWp+?Q<w42g|+aV^@cV}%hjVKVb9UC~6oclSBh
zh0J<W#E!x;)VyF4_<gQwN5AYc3jCQ89?8UNUw49IH^0oC*e~x$mCFzB(f59I@B8T6
zdUWRpeCskB{UzqPg!@0h9`yJhUll!Jd~G)kUyu`X9&+zsWRpL2$+dlmb+oXle!M0H
z`@)WC=1h@UY|I%(oxhnZK|+G=>wpMABNI4H3Hk8_5Qbn3rnW=`Ou4^y8jd-R*qn0{
zwyRbS48k^{0}Q$?QCHMY=bQu>X4~N`&7LK`ad530@6)`1dZuqQjhsK#5Bbv9MJJ+<
z8jgRol3|H$X`Momh&eGx!Y+`)46u+Ys^y^#8X1N-CK9rCzVj5L5mETSDa;8<lMcrG
z13Q<Va8j)KA`K40n^*0A`ZE(8Zxy68&wVvl+!1~Z{}Dl8eun~pHP*JKeiWTX(<cV4
zm{vJPJ;oI~a{RH7P4Yh=P6Zzp&iyawA~nW2%?pQ7u}7ng=!b<&i;bF!VeRWl;8?Q?
zL;F(Gq-u-i^?k==+u=^4+1_qGz{I(JfLy_FgD$|GS+;R+4<1JO814nR8Wz3Ek>#pu
zl5Z|KCFF@(D?Mi$!qNZW8>UU!#ESMO1gouI&ohbJB_6Xsf<x2XZZQfnFQL=!uZ+sV
z8V7eL|9tRFt-Tu~BE?c-rh3vx7A}V1b$w7Jeh@<uh!Rdvsr5EJQEO8Ex-W<L5IciN
zCo$|qF(tU+5GQs=ywI2znu%>*f6F5TfR<_sjHv}h8h2#|eZ4{?jjWb69VD=1<+e2Y
zvtB#*NMk(h4nP(2^TS9ovr72cBuM4^b8!}|!DjP&9|sm~#`*bN_c!{WiRQ-{Nk;i0
z%$}{0(QA~r#*j>>DX}vX9dIK_F|6&MFki)6uQ%nJ+?piMR4OX15nlk;-k`chA)`V}
zW6grY2!(Sg#22YKE4icrToh~6N!0F_?!Y;WKU)-lLrkhUX<W~~k+Y;7mi+{Yx=?(m
zk4)%vfe-8nD-<AAO+kOR&Jb((s`9P&Y~b}5&=WZ$HljzcbEf-T%`&8$`KLMS3&K`_
z83p^QkEZ0aH!@xz=xFJ*^99KIm3;<|J=mZFPrINN_<k0CF94Uk?)?e{j2f)OfUVZM
z%nWrTUXax&MD7<T#yG0blFbQ=3v*ef-Y!&OdWWeg$=blw>;<dn0nUF{JJjO+r-hr)
zFH4uoe0<>vwc95kN=gho5V#*EQ*SkfgD`H~m<)_b=x2$bcVaj|MLyn+jy>Il@l&no
zWOkXRC<S`fLP1<cYZpRrK_Kuru3fp~_4IJbeN$i1)d5!BOC#F{(dK+83D1ue%d^JB
zQO!PqlK({Ms339FL1j>wE*#hxCz?a>5s&)I$$4|~v1VfJ;mOTlSxHNId5v!<it~@G
zKn||`!v1ST-!`!p1v`?Y$eXe;=;rFMp&IhCMlpP7m(=<wVjI2m5qzp*8olgutluwp
zLC>F+hUyN<Y$=KOU=iNIrELrw2srDPOUpJHIJRc|RRx2iyfJK)aRY%)eeCG0kTNvK
zmQlL<lm{4mN~XI5NlVJ#vCd0NeoUe&RduXJHw%W)TQ+%tEQ01)@DcpHKwxGpZj5!s
z>V7k+lUEy+jQywo71%`wMC5}x5+IEW4W5krz1s;-w7)9oW7|`EDTh5Pq{P+6PLZUg
zq(c(UQ(6CMb#nTC&u+dSv~tUbPVciTny_tE$QWg6h+NAmiQCrC^7naTXPI-Cu*$_A
zmSVTD+U4u_(UDepmJqop@6W?$IeN7<HfBhV+}9)Ru~<X-41Sk6{+P%A3t&7g)+p&5
zHtjseDznWADe&z{`azNJ=~9H&qciuxgNvWR@CAY=CEmm91x+YrV@<T`8E^6!_@Vj7
zFS;gO?bx8SB3Q<uz7l*{e>c2?!fb5!n8QH^PqCI(&&5gLOWR>?`lXTq9$li_jA=<O
zOurEsIo0dTGXW0uR2&ma7EH*;%+ii{JI!6>3n`czFj6oGJtXR2@dv+rmpRdA)ye~l
zWyr+rz3OUwIWDkKzZXj$)(j4tZy9jWwpTUJ*Qs0H$8isopTN6=MKr$^s;<Es$!T@E
z2+}`xUm_tNi68vXXs!2<7(%1I$G-|%wlVQCAxk7+QKz|W;)LGE;Vx>g?Im=|)nj>N
zM;|I9<UCH0`9_jxjY_rV27l$VMvPL5rgcFIQi+U4Z*Q{e4ZTixkn}5}CtS;jv-Hir
zGq$r-BG))035?_=P+b-$z@P8zxDHOUm;?B04{rFYs;#tbzBk8Daw;mm+UF?>B&=O}
zNebShv6bz^X->MZOY&#~vC5!;*d2+YRAAQ0C_ktuxl>t^K}o>7>QPG+=)NywXMU52
z%fw!b$g<|gSFp0-Jhl%g8)+=V%+@7C?Z<HuFvWZZhio;YO)!xvz)TJ86`9NTUjpOU
z+3OtGVTwHC_(iyPQPz`gk!k%$y&+HR0)|HsPx`9AT-f8597-`_1TsNBa0U(HK-NcA
z(g*7a?{&`Tso|a+y(a6{c>`88m?<9q=LLS<a>mkBh9tMhDD<8HT8D{pSi|6+&kgV_
zhs6F#;#Gk^KgO;Q9;w+hbggF46ZOY3n5=s(L;@ax^GdOXYjsr7_wEM^+)FEEAmGAH
zSSET?Yh>vuHGqE?v=7+{*XD=W)ekyMp~)i4pK-3pF~6;T#t@5|-;AXV_0KGM&5m);
z1Gw(<I8vIBkm(vYA<*fP(=wL0EERPFxX>2Z0;_G8iD}l$kuI6f!}q8Q6Lx2fmG~9B
z3Vz^EW%rRM@^qI%gLigC>HTJgvkYE@3vjT%qGfpC)SQRv20DQ&z%NOj5cehKOTmvn
zR@tr$RpL$sGL2L=@jF^RHWJy7Jh+rBX#2N*5g8_=9a<Z44C>n=1zqH?TMW4t>ejv}
z2s4BXNvO~{Cy`i(NESN}5Z8F6VhQfa&C_(;VIV<4Z6^#^m@I|(IKBbq%tz=LHU+2R
zzD1EfAerKYE(WUShU@qh#4jvC0W0{`3EOF$zC*|6lE0gk(p1M~ftzDa?6``S$sN*P
z#U}(FITnAp4C0C^t2QsF@5i59mee@!u!_=DXDDQa%E6te1>5OX$ZfhNs(7-tZv<Fy
z5cvbU%O$u-Wpv#|i~Wkmz)X%)uR67)?ExSl5xO*-OzW}wNoSGmLNLxX@2^9|g^X+&
zu+aKN5X62ml9`y(>b*pgnlh=$03%TE<2^Zt&Uh^?KD3ktEl>K80+><zqQz-cxx%pr
zf~KMikE&B;Vvyk2L!v<oh(~rdeQBAs7`>hH8}{XsZE^sDVN#<SH4E|?Cw`Tg%*=i%
zfxDaM5t2qVbqCCfjGgd_QwJch)BL=-56%ppa9D6?=L%KCGA6s;JIuLq9stans3!5J
zZNpV&Nl>9RVNOzv3^{xCxT3!M7LYa!4(kgDV1x)vAV+U>D*7+4CWUUV;eXvv)H`p<
zGeR7%kY!NGX$z|Qep*ibfa(@%wfk!kv<Un{ba{J`WBETTIF=oRN=ld??G=BY^7l1=
zuQ0s4xjKJMT`=?e?&|z4e@|uX2r@{*hGyA`Me?!g4xS-tlCr}Prt~c075-_In22c=
zTfgQo4_Y(gtXRGW4DIBu6nlWhzkL9oby?v9a9mdZ`T=Hlm<UZq9rOVpd2r#$NuZ{Q
z9cThyuU+945m{96LoPVPU*=+m<n1P@w_}IYn?J9WR|4zo!0d5N0|z_r%P-&O(d4}&
zMrrJ~yyWI@{HB=LQ%<Br`^HJs=Je^v^yx@liL!DJDW#R@B|Wo205Lg*Mm4G{^rqd|
zy3$HPv#YxnOX{LVI}luryJo%7n~hm-wx38<0xDC@Iq^Z2T)#5J_E8hlEL10lM4f{w
zw*THau{MnltOS8#PFfiYSiFbYE}OVzir|Dd!+EHz?B1|ZJO3GK?qSEUZVm}Yfd<oh
z$N2DuOWZi|^Aa2X#XcGNITDdCjI!WKw(Y<G98oJvTdUgVgxV6IM_*OmTnGGNW=~Gx
zlB#_vmo+a-p1n!FVJ3NPUe!?JXf{6Atl2szuGj3!7Yx5}D%B4V?`ajLkv&(p<~a&u
za5jS!$l(1(EIPj|?HEzZI~dNcH%zW#!79tvKVoN8(30@e5E<z3qV;rB$}V&eVko}!
ziRaN+NjhpG)2^?xvajt(okHe!2J1)L)hpzMsAO>`0pB9c6`l7$3GWW@sH9DrD>(7(
z0tAGvRmdfp7R0#XKS;@LFRC_dWRBEE)o=KcMcL2u50j)plSI#eB9oXfQGyYLsyL^a
z28{@`RFu(D+1R-}ie^?w0(4FwDs3K7?$SBr?XWH{tqPP#+?b;!@<b+|&fz1h5>KlX
z{I;*rgou2E><4+FgW0KWG~2$Q(!qYi=nam*+<yOg#9Az);E3XPWI^=B%5X`Ub2=Ea
zN}1{~+Go>GfkO!^ub)OF!P?G9*UG`T7n{XnsqmrrgQ}$@X!dsb4uK%DqYljZI=T0A
zK6nS<2QJw}MyPxj`=mV|ePwt)f(M4EQ6m~pY=+x6Q3sW$*i?b^b=e|{j)x1*b#ZAC
z!MD6=kuvwE_}UiO8+kZr-k1mMPVv<(IAE<M;gC4g3Xw5e=U_`LQAwCiS^7C$xA=|H
zA1plG3qlK>X@Tm@7gO{YtXF{SWZ_JDBy91^_ZW-XSp!;r=Iuc)HNc(SPt!W7145CL
z6;YPBhQ~(eO|WLGNJeR#Q?c@z#lg9?JY_I1y4gd*o|loL=!84goZ{3vl85xtV*P{F
zV2^%lugV72VHnuph&9TTNO-(nT$H4eUdzz8vI{^r7bU9SDLwpg`D>cn9?DL*xM}*@
z+T~FuswSL?vd$N&YuLrg`iI+?(D(3Ua}69-<3t8SCNIqvhvu_-TVdizV=0g1)*7p+
zGVh?HcqMUqn$GouXstIRq7s$$HVrO9)-s|~lh|<6eJ5gVldC7$+S?}6X&mpkc6Ze-
zl1vb2EUSNdjrB_wH9F`kqgXW@3M!=<!<JWa0AeCa+Fa#iN$3C(c@pl}d(;P)O~*Nr
z>~9!Z5C;WR*mpl)h?&1lGnSj)q68y_@!LbCfQzh69a$R}BQRV1fmNwICfennY7W8G
z?yq_0X_8b_V!O%^rW%=xWKbcnS~HC4Tzk$_hzTd_F%?2<I<Ml3JV+hr>O^_;FE2O8
zSD|V1<8`u%&ib12b(KzRfkLJ=*rAPs*BX~3F!V|%<Ywd|jVhzm!3NuzejM^iw5Fwy
z(?vrs5rbM}V`zx&C5jEGx9gGNzQ!0Xynp+;309DOLbV~eGK&c0*88VdT+c)D7|Yub
zsX8w?=Dn5hK~Z*d6}@G{%4Lk9dnh@vjP@8Sm|V&|#OOTo<sTch_>DvR6~*6w3YTet
zT{~B%P+k6X6}^z~re7o(e>r^2x>aP^Nzn<H=H@zKd9S36zbb!<?xD8d8ce^D-SO}q
znsrgP#k{P<2f<)S|LO|-F?86Kh(*vXD%<NLR9%*gLBT!=_lG!1k`L_t$Ora+%K)l)
z22lNvGk{T=Ph#y+CNStKZ{;qKml3X%^N=TcR^v1E_**i~{ohWeNd+V!G=H7z!cCCX
zXcltnDitRJ-7U)hNS(~{jVznHz^Cgh+y5h3v;EVJ4At@~mA3b9CAUU)EOoVA{5jj^
zO;k6YwDR=c6-7Dzucfbo6+uwi;SkEcge$0XdBG6>3clZ0o!CUksED@2m4#fQhJFYm
zzAs(Cm8uVUR~X2;%w`ooHTP+FSL(CC`1$u)w7<)ig*r~wnEIIiFPK`*<ueM+of{U{
z$o(%Yu5&>V-kOH7{tLWtf<0g>VvoVnc_wY|2<f4T+Jn1qud)a;-@1-&Z3G0)75iu2
zA%`q&(}ewv{k(Y9Smmm1Qj1#cLO84^=l?EplQ~Oo5qP$_nZrn@LV;pS?dcQ4uv*v1
zV+T2d`UzhTi$dc*)b&bD>(iQC5t>w|F^0<0kjzCZ8yuAo*UVGta8ItV9cIJ@;6>g2
zdW%t`24W=wWe>c{y?xvLsR|KlFqzGT^U#@Y?75>I!jBS(76`7^ZjB#%G`nB;Q6D>(
zV_lIE@hMLY(?F+3h7mI^EZM&b-2?{h2~&ARZyu4GkK>4y*Xf%%o&#uLTl;(>p3?~9
zIgk?Ef0+19Fq~$!0)iuhtC;Ay66Qcq-@a0*w?73@=S)(cSBjf)8BrjyE{k)O_!YW8
z!aB8aXy!M@b74_(FOFeQN(4i{u7aVPdl1iFg+5n@AHhx?zy<ZvY-s<lhv3|gltkEm
zkF=qKTI9Jl6Z))6Xw}6|Aw1S8XNk4XL4n2oV15r@7tGfRicRGlzOUp$vrFjxt;R|A
zECrrmzbemWE#WMpT-AGzVA9e-jRO}E%}u4bNLcT3s{B*@YY8z2YU`bmWgT2_o|obX
zKFX%yG75I!Rey_uG5>F3B8-AD6m%WinlRPHINnTFEcG$R%GF(P1^cT947?f$Neoy~
z@WcEFT8Kpyn%b&jYjAUxZD-c06#}cCNWBXLSY^F@9o~;Tj(b0qJcAnxjeY@n=hA|H
z$8!$=#|nO$VIk_%56ubYlhsTcYEIn>@2R^H>@7y~)ZI*lHK`v;qIBtt&3K+J2N+Go
zLT%r4{r(t~^EQUi_TR_g&OsYQH0b%`tr#3|GJY{{n;2V5mykVL_kXv?h#ub(0Ee;r
z+vcL@L;CLby+pHAyIWyPkrEi+ik5xN)ve#VT8<ccW8;gm+-A1jyu2hE0U9;1lc)>Q
zH1NUv8?=*D>9^-dbEX|&KG#ldsQUUr3id*%xZR6!?;3v(_jD)rd1;fY5s(amDn0S`
z+6F~=$^K8AJu#u>l)lxfs`V8%vbc*`*=rEW;p(T9V-#G~;})b1k`#TeNA~msz76{6
zeV&b-d@(2MN87I;(;R%$UDz5Ggfh9&=1=AztIf}wf38h2#AHn?vxb>g{iCHh`fo0+
zOIrTYjK%UF5__SPpoM(<6Dj#NifUM{k-s)T4cCC#7fgr|6LwNd0j0q19@*6KYf5)~
zW$;iasVOR0<=2P$w+_vI{Y~-B2OJrB((->-c~fGuB@k@t?Qbe?9uoC7WOf+a<N-V*
z*H%QLX6F7@d2`4(@$-fkoVPgND8xCr*M&HBtMo;#o)gY!W*Ed6zhM7wqI@m|yyD{S
zZw{Z4bLB)7OB%<Jym@9rcYFmMfzFkgqrKC%-ulrA#>!3tzY-RBeNVIOAdxL~P=|!k
zos2jp4D$Mxry^tJ=7G>FolJhGN#78y^_M<vur<DC^Y*XPMTT8r`zNm@a5!00dEI;?
zdxQPCbu2nj{S?IZpgPe^qcji2CMl+;ss{=}ihLHpkQmuoNEI)};*kxWt*O-x+;l9s
zQ`#s~cW>2a)JB|NpT6Viby3@JHqFR$9_AD%@7C%kI@itH1&EUDbV$!_hDTvL|0qGH
zEL*uk%RWNV3U|1H%}a7Mg~ova&KgfRy-)a_aEXb)4UL7v-i|xRI}~V?vTziZTtFAu
zf8!|xzddW`Evn_xd`$Y)F5xiJE~`M7gUi%nT%*lQL5#sq)C2X?fKD~1Rl!uQ?A(Ri
z5EmwcB_p6dv_SBGmlJm-C(cMZ661euoU;;_>)DUd4_jC>YgS38g79hk07GW5=j+9X
zD9JE{jm2tg@t%zxa!W0`UKeo|t+TyB`Z4cqd5awzW*;7MsL}%Fq3VEQuQnL5nz?rq
zBL@o6AI()*tLpC5u^%(9b(NepmN!+5sx_<0HwZI)>WV28jDhsRYL5wgn#E>*M=MO`
zz>AcE?_x^I(%@YWzaEP_x$#bj<atB7Izv<*wxn;HNVzNuQe1IR)iG^#@SFGNJQxR9
z?O`E0StGX22#o^(8XjFPg2AZ~OULdJ5^ZIrSW%ZJfm^k?|AI2tME!cS)hcnZE6ZnZ
z;iR(azXb;j(XDkPpo8vR*w-il;ZhBGzdPqybQ68hxtzShUY6vl+M3d=e<(XGt4uyt
z#1%g>gG)D7LaPxNG38FeGa3`c#9JeuaOEGBL;t8PF-own<GO`IY|qk~j!lD0?kp0k
z><F|`-5E^|J*>b<F<Yt-{w*u}WB@j=jeSLft8c9H#@dwLmW4HTrDhujn%E}AIsnQ?
z2~=F{#Y1Sdy^Qn3c3m#Xu%-ik<QG{jU~cUkdgTK)EwFGqZtZ$UaaYcq{4&)O^pIe8
znO(RTubF7=K`LIKm7Lg%h31<KH(ci8EPyI)OnWg2Wpg>fB4bs+mh10i1sSX%I@UTN
zxpwR$njP93&mj*cHpHw9h8C#X6>@Y_dnR7J^?5|`dCnekFjYlPuYHoA-zze<t+lKk
zBZYQuE@tSTBjrO&vP{j?p@6fF6OetY6Icnp$(~s%k%khxP<f)_8kQyD@NmD&Sf}fd
zjOi?W#$Fm$S4RQv>*p#La#1Z(uWK%$`g*#8`KTRc?`a)bs|{<-Ow_CzPoN^6cf3GW
zue*W0(>)1DrTHus;;;>JRTE?tUUv>HP4TS<RZ-9vAS4WS^lD81w{gG{V&vbABmM?y
z_#=M(nq(4wIx`Jg>9!*wMIpJH+qb0RE6*~O7T9Q-YswdF;J4S853*97Wz<=N#YUFx
zD)Iv3jQ|_?q^E1=BXeRBe8$Jq<OurJs&+KMF31XZxp>}64hK_s^9GU=4f0SGnL-nl
zOjaje+FII_vRyC96i;cmJwCUW2<7WkvsNb&(=F}9TWH$|^=LX)j!3o(mh!=x(Y3-k
zCce;Ev>`H0JMqX4u2$mo-@&FgDoCG9?c<}=#TFz<_<E*OV`fMOl%LwZa-|<o{q(ky
zo2&a07qrbh)C7@L6!o;avZ&%jsgnz-7XAw3nq>+i&P_2sUn{(<QqDh0ylfwCnz271
zENQh&k<6vc7%#Xt49|5@-HcvB*$K{V^P~+vZ^uD|>wPh2R4;6_ZR;U>1HVGkRr%Ik
zXILOl)#)zI!sMrwW@OW>BZnL^w{%^!rxvu+=M1?zJqX3#J_$_yea*E0jw8Qx0mJsh
z)){ZnXn4mQIfCtOh0duj*AV9(rEu6Wts-=(d6DT_vHo|)(=?iIV7Y?%Xaqe3b23|z
z<q8ELH%xnYh&lo}UXqp(ssc@EjW40f?d*~CJ!3!bCJJp&(5+v1{1v4@P%*WuGxcA3
zno}7a-Lx0^nMFYw`JiKH<i$F>dxXSLYx~1E*BKW(@0#$ddd`B`a+;x12|c_uaRrkZ
zg(S8N!%N9@ZzjnLZ{!ZavLfjQ^#RfI7OyFVH9^;+%us*S8_0er0N&bRh^IIg4Wmd~
z!x{MM=e*$)(G$2H9>G$}*9Cm-FMycpJD~&Y^3(icPVQ(MjDSxK%yC~Ki<;GZgdSoj
z1j!C&{JWM1w7%q8d%KJ}kay5nDbz~(wBn4<*Wz3}3jU-k`ryy*P+!7vSC>CWi%<6X
zA#oMLud;U{-=lK(0)pFk@O4bVq`aj2ny$sHbvS3OR0*#l4v$L9r($2XpRvXoIYgq?
zP%tUW&<8ups0=#BA?;hC$a=)_^kN}L4~Mfcqv3!DX@VaD{FIVADeFyf-|q`=Sc{P7
z<o&g!D6AqIw0&obLGqqQSgpl(7hQ80ic`oT_79}T*cTLIzSv5zK6Fnvf8MAaPQMCc
zZ4q`f1W`MDyb4&Y;|EPtl@WdR!_6`n)-0YtKM1s~O6B4m8B9`7`cnr#G*iubEe-!Y
zp&b_ZxFYHi^KA84f-^EZvqC0=k+dzC5Ku<U;MRy%Nc4l2a1EMsqtQ36aba|3@M=hd
zI2O(`>6tua=1PtkAR-aW0a7;FF!MLa@aO_M*K}kB6&245p!Hhw2#)8*u(k^URx4{Q
z>KX!?)PE;%ep_R@LV3;w-Edjdf>w$qXi%*1m9g4W3gCk7YMt>{J_n29=VWT%P$XVf
zC`^mLE&aKzqlGwnYHQm_<Wz9gEeu+T|JJq2J;06RN6TVGMDliviO@@PE3Cj?*1MAK
z3-RL{_hG(+!yZm{{|#h3muMG_%<!NGE2N|qGc@m<&`e_q|6gn_hn0$sI~9YGAl}Pd
zWvfwx34(=i^As8oK3JoMt%)3dV)lM75Nn#_&jsGViZzaA4=RO8zhFY}Rx}%-aEn+m
z)v%f;1~|;2lT;`(W%=XOFX!i-xQWv-zc0%|Z|X`R+e==yD~~E*W2lCKOz)*yrK3v;
zK8YL(RD^J)RThDeEdtlgidgL)cy8tNVAk@|6)ufd$U3M?NvKJ|FyQhK^J$y2OQLd@
zyo8Oi9Tic+y4Bo0;dIeM_^vxE$5Hot)|8g)r~q_0#i;<*eqI<#-hE;%E(`eiJ1wNb
z5+I(B?9N)~ysV6UNc}!O^q|xR@MUVBTycigD)q<Vgphcn4+Kp$J|?NQ>=#Q+;_J!K
ze+?S=&Cd_1DkO6&u!(rt=8>qxB7$;_svGb5U^TBIFwly<Z7|=0<!ixJgb|+}^HBd^
zd;is(O7lI9g5Txb@{ho~x$CZOS_mP85JG5T;sinn?>!Oo-KT41RvU!0_wzIJzURcb
z+1fyx>gqDf<jTAxl^I)}KomtiRIF*<vLNk4KQ?vZT?~rGk|TwVC8mSbCS8;i6l(X^
z_sH5nBm0Zh<uCfyAKVv#ucQ<lJ-vzj;^`H8v8X(Bk@Gb0%(ueITCVI-j^8tdhsFoj
zrm_eV!`xni=B;V&tUXtaZJxNW4|@hxG*3~yD-{9z1hD}VJVO4U!QfIyhtl-&ew0W-
z4?K%1>&>X|w}B;DhY!%g`>AU{x}K0VaFBD%m~R2sGjFUOom|Hpb9Kpl{2cCV^~AfD
z9^N=xDgZq|!oO8yzv673SDu%FAQXrh7|BB4C<@YG;qv|8ZUT0QVDRQL(cmMgqcPW$
zZA7h$p=KV3m2cT+5bv!|a<_g>jmQ)!*=c5gQV$^Ul{C-I!l?^=-YEMbP3&g+5-aie
zSO7oW7$*4u5<4*P|2yLZyU$`PTG!6*R;J7%kn6niX_xgd$1t~9_gg<C!*ZymURW~R
zoy-q$iPybW#`V|0|5@7JYHbV5B4HPRoX#7VMeA>27Fs#jE^qCB13*DOtY-dq?8I(j
zhY;nWV?+$yXGR<3`y{{DRRD$bFUdU>P40Ddgj3`})ZZc}BuvU^?Qm|J8nC}P8*&mz
zS22qp0jQbO`YvY&#dW@&ZNApf0sT^sS@58qcFyheg3ft)!nG|C&=G=+<7ybboDTjD
z$#LsZ%Xfcq?%^LlXbdq&A9J_~Nq!{tatF?XpL%46MP+b=+?JS=RGaxjC#h2<Ea-{$
z)O_$yfGO8~<u~|m&OZIG?yWGju$DEcjxxL&s^L6h%Kp@cY427a)~wW5q(=3!iW5y;
zqr?$LT-uS6!Rx{>Lkz{p;ceyP-EU=H%Vmt{$s<~Ae`~B%L9uK=E4(U2W0Y9?;(nd}
zL7l-=Kq@V*uXQ8F9n=+6HNQo1rGCI~?Cie;a1iyFKs0H&xkgE3DA5XTrxFgEUmvzI
zhounGCB+4UbPP|>i~ahwd_j&Aswc8Z)eQSbjn|HBk_IZ`65x=@+^9X6yd&FmV@!D?
zWyYF;SCscEWK)6rk$s3_DMoQDg*krWeuq*leuGl@22=3rn(`Wvrf;uQ6r*#pbFcp@
zE5OLzqMMtud5Bq4UnRybXY&xA=58W|ho}0#fR;$q(GkReiGlZZ#=_Db3g=MkvbhzP
zS2Go<<wrv3<A`~1A_o_;x2+{jZ363#VFarx?y-tx0SI|(<V1&I<K-d8b-^{ayyl!x
zhgB4+qKP4MS3w_Mt?-Ug{T)7c3b5PCXGSAZEZs<v20SH3)J7!+|0*T`U0a{_Vn_hZ
zcUnmuq4ajy$F6GFVp<wdJyItUP?<dah)Tf8`i%sAHb~GnERD;#1=3Z?D98Cv%L|w6
zV-+fB94N`k%}aVCCl49owG>6Fm(7A~=C!Cyh#4aOFm=N^p7nyz-I{PX2~P__(i=RT
ze_7onb<wnV5U$ggi->Mig8Q=1L@_XWn(T>)Z4CB#JCa1l3TL%O3$VO9`ZU?zj!MmH
zVn`S4@tUm6G^86h3~3^g8{ZA-)80n)oZj+Q@1~Nj{+^hte~K#Z`lj(Y;oN`>|BZ2M
zcqvP(fInKYH<@dr*|jbYe*<yzZ}zs!q6^1!RtBL#`EkHb?;ARhXd|CmTBfX<#ICfq
zld&Qxjq%kCJ3DOaMeHg{2-aX#SuLr#8-tSt@+M8NCA+*<hC1qHkRHx#(n#d^eOAV%
z`w6;^rM)6=#we0T!cvLsrQSuFz6ocqsZqF<(cCI$?HJR+e9DreC$Lv*r!_1LO4|jD
z!rE{rp^CvolCG`sqmF78ZBFc38gZ5u)K!sluSH|IXMd5=ih%_?eW8j`GA2egho0|9
zv|LSXf0u<EC)*VF&y$!P>5LsaTfX*J3G=;Kc@CIk^$o5n1=lmB5w5z37M`<uJJs~P
z)lmkIcgL1p@6q4(TvG@5AKsn=%gSZ;GXRXYeQzm3^S5-O13Rz&|FL!ZqvER)V%pnF
zhy$WYo!D#fC-9tU?h&Fnt(;^{p-!j4C}9z#+BruAhz8lTb3MPHCOmP;72OJ}$<of`
zGa#d+xu8BXlx{CGuOl{<=D-pruOt;ua*@FGJZ>o*4ng42-9&t%;@!1RluOFbgM2cK
z0IYs7QH<%4AwDL54l|=^;GvTBh)dHd!k>TuK@IG((=THRn2K%LhlRldIh^|a?^x0j
zn%l`^1qm>uVr}>iclqs>J!Hng4U0!ogl7mzxMxNSzneb#&ziiW3|#$e0-YECC?n2&
zwSdO#&JcvGvB&?$aMGXGGsrGGWwfS~N1etB@q2k0+{6&&FI=LX&^lr!bxu2856;oS
z9VKBqrDa>{NbMq)On(c$JcHd8@HA>`wG5CfEvSC4Xdm<HKWo+bS4~!Ol801xX6F6b
zZu6JPtSX_@qqh?3L*LD$9e3qt@3uGVqIayRMR9sta(&Z2#CZD9g?x}!LibpIYQ{NV
zRMw&HK@^Z)$7Esxqh>`MbOpuLt@zw7#PIeI1l`qwK#e!q*teZ<pc~ih2BKACcYyui
zZGZ6MN9(J2fqy{?%;w^yz+-9>O6$7X@-hkF1w6w1(fLErcxI0fZ;{Tmn&*qd@aZTM
zTVct_+gXtms4fkviG|>f&sfZMLTKUl;Mi8_DhuP5qW$V#6d5hPmBzUvdp)C-=>DC)
zz|iqq?&%*&c1}PJZq^vG&A&HfHJ<5UhioUk(55|s30g3v+eTRCwy;epT=QM?xcx|o
zvby`7v%=rcn(w9j%`gmbCasnFR^g-LR)I*;Z5PKaM?xE^EaDfW2WaF(eaRn}8A@xM
zB84gA#$S}RFs`v&|L;TPaI;M1eFKhL%9msDc!zK3d|L>1_8LL9){G!E3~;Db)kOWd
zVx4FS$4psCz`cy$NtmPphPD6<{~s`Ky_0R+nXp3Q*fZ2y>IsZ5^H;#AGctoZnTLpF
zvr>}Q@G5N2Pv&o-8*#iRj<Cu9VD0_~BT}v3O832Q3<16a@o!er+%&v?Bjfrl>Y;Y-
zv`Fsi3yT|5{$C(mW(XX5KV-|Ke%*KTKm}jjUf5Zz!_ScNh#=guq~QIhKrnK7bu?*@
z+C-KiVecD_ndvn%rRLw2+`N?lmrEf>iR~N;PVDmui=DBC@=SWdcuW%%_jzkj{Z%w)
zZL5hVyTnkfA)8P%t9bkG^Lpwk9Fci2g5CA!*b?ndY`v)lR6ok3{JiJ(zns4NaS{K&
zT`b+bL@F9}LE^s<G-rt19l<AF&(+_CWF$Hs3Bed$RCj0pr$a97mHzqJ`me@aybsFG
zM^=AY9Nx-KV<FT*I{gsO6M8pW0HsCaxRG3_AWGHIOB#d$8H@5}Dl`AzGq5vrxHtay
zV>K>ERfk)c?$Mm>_uz{3Ca??W5wX7^LRZb(rrZBPm`C%s^#eX4sn=({SeGx=f5w*9
zu4M0+dv0ZMs_GDR<n03|Z`#4JtyzO~WcdSHSN;N)bxxQ(3ta)sc<0vpUmI}h>P|_#
z0y*~0=VZwrqf0X<WoXHbd%8cEWvC`wthz@VO`z&{z)QIhe21)tzq^18^8a#SDxy%0
z$NX=Ep8k^d`cGN1UxP!x#Hf5zlbE0XCv^1xgpU4`p(EEa<FRy5v<Jn^8l<@hK;i`s
zNX@#~e~vLNUVjP?xeO1Pg#7oN+8|(8U;mc@fJiQo@!zrcZ${VL2^b9!V!IVV^Zu_J
zL940Jo$L>-Di-U_fy!%J*bZx(e-fgWvI61NNH&TmRTA>}#@t?s*;G9okOtR)rk?fm
z2y|h{z$^djS<MTnlkYI&Mt5O}_5gykC@<@2dbbEhb%>2=z{JI!p*U-eTmb&p_GpOW
zYph7)A?v<T77$PqUR|%8l+VpVlH_OF21aitQT^4OcJW&Ez&`bFT|_oZu@}5e3=pp$
zy@DEz1$J0h7X|2gdZhv}w#cvBgp|dXZJbM3Sa%{r+1)3|0;`)MJK05vs$TmLKk%4v
zOpwv?9_iiaB|~1g#KSse2zPc8d+z3FLdOkp@pz0%G}i+!e$<F5NRdTgWdP(nI2AkC
z$VnCCVE3eF>X`D}a{ALoz{$SHUXedVe!`k(6;t>O5qH-D!y7=;U_$W_h!{`Mc^B3_
zXu|TYvFCdEJ8_YbT56x9gwQQJx&2KBOF9uv{j&~MrDf%4Q;M#&%qvr7riyMJBMlY_
z$|OMlxno(+)oFcUw}D;c!aBr$hMC3+nN=;6np>ePr<9`Rn6j!G?eEr)67s0*QGS2x
z-mpwkeRE^}Zk|Y39?_otl%*&mDGG5=`G2s-Xi&zU;6JS~ibg0`yS7g_v2zjP0SMNx
z$X;SD^(jsm%;W;j^P&;$YcUjZSd8ZjL~AZsA6sP*`PTPoQz@v6lI<kv4Ed^?dsa`%
z09vSQksCdJu5W{%1yJ)6QfH&mwyUTU)iJ}R8&#Ei!9qzb>{bRt23(50GMdtn!I|_D
zMG}*ZBvslM=1hOON~Ou!p5WUx_%HEo%ASDZvp2`dy)JAinbSw}Ylpvfx-xQ=hx=@B
z#Xavcz<qZ3_Q?ATaGwqDL->BLAG;5K?eN!*{<SJ;j*2xx`AT&vz!qz|QAUx?ML}6Y
zYK+hJBkrW|$^THB>0j<Gh;UogWgS&%lpSRZ5le1wT1E3ktYl@_G=4t^pr^ep3=w4o
zrTD-bAhQQdjW$M8r-cW0apH#gYZtS5jqTIibcm7IWUZZ-!QbYEpG~n>9~Uz(YldpO
ztP9;zv6V?U1CEDI4~<xmfR`e_(u%6k!rWP=DQAT3bENPw3HKcTrlr!r8`*m<<=0O?
zjXixY_Vky3>*;yN_NEwpY^$}$vmWgtKt?s0zUfNX8`FfW2`T%64(OU;ccO{FiPblQ
z^>Bykc0Hz6cQU5Zsb9tiD_ncU%eU)`uzD41nCyC$UHLDrl;cQCm%g>kV?yIl+20v^
z0<Qq{M)i5@6?8F6T#WWp^c74h|L_%T@d~;C;ic?+q{pr5kphzwj>pIw$Z<SkbLlj3
zdJ+%ST|~!Y^5%FfaXgmU5+W;Pe9Cwvcf_~OSjRe}8S9MIzttJMV|T$<GvRogBEK+^
z7@@%8ABtR%ws@Fg@X9?C?<?S<{YBzRIP)mWTgIMYm7U2-q(<%#Vd4HNaiyerb;1ZI
z?A)skrS@6R7)o^$!0m3Xn!qcb?M18!d1s0ybaz)x*k7H%Cd{szFg``NGY{~pvYZ@i
zaHaa+ooT=25NUs!On$TA=3k-VcJ#D8<!`>a{BMN)+23aSdV+FOU!gVv2(Hd_1@c&@
zV9wOdJ3hyB<}0zCTgO50VQNn^HmNbdB!b5-x<iC;h6)NiBZjrL1W#9VtF!|MA`j65
z@+x^?lM-X(nu{=c`iO1Lzy&g#Fen2SWp`qyBzmnXMfTxQV!E&gKbQ9)hvB7<5NYTj
zF`=_NT8dAt29Yzne>|sUc`FwF<5iY>sBYE7A*R4PQ3?}hU-+&GGu)~rU`rzN*Gw37
zS&416_ju!zNO-RNT|H+z28+dRENSkEN||h?c3WKM#AI>~`Z+JFh!JHZ*{Fc%NfCk|
ze)V9K9mlhZ4f08_UlTT3y|zm|6g<lHorp+Es%X<4&;$oXEEE_fSm*u!cO!O%aUQhc
zn%yfZ4vFL^*#}Rg-_|RBb)>SXh>fJ~XZ1hZF2;_XmbqNvZ)aSVUd}tKdu&#B(DFh+
z+uT_E4wbk6$u=mL7OL}dcxw;r8*b4p|F#cixSU_EHv4g8kI_gChuSxK!O%UiK~IPX
ziYy<c$EwaFYetS_IX39z?RhJE1meNw+@F_v)Gx}>0dkTXSs;9!*yA)z37N|)dm=-0
z@ti~{xQ+R9JwjIBM+mn(E8<kf#{@q0*r8aatk^PjiY-$Xa=pFdGv?-jq%>-Y<z{T>
z6S3&T7@^^Q0x{fP`b6!<Oxf_aSFP%)BD-;sz5Ms%t)E;34ygZS8_q!4WJ&awD|YlU
z_*OG~dWZY)JjUB(HD~goc>6I*e2mMj$55w=d4k^tZoeFD^SBKcCD!I0uey!2*%I!K
zlQi}rvXPc=w-k5eoo@EJdk_x?@>MHa01B$YwfW`)9I+L5*u2gK(*yw}W0#%Gm(t{>
zQ2a!0GXx1!!H$#~CYk<5avN0lT@w+nVkt-Y&UL(I-HtazhflKr6RRo6wwk;6sSz>o
zZ>L^(YQZo@-M;Ix{q0G4*P@8I%kFafuIn48;;swl+HhH!gtt%&W~r5GEUTqSguAR3
z6uhQ#jHaqARjyg8XcGpK(Vsi+wkX2H_YxOGGOFZ3#|sF7nH&95v#7XvU6{#5P_EF{
z`g_V+KUEW030teg&6QB^)c$0-`<FK9RaQl|-RJ*NYWEDw?Rb(Uw6)<~7f6(~5)2+E
z$6(V`bNo=<CIG=HBjGw&l51}*Wz0i+g?H3kj-WY_btZ$D!F0eY4o=(-BwDxOdFzo>
z#9W+fQ|fee-d+^l{B?cDGq)pw_WLXPVi2>5nA8l;JPru2Iq=N=2+ZC^CvIbnP#+td
zC|YCwZhf#L;)^Qn7#pl1F~U(Qe%7m;v|)$p;p#8bWnjqU9qhqLd8s2E@`zX=($qye
zGl`Aw)setKuG9F0dZBVOrkWc920}8kCUt^Zg^GzC%9dsFq&qU>L_i$sGj#{TjG_~+
zj#_S3NcBimGRsCXx!VHCSJMg7`SR2q&)S1>sh=HFyQ4^kopLPhnj_<gi>kIA`MQ#^
zMY~jrM6A<DSG2J~xiIscfFsNQAkW>GSiJ-Yt*+2Z&hElcH(U;7`9^{MGyRfGCGv^Q
z?7J{Cv$U@c2fq&TWl{jQH|&gs8!5?9VE}jJM&3{gebFs)?olOm+A!})IK)t?U5L{H
ziYT3|gB|cf`-|COZbv{sD`U6ls4A)@>TEhpm1b)E;{cHi04&6^de)8I+Y>olZKB${
z)3J2aU0zlZ?_qbO<S^KrN|FIus5Ggkj(Ji0RXe*}6@9%=NbM<Wsn+)XEDK<NAvbb`
zUsjRSp9$E;SOPW9YewD-kS7h$FBVk9TRbA!)i$+@Mmqa2kI5)|LM0Lqe;n)(E#LuD
zqC2Q8Z@LXRttZCLtKihu8e&c#8cNbNo+=3!nR=OI?C2&!Zm)VC+eQvy{d5h3cZ(df
zkjp(4Fu6Nr4vZ}%7bm1O83C!pzSi%crHeT)*xMQt>7(Y0f7gfVuqP?+QSVRBB@dL6
zq|(UQV@Ujc1G>70(<Mn|zeN|J5+~mz`STdhhGSefuje5SSua9fgaIGcI^a55kmC>I
zSaWtb%l1DTD_RG^xAUqTD`w~w$dosc6$T7sb@9S0MLQ(8c~T|=<9&qoW`BcRa%Xz?
zz3V|j2-Qv@WK|n?Xz(%qlJmT~7jTPy9``L7w`ejH_1N6Q;Q8U_g>X$y>`CV4&k~lE
z{Yoe;9;&ky@D}-<isEOcImZaO_=9$rRDU(XtD0|Y^UKT=XF_wo>KsEHv19Hynz}+f
zz$q%Tt)^`mf9xYQo#uSweWexZ6*gEZXp8=?0Jlr##C=jexNiv{lsb|weL3Ke>J~C+
zj}~b^<P*Y8)ur&$st*oLF`T`Z^9URsDg@&<vLhGSExCuAwDlj)IwWH+V|0jy9`_7I
z3GU)K$SJB9!~z<X=v_zlk%ymTi&3va|B;inu(VtzB#~L!lTnfihG+v(;K@m5-TRu3
z$)X81)27%q;U{5{A1fA3G%aTxRN87pWmkjA2%#JbK(n0$kI7L31T9hgutw@s#R5|m
zHu;o7!m6g@yE-9P96})bE+PN%TYeu%er1$J@-|Ob$_SY7O&WBO-KRA}JfOCJjV?Xe
zb+m#bZO?(4=;sN=KnEC<X3?HVOA7X=|MOLfB;};eD@#jj34!IRHyI{(){WmFUtg`D
zc&EtUG=E9WphD_YnQI8d&3|RQOYLwG#^jgbIc~zEh4LK25@{^=0$m`P^6EqHx^`9g
zP?vT&zC6dCZf2*Y3sUyE`%6b+5uc~+5OfGbrCkJaS1c8w02`lKP4E~UjqXW>%;QsW
z06T5?X_?V&FJ%t5xVh@<4ouqBNFc;2pm?C4yt(xVKt&s$+E~JkBL%crcqcBNm|o!{
zy~2W~xYJ&g)vV5CDC%VS(D|WrT#+pFt^EPge>sUYE$!8cGRd>*Pb3BDCY&n$bR%Ly
zbZ5US`aXbcUzH0yhsu1pd!hkBf_$gVF9a3T$xh#+lt8a<y38b~G0?K3EwkL5$jPoN
z4&IhsLOf9kl=fFF-g+to+7tyGSk<pH_0QHe0!7)a9ZD6uf-V0bOw@nI7u0FXK$HJh
zC(f)Z4&z*2zIr`B>29|!DRKv<0gFZ${6gHurK)ez&dF1KQI5C-ZDY!?s!x7>geFCE
zgRejMbq;z0-OGi&#_#t9d2!7ZIGBUOAw}Q5;A?YFP0OgSlE&A;RgP&Vcs(=w#AcTY
zhO!kiq+Fmtdk&pAWE#|+*aa+!mCI2@Svs;nRYKMU=o;4=o^0X>lgvl22E<Q@&o{Y2
zH@k^cjs9lHYcyI$o${d(s0Z;SA3hL<u1@#eAz+0VZ{swh|19$69i#q6<yk7u%4^U%
zwhoBKGj{Q42OX{l<OUIlRth^+2dKU}N|qKbi6<jHtC-1B!Zuvhik2N_71T>PcJX#O
zCmg%ahQ+7=iui{jU(8-u8rA!u;M}+kx?k?l)7!5ION2Mj+=X($NrD?ZV3iH;rT1EM
zEB#q_?O{Tg>W-Sc)^$-qOJ_=jDlPG$UnN4@n-9EsUVbT3YW|ejrR^wDQ;8L%fH(3t
z9m?0;!CE`>wL~coq8q9?u7$?V4vTTuIr|^n^3y|zKXS{4yeY{oOBGA&E_V9`rNN~c
z3)vP$<fdiKv1H6%V0L+dzKB&Xx;Lnm$t0SC1R#$8OjT|)lJ`dDVX)vUkX;1hs10az
zBMtK`BQ|?2tN*ww07=J4ESN`pmwY0&%}S_pbCz`Tq4p}7Ep-xaP4oYJ_q!n=<UJ5P
z@@KzWyiBiBF@AU9{%r3Bf$Z-Jmr2x^IfUYf>Ie0R!Z7+g-(@3^BbWeYP`HcuadHd9
zAsX8}gO($sJn(`|9xok@dS64S0@V)<*tI~=ROb&uMn(U^zvD;#5$~U6MFQJ@H}nt+
zV6-7X{DTVMTZr{n^+lY#y?7#tv5XZA&=TO3Md42EmjLT73;4KOsE5C44LLXBnyZZi
zPg#<U`sj=o8E#4YGuBw7N<RboJ_wV~49Rz6A*;mzBc>5Tp9N^=FF|7gn1)fMVLx=W
z^}f)soUNThwr^@LWRcO#mIWaJ4y>iLJbOKri9`)?kCv6-)X4MLVn1RCeg$^m%_U$x
ziQ9e)ETpjgstH^v*^g`q?#MRW<<L#Qeo8wH9BzdAoBC-8Hl*%odj(cy0X1O8tlabv
zKq$uz#j8jEqowFi@QW*3QmJPGAT2BZhK&Nw2V~7Ut76>wfa6-bTA5n(uqUR9suUDX
zy1pSr@uV;a-Pa{N3__=B!m2w#y`H%}A8Db&ySoS4^SUrn7rE+f*%($G%YC~1!8VE8
zLz;8YRg({3%8_}nn#Fg(FQjd~>;QSWVa}$|u<!+9M6|anrtwxXRNluA((_m(HZsy%
zDHN@EnH~&OeZUC(U=3W=&0{UP3}XUvq`DgIVzhRKv~9wOer6&QR&$LjCxj*w<5|lO
zqh9j{;&>_!9cbtZhCBU+>d=R0unM@Fxf-JGqnc0J;UnDCG1kVdgc9A!9ZJEmt<qhG
z$X*TMnT!l!-%8Za^I64OHc3dT;c*HT@W!MN#HRd-2p;K1`Ysw$pE1LK2lZaY=CgOv
z*!&`TjPIL)eF(BgI$tB}*DJw7txe>6fA}(3aw!Eh_P)i81#ou{?+q7tBec7Dh<*K@
zr?OglVn-W}=!fok*%xx3;L7GfZ22TOsH#II()D1ltoy5^)^<yN$Sn6iwM5k>$kF7=
z^8UJ)EpKlGHLH9JqNX8ldXF#&LX9UZ{oPqDez+;AoGM&@43_Br9b@cbp0f+rWitqc
z%i+YnL$9r*;msu$&W&C;RoTvb0sM_E0}AU^%FzfATr%z}#P(BmhS|hwm^x+c<ZeMg
z6#iC=6E`T6>FU>yG)QBQeyQ#r^=kB%2K#(<3R#23LS{~kmozcLR9?=UXwTMGqMcsj
zxN+Ar@?;8BA;Gq>`pw&4;wLY5xC6$LyS+E`P?lH9JJk0YV;GbWs0+`P%AV$qH{OP<
zEtZ!kW9F-5ikREfRjYR}2sgMfDCS`lB=SyBfpNCSwu^uPqBN&cglyud0xNLgEcK3i
zvgHkB>|E;G8zRTn<xxCDtdm<C>BFn#MH_z`MS90??-DgT{=3W~#9f`^t@T$}?`HN9
zXEgGNW12}fC%-xeW}YQzv9VBnLquede?$XUnAfcr;f09QnT#`_C7i+*=+%)qNQUD=
zlzpCW_4n|Mb1^6o+|0TwL=oGG<6m6yYUs?*c348Q#1+f#?t~!B_;wo?qSx1+-)!Uf
zY=_l5TU>Ef*_;qF8UD=`ui7|02b4UPw?+_6kiCtuEhO6h&O5IBHqP91<OQ4y5ekGf
z7t74dj;t)N2tIq1K*ehEI(tP6Bo=cw!4sY(#Bt{j<F@5i5~s+uSHm0E_E%l3Xi3rA
zJK5m9j@`;%r}5!XMZPZk7~a|BuH}5+lzhYfCXFiEG%lo7{>Grf%lOs-md449S@dC)
z)-%Uw!!fp%$i=1%^5Ky7)gi3E<4ru?#BZHmfZYP*I@_mTu8S(J&gpNin-+_4=5EIn
zxBKO~Fx+~(+t)=mSl*Z&j~4IT+ytZT@XM7;2wfch?#h0f>;BeV3AfqI8Fpi8$Y4B2
zA^x3@Rm5!GjtB_zU)5t4=D~9gC*VtrVfUFssI@I?o6vFFVgpKkx%K|dzH_0X(?|=Z
z_YQlG)jB{yrL*#GjNSUWZ+7Fhc9Yi7h;5yC(#-olmTNU`&P`VIcF+gg1XCTm5kktx
zJD?y4G9vg0C8J4>>%@wL^ZZ=k=j=OL`;L@>sLGsF*x_5`NV>^9)uRg`K+2><!xXJf
z!pYp?)sv7{st@sfQ~xd{-VDu2E>jipsalA%QJ+=9_suf$(X~SCtSq+n8k^1s4Q`!%
z2VD;(KupU_OY-=>N*+v!Sk;mkBuVE8zj^-=?X#eLelO`uA7R5ZiFB%(=ALNV?9-7;
z;~CY)y{?;#c9p5RQ}1r<B^6`8O`FkIh8M`6;0Akax4cdBQ{fBN3*;8Ix;|Q)TVv;L
zTpMUy{n<`HU1S#|9DLvUD&a6+az|<DC`y*${D%Kw`1N!4VJ+TaHpO^(ZtbAnS7eD6
zDojVD?~O^No)f8H%T_O1Ku^bF6P|>dGCL>CM&vw0!0f$iLc1Rl5WW%QE$q}k&pLP~
zJ9pMK`^s8L=1^H0Y^PI5vwQg?YNA%=PX45edVzJV3z7;yr6+DCA~Ji2;r!Fufq*T4
z*%t92y+xMYYO)SR?cW<}Ld~Cs@3mr=ehdA{#sOUte^{FzW>-IG@Nbu|Wnqu9#8Tyg
zZ{4pQ7;OG3x3GgyH>2-En}3Sv4q{ZP+S5!j#$WvA^y&+Xx}%z@RoRZj2;E5O<uk$v
zV=quKRzw+$IpLGsDf9wR(=plPP(?7^rjE0(*~18dmw|~~en*Id0SNI&^4_^_uC9OY
z>5FyrKmFhzofJ?2{P+%qEZm)4$%#hhmqo<Tvu73kI!fbNc5*9L-;a>(9Z->U5G{#N
zX@?klzl{Ll_rU{57rzS|5`4VkWR~5rc|p4e4E!0y<{NuN8ZV&78q5%!>@X)(LO`@X
z1=a`bNd2*(Ba*_t&~(vT0{Y2fP-qmVX03UL5_ddI5}@f7OSIkiyK(t$y5>!Z$7>C=
zcK7w`$b#Gr|6IM80bYs!lb7#DL?03{3Y^&MP#1eXljrFXz>0f!!CtY%o9!Ra3o2SU
zolJqAUP6kI<^MushlTTY3=4fshjAs}INf0oo4R>B27W$Aj@76*-OpO;8w8c3H_2JZ
zJUtZ{Y%SV+3vzY5nY3-<k(#XpbV?KH5YD${*7-gOv_O+cNwhbVvRTg=j5N}!6O}+0
zbXJ5R>k%(8OmoOW&B51v02H^WV}~uPD$C8CRX#b<6>867EEe;z7|VjJeFO95bc!!u
z+550m2!JN(2$m;YoOmIT?ny8U&FoByRqSTg>y?$nl)ewgv9~^ii|5Lf#Eq%*VZ;?S
zDOeACX~SM2n}u&`la@uV=4~^q98>o&tji9k_o`cigebgbadLZLlo1t~xyWl!lzNoZ
z-#RaJ_2Z|`cCqN$f$;DYIWx3W%fXrO0nZI-bN)oF$gzw)-$NTjVb9r96yUt7mt`w;
z`~S2c&}BhjC#ai|ia=@CY;Slw1^?Uo->$ALqcJwFv-?-;+LQxf%6}E$@891y>U3?@
z_(8^xuB}>(ooEt(*y{ddO%Tl&@H>k(*8hq6<I!$WnLCzhqAK@4eedwxqn)|=W@lal
zTh3D(#K$@bdzwc~L`_>27>_SFNUOV!mO#057gCW>|D4X$Ut&?bujK1LHr3{38f2q<
z+#u8O46Ct5G}>T5q=un+=|zDd%Mnl~LeC$7PPTywxL7;?9MMrseqY9O7Zu7L43Zgu
zcQ6mHD$rzDFYT-*YfxEd54KZo09%LPTJ5<$V#6y+b}ng`WLU1;)=mJVOLwqN6L^}|
z=FP%yU=HC53YjK=T42`FU>ck-OfdIP5j5=DE=cTZ<sM{O&20!~Z{4r*Lu84y&Kc@u
zU%=HmMA1`ybcCz8#X4V~Q7t!jq8h7+y7^9Q;w4%sH^t?;E6$Jo2)-~9_}J?Q<C@Tw
zI;L=UE%1%|MB?_jaHpFS=z#7Y^~oz|0Z-nnq=zS%@_jRBr4*=Zd2iYJ-!w2yB(gMZ
zrSg~9I(_2R2ay%&o)<Q=RS%`<tJtCIam3?qp2iI3$`AySH4U?(P8rz9kwPj0>T2jZ
zw<^flj7b&y^F`#t0oT~z8mZVdPCs7*^MY!<r`R>RKbxOdWxhHMR5M@I*TIgXZ2`4l
zhWm!Y5@zZ2+62=-?S*z9Z|DtYuo*`)F3oqL1hSM0``ZQ+5mQpgOcm4l@-~CxT|V2q
zfW}<1sJ7Sl9Lh%Xf~il~Xl`IcXRT^}5UfQFn$Er@ldzp)T~_OiJ(ofw_Y|zw{?hoK
z7pGr1d6aco>dvTH+G>w3;>nR6K^k6E0LOc~+{YpWsfX~mVumormV`lqZ~zIbw8~Ox
zZ2vb`_A^+LTf21(4OjrnawCne&C<S<=tDy`MfdriEY)<7Illr2*~~B%OMXX_|LUuI
zBe5*8u)9CF(UPN*H*NCYbFywBLE6gG(~!#<rv!(Tct|#KNIexhgcTM#O|FMZmJu<g
z(d9)JJ*)?r$Xp)UTo4YwEh{L{!E9dLSP_D*yLlC}9LQBpv8(*PCj2WMTsJ`oeI>ZH
zRY0m;Yl$9%UK|qlW3fP;d%_Iba6qr{9wyW}vd0H{Si*4y8n4SX7Ex!s-Jo9xU&#3`
zfP@ru9!P@NK+T`*tWah<-T3iA2tuPlP>{G7+Y#7GLRVXeULd%ukKgg4ZU9oz6G*Q+
zlr;$z@%$f~fTIjfRG2tZ9QlIJwSyOSnx!d2tLcitt>5%7RGPadOEoEkVDi!@1Bdz1
zciBp!t$lci0m}I(;Fk3Y7!BDwR^sUn%8m5;MWADPtZqSfJfQ$@7}?C9U?%?4*4%sr
zh?yy49W1H>yr4EAscUK;1=;8M_S3+CrNsjCoocYx7G<t#O%dx2+VC1<_yJ#2;hbC7
zuL=57uiMX;Jxkbfbm(D-G*(<!#}pZdNZomFf=^AO4w#)wYPn$)Iy9Q!e`Q5VsT3sk
zqQ1=awbOE^$7bEl%_TqHJ^j`Z9u~QV?ue@8)Y%c|BSNxyH2>LLz9i^S-QP-w%XN1T
zHw3`#gbv+cdU7};V6aCiiwjh2wTL3UR=7(yd4h;iG(<g=U6q$(-4~16yJ~*NYTp%W
za1JQZY#i}L_Y@6SwpRm2CxtH*l>?|aosl-_h|=tlJ(EJv7AQ%r-ily2<Le9QL?e9_
zTo9oaJvY_KVcDk8&Np<f-!tKl6WZ1o%F~UUD9tEi2U`|Xm4T^hqz8zZg%uCyg#_M@
zrs5&1vPX5jZA-NHNx$1iZ83>dy7Wg=NM2pzRn25asITSAH?wz_8S_qy^Wg?D?@}2k
ze1M5U6n>)2a1I1bBtXVe+vzYIae5BOn`bGBW-F=b)m~<a1x9?~FdCHe&~^ZkbRn-#
zuH^NLt2>sd$ntjwe+f7Tq`ixwLmy4g{o-fD2H4oshgkeNuul7FO4*^no)Q2%PygYT
zCSM_t*GTENMdVF=jHq!diC|}ajymO~hmiwZs(?MzNe%I9Yc$8f%UcJ_Aa;RJsxm2x
zunPiWD2r(mPEZ5#?<;{p)20PcD*)$a(@a5dkvT|NV*<3Ra@DsZWQV#lpey$kjFY-S
zc@*_ERUjSr#X)N*Li|t9JA48f@({rdYQ&}Wm|{31HwsZO!dw7!-ZS{0mw3|P*S%cS
z6_}ZF@_4rpov%yE?u{B$Y4e>jCWP*tL9oXF^4Q6qV(EjNSpE>{R@J$%gFDu2Yloo#
zkXjDrP$%l<<w8?iwx+LYZi`$G$}103&ZHdfl4o?BjT?`-M)5EPRts+Qsir(g*g#ws
ziq>@^afPix8O{s;#nZ4%KK##C<N>y8_kZR}mjF8dQ}Ty(zJkPz4z&U_*fCsYn%#D8
z>y>Y{Wh9L;YhmQJWzDQi*>C2_xLhR=wixK2{iDma6^f&~a#>JIr&q3Fy&ucHu=|&w
z*9vSL%b_pJD4G8IvcP&2W_Ndbd#iKVokRRMcot0?Ie_F#w6Rfa#c)ixu78<+eIXZE
zJ-wnTe~atQZD8lIgdOIAEnI)jRKgTUeV>q~BJolOV=`Ufnu`2?jdC6o@O9E9Cmc_W
zH9ocLJVLu>9hRm@b>^f3WWxmvJOFv7fC1@()E+U03Bstg3=ny~ITe2POi}*Do**RJ
zKL{YGKd%ZWmc0g*!wKIm`E71Y?uXF^NRY%M&=X`^=u_@Xp1gIBc`rrpGLh1x1R2A!
zYlZ(hX`55AT}G6@wS=eCK+FeZ6ZpUG#TsHk)rFj;1yq_=zdZvMZD6#50#`!*@gGsd
ziq_b60X>JlLZh^ns^N+7^jh8BEIwn&=ik_2x_9#Y-b_^rWNfx%=pdB3t3y=o=PL4O
zQZj-^>zYSi@@VsT+6Hs-Yjp8>?P8B1El_JQi8-H86h<M(&K~iSrh(=GFsd%E6noYz
z`Qnkktt3EQStE$nUd`N}A54R2Br0|0T{eH{CQGWy)scrwVCJ>T|NCutK5_IRnv;=@
z-D++?FW##M<@3IggdL!c3ZS+Qdyguno6YM20e?M2FW1aI#;a^Iq!*S#JaurgFjYI7
zO!P3~tWVe(+ht@TUK5x~^4ae+2h*YYf}N5R+3ejVoJ9J9-+%3{jDszu6Di=?JEohF
zJC*@Df;j_vH2!ds!>S{N?r>ZN8G4y1$+6<yvj&hT7=GGLO)4{DVh6cz*E8WPOM5*X
zDQ+LyhgoE0^%oTcXorxJ`Wm5c2S-_f{E<8v|2&e(K7Ym}?R9Vi$-_?EW^9bIrE@%G
zdoosml)1X7Dc#3S{AeyK?OEh#_d=ZeDj@wD+Zri7va1*USGmg)vv)#5*5wFD+NBSW
zzkFf$)l13=E6P;Vs=i9`G4o!~fIrVY3G%4-W}2pV!{9+S3}`1v`TZJ7v^R?c@2yAl
zbT%WRlJK_+kh*se5-hhd#>LG27j{A4v&vlC9EsZAViPKq(OV<O>0<B?o2URdtDXwL
zIUlLw^8p@3ZC6zaKlWMza$e##^mK8@TlFN@?$6B|XasLS-W;zr8Y8Z=$Iw5caKZ|H
z3#1=L*cRp}7Fe2YT(KM1K{sk#rnkdx|MP{Kav^u5etxF8jD)u(w$xO~i4LLFFDH&S
zGUq=hNMC9@Dt9-vm-6uwk>avF5$#9oG!zH2nSoG7wkF83%LoX6ZZWl$Okeeiz}uYP
zF8D1ilg<cAF)fYNZR-_jhsYJHsao2+)uB`k#?cK;A;;ZHL&bGuXG*9aH`I&!gqU`|
zQ8@yF*5m-TNsXrPeaFKP@$MW7JX-m4h~U|%Qc|EVDQR}rp0Rz}3m^DSf}utnB3RQN
zNi1is=_Tsc=TdgMk$t8XN>;~?)l(jh$=n_TUb^T8qJHJz*t8(k)zgyFqAL-)av#Sv
z<3-CDh}iQwB<~n+S}b>E?06}+qhk_3Gs`nGx6YJOG4HML5gOB4@TO}_<q_h2O*}wt
z-i1aRJXhrJW4HN07e_8%wW?o24>QlPGDS!J-O3^vldm!8luIQ#8wANs|6Ye4^+Hho
z3U||1oP8`ZUjs>-0LzkeQsD4Od<k^1{3ZKwNyML@qt0G|L59%~BCkeTPX{H0UJl<+
zY(Aw4N=$}^JuC!PosUK?Y*C2h#in3%>dnZOQ+S9fa+T}SC&M8+;qdm|fz&eT4S`d+
zYWC7&50RlFPlAd=il~*=w?zKz6e;P+j)7@EQmp|KsiQ+8wWOW#7vgOY`ZyHSZvhK`
z7vD+DLwon`OkH*=>T2%5hXWZIL|N-dsl}b@1CHBY9p@X-yvxv^mPcDB({vGglMbLH
z2@C;Fd>NS83qbW+!$tf6rrly0H{T=MkR*7_*tv7-CFDH4_GHx`LU}VWKn9~(JeIeR
z@UyIc{<>`RA!Y@NE%|?sp#9K}5F)2~DURAqEXZrcV|%ho7FdRsO#;i5uCRDhS)Mg9
zYG#*4Fe))^UdhS5&SRxG@eO7QM%(H{H<g1{PZzzM8mRzG2Z#l@)@EY!P5|6-0%X}0
zX0Dl&3k9eP&h1$mC7<R<ec6tnrCgO(D8C1Ot#?=uh;Bz6j5lBo6l6;o9v!24@Wf)s
zg5;g*qo;4i;vSZ4C%ASK+{oljcgPjxe<u$lIxY^lf;vUog}1Kfv3x2(@{6rlKQW*N
z3+xD=>ky@oAI-mCG&f}sd@^>UY>dmOZbUsLS967lzzMEnM$nG#3H`jU+1NG0W@|%u
z2ur5_2^!=T-2JO1K=Y_8STvhEnAT@R%BSXxnnj)h-8h)HQsVzyfNV_b32?-Tsj?PI
zN$Ht`{RlSbe9%$4;)8%YeAm%HS;tvS++c@rMfTKcphItWv%fy-nr#84x)nLx`P+j<
zZ)z3`RGo2F`yu))l7#AYwa=?W;x2p$-vnCY?RBX&F6Qs-#_ML%4W-d*u$hZrccS<)
z6*8vZPfcK?oa_ZQsRo4x5GbkNx?2e&whgA=MSO(OXh%w;e#Uet0E*lbTRo|g@T*$}
z#JI#c)7UxZM8Hf(Q&@sb8&I`hW+c8IM6Zw{s7`k9wz>TE<4OXijA&A`_rr+Xsp#XB
zs6vV=<gy#R_xH<NO;n}#WLPI9>DV|Sw$enj>*KZsu2XDlU=15{L?oK04T5J{6C3#f
zWEVh%0?{YS$fuD@8S!lyi!P7Wq!6~2VbTce#UdbpRi6d)WfuXIM#w?EgUGdQnx3ot
zNBTsoAY++EnyRzdxL0ps!MCswTG5mCGAh=P1LTI+GTbu#Fmz&l*F>OYA%q9+$ayp7
zEHhc-rC3I1JHH{<z~TXxQU71Ej5J$~Mp#GSL!~pJ2Q{nyb=m({^JHOd$Un)4=`Sh2
za$Ygmx>|`>)}9uyW0Z3YWz<5N97?Rog`@=1=w?{2a=EG$2Q?%M(~{~g#uGxdGL0I$
z%PV8$4qap1S0`xnW%b{(F?Z@)V4hfV9n1LD>^yuw)iS5LX=91fBHYe}&*O{9z~C7@
ztM;}Ty3sFN=Ck;1{)}gOByC_?7cQJ*^w%~mg-kPdmsas?l%8*E>`Q|*NtUyOK<oA4
z#&0#FyZO_3Rm;nIneSG%-=IhaR0B-^S(Z~z=}hESTIpV_lgJxzk$lV$(e$6rcBa+b
zq!s=9KRSlFSG|}Nq2TjK3hTSnPe=`-xOK3h5us1co0Mnch#yzn(*4uCtbOCs=kPdQ
z#7)~)Kpq?%cMNal@_iKTXvh6A4XNwFe@}MR-*ZC(YZkhx_g%1`&8VEpOK*ihQoWAg
z3e@<jG=jKoxpTFVSjf~){@*heQn%(A``UZ&3K5RD4X>jn<c0KB`=9dYPp(8^meDAT
zVaks_g}bnqv53l}iKrNtiX*7LcHkq-<I#!(e?C^irx&(6p5v07&9xG4)K{$PKDg_L
zU7)=x>Bv`rUSO*j?@*Q;SK^1SGfLLxfPc@Etp=W^TZwv_@By`_srQrcT2%p4`KLik
z()Tqa!qfWQ7fq_4d{MCu(oAg8@xJy!b$V7%OPlY8X3359`D7Bm6z{L`?CSJLjwJ;`
zjbZ@%lI?nBf6qR<Fs7<UQmtu;0*zEFArM=xp%PaGq#~fF9=?fTJcr4aJV9@Ifu{gY
z)*74{IXIBNaS!;Pe3s505}=8J-P)+&YkhcPLhPax8l<7d0o4sopEjJwd6HD(^vfDN
zvz8{75J)WeLWpuy#ky!CKqr8>_9r;3#MA;_v9aY$<8>OS%UxpyTVMa^FR|~SNoktv
z8ZsW8miT_%I!;v|kt=$d@>d_an?#RQPkLlUZp(AsuTZ=<f$eE-kAyd;WHZf`IxABf
ztKLovD)F@;oA54kG9d|_`gn%m!$>x4m9)1cCy>;9y(~hW%~Jf}WJ2E0NFBk5vPFCq
z6SfWzb9iMbpVD!EnBd-U9E5YV-7<?Go*Zlb4Bv4WPADL=b))ENZ9P`^YbU_z`X+Pw
zH4xtY7!~aR2lP6}HF^tpDRoURqzk|=YgZs_Dz&EO(uPOqMhXp10dw3=G~iXB0N2%^
zb8Bf&7KAFz1M+aU=!RutSzI?-CYHfh-7H_dl%z8XO_Hc3M(rSZ5!<J;d&Xkww{0zD
z>?84DeWUHj5c&!6>l&|6n}}2g6&24praLbMMq_3Um#WEzazvCRNzJg-q$f`Fy4BJe
zQ4<$=l=K!*&k@u~Hrk%?r^itC`?5Q<(-Orixn0n&e)_E~yC0A8-PBIVuSGYh%4lyB
zEM!i`9?O49?$RzY+Hc-fUiz!(PMoy?h#Dq1#KYA?8Dq#hix+F8*TJcDMt#N+Qd~2Y
zMxfS9Ef}Q8VHl1vI%_)insE>IIKjBb80ADu=`ok$sUw&egG-TJTtNP=l#%MI{tn5%
z8vF0$5c1aCIML)T9<{9*w|t9ip~g$>_iuO!EzChZ$trJiypnLqE99t!g<QNhh6CIx
z=A2NANKfj6GlY)Q_jB_+Hvt2;btyPOf}<)PiMAYe6|FX4rEHW;p=ax3DL*_`7RtP`
z(oFD6_bVL6g~uqPHz2*^d&B07Y>pIDi2c?8XVT0Q{9=@&KqBUQgG31<+k7!2dsQmM
zszxcItj=t+$Rsf23yx4{mFy(ud1DBhq&q5teUO;;&oF$rMl9>+wPVX!i)wgTIW$p*
zM(|E;<HgMF)g&qj$4z#-67OrJ&QFL=>EI|5y?D)LCr2o5qx9HE*^BhZjTK0<ilG#C
zCiE@teYhN5PWIm|N5>8Qo+((2tjKEM&o=XO5|M%i3*R_N+$?t=cCj!^`m5G#?nJ4c
zy`u!BR9?-9jwGd^M5TlV`h7fw;sp1MS_Z}G?d_BUc|wmYu|v_TO76lV+uG;{>?|q2
zdmjOVY9r?vTVhwq*jrIZ@Ef_Be;*jGXhsG>^}@utF*}cR=cXp~sh1gqPK#W3O@TFH
ztRJx~4)||;H>m_0t-iQ%u*vO|ac~)*CKdBi)x8`3_qYoAcl74HMhj&+O8ox-!ka|e
ziA~daF=WrtE8=oRVf8cUfH;5s&8;2{O|OZ2<FDRv5x?xAfhMO`AvcFM6PCwt(u?n#
zmq2~(x8wBhB46YixTaNR5gEnw;|&^*zk2Z{#;WEui?O>=8QyJj)mft)tBZ=C$ke3c
zD^d=C5;;$I*4lK|k<G$VWmOmbTb;#Uy&>&XbJ^l2I_n&HhtW>Z>zj0z+4p}rPC9c3
zO}(I5X2HDKS^Uw9uBI+h1cKBLr^0%5HMgN{Yru-8Hl;zh6+tN}Swek_yTL+Zy-qgX
zLUo9-y@LVLNKOnkRj+{w#AVW|3AIip3nK>24$E0%X~Myed_6ECw=#9rs`BeTJSBjb
zZ)tAlIVyy)#`mH}Fj8bMnZqUZwqT|^+#?`b6PHy)%=M{~`1B33Bmy*BM#wc94_u~F
z`^wTF7}YqmwuSr?#Ek;~XH)6sR<dNZiS^B52zU&7fTD%X$rJgQGTYw;fX}=ghFdL2
zK!=SryqqmvE98aI)@t}u!}4Ct|D;(n-*D5Z9a&1tNDEDrypy?0UQzHAdP^``O{iY0
z!#lWdMP!M5OG~!AzP5m0h3r<n;Fmg1t%}<Pmi(sam$W+=u1ThOhmI+-V~80l;XMJT
zukr!aq5E*E8-WY&Wi~UEX>Rl?{+NYI&+()~D4w;FtdX*Y(up+?-l~T+I7VsjRKpu<
zz{jgtqJ{%E`o7#vgk5%6yuHU2LoEhTpGJKHLhvJqxlsfMEZ>%8SZvAs-7xd1J(7{`
z8=U^6tE}x3A_4<cF_P<j3u!BIJT5`6ULT4<(Q^KD{2Ir%68DlR_imi9M```$Z*LGk
zK5_$3aze^FlchORAZK2hTTucQS`w9DjA|tA{%McNI~dPRQH3P_OH~&6O1&xwIr`@f
zO?6?s$L*GYoDB@j5M&0m?Oe#lX6k?}iV3qM@pG{%QI@1VtHi4M?<2lQ3WNZIJd?2C
zf^H^1!2VmH{(N!j#AFC%8!1gmhEv2*O(%K@$@r^-%3)C+`!m}Kg{*j`oDR^qX;s`J
zwU?{m&jCp3d|mo<vIh27YG^E3P1SK6(<<IOh-F-!g8H1DeW0B06dW6OBdqh@n4gn*
zZlv%n?(#5Vyh0J5M<p<T@0St|eBGo1Zj@%ogivV6z$sxD?i<c0m(YAoj7p`DgdG7`
z3?>U2jSmnV1-z%7YesyE(b8ewNqf%7n#!^YY`0r6<SEn(-aR0zk%7`qmPm>mKj$|Q
z?$(p^Imn~k2b33=oS&S2IptDdOpI(AlxrJfcm~d7sT?|pni)3aJE+FB+r<0Yn)(12
z=F52K{xR|Z1X9|xgR*C({m<>tF&1TB#8@E<t4oDCdV7&=(?1}<rwzU<C~fR;r8fa5
z!R=|eM4=q$`eP)OB{#1w)SE#!7Kb%LR)bXU1_h#s^X7Xd&8hASAVL6N;VBbv{(A3=
zkp9|z*xxZWjCw^~)Oiy+*V1X5Ql69tI=HtwBdk0)=_%`doj*c)ey#AQ!UsM$VY^Hm
zRwF5&r2yG?Z(#CD(NFb73+yz_sr!jz8d%k0An9zJltF%6O0IGRk)gFs`5@u!Y3a6D
zF)qgAGSbPTH2ET0R`qN2{ugQP`58h>qrHp^L+7yM*OU0y(-E=_{bVU#5~_7^S@iC=
zJkJ#Bo`=t&WsSYLycP(Bi|ok+!SnVBnc4GD`mi%WfUI5GFdo0-CBtfPm3D{E@QkWA
zpn?g213HIFWC^|~@F-WaUW~y*qmw12I>DGfRl+4%6G8E3-C5duUgew{1$$?pnMz&=
z-Wb1{Eu^ligD!T^xk7Dx`!b*6fs{MpWeOecH8rh!a`_D2g{TKEVwF3q7zf!DZ0WF5
zYoz(oZ()2?|Am}>O*oG973)_R(vkC1GQTF!GI%+0Jn6{!6;G;{xyug~mZo#wZ;T!_
zK`bISG?Q^Oq_FvU=ER{FnP9?RCQQ3ZE~`H80u)2+wHg0r<fFvh-*;yjX;2jf{O}!*
z@*>}0bg(pR{z5VK7;XX4bE|tOk;z5uINMxByL4hHt1{~<k-kC>>@@;Ql5I|^a4xDm
zgz5?|hV+`pZ0oQVO^hym_izf(1N`L$2G4OMc?%qryp_XtKc@(l=`>jDI$mdWHRnN7
z2g(X#S}UiazMQ|JK!9s2)w)s!U?Q*pH$ce0{Kv30TJk$?-VbdIDmomT(ZmfVt!_bN
z(h5usKKg()mhfeCZHAel`kYPtoE*;S(=5h0=01AJ=^<d|BWECoy%~`56y^|y4fb>Q
z_CuUN`;rz`q<&WXnJPTCAyJ$o?f%`VHS5>B=xCG>D<y8cSHWCV%61$potP-Y%jk{p
zcD1Td$<|)(K_G+la-n}B&#p!U7)oxq3fJkJrq@5Y>W~@r4LI{t5wwd+OIFf!659lg
z%_qVOc$%QleA99-=E=@3qu?i&$@brn5M4mC-CuS19Qm0Wc@B71{pEe+Nv2Xj3TM2Y
zNwbc<2#8BJrT*@Lw2_aA`0au8YluG(1I}Z~B}7)!5+31zMQWj#vf8X!$Ay_m1^6Tx
zJM|myi>Cxp4E>xFl+s0sHF#QATlc1dBM<X>43g{K<{5>FGT0!HmVS7IY8u6anmhaz
zB9ajOK9j|^58Z+$$}E<9v0tooR_42fJaye~s}Kq-A9{(s3!$_PyP-6b0-*i^?rP(_
zMa(L29i&s@(W(p#=cNtjZyE_r)J>#{JH+<vL}ruKLTIjimbamz(ivHV4ZJIs+42ew
z^AzuIZSNurO;fuoW%^QAl(WU3PF$K3M`_8~-pfOl{I%z7>yXlcbbr*#z=-9zACKIt
zzJN+fEp>L{v-skYE5jwpZGP*9EVn#snu*@jGj%%rHBk^{#S_*E4G#j%KoM73VQiLa
z3<$Ug2vki}@@7CF{TVYA$95hA{StW-rJ9Km`7_KCIU)JfLSNOaOcE#xk~@%6O|e*F
zi?6j0(K4LLJwuNRegR}8szf-AX<N%_17HTAT9@h}d}oCWis~N4amM{F6yeieu$NF!
zGJG9rF2E%znXtOZ0k_MMnH;X&YUAz6g1W}#H}yZz5~?^Y;e(krH7g<h7(1yrR^K1&
z4H2H`UalGCwuLC3P%|Ue3~@nSAV%$B4dHR5pRHbc?0$QihH&obnE)cF9CPn`y(!LZ
z4g8qc)%5c>L!o7*U!XpHwkftYMGmHHUxfw??UeSzXguM45A6fO1iOd_&P1B=yCM0K
z-nzzE)_%Fk>5&D3Il0m(mKOC#%wfZ_P6NgZ(`^#Cb%C}XCmGs8b?jvJJ3?XSF1Kzx
z2$y3CRetP5qHt%JCIPabu%JYisEPYq-vmSZik_{jBM2uX%NK$Kchh!BnAMb9mVhg4
zmKcn{W8Izp71`6$k}NKBsGtD2lS3X_(2wqEgBhKfqhuyKSEyH<w#8=!ZjwB;Z5;s6
zr|Ed)uvO1UXhsJ@ux8d%Qbp?@bU`Ss_9!+(_A@Mn^qmY{Tt}P(^hfJiffk>x<Mt^#
z{QrQf9rxov0CVJkea33B6fvCBtDO_7T^Vi897b0gKq1-J^s8Q=chh!;<r5nqBx;3*
z{GM!KWFN=OP?wQOZLEXetJdy$Cl>0_X7YRrqNx51b!E*d0A$_GBB~0QMG<*DM3t!b
zB|MN$?is`CSz|j-_M)Uh7F&O$Xuih1*kHY*cuDTY&Woy8FW1BjOKt%O<YC*Y;lHXb
z+$iU4uws&g?(l-#PQs0n&skX6C?T2{b3H&~vnAUIz57nYh%zN2{HsAoI4E5bQHhbF
z*2vWY{cF(iq(<n`t97@aa~$fv7%Z`EFu%^5?Ri4R=pf4>x-D@n#QSYBM%-N>93o+)
zs<V9svM{9#T+kDHp<*FeOqyP`I{f`w#WjI6Hhs_zc9K)9HD!{P4gGEl7aJYpb~0Z-
zz4N6!gl~7RQ2F0KROQ9~`qHBB*A3pUd6itD(xQOmuTZl={4K)B>|THi_1(V7$L-lS
zS*rl29I>-Gf5W(gCf;`oW!Af}9x*haOhh%eV0vTbM2F3+9*y&k7O{{}Yr$O|o})i~
z(~L$l9y@#i9>nn2k_n@X;M_>98N<i;0+(>{hkbmWgN3X=e7Yf;d@=dEE&WG6B^Q=z
zEsAJu#w3-YOBpcl8)KT>t9nmOv;IpU?C$%_y)o}e&7YqC+J_Tm`Y;dd>JfJRTb>O6
z^Cwe4trc7#q`Z7W9I~ZD31tSu{%$)M+}r}RS1A;JhDiaVOlRhUUfFY^Wr6O~IsE8E
zi>~|{b?EFdwL2H&-eQ||-QU!N=FS2H;rnnm1|*;AG{Qv$2koYv`I0_fNtk_gFi5gz
zBV@iF5u}6}($e7{5h$NPj+w7(U6UDl`9j)n2?y^YC9is7xKSH)4(9!?UXy*lE)Sb*
z5lh3B%w#XYP~Ryg;tKj2%0bT|ElnpALDQ8zht%>G;sdSAkncp665^aC3%66GE9C_c
z@*UaRV*JbqIJzNND@|-COjrIZYk)1|HF)qk^`NU4a%Zw3ZI}dysk&{|4BL`i$Y6gK
z-V0rFbFufeDBnd_%k$_S$qI8?<>X#bir1`t&M-o&?8*izzJQU_MLs6TV_1rGp#r{N
zyP;m@a!wT$E#sr6L5-Kjg?~RoATZ_(LG{lgXH;&V(TJXrRZBOlQoFlxhK~Ej&j=B8
z{!(${jJl@Gik-2I+~XlQqY<3pH@Op>A(4u`8<K-P-nd8Os#SS)bj`-B1JF0`(Td(9
zsm_sBJ>R%T%U_CYAX=@08XXxj!eWuy>0YQOkyPu-)HXX4qttS^QC4SRQ3L7JDeCg;
zvlm1RJo@E&0GF|B_De%M68X|)H4NY#5DJ;Bkd~gV^qwxm3tV^lNr;lMEKwHA0lw5<
z@s#ySXaLgO3XTlX$&Gs&0{^x}j_WORkbv^biN_p|1auws<5%BJ!J<E0-^CnBp*rLZ
z2dXz@Xp#g-9jF|ve-#>`??3yq>oK5EP*Mu^Q1ApDS@ak+^1JX=zVnTuHkf8s^3qDO
zF@8zi?8LbPR;(*MvddA7LHD(D2q9<jpT);HANAF$BXz-3yoQw+8ELuym}JyhM$6k%
zkTyqjs(wM}voYKQ47J*ebG@)b&laMFdmb>`L6cUGEdfRB4S3Dv?pAvWXrOku$@qY>
zeLyhUB0E$+?8Ph1+EXm=tpxwBDiBPrL_a0htT;G|iRGT0Fpk_>z*bAH!UT?#O9gyv
zRT(+)+vqZEA$!^&CW!051Z{(2x*&i=G@8#pVuuA~Dtih<=WsxCL`~=ME~355q?zc*
zxFLY6Gds9p@RZOI**#!4gCrHvt@=Gm?-B9q!fjF$xr;Nkr?_3`gv!ST69Ekse5<c<
z#J8Ob>7*qPD&)xzYR`g_9r{b>$7cEgON3XrVACyQerjD!*%@QR*K}TmLgRVEzy_Gp
z{r-A<f*LCXQAhVM7b0OC*<IZy8AXL}@Msxb;GEpq*od2OxEcaRQ(s^lC;6jX!2O`M
zX{5^BUnwLWX6efO21afDjl?MaEnX&A<px6;w<m>w(cVs)N9P|rU+uhiBix>!-xfZx
zDJLikZ4FsvVWu=p+&b96robO8PY7G86JO%;{Z|4p#aP&y>Aa%g*xWbt<C1Le7eeEq
z)#RHnq-Oy0dut3ArI}6uv3`CJMAE&4c<H`xoM)y4dFj*=G~Pv&NVLR9IP$F<Te7gU
zO@Xv`L4R-V3`8(vm(+TvN1@dpt$*oV>!Mb2T#UGSyOR*n)Sigh?av2O?%#+5O`0S7
zuwgs=<?T7Qh$KN}4|oiL7%yg@^`8tzxeQ({GfIS?deXa9msGm%9(MJ<|4brfFa-CE
zh(_6`T@Zb4J?uu2Mr>@Oq3OO3*Y-_{fo4E4umw2hb;}~soxC^ialzC;CanSmk$2r6
zEC5%J>+lVz=b2|#_UcoSm7=*BAhp_U`^X!z#u<Y9y|jcxLVcyu%nfi8BfHGQ6OcBb
zc%`9ADNM~phAx*Hk&Pf#@=#I&omJ8{yN9AM7X|Md2TZ5EWENWCry30}3n*x)ZJ7*y
zYRVSsam?XehKG{`uSDTfI(RXXMDflgNlH@_)7PjB?pgJZtTEIn+uFeEov~7?t7AeN
zb=o??({_jg8reb`)08Kyy$F$Bmhyv3q*rPy$&IUbJ(zU(UTnMCvj(#+Y#l<C^qg(F
zN>gbT7f#UKIv%n^jIOpXYqSn<F%4^%{ec=n52WLxaB80=(xG&G!>!EFOZ7CKzYZ!0
z!!(g?2;23s4JWa!KRr&UU-A#fovwgKvGG#`G_pymZ^9MoYl>dKdavp$53=#Yf;Qm}
zKkvL?6a#`#y+jF&ECjXCUvrO42EVcz)XKnWZ6~ZdTFN^3wfO*}f(O*<h^PfHict}y
zPGAdj_sA!lBZt;?XcQdDgKYdtr}&lP{1mv-F>+{4IG>c|>BsUU?_bqHvOSwUA?c6K
z7Wx)*RT#b(c9x6z9+Z3u>4uAapzCX@)%BXy)c(%$5Widi<PkG;b)xpyF9;s}?{XQl
zY116gaD7X8>EM%lBIERL*dG1woL5T%0+YRQHCf8NvRh8XxD{@_o?tKbyFL}i7{y+J
z6VNw#3MD4uUFT3{#xb4Gu|rrqG@nb1R836oH+VwQnCnwN;QQB4_;#3A`s=zlYWLL>
zqg7giSo`!-kY0>UDVg3MM)*)4o<hxPoYBA*?ar`0O=ZkUS1Hsl$M_^pH>YF)W2RHw
zN9Ufu;$NtsxS~EeMvqR(z$6^YSXtR=9M>urWZBr-^ZRJ;_*T|}!)ra)OPrf`Fj~v;
z(Ym$wh`Eam-O?U>;r>Rfb_*C|H-VUU2P9pF&^HddSo7E+d5mH<dP@j8;LuFJvz&Nu
z<T;xNbYU>3oj#J+TnU&xBz8Qt<%Pakys_DUWdmsK<lVOxBq%+AGGnDuK$NBIEdy>q
zgC?g@%ttMTjWbLh+qp~h)kGpAo9Co(6fCLx+9)s*MK<h+&nTqHp*IMEm%tr_zsS`7
z9YouI@f1x~fjK0T>N{5gw+pxw;k@H{Wn6A3p`!L~88xh}R`$eLG@Lz<l-JH!_*<7b
z-?|&%+RhThbl*bPj&}z!^z*H@%lR{HeioX|qfDQSzfQUaz87UO9V7bi$G4*ck`=xl
zZEJOO#*ONsi!<R5Fa$vc@wGcg&9ze#X}g?V_CgjtDx#uazd7w^a2x`tepude{jKKR
zwX+4jvfzD0-FK^6+DYjx^$1%L_u02$B$*}g7zLIOH+X=q<($<;OiOp;8s)b+tZK;6
ze3Y^O6U6lz=Zx{3{edni`NjDrNIb(%HIyKSy#!6Yy0(oXc&hmUtMXTR9&f|NFy(d0
zHY(#x=b`k#vP_P)>941bgkHAipz)Gas|v59zus2!Osu9wrKa*k^HDqu6+l!Ur|K3_
z?m529trT;C%?pP^2D`f7zdPG7?70^*Uphw_7CZY0V~MMoVxd6^B51!|%HPQ7x(e9e
z!9!RL>X3aq<=dj^ui%-xXjAs_raa}OdW;&Ue|gy&BBb7kPzW-Wjt#lWAzYTKA(xYa
zLKD_mXx78Q-6x2L+M#+HRgzs+y+|pQ9O0(zRY}F&AibCBvaqH^TlAK?Oa_LpRof)(
zFdqRZrXDXXYrk|u<{v`WuPxmT%gz48r={NL*!<0I?K`DKI{O9mo8EHt{xkG$Z7^5y
z!`nNG+IiD4!+fx825S|wBQ*lJWz>M2brpyNiIZ*?MDCjQoCIC8Q)4ptvc`QX$z=-z
z=^bU9>auqN3JMFQJX$Ek#NR-#;5;6WXwFJDimu+JpQ}f-y|PN(jLwXDVZ3!NxQ=R3
zEq*<And0;pr9F8rZ{kc%aOLK1MM^1=_i8~NoXR68KiV*~R6H`Erq=~79DDz%&uYxB
z2g$7v@pv=%6eZkxE1t~7Hfw6!y0_NG4%3j)rOqK?zXE)<k>v_@Iz}p;<|MA*ZX>`Q
zy}P`{;z(;C4(kYvx6wGiYve7hD$~i&Vbi9_@;y``1yf!!sttQE88ZimAf_sQKq}_9
zt5!#LIi4pOLkFjkMP2xC1@gEw{K~3m*y-q-N7TCJ3;V|QE%B)1ZHF~Q+j#CqS9s1w
zfH12t?OPokM!Mgjo6}oltMeo|8lPPrG|(W1KOFTUsCKDaQlcK&uqKE2p*ct;h}v}h
zEU`$ZZNeE?L_FhOOAz2-<2^QvHw9xvy^|nzh7!Z}nW_72D}pmM=P*9g%3d|RBn^jB
zus{9DLQSSJlc_L{?|nq1m44CH>bD#+Ejo-lwBY)5M}RgXKCD3TOIokmcw!q45KEmo
zc%m)vz?EOOJeCw5x6F8@omf!f_g<52xO<3%+&bDp#QNLcR54Xrv91Ibs$T@sF4+Y|
zu2j7(6shSOg;pd8t3FH+7=c`?hl1BZ862NYSTj?-Xt^9A43}TOsx|v!gDgSkj14tM
z{#l2VzS^4{9qj9x7?7c}>ahXTqf|_PfTQ;*4EZCUlw&a27}wuy)2!M)MIRXA^XdcN
znyh<svnT9+;c`?_1x}lABItxRVK8XY7Cp<4dsDG<I=f-M^gDgJwnjE!bBGiXL?}PM
z!TSY|DL2`BR|M_iU|z70Y+^B2^_6A8@M3grCb5Mp6-9K1RPOZankR%Hn_Fx-jVTSM
z#aghP6SV30d5b<TMSZ6~HR?OHJI~}@tk#^S!C^&YDhelJm0+bQT4=6%s|$txqG4%`
z6Ac}j<b&1B??RYV-NVBD&cUcI_WHmA>Jtx0k!~A!l`V2W2B=b0Ck(~rM^q&Mngjkt
z#!Ey?4oi@B?ct`jPfMZKNV_S5D!Hj#l>qoF#FkoJSsoCF`uhj$aljyJDt@A}0hU)5
zNQ%3OV%>pk87KLq<i)~e9MmWzv0zkLl0LTGh#2;uB9-*mI~Fz#zOBjm%hLPH)}~H&
z0~c)t8<Ll{^H@V#Is6^8qEU~6ER=(?0QoKsS~Vz|qS0XfwnOCNPQ~3okQq}YHNObg
zR*h^a?_`Zy-0cJ+*w~}YX}iD>5~m_<gF>t`+1yf73|{&!855RR%%ZForj*pwg=QB4
zxrC{o9C=t%4KsQWuIrG9PA{V+Dc)5wQL1Ga7_vG#cO?oHnP?V6@r}ueh*tkuHWdCG
zI#HkN0~1aHx`b?y(xExZaH;f1bjlVefWE+NsiJwFK@x}8i%EjQWqoD{F4_>iHf|Y{
zl!3Yu8j;SnZ5D|=kZOnyjcV6>z!`x^-s$EZux4Z$otK{B?(0q<qNwkio2c(MZdl$4
zVGrwO%hOZJZD)|ILoGb2`)gKTLI-Y`_x<)N@>NvLL6%(4=Oj#jc{uk8jDCCf4=-nz
zvv0^AGkIPcWz}`39Wznc;~SlpH=Wi=Z<)bM$8$i5EiRFi0ig$yz7VTABhS}}w9BNW
zUSpkc)p=!XGUYw$@K;%=v>MF-A=jnb;Y18_Ef4Lg-O2{L>H*vo-P0Rv$2Txs0g#kL
z;3WYFTvuKFTUn{q$~DftdVm`S_2ymGL=N1QEk>q$M0TuEhSCTKVYi4>H1f6RZ(!-$
zi;3XBacW*w5$=Q>-GgDBmPTufOXX?^4q`LzA_rB6n022r)c$SjV($Q?P|NXPgtO}4
zSLvU4u=f4ji^{xxZ}=Vnvt|(;7;pJebiq|xF}iuH<$4&P<tJ6xgTWwWAd7Gt3v=gI
z+xHBaVsLizJi5fA!^YPFyLw9zZh1K(S*X(RCV(QTQ2P<TYT?cc5aabdFhYHEoMuI+
z{Lj*PbO(B=&)KI7OB@Yop!0Vc0b_w9RzLH3=Py_h{!HnQj5&#nbwbN%mhF&!-JQA3
zNM;I@$`o>Lu9j}(G!r_<f;l;d;3DqU6hHrA9l<`3F~u52AKpK(oyeomz}^6O(^z4f
z=&){c#W-CfyCuN)-q7)SzO8lt?b$YvT~1$OS?-)bEx>M`<WJv{*j`-kJBB|b_fqlJ
za_LD?;m(nbUs0{Ikr5uvDQx;|g*AJ6W+PbG-Nm#YH<1W>Mi0KNGpn4%5Uo6|STU0a
zej_K{+FtTbrpv}m3{G-L9;!3YS%VGH1_h$S;ZY12dl_RrsORa+=-%vW*wKowglm0^
z;UlT5^!L6n%f3jd|D0lZoXFu`&!CfS*c@mE>fnry+;6mhr|!tnFCpi(7yZhRGwgtM
zDVis#TGiE6Uhki9;-^V<^XKsCHeQYuiNQ;918Q|m)VPXRQR?Ohn}L&f3LIG)yb68k
zyXN_*u3wWs;5i`?{9X~ch>;hjquq_k6q!Y16xX4SUK>dRG%tvMOK!M)EqrI#(^;Ef
zYSIue_e3>5<SQi<ehLOPP`tM&fw`z+gZ@F%rER$=4IW})1p?#->ApT@yJD4Ml4~1j
zGKvqfCc^R>Ze-zdx33Xqe8({3Z&AbRJ{t>NFJD;KllkzQfdqlHN}5iON4)Twc6jgC
z_zrCMFEO(F6ez?E82J7_uBTSD@++Ig)u*z;z>_%B=(bR!4j~#BHBzO2j0aF!L@Q{_
z52sbmL^4s@6|DiO8yYK1SEbw#cQZu!TpNd#e?jWaf8rv_$#w8;VAxp7B-T&q$M&E7
zSgB|4DthBC*$D}&yLo$6BCk|0vU4v>fEkY@LtM+-`R-o<=+;Zu;40nEjTw8`vf2xw
zpA5*0bnZqr^_37TVmGT<+p#Rku3^uK8o@{Z6fLVVvy()1@8kD1w>&RR71_!`uEbno
zi!4)nbB>w5ybf3}4o2w)=_RYbyLm8GAWSkxF02kt(FpgR?J$=K)Lze8I<a;kC^TBR
zzwHw0qaM;X7wxN6^b&Dd>St_w^)a9bb=0c57uY6?ynXHC#NDPFKF-J)XA%Ejc9EGn
zfTloyt#|SK5hidBf1BAOB{YUH667rytVK?sn%y$mRSW!tNyJE$B~Jt1^^%n|nUSe&
z&~Iu2^v!q*!`UQH3ezBeU)}JLH{TvPaUZ$&El+r!Cj=N|HuYUCKn6|hAq|D}@y3s)
ztIYH5bZfnrL`(*5o+70zBH%KH#wFG`o{)&Emn-4oe`Z<D0w9SpkjnCCo<zr8){PWl
zHcqQ%e`s1dgcAzXuKzL<$|y70(|dWsDA#9+qckL?^jITWX}1N6B;7~uZ558FrtZ!u
zedNh3!2XgwD9O5IbBejrMXpq0s++Aa7fc5iG)}kZOS*67xFW){=sT2PVoueaFn@eN
z)KjC=&x{ONRRrL_#UIKIlPY&thy)!I_8)=`S;UHh*oR38zF!c92%_o4Y_(<kd31FI
z<j&>UwZk6xg=sEI>hHaB+c7bLA~+hxXh%v9W;bhRSxTxeqG#Ej#84Ue-hY%~*8b^v
zb#LJz-IHyF8b4e6RxrO=!hYACbfT+qbCz<WdNX>3)Y<;sGTZ<<LA<=Uv;RrJe75;r
zhvts~a~7)zaoD$(Uv}}Un~mTQ+0qPqqQCRj)Tjm!MKvTy1!JJUsQ>iuTK@H2i)t0o
zS4C>k6T$|CfjkG1u+Z;-Guo1`n<%)qbg<o>+(9n~1lfZ;-VY%~sWSq(=`+iJ`S~E;
zt&XY%EWP|`ZWqr+SX8pSXBw1QULyG7glh<oozXz$kG;#(5Yb2qK9Es#pTnxZy=-oK
zyQl|AAn=2E+dHJG<B^qc@nAE9H!zhrq&ssgZCPyX42I0fK1g}j!X`tKx%few;@%FL
ziTJX)e50|mLb82M*i0T+(<(A3CpYNNhE8e)lVQ+KoJp0$5|ftPMdfWBC6#6kbBv^c
zzV!>TtXHi%{PR{NPLY??(1@a-S)KM!n1!sfeTg-zD9zGVcwRcUj6NF1TT|WW*4&xa
ztlwnV4-c_XwNclNogSR9K{dU&NP{#$@NBooXwlwI$6B-@y=yS`bjD6=%8kT?5Sd)7
zIzl?}o+Q!YC?ehb92S9fM}QxAsWIg0Ut`~%$Efy2^ji<Z>RU{HsVnyy9Pt=%g=cAC
z_Jr2x2$YRf89x`&cF3Jt%3x>;NJVtBg_Z?oLVq|Tz60e*BNcF6TTM;h)YP5C!gb~9
zmn@-|8kv!FZ|L}^h7jSUtEUMrS>KlgQ+}V800D`3yGu#QxgQc1xqkrKV<Y4iMZ0XD
zrE;%i7wn;gi}LmpHD5YfK}L5S6=XWuh2W+O_RbNsc$cFfWsjs-^kTn>Pj<1va@Z=$
z`BP+<iZ-IDt+K>Jo<_3hx*56n6dP`h#bC|C$wfBEld!rSmhvOW`5IYG+@yV!x7(WZ
zkd0hXdH#PqRbpV9ETuC^U@4^e$@f0KH~~Q`ySq%!pIP<hRC+>v&d?KbiUyWHPcBYy
zfJS`JxMNNqWC&0sEC?8Gv?yHPNXn|P*eTODRZHr1fy7v2FRqo)u#r{`tm!k(tj&z;
zG4_Ksm~LwrD!MOZ;Z>#{)D3&UC`!3f*|N7W)|WU0V?AxgdhdFy&vy<eY}@`w-DNrO
z{jvVGCt2>6D&ZXIS$HBs=b>ib$GfMO6h~MMBhOW1%~B#q#;+v)Q{M}qqG%s_KR-6g
z;28zNK4Qqw&)->d@_Xb*c3s3!Uk!cd_l?FMibGmW31n4TW=vpR*1#j(&l2IEIZM=+
z!t#7U)hH5Z)HK`*xr)0YS%oB?-hr|JIdf+!bgJ$mG6#l3f>k;3msq><?*TlcB`XV<
zM*WL?O_K~ErNtBm3G~-7?FQd!1S1<Edc;rBR+d1MHL`<NR!^T{Kh~CVRdG=#x)MUG
zMmYCjrS8EbJoFZhI-~4^uwe+{Mzy4)P>w|xUTC9{r*K)>u0s!x!Yy*D-0+NlEj|L2
zrKuO4&P;D+FV%|R6Z38aw<__u9?a|}Bz2(TyO11C4N*t9jfgmDWP_J<1>WV#(q9Ln
z^5<*Ka4k@P0RoFk0mQ2N3rKHOD0L(sy^&2FFr7L;OhMe;lFHa6k?pZkYDP?JVT_th
z%-)NnwVXa^U7F{!YskN>YF=8QWBz*ft+%lia&Lp_zX}#srDJg`yPCv+>F*`9T^-qG
z@K31}nuIpgi&;1^Db$y)yZcwx#S*53_6ktDbE#16SEvs}f6$t+EJGH6vB+(_pAcj?
zW7;<-V<BSD0n~bR(u64^y`j?_a<Xr--sx`2H=jY=b)X(raZb@XENAl~X;h1{BDB&N
z+nF=Pweh#9KevQqMp*3@7(OL*a|enS^b^nMtXlFwTNha#GJ*<?8ujyrXhT<oL12gS
z#f#lvALD~$#)}AI1M0#3FxWslC$LmCm%)^CVGLF$D8bsMBAmCaGNc#k3Hj@c)Py`J
za+%t*@L?^fFD~GZshysYbB(IuHn2g_;`3>W?G=XOR9MO)W|3Q+>V{XW9JS1(NI26p
z|F6D<4>Yv1M>k3Zyr=|W`q~_BC+MqopesE&B{a96KgRfg8DRdyWxN@Hvn|*f2RE@L
z)W=}<T*IbVJ7vhWg}(#y`Ha84OGaWW2bIIt-dv>tWIjpI*%MYy&65Kss!3@#^K(%M
z@n`m#xWf`^Af#?cYRbLmh~-p1#?Uu>zFR$1R-~M5C;#0Z(g9aDT>*O+fwXizJ-UXS
z-8?#6T9PiSSVN4nc6l6B9l9UFSLS=1=)X>u{h7;<kO}>nwD&J2U24_Sf!df}kLJV_
zPlO<^b=Be0qwr|uIt)0>ovXK^r`#5g(a<3huWTPE>r@&$VS=NL>7!l?M!_Wd27PaM
zOKsI%1`N_vEHg97g%O-YqpM?4IVSm#xQb7==3NFXfNA^QI5mlfrHwNBfl;dZeQ`rc
znc^bsFSvIpdE8N*Qb)h6k)p~Zvv@@%%0wOMv|7k;>Fuf8y_JX+@b~z)dx3#hkxD;j
zeIG6X%B11k4=k8Xvns0h>QBpC)?O0zkmZZijn;u`8JNC-H5YuSBOIAw2U_hJ5Y(^0
zk81lycgH48jNct%!*`KS`o4NxaV-VI0v^AaAq7JkB0ah`RZpFq^h!NXs@e<YGKS@h
z_$XU51d^>yc;sr}s1X?5D5M>{Poe}2vGs&_T2@E&mtGF!V%&;Srg}t<6eKw6sc>d!
zRm^`?SyQnkC!_hpBvf&5i3cy_;Oa+d5@~dc@@5#>`niPuTetz#h>pJG-oR&lNC(P(
zhUKnIk2x!=Pk)rfdOgmve9#~MCv3ho@HJmfv2}`tI&IVksX7iypJGYgT;w1(tt2hG
z7l@JuxyT1F**c5>?s&fLkk`b9=tKeAsOQavi<<Pgcb9p_CB*IS^Wv31UoXMy?IPFn
z^g^zzs#hjmCJIB-@^<@og1WI6@r#=46$BJi-Pu<+T}t-ktHAZA&Yi<Gu?$eLH!9Kh
z{%Hn@3jgh`(k_WDLvK~&c2cfceU5iaO@=DUWuwJ!>&AquPSfNmp!V6s|JPc3O=S@X
z6f3T;GY1<I7to#WorQ-4%E<z&^eUS#@n#O_+{g9I4LwevXFQc{z>eI)8}1yCTWGI|
zH({k-eK<f-Ob|$rVh0z_(d-KVe)7<0RE*A$rI?GuI}waeU6SHbdue@0PQ1bjsEWZA
zOBfRuqNadGdALk@rNzN(gIQBb<scTkwkh?50@I<L+(o#HYC}UXq}>v#lREsp$~YKc
zTJ<qt8Z0Lnk-rP!8YVXHVsqSyewnU8j#xXG_n|oHxe`Japzw`$wsvPXpaAf<3}Rf%
zX(Q*SQ}Wat2ETEV`bqM~9iptVk;I8^Li`xta~+){mHXzfW-?mOF9&;pOY%QTEh^~5
zJ<zU8n|O4HEau6gHV*(E>Lr!7jh)igw4Be?6(ZNoOjfLk*F!3hyLF$_7{#rzkj=R-
zy6n$&j>^-wE!YtMir!GrQpX5WwBVuZCZ;1_Xon|-4TJ?On4_l&)h+?RnIUkb+uhU1
zgLf;1C#mJ|)F%XYAWf1q1FWsXX9zj{Ft(<sIG>T)El(ElJb7JBJvxOnX=HY0`;hJa
z@gi$v<$Q05sDj+*GrSXGkaqa%xhOyQ@%WtN7i)QsM~j-HzL7)%UNX1Ns|H32xmfEf
zQQ`UNKH>2x+%4_lXfcA$#tKsxr#FX!;}R@*e7)XGaVQ};g3`t6aq0$4lD?mu6Y4AL
zPzy;9Q+X;_Nw@Ajq2a1ZkWNGib<;$e$HjY1rKqX0!7h)&+J*(`YyIyCFSv1(qEI2g
z@#h{F6etr9PAMuVQw1VTSu)_UrFzBbqz(RErtd@Qh#(-B4H%E$i$cKBB$}&XgnylO
zLm^097b(>t@L<wx$RlNKUa~n#qc(qts@A@A9-;(0ECj9XnRP7<`r1_uf^@7MW>*U(
zU@1_-zT?|aj?#MxBgl=dluKenHH2y3doe9ZU)%uP<OL=aZ_?PJgGUigJhLt~(A{Gg
zq22O?JLZXJYLmh}P;*g$t49csp6xk{TOi<t6WZi6sZB)eM12imaP>y`+tj4;HPW1#
z2V0=825XpHkSgk&kST2*rIX#VTEX0XnNA>PZK1T3?_M(ujBQ~qs3K}+y`-dGBO?P(
zd?fJYnXV0v<HkyvR`-Q3i(Pc74CcZUpmla+Sh|et=Shfi#!E(gbjOhLmPXO+Vnd5}
zDo1-Hd@}>!g7_;o1+9Fkw;nTkP#W7A#stDZl_(tBjfo%^GIk2x+bZKP0M^av1B7Gs
zY41lcjV9zG?-mHV(mW5^xm5`QnXE-sX13lfs{ypIh9K$m0j_(bGe!F4!Svb4?qtMP
z^F754Jw>@J@hi~=dLZ?uVxTNB@+RbedT{1z(OG8Np=lTWJE%MC>|2cBL2=E2hQCly
zVnwzJ9JpD8aU-Am7BR};t4=zDF_`!aVn$?3+_pi+KV@(LuFK5cqkqYWkPb95ntCOI
z?J>lQXdhU6x12K2TN7nWjUg!lN7+stkjzSpmX8O+p_;lt>2h75Xdd`z4+YKP>j@>W
zW6_Y}=CKsR{|OG84qAGTVkIS%IZ6mMWU)ouw;2)U{MOXd(T#{sWI!5yW)0P$C6QIe
zP0X<{V`_3Nfbaq^2W*8FNN+-<P}ajPL)23z-v})Re;K32du?hkn4CEVrjL3?&%vXA
z3*ULNdi~0m(9>v5MyBfKTJi(wkTwWmS124<*yAjlPE-<NJk4SbE6oLqq$(k*(w)T*
z%TrY-P4!NcH6wa^-p4Co%=SESE(IDp0%3(#n7<IuSmZngzsrD1%X+;HRFfdk3kZb1
zOp~Luf$`at1>LtEyatwh$b7u*$eEY}_xh`$k!L(&dnA24_OH(Z;^JBSy5z4b{+hwB
z$2kB(Ad09>K!=GvN+-|+O^yLtLj`6tQ;TdlyW=e>la|h$Al24B3A4N>xUq^=`XpT2
zGuFUlNc3Nj<*AiXVyIH2>!ONm7U?)zUUPhErpbm18=*EFlBRPQaFhCjC%2{}Rx@l}
zuH|=|e!AI<bS79tYJc@G{^Vq_a)#9P74V~nFvdwGGOT}4ty%&d>U;8hFe(|{mZ}Pl
zUaf2>Q@QE`4(t%E>l}cDAqMsM7+C~|(4M!%@Temi*362X;8KgN95a^mK6<q8ksldx
zAxl3pr7oekhg-?hl}Vn`!)Tv`>#xbfwo?Ow9i1I23JXdpJX*h}w$aMdu7$GlcBcS4
zdXO}%OHzRCC6Uk77O=4(8kI*6#?c9gWhxV8rqNxYh)?K{M&T6g5r1%xA3{fOo4&aK
zju9ppP=wknfGay83+UK>2J7tx^;B|4FQ6&TWZV$gyUVh=oDg1JZO+nU|4rv3RRpv1
zH>Kj?(7CGbG>hg2i)H~YYR(V^>N!oR6Mn4CgtEPDaqFpDu7~$qOKb$G@|<E`dDN6`
z>H_&Xc~kDe4&D94ItT+L?X@jtg=phN`rxFd8M=Zg)?Z!7MFnwA#==5}*PCMq)~C>B
zDb>W+j}WV!&h~$1JGn&6k}1+8RP~k(rH;y2Nfh(zJPMU+%MMtQ&bhc51d42{w*a3a
zEgM%%F7_H;Zp-X17QH{;pon;X+`^Un(ivx57{l3&OJ?9;9vqJmMvf4cnv!ukx9K@B
z?t2I)hi+<?u6kw~kR%i506(FwE5<ZxR+pP@u|AB|CTSE3zfCktU|X6{LC>!fnl?iD
zd3(%qm&sHdl@WDjT5IgkbuEV#)-(AI3;Cx&qGz-mY4g-)Uy`PoegWhCg_kk&N5q|u
z?8;Na{%0|a)ySQUX{!5wA{B;RodJIlsDaaw4#i2To|wrdFN@Pl5+58~iI4EDO$)RM
zEP-gDx~TMB#AR_&_#!@vKkpva3!-17Ox}IbISNcD-)$M%+dSX=%H(zMDA`Zo>dKy3
zxtJ6{3Oq%D7b@=wz=s<}HiKTzensD~h56)dkUf|<;W*ubIIaz4K6;hj5Yey3NdBr<
zd|QHL(I}7c?Hq{Y<_O(3&8mnrqCcfUH|K;?@H>yWl-0HGkS75P0e9E}8ScVIn4uCu
zGo$PE0uPZ>W`)YCP9{SnXHjO7&W$&$szAvSwiVg$V#AtjSq-e9k)ge@OL{lITbmJ=
z3I<#tNmrdyVx?wvH2UQg^EQQP%V_taX4X4@<V!gnVpr-Ve!y4)RS)1S560BYjvtlp
za@##mLyuUdlo@VdWl&#>_=);!EfM~*NSo3#Z{`of;ga6?E*yp-NS?frt=usTvl5hW
z6l`lR%fhOX6fL=zi0!ms5^*@Ahw)~5%l9sJNNac{<i|u_sUb%I;^qe9R9^7RZjI5>
zt(}xT2V}Epdv5D&69Nj^@Xh;cep*VFmNwYgzgEa7d<zS^s3h>si$>J>ZLcoOIT~#n
zSRveu>3g@<snBNAL|%5(T&txYiL!EOoYYLrw?2BL-6C`Coxh0jA_0Mwn!+3EFk@@N
zKqK44f!KufTq=xqHgq1FOE}!ERZ46$-ws%(oXC*hP(C9AZXPtDnMEy7E0+O+9Y$T6
z3aCF>hsy=CK_AG=lvx;q^?0GmHPB!&k_FpJqNOc83aFFVnmocr(U{^o&}c(DS%+-p
z+K#C7p88Zm)k2vUT-FjltV!>&@fzt^P4E{64UpXBRtCgtb1YAwW=<Z|H60^LHGBej
zh~5T{(!T0xEJ=~Pnsy^Pa`#x@s1fxhC@6{ew8iq3a`KNnkiQjz(R(M3t}I7aihkWl
zXJq`bos(!$4Z5R<SC>R<MIKsP6kuCvtob%iQ2c7Fz9hS(bJn_x9moh!R`0%Ci)x3J
zmd>w@N!|-IOden-s4MkC-1^}1(*w+fC}^T`&{O)0N64_`O6#@$(?>|)5q@k=awhBJ
zMD4dmFr=yhdRcHS{6*`wj9*=Db+DU{w2typNxPcETGdFiRktp$hig-YYm)=Dfg#$&
zf}lU`KlDZOPC-UPXZ8qlAQU4xUT(j^ZPpFLmGw#1$n?6#Rch~$_G%{uk-!*osu&6P
z6cCy12reOii7EGmJPD;IDdukn0$y~}4*9tCSe0axR2d2^Sbf2I>dnZQFkzj^6#d<u
z7+u)aPw7xy<>nwlr7B7IUPerC2vkWCHj!7r-;TDCWdB|k_@ur$@odheupkg2!MW26
zWJv5R`{4Fr(OXotD6Y2cby)nsb?G>EV{w=vRM=1k*#jX+*~U}B2R5B9dYNvZQ;gd~
zo4{)4%TCZtL;*yrAl}v$L&f?9i{1*eaD296@N98u&b6fVAH$sQ@_2i?9WmYrdR+WJ
z<L#e}w<T3m4@nh0sc0Jo%l|zFoN4AsHotaS#vPagT<fZ-!Le+L8Fwo%983an&OeN|
zZEPE)DKNP*1zfJG4I`q~TvtN7pbbGMd}tH^jM=M*!9^1wsq+3d|Csm0;-A}y6B#2z
zUo&Ld{2`dWBRIgM<rz!*q{3|b!tO}O<~6Yo_km2*XE?;?3H$pP*VE;XV|-!fS#$9l
zh{R={pW~q*RB$0~20ES%Lc_qQ3lND_&$0A1`!2jk<SJthd_4?&Qg3A!QD9rIhI&(F
zvZEzY`;{d>bOP$V&nAS-TVjHKB5F1ano-kz)kGNHBa-__B<~KISA!MHEfNwT4fs2R
z`sav}e+R%ELYISDhwdoe8B2o0f!`{EFt^DY@>{}@{Y&F>RxoZ_7#HEP{vxMBdZt!B
zMS2@i8g>^>*f_xE98wHr+#fn{m=h1^xtwKlviPi<7r0*+Q-mP-54ifRB!$TeM{?~o
zr9lC{PQO$Vl*=9O(tmXoeN%H4AwJUjvXmNUWUOqWAN7(mw>3kA5()?PeUiDC@O?E7
z&<`5tzz>j&JaSWeXGcTIjk=PWHh%J<oG6qk8s)w;0=15qKT{iHx@Gi}{D}u@s<dKd
zg}&z7C`S>z%*4JSyi3K_(~~TQ_BxI6v!h&n-z+!KA^|dB6(3_HHWKLV#?AG^jnDTj
zB;<!N(ks&wOdPK=I#Mz08fHBibxKyw>hK&OHq`UWtwnyiWOdph72nen#KcH|p0I_|
z8R@V^?uRWV6)|{|Wjokp#M{oX;#vpv+#y{@@{@I?eB^V1bi&>A{6nisU=Ws2o|{IL
zX*;;Fmt^WtL#hSb<sws+r<8fbV3%Ra4d=M}<^4I4MD6?okmpat2T|Cd>5w|wu`QNN
zL1!~~!LbE<2rj+0VQY6UMEHoal}0hXXct=_9Igy_3pp$DRan4lQf=U0Qhx$OSG+Yr
z17j`6xPHnZGI;zjIT``7;PfVrdB!oVJ&rkiK=yfpemG{C-pMk5h8EQGUm^`xz_PIC
zQHQL!f-@e~%701GVQhd~MWIZp>~MqhT@>j%$762snEoLGmBi9+I7y-%(pcljjh^kk
z{gn6spmAcyu1YvJYzi%S=iByJnzKC8T$MyZGK6Y6X5mfLh@~O8zmX4&y^1D6Y2!X&
z)e@S9aYqy9;i^P*dir6w4}ri(62ELJB3+0EtT+p&UnT__9y@XpsPwK}QZZLxxFk0h
z(b?V*f2VdC9)#8xROK2<OkuUN!c>LD)bpZYpiMGF^u0`4maZDIp6a^vQ|6<9F(=5k
zsiPfKLZQN|I;}+_<K7X|sLpgJwOK!|!^-1&2;}#7(ZbF2X3_+(c+p0d7F%1?+0#rL
z`nJYHhB-wm2*T+iF^$dYX#-*|nj!w4L5#Nuz&#y7$KOI_Xe3>l#rif<*fb?t^t7g2
z+%<BHxiD`mwf0$iDJeV)O7Zo#SkdWbtb+2?wze2?gX}v6`x;uIUdqg?_vT@b(8Fn;
zU{63dw8?iQ=_2pzuR2+37+N?z3y@y#Ha4-LA?>H59eg3u=~n<ntREhc0fm$+`hwza
zSX04@cc|ZdJ?fYS%SpU0C+~V==O6K0Ins^*FVY!h2=4a(CL~T;YymaT9A!>47F1LO
zcrxKEM%cPFo2qNwr?6UDsz{2M2k4<APH%0dGL^h_USJ}AkK{z7`2ii3p*+TMXDHJS
z+=24!xy*yWXH|wO5{;lgb?nVPBf8bTkV$kciWpa+Y#k_<%};l$<`M(<%Hnp<B17*F
z$i1!m)QWcLYgp*~Q|BHcow%F+7dp{B*icUaNVaP5M89+cqPl#|?jh0}nl>0D->c1a
zNqm?|dNr!cQp{ZEE0e~ot{S6-IkwVq?V#h@x|A0Q-@j_162rx{e7`p+?bn*$9SU>3
z8DW{Ntqv||@;s!IA!9FCZW&sthy`|ek}?J|VXlI3y1vYsl;#_(f8Du!Zb+Q+0a@g>
zCzKrTviWw4=~yk#9?AdC>I9y2WiAK=byXI`xjo9n&N>>#e*vI*(7JtCLkPzbnmm6Y
z(&P`5OspzsibB2i61S5vQme7nsH1nXg#N)dXVYZYOn|WKwV;J=UF(t};kQwzcP;O8
z#yUz}eJJb}`Vu>PVM;QOWOA)(k9Wmy*GC~yAAmb~W4;C5@E){ojYG)>*k}`FjBl@3
z$g^%%3M&J(Jiy9dpVHNy&23;L(>?Uwkwkopts7(4-J2g)S3hVqGLfX+Y~#ANL&@a%
zuX6wpiJ|HBpS`am9s^|ljZ~Q^$kuo7G6Ic+z^Cru*5Mr{J&%;3))4fHdN)VP=G7E0
zP<`-AO%<=tpL|Bo&kf{IsWA)=)xdb&s)OwBVYB81v=+-y_<inGu6%ipUU^)`!R4IT
z*fT^>H6T!ORUcu6W2XZCjxrg25}-mBRW5Bw^XuURe2j$QjA&Kr#_FT<FknW(WzHm=
zeYlWx{wyQN|ID#-6#8LQ1Xy2kY~38o%&vO6qT$aEB2CnEi{@t7b1$(rwI&ysF}C?0
z)cNV)l3L)+<~0qM|7sL{UX3B(lb$7-Rlj`3?;%lNf5|i7L(Mq-8M!DhNUo)2Df%%^
z`EK?Q(^fd9!SNdCUD5sBV|(c5i--)2i>yZ;+7VIe;@&Z{Qil^ZA?M}F&CoAjjiqwq
z9VPU{(sz?%$pbZu6c8V0!lU(gDH58p^&-<=EMMP!$hu?Xi`t8n)U>>pShbIfms39x
z-_3cO1;Z@Ck763%y4S%q%ysNB=m&o73y5?b3VILnKF76S3F%5hQ~(_<3s8!0VKS5l
zC-82Lx(||E$}&{vCJ#Ex=2C267hEyf&l_XYj3Zr($~|=t^29D(8+pru#>?P=yOR<e
z=xLEDd}v4(?Io;<&J;#-dm=@s{*zERp+C!$h}M5l--z*t>t~pyXbKkzo~AFQ4xMnr
z^u+oUd^;t&Ww~+R(og|?gt`Mj+U=t7Z@IoXIkn?6G))Dj_|*J>xf{$T9Yz!~MsoXY
zv0-xiY<o!0*R)=De(%Ii<wX1>Eer2c;03e1Aiem`NA!ACtpG7Py3yAZJOF1FV)l*A
zg4PL?+q=ogYUtm6=a?_d`_(5zu9F~0tw<{6^G0@oo>@Kk6j=vq!aL_r-C=NmJJ5<K
zNdnX$t=B$nK!wEhqIo#j9L6=BIMw6Qcb17M@04$B_`acB3*h%=@9Y@63dYTZ2>o-K
zNPUUBku1!&g|LDY<r(~i^n~Deb^ZiLxFLHKbf1<_uqj%`$E{9bOrn(jfRt}TVu3?j
z1AM=%LoYgqyJ@^}uo&&Z;?dQx#gJBsIMD7KnZWMm6iCGSzMpY(AOf^RQF&)`#JN&8
zyAiwgF~3CC?ub=|0+pLWu%P-j2yZ2qoFRL(uSn^VJKWRtlm1g*V=_d9muV6tW>q8q
zR3R3sX3iM^SagSaItwwXSE*24*@ZhH9IW8aM$Drx%dCDc`tRzDFmb7aih{Om3b{S_
zm7V6TC#w?MCzS|YRxVd{1<wBBgr%~TU#1?ANf%aKX3XI2>Nkme;^i*}@8s9P>+d2E
zN;@1wi?B<8&qQ^wG;-CQW^Cs4^spNv+0#RASbgL!hSgo{MHv%w#$xi=GciO9_@KM`
zY-{K6U|Xhs{T~idcqcurS0kyz(klWm8C%9gyGL)6ddJk?0GX+gS3byAQG13=@R@>G
ztV)Pn!83A?RaV!J?bX;0Mt)7li_VBklP!E9L~JT+lk;5u3=SJ0J5U%>zh<v>S7Io%
z*7&r+r=?-G^%wRccum*X^1Hpreue^z+IVC~C#Y84lWbpB1i6$T;@*~a?(9Hvcr*Ux
zp-1jkR;}(cYnbuc%eY5(i*d9<*TA~zfxfXXy|A)*sC1L;)>CA@dO*je?87*`R@FRn
z;}Wpo&+N6Gu~A|B8oN8m_}hyNSmE8U=4Sq(A6^DVk0#5kvsGfnYl?gOk0ZoeRVKv<
zHNzSo{Qj~7YL4oODU{Sj>e4PwB$+q0kxlUz`UDQ^=Cf{CV?3TCrFlGaKxtk~$YZ0(
z&B-ID)}+xHTrh2ya6hYp@6B}cZKZ>Hy1BeH5Qr9895YuT#hd<Rf%A=0fKI3OCL8mq
zX`7DibdjL-OpzjE?4T0{7*@W8%3yDjzEPha|F}QgtctJ<v<1G19CPs$GyY*)Lh!^z
z<Y`a3&TBJoW<SI3@4#Nn!x&23N2*B9o9pFOzmnnyE!--?nwnPLEm2G90z0&yzOW=I
z>Rr_@f#1}SGG?i89Ykf*ka|842XhMauhk>df{^qX07tQl`EJN-v`(KlTs7Jzou-7q
zDq(I}?%tjN3j<|WfUds~GX##pe5JW#{!<O{SF}k57v6!Ryg?6;e&U(0E?q>~j@lE8
zv%{X%Sd;u|Q-XHc8gz8+EC>Nzz(g9<ooy^GjwFDb#izW;==ZvXQsLzaoxgg(NXK-+
z3n=o#tbgOdZ?!n=ftW|jowh3+(6!mok%*2LzLE^E2<D~GycWD=(*lV*-b#x<=(qCU
zYn^X!uDs0A3EotoGxM>Hyb#^G%lBd6?}GpIwdL^FT=n|>tth(JFn7;lv1kdn061|b
z(e!dYpreXJNIH-uG>VsF(ODZxz%*?y3g3Qh>cw3yHxkNh1xm(6<@?HmG!N-kn5|(b
zP9k+$NZ>IFZB7dZ>L<yM&k`hlSgjp{>(ntZ^EfqYn{@&zoyG-5aBE6tmC{0VMSyVb
zsR)N=8UBwI_~e?n$=TXhD_w)nD++T0)bicu<BC*w05G)5S~|^t!Z~PKg7q$sv}t(`
zU;me7Z{?Iu&W}F3BxsjTxZHN;aGBm0^hCZp@`woxxa4*s4ps(ufcwSSh>D30(Zhz0
z4E?Mz<wz$>2kgB~ZESw?yVSy7;k%;)|4ed{c$(YZK8Xs38;3Ck{|&X_%2XrFrr#qA
zXE*JDd}y$X$o34h6_tDcwxexr9U_w~kmD8+Hx<0klPR|Vf$iTf*G4`B3bX`vc&sbt
zf<glb%k#-jBX1|v=aMyfBEgNvV&&Mn@I^sTZ+ibPu2=<{R+8>n9As{sD$6_5i0bS5
z5r~~4Hy?z{YY9xgj6b#qLhdNc+}R&ob>8&vJd_lI7}aA#ys7aVFZB*=J3E+}1|2kv
z{OV>gRAz9hyQ|vouC}P|qK@_3_}!wkrn8$#N~0hBtnW+F`?dxSiKNox0gPK1${pNn
zuo66%0heS^08t$lh`E!$>J4^siEDN_55l^0o`gpw1bGj9okMgkTC}WV+qP}ne{9>f
zZQDDxZF48tv2EM-J)QT)xSiXW{c6nBSfgfrb^Z@$@3!%dE45pv66%u7$3p&Dph!B{
zsqz)j+WG4)>UZNhmFPc1)fy>?9y?g={`vS}kb{KH+tGvIuMs?<dXIJort%>j+g~D3
zYAlRz-kv?=tv=Og&(IU3TDyyTD25irTKRTJ|K@p*xyQM`o2#ZVt!afGeIs>hwCGWQ
z>>#H;pZu*H9`@bDUuUSgEQ48)KtF7J?C@WsUOenu6tlgNvSTTaLpU`S+QPq{z^y%~
zcDz_%nhRNZ7_yT*!Ih_P1G>7g9Fr8)uh4ls%7T9*oI{9MjLUW)QJ^3k!Kg5=YisN}
z&CQ?%wN=%`<f+a>OR({MbJapQMt}WI{-MoQAPHvu(dupGqO618(#hmK7<S~w*5jWt
zWkBtTaK?N^;gdCvH9gs{@<QKgD2pMFTf8Nvt@KSu7<304O?n!VIKky&0t<G%5r9ll
zaMrSJ0e|)nT2>w@<q+}}gqYjK>z@gk_ccK*S+Dllm(C7}s`oPwaVK9W1|~Wy)x0mu
zcxsxc!&>4h49+zZ=}i&?yD@*EN)Vv>Cwmv(70;NZT^C8xj1cBYR3|ppZjlpL34}r6
zWnk*XBSoa5qBGhFdY(69GnKh5juWTN$+x@*rdHvPKwh8g)4#dhv~kyp`r5`#+MD?w
zbY+nFB<*FDvIUO(uXWIuu`k8;&+)h+-SUi>dJnt$c{e!0O!fmScySNC<>0OPKX^}*
zIilTKq&VxF4DaVxeL2=Bhs`1UK<Y)1j$(SHkQA0?&f*|5=>vp(*d&-bM>b4X_7qwx
znR3nkV7(iB54!hn>0kO2jL5k`QP)~0g_lTBe|QZCJ2XZqNXzh<tZ~7;Xh^o`;M{Nl
zF7*$IV6KWLG&RB;<lxrw&)XQi^%;@&G8KC<P(Uo4wwrO4qdI*Ge5YRZwc_L!K0W@Q
zFbi!kNNA&qmRzx!j>k`o`ogOTZQi<26>aWRt-s#!U<XFC=!jHO3^{5I*yqdKO`jZW
ze_)_$k>)0Ij1@RBHDd0DW23fx!Gk*E(Z2q$2-q*#e8oZjiaAJSY_O3nW;yp=Uy~SB
z{n2z$R_SWP{F86n<zEoe30N<bz^P`!3D=b5<9zmqaBlW7v?{o2?<-dCn3Dkv$gC?+
z<B>n9^f9+fhRqoUfo@0=IMPT%6U|>p+BVtM!fk;m@i8ksF7@AtC^3?p==A0GHyFY1
z1;I5eQ4j?PSQ>vFg*Y}kY|JnV!4Qq!OjBX`q^DQni*$=~S6I{E!vE#5%<wK}u^l^l
zArn8VySgo;e?6ZYL+F9QSd*Y?@<e;oKDO(^S?;K2Rv<-g;Svu~Q2FnGpX$FL7z1a#
znx+X&Tux#o7Dn4RZC2!%5q{KciUgkLs5jdObTr^QCAM9>AiIbojVwK%#^oH`XSiwY
zGJF)SNgMAiP}claSJ(-)f(Iv77{?}4K7Zo!ACTEUh0aW~$)X(htX9DiF0oLbBipL}
z&Vh1rkF?~5{E85l_m6e_a5rTh$BGaO8VAa)3Uc+x-y9CXMW>m0r=5AHnT~lkx0tDl
ze!%ALs#^18F4N`rK1LM}>&OcJvB}1yju-O9!>zmvxN*INZ<fxrShQz6o>Z)s-!5+s
zQZ-5*uSS-S05+OqR(1>S!>O85`d*s!zwPQogfFo89|W<YLjiYF1h!{UIxMA!KA-!f
z`PHYfFoL7_)=>g|nY`jk(Ptr6lIVB20yF(SGXF+0Gk)Pub-K2$Fbk>llBRPngSa+c
zQ47luMSnlPXg~YR+2&NPH$ba!T&P!OGk5+0v2EA8E@%FtvcygD`ClQ@SdIRa?Rxb#
zlP?rE8_m&M*!5^Bvh>Z}4Zu+tJwEZY)<*2lbeu2#n#?!<k699n8XkXPYZdgOMf8(B
z$@a>+F(+>wxV0<v5xZVPT3#YqjUB=Bly*$ioifC&hOnYDBStIJFlup5iC1}=j8v_f
zg(&Gh(Y@@VVG?GIaj|r*R=os-svNF-I%8gT*)(jGxsVCPzr9OI|KXJ?hkXMF2E?DX
zdNKR%ba?+Dx2u0b`hVV#2B_JG!}^Xcs#7vH8Twb;C4SmJ7BuB9Cw+HUgEQ5BFM||8
zZ-ok0B#m38X5ob`?6{v>Ie~jZ%<UEyGxEjU-M-l$PdtNquOSZltZMXH!4~;G#KFbn
ztNHA#;8NWG#Pl(+KQBlvKw>F5QEelabceSME%o>H3DN~m-ZmV2Z}NGS@5ysMxv>w*
z>p{vDw!b=ecFj;Y=ME>VR_cs1E~Qt+jPbQLjf$4M&Zrt^pV;F#GqhSi1G##4YnJJb
z{g_~w(s#Fr78-IcU1q0~;+R*P7OZOY8&EdR{L6MU(6Fd^l)S~@%LN;;Su3aom2md!
zcNft=VJGjMr`8qc$fdgT2Bz&%tAZ_<$3Ip4QcBbm>DD!z#$njqG8L{WK^Z9GOgKxH
zx#Ic{C{-#7#qQW}iNfh}4Of?Y%B?<k7gS*+ktfE5s24!F?j~O7C=&Bi#mLbA9OgiE
zGZXNt*dt^@x(+o>1NlK{M>-Rc9C~J7Vjnk2UVrx;Pd0#Ul~e0YlN{*H2h1R!LGOi8
zFi<omGtgVcD7HM!M5;6NXpZbt8+VNM*SMQS;#U_Ip@Vhr$R!tvQZTN9pCBs#)#q`U
zY4CjHm0G1mR8Fuq1wBXkE%+|&Hl2@<Rth~E5T;lDDVFR9fEt9bB!G95lBeDJ)El#F
zN~h%C1ZI48@h9qC-iV*0xd`mh+pFVcjh-!t_UBk#xwbS8{ao=x*ePn?pD)jk$51mo
zFPr>hu-t-TzQRnnm9ef1?ro4j`!_ZVnzJUn%AN<wAoOI*ndsQxTHCNg1~GPeomusC
zJL5l(<7f~tgbSn1lo))Kqu-wq`Hs&6e(a(G+4VsY$IexoBei40SVkw{YHs)Ndj=9e
ziU*eux*nZ4@j6}qb};~abHe|wTBX7@nV4|h5lU`d;FqGFKgi*KK3dfvajVIUSk|M<
zs$|BgXy_>Azm_i`QVQYBJuFGT4mE`;-L8-b1@vxdv&6m>e;{sFiN%~vY^W$^7M;pr
zQ&-M5l!xo(_*|xez5NSV%V<4}$OGhKBeAqBK&zj?hqBvd1MkquB#&PM1>0zM>J8;C
zNmSfIg3PR~+vFvkVvhx}nVO#ZpiqUfuFI($6~Of5K%TX|<&hIRUMJZLgFb!#Nv@h)
z|CbeaClT&u6)RGKY%2fkgueu<W2rj<-3!`+^r}D=mOXRy{AxC0FtKteI1xrKAOj!d
z;mpAzSNp@aw*VGZ_j|LX?IK89xK@V-v0t6F{d--5rQXjd+~scl7{sPNUDbC&yMSKQ
z?UM@L#wa#vM;D^E^l{cxqb-t;n4(fHFcbnTgD>-~ECjZL2P|<}zv<SxdC`Q*{NBWp
z^wG@R0{*Lt|7cKa%#B#;Sk_F-{rgOkl6_3pPOI>PJ3<!3#nbcK5ut>7QNtV4J8GK7
zw?Ll0Hy=KKh&0?<gDtUrDp-6SCy5qu$wW~IIXDj3<q<?NNA}%dpWyAVC+pfzrf3(M
zI}STqwDA_!k|hk+ZhBoUE0VUkp=IT08D<M2FyW0V&x1<A!<KPDy>VXC@236BfukvC
zoeg1gz+*HTpJ8Vg>bAPw8Pp$1=Bub?l83_9dvj`y7BWFNhT@*pU~gOk!X@p;3?x2q
zhPzi{X3MUpZ^HkX4Jl3c{lXv9n09i;O{%UUFKQyq;DcFJ6+B<Zagp8hC?Ryoc_F!W
zhan<jlQdOKQxgQUzGIG}$_5gn!W-F>7uAbLdP2+$J(gd)4iv!L-fG6yR2}iIRx4@^
z1c3O<_b2a3BxpTuLq+8YtSP;#VLhPmq`%qdyte@48O6cw3j2%$_~>4P;;O6`v~Dr;
zm6><7L!TDE`?+cMGDxIPx(!@GW)*5N;*$d$)YV3#NX(k>S*M+m>o&zxjEfjX&Hn8N
z81W<cXX*>9{tQ(OgapXQp?Qfwm0RwMmsSMjf-30=9V<<p)Hv~PlYcKVgajF1pDR`^
zZ*W)x4b)`45(&kCf4b`KNw`FMB#dl=b9k+qepaa8we>_S1xOgz_%K_r2oCzbQ5JeJ
zdg&g*WmaJkc*2m<^-1oQC>zp0F2NPBst3RuEjmk<?h=)-p$%+8^)tiL=Yx`V+)s-o
z4p`ER8JWc9+#lZB^jc1TeqzB8`ZeXrRP0x^Z~+LA3Ov)I7AUR577kMRYDxhcf$!p3
z?Ptg*`L@$m_?Z6^T4{v*=Vt2#Ou%fnq5C7Z5aaLUF1vmj0R}k(3!-_Vy_UFj*ZnVq
zzH26k!yN+;Tdu$9ke7ty!bPaI%ZI>ejKwXesZnm#Chte}H&5FWZqdzFzeRJAJiTWK
zc&ogP@<1BTt3#k~*>!rx-#$9GrSqs8j^TQjifz9`xI0aj)GtJR`^NTO-5&0+F9-_t
zmy93=p5c@^GbF~BF$r^py04-sw|j<opJQA3imnyqm(?fN@HsP+8bq+q$x$7ZqY_Iv
zp3Ocvy3IYS$I^dt`aagMFpJE*7=0+s0WXO$s)SI^KMHDb)}*eo*nGKj=2#he6XBw;
zq*zA))_=U|KKb3hE@Y!muYx#zKfJAEPY>lvxIGz!AdKc~6o7;P2mozEY)53)-0$^|
zxZ=qj)TjrNMZHi~`P=n7bToeh<8jep^9Q8KLJLbz58Dr8_g+5>+omAA+$&?a`S&hv
z7ArdpsU`ssjhdcA$#oeYNL~W5sF<G;?9#pnd)0-WB4PDS8MHbjbf4Uu)K4HR%tR`|
zyoB3}ULD+R6VA%o%4+MKxpoN9GLM=lIVB%@>L;yY*^!WQL2lxn=V>dMRVFJsELbOx
z0;;ns6#!Mkv{I17;~*gG!+cpI9EOqhY(X`nz#Q9X%9kik-`KsWCpG9JwHuMl=1DNm
zOj@8;BjyiS+;(QLMnze(3cEQ(iKGo<;V|vh9}m#Z_XaR^A$p`YnL(8_XYsJJV?Ra{
z^fZ|y&b>Z>Co8a54~3IW9Lml+q^j8flG9_YPg46$_SM76ZJq^r)qm-=0A-TH|BTRr
zv+{hphf9!;j((A^>c+aWzE>)$M#tZbcsR9uBp<G%P5bNM)F^J$&p^2H_FI6DAa$j>
z9AJ_fZz>r5S&Ql6bPvIt8;rY>ukaw!k!*%U`HB4q5Mx3NxW7jKn^kj>(>MXn^G3aL
zop<Bj3m3G_kEK|2YI#0?b>Zrs#tjKqy8})x^_+Snv>7}ZfGo^@To*pat%nfCe&@zq
zGdH+cy@L0H{XpiX4A^J65i51t-T=W~5K(&b$Xh6UqZjXHk?MO<5GO6(K=MPy*Y|2u
zgd+!!4sk&yxClcx!}}XV+wGE+UoSEyy198v@6wKOlb+nIsp2!H9BE50QkIsvX$0<1
z+lkT*xpm?fnGIl@-ThPMsO25ef`8b%0rYn%U*0uUGA_p@dj#0~XGTbQlLyts)s_{<
z51DjaPfTCuLaC!7+{RJ)7@1h|tj5JRNy9NH+J1g_ya5bvW!H1yNrjQ(-=-BXnU@7`
zbW#E;!%#e?*YZzaLumST7K3GBCFmus4^5qzMXKnWiZi9UG5KGCS4BO{592jr&^MQe
zCfp=m<_R{LrZv5IQ<XEQy-j`09H`xzd*>%y{Xmv}b_mrgQw194k3$Y(7j*~FqS};P
zk)a|NoTkif*^P%LtTwC90%Jq)$L=z{%d<1aCY#>L<@Y}<gY40v6=;w0GE(BOB;;D=
zP_YWk#B^wwK3Qbtcs+GJzPI|ZHDW$*6iOM;x2$;~YN63vju^mWwkLRrn;;@(ud27)
zVeU0{LYOJ@@Sx5EarF1YXmj@Vj1bC1#2;i6bs2zYR{KPe9lfiySFu2HVv37)E!Y^Z
zl@#^};O<u9<UqxXAdTq(0m~Pls3eE&BwpF*Qbj;fO=E5c(z^s+^{DTeW$Og`TZnDH
zSI^c75Apd`N$>t~`_FEtU8jP=nN2U|?G-kJnGan+uKu6$TT}*?6>pR1z2r4!d`E(|
z1#qxv6>!S8t;Y;5MkT|1-hugTNdyg8$~UczoFlmeXlz4V>dU*GqkBnP!-3UA$3M27
zW11rWC}L<&uSEuzqAqDMy^d3-jxRtEgKFTgqK0zK0*&ACTT-t1YFI=?jq>u{oS7=+
z_Q5Wi;3NIB#SheetB(zE)aTpeN3b?>!0Or+0Y5B)Ad!`$(2Gl8h|0wj9F^@&l{q7i
z?^CtQ$fY*BGh=}=Wz0FJOLSuKCDhu52yM%@BrhLhFMnYpv8#9&ieyhgMACuO=BF8{
z4r7^j5;ta7*=}@Y$VpKv*Ml4yhj*~Q{=F|r*#)Klx&sk`UI+eb@dip)>=(VgM7xYd
z5kA9p9lg=97#IiQexx`9AbZ~3JPt`M92lY&s=ubu{grd9Z=tI3DuWwhlB@81K#LN3
zQwM9y)`g~fT@$xB+cWg4vjK%m%vv#qcp2ip%9VhjzPl-do8ydBSWoVX9cw!q!-gZb
zv!rj^SiM>4F2UY0eXZInR};bL`gqA}=_lyCtztsY@)qab8e{5G%qIisE9G6*CO%co
zK6LW7`ikr_K*!r?a({um_(0Cj&aLnM2Mff_`?;DouaBc-I1O!3O5lR?#Cd4ZJM$9T
zQayFr&RZi$8-jAgip;pBTOjPVYisv5Q_t1yfZgH0NjST}C^RsaSBFKo#GeSc^?Mh~
z4sXCg#g1(rM8Rwqf&;DT;D#7x?ZPKG%hvZpmqwP;R2uq|vvemmAB%IZ{jM$6?}&bD
z@|)%ZEk?1awQj2iMXTXt$Sy2SWps+pK@qHABT7+4zO&mDT$~IdQzx{it);{6He)rx
zms=#~jELOlxXtaYp8oDgF0d8J=$^@@OBax51t@GqpQIh5-Y|Z3=H9>8*$}pJTy6pb
zq|`ySgyM_SdJvIO<ea_ptLaCq4HbW{qfIqb0DpAD(ifHsy{l!M+7+v+ldwW3mAR9H
z&??e3FJl~PhD!!4Bk^MOy-FDxkUm587ST_-$e^VQ(VZg3#Mvy1&+Hiy4HJ;6s!bh@
zR%mF7u?)!<>A#uqYvQ@uO`8!UTH#&0LudAnLVw%fi2K5*4}g+^MZ7E^?Bq`3i=1AQ
zsXH%!-4?e}(;laoHtaat{zOhk=p74~9yd3m8NAq0?N)t4r@(Q)UkaSQYXx}9F@&6+
zyTkhCz!Fk!EcLD3>RN;;v{P2g_mIMNP<p?UZ^S*M{Ql*Vp;`#ZcV-?g4n0QZnfX3m
zF+yvkhxL6PdxYad>KoH_*Hi#gS{`N?bjF_rA`KQBYq3ukx0`Q>Y~zS1m<QlP#S$D$
zDIHC{4JDd&k&@mE$8Eq`mZPq5cH^2K7;14Ozaled+<##r1}dYNcs16uHcH<7+h3nz
zxk=vN%o+@}CYdPezILOGa(`8@_^+NV0BTK$z8;}`#*~#h_M|9qSe&2qBJ(HqUjoh3
zv)C5eZRMCV_BRiuF)y&z&geKe_gK40j3(QED+&ed8?~lpnA+H$w?hU3WXJan;3fWK
zJpcjlq$kyjN1sL>K@3P<a%##~L~2hy6E$x=_k+5s>*pICzG~(kUZC{UL3zbA-YaRV
z+#(GnycWJ$IIvcQhIW4x{pZZVaG7B+j<dLHrPyQ2E6}UJN<n}lfy_P_TP&Ey6hXkO
ztoTywy(}l{BvtiN4uYqolkit%6AXyK4IhH#&^`eHHuVP*{);mOf{W981gBf`B$O$+
z3F-dr_e~~+7EF9Kz^#=+gFaHlMAF7@OnKCjH6<XF?BwM|8FdaaQdI|35!c#l?*zT(
zVUPPSOvk@@1z#Db-%6=q0!W0OFy7;vv|bG^3h@5mxMLN_y|D`&xTXv-T_hZf-FX@Q
z2Y@hzL@Q>W9;|Nh*&e%*0L;}I59-!lYSvzn3n_luRfb~LN$1?urH7-=Ybe5Ivh;;=
zrTEkf(k^;@qRZN1*D|7<iv`YF(K-FOxiJ=!i8Mcsj!k~s-dvThMz9e#^n@0}?;`DN
z*$^Aj08nE+mV>kgv=S(3I3&hDsSJEA>&63H-a)<<=Opnd5*!Y&w#`1ob1G8X*Ga<s
z5eFUIxR1D&>Ql1PS*&^9>+NK!u0;`vh5-i}v5md96kGx(Zyhf5OcB+=IG_D>m$YlJ
z@<=f?QMj^u^yGmQo2}#K`{zDDaUqSlZ<%Mjb^7&r@uo}gxMz0}P|s^f(O*5wj8SqT
z=C3jPNPRMHT&1yhgBk4cFgUT6ns#$#mQ)iGU6l@0`U_2Q1TqC#d(M9bVfI*sOER&~
z=N(_ScM0Lm$fcr|xrMbEQS>-Dz9VwZ3TK5*B(bq|aps|#b7^9&<)e=7{oI<XL+jZ~
zi&63g)-u@%Eb$;S1`i&pI_Obk0i&H|haduH;zLYq7m!LfG-L-qq`B`C;>3FriYepb
zxgQ||)I7<&2c~jAlzpMBR+zXW{K;96C{Hx9IzD@FH2F&*!6a#XAxa}Js|RGvh))?P
zpIxkQUyMq9PmJRQT>_~oWQSzweu;{Jcvjn5Rt51WtUx97c+L9e?H2FXd$QX6wmQP=
zwDtE(nemGyhEWD_p79rW#El}tM;MQoFWrDt_&@g#mixhvbP&0(Mp^y>%Fl#2+Zbu%
zDfM?!TfK^}i4e13COnea&6U1YKiR|wk?f@ZZF|;)hDQPpugN^_JI)MW^=9zQZd#qD
zV{Hk+TE+tfrW~#d{h|PKUxb4*Nw{2KFTU;Y^GE>R)!i!wTQ>_pJS6-dHP1pdUm9&-
zhpBJ_1i8m0v%MF*J#<JmeV_=`28P&ip}=}2$`L^-D7cPe@$-zorhY@|3?`ofm-nNi
zE7>+Wg3fT$E;iJ7{S}R*Fj`eDKUPnKlv9@Q^V&<H2^1AYbe+HEx(RD$Gh*hirp=iX
z{MF^Vq%Q(^MW5flb+i4n9e%p2;-xwV!kHIpTs<rfL|Tss<NBYg<qC_>wqglWt0M_%
zp@bFNU=Y^d)K86VZgSpcW@Q4+G!<{AE5fsAJOE3un9wCyAHW!BGyx9W(ns%K%hoLM
zbhN#%AW{!-3@qwxaI@pNl<nipawAU+8gJWKNkPfFjRAg@N7Y%OJ+isV#dyaqJN>G+
z!ap<UE%;uRDmWa`yWeM-qPtvmv#RoMS6zLYlrK=1R)Yjw7!Kz`iBG8QD<#jxS^?$$
z@A1UgXDrP-Cjto10lvrbvx7Akk=e!VPUm^F#rsB^I)87$3s%l5tiG~B`k#yP)(}6<
z$$?57-3g+Bk}S`8XepFFO}C<?I)F*^8)06!j{hCuCjy2Ht<|pc{KJK&P&xdy)RoSJ
z)h9Iq_>4I=d$sSKzgyF6HxGYg{B8Y=9gGAES9_JHfySvZvC#Q?yU!&<!uDpam&{bi
zi&Z3k-XMabZQltAqYezL&&Zlh=ht#Ih9vV#73WaO!K|8Lobl?`Hy^r6$K6107He{A
z+_tcpo++5l<7H<B{P<fVpj>Wje++xZost<dj%<Hdew6fd&Fc5l)ON37_~dnXCMPDt
zkzu7~0r;$JUeg=-M;WFOruPvNBlly=ztGjo+5q)^^$CwSL@YlzGaPC~jI-S6ys?U6
zEDb38VC$M09n!cGWWaeyLkTQq{(x3A{~I@a<Ti+O=HfiI5lfbw1ih)UVtMtS8}SbH
z=)*b&#aNtP=_^yJHSsf##4mh9h`gd|j4Ko9#9CL)s1j29bq{XNE>!VMQb<X#QnL8+
zpY}CoDfX40cJDCA(e5~DK`XkwkQ{Q{g$9&)%}nXLmM-TQpU;dm+uT@2S+nq2?nf*U
zXK83pT~_%AlZ9_LvpF~+dy+x6$Aj|bGUNS`*=)6N0Ew5nU@oKryK|leMvfNwJAr1p
zUb5#qXniK^we%dlRs+ps=Uk20zrkQB&1Auny^N>5_dczCZ}pk^J7R-%q$RyX7Hy>0
z?~F3N#t*+NW{Uh2szx_5$qcclq-p`QoPT^3f`LTphL5TlRK$_Xa*GW_)s~+u#W=81
zCu8|i$$k(5S@Fb{Y7~|FY;2QWoJ~R<s3R7%ivGZEoT4lk`3ILh+?qZ@UA&7&mpG@}
zxEKRN`}@$cs}jkJ?pYoVwl|P2Zr6<G1)Av^2B!{o|NY?Ht|iVR=l@v>A8+4&MrD&z
zz^=UR#N5Xclkrm(`8~^^EAZl{K>Bcmr1ki+h(T&zRFA<~DTc!sN69j{-6D}qTNuNp
z0d$R=^tr=lb@a%q9CsV#jG9e7(Wmv5*F)or{2dc-`D7w@1WZLdlzyRvE#x9^^RD3c
zSOx~`V&tLfbDg&LH~3o+p<?K4lM6C$IZr<Mty+r#AbOC%s;;bAz<0PWjkCdzm!XD+
zHeh4^#`zJE!@6&xS{U*gvb{+nfu_bOYNqr!<`-5fJ<mjHHdv$d!T&%q<2i#YkP(SH
zZovz+Yh$@=5DzG{ZFuRKx+HKW)}9Mb++H}WDPh$tlq@Rhg0uFQJ5YRyVc%;|a&wyQ
zT+nQdO%7zQ>scTTtc&?^b8i<X7hMq#q0Z*OF_t&LoX$UDCr%<u65gXHyaX(F6s-o_
zh~1GbI!QCmSV<QE@wNUa=V8{ts1<O%FEz%B_aAR035<7dJ={O8pPqpq^JEEF&=u-m
zYnmyT(d7E#D4_%MZ5VZRmquPQVh<e{rg-ie*jqh%T${hnEb8Sxct=L`j6q&Xv<LMX
zLlE1Zp_Obw7_Mv?m5pRZG$}{)%k-H*)uE8ZwAG~2ZDRfSJR-n)=E3SYvT8=h@^-PT
zIODpRtEsy8n|NWqX{ZS~lSvmw!K~JyJOAo;Xk&1!rBtqtQ@r_;J0Pc1>itlk*zvnd
z)ON?Oo+!=Vce`2yw|8Fg?x3M%wxBPtv=-^*pCUQfPR46{&I7#`Q^vC|WSM3~b^3w(
z`c4(tlcHV5LxG#Zj{$)9P5E$3vqzh;y!WT`wMD}Br_Z-V!u7_C>i7{IHHXrnemARt
zmwv+G_~)m!)ytGXx$1{dmNjd<;MHAg&8WOaR&RSYziL*hcOdO*iu+(xZ46_JiUc-f
z3ThBwD2#1Gjw_>cS4F(_*~z{$jK&#HVJs*(qCdvE_=Qup_e~h3U9>ymQ8l3#b(F#h
zoHmgqM`4QR#Bj?uB)FQOC>5ZP7M#@WPB9a7`GSc#*E8;pdEr!5d>2WF+A^J`kGy9X
zdQ41?@_W47A^fzXnU;@mlo)${IajU=?|*>oOcx6yo$aEe0-0>B8X5|-{6#7sKvk2F
zoodo694xqqX3u!eMJnYFPC>iT(5#7#{&d9ObfMyrZN+Io)*eG|*Tk(VfKzNsKgSaj
z=6zxt>LITzS$JcjH*Mw{6_|Gh$phP&R;G=ep5wvTo3?A2z+PapBYTr>lT5WYO^*av
zQ#Lz|nc8NIp)*ySJlua*ke`w8_qhkaPf=W8@YxJ@gf6R!heXJR88<*Mn#Y&r8IH6*
zqHJIO1RtcuM{sY!N~fu(1?Q~M1ebGq*1IrsZ{hEJfZ18zxY#R(yS;}!zc#fxj5k1V
zzWO*o&ZOPEi#a@yXbAvk%Xrnl|G1*CG_#EdxG9av7^9c}u+w#sPgTlmw>{ONBYi4t
zfu7Ny-rehrWEmyAzzd4<%ZLooS!`_uTy&ObN{YU&q_RQgT)_%YN9Y_4tyO=09<kDR
z=P%`LEkFnHU|#z_QCR%&0HjdX4Vc=VcW>tt7ZBwBdk;`0bG!m<5y_fz-i16@#;IB3
z-Bb}w&&WrH!U!onoLo9NVKirwzjspM8s73Khe{}LkA?$(;17=0R0z^!spP%Cvm#Gu
zgFITn6TV)uU+e!2G%#p5NQYxpoq^3J3nPGeK+>+Ue?MfIB6;Ut>DX)M!p!WlGRPQx
zBJU$Ba#Vk6eZLZmJ02i{O-ugCzpx*B+e*%lQu~$(Hs>U=gt&b0YqQTx*Gcy<sQDEj
zf}B5H|6SQ)&Gv|7$0WG$>6y-K$iEK{IsLxOSh;*L|D7u}$HBx21Tu`WGPWCr*`O#5
z(Ly;9Jws5lCp^~=CjFh0={e1M?O{!D@Osw{{PzlC2Gd?6+Mnm*_6!bil;g7fuK}(a
z;jTqm<*kBMOsxKjgJLk=ETh3i4>1QVN%J{bXa;9f%R!SEI=xQ@@)9CC0Ya()0ynQ>
zIZsV2-IM}|D9!D+;aka$d@xa}31z+dOPn*Tojs6@sL1{GH;ezQF2`;hZ8`Gm^bg<G
z@mK}(-;cKIiT8P^<b_~n<JN39-^HoSv-r2Z8=8maJ&ozv6c{7tpOoc{2eXNAA#p=f
z>*;Pq%3H8M3m`ToOp!Plu%(KokzVTx1ui2%c$aG`%O6cmtrhgJ)cgTtwp^I@$d5ZT
zB2F6a2m2Z}-Uup}wx^WngC#t|SR?|(uPhy|X1F{h9QEQR3ERb?&+au)T2cnZ*8GSe
z0Kbbvf!lef=7@$OGx4$)@*jzQ)uETYN?5?wu@(;0TgnZJn>B?I@$>dHC8*66rdxo&
zrq5bUt_7Dt@b^+_C~Kxwb&-!rxHR92=FU|-bDHthaE)_u3&n_jhvNtpvDM$J!q3KV
z>BF@h+w)uf0Xo~1Ln)o@00->yWiR9KQ>qh33qvR@(xz^V(}~GyHhlEXtuO4qT=sJq
z-$+pkaD5i%lVOfJX3I#h-+>A0f<4i(#d=xYoarEp4(0PM8pom*HNMJk=HSPo7n7ZC
zNv@8_@f@Q?yq_>KsdeVn`Xzr+moG2WgC%n(r_Itjvsl%;iL~R+T0iKFU0Y#F;0@D`
z5D=U|cAE}H@W1PyL!+qV<o6&e-G0(JN0a&c8)F;4=2h}6L-Srz`)hfA7W)4F`zicd
zn%*oQl1uQU>JSLPr$*Q&yc}t9ei3|(l$jchmr{OE&@*<nl?E?%idtM{xPKNdj>2DJ
ze<3SJPMtk<3DnbXYt)p5M%>PprTwLgk5)qIs14`VJ(V@(>W|eH6z9kQk+_5Wx<I4$
zvI3-{Bd@nLqIK0IKp#|-_Nh$=U+c_iy*@Zzmg0n7MY%7gDM*;wWyOQz<1KWdieKj0
zdXqb;_{3PYVk4Nq&8R<wj-^NLB3*i!4LcI$e!W;8e{H?r2<wS&L7T!~OtByq6bh<{
zdC3_NF|!$glW0$2!>c4ZJ#Jp0VQNRNKdXb-8%7&*IuGIf6e}QYt)nH%X)PxOd~`!H
zQ*u=Ppt;Ij0AF)OM4UsDE*{uT&AkMixhaA*@J8>_S(W#0D(rW*ZxH;pvG+lO<4+{D
zo#?gvEZz=nz5Laq{C?6Y=60@=c&EnlwoyXp+FcU;oo$_9=HekD8MF=lnQ2DavVn^l
zwY;$_sFGvG`Zrc*m<l9vB?8nSNG(`Kr@aI95ROjZ2IzbD;fYH+VR)&&JEM|_X>S53
zkryBrqIVLB-L<c~(Sn5Ai#yJFql0kNw*jG!>Qx}-5d4%cOj9hzmUh^sioGUB%z+rV
zvt9e@DMnKnDwh`CY|H9y?f%Dfip%NTr2FH*LUq>>SYF1^n)72b1Y1#G=PwUy=cLSR
z_ld~5{F5-KO5j^9wm8-Hg5H0o*0%nt^v^d+EN;0=nwQYl<mc|y^JV=vm;RR-pYGn9
z6aQ+!t(we8A<Wi33E~Hb(eiI7v^YZGKVar<kmk2rCJJ$^O`nO7Y+cU4PliGDbnGzw
z5xfF!{UX$P$CCK+G$}(41CXP{Tv|UuvM0F&hOn7UKkjhk988?p(K576Vg4~y{$>x7
zEC80BkE9f4;*<r_g9k{XR}g)7NiV~YYPTNz+2*&7P-?n+=b1zUU9t*FZ`fzWAr%;2
zQa!Xhay!EVJA44~Nu;k_1N5{@yKj5!a7O~I@Rq&p^fC^TAeHD>0|D?H**%VfIV594
z&5v#Gd$AquIggDEqX5XR$bta4p79>Tk`>yk!bx+Y`~vQJs>!@^t02WqPYQJm75Y~G
zq1etKUK>M~;3xmh$V}n9&8KtoJgYbka3ZtgCDq&HEen<WhAm$6PaD=}N_0>-doC}^
zPpRhj90T1ol%JA6VE*k6q^L|ektc5jBPwbTTtvzEtNT^?MXrgYAe>+?Wh61#$)7Yp
zFnyfTRxD>jF>o*MRZv9^qd*?}yhpEOYaAvs<Y^*_u;9oM?~q)3E$c`4yd+siPAam$
z*+&d5#2P4~_o&b#I<dF1Rw)8xmIgeF=I$Zeh5FLnA|4}Wd39srKP2@Dn)<gCXJtK9
znXK_GtNM2hTtRiHGXi#R7G<6WfZR5aj{jbZ{dkF^6l5A#iv_ErBAAe2=`D5WuY1<5
z+^!Mz7h~aBY^TiCjl=~<Od5S#O;x?qL?;0Py~JaTx$K?MSYH$eWD9b2ZAM{B3ocuS
zyK~vz)Mst825OZtI#SOf(r}f3fTvRkh}{;y2z5xYuCt}W)7mf654s-sANRVQ*xgEp
zb1mO*KogsC#0+_BGC3BNr-%2yTCizsrDXtUQ=o=(EY-EAf^L6^2KAaA09viTrHLph
z72l@+%O&Dm+v3|Dfip0zZf@uErVrz8y-IOFavPUVz!JkoQj3v~tcU<xO7anb1mXC0
zcX-1?)kWw>?Jvwx+kZ%l+-61IlWk3AEvCVg0*c3koBwiAs1I?q1%ap5VqS4zubW<Q
z4%3tH-)S^vmzqb=+$;_j6PiZKIZ_P#8Ei(qSJJ?U%oWq9ic@GlHdCQgi`8ed!1>t_
z+dDWu;d_m#jt&hJ?X7<BTPWCFk8R_F->g^Ew;V12%~OwyF?XtBZwEruhkW@ZG*nz?
zD#y#2G-!%@G{mhja;*D;uv~iDf-t*J(qTu!5Ss%xV%})>dTG)WCjI{Ak)oQ+B3!V&
z)}UdOMZAyAaagS3i38Bwg1cm?uZgCvMpBLE-PK3%67Lg+=_{TZN6<2HE)|tb%<7Tp
zYX2V@%w;Qrds1<kD6|`koQ-&cp_02=s74`@xf}K;P*|kW$-3vV^;sTYVREOyg}P45
z8xo|+KGmo?<RLzweRTy}yyUuz&~D928&j&Rb<mUD^8K?~tL*gD-a+=$<g1b6)Im?E
zOPBRt;!{=_PkU1S6%waDBqVgrZAAz!&C~!f!ey!7OnZi1#h-b!jV<7*_sLkPe#%^Q
zCi7M!(5+UgUWAS8vv9u7Fjp~pOL%-D`qCPG1%UtD*JF9%w6;^>;L@3vsi<qn?xIIU
z%lxHq=TT_r>~Nt?biW%tB+_T#J%I#G&w!K2pv~{F4$AU{GUf+%%M*I(VcJ~>1;QfH
zt{%83#JwAbs$yS0aPiqC1Gbfx^+|Yn#w4=X!+$pjb`aTJhPzO71FxrPCIss&-0IT@
z`s{;&8&0tB$tiCT+JDIovm);Ee;MVusq|>#l_2w4du&TV(*e!DuJPKpv=3}NG<Qkf
zaJ)>vSbbUZv^WLOi|Kk#VF;=HE5q`^+Hs0*0>?%$(PvX8*4T;7+6`Ry3aEc|NbU}P
z7w^kkP=Sh{)m#CcThfd~)pbTHF9P>8?DY}1B)(V9?*9t;%I4zzuU7wYF?XHG{f4US
zbP^Mhx>0?A&BH8_>+?VU7S2;F9nM}GG0*j$a?+d?TfO1}njLO@XL9ZmJ3*~*YQ5*6
zd~Tp6pK3QWCh{dWF8MdkYI|!LEOz<AB#ixBDC@PbxV=e}y$OZb$mBzH)Ul~^Uoneg
z@$FHX{A#Y`AXWihXljx@aur7x%}My*?$Krybuq@gsx_|`yI2?S&#)AoQqbpG@P(lt
z<0&^_2F5la#}>p-O+OPEe}c#g)+m8SMYhd^HJ>lfIbzDpkYxd3R(dil;`XU)dlJ>H
z(;~Q)O}Yp1&sP)i`lKNbXI<*H(R`cn-;Q1s5s^EMGqavMxiEcC0*p)9W`;5$d2TeP
zN8fiaWcEBLkL_ofo0@~*+hw*)4&8qO`}GsU)@FqEOuh+!9|LlJX7`=BbKrkw?;RVr
z;0Q)Hw}0<{KLSpF1%G#c2^D2P!O(y}fS`bc>Q<n>ZB-WKfPjDw{u`SA#@@ly%)rjU
z)Xmn+h0(;)$k~;_+J({7%Egt@(#+P;%-My(#M*_y&d9M^okoV9W@c(urHN%lNqTY$
zpw^^3A@yIgR`dnA1v>3H75Zrg26;IKt(N%M5ckZx7kQ-@IZ|WKU)@Ysdt+f?bA6t~
za#Mb)KxKNM|1ApU-%!~06A+NbA5b9f|67!arJKEt%m3GAYUFC<V&?k)G+up2iQocK
zsABt~yJr6gv$0g)gIvEzkrSH^T#c?>?=qBtK(}a-13R}9o(YWkHD))OnwzSp4{U!=
z=REG-W?L0kP4JVFnj{GN_sL0ES<L-<nbbZ#nw4jN_1wGgo+B)8j;Qm+FPiqO^~eV>
zeCHrg6q_gi^xWT{j*O5$|DIQL{uO`T9XT;frHe20^#7yJXD_H)#(n0Va-s=;RhT^f
z?TJ>7m>#_-|9gSl`(J2^I1}Zk8S9nT`pR0?+A4X{a{<3RX4NaK``(oa`!wU}^X6%6
z`>Sp&_hdSDX2E<*j)1vh451AB)qzldX)qDva8T{qz@0$<bNuW@c+Lvm8xdXUGBY+j
z#QqCw58G^Yi!qr(qqjuR-*V(hOR3h6#ey8CV(@9q(KOxv{rJ^?KVvB1`A|O@;m}+;
za^v2z=O6sQSn2L(KP?h2g2dsFCyy*lK<ek>cZ`i2QXeLRWQe|z{4;{VLMbfxoE&>a
zr(AzD4|_X64gS=yV5LZGd&z#8izUwWqxL8d_r141Lh}YQdB>5DURVCZ6AbpyosWSk
zlS-E?43O0#9X2^wk+?P1Ys6Uy864J89qrbQ>GWuxWRbdcxF@UgJ!q(z!}wJwfSK+;
zC`tFKhp<nDtswE;f`m!&J+lf>KC2K|6#KqN;H?U=+NU|EEcVQ4v6Oe(uj1`c+}<56
zmiH}02-)ln9(4V01+~L8!ip|_mL1rF?O7Q1CXeMj@r?SxY38ix=_=ZHPh%dl3kTyQ
znHnaCGB!JS0exsZR)zVlqt~XYX9`_<?5#;SeLT*&0(4pna;P^%^tz)LR!Kz0SP2LE
zz_`?W)HyAvKl}t}qX3>0Wtaf!Of5a%zK)#crrf963-<t57(a~0IC%EJ?4P~5|LFd4
zLqtZ70UL$$(sxUhOVt|n9c%dqag~jKn)QOvm4r|eB<@=jRS$3FwP9dM3);@ycz)Y4
zC1wRZ)F$TU>nX!DyqW#88@VV61?Rmhtk4=yNZJ+OW`F6p7%S4e!p)k48=#<MclQZF
z`1rEwVO-NOBZ>z-f$A~FLJset7$~^dw|2^I@MTK2<yom2GGJy;oe)n15E_!WvEr%j
zkFW#A3jMOO`Dy&4V!lnX0lk>f<Gnj_fhq657<XmI*^OQhdJsY%l<*7I+XStMGtMq)
z3NC_8+Td=QJcnX#o83|ph2#@;iZ>{g=uYxHY@K1(vwRndQ(Ev~)q|y6D=w<mGXyX3
z!RwmW5i}C`)5BG6$~O*!Ko=g(a<1k%PUr_qOVpK3!erJfm&qEFI%SNqO+CZLh#_dR
z%Isqu6O|;mll9cdABIzh6Wz0Cmp>KKaz5Eg&Rtu3@P9nq$y%}>!&dp4;LF4K?ocPO
z`W$~ER_Ar`y(S~Yr)hq?jUAt&daAyT`J6OZU^mK6a<mmKmVBk3f_YqrJRK9MK57Ny
z>w)Yp3-7ExniENy6hqFb7LYn9yBq8ML+(u>MbwaN4mU?icBN<0S`~9X5yNT>P@B}N
zvnh18h51$t8&oy5^ve=(!FfC{a?d?knO>@X-U5c^(5Eu%wye0$h?G4wfX~f-W%lJ;
zYp7;Q983R$L+#7(bxEVcJ>TnX;8kR+qB3AE4rMsu)*V(eUN~E0TWW|mYGr}<9zRsY
zjEEd2e;l9^;BwKS7xaoSVz)!KabtQv6L(y(p6T#-{nz%V0uw%ayfh1aheADlU$<@5
zW`$?v!*t#j*c1MtFG%PWou89Z_5yYKQ(92hxG4`yWhCx6L?VpKgpp%2<F#noRTP5;
z3C~+)53!uXqjIcl<mBX3!a%TWWv#eArXYn*nAY%j-a&kAX0k6pWZ&*;W!Qr+YISb#
z))9bjW~Er*y;Q|wR&4IMK8E{ePceaCbhASF-f=A#qcZ^o!B9Vi7h%YkSCQ(agC!xR
z6pQh>98yD%IL-mZ<JC(A!f(W$>9F`kHpo=to^HTokE&7auOruHuyq@#t~_DgJTuTw
z?M9L?Ej1eOl4Zd1O{D@<lNBOGMRtw>-4dJL9QJIfwM&Z3$eE!7C{_r_ijp(?`6y{-
z@PTRpO)FY;o+93Xy~~AA3N{}wY6_?Il2}=_{F3f6f9TZm;a+aXpeAs0)#_)2(P|5u
zw2*3=kj%v!NUz$$p)4%WgvULUJ8brR^Au<R)^$B4&;;06R}aW!2{%@&|FY-9QG0T@
zi<5x;GU4(kM6n7VR(ps%E$BIUSFYpH#mI=^oZNxHkYMWWS5i{$9bf`CX5{df-b88a
zb!>&^M&Wm84=lgWi0a&ap&gNPoNbx+{yxPhpDn{YK3y2Ms;vtLKC)u0+Q}!SPgss1
zoZ3L>jLyA486?8cta*<53qmAB<a8WWsjh%IU0l2?J0VxW8vTURZT|M@kT=O{J+I(;
zsD7^Sqp{)cl}A`sihq8Ai8f6SS5tPfawvtqg*pRKpi|~GvhWlUFH5EPS8TJ=|9qz}
zqM>8fZ7}H<g%K6`j$HqJXdz4l*O3GT!3lAWY2uK;RQ=G*#e`Mf7Qy=>Ww?HXwiz~#
zryYj<crSkzz$vU;@ZyHz5p(|_F^IZVIb7ET)q{{98Sg@7-+Wz}vA&WBL0a$&kke)k
z6s)wW6uf7-rGJ>dhY>Wh*T*2*L)c&EWD*ip?w3^oL&pb;2@8w2x^%~uspLPU@7D{$
zq<tD9nA|j@H?s@eLXmXuKIj9*aQA8??LQ0&9Gse?j|He3r_S1rL<7l%TX#pO^h`)?
z$fRBxvZy2FzzMSiYj_kz#-P=acUh@`DFw?zo>U;`|FL#QCr*+X9+Wgpt6*pl6^i@b
zHxc^CK~|l=9MR{aGnRQAXs}_C_~uK(y)1z57e3)bTP_V;AWAr)Qi3dqd?=LDVhS|r
z5O3EcC<31A{|`AK#Gid}T(1eccPa5-S4*tp)O5K*6^(qR5Bn|ngp-+trXMRTnW{lZ
z6w)jeM)TqZpiF$Zg&c*f`ornw(IQpQ?}tx=W(r#gjc@NsGUddRDeF`0t~&r)E=l%c
zJQ^_*h-GSv=0FYJT`aV!*hup)qfiwKeAQr@O(Iypd|~o(>9!oC*ayuCw2VZ>j4;#a
zsmUDwc}ApM?boj`o0Q+A8O^=3gQk^!WdX2mkMVJeC#M7PFQo^p?_7q?ctf>(4hSqP
zRcOqai8LX7i|+;;9*kx1vFS(V0Pf=Rf-*6n8|GZV%1ycBF|XnnOHj!nc_^Szpp5$h
zZcL$KPC4LCjQ%qvMr_diA#{z*8fq1;n|6P0N}FlyP!Y{o0^`a^7s2E2XK+`u%$(e{
zFyZGC9lJPhsZ?`+qgH+Hwy`o(j9GRHvZGw|^@3+xv0{aA^F<AnC&4f;yWt4U99B~@
z=uO&t<mk@e&phD$dOW;#@Jo<E23Gi^uJ{dc?<JgmiNPp4s1AQ?Iy1qMQ;^A|)KmE2
zF{s|CwLs(-y4C{L0;vy@4QYCqf51XRe)Txsvu*%?aA)wjSV5}dKT9~te6qsp#K$P)
zdGuntg-N2;Y6F@kd%1-AbX$E5a!Vb@RGzK^sL{ko41{pYGP^S_4Q7mX5F$atoL%!x
zL2Zw*<>TJ-cyZTO<GVd;mBZJk!|%=Fd0&1hz^0ie_%`7R?nlc<H{qhc{4ecB-ahpl
zHyU|32Oor~?6=Z@paN$ATnF65A850(rT#WIkuu+UCLT|<JF3<pn>dK2=y^sjLT01s
zWqLa@dqF?Sea~hZX%Qu-i>VFWC_dQbu%FU@7lM5;$V}sgFibo_&c3A%)&%0jF5;jG
z+u$5EAkNI`W>YMXy4&)rP0%;0oqIh*pMl$#Pn1y#E62)(UGU>`IL6IrBvLK_d6_jJ
zE30{G4<n(G_0V_hugEgt-@@((OeC8h5F04Wg7hJGSIPgt)hxdk$IBg4y?y3-DvEZa
z;?H{{%*_J2fCT&f!O2snj9A+nrPV1!T}uB=*TN}#LWg9+UOHz^6{4pxU0A^l1Ra5I
z)+r!T$Xov=u}#9za1J(gdtLwhS0|_))ygA#I-CN@rNF>cxt>d~7UKk?XPgYd8Nn~Y
znKfoCsQ4+Pzm99zF)8jjH@nY>P~7rbG!xyYvR6)UIn0c{hN#-(j;U<Ga+peK)|^A_
zI*P~kydeN<nau31B#Q#m8O=4UOh;4E5c?)i%!H363!_4&cBQxPQ|@QcS7psP%+sw~
zK~Tr_AO;MCE<jEZNW6_zkztT@b*=2dN=`e83=D<pY&&#qZ!p%kv8v^$+#C|F$X=u%
zkZ{3lIV~UX<GO7~4aw1~El1^sC~xGTkb%|QK~B~q{X-A=jgXA(Q^f#8i(|hMmQdy3
z0e^aS)@h}K$m5)T`LMkO9)`&L-{os=`KSV|ze6LP;`-t;BwEwaG~*ZO1yQ5Dh2G4Z
z?N*lDn^aQbjZUy5RZl~-zSI?*&+1sHUv)p6l;@lmATZdp9h9_>4VN)4*+$RM3+BUs
zjqtWwg1^``rS)(iVb<8pI~Hy??sT?C45X;ZGv2c@F3R9wqkBtQ)wr5e6$}*cm(HRv
zx7?EF#YE;ZYV29^OB}JhnE1<=uEW%?pank6(g)chd~FRjIztY943$EQg8}IBssU(z
zw5w|J+43b8CMFnbgepqQj`kp(2Ni;;llBOYw5MRGWva1K%%3l6mI|l2y$iKNnk@f$
z4U~1*h`c6l{C+A_-h42y{>$AXWgGbq9UXlATm(4?%M{`;{pi3=`?SEH(dXN&ck?Y>
z>^Jk_0YIkl?=uQ@(5fq%6)E=TgBIDS?x7<iBjPL<irE9<L=E`<5p}tv6o>oHv;;UZ
z*Ds!YvYhGZ3ymO0LE7h&H+%AfmJa8aWPl_}ZEYPbEx&tXKffq8Yisy?vT6OVD?nE4
zBIN}TKS0Q?Z0{#Pcs|31G0z({B)CFb<q>3vN<Gyb#N4cODD20oc3^*MB&KqMQ@08B
z>zzvvv;L6ld{8T1j=blYaW9K;XzabeCh$Q~fQ3(6E;Uf?x0t9oMFOVEeh$8%;$@8o
zykqVUU2-MMm5IXk<hW_1d*Op0s`kWxK%k57j*KTtTe44=bBi%nVD@-y!q95dIhiHy
z`yA|_x%A?N=+rARIn=t<q}$Ou0~jGyJq1XVgv~s{@cSM|ptFKPA`3*mGz6UNo%WQ6
z%8!mJ?Qwrz%Q=lV58}Jtd-v-5HYex0=s8;q#FqqI$~ceK*^d;1;|kqxUq#*z-P&a}
zdiI9Wp@|r?{v~%Wk4x5g9GRMrT||XRNy;j8og*uAeT&b0g*IHtWfPSPO!n#0A#Ds7
zS4a)oN$;q;K?nM4-Dfx8w_fZnkOTYw&H(RA%0_&u2l6)Z$C<8OOLL1tHEj9&6y27S
zGG{RTmq+}Twt+Oz=Q@fFkaE-%(Vo!DmfMn?UagswL!}ay^r9iH$q!AJR1#PFLHx41
z#1DPK;JWX_NO+{KoY?=lxG2$A!!yJm{G>U&PQI=JF}Ykq!JN4bd8kG>kpEoNp!U&m
z!>4wTZRj$D0L@$ZhX}wfAdH^6^5boxYoLXNA;M51N{DZ%6HND%z%oiU_OZFPm+{vp
z(CaKMeLSlfiN`sL!^`yPsNMb#08c=$zgE3>>+0RQdbi^E=Qs`j;`AL>*lQ;gFe!{d
zuL}I`$lOUQK(D7?N7{7tQ7Dxfg1i1UVB2kI6h-0dPm+Y@Got!5XT<iunKAI#^vo+(
zNL~tcTpJt9j{OG+RuyJmcCH>64-v@1Oh~@gCdQrl46zJt(}-2G^y^R6ylNka&d#N!
z7h*NC35e`y^!gsPy+Gx8SEG&}VONU9Sl!Y@W2jSoF|S~ASoEnhRodU~cgd)838GH)
zSBuAEplQ+J2yAn}qPu`Li$s=z%_ATEJ4LLhTdF-8+^H^4)V)+2jRvET-^D=j?44c*
ztZ0gTL3#zu(EDsYJ?&i#x_Dm}-7mtEr|<Zu{8T)~N{T!*y`fbpG%}~1Rp#s~vYx-B
zH}ms(1h@7ykRw+Rmg6b%lRsS)g23DOZBdweqp=8+x~`)Le&J)0HzvYtXYD~ZkrzN1
z>pPg!MVj{xfE0_m&=cL%Jm8ai9H9NWV88wbUw@S1S9IoHr(f>3_Tu}>6nGf2e^$sQ
zV@gUh`AyqHv*7EGg1TYsynC@(gu-_$$O3f33FX;DdKO?3CvD~%XQ4w|);>$36ejJd
z?8nZhk9tI&A_l<1bBWW_TvT(^+ogUM?OPtHVAc6kd~Yhm_eJ~GtMENw#vtsIkK$G*
z?x)38ay3elG)zSBN44EWO<m=J>v&M5(&}Esro&D0M`%*DrrJDc%;&m}wG9n20C$^a
zr>FRqVOP<nDH(z<CX0Tl&Q%9&$u1Rzf}cz^vh`#7#+X~9T{{z;l9K?ksm$#Lv?F=L
zT70Ci5$haa6??c{ajvB7)gjIi=n}Lic=PF}p>f;2Yb&TN6eTuL!$TJo;^?gXUsCwx
zm8K@t*+LIrR~9tfv=YR+Vk2=O6?LI{Kw{w*v{_BH6caW5tM(YZ^i&aC`9gdFCRK3(
zyoW|$x#zEn0^>3?wx!xajtDUZ702g|0@-UKB7u_ftvUQG3+Rxe9yInoO2B*v4yviO
z2>UDAUcBE7S3VC_o_dw1qA~(_w<?-2Em&$MG`wGegI)-Z=9kdhdB$b{0<<mMWvoiB
z76Ua(p)TizsGpkowNQMryts~RorOdCwtyVnCeS&(_$Dc&lM&e!8{Z--*GaXf5)sDg
z<P@JAG?rFNg*Eu|Da+`~eoFLP4|gMXnP<w?boELyzDtrmZeCg(j#o5j6^7$g{vBYa
zaO(_Dpo$_Csp^Xg`L2SL%K13uk5l-VL2}1!ptA+E6)tF0G~u)a>&0I4t<H#Jemn}j
zU<1|8<t0dW^u2cx#>YjZB#|Rm`#7(NV_?vq5QFYH2#tCu!s8t!hZsHRWz=}D{&LWG
z)DZi+F+B2ioSDJ>2MY}B;C_@6!O`-L6F}QVQ7b<h3)-sR65rw;jjoYyDe^PwjGA5H
zf#IN=7$m6voZw%{9HxOnH~?8F2^3Ppl0~rL6GiLB$RlN%RJ#`k%Gdg>P}_cK9MQ?3
z%m^eiD^)&q2HbDWE}b~^XN(j+8qUzq1nK|aVgp5*QlWV||4`JK{%>-2P+X4wS24KE
z`P&8R-FV_^F#e(_FLsttB-NLUH?Vx6iaL++{iEQq3mv1Yt;-*ma_QXwDgx3Ei9|y=
z3JNeltm6p(=(CtmPUQjdXn(x&3`Gb*W}b(XnNz9oWNr2Nvlj}vt3S{429#M++&)L3
z+iy8mn#`1ZdZcVuAA4`1XB~U)0SKxDVn<{HCj2Job!-V+n70g-aR>&+%50Y`y5LIV
ztU&k=p(=T#IJeU2$D?T>P2y3r?OGC%H{%!$iQqStSuFG>>fkEmO`@KkLO$=t(c-e>
zZb7p*d>oh$1~-!-TRdJ^q|02MyCaBBdP6Xx_Q34bZ;n6SAKii7s<vVBzHjD^0F)eJ
z5GS+x{}*&G`*!_)|I!NZrGr{q_!kgjksWzJ=S044@cc=kKTl}Z?x4Ykb?rlsJ^i&i
zFl+-n_Bt((OJ-(5wekcC|5jMBmL3#8NWEQ9z04PW`;8kWGE$9HVXKy8f3de78o7tm
z)i_k~IY1qD2e1X-ebn;L9tSX4cw!_C1<;Kck6axRggktK9hm;mN$SSw7?%>@gr0Ec
zW*jfNav8KxtOCm}Ky0RDMcNmIArJ=PI+;@J0}agB3tuxOEKU3Knno^^`Nqu1z#N06
zH8qlUw;c_w0MTQT&(bsayxZyuzE(c5&RQ37b?h5<D4A~Mk&xmB^lB|!{NDgMGoWJh
zuK<gOU|_~#|Mn`p+NABDT%-xw!w?CU=F(sVjE@Djyu|$=nL&21ahgtgip6B#{Jz#*
zsJVLL9O?sTS1Mt&9`wN@>r^@TH%sxw!0^Gp=2K7s(&;Kr)S*36as53+=K=OjnYg$3
zI6?BA8gnh%881^6q<IYil77Uu0Qjm?gMRU)l<;s9Q1v(N+cp7j)kUE;6b5SrM*Y^4
zCn4WICd|=m7V7@$j#^_3eo00hf;iI0n7(WD&a4b<8*1l)nff>fDiib)91P)4+U{JA
z@y8Hag<q3Cz5E0ccWh)c=+}jA2D^$ChwyodW}sPq9`w;ASatInOg+G20ci*u8o(AB
z3||)m?~kGX@E08AYr4NJM6?pM-$^u>^aYK|ou_%dpVB<@M(JFU+v*^*^bU^!xi@L;
zPz%nF+RWbIHqqy%s8>2~p|M@F*z<UL`-5@ka!OGrcwr0Wt&`f3=(??T<pPBsaAd%y
zQSSksaBNmb1|jj$98dU{ITNZyjW1ceT9mt`Kxy1uoF|ieba6K^X7ViAX^dqHVQ3yh
z3Jahb%_KH5z>*&*BGV|fXd4qUUs5@I1{<jHwY7Y6UoYy4Y|Urd*~~NdWeZ!fb<%dV
zdKh!MUA39kF7>i=H5t*(f#F2-fmaL2uhB-QB-9`qg0#~k+$en1zduPjPD>cYX<k%U
zV@+L#MfT?X&Gn#W2fSBi_rcgzT9p~gLS5qm3}dxwMi?+Zupa2)CrOy_QsgfNFNd}Z
za|{)Y>RSyA#wUXF*vLG#c<#oVwHjE5QPGVJlBn)CD)NyQ@KavAApJkLw3)=FEcM+!
ze0K+Ib<mkO8?4e6rhAqi07R1t_f*0RXu@R?2OyLt5T%M#rcgfdcnrqME$PZrOef$T
zL-#qfs8>(jN|Ot01T5=DomMO9YrHoP>qVWm21yDUZ;Xxsc6>cB5w$CygE}Vte+lvk
zG@FAywCGOF@s$TRChW^k@cBWv05exG|5p_(*hxP-BKpL_XkUC69ig{?2|4k^@{6`2
zT_9AdR9Kn!Lo3*l%(DI_>^8EKcnnIR`_)Aa0+!`xxr!kH7GBA@f@f&q6vOlaG>Gfl
z*))s{(NFH!_>#&=B@9GQMiWdpy!bUI=m>rbP-GOG6@*F9)_m9q5zPVjl5t!j{YQ<g
z!X5~XY{XVp0+<zBVO(?9h*7ezAvu=`a_-wcib%c>$j37AC<py9*@qN|o%^JFtd`W$
zSM+t-6^<Y9YAfz_x;c?5OcgM^FQC(gZWrDR@9~{&#epF}d}!BOFu~Iman+qF-l40$
z`pn&k3YS&ctr3tjioeq{D+(HdvHqRfrNNya=`mxts~gaSRMr+(e<>QXf{a?2`dSnt
z#M$65VammMmjOI!j|Ss$H=%GFU~hzx{sy1|8zQFH>v0K9kgz^RRhf+w2;3i9BQjMO
zH^&o>v7K`q$J}k}*As}|XM+1t5M+hxf3t!6tW`Ib4F=~zi|>+Sa{^UP2B%1Pd_;x=
zt6R^IPV)xl`^uO&OK8%Y;rDH$WE|_5O&B^6gbCpJ(~Za4kW3CB);%-!=gy@CiW!cH
zflNE^f*QGC(Jq$?MW5QpPD%vh3Pc~o@rgiOuDyznXRFDD;)9w#u)y5EC`27kzZ7y2
zaEt5C*zlQ~UBC_k%=x&}O9qqi<`3*1YymbWy|5KIGdiKRirl6!_n{YX4JTt=>ax$H
zl93z(vC{fM(lYCbf^BUES3Vl_!Js3BFsJHfm;)ipTsI-MPc0<9Ktqo?BCJ4Fo#NXj
zs^aG!7Fmr4yQ;+_XvA1a6ct5(rS?Vl`zLqzr)ifgAiHQrO>tPU;A<XVVMBhzy06Vh
zH%u$xsLR;amr~)2s`mvL;V&#$Ss=~LQepKA_~5ArG?j!ntkBt)#R7-u#U=PcoqTzC
z39vRQGf6@F@bqWtuX2}$CJ|a05YcQDGP4XX4=gaO4z4Dz54=+q@zvuO2wQptgs5Zt
zUM>r5@t<Zx<+{K(yDV5hJdV3Ud9RTeb))!*Cd4vOWh5AJACCUotRK~RP2IRF%L7s$
zvx}oj!n@6I+;83|<aR&+gd)mL+5w?6+EG2y!t5#;BTSY1Efgf}U%sPO*ycsCJ~2DH
z0L}O795`6xVx~>74<60^R^kpf9C{F=@0oNjRr1kpg{>m6K6bB`mPhYMF2j<}rmTV0
z1u+Z*U;Io`TrbSpA03RiRVv)_-_K}^+xiZwBvs9k52VAmUyp|=f78M8)RxIdoyjHV
z^`dEIgG`j^kJAx)Mku-+$FvAf&gVZ+i;v2C^{c9*d8-%v`@5~IHdWo7qY4=ErNwzC
z2B57hZWz6`MqTYVL;lw|eWCzI5!z1@u<9<nO-PoG3;{2mtszPFB7ZI6^l<3&i`_x#
zaqVAr?y(Py{wJFivX2aisVxxjwBZhifJ=|YF4qAN<XeLgnI^y}VVL%kMfQsKFd(YY
zrdcNgUfW&JS{5@)Qz%$RT#ZLp=AG{xI<@G&1;q}=XDqsM7&4huIO-=icL~1#cxz$l
zllDK68~#LC9W0kZvzX61uWDG4wj3;#UoOd|f1<f`QyJmU0IXE<8oh-X&p!`=;$-nb
z0&;eKvE6}P_!ooZ@?V6+_<r6U=U<1(?apkNWcAIz7Vw~xg$KZHyAuFAjqD}ZsmAym
zNx%aG8+@5V^k%OOze2!>fP2BZSrQm-_*93{#Z+Qsy~^Qpn{9Y-V}buM;Ive5U#J1-
zdj+o#*N*%TzB9i+&Y=RjM@y_UqJHr%bS~UK?)m1M>Kjnha;`!4Lrd=Hn~v^KDBPoR
zlG;Hx1pOM+l=^ji&#$Lgdg_;+V(F<Vtr-kvMdheOun@f1?H7`Y(eKR%6AAHNV7LL>
z#v)9I4BgEb)eet;A45Pcw_tql6ogTS3Ql#4(+66d>K5%fY&sg5I0f&|qO4T1Q+BK-
zd3G6Vv4aN0AU`c>C)b&>H={%y*IJamW9+aE<i3V#TlxtmJZ$6%rXHPUqwmyGht&QY
zI&D3%cG9b*!U|-&DB{JmGCvQYb;$R%Uo7Gwg;!wayHpq=R&hGrM<)1Dy~;kHV5j2;
zdIQw!kl{7VhiJ}ST8O2O{?R~nH7*<^{k|fR(*k8rEP&HJ5ri{S+3949$>k*kJm&mP
zNrJBb8%s-fcXx{;>|ux<pz}Y~Sz@%nD?<(FQwy|vJle?YXNkZKV#GB1hm*LKEdom<
zim9~@mU}Yh4J@qAJFVtbfTdniz_hpyuE+ZFd0ikk0_;}n`PsFgSbXvXcZ<8hJIm=S
znp||6;VERN5iYD@P}gA!!I@7^&4(u>C#C0v{jJLWyaiON2dsSFq=NessPLqinHv0;
zS;O209y!0@#`%+^o--3gXPsFS4NW#wDLB=f-OOp>@w0u*uIBFUu{xRAy+VA{9Hd34
z#h82E8@w8Nu(H8rvaUbraJM{q(>q2n7zYkoP0=2qMQ5jJqI!e)9niZwiCJx}%(Jum
zlOW;_>}Ievy3dMZXbm_+FoIHZb@wzhT!`U-L-zJJFdSJryUpOP5Srv~JVzK6--zf#
z1PKzx!Nmvs6Kc$@D-S?s^TUJ50eA-}LSyrmCNvH@2)JJ!9MJ{-;D#CMq6p09;_~x#
z__O9i(vP*a4?^|4<_MUmplr^OC&B%?ytuNmy6#A9(7ST+>AFjkdZRE>d<lyZ9>tsi
zvJ_FHh#A47(TXp)rEyLg5V;Bw!p__(ps<@YtChv)%PZ?IJgS<}Sh1MmRx%n-vpuL`
z{IxDT#O?I70EF2Bn~i_>_bR796d-1L117_R_l#nb;n_}FjpY|bX09x*uddI}yDJb@
zo`i3M{FZoztHCWpO;rZA;gB)0x2RVhOVTm*P6&U>+m@bMsOO98&pdbro@sUQ`ML~0
z2QHs0kWMcUo~fs=yQ~lh>#feHM{5O3!-Z&FmTmW$)=beE?X51Z`VGEZ^P3D+dzP*D
z;;F8g1;X$q75R`Gq$+nzZ!Mi$=*OUgjhwBuR}GaWEC7i@gEp)vD<if=#4Ni>rr_O9
z<^YD_FqL$OMgFqsaFr2cd)KVwf89(*H(f}Ru3m;MD>~@`>J0k(qdNHILMW~LkZBR7
zQ0E$jKlxc#^kZk*ly@SK8pj9m)2vV~VM@iQV}TUsJuGM9a_I!N&UijyIFh_VdXS&y
z0#-Io&frW&8dyEOC~jl({)^2=Rp$ZEd(XL*tz|#_`qRYBfZu-<M#k5taAkj9*q^Zt
zzCm?9Y8Kr6`)TG^Q3?hQ1DictKOt-mpvkPTU`iE<7V@^_Dj9EsF<|ufwq`~%kKdwT
zBPPBh{diop$1a#-g|G3EzjTXfteSybMS$KGTk+^7>8sx>^Na1|UK}uzO0iH8cbM$+
z@4;AL3jbW7PsUlNHAaJd7|aBWj_1ad0(I__k^A8GQ++}@rg~%^6*+K)0WIj&r*I54
zuz@IBu|2Dwi;VoV>`^~1rpdTCXT<#0BAV?$+*F?GH7pG#iiOZ(+DIA^@kU`zvg>pF
z@v@(71+Z-PEu??Tz8wz&@211Ve=BSmd1@_;n|+Z4=l5BsCUQ-gKclH%*2MWUh2W+S
zMUZvjHHaQg7+4cxBMq)bNt#j!C-ET~K)AVa;(fU6&*co<-4n-59iT**ozp^SkkN0g
zaqtFLVWNObFtldd;oRTBhPaY!=}}9b2G?9}$&5u9k79LFyk=rdTPH?u+S-t+BMYie
zb<$*On_V(d$j~D4(M{zwl(q+Vp=QzzSDWSSpFIpTRmd3FAI}MEbD_&)n+UHuZyoDZ
z=1TIL7&mAFVUUGRua~qs3cq!yp>Di+wL7ikFU|`N?!RPK2HlVh*!>9Th9YZ2I69a$
z*v;uAd>9;wwNu)}1ar))_ji!Dv8@p7Rhy&y@LXptleF+xw?Pma@5a-?Wc)}}+{MBI
z*eBz`LELKLjD<JGP`|Th7_jHE86jH&*%uds@faY@z9G}0<?vMW&D80SyAe1Yu*LRX
zJTyL)4fSo2^VLHTjPY-5p&@T;`Mua3fa1s68`~T?nYMJk9Gc<7X=pHvJGp^UFN%kF
zbG-j{k^1UfPK!=zG~lB#;q#bm@XSO(bzRi0S)=}+OyPMEz1viWwaLtZ=j$b9D~P^Q
z(O1bfIG-^&HlOlnJ1U@K`b~NwLGE8&bnZI5iFQ(p)HQUPF|_}Kvl$7Sde#huEZB7=
zIhPqVVHv%e7^ZYa6-PH{!u%NB)p$^754tV8+GKOw>Re*>&apO_xI`P^G_3kMflrIJ
z2}h45TGr_Wa1;gA(w2cI=#+?i3NXtB{)?T$!u>27$KHbPSUr|`L|dJ7sPK#~XYB$2
zJpR-X{=btKBXpmsv}8D|)FHtI5l%U*45y+dNx4jPKhVK1O9fp*p>yyYu+HsT5|Ot$
z=!@2Antgc0@^BS*eV{&?VAxPG&SG68X3JV`P4e<_Y7GZOt>}<@wsEWiA%t~EFdR2|
z+++uoYMTnP4V`pspiYemF0&?CE8AhY8~I&_HXT9sjMR^I92lC|TVAT7DaBszB^rTa
z<852YMwrC`%`MMiu(UqdgAo<tMi9geT@EJZVpRSLT@Wx<zO_W8Zz2zDe?W5-uM{6M
zhDcRrkT{YPh=2%LYrvfXv!jkFq%(NFDH<N!g8PM4y-BHAG4h^Pz_BO|5wVzc){>%E
z)fo~PyxU13?ZGnzMNp6J$(4?*m~NtPL)rwEwR5RpThGT0FVTzd0koxsnTdRj{d`>h
zM5tiCRPeqyBLxTdMH@cJnqui5eua2IPvNH3Z`9<Hg_U*3MoW(pTvhGh=cL_}{;79E
z?OSsKP8?NuA)$=GYcmHHuBzMsMWZ&8!*=Jbb*NhPGuTz8_1Jca9lI4#HX5ia7tRJp
z!Q3mq|NO4Jds-{moz`PSVxxx!&lG96(6POA`j-&0a*Ec==)O5o+dEY^%G<@l0a&|0
zC-GZ^aEKn>oAh+B>MDipgb(q3_JipIV~b;;K@s-Tk{%eTc(HIi(7A64cL^J6L#G&u
z6^94F6`Pd2EHl)-nBK;Nt<JqV72u^FW84RYFjkkdp-9cPs1a59<16Z}sCP;$J6%8p
ztK26mT0v>Ti&Kq~>P-E!Y&Vm7u>{~B8sJLd72OacDuvfp7WuyE_(-#b5_eZ3yrVJB
zSX?P~fDVPm1egHnAPq>@+pG&ttw@X^=zr{z6V?8G(LH?8iRJp|E;~mDqn#OhF@`-R
zJWMfTFcktIOE{hw65O=DR4C4l#BYku&s(!p7~#j266jXfN`-Y$`>X%fA#ZrIJ840n
zVjRaj^hVqITVZ+e1*n3=%@D{>lA)qFOBp&_<t<!L88s&q3FHnU_{E1V29uC$3t|)`
z1@IOFdZGu8>l_Ceg1W1BTo57`6LGF%?Ep|*c1EB*xf?K`5q`hm>lv}CA^<3|BUWd<
zflpG1TYn9-;JCS~e5-=G5?|<R77R7q7rKPLu^FeRaW^gjkCRirM*7{3x&%Nw$P@{V
zL~)IwwQvb6)l@&B0|YSQU7TpNfodlMe;}e1Feji*IA=ocPqj=y6J2S4%nZQ=NvJ~&
zWjI`{nTf!fVa-xF-h>hrXWCCj>^Q5f7iaKfuAQ;g2mWD!`@5qQ#5%^h6xmeT^E`KJ
z6!)Oz>*ItyXay@|?!;m_a-PBEWeSnur7)WPD%_VB$yKLc9)Czi1N(t@if<UeojAGz
zIEl6}@Yfhr9aqyr@nSkuSD(80FQ#y<F2T(Y{+Ke?H#PC3@CE3qFB>BIF}y(X_HqK`
z56jm0)B<FtofeVT6lA9*Tf;(5bCz88+QWWib84yjm>JMCXsk;iv6Mmx?a2iim2y;r
zC4vX_W2l;5db+;;OjPZFNA}v{@}d^>{=$?Iu2>2ZO&HpoS=(l}Gc+5PUG8$LMfc>@
z2w*X8waE7ZRu_=|C}~Za+R_%RtZ{;pG@CsvY?fqt=2TvdIxV!11ut4id6DX}5Z=&W
z_7Jp@T`g*?HiREZYZTw@_i^FMqa^mKz*jsf-g{W7UBr$Xg%{3S?x6U&Ili}a5oR{j
zteqZ)Qx6qiGwY!w+SCahp6_O<NWb>rinQXijY;X{i+yfc?TC4Q$IIsT1Cn<<b>q&s
z%X&xrx#6&h+`9>%ml>6NsEM_t5CABoF$<O4k3pK^mK+a;OC$l-qGO}v$w-n}mi$x*
z*0u2XX+Te4W=XOl7wE<W7&aAlr+>ucyA(yM^I%`Ei}xLHS@OdT!4!|jqrr^^)#bn^
z29`OY&eAhoE6v_=5V{}Vh=c9EKFGF%Q#U|S5(|F@bSFv_NVR~3aLNStC{g6n2x9Xo
z5=7k#9Xz%q@+%=9N2G6I-#D5Rt*bcNWMoi;30bjG$dL((1?|JC{PA5Z{k8W-yB%vE
zW7ErMkfvq+s8uh<mrju$yD)GtTWgH~fZR>H;P-l8MpqYcadll0srDZ*ikhFxR51&_
zS_;L~GMB1a;c>#(>LMfRf>o&72O>Vg^#Dy~s!3h^tjbjGFIPvjFk{R)%2tn#$kT0y
zb=W__uSIkU<J_y1S$d8#{A9jjni2YFmDw5qJsmeX=otu-%Jq;AomQ!;(5u%BY-J_y
zBcS8C2ldgoL^-->UcN^)VZiE-M;ZorFg%yDZjW6eueFk=wbN=4$4X|V?nQmi1RT;S
zS23A2hdtdNF-`kpnw%Val<zKCZS~5FX5j<vc$!qN5mKGbZowhWz52AjUTrTn14mLr
zPdyeGH5Ek!>8%tsIlq}n&r0Aywmsnr*^u?xow7e@IiXmMyn_<+3PA|h@KcmQL<C5(
zU4)h>mAFW^V;^lUJyp*4GUSZLfxOU|LJAX4Q5q?>!AzYLQvJ=s!a~P0TfE_tA3HiM
zGV}~uRQ2cM4W;bWzk>^xWgmI$ZrWyGvmp0&seswW8J5#*^e9S3&hbMqp_;!oco>Ri
zNkyykrrFG(f|cgx=5<Y<-4)r*fx+($S`&quQfs?P&~?}DG}}Na-Xbi<1&}kVodCns
zKDi)s{*tjmB+V`mAf1$JCoKxftR~(XG`$EUSkwe9v3|Cr2_!fyeijg2Dtv}B)lnzk
zruGJDsf}hOa=>qj0-h-wC=QSsST5oJEw0SZImPYm`B2fOF7&^iJ$vSSF{*%9+H637
zNNzjL1bx+yVASAv$@yy$`SNepJt=B&4Ad1E2~@qB#_kr|O(=Lsw!_54@-=DhF}p7C
z#g_J=cW4V@UQx1L`#c^@nr#Yq<GsYT=+!6LH$-N$j?d}{bF8=Df1cY;y0-}=vnsqz
zCP;*sH}Fs%b>c3>;fed{lN6FG{{FM+l&q*$R_zN4D>p|Hv^j^p+)l_eWo6Npze{xB
znr>GHUE^W52bA0UkL=q@29}B$?$EUv)x4qyh4a~_9k_dRv$j^Y$scX3nP~<IgfazK
znY*8JKPk%0WLUK<*PxX!!Jec7Qm}Zc5Ua=Lu&lVzH>O!gMFzG7M9E|IUpa;F68iLr
z$ZDiK>2LG)i9j*@1rt#Rz5wBviPJ`3x|6F;KYOaw+=gn!AUS5XQp!r?AT}b>Fw-D1
zG{BB!n*)hQ8LbdGLQuNjKN$>dNe8_!{U}kVv!fKY%;HjMXOH*7@8b*&@TaB`@EY-o
z=x-nCR{BJrQDOx5Vdy5bk<3*A66(9f9y2IsG}zsh?#}PV+=!yDf9b@{Has|c=Z4E)
z1WgG(+@PTuAGfAQzz}jG$QUC1w?qgrqrFwX<35I;qehpIPva)gya5<XI6`FRa5?E}
zLx%wn7nnkm2T~%%f}wm#h=$@-9b#fM>4Pv>chC?SCDX#)VA5@YI71Dj1L0{f<sH@F
z7Pt&348|bkB_Eu{LS?GQiM6<SGfSXZppzK$7mO))MBHp9DJ<rofN3wgcOX!i4ADwS
zmE=KkTebTb%&#|`m%opF{#)PHi}9!#vbJ|wac-tic%n8sZqaV}R1Gp0?xNBb7%W7p
zVKBrMV+)?C0-hGi+=(MD5V`=MSj?%2T;qY0j02<HE5ye8g)Oznx=S0lS;YyC6?ROI
zmPJm%&Iq7rlqU?jrWs6+2w*3|RtH9*+phJ7<Ed8a78SJ&aDXtS$Y;tw%8NR4FrYfZ
zu`saX3TUM?y-Imi6PvUoe_V)12weCaLyILj^^)k?cMyf|#K@?7A|L-5&o0|)UM*3?
zt;=C`-cr!qxzAu(*Qe05`SIY@rWC~>OO9~5tlP8;)kzItXw{sEO3SHI80Dz4vL2XU
zclvmGX$Ok@24fB-XaK7_|0pK&$q`a(mmxdmk1)wkLTr6E>Wpn5dn3D+^4SwR=FrsQ
z6joggXo<!JSO?^?alg<SFi;Yn#i<&PKR7phx?x5}QcFX0<{`uCJA@eBpI*RvVHU?$
zan1^DX3H|HzsiEtM+>cPMGRujVjwd2ozKM0=Nry7oB89r21~Yk$&I7$CYUqQCF)H#
zB5O;h0k~FOyHl3_`^!;q^CdZB@Z$7yFm)uxGJLImVFRpVL2|}7VP~yWLgx$)@#UWS
zdFhwJ|N8v-;Pj~W`7>C=f+4w4A5%t_#|myCy#cP$Lt;c?L5USWzGNdL7Zv=(oVHnF
zwt?Pm1f`%4`%}RJl?oqoWP_!k+e9g#UH>${nGNa=9iXZbyRzw%w;*)6;#2T}oD-c_
zSQ2BK<Kq#kW=<66zdsz4{zPjw*hn6nlV=2q&kXA1sIrUgKn|RKVn=pF`R9)S>*|8h
zVAMy`@k}3A$)J~v!2-t@+m<O$!s7$R=Y`ZN6%J3!M<=x-{C#q^|M_IQaa29V$D?xf
z^MU$Qt<@h0y_E^8Z1Y{99D@Cf)iNkzwh$d3(`&lLod|RI9+H!bdQN0HMB{!7g=1j}
z&{8np1^m9)8+_|@yYb>+bhVW9pPU{qwFb>}=`6WeQY|b&3y+CTHy&)+==xA;!+@BS
zvf_Zi+RBM72yZdL!F<j)63onJ1hkq@cKxuqJq*nMx*#4XN<U~p=P6>_0+%I$i!RJh
zfzoE6I=sL0;W8WK{}EyRdPxjc9&olO-}(4ny9?8)Q!5&g)NQqjCjx|bc^TcXz*SSb
zx3HqVJAi<4V<*!e71%It;4-|q>I-$r>cW7|K2n)a*89hlu(HmaI$+;CzF(BHWVhx;
zG!fvt=&DKCjQE=s9ivp*wEdf&iVXll&v2pZQW?23m(e?eNa&<Z5)~$_{}g=4pDcK@
z<v<=%q#A$Hn~$I7KYp6A&FZ#GQia&YPg)c!^oiQ}@e|Z&H_-+5z5`Ybfux~0)*k=|
zI&C6-A1c-NFKOf(JOj!v3cgjZ)kOt6^g0)Y3Rm&yBEABn0m#DfT0j%_W?p=^2}#*0
zj{aJ2G&B*6*~}eWys{5&;j5<k>W(7swW|K{lZX#Zg%Hue?G8T-u!Kfp<Xp3Q{-`NJ
z(K@y5B+yZSp2oL{iOdWy{IZm3RRis^OsdmO`Z{}$-aZ>Hn`(BfBipt3sY=<WaT^b|
z2d@xWGF2?xN${&xVWIkpv{f)5^=n~4YBccFIAbKel`(udH3vysXMk-NTY4}<2@HW^
zDj6%ZgherS02^n|BbZ{E*BE6RRPoxW3O~7tW%c4ZxD{p0u;&WAn<ZU}SIf(zKooyY
z`{3wssn|7OY+{|Pstd{#?v9gsk_^SMIsz`K7f->mR#6*WN{*+Ru{M*13)Qg4RjC4)
zg=&;ECnJ#QcBik6$^y3Rnlz5r1V1=nqjkJi`*@A}crEr3m5de~bghrqlJogHd#U$R
zc9Pju|6^uvMFF4X`oUe6EzM$oyweOi0=4w^K;uEZYVP7nt4oUwo+(`dO_{#_7Cgt&
zS=KpfSjjzWCJ_~0r&mpN%s#m`<f?zpp0!+}7Umzi`}}+kD5L-*CP<?Ox;yIv5kn3X
zwcq2;6IFuZoL+P%BPSPl8^etw!AZY0XXj9?)H0B)q7SD8(gNHN{bq*+K1N>T<dg8Q
zAD0>dE25&Zh-2n72qkLC;!!qXbV6xqONNY=loX=sfP&o6*M$ls-;TSNnogpL{)91i
zUt6~zdc6dG3mCp^gKr7mQ7ng&)nZXEtZ5Y@M){+ItP`0LFW5SnsMnB|hCl<{*G7nn
z6#bEx{0`ID5Q$Qxl8QjsKH1x)cdQjE!GU_6Ps>O)L6t;2K&{P6SvS5X0u#sp9_3Xs
z=0=NitF1YC7n{o&ksFt%<;H{?^rB7lzrwwM+F;u{t%UM6Q;7lwasb75iJPMIxwsI(
zxMCVXfkTq<iLSxj!v|9wj<5QEIi8X`7+XnVr0>B*w$)L5hwL<S=Cpc4!_aRC=APh+
zZB1W`bnogd2Iz5Ki4Z>GebE2Dr3djyB9>LW8=2AL*L#O^nab4E+65+;+D1QXlE^%v
zLQDO@lS!I9A<MoebRi*QrTgAZuGBCcwREYVeospUZK$MWT7QYk_dEI*t`R=nWmXK?
zJPa$MiT`_Tu&dGE)PIpW`SO}5lR0vr#KW1U(X&jeXAWTL?3Gj0OKWxi&;?U=9kc$m
zy4*-QI&&!;mMnuW3>mE+fu%EzDeSQfs8fh@Wd21Qm<>e70}TbD;}CRMA{&BEn^?J_
z<p5PSdWzp*OqmygE`w4($^5Mze$%fIRe=v#5#ZPThSN`qYBAjR0G>D?nt7@4gythI
zCVs=H5?_fj`avQu)2TpUQuH0j(LiK4xX{w}p?HY5_SaW4(||%x=md12Zc9VHrFWgN
zBF$-97I&}&Roi-`g=S~e)XoVknck2t;dgFY4%JuE?RJJKEwVZVv?4TA#O=!{Qxxeh
zyxbMkN<3<E3!<u9PcCJ%J4h2VLADYfCGm}6R#g{s3It=2yU%Snz8OG&D5~R*Q&Nco
zqMHY^sgptRUeO9B=rq8JIw!o#Q|-<M(WLnkZ<XEM7!!jya#N=pz?T2lbo2OSAAu1N
z$+GpzD^Pp8e^T4fnlktXT%CeExGQ?bSyvkxC@LI`AHOKL_+lK|2bZR`FJC8d3tax1
z(PRXh^`$`GQHqIVZ@>inhEZ2X{`x7Y=BQWeRv&kJ1IP@)puY%|=gKok-m5z$T68!X
zfR9#cTZ8=Sx1DrCs(Wq@muQ4KM0N3zfS5JQiVz*B^9wUZqKg=5)el;vv{><JTf*^B
zH(zKszAS=sIPt`-WE^+EJp}yR(3f@4?GEmMS2;LJ?Yck41+J5(lO$bQUw`@hFV%ao
z{=&wlu$Lobm7^cO(5h}qLqYrXiBroI;ww}KxM0{+P;9jl0I1NGU+3(hN=1tS+};&J
zKzY1raq5nO56|pTOubR$ReJm=431O<^&IKka$hc4f@oBI1Vs(~((&>GEiRbxQj7Pq
zS~RMm%-yLQlfzq>F+6H<Vb;i=I3rt_HL?X~Wa`mx@$tB8&bje^(xj4e^DzM9?j9c=
zoveIbH8@j9Swi=X11Xv^P^=J4SKwnPRw}GoB)!T|CZ#xX0^*9~E5QQWrglk1n=0#t
zru|1H;uiDIIZYnuZe;F?@X4Leu2A@J<rh2)l$<#d=QhtdI`etAW$;+!mJY&wPU#%L
z{wolR-gwTg{l(qKhW@?xkKau}CH@GcJh=DSJqF{BfA7ry{LbW^tbgyx|4F9>^Z9OM
zS6I&epIYtks{PQS<*ZqDUg+Vv5$ZW3-|$(!2f&er5T5Fc5uqj5#^bLnA)&bJbh||x
zRMmBw(H0L@%z+{vbmuR6wspQ%XEaH4)=Em~Nh}t`2|?adkvJ$5aFjGykW?`A8+f)P
z9m_(ong*8%HqwhnSBiss0&)HZcZ!{(7mw1*bW#**Hu?}&qiBTI8^UZY#(*2fc8nT-
zosn+xC|>CwAl_SC$6$wMfZF1)lTrv05DaOaoZ|(hj#<%9ICt>Hq}BP)|D^FP-lMWF
zi5D@|_Y>WP`2H(>AF*ALDM02!RBEbQ84remMy9$Ej$5Hy$<1y6u~={+XA73al4=!~
zD@e>r(gd|`rd={)FUh$+DflIL_)koEsSoK4i@Ebre;+j?F^i0@<gqqc={Ok<lh!Wb
zkH<;pwPZtrE7|SJH<xM-uT8Ra0^&g{d7ZJtLZ(Z%=^MTY<VIaA-fJV_#i?gJ)k9xm
zkR$gxtyVYjlcuP*oby)!Hutv(C{wqLN$VGvH!Tk0u650lnfszaz`<hP2(7J!9V5k4
zK%MAMKfz)-$d6mJ!^~+jTg5JuKi2OWT4pZj4}s4`@~xAMSS0tu;Nu&_Y9R98yP)*X
z0uCK|e-_jy<YCuq*c`6hs|!>-uj<Uefud8d=+rIB<A63GHk^K1xz8&$b&BcM%*32W
zyNl8to;Cw)njb=w>TXUqJUeKy;_%t%TBMl7)xr41J}!Tvrk$57pByWE+)>vm7ONPM
zjMEt_b=(qubNH3qX=PoYM~<x)j*A2<!@6Mf8+WGqt!}`)$Ze#eXea>5Ogs96Y)Zd#
zs2{6V1#?C<`5!QzoTWAGViHYZSQ&x==iK2qp~6j~r3;E)z_&nHjGTGO$Y^f|cjS)N
zsI9CN(#a4p3Phc~fFO-vXFmjALN*Hnr2vS(O?@_&fkEw|Iee<^!lg?OhHXPLp25A2
zTB|C9YvZJU*^RHRNd6wFv4bzyR%eu44ituf%!VbD)*r{0@u&k9YO24fX#xfXR&DWR
z(w$-;X&bQZhwaYG2aP2$lmAs24erup^cghj3Y;%G-Hr(eW`s9%m+{=QHpjT~j$0TK
zYp)8xuW+?RTBZuGQe|+ztI9Z)h^m2F3;DH<ppfgnhVIbQSzVRWX3}?SF{$(l*^=Cf
z)g)VUTBVa<^yEHNzAhADObgt{JTpS{WMd5*enTS#2T6#l-X{?4jjC;(a1bpsEPAaD
z$EqmLj2uymVh#bK0yiSJP>@M-tS_|p%Hz<!=j-Cwf(^PR)`Gt}lFiGaRq&=WiM?z=
zGzh{{v<`&(fUd@0EC$ElzHN}x4-YGA_}52cCN;mppwC)4vNg&fXGR9!Jrbu<%spdR
z?|352!nb6|9&knq;a#-cw&v$_q!nzW7<QXYcQI<oYntpv;UoP0<QSX)n1~aiW9R|b
z4Xl@VPkW61VsjyDY<XFPEzUe+@I|rr8A^mUSeq^Q#-cb+W8o_U3h{l31*BQFxtw&!
zENNxx9R~(3Q_>GVPZlw-CZZ8}`{~un7)iLe#4jESk)KEUh`pN6bdy0lqI9SeJ2Z1u
zXlpO5-iz<4r%WJzK68(&=1?cN&QzEx%Ka_?#(%}(_{l@bhKiZroMEHv9QAUmRfr4f
z%0y$@*a~b&o34c&q(w}%hMrAW6%lgr1nN5GzGJv9`LxRqXio5?psyu-&Os+}t0i3g
z@XmM~S{Y$*7E!nGpOCkb4bX&}V8O==f3Q_fsnFJzHQzz+uG+96rr|zBnjjuE_0no(
zF4X}nyi0de;GO@xg2{nF6AS-=L~h=8hUXOB1x>dQ1CuU%c=VXkd+HM`q`4m|3tfq3
zMFTUYVXMw)wG?^<GcgM0+$qUX*jeF??N3Yfe&_do#8*3vEIT)%zygz-*-p;4&^t4~
z<%g$8gMovib}@H?KD-?1V=N%=G1JmjgYA{FFVqB{JiJ@Bcb-QG{6c3S6KBzcW-&gx
z;9X1M1ara=3O8LHXkk34c6yW&G&k7dEcadMi5jRtR@DKgWE0T2WSyf)aQAq}W)w_I
zRP>;~vQC7x+jv|1yj^S5w@(yiTKa#A6f5k{;_tt=7K*Poe*b+De$Bt0FAnejOnQI*
zhx+-ymrTmkt^KzrpN~(@cWX}d&N%LNntwu8mJU4j+X}Ic|D5y{#qnoxaMA62og~G=
zlh+@YpS=7;|F)7V)iyOQWM1e4!tvwvY7T~>AoJP<GT-4Dp^t4xzu+E&c^mm(Q2wL1
z08z9s?+?;UU%=+$i{mn)a|WDXq6~dK0u*DQ)j~13T2xs0S*b9$@^pxaXrHhD2mDbl
zliu9C(;AwxP-EmZ4bMe0sCmkcq#9S(?Vx)L>JO0Cs2@CmfQJgj^?@>S!giuX?Bo}S
z{RWhd3764PFxu_3^Z?Vp;<ybxKA|4D6*LT7U3`vV)5AX8yJi`63S!Q+@TV~omqy_8
z=DWCTQImpXc+n;?n_tA&MFHj_m!PhKsg>~O$CXbc59W}0nMhJ*;UqQ03Bn5tx|P*W
zp5d?lu=dG{n^3E$;A6wf@*zWIP@(^@WvHvASCIKPs2cRmhBNv<cP6^C?-nJ{((aES
zi2<zUtxcv5@hcW?QLPn<nW|GdTh*ST<MY_N&k(Z-lTe%tAoxxC>rO!tU5W<N?CEbA
zU|_%D9pN&JU2GI~K7N|t$bR4aEBz`=`sk4;TJR)08vd%j?EE$_AAew2d0l3lrnyhe
z?q*B!930Yggz9xCb?4yX8aqZtmZQ#K+w+^5IJBnhYaMz9K5%iAwyPh~FCsz52h*;b
z3S76QVfHoF$NaHwSQ>o%2p>Q39gPnuz4~Or6>Yc;&}W@%yf|+@NIq8wZBq3V*8<a#
zho73j7>V|D6k%F8=|Ci0^(W)tmc5Y}_fqf;xWL`G8t#qLxHMU4N*KP$NgV|l?XU%q
zR}T6KscU{IplYfF7%%Q~>m`)rYL8eE4-7=D7@yVp%MSV&->k4qLn_=CmJ}U`N%YzZ
zg4;116Ij6%0^87NFmslo)|QyO?6*YfgTRHwIRSJiyCRC6Sky+9O4#1Kyi#-~j_{QN
zE0H-uxIBLnb>(JP%{hK0pzDSkluDkH`C@K)or(cJPzqo5{`>r2+H%bav%ihHo_n2c
zJR)|vnWpRj_k>MC{vK>VR~AIle+7&<dn>yY`%A>UWf~;AC-|Zt+;Jv<gB#D^9=Y!y
z=Xj7nxanb176Cm_`$Qi<{qXK<xaW<>{T_~zC$K#j_70`4OGHln8zqELLP;BFvrzi+
zL?=h@rwxDY0n0o)X9HvANZl_W=z&Bp^99YGKv}*~RIx>EeGb1-Cb57&M@CBnPfVLr
zDN>EVFGnH5psL<y0+j>9k#amH_PV8nM%K$d8?1>SNS6oic!odJ1VW_k7-IW6tx~2G
zWN=z;P$(TGG`}5PLN=I<8x<I*W9^U^`>AN$Q`Kq!xB07PqZMtW`+gnx`iPw7X6Uc%
zPxaLZ6>!XI`*oYVVIZPs7X^=i(X%J_0^R1Kb}aD2;bR-2X!zVZ?ngtd0kyZXEXWWX
z1dF`$MnPVdb{OcMxS4T3{fRg#`pg`aW&GzI!=3^7V#cF>ajrq!qz(oKZ82}1v@q7W
zZW4l8sYflZ)`ND#M1PloFx&v@I(&N0Ea|hDCP(!uS=EIOhMwg_v(4G^qDdhpCstLr
zjvFK9#lLl=^_)KL{Pyp-ZQT-u(3+!wfQE`S${j>eUSPEOO(&0iKSQ0?IL5EMt-f^n
z>LN<Ns2kwx1cEYPD9sFt!90%ocE|?Vphf^g=&&_|OB3}N=7_cd98j6^ou}hKJDdc7
zu00bQwBK^{2S%C^8%$BMw<0#DK0-`TykEh+kK6qMN15glkFF-*7HL}Nq{A1Av+C)%
z(8(Rm%$qCZ^L*q8c{%*?DeU<L+xfyB&g}1Upt{qTcVKeA_bL4psy;3tD<uk$Ciub_
z#+oJ;F~Agr5>SnuL9XMAgy@Mu;R{+Ce*v680IEZ)nmUV*y>(fLRV0YmD4-PfR~9e)
zR?<7H(6y#Ya2;M-eJ2bSB8l0~jVW5;y9hF1=OZG=d%Dw(6TXURMjlK?1zOT^vS{p1
zdKC&-B^9DtBt(U6h84i8w<dF~L2=TbUM)eVZzMq9Z9NVC*(g<XUD$T#^ny!AeLW=n
zYm#eN!*#J>xZ&9W5Nv0<*J|%uH#Mo(BW2qy{0E<FTE0&|(*3Q;i5glr8lXB16u^aB
zbCk3mpt~JO2fnNz?t94WUE7{_`n~vGzQKf$@`cC?`nXU*tyUe{C{o)1@9LL{T~WYy
z`r&&?XQ0eTO`UwCd`w&wrD_(_bAw`%Iul|W4jcbUDo2XgR|)gegJBWmF<vUHx<aC4
zXrzad6Dxrh)<!mZ^_v_ZY@7vQh)lFx;2Tm=2&$sIz<5`2QFM1joXZoFR+mOUuWwCU
zGg~&kFY)~5^)2f1ZkXo?Jk$Buu@VFBDz&K!kq7kAxgVPH72lnCVU4h3ZsS)giX@Eq
zThZx*lC>DbxluS#oXg4PkG5JW9GEvJnJx~z_76bn`A{EzBf6ue`@&_%-8j~6#wn-0
zdDD<p2QK~MMa6k+3?AGDN1;~kPxm>Eg{Mfnh*Ll4uh8S|CFA(V;t?OwjX0w2c9LmH
zzKsA`Id2X|gL^7dH7PPobY}N8#aO0QvJLSIY)1q(7OKtuW#?)Uhn}xB-7=(=)u8g_
zZf8>X+>D2)3jCJL)S((s`sFdh@y{rbdN>`tt!Wf!3=-dI@d12rIZxKUK^XRw^>0kv
z@H<8LbO(bQtg30%PG3?{D3o*69SWT8O?&3?fhL?0L3V{>IVwuGAcvO2ejmhSKSP!E
z2j^N!#wQep{)tIeii5kNY_T#a1H9JZKxpi)jE3Ro5qB9KUk$&%Vr*@LY|KIX2*P#o
zL_nWY?&SCWZ)m+klT}zr`!djizbbs3o1-S|dP3aUlH}?!5N+u6*>!rw+5+n5<MJoZ
z!bf3`xO-%`?3LWVKmX)<n;u_p#R@>H8Dho~YeMeuS(D6jCMf(Ir>c;d?)bijQ@-J1
z4^TTD{bsr4kH^#A#h`0~M4iM}pA;)eD_}BU3hG*9L-?%MoBryzcFr6Aij+dhQ1O@k
zVitSDuDedV&N+KF3X~IL!-4_siU(T7kDL)?adD9b_^D)IqLdk#83_>x-z9kgycR+@
zh4n3kZ0E}mj&Dd={Mv~QnhA2#SRvm<&rqB`>qIa`ot|NcIeIzzbS45Pl_K2}dJ$6I
zc0!UkvS5Y9&!E1N6|igzwOU>c1KByfkY&y-q?D#yPY#JJa&mnSr(U;<q>+qC@Ih$B
zUnt17@xbb6**(q5DJ{}d(8<;32XZqUFf5?TPJ#x5v(9%h|JW%pfuic{-}Uw0+6&nF
zB9y!7fGjyKrn*);PDQQ2G6dUnW}97;qvWzXYe?Gt>a*E*Zt2ITtQsE=0Hf_+1_m#_
z7H1Aq7Bqu;^l;$hsVg<_)TuRoBrvHW3jL>B3g*k*E};mnI=`p`v=#s2Qi-jAgeWAW
z4}K=(oH-POyFQFg59o(R|JdQCk2{}f&iP~kiYv)LWB0)*CMHsY9=`#XX8+wQdkGZh
zt#CpjLJV_=rOh*O>VUdfWaVKk#XtT{Y#G3Jl=K;7h7N5`_ibL><G3FrRhhoisoYTS
z%Nb8Sdz$+x(}mOwjf?Qg7w<m&5|*7Z1E58Qxb-G+%#ukJQ*eyzm|UJ*9Ec&%a5w>O
z%WElAzm;KGR7>V3)E9aG9w#UnkJV;rw)P*TEpc`mq0KEZ#YKFqsZQxFc!^%;*UYYh
zDxBr!JW`WsJIT-aq@ASNocupLm7(Dsp{yQ1|1cyTPhi7L#e5kf0SC0vF&t0*UhLV1
z^Hih`0~0oyjKm5E$R*07@SOeC?V%Hc8QqNLA0!|H%`dt+C9R<0fiC}NX~=(ocEs7|
zlpiv;_di7Yfo!3fbZ(Q;KR^ZQ-F7P24*oAD{`7q&j^Lu=adyN#2F7)o_yXdHPZYKH
zy6{IP4PJo+Fcb0adtt*$;BCVj4-=oVxBnvuP8`s`irCB_g}?IugA`@{Aa#i!Tcf{7
zMP{i-fsR5Ho`aEo80F0*=cI%*OwBz+mB>3VKuTC)thOWx-T!c}%Zz?>97QTWJd27-
zkd+<Xjz|ay*|D_MihWxWsR3mP^Rfh4D-eOm&-@BhMmV#8Vup)snELv{7ZVc0<F8_J
zc3}EjdMxT%33O3311L;RS{wTYdP*C%FWH#s7TdC`W12Fr9IcTxb5@h(kT#c{dwYR_
zmx|>+RYO#OB9*|81t~4(bdei6VJutbCrK+ko?K`+qJA<gm}{@^*<52}CopnGm*Th;
z4<Y~j90r9_w`CC9>Z-4Ft{la=kro%nHJUU5^584eR-2CByS|}iP#KqKb|yi<gfrBO
z&hv3%UhqhVdYJx|3Ic8q9jjrJT{ui#3_auK;UJQX^^sO<Yssug>;Xy0*jxlYwTw}R
z&%s*VvZrizLk5KC7P*WW?M`4NiLMb#?t7_z=BwzlA#^`mO4p_C#lv^Q(HqkWy)d7%
zq$K$+Nm`QEOn;I*uZ_WP&ZPxjN!&=Bz;^h)0ft^duV6{%M%EBw=s!1#m22BzRMdW2
zCBHYS6zs?yzrjLYzy48|ZP`guO0X=zv2l@6xoTCm+E!h1gtv8P?2X@Lh<NA$z<`x7
z585L`OfBmVF&n_e_5{ILE!{i9Z62G5T$#_;F}^6xJSu<tWFSB69Rt`q`k;wC0h15~
z<qrA6+GwQ6;khHqtcD?k#;SiXj0Cet1fNAXE!^1r;`N}@FU~#rP2sAA0{m5fEbaK6
zG8ALK0Bb;$zj3Q2<dpJU>P0MuHWX4^IA?&HBic%|_(R}%20{NbLLp;47y?oQpkU(L
zj&;^<Jqao&`=(veBJEP)vmmYYn0^o(>HG#E(Y<0>n3M}-4xLfFNu~}B;Kxw==Mb`|
zanvm>S`#jzcO)Y&Gf)p|<$`_m8VXr+Ik^la?E!Lq2^(c?3Q8aVq2#G6wh<i}P)KEv
zA@$WuD9(art%7yo0U~865~rA=9v7#sTG0HAhANY2Q}}{)#z_w&Sd2y)srJZ{U|E0+
z10pnMCEB!Zn0wYky1MDVhIi*ZgS7_$o;%xORcKM_#{=r|!k>jAlbl)Ad5HSVl$sZ0
zN?7~uwqnkPwrjOCfzjVW0%bh`hnck6W|vM^X9RU5KtSV}3`~a1jr^PC2B`a2WKs&W
zI~IcBZD=b@T|(RJt5UvU44X2QpzOR9rnq#oLgcK;;aEKzAb0)M42Y!3)RtDi`%><l
z+1ZL)`I|j!H>ArX*`27V%b|GDK2u(9z4EZ^dW~h4Dw4U{)23#P7aG0abPu60lknjf
z%P$(U16*q7E|6)lq)A2qH9Fs5d;NFrN;)Q|`U<=Q5)IO`l9<=9>*y*&oq-t>&<0}A
znjNvXAh(GQGkOSjV6F`Y>b-;v=;JXqL~CH{Y1@B$B-|XN7H{)zy<!VlVPou0HMCl=
zKr<Ib4d2uk*5x{}k9}35ltI3OK&x|knIOoit`=phYCY8r1}TleeqJH{7!T4H;yb>y
zL9+h^?v*dY?&PY|ho~Zh?zl7jg5t9;alb<r^SXw4k$&+cM<xY)0Mlx#Vi(h9uZf3G
zuf7UGqNBfnLUkrPX|BZe7ljdzu;iU_!fZ_ouNjJqZ)~lShKqJ_aZyeht#xeQPM9<_
zz+!ciKzqz^Yt$gR17a8Puf?695(kuvq2A3v^iZW&S7z{V5;Qi)^ot%vWUa@)=NWiC
zgiRbV@gqk*3#a7{IWXt|<oX6xf)9b{_$4x{6A)DL&AHfIZgNpKYJ5x2pztM5J%fR4
zfZWUy%)0-~%KXsfclp4z2gF+T08zTtB3|3!P0Q>S?vdRxO9aYwSB0`sg5?@M4jJTf
zDINyk8(W@!VRd2SqaZPbabxJ7Hj}1jBg|rNNnwaM*5;G4<fboF(bg=;emGJ}$tD0=
zk29<S+@oy4&`C{@9E?a;m<(I-SlX?Id^+U%^KiA}XTA*1Sdax5T^p2bxUnbG9PkVo
z7&wViGagA^s0x%D!==pq=8B_=ESP4gG|NL>Gg1eESy!8od8$xx&kzGhm191S6yVjR
zN-@_5C$l}0xh{p)JWII}nFEftF3F0(?^B{-zbscGjCDS$fqeSQOZxDHXV`jqs6l`d
z$8B*ep3FISf}I3PT1=7Gv1Yb|s4dOoI<u|iZ(E2Y(7}1;Hy^pNq6pw^RX|3sp&i%q
zf*ZKVegdcHcr;Go@E7Mk&&|&Vm=m}U@~%|x3eC$h@flsYX*AV%97A%wSglIT0?}SF
zjyWU&_?Y}kX?7GlK9@FQNV7S|wnZ_N^Dzz1!HId>98CJ-O#Tv<KXtHQ^axXZ35x6w
zy6xshb0}<TchW^1xQQjKuNOeav`^&W`NznhvG2bXvGe(dJu*?oBp&fjHgn7O(8Tuh
zJTpmf^-6tRpmotl6{J0{Z~@6xQJ-O&&d1ItYiOl*ccVb7w1}UJ85SR!BL<)6!D#J!
z=7doDeo(_dC^Ks9>m-IWqpgk_YrmOPlJQ-V^f7`B7%q3N0xmo~@PKn&cibd5e<?oU
z<NcaM#)wA;BCH)8H+J{m7IgU8Mg2lu$}7o}m8V!1+ox#Q>U7v{R5khZCy}{A+;d=3
zjo`{TSuNBdu`oEl5pMrC1ShJ^;!gB5r8f#X7So%~(B#cwmtWIA%H7NN9gI(h3kMGv
zGzbpybdGej`U6Rj?m>8@z7??CW(aSjI7UpCL9#n=Uq7JqMSkKA%EOZL5fh-~e3OV`
z!_a`C#3A&lkM?}t>+dG*HAN0n)Y{SDLX}DsSdYNxJ%#fGi2(Y8TXI~7v#pSfT2ctT
z!m~wL038EfYi<`}6>cmoQ8Ts`Or9I7{hW?F&2))YEL}pUcp786*dF(~MkRRyU78i{
zO^}04F#_Wd=*{1MhOHhZt>1q(0}$9xXBvJbHiLlUwcG*_PMYu1=a!=cypn~*cUWBD
zILv;9+qU0D-PZC7ptuk&DRRFyQH|u_TPv%%75gZm=IZk@1Pb-0{#_~*;m-oJWAT1U
zjjDhB@4OKZ+^E~-HOBZtK=ngVp%OO!pX%RL5`SHQWfmr=rd}z1yZSxPe#Gi0Ne!@5
z{;Yb_pI25lod_c_TyT){Rn<eYBL!6ed6zL7JD@ojCpa&h#G>Mbu4r0xEo1DtF_($D
z<9PWN!KGUD{YwFt6(4QZp?PE1IJGsVZjGs|F`c(oTlQdv`(1#c|4_e9jc~s~&+2mP
zdV)M+{|X|I0VYWLkTIjs8}tX`LBG=!0jSu<%AQ9mlTa&p_`H>L$MKHFTkxhQo?LDi
zTi8X)!NKnWl;iHOZJPtX`muZ*#}o0Csylm>wD#hwerG&s3Ga7oKB5H--ZSQGV97F^
zVG^3-SDtLCuq-HEq@Zk!emk2dg%y|bk-h7=Vi%j@dv2dVFRe&c@h7J}bxr?d8<@#A
z*(M~7Q=~0Z_a;V==IdXQ+r1qk!r(6q<`d5Pp?+xVxY{R$YD_;|68F++He1HuQk|M|
zIJhfP2c^R5yw2hXZ?V;qj*Gy`4ZoFNUlm?HVyOVURF7+FV3Z~D>u8*5On0PLiRb+b
z)&3<jCAo^U1UW@B45&VV5k;xXJAysu_=RYm0@66nVZ0S|k|dif%_Og-Sx1-75l+QB
zfED!p51zk&_=rAuNCO9yMyDslBia1dpWsKpA*;m?Ad0j%z>j8sJ~>MH+hAd{%Ti7v
zX7744jAJC4sih}!l|-))gk;Si1E;qy&Ed-b{=*dg{slnZG>09`s%QpF6>pu2>a_I4
zq5AGk$47={HukHSgKCt9HG49vd6QXqU^1(DlUc~0j34vHC5{zQ)SPrN21Dil`~QKw
zeF!|GfuY(ueXu*z0Zrp6s3-e{KLy|NC&i?^m>}((ChApcDS^&-s<Vt4M>F8jQDaAB
z0|cWgbO&lI;L<fpdXpYei*c)k4hp{*egU<wsy4`x6gAr%q2mjUv^7a|{4rD>4hNJL
zk38@oo7jd4ho1Bo?>dU?R(u9ULWifNJw}Y5o0E%9^Rv@Rj;Xj<2VFatMg8x`piKOG
zv=lhgk$t1CJWm;gmu1Vn*)=ScA88mWq+L`JG9@sNTg)j0Al{)N7>m7~c_TdfpF`^Z
z_apRNJjG&E*pDistUQdBe+vlJe523#zETv+j_(Hg)S<OPthnhIWdNGNE8J7Ef|3}-
zd(iYOJE)Xt9Wl_KIChl8u=cv~$7{a;$`#FQ7|QayOIH0P_w=<Lg$+F}$Y4<b$nj57
zvr)tlN6zPY9KG`%EaqO@Npn@Fmd4&#8bWbNi}fJ4q}d~&(KJMdi8?4DFi%!h+l+@1
zA$$f+D`u7v%Stk0nQPF66s`JNq#vEWY6FYUV++A9E0`jd<qtXNlJZL%>7~$xbVyLl
zXaS~2=~w9Qfns8<Xc}L=C6SAlD4gYd%iNb>$y{l)i&k@`(z<U98pxr9?HBVF#^QY8
z!RclJB+y7OI9Q_i<$!grv%XlQe07)3*eqq7Hu#>Ng7o4-2^FU6eU$|k^Rbl4*FCa1
z$DDSiv)Y+v(t&fH$xtjqy?BAquFe|m>f=YdI%~A6j~eawA9Ot<-8UT&*==eQ+h@*-
z2!kxL-P^=Ocp3(v?3Ve%L-dHFzRuO_46|ZpO*S6z04ZL=$#j_fs)He0O6fOCJnZ+o
zQ@pJ@kX_QbQxtxN6oU}$lrA2;TZVDJ9uHFy$rNk{L?T^^jLgN{n>@9rnU#bJSE1nk
zry+@9LkW+uL8J&9k|5l(`Oz8mitx_4RH28A{mkP?!VnUH4Fd~RI;pPW0<VpYg27<Y
z_W3U$uY9~vaQ79iYENOIojsFV;j}$8st56$el#}(qOp?3cSW8m$Z=QHefb~w;ghJZ
zcVSE+EcJ%~dclJ)hrDRTpgG7WTza}0Mk-EelC|cbjciHLChhUi(5@C+WFXJIE=B&K
z&^0QrhVPzAGLx^2)x?if3my>S!up|9Z9L&_GRjp$mIx`;Zj-EL(NlOf-flJCHcrlG
zYDXWBRy%2R&^xC5*h#B6Z-Wj?T82^8omzsyUC8*43$zAJ3NP&y`B6V(;0Vyb>a9X1
z#nzw)e>V!-Cwse;(z4b~pr84`JBz1{IT$y<_L=b0*obf$P;cTd6F#m;ZlQA@*%<4%
z9jm!Rn6*!Hp1l~#J?K}Qih}ct?Lj&Y>BYHdX6*htH7U;qP>oM0Wd{7>+zK322QP(Q
zJjFZ)$p~^+$5%<JQ*meoXDIQ2S#VU<@5T3+N|xf|vsaqQI;`)wzS#*Lv$l5E4ys-#
zDr4`}=%Y*~HSvA@qyVPZaB2Xj5hq80si-pr$h^Ax8#(suUl!;7V~+TdCo8V;wp~2X
zasgwmF4&e15A682h+!1n7fX=9Y+g0ccLDCByGX7m%DL+N4(t>H+0LB88D9|Qd0IL{
za514RbM_B1f*c=Xk!sTH#yZXUZ_o`_fS3u%sLH2XC!c)RN$wW?Zgd|dveOMJ_rY0$
z%le??1CfD1iH-t&&a-Pb)+T2_-PXLjF2h0E(U~zY84jeo8M#?-;1^KAbFfcx*auu$
zcZ{2p23N2|J10!{CYP5T2>EWN7R<!L5&6OT)X%_D;5Gm%=*R2A+!M?<L5~|cnRZAx
z|5W{1Sn&K;)N0^;%WGmO92$nAuhLKYux)h*F(0?|qsefA{X;W)6rbjGB0Yomped6#
zh95a~3_scIG5o?Lkl|;_A;S+Qjf}`j1|Qs=Rs`_=<z<Sy2GB1|uBKAQNfw3z4i&n?
ztN4WNc<C$@?=g+Jn%fk9pm}fcCu?H+6Wa`G%&yPZVrp-MP<BBlpt{W*Z$r}36=62X
zR~*A>z!Dlbk^WSGhjW0uKZ8lLtsnLj5trZt*~?+gz%?pOV(uNBEz-<uP2=F+&<&fy
zCWdXMp?gYTnZVlE;mj}cH|ZQPm?$(1g>^k3FX*Qx^Iz*1io{niPpOLR#H3;000H2A
zsX#x@!M=~X$ku@aqvqlS(1&-BE!tdH5~_-R^QA(vsDo{q)q@l~R8Fs-d2=4%bu=1i
zj*-bm`!&^|&IKNIJ8Ha;ue+$}{ChL0#U_4z4@r)}{u2(F=+r56t_!K7Wj9i$m5@{m
z=loVBGIkGj$fBhv#sn5}F2&_ivlxuja6yGqvbkM#PIRP|fg*Pf!Y%n6+QR_F+_P|x
z!gHs2twu4`mvZi$BOZl&PHyo+)W^fp;SU|0HkzIi)&Hl%1klkDr^X%_eKG)$=K46A
zIUqA|6uuu$VgS<#)A0wvgfUI3D$cB#APH~;HxGa~j!vE`rT{WGC$%N@8<dl;f{=jK
z6t=xT?tH`aJ3yFm(mwTe&M}U~tYfK`=Lhadb*XZxxon3IRHQ<1FXJ`hG$25er|6<X
zT*p!&JJowS$aufe==H5sgp;5U504FB%bL?{O}e1`ieri{pfSlGPEt2_rvN6*;u~0?
zTl0zNh~6xiF7TNTFyET8IKQ&x=|%Q{8(fd#h!LQhVi63cc$q*3PksNQ(Goo_<w2sh
zubR4Tf=SiXw#frDjq-DTtB&!Na}82zwq$e+p@wp=HcqW)Nq{zItumIfI;R>60)DfM
zjN-n|+^Xu$wo_ZgC}4ueNh_o11Wnll^S!XGq@IYm0Z{bqvc(dfS=w#t3C>27UA(%4
z`_BZ-7^v~eY+E?-uPFbL(%t6XQ@~$=Sv|-l0ap_&;(f!|+qB{KU|t{RVlXr3&77(g
z>MV#~-1c)3O`ugyv-rqnUBoB%1+QQ}<(byAA80bpp%)v7jcFv1Z7utSn`_IxE*Lo1
zl)n)Txbs@n<w~|eHCF**V!r02JfcyZhc4SHeVNO3OOaT!Byplmmcu95%uyXlEmX6G
z^r5z+7R5pl(g5mLIIXzI10?X?EhJc9o<|V@@c~O-UY92z4Sj;S?IE#gH@WYOr$JIi
ztzD-#=^>t*Nyg)hE-rAUuN_aBiwl~V`!+^XaKy8(UF&!kX>NK*(<S+TfZXUQYPr*Y
z;P$6Nb8fvH5KVo^WNOI;OSzqHt2scLW?<88R|95F!%cZL>6OXeRwcbxC9^-)t~@|I
z$R@<i6QtWP=!yb1Al$tB=5LT-e~142@1Slpnl<Y9<&y4I!yffPLo%3DmKTRY@t&IK
zk#9H5*i55sv3myBBbKlh0lc9BGzuGPfOy^;o8Js$xIzeX>V_DYtQRzm30!@6q{1~>
zn}c0-#_h=kI+`GzdYvvIhqI`DbkcN^q)Shqt-mz&8hn=%$<mHfox~W7;Q9lNigm<I
zOyw+AQIP_x1wIM7%)GPpX6||uR_C(}Qcq1BCT~tMpD8cHpE{`ejJaRLLGqeXt0l*)
z9^G|rn_~Ryw_pLY)RyoHlyZ)UyXlu*#r_rz;Vi~9KOc}1dx&E*obFF>+nj@GFlr{)
zYUVATYA?ApL=NgW0H9;@qc9yEOX7ZN({}=Va4M$7+`O7&#pGLe(HUHKiRGR=Wan11
zV}89Mf|FTg*Pn&kL8s+-PZ)j!#6hN6blY=m2!T1-_Mj7oxoGyswl$xrdgg8~)zoa3
zTM>njEILV@xz8`QXN-V4&8vBrJAiq|bBOnpIaYS8bbOln1HSlSV=urg6<Fj!Uw}l3
zgF5zsASWFQ2RVQf-${qvcxrPCt7d!gjZWZ2<G<~s6HL~7(Yd-puap5?j&o@t>EkvP
zI%6$n`u*qTU<4%b??20M&8k_jdi?<;x3>O#U84l%kxUZlq6IF@{PB}4ATWaao)%c7
zm=08WRrvD1|BxH`eR%(6Gf-Y{p(&0pOlhG!=e-Lv))cwLJZi#SP0HoWp_qjGY{5H&
zZUvB=x#mG)-mv7L-07QzlEZO}=(Q08(FJHN#`lW~OiwgwD%!r#Uq}7F|7L#E4XPUw
zmpZYMG@`9yFwC@&lD=JL@6$0qOoHYPhKoUY<8CKagqzN%r@^)bX<$IZwb&bc>vX$h
zubuRtoE|T=2F-NoEV)=JA2gPPDr3oS@_!x2mq~Z}nZk6cllGa$^O=V@LtD?3K9x(I
zR`*Tn`J%?;#d)chPt(qAVyq4vdHZ-Yb!k(Z$KD7Zu52UFZq~O|yH4tC*ljkEzZebf
zQgq54C%qxL=*7)ul9E({+ca885o0VcW)WmPCk~MaL8gE`v_y`wI%ACCNO8dQV$t8f
z;@mh%L2*ghQhBYUkO8Yvy!aoe$$IH#JZ`oN#YEDE+JI6`_$nT?y0CbPa7!TaYu41k
zT{Soml>SIMUI3y-W3`{nl|b3o`*D}Ui$JtWtBbcm_|Y2}ooThl2Es}^zD?La0-ULn
z5u9vAWe}M3l5u;`f@>#b(G#(#e0!<BzOWMe3lgrH!jZWleletuTbVP6t1~iE3xi(Y
zgg;W~JjQEO4R1J1(0(t4B<NtomjaNEXwbHIxJYAK6sbb#D9F`TB$$I;^@^$G6~m=R
zFeOhAxKNW8d7@m3IC2+BGoFyq`WG&yC?-|^3tZT-ZXT@|I0?GAG9QI|qT}Nw*w)WB
z0lXm=kJ-F}mIi1;OP8yK<&YYSx!N3v`*W(=HUf~4WrK+zMHU6jwt_(?-5YaA0-D^?
zb_9Q9W1<U_1<zE$6-ta*)k*bCSZ(}JT>5{CzyID^m{<QU;*ZzE`~ST(FZI~Eh1Z1z
z{`nD28YOcQFkWM0(;o{^@mOoDA=z8+cEDP5Wuu^-Pgc!OX&kR0<~1W_Pr8MIt(?@w
zeSnlFw=spp&8Q@XE9l7$#B_1EN^aaM)`5G9C8napluAs)Ij|p^u|km$2f?vxB|Bp?
zeSBJ#Pu?OZfTPF-2yuw0<`Bw);a`7bsy%CA%N@K{#eXd<FRp`OEG&d-My-MM-LO@7
zAXH-|TppvoqOrqkd|#mD{Yy)Efwq|LO2R6-eoU+0i+>uRn1vaFg!T_wWHNZ4>fh7v
zQd&1$)dg4Cj(@6uI|XA5%j}$w5_F?x;HWtLVofTy>XmC|%dNudc*R<NvA9&Y@X929
z8C9TZ%ILU=vOud;NVouD7~V^C_q&W0XLWS4Tc*Ss1h4njq-NeR2~h+!Qrg8k@f|p9
zBJq;@ak&fLKr#HQ4hq=a(eWU&EBHYsS@Sc$VsrNg-AO8qdpNvYXkbu(YcSd!kBVLZ
zCP%L)E4e0hN6_!dU{|%Hm*SOy_9F0_?`^wxUYq{<d1t?PpADOaEu!HQ{net&`%O0j
zhF$T1>hI1g>}`OkLBR{uI~Ez!$~%#Nbu4oz<<q(DS89WH3M|!V^ERB#vxDMo%qC3Y
zCIJyTLF7u>HNbAE*vfDN=CjiXBDGCtpJ9Vf2DsaSeg12EIdjkQ&|4OlJ!T&RoAmf~
zUU<Yhf0hgVw@`EL0@+;&+479Ly!^${xN9AF3Nw$OvsJ2|g392Tri0A2A(D9zB8s_D
z?{uog6SYCr4m1W(g9$!JJ9mT<Fwl~dh;+3Iq0qRXIw9RL;X5_PIl(!zMQPC5bf8WZ
za7-J8kH+E@|JwMZrUyEi)XAR(@3rW&U^ICkCXq5H-YMNF*wUKlfhd#8nB&fwZsu&<
zolMz-QAf2oo`#BB-&?Ad+G?`6Sjkdhj>zP=Z*|7755SNAf!-$07QN0cUg7)vVx}C}
z@A1r?P$F421p~MK5E$r&17i_cqRhho6f`5@#Bu+?RJE|o+yDH<*CRs*QuDC#DeQam
z$7c*R#gVrlEgL*mJC~P$V^aIR4{8H&moGzsN5uxD;H<o~*&5oB$gR{#4>0aze}7aT
z#jTF?$gxoc2i?Ia%SQpaQ#+xSn_4RZ_r(ljs(&m3YJ|G;+K#^Py#NH5F}!_zQ{-6X
zwS^>fxUoOnfSCmae)hrjgrqa3pd{{3zke?rCs#dbUTIxN7znod*5KZPsS(r=?*Utv
zNlIoeAP#1+QE*|x+TZj*DzPD9M1M2TvEf5XDK9+bA0|o?cWR+ciyyf^B(Kq$BUU8D
zg^oF9yS#^Q_hGX%Q;b)zNPB>5U!sVfwDi2<--CQ1?;HLp{0CQ~Pq>HbAMZ8oCVCKp
zk^%}m;rb9<L6^pjSuP2*nrmIBCy>%#c6SAn1<)L&Zm3ng@g-;IXd6~CL&it2W1tqK
zN#}(=_-6e$D`N)O93zW~@Ya+8KW3TQK<wyb^aPtQrWSIOU=h)7oF=~M`P&P1F_fHl
z_N=g=!?v2;@?ZUEpjWo_;}t5J1=7Co4v>8Ms2A$fe97Mg{59`T_ZJFh-ek#otoY=K
z`JgJBr|)vQ|B;=p^GfKV;M=cM%?u&4JkE*rH^sWx(9Y1+^gS;}J^D#cE}o<skmpIR
zj8MQY$(;`3+Jkr!YFu@0)t(T9N<H`=q_O#~YdYTur+ya$gT>JYkV5sc;iEZD2!<oA
z?KHt5NAYxK({!>E3@P(Bnq|Ci+eOsz1RCu$(aauKMl_Ad_;4SB%kt6L6o^ow>!sFs
zfa}OB>*J^IdX!J(khy!+scr{n20EN@|FmVFoR385eCO?4G}qG;9f*k@5iGvQQGJ0-
zH{g1I!RD=tg)jGCN`)^|O1y$s(wD{HPH|^03>dwJ?08mnyU(+#T47vR8V7AX4v`a*
zk#EdF)LR?KA^LX_e?AJ=&JT1emkNLBhR8!9>^Shy$~XoQ#!-)RtWjJQ2-uKuAW~T8
z7<c`ZO|WAeV@<pkpuM%Dr?jP16&tCEwnUjoH1?OPYw8=`9u1Umy}|{_5q4RM4g0N3
zU%Cmsai)2s9ng-7M`KH5#v+|j+Ji~Ar5B{g5u$P7R9nt`i=ldu>6WYgWb28M7lSbh
zdFwgE0EI}0EA|ys4aBz+VIRzGx|xYEMd2|X4oRgIN#1oWu4kw1TjK~VHtXTIR~r2E
zhA@By?|s)%+CZqzg{)vlY?Pyn7T~O5Bh!(Fj@N35H*gZ6AYG=Vp90+uhEA{S`-!Oq
zbExVKGc?9E9ev7~&}I_bD#$}8(?$j2utl5pksZ|Cd@IK6)}M_)oIg7DSp#>i`&`%8
z9I}VHGQM(1@|bWk3^uuxj^IweW7U8B!u2j!%$od<-mqVES6}|Z9h<5AfXYi;vS|_4
zE65}H_lM2|!aMZ}S9(!D&xpFJi`Zy388>f8ko+oq{ihh282ifJcH*4+si9q<UR+#M
zWpdpzTo~05x}}Iq-YklGDQH+C%NKoT=Sx)p4@tS-s`XnYx{J$5yHSova!QAM+1$O*
z8*>^MQrhL>&|)tWElIJF_z^}6Mix*2<Mv;vQYDIek3&?$SFb2@lMV~R=Dd_@i(dcA
z{fmSP_~Da(tKi#(g+NFgH6-ki`tC#MO$y@AmspWZWXPZfiom#rgEZ}2bV)m&H=-E>
zlEbm%P-~~oF)R=ztum+!8pf1L@b)61uzwkTF~~&g6-SG%s{vRPjdjDFOK#*h9Y~Pb
zN1OhH2gg%{&%bdUJ3%2k@uq3HTsui9-GuuICej;V?Ebi~hh%U&+N8M5Z<v$KaI5Sv
zQ%DEhPRpVL6hZ3rC}_}TLVlTimOsi<h55=Xs~RlVi|^6f;hxVd7{<CgM3zLjoncm!
zSxjw&&8#M|s+!rm(`!vF!KU{Ic;4{FxCB(?BMDqOgMc-P;5AnxCOqLF<A?Z;5V4OY
zR}$Jplrrb=NSq__IH4dTl-opzQS_)9BG98rKjRlV8QHca+zM2!%24JEFvo@8<H69E
z9l;=d6hk6Ihjq!K`9Fe!NTRh^#%N`WEIFIsbW*(j*EoIBxl#uuv9C3D<`vb$R>UK;
zxgkk2Kdq}7Ki8!twsQ?nRd*;$e-F`qYA8OHhaJtN@Mf(N)($PuETYcG4ccK=@c@vK
z#UKfhbr;LrwbjY86x#`y7@`HDI#13uks`%KF|9T43+Pp&7%<5kO_IgGLKbp^Z1MU@
z8Uhyn;8Us))T2l%wzl+$E4PP05)4gD(UYXM3=X9New@TdNG6P|gtCA6qLP4&gwNSe
zKVg@j;V~?t_>Q@DeuUtWK7jIifX(xV1`!L#l__eH^-6xs3cf#CDTueuA<wIOI#gP)
z%O`k&S8u}{IK8G|j5<zs-4(f12Wyv!u+(s+%kYRO^OZ}t&79H0cYz$l{H)1_oTdZ-
zn`8KhYxr-U6z94NO`FG(J0BtBbH89HBli_3ds&TY^Pyy<f`U_ViT~E%_^*sGZ^dV$
zo&N*&<1fzFAxFSBMK3wyrqATCa%J|y5sqENX`*8!fORxkD@&y2$U#4IwtxnuB9u?Y
z8DK-<B1R(Lzw;<I{~pN%x2hhc8S$piq#4e1`O~6HU3CP#g=CaWtxTTAXvGNe)yE$3
z)ar~dPAj9u*M%o55Li`mxrkb_Hc_rr2;9eT3UHAk7YGAd0?dR2uXC}M)W|R^6cV>d
z3hpKtx#+6P=C-M?4`gOVQ;<2l2~>Onsmn(0=-k>#ZtVoR&D5q<(7ItDa!d<3jK86E
zJUS<FiJT4E5)OzbXhI1Qsf|Ek2sGVHfc2G$QCTGfaU>adJUy(l^Ym)NRnKi^LJbEM
zs-l>*gfd!OLC&LaS?K9p$&4XU@+8f|M9MkTxyZTbSiBS^5-CaQ7wkbc3Ul1foD4|3
zypf4nyrNz?L5r6mkt-vPV#g)<Wj#@>6DS~Yj-kQlg>2SDGKk1YSVs{sAmgg8EefE^
z9Y<Dj^qI15R>`e*eVhZFcC+PaVX+CXgBj0X8_oBJI0454hB_EH_lIZQ5;t$I(6cuJ
zlcfz4G1~i3((&IQh(Z((kLjeE($0IQa5YZbenEJbDMSIELPhC|Q{jy|4#6>)4^DA5
z-gb+gi5M_E0dEcL%dpYQY~T|Vl>ai|4ftJpQa9U)FZUfK!*1Mk&5Uo7sc)uBNe!|#
zYJPtC{Jh(mTY*6=cKXfkq@`$-Om+H>C|)S=OdH&~ZiPbYih|!IUH;~H|Lr1a0y>vd
zy^?yyq=fX!m=zV}HuK|lmqb*5n@yS{d6x<&N0r@~@w`1tr_Q%zYcRqD6PR^%LpRja
zy~s2IibqSj>dI5wrS2a;Gl!;*F{!c%Uf#vjrugzBRtG09(>lKjSz%QPYvS0v<k{ij
z&2QlJ9qX)np3XFz5F3DlJ_EZ&1#&I+z$SddU$J|Ct#mM5YxX;$&_R!=$X+0(<`_r`
zuii9J590dTS`;t#Q587=aBf!XrijP;J;ykm_b5`EjQz-{6(v9Ax!xbn?d)&?0420H
ziuzX%W{2QmkxkiJk3u>zC0hwVP)U2j8;A+!ccs0?jxk80kvemR0+TufG8eeTK>EO?
z%m=+W3<~&uWCG*qhGjU64Uv)rA}xAV{7xu!iT0ELu))`8JrElD7-i8#r;y(!h*Hgs
zLLi0j=^-$34p6Wm)1a8Ki&}n1oG?XPOFw@q{oIdxN&54~$DjL(dQf<9(rE!U#DCJa
zlWuo^bPA^6>KRcn6w#*PSO$}osbBgpAVT$rvb(Dv!_i<o;FmfOzWNDn^y*LARU8bq
zV=6$mpbprAbY}349`TELcZomtM^!RWR&R6waULWNR(>B34oon1D6Sp9!6~iZO3ymu
zHjLH;rN$~%Q3^&3Bo6cr&++Igg+gsu1DH}g9Cl#^5_N&8KR}MbSyDgM#gnLZVG8ge
zf$9pgr}S`zJ%84g*qGuKnp=i{R-h8qxP=$D@IsQg@SXoQyMsP-LLqt8k6sL0O2LES
zJCgFyHxB{VRIOO2wUbO~OuD&!*zwQ3L{){Q=Sv1!yT#F^^al%=E>ryms&MEH{i-1v
z#NX{W-M{N=gMawgO4Jn%hJgTCX>))uqqBrSi)sV|T+q9C#A|qzs8_JMur}&HScif7
z4;w@&7EMiU>=?@6E0{)a$Zz3~B1xdUTBaS_B(!vKjoXJW2tuj3kuCGN84o*S)X+iu
zW1PD>sbvD8Q^mL|G8cDWo|`R3?ocNYyRQDbfOpg!xJ1!fK~J4j;s53h23-I^Q~w<_
z)ISiwN&Pt~pW++(t0Tt2tNr7~N#kAZvv_w@u6{nK9eu9W>gs8`yu0-o+d4cgADyW8
z_;7Nz|M_IQaa28~=kDNYWf@0zg-1Z-B!=+}(@qy>6kot|U!84rcwxDK-i5!w9VD$I
z`N#$JyW!vtP8dX^g1@6!uM!m6vX7rByErWqF*Go+uehP<fc6zpnnEZ81!tXJ2Z9|y
zOX|PlY42jtCA=U$Y2-sc<F{s#XKjK!o&iEvGT!U-%l+0~d|#OoT*Qn8hZd}RojxAL
zd+h8;(bh2@q*ih@O7O@iJY#;3%y)Ghnw?(UJpf8I73j~55GJQU7JU-76d{UoNPs>C
z9-~A*p^=Mz&}r$R`1=T5F}=6v<}D7TTNU5TCu|e`s!yw;0rAsGd=G;iui(E>+<IHU
zgX>&jK63+jrs$X^2rQ8D5KA`H8R~YU&ZvpCQa!Gd!7*3h#~RgxmnQ?=iE7L~eC`4W
z=(_{5k*++`0BM~#u;5^DGa;->xV?#pq>YGufZN@&<uq7;h7RgLsm~+#+h@v;W&5D8
zQW}`>u;WdEQC7-<cZ`N8(3E(a8k8fjtU{ufovX=+hoAH(3Mcc!<zQ5!%ZuWf04^fT
zHNpW6^c_9vhenf*Cl`!jo3xMc`Ly5pI?=c+C3FV|5dQ`K2|MnO4QYS@JdWvL(}!tS
z|K5swoh~6@)o7|<ztdAlp@)|O2BvYpp(CR%Fm5YaWZcEm3%B>l;1nk}RydWqZY5x+
zL~xvRiJnm;z+i&Ms++{46Y~fWp3KANG5UI<E2ljrT|$$e@dpAWf#PQnpS{Q1{}O5=
zT?v23UA#OJq%uBZfDlsCMIh+fzkJsL8=J%&DxkFy&+&7tr<_)qkk?<a0o;E2`#Htv
zIj}9ru>joZAD@v5!ZXA2O-pk?C-<F{@LJW}X9~U92Q_ZBup_kDOz9azZz&#0A2E$3
zP6k|UcR*BKOA|Fi4`Z2<+jxkO&BY^{vNQ!Qe?5b#nTjX}m_NBQzwZe#-xFq@($kcl
znx;vJHbi&bxYj~^fS3plG$g6RyRdKH>?1TJmzNNf3y)%70Syv`kXh((61Vt4l@w2n
zzW*FS7Cc*4K4M|_g{n#@(zI+Ib<^U-;e^)Kl(vstTD~~$AXV8Mq_zsbGc}y&nqpsV
zQSpRDooB$_Vv_cW<|v<Qw8Elc=LNOxy{Zts&K1NHmUf;i`rzxr`Wf((vrXnpKxT&P
z)J4)I;=c;|x50T^Kc}%`fr$=p#iJWU`R(N1pg%H(N_9)A<}AwgY!g$HTCN9wPRMPW
zhDvR9iK!b8uqe3AUnE338D8cylKXrCd?wF&e(Dq2WLl;}cT$rnC4*|{c3|qajR@GH
zAwVmHv+$B^C3-fy@l;_>IhA;#NHL1Ri<G(kHO46r_ln%fxEq0p5b0hfftX{&FrYYX
zKK>|6q-z$0fkdB^IFPQp9&R8t0yJ|UF|gMhl`~{lf6_BAWh*ItOGXHQaH(i)2ftHh
z3!qAWFxE?l*@X##o^)_SOrH2Ee^NxZ{;8U;5>-eD7y@={nz-7z>d>V?fxI*CRXg!W
zvAI1Q-zb4Vv`ou)E<4Q_uO=<M)%%2qR013Y_5xx6MeMLO$(165#~+f>05^)UJ_sFP
zVbw4a{ELJUAVid+LtCTxZohA&iu~q;7Yi0`S98bkpsRguj_>)EK2s!i#}kE|T+65c
zkS=I(8)F0txO{2(j_f|DMUzh*2tCJT)yW*(m_ge&x^n>B;~Si;{%PU38($<{GZZ~H
z)i+k{#n<?^IU1yCnaKq>M7vN8@Kb9<;LktJg!$Qaq!^QNqRCt>&d@<4Qgi-?V?rrF
zTQG+W0okyD0Sr;>HA?wL6JWE5ACV1w2Jq+*)O(sAvmyG4X$KmG8;O&;;Vn^+HHPCv
z<Ev(iY8eUq)Kn*sh44pHhAESa0BIDx6JS99Xb*^M$G?@#xCylAqcerJMByf{Ea9WX
za-}_5OMIEKJc~|Lqi+$R4gp=ZL6%{&`rACXK_B^imPau{>`ovCIAPl%Wbs8boHC}v
zzo~{Ex{cv9l@VXFaZ0-1KS6NPaABlF8W!m3Eg^ms!5F!mC@6$`Xj;eR9bSX3i#vsI
z_%=bL%xHz-W<1!Eg#YKBy0|73+k&A6AfbtsfodBY1kMLhA4<34XD-c;$c5}*p0pvl
zyS@~l;dpcrU%@f%(rnTgmlQ-k*CZhW`$fEyRclG>gr7JB2aatwu@pXns%BuU1S|l@
z?YMiX$Bt|T#qPkt@ega0Lp_Rkvbxd{4ZE#j8}{2U`ug{7az%VIT+H_d6HU#p=3u0F
zMUYFNkd2F+*)nIE8rO{2$Rf&-t~Nr_6{B%?iMYX18Vnmf61(DEaX{j#q^oWSWWZu1
z^P1g3n(#M>EqXHGQ;a{3506e(KCj|p;ItLn+%=d+FJ_9EnYeb5(;fRr=$?g8`g}d{
zCq>TL2OX$yS9g3#_n6}AHA}()=rA!e7V)1Uyc_;mr9UfEdYTg3NFiGGhlsug^hd88
zEi24TueOQE#J?*Fm3H}nCu;N5A~T@#TR0&%2{5~pt2WE)NBoV#H8LSLiMu+pPGxYv
zOT1|2{SiY~=0iDc62+VOQcd)yX_bb^f==8WJ+YSgBnbj>=?%IDFT;W`xKpHWG3C^>
z>_UNmSDFu8SEoYY<~6oxwT@UysrqAZY!e;IOGLD&^Pm?=71BR<8*gi$w`-01_KAAh
z+JAfU`S|2~w}z#5<>katIrT5Y1MH8Oruqz)8Awc?3;?~ROqJ7ZFeb^&fq8*PaX4bq
zA2fmHM}&u+aPNU2vA6UkYWM=33)c#}@h%%q#&qjl4m2v&yn|}4&cvRgZzLm)qWWaW
zvr*-YGQy%biVka^KT`oAjK}MUrmilUdlHu_qUBh>S19vD>pC#f?~(la*-k_2p-$o}
z65xwjq_(_MTQ;ti`hH5pdoq^7wa={8p(b0RS0Km^?6_4sLitfOlobf(lS{sjD25ej
z&rlyj`iT@ov1NrI^w<V>{T=ET?j=IBpT$qbov7i6rRL$MlM6c&Jpw`hebxm(TN3TF
zsHFNJSV`Txs+n|HH6kW&3n&=V!<F2o!-v{3o%Gl#l{Q2<fOXdI;M(F<owU;9$%OzM
zJq)KI{Zi{K)!J%yt;WRv^`O%?yKF$#ZCeo+gg;njPG7d1bHrG()iOIqFTF=mDHgkH
z>cO_tWYr$j1vql2A<!UE9?@%{q(}8b*Aet-ew#&pBmDpiad6z&MYb99@6hd+604)v
zi^<>=L#^T!i0d&*O$CZ5Yt#|oJE$M}OzAD7R&xbz_Y{Ap`1=wr<jV`B2Ncgd=qF{g
zeARsO4t&`$0#KsG;_k4GUoH|VF^(rYs2ZB6Wp3@oirpPgT8WX28a*XGmM>{1b&u>H
zqvi5ET`WqG0RSj9<#(%ph~?PhhEUtBwng*u&3FiBVl?RL)fkTHbp^=@BjoL95{7;#
zEOKie-twuO3>CGUP(|4)vvKY-NDiIoxqHO545{U@QF(jO<6+r3UpHe!n>rA`_4wCN
zzJ`SL8m4sWE6t|q6X#|!*K4hlkZWpKWc{+dAmKloNnDr$bdo#fbWIh5Rc#bO+)d6^
zts&jXG^GcNV2<gisS1!*B5^PBUOFo?57|i?iWkp>Z+gz&Ykr+0DREErviS~)V1+ci
z=GQru^)t|F*4U876>QZc?y|DA)D#i?hRGO21d^dqOg16YzvW+St}<Crubr0{P`+`b
z7yZ@>4MQZNgArcnj&x=vl*&uSnbTuAo$DFMTuVeP>Eu5oy5k%?`autRD7iJ63B)`a
zTGM6BW+kt{rFXLz*jI$<ooXbd^Rq1QwWmYXBO13Mm!Uyaw5|$X#yRYkf$?8Av1Svi
zHW|7yaZH&3drwo>tAG(;S)oM{U0LC$3k0K`B8qVf*&wV!OyNY2L?NX8t;0dOCtJt-
zq)`gQk_kp>`Fa1fjr&8F39Dy0JP8WUSaB_Xvkwm=9`lgeUnZUjX`%H`Cz1jp_>?3x
zI)(?2UL!3hs0}qGo<y7#@q{da8%)BEjquwA>*0ihAR1H%mp2k^5V<)d^3ZXiv`t#T
z|IDfg$FYo8Q+vvxW`h0n@IE>A3k&Z9qw;1YwGmEeBX$&7x`tB50+`7vEh)sQ5L`j2
zW&Fpu8sL$VPtu0l$~xJS-MpxhDB8D4H?NG@IS!iakr`^NJ*l2F|3({LmX2DJOXo!-
zL>VlC*G8RS@7IfmL&W_XKX01<mDT^?Z=-y=Upg+AkISV-xx8Ph!~1eM8dXZ?<*2HD
z)~Zmt7OC&iUTLpf-ix5r9{dxPB2^x0?m?yd3jD<9MpUYm%RAT}6^gj!6DqS0y+Oq?
z6fEn1qcRt}G)?b7_q#Oc1`h*99F^j7xk*DPmv+=|XyaK$%_+LAVF&n{KAz&J@E>}P
z_}j7D?+6==c;eYURkL3!TVAJE6{vb$v(vBRN>$A?8`zzCK^5^e^s@!84{5G79>TY%
zbSRgoL2I{Djy}NWD)j>GH?T|uzxVY*z%a3CY~_%D>Sm%No^~Xrt){n5MR0-W{mu@Q
z+`&rlPaVf+_Y%G$=)}8RDYt6m*E)p#(9>1R_K4}?SKTVsYt7y$)#mX#Z=X^Gj<xCx
z;Mn=$#XK_;E0;PI3F@PoGsFgf9<+E?YL?5%dv9<(f?OONLqukn=jHM_{_IrF;ep@)
zmwS((279M5Uj(*Vy?$QP1KcTR7p_@Kbn&Z7%M7lTKzD-*{)TZ5>4d$3sZen>p&djd
z)L&hXntmT*1Lt;as<XGxG<#ENSD+d08=FaJ7-c-@7ChjeOSxQUYV-+@<Xn#=xpd)Z
zoky})uAO%()VxMp(RBq{y{p_*)VQL4mA*hn-Ad^c`Z&ZbX^7dXdV9T!1sGL4T2Wx5
zik}TDcGt^dsgBh?MqT_E$yK|dUSMz^>Np=ewvjWo?!R<w<vr>}p?K53>Sd2Gf9-;9
zl}34=Zj%(ch+6s>)c|1CziK)0^uYc_mxxTy;b)yNzQLYbP-D;TEVfX;<ks-`;TE1!
zeYKCOw_9v)Ke0DSy>9Uk9;@Rje{5t9hC(+hh{d-xTuv$ki_i#6MXgyU!bwEC(98fI
zhEdH-;{)PjJ=0CxN^v2og*(H4<0v}}ghX+FzNAfB#y@B71u?4B`K;IVzkAy_R>WR=
z_K;NwwL*h$Z~;sk@9{w3{ffIp<8zwCC9KMe8H>ZWI^lVHB_Lv{9F(pq?qy!TwAiwP
z@Je5g>lOxUc$)DaXHV?HwDGPlZz=%98RE-bI|D4*5X44J57C<z&?MEs(C_~{hF%3A
zYvA~?<zWT)>?X6thp?7-9qq4Gc;tJ!+5Odu9oHL+^JS;~0DvF?vJ<%ga%}-*XZxR6
z#Pf&N@VL%j%^Egrku5tBx;k-XYhHnxASVp$MM%iO3Rj&|Ot;G>PTgED4RLE>A7ANm
zk-w2rpswFqG<LQR3)tj>QGj-Blxy9p+#$W-kvR2xh^*^d^bs}&m!-bVJ>hG8$2s(%
zy}Hy?FQB)o-96eO+`~H3Qu|wW&v-|+Y~!*H5#zL>@a=$TzKG#*Ejq+~-?r`14()n7
z0)^ilhs(armaV<Rr8*P?tP!EGgHQ&GqHhs=ZLS9w#lt`Nx?Z!F*p6Akc8!pQw}i*A
zga|D=1V^>9%bhd~fL%BMg`*PG$`1Z(_KxPy?1Vw-w2z0=h>AGpy<g#r&Yp8Tbal%m
zWG}3K1;=B1XyYk3?qqsUZ4CLS!|vDc`+bzbEmMmhESYOJ_L@Go_~NP)g4!dbBra#D
zerB6BV^&Rkt1#zco45>Nrh9R9B|c`-z;lFs3sR*~^}sk1V2q2fZOP_6rjpH&uPPb*
z16%Nx$?M3i_<m+Z2RnUZ>~shK2K&4%7YDZTh)(i89@#w?o1a+F!|mMzx`zr7J#l6b
z))Ijcu=k8K&Zv=c9DIzadqq_ef--z*l|jRtrQ^V~MuwB9u`pqW$iEujmg?)_mL1_P
z%&bG`bxZs{h2l3B?LOa<`14Fpb1w|g`v&jh68g|}Vs~tZu%n$r1K|w5?}!>7Y>oYF
zjT%Wg8uyaldWxszcs;VGfUY?H{wyN#ik$!~+Az{>SmJz(MJx^cUDMKn?BTy4LP#B{
z-J|dn0d|o?-HV-Jc@2$RvUj;6k=lC?snNdm#J;8YJBGDf*|Jgz>i?A4*{L`^lC?PH
zmRals1oNRS2XFR?vDVwwrwx89wrfC?GH;~WrZqt(-4dnM3t`?-2J`9@2?y?wJK7f`
zK4W-}%&5j1i1rN6w2SlJkw}9`iG5e_a!q)4-+8Zkeq*pYf@b4+C7(Ro=fm32*X>^D
z3V&XChEqM&G=VwnYn8wyJ{0T6lxhbz^Hi+gInEuv!Cm?e5FBj~t^PxI#A+n~+jL2o
ziN6oc8_~SFIO?9@DYC>(^7vcfx_WAF1-=PaDn5FzneG+g1Q6FmdiHJZAq7I55x=>^
z0WxXjk8;uc6`#Pwwt03LJb^Lb+!~8wVv9x8u{}i8y9Y!zLwY$%@L3b!$NGpJ+aqQ#
z%BnBA(qdxu@9BHHwzDz2AfmCoz5kbDbC`e{(4h+nhlr;3qFF+R6Uz^hP^IdSfJOj$
zR|TGh?&-1MFTO@xzJ}<=TUa>u)!l#cdH`@}0Cxc+J4AW{3!meC5#z2aYTL*SJ1E_~
zB5*+LXN7m`Tb6WPtD?vXXMAQB^|nIwomCYA*li&yLrJ<OX*Kr?xa|g{h|ycZU3E<b
z2{2HzT#Ecz;$;L2cWgz1cx(4rN~5t!BeF}jQ<iiSp3W0OHjyJo$rMEd!)H#x@%vgp
z_!6#U^cBRSlqE@K^)_^)!`Z#9_=gud91-TctB3_9SzlvXksOt#iamUxRX>RPBO?YY
z*DMVzgj-Lo3aKn)2x=VfsFyu0&pzBHje)+E?khDs)se4rpw9=`ydYj1->O2`nLV}R
z%Cu@l!z?PHOQT=Q%-h^Q=5fcIrLtWWxC@6BE2x@OxC?txy@;exqn<f<>SBFY4la^v
z`#|ul4FFR>|Lc)2PW1VPg-FWwpH~C~ApWvD*d>~1nuVC`6?a>)Eb|Ldl68q{Q$E-|
zZIcwLU7-uvvSmh=*SM;fJG?>LbX6(W35##WFnLf+UPX4N%*Yx@#~H4<9r<JpiA0$d
z<8`}=oFj|twj*n7nG?0o$A~3`5db;D8lk$Ec18D*v_m#~?<%sgxU-hgf`ItkB4b#U
zn~MLjYz3QjMZ9HpuO5(uy%ZV|>iT$V*8Z{5A*1Of(f1i*_5i|QX}f5&A!P^7xD@i!
zH1p1uvtv+gt>&LFXFk_PJySn_Q4>fU345ffdKIhsD3j&`77~;uYt_3gcoW+?_gLp^
zHB$%12n(=|>WFx%8S!I1;B%g)l?LMPrqP-Yg)9b#U90&zi>iaV8w}(%DXq_y^JP$@
zC)=<R6K3aaS9N<VssS|EuKa!Z7*C_Nm64Ct98G<s$pj=0H5l2Uu5Sqq59pVlZuyjn
zTV|hUefD%qfAkeav4p5@O${(w|4_CAt&wHJGvv5;q6}X_;#v}|vjolJW_<%Rw)|2k
zoII>%G%L2?b)~^jW^u$f1ibxaJ&l_RNJpUbO2pd_iomyyXt%EUCDO!TIb<qN53=Qq
z_LRyU;t4s*FE^|l^C)Be@v3s-TX@t3Fe~=^l&e^R0!=@5js;IlYo$q8OSGd@c;{4H
zz|bbM@e#mkd@JDTnDqqaXBxSbW>+A^57>5Wks2L~ZvxFVu&JFiauBD>p)=PUMx2PJ
z4ux$>>{D8iP)O5txYNlHT3cZaemioNy0EryU~6Io_kB%k8f8qgN@gZ?y~<|84v{8E
zs^ZW$@D3sHwWzO)l;KX#-aCZ7h#KA*WX6ux0DF4@m2y~5Cd^uhOGL5jVVxKM*cF=?
zF|u7nB=pYR=^=h<lpUs^q16a^-#mGP0c(Rm`db#7a37O5fl(4woUb)N_4V1e?F^7W
zML~=$qiVM&$>|0{pAi)Dp<$`XG$UqN+YTH35b4%<QSmlI3ZG`ER-bKU<WA4Ge7&HN
z=72`qg6j(_t*e_`s9#YS+!w^G3re|N4FHcK2R}R|lqorOs__zu3+S$%1AE7o#pO#*
zYVDulR-cwFhT3<zpN8O7t5SHG8T_*-%wS(2cvShLtt-SPL=uuV0w4BV`FvgLXzMqu
zHFB7$b`(%LxC{a^^<}FZO$2s5wP-Z*tZhhUP4u!RKH}Uj=Ry!_NuP+%5t4|c-qXe%
zO;;w-;Hx~&!6CN|k5or3`0=(kl|<qjq4DshExX-gO*Npjr8>X2TA0;3alBm=3?AQX
z&%$(T)+$UR0xLy%S+$qgoxH>vDE5Knn^c4}x*z3S9nYhj-Yf1Fp5H~z^#<E?k9Cp2
zixx;ObBmpx--lpWm0GF><wI9BAYQB;kQ&_rTE{F^NLQe3XjZq3lt|H{-WgoMJKzk*
z(;Vr`ZO7HQKPTiTIZ&wwzo|P0X#kt!dY&d6ULOPu99~9bmE&BzlZIXNZ*`aBjFt%k
zUCFu>Et71n-w2q2URRz)06Rd$zZq=!lt@SX=T>aS&P1q-*S7*SV4B|=VS=I?1-g1B
zx{~|8b0@lbz7?neU9E(=0u#E(#kE`BVOVXT%ptOdvi1Oc)69Ya)w8uo(yR3hyDx||
zYX52UL+u;M&ffFL>U=`YSG8gFp19**pdn-Ot>)9JD6AHj!*UJju$3C!DV~hV7mZu9
zSZH9m64Z~QeX1$csXkB$?$0F>&vYt29)Uix7ib;n0|4NaimPktMl`4$Au84V?RKh;
z)skoUz2(WZGQfJ`3Td@arlW;2fNsuMpB!~7XxkXD$s_8iR{;&CzD+Gge<}3;&&VR>
zxzOw*jV378t1WJ6E7Q`tXla#NTAR_*Lanr_T3W4)syWo0TG?JjuYX!8ms0Fm&qWio
zy-MJu*PhocNDyf>u4cI1iDd`WNri^KR<tNO(5%9~Oy|@sUOX0(VmLmxRbm${wKS<Z
zxD+%lBQ%kFXKf)6UcNd7QF4b$fzxds(_KZw#)p9DP8|M5>8lw&tXN$WH{vH+!&C2T
zRk0{jfwjL?#0SX|-3ei0<95sLd@6*zjq#Q>ZW9tOI8INqY}OsE?MSpXz}6Z=VK0|y
z%@xnrW-ub@mH^kG;G!deui%o8G9;5EKVfFa_LfBoj|3-s87nlt;i4I%dQk<8cvTr?
zaVK%>?pVrB|DG(r#;i<z76)&rmS<HKbAW8`$TDWf_NOqri4dk1DwcPv+td7wi1@EH
zn#(~RH;lp^p+X@Bb(d<@9$SkXP#O!oa`jxXZv*QQi*Fg|w<y@Ys^GzItkiN@Cb}x2
z`qLVN4p=oGaD5^M8*gXTzoq(wTDkutu1`DOSbod^8lwLbxBlJ({R8N{wM)CVOmb+t
zg7@~E<pvg@S1V0b`_l?>V8fbMBD$@9#pxuGa|tw1_L+Tew$RhHOFMeJ$<Dv+_%ecN
zLjs_q$LR}E*FD|ml3*j$PNX9cjh++?OYW>RvP8BIc%xZ|cNuw_^Oc>D1dPe7spNaU
z?U0_YX3&{^3|J>bxhuB1BaqqJj_tX#6Fk1ds!%C7;`pJE^1Q^G?f9miadnb(H)&7z
z1xYGNrG4t^>}A~%-Zf0SuutB0Otj3TrVT>(ht*j^$>A2rw%2y|H4fc(*)PpvJvXZn
zUA#cT`3hOFHmaW`?v$=Pq(&Vz>@|Nn5bV!T(END%>fa)|3LGO1CKeWU1nG`c-`;vd
z+Do|#F5kg$p%L^jY_Nx6!&U1wK&Z8c)|Ix?$P8Ujt`*_lShZHj`$Dj2<bXosQe^_j
zGr$1hRMk-`)LnjvI4&r+OUj2@xZGPu=gT%kXfmg%qnftoX=L8iT(YR0;aWCXrOqCn
zb;k=z-4(mw15;kxb|71UOSxOcFTGvI#-*+Xc;Jh`8Hx$=_A@oq%C9t}y=mRh`^Ij0
zmG=C=LSzW=;LWjb>T`(hHLz$m4FLkfUF>YIYlWEXq{v^M?by>QJ3Dj%uV#DIazUto
z%Oj<IwWaFRflQPSc!y}unT1pWcdL$Fdu=6hxz6*iyIDmIY~fnvXvP+TUGmeN*&8->
zEm$5sY&aG)?0rrA*Pi=WJKc4pZ+pgK=w+09(R~x{wuC1S1IXZmgACwwekCv%zi|xC
zYqyq=+P`X`f|U^N*NPR*()`91AJ37g%#JYlzH=o-VJ6q%M#+zN50?rY=)6ux6<_6u
zU>E9r&GufO$zn4asY)xVh+Sn|GWsi-aH>Uf5Oma!(l<f^^ip{K-o2S|8%D#**NSWL
z|3R3mSS_bD4K@pfk7Ssumr<kVePhzt(1K@pJf+8D^C;2yRb{2>%Mi*p6?xQpY(%6f
zm}|oJeQ~<?2C@v=RSc^c>+V5S`VkxBJ|YQ-w|rU;`*ghw8c2@tyzk%ba&c)RXpgXP
zlmym0GOV}N5E|VvT!4pyOs#2W9CQGwEbWS;47b+PUB_e(po{He4y}P{Y>kCndsx>P
zv%H05<Du^*Pm9zb0M%witN~kS2&-!pue>C)mFp;%|2Z@a$kiKZr!3?iqpj=>qHx6X
z=rQX}m94O&9X-{W%A6HH53cyRUGY6vP*A_CxYX(etvX$kWCxlR?A%Mod{ccZDATV!
zuPoH{Rz3*94R5n>Q_jpCz7~}R6+>Ygd;2{WF<AuS`}N*cKu%hhg>^@bZ#(`3&F~dV
zPTo<fy!FYaeN<CoytlfOHT{YWcphiyy{!N%Vnj@bTJvuuWP{4f8Aya(8O{X&F3~Ho
z#*WTL_*NNvc0nNpOsC%o4gM((<(=6xtr|oH#2ax1^xmL|{9D66hLc7BHBlolwCgw0
z_uh>g0Y|P~;g-*QSE`q9T<*^^&iz&~evS=lg0*>TZ(L5ns*>-6*mCmb$M6dj__{R<
zDG(Qs0Sjp-^>r(_skbxCM`FMSR~12vS=pqq0TPbdhQ!(5njtGPB#tTGcv<&NrJmKr
zVZYxIo~Y<Tf-}0?@u*tqzBU$;lfCKQY%^E1Edq}9+pgBwo@%o?y0AOiGgtmTb=<}J
zTTI0WLp_QA#A_fDYhfwOQsnIik}0vaO}a87_d$g$1!*q~LSqH?8Os>7zvMngNjYBM
z703S^A(ZgoVTeRKvFOKF`9Q6wyWHnj6wX`gRyImzyo+ITd|%aLqbGTeJlInd39MH{
z90N}Q`*fEKQyn9it^-VHKq+mAYV6TU=mrkx%U#l_;R3*I`m*v2X@_$)j(R8_!UxZw
z@x`ti!{CFyPOUy%7$vGTZtdc}bt>QXGFp^9;WuF-7<JXf#XBw9wDVHmqRS;*wtC%H
zxl@RVr@PX>CJXJ>7SY&PRxNKIP+bI!%M2FoMeRMahviyl&y}>j+~V!=oX*~OTXVf9
zwnosJXpg<;5_~5p<BUZlqpUs71-?JcoV2qc;R71yK8-zifgfx7j)=@^c*SSaFvn<1
zaL608f8~gD^9;QM0!@-L-_S`jX2d8wN+UPW4Pt65Pu$aVDSz29;!M10Y(ey(1FOk~
z==ogZo~8yxGV>s@R1dUNHJ8OqB4V9atD?Vs4ae(r13j&V2D4VR*KyTyzoa=a@`l?T
zIlgDwS831H`r(Z^i0aPn)=&(-uf^aUT1u3~*ZD@XBuG{8x@Hm0eT}t-gj;vT%Hswf
zZe>Cby%7^WG?wfzQsle#BVTJ}4gadHmGkwMW9Dq!;uO{ZZ-7YHpY<ZXtoF2ztonU}
zs$DAyZ}7~m5`*rt(Vi=uXp1lcSB;>oqs+1nDs)$KOpi}pQ78#Tww;Jw`+Uf2EFnCU
zaVVn55L$E<A4V2I9<nQ0!#66iZ5-p}c;Z;~?z1gj{ayAo?9IxqEpoLxyA1rE@&${;
zU_(pH#QuSFx6anvmgc4wcHDCJ)(Hi`Q`^DRBKvbvr%SJ{DUwr)hzA7@1V?j-7Hf_P
zL~W^R@#~i0cHqitQ%Ja_fLcD%X5+QiG;;V!u&H0II`LJkQ6^2mDtnCC1<)b2K1c%y
zxw-l&fW|SZLgN7*^uyCk)3kWUtau}1Q(EGQuaHI>Ys>oiyr{Zi;64Zjb{}mTCY2)$
zPgNQ2hdi<BcW)g0$B?Kv=3&D?GZH!n)3=)IiH;&6z$AZ=1EKD{JCGL4b{8A2F{Z~)
zMlYi!JaETL)r^KnYTt0&tMz<aiWsDe=;1UZI5^}zv8u8opI3sbaZ+==Ts#V6J=!#y
z0-VXID-vqieQ6{9+-uh|@W&GYplMg`$O?ber2}f{ZM266N)TKC3FEp5A7oau_Eosk
z)U3(}9WASO+BfgUP~SxCHbzw^tXni2NcRv(BSXkDsIJr<mZWBEQ;m4_Yvhj0GyiJW
z?Yb?@fag<&=l6N=JbfeCIR(TY23uK>^^9u>Z~<g9ruRPpxG%|}vR!)^a9_*@+#vxj
zhI2VI@M8fN)iygBqGg|8w|QF&L=H5R9O?VXfb33N4M>6k!2h-uuB?ufVxqPjyCNHF
zV#maqxU2cEc3cv1T$veH>WWOW29;sO2Y=tHAFmcI0+-jSv4@Ds$g|?#tGA++JCvuM
z8#!Cs2yZR;6S052ZG4W}m2^8(iZFTmQKh=F)LpjJTffI{#a+g-C(pXUs60(!`g&V&
zTE**+-6P2e{y4)|<pvRL0Oq5x0G6qHix*qX3O<}=f-QX>^>A2mMn<wL&R5%3X!AT6
zA2qxRuxvuTj}^Fw9lwXSq6a-B!&rj?9@=|x;LFi4{#rB2Wk4H73A*DO4xE4#roAKM
zLrGpILSuX{CJ;p~la~JOZLcL&t^=hp8v_T*Yn<0vzv3ttjZ5uPlw)WoBGT5hfzH(%
zVREWRve(~n(28yD>yFzT@qdkL_fi0|^IGWS_g+MKo~rF_qI|Xm0mU-wh^AU|Z<{l6
zo@&x8VSb+ZhZ}d7%oTW+kC|3Y*atpxUecf45okWIn<%ZP<!I+_+j6f+KtzuJN=>T>
zcC(NJFnn9tvjhmohHGF!>62vymrIp>ZvIR+A2Yy5PDoT8B%$F5d#r+K93eTL*nW|1
zQ8%H8u|NQ1nO|O!=-%}?x3-UH{q;^5yf(C;Puh=_0|wZh`3f+Fiq|`~QbcU@Byjww
z-|T8ZJecUzqEl=DIjp7)F1urcYnM4BwmUW)M-}4~lOn!sL!LcuvA)e(Eb35Eoi=U)
zELq0w#u=wSZ-42KO+F99$p?X00;`t0nyStFDCRbW>Mk<jHUzQ~5GZg^c<|ZoJwUBC
z{l#w?SdTJ2{m}a7O}}A+0sO$0<St}jdqz<b-k!@xZBHW~<kulalMC}?<V5TBV}SMW
zj4*IewNvr8=(_T+-lNcapi1k~LhY{uVeZ!5M>m=f6-w&J#E%d-xKB#vbl2Wvbk8-O
zBaL<DT`?F5uiDuSgT_!?ip@UG39dNrqNJ<)`I~@Iq}r-)(ao-h_DBAxaRvL**h@~}
z7KQpdgPj~N827IHR!wsjYb<AD@$sI4i$*`A)P5x0<D(JFM-OY0N_cT^9~_Ret@%WX
zjEYm!i*ohGvZQ$YYj=7av5{C4Co9KMbt3R*{f+$livNkoRBZ1rFJQ*!+w-NUqoUhA
zXa-<H-DDQ!NBR;5A9w(lqG=9HeG6=&j-KbZZ^Iqs3|P9f*s&}(0>~i%>PW1NYReUm
zS|MMsW?&zj{;VdhF$-Indw5h`&4HdZe*tO_(s9luxBm|=3U;tm$zl_~S=<wzd%67J
z3IvvZEqYq<uo?xBf7A&gH^{0l60RGWd&ANqwP%@|?)l?;B9;F3gFV45Q+uKJ_{tM8
zbt*3_t_#qL&`}T@*$@gN&6K^fh5FJ@vJof*1L|$FW<7GROnKj4SISz!5S1My#JZf*
zYA9*~4YKa>x~A0?D+~f2(pQ~s+n5#EcI(t`Hry3?bdpI*?~Q{%O!sF?-pUU1R(9Ws
z@{J4CsXOGuj;T`4&=TmVE{n^8Ud((m=uX4Ax=hLQw&$HTdU(+8PE%0&dhXG)FC(YD
zhvyPXd$ca*bklGUnW@*j_U3de^ziv}I`YgUoH;q@&)P?IWx%I>FNn4`{hGH=4K4Zc
zDCykwh+JjFuxgd^776R2`|PP>`v^O+^P}BoakP=x)Wqp%gxS1q<Wh>%K5Cc_7xc{&
zYl@0!xF~4qR9ma|qMV)Y=j=RMjzy0^Zcz}o9Ww9V7)5d=&?hl+!<SrIfFPweIa!6S
zJZV{BsIf=44O=&iBrKtUxmYt2hmFEhq8I|<zW1mhr|;{^?9Ku99_W0}fnKRfgGL8Y
zpjA+TJkaW)qgW8=A=N;Vh~zmD6%s71zJaczhR^muyc-)zF!I=gOw39ko-5??uu!qE
z+>e4+PUI}NmGOg}QZ(8ogNRAQnvnHlFU{2|dYG+k*;H)o1eeWrW%X%?IC(!9@EcYZ
zYr8rN^lZDiZ3(dB($fmqNpW8&t)5n-jor8^vMJ0+H+Dw4o+&o6_xw1NZ$d^{d3qdJ
z3Mao(*^SQCcySEm*51ow&+r>fvy8Lo4vk|0t?Qdh!EyAX$B#qdoHF_dIRlAlAVI6r
z{i_oZT(z!K37H}`9HcAsWV><4oNyh%XQ`sGnUpST-;cUc%7q@;a=V=TfbRz^C-vus
zp$~eKcpac!IXvG~T=u`O-AN`DNY5n<4y^HayGj-a>-7vf?O2fBSDL8qzkTaO?S@dd
z>4`lcI3mRMk&XF{c4P4J=o%NhF|PQHyjevAxVN_Fe|dX{);fFlCz&r(eAW1t`SJ#>
zZT7ak0OOo<&~x?pio-wNk*nj)ANdTe&^$I;6CDpwXght!i87@cI}8auD7d$)IN4#}
zk*iACQG?@qvKWwvqhY*lLo++c+gYpQ#HeV?brGNaTrF(-M8v7z*KePmpsM5pud2?B
zpb(M?WLp(>v8u|!(y?gh&}-;I2CNqi<@w~)bN0!Z&C802+^w^Wa0WuJy|;PGV|ZB#
zk~G=&mPf`02it{{_u>H5joF3k!GY^@?zL2%)lxL8rC4}gsFvPD!j1-7dUstBeGSx`
zw-gV8HzPJjg3t%lDKBq}{ewCO-BVFV@6Oxa33<^7oAFZ`sm4WWsDVLWRlHGeJv?d=
zfY~(pRu207;W1-FgA;*~4)ydEMjFU`YtY$?C?G-b1n)>p=Fc|INeAwhTMi1>JH)QP
zR=SlCW_}*!VrIv_XH;3(&LSA}={h9r<DSXLx`Y|~^xc)ZXUv5~R|R4)Z;#d`99iD)
z!Fiw1mHMo16KF+2ztGxP$5&0H_sO2tZ>=3+o}S23Ikob`=}}1PZ7f!vBDZ>0by82&
z(W<>62ng#Mc@!`)Z|DFpjfEp&U2uRhtwVp`-sCz|x>hK4H}^oR?A$zcy?8Yz--scz
z(dP3|tx;Y&5I}0t9gg?3-^fIIK>GW%o@=|I{h%V9z4kZ|7E8oFM2EvT6TACl#(u7g
zh!@L887N@AK2<yZdK{+ps$n;uYozavw0(&&R)oj{*OlQ;AU_aLn76wwLHoh-T{X^e
zvSR}5H6S{RV<xwwMF^IT9~+(@Gqy$5r|;PE$`GZ)6Wi(66L$bhPRs}G{wZUaT6PoI
zMM@)N`Sc6w#sFPnbtEg+!aZ6&5(eOhCRW^4MZz-DTsFJ3wsr^Knh(xvu!DJi67-cj
zSJNfIW9L*H<Mv@DatsHPiS3((eb*va1U`KE&c@cbsrzmod5zE#`6Ct0UPnSc6iM{>
zjTp+CGtU|5FpHvuKMUMsqiBl~aMrc-hZ>E^5vo>=GS-F^tPhQf&!W6gIVRen-2Of6
z>f1pk8s$kiD)r65j2JxoZDC^HK*qg`tGU<Nw^y6IP${@^_b|`4S8sGUzKxY|-DX3i
z4@A(w7yEvMzccf(=Ghf(*(od?du-q8F)#fgdlrF@$5%9^)n=rp`pbEZzic^QkmWm;
zvVo<o_F0bo+{-<CY1<<z#Kpw)?|7L#t%G=5r|`38fEeZI?Bb!@fnu65W;!Lz)I)dV
z^Y@R#O#NsEW;!=1Cfzh8M?#oI-pG5HKFSNQGCJ`CtaMIIz}_9iY4O^@Y{jd|m-9f#
z@S6im1I&mSeu&v0*oU6j5d&4_`d@g|0Sp@MW8FYc)U@1>lcW)y=h~;n{bWyVjeov1
zQq%6Ax0JMN`NT=)XaH^a&R3P<mcPSACn(tedNK?3+)F9DLo=QjQR9|#7CHX&4u)cR
zD+w`jUb4{E&=Fx}#79ci0}~C#a02P$vy%re45;wp-G6g2=1uEuau+gTzPzi-L&gp5
z8;UOJ&9wt7%nabf$v&BC%j8_Or7Agdy~(&LuN~wZ5^5()98%;i+V4iz(~<XhhcFAq
zcfxb?R_X+efDAKa^y?$e`&U5+j9z724RK6s`5cqut~;#s+!SdwO$ni_AabIo*EpjW
z%5pBQ-(@T6kFA?`Sw4(E9->87RFzUOmg?1xvZnHSFgqt)%VW+C%k_iEjlJ;Zt>c4i
zrvz@W`$8t7Pv3h@PDts#UWAbe1tP><y1C29wV5R;MWBL_a`Ci=NZFldLdG2~oM_L}
zXertYH&lI0L+mz1p*}h_CziCclb1FTZY)F&0En%eg@pZ2oCI1miAay+s?>GNwanHT
zpL*Ct8D0?G<hzw@=Ny5h-s)A{^pVg*{q0x^-GGkFa`^CeH}ZLT)Z1mGG<6UoyODKz
zk!x8)uGR9TUb~AZXT_;PqC+RxW<Wk6Uf0a)H8Cx_a=mEA=1eP+N<*oXf!S7W@0qF9
zF1jR!>%I5ywY`_@VTo7cj!7MJ9rfNi#CeSu5Os7%QO-AjnwK)*q!y7LEQr`M+TW;V
zj#$S?ta=r*zV{U&xy0DbWj?I_#ECncA+M>GzinlbO)iW0Bch{yvkz8Ix1SLJtwB!S
znJrqQ*-(pdrp1*9TNIW;k85)M!6tub+GrZJvXvvXc5b9^v$YGg843jHh$pZ7n=K2e
zR>ezsF;E-3l~))rYj?{@#VM2!O`Q$n*!r=f+I4#?s{?`dYCo#x7@%@c_Msi_ZfB@D
zvMcOpZC4z<!2ZK}foywLEr8;e`oo(d=g`q%r@lH<JJouN>Xzq-f^>PdiA^JY$jVsv
zqHaCzZBZ<fb4RinQRGCc3AGM^dqA^&#fUM@myfPR$Pj5b44imo`G;dsu774zF$6<M
zl|_UyP!W>x+nM8R$bo&>dv5ezsNQcLn;X=m8R9h7QOJUgOm`YfTeA{6%N!k@x@*VF
zCQ3Gp>l#(Ok?BC%6&Z{uYb$qMnY?#M!aB-XO`Xx1s00)KdggzWQ5n~wnY$Uxbm*o&
zn4ASudUAj%*#0#lS)c9+KkIjvQ6m-Fp4B>wcty9{gnOLh$^o8^#MS%s9h5t+Ifw};
zFzV=VvhCz?*bC+m7QD&Q_G21HbNlf-r|F%X4BHNCLxD3U?;JU41Iccg%hJR%vN7y1
z!j-UjfkcruLe8lpZ$}M}Fk$|H0zo=*Hr^b{C@L}`;~C2t{Zf5VYN>8{S7CZ|2x!x$
zB;OXnF08V}8&{;g-9>zFBL_VvB-<A0H!0b&4(`{h=(J-(cvh3GKWYe$mCy$guACW1
z;B$kG?c=`tc<w&xx>Z-KSCxI5@E@2+SCZg^s@A7{JI#{y(c9(I5M7wzF(l{Z#*u1R
zmAV<5la$kLuCr(@S%&UnxouEu{2qyfWi4p4VJlV+a4*ztkg!#}fUPZI8d}LfMD=k^
zPtFK<ou*}Kch$5Gf>O6pfF5pGMBETyCU&#au*XmcFEemv&X(pd0vhx@?z)Tw`?<6{
zua%i2+u`ih`8&!7B^z#L$r+%DX5$v>|H}(GaMpGT*)4Ng8dri4dw=0$L4lH{7eeIc
zba@%Z8BUKwr^g9O^0UQi5<g!zEVg<fMDB8Y;#4iYw}|fQJRF|wLW@Sx@*pa=F^NS(
z1||>OtOSZkKvn$E*CH9#{$xA%k|ciy)A@@xzUM(>bR-0@hd>IT@##B3|Je?Q@4~m`
zeZ`yLDjve)wS$KyI1Ws3x`#Ta{<}xaj%jD4^wUG^^!fY0(&-&#2kkzl(<L)qbwsCc
zeJjSjwxE?34(#$RY#S>E9otC{Nv7asm!owoVs+3nwty%M)V7{$aRP>vd>(9LIr7~e
zjHXEF{hDkO3~A)DaTL{|S*fg?kjCpG8w6+DF}Q;Rc5YcAXd1;>7hSSLylV1#>&pO6
zVMFTI?<-#$P6TKn5F)qS*pRTMr%}VCdwSb8)dfe3)nOp*O8Q2)$JMo+5ozPDwq-CV
zbM$eJ=i-Wi8cU@19(@o-C<8L3VtZ?34bL)u95#~ih_v~u7lHJB3K?TwDvGPp%+WYv
zGh+<*ad`J3m(YcH#$7f%ADC8E_i){R#qRg-KRj?03?Ey5_C~}rm1P?%djiYADxHWZ
zElnGMg}^~}Fs|g=Wre~hBLpm0oLnf#62xvCbz_EOWkcgbFLdvCM`R?CNk#*iu%c}0
z!FrX*CO#FI_w~I^+(=?CBbxim(x8T9itoXA^dZT^As1c(TTv?<R#;^Bxv*9;t9@Y^
z$ew$yqxaX_xmuE_Yf{$+3~Boncg5;9)Vq%PH_-{$%F{|uZ|T6iOe+JuN)*UzGeUw%
zE1K5d+}8rplveRhkNd*0qA3%{3t0w0%qT`f_^+|UOk&t`8y0rw`Ihg212v@SSs*WQ
zEkC%B=Q3b4COb8GxxtZ<g1?&J0&Jwq8f9vUZX;Q?VaX~q_SwlM$uZuCn(m5*(VJ}a
z_fruT5e9#EnkR3uwwAe3Xi+5)wVn$J%QK85{JcU=oI0*>MBr3Ij*0Va0=3O{Xi<v<
z9>yt^xzjh&FmF#s{<L`57idZA;6p?k$Jk1}>>2slwve$WIO;|AMni$>;mew9H+Elr
zTJvKy*Vo^R=)~{C!jBU#T_@QLZV5^BA^Bd&kh#Zh8}F_BWGfT7$vA}Y9?5)%v08~?
zBsb@PlAObKJVoK^SNs5)M>XHh7ADHv!fPU%W!~BYM8QDNBt}H#)83H`Y6VLjc&#ZN
z+uCg;R|<B3ESe&jaG{PkJM+5XW@=ZY=1P^#VT2(@WW#Kgg)SF2;VXXJKg^hK9Eqdj
z@HQiY@16ZjmB^0Ob#-}J$tDJQE@T#EUkKa61Gw)bWkFKd3Vf{&>F7Sn6g<dlT*vg`
zEIPvN#ueeV5G{;jAsAhaaehm&z!(jr^C`BhHT_C2*t#Vf4tR$gWNN;LFFR+NEcD+l
z^3%}oXR^>A1e4I;5ta7V3L;n|bK%Q^Hz}u%v8GZr;T9jER44x0a*oB0i8^jD!LWrG
zWY7wbh3nP#nV{tq1Wsa74wFfUbT6_-@@zsydaScq_CLg^&;)V^v<a$g%4WK=<!8>0
z{NTt8tD_6crS&eH9H5lID9WnAUq+aerCIeY%eDfG4~FPhhRCinT{foWPg@Qhwqr;(
zA&aN!s*O5hD>%FUFKZvP=fU6Kfb%Tm@&<H(RpGeqaW>3562I%&gZeD;?X?sVd!Gr9
zeTm@zEuN7ruVM0x6Wnvn6LJ=GYMP+W)_`zlJO8{XZl~_4)z>Zp+0s{pCG=`6FKQDk
zYdyBVZF0wo^;~(11?v674Bv!?#YedZV29}nx-(n3ccw{z*C-#7-F$+);@Y+)-$+sL
zblb+(f4=3$*&o-4`-}uz)vItemuK5roTWErT+IYVT(XQpWBq8RdG6rAOV?Gma%n@?
z?29$E360l9kZzgfyLNYGr+X-95agkE)I^+c9CcC@U!mA@p&B4rC{%hb?I^?=6y$!n
zqLXo|wqDo(>EkU=V<}?qaJ*m1a0gPpP?KINOTcRbH+D&YO|#*;IT`l@moMHMq3btg
zb6k0<71>0Yw;PkH@AKk@eWbHTVM(s*mOby(+176_<0QPKQ;N^VEjoxDY|=69%sE7N
zY<;UrijhS4Q+)bX>6l<4kP5>5q?9SoJ~*!H5ocGclOmwznGjJ^^_m|Sv+hT3L<T&R
z_Wc<s-lEn@HOquNYSb@2h#9znX}bw>D7^%l=@=qq-&*ahqgbl>Oy2?~a70>J!@Wr;
zm)ni0?CB)Gk+^eI69@YGJ*itR3`EL2O_5FOcXoe4`jZQhSBMBO<I&7wiEmUy3+N-`
zTkE9*qNJx=j_W|f2+jZ#jL#h^4I=N+C9`nyNKbwYW6+H=diEQlBbPn|y!l5JCtm?t
ztE^(u?SL5zxcL(XVKg*}ZA|6dvkMAAith=@y1nzb5(nVamv2{kXPJJ|n!T}d(jUDa
z)-u&5HQV=kO`5Nn5N$d^lT;_VA;<2d^Ut%YPb5IO=k)eon0DWBUhZlDtMs?-tC_I|
zvC4a)$3?=&M&CxUsSu6tt)er=S=o`=>{$bAM-rn+lzovGsaEaRve>z1I8{qXU0~3b
z=e(kbvECX(s+tYuepM5_q7mmBq3UVPPeAc9&Ou=>J{TlcKXe4MHKPE7Z)@j){Fo-B
zdRIn0Kg|ejIY&Be_)^|b(%4{#2fACqlzG*=)66!nX4Vr-OUV%PkUjh<^EQ0gzDHu|
z@UH%Fgh_aL=pv?-N<Vujo{F<{P3+*)%FLk7cgPt+{OoL8c{oku6I#P;D>C%s1R2JC
zH|zFZDC^NmmBIs#&a**&U|I*A?7BV^v+DkPR{uS-0uZYPK<sfq9uuv{0_(%=3nvqc
zYAx9j;nR2A{N>#bjwL(Ze5imr-t`k&=!pJX8F>M11<c%cB7Q3ZdXLXBt-?h(PB=~O
zHhOW69*Otok62h}GLugTY9!CzKXk+?rTFu6Paa#fg1_3+^UO@g=Q#mi@AiLqrVBLF
zZ|9Ey#DCpP(e-QLl!8ju{Am#mZwz9tY!#?o;-If$6g)&e$=ReRTE>o4L{*?<h_~n2
z*tm9eu4}yqhV(T%q&^L4;R6n-78ueVbqt>;`4`VQ$ohu0f5DQFjQ8Q`uUG#i(+_l9
zqooM!m4~3lwdKEh3u}sD+fp<fM&6R)sMEhj8fAYkn`!EUwH|V`8dz^!Y5&;uzH%<K
zX3)ZYg-^gj&Ckm?r0e4DBy<HpsX@gHgMkg*Sl{_Z_c%8%Fmz5SocDm<IlzQ9y$^_o
z$LHDbm?SHDS}}3+k2QtU`2oBs5y;`mjQH=3LwjfKxk%%Abb!M7(fQxH0r5t!V1ky@
z@nbOILrrZz9;yEAWdNQvdK_sOMi&vGi+a8f_Vdc~>SM^6Fg}O~AIxlj{ZZ}zUp4+8
zWDX7<f86%}ecb+i-2UnI1LOZ!ALqZ+{yB>1LYF(7i2A<|#J>;3{~sQR!~EL=JT?A(
zQT+Q{{QIJiTwpmPRjCGZe&IF`&ojAiCT}@*ww2KW%N+eP!1@E?-cFohrI$WDVsF<U
z2|ItO{c|)$%)6wYliuKI&9`5mDa}?XwE`NY?67&`o>oE|cc@SF<D~CZ3KL9%4YJM7
zmAySicKoeoLN#!bf*nq&ik8JkKPZF6$Qj0bW-Y7rx!UsedJQ&GZj75ET*;&<JTV;w
z(^}<v%j#IU*_$n6C}YEgzu(lE9i<&fqrAV*CJs%tgSUsS8A<fv?vT`4HSL#3=CEi3
zi>r9-u4sc|yw>`akd-kjT<_7e^0=HaroY}bPTBS81sQW>>@u&8MPJ{@O7nVGrf;y-
z`G~(fvU<k_2vrzeZ+$z=biZVM!s`?2e&`6T;h(R&+3uHi{O%{R`~I#~XAX9KeDckN
zNUv#g6X83sWsC&MwZWF&46=ag)`nY;va*aqW*%9cBN$lRXTfwqxJ}B`LrX`(1xcFf
z40o*=>0mc!A70RJuaO;Zxq1{(bGYjpjG?ais-77vo6!0JY}^&@yg^r)+bz!ygYzC&
z%Rgw1k~JAxr2}=pm9_L(IfMPBb40N$!7?kln6$LZK-8jrrT3u>#7k$cjlzYs_+KU;
zQHgoi5Si>xD<-mC?HjqOtycVmC*=O_nt<P(5u`Z2_anMSz6$(9_UOZ=fM0Q<zExy^
zfr`v-Sa*ZKd_BwHG&vpA51$U3zLm=Hejw-h5*Ru>+}eH1_eKh=jdjr@t9)J?Va>76
zo+vhtOhkuvPneT@+nPC`+l%b_J+x(%jENNQ56pM1nb`(ve-}4-KhS!c0K$aZ_`!yA
z2TtoL&QPOVr|am&1!e=Fw5w}d+2f<V0O$ar+ke!r$RiXwHvQ(m{@4Uo>FJg>-;OS~
zDTQ0pp_^f+Crx|B-O3|$XFLU>VMH0tX&%SZrhhknlNFa`#RH+jy+!-@{iiLz`g%*k
zf6G*FN0e@yE5687d?_nFlNF!0f>041&4P*#7AO!L22HdBzOHBRHN`$0SQE^Z8gmQM
zNyvD|lIwQAo?|)ntdgx}_8$MK<`i(P!VOH^$|NlodtX(AKi3N~2;XT(UM!)y!L`@w
zs>dOx8Or>r9CACd#&u>47>1ionXY84-1fffqTPCdY1|rvx?C6E7pyH4&FlaPDw^LH
z1?x5#C$!$JjCk2I&2MLG>DHG->)Vc(nF)zPm(iFSPwO&big7}7Yq=+O+Y3??8JmXa
z;I=MN4+YK1SY@s@t&h@M1C9#LJQPHi-M-Ah)zIE9JitS-X6XH??KaSqGOF5aGt3*W
z(X@LSb__&*tp)UnhsH9qe<JX~3MKixYGnc?Mi`{{YsJ_$zNG5o6JZ0omRr46N-JPr
zYNI*O44&@^a|p7QZ@g$`s@EM$^g~P!$kna2=rFf>13jAWZ1sLM;|$-*?g^~tw>^t#
z_9DyS>^P}8VM}G$^V+bsutfo%w&i}H<KDKo5C#&;@fIA`GnaNQeeM^$t=gkBC7;VH
zO<pCO|EJ*wEV+-m+c~WMEfVB=t0%e6A{alSP4%CJ>hDmb;Jo_igxB8wQNC3i(N09J
zw%a-P!B^)#;K*8*OdV2kN@o`omU#)g@Ph~t<v}mDGgtoCZ5!-^14x_HTZZ3xb}X9h
z+E6658%k-sl!@c9&=56NqJY)ww`#zaUe6TSXE!FlNr_F%>+>-+Be9NJ<86ry$)kCK
zPqz@UA%q&AzLWTHTIVX(eYmF6L=Xghtq8o*?jVV9_~O0qB5m9|8#+Qb`gfP5nKq@`
z+HpAxo7m&oHqMXl-n8PMS6tz7#WC1MTayZv*~vH%t&3}ZOb77n>!qJdfY$l)zWxZt
zy<x4q4}6NtbGLB}Qpc66TE=ah(ys1gvm3~9^{tKl&XPqOb=T?#&&U<=f7kril1STb
zXuIp^D+birPkdjx;Z-IDtiqubeP<z&^Q(v$3m7fwAanlN1MY@APIL_?k!M?GH-Jv=
zBRA2~JDs#5yWQ9|nBxp9-?np5{AHk?PR*b*E4U_3qfUqrbb-+|?H)$=)ctMM$5B&B
z>7-u&*VO<0c2<J9ZJmkw72%fpyqRO5{S||0>@0`Y_#5@Jp2hCZ1V$YFy?!vg;t2iq
z;@f%#28c`xG)RQn-rL+0a0r*c2*<OtUUiK7fql9AfCH*qUl-||VkEtdzaTvVyxS0X
zx3k5uClK?#bTBW;<5rQ4T8k|5L{D!rNJFGitJ$CAIYhq);{Ceyv>++Xxr3^}MeKQH
zDJv7qTJkeqxI@R7{byC_dVnE56Y?>MGoeGD*{J`u=k!~?LK<wPnXwctyKc0?8M?c*
zd^%H9VN?+{gcBq_l8g?Ky%1ki{r!eMZaI?B53S0Js&wB&7s6yl@8K#h^FFLK#p>+4
ziF?GzUvBjtxjJ>yB{j6tWq+Y6F%$GT3XVVWKxi#m+J5|EUB$lkmH|a|?{%!rDQOhz
z)tObu!8O!YQw9pJ2R!;<62tlrt{Whsmme}WXNm^E`&Ts|twATFsNeVpR!TRH5mpno
z^F8|RWkzV%az41;ozb|N3t0D$11vZUvrs@k$#GeWAo$Mx73W-?B;+oSv}EcaW6ls2
z*|c4yi4%09U)kKWJ`rb*tFKLkbA63SJtb!1>6Yg5DU0E^nk6RFmT<_0E22wPk(jIZ
zt}8MP&sk1fSU<blKDwDTTn8?*<Q(qB5og|7ceDL*%M!;zzP>}sJ9R^Ei7dVtE{kIV
zhU8gLgYxklmP3U&P@~RrPRe8~$O|EP#}lIiqH-)cZ@2?Jhk~p|tqV1(NDz!0vcJCN
zM|{wpC_;#cdC4iYc4DWzgpej)c$wr4z#I-K?(Ws4j)E6~pX`VMgye%MJ>A&^b=_?X
zA~rH~Bq#v!8L-jI4$?ZuPdk-x3S$$hz*HQ!Y1{7FSoN%bUCErTRS~Q*ZBvqzvXe?C
z>e3nsu4I3S2lFnRez{w@yM_W$t>)l<0Fo6|6|(ZQGx4^UuO)R&(I(~bNaceF)u#b2
z8du91BcK&C=e&OEn&#Y-y&+s*8XJhc<!d4}SK4f}Z=8K9leQ2b)cJ%u9hB>Doiti9
zMpq->YN8!^QM9+^^uoa(Fb;r0S?E!}zjiIw`l(fB_C>g_uh*0r$3U(L&{mFCPenSA
zI=|g<5`LPuPQp*~)=BtTH|eOdA?TNC{*3Sdm<c__d?U?uIipoOqi>IxQQ4$3(22B3
zDW*d=m(S^uV>OpaZDLYpHv^*{Z#}RN&#v)goj#Z2CP`FGK797nUXiG4HOcN>h$+9y
zs`+0WTUGkYV`)_K#tI4A^t<!Ml~}c->o=JOdmpUUz5hWnhzHjAfzmuRo*p<+lxo++
z->e@z2)n$~tcQP*2rTvO3NabS)>tMvm4M`>+KOS#XC!ciFdP-GeO7kVY;b>nBN6)x
z8K@WNaB=_MpVDkFo@nwlvWQLF<A}@!y#(9qXQZrZlB24PUtjiB=xFIx&IA@1P<z9~
zi}vm5l`5W!ewos_jX&g#x%1vi5vP~|?D*RoKa@2Ddeqi-B0hpmrf3qB5@qwOVKMGD
zQCl)!ShOC!#CQ~kk?%KE>S!7IAnKh7Qp5}91);F26z63Whl9<X2o)PZWiNKbf)GmI
z&(t-_U8bw|R+_a;%e3;wlde^3ndp<tl+N;+@4Z07H}5T@b|+H&9^bz)v}1kkG$<~N
zx?8?zGb+=LYn*|vYMF`N=T5XICOV;s-o9~@xQ?p>8H&DUjA?e9L?~oh1VTtJywh$b
z9%eQ#@>+#YN8_PO53SYCIF8C2M@O}1i1a@C;7~rF+89BeVsI|gl`gD&mg;_tLkA;p
zgl`t-c96h0L-l5J6v&|pD?tHDAPAQinGCD#KWk?xGXR)i#*lsY_}30xq3RN(gN8$K
zb5rq*oTFi<63iB2<(@Ao_Pq>2d5)<cFuU5Z+G3Gr6Dqtw2g~!9A9%{gWs@X`Y;8sC
z6q~A@O{vZ^K^ehhZsCIul8!Cu*BvMHeO*U*HG;-&#b!}hYgfbw?r~mm<Xjbz&b{o#
zxBC|543Lo86j9#cw`^3oPUJ@SVlJ-NsXRPzcX5X|dE0@>9dCpV;xH3BlpI{E*<|D#
zHC1;U<DGG?Ba97iT((T7R^84<8|DMpDDTnP`+7rUjyUdLiRBr-73?y`^BvgZ_PlN}
zG~U)@;S#?S+23?zo?iH7lKqP0mS7~nTSD-&XD)|gBG24Qr+X9))m(<c-g>N;Ubyg$
z+3snflIcywaR{$tsHnH7UtKyQ$lr0ylpV(e3tZD1o6G{ce!gX5iSM?Xj@TT8*)*i%
zrHhQ1o3yP_IQQpWD;!ATdFA;<rjHjC7yKng%G-H%kqyjE$sS#8nt_m0BIfEsm0=^b
zmTT)fI*cws!mwuP_Z9NoesLg@8sl%sK;$WwpHVFKtIGP0lV>N0Kt`Cq{rPTL$a#(>
zvA(0WuF(>mkis&uxwVOjXc%n4axl(oNk(REOQb4lj?O;bBYWE(dLWcsLwgx(7D5s6
ziG#tAdd)3g>%b(fNQKlQI|V0Rc0Y3CjspPq2%%%a-C6mLy3*hihO~}&;8{g8cMzou
z-2mQ+yQ|j{+R{U#dW^E6xiK0(iiju<<&hi=iiF%jCMI3S=m>FL?@-!$!k71Vh&0a+
z_`|XO@S*?464^ND=kLj2@TnpT5}ikYc6a@%qJtFen1r&=>`QT7!>4`9258eP)G29V
zw-N}L2Fq1<NTo=G<et*Kf7@`FR<(SrfQP&74s#_W>qZ#l1;Knq?9jPPsck}7KG%9#
zJUXmdbaT*ihHWmXC9$1~%PjUqT+E9gP&=B#h@B<IqMA!sU1*-%SR24(M~JK&_s5T%
z>%C~dLuPL;iI_Tkc2)6W_iEwK4P`_4TIoia6kY?mg(*s7yHm+KFm`*%?ncjK6GPC#
zRIaWmm%_BtzMj2xCP`j25?eQ*=~RXJQq*SY>|IAnX^qZ(trFDdN6)Ll#r}%Ho*AwT
zqjYJ9P<6OAotzykMH~RA1u_<Vi-KJ)p_sLCU46{{VxCeQNE+$zw-M|cNH<}BUYt11
z7{&6!UU(groIyeQ+DYVJ9EZc}iW_0JWfufw_yjtAv!}re_GKkF{b$H)H=e)AnX(Z}
z>iKiJkDFdaMp9xZNLf%xDXVDM_);tf%5jKP^92YP!KUBw5QGsY-HF8R%-q=k^lG3y
zJk--hk3}6hI3Sc)HrmP$cYA8=!r}7XVR2EkQW@_-H%O%^FrDndB4AuawIdPUuoG06
z-$vf`JAT6w)4Gw4^%^<pCD8J1Kp?m+nLu==!&;{+dy+1J5ARly<~V!fTw)-Z*vaM)
zhh=KVQrV3L(J%J6s14Xd=88`-Y|y?ocDSi{l7na`oNx77m|*rQ(_Or3q6{IuLjE_a
zyEwNf)C-v3)>d|MZruTkM50VKqx&6uZlAw*M4zw{3-55lX(z)ygGtv`?iG9akKM2h
znV0m@H>`I6RwK(+u0?^u-5<X(cj(3pqm*9N%}mo3S4_9^$QyG|#dL8r%t7Uv>?jYp
zqrF}=OZjB{S)=eZ+5W*>@*Ho;EXDHl%vg0t>02EMN*#MbmWS=DN+$5!RYisaj|^{Z
z6&KOk`@FnPWt2DaM|&R4M@||I*WL47&5cLTYtOnBA&qdZcgheH1dINouW(4?ZEtTQ
z9W%H0URayh4qw=}ly&i;8{2LUD<TKtV#T%hR~@FAZ-NN!$)VxsWDm}Ck62?SO~%dD
z)d)}bTe$tT4|x}KBXB{ZPVj55Vr572U`wUoil+c~$%<#ukD!phe22O=z1KUK3g_vb
zMakMicL_BV3l)0|mQS3>749j}v(4tG)Ee6wh>^*q#})tdPtbhhDC5MZI@DPnYkmA3
zA7l!xo){@tjac^elT4xMi3tlwwr%e`iEXq(;DQ;dQ0a4A_ZiI-N_*9H%-NCA?BN*B
zhWg8?xz^K@%w-KCN^m(%_pJq$v<gbf!kVRl5#WKjrbv^fJ(~+_o!k4mZ>_*&d(E;i
zexdeG*>Hv9cZVPax99FeP@Fa??p5XX#5uQhKtGccwk7}xO24Cp(KcTG(|x=!$}a4#
zZ|SZ$8EHh!icPk%LL_dla++&|0KU-6*DT~XRp7fdGKUQa;^l6|XJD4PSm4Yg#TG_{
zB$vMXAWhuR9r*)!emF7qZ^=0$#fvmL;ENQwMnxiudpP>A56g*CQ6N4{@~HJ|d5PJ)
z&e2`fj(02)%YKanoya{LyK$(6C#p?D4}zDiM^P+0?6f4cX^g)PJ4Vs4??-_I^1Rj>
zw)6N29|bn_J(aQ9@$-eh=pok?9RS_2XVH|izC`C}7f{a}*1D3{Y%bRtQbK3fZ^Z$9
zYlK;ZE5>KO{PWr-_<_9e7*Vp9(Z0NtH-JvfBct@gsWoolJ~;P2phWv>UwW}c#^_<+
zRj=Mw_3qsD^*}6v+^f8-8k3irN7vKEb9i-A$s^zZ8m_CJnt6@b(Zjs)(;4bSp?ob}
zkRl%X;_!ZjQoK|%0vVng4AqZEo)XE|+4qw???CoDN~B_Q@zBRkh2zKTHIsRT%3#A#
z&Wvu*Ly=)J?9ouBJ$Jck$e92eCY(syRZA$`?gY&JK!0De*<Sh|9y$iFyVe@~fVP!@
zpA0>}R*__{K6j7F)lFsQ(Ktr>&<KoABYCO1X5lX-wxTmkkluLV;IZeD;CtE%04*D5
zl3@y7MeM<pR(KrK$~`4<+?($Cb^{9^e6h=6M_9LcguF2--0#+`MVGarz`SwQPS(=D
zD-zgThBeoeO3&gpfR|-T>T)b4F$PRPDXDG74#SL6M)<#fBamvp79I(?TR*G*O<;e~
zr<ABSm2pPGwa>C*Vl0_?jDpz3gY<7z3+WHyd&UL~=Su?4c^=58Do%sYmxlAn4Jrar
z4GB)YE}Vb($F6{yyaLDum8g{C_Kjodi2t1F7~HEjq!(Jr;BdGvs@7)Lv4ouVgrgpI
zU@p{e(L;)8x}QXtid)&(JKKwA;*G%ZykgTeFVMxZx74o$%xn+!>OQ-v2$$Sd0+zlI
zRj-Osu8Z&iJDgRcWdSk3p;njrl?=R!EQN<`l|p8m&nP424N;>z!Yz(iDRdzw<JPmM
zhGdn7z1O4#SgmAk9tQg7ty~rs;z(5~<JR7bOuT3?zXg#~x1B{1leRDfh|89@GWUvS
zIUBlNge1B~3?k>2dh~768KC|vI_Tov@&Z$AzTDb%+&u|WGm$n>ML~I}Cy6sb!<n4p
zo8#T!eGmOFTnmRU&a7xh2%ERIW3{xTm%!h5m8-71V|5_B+brx75u{L$5v`HoGG)B(
zRtTs}B4bpcE|4m)Q|Wk8e}IKH$#eFvtByCf<_&HJ6=SLv9eleWNh@8&%b0~hXM5^W
z=bA_8brD87h|aE~(Lk<s!vq^f^#E(FFfdtD_*~*wYvqB&3<*?et#<sS%1U93flBwr
zHLZ<KmKzy2!iD$t#{70w3CmuN>;YW3#67&x#^WLb*ERLG_w+y-w4e|MaraKQntS7r
zTJGFI(hN{B?X5w}xXtnNtBQkq&{B)ybHpiHfU<0Ka}$hh>SJQ1#x+OT8-xAKG02=u
z63eAal4EG62pS7m&omJZ+`;r2NO|vVpWuME6%+v-Q$A;5vm*|ntB7fNNBqEIyXaug
z0YzFXea`Qa{8Mjk*#$CSq9u%<UsA}HE9rqMGUcLBzLLB7+UsC>-{1Tf2M^L4Ab}IS
zYf2~Z+(@$;ZsetNt=R8C#yt5&%W_BrAY}BS_0hQ{WTR|u1oA=2`r<nW<tF!_7&_yI
z2)VCajf$RUO@W@GEbwf-=I5;4Lo>Sb-3M2$p~*|=&s_9}uJ)r{5sAf}ATSpmpGd;Z
zD{*O~y-HGc=-(Z*`Ea6R-B<6gD$Z8aA36EkT81@aW@Hw=I5aYr+4DXR%=;MTjj6)y
z<S~>~n+;9A-DK?gfu%9Tz!qh(lk}i=Td2AI6EKpmm^S9T?X#e4vb{I03I7vN3IqC~
z1AJAPvG+p4QT6b|WKgk8MRf4oxx;AP^`$j*?=aqbq@bd;N;e6{v)dzWfJ3FdD`&R9
z(<MFjx7^Jic3ty4_{2jv?IyF-4cArA|7I-;Ix&b<0ihpc;~0l<rNgfHnDS;I$>cT@
zJYTOW#x`7_8tD;OD{J%O!@HVg5_c#*stw5}1X1@jPjfGPBtW!NA({}0;VU_;uhPon
z-Zz<Kqiyt)xR&}XqVUf=b8nC7aQM)}a%~(17{eVlMiocuS!7no$-L`s%tEJPtwj|5
z8rcmQR4BD2nFmy5(73yb)PPt4?WmU#TfVWBSK6mdyN^imtx2!vm6tbcn%%8rg1q%2
z$FRoIk`!%VzgKZg8}~x^>Ry-vK4;ruVGMYV8a?<p=~wba0uZ*Q?`DwpI3Uc{8PwQW
zYF*vxWfvp93z!j$ExPG4!`u;llNa`C+s5*v*gf5<U2lL<G~6UuJ(PKy4;>bZDY|_T
z*2CJhn;=?knZ@*~W;x=PvECKok}7t|yVd*^FF(epTCB!ZuM#qE65)%;eXnsLJcP*R
zK4WZiTk$-ISFS7W-FlMsHsW9n9Y=bBQF0?xPt(ArmGy4c{LISHUJCwlbX^Jha!4sp
zui`ddmHUpyyOzr8KR{(QtmiSZhK<=!VhgrKZoYj=vc$m%<sx38AZ7pRCSam~OnFy)
z*zr7xYn`)9y5_pGdKQ<}Zue&LRJUfl-Uar~Qv=(ZY$=*WcVt@<_>_#Tu9}$KrZqy3
zsvh#A{b+zph*ovoAM4!W(ZyZO{`Q1$HBX-W)(4X7imxEvCF;l~3pdUIb|%wq<-v5q
zSo+(5vAj{h25DeoQW|S}77d^6V`62rCP)U=fP)sK6^?Y~@u2I^U{CrdqroQj(AamP
z(bu%PM0)!m>vWcpe!VBB%|?z?j*RTVHpWfs7qw#{060L$zjD|3ty}5!#HIg|&mztM
zVQj&eI@q`=T|yqc*!S@U2UvOU&<Q5GYVX9k;C6y$nnE@0LNt%kK`vnD-))xJecfuV
z`$TK)_XZUiiUt=#@^tlXBs}nS0%dbEPb&AgD7`3~Wa4g*P~M(JQKYHe69m+rYbYD_
z`W35lUW@Zfk|3A-2nKypM3IBnzI85|RuHGM!?HdmdtUlvIMO4MN`2i&;}4{#H06p@
zzr%<7iu2{#Bph!Xu>0<oJ*Pvo%{%KELdO^(oNZfa8`{`4MGzgIP5(xh%jt4AV?JO)
zIheu(*VRmiyMBj}o00ss%GE7f@%)m*Q??Oqj`wm^p$)X`L5l@5M$Cz*TX>2}qP=y)
zhJ>6_YWISqU!aEewrq2J7fH^Cf;4#s*5abC<+M?q)dqxF{#K#mXs;D}RZQsJzR;tI
zfR~Q*(h4_oA86+8(aqFWbifwF!|mKsDvPfloVgj0xU>*KZf^HfJ`I(}C=bTaXNB&J
zQ$xHRA=;|H_qXow%myz{X=nF#t&PRbb+=**pn>eMlLr7YRB$p^Qn6fQdWdZUgFp{U
zH=>6F>|sCKgD|>R^D8ghNV-pT|Aq%TdxjJ4|LwnQhF=3c{O}B2bGKYex2oaPLECbF
zA)FQIZkt|^Q4@Rf)Qs-|xa8HWmmw=H)-D`WuK{<7aCyh@^)+Y{>8>QhGbxk=*Wz-;
z&HZXoOpU2rD@<jdT)L1BJv;u8sDMPxbd|`&DK#B3veA=5QTvhHr|GV&i!gh41B#jx
zWfKfTflIP8yUnt?E0o4PI~14li0rk=U2%{Hwmh@$#OK;n)wn3jSdPH$fXx2pS`aeV
z1L+EFNSY35CQn^W>}_OxceQ3Q>N*WT-5d64m7g`iXF70wEru0u)Pq6AG5iNAbt}|r
zWJWy5ot5Qqz7DcV((Q)_`%v2`)X<W^UZsDNO={i~Mjy{Q73t3ahrCS~X{VPl#D38c
zyn4u)NbGP8S!E5O8YI3|9PYkWt%|r;=Dz9j2&NeZZ@D9hRoCBj*UFOfz+phA>6plp
zUEdlkyqwoj28#4}MAN*ThtZ>(#_STg!iHtu!mCQRDG=fEg++ed1B>z|6&sHjCG&#t
zTgCXR=eHDsb0}0bS;C1OnR*8gU{gv4VJMp`w8u@RC}_Ef-h@#mM_Bn`lv#T;%8VFg
z)_p_gAinHIPY0;?YQB*=CW|jy<$oDArHjCog)vHPn&Wcq9~az#9f62;t<mBA0lANP
zkyo(_xomTtx3*5*uR=h1XhUr{e#@8NPBZZr=v<zP_N$gRTR*U1cIwC6!9;I&2X-`;
zw!r;T6S9&R^XVB*<#^>Z97t|0`l`p6*RD5d@fjm!9j~2c;s7k1<e?Q4O1J6-ikOnJ
z-$vJHjdK<+J+<@vCO6SecPHQwycX^LziH`$a#xN8up|5-7E~M3$>~<2$Gg3JlsNkD
zLy36g`Ya${A7;6&7er;8jdvVDrL~OAVv8lAk^hQDYsvE=nO?jYR&pnR0bK>A?h|&b
zGv>?1)!(9j09XGrX!>R4|0Xo;61tIx1FT66h9`&*oTIN@Y3dRyX7M`8!D^iYUWXha
z18t{<h=h_rw3A45U6WXva=eHu;#A}A9i13StMwp24vHMBt%r#(GBW0!d_S8&s-sO4
z%8UonT;(WJ!6T5P`^pPa5A_19g}2AVIKCjIX;0dW<q>V9{0319p}r6`{&<qTYOs1F
z9r8`|)T@Ek&S*DkWR3x5i6K6WYz*nF0BfnDlO_s_oh}BgIV3u=(RCtn1ia(j%uby{
zrb)413XgWn(YBa1H$OM6j}YR@d-ABg6Sms?Y9d}u*gl+Nc<ogk0d!CiGKzcy{0>`m
ztTnTO1hmyjjPQW0mK)cJ5S3Fjuba0SH;h$x(N8l*cn#;+$79U~i0u;)Yy(0}k8<Lz
zk)q-{2`ef(dzlbr`bPTU2xVUhQ^eIk8eNF(LOx@)Fp51P6gwVPGE(<_qk-I+wzANC
z<V)0@(*yr>lCUYrTGd0#y<Imy#CuPXtnO@3^j~M3fP$iY8G()0#!5C?>lfrYlSy|v
z*^!6sK2!`QbrQ&ynn}#5^KUv--^*%BmwqqP_t#M0y-XkP1F2Foxj%JQPlr%j@@d?=
zGjCm<Q>QnXv8AE0-DJl0?(eV5Ak+6C)b}9M$A`bUE;$6O>&-hoD=mYPcF9Lg(Wr90
ztGza&1Ih+SX-CI<)*S0ACc?>@zqCJObf7nHNr$?i#k{fW1X#aj+&7ShLDO9~4#BW;
zl#zb1;oJw;l_9#SQZzTAR)<Ags`!lG4(3WTnc~(RPkRuya2_(;Wru#cuD;{ZWLbd2
zyS?1Y41=&z(oIk*P!QHb89w_xWqRE5kwXZ%>f1_+fA(@??U3)Epojluh#VrlMANsA
zMsrBI-VHfWTR-yjc~J|USflbaC@j?<VS~=WD=FspB=RMNYxNM}PtL`IBeCuRG~iSY
zj|8KOPI6=xcsLkjOj*Fg2gsRoKi1=sJ^C+@WNnW66+iZnM|O>(&Tgiqo@nW5ZcF=q
zOA9-hmTp8#&#0xPjBwNFZ_FJO8q`2EwVKzIQPh}yj;=_Py?@;dbN?rf{|O(>?w&ZA
zPqkXx##hnYl)$f)SoUywlxxRHSuO!%f;GUmw`Gw^c6ArpTD9?gzD2@J9_dIOg&IA>
z&p2Zq6__Tz>p)~3w{jyaL{7*X6V&=EqStj&^Q={+$5fR?y^fMx%0tOW>a?8k5M1lq
z>{w+Irhl!l244qIUM0x^x^|K&MOt}Q6}|*J+Ha1GxSm%tW)@CJCXC_I&@}vuD#A=;
zZJjt;`}(o56vAY8O%olI178wh8~a9<#@23&pu-88-Ho*CMQkH+_Q~w4)3C_h4|)YA
z5Q6W<ah|<&jYG8Tsci6v4Sp>g<hl`X!RP)U;5WOInSb_Q9+TqX*tZ0u&_nLEe_w;0
zXxM8dB1F0sAd<BWZ;iIB<}9OUbw}Dv8`O{kF4#n(ipecImZ^p<7iKZr%&IwcYk_1i
zVBb{bn4nfRg4_umbq*s$+SgMw^{g3xN@+TT#!`*Q5ow7*bZ;tQSK6h>3u@83@mxU|
z3GA5Aj{3;sBc~%d)G;BApo|N<wtH1R^c2ei<>Pz;ZjE(Zxps$vni7)_perKc4!afO
z=wjp8w<`m(#XfdIQIb_#9fNvgUR$R~H>(V3Iocyfpb$>&$N2>#H^bqf&N9B&8A%(M
zH`YV(`PY!P>%Q`I%U<wb$?m0L37xeOg)*6rGU5_izC-s&?M;tuL|+FL=45XH;4&^!
zu+lyX9UNN2*Wsb~kk;+ZIHp)Jle%km`z^YyXBwQIS+ee%@FL#tytTO$t|?ZPBC4fH
z0my;S%=m2(1&ad>#tp_MY-J!U$Ip<dK3hXC#}&kA(NyS^B^3prQ4<GvPvgNgt;TH_
zvHzYnY@JjFUn>TcS+9{{O=hyw$3pm;b&1%yK~vIhw17eA(f4fU7B5GFl)-@?f~HRu
zJC&aBD%N6UsB-^R_%NK_eI@TRLTX(XvQUjb3THdQsEK`#YLb~d@PrQfA}Zst$j3}!
z7gxS!%oL@-eDy0!?;Jq7v<2EEefKgLnzjyXNfsQ(4JVj-O%LiAh)b`H8fQUvGmNh@
zfHYnVDt;nmD)DBWC7#cMC3ZMW5VJ#Q@%dJe<s9h$?m%ahuDL-&uZI=iQ@BAOxc}^{
zb4g=3inlTk?vWc@=w;>pO{T5q)Ygk^TT8O7r5(p=GJ0NFJ<s?fxrEbuOE=-g(jNL5
zc3~&|H!lW`o12#_ha-OlwN^Eq_NQkPM55RegYiZE>iT<=F(<0Zd{H=T5W_!x?_~dp
zMwNUwoSF~(>q7H;xQ!{g>EVv_K+pew&0X7e;<&c`m-Ctju7P5lCnStx9GV!1IPga0
z!X<=o$1ukE_Y<upOG}cWs(SYxd-qG%2(~24va~L9&3R`#0wt1Y+M_bvkG?GE+w?B7
zsp?Ewjb_SFd%U}Uqy?hzDGh0n(k_GbYC`M<lSlL}Ca9CxVS|@g&l4rWk`yd(ufsO4
zsV{p@W2=^)x+(CZ`5tj@<@e@mXne;g#KDo?K3uE_3V`iFbP<u^?jMlS{as^?x9{*F
z#*QvR;ax50mKwI)C62VwEjEhkKzKBkhZh=Mjns#v&xd)-tZCz)EuGixt$n?)@Y7rc
z_EOrBrCfU^LI{EoukmEyp9DYFB*Ai{#4d1|C1kMk#Hyv?Yu|`bi8HW_@Wjf4eU?-o
zNK>~|8Y#>KT3Z@^T8FrrUuCv88<L71G+*oRzhE}j`z;ECpM8=JpTV^C=Dz)iKib*H
zsfk)!E9}1b8{Jp1`-#*2Jux_eFR>TcbMjzzjZm(Ov~y4}9>Kbwv3aD7g6|dMYXchB
z2P8>97`325%-zERzv8_cvJ+ksE}USQ5T%ehETHknn_<9-D8S;4EG@`ppyj(~WFuNe
zU;@?t0#B~~*EL$`ik<TPjLgORx=I`@#|%x*@0l?w=}T-H=|ru14?r&vsWdA%lv#)p
z=$=%fxP&pnW6u^;8a(Ho&bM6O`;xsSE;sNWmyrTPNXVha!CN-c4_3;y(i7q5%doST
z_tGIy7b1wCy0VpQS3gne1bbTtf%bzt$5lA3LR37!@8;Wj$7ehzgcLiGj%RA^6-%)$
z?YFVVZ|T7F7opZSdKmb}&n*49j7;3eL8vqjEkTD<2Ldf?ZcLlVdNoLly?n1%7BbPA
z6(y~fqfj&Fmm2P9{skgC0~c80>K>NDQ(K7NuM$V3%G_DuPhXy)UEx8TD-x`mFSLvp
z_y4M*0@5fC`1kl$i4a6YDbw9_hz}*f(CEG{*Tgw~so^W6yJAD@zI91egDEWw78iyd
zg_HF5{b`r<j>gZd94U<|P{fFIF&$T;IsA?K@4!<&_#1}P4|;shd7k+bIV*&kYqJ3M
z9=Y;LeTUCr7U-3iO4Z>peC5yih2ZiuAnLhQ<hadNVNNF*-78>JBkTlNRIYS_kyfzd
zz8DSDy~+ukM@|(szM7a{ECgz1YzxGOsV7%$m~vzVIJ2WD9nhMaM`Fhs+?^XP_q>1A
z7LAlGdVKs-qZm%Gl>b+nS0aJD@pVm!+}LmX4mt!ZpRWf4g#my<c#5cy<me%uIlj_(
zK6GI3cH5Yf5|Ry~0Ih+thCdP`2`09dGwcU(F|z&Ws1(`BVBs~ia~`jlAP*4&dU6tG
z>j$K)3>{jOeHX@e=vo5gI`7b0d4@>@v=GrRIxIe+G=~WQ65I0_`unL_vdk%##52k?
zQ<{@&qBDzGhn30?IRh&trl7T@n0c15a@f?K<p~EA#*iZ)p7+cVw=3?EII3j*rWOA%
zhw@|3WP^d&`R*Vr2Lbt)N<^14CLYAQFK6#wYi3m<lP|T@cAvEj`<}W~M=3VGQ~FVa
zz$3gcOMo%_B8OTHE{ji*TYG8e*j8NU8z9utu#b1x0L|ka<6KS3Q*c39t|shU{yHC7
zvcJ5-K1RaS&geTJO@_y0$F2`WI#$%u$_WL}IV~I%7|)RtMm`S_&*3;VlfFT-O^tg}
zpPIm0ztHH7!?dt|&TZ67`D$c*^%!>z^l;X&3Pj8Hd6`{h2?=0w-E8oN@Jh-Rlhfc0
zbGJrMYKG5z%4vf=Psjjd=!!-_G5U6HX|~MjK+ZytMYNZF98AkDFR!(%a_bJA=9a!N
z)ruRMBWK>0{_^F9^_~u@hC$A1FsL)Rma4_E<g}fQ#caF4au!8i+ZMj1K$vN|HH^VY
zmt!y1=(qW|>N{D9Ku4Wtf{E|@OWL?s&3*k=_RnUu#)9ug#y$f}NDlz;YJD5VxM;0R
z#19z^*b03EehnY=#=RpO7<BS%)QAgA_HKlvfu4OXl?NJntWn55$qyrhJnt9d14;>1
zs~G|wS#(7??0b5{3!33Lkk3_Be(Z!R!v9^1!agNIKGm$3z|a6a8pYMR+{&^>-^7MP
zcx20L{R}~kt2l#=+^`W%Kgf)1?t_h$UqyKvye83_ZHd!R@@A`rv|;I+;WTqeE<=*L
zq$WTi>NZ=JulKm)wT{!^X~w9&Kwg8p+y-Oe1Ze~w=7*$+j|l}BSqv2d`!r!WiMueH
zbnjj(QbtBRf2hLw2RLIhOkRCXR3`fnQ%3JD4ajkS+@dQBYAA7i&aOEzQ*vSzflz3$
zn43i<s4f72&$+ulLGHo)JT?SZquCyK)6BDxqSpDG8N{h#&INp@PvJY&17RK+bHp2{
znr%r7`kt{=G`+GcY*GYD9;y5XH^o10m<@9G(+#OZzX8N%SbW#{EB{O{kS%0)nZ@ej
z9AH=uzs>1sM;of;^mL#X$QH7@oU-@|yHX6VCQ*!ct+Pe#Z0dyGsrsioi<qXZbG^L(
zGt+oXj9@juas=^6C3L{y2oQL;iK5I|-^+dvX1@Xk!;cB=MSK`}y+AqMd)}KN?aQvo
z`~0?`@r?&oeRA<Ve?W8z(Z~4xS1(W%lw#~oqi_fy=i(P64ggZ+_VI)XP=%to-I!@x
zPrg<$^v#1-3Yxz-mu=-`%LgJFWM)9gE_Hmcdamd6e3DHbNY7KZ=e;|?rYR%0#GuQR
z5Kac4Ys|HCqku%<li+QJ^>;U2Pe{tJ#ZpLG{E#h%4y`3}Vm7X}D5<V)-bss4z%}kV
z?LkRiQ2Lz_t~q^XFd@b|GO8yLPr_n&tw~I}cQ^E*YY3eiFLK&E;otni`!8CBqxPK~
z49izUULdSteR)(+RwIs?siY^HOmJ^JO5`45R#eg{9jbr7Kw#C=(e3mxU-!;yY9n5x
zE#OG*O}5MsnTJ9_Xg&IFD7O%4u1Qatvn?~C<m%FR9-G}gr9O(n_`hO|YZkc?OIH^T
zmXD^|*}FC+C5BOhGEsv*2SEU=*h5?W0kqPUor;9nzT9kkRKY+o+LSQ}-(75(J=OTs
zJI@>~QCQo;5fbdYe2nr>-OC9jrIY2QUcR;(q$efdbU!P+3k+@Fi4|RvYtuOi2dyd9
z0Tba^$%MRGc$+Qzla=SJfJgn*a#_hm<UTa8r~biO8D0^0`fq!o+pQ+vrJ}<-^9C~b
zU%ov&boX0SHL6gSQ>57V!bf*D7v$LRv<ZC+rODk-B~YOZxaJlahI;8RhtpYnO0^-y
zfa?UPr%Z&dgy+&mmk_D0VdDKO5my{FDQCT{y;4k!R#`F05k3zx_abP?r4mYly0~fR
z1!jNNIHU&0mZQ*S@d~~)YK@a1k3^Uj6RijVud9@}We&07T_$Ewauqu_loP{yG;XLc
z;_(U|jY@*yhlI+<>H7re_l_h`lN{Y_l`K_HJ!>7aT(m5rjvO5+@KVj!8W<MenZDL_
zqG-ACwHDemEGJ^8g(EY;4<*$6Dgp~A9g_0fywn-`r5DDli8(jpwq8S#?IwCzFd@3E
zIgXlNS@B1qg-1A)c_sBPqqrt}=v!t#G&s%biRC^ZwuJj1SSJ+k6qItDfg2w8hy#t!
z>bHUVt%%~=iT>@)+@sX!TNXknYqj!ewkpbEt0=%06QN~v34CtjxUteXaOlhrthRAe
z=!+dCvUT|O7FQDKV!A(f8AHDcsd1^|6-vFO4CUtSJ^klNTOq8ynhx-B<-eEcu@@P^
zM=v{N1Sh(0!VKOIp0Ogm?4bkz(Yp3|(l&^ZJwVp0MR!0+*p{7M5>65_-VV&UxfM>H
z1$$^;pS~}MXC_>WY;C9*eK8=ZAq`N(Sq2fj!HFswmr+M+SW>D@;`z&2rI3Oe*2gwZ
zd1IqJw_}Br^*p5y$K`h9d}FS)E)hU8-(V%n;X3hXh5-7W1a$of(wcoo#}Y6S{PAYM
zkS%`9I%b>vUJh+9lsansSf7w43N`l>$lhZ`w{J1*J|18l_4XHjho-|y_n#*O9x9q*
z<PJID_Uzd(EQsi-Ef`f_tuF<RIjj_<l{%OwUm3d(kc6SsE}_j6rhfxb7Q)(pfH?T=
zk{M^IC5qDI2GO<kYg^lIt-t>QEbKBUpn3W;))vP*|3xDvwmbElgeSLQ++vZE?F3Sw
zHQ(8}*3a-UZUBlM=0rcH3OD;b%UIt6vAkz6E$=9d{rZMMK5MmVnk2Ix31$QJh~=?-
zJ-ux7k$GIrNhTecx>xKU+k%kO4K#v+>l;Rpm8i&l>HxNU+#-b;f4*O#Ac(mGo`~Dt
z<JvGaHluEh>~9kA2Z`N;JEa-&O-04viUOC{Ami9QXvdTCNvL<aUNeFp;`-1I4BoZG
zOzkYm@6!|7JbQ$V6lW|SN4sD;&8`X`#m+f`U8rlwQHwnTH0qK$&f;L7nrH+KeL<z7
zQ1tgk<e3emNb2hxyTsDu^i2eSQY}IiZd2xT+5`U&ibr9HSLBh-vNY+$?A`$mJ;)$B
z<2;Fi6_<zuO+2LZNI6t`4YJ&Pl5@Ye;<|=!bHohYCww5i{gm0V+&#hS3}Sx)!aV{*
zh04p$oK;|Rw)~>hUmj%TuFE0s;jtUMkdvi2B05Tf%){ayoUf#Maq7fO26GC$EWq{|
z=Wv6~39dSY>fgcaME#c`glWuv;Z4Sm4*F^*?fz<t>@1gYfKm2J0-s7;salHw%gBwK
z=Z<$AL@!jBM2D0)I6gUs3A4Wi@d6qs_7N0U%oKz>w2;&hYQyq}79uo84^7~zc?E0I
zdbivz{4Z|}%U&G$%Czs@ER8fH{5WXfmLIMH>u_)S<$jhO)o0_ho&8N8s^12*{kPD<
zGHb`#D?U3DYfj6Q0bfrF-)OJ2%9GL%Hrpq<zC*DU<VKfXvvjW~SxQgLnPgb)P*k=1
z?MWS8nbW46(xGc+4Be?5x-&VnCo;~5$bl%egm>M>7a0H&NFrjSp}J-SEWYgP8CZs<
z1wt`W?r|2taR#McYf=}NtPsTc)i)GDy#}-Dn$Jgenekf00mb&QJ2G3B{4S@;SvoAm
zBdv0N0^D7!y~48$jbT)UXhetg*tWymm9~<f=uZ+bIUJceWv{2U18KO`mVZ#(F_-LK
zBN(QPa0sakZo{ojRc|&#ixWvP*BKaN`9a3zYmX&!-NAeD%m538u++UgU?#v%sCgob
z1M@CLvje`jOd&hd`R3U3AhTq>4SsTUD(`gkG|2zXc8T;c#wWTEPOjPM`!!FdO$biD
zSDQB2dKf;y=s<j@F;>6XaY=L>UF%rBR9_~lbDgA&6|707PC2+<{{R8zUhA^wgGN5J
zdAnGvwe|>Ok4Ih|d8Xsoe5M93yxAd{i_dh?Ckuox{73GXRaL7+j^d_X?V^raeBdj(
z);A;xaUj&MHzC>R163S0ZT~95p{l^4Dxv)goBo7M=8L?eNa@e-r;ONri`UDG3=L>z
z2x+Nx($V{AGe6peDPPe^%JQwrqb0X};2N5C!YbG9=EJcpS5%T^?+hAgaFmVrfei$u
z4n0!A7V40_l$(ZUs?8+6g3mELaGR|Sw%qi|Fi^0J!*Hrb1!bG$Zp$22=4U&L!T&N=
z`E9Oy*~Mf^72R3aiaG8*a_dC(qpW}c>xWG{xzI{GhDimh6j||m$E9<SWHSg!^^9#)
z+f-xV3sQo|5GbEXHmICKN&Jpji|v%i!-WU>o<uC^=l8xB0xr&NV=Tm;Vo_rzY&qFb
z@AEESAm-7s)KXO(7AnS??5)q)x#hr3^Iqxj58kL1;|k^UY+KI7leTTh1$O<7sB~#*
z>#T5pksKuE+B*B(m~1*FVxN6m;xEz<@JQ4p{h(5yH4G?Z77Y>8Q`;DX<db#m6vs4P
zHSjN^0JLiJ@Bb_$45v!hlp=p3kX*f!hKe>>jT4VQLM4bbE0p`8+BZ?QXA)j&AYB7J
z3ne}07o%Kd(pZXohw4?HzZLI_%9MvpBSACYsQ}=te&7$(5`U@p4V_0BUxj}yo?YLH
z5<zKKV&d!~65HEEDrYq6+enM}k$EUDd1WG{mNoaQHSYdLb8GO`Im4a5OPYv-XX;JK
z#K+ASafjaY>ugX`&zn9Tu)s*UVibMCC6$KmQ;cGN(NLv%`Mo*o`@YSE2}T5jcA>rA
z!IdW7uaUZ^B3H|`2^H3~g7!tkLiflpaDilQQbw_*ESaMmvqPgy;=wOaUlVAiO)<bl
zS95j4pLatuaD0m!(##~{vO?!W`h`s4jR?{~yDn}1d$XZcs;LDRN^fNv|DE|Lkktx0
zoNse?NBfA0b@gORHtW^7eIljR0Am`gVy6a+?2p7gBZ)l`j1ZNe)07#6`XcT)rtE7T
z*<rI-w^ZDUEul(Yks849KWnSrY%p+gmydm#l1n!-=(qhM^!ZNWAJ*EJC2?D)ssq7g
z0nG1>6u<owrQ(TqD@MwCJpJ$Tj{HDKv}K=>t}PQ=Q{ltp{r44`!DPdy!`3oY=q+LI
zzB<O96}|~vcZ}kF!A0RZ-?!uUYG6I$)GkQ<OR&D`lnuqu>Tk%Ty)vzOLN=wqg1Wy0
zl?dMjq{mb6%O2-gP7v01*Sm}|CgSsoInOjW2R7<S_N{G$3M=^60w~I?o7k2*a?P%D
z?YfC=spE``-s#oivh2+Nm>4Wv@SDGZ(vjYFL_zd;-i{sOi@68jp`oAeJC7<W<}h2#
z^TwsaLqCn^kVmAEg@l^OnhZ^4^9GY2WK{E<4?qTaic99!G%u~sI3+QA>Awok)z1r(
z=m?IhS}RdzwR`)^=&1I?bVza~wm-W>d_hfS(9cU|Gj(HzB(%xOG#$zZX34|S%O7S;
z0EJ`*XOZ(|1P8{W!^Dvt#T*4h#PL<^5!Dbt;d;|E5r4$*Nc`|u@eJb(b^%Qm!Ec={
z>~=xJvsNPS+yvQjS6L}!1)ZN*9+4nEW(G47ijvOl3wdX`Yr}BnY~IbTAL^)3PSjt0
z7BWzh(h{M{2&IBY$oFYT{4KaLe)X|%#sf(t%N!<5u}Rksj;L$2c+*zKWWsW|Z^pvQ
z0r2x2;uF1o&ZjHf;uAP~!{z8w#=+bSHxXGZ%Rp^r`Yf5Vs+y30_fy93l-5Q99_of&
z<FABr?+v41l_S$$97@Y-;MX=WSfM@P%<ho1;rl0HsN%k|AIs|qp->&8|55FTHXo+q
zvM`~}Q#a&wKM*xMKqkTLI=O0qda59=yg6nea*Ww>caXw%6PHd>MuvGF$Sd_{aX=B3
z{fnvso${&gUWO07Pt;`#ejQo11~`ZKD!2(a!Vg4)*>~J=2~2`2;%V#cJd_6sv7ZqO
z8kxo-Ezw8hOQOpyRw;?DE?NZo9YN|`4XGMS4ai$b49jU2vyfMV5F-+Z+u9zpSCXjS
z`PvArBzDsf@tD0j_~7MGH`nlTPy?}m&PSOSWc1h=>FCI^m2)qa7Z^oJ((8XBP6XG9
zjn6g>HX!B33i1jer%Z{U4~O(-<7*|N2M>xdldK{}EZ+v;)e*>kGgP_}!e|Z+Ztq1K
z#yTC5M_vu}BUc}Fc=71zME_(&&Pg9~Dr(R?=LoI0tmTf(>zhx4GQkQrAsw&A8zFI*
z1@vjq*jL1DBA*?z;DZLzQ1an&(>-1hATc^r-TkNI-M-aj#NfvVfi7TW3|B;I2do0`
zZGXFg9&O;v>rfUMR^Of5Z{_VZ<Mxo=e&Dz7@NDJZy*;uh<St>J9dGf`s;2OP?Fg^<
zWVdg64VLcI3!XrcjKm^V3E-u7i&oy=E~1whipnbu0lu1f%sKnrU9SN_l3sb>2sCZ5
zqP|<av*AVE)0@SKBM#6xK|H6Q%z-A)I;hPpdGZxm15q9pr}_;>GYfs4BAIni{K?3j
zgjo(<lX~V}2M&|4y4zTMGU+%BlG6?uji#ZzyTE)hL#>ZSpZ)-;%Fd-m^*A|R=jRSV
zXB`XeqVE8~w@AjZlbG~NGx!CLh0yO&GqXh;*3KY5%9+93>#`ZFAecE?b7ux6*_Sn>
zPj-Qjrixrl%X^z-Xw5G*YR=%AJ2Qw^hiV27RsyyCzyIm~{^$SxA5cpJ1QY-Q00;m;
zuGR=xp;SWF^Z)?Ym;(Sf0001PZ)9a(ZEs|CY-MvVV`yP=bS`RhFJx(RbT4CQb#7~O
zFKA_KaAk6HE@WYJVRL14E^2cwZDDZi{fR;wNs}myzKXifnL#u%tMLNu_DCfmWWemk
z*zMmgqyh=FStS8-w;$*}$9=Jzv1DdsR+hls{mq>7-|w4gqpHe1BO_yvKYqSVMrmiz
z|9NAr^z&t>oBX`-b35q{)!W5ZJdV?3ym+1dT>3d3Oh(Nl{dwc#&x?yo>i^SGbBRmp
zzl+VmC|Mjs@%%Eqc-(%dOmoofCe5)L*Fz<f`|&7FA1oE8o&MD$dL4}XLNF!#XEE+~
z)Y#RS)XF56@uWLWX=y@*yYX}|8RwVu`|k9|-Tbb{o#xGq&eCSwO&&3*#}1|$_irCw
z)WMJz<H1$!Uv?f|`^o6`LC|RpdJh#*>zIs&gKqp7;2CAt+%J+QSG}Y^erUz?QBkdZ
zGG`?ksKNBdaAcN#`Q`V1;g`aH_2XWW4&!E0h}!XJyvPl}$EDx<zbg<M4o2g`csfi9
zf0X;v{fldL5WW{KM}uBrPW297(xnRp&`mX{xlO-{IyJXRRSoB0pw^;9-PCT?I5LfN
z`mN-i8~MGjhgj|xlHPDUEnH6ecmxaMc04X9m?&H%g-M#UN`=e8sF2*py<s<@2ZDvT
ztBQ5I7jg4uk!O_L<KRqN{lQ>ZoG<*LJ{OjL!AC6jT@K+W8Ba$2v=A32{m$1(Qs}5Y
z(?tF1k2|V^Y2hmAC!=_rv}jIo;i@~hP~G3gqfUIG4ujjhg28lLm~>i&SB0YL{?%_Z
zf^IS{;LGJrcpPEB1uD>KEi9<F-{*_-o1wvtM=-F<!k62)J4wD2I%%PwbjIyuROnB-
zT{X3l8ooMmojxpC(oGZYAT3<R>S>W6Vi=F&UI7~^JSm*C6aGCO6vjz9=28lODVSMZ
ze7?Axv$CD^t?G7vbP9bIv5gHifSdl{u0OxQjlv*daDUpN(Ms^tsnn}iuejKs;*F`X
znX_Gi6;VJFk4EvdP*mgZPFe~JBcQhEbvpmI7e>!NcU8*J(XS_kS9&pio3S`2A3xE0
zsA&|j<|4OH_|N|=I4`J`d4^@Pg0Kh(OyA)j0z5pLuL^XQ7l)(4cmS^!$AjbX2rec#
zHQe5&?j1{{-A*$pE|&_==W!3_J`S*vIT(&8@#GnQ$Dw_in>{LiiHrSXn@PPFipjm+
zO@Nd6{}%A3<(sj223-a~`X>$2YTX{S56*IPl}~d&vRVaoSUTfGb=$j0MxiCju2Ak0
zsTFZfIyAY3?aw^wP|R5k1gpWNIM#DiYR(?^j)K`(?T0Ex9nHh4byDtc!2s%avrTkn
zoN*Q6)YK`dvOy$j*6Wg2%Uh-|OtQSgVh@89&r&tVxXP&_8_TaL5&B@v<I20w=<EKd
zN=<v4QF6N6;0>8~b|kc$^M%(uvJIz&Jn$3C7`|}+hu6_u9eK-$Ma?SydSY<&iM*=(
z<vej$G7H+K=A2qkXViR3^nyBc!gz3yDEh5Gj;{c1>!I*z`m>NCvQUHRDAEv^C%dt)
zeuMF32SQa4YvbF+q~A)<6tz&C`wxYzUlX!ctD7cU-9bFoV6aqJSze}(8wEOe>YeF$
zGcfk5{`h~w&=t&>uH0!j=pa&fR{`l||4ZRcwX7)4q;RF^*nZ(lJi1C14E6C{+8n5x
zR1+>2)54c=8?NK4FY0n?8E98Uv00i0z2)+%i^W3YlKSEk9ve6;6`;LBFB!K7wmBDi
z^&z<IGw547d4S}vQwoO9<<!p!@DeG_@vhxzwrLz`doby?fV_tKUOyjsil3a5ruGQu
z{-vO<vD;1yC}Bl#!XiN%FczF^&Uw>hx}u8|2Ms%_ZU)tyI#cCRVR3PBq%I!SX=+f}
z$4^KVAC<7g(QifA&da`kLg8)f*28x^iPzA<?{G;SWob~Ldeo{iWus<z*~c51;82e}
zL))lQ@o?Ck7P*fS4q#rBI}XBpJ5VV0xH6B6r5G>urw3PEA&qYmclUWy27SeDFyo{4
zOo3!q@hre&;3%<G#Bey<f@-z{TuvXZ(J=u2t=f@6D=8EK)M$Uz?x{}*vS|+{sGFQ$
zEYvhz&>7FAYIBoI#pqyf0~mt>)=_db>Bb|Ng5p%5Dzy}=o=_a(Zgc8DlNme#6O%V;
z)I_GMPSjl0J%r5F<KUgR!B_#as@MC6Vb`=YN<dPTKuhZQ0=-qz<4g+x%6IVyb_<))
zv&;j3811ho0Llc%y1W9*q&XP1e${yL<hPQBb8$Xy)gRUS2BT9v7`KB?D+B2zx}9+3
z>cz!i&`sh#!atPX{E?BJ@JY%Wi^b#rEn`u~_s7;M?oa>1-~^w(VJPWt(zg#c$u!kF
z@$r*kpEQ?dj+Q|is<yfs4Tz}6t8sgizCleMhACe_=qz@iQUZryWwX#J{02gULg&d7
zQLdmdmPJLnn~$AOY8B=;b<ywi<2#XQ*`A>7!mrSw`mwO^_c}pLNIlWgFe{Z^8(2)s
zslt;jv?-SlKDkTxh@s~X9GX+3|3urVe(B!6hp@QMb-|JU5-$@G@FiaP!qSC88*m~L
z4sj3AFv{Z|WLD#4b7M13Yz}(rlf$pYE3*rYI=2cn<=~&sNjE`Kp!RhVcZ>1zM!^%@
zsl%?i2)quTh>mk4ZnN#Fm)X{k1|y*VNljWYfIq2esXy^D?=AAp@d`g>ZeA83;11#0
zH!wg$Qol@71Qi_wi-m=bY3p_wOQ}8QEx%oX7c2C_9?RQhEoE(h+!9B2yW+kB7It~D
zBfsN=fWgerEsRN4VwBHp#fkt;hHATqQ@qMZ+Dnw{U@}$^oD4xSf>(E<h>H}iCAw)-
z1W|%c2j-{|pP6cQ6(NyJ!@);jm8dSTLqLuF;bTDhoDo#f>&0F?EMiOZz_4pFM*TdI
z8|$DAzd`0a6xF4G(jbrKC{YKXi1MLLSulWOxJ9>E9-;xzzhRlJKs}r4<*!%^;Oj<g
zIgN~P%+04yswz&Hdo}L`%5i09SbZ}KBvfC6i4e~y7PHgZNv1{Bv?UTGtNL;7^JkPl
zef~UGD$E&C6g=ScN0a7wFq->B@VkErO_5CM$%+q{05Z(nD&kcQc0`1#qhVOYFF>j?
z4XVMFYmfwg(V>#nrQJ;jMEWY`2}?$(&OtE7=VQ=4>6eI2t^EH%G)R5RWh(J<Z&+zw
zsh|N|ykg~(csFk$|0j0~e9)I$$*`+VoB|6AD1?jXV@e+_w0znO913WH<z)Jpz#G%`
z(o!Kwy9(((X?0S#^PZ^X7(Y>OlEQzXKBhV9498EX&{BW!L@oQ1i$uY8@`TtVY6#a1
zyDQ<)%vvzV<4_c0Mi%U0Tn=}{`+~Z&OVCa2K_C0nEHy<trAV{Cv01O3-C|NOi)EXW
z5pYe4?b3L*qfn?pv+ArUcpk$$HDJXm&=|6k1MZdih{oQ*{?SSK?a79%!TdiiOAA5z
zuA}%5;P!?s)GlG0fvz3g&6tmHH$O0ArFcQ&^MS8nwV*=(39V-fXAr&zG!V_hJ-}yI
zPS@p*c&@-5!QR33qfbbv93g{|X3MB~=6hj-^~UPmv@k}kY1#=Yo7JQ#=iOG=2i#T~
zWKJxo0I_3XL;@e&Xq&l>l?ulz!3K|4W;Iy&PgUSAwEFRQ<<sA6SN*q|*EW26xPAC%
z_2Ev`e`~Wkg71&)4E|YrT#xF%r^GATp5ZCbITR&^HarGoO#M;7KTkJ*47d!+nF(d4
z)W5cMLZ*DLFgkcu@F=yyYmElfiqS85A2DIg)h%r#Za;k|;drwuN<vX_>de|)i98F{
zh5n_;>Oa1V5irSM3NSi>a(tz4Y92))b43G>-32zR0&+2yWy~@MT-{FBvI*`~x!}AY
z`+(i+^e2f=*5y*6x(&(D8e+2)B1m&dPD|JTX=%|ZcVR%q*@XES{D`JO|Dn6`7Z7Xy
z0&55tpq9dRbVvWMzB2#n<<+>%y}o8$Q&4TjMfKptF|$5gNsn&f!OQ1ymyB%gQP<25
zTql0pbfL^{A8(Q$y)1G!Qy}!mTnj(i4qHC`Gt2-Z2k(BeMB5*PhBh=-Zd`t!_i+f`
zRH@`{EE=Fk)PR7LO}y&_v|^88^%|Ey&OiJg&e$;+2#(BQ#BkUdi<5So?%(wf2sut!
zD$2X(Ozd$CoG~waU=v!&aFjFwO&3v>YB$2STTtb0JA+ATOPHJ7k!PS}&REzOm~do6
zgKn~T7mxbXXJMf*w^8{0=Q;I5_flBU7w6pXKLc>tfi4yfx=Ea(0*-5GqF{katF27p
z)||H@OA01b&$kJ!y@DA1VpM3xP0$b<Lg0u$070P7rz<=G^Vw{JtRm$1Y&NOdLpzAU
zKwoLl;+&fEE%Ll2?m$ay^r*lFv~a&s7(l7P;ysp|n&+u+Li5mGr^9Y%92P>+#MSLN
zPKlsd#KOh7MP5ZqB3aFfD#_{<pozx4p?Wblw`piO+bBpyv2hE<s`SDud?~0m^;Q@Y
z{I32tC+Rop0ty)`xF;*~u<MI+n_=|{(q_X++J?5R9>f`}rLPPEg=!fw-e-00b}Ve<
zE+Z3?&U(*Fb5aEa#^BUhs~cD-s4gZA>vBU1?>R^5qabEWRW+JU)HaMe7ai5>bi*n4
z1E6~`O5&SBJhrfFTf%R?E~!A%!G9G_RDTqGE7w&{n@*%>V`CQBA5&4)aBc#*;;28A
z%We+yE9V3grc{hbG5hvaXiw*zz0$41STa}TLnp2o4?AOZJ$+LsdOQjXe$~6hrrMwK
zxVSvOI3Ao1)h0y>zZC(p;VS|Ais{`m@X@roHSW=de*k2T`OZ(S2~^ftsFQB#!DpKj
zc7(;n#YHmeP@BMpAg~>NhpwH*Cgb69D;^q4?e=&)OgEO6(y;>Mfm-Ry?%+<rXm9E3
zBuSAcT3TCKS$*+heSL{EYHAIiB+Xv@>`9u8(<kZxJxM@qrr`d6LD83MFP?f6gMz49
zQ}Y7CC{~nq0%m2U!iD~6t-#^T#fz!hH(as{{P{Rt7q8<u>A_i!O(nebFW{Ol!pHf)
ztbp=RJ~BL7O_YFD|DzzYlST@vZqN;&sP@=81-Q_eERv}*>|;;e%gJPjcA@fp6I#l?
z1>NfXxR>-NY$W@0>1W3?0X2>pAB3x9&`Z=g@thg{(3Ydpij?dmO%txyk?+RvUkX4}
zT~7xRkK3LfhVi^`0O+8hAZHIel@1!4-nWzTsrtC8TFHJpXwX;qcOme-@ph~6wsCT<
ziqLEp5B856CyjTt&-#;J<)~c!d{8_3T&>krEj6&E!pe(fztnblck45b8cVGD-w#jA
zM<=QkTjXhGUT6ECPqrIJ)nilY7d6eL!dez{bO%=}%X*3M!EY_?T=jJU_`Mmr0^)9O
zkdE=Brp0@!z@FNl$uRA7rJbULS8P4LP<7Rjn9dh|)x~|(-2hh=(72;t5S&#|6!aCQ
z)wYpw_i8Xwgh-FnU5W>4CF5k&Q;^rc0)3jgMdN#g47>4#B05OyaW%+ub5Sj;4K9x2
z{*`a{%lFp+Fmvk&3g~shcT|UOCI0HH6TU1t4V1Vf+FUM!0MTiFgFXw=4#wwnJsjK>
zR}_VX4+<v_Mn&9K9?iU@3ol2pzBF{VraiBZEnC#o`t?;|MU8Mp4NJaTRqs~4ckAli
zx_Y<b_~$qc|Kju=R@iGN6fh}_L9Yt@?#SFpD?qQOUq{+>^-(C58iKq2HelOrXcR@^
z>raw|<};%DG-t&2znL-c*!0XRR!Ck7bzB=8%Z~jA2v!wlUUse?7!MK1!c0iM)+WZC
z`3$iPZPSQVv-Imv)x2sSh|bQXr59o~vI&UnX!QCXwY@;)c~_&3A7NLD#aP|aL}RE^
zeKD_Kb6E7LG*#N)?sv(ka|xnO^jC|=W1wl#;RtMVz@oc=Hj6}-fz2Zy{X0dhs9UN%
z8r-QaPt?6s8;u5|kl)2X@$8*m2drp{eL;E!%+UL6K0WPS47zw<7Tqtxlc(?ar~Fhr
z#!8AjG`*o!DKs*tomJ-SE3%%yq&M^Pc?7riG>{`#5SHU9@{>PZ6oSCp_-#>`d!w-k
zle(^>2!7#XkvAs7Y-jC3H<1@W80$Nj(?y#14uBMky3iBd)I8vmdmNzsx?sQl248=a
z;#YL$UZ-E~xAx-u$`p7QvVT^{CSyuUGx<&1L$l!PkAk{k?7VxiS%kuOEXV?M!wKct
zM0yrr5+`lu8)u<ITh=~Hq7)|WsqDwjr;mC>o+1Xo!gGn!(_B<@)Z3+g7VTResbJOl
zQ+#hK#P>z})~oP6V8$TqlaJz7C+?@kR&q5;k~B<2@JF@XMNM7hg6nutrPAtN#HPbd
z@<(V=wWiuUXw2ujj<pR9G5~j*W~Zn4mSI=XrYRYMFD8qAsm@ggY{@Pag@T_<HL~?%
z`o@@Bqg^`_oRX6OvZ>7N2DBr2!&-c#uo3GVU=@3~U2(3Y?A0O85$F=MCwTMer=fA%
zy=yC|Efgg-P{TtP6yoTt{a;e}<&~x;)Y(E0Uso11+_VzJx?&@7Ar*C@dO%{~7PMJS
zwG<OI{j2sEz4TNOT=_zL0VY*(0lbGsV7ce7iUQ*@G`6MMLXHSA1{KHWjRM(gA|ip3
z@~t`iEDPw6qaHN&K1#rR2M(&KwFvtw+Frch3|Br6Ri1j4r=l_fc(*E=FfCYWCN#WX
zf`eWNj^>xp+j+)j00Oiv+-0mvt`-9|N}(?2g{YsJ`L$4dvb?yCY@LNe`nG@^-6qgE
zz4#_6q>~ZZ6&v3oD%VN1rxFpy>f{uk95j|zONBM~^C`>d%YI7qTMu_5cbR9()pYer
zGQLZaK5kxG9FA8sXcdOzRsJ1dr*P{GPoRn-6shWq3i+;rl*;)y<&RVNm_c&KZJ@IS
zv=uIBR5anV1nb3K^R3Q^V}3jey<h{?&gCUYcl5n?5yr<wq$H6eSNk}xh+|;TpAduY
zIS7q<D8l0%C5IS2=w;M+ul{n-c+?R4x-mTRcAS~P{RayS?BITs62Z~(juSxJMNun1
z8VlO0-xA;A9*wS%ZYlCJ>WrFQ;ep|xn;0ah{+!@n$sDGELO1|fC<zo&!;(d?;S)vc
z#>gXOnpC?N2g=v_tx(&3X&lkXpv(v)Gb>d-bq3sT%`Tld^k<9|J{r!@&jjiJ;9>(s
zno^;8I{#4Anf`Bbc2Hc7{#P-$%=y~|>fLzaYB2tyC@*%FP$botj5n}+p^7?>@%^LV
zu?roetF6l)mvZUd04f5~4~axWISL9eK&;~k|LC)rP)_9m@o0a%@(e`?L1vzZl$leh
z@MLZE`Lh=axvM|V^9GbzQrtdApxbXbR+`L|e0rp8S08(Cp=TX??g0p@1Y$>I119_?
z=yhxfTbQ>Dm2n6L#>#A$EV|%I<E%jV51}e~q&T<I>BpmKAx+{@v+Y_EkvHQQ4T<14
zm02wGChFiS<V~WUpF%$G#?j)k<8DE-H+&qJ4+b}rAzM6NSftBbp1UK6PI^NyqV~Y-
z)o+eJ-XGn8-Kw@>^1g58jsTP#Vh|^@`u`VnFZ*`=e*e-6@TG%VTlg0cVv!wrK<7lh
zZt(m`p+8S(*6yIehjr~kk3IdhJ1}emJoY**k4t7|LbdV)3jbDEv6dbbKS;e@P`%6-
ze*29ZCNffuRAH-@WPh=@9vZoa)YUjt@i{;pb_cKp-+k2b&mIRbS$JY34F%AR7>`^X
z5`;W_fgPCs&`IjX=@^$1;DnxV=Vlx)x^fw`P^<#WE<kLiWJTH+g&`0I;X0X8>;nzV
z*b84XB`i(*^O{C3l=;TY$iN(fr8PB@cDEf3tpL$ulF!mJ_`KWd3cgl8vCdi-adqq)
zb|{%{<&lu$2J~tzT>RevIWwSQ^sfMmhhSjFV*mCkyxOGgpIoE~+QSeDmgdr61&ogc
zw!FmsAeljSuW_1AdWywl-~7JTU8uQw;vDJ&Xjdv>v>x=qBkNQ-_%}=O#lY~vzvfd=
z0n+IzPSl}2QgQt~MCSqaO_{j2_&7oGof>m3+ZiuY6{L9$0g`^iw*dI6Q-gl-rIhe+
z6HxUx?%Os2Z`DPiHWUVH1xEeWlP4kHKPJr4YZmJM>W*4t41P&Q9fCO0$C$or^v<jd
zY#VClftmU^2PzZv5*!TSPulKWj`7D3T7_SeKE3<|5_fE5Gw9caZU(!G6^HP7ie{i$
zejfDEC0KRy8caRFVgYFg8ydhC8Vp|-1MiQa|L_+a<!idXEkv{uwcklJnDhmW%AKcq
zy`R!N^G4}hk=yDZv-A#+0l7D6?NAHOkJ`-M;5O0crl?msZ=tbWv)J=^di#TM=W<F>
zCwO5C<*k$2k?6XucI5(v9&lv9rcv(!o^WhdM+PDB(Hu|smpK!vMU5|6yjqmIr9f%i
zT%0G9dvtL(F=p~C*=dYr3t?y;LkbI^8qFj&GQg4_C?eA+wP+g?GG9_Td<Gk+@wK&l
zb6+p&ifqki+S$xA_hk!PvUSpSwR#wHx?Q!I)-Lt3b2S;!&4J-W^nq6k$gj~xrzF%M
z8-ldcBitx_)W1JTI!;R%#c5ttS7S|GhDG+~{mu2DW(T}iX7|C^Ra%u9%R*h_0t{od
zYDO3^Kd>I?;U`I$@KWS21}}%U3v&z=jp|zs48|vd^VrBdws`Kwo3$EPhf&du4U(wt
zH!AXx7VuMEydeEQx3rnWrY!Z{K74lvY<19?I2)|e7N&ca9sop>3injP3~0h-5eFcY
zCJ?2HRHjfq@pufz$}Q>2Q%on|9z*vzw5V54-Aa=SYy>RpMx9nG>1(_<59>vpwgyQG
z8gGn_0d{;nFcGyYpMyFk{eKDa2sE36KD6jg&GD57Hzw@MPw@Fcw*WI&F#lH-EZ9ju
zJ0kkT!f0Q77agIufC)MA#PW-_B3&R<s#I8+_d_e#lFYLHChRt{lXwhDq5IWE4FZ<s
zXSs?Y0Ty1#xq@eC;S|I40yK#0+u1aX4AD>S*!YslNhJ(KPev0=IK22ZC+G-%3s7Vf
zoE3yg(AIp|2ocQz_mXj3BK=2=tim1$jcmkLRsxt6TVY&t*N9QFupv2@33Be+K8i@b
z56H(d@hAuVG1-R{hn@SRd#sk!(pU6#+7*r;@M<gWb-Fo`DohnHyf2{BhHe+$4Da!s
zZN-5hKzwM|TQI@X6>-&_D&C>1zWU7Fhzgfg*{u<fGm5{{Gb;)jg0cRc+NHsrAL%h;
zxT_n`gjCiRSAQuQvx1CTnEF~2BgEO@Fk#BYd6xk^X^#fuaW|oG8(?pQk^Tmt0vjTx
z*XwZ!O^~oYMpc=O6A0WNS|c)57&pfgj<KC{9LL;k>(>*A-e-dQQ4nN>>wmL>`>a(r
zmJJ5yLW}Q`V{-ykP6nq)czi^L1FKulkWTXk=KIQ+I7?{Ko8k9uqhuWGm`xZu5rhfg
z`O}TZ+K@~RAl5xI_UF!}1&SGtiGfTz?}8e+V9_p@3PqpV$WBTG;|fF{#PNwhT&}%}
zk7ujNh2n#nKCr;tzbHf<Prnp$5pav^&e-son_a*T0?hfi(@O@E@#YWg9&7<NC%v#0
zIWsz;wu;=QF!!Msa1AG8UFx#Wqmq#v1F_QjLDDkoiGpoy23I~B^ueGbg)pb;W|#vZ
z%Um}hwoff2y+A{cIU=k;Rh{D7CaU7+9u`@R2fM1pBWT1}NfZ@Df2H<C_W(gazQ6k?
zclW1hmn<N=XhuzOSh3)19$#TYe#E-3%}6&)E8(ci*w&X);ft#G1sLHkELd3}&COC_
z^$YmmsRuNbggC6w*_Xuvhv>y6_(Gk0d3Xu1HYzhoLHqFZXX&qUmxd-0S{V@0Y!ouH
z3@;BXFsu%)Ca({?Qx);m;}-~9dIW^1WBXn%3vKbAW<%w=z&E=rSU^0EyFz)dkr;KO
z_=qONGEikC7;ztt{@Sb`)p<?bxGT#8QXjL6qe{ZN&2Zdr-Y4XCKmddy%1+t=p)=Z1
zJ<`JLDj6e8mHRCeB<)|mqgL4FMX^3HJG%hQ_v;)uSmR=*O|TCh&HYy54mTWn5Toyz
zbT3u%(QbvUBCtMoua=fa??^7glFp{Afz<^u3<F>MOj2Ag%-SCvjJQ=Q-16VgXp7tW
z4yq(o&5;kJ!?<6Mhbe#4!Sd9W$w!^ZCFk{`X=Q^<l<AMt5qd@_x*f-~2v5%EKTwO0
z%6s*zs-t<U7ySFXt*kax-JPQf81kjXc_#*-tt@UBy|zYO?KngJ*EoHm07ntpPZF@|
zF1$@hmW~VoFP^O-N%kUtE#dTV=<|!+LFsYrUv}=X4~+gNn-#K;42Y>M5b(6&4u^nC
zkH#+70TAR{gAth~z$jsu_L4>RiuW)es?nxdCj(yFUC>$<GfPt_SVvrqM_1;Z?;JX{
z=)MKT4#sCJx^fsYnN&FHCpUKqzW;b@Vd<0hKam^$L|7dxmqN3c&pNMaSdq3IER|m_
z$)$gyxpY$*;m-i9RPq|Vg&EI34}s!j@j(J|c7CzlfnE3)gXHpGgv9uM-W}&(hso{E
zY?x&A&A%4#pp%6Mz;3$}06UHBCD^IP_#8>V0|Og;nM3quuMNLKz=(i*!Ma%z7;gAf
zhtb7UVr0F_;d7g9cyMEZ|1sdSRB&IY0qA=LuMgLb{13h}zdz2Q0=h>_tTdv2@h)^O
z+&}L5=9}spP}Fj+LH0vS?&zD2?ocS)qjHkkK{o{b8q}2fb$rjSr&xOGm!4wjsVS`)
z3}!{;s6?<3yx8p*l8Vvq%?A?+@m^rK0o%qROot5J%^1}VkAELSKrXjneD4&5QHKgn
zb&JynTAb<@?K*5a8ksl+@6V#FRI*cctR{JO8EdhF2E-sgEomp$nX)&dL><>!l)hu^
zunpwChH6{-2_`&j<O!x8oo1u&)KZ7k{v0}OJ+XGutEIvUWV<Nh#k4X%521C)_qAUv
z;vt1sVCK727$R12I^9Pm_))#eKA&Kx;|F>J)a#JpHOz--&RtrFrH}s6Ky@`P93=g|
zB9YSqWlt=C(>)P{GgH~=WQ)n=B?LU?{7y-NuKycLOLup7izDn|h#jEwKh;@cw7@Gv
z4d_z~w0k_-$n0l{zzt%=H2Q~=xRoseOC*Y^wGNhhGUg2|tj;^F=2d{DUQ)ocxDKwz
z`to^QAU6W+R_poMwV+sh@&tE_yTLol=_{ICbeiEQWTz1>tYJ{sVG6;SPfpE;CnP7O
z=Y;*O%Kp3sRI3N9eBPvj`xB_}q?nl+{Fhn7+y)*wzu?CClcb(A6Gdm8SrZLSHdHA%
z)tueTY2op+eax=r?(VTVnc2NUeAFDIMX1G?d)^zo8hWs@!DX_pKk0C{JbKeRMll!%
z4q8po9-&2Nr)i>kgZLfLyE}<lZLQ3+v-^`E;tuR)ur<2RieqREI72XkQge0pG&Ed@
z;ebQ-_BSvbSvtGT;I0sw<ZnDj7!}`$=tBev62`&B2mBLi%&jXAKxXs9gUJDS2Pi^g
z^Ohzw4mt?9UmhIM1^(cM8S0`4%;w_q^L6;M=0nntwYCpJ^}OZ?n5dv^&XFg<{kpuk
zva-7FNNmu%a`EZ9OOtw|Fj9O8ixM8ioB^^FQKN_%!K2ZNFSw;~P8txo3K7E2+$x~3
zn>DMI#plZ_>n}X2n$cLXnBrD48c(x5sA2rIE<D8T^t1qk*#eu5fA{w)r#}=RW_klA
z!-MyXVw2(7PFjuS7e!{SEUvGv&(FIn5LTXqZ-e}nc!sONEkjLJ2DaglF|oI(R~}2!
zG4)Oef6CjIo?58qi|fxkcm|$nb@BPS3_k}hpDU0~FA$!or?0!L5D4q7&ZtLg1xv$)
zXkC_V_nFpA(HZTnF0T3wzFhO03{`uUt@q-ou9*eG@Fo@ckQ<~bcT8_Bom=R~po5K^
zt+iJTl_o3zi9&-mtSBoZwnfA&yGf?t-A?8JhT$-kbcjX%vgvS@5oCMUtmJ>)Ohz|d
zNRzH!hAk^P=>h5t`un3g_~k+<t^AN_5vEY*8ihakSy%L9XWEo^B9I!#2l3OaP%dFg
z#i(O}6z4rGXX0|{1h&q2K4CbLyh3`ApXLHqHcrmqOhy`5J-sMyWApxt%|}(|0ndBS
zxs|PDKm7XB#LR%-e-uW>*Qao0e_q(1u?@aKbv|kq-2MA$=2uY)1`Y$8JzGB^Y!0Bw
ztgv886^Rz|w&W@qZ-X&l^!K)AMl+A!qF^H?z9ap3T(!q8m}7;n@sYoDi)pNyfm}s^
z-WFT&=qBl_-z)Qr?c`n@Fp^5KP!V^S?DOxzSYQhOT%b?JS*JBdgMApx1dNX7#*_ke
z?vs)G;Pz8}LOP~;WF8ecaD@Ra=+&oi3^lNUC|j{TtDlRE{Iu**KQ5-pxHxCT{MI6x
z?LgdAp6WF$4JL|(&|=z18WHhEVNSB^bNunLpKS%OZ1ydrf6Kld4+8I|!^D3pY#DiK
zEsUFekp$=WS*Ip)O_@KVsbAK_`7?#!rVmAsb>TIL9!?lo6JjF`u0~0kQV1vUAsRrq
zxpCrsxa`m64BXul$4nidM3|k^LTHfDZ>@3g23KLCfJ-p6X4~Q1-@%5sl5FWwOP&VT
zTyDvXMHr7_byB=$VoX~nMsM2Mkg6jKs!w&&WNVvUGEvCTBJ$Bq<u#PH2X~=n(hXOe
z<?Ww63^Y~97}y`r32Sqq%VV1euR3oX>s97T@|zepXaZr7g-)-Rv^omEb*G_jym_@d
zt>iDx3l8qTWL5^<kPO)U2<V0)YeP6Xm^IkV=_Gs@9Er74+QbBN%&PZykhig|5bRZ(
zqx|q(XDySo@K?7%5F78t)4^o?NL1X#!UEVQ<H14PYT=B9H^xxEvu7Bv=du|gTLRe^
z7lZK_AkDrZ)1l??RP@c%>5sb+I32LX_Fg<RK9vpiZIScULlBJdZ)~9<Z)^Fz*d2i4
z$J!g)966b`biN##;lpWYFpN97fl@Duhj??m|8|l3>Re8XPHHsZqcP$0m~8OOL_u|3
z)U8>g{+~?Yc@e$aREM?6%z@|YC1op!zEaUw$u>BjF*!D$@@P9Mpkw+?dLlvYUtM(W
zI=qQ?Qj63zbeb`=|AVs`37dM>423M%btO5M88u-Uy_y)NbVe0NH)z8A7~R!)P-qXj
zExX!ebKL4&V)o9lHki0X8{jmo`Z|G6i?#_zk0n~x=>>2U1=Z4)fhXvch<ge!%LV?6
zox;NXEE>n&g6~*8mU%>5oph-1j4o&G0suVz)Dix_lNTd&pQ*HDIIGkl!37acIjjt)
zq9#eXOmsic!7ob%T|%LA@Eowt?OGC%w>s#H)@ho3c*OE>6?c80KAK?IP%+M8T_k49
zT5e79@^NYn2SlytkbAaqtO6l~bx1HAH+kG-2b5}?3bPHJbZnqbjR`KZCRr=nVYwUm
zU57RuLH3N)k9Hgwn%G-js-h{yUhgFufn(!sTgpb5#R1JN&tb5%KG=g172-w^#0^~z
zCgx&P{t8_XFjl^`M5J#b4{U!xa}=)>A2WtXRc4Slk`su42w7{uodUC?jwz%wc)lqb
z9^8Wag;l*tsaY}do>suIC=C&@n03~YqF2=!5*WPONg?gQGX+IZkL}5oj;xq&qHjam
z1eUdPsbE{r#|<yhi|+xnrG=S^e2x8lT>eC;V7^rFzBnTV2lquAKFOM5=^lQCctB6#
zrqyrM<dTJzb;m|aj}lx}?cnF6-IM;QcSG%4a{^8rRd^wxjKFI%2NtfX+yF(RHj~44
z=dE?9TJ<y7Ri^dWc8MLk6;U=Cs4ExF21mi%E5HBzuDp9%E7_gaV?<)3hX&6SX}Hj_
zy>$AQ5VCTL*30O=IZ@j?RX57p#littyFe%LTZC|k9^RYubg=3wh3$k7@qPA#=>ubn
zW1vA1_S2Fc7^!%%a6HhtZwhw_8)`$R7>X5#2f!7Zl)Nl6)V-MA#)GZSy*d@(r5<D4
z2Zb<Jm$RWr&9<l!Rr%v9>aM7FN-H~EKn1JZCo5V(X~K(Bjgsn2{j+R0lX|fP;2#>`
zO5qjV5F;vu*H#w!zUlZ#vxO3OS0cQlG0s?ADRzJkg~kM!0O=qNNY~q}3r?*_j3MZM
z?2;4J{(aFse9?*J`sXe?M+c*w8GA8?JtjO%F=H?l0w7B`o){9`w7yg*&W^-yiq6kl
zvs4)2$CVQ3R@X{}bx`}O|JEUIc(XfcL7-wB$2{~#+xlB!dGQ6Pg2c@b$WM}?qBu(#
zI$Px}Tu>P`Clm?f4kGx)hb{(_kZTKK6eI=k76W>s2af9;2N{C8t9M)wA{P^Ju4C;0
zP+WFKpgp-8FrX2Bzu@Z`v8o~fD6%6~XT5<>QixlB4Yc66xvPAug1Qo4=xY`XHQX1v
zgubyEr>Jo^E&-2|Q@%#}-Hy5hKs(43364Z@jiI%02`trAKcNEzFydXDXtaT9Cj);V
zq7*PEpiMYuLhetsOh6M|X@ATN!39aELk(p(T&$Uiz?xyrQaIj(5*26KPe$xGtF0Gj
z@MNx?vDOFvVS)R*qZGtC#<~>QRNC`AcWV^)pyli1ggs~lD`f7(VmWf2!R2KNk>RB<
zn*A!=mlw%Zr(Yg_NJazufp>~;7{Hx4x&k<fwlMJ57*ris(?aoLI#gGmy7(`qaIG%E
z%@6*VGS@dX@uctt=&COpBKk4BK=Sr-0^|?N*7(!{WTu@Kk=GPtrzKm%LQZp*T=v?-
zeq?iMsrr~1&@^bQOChn8LI~~21saudRD&gg2lZp9nqGRkzWz*9?SM!2+T!w}7WDqY
zlo7623KC5i+MHS2X16mm8<t(}a;ru6<kbjZF>bZU_X1WIkp3uXO`6)$7Obpsf|4|w
zJuGaNWP0XQUX3~}w2uWZT1a`3>aq~t&|vluw2@scYOFSdA4zKz-|hEt;mV^V_Nu^F
zJSyIMSgBpajvIv+&Rg!F__;a0w{#I^Hq@-09)?p76<;&!p(NVW2_2sAW~oTO_TY-N
z;<SxP>E(-kZdvV!d4I>t=Jx}VcRY3D&bZ5ZNBp_ru!-Ee37?l4m3yd(wWJULD5Nn9
zmE4a(n&Orm4~9!50oI~pqvXj*l3AAgR0!6!@c3y!Phe(AvLYAg#snBP6?Uh8#N@ja
zMXU2*U$2Yz9dKFl!wta{kH@3IjRw`_z$XTlIib$dGhHjq-f|GSAK!?B?Y=(9wu4hQ
zKv5D4e+G0XN)$-7fP`?$1otRW<kARY^C=QU-3uK&wj}Z^As<JiZ(-j!niH+7IND@n
zP=pCtu~Ep835o^n!>au8T`c{z_eQ%NYae6N%V?0MW&WsDFUFTnksiA+a4=hIjR1h$
zO}pUtdS6CY7jbcQT@k7FA25oVpUYG+3%*(k#ndvFs#@W3!q@5|BkF=xsM`l3KEm|?
zO=hY|UHq)dRPHZVN3<|w%sI+dkB-RGZHIN(Kf$j>bPD6#tCU%KjxzjYzG9jY`e>Ee
z8UQ^VH#+DU2$IV6kPe+zsjASc*9>fBCGR7k<GBa*(YQo8x@ca$M>S!<>W@bn26!+$
zm$Pn<T_UfwlBc!PY7oatW~S~%ea{3O(kWLlnKg$!-5)Vc`(v7%9D9`SE?I5$%8O><
z1MPU4RId?Ioz8B-A<n(}w7*_$FE#^5QbSKY78o@ZMFi=s6g4@&nMuz|;6b)M;R@N1
z_1c}XKWI6jSdF}c67vc{2-omaltDxUNU~jomME3DNVj7jZ7w}k&i69pjK+by(3nCB
z6HieZDYn5(ofK02&BDS$$1_{J;gTOaIxI5u3|dt6=i?2f?A5=63zuaddF*c5W?-`*
z_jaj(*~S@`(`@u8N=DA{LolJ5zczRnie^bgtMjJW%%Fmm=H}*gO`qKr+0B8$?+scL
zg_=@pyGqb?*X}giKq=lLEXD<pGpn5d!_+>xAankbu|g!xE)XD{lxrs~3d*b|-WoK$
z2qak41TC?CwxbCoI4ph^5M3&KhBMVsC*P*_25G5{W+igKZ;Aq*DH|vbkQ!Jn;r}hJ
z%+EQ+?d|zc(WWl+zn(pN=6o@#fLGdVKz~SXJIw@r)sJA*;CRXTYZ3YKZ`M62YH<wI
z6&MLry_&}E7TZlIcu2Ox#KiJ7Y3?z*F7U;c_MvxZ3u0bTvR(T;9!#2T3U}kZ#J1?w
zC)qbdX0wjZ>IieJx8HxB+fKT-2_&;ByiF!ZgqSz*P#$&SF2v!9`{|Puk}LlHv+0zq
zs8&|(3koYYM-sF-hrQfR$TVeT(U!kUbl{q9R|Z|<VYdgA+xw5~+e!wOiW%<EwHejC
zq6dZZ*`^)1dvvq5R<_9>ZLFDT1_^{R1z4H8pL0Jc%FJX~wJg`5l`z4cqykc~c&ZSq
z$L6rCxY0MJSx7|&wgp7VWA$G-h42#k^oYo6q&(?w^Y)2AG5iG+Q3t*N;h2fjMqj#<
zt4=?As?^+uYQ-QqX0}qwO5`9mBGNF^ATl(-j%AwziANc&5II6ny5Bz;3~fmVy)gYK
zQKz$`6t>LbQfX(8_rmYv3=Qz7rV;QO@rvkgAL&;5M4wS&1ovU+CbW^vRRI#}yTu+e
zC}%X--Iean@5bDSqOX7H#LYH5ID6-Y%U=Xd2|nDQp&1{yrboaKaw5nWBK@~S2r;9*
zRlnmthM%KGmyl26CeXYA7)v-pWae-=>1soV0T36MLX!tlBE^ECd`XCg;#D1DVl?T4
zFj#lc5E&)Y!rfrfZGkvL4Wt9%X)xs-)!-Jm3@8l7Amt?=oW(+As>g}7xOp>6pjn`k
z81om5DR)HNY$hoz=AeLSFS~ajP?-$TN=cREL2_HQ`xwlxH=LKhkA41I-`0!qs2Q@h
zcUf_6rcijIHac$6ZuwLVG8gWm(iRvjM5<vh#1&%;o~Z(!7Rua-BQ6lS0H9dRsfb+T
zfs>2_qundS#`}dWwaB_l8@O4;362$ZOplgDPQlIyplFmQ47#QnOpgd)C&E?-MxooT
z^@iiAR_YcNwG428Fr~<6%0J4BI&(0fI>NCqu;U77r8K=tc~ujev?PCAh(`!q_#8uv
zB{}ty=-PJ>h3~}3sCyzG{~6CN+iG4dQN*pwVRhb8(A>GtU|H9v(6ssS;MJxS#UM+L
zaJsD9v<uZq4Pa>1oQO)xsZto_sIsyim|u7LczS6Eiu?v+4kc&+t2_TFCiBS=QfrqX
zJLZot$xlLTeK+ciZ6JFiyO#3V6FcV6)Z!FYT@7f7#sydh<g#(U&>ApM5}w7W8jn9X
zH+;HbMn+OgLv-dL!|FSP7~P*<z<Oa8$5wI93T<Y~GOWMKg49O~t!_mOV$Nb9GWVU&
z#Led$&NZ9)<GTh+wtLBqqwgk|GtwpMO*bNIOQ!+2R$aSOmj3(8QE>AmIb-nR^m8zE
zB*rp)t$twxtYblP#y4SStyDti3=Z+-p89#|m%{)0{Q2PYsP_3YSj2)MxltceMwZ74
zZXvw^uF^wdL}EdS6+pgZBP16U{KTBLSz@+<-fje?pbz^~!2*>EA9G}brJ&nHDWF~d
zG{2b*>JA;CsuH`h>65o0bh+YF@PV8YomW^AW1HjS5vpcR6z9J`9FzV;Yc|+O9-NbB
z1d7iL>g1@hi|s%ToPJ_Qc0~E-j{xiHg3(~qN7M04A6LnsmyE#z#~0g{DNn-V1IFit
z)G8GYPs>LqwIlp}a<>2ZWV>-xJ;ukQa`p3p`c$pe9|*mb39D@LU7#F-{fyNzC}Oq{
z9Us$cy2YIcbNC*TlZ$#zWI06RehY<TVF}PuFy96IzStXl>vX&E;$U>Ol=PpR9xt^9
z&2;H3xmZ#yEI|v8iB2~jY}x4gP-(+}n3S^OfWX?yi7g0kF~Pxn&NmXw%x46&nooB9
zu(>@9%>TL|9w<sbXhG*GV%q|jC4q}B%uj*RW}rH}zw_ZT8|42HVf}hZ3|1a+wkY5E
z_+GmU)2UM{8j;j(wTdSKgm-xv-LSw_Q@gjYqP{zTfO2Ce(;pSsFmB*7yt(QNb;;_&
zfX+TrnNQaH$CR+L&YU`6-#orwl(S^F=0!9S;JfImN!g6}n-v|SRNA!to1Tgd07B1j
zq3co^xigp1JA+8*q)iePCanJye8`_Hc(dg|9#W(lf6|+epXNV)nz7C5wo6il*v3y<
z6f5+J+WGMl)Mz)+1@^uJRt<rqp*Yqb00%m4B7Gk!)%P!H<QqH#$}bAORj<`W1v~UQ
z7lsN~@#rGH0;2)Q!tq)_6ZU3ae76Zn*(r|xT5mKo5scZ)9bCM!4{qVBrupiQBJZ`T
z{_&HD4^4#-(ZKBvKMb&hMq=b#vwHrhDMHaYwe2L(QGlMtw~2|&3@`k$lxbB1?Xpa&
z(@pw1dyn2e8!nq_cB~`YwfLz@*{5+E54H!d5Lq%+EZj-(t5sp4`iitwFd+47VL@s%
z@YFbCB)yd}d^t4-Nn2-tZ5La5FhdCpfnq8dE3||~F?IkOXU`*;Vw%?&WgArS+NlaZ
zxrt@<;ySn$Wz4YW3cQ;oU5Z!B%cDRPe@^@0=y0jnHDGLFovf-0$`tO7lX{X2#j!d9
zE~yt!!Ln9S8(m6{r<$=glZ6Y_u*X%Y0+@wrlr$$Jkm+`(uZ_wAw(OcTj@JY~IAEi7
zyjJ^ojr({l_7Rng794b~kJpm(`8#{5_fvL~*;W5zW^Y9SpXK_&U6w7)Vt>5T3_1d}
z^!7mGLA`43;!3Maiw&MBT>?#+zWx?G$I@BWIciwRJ!>Wr6<()TO?AvZxi;jgf6kt@
zT%s1{AG-Ved=4n203#+yqXxP=>jDu&4ivTD<IWRRg5sQBbSEPx7kC@PjU&NHzcpv)
zP^{E4kgTE)rv%ah+z|a{hXp=HUgYGH@US138UZV!qOyo%<}?T;YRTeJHeqx^X=zJ_
zjFyxXqUwNx+|bvB3MAi-yO)|yqKW>5F?U~Ew;+1G1bzz`zHEbU3EojGhmzG|Q7^1%
z6(UCYql2synGrA8I+>`~kd}r(1Kig}h>8^bk(c}q)7TJ+QlyfKK-fOn+ogA`6)M4j
zdYw<pNH#&0L_9#P%}QA}z9#|`$N(PYRWjyAi*u{3Ie8bG%Ndaym#5{%gd6mtP4vIQ
zy@1+a+d8d;@-|b60tRvb#dnFDqV&1A5Wu)%8bN_WlJSYI!QI0LQyh-3`hPi|k~<h%
zNn)h$!9=#zQGAE&G;`*(dPBp|ZwTg|;EHWcUyF3_>MaK7abAfKKH`1Q|GuRM@kk<;
zRlFOS(c{;9hjW?A)YRGqCYRbqKWmc6JfT8M{lSw-nmi%Pz9)1cA!DWc-c7F5FdemY
zsi1yOO9gGHq-9!viOTmo`WLPdKHX(j4B0#kE24@2du_0*(cjd6kvjSEnkbVwa-hV+
znWoXROsi)OVCn3YQ`Adqb^p)>Q+6G*{<XT?NIE)mDIAt8gD(sjtsa4;GmR<iu?(nF
zh;wBAMI4w7M8^XS1)}2+bXX!Af=-)QxuN9%RW^Ex-(XCc7lJN>Qa{Q3tsZ{UuMky%
z4_Oi5*ZqdmPl{?W-1h*UI3SvNsqlp6BQ7R>!>AHpi8A^@A}`aaKwwhz9mvr@WH`9c
z()OWvh`09FS2NRqLQm)fbf9iaL%yYVov|X#X<8O{umn}xdZdMBXVlcr2`ri3kS^hO
zZdwl2SJLfvhAAzwIt8>MG*rax%P3P6=`Xz871T;RYH|yrs#{MkWwSd-6Ei`!5+5b;
zjbT<*7jp^(W01SgZ8*LeKz}Hz<Bn5Oi36gW2eYY@LGfPE3MS|@z=}F2yvtMV&IZw>
z`4exI-Q5@ygE(?iryIbQ|JQW$_+=k~5fI6;^~x(yd%J&9+t8Xa_y$~^f;_k@dd68-
z8yYAo9E=~oD7g4y9NGt$rnN6$Cvgj0{+iKb1e^7xK;BV`iDYlU1pJ0kS4aN(DXHeD
zSL;?EcY6cK48fqk2$bi_Gf3X6J0)6lI2wSDR%%;={OY%zbV90oZVs1dggQiZ@sWU-
zHOq<+9jNmQGe)9|7-`iHTBNjC@o8Ja@lZEkXg9trf^#_W#I0l;cfdUa{M^u&b<ph&
z?toW0I7;ohKgI>Flctj-U0Pp%`TQ@{d$In)#-^~BBV?7MAHUG5Zc0Nz`}K)a%M{`(
zR0p_V*i=w#wGsfR(3W54?4e3Uivir;6+%FHylHXjj)D)*>`_d;QRG#6{3r~LR0Z`M
z>D+Q(E?I(TRDA?R4gJ#b@&hd{nDJ7J_p@3ws-eu?sT-5STbMCCYH?xK$euVOTbMPn
z1!rXH(QonbxNFY2@qW^zl5_Jh0ORf+A0C~od|ov;Q%G4t_l*N7nlezV5KLF#V<=WC
ztXd?!%1|byIC28wisUQ70^6o`Nky9~>xHKMM<wDG^Upa=9_Vgl?uziqozJdN_;BSH
zJPVYZITGhK&pA5tdADWoSmc%t!hKHZ9Kil75R2Y;&aVB%-N%Ohz4wpbO+h982&6o?
z_t`xL<Bost%>Vq(<ejX4@5%p3rv>x*Ze&+j&i<cT?eMDo(4yt6S$1CN;kps(IV0cj
zS-uCrk%kbS>WmSgCD+E|uPh;<xa@ShMH^Jrb(+x@4_3^9A|7<-FM76hzE)>6Np#jq
zO6W-}7Q_ib-cyk{C=+m$G+2;SF!UREwj>?PLa~|#mkBn~i$_<AgL?vT{swo7oue0z
z(#v#G6lym55LTmTgw`9vY%Rus8^(5w8h@RUZt^Hz=^r58TU^Irhh~7<;;@ra2oews
zX`Y<p1*MKz(N8#c@WrIn`Op8P@h#q?vM-4jG1d1I-G%u6D}5iaU6Cn3=0j9!s#_Tk
zhJi+=x)F|Bp<Bt#ZUC`Za3N<4mc^246_+bW%u3P(wQi<eGGi~vxjrfQC3yHxOnIpf
z=?sgx^HF~vH6t;LjIQLdHd*O784i=yF5!>IN$0g>LxL;W?aDWoY7VbWvUCFCK`VKk
zvBN^9OSkD8z6s<;T`b;fBjLrVXFSzIUt*9W_d2asH}R9EsJEQ+R{=Knw+JXxw~R^a
z7ne6J4&ttL&61h>qCvpHV%`X?t%V&U#Zy3?=ubbvVmZi<TeQQ>X){~JE|Wjj?;2WW
zF6a+|&qeaBlZ;p-_ru`h8^mfL^546l^v?ng9eRHj)F<R&*K61uuH35&R6MWh%)o)7
zQ?KaMEz0A7HXt^fep<QDD>ikC>DJ7|oJYHh(jA^Q18kZfLX+xlPB%O|XtCn(+2~rN
zn8ek=_{Bahf1;+Hmn)wfD}3Bh*D4mP7?F(A87p<%5`J^|mE37%U7$yftrm`p1S`Y3
zVDuYzruwaJz`V$9q@rjj0Le@{`h#przjLS`t5yYbMm6~#FrJ*HHSJ;&O<`CWf&u5;
z;W(kfO`@d>ieA9CKv;~NdCJIWZwGhej@GEHtQ6A85HSiwoxOk{jbLX#1Ybfn3j?J9
zh`&vJHkN@w?V&k*s_nw1OAm%^Lo=Siy^dO|DuZj|q<`6sudYb`9;vZ|FV|LQlw1xJ
zhJeh5C6v}5$CvS_0~Ttkzo}^g1_f4a@nzDTVjyW7u<eKK&dUdlB{7r#RT&NL(q!}*
zH0lbRFFM_h2?%C{H*}Zr+_N^vxblu$7!qr*3c#;$wMAN{3a?USaKEd{IF*R1fm#ds
zwT_^W>%NBW(9>C6mD6U@cWW`J^a|OM+=|sCTXR~alVJ4ZK2*Lg6k$vY+{ZjKLiA)~
z4I6$#BLxRZh^yWw5bcesZJlrsEi){7tq#YkD9?->QHx>@0ipsoBDYYGNph?&wD-#6
z(7xyE;@E->x+d0wzdDl5%c52ArZb7XY(X>#!cw#jg!_Q5#$PN3$KSqfkkbzjD{J`I
zM`I>6zrvu;S~;>c${}Y)2H!mrr&7#4V_5HaBFw_KWXK+HMhf9wwA{Al=X9hMY@`@=
zn@x8yYRPMw>_*`u{Qcw@oB)`J6QX120oM(zmv~QmjQ(PCA!}@TS%fXlJY(=hvG*BD
zgf>{4E%?TwI8S5YD+3DgeTfC6S+=>HbjU1eW$GOV1};<54?j;9F|a105qbOR)yf!2
zxVXeG9tx44NBW4pn$L8TK|7*!s1rLhb5&?-FRb2+@2RIuAbvh`kE`ZTC%Dd3m@3Ns
zE&#@V#o_qLL&=7UnctjYqwE~@a;sH{3+l>5W7^mXY)G4~g&m|tOtprdO;{BXa`6P}
zI_AD(xGwp$%MWNy@T8!xC4A07CvmGKT>S9PcpO?8VQ>~vxA32kw~`IegqvW&#|wY3
zRZgkU)|NHjLGP~Gupy@5K17-z9yRsSYGp3f0W7>rcT?b<|Ga|9fk6`s|A9nq-gbuP
z6x{_)w-5u9E_`_On9_Ud6D*{;A1Vu7iDpFuGp1py&S<q1dId8v3g+A?$x+x@;f?K2
zOZ9%|_kP4zJB%zlH=@7-lbhL2&bQDzGr#4Br$~c=gQIpacY;2=9O+{$An!5L(p7`)
zm9j6?1fD#+Tef$eM+p2vXCM=2(S&9(KDyvtOW_1_!Vn5KT^(p)Jg9bhloB*I*y1er
zUFnG$s6bZL0jFdW(79xtqe*c0c*kZGOiNVspue(CgtgmvTl>6SYt*+-6lPlbe~J_<
z?9bxwzqb~OuQz`GeGz`mzn(7+@Bd7CfBuL1`M;M;%G9m>w<n*EPtJF1PW8?>?sl4g
zLROXzJoeiPv5x<o^cBVNXK`@R?R=di#ln-<AD5rJ{6zn@k}K6VH7;ac=mWy><MnC|
zhM^$y+66M-;TfTiZAZW09)o!s`Cm}}qqqQ3v@q`v(oA2#=HrXwGNN+^oM561eLVsc
zW1!VSF}Ye)Som3~Ft_q_h>2*Qum1=9Q7@C;+`Q8onzB%1<TVY?MKh>*%8sNOSJ&;J
zdkg9hkk+UlJb{3R3dQw-GIGLpqDAcF7l{1^l#U6P(NQqk?X>g&)4$@l4Lv@g9=R1X
z3|w7&j$zZoKHR%z8FdO`&b9ETF%y?Y;Pd9YxNK3Af@FBnCNY~|#Meau<|3D%u7atR
z@aM;sPb3fKka?L%QfA>KHN*+R3k$lH)lZ(`ul}(1$%>m$tEk{(!^`p^LuF8*|FC7K
ztEE?v`8TK<^v#Ad`agFjy0h;VCD79Dk06NwtmdsvrVjBd7H(0k6^favQ#xDKo}%OP
z*t^dVvk8+>oD3lNP5SFjK@nYw2Gi{6Zy8`<zu_I>GK^hp6m~v-n%~HN-~226Dopz5
zktka5Bs&`Zs=n;}HZLE4U|4xwW}K$EPtERTOY$5X(sYFCbtiS_;NluPMn;yS&S2Z~
zo0&MYrtE7SdImmlag?^JAJQ)(LB|KvuA2&6x29qCHP*-cv2IuzeEbL>Kk*%n4=KI+
zWWp6~xDC)}ool=}Z$3yqR|joU^%U0v(~*atn!p%|_H-0sS~%%IBwY0;<KULPkr?+<
z@C~@Y-MAX=jnlX^S!hZazR5`)1sUzI1&~(``U$CPekq`8sstD>?sMxUl;moUSP>5l
zM6DQ~)%wd0`WWA=uuMZL+!vM<9f(Qv+6sc(F&q<E!4v}9&}cAomZH{{n7r(_MCyaU
zg~d4mbSS$bik(>0MwLp~-n_h0bS94Ql>#e~IYPKRe-d@&W>?KQekGvmh8vVho|E}v
zZh4)G0Y6X*U-ka`{9oE~%?Y!=jk=zDoo+lLcDb3R>;U(KO+x-2Y(Q5QMACl+j5vEM
zyA}IO#Jpu1B)cd0q95FGCVzt)&)*)o?;q!QkU+TUVNw<WJy82ZA3y!@?rXT`jmP~S
zj*=&^Js9>5rLIdvPW>Atgiu0B8)&mo`td|3NAIT%f9(OwJUeFtW9CTRFCgfFL@)CN
z&7MG6zEM=MMQwc!zfmT!fImk@O9M|#n^P%LjleHQA;O@l-e&@p1H+MWJSO(KrG!S-
z%RU>di6BUq2k&@>Khy+5r0p1D`#P;srW9mwT5eD%9VIls9bG~;n2j417^h?HkQe)@
zXxvlPY5=$St7fAWZKV5t9r*f)oaSceuk26t)d&@E%xe2}o4jElqGuNckATs$C-(x~
z=Aw2i@WbI_8=+|U+&b<@L#+X|x3VnA5F7-Hyz@puUY2$k=$^QlaX<ZuI4b(g9F=AK
z=N-eI0r+CZqkeI&LENMc1_o_0Z=JL-*12vHf?BCZEw9#tcEdz}mw_<c0O~q?dd@8A
zvzR7F^(tA_g${<E<wUd1+47=EAtonQRkw~CBj&}wb)@y2KJNVX@3?K<5{1y3qkw>h
ziZ#j|L{VN~wE0aZk9|Kwoz^(Uue`0kbo%NdO24QZ;Ohi}GGHjp42r=#j{0`U2HBuS
z07K}oHG@kN^%&-ewgDVanev^d<3Kx{1c0tR6C1SOa`XpAnh_gJQL?upHm5#9Oi;XE
z!M%^${Q^gs<`R#tCg2unTIZz07mBm$>A29z9nH*}E9CQh<Oq2={P8L5`32kg!X3`+
z?{c8J)0lT)a=-T}{S>M`E+8u<3XmrF!WhPyCKfTk6oe8`jh#WR<BNpoi9z8DS{i==
zoIn7oL#vuPi;ul^S%_66h}bBg6!upZFZ@>0JFL*Prb=)fUR!-93>G4Z+0KnATH(70
zGGON;BFB5W(~c9qifKk3OhyG-(s8nA>`r<W3Roo-qFN+Gg>8lvz^k_=bFD#f(w|-}
zL8osdK;LaW4gT3ERdik0cIWhhOGkY@B>ZcVYgof|v0%92*#Qu2XS&yF?^`!Dsn;WA
z+b#SDpKDsaPe0QAt;vZRS~nV?It&!Rg<Er!v>u?l9Z3hitRU`t$n0I)o_G4a_+Gxj
zgpl%u$P4<oP(iI$9oi^T+W_zCmx*0bz<2uLdr4=Y%t%e0e58C#Tot8i7SnTsVv;%&
zVjB({|4J%Hir7~P^V5T25#%vmDy+IfqGV{KhmsR3ffm+AHhT4&93X6*1!0Ixv|QjD
zQc(!1qP)O(S8-8vcSW4b6O&e#MnA7_O<XfuHoh<M{O0v7>hf-w=LkI0`Pi`%1MVud
zsS1$?^wGH=n(`Ijoq1u6uw!oHS1XDnjQCs8>4TEB7{s|zI8mI-$>xu?S}GivHz%1c
z4!rgcK<fEWAATdcqo(`9Wyjq()^5frr@eX8kW~jR{o+N%d29?G+y+OXR_;&tIgN#<
zNV|wrKj^Q}<LxEm_{ZWAAJL6CqV9H*X-U3~09iS24n~7}DpNHnGE8)4_cg^>rd6^H
z@e6E61U43`&HiQQY7vK?uQlB=q?Og6^5t%4Quy4Aho}ntmdw<l8c_P>F~jlCD3E$M
z9lWh+6le?*-)Zpyd~i8W*1ka)_LTK+Ox*B0Mfh|FgBz@>Y1K|&Qc)<BbJZORobF9~
z=JA0hoDo5Gg=0A?O1B_~mcxD@#AH81mGuYbT1v(z6o&qZNmh!3yP|BdGARSR*5N>C
z?5>Q4;pY)|8695@zrSK^ZG&vgLHh{8b@4<%pHuGS_x^8ay+e~#SV{Xb(1O1ze4Lx3
zChU4b+}V=k>M;;)==9ljdd1oT>gVI~C(pu1VUM_bWVh^<+`m8n<a(PPUvI?<K&u&I
z#u95n?(kWY%yT9v{2ZsMkeTlIzJ^o2;bIR^J01OIx#f??)856PYl1|b#8;mbD@iM0
zGGGeoT4Y1`tk;|V>bG{z8~%!vLdj6^m;PcFd&91~PP@)Ido~J`6Jx`I0q%+iTE&l?
z5oB?3kp}pwWMHC{8JQUg5eVNUc>%l@LO6x>Ero37%MgxlNLl>ai4K|xa?@BL-$l<*
zoIdMBFh!l7VTd_;Ir?-a0w<Ls-4l8dQr>n#k~p$pg~iXHzLFKNYzwtoUJV1;IlYi&
z&Ml;rrd&@Bi7aw*eGjKzw~M5aj7ji8XvJSB$hPso>S)<L&B`e)(o@jM)#nFtGaN81
zpvq2y27|NCcQOCiDKUYf>g?b3_1@YG*!m)ryXk-|IWDHURy$5bt-vw_+jM4|U6Z5a
zvO8-?+WqRY*>`T~$EU0s9}fVd?Oz54FTNIM4pSC1gL?FE;N+<*HSg4^HGU*8sUiyf
zr&|i<%iS)a2(CK6r~|YW|Kd`Kt$>6mB%}|1Cghws6ob1yj7|^eherR{;iiu}pJ~qd
zWC4mR$v|WG!6+ssQiC490hea~-79+u6z8pQLLx#8bBLwQGjZyGx>#i8VJ*c!{!MHd
zz;~4N8DxeIZBF-XUfkojA0$<ozSF7PQ18nbPd$5@`zh0f)C`S_@X8nOKKv4voiYQU
zMTWTbCUMM?NflFYjO>_Po?IM=A<%F*0dC7{DOA6eVOdm5<|ot_dH)_KC>f8{W@)ze
zAEhmEb{nD1EiuJKe5|QX=`DDPUgy`$u7WC@<>ow6lW9B2&-tXCq}rVPKRlJ8;T@r@
z9zXvuBpy#-!%W3|86yD)w9zpfPyJr(*@p8}qz(fUHkypY3JAz0%A@d{{nhQE6N4Gu
zjOHICAOp=Wx;Z7Spy7co|7U5)e}Hzx+2@oWGPn0XMEikkp_z1UlhHpw1?t^)D%cMG
zFDCx<eI}0JqT+FO#61Sab(;7B;)qWawfDO4M<xwkfdnuU@$P$J!%E<7!y6A1pR%|A
zBM43$(7%e<%pZln^8bSrW&R*_i62{|zeq)9sYij1LKL2Zk$xEE%_QffgfvXeJw%nr
zJ1{^>SYfQTBnjRBaIedZesml~DnC4nib{}`9o>#d2ngA+wAG4zTN0@OWeM}L1X(K(
zfymGN3RFfovw&iTi)@(s`ob3z62s%KVsdt1`dfM|>RJhOQ8WW6Oio%G`v!VS8@4am
znCTYVva4g7GOrx1ku`HxljV>$mz{fifq|Eb<vvwIRDdFtz>ftfE$4KR8#-YuTjnQ8
zD?OfEXgH#NGAx*DukYDhV`L{Vaz>ZpxD^i}|NI;Vg;KX=5ZmgiuXL^)#kr9d7soZ4
zGy(G9E7Mk+j^De!p=D4RmuPk-LBNDF)QisZabjNZNQZiu{*?*>ZVw%+VUt}rOkE5;
z<L2QYl8p6{R%>g?tVrwuNyyk-1U|KlQHRgLTHUgzY<5Eigy<Hzj2Z1tU?qvJ5lilS
zseb0G=(8boKU+%IrS8SUcf-*e(+a&XpR=SS`7TLXlGjXsl02`C!Eer`1zt(qNSwfS
z_`U&#UO}&5N#{n^5Mt;*H;R>O+hA1Gep)5JH>wou$Q{4ILSDcAQI~DmNm5F%EWojG
zkx{v7RkqqzU2=rCb!Y62-(`q+=mEfhl`s$5BSTCr>kly-z{U0i!B{QbJHl-qn}}SQ
z&(|@&D9t=7fBR%0KkOX?*gN{5i97+55C!E9`NG<0q{!j9Bg(9XA%w=Ne=v*$vq%J=
zMK~?o*!<%4pwlnTJ^4-Hs)YjlRevn)_?<EoW502$CFGRyT<S$EhBg#ZTsUWdn<Lsv
zwD?2dc?LoMGeRL_Js1K~1E65y+m3bCZaoPqC;O&d(jx6r;j<vE^_YGT9O?W9A<?~J
zS(uayWDcECyh)}G4dBO6`{xj{r*YIREm{*Up?4%BE;CRMYUP4`^co6Tb2+&TCG7!n
zeF+<7Z3;>t0HNfmE4C3G8Bj=NkRkQeODN8QX03vC;Q=CLC=#cbq8=Bgu3FIijD{+c
zXjAxtb;d~#BUp?^8L9Tjl3-bY3<DxGXC>OSZkT)4L%O=@zlL|`J%hCe0G>PBVpV8S
z>c<1>@xq^lB9ok1)p>~e%#@lJWJ*~3?zUpihPG?9G=b6ILIPzy0f(8i+GdwdS7!uu
zBtSspnG8&Z%#Hk;<p!wxS7cHOv^y4p;caLuOkG0T?5k3~VGNrxm7wgr6sEXzvqI#o
z$>CT%8z6W6)eMNF$<&rszxz_|oY~omTlt$kYd56JB-x#)smq~w(LPgNZoTrb?0Su5
zmMW6D+S8_HjTaid-*gY5Fq81%7|Smjvjbde=Pr<Gv7|{x05v+_V0-;{?n*i)r}_%K
z0}>6=vyzzCu<Ph5L!E&c6VL`?(3%~ww;;EP4l{ZPcVMm!2I{?p4Cv!AHbiS+>uKA6
zdnDW(q!w@UZoOg)Sz%-BPBpYzus|~xMGfE77uMxEv5$RKqLe|tgFvfud6^){sje1f
zt7<*f4F)NVz<ypK{TL6@7vej<v_Z1}1@4tE!|vp&(}$=cgYLL9{DR`MFLA#^7W2A>
zd69ncBu6F%d;rsGt6~?^X0M5dPp`fTLZYL;fI@X9J87=O^%sQ^kFeyOal&j(3$Gc9
zi*IbLl7@?RadA;j8m)C~-%gk`G{9nYlR$gSaBI{cx&vYt@vp_5pb`g^i=p1lK=e?h
zS6626a1t~&$MlOHMP#kVzvmfvJ%mjhG4UfuJ`1Pi4mmLB0Oa}xRe}$J==dcvs}m4Z
z^3A!}TyAnvH)?!K&!F%nPCbKxY=GR%63n{)%*y=G<#+kOwFksn_5e}3)goTo;Z4iz
z7VeSVGD`%?bytP5QG(?fJ`Ne=aw#4L;2T?>eqnWC<D(!kg>hr(o;H)FXCusFZ%JW@
zIM(KqvgD>ORMFNf$bL9dO35YwT8}fV0^Fl)!O%%fkQ|IiSC|Z2@mSiehI~5Y`txwL
z<7d7M&RCEI7hM~aZMd-~(;V;&85lT;QZpV&UZ@I`8^fi{{pO0JiY%CBsWi(&T{BV#
zfmv6Zka?<5anBF~NR?wgj}+k5rAjf^2Pd;VlDRI0);vqO5}5;zwl2wv!0%I{VZSU_
zB8+uDs)2m^%S-z3glE`#d8k2v631<EES}6ccY>V+N?J^j*Rf`{gQzXd<2tjg<!@Vv
zB+$Wm<~JX?v7!jzZB;-<ub~~+@`4+<$bJH+=y)_v;qVvdKF`h12bdGM5Av>5?+VS!
zGVvK*xoI@jcpO7=y;!YE%mUF~GLAVU0r;5wN@;c!J3f~-V@R_($F@Z=l=CqS&cTU!
z+Z;^#<4pb%mOpi{U-Sr5eF=)}54!E<Msp}^YIo8_9Jq-ktgjb9$Fxu6;rYkNpt0}2
z6|wXAhdnY;#v~r`PBwGP_t3=l^E@+2aP>-kU7&T*M-`+!uW$j$RZ*W|n$E}0Cu?Y>
zc6XydtF(xpiy0Olnj;3E=fP<0d**~t`+iWvKPWS5?dv3lG^4GK8f(9qRFd&slJqfx
z4HzzWt^zJRJ@9~YU3c6hH-9NU;p6?9M8=3m2O_K;95;6N-xhTE*+u<AUCJxTla;4f
z7Tc$2*y?oHZd5h-^e2(ILfms;QjOrsIaw{#A+azxzY%W#Hv}iD&Eih<G^IBRIu_HL
z&d}t|VV7UiKg!+9_Z^H+hYJS}7&HhD@pO)KwfX}|knTZvq`nof+-3-Gq&P-QmO-*R
za9=;5^hJK+4$8xl^AQuE<b0EeV#CmYp~NBdsgL%2-s|rs?KMRXQ`Fkg;6jy36j+bI
z=RJk<1c?CpgIjW3hqJAaj9O9%y~49aSpXdaUTba_Vij&IEm1SJ6-=HRtNomgJI!>7
zRxDjYr+6A;y4W7~x<(~=0$rLF?oE(`O)&!F5a`X{e}=6dCavFpHUkjYPiGo_B{qYA
z<F(uZ5Kfx!(&v_=1iX@k#dla-;5f{Fh1<5@Mcvl&3ZS?UE-7-qHc^e_;9D!JxfS~;
zq2}uIG6V|srv6<j6yeVTv}5spN{y<2{qMXH5ZtKS<u%6mLO}IHP@xhw{-5gKRT6()
zfMpgYsHR>ieY^TS&wj+}CrJ&kQ~s=a)1OyXH=PJ0F<fwv^HtSDvm*sn0C|@&8atpl
z7$-O{oW!Eyg|28?bS-1-xiOcCy5o5H7Qv-j_5Di$mlYpv)}eW0*EqE`rf!X?tTCOp
zR$KO9hWlNBq5n|7PK|KCLC@-P>w1DbV*d&vkO3x0`j9cB&>Qpz<3YdE6alE%#>$>Y
zDw9wvdHB4QbjR_I##`{FC!Snx7+csy%E7_!0+i$Kux*<IzxuI!9LE#!l&U*>l(hEZ
ztA1xZX$kLlY(Am|4Bj*5Y+%VUoM950<5!++sjw_4UZkLGjD9<tCxsQ4@{zskxndWa
z;(KnNKrgLGR`DmNJ#|h0WE+^tH`yj6jZ>s8Q}-rDkml=OlH0u<BEsM=4CWKg`k{Vk
z>$ut{g=$PcToU)vX*OHN-%_2LayYmvQU|5N>b%b42yd~~l8%eO$_>AjUtbkoK4Pf=
zyi|{CYG9Nl^6O}vX-s#dSBdBS3)TK5GbOo-v;;XtGYqIcfe}Ti%R7QS=lF$ao&wT1
z&SAV2bdn^SEX^dZrCCRp&Jj+<JAf7R{SThMfB1+#ct`^Wlt!l~#3R}K*Pq}=z#*%}
z4<L%PH^7f(e?B=%`P*P&v&&LWB4+P;GmK*-nyIBHa+O4{5QJpSAOokjFU{e~|Ng@i
z{r&|&-ZY0D%&KSxOBHXOit4oV#G(4`O~*%uW;XV#n1gDRhBbRKt9g@IcwjQCd6QYl
zpNt>##wCswQPiAtF$P2B|NH-eynP5fqk*B?I(@J^(*aH6DX1s=g+B$~@+ZZlyqF;E
zoF?j3YAJ!vc&f9E8AmhV(NSYZWCH}FDs%^GEa1{LN_vwXQHyb_g$@e87=8h@uc|i4
zkrXxC9HHY2jkGmMbo?<?9u5bT7LPpeAe-2R35TBa7w<ZX>{fgRMM8(Cr9DQBpPQ45
zPV=+VN{*?xSO;A@mqq>W$DmC7d$bfd(~*6nt~^f}g_mW^z1cM^l^<ysDx_Uh5;7$)
zk6X+s1R&m_AsCCjop~cX`kzDU|Mw&GTs*~MRM?LyqpUoPm46Ee)qJDR`My#V%Z~2`
z`qZJdLaeyy7-ayO!7JQTvVxKr#Cy>6EIX)_X&o`ppE!1u#IW|d@yBbw0Lm53Y#7S&
zyGvI6B=_{S9fb`&F34a}0LbxAQnOLS5J%4Ec^tj-9xUcw+evd(r<TUvSQ<icNsIL$
zx1`x4pwTo$hlx5UAuvx?Roje*5g~jAO)F-W5z9(4Vwr2ug%qv&TBIMHzG?%D&tnV0
zE-RQKmgNsQ=#uhF8|kIcg>*<z%xD3oN9kAS?}1`st!Nrwy(N*0mnfX&e9PRIV98u*
zw2M}ArP8`@3>wIxgzXpe7RKUy;lb%<0VL2!FgRGE_~n3guCu;aq<nRk&e$wvoHqEL
zo`Uq^LJ1Y7>wT347W1)`$=5xyImeuKrnB0aX3~Lkp2<)wL%n!`(XP%K?ds!4yE<#M
ztB)G(_aAgUBi%P05ZP^N6WeFbiU@-&vfbOnM0gqopzN0U!$b6lqrT47>kPAEW=%F8
z@Bk@Z!pU@){HlW?TT1CSOFZoNyHmWaI*?t`xl<H=h7^Mk?UXJayjzBGza9@$5y=#6
z2Sg%Wij2&~+?zbLr<s+63Rj`v{-+^{VM7Uzu|cE=8<HU0v-!~(^@{M$xm2NtjQz~x
zNWu^jfeix-RXVAz;sUP#c0h^0jg5lAVAA&aFCedcyijoW6|QPeVWFKplUw1mJv6EZ
z@tl4%Hw2=wlE!yMo+`+3SJZv^ANb*usIPZnOd%}whX8uPgD;1?XvLs8$S7QTx*0|)
zPHB?0=AeyiNzo?l@zBt&7F%Q>&%G{1{-Mw{DzAp`o=P&4uZ-2ik5mgD5aPo6p;T==
z;cha@RYR5tDb;S1tY*<ucsAZ{HQqK(&Sz>zACFc$X?4&$ru^7Rt2l3i4og~wQPrJV
zg27$L_>T*;22Bbt?G^b^KV#qs(7@`gLMFx5pa*|93fm`pyOh$h)=i+F`M^7ir;Rxn
zH^BCp@YC3ca2Zf<;x7|Eu1Id7b066l>$n}OxkH$>PjjBV7|K29SDcE1^Na04Iu7Z@
zxoBqW{yH@&&jwJ9Pbg&u{NmgS98?D{g<d?xJO;@Ka#zP!NvczEXa#2|@qk%yRMqdr
z_n1nS;^VVdn#nq>@3_9%2_CbycGnK7UMMPK@73s|OeQt)ef^{Wrq^(40H+ZrM}VoQ
zGX==Jy80VA_UvC4=l)}k_>m_ouJN{AJkW9hW3DdPmJSc>__v5*6x|m~kicwSHPCkf
z?xVX%t|-d6>iiDu6av}KoWdDj5axMWIzw<Vp)GUv4>E!rA7hbf((J}M&G~Q84Of7e
z3CXC+r&}kVeAh|t7X5B?A0@KW4J!A+S%S;@pyUIQfk26l0)5W2Yd6*=XF%Q7yt^*L
zLE6!oF)$epq`MipS#aPNP{DJsPjc7?Tv>OFo0A4tutYm2O!p?2mmLWCZl)H@#KIBz
z!TQwCz*68g04nIm>%!a<%r`-g8#<YGNI3sg{aIM>{8!X!;C;($VksONhN7?1Px`QJ
zbq6sYxAddQaDn|pGkO%C=5-=HgZH2*lQ)JRIdu#_+3Yd=!X%L4XUZYN4<?O_$Vvtu
z+?`eg@c!jxin|8TFHEkcQpZUah5`;1y2GpZgzb3gEEMlCjk%iJ6n>z2Z}BH<V*3-@
z3~J1-&(~sVZ-h{GK_{TP%^Yt-($W=SHpy2U!)d@08aR>uRDg$bfV@A0NwcjV_7oA9
z-~-vqVa>obDotYU9h@!F%xg{K;NH*;o5CiBZKk1nN?@75+SuXDFY-6(95I+EGz^7x
zJs>aWrzZ1X>lcc|S1?bhitNOsVc!4&;C-n;KhD9vkGsg$fdixF;snr#caSaGTvrmR
zihlE@Lb9lXZJO1C6g*T;ub+8y9^iE}8fcD@$wvD%)u7G=9(6lvypXTEsOkKBGpWTU
zeti!~j=}yD4w>lGDRiz2siS2#Ql^!VR14?)RwXia4|T|*r6|S(7IH4d<x;a4jMQ*J
zg;KJ)U3E@$q?LgpcMifW`5fBA0L9$1aF4=sr+KYLG1ZrH?wlhYg?mnJ@j}$c!_wgo
z9h^3ro)Xpnr^5u$(GjP{9vFQx0FdVTIGQ;iGjJ5XA5LNb(+Sh@2f>6fO{yx+teGGQ
za0E9GfH;m$o+_pQGB+o+CG{JWldpo1fYlVXy+7`J!}L2qm~qlR^>)rNj>W8Fsg~yl
z?n!m2a;dp&hYwVwLU1qRHR3cNK$EBFqC;HAQXxCldpgK?ztQORtyF}Qpb!s_4PVQe
z(`-$;p!|wsiY}lr$sbNqH+QE1Cd}d+SfE?;iRg&lESN6vnGZ1EnzA^*vgPST_JA8)
zkK%|CpqpY545oOQKn72J|Dw?nJuc-zqPDM^x^03<)zr4h12m2DbAGFi@s)E8Qfjtj
zbPS<}a<4W{t!GJqHfOCema;mh8VUk_vy6=5zRujL>dm%OTf`_}g2zcKqv!-p*#z^w
zu&tz?h`9k!^zE|65}sMwZR!cmMw4B<x`g}B1k4zy@ycvlIPtG2|B}+(=H64lUx8UY
z$Rz<+6D;C=!`R!j;r3u&ALn8)Gw02msuk)ih+o|Ha}iCTRZg?`$Yx!{C-()fU_RxU
z*0UdIGR~nF8;Ff*B#><_`-Pip%e^ibIM<ZF5e>NWTGZuAwm~&l0b*jl=A=BLQJse_
z+bVsT%XLeUShFN?qD_{=C)mtU9Z4-zvxW4bwxbrsLJ`sc>Q^|exX1$}@ZK#XSYMt;
z5drZ5OI}`=Cm;=dg1PM>v1vEC?~JEGQbw&^r#I;#o|{R=<BTpYaHg*vPnnAgnwa}G
zMpJOav#(w2co%7IdPvhH`G0`i=qYNs(|_Rhr$TdXy&MoteaK{L$puTfoo=f+K$>P?
z(`{D+W=_LRc{S;k$=+5ay;mi(Kh~~1Ks?AM#LW|=+c4;g0yZGry!+;FkYIm@{`>Es
zZZw)T>iFf7?p4Dc^+7{2m{gV*heGk5n&^>lH_X^fqiwN!2G=8&uoeNlp#d}s8)|@f
z-W!|W3}d)L2y^O&7?`XVG>r*deR!n8HCda3U3JFo$pt!^Af0-hE+L1rsD5<Pbdsb?
zPoJ&7H1!&MmlMg-j#Hh)7>wZh1C5Gx#7#`)ELKsG0;>f+3A)U@v-M`~dJ|UXvkX#C
zO&lg~PBNb<FT<ZYsQQe#U&KN3no_GJ$EzOQb#9wt{Oh-10khPW@CuZ2j)=SImtDpF
z77gJn#xy@4kP>@{V>6uYPjK6ugK02oCfI7`EuLyGxiv%%>No(PWAmdh9UV*JernTq
z0(@{Prp4U6nq$S}TX)eJTz84(o;+mdR<mP%y&-~=S!LIsh1)@=<#<mRegniordf2`
zb8HBKIobB06NkBI_Q$q0pQ(E0ZZFl;Y?fOQg^(;dNu9aRFScilfI7{qd6zqYdB<~z
z_mnwScC2)Kn)(C2_+eu&z$_J5<UwD6M2Uks_JJTL9Sa9JfD_+IhuwH;a|^3xd-07<
z;6>xV?W7Y-)_c*px<ap%0bGuAX(8$3HWfN!EoS=t=jLDpB=PS*%W%!AS+IKj0VKD!
z{(N1d1m=-U66vA^F3kM#lPn-Gg8QBpSfrQ^RC-nT^1uI(8~J^B|79~!UT>i(jxS7U
zp*-ik3p3Ufxy3wc!d*?u<;<a&g!^p4JA-Zokej*YL1Nyp<e=Q?n}w3Yaf|4+5d+Z$
zXf4L~iwaCnG-@i^zR+Js{lEWae$x%A8xof~v63{Rtzt0Dw2+d%U1smoF+WU#<_?C7
zL3!hDCsl--&ZnorwgqWmK*P1z8+_|@yJWAO^q-s_FSQ2Ebm=U)SSlYhmV_!}$#3$1
z9mkhRclw#abgGl~na1;(hd4u9&y+ruOPyBtP3rlg#^l9$sh3aF&TV3>4jg&=cr<ls
zQ=7-$2p_I&BhYTvw^h4N>TK9;Hj%#=4enBO${i=YA-U+q&1RC4RD#<yT1XLNEHGvf
zWIZPikqAMifIYNCj<PyqjNwRe!1Q9#-@oGAI7vZqN!e0)t)!3vt5Ll8AE?QC>1I4`
zwhP5X(uUfAQcd_O9<{o#c#3dKAo6S0)WKafI1rTnNIG5sqDEu2pUss(+1LAVm&1!d
zv`VXsw?X*P8yKBwwZ{g+N;|$y*gpcCsgn_$Y(-@dnDmlyd(eVwCuPwSv8a4|slL9j
z68j4huA0J;xgmZrq>fveGl;7*GExhJUf+a2Qs_L!Yg7$yI84xfFNGxNV8oXKkdA23
zws*KlV_FocLg^^T)m9{!gI)ECspS>JrAII&PY}3JlNNcRT#7hy7fCaokkR@VE~Y3Z
zRsRcI*s*RNtr$27y0|hQg?pmo<0aVE&o%+PAr_C>yn>bnXhTbvtA*u|8jHEw9EkgK
zs@gUJkdS4Ai6BK51<baBK_}fCb4UW3+|qUge`I5#3zG%URKXQWj9Jx5^-Nf8{7_u_
ze~Q2V-ddPf|1RQ>*Teh&y)-ZN*t&(+g$4fk5ltE;a}qFKV`I}F3sCV`YpfyJTkm$j
zT61Nipq)=v%};3@uOQ|%BV|vzg@Ub|)Wv;(lqa__g~ZLMB!(;K$qmGGakxru+$+|B
zdx|BdqQsO+Ov5>_ADXd3kq`&Lv1=teV>5kxT9r@UA}D~P$OQ;-h^Xce%7Wove`KmX
zYhlYByjI13Ei5mtgJCQzgla~uf%V<6Rd^s&V<lW3qrRfC!)ttBpymBbOL>8|nC?o#
zD!P75tKN%$8laek8G?lN4_ah0c%SOu)9+GRH(b>PSJ{q#s((8LV+_meoR1Q8qh{c!
zIQ?QxD!1yDYi7%>!s>X%T7I#(RJicUBz_rHplQnJxQMbqt5it10AU#3OLX_Uj1^~f
zbh2Bf#2N&z_tvCl-Z2SL1T|9H#XIpGIBX*ElKXMF3*JC6{HqQM*xk|bAhRp@K_*%A
zGrwYU_XpicDvf(Myj*BtP=9MM+8vLIUH~RXuO}<HCUr;9@5x|SwWF8fm4Wsm@S5*!
zyLVoj{`z@mzj&Vwn}#i-;S>GUqRabDHv)!T@qp^@&MWL~fT%&i3)DLn8Pm!;k$-h8
zb13E0x$akLgLVom)oAlJoXxX?;%&?(OyVX15jsKSO4>ERZmHPHa0BME(+DE9O=q8B
zgHHyy+kt)lYkN6!&+^b)7MDF{9|N28_;p@*#5#YL3;nlHbM6A!T?yIpjJv%2#nHHH
z9e4^ekD#+vs-A+%;F+d_%(Wqsc@QFsxl!+Qs>KtvLDdd422g_uK1e%vgc2~&l9PyZ
zwF;roxS%>A-7(=iHO4u?IkQD+(AspMP8D!W8-<U?;uQbd_@t%>I+@hTp9Sx==(Aun
zc_1c{GAG_C-6`18n&^QjlggOm&Y5oJY}}np*@IC>wK<-Kid)}Xs+QVnvbb2uQelqB
z<hXBj#;^~-kN<(*Ce9YU&Mscz`}|_29N6#i%$-moSvCa&xBd_q=!OGh5m}<l!v7RB
zBjLnx|G-qWu*}>4{KeNJLkCjxu<|MFd-KO<3^m1(w;(MWJXSlGmw;nZ`@Roq18|ow
zLxD%d2BhGuytLUG+L6eu)JYF8?qq*|R3F8yj`YZ}Q3VIx!6?f|0lHH=p_ZFkD+2e$
z3}dQ)ECOnTy7StOzVN*O1eh_reSA~oSmm{aBy_m3Kiq(s1qFWg!S#fsGp3*<?oYpe
zFB~UVJ!xKPT}K!Qw))oK-h!zS)DZ6hTbD^nW-cHOX0cIlVZz$q^gt@HAz?&+GtjZ&
zLrN(xJmnuIN)mT!p-qb)xj!VY(V8PxB*cY|IcB@Ohi~^`vouqTSFlKXfNNi(h@Q0c
zyyD-3d?D`}{we$iSEEn3hw2~iHSH#P5Q35d3OwQZ5L`i*#*JAn3ACDPU8g6I(qDFW
z1(OBP9HnlkRlV^gXXt1fRx(4zN3dg{7Nkk%g+BOZ{WvRQ2G|@Ui;3{olmS0xnc6_?
z=w$Q+n=qypa+6>Y(Qce3zUlef3w1G+oOkxDu%N@Xn%(kW{b-<9w)Nu`Dw+k-zVHr^
zeEO&t>eGD5-vs<M?@;#_3TNJA$$G5#<cay9Dx0V8a=QPKov!mr=%V1;uT;$pA+tQr
ziS;+dy4cXp(AD%kFGoH4Nlz}Gq#BUtNv@1gz%R+24&vH_coJ${b#B$35QIuS_#dRP
z`L1g^-w3CE7XyRE(Fc%1^|IlkIZg<MBdzT;!68TSbY|0ZvJ(s`^EaAhyl>k@)bRuw
z?KIKM9#=**jmh|MAA-yB(b*J;P@?Ol)_8#H$SdpPr|)`{Pvnrfd)29K2WJL4oN)iN
zWuKgnMCp9z?OZh1(-R$ti5?LwzQ|F1flN2xdVj&@t&4>(_g_kdFH=gqf>+X)#o$hH
zXD$pFy@u>~R&~42v#MHQTv!?hZ9NW=6Oxf{%t6#!8^|I0cM*R+3fImLbSsw%f9ZzE
zLm})q@X*RQ1`)<lk8`Y1Tonk|kZ~YVSmzjb{gq9yV;o~mycVFnwWFuBrBoFgsfo5k
znMgGDm#b^)8{QrblyJSm1<4V1S&9w&txR9K3B7Tqd88fCj*3TPOJv3(ol)9@Nw=jJ
zq{tDXap6>3&U}lZdXVXstNmo_iIEqBF$#I>Im7^kNQW!-6;utxw-R9=%x$`vi7-Xs
zF&+*{r4>oubuF%Er|nzg2rV}2;kZ{C{Pcz}fCcY;*HPL)sLq9~U`K3}ql^~dtYIV5
zk%o@fYKb>+5}_bnrlp?(-42FMuk8DYsReVW>J2kA#x)&%%9+q+65A@sLnqTl1>&$p
zoA!|%)ZKh5#_ZOgjX<0~I`&xucdh$e*Vi1fhq^Mpa!B%+a54-wxs;CJPQPQ-fBeGr
zE?3N&{EyzSUvyVr{=yxbsr-P-OI)&P5!NfnBl-7-&IH0c^$J&dQ9sX!x~hxVXf_!)
zZ%B~*Dt!H?7?~LR%HDS3ocgJuU7%iETvTOp-7;Jl)eyR+h)doqih3z%SR%_8eP`!O
zRR9l3x!<bwTPC`T%SgLXj!1G!hkV)Gz0ezT8W>XA<>Js{FB2_Ev61)@Mhiw3Pyplh
zU#U_hihGYkRKr)VD07nz3&ZBTlxmA!|H}P~gbVoLlYgt=+l7TdNE|gJ?2!8IL+DKk
z;?I{@kxXRBpazP-xQ2r??Ob$8JDxY983U5TvExu{r_M1f5GAcLs0$j#luGdSBB8K<
z8GbRyMC%nti>|8ySQL$Q!<|cR<To8ikl9C@{)7j|Q-sgIaUDBBAv^J=X}MfGNhsZf
z`w1q}8({4IxUYv~a68(hxXf>ulg)6e>@ZVE2i;D~q5~8`>hvgR&}Kq@nS7Q%%2S2;
z$}FoIEZ2+g(c9sk&ny_mx;sRcM7W({R+CvwZG_FNCb6oT*}KzgO)bHu_Xl|1@W!|V
zROKTHTsnh*HHzRhS0g4o;UMFO_>K^<k0w_V+C-Ex=kQ3JBk?$)AS0C9M2J!Js2U>B
zqe(yG7djc)wk6yORISQT<_s{$h2P`B(3c&-Abk`=B14CD$)fo`f`Uk*wOGbzWs591
zo8NR&y#CiXebTv72PLtuHFo9|)x%cABec08Ni#pKs~JDnr6sm=4Np~fC`*42(SB+u
zK9z?Z&7|;VtrFG_Ezm5Y&c_YfVOH?~kdeh836XUd%iOiq$+8sN378n71)@4n&NY!D
z#YHi#HSY`PRihX%$sA3R#lJ!pa)WH~`bioB7XIK<su0wpNGrCs^oT3Bhd>exO-#{~
zq_zwWr2>AO#79UbjI4yRfBB-4fQ*FC*-t-Vm!IJ=ETZ_1xpsbp;E_In@_K;H^M?iz
z3&)iyYLfLze#{EKKUpb=x6UEYt9v?BTCmF}c!5`M!yGuhreKUZPIlcDxl{*hmx-{{
zaHY%eh$!=wOSjFO(ZhFv9K`&r$%dS!1OS_3_=s!xZ=V$Bx(iL4$C5iAA>?zvU??N^
z6)1aIjcW6uWTb+EQ*nv^*5LTBj4*G-XQQ3}1NP%D&etJFz&AxNIpe0!<gjvO_QDa4
zUBqdkV<doeG+8T4q~^#$KXbN#2BjjDPsSNwL*XJuBHzFBC^r8d$pp8m9;F%arq84q
z&UE?HqDx(M1igi1luWHmp2ld!2=Ud&9`V%bj4)0sqs7;SCo2$GRdTtATCz4#u2cxz
z$8ZX8ks=oe16l&igaog1v6j@xFe?-iw@C`_CK$Qss>|lKsjm-YW<^twIlKu}d;+P<
zM(*g`+DUHh1iH=Crd80oVIXo$3ptFxp>;euCvl0K4cZb8h$m=52@$D{Kw$_p-AsV>
zm5EVVB?NIK8F)NBth4j<YQt5}ZDv9Z2NkNKn6!j4T3kWSqi|X1>0HT-AyM)q&B8>=
zIn=qxx#(ED6eSWVN$MBuK{g6=+|HZ~NW8p}iCMg&UO7RFmm!fWBaULnCHZANQLGav
zAaRbN!RLi+)<iOh$Vpg75ilU*s;(^xpvxUcR&w;2vTjz%t#^H#1DtlV<!NED39o}0
z&tDtO_lGzE#{-5s7&!NbXWbGvZ?4d@Hv*HT4HGfi`%u#H-yn!W6c3N-q?*#sd#7+U
zPTPJ#c$X<e0iQxe>5Eh0jXDm&F_;fdaW>v|i=K%XFgyWo4eZOX(aUV$6BLyHGT;sP
zU3yYC+lept9VNqV+;q*1Z<48Rrb|f;vNmdde);^o+nQT}K`eIq&F-Y7Xp~HK`i>}G
zDDX@h+`4XsLhFix-z8oC=6L_@B549Tms7oxdd8%L^vakO73DVb<93%sRDYXInj?9a
z3MWUE-I?*cJxiy~w`6ND!UPkTb#+5G)YQGmGy;l8OS<aHQ`@EPA3rmPrj9YGvI$<^
z#nh(w@*`FUCoj`FzY1AlRS9e2*u3P~;o;41;Pf5qtb3l$G@B3`fP+2*yF~?ZE%v}B
ze8XR{dw;ETFkNf*JEG7*kEqCAAg1ORNC~grG*A!X`r29)FZNLtIRJ2OR_msS$NN3U
zIGy(>Qk#tZ$fy-1KjpdJAI|OUZ~*`%v^R?SR}W@~;9-$X*;<c6Ix!_%2|!Rud%_!t
z3FddDy~d6)NTQKCbA|$wIs`HoxWz#Fz@^Lwy*UgD_<m#p<LQQFIE)REk^~|xdR6>R
zD0PYUlmM{7*JwQu8u}Pz(M6|_-zJDs&5c4Jh41MhFmeu1up!f+n6Zmmen*@zMO;fi
ze=7alk9$e_^Tx-Y`-*x{cyQ8b0XD>c(zlatcYkyWrr_!sQ85(Jrr}ryla;Ao`Y#|t
z^@p;%s~^MBU_9WLIuO4432yZ2Puf)+47Ot`K)0X{*n)Is@Qohvi+Oj6KlVpeGEr7<
zbO3Q4Bo0=79}f;pFm@=e9lyaTt=~$|I^#Bs)&!--DpgSmMhqkl^bXJQ=qiOmZCC@C
zQal`XVFeO(fvG=0j=@<{Kh?#PsCHor@F9Wf3bUv5aD_d8)|S|q;uV@(hJRL|64khc
z7q{?2lDY7m|2DgWK6FAMdDV|z3|mUUgW)@p^3XRA0oPQmSf{m<OleHIxqaC2&%H!d
zg{9|923ott(WUeU3z#lb{RXOV=neg<AsWQr?Ks`P>uZC5_}EI+6%B@g09k2sfH0%8
zgg}dG1Or^qyLiNFc$BDDu)44|>OWYAf%*>{L@5?cO>OKL%HS)QMsLV(;g2FopuAe9
z9or<dba9Q_hc5_1skxCY^SK!hJ7d()LHlEzyE>_50-;mIxGORjcVC{HEk^E8ClR}@
z{=0y8)Eu}((ON-IomAof<_!j206<g!9W>NG5Wq?OIVqpw8~Upw#=)!o<HkwjUG1}Y
zcT}!^KBygiuGZ@6X}i3;^%>hbJS`ucsQ37Aa<>2ZWV>-xJ*MaG;A&+VM|XusK;$Hb
z@eI>W7iSb-z;j=nZFP8Ixq#k<zrY<Ntt0u!1@*h(;0{h0M5BVgqgbyJ6xy<npDDXI
zEfX;`FtD$<q3MA36;YZ(C<6s&on8lm9Y9O!zvF4|V$dbLAU<j2LqFrUW|C)Zf;^r9
zLRT{0>-5Y0)?R#HnG#&Yj0J}ltb3h49>sg?>`2kpF&?B=ay3fu$S6Exeviy|bsU<V
zUfewZN;MVe&x{Zzr$82c61Ef}igHMRJ_R15L_eXCi+<2)>7n@h2wgF~x98?94y9Wa
z-^?d$6aK1CtD*t%(@A^}gB`EnzfjzITfl?sTwy+Q19+zBm?j7;kn#{qHq;sFcB9Uy
ziM3Kau9LwrSK!AQ)q|HO1Ko*g%szbX0to241G15>JktPaoj9=IU~n@btV+1OiHM|)
zh<$+D-LmC0Sb&BO>OiT_Blp{9%8zCHps-RJnDDUUO@UEX%7J%`hA7aKc$*rOBe1MO
zqL-bk$%u!a^d|}@^TXv}RHMs_;+X(0BFr_y0S)vWJ?V!=la41BjAEO#kMQ}l-}ySx
zxGW`f2L}-U1^x*;?vD*=fB`&?>0r}`X;=T=ihG?dAz;;Ls$jp<Q%IqQmjVW+alfG>
zqb@LRD_UgS#nTJ7_sQTCCpT6&mAY;vV5dZIoOFqvQ6#`%g2$?x#G@1Q2oavl!{;&j
zdZH_*JtbX2lb`Vi0wsasXAqyg$J_rBY9n0<f5%<CJQAcbK4X9oQqx5s=-R)0*8v-w
z#2hN1wGq$pbF8PFR+*63U$Ft)e){`4#ppS(Ey%F|-02^mkqW{y!}3i_b3iBeos{re
z)!b(az1asfZndx@wAoDQ8AER=9!VcDjU`S7Ty1wiR9#CGHA4?$nUdRhh>*?2Bbu@_
z1ulO*gQ=N{C<mB7xii1-2{GRjW}ed1l%ATVNr*N?cip(wLVSRj2o5wPsl&UlZ{O@A
zG$fao5R?m#VqXCb5`~ai=x`FZ_(7EvPmR9+96=U5TUI_|VfTfqN+{B_Y#w#f;>F>F
z*4C7^k6c>5IPM@-*&L*{3coWooadTiUu{wGghicaz}{k#_KD^wpKG+jqG9I+we7vC
z5WUV7#1ocwo-6v`>%#gO@RPGm=1V|khU?Tt(k0@*3i`Lfd0RiHv0{OV4sXSy8$|i-
z<ldk^GKNZZOR458%Jys%Q<GY*2Y*h;ZJUNlZFPyM8xOE3xXoWAL^~N?<};G}d;xqW
z&w7696WU~2rbBm9lPM*GYUp-g>bH#u*rFjoD}=M~l58b<HoNguVNN-fc%n!#iouJN
zx&AfADG>LH+{w5bfrt?4UM7K<W5h6^IBh=uC`+Vk7KDLBpOZL{uDc#?AT<Isb00CV
z*Bq5IWLJOEGcRQ;DSb;u2!L>@Xlw_+Q)UaGN`ElcONZHo34xw;a6?R<_$q%=M7RE_
zny(U7NC+4Lc59lr+PUh`r9gqaGw)S9@kp_`JsjUCfk3oO%Xcn2%^0sHExpzIgosoE
z90m3QVgN<#ur<k*B7?^tlF<M+im^Tj9bjSAFcSQWgb^S_l%hjhqxf#WZ={O+=7bju
z7HwB^$MB%5eQu8L`ISCXBzDIWg`8Z=r~r^IXmJ~31PZu(Y59)qKBz^LPaOz7$7R*Y
z9Nd^e+c&y%0NmpnoUHz7;kX-LBwaHUJvY@iR_(>t__sM4q-mMS1vo^zPz~@?YeeAB
zKh1>s*><EDlX0TSTrJMfK_gOg{)b~iDL`8=hYbPQuz>*#QS3EJ`9>39vxpy&4SWXh
z=n&L<njf<v`iW@=8igB)le*z8QIIu;<3!`DW{YYW3H;PlCy<5kM^lC=lZyap6ulE*
zK>uhDh-=5cmCU#awCJNVg|<ZDCa)~vqr`HhJz7hAnX){KPE@0B5upwNUA94%VYB+%
zJh(w0`Fxf~F+%K4AO<*L+aYA}MKqi;ro+Ffh90_&;WU*IU$b#ay5B!RaMEyLq(d4O
z=;<vXeiXqNxtu5{gnMXO$K@SfgRYA^g>d*bL8Q!Rh2dsA*ph_*=bpN_CKTI(p#~tK
ziIstB8yf`92T>nNx8i3m&5y{1>|dU=A-cQ16rkaFbP->{G49fA(ioQ%L_XIfAp`qG
zypvUHN$Z54I0OfdZ8xzLK7y)dV5|fz0LSgPd#T5cYz4*cz`^kkYm-Agig>cR(h&{2
ztzjGX+c5h2_il1Ud^23k_XZP9&9CNQq<BS;OQ4XAi=5dqXPO$<jM&H`%8{-%LedqZ
zad(Nh!BQFw8$A-c;$3k-;;N*pZU|(+VkGmL-9ei0H;65IGT>8;KaLNNPF6mz;$q;m
z72Di3m_{#VikO+Wc9GK^`$*`Xg;4r@J@F?+&e;bYsBc$yd`b71;_Ed_!U5<oF*6qN
zpCP;({#m6zD^q%!65B{2TK0#Cz6SJ1uN*Ba%uTPhiO9siD+-l%`G6;C^VA|Upz~We
zAvXyyyOXOn%j-w{jlwlDAvcM;I<rn?aKB5uXy*M9Ls#ZQIc*ZfoB2{r^rvZ+hRA|W
z+#Nl!miZ(J0&(dLx&|-9f-tyKq;E0h)U@nEfqz$;4_sHLLg3~#wrI7ESW2n-V{mK}
z9m-2Yw5ao-7fBV;KX)5%YoE7kjr#V9dfM85d-D1C<b1b=rFP}z#8El*FT(@ukC>+V
z43-&4Or8t?y{1f+(`_&&$;^Ryfk$yTV$vTpf#yeqhn;ZmfgrKB^d)Ne0-X!j3cK+x
z8&1Y_>s<~sD%HG$YOc=2o}zCgBaNc^WXQ8o<%}}IqBx2UYo9+;0U?aX>xibVE}DB1
zmnx#=Sie^&^F-@9Fw*al{QB8WL+hbV;wuv1i&><$yi;2?u9o_KO2m6Imcq5qtkt0=
zTcTGW$PVndRXalYQ8knm2<DSZzK<w|6=}~<A4B?y6hyIQg&_3U26z1(>KE=MLbRX7
zPsN?6;fST?;ir=eI}<$uLH~W$1wUI7?X#$)`XE?I-MgxpbXYYaCT|NU7}LX*+@`~a
z+A^K=*eR7ZL^*(U*6-lj;#Hlr(&Nd6031CGry>1P>n+vVYId#0#Q*i6(>J?pK-O(r
z5f_9%SY}RNww!asShCeJJ4P?PM^PyjyKCyfw$o(Q9@GUma;G8CAW<ICYoMe@^+VSY
z^l5&ZMSdgw01I(&+}K678T0SZ?Uxd(qt}bc;1olx;uVPNF-lDZiYRN;5#T$hANow`
zEu&U*1#b5gf2a8S5-#M+3#11W&phZSWwd<NeDe-`*)al8qQ&Cwu#I0X5-Kr{Cp)Mb
zny6)N?Zt}S9Zy<`k&GHWB|erfX(x4$>>s1$@;qHEN|6BoC^hAGtAB{)*yDy!+pV@m
z^YYDj2xnq6=<3xNj_Gv;$q6Im?PwB)ekd$*YaZV6shkWIwVY5z*($Sf?lVXZo#?rH
z#I+2m<*`wDd(q=z**RY~V?>)e5Wn^K*HFHOg!LMxbm}Y3rs)&sW-`}nt&@;zYFK3b
zvb-SSKbuKhm;!W?JLYsv6@yi66hYig&Q+};-N`hi2a8~i>8Pm+kX9mbFY;bGD>Dz-
zNg9e5&xCJ!&faT&og*o6PxZ3-4vAoeG`!~5IhFM@&}!D$kj52k)g<n+vbEF{5&VY9
z7(@h;p;1gWA=AI*Uu>>2Sx~Q?mlsgJaikah)(Q<nB%*^6Ug(Z=W+jx$OU9YgV>zAc
z8OU5qL@nv$KP0;296b6#4|*uMHJJ&-JQ`ZlWz1$JufU~uvlrM`gz24XB&GASEbz6b
zL)9Z1w;`9IK~%J^3SP!J?3RJ?UpKL46RS2Ex-xN0nE`uGQ`f725nx%NMG;+D;in4(
zqn#p(aSPcXtU^rTM2|!vr2VbKLAobf$NZ#G3dE8LMrrwZ|Fw<#LzfAwXE{6x3eH$@
zEq}8Q4<jD)klJ4+o(XB8^-m{~0wVa7Bs4mP2ajGOEhnfAH6@-zoE7neEP)$L!j6sb
z+Xd_4go7X&R0x+h5^WH<IVAGXaiO$LTEPFzstCuij8{{8%Asb0{q*oYIra++?*pUq
zW+k-|PG}=`6j{24QpN(9$to==#HkQmL8)c@$G95ck&;i+hTF<I*^=G7sFEn!w@Ejz
zjM+I3n(UDoYOFn}o;3eP8(x-<T9ZrXMI=NSEP~fYonY_Ri-$wR{Tn}T^8d=}fAF_a
zKHV=Jm&?cHQlnhnFV*3Fxg3ourSo!BRX=N0C|!%x_h_%QS1#{GP-+kUiAs?w4>k9o
z(tQPf;&US^)ym}^Y>x^>-0}&P*@xbsVi^jS^}kV>i(Q(gccA-S8gzq)0V9q|ak<>2
zA(Try>Nm9UtfJ-=-PW)Jd`%xuaa8yZJxBcQ*zI?O4MsfiY@e#xuazyY)2j+py{_5m
z*Kwt)W||G`PQ9Rt_!|1zg4c&M*BTGuTU0ufOVpsX+bKsM;B%FFf%Y3%CW7DldLdw#
z*fh3s$Uk*6(GgEO64O@GTc;wpK=giR2TJZ>CHSX~<Fk7SUlDZTU9OZ{HS%j6!hY!K
zs%3k`bn&Zh73;NTZ<K2D_?@>;DFVk@bp~+k{P1F)nTeH4or(nYQOy}*13(X2JS#QJ
z<>b9LxE?_+4vrxrGtBdH`5b?CD(CP(aDdCbM^J;k)0i&;TdiI{ujv8ql(P%hEG4@5
zRi$MHS4*I~K?Q%qIEQq?-oR9-xSG%oA`<Gau18J353zxByEfI?+h>}+skAH54EK%A
zBs7dN9&`&H@Xw`Ot}`|Ighz6&N0MB+aJ0@N*(=x1I~8hPqpj$=0<GRvZYpYAQNK!G
zprdZ3bP9bO;+8bTY*oFzUc~~8DjuyUuu;X&h84T(WwBJpY9FI6evIU*-B2$uxDR!l
zj~&~{8C&;XI=1p2^`cO`>0kA-N0`5MLAOeyyid1D3SC4keT-@Vu<Bp6oOpU*|DsDo
zrswdpP8i={&n>92XLlA`s9$nxc>Hh+PpQ7zN7dUcwzr?yo1|X1cnFWxag{$dG6zGU
zn-#?3+Zrw>6@o=*1g4_atP|lRqFrcafDgl{W~T80@v)xiCT^v;5Y@t+;lFW|9R@<8
zxIbUgCN1NiGxvfRRqA}!>-yilZ5%6NuRVLnDui00!8f=7rj7S_An<<0U83<hP2v((
z<;9G};ai>XyuA_-u~ZI9R~7d%uU}eh*+F=vug7%@gEc(O_>Z$Ec469h*OxaH0OAbs
z<*uCp7HtS(qo#-GO$%s}YGCO1{~bfG0+2Ou{Mhoaf_rw8+2TW3OT3Qu*D5^nJ>Bg7
zYQ>K0jm7!0(|!OzkO0|<TmZSY0J5|FPb}j3Lu+_k=dWfB8@9-nod{i>xUw~`KuwSn
z2KFK(<Y0xX&MBtbWfP}vu9t?mwXlz`bh*giNGVX)Z!H=-+lK{ga=|D-yEe+TZdLA(
zUhqhq`aML}^)31c8-vSI-{zk1wZ7vVdeB~7YN{8|Th;C!Z4vHa9ciikExTvDBU`p{
zS%-*m+EDm*Kr~;(@VFKo;=XU&_GpK8y&ZwV?~cP|-)76!-r-UmiUHP$P}o5zgGJG|
z2);JggNx$fAADV}*-LE4EMdDw$iiE~V^~6jmK}nlTG{1J8V0~F9Du@632J2r|22C@
z^JjL#pmf^D!)ZiCob%qV@I`0OIUc&Y<r1<NR=<Mdu|2f$6dZRlJ*YN@eAHq0Yxw;>
z%HWo%#SfOuwHtd)pIdx!)d@lE5mFMDGgLpb&6+W*CcagebFocahA`8;xVjP_Gil&C
z!oCHm(x`f190@SSMcB4v^Bz;lX2@5S4E}*Fc+2E<<W_t?v!a8YzA<(>1OS75-j<64
zTX{q$c^{ALo{P;-Ea>6(?g8CH1&E$FGYD&mzzEoTMjB_-NI4EZ#?-x{DhWXuzO>4q
zVb0QVU|J)?Nz_=FutVfujc-f!^>E9Ma2ICQA@sT>exE||8;f?IZ%O=lrl+|V2Izf*
z_i+h*=sK}GwnNy_&Y^*D2H$r?jSsfQezr!9q#TWV$!|Ty({j8X*;7DQ9Djcnk$A;U
z02XZ+={78JzQrPz2L7&TX+iezUl1Xrj@0f^c!~hK$f54V&ak|OMlRXAT#-oay@%9j
z-+E%-Qv4mmTCQwasRZ?Z%Ixe^oF2(qoN~)7b^?O=(3XQY`@~r5?dsD8zZKgxAWE4x
z(rnY3Ad_y1(&~jU?<j+L^@)T7cgP*>ixHnOJV$0!V+}-mhG*KvdGAQ1L8QdKD|opk
zJiG6_S3SQmSRFyL@w}2xp6&BtZRqQEFLZ@JuRO!4o@$!F9QL(J;1VB-^<zr4gPVCO
z*6$qW4&UG|eFq4RHi%aLp*v!=5`b;GB+SI$hvtoFUR@k@Pw*63;wE|gt#DmEwYLJ_
zgew&vz1K|lif{smYa%`SHusPMA<l^3+~EM3wDL!}X#R>%U}D=my9}Pd7;tWlMKQ6(
zBI?*4BI?}(BAX$-93}Xy3Gicm#E$I|vlnI67hP#FvHJJ)y<OYcm|YOj*xug%OR+gj
zKn>{7g@i*yQ+v@Yp~H#g2T7<>bx1%XfV`^$&qDX~SnwBLBQ9S<bmJ{79Q*3-KY2X>
zI5dE}fRP;{J%NSK@xF+0*A=yG<c1xT?p_f%AojDuyY($gx~^4GWQ8+6GmCm#q596M
z3IXi45S5`MU6Zt$`vu%~15(83E#a=Zrh)_*s97#W{w(n_f`vP_B0;>h`z)o=*rXBJ
zCEF=Wx(QF`2_c)vk)vdaB7)&Fr{MT~Eg*aeS2FqvVo}PHB(r)Oy3yh6-d6m>3muLK
zbKX_Nf|9JSF|A0BN>jxizR;>4#Ql*GgOzKR1{T7tr&fhj7BU1ij(60{o|b1HZj;79
z-%9tD8lLLN*E!JV18iOpuZ?e2A?(ba+HqxCwW47bmC&WpuVv<K?jQ5GW6o09t_s|R
z!-^GDO)A`ly{KM9Qm9eS96WWgzAFb8Nws|-c-97hDWL!L$QLL2e8WN{W&6)70s;_!
z*&XZ>O*G9yO!kVqtyq@%g(%6oM71d&?4Gts3e~RAg>2a}Bg<=CRm>gUpl!OUl<S1W
zH)EJQC?>BWyHjRl4W#1?*W8YLvW7&W%!={4T}953#dX_}HMY!&+UH}$lEMgp9AS-6
z-AlWo`$*a$o4t1xSy|j!%V<GBd~T63tjbNr|5&zy&AKAqGP_p~NWxwUjR<vpyfth8
zSm}__^pfcN3^98EVX(AaG}@4|17}<c`DvPYXUo|!sJ2$~Pna{GYong2pTDRHB#wkV
zQdPZ*Reh96^8pJ9N|Uwf-4?uwZJm3p^R=3(17m~*SVwh4Jk^Z&u^#X_Pt!^R@psc`
z&4)r3gTt=Xe4RzrLEQ}o@|u*^=gRpqsL_*cScwU<^R}zHJr>mf8f;hozI=?QQQOMM
z$7+tIKGI|Y5{DX$>`>RYgoX$7%TKp_%ET?R&$B*zx}`t*ilSITRJW!E7_EOO+kw`|
zvf&wW+&fW*uOM+PiPl+yW^uE=0UBF=DHKi~Rx_FvTkyKlU?{UV;u`|q{<5CNO$DSQ
zP<kce?FU8RTSv58*ZdM`Vz3-Cm8S>Uaz=Yf<qq+L9OaiAR*rd;vHo~fIq@w#>H?S*
z`+dq)EJ1;$A3Mi_C#JR1B&;RcQ7XK1DlTAXliBzPU^TuK@N~?20`oJCTuQSmkm3hy
zJGMxTj>R{D<{H@4P8vCg)8){aYYrn$#8ZdDHYN5ctw<=O={nr$WC*RTum-;!xk_DF
z+c&T^F@pQPrZtT+rdcI3le%7Ivtfrw6C_n}=o@&45cpcu*G0;3r)TdS!d^rT?+h|y
zM{9t+y?{zNtS1v@EyN|F*!8f^i+}8jO^g`Xt|Ah8=kD|nKQ+n@Q_#?AguHK_yupCA
zK_LAt3r)C>$(z6^i7L+58ld|6?Avw*NT8x1#+FgF+mqyU1EJ3d3i;5m)MT0wv#f20
zjedx9YrLp<n<0fyGgPb3wlZ?3=UcvB&`5JYqiw<Ug_YLT%`McgC=BikV%7zv+^z<I
zN0Eaco)XHG96Qx`iNpnTSI>dHW6R?5B`3A^&v2_x%N9fJyWCGh@TyfQyvz*#Srlfl
zFAzMc{L$7GViO_>NgII=d#-%Gu64Ba8`c^*OjSDyC>>k|0h#);RgNYCyPjG!8hO?>
zB(o-ZSrZ>|?w4~R2(_e7#ODY}L{jf*<Bp~)lW6c&9_QeY+lEJ~qZa&l+nY)v@r}@U
zc+-~M?y;sCP})+R-&-xrYMnUVE(!*ZZ?<P)x;1MRrV)XaqP(oyOYBZwVht4g!17Hh
zLK@wVa;}c&QBLm_cMH$&BIkO8ZMw(0NZ>^aB$v6xPS5W{Fsw=~RfF=Os~Qk5)(%LG
zZUL=hmMWwx&^9!yTSiKxXi@JBuHYSThU00D^yRkW>fE0b@{=5>)PvvD9fLH0&2c?X
z6ArHr0tOB*BeKeIF5XGQF8a5+%W+1_1c9z(U5b`THrH<i%s{Uz&!P-Ad`hGv{&Oof
zV`n1N#p_#v8ZgaojW9vcjRIXg6J5!D-?<ZAJ>Lq{fUZ_TU4aQ*<l@>b?=Y-3Q05R>
zLs@$OzG-H`fa=*=B<a<9hTRuL8nyp4`l0rXWM}VrWOY8F=BwJUdQaT(FVK)N`Bw93
zRTNf>%VD{Obl6Ib?i5c(<%`CxSu8ZLTnXyO(LU7_>Qo;n1o!6>iDx<$ACEvE*$cFe
z^Z@|yO2ySRbt4+oju4gV{&qW6$7;zl{ND29S{YzHafP&6DAUnG89+B@tWS=*6|`*(
z*yIuQ)T@97Q{Sc*qrVjT|7T>8@?2>4kwy~~>(v&ww3TUTU9_}HEv?OHX`xnHRV}Sn
zM%5f@POWUOqSrsIluIf0tmmQ$+Fm7a(reG_79@x?8do#i?!>YK>ZC$LUn^P^9cWfz
zU#4^F7B3zPNiiIs+bXe(mRg!r9b5_;ml2xCy|cCu2rplqf+)E|rNHSnkLj+WVdFzU
zbSDmfqx97bA6Bfci5u|~t>LNnwW?T@sleLbD&m7=iSC3jv2nX)cRm$D-o|*#8n+3F
z7aXUjSvKpA)^;RX8(?dVp|F?BwC0NEYcm*;bW4EiP;k+az*lg|M;VeylAkcMV|&XY
zg-3#uy^Iwa-*C~4QN5@FM!c$wvbdADb$2Xfr+-hDUt?CLK8u4lRLip}i#b5HcVro}
zWBXH>-9!je3l+<|)$M8iMnwGA8qMV(j~hnej!>ZxgStz#YLBf&4k(QUUb%X%*tdc8
zh{d-I^jj2cUsdqnH&$x7EE8RoQ2l9*K?kgw54b)NgN?Vd>fcg*Lap5Y5!a_3Z!AA%
z01eUqiCcf~f&Kw>-rA+zTP8U)UBP>M&T<0_(5scEs{Lt&IIv;OD-qpRzv6U~$hia>
zDErL5H(TiG+NB*m-el+Bc6=GZv>^e|(c|=msOz5Yb4jofYA4bWh(=Eeh9!4a8d)OS
z2fWd&!@G<;&H2hsNCL)W)>QI6-*!mPS2O6$J_f84qTCf*-4V!aZO8W9*$E!sVO6LU
z9C7?mNO@l3&31fK&$v2Cx|_78`+_8uq|!chb@sCE2=5xEUDzjYJ0@CYQqu;Z`@`xi
zq2zE2WZP@I`x=MtyX=={v7VdNh%R0r;e3UxSR2*P5_d{h9#W%@8upq$9SHVkC}@5>
zef4h<T?LMj1``VlJA!mas&8+-A?>AH1()w&xX=iC7&h3$u;Hrp8X(l#L+eW0X=H{j
zDA$T`Z>(A?<b5GnG;%<paj7x^<QZUqaH{Gk73wZOL>w2C+a={gEnM!cqw{4OA~c!P
z)KN{_^E5JVYA#vS&TuW8tWswW&${CUrS6Jd@PR3>Z99;yz@^-+;+Nj8W8+d+13d6W
z;0(nCdHb0fYUNiN(%!Ug=zU|iyh?k1U?DODc<|=fH}yG0_ZnEVn}z^^;VyPI*tJ4T
zc2eXo&vxu-m7N{BfLF7<YPld(z~zzBzS>fC>OdyS2fRbH=gdMXfxA`5uD!Mrxm@S@
z*WIk52DWgmax`NL!7lmf&g>1Fx)v;t9yS~c8uq>>{%g;Dtex&U(ziWhG4wLZz39FP
zcU!`fhXG{p!9fOaI=>PajNdp0=e1i)NbO%WP{B$F_iM$9W@&!oijU{WRAxsQeBZf}
zqA-)|aHHhMyN62!4s>3pql&L`M6e6>zGi!`&t$O~jZ~!-Rm83`E*brmOgPn|IS4xH
zN9h|O0eUGsfA8MRxDBIW<!i;Y`2QfxRjiiNng*MN!bdX9)yt^S^S&`@Y-qtVJf70y
zv3Zne{Hn52^<@a<n~FSYJvJiJ6wEbY`@T5cdjnYp?J9=VjCJ>*D*cF!aUYQc#9KbC
zhkd$U1`Q-fc;5H#cDcB;5wu5GI7$NR9U0c!Y6y+)7%sp=L8jKUGY&d{RF-zdQHERV
z>8@k42hhd#F^AT`G`7Y<u05=4j9K17vhmROlBY##5P)j4BG!N{G=$YPidSBe*~)d4
z%l{l22IT6Ev{M#xkI`2422nWTdGwg|rpi{>(T<*KO=ZrCp9fd`+^+bZD=4VnRa|QI
zf>xcbNwNdY3U=<LW4@`r6_n}Mo>vy?dMh7<;D)zZxG87m4quB(gNmWBjlKOIi<m3|
z@%?)5Dj+AV%fh;&#<v}Rf@b)NB`5DFRo?pK(>|&xG2UC<$(nw}20V{5^xjs06)_^F
zL#_F@60$+%<qRakt_<e_0GH^MSYt<LBYdljJ-eWg0;bdNga-c<hw{$snN|&=0^*Ih
z0(x&yME<SeAHzu_fSRZg7~1t4>3i?SjesN9u5im|zAM$sH!k<*8Rveh7(d4bHNo1v
zwKp!OU{%TYL2NmB^JDl03Vhv~g%pSj$bf~kllr<9+|=6{<|8rSgR6?5#jI@7*Z>Jf
zZA0ShZ_SVu84|}7Z@jGgrc%%9;;`TE2v1aWA;B5l?RZqJbYB|_$;sYyZ?>5$+7<!F
z`fXQhY)`dW9bMQR?U^fopE~Yh{Vk?qgrT0qf8sR|iM6m4W-0Ra1Id(F+a_HZk^7)R
zmV&ew2BEP6`;27_+Fx>?qof?K?~3Dpju1+C@GwN8omlkat9+o=(_QZKD+=eWbt@Ys
zGv39pIliyzvC)$}M;`1ciUigxB94KlfPK14hN+GbOxFP>G@z6=L^bwkC3FJ^^yMyT
z)NlddHho!nhP1=E8b>`858;Dn(D-84jbZRXU#C_dE{qb@8n<?F-#V3Vdl@atp75J6
z5sbR(;^LhaZQ6OMZ_(uvE?d3stK2EX#M52rUz3G)Yl~=XEUT8c52!8z#$^Tz_oDWm
z*~4<Jv*$|MUT*RBcur?;ysf$36I&x_O|-|}a|yl^lySx)l2O(k=K|lKW=`7KknjPG
zbDzc@yugn&eMdxQHN4`pX_#ZQB{<}b*}rl`x_O4)0f8pTnQ!Q%88c!O9;J~R=ms&h
zl_&0Lx|F}{7;z@vG`1jm(1F!tL-c&EaZgi&BAI!RSgHqFs+!AUCK0jDt5wn8zJ}v<
zx`CcnLxWkX+UvM#xnI(p7<t3(jvU`J?W?rsYW?uW97J_zcWWpH-`8UB4lO0h;_G~)
zSrViwcwMuI=Dx;SL&B}QV&!pz54SR*hu(+@9~w(`7%B2y`;o7;vW9<E*UI^N%Q15{
zZgC20fHy!S?9X};UsikCM^^p5LDjC6gg1ERR*6A(*=WxdPP9cBfvZMP)=_3z2Nk-j
zIi|;_t|*j*BHK>Hu6;h_HI@(_$~Y8JWC$&~iVq`;AP?D<tl=A#*fx&way)UYdiU9u
zuKq6j8un&o*A}_jom~cgPx*pHVz8klW@7(9x?5-KZA)`g3p;MPd+US(;Hm9kYLWdp
zsnexb*A&SqMZ|*w2ZEzHM2j`Y1fsT7wfJ>Qa652iwJ9XrQa~*qX|wTKYZ^KHB-qri
zR-O1N)+m!EV3j?_>;mYJS|6kVgxp;H6hPw`RiW_!5BlM0rfFKdV^+M8u_-O_#8*fo
zjkRU{d|p)DFmN9P1G|ql4U@_dhNr3w_d}jo^}9C?{$of~9P_YYpcx6BgXvq%^+ZRJ
z5MYu&$bnGz-W^B_X1j|G*BH~|C!?3q5+1nYrD{e)B(-li?$vs}Ekz8{Mf7kQ5*!@z
zo>*1ck<Tl^)i|lSUM?Pmu^w$2O##m2)D;P}?7p-Sf9|zw8TjLg0MN86cVvaX>e2x<
z^fubV10@J9fP`^fgby;SS^Fy7X=+yGgN~NfJMEiyW2kQ;b{nIr6V@%74WxSrq>&-y
z8B|y54ogxqwy8$E`ZaRL<(YrA>vr81X2A0)!}I$*c%HtI?3@DP4}+~N$a=;#1h@dQ
z8Poe80Nj`4P}#0M47e|51MZLj7sI(68u+n*i)x#l4AHVru-m+?1tJF;N{;mXWI%SO
ztp+5)0N{UH3s+W0N-<Gej$M(BHL+u2P2AP|S353=IIhf$D|JPtS%b>3;)B0$)sI(;
z7J<ua)!0MCWaL@#@6}t;${os6&yAd|ZG^WL{E67V-Znl*?MeVnK(W8Nohe0_y#1(B
zU0LcbTk5UfW4GciW7(5u-C$InrZ9cItvIdX^~dg!WCVYl;j40kh&BN8QCI-W)V;-v
zt!4!u&N9K4K971htT-bh*%jxjZ7Z~S9*mC~UIkb-q29*|+{2FF!&}jV9+F|KK>-i#
zy*TjYXc&L38Rasd4Wk6z@eKz~Knl~|k@2A<uM?p$z84dSB9}=^fA_Z6k}B7M(wL2b
z1LZZ&>#SdKl#9ltb}7m+v=b3&YuZ5P>Wwft)g#&K?>K11HurVMZI1ZA#<hDX0NHsh
zbn<&IqC8L4_BK&I+k${%nRP@{t+}_&897fiX_hcQ&-}xUyG!N@Jj=&St0wFNA2~1S
z&+Z5`pVv*4*3)vdbGL1|S0o@J$A6`!RRp_P$N?C>t?XF>gk!@su%PtGGJ?yc%04%L
zrkjr$;3Fp_st%ISaD+Wp!8DGL98YY&$hN4PP{ddu0J6+4uSj(7`kY(aN3{NWCk$R2
zTF@u$$I1Z%Y|nfJm_o(t9a||PHhK~`e$;PvwICi$bZXHlHh>&f(*~E_vB9;=91`0d
z8;+xjaf(S1U$!C79=BNEW-S(VsHjdGHvyI`<96eW)1SA$bjT*3hvDRdKrDe(%Uw;?
z=6w`%n?iLLnQ$8dSqTUfI4C^$Z1*0ZR-69fw+yUDnVx=V{qv^ZFu?$RU`uirGO#_P
zC<$-R<)gNzkq`3g5TnV3c`|aM_4+ZudU!?{IH=mG_*-;c`B(2z=si%Sb!nmY*MTs1
z>+Yi)O^6C5b!6g42prreC3CuK?=iaP8qbl&I`gg=jD%P1?1n*OC@#fjALj&DoOe;u
z)&2ZUz$j8})wk$o*F*awf7G~weQE3^Cvb~G{hh&1ju(u3SAMIeIg2%xv$6Pi&%i~a
zpHXT*lJ4=*h~=Y)wMiwsxVH}u$Jy3=B1J~Usp&<zdSh8qJpQ#iJ&xE&tcjDA<ET0j
z__O{-{(Z&&L}V(q_m>wi<MZwLQq)n=?H)7(FrjWTi}E9V34;$jfJ@Od2d2ISHc>~<
zbKJM#j&cSpU0Uo|mKy=&5CC-~Rz|huibt)GFIY3M4^Dqp6W5r9t;{_<s;=fh&zipg
zwFl`q=aSq12Nwl9SgK^PiQg>l3D3P;esBc>OTQL9t$0|C0?0q=1d$tL)fWlZjm*7a
zX_4Bq%uV<F@ja1BfBV6n;FhVq(0hF4iI_T-mlf9qXhrBKh>dIrg^^~;-q}KZ=_lC;
z6oLWuwpp_txmTvVZ?7w5tzd}C4iaKr&S^CiHGu|M_jp~?>WUQx0T1b`PPc8$ifp@e
zYBwA1iaa{WB&GMpK_I64vn6k3hj}Zz??m~=h3eED@?pnRDQ9R2bX1qcWkD}yz8Q3<
z;apv&<ayikP8&TuXm_V6D1ANm=-HQ%)84~#38g(+7jwF4IEc*DYhHVEx)pl({5c(Y
zW)jYv9Q0@Hqq;KS)4mr(+navP+oy(>{CJdf?s`P7GGbV@N_mTf_0WCx)Ukbpo!I%&
z?z1@BNNj52bTq<jUN>?nMQR^4Oot2l=7}{$MKoL#G<B-2ReMp+&i8Y69xcbBM<BN-
zh}#aC_iv0Mxf1A;7`fp~E-gTi(wm&DLRX%&tT5ErquYk98%7eA(7;@*8HvM2;VDrJ
zfpFh@)R5Enb!B$v0DBK~zUM%%RHZ?qgDB7{s6ZZQ_0Ul)2=tI@AW1~>oQMhumR8?D
z*HOb~dm!G84J8<P>_H}GB@oXQa(P&&SXk~y!7C?nmfOns!A>a}ZIeO7Bw|g-`mvYh
zY85@q*0yXaHg<x`X1lWbv_qV{9}M^nD~q*VodtTf-Q2bW*m3D;1?;4_FO*hKE7Hbp
zTou_AW~3WCBVErF8`*n)9LhH#qpUnV4lIR}U#aXy=W4v5j7u+%J;QG_%`(oSJ2Z|3
zw61S11;^2k9zPC+bIRx=<P2no1`@O?-M=~!!By)zm5?c7!$G=2PqrI(%n8>Ke3mL2
zn@Q=i_Wh_ErCjKdEw{_b5BPq-a#DY882X?$iPr(zmBaH*#by8d+MQ%lf%II$;J_Mx
zx2t4<uwKuw(~bq{eWi)&{@b@s)NTlMo1WMMf+Ip~AK94SXg3BgkFIgC8{>-K$eUF}
zfO~6u{+G9RXsxq%f0Fq!#aE4QnJ;h9+GcOt3oy<(2R&DhuQ>eU9l1K*{E^Sl3e97q
zHPP_^g|^dooG4SOvBQwigMxdzijy7o9l5HM9W^+<CyN1zI2y*=HZ-%7yq&c=PK=7S
zTo>`#&(*@VPeh#hef{?7393py@T%&}2nr#YK(<w37ptlqEFFu64!wphWWajSP@Ydt
zJ!hYs*}SZX$lW^22xlPl+IyR~JcgI0AW4&LZ+T>FaIjrCc`pt?-I!gt9vrwn=Uz+I
zSuI7gT8f3|g=*<dB<yIQrFYjA(bqt|c}wvicr#*iBnW*#o$~Uw*gvRq&^;A(^zOXv
zosbueuo*w4k!oC|h8h_3RmB_i*2AL~0hmpbZ{?uRA09I{G&m6$=}=E!VWfe~w+5ZP
zhyoG>Pw<Y!Wd3aPoOIxBx#gg6y+iE!Yo%KWVdm#iE@pP@dq$Oo?JR;ppRPl~KJJ-}
ztV@`&Pv2dsd&XQ?bX6b*^Y&<6!ja|u9-Q|HU8&FNHi1?Y^b4(xb$r!CdY|lR{npwM
z=IMznl~XG}oF0Xw-o|3(DRQf4RVVdS9j)3Mf`G8Dkw*a&^M(!p(^xnX)&&PB(>nC`
z?M<#jrE7&!cXJQ4%FfMG*Nazk@{JfW8*M%h)f(lc0|BHK-Qjpo`;APb2c*AG>$$cY
z+7Bwy*=vsjVX;K)Lv%QdGqJl*X6)y>h<LGllz{@)>r=Jkug76puNrpqxkmc#NZXef
zV?~HOa9tVh1o8s`g?YQ{60{#I-&NxrCp#v<UIU`DIA(G?T7+Qf__5*nF=Ja)efo|q
zuMAN-Jh7dAJ#h!H<ivc??w>M-sbx2TU8FQZmQTN+ZVb>RR!6d8E!?BkBVho3Xkx`(
zRU|AU&1JJoYioD#t@+@*20NJNCqZAib2VKOJa$gSF>W7bBFAtrnb^Kr*mo^*Mc~7i
z?`&+1o4W7jk=F<<kv~$=>~$pMLy<&}--w~SIrE%>4znmq__M%GHj1_=0cTxHf2h%z
z9HDB}C}V9%!TQjs_$<l`m1CkE%I)97uD%^)qEViNqf*}-%!t9W-xenJ4P@NAxSD&N
zeS5XZ3zdQ!cMtPyd-X<#<J(vX*KIaL`alE?e6jCG_&YNnYo1-vmYu@VvB&nU9`n*4
zvS$(aczi`uT5U#ps=u7q_{)~_1zEmhDH~YYYM<rU&%NBUm$p5kLR?Ht|Bjd0(>jQ^
zbqYUg28dCP&MqFh9Vn(5W2RHWOg(f*K7ao>%+!x&V5W1EV$w}hawLRV<c++C>7%>=
zE29%Xz)I)T1nk{GoEEPg%vQXbd^rz<48J+BG{B6Q;fI+0fqm$S9WhW<uK$Hc9l)UB
zKGqHNL`}>6I7u4Od9HnG+)wt@*7)aJBQ@>*c}q#VmQS2yjt0<%?|fA$ZuvW0bb^BY
zuP3um&%KngJ2c~o5jAc(XOZJS?_emFw~`Pe=Oqhm4IL3yMtr1HJuuN=3@4C2K0A5v
z!hi}d-u*WhW8SphCU+qd=F7XPJY?L^zM<%n-dsDd!ps0poa~dSwoJ}dTdI;X*PD#1
z^4dYpA)$7%#34oQqWx}UJso+EcL=j!d?!3NZ>3Jq2*@x)M!!DdynhvR!01)R)ey(D
zmd`Oc?z+QD&rOk5)07a(3L+<ZdW|!Bp)BX(`dzl7{@A*Cm*vCw;~`pPMO7&kW2s*4
zC~GRO2eWg+wLIqRuv|Zg+}I0m-a0<Wc1qv|yDwxS`t-fm<b;&&>qQuuP#{9wrJK8q
zT$@>vQUod(DHl&`h?L!VCS=^<!in}gjh3Rla6{F{G{kOG6zZc>b7Dz5J9%jn;l@Jb
z0D#!aSxDIb#7Ur4lZf<4u1a0UT+3{o@u`PRl;H)@O}<;ncFqx4>aAYIO&<w8)ZdP!
z&<*IwEQb$ocO##dN4;G}N>c|hvKv{a7rB--<XSCX>b1Lwa#oxwBsz40Z3g5M;&siu
zUK7)@E7yx=Y|gYIsWg;I8JKP5_MVwq?V?L!xZZpJUfX-g9+r4D?wHgu*HQ1SL!8%m
z0Z~VH6y<yasCg*^PHGY9!GefAqy3F)=7@ES#Hv>@>w8}jl1q%;T;{{-Pn@{J8S<K1
z`P)_|+2pc_KO#EXH~V1abo&_r&>H0Ao!O!_nhmuWXIfl&uti}h^tdM1A8hi6rj4di
zD_c2IYv)G#He0(;o1s9Ej(GCQzuB^oYE`_H7X!7iTX}^6vv#+fRGdNy(bU;6j;$X%
zs$I9YvN{lGulA#AjsYqMWgpt%?skTnBfG+m)^^3w3+z9v7s$3})dDDfsXx3aat<9G
zcIvA$wNtIPsBU?VC`gxQo7gnchpdcsFY4Cg-WJ6&Id>$R5k*e4no#QyxCb=bSBx0b
zeEH~Fgba~}!@!AWmVY=F<@#qf6+<wDR9QqQ0~H||znwYGh8)<3z2`>nh3ft0vAID_
znjubO9fd5|$aJT%v^6WCv&_-ask?T(Y@%etxUNyf8<`HIU6H|vvbJ*9mC1XDB&?&H
z)zlfCiApfxuV?;88I^G@nz@_7OowjjgUMMir6&iNg6&@;lJ)7H@Uwnr88uR&?OCm}
zh*xyGO}NK7t{mX$NL;;7-$A+KnuC~t0;7%&C)-XQhrM79VZoa$Z9k@QG`AnWbDG}C
z$*}FPHWWBx^3IWyHjwO=xhzdQBOAjGBU}la7f2LoBjlVq@^;kl2ovTHC=jG0XXDMG
zjG`hFGM=%V(J$2(rIzZJcNL~bhk!P1O7d+H?7}Krym3X^+g-%>HgeE&Lb7d<ev^_d
z>)?L9icUKwgl9F``lE*6SP6X~;mVnD1U@&|*go#NkLT{Au3L4*dR5t{3IBnKbR`Ks
zsA_%Mx6>?HAH7{Z4bg=e9z$|oZXBtGRjHe?IY~L~<~obkl4a;FmfHrk#_y3xSk{6z
z8@6KQ0QW-O1_@im3)tEcrlFM#L{uNw^yG|y*J)a&c2`a7ASiVk1?b_1MZ^sOW@0xx
z4SNiQ@G=8u=4@#WBcMUg<F3m{u%AoI^IDlXvK`J|oxh`eP_p4>mYe~aXf|%4{=dAC
z17~fgkliw;rEw()vG*4~78EFHdLcx9PM4QqoZ<91bb6eiBtKiMCh_xi!(yu!LgX&T
zCr;JUdyD9<&cor^F0^PAEf1n{8<SWxWMJ~Z%}St%1XRTjeJzq<?N7FIFG=!eFrB}6
z<9i-7Mn^&bdkCZe8lS!s^q=i;_%3`~-dDT{uHqp)UORYbg5$shr+cV#>c4x$?3i{&
zN<TfsPM^R3E1lj^cF^u)I$bi;RY!FC*0*BZYYSRw;lM86!nUzu(6OELkYoy8b~#$d
zB31`IV+)AFKyB-}7AIgx$>+f~mLuQo!Dxzv-ml3v!H`BS8%I$cnw84R32D48vO#dR
z9fLbKVCR+<f~HZ7b<rg|#H%K+x4sPE6gH%O{l4<G;Y5HI0wHqCjSUHFdKxuMx~I2o
zQ(bVhSRDq^uB2~-dt6=H8Id;bYFh?_GDjchcrLCOsIf$9@6iWggfbvgDz>*q*6=Lj
z$6+HGk4T%pdJ#z9r;st`rJ}eh%^Zy*HZ#U>ABT4zatU3CXWV7O^MPqqbr0A5SL}ZO
z{=)-D!SJ!=XKzG2Q(3mLvL~<%tkQ{y($cg6SO^?s2jfb<T~;WJGD5&|#mR+&EJ5tX
zQ8#8dRyH&~^g{QJcSJ@KnPfDO2`kE`9;{c1Y~oXad0*e##Em5OGNQS^EDdT%ruZI=
zM<0?r9CG0$uobn!VTDC@p9^axv)UJyf$X{GI(mP-ovS5@x+ZmPz>v0IaaXKvL%r*m
ze-oX6tvs#t^p+0H%d|4kt3-jkHX|gMw4!PK&3!EpO=%VH^tdk^E1EKKypUx8#EfDz
zg#Q{l%p`_Aw_#y-o^SacI8Z~Ho(1v}*Ybl4c`gG+W3p3|mm3@zDfp`iF2F{*tWl<x
z=r)pN8<wm>W1pRDk{siGsOhd~7`@3xe?Jvr5n=Fmr+M-gYipSsg%(u;QR}&ousp*^
z!p|$@#Hr&7M+8na<d`_$CQ#dKhZeO+;9;CnnLB+W4fFPN<WGx-eSwy=4n9P*ag43h
z%bt;+Z3`KDf}>t!Z!{FB9=@!(c4PO|r!_xTbAA22h)(=IEc`g}(sh!};Fgd?ACm8d
z44HfEw(;J|Pqs3Vn~XyU?~%-R7^{^SMsjlwD9Jf&$5Rxpe#H-<c~tZ5Y+<6zExabO
zS>~-hKokrFO=3h;KJ6XJpjNQdf!CVSv8~-ka;0Dg$f7Bd2^Z>!voo(7Zl-ocYOYk-
z97Y&oL^jM;S?F?c6Tafd{lkp;#*sKW4sSCe_}<yiREg|ZU00Wvm26^==R#&t_Jy!5
zJb?R7QWhkIt-#mnkdE%7Ou>V^#&t{|&Y~mSZd?&=3(>+j7J|{$80WVX3yje~I-g?8
zTGOxef~{M!;edC@L8j(=__A}R$wL3_B0mlNekKe3K`;sZ9Z_j-tssImG8euqc$0GK
z7;7q36K?SlN_FC|E$3M5n5g3h6AW93K?bb=S-4((p9xw{LEt1N<uI9qNcSRZB+n*P
zq{lj&W&cBr3QZt)K%1b-rfjA=TYl#3$PbRpusXW1Tw3qK$pK0UjH0X>{AGkmS(;Vf
zvTQ4`_+W^BWr*xL(`92?{<P)LVLOIo6S8=kuG*+Gwt}<k|FZT$dmjA#4LHw2E^j~w
zSQU=z9%sY6Bk{YQJ*dwj-(E{0vG<wq*p~?Y-{KkB@){=3IKe&FJRxU6r=|(|Yz+u^
zw)4-M;&$quT7B&zkS%>hSVFJH@}f4uvesk!+a`CcSkINGSfJiN%<xTUSbUUw0Ct$J
zpgXgbduN&ic#ZNQ+07@&E3R!@@{JS)Pq%Gs{pVY5oc(c)xX(ziRlN#lb9uI{#aVh|
z#??$<#3jopG}e!1n&%D<ymVc4E0;EO&AwPuo6vY&1nHJpzH4`9cDjdx20<QrM@_^D
z$5AIm@fC_a7pei0g+it0(vCu`K|$`9D>@mcYU_m!kUrk>G?pUv4#)eI40j;q3pMGb
zvIM*~aATJQ*fblio0D-raQWiB5xRa;Hpi8xT9HkZdAl*G`aUmi*he~h6qe+=ZrSrr
zoo)U0GETxvI;Hq*+@gcn!6qHk&YVMZ$JV#1q!>wrKgFkSm5vD(0;wR(PfD5c?1SUF
z9&vWHIw=Bbo(T~(Rj>JRG3$QhMr6Q4Y2TlL;w@^eRI^OTqelJWgP4IEn6{fBhtf-+
znT{b+_N~?4I*O&5&-5)|0!O5kHQbwoa=G1@%AQX08;LtdHF2P?-;=uK!a$_V(-hgX
zerNX=q(8Y3d4-4oGak(>miR_Rw17S`zO`ODAWC|=<+u(sjNl9~!T8*v(jf94T`~(N
zkM!inFb3T?qi4S%I&$elz?*+maq<<QwaO|c-42+sfSW&I5Jp3j*v3@OJ-eU~r1+kY
ztlK+}D{%l$eff5!cb4fVt=StZC;id;VJ%Z_QnP)p*QEKH3DKq#G)Z-$8*=PUI{!SY
z`a}Yhdroifg=zO4=jE;juu6aHzM2_p5UacwdR!!YZ1imun+nnR-YPm{oRuA^&7L)|
zb|f*HMA;X4k!sa`EsLFNhEuhK)CC4@dCn_}80)Puq^j9a?pHO@D;jaG5vrcn`~(y)
z;~W(B;)6kA^+QK6TQdqU__lT)$d744s&{47^V5vbmUE=jhA-s}C5;V+c%Zu#Oqo}`
zJI!qKYGysbw3G}n581<?GH=6&?RzAa4)5v@N0@|{hc04Tsr0jl;;A@G*TfD!t;`JS
ze21JN#Lv#gm50+bKA|<twjx76PLN^Tce8Hqg|Z&4R4F{*=sX+b2c~t<$*$`&F{|#s
zXZ7DRD*&--0K^^#<T25DEU-S@zHl<JsMeAl5k7s#&0pUA;8?Qb&4&u8<6S?Yg^uXI
zm5~?FR=~`CC*rpvp!fJ3(<)qq<Al@XZlf3H=#hAT{)mNzCNuejphoiS{X<8bQi?x6
z_vEovEBLEDJ<rT^e4Z2V^=|)%XSzT${dWEcK>XLu6kWd-PARBl&7T(G@WvqK%2t8e
zB@X&3M!`emlblV8qGjwzMN|b!hIo6Pjg4zp=epK=U`SuHL+aCz7CzvRYJnl`QOEFk
zl7I1>gRE~@`xh(;$#@^0{(ALaGW|fuHCl?mUU>*=TwDIDx3H!dwk<`&VdO0tjynBo
zq*3<wvYDnnSnDB2tAX{#mG+Na?<?m*YX&XcSNH@h)cm}RL%J^RPC{1zlp0jLFc{d-
zjrE;xbdPiM0z>DN!g&wqodZl*)BAvUczm7>k4dtkrxg=7|5#HvogcuP5`i3^%!vQq
zIJ9@xo{Kb|M+YdJAD#cL8xU{w3MObd9X|#WKGf9q<B{s$UIyS<qsNhkVRR7@x~S*-
zU_Y-suReyH3FCu^@WIUX*B{mX|5fAvLFVA#@yBid-^cCW$L*hPKQR7(^>O}7?VqEF
zE_AuWiKzekK>Yha{Qu#BILyC2z*FPj7sbEN#lJ5K$pw}(Qk7~j=NE4C@H~_IX7ZL}
zXImL9u*}gv1FSzF?(M`GR(k2fBldRvk+AcZ+CN8A#Jo%TIq40a)_nT~n$m2QQY)ZQ
z$_|@1?r9~oafkXuKTi5yr7*!H*dW{NT-n=WWXIoXCR76_DcIqZs%Tk!^n)^3jGST2
zXV$V>pQ|ljuh(EB<;J)v!j(*#!V}X`Fs)Utx2%qpo4wgGhB7u>`1?(r*-_e&G|Kz?
zY~s*VJ9vBOnvp~w?hZ+<RnvZnWDbiqu(*oH?us@j#%rx#30WDl!u1|aE04<=WBTh|
z<CI;WUXU?I#xC>fSoHOctTeB8W%>qNosam-Bdd2@fKY|e_13q;O!rIHC%itP?uU-h
z8vgmZo9%vS$M1e3yYKH>b>?8#$0y%Ri1eB^Hxa%ATgFJBTpMiZ%^(Y?Zf&^rC@ae-
zWag38If8-3eHKg?gxjP{J+yQrT#%%x&T!Y7kq&lq_TdHn_8Qsoma9hrHHW*t!5HeA
zuj-k>vI(spz{XwS&Kq=<x!v;YFgWjVwfuwDC|Q%CRXR}jTUkqwl{461I!6@C5-hW#
zi%Cnn3`8y3S9%}HK)iJ3+9+IDi~nWv5tW#C4Ux(Iv|=LL)xMFd+G@p5ctY;)t_k?v
z89|EUdq1LU<g36xWRE^<3iuT#>RUwy7^ukXhIKax%-6FFPLtC?{qX6q>07BB?+0?8
zFM*-M!>!%7d~c+{+E^DovdZVR5!M|0?1^IY$V7B#_k=mgx2>52y1mG*-$PqQ$(Ts-
z{=j_Knwf2&_IGiU_XDlB2_Q_kjUQ|{ci^<1;tVy)b-IpTTwpc;O1rwYl|4S%3xEy~
zy8TD}iabK0W7BW`>yJ%fm7Z>C^X=$zn^L$n9l9BIdeXF4+^sx9cg9m78b*}SoaS*n
zZTffPH(7C6Ry+_Y+*`Dd-+$WjtFN~t{I^W?c0}pMx#EjV#h0?;Gg<L@D+m?Q(JZL=
zV1WX`VbDZ7;Olw@UsLSEfi=NgsWG=8orH{cEV*v?>p7NF&nnq!X7BNzYEA*yD%`-t
ztxVElvG-L)_;bA=gYcbp<i!%I8(e#>u6i7DnxV{}$|1KSYg}i>fMK}Vl<7*w%5Cqv
zF50aZn8vL!sLOTneZkr?(aa8zprZMGQLt`<aYF0e%7~Xe)BJX}mTrAXw7%_lnVFC%
zbQz7Q@w6@@rWhwQx0ZWix4j@Wk+Err4sPob^-$29j8*1p)A}gAHQ=b=%tJwR+3m|5
zTn+8*!UH@MYlhyR+HM0)DWj^*Hp9H}8cn;WVaGt^*IGcIcxWs$`zHb)tWc8At5zmZ
zVuV48zgCQG<4dYOJ`pycYq`~HrL+R}r8b%a&EWZ-Foz&(`NoT8rh476L_fszfLz^L
ziw<+EH_)T`&Q|YNGtTg>?4H1Se%rH{W-qcF&W@9s6Sh=_J+BRG3tJTMX<P0GI__<Y
z3t=Fk9B;v4J#%U2(&v7`+p0ZEQ}VgI(&Sab`F|R2z>@o@yPd=8-y%W2w|bK6EQ0YP
z+Eo8psQwN`3eKyKPI&F@ALU!c5$#0eYP+3tAAEK01CFd^$<!ewr*w8fVVRe(3qObe
zQ6BVSJ9FiK-L}C#IDoWCy=C~FXUC%1t_?*}yP=fEOPM$x3k^|YB??%*eyav->Ge#J
zeRgB=o0QnJygnaOGZO2lHQtuUkUW|v_;d>q8$zh@={t!Jr**Dk-G^&BO$0&E*NVU^
z?GBO%hcDjyF4D%mv!Nq|qknf<nrTz2tsR%Mu!%jMZR7m-?oBKHdBqhTR~&<Fv^A+v
znVpOS(Ym<i$8-SCzFzvd1ZbTv@9U3X+#A-)`@pBTJa-$%Aaz{1s%6~9DedY`HoJiw
zSKr#$?<`rwQFpC=@Qhp$|98!QEs3=4hPJzozG6U~{lxdB8(w8nz$zR{(RUUSIlqdC
zv4GK%4l?JTJ>YK0<3!hR5_z^|b_3|-K5`Q+z0*l6vfGVagE`Ky@@+c@#a{;M>C_B5
zvw~~lH0p#1K^GWZ)9zt(Pu<^EeH=BFluqjPe@*@0Z)YW#+t!(=UlDGp&zm_0+Fvo4
z#?EqRjlWSp>sjpnOkl*(-|Gj{D~`}#FTSm3V1UT9K!Zf6?Y+%C0f%r2jBq?V>s80N
zAJ~_>4>+K@^>vZXDMr%U_zTh_z`G5BcRO1gdjc`<O9%6kJZ=@)sI|x<PxSOAgET}M
zwVM4&o<sC|Al|QAPYaULoI9urT*RJNma;OztR+9=g*$YN*?(4*t_K+6Ga(<7I1@Vb
znT`5idrrUQE2P0zni)&cvg<}GoT0m0%cnC%6-E_NLpVX=BgyCx*$eSS)!%RE<CY@{
z{m`nss7m)ebRkS;^d7GAGVjA$Q>@Ouo47}e{N+~fk*iZDT~b3UUG^8M5;H-cqu}@>
z4}{jDrR~Qr)>Z6lZy8Wj_g=@^oRUVdUY%Km99%<fHD#didcdO(CNZr4;JN`4dif!9
zbEaqjynj{m(He9ziu#RzV5M~97-2PWJKv-4US@=LE$4&l-5HIWxqx;5IKYC#Fbf6r
zlN^_|2!ik2UvbXWNkZ=ONK2*;GUg0XkxkoGnm9ox`jyR1>l1P2xcb^uIM>&R)Kg+6
zo^EL_pRyQ!t65?)Z3%~5xFWh#6^Xfe@46z>@SNquh4r($?W3Dn!*$>?OU~h59C7BY
zbvN4|w=8ii<m)@6yi+&ymdN6Z;j%a;U`U<?H7Fm?VL4QY12yU_=cG)=g1iutcRVpV
zAS%bA^M*Unb12Aa)VffkiUh&9A^YoFe#8gui6VrEn3tSVYbSQfO9*M=g_lX*0L<Z#
z;_hBu>L_>-_{okKKuA8A($k$yP}kkIAYvm!M}h(np8*@a>>#ak{IpXEr!Y353QWau
zo3`z)jaAS3*OkoaS{1=6(>5hZDLbiTqAsnG;7azFcrfq6>6g2eyK5*A)oKpz2OwEd
zRUs=+I}>kv`C3xf6m3!-k5oR0P<<NUqH(pHF#=jKbI$9hu4&Fa*&D+3rLlq7TfQbz
zbEVBj`^MR)GHD9|LY+^j(?PlZ)=8r!V{|q0ttQ%$7e#wpPA?q%0pkD|l!YGk`)k)?
zt)E(DW?zK+`g%>7aSY^|0Bz-H^;Dz-sq@<%C*h}g>m>X%Z=Hmnb(4-N8-jkR=FbQZ
zfSJ%!%s0|pmor+mGy3+38I?^s1D!~llwvw`bNQSeIaYI-)Fvinb~7;Q@zw+T@a!5-
z*6DLOZjwaB<ilrA?G=f-R+H@Bg_!cIteXGDu~ntNJeEc!Z>*4@O}{&DT!~dXx_*;s
zu=l}g-TNOTgLq(#A1KXJ<LQADMX7d8{LT8ogRsjx&3gD3iNI3dt`L)PY>j1-Qwd03
zs;wB-d`1FS2*Xj~+Gk})%?9`PHxjYGkb!!E4j1?D{VB}`<B29;Ba7IyJ&wp+&`Yqr
zen!fwCON9w`1NI9g^re9<xF6K0kt<wylCH^Ua8`#=$9#-+xSD?m^<&S6mg0fz>dGY
z@k3cdphs<OC*mX6WQrz1DN#1h8W!Vj6SXDtg+=SpON>Wx82NrvrH+=N52D_gAVs`j
zUJweaN^xFBaX8rAiBPctRQ6&=EC`|W{Y+h>+-16YZ>3qwv`i~+Jn34smWe*OOzAAI
z`Q8gOeDmHiYIh>V@A3T`Lp#>jPJ`mYsJrEhHls4_xW*ays+O7PeeOhiVxkk8=<ORf
ziR-vJkfG>n#+YWuNrXbCMIeOq!aMC|;$dd<BCl2WbTl5i^w3)EjN_=hadcFBhDh(D
z4-Vz?sf`ijDF){<UFpKgXQ}STICL-qNBCxOZU+gBGgNOjM}Zuwuo4uY1cGpRk;$;y
z{<C(LG6R4KW(?VPkALmJ6{;>lI%qf)H#Zf}$T=EzD#2_aR_^(dV&BUUl;@cG0kf+e
zt1T93Hle}`bg(>s`GKc=TsBF9$ktZGPO+)l*_7%$6O<85<`zEqAnDkWe%*0G-`917
zS0iZbR%{l9wRS~};2!4{N6u9d>D<d+e7kQ^&HxFiO%dfCe#=Ic>qKsJFXrNUoyx-l
zcNcefleZn1-0?=}APzI3L&?FlnoUN|QB!rtG2R*HI>OlS#%0TNYSry*v|&Dgjq)Cy
zy{|V!=7{6|l~|tPTfr`4Jl}ymZqMr$L*s2d7B2BSk^N0a=IMoRCfTn@ZV5&Lyd?xb
zd**T|Ci2X^bh<~;P|am1?5)Ro>4gj5nC+exDw*C?9Eb2ahKhQN`qiZ~g8UuFOxbZv
zu)sCFvB@m3>*rf0miTVF>4?oim`y`EUb@JLxk=j^g>!%2wZefUo>!h<WcqkPalv0=
zq`aMH7umqvl<d*frWpu1C1S2FR2eo>Yq_?*qr>PDBn)eoeqSNa?H30ksWJYB3`Cw{
z`5DDxzpAY7IC*x02xNr$+n?{2g`DSD66-r^>l!W52`MZin_HWhh=#!yEC=JfmSkks
zwnVC;=IHF>J+im$p$9_AHMEzpW+4<2pEwu{sn^`{wGK?uid0A~vQu#4W%naD?l=H&
zj}ST*+?|#0s4ERVVMyzU2cA_la|cnn&<)_7xVw5Sp)EZ$s>diBnj53xqlk#&P#(#_
zph(CaWMa~FjE)f3^$w-2CwzH-he-4MfIl4T4<Gt(ERl_ae*T^e2A?XjAkldQXm{7I
zDmqBfj!7u{%)S)YHGJBqY=Ab+LY<N(b}NB^X|P;%hg6D0NbV`!`?n2;X;sU|3V68N
z?l4zEvTlSyUJ%S@#15Uyl-eeQ<#Vl<#iPTTMK=dMXV~VFS`yo-xXfZ-#KpV_0=1(#
zjM!OXEULML)rIECjkN(xc7({faew^Cx!#NRJ7o6ul8C9pXIB+3cCQxx+)y@zua$0;
zN#Ql1TbQCWwmX%)17o+B>~8c-HZcS(Oy%mDaw$wJ?d#cFXOiSaBe8V@nod=iFGX#Z
z&fayTl-B6n*D67Me)PN=T<otH?3v-pFiMwp2vvt`)5+PvQp5p(S|DS=w<y@<5{g+H
z*VV`DFXk!5fuxZRe;dKRfpio0=f#QBj8QBv?1k51$r%)+ubo8x#c?>iuDB6qTXsP}
zhEJf=H+veqU|&{((|?A%cH{Y*oGBZzq@F*g`?%><WF#eqf|Lc7l(LG3jW5M=pd5!t
zHD7>$5p4P$4?!4l(w#``&di++K(7YM!$Uo7^jOr9g9Ac&WuvY9aJQ$%E*viJ9Tpcw
zE0yscbc0ly0@KMJECR+=R67#k4Ld=F`EBG~zvDM7F|8ZvSg(<jUIH!O1_XlJk_kj-
zI;?fNvM1>h`0#EOX^yiu&LswtiJfc?aag8yES2485dC70i`sxaWUlxW!v^hZV~3lH
zCpn0A!ueLOg$ZV_GTp_iCdv@fE98H(x{Gs*LcM_bZEa;I=hhvtNF>T+GrHfg=l1z~
zNAw9RvG5KzoOUwYGnjO3<zBIu|JV)Nka<ZTeZzVOU^TLA<ysUd-2L$zbBAusFiPoF
z-OMyyam92ikGwGlRZJI0!yHtu$&T`nJKF12vy@N9pEU|!lkFe8CC~Ae%u*~*&x}=f
zl)lxGpwzJ^WO>-Ws$>GsT~%Z_@W}AiR&f!nz0b?*R7QCtf3)Y(eB`9jaNRxM)!caW
zy!NbH5z+|fdZ!FQL9pmQ`U;0M-uCu3(lK*;?}fFA?eK+tOIa5my0Pu%up)9GE>>K7
zf7M}{`6h_qo*WvEPWIqT_lPxS(q!CRU5)T`zlGah`;d1*Hv$(l>IA>`DpqzR54Kba
zu6PP?m#lae{Rj&A%Xg@2(|f&xsc@d|S(L0TbeB*=u~4zcVEM#}T;ZMqJ=<)4O0BW2
zff$)wdR*~O{{+o9jxtVsszaUSvDU}m@j<50>WPtZ)re(ZKgkrDo|v$3WZU-6lh{Tp
z1TL7N3Y9*`b)V5Zp|n?B$DAD*%^r^7Y^cASnrl5h$z0YTq6C-Ibl+M~NvoiwEUZ}?
z7y%xbYl<{!+OxT^*15f}`_>9fw%05R;}>f0lnqxnes>5`aC`1f1jT8S;$Bs5Pn>gG
z2lO*JVQT`Ap!7Rh7;WR_Ki$U*qwK=&`j+mBlaWTmtk`5LD@5Y<DyO+d2;d97e9c0R
zQw6?TBXih*AYSfPd<JHziv`Y1Qfy&FNOI}B57NX9-H|_#=Z6zx|CXFHQoKl`1HMR+
zYg8nnxQC+;`>>oS6$RqMB#&CZmY0~#>m1!x?Rdu`vFz7K(23l`u^We4c%s@g^dNZI
zdKAU7!%j<5o5uL-uwxVr`+gKiAkS;9VLOkX@KInx-%}Zz9Y0_Aiym@a(E-pMdlpSO
z>q~Twb^-OwVXZ59&E|5gAtiKn{Z<^%w?>#nxMF<f%RjGef*;5Wj}aw%8STqUc?0Ow
zJTgi@oLb`+?t^ph14^{7_N5nFWQ-p6UG?g1RqxJSUk}6*$i2$Tsxf(~d2~HpJcm~|
zl{^9tpy9geshQV^9X-q&Kb@gY6w24q1u5d8FAnclD8)-PBaq>_!BG8p<SCJSoqa#a
z^A2RcqeLn;7Y}{xR5*UTUNf0js0=m?<;>^?Jro%x!yXM~+H;qyhMWnoVZw>DUA2V5
z?M}el5A^pno9(6l;h|#yyKAk%4`^En_{q@oYZXcM>T~y)T-{V=9*tw94~@Y1G?JI9
zYZm@eVk<hs1nG?z4jy|h3BIST0MN2=CK;ySRm2`lX@$ozt=v-*$Gz#EZ#S^;!56z6
zc7%1CN5~ta!u@W|T69?}3d|c<?PM+eyCQ+jWmt1fsq`#v19(}cq%Ox&5@Wywl#<$J
z>@dtIWrY9xHv*~lYvGZQyY;i`-vss-eM*UXQyFI@T>C65CdQJP$0&$hJV^gmwUGWG
zzGrN}aK0qqoacdjs^T;VeQ7wK+@K;5)sW!S>%#emf9wjV$t!?tP>D)8Zr?bTj`+`+
zj={ZpLwcc=3=W6;qH1k+9ZSe*PdMsf2j)Wk7Coehru#{RskoJmy|cY|Cf*1f&nq@v
z^8#HgdrSRFz|8hgukN#(ig3wYC1B|bQT3`A<+=zTu)|q3S{4uk9BOr`U&+9$$WnO7
zRw-o0`HV7R-VimqBi!PMl|mO{GHyM4YDiXT*n3S{fYnOo=3$_J-pXZRA&yj)GH&g?
z$i#~V^IH%(b=z4KF=-1!fVgaVD|4@Smb0PTMM$D+#2|8RsYl;7odN2<qJu8pEiW*|
z=F6>J$K8`4H4|wARTPwmdXhL3G@QvfzB%3v-uKY|!nJVt;>?P6gs^#QJ620edI|h}
zSGnrCJ5~q6yUoHb5kU&|7||LTE>p(qZiRr#Br--7>H?_(JC%+n^#@pJlRRhty6Sjy
zYu?~yP%)-z(ZRP1lC;uQyo^~Gbhf81b*_1YUKe4cgXru!8V%%HH%zc$R1dJ$3Imfh
zh0i5^wN@TT%#c8p)@sLJs;m^o7^rk_T+`a<WVw-XBV2fIZ_IC3m9XsP$R5CjOWea7
zZ9FbAa9vY>druFfK?@3D5O?o%tGPE0spZZcB+UR7)7~1ijN2SPzp6N>2Q9TIK1ZCQ
z1t`l#H#fo9ramTCYFu-ay)oF&9D~fsB(Yq&Bsqq5ilDK8^-L4tz#UAVft2^&_6ZJn
zTR{=fG39d>Hap@Fx{8>Vcf=1Ywu=t-98jdS(&zjx$v^exmR%qNCR)Py`6Y#Hxso2J
zB2z93<tw?Hue}bI_x;U(aqu9$0TMXDyQXvk&y6&z;YMCM*NXiPWXzLav@C~2076DD
zS|6QTLN?0gMj#)QtS`QEP;PP$ilH-Zh>-i*)u`xs))eR|$^y^UYktn!Jv5^`-+gf9
z8k)R>{>(*x=xRUO6_Hrn2?BHB@rfkdyb_l-+N&gGhyL9`n-3>C)_wK<s^V-#{gIQu
ztz}p<W=3Y=i$f!0nLY3Gz`T!P-k2)PP98%^wb{_*+fBx<A6Obg3~W&rJ4p{}w}qPP
zKLI28ifLoc+dd1*Cfj?{n(#jXr7)l$I>1+z8GA1z990ibOa>LpR73~QojZ)yU0+&5
z_YUK|M+z!ht8|lKJi9&81~^pOyK-jxJ6+Oaf6LwcVb?X!gHJq!({3_L-Edv?{BPEx
zpc8{w6%hJCHjZ%!S32y9k11~kl1y$h!SnU1Vr;_&s*xUnwX!xZKD?`0CUJ-2quP*s
zLJ)Od^ECIuM*>7U6`~1|7`~Fj`YNqF?tPO<Hrhr%iEF9PA`1V^GxzqG4u=mtEZ4?S
zfHB-*V^ndZo<(MboXorK#w>Iy)>=f-uaVu5L4{IVl6gQ?293L`NDYV;(2jZ;vE>^}
zd8K{YwEKt@-<tG#UU_-LrrF&}CdgYaatv!MElJS^_Ink_v~e$lukM8@;B&Se7RG?*
zsL_LulYS*%BmiM+`fdhkj|0MNok5MArPkH0UUo6!yMP(7*rJ;*Gt3>)H+f;Nwrwmw
zirv$#+Vut)MZ-;k)kB%L`Osmpn4;SkVLhx}y9uJzmRU@%YL+8z8S7mUE~#Rdyj#s*
z@$zGgs>Nzt^(rCrCK0}f-1iz6!b6B`?lZ<Vw-wKWc;&j{-mNEDZzB%Y&~c;}7$rAC
z^)wA^T3PRA&CjeH?WN!^N7t30FNc)!^eS%SRk`nIylbhf{sUB2!+IVgYuK0#CAMH&
z<mTI_BugBOP%h#X3R3p3ZUQC>$dq@*haJz8xYjw#q-(A_t7map?RIY_Pjzd?>s?^)
zJT<Vr$(Ev7bVs%&fltZU>Z*y!ZCWGrsOlj<+K&dvglJXQ{jtt19$nnk>~Bv9SM%h_
zZ+#%SuJ{V#U80U`vT)-ZU}rMzRvt_zjHSN~7|R<4Y>);fCZ(~qXVLK4J|<R1Yl37@
z4LE2)TH#1%9uK<y4ECgdG8$}R4~=~%8huTxOQg3CvQB3i>DPO5+HB-V<;ch$Y-8NC
zeo;FXB6p47x|Lo}T>3BhEaD6h#ukjJgN>WgCFIeIeIIXdfR*<SonWG?_D-A&ZYOA_
zDOA%gMDr*e<N|j7-Da8H*RAHdPqfy4Z%~n;XmBAUPgn0o!UJC?P&PO7q;ijo(u=Z5
zChqnK<?UG%MVi_@K|t-fhO$wwU$HvpwK%^d33ADgV9+N;6ghb9Tj!!_1#v1nEbC*k
z=cP}EBRwLi)YpA9{y=(4Q?5AmJAAmWIA5+!!turdyYFt<b2>!ZytAGmbc_+g*|wFo
zp^aTr1kv%?^lx;zoGy1W<^v{_gDFgKUCng3>vtHr8Od*}T-~x2&o4PVWgFq<crRBK
z+Ca-5v{*1>#GHt_g{P<_+FLhlNXRLrb}vZ!1!`z-%QnY%k>q?RNRww^EiU?6P8-!(
zZ9tgiZxuR@_FA!5#f0AN3q6_$c<DGVt#C8<foAR=-Arvo2W&As+|DhfviSPJnVSKL
zOA8U?=5|lz(@=Sg@?Z>oR_M++HN@KyqOJOSf9np<Z1D1wc6M*q+F0ydcPq948ps|y
zc>o|o1t)VQ70X4YhuAhS2=uUYBYHT%9`>_62%~#7zw*M3r2AC&Z+M`yXE@>h-~P*H
z_%+bO56{pwcgwYOs~S!nv@Q1+!da2-w&?{KHL*8O&G;UGOJ2=-8M4x1?ZQFz8gQ2g
zmv;<bUxPN0?n*K|lR`;wEiPBw+^-hJ)R@Y(!c_Ljr3>lMv*Qnm3P{vUSBXrVQqv(L
z8$Br$wI9iSn(oTF2(x!Lpr|=fHo-6yxFkEX+bpZQLTTKyLvbmO$X=V=6$g1>%QNdv
ze6CGZjf=93<p|sk$n0;f1tD`ikgm{%r0I}m^3>JD-bTiES8EoduG0Y2y<wkL`B@Wu
zrUTd4Vp#D;Js4CR!+)Ssw?eH(X2gTsSy>L}>maKn-F|qm54DX#4J`@mRr)vCq~<+g
z^zp1yk^T&D$lHXGc6u2@>=zxutB0J4#17YxRn`!yLE>A*;qGhIs)&1K?wc-;V47j@
zmOGMIb^Tp;tt>eY90qinj)^SU^{v6e%XuATph%BLG|k(27(Kda%r22DY*^+kysC7Y
z0ue4>Smf6|uqba*vGIseGA{_fRgAxSeoG-ZheB18C7jrisdw-IHl<_`hO)Urd)#D-
zf|i@;O&Dczgq0sgnYBlw%!pBD-8Xa&;>&LIbbxxV<{PPFviP!9{+D4>x(HlZ7^Bpt
zIWE`!alswf5r}Bl8Xevrko%Yyc@?XW%Qn|}YwOhgDg=~=Hq?gWw|x2SG!uV;&gH3S
zziN52^#coLr+&;GO!RhlU`JzV3*0X?AuEY7pPu1Vj#o~@f#lYruX>Dm?Rt|IpD|L_
z@!Dx74#2`m9$GP>bgN#Vh$$)iZFG&+IA`(FQ#;RZaue-zcLEN<Ytioio0cvpcjZ_B
zJHj7gLA4>BoNgt0yxYr1iKG8Ml!!;J&jRxGVV2u^K~%=sc*hY`TFb~RwpbDx`LAfS
zmOLMl>BWm-C3gZC&{bgSK4Hf?W4>Hm{Vn<jaP>cfre9Y6Z$i^9p&NNPz?#%xc!K!A
zIr`d_rY^B!7O$fmtkyZ;b;uzy&~|EwNGJ(JJBdWsHHoDu$BVckPBre{(TS0?S`Px`
zpvbY>dYJekBV*pl_p=G4I@&a$%y=NpRgN+hJOVkoue>1jP%pq*czaBY;|o%n_N2{N
z9??e1ZxE#r>I+fhk0;ry2CGNXA>Tw#y&7okjCP|&<``g>7~;do#*oemu$C%1X`-;$
z>0;2DL!u)aT_++(z&qZ}?9@4AniTt`@MyOjZHrlR^K;Ys2qCV#Cy&}YVXMurCgRnE
z?ZY{S*Iv~TKnE2eqsTYF@32M3S~Dw1KwF)}2oK0=xpAEcQ8`8Px_O&%!&r3}{WN2Q
z*Km$~Jl1T0*ggTlHXy|GC@0<;DJrg$u%e=~mkCj(Z=@fNQ1+EDMO+P}(S_J9<TF+a
zqu3KdvEyMSBX!?58pxe#D+|p>zC_(QJ@8K_37dkfRXw!a+ja9py!RBz>dpp5|8>R*
zC@9L85!iTbtYo9LenGA?nRKU<9eLR9L&acHCxL9KnZ%qr|E5Fry{x8m>Gv{ye+~8B
z%k=R+kSaBk`%`E2bO^O2pT@mA^Va1#b$XK-TN)bMO=fKG{{FfQGJOw1eGf8yeE6H|
zl0(3{-n`SZ(lRJ%mweO|jVjl>+G`^^plpDYc67XF&9S~>BAl%GOZ!7c2YU0Cbf^nj
z%p1E-fc0y}eFJG2G~IRM5DY6v8R-`r&V6uQ8KSEyMROBsby&ouiqH7%V6HTiDQ?~I
zv<G1e=OM#gcIc<;>N_4ymIXMx+snPoFbFFp-2|lq1z|mu;j`aUrpGNGIfRg_zOAJA
zXD>I_4*C8GdiY<4$RW~8G=2MMG>4??-H-#d^&?N87q!rdH7Z|&!czSaHs~C@l45>O
zB41LtRu2*W<Xk*B66-EN15V}eNHDtSBu8d}hl4@Jlm$F|fSft^V?7?(qyGX)*5;^R
z@na8pWY;L_>}Fc(iI$$`wzTiJw6K$D=|;5lj9OaC2se%X#@s=nK@CJxt9eZsMUC0#
z=!!Ji``67d_kZH}pYYM_?unE6RI9aZd=<@23H(ZlWe=xExpthC<q|L^SOa`}TNbHg
zS9hVURU6;uTO`cnk&e_+sL?b0j5Fp@fobBq4n)>*D>uSI<b=F2L9M?cdR-?q&stS_
zOjTLb>nO>kJd}*2PRkh&!L`24j#VaM`qv6;@O1#?RgxT_YbTjfq?Kn?;Y+Zi{pQGs
z>v=U}X5oZn!Wb?MO~b#aBFseA)`_FFuOAyrAxw7HG|@ph@Ffwpv2SE)Z0)uPI-H={
z-AKD$#5NLVpUl2G4U63UpjTi5A^2__=h;iwI7G{y$_9Vf;Mc-It{VXteC`hdezQB7
z`Dg#-F)1F7eM>M3J>*{d_chpwhP_rILZn*(B3aw;)@aLW&N6ydccjg<K@B<Jf=wi<
znB1~snQGW_VHUH^teR7|7DxsI_Dxle32J2{$eqwp=P*K~eLY1}&zkY4l%_*yEY*k{
zk(L-l_ofndrCo}=pccIw&lQA`z>W#+sE<58aypVj9TU<B%DAv=yI18yPq8deKF%lL
z)>y}tYj+r^DKYr~x*{U(uv;;XE;f#RyD}hK>|-YsC0VuAF{nr8wRMVgv&xW`qdjs2
z3gOg#oL?|<GaMf3EaQ8fk+gw%V?7j~e+_B7?ki8X>;?ao>|Pp{&{-Q%D3j?ZBQBxk
zJ9LlK-t^c;^mR~SPWBc6F5@BvEA6Au!J##L9Uh7gY2Dt8V~Q0ssk>&k-=f=krori%
zCF{NkFXH{qTboPanqpNcqFS01fE)<TjNb-PusG0Q++b|NRtCay{0y1uvo-W`TtSQ$
zO@&TbQc(aJHF1FVG#*^jYTSkq`|oMP)=6dXwPH}2^%@!0WF|X(EQGIFmx!GkG$rju
z3mAkReb07o@p2?c865Z_X!=yKQ|Sq>Vl7sND)(Q755wu*SMok1q}FvI3)T3eaJD0i
zn%MWKCYiYdPw1d8qB0(fe9RPfaph~qOi>EVSHH6K&H<!LTcAzScQ1pXY3sn2WWjOV
zaDu7V^q`J`xb)hnaTa7Z!}vM_NaMwz;wMt35^vU7;`uCCVu!;7F*}47pKk?O&Vl~#
z4s=H8nj19qdRXy2g&PEd`_H~Qmo$c>cq{YZ9=XAVURLhkWZHU8ZN130wIthG+HtHV
zqvw^?^Nc@|OE|r^bQ4}I?V+Dx7k1Kr^J3t*xp}#AIPzCeYgN-}e|k1SB#J#T7+=({
zuD>@KbE2xu7lp$HG5pi_PWGQ@RLOV4srkUaE;PS~+nA!89_~mF^nBZA1XhHi>HpW<
zwREShGui*r(+qe94nri2V;n9q4sl?{%>!@<;r&{x|9eMOvQ&}`Ip_B6)!*ox6>LeC
zWvL#!_THf~-LJkZ=v((LvZ?A!S&e4OP<y<)d!z-T@F@*xk<vDU^=d-wIg>~9HYTW(
z*kOa0SkDtB!jcp$aIeEQuc<G4PMp01bZy(RE*#rjv2EKnR;(4<w#^mWwr$(CvtpYs
zXP<lj|DOHYeeb-R)_P{<Y;DY5DSlObj4Ffiq^vfI>--m7JL|)zBMVc{Ve*0A*ezbI
z3J56Q3js&O*xgIq-*X?@22pHR*91e+w1T_ZG{;GpO&cU|4YRPU;ivqr%t;~WnA*_`
zAqCSR4Ms~1H`7T|XOAjfI%>~mw7?z|R-=klJjetf0-?*UjMsAhcouQGtqS_+EfYwL
zE6la#X3t}6`bv8+)I{91x4PLRi{Nt$G>M{6OnysA!P!d$RY$6+7n8vSdEk@FobSjJ
zL+;%ode`-GbGu9_O**IRG0)|hUKwd6jg14B5#6(1pzYc0o7>0%$j?X~emrFG#>)_g
zZQ@+up!<jwZx~WUMkt=uKYn4&wD96fy!MuW!s=h*qCKNtZT`-@j<ekbi3lVQTF?WG
z;@g4&mK6p(`u1D`tiUweI7C>pgh0q8kLa%U58YL>f~w~US0;wETgyg!x*W!)_TJNx
z3KGBc=f%m)7d-&n{lp8^dvhlQ6ZoGBkOoO25pms{a^`k8o*cUlU$>IaY3y44zS<&D
zeh3P}vA}KB#d_B$HYH|3@cjzT?CeN}^J_y8cwb1YG;DtjQzTni=Y(ju+T^I}GegbW
z1N3IwUgF~2=O8Fp33KF*S<<ORIGgjv;(AYdl=eY1_sS3P^Ld|`%Z?Zs@H!8YyqiIC
zWOu@!soNWB2&+&H7+4v9ayKGCu2ff;Gv|O}q3B+)6}zKDSjA}RK~jCHLCIPZeD_Xe
zCsaO~g7SI2g}H!&-_wfK-So^g8ff`aMMeEB>ell$+$<T0PbissStR614jC-^<Wx&I
zbt47)i(nHKOXI0hsti-wOueRs{+>Lep!rI!y}*Up+xSr2Ov#T>v>@W71!;2EX2AzM
z>$aDVKEr!<pX<==NbaBl!Mth`XvO1TjOqc0H$Xi{bxWZPE@qd?XNnFaxfoDkx{`3%
zstL-0bM#mTFdtKotS8UD5IM5JALnV%H04rRRu_{)dF9z$-@6u}B(;_X0jnrWt5I((
z7IkMLI&a^1X@eVyYiZ|F%c1qphmF;&_-bCrFds|!E(q7{m-w9|@$coXDvDUFH>+)d
z5Z}YQ2i+Wc0C@;GMASHJo&ly|Rm@@`@JH+BC=LpOReY!!Omd57Duy^+eG86$Zv=Fr
z^_XbM*i0BS9U-niH{p=C2n0D~WO_~R{9|J?xgx7hdY*4pB>Yu(aFvB7DZ>2Fh#xb0
zH;{!K(g43#vW922x6??*GxR06^QD;zIa&!h>r<T6%HDr7)hOyiX=sM0nqW|c$Xuvr
z+4AebaNO>?4P)E2@4<!TOD@@H+`v1KcRNe7{s_&yg6p$K`0Z0F?8srTC(!X`|9IJG
ztU|*0q9|qcq&{AARVw9_pnt(th$jNU-3MI{@}r;5zGQKy?ir=EG1)oVYSgI<P!I?9
z%{2sehI@-)YO#PD6g}b4yl?8T`eY>T;}G?c0jbDYbQ{o&k(-pu*^7LxHZMs<mYn^t
z!B$?ETTJ%H3%4+L$o_)#E7&9}%cX>uIgrJNU_Kk%eBUWYv%=L#GSPndaEnDwNWH%@
zzDCpZ_&KGNI6(ZFaR6JOs$x}22AEAsJBzy_ljqS-S*&w6K`?wF)$c)Sv&{}t^+qb-
z_Gtdpd7a1mx*E=IZk0xfnl8u8&G$iKl`Xj(_H#}5$#iTLPmb~|F!m||0-2+YN;J_V
z#TS;;#_OO-_2jo}P1iJ_ebV!ldN8tW*j%-u-ILu$+oO^ooZn~s(w^JD=GHnXA09MU
zdD0g#9lCHZ-e9N+cmR6JAFO`tcQi61@)^?WQr*Kovv|%}JVjgT&WzS85Yf`Ft|P{Q
zxj(il;hG-TiW0mL^F<=ucKnKjKNc_1m_)c9$)g(6+n&eLnSmMh^Q<bnH6YVM{It<T
zd8B~6Ej8{02?jf!C9hf<6is4zC1u6#Bf>I1Gx@%UdJx0%AUMkORma%S0nf7HopNk_
zhb3&uQYs@jj!l!MfQ73ILzXG|fRVUW${YwK&$?6Z#XUw-=ZqaT%Q*5B`hcZn(uy8U
z_P6Mcp0{}TbBerg?4UeBjT~}Pd<%5F#M5OXp^@RhT?l1HcL)<}|H0zVJjT_K6h?QK
zVPEX05ZJc5oM5EopU#tEsd32V5P^aLZsur-Ic)#{ygyxh{5Jw#+$tceMC*C3i&9O9
zL@Le3VD^+4{s48&7hh+dX3@t)a_qq>O*R#PdQGcQrs=4ou~Gn$#3+3Rr0?M^O@Ot&
z4YQOAbps9<t9dTJP<=_${iZQ=NgX`h!`4-U>mEHZlfo)Hyl*H*A3>{Y&!~HbYFC7*
zCRK=ZDXbT{usjXiDt)cyibyG{bm;8(@+rFc{iE01_Yh()R`S@l9})lB8d)T@zAOIY
za?%?VCKwNCE#jH}*4@v(<Eev9Xf0Vg{^`X^U>^&<;`Lz9<J0#TDKF;cty(9Cl6-I_
zQ*;-Be`=6U92=lu>|!4hIR{GQyM6t9Q<i6?{_z=jB}zgUd$QGmQ3N<4rlB$aD6Nxg
zjeFIfd(SwTONr^9&3`hvdWtBBntO7_6A)y<vZ*E-9rAsJcj9-ff*)MiwB^LdY6ca>
zHQs;I1jAL5*z2=aHIbKAS#L>1$oH^Za$X2X=*YijB37|`8PgLCaWa;XA<FgXyH-j_
zx4A6e=UPByVof`&aqn)w_r1Ya_9?u{!UYdf5z-+n)wFR_l9wY6PbkgB%aFFP;S$@!
zGf+{UIAWK5b@S^k&d*-#8+2V}E-#37h->!5ZlqhL5HP|A`OmoDZ^~N}D3(dcrPaeS
z<sF>Pu}4i_W<~Rc_dWA546#IPgcg=VgGY${yg1iRk3;G&5lAf&$PT~<P&v=7`~=WA
z8Iu+1v;1Y<#8al5^TTTFN8r^I+eDVR=V_%$bP{=m)eZz?lMb)wi_PXZBuQcXV4+SI
zD`o*1$&MqRR0lMS)pi)FcAUjL2PAkU#Udc`uG(l|hlcAJ>|1=|p9){Gj|F@6QIP{)
z=9=QqUJVQ#M3+}NkKFVq(yhY0e$6{D#%H{3T->&H*fLCI@^K19OV8bWu5@U7OV_o)
zuAsSt%VMMwc`z-902rapefp4jbx+Agf<fOikdk8Qz^cGMbE4=7rB!-+A5@5{*vu3r
zot2%6(vd3a45Ns=@QhD{rlW;OlKyQiX2+n$K1=KcV8coIGsZViUCicD@%S;qDQL)*
z5P;R?2`xr&wY%D+#`5+UTx<!*{T|HLCG>kYP`FW&{<|T8W5XwJAjeP9#Padjo0f^x
z%5ppwICWYL)Opd^I26~4lgpSt(6&>%mXz~MTW=cC)|jcu^oxUlnR?+#7Tzg=pviIK
zZr3~VneL_NB2|$ctcR>Rg9+DV?(1{~9n~GMS-R`?Vg#XMY{~B=Pk)Kp$vn<9Pk5W!
zrY$0md+}RBK6Tf~l5bIxAF>0pabF^UV`eYf06%CV4mKlytf#k%mCiO(2g)y*AI@7U
zCk(16_|lLHjvpgEZw%QP6guq8q+Y38T@=my(UdeiyS|vLCY~E~^s#0N_C{6QR~)2D
zaF@au`!1}#PRBP1s(G;B?Cg*E(9IgqG5W{oIFCWdI&KGIbX@Tmh`6r`K?3ACUECE|
zArN`^R;Wf;$HdjpaCH)A5F2*jq&PTGWpG13&UEp5{X&?QZb4hs_{s39&#x$inG;$M
zL+BcStjtWCAH7slpp-svms~GN0LoGkW0i5cChB251VwS?CW#k4elhYgq-CK^=xf~7
zE1A^qv^NU_c+UfQ{EAq>(jFa6qD%a|Kj}-L`JUo5!TQpPy{1F%wD4TZOCW<{ekq3U
z5rewfHCXf365_P5uKkRY21m8&la1h7Vj3RHWf-$wZ_;0bpI6+ZtK`+#g~EPRqxf6p
zR5#1h?3|Y$DOj;RkX0__6INIq!r}{XZ>JgBIHNF$TrwU@czLPX%Bs8Z^98!5W<1CD
z=ww<=6Z`5tL{!@HY1RQLYa`e$LPW9&S=?{Q)8vl^PycWW7`bx_@<$5g#`zPqffw|^
zZB}nXM?U@I85Y<}#bTLR+=M%E3hV+=((vuWeci0skzHb(G$*4I-D-CeC_yonDG2B?
zTO>Y}LhRcDuH{RM2o%$&XSbjLf&(}=Vsqzkqn^2?=qBdsHt`NTQahxJB-259cz7==
zC~dXCP_5TYG}&Ri{FP&)J_z5yLoUvb4vVnVHTB=y#bga`&Jb7>Q);}?&Qp$Q+NiwY
znGPWB^2@*T(LBIR7f2|k_H<pCXCW|O{Ut?mkFTOen6SiS^Q#@sk)-11*$@FZ%@NCN
z9SmiQd9J^5Tv38uMQ~53rQ&5LE^&5d0$}o(rsB!f?8De+281MI5`+qu@y930IG#MD
zsw|$Dz$a$B`oQPbWm0LzH<2r*@E_6fH;Cw!N;=Lb)WKLy#^DP;Z}F*IwBg*~V>Wk!
zGN=a;XBChPanYW1+Y(L(#mI~q#VM}q0M<=1`eBohv>p)4e8B6GAASWR6fwL7v0?CW
z9+y`(yp@X?nzTj&N7kt#JuB@=E^2_NiCQ0UH+SsgyXW>1ui>Qz?8h6V(7$OS(B=5)
z;|bV}N(;1jK}+D|vQqn)5(paH&wx~=sn(EIx{P1+eccY#oDarUOTTSR_K7p~#RPy^
zzw9#Bz&#cHx-?l;@M4u+U){dXeYN6W_kpINu6NGp+^c7*J!+7~xPHLi#kxpLa#O_Y
zGkz0Zb|G)_-#DJLNV<F=mO2UJh=(c12`_8v<|*x`a#&0F$@x7GH<v3>$b~fIQF!PD
zfdip1>AGtDnGl#CNJ2Q0SxGh0cM#o+2RLG;fuCG-jAsgneJW?cLgaKWj>Mn6`!$%b
zWLZ~5`|hQOmPsdqJ!gft3EcQBZu?M)Ln@@uHAi_$&bK|HQPnjmmm#tYA?mmWcilOq
zeJ<%1`6C@f`Vrh%cJ-|Ef*;em@emKCd4i;U86ud12wRXcVBOZ@=VChS?4GdVgfiHW
zn&)r3mo<Y?EthK@Zl)eV0%|8Z_!P)%Wb>?%y`B!K*>m43nx7+6j$Is&+#}TLHc{DH
znPXfy+_1OZ_1c79kvCzqf$<j3uilgKX2|~WSBpikO}N4E^qdIWW|50F&RR$~V#}OK
zbc@Mhr&?qb2A~#kr9a`SmbZm`TbJ9;UvgsQthQ*E%qzM3R`z36#j;N5S+h%fp>3SS
zkM@|f??-`lp}%6ejFlJ7WAj@|RohGQ(eR$*svcM*1kWKK&Sb<{U-?l(WY+ma*p*P(
zl}H+VYEI-v40)%y!V^B<t;a$)*?c-XMrM4CgMTM!kl}P@v)<)vr`)1uVykztxYZmq
zJ!uKe%c>o&Y5TAz9mYx4oo5IT!A95J@YeX{EaZw&t_b4PCEL$mbDJ}T(d|0GJZ%_T
z1kgM^8~z|y8`5J}&iAjAv2Qklqq?il9Nh7VRQ66k`#zsdRTObqYSfSBirL^)_#mgk
z?|Idmm!)lp#_2EcR}Qau?(Fa55U;}sEN~xUEwd_PxCW)@HGoK%CdN{l$|d#|s~9wv
zJlO5y@scA<x_^4=LI<LqvNE6^$kJCZAhqOJmA|^9{e^!tTelEh#!jsi$+D^`x7vEx
zBXg&7at*&#g1QfNcyFmOH5lJyH3I7V5mn-7W_DI#>l2Gje6+^-rj>5VNur<arMX8p
z2Y)TTaQG}x$ZzpOeuNs6u&B6+0b-P_e1#&~tiycgmnfj=;?ee(y7&*-#3~ArPhtF4
zcQRO1t2#_FT%SNm1Pc}NC!t20Jj-d~js^ZUFn2Ub_bEEj*0F+Gloz<ga&8~0E!0E`
z_*7AU<F228J?bAlcqJsCidR^iF^pYMU+H}9U8p4fb5#Qat0Kfr&0$JYrVGunXg5T6
z@;bL;!jd!=-wzvae83+q?UXwNbNM7QBYI3Pq{oHDq|@!eb)GD*<`iVHd2#Fd#oCXO
zzXnQC!fqD-7`)8OmAt#<a#(WlN{2>{gn+mZ^yuuQlIhSSaFP?LO0qzvtS|$;hzJe3
zjMdu#8r>*})R$6c1m`dg5ltNk_?6Q|IwPH~?|WBubQ;WO6JoscjK)@wDluRbG!=3W
zo!W<mSP<Z>t?}wnpQ~I}3W_diV}$t?|3dzI5sEXzrnEiZYha+wy^bXP;dFyLcFx?F
z0XC`jXMo6~n0|KbKo*2(sN~E^EJolf;U#;~xdra3UcFkg(ndH<uB1*ZX3tHxMfp|*
zgROmXj8|Hm)H367^9$kqi|jYFUrQ#j(=09n?ll6OxQasQ{y;9=3u~4V9dqaY__|Gc
z=NE4<%8sp~LDu}a+kf!!gqqfC*k9bg#Hf5sqj%NCIh2Lk1*zo{x#!g@vP-$$y#Hjb
z%d@vICGjCu({`EwJ2-P{Gg8pWT<I>zTG->?*3FX$u?<!*{PWr%h9U_$u<_!7Ha{}#
zxx;XZ33kda%014@Vm+r1>a!6bobimbsW4irzFe!_T3_>&eLv5|y|IOw>yD2U3>y9Y
zs5;lNpcz8}fhVikAmo|w0f3wN{?6-<g3&0paRjrC7AN<8Ga}AyD0AI!dF1cM2um%u
zbZ-M9&9m+RNATtBdN<OJf*vsNBqnrTtNR=t?)-^4{rAh3Boovxwmum-%Ra8ziCdA@
zv$gTNa!8qu|A5w~wlN4Htr;4n!5sqEALyMN!ZVTj3Ni-NkGwGY1Mko3?Ttk1M*|V=
zJySl0nnQed9y>`5<=b;1_I@sR4YmVY_a%+kX`TXeZqM0Or;2s4_P1;;uRy8uFCt44
zBMyy8?Trk~D{y$z+ETw<qt8ev+&q8HjfOfD{#Z02045RBAXLK0Rl0_F;e`$B=1?7~
z=0%%w#Sb$~?GL12Jz3jAbc#B%SsP1{R)c$*RCDD3@RlXuojv>G+15wH>sQaF6-jG^
zJuzvE6FXQ3v0z*@9hacI82J8+&j?1&%!+s?w`!H;Q<D5ihY3oBgZ^SLx1j>e+X^WF
zbq#sy98ChN%Lgf#@{+2(wj&w=YLVd;ZxPP)PLGln8u^slNl51jTA?4<5NV<+z8tKi
z80vN`T?mbEIEBUqoWhdL?&M%(gnk;>t?-ljkvy-?LqR#`C-3*6)pf2*SexZkHPN^V
zz#oKPplpC*&wi%#Z%JIVeiHH`+*X~LA-DJhk4*XkMDuC|B(I^K5{|8dx8ix_cW8dz
zV!t_6h02B$fp1li`t8#OsSg(M2SP#inwo~s6N$^3yI2LO!Zw+Oxs9vgcwHG5CRsYL
z7x<}j?i7wdF?d)-IXUZ04>uwXK}8kf?q9P*k$au=_v>W>V8vT&13LsqD1H(i_Y-uk
zK5K*>Zw2U25SND{jyD6kI)T(}!z5Y<(x(Xptb1$)*UE|=#3l=Uj4X=b=y1Do&hlZz
zI?RP+gkv&Ka|oW%ShNz|y}rihNZ0hqh!2<Fh>C9*0eWFFKcd>DkC=>8Kj-){CwR7O
zIL0J{h)2RHyF8t^HrqI1Fg!m9<Up%o^rObE;g<J!q;Fg2h+(ncaVCfaFS`7B)O7Qh
zY~lGX<h@*QacjP~*u+pnwMwO!3~PEelu>x<a`jR1u3n_;1Qc>T_>;*K6V-+)1G%1T
z<|Q`QM;wy`=iN#Q`Bod_G8uKZpRwSJ&r!i+`xUXMEVx9tuy&MqxYx7W4FIMg4cy(t
zbIcs5gEzL4$aN7~;E(n1DRuXn8s}F3B(8@G=fh}?rytL?P@LX4>(N6}alwj^BgF|3
zuwNs{pJh&PK~Ir0E_s+ep2z#1o7}okf=f1h_P#-ITw#!_eUF3x3^vN%gcR>>2G-qE
zi}1>0Zp<3mzlM1r#=(^0q0JhA3c@5tbvcnk{8kryKT3-*rxY7uW@i%*Q~6vdI*FlW
zX99L}DnGfiC7II%>eTD=@$>~CF9i&O0ssU60l;6i1Yt(@D@O_d06_nHQG73J8$+XC
zRyKxCmPQVA2Bv!Uj<n_ubcSXQj&!C*mbOOr4&U!-t@LcmRVbxsD5oZ-f7UTBDM*e_
zNGR7Sj)_lF0EC|!p;DcYqy9-oBPm9sQWqKS<CuDJBPn$wL8$E*&`NQ%))x>k*5UkJ
zYzPY|+4wh#&N0AfJ%IoKL_h!l@c&ziq$PwzWPgg#S{Z69YTB&Pqj>*O#lBgP#5gPC
zy_h5}szuuyVKCwj9zakf5N%>w@aZ-XT6RW4;%vS;8qw)ZlOT627cJg_i+Ee5X8FTb
z9@81p{)mf<_dPPf!_(E%zrm*BR|lu~<Z<Pe+?E<!y7E|7gTq>64$l2p*#{Q36_fiS
ziEWLf9|wQLuvnrm+f1a5t;*7_-|Cxaj61g=FwI=B%r;RZ6S$9AMc*MD<{#;Dtbu^3
zhIxsot{cCr9Pq=Psr(o>ulAH}u{c>4;A6zTb1x9|3lAo@nz39zR$bzj1-PH+%pEb{
zUUO{0wz&1SfR6UZ_{Y*ahMZmyUzBT{a&H3dyneFn7OX3dxfuB}{xMfW{y+N>5SUM+
zb@&zrGkfge{9ZMMW1r^I=T*sm%<9z<DVDj;V?<Ijc9kuK$g1(B=+P(ZR<alr2M|3u
zu*S2SKOV(|>r~0{V8$p`BlQ7i@aa6T+It18J)NTcxYh5NB;#V8;fjH;W_YWwjlJ?o
zhd!95Snwoi7M9m#QS$Gui8Q7sV_CWbX_7wjBm!gup*Vzlh7xZL_*F51l+#TmaE93e
z&{PE_T01<}uwq!@8BDU3h}~@-oXzAf3FmhWHfV~|v!qnOkz_auMd|`skwOi81SJ5e
zBrKj}4Mmu<78<^ca>5iyquz=%BDma;0BtykJA+Q0GbN!QOj#%JKzJ(U)`)!0k^K9P
zFn>i$QAsojv{Ny+v;p5TlV5b{Aa#f;nw+p|bHU01Q*%V@I$3gP{JX_KA&MI5vEqnN
zv8KvANT{w8gdqugUkLk+zZgOX)d?zzFzhcK5LLm>(vy&+$T*<dQ`>hpH-<Opf3>B2
zY22F*U;qFbC;$Mw|5kGqMFfOp{-L;qD(lhftO#DqsxTeLgw_TO;{E`z=h`jp>jP%)
zfY>?kqBHVyDf%*DP;_1IULgtR%4g@IR@u@&9XK40U`EY=wImd#MLCw>CXXorQ|!rM
zt4#9eT8FxfEt}U1-A1F{=8M)KSb>J4_}Q>NVkvZN^3Y#KC4E_5`lC_N;+P79ve-{h
zikzuL1ABPl&dk#=(DWF#j?~A>6d=GIYgAg2F+SXen>|ypR@p<h>d<PIz@QqGa515i
z8@BT1U_T^^Dq1DuPLj*;<b84-#!*~MafmPl>%vGRvC*WL8WispPC03`3rl>NbWDjF
z3x$<el*~yBsJw<?C=bxolfyRyw-fA<q?VU(P^OkpT=n@ptgq|#-dcNB%T1;^p==(i
zRMOCs6meTQ%L^wHkJ>oL`(1J6*UzSLC-s`<jq6q1pC%(-CimJWt~u$<wC%7;!<7d+
zYzjQin4UZ9Lkjn&)@OgmwMU+(M64crz|kb1<SH)HgsVsF-bTg`Lrp)R!8#RXe`cF~
z;`;FakrnuIn77sk@%ySX@eEN>eI^OrEMCALcO|ezy5+lyT6;fu(;X6A(@G~q_3zx=
zhWy$sR`ulajY+va<~iw+Wjwsmqt&@b+2C{@StICd@zu<H3nyiUQ;wTR1X3j=SGS>N
z)>wkeh}LAe^nGqH1g8_I=4z*wiL=pbEXkY=ib;EWHXLz`30O~e9tf!F4~4(u=0k_t
zaM?Z0NzK*EW1wo;M;S+OwV4^>XKT}u+J(i_k=t@P(F-qY1U3-X6g@Y%&%CnxKD-&%
znOmQC<DU5Ve7^*Jkzv!Z19tHUaXR*(Tj_T|)=uW$Ac`Swt^_Q_SO0EXyb1$;;nx5y
zc{X_yy~|>%oWns;J+IyK$?SekEYWnJ3B%b4dt~nwN_wGjM5d}f>}7*8>MZnF*ifza
zK+ZEge>I<cPKDhhy3a00jBR3g6u>WJR#^q)!jHg6r;KR6?*!=gT*HfNF#x2Fzj$#%
zm8<QPxCMW#>f2yq(VglBFWbRL7mYv)qBke-qxc#aX;V1uyU{{4v0v<xd*BQhJ_$L!
z_;Rw7Ty9u11&?y5C|n{O0Pt6?6N2pK$bDHhPGB-9n9=%|^5Bo9Ikn`zn85MZqS+%{
z`TWX&(3_FxaM>hJ;BKTMTga{ACcR%S>k7kUd`B$^j#UTR21CS*szY(SI8VF^H-u3%
zK6EEx1`HCiQ3+_rlf<a-(`4pHu`$``c;fD}ulw;&5$Wx}l3dJ`Bj*q3{%QE%HvU%-
z{m1Kn{t$fs@qY-Sj&8Q!f%RYg#*thfRv;h%z~Q&=p!;_&*RwXW(sMMkv8FYob#w^&
z*(=*m57T)?<!M1Cv%dw2Aeg~nD-2Oss>!X<E}2ma`FK@e<anWLJKF1Z#o_IpTZCGC
z?fs^oahdBl$NxQQn%1^m>&=iQA9yd=<>>|U0wNJh?h%@$-wK{;W@(6EVBVue&pa}Y
zzGE7oqDB?HB3#N!-H2YCmOrXoo~&?5B3-}`K@|~y83V-I$Zh|HvJ9iVq1Q1>fL1Yo
zx9Z1QANi+JvR}I|Tr6M+sTleyR&HLtMnBq_qmn{h^$A9U&`*eEE>~Q$YU8(F2z?P%
z%m^{$OV*LsL*YNpV4WwK8VNq~mLD$pRie_8MOl$10S*fJ{kXYre3R(QE)}Cx_MFxo
z0Oz;~0{Vq!7E01Pz;UJ?hcj=6fUMK_JibLgCw6bkp7agFD8iAw6fO6p15^Ws_UA*N
z^xp&7HcMhgXXfAZp#3<C_T}0dOjcLKrDr&9KfC4MvP-ifZNPTOBfXr7iVG;&rG196
zw_PFb>9!3FPJPKL5W1}-B1N<gOrz!gRiIkq=kWaBg4Fw7#Q&{8^_(1S=>GBRFDZ^s
z(2USgDwH@+iBnUSDvMK%O)JYU&(F(^Qq#`Tl~Rk-ER9pDG#~9rRsv8h^i_hC5t6Xb
z)G`+f16t;>p#Kd-{r(;`#`nGRukS_m-%{`wtox@%>gzd}8T>`azGNl&KPVyp-c#9j
zqWoTNOj3qcp+*@(Qf7)yvX+9DVr)WcSwVcFyrKR`P~|*LQ{Mlln~u4<Iifu9-{`pf
zp+n04y+6;tONW7trH%bxbV&VIGNz_S=@e^}$^Y70wM4;Ic7jTZ+L=yLdQ^In$`2ZZ
zI4Pk3?NHqT@IMIn-tT`iO|tLL{tu>UU}NoQZ)0isjdA~Gpx2OHK<eL+lpg{Bfb-w~
zlK=k;Y4!E~`A<zM_gZ5zAavfL=4X(b@5s_hAdBqH2}>+M3nr>hBNexwEv~eK5`1><
zGeD>NibGT?!9}oSv3c7Va}T+hjRp)UDW`@I|D5V&6IpJ$Hmrw%w7smIfwN9fh4Zp7
zSq1#$sP2&HIVPYRMX85ofOqG43BlER6$z_R8q{xOg<TWZB#NCq4(_3~nE~`c$6;qq
zFtp#7iONZZO9<DZzatZPj@l_x1UWR0c0c2h7dEerBHvj+Do9nvEy6Z#cT<mhNO4`j
z(mZId9dC8r7KTqfIXX^+c&40PmP!)$?v%Au9(X{1i6#qag!=Qv|3^9WC5CzJ1UlO>
zZA8NeHLG3N=-CBi8?qD`Rh0y|CS5aX(%LF&D?S?h9u*btohf)^ly0~KC%zVRVnn6T
zpaV`LhjmI?#`ryNJE>6ou!g$KGrYl{;g>$2pM$G=G~})(bkPhupD(0${?0s@D9Vab
zi^5=X7pnhKNAk^D3>g)m@z4tZA_aY$n>N5t2NmZzI+bS*p)YbsS2C%TBCQ;HP{OZC
zJ28_>1J5d<D57HB_B1TAB3g77#?bT*7mJaX;h6{`FAE7p%=Z8b4{lbwrpHcIqhhut
z5=a_cOD0*tT8djUtNQ4=c~I~*GDZ{2TzgCUSd$vx=HHABcizhvXXQf|CymehXJlgM
zqnF^<@VO^X{M~m0KLkhPDI$PF>t!}#RB&fI4mfLEDbis`x0J*jaSh@q_er`3`2?Te
zY~$VngPn;-g^<k_8CoNkH$!+x()-oB`NXMnJzrlde|`;SYCC@Z&FtFo;)v<KBTDvn
zMEQs5{hM0<UlrC#U*FQ`FGFnn*=ybR9bcZPDl$2l6S=f>*X@uqoL#WcK?@}gTeK1P
zwv$1|ezfB^y!__o@SdiN6%smA<5!5vL@a@Eho9C~$8@(-S-}v3VTMpY+(iZD866zu
z4M5P5cLdd#1TwT@yGzKDB{d6yq&8eeI-k9SD_*#dJ8{=v3V(+Y97W~2T^`8-NVNm6
z3Qls$7kL8VNsE4W+08Q|Q-UmYxLi5O2w^p^6bo`K?jY!0c!fmC(xV@??@K&8N95Z&
zX7J<6pdq^2)@rrKa^KXmNDTG)a~9l%73YGjqQ`2!&wGb&)Lul~rFj7>#VA$IyEk*N
zMu{mJ{}u~Qil*HX9b0t%#}+SIb2*qSr^7B>v~<giWg0HkdT#sm!_3?nmK$ZT!Cu;o
zV!=tF_5uFx{BJqIOSurH{kQ8F0RsT|heQ5<mxQ5>lZmOdljC2q$W)fHz+yn?dQ*kr
zU_L`QZ<mo=Ye*23>Ip3109D8IP;Q9Bkcbw#_PG+*uvv;0l6b6XpV&`-IU?9KJ|y?;
z3koImW$yEMKH95mV$kBi8o>wvX@N9FEf+?>eM|cTc)cG0q2aHB{7GV!Jm003n_QsU
z8=Kt#cj88_$iT+#Hx?eu*T)OHyT>$<$wYpBKd7b|l>W7DJ#OOZtfDo&!^mBUkhSW*
z9zOJOuz?xIT$}<J(d?LHCOnFvT8D;GcZsc(`^8kKxQFgxMKdQ&j)O5cWE`!8LL1D6
z5&;VQ!9m)wjqWUslzhgzngLk>;#T#*aji+nO$Z@aL(4C1f35iAKGP*PGowcT7KiF2
zkLIf%vLaJO4Cq&tc(q86Pz_;F2uX0N6sXgq!Io;8p(UF5h*C8Fdk;XasOf+xTOUB<
z><;osmj%Y+bsuIR@$gTYNWaF%G&0j=F+NW561jbk-qPTY*iDg58wK1{Z=|<VBBEB+
zn11t-<-#4&F;g{<e#n%BpM3nqn^gLZXry~p)m|RPFH#e;p0%f}t4gm%Id7ISjHi_%
z?iw?nNj6*y+xmBlv4U;$lnaUYC)=UZNy~0)+sy8ZUSk#@U>A%F7gg6}aw6;UI>PwO
zM)dyUW&K%qX~#yBogwKOe`;-GvSP?}7DU$@SVyUBm`w`DpsxI-!~z*pil3~&^0y94
zg6_bd%7r-g`1%n>Uo+ZcWXi^OdxR)wqTkyIx6u+Fujx1r1Tx^7fT>l*c@3-Q)FIJx
z(uvDu#qt?cVeTx5+ocTdm$Tu-E()1&P|k>4#{IQ`$vp5+XF_XbivoQ971?ajR~I&Y
ztFhp>bK&|Qsk5b-^*`N;QA{nIKR-;cOIDtqBG`%^!>qzSla?ugN%VKd9rR;c+x~}O
zjnKO1#TQ#)t%(A^`NR&2xrv}}`Gcczb>CDhK$IjduvTOme_Lt?atcw2f@Z*=z4hR0
zQ+Ufrof<(vyev=e`t!-1(4fkw98#@#ZlIfy0z409q0q2+EUuJm-C(8@^HoryIf>Tl
zUYEV8gpF~>v<c>Lb^ndapZFEpuCFh3q78wxKO&QY42Lbh#_$L#<NgK=1g2&%RleEa
z^}YUQz`)k*pWOHlv?DGdBSk$)p&&jbK~1XyF(U0WHBCh^Ha#jqqbOcUE-@)Zp<+8q
zCo?@lMI#Vbc2ssaHUXOME5cey&ZjCMA;*V7TaXN-T$rp}VK@o;x2W)0d>3N!EjaS;
zsKEa}5}vJ%rJlWjy^-Eu&L~llN3Ne9Ve^fOx=23PSq`02mp>1P!BGH$<FT=Y{m-!{
zTxr?6OGZpmfzdA5+x_K!Cl^*(A0jj?76vu6QQ_0xpt^(<klUZ%qw3JaIr{t;gPn#a
ze&DhF!oqjdtK@o)nA(gj+6~v9oK`jrsLdU8{Mf{oXSiwbRN9cjq5*Ou(kEq!{VUYu
z&Iu)Q5*tI-ftSMEdBJ5tRqdVu5ciagkhRdk+`y+mwAb5yG}rMHJ+undg|NR<wzJIm
zGz^*~zVC*tu!I`gU)od_zrD`5;J2%<CI(LeKIy~)=aVVW;_oUbR04Sye2Vh=YJQr6
z6tM)6xMapImo&LQoP)N<HuA;2cn@U#E<|gMQeq(f0UM4m7f_GteT}R(VK!QD7L1Oh
zq2%Q}+|<PW#WB^zx@CxlOMT#bj>RHW<fA~IjDFLb+|pQ+vVa`loc(@#W<7GaXU>{V
zB{qZ0<dwy|{!%`80RFEQsAoKA`1&opoo_*M|Br-duV?rlXw*od*E--kvfrVq$ic|i
zhKv_osF}^dwM%og3{=hqfp7#XD8Ii6>V`J*4#?4YPdf|#Be2gRauLa6-Q#X45OlLs
zoktRYVFp&*UWfZ<89F$~;0L0kXa}em`Bq$%hC9X@F$jUl*_%ODnbPeGqG}eNg{f2B
zk_5(KIW07w2bvQ!+Sm7v^@kb8fHO|3c;%dsFRIKUz~YS=%}`7zHJmVs@IijU^G%hC
zJl;FAhv3dXnhE(UyhA{#{#epgx4qz`da`N_obuLuGC=>DuEub*qR(rv3;$H=oG+6c
z5@x$`xXk_-sq)j#LT@w(7pt<4xUJt-9{rmcg99K1Z-4W0{F|q||0A9{80a}V8vPUF
zXDZZwa}{CpCHyC89{`uSMx#MKTw>cVFR_EMm19r&yigxHcILd3B`nY4KTlcNR=Dl>
zPy?`!vc2q)h+8mab=;uUNErrzxQRR>uA+k@ZL6(@^r}iq7CnkQG5Q}Tzjw;W6+?h<
z?>88<X0nS>%bLdMYeGq)Stb&=oaS7R5~3J4Ys!0JLy*s)y=y$~@1v{!Y`E_+U|gQD
z94lHASWT&$tATX)%PlXt1dh33h5A$k>z-^Q#;|uyC0l7dk3Ct0Q`B3%hIC)8i<|1H
zCM81lnNgf%DR~cV61;)^Qyss#^uOg-`2RQ7*&F?h@gYt2+ZEs5=>5B5%J^?wZD3<>
zMEkA2w%@#V_{#?ksz}+aiz0NLslwRDQnM?rNkOkF=ocj8LZOC5V2Af$+J(#x9niM7
zCr}T3US)dyMlow=jRe{adP`Y;nmnJHDxOD_-tFv*vkb!M4WYqgYZvrOBr@o)N(^`L
z&idf=Kt4*0<#HU@e-TegWQE(vC47cMKdo8w%%AARIS@^z&zd~)o}OYeHDY};9yS5a
z+_6*UC{66FCQZyqFA-(STq~qLp(DZR2(qJy5Y!lJKr(0vx|yv>D04;$*3?d?M{tGs
z;+b_qnH#g}Kh91Q$|ZNkXU_at>dNy3@-Z|*N67UjnV&5>p+>A{+j*bF6A#cQSl(0_
zn_nyex`i7W%R#RDtLQrQyC;!|0MO%{6~SEtGo~-cTR;Np$V%R?Y?2GNXQ?BDy{5Q}
zCx5LhQG@cKH->#O=oK@H%fY)?EvpU#@>-zG0D~cd<sxB|54??}o~6X%5QAtg*|KVR
z2W&KuL&aFra|uv_U#5C;Fo|CokYZcsDHvri>WTt*>dU$J(yn1{*Or;PoxD3JlL09h
z%VJf)L{saEtvt7`X)v@`fM3W_Bv><EiCl^`TY3ufnDUU(^Yuuqvl^Ka_bZ(uXEhaR
z*UzCjy-5C~9dNgH=gdl5fYRog4o&dC%~Yb5uLju#xiL~+xPU(5sO==|?L?gEV`uhB
zTwM#01b;wJ%{I<?IHfIY(;(qVr<aYxF0atQhwsg{UHcVe6m!3zgrw~p8`8Qt;eamX
zYSrY{8(Hualy6G#w{y%d^{<)^3=(glM$9i4;F2ebv73D`?_g;}tAz!4IBG%Yg_P7T
zH0m#Snl61(S9m>(J=}W&6_lATSHczKXA`H9o<j!xfOy4^Q_Gyv4V=#peaM=Yb6lS6
z+!XPkYF56_K8%N|%r_H?rZaLHP(E9QEA0!R@DIz)fU)bx%*vY-QZ_n^VoGU6XCO7q
z;uFMhUa-`eLJB$Y;FpqjxcHn7x<^@i#J#17UpH|;{P;8*47o&T1D5-+KG){6qx_Kh
z1b@=wW>$FzeU(~!QF_Bk32Z6}1;N8k6}o47P_P}ZsYz1tF|I$0|D41NRX?1rUgo{)
zLM0yGfJ7>D5mVh3J@c36$t1A;<m2UwMTR>(jKn7B#DW}yVjifJPzP7t7_FsMWA8Gq
zdgob}elIqi4vU<IB(3%O%(&lUw>W%=j*Rus^5m6~yd_}3wH}kzx9g%T<ihj!Nc8O1
zp!KLu<r<pf-9ZXPn_NBq^{;_U^^iS$@7w0@znw1Azis>fQu(y{J!}45`4riHLv?r5
z`}I4j?^E~60A^9ezmy16Q&x58vs2<ciFiWp_NH^L@z~^d$xg{2Hi~6W!cL}F%xTc>
z6Tp0JpM*gZ<?Kq61;EQAP<Sm-Wir9o^-dki@bchWl*)%VY=#IBf$G{VVHsQBL91pw
zvs1Ra!{syzl>-NDsk530!@1gTjw$B@N*j{tnHYJ6S1`t3YE^Q{=h&Tc322Wm%BC;5
z9G756y}5JldWsRL$v7<Z;VvRJu{5CddZ!nI?{wXH%j)k6gq<>1#c6ROULH)bae=WL
zOK&bM!2im!dbit9rf+uDd?%F5|IaM@r^5_VoV4%5|IQ#$JQ^@GuWIMb@On;4O#<}t
z9SP~j^S&Xm4iGuV3I(`#(ucPinok7*SXkyYkI*{wpB<s{09~VofN_{U)BdE<W=qqp
zOHeyl!EAJcj-TzWt{Q_AGObg9QbUBbf~x%*E6Wft^XsRgION>Bo{}p4v*f9aNy@0p
z^pwx~i&VV8SS!#p9xx}X)G2V72KiS<h5TDIrTMxYVo7$%`85(C&#AxRnZJlkA^SDL
zA4i%J4b1!fokw63@*?SGUH$WqdD=i-i|?zHM3SCbONj*b0MP3{hLXU=8?Ip}=<Q!i
zp4o^`Ku5^4ZUz@Y#744)WLGff^Ji46g__Bu>>-Xx8$ele+QQ`62?$#F$H=dwTg^w8
zxha-buL;*%GyA_xSX%nDZCJ33yZ==PU;aw=|0rqx11S7oYb)Oo@1HU2KlS!o2u8+w
zPL_`Ul*WI;eyT|++R^W`ba86(ky6Kr@d+6ay9jN?c_b+Z$#53M92lygfeuL-s-U{}
z2^0(3zXAIbu;pUJZ=Hz!E;9W4Ve~JO{-fAhsVo&UPmj>`q&iUvpLmo7q~92d1<{L`
zJLW_hMNk`Hf>cuW=|XB3w`r`oqJmW_$&z)&&}4!{gNCg3{a|@=iY^p5y~qjobWyqZ
z_lN}}ncNlj_E&-V7fE}iL?-Ors$b7+I$Yyhha9gAy<SD!(Clf#y#s%+Q3;f8_hE8v
zB@*`&azb{pgE72KL`~$~RntKrQGVC9W3Q^yC#k7N!LE}H{|J~uMf`EvTY5L+?$nle
z*+)Q=K#UOrIZ}V~TrRlxBVn^zNSv*RA~>eZlV;Ya{=P}`F0oOcB)HN+G5n%WaPmso
zU`S;U%?qNLB}A;L`o1VBfdHxTtBu^U!XW<A2EbjKN6{I$juP2z8(@Qg?M>VycdQ%;
z?qU>AAOxCThvcy?LaYaqroa5sO4(1&flo<=%|(8sDXvU8%O>%Y<2DIPzoA}*4(`bs
z!_)x6T&j0?rhd|(BvWEa$u^mo-VsDwb9IJsy9=+E9*sC_dIofvQbIIIQyeD7l$NX0
zCDG`#3cCd*AwgxIsC5Q<&J=wktCB=*93@jNJ?8Q~EWVl=qqAzWR~n9@X6~I***tWp
z4gS#OVwp_b;Bz>MD!2BQkV~-7d37!98l75e(~SRAn_(ie9K}n@;pRtlJcv=58)Dqp
z57teTDDXxnzW3LcwPG0P$sErXtLr1T?ckrT7UvZAeI|N5FMq3I{odH}<NL;G@-P4Z
z^#88o`K~4!o0<HD(k4~bt=H*cyslKQ87MmLd2p7{Ho;)p0X4V%b>%HdXGx`kiP0%E
zzTQl=Ee9psAvty3#Pz=i%W@Zx?-wbq_0=V{9!mB>U685o9GUk|j%+EjgOXk`$}6{9
zZp^QEWoPf;H}OZb9Uy7b(+M6MGBR)=KlAvdOoHQs(yG%?ANXScFH6$CKwZlD@_yIJ
zwEw7_C|sg(M>sUUQZax=j4B5$Q~yGKsjhH8Q=3_Cuc?|Pw~KhKfi49|)O9X(<iI3b
z2}aXU7L~TCRTFueY1K`-aBzOibwF^-_R*3Q;vRP&1b=KJbQC*Ox#?TC_nRQ=u;Sz5
zaq6~(;+t90z^t)=S@-*i^tqD>7zfm0t5t>l5qLwazfmz8=qu=_gw`@4qMaiYrLcjC
zG7f{5QlIwDks5hdRr+)fcWN}qOtqV}=F4hBI0Xy2)oMD-`#Nz{?}ofIwP6$bvTA&v
z`W%Jyo8q~|?tMPEJDgYgHjZQYORUr{Vo@4%tFJ?8ygX$iKhJm+ZWzi6jw%XBDnXk}
z5uu(qS>7J?rXr71crHFaF~+u9+xK@b!{&Q$2yd=WT`wQGZ#F-8P>ao#-$)>8&>1l4
zyU|W)dPJ7=JV=KL)$XPT==&Y>2F^t>neEnU7V(~T`mj@51#@?yLc7e!`mw%wvDI$u
zllb{%PR`99+fh>BV%a%}NnL1jUNZMYh9;@`{p)h2o|s+C691?_?RC+G+Y|QKu{M%Y
zeK$wuhShAhtq?Ug+<ck>dP(6G7|_M2@0=rLur74r@oOyX#0YX_d+<@<QC0?!EY<LE
z)rseKMww9fMq9a5a+ekySQl-s(FF6VUE1d-?XJgbFaqDs`-{oSWguem^aMt8anRC;
zK6>JbRaIlE2`+0SSCR!^y|o>CdkR-ybLK5>Fp39;shpYi1#I%2UuRuCsJYap!3|O8
zMl{PTTkELxL3xxgio!FpItE@FmB{aa+gTE)^5=vPnsZjSxF7qZbd{UYs-W(&1O^VE
zy8-S>3c>~VDOR-TdIdjT_5GV|-Jf-wyjW4O6j=9|NWZtidxlEJmCZkdnV}wW$71`|
zjH4^qq>C{UE-7j8e+xkPwwMzg-zQPWc>fP5;J=ji|8ZtqslF+P)r#ixr@E#rF-^(L
zRsBL}hPFA#Iidj%qUi~gz}8q6$%f3?&;zKI{OgTp7!TRQI45u}Bz%Q;yZcTLexo{}
zsUi@gnrd7YO=~?L_`2M=9;o}?40f*WSE}0F(9VUcr+E62{0P$J@K;)M|IMZD)Q(oz
z)m$5s7&r+E>T=Juk3omwqixT1cI`$u;i(yE?0Wi*UM_RwK3JUx6Lxm+FENVB-_Ie`
z0AYAdtI-+(OL+x2v}~(M!L9TvHk?5F!RW4t-bM{0ix4Da&zjI2(~n2GnQq9e&tO<&
zE+gI_7l<!8;QKdfYHIGN)m0(LO)7a4Q%kq%#n3^~GfsMmxHAMU#slWSufn6LDIQj7
z{nmq5&yC817t$w2do&8NDHX{-XZ$9%$l5`ZEwVVDWD}fY-*tRb=)PND<*T4+C(muz
z*8BJA<djlsS3QG$V8g&#NY!lkT2<zyhuct$m$rqxODkAJ0q_PjlJ9732rVY5$}jMm
z?xdOrp<0X-5(Ij&63>_seaU38WJME_XG$Ozg<Ngbezj=1vwQELO{!tbtyCm|a+n3G
z&#KSq4t(LOuUW6Q3()~SsT^xAJjVzpt>^nh`A+-Ym#mtDI5lJXy)3c5;^F`tW_#H&
zfL6~Hbf_yoXvv>XZ{j8AP+)rB6(_1Z5ps1Q7(w1jClQWY*?{5G7fUMl7)2(cNL}_g
zQNm=aWFqqs9MNp7FOUUIFUsTYQw9-FUzYqVrOn`@?@TTuZXN)Ut3N0@NFtKsu<1o8
z2bS95{ZSMI`4np1<CIi-*RsWntyp^HxgjZG%7ezXwvvBIAe(Q4P(wwtv>{l(H;b;a
z8uhymN+&m7P+t#(8B#jKvf{fxHzUT@=mc$#Sg877Ad6BXH9CZ45%YI@&oW_x83BFB
zxbQlR;xzlo<n!JT<MApjw>IxR-)hxmnt4ws80-hTijaKyjkKT&v~Ab47~cmJS(a`o
z0rWD%@RSC%qO<kLO<mPrVrEv8!ufdSu*tM9UDqrbnVi_?aE4i*Y7u43k@Y0M7+CHk
z#;0UQ+dpksKG1K*W)Lbk(A4WCOKl#^H*V(=*gq<}s}L##-jVIQL-N*Y!<-I5VVJ3F
zKYRw4IDn}?2CKwzoE8UZO&iN7D^dtd^oN@C!X$)C0-+FWL&Y62swtCm20ZXSuHTD$
zifE`p8707^YljD!b6Npb7W~F>AUTH9FkNTB=vTOZY;{+KIuSV5qugdBlO%OxM@I!)
zy}kDTQK%uKSbE$`x5&V&&CG*35~=Gh*ffxXQ={yb6v&@Bsrvo2(;Gk*g#<@a*2G?$
zyP2Teb*KkGZ&#q#%%p?SQpk=pSqZ<37k%tJ?BWN>+Lu$;9z>4DZjA8*R0XUYd{2f_
z7z9e>TwpZ8u-P;CPH%^Ki*1^F6B(`O$M$^NJpYk;XK*4-w1+0vNp=m}N_an*1JmZX
zrMFYO&&*!FJnRf%W^w?M<^sHug>;G(8w8j@)xzWT3(rzR<9GM-hM{Te8nWTvgei9`
z+X}<NfLAt;JMFWJ4^4%V`Mo|of0PgzsplTZMJ`^H5o9BEkhi0^acfDpdHk$wzWZvu
zCCYpNN^uo_1ipexY6Fy2W?njUAW1aYU!nH(TB_D^=)4SpSNhHHXj%dfdK`85CmR?B
z5RnW16jvny1DlckF+EHKv?IdqP!*X&%FR78Yq28K^4qe$izqVQh4kc=!&Z>&)5&P1
zt#87Gs2|*?^}XUgd!-*7p{TDYH%85U(RmsmTj7F|620BqoliW@7{S(F^v4O8#~$6!
z1WmdwS%P$KZ8;?xoN>ov1k&^1`pz;VYsM&wXkn#3>o%o)wV*cO-^zEbs+4;8if--o
zy*4p86DS_N5FPtiSxUl?UQIJ|>fOP{xtEW`t5UN_^iAgRImK=%H_IIb)6e+<NzHtO
zyL5cnG%wi4VbC@WqtL1WZC(j!`UqP7=NxZ{o2tOCg$?MFSkiPMCZ;;$O_zE(h07CC
z?Y$r?Jb=cK@QmCZ+!&MFrO)jyG^}a}a^xYCUPbeEwG5_{Y@60^y|tl>$EBL{hfJWs
zYi9>mz#<3JpZ@J5fx2f>^=73;oaTpGuR1bJ%5pV4smH@beiYku$D5)PAlCBjLMkLp
ztnK2QFuSZL`d`#Ft2>7E@+8RPBnd$MYF24*5y&wLBN=3yY+a_r!&-Q_M9nz*eYj<H
zN6Io*%8D+7n7^VoWO%y5Vm1;HsT!9a#(rt{|17yHisP9k>5{kUOuUkyjrW9fTqJqT
zF|C1K{V8VxeCmH*iHG!_^6I?O|8Bz;Vzr9;a*Da?)7G38|HmB9)Nn+VikWW$M;01s
z)@*Ll1^mkwHSe&SYeG1P^(XtuR^;A05aj#$XC4L<Z!TwyvVNEsqUr|(vVq($8e3;O
zyDN$4qTDxf1_q+g!zxAsjZcUo3Y<uoimKd?xV;0bccM~^-@y7$*c_oaA)ZgHIC3j@
zJU6C7P!91-_`xj#F8tmCSAu=a+q4MY2_OX8aJYW4CeA8g<OC7e;?Lvl8969U2-flz
z4xg7l4%xkLl>*4wIj>ODZmPh#4<w*UihKl;l{24E2%or)6_36rMVUNF=#9U($8d>9
zYqGD=N&rt&!Ip>HkOM;4AMAgRJ(U$G^ny8Y?6*F<-&-4&8Hs=HEXXdzs)wDTY=@`f
zX>JYH8|#@qM9Oho<nQ<JG4Sfj?_`UMp;HIHawr-$-h0YooWFBpI%9REFuJ$<E<cVt
zz*^**2Mkg-RCSy^u(RG!F|sq2ig|3V_UH4Q5ao{tm6bEn_ebw;L6jOKNcvCTt)LyJ
zCYP-CXwNvyh09D2ZJlAHTkBsQQeWMRY3I9{%(b1s;nGWV8OFo`NUz|IMJi6SIptj~
zp)>`1)beqz;6Cr~22iD&H5%TmM|}N|`lS=SS9^}E?(MF+b@TiM_^;`>I1kH@lJC5?
z4g23Xk^Ike+)&R^&%wx1=>NOp=dUc~P<_+p`-WVft6u^rz<DTTYmS={A-T|TXjC)Q
z0`-?95Q-X{>y{*Q_@x6nWnW&ybm<8f19p74O&#ocm+5?4ICAvqP^A)}L~BcF2`vAM
zw0{iGbX&H^;f~Et(y?vZwr#Ux+qP{d9ox2TI~{e5PV#@&S!<v7-Rqp++524Q!*ku=
z=5;@FR@Gf|)TmJ^5!gyHsHa4IO(@QA37fox&rcU)U*Dv1;&vXqpbt}S-A__;*7S<Y
zO-<rT!9gi}E}43&^MR_vljkVQ!qALiv5A-X$u0Pm6gh~*!G~J$#lBKH1I5(2jj+2B
zybWo-$E+><4)*AtPiQjDf*OA4a@jNriat(~T#wVD>Lx0F(eR$wFomp#neIA5okUZX
zwWesDucv8>OHXFBBRzpy@MBkan?{iv#RLhyu>bV~1v$c@?rn(d!L8>;>s-BBk|#3D
zpl*?0U;;`RT(VRNBxr-y-98{bnppdcncJ`e<23=CI?sk&7%nN1P8gO?AROuLO3$DO
z<=_D5EYXdI6uM6J>9)0{f*xN!yE@HIMZ&|e+PZOmh-mKC4T&9Rd6zh=uyK`CEPuTm
zs)aKofn{;_0n&#N>q~=ha>m^)j*`vg{(RMT_`}o}<17nNt49RmHxLIJ^`qqtid(-S
ziIf0vjj!Vwzh+KIssxIWhx5F_8Ggb9w|-~k(a`dQM(jhci6JL?yR;X^7idXH)T(Uy
zX@GaM@xUh7UBx)VjW3Hy*+jQek$i!va}|D9c?f-!a}G5crWfF9b9Nsntm>y4{z99D
zzFG*Cl#4@GMcLEQ#e?4bqgwU|q9Yv!+3G3R?kk$=6Enjx=plO2SmbSapVbt-fTAwV
zc<{)`0%mnSyqSxY8R9Mxs}0Gfe{kGgQa2Mx%JJ`qC4E{y>9&J&NJp{OQC}<`KBmqf
zNr@BTsHh>hoD?hkl|~zZDokYLcp7xMZ$lH@)yP_Hw6UI=r4{%!W{v5~{Iu}5xp%3l
zPlF)oTXa&AeXpnZb)Ky73~<qmP1E2OM?vMqLMeImu;hIoX@kNH-Zynh-w6ajilb*0
z_r=A5(|&DPkp7@dx$bOH$1;7i<H3tN;YbhtL}&+<6f6{wukstK;d(bSD3t~u$J8>;
zqN)acolH;kv_n#h?uaw^d;xOf=kIKtq=O~@5G%8DTZMxPB@N(%1dF+X==~z(pig)!
zm700eN&kt*ef^Oc*Q;8mqRAXYp{Hfu<$XH}!lfwgHJnOB0B&q6ex%z1k|+DEYyXLV
z5lvN}$k1NRgxY45l|^Y|luNfcbVr<gh}9s5$KhqINncg@>S>dYxgelM_3(A^DJga@
z8YMb5ig`wNO7wj^%~kHYLFczDI$wUn;6lRfo%)CME*adx8O|8({Ps|}meWM2^JVAj
z1}jc{%6l*J)tB<Kd>I#Jz28j*p0$onE*@|W%8{Ah^O0<o$5>24^STO!$`INdse-o{
z)td;Qx84}FSuKhtw&1NBL1xfg5kZ!65JxgO5b12bNuj5|?c%rwKJnTs8dCaO(*nI&
z3^TAx&M-U})Ry403@mHOm62K!uD25o90dvXFE-wq+A;XctE5oUCx$rpi$40M`ZB~<
zQ0TIYQLpDGQ|_93gRRRm0GEt{(a3Z-hu>>9>)*?O7MQ|e3l-bxwwJQFvfr^vkwSCW
zOX|{8kLu-0#BN@42I$S+`Vl7^9`)C1^Nu2JiYRoLI=cry1wusDsv!+tH50CNU7Hxs
z^l#HzTitA#EmTUWT+*Jzy}gWcV&E}Xrsr%Ng9zlyR2s%a_KbVPA+aI$e=W29!v5=y
z??HYtd&IGr8rR+$R`t6+7^d;TTRGCpDVSFjGU$QHmTC#y!7@T>Wd(UL_oyiyEx0jx
zJ{3{@dtXSu{;*2{^5LsVjQoBh5Sy{gfPtqF6x=a9a07A@VPQ(@oG`)Uvnp^o+Sj)G
zMcT-*691gcz#-nptkbJCWGuY~JSTr>hk^SbyVmf49HV0wWuVAI(*XW{Qz#4K0Uk;h
zb05KzW0p6>K@4k){*34E<nn!do5W^x>f|p>y8@{l^FdO^5u)}?l0Qy@VnogJ?3*mC
zrY5sVuv2ufFD~!KX+=K{Ne_9ruh_Gdx*>x#a{CVPN=n-1lSDmDgfVUT4M7yWK`0QU
z{fAxjbW+A$Bga}013BEMC+K}P1-=|W|H^_kUm!5UTw~`*illf~g)rziwYi*>6lXx*
zV*+LC<FQ&Irius{ue*I38*Jq#Em>=SxP!tvd$28Gp(5BoiFi}-*&T=8;a}qce!`gZ
z$*IH38nxZ?oZoK0mhhZ=DoR_~-d1zJoGKl8{96sxe2Nrm6@blk{BLTg{{%t<8c}Sp
z*bu#|yA8LAu_}Jk7JeIH$oLX$RpbK$97t$JvaAgteW<N-emud_dCqCt!-)BT+OwxJ
zg)#~4=QA#Yu&uk(!)a21wX@J~=}y~qN*LOh97SI?(@oEq*}=O)rwf&x{d9#aMr!JB
zBMJ;y8W(!3-;wAJ9M2#X{sJz0UL|PDEPgw~JhFSa?4}K(Hpvl3i&f~?uYO}4+;6AY
zaat!b^hA*qSc)-A2Hea-_9HTs;);a3wn7p4?)8Fkot{SOxOk4E4S$3FqqV7Id4HYU
zXoX)F%4wTfHIJvRPcH)WPB^~QPi{sdAo|da455rSxYkM?(J~eym%op$2cBKtAl&17
zjErU}er^x3g#hkydSI(*vGOHD(vAJC-oE<E5%{I}xmGY;a`NIc(2>iDUdBa3r&z|`
zr638M`N8d0(j?eZs25=g^kfIYgH;LE@kgz+xTMpC$>eJ$cjug{rGIE;pwkGf1Sivk
z8)cTiyJf&vWl@vREc6X@A?v~sPwgdOzH?E|HYf=DqJ(s6jF-IY<jPT*>MSCWLO$Z#
zHztNxO^FZo1m($)<4kqcifu_AO2)`)LS17fumg6OFP^^kJd93U4WEhQriP@{8+u48
zaNCCgA5uG+mIbJ#lCN0<*PzMCH%V!~Em=S1*Jn^>m7f(WH$FD$RSMtct+a{NPruF8
zb74F~j~PRa?YB6iWkuI}g3Y2xL^Na%zvOQF(04JPvOcF^cZ}_<4R?#bmeX{n_K_)h
zW*i&bSgFoup>2^rh8)K#8ia&=N@FS3Q?x|pbzpXGUYjp2e7^yre=qJRDnr%5C>v{n
zVuNWAwhC!1%D)fuE>p>BmC{G^zfRjmhSjp7i#7D3CLBKmdMr@|W;NEQ3^&Ahs#kDH
zaE4?PDYa8a8C-|nZo*kKXAwSKfO}F68|WVzIt4d&x?`B0Lvk|XN9K{f)R0P7^~Y|<
z6P1UEWrI*vU9==?_Bn4r(6?i_rVU4J@ahhFIlP4~xQW)DngJL4!lzWq6c2B22o}t8
z6m;rDUE~k;(E7!s>|MnZ_+ZS`zvrOlItH6SXC&WHb*BXm6~r|~y2^H8{5ni4gXM*|
zkO}E5$w@h7G|Z#g5c}(?T?)>3N>MKoUCP#=2VOPT>oG&x2}&U7Q@Jk~Z9NoJ0ohs(
z47s_%gyAe^kckxFF`qE=*5W+)<1|R+ah#kJgsB);znW?arS6E9=H_nHMXv`eg~yfM
zxD<;l=Fll_2O?x!bg=o_+TTyo`91oAyQ6I<Lnr&&ediuxXRlb+%C)Dv|CT7*@uPC2
z1B!<_fLOus?_&5S-%YGdZ2sh)S}RJ~?gMH>cT@m*n6HB&TvPR0DqB3rDoeVEp?$Es
z39Iou7U77W-ejyZHV$>izj%Igv{zIa?KYFL_a<7HO}Hw;im7vH^$Dd!cckOd%~>UP
zy@ihWcMqVbX6C%ZtwpRp80AD&$2GBh9^7z8u&+aGMl7!;!Bz-g?-dtCz@FIN99X)8
zHf%URhXReBXsj-#_sZ?sd0k+1u7^mJn6I;M%k?rZC1_J`ydk6hM9Ao!Ur(4FEUDt!
z5oC;fXqnI{dXgM(SLrTXuHFO4N9$vzYNV;J1V6O@B#kcJS=V>B(QcfVh~n;VKK(RY
zlTYwrV8VqTfD(EZy6|rSt+1DM0QsrEWj`PW0mdL))-2DZWp)z<j%|McJDY<O!pgCH
zNbs^50lFGzmyr$TvvgVu9f{k$1H9TF@;tH49Y$xYWZJh{m3f$eNzb_^E_Y+kUaa86
z={~nc)PSs3D!=ezm;w3~d5%2cqjN&0Qipc!+ud_Yq|zf#madOZL)-k+x2_=al|e>6
zp6W1GQ?rZGbm%+#8-#zp5TRsM5~Kpom;mj|7nXnboGoksj2Z)@|LiHcRM&}J;6(Jk
zu0j9Re?^(8OOT_f;~&I-4>d?7I4VQBxVxTwd0(<V<qL2O;!K-reRn9eODP=RtaJ`u
zrf?lYf;7>%@3F_d&_OjMsz1=suF&}TzQao{fb7PHXJ~ASM`oa=P_@;yvdsdJS<k#K
z$~j?_C#~&GC+p7+e>rn28aO+ILF!eU00Pk6`a#lAnWK)yzH}xI*Je00G<fL+W)EPS
z-g8W*=g?ybd*Dj}BGMXd-=1l5&8CCfjn!lcDOy;wBEx=ADpZaWGAZKosD~0i1vBQ$
zVNyY0(W@(Ub*9HXXB8<q>drL=>pP&OHZ!Itbh8QA)WN4;A|H&OKflj1fw|(=1^2)A
zRXtHQQs9&M?Q$Z0<*8|0mow<%DIlhfVn4<GDoY&dr+u#k892%dI=msw<6n}ZB9E2T
zze-6GH-^T$P~@u3_)7ufO4Ww|_S~_X9*ErT8k>7iq17<qI^9;Yq$j_NmkEjO)`s|T
zMo%*U9`r@$9;s3@g(%46Y16uVr=4o%1^RiLWMZkoOM^VxJ-=v45_0jy_3nZ*mLd(P
zx;HVKL{`;KRtMY&Shotl-tk>uAk5(Xj$+KDW+y?zbatAMA~z$J7k9k{eWHeJcd=h8
zWr}EG|6`JGhL=*&(XH(?%|Y6UdAQd#Ya35?P7AsMlmtRjTsYQWWl7Fs9EP-HRb-Dz
z<+%^a?Bi9o>Dj;komLDJCO;~ZKl7m7Tm4(t$LBp}Fum^(Yog|5<*%xm;a`>AWlb)i
zZ1UvAQVs+AHB_x_<gO*-?;zdFa&k)-XD!U0?dC2e89Y<s4VMKvgIf7crAf4@%ND&k
z@aV?izGS(%e8+cp(<frfuaF^MUgqI4Oj<>6E8oHqfTjyc^6adJFm1@?jaZ;)1{b|;
z??H?F1s6$d4&$-9QQ5I=$!Iv+IURpp)Z6pc@Grm7oP+u-qdqiaCZfHGMMZN%hQ@v#
zPt0i0dCj%?Kas;bRbM-aN*Ilz;0(cVnmamp%ezw+gD4P;4#}Z}?Pc}4{yd9y^jcWT
z!OnPF@OErp89?1$X`boY_(+_0Z@;Vo|1rKv;wLIl?mj4h$}H52Vg|zn9gC9YRm`-W
zg35<Y$*R7H=G{0NfisvLtL7P-94E_D?Go1sN2l<Vaeltvf8>HuW6CvMYNM|-?rFm`
zqk?R`Y+nzZnN#eidPBQ!8XKNb|61nOru+MERau{&wvtVNr#l0xvj28O|8C%J>--n{
zph{IH765p30lfTh|Dk_wyNi6iNTe35nLkb^ZzLo|6j>=kSz=t14A4&iE1{wKJDyzw
z?|TO3bf)`VNFlHz33UJ(T)XNa<R^-Hgsl6s1K53AR~uB%eVadmy2Qy`fM2pZxUG5o
zO8@KkM)$9{5)iViRqJuVL&!9iw^I<zX-j02JkOeL9*=r}Lz6c&;>-n7#o#^`%-8A#
zQ7wxE<CdtgL)dRoRiEok-NEp{BJx`~L|n+Q;|vXjzy%)7#m%G<f0YgGPcWi_{?H&0
zA%ekQ$d25orR2)?v|!fiW|>(5vW7}3tNVCWammDr)Uau65v6EcBYU#UArbrrWCmq~
zct`Rhn))gRX)BEd+11hvwwPtA_sK+i^)&jamG$D3o6WOKDI}p35&BweK#5x9Cmz1#
z;3sc8?i^PuD_VOqBJLKp^aK)n9y$B8WVOP8nC!s;iC_ZetLE{8cmSasQe~=SovJv@
zXnVTe54Q21Bo(pC6)C-Iu#5seCv+{d4k^0Vg;lX!3ob5|IGo)XN>>Jcn(}<MQkXkg
zMFVk1;dF{8Wb9QE<Y5^yzC?aD`N*b4)I9ucjT$)U5#o3{<)hOq*@R)vsx?i1iY^2y
z6$~ja)*ZbQA*n4EszxnJX@TVM5_=hfuZm&s_jQ;iDhP;YGktvnM$wDc60%uCRv$!}
z)&8uPMV0k_34`B8?d$oES&oHPTG>^eSHGpI@(_0hp>Gi$F?`?^;yk(tuIlbF8THaj
zhm<?8ao=R35iElEU;t;}z?e6~n0vUO5OF+Ps%{~A%ME&2Wx>9X{R$?H_o(R$t-IT1
zCsTtqpivgHBw>V5V+t<LrO`i@ncz#&*c}>ov&Gbe(&?ps_7q}C)45F5hctki)+#u^
zax3y)gp{eG56~8863Oc0;VCM|iWam}*8J%%cW=nFJ)%cN05&H_=}HVL@p~2Ch>}PN
z-qNyoMj1XIt!`(1dZ||QCkfoy;(GAe!;-SAB#$B+-B>R<$}41%$c{#PKRVm)_3#*y
zU294j5(7=#BhmF8RDshI*8xeVR6Cz&^K&ZUW0(J|r?@SXQ~1#G@nPX8Q${aCryXF7
z8+!?q;rH?ebzk+ljyQD6@A7ZqfdM%=Jl&B7US`mahOLP6-v<f=*?wu~%SFHZ)bQ&O
zTBc}&{Wu5AI}@ehx8*B1{MO}UFFlsC2_yD<TZ}>Ps`Vp97OxCdsQ(Qo``7Q2zWBof
z))=tCrODuBQvJ~BgaH|Lfuj%Jz!%{PPYZFyTZ};j|L)Y`#+}_qYxBx)q0w8M`!?6r
zAAe(w+tkxbumO^RKYBL)WuwABP}2Vl75|d4bT9E^l8%PL<<IT~ie+(sMgX38N6Au!
zGJeaX^rP)>gr&^X?t5TB<dOoEvH$JJW%u3L%);hR-V~sZQucuUk3LGr!m9SOt}q={
zYENCLM`e{E0AZ=Gj%b5IS>?lf<e<nJT3lS4HI?1y?WK$DVDdX-n;+C>kWMrQS}lai
z(sJ;e32WlA0cjP~v}H7{=WXgi6k50_g!x`G3awWoN9IsoE=A&j)%w`a>t=KK%$EbB
zAWb$b6R)S~fF{ne*Q{Y7=&zF(hRfygf<K$$X5`6nX182&xz%9EC|9q)o?~CULYbrm
zR0Y-#KlwKYSIxrZTrtQriLUeqsL;rj200pvG5yA!bh4|3EWYL2B9-BUjb^IV`|62O
zV)FWo*(6jWW4Xuk+aTxZv{{nyg3d1|nUQj`Blh{;FlbE&Cjdeu)VxEz1PCiR2TItJ
zI}gb!+8yF3zZM?XM0$Zp9VB1)hDB0^TvJ)|O}dt&vrPVWQ&fRbpf!3XW)y)KgA%rQ
zilPqnSQ2!ROZ=P%5@8#ey-UQEJ`PG#0#!BzRnT)15-xVuBBsnPg&!KkDrne<*W{d-
z0FuZax^Esr#oy|@SJ~u1`-dPwAs?C3TavwfbMOA17IzEQQ=V79RJpNx?L=zxockeS
zB*LAmzPH`@_jP040G0y5TCj!ldsi2vpOBzLldKrp)$uWdJ<hV=iZ4B2d`TM8eF?kQ
zx`AIA2xLSIy+Ki&Wvb`#aYv~4kpR<XEZr<18NmooZE@qF$uS2W>rgdSC<jkxzwU|W
z!)Y^;MZGoRM(~lKD<e@kn}=Q_XQxO59rWYkw}Qv2PPz@AT#9DZxW7(GYy8Ac_*9~u
z#~X>vT~yF7^W+YV+2K+<E^)DxDre{FjO?eZ6UR!<M^<65C+gqSOfG#MKmV;dirnK6
zuXbArY1Y2I?Ke|7JttLquAhCq#!-~6H{zCyzAq3yn;~}a8RR>@?wyAKOpis3Vg0EV
zLqoarRok~-Lbq!x^L6Ke4C@Fn@268^rVe{HW(sW;`Y+qMC+F3l3ASeMF-fxi60<Vm
z(X`tr=catC4?_tbMdg7wSJUX#J$Q6ueE*#E7x(dITmmk4&j5$|w;6yACT0L#9|!lp
zi1ad6e|Qw2v#^VKs;`?XHTdeWHOa-c7!)v8p0eJUm}3L+c1KN5c7Kr8y1qDsf7X-9
zwg}^;Elrjwt-p)k5K;4~K`KbIPIb2lC<JC68s>SK+<NaiVS$8Mvx;2^1Qa$knZJ_Q
z&Vo7~#k+ZD+z?6`(a0|oB?=ZzGEj$Y6verbP)dX77Z8=r58VM$kSBSPDpkQeR+8Vp
z1aJ({>`>GT8wd1>*2htq!!RU4;e{MMYlr2;<!0hlpP3?OP<)t$6EXD@PdMU#(je-j
z<7fx@2Gxa!;wT0X@$l><)hcEUd0|>L^*^B(Ms({p`Q;9_Kdx<TrAH^%nWc4Y8&d<c
zI47P_JsC-Jc7cw9ywtC=1G{6ZdJdWK-h-l!5O#af`d`IZYkxJ6R03*)ein^YDd4Py
zI6RcaoS<Y`$%uEH?{z4t%Zp7<jR`@pDe<)pLrW7>^8|CNXWgd6dhK)UUrHkkyzLT!
zUUFSoy1#Z`w~M~l^wcSwNYPm*wH|I;b`zq-&X=g95#>)f_HW1KARQ0a-W75cckyMX
z8mCw@g-m;}c+{|<9gkf|t#%kXoL({I6;3khLgbyq*3MRhRCeY`8u^?S|NOnAeHkDN
z-hww8v!`o^+36$xihhbDWc1dk{~mw;w;Q8qI$0ALz<7)R6w*JKt^Z?>>OVdXfQ}bH
zfAAmj1&&r0cK=~Q(eV=iAqqs1r<aHh{&OLfdbyy8LA)<qgN6yR1XV_2kL;GHx7Y0U
zFhy85<2fr`2Z>cHP|I#{juTwlg<@Nc!{ZL|rpa|#s-lrBl65i&Hg%FhNbV%)H_rm9
z$5Y;7<BrwdO7%lzS*w~ows~d7O;a^9A@IXCck}2&MQp8DBG1GdS@-VfH;QT_^z2gg
zr&r-aT9^EG-A>f>p5kTph=B=nltld<zeKXjUFmVOM69tE3!0_K3TZSfXLo*_QYvz9
z*z}^jZ83Rxcw-e@CDkTYUQ1IqJB#%vy7NX;u6pW7STm1Cy7MkyI%H%Y$bHKsPa&fG
zQJuQa>GAt14Cv|eko6kpBzT!ufIS|^W*1fI3fK;<Lw*p<2=*gSSYLx!DBkODu#Cc)
zSMw^sYvD-#rTE7mOyWQ3#D8x7A4IMxO>5f?cI1z3K+O_D8A`i!_05j|@zKG(%?3fd
zP9$-wLr4L=QF!CKg@Tk~OhftS8(e4+wE|sA%f`Tw5S9Ydz@D9M4o0vwOgZe>YCuYV
zoU(k?n2sbE(RVBL9E)3ozGZ4Q-y<uj4DMXnnMtF*`?V~~99h1z6S9Sg-@i&<$Wk((
zFhm~NZttUd<tQDkmD4fH6P)U}$(Vh)UvTxZvvU%9w4e^5#NE0#;}@8`1{xgqQ{WZW
zhjcYpD+rT<_wt~xb_hF5UP8{F^kGfGbS3}{s_u^RR;30WGH+#Td#Z}boE2W6miHQw
zjMSeTN^b|F`&q3`LPd@iQQEP^Xx|Nn=PA3jqe*>s(>0<=bnBW=*D@+dTG$S-OSCp{
zyEv_v&9b)$9+sWnYK&q)?rm2YhAGWc{7*JxdrW5Rofl0!OE!qEHXAzexT9ej@F+>!
zk2pc`UIZl}qrhe~mK)Y`6lOWTUKi)Hk`B07Ls{jl?4$nB@ywvepwrm0h~s<&F~)QW
z@XYb~xUt6zxPdHnsH8CrAG;hFp>wAY9%9m>%-IUq|789SH|Y-@V|+F&DbRpTQXtif
z^BJuIjCsM-cWZL7jp)0vQSD67*So$c6w^_1HopF<4?5N8PyG~Qn~wg|ooTcb2bO7w
zRoWt?W|!TO0<5sjSHrSooAn(i6%(Fm;b=a`&jjhrr%NJMZO0<AO*!t~H^0DmF0;`h
zLqim<>&VK68IvZG`BUk<LbL%M%oPj^Re7$7PN&;+Y1=ZVH0rneYlY?=7}E)9d1`B-
zV|_gL&(%E~uu5b}CyiCcX-0ioNg>upyEy5+Ir?NJ0Te2fg)gx5(xuiUa<0O2p^qM|
zdkEP3?r-)%AHgb=Kn7*p{IC;lNYdW(Ry0G><qo&^$}k@iJf~!=G@GqOiaKD5gOMFN
z@A#6KVYn&Lb3C&NBuspP-*hELjW{_tcsbn1)tkV@o+h^Z=z>8Kl8#+NN^)ZvcJYkR
zAeqDZh{@$Cd~aExylMtxClMPA^CRN3>R?%Q#e*l-3%06-R`LdlfH+B!{L+~FMr=YI
z98(yp$~|DQ*rbQp7Hd-!?3OYPvyIN!r#zMAu2n`d4!^cvv4_^^S4q9tyr!D_uC5>#
zI*OuJ3sqNMIFBVKX=z!=OXEj?E)72W?1`Ly%Tsc*XY7I-s!qU@7!gdv_vluR5@Zd-
zLRfLohKNXvDDb5!J<9U8s?~ZWmr7(-EcU!}1hU8?d6!_Gb^_u^NOiNiIrU>8W>nM%
z!#Z>(uOGhfyG49jd9D`Q^x@Nyze(m`LWnwQ?XM>xa`5kwdKTkgTZ{{C7?$eH>aq#i
ztZ97&R%!!}2~Myw#3i1qS4N~cakd1;42ttUTbqo?_=agYQ$wPLI3OQ)FUh;>0%^++
zqhwJYNU9LVwPp%Nn<EsaN$CqJ4i!LCcM0}$eluH+68BvD@Mp1Oa4Sn%W8Y_xlM`e1
zl!UA2!czTxBTomx%=e>Hc03SJjT@74LWo?2zSNg4*sw~<HYXszJSt-C+D!(>ffec%
zG%sc-r%x&r&R*zV$uKrW!Rqm|j3$BTjo&2!S~8DO{%+*tU7)SLJ5pqC6^DeC^Cr1n
zLMbqQTgl)-33G6hShv95GTGg5*_@9<U4z;#G>$MaeU=~@9E1nTb@oAf2Y1e5qEO!Q
zspp9F(tYn*n7OZ5-ijNIM2*fP?InaXV58ktY{4?)PM~mC9y}>G^~|?dOmywc9#e${
zwPD{(lLfmY$Y81)f9<Nwo~vDAML~gX5$Jz_*H`MRI5fAh5{m^LGDmm#8$>Z^<@dJ8
z>Rw({-8pkP`9<4T=I`(~|At#f2eA9VVR;nit;}VtJ3RQO^8#_1h0gcC9E^Jw;a-r0
z^+=zcWMA<Pd|h-__0<*dFh%m$=rhry6xrL?p=e39&6Nl$g<wGthva$%%6ksd3aKKM
zzeJ03cLiclWk;Vmn*KVia2Bh&75P~F2oyndcl%vwSV?}8Kq;e?Do#t>Zkm6uqD#iN
zel;-l?6WBzsFeS00vrxb2Zu1e_?k(ZG&nfwr(kag_tQv9|4jkobAs&`MFX>~HJ%aM
zjNT3em!1?G<oNHK-2EoW=HS~~vXJS9qOi4N6y|1VSA?aYBpb5v^f9yMHZ|)khiKdi
zFv4lTVu*FGPiRPz<@hEV6Qnhyhf7ex?q9x}D9}I52jJl=wFT?oitg)sCk4aHq6a|n
zh-?Hw+Hy*-GB|~StG|Evfjfbqzyh7aMSk!(m!)-J?W)5d35<+;2}yx_<_qF1b6(P;
zoP)OK$4DsP%{{;yhj_tds{4L1!)1Q{++CdGJ@6h}jsk5Ha}VAN$P|n6K{Wh+G+Z8(
zyi5-vj1_1DDOvWjxZvt26NAu*LQm<Jr?mZn`d2!`D4t<Xz3XkC8C|@Kt+uO>=~n_G
zA*tS#qjl%%9a?`J?se3M!b{`XfWpI8X;!bV5SfB;M||esp{^!Jy}K-`7y4~Y8oeoN
zg*W>G<=UV9EV(et-p>qQc1K>xvUcc9`Py%*fYBd!Qnjjo4HaA0UA8<DSFEO7@ZlJX
z21S-lq3kBa6;SklEb=*Cbl)Pn6fNVPi{vcc7D~^BQf2t)QgVUWK4PHt`UTs^&BGbK
z@<w1g>2*|f^}ToA@VBri9;5m^OLS|-*k*j{UtYB#%}Ec_#_p7`bfRBVe(?kvg(cpJ
zjuZzKYvxdAdd55P^qU7##tg(8rH)}_XN@Yk@Ae4ddw$l3XvZ6q>d)6jlgB{IGWjYP
zoH8o~X_S9%)Razw>pV@F*j-Gj(<jRt-`TWIsyZnG*|0ooTD$(>4^L+3x~MaQvY`0g
z?)NQb{k`0klpah5``QRZ)jPP?K&lTs+W6=dhNCZ6(2lkJq^ys5^y-W}6r1^z?}4IO
z10_i6gl^_5gz{~1e0ObWyLm|?%RBLs$PC#cOfD_{3`chV4g&}5hnEMqNQO+hR^twI
zx9{WMdIiT79KZij%isX~{+Ai*KUKQ_+jc8hS=mVm=YJQv$T+NQRt6-?&|v?Ie9g(i
z$m&nv;!;7zHh>=hTu>dG%M`kHGF!~+&E6YIGf@YA@3=@<8!}J&)KypKx3;`&(+-)M
z^mNCgfC`q*tHakSz;~0Q7?9*(7oGKLq=REa7=`_Iid`4%fx4v71Gxg!95GKd4%JAc
zGkxOIkFDEZ-4%dS5y5XDI35yN8lY{X=r$d{wXYH(*MW}l4VMu&byWSHo3`}E3_rP9
z*$o{&U3&;KX1Q*0Ly2uUbG@)Lz-n=R=Er=$L?M?A*Bue~VrVEjCoa1HzV`ctx*Av=
z%C4qfPvfQ$Eq4p7?e=9Ihj`e}yDtfKVfVn4&XRAA>J~rlNo9_Ah&n>$EA`F|On}nK
z&SDZWre$sg`r+0je{xsqkuDCCL~SF<1!u1)g=(iul1i=b!P)PyEt9cfePM7a!Rvq>
zE>$~`(y<NEv~?<<MAK;RY;Bl<y6Rcz;L0v~deZ%Q`ZrV@N9dSK32;Du0DS2W$m`#_
z&HN#PW~})Ce;>|PoB*gEA$Fcnsb+o2Kg3m5fGSt43B#iw0~QTutH&Xie7|lwV5d`2
zu8`Y)a5Ll1G46`dhr52&Fo-cT$IL0sYdqYq2ih=j&R2n!=4Rt}O-eW^bI~c};*+nM
z3ykugc~6$;Dy=8<7u@(I5u}GIfpZgwDow%8ISr!QTI?zK)n5k#N^2>dw9P4llQ3DK
z2Z3_kp~<@DL0%8uPEW4-8Er+q!oG@EoKpnkk}~+Kg1@wz_<rZ@1g9#)n54OB4a?;&
zl5|0JvHYx?92|Dd=|kT^1aep0wuM`3&UYC=Zyoc{dt=d7@IY}#`t+r4@Q!Cbhxp!$
ztssCtDt$c}^%&s6VLUMJhV2zt7P-Fz|FYNge5c~N|H8^hAbFK~Oz!qmk@@t#os=U-
zv|!>Elx@7hWK*;gyHu@DLlG*HeN5aCyZx68jfXkYB*Y!`=U>gNfFt=Y$^rjxk-Yzq
zsQar5{dZZmkM=v-KR}N-fGhrscG&-1;U5KU1BXA=?y8jg{^(2th+8>T!hllL8r7ph
zZa&iMo5$fa8=ymr6yR9b8_PSL<c;>k)*r0PX6dlv1%$<3hkF$mN6Zt2L%@KsBV)V@
zYR{asj1w{QIhyCc%-D5xGFo$9N+H%52A`J`ALyioH?d9f-9s~wZDN+@+qB8EY0H94
z76pjw719OzW%QoeExL6f{{~ACr%KgQhg3t=>NWX#G8kTF4{t}*RNjw%gDL|uo>vh8
zi<pHOhSSc-Vq9NOoRmy3sK^!BZW#OXN#|RGKaQ*SSK}mlk3QeIRxb`%yq4Ym^^0d~
z9?RZjmNqO$5Bi7Y1CkrvkS#&+md_6(XpiywFU&3lGtZ+Rz9rtwsi?AZ6yH4WBj*~q
zAl`%FgeXu`ec?wR?Zn>L%uGnwx*oOzoIr4DHK^Y}Ii)eW!UyPGv?}yCUdPX%l;l_f
z1eFp-;`<%3k~h@vHJoRro?G<yjptZhh<G<;QalYv>0-TAH8L5;1fN&l<TEfY$im(4
z9U!&a!y-<yY85ZU3+g*Be{6UUj6jC3Gdx&{Wrmx+SLvw%;YKIATn2_e9Z&UTex-BF
zL)q_`>qH#eaeJRzJQ--h3yo?1nmCq}z5bc9Lhefz!OoX_B@zOcOESnH#nYm^(BZl4
z{Y!LY<>YU$2b7?#tpUJ%tO0@Ie``Mf(DO?MXrui@L8Y-`SGU<>t5HYoauHXEo*9*x
zoPp}cc@G_8*}P>UCp;qG8xPj+-e%Pd{DCYM5+J&ChMWF-t#DLH;O|f-rutEM!b>Zm
z4dfB!m2-m>OaWpLOqpU<Yu-f=hmAoU<2k!1eqFE($k@Wo^<p%}@vwHC>acR^y^eIi
zWTYK;kVCwVS=&E)RoNNU<}F#WlHlESVbj~B$}@tdJcc}rhguQ_B@r6G7JkDO5%tUs
zELcs1fJ{$~vePLSeRV5YV>n!FM^e2h7G`DOO{b=Bgbmyv=m{cNjrQm1h8Y`=W-P$-
zm={l`j31LQeT$sVUd$GIS6cx-Tfzi>5QUQ1)5C7r`>4m`XH|*dY~$Zzaq1@T$XBPD
zEMi*9262kP!8V9)pQ~WKVP|c(a9HTAS`_;|rPsCHdR4h@e~_w>(7WdK%7MR95wLxy
zZGmlr)UJH}oA~)}V2KTH@XZq7xYXhPCAZ<fc>I3~Pc^9lBtzH{yHC_$J<7A3jq}7j
zH)P^${DFa*&Fe}D!z?UN8mQudCETrvU$1exjVYQBh-DmW1s$HJCfN|8?R2C}@J9kz
ziv52WYYw1(dv*;+g$8M5C3k=`cqgm52tJg_kew_M<<X#@YPb*eVUna9JkA|Ln4Cn<
zA$|n9lJ)y&Gzc;4y`y-qY;DbMyBs?!_w1+0(n4%CGF%9$lK3>G*OT)nHXZnyO`(fb
zemZN_;LGNdN+X%oFF1~zo@OoAHfn!~@U@T9sg=m>(|~;ARg4rYeapCrcq~GT?jkmA
z7nLcEPoB_f;0&NUpZR?(>C84sarxbOF6n3~uqz||NS~$+z1FVq*K$boqX&|Pp+@2S
zuXJz%ylh*aU+<jwhiR7&1mtfm(@!|_qzmS}T7;gD%(AbF(1pe?LqNpScQC<|V+!Z1
zT;Hs&-qB?YNZfG)BEUP>gUW&CS~e0D<Z`!SP*wxKCCr)>Oby9tTYv~gFumi|SWR{r
z#sN<zSdo`|G|!(v%M=EMaGltY7rupLQH#^taw+7_1&g$lJPz&Qw!?T*w;T4%;h#g!
zG@Ufimsx5kmidDjxy_*KhoC`bNW!T8_&&SNS(98Oo;HP@wjH1$5DZ3%f{_p>k_j?a
z?H1!cQ<FiV3fE;Bc-sI$ZsYn?VarP+EY#m+V?iuWVk}kvc;t0U!x7$KB!1bd^euDm
zuC*r*6p>>N_ZGu=jwpwF6tnoE`x57j79v&pN7{!Zx_R=3VzF9pM=Xu8X%`i(4v}qP
zvkuUlGK_LIzofUun%{G2rL!%eXnY+)($dwLs|lPmMKec?Z8jgs+uP68{9@}qYdKOU
z!DEaexv!$qN4=~_Q@s&5CF3*?MC+aWnq#O5j8A#39Q{AGc#9L4Sc^8JVg@L*6*3#b
zSZ_fJVMwUNG?X3Fj=!K4s^3Pq;w<YT1i1`zp0;UCdke=HzCq#&mMBF^HHt0r>F11z
zUi4j4Hc+L##h_AJi+G2A>)30s)%+$Tj;-QBk;xbeHt$Bva$E?33Lsg+5ako5_vd3`
zit)TF47xLb$@RN{=TCHG`jDbe;~(^D;Vm3b=CqL(_2wj&V$LZtosSmDGJjd$2n`#5
z2KK2^b@~iGL~toeliA6ZTZx5i{n6&*(#`%;FN-|Z3{v4d8|y9ZH|iN)U_-MO9|t@h
z>f7g1yBAwU7vW`2M%E;^DtDKFLdZ;1A@R#v9go0g_5m*uxb4D|J*iiw?Cf=M_0lZ<
zvrAG4UF2GLYDBI;cg-3DV<PmH9H#BU7Y?o$sDCbpjC{yH%>hFDZ@>%z*8e#N{4a6B
z&K5w1`VTxiTUo~TkKEuy?X;0oAnpqn=T>QlK?~TL!KFeSdT1pLCQ3F3)$I<Mmh2|8
zO{fZl7O}{Am)L@O(qKXNp}ZezlL6)8(sx$5@O<w{{2<ew%_YO2z19mUc?8Ni>RtJb
zVpE7?(a4+%<DXr*=)YYg%!@s}3vq6q6ytvU)Xpx3e{Yg8U=y>-ga0PDrMF5-lP+1h
z4R(OSRy(IcOF7l#NZ?Wg+T_P_CH||u<`#4~Q!4LzX+ZqtNEoIBTIQl9idC!es=gQp
z;S3SJ)svcU&{8HTusK`qw4W_kdc7s1ELK3v`YCjp#TPc8=zJeuqhWav{Fw}MZFpRD
z2-D3T+D1WjUH=GN5N=_Hj+BioM~V)s$!C-|)KMj4Xy%Zfg?Thb48BI$KqPtPT^c%j
z+e|u{1?p%pwKqT&qz_)`yn|M|SP;87lUfzGpFL={x^W7hvdqEG)0keR%6nyF`!z!K
zM9N{+?lP0dXWpf;Wq{<fba1N>xkfPFpV)`qZ)1kfgP~5Xz5Dx>Pi-aqC%>>kju#Cd
zVE|{($H{5*OeMy0PoeU;>H39iM>3wJ`Fd*Hi0;HjX8HU_&DSSBd_4m(b6M&@`Ge-t
z$T@@iZ+{xef0uv~{m(}7SLyjL=JkKKz`v+s|6_qapR}eHf5;5~wcI~OaX^=Bdj6s4
zCIt8i|9kKA&&&O}Dy^}DfvbhhpTY}&zwn01QAkqDO-zo>iPM(XDgrc|7Zu2->1ZTn
zgB_3~6~FdL|GzXw9soow1b|CP0g6O_yy5?Ft@`i(>|by9=M<6u@GtN9KFc6_#E@&=
zq1sgE;=vBZb!!Vb9uyDiVqqMO3HJCjzxt^Tw)PGcwN=D^Y0^(NzC`v2;IQ4gc+F)y
zFE!N6Z~d5SUOs(v*!fa^*4g>8`MH88_(~}-<!@~tRfgOXIB{~r1)@eQbQK8GYWrV0
zL@hvyk2aMf_PAEa;dry>0`WWVCG;<8zx0rX8gaJ4Zf=<q`fHqQ5#Av-3!kk^c*>_l
zcrVC*Y9a+!)pI_Pk9CO|OCm{rtfY4fxbcePZ40R&xbCTjtzH9i7KC^zR!yXQG`>q0
zGHB{zl7=9!!-N~~BAj!!`#XXvdbf64I)C$!6}861LEm>TS$N4R%T;ZAO4{1HR~gLT
ze@k`tCVoI!0rr~&aJl)vSc9$IAEeGd!H24(9V>t`-N?>6)m2q<ShrSC-)hby{p#w^
z(R=EcG;tqTsguv{!A08X<!J^)3EHufZr3*L`Zds6f2=0k+FoRM`6ak-l-fh~hTT~(
z7ru3qP(#l;)ys8j;>;?ueTgj7z;TAr(qjgQ3lTE(2*WNX%Vq}4w22X@tDJ-0B4<oU
zT#ZTBV~nFTHCPdsVJvkR#>o0s0`itAl@UyCsN@{){4FF&+L72M&_S0(r##pr(YtVK
zNWt%3Tc0fg4$?kCpyhkJCix(lq`vWIuW%wKWhZD3)oWnMV8@;OSW@P7<+<01vLoTx
zW@)<e=f&ra85Qu7Opi}bCiDK>Dv|ufV2ObqLIxT0SDjvgPP-!&BAA+P(09m$CsfX0
z?YR9MuP>i&KAXYH!e!qCABxSJ#@sDv^IOpz5MG2v<4gNGCd>UUcQ<)qT+!;mWc0nZ
zseV8md61zublNrSJoz&iy*4%sZRunEy~u~P-W2fya2j+#?)rZ@Oh*&5|D<C#DNaNH
zyr=UGm4osb%mW=g?cJXTegJvI1<}w|oG@zg^*U1`DwcdgmlcA=#956+=O(EL*2<$Z
zGbPU3!p+G~w6s8k9DRhqETj@5?TiprLf+JF<%j+mmBFL=`O?<6BzQ=XkEgfqloJ@s
zDHepVwYmg_zC(k-%=Na-O}`>GjCNG=2!qj4gzNQD<G;jMg$DX9Y|r`(`l4iN(rK=k
zow{!{Wbfm(8o6{OLk$A1*4gDFnx&b=M?Wl*;Uy5gUYr`9`Q4TRO+M>;KwuIyu?7%C
zw#>qeADRbMZWzg!9cKmvGSGgOe*`$UtB;zwV_A?jS*no!jrlNIv*TR@*xDU{ul!%)
zl9PdhnaQ8u{p2_S7yw2WeEkv8R*bvsi3~c&Q|3v%p+4MB)Imf%=WDBmq$mKJGQ!yT
zlJ->39E~5$)55Y{>&KR)B9n3ujhOBmLG40_g3(;WqWQ}yQ`oKLJM#bpJc5Ng$q+@k
zJv4jh9^n@jRr6IiJO!mQ=YEdhy*gJnZL~cq{yg)j{RCL;>(Or(UBfY$m3A=mjS{6V
zyYOuH>H1H$SVrQhRzQq&MxCFTW+56161d)fiyP}$`{`GJ{eS|*X^H<soc?P+9Gwh|
ztp1GFaeV->HAG>+t`MXW^NzY^3g+LZ2od1Pqqxf~jVEYG#S#9#PCi00gdiNOMxTP0
zs~E564_^_ezd#~dOf}X!u(p8{C4pOFpQ-Y1rqQuloz)A&LbqPnqF8bj;#oV)C5@u3
zEx;Z>1koDgnn<Fp2&fJ;iltRQYHE1y1hrmoNIf@u#7&99tmD_DD*ExGw!U6;VxCBs
z0f((0ZtxSn@$dkwJ-2B<H;mHyD9r(BTw`V$-S8LBRct}AEO-Odn7EuE<4fWTLTOdc
z9?#%xLF^|4!{n9BI%9y_r@Zv(>cgtF!);CRi;mLYgK=K$0tO$z!0Z72`)^I?Ff*~W
zHgR(JYotPSynq8hL0#mDBiN=liKLM}m<ERQ5)Au?zFhQ?eG;q1#MaL^#qWtCu8(*U
zpAvXnVmSg@qI!`a{i;wiGq_-0s9&UQfSP$!PE+@+YLB0<9~4LgMJAmhk`ZV$h64H<
z&$Lm}gf1vL>Aq|=A$AW8q!|eMmTsBaT_fsFOu^@rpglv_wI2)~(zr)<w_#k=SAv#j
zJ&sX{u~6~SDb38)peVKkp6#5!Ats?6GZ<=`RFO2P7Eu4{?P=BdzC$KJLO>$cp<eS1
zO2Q|-D^794s5ZP!H8rfdSEynlyj3r24vkE(C-D1rBMd%jynw*~wci>n>mW4ib9rEN
zEwZd}_}ISr-YDd<F_!#3jz20ZWRoaSW?h%1ySyhNF2N6fM&^J;=V)9I#e=ZW`9ROp
zWd<3<SLw79)VtPw?caZK2LZPHUvNXB|JlI*nppO?Jj;?C>Dx2lAg5sd<>lZX3;gw@
zH8QYqG5G6Ss=5O}5nz30^!iG*G+P<$VyCxEbei|Toz&wGYeNgrQ8MkB$rA|1Y}%_o
z-xLx6YUQ!Up%Z{ML_)p<Jd#_P;zlq}Jp%4tr>RDnT}^ulU%ceTJLo&m5^2`S`yE{a
zn`<yqdLfNG-Q8uM@*n<U>K0A@Y=sKvQ5i`Kk1qFHofrtuISoS>TPnbJl6K)$Bk2_q
z9cc!#cs9Njjl%CyOUO&$RmbkNSvk1~yVxa?tYuKaIz&mG0#H=IaF#FG(!ekBz51NF
z5Oo9~_1JBRwp1l+q+xWsjJ#-%EbE$5>T!Dmcl2UGO-;#T^NqdW!4>kctmhEl0-}>>
zm6E=FPA&)@k-kSvBvBVl3*P*2AE2J+#MxaoE9=#!kFEu%UbH3XC(Cs|u{n`7=r~W;
zqm9tQkZJsG7BIDpuC^Q4v}tG_&CfE9aj>wsetLpJnXHe3&Zg4&jg&=#|8olYK@Td)
zJ#_b&6)4|0Jme<$y=d!PdAdFNSMP#;9Vx-@wX1$PJ5Y5bB52JC%`o+uxPAJpXAEMt
z7BjY%9(1?Jo1|W$l8&(S<%^FAO8zlTai~LTy#wOFP@vhFBg<RG`eEH-V~;V(EJ}hf
z-9%nbgAI=CdlBy_#pPj+J8f8Mvw&1uE!3R?zmRauzPe6@&M%}iJ@{~@+S4fo%SbDZ
zD;L5pVrR9-^XjCIQCx(p&NN8wVW?Mb1}jzRwW?IHuwXXwS52|MG-vp6vvqlWU)OPP
zJQg)vt=t`XuDMgL?kwO-fz#nBh~u)f4|Bi^)w)iuly@iSPnC*4biKNv>k$Zy_k*@%
zbxG0k?T;{AZBBIsy9_z{J*TdI>xjEjyfD#}S8RD_in!Y5MXIK7Y)Rl1d}|0;G1Y4(
zmMr+dBnx?dFsv1UI9AUr`@-r8%;#^d7xz|%?zz`<@eD2H@Wj_aX2~t!u&SQX9tMH=
zwh6*k&E@8=TT*VDP7O93z5gJH7sS$(UmQs~pHHq)d7Bjuw?L9w)Egx4x=0{k=V5Di
zFz`uCH#Rq0INH9l`7*sO#<rR*Y@tpmvY2w9mNr9W`ykHX!6r5#{Yi$w^JCtkjUKHM
zI+Dsm3hf;IT+(PD`DZGtRtjT~_pK_ZQ~d-oi99NM_;%x`pKUlF`?*C`re1#w8=W)x
zQ_!1wuHvQ!gc*8LW+-;<fXXAKZWq>FjDho~#%JDBVc*>p`u6GoRHDcFvl%lkErL-S
z^=WuuL@-<E1CK~5-<VSxDS>V1DDA4I5<PR*(gchvs}J&JN_$N-NdnhE<F9E9Cxy0a
zwT7Vx!VHs|v5C4L9Elp-Uj}S1k9M{W=eV&;0=lj|+^`Wo!2TI%*z4Wog9gMBZm56B
ztNt&s<d0D^|G$o_sbnd+4Sqzw>)#P)V^Gk?xa1U#%E{|OB0_X3BEyfw+lJTeZ{kKO
zzn`YB)+O@zg_DIi(66W6aCf*JyxiQrgxV1hpQFL%PfPj!DiMfgQJ<s?AgU#CzE&U!
zUdMpJ$ORPnI@e!K!;|lJ20vB%v_}o4a#m!xE$W1&e*1XwSB6~j3%Cbo=wBJz1Si-j
zQ8@q15V+w1KRb`QZ@Dfs@9aT$&rD>1z1o7`d%!T3R0(om57~j}^-Vq>BHPoBn0mP~
zR>Lk`Xy8pcJ5abF3OjgTIZV;~D444tu-1xGcXW`1z^aoK1UAqGmZ;qLrraR-=nfh$
z$6W_p<&w;<mY~8_{q0iB5<_R?F~XrZQpu<(E>a=%coL-N!Sekb<aL{kO#opd&==~8
zN;82KbnP?7n@p*Tt?cv594Ad*>tq}lOQ=Sznd#)n2VnwzWpEbIc)*Swi_sVNqbPO7
z^PW%4#y+yZ;noc3Tu(H1k<MO;I9a>`#>omL{;Il%?m~U3M4g5VU+}qRP&M8D8Qt4S
z*^J2Xgzhk?A$zusj&Pjs?FrV^7B)%CnWEyXEF)RFo1yO#=u!#HbQv*k(FxbH`(|e2
zWB4*k2IcS@p;a`=<g!;5<)(~o(l^B@j&DI_<-)Rw0%_|qn_w!&XH^dKHnd!y$75fr
zi^FqpqwlM26A?D^NTmg+Rb`r$gL?#E)Sn3hOEhW9Yp(Du()bwzL|J}I2V~wL_sfZH
zf8Q^7Ge*ahrldNywo`J}-uwN2e``767#^|_`G)K*Q!buQCvYlg%Q8}N>rFObCXsq(
zfDDRpoCQ$P6KU6}K#H4MAoz{k40<qv`w+09p_$0Lq0KNm3zI5UbLHzGShgi6n>+Sg
z6QW_HJ5vCG&OqnZYn;mH-hoA!qkP3iT4SrJ5$(5pE4iQ4F+{@cd*CKzkVa~ILrSNx
zffw==G7$jxSlmPo{kV|q2x++eLXCovu0A|PA~J@m=Ao2~Bb~KLlx(vrgvG~q-1pIh
z!iVGT`h@9wF82JlDh-3{kG)C2XTAuK&;E;c#{b5{{vmG~$A=I=k2vJYJ7g_xxDOu*
z6=>6r6$%Vt;aAC_$t=*_@q0;s(7aLVtz+BMn<qUN#j31VE#0t;z%)6qOBSvaqq@J@
z(i2U$y%};qnqKfb`Jy7ys3BdWXbFz3x-hZ?on$<QQ=h!#xpWMSPQC@0o;-ypm^K7%
z@Li1)h3HQCsJ*W}MghCr?|iX*4aNE2h4pzF7r^P<{EwW{CFs%$+_g5?@I2H8?RY0O
zS2WhotV>>}pbx6aqaS+1&%>8L?Yr;KN6w=lX4?Oj?ptS92l)ZE<^&*t^DmIj|GGW@
zsn1!g@(-l*CZ+i%t79P+Zp<28wWtksh;qWIU^yOEQueFU`*k6;Z?VPPmkEMea^CY_
zXX&b$^Kl?8bV#~;q1&Ibx$>NDfmxH_!}i?2JY5o?D~*2}k1WJ<_D(JbY|=UHqZc}b
zbi~rbG?uIq1`qh`^PUSb5v;7z*^XVfxyGm_P-f?I92Zb#;S3X|VO-jsoL}UO7)OhQ
z8yi_TRjb-hQQq|FOr7ipEshNhg?%*(>dyxQ+DqC*l%G;OLydFuuOg?Ey}>GR8aK!C
z+y#KBtA5ELQvGb|)pcvOM$`NTlaA4_B82js$~EW0LKyRT>Jn*{I%?HgJ_-h-p;7j(
zLbAMe;@{)4BMZcXy^c4v1j=+Ky0*{{t7mDze({k_pq-@KkGj`k=N=1&AWSsPQcYs+
zI}-@1#WxF_%V#X6Je-_Jc)DYZ2ek3)T4*$U5dGw`>~d@aeFQz9d>rof^{d>A$bOWV
zzkQ`{OzUMlN9mU6<=iLbZcL3Eh%8&^uZh9g9_!yQJF#=#!gI^<n|+(Mj4biY=eyT*
z6pP-{P0|X4{fI@N-jCn26iUXYgvq|z`<1O43u3GkRX1e?MhXiiN7U&^NJHPb{ZZcZ
zHhZb!!G(`Fdh@AjBE4HX3vqLC>U|=(RT%n&@#y3WdE(Z|tn=Q&b6%1#px`{FtD!Ac
z6(SKE!6{?I+lS3Il|GUfJH?3Y3bf^Z!b|{u-ep^e(Yy8y<#qS|&ghwuCgky?KRkFe
ziTuiqbaySJ2VLUxS1a~6$piF{{#D6t(xN&w;pd{jw_0v?byXc}MdBLA;trAp4;-LR
za(_uatGj~I!j`wtvs1i({-|b*#h}grZd)t>oBkIgF8&`j{U0;!{^QmP7+xjY{|Da&
z)iEIfy>%sm!GU2|+}t)O%^Ks}@+@JiuTkM+%i48A5+*`{V=kNR&h)tJ|Ksc(qbqB(
zHPG0q*r?dHZQH2WX2rH`+qO|b#kTFF;?&*W*QZaP{?57Gw{ON+Bl(fF_j=wn*SjX3
z`OMw(=s2(>JEW~0t|@{6vnVLnx&$Nmk6n9}p#=)#2=PI)#om+K?kuk)M%P>Iy>KS?
zN$hvHWC=Y*><sS7U1U_roRJ%Zd?e_Grk^{M`8xGwlAVULD4xIuVrg`$^Ecn~VZC3u
zLRY^iFod+?pKNbTFXu~yki0ke`whclyh2p0(=o&<3XTncZI*O0<$cW`btbCYR)V^#
zWapij?5WjA2%_<H=q%J8f;~DLZ`MwuKYLBED>LY^RK9l(U+oV&>R?{fno5YHp}Xnl
z0kC0{&}5@f8E6SP1LYJ>OiA?%j@{HbUB|)Ob`UdulqeauA1|0ZV809Ii?+wzirTr&
z0K(JO0zGVUPu4fgpKCpw^qnVdRsp8#LUQ)QEzp!!@nS(sVph;v*N|W<-os`d)>@S-
zv8(NO=cwZA6-<kHft}S<xPf>luVN>?SRaSb`24l9yWuU3RX$|%&iib|)U|elr*1zY
z#v>o%d6+%XG?vEA8L`u=@FiR!<wRD=O}ja8P871g3wwdf@#TB3{cg+iUYs)ci=oV;
zjuP=g0s(E|{M!ot|27oBB#A!=^qZOh0zDhjXO6x@t{V4EQVBIfpUu39H*iG0Y`ps$
zG8i*$wly2mX+jc8?YZwZp5%`PVs2M0>pqZ`deS?+T(2t%0z7>DKBD)6A=FEmBB)xj
zfi~lSVYujGFL6jmuK5vv?MbAbzH+UsXg<TU9qI!y`CY{X+*@8R7G$-OALMT*tFJi=
zKRA2P<-RW{wd*O|nZ{IzMyOzIK~ReKcPN8%WVeGK6n~Y}^3Q~VELUI<qM$Y99cu>e
zLYvq0-;K<<l~SB(D8LMV;JW>}Q_W5@*n|X;ik!UEDA$VUMBAu!%h@qU0Sh8U%AX3A
zz@k|sKQ4*f>BmULGGK__g~UMj5SH{aINnIbpmI)y`aCa5lYmRt-2tQ`D`sXx@f@yl
z(vSl~G+a0i9aV~5P?$R+z?#iiBcxpg7lei;Al%DIa2q*yJ)OY_Mi1g0DiC^PS}sud
zeBdiJ8tHGzJEuE$tE{3Afr{zL>#Ej$@W&rvR>gLxq0`c)!mE9~sYjQ4xQEJ^#OO0b
z-y)b2Eib+#1y8iRMf0i2ZS3z*QhV|FVI=F5Yro^_=v|&<AgIpwuaC3GC_d>=XqT<g
z)+{7<CkhJy5{ksG>s@X8LuB+Z2wH|Cj@zE3+79Sa<gXtlHsny!>I294-@ErUFBS1W
zG@XnkZqQ72KW`?krleO!=DuEJa%U8<*;%7^y3STyZlEn?r7sKiYc+XNN4zl_ZGMt1
zSp*ejYkkhAEd(|2lK2SY#UBTD1VPFwX(3Me6)?Fk$t}zIiX<Z6Mlx1c4FzK+$ehC^
zvp^>)tE9-3fo_sK!zbv|v-2w0PwrA%N+sp#!0(1&gFi|JF*fUg3mcB4d@Xxt&9t<f
zWQ1YR>YI^Gdma%ss;K(OLTge^M7(RHBZrObo(ie@rJ?}A7f}OOW>)q=X-(>k3h02U
z#CvtU*=}`8)Y?l&j6fPDsIk94GhBweABKC@B>q;UZ(Y4vN9?IajiKaz=LyMFY}#Z*
zH%p5OGEB6NbZfR+qH+Y*64U)$!33R)CMnK&Es#VKt{%6%#YIq0?`0wT={@2;QLg4{
zN2$sd3Ye6VUXv#Op{u#oXJ#lFqt~??hoyJ6w|wW*V3@Urj8sgT8rx_ONwl9N50wS#
z_F#{j9`;f6_!20A%0op-q<fqZ_ZV&uE`JaR%AvGwjy9H<`;b8mxf8l8+(xiNJS8B8
z6JA~~)f5&=5Mq>cI2A8%Hp~q|FaTB2Jz4|4%Z9AIh3A0dmv#du99mHzppD|;eoYP&
zPPv#cXtw3l4P1qGY$prC##m5Ae#62mIUXHTgMGk0rz>fE_%hBoG8Yk3k38EFQV>Gf
zrr{VZ7f#Mx&U8RCz(wx2ga^N4j5y`=VCBiVAWM2rbQ7IInWyd6bOA7^S0X%o!uoUw
zd?ReA9R)sQ08YfdAug5Sz{*{bgc)Ipu~2QN9TiHf6<@@P)MJt@Ybd@$mrHcK)A;R@
z$Y(gXXM@*$JF2KS&s8l!F-O2&+o5ACg3N>knQ&G-V`H#*)gmct%M7FQ=}yMgo%`7Y
zN;n_QAbnEe<1TEx)d=yJ#`TVcpo#;c_Z{-pw4l&tVBr)E-7j+^I_8p;6HUv*q>N{7
z8I^c{D*3$_dsLYWxK+sUGK41ak4gIP#j13pTY|qo0*V$fcp=W54q{GWU%8jtPL{nl
zzBCt})0bZ2tJJX5fhXGRuX#o@0%vB)UtDWWXs!V1Blvv=7*WO8&3rVJcTo+RLF%X4
zOGyvn`Ef~rQ%Gu*--_T$tU7#;jv_sSJ-dz}Q#9NecDv@!$wrjphkKoXcj&v(`0+i!
zmSmRlsao?$ep}Bt@`y|<uqkZznUoFs%+fHyAO%4Q>NH83U~F=I8|KNqtU))#E68wu
z8LcALhiTF2XWK{xPb&><8JlV-^uV{Lqb9Y}Dn||Sn)6`Qg<-FA0SLEN^&<5lG|haI
zIuYpkDP(-voo2b8=S*Jq4jWWYd+wP!&;IB<I?sp0w~J3-<ZH<@Rc^Z97H`%Qvt4G-
zOKo1CKV!IFE=#*n=g&{Q$33R_Aa2&@%@70hrbM+FSAN0m=d-ws4c-z>BgpVA8iva&
z`1JoysqTs9+&aW*{{|Vev#G6NwCuP^74l-BFZiVPsfV_e)S(=Gtv_*2<yvzDsdhQi
z#D3P&%;ycf-u9mGy0+LbG@$M)b_m_$AiL$ARre<Fi*DPOMvGtXqJ&<U>!3vE9`E;<
zNx9Pp7G8CxwC>s=OaX01kFGbiR~)dbn#2<hT?T?%CF1*u=e%5?8io_x&qkoHe#ubP
zFsPRGr6%QRlH@Qi7_JiIc<XFD)RC0>eB_n*(D!~?1nyd`Qg3WjcH6rAN>?P3$T_`n
z>bHi`PqnI5!|puipz3~v8A3igD}joS4vTGEQaPEG%qVxUhMnT_YwE!=wIA~4c#g&|
zfm(pg<S(HbT@MybEx>QH1|&rO(@@RD(e-cd<7njx+jRlBt~Y9TWlN|zUB0I9X>bsd
z)&hnlEiO}PT8vH|P0K9AGq;D)@#Ods+s%TGTgE{mGtus2Lc&CG_mIaeuy%O!9dK8F
zFN%tapUoPHjT~zFM)g`V;79##2RAuCe&m*sAK;TJcnR%s5Yx6~Lql~QXc4(0nZ>xk
zfNot-h@_upI9(xoHna>{p*5nwEyG}UF4!@4S?zcLzrOf^Iz(VZSGFJ6CvDHsSBiG)
z&>29-dPUfIYR@;9GY5RR^7;N-3^UJ!+@Jdf3(FrDGi)J|4hE9h{~|hYf3;wg>E1Tc
zSoRAmO1|0XK#W!bw0kMx0u`e1YyhiK9|!D-krEU~NQ^2>*^Qs~8Sz0ScI75B`#A9I
z6b%-xqP%=PJjHXxJQ>(-yXZH#92Z*M`f)JCu$ex+q0y3>SyjkaDSX=Wh(YD-!q<IC
zCfl{9Vpk`@0^G;n?w{ihPRK5X1EtfXlXlmxMbAC{Ml?H6!zyLPpot%cGmr%43eumP
z&WT-mAlD3DEqt16vEja%Q+%MTb{i^3Zy86I?39Z@zu>LYxmm7cPFeH$|BOZf!gGKh
zftn>Kt`MgpD!|`=KmKo$z+Zi_Kin`AcY8ZWXF@7MQ%5@+LUKAf`ahY!fB#ntTVoS<
zI!h;VZkT_L6#`n_2EGHnF#~Y?8@Bh~KkL7K)BTqS?4Mqs=u{^RAWR6}<&$UBMI9*F
zR>79G8N$G1YwT!XHx-u%>**XJR4e6t&xPfz_mfFC2>A@5nc^Zxw%&2vBG?5_QTEd+
zcjZi38uk}+p?6WAeTIiK=3(;p79pk+ZA-vasEd2pI>bY<olIEdCjkuZmA84c<n1q@
zUr@FCXF$$0h);%q2k08$*Z!NaNdF6voz0(Mk^#{?4ksL-l^ba@FuU)(ojcSu9(^4=
zV>55RKs=PWfcMO@$bZP;!sq>|m}Gk8XA5P9u(jge{-{@x%R1+DUuewE);S*2CL2Xc
zv>UAqMr46&&RnnPC5@LE+{<t&LwEWK^EQ3l#?j0ER1D2vD~iN-lm>MNZ(e^Z_r*i=
zyY93ZJ|fBrc+UV?JFBIi16rZWHMDPZdWjjjwE2!dk=FEwR*|<OhwrxKW@XyheCT#B
z&#pFU*YHBvL$um^USlqgLhAyw?)qn<WPWjbPUhd&5Ko7ag8f>vtqr07w&jZqDFBPA
z%?e+aI|yuf+%=~*4()Vf9QPRGhi5OWK(0puJn2$6%GQ~iJzwbjYpA;wghp|Jl&wux
z2sbP8nCiQ)%>EWQo=xLHbI|1NveQ8C!1$vJGwziR0R`R>XRV13jry@t;@0<czjuHX
z$y>`;-^7^E`P=nI+>KqmR&VXIX_iV9r)@(A1l31HYFj;oy4kywhn8Jtl#m!pA9}RT
zSuV0?%n$lRYvexBl0t@Dq=adlV=Jj=`DjTgjD_m&@_Eea?F?be5?&#M!vXhw_%=vS
z=*sLF&qacrq|NRr8qh>q6jrE@e1lW(G~3FFa;H7GkasK@AoWgK(b4X*G_>$YcbMXK
z_PUcoK^oo(++QABVoCg4{G>>yy5{|VjMs!?!aHH4h~|rYCyQAsaLH|EY_s>#j{Eo!
z)}&Am-6K{VCV28igEk^<8yZ#~+Lqdg<E&DZk_mClp4TK`eqYu4f&hYe7zBIb>!|x%
zUzs}pCO9h4GroMDsJ`P1GTg-s)GSjHl$11qkg>T2ksl5jqIr~g-$Hl)MhAqOBrRGz
z4;g_dVU;vVzil{9sQ}0kN3&I@9$T3;ks)n}XC4m*qQWCw;GSotgyUDVc*sNDSC|eL
zxH%MgL70dv7f*Szp_MVk@&uh_Ni9b-9h_kt6c6jM(j@u%LOn*egYTOb@zSZkT(tCX
zrI{#X-CSjM1O~zovim{HJ%XYK3V2(xjWrdcmAoq+o~0hBuMh)>h+<FFd>|6~^uP=B
zl~-*v(c@=ajINDrCx&ijQaDP!>3>u9daHGb{bdFkaTeHDTJ3tVjOc4zV!<qHa#!L(
zBwHI|fwqqMZhH5ZDAcLtz*hqB+Cu|8vHxKT&cx8^?@X=i<SDs80o33pp5e`M-M*ZX
zk*5A4>T16JOZ)mF2Iimgmfya+jRLdUMv1c_acu9}JB?MNM+TrT)LlQKxF}Z6;9Q1l
zw+L#TWnrE6UkrnHU{nw5x+h4|PRBQPyw|nO@<g;&1+hW8=JSjh48J%krOvq&1WYT@
z3xy(C>#CN{mpiX+o4zTf*Js30SyUFFvDTp|or?OKre^5DN`<1>M&tivdC*!}bjGrr
zbCB^-Z|caQPvvj^q1)n#(f-l-Ne2P9a^_2z*>;VF3Pa*Zl_r_H3&KSm^o)x>a$!_E
ztAWHg3X(pmB1(Y<aiBmk*QEh!GT@g5Ey~sn+KB+HyeL?NwE}sA5tMGB#nEi)5|m&l
z5EJ~>Dp3tW%?&l(@dKfo7FP06TAC`Wdh-0jb<4D=pfF1|HMe-aOSmUajVng@x#u^+
zKkud=9jm?1fb^)s|Brj)?(Fzqwcc#iZ98m6I3K{Y6!#V2PP{q%d|}}x@3p4#>JrKM
z1z0yeiA-sY1Yw5p-+ZHP@8;}mEP8}7A1`m#qhpSSRgk@Ugw_U37)!n)^hVFtMZeTx
zq!;j86f~5Dl1M&wPG6Od+obSySgdy=zBo=M)j^3CGt)<h44C_#S1&aF6sl3!9M9zd
z(oI%wa&YQYGj_aC$*d8jT=X<Mzw&|8{?Myk48(a?%)cjWq5(J4#B8Q3QmWSbO`14q
z?%3=ymiD!#nu1clbpA(>l5#vRf}aiiMNz%$?q(U$TClnfjxsK&gJsOc01ECPbobH8
zjc#HH{>D`GtzLfMj)Ws2tuu_685C@jxMhSNmJlD*G}mPn47@!Om@0x(1PH%4QhIHW
zk-*(`?nQu|<1vQYH*P0C>R2u}h8DFd`miJO1xgk)Qc2|TBZxj98Y2s1e3SrZ<BH~N
z*Nw{Vq4N9-`bG2+p^QT0b5yA(^`9PrH`_^^Q?^TT_BHfRRpesyvr75I$EWZjJMbbf
zumr<Mimw1ps<oV(kTO9T>{2~zAwqsM$mCmavh>+z?!)4}`}GuLKsU4m3Id6b&<`xi
zwL>3ECBDo0bjMD<rXO1f3(t_sme(#Dd9_upaZD=M!cr0}Rx0lZnLDg;#jxJ)naIuH
zctWvd7nF?>C}##lREL^6TE{ZesG~@&MAOMXr@x?s>f@n<hO}+&zje!ddFKNO;-A}r
zLExNzn}319I^8&$W$@vh8%9AsU`ceKq1nK5t{<G8tpt{dR-|~a$aZmX-(vDa#y3Z#
zElyMx%_OEVPkoPk{#4zZo^di8;mQT8lOImSj!^GDPilIC4DI!c48x~yAW4NLV2R!%
zJKtH|9&Ek7H4JT+J_YkXg7g4gY4YQn=HfL*spLv)34P)iy_of<abN!etYjUWGpm&z
zN&5H=AHjoIe`YHvI-Sqps1+%w4`(bG1A&*oihmt$y2P-Bx7U4gCj?sNY(cjBta=3q
zLA&=aqD=;Gco6ddHwzW;JpG%&cYpOv{*;&eV|es`3rsf0cgqbiAO*eg3_FLM0A3{e
zz?YJ!5<Eb6!#Kua%hYC|7%^UM33>bCEQCRo>GiB{7I+0kRWpiEUOJ_H9RtzM{uYcJ
zc~g`FDyqEvXXo5f@hqVw9oJJGWfK6_k@Sz<SxVUsI`h^fPfM;;=*zz7kfFBZcE>?=
z<+t#x)qNgL-&D(f;SD7{A~Jal^q5iQNN@ksi<s8);TVEnH_{1ul0okw$qhw6r%tEi
zXk_5F+>CEP_Seb{)Ij;|J@<SCHs_r3-m@R(>AP=zpg-%z)c<+s0TuZTtp!*uJHYX8
zx{Lmg)w2H6k^4J)S5g)*4qQrA;=iW^PSB6b(%e!{$x6}AjZsfED~*9Rx}ZAVC89Vf
zRij2oM=;&bxuD*`3SdWER-^LVOF2FeYHjqbeGn;SFbps0{N>IvF|?JN0DR6sfG7VS
zUaO6vv-#hgPBmGlHGqE5vHC@|+=xp8zGq%;6G?R`ba7J4{10P+l}JTu=@=678JSP7
z<p$tT0T~V=3;vv6mwf4^>2v58Ji=|kIeT*hcrr~=yP8P2=x;|1g2@GoJTRYWX0^W%
z5D|Xu0Bte%r~Ah$m)J0f#^<vMj$bU`Nu?D0&<JYc+89iiM)^jPCKi^&g6?SuYn&6K
z*t=%UVE)^@?j(4M&G3okA|!Ad-t@!OY=!$2k()dhn})x2S}rttr}xAB2@<vTC8f6q
z0Wx>c=h&;UTH(j7B5c>{fGxpRm-oi-jmXs*;|~+#_Jlr>iYVUp@pJ}ib%LYH-ZU(_
zB%KhOeho^089E#i8D@V<sR<n!R$y+?IG%y=&^Zz*CvI6Hc1+OJprHb}_5&vWOiE-j
zwtWaNoI(cs!C*fT8_ROihp#^D^1M^V0j$oE)apC0=1#Qm3>{TV)_Q%Jbz@XEeF_Ev
z`z1S=RUl5q)oxQFF>f{P%u}`L!{QEb6Xx#(DLIIFIy$zs{Or1B`-<L9FX|OIn$NSJ
zF$*6V$QUk18K-NPY7m#4sWw=-jjN$A7+GF5-)X7Li=5xr;^fALYUjGT+aCIvvh!^E
zFY#w$$8_U&*;cHZ9gc-d&?Li)<4kA*JgeQiK1S3YH7C<q^rFJWSa3A9uhuEO%k*`k
zj$#~Sb$-!5!igSGqQpVZaVf9d0tLDd=h#bkv*jPTic8lD*?$b1xA9S8h&ZnT3rfPz
z(*$Gjgu0@&Y%HUd^b@BAZ2qXm_4-*$hBf6v60pwn#a)VdU+)WjLI3i}XX|+AaH%12
z;_K390rkd@kDjphdKt0i&Cbggj1hvFEkY@b4fk|jy`!HOk*ag7mc8<k;pFu?LH-U{
zr9&p~LK$&E5ob6~(R9ZsXJ-Y@&&GT8iy|?tty=091^z{alll@f?!l*FuHW1pW?<dK
z2{FFlNmFAYI`Qv{sn&OU9lWr#JcueN<6|xVJZbC`gqpIT8xpS}_P<UsY7$KO={`;y
zwP78V!ipIm6{UkGRzy&^7RNETmH~H8&9?rLP$2Qq80Mxw@X-<W;sU&`BA5Eqve8pH
zxDF1|e11FObDL!2A-aT8t-l?wsEvZtyeRreqr(RruQ}7BmN;q-xI60)@9%#R^^3Zg
zi7^Mz!()*C<Jk9qvcfObHUAi)?ekQN31v=;#gbkm4zyZ#j@`Y(1J$wyL>pl)icl<@
z(s^+;m*NDVpWqi!{BXc6jeQIh{dwi%^qqN7Q*Tj9yRMaWfSW^~$!40R0nA5jPH!=d
zoIz1X>lvt64eg@T;)pFXY63+46wuAqG|DbelFHvB@&4PXnAEb-%hkU^sL})frx_%q
zmpu?aLw`E7Sdla;YqqSaO?$#ft+ZNxxn|5mN^|MY<SsEA_!ZKD0R2L+e$oNt7b6Qp
z*C~-e<{f0q9wEa#6>Ln*yXaJ&QuRAq(`W6hVm;|8mdZYYK;bmxiorM5K27i@TcnUS
ziCv3VZ;&_n-fH!?hqw36+6_eL`Za>beq7I?yR-MVI%W&7=>7piD;6mo;tv?pAE`_4
zKqa$mTG+9HCgJVdb5E|9hco9KgebYd^o86TGYFmsqAb&dc+D+r`!v)y*ue#PrOBQX
z!3O1Xk#L8**Xo-2j)~nv9<Dwv$(+HVf`&l5Oyce-eDb;OM)rsE`2gCSEIvDv8*YLx
zeTM)-x8S!pSyplQ>wX2UG0{EY`3UjLK`v3xgNH4vYD=fuEA^y>VS=j_71@oeeb~Na
zQO&fnSL4wl>B(fe82SVXF3ErbMxFOZ_SKd~p9k=>awB|er0?+ax`lgG)jC;GueI4O
z1hr{t_z6mJFLU6mzOpYa>Z0#z02v`k=ln+o!&y9xuRsS89RVU1D51bfiD_*z#!N=!
zbmx>Rq@<#|*@T50*lUU$I-t?k>d<2x59C{f8iEk5J729+P_Idy6rEgb%7jI<H!Az)
zOxM&yK$|Om9*t|MUM?w5MFa%kBPhSjY=OPcf(@h(4MuxX{+4|`NTj?rsuwOooOzqk
zTvma{{q#EkRl4#GH2Qrai^Y>L$-}mX<i3nUB^NRP-zq&8O@!#;|Eka!z;5~=TE#7E
zbvNZZ{Rv^?UCeu?r$B--`ec&ZPY6Hlv&(2a61$e2HPVb<Je!iDTH7pc)4Ifb_JySN
z2hPi5(-Jl!9(;5$)Yi=aUE@sS@7mML3^}3i3D0PF-bd;-$O}PH9Gg<m<H5ESXU|z}
zUj~9S2@yE9(wE%V5nwuX+ctfm%xE`JsihYrCfYVYif?{0%Fu`s6q86D)A%|e%5)aS
zE+gK0W~?$O-CLR7qI_{0JY+D6(Pg1A+iSz)JWX7(<nR8L{Pooq@ub#xVc2%`*2&|*
z<Xq8)mz%@Gw<-+Ti&}yuPD)+o`RjpWct&WzLCQ$c27g8S&TkgXR(rE4LW2!!a~KyI
znBICw>J74mK-X-1ZIrBCD@Z<P=)1%T(ui-pduBRHjG0)AUo?rcvG!cqZQ9scDg|;A
zy!Svu3U!sLEnH!#5JJgBHWwq0vz117p~dXE8R%rqwV<;LRgWg(V-BL1jJG|HjPag+
zbkuXOXiZ3#+9@nFn0|4EaE6D9Vdyref?Nui588l|)|Bn02oc|ty|J2C?8xC+=)sJn
zJukyG#WzJ?+$^nDDXOX_L8H8N90$$)WnF`fL-sxb+qNMj;gmujKNW2CgWdwnZTP&i
zJ^(BJ+Xin*)bI&hY6MjaZ=#RddIWp4p+p#CRyz<b`(3mOdjb`Mk|6kst1Cf7O*iS*
z-h2x>H}%MZX0iYoWp=p|@y;(GeFx2Yz{IkdU9IJwX@~y9^beF~PkVh2QSWDrP-eKB
zYMX}^%~zjlwC@rDcidNBd5O7N#SleweLKr<wTrOLt;k%l)Xfj5N%uT7PPWbXzD|23
zXgoZLkvw$}|Ga$-_(H*pWqaZ<0z1pdA42)U#p_Ap4w5Lxv^mSNs>JM|o>AEC`xoMl
z;1yXXEFfzj3Gk->!#tm(^WWUVWX1YF82Ov`XsxTj@_5-qK|yj@0nklIToiMwoC-zu
zeB2=|zx96D?kSuJu}YA4cRu0Eujul?#-SW2Sp*sN>SDP-tGnk4Y5)ohI~n(1Jbb9p
zd6f#g;^LJ(z0J*e(}B@1j7`cN%OkuH!bd0)`yffsrB7i?&PaZ|%RBF!yS9{zGh;Q4
zvvKUw0_MtX!SKt)?X<VPPb?h6h0?%TR$}H`XQAIAP$danxKU9?PVJs_iykr=EZlLy
z==jFPTF{Z5dPhzg+Y{WaDUiU`mZ$7^RqIrqfn*DksaJPL=JVMwF|>{#WhE0e@6fdW
z?n}b{Mw|1S{AiFpPT4hmFh2##lp)K`t(*RzeQ%H<3~fEYx+Va0_5Q=8@c-<vSyYvc
z{lldNXtlKX5pJNUYL{1dmM>IX!sm|!0e8W-m~aaOJzwMb3Th~xROpQRgT)?qr+df`
z8gpFqBlYClG%*+~LzSe*!q>1-SZ~7#(D@5afrAea=^CM@RMq&y=GO0NqcWsMYhZ@{
z(qo)rvyZ#SsJdVzbrmjHom9*fO0SpE#uRpUtncgo_Ukc-ns}y7q`F<><r`^x9Yoqv
zRd;Zdkzm`^o4&%a($d%vR!fS~7dpec2u&74Dm>$z5%`!IU7Q~e8}8cslP>u4?}F@y
zmDH!-qUpG@@sz{&ZM);MC{Uv8B0=t`yk;zyqOs0H?4y`WrKE$`TEfXc9$YCpS(EF8
zu`xqr2FCI>Qi&<nk&8kS!d0V9TxAQ#Tqr+N7U9X#k*}jK8vEFpSho|T9{92z>}yGG
zX>b%Z>A>F~1hx|o2bn{K5l{B5#)<6FKf}uC5VOWOMIuodqgB5DB$DYm!4p@kz@>Y{
z9cIfxF|6PY&6BuQH^GIBrE}+^_DrN+CyE*^Vtkw0xjd%n3*L?7rw^KT=5+OWNJnHl
zrY0VUS$`zn)F3OlyY%^<?d5oYC!EoPqk@pV`hl49LdafGf1+JmRHwtzz-ad7K0#xT
zbrD#njdJq?g?~wcOD#%9B;{>5c|df{MNZ{)-|!giXQ}}zN^TmH?YY*b!7tZ!(Kh;V
z3nV~&@O~GmIq%U+zl+M*N4iJ4VjfH~7DX}M&!)026aL!IPN(R1k_if2C|S3046PTV
zd|*__M8=vPh)e1;9tr;yjzYbPkVjZ}n)wew(QEd9HrXb%$MrZss7M7c+kewb`j1h*
zPV|4Pi~LbQ37(aO0bzs-+3hZca`N*8QvamU4a*_SHf>VMOlTntb9*vdNY1vN$P7i4
zS{_o`frx>q$_Fyl$OlX~-9?hvK?uA7=VHG0jU6dSbGkxjes$BYhA%?CuBf(d!<Vl|
zpK{2pp|$Z=Sq?IrM|Z_lND(SyJjIdI(8Ei7A4=in`tUtKYmOF<Esm==V8qG(i>pe;
z4OzYofad{-GXE$J{ojS5KTAG;s$Bj9SMux>K!*no@`hV}7bmrx2Z$Vu`vNYDoSKz}
zIGTDiSuMYtJFh8o!2qoFgy44;;=KGsL7um?eF!{NwWW3P0laHZzV`!6uRW5jfgUX`
ztZEvp(qs0~1lA#hS=p(du0kJJ?zbQ3&S>6&XPoHH8}0*SDEu6p%XJ&AG%Y&5`KY}I
z92NFZ4?udoI4GyDwa#lrIp{0hAttvEjID=Wc_Bu(K;!k7e0wfQCs*(jzwK7}45oEG
zc8OYaaXJd=&3J}dP`F-;=Hz$N)*a6oW|E4v%`>yzO7~(sVH^Ldi@i=w9;FLdo<AD6
z=>GLG{deE`KbGph(gkH|5`Po3Qk0-kv!{`AosyiAouXDO10)c}r&Sf^=H-LKPDs&7
z&rQ&%HJyr$W=|8-QzNvk5ERf`xBT8GyO1|BU<KydT)0Wmcb77gG{9z||B^8%+7DSt
z23(*Oz+7qn^@aXDyYY|fjGhrh7!ZI0pXn|&SRNAP^|L}0(kj6lghR=bMcLo1o{eUN
zSmt>KvXNcbg_0~5Sk5)w6SMpvq*>Fi<|a64Rg8dILZi(ZlnFE|C#s^9|Dxp_y@Xx-
zJq#x*$=(o>g|JDdR9fmy4&tfyNS#+AZ;F+NN1fbe;Cb}2^UzPi>u0zS>?<x3d|_0H
z&|)EbVd1Pc?_coEL)pz$18@lf@R9y&eE+}|95;agU>S=(eILG1nD5i$8*VFOh|Ay`
zbCw}I>#fXZAtf{6=5#yC>9=qmvJc3~@^7fnHcQW1lIT%u87%L3YoNTzC7uK+o6S3X
zPf?V<!b`_HVWh~^KhQ3B2&6zkIwgu<Ly`SfDYQfhA5_wQMA?({lLKtZjEc~Rwtfr6
zFwxI#(s{*F@>$vwVnEPCETNU&H3W2;xWnf@6(h*7DJD^s8X?7LbfTG(?{C`=0NVd*
zsv`N<c<ljMJX1SIo4>qs>tKBNf&pjZ0DPK%W4izS3IABSzh}Dsp5Y3Um!y@HrGp-m
zq>%(9yA~znCaI-qTK;TUZ&IQtr;(VFSGJd;`6&}ZsaWO@-Fa|409M`3<kSyQNG1DU
zW=`)1b3*E0^w<!Qyn`JF*RPV3kQ-TmY3@m-H>gZBu1wTZB{rKEc*cQ;T4`1N*Jm*n
zlBwViKp6l)|Hj1s-thhpJi!x!FaY&1f!Xd-Oi#ZDAUZVls|OGpW=i6D83{54iY;B4
zep&2|&*?!{36+(;0vsl4IB2>7WR$LcQO!JN?;V~*cIDHf<c@o2#0@lZEeO)v=H}kz
zU+hLB8rtff@>_drOKw@S>sn5yHcw;wiAnV-l(Db8HtT-Blc1=BL0e;Weg0z7*coO+
zH2^$o06c$;0r(eN@Za(Lv%J7R&{fAz0Sq0^@0v$6Hscx0{_x9#%($98bd|LFd-(3A
zXg2b#Q2}qW?3>Mt<qu~HFnq5FV0b~3^8S3~He-fhLjts{DWVFFZS*HwX7|DvUV}ms
zQYx{zHdypzHPhGv&OCm*JRys3<D466_={Yjpxm8#iwkuMl<x0%37-%0E0E_n3)XDm
z(LXM%*`Xk<$z3=XCh_v=(NSDIJ<dHndk4~@v9duT`BrPs(N@v^-!1*?zg~tvRhIuM
zI)<{hDCh?`F9fiRH2<H@|Hrxo$1o!N(Ff`#XZQ%T3lvo)lLV_#uB}4~wkigq+U=EJ
z4JNE4cK-2X?75YQ2{)q<8EfDNBhGS`&}A9xZxE!W6f}PM=)~Qtv~1<FqBz2T8?A8X
znzkB}$%WctWvmbN9rAD-3umP6G4!2gJR4Sg{OuQ+FAp*q?K;<eG2>q%kQu+46h;Fe
zpnHH)3iZE6@+Y7Ae>fYL-Cl0%VhtS6z5L*EKF1*{DJ4mhQ{8T)+SvSi;ZJ6xTGIDp
zug_5eAVmxzKnOrmdn>O3Z=Am(ZMt8>Ata<45+^4)nHd*P#9iE6TvT0nU3<glxTYhH
z3=<Y_N#qN+*(*i0<SVUbc@E?|6WiP+if7q75gQ^!HCbmzk1aYlVk*fZ?-d_-Dl@4v
zX)-UEyp>dMEm1$}$Hw=XzH72r0P2|#pB>?*svck9M>-W4Ye#)6At4c+LrYghVWP2h
zt-82rE0aE%V-nr{@f>h09CbjP`43J-wOC3N$HALl8TAZUOLs>J_PD5z=u?7Wm))Ou
zrZ5<yUfr^kL|bnYzjlVzZz877bf>FSjend~vM2WT!$cJj(4j}a8)nEFgq5!!Xr`wo
zmopCYXJc1OW+p2&x^nY`W_v0X-%@bJB!ZQ&>@6|}PR`$b4VHZn@Ib2_H@R<+q!;`0
zn~&~%a&szc98|e1_WqEEdW)vc$A<PkVBG4(O$J5fIZkieFji%sBzt(GD;%Iat|V*H
zF82J^MuovfLF*h|X<??%Hu3|e=5ktyf3a|c&`;u{YVo?ELF!FW=5aZiz9S?U2x^*w
z%lqv?_4umNbp5KwGHtg!cX*zKi%2RU=};3oczLRDUYU^e%ez!$Q4ACV4QCV|Us!>A
z1c@<!Mv_U+$S^RfZ2btI`cQ9TTev>Dq-Qq)+C-$JR`~!|uqANAeOLzHF*eWpZvJA~
zBGz2T2Nb0i<7hAa_|S{j7vW_|_o{ENA%VLbzsyy?HxtlCB8qx|-*=qqR;p{p=M*^&
z5ooe$;Xzm{+^6<K8LqCo)gw>zz$abuJ}pOALPQEvfAf#B*O=ks0(VB{Kr9@cwRoV!
zMks}6Q5`NUGyYmfVBy(@!pm3GA&qGY!7S&Bz$JzRvxoS==;;P`j^Qn#en`XR-Fpr6
zc=g<^`%zMPPcGWvT2%AHM+?+=I?Y-Bb-xc<cKoZpXzBG9cedT)Ic>@W(1KnITglgy
zLBlu)D0a8r7l=<BZ<G%WJyF>op(K_+m4jvWPf$NK>?h2zF=oMf7?<Nk5>-{`=PcN?
zch$?A38waNJ;QNIKw!cP8ko9!vQFh1wcI!gU}lFKZ0)nKcS05SzV?F)l$n}<7d4e^
zJLsm)(~MyAAXHPU)s#9Qe4j@4%Ui{8$f+G+nbpk)gCc()Vht;Bt80l+>1wqYfq(yv
zA`gkaphfppPJs8zv!)I^B~aGX*SzxC0xJ5(APk0%@eC(Fq8}xcAn?-2>Xf+I7uOTc
zB=<O9CY3dac1Gj)!%9^(mo2L;U#mQa!!g>RJbob-naVcHnD{&VzH4HvBbwb4{8DrO
zjO<4RtE1M4?y8^hJ#-AWKuz_?Lkn6~&AjL;i0?uO7bFJS^%xr+ZU(bdFq16?Vi|N}
z>4XWq1(hvk!ec2A&6k_L@`3=!?{gd_%%|4Y<3vQBQuy@=3}UUchu@GM5?CkqXcZ*J
z7JvUx6#T3MPyD-~(5*?<APDGZk~$DaA4i~mVVT5n{Ucsy!bf*lq-xVx%{*=#XbX$v
zrO(rjz<k@8z5OjSg;p6T#ERP2U!Y=>4KEEK?+`JR12w-2nXS7CyeH?eHZr$kfv$pa
z+Z0ty?wu&SpEsd?HCT*Cewbe$$<V{GA9?|&h&o|F40qE`>`P|MLujB9b#P6W94mHd
z6xHpY862JB*7>nj1G88f@WLf1^8adg6qDSE8E#Ki1+fQqH2-=Frv5c&YG<wdkQqdo
z{q_OWVUP(GegY{?u)N0*>0MEuPu-oPcKi_JDVKaH%k1@{pY6bevG(@-=8T8d-I}M-
z0?wuVR5j(e&Co%mR6yJBt3xv$DBK6025<qXWo~+vuBi*#kGm>OL+TUhzJ*Fh5PK8&
zfS^zU3?eS|BEf!H>l{wwEsOlkr8>cV651u)-=z+VqQH5uQy8u)f>%Xv1A#rN-9X2j
zX+w)UH+8*{W{1O~n(twd&W$xJwKbkQb~X(rHwPKz7+VP*t8MNeUEO-}1-$gRZhM`l
z4$X$K)V<=J6Z=gWd)15^UeA{?XPiAzjae+9>Y5<xNQTst3>DK8COL#Hdy6EYZZPI-
z^p$Ap_~P3!PnhMI&!GE@i<~<l>ao|wCc<cB60l*PKsH@u7e$QH&l)e!t?Zxtj~jXU
zlY}{?Z2Z2F(3Z~ujaB=R!4=yfC%$m$NqRyCtM=V7k)%xMU%rS2fcVW*!x!GM3QQs_
z`Lkk8-aU9S4BT_m(i`0F%=iW`v+E4#b0UqqFilTD!y|)sU^r=-cc{g^1o)P}fy_XL
zVvYy7is^i5kAAoYA=|ohh9_5~lm;0*8tU8;4DGbGzMi0*0VtGcEiV=Kqu67BKqK$c
z*?KC1l73rZ1p~v2-ZDs~+#+`nw3+n7xP6@OOVfrE#YM1>#mc%o1lNHY&T6A?Ml>y}
z^2^toeY)Ww3F~*zJ}mF~{Ty(M6>9;go_25rw-2R|uP6+0zFtlR%qr(*hU*A*F%I=2
zncR#BIo6KGL#)Tyble2Krvs_b>`o3^H=B=MzyoXO8N)ZMIX8|a+tjoouI`bWe@6ui
zeRhOI-U&DeU@)n0O^|aE!8Q)VX-z*t@mrzyiw%Z<%_srxa!_tax>OmJrJSoYH>V~R
z6J+!#U1XsU<kgis;Ci9KAlj9_{t(@-?S?PUeN4?iyI^-b-E_8vs$tC4ppBZ*|Jl`M
zsWL3tQU$LX79x_ZU?f8mQq9E_)IVyB2;CxJT6+lbe9^puT&!Iks1fa1IUPAaiZ+vY
z&T=X|ikr6r*Qjb|#mKW#e0Bzp)FjT~vI%OXk(P`~n)RK#i+3ph>I$fe+YHC(Z6bSj
z)6`<UipBRG{%)>MvR)>bxvbeBbQzDTC!-QoM4)5WO6?MrbSu@_ZqHySGMvFy{f+Wd
z@-#5-2-Wxsf-@QV{W*`+9Mch(w-FVn-l&rX4`&HXE*vw<qf0>sL8eo02;AyC1-ve`
zfu<@~Vh$Y7aQGKdv+$$F96gp%s&5!ZbI+nba8n!UPD3pc`SJ}RoyV!E&}a8E4t-Cj
zC6gIz?3zB!aKOA&%v;*{7GCkh^ycJLEnn;AYvgow?`HFHYcn0MV)tm@xa%3Sfs!}7
zQ5*AM0FUX>x2d?FjP4swVoUv7mbiMq)jA)wXDk~w>A*4|+hdOp9ewm@GN(uUdCE(?
z*)_ic?gdtUZu4@%vgVs53z|VY-WNDI8Ve%HWjHfesnk_e@rUV)>rbm`b83N49lgmp
zD%ujf2pAw-in*u<(2VP5cim4@=$H5XO)q&%n;CnsF$0}RC#5uEK?ggnBn0gav_X|r
z_-e6MwWYHCWc<A1Po9!gqyS+k8kiGx%F~>*p;2j%AuVIdZmu5%Rt%YQ8#K=1LrZ?Y
z5`n&0=luc_iF#$whW|<25Ogv9qRneovy?wIM#scaXqm^n6~^o_jU|c##HmMfM^g>X
z3`Kua;Ln;m%F!iR23ZzI;%+0OJd0cA1%%^b3&WPD-r3SN&sW4JbY57_pVjAbn%~a4
zKelnF#XXfdB8L2IQ0gjTC~bT}?!G5bh;Ff1b#p6wW#?gpdtRX^S-aTXnhp1YK3ZSf
zMX0<76z<k$1m%t(wwtq8AbQx)9#L6z)w^HZi((ADWUpw$v|9M{<$F_*ULY`&meDz0
z?4o^GvR~t&QlkKdX2L<A7Chwk^~Wfor$nf#;V8vgA~HuAcf>fMHa@V@E`JaVsJS~Z
ztnxm0TA8tUgw_v8=|QujU)`+DCZGzOB@h`K^(1vMIlkx_5fjk%g7CA_ZFYq?bPz2{
z-zlFOXYb&8HUoJX7t*!1wvk;nFoL4p+R5e83@pyXrh&B;IlS-8;ab$57bN$!07I|M
z@4t7P!z0v?WzcS=$JDow{fPKly)|Bgxuow)K6Lsf$MKw+W5>^J1)^f!5!6Y~8~ivO
z%IzxrahWbl9OC?@DWm^};IKOL%c$yDc-^Mun~3nG7w7D<1<G$fZ56AzwVeoOOR(6+
zCh;_l(H(r}r$b5T4>y6z+$EEbHptPB5jMwGq#o9!R^wRirMo<{&47E@Z}IcCyda#5
zt%G>A7AsX1U^6o@M%CeyTr&1{4qZkprw5(dn<*SdLB}hF9zVhHFU5rOB4?a6S-8=s
z8K>uMRn!vO(e57Tq!4@O+?2=8*J&zmvH|XJ+;JqWbOT7;H@#wu=nF7=LdLtN$gB0@
zk=dNKN~E4ITo}ZY1>i>;jgL)WP3*oxk+D2zcn-YIC+5#UP2y`im`yk~9+*OSV6k92
zQn|BwLq24I7A<<6D(O#WI~cWSN7PxvTFrisK|p}%5f4^ewv|u^=e>)^y=d@P5EXa$
zF0=_W)!Ar{X6U|M!M01>F0HDJo}1P+`;XW)r4o99mt~5Tj7nc8^w4mK0R!HWSr{^9
zEaOKU)d+FMXF|u9HrsNO{7p_Wnao^Uslae}TX?xta|9#kDtZaT*K7_|*bHqJg(pt?
zaNo+CX{#@JpfaRes@Ryf5BC!2>C|1mmc*!u8wTn)XspC8Tqv?F$-#-geMXgwPN>Zy
zwG-nksOD9{B$?QNcwpt(FBj!=el2Fhd8^VQRjnkkO4jitRd`Tm198hT`=nAUVPnL~
zb8yK?AidX5rjO((xf%aRzVyNyvYUnac>L0IVt)p#GuL|?u?ECjzf=On<>_Y&pF+M@
z2ubh*j6kv-|M{cm<%2D|uyPNEy4#n%&E7bo|Lx=mZ|Z>8`Q7Ds*Ag#(5b5|XNGCn&
z=DvP(e~cTEJ$v&-8W~#zclsA`^c64`SFF`)sZ9$aWC0qvoCYGbt(?jsnx-ee8r0*?
z%%TX5z@7LqY*RwT{I{10MGE6^rzMqJ7CO3b9MAkYJwA_7KIbp1%`@j={Jp_HidLfS
zrMG$AtP<**dbCy?GoHzFVlM6^N}S6sHnJ<GQ&?vJbHoU&mY6rTu(IHo1J9D2<R|RB
zBjP{IxAyw_uM_XMg29>OyuN2lMWv#JIZfR^FlCmEmW`cXNq3@N;GFxEf_RNwh!c3{
zVtkc2VKWxq0>a{QGf(_Tza;Wc>n<Q@s0~nsoV~Jr2=Sav=~$I%hpvO9bmT+ByKF*c
z&uz+!oW~cle!msk(XX8#nR*LV^Z~XSolTAV#daYEdI@WGF9#C?`F(W2lde=&6JAjv
zIpZSirTB|ms9=Cir9z%a&Yhp_v7_N<iHq3822p-Xiw6$05P|0Vl1V!03TWmga?b+)
zNb2dtF-d*JbfQTLxm^W69r9z{?8mA-p&T9%rOibE=^}oCIJv-(%@^3H(Y;Z^_!!$U
z?OB!;2QfjRZ-{}oZ7(>`-(`dDO#F|{C6L20AFnu`9(A@U9}`2eeD#yiV%Wj9!angi
zugX&NN!#;Bl%;`i^Nnx6Qt#<_T%OgtW&uPz8Gy)##KNcq89?m>wKToSnQZ*e)S?X`
z1FLZ)QChFf%G&K+hBRrni%iu=m&O;d6ZkD!Qw<swBUhW)YABDLASTa9@5NM;P40ME
zX`g56OF;22XK}emD5`9>WAdHcA=daxgIeos7nS8!@SSe2x;MQOKp;{o^BdjWOMfr>
z_H>0EpCY9X5eJr@Z~;j>7imu6y`|*#jeqgv9(B`nPMT*VIfPmrLW!;drKm=j5J0zQ
zP<rU-emNLe@pGOQggx8!(DY%r8C~q+Yv@k3Nm=7NUU-GXHyK+Vk)E2pXk*{uQT^QH
z=#Gu2u31aKc-c*mSTI(0Dh`)JKBD7Ek27sWr&9rchFsh#%gy(^sV1W`WE-gkft?>3
zW^unqS^0kdHbu4DDY%lNuSTl_Zq3!yF(_Rb7#S!}i?8qnYdv$rKk)iu*PRDl$AJ~5
zwgIs`c)Me_VWq`l*(>=B@)qQEh8pGUB5yG?z746qaP&ZSl3J9%b18zaMJ-Z_-_>bh
zuUckYGU#NMP1|85gb)18cr%-SCzpVA6lh?;&sR|dw4<?@=8zB){1sam`coRvPz(kB
zOpivGJOuKd3X{};KYl=t#%wXD^vQZttQAS>P9rv}f$+QShQK*Yg*JMOo)S;k1SJ+^
z3R<|IQtWHND$g;5C39-vQ=qfP!vKoQV`{IQB#8iE`Xdqx>>9C^xX@7g6sLd51DTy}
zOW%0slAsu*COt-*%>@yx7de-cEy=Ap3!|vZ6_$nOv_x)%t8z(g22SzvymNm~WX^|i
zk+@e4q$9l_4>eztrgm4yeU{s~yfGSE)oNYnnWb7dy}e4{Krq-HR1<N^hh+bh*87;a
zJQ~K2%Fgz03x^fyz-ZGWOEuBYhZFW+AD)dr52TlkQUc-J?cjx4=vw4eT}(f@dVGlW
z9tX4Q${QzAAcsH)e_HCPf2Pz99bQ>S*N&;~{{&|K&9vLi;@OW!%IxKq`fII~Xfgs0
zO_#!4v)CbFMMqCTWDd=IiN9FAVuxZ3mS}8JyIrOf1JKuH6uv?0Z#e$W<f1N2k~s5O
zdp&YK2x_gH`nr1%3;#B>?+*bZ0t_Uvz`o>be4;mq9~o!Y<v0A3ZWiH{3RmL63%>Do
zr|I@Ss6)9Aa$xsDdn+NA&5u{oKU)Ap72>x{2Tx<(RD?y3j1t~M(6m~?1wOOM)+%hL
z^IWqFv1S>2KGrG=CkrG<*!FqymeSV!95t*|l5u-VL<*WBT(G;p3l-evTr=!X72Gwp
zg$O0@Tc11m>#^>>3u3N@okp@v=?^U{zm#MnXsK)eD97T2ZI`T6(ePUxreE774Cnxn
z2k8Y_;6nuw&qz`G*?KG3^~U}%QuY3BHkC&ZFa&8Xt7@mT;+v&4(~<e3&kkkat`KiG
zjhlpg(@|B|c*=Hn_j=kVCS=-ty*8KD(->uTAS8#=UUY-!`C1@s!nR5NW_Q9!QrFBp
z@AosX?Fn34E7az#F<jkb-?}X$`(O-J52Af#d-RAlzjurot4+*H$fy7Z5wz_1@*>s_
zm4i{m!6S2vx<tWon4S2pc7HetW!E%6J_c^<aqs$3uR1ql0_FEv3Cl8tyl_$kwX8KQ
z5~CwO@YVu2hYxsaH{jYf?{6|H#W9v!B9yq4rxo|y)P7uijg>Lo;7Z4*Fueq2v7W38
zR%DCG%ag91;tJ;qrehBYmlnJ*mp7;y<vA&^(y3i7QyX^sY6i_aP2*&zOS;r}iz)Dz
z(vLQhiV75Un%{vXay5)_2?hCpMUJUc1Ad6GEYL0CQA?A3-|@F4$=GO+Gn>frh(78P
z(a&oO5Jf7R;W-tq2;Jo<A?~OXBn&}8yr7<`lzI9+*8mQJE>>>=Bo+b(?vn^H=f5CW
zi64=dIJe0klT(A5wh-a9tPD1$j2r0AyF*BkAj6Yg;u4*|R{*EWd0*)c&P;M0Bf_k(
zF^{;6%5S<&#RTaRMO-@QZ_2f2$%QEjii`a%92I()c=+o(Kkc}I_#-ke37P;cqjVM-
zGV+k7oZk0Atm8w}c0$;OZDL}d{!C~y(BJE2-ZHecrS-~qZg{+XE5AcOzuHbPOfTf%
z79?1UrPRSM68BO-L{?RUF$k0`-~~7Y6LFyxEksjp!5Jm(eii;E9gE7T@ug+gpf1o$
z=0qvQ*r)`97N}pIgA+_3E|rWL*&lVW!MfZb{0uDQg9-_}t1#jtqql1HEtp>u4KzYo
zX~;s96{6-lQt%{KUXy5fJd&9HU@B7j5&<ZSmanq9CM59h3>gl8pipf$%?z39wZNxM
z%e^?EUKhjW+*c0wD;Kp+Hc2X`%Xs4OaDk_WxX`*nR)lX`jZ&fUKWMA8%?qoy6nhka
za}C!+^&a$%zbm~=+2#Mz_S^w*izK&T%hJz5J!j#&1Afs01w3=<wUIU3&6{fWlg+#V
zX+}H6)g_hksX6Pvpr3h%pQIJw${(k1g3e3i$kZvHq8z+cE?kf!IhecDfRMX9#m?b~
zqmxR{QaAa~bLgqWgDg=ByQ?^k`8`*E`-%yY*?qs$i9_ntYempay{1WtB1h}8*Z#?5
z<+5&4pgFWgs!<ymBe~hmRLx-6q?=szg(`CqZ-O}MTb&r#2y}PKo?;k!z|KZCCf+<b
zd)|uaPMIb*kYa2BW%`l5+hVjMM@fw=g@$eSs={)1V45a>ktQr(1QrTQR*Fe-->GdB
z!NsF#V2v&J2^Gsph1racWhp`W8p%=Ken_2VL!2LT`O_fpO1&kejt`6S0~+n3;ZMJ3
zLQpcS20v4H1@_c*ghv@P?bG<FjAET!jr-&SzYwzeugjL1s4)`q!F>;8#+p12^l2yO
zC-R!zQTNqJd=h){-8);LPec<F{@ObwRv(;O-B9M}hWp35&SVs|l4JH?OZf8l;6Uj>
z%({h2A5=Wl<3+yO9z}VpzCM|R80wI=`6T@uopb>LofdN}JYlhNjNL!r_|3j2@iF6C
zL3c~#OpPPlk3(jM$f~N$2*lAPh;Ih{8iqYxOX8uW=QSN<U1rMF%xb&DmG6jDl6&qs
z`8eTd!-uEF+<*xz9hvPcKaD+=UGz|pebrvD>vZbmRa4U2%*@x{w=P_KE_aTHGMsh#
z!~;qNAZ>}5W!jRDu*G2xGNs~r?m9Rl?UE4Hc$-z~F4xLcg|Y*stR0U#mzdru)QnSK
ziEUPonCbDGxXeHkxV5R=yAt?YAHGQbid_Jkp9ecI-=2_lAk1fqiCP+0i(JjT2N5-F
z$XsO1vS_eOKJ?rdVp2=1V&I~9nN$9*CeR(pQu3TXqn<I{whu8Z9CrwdK+iOR?Q=AC
zYyy7nS-;BH+3e25j!cwNd26>|XAEc8290AVh4V6K*JPDr_WuA=K&-!AWOs~}N1lbU
zk>7&On<QvG+Qa}NdINuI&Ca2*YoLGA#O?|zv(bWWEAG3b5%W{4koGL5i`t<ouWEFu
zyfha+aWQP<E0S+cLG*p^&v%215-2H>1=McPAAozL>BzI`2mH~L%jr33uJvD3|GjmO
z%FFAJuYa_nk&BHa8@Ro9-o1CG^m|mTMb9wIZo=9JW0Oo)S@c1BeJKoPb1jK?f+lU`
z*ouyAS#eo@kS010gJkB3)B|Po`0-<Ai+B2I)2T(9WK6eyDS403kWSU-I5hL6`*`Kn
zH#FwdY>`7@qTkmU-lM-8?~V5?v4qy-$U$ah^FmPU+X<O0OWHS~7rXZI$JPea;&-gp
z8DrY3M@m_hTHFm2bW}7g#UAlDwzxFkFR-*|WWHFpu40PnudKr9-`vuci_fyMlN3&R
zYAi_bK02du&VIE^MDfE3?w0`eXIYkbhHSem1Yj5jJxmMB(1uMwWc5q{0lq4K)hkC+
z`)ms*E22#}6fU8Lg;JL=R7%DcJGzl&h{Bz60J3RHoenAQ$N3US>T*(p7=)sqI9Sv>
zI}yH)<oW^UjQcrbjZik9qg&1w-V$RP!EMH*S>T2Y9!co8ClYD_KZ?kDqfHW#U8j|^
zBm)~Q&FNtvd(q%yz|@0#kI7kr@&ny?7~-42Z+Xa+J(6|6DrICmj(#eeR552NggtRE
zB;nxO%Y^p^jg)4sH88_0s`N4gMvc7)8Poo`utcBsTWxe}Tl+UNSyn0nf`GoLN`73F
zO~m8R%cnI;lv06qL)aku$<+=(IFsaFmT@i$UGyHRhNbVA$6}>2BgJl*gJ1PkrVKAP
z*sI&pX4xX1Dj9tK+L<8nJ@J?!0{x5JUKBP{=#$Eqw(cs^qQ1$nCI`Z~(|)se*7!az
zEe?g`URmC<g)!p0@wemey(1)#wDtXvyX|hV5T;n<P3|=R`l6eQ`|Q5Hd^GwE-eC7e
z2;6O_rN7gzZ@|smnPRBdB2nqmGSP#C&lPj`LDu*;MoN^1(acp^sU_hj@a{pzXejEn
z!6FLd^vjd2K3-dIm1Hp*hpE&?=;|6tM4t8R=<_q@L9*6~&n+IF>7BX}ZKC%ZrFZ{K
zi0xC*FMyGJ-QSAB<}pQB!`ROo>J$tk#t(D95!(6rD3iP!d-RB($<}Q9y^$5!O^$I#
z5?hY06YN~2qW~w~(}WNR<6cDqA-%P6Pb$--osRSi?H9ek%L!#*xDoxn2f+|e=PO#H
zHG5<mkZ*a$nArb&Q?{X)pL<W7lR{3LHQ8u4+4MvG@2$}1<0&r9DK5&FIUmH1;F$m3
zjrPI#a+_gurkX=kHc3G_TeF-hdx^()x?IAqiR-+@Mr?4a-%&}Xb@JQuW2R{zFUGb0
zNqI5zqT!J<j;Hda*s-3ogvM1Xfm6M~nfy1HUOG=3Olo=?8P8zAZ~UBXuw8dNXQD>X
z8-%V~mua=KHe-f1@S7h$s;>KOAHjc(6WFDmf#P4m>EmRIz1NsIRq|vm>J!=5-}u2=
zyAStttnTTFr~5Shi(F_Msy*vp_Iw4NX1Y(>#t$?9EJtqBE$TRW0bSocoW>q?vkC<z
zW*~8;l0k@oRpCWhryP8KXCoUVe@_F}NWZ>Q{Ux>1zc>ZifPnNXslW7-h(l<&+o5T=
z4rgz}0sNZj(ytR&eHwWGNVX9f6q6}M2|2S&2H(%fH((19oBcm^ikz&T#(+>?db5pJ
zw(K2)_0YItc!^Y{ou(Jms7e=kyuwz<3=oo2Fbix>vDfi48i}F5))|dCmWQ0aZpGIh
zgKs+!DHkH~p+G}29r(VZzjxH3g!gz4y`69t;6?+i(XL3-q$W>4yf((s3Hz0BtbP+B
zL>i;<oXR(hE*iM*;uDCOYU7%+^PX3j{)>Er#Z}`z4AO8h)|>%aFvs~`c0&`@k(!Ye
zPoTx%p@Zf#lUqR1<9ndfd~6H>L~l*N)Y}>2w0g71>Az3dzfahfSIuWTU;#dS!xOgY
zxndMn$AIHB|Ducpd0}!RbU5W8)_5ohuj%VB{rgxxjBAV;C~lHpi|^vjopzMhVBMn!
zRKb6HeJ7)v_1ofd4VDKm?g(-Z+WYA@VEO!<VZAS9PY1FZ&Dw8bX_y)Pj4Kmzlq+lk
z$Cu+(O5S0vCn=Om2JwG62hwG6A1<W!u1H8H4H5Y}h%ji`h3;BW5rNdJ+-7eMLt&##
zW&kINfO4%iu@*mh1@GQd5`a(+2h->VbJy~UsUH*~iKg@ol%ya+MSP`_joLC#2eppA
zFR*f`0+4tvDWF#zaR#~u*#g;X><#&}eTk!wJP9>cm<ZEM%IO1KopzE~iM8dX8nXhm
z??<?2iK_Rg6|U0F&Sk|scbeHDy{(L9gz$b{UaZ4l&MdbkJ&beSr#MM4&je%EnhX^j
znqtH1+_#-2Y13is(BfOPQAt#`Xd-d&H=fYk-oRmI=U8d&uOD08<XLhXnn2Kgb)Jx0
zTb~TSGEK#;8wl~<pDM&nmeNLgG`%2%ml*yg-WtXDx8tDl4-S!g5&x~M)<t~7uzGfs
zQ8(6&EGx%Spk%-Eyqv^2CsyLX)<cOcC$Te$`{tCJTp~9@^k@7-n793C5HFi@Fftv(
z|5QhuPGW}oH>5h4Oc*NFbvez*hfph(bQ3>x143a4tQylwj7g(A_vn*6n}hI&x$;!h
zPK*ah8T7cgHupHzJuNA*UL6j7{#3`ij5xTZ1RY`X9Ke9s;+Wjnm~bBOp943T4l58F
z->OH=m{!?hT&a2(G)iu3sT8$FF`marq<IkJt{s^16OcD76iGo(qGRDXw`d3iyq-C7
z3*U?wp^5@$2{w$QAK@b$X0F5<)!DKl<$Qbv+`kUvvmq>3tz?TPLOTWsQL#NS%04D~
z<|NK4k$lY|ly!C`zZwNI)v8JykHRWTAm^UZB(3zi(cEf*(J*dvXtXEE-<EYlgpL-P
z!zqaIr=Q%Kj6`V+D}(fMJ_lYhO<s3RXtN<?z50jfn#D5}?snP|kzBV_j#g2JeWHgP
zqD&=L33AdLH<$u*EsI(|WMvnUIF{2zq%C{vleBrRE8SusX5ah9p&EA`M$N~w23Gkc
z?BwLWo$~D`wZUMX{q5~%MwXjw;cWXJhYU+^J)!m(c&IUYG#=ntmN#q!#a5(Urj++G
z$Fcw#!I?Xdgwo~T!hRg?w4`)F&!_=n&wb2(&FEDBz6Q7E9#v%%D@|iJ>ONB@?lkyY
zX>+G}uN|4H-rK+ynd2*XmT`o0y7yS=<xToU*4%!E8;wJCZ#fKK@R-b3I18702Ll`g
z#|d$=RO8VbC$zuA**<O+9r`KN9?9*4QO8DBkUCe~>_}T}Cvm)OrfMg-8ei;x_7g}$
z*^eGKLzzyJ1o}NK7f#9wE`3@yO?eUc@G6}(f#SEV?s*r?<Z>Ig9q6*c1J?eNsK-7@
zG&-&9>$sU>&|b*^%L!<moT7d<T1oIlVKIlH{MBB9UOI^NCN=*63|D_WN0IJntw~I9
z%p~+TjoO%ajKW>yFUpD}h#@tzqU?ouR4bDb^q~1FmRB%RK9MCjR&lgQt0~}eJSPU8
zPPE~=O-$QpxHpRSD7?HJ%;f@_KFk3npjuU=T4-S!5S}x~?$}_~G*_6j%zh{h`{(`E
z3fpVXk^<TzMRsg7==J_H&eiIFlbIrxx02F?1rQQ}Fg!o|EKJabrqoXzDuTacC|7a<
zPnx)C7v67foKgiUA0`J>IvD^eClPe?3p?R>i}sGp;k004L-pzcYwN?L#(_#i$U4We
zXw62u&jS&2Ng=7n5%o&}X3~rVMM~l(@ys!$BaQ*YcN*vR^4u$?cq{MW&pU$U{pJ`H
zSSpEoe6(iie4H|ZmkPqm3rGY+RQ{4^A}hpLY1RVeGoGyw?fk}B6oOz4(R9^r+zwM!
z^FpqtF-%X@0aH>d>lp4GXL=9-Vdi<d`-`#ahQS9R&U6M>m=>V}m|_XnFbJw5o}${R
z9`>e!I>0Z_c~LEc52)c6a$ZrBflB3^+C1eHwPpcn$Kw;^7T0vi{lLM=_0@gk-rc$i
zH*(Yh)*=QIaoWtNopLiE_`8|x!XE;He5+SW6t)=@C2@p5`$BZ9S4;TxQ-=mt+?Q8d
z-GxOvC&wyaKCBv6l+APaKOgqB9rg-#_BO7q(I=?221IGcDxA50YJtdR5wrS*gs~p(
zI2!n1DrtT(Xr*SJ&Ed2dVZ%)mKk64NMvg3Tv(qIrRoSA!=Uh&7!>t(-FVC~>+Zjmp
z!mK^->_%fzDgd?Dw;$Eba*SX&QdkHOUaV6X62w67!Q+&Iep2pdOKFebk(DM$v1!AP
z7AXisjkYDnHk7l{WL0t~KBX8d#Hh!PmY&lSjVSzEDstkglolSQ^dVJ7OS^Q>RmgmK
zYVYr?mu0wo2&aklItp_Nr>p^X2cr$i3jg6liK87|JuwOrPA9-Axe`~GU_}GO8&j$n
z9Yj;bMV)Isi&U@@Qt=R7Ff2Ifg1cOtO-;dpv$LY`S{0Anq}|RUwNL_^mLJl7%-}j5
zxFMKtBZmzaG<?>NAr=_Cf&IYbiVeRFDC>}j+SAh*JqB<dihg*oi9Eb*1CMTYqzK@t
zD(L_V)98?(vME$gRfDYoQ!O3XRG|wV0HLkHM}V_7=3`n8LS=P!cw94-sS6{$Q^EoN
z``!}<6sc%qzosHxm~Yq=w*IkvdRR_HC0_!I<UD6$0rdD(eu};=Opm=vE<r{Gl`$=a
zJy5-)p`wu)aNOL{WjSa7)i>*-vDIgG7k^gNQMYYV$17J;=ceSL$Ikxt=WVT?^%5_{
z$6fT=yG!=1YxdDIPEr}Z<PXD}p&4b`2IqG5%nN2E8L<+IzkuH-fXN4P2HwnOln=|?
z(^_V6Z{Kdyh*RbiKhj9mMcg!G-NU(3Wmzb%hx$n9$r3JsU8@=*Y4RtXl+)6$=!&kQ
z<dd51O;9T%t#;{Owir;7x`<gj9V^!Zzi22}PwGto%l_1!#3a=Vlz1&z^}$)Y4E8JC
z8TV!7S}XLYnnUge01#zNRueLF30tS?=OBMMWeuuyfiYf-CSC)Gv#_!tL$u@8sf=}_
zj$}|HrDy)=n#@EuBy<>Nv1cdpavoFumVfVt*$rz^KGTlebflMY4e3q~-CM#jG}VS=
zHzs?b<+dnVPzjKO$xt~*E2sF=iG;~Uwvt?5eoj;=9&$1xcT{IOm`2$#4m<U2$d<*r
z-nyT>j0XWN2Z=uL?<Y*fOGF;7?&W|>D1A+eP3?jN$dvszC9kpmUM}pvF#C=4PYH1N
zcQVQCKR=`^t5^675v?|V>Mq&3o~*D6z`{#F3Z4t6^FH7le_F4n%2utin~s%nvyZ#4
zc9zwxlbl-0Il=T1;_Exb0a~`Ra)>www+ivXyLi;n4Ftc421;*!yIJsCcaA|!w--H*
z2G;{z+ZFxyn*XT=2OXAw9qDD=jAm@ptHZlvVwSk_-Xz9Q)d45MIFZ6KrcIpXwQrs^
zklc|2BVAIMNiVyhqpC%pATltd<W^`P#n~O{@l@r1mK@$_q>Sdu#xF_b1gz;<fYO%*
zVs-`1$8_5+E?II;@meKWl};ON$D@qDZKEh)BFGxL9-E}}aDCwR;hGJIdJcGY7^H{x
zGAoS#JeH{y<iwEH^LZ#2qYJRJl9|d6%ugxeC4it~{zLTSDrcUt9edP~bHF53d4|RK
zOHxNt<O~Bt-EXq!rz+mSZq>=l+>v<9Jn<jL6&j<fjKOg1CDM-5170j9qpM~(139TX
z6F^H_odOzfwU$(h0x285+Dkju2!NM2y;M<o&HKILZ|7x|{R0TR{@OZP*8?|a?-N1@
zO&dJfq`V^6eKZTL(ws;!6)64rIO2SJmx|Ac^Sr#O$v|-izd-6t=dtx2yAmY2Ajf8s
zb6Q@3<7f{k7LBW%Pq-K@R2Rg>#D&H&t(#Bqg*(Eo_M<blG5yH0-}fUH;KVzwVsYx>
zcO$?hHh|c>IrGd@^<84T8b5Id?kdrSk&LArNr2!zcM{ldBZ`R>CP;U9&>Cvu84!m?
z^$dr*4T{aUPm1ITGLyG}i0SPna8b>t9l(V?-V=lqim%YKUi95tD^qsA>$C<IUWNcb
z{)c;l3dQvh9J+j0%k;_(NlEpG-g7CkZMAhDh>DwNKU$6<^BHIO>Y0?7sWiJl;vEAY
zR+LRT9*=i=?^?LhfNiUZAq*LhzlOfCe@^ZVha9uMD<EQ2s5KF(y`v%Pw0D&=D1%6R
zC#4;Fp;9PH=13rVS7r4<bbhFN({sF7)(ziuG(})=fv-t`LZkhoo^bEHE(Go;1matS
zFg(HMDH?rn+z_(E7c;rZiXQEw7#N#^B)$u{gfn1EO1R+0CczH5YFX`-bu@I4q!Va7
zMdB*Gss!S~-}zJ6^SogRxDFjvXbZA&I*#0ZKvgGS6fpL;Mik`)s`cNO9HAIHYsX5F
zt-{BHc~MrzkzaD1vO5{bBUytU{9<S?79j{-1HAiWi4%ugHjCwLWz}}6Fb^rQy<?%7
zzbfekPiHlfOGPvRIIrQ70)U(WQ<jf^qR*^vIBOjS=%pIeI(2Ey=3Yk4S@N4$$T-K%
ztSGx*PN&NX(Blut%q!pbtI~K=?mOv*nJ<kvI~#jmV>gDoEDI(9UhdeSAM`=X4?1W_
z_eNYDB++dF0;J_z$WAz94nce1FBmr%`_-&>F!zIJQDG%n56eVUkH~UwjXS2K<@I+m
z(o*7Hq){wnF&9XH=txSRCtd9}*=ik}EA%^wOm7CF5b%#G;)0ZqPy*wuUTCs7CEig>
zn8OLM>LZawMp4>KcSaf?Em@6`@kd;bVIZc0@$Gy<1IRqyy?5Wng9!P|i4me>X5idV
z%+SgaBqFlBTh6j)M$fRndzul)KQ?zdi!<o{cFd-}&K0B$fF0&lYOY~7ZVp@O2`yqF
z7tt-DJ#N3j3$^gBI9g8~Ahn4<q^;}f+r2$=V<pQ<J&;+`Q5wn3n5Q3NBHS~$G!>7q
zto=9l0p7T8md*dY#G_>n6SZ|m=l)(ucfC-wc>)zaUUCq#znof-o~t{-)?2TFJ$^)w
zl_osP$Qv83rE-C${W&li`Kn*m$GR>wI><>6I9<q9Z-QO#iufY6G<ck}<WmSm52LR|
z>KDylme#h-ng4D;0|TZiJ>ke0YAJ(C_;XQ$WDV2;c?1%uS>eJDM<AQ?eh{@r-hRLm
zzpM)omp26kZjLd2GX}#EPD5&20dD{r0ERek40yx_py+~u_wd+J=d-Ph8t{__0)MKJ
zWxg}G9Uq+@4$*jYKRQK0oBo-_Xse`645P<~(P?{$P8w}Msf{Z&?tr|%tSY3iTp_D1
zM?$SDcK~N7eEFIb!XnLYf>17y?#h(+(fy5&v#0oIpKVGJ^$P6=(e%KsQtt;3MElqn
z5H>qEtd!N~CNzV?&ZD_jIoF!#M(5JPEZ;S>EF>pGlP>7iwQdX-`OD(CD(Cn%0i;M?
zvxJqEt5?H7*Dv9=($M$9z^o9eM-6%8hiwV3?gR2nKHLJ3n+>r*3`R1k6~uzWj<+|Z
z2XL=x72*VS2C!{#PqTXpP8<&c(1w!rgwIY+sMbTN<wayscf?nNAJhCYMYU)2Q@SKB
zR+r!(Pb%PG;71LxKLi#!n|)<87u2==!V?CRqeh|a#q|!8BC_p!uE?dfxvAm=Mnk`a
zSS1M|hE$9TT6~9*7FiGq7@E6)kjNPrSb2Fg=-q_;<*Wn=xC&Kek%20rGQ(SKj)$cp
z(6At0pv;+%qO6I5$s9%HB+vfNvHB<pI{pAbIcs)WuQk+iVA+JNPzqJ$cx7;>^i%rf
zV(wagQ}2WBb&;?D!%3MZaDk!*V2BE<*Ux|28MoZ|?cuQn{mAi~zQ*!|f3_YH1I9V*
zE|Ohl$uiE_vjtgxwD<CWuy%fIwjNu!zIod8qvILFF`v;C(m8S5K4jC%1YO(EJ%*{L
zvxeq9<)>bH{zG_R#T^Q*8n7_vwE!4`PlkWWYFHN)Ipw4H%njEVBFAlWd_}#o;w>7`
z4N08(i!m0UzkfD=!(T5@%Xchqc}KQGfhE6W#b3f5Zr;JqRtL9$07KQ#LXv&+u(ugi
zkw!G?kvO~RhZ@WIBm4+<aRHYC?}z<>%gX1L=cuFW)<H(P!jE*1NFujAo~5&H4cgXc
z>yg7x0X@T?q;rjWgt_)WfO?K)cv&viJR&}+rVQ9yAofe13O@W-Cw|{l`hz<_RuqAn
zRO;017+I~K@mKEHOxs+PMK5SgdR~-(qvZmH-v40V&uLcS6LS^Kt9Wr9U1iNVrawZx
z%q1P(s9xk*gV)M*sY1OeB^BH+#Q<)m<$|D{*h_=b2p9ZcfVFJSe36NLP?yHLPV*U7
z?|3xFX^8EzHX9y$4>Lrl_8sa(E9~ANcuhx1T%WTY0+8vJcI>^^@pGuH_K3~$+P%S=
zq8(#rr*;fE(`(!K(e3$fup;XER~_p+5Vm7Lhhe~M<e9Y$6pmh|kIEomlm`=F5%Yn+
zYI=_pUB-d2(A@ws?;xEdKUP(|*TltD)4EfgU}J`L(Rs(Iz1h5+%zn|6uyv!C-l}<s
zFHgGIi;90e1A)3f{*WAo4)i-&#Pkj_Nt-K-A*rWKsLLM}JY9#_p@i;9?jw?I<nunZ
zafmAT#X$>R*y>|64W>a^i7Iyu9D=SE+fyUL<!QX|QQ2o4C(FiCiOCfdFIwmcW&d1f
z+FuAFmxIkus-u0QkjTLDe@H>Deft0XzyHYSahbxiDZ>h_Odg3CO;1rJz5@a4IMpI>
z=Xr@2PgCspSdb?4IQdd5v+&L!`y}P6(3-LQFms+RC)w2L;WeojbWJuj1R<v^QkTT*
zIWH?TPhp>gXt<{)>3pwux^<z_G`N>)mFsh~i6PTk3Oz^uMCoFYio5$zjjw2tyhZNx
z>pi89eI(nc$ffC$u^&%7OOl)lgAwJ*=3L-`yBJ7yTq)xqbz{fuyC(O!7`G{lF^PZ8
z7HY^nOi~?ujRP66VV5F@_(Z6aPLTV&ZF>gw@Ro|J6^M)|S(@lE{3JhO1`S&RK{0YV
z0JtB$fd8Jx73wBGMXdd}Hf0AvrYC0uJC*!^(rYMK#cU1P9mEBCfrWY$B+a@#>}o&7
zKe1Ch^{5sgn!t|_%D54S9OJpvMo6)`?bvT;<%dw413k>sVh#f!8ZF{t%&EPLtWhsx
ztmRD71rb`=rCL8AkL^3C_(Qy??Z}1J^;k1AtW4B;jDA>u`AO?iZM7xR8)2)JXUK^A
z3!9+ar7unO?e6RgVB>BNtZtd=x1KiMy}xyDirTmOyj71Di4V>jzu&535w-3H<xMvi
zaZBc==W@RX7U=1^YqM)MD#X*No{Hg=9-H5z=#5jsM31umIz(~P3mtVzL8IV9TT8;0
zHWEygFV|p@p^>rHJaV-FI?98~&bcv%d2`VzgMW#iR#w&IoK9_waU;GBcYH7pR_TyN
zlscox*uvY;X?(-b(bAa(;UaF%1*CPlB2Ckz{)in>YRgLB8_&8bah(1Ec7h54*YV84
zl~#~!et>{QXi9!NvnrDxLwXgl-@Xm5Q_0e>lO~SViRJ0X;#&b?ORl^yrd6q(C+PRv
zQu$yYH!DB!qS9U!)5iMw7B7S}aZ1#8yrAVL@P{!5>gGQc*Yb(%KVDwMa|ORH<Q3Ml
zY9Be8*Y;8cqYn$B9xwGfV~OTSp6+w~byLMkkd2ds`J08+E1OVf4ZYF^nc{DaEoRod
z?H-F^C9dD+e0dKKbVm!l%lp=j2YS;E^e7}J>AXsNnb|53fz9aEfk)z}R?onO3{=T_
zlC0uPxsz&a)EiV8`gV*^>NmydT7?_Uahq!;h!?CGq1(VDd{9vSr)x;-Z(k==#}$y2
z>of_D?uCUw3}Q+=c6a#c`bf^F=dPV{PiH}$X?K7KMsn#}t5|}awv@C^uN(x)jsRVh
z#Y1s>Me}<ah>Z%;c*>qD>}<nUU*4EM_MRdfQTElDNPQkJ*im21PWDFD*NmUSR3>Y0
z#C5}!uG^z@sSljrTi+pL(rtG%UVG}-BH_Ao;2YrwPJ~(gJ|%m*XB#!w_S%o3{MjHW
zFY{)d_G4%WU)J@z2_<+MSIiJ<ry=T^o>byGb(vA+gyZN*u3FC@o>PCvus%I}bCETV
zLf7R8-!%0K4G!Ccip>38Tbl_x?2){Sq9~?yDMfS@mmZ9|ZaI+HlXcMjLq=+lVS3Fj
zUps;_`|2%m#P5eAd5j!I>IIS@M>ia{JzbEMDyuw{!fFVFCfz~#ois7SIL}*`pA6&a
z(FCr2`$ZGMAnr&#iZUGhEKGn9>jRK<XkP-z9OO*aYQ}ri;%v*`V2&MBXe+z@X+!+j
z5Z}MGUB9KVIY)&bS^>_804qfZTF#DD(2tC>o$)mwIS+K)5YBI~H~!u4lzSE(An4%O
z#1H)@LI;O=S*@%>=<{27e%Nbm4h>>CpV6FnlGb{t{0qSd8|Fb`WEs+vT?wi=>yc7r
zk%ooTFhXOn8e9M1>PTo6G|E}6*)WINP_mqcEELu2FCmWgH=~bLfGBok$FU0@bN{Uo
z2Jr*%LeX14Qvr|W*W}W-8&Q{AO7d&)xMMIS5JO)^*4C8uvHpqt<r}+#5w*=94-Pv7
zZC}jp66Xv+>!mqUw_BLA>jbT(Typ(%g_c#_25@BlR!u`rUdnjRdMp0ge{))6fH;Y(
zzMic$|Jp~BH9e!m+1ItLI{CV#O<L2r=p4FxcZAEY+hWBwcEqw@n>Z7zR9m*~qOr;E
z-uOcsQ{2#h6zCIZB)STDxpyS7Tcf<}RA@l5LeDPH!Bt{f#40+}cZqS}$xy3)!ERM1
zh48yS|L&P`)cWpuq+;(qIev-ydQ|8q??3(?cK1Vc-ZYDPe|Pul>S}!TyKz~~cTeB$
zewWBtyEk4Iww7ApMmgoF6mIkfg`eeD2z)r2{(YHMCal(Qp%z1t?;U3pH^m#TjFcI7
zE$&n1HYANH55C{lU9f^$x;W}q9i6Zn7LKyhT`Oc>=5HkB=JWQEva8i(r%|PKxrEEM
zwo@Jjf`HkHY8eqQGs;Q?erE-CFp>3n*-DPsF^L<!8?wqR<myZXZ)a}hF{64poszw}
z@C<&YBAU8_REFA2gXcJ<a;S{jOR>#<ROm@kSW%;$cn{$mh4iO~tKyVJT*hUp-D#x*
z6<3Cc3NPGHPLh?+cZa__y*d48h#$hFrYXRS=Nn{QVr5u01gxN9flvt7C%rc3ygjnH
zqIQ(CmdYhO^Hz;O6t_Whs*;2{dL;mQ?tgA<QZ<Wx5EN`5CT+VMN*VE%oYy+H(7|^d
zmxmtneAu?%Th6hk!zp1WciUd>uxo2it#KURB7sAvx8faY=v~wfK!mkE^LCiytzvW&
z2@+oo->Fh74>@BR`RZy~o{>{{0T}B=Qle}KZbuzay0^V$NPQujtK$JXZ?&l4>WI@$
z;shq7K8|U!a>)<aw;fBUMn`KF`Foplm5%n7yYYLOmE%*5+BWee_jhV-7Gi$^qWCh-
zD5<owDX+N-1u*WuI(f7se>khanu;BVd@Y>YZT&{qkqN{bHw_4h=2lf`s<aT$0O+k*
zkF0(oExOmD<6h#h;k5)WVPe(daNs!8b#0MwFQ6GmK4I#wv%6Y_&z3dFg2-ytH!_xq
z@Tndjp>W9G_M`3lJ?7Zrbs7pu*5YZisb*@8fM;{M9g(n~mltarhUGj?E5d48&enO*
zQ8NW3v#LMI=Ox9o<A|3{Ga*BI_;)bkd^Q*z`7tVpiihwMN^c(60&ks~&TK(CEhta2
zgBZ;@uy^NWo*X$cyY*5H<F>oAmm)k^tY)zvn%bDA^+~2hfwf~~8tN`EIDY?U07RDa
zlUdG|K-TW}amTWJ>VmUt>(RytZ$X71ZC59%V9$pW4WaL-7;WLJ8tV{ssD6y~A1tk@
z_<*$xi+CP4;kZ^bZ_6m^vF|-XIw>!5qI$x0m7Q#THIR?f5Bv+?Qe4$$$h6-z!)j}m
zW8mZ$c!f)X)L3OFi!aDZu90Ul1eh!Xx!x$M%V<?D;o@0Q2I+WGmpO*uAWJqCa!RLl
zMH>hbhLYW~Qg&vU{Vc=$kZnii+l&>ZykP*n*I}NO`cGar#FUH`<l%I!o^O6UDKRQd
z`>Er^S^=tLCuYmbt6r}LMmm$i__-56%-x26B`d&A3ypM6z8*fAx2P!9&|!>?tuDv#
zMWIO>5~^oSCx~}Ayo&P%pim^Iv0x#ty$ti;j>GQ)M;kp1yyUb+JVrbDv3ZE+zh643
zUP4`Y{ct#AW#~vgjV8>ji5#c9bb7>Hifa4i(_00#$@JhE4quNxZq^gH6PetJiO8EN
zr(rDamu|o{^c?Jol>gEMJH)s_h!#5N5K7mQu3DCIENG%IM7=SKs3{2p9=fRoERzxJ
zt1FuN3nFOOf)8UWAeYj%CFszBMpomC@*e;}Op3R(*iFi5z5C~Mvis!t<!+aHWH)DH
zJI5mt{yu6M<J}Kb5C3?wAz(Ep0Yl3^2RJM^vJC;hG++t{wl{3S#>E{c>r26hmW>W%
zSa8(u++!lvYXF@t`qDX^uvgZ)6K>_U2p>GlLaN<OG$gY{j*dFRe=S=$%tZ!Ab|+v<
zapW3PI2xoih8^1txhB)dsgv&_n4H2&OL5bAP3d>7brDQeMg1H#a%rP_;%H?qwN*n_
zM1Zw<NppRT;-zISRW|F?A^k%@v=SwC&wp)@2-gX+w$TV3HHxENLp8qN!{Yg|7l@sE
zZ9QtEiGYQO+-6@^S@q#2Mb~Li`g@-0h}^<pvb&?;j1%;bbvEbPSKahF3TNv1u{-6x
z>dmnq>+P)D9_MvjeW<MfeR#4ZiW&K*l2Cx&7&O?fI{{J33@^${6dKqb5qe0q-2>%W
z$>GA~kOvt0M&j&C@)b60Sv_pZhY8CUy-rRu$;%Z+2*yah`pF4M^S&7dj+DfRHn9(T
z`bgFAAWtYzh)Ir2)*W`>J_;yiqK;YG?h-!>>jnq09W{)@hXe=<P=(ZuCT32zeYRD3
zxRa2cc<pqoz;s=cf)mCL%w}$_5O2T9shRlMvHgG{c4{44`6`Vs(=Rq(mFFdtT}3ky
z#BZl`Z;y3K32k$`=LEEYIxTYH^!lSq1EA|=XWz)$pNOX39-&R$+?YI0z8u|aIB2u(
zcj}okdig<^ocHvog6Wz-Rb|VN!Th1E8T@#=j`@NpWi9U?3nmH8r^WS(;&MCNC3+Jt
zN}dCy4*J)zm@hk6rIEzzY#AXl$EU-gdKaJ>SNGVDFMp6klC`?_Iah}^_iD~L*1SEC
z@u*j?qs$prR<>7q<NiMgT8i-}pt4Yk*hs#-awiZs<>xcdQ&G7t?Ns9?9HYxRwGb=I
z>FL^;9ENRhc?a_z{GCb9f^j4r2%V^sbbYx9Nn=T>5t~$CO#vA7Pdlyv>qc`ctH$BN
z2x4cL8mbIqcZA8h0WBum8Ba%twUNuiD~^w+Qb2U^_8r*Q5-8mGel0%Vgoz9D`hE|r
zPhhx-wYb2P_m~=(V_nk`wkJ2Fr#WP%;#w|9D;+Ug>}r!wp|-U1NN>j2cqc$f6^Ek1
zch;z9!x?@j9!Tdj>{=Vb;2IltLg54nc7Tzjey!2M!2?4!x;m7a>k5uYRw>cQLN~Eu
zBC}Ak<w$4t>wJ@k89!oZY2~2fsmaD?5{5(rXv|S%^QIc;1SRHCI|L3|5Y6L?VsGkO
z6@D5c3a1~BbLB!4Z`qM#pDV~5jVOg23$P2WaK;hLw1RaLYzRqf;d`Arzn6O*+v3$*
zfBu`>$c}bE8}|{%iNkvoN>I_7!KtK&MWmo$a4jO`r`YPyte-3=r@Xb^3z?sr&#4p0
z)`b;<?-wn>*Z_PhxmYlcQ7xzqa0Ro?)d32>Hc$j;9|G-ZVEGrQ@N1!Djz;0VK{^qQ
zz4wlqUq+lao?K_NCubuxg_x?a=r9hwob66h70rYpGD(MSFV{!WlO(Ctsp5e+rWL-<
zSt!K0T~S)YFwMD+M4egG6sAIQ9tDM1s7SsXkFl7iB+PQWEJOl5Xq_V0)}$&>3gM8;
zc`Mfg6Fy%ht_d2(M10T~Xp@<8>?D?@@Ffz5d=#nNwfa#5gSad);AGD6F6>uUi*Pt8
zEd2<C9I^5*=4@{fiBKB<>@-&A$!aSnD)446JrI+^+}_8nW8HNq&gr?&%CX)3wAZIi
zmuJI7J$>}`BhMlI`FyPoC7jVl{q{a(*j&+_A2M$`cM0SD<hN3FO9!5=oAz3VKnN<j
zahAJuN3vwa&%gA}ZE;hfe0DM<3sx`nRBGmk<ndJnOOnc1SB6%vS-bjTVN?8T32N6m
zH<aGc{rI!>k^A}!(UzaB;N;p40|^hFJAJouA9f-|CxhZf4vRGCpD9JA)u+xBS5n|8
zkgES;H=&ZBT};~rBuQ3gHzx3xMD?L9u~fT?I&tM6P{tR-1xdA2N58XVV6MiNHzra$
zmT~tghO30n*MXhrLDxw9oOy;jqlQ-0_jYGwtczeOyAQO<<i};|x7{a2dfK#4tZTZZ
zYIOXP6`D`_b3JGS?2U$*Ru8PXnK3EXA18G*qw;MySvre0;r-*1rv!?f*I2q<(=%;5
zU%k3x4son9U-~@@$_PUio&XsKYQT+%;`j1GjkKm44H5rncSJW$ZS9!WMiB~R1x@tb
zd-IH;5)Bb&BqsNS9koY%ltPy7CPP`w1;@)xbx`Y|>e0W}HzV6q;@u8?M=OQ|V+zl5
zFDfw*VzVNCM;S^OIOVH<&=rv|o;mulFi6I!-8^mFh!XgC=p{NK)5TUjj&GqVKUYK<
z^P-Sa{#bMBRNnh0De!4gpzR5Mtu;Q~^!q4Cz{7l#8Y-<+R*=4U`9rcI&CE(#H!6i6
zqDyYy+=+gw7?tG5Ta*W!yTO~iNrkv>q0;JgykHB^%e0E;>3+}r%#7I4lG2!N+F;!(
z!Xk0<q7Z~VGcj9Da;?i*EOaOJen-chne4f?Zq@^WSpKPm0yX*2hH(M+k+vSD+kpwh
zwmc3nCd@T4{Uxd*Z%x#}NS$7OPQw3&64}E~^<0+Uy$hoIcLv2Foa;Mk3l83#G;v+u
zm&y?0v^P|CeFxjnXFX020sH(oq`K?EU8*-ybH=8UT$d4#?(@!dsd-_n?C@d4Y3`*L
zLcjX}$l;Fe2dsPO>EDO_pW(3UU1T2i&e%1(pKfS3?**g~HT!{xOq%eWyoQ#&0ZL^w
z2K~g%Gb{UjlGan@sx6WUx_+pKmNS{n87bE&sWo#6>OEQMG>r?cVuDpS9K>as(h$p{
z$uL0>t4PmShB)JQ%4|NjBb$YtSWjCiJH7fWFyCOBPvaYjNr_b2Pp`hL5jPks;JKmF
ziiAgSeez{pyd*zu-#l3`_Rqv+v7W8HrL&zW=<1Lg2fiM8ey<4pJ}FU!=@Mk*A!14_
zPfvR{BO{Z%*|9_HwjE(@++abr12w!{wdZB|f#3UJpGD1<Dhr})7Q~YC7^C@MOk-m$
zq|xS|2qkv)wY%+RwzjUDdYBgv#TD7XK)P&A1&BWuFvMv|dOuP5J+d{6oK;JK7OEX0
zJ60p1jA6xL4{NtoloAu|CzQC>dz=HJR~8TD6-Q^C6-UNiGh6NK*q_ufv<+Uu&4^U5
z2zG^ey%pBgcC5}_iNA|AhTYPzMj#ul4$Phf+E@vSJ?A%aXyagwTAAx<ZTxpZYb{zL
z<N8(U&XBCuL>r}O4|gXHiqbQ;!7wU|%{FJ%+0)Nk_2l>%lop{UrG@2j4S(YI{RoYS
z+6RP;i9*G`Q4#7iEY%cSKXDX<P;+v5vb@*v%`ALC!$XB5$94D?dK6SYGFS6SJlq>a
z^1t!_>{!9>)&+Ur^04{#gO2%|wk4w+d7VLWq2_VhfH3gb9ePp!U$fcFOpmJE&&*D2
zs}5_#k2-Z6<%_#<$9{3=r}a%hlf*L^{wU!n1n!G5EEd}}k`kV>5On6Ir#dGpTTO3*
z-wi-}4HPpg6l7&#K_n&?;gHGy<-)_=Je9ZWy8`v24z+1fJllMP75LWcwS{2x4(&o0
zAZE&T@3ZZsMd!Nr5?>7NZ7cP;lUJLbV}~{F`PBK7{CMMx_C?NFAKuU_)W&FowSNJu
zVF`T=0pLoXi2?*9VM#~YNdWjecS8}u?+ualn_LenbDdx43gN+jaoiTP*%-UI{{7*%
zVk#{B_SobQ-e^-O3j*nB%ken}K$1xyL<&wWvAxhN)n&hs$t$m-_$pqRs9TPaL-)}m
zD~IC%+_%DWv|eNHyX#R9NFR{zT|n6S?XFO~HNg#J>}gpQI<Z#wx#w!ithxn;XCrhg
z8h|ElnA2dAo@dI<!FF_EuPklO#^yfw5a${9^pg;3|G(3f;oI*_Npt`L&0CAr4q2?O
z0Wajvs-FDsENwecmksBi&D@cc1BDNpy35Bpn3_lgUAc+2C37uLv3r6~xsTlyz(3ZK
zcdy%*gQ$v*zryr?hg5WFoM>k)Mv75{@+TUEk0O<mB}$v=`1UR#da^schS8oc$ej`E
znJwy0f-bYZq`T8f6L~+^xRuBv3`j>f@Vny1U0q0Sw+DA|I9cm&qI7~^#^c0V02Rq{
zqxr{$4h8o_{X`~9>G-TvSGsC#)vY@!D`#M%ZuDNe4}0~tZd|9$)VCjl!-n75`$sqG
ztF<u}%tM0BgCOlm$&j5ct<pp!an!31+5wkzd>>C!O7EuOP)ooc*AneWMH^GSa17rw
z{6vwB&WOyN*@2MGEUps!39ILM3|vbqRJV76-o{sV2LgB&Oj`D#fOTsHkO7p_A=Nrp
zYNqP_iDSTpmh99D^VNv8Gu$l~DU%vMVpPuqhoDz@MV!D?Ta5S8)~$AS2}nlEt&AwG
zL7WbIdNbH7aaSWwVu$+N=?G)ukLXI>k=4#>M?GU67*yH-6YoEiw};-g+@rlo(0~6C
zB19Yx`-a?Ntf_4vT06~=tR+_H%s?nbj^u@Eb0<2Y2@umA0j6F~#17Z?2s<$5xvgSv
zRoctZu^O9%@8`wf$H;oWdl?V=(su+O&Nd4@6Kr86u}-=YncCOh2}akmy$ai1?m0bn
zCNu5r)%Q7Txe5HEKk3LHsw}Z{K-^-v!jp5k)<BB)P@~qH%C{D;IrX_rm2INUZEmpm
z-?oEn1^eD$57w<0Tq|#iXC{wm?-I0{o@T^R^ft1Pvw`YQ`}6JI8cp54Z-=m3ZaNP6
z?0z@iozE-E0v!%z-o_Pd(H&x`1Nlo?sNO9!P^~$!h!4Tj>V{IGC&&cz_k_i{@4o+j
z6q*0*jsN?5@BI=RZy?!qFS*h$(xcS$gYLBFVMS^jx7;l)r)oD9fr%0#25UNEq!VF|
z0FV@F7+O;K%G!}dwJb!zWJ#^8So*Q0!sC+tNDLZi{v#UTPfp<9Pdco>_gvlZiN=k5
z_nzLPL$-Fh7j<kUX9@hH<0XWZR}>J7CM-cXZ%xguH{t1rjUAxxc2FHRe;qaSZi@Qu
z(N0nck-~@6K^KX(s<q9Sd#}qQIJ^_21&!^f#g<C6XNO$+f%{1U+EY0m>r@Wi(>>MN
zIpx{J5hP=VuFHtP3DBW6033btP9#DCSaN8hH9+hI2H!*j)IIt?9%fpi;mug3)fjb!
zvt`aoYC5Z=0>-_hFwMr#eH{IXrOii=qdlwAvS7Dg4oNqP4$(i0f~So)q52fb?{B!M
z9|IAd7_+E?1)Yj(l#HV%)<;$<#T5EB!eo9m=3gY&dRS?$rz0#&uI^IJTEx0qucS5?
zl=MHFL<$K-*S~2w2R(x&P3tT!?Az_JbJu;{)_n+xl<gxYzw|o3AeT|xJQSGd210^(
zfyTgcq*>LL5s{~KQ5Z+y0_{C3xg^x0%wmiXHzE&942wQNy<lBqh;_`pAOkhzb_)V(
zjv=w3iz<sJSx)|Vh1|zEF&ZsejDU~%n>p|l^q=2}Ix?$rpKess4dZg4mwr|Nx(qyf
zK8;+6C@5S~N=B2FrEaaG1SV%i6JivmyR3DX>gg1iMGVidl32~P3D%7E^Jrha;4~@M
zIwY(-Wm|{}txw^WC$KPoDAH<5Dv98rU95~(U`Gu;sa~DOP4BIzy6T8860o*n3=<CF
z+<Mi$&g4BygO_Pj%<ki^Dz_}M+{fc9<&etzt-aflXpvS65Sud+tJK>q0i$)sV@tVQ
z+F`d8&YA?vP-9P<kx?&dsE8VqV*V>2U|)@*uTTY!|B_A|egF;miY+3(^6?N|1}zD$
zD(hO_ulbV~JYp7CUbfK_32Aa}=+hY-a8cs{-kd3oA0U-5ejH1KHw;}U#e{oBgc7q+
ze^q4D^eb<3_FW9g3d)=N6tASZBTD#l^>nR6vEoJuCt-F?GY~k_N`*(WIgO!^+G|VU
zuT+fJv>zkAJF7sQ71h~c!}fjFmEqZ(#+b%I9Y=;KP3G(mjVA8EOe{<~I{f5@i0Q;%
z>QhO8A>4f}FJ2nOX6i~3mPcSU@!+PhglDl%7v(6ZyN?l|LT}b@6+pKO3O)+_l`SFQ
zYD>~WubKi=lc%Ii>tfJw+BI<xDbgw2330W$%cQ>Fv*Y;o&gw;u=HB)+gmq#}5td%R
zV{w(NP~mzk=L31!l<=oL;9p`0i)knDF2j0}RaIGaMfmBWuIf&+sL&V#S`-wHh$8B0
zD0rfT=Q@^Pi!=}avSSfLuPcv)hda~b4S(Kg(bWJt_6Y?F6@8`!=R2>mL?UePwbruY
z{nkbfQVG4vF0wTlg{?qRiodd%VPdFgKljBG+pUH=R!-Phtw`x><*HjdpcT2Q72ABX
z&Rk&HS&^&M`QUJe^hGB<!C^2z_9_}qR*Sf<ndAZS*u^AAnA}r8_;dS*{6uuN56g`K
z_LmhuZ_pKjA*@!>Wk&I&Mv60#2*Mn#1`U}K-4)ev`ZA2W*BK3B_XU?yfyuoSC)m$-
z<NuamKX%kJ?9_gn=c`M~@qWeL2Y%>(H?+E&VBU(IrUON(pijXp?dCH77`+qR;!S>U
z2gh<{K#bdr^6>(M7qYl%OuC{o1;QDJYvDplnRLdcIrvktTAb|w3XZ~WZ+~{|R5$|;
zob}oU;g6DLC&8FCBuvn{Z~}M?5S`~G?MPHF5Kq-5%)KFyLOr;@PF*4m`e!#2p9^gS
zG>cLrQl8HlGiIC{1xVwuifCrCJi#_y4@S{oh5xArW6rSDsLV<n-y|z$X@#~}nlG7U
zRn1v%<7ty>-N4J|l7GnP%2fAchyVi^e)bx5VelD|V8!_1VH&J!rI|R_AjVljU?|0j
zruM5T3!Sme0EE}h9ZhKOy3yQffzjgYuAS1tQ%Y8ij2d{OB#FsjIKiw?%z!z}Hb$*O
zV5lO<rAP%!>#AmDg9=b1(fPF53M!Z+yA+Z&!L;#qI%y2-0;{keDMgz1GQ_XTY<IKo
zzOkvLh!iPyPXtGfwCwsVy@sVKW2U7xi(<Fyi8$I0RT*gQ$ED<!r^?JmKj&j3*uwFA
z9DVh_u)pK91X27el5yUW;TW)n&(2E_AnLEiq0pU91U@yAV`W9~5wkPy4SX8CEZCj^
z$#XoxNYn20IE?T;MnVm72_~4iV=xSi(n_(Nyw8eZ4hJj88-W!=PFEsO4^?)#9kQ`k
zvG|!MYcE&i1Yg{!TQS*R-?JOZ(e7NGzZeN()tqx6XQ48@E{k0mM~*MuR!pC*Ay#hh
zH=+~kASlEVD80$FyjWBjF)+eDo2+j$9Y(xcmCTprk?lu4;0T%ni5N_86Cr(EKxqd&
zRavbZHtccq2KdrPLFR2l*(B+5z>JcIqSGT9t`Cn{8KSm<a+L+adMr^t$s_lm2h2xr
z3<ntoKU9nXouv6;ICzlLO6P680D6IhiRZZhIkRNG*Qw62m9C;&!Zw`F=KCg|!p^=w
z<HPovAYqTIR_`H(`)dvcV=yz*?@Yq*<hjz8M0@x(qsXPmcf>gcW?HGwNv}?B0-{Fo
zr1^i+s_e+elKgF1H$>?vWdX_V+M`yaUBxjNV=#*|T+ZR@1<vhtW+#i<dI(_?`iF?G
z1496XN-N}%<2go;XWUNN7@64H|Jb4Ijm&HgB@r{<^2A6~WqDx~^SJ&M#j^Dy<tn~~
z6Ga1GmmUSqk~#1nL$Rt~7EM0>iR!WeoPGdU)<$cjHZxZ?gsg=1qI6^Fe!EATg>c44
z%W>h}a8|ISixaV|CXQAau#V&zD_wA&Y@=YtR~X^EvYOS_Y(bSvJYz4(1xWWGg_T8j
zf&+)AoMqQ(Vh!vtJ#LZ(fqlb{r%KSEt?}ZcFN?;Dh2L|uErJp}@a@9&gwATSp3GU5
z14M39nA!x+nPZ5&mGhYL7-!RsY24?b0(T=c8_}}Z%P0D4IniP4^mfKZht5sw__6`A
zdJQ+gSg%D0ZMTLqfWWO~2w*X$vt~sc{4k@qMn9DKoz15?wkajDAG?Otl|}o9!%J=C
zY{gyJ@hupH9F4fcFkMYm+F)U*mqjLqGYB#oE;qGYNQyk7_T-8JD`kxZruc6Ww+cXF
zb8PJcrMOm-o>Bf)Vl;MV$;Ja<jXw<NZYV4j2PU2qAq*?%Nxd$M1mm&4!H3){V6R8W
z#Hg<)OZuvTIO7#N<EtmL?X1JY4ELgk(#t6NFZ>-h%L@M5=@-(oy8JV=Pb{(5VT4^P
z7D|Jc&1PwZm`zGeT4Xj%aI$;YmOp%IHNklIAzfK2J0~55_Xf=*Kxed|<SxEtycMOM
z3tkA_FdYYx&U1#L?d3PCIGUyv#+If-(!w?|khieT&I8r$R#l)fy%+sXZHmlmr<Q;r
z(|NRFv-&OLy9>;_4nP9N4Qwse9|-_6a1SxCEhJo<2+}HxDG0sY7K>#g^5?!%M-TAr
zd9bfdM(XG*yaa$R`bzZD+I5XNOk!{7pjnFYvF?tP%650$iB_NC>n5`Qh$Oa26@5GV
z*nGPFw7NNyz~S|d>6j~bb-hG_XSsJs#%cW?{N|@uKZi2?&VlSMCu0z#cS&XTw|bW@
zg)#hCEc1N#KfmAm@Ab-dT10ajmrFp^eGM~;xKzW^x_26{EQL(6JdawqusgV|I`%or
zPIUQ#a=Fd*tf|n^!@u_X4dKa_&o^32WK_Vc+GXfaU9@aePIR)V!Mht@Tk%x;86^Iv
z1yo3D`~<_nJrQHF4%3LzQUy<|G!`Q(WToOHUf?T(3Vvta5cq?>ijeWJ{IQgd47Ynf
z$Q;@1Z-`zx$Hca%mZ}z$7dStDk%`%+SU7^4uY}>HZ3{e-QZ0k;*caeDB~LEwA6DdI
zK>^iGqIIf3=2LDBTgzNv_c`q7P>8*5?{w7}`dUqGJ%g;P1~}tQ7Ol+-Tg%_Y1gBM&
z*0<WC$4>V>vo}L*xCW-d{jP*P*T8yUScW*?%1rXkLZ9W@xJHHZrK}z7p}v%+h{dU(
zmMHw{*sCEL_gv<kJ$kEY8Qwd3p_>rOgjK%26$PUYds};{CP~zLf=>kwq!jz$6=ya1
z7|`O0Nhw80;9b`NHQM&Wt>mAZCmN&?Y|d#TCnG=g;8ter;S|jMfPCwW8uUHe#D?9?
z`$^`*jQtX`iXMaN^OQ_h9f(L^dj0&THfZcc=H=hKofny#5R?rf5&bFe3<K5!$X*8=
zxAQo=X_1TjdcJU(qwxF1X7B3#MiO%D@5xGHosq=a(YCdcAbZzWU8&2v!fvvaEWgff
znlW}uueD<h*xJP1Ew{QhOy31z=?*((d$pxq1zcB2*QSvcq>=8BR8l&m8<7U-?vjv3
zK#&%s;ZKL4bV_$hcS)CmgoNKkWffLkeZRZEyBFQ%d1lTzbLLE)F^5t$eaBv-o^D$Y
zjUpFRwJlm$B}JAM%s=SgJuY<&p`F&nBK1zi2(ufPfxTsU$xg(T6%}>YN$$018p&(N
z+4k{cA%wMqxY#oS+3nh=oUGHd80k<#sy$1MA|lpu3Z=Kg&GaGT2FCiBT8pny+Pr+f
z9Tm~*R+%SyuO02_F{0s-GN;bHy9^!OQxp?7lnlo|u)P*lMDVY5OoC&BCv`-D^|?jO
zCIO_5cxKMIUa96*%C^;eTK+EfAi!z{&5M)l7<1V)z=&JjdL$D$;PWS(TXhkYMH(Ol
zMX^xn5NK`c)`6wiu@>SN6SXj^ttnFIeqr6_Rpr!Jn*yamA3F03S8d_;1@4~qaci>b
zWhGsgd5&c@!4gSy9JZU5yRtJOhmkdI!K-LZSoLCnnQDD8WmzDh_|xmkBct^GVzc}h
zBnO4PPYWw5&I?Bo)y>ymvL8tr@o*hm3|JX`xZT2Ti66yAa7vN4V>Ea0DC%CW7~iUO
z+>N38UQj(7I<4=w9F&Q6Y}W*f;yE#d@!(IZqv8z59A57%0LeWt(sJ)NhW1BWG<Qh8
z^nFQVV=@9F8ZYjaqEteBsiL3nZu+!9V*@9bJCMnGeY{!@#V653P`SSy3Nn$F`-!eV
z5Hy<T*48V^NVw>GSh1tBsVxbXCf55tn2*yfW2{t~;-^*~XVOL}qF2zGD<x%Ta=P;M
z`PDEa`6ud>tZrEBp=mf;1J@;RSv*%<7!HpZXJKuwfp3)x%zb0y6HQai{-&erLpXy|
z4Qt!dLW5+xG(Q8PE3a`Iaho5K_+vg=u&O)@Wr<VHM5lGJ<b+)fY3+&9IOcbP84e^4
z@4K}PMz=$ooi^>&K9=?C6vf+eGPT;8_zsS@Y6w}prs<EJ3MsWuo>t7;(bu$RD~-La
zouNQ!TC!1by10y%EL2Kl{!kqL{w^P(B{Hya*ZXL*>H*vQElRA$Zr6brGe}|hmoNi4
z=FyG$+Xb-dfj1wRPe4Pyk&7shP^Z?PfJV?>uHTH#Hz;qQrR1}G?UYYZxA|_)mOvAK
zU5?o*BWtd-^G&{8eRO79ntoaQ2a@%eZR^q@CYu~fRyU(p23xWVB?{=8@XH@Y9l*nF
zICvSNrJOJlJ4ei;Q>P4Gf0W%ErVGs3A5%7v^8%}9HoeY2xSZbynlg%`HL4<=pQ%Z)
zUzz3lNb)9O#(ulDS!P0V+SE$Mu^XRic?zrT0OgecIYQ!5br-)!!U2ifE9%fRr!bz6
z+l?zsU^`)>nsy<5gwqQ51zzC0S9<E3*M|g8*Wo=0WpN^$s$O84;RRdqSoXeEE*V58
zO#Ud|u*h;yz%w$?EG1IyqyUsS3V!pIVqCP?ILC;TAr809Ti=0w2YO6lh*E!foh-H|
zHESXz2FC&=d6_0+=B@<?6IC=4YY$Im-TcMac}J(vSbY=u7lz)zm*~7xsll_7@jmd!
z*Pe!HAS_s&+v$gNnIV`>bEzt8Tv>-jt7ktcqV=G6U!T-D87+EqnC-%0w#Mr8dDd#N
zi~lgmaT|rOIJ7%WY)a0ZPys9f$SmJ4tN;P+0I~R%bDY|6Q8s?(qst(7sss`0V=fSj
z%IQLmy7rsU;v2jo{nW!zZ3D7k5KKzkp;lwZ>M8fo%z~Q<z(&Q~@+<>_!5{F}^1BZ?
zI@%bzaL7fc^*k~2wSur}B{fDtL>f7TGCItFf)(Sie-9?5n&3I?3&{(jaI4CV{*dgF
z-k`SoveuRRnrS{YH-#IiM6zxrE^xtNOcBZ(iQB2Ah&2y)u~pJAkC`Q8c@L0QV@wzZ
zXb<?kt#P3&Z@c@oh@<S-=Nvznp6QXtfLSUEzeBi_@(xP?gtwQ_&HGZzS6sPXetR0Z
z;IZ;U-KlvN-TmiDpJ7DDs;J(O^}IR?Kc%m26M)Jts~5)G3)|z*3uer?cP#gWe8&qx
z;`$jWhVP8HYcSygj1=T7Ed=BVca5spYDUn<&Xn*ny>+=+AY*g4_vb4&rbq96Ad?4f
z9MAz?>fhfy@b&Tpdvm=nm(0E$8JL&vlecP<=#sicFDfamWYr@|M*|+XYOBA5xri0T
z2ZcTm_`w!q@Z(;@ZjgMvk0y{mS4_@bTG}K`^L|m~9c2^f2hQRqst=8k731z;UAZFz
zyi|Nn8MyLA7v?`NcldfGf|-u9rM=ykvgIpsTTTGCv7ORdyw=73P>?J-VQ1xmehm#0
zKM*<6=~aw8h)>?(=E&!od-BnA$~f>&{jl2$Q{2;Bazo?n?32&C${AqBP~p>PV<<Y2
z*5DIRoj;glmPNqTLMxZOL?sy0WZM!`oAbH91DAn@z~;-#XkUqJNy@5!x4qc55<ZE8
z#-GAH@%rh^TxNG{6KtXvxoF8zl$S{kVt3I!OrBEhBe=7A9cX{JH#R((lwCR+B!ii$
zcHkjrz6WSDuCS7!#GK$XGl7yMX0c{{5G>dObgRxC;hM#dT;R$CXDDxDa<C(@$__SA
z6q1m>7^WuT>&IU19Szwe9dXmwGt_`%T4`zodmw9?Q4h`7-20+f)`WDr#72_-q{6GR
zh}^87o&Q82V<t<cz%fUV8kbtDi7P{I5N)imk<hDZfCXpbX!-%H3X!ChHuMzi?K_6Z
zhHP$AJO;%ZN{efs2cihy?ufF$wy`<6kHA$E=}(o7AUarbb0lWRQ>Q~dET_i}d@`(a
zL`)#8y8bDLk1Sj+ewnZDPFR=!h8xnWYMKX%kDfUoJNAM=$%qJ2G&@GO_{{A>hQoKn
zAWC~NZl-<OGGL=NE1C6%sl_RMO?*Q<&*-&XQ9Rvii+WI>d0Elz-WA+5(fDHKSIS-Z
zQjAD$-RzmdP@DzGG74IgFjES}{sWaK-c1=&8|k=Y69*?RHFYQ$-`j$Z7vJ5-z3wo?
z@u-?9yI{<6pmf4GXOeMz(#Q<A8JnJAjVhog$y=rvSvpl2b~4ABXtmjw3`>^jHEPFn
zFsfVp3H0S_!ag+z_wNCBXe}aufwBI+<@|HY&czS(4|QzyznE&t{RxW+_Ump3%3W&a
zjbR>p-OUdpIB%&YLqk|%9?R}|W{6;_1q_BO-h7$zczcKBh{Pqrp$KALv^t){)_}dy
zjuXEg-D0D(1<`iYGs`4>^H3=qq;9;&3#U9_q7<DKVYxI!mXe-FeXF>TDy9@FEMx%8
zzKZ!ii-qU&F6=_+*Ka!H%@GUP$ro|g!pGEC;hFQ~45%vjREu=f+DdYOeG-nN0kEx<
zt?-;x;K#REoMz@WMEIUjq9#()wb2{!LES|Q#S%&;h7k9{!06#iGcP7<v>2F=sOjPB
zqoLs7q!!PU<!o?KY~AS8dWi+aKp5+}&h@~j#>(Y0>g4p()s6M74D=6N=)=PXi5YR-
z6l2xWk(!w(oqL=?`va_Ff-{4XEH>{N8<%CkPc?}8AW&KgX6xZ@@Knpj3G6`RL9~3f
z@M-Bm#Xdlb!>wq8PC~rZo}rpzF^6Cqv=JW0s>MaCd0UCALbC48N6Y>PcCI(Cb?flC
z!oa?%>m?qI>zb1b*y!FR?zF-#LZjY7XRb&`NyF`)dd?JxU|`H*JolQ?YC?Aem(bTl
zvLaX~vm`fP%VoX?il*4NqsNEBsmzW#m-^Ox$a+=j2zMZxXeMMH{kj8fdK=yt1c%sB
zv<q`RYmA>QNHDe=Ou{>q<r6oYAbJ{#;32QS1fAHS(TAt|66y%La(KNY6iCL3m2v^N
z>WD@Lw+Q6+{cVXt@ho)@3k2NQ+Xum}MaFqR>H8C*+oejql2r-x3R!Ue;ITbf>VUTN
z?7II0XHvJbVwZabZOS2weq4w0Dvs<iy+uqB$@gcdbOqn7NqBJ3g9$RD8xGI|2Tc~K
z!-&bY@v}~ZWP4Sur;Q@w6LaZyt&&KFibkvn5W7!$IH2qeYItp(2;Hh(3!@)UFK_$y
z5hMhM!rZPw1<q}MDv2?*oQd0hdUj9<+lS?MGWX`T9W8R!M{`P{Zsr=1I7H-lwd2n|
zMp~GaIUAi1(n=O0<UH7?gDC0Tm^KG!p1#dxJkAi`Rzx66FM8>psTr#4NNKeorX1f(
zAw#s3d&31yNl;4oL=ZzlV3X*n?u~VU6)EhH?#>r#>L(1F#-z+@<t>X6H{0i6<CRob
zYm@w`Wb+VQo}h}j!!LrQ{ABugh$6)?(rEY|3)b+$j-3$=we)w5Ijo+p;k~1?xr<%i
zC*zpV?qPLP@&GD%;r+fkCXXYmvo&E*EMG-io__Uc*%G~sVM=xdlA^E7YsHv}^6d|&
z^A82%8j|cqM!+9mw<$s{F|#61h1}%&%pWi#VYNylX?1U8mUSE(|CMF+k#7>V{}D$u
zdJzMfx#R9fat8F_8TYl2GlM<I%YNhl?Cr_|;6EIJTa5nWhRh51!Eo`zxgRms{o+W>
zWxJ&t84+ujsq+#<P&N}ZuP+3)cw+6y`@`Jf4N542d%soAFDyXf-!yz+Xt=@&iC;}e
zMIQy`z;Dopw((RLo2R-f8$P)N^n@%lc6Rj;v7?_}yBho!Iu-n4I5Wokrrg!_4V({4
zdG`7*X6?KKZVn5pcF|bMh2BxIerjbGVon?g`xI-@{f<j=u53IuL6|X~vS)qY9m*)n
z3|>5{&WV})v$qYI;M_*NLs*<3s*Z7&6stO9`;o08Ym-FT`+>WbE)$8twqowM-Ot~r
zAibx26NRolf--@%M=5;lI32u%cUf*W2#%+kfXs4%AmPs6`d>Xu^Dk1f50kP4u7UE~
zKE=Sq;_*>6ZoU6D1AG8ES<0x)7&ZcTC6Xc`0+V9pvDN@)Q%f7Mmiy*`*v()O@Tap%
zsT!s|{GzvECNY~Z$8ZbPiiu>w;rUyV;4&Bx_@Wv_)-c3J^=XExsD@Iz#8jvrU^TIl
zE=ceWOoxjj-Aze}c!nSZzKPI{DX*$aZEnatbcC~1C&>;qE3#NIF-HflXBW0y*6iw)
zBft`|C}$$G6*3~Pv_w0PJKc{?wt;4z!Aq|vS*i!^UphIUbKTH{rN4tSr)pI$N`83R
zCu=O_kcK5g`nFMxZg~T4qwl&P;;k-5KQ#+0sO{&I?w^_*b1mW=@b3&i&#iaI+VhX4
z9>M6Q@xRmi^w@HqU!l4GP=AuFxi8x4X;jYuS(ePyZvTC_gV1+p7JVp<qDC18@V+k4
zrqltAGH(g}H0mOfl|FB6y|72FVWg=HvU-<F|MEE$?`4HCg;e8L1B&7Ul=hzrvo|!h
zum$Y={7bKEX=Z6-`_;^4xX$nGnsR}+^zi9OL`KvIn}unUnnXjN?+`;(8mfwLS7e&)
z?sexqHc=sIswKxxcGXrD$@0}I?A(3p<9~wVAS{w}^!Aged>RGSSdmZMI_~;Q^WqIi
zL>v(DvnW#A`?5@20$N>G-KndeC{RsT4%iL+iUo=L#K;<^WP=leOom>I@IQIz_WD}>
za`Kt}15Fxn3%mNns`3$qTP4L@4fyF|ihHN1PID(1oK#M)?@&+QcfT_YfjNeCSsdn+
z5-TZyILH8TaQv73UJ{3%zOJ#kj-9ck#TSt%h1Q>60q1vd1>8RB-MCj6517Z(X+?CM
z98s@>{0+?OKFcV}(5Ip??nmC>^s35)@i*F`*M_HzNAhAIj)Sqtt*Ba{O;C1yu5Bjl
zZGS3P0onB6-ixQEVWMrFuJN`kg|CSa@7zhX3m&|oR!ja&gmNTB6|U_iLUO6IoA@X3
z=r#2QL9dq~7Ks^3iysXOt#$c($xP}{%pJ1=Q7+dz3o?+o6o{KL5&zZ<%=8WQExwLE
z(v>AF7g(>?9xGpWQQ;cp95tQ9oXSuu=L>`|4<ra|NNy_XjwFE&w~0sEo8dyIeost!
z3zv}2nqbDtZ}<A#B#pV)tt_TRWMm>7&)3cV#7WS%i8e>7t(iL=*FToHnbfN*5AHlV
z)t=5DPFj4+Fa$Zc4|yc>a3*{ix_;*4(9llP48~DG`U}>@qu9ZHSHUdT@#{mX1t7TG
zPogDA+io%@<Oe5=;OZ!rqPOommMA@1g|_f2^5i0siR==H42p(Pt^3f6ua7v2lpTr2
zmrfZ-tgU8Ir);<*`uMDb8h?-8#61-g?Zu3Ja>SHe0w3gYyTAf!%o_5&v9Tl!?*@yC
z_6pjHD)%I0&Iq|w(?!b@i6Z-Y@{{^lZW0v-Dd<OwxA&@{-Ptor!&t9TlI4!;DN&m$
zMQj=*L99URJWzF_n{`AQf=#TLplQ^&CZCUHFatLiFD0tc$++Ly<%{C`+ycKl-=a;-
zdT9u0l#o68iFLh}L0-;+*Hk~eQ2nTF+>Jo-wznWjw81ka?ibf#)u(7~Ygb@|nyavP
z^3re=&_+3zFT}tHG|&XV>7yhR=}IrVyfetX{n@KrkzG1EQu1vpTlvx;LoRhtFyyEt
zQy*;O0X>vup=NHzCf#JK=ov~V<Y-m)0FQ>isC+w=b|GARVM&kLY<})WZ^+0EBCW7v
zQYSe&8k?KN2<wULS#(Tgq;Jrly4Qo@Rl|@NLuRCxAh2y1Q<|-WUT^U*P4Ur<Yn1MI
zrxU@P)Oy5+H0GIv1nL#qPsr22N#)#nh%<qnaT7BPZrix3Bg70jZ5-;I(ir@{c;j|$
z>Wo?J)~yws(YoA2Ti~k8VFv0}NVsL4fv`LAFbf$Nd)ZW_ZO`%<xL>zrdJ$^swIm)w
zRJJU>UD7`r)jy4YGD%G%J`Jz=xyGl6MG86`bqO_)HFC0Y>;dxHn<~ghUS3#@oVOcp
zXN@gcK~z5TWu#Sx7B5DdFkCgXK|b{KK&_=?RuR(T*Om9}4^6*sP+d3M)whhG)j@Yt
zeca7;C_6jZyD)cU&Yo^L2&eqmi5P*oT&xe=uUWs1$r#@tHWo(@-7aP!2daDgdGq!N
zN6s_D&+_kMRd+G#ZoXBd7OdJ8C~gp2uxmZ+@nUW~P<g^r?d}i&ez#s(N{_!|&u{-G
zoN?BtW=Z>T91~wvIC$=!U?SF@Kx-p25x?Ue84BbhgKDViBzkalX7&a0*;5mIXf^}}
zHch5B&0N3oIKg0U*F!abxP>j0xaKSUK~*N&XQXrI2RMWO416v*KwJBVcE)yQUq?{D
zq_IUK5n{`>Gdv-i@pFy0WuwKmiyjdqa!=o=yj5~OAV<)U=f4vSIp5oRc7l^4rh*8C
zEQ8KX<0Yct?~PG@pAn^*9v)jmFj8Cn@gc`1OlDJI912rg1ZR&e(h5C8pZ1Eb>T9iJ
z`vdhxO1y;T*E7D)Q=&PM_vY@vpK6)Dj*f5EGsn682svCm^-fI{+Y6>~A<Osjf}Lh?
z8h++B_*`RR=2LegR-c6<Na?p*6z)&C_Um>>?Ph(9e+k1DuL}Q+D#T!QkdVi>MZov?
zQ{0HZ_=px1W5yjxTGlAScfqhJr=5B7fw%mRIX^(jK`;0U5=`eQkB-Y9py|eE6nRJv
zDUu78@me3>^k2IYB4PD~WN`!GQ5`Uca{I5knD63E0B&BNAi7?&to(F;QAjRTGa|=C
zQE6N)-92lQx`9#pfexQXRlCU9b~DVx=#i`v;X~}{F1+4qVyA%)_GGUI2s0Hot~uFI
z#rpO_NJMUNGvJBt7pvw^sibKvH`!D^Dw5e9l1{8!WDuP~JA>N?r)SyeeN<#LbEfj<
zo)jYWoDKMzG#=51YUp%)<$)G_ZnTB@$^uUsl^sDs?Wuz5eoh6sOi4_zIMLxmhcK7U
zCpvGCB=hqV{SOA+H@OW)O&hSE^Y|NU2nh4sdG7!t=E0TDMwH8Z?*?LpjdYY4pQkUL
zAR_P0w~?A0wyk=Po8b6pJLB>clBhGXd=6V?7@3q_p!%zbN%Ok+ksogE&fcAQL)ffh
zHM_5ZbCv-jCE2B{kcS9(>Z{{dz13B3kV8ecza^Nfp4OlhQCr+Hb7LV?UiEn?Ye(2l
z_No}ZrWA}yk~O#P$~(*JWYqm80{xT$(AhpgDmpjAMReYb!BqFTT9&QOkxQc#6}B>R
z;A;t?M}efIrzZ}0@X$+qxZgtutShRdz0&lT;|%z4Jx(_T@$6c{iPlmIPtjf0)$uG5
zp&jp=&sX6a%ZI$;DL<5pDLYY<E1m-BDiY9!%BW$jXBH64-5oMt;ii4Eesq}7Gm|+I
zdi(QfRh8s(f`Mzad0Z+(C@#B7O2}_vpha?gm>2A}T8aj(HebG7r#iM0va!yMMr|Z-
ze2XNyd5`{;z3y=Lgaf8U=T;poe44mXf%MwDiL<<Ut2-kr4*ORk9-kS$)0S&sVCxir
zFk^D5!P{9{n%Nm!eF=Ala5aFg{{wfO7Zv>An1p$;+r-94`gV&6;qAg8vYOHdbcm{{
z=3DKld;<aY9G?&H+@ENr>OoKOs1uL`#pCp_8H$DpHkJzs1E;(Xo+^d2KDkMjE#Wz>
zsCUogC~ynCZzJf)m3YGMNi#fxY8P(+L(j6Z{jtTz0Q3(KQV_=k+zG^oYSm6DNh{Ew
zT!I~iZkH3S7z9<stMM!$-B6Uje}kTGLx9(}DIAk3#@#quBr+`h@kc)P>FdS1<or_5
z>(|K2pu}kDqd#G&6^76~H073liV20Lw*TNB2y3gGq&JI<YZhi?^GKq&C5mXJ4%~8W
zdk1akcq(wG)2MtCg^<DD_fuHg1Nc@4DMm^GhYi}0$rwEm5bX6f9mFSk)(~Ozi1RK%
zj`ET*TkY7vD&U)G+9jc`TB0q6J1$ae2GA^>Z}_t$i;J6lK`26vZihy#pCrfO_&*B@
z$T)-2C-;YH$?aZ8y)W0dR+)V$(UJRNt1uP$Q3ZLqp8Zhm2k#j*ZPOQJ(w_K1TJs(r
z3)>RcRRuPn1$_hkXA|yF%LkCV_fj1iQpGkSki624UwLd>0&l1!Tn^VAp7*{sT=NY6
zrD)WHoO<<8W}L-CCL9$OWE(O0GX!Oqa7mi`&|$ItW%gpsIy$H@2IlIuC$<BTcU%ma
z#Pl&bUXu{fR2b;54CHQ=G&Y!uIYAT~Ai{WiHYy3Tr6iTE@?nb;XUC@*xK?_wN7wmk
zro*_Sz!W!IK4^B@$b6*kGLm3M8y;H?`?#BE0M`pe`MTxnK7C@9yNs%uiR9Es`yPI8
zVd>gc;{7+MR0Sv=4ne+Wip~Vjx%KAwk>UpX`1RTQuwxr{Lka!1qdX0Dpfr<xK3+c=
zAA39;^ufBRohpGI9Jrk#&5(ZId%t9vh`W;tnsR4Q4{5*FGZgxkg>_BQ*gS+agp0*Q
z*<-lX1rg_mtw|2IgB07mPxZqcLX2g^W0mCA!repW8S#@?QD(^6S9i=gcQly$GN{Z0
z2mGk+F;u-T&tQ1J9Dtp#i4i-pF^e@My%&E6Biuf1IaOm}eg>~+-#%8bgyMW>m*|#O
z@w1f1RACD&VYJ;~nkNKhpshd%t#VIOyTXqmx9(~LwWMi`SB$KyXJBlYLVOzQ$IZ#N
zSB&Hy$Qh`VWp2Mkw;iZyHNyQ8`jIL)UHwPYsa>~3Fn^Qyoh&HLoB%cM0_NECIeXr9
zbnZOSEF!raYE}PSSQDE`P3w>e(g75uhn$KPzMQJ2<9#=YN~}1fyvJ(Py5{4tm>wP6
z6iJb-=i2i@iep!8vNdn_g>Lc6`7FC4OTXmiCHWk>wH!jk(HsfL>`z9Y-A|B1-mJ$q
zOSc^tlL-INAfM;aoiZIV=5@3V=+R&c`&74G?LyM$Pxg*(6m*IU`w&k(S8~*Of!r2U
zD{@ev?{TJ+TXZbi6U-aq^I48mo)H5oc?yb;(yzy?d#uL-YgxD0C_lEsD`82uDS$*B
z0UlqYAAE6gNG?2f_SLcCLu}Gy%*Qa<?X+nV9cN3C2+g47UX-L~CP|7&b2;)N=~8%{
zwB};H?HFClxBJzoEXq}VhD_d`?YzGx9A9X0O=#No1K*gYqIpNh=b#D}H22^FKYbjT
zvl_Z6CPRjgnIb1aQOVj>82Q}}`Zr|`wiD&Y+mb|07QEioEC#>79+gd=8HY5dP10Q4
zspj{(UlhKK+P|#%AyIrZephg8qVO#)P#I%WLmNk86ew#jWWLuwx>Tj)4qj2F^4ctz
z92GnC6D3Rf#&$}_JZL)l{DMl(u6ig#vG&PFTBeVgyC>C*%nWL2>pUKMTQ+4wP>}0a
zwrZ)DoU~@~TMF?&DyY_uR61CJq)B7$;?Qpm_Yk`%s7eGTpM-RYnN;T}-at(s;28yv
z$+CW=iCTZ#Vi)l=4Yt(gV@^Sw4Bz?<PisDgJeV`^7oCftU7?SP-CV_&*k64};6%=4
zi`5MySmCWFDXuk;e>H{f<Z{ATK)XVkVI)>BrK`kGgT&A4a1%VXA)e!5Y(t`Fd`q(D
zosMe5ZldC{%6fL4{da6`1ZjhVp4lh*?*6citxN`)RJrx~&Z<ssdVB7iS;p%vbJ+fN
zE<qBNSl-Dz`mY*gR1Z}K-S%Y|VL~4(EkEpibLZ|Bkzjw4*t*)-jd8kc*(e!DGS<W@
zk9=bq4JJ)#TO-IL(=+X=<>Xq=o+HDG<xx=gq?@l)-2<b2nT&$2R1%dT@0gDR&UHDQ
zW!?9J{f*hZIo0ItO^k`EmR|MhR#(;-W2;ZK-9;~x+i*yxap>M=bl6?H?_&%9?3#<V
zaHWex0HOcp`$6+JY~?wFJ(TDv4K;SkENO8Ew<aXeUQkQF<G`qR#~rF#?t(ymjb%*C
zhB$@<dvTgTtPJm&JYq6Bf1PiVd@vQeIoU$&K#M*o9bBHgM{>>~+vu(i-A5c>0bIYm
zcqiSZRIXXR?38=-1Hw>w2*$jjoEjZ#P;20M6kF5x94jTo!B6t?OmhPfDP!BNwS#l<
zNDyQ$%3B8pL~yx-We@e&gqSQ)FA*(r5qA60mVBndR<C&*+@Jw&%pxA!$`aJ~QB%TE
z*N9S)lU3^GCsW6o{UO&{j|ABqJpKdS+6FJ64}IAKTtO{ZUz~-CV=IyAM)GFJgUK^X
zg_obyE4ZD^{~8nV<7eXBF~qU68i_c?TkdG9f}w}>!=-6!ANoCyxe9LjvE}fu9kl7t
z9uM*s9xBxO71q>RB4xTEhgA%jzdqPnt^c@uwnzN#Gm7hRsQW=*OBrv4Lh!Wo2|A(l
z;M3K&2)1U)+rfUw)O++pbvp<_lLRVLt;<;%w7H#WH;6vVK5r20TE$xktstI$h^TR}
z)K@)_2Eif!_+|Dp!$unpmR;PSxd6v?`_Hy8ED7r-Es^sD{f3k!b1xTKl?K?$_i~Xa
ztUu^?S$DD6P)PAnu=`aA-h@(pCbO<|H$e9}?X9MM!w%pc0<0<9f{2Ws$j?{ifL&b7
zn$Urv5a)l-W!mcMnCaUxeEHDp>e%TUTG}{&35@K+`AvNoulsJF1?tGCP(N~H@D-5p
zjouoNpzbs>AfJd4Ma!2z*$!^6jPmU!UaQ{buuQ#OJkCCA*C5TAMW%`%vywGzFsV!h
zXJiE`_dVQ;^UxYjxq)#_^H7acu?FGYU8zP4c_%yFbz{W^JL-3)%jqe%-rP{$otM{8
z2#>|=?T>qU%r_<nE*BK7%R4eHH&g~;BYgrK87*pFRz~+h3mJ0`9~p+rPp!O_JmPf^
zB&-{Na{@QuU1o)gX*LDg@L7bFb5mQ2a$?+F)9qW=emhW2fknb?dc#lW^P)qu%Z3!<
zL7}}D2FJ3tW7;Fe>JIPvH{;HA<e5UZ=Nz9TebTdojHBzMHK#IDVXxRQW2;)cGWFzW
zj@On2jDv6iQM3GhJakFSX2ur!IyPT~tnrKq!J7}!*YUBi)hp!b0*TeWY{8U1Zj(sb
zW$Nb-BIh4(J4X$?m?N)teRlnY-!$Cd;H(i8jdzz-e{>%(Ndk2nZtPPp7x9g1lAUI+
zRN6lKt$Uf~YEWwF#w(!>a!d7Zjh6La4_exAb#XY&->?uXctm2mHHF_T+HN}pcGIR%
zS2_GR+;c}yl&mqw#U{WGD{-=}ue{cqU7?yY7H(pI;T3GF@E*+NIk(s<A*}uLiUaob
zA4Bb*RQ#XC%3wJuQ(%n&7z;j09AFH0vBlxqK*u&q8%Z5ESsE$|&IeJaeRc~$@^vd(
z)9#d!>6Lk6V94zaf(&`VZ-fZWsekP>h))Uy`<jsfGc%vSY?=qQlu|u+l7?%X^=L#L
z-w;S#d#~E_Y3b+Cw5|L>4YcW0g4LyHs?QRQ7OI7Yw@=Hw1PQbDoW{Xk?BY|A8cQF2
zqJ57PJh+$B#FTxP<NmM@^DBy6y`{Y-gcJqud7INln@U}w?H)CXda{=fN*_1#kJblE
zK3;3C<D86eFXri1lXhO)xLc^4VHqTm;#a&?-R4~enYUJnI;_CCR*1fKP-qe)b6J!x
zAeHVB0`~I+5GDKH*pQ{6j*YRMk@>gvn&9yI^Yt3PZ5MdcObda{nkuXL+i*}%))&(?
zu|y*}#3Wh=9Vu;FS1KX*LMiI%W{M(YmAQ~*`;hT&@Zszc3>OFu>u4E&Ozpcai`9ln
z;5TFq^L`iH`+joJU1^mG8*-ac^$x;lD?(&@P(Q(^*O9>q%iMs!ERT7tUYcFnblTQP
z?9YFS5K?l6H6=RFb{k1UjdfGZMMO;+;?Ao~pZ5xDwUFirYkIXYdWR$q9A*hDJ`R2R
zMhJp0Roz6FS~-mj-Ov*9-!?Boy+d4ZcyJnhODVWPGDQcWbq@ZMgx*R4sIcW$ENtt*
z!+{Vy4fPpypCmg+gc%1+F=7(x5D-tW!mFfJae|Q@6Ne3&m`vl0n-PfFywC%VyjtD0
z;FpE&Sf_)H1qeJFn8^5#x$;Z)YonuQtYaqmz4?|Xby@&BL#mHyuW6CsdAdGFF<&DQ
z_CRMGNPSLpjmmnnFh$f;y^0zB)a57?UCsu#*vPricTA<*%2AA8gF4u!K7;@&TtHU0
z4PQS#P>tSmjR6{iFIfZ#Z@~9Gafx^ho9MmKo%z{2H`11D>h^a`D)v6>iA^tLzcQnd
zkwVD#i_NcYf1;n)E3`ETUhn6fsD`Du1<lS&aVt{x6A9))yts8h*=^YOc;QjbJcJe^
z_a#%DeZ}vIXu2ZGl@T~9K8eTdRp_TcEA(BXAw$teu3TMHu;e3Ic?xxM>(grQisW0u
z;o&HlPbT74?w|W8xse0M%{R_;xI?ChB2$tW_&Z|A4Sk+ltb{wiD2RU|Ru^|fGIduj
zxJM#+o8K$rnwGhXm+Cy%yP1l%HaY9zeOSf~m-WFL;9MtpA+oAn5exxK$C*riIk?0X
z0*d-jBAhO7@Y<7WZSZBvT{c7;=T*k<Ss037TIDO@<Y~~J1_wft-8(oIe_{Aw={C2{
ztwH_$<)#et<5bH?@)2y8IN7oet3`2Sqvt+Sw<kPIU+5~#9h?@})?kOY;BPng&ZB?0
zNA4H5JN(H8>6S?Papw3IJ(oh%=U2irS!GR=h$x)P(Fr4{^O=u)d~paox>xA;%dFEe
z1U%n7qKn@oI8bh+>{dZb@ThZ^aB(<3xc%DdgmNZ4A>l5wjB*Qc_D=sK%;aWa;wi*s
zYjXuhck+Y+1M@%z17rG&CT?eJ{&h;SS$W2igzdU}uNG6~bH1jq#cY~>>XB*cA*K9+
zwXl8SK(8_UH|+&AuWG<MHa}0}OdwQ2p@q_50GWymmyYk&-3<y7z=Nfh7K-H%W!AZc
zs2?(e7DhbVkRpD|Cvym{ua$F74}uxLPlj}8uY(~eDdEVH-TRq^N@%fcCk=f9+a1yv
zd@wOHYL|}!*kO(0&j^{UG0;V@9BS|-$yHIEV%g0(-5-PTS68t<c>5r|Apks!nJ}%Q
zYMY;;C1z|Xu<cd1uF?<@N`R;V`;+A*nTf%nM{W~~2ATStbjl1=(=@BBS>)VE9wQF$
z?xUhh^Kx+$CG4*L@?nnYz(h9BN_!JY)guf!!bsMNwnbji_jslWDYDl7lNRqy=h8<`
zPE(D20(nJl^bEf!{$$ydsYr*1hpLEH5%TUP{E~4U><f2ImZB}N#F9LmAVu^LR9*ys
zUSEIZ@Wng`(j|rw@6MOB<q?bF&2EAX$+W>a!a4a}A7HmayG7sTYK<_FVdXM+R({--
zHW1;tabRAhgF%q7;=W*a6q{h=h<*5W_w}qn8@b>+YDIWO|LbXRH_~k1*ab$fI9I?4
zN0sWl!+1nj!-3spXp|L09XF?<M=oE;=TZN3?LCeTy#gC#CS)puy~u3=rUvY(n{xHO
zTGbntUC4&zP+=L96i+?WW3tJnIc0H8nN9RND59t7KEjKBylZAkDyFIjUa0fY^e%{~
zL+_?S2BDouJveC(z8Iq&q6vi5JBP#Un0h%D(#*wR%m(6tkQdMy3|{CXZXF^N3BdvD
zQn$)pm15Ls$)=>pzJ6v~6zaSx$RaL8jJ6t`29sIhXbVqv{2cvJO6?P&Ywax`o`8yR
zz#Xqq-8zn#VooQ@!DeTba{q8vl;&qxyEwV(o2ofyuvmU`N-{I_8gvm+78|eJo_H(&
zt{)yqfK`^GTw#JjzYo)gyp=hv@x7QzRNJ8w<qLD;T9pqZdW7VgQ0OEHg^v{_v+TSK
zxu!M~D_^rUL7-%D;qsN&mg4bgB(aU3Gza3p)P!_6n0(|v+p?Mb*=;I^R;#7~zl-rn
zne)ea6RDTZSk)~@8Hxcf$phsI`B0ZLD3kP6<(+NrTN(3i@=`8Oo@vbR9ZYSd2vBb$
zTffyHa(e8MHoeh+_-LVfh``Af&AGiqIwmwqaC|qm5#PIMEo`wwvxr51mivT0+m&u0
zM(`~b#v_5vs=mQGuID?svgwQx<tOj`5z5Q44|&V+-PZ_Q+vP$Yw+Iao6|!||Rm_|*
zbUbc@K7;i^V6{aoXeCvDHuHY1b+%;^QE(o4a>!M7WQXo7Cud<f!1DH6e5*(5vZOs$
zqXlDbJnYz~3e}SiC_<L@4n6m9^ZnOd!njUq%e)2ioTbfeVYRT;m*-MB;qAE}_;(fO
z%jrOBCTKe?f4EUYIKk_&_uO{5c!pP|nE&%jLQ0*9$HkdbJcJb0H*SBdqY5Xw`>H6A
zLBzRWXxPXyK#5B(zp>@EVBWX^-s=OM4b{d+q0bnC-S4}N$RpjDNpo|w|G;qBpJ8es
zqm%-@=O*;uMSti1%vRsVSpVzNdz7Mt<y*e%wZKZiBVy`iUsD@n1|kr=EFK)O;vLg%
z_E-n4jgUCMoX-hk-JRw%*E!htyL#4-YgJsY@h}^iDH&pC=)H$0)u}XztZ(Pj)m0P<
zH56x<@<4eiZMo6>fgS89fq<|P=cSkH@h42YGv`yN*34$d#vE35zkJ;f%nkOXE#<tH
z?QXlqh^EK9&z|o+@92I{1Ul)Ic__F?_fBrxY<(vIzYX=V`GilrUmDY-%fL&rN};V(
ziR7DE*hBEH2+!!O;`w$~jal@)=*7hM!=spBEYV4+M8WY)vOQIhV?Cd71jbZPJjd>7
zV#V`xe1qT<Y0cyL2pUew40CbGBZP%oR(IW(?%nOI`|wd7PwF@&ok1@8oO#KMkmAQ^
z;!u5|N+QfVX#Mra;fswAG)=n5#f|T$V#HdFz#<}*#vdCHimb=XfBf*|7=k47NwiZ5
zoD+h?K=mk8$1;R*?W`QM7S!YRWb7w8t6XX6;Dyd~giz$4YGC9Q(6zfwv`DRa&`D}d
ztC2Ja*!v(~kZIdbuB#vn)5En0#0jzYGHxp>3IsQ0ee9RKM%Ns~9lY2eC8VS(#5g@;
z4<0yA6SI_c0>6wk)B9MRe*vGiLkSx(hb-WEDwqhZ38oTOdETR}PnD588}|pDO>KaU
zph(=6JrCtHEGy0=#_aEjXhlwER?N)Rwm9g!Yd+H)>#HwqqqM_@hQ{fR(F{5wAXbjf
z1Os8@nqYk#TdES#CJ2f^d$8y`($}_S2J_Hl3+*uE#_F9W?iiw_bRJZ&8PLYWyWkkF
zP_a9)d4<6|z9tdA6Nm8~%XnRWAK}T8ORon#nwbK(f-RrwV$)qd=BpT*DeyKdtZtYL
znKkU{uhHY3&3|BPpSUIOzE@<$hI1DwYj(WKXJX~nO{GlXEv2orN~wDh^;fn#ON$Sb
z`2k(}`Cy3m_g(wfy(j<dK`}5kGt;+Wur)TfGSla``MT*!Ls|?T2;!@cF?cHbu*foN
zQy66N!*Fl5KVT+{JgKpml#k%(PDS-LozEM-cfANL8vT8AjT?^IT&$4o`;IYdc^tYv
z2b^bS+(HX#tt^r$qK0IB%lOOCVhJPntHxomUM$j{)%oLE2_+9BfnsjlleG)T{iIRi
z2K+y_2*J8hxhx60Ev7HG_H2wn=uBXMVhb#*lK;MnUp7vE8P@760C6!NP!U=u1nu&D
z*hM```s>NUKKD<-R8#dzt0Z)u!_%Rk9>_l{&s`!3OMACrC5m4<fn=6KHY3)=4hCIf
zNO=<-1YU!-(kBNo$e|;1fPyOcP#^9%Y;lyT8PP`-f}bddADYD3nN%AZxo<YEDa=n$
zs;q`0m)C5?fMhV{1r-6ozW>pB@7_*1N0&fvS&wz|8Vu>lZ7eIJWrT3{Djh|?vj+2C
z&JEl78LNgvvf&i=d)Ba-XExT6q`d=WBYmbJZgYj43Ok$_{_nBjY<KX6*K=!?vkYXA
z@gZGq26r?RduP&$+#%13F(O|i$A-Lb8-U6=&fh-7K%0|YKb<X%47=J&B;VQYXS`9w
z$@PJCd}`$lHvwK1Wi$JSjR&a>DXeIxk=7p>+%S{K6{jW+yMlBF<+G%8A5)v(kLWrg
zpO54+MT=4mXdGzHf?9APxg|23yKKVWB_&eEsW?usL@b<94CcG8hWv6$Z^f9({IO$U
z@jfAEY|R4=q1CqGfUasn4RiQ9ajE6LV@H;5w~6OakGJqRPw|ct-ACt8D9^6MsdJu8
zW(a^^Ck0|v+CR`VgT0-x*;ij~FE3{~&Im-PFU#*`!LM?b#L45Tn!oV5u14Us?~&S0
z23tWs8fKo{Km3_zB850*JV^hzYP+`TxTg+6k=&ZQL$t^~U<b4guSAnQkOuQ%<mt0X
z2KA%F<>MWUqQIEJCh=qqrFrBEgBMV+-SCTrVGm(B?~R($h>cKwIxqsqkU%JHHf3Lm
zT;l7XI3dYV9bg?{6!o`q*_|UGK~rsz8F=sp^a_Qp<=(OD_!f55g5rh%_M)n?=XMpC
ze@Gc<_w<qELn9WJ#CpvX4ky2XA&}e_`jcQ6Is>N2ND}3hISFzQjGAd#v)IiB(k2fE
zT<470iNwrOWfX1rA`WllLpt(Y$|g1uGaTGLnA0^qQwV9<=hVY>Oha48;k%9e86h`J
zj2~;<!<&!cc1p}Ws(G4QU9pb`Kf|JmDtH8$d+mv!XGyF=yrlOT-+ei>hTQ(m;HQz%
z#jMeUg`{<X5v8p|iCF44ogd<w2|~;|@vX9Uj%Pnj5|6usy5y)3m{u}wcsAADD&ts|
zwCw_<=Zb&Q{1i_agA>?x7QCT7mXjzHyp()Ro5QE|I<nU*ws$&s#_wCI#yCviUzfE7
zg(P*_gp^dOUvDuL<m}$!9egrC!unjy6=`>OzZmWqCz#Opqpn3l;i^{LJGJf`Wsj$n
zR&wZMErOexLpc1AUbZ_AOL}Rl2p`VkJo^lcw80^GA<+T*0k-B93<K-4-yfv!KZ0%Y
zpZ~$aQcqvY+)~f}d=m0^zlwS3SAT7uzr(=0grRknUe`#+#*W^^mO;nf&hnqaK!9EQ
zQjcbaVG?KHS8{-t^ami2XUy+`&e7;~O>F<XWb%N!y(E}_N~ULQYxl2`K`RV?w&4H=
zJ644OBfC_xpx*<1h5eyu7j;ePA)NRKM0W<bU|_)F`aciIla~wpcSSSOH?z_QwpRXt
zdH%~+?SSAPL?DXfcjEsQ<~O)+HHQE4TjyAs9tY~@BkA+^{FKqf1M)2XPpm&IBFP0N
z@ZIF66ZlmTzi33)$lk*AyZv5>u^Pf(K~Dz^ticof%MR5GNRX%5AK_gTRZqtbINxFS
zqf{>_cC|zZQ~}%w;Qg`4AWu@zuZsM|yuVoGccZ+(!wDS7x8no{tK)>ZV&yfz#QP?K
zuZ`!z$}a$=*N6!HZh(XN(L;h!UI+mAf;??zAbw{`Uybwpc-X&7N&T6~`3V3T2!Niu
zf{O>_$-N8tXQ1Z5KHz@?<GzKFS=0t5ww=Mh>~Q)Hj0_9?d*Ck?a8+afW*|JyAjbom
zmJndg=i$`F1M(Cy`Ypo+^abSi*06`Px_930&tIwwJm3rROf~-%<To^itElK;7m7Qa
zm~njrpacLu<g(%rEq;ai#j>n)bWL>(^#SQxT3oe;MpUoh^F7;904NRcy?8*LsFuG1
zy(sGMa8=Z0G$H}1HebKm3^1&Ih5I|a%?f!i@&-sS{w$O$B3-rr72Xfc0C0cw<~mka
zYu_2l1(JOO33i%}az&(y>~O!guCI;jXP{Dkm<)c@P+%V$k*~A`;Lyc?gMMvbKLcj8
zVwVg6fR6xRh6_ajUyx@x3F@B#e{Ezx13xuWcq;{f%>(acLkN+?_#OC#!Tv(T@NEsg
zQ+r@w%CV4NX7(@24fsQ;-{O9A;TP~fxZIx=|3QkPz%W2F5(D{V)#f{mvH<4qivJ6m
zpWBNurB<>80R0enFL!g^Y*@czxv0g@VK;DK=v^Vez=VM~pXj3Gz!&6+!Tu{)NijiT
zX$4_=bG@rZohC`}z8V-C-U1vF;U%<Q&R?O)3-b#}{Rnpcdsl-5;vc{^`P+DY1@@)g
zeLb^#wQNf=4R}6)t9b{M@3INQ^8Nvwj>V7XBCdj~cW$8Y0cF$y-pgUvDBrKZzjwWQ
z^mhM5gcmM1H2=QH`7FYDWO}(<Q|12^;t#d|et7F@QMa%)Db5!cx&H+`|0lp-&dYom
z*IxhwIRDbukDbIOzplV<ORQ^YVP|7`J_YjcuxSUb7D5HEPd;Gmz<JK}?E!ga{W<7&
z0^m^F*R}SG!e5BHiZGmv0kDoFz&g$)bMb&YRfPYz@IUg{KYaLY6ZuuDqg+8;8=y*U
zz=GqshA$qF=Yq)pLZxSEZ)jxk?RffCvT4Sb>7@Vz5MzRIT`&P(kmoD0|Ap*)yTT>y
zUkH%Drw{i&0PF_5mlahn{=X1e8ULK;EOXc25U30lpeR0o>*4`<T1xy+JeFoUHvBgF
zIzO$IjzP2DCxBuWV7z-l1$;rCx266UHek{C7X}CmhUPZ|Aa?>xJeQcBNdGTPz*@DP
zo&IHGKZm{QS&4q&+T?GP`427|{eKNP{Y!0T@&Ij|08XFz2Q-i;xa@zU=~~+8(*shm
z0t)+e{^+U+E5Bn8oCk3C0Lh&1thsnVo~H_bivL^Z{o47%6BYox5NMR=M;R_2kSC+k
z-xB=13ZK0cZO(n}xneJSmy-Mc1B1SSj=h=P&#6{nMlw->ii82)<+3(JmH&#$^0Mt*
zwDZu(X-{52+p@qBJH`u10bh`3w#pyk18&m5*zl+AjmQeOs~T|iD}+~7!K(4+=-+yi
zpE8JY-@(oTWK((bszVeq_(O(o@u1*8-PTWujJhe{Mgc)p{i|6BoBt`%?-XsthrtmG
zSgi)YaX$BP@qj$dt^W{T-%Q_J-{NatldG)`JwBKCIRH%zOtzh$sJ(bVo=UcV2ybiw
zv}qmPe-4vgrEssS$e08u>;Y4{TmxRmKcx7YnC0g!!QvI8*!hOE^KS2Qk7VNVxA4DH
zMBMY*JqVy05`f)auEx=y@_btl`l%hI*YmvC1oV6ez+Z0A;*bBZ8aDcdz+B<Ct(;f2
zAQDSiLJ8pO0#4)HM_oK1Pk+xp#Q(A{ivB#FwKe^AlIALl+^TEoC{P0=V4mZ0^bO_x
zS1dn^l{@5Y&CYG~eEZhrDo{WDJMiD>`Nd*xsUjdKcwlbfautgIl*P_i*YxMciZ8gt
zr2v3?0ETpKv=<N1+(Q1a3g^QfJ^7!h`W)<PzyISXWt0E(*>6d{If{RW=Vz6>^ykJI
z3drPg*U20DXNVU*Nax$K=T*aj6R@<@0T|2y!CYo=5C1!cUxoe_Jia?a0Qv)9MdGrj
zV~YGchF=E9t!J_a{Xiv7fKfK<g=&E>FuI8OI|?gHz^h*J6F*Zf=?@&6{O&J)%W<(7
zeIfau0siRMHu>xR4Defqg>S3d7w{K>1boJ%%XvsG2)sf+lo#ZQ9QQ}%y$t`Ag<j7_
z$I;m0=fTCtRE;JSKnoIpr#ol8ctD<c{}0Bm^DCEBa#6*(&OA6%fRG$$9ha+kGvR-)
zqNUY&kNR^rf;V0gcm&i78?figjH`+NJEN_>;V<KawwE(*F9F6Gpq`h7DwO=cGur9c
z7y^qNKXdluc=NGa03jTpMX?JN0$-4)V#@!U(AEx^u>L7+^0T)%yg(hT0LfnV{@JO&
zrTsb^WvFjyu5V}aZG-kjTR1QNRmV*FL!CDH?|^;_{%vyaUt=;8DpagPprqXhR~?SS
zp8;OX8tUp;IOzP`*5=+!^1=fgcj2zaR}EQzROo*=&gXu99VRk4=FN4TD;QAtW&cc;
z_qRO17}S_26!>@m@XNr!;Ie-f%>PS@Uk+_vw1;5y0tR#k;J7@MfK~XvaD3ljb74&v
zZs#p}D={}L7}zwh#(lZV<a_m(Ou*RuXKj$a7KiR7P!}^m{g+kJTk&@c_BIYbQUGHm
z;5ly+oIq+b8sO)P_sf3({sr>vulg0mMQgY)te+L#tIV;%6~K7`yq5zl!RlY(ewkPO
z7x=e@*q@Qu(V-mZ0J7Nzv~YRK0=?$%NWSHgx~gK^(#6N3fC4Z8g3AWm^5(Ay^noN_
zzvwPcE63^%fkq+wFOG)|f5+iuXY&gmqJ4}H^A^wqI>2*zVx*w?uQ<MpHLZZTykCws
zA%#A}sRC4%z<aq>Ot$<jmDx{Q1v6uLwmzVBZ@`K#GdyYiD+V9|lhIEZo^JGo04u{_
zA;8k+W#i@T{40jv#Sr{k6jca-ZHWOoxoo^AeSbw_WA}48K{R2hX#(Kkz<BU-EglT~
z6~XV~lH&UxCqe;L(*Q(2Mz0`GgrVP(e4oU(W%!zw_Gc}ef(thLe7e>d(D%8Ex_CgI
zYySlgOric7cY>DksRjUc9^uemfC68TC+f&=i~Y|K?bq0#1;5cK0Lv5*$*oJ+mA}Wn
zaDBgqetXSwARmC_2cXF>LBAONZL$9idH&m1V<NI2AUF8~$9@ZWk-+d@K~W*RJC84b
zga;V+W!ZN9A>zMFd(r1UgJn)V$9@4|UzTmc_<xl4Yc`T!L*u?MY$^bt#{uZeOE~5e
ze*}Gbp!9E|bKzc<ILY~6etS0g?IwRq^zB^S)lTZh{1CqffZ+!eobCb)_yRk#{s`~i
zCB2Y#pGQG7lQtOGE-<LRyg2GU_1ltu4aR>Bd^KhDMX5oahuqk|TV?+WdA@<-XWrs!
z!s+j@VLZQu{aW51(obKN@zqSh-;tU5e~bK2E4ldLd*0xy99Of5e&={3{P!GJhCml8
zy_$0KJIO1Nza+Uxz<ISESCd43r_dGs4~k0}gMLUEd6nX7;>GV2He!E6aU~7oRhp}L
z4!_fwi2n`E4_ObdQe4fT_MO63`fn&M<x{&#ay5zAcakBQzajaaQtT?j)x1#O8T91;
zis6SWQCB&xW?1;n;jZ>uj!Wl>FXdafN^v#2z;}vw>VHo0L#~0V1XoY-e<zsM_*;U1
z&h%d;xq80+I|;ScUyxim?S7Tz>VfX>EQ#8G&hoG0-B)R@p5*;bgQ)xGH2<9Iy$XNz
zVBL54NyEQ`|KXV3Rg$YmmcElLoBWpKV$S$-XmR-f(^ayohljqCb(sE^?AJ3LS5K*Y
ihb%V#Z^$3ctjJ101Jg2KU_QV<*}$^)H7ji3PyYv@#VqUq

literal 0
HcmV?d00001

diff --git a/.yarn/cache/chartjs-plugin-autocolors-npm-0.3.1-7e93d38139-de4f87b5bb.zip b/.yarn/cache/chartjs-plugin-autocolors-npm-0.3.1-7e93d38139-de4f87b5bb.zip
new file mode 100644
index 0000000000000000000000000000000000000000..16cdf8839941d1f76a22c32a53035ce8e109d460
GIT binary patch
literal 25077
zcmb@tQ;=psv?W~bau>d`ZQHhO+qSxFTVL7evTfUTb(d{S-#ar8GZFL0{Uh#)IGN`m
zW1ol2z1EJsRw~MXLjXYj;}NV~f&R~r|1}`|o9!J;%?#`uOx<kFTo@GppGztJ@1-V|
zM$WF*E_9BzZWdPdbVhEj4kiw^4$l8O2p9<TfBtV)ovFzd3<QK20tAHqzaB(ZN<>Uv
zMNCgg!6BOw(0fk>bhajIQscWi`K8i@5)-pXEAb;|FLe((TkP}6$9<tWHzdTicXu~^
z{eIIlt~<Q*2_K&TpJ4Cw<E?Vf3#k8?pH#fEIL>Kt0X-u0o1!})_^?>~cP9WbdByPO
z+><r;8K4W2t*2j00TI;wIu&c$Qx?!v4j}i7XPv?S5R=0W=TV$lU!gn-o@u$4ir0V5
z_h1ZmcRcmUrOm=Ib|Mhtu7P4CX|VDP2#UV#&gGNccpYyFBpEJn&*<FS|MX&{a8ZH2
z!Q6#hST_pVV+l>ZoFe*gi*W-!2Rr#?xsoehTg0c+>$Z5qQ%>D(%kMofLO=!gn5_Kt
zaDq}xa-m$>rH<-I-vRcJ_eUY#vlbR#8S6%;iVg2}JO+}*5L_^>!HJ8E*Rv2Mz9*8R
z<Sp%d%`;89brwBZK3Wse?tRoRZzi9kdGDSdX=9!lcb}=`P>u1#M{}%wuFET3e`o9}
z_U6ysq;8=I1+po^eGNEg4F<7#>KE6UHSFQQa1u$9dGu)rR^stCQY)aoRiQUo{em+*
z?=WRm2vpN*AJ=+>kQq|b6&_!aC9XI^f^blcA+}Ggt{8*mO(LVo+$yOvZh+09Ath5p
zCDLl4iu~nGV!fl7GMgNwQLPQ5T419+?ob}3ENE~8A}2J#ES-qZfiZ6|a-M6b5E>Gc
z&NVzqCMPYPM%FEDR9;PLn=358aug{JkU$4Dx;U}dnez<whUk@L)+bw&8lj=O$uO2C
z`W9-fE}%l{&r%$db}atsMjRx8GNkq}fl?X9fYYDoxWoD|C?hWwsVfH(fInjQ1^NFz
z{Ivh|b8Bkl;`+bR=znLx$Fb}00Z0&#9%K*@ssEpm{-0S!Z({ATtRdsF$&S=>u2G%L
z4rUVOy*AU7gjTjFLSeV%zHoGOD=P>Kpi(LhgHY>a{`T<zO@JWVjLcT~i4r;L|Ne%q
ziKvhNxJL$oJbT>W*(^07meX@kG8IHSeh1bfay^7I50spcW5R+*uaA-5g==^;R6D5>
zg~w0v2g30iz$KXnf*<a`0Q~7RXb^h~iX}O77_9!(JltFwPalTl?<P$BNQBmp;7a+c
zdqhYAntshMjPiq+4%%(b#3&Prc}CeVn)Kf5KzIy1^SBl9!u!shqycGYntaj>v~eB&
zEwdL8crh4_VVJhM-X#lxJ5Ox|d#F0~?r4PGCEgWgjwoww+pQ<E+Cu5ry?6VFoA~gH
ztyIo?L>Gch(EEcaD%yv(9-YD*#KS`|g4A{T<!n9J%G2F$^Genyb&%A!-7xg$VW>15
zXy}v){9My2j-_)~&7!Pf7SbUDQjj}7`FC;lhlKLSj<l1BF>s%}rDO=~NI1<4R);gJ
zzyr#IQMA=tC=DG2ra?S>eFd^u<f!igLDw0}%f^53K_+Lx`e+XkUZRKy@7?DGdN@YE
z$=%mIj95gYJE2E>fuJm264CIY0D@m)umB9xZMevoX9mN6f*6C54ob=gHHo1Dj^<G`
zfMm#v&vnnov&MIGfQIlK_5<&&-FY9tQ7uVPDc&6$sX;^%AnacFB{AbRTK<bdY9hgK
z3vxF!{}6vr<5%8Y&aSsp0WgNg8YQ8Q=ul(O2GEUN@qO#o&0fF;9-)G$-D!mR;sd@A
z8?IDySt$}`#p=Ti()NIX!lj3c1ZAUw)BAYyQJ~7M9w1IN)3a&U-Q^qzgu8!ORxw*Y
zlt1>h?;^_lA-Y6wrf!0vE=T2$OtmP!Jwlv`>IV81XUrRtF(p&53L;F)kp>OJRO-(<
zJj#Uvoi{rAn3hHAvH^N}ili{@OVYJ8Aj6s0p936a!EC*2MwT&M?n1BiehgS{)>mU+
z&x?-TOUk#aEp*{j>y)%K6)HaMQr(i|v&rF$>hels|60(GA-`n*t3kV>2Jq4W5`M^V
z3f++;cdtG?2ea_SEGv#mZ?<7DTwczc_FESuP@rqLw_{VC(Ld1KuCD$zDZGOa7l@-_
z?VEMxZ2;2yd24emH?4-fR?z2te(Uj@iiTTw){o~cFAtyS9()oaH`MpE43@xcBv2p*
z&Py5$kuLrI<bc+P%g>(=ayQ@DuGq5*_EtIxl)SP3KsgYh@zfBgy#VRUBHLd{c%t-~
zi^;sqIupBEWV88f6zN5}^O%ULbmc9c6gEG9A=p=rl+mp}=Mzj`7EhLvTdR<Y_-l(D
z(M?|=ujp63y17PBDR%FvG!&h3>59q{m~U<8_+*Uin%lP$nI73CD$cl!PQ)X&aa(#E
z$0g(zLys1jKS`ET<}aD2c;tdt>^GOIWFE3(q~gL-@D3!O8dG-#mCFv-7_U>dujshK
zgan8QKUog2G>YK~Mm2|Sp!3shsYnM}V5sc5O^o+o0k5p5n=-;u8$I&Y#8gMOjnCj~
zYs<EWJ5V-5-{rfttD@wI7eZs6;som+JhK}jGVnr1<QcKE>8wrZ0!&1?MI)XM!4<fl
zOIPr=i2?@v5_v=4PE;JAI?n`dXI;08SGWfrUJk(CKCMI+Novle>GU`CV%R=oAy-mT
zs_ZIp-_O>0+N^WECsm?L+S^&J@5dj@-XMx17L+2M?Rr14&pSC!;bIzInuOTovOIhG
z_}MoVQJ#%E7f+RZu-gfhuPB0|!n8-^6I@Xh_me<XEYhWZCEAGmR+!@!O;e8X!z*by
zbfKjUzA`h4U~i5H2K__z$X6zSgDiWb8$h!yY#sD1Dd*Aua{}wO`l|m*3+H}=MYp7_
z_xer)UAjz-h2vU7pCJn0{%2LC1?e+p5FFaJS#ZA#WdrliA+lZDy85?={m+a3YcB>(
z^oRAOcZ~l@Iscm|+z`iI82*(>8vp7t+5a}8Fmth^{|~O%P0nUV@<08(mOVA}5(mB6
zZm#X}z`PhPpVf9*JiR#02b}<l15Ofou7~&ae1<{T)=6#;d@~fRS}xmG=&WiE@IUF}
z8p0~|9o1hJOFlWK*}9>wjf!G!)5%}8q;g}Pv1xhwWIfeFEokF@c@MjSI}qr6gCyhR
zLTcZLJ+0HOrr%FD?;X9-uO@{ItIEYK?8fhr`^m{b`Vj9tEuoAwB?%^%i3H0_Qs?zd
z0q~NQCRg&K5LiMxb_|KxuCc`SBE%1H%u1(fsw-IrHFw})DUoaJb83;py6>V6RX}*n
zOu531L+lfgkAgrCeEFc6gae~5Lzs5~*^CO(K|<sTse>OnhfRaK?P>d?3UW|sii=VK
zs-cnaLwtu}=kG928!S=cbu^Ot;M+_D-iz@Dv`(2%i@c4_Z``CO6=l>ZvZk;FbLi8M
zau=mSDL7_25wiAEZR;GqNk!$<?p|dLN2+GF<}0Xs_<3pEu<QaJUFa7V&rfrvXT!jq
zvC-%IJthsf>C_gdf%K;*%ze*1>Z3<T|Et8x`RRj|VATNnVT)n`jRVx*Mz4dFXi%bP
zXhhC$XOoleJ5V!%_Z9R3&)*)ePNFdf@R<7o6|U~6Q)2wipzAuj>-+r$(y}*4I*!NC
z1B@Y=x~%6P9MF~^igN=&LMSn8XkDs`1QWc3kR%48zV;{grwq1F(0xf0!@)!c5-<*y
zuU%LLm)KptuMhhBdwFtx(l5X7R8>oTkT_yA!ap1i#sR0sBQwvM8P$Mksk2`QQ-L?(
zS*n|$!UXcIDglBcx%$(ebQ_5oBvYEev@0cyC$^zW!$IExF<y6KBAqROFA4F0nnq}Z
zymDL@mhq^n;`F>YByx<2)R-CaDw_1$Rw64TU)J<gp~nGAyTPC^+|=04AMI_H%`N~(
z+?-9S4)t#d@jz20ViGDr@d<7)vQ_l6gcs+7NY$vsTv;aUl4L)YoGWV#t9IO$`*A;G
z3Z>Cbv<jlFEvUnBderd9vP%8dD&sOjvx!D27zi5zRSsGgI}~r8{)@G$^2C4W5)%VP
zly?VCvE1F)Q6$lCuonR+3+egWDa_gOP4(4OyRkxT<n8N+(5N*R{x@^yTwHEvLobHx
zYXst4Wnz)N+2#E#6HsffP~&Xf@W7ESez`fftENMZm0F^>)!JAflItamj@-}usv2$g
zW-`EPhOgSpI|S1zp%))!eFRG7q>7Zu+F*v8Se*S!T^5T`t#b-A!wvkgBgh?~l?{8v
zlNJ`|U~h!ws%qCdPzpN#EEKK!T@6BtS)e&=@c>dn^ljkm4gW=%3kh82TjR5F*ijr@
zMxHID4=^i?(PneG_dk9t92j&FRp&a|`LM|tfi}m(h34B00IjyRlx1(L6$^j-dl-JR
zF2EB}2fo4N+Sh#l^Zx{<{!*VK{eQs30sG$xOm<fG|A47mUB_XQ9pFFvJ7JrS5HBn#
z7mj_rTIZrdCm2-h9e_zmhqoSOwvb;=m|6YZBQoDgoBm|Qz)k8_yX%2i;yA|x10~dv
zFtVd|dfouUIMZEGFY8z;g}oy2?+=%^FuLrB8g$fO6XQFq&<~y5pp}6(X!f@dG^cS~
zAuZ{r#MXlfSeYz={}Ps=G-K>>(dl{E{CS^BD}DOb-S`SdHU`^}ua1?`M^D)H`oKmR
z4NyJq3Zv-mQm>$EB2Kf~czC=(RNllG;I9=r1?8=7u3!FZwfi~-2dUND>eIfUr8h7H
z*Q17(HP_bb;&XFUqoB}z<eVz^kz|RDN}~_U$nYqeW`H5a#zkw=xvr{s^3d{4?f6+C
zQ$&XTh_${N0l9((k;(>%o|zK@?EcAvpHpLD`v5+YbK>Go4{W%H`jPh&_o4xgw!VqU
z&?fkt#lJanL$zuGN}JOiQ}Omod;`*8{Ko-C=ph27a{9$KNMJXP94(ff9)cp7aa;bS
zzMP#OJAW98C{u7e3y!|T!>SED)G6a!@F@{OCohL>1i#e*_%^k(SSB&X6;tt|2<Boa
z(|b&@A}wm#vT&m+rZ_(~34xcATau|Ov6MTGoR&L}Yy5o5i06QHnsSs?b$!Q?ewJXv
z)eVvq{&K9Jc-`oT=G{?e<}B%J38=j`Iw#legcil~_AP)NS^^goE?g;O4WT}Bj>zus
z^BR}$Fu|vPh~o*ex%Fvlo)nD}aYz=@qy@9yOzcR{%b*+TL7>HkVLG%U>aFbl`nb7E
z-Fg+Sdp5$t*H$dj+rvXeCX%CM=a++tX6;@-%EYyq)?nH#2Dz>R>uYDHKwEXCajoQG
z8IwBQTM=cKor<Z`x25JfytCcjCiZP0#XL@z4xxIXNG;f=MgCEB2(7#rgRzyKRyXxm
zAg2Y?3Zb2DGguNaMR&@ZVI)HlQfJ5y&vkf@<-bKH8;0md^}m?m3P}s>HG&Wn`RWgi
zQq~$9gSQ=dTgFw;3Y5fR$~}xkwp&8TulS(5A?sPBy!%*c2n%9;szPoDm+M98Yl}cV
z>!=P_W4^_o1DhgHVguPq7ecKN9}aR@$<^&WPbeLI%_+rI$Pf3gi_(}CUUjU~)9LJz
z365PJ1x{TAe}dMO7h$x`xY$OJBqikCUbPift_k&At|`ytKOA~|EZ?J^S+Nybb#8p9
zL#?f(b)Fn<B38RsRwQ)Yb7nrgN4CqAWg|EVFAcrgcEqdLuCLsn?tK4rTC)3m)5ln|
ztad>uqbu1|pAL0NHWh97u=L(81&3c0!=<IsjGKIU)P7Pqw7z;%{Bm_RKUj<|O2a2g
z>Is3qGqMy{CXZiC4R^g|_vdk*fTO^JQdF<|z2`pR?0c~(M>J`j^Y%hk-mXUqTfy$D
zrvc}Tn@6nQIY|F=!k;>v1RjufHNlKGCy~)wGx<OYzYCdKD+kNr+)cmqv6()5upEH$
z{P)Ns^*t>21MdICF|-PY#{zH=khFg|#`0e;upEs{Y>X_-{(+T)eXhEU0}cmL&$|W^
zbwaTA)kc&pg*a-lrLSdBae85TDK+JlWjadwR+8?xc*6J2zKMbKQYF9E;Oj~DbG3j0
z60=Hm*g9V3Z4_2(b5o)n6~L@!QCG(9;^N28&ER@rn)t3MpoPY5GstADrS8H<h&Y=|
zP_m)4w4!0gY7#<}fDgtxJ5$FfIcKfgymW*E8){%V(#kOf$%N-<qV4x4m@S`^ZMWP@
zBAi;E2nZlkCZUE-Fshp?xE;OH!d|VB=DQ4mmvw`aVAcXKx^MP64uVW>?SSEQN)aCh
z^<^I#*hu?oh>qizrY8OKvL^&kL%HYQ2#UY3#b`y;^J7Bk3}~_qtL4cdF0;-a;w=1A
z56OUrM-J5IyT_!|e25!9*3>J3xpsNPLYPu5OS?cCW~m9*>^cEI;}8wjrsya7XwJ>V
zA8c-ODpg4wD^DAEN(urPwxdN^w#VGnh1armOu5#A0K@KIoHm~Pd8aP46UcS+<b5EO
z(IkojNPP4&VuC!yq_aR|i+Xv4NbDag>%PLu?b`Ce#%?4$=)dv0yzdk0=U0>!eeP~o
zTb~2A13o@eH4>%BjIlo6+u((+sKY@H&hd_z2p>+nTI9Id9vm^5!DCwntnNAW$P^5s
zb{uR>y<dBrYwJC{;(DvxW53RPSF>_M0<i36mpZqgv9RwYu!VZj?)m#2F6k@3;7fTt
zc`a39s$X9?3vvBClpS}gG9XUhK;<;t=iWVkXi%zg>o#~?+K-O;Od*q!2-tULTo%5R
z4sFu-A?uHJl0yD46M5zTxYO~~X+5^oQK8CH9MRR>9QY%w+U9^jvmfcZi)ARbp&0<P
zBMh$TISd(d;I}v*qFq?Fd_#7B=BaWw)YE*M-O@2m-#Cd%SOSMDQm1_-a#2-fBbry}
z>ZzN5--VkPrUf&aF!DKdn3rNz*EW;J5iF$<RVQA9x<I~hj%?mkD&&(Li`8)~PhBlm
z7Bw^Y9&LN;TqmXUIt?I`V|qyC4J)ZWyws*^tWt@%VmAU%FtM?83KJO90poQR2#_z9
zoXh<@OK($D#<hp5RDCX9H5g;RcZ*+j=o*HRdA9d{xD*kT^1>Zy$vWwn-yZ&`Fwz)h
zmBK?Q{W8Q_b-}X`J-nEMauRo`V@IsHUb+NW;q0k&$n4H!e?=2yC||V(=go*zGwL&x
zuGGkGV-K^$SS)l;r43%OgPcggts3wyb@?|#$6y%He}Vp=8UGSwX%2=B0%EQM0wVWc
z&-nlB;{AX2-stU&94~p{d^XvW0zz+FY^cpmyXn@Y{Gtw7t&+&6tK@L?;F6HUvWeA_
zk}f*Ft~r7^h~5(Io_jjq>35`u4D~Um;Gqbc(sgLEFr3otFFm?zta9dRK5Goc@9vsB
z>m<{Za`*`+nc*5pC!@_BwQaq0#9F4nwQVo+Y}v9qt<V<?PPN)(E$iP2EG9o_3p(Kg
zIAWrc1lX;Z9GH#sDenw9<VC#W5+V;gQcB3=WK27KzIW1>+OJjDxT@3}H!teqw6y4>
zKDW0i=`Cb>u}tsvP#+1n$o6xXRXHp<bJfevKk9gSNM_&!i(riO9IS+;ghVW0Hjd=E
zie{=#uXEF#1Q&ypuKlITCRr)_h2?>uS)JCL>2rriO}Zx)jn3{l>W$YQf140{iZu)t
z2xX!dqz>Be$DA~P$(}RS`@C;6USbnkF7h*aUr1$ZJT@TWhkXeRe_mSP4NqYA^Igl<
zuff$OUAS-hLaD8L8`~niSM%*#wb|Xgt1fWF$~=$|b_p|R>Ztsk8a-9l7xb`w<<WPW
z`j66U{KD$4n}jC)$_}}<{mRa{y8X&dxjy~MuDOE!EcUp3-e-WP@Xxsgr!h~tiKj7v
zun`1<7>We_7zqM_4EX|K42Cy=o?qbm8T_O0oaSRpRHHe>C(D7Vj^eXI-O1*S?c3HK
z9o=7s4xHEm{NBzVu0DnJj_~{)aC><#GXl9QuPQ~IChnbuy~~b0?=yep`p|4D{#++b
zG)wj|5d>z#8j2_l4R>m#r3<zQGrx6qTAv`C=6xT<C;C4;l2p7fS>A;mLApgVW4Lq>
zw<pg5+Q6z|6qLAl67U%JFSvl*lFkcRjN2{W^>pQ47)3ukXJ79XB-r0zL%9$;0&T$z
z3A)k5$8?V%yjm$xA4>TYOvJJ^bLD6QP^&s4A!iC$T@VqrfPHS5I8u&oeR;LGS%4<y
z2|kyUA{}upyxqZY%c3*K%EOvCBk*30{%5%lf4r~!Acr+W2zE!d9euo8M`kNs6SR*G
zW@RuBK&q8gLk99xGlXy)nf3v%X`|~OS-l|L)>gVvUyTzd><ZoBD-KBXfpcX4h{U#^
zx9)}~-nH{Y++;%=DL)_sB94ONf67w9!z@LrTsDfCW0$d3o7Y+p#0B{Iz#n*gFXp1b
zaDBM6JbmY&RgI)GT%|J%`#m4^%P0H4qR6{rU+w!#7LDw~xOyhzHJ)#BWA3f~+IGMR
zj}<xkJeE1k-i~sMDo&R0Kbzq#>uZk8mR!RY!Qj=bF|2EA&i&yFnJj53#qpTK@)XMj
z<Lr-tGSiwsx(-1mC=9@H5#tTUAIm3s;U0t>aKUfFIRWIz>gj@&UM2WFVWZk0fOclS
z{ic3ftz<W>M946wL5hKsQ~HfpO|0FRR->6$v1FEaDL1^*qil;nBO%802P9Q?bFdQ3
z3=$(zux^x^t5(Qi_Z87q(F@sflM!WS87Z*Q{Yn7E6sf19-`EQFI3?P(2AnY9kL$jT
zg@h9Xo%{jJ!rnvezQA|>LgW3I7J;p(`O#*u{z5#dmNLh44m1>kP4N$<0D6dhN9QyW
zR#_*PZRlg;VI*T&p?jj3!#ONLT9`uvDf;<lU0=f_7V^HL#sZeHfIZQMUW>m!NzVGJ
z+tfHFq_CCh@JO)+uU&NMvbh|MKgAV>ybH7N^B!N=_!t3yRQM?`EJm<Aiw8hXtNSJA
zrW5B8i4QS(Ch|NzLnf+_F7dOFkV9ca!ZQKz5Q<FSkbNjO{MBARLBYFfgP~Cn?&*T9
z+k>3L@cnZIGB}ZZg3%eOI7-h=!&2G*#KDpHQn+V8l1eFiz@lNB5U5T{rAK3(a<yBI
zK)#2u3D<Jj4*!|}FE>IMo}CeOyD}*=jH-i@of-&DYOhZW(!|ukQnl=ROisMwLaE@_
z(Ht+F5FrJOn9!B>kfUj5&Mlaz&6_N*!5ey*uRB8hZJ0DKpLC({wM$wb&U4hxFznf5
z`^$x(*?T8tJOpUbnBcjdu4$_k|Hh?8Iq9Ye4eL5lOzz7$h_n8oG{>Q`JVz^PH~op~
z!-L8agRYqj-o&$?jnP;&*y(MKv06@drjbFe*I%m`2Hb!&eHD|iEUXd;Zqw8n@|L%W
zpox&8D`ZMs$bX-K^#isN+cuj`j;c$v<d>4fMCOt;CZzyc8#S~4WWmx^vQQ=qn7HwI
z(D-f{k#<ckWd$?l@*A@jV%3}Lu&)=wyxBqJtL-xpXzQJebad1&Edzy$QE)@7kXoxU
zC@xYa_ZPxVFV_HO71cxmgW9v7C(iE2T)VpH8oLJ?1HEhN*iR}NvAd?X5r5d$Vt3hF
z`kf6N5knm$?;7pceew!Yhvut~rWNL<r~<wqfuE-1I07Oh6R-CYp1?&${TZ)!@Ft<Z
z%5(kpUfEHn&o?<_AFp`)aOm+$i2Jh=<zR{uT`=!wcB<uj)2(Z=|Iq3NUj5xKbGQ)0
zeRs1lL!eg(h!x<EFe^ItiTn!Z_pc2#d@tkKlP^Uq2`t<Yo`ds5H2-+@F-^^b37kce
zq5RUdqy~J0W}UCIujyT;t1y>A3IrHx4}*S&f^9Uh;mMcf#1xx-yeHMh%dCi$6I?|C
zchez+R6=2YagFa1AK(iP0)Ktie+;!#tLBX$AFk#-4GQ)hfI%?DHDN$&3lQ~V^=VgT
z_T=xMd!>cpF8&nW|C#eo2D$ao1~Zl9=D&nK<2VOQFJC9bF(&m+B}coZg-+dlIZ{Gl
zBxsNwuI0s1A}<&ubbU0@9=&Lz<Un4-uqdoy#cUXV1$q3=6!uy4ml0mDN~*D%!Tjl6
z#E+n+fJ|Yrl_g@8Kp1~27KR-z)VZ2E2bZKi<v+8A;5U!*DPka0`22f;gHsT5C!ef9
zAQ`S{82X#^psY-miHi}$b}wgoOe>~KIKY9>Yg+1|iB#6Qs^q9AUL&RP;`xWaMCCi8
zjW~OdQ9fxmT%6M2eEBBKkl?I9Xi(7rwd2A3utZTmeqx`6?wI4*4-u*(a29EYHH1`d
zf|m%MMf?vbOaddwCsbu9R@>;7hhpS4vI}QJPJP;)yI1RHacs>TJ;wf?tXxK*OM5W#
z7Zo9fE~vQ?sc(^-1l_nHcEH_z24vuFe*jocmk(XAGdG!vQK8jS1!Vw!Q6hJ4!SA|s
zhNuh)8yTm#vCV;ibf)hC0nl7CF)FTqqHV;^eFWU|kt<~{EKEoW$X!38&I`rd%SE|X
z$kQZShZ<+DblKhtV}-evG=qMP*^c6z@`fMdomiYF&Iqa53`)pnJ^`g=h{<_@3@pn~
zl?Mi~JE_Fq*+q0bct|T@bp?atKNjHJ87QbPGE9f?+KW9Qzg75$x(zFF-y|HD_B^?#
zMXOOVOZgjN$c;FQ!9kHT2QWV@kcXBeGxOTpGyfX)NKuYFWa{u<9OQ|by~St)J|qL#
z>x#)fg$R8=8{ruh+sME#8sY2YC$Etp0YLsOxN_Ec3uI#-pTT`gQX^ewNcEJ%kWnd`
zKjV<sECkpeMZ$kcfhzlr*nMt+tjO-6kV&ly?Q+@+#nc3uSNs$XYio0;WP|Z1S!|dP
z1-QEsrNEq~cw)ZS;@$L<_cqNFINdIZ?QV6-q$vrjD*HW;=MXi4JJY7qpJ5F*FPgM>
zt;iC&!tQ8ud7cZfo6JA_O~=FEpY%Hg0Q?;BgMf5*Ag%c2JP>pC!w$=r*rlgI{<v%E
zu&~QhWvn?Bw);d2DdC{z*IST>wE7XNN(EUlsVW|?q}U~3U}4H}z{&s{U!@1y)XEql
zG~Tc2w?HwT5nnfSLeG$CodWOV18Yh)KdGS^k=bol<(3E)-h`A0=d-WoKkovhsX3X7
zU<qs~0vw!{Oz91zRsviDzrJIUtcX#{a3e<avFik#u<!mTToyxSI{drdzA1BQkUF8R
zaU!h~|3E^Mu+g|!i+?KIciDthi9o^M;zWU0z=`A&Jk)k=43QDV<%B~NoWQJRVDNdq
zF3hfO*NKdg4`ULlf#BP#5<o<xchw<!zUmLf;EKM)LFs;IU+$Bn1L06bv0%7=fWkl&
zmTEO`)ceAk*az#dCTWd-8LG5qLt%zdzx)lwFLCLD0dHPcsN&x!<x@<CB$->LQA~nj
zSvAKClwE`HT;&rGispqohHHs%(&I@E(01*_DG$w#HuL=S(mBZG^rZ!kP0ZQJ%!f8A
ztrW5YB-rL$fRu(Tkk(5{xX+tvQ)D>E@(h^nhN_SFd}Cnlc!O500JV*@gl9Xtkf3JN
z5oGU%8T}%p>XQAjXYe2;evY0#*5&|<cOcKm>K7Hl1bK^Yy%{4%ycq(v?VlJC!&$C>
z(k@r<_d;WEN3w2l()9|pMF$qpyX+;9lHyi0r=1C^ET^A}k&*^i9sv=NhtuMdqAY1^
zpLem*TplB1>?Q-ZiJvQ*bxMOX$1|`@cy>`4@tc$<+f&|$P^kn|VS$C0f|F}-HRTdC
z;NLbVTov%KW_?&SIJFUBjbAcl#gDU=A%Q+|q47`~W>{}kLvD;=2{86eGgDZB4i-}N
zB=YS4Zn+Ie?zo2(4|eFvGJ8VtV3dF;<{&>&0`2Fhd~*y_MYNDS{x|)!7^;rMC=Q?7
z&i&JBt+8Ab)VeE>cAa}SMiG9pN&cDjC#zLr_1E!v={8TV1K9j(9>5vx+EJM@F8SJD
zzio6D&LwmtwD!em2k2_=AH|tc7D2-+G(-b)Kp*0TCfq@AN*Gs8?BzVB&F}CyY<ti2
z>qn>O0j21XvS@7v2Y@DYC;3mJXgsa!uBgUnevjxg-9s!%ziy{)@#l2!B`M=wO)`g@
z9F(tiPLGa+(FG$s-`qd`U7lJ8U9H55boj1(5{$u%+?O)qLy%~!jY!Gtnyquj7w)iW
z(cX4%WrKLVaF#0LIs?&p5{HC^<DIqT(78B}{v8NCjgI*Mio(2#dJVX@wZFe?_Vycb
z^GL3mbbxOj(!=z<$$(&?K4>a_B_3R4#t>hBTI(-9O<8_cB*Yl*w8R&+If)H>+^N_g
zP<#7~_5bGf=rg%zc5#{O9^z3W*ZMKs&}thS_Jl2jysRP`L%aa!DZDwS@)h5=fxQtb
zWl4O2kIg5B-zq=iHQVq)=l6L=p}<gI%mJB_{CJDNY?S6Qu*HYrfgaJwAKB!BCVRw}
zf4Gutde@Bzcd#NlZ0cjUIUes>w8w;xZFI04NA&-SjnPJhjDjey5$XYPTgp=LB1<!+
z;>k5Q(#l+S@}itXPzE@qbil*x*6Qikr;EQ|u*Ho3JPloJbL!Ac8;KM+nVrnp?u%M0
zo8^bm39eQ3uI&jpl%;O<#gwcy-{o`e5Jw<3W5j)Gpie^ZwK$y=w@^mYo$VaRIxUr$
zLgh-Xr8ZW@a#8yp2-V3{@>*TX_bZ`Lk3wE8tsI^V8y*(Xs|jj`&|kw%w~sbB-I!^;
zY~4#$a~IJ)w##kPN&dydDRHq;GQ;`GOxf7Qd>$s(e+3En0G%$)Y4A3HA!F*YR-<&j
z9|qekKg3YXwtN%&w+&2A8CduIc9U%ET`u?Tspd*`!xQEOwY8Cf!i;~Ul?E#tmC?w-
ze9$qb4PK8Cxu6hr5=lq&2D*J{`0$Vs(Rg%yzTgX~xyj)_gA_#xJ;cbmj5Hn05L3Ad
zbhWFpaN;NpLldCXHF&3PvD_s9gX5}lj)Ucd2v)o`?QS;Gj!PVE_9x}H_Q&Nrm^%YX
z``aT<_<5Zd)D5TAR6s_x1G2h-;2%Q27!oi|{F6%;!X2_+)vOy)i%hob9i7<rg)`HC
z^W<~wtgc}w!uiFP5Lc_fX>xC>6L?F`nO9kZL|4g0!ggL^N5G&y<|7oY5Ju>U5o_+Z
z*?AgcB6JNeny)Hm(G6Q|I}Op1h`49d`L;C%gP|91o#x{W^~7f#jeH^rA=@d7LWwm=
z?K>#HK!x^71)gX+%F^=aF8R#w{n_AjhRwXRK7?h8p^H?ygvo1P*PCi%iA38%tsTgl
z9KlQ3lNxmYPO0^x_c+dv89Qmk9XIDztjd<AS&b;JbC}U<gss|%P{Dn?WZ9#uEn#ZN
zev#nnrUXmE9PEf}Ujsw&4WGTvDQd$tZ(Y6^ur;AEuKAK=^;@xR#R>E0`i+$-;G82d
z_CPMy2>I&w`WxH$)Lo>QRrtAl{bIw{Yk1x09oMrKkc)z?b|w$==%D;-n>W9LO;9Nc
zM}ISs>{V{+MtN}CldmmTO9*7FMXR;WW><>sjqT$qAK0c{biGWO&@Zi5P+_LL{Z+TS
z{UIIgRT8xs;jT8#Xzkt8X8^8yC;!t1>O<2rD^~<|&O|y5CZ)IG*WClk#rS7z8HSRA
zzQvs?%-Q(45<b3)XNKqvIB5keJOj%sa4XHLvgOegavz4oi#Kka-f?m>>eLrgx{|o<
zVDsg2;yU(brLASlZ|T<OhR3KOI)l7maJBxCR-SSx^);!|%6PQ$Vh(+k!=HWAUM=3#
zj5N#^#`i^0Z<TFKf$NnDpDyI38=OgFz0pxl{ub8eQ-Am_@ZHy`ul~qY2nMLrLh}QT
zQQ2QAI#y#B>$s2nMTDx)_~_Yu8YwM);!11B>I7qD?JL7#S<5BVLy*Yr;8UpUl(#S5
z=rDi8`9L+B##$#n{$qinUu($o8b^)vs{f{?VU6gZXpP|Ci`OENOQYC7dzWxxps;<e
z$5vZC{74hN{oTuSfxWvn##a|=2vh7RqKsk*YQhFp5gXo~gpH$Xd$*0P{I@%6Z+?mP
z#r-j{|DjLV3<W8eZ%H?|3;5TKuMW9OYzOKGc+^rDy*Pc3da}d`$gO6x`UZ(f!m`#c
zyTf=+slo;LG_lO-LjlT_7)2SN#w;dy^W`4PWUglJQ3OJ#@c@PN#0F=$qNn}i+~1_{
z9@kx%+9vGmA87p}hC@mBu)afP0y>bbC01stVLXwxlb4TCuc<0-48QK1W?eAj^fx9?
ze5j6K8cy3#8j|rLBGRbN6dh1+f50EmMu_=|G5olUtj>nEgtb&!N5b@t?dppQW;da=
z%u+&UrEyZ%lIrnqTX@#Qb8PlfSBIf@yQ<!PPIO_eXHTV;j0JXVQHrt9EO+0Sj!sCc
zy42H}*IL2V)R2Tw<E}8je;1lj%Og8%jK5ZHS$;Cl#6^a@u)bDC?9G=MXa{twL~YJe
zu8+BP`FV~71XAcd;A40UcvGYrkNx@{9#g45ajL1sb{mbO?v$#y)1WuN5=(uQ&&e4x
znC>;|Elk%4HtDh}3{YZVxD6Wq8!k2`5Aw1niI0YV0q-Pj$766;T%wY8I+yYS)9Lw3
z&2m_`E21rkzF&@%lL;rt`LIrXa}t18zk96>X<9U(Bxz;7NcG43W_#O>Gv;#v_+3iy
zqSS&QjrTnuHEg>DcvgGLCi;mxO<k;wU_<A&W5Lqf?WO70%2~;$-G1IM^f_|KA@jgL
z`GnWqYRr=v**biM{IB=gcbG$quGk@DbKdvD5f*Uc<oX%@Y|ra|+Km}+;3+Y8LNI!G
z%k)GZzh3n0&Feqy(?by7%fSzTF+Po7K197<_WY<sOk`;SX1tsp-nxiD`&0&NHMz+Z
zjGTYK5a=T?S#z<3mpRdzXa?6k{AL<VGz#mL>N5NBq+~G`MQr!jM#A=L#ryR)tvzAG
zE!5qX*Z~MuCBo4R^ak<vMBiyH>aL<#nx2<?;tH_#@z|C?xTV8GBl1H7U^t^#2VGt*
z22L2i^R-5tsIkBf>F~Btd|u-e&sD{JyUkEFz%F*%f04!gHrB+P#@>-Dwa#`bK^R)<
zT3=IRTQ+%+r|jov2XAj$Bn1<|rq@Z9eIacAn*rod7&N$QCO%c)mCM6~ZJ7Vi0W>w1
zDWh%*^bxzKB-K9~@qXoNpq1{3hb^?M-WNQK#8n`(xnT`Ulc()eMpnzmx9xR&Xy$qi
z>GPdLcqCN&{0?TyLq+t{^G2^{SRBS7$I8>Ee&<^}2QWZpL_WrxlXVe$t+ICN$7!lq
z(T><2``b{}bfi!c)yj>hMy7CyQlLB){5?a*{p>e%gX;u7$+@`a`Q|>W(kVXzeFuFq
zZn5H0&1$RIt`y@w<S4y6zAer)GE2Ho!>YbLI!4dFw+{nKe75LV`i))ecABigPt0O8
z6|&eB$YN6!;PapGL+KVM&*x`kMolJC&A^J;18~<PxW#BBP}nNKu$xVDLEuJisD&{`
z*>7hLZ)e$=f|<Iah))&Zi_V4|V9dykgwIK>f-43ttu7&~xb<x65$QCux&l-?pXVzE
zsKZpl+xe}{+?Idi2FYC{#uiabdoN6P)J(IL1a$6npye1?%MHWZWJ;Iu+cljfeGD;X
zxr1FUTSshZwRd&E_H*0Ug=l;GVaE%s!w8bt@SV9IEL%%SE+CeiOW2%Ly~Cub$Hicp
z3#(CMq!OH0$e?JW=F*>$`!zycWIw(d)aRgKv(>uVswGi-d>GTJ%6^}%he&c@OOzGE
z&b)4)AKGZ#Wuq^JGNw-GHFvUX(>!j_HlF`s_aH19{RUQ4kW}%l&n*t8yjL!d??9~B
z;(6ZebRqhSU1empA7W!@@qXbPsPJU6QEl8(3(K(7*0iq(m!#Z}y04q(x_`!I$_eP9
zHoiW)mzdC5xM^cEy>pP$mMkQnM^UmDiSH9tS8(i25TCTOHYS*{@r9?7@d-58<v&BI
zqvfa5P0po#QjhXon&5+{wW_*G;@k8dp9)w9!5iBc*j<j&Jn`~1glaeExy#1AFr2Jq
zGoRN+H0ea0W(7m*c;JnrRW&12`RTb=&|fQDI2ywDRxZ_Jow-te*?H-l_KItvlRd0*
zN;l^8#K3(BG}_D6e*Ita^0@6x=OYvd$SVN|h~j^n*z`aBd;h67Y3jHviUYoAq6z8{
zgx$dcjYmbyc#5&Iz(lARiGDV8wV0Vok&IXL|LOI3zL2)?APdisDZ6C-d8a=Eob;gg
zVc#4<lT#Le#p!-mH#zyyG;iYx$1$Gvx0_RQ_VWhVIYZ0<TS(e$)zOe{HE3Nt&wXpT
z@kfu<wlkSrfAnXW>mUci<hByPoOOybu{WxSlw?!P+bv^?0^KN2L+c>?K4&V)QY=d#
zK$C(1Yy(tk`s@A1k5eaHf5f#@1l`74dQd&vb~il4_rZ#hY@46pyWNmGSv{?~VvEca
zovavbF6PBl5b^EeGy~Ul{d&8T41q`=P>Pl5jN<Go`{7@&gl`aaDC5jasPg6GA&7{E
z7)ma)VDvt0O%HW5$lq=clQC*1WhuKIBa?s|%0H#tqP_+v+fEHvZyD~IJZ@(7S`*3_
zE6fU1VR7X8=k;>CGKb@dT-k4GuKT_9OR7!eO5mb}ZlRgrZdT#aAHi8KFh_AoR6(;R
zw{0h!>*lIJMrRYk9AjH1dTRLQ7XpQ`=UAA1JT5Q)R3>aPW#)qE_u^0dqsy+}hH_8r
z?|*uY+~sUDoFtU9VhKZaR5)DLW0>geD4XiXsI$-$k7gyK6~+x23FZ7NwGIfq*2cgx
zSoj=E91?;c<Uzp;$O?p{d#7AiXHI7gk~H@7tM3-0=s%L@Y;!|8*|5r?k~Uk<OAr7g
zZVXdaPdFYZ0MKa9bJl3}FAD41quI4Mby(g~PDSb2D8eg@nQ{IR)+{2_{c>S+ZW(N~
zg=U~a+R~&ghuo*v+D6pE4vBu8brVg7Cz?sA>q%|!Mb5A!oIN~x3+qy~@_>}OPT(rn
z5Ze4;bWL;vgEeMrPv7KGXX@QiJ&XV2gQN!SSSIxujL}yii$Jl;z#nHLeADhyjD1h%
z6?TKVV{2{UaU+cvYPZ1arK1dsDy@@sZJ-s$_}2+~{SOR>o!Tt{ZD%w@#Q_gNdiwVf
z`^4f2c|AK?QE+Kcgwyo_+7wY_v(a<cdF6URyGVfcLZ9sRx43Cj{!JBUVz;%4LGRXd
z4)hib!qWtFqTkez-B+p*RfJH3^53D4anuFdCniq^7$=N6p9(gSi8l^&{Y;y*IckUV
z=TxO_*oq{}UD|~!p8gJ7O#?yj$^Ov7ar$#|_C~pA26;-6oSwMMx&<qHW(7Kw;jI$#
z86BmjI#aEXuq)Dh-U3gI%6_t}h#Wg9`-VO#hq2@+0?}r%F4g%d3`p}e!4|eS<tV&q
zb6Jj1hcb~N>~VC}o4pUq1K}-s{v<{3!;Y@ibqy7ulWHeYH;y=6{Z;U3Hrl&GhJ^St
z1;aItz6`OwCj8Ma!tID3QCK|o+KxxAA5N$pG@dVY`xCJyD;@P(MGW7#r$hDnJTo@u
zTTU}IDx+LxHbst>xpj2)oW^iB`#b>=v8QqOTih-=EE#vPnHl^pITpqcqnsj4K_+cb
zD!MdfIm^zZ5Jj%0!PRiFwP8UwP)SZ6tJoG9vDN8u_YLa4M6CE=5WX*9r1$f`$^3g$
zLQK9Ak-#+!Rf1|{uFC5M*?kSQt!eGT+Kp;Klif+NsDU(gOyyigi~yGxLLJ_4VNmB_
zjB2cnUxuzeXfyAJpM??<qVd3D6h09Cxi04%jnV-&>P+SUT$qmcyo$V&5(x|G^6%Vz
zr^f)#51PS4^VCQ^cAj%`%@}i$lzt;u?17@xdfRGR<A;=`hL{0FC<ZrN>J&)OQ1(1=
za-y_9%n6+P^GF!4AJ5xhF>LvZAtMwg`y6riBfRi7f@M?<STy;@`y3%)q=ZfKC}8T2
z2*4F?=-Gbc7&U;dpg$`!4_w_3nNWO!wt}7ba#~3t8tKtES!~xVrU5G0Vb9;~bX?!T
z-mYv}t<8#{bx^9BZ%C}4()cv_Mo5OL>Euy{Xm@Aa5UP#x<prxeqh1#1Af)1ahL;@^
zNHS8GifaPcz;I+%>CoGFacRWhxrUU<nV;@wQ4rQa$AvS0m+@~bt6gn&gK`qF*$P~Z
zU6af%J*#w8^95klClD44r4}sNIj-Y9c8*r{%IiZatM$a=YdHm3x;D&LbE|p;@qY%y
z*qp_wZ8v*Ww!x)rp1Uu2h8}j51xxOnU-$D_j|$h|@d%UR`-guF5whe21(v}~FLkl|
z#tOqxWf!cs5KTYV+H!6rHjY=U|HWL@%1x7=@gEIRt7P3-77dh09T6#v{CR_d{Q4#m
z0>3mDzL5%yk%hmpGjs*@w8Ij_c}blCpeY~yLZ-_?>_<9Go2B?ecwBc|%f54n4V+A*
zTKe<J$OyTwv9fkfZ6jg6fsu8Z6(E|?VM1<Gjz?L3siF69?q^#H&bU>z%!FmkWf~Cs
z@qgW=sxN;Z_QL@I@%zWG|9uquKb@%mL9yGsHX@sC4FSWOjXsjv97l4(o5$o<`Av$j
zO|DeOSBV5pvM4;wxezUr0loJLw(Br{IW7XZW~eenne&#cEZF1Hz5Lo8N*Ce%McZMo
zmPZQP5}olE^$|(gFMoYIZa(%ZG)W8a<OeBhr#|wXQ3aR@hWCjZwqNG2mW!m#c%bo~
zXSM#&mfClH3M7lMW_E0fHe9|q4Gc%&%w}Lx9*pfgfsb~Jjk!%YAVEdqkdC>(-!kNZ
zAJ!+DSkP9bikHYE9Fk^^c5ZG0^I|a6hY>9{xz7ZMH8@$)6=mGl%Qems4j+w~kw<U@
zUCM&8X0|G5j8~b^3FS;lO;$PieI0OLTX2R%yFa-w>A-kE$*`25ElbSSUtsCPkI17b
z8Pi5ki?pq<0&tcs@`B%I1M#4ojAcJFZwDyp<V>uw4;yX|JPtKU4<}@|(%SZZtZ~zW
zi@#>BOm^9$y@QyOt#d)^{ch40RAY<f2DB}vY*fznignj0tyV4*yWMQ}^sc+zfa?vS
za+`y$bmj$g`T*JqJC$E#rvhpMCwkRAV2oDF15-N1w^^|}#RpllI>i@RwL8TpSvNYx
zH(A}?WAPUMTwwnjuCVnM|A3+)J@11qfqR0y%6Ni&BH{NL65#g<F_sQzu$yql{AE6Y
zX1dO!0v)}gi||mZP;IGf_AXktzIOd*?$|qa3^?Z=9AMJ4r2iFQhV{)_+4`>SqUS(A
z{$#!W^663Jg;3g-IPqCnE)9voIE7(YilQk`_3`41D-M%DmpJvQtgT+ya622|JU<zw
zt`6Yhfs)#Zq;!{YLK)}MiyF)50Cj}agp}52_AkXY9H_X6hbL{X)K9k6`Cdy}+7f*L
zalj7vwkwyW5hEHDVo_8BxhQNNfF2jEP4KvU!>+L!ovQ0{tA687YmQsi90fa+Bx8AE
z-6|boi-;v|3m7T!8O$BAw@=}DqwL(pGV}MH%`1w#8yt`45C~)YFh|^7xYfzN+2rz-
z`=K`{L^Zg%F1pp;Lobkz=DTG>6o^0;+hoj502k8?rW*%V!w6iYy~HX?60FtHfgI#j
zAQre;&<sA|07G9mL+%L&w!wWp$;Lm@&f{Z~y=+9}2EhTTH8lwf=ExMuOE*fy%#VK5
zCdcdk=7<00#Swnq{MNx9RjGe|_B8wCi%UPA&6CL!7>$?FP{>o=n$62Sr#N2NsXg>Q
z?xwM1{GInluGcOI^b5-IZ|j}D*H5p2FWoOUp0Zp|?RZ`q%2+v)k>*G>Qn%PzIP{#_
zf6k8On6j=QD$*rWD#lnCJ|=RZDF?y6SA-x^xjBHO=!CcdGQ}JiauZxU3_VimZIk*+
z*`BrP0GXlc*_=nCub!rephL&UWX=bUm`$>!U6L&f-k~t6LmHxbqHKe;QXP8aQvUTu
zhan9Onk^)aggm1qNTTcZKWB#(qz4nE#q;7`8(2Htp+^EyY_y<GaH6A%7Wd4A=ZA1o
z;JZ26T?ulr3R!U#Klt6LI5@rnuozb;isl>J%F$cnrXF~#4eVl6pI!MUv_u8#w_zA}
zILahic`{mRlE~e>>8v9oQWRn)_AA?$B!zz(kL=|u2t9Jen9N!RGe{lp($Mb&>(Uyc
zAfxUn86;!91z3Alc55XNh^vNcQ5{cHq6D4>T@j91x)bbMYeoJ-ZMLDqZ}!B|rnRnT
zZ|YObr)w6f5ZIpWBUXWDoI$`;VRbQmfJk(Td0Yan@#QR4B3)vr5)n(IaYI!A01%2?
z-%Nd_hJG3MSD;XudU(hH>=B(H^H1psChZrIr~JcT*UeQq>c8bymoZuF67Vp@J>{eA
z&7=RaQpOUBkUY8b=h8ZHbW@^upb3;xR3lqY7odSN|I80#1N5G+S{>4}OP4~^3=U1n
zBrvD13L~{U5d}%ZX!0NbEiFi3mxvaw8@o>c4fU)(T5^C64VBbPFv(0d(bD(WTWHH4
zWD1#tnpO-pq2OH^j~dTo{paq`zoEXWu~G4{P8PnWs%B6*|1eX(Iq!O&B_ts_*DJLg
zvw`A*nWDNX2NJ?=m?x++qcgXfzYndvHD8IlOpSwXw4F>x@2H-ZmhKFpESrA8E~c2(
z$y|_RZ*Ymedg)0gnFU}wb<rYOxO4<^hI4L5l*<(>|EaAP%|6WvZ_cXJ(yXe&K5`Ap
z02G;KL<|jI(w>lO$%kT36H`74ly(89VWSlyLb6>eutN49Am_&_C6==)7YbqSYIqEZ
z21#(V`7K4X+*Ob`8sQ5<43WZwwrY)YD8qEaXmFI<O~gt|sKY-nPP|JDdgHF;4p)EQ
zemcBl+y%ER)a7+Be9Mr<NA!Spe*A8>tJ}cX5<WPOuxt=(e1@@B*~OvI?GCX%a(?|u
zsj~>F!7n@<-R28=oO%8djkPKuh!-MHig%ILs;lMy^Vo6X*o9UG-S0xe(d!p6Nb{)L
znubGxAd|*y9k$~uU?RVnA$l&ortW<Q`(4*RoL7WCPf%;jf0sCbYL*F6KP^7r_f)<t
z$&_F?4X-<}f$!uFv>}STVNfH23{oH^NxI)a#EoqSth?;}Sa519W0pXYde{Bi5!6l<
z&rO_!998HbK&!3FNSJP*IR|h3&Ws3&Rayy@5p^Dm_zGmnO8UhhTIM9HP`maTxp$@f
zcn#%bbPn0cHM^y_xpV*sQk|t9%u(yY3<n<0M7Npv)K^^D@UYtnBgkE7-|i;$X^)oQ
zq3x!WF5Q4W|6q?6hG?~O=6bYe>y(2ux>9})yZ(-YOqL$48T-4kui#TZ!8^yhQz!Y}
zA}=pNkf%spO(<xdRkt0P$)2N=ZdFRhIDp&8&OJr=Vk~c%Ncv)}*<3{ES~NlBov!{|
zvw?h*M;-Qdhv3Jx<1fZ8cQqk_D4r!TjBmifF+WTx6x1)aoN-NA-=kwq9=l;1@~%%&
z#ox=;8`nMof0-xMtL&Cj+fFlB7NEJ^Hx}FZL}5C&#kbSIySrUUM*%b=krJra?wdTq
zpaxD9xrt^TsuTp0RMYZ<Qp2x(B(?EbH)V#r1GpCeD!bK+@s5UK`ai=~jB|gdPc3*2
zn$0=DN0NEY)}$>)Z!NYQI->)q5_o1nMMjfblw3O1h7FGlv=bHN4VP~PV1U3p$}-&8
zA<0Thfd0t%C_Z(C{<S96(}CPYW2?H#43IOr=04#9?wiyVcO>#)YaA@_8OS%YuC$oA
zkxJ56LYnYnv*MqD;&5Hc0{KjWhLy&GRav}$W3FPvXm1Da_rD9j1(6Froi^i`PA4zK
zgeLX5Y1<7d<>4kag;LUNFO&B?e|e&c8cvm#?L0{Ts?t8klQcE9Y~sV<y-4tyLoF-G
z^lO0rbQ;Akf%-&;U&fCUFL+QZ7+9jnGTi6HYo#M%R<;cOCe2-27Cxc)AFZ5qP#oR5
z^>KF#!GjZgaEG9Sy9NschY*<H0R|5qg1Zb5++BhN86X6g5Zv8eE~#^K^Bul=t8%K&
zo~n^Qdad1EyZf14wVt0gUjf#d0l$-ChVHU5{5`?*zR{9K6ImuJOa<!^n;#<+Vob>J
z;38<dC=+s#PD!I2cw|IKsJ2M+1lTzBO*wyb_c`%-s{dEu8>qK>O^QwXb(f_7{Y$2k
zv5bZh3oe*`IMWVmIZVZ&Gd%{a+!1by%{5W{eJeYw521^Jtrj&uYIC|>C6)?+P0@>e
zcqQ@b^IyGi2j3p<@wya7VgR1V>tOz{*^w(Ta^#q)m?4jId)aloF<>@^E2V=fvYNR%
zrisy<xzJhLqG9_EGC1hP(3YF#FI_kB^W$<-8r@lL;vrN}{TOh(ys~FlJfW=v<w3VM
z=(5DK0nUMSLsK{~StFTKtHEiSYsy$Gg8|Fo`tpawN4Yf2gfzXI2A_?KmM3!0Dy7A%
z3FzC|1fbkpj74*}nXjk&Z@QGsqP82!d8|<^`-5vTe*nP{ZB95%zQEU^fq}(^FD_mV
zd`;8ETrZCOND~L}Ikjjdj?ks)h;b2i%|X-y=8s3q<at3$XGUn(MiIXSFNYM;@Cab*
z^n9%L;p5SNt@2qgcSWH;P(Yn^*Ci**OKyvaYt{8IjW95FVL|Y-c89AgLo>m|j3Lh<
zXFx_B;OUm`pte$^=&AQ`!QL35!@?|ZR!xKZM`aT?V?B9MO^(SSF+lrlDPG-WXCHYZ
zEPJMKk{mIG%`m(?li}i%I4h)H-E&9Kepnv<b0}vf4dJY2$gucZoYJuo#u7<afnF%B
zs&uwRlZFnu{EPNUaHBph-nmqAO)>T|f+a#_*hd;nR#Z!BRCjwD?p*n)9MgDmU_m7+
z$B)L5@7p@4?ku#KPV|*=A`$l}p_YqMxq~*hz??ilKu#P8PU2Y%{v9Zx0c9;(Ey1aW
z6vO#&VQ0IgmNm8Bwcbp)!r`S*fk_E%9mdrf=d>>pso*Zo6t{z-un*QEzGAw)V4w8!
zQwLVpJkq5CS6|~0r&Z&AF1}Zeofr<j5;4n;Id3^O7E))*90(fPh5dnaPV2<KLLHFS
z<d+GjI{b>lJsMe^RBD}H&=@B3)NGkGbK8nc{MHe4@V%7uY>%(|-U~Mbd&m|!ZF=lF
zN^+|IFw>+wEl_y|7rL$q(iBhJtS>+s`TW!;56ldt^&<{iMY@pL3pKW1zMo9__9O&p
z-c2j!0L7I99=0W+>@)`s{6@2?^XW&SRNRJ#53$sbRrJQudlJsef}TY#8Dh`*g*J-L
zl|Nd35V^J2I7{9D*U4i0j&JAfQhLuL7>aqR_fp@r0keda?+%YU$VJ)1)w%aTeLe0%
z(E3Y)iX3I!1UJ7B9lRAol-uV40I@ZysL#UhoaA`IY*__<2qTp*;HC3J*{H{*V*%{>
z#p)+{FU|=Xb;RpHCnv;X>Kody?|0=mpo-u6cLuNKfSHzr%5x*O0F%+9lNLt;nP5{Z
z@I%#QW5y+SWMxkG(myA~?%I&UP(kAx<<MUYmBTB%#!y%m2xyY8nfc69NWPK5mN3Tr
zQ?NXj?|HQDg1beDdTto=Ab?u4F!Ou9oLnBmJd?~~ac`ZTeQn70ncyVeJaHkki9?s8
z0Qo2L4b|Hm_mKS8bi}U*A^yNoxugB8Oyix_fGvq?c}=z_b3&^>T3$BQOgM;`W4YO-
z2jrrds~jlDDQovQY_b|Or0PXL4tO=(q!wQjXv>@0=aq+aKpESRfEHN?s7jes2yE-G
zj0$J;Hkt*+I{E^~x$$5|;e1@A!qw=K1}CEeFcFrSRd;vE>ea6(lxs!RtfCt5@#jZg
zbQSm+F7$sg%+a18wy~U7)xh+6NOcrWGWCAS)JLkM{hVGZ(4g~blp}NW(w%_bbeR2I
zv+>!|)VUwtv&A1ZW#=a&RtZL(8#j(diFqr?$I{tp7iKp%B*U02QLU_3MAb+?^A`o~
z?;?^`94>L>N-Vy7;ULk+%D$o^^Uzx_Kx?h4(#-Wv+jryIC$o)IV(-OE0@5hG8sT2^
zK1P2s0Z>cA-pF*xP%7S%F-n0lu-lR(1S&P4t>L*@Rwcw1dZpPi&pdBM94e`_{kb|f
z(bvSI!GUZhKFL-Ug3r1`8}3w9x=C<CA=&Y!X)%Q9_&lzhp`+h25WqV>co-ol>Z>o?
zZ-n5a6aJwSqYtSLEw92NZM&`rK*Y(aElspJ&Lg1e7{sD6U~;L~=SolRxziITcIgyM
z0^b?`YHRtSJ>EEe8sx^WX~#&ou0jLNF>C8J!jZ=|*H9E<x1BNAlBA>2RIoL28pNSv
ziEjZ<Xi!{TaJSHeT9{iaA4I505JL|Dedu+0v^_gWlXU_XZu6^&t(-SlJp}unWR`dK
zA4;iHx}jh3^HRS|A)cEslpiAEajvCsH}HCm4(Jq|%A7=MwfKe=p+02$S_}PG+>Fh1
zUZ8I<D-xQfC3lYKF;`~=PVwk#+3UUxi)C~ysD^tbVJK1}p~JipQc8_F;3&_-h%58-
z&EePviF|Idlm0lSd%xUvlMFiL-VPNw(1?O-1ND`d43K))I|Ont!6Y2fVUS-w!Nd~L
zp`S1QZr~~YXe1s~gq_PHkBlb}(iGtxNIVlS)qe&V^!o7<^kwveMm>{KU_bB@Ibb1E
zjr+dM@GT2_frNGXU>(_44}LkFI__fO@44vLYo8&OrkA8|nR<54o*u+cj)d$O+_dzz
zgxPbB2c5F6IiWKikc-X>^z2b5{<O)3t%~4@vMDJo*4Hc<hbDXBu7{gPg&)Huc`JN(
zWNT%)Gn5v-Y^8>qlsuj)pJqK;4X;wZCSzQWQARv<a?khEpU3lcps1HH^#u@47T1=l
zAHCu1RKOJL-rhV<`U>Y;J$QxHG=u$N?GED$C60<wN#EW$gepSIBhZ58)6H41x9f2}
z>5!A&Y;s-xG=^GJo%0P(n~noFr)67NLsA8o6oylH*DJKmGWpB_J5=8ByY2xZH4Q^c
zz$n3(=46hda2^L|$ikD8SPK)kq&~oS?SP`Q0arhjVgc=^+e8;|)PU?=c<{%wWW3p9
zUT@}ePnu?)bn87%s2hw6gO<yBlSa?NJ3F4Ue72Ri;SQzz50P4%ztSC|DJ5FRvXxML
za(%cAF_p4yn-xAqZ+}^IEYS?#q17`MmOe}))1S>cOjB)UMr4jGAB9{I(+wt^ex*BF
zA=1l(d*Og`xU*=va<WVI<xu#3S%>rDJ?`T`o*7DKO>&)hH)Mhr40DuSp5N?mwqi5v
zzo!b1TS$b>EPwQ=2@p99IWLWuUZTKw!`x3!O|*K46XxWqyFIZlfxsM2#&_kuWpUi<
zWvu(s$7!nMKGO6}c|^?=ya5Ut)!RPY556QE$~~D7PEPH{8Kfsg%?6T%c4hSLngF6^
z!}nR7@3qBqDRBJJNK2JP2Trnxrck`|zwls@5ESs}RqNhl(z2hxE>&!G&ly?y4-CQC
zk<KsC_9>1UbpiR0@0~a;1705S`gB|6|G-Mu<6SzTm35fXpchsvEUR%2At;L#16@JI
zIDhi&Tq}m3`lET;b2#-0AdxZ+v+K0m{iNc1KA37={rWxmC&Q=i$8h|??;}n5J#x#a
z=gTU^fG#1-&(cn)#3xQl&noSy?|dcF5kF3@uK-jtdK>+GLj$@SFu~nAVdx;T>OC_T
z>2p9+%yHGM{LyizR;{di+wGN}-nWJk=k)<EV`81jK&97P5dHqVsn3n{to9y@z#gcz
zPTVCmMFPmse1xQOlpxr~<J#wQQmWd;wg<rbIWLj-Q=O9!1?97wD((oL#%Ci}>k;a6
z-reanay_RlA`fi<fMMhMCT5$KZ*-C*H)1EvW0Q*UTdmETQ=AbFg*vCq2^lBZvmOj8
z%468;^TXJi<KrfjZ&J*~3Uw0PB$oGr8zdQEg!ysZD^P_bQ%ADXzc_t|zKFN32bbr8
z4q>Xkr#A9`s1K&^Q$pewAdPX_E$1Cgn5&WfGS5mIy-FrKtw2W>A<i4Ie^%Shag{6b
zE8x*kjfsY_{S9Ts&Z~d_cxTd(f`3a-PL%W;WMD~j@Mhx5^fc;nxH~6~(lCC?L9taY
zX16M|_S0^O6@#<AXtpQ91v_1|NXMK7D&-XCBA-|HLHig!1=riKc~J*n6TZNRBU!Nv
zc7Zm_0L+6Vb0t;0gZ6w(N)ILf>wMifi&t3l)-xfmFBb4?gL-u?v14;1UKwnO>pqak
zj50%B(x~MT7t;H~hSEMO0HDeUz+(kc#^$wsI>sQwc})^ZhIkCb7(6Y<Wk9cJzg~D|
zk10Q*;0Q54qQ$Kw)!-AwddO#E2xQXF;#DMT)?rxo#})Q*2mFj4d`*RBQCSGJHrLqb
zDHdmC5C_xpvWKg-<ziL<`lW>YKBRUc_%Vri<lVY{7uri&Z<%u+B0KZwfj`dVD<Ak|
zv>yNyth!I0;y*{VvFth|Okey=($hadSD1L@yiFL=&DSzV`kb;Aauf}HgSrm$6z(R|
z74RNN{w2$M&a}rzwWsUWk@AZe)v7H4TBsb>X}cSYh>B6=R6dHRSa!GBm3LHXj40|A
zxX0HI3lh?{g^Bv!tviB|>wQbMAog`?YZL`Bnrm#<ac23v3FWm&7KJr}q|KH+BbI|&
zP6ZkATcH-lNSZBwc{1>Fxo7Y9EbZ$RY?dz%^D%gyq3S-1T&WV#I-kJx4$aP(rYLN3
z?0B&b@?!Ulr`caZu)<#jnfpw|*9R0NonS87OM~UX7SS)X{#I=}SU{eqep8_n&OvrI
zr(_MLIxt2M;kKirbD@IBnRPK4J#M#u6Q&_-Sf<GIT3D)3gWx10xwIV*(ayLO2|c#L
zwSGr|DYD%hscT)9)@_t@4ko|-C<YlgaRl}d$=_GF5|y?U+Qss{NE7cm7m0Pvz}P+c
zesa|^2Z^eYC{f{c7nFMXO--^h<<1*xzoz(7HHA~_B&J|4F`*^>J#9Z+-Wnl@yP2F3
z3qKR}8f9lXv}^BF7zV7t7jz&pwzeJHWf|uUiFV|o!c+vp2UCbdVndcB+!aQ?8_uUn
zs9>Sisc_vas#2#h)@3ejR;sx0Z7!=O_%lf-oPR%gU7qbUV$6vaZh1h0Jk{B^jjF_p
zrBf#?WOBKX1;2ILbpvAtO9_)gayD`R+kFj&;a7uOjgI)7Z+cGm6y1rU*{>V^Xw@v-
z{zoS|B=wLb&8)1(d&VXW?AH0rq`6BD;58@{JV(unyUQMyA1opxK7L;1>yg-<*Uq@i
zF(v?MS3m*~QwE@{-QY0{ca%M}*p)MNdr?#HksZv;Vg|WdiSHBRoAbK^)icGF>CX<0
z?Y{0a9g#l^4IUkDS|DB;Rh(f#aXUD9O<%(pnPPtjV`s;~FfaM(5+(g8e%XsC`&RL3
zFv~nR9~_UNZ<T3)q_&c)C-VOMzUKtOmr7B3#~KJizOO;Mq<N#-v(W?(N|6|%^tg?d
z0YxfIalGPNQw4okd6J|*M>y^jo1OLDN{g(k?VXBaU(hpD(ARUh>D>&|@5!guPX)60
z?}OkjdT2s1$ZA9@NByKk1{=!1wkO?eIP*KN+W34+Cb{A1^*RPYqfnJ9Fkqasg-|&U
zFxV<dFwUE$YcwKb)#=sm1-c>lA)atbfrit$9AS)QZ3sa=Zx^h~U7nB_>%Q;@*G@Gv
zG+m3kNH%mH&{#*l(zVUZTTw6`V080dK(trV=<8>TxbBxsF0NpEu|-7d=Xm2C8MoNX
zJ_;8*e)~b9lhzwT*p-LcN*gsjv_?;2m!8_rOG>aN;lH>WRRB+KWqE)PsEk)>-$!Io
zA=XD;+3(pQ_8VD|Xe72e6x@5FbfujP$I!h_JB(?AIfAP!E;{$t;6NQ~0dJ>u2>s{t
z$rD_f*5jTpTsRm=Wx(xvMvSJ;FIU)ktdd9My3&qJNtmLgy&i0~DaFW+r0`R3X74rw
zv-sZK2Mj*3tB$-Oz6XEVI=#Jr)Vh5KxrC5DU=uYTXjmM7pQcflmXK1CX0tbM(Y9Av
z;l;U2H|7k)-YJboh@_rb70)KKDZt_<*Sz(Oo&Yv~Xs>XttpaP`oJSg0q6YgGs$Z5D
zbsY`}9}jE`n$xMRX}_6hW=fo*jrf?fqQ1$POtz>XjnUsmE+K)ab-{+na&USz1?{f8
zvd|>a*w%}wwkJi7sL=fCh9@od@*X<yMhVSF{$1TdWuStjA{WjpE!^!Gwe;=8K8Q)4
z-AI7>M6~h@RlF5L{4CE_<mig@EU<eiI5a9}qYxt5t0*bYJqVlO!;n4fm`l5w9Eyo4
zwGscE3aJ#=$OZX{LSgYVMPBVXfUGB}7%#?df9JNkrRCPFvZbc#`gm?`kH6MsIJO5d
z)Y~>On?$hGgkdhU4rX(?OO>#*!p;qALcwa-S=T%9#SF1YH#O0Sufvx9b4lkhk)%}P
zmuZUhCf^%OXcESZX$_lE*0HS`O=glqvQOXfH!x@o7DULpon-Cb9ybg1%&q8t<SjtK
z|KL)%q)$+OCbd5^l_WwaN4m}irv|!PwIh-~z9fTJlgTdiZC}fySGba=SUP1CyaVmg
zDQFyS<a{G2`uH@Cy!hQk)k~@`0;_ffuOyWGu8dtwcMr^#YREj$QO>ZH&}=d$zzQ*3
zYEr{}t4UR!MKs#e9O7m0MDp6@huIMkw}cnUvO!F@QeR<Z3|A^!yrl;Ry^-INw+4L{
zbd*i?Tmt3K=j%PWQY$kj1HH^Pd6JW#Ig7i5TYWk$2pza3xQm2|L0IDNMvhV%S|Bkt
zSwL=`lZsk~{jQ?;DK>|PxQ33f2-F2vJ?LMYX_lSJ7L<X`rjgRFVE|9aEDz5Vm}--!
zN`pxA%oSQt<Yy|ZS`klp8yV}fpHXZ$n$$1~Zn}H7;pl@T9*Fp9$V8$%EnvCl^R<tc
z{6NxxwN5Wr@yex)G6pYw6=yKom($ao<QFC8N`w<t?;HS^9gMUGKwfDk691*Sai%NG
zh+2^6`!v9$h9c8D+0fnRw8ntlE7UW&K!T;A>JeaO;j?Tt<tLCui`i{D>YgXc>QKJ#
z`ARHDmdc7?{_NX@^4sXwuFp<l&FKQR4^^8J2vL9^k)zSeU?rwy8fjC}%<$WgC^FDN
zSo^xBmQsCm{l;AQs>nj@Ic8yqc>cA1aE^Y5p08sA`QTNc2A7~&E4%9*cEv)PM9ZH)
z$cQ2wxd;F&_{>&cv5x8**Ag)_@Wk91D^k*!-DyMSCb_wcwADr#VF4{)X<~7Z7{L9_
z1Pta`<}^pqbOo9MTF22{L8dO!-cZ~*llV_8IW=!{6+s+Wo1HfL-m?64gD{?bu;H^m
z3nsaO{5z@C)gyyIJEGSL%lsh`H><jYo4FO3paAZ>{j8UqB9)56p2d(m8gY(!On=9o
z<;iRRFz{&>i@3@~F^wg`iz%Pv4((>4bWuVO*qv=9vZZa|&J26yumses%TjK{;V>dH
z0B>)I$2-ID@qVjvf7<B-s_)O70`=KmZSsYmHbXQi?Ry64-nl$<8=G{>WS!3y*O8|K
zz;srhxz-H=F=MC4Lssf&NvjEWuelu5z(K@ztAlYGElZJ?!xr+hDx^R9)QB$K7+we`
zKJ{`-!?}>|(>CjM^e^U&W?CK)7B&pV6()NB#1>Sr&FSEM%KRqZFBsM(R4dCdzmum{
z#_gy2b<(pW{<k@oVg2~L9~(&B6*}r|xpi?h8@ifAg<3k$90l)wP^2yuE<ITs%I{%V
zPhhCOzlZ-9Bje$j`u`E3S^xe)3vze-KVtN6f?+mP=Djy83=Gc$WJl;fm9lm)f9=Nh
zEAD8{269eQZ+DvEz-ifLK3fZFKO`ra2{?<^a9%(*w^f?$)sNENO2oTsVNQY}Pux^g
ziAhhN^K6<arR;t9KXavZ&5;p5=pfE7zFiQU4eY&DVT+f4YFB)QB9dfvxP*0vmRSfh
z?ZOtDXJ%-?LLQk#fUszbqvYVl7vMy#6$#y-&SCPg9y&4-KPhp*F|wO=+3Ud(bh@cl
za2I{!^c+{p@*>qat^^i@F&0fXWK4A6CP>B;;G~M2>o~BQo;Hzmx=S44rCs#yxb~DF
zO%DcnzQG=@kMx9LA$}^(URyH3!<1HA$y}|e!FNQ00Ky??)velgT|GovWLqtrt@Z<2
zf@8R2dxCnzpLs`WLyf%EG!Hz~!0+xyDh4h^993~kHx8!?x#=46EKwp-ymkh=qY;fJ
zK+Nb_N(o`r1BbpXxP|&4<o1SVn7l2s;6miONSEXY&<S`pgxHG%@VDTY+Oqlz(k{49
z6z#6;ju(!nrfrV$J72d>ra$aJ$5J>&R#kw76NCR}YWT0U^K0x%{Ca=H5dY^xe^JDL
zk6j7ohp+#3=syxy9#TO668*i<9#h4Ci$cJTe=qvKjPc*vzcd~b(tnYke~(=W#)oD7
zmlOV94)njz`Y{Rmw=x9m^dBn!<CXfwh5mg)zc1EfuIL}z6x9Fhg#Ov~Un%9s&X2)?
zf1J6o{#(xf3U57jevJD1<9vhn*UtYh`0KI3W3td6gFT|ZHuyWv&|~YzIrBf(2Auyb
z>p!XU$L^0Kcz@hm`Ttw)e*$@r-5>7?{<s%t{<Zu6?Gb*f|5AB;>;Ec+zsIfwp8j8}
s|1OOGe(ygnjlZQKV8j1Z`riwsssiFe&jAb!*2AmlVZX%v^4G8b0UaINPXGV_

literal 0
HcmV?d00001

diff --git a/.yarn/cache/chartjs-plugin-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip b/.yarn/cache/chartjs-plugin-zoom-npm-2.2.0-85aea0b81e-a540e38340.zip
new file mode 100644
index 0000000000000000000000000000000000000000..edf50232bc1494d1009f77df85a139460646d609
GIT binary patch
literal 27387
zcmbr_Q;;UXw<!9yr)}Hjv~6?Rc7JV~)3$Bf=Cu23YudJLoZ0`q@58-u?~N02>LIHh
zGBZ|1WUk1nUo0hAa0qme|GI=~mtp?%@ITFue|I~3Q!@iwdsA0{nKP5p|7TZ{|7TYd
zOCu*2Yi9-rfUAX-9fOy>z3u<caLWIk;igv3F8?zJ7zoUNqWvJ9MN=XG0WtLZ7ybYC
z9RDw|F`7BsGFm$i^V>MDkF;!m((U+B52S}mwVd{dYCjdXvfb+PKCO(~;>VN*N=u1|
zfYF0Uo2q?1dlSC@?9vQKu6**V7r)xSSlzteY62G35emN1W*U^L-`jk;^mKQQMV0lX
z9ny9RD8weQsOfV~b><QhY;J6jR~o5kU`YllNG=|qC_kv9&xFn0dfcUzjqdLYLPL9K
zValiYcUVtUjt~+xnWZkTl6KN!YGH7sX+2y`A<eD(<YKr&F~kxcR=H|%%(<UhLo!U$
z1+cakGxaS8XVmt_G`je4N7gPJsz3F5rR0?T0-B?j0M)g)>b@OQ7|)g271MxBryp&~
zYR6c^)SY9v{lvC+=NF<{$MX6jyW96~q8V6IS$kQuvPC(#Nu^02+C+NhKv#|3mAE4_
zWiFUQy^gV&`|7tm0A7yRVP{2A((%W0oPTkjv_`Q(DzoaRuUXe5dj59fWf*OhBfml+
zc5h7K1rJ>&30QF5N*bKPEilOv#24D4@cG%S39Ek}Ipn^|IJPMc(=%nR>~FLkf~7eb
zJ>hLAV$r&!a&n%e8d^?v_Uu;9v3ToFCv|1xQ6+6*Y3GEwQhijTS&nj^dDryB{g?~E
zq7dTnaQ}J4qcox+*Y%7Ewl_9^=!hcKd;Y0a$j)$E$hX}J>`Q``KjI=-`8C+NN*DZo
z&A4B5`^2zRoL?A5=ce4IIxYapi?zt|{Fj~l;dB-)SmCJ((_6E%MXoQ+t}|vHxIKM<
zPHXf8t4$%Lf!U!t8ya0%=P>RzH?zkhcw3aZccw$J_n`HnR#Dc9vbj^QnpipS80fh#
zSn0H%*sZWG-nN|~C9j1=x}Y@x#%G)Z)<36X$sTiM=QGW~s0qz5f#=9PWYSYhoJD~*
zjB_97!_(Z00$AN{$yjhRj>hH+k98~+px_#|@Np4s5#H4slUs!;ty-HP-!{jlcUJ<y
zjTcgCZ<tD5^&Av0)k`tZ<@9oBa#9;5yWFT@s!f&k=fH4XC|vg6yh{w~7MUOtxB0-;
zT+<O>3Z8Of-b2|&@lO7$^(gJX*<dNAG$;6tvw77$9Cp_4$78ZasGXgAVI*%K{g;0e
zVyl(uDwYl2-CbUt$gr#rqSi7}xFoAPHsDb)Fhvrj{vu;j78)M%37t2bGl5OC7Se_F
z)z^H@T%V2NuHET49v*QT58~k{dcfs)r@%6*YPz}J@#!MTd`PuYa+p9i7hj9!&&Iqd
z-48;?@q-i13=g{9=%nhpGg(ln`aeoAjAckpzvnAMR>~-CVfIP8BEC{f`g&yl-Z~sj
zkO0u&mxZL2O$so%5hwy%8)OaQDl$e4p68lq0_*Nc^-!(t@71>!RSk0!Dton=@;?iU
zo>&<$W$QIeS9uup&483CW>K^~0m_Wcto8EnIumrG@YEJ+=QuIguLWf$<+BOw>aAc-
zb_^L1aHxW8EzKmQT$zdN!Pt{M%FPqP7HU?Gpxuyo4=94trx1@sjd1ibY8=<|N32>U
zSsr{UdH1AHDG~XFWh-vj1T5_6D*FZT#IsXinGQDU#MIKKuifdmfd2Uwc~4u=R2_T6
zu;h*JLalfCLDU3GEm#xo8Q0$NRP6<F&rbrS>1#uWGTGS?rgq=Ph|;qKjh#uo2chlM
zCFl?gw4s9FNmPWM=C{?001>D*2y(pqJatqmeW@5UIaCdK-)Z=+MspGcH6#bhF(VIL
z`5`D~pFasH;+A^osK#!o`VavL!$tD^SINMr=7}tzy1=NXYLxGNFI_1$RJH)W+atqV
zYJaZfc=gRRMrXihSNCi((l+J($^(W?)TN=f$mM*@`V|Gq87IbASIlEC?TaFY$n;j9
zYo_l-K>(y38GDnC^$iZq7#X+;xe?MJy^N}68rQ99HE4i=*x)P}teq`K$!U3My+o11
zeez-B))R&AzPvh&Bg)y|bV1ssOr~iiIBqkURT}sSf*7bs=`Gqf4S#HKWL)(Q!UA?G
z!4+CsT;Y2fE`i}zi_D+u;15#GBDfx<@w5`u;X<fNx^CK-UZzm)InSEUiqW4|GBD9~
z=G|8i>XRJABlsGWMqC>HREZgNqY^>C#Sb)<P99Aa_oay_3OPHW$ZM$>CPYh0Dz!u0
za_v1BW#TujJA~G58R{T>N)&m!;_V@6D)smTp<QEl!7+yv8}J-LRH8@2d3|DYbIVKB
z0_05tOJGv@uRMOr_EgM8VHIfax4=k|=X|uDmLj1pdc`-o<}d;OP-hldCVq;ebwpzh
zH-}imk!{-lY}P5QSN;RQ3JK)Rk4NffW(%^01rHQt<2^>KkhK5{AtBI%#Ve&2wtt(A
z$}t>0Ze1RbN}C?44~1~0Pzog!**^`#WJl?2o`9+v^lB|hjjh&dG1zOro#5l7<hswi
zzTBj(REoU)?5uFlWZ}<?j}Z6B6Lw?}0&msUi*c`=&6cjZuSv8CgE<0ihHkq)%>q;N
z+XCn{-P^^hxDXQvweNT5Q}+*462;d#o+7A6N@D7v@VkQw5}F@a>BJ*@?kb_L&x^@S
z_~gOOP9uQWL!KNAHFM?C_<OsN5?^KnGV@>4iX$mGH@}5~p&e217wZ!$D}Gp<Yti5Q
zw3SrEhHX^^RvMJ4=L|c^#X@Eh{P9KNf-I8Y6bHD~;yryX(N^7cWcrTLx?K|djpQB5
zfZ>77g{5cU+{RC(TvMP|5JETwtwt7c!fB=aT;_pr&umTa9}pNGH2h%6;@YkGGx*~~
zz4HYs6i!pF^O~8NZw5O%=Yq6KU%%37^sfuLqx>YV#2?`K^}=<-3#3n;$Q0Yl`yXre
zH>H#vcww^mI5hMh5-uJsXgEpZ{R(#af7lr(tlt^(;bbuXW;Ud~H_G(|=qH=6>(EB%
zk$gZEowmEHRgm_c<V~8!N1xn!vUBd@tHMw&m>!KThKuFl+~_m4R;e-BD?ToM)np$l
zoQq9>C3lb~<cXujJmqp+CwJTWxlvPLeraa)1j`G%@Po898JEPQn(mMN)yV%HWq${$
z6gKj}I=Isfj@Rtq0B;3W(8C)dmu59p(lZoEnAg&=W}dLTNP@x8bK5z-T!$_WtAS9x
zmhihI`FserhNM{W^*RGST%gpzdP@z&80w(+XPirq{?V!k8eN+YCVz`O!TNIM#KH23
zqvY1akCIE9%NSSylUue#H)+apd%{TYl!f($$is#G$i3&H!~#d#D4AOuLaC_Li+8&4
zpw-X^+KAlk%}UcE66-k4fuV+u?921E-}~t!Ql46O=XAacOH40eoa6<yKF2Ei+rrN`
zIL>T%CSa8e#;15H)BGiSCjPl`*%c+wFIZswuaeuxv0)Mh^9}{bi4~ZD7G#j^L<vDm
zD=`-6q(4zu7T?+wJ|?1#dRUm`3gf{<{i4pVRSpkU^&&AmKYu-XiMML{p}aAICw7K`
zB()Sx!(KM{skPXiwFcG7vYYvphK3cB>u|$#<2SfrHG(W|ki%OcQCs&8D16>qcW6ZT
zc~IPph!~g=U&|Ue!n&D=)3Wah?bw8f<vwR!wT)%0i5wM4a#4dJe}ka?fKIo(=wIdd
zGAg+Rzaw9CH~=;2j<wCeW?M$&KF4eTZvB3Pwr2T4{t~Z<MtxCH#Hq;+!d$B`Bt*I!
z*IRF?OT9gVCj9F%qanO$0<M>tYdt72Wi<%07H~LDj64uTxE~ZBGWHOEdWOMY@prYW
zM@}r1=vGN2oFJk{$cfX{y+=ac-5uOtZUo^K`A!Bcv$)m$kp^3CX7&{CX_CB~9^g3-
z6XS~-$8vL(6D^D)&*u_Gx)t*uF^W6Xi->EJ6h2Unz4SCi7*_}U^Nl7wt5FWKlpcGg
z5^n$vSGeTHX_F3)CJ&&?od?lwx_z*0{m%3~5XN@J-R%P62jB`Mf;YFtx%D7)&ZQdT
zd~&q`PQ^Qi=5BQkr=(ng!!mEQ4VLPsV?qYn*@8Y+9sHa-NMqKgn)b69dI{ZZhJ2pC
ztA061T7tQC4@+HC`*MX`GB(+r3N%JCnClwv-YRnd`NUtpx-HSUgcTC@94K$)$I*v)
zh?ePN7e_i@%iPRr`ZuC`MjZ=sA){Nq!|pPwS@AMn0`XBfSslB8S5>tcE7j70S`75L
z$-2MopjjD7LM$m2)KP$d-><`v1a64)t^y9G5Sgs$wxj;jvYOC5+lN9mY&ywMv@LOA
z`%(bMmbXN8@On~aBt^2uB_j8PFZT0Te|O1Vdo%i+lpAj|Ri61%=2J__l@-%}`xi~8
zt;JQRZ+hnYbb<>le8MaxLzP@f&qJu$S4%85`v><`x?I^T3eU*ycT805PaFrIu2H?4
zHt!w#_Z>Xg@g~z(Or1gko@|<BW}2uxnp$VCDo!<&$18e#n#K3tk%iguO`QF0p~6eP
z!JI_n%GW-rQ3B7I<j7-_zRhi0UQ3koz9`O;6@$2>A9grj--bh{Kk7?BTfYSt#|aa*
z6ckE0R(X-6O5IDybNXnxw95Xy9PSM>#xf;v^u-0bwt&Z1r7FDYes8Cxy8qeA50htB
zkGJIPdSnq)HS*`nYzkkx>`)>dE-T6Jc{uPC_I2-{7SwuRvKk5#BK2jHhUt(-KgZz+
zm;qNogC)8C`}>^dRY%~WIRjN$7yN?Rn=!uY#bwmjW*yr5@u6VuwscBp!NyRI@t@|q
zriJ*~ip3t2w`qDzE3N@Kvu#(*=W^tz?_xb_Ps$I?OS7nu;<oaciCrM=O7>0XfYsIz
z?{ox{O}PxpkQp(~4(R)x;>T6l>r@a&1U)+^g{7$maD~yB&2^I41Ld?a1Z*cM3<j5%
zqH*n!KJFs3p`EbO-!KRFt0C)!DeF^Kh@>J{!?ep*b6D0k(9kYWuKi*po^7*Xq@4v>
z(_EZXHm{I?xJ#A;G*0?MkTQJ>0R|5z(t$2^dHtN|!dJwc>ZD$Lv)s@RZVQZQ1lmBF
zQ*cO{-k>Q=Ondj&7EUD-o={(<hPID-mUknQUCWB5>DIgwiPcKQ6EmF2E4u-(H*^tp
zLijq(SwDs-B&&w~9ItDG->+$#^^S3PoL`Dw@&cl^KIU(~s#S<yTESm7)o?H6^47dm
zg_v5H{Ka8^ZA<%X0}BrvnHAdDux7K@tvw8+wltD-xLw41y|=o46`*Q4DLIr)3);EU
zYEn5gT|ScZ&Usg+DW`u;iGorTlVJSbGN~Z)0p&efx7VO4ItYM0=9qc*g(QcG6~gcB
zv^<)Zj7AcnR5d|g9b{4^MTP37u+rJQUMvW_b&M|x7D(haK-Sawh4ZK!%4wfdu*f|`
zB3e;ec%EC}RR?wdbT|xoP2|&#)-u7X647Zdj^nA8e{D97X9aX=8PTnb8SDRZk7~kZ
zgs_}0xnatdT%nB5^c{O0ii3sRTw0{@xY?jblvN=yE5;>AktCXh*-7Xo>MNJo+&LyU
z(V&ybY+ZL7`?lU~*9e9z7C^SC6ybij)(q_`7v<7$V<A0w17Mh(ZO#FIv8!{hkUY@^
zn}e7+nd0IwYgF3caLh@)+Wdogl`e(#H1S=s9!5La4A%2Q0*;7x%2oUCt7~aA9cQH-
zV-p~P6XO;FTRHT(K5tENB`|kNZ9jH4vJkY}xl7$s-QwEtX&N2zfWA=+0ZZ8{$a!?0
z8EbmtrmMzFo*R?Bu>HRL2dr6Gs}v%{Mb%wtJJX*y{%B=%WQ61m@>Zxi;l!Gz0fKNd
z5MQi-MMKMlh~a~&O#}anq-E=yoZH$GhnAn>4Ub*84Wt6s0}#2Hq`cWVJWw)G=gn>$
zXlZj<_;zfQ*d*!@O`aW-pv1rFH=!Y#eW2AxOr|Ri6?fvb`&~MV6)D^7fHQW$Qr)-<
zU(EtyF#E`MXM1Q4#~OY@3{VxxpN{F`CGfXtaX7S302G+;q=yFnjYr+}qRQNyMj5^I
z2{33hE43aN+VmN6Qn3-Vm~)ZY@OL3Mi;*Swlv?%C-td#1pCVb*W*K^>!-dYEPnYTX
z;Lo<$$F^YnA@(xu8bbwFX21$SPF%b)9l+E5FE?J=*fUUlAsL`+G{Uj8l4frF{Fu2C
z%grup#k&e^{^7@37`ON5A+%OsLS}}hpD=MHB8u3%qf|VgHXi`wAv;~y2qv=&SZ+L1
z=kC*<%LgwMO709!P}dw}&d=%w5zeLu*fV5GYCE@sfuS+BZ7<qrrp5^sn)$p_bmhZa
z4TIq~EiSJBv$MUT6$R;0quZ6^Op69Xv!kld+DiTC?)^b?V;hXV7)1G0^kN$K+-BA_
z#h{?Ugi#o12h#HbE0JF(POlHg?~rFiMAJQ2SkV2PkYl`T5Te6o!E#O@BXgP8*wkA%
z)L%4Ih<|5sLi1tV5DTascE;YaD=EXn!B8OD9Mhuc`)r<O_jx+Qaagt{Xc6Jz<?>Rp
z^KGXr^`i>K$c7qIgYEk$a#>6a^b7A~alyPmA#sFPJ=ZXcOC2%e^d-<pDZ9LYefQqF
zt4kfN9Z;e8EwmP*5;Kt56ilsg4+0K)2xvB!-PWz%uEbQyXu~UW{v=w?-vc=)P7eTK
zeH_CfC+bv(%4im=$A{LwOQv;(talK3aYfgS58oARjwQ#l(UD_kk<@t>=#FdC;oOcB
z{9mDYl9Ax*tL_hGSkw3_#t1h;q-VHdd_tzwS6dHsWCaR4DriYWl$U6P(qS+e65!dR
zLXc)q>^Y#oWSXn!_w<z~qtK8?HnO{kRgyMiDSa7+R}@Yvt6g!}kD&6Xu|UjiwKBpE
z6$Yar4KU3_@{n3}Cb9yk7dBiFLHQhCLl=E9G~``Jz&LEE3ht>CGR_ubmZoN2S!yFo
z&;T`We>x&)<}$xzq5!Nu-FtL(2+?1pL$a-5wC0hCSzy)NR|x;$FlcGNK$_v5UMdih
zs0qTd&o*qnz#$6FyJWE@V`h<S8aw4LHE<OlA&TWzP6`n@((`FS*cgE`xm>|u6}Ju4
zS3s)XN+?nxC_cL94vE=-A=dylJ1^YG_VsvoQ`e=_tQgwY4K>5|0wD;7tBP)M7cC=?
zHFVS_^zUi7{QbRx8ZAw=O$vKxiI~I73l6EPX8j(Y0jJiZZ>v@RW8OEV2zPE<2Ny@+
zAFZ9uogb8}XlK3x+_g6Y3MheG`Uxy#SC{awythhz2{99s2~Md}XGdOCDJEBfA4^(D
zgKmmE@}C>e;RzOVH@UA_b2LQu!%gN_S62rukq!z*X-Yi{U(Y3J)J9aII=&>d6nB4d
zv=kW<rOPEWX+LB%WjgStodg97suo5)fM`jKH@{iW<YZu&cst`=NE_wrTkGXzS`19@
zRm*%?IOxDTi>$O+S3t()q|pW0*2f?bxsk31w|1iXR1`Db6g(4Z0a9z82Wr`dCj`%9
zR4fUAkU!FhX9J7r#y3!k;M=6sc|4CZ3@-f}N=B=Q&`v^s;KSfr6o4FN=Bx?i%V#fr
zG<P0S8}y6T_*f!Ab2B)2z(xXA64S}t7;JcoPA^WA9a1*SEQ(QsxUd?Zr1}=J6LDE;
zmRnxAph-%MG8Pm`-VDPwhx`-k8sU$20T*017qT~``b)1YP~4uFY_wp#ck?vKT%KG<
zkSFL}KaeADcfJk7SaT5ra2Ds+lLLIdB8eU!ZOE&bS0v&h(hlmo?S%c`VBYaCb@Q5b
zs0lA;Xl}oVH>vZi6>@8qsgDY7#r}pXyUq!Z-p6e^+k&U@O;*1R;8V^o-&KjhS=X5z
zhEy;})FW&bTndG+J>bvh2NuCKlqZwAT#H6M{g&f`W??!?+Xgi99O+<P4dyC6Cq<9e
zj*9%PrFx61rz)R0Hq4u8oUvGiMqBWxCW90jjlNa3t$|*C>6X5u+Nk0<Qm6bb`D-hB
zYED&<wvDlI3|D)x+j0a49qm(#Z}9A<5&L)s4RKyi0f<)LlM4-$ThZ}tQcxz(d9tAz
z)3r;T=_M2g!+x>QBF$ZKW9SF37PRPlcw-}=4pA7j!0cKW&sdPx3x_2)HHiV7YIy^$
zcMV~C4xHlC=+piTNw3I}ORWn?t%DQ)u9p3i>>i=Ord>)wl8+1U?V9H^=VuenQ8-Ve
zELbYsI6&(d=Y2M234oi=^@hV)A=YPARM~zvb@I3S;ztB*a?A!oN(#6kw*6A_Y9rWa
zpd={k(Q0VtEqj&@pEX~P*m@ob4r>wVKjQAP>{4W_2oF<`;*1+^H^Qq?Ham-yDjrda
z0=rA{1ho|<Nt1hz>h!S5ZCt2mX=$RzWr1A?Y(6)Pdh*eU?I!hSzboh%w?U3<CD4YT
zk6E~Cm<jIK&jgRLsm}hZz|#Df=@Df4SEeNmO(2`<lk7nhfa<+w`_y)PXKPc_ljn;p
z%q@&%LK=QMeU$8a`88=_QAaSdNFW@_PH=a<2W#Yg36JK+$}MD)R2Mhwic0=PsJx8?
zfh>AskNx;^?|m=w#QpJ}1Gl>oHF|jj=Q_gdnTB}^X*^-2dG{%Q=}<np-E51mW?scz
z`aKNB4BRR38?;7*$8TCIfdr$#w?OAOU9KvaZZ*g&M{<F9Yx3oFjY1PdR=~pT&k^`#
zcqeqKy`Ev%y-_=q9Gh*>nEu3_S55UfULx)w431mAq-@sM4(}x;*^+L~;5)(zEMF1-
zvKzAA@~SsuSRH=l592ObV~u{QvjU;+g1p${WjDWdqwSh-)Ci>Q`S+v9p#t72VM$)y
zt_3Uqc>nW492noP5vlt!FbH{sh35zD1YhzaQ8&QNW%Rchn2+fD?}I?lohVcgs?L6{
z&EZ(G#%%vm-Z3AvjODA}uS;x`0;-#X3|{&SDzl&on0#7p#1P(@G)B#cqn$+XY+N9O
zdS&V^Ke9%!7QTc8L!O~u9Tp2^>;ZBP(sSDZD_A7bOb;@Sa1At<Xmhz}KX6XP<Zh^1
ze~zXq6{IHw&3o&l#@$gz>`71>Uvw(E=;WSIhrdfH@Sh6K=WyXwJ>$xl2MbE)fVuy8
z<eET#i|0&hg<=1`Q*ELc)Q=6t{SK<F?4?hms2R!cd`TP`{g-qe`W)}dc7;R=rQH~$
z91i=Emq@FA9t!cnM}gd;EcaCaB4QcY7O+c(?X?^z7rVVN`M_b#zUkepr~5HH92qE2
zqaUXGj>_rx@fXwXa(A<gA#Ztf_*>e9%f4pVJOw#I)L0J<kZsP##x>a&KznFbf78OR
z9|2YZ7jH*vzKecsjiC@l2fk*?4P|M33GrkT`?H=R?_@qQds6a-4f~{U(v<h&rXQI*
zgn>#My2YJvJ!2*NoT98Rr<)j&E=5{=Bi1Tkj+cQWEQ~!)>)t1>3hVLf{4!JB^Nl-T
zt=Zm2PY+5~pW+nuM3+rqiG;GY3oh_p>K;mSU4TP~C1PabP<eolz**W)qpm9|j7~KR
zy!KoCW%Cg@3rG+nI%$(AqI((TfALX&#;Z`-_@xXZ_bAJ&e=p05{nl{xF1PS%)jps!
zh2H+6&_5=7Z$!}Opn#>_A>Inr#$n5#$)F7?ZhA@@Il!)llqJ?zT}~?w;;J9WiAax(
z=c3?I0i<!7rj|Oo$E$4U?6T$4^5o5?pLw#qbI{2+F7&e@HAlPw;UN+23;cHgfX3T<
zT9Ag)_=cBd2+vbfqMa6H+QcrO2L9YFMQ!v1fg<tV@gfX!G#o3VM@Dc(?6%*1wA$87
z$?>*t^&;c_72=B^@*GBi@V#7fy6s5Nw)so{^}!3;E_k~6#f(B|RDn`^bQjliwHIyr
zi;ds0ZUVpVwxX;@Zn+)W-lO!4|8$P-&Ww5lzUHT()GCU%qaT2k9p#vc`m*pAm~Ok|
zYA|)!8%9frW=+(7rS2sBcM{yzF<E5x-o?T_Db}}wlyFLVu*l$Cc9g=hr8!J$#wh8U
zTcqkb-y8AyPY>4d`_39DGS>ptOhMAx?y>x&SF=exvm02t;#^3u&xu(vYNa;h^g`~(
zhGVO8UvaIR&-~$;#o~BBvzPF<LI@OlBQ6a1<~Q_zgYo~RwRipW3y1%-7CaCHgzx`I
zYyTs)N$Z@6|D^Whv%b(cqbOtZLQk5otFcwpF^8b*;(&8H*+x`09fuNEg@hZ)Oym3W
zEl?61f+ps&=hHAQM6zhk@&W$G$xhY#bFU2MvFGO38lP?*<4ok;E|I!xf-ZrX<SIJt
z%(~m=BqCyMT^-vdbJbZ>uv8iNnX?1aE3Guv{(+^}OIw)aLQ$Utw1;+zt)5RepsI6#
z(0)ngFh-j)?NDV&+PgOK7n7fqJ|?_6C!99^hO8nJP+UjNEHSsHGVawnG5ZJ}q#lQ=
z?RjlVTfHozQ|p)OI{E16=y>_tOO<wW(ZP(rg3F_LOSf*tfxz;fRGD~1YSBSN?HIrv
zoTp~#I!(N09%YL3y#*(RDuRJ;hKW&)06jAm`q;WfgF`JgDML7Z)bwLA1V*%W>@JET
zf6!najq8luF?is38k-1$!~B{3w;`dI=GWJt=bRWN6RpLY>|LEdMT~Zi!o%|g4dM$M
zV@^>_b>ojdGWt)yj1eck-0k()1x$%da$|lg&hHNlIC=X8k`72+ycG6+hWg}t?`KT)
z)#mXGYXf!QUbE8UclnPUwHn7&!g~W^s;?=v41Zlv)r@PbTA(iYo4oDTVx{mhuY$@8
zr}Sb9?K;c<$nXs?*c8H7l1S|Oy2_0z;GG4=?M-$E_w6BjP99XAV_*;Vn&9A?oJIky
zl4PsleAE@z!N6N9O<KpGk{ca>)&kaOL^S%Ac^RL2xJrEz@u&rAXs@4F%KVg$eYm^J
zXqg&8b~CT@$Dj8K(r2bsaLNeAFb+l!H;)-q-pyo4T|mP8fmi9|$^1yw%7u+JDT6$#
z-pPcnZ9okLSw78cuB=AT`LQ8rhL)cp5NVNio0*nwiPF}wpc3fDNL|)d0<{e}Hva}~
zmv;8VzB}{)WzAm6A-_TG%xyqRy2yWEc;2IPK=(){bH=5v+<JQXW771z2H`pm3a{{|
zndh*<vEO491*eC6BTq2HeDOwfJa^3*`LGq%tT|7ZU>u+hP%_c<gbzo=SFh^s;1~;W
zGUW1;M!;tWXRp#eakNu>S;J<dH0vON=2f$WVT^~m+i^<ctoe|1y_Ru$T8FK@1b^vP
zO2_{c2wb8qE<Lg%wZ4D;k%WGL;q*nWwf`5!%AVs_oE>LAvgOdPX8uY#^*%O(HhNqX
z^vH*GTOptF*y=K_(sQGs)7#h@oakGh{H*@<$Kj=0^WD1I8eFi8$FzP9MV9gpC>KJ&
zC)&zHzPd1DSIa~Ftf69kuw{}5+kv)_<oLDox(4J_^Vt4G%_!r~pG?R%SzJ)}IbmT(
z47G2DAu(;{*OL-_1zt7!Y$;6BsvTTZ3Yj;xR!hHepd3|D;j1UXB0cua&Vfg|AgDUV
z^bqNPq20rlYeQDLIPGEYRrIL7m0s=Z?p%3t-|t}7i;bi5hb-%7!wEwZh1VC4o8A{E
zckJKNSJmqKqF4=3teK*s3T@5nBPcuHoO(i@fVpe;-MX~_6ODkJw3)@qDYMna=^4Xh
zwjy-hh4~cL!}I_riI|MJkOU&=&QLi12-PZh!*j%Oa;5l>iRJmAl`YGj1%!FJ=6)u)
zSprx6+yTO1NUx~8;^d$=u1Y8}LiOpYZvGj@yDS%;xx6S=$fbz<#IO~&Y<y;Rbd80E
zc=FjPP@aS3P9cZH<!5p3rj-Ea-AvYh5Nu#?G@88meN-j;C=X0b@X&%c`zOJUMH&+O
zrsDSm4%0+C`v-Kh6N>G=Zs128{%bJV9Z@(Z>y>`N^(sL>pW?Lw2h#ouu4BxO?IZ?-
zfIp}+I2w!KW*a67aeQ`A6PPiO#JVEgY>!ELr{hOL8oq>((ZyivvHz3cSObWFh`}Nt
z|5tKVQ#a$<eUx$FeJN(wk?$`#WdsjjsEc!*J%&L3+r*NaWvt$S&#FT9Y@}_(vWiPO
z%YPE=X?%Hy*SD!EvS?2m|BRRAx^zQi9n#(6f6C#_+Yc(MD`9z*y12(S7f*#bBKC)H
zw2fNcNKdaUOcfmDgA6wmhTP4jj7DCP3ldk}Yf3E@XukUEAqGpGY)HJ^LiMX$9nkO*
zpfX0cFrlEM@@2`cBy*>6-}W_#9WYy7#o={YwKVE;o29D89<*Av@dB~#$2?hqrz9mx
zSFCJ^dTJaJ1Y?Rad{}yzPvz!df}%@;)l-{SvGCypX<i<hq~*PsirlWW`4CW`JhVY(
zJhi??{!#jNU9hq7OO<YJkJOp==hK;k<o+PZwAiH!q?9g!+fS5~^x8A#Ei1=C=eeNE
z<uTa#RHh8nn-l?C0$~HV<;5y5FSs*;K{)z!B4e%<5^ZHdlB*kTPmk&>6;RFu$XHQL
z%-8*0`l&ri#oQt58ZI*8gl4$)BQDYSe9nO4W%-6mnJN#&MA1jC!H3YKyCw0Z<{AG!
z2s&yCm9q*tx$oN*hMW-@_>N0rdR-L$3>bP|(el)Khj>Xhiq8W1Q{902YExPxP!0=h
zN^EEr%!`+mB`@rZ`3~&m#^MSH1r||kzCq*=Bbhw+)%?fSLK~}MDjWU%K98$j&b%7w
zX>X<nID3vX%i&kAO-`LAW$^8U3`vg)Wk<$;NGy>f-`1;?BU|-QlIr~qbA{3j{d}_<
zg(??RxcOp!x=DO^V(As&Fr1N3y)$rD=HSq8QSJoRdJ^^V3gOe0hhhm37deO+RR-9g
z(OKR5Q3`ppfpl}^@0+au`=0o?oNEYZHi7!X-czNvDf$ETkpbGgJ8d#Pl&>)NDX+?+
zp?}|nK-fsEU4fv=Kj&|Z%wak{TQi-Q<BO##vzMvrkokF+)wY3td8g*d>S(q3HsM`O
zw{Lb#IT}j(*nA=Ul$q5ZTS!Mz<1vJt5adQ+JKJg6v{Cy)^DxBI6L&Adi2YJw4AYWT
zOmIs|oV{szIHcKIEZN|F^Z<^EMWvrtZCQ@~T*5Gh?G_EI{+v&qf84O*&O3rN;lMVP
zLeX4UCzt^&ZlDjJ*qoubq>?wa2`Aje$rFv-esv|+Hdtl8X~J@Jk8Ya!7s^8+`@X)4
z^cnmv7PjkXOOXr#j>NYaW3bgwTwGGckLMK;<^sfHql*~LhXhEX2V-8@=YK0p?sB{H
z{=<quRx5xtjr^|YU^c%e_^2nbtt*dzTKae2^5)iDDRF0Szn#Uf3_Qc?NK##n5CWC~
zmh28<@M*^%;$G-~NbCY@1=i5A9wz_GbFd_MGLo>MsiV_8VQ!J-9}+*7s-IhA77b}c
zD_!;v%uhVd!uOCAyAKmhK#LLG$NgZU1!(|xGRT(f)vtqVVV|5}AfiChQ=MsbEoJTC
zHs6pI>S$>8&FOIrAAR8-SxF~tnQM<2_zx0`BK#K;JI;$QaJ7}8x%JVPnpnL+|3hM}
zKkrnr8C!!3{VLl)^0N4llGcQqy1vh+&3mG)QxCVId>3xn-dqK$i=X<f)~O$6nLd#4
z)4z|G%xa>(D1m9O=BfCE8OC*2+7;XRiccKL1fLvh2Vk5#+#uMN|B(1cknKnbe+=h;
zBk^$7#`<&*1ODI2Ey7&Gu5`LV6??rZx*O9ojVR8KuWnt1$qa3P|K62DnH^4U`xykp
zdrsSI_xZ^=25*5EoS-~EUKIaJZg?m|X`PbXQbi8910fPSr(2qRe}k&O`;JgN;cR=x
zO1R<1=yc`IZD@A7(N~_8lN^BkJLR}=uTfy`Dp^1TCyey#9S$FQv8BtjTf)pB6%K(x
zZD{+<2(JeROS@~b^9bycD>iG2)QwLA9^MtR#fz#PW8=iqI27AM)Wuc_6tr|R&aa$?
z|AH6doOoLc5)i0U9H?Iz!3i=Hf&oHm)AEs!PL4_({xcwHtRbiE9=@&5LS)&?J0}*=
zWUC|=cRTJsN_^+xD2TB{G0%<oPl-$aDe?1vDX|_mz>*dzTT}qlN1a_>Irp~0#@gf8
zu|9I{7EOayKn5(D9Dvk*AO~Ul?>MFsS#0nt`5eSt!?YlH>XWX{(wS>o@z-ssE;XT}
z&9sMEfK{K_cBY5tu^gWtE~Da~KIHwFu<6Vm;vgV5@$G2S^K{`yeP+b4aSp%DvhYPd
zo4ANKPmvl24czAaJ0qDm6(g&cv2UjfY$tM`B=NhJYKpT3rL-R?Pcy+?n}RICP2;@$
z0^a?AC6;$e2BuBoFU&WgV3l$OD9JD8SmG!r_my=drAKm41iiX}E$T26=&_)+W9Q!H
zq|oLuTQ{uFZ~2<L=?pjr-Oe#?|1(e*7AsZgag_VzP&`9I%q8cy6x;es2>ECw=4QKr
zQaiXx0R;&&^-2^>ObZJaO`eIr!(&MVmS={`gx}mX0f;UFlYzSStvYEEz(L32*6!|?
za_h;wVIP6uu@RpQ%A<vDL4hqIoW7I>H;wtamZ?+en$O}=yxkEB`39$-F0OdL+F;NB
z@D=uUa|D)?S55ZcLDV2&rF&50jVJZ7Koce1vule$dphloNXljtdkE}&3cO?y+;EBB
z)EpdWHEzff+{YI2s?V}lP2|xax;Rx~X|laOiSjjCz8J=oRfM^3Q-4FHULG;owYV%y
z2`1Hf-&N2IGY$DQb*-B(0=vH%^;4{k_^0d~PH(=MMydxu@Nf<9^A0th$|vufCTgb;
z-+}<%zouC|8=V^DWmvSDP>|G3Y@5QX6+I-i&s6E<<%{Q&daSgAk;J(;Rn`^em9n7R
z*Dp}eqTQZ)(R=Q%P-OExCqk)dspwrAuXc>`HbGG}-F8dF#JndEB0SMU(-7vs2M;AY
zy0~tVL^h5@mwZ61Si|I#a*h-371x*bG#0a8nmaZ3XH&`A^v>s)!?wux0zQW4fgY>8
zanjfPGf2-pHrowPB4?$8J{Eh4np|f!O}U9-Jp}koN-is<(ytK0e|pq@SueGeLvxah
zEM}NoDuc3Z?^*yD$wRr%adc@7a~t~ByH$O>Cj%GmX5coEq3<l^O-ZA<L!vMRKUe@v
z`<L0mY(_UG>mvC0H(KG_g-JHkRv4tDL_-qGp4{kb=TIba67EAoBpvPSVa%lkdHO$p
z+~;KOA*7B!;wQE3E;$7(&E_c55#j@PeYU8sl_hRPMwOSP^OW~69`X3keCnyiORW((
zi&vsJb$C8L%~;mN;!e2{mB9=4ujN;_v*5xM@;cl;x%np~{6*}ijosXV*t2CyrH|3+
z#>!powA%-VslP5<JzS5QHhWG3y0|_SJuG%ZyI{H2k2SkUZsd_}6jdXdRYa|?#bJ9M
zc|Hj!jGU<)zok=Y<AQJh)bt1)Z?+D;E8Ml_=*~CP;eI%u<iKUDBnKzy_%b?oEeVST
zX4%*$!dK@m_EZ=CuvdViW{IifengY{9EM$C+cvtF!{hLlYq#|1t+O!{c3_@=S(4>V
zBQgIV1+X?rr0^y;QIIB(5KI5{@-IPRtG*85<vsIWbw-+NamHA{Z@^|-#goa4yI@PU
zqwT!Hw!X1uV>0-ciQWdncpa;{*Hcctjgx7lAddtxx~1DDn3mJ`UCCGnZ$3uWG_c=W
z%+a|zaDd4SvFrY$?rYVuu-c2NO-Iw~ZkAc65+3J5T!JL3Lz(!Ugc_p$lWW}qs+<^W
zOjFn`#~!0!W^>Jz5D+LkL+p#j`dw0+!u+aa28@GR^UQoY&}^KxOf31^QTiDuUed&w
zhF1ZfrDbxMQHp5Wr>6!C^QK$rV^~+?LC$?h>MK^_UOLh20(P0_-ByuwB{2+~jkPl=
z+66J<-eA$RUH`CHUr{qKaCmWFVYadmG{|`<>a0<@&hTjq{b@tXv};9A%nEI5Q>m-N
zLBp-DtMWMcU6?GgD{~}&*3ByHP^e#^surjy{^A$F5(yR*n3%Qw{_o@nsF83tOhtLn
z15+t#kafmPYI9E;Y>4As+~K|UEx!4O#Z%jA0N0Yt*C1#j59`cJ2e-Eu8m79tk-u`f
zp%y9;+X!r0QWyh(+*&vgDH7#xPzbVZ;gs8Sc<WcRpS6h0Io26y^D*0ZJ=={n%V_R#
zTuwG{@m^ILp73%6Wx`yRk?crMl`#EYB9Vg}JUJ14-Rk8#ORT5?R5S-(FD`mrMU8<N
z&J+B`Jn*^za@A+b6GMfhG2{#_^0)o?Nih+_btF!;9XgY;Qqj4&CbZL3YR6fboC+r#
zsxbl$*5WC_s8Gw-LNW8(EkkC}P|7fS+l%v5x9quT&mTB_e~z9zf|?>CrUdm{ZHFbW
z&7)Ogyp^dQ4Nj#u(@kWx|Bmw)qdg^2!BJ}f>`!n_7cU%f8-mqa_e6lxn@dJY2K8=c
zMN0^Jbc1M${lS%f8Vrm~ma{01lrpDtLp1G<__MCcK|9l_wQVSeXhl{&!a)&5S@xM6
z@rMlcfRrsiH4B%4THPSBv@TqCs}$Ap+lnZ&&;-7-gw6DN@?*90x0sskF+TGE3uE_m
z$w_1+mtR#I?VJ0Im=VK)LQ1C5GR&!#1=eD{cW=<Iy?jGOE68qyb_g+f_(S<yIQ#mA
zur2_YWIn^@<4$XnsvFyKDOw%|L=Vm#$L@+M*Q7m~k|RuXbZuSEtrY6+oi2`!sHi6h
z>)A;%F5(tWLHEgj+Yt>AU>1Oz7Co#4G4h_f?K6uAiwL$IB;23&q7wY#7KBy{GfwEV
z&&5hWqm5*+v(2?z2^X=s(oOrvep%fTtayD)BD{(7SGsyn6IscRE<2sU?H)^9F-TQc
zRa@3UFQblK@+8x%OZ!0<7C(;h--|<J?}eS32CZi}auVj4H!QDuQs3XM8g-8ZnR>8V
zR<MTz@~8?-nKugAj&c4w#}QkBofo`sjWHHKtyrKuh|wN@kP_-P;y;gn(2<qv_b)K3
zV(Sy25^BZ4WKfW0k4iy1O0egk0F!ZQqrW}Yj(`ZT4^3pOha2&DEaXY^Qhp&*<E9?F
z;C;krr1OSDTuY~tJub4?4N2vxW;g}si$Jk*(64ByenmEW0_+^Bagy*GcGn9CQL7ji
z;&cT2aRMIAYm3+>mc0RL@BVb8)7d%l=?JHwzvGEybi1REX?HZ&d)z!GX7~s1*nNXJ
zIQt-MD+0%cZ#loJD2NusJo;?n=1E*Es1Ri;ba?Z$EVEf?XOvT$xUsQJ_PCS5h?C(T
z7xax0Fq7M-b@{X0Kzp`j>v4oK6$|65d+vDC>kwz^Af}Oq>T5qfU+ft9H&a=I1$Y!L
zSf8NeL*AFLaA7m(<;({6xx4<^@$|)UP5GkA%A&OuLh(O4Ucn=6F>u&#)@-T#(%)=W
z{58DCh4OZKE8$)$ri6{qP0*bnek9Ta43m_(z9dKSIH%y&d2;qGaxm*n&O0dNfj=n5
zXzcB2l{xe%1O3XRk8*6I%9-vZ^6I9kckuWzD1Mrf*0#sZ<)6}a*D1yK+@LtN6@e5w
zuhV>!RM1d>oTdS4BfhK_=E_=$k_z7!o2nWcE_pRN>O%1WV_#?N1l>C+kt0pBOQArN
zD4p*Xv5VL$4~Z0|D{u**raU$k@n@fwg2VcmVFQb1o~*+?KyrS23~;}h%R8mg6Se4>
zWYV=<_r6fi4oOczTA^-2aSZu0j`p^@l5Fxy((8sFR_^o0!3WI(>H$nq=c*n9jUw)*
zT@*;LAISnrWNV)9f45SvsO~|PDBnvV!;bJ>0~luPq<+UY*!(o2Z>Gl6OiqZKEVpUJ
z_vI&Wzth@Vj^807YZw~3W`<?0a={;!pxrbr+}sN+2DX6S?t5)pwa?Yit_(im0iY}q
zIPVmQTQ~6lpx&7tql7EhzuyVduXS%df*~_eM1KrT9`0ws-(+ilq5=pyu&@MRVj>T#
z>A(63n9$d-A|Pyj98u9k)RCAxL+;eDR$?8z;{Grp(w~uw!CpeYblvdZ7Nlx(7zbB>
zM0#>aOieW~m{)@Sm#VTanZZ~e!urVy0PD_j!HD>-FncOzb5ulLE=>7v-0|WaKfjM8
zIB2$UZ;5z*cjlRHxbb7~c=%fO!te&ab;mt<GQD@F`7(pXj`GZc$N_MO@VMR#V`e%`
z{RcR7O!O_D3_|_5l9%1^y-^GXeXDmT2!(BGZ~Dh9Hg1=k<D9Auwuv?Ez5o3ASu%Zr
zJwDXK!3D)(p@JFcn0jGm_lj^OOd1eKRK|My&~A@&WrX2%Zgw)`laIoa;pecDgYS3K
zc?!>;Am&(|zyMAce<_4dUzBF^bXQ721K|5TB^lI=6V$v4t}=N>F6WtYvRGu|gbLO<
zK-tW7Nw)2b_i@_7V}&ZgKOruV8rA*Cqy%10ef?UNo&af_2#NY0l>@ly6}^Fl9uSb1
z6C$PM@($ai5enA9{YnqxFB_}W-O>X?kdDPhYlro}l8*uLjtK|0J<UDmRn8}%C1KkV
z&D;(OO59H*<0Q<+kl_6|pn50W`0?8=`Ib%oc0}OPLd6>|jt}ae9tSsHu5xa^x`Bas
zdFQi%OxY6tRvOwwrZBY1`84$QW#QVoP&!w!DQo*BXB$Krn7{T^`UQ-*?)&u~d-U93
zv_aFUcO3{EC0K(N%p(c%4N@!}B3`Hg+Me%+dbUpmyYZR$L*URpwu){OqO`8n-t13L
zAt|k@;jg_>(xCZ!TAhSpS{B_PvHutXcRR|vfWy9UlM!<e;sa}+EoTc|t?HhfK~`0O
zPr6RV4HFkkv;dryqjqZ=@)*;CG({6;we?~O?IbU8pui-%S5m*t*TtFS==G7PBcH<f
zoV-1q5i)%dXLGV=d;7MI9R%*ja5fM4b?9a=<aqSKu;MxCYsG~o0fE%QWSJEU$`%tZ
z5SwL1l%*wR?E?%rk8TNleU1$$e3nhA>%;GQ(U2uytkG9>i6GQ%5cs4w9+SJ5>Q5>A
z)uig7{d1Kb6-ZVUnXR>)Bi_vSuzmu?CWeM|Q;Z+X2dMWsmwwQ0Q6)_O@#Evr|MKIm
z(1Soo<jDW_<AvcEvc}qfe!T3nkZJim^c9J3-f?<$iwR!GYjqMJ1)WR3juynrkiyIp
zX8##ixrzt-TzkjU5hT7J<?LU$?eLN0V`!sw{Fkw`z3{|Q>>?`O9J#aPXP9R4Rm6Ee
zY(#W2DdkI&S@ykbxzePxC{Fh$Q1W+ju_FT-f9ogJ2mz8C>aZ_qS?&)a9HuqAvS)3X
z)L=oaq`@oPEc@h$2TJ=HJrqrlD)-A!1b=Q^>kqb0<M(E5b+H&_-zOHuxY*v@bpM45
zru~Evv7`$!spLDNDz6G_1uNv4V^SfX>L(%|yrMGT2B(D8ZC2!TNapiQkOgtUMeeZ1
z42~P5ezB}H4_V)NUIV#3LUP(u$8OdZ%-)YK^P{WE=|4mraDMf$o~9#xqsvS2VXAYJ
zA>bCK1ZUX}X()S8^I=qNyNcnEWK=$rP!a$)YW+7jXjWmE*Fn{H5H36<Rp&*T_&cqw
zqx=`#71qB+ya-Zzjs8RRo>EG8%~Sv*6R5Bl=W~L0MThiEA)ZU4RLb6&BfPY3oCooC
zSG^XDErIdr`=dwK2v~(mJ1$edG8IF)#Dv^+%L{|}x|`44ZYbydFy|6U89x$|BJYnx
zba@qx@k-iT*Q6t-7(tn;RIR&EKXR@CBC$h4A8ngAc^8`6D(Vo1M_I0kds$B0u!K9s
zjM8UO@1llWnu}dtP%;CCkQSufZbq?=6768NEO(gYaE*QxS_4WN?9jK@)Ppqm$_W%9
z)y4cMG6-YmX?T&x4zVp*XlWlmE6yb@V2vQ%b#2n-YR@^LJzbOK1Cvv6H#k^;em)BT
zS;P}a65jl7nEadLqgD-ikC&iPCThi70JHM>OR>8m1d!JzJO<hxSZ2?MeMf=_A(}&0
z=M3T7$z^4BJmB3rFt+vk5IK0o)*P0s8yxWdtc!T{l!B!cyp_;Z;Y{YI1v^`i60_?#
zD<J?n3vclpk>7r3hIITgxu|Dr^J&7%m+*s-6bJp4l^6{|vpetkBBI|za1$ph{5d!`
z*78H&@|UY`<<Xr%42B}PYn+WcZAZBYW`NsI84~Q5j{7d@(E_ogfaBs_mg>inb<`H^
zPSJz1`mwy9B4yX*{)l-Y@5Ix2K{iN2x|8wzqx!~D>8>n9v$4t}D{zJ+l4yu`+?f#y
zGiT@?NI7>!vqu&Ok8#s~cceI8qNyfG0{j%O=ksXtP6&syzL5U!eB3u+oV|bn0%F4Z
ze_HHoYi0MZ*f&S#U$JlN{MVKNi6ajoYbf=&t=F_{#_|Js50!l8QL{XME@mll#1HXu
zax<NTm+hIR_V|2ys?+xY&hT^NhBOPTn;YftB*`Ar@u;&pr}}BmD0ZUmB&Ve=Zupr$
zD7b0rEsRCGH&0KT>;$4(^r4baKbF#Wsd^;&1!27`if*xjo90%JC9yn6?<=M1xKik4
zaBpQygVKzb*ALi~A1X^u_`k1QueCD6yU|ZrK8gjm52RBjHtIA9FZet^)1+vbVyiB-
z$2=7`YRr^VsHh01SQMRE?%!G+DJ-(&<R0^8U1FU3kp1oFMP71ASwE^Cz?K&oUacu2
z?Q$-;bRz)_aLtej7Bn^ya}e3tCw(LaQ>C3J2CcFUZjf&Ndvq79cU3PdZkQR}N2}*%
z+6wE&YM0L?V@JX-AxCcnJ|l>9pTm_mIxX027zJ8X<)3iD8P|<zu*@E+k@^v;U`bRF
zlfX)<ecIk~1%*nbgAX1wHrk-FQ$CDgBx9gQHKL^J1XGnNQp$?dncDOETZCTYuN854
zW!uPZcd`X7d-UL(_nvDMl-EKtI}U>A_ZK)-hoh_EjhVPyP|StTj~rt=^0R&%)Wxa0
z2uzxum)i^n<S9N+0*DJ3^{%dy0Oo7N#-^TMU5`OLBG+HoF`tf`Dk`)RV}@nez2NrZ
zLnhaD=MAj886FB4G)Y{AFCDLp)_V)J=4KoCq~>+Zp89CNE>9zr<W=^v^{Fpmw<B#&
zfrhMUzw;t0srKf?vhSJEUJJDqhE6L8az^eF4I-<mq~WgghO9KlITT*;OKh~%ogj_!
z&*Ubh#mal7uz<A87MaVX@%D|?PgZI4QD}LpM!&&YF=h{b>otm)4IsF7(q50hQnXL>
z4_4)OPS!cF(|ts+eHcH`UBw0CF7%^TGXmqcOAb>Cb{o4{6T2gr>L^1ASHN@WeXTO~
zEk){qjCB0N<KvXN_7fDer!QPBxzth4j_dF0H*GVoofs!6xbUGzj+l&MzZJW55fi5O
zb0D1Ovn|fB^Gd3kY02<+&H49J(g_wBJq3XI)oS|p9~EP?3Wr()Sm|cMi6L*gST?D@
zDQaK~5H+`C{z_D7ks0t43LY=9>fZAD54o^ReX`tF2@@g=`w7C)Z}K*a-Jw{VME8Ap
z^n*(}SZM!#XbuYL`M}iif##iI6HGta)k_Z30ft1T-@(st?%8N{%Uz2d!Ap`HFB7u6
zg<0aOi4lfi0gr<n2j^lGtD*u<-NxJ5mb7iq_vx3YRN{&0Xr3-`gd+C;=v|EM>K+;K
zbQLB*KAeO~`785bIQNdzj>YOOSW~d6pfAQa5V$Z1Ny-uoMbJziW!7=bNuvV7X^f>3
zpSnTUGsFua;I3)AOnSVy(ZMKF!#A&;>3Tp{p*6kgC2F1{kKs|wZp&k3TO<Aw!?Up>
z$rIv5hZO}(WoskG6v+&8z~Hjbm;9dQdhh8@hm;t2BP%kvpN?SIcUgnU#6O^iFXW#3
z&7GP~%gddSH@dn@4(}eun1(%ZrbbE;+nK&x%{>T#XhEz<GH8+HgG?otI}(x65)Dr}
zk-OqjDY(=yK#U<~T85I>>4@=bu;Hb!1&{B4HTIRkaV$&LVwT0sXfa#NU@<dUlEutm
zk;NJ@Gcz+YSj^1K%#7>1?|JWDe{a8VO+?T1k2)uNBC|R(qbgH#u=?rf9DZB^vo^X6
z<g0`h#7U-nwG^9#Ma=HLd$3idyKRocORbLqSX8T+azpHHnO#08XHzCMRb7X>7j;TJ
zHM7lbAv-m+sS*Vd_Le_qnO}S^Q^${mX9#hGFbuhdPxKO-C3@a=wiGA#GCUp3w=d=O
zfiQ4-T5cL|1K<5jQ^T{5+*vGLvS9qdE(Az=7y;Na4k@~zH>J*(<){>6+5I_4j9(Rl
z4wx@FG>4>-!rp1|Yp~WoXMA@Gm?}fG&KU=imjBYlPn&bO`0hc}uFGDMjVyBG@^U_Y
z*@T9xPw;+xVjo(ex$S8=YEn{ogj;Lrhr?_p;h97hSxBV~413g(>|%1hY6t?4C$JNa
zDWseiT&N(87|G<NOiuYy_*QggEz@{@|EYmlEQ_)nB+<VQ#4z{?4G8r3o=lhJut~qT
z9ujlZE{hLlWOA*i1+2O{vX}KJTYP?7ZF#L31eu3~6pW&;5+WRuHC*TX39AELuAmbr
zw#y|uKqnL`OWqVQB936gdB3TA+qs~yL|iMmt+>1ZHiLRl8E5`ZLRrAX+y!n4GsU##
z72(dl5}?toE-<<-l`#lTKV{Y=5pz##3p84mGi4P4X9}8VxY2lA+~UM@=;BezgKt_6
zZo|3CdEtd-%ejHL5q4e+TxzRQDcG{{fm5z+?rM%80+UZ#W33tfkZ=;WJmMk@r+wyx
zb&Y4l_2>yvHk<;oaN|<G$2P*Xn%9p&qdIPwSXl4SQq286vyni~UdO~+NGk-Gi?Ql$
zt?Ci?4*tYhD!l|F><O2!jH*@IxY87L6X}h7kbt!Y-2zSu@_KuuIQRvd&LVL`7@E`&
zUW12#RFTi}6?Fs#*a<%Znnik=0uQxPuPC~WqC+gx5l?Lpk}N3UY>dQHVpUwJDJL=>
zX=Bwhqt48EbuyBc1Xd%M7|pQOk><)C-Wx8uBJn&XwFjf+MWK6O4D6276^+-7?ab}i
zYcB2c`$Y-ElISD{AH<lg)1w~YWEkN~PIZ-}@x{WNqJs<n6j0om`O-7U_YYA>gcN3{
z%`lyvqgStAy3kOkIpvOGk@q(G^h=a)c*9I9k5$nx<Sfe$OrC)ua1SBv6-vYon!-2I
zOCG{5<6HPNcUA);*)sjQ4Ns2AS&X@nh*XBkzg?j#Y9%wOjxn~i@=aQDO`i74-qaq;
zqL#i@Bd#QSw+xIczqlr+EI7IZ5Msvx9OVnPwUju$$5EuUPIj3v@Nc@ek7sHMLa#$9
z2k0-{=mgdzllGKjdxRyz1X5<}D3(YCWyJloz|S6Hke-}v-sz?V8}wp@LF-GlEd&Kq
z!Qs#Hm4t@oj;w)qw4a#c8T>Lnb0+wWhl?}^27rBWkq}M%`alkNx?e_mQw$VzB$O|N
z(;)r0iQ7jL%VC(akSCt0R0`sT!LQNkG`{cbHW8m<8kpjB+y5wU=4r4Y+U+o9kP}TF
z&lj{iPDA$sp92Q6mvkIawqLog|BX3?st7I%=YcZf%GlE`o6B<2G(-ju|MEjbb>O#H
zCzqQ9>K{EH3@gZXV96glk@40;XS1vx9=tbH!ACqo=*aK+t?`Bjg@~+|g!_wv!XfXU
zF7go?kXVSRsx@KOb5GOp`r|%$d>nzp4-?JN1?ZrBERU9Idha8$b)R=YymIG`i_))1
z$4gAojxp^zW6vVOQHda=HEbSuCH5j<-qq^$EU?uxqzziHQ#o2?q>jU+c0`jJUAd&F
zCi`f8y~R(jb<CtNXLuu^X(#Jk$wd)9NtnaQ^gU=v8ZRN1o?R&|iiy_#wxJS+gl{c<
zB!4`XXOQ6#^yx}!5#{ItUwg4uVoE+t^<GJc>mg`VLQm3?O8%~sgbm)T0jZHuJFh3@
z$1uSx?A63l8Fq#GJc`|DRo6PXEx+P{-70B-Msr8AXal%TmiW=>{WlYP5Aua4PF5G<
zb`t~b%FiQNTwZpg$b8LW1%u?l8nFIgsa^pj2QhlRu>2|#0*PPM0CBBII;((I*ZBCj
z0g<el1_+f&wSClfZh+3xu8S{;LX8cQqJ%n`hq8Mqx}U`E+}KMYirWnJ*fwm@o{Xda
zX*%1}-YT8{05{-cw<R93^i|}zk@l89_E;vcVbU6aq6qJ*<CL6f))uPwC8G+T@iU7k
z(!HqEcaOO7t=2fzocyuc3O<&yd$b*WT8f(Z81An`ORa%hQftJ>#%Im?dvM`+*sSVz
zyi98*Oq~})l@+qbWZWH_hLY)JSqHm(24+<UF*M*PIs)1+nc!0V^2Kj#i4KA?3~cpB
z@Woy!8bJk%UxGqab)O{F^TV!951(7y-m^Timq^7Uo?OYq411-XaZmgj#*V|H-FA!n
zhM3q`eYwJwBUw60%hAwdDv1PyvO@?FATvphSLR-}Y?x7CqsCWS;`LkVc7iS<YL(P3
zT2c`yR+O0iiSnJ8I)N4UI49W){D?}nyIrM{t#iXKT|wQG&+ik*WI-b9*9$1(CAbfs
z2Y81ohv#yZ({G?<j($)Mj-!R&?1n0}R}+Kkq4g>zS*T!+w#Kc*4tcqpEc4&CO52M$
zu$wolAsJU_%fF5;AbDJ7T2g3Y*oFB9IunsR*R3bFUuf`uqMN2RfoKGPu!hP!_+xr0
zKdjyadc5$z$A`Y-2HbFcV(=-f<0fPY5>J*WBrY~{oa!oXYhu->o>gBTHNAl#ghsT7
zL_nwoOgVj(*FZ@fCJH>z0u%wW!8i<T$WMFoAq&K&hp+;vYBx@cd;njC@^|+7=3Ee+
zNhz_c_=OtS0)#kC5VQFcXVS!q`9Qo7--@hSlrIAz*DL{yK@HvsaBd<Tcx50=Rd(oM
zC6xwaTH^vk8~PRwn;7VY%liekJVF{e1qa9G$B(8AUFYjBO)bpzb0E8ur0LOAveG-I
ziy*U~0G=+mVhlfSnw@Zc;9*(fFSP<Ae4FZnV3iKm3cJAO+ynI3*;2kNNz=!MzoUEK
z>^is~Swjr#HU{+-KS_fPp)2v=(D-c9*p*FIXcJawg@T-xr8Zm5PLAkqePP4ldKNC9
z+gZ<1(q{hLVx|tTqpZQ|p8uH;+4j$%AO3XGN1e!l6~`bss;njkM&kD>Kt}8Y4<99j
zz&s?_EC*o$s=oQzCO>IVKWsrt)mpkvZw3k^EAQnz`-&}swV+0nQ_Th)U^xG2Y<#;1
zTVV0B0EQ0Nbqrc0_rfme)-vhJq*(&5s(9L1lR2XPgfU{z|Hl~};g4_0%GnR{E6Nvn
zgPLLZ;T)+SieJwt9G3BLkt>!BqV14Hv>S*g#06}3s|FbP$DtW0$2XpaBJ7}vsYPVJ
zE%kk}K?8{*5!-kuXHF#MUl4?^_WqK|QHD1c+FinSdYUy>g)Z=M1gvtH7Tp6Vf}wdv
z(G8j?Jd@p=yaOOQUDM@q5CI98>Mz*c3F1)X<Yc21npE&LLU!Bw_VXHMl&m<XTZ58x
z0XcTjVQE5n*ab31Rx2tli{6~o=nBx&_sTCCd>~KS=sk8I+sXHF(<7!6G3+n}iJz}K
ze+IzeP8kH&dX=MSKD`}i5wS_41AZ*2HHz0zJVdoz<V3hs=`5)V+_CrXy{OpQ*+u&q
zMp58eS?8)ex2@klOGkpjl}aHCY>+B#NTF6B4g2WB^nqERnb^c&3D>|Jzzp+wF$44n
zP*;V08#_H(F2WoyZ>oC@2uA8r1cZS+G3_K^z`^rs0`vDtt_vZ6>mMp(@rRoLbNvk_
z%~3s_Uyxf)t&{KAVpkA_imLf3sY@3wLN1tHx~^>>Dk!xWETl>4NP{URFiiO+ia-G{
z9k|*=q}V#(64qMJ(iJU!vx!WtLa}?sbAkm(d91@W=4K7jmZ~MBozgk7$PasRF>|Kr
zG&~^W!EtwK(e}dY1lbHZYp69(VPKQ(UraRot==v951Yzf-F?R`M`ye;94p61q^g()
zu;iA9M>E3tZXQvGIXXr4ZdvMe)qdOw9!rDl58SwAal4P%xAW7$L}tedRb_gpKthWy
z938jQ7r`5YPTqa0khrqMzeYlKmTF;PTH)v(o1rc02SpVJ9@4vTV8}v=Tb-uQp`@zf
zs$0tSI1eOumorxOLtkv_d%}Z#Ed3zM!qv{P1kvb`s%fOa@Peb*`-U_+_wE#CE~(q8
z^mW_Yeis0xp``35opcC1NpRFFvuYKvf6n1*Sv{fw)2{~})}%1U7;?jswTfV*{5h4N
zS^JU5H@;V*tuF4wtf{DG$diU#mLN9$#6{{0E?QVn&Y10?^Ib0!3>Pk1fx}^;(K=50
zDh65lv2GmZ%WISht;CL2OZ`fDR!`rhX}KeI&gLs&rBJJr;W-i`nJ!;agJ;tAc*&47
z<(q*HVR3^VdB%JdX-~Gy?JM?@bHP;bmcZ_210EZSq4GePEZA`m5rv)DScwn{eQkDB
zf%6Z@H86P75F50ab}~faMr2*m(>0~S$SPe<&ly`0Q<Cyh6~<r_yfvX=;2#9gZWLDD
zT@`2KDU~}5tW*w8n`AHbPu*F@e5#siXjoGm^fRx$C`p4~JMM#fKi!Xy;WIxo!|=g!
zGfSCbYgfgw>ml0Eh9psV=Ft|a(x)&;+Gn+I%TV{B^sfgS>CN6vWSa@_WY&;IA(SW$
zg5Z=`yG)`eOEt{*eOm`Y-FzXI<$1q98EtFQH7P|h&=E;EqO>=^?jzZ2C5V`r);*<l
zhWX-5E;qpo(=Qru05yAP-V3bPoalR3(7H7db47X7MuI|t<!oH2>FTW%Ti8;;jT*1Y
zzD8j&lGG%nhEW~u00|1vX>T0WLARp~HY=&c?TQNy;i-uZj0_T1G9qr>1-BSE&O12d
zaQjXb#KQA_l4nSt&?dD9^r6kJCja|a#G1-`h1YZ8h_&NmBu?b&?ZhH7e2%zkhFd)M
z3u7qD+xJNs&WK5#jmrpJ>Agpr3%91p!;%F?6ad{J(ikv?L;=Q(&V~B8Xyfekq{sPq
zoY@wOKoUB?NUgbAzw9lnx@%`*f4huXF9v-w7>0()cri4*>`4rvwzTVX_|vOREOFYB
zxYLKWdtc`@5w{rSLP+Ml_~7&wNfgOx-`qgD;ouJzNuC?YO+kuStIzy;H{YWiio$qu
zcD}GJ`|-3Y+qhgI-H+b@{rDWY=MA$d;tFfRyQ<o3LwG|`XKI>p01;(<mNlb0=Q)AG
zdQC>)-nZ0bG{Th{LjeC^hUY|`Dx8)MoNB<R2i9CRf4ja5w6J$2r&pxl=rZe&=^emd
z@QS&OTEX|ms<<k;*Uvt|ON3mPPeS_%iynqBLTdy+*ZaUJ9)rL!i7I7S$^Ljg*N61=
zV-%8wt>GH;;N4=(ast7PGD5mbics}p;8?s@$4xpEU^4$;s?KPMqp%jNH;lC{ubbj%
zGN0*S*G&*0y*?48?Teud9WvTn#??5WJh=e81Dm|O>ZWE>dX@mE{H_dnw=pf4V;dGL
zldM3q5XJ3#)i21U`Z^Fs)mUzmQ8ie^h&IG1Rc4$y{Ju^5+-Bo;X(hCM;;4A7{*1ev
z#n$X6y;yLR&!*eYOlrwrrsq9_|L$3yyoH^Ow89`P^-4dR=QTKAbq@0RkiCKn*(o87
z2cKw6smV5FdHdc-{$qJXiRa|K`qn`lhM&)C@Zk&Vyw#a4Ld>}gI7HI;-jXU7#w4IP
zM88y+Vv#4<-UK&8s1G0CsbbMy)y*W%cab2m?ob)|!f8}&{q^D9b^t%>X(IXC0GA=~
z#$27B<6Butn1GofR3@xW${mwyL2UMGyWU(|gJXl^vzPX}kRk8@LaF?N&xk$vIMd_K
z_kSjgmE?lc<-mR>jNyQQX#eEAk&T|dxt_7%&)l%JRho*l^)@SF+rBCy?@1R0<#*D>
zQg2!qhx-Yk1|HNl7DoZaT9H6v@aXCoy1NeN2cn?rxY`5C$&nPcADbyz9czRvinV(+
z@X1xd*v_?$QKteFFAa0ICtL`H4x>1(P?<wbeOAF+?z}Om{IwjYC|x3<bWMhzS!7Ih
zp*`V&cBqaJRUJMyiQtD7QppRUEj0vxV~Fc+BlLPZC>os1j{FfV=C;*GK7^(oB~mNV
z)mWW1mGS+Fb}77mM<F$oExx<CNJE?!H5UL}W|scp9ZOp=YYpt4U%NiK1A5oVt0f^o
zGvdQLs$kqpQfv=d!)920x9K%VVuh|a5$_hE7SLl2W|9t$OR<wE=8DV^pL*a&uLo-)
z#a3Rf+^n+c7L|c1W*l0>Wx^3eUT5)&w6ubqkJjI_^YaHd2SOR{+#jUyN;ZT{E&Msf
z!lg?#+>CD)yS0Cu;!Nm$u3bETr=S0V**-tclVp@NU0f6;8t^pP;(Rc3)n{WK)4NSf
zn^U^=?SVWk)U;PaztQdroaZjoV;J99_tcc=Ao|93Zc-u(mp7oh@s<G5)O5A82le_J
z<HxuX!wq}f8&oM#9Jsm4O}8G^1d?{3;$hgx8XBna>Z&G10|NX!EV0yaI9gvqKO9t^
zb_UHI(rKP0u(wCK00cO>oU&f6w21^AUXQoq>x6YaSB&J$i#tge+@4E%DlBn7Q#BgT
z`CXbH6f(Hw88K~<z_+3b{sdRw*v3}*eaS``65phbFK>d_aPu`8yJ{$(^+cVu(4|rs
zrkC#x>Ih51X}-0EHeSOgclTUUPZ|7}nAZ>yuvA4b5QwiJj9{gkJLOT&A9aOSX!gsu
zE!m|+Z*2ADY4rp@)je@h>skhHB5U9ofuS&i91Wayu%A55uHCkT(KM{<G4ioU?|B0c
zA&fu89&=y|@LToI(G7X{SQQB1Dm1+OEG+a~EjlsbLGy_==H9y$l3tQt<zmIh_|sKq
zbsm{zCRt-{__haU7X5eIAUF_<v`B4?GbSlk@UCZ~jtUAxO0KJw*)U~=(XWjS@*)@2
zbdYg9>ABlR2~kThvnRd41>K5u$JA=gnjNjkvvvpLn2L(mN=G#kbp}3VCfY*J{M==^
z7f|^YSX*MWty3>gM^AA;M`M1NBka6PY6=fX3V9{k`^M6hR+72o@TNI@ZS?y1{P33H
zjkZz4!z_b%uKusS)>?gzz~R>cdS2K$SW@yQ!5u62`ni_uIFpZkW#?RxoEr;kR?1%Y
zS@x`3NyAIlV>8`S)m1*EPlj``<+Zheqy<!)b34kIrLx6NWm2PqR}YN-sx`|nmAUa4
z<>J7rPg*3=?8lT{uQnX3_`&93+;C5=D{^jw8MFoDb^5vYlBJtu13pbX&DbilWOnYI
z2q=fzy#o2$^4C<S1UUir%&+A;!-vli$F^!5uc*D2Zh67WEtlNkVA~wl?W-@K|6G~~
z?O}WZK!AY$TArx?WNDHT7ZQ<C6rr;;&{oi~USdG}zOR`2G$Ua;?_}-997H)Mh|7^5
z+8>FzMb#5^3RflDQIloP1r5FWcy@nI%mq$OPBb5eo$8}Wb7oXC6KY(7kQTVS_aU7i
zqkWx^kC#tidUmd(>A5Q7gKOiv{s<B_vrCC{4BOnOQC_v^X(}tI31nKenR9?|8Dzy0
z*qsU`!!y8M4%!9u)+Rt+JrLGt-<;=Q6X;WR_&&oSm!GZCxon*>`-<Rcs;NVm%S5sf
zXK~j&@5QNO1@4M#t%IUAo7EYyc*zm|4bbN4E40j#v(c4qoDisVr<hIQVF9a&%lETe
zc^#~7*U(<@iNP%2OlI#K(_7w`5)<=Or#2^TkTRzPi^@Ym=KNGJg7r}Ff+t==lNr1=
z&%zL9Z$mimCv)Mb`x(6>om5@n=fMwRMO!lF4Alb<`Pc-UdhXUwYpFh;xYbL1N$&Mo
zV;+>wN37A>w90ugBNXV7yMg;6O1@-hspj0JHA4inVp_irhQr^CZEt=u;={&yd~100
zdXa=d(;0wALRACL+o+()!CHxgIZgp%m7;sp0Fi-G7@)lXkNgVDryfPd|2@t}1<eN7
zLU}LrYXq8U`<U7#i2VvRyXOX6hXq(1F32WY@FbO2S)o{hS~SOS(h7N{ZZ%XQEEt&_
zGLd@oSdf<;t;84k+;PNu-CjXLSnWwcUP9_SulBFNv(Y=>a*55A=(F2n6EwTN#3RRZ
zk5jPjqsB#jlc85Kp&EtOB#Vqf`<7)JLJ|znS9MGw3!~j3d5|RA7O9N75`>{aaiHAk
zn1wGf0THgG0;@*E-4se~>>`0WL%Z=o&JLi*=!%l7pnl3C%OMplrK0(c@0s`t{!ewz
zAZ6x(2L%EehXewm`V)0l5D^fT{!5$Fl+I;Q1Q1_6zxP4~O@Q4|VF&en1tW>1!0g4e
z3|%~vKCfS0=D8O|cs)*A#joWDzFc;6-WyH1Uvt6}?k&q`JpJsiaCFMoH>1w#&cYr0
zMiIJEQZ-%0MC*RH0(q}rbJcE3f2}n~W*;Z4%uX)-MMB44e#}4Nb4%;#l3l{mm6b&M
zR}DJSXYG<T5ZCZt;ntR%^Cuc-Z`4DAL@bRjTkvbd+7xkWniiog8=mu}Nc0j0Rx0iI
z>g6Jz3Y)G?+!{94B3$4<D%2N7a<$5Csjs1}LDSdCWp!qR^_H*jXl)LUiOI5kvY<Mf
zd|WHTEdoH5cQ;Qi*3;%(1xd1C)8!k?56vx#T$90v?Z1m`X{-xT<j#p@G7!%cQmVwZ
zYjX6gNJfpPx0X+G_~5l_pSjV5GC2|6E-Y}S**J!&iTYw`mgkZ>dhfTLpal+Xxl}p@
zHnfTun`te(iO_VZR~4R>C-#2pYv|9tm63YFw%LU=x2AKmZ%;6^Cj0<d4r|gFz(JHr
zyFvIt9|h74)Me<YG{f*bKEipyeh$+5U>lqZ5+k`!tpmJ^2=4Hd9U1t^BH`2r%eNx;
zc;cO_zG>f(S2B_(-jJYaP9cF1a1WKmfUQT)5hhqDoh#s=i4Ba~rv!*MT!*H=Lrg-u
zwe&Cis>;1LF_BY}nVSm{0v90KS`KYceRHmuM`Bl}=^s56vf-yfiq>LPNg-8aC<P&}
zqZ3GdIaqB?o+|<{0ahhW(p4D%S^056;B#AvO0HLy8?{4Y`WkxM5I^c0&y{F4ZI&4k
z_6<9`m~<GzS5cXNzYSEzjf*}Ggm+uvGKyG|r3Zt6;)EqT8;_-+kzD*k=$%Tq&&R-O
z3j$MH5U3oDCl_HNGE;4__Gm6|FWNVlTpLmxON-K^%uGa9O2&;x)S_Be`BAmp&?LbZ
zW7%DyDi)+6LRcjQl1DciSG&7Im-pet%R!=&5d6olX&KY*^x$TJ>h*#h4-8@@z3mtw
zQ<Vt)#+iF<u(DD@9nzH`F=VT4!$pau53v6-s-O1r|CD0?_$Nl?@Xh9binRYabN~3x
z>m~EkGR<LufEfQA#MH{b(1p%`&cVJ+MOty00kQ2_^`r=z`9rNLq+nJp^T>pE)?r=}
zE~;Bh@j|p{G^O`mhcnr7)d?vW<_B>D)BCnrPwqhDCMAgU4RTs^Ex(IhHbtY>kt&UV
z3lbwrp4Sl+ql*@)%BAYh4UHR1g?am`)?F}r5=Ijtr-PdWt2hv?MlD-dZ1YW<3I~Xu
z;z@BYvvW)L7h>^TJGhvFfjEQy-YDHJ0Dja(IAy3|SLhNwQzt$BjhgNYH*UpX+K7IV
ztK`rEF9ZmYY&``47twn#Woq}5pVtMxGUA3WY~7B*7EO%*cA3lD&tNMxub(b+vT}Fh
z%6_;9L^~G?L%I~p?IP!P)dK$xsS6S$Rg&0dyg)t<$p;2GR52fsDG8O*H7T$FXyX7%
zuE2mxtkI|j71Bq6F%!>kJYJ_ic;8448xNX;LO6>NYlS&)Fyp7jsE1Az&puA6yt-I)
z%r|K}{}_-5<(`_&9u-75v_YG|m~w1Ge>Nk)k(Ce~f4lp6AiE_bq!#5Bk8ampQZ(a)
z6I#!`3y#Ehw0)T&oxS=nH(?_ct*9!!JfQ6m;8nf=rzlw5TqC19CY-@5KOIVBvTT&B
z(RsUUfW0(C!owEC4cPc{WzZ;N*ij@5U$cIQu0K7_r_zQl_-5L+a(?1-d`$|Hf?WkA
zus8^4rCfx}k;|zfy3c6Pj8#!(={9}O#ILzs%-e8^#y#g)<(ZrV(0x?4(}KL;k*1a=
zP~S{lqB4~&cdo>)8({o~zdj9tklVe{?ANHGWVBTO#!RVb(9K4eIpu?n7o%JW!z#S1
zN%WP=dPc=#o<+Xw$dGMj2{k7z#L-f*WQx<Q=oUCN6uX@+$})D<KxG<-i6rIrIPqYw
zMI2cQ-VNSvLd+?wc(}notu?58-H{Y~_QksOEq^9jza#aBuAzVOO9@ed{n9lHCpr4I
z9lEls1_!t6?UXzlT}N`cF+P|2`q`Eydqb=EW`1D8x;&O+-0Kk&-HDO&m-%k9Shs!Q
z+wYKjq<f>;vt%|P^=X@iKK1YuL7F%>bqWpe^|5WN<t@*<nsJrGQ-xnsc6Xs@+inE7
zPgk~TL`1p9&a;ZRd@PTTuUon5>O<PHTJToN;T&-_U0a85`TqIZtcAnD+xqDN0+4`!
znE%{3t!*4kt*z|;+dM~A*R7XX5k2p9Y&-E!z=B@OvzM1@fB4X<MLJMSWFyo%#4kwX
zewMFVWqE%-3y&sls@KoKs)T$;{PuF@a=$7nfsyBkf3``iIF`}nKU&7+YhDr-2&u-d
z*~z}wbhvN!@-<iUSyFKhUkSXUB%2=te;GU}bkGN>+`wNa0ZNrszy*4H7PGy}g?7E<
zle#75q5tQ5$nr(jJ30)ZIJd_#rZ%W|m>V<wOPqrEa|fa?Gu=7c-j!PEv8rfK#W-o(
z-JC1#Cz|k=d}^Al_MFm_K_Lpm%{@g*Z#2w3h*m|?sbMXzioBDwN}(6&(r;94_4z)}
zNS!A)vF)3vYuKO0k=z3=;$Aw_ROA+#1rgO4lPB4NwXY<>?9J_!0;X1cn`n_xDnnKY
z87L=vO<E<Ym}?=FDuG*bnqtOudcAf=XL@m0C)71*9|U*p9%Re#I0|TB3Rx*>>c$1Z
z@N_TLzWSV^z4RXFN%j?fIP8MnR=`azqPBF%x~gQKj8hF*acqII0784#*nPxSQr|OQ
zLtb{~b>FKTvS_Ckswk7B;A3<~|Co}qODMphgg2yBn)?bR>e<ju<0yFO4zkCCa|$Ec
ztD|6S9>e|f&~Veo($!nzPJ8Qd$iXGWM_wvte3!HB0-~7wUFeF_w=hIB`5@k06|z43
zRAMUl`co6NB$ji=TJ>v*_?3%b-k|!bn`E3f-Q-~IlWoc-L@&jmW<Nm=t7RAq8|JOq
zb?|QNx=-N<(xT+aY$Ml-ja}Vq{tJM$v3MEkhzRlxT4#vBc?+Xt8IhKR`Y~}MIJVE}
z%ZBq8v8Dl<d_I106}s{%5G;zQw&09qxl2=w-PB^lxDoaI!R$v9^J4?<{PNBc`_be5
zmWUse*(zx2XmUv9E5V6yKc{UE@(k!fAbgBY)&&hq*kdpYBp7?D?d?=0wd@EC$`sz5
z;Wj1552!VloIorq=mMG78%FfLANOw)d!@q^yp%HWy+I`0+&~lvfXbFN>MAT$a&gqf
z?jd_g))hx1<|MmdJ8knN3{b*XM%F@pT{&euc*T32V=C60Vw#pNu#7BP&ib?hv15#^
zsIwW2%aRLNl8i)vbZ22d4PvDK9>7%+^NOU#E7+_;XttF7vjkoxQkMvG`^RWs4`hES
zAzE4tMx6e-lAVLP8?_r@SCUYi7b$7dsTwXKI|9H4?Yjj8nywWO7JjHL1ep#)&Rses
zAnZ#1@UW)~9QsSOCb%Ti3boJtki~50d>BS_9bq$^;S<=mtuY(Ck#}k&%j`#6Bunpf
z0bzux2}|TBUzp}+t4XV~#+Kc8)xM<=is>hS8$}X<JG_SmB^yo`_STdAK#bT|(Ua3?
zvGR0nB#snVVpkEYP&9%L4<bJ@$IvQ#<f}nsc6d2rC0z1-^43*W{V5wbu@7Tef_@{<
z)xkzJcmB@F$VA7FO3PSn*l(o6W2dQPPL1>W2F@1&ZItbPj+J+JUf~KG=RL|UZv}L<
z2uBje+WnlK_jL|NW;u59K7wU;QfBr-Y}O}HPANi{pC+!=p+M|{wn8mXv}`L%^Q@+F
zw_)hkJN?W&KuED!@>G=O2hHmD5|$%g9Fl&vlkm2ll9m6iv%I~LbH-Ug`R2)xS39^J
z^aBUhcG8B=A^ic{il9xBv*igxP7)Y|5A^@;Q1f%${O@rp@YmOG{c8U2sYL&p_3x>F
z6odc&B>Ag@&98APVD|IpKP34NEobQe-OuJ<BL4E%e(z}W3p3Zd{EspJ1KGd(+x&Wh
zUu?fuWcr&;3;$1_;6JgM+5gV;`{v!hnNoh1g8H-n>OV34Yb)>XY`<rI|7IIe_ye~8
zod^CM`uEJu-_XXYe*pb=9_M%9-(%>%fmt>F0Qi3*>R-5j&Hufl(_dl4uW>36qWuTB
zzk-T?s_E}x#V^oY?}<ML{X59`CG#)6{M|A78{Sgyk7fSfZjziNIK*Eda6dmHKRvEY
IqrdL{3!F#v`2YX_

literal 0
HcmV?d00001

diff --git a/.yarn/cache/hammerjs-npm-2.0.8-f656ba2573-b092da7d15.zip b/.yarn/cache/hammerjs-npm-2.0.8-f656ba2573-b092da7d15.zip
new file mode 100644
index 0000000000000000000000000000000000000000..36d13b6aaf3fb39ccbd0799a9c9daa8eeb9d856f
GIT binary patch
literal 243546
zcmaI7V~{R95GFe28QZpP+qP}nHqY3$ZQHha#`e5}`|a-CAA76zrYfjZC+Qzgr=KJp
zMHx^qRG|Nn1nbtI{%7O=E#UsE?Hx?b4D1|C-E7TV7!?1nqUir$QA;B`J2PkN|2+l-
z2<m@Mf13Itiwgn-!~+flMErjp<7i}JV`O1QZ|&k>AEr8Ozs-o)1E7IA(_VDXW)}*C
zfZGzmDJXweCj}B?S)xX+Oq3b7J_uki@aAmDPM+O7yms_xt!EMbm&9i5FZPej2D^}k
z<@Z1dtOoRpW#IXh{s_mYBOF~wilCPWZMzBTFShfns|0>3d0Z_Lvuav;2_i%-x|A19
zi&VS75?ODoWhM4v6EU}tZ9RI-9wHr(Oty+*%tUPvtQE-1TfN&zp6FZA^BCuS0uKP=
zeTV2AJ_OvO2LU5vRM|=*ATGA=PrLLmiWZAjq&JBx10gm<Yk~$UV55B~B&B+6`Zk1C
z1DWjvJr%!q1T~qIqjiJnf^-6p0cW6}YL*pgnS2a>xkOY#v_BpDk5)Q$yEZ<OY<mQZ
z<svocoF#`ka5uYUXVM!(dzXCVm6UbZ6LSm2cVVNF37NA_h7xDx`&!nUE4pE9T<=zS
zp-otI+6iH>X@Y$~5A=v`&mTNxF&$X+vlAn+-3GX2pbR3|*MA5y7+eIzThh<>NqNh=
zz*(oV(uEN``S8V+4?pS6D#$2FsJxBz@{QCg!guDayrbT2$c&wzvKr%3Z54-&J{0?~
zB5$K$bLs6lQ}=zk>B++38BXnHe>=UZurNe|=)Ki#ZOsShz{3xV0rQ-2EzRLrxcvi{
zn=rd(!&%Y*6OQ;O99J%T=B;{WBG|;`k3?$}UHyQ#1T3&4{A|X>+PH(Y{^ZbPiuu>(
zfd7TZ|BWq}zf`T3|6wZXzfAal#TLE2qn(w7y@RtE-mDPJFykMv0YD#dq7Kn*vNSIA
zF`-1E&D+Ad#;qBty0CUSbu{X=5sRT7eZqwG9{lgY-wJA_85vJU@us(h@#i`h?LI+Q
z(HbO&(*}80von?i>m+%Q^<DNw-l^ZMuP1Bz;goma|5HmSZg`N-|16;XKMNrEziO#0
zCL}5+MsH^tr)rmg!h!g6YrwQBWvW4{uT2!n`4H6I=15RLHXgHuqTKU(U58NL`zTWf
z{IHMZlT3nJwdE_t{4~SjF#iswAL%4IUk~~<L~t(=tM~2dme!)=h$SX_D8e?v8Ac(8
z(z|ilkd(!<&mj`k4G$m?9T;w_{}t#lzdiw@UuNYZNWbScirm_405d|%;V}`t>X~R$
zUMWR-JVp@1^ZW?h^OH5s>Toq#hFLw%4gLY=UVo@gwi3m8``EiEAkp0of98g-Jl&dg
z9k*?-!{$B{GD6)d0CAg{z}mKDUk_q~d&U$B9Ea!AjzYw9`(w#iys7R9rSuG?;6TM0
z_QejEcgLvGMja^PH_KG;Mn#HpMopXPOF@D}>OaOML(=ZyqWwDkQwOuEN1m|sq8=b@
zV7yLm4)AzruHBM=DWxRChm223Zq0J?(Ui1H)Ne1f+EKP6I?ky@?>j)3IZsOUGDTav
z&jj|PROEuPAK|pz4so4Bm8h#7LCUG}p*kAql~GrlKzRLRC4uc}nG)H-Iw_IIu~Z}(
zy>Zcq0Ynr4V8i@+In4|z9JO&x=4oF#&{`O_Xyf5sff`HYV%7)~i|(N(&C<eMVJKQi
zqsAz3$ZwR`^q9*&056+QZ&jUWivh$^Ia;}AbK=-K(JTBWHmFZ6^(TMvK1<NB?f%Y%
zaGVA7csKWP`T+hNt-A16Wud<FTpZ226&TQX;!u8N-Xs@d>Hqt?pgI0mRKOUDwY(T-
zn}(MlCW8ci-*rsRMt9pb;2*-rakrF$`Bc_pZ6jKW^O<rTur_u-?t!_WOi>b7=|0kR
z(R3m)1u$MElNT6u_wsLIq1-nzc}OOe2t0f@Kpf=n9@1r_V^q-w-#jwzY?iI7IuV8t
z_BGy)qDPNxC$Ep$P=FF#Qap3MHU9I7(`uT8Qw;x!1`PMz*b(40aL-VtUVQGj*-)wm
zcuVhstKcF~-S(+yV@#gJQpTGVLcN9SaU_)$`*t_Pgy5TwpK_Apn&$sB8$i9JaNU1q
zQvmV*=QvC(jqEMVY#l8Aa~-KFdN$jPsDAGLVfP|V?BnvU>K=HpOTt>?Q|Fkp(1R`x
zwr*`FQqDSQAN_aIO|}$NCL{;Cc)Rs3cZ(*}lIkV25lLq!IZ*GLion1RJ}vY_sRzjy
zn<q%UE>)^o(|iUa=Gda;l#pnNcEikKT(D43gJP1h6Dil^_`6B)triMs!2(*QN3AFf
z$Fh&e#I$%B9b{UGY+iC-l#dVd!Y-i=Bns_d^IDrbplvOrKN5&s??ey%=&C_A%QHE3
z=PoKX#~>GsHu_FVrP4}iSIcg59fEl_Gh4|BwlS;#;L8|Flp_r3Rpuy@6J6H*;#du*
zzv^g_kegUY+Nx6!rai@PwFJfxuGQxP7J|bNf1pV*sEM{)QVJ44tm7+-JX7?Pv`7PT
zG3PjV_u}??^hOu$$EF7x&tE*%Dcz_^cg}$`?^%{dEuG-)X4hAF|FDQX!^lht+Q2MI
zu91nsebD^d9@z>ST#lpa(dDV&<+O-H99RLbx1L+z%svRS*F1|i6>6tu{Ge?(Jz}1X
zZq$4UGr5hno>&yy=DOf@*PpA5S$>MT6i4^T^LD%$7;CHJBj7YMsRL0Z$><!yORv}q
z9I4iDiigR)cw;Nbp51*JjhOD9PuIwnv*fi+dbK<#9s~S6j$0xbhxDnQE!@|Ke$^98
z*&Ti=w=)!JF}w+6+T>x@;ryp}C0;B~i)Rjkz|B+Rvyu_+!$e9#_XjSA#4JLc&@5|s
z0(xIGACjPJ&#h;x)_w5t`&x$^z?Pqz^y12aprEjg_G8R^)2UNM)}V_v;VdLCPiu~!
z)a~gbzc+*T>!cG>t<^uvo>Z{zcBPvOk2{+NB)|C2&k4W8#kcbED4@E_)J`Fw=a|H~
zx0gccktfy%IzGLhApg(dVMXc4jlwu~X~x+j<o}8G!-*K>N|FB<86oihkCXUc9P2-*
z-}qU%;7BB$d;CPJkNAKNgbOOUT+>=^iKr}ObRQuRpCY9XQ?Lb*Z=wf|xpPPw%l^Ej
zOW<iqfEJL>%a8cvMItS_S(urbo1Hd(%r>8tyE0Es?FHnJ&L?lD_hR%0gb3*OZG0|2
zVFY;oJf4a_$~mj7H~;+m2e<lFdZ~BzGW*q(j*+bxjrJP7Su|7ca9P54t$2JQ5Y7CX
zl2f*PWy?D?Wmoe`PGG)FjYIZC<tu%eP0O_*AUF2K^<nN(?8lZ5f7O%GcK3Ku(Q!py
zY|NQ&y4;m*`qo@jgRm^MRtjJDXvKa>+HX%PWdlE3-8B>8X5(XW%ubh_4;fJ(zvs{C
z&*Rzq>+hI!O?p<V&SAA{mY)BJ{mV`HBlMed@T)-m^;_iDC|9chNl{J!;Q#>{GOS`*
zMX`vJrloBW;uPM$RjcH`eOUplFdq*|px@84!?P>E9m-DEi^^Br6sRRKD5Smrd=8nA
zs;~Y@^EJ6&Hj3x#18(wipm1*ZgahK5x+;~m@<B@T&&?SU03=ZVv~8QEI&7R~l-obE
z#GFgo-=}^oK(3+k@$JapIWr}(8$-+8^+krWmN40nv9`&Fk*dYVP_FiPm9lMjz<<$t
z7%JbH&u72fm*wuZuD6SHr<~+yP^1JvZu@vi!M^A!;}U#btl{k^_LZ8p*@_~qPjZD3
zn08&1yKOq54@+<Z)=Yvsa}!UkFN2n4l8NAeW~IWY%EvX#5V70E&rUGRw_cvC5Tx8c
zS-!$=3+kuFb&T)u>6Bc0$oR}ReUW3TI=Dmi#({6fx|Ii?9b;74u)Wov@1zj=o*kw~
z=QpnW@(0o6?R|Zdb(rY{SqkfB6F?v3lquiaJ6Ya7QV}1%PFuIbtjLxWtd;|gY^hXc
zs6RKT*<37rClF4|t}Z*%Sccu6Z>y|$ZKprO3h+(Y_D_wkmc6~u<NirOZE2Yrs*a|^
zwH|fisc&YkjdA9}hOJmIF6gea!WINmFochg7dgXHO}{^QIY-N~R;>0=O990cTtm;_
zK1{4iCk5Te&>!1;#*Tk&&c(}LdI;b`jKDy@_Tb<m)a6m=ld-kY%HOIe^brx<Z^Q13
zftz#Ln92D;^^vmc`(E?+OkrvD8(wle_s#NDT(aqxsxI!naDqOmtiibHN&dR^P{@nJ
z)+JWRoI7ZFz*;GBOqrds%~%rOFFi$#M<!BND<4(}OuuLd5_RTi4B-S1M*;9pR#ErP
z?SxqJ?8udE>KQk{Tks5T67E*~Yu@C9)E+8+)dgF%nb^|ZDW!6K2}G6}bw=nw#hR}M
zcI@rlT^_7HF?9S~Uaa<ClI|<jKgeI(FMpSL2`5O}T|T*+C_B+w_0_zkgpVRQn1V3V
zO1W8cQx~8(;HNlf8%Z;=3kSfr1oO>%e?38dYt+w}n^>;yeF>cXp55KVI0SJ10-gi(
zZ1oiaG1|G|$)mag>igtu-uu;FGX6aG$&`<}GEx0oefzKX!zVlY+q#dxjVHj$4H;;u
z`{KU^mQO;<yrf~3O$8Y&b#;fGH90SUx6}nao$T!1R1p3$czNDizZP@`BI0{|9pPcW
zkBkr5?Znx7q!Z!dqBbVOj01g-#jra!)fq{qmhmT14s*>Mj4*1Er?COA6=m$iDmdk-
zc^*h;g$YAB4o}lk**8Dd&DdDR@ghI;WH|R$;l3I_cZNrq#se)~y?~8M^xYTI^OvZl
z8Yt{0qdzxJ4xy^;?g=ie#b~MPlEJ`rgj!ai&9a`W9mexDe3j1b^0Z+1l+{nhm&|u;
z9|2tX@c}qG`zeI$hZkI7m6a$h>GI`babG|{nlV3tb;cBw35>MbbL>2p&`V2yz=rTz
zHTiDr(xp)hLVoTFkJj2gpLk;6qg^VJ9Qt3*6ezkf(nUx?%2v5n`|dd*1*O#7IxzFl
z9{3>0EV@(#$A4$gL&a8T)wl5$EI6xT<W*#jRKWUO)LuZ+#{DuGwinA1aHjit*$HIu
z7xM%r)#2E=D*ytnl8t`XJS*w>tx#Dx!*~ze+eAip#Qx@L>AuFR%I;wM%}v;;t&RQ|
zkfP+8U9|TqZ56a7_Zm3V)H4*J?M+FE$qmM$io{k4V*|%K|N4Q<oFL9NAWD*9-*zB9
zPgh61vh$g^?LuiKG{^J}$AeUu5bwP|;TcazNQTGp^?1>^?|Gd#9F`w&U!SUI$vGMA
zY5m9c(h8uz=WbmFP$5kc8N)P>Z@#)Bn{eSgp_OP0h-1L^%$P@zdi-56-B(<x&Z~Tx
zK}#^>3lY%+k_Wk$t&%f1!Tw;6#?UWQ$LMd;<}iE#u;SLr<hxgdG_IpZoN0L=&JX(e
zDwHuMcDf)UDq>8?s_zjh<N`J>Uo#r8i{*N&iihGP*MQ#Pgjm<{I8O-#-DjoQl1-c>
zV9xBQu<GwOw07JH7pij^4}?|+xIbe{rD2yR!2LvT4vbT4qoT9c>u_tXWK&hm>KJ6e
ztC=qB=`-aYh2#Py(LINhc?feyCvoEou*X`Msv@g<Mv}EHP<ZPYEzO{KD=C+v;d{X%
zWl9NXX^rrkf|aFnOv-JjupI3r$bg`@iGfs=>kC8~DM5=aswRkm!mMG6TFMA2x}PvG
zBx7p97TW`=fk{qKx{?|sz6*#G7=qwTRgGd?xw{x7xI`Q`VFY?zg&yPTojSeCyG1;0
z-74cEv{jED5H)H3^Jm9XndQZc2k45IaENENFcJy&UCAFEa}O=1n(AbM%wZBO6{}Q}
zK}=FQ1}07sRqssQLD^57G`nP<Pn9V(o2PkQU8(x4l{(ZNw`+{Vha#&NTUTWMi5UaA
zFJDR(c^BQ&RiwRl@p%n1<O6j-rGn_0OAer|6M|Qu@Q6;K7VO}40#o;vl$$}T(+#TU
zY3jAA^n~UF+X*nJ0=f7-N|z53mlchQt`+d%sYLaO=UsxV#jTC&b=Gx31*AN*kE2}L
zaJcO4Ld9cCsk0qS-^<7F@Q3qmuGy<#ts|~%++D^m3hHAG&>MEDztx=vf&nHAljV^V
z3u@`upP#Q?*Oi$qo$r8?P7yPx)pKw&?>KIkK#N>876rY33Y)TWPI28uxN3WVz%e6B
zluR^NPAd;@)#_d;?p%lxQ#J0U7S?>`fa7h11^1kmaMlUBN^~;wQO^f#Oq0+-FJ@aH
zw>tnA`d7z5w&5QWg6C|QLSPomlw7OwE>4OZ2D!z3j<t^DooJK$-(|_9grig0dc-=C
z`Cw_}x;FZ|S9e{fE4}z0Smf8G0?F`?mRYcKVFZqxFW~{Gc^ne#y`nrZYLwq%>PDMR
zZK=NAMc?-L^D;3NQ3r#86>4<h(zD|)6?1%oOAzef#HLT+p<yo%o~z(?70aPj-}j)=
z$fI5u0zR#22?rzw+?ITWr(f}lM1%4~pNs!-OdCSUIznT&TBg?is8|)E1%Qu=yVaME
z)kcHQzC%mS1<Xo(*N)TwJSF{ZdiO-)2P$B{gaG{2QeNh+Cfp3BljaEb@FF#+;elg8
z*E!FX^#i7AKyKsSzMf!xnl(K1-in9L<60NAUO?m!GXyL}$6A9a$NF{MYWW*@*(W{l
z&VR%vG%Uw@H+#CQTqKmp=-xyigU!|=)d!S;fzgX=-%pT%nK)f5%Y*2)ok94SG?!+U
zoZnyMuQgyi*2u~^%sBn?b(aYCwBmbiCZ3AS2@$}p)sY%4$e?E59AQ@MoEyh{3dK#z
zql8rH{TQ17#aP2)>ffmeHMcUv)awV#G0DTONpVU9&;_ft2inWkF&>m?*MphifYbJ}
z*h&$f>f-wjt+-PyE>XoC3$VD}DtPmGPkXz%*mk7VYaOPyzRY}2ltqo-@Hc_hY;@eK
zioTiFiT!U?lrdjaHaW#n07<dhXF-4B*fs?Zptwz<OwKPyGt&EuuoxVnV`E5+-z2C_
zX)g8De5gJ}XmZ}m{q3IPa@B;4ku)GcFJ)^_)a|qf2wlWi|2SCR36i+~7RRfe+A;5S
zYoQDhQT{OS@Ldx@pwV|aWUHL!pA6^9;9>&60fJx;{)gKW!NguZT4rE4g1Z;j;zfkt
zro1>J+c=94wRjG6hhvJE!0zAF`{~K<!^7hCGD5k;-K)Q_s!b57#!LhU+K%2OdQk$F
z!kPg8mH;na&o?8`Gap~!Q}J8@JEAon#z)JXbk{2oj%yyy&RjhFeoiJ<2MfrcXk9(z
z62lJb()L%De&v~(`mH|6^{V$PLc+d~j;iH3yiQBrTAP7CFQH3;7CYQDeEeSSp9WL{
z;^u}gfj0z5AIqSXPq696H8~#%NJWeLpunf6TbzoA$Aq~Rd3lfhJm$6S1V{;iV@rlp
z4no-b3xvnzz1zb*Ai!7i<>TtlHZYYPKQ2BVylwp}AbapiWxM(N$NjfnAb0D>Zm`?r
zcK`eH^4tNcrd9wP^w;&-{kK0JUcst%uLI#H(7#;(VK49Y&P&b+0%32#zk8R%9)&3?
zLh{XeY1|<pUV*<yfF!%wXN8}kMGp((rgsz4c8x9k7#H!1Z|zuMzM&0CTS`qPA^Zb%
z|6MYfN2>gy)hD0#Kp~-#xo`j?>WLZ8-+6M8|Mg39KNMtxOj5PHmisO%o|LJo=>d%v
z+AT%a>ApVC8U*~3L8;6~NU!-*C58IZOy?EXTioqAxw=w$#<5E+p<r|hceI|J<3l|j
zo2V}#BvDq}OLDt5T2ya+q9DFT;$DMYj9Vg&v;hxXr`XCe;}*6L5ce2u^VEvaE@zV~
zy)u1t(=s;(o49IW1&-`DPj9Iz>wi=kd3NsZeg*3<{&2~VW3eSSr#2|&I6CBaS@~i-
zA4FLOB>ps6&J`6u0RaV>0||bc;fVGNAg{EK{_rd*uv%AG;le6)n?j^}y0S3?u~tg*
zd7rk^Uvp8FS-z9|)R=9%!z?3B*o6!5UAcY=M;geLccl96u!23_zA=o=AuKvZJ>O_e
z?fyxFR;-ea4U+L@ix$)hh>H(W8uy8lf_MJOtvfHWDu6OQTQ+MLeQR&htO4EY;D4qO
z?C3mZ0CR3Rt_MAf8>d+C=B2g`mTp^)Zs;Q2mM%1{yLk*rJc5OpA6A*<e~zp#$m)=!
zPH3Y!>Wf=_JAY{jf>0^+q-r4`3(sNZ`%A|=JkcSEc_9K5+LAR^S0jjd@eg&h(-UA3
ze~)S96L_S%!OkzPs3m<B`Nytix3MQZ(DY$qPX%=~71u%!NoYT@5-lF1TTNxW4`O+4
zbZ+6fi2Q2jua{31$EK=-r$WFoy5#GnZwNkE@v$UMJ*8!qM*T%DDm{)l_v9V!118+t
ziEEz3cnIuhjQseGr?fUn`EgrnIRUOv*VBj-YW)z~78|cm+0Wi<v=_N9uNYhspXH8V
zQ8|Bsnz~wt&%giy9vccYlWCrq%&-L^Dcf=p*d*02BqD)-hdK!2LUYh5_(I0Z-&gZ>
zxpQ-te7BcA(7~Lx5o}s0585rwD7Y}Pmb3c6S77#_^TD-VEk4t3F#7W2Czuh~yA)Sj
zg-x)0PUZsVOIusXNJFdcQF?mWc5Qu(F7r&dm@BG*qS_deL~tUi?ouf$-?$71BrqjX
zVl)Re+52z&Fb=D15yaH$hyaIXC#IPza1kQj^1n~LCs6eug(QbIJr8T$c(`{5whrTz
zKv|u4q=OF}9Z<Y-AI=T4pv|KoT!)VQ@~Op;6Wb$ol5M!B4I&+kHvRP+VceVPF~&|C
z3}V%E-ojfr7%IS+orkXj2d<=POSFHA_J~Brs|AVFP4J5^N=#GPik*a>{F=n>_~uX%
zRFB8l&S7lmhMn00bOQ11YFWa)0jPq5a_)s#fu7s7l;yZMW9kfbbyYQc(~eb~9m}7P
zZypX4tDnZ~m)VN7@NNd3lo9#s-k6}7@uYp{rLM~5$yj`d`>nY{O6+wiuFlN6TbJ{v
zwlfwHx8*0oqADAs0^823dTb^hf_`8Xi!?9QmARz3^^R3{^II^tX_uRGo#`5%h8IjL
z^KF`sfI6^&%oW38G@^-m0h=wc+;amv1Y3CyqjF<w`}&H^Xa1Ml^c8`a6$9GJ1X+RJ
znyo?1_cDAM!R}*%Au3>L@o=<bW-{mp97FeDF*}S!ws35AokEG>G~K8|$wm47s-@OX
zze8EKq&)(iqF>sRK!K4`-t&sx_;g<aM7-r}+`8tHt5djLl7<8Vp@v3MX3jrZ8wM9V
z_YIUtzj3*VLyv+4rxi7cGukrft;?s0rj$NXX2;(P1LF(G^-(?Sl*YwZS1^JZe*XK8
zx8Usw$m03Pu+g;>V6QO<P}(i32qx{i4ae8ACT96A8xB=XKKUuer1x}GCnA0^ppDjq
zjXn(KGG$%I7fZK*B9Ah4&ZC$*6&s`#?qY5A2lBm@v>`TT{yUjFeoSRF+7rr0DXlrL
z@w)DaJAb=fng$wt0!!V2!?_%H*hPDzZMqzus=s=N)<z{ANYW>##GMM{N>{MpQROf#
zH1e&2FHYK0k;e+VxE#@!I`8ynw;LP&4YkixwO>DbKVECC!B@y9{%yy7iwCnybN>MM
zMo{DmPfUgm?)rua!eMam&J}DA^*0TJncD|5R*wHV7k0gK4DNkrZ}9jTgd$kFSO4gt
z=O_&l(=Pl0tTmnMjHWn5!SU3J%Mr^nHU|oEQJUQPDxD%UAhAk{k3iNmLmGRlQT{$F
z{Z%_pjAs_k^%n+xkm8@Ec#;Bn8^YyN8+PLc;6~)CociI$%I7w7+Io7>^+BkL$xi3~
z)%ns-=}%DOL_wR=^;(}3mpxh3C@WhV2E7%$#xyZ7o6yB4@V&PVzik*z?ddoWoBJD)
zhExz40UO7~{5;MQXWN%`VUa4ANX$RUhT0sa-kag`YQ`>$l*<SO;tkwTDw?ThMriuy
z!nzz3_gw#O;l`%tAg0ngfR_cqAd9*fhQqx!Aw$Q@oJuKk=CH9U5-wjizU<%fSs+$k
zAQYT;m2f$Zm3v#&rq=jbIFk*H-M$q#qud<8cl`=N<|4a4R0sZH$p4!Bf(b>l&gIZa
zW<F=Bd7)htr-CvHj!s227KYDo1Z06~iH5ymnhz^vJK>Gsg40*m7j>(0z<kueT=%Y9
z_=<%tcFI&2mBn9$EOeAamO7a{Osb#-%3T>+E|v^JK%cd6wW!lNQd;;sh+KoAYclvZ
ziU7sq)_ILE=!O(2rya99a-Gu$L>`B7ha&q&mlp945V}z<B9dNj&LK#;mS6fH`I-m#
zo6^eyM76p-M6-{n4I$vgILJCS5Rs-Q!B1CIX=_IOz&UV$sqqB=b&&<tr6BUYSvZ5{
z8}uDr$mt2V&6W;q(}I3KaPd;CmraLBq7GGIoe!@fBel~888xG-C?^bL9bQVe?y2<>
zSa04S5c40_)3b<4-hq-W604ubHLIyf9(hYB6`G0aI(F%%v!M-GmK|9?aVUOq7z0Vz
z78o{_xm#f+)hEpk3IzQGQm0Wj^-bjEUE0#kY+Dy2HBL6SzQ=qH!`1+bRy(^~665NM
z^=nc&G}tW&*!yPMH`Ric`i?V=ePKZJ4tcbd+P8;RJMiB=soTXdw229hK*e0LZjmm9
zPLkmwN{J8D(bM;~k+)+SJFr=b4RH189~t|geo#UUd4smYEohv3xu%yh48eqo1J8ah
zjMz5E6uopU^)Lyr4MFws6BzGzl{r|#DB8b*%qS$&^=A&jdGZYi;trL0IL!lqNn3PO
z;J^wP!ImqWV<Pvgt`(fsfBnWU*+Jt|+tn#M73o0mV0d*fwup?-NDtWd{?L7Yi=Ll?
z#qzcI@%9pV!JfK>#Q4{GOi`%I!!hP>ICc=TJQ{Fnvh>@~!o4r_7P^tI$I4W8?L&66
z&chojAG=Xjf)Z!1ZW}v|7j#%b+8NkF^>o6``TdM&X`=r%_pM?it;XX?iNUm}Ptma?
zHC>!~2W$&~&7Eir3%y{{*}#dK6K&Zq=rjA-5ctc~ZSXJeBHCyg$2Qgwt;xIIE`27|
z<hvWIq`w9=GmF5AKfz13tM_`dr=M)qeAz~efbo<c6Kz;|pu8v;npe>3k%Nej`7fA&
zZQeM`44oJf+7f*`Y7B7?4p%*0w?#l`V+dn`*)Wt{_Cytga$L}%ggd#bRZAJnU13ks
z2u?O$=^9sqfL5v7(jbRoIJXVIS?MvsY=%D(I*MUAKX=jv{DDSr!7eJcWIfP?NZ0CE
zvTz=9n*U2Nv%h@Aab!^=F^=9zSDS{XLf-D-^8hK^ai4-z=cP~+Z5_||2AU4kUgdv#
zfuoC#ubP09utg=LGZq%Au(2m9nNJ;uBJkf9CQxn~`Rujh@w_AtZYXU}wasgPH0u!1
z@FILkwLyUYQ3(H*s9Z2_%bnj40m8~i9thSjc-RfvypaAqz!q}$2<SUY9?bt;00RiT
zlK5j<{!KDNMQFctuwV1QL@B?9i<$h#aM92~8&fsK@%P_s^{l|x$0)(?w?e@CcmD7F
zS-|g8fB*Z_TK=DPM)FwT{X}u)ZTa0mk4U}d>=S$Gm_u2?K43xYb*@-JO~M3mA>$17
z%_r(?b+6ogb5w3Qu{<8mzila|QAN@x9)8zZ8fKqfqgP3-A#RydkR8lVSGzMmz2zDf
z;EZaIVqeURxN%Lh@605zEL}r4ZW)C)F>>MV$PtuUBrHruYcpLrteOh~5ry~+Mit&d
z?ryg}$l2OgyR4!-b14Y5TEy50$UL{JquEFDK5AKxiPS^Q1O>{E&4Ipo5)fUE+pyH}
zxJ=SHii(IYlsR#LNgV_Izj};brc*y2AX{rrW(X_9PO1Vgk_EAxT#1lEJUg*|Xh;hq
z!~+R>OvB$w>x$XmO4B$hdh~(uHHL4~v5tI`;d#1PP`R4#z)W|McWjNaHG_NW@gXrP
zbsBT2sizYzcK@-;BMZCJHI^^9Fl>xY95GhY_|`u}N@(!uV8-$DA?cp=q+H!_XpdcC
zq<tN-4C67Ra`yKx4b6@G2Wb<!@1|Th7l0e&mLh{Q_Z(R6%xwd?HRJ0qVk4O^O_e!k
z!*kmr1mQrG^zC$U41RPjrgLaLTega>Np;$z#<W}cSA^eB@mxS;q=j7_2{Jy~*eOq&
zU~W9fLp+S}P%e^54%VPy0G?zS!;Vk;@Fnne`|6GD?8%Ag2wLXkNqWN<3e1|l9-nV~
zKowkN);jj#*DTF$S`FSBH3PXqHyMECP19#0RUzHc>~t1GqA@(C?(w;Mx}@2F&iw?E
z!`yy^oyOa!*-^_o#E+atASh|kdGj*sj|Z9w#=%SmKh?cOJ8sFeiO=<!mh2+6K=sO1
zTpqU#U+`-EBa+hc5Qg}0>~lNaQ|-qsf#C{Deb<Zfl#NAu@Yfbqy~i<HdrSF_CmP&4
zY?$cRDt_qs)gN~hsi2^4XEynIy(c&m{1?L^qWE#WUPXprIoyyf2)hwj&c4aJ3_>B#
zst#w0dk^R8%7pT=*Rd_jQ?TQbL$eXQ_h2M}2r3AoQYLP_SaPt$`TEBi+f2i%L!KsB
zlw$913}XeFkEPGp@aup)6I7^(AwT?it&nY63l`gzZh@+l-?e4TaTLw5L2TaQOsx?r
z`WauYRJW*}p^ujfz%PZPLFT|FoDH#cxw%XF5_?n|J-*H|fpPWwn3#ic-K>H}SO9gn
zR#@AxCCOl#lVpuJoTw635bTg}&zii><7(}~IewXkJq?LN+w%i4qB5A1DqWXxMa+OK
z<(>ENg*p!YtC-O>Q+UJQ>!fFq-Gx#?+pt~8CW%Ar&-2GH@%QRg{X38njStM(0owuP
zuBixi!ZnOw>vwuYcKJ#-NW6r}tD&cC9Wp(3NN!j4Ma0Ji<6sq>*}60$5fvD`Ls@2W
z5}wg#wi2deP~*NP<%a!S#+&O<;e&y;9<2|_K~ihSe@8MRUq0QM?OpBK1ma97Cg8FQ
za^+H^j3bG`Pnli92|0Q{w0|YE6wNEzH665QhElXZ6VAOwBE_A>tgsJxQ=Py9&P4xe
zI6jjmH;r$Z8)p=0t7Q9f<IYQ1ZY~YA0GDLiPz8;}Qich>0d*V|u-NLd>&m-U+zV4*
zzC}-x@m)6%nxRE#r!`^t_%=x<XMbV81225{P%e7ci=zw4y?+EhWP1;*DZolZ$su_J
zGNXB*nn8An+gI6@dBGQ7vqR<$EpAN8?OX&wVxpzUMrS{-@U9~QI7?OzR=bZ8$^noe
z#U7{>R|yRIwlPT>0KrBeA2(bE4fWWb<N62xz~21~Nnz?EJ|rKMOQ-<162r=sxs;+Y
z>B>4pw_`BILuL?+c9dj0Yl=9?M=5RkmM)y-!ASeXX+h?C#aO?lO2I0zuW*idLd$5K
znqt$93~{*x(oVKdgHLs5>skcecAv{$8^FV;!-J&Z<+C~;Mu)JaK3+wfPBpAI-b-s?
z7sAYi`R4&5vd;x=@60$?7?Y+_{N5f`eWXEiURgGI;{&}-;RfewL`pm63(IhkYX?ov
z`&ls;ZG*OKP|nJSVxFgiUwPm4(DEQZ2}b7op56E!BI$V*3LlF5^|McjK0g4x1*92U
zgr7>SP3<GW?Ya20G5<N85du|3LFF1;w@B_@X4OtIbQz<-A%+6<Qw2YjtX_U_gjd@1
z^Kp2l10&Gx5JJ6w@nq`1&?qVJ2lTw3@RnD?`2Kp^Rro+t`!gDKx>kACzAzBzJz!M7
zV6zG?Yr5N2I&B_y*F{Bre=eVAM-fI)bedVnJE?RLOn{wn{fxs%Y?0A)Njl1y$ePir
zi3m=x(BO-SLlUY|CV`*xTkW`yxod;8#nemLj+<HZ`4~WztncG(ZVYGLxtnQvDiy0)
zjzQurK9pYlr!Mo_+1{K>cwi!)3n_YX^;!Q!%D&iy`IFQmc~RKkVBsySTr#+A|K@!N
zo%~fhbU#0lq=*O-EaJ07aJqiQW~y!u)(&K23U|4;O5ZS$KwbW}>Liqw2>&+k_Luj*
zJIdn@ynmMvVdx51QjFMJo$0VPK1C-$ac;PRRE>V+@^r4U6>$3uRbBGb6`4wKjekqf
z@6%lUWC;2+X)%@G&^r60=cptWA)cbqth5mp&Agq3zI=`v?|~rDLxEG_`uWvYIhI-1
z7^(22X-R^`h<Vm!?ePUUrgy_0a@N>%r`yd<%Na2`2K6=2-!a7CnG3YUB{x}d8Ktyg
zyYMsSS!2AF)~~`NQQ1TLNnH~Ty4f78`P@M~R_=WZqexAqNmmHk4kE~jUCFGE$xug$
zC!t%R9)lhX{)ZGqnmZ=>kdqOkD|7xy^+SO!bf-wvRwH>pWp6VIKR6Li(Tq&<;lk1b
z+knC(0^Q)f1T8&&OU{Bo#_x-_T!^8_!EaH1u2@y*6g|?Sqi_z>G_~$5Q_(3YO`PZf
zV@~b02Z<(!&Wt9>%t#oCCYS8eGO6hJ-{!fbE;&|_lTAFnR<c5fufD5kdy^W`?P_4!
zYxsF7Y~*1zcF%qe|EBP#t|N!^+eyu)d?~V5{`Go>T1pg@ZFQJXklm&j>q~TQ!KaK(
zsAxI;qOC_3StcU~Z{@q_RaNcy2e|31JB^iF7Du|iu<9ojJOT5+T@fJa^q)iH3gL!9
z^8MgM?TZ>DNodM`r0p@iv{5|%b3Jp83p@Q38HdL?_Ub-;r$67)wjQ_RX(Ti}WX#})
zKD-a&qO6hOyUuWkk2FS(g_e7i1Q(M?y5U$MGocE9y;mxPD(!JYW7mxHyI<SdUudrB
zX`Q8-j)M=$YvCUzEhNZVl~cP4Lj~_R=Ru0FR=S}eIOWSNXdnoIjdPJIj9nw&Z2mm>
z?-K19ct&G@moEU>sU`-NvQsN%;!}%f<k(&<m&jWX0#qAxHpM-6E9I9nTa{xaHj2)g
zZaj5bcJd@+IpW*)jiLiBaf+bjW$~_9zVWDK+c}21({d;)l}-*mLoPbGwB$&DVGZR0
zFnlz$(Hp;hq=l?RgHOfM9o1HF(?n>Q#;U_jm<d6IcEW0|Vqw{_&29=05sT&j4hOAP
z*CygM@I(y!G32ZktSrC!IveGE7p%INsUUH6XQjAoZK#p6xWqBJh9*kcE4r2~=_oy`
zmn7{iy_VP)#KI0rfRMm<ajWD}QrA^tki0Xx3Lean`VN*PWkVtc(N<QVVd@M<O23Mp
zpfbk$vu%a)5q*?VWu4I~(rF{app=dKIrS241<|i6E&eDVYdl+fH7$$F(+{m5fXk0G
zX$#GhAdCo=9)N#SwYd8nyJQ6V`Gu?Lq6-4vLz82J%5wx0jvRba43su<wI`Cu*_mOA
z+Jd>1D*CVV-jcG5W`2VdyiKmrzClr9e?-&YF6r~l1YAYG@V6Af9G2v(O9Ydnx^atv
zPR;#!+Y9|2il=A+s+-|V>g>xW=RzK0AJB>97Mp|8QXb5;pm=iR+BjE>W36o{|Atuv
zyr+{9xC1;jmpbd7MP#)W60U0mI#yI`!djJA8<Bm?PB(lU3rwAg*~Qt=n2!Wcrm$qR
z=|Wz(Kleji$&Z4PnT*wP8;UWbZKs}W?oPnoHhwOtESSm0bDNDTuBiOGw9%GVwQ;^B
zjQf(i&Wa$<Oan29y&lF>B`-XFVJs}d#S0;<@;~FakTod=+(m0bonAn#)MkZRCgh5x
zUlTCrIzPO>jBEb8oJ1)M=@F1@(?^8f*t*o>F93?-@aS=uf%-uV(ds6nSXG7w2Lv0O
z^Q4$pT7!L*{H);~omlJckZpe3<|IKRP6Fs@#qnK_<71(foJkqDD`y`TCntXr93W=g
zl-){~l=>$vo0RL%v3xB5fyw^iJXM>cxdI^y@t8kE9xJS*{6{RIZrUV<<+2!MRwTxG
zu<KQuv2ws)N@(c~v;*$V=q>N}9Jc=PbXUvM|G|`BDFGmHGgu)MA_{VdvwObfy{|vO
z%c_k8>>+t9T=V11*~k;j`7am$>177~nhFjHit!wScuLP~!{6wCT!A-zDEKp3ID57G
z%@Lxp8)^`IprBe2bnW)MKK%U~Y;bekf99BzJa||=SS`<S=qWvg+e=t4*_%J`$&|pN
zE>%84m(m%&<|o_i<L0r}?DESazP=_CABgewcHsB@%Jnn;>+lO$tA0rw`Dyl>)bF#a
zd1)w-P`h%=D$Wc1F<Do7Vqy1r6X=b0IF7l8(1phU<a0H7;|rLtU$|QBPj>kMes3Oh
z_SWxw8S%`D<+@Rm-5*X|-(2qp3G*j0#`gnozuevy$YYKZd<1Urf7}R_7auHy?Xs!j
z1)@nBNUpfPGg*c&PHds`so%c<>Dx%i(k0=+i_tDoOXyng6*F+rO@;6<F00Q)ZG!&N
zOPT0ZVTg9)cGb=jKJ|Tt?C|mXFD>6!#dD-3buW6m4C7+%H8zib8{fuN)0-yvVH;-S
z(1V`EV5qW}cG9IMsVGXGqbT_eGFvKdB;k$)58nA!GdDToNaf>jpGZoU|4g(YN>$W=
zWkDvf;9J?Cm=<<?9S+IRrG14_U*bL5Vz)TotxueyQq^qEzlSX`tO2`T>k_2*xOq+p
zW@(K9L7O&z<hdYYH9-f+Ik|~;BcvHK?nCK;#eG|OR~jf^pPDX9`C|0mLm=Q7ci_(#
z;ZX<Mr43XZMu8|F9e~I{tMuJQK5ag62mxi%Oh4URJ(-#1q&Cx;C-x6+IEU=$`;lz<
zdh7TagHG>0Zq>sz)h#>7WFFBe6|-Kd_6{TC5^gVKgZ2Aw?F-PuFH5xrl%C`}&JAfV
zn5!d^<oeJB{(w1XR9~8KL%da2XFX+e8ru4>`1&Hx#WBV)K^q_!9s7P(S_m_*FOkB;
zw7fqnj7a93ZSO<Tg!Bnuu=F$6S>f0dbed2;XQur3dW786&2XmT2E0@P!N4-$)Y5m%
zQN$YFJUe||orJylkiLMO{_*+s&QZ$B%^ikWpAD8cC=s>rF5P0Z%+$Y2jZJd+mKqtm
zT`6NOnfg#KZ0S!@@`vXagNQ9>WeG0o$izF+i@(VjkbzgQpUebh3j@?hZ(R6K@I|Hs
z21uLC5-G8C*>PWOu-GC;zmrFq4U>6d9j_BTw@1PUU#u(>k{Y3;O9Az*59%}^mJW~n
z0gF~`@Nl!4;=UA0b}qVe4X%*ueY{Ke54qPj(n5Vzvuo&9YXX*^Q75h@D*x$@DZ3SO
zXZS_Nou>|X)UMhG6QszjrF$4rMuP}z#Cfg5TcDgeHqSfPfL#qy-|Hq%K}T~2fU(qQ
z=Ie|txn*l|Ed!e8RXm+}g~<gG`86~+Us6LyUlTWH+e0}W5sZHX$qN2ou*_ZJ{^QVn
zT;R|7h{e)EkH~8xb+<?iKT)f-)g5X=RpR`-r6~8hYmEWX#h68(^D=u4N{F1hQn&uU
zb&huoh^SH3k!MKV7w=wu3SCp*4Dxs3H&oWN{h^I{T9EBKk3N1!ocLw@JlHou&(Ow0
zQ&+OT)DJhP?@aP=aO5eCp^sFHY_r`u7<YG1nTmTu&}MSWDDWBFAJcOgOuN8}CcCdo
z?H=8QN@K!CW!mCxVS4|Cy2Zc=R75JS-zR0&-YH9aMh*WokgqFUX&SS%k9cs*1sRVy
z&4ZA~$LIHS?339^u)QB#lyT>pPa_GeM8h6HARJVvdC{JBsU5Pq^q=Bel;tL<_9<k_
zv4`mUGB3xjH_jo);=}=J_mFb3M!J+TSqI0l2WZ_`edYDNjMJ^<rJQt2%b(Sq@7tTY
zq{&52uBiw-b~r`nV>3-v^}KGm^cGcxRiwgXEvqkg@zrs&UcNTp;Us)ocaL7naY1n9
zvdW7SaXm9=RZkFt#J>hJHOi^d6jf!mPi+1*c%T&*-Uu&lcTOy8SQ&`@8GT8tqvyKj
z8ViNXc`;5rSPzH1%RC(PGJq09jff(iKWtKeBo#?!0jyyQtfl}PMM_(r`8|^7&Nf+%
z`u~nWwJFv22D3tC^+Y6~C-nHwzec?_1lbM{JBj#L3KmqLaF!4%zXnB^PN(q~m#CJ$
zeyb<!#l<kXoDh=DUF+IFrF*ezC7Y4h$d+z;$vdH@25>&wHj{Lbo$jk|5f=aHnsHPC
z>q0N}_QN|(8SJ*QVO4T({bseYdLHHKQDwf5u4(GZsre%hJuTi`R8{Xx@f))xQ(Bpj
zS#w3489tNR5GoeMFZr_x<se9h!Z_*T<k}5oDzJ+SidJJ;4R2q=Hu*%8g@P8zwgwCX
z>QI-4qQ9{va705u@kB3$hZ$(_ZxgzG0KBg<2FK8ULJm>=kVii_d&60reV{2&OoZYt
z-b7CkIrxQpAe66>{{CO1J4MO~#Tu-hj=DqKoQDPH<SB7xS+Z=Y^2l;Dld9AFQpS90
zZ>hk!2{I+pQCIj<Ez)vT*oX9*hHTg#J|*d9x=taOt8X{r+NB6s%_j_;i`7C1cLTh>
z3GKloz4QQ{|6hj0G8HPXb<AHJw`n;WphvQ<b10^UcGisWW)zT|?uArO!Sxt4>vXoE
z!p>Y*ln;;hz}QH&*`-1wgn&#_Ol#Qp&TXY-lO{9^*ZMh?7MPvWlyi;`x(7FwqyWci
zsZUQ0s$+vLtf$8N5{7q{X@_R%O?aAW+9SU_@ZYz|wV1uEY6I`nxbqV*3Acj?P8S$l
zpVY^wFt5L{J4g>~CBgp%jbuU#?Vi6Mv|0A_<5g>#u^&?ED}op)<|j_z-CYg5;UL~$
zKYcp`GyK`Wzr4vJuJGB64r%x|bZJGQB_aRz^0+!5nzt1oStzzGwPgR)(4b08SbwK%
zj$Q+Mb4m9=ipPK$nZY+s`$i&Dkuwv>HNPU8ox;-dda$*KNG|$EHfXW)Dl*BWwuUlp
zS&>~eo_tvTSWC4?d#SUcO_mQi0?OeRxmQXQ?^INd*W891n41J}MR?gM-7-p4!MK+Z
zT~$^ODsHGXm-qGG`)vv$0&JQ{C*7JPD3cF?xI|WNrUUb72yR36`_7FN?(BsPnaDI}
z9+~xq4)M$ZoUXfl^aIrUa*XEMPOW{0k#?E$j^EQ5QT?>Nf80+BJi+~=I)lfo8~8f;
zJk=YbWrDi5O+0sssPPP2yh%<?9_tjqj3FxixD=uW%g;~#s(E7o_AxL%_3me+yZ8ip
zU(7L8#di31*N5wBcPT8rV9yNg7=+-@fwyD6kI-~Jmk%<bA}g1eqK#b5gG){INi_qv
ze31%F+~WAq-B*#>h01AwvB7P!g|^w7KMylbvjllhbf^=>6s>xVb)&6XjHBA(Or1<x
zOM?uz&tuYDmfj|vKJBysK^N&m&qUag<N|q75P5uGj2UR<l7t(cm*(t%3ELR&8kB-i
z1=F*n`?nxoYZXZ?Uq(b~MVA;(ICqJd+^WZugSYPMkZZ34?^zlZdyZ><9_JK>gT^<b
zN09y4D8yas${FV;8%r>yK50C{s&Cm|`*2*;6xVwiPO9r|bSST>bT(KXE}GDa(5ac;
zPU$J7)o(E+`MirJhN}GC68Lsoa>$=*o=$P#<A5N{(B>~+A;~EYdj$jP!;aoshGWC-
zjuaF$XMKLX&_yNV>>(^)2)abf*U;lTB<VR#0IrEyz+F)%nS~%GcIA-wI6tfJfm5*-
z)yKoVCB3k%;^|!y-2qvx?-mID5(uijUBJ&_DRAG>;Al_EmA;aqh-1Di^;2DzJjR&J
z?Nf>c>(80h{59T*NUlOCM%4G5$L+@V2;M8~vz@-eRlc6>y0#PApxa>M_c1!3i`=6X
z{~)F{W~?yZZf0mIczB_PmbeMn;r=B5__L88PIbxq3Yo;Jf)=|-DXuP0KXRequTg?x
zP34`IL=y#Bp<;8ba>}TyLs`DrpfJc3veiB!i>Rd5{j!3fIbzDsi!#8}7Gf?O?6{|n
z%9n9|$*CEMn#@11T(*=1&$EqMwFGVBGV>unWgQj+sDjg3C<Y|0TvaDi>^w7QDoY(!
zc^x&jm0Cxo87{OCjy>{JA9%W}emicE9cKoihHcorr^`R{ZS<`!1T3ib4x1){asd}k
z)z<oovbqaLj$x2J?~_wT2Jc5D@R^0PB9Mw%G2l``wr|D)(yd^+ppDlS?^Zo!_6T4y
zQo-Whj!KdF`c@)O!6JR>hA}#U7UE$RA(#2y(r;Nvu(_VtUAiH6SQ+8Pm6PzmRR7NW
zLacCH4YlU4VL+(`*sYz-ld*pPt+17gDcAXz9=QfzmS=dL!FD1Wmal=CQs|c*7h|N)
zz)j68!cO-evrrFvctJa5ovja^&{r^s9M^ZSDP|J8)~bbE4}{pc{q_$d->HHRx{3Ha
zyq%&rEYE?Hcw<-*w<ka!=1~yf$}cWizqeMNFK}&P9|1ux^=U`KbZACae{aTOBj(~&
zoA0(xd{e+Iy|6P}#k5e``w=UVm1o56TXI0$Kx0Mhv22#|X4tzrzWef*A#DzC_&COj
zybwims{ChFw2qA}fgqWC^Rg0e1EW&*t;~`65?XAoHdfbnQnO_02$5?o?2mO}>%ut~
zk?)<Ohh!IWfOADTio)j;OP6HKnS;X9Idj=9o9*<Eu{~5gPzS-M5EaeJ#hY4ukyEci
zCQu%Wqn=k~-c<Mk&&svduyd-_%OHAjq0Y;ln|-b_o>p$`mV6HBL)Gl^$Kr{lvc(P8
z>7B&2S!1UBWxNgs^JGPaLNg6jgEKZG-NEV8OFDnq^%b0&!1ax)c^lX7NfIsi9^W`}
zxT%^3(Q&c>T+ukvW>J2*CSRl7?T~G7|BV^VPL*85KRSNWoR0`7X*yCCgH+>(OuKx3
z1rwB0{W8ZeKNkVJ9x!=l&|@g3>OG&B9x-4D{eoE0(37V0f_9cj;Zjet!SG(U6IX2n
zJ?vWKU3<HXrqlC!sR|=fh0zS<CcS*ZJnrInDoVXv4xpL*VkX~TS4;nfy_!yg*wQOw
zW$D6?kf>G0F3c0em-YVE`_~e_XQ_R&c<%8&ud>uB7_sW9xMJ}9GiD3oi^#XFHO+5>
z#mSq<snb)BbrfIHC2;PgsW<7OWzS)Ng3p0$6dC1du0Umb!V(cZjQ4^ahCMdjMyuj1
zny@J@@rU{%7~^Ww2yYLY*c*RZ_C)jV`{MkL8Rqv@pH@JKxAId)EgK!7XtBevI*y!n
zZKS`pXu$d(bW5LEXc89q8_Lr1t}BjH8ZkL|jdV;md2a0g$gp93>ws~y!9l{WofNoZ
zE+ayc9on>p!x1RXzRGE)6bK~Yq-j#zW6Rvax?ZQR5-E+QD<-Z^wr|>`UNjOsjUgwc
zwR)Ps67>3b5xc*s5J!$%Rx|16A>x*j%Xq8m5Dn8w%<8}VN`3>0IDDmY8$}4}mvYSD
z@Uen~{9+LdFlR0Ozw^M?*mF7Dg!|GHUkE+mv|bRJ$7lme_2ZTU4%Nm2Mgd5yQbPOS
z2YYVje4eU~h$sz-#E*Jm{AAqqXBUInz~xh3D;H75LfG@Gt_*1u21l%gcB_BkhRX>p
z!-Od~kK1TdsPua{qyJ*-v6VytA`6dcl8JQ=(N7K3Zbb)oO0MARX+K(#<*lp(^C2A+
zRR7ie&re}Cn|MeK>XlAA-AOkiq`8(8_}~-om*;|I=cj<$qAAzj(=7pIQQ_CeI>l|>
zBvFq1C9x;x!rf?D{zg?Xaj;H#fUz+fTX7!7=VA<mNv_>F_T}DfG;}%njf>Iwty7o!
zT;VKDYTEM5sY3<rVL|VtM5@R+Nt0#tL>+PmFv$v5TDVx0H6B}9@(?AS*I$D#a2yU%
zhhA$<4&1OF)zKu=FhWgmbriXkkrbkSA9R-CTZp>^NQXBjk-gjOlNZCc=iP0g$FI&l
zk}BTAY!SRebqOFQBxv&#J^jwW3fv2Bv$VRtfK=SManS~)%>Re4a|jXzSk`n~r+M18
zZQHhO+qP}nw(ZllZQGuniP_v2ao-}h6;&0P#mw(l(gfGdoQHD3&jq87URZYf<ZJ71
zuN^clj2KX7kq)zbDQD8++?|D2rsAkY0LzGm`P4utb{5?ljL867N@oeOL<48R55_6L
zA2=#3@Xd~eg+h!r!OqPS%ChsbM}Mw*Pnt2=_p2-x^6D~;z~=~`uRaf6*8i6&WgU!=
z)d3mSfcmIBZuhz7<c8DZ@m)cm0Q+_joSZuYydhXi6IGH+OKa4*D}26!e8YKNRwFt(
z-op0B$J>EqkE{>lkDauHAv48s9m~8X`O>1~Ic6^#w`YhN^j0K%s|-|Iul_rLFeE*7
zQ)vPyh0b}IYg)KK@r8nxuxk@%0UsJ-!hx^^oy2u?he4nvN0<l}qh~Y}FLFjn1=-BN
z-_|MBNrT-2|GR}st173jZ4D7)5AW!M$~Iu`G=Z4&KjV-I%DLwTC5qNc-C??Af-T*K
z)9#1`)A;}^_dz5}s!JW1lqmuaUzo-eWeEqE&_fQ|`|-oj_z;o|&Ie}vIQ*X&j3hY^
zL*x(4Gj<G0kW=KF-`Nod?PSLs@)&s#-4th7dy|M+pjd!o+#F{$YfR;3@LSpRGKQ?|
z;<fV(qI-rcGN{Ry?97RZ9KJ0OfJA9USxEyzddGfohX&R;uwpC9<>cmPA%xoHKE2N(
zm-elduKPwQF!ZQQdl2c-g-dMIGeRe4^@I!%h97~|s5`#h<pgwqe|{oGy~d5$CD6`+
zEu-K{9#S%-V7%-gCkfDSML-k{RemNDKcPq(J)A{b)zyEmZLDukQ)s~CdL3kG1#HM_
zQCk(JtjH!vhZl#u^Ba#w5T!jS*bA1}{Q`sJrHT86=Jx5-i-yZ?E{W$tN_Y>dP`8Do
zz$INhQX8}#kG(R$10{{Qj|MMx)n8_eF^vOf05LJvHUTT5wl83{JY}&2%zgZ54EvNj
zB$%~Ul!}0EE7ith098H%VmUoi!BhdTi%v$Q9I-XH$+{;-kO5B<lr=7uhxDU`+`~G`
zl$s@TmZLKL$4qh_^2^|t2en`2vy84n+U_6g_#?CnDffh>mQK4yY09p77Z>&=r4^Xr
zSzs)#mXGT;y0Pb0`@A^G3>MU#O|c@@S!Bw*zV>r_ye%|Fr-JW~_dvQh<0W#Z6)`*K
zFZz_EZS@sKixL{)Pi^)2!6nJ%`Mi|$0>+4jKPKh~F^hY66|#_v3Lg$b<ePNjazm+#
z1R_iftMgIdv2#4b=8;D6n}tH&c6Z~~4-rDDEEH&iwN?^6T1XNC+)){R$_^^;&TwTi
z^<f%A7DqV+VDaV5ECc=<x!5&r0xaafS@k1B#}!xV#Svd-Af9pFA?EDkBHG#IP;gW1
zQ<nh(9OQQTyU$wZiKhh;su%LC5W-U8d3J1RThO|)my|;A!wW-H?4{c@T2;ZYAnOXz
zVg;5u<v7-&+HbygZt}UWN{*lJ?YW&D9><{Eis`eEY`pY<t$?n7A_`SCYzb!g@+8)S
zHVK?bC`#t<NV!Cb(}UOPDpNKWw5y2FEAx`n2G=3GL`-MNG)T_KKBD(E9OMk9a)@@d
z6)A05bM*ek-eH_9&;fU6-tdS}bP3I0nZ-$_%3HB|)mriSJdDM*LhO$Gkvcl)?nI4=
zj>q(*{}(SK3rWKM7fZ_H=!}HIM>JJ2vE6*4i)eXaAQFH0-$1JKxNIR}ra26`MGX&!
z9@_L4z^w;u_RWSg0*f>ahbxW`6~V_y*?>a|y5<AnS-A14&#}xOZ}&~wzVK|g9O+iK
z^t*cdYEaG+`FJbXDSPMQZ#Eo-m3S?or-x4hud1GLf3)3Ulst#j_>LVREh^L+@*J3C
zBQ_u{R}Y_5O>UzvqmO)n@yM>gP|?zeAxsIG^e?h#TpxP$PY$16+H9X2IswE6EH9N&
zzW928ViJ<l41U(R@gF)KjN!g)lkc(!jw+7eiszfa=FY%>W+{BB199(<A#}7`T+M}a
z<wA7*n`D<s3TiLUbI3fLxXltZx9y6wbV#>rcpPNnU}4XKO-FOA$G36fi<{yB2AhW=
zD;A8Ryx4x8Hsn}L)<Yu+JXRfI;!7(HpmrYNZ7bX&Q~U#V9jRvcWWiJjp;Zj-1;`k#
z2pc!^=2QLDkqnHbvgiu0ffh&tF0L1s^lRVo?kKng^8NBEd($i$b<q+WFdM<o?10@=
zf(GqASvzHKBOOIeR{zAB8CG3|%p!xUgo^)8RFy^PBrFdLl~b)qT;BV|3i01+;WH;k
zi)#_7%ez`VUPk<;Ncci4#A3=OXiDioNFCX@EB`f>*?@RXTg#qE<GOgw&Mvajl5k?5
z+*)o@t*>GY0I-{KMaVNb8xJBqvN*mzDLGRSY8}8UMKPW{66=njnMi0LITx}$q<d+u
z8<hl98o%V79X%=ez+a12AT&R1+k;^KhoqsOrpV9Kb%{A0<h%gJYl^k7Z0=GN_bOiB
zKCYILN9R^KmeFtrvLrAV9~pv2nkP(ng!1g?i@z0a01fvwEH=31MYA2$!Gg-nr9H=1
zD72V{ke`v7PbV5C#~e4I=9S<quA>M`AzF!++mh*XuFiy-@h8GU{JWe~FJBfaw+O0Z
zvYEam))Qk-i2<v2ah01$f)d++aLow%A315t?&KZvE`LV{BQAY%`Cp92>E`@p3vB;O
ze&^3cnyxqxk)P|+18ZOf(SwrZQ^S$QYo~7G_ri0V>2jn*yLVkaJDwM}T-9Ln?2sI_
zeniFI=~5K@4m)UhH6hD^Lx(IG-aF%Xa`deUH`v@r_LGXh$kK!9r6t>FuAiuEQgTiP
z%Y&t{aMtc_od=u)LWF-eJo9MxgF@4kEdVg$3kRl#X!?i~(h`>p5>Lf$i$!@@Zyn+@
zP^$U&WKwN`<M2{TRkhmd^WH%St03nR584NK)l&$-_Q9O)#pBs~nM4)l`Ys_<q;q0_
znr+Hwb!Y|!>Ids@x+7fHWO1xK1V{gT70T}|x^dYVb3fq;A6Rz^*Q6jXT}mHsD|J(Z
zg0R(QKP=aG*N|8bS3qaoM?RA+!dJOwD#3Bx1La#8#U~{2{38tF$fnmCM{aLMTVakM
zGsN{n0X9~d0=T-Lz=D_@aP%y?OI_Q(K-C_KT@9pIn{oD<W4&MRIvjR?YD|4;qp~q$
zc!AoKW)Z$$(pMG_Y(_#}6zY?|Dg8w`<S(Ka&ZF@~4%KfW9wR`4Ia>p9(UrGoSCKXH
zuP&iYc)l6Qj7njeD?b@z1=GYcoB_LpM{c#qZb(ZaWeKCZ?J5hn#A5dk(Ot;;<VLSg
zb16Be5`+z({Y>62>+E82_S7u{ZsPko&&U=5F%_QGKu{yuu5qE~=~b)Psc;&gb~Ouk
z{B8Rrvw8w9shgY3%ScNMRF`}W?4v41S;R*W9gfTD_q1~Bm)3lgm84c|$ve?6^_?y&
zqaqDB*GTOVeAtDOT3O?Pt3I2Zi0(|1USs1|2dv|caydh>Df50Sq?CY*@xgf<-f6J1
zd#$kjNg~FwslNGC2wIa)TYm9z6~>-ddp?3wuV6~^ekrZu=a}mG#FxCfkmr5fk19-r
zd;EfHK>472%GR~$w?R7TdFi}Z>c?C1zG>AB-B$tkulmxsiTRkO?ZqM#{)jL9;#jug
zu#vi2S-DerkG^xw>U+|`@&u(DhJSyD3s(Er{Qe2&Ywxu_47UX1Enj`Pv-y|@Fj75!
zxuaF`nRIqrM$u1754e{6!jBIjJQ~+{*INdusjQ$oq8k?Ee*Qt9>BezZbt6(I_eTPd
zrzV+87CL(O!v}<P2~7I!!-ol+#xU2<2Yx`RnTnjk4|mjQ&<x3M77=gfR8n|F2Ti>u
z44JU@YT@U>7SC{n4*XqoDQ^|W`-#@quwg~@$0a!tT)6A>g7=kD!o4=1<Y!|E7G)^?
z<CylyuQUoY2|$ZjT^(ipGgF*uJoJD7d#wolu-ac9B7)LubB)_A_={+WuiZj?M&PtT
zxTIJ-TgR1rshdG=PlCH)q>G~Qvi4v<!E1GcY*Vn+)hJmeqB^Brv^4?OiGOFYh-y)v
z`+ZY%LQJL$OI+6s{JK2(x{MfD@AU5op<S(0v90;?dI8<F(ySzD$ks#Zb3+-D2M9HD
zSf8v#mpFZf;;W&lI2{h^W5b8K{Q5-RhjLYaybGGmiPoRSc<p}~n0_$UHS^4$y_rpI
zKn`C&fBuv5f%Nq#kckBVfGrOIK=@x#Q2(FuVQp^nOZu4NvQ#_}OW1i)UF~2GWkMP;
zad~+@MA5-G4Z+b_n1vfTxT;PVZ|D=V5eMU1{rO_Jz)v>Hyv~m9Y{LVp+*VhAt4VV4
zv0{li`{I_}xT(R|hz{LyDgDyDt=l;JcJ6#Qx!T&|W%jX(dhj~GzKjx{*{H%6d2<_C
zmu~>BUfsh>pI#utI)T}69oik~B#OSqSYd*FBic2G>&zD6iDkrLGND&uzNfd%%GP2f
zY3R5+n9j{8RKGlt|GSYyx1ZSO-eNMFbYy;bq9V)6+IG3iRmzoHY)^Rb=Ik_+sBW_(
zkaz=sOcl9ZsB!bfRQ%wQ6t0`e;mtY356m(YKNWMp(s^_$7weN}9{56#Hr4NYC7*yJ
z?|X?P%i?lz2gygpA?1d3d{A-%3j0{szH)Y_+R<@R*CI=bxIyaF7aD|k4&T%K%gy?Z
zCbN-C^O0(d9DQYwF5#LwVR6-{UaBYV1A-mO23T!`jiuSa#lF<V#b%j~sfne9-3n<w
zvQ_ULURJ3yW`3^4yj@lNM;^l$^U|Hh%Mvq>1kfOmV{6L(bkp*X^uFmJw)<9{vV)TB
z{j?$T<^(kLJk1OC^E!oN^90^I%nR*0;Ax;9Gxx69BJB9uy6(_#)1KR^JI5A&@-jxX
z@j?A@$ExY%MMII=^58mQUk!Jsoy9d0O{vvwPt8Y27~AqiG@Srx+kCm-{w22HR!=sO
zNaPgJ-Ks$tzFL57hY7&keCG6<iu=Yk4k10b#vS`Gsh%PhD@6eb@tY5uLE@e;Q`&_J
zKqWk;nE9Y6;|N<S4pgs}GyTaW&JA@$y9PbIegIO(nePICm@0`M+!&A+{h+|C1URuQ
z=%I=p15aEC_S6;h92xJ;ate(a*$0zXDLK)fIIf3w1nO<#(zfCTaaGIWC<cfV6>t`~
zdkP4^5#5kA%7vV?e#s$e=y?~(SoF!`zPpn}6mLg>`D8ZZF5>gZbu8AGnT<0{m`^U{
zm;>^Q&w**lRdHR9;WOjbjsl42wl3UIjRP|#jZ=JSS(q+KBx`jAF~{U9_AnLT_+7E8
zOKz&vi$m-F7y#8Hpcw#*0;|vR(_y^|t}YtPDH+#p8W5g>YHC{OlJunm)*%If8n-Ye
z4MzZqjrwt|#HI4V@LlfqBKWZ~^ba1-8hUe}!SEM#ylw!SiwK-3mo7oAFQ~J$)T10?
zf4&GXP~chj$y@@6fL~FGJ8sB96n~b`UExGr6dzRhz}m?}URQB>;}80Ui{d0Wamw;Y
z`8UFvjaZvTj$v<ThX&O}-!6H>Ol@;x2erxf-q=QKi6lv>_}%KL3D{Kq$T1v53B(rc
zA%v?%C@+J>4=)T3p;C3I(NPC~y7Y-Uv5fJGeA?IFB4_&mt&8PZ(QPDdmS({lE5iLW
z-<V4Y#v}+K-EpCdiNuaE<l1Q=pz(2!onsY&j;<R;B%1O?E~xuZTNuaUweyzP)A^T6
zmw@;yMD5WV<1v9do#yGFO<d1fl9z@V=s^e8$$de+`gfd5;!2sNm>2n>G@#=Ieh7V-
zUS~biZi%k@-sEuj1?@zW`__sXz|E!#*-tM>VN>UrY~U7}|J7Q~@RQIGMGAAu1g3TN
zqfndhkwhI`B&YD?NrSa5V4CPQaTGElFF_;&B>tnFct-^+*L6}1e1#Rf#4O<>@?7i;
zRMrbFq&8oYu+eNJIQ~TxRk+hm9brMCr|@kTu*KE8dEVpxEvzdyUbV_}$ui4y)hY_n
zl4eq0H&x&YVG8ouwj%6KggNa8Qg{~hVre|Las@;q*SL(y5B~z67jHTZmsaIWWJr4%
zYF+mQAmv(wBL-48A$s!<HVen{L~qsKq&L@tyjdO@+$%wm>4mG%-cyOEup>s$?`Q}o
zQ4AVTncpzibF|@@Sxp8SGhq(GYIG2yE(Yysd)?xD#v>oIJzMi8+L}sw*(q=h#|>)o
zIbQZJ@Aye>_r^1#dU=ok`I|-aOY-{c&KhE`V<{Y{>hq*uFnivGDJK;iiyxyO3;ec{
zAI|g6QU>R&muxOmJRzkS#d#x#<|TUdaoJMNbx6*&gscPJEfu_*>UgFOP}!t{u9-ct
z>pyI}G#G}8ZNJhYp#^R6w_54(6(qsgX$8^<(*`vzTL15IfYvJXa*Sc{8A-PG0MUL8
zQ9!ziML!U=)#UK56Vg0&aiB=y&`IYrFo_8cywweGg|xw+w}!mE85~<)Yd~;rYjC?;
zP;&k!tjZHPZdRfV|9W#Jb0QEDplIRvF})u+Cm;)<I=L~_gL`!E)Nz$q{Zf}ESBMSF
zR$M0Rf?fjE_9vzyy6A!zPHor13!8r+X@mr=b|Ku?(t3r2ue{*luti+*MBMxdApw!p
z_;eU9q{^q<ElAt3H_5wwfGNQ<bdKsB{_X%^Q(bmZ!#IAI<NP?R60F-|5Fk@``r$i*
zN+RoKdS;uiWY_&|<#WuhHfA2&ABhllZ)@2KotMDW)=L2Mx?G!9=k~xJbKtqM6zwPb
zMOyghC7^}~#3Zq^cq!m}3f=_w@J??dbWgERSLetfFtdCsb%_292rNy}P<bcK6n+hL
zB7lT^Ti5~9R2v7}qdWJr;7f(#a^yP@smog9JNg#E06EZlJ4)S7r&BIvht#@UXx=+D
zZTMBb0@`?t=a=|P^rbs%g<r0VU+Ep$+{?Vh*XjD~*cZcIN<rJSN>JppS-`j~Jewu=
zsMzdo=M@;QOJHN@Q=?axl&d-YvHd7N@t9E__qH?JUz#VP^+2HA&6b6T9faelq(=-l
z6l!es=#zZ2lf*aWji7vb=@ky_mnY+OhMH0EhWQ)Q^=$3}%I#P#P$Jb$xVSMS+szC#
zZ@{a?+u+JTZ)wI{0EB*A)^_QUZ_^YH-Zhi1f~?W0-3)d~?WP!=#rZ_(B4u&VZf#n(
zU0QM)&D(Iv!o70b?9vZ6n?u3np?%Fj;D*Ps?ji9AR1};K8cXK~%vBP3u~<gkxkEgl
z8V+H|pmkzQ5pEXxbmREIxgaAvG^)@2Y32jDAn0m2J0V}GsCu<Bq)4I@JOz=g5DepR
zx?_n0TS!P-H2Sz6Q?LTpaG+OzoSR{Z^9J~4MUErdvY2p5?Gi%Z)ZncHW+giD9pv&o
z%37kyHp=1_`}KnM%fQeiiW^+b9$_uJHLL3%)#?FN7(M~%OdYn>unqooji^a);rcOF
z%DQ)Xj2m$|;U<uoIgJB*z=3z~A%V)2yHcJvXA+0?#q;E`Ng{N1Hc9jJlNC~tHbzCl
zmR@j5Eu7|*JXo^NSuw;fmDMh-DYsonC?JCVl-t(I^qteFCTsj_hUN^j4j|p1|2wl(
z;xKHf*jYVIQ=RPqi5HJt$MjU#K+d$<<<_JAeD0ajv}@_FV+$6p^CwT?w%17sJY=r>
ziUy3IPUz4Ot@F?L5`?bfzG~BcXoa+Z<bzt^MXky<JUWvGpiaDdU2}2a;1f+CfFOs$
zQ{AM=1{U=~UDaK_$u*t>aLb8*ZzQiif|@3x_y-xep|%+ii%q8JJEZF$MZ?=Glz)8m
zbJQ1OSB78Mt8hJT8FYeqEuY`ij%x;cFX}%r?TE()xe!$TVeN)0H1}&LmQ13;Y;~0-
z;N{_~Tx}f|%|o)BnZIQf85eXzeFcqN^<khNVI_^>w_SN`#dptIUp!|!AvMv7X_|xk
zDS3EteeNb`%?}?-!&Z`ZH!M#_kGtc52K>)So^AX>kVqAA;jH=3jZh6`w+R3KJlY^}
ziu%9kS#GPA$~ibQ`y7bdREj#wNtwf>2VTl)kVanXGh+aMK@Ag9D1JMGu{>j9NK+W>
zt1{}WkE`w6&(Y_q_1)>_4;=vDmfnW>>v+lRs-GH7G*>y4;7+D<;m!6S6UEX;-F7LG
zO_uE6VROm6lA#9Y=HuB^R496vdn7_}3v<=nwDK?XIhf>S1_Xb5Jy2s$)S(vBt}!gk
zjIc}D3gu_@`I-kbXx;)bIULiTYNd&O3kzjiOx)dQ+B|x14cH1WBim!uH5r}piTF6Z
z5vM6zF{Tf<o1RY6SF5!`4<7I(Rz+17_ffhOON}(`qU#SBECMnc5|J|6xR>EiRAiY>
z@~8E?S{9UVmxK%pj0qRdO1e-GMr3r4Z~46uk!FE_tB0%v9kmfGR}R*O@wlTv@!(rL
z7t=<0ev`pf02R!Q;<qY2^O?h|90i3dE?6YaD?1hQ>m4wh8bN>$17@?WV(%xL(0?i>
z9l-R{tZF*lCR$J)j!}VjLoQL2SZznmS@0>1X3{0W30U&%QBZ9DiB4;-jZ+DL9;tZ1
za%1F%iU@kL7YjGQZ!=~*pS+(th_OsM4@CJB#|4`p=F9_)lG*B{q~lK3E5C&TMQp3N
zKkDG&A67ac0R>JlO$4By40z`V7iDWqYzW{a;pj{C0XF^jBwNlww%Z?+;yk{wlPol}
z@zC|tH<*Ja&^Mf!h@KiS4z0Nw&!Y}2L2hOqPt!=EI6V$X5$uqXItna7;Rar$_296c
zm41|o+ZnK&MwmR#9qmPWKVH>Ur%nxTV-V5#-adnCKba5sK<(V&-EYJ`fwgbQXV;u2
z0a`?UGEgLe#m<OO79(73n1XgCts^=(nD5DzezlNT34xh5y12l4_s_#$!$AJZ;Ko5j
z*T*WtF5-RI+MUhV*&Rc-lVDWcm>zZm$<_vM{b-{_%#9_luz7eYn)sVnF2vNLeUunf
zpQx?J{=Wm7{95K@1|DwA`4LjTz?X-TB`oc~k-SG`e&J8}2hqL~X5VWefzubWN#&>k
zCvo?BTw)h-wdg#BI;mW8wkJILb3wEYO{Dk2ASfDjXo2ocVnC*V0<@s0W~2nMe1zgu
zLoth=ZWkgsWudH|%f);9ny@*5>54b;EgEpUC_r}`^xk0t8KmZzSy@iJK{2pz*d)k`
z8b-J{rC4Im%v=z%{|LZu-M~SBANgU+TR%`8g5-MrMekEQd`U(ZKQP(*J6zRX7?-mR
zw$K;9lCu=+m{E8Y9r*jd)w1Lr#Je3k+VT!j4;h;NoS=Xy=jBDYmMNfgGGB6|vjfdY
z0Jnv())W1^GLc5$F>k)MR@_c3DE4tYiIX_ZLrcSa@#?TYSe2EJ0>-7Z%&4X$OeOMj
z6i<8uyFK8A^7$0)kNqLOO${KeEqkFV1BH=(ffyo1nU!(gDI2gl?*WzRSau?oQn=?w
zt+y3)Zt{rtmdN>cu8vCa5CQ8~;Exx=?M}bO|F&Y%$R(=>=fZrt+<!ZSdAjsl#4~Dt
z7%RW)W-FPi<1{?Jtl7c9zf!)9rV0!k#f6G+1_+w0>fA1zeeP$l<}DrmEZJ}80uVlL
z`3<3_^u>guEN`fQ3`*n7-vN1TFAuoQkd$(WDAjuLEi)#2%|q-vV*Im@!#8MZbnk#2
zxtWB#j}>8zk<46$W1Xv=E>N;$G4IkmFtQe@6FU4Uyo6pOm&7AAaRS^PAxQ9Xd2~Q)
zn4Oo^M>b+f9A6esS~^xJV@P&iQZy10-u@CVA^MH@H_o0+P|BNOe0MFD3oefJnJ%`(
zj1w|UnJb{@FyP%P@e?HyKJYSNKuHE1>>+KQe?xopD4C9Qp7arXFcfBF(8EO_dAW_>
z@-j1tr2-y<M4BF34?WRF+`Sj5JV^o+QZ|WcZS2()3vVg>B;YvZ5WJeJh=)Lz;z)#E
zR#0}H&V)~f*Y~Z=mzo{>KqaRuq^T0neDG%k%KB6X4Uj=;iknc3yrAJ+=r)9(+mK*z
z{BdXIo9$w}eD^Wg@U5EyAmts6>|=1WZ?!k<c_MXACS8QnZk5)V3kd(~hCpb4&{WUb
ziG!$5*YEAiBW=Z`Ijrlik)BSir*wQm1`8@=#u(Mp8(_9VU2g%`{@T07<lJt080a`A
zk|^4)zoRjj{uGmH+IQgG@kO3?Z3H{ymqQ~q-gI@fhBc#@wu(iNJy?jIRI;N9`ZYO3
zFTw*GqKH1k&_3zQ?tOqeYe)d}w(zY|^v;$*G{k&7r<($QSGY%(=3$O|u660l9MddA
zj_N6-S5jPl_*HpdkQyrDf{0Xnd{2b}N+<{}G<jZszR5_lH&~W`ml9jNd_S}@zwn=b
zn}fvZ(!h4jDz}mO%i~ZNSs%pmcAb>+m;Cmu=qe}b7mtxmbS()eBOwES;>+9J5C`ZQ
zT(kuMUI#w1WOp%lfao_=1_Pi1+)@3a1(EgCNB;>!Ymp=<KX}9;F7Kd>hx4aYOoelz
zE!WVPsSbRd1Na@3xcKQ?(829O+oDrwRb`x3Kq>_noXe<g(VwwPw2kVhnk{;4OMy6Z
zn4T@sv_F}pdptrJfyw|zuv#?RAn&fHLTgsb>*^4-d)1=>X14Z0st3K=@qeuE4sK}|
z^O!i4Taqd)tK5DtY~M0O*W^jAP0$0Ik^`2Dlt5<{*Zx|PyDs_|T89+-gU|ZaR+?3@
zp&3mZr!$J8X4b64VtLnG0^M@j6y8mX5e%_bO3`0i2TOWzFY~^N$2y}nam9##txQ);
zgwQ&#i#Q=E#!WEH(m{8)n%w@NLYDNj?S4RTS$k(6(Rk;Nwjhqhr9jGAEtZ*bWs(!f
zVZ>q-c_I~aEih&DonFAKA}7veYa%r8&!vj>B<9?gtzf)6AWqF29C|QzNW10Q;MjeX
z*O^1iI^BUR9O!2jc%w{}G&${+=pU31Wl3Cm5_LvB!oX9<Aq!f6CmE`v$Y@FAgg%Np
z`kj=9ej21mmdye7TS{M&ul#rZS@j~F|GU@h4X_6o(ykpHEaZpRN6scI4PT>7=8N~l
zgJ+rUB68>8t*{*&!qkJ<uok~^AXSoJ-e{{Hrw3PmVvgktT`XHUn^VP<5hw{{RV4#L
zYR$rFV$~d)v>&Gw)+h>L<qWA(FYG)76%f~QwY1#<n}5dO@HW(><}{9sqIOuMbvbgV
zaZoKC^4Smk9C6c!;iTr&k0jUh`UM{fuR`6Wp<T9lT$qVeL5m(jQBxn+UfPLQK=okE
z{(VrcNZCbJl&}fQhlHZ+{G&Gh@Q88QFTLF$l7UlbACW`Jn6*>o6twE`kCKMXN?{dQ
z_@0PFow6#wml_5bG*cUgI7H)fnVxKy#PvN)n^ld<ZO68|*n6mT;?@VT)E@Ep7+OlJ
z4*+<HPZ}xAS-VM8-VJblWQ@qJGn+xQPBJ1(<Rzge$VL1L*$P<@k`bC4Dh0S>UH~gl
zUXV-;UKn(H5coVIf5)BzZTK{dEQG~I$it@n{U2omhTxZ5VgDXAp)KN)nK}^PN7@8%
zDf@s>-}JWF@ppejVM)RFOr1mgNZtznd<w82J6%$F03F>Tu<bH*7hnk<*y+7?wO(v<
z<bioJ1-xyZcC_UIOnpF{lyB4c4j&Vr!V=U}YcirgaTc=&-wqe*>2m7~=={;ymma3)
zP@jOMa*(RH__z(V_hF=!0GTQa;n?Pm(6Rhwth4~@sn-kfyox%8UPNz{HDZhOKNcCS
z!yQ}K?C$gGGBDfvvYbH-FT>?(i1CPW=u*(g+755Z2<jCH6Lv7%Uhv+D8$MgP#6pZt
zwCiT6G5?jz>ucQ(u#uk+&RH%ICSO6Pl&oHrM~oZFG@96c;bJMi6I0oe7S!)735dKR
z^j%9kvfV!j+F<<|griEjBa|J+CxjYjisF2`&k?NDi#in#G|44SbaMcqWP%P`9JZ0I
zqx1XGwD2F56|=c^8Rt!Oz!}k(RQf=I8g}F+bm^7Pm3yEdt}xpA%h0p2mIkfgVAC&B
zMkSVPF$JPM{#(P8RG&Wxy%(+)J(+vM&mx#DsoWxpI*J?b)*!84iTSNZ*7@ewUX~Xy
zCg;%>Hx7Z*k}imMtgAr6--;6`e*Rwp@yX|!k~ATx%gkOb-ul$5mg_bZ>-vM?uhq$H
zuz#CT{$fspb*9mBSF`@nq`phwbB6UMb6!>-v@3S0;wN)Dbgjpz1gBxSPe?i0^Kj2u
zFjvl4ApaIRFUEK&l@XPEjUnIDmvXU&KXRqhc=V;c(_JF!NtsbzqqY^9NTOS4wT<ml
zTnJDyscF$bLsO(Rz@!yQ9&n%HdoyrMZ&@xKu~ac;2GGjG`9+JZFgb3ZL>g{T4e}gz
za!*qVNxS256Y@^0m1U5Xf+yNnB0o=D*}DHy-(oLR8cxbq#f|hXc<+!q%f%i<nM9C@
zszm6lt^&Rhp33YC1$gnex00w~gw62070V7WFZQXLkvhjSesVghEj073D900I;6Uaj
zAHM;k!=ZUgu3|-RYGr7qxh1{QhZz!~yHD`iQ(c*8jwLa?Fc}C8!Nhz;Jn|{;NhVw?
zjnzrGIsyU9PE5ILI<XS`b<6R9tII-XSp=j_$!IQT&YkImD0s0D6z*cp>XC^UrGNzX
zh>4bITt*38V97pL!riYKP42YrASW*?A~EWBn3civ1mYZ&vUB_9M&D}19dL*9YlhEY
z6*ZFdmk!9VWa$`R@zRONSBdZoT|&cnM-}ca(MK9_(^@woPbFRXGl7>DqeL&*COROP
znI8n0!^NR0x8ltk6m4&6yP9b?jv`+;DAJF{oT35C13p$cj_`6m;3l){Qv+3x#q9U~
zJ-R&@$XeIB#2Qwj9(Z9}Fx@2FKH2!Dpv=uQnX<ka^!Hb*q^ME^=umzMdDx}zlPVrW
zr0!zx`~fS(C+`FCf9V_Q@<H4&vwgqvm|Z%S*;&aLeTsH{+!M>x@&+7*F02NhM1^#f
z%s0EZ#<v!#Ukn~Avsd&&82YEA)gR}@nVcRTk;ds)o2nx8r$oxa5rGl)i4>XcA=9t1
zoy7|FX$RswGV4`iam5W+&_A;Ep#>HkZ5ET?=Zixi-K{H!I1XMoq3`_z;;yF;BTg8|
z9I{?9f0Kge2wTV&)7x2BOSmkor<U;DlAn@+o!IraAVMrz2*RkMtSybDcU8W~Bek{i
zRXkndy@@wZ5blQ><yD3OEF1JbtuSHIzn~9#tM0V71LNXjpGTvruqAh0Z9ta930qYg
zUthZ2XG)-kbgcD{@sh>X7}eD_M%~cB6UI|Kihg@|t#mmnTyFZmO@NbLA6?6yKw~dC
zy`z+d=V<KSB!oacGM#3W%?^5J`R%z@4Pl8ck_6l1o7&_<4s~6+;{?BVw7?E7_TEps
zucLF1pD*T;@qhbk!=r?g$??U74}wxD@xg&#4}pb>Qb~dIE26qIzt}bzom`xDdPU~i
z*zN1w&TtwWtef0kZVso?4xp02eN}BQUnje}=g&jcGRa7KgLuWVai^usFGQ-7D6E{m
zILkWCo-Exg+;-B%GInkc$EzMj%kA7Q?w%1jYxSqSd2Z&3P}JOMdJ@fLEZr{Nx2OG2
zj~}E<=t3Oml8Z#(vTi!d7g^aYNr~yAEPFye<oz9Qf|AY$`4poCV)nsJM0GY|ll$B%
z&cyC$otrV`pj>Qv6L!+#$6vr44_k)_Xz^i&%oaRjupw$yDJ4^i7F{(BJ-~Uu*OQK#
z7EPK-Dq6E6aK!wPPMxO|Td)p3g8GV$Ot{pJ3!{Y5bu(wa-gUG)R2Mn|%5Z<?YPWEt
zEfV)#Uv{}yhUl@naF17dqU^__wrcL(SXu1P=85r5eDe`22shp`L;cP|_K}&FCW`OI
zBhTrCsOM4}?m}^+%kT$LTDTJW-Nv!(K6krMGXy{zQtt%7!fNckr8tpXt|~za$h?Dx
z@A}$XY{;Y+N8tiF)>`OGY0mp!IJNLA&8DT&AK?G|+mvm)4f?-AJoteBn;4IQt*f!a
z@3*F{jrNp0>;N7#*siNg{jC+7AL=dqNT>u9uxKaW657F5wiIKL?bmv*cZEK=be!A`
zIJbaAn&DjM5+ca@rd8l>_yeg!l{a%gL2ob=@kR@?X^-LcB>3C51vAP<s3AJAcxb{N
zN`!k+x$%U#i9iDJ(4q|No5cP=&`5*h>x&bZCt$2)$-Q{@BIbV%gT>3ZLK^rN{{1UE
zLi}I9Xa!|uloZ4Tl$FF~M1M7VoRuVPF<Iez9#o-s12y^83Tq{4g{_;!W<en4fp|bb
zC%3T8&F$GWd59`|dv@Y9hRG5VgO2QuJz;E5`2}KXXxD<djq_Pua@bvF#?o8~LMK-A
zs|_R=9CN;Pzy4UW*s|SQ7l_L^r3eJVFxBgJOpTy9Itt>t$E%&RB|#Yu5GI27l5j$I
z9Zr~zCr%j=D(XHXT@(xbH6LX`^@{m~8+SNA?YTspA~rr>Ya`k=!5IsYuN6k0*!7qR
z>U~Y8%|=$8X>z13<7Ph!0REmVX2j*%C<?q(i*?!W&O&<YX^Zdv<G1!8<0paw>tQh1
zj&K_FR#PaOIW_w9P9~VnZj_lFG<AGqTauOf_^`F5Bx<maLnpDr{<fTU!)f+Ly1^!e
zh83=><xz}rNOam_Y9^$^Fcve?;Ku6rS!|-o><8IeDF3I7udhMpbOsL>f1U154%?;E
zq7sDU8INbp2_XkF(8yG0tsC5u-C=V%@jc$ebEKFs@rhy`ecz7nkD5bQS=3%!*5w?B
zt-h#e?>iC62C%A@gB)5PmTK=T<{_#rKC9N0^L8O88`)=I#G{}3E;MiNwYLc|6svNp
zC*2%~d7-mdGAnve9w-1Lj?p2qqmh#W@-h##ka@zs=v4flKw3hIS$}FSK?`X_I5uCU
zEL+X+d8gSh-OH|5sMGESS~Dob+=Uw(EI{-e-cnELV!arefQoze9aXY&bBI=Q7<pve
zO9j<KrMYY(oR(-Ylsm`+`s=NY&>cB&JKm+DB}kPQh+S>I!($AkuNE;0ib4Zzb-dfT
zWxf)}aXI)5%tQRW>6CY}(xG|``!Bb*LaJKLmSVt2%Ek}WB)&JZz=v%Co|Dn)JuWAw
z47GadTZ?emL(Dy8$AMSka;eIrDGj#SCDaqayYF|c#b&QGtJR06xjqZ9=D3_|1+1Jn
zx!Mgxw6HUE%cdQ?hk(F(?An5Zb8C{o!8PytnwopvJ1Ia(@VGxZ2;RRyFkOC26l5;K
z^gt1FGcwNiK=-+2M&i<RdWzronHOi!rZ;Ay(lPV*jPG*ka`9#Bnvb%6bN=ow?efPy
zo$jV%<^qh((NhP_JSE%$%h8TEh^zMm2}nc4dK6ygW8VLaN4Jz7oBQ8*{09vHK=NPX
zQPjcN#>vFo%9zH`*2KivI9g>RW`hOZ`$d(`2KXAIr7Jdg1B7h8z&z6?qU3bK1z~nk
z%^-z9IbprZ@$Cgxe2Z$L;R@B>#Eq?$(I|gGLI6m%m}NQv^^k%w*<r=#$w5TyRVL`~
zb+QU)e12HmJ^sdGMs{B}nA-bBXKQOvN)&G$bOM|TCC8tU<X~z=s7VqkNc%~i%?6+h
zX8aB(0m==?TL|l5R2vBAjv{Vp7?D$}ZZ{Dhx9@?@M7BMmI9lBS0elYk?}Vy<hK0T$
zh6pqg-E<u{d1S<nactQQUrS!Gy~^@c^G-g|Ek70L>P@DH9e#fcEs^9uBvL&I8#d!9
zeZ0Xq{94?q9NJl;TX#g;SOWqZ;u0i^^};6dn^WbF@H1wHJ906|k*w;`;4t^4K&wYk
z&+s~zZ(-UC$2d%d0l_AOQ@1MM$0e@~zuHu?+D%?s{xV$U5y-)%7ZmlA!(0v}hGJkS
z$%t{5z*kgliVu6xmpF9nvmf+mjx2(;O((q~4RTdCADn83gk%JeTZPCclO_g3vT0tO
zFK)J?kgJ7SZ*kJylO`Ip+A72}ryoWG${GfZ@q`1ft7)Ud`qnjY4y?56aaR`d<cDJK
zd6qcVK7C>uNbUxR@6!dX60EjO#;1Wx0-UwFw#%Wv^9L2Oq%~AqWh~N?0)LowT|C(8
z&Ugyc%%LAqjSLlChGLGc#VWv-`Jo$8B-Y_`l345ZfF2gkJlX-{1Y}#mb@lg?J*AAj
zkY9pD9ADDyLwIA~GbbD3c4&uIEs68=af+uwj!PvRQ&~?VoB*9m#hWJZh=Np<!Z%Or
zeN@%;5+CqoLN7adJNASMTAYQ69#GwvE_OS!mf4PF0Uy+s%;f%jex<(re15KU>h5g&
zd`W<ZaHBEt^hCg3U5N3j9g0r`6P^^T$8PCl#>gB2S1iwV31diI$2|=bpg63B=SELI
zAcAcvWisPuhXsU=g50yKlWtQEa%$W#!B%i|;eGzYn$hfSM<{L_3@~i_g6Jqe*Tv+=
zzM=0r0n2VGvLDzNowR=4^^S^%<>#a;q0ruu=Mn(4wKVPLa+%4IPt(#Y9mq@DA==~R
zbpv^m|K6IKk{<f09dK1^%zj&QQI&<O<?ATDO**WJ>)B=GP1`X`89{2YWe+ddXn5WD
zbC+@3fXopizE*RNrER2XdPT6Y`)XX0znYr9eAL0jpqpWSz;7zGK4N;>ByCox7M80w
zN^vGYU32N&ImJgp)snCyYKBpL%J6J?>n3hCIrjBfl6(`iH~oGmS2+z3Og@hXQiBz}
z1^YJ_M1QI4`ilU|5vtp{Rv$f_iSwDkWddn>9Q~Qh$}dvq_ucS+$SKj(4QfUGiigR8
z{BMU5DRDtz8O8rAx~Hw6Yr9Sd@B329_7pCm-YVm{o+&PMhm!D*-k2+72;LT7qy_!F
zbw@j|ngi1R+N;;s^>n*W!s4H`<%phM$S}8IIcK+<=PBXjyyxrt(cK-Qk9XkKpHI8(
zZ@{f6a7L$*K`ALm%7rzs_~biL%m8P?Re<h0FnaKvs5vLd%WnGJ=h^3I-ZYScKoc+j
z#5+Jh8&pir^*aEVrc=K?qsw@bHt#N`?Oi)?X^5I;n0x+{^@q8r`tYLG)<8(QNVKz>
z9{lTT()ej6;6}pPjSECAtII9+09JgDjlZHmE>@wAqBuIa;GRvapaHU$kkH~YfQWH3
zATc$Kp6|?xRSWK{tFxrD>IK``ge<_!rPQQJ2aON#lXP@Ob*G-=@7FdN_!p!aW?j`}
zawqeh2ctwRbzf_-WacDNCw9h(`?d=r=d-WdFoB(NP0P{Q#X@_Wh8VdS*&miAR4bLS
zGzCkQpd5W?UlpyTv#f&voQ|4k=j-wE7tArFZ}4}wE$F+4pG7aeli-WGP-PRr+jhi!
z%W~!S>Lvt%oH~ZyseK~n#_h{~h!LnBe~y6M>VtC|{{4mTr64}XkQhF!7%%S2p_=!~
z9@~dJ4x^O#43zvdB`l}$2eDOBSQKjcOQCHrcEXVAky#hK2x?Cw0g6RY(<HURt}0ip
zth@|##8^aaR4-RXpi(dkR~EqyKcmLiedsQu5LG+ZP2d}svZOLrS{!1WZVHs?=s*3+
zg{n#poqViS^Y`Ct1aCN`GC`yPlZ!KWW^o?Mnf+&xMhfV#*n|Kj6{1x6Bc>CfWjugt
zLrE}|Qo96NH6p^1P(Yi2mb%%}?H&P}z*7f`ZBQI!4k2nz>8o82_%qyp?ti1k5|n7a
z`yR%x;r!SAkLLfKs~rq0j}_$P#wn&}6dM%eB*tlFspo+o+AIM7v(0g;`&F&q=y?A<
z<6{5!HZ2?t9UTm-mE>&~=-_>JYRTdO%7LN6NSmZACMaN9oU5|k`203s*WH{i?OIlZ
z41cgWrL&4)6mi`?E;)U7w%)FBVm!J58p1H45J&hyaXojgvb(Q(+ZFpOsh9JbFdjdE
z3y{owsfmJh!;40EnwI;vzwJr@_FDBJ3<J4v@xwE^tkk)|Yw`vp!;v?KSmMt4iemvE
zphSd3?{e0eK#4T=A*j%`=l}^p8d}CNV4C&`AaCjA>4rBJdmL`F0%ono0F)nu1sGD&
zhU&Hb)Xr8ha9iXz5pDW#cDj8vM}*l@GwY@PN-i0dOR?4kRCTqk#0Ccx>nEA9q0#^q
zq$4dK2~IpOiNU0Tti&+8sW0N^Ng-FIhFGTD6C9+Akf>BccVSNWO)I>h3-X^B&7Coe
z4zv}&qA-4(O?OUI=AqLt?=lZ07`F!K=`86wD|PwYg5F09z2jmCSf^PA-UsEuL<D9Q
zLzr!l6SiP_qpPXOV|hNV7xst($L4rCIqdJ9nFBAs28;S~y|3lFT^4sYpgwmrTTw5;
zKV|65Q+g;`Ka9{pTb`bsV_6<XBfFt2lU>sI%)xv#-&|rj(~Ky{9ft(oHc|=8S#XkN
ze;<uHpjVr^6zRF*QJS(cAOdhK+Pq~$z6${$5)zc|DA20*7tA)ALvV6DEpK2yEx)Rb
z=f@Gq7RiG<?uZed@^41Sr_o&F%};y72!Gqafc`k)5+r=;-B<>+RM3-|DYs~-=bGjk
zDVZV+!&hG+CTOi4bv9y6NT43O=XgBmI7}(4QoT%LyMSU|W966y6pr@(r(0(D`#XsL
zx}(dl5&c)UG_<w0v$Zj{ar%F^$X|yC04nYp+EgN@1TBsl+T2_$s4^hN4s%ntkheGS
z!4Vr5o8g;*CdtW6OAnQ+4V{(C(n?a7Q-Ds21p7mVR|yz7<gnxb2=Jd>q4`^lTKL<A
z@ZZbqf7fjN?SYxOjgy0+_ALM3Ks;#B+3r$1HCKJpj&o~*A(jOQjJ$P@?QXp-fQi%}
z$id~Nvof8{efh<1n7?=TqS(Q_#CukRj>Z>C$f9cU4ceX8Mf~u+Y9mxM7$xIb<qD2Y
z`XKJa$~l*T^4W;EK~7`~JkP`+fcr|6%o>4$(sPC7J^&&{Fg+fBi(955ZArWQ$AU=T
z7+&;NfK4}H+32WAGHJ2qA>ej0yWjrD3ScvCdZ_<9KA&I1|F2U`<K&?4V(v)eZv9*Q
zT@O1z2My}#JFNJkWIQ#aWOE_HKT>WGdIJs!ydYl6X-pXyX{5$!)Xn*o1}T=7^420H
z#1oTZ-_QYX?a)F~dDE?PcXjEJmjPZ$fSklbHDB}O{jH1}4Ihh?ox7y_pYuPk$<}y9
z4*>Ax4FEv;U;FnTiPALI`gT*^>W=5*4adIfwK{VwBM07zQ20Uc228s#G013i5RB<#
ztJq&Vo%bISh|e6RJ29B7@A{tk6$;8KD%0u3U%kHAq#N2zI$!Ux`!~9sPx_o0mp)&k
zKcCE)G^vSKKWR5UU$r~EDucwDyah{cUw0QTwRav)YBDOGUycszRjnT#I0d+{m3N2C
z8qy>0FE$M~LK9=}b*dLjJ`M@}wUl3`Gb&$}Nlrz9PlJ&<B~*lkOZHzZ^(`BFrOnyr
zA^6_~{2i`$wPSWn3qMu5$MapeR-qqHDn8>G7uAE;!$!<o6R~r4^|L>dA)U8|ORF`k
ziB~!$=&~#uV`gos)l{S(YZ}k>`^!vFE`w)8j1q;^Vi-rfrk%qTonLm3B|lp-ERlO+
z9w-;&t(}^*hi`^$$zL$6nZZ?^xx$>+uxeZS7mZ^qKnW&u0=sVL*N00m{m~?yZMFIw
zn3r3%FS(fL=slC9gp+mIcCtWyKAva@?7lAG+=*448^VhIC&t}6L7I8rY+CRH>LrY3
zY`)`L9p`TP+J2r_Ca@ZC)VH~o?#5g$F&>D`X05qZOwME9k6eiULU<d150!U7mNzVs
zW;@%q(kF0;0Pzz~_V?E7xEbyh(R(RF?HaNEjj!pv=T^}wTCSnJ9;}8;F{Gup%6)4h
z6KH%+LqjbaF_Uf|3%R?W%i=o(81V=NFM~uj-h*Y?$B2C0oK$ur7>3|^hK{R{>aa%;
zc3~K;q`NMOe@Qi^F~i*0)tO#Bd#`OC*@XYPJDeBSJ(bQmjO*-}lkU1P9OO>gdXsV2
zIjKMVGx+Q1bT8T1ZnqRFVnu%B=6x^N9aw61AD`ERDhX!W3<yUXN;!q5IcP;|6t-oA
zpQdda<SKUL;Y3;zbLXKh4q@n!#9O&H5nzg3oD{{(B|Scf9JhtPr^nDdyI6(0z9m9v
z<^0VgP`hof;focW6q8p_AJa6u7GPnZchIlj&GNbc*;zr*SOZtM_7<jPTE}xqau>D<
z%r|x|Oq&v{a4W**(mY1-0Fr}KQ<7*;xZ=AEv8Ni-!kIo+$=Z?4dlj>Ep7xBKmU@+e
zlCU#gL0K9SxXOPXDW+!O2H|GjhWa;)ig5nyH~m^z7l|XW@CDmWVnNlP@On#lV#=TZ
z<wDs;CJK^iNeDCR<o!uG(u+Ah9VFs)lxcy?qo5m?hE>m~EPKp=7l|8xvLVBO<SWG3
zC#Eon$jOr2n<0~G?Ba{R!Hay}a}yD6;geA1e3bV#VmT=zA(tfbi3~{aT$MrA^y~im
z%(HQls4$e)A%t@Z6KuWZt^DYP4zxU(hdQ)$@{Dw}B)1uDtUx1@6yCLA%Bi;j)iLAl
z#;_yM5bV(qY}+1;Hly?TIM>bkt89QTG4%nw>e&b~81f|sB|fAuRvQ~ndyOD5r7H#4
z`MwlqIa^C`irm!!hI*#@P_rX?(~$f!Tw^^9V_gdqf!xfZX+Y!yE`|#&K+W|AegH$6
z5`FcytagqKFv?4GiHn-<_5ASkA5CE0hRZh_Gih9oP@Ytb#w+m_x9r5W&U&SN_Xd9w
zX~L;jK-<CRQnt!MV$z;n8N7A;tfvf@bWAwBwWo9Iv7Fr397De|gX9rMZ*A!ufSl^Z
zl|$QXRjxWzM1;!%k2{M2`ByURQcFlnypYm21f(>OZ5LtwNs1UQSxdmJI2jR!C5TWh
zLNM_5O_tz1yQNPwib$GRVqJWgd6r}omJKgwi8=&_x1`VxOC##Po3w6{4-GE1kAlzb
zQWbHRs5JOELE_Ry>(4Vce?%AZ%8lI0FRO;wzbU~uNd5HRQaWVr8f}(i*caH8$0BI(
zL6DQo=rs($ep832vHjzBSW?BxKV7Z*OFxf^*Zs0vI~c%~*UTNv6KY}YJe3=ejH6Pg
z7$L$J@5!ZUMAfSUL-wG8tL&ZHA9V<%f+3YGV$9ZN!xk2q86>l@h6zm2y3xGUIT-q#
zS8L3n780?THBF=ajGnw^<f=F#k+0P2AztwwjmJp|DAm8pZxsehTa%4fZ7ST9?Cj|f
zk02T!ie4l)%wo{R%_TwBHk=!mz-t@pHxGu7kViSJ4i1>?xgt#%Q}>3#Xh#~~VF|;r
zt2F-O>4#v=yam!d#f+PWsLT@Xi55=Ocg7u1SYw+yE+SM0yl2nRvUuGW!)jM9^ud>o
zOuf3Y&0^zDmaewqt@xc1v;l21SeJkUPOU#dIoQU>J0c6^YHbr~kfg^u^y)qwYgbPj
z_O#Knui{h-udV1}ibjl^u_pGiqvoy#W4SW%XzRoY<!NE{h~?UQt0{{(W3{WCsApB$
zChyqq;Lgi#K+RS3Fs4c$n4D%r8w>M2M{P0i!#RN}gN97Z-}NcMnwAo1WR`p9!zwl<
z<$H?{FmkSMBs-Os!C4ExxUM7a&?i`{fTp)Gb7wB+WwRv<6UvPz(*n6@s5*@L+hv~-
zif`%!mTzx({X2)%8-5bpMu>(LGFd~f(FzvMa&-L?W?2)1hoJJQoA}kF$j5a2KQrW7
z#64hfdyAd@wL2@lk-fG)JLgkPjWMI?xCv%33u(^i=k+u=fv=Vqu|qSFF5w{viv5g1
z1^|Jfsfw>_+JWT;gWzx`6H3>W_MePvH!tjX3<^AA(z9l$Xv~rY%7at4#PdE*MoA6F
zK7Ki?Oe3n)*%$s<IP@mRu1gDI)CTzHQ)!n;s%#zlJt4&;&$VQaO6qAS2M(s5<zN@<
z+4uvYnU7JoXl705G$V{EQN#G97KD0yOL^hkP8ZvbBAQ9mu@%Nupb8gKe)U&UVdi1?
z)^&ai5q(`%#s);1xHNws3_i|gyB7whY7Y;0o98@mq+J&O4`27#ooUpd>pHe=+qP}n
zw(V4GR&4u;Z5tKasn~XQz1=<b-n~AoA92qy<~`<doiQm3q5yXuG(xu>*LbT&IuNQZ
zO8Hu%{LBFVR*74h`A`dt9#COCQU+ozE5#iAzgN?bUb95la}a$dcXo^I`vFp6i98h9
zPqn{;f^RGkPSuMU{Ry|R+rnjI7B_;(i%v8p0M@`O6k+jk8*A9k8+mkC?w~J6`6(O@
ztVwgr-`+h2HmIB3IvWV(dSxi`mat#D1^`Uk4dOy1Z*Dv48M0$(*ROEk+4*5U2dh}Z
zdyc`Q5`W{`rZ{s7EE5#bT70o8cOA5bg#<w4FhgV<l(q+NW_!#NtkQ^8fzqT4To9jt
z&<qPtEY-bB`??jDN8k5hdL!M1=VoK)isM*gmdv-uoo7KnSK3DPF6hM!!&F9V^C_g8
z?`sT2i*g_66pVSrvZ$}t2$rP5Y1-qiu=1C~`CVSK9MfnWrRh=+J*(IE&7Ve)Si7`9
z-?V?P6|@Horz<y~;Ce}WSapBgOFFj4E{Wf{c-t0|*8A+NUphO*6Q12HwSOLMtVTxp
zHT&wSQjgkdhF(Nv0cQA9wneL`YLAZ#K8-zYDK*GEkA#0+S{tz|PcBUrdK?WIKZ18>
z&^YzBQ~4{yTpnQ^&`Ie*%N*)lXZK#jOcC}VO9Q!1_D)N@_8aaaLCx#056GT&JwIM%
zTWb(;>myj)rO+lBdhxh3l?dyr_V8=X4AMnEdYYe{E2oix;l`3e$XVVt@osK7dp1;V
z%X?)ovL$>%7Mz;phjIxXj7(2)Zn;NL_WPQFkJY}eZB%kAUn`^VCzBuabfxDm0A`rz
zicZyM1XvfK5xBgpt?-?Co3%S(s!Cokz7TGNfsiW^O?yT}2~zN^74%Rx=t{bck?1H5
zi3z-IK}8%{AcVd^IHKQxUpDCR+>c=Z33}o>0DJ%xDE4wKG_*j71Y7N+pD`#bbf0?y
zM}OBavgMj`28C3-N&qn03&M;ra)#AKdC+pUYm8_=j%zAx0G15_QjQKWg?-`yw<i*E
zZht*uaIP^eX!BzkNP#O|s>&$39xM#XCqDD<ooER!->|j_+XK)#e`GdF(xhb3Uu&I|
z-H2$aYo@3oa%n2!T{cd*)*I1w(|ET^kICCpvCTeh7blB>Uqfd@yS9lA<bwW=%7c%>
zlWAK|D-gTT0c?`g_UhQ-@z!!J;}MfC?^x!Em!H?#@uLDfs5QYHA=3kyO^nzW4mc*j
zPi&0R%>F{_sr#m}qvtwQ$$WqPp4zVg{tDj#@VH6xm8j&ff6mo~cYA;3gBI8TInjBN
z<1#vz^81>5MalWhc=yVrz`&qUksQN_MqDx+4D<kN$DiM~VIF;eckp_v_>LDjF(NAL
zF7WHH{$kXt{)z@{BeSR9C-?|kf)`y6rop?fib0hBJ@(({D?TIna|{%^_c4L}DxT!6
zJ{37D^iV5>Zf?DA)*SiZ*m|YEM;IiEWH5Cd5UoB`BJcP#Pmz^npLho%iIF@(;u0T1
z?{<*htg^i!+mBkyRG1KSt}P2ThXYfV*DbYkZv?59a@)7*5&N069*QeqkJt${>{+?c
z<XPa`f`{6ow0cN8ch@Cf-2ozsOY$t7V0ijm2Zj@vDr!85+pJsR6a=rRHkmTL7C>?(
z^2nEll4_smAK|ZXRfKA~8FE>p1vzG=`?$;7OjR360L4~iN~yiAP2Heab4(A>R)2#F
zS)$>jqJs;&>734KP8^)oP#oNj-KD!pV>*&pDSNy{LDDl>0ACSb#?lP{e=M<^#wIdm
ztU6Q$Q28J@(BQ@*r)LWA4fZbh74F~d2BBz0p1aHHtaCGk(6Kz_#bIW2#i-h^j5u&@
zq?d%_o2h;TKOW=o^VfGve#9^uM!_|OM-^5^edR^+r?4=31N9NFp@c|B1`l?2gvReq
zLQnd67G19D1Y6u@v_a_K=2@i$SOk?>T<_=jXemCbB`sGDp_c%<(fYDJ07q@Gprx@M
zjCxAB4CWK9$n^!A`_cTipNlc}S4UtHOH%zV9~z-`tt;0BU%PQUcL9p_+-s7L7|Y;3
zzDgP)N~exCq6o1<v5?x*+dO;Y2CzcSaT`zKQLQefE#Vz>Lo2M$(5=0DvBDW_+@@IP
z8o;>L29f)Ff`Z0s)YyL+E`!*_IpkZOyNrhE*K~U^s3&8ifWGMXd<Z>z28J(s`^DmM
z8SO;j8vC_4*)3B#`GdInqC4df^=zM~!F>KLQD`b80*;>(e=XFmR3Os5Oc{Wp&j>xF
zp8p|$5~_=qWWh{2LSG7H96ANA$}(B8LDHEB*)gW}o`~y-Nrhi*L+%5UgF1FN^XvD*
zDx<a41zr-InXXx8=+8`9GtK;07z=^B^nPz+_53qmwv1adk;V2boR)>spjY1%XHBzZ
zLCF0b5=SYJNem=cy;)0v+hVy&Y0pIfF1Lsbz%$qAZ6y|?YUP~(Dz7N0q6nAFvr+~+
z73u;Nc^*B+z2^#{4kJw9k35=q3ntz(&s`aiF>n3D`}Jh*?skmUtTQEft2Q}Y$&}gp
z(~8#}<6C|CwC-zGN3l)qV;t`F<OQKz;m``r6aP4fPFI(#a5_z6F{s$d!53NiCH(1x
zTbyZ+=e=(oRD7CPTZjJV(|o6MurFkA&XN0pWw$egSCDvg+?tpDn<AAU*PR@H9{fia
zHEV1=NN33(S2KF%@lxnT?H!0i@G6ewgb_q+pN&&#v4Nlx7R)tUa=E8)y1U<FlNQTX
zp80A?FX>=)c0ID}@76|{yQoA%EI$k`LU~HD=pk#}onn00(gpn374#NxdEEf%S?=0<
zVW={vg(DjxyFz$cQ^S}<OH3amut1RRuD^JU7ebX*Cr^GYB@WiYB)PHME>KS>Z!<`E
z)WQ92m+WG(x#N6Zj&Qa3<`k>M+*$uXf~ulWf-G66(>gyroLac&hGWh*cuB7R=Dm;C
z>ChLIJu6??{8ZbX^Xu8?JqDN%)q7_Lbt!W!oP6XLjP*XfY$f5c>`$6yGy|@6&07JL
zpJIJ9Bm7Iw1T)U?w;t6nfAVoG7p?G)r?|5CaBl4La4l8#YYJTZ%Y@7Zl~&?JT~$G<
zHiD_rSXy9n<wi%fHv&H|!uk{v08uasJMRvNLbfi`s|*Lbo}~sj&W1{cJ<o;h6Y*b@
zhK~sq%8ri<I~Rt0QNof`Yvar>?Zv^;f<|Q<9%_N<dGIN78hsP&%p}St2T~-DuPV>-
zb{S)VoPR8+*I|;m`Fe7lB2PgY!P0h787{4K2`zUs79H$DWyNZ}{*HgO-TaWj-tKzh
zSr-*KB;XlV<j#C*ZTX;{zw=~gC@ve*bfa}`)6VW<UZ-IdAz+lUZzjt#L8#03);N$V
z{8A<m|AqQFqe<OR#HyBSe$qEY?MhhrrOg9nUR}|#)fqO{BLe-&$da9aO2x#}7=;5B
z#m;73$d50i@AaPcmZ>B&wIzwb-jsVV<E^HjCoPJ9p~07kA6=$0@R?e&oE|$``Q_^)
z(iVGv*K!b)qWKplO1gGTxs40Om#tNn4YF~wj9RIm@|`u78E2T@>C@|`-bwk{v<X+0
z1*h;i#spDAPy*g-xT->M)J_^!NhgyWFI)X08#<hDK*k!gSq0p@j7hR}pm|qzr~wgD
zgfP!~n(!k_a0&t+%C8HK=V5Jdi%MG&)?nN{=xWY7yFBXG^z)+0K)F>hpH7NPX+v|T
z@goqvLkW^@okkVoTR3VN@+)Sm{p3j?MQ(l>Yo)elQf9B0x`^{kOSeU&sXOePzs#%<
z1YE~$;l85nLEFzKob@L^aYnSk{$WPDlVx3#Yp){Y4ZhVc66I2}wDFz-$?;I|rb(3H
zOBhI4SDdJ8QmnY6<&VP%rA~H|rC2Fg$`b9~IEv<U&4aC*$`q&4_b`@PR!m>%urt^<
zJxYQ4RE@BD)}!NN$YvLTuM`gjn10{)*x0vmgoTKIOUGMrhtm`1z4?`29dh+zdo2O@
zq<tg|4de9trcobTC<JL#pXLIV#;h66LGxF#y;HYRm&rR^2go(Kra1(OsVD5Qe%084
zkcDgN^j&O&$c(tHJ*x}bGqi%DO{x~2H<6|Imn1C<-DXm9O#YgsI6<*?3ex(X4EXxz
zp<{ZxVb%O|d$PkS%h|+UyPr;S8AM3W28;Yudo2U0mMZ$jInt-msq70zoewJOVCDM$
zTdu{r`bK7|vnD07v0E-Lp6tvKwuXW0uc`JN0TFR88mZI0@@N<M5^GMXU%fY|el)gD
z`E(GbAk)2rwlnw~d|5CRE4)%ZiupaB)RmZ)6vuKCou)v9v2pz&G3}dDK;9+F<ELX$
zi*pxH7=VjEarEIZ40Csk3PS*R+uhC=>*7skB>MU+*vuM>?N_&x`j5OhFLe|?UY0eV
z;qXq#d}&re=csPkP1KBywdzG-0#{{jMKcgJ+h!pqN84TDO*iIEE7h^IboXoQ_#2sx
zV2tJ#cY$^Iojf#<aD!<xEms%ZlHX_Byc9x%W~ULD3G=mM>7B;Yoc{(-fO_<jo@Xg>
zwX%?bQ#1|>oiuXGwq-ofF0XiDsyvY<D}d=ZCKO9dqo%lvgmG8~BH~KKKl0S3Z+Ez(
zJj7M@`mO2RFy-`=_dW<qc7F3!rm`@v0I2{C^GeoKT55$Jl={y#7x7@LjK}tcO5EW0
zC3q&^MF4rU({(f?00Sqb-1~Bf@MI-r6~VY>r0_#gRGnmI=Ryyb`CeoZks)7CYER4R
zw}Xc9j4J+0r9B<*nCUSGNzhU8Zx@XBq<2i4Xh4u{)^9L(3Rn~j5oWn}TSq|KSO3L>
z$nq;;n3-3ZN2DA6=4|)6BH!|nBTn2#1T+C8qElUR_zK*4gP8DAI#*LYbo!EQ18s{E
zionVh&8_z8)&S(2u0(kNCK8n|<aoeroZy1ZiM_W9(>X5m&)=NdZls5u>w>id))FLP
z8jIfp8fKhFpU|mLK`NEwIbZCpOSy~XSY{p<{>PmXMvDvS`8exGhn&3IxzG6*NHpdQ
zB}pGrN3|Ve;{3erO6BBt2<>0sPiN%Ll4nh3fc`2uVFmQYN%)d8WaqtZxMt$DRejJ{
zo*n;s<f+=BZ9(!5<rntvmZlGD6mKTWv{Qi0g5V14R?3{e-x54pZHt@Xy|>i_!(FUm
zY)asgT=WR)F7<4A=U0kOXV{jMSB#+q_wI4$5nhPzWoWA(qDFwa*QBix%c2U0J71zZ
zNKTvPOGih40)4-VdMH(krc)XcS1H@B9TCDo&BSTwsp#u^DF0I`pR?W~OcFF;v5pPc
zUOOaE>5|wj(1z)df{jyr<7mMfa=Wd~D9lMyP&a{g95&}U6cw5I@8#Qd+<7_n=gxF_
zkTVP9xF~%zMw<_#)ko<4<*a{bd@8p0NOX~8658ydJ+&;V$pIPJeuiJ@u>ENt0)|I#
zwY2vYo@|@n8PD`uOB?Y_64HC0$J|(il9*ct^8A%eawexcu)v&jHiyPc38dVDvi3A)
zsNJ8uvSp?T5H>b)<g;U!xS=@PVLD7CU~VCF6az^zqcu|rJ-Czrl3DkVSfP=@#1*^l
zUlT_LA@ny=8*Xgm_|VkAK|B6K5I*nJVtEW~*=7ebHVn4X48xhk#D8KhBte*)GUYyC
z=IBPdRFYC&*890?xT)D@uRe+zZt8Hk+}HP18-xQ%tvj7ZA@o_)pH3=0Cdodo+Yi1O
z6RnMn^<XjxnBGUz^;|Y$v(rozOKe*M3?2qJY$fF3E<X7#JI%s-oVD&43%r@FE-0|q
zkbg>~5v<C-CtBZbI15Hu<2Tr?Te()ccoSa8YJ7u}?O=&JoY<x?D!OQolY9>D6br>9
ze39;qG$+{*wBaAD#!SR6YBPU#mdu!R3ZZSHI}UiKYa9wrMpjE$_>huC({Q4l+1Wn2
zuTVflk}<JuW~;rrtJVbTBw=X}Syb6u>G?<IsI{PeI2=t>ZgVuPyH}C0rgQj$=g-w>
z`HFd|B;zBI%L9So;hi<#6fS|#!X9*Gh|l(dJ?Har{HBQlNVmS<a0^@9!t+Ixy|czm
z!6zJF>h7sA$w$@v1_Kt$sPZ*$&;}uk9eAm=a!vm&Y)GRjY5}3YNfm0wj;}&;uJWtb
zS}38Juz-NVkZ<XN=y!9_PwEO~Xv6ZT%1D`q$K#G+bE7M^4c(w}^-dGmaaB$w%Aa01
zE}{B<mM|w^JG4~l9Aj)5PFB~~wSQsje;<;R=M1PkX{YK8(}Rdo&Eo0Ljuks&72B=C
zG9gcdC9Cg|sHb7@U6IV$Mv{GtrP&Ba3<L{v{-&Jrc*!4P8DpR5{fa9q3?uIGGxftk
z5{V8Dx;ZQm<87KIWxhFXGSPNX9zU`hK$-b)E5oFLGQw@69e;)v3c%QimnpSU_*2qe
z#!<`JMS8D{;u9&F)@j#l1|jBfM>uYV;IxS`=e|)IrV`~s<>|!E&&cgW8S15KYd2C~
z<K2w;JlMgA>fL}il(}V-LgIMTr)lhS7;;G~5Hq{5Hwwl_Q+@)|J#d$rDS>eFOznYE
z<6XL6^T{#eMB4uLxEnrY4tqTC;x<&hNQrwQxVVTT$?=jR$bNaIzx5Jltvf@p5W?rS
zJ+Hxt>*m+hqfBo-d<AdGp*G9of%bPgi@QtS-?SMFzU`$=r#r;Ru;-$oNfRQ6sEEDZ
zfoPee=Ide^SB4s?&LcBSdII&3RMZhicRkIF89{e4`z0>7SQO_Z6=OD;ZyOzq0q#+U
zrP}Np6lc?_8wMQbVn%7M%n4yC;?L9mPzrMxOn0pGwUX@Y5?@(UmW`C#WRv|52|Dmn
zGpz82JesODxltj+EWX{u;lMyE*3VQIlISTS1*c`rXmFbRXFw%%K|M?9B9)F89X)M>
z=-vdJ?KGQNN~SsooGZ^7l*@>XIc^|I)yVfw6GrZ--Q`EsnF~3;6bl|R<QWBZT>6-c
zO5UwpB?#$3j~Rw@vbYPPl(bDXo40t+Xb9P+Ri7qy6Sw*zS$LWPp}NDXmOKiU4jq0K
z8mxJ*Xt_MSl8zt|qSVYUe4IDZO!lvnQG<$9-15IZX@>D%nT3BncVv(30Mk=13V2o+
zIHnfoGZxNu%7^yF{n)Vx3ITec<?<mPDg#l)#mQOSbBh0RjAc>KEWsQ4ODw2%c&r2H
zAOTl^%wN`s_LM0mQb)^cDL~D}#6e~i12ndfP`aUU3lk18%zr(J+XGtxnZI{edb6_k
zb{#LgS^<)v1Dk;^x}3SPq0rqINCI$DeQgo7SA^$YJi&l>LUfBRG3(CU5L1#65V$QH
zS<#+mc6#&-x}{^Zp<b!9ch--zv@)S)vuEDgxNu{R_R8NFu(4Ou;8rgSy#+lGFx?@i
zc#BxBgu{yJ3D268>5%g*5AGwSh((n(w%t#S0Hzwcv5Fa@@I;8B)1L3axbjmSgY9m3
z*Dvm?XiLNOwt%wxCVLqH`DWw=nVV_wd#%-#)f!Y`i4p4)YtXVo)|?^!lYkVc5XT}*
z<srOCxUR9FZoZ|v$4F4`jtV32=O_34P~_Lgs{CdVe7;Fz?>S5+H>@hB%nCsL>A^1l
zS#fO*U$iRq%3IOe{N%m9G+n-hnb$IFiy?SgyWY#NM}D=*ayL!9-+QgbLsHq3ZoUC*
zeUI2gLf|K+S)+$`*mZd(<&%p!8CLX=Ro&I)l!S~(8lk%p)Jz_hCzD15O$ve6>{O!5
zG8wG_vN5#uuH<Y<0xURd(~&a~rju67kZ3D~>54OpKl4`O=qJ!D9B1TU=M;tbsSu*t
zW_Y0;p{DPB%62Hf5h|IrpYYbSPmPMU238fZch3L;PFC*}POdyzo#3`!3U?ya0|OhE
zt9;3wxJXUFa`z8VN<0Qj<%)&)Nj_2+64OEIxwXM}=GuO351kEjgYAJ&aNMC*m`xcG
zm7h_KJ}B)n6hTq183ge;HeICU43SYi4YSfn&82U2`<~o1?2EZgFnzLO2PN`(gsr*!
zarAuJahPI@)6K%e7ccVcnSP(A6k)c7j5YBuz`{|gU2=GbsS3C=j;iXoSGF0)6ON*a
z0pTt!GAKNocYT{M1$e(uON3e@FRk{Q9$8iWPFyPKL<B0MxIb72#RLNkv_6mO2VPmK
z{jc}Clo*Px@9^1c`NkB1O%d!BO*6w%fZ_AP5O8ef#7tycuKf|NNa<wNcOU+l<+>G~
ze{^xM{vLI2Qod#DL}6J(J4eK8D(`SL!rLA#_pp%N93&E{|KZNp?yN9w7NQBIcgtcR
z<ax8EqYBnem*fc=H7Ull2oikTbF=^>>S9tHo^1P!=|McWz@mmv%kmL*-ri6@@F|9K
z13ZiTW>igci7%?Bbjb+!K;nyl+WEH|zTVRY^F?)jni4z=#4DiqY@4#DkLacA9&3KK
zta~RP&aP0;Ug`m~r^iy}WN7+y`}ex2QO7d>b?b11@}%Q(TW~RpIj=TvJoVU~h+FG<
zw!|@d2&88In7ZGcJEWC>oy^NKByB?8X}oQ28+`+nnI$1nVcn%jzMStiCx)sfU75%T
z7hItk@!e#cnClWif9jd*Sj6VH`gLYR7fdePG#k%B)vuLT6ORvob?&I|X38A5`@6p_
zqKNg7SeNwW7XO*&R=P--x@|R+?v(P_E<20vm14wj>j;}KWjeM@1k47)ZH<7v7UFEB
zS-62Q((lC}k0mi?M{@Wg#N*<j(<*_C^FvjRKDSB0;pjkT5<0_Da}ELJxD9zf_(8@>
zjVuMd+}dn+-*o7eRsPHpX3YS{@5mlmLDzv}obXW%5=#Xa-p^!dwiWFcfvw$}*1rzu
zXRN(p9fvJu{48`-<{9`?1ldch)Bee=jOsc`@aeKv9){7fUzDRni)$61N_G!_gs4lv
zyku4|hlO-Wb?YkM<aXZgGmNKlLVV0;WIX3*C{IBOL&gt{=aK?*d9M?!+lAVLnz7bj
zL_}=%|CQ6pADA8o;d*L_EKZmtuNtP6H&b%i{@g(u(5{Ufzo_{7u3FBF*|Yivf&?`B
z*ec0vaW=KFoo<@+n1=)#jxewoETa0h7aXJakd<0V$1lBj1jCV^&`Lgy!#X6*(QfEs
zRBksu%~+yu557k7D?9hdawo$iGxATE$7~FR{~<<C+nFohU}X;OcsHR?BFs%IQTA4_
z;nKhwG>RmWGlef5W?Io9K@E9j3LXlTU3;>SYpIsO(|G-Jyg7ITCyGoHC*>d$v9hIL
zJ|(Bt!gx?;gYFIePL4`E2F~b-ONp}Mt?H1yoGAYrA>pVCMu$UCV1LqZ$wWg9gL)&=
zrA#*G?5N1v0W+!cd7NH2NLFJ#p=r_+4s)9ldjvT6gal_}i{q76de}M7<P2ep)9&|Z
zUg=#@oASR#aV)$Ql$KqW#h-v35ryH_deke}%#W|ebbE4owUnOr^`6KLKTamTBAn5y
z8=MrX-95ZpTVUW9_G!^F<jU<+CB~l>mNN^cgxsj<Jkw+jUQI*4p(9Z03ufujXQg-A
z47+dq-*TTAOA*MC^_AgFU#;B$cBWK^3!+;75ekQl4K1M5Hi%SC{xuX^2MfaqEw__w
z?+9=aqUZIQOPs)<70EQY)^~^nD~t>xfl9A2&|lY5z`z1|M$vUh?|RLw#Sjv_bTg1-
zdh5Xi$Xdof4C|td9iRaTiZsKFf*d9<fDUy;e^-Vz7VQ<kIiuakC?3z(UJV7C!}%He
z>}2<Zj(y<f{bq=mcNV5}n5;9v5Ve`R7cFTOh5GOmq6?x%afR~?m>hHL!}G>XC2{nw
ziS%w7Cyp2H%!&UJWSZ4ok(_Rg#Y@FEi&Fl}8dc^?nw`P2b^ga(rbJy|ke$h$MENTs
z#?xPc_pWrU!7G1S03j8T@2R9e^IQ&hUsyx&%`@FD$$E509<_Qq5;<OUKl@6As^~tE
zG6z>*n<Grv0%`nB!(4_%-toJo+s3sNv|8qGNp0ontrEDu4Fj-C#8GsYfh=U9+xk+!
zc@MGwm4Tk=sQ@qQVe-+HpQ!hQS9fhFaU3zM!JGpU?V2$Gu|PrR0~JYiFxclZ0)>Sd
zr6P=m^ZOI{RhvwkR*{zLoQC{XlTSgPm-4O;tAFv81zu5_Gc#*w4Aa<dE@Herw=psM
zTF>(F)e5fu0Jaqr3DT(s!|ZJ=9(DJp12_#qv9%FPzk^>25J#2vp3>v!@054DUQEV1
z_`mH+*XK-VdoWxUNk(73=nPi7ZL?{8`fQl#JT@n@xr=B#MWn7iRLH}=rj!75gCBU<
z7AcWyMOizDgFU8}#)8dS@G^N(Nf*TXqNulGT)Q843SPS!lM2^5aLjxvM%lK8H}n)P
z*JrZ*r`Gu0YxO8SR)(!|MCvcg0zJ)S<pzq;j$6*OmDAM4-;=iZN7E!9PfLe00y%?X
zK+l@ba11G)V`#~C9Svsn=*A%*8hVL^d0tPIZD_nR{>%41CN2f%nL41$4I$d>z7mAV
zgMTgI`QG&8td@H~OzGKP^Aa9c<)wZQ(3Kg}qn;>56*`Dl>9VQ{+U?HE%VuhFneDZZ
z*JsjHDptwiOt4zN_>YY0GCEjl*pFLspU|8lWH0nFfV?*^d&<faSC5l@<%76h3!m_A
zduR8C85RAA#_H=A#~d2p;`m>%>%_$iD_KSG7B<Z5CYzhutd>TjPIb0fraZN!r(&9^
zh59NziyK?w%E3J3hrqL&vfYtOuJ9YD2%4r?23nl7*f(gMmOIiln9kG_eoU67G~6*K
z^+2Zd;#9vb63NN<5M0Yy&i7_X@h9LYT5R>*c7|?LL@HiDGFvC`g6gjE$zLoI0pBBG
zak8na0#x$eO`36j#f(SxICbx_KE-SMY6M5{AmxOLR!oPMr)CtwVRDtLgNo3jnVCdr
z)E4$IY1PzeIkLE%arB}|I!a7}zUxzsnaXpw6*=A$w|hX7m(lh1wBBN1D^|sDmdMxR
z7+~+4u7!W5p};9g(ZsgsvbC9skRi4Hg^d1P%0*dPfrURlFR<yC2Ht`ar^Ve3x*r;`
zBB{#)10t^hu7MW)mH+NkXPK7A--4C|7QNvQ&?Rh`S6h=*u(#TbMXl#CVe3EdS{@7x
z{pk)LKSx?5yxi%yt_+d(ry<I_v!zP1;BHF_3(QY8bVJ*#!TteaOaWUbZRc~*x03%N
zUVkWdn)_&15Jg}$MSOW>O$AtMFeOn{W--DF<iyHy;c3vgj`U%Of<X>`R{RBZAKEZy
zPThBul^-#DHz6ntN)&#xcAg;Qb8e<vhOCv%H)cq0h|oUJCnfGAOfc4r;K|4lss>4g
z&A5E%Zl*kA@%S2{+*M=hs`|)%Eya71mb)ODdQHRRx>%gGI(HvQAyOS(Wh<IQMVQ<C
ze)LNv*8BZN1W`rLTvK<BZOy5&PSG#`$!&9!I?Fs{zwX{b`PbqQa@2LbOHhd!qZ55-
zt0RG&DuFyleeuRS=ZIlcFq>to?La$x<w(n?<hPe`w@l^P-OI^B#n(>)Tj#MRNZXGX
zQrODrLZ)lTBE@>=gX0Kb{NGu!Q{ZFbdQ^^1fz#^$<%pH|)+)7`fUy)EK^Y1{;A@dk
z=s_UctU5R2FoH;wLYE#@;M!FS@Yb>0NTWVcC`6f(urECEIo{zD)GmsX;zf8S)@z-B
zKj2h$YTMEZboo6oJJ&3FJ%m5k9n17JHSdk0Xu|JE@k(n;Hx1a(;=yLl;TL_fl5==7
zi#oE3-^qL-ZY|tk-VX8g3HjJc^xW`)xXrj~e(H7!Sd!YQeGI|xXI#7;LP>7sfV@NG
zTEPmgz;t^l6?x0Q{|oSAy4(neeNq};!!e2YK9_?Bx3sacTuS`b*R)$P5?t=1rrh5l
zxKZ%FCoc!^ob1TbRQ(myRGSU#C}P=7r}<V_^-iaw>AoqS9BP<diaEkUW(Z{Gfk3~Q
zTw=e@o^FCKIhtAvm3V?o2}8m|_4^D7%h+|x%b;(szbbR>XqvuisPxAh4tsH#Y2ULH
zRAQ+%d(Vo+X0PLgdzNMEwsR>i7cNul8`CWd@h5i>%Uen4Ga#iI_k%hv3(@`kcLwM-
zGpteQ6o0z$!EMp|$f4%$3ftaI^UlHJnB$je>e$D_CeZg5hkYe*AzgyaD@d8hjcua;
zSrTvGxl(kd+piS9{bWqjVZ*Hu4`vS?wB;M$AN25GiB_g5nPZK^(xc;x6$OLStm0B>
zCsWqLmBsKxhgvOPkq5-IJ|P)vy>aZy4tLGx)Ft*$*CA0vr&u^?Q*9Sk(j8LzP{n{9
zt{7YRT<+|jlv1WY;U5iP<;;3M-OS6)!Q8)#+hyll2BS3y_+c_F3^%)i8z7^2!5Gu!
zM`7`+w@o63>kLFFA|B^X6q79CcTIASTQSmkDvR)!t-NRDNhgaTl~~Ixm80C<h|pQa
zP%dC$qRyX{TbF;|?vM)3TRV@lyam^?cRT+McJS*R5i87QcaqujSA%k>7%<n){$3AI
zMl0`h$Aeu|8g!OGh|qYD9>GR~{={Hy*%aB0Zu>f7xd`h?WXnPuqa%yMQ)}{eI;u*n
z3jFr1og^djLKkbf&d&TGomS?~64X6j#3G%t9@(`E)yB|UZXyROoA*<QAuQ?tizP4h
z_TnU5<IcE0?GgBuQ>B9?_jTp!Ct5av^Fkp&k>_WOGtm9qt!9@G{woz4h><9}>)2st
zgMIh@`7nmcV%Ad4@-n}v%OHKG^guvQ#6pSj4PcJZA2&^&i|8#(y9t{hW3#-k-h#03
zM^Y`;)}@Im^-a20S1^qQSmu7|t(sKz{9wE4af;J$=mF>hT{Ny7<DvnvCNgFkaz|&p
zY^_VCdzGPAkp@#)J`MMU1Tc>#T$`CS|BF{`S~E$|nVHSH@Aogej=(wIgGcgC%p%sI
zIDGDjl!cE^RUzG8!u`unLQYtv9Ni~!lJf0Nn`2w<rQaP|%!z+itEtJ5I8vGcZ?T-U
ziUnkRfjm0Nt+R~G<rOiGjANLYa)^H{J2d~YNrotT@kkkhefDQg1;zU*#9>3vY=5<R
z!0@TKL%d^yE|jrE5Ly|HDv?j{BxH^u4%_%rqWqO4?RmjlwHDfwsZ7;+cBIm*pT1Qz
zA~f7sP7~*Yg!VN|hza~9Lfh*^-5rM4($oTQ{H)81XK;w_y+cJ=+Za5dpCfFgP>I#u
zEYpQGvqirE!lmw|O0$z6(!uPC5<bsYa5fjv$D*VzpVlPBxlno%(663em4Y-ZZAvMj
zS);JdysoY0jwyM34L$7gQK-ectIm)wX+@(o=pny`dW>d-vI`WdK)6-rwzVh^i(75h
znP%^^Rkpa#efv|T1NDoN5HS$<wrg)Z#rN?!DRO^IZu8FZZQQn%bc+d81xa|H&aUKj
z^DFy=?xf@o<7}a1=2#y{8?+Pd55`t;+^=7{Ivj9r1ik0!B0fiuaPc+%2I1D44@oRK
zikdsTbjsE-;s>IKQY?WdWzhpAHqPdzes<>YiRPGuAi}|Xu2D16DJKu>5S!2yqgK)z
zU}kD46}maKfdknrpOI$BB*o*!0{s+^H^S2{EfJWyC0C<<xtY8EM!B&+QjH5Zs!Q)A
z5Bg2^KYE>{RN+rYEY({$DPz8qrE?sDNo3H^7PhNj8ardQNIfxon>`Ayf{%vVqF>4l
z*{~HpFZu7&m}NO?ubS%dy_FsqQB3Z}k9+%X4RBYn5dv2PdPO+4s;+}|OCqKbnb0y)
z82c}_)QjKB%wfP7)bG_MGRAcGC+g&^KSg=jhPnKI4dnJ!4nO-}s;H~$ss8=9HLK4U
zQh_d+t$vfh^x^sFALnOY*{PDIZ+~dKh4Tni+nT<~YIvnPM(zO<L*v#@|J}nocpaf~
zygWV&+%p=d-S;c&V1xZ9pAt9nVuP1)c&{_fhVNGP==C<qriOa^ts_)pILT|ydP_~Z
z?3Se((jX;kzjBlp64<D6*DZNYZ~O-{*bp!IEw=Wr=<c3O-@Nf;OH{;4*l)kYmGYmL
zKdcTNM!kK6cRt`=M=-07HM6Nx_xyfN^-8_o!HHdfEXK~x`yT@2qvxBdPlg_IlQxw}
zjKHHJ%pXGLYjEmWBvnEEoSyj<mr#{^BX{eL=_`;v?MX*Tf1-fqbcuif<>%oa*yE$s
zz~LX&7xU)ipN5a0xBmkVMMDfd8889?)qDQm@X-HHjQod-_-U&i$~7Gap6Nz{LQLOp
zOPgzBw9-ut;-aGBk8&8?hI7JE9``B!eMsRD?K8}eLZv(|vaYUDOHEDnwKx+D#Fxmv
za%=f~s=IhFtXq6LUF{2ye~%fldLWEByBD<BG(72Rt^TrL+W3B7{fX{!d-xIfX}M%v
zduP^1&?NLZa$;X&l$gr>=H{u@%+}XOoJail>-5N@A0N)LY4yUUAFJ_^t3&TuTnrbW
ze=f+|dTtm}LW*BQXz<8lj?Jx4py5br+jJJFlilEOddP@V;*0x(^8|_dwR>((G1E0)
z)~9QKR9@4u!F8FJkan2+iS>Bm`n6lq2QQEoH)F%UacP#dZ`Feh|IWKUY0{isV@4?J
zAYW{>NtnP=%*OFmqWsOB4X?3%{T{;k^<&YT_X4@VY8cnCePzQiNB9+YS=VPUXTH5{
z*7^7P*D`&p0JeRZ(1IBcCYQmxuD83qQ+cud)+$pj{PVR&*IY|1oPk9#u*F(zJ0-AD
z+d5)o&hBPUp7hGLL%HccJkpW{iCggfCm)qW`?zw|>0chm{pkqY9r(H>mD`HHx&Np3
zD0Tl2_o@6++2*!YWt75m`3W{O8OS<Dh9Sa<mTy;{qUXGWDNkSqP^4ZBLb2oG_n&E1
z`$tZ)*}pbWIU{qQ%9a;y6Yg!V)t;<khfZ#A2H-g}ZpfgK@fmBa*+JNjff|xred-IG
z`3U1si!WbP|Is6W|LBqJIp=?R#J9k-XBS5M`M>pu<eo?F|L76sEY4ToHXFdxKRsg2
z`=s*cbK8o?yzW8_nk#SmmG?oHPzI7te}#{Qa0D;+bHR>5@2L=3SBBdl-_P)-fFIwV
zjOuDQc|f;zU?}EWg>`h4X%iOPgf|P;Leq91U!{ZK3r%&*silG}l$mEd-~7jXwkfOZ
zzxBu$dE%GY;DDJ;ZKbxL7(jy5O5n=@%;0On`rCs|B@YZeZdnaB7ruf5f`b5W$+l-#
zQCL>pY-Krsi5oxZ;!*SCii#k~7l>-T=X9h|31$astd&E@BCmh(>#rA^-O;-u4)N#Y
z;*5sH{dwHV;?3!VjX>rz`Tyo4BG{2qT2}w~NM#=?3Lbq~$>M-bcTRxvX)MByXFs*P
zA$WYdC$E0Z2`RfFy{oH9Y+a>A=csqBfnm$ICTXU0L1bVoYg`d!k$zwU1gYp%>~UA`
zDYS9gUo6%$PPzwIE_o@DwzLJxritY4oh$OG^fI3W-UH*Dz+su~S4e|-7&TQFUp7Pd
zG9#%knd7q(!yWzr$Fxi{w;ymA&4=(H4i>?d&+Bp`_Qi7XpA7D=qqWB-3{q`1+dHrW
zh1Se#&1Vw@)^C3)Pp9!;0ptC=(|h8stFxb&bpS&3J==SifRN>lG^Gru8zX^bC%1-b
z{t{YUvxVeUw*rNL)sW8LwiVoe%k@MTU1{IaG)P~xV0ensR*J$`G$q7fvT$Y!kiSNg
zKKzj`p7BMrifyPtaS5K-aU_2w-Be_igF_hN<KwND5;l{Zw5huKok@dDo)&}|E^Oa5
zUtX2;yk81;;+$;Ki}{cwDNsi9DwMC;xbw?kBSyd?bE0?7MODrdBbWUfw6#S5UvZ?z
z)uU`ut9|(J!NCV|@7SPwcclkmkrg(c57;1|li(}uTPWN({?nQqIZa4hXuSvDM)tae
zat1n*PS_l#QYISr>+B*$1ms3ASLEJpp@!aoRINmMO?ud!ZXA%&U6^DYAFLz!Wo`k~
zFB9M_s1YA&>`T{G-UDC#-IeY35^(;#a;ocIH(#YadNlc@4Ja3CV>gBFk#1p88%ivP
z%2vDppUI3PistJ&RuZ{z{wn2YwHE8SVGl|FSoHqHm?7zvN>z51k&e-z%A{0pICnT+
z_t2}(L&wRHGt&kEd{JKqznoKY4BC_fwzoVu)*)4zTQ>iWS?L|;tp*>q7&ZPoRw>>Z
z1_L|Nc8d&eNi`-CTZ^{}PE9*!+xVVV-^Aktbjl~?V0klZK?rHu(g8_eYl@xzrU;Iv
z?{cTkZ8)~Qs+;yhP;6J5bXKI6Cs%UBn=FzY5yNZO0)=W2XJ8vu_z5F9y2COiX5WM=
z{;`sqxdFV_r6cJ79=~DyaDY~Nu6}JBp}g>M&#ThyEKs9VH;N6S`BFV+H1A^KDr|fz
z=qV!$ZwQto0RokT5GDTz<Fws&H#_%)y|(bvFJ#4EKw)2US*;7ojg4Y2!Sywah6aIv
z2gutkm}lWA@b3bx=Q&pSxC8uMY${OLdQJ+y!N4;(+H#M7mn+}^bY|?#o8IM`Ba&P-
zNYj)yDhx*ZM%JSOZ$_wm)^9wBekV+ziOg6*nOcv&ll^bf5rn1m@R<4Cae~HxI)pRs
zbWZ=X`nLS`^fu$I>_{=GvrZ}DdC;CYTH~*mfIf>fY^du`rZD67VJ61;SZE0~0tDeH
zp~sFSuh3)OhIk#l%ug`AQ#qM7^lI67cjGFgQv#QSW3UKtOo_hhmg#F!(QR98VRPgy
z2XN0j$W<;4qYmmLPOvn{$Q}*ZfiH@}@xUums{@yfye6(2R26o%&P6SK^YBCRz2lIE
ztKP+;n-Y&zl6du_y=E1Fwq5gEx(Th{S1^U^oU$o~qHQXGrG``OLa65<-yECMzmzpT
zee((Y+CE+^>??}MHk>HzhcD#j!m_WtqVoOFN#|1*`-3~<tufIU31zpLMJ9}m`t@!W
zW+hj&J5A>U8O#-q1X4c{&&4~wnR#}XBg~QqA24#TRuWXNpD!ZV(!5%Ir3wMlo6TLI
z8Q1&h?`C=F#z1e7A)q;17u&cXLPNrh5NET7lY||23`ZKoe6J`oy~&o+w#8qk0c%g2
zr74^JoiU|Wb~vH;vst<9Cw@VKWI+QdU-~x8XFY4cYQl+?ImQl{^f!1&h~MZq<jK}z
z2qu<bKH4}eY%I$~s=i<2kZSg~!x?YPo*&PxGx$Xl-WIBYAqus<Pf(SzuMjGZ`SqkT
zRR8r<XE@nd^Dy41v(jOzU6|ZQ|9MsEx~jtKzSFdG*%%vDA}(04Ib_II*~0TePn%e%
z0eLk*I?8n~QeE=%T)XUDG3L9#GMHh*k6nCimpM?K2buQQ)J#j@g^t~gxiPpeL$&P!
zyDI)s!R~7{>9`_h9rV%J!{M*A#ZP1Dw(S`P|Hfjj`PX7~Av*4h-dC?r4OyQ#elMYx
z4fTbVL8O7A()_&a#e~O#awEj)pTLx<^+}78yrvlLr`~Fxb<9r$)h(xg_wthC$$7^1
z1T1T8CU@Ul*Y^|BIPPCJ>EAB1I|I^pgQkCxKPHW~N2JgDZl2#({tI$IvbYQV59AQ~
z{~!mi;o5t<+HoXM_~G~fO6I41{L80&T`SUOWnJ<}S<p@a8=l>wQ}x)^CRQhi->iGo
zt>GGwYt5`~mKr5Z08E3Zwo95V?U{E^>1ELYv;+G#sHy&*lfC7rM8Q<*)ww<wcvyLX
zsZia4<J`N`F&^9za-}dt3%D=<#6}jQL4*Y3-r15v39WFV&ID1&w7(Bs2{6bEscu{?
ztU7LM8bSzSC?U>HJYe}Jax^uM(aMN;zinjz!V8n@0FD=C@pVFZlJVEUPSJWF1O>_0
zQWFoWLj$6gX|2luqW=tNuqthT3A_s5$#c0FC6gZbfI@vLfew!;@E`6J8R|orT5xda
zZ-fkKM{!a<orA0I=+}N*L$H|%sgffkqSkAu8~zcrXDpG(36=AW0JipAn~kiEjP;Yk
zQ*vEQZ0je7RmJk3_o=gx2Xv{n<osS%Mq?jAbJ=Sj(~ui5!K~tx)*3j`F}AX-BT;j1
z{a6+$k6GTd;)aA-u<8PNL06~aOWE)+QBk^ryxU;3Mer1QY=L2`n%Xdu3DsH61Y7hg
z)%&`YdgS#K9+gHQzz*qY7tP)YkQW;eS6Wv}TzdOLd=E>v7)8$kpCP#nI5-R%vTIbK
zzlY)Be;^0KKge--@(*(8daLk`7a36^Dy;qw<e>E#S#gNUf_+o$DQE&w_OzG^*P$f|
zS#)_&{}1FSE0`gGD%6pmE%2ddxtV7vT3qd>RT0<L;lidr_{_HVwR~0FLkeAO>>@N>
zCbC}C^{<aAV*<gRb2bCcw3C^2t`94JB?qW+K7-tX$;xSs2tC!12U|XYtJ*u#IC|HE
z(#X8-#^I3$nsMxhD{h7`fZXX<JYM3T8qkl4(Jwu{PP%?NScS<lH4`7uoZi81FUtm%
zbxs#D{e|D4S8MMNr=&5Lvxwa&(T~iFP$_DJZ***!Yw*7sUVA3urCr%!-oW_sM4*qB
zErJAzJ71I5@Jy4rM5U!OaYFs*br!M#rz~wLtjG8CR>dHxz~-Gy$ZqIL1+ZwqWp<j)
z+LJ9*!)^RJhf3YIr!SB+H=PB7=2gbew~?N2@>E?nifx~M8~}b!J%)u>e8Q&+3ac>S
zEJ+1`vW}Ce-mH0rcj$60*E4tw4fGPR+Yx6Mu`XoWKDy1_6I?R(`cbn?pHqgHQ9SdK
zco<H09|3=c8_B{^5W~P+I057LC84IgIf$><HG|FUF+0L{?(xslZBK*zYgc^7{(~G#
zwd3bY`!EX{2GNEyUmEwDVL>VqU6|9A3Yd*%W?*!ut$k*5FhA}ly1d*$!0agXc<AD<
zHnvw78$a6>s5gFgQv(78FFLt}ZJ_4Mu%X|h97p{?!|my*YV*L79$7#nEH-U4GR>K|
z)$G&a*sXaDiuF(2mX9GN6WD`FZ7^$6UKHV?PaSc}rDiF-ZN3X^E!I`yH^InlMvku=
zYRVR|V5gS*^Ih#1@Dv6Y;1n)fUKY3}iQwU#)HzD$9$*KbH0LDzPJne*)YG^6GX-wp
z)~t1Z5ScEW;+?iFMqhBX(B5O(Co$iC$Q~Mk2|2N3O(oJ^xMIi(n30-gBDUX<Jwqz@
z$+*6lvbbfAqyf+wNYm*5aU7@R|Lr(t|I2Y;r~bc=!|R{paQ%ZkfBvLtCXe$$Br6}K
zHM_ep%7*UHgoyVuFiM&~jRaJ-Y%lveZlmGiHwRt<NZHvhjd&JX!*wJQv`xhcpc5To
z^*FeMW@}|2E5rYG92XB<U(Ej;$9DeY?+0+v{wW?nPwAvxq3h@2)cM{tl~qex{-7!~
zYWbkq#`mVvEyuOLnPX}X<g?8Jeley+q-KI8QrNjgcEO<(qu#(h%~|Mdi3!DLiS1Ab
z)+XUFVjFYD+GrAH9tKw}{=!o#NLJspZu)DV=Ia~1rN*&to70KpFc!Ccb@*<{LP%3p
z38~Irpsm;g7q3!Gr{keaLuMZSDS<3u|8aSb#_^~4FRGkl92=e$QuiPui-!sw&Xi2c
zHHYTV28?Lya*JrRJ{JXv&@|O%`HQSr6Kr2J4m<^F$%s))gZ(}{*veJh_)X+?eg(r2
z$pzlVCsF9)+L;|I0-KyzI!k-RxFxheL=Zo)w%(`cG^yB;i+?-MZus;4i5d*h#ZM5Y
z<XeU4Omb-H5xY7W1oXajSM$)#I?X+NrjM}*c%NL$5I%Y&#J{Glt&Iy<x>0+a-!T(C
zp6#bD_6lKNikl~HGb9*ygU6KRPtx0nfI#L~_d8QYnON9}pJ_|N+Neqc)F{7n^Qb!Q
zN*ZnrlwS#q(G9V#xsy!UBCA;okzRzdSPyEzymwK=*~zcXnkhZR*N4l^`t?(5O5%dK
zGe7T<n^`7|;m+5p2<)mnu5Hpp=h8$ySi~-d6ivb{w?ZZspi$@4NI^Bimy4C*#Vf;2
z<HLXUmD&+~EkJ_eASsJg3(Yo8?OtJdbLZ}NuBPQy)jauwmlArM{3%#RID|X3if~SP
z6Dbp_4zc~jMLJ7Pxc;olaEGtxb8ikWQcvvL+3`ew7o}tsv1T`b1gcNs(A#qKp5SoW
zZI#9C$J_NWBQu|#*a%bg+F^I;;I%@&Ecv!OKbXjEV(@0iB@qD7eeDfrUXMm<ykCHt
zyFO?x5l0gB&k_y=MhILv&Sjxy&?$Ai9TThYsm`xQ6-YX(zASLt`mH>*lwUkF4ueR@
zJuu0PS&0XfrXUUuu|G%B4TB;CW@>8U9*uCPkVmI2!B-mOE|cQ7`OhkqWWJgdxq0j-
zlwvz?b|v*DBG2_H_>4qgy@;JNTfBVaW=nj*<sZD_m~_nFrQV7T7MaEo{sTGGI6Gz)
z7c)n0ADO$LRobK=qTv0G`Z;r4(B#}WhKZKLj5m6Na?2`>pzeo;<B3JhBQ;Qp<vwUP
zx5*wsg4SLZCph4W(veHt_L6|~+8Rh_X_#d7QL~V@fE2a(yPLhs_6)0HB)=^?B^DN0
zj1}K$di*Ic_pmup_Lq}WVL~jWlxeIJgkjUwAiO5elx0F_HV}vRt^^U6Srt#qh|^Tf
zozljpvD$Akc5$xR_aQur=Nygxjj0W2fPJ70^p?tdrZ(Jl$e6rnoWv<4<!IvF_z~eF
z<BXCdz*Wu=GZp<W$PruizaYnOYq9lzK@JM73eNAbFpJoiyh=d^ww8a8V{m*7*i84U
zB5OLt;P$P0a$IQn75QDspmyCOL@lX8@JYpNkzPbW>b^TbnZPkeZ>`r9fJeGerstlg
ziyratnW)<`ss6*1&)SB)i$&^&DsSUuGEDZY;)w5zqA^Q6i)CaUueTHn8+v-#nWo<f
zy5DHL*_w9kVDN^W1z_pgB<XH#i&0Z+N-pFP{^lPp41{dJj+b_NVemJsii*+OZ7%|-
z{>YLo7jug83H}ouNBx-bf#qXPajQO>c@qKP&Mt-I;j2O+XR|WqsC6Ff;L}i7v)~dd
zf9WK2hR5+e0}U4~LRD!$jStgX*I)TLcC<BFJ~)B^^p}m_$9EsS2~JHlJEDzPm#{o|
zUi4cgLm`#FY<fZ_J>3p@QSU@@qO`ckFY=iEZ+T3R8AO~xfscYbNI*#>6$I-@10D?`
zI_<KsCJv#$M-r$ukPn6t)w8ZV@H8I)P7J@7Yc^^4`7V1^&7o+c%JH!R`AtLth_O%X
z1EU7Xp2of)s-ZnRic<E;ON|}!zii;sB5&+3eW?mCEO714*Y2xk`G+tKWV3feLE023
zyGAyPZS&``Sg}{|w%^Xod|nVtDO`^w1$(?=pCx*i;D`R@9&GYY|3)`^@@UU3#6lG`
zTOfjkx$F4at|#?1IZ}7Ea)k<mYQg=-bU-h27peU-9g_hiRut&02c9xT^hs!3PB=&a
zZddIk;AKRW8|Azu73Ry%Ct`4+?gyB&&KzXMd3@Hm^Kt3t%sbS0K|jJDZJz=xoDg*%
z*@V1?v6{c>`QD_2_dTI3A^W%cy+@0VC~B11=u(>L>Zsb!!)CFIQVyK(6V1^bNleLo
zu|PiK?$878o=n=-gKkD!e3Jw{5EQKR=BmBF9?<r>b34apz}2_G=n`12CCovta*HG@
zU60}gBg1Ts?W-R|rk98#ZjhuuR4mA>D|8YcyB8VK8l})WFb@-1!xQ6>ueNr!W<A6B
z#7>lG?o0joi+|$X7XtA`3ZF;DraIH+|LrQQ;qy~q^Zgb?W23>^(wGTFmUj`+j-`dL
z`-4%r%p@$%7Mfh|<jNiO9m)>dsx6c+(-&a_-i?q@s0a>Gxh#J$(<v-L)U@u{FhFO-
zBH)|2Om7_oQCUJC+DTB*t@9FVAprGL$*2-;mkjI!@FM)3QOPR2#}xZ8Jy;B<<i_!Y
z%I>1uNkQ5Ri52mHeHE-)8fc&Lo%ck+(&`W86)n9O$2wi{F_vGxLGv5!^(eYaP^hdU
zM%DnF2p^lT`#70XdQl`4ZgnX_$M(DX`2S(-9D{Rfw>2Hxwr$(CZQHh!72CG8!WG+I
zv2EK)=iB@AkKWbibiY-z-kLvV%`vMUj_1C|)n&WX3CnPCdTgjp%6ySKQ2Py#i5|>m
zS4_5A99U{e%&KJ;<KF|wO4D#!BdB?#aeYOzm861QE!dubkO&>zWE0q~O~kC4HR3;z
z7~v@(s5j2?l)>sB5QS5)BP^S}-~tPO3Zy(kf_ha|rn@%#rYL3;Joz9dp;NV?P~27B
zw=9_@B1tk^vAR_}`2<@rSB@LrnnEpA)8h8J5Fc)6yE%HaNl`Pko@Q!rlhI5A51}K0
zffB_A0K^J9^-6ruZEqTgHE^<)(tA@>Czi;+na(2f$V=W16Beksy%5?KtwFdyRMce^
zz}`nj$|Svq2a&s&)39<u8tZnPRN0yh^QM$>hQusEtxTC<loO*c-%JHDJ1-W@6P6+#
z7Ggj=vb#Z)Y?#;vbAk}Lz=I4t=Bvq;;ZJAI6zXl9IN|5Ma9mIQ&^`$_F%i^AKZ)JU
zWZS1Mp$(15lXoOg9vI7}vh<F`?12ehojx`j%ZBKV2s!O7G%P-31pyBDG{P}qpHT!L
z;w!M_Wnz&|K@;=|G*uO3<azCJ+&jlZ?ake{D!SUv9*b*CztUnqKKStxr<G=BXchwn
zaz$0xSDax`77I%@t66ae2Q*6;8!w_Bes7wi!YZ*2DmBo~%;xv^>>cTZZep`p1G+?B
zEo{m%0JPr*N}Q>Mc)z~=x6>Je#tWeCoGC2CC7BlMH7w*-%d|Zz5xZ)lX+#q~t#H0X
zA$?^>nVpO<vmqnMxOsHtCYxi!=vdlc<fto-GcuC97*djYUJ=ZdD`Ma*^hPifTk!5l
zW;B>cS%tS6jYTb#z&+qWSB)ry(auGB(?~U*3EC`LkM@ejqdn-v9o-~TKY<Niybod#
z^G9WfQC|g1faF6!P&qeDAjQxC%gJ+lQPk`F;4`K~47+_=ro=T-pCrHhk4=$yRpARU
z*}Oa5{@qfPBc^cdDx@EeIu6EdA5oB@`1rz>+k;5l4$<ZY#isTd>}7&EV~Y0(0UD1|
z54jG7vh2Ama`$|&*o=3&SJ6FuNy?gNj39GT5)aYdAC*Zo|25I1{GtU0*XU6KzGSqN
z6`4nqFy_ex^U+_F_Fxz|HXsq$%^{2==dTY-^4@BN9@)*l4>D=gzr7L(KYkM`YlYKy
z>m(=X>@t@?u{?T@(d>~#9pJ^|&z9=nMS8`6OP*}wc|WA4>R~A^{IxW!JU!Awl3g%5
zomyB-eudM8bOq<`5yy)M$;HKZB{sDCF#+UOm0*vIa;r7-u#qpdR?1(KI<+jNA99n!
z-9p4L%6ynL{++g%9zBr>3;Zx<rIVO@d#+V+*!vT50Eu^pTwhDdvc+MHUSmqj+_%Pv
ztkX{z$7TjJOwepaHxxfw_4^5|NsutGxUP??XSq$35ri&t)fSc4Yh<Wrb7^qQ{`@BW
zUnT&Dh8pmHOaPAB?DFWQ5=FMSu|N_%%)x)px?g>qUO^5~r$mf8<R6fp*a89@%`MB(
zTSU+>+ggRdO1(yPRLI>Dj<N-s45+B+RB#wFFO$&NUCji43;_LnMG+uSouMZ<f4?00
zhcH#(pSZ?F37RK;be&J(=Tw$Zx4c#b6*|%&ayC{)(?NL?boAV>%t}u-NfoCRF3L<-
zqZcr|reg+;q}QX(Rn<(!e@Cyw@0PHiA*FeoS;=JznG8`DRB=VOnsb;mici+eFbI4p
zP9Kx;;bXcDzIOV&{X{>Ay0X0Jt28rJwk)qQ@z9M>=P5?fhoavmQ>c=T@aZo9c0lb;
zS5igtw}&FM>B>hPNky1v3TkV;l+HL<s@PzC2}*gr2YaTIYTEg&cIi!7_RU>&cr)NK
zl=jebae!Z8iW>k@b{3t`;IV-T2sRX(WxK_VP=Znl-x}F%?h)D7*EpnH=rs3ul3*{(
zwlJ&?LIjk=or|@WkB+3V?)=tRK5{=p@t9D%h|szkL;ONsgW>^D43>=!I3JMIN*-P%
zsTaWu)%4j@2;P*_0%b^K1UiU&3Gx0F9(9;hLa#NT!Tyb`THV~}bbcx&_Z2BUcL{b{
zNBQNBC}H%h$nzVR0(WDqSgTE!+h6!XsJDvADgXX%W)SYz=^-7Vo2-s)I!|o#(Ri98
zigv8%09Aw#JZs7UXu&Cw&DZfd7lURs0wAi)c=r?SGPRUq!#fi#b2p*m6!+hJzdt_?
z@6uET;K9eBL;)csZ4dv_K1|#-OOd;D79}BQfD2++gNQS$^gJ><x}1DSlRwf-FkUe&
zD&51R+eWp9*WTVEy*m&KUWbFXt|Lz5q||xH0)c}|D?CW9pL?(VZ*61|chI1^9LDb`
zr6st)kMo53S%b^iT-vQ;N^cf*6ZJ!-PpWHgq$x>G0K%gc(DW&G+Uw!1?#anoao_gh
zUYcxg;(2@d2Kx6X+Y;=^S&BoGgte1|eur?5*qEP5IED17CzvkGIrGy4dDDVfIS}5S
z&2`_H3$)|hS*ELmFETwGX_p{bA9D5?+C7%Vt>btY7y=6Q!9awPR?jh`f7NzVq@b(z
z=^#x##P9H(s>iu_Oo_Ig+(7{;wl`oJJ9+m4x=hba(%~_WtcCnX!uv#dQN=;MPrq1d
zs6lClvI}Vs-H$ZC1kdW_V_3xQKIM}eTx5$fK8t8nXOF@#k)`pUL`NG81s3h+7nh)H
zl-IC@!6Og;>bZ{wuE#QlX&J%LQV*j;ki3JgwI{5EQ>``I#2M51g;tXt3LC(7D^S!x
zswcZOzaGuQ#mQ(!DwjdKYX^$78SCba;aq6H;Xap48pX>}XTjGnQ&TyKp)LyVkMIeO
zqsh&c#X$WW+cG(Czl7^CKzc;AKlO?9&tqM#wGC2QHu2+WuZD;cX8mO-z^2s)S7T5&
zm-Esf7_(kYqUST6%ACVx5v=7X%Yt;8OU<NMi$Y{J&N&~EDR|SP`dl1N7S7O4Jt~BY
zBInY6{@85Ui18{{ILUHirBdN#qM$J4NScr$8DexghZ5i`Rmv);o(`3g#@*$Ej9`)?
zWo;rhmbHwn{D^P(f>1Cf>B~%P4&g+q@d51jHq;Cm!I3*MSUArT_lxN+3Fy{Xe53sx
zTnn|$B?(>thGU(RfsMP?>n#<GkhhZ(gqZr8sp7q1NanIUiiS1tOO@Rfs!Etxds?O^
zseed=n95E6HZylc*knZ8OA@IvawFB9{;Dz&7-d1;1NmThUw0VXLG72ioL4K}gzOas
z=+;`H1DAf#-gtAsswYbe6I%!zrRbd>UrFrkcJpB`K@ndG`?{C2+2Cer{|(UQGeHb+
zG7_~a^n{F$fwtj+!H5D_$JP&XQZYjJ3*J^*mWOPLfE25B4;n;`Jq6X_p^B&ruf|#r
z&1Y;d$`P@Db1?A1eT!n%WKp%8S02(n_VDX>W|c9ty0INrClyuHO<~E{t^U4*xH_zI
zsC;P#aUh^AmF1{acG!mr$uad<`D0U(P4FY}6_$7^Ng>CK>nSqGLY#!r%mSHRw``Ca
zuazk^We1w4stp0Tf%Zzolkz05hH`v1%EPGM#)aMi*=|SRE+C~*>pPl)kxy{rh;}pI
z^Ww~pjK3`j!+oX8Hr*Sn;jK9bGBejG@rhYI&wt>6l!23iWNZ{J=q_mNW+vTauQ8vG
z;%3X>{%HvRuL6r^wswpzwQ^CYtPbO>Ke!4SELC$<YrQPUWaLsxw5Mx3CaqmF6e&W-
zh1pgRzks%ADnvgZHWYiWkB7=_tT(`BLNqfSrat3Wc=>^DI_4twJr!wH;;ya5jB<5q
zeuw<itmKsxUj9$jENH<CsZi|4ImTll;W{I_X(;=t;Pi6mU;54c(5w}+htV>YWg{CF
z@M~94p8IYEW|8&-4{p<_^v!rAEq4}3<TOaB??zanF}(Mqzr3<rm*ga1wf>B8rC}y9
zcQz{?cGbwAe8jt+B&--;34R*p^Ih)-M($M;W~o1t$~C`bTRyZ$Gcv7zySzk+Ryo-_
z?~<BXvp~*&cmlRHovCV1QXjX=7R8F~HEyhKOE7AaslrcCAb46=LzjhFVdY=cI(zjz
zPEG$6CzQDImP<FoJ${P<j8c(=Y(*IpT`_{E>cZ23@R(yDNC4fOfztI|-9$apC*v9T
zb9WEKnKS*4Y$GM3sw=!NHegQ*g&2kWf!!xouRP@TkC=bhB0)G5=8;f+YO$fo?wA^j
zr_I`-+8i79cB5tLaz|m@=DzXQQCRjwhl)?R6hMgu34(rV@$rwA|GAs?%k8qj*GZwf
zg_+$A1w1aetl2iC@TU&O^-=prZ#%tfR5)2^RKUmJ+f6eq<3#1NYQ*NU#UF_Ig&i`P
z^U~IWw!Eb=BA1~Fi?+&H)zOs&y2&i|LgJA<4pH|KDXCg%;o1fWNuq&Jq|`!3%i5JR
zjrfPaHgQlU>1b8?L<Z_iC+B|8rC9fVXiFvg-|(j=_>7V>8&MqA3~l{d0!!H}+g&U9
zNTC+~p=6mA??0;LCbSYg`AWGBLuN`z$|9u^>+T6d*~?{4c|+9n4!b{yJb~Byn+!F?
z+IF3cc#y}R2*W85l~WynIo`i#Hq>d$#mVR^6k7Ite=}L#rSlfSOIBHh2Av-U)~jw(
zGcm{rUwaDGwe>FVL~+wIlefH?jMA_lq%I1fqKNtOnAv197|%~?GNjfJD%7?9>46Mx
znTVG^=5j8Rs~V@~w!Ym@3|9M7?Q_ev+W+m=>rE=T+e2^XVZi%NV{wgpdf-oR#oszV
zqSo-*JOu+{_d_1kOl&q+A*msaYcM^sy3}E;{9RP#swjDG)dbtSH!vL|#oQkbfU&{~
zi*7S*w<KEJ)Hp-uJxVuGJilQ`QrUP^$xKhXIafvZZMaxbeKwuaMw-yZUD$pdO_;vV
zkQQ5;`3I%xpk@Qbbxpk6ZTjP1D*i~!2JVnNEpMi6VRGb`Hj&r6(D5o<Mxv(ruJU8-
zDxs}X$HhQYt$4L(jjKaiz#7)^)p0U3NNlc*l~Adc;RsB8q-bLxx-cUQ!RzZz6zS>E
zm@1Fd0ts4*bmmVh^VP|dLrk1+&9NJUxKp$KmWl(!UG3mzCdwsWfh5`J^s^%siV)0#
z9g~ot@T_$LYA}*yfRr=79^Nk>iD3!?izxowIi1TKe2B4)gM%p)`l!HkBd)SvCuli!
z$P==zvK-<wJdEfjoX-6BZQ-EP(v>I;)WoX#rm(-(%IWoF-j0nu-5rISn$AC_e#=}Q
z=<rRp5#$xYi}`Y=$+Du(s$0qxe_>2GJU1KU;myU0yPSSjL-?cQ7#qXzf8=ZML(uv_
zTpn$N;fy=z;D}0aYNG@hnS_p|aHK2j#4|^rzkrJD)(DepU$CJ=J?2g;1l^)}uY!?n
zvB)r!w429OCg`@!M#Ny!MrCm5{>qqm0^GzyKI}o~rugkCbE->NJWpXkvsSt>Jd1h3
z_Sj%EVwQ}joX5VuIa+~3@>z=r(^HqN$;E`1He*DTKz5YHxTlrjMaZjP0-tx#jtq<{
zNn^F26YoZxVvF?9kx=xc*Mn6Wc3`quX#2O2%)vk>HRl}|)fpSf$LY!la@-g)GUcKF
zeJ)q^%W2#IZMgBFX0Bk+Mc>18LsD^RakGLY^6NW6O#LHz>Bt^L(Eye%n_J6@9Wdo}
zz6Z6HsLJipBe-(v2%Em<ZMJ^ugWpi#$hd7}Cs50AO$cUZh0PnLX<4H%$IHr%dJBP0
zlTPz-p*D&|K1z0-#dVTW#b}jcYxpERs-$zi?jI5V9ihxHHS;Zj9}7Sleas`d>!+Jv
zX-(ov9Cx+{rs3PKqI;6~L7^oX1ofr#ENk=ME=)!o-eG5b=^IXE`b?DI*Msi}>k76R
z$${=`9TTvgWi{piajSCLGtwjPlEj|tf8pH#_&0mAmJ>ODWc=tj6BYp0FB`fQ3SZjY
zJQ96lDW3@E1=<J~5CyeocOtN_<W?3kf#f~skyBU~Zl76BNLQCP<5A>!T&v~ESG@7w
zbzgdloZpv`<30hV_u{gLy7jZyvyv&ljC0D-DWycyKNe3glC7wftvSRK98|f>eJTG0
zMq4U~rDuYL?KyC7B|qey@i1yLq-9MX%3VAhg}ZfjI1aVxw6F7;+21g?o4)lEOLJ`z
zgT0bM>D40Td$KDRZMBv9cUBF?I4M*|-l>0B1-&W(N!jHHzZM9;{82!IFnqk=sd2$;
zqcrpJ4#V6u?aXQg6ZVc(#hb<^H@#WRuw7FE7ShC9ydm%EGi85AqTdUt3Rjve1}uh=
zOir5ExoL>{Zi@Q7SXl1&V$X=OMXc5X?YD3v!*t*ZO`1UK+{6NDXH)u@YYpM=6son5
z#h1~mHi=Hyd3Hjkw!3BBT7Qhct;Y#qYyzPrf^;oOIxiNq;mozanIrA6_<oNa<wMi1
zAH{8d@4~)n!R(zmo3pi3M7}9#iX$o}(S~7L6@c+`qT-!C6f77NF11yIu#h7?8D+6Q
zUr!W^bET{^Wh>S)c7^r(Qv!>}hz+T9s&}E;R%MeU{`l|MrxH0+^F7;+;<m`OirB%&
zs~1@ADAsfPF><n+uaqnl&HZ;UbSpZ<;QA-J_4_X0&>b)=ou$;%yt$}Cj>Vb*jdU=i
zSY{`V`u>(kWpbq3uIUA3XkY3rXlx6zw$|e(K+29AL5F>QGvu{!6yl+;k7JUQF`gT-
z5Gy?F3~Lk_IZkG8B>!k*1J0?JA~S}G4|o2oSN51AZ|2V5G1`Qg@psp|W-9k`d+CbL
z-C6$#`8T8Nd{{x2=`-^Sl-?lKK<*1QE$4Y6KB$mieFa7fQT3@Dr$+3mZhc{xj~j=L
z7Be3jI`opKjz@BLkeHmk`r;BApll87%Bl}QYi#U!sVJASq%%5;li)keZ->82kFr!l
zt!PYr7KSS3)fGR;@B|f0^1?Lu^2C-ry9&!(F|3NwXZb!WB4TzM)3Cj@Bc9j#!9Nbh
z3n_Jvd>i{diTT*8H9poo>(Xb!{Pv>kCErs(OeS<I6XAR#mQqH03~VbU7)u`bzEQ?f
z*B7QM-}cP_Bb8OK5jho|*GJJ!%UjwmW|L-@sV9be!xC#*x7&tNz>+PG<;7v$4c{nZ
zlovp6m(!<w@#Y(iNtaDIWv6$5LE-Mu_<8^iobrjcv5lyNoZX+<WCF!;vjV#%&U;Z7
zX3xwk6-YI?;wVShi>tVtkq)UC+?AO@F%bSJ-H@byq8Lg|!06Ae&@n<H%?S4AHWnLd
z5ku9ylos5eCC*O|w{+k3SlR37B;aJhBNO~mIeZ+(Zwd1{3uq=BTk=`e8Zz=C?50oo
zFB!kc*E}WN6noI##Q|)8wy%gWZspb!X%!o0%%yEklFmOme(fI}zp3YN4S$P+PnDh%
zY<OM_bi%w6^S$R^E_!_SJ!>1n?s^=JIJE>s`uo+5EV!QVsE`_Q_HNr+skWm5{X1<w
z`}9i)Iu9|>1c2!cv0<JwJ8#WYiN4Hl#A*Zs)-PHO@ONl2<<n}r{8{Mc1_a;KfKd*W
zy)xZh^q%gTGU{s_AVkR)kt~<S_zG+Glnb)4NN<Dz&-7*jJH@hxhKk}<lr5czX8mWA
zU`3$H-&~1ofS$qLcA_VpXQ(~N6EnrQz4yy(k&#;-_m`vcLBzdOt)j)3<39c>y_wRQ
zwJc1qWUds2X~!A#&pJ)=L-*zwb>zzom<J7o^iZj)$fD`iZ3Q@NW%AqOXCAHj&YJIT
z{Bs-5A7$9d{8nbp2};*rlYA@A$|;mE<x~^m%FHx0ysn1LKZ5-rG(^01799s>%NM<Z
zQzOMguphbp=+n+Wa{ca_^yF^Qab6V}#3)g)_i~dX`X#6Ps-&`wC`uixbbO8{8Nm?I
zh%y=2pdpfEDFRo$II7<f3-g_3AZZ%f)bthQZhA|o!MKE|?DrjJGHg*10`!20i<0bz
zCfBj`k6GiLT+PP$ioZpOo4rJug)WoyAM^I_qnbhOGjxjT90%+#r)QTviaf%YRHvAq
zc6rPCuA4m39ZvAes!gbNDu%~>@vD}f74JlWU+*~i^9k>76LUOIuyjt@bJLk&Z)bU&
z6XogDPJ4ZuV)SX#ujTYSBmsGxBDiUn=1DtuyJF<6P{*}zT+41Ox;0P6mmfjfHmk(_
zJXe|e)GGv)ljR(Oj5c0U=SLPU*OS<VC`l+t;nku_M<%xfQ9wRW#-%!;F8MDrkARIE
z%JjdFzk&WubohZc00`7BLHzUozkmO*Z0zh!O!aN;O<ZkEo$3EA%eQi-|KZKh|DPm?
zGjW{pmLFD)DmVZD@&EXosfUBTv*{0$!&X(-zEA+g_gGy<UrRRHH*eUcT!~bXL8?QN
zJ<BXPs-X{)nR&sD{qx$}FpO#TuD9zsoB0`9q*TRkCm57FM<8~TKW+zA?0n?FH0vcR
zq`hy{Q2ka}0C)Q^$U;ne*|gM;1va$_Ii^!905x&P6xY6W_Y+CkeLtb74gSbaWV6?_
z44OX^oOuma7xZc2&UL3D%K&Sp=%y{DNuo?{^W$&D0zmCqA3SbE#6@o-0y4QFPM3&d
z2(bIUqI@F^9@1LWd!{UhzKaO!tU7P4CHdKX<BPe7x1)YzIQy<M4(V5-U)0m1d><KP
znXYT_WAj%7@xUyd%@7B7Kyi$*K8+t8E9)>p1jVzsf1Pt*1@;OHtC4(jH)lIi3D87y
z_wEwWF_y^<l#cco`lw~E>>}_5bmF}*pdGvKAX{f(7st(qJ*(Gw7D@Ng-@}gIw!d;L
zUC;Ne!`}O}@wfHvm=%n>v&UY)Bw|jTu?sSWgNOY%DFrF5q9+zj9*Z?Hm!fozq=3OI
zCOH#KlO;GJ)L&x3)E<>LWux<c13xKXS9u8gO4YDpRPlQ+XaygBKroGr7~lq9Ipy-@
z|J4Z2AvJl$Hkcm1=L>Vsb@!HjU{puda;=1rpe!azBX%(2`wem`RF9%W6KqvJ2=#*J
zpwQ28tKLWjulUvlK%8QtZq?vTZbg6JNS28!77~S3$%HYt;%%B}f@Gi<j!Qin0`u^W
z$#4nkjgIcbnh~FsShm9S>mlsJ0^+SgMZskI#40_}AAevMx9{q!oVfc1M4g;u7RXdj
z+rx%DXC=Xr(ep{O&xACoQcUgc?U$!;Z5=J6S(%H)cNh$lg-S439UWwQ@<*c(sA}9!
zus}fo$D<q(tz&}vW<q@~;qZ+cno<>+JG!e`eMZdq#buhJ=mkiRZpkzLKg}NMUp?fX
z?((ui79{#}_s>Q3KQ{aSva~ojnVMO8{Iq@wGgmuf7fX9P3U^C86MJ_W0uy^<SKA+8
z4h_LSUBt;n&d}DBhQQU%<mU-HQxi%8Zzuu+a#v?l0%sQ|OJf&uZm9n=7@+!>W`ds}
z{<;3Yf^l{=`*$$Dl>e6~$R!MIZB3oXDgXT*6aXLqh<}X{%-rU2ML$d`a})poil2A=
z_hW>My{oZ>;lDof=aX|ZZ0*-MV7{*O`+POCiJX^!uO^&^=q#9Z0$3r}Tuy2!xQ5iQ
zo^dAX4@_1wzx@`nXt}4gXeboci6|p|Uc&!|9WZoY`C@Iy(%~J=XWjebg&p7Dx&WES
zAG%=rmnHDy>(1bd<%y>ijq&UlrOo2GfKc}@GN3R@b8iN=3JNFf`h1u!u*}<iO|4?0
zScWhcvtW7X^}t)-Vf-Qi9AUDNP*O16SoGt_)0?(CB5vA(T;-w$xrBi$31h#nKp_k@
zu-#7^81rzu_q4#dtd_(w7ZqB_1Ph@1p|p2SBej=S<j)mEjJXtcN@%W~_1kcG{z(DC
zl-%~^C%avgx>(!H-hClPy{BSm%r@P)9`DV`_HY2Qf_cdIIaYB%pw@~q3)5mj=QiL(
z$+ik4ha*8`k$2q0rgHtBmXKSzxlb%UNI3GIjP`OEsTIX5i}Ow*;6!Lhj_QN}O$ze0
z*DUr@8?oKiIJ4}c`*;BGH$uJdh1pe_n$O1?SbWhk-nrzR`HiuY34+`aU0B#sN<`#O
z1qCjs;0Azy0I*n*0$4z)NuuIArO}{0ENL`_quGRYQT5F+2VPJ8WF4hU_Xrq>2S|<M
zzlC@?YgDGYDj}{$5`&a^uf(bs)B>)-Xe;_->-QJa0H0R*B@&4{^3v9_9{F^+t|bM8
zOsf0t)D$tp&3fuPpRzA@rKP!xx2cw@V{bj|GWsV48svSlg@vCSXBor5YsszRJ$G4T
zK)Da};9*lyWkE^H1QBsztg@pWDW#dTLB<oEBP`C_SgD9-j#HZmDlYW`C=Ek%<%q>3
z&hjJp2$$|RIYMfuh_#$(f^ocGpgQww!lEQpC6TYYeo1hmgQ~vsA=I_%Qe~a2jKm}@
zhIHvGxq5YU4&4CWhN|)NW+~!p6%LC$#1jiiKdTnGY|nYJAg+$LxyUd0{*c6lxufo!
z<A|Y(?LfI_4=2-b1KFWS(E#~BHKbhLOaTaG7(Nj09H0hW6D0O~qc@Cp9f^<(j=ia8
z6GZ0Pv6FxDsT(3lyOu01+dT>kR;(MFS+KRyT_ht#9LP7NS~8q-e-RG}nXjoC@WWUc
zDMk~joisVww27eTty}}on09+;7OWjW$%-s-qNc^4#qX95F2Wt<mw>SoBP5T@T4<yN
zzpZ_Wow+7zYyOV)OLIFj)Ij9xv(*O$q@L<8a$g~IAvN#jB$xtjdk=;*Bl&#m2dND7
zn1Ye2ca2<EmvMYwqqMsQf5aUgtjH+$<2S18V~PkG%~t^i>kIG)0U4`*-c6@HV|{AF
zAw43=GUS9><gj2cd&>cbl*J!{dY)qDz->C$YlyJ}sCGhe79_#>4&skJp^!@-vDTuT
z6G3<cZT|A%zk$Q3JE9o=&DZv+pk=q;L1u&v;)dXyqTXbq;DX`zQktox5Od6KLLC&)
zs#Eliu!=?2JCIEZiKK)ts{FAX>~*H6tqF&<^V(K=s9j$)g4)v=8g;uUVSJu<y7;nv
zYQp!i!CUC#t@Ao@V#UWNzG#L4vsy*PUez`&yxkztx*E}Bd%z^-+9KFMZFtGRVYdW!
zK$;e;FNWR+VjV^+6|T*Djc4q6u7y2UbPhL?7G=RkCqAZfr+d|+PhWq!wXQB6e;HXi
z^#ux;tbD=d@D5$#i?dZBkHjm&M)n7>{HYi`yAKV#9L3n{J>|;CJh)2(fZTQjen4HX
z=8|)D8J<Ag-3c4R^{=$+uj0x_Qa*QLD+Ct;6XJtUxMjG`?Ntz%+Y?^*zW8^S&?-D(
zwKk|O8~;xVJvvLe+fx<?HEp)S6ah^|4oX-&V2$5AUwuk}=B`ap&=;m`D@Bz9+}p#L
zpDWF&HbSNzedIW^l$rL%a)#JxUzXeT<hrBl0JPQK_;NL*BeE((k?Rc~{2;Q`-oGlP
z*BXc-VEifHn2Ha(VzKp8<Q~Mm`MUm2<74>yeT6zwKm5LI*b$aC%S!5CN39d8@m{<o
z^3vU1o3!n}OBBT&pK!A7s$fu-;@@t<;nddAN(@ov?y3P3rA=Ew+A;LkN0l6Xbxkm(
zL2oc!-&4%84Zc6O&e%Vr-4PR`-a3sc(A(cDGp{r9dRiLh6L{6teck}qASd=DaDxAG
zBDH(w)|0v(uP{|6Zky>OUPFJA1AtbBtB_8A`vlnS>|G+FOZj81Po#rL0dHW}PNoUx
zgsd3KgV%TJEecpxCfE$0E-;?d!Q<9}__2b<+_TTMsL0Nt3u4`@zrvinsWb(Hg!7-Q
z^lJf^4t`Jo09&~K*P`~nW_K&+F7<V%e~8A*>K9oy@Wds)Dr7kv4N4s`#4#kxIUYQW
zBDE3=B)vfSs-kl}?v8|_nvTdbCRE!J03F`bdlx`gdD$*IAZDEu&LODU!3hY|CSZYr
zeIU|`eUVwwddNBrRP6b40Xjkb8l^%0VkO>7V_AumYQ0B3ey@JX#)17dfS<zNew{DS
z#+mI2CA&%|+U%I~Ns6jA#f8s)=9&>Jas!;yP%7emiXeSw7;L!t@*bhfQ}b!`^{d@h
z@=sa{mW29xkbC{0Wa9doh@tUaz3R_Wp@Xk0?<y8lqyjrobiRIYzq`(CxO2K^YRti~
zjYdS<T@Qo;_{HW|hhBgM&+OQew*5a*z*^R?s)oB$T!rD9?kP0_+f5i-HWxj{@@8W0
z4fx6JW?qn{htmS!LsWs4A)ra(1bUSU110P9K3kX!m}&#NUFp<|0m+ccMM@Y0hp?K^
zqu*^Sm`AvQXbE>SX`Om#2&_K38PAan@72a}GFI3ISVu@FSi|PJ-?K)I4sPH+Ocp#R
zZE^{D>N|xrq(sXTNOXo)E7avHOd`gs-%WDpHGH-W+NKr$G{x^-8)+t|^l|TmE#w}P
zd?t^WG(1U<TGOCL42Ebxn=uOlUZ6-Ld9Bv{;_Ywry2ihSHGIZsorO2x>&D9U=fa(q
zM9mA^pBP*8aY+xdFG)GG;s=B35Cvv;Jh6K?Heu=dgX5c?*Zs@AX#RE41%zHtU=oBf
z%meKXFv%~QF~LYl8+Nm50vwgg7Slmd3zsoP2}(GIC8JHF{}<H^u{D9snxvIptZToe
zKGg6~ps9g%O%I3dq;81tT9DesoLj)hSzs3LfgDz(rLZUf{;|w?9jG7r+WfN^u9mnw
zC@*v=H|Q#f3Td^CT{VoY-jxtJPxpFK{rQqxZnJmdRK8f9=^C@|%tV9gPT+Wjl1<m9
z@VWOUfZazq=-Mw!;K^GHEL{+G*duE$5~7nwuU5N<>qu&!5f44ehk=-Ztcv2WK<+X`
z8!ORvqU|lQjv-{ay$k*&rKVaZxQ<raj@8JtcSa;T=#|CA)ghOIs52j)t{09LrR})!
z!A2WeC|lyI;PghP<D)Uii7_ZofK3s#!KwNN>6AXH#L1cIR@~Klo&w*$wA*$^PYT-1
znglTBjqS)z3$BD6W^$@xx;l!Y9fjJGuJ%JB$KD*OR^nxnM(QX_{W-9pnKEQo2Kl#-
za@Hz6Rb?q{^9JV#){qQKUP1~HuV&<Zneyf6{(}|_FLAsW&ONMgZ6uK;6)|~*rOepg
zAc4?Ur%(A33ftJ4{X%0YTg?|`>rX{Y*HD!8>zQZlGs)_#&iP=5nk%Vg6&#(*IwT-q
zWSFZ0l{RC4Lx&Fkrk1$1`D`HggBZCV@gO%man{N+St%uAl};Z>d5l_XdXC5uWlTy^
z8}{ZwdV>rvIE^%(aLWpINVX3FJPyA@nAwb>w5G)|nOko@O=3B?ATt*OWQoy9fP{9m
z0BDbn<8v;l$JwD2U%l-CETysy30K;)H)XOG`#*@mbgkQ84^|JR)7y$FFG2JK%_yP8
z=E9l#{0**hFz>+le7H-)2VW#hQhAvZ_kq($<E}C`EU#K}YWZ7XQG{OLpqt65o0CA=
zg6r7c7?%F_U46g|bZ_gn53UkPUO>f^YsUGhF?I;@TNTx9t=)B#cNE<MGI)ChIBQ7d
zvGkH-+SBLSN%1(ML&}pzxvjSue)^8d_$w1@mAeNnLOwSKBZY2dZer9Im!D8WEqB@E
zSL*prmDxJnr})!<Bo%`FAVQiU0RU!xG7A4aY4o3Dgsq{Sp}DEk&nBZw%hrCM4e6gv
zhR^D#_M&CW_7dyW-@$jFCdmXairL;1CM4T?qA0G&$mO(0{~pY42@+ECB-*QJP&P92
zuz?J7J&CtKsk`^7MSBx5xw0bgm#3?<Hy^*-G+ZBM+!#5%9=wF*19h#xs7Wu!{M1yZ
zVLX0+ULVsu``D^gy!$8dzdjZ>do;k5TMLzRk{^ZS&2G{XWlKSzxG`z7m<B9cg^Wl`
z1{-3=_QQL{Ydm>>8|P!!Sa(w;jrdCO%}#}lNlvFWQL1b@CDQAU?)$-Hg};(_R%5ve
zA4XEfyE;IDXt??iT5BDFCY2BE`>n++!?*<Hhzul}8mZoWW5lk9vXe%Bbk_PO6*~2|
zb9OL9w^B7ZYl)|ikrYMx4%*}QRX0s)1c4aGsYQ@!=V4;cNQ|`{lw!{<SXuzY6*T8)
z)Ic4nxXLsb#s<vU<bWu3>Xr?1a_&ajW((g2r=L^gP+R1ZmzR_Ed>S&c`DfD&yBWXC
z3EQI`EK<u0wO-)s)F4YEJAbYmzqt>PdW(C`Nu+8JO|-B-1=_#QjTX8nNfv~xslt4g
zj=ALT9J5vcaxKBxQNTrdXfZ8H1Y8v98rYl5J$w_~*qRSgFx(gy^*sxq3oMCijUhXk
z1`F3z0CCi3D=0aXK#8#lG3iuQaCy^8GJ(L@UlJC}W>SHhkmVje2Qzh9M41NF9)lK<
zT2l4%-D}-CiLL+-ivVtGL;!*oK*S!9s%N9^OmwSxfl9!|yADpPQxq!DVZ)TW#Y3Xw
zZ52C~m%1`wJvtPMEcPR~x1uOHBV<XD#oi5LlW6Oq9K<GMFJq=~PAE6%HX?n53p!V^
zY74N%k7q)Aqyb!aqCSHs4j5tHRkGe2Gpw5efa<_CRRQ4PG+0mfWewRO4ZNBY&Wgq#
zG&hNcYa#6PsVTq6JtZ9t*03>qCHR9hpVZVUgTqp0F|CRD9vm@gp%6UVl~Fc1@}+}p
zRf_H4Ye-!Y0O83jp-Ri@LF!QrY8LiQo&83hKwbU2hqo^gY1T|uFH;>XR+g9zm_op*
zjPRCe25J!^Vr+yU<2y3@j-A;k{3>+rD~Jk9vr&7P(N+?DZ=;^;Gaw&aAKi)gs~E5u
z-kraZgWf{fS3bs)TJa(kU}dgPMNu;5FSK@d7pzAFH4Vx<@P6}pHam(LKd!EId53HC
z`z-op2sGA!UR3xc#y*IVu({Hu8N_7X@%0RyveVb@#ogxz5$XLz)GKJ<N_TFaepk=O
z%kf7)I#d{aXdRS=VQ)~T!a|!)NjOIi2ukf;g-zt1vO!pN!m=NwYd6fWu(d?kp37aY
zEozfm0$vWT58q0p*;<2f1f!{PoGzolf?_$Ei;5%%Pznb|I)-<5P&j`_#`j`|4NlRm
zCiZYHxD0Ff&%PEs2)}*xGE?|Tn&Wls*J823p;XQL?oQ2K!uDOLxw&;C=`Rz4d|Tiu
z8_WU&4hc-72?o)N*|M4tI%QW>!DJhxD4raHQ*lBHlnk9{;DN)%7};A}vR^lB4X!@q
z#tnv6w0Dj)&$0yQ$)Rh|tG2R)a&f#N2Io6UnDoKpDM&RO%)x}E4j3)Sbykf7%Z0N_
z-z)3he<ZB63+|Ps*yD99#zd5b0adN1fFu&qFS~F(b$0<l1wFuY$8u~_xGeMfkDNco
z*3c)U%MB>J2yPRLR%s{#5J)53JbO?1J_+s%IElL~UGDNp<i%GGT<Z%2#xVvIxs4t|
zqMv36s@?}ZT&guuG<YcuPXD;BKND5Q1+$8h2o~ODRnz@3NEJe&@VGL_CR%H4THr+U
zA=Je7m4L0jErb)&xWWU%PvX`PN*<a9Q>0_?umCh~@hJ<2d<*8&hsP4{@}YbmV`5xY
zQpdX+I+D{4Si5eAd;EJMt#qmY3HPp7^XR@kM0+bRAGXQ%*ab?9rQUq0Dcx?^<<>ZV
zIB`9zo>JvI<M5?9PTUiMg^*jJ)|XL<yq^U=bzO$)Jsfs);}ySU{qc*Y8NaLC-myso
zII&hOVRw&3v~grS1iQC?0dF=Y!@OI5B-jwcc0{Gs@c22FU-$HfosM%a3_vljYrCPF
zL})$Z*WI;NtPL#3Gurfvc&t8c2A=q2brzE+A^2)W2%a8)ke53t@oM^DoLFXzag?LQ
z9U5F<AqNk<-L|W5i3_knD@juWaH*?A7$SNAIlvf~XE%$LJ5zAeh(NxwRPUWEGZxIL
z)3trkgA1!`$7)w#6c!gHW^S*kD1o>g;5*CH9D&j7v<DW8_(<DvzQ-E60C5u)Ri+Qn
zT=<%B8f(@5hy~#c_>^hsl9aOUa(W`$7fede%9^CFX0LuN2QdNlz5H5!ME(ig0j(A)
zmvJC5alU-sgA8h4<)yGHpPL8w#3TCmF+dr)_jANGP3F_!melhchxqVo7<H&5d^3at
zr4)RUS;7KjRG?*PfyJZ*a7z&Jl=BsY52V_Sv?$2xREIzO)jl_v@6U9nYQS6d$Pv?m
zS$8(LakdI75htGS*d1e~FJk1B)0o>D?APLj1Sh)+NEFI2XqFHNJ*F!-;q9!!k|C2f
z5e>H;nXOH2aO-qIllE<W^TE$k*Kq+@vq^3q521N+Zl3!yAPIis1((Y5lZ}ba=Lo)6
zSbk4I%v&(|CfRnZNk5W1x|{?t#a)v*24dh;klo9|h=S1zM`|^V&}rC)<_OTS0lL%_
z1*wzeXJF%xTt*@~86F28!n>-JSnww8$?E&gP<Of(ZCxHJQ#|nSu<%thrxp2~m#2WO
zmV7$h^q(4d>`aqA2};$m!<O}Ht96>W=SHB<9W+li?GknG)EK{QWHr@YR5l~)lX!lI
z?Rb_+zW46q6FfY2j1|A}QAmaCtm@Qb!5^}1x`j)xM^Pj%FA&Js{2r*L4#4f%k2i1w
z+_-$R|8<Ggc|yb&hNqH-0A_>J+6`PcCEv;6|G7%-rSl|bQRMr)1#g~&tZnols;Qd<
zrDCeIYYjF8ZI#n|yET*90XsfvH}TCFU>(shu-QwDM1%E3M!=MGD4Q^=sgCcyw#lIy
zMDC1h=4PT)rHj}p^vc+5FS=(|wmJV)K<kxq7>EWd{ixWF9v39Q2vJ1(J$XkmJCOJb
zvu{27y=lU|2mOy|U)0qypjbX8?7n#bz)DlQo(^nEo#FJrxBwV8-__9B%DqriE1)7?
z>hsHv-R%lBRM7zFnSvu!{G*8PO}uFx=<!i4h}sO6E#mzE^nh3OH+ReW1LwoN0|CB2
z^W2wHq4?F+Uvn*ZVS~GNztG%+&f4<vC9&d}O8@Me|DcM$*r(a*|1A65e%5^dJyral
zWuKF&vAwySrPse!ep6cd&g*PQ{>x<odPJ0|heubX&d7Oxxmpsv$jr@++_~H{WPp?6
zL&AVG0h%tfzOGuK14sZ8-LkpZ4}*z=dX2un&^ku98qI<4qC3qcyHP&i$;OB#*h6$t
zF%N@E-Uog7N12GuIU}o2NQu3MAkcN3GZ9NF%t-X(-OJ3)N9wkw$IOO63K$9~SQTX`
zbD^`znlp*UoHcS9LJ0x%4J>&ws2k#6*De}&lq{dSP%_QUSc(>RLTvu%Awu~$@v4~Q
z=r^z;zo3GZsztt{>Y`&-v1=S4k)=jnVqwu=NN3uEtomB&$IE>xp#e*us33?Xsn#IT
zrINJC1w2SFihap~>N0WGu(Gjjuw551YBG0?D<>!D{w`ji5$(@H1#h67m#G!}9G5ap
znGj^I>YP+^>MM;+*bgn(NC%@SnvB=If7^Mv{IC#$gO`Ilw%;WOOxT`*m*39D`9|Lo
zyLe7Ci=32?JrduCyaL3LEKMil8o{;lKFg+gEinv^#A%5q(Nz2mQU%>uWT3ugRj^0r
zvvrvN7!}>z)7uy$=I(a;+ds>kJhPcpS6+CctYMzp+8bPy{haj>Q~L6!%r)f1*)rYL
zKv|+unRd9vK*!@>9@kMdpH3rbs;gqz?qs(Q94z6oIC&pBrPM3d!rsEJKGKwfi;o?j
zFY8Mm<~yHlY=2gNX9u8Q|9fzFe=ZJBU_M^r@0(vS)&o2IpMvxtW?!8FdbrH>@6TW8
z*s2U4?gj?+=)&cJnbKr+pMOxIOQ3=w3PU2AgxJDcKolm0_TnVzl2c6!orMoZf~4BX
z*vrs+ev51;b_$fMh)G5%k$`bz`HEk?r*FV0v`P4$4F_nhgwhY49Jv|w0KEKVnzvG#
zBVDI$Yr_qec(lsx?^n9nmUhdI4U)HpcDm6`);#LIxI`3RBFM@|xCS9Hq75s(+K;{&
zn&~G2N{!_*lbL)ou#U2A9F+{h^nvA3=mTgm+?%@eyO#wzavWnQ-ktvy_a407m;W=j
z#J5d9x(0G<h+;wS1CzBKC;^)+U7H!160*0Of7Lv^1GVJA7zu^fH}m4w@HuzPB%Ufk
zInCc-*+KlY-*I{)^WG89fVzXVmz1C!R6@#wVj3kCmY|O52@_WX3VDVyG8MttF~+Ej
z19QNj*(e+&7CH&RA+z?iMmHH-sY-Up?32^^9p5us_GX>@dsXQiB8O1ii&=YIFOnNj
zZ>fO&Fi8VhA30-U52==<&lfnD!v3*QRfANoBz*(>Z2>~nZ3Q1eF&&+wyw$+uhc^Mb
z{Z(Wpm=ic#g*acToJyuME18&lG*D^kfXq-tWCqVMm;0}?w~*S^+x{H?H6CoVXJE#>
z7jEBhHGnUlXwr6jJ_gj7EAaDu(m*V6#9yuOcWo+1p}an?SW|yqc!rFXGnqljl`P>?
zjy|CBD);BV=ZF(#p0`J-wVQgDnDJMal~NglO%t5m+h)~?U~$3`HATQ8dQfTsD)Ygj
zFh@B6Qn!&T&nDHRp2`*Wk-wNVkjb_=@cosGcl#wc?w+#ZQ_aj8F;{)J&}#IUX{DO2
zEFbuyZy%o}2#}Fr4Z{RNpV9y`?GKV|_xusd1^JI1io5y;YMk3w=GSx4xv6XYS9c>B
zODcYL+YB8>Lb?9U#)dy`F;)doDAfa^8RjrkQyceZLY_dNh*_fX##Z|95qSdX;Xx!g
z3;HqlE}J{G31G$Nz>zNg!@Ih65pc3@q7p7%9?!dg&V_=c?*r3CY^q(IFUg7X*UWSI
z9X~1NOe6P8WM<+g9XLuTsX3FO#2HlBuEMp485{avf`)j_A2wjdEB;ysJ0ubc!a`Y3
zs0^i5XcmxZ9+`~DKECPu6ccE4>>-S*DZa9>CyO+$ywTdxE2PNnu1+BRuAy@>SsHvJ
zIkNyIv-SD?5468_Br7~cb#TFMtvuh;wxz>c*}1Xs&VbNc$+^|)nQ3WL9NEcvCq~{!
zi9O)h*nXKo%vniH%Cm+mfP&=wWntx2&z#E1lo?WwTPq=sXEugbfd7d1Y3tY5AyK$)
z!&f+yEt_}L9=)=Cdw@RpO&HW3nip|e>w5BZcyXJujx6^J1Km(Sq;~}w6B)nQWK2dF
zRZ}@cNKO$eO{=WRER$i|0o1v`j~=?t6B^NqTNWOI0sYl|2%~Z#1fd-3IQD8hZGJdE
zCj#`s{O$6}23oCiYxcZ;6n>pmtyqsjm|<JP=5-gkF*d1)d@<byro(@^zDLv1X3;r(
zITr@SdQhdZhU6>I-=&|Iv?!nTPmGuHerhZ)FTF*nhDSgrto!zA8+Ao+(PQPj_3ndt
zPj60adFke7)JlazDLvXtf2N<=&RLMHL?Zffy88vKqQJ_uDkm1!<>eJ(PzIT+F|%b%
z8taZG9m}3fZJ}|RwqN>TP^j!o*m3<LXo}`$RTBe<V4nTQL=Jv`DyY|Pg%54}dJ4XS
z3)1g9#|`J$;Cy`1#Q|PH<jfv;)l1yi3PE-okBFnP_-o}Nk=}JS9Fg3M=F!%g*cY~)
zD(#kTI$Q9bKA(G~Q69j7I3ZfG)bl@YiBmNaF@F-~EhWrWoIysI6@2Q*E^G(b+RawL
zo}p<`UC#&moVBaHot0w7s@tqDW36yXAlWK{-^WmCp};W4Y3n<nN4L74cxQJE?+Ep@
zHnd)WcO2L*0$~x5VDGYmfJ4a;iXDo5069Z8NxcYHgCryDqH*_htxlex6z?q}>lv&C
zBHXuJG6oLja?&Sr@**fqN~Df;A_`jK4Ogsalxik90t(N;7N_!|!^CbkSktbaSP#bq
z6ysD-DSmDG4Lt0$w8aA55&%gFL-C09+ac4y5zr++dMh1B(Z8hl&mY*Fay@o~&A>z)
zCAkBm=G13zvy-=$)vQ>k3kZ8(VYiEjVH6L-A=NbMH{&2&b~n>Gbf{(BfACJgLb=ek
zGzV()-t@psEhaKc_!0`;q{8D4X_W|nJ}$^1hm6-97XqH4Z$nHCH)3*ff$8w`^YOku
zo;;+<Io|Z}H@VIU9~`^ul8o;~L3ZZ!@LdxHri`E?d-{JImB~?++O%!6u&H&*I62CK
zpeX(+iy4dRL?Qb_=?Hp|-{@Um(_g$Oa&pBw>L8}BPRsH<fTi59=+Y~!<m`OT3b?uB
zcgbd#FI=Mv3ETPbAPB76YG-T*{+~x9Ip#=lmp?iP#h=t1(f_CcaCNb?asElnO=10<
zjQn}r)DN6=QA?g;aKzi^Shb;<F~ia~Beq{pXx7sRp{b=*0;Qm~s`kHb10WGl)O#+N
zKk6e2bROtyV}@6X(g!~#NAKCt`C{Vu{CMtDccc;P(xdUBcJ<CveQ{Cyit_8;+ivUY
zF}3$;dIne-=v&^M+L_p~ao_{_fsW7|SC%J6s5K}B>+EVTNH_k{`?iQv{Bq>{!`a34
z&GO;n2*=TN+K{fIsrf(?K$j*8g>BxDN&3*=c~Ik6bu(%$+7{G|ypz&PjNsAS(?k9g
zs+baAIDS;Aqh^$%%IwiKfu}+^S*$}5^6E&~oE>#tmijFw1MUCm!`Y+iwO{_Cjo#{C
zF4>Hj)KI>_zV)|K>#RTg8g##JuZq{54aH*Ag^y8=h1N)%%Pr(>?>#rbUuHr$(yoz+
zmlk5IZ|Nj|Ro3^;hN?0HNojjdHhdC7v$rbsT%$T!LsFw!s-U}KtU(EchZf|=@nS*-
zAX-P81LKko*fb#ifO1t)8Bt7X<(Z1=4!PHxBp4=Lq~zFv#xxW0rK8%&#Ck&$xMos_
z=D`g%>lBYdmo>(nfvmsy9*6Jf9Nh6!6;%q@?|ph>D7rdvcz5wbCABS4^xUptub@+X
z@TjOeDnOCOM|52pFh&F<*(A&lvEkb77T+p<j`qw#D;k?ioHf5|TZ$f)-tNOXZ+wH|
zTTY#+2b~mmisg+-7aY9YZhe}n#8maHY-(j53Kwj2i1jR0Y!;Z=fvYSB9pLIbcxGQt
zBN$MHiS`iy<7IZsscGu35+am~vhtX!BY5rS-iwAny25<5LWMk2@Xk%U;=5I9V4rA)
z2RW7vey#(}xe3q_w&oKfQ8d$^$!NT;4wCHPU^Byg>9yIgBEs`(1X|j*#+l+a4b(KO
z{-oL^#U*t9j~jex<Ba#=qC=q07~k2@eihoLOo{fBlm*Z~NSLV=2M2f;N^))?5@hp-
z;i1`8wU2E~Vp|onh}c2+q6KP&EnLZNfqxA)7$$~@W(ZOlmPuF?+`&+9-DHRcV+-ty
zw;X3Y(2-}x02;Q+;s*L6IIv;-yE#0mz4ijid*!d&d)cL7(FaEg{tUAmzE`G@-PxmP
z5`puq3Y;s6cX6wBksNlD96ohY3tKF`GaB^eRE6mC|0xrx5{1*4tJ)Up(G}khhA%qb
zqu*C|cOD(;@-vXcyJ+T&NBwwZ=70kp<JL?b^3tQ5dbe)$$7Ni5_Hspj^uKrnr8uqp
z^UFp%ypH539?oPSfLlRttIts_{-=@$keM~X&E9IE1Et_Ta$FqkD99`?Y(dAq)P$u$
z#3qqQEO#xp8LT~Lq<hlRaPP;RYe)u7Epnpc+z9;m&MzpQumPr$YR+P`tOK-*p$w*z
zn+hh45COJM)j}TyuaZWndPecWoHWn@OkT<MJ!jCM@_Ycv#KEYSbacDQJ29-JP1J%i
z+c}S+A(TM8%L1#aN1+sD!>Iswic+?c4CSs(9y^>=bs{qSLA_#`s=bxC8IScXuiukD
zhB7r~SXW%H83d6=ya!1%QB6ZW0MMV}@8MMvAm@lnqV#``dT9!@v;+h_Y~ara`Jjqe
z4q5ZRVFBRdF7`Wyacqw2xxvA0U&o3jN^%Vl%72T2@Y<Qe%_f4vHekF(wr-V_2y6gN
z-qu;ks)<<W&Jqr|_5UV$>tLXiPxul;bAcH#)_NRQBtJ8|K24djYc+|D`F^!*ZW-=%
z`4*Rpe9=7zxTfzwQi(o-vbj!=>~d_K(Mr7d{X{XMw`Fa`x)z1NCl;0t;+hV0y|~7b
z+20BQP;;2n$KIT%PEKebULdlFcPro?`vNJ0Mv6fQr$W9zd)<0b2^!_JT&L^UPS+4*
zgjvxWBV1}kYT)e!igw41J#Y=ln!ALfA=fzto<YCMSJs|QY}~1#Blf>2d#5PTqGU_-
zq)ys6Y1_7K+qP|;v~AnAZQHhOysWz2{km?yzPH}T{@Z(vJ;sWN6*E@M8Rjx6;GN|*
zXsY76bf_s!l|@eX(@Y7)lfKb2W*`lVsC?zA8%^+*JZ}{o{9f`-#OX9Wq{M8NeY++Q
zQ)J;<Mti`Nq?cQ5i9g*HmXTS*mtPSrLV}FMfVD0ZU5Wc!M5drVh`&n3C9UnO1O)fy
zmdHN<XC7vJS*-gEB0@^kRes1vOuRmbq?1^Fy5GOeRSGK!leME8s9X?7UjmYQccYph
z+&vH*-EA3fGTesZ1;WwE6upL5@EXc~BY-j$>tS8!LTD&0UXI5HDoNL;YedCglmPl0
zhGG+A1RaFm6Sd?RDeN!ghnN-3Do`+qxPTND!Q3$B#RO$+sfeN$;$Ud`V{-dqiATho
z)CWP4t_S`G0l<^@y*-9#0{+VdmbM#GA&~pam`U8^jrTyfdKfi49b(Vw-V)6@KnC~l
z9D8A}Zy!SxDC`%ES<$}fk1@}U?>^0?%M!g`hK@gs#R_;~4h789Q>~dD!m(0>J|(@p
z#f>v!ar%mR`R!Cd*m9jY9*=j7&1fK9p#cypH2I_GL6^c@lr?B!gtHj7ZCd`$bf|K4
z9cbblT1ul+2*XO^V2sp&YG_BcCG?>EY%!y;>um-mPHJd{)0E;kl8bA9)|D<<#GG6F
zP8?$we7iQS{5yM(3>uV@H!VK$R?5Fz(+Cuuyj#MXByA-^Eo-d99IlMa13TTda{Cel
zcDeBYrao+HK0@|;Q#O>T8LV^&Ws|H|*|}wr`uK!##}cn^D%40dosRyKP;v(oJDXvh
z(IEpt!NQU5@HTo*YYF(Y$>Hm~Zd>`|a!y(~C-YZn3f%hrlQ@ZTTuAeFcrsrCo`L`?
zrrd6e`R~<1O7;D^rjbTdW{V2(%(SIv0F!>-c|2se43W=(oIDlA`Bl9HPVwOc;(Gsk
z3>O}_bve^wvl5L03L+GvF7CjAmDnA1ri-K{jdOyH7qiGr-Q+>;HXCxo-x<0!&PC~A
za>NPAf|lDDG8?7VLf9Y4tgmiJ=?pIXrXt#w0I%*=y01;qZJ^DSM<t86c!^kl4P!{k
zKyrex*)uFJPQgASp`qJL{$TYae1jE~Q#F%}Mm;${FJaZ2!6Hw#Yw5PZL#ED+bGEBI
z4hNS33zEuzeE<oLAN8MCh<8cbAXp#n!csbsWu<VYlV;t`His<xt<r>FWUFG`Et5@X
zOUqKWD?G@CQdNYUAazn+KF*GP_0-KiJqBzrXqq~E_@a7E&ou|9qxx*!Oz#?Roc?;A
zdT4(0QaC$%X~^GnX*BF9SOmHi<0ARRJu?I#*8Mp<#``qH?Zarz?y-Iz6uy-AoMkkX
z1d)?N&%-J(RL@T~WV73{#722v^i~CXpks549LK6gIZ3I{pDCbTBmmRPWHGFm6AGB6
zer7i4g$m4h#5))2ml8|E%Yn-2w=`hy+J1K>!9V>L@GQQx?_nnaOQm!5(zO2`p4j68
zkx`MSN5hCTx!nV4$<pdQ^vrKE1R!oz(($gke3hOiVp?IHsI@eE2c3xLT3tIDno*8<
z9Gjya3}PiEpQxgW><O41^mUiBwSNMK^;C)V(~;Hql`Ie(S}*9k0SHa$(OV}36|os2
z#BpQjqcMK$g=km#9d+&V#Ejv@Y4V`dEOfb^OigQScI+cnvz|TgUgo&3Y`V7z!;w8-
zf?Q<bie$O|@bWi;f-|Q!P*~fJuf2Zi@!7&p=E8^cl}Vv|xEp>^nH(Ug!&}|_`CE#z
zbO%zGt#{g@BQ}A8^cBl$qSKk+rQr{NG$4A?j_wG~u5IYKhVhzbTVBV5&A&FsPbjXj
zib4JQRYv*WCCg^kwoZ=!d$J7BEvT56cqzHQT6=cU)>JpUki^)Op*rb`5EekljFcO<
z5E%J*%?0`g5EqZg%*Es^IAEZ4XTz2{XUSXK8r0`}(~)P>$>*Fq4${6(H=eX;x|Ju?
z><g2Mi^nsoK7hNv=JkR^Z!GVI@C*~H((mO<j}>zxk~{J@tje|TnnewvNx5#;p?4aK
zXhMusLV)G`h3ZQ`Up3F!me*O=^^?dmZ;Rw9<J#N|;tACpY8~mQ*_zfop$+5c?I4I6
z5uPp)V?!$R8_T{tphn&w8p_W#wn=-M+vVAbX|*+NBgW2*-rrKCGSxhuzt(PRH0UjD
zz0fnsJy$LX9L3_<FPv{|w}nppdr_QTwmm+t7Qx`VeA)T7V%Bw_tpSSPLotp&521BC
zzUqnAK2Ppoz^5gDE+n2?)-4<=*SmuXc~T`*l0VC-?>^M(I<7YTP&@g)6?|r{&8yr$
zi{70J*v=o@w`{J3)4G3iLV@^rJi6ZiL^?esuMJ)QcIotidLyW^Fxoyo3sP#jZg<Jw
zQVK*Obgi<~Ds1nl6@$Xd!n!D&>2L47`I_HH73E=Wf(Dz-yIr8;Rbk-@F%E<ufCpY8
z*b5z|)5po|@N^T@j>9eVmKNh@u@z1#&o~&2iwn$tVMxR8tCrw-{Bv+#sk+vxYoj6-
zBSN_v+Y`MXisQLElW<hdI6AV7ZNGKf=u4!QRRtL0?#jcKCNAG+$2r=eL~kBfEdu-{
z+a58bAWN1lq83cEr=St{i<cXXb`Zq(Y}R)!g}MhjO}-M9HHO=GK~PTuiN(UfB9axU
zBJ_oXgixc08h4!dF<IheTL$d_Vn=WkQ(ieDO-gO-Po1w{p%-`&_)%*NZx^6T4VjMO
z66q>KUFv*5fE;lRyjV-5zWbQ2fH+{2D*sr49Ut-F+%!FUQzJi~Mh9Y^ul(2>wiboJ
zz78YNRzR(5OqWzg*&hEK$}1^=j8r_*_l%5HDUJPA!VH$rn%G}Ew>-izE=iB}d;)Bs
zOQSLSq5d0w`lH$~9~v=clXBLCrG>Zq3rT*S=Rl!((;zxOTdX+${_1nmNfmF(ZJC#E
z`85YCc-gQEb&<tSl306GmX<+arCPRxuy9um7lR65Z&Z6Xn>@;5a4CjqsNp1GYb7n?
z6nXqmFwPz&VB7JbZ<ryR97Fb2z*kUhjP1Gx3c;oWn<glfcV>H4=S0jpD=-iSqrvAC
zmO{v;A|KztXNE7F$P2@d_mx-EXP{Q>Xb8hZvEEKx2JTt~=hTPo*Knam>;;Cd*xkV=
z%sHSaZv@#y%?U~#z+Co2j6V<LL6l82pbj|`q$w>Ad1!b9u`-en);Rq85%%mZ5+^%)
z%mJF|ofVD(C%O!M&Qnr8mQ2wwYZ{ivXAM_e<|7|EyX4qV*!nC^mxsc0b`2CjqQ+YF
zd!9Dowy<Push7aWS0;d<@jm?bt%wnqIdn#|2uYd+HO3#5fgW`jqzQAoR*g$hX7uC7
z>>YrzX2Sise~SRiVue@NNhfQVZp7_IAj`Re@-I{OJ`Ofue}~N*&l_jF*d^8$zn_|v
z$69~waMvm4MyUty8@z6m`UVmLLQNm>Ap#q_mI0;BQVLx20c@A%%u7v>LmNhcYPpq(
zsX}BbJlKeGTkvQnLc<-@S5<-VVv6XLWCXkzF5`RFsZnW+UB}SI2j%`{-VKDo*sRs7
zZy2k^xUVhsTk1cy6S?=z7iHz)UY^lblonHP$O|V8UIMMl;KUFq5`sHpI^r}5>sTzQ
zkxe0kUZDigaD}+2p=1<uoD7t|HP2FL3q;2kC$kA<mg5F(ry*6l9fB{?JmH$>%uB5)
zDdqa;E~10X>wr@($yOMC<+cszHsUYuSFux=ZC2peYOLS1Gy26^%etU4ZHpEzJ1_W$
z?eLg4Nhm0hR&`L7sui9<uFBO0O?U@Sv4Rt9c#JGVY+6ygp<jtKBtdAUKxdGW4$6RC
z69*M(I6|IU2(1Kz@`M$FRv>+ld@7%adBj!TR5?tYZW6;jXtZB>M;YOIkq^%^8NIDc
zX%q1E<ig`A<*lce9)f+f$#`-A3u6{(wJ}oIWZq2po+2!7?+E3Q=E;Kt&h$8l(Y`XD
z2pXw+#JB%k(n>+S$c%WKQ+?)rLx&Q8Ne^QhFo<#L6J9sLlIcyRi1Dy4@i~{(R>K!8
z`Q;>4y}4lEDd-H$HqYWG6Pl9DTqZr+Ux{~KR+C})qgl1sEAKI)GA;XBYlN=5!8ieh
z<p}Y4?vdEeiuib>G+|s@%D^O8-?}$xXjIzC<;&x|^9S^%_T)W&qWp3;p#BUHiPq~|
z{tr0+Ty14-^$6kP%kT6}f{}V4Eg@4i<J?y6VGH)j+6htVA{T@=El(LLxj$ddCGlT&
zoq%6^S9iX#$E|oa=3>PM#@5T6J#VzRUcl}xV39wfmyP{7ai5BlJpdAPU!kZ}<D}J_
zB5EqiDaOa%%nu3~D22uIzR$AmqKDra&CEn9B%y4~BZm1m$bf`L=AGLPSCQt|k`arN
zmWGz8#4$8(-qacr+IPK>fVO&W#x(Yg_9slCmecXZ7~oFhmUjR;!@iKv?9TH`!9txS
z8--TW&{y~xyHUkdkmV(Mk!(p_uJI7N+kEZpPk+44Y%DaydG)UJ70np>!)Pe@MMk8n
zLyBAYTM^y`qRN$8YK2r#9RrIfD$p7)wDcNC+gso`?iz44>P9rR${PlvnH#oQ7lliP
zy^Yl|b&%QE!}cxSv8%2`EB-Jh&S^ehN59!^%tfC2?QnP1bkFV>mKM4xeA5E=Ik<_}
z>!fTCR}lVnCe81KfGLf4JzoGHV(wkRN5#mEL^>BgWHIk5ds5D1kqVBhRN`X+Fn}RF
z`=wN~+$LCUB&U5(Zz&h}uAY%**a&D8D9LuuM&pwc(IY8IdxLlO;3rxHl?h{DK4O~0
zXum~pzzyZgttKeeph^Wc5eN^d<*x4SygtS6=9oU)ht_UI&{4kMn4|<%YZ+>JlMmqI
zh!+7JP`i0;ZU)8Yyg06?6U9r|gBBvG&_vrc=8M7q)e9=ZK)UQ&tp`QTI->SDlM8IP
zQAG~7%|Lk{ommJIVSH9U2JQ&2BZ;+AC#ynpn8B6n7rhJo_lP*mAVMQY^fZA#9{y(5
z`Y#I;oJ<%+M?E3+fG&AAPt-W94mrg>a+O8J_lx01VDEdW>*fRj+-&%W&L&r?k^#|)
z!GmJCseG10U-zUEx*)EpM1b))AM+Q=YKvNB5NDBgXPv*Qb{9Hyium!d{*uL_A{$LM
zqvS%L!!n^78F5Y()6L3EEeKY5v?Ke<?D2+Ep21%@ztKJjL<W1B`2`whW>GWEpsF3D
z8p3CSkkje)=?_*<YHo~X1!qBy1;_1o@BJkby~9MYi4}QIg+qXFkrbWOi+0*lE%gOX
zvUFm2A|ua?E68$v9&@gQi1TPF><ARH0iP=a{c&q?Xsi_wyMd0VmA**2FTWJ(${HdP
zCA9{4aUdk83U}PKXL}>$lo?Nf-q6<|aBMY<w3v`>8WC_c>)Hyw>t*KthHiDq8w;UT
z+!kMrW&K^KQ+afPBnyBGbBU%MkwdIx<XP`F@cMQiS{*r{Yo4CAibbg>oid#?x$SUe
z$0e(%QnIWnDjwOuecn|b@H!6PQq$I&-L@Spm03sIl|FFRK<0`&gRJ|vXg715!7%jG
z{uz8Eo}<-2Nw^5%w{1-wj2xDh$h_kWcgR!?4uCowzV!3n0}-iQrIzSK3^UjSHMlya
zv6ptqF_XJgZq3b{7QIzeSy2r07Q;(nDQ0>AJdtDB#Hq|mtLCrjA>iOw;OH-hsoqR|
ztAd>M@Vku$g=rc*+0FGng{`1|4{^MlJ)WvP3bU5jH!$7rj9dt`NkMY{mv!q@);=H7
zQ9E}F9k^9S-!xjXkG~!gM=fB7q-}d7?4Rz*4hUdSpPoE&JE)*eDGM3Pao|aT7+oHb
zKl*WQZ$UU>fv~{5fgSdhGIIt>UvoQ}6S6V<jEIzyrvTwlL-KuvG!}98^&FF0GBAcw
zWT-zrhY*vS6>xmw>_%*7PQVmN|H6r(hA^ajfO!)PUL7koaF3IMA9dgWz8<;8MyDX&
zB9cS?9Thu>b^%LnKZ3Sn@)|)ldXm?c)h>10AK+iMo~g29JK*^bAo5e7|3BEh#Q$a0
z{{QW)aQIJ6xp(-Bx#mAi-;5syApO6+hMwaOXHnnD@gKzBN<}G$HCnjNcNI(O1=@&A
z&Hfp1aK=f=AY=473y~E_Qo1@3_4%TmZ|%{fNXs<lV0*r`=w_SkDomK)*igE)yAXuJ
zr|LI4q<q_14ni>$5q@O4HHHv+iQ+lX{(I|`e7b^hG!FbEN+7?l$;AWlQ$-TS?xJ|W
zg(`L|5KAU=o5zF%Igx2+Wks^LgF8XrTo^$p$KzD88E5fmTc?^yMIS}9cil8CW$o|Q
zaRqFrk+n_Nn0TbbYN*O0gjQ6WTD0;cRj`<saFV|1s#LRL+8RQr6vG9o(fYizFdFg>
zYgcV|Rr`-J3N>SrZsy*?bC-=i4S(~K31UQO`&RoZu)&)+zlC@PLpW3J(%HryG6n>6
z>pH>cSA~Rv?Gk8afL>o<SJ4x%qCDv&O{2=m=`l%%CP?J!`eYV?)5~F^4N`qhOi{|t
z5-rp}OB8hFA4iFaGVFWQg!Q0K9Q++C^H(pGi&ubW6~l<$#e@M}cgsW}BwcDC+q{gJ
z)#&3HVdO6qua%(H#jh$)vhhd7(h1>Qy#7AnAl;c&G!IQvI`}Fy6PguQ(-x-Uxq3)f
zPdUWW=tUp@x&N?VWQ054foK8!+Sjj3@#@anls>ZcJ^LX<(syS{z30R9HQRGhrMpv6
z+7)Y}`hRf?8tWm7yyCp*9gkr4BQ!p-R*2|Z$Q-fMzrU|G_|3}<+0<T}tql)(*s}Pz
zs;>yvvza8BZ7a>Mwv;^!H1E`|1JcfJPsR5cQ&2gAt_Ebur%e`b_OO_ps3!9V52fnB
zPNb@Q)9gsAf<9n{Dek*G+<b+6nb|LoD7yw~`)&U#3`Y`|AvpT6+~XgX`wtTTFL<l}
zyY<`ZS^wB<qLPF|IxSq+Jw?+WP<dGCsv>J~#5C8TS_T-ieP?!Tkb@p1i3mc3_Q-D!
zq6h%JyE%}C>rZEubq-F(9k?nuxok3+6RyzjJveLvNnSxzd2~cSv;j>1H_>0Qa7hn*
zVFMZf34{-F+WjfJyaNd<V++Z?2-K=5U}JY2+TfD>Fja6B5BaKG2C=c4a)ENSl8|3$
zxY1R5`HWIaMIriIAOlzRM8y6YQL*FXb(vdzzeJM=r6ZXs%rN>x!~)bPB`5WocS|*1
zuE`=6V%6Xp1~`QPsL3QcI{G81A9f&}X}*J8{ptj7y!B+UK5+Z5`uV~}_?ipCLiDg_
z2`~C@<%FosaiK9)1`w{fGoXvNN_jFOj;~A;AT8T8IIn7N%uoca@ml}30jp$!4v<?Q
z6#a;QmSHqY1m%zBXABiSRBt1bX#1+Eoh<;ir$`3#kQi)ZEpnABsMgI#h!pX(vUR4k
zYh+TmaAvC|K2BnMcs>_>-8^(^TWfUEQql`Mmqq=yJl!1DT(FH4OA94#0ZD>3b>bx$
zpt-M&<EQMG&S%%eMbI6cz*^z(zqf>Uv9DazPy%FyKT$rea=NNWsq{o~kD1wl1%og}
zzDKOY$7x8rV2W9+2%TGvcQ;rzWs12?qc80J6-CKfdKyh)0Q(m9S~`mEw(VIGJ>}@?
zz02VtZSJJj8{B&pXs4b>X5knrXqeAoy+qgKm<YWSu)kcV-kq@M&QqRFK~-Eo8hsm1
zR#~24d@XIZBw1=D|Hzz>q^@3v+CX0=U2Ol^YFY4e)qbaQ!sw+K>$#|tK8No=R3?Uo
ztXQF7d2PAkr|B|yM;778jt<5)pVSLUDbW6;wVm$sIJHT~$yEyP7F7vlMUl%zB~+4B
zcpQ*yXTjYlRi_bf>7Y$DXhPiinw9Xq?4KH0rq0B5X||RAq6r(QSJ6UxyMSV8o#DyU
zH{2w=dU8AMmNZ6BM*9S*@XOfpVB6<k{RL}yg>?qt*RK|!U%#mTeSa~tHZcA17%zFL
ze|SviKRgDAx>qW?MOuO(t0{ObH6Vi>EgCR<7D_atVP!J-$6;_+SQ$3MXUw<Pn{861
zieV&ogTfnXaGF!bDtD$+db@Z58j^9573J|3;vo48{Zb`}Tr@5H4zfz2I!wsQA*nqz
zCY~<9?TILOlTdI=c^6eif<9)RUX#Rg#hA#%7PoF`az_{k1kK^}vW=y;LK0e#GROAw
zkNd-ch=)>Q7M)%X<a(WS3#`*2K+JruFfoH6^8@2uhLAGkfVplb+6?-^kSh4K>XCva
z0~ZO%Q?t*{AdN3m^`_F|92XSUdNSpZ{4_K&FreJXk<R#&)PS?2R$0~wUN(+k{N}SX
z3Iv(W;G2&GZ;a=4!=VEgNCAA}9zP$ar93k~)T^1xAI)EBaboEheEid-O<PJPo3<R(
z4EiIj%`Kc@Ar+L9IuE(5>Ct?dJGLXjVz|ztSQdW!*#abUYdR&=HCZ{aw*0ED-V7%e
z219I-*fVT>?fQVP{;2h=c=0K`#}xMBp+srA9~a$=A|vqLgrnSPc!AXHQ?YHe?WLUj
z=)3X^I5$^IvRltclxWxPr%Nl_Wb?d0$Gi=WKg6+W-0x^^z*%KWss2y4fnDAScl#4d
zJAd>({(snpy^+H|dI1uZq-@rB|B(SmQuh|1kS4m5CX|KDFv~;8?P;njnbv}KjJYq@
zEyJzdY;&B`SlZ4x(>zU0b!58P3|;AHs@eiH(-DWdwF<~o5`719TLLBI00oHJmD2sr
z@~v({P$mx|0YhA|$0|_-ist}Z{4J2sW+Kb&CQi&Q%~iQ)87+fen2os;*=kcMe`;1`
z=>5GrbJb@9X^JJug(9SHa_&n4Q{$SMHXe61GxibD+C0Nqz$k*NfEUEXkqmF7w)UJf
zXyi+`{50DLv#@;+^%jI%Uji}8FNuGoX9P~Csb8Ty41xsnd2zZQR>)8C7jTYpL-q~m
zM3A^@U-8M`;;xeuRZ0uU_5Etj&l`uI+HFM87^JO@I##)+AQM378xAK1Pqq)I$K!7g
zd4xPuex<vkt{5j5zHko{SmPwzll0UrdSkgf4XQ~TbPiHA!gvL$6S~C9?i3EO&Y%5I
z53X#gA=s;r;~D^z!LfWo3({0krxNIJKA|H@yi0nb@XMOrdOiR5W)Pc$RDefud=J1w
zbx>OLNb!cV3Xo$BG11WddqIX%JkOFo3U-Y>Edp`maQ^y<yIVNP^*l2f3`UP7X|ZxD
zGs;1j6kIM|+e#4Sx<#zig4iEgfEdsb2xE^VAhgz&ISgT#<1!_^ya>72i@YxKw2E#v
z6S%8)P(5*@;i%G?QOp%JKP%|FyYu@Fbx}QqYtV-meU?-aixw*n4K5VuW?Pfe=>Va5
zyN9klEGfbS0(&P#aJS2_%T;%7rZ>h&uc1J8WoTYqR>S7naHQ_pFDu2u@XgabYxY#1
zR4t!uZRqt)r;hZX55nlqc~d|Vhp+Cj(1U%#a6b>W#?HmFH#bi&g|<Y2)Y<1gT@OGt
zO<I#>(o1H%7ziJ$5-BGp>1pBOiY66Rni9XHX_&^f@`}bLi4j7L`RYMJt7RTqHn0vq
zX>_LyPfD3YbG``@w)to6dRlrOtVXNLk#5ba1%UQp`>RT>)vsUw8dzCtgN==U0&D4y
z1O3dx{WlX4dmBf+f9B6tG2_zxv~WVtuVHGBg``513gGZ%5UMfaaLQmxRUB57M9zlM
z8rq*O7YhXqv>59QUCYZRoajQd{vtvVHJf-U7-ZbGAngc5Gtz!@vJ{asq<G*=w9VCv
z$|KNV;7~0y8_E;g__>CAURAAeK@EomjvhlS{H^pc@TXVsJm?}86s>=PP=`--!Ls37
z*pZ1U%*vht68i?ICx(_tN1;e&xx)e|<si{BGzLwu?QF3<esyUIj+!$<@2@zSS0tA#
zzRA?t8f;WiXfkNTiv2C7*=Um_dvKz-7~b?1k1SGLBo7QXV99YpNw%`V5xH#RBTqOq
zS^^Z`1yvFmN*1nD?~|bO$=af-GqdBF{`1P2-6<_SkwPGwldHqb&z$siduJIRSQ}Z4
zWe9Gfgj@ouRlN-E1&xiG2(FR#*JjRpi;E$k{BOSb$1EWh@XH&!WW+Eqmn(Ulep5^8
zrtvFnLG+XLGxWc1nPr*ZJI~K{>Hnafe?Q(ixR}}g1Mws(j$5zO!gZWeJROXb;*y+9
z3WuTB`k{ka_RIZkO7@LaMga&#8cED-c<fG=Cp?qG(bpEFYGvrpBqCW}hSBWbk3CkE
zc19iR-07zCH}D4}<r^XT69CZ?B#GU!A~3<|=h371bAvsEjmbvj%a8I7j9(QR3g_2d
zT+f&&^7oHjAf6rBN8E`8X&|vu0HM-jbaep!94(2wvQR6d-5$SU=r#SikPDO#CT)K9
zem$qmwx)Q?lW(b4Y%VTW78}X%E<WGjC>E|85Lor^tb{|dV0cp1Aa)bHHPN6|NOCk-
zr$r3nMV7u4WU^B;Xf+s4R3U|yIisyall=tJg;2?SvW=~V-J%(VmRp`?J&hSMO6B%L
zubQ=r>~1UPa-DQ1S|8u;%$s@pKNVNUuvX5OWwTBigVI?FUeBU_lzoQU0xW~ggVe$N
z<O#l1h?#ZA;&BDdn4jE1IB6&)7qr-pr75LuzG>`)nm?0>Q(+_<K?6BR^*mFPeb$;G
z>$kp&v>Aqj+@P!>833RAkuh8r9XDz9$s4;kbLdGt>nbLv5OvFLd9EB5lH)#Fd<U}*
z_@lD1U`$NC4*Tn=@9w%5xtoMNWHH##A4%H*Ev8tPM8lc4WL&omvlD2%zAwGlvXg3;
ztu_yBSxhsFK7&&)gqmU3W2TiY7e=bB?RDL^Fijh`ykWDF&xN|j>GuCPwPf<d*-xXG
zadK=g3;d<HL_@T+kt8>2>6}+w+f|TQX>ne9j`n>7ke(Wy_yYJ>Q-u4}lSBVeB~bcN
zCHVJYjH90Ik0EBNY&+~R!+9T9uW&N@EttePzsZu$=LfXYJK&{e+|Nk|BMR$ES&lXu
zv967OZ)vUe(Wht^dxJfhKVDuHf95_^S991x8_ZCG!~(%C3Ws&SKsduE=Mcb@BFNuI
zD671*0sMCB+e>MB=vNJ(;okUDi()n*mIO4;YRD9)ia3R>h>C)yreWW?kNhTVc{{1P
zQiqzNncJ&rnp*%1KwjZGVQV9f0G2wiDSH4`u4Dy_V80Vt+l9z39~jg)GNVx!470Cs
zni&lk2hS)n{}yHT`&^P}2rCP$5`Ke{ucW}3|A+`SRot!U`378%xGd%^KA19;*8HqC
zV2QVKG-7`_4$+N?<^a57u(EY3OqN1mQsYa_p>=F`^enbzTkQ`$BNQ-YWpW$WOFPiZ
z0)BR(S;zI6=m9qNK#?eIOb5#aYNt0&|Bgm3#Dfyy#toLe{&qb?&_?5!q<8>QcrH8+
z;N!gSQ>5<XUIr}I>p;%}#p9g6<ZKw_-pXnn9R1*5_E?O3(k?V-Z4N9vf-LY&E5R$j
zckQ^DV$C8@vjoarw=sV27(!09JITsjxe;3XQzi(n`}RGHAd)0la#43la;P1M)0R7!
zxiWIu`zDk*HWpy!YS5d{$w-k4;tPk-4h`U7N;)tm%roencAO~ZGN*j%T9_I_Wpk2T
zjPO5Ep)@R{Dn!oM#->Foe}&Pe36QIQ-{kii#ek93<l)I_NT2c-R%vsp?(KHiMn&=o
zR5(jtxXI>kY$=ik<Cc*d)gUQ?7PgxTKr-r=ujh2S8>Lycz$n5C8^j*~)tq{Z+Pc$M
zg-iBb_x9f(EDyROOkf{{zu$U3y?p3N;`l&e<fzu*O*?>29;8FI8mTR++fT5>doG$J
zb}NHV%T{2QGl(etJy<8aF`#B)_n$R2+=a2|SIF=fuOCzk)nq`ke>tuBw3VcKhgMQT
zQ~t%dG$D!!{Nb2K+lxoMyqQHXbhJU`b}N+!`kv5FG;tI?-MeQ%>kZ*<>jtjXOiMSG
zo+Xj*z%FbvDJZ$6i$QFleAvhwj#l3<nRJV7n^1x^u;NlHu#V)2Tq<(;vX~SE0ZDKn
zouacsI6n4(tCC{A_|bPUHb{RI`I1&(z$ikg9?G@7KLfU(k{2#FIP2)`Qt^#*%9>YT
zH^9IFCt|()x%$Ru@-A0T7|3$v?)B1i`=I-aRr{r8Ga_|;MRj&UC_miim7mE?<<MwZ
z>%J_5Vpw>Z?(8X0kD+Ghgf&cWCC?3&xT=ysl07Nh81>{y=x_JWysn9q_5Ax^QT^xJ
zEM6XM<wPs}whY}ORR+rQl_M~!7nkUW9K~rND@|@5b6dB{`}j>uA+weGe;0KhYwzE?
zeC(H=`t<8d8Q-Kf$!*V|ezc2RQvGf4K)hlhNIS>NC$j@bBx83s1qi`)z>C<DTBZhq
zgb^kIAl4G(FwnQyouLT&d-R1=COfjCi~6k8c4o?XWppLgQ)pwei|2}6PW1g!S1%g_
zcNZv}J9OJz)1<MtrcJt~u7gO%Oc)Lx+WvMnk-vj$!`&J$TV+~Q;;Oo)nIE3RFg2Z8
z@(fa3*rl_vUS~RjO<Qv2Z|fc=pT6IA1jb0eFIyBNA8xun^#<vYG|uBrPken#Swf~(
zfg+P#9q>#~sO;13KS~1YO{f_c`yxtLgY$j+X7JH6od!6hVOI9ilsT_20jaCo^bz*g
z-Hpat|4laEV9$wM)&BAlTKz8yrMUlPhW5{njsH|4ty3+>0sl!Bo`C;5fwcel+RElf
z)$N~Yf|ku1Et1!Bb&FT7FMeGo0$!v1y)Pp-qp2K|(ntX0XcB9z1ER9h$Mb5`J%B*@
z5h!5S@mq$6C;uqX1j;mp4@V|V_VW7bJ_7MgFK;CwmHkFB30+WGi#m_D4u=($m_&s|
z{b2Yu8M2zz&9ThI1)Vap<QI$2(X`T`kXIGbrdPk?wUcf7>4#ZuYmnJonm}(V2PQpg
zpXBwgBvR5~QA3c^&0t()wo&{X#kB30blD4s6!m~{m_RU6aUm!F)oa)aASB^eFbN*z
zi{=Iotp#EP=nMWfgw-DU&{lLM09ekcS)gSrub>Q8y+CGuVb1Zr=dLS9-*JQ3liT0e
z91JL-a7Kck%1uB|a-l3kCrkk`;a-+n_1KGr!4VQ!J;VCXh(PS+WtA;QYEENx4a~33
z)zL<m@!D@&6SL>fP#6Shil069f@OEco3s#GqLVXmI{~(P{=V{qrPe9@0jRKsLe~)Z
zfs52km$LwGR0h=;@+Xf8DY2J7Vj(w$<&Q&7B{4b6zosq_QLtPj>>=`T12_h6AJg*B
zMedn53`-4uiNzvb++2%YxA|9x63XKZ`kbh+bJG=!9akbk)9%=H?Dx_jPRaFw@Z>qJ
zg=Ut|*E1pn(Bu3S?@M=(gH+6mYSH-u(qDfZeZ(1mb2_z=8l%o_h4QS_-!N1g$5G7B
zNd0;O{nrD3j4sD#|EC7C`NN6)ui?Ufn3JuInYE*ly^-^enBb39MgHh)?y>$uXLG~L
zEN2Y3Z5~ZdwV>3rKuCd`F|bq_xlB?Yw>}hW6~@YC%xBx;_%ABz<&obK_we#_hKEBv
z0if~xtl^c92ey=P`0M?P^KYP+)nA_S*mOcdBRZ<E_Ah$g?^ah!vjNwpp;5)#UXT-W
z2zMkdC<t&UGcAI_&GETDHt?=RmJPMnEa;caf>6R=N}vl#Nt&`YWQlNMV5jW*jKKJQ
zv^kU#=o||ru$;;K$3Byu6DD+30bkl%hB>c}bRP`Uhxs5AA7WizR#wr);lcb*B#<xc
zX)pb3x>IrTE98k|+U=Fv_<?L505WSlqCG195@?Nu_~h}I=hnyblgH=Lo99<j&qec{
zZ<dbN=7D$DpS3)E65adPKw-A#f%b1G&vuNh>D*cJPKz)?b>Vvl+!*oAriSD*3o49C
z#%5!I_OoknfcU4NVyO{|4f&C#(38m_dJtPLdP%|eE(v5UExy|j1zp?Z9p8;*<WpKz
z<x||VO0mQ0YK`gz!Qa7!ZCq#V9hN;rNMN#=@XT-$4293#z!_phb-Z?ZOAktNDB`Hd
z5zYpgwY)+Zd|C;9>4l7qkp&_y-Vxwg$*a}(*tPYb$H@9ZjI#mHqG>}mQeI#bc+6^f
z4mQY0h!Xm1NCs$e$#BBVE4Fd^*>*>TjR8b;SxHp;VgpTzf@N;_BY}G|)Z?zj*%Fqp
zC__jHSz_ubs{A_g_@aP3#pO7RvL1qv1y)~2Btoz-+;4;0@mJ!YkNNAZNRG10&9;0_
z0?CV*J!u1RC{YQR@mrXng8|_I1G79Uvp^e<4>vbR-N!U-B7{~=oP6^szzwH_b9TLU
z>Yw+y=8t7V$MdP-Nl&kNfI<QH{owtsOj`(B+r3-tbALwJru{3a+mU^2>DSd8<6rV@
zO8TZ?PbqF1Q_F;Xv+CXTHn^#VMlexv&y~UMmKf8msruzkl;@3+*hO6S8W6`OVmn;o
zB*|6fW(X?wPE+k`-txY{=M+HbY!b-=I~jNru`Xrx_{+C=jY`zFe0Yyja&h`^<|M71
zV4tS<3-2;86`JHUUVf=Cd+AixJl3Mg3^0~o<9BFmx5jTor(+z;SAISxRmTDjAy>E!
z&G?K~RujTF9GRw*F$m`qVal+&58NZG4chSPhP#9+?|);El#BttEAgwLBM5z$S5BOr
z+D^}Pq&6ne(RlOjxeEDrSJob3ZwWt>*8ixb9Nua{LfNianzEL&zVuOTIvhKlXnX0^
z7l2KaTqqGpr^{ZuT;?hb7(mVzV+J?wjH3C#Op?vB_Vqf}j0Kh}Z+?8JY=8f!<3~5F
z=uh6y@l*KUV%7hM7Y=6DCYDD3)av|4xKO;7`N686SKWQ@{0a$$7ZwzZ<RPj=rsYh&
z!~rp4Rh7*Pr<f!Wd|%I*SjQxpO`c*N&-Tw-ubB?Sr{>Jv9d|f?2Pa>XhgUt_5IMDF
zk{=Sf5W=Fx>ul4>i5F9nR+VT!(OabKlMiGMtNt{5Q-I)?(SLp9C4!}b;Z@lm&%d_%
z2!(;;xn;vMw?Ew8YxrPS#4P6EF{X3`Z%-cm32*;<6J#Y-CH1>JcJ`JocbIWT4uTCV
zQJ(rKb#Atv7QQr2tpvgBtDh#2NuIs_hq-BjugD4SI5<fBTVdERQ;%tiN``9$h?pfO
zW_!C)dhLaS`fVp_4rRqO5Ny{1rP#O3ajfQM#T%!a75zxwFy^wMZ#Mubz_u1-G;!YK
zO8%Yv)h0DWKgK{^0@@S90k>N5Oav#=eN`aa#j4h0gbUiW2I-LjebzDE&`vPB_laNW
zsplfpvuf5;Dzk3z)NDP&3LW&w-vlfkT{cF#6V}SMI|evW%<e{mV0ndn5CuP$1Lb~u
z2A!lpdt`4V3depq!emA1JEEyT4!>v6m`q);yt-sxqu1k6WTDh0qRYwITr@h0T>Y5@
zRvSt`zv;mM>s@j90ZQhJj_tez=nh(T+(UmCmSA?Bu9q2CBGtP3hI^OaPjZ;b*%}mn
z@74xay$i_u48W@NSG(dL@f$0%%cZ~~`iI8gA=WS9!5T$HxX<!7ps9x6Z)=qNdU+ni
zt5IFlSzQ7p5DG=1Q}vsOBY6#<?8X@Jlu|#_IN*EJAVao_<m;0CxAr?W#7_jCf3scS
z7B@v^7B^uj&sIrGDv8)Afj6}=4m_RoS<;rw9&}qRK8dYzBYv3tHnNIvbyW+JWNR9p
zDFnjaJ$Oy~i`ilfdfpmu-0aRUt1^%CuczZ}m8eqL&*_Nu!$$kB)oB02+W(iGE6dsZ
zDD`<SSGRNy*q5<gT6FwkqBnqyVHGY%A%!B)EvTQADq;+?M=$ug=8!KC9TjHbB1E}%
zecp80j%B9>KiyAW=gGc88K*g&@3#bJxj_NoDzmK9s!UN_o>Av1u9q>}i+sQHoqD=?
zal%fKJ(!}``M^e{C#I*&xO8r6$=nthHbcT<CrvnvX1jc6*D1&bpBf>!b!%tTTY(>J
zZR?2GLBLMqztu@cH#-02%A0GxlV_gb{F0KGr(8FxNH)pgt%6h)#BpwiY=s_6rVSzL
z1YD0Djm5#CEprn?-zp@8JI$NzE@HHCMao`VUcQKeXxmp-<{H_k0(h`^!8CEp$Sw^3
zha*9AklPFJNe5DYSWr8sBM9bHfW0}K4jWVX)6{*@A`ok#YL|jjvcZV!k^{q=NtZvX
zi6%Y*IdCv6cmNpl-O3Z_md05pMS}-Hi6HQqOL$YJKPKv9qOM!&VKfW8Nodtr^mlGq
z9Asc!mouu$^|IJB0Rc=?3XKdV4-}?VNkSc~SkZRUJ&Azac4N}2ro>4a`Loi>S#<2z
zVZ*cB@-Le%E0KD2y3wbb9~k+^_{_BLWl^Z!N7&8Mqk(K?2~}f>RGGkj!`AOLIyK?q
z5sYGw!Y;7t-To0eyq#JN#>vFYWQ|EBkyy7vNSA}<l2c&y$;pz)(+PxzF~CqTlvgM@
z&$W=pnG?~<S3C)AiD@RHkAZ*kS*e!=^L`|B2+0e;&UT_FdPf(ne^BU`hkVXT8P>+e
zMo+M;DON|K3$dM~t90Z%*`c}$KE?yTC0UTJ2tt8+`<HXZjbY5xW!UdCj&ZwfX6{X-
zpn}TsM_R3J<Sy7XL#~YzYr|F-nptpN2qf9IT@Yyg3r3`LE4=2UVyyCHNrcSG;K10G
z8EecTY!zh`kkiiK{PWf;-I)hk91_oKuXJta4&D&9kEQB9b3NA$SE7dwm5*b6+R*Jz
z$mr6XPemz-_;cmq26BzV`OG}jKi*!$NINdt6g$S^m{{&M>y%j<(w?1sm0q10WJ|KE
z$m=dRiW~<g83)8l3fFt_wEOj-%~#fbl8nfu0y<-E)#Jy->D-`gtJc-uw{WUaAmjnx
zYD+b0o!IIPN5<?L*JSy-Qbx_~4EPnE(MZO$ax@vzh4t~8$vuhjBGC2k9wJKoV<Tb2
z$NG>2Z@<t0Hn(Z(a2U0Qgl~M%EvI9DYUDE!r7xOmc7O!a3#4@B-_ZiYsLOBf`#S&X
z@3^B8&SyXVe)i+<RR0Dv`=`JEFNCGMZoU6cdCmz1<xz6`rk<{f<w2CDaA>$;J^~<U
zf7~3RHU08%KKanVh3~ChAp|0i_EK!i5Qp8}j8uXsYHH3FU$fL|H9o``BjjS<FyOm7
z1SHkkazb~~V$pSZd|%$NCbGkt{fYz0C0qsdlo(!-?jp*3VhoBV*#u@BuiU@^;0(ag
zy1PW;T<J`D01I@)LjzjEhrmH3Ee1Kj$<zxIS`5O%F=<IrQ#<eQaeh(l!McOD%qt=)
z1c2oyT7qd0JWS*J)w3(MHtmVzaxmhX@#FIHT7y)rZISLx>EkuVrw%Elfw;s#vH||w
zS+q|F*ZW^MpD1yg)a72GBtH@qR*4iH$Eeksicd(833|80zDzRSGz~VUDnPO}CsiGd
zy$J?@AYM!y=~9hUBp|D0xEPm1srIR?pcm15ZM=j`Bpp#{UgeYybH;+AR{Yk)H!qA&
zFj>P87r%)=`HTQ-e2TaU7A?<OYu?qxmHJZ@(CsmbZ8-YGU~IO<vJ||3g}a+}C1bYl
z=(;;q(L-@1op+m3Rt`sq>SGDNZ7=OW{zzmVInUZqEE>VKaYEliH%c-p-D_mq21}8X
zMW12K(fOUPw<|qha&1gz=O3ECeR7&Almv$c5?yJLp^PtncI3(o+tAJ&v2vW}1m#t@
zN){W6EKwT7;rZ~?24f7Bvc+<@*hZIQOB)S_+qFBN=tc;$=9Pd~KLDxF&q0;uvi8ih
z93(jl;!E^|c1x0T=9EAtAdc$0?13K7=S1z6WHhn$qk;@Y?V4R-ZtyY?Iscsteg7RA
z#Whw^{}G*b@+v2`MELb?l4(Sb324L0o^f;tsT5{G4upnSVv`WAtwMstR8x^z)kM)1
z-lC9F!xa6lEY&yTegkt{MffCsZJ}AF1_U&Vg{*Y21Y^>aENAu|66Fh>P%?=;#G0j%
zwvk#37p)?LCowa^9B~KJopV<dOOf0OlfWf4+zmO&vU1eS@G`uYQ3l&575(61lNV4&
zm4b1IgDhqi>N#9`xk0fLG*AUmf*8L~4g*rI<gjsK^*!h<x*wsJ#sgIHP5~RtXTyr~
z*H$HT!RAi}_1wGYV<YO&gO{YiHfu<l`D;Jkym~lH3iE&s=_bt&>D?Lx$UAUcrl0am
z4sC$CzdUFf@P#pi%h6!tye#DKr-SwMm;Fq)LI$CC33>78_H)Re4!NA9l<zv86fYJc
z(C*TOMbz&u?E0ixeF_Ce?+?}sXgB{_k*5U`Dml?Vf<<_0kUp@<xc#4Qzr-%9mfbs@
z%gR-ISE}Q8jUWU67(_40j8pC~MYpN1f2s#VZ{d`-<$pl_YtT3h^@k+<Y5OVvk*vr6
zzXlBfQ9fxAAxRk#YAeG;RSBB|W`wTkYTTW0EXn3qI3atRzoWn$ydB_iY!`iCOG0%k
zm7(fqi3{En)!X<)>zA9D!pYvE<aKA|W!2ng{$3jb&HYW=ogOZBcD)BlHs{Zh_PH$l
z)&=g(dN}%qI779oP8YuOUC~f&Bly^$P_%ejn9izIyZZqTPHrB0nP2<%JW|8AHp|QH
z#%tLh%n!lmT$m@f)%$k_65Ub7O`S!@)z%6-fB@agG1NF|r|z}>YpP(m@|+7!f!e9!
z7MYx7s&<D49c_84++5i2@T=S7_!ZYH0`r4kevd#HwNe#gP-Y5k%MnQW=IjxcXJ{MG
zQUw<K;37{o!%<!>uXH>DxDhK-6WPQ|kBA(RsLdB~o8(#~_n)Mcy_Cvp4zY?>nlaQ%
zxpUIsZzN8a6q8DkL@605w~m}o{R0R>Hx}EDh%nh#^#W2X(qOTVp_?CHPtxv9<W*bR
zs9Ijt=?s9&hIWrxo62J#K#yanf68SSqvVegnY!+j)r&I(hRaF$4;$u)hO*N{#(HwU
zoA3%0?q9Mdw=FlGi<#-8FN(gEbBcrQSs`-i#VSF(n*bl+{)UgeuaQuB)gUJW<jJDP
zgQ#S@LBoD>wJttx{>DkS1N2X9%iVUGWGTxWUnlf05L!yQvrKG}R=4B5A`C(*kY@)O
zNML0j*qMp}_exH~vVi}xY{TlM<HA)knc{W?7#`Qq!*XG+bTq0JA1YyAL?vR|;S~zR
zH<OKlYhA>i(p>GeD~Mc$89rs)*;`Xh*>#LaB`0oUI`U@kL3#>^-&Nezta7xj4LiU@
zmC70MWmc4z3nG_0?}7GrIhtt2IMGek;4U;l8Bf$%Z~S>QU*X9?=PDjNYUMXjgYigp
z21&^UDu^g=QY2|P`5dP=weCDv`xah`tcpnV%gtm0pRyGgc9vrwhf9BGFXubH`|zZ@
zsUA?r!o`mzDCH>u%>x<43$wz=ze=z=<BOh_eq)^PZ9)r*oA^L@fGG$FrYVefJ$?ds
zhOdH88fo>ahoDeUH-hO_KF35<ht7r`G%|*$hO_UnvBBXPYL6evL_ilir=hVc>}|rg
zO%jY}%eYYXsA@W(10Ym5TGfWZ72e9ZmgXPev5|x0<;?YoiD7AGwk|p5;)I|Up^-P~
z3SHH#9Gt)6umLLz&REo{SM-QKh@n-C3Lut=>jln%y~QUqw0R5s0o5^HL!)lRF$;UV
z^qMjyZUmGM6XZ2!3Y=8tbC>P4!>zF_SiJ~PksDS-bk0S&gBE>GF`12+HSQ%fq1k^3
zQl^Q}+^nf%w47|zkr@d`KE*U>6(P~DP_&1yXx<RYWl|&$b3h@~5<~}UzezX*@f)Q_
z6hTdTQI)v&e-IwPQ=uGGgzTaxt{b7#f-AF_wZ+#Ew}?2fz|gHNle=G&wG%s!^}QJz
zZ;Of}RV#n90*Zj0v@0b)^UGZ|f(a5-55OvsOGk@44vp<CQT{83OdA0=>#sWQR*!6l
z?R&JQdxIoUNFm!;&`o}$Dgt=vBfw4}5f-J0Lm))UyWRzSzqaG{Yb$;TCbf^@bAep0
zzN#>Lb<C8HQ<R4cvIzmXF-<`2ye+RaIA=Q5E_gngMjJ}h+Nt%3UI)gYYS96vFKifY
zx$Jtd3_lRM;7k(Pk{7*a0d?V=AHrJ86;gM=Y&Egr6nHqbQi839<&k&J&(>3U<p5u7
zh!;_>FgzUDjN(mvNl}}F1PL6Z+^WD>_%wv`JFR)#G<Cf(!{R`_R1&3?GqYgSd`bLp
zP+V0*4O{DqUFc9eME;K8IqFQ2)QuV}J5hJ(w--wnX<xm+7kn@ge(sVmp<)!6X$x?3
zlH4B(d2;gGF%Km-!Ez(<w%>*PH3cqGAwFs}g|an+0#l>d!urVi%OrCcwD7GnXqL*@
z0HSRHjbjE)caEm`gEppV95oxHj_gARlo0T&cbrl>QDaJM<SH0f%yUyP_0!oacHGvJ
z$AeVxPFmF*F!T2k9}YT}D6h0~<3#}iQ9iwT8OzNS%gxmYh&a)V;dkmYb?dQV#e>jv
zYdu{FTIpA=W411}gS*k=c3{hgbB`aUc9F_mYjrg5MJ4Y?wwNI>Xq6HMA2Ak}Zx5`+
z)z@nzzb%`LjM6j2>hkh8R$CvIQQA^}g>mNA5l1Cz&{^z|T?6me?|A62CMge+o%hsX
zItzu)>3R3su9gSXdQIlKPv-6jttQ3yB`vwb81}l2j^uUw_!kkywRPaDi8aW8W}A!`
zJ~mZTv0!ZXWRG}%e5@Bo>u`VHMf>=?ydM8ajNi-#9fy2wWR-uOTNt_Q(0cm%{0^GV
z%G!K(M96a4?CLrgiS?mwg`|ogh+0ohIM%qozo<I6Gw|M{?oaBUYQ7JTXfEaHm*h4u
zX09tz;+bYW{OgV#$d*<J${ff$>{j@^Py=fz4Vekx5c*JTX1RB9@j-o5nXH)c`Y6o3
zT{GVP+BvzYB<&?^wUP<(XU5#f4<Ksz;^f2nfN~6HD*Pju=!C{FS|OA@VOjS+3bI?$
zgEZLP@`?=OP#WCG1N&MnFgwvjdB$PbeL^#X=#tA?2bGHE>CusON+ikI-{&j*b>3QA
zZ~1uK>;!gNDz4Vu$dBc{djz7a*VbH*x?@=|bXgF*b3s<G(2ZtqdL`I@cj@_-tb5kq
zgZv^RKbi9YTr#tDqEEAq&DZ|10%>|HoL3_C8W&Ux`+Lxb==XLIfL@=<@k^=$K8MJH
zAS5>w^sVdC?*@tW7l5GR%l7|jbQb3SHOFu?a&Y{gE%iSy{U2@l1pm#KKT6k5dY1pA
z;`jfx0QtYSfS!Yc(f|69|2f%5Y<E?_;ioZa@uzyo@c(Na2S+zcBWeQ&2dB7o>A$>i
zLDz0!QW2%fISKOSW)beknSZ!@`=<JYpJI$=vG>|JF!e3UH)<w4zj^8>IKj;toC+Er
zr4BPjjTx#EE&Alo>wcRHBBH2Ig%!CSD2BN|-<b1mcFHYoSaaH(#hVGY0<B}&@2ml`
zxdLZv+WZy12qb6V)cDQZGgCATB7gn&+m~j#Jfp%3s&3PixRfezOqB5i+NfeVavM3M
z&K@mQWcCp*mLDW}HUs6laIsP!trgH0Z*3E`G;nq5XcvJn)zO7;6N`k~&F>8;gS12@
zt1@Rr<!@*X0EO!|C6))JV<pua@%cNFvKRTpc&kj`9N-(4ce0FrQq?~6>sbkEX@~VL
zAbQ7dQ@<Dx=cyXf$$3LV1Vc#+DK9;x8YRHf5Gwfm_a$vv3z+-doaf=|XaWYP5zJxF
zvZIV_Xj55CF57`AGdKOf_d-l$hzpros~fVEa{9WcsRLF!evM)gB5Tqz(eJCI5hbnT
z?SD;mOO8_dX@B;R<Yx~#|Ghmlu(A4~og3-=6DsTck9kd|j#ie5@=_8&ba0)|DiI#$
zy~fvV?YLICAg4)d;o5{!zgg;DaZ{bu2EMJ^Y8$nIgL`O4$J3Kp$gGbZEuTBocm>)j
zg$LR2k{7}Bk<df`?xK%hl+-vZDg5q3=NB+qA`_D$yDb5h4&Fn70r+GD+q&}#FRWc<
zK_oM;CBI7$5z1;q@}PJJF2zF6`OTNQBOCMB6A8S0hs}C{%vW5324@JH=LT0$0dQO?
zAj2i$<$p5<4@@%_QOj8sWD%KVX0+llk{1A6T6J5>IvDFQ11L_r(re$so}`TF=t;*B
znz^A<qfSeG_yRhb#eQh}0U+;&d9ax&b5wq*-=wj4zHHQ~)wyuK*-zjp{bjgrdoNS<
z|1kDW;kiXylW=U?$&PJ1*|BZgHg{~>$&PK?wr$%^{+#on|L^qE-RElEtabCg&#W;<
z%^FqE>Y4I2G<8c|pUKlekM`eVz2b~}29j~bX#<F`-@E@Zbb#l3wY>lQ3k^R!{QsG$
z_zyt%&tv^hijwvpKmE_G-46}_k6SypBR`=AS}VcywSqZje$N#UBq=Nd?v^QQL%WL!
z7X``z-)-l)m<B2{MDp85o@1?Tc(zwNpU20it2h6HF1h^xqer0ZD0m27almZkILGsz
z;)ml)<8P)*8*?3g2}{WPIW^fZ`n3R&<<<$WY!f+2z)zD|q9ovTSAQyA`B;m2A_Ymh
zR*T5k>?g6_9AkM@s(!r6zS}w_1v|Q^D^Hy#M~-pSFW1AyyZ{mv@lPS@l0?pKxg7_9
zhY1=f#WCFMaoBWN(oD@$_fyo!?%Tfr<9OPPX0YI+xs%dAX3++x8KdbCK~fa3cUl%T
zlG%@46AJ0$2zux2X;}($B}EMf>ZFfWV!T<2(?s#V*~enNxFN@BX93cNz%!i9^L|a~
zDNHUo6@hUnoA6E;C;Q>WL88ktSyE=fj{X9O9MQOasE88-6Kjl7PiuBxu92~tEJjvI
z&Ss}l7+V4OzEj2nF529>yA;!v#uIQ;(b$jDP3-C5NO>C4j7%vo(lAFn!y7y>j)Ih(
zq+v*+ql(dahR?5@EUlHdbMpsv!MSa9YJa&IF-K`qo7!B|($!S-e~f^TzvX>SvYJ!|
zEy1dJKItIZ(*HJ~(WO64cU{=oGO}6yF^T{>vA5KRdYCvqNFC}=vhF^j0z4!TYgSU=
znr;MOBH6a__3D<B+iCcag}8iAjh9AAwW;w7ZnfA;hY}{^ad1J($2X)dvIS{eUPFsX
zN*ez?6lWl&qHx<Sv`)NE1>IHWG5BIu5Pf1Rz27*0ZZ>b1=bw8Mn1-l40`{)xr@ir~
zk9VLeFGSyl3lRihYS1&3o|P-qL}a_a;Wy5;kP5_rS!%))WjMdH8+5P9PJX_EMI8Ph
zOm*E!&>y(w^H{eCP|r)GzkD)q+A{eIskm$Fkthr8Q8NR9(QTEEsnjKya8JUx(FjNN
zqB9Bx;kD=+bqv@UPALkGi(aO=+~19_9iD0`Bxx)5Y>MZ0Y|BE7X4M)U?iu*S-TxEM
zfTe;Slz#ZWh99Ll)xU>lR<@@9d4_sz*4Ys{kEx0-@{smsAkhHPno#uC3oi2_P{cgc
zoSyk54I?0h%ZQDK$?vYYP-rw=GXDl!OB{IG{v<)@KOMb2^?&l|+UDLhwsDTW0Sdc2
z13ipdJOG7DsD<#FZeQ_be~t!AYAmGI7Y-;JR+!3RT*@Omkx1$ulF%CanQo3lXoNgX
zpbCbi^=V}wiqUkUlw}Nj7=Sdo#XD<0BX`n}JQArXaX9)^&M1c(Rn)Ohr`a83V7o$h
z*i{|7oucY^qd7+<^R-yvkjd29Z|Jfz9eM=N93nvpOK?DQAt>aNWZBq5#~M#jVzOe!
z)enLOOj%7~$tNq&k=_iu-!pHv)EKvmoJ3y*Y46DGI+V*vER)w}_eiDf*+Zd@2_KT#
z+2f(s+smy&ni}4jpBNa{*30izXj>UiB3){wEf&NZhj~CT$#c_Im^*X$HHWeXRbHc~
zU`rA^OR1+VJ3pIaAMYJOQ(?nTp>gbcNo`YRi_@@VNjBHR)rH`%bZ7DC?YbLAvH5Hg
zJRfPSaoLWVkLYim^-1O@p!i$`c~elQF0oaTEj)i0c}6%ICIGk%uo(Y(k!btv^D^R&
zl<Y>baVg>3SR`=13|Tv8c(Zk(P=YpUvExH_<9F-#rn?l*l2V185dB={pcFGkjkIE(
zxeN99v)nK?C(h@(am1ACfFUJHQJRI`#?KTo{p{=8DzByp_#F*x&uv_D@81{2I%2mx
zrR6F(`U*iit=MNjrT7%CC~CUDdt2nJ9Lg>(mCKgYg|dde>RW%JS?)OqPUPJ8wMf0`
zpIuDW9tkZP8s4Oq{ug$4hfky7oJ%P&G?D$n`UDsl9mub2Uo}#W8$7Z~!FMpMP^yAQ
zLmNSKAIiX1QV!PX++Q(7e2YZ^eX%`J(N@X_=xoM;Y=<Um<sOlJG5O|2)2)p8NTp5y
zLOaSQk#8v^Bt2aaLq0{HTu_6eMDx%XyzxZq!xsAlC(sPN!;Bn?X0?Ef)x*94r9<}Q
z1i~I8vg>a5?dY>v7V>aif6WE(059hw#En7z0HSGq`d+d&s}dw7#NUaF{r5ABpIMTp
z`hFI=Gn4;~$Rq_f&H<@DycWcYHoW9q9$&`Ss%x(mPBleaW83(v@BciU-E_TTtv`oz
z{fAql|Mw23wX>Czx!q5*_>U@A_@9?>)735Z7?i)@vba$&aK`y(jnw>{C{&*FPJ;cC
zr_hkY7sSS*RSvqZ$wlHWIMw_h0gdju-mjdVZ&P34Rhw;7a`?1<pHellr#;i54DNxP
zq^X{O9u(HVc@Oc@_;S3bMM-NYrPfvsXj@m9#$x~DjFLg?nt<9EN1JXM07d=wJaWhz
zkkBuh1Sv??fm*aSaAEM1;2tR}eT(8vj(@|WE{o*YrgS191f`;>Vj{&kJSxiaJDz&v
z)$s_5&=pqBJ9M?-jl!N?$wMdGB;@APXr=fxQlrxHe0l4Dll`S#DZ~|!#Q6Gom|gka
zhuOjVZSLDW(1Q(g{Mg?$YBgJxv^traDD3A^!<&tB1PFp6gshTcv@Ppd<2pW`t;g&A
zHu1{b<kZC|{I29DX!A=|sUtF|2(omRH>s+A8BG8U6Z)5WjFxo?$vwqtG(r0g(aE{#
z$sb%%Wpb-OGg}x6I@DWiW8)f#l`c9bIJhrJy>Tl&<4~ubv_p{8ycu8)dA+PyWwu$9
zSbyPq%*><>^U$zC@*;ZH6`m6b-49Lj5BVU-@8T1+5W_?l{hdT0V+M8JmzI<e%|rVg
z)RO1oe6A_7ALOu)iAQld{FI555$`#nP5&_7FL(-++Lz7zy;e~TC7<3HTMMXnA7am$
z)5Ubw5|`G1Q;vw``6vl*F6Wxysjj>oYG!e;tt$9Dsa(Jw(c3)P_yLLs{(VgW77MRU
zH$m@LN8MV>ADCz<ju)3MOt_li<95gbL8c38-#mq1S}^m@h*kA~*$UZ&S|kvL?b3zt
zLhu^+8q%0`IBj#Cd+i*-StVkMfV*J6vJ3Lqmt;3St=Q(myGNAcfXO3LuCB-}KYY)y
z4Ek|Cz83%0C5s88F4sB>hIN&mbk3QWDQjj>5V)UNd=XR-eKmA++h%WE!Y)6N3!mg8
z*&tijU3Y?A?m5Ku4}_SZ#ywg%9L;UfQ6LB>#A^asWN=sJSQOZY%a%vR(%U?J5ehK`
z+foR_gO9It=n}~3C=2pQa!7v}RmB={GWk8Rij3av@%;X{e%QXg{pI24cuyFzK8p3t
zCQ0M0!&{#Vm$K$dEL$9RG&0T`BICrbo<coI1<Ndv6+lZZM0)c#xQ}^2uzSVGOwfPb
z&|!ck3S=W*t=f*J<X{w0I(JWD-nwQWgdTLnl$je2cPNLmtr-jvh19n1bjO#?Y(1u=
zWQAE&&9%PP>EH{O_cmPoT>)0njyFmbdlP2!oBqE>-~XB$D=741`+w^5B>w+xJK}$I
zx;8&^u(8oUL7-FJ+Hsv7?kii@Z*g+bfk?7x-^e5SuwAD)%jAglw4pVnQ|2f**(^d+
zVnLxHp&{ejCwGfvT)e%!G$Wb>2!x*-0CFY*->1XF`SZSg8KESWE(UE7orKp8$yzHw
zWatj!rXHe{a0gU~RH=1{uX;ODhgl2}vefcN%^ek_1m;Glz%00=c~su>cpB~Ql-Q+K
zBVB?+g12ilSc(k^tu}x{#En~UHQ*n+QEP{d28`R*7dXIRiYG56L?pZ?-@^(x{O$Z0
zN1y3MYdT97o7gV$_liRrNFt6Y*69+9xYwCPMxv&ZnBsw=h+VsjL|?4%Q?kyk&Mz|6
zfi7ka{j;`FrH_zuSCXTIuO-#$)bVB94QD&6xx}IWFGr-GRZ@u=Jj*CUn3=)0gqB0`
z!=E$fY5gUVE~PJnoHoL(;wY5$k(~aVsi~<p>5Scu;tEUkr1H$jVPBguYN^fQP~0R-
zTAO18`t4%*1gwZa^O9q%-yq(i@Ywgm)};+`%7iZ}v!q$`EK}HQ;7Os+!zWo-h%k~U
zhx%d)s|D2zCPy_$8zD>&bxb^qU3gl9%>MAi5@2W@g<hhlB5j~_Bqm{?kVqn_LROn7
zN079{K&?8}_z^@%wXx(-<1)4sVRI3Kj&M)na|?`Zh2^qRQFz7^jkKABl4#LeYIeTr
zkl(!1=|R&jJN6U2%On2e@VDIGZEkvvX$vD+1{x2vc)$w%TKU<44)ugbD-z$Z(@}>5
z+0;0hFT;bY^HN(4bnf+1TjIKRQ;hEQT?d^b2U#v7maspe^|#qRbRES!`#hJJ*XGl1
zvYtbpYw%lS+tAku*|)r>nE(CoxykmX>oEO!^BnV9ecEl>W5{y}eyjNB&H0}<e?I@O
zhwT8D??(CM*iebiGHAjfi8RXNE^b&&$@2iIK~CuaEws4uY+ERF7ZyB%xN}@Kz16SU
z9#ueM!h+nI97!N;>4cH#q1ttj+Tb8EueQX8WtxNsSbZ<5QVuQl)0$4Zy=W5RY@=F#
zA&)Bkb+|83VJb7~+6L*-aZcOGE8IA<+iJRb1MG+cHl%kIyIw6@B3by<ew9O-(zP*&
z%4je9cZO?DLo2ye+{a0)6`<eMfVgugRxq|Z&D*(&QQl0;D^1QP@K0^a)CC6R60DNX
z{DyWlkeICHpCM%h_~~L)y3ooyOs_KGD+9La(P{`MfY2^)=RK5EE^c728onKF-*1bL
zgNujXTRNTHFV~BQkK?{DyVYszsit>lG$OAT+`c*#?r_x*!A^qi-WRqE0-^$#5x5O=
z1z@nI#1b|<BxjD9-l9h3<W3odq~%B(F2PW03hiumRQFTQuaq&ZNds7fB!)|ptt+$=
z4l#(tiE_^jjmT5n7M2r}MF#887|$faCu=Wkn0$Iqc{@it!_g2Jp^sSm7u#)*c!|}v
z^TD3<9jA3`>k<w8+CsdYzj60zv#Gyhv1Zo^Eqn+OSLIeU6qXt9E=am;myY(I41G#*
zIBhxB%UDsp75|vugqlrocXpG8i-Eo%gySx5qqq`%+}*@D^iwKT(-&_Gr5zFq{;p73
zvs-C&VcuQZxL>&GVEUC_t2PMGR)y&oH8D!4Lj@F{zDar*c6aE2T~*>Grmo18ZSWDQ
z-P!fs;`aggD*#vW`TDoxH!Vmpao^}`)Sz_4ym^PE=FuXYTDl1;CC$ho4A;|uKQ`_I
zvb-N|JQp|gz3CEy>S5}nc|$Lg2}pvAQbDs=nhuIO_b%FI^!Z+e*!0-=MWmUjslb|Q
z?~+MvNpu$PG5PVjRP~O9HQb$ez^|4n=={;V)pt#PV_2MadU7vL_Up{=8n!opM6w50
ztoQzFwxvpLD@iQJy;%vyE4hHYN@D2AT~)dQY*Abc;f=6?v8#D@dEA}KAdvb4+2;-m
zPU<J%N)cXO-UHBuvhm31sP)<64+N$OW=jiE<r_<lF$XQ73qV@}nM$J5u-_kuJy74d
zvjKO918m@HP+H>*Fa}OXYB|y&e=llNJ(M6Ntj{swx)=d8z^{hq3fWwqBn8VL1mK({
z@Zkc;4g>e@on`;lwXatvE+Ot}lR0DZR*ubbdYlzN)<_(m0=l2Tv}k<#0|vib;cdRp
z_am2W;!CxiLvd#1@*aj8ktk_2HpF<g)hi}{E5-1+76_!DAA;G+%-y;3ojOSrGPaSR
zxZcuMKnB|lul6i?Fu1t589taS4)EiXRPI)^Vc_sW^hm`p)k#bccIrdUGjMx?;ZkOA
znVj4I2@&{(+FVszwN4f~V&?D#d#c3Yw82w(hn{?}jZn8as3>Y~SMy#fuy2-20U}s8
zjb)i_GyaDrcc)`X-Rw{8xCLs3alj6=E%sjr>~{|LZ$F1JPndbLuMJa}O3~(}BJD&s
z0UK$8rWNqx-q6R5Xo*j%xnG8kxEeix<2nZ0v6v~}@deW5oKtmoHma%7SM1I9XH00P
zyr#15yOog}r<EF9jmOcxoj$(aw`Hf1T8*JE-p-D4^?<4X&45vJc`zi&dT5MOf1@_h
z0;Ha6kkrmWK_opC+RYKpFRp&sp!JrH{H0rwGd^qRBg}UOjl-&+R-rqOP*!Gx6NM&w
z$F$xx>R$WC|DRLAhLDYQ)z9uj9rV9VK{}fM%mw;RwhlC=wzfZNRBL@Z$A2~lNh&{~
z@vI0x&4K+qubPfA#T8m^7!AA{b^~Zzp&8SUqzfj}DS1VqfL}qpgYes1bS!=wr2^T1
zgz!4s^D1aK<NN09?C|mUIYn+wf?DQi6Ivb4f0Phb4lDvW*HkCZm_R+q+-~@`OJxl#
zmcm?qjk)Exm1Z92+ASFQ8&SYePF89Nq#ZR?0u?Z2!-4dJuxK8F@~Nl1=nRch(|^1=
zSH8fn*3z#?h}f`jNEwUXa3+1gb|8%*EBa7nXAicVa^V)8Np>wL!F_Kd@40epIU*s!
zed?M386*KLns*<`8GP@_EgKBATpD0Y1S@eQVos-L_0;^6o@lCV$HAezLU|FC+cl!s
zAUl?}*E7|j%`Iw(6$=)_L5{wh88OXfVj+SL_NYby3kzy=Af7%2^x?v=<;OqHPg4%b
zD(pt1RFL39W}(NJz`xO=C$S8XqXet)eQE0tTOTVRRb}O*aJ-y@Tx@1^y+V1oe=%jV
zSrQWIsIp1C#HNEE@<U{6JYQ3{oq=*f5;9P16LgE`mV~0ANEcuNhgG1T0F@166#2e;
zUlW!pRu}U@^6~oHk(w>@+S{+FHu!~c5z9KtC3z~^B|R28sD&cswub_ZELuoM#z{+P
z5mR%7VaQMMr2XxrF>K1>f(QHThf?vDiCe!Pr?-_e+9!cFg0{X;=p0BD$9=<-C8Rfr
zu2kLYxg0~U5^y`##@pI@%;wq1PUPEg@4*=9OBrSM?8d*YQovBIVrS~zGbz*s{2Z2)
zKw;1gDL|Xk+e^0hb_W<yLz;ye<%0F$N;Yp&8<7^IqKKW2D9PSf!k01A`G<^aNqdY`
zotb<E;O)taKGiBmdczy{Sl{Sf{h?r$PEs+IX2zulE(@PPNmqVaRah2+%d&Nk)Vw(U
zjap#*DH$l0SZS@WGfn_XkA5Dc!Kf)+^-;T;wgN=Xz~Ujx$@Wy((Ys_2;xMHAScYy#
zI@VKoIU>GPm%i9?Q4{?F68rkV!t0e)7SE_{wA~Sx5+jJx+7xXDo`ctY_7y5r7K6U6
zCbCrn$MrgX4z~4o5W_r}Oc2^6THK9~r+Svd{Q+uHvYm#}J*#f4e~uYniB~4+*VsM!
zCfqoT{?a5|>*EYf6S?t@)K}MD_oYecA`rbb2RyQ;u6dGnb=gk)rc${lu1L-NJ%^FB
zFkv)g-EfM)J*W{)c;SaVBPjMl^+;69rM7Z!*?eX+e@v%ttSdU8+CC2!N}?0`-M5Vw
zLvpeOlZ7HHYua;+_iWO(ky>16Ivvd3VhZdvf4XsV7+-O*{5^F9&^?@=WG%bB<MdKI
zZhXS|GGuYk?+WlL#*=;LE455=PS2~k9<!@xx~f)WEo)Av-riV4*A&w@$%cDVWJ3ne
z=5~=M&y+hO-VyR782Nc9W}xpYE)4GTnZGf@{7JIL2Y^DefG#R`o$5^%abty*(;d1)
z&6^Y5{N>tQ;29ryCH%__<u(DyT|_#3@2q-2#{zv#w~Jx?-gRRJB;rlNWPwy2w>R{-
z>hu{9cKDq)*N$bwU92Ak{q;w$h#~R(wd`{Rch9(fU+Deb?#snFGwotgxH=ni^si$P
z%<Ny<#UC7`f&~Cz`1jb6|Hi@p06*3L0>9o;eCo+?D_7{6)nvasnk7Ig1!lmdJ|-{?
zPE9Lf1tJPAk)7`@qMzxXx;YIY5Y7F0<93VXbNBKx<DCwFJ5CDy^}=F}nqM(qu`8Nq
zXX_$-hlz$?vCkZ^wpqW1CTIaq9Avr2`NCSgte!mxR&r;pE3iO;pjuhbv2Ehl5g~CT
z)1;XV+b_JJg4~#jl5ms!xFn`8e&U1L;s;vrB*5GnsXof55{2Bw9z3Bi1=tu9&X85l
zpWM>?Y70&~Y}I+cR=6t3xGNJ?)%nDq<QgKW3(QA~eFDURywu;xLpnnfmpF?KpY@^@
z9V=Ak>5N@?2|2-s`+-J1OKGgOPmL&0bmT89<gzU5Jq7Z%e@3EW75q`-`|33Ca|gi=
zDACvLhvraT0;$dKYLfr%ou+mG0Swp{#MsDXvSq*_ltraSjHikwi{zC`5L2<pGlq4N
zW9{IhQ+z0fHVBTxGg{7A2HEssLvrYG2Z=J*_&Idc)5ccV3xR7_-Udr3NYo}b5HO^z
z^W0B(k{os-ETcF`^F0eb?@QX&Ldce4$TCWr_7^*snVV0~kX0f#8k2m`c?BT4NSHJ8
zq!0!bVacpqf`N%f(4wLi4Sxz-SEA*t>B*$P%?u7;x+>oe;2?;*Q-;f?PVS&bu4h7z
z%nSH~Xp776%4G>hFTsz*42Uv1NXHTpc-Ko&4}USf;cNNo{s}YbRxHfb?7>2*>$f)F
z@>2Absg;Jn6gC8MCsv`NhV@O`3qTL`$-)_#+2<UcYMD%s11-4yewmv+UYZ^4)Ih_4
zy>yNQV(Tpco_@I|T<O53fuIY8MAIhJvg;5s<nzFdU(WKtBRm&oU(VN+Bl>XlZ@hLo
zNj`$d*Is%r-7&qAa@b&g)I-#FmnnHV$Fldoz@K5~w&=c8Y`UY7NCehBukhXw>l-3*
zB_EwFi>ySjm=mY8dZ8fpS<6wZ2z-D=jR-;RD?)SS)mYfGFW<hN>*Z#->DW!H9|S7o
zj(JPyhx>do<w^y8t^klf4aobDgwksc#TZ6=`TFY5A#YvIaGKj>fh8z&wsgXyMdLlt
zcTAXRE0C0iiP^PV;aoM`Gib;<HxbOgjM|re{wnmyV@`U@y{Na$5!rIABU;L15QrWU
z6IMWVn>^WuI=F&!5Q8as9*YELN%$o~<P)*xbbxHJ{?sjeedMp_uuvoxo86z>@(Kp4
zvyTe-_WRwr8j8@V^E)ukTBM3$w$4A+3@1~G^v($<YNTsWt+|wTN>L+{VERcqQ-EEd
z-rU4zhdK|XwlC~A;fib6x%taDbd<G^D<X1(=KSqQ$Yg1;l$-@jKATMk^PxAg`EBwj
z7mYo@T@Kf`%PXohx_;J-;I#xhiSX7GPK~<uY294Y5)N>s_!0QZZb$f#VOf4x>Lq#p
znaemsfkdpwF_EZU>5`S1PFk7C%aK?MyDWmxr?f;{L~32Rt-HTu*gAnn^vZdAR@+Hz
z7kXqyXS9)%c?cmc%zi2YH()Jc5nRW3FUZleP<!KbT)q=?DHTavS@IYMG<N?aLNP=p
zOn#52IG|&6*iW9|P}vA4X;kPqOCFE?0=X_||ITNIr(Z-GC)9e7fq}_hzZWNN%QWbR
zN6og-_rJIqFuCBV{r<to<)2>h-;^Bu^P2kqe@m^h{m)H~X<d7HJS(E6M3a?%9QEHR
zU}k^*;<k05^wZDGt?mgX0Ew%sg#YYvoHb__h(iDuxplN(cX8oiX8XK2ct2lGV~btN
z2$AW(|5ygd{1IvSJ<eZ;Th+lcOsKf#fk5@s8YZdU3>1}vJaZ2TKkl-4_>X(ekgH_Z
z7V;+$#v7E`*WaZwm`Te)eypUb3_DQKzm2$XEqwWs!kh&qXlPhhySD9WGNZA0U8`)Y
zFmxU|K&GIt0@7BA)J2j&rmT~65bdfZ5^fhQmGU5!@|;D<4I(LI6O((M#w6fHhBYD?
z=rf}2BNi+@*`gcn13xm2Qg82Pl3K`5$3zZDkaq^wPns|VH|Hr)hYt;EgdITE?!t@7
zzhB!uBa2W@4c!H1NYyw%{xr!R=_k6wLNQ|E%JwLtruH;SUhu_U$CN)D--sXvGbDUK
z8%}?t#8?vsQdfwY+^<S*)yPQ61sz=+{iQ@iBaKUUe=v-|ic-F9_!Cnn9JQojiU=Cj
zc&Mp}t5zv~YXZf;8+O0?{s@bDS=3PUX_WWnvOe@u6HCZYr*b>?D&0+~T39#1`2QvU
z*hAMnwYGa^89^xqF0hvk838dZs40o1wjhV*M1}^+&TA?}hZTlHXdvW+sVg~dCk!H^
zs;(la{#ivsEJXKKY_+lfJth^>9A$n|d~c5hX2j~zC$3qVg&#E<mm-wMVR9r+caJzK
zBH$N`U4gQu^#U7@C*i@dX97vx96omFpakJtNQn;FT6R*T&_uE5HMvP%MjBaET@#|E
zXho}Jx)h<~lEctSu6w8J3MB}D;#<b-YxhW{CmLlUitW`R*$Vh3pAhH_32CE7ON~My
z5z2yeS}>7IVMhy_m4mU3BnSG?h={v|g6J$czOT=1JK*fbQk8Qr{T!s?fGyvpO;vh?
zYeYKEVAVWhx?`AwCIXumQK~9#uC2Fs$7BY+u*E#2l4uL(aeJ27qVl02qUNlj6V;P;
zp|#xEoTD(oolkt;Vx4L3DZrJb!M(QLzR9$i^{K2_!|S(k157$EH0VCqY<c0cczH};
z`qx_*lq>DAS+LnX;z>lw{Vl&kx~TGXTVJ6$AClU9jkS1mqPp)(iVlNaw-;oikhzr;
zQy=Gr8RX$QjO!K|NYS`33#Sdz={&k^l#geERK&=h6IUavpEPCBsfC-X4Hp*;C2*(J
z47{yNq)pr~(_?3{SJSP2m7r{CjrJ-u=Wi<htD~Ww1IGu3^#=o2+oxfO)!7O`aH+g>
zH(R4_nz`DG-TULw+tt(fvG2C;+d~H|?S4bOe|#lqr%J`ttvYHYb^S}nR4r2NRWxSm
z&-Pp+tCCM|UF6D?`1WK8>nR7P7}}MotX;6bP7b)IHeW!P{>FO~@%(XO<UP^tV!c$;
z{TB+4#|F%H(mqkTFoi81fW91GR0)mJ_4B`ClHsy<D)WzM<LgH){(m<6`5$z)i@D>E
zEbBk$Y_)I2byk$`tZqT)YZFiB%-HBHGy|8&x!z4EoC3@Cs%7LRr1F(IGOF#|k898P
zZXp+(TwKd&qNn-!W1dbrd~r-(cXtnZ4_}v1K}1nc&HlTH9X(s<UQ-NYKg529+el23
zd*<CfexE)N{XV9ju;@JWSj<Op(N1==bi}PuFPz=+P&aCO1Y;#R9ExAJO}Hrgpi#y4
z6!cJ<h{md+2_sC5wUJ_INI*k^GDF#Z^^u_!<v$s7<6|8D;h`6}yX>SJpP8`jt$I}W
z%4dTSA0v+(CybEECq+nOvW!GtI3)LgQ052-O`6zI3^{VF{GCZJE}&~b%V`PYRFs?)
zyXq2N0;WcPTs%5Ct;l4muH{#`%Q$unL=34%z{o&`sRLk$Yk+WsN4&EeU+k-wvY^u0
zWPej)Wf!nRkY~WmxX@`g$cD#@J1Qusw@<{IQI1@x{();3z6#mwNDpC@mV@g5Glc-l
z4NQ&Y*-zVXRT;R`?zbQ{-7@gC7)Yjw1~W6C^VS=o`_?Xo%CWK$Cn7I)LX2`~2@0;l
zm@}`G8~L8S+ot^jJ&u)R@p_|Es+xEL<5=?T`=rdNe_GAXjCU8ylFg_K6>DrMzb7Qc
z0i2>1JHdy-6D!z00}5H8bwPlPP)v;MtTg`>+T|rcrDrxMR<&YN@GHbV?_GqMbW}+x
z9Zslg`M37NUsKE5X?$C2=)lD?BM%-F;xA^fJ-gmtT^$67N-ljgzfHEu=?hrHt`w3v
z=4$Cg-jDNTul2?(sRdPyCn%Gz6^0;usS<)Y|D2QVGf)ddTG@40t54c*ZTmSE%vAy(
z#v_&bBQ13MuYr^>L^Iaa<)xct-l!o9sI{`PJ?Uc+IVur9u$Z_Bwg~^76TE1bdrvNM
z3{G<n0Fg6BBSl=Woc8<5>zU&YKpz=8YDITUM;dR^miaL1J7IB`6gKnQ3xpV#Vqm%?
zlsHeAMg|<1uc4XrMqa}-_HpA|3BgJa7*nmv^c&miSV5El%$dlo0vmyer?`*@DlQ7x
z;R`Iw39-00;)#W<hq3#GoC=*wgw{`Mz)r3o8;u&eFvc^EdVegz7Ne)llVne>ceoFw
z*0t!&l*Y?af~1ZgC|vsMrh`|mQVX_Q$+k7VN?8ug_*ChSfjAmk+9|cbFoB)<Q#d0I
z%PBCD_<+8U5t$~ZGzv8!*rKAa&?6)k)<Y(KFT)P;u~7ZW!vw0yq87bZeV40nE)PGO
z83Q>*zreV_;#0GXbvS1RK>c!Is&qkvYRcVUn^`Mu8(7>_0#+PVFs;fbDXfv~YB~@u
z5j6W8s?jgFyZ#hxL{>nR_21rlyCy5xV+gTF4^|#&kZ{DtfT{-w(+F0|Rkg_lBEdyt
z-F>U_nD-i0#4(e0%t>Kya*h=rsmc=B;K`6h<p-^cq3r;zX|#Iq>$x@5s2)wH4eRpm
zR%&vL9F1XGuvUTN?W%7T)B8K6rwhX4&a=+H=8Vd63kLs4S=HCQ%1ioSialQXfN3<t
z7@2i~WXVrA&Q(MmA0K`2v(K#=C6H!9;Qu9MJ#Vn_Yqp%+Qh9N<aaSOyWRl#^HEKjJ
z+GHP6@qw&*U)MRGVF_`lugO()0&mk^l}+r`7X1+EfvGLK51)o?VepU4BnFIQnq}Iz
zHR+KdA&a7z9uN@A@3DaoU*p5VStsshUDA9U#QLrzhnIjI;UtLbxjrMQlHZj${#3n9
z8sc?d01%-rmp*lI9*I-!gI=`4Tieps?B)b-xMW0vbw~KKh-S_T{d?G^i517aS(A<c
z9?DK7w~G3MoTzXh1~1!t5Jt!SbfHfXr|l{-#%0e8RxWJIh!8^VdL0-9=7;{Z`Rkc(
zt!y+Vt+seY1S%V$;8RrzE<V)sU{t)^=3m%hJ9<}~c_7D^c-);bd>jIvzdxTKD_VR!
z?3<Mx`Se{gTWyBD=z~>a4Gj<Qet+ZT<Yfo1bn1*esS&`%_w{KO*j2Ia?r0*3%rOVx
zybz$$<Re5+N9TT~VsP#Rcde(}4&J0Ian1d}apEr9P0g!OcR1UTeI|l-MLqU4^$hp>
z`y2ANbL=;K?@Q}*XF%<JXs=oN>YR_|=@B0wZ2RkU=6~@9KNP|LrU(A@|KJUrZOoni
zW&i)N$fi;0#~@4+@&8@E{`vVoDw*zo=XCxoKCO!&be*eC{DPnej3eUU2gK$jE{#Gl
zQv?=}6+n<X5L-)MQ*M!5_uu{AO7o7DjPrS%JL-{ZzklgkO<T=tF0-PPN*D^2Ae)~b
zJvf0-DFdq)pf8D<BB-WZIasGzswrQDvm}!HO)I(bceO+zK%>``EOr^ftz8jIk{-$?
zka}_QV)1x1Fsg7AYcfvccd#9ajd&<78D<5RI!2xmXHYxj44-q-S1ROZ3bnYLL0Z=v
zH?%}4Q-**;obGO6e}in1qDGtq5<niT1oF;Rp2+-y!f)gW^|Fg$qK@9fB>Gwo_JG&h
zTe@PvNv4nfRZQaFl0tN01nzslRyemVsz;hu49RMFy&-woGFR#g!fqsd@f&Jl)%RFX
zB(Pgpgs$MPkg06~EzdTgyYWhNMr&oX0aft+s}MZnVaI98BnC3TP6BcmcElYG4)=rh
zWXa3tCX)IP@z3h~%+lg^Yle3j8+tS_C5PK;7(5~r)IGymhFAfOVjST+xgNd=U2DZr
zC1crm*y*T=cgg1s#Ug-6aEcbFOjKFIYe=?VH7xdw17|R+rtE6Gh`(6y!Og*#eG&*q
zJhO$cZ~TKw@K_2tjFrSk>&h0<l0irU8<k=0JUm*Rk1W{cYPKkbljKdh`$dy9OY<<t
zL-1RvW3d8aln5X69uaBKSAYv+h){e_f-QPX(s|m@FwNh27zK?7FG~V&)gu_EO5mNd
zuJKPrU2;7A(50_;HpBSRUm=OHC~{igC=)H~Is8DgSf5EWx{5Rk=f_%M#2&3ls%FU8
z0-(<k`{iS{GueE6nu{vY<Px9SOo<6e4-5yabUgR(VbCz;M!U$ytIo-`+m}nDn6E2Q
zSQHV!nx81`v?JSj8yP5FI-=aThy9d>(jREIrZ%zI`35Xc&MrRy@vS>IA<G5^y<KW<
zwibW2Yj+$!QTuB?NuUcsj`L{k^4>iY*QT&*KV;(B;kLO5<=-!~OQcp8;c?9%*}Hz#
zk5Y-CgUkm~q9+4@CK4yeZFxyLh}0g4_QuR*2e7iJ(VWR7k;CJ#DSTMn^ctPLMjOHB
zGvN!Fw#<k`2q0{b(KJA@*etRLt|CMc7H23XGOrIXCrc>%E}=U_0)u@BkRK{!nB)QK
z9%(?g9wiz<P8f@Y<{eR1GncP@>y~l3_yuZR*fjWpTk)2Wo>1yICOuDOu6>bAIy+hN
z(JNhC&}thLQeHgrQdtzV<fx8x&lR97I|b4}x@K_y!ZXPss8>4lNxpV*I&AfvbAN={
zjM?gXM4D(oG#hRCoUnA+ZK+{7Q31a_Z^+_5Y7rv)5WeL>JB_Kadv)(2gknD$Jjzph
zfA>FbjyeHrskyxJuMgP!+JaP)xa21HA(4;xV1{A8;BuBB1X+M$XJ1I(GeV&fYgN2m
zX-9<Y@PSpS$$~fB9WhMl{7f5RQ%)va$)@<W*gt{oIPY&P$O&4yip=x4KZ4|!x@+mQ
z!Ur@4HF<z^mYH#@u`E0L21wz>H&d{L@d^dROXO_!e{@sr*qk*lfW9uWe4v5*d%Q4@
zx54!`k^64#4m2!3-o(`)lF#4Ebt$qy$~j4}cuAr==%SjJ<A>aiC%f22YZX<Ih=nE|
z=5lZaus!PvVeV%0AhIj}Id=k4&pP>0X*?&*t1Lk%n<loX1v4b^l#+57NA+=US@yDh
z`Ao1B<FjaG23C^k<?%vt)Rt5_n9j)x``ZoIS5+Dgp2mov_vCeXbC|ln!PD{2lea+a
zlmWq3z-K`3MEke0HSP$a<|s5Ons}fKu^yscD1zvpZ{QBEmG6JCf0e_1?{N8{JnXRn
z00jOWc>gCp|C1SZ(zh}GF$>fEPlI|VbK8HI(_gAf+x~2||JW(tpopvWXSAFS_Tr&g
z&vv4yH2|*tJ@G3VLaSvwRZ!|Ejr&<@4>3FI4^ObES?S>&Kw<I7OdEE`;&fF)Britx
z&+)fm&9xy-h?+P@nmb_YDwUKL7-=JfO4Wj{YDF1MytqV0J@IHKDA%B8$}#cT^2#N?
z7OQkupG*ZR+XY^}wvRPgI_Rw|^()i58bCxiMrv)j$ybL<Qn}-uw80rW02D>m*o1b8
zXr3#eG}1mY8V99<KxO~yuSAOgh#}@Kn>-_QPj_IX`iFqvq%IJL==>Ehr@6<;!y1io
z*)^3B<Wpct&@eP*ey38KdBW2XzmJPhPn5TX+$Yb!N}w?Hm0XR+Ql+Cgf=-OE;LiYP
zT4SyW^YlE#1rh404muS51EX&2b+Hju>r8GLXd0gpO}Dj%Mwb_};%T-JL<(+T#?=|x
zknH*`^})SsRm4I@6(D4<5{Wt)&_q=lI76yk#2NC((WLZ<0D2EKHyGkdsDL2l4pWUr
z|8$F`1!!slKwmOLWMe0AUU4)*3Ab1-45imwHN7dXr;3Bu0epre+n1w2)s6o#`w<n~
z*w(y~ell8-240aULDdj_)fxui-t~y&IqzGlq>8QG3G^KqQx@qH)$J?n5mR*I6^&IQ
zDs4W)vc}@h*ApIx5s^`up&n1C_eA86ZTv6%dMZ<n>L#W7zE?B+iNC4x={B!m&^pBd
z?S_$^aSziug8JB|yupr<L$pcLx%cda*zVxN7(8K%Wb~d;?biE-C~RQxiUmh^#_YEC
zkDK=#-FW>Rj$4i14Q1VClpF2)*i#^yMVB6_>mD`eTMw6-jAWMI(d)N$R&0D-y<yvd
z{e{5a3k^~k&5SBK)L&ORZkuiGm(MrUst)hx=F<Mpnow4YPJm4Tp2UHQ{TNWjTZi7<
zI8@9>+ACw;E+_O>DS6gR79G0w%BMTswz4UOMmbh?RO-nN!-H)MrD7hE%?JJ;<d#<A
z_L*60NfvFmCldEy$Dmw_-5%J`DOL_fSKxeaDxU3~h-<3^@f1>R)@#!?-(k&f(&jz*
zW~{h-JIQA8taIi=I<N)}iW`<}n-nD!W}0tZWenru^J?1Z&uO||ACP2P#p~bOsH7ov
zW_3Zv0VWCvX93L*?=;+vTwLh{9pSQC9>bW-SeJI|m<^I--g*H<1<|$1J!aZ|$WViY
z7OTfdoU#a2T*JKuVe~Kb4(SXT1fGi>Ix%<tJdy_R6TmP`6e?a(=p!}6T&29ujMkP|
zNtd}GFom7oSl5oor={AMhV`b-&EsH)i}Y8-tf3aN%A@Kk({&!nizz9K*<MpOnaNk5
zvNq6le@SQ`-qfRzG0v5~hs6>e=!;>vqK-(W(T)QwqDyS=gx8h>26SQ_-#K&ZYYX5c
zZq!Y6O9(?KN$2{LvzsiXo3n3+ILtN%rKynatZY{2shFlPSvs#VaLTwwh_l_`pC|cf
zCz_MVGeAqoo{NVm$+j5fX*x~9V`kXDIkPVQMG0(F>C8|3qXZ5__`jLd{Re0AznV^C
z8-0TxDX@j(p=xjRKQdwNQRl~z8WMvlJ=6#CLXw{5BnK<Y8h-D^H-u%a!6p9v@Emp#
zgaHXv(Y9WX0%6y`NMpNpA5zZ)Nrv;}SB+F3D!>l;yOTa@UY!zFBBnl*!&E3xCr9mm
z7com69g+ALQqzcxGB4}{t_zKKCUm1G$HRs$sSg$;qrd`1@_P~w>C+FaSFf$!erhzj
zo`riQV^;K_#fUK%K!3eO#r5V@@^rG&zi`y>xyFfr`8Q@53m>A&;oVsoRurK>`Ct)T
z`2{8!kF;z+SGaJT2m;Ai57>iZo*_lJu~at<p0*Ai1-VQ)Y91PrLt-ieRNS013e<aA
zy&QPLm?bK-i2P2WL9}~~vm`Q>6e<<?JF?ke*HFh~KuZ4kIaG##iTgZZH6T|wgh4cC
z<ndpK{dd&;HKZ9;tiqzh?U>2pd6Xd{UqPBg_jm^RlUx?L^C4BRcX>T5rCa#CCoMRA
zMpm|B@iGdD7o;VI{p8$<FeoJDb>aN02Dyh`w5QNNcZ80<$z|W+R5Z!s{hvzY{i&PM
zD1g=^Qi_ZXveA?X2MPyLXOoynwwC<U(zA~BbMgD5fK4P63&FhX6iX>Ek7|Gz!PLvR
z;bggMwX;DNsE<tuuf-Y+LQIVi8DP_b>%}33P4Z4zovfItk_!6?A2agxBxBw|ZcxP2
z)y;uyCD9m!dugUOAY!rs&Vse*P--N)8}>(#E?Flli#1Fh-p^R!^Q)aJr5=sHc$%Nb
zx`Cc4oV(?;nk$i}<V*XH!nuLsG9nEvz9rps%w*S<`D`RuSx!NNx7$@rtV8Qu+1OkP
z%d)PU5OHTF(y0lT!+z2h7-TLZg0pgAKbqC7+s;trszZzNXH-cU$6{(z0tIFfUWfc{
zgWRt(r_)z5v|zGcx3Ht6%WdaS9A#5smkZy`ZCM+KT<se&$v59*XD3IQmVr=7QXI&n
zT==QG5XJc~h6vBb_9%Z**MF{6Lyoz*mGx{pOV#EKvC9*+(|4p@>fCi4dDQ-~i5Y`<
zwaHwHhDo0l=;%5`ks$wGHR!N(LMs|Sh9R9#;f4DG`=274^dz7e#Gmc5f4IE;pIssU
zw*&VNQ^<crFmx(O+pg2Y{PYY6T`S^IM%I6D84u`lK^<1Dd#1{S*9EO9Vo#lf<Gy(%
zzCtfSwd;O6+g-$Zc@>PPVy-4)h`I?$%O(*DV$*bi0_scKA7t}``ZpVz$`V*QNsOJi
z0bT>%^lpPoQGA^VZa&Ma@dx6Xc?ETrP&Sm~3r65rZ^TlbD_h7TT%md&r?~a{d1uar
z1ml51!r9Jl{?d0Wpb<-8MNLrW!G2AKIa(`{jox=b*_-P1IEzUQD>6FQofsbO7%;+?
zB1jMR8>BwNcsfp$;-#Cz=9c-oTwp0ao^f%mN7qQ+NMXolN@zN*yT4S=)F2)}P1&m+
zRrU2fwc+i--f7$B*y_iCk6|P5XxO({8+J1~aBFI|4%oC|YgY^9Oep&VXyf}Hbm_Mu
zqq!`O!^Is{&kyF{>YwbutGZj8=;&DYfQ|A|(dfgpCde{QAkKFnP5!PPF06*0Pt4pZ
z%WS@q+Q$>3P3)>N0w;#GAOpsY-FcVe?5@JZA9%Ko$FZ2yj9K;`Vq5e;9-O9{g|(>B
z0jtS0&uup=iG?E4AKy#c>xCBFy;?QZsnUdm^F=K&oh3+GK=dO(G6(#NjI@Or9Oa><
zgOg-wC?AY2)C*~Cfi>9<uDkY1<rN=hGOR{=v!(KWAKwStz5@0R2zRdP+=Ik~MK)CH
z_A=q>I`52!Lb5RQOlK6p^sgr4%uZGyuRn0!{zHNPzoZNQ3(ie{hy>@KjE{fxq-v6m
zKf0|S8sUPXz!XEnA%8TIk*7d0#!-SZ4BlEBU(bOi4;T;zPXQ(7+Y=ptLJ<vfy@4~U
zY1U6mzZUx9nFeos-;n+L<~{^-1(Z#1Rt<PL5*k=ljouW2x}4V_?<n3^7<SNqlq3De
z1<(#U$l-56w$bE8XEs=6c}ap_j?DB{7r0@XuwLCm6A9aegc}!#Fg)zR0%ufiKKOVN
zPGu?>3MTc6Ll`HpR$jxAw3(@3rf|ai3>07AAjC<^40Enh^oD2YoS9U-u=1dB?Vp<i
z#;&A#`P|o24XrX%5lCaqApcPy;eF9^1Sv1!esb_}a*uiP%Qclq5tBN+=uviz1Q0YH
z$woK}zh!~)S1-gsdSr)&{qYL-AcX8*0<l@*&;zE9&SfK~wC~auDP*zetw<3`WlleH
zhbDNh_+DuY0z38qOET!~Y`n$GuMmF%*JK3}I%b8`>lSZGL5Zmh-Z=I%GJDwTz8sW6
zoe-~R)~EwwQO&IHL*{@7Fml64jW?%XtmqPnm>6fc_ro`Z$P<*(75Q;XrfWk0Bn1?y
zJ*yx~1BM6w<FC=*2%!(9VpRNG6Hg86zf5CgT^gG42CMi9&o|>5z|SA}$+u-MFQNgo
z8Yv*^;k9Y)lGdezQUV)Yy+dxSp{=b{#wM+;I-+hhjMj?9;OAK)=yaGJsm)z9tmkN#
z=OE>|@Pl4bS4Z|TsUcELTyN4cjo$NjQ=p(TWU#b&Sr(2SpY$B+q&~ClfD7j*G^h1A
z@l56Z)?6%ON;UcVWb~#AUcgaSbi06%7&yPJGQ=4~z0uAv+o?t~OSXz0tGdQeR?Oq!
zRz8)i?$362`&n*W2LC#@25!pk59mGWgbOFR&;mAuZ1Qx!`^_b*^I3dnq>9{kt=xda
z%hK70#zWuPVf{Q8_0D`S4_vn+dJbakx%6z|*;--?(#c5+o+lCfcfm;r(Ii>(Fr916
zFgDt?Kzv$VD#Ut;vsU)4okwT`6gJ)+J!KnmgKsjF=biE9<vI2R!iAe7!Sg_>D?xF)
z7u-f;_9dfz>A<dLXtoW&Od0F*jMu37afIMQ<MqRhJST33<$wqC(^s&oicwuLU`S$k
zuCzMSeTw4acDI7}wOK#o^Bz0VLAF&nN#ZL`ZKX5}Xt}loo`p&}h*IUIQ5{V)5d~X~
ze6pL;JPp9+BL$&x=q{J-Fv0x1Xd|>+@%_b}?U0Oc&k}rRc|Gjau2O*?w6*EA{yZ})
zR5$AS%)V@K`ZYc|O*$mRLVa=J6_fb5V$Ek?gZ|rn(l^0OkmkMskTf7+d44!|zuU%H
zk0>z{J}6krrJ(Pjr>8-p4`7nc?}#km9{qn-sRqb24UeA+b^U`Q|9+J+)3>%ZcKAV&
zNj1%%t9=xo=W6!JhyxjU#bSOyaCh=K*va211e1TP{TODDtj+VplL~&URlnY+evzcz
zRZ;-KFd=ZUPJenG3-ZvzY7xJ%Nr3&S_NPJ9BAYxuv7%Qi=|JO-wrQ;;mDtJ1XWCd=
z#4u@`uqrj;w(==PN4JA(qzMvdnoK*)k$4CE4ht~_oIIhQRb;fwNoL9_FWks4&lI?@
zhV|9<j6X7KQYn{venXLtZA3WFFUIv3Z6}F=i@>{#`($<#eDf3DVz;QE51L~wrx9@-
z7ynYbofslA_<NnB(QHzIwp5_9sD9gfn>$ouaOZ}a1?$1<k)0Z$653|#6`+7MZZx!5
zk@S%!&PoO$gymRK2uRAs$ln%BV6ky!6jW3&;f=x0$7jSqDL~*y!_GX6kQpER+3Rm?
z4lS27f1f#G9YO?&gnfehn>gtpZhE;W<6C&7<I7a!c+#>Z7mD%_2g3>jvULxvpwEuN
z8y*4)$#liPKfV&|1}hmfMGkxK>FUoMc66bbXhE~EIl=F3MiSG;U-ft`a;VE-gXH{F
z4!K5{%qXFM62lzI(sbN~TgL!`s3m@5iQi<9c1Agn-osuNz(Q9}RS@zVfcXySg)J6w
zox=C>-x<S0Sr@%7r-!*AHzpmWMk?8HGz+ieD^4=8q#W{L_#Ks0n=H)Fdo)OHi!VF6
zLR%|--k$mUXQTv64`N{e!Yhl>IHWr0xli4*dJYTVi}9S$@##kG{#{C!gfRt@qy;Gw
zyK@TYO@l5qH9Nqk*U#W$$7%0+S*RB%GX^RQ!p!%(!F_5EGwgauWrdWg#U^0dlSq8V
zu@`WoE3A~%<h?;K!q<p&eH5@85^HrA@grIC=aJ*Mu)9F$+wwuzpK&xC0#O;kL%{*-
zwH64*2I{<Zc0P5Cf+Z-AQiiUn0IHA)6QCTcuuIGa$%4^<8swZwY5~%!5M*$K(XPy5
z#C*+FblZ~*43AjmDXK0PkB^G#A?J`1V<!>44|4bg>!}W3C&3+S?iQJqcXdoXt*N4V
zV#!-m9^P!{#OXCGe`P7@OkjKsS4@qOQmw<{p6195nU4hP8Rq#NnSAqS9Br(7F!rep
z=nKKO{?I>W_ww}g9St#xTT0`iRfA)Cu7#914fk^GqX9FE!d%BNLgC3+-9Rg&A;y~}
zdBLK#Ps`J_aZNh8ZOq>HcX(M71#DnN168OW<i#kMOt6liC?6G~RIn2SZ#}ck2D<hX
z^f`m2)?1qT=*5!$A8H4Jn-ym-=`FSbjxY2{ze=5YDqQO;t&%<c9I!@_slScd?bH^z
zLHSY5lD3u`DGu_`!N7FZb$SY9W14Cdbr%mH?Vw%KNYoVitN4cO=3k%QFvIx?3B^1T
zwU6f5;G6*)x(aBu7c7LJbwAaATS8?1yLIr-TZ3Xkul%2THGQ8GnO^je`<qCcQ{rt-
z$)N`J1!BgmGA~fsbwDz?ZuSv!;wy8BjheS!c04t`KgO8Vb^-==C;*ow>PDp#UfoC3
zROI;5#O5u#1qK@Rs86iTQDWmb@U*EgHk|tFlFFuH<=j@C%;;igy{j%I@=wj_wCtaZ
zXPdECeS2xdT+>yOX{er4HYgrlDRJUJveDLgt4A3DF)3_(x*Iw=pKr^y%Wj>4T)O!U
zCaMM0=`*%#qtT=ZGA{+L@Hae<n@sDUZzw4)Mgu+8_nTQVf~y(a+WA*n5-zO^^|pyU
zix0L1GS{zTRuRk~-dcZJ$|miOXT+MUL=(D~%=+kB@~tb0K^8My#_H`vJlXftg)8yd
zD$~mB`_<ae`Vie3+=Kfy>5;F%d~W36{e>MP{<2K3ARMt}<Jw9Oe;`hm=q(ZIG&OX3
z;kX^A*RE&m+UC?=xx?4{n?5(3wLZ1EbBso|E|oDZkkl~g<?O!F7DL7>^7ijXB=2*R
zt9R6%(yiDrUNpxY#;kO|Kkr}JRgH&Nd1rv2OF<|j3ma<k|Iv;`x-V9M27!#<aiSo>
zTw~hFH*s3|flnY6?><z4nRL6nz&WwPV?_~3CNQLJ+2F~n&x-pdL9*#SaIyu}eeYXn
z!KWUf$=dh*A<QPP_+=i!T*=)EuLBN35*8N{jo|t%L*l(vuiyp7joDoglBanGQ3F!V
z>F6iEu@fSj{n3T!5bf`Jvlfe!Vd7QHc#vo>irf;Smr;tIn0$m+(SB{e{BGZWQK@mc
z?_W0l3|s9#DmC_ho3eE<ws$snFxEBEH@Es}i~rFTt4PbP{{-J1t4@@<2py1?bb>T0
z1eLJ=MG6Dnt62foS=@5&Y|leE>~?jrwsq+R#8Q5k6MMaJ<K6D?{{J|8#~|6FtXs5f
z`;=|l#wpvjZQHh8b;>?v+qP}nRkymo{%*Xl?|bn&?w{O|89Ud`+%e`{YtJ#)7*iRI
zev4K>50vWKhU=d;8cJs{nzYa_Affl}dOFDu>SN{Y$Q$e_qGpV6tfW&cmXAaYZTqku
z>$64*<9$kLq}w;4yEJ{OLsUZB6j_?8Zs4Y@TvCa@xSc5EGEE@aL=Q3~<7GVCz4b-R
zqmPou?$FYQ6sx;uVx2q=yxYV_Wp{A0+9H$W{6f(j-Kk#atQL`IYgkeC1D8OO&v_!o
zwPH^LarxEz43LxR<>9i}$E1bjJBExQo?rrm8P?>PHbH(-MJzl%7_qyKlR)%m*&da2
z?6f_|1je?L;x$M4pm+VgK(%5hr#HB6FEA#dO>*IA>tcWI?PcvZ;mnvs^`c#GDy*~0
zj7h>&*Bs%h3smy%1WL9!{Nyj59JmZB^Ng=KQOVFsBKJr@K|+Nn>n)V75NRRd19AeZ
zED^Ew%YtkXZ6TP6th2u{4Q!P`??>W{K-XfCIzE)h=-^f_oQW9;uLqBv^U7L(Mi4qS
z5s69^Eh#i?E4|4>fK*Gid1eR<9;TTK16G@`PEQ4J=fOa0Q{Ay=pKzJ7RAiu8uaqrd
zR9)UBkW#+P3(H;AJa}f-yEUDoIZ-?Mv1>8={Z-njk4tNlXlmaezW3{$_%jO^Ba_us
zlwg3R6_cvzlwrFn-*ljY2jy>EYgxEVXIPGsS<PJ0&bgi3wF^z;dlU<7#9qsRvOq20
z;?G&BxP-AuiQ&FwO{oiVvY!>d;nP>dR4Fc4%HIy;-@y7LSin(Nv*|A^echwg7Yt~Y
zF>1}|P@4u`YkCo}aX}xK7oXwd-8cpmdPHW_V!xcbLg76DF`>M?@;IZL5jv~-LQ!2$
z-mg%<|E=yIjZD{v^b-n;KW-GP|8Xe%_pX24A0MiJJ|6zd5$&Doi4+VGrd^Z{&I2L>
z?G*r+1A~KpkCYHUky3=y8TQjtwO&ddt?FqmkDRinR(cZVnW5d&1|Sl}p=&+AHFNUG
zNiUijdgJD<!DXzEOs$A1Pt5EYo2$7OQvBkt9cX=!AAaplC~>eMbmdH&11z14v5Li@
zP22rZZ@|gaSV4v<SnD9T`SmGyd+U9gVp5Re3mE(*-jc8{bK0pYiEm!nQmuD+_`bNc
zD2l{LhN4xzUEu9%biCL`VZG&V?hpk+>9z~t1$53X4`fc<eP<PVh_|HEEa=`Q+^i>t
zroSa|yYh~@QDWwfO*oEIDBni`g0*rSLEesYJF2wMrg5)Sz|veHBFJIGxGQE(o(G%3
zx3m#rV3Jmvd!;`j?d$70e{p|RD?@4eD%)aQ*p`Nfw%{J-aWgEoVF@3Ip0GI^543rL
zsw|!KuYNyP%I_`;7-M<#Ck$hw-t-LD2cVyoK&*jlL7H_{XtfLa&7tKWcEk!(<9+BD
zn5>>{yv_fGR!`nAc@=G^{+@&R%{4D>+*(I`Z$InRrdL8yD*XFpm^S~iHJ)o>s@}|V
z-LkJr)Nllv)kzjgGGQ62{fjlTZc}13jGft0VjUN$m<wL&=7OX!;f$rPR8g&Qb?|f9
zv+7y*di4A29e7FYV-9${%x3rvQ<EB*<}&kZneA!QqARWRl~LtB_kTV&^d#H3+WpiY
ztbWSLLjN(!{%cdY?!U?q|ILzl7(4tEaw?Lx^ZW>1@2V4%GLYu;P;h1J0OcUya&XB2
z1aO+y#5%hd8IPRiWp~@@-UF-5=7|p^{x<~bHOH^s4Gm1jn3R8hI2E9WgJAMjT{J63
zfzPj_p&9X9(ox~tKLgaCQH=s{hHsY40Yh5R#V^rqAs1Q7JJdbU7>tlQt%)wXYw4A<
z%!>e`(G$^fjORh#?=Q7Guy)C8$Qn-$(GxrB;ZHP@t!aO<=T)|XyR<u!Z4Zac0%qDP
zV!0)KSrpPziR{hq#kqJ?l*wBqiS7kNbUue7qM(VNP=Lh%C9-<Kn-|{)h_MRcOxoq2
zo*2qUBb(vU0gDvGrPi<S$wR`*CXaY3JT<nBx`x@O3Bd<!m((MTFzD5jNxm8^70oK4
zmG1yM&IF5tn3c$ZPo~jLj=EN07$+B{wiK}KrLrhxD=IFU*loOW$!NKR+SM(fmBi^m
z-`?`awC+PwQIAN^>FC3~6V)u#8pS7h&rD660->jOeM#DA&>-kp9J6xFtNtc}3f2--
z7c<f$IUSJ$>k613jM88djkOJnXfq_DAE(?kl<~mj6VI*DTaUcTqrZs>cvc`KdlVt{
ziepO>3{%C?7C6U;2x-gH=_S;V?4epknBnj;Vm%K#5LqS#fg6aOJrfnl-dstI2usI1
z#XQg6*5!hrPVems0ELF?jRr|6vr?!u4Ws<2M9Es+lmV)Unhv6X;37sKX~eEIT{igD
zK|u+Qqu&k!%WXmRSLRg30hGV9r;(!a^2r4(pbo+lp8F7G&?J?%+DMiYsI8fjX6;4c
zd<72~U3er&<KY>k`d%UKV%eW)vfB$wO~2QiLKKLlv(2R?(<+w}>!UUX+X>4?5Z&<X
zOUs_CH79SK*2@7gM57+yZM*n{F)$_hhJ+47V0?NRG+_|6wP*a@!NRrIp&p!?Y#Jbv
z?ysrfAX|1|KXIK{egRhlZUNfZ)^$y6jEpO0SBT2x_sb)EtZs}xX88aJxP9`(_gVVH
z@}*D-Bls}zaXpuHr8Kh48-*#8uSs-y{S)XUM|=%tqIJ})x|zV$5KBGhkLA=C7_OUq
z|L^4D40+ww76)%4JNX7kptpv#VCc4a^ym^WG}qjA2reDK_xM+jxo~RS`0HW8_J(u*
z<yh}4F32s(TO-@SL+n=Sx#;45H!&Kir@`3%k)=EMX-wk!j|1Ay!PZXSRR145x2}P+
z!GCc@gFmHfEP{W~-FAV=8_IKrg*uq(7DXy|1PaqAL+z!O`1F;DDqq)!<8XC`#XP~0
z`X69h9c&Fut^*F>n5oc6sThmI<1Rm)NG<F0J)DKMXpvR%`aq(~Q);|+N}|Xv(=_rK
z2h@Fy#GqTVB(I5dw|>1ogqe9FV|v=rCCXuO)54gDP4?^1;Mn>s0-Ow#i&E{GM7)XK
zSUv-I_P~0e-tKLQQM@2kH~peK26p`IIhxQKM}%qwiyaz3boA-J-xa8oiA(jxx{l<&
zvn_f3xVoF--yfr(V-KQoBu6u{%z)3QXmwSOQtRILn1Nj9E*?O0*Fs6$oQ}e^JuVKu
zKMisvdN7QcStPA6vGbpBR>{G0Zbmb)2O<18%)?0Jlp-gchM;k2AdK+fff})iqJ}DT
zBqhf`3{HTsF_yN`fBeH>-I3*_yHdwAV+=aj1fnXGU@I0CVmFE{s#6Z$%1ye{QQE7;
z%?~~p0;UogGmZ$nc-@(ojvMA!^^})+V{h(+-OLLJ*6_ob5-;P;yS_&w&s}eU#7te>
zeN?7?4V!(I7bS$0DrVX3i6IwYlvU>PV?!{RJz^2_ILl#&P-)&syMy3}#T(QYW7rb|
zI!Xc`@tSXXVXt~N4(tBUiC|Ojt_c2TxdHT3MEcK{8y5D?#t!bfc2+;;5C7<psQMS%
zajbenzW}w<y6LBl^ibRHrvv760*4i%FK10EU;evVm;@T?`&m9EyUqLzmy^(+_qTj(
ztn8Kqc&Ve>=p>jnT#Ja14{y5FYTXyw%w>(U8l@wRIcRDe>LAB=RMpM&kcvPdpYHZ>
z?K8z-n=ZP!cBS{wsY2z5f<)<hmO30fvflmg{G49Gw1gxUgSAUBp~+=1g*EhIA#u0j
z6DHXKr!S28f}@sDQfpRsE(8hH)ogbHXF&*4)6L4#nZ$;7US}qAH`aI`+p+5lq+cA3
zT6ggpm@5<}#EbpG-0cA0OKJ%(7)%3??FQjaik!-c?4+!G(R9I(3-d7(`jf!NRgB3a
z7>Q)3rJ%##(VGU?zwXL6g%x4__gvgmnHvGNjI(kA`VFs%X1m$Lo>;z2hDJfN_`)sW
zD*n{)tVOSZ(2Tb6cGF=bhV6O!L9vYDF}*m&m%L8@(y~LBy`PgHP2oHs(g;@bZG~5e
z1Yzcr2h!!Vls_)fvR*^<C3YUzbl}-LMkBsf917tUX>c`|*^)>=QCHw+1w|FeK)M8~
zPO$2hAWFS`G+{s?u9LC_CScdfyXQwU3l0rj^=tf-${AY|z6o}w1fGN5wns`{rEj{q
zIRgDMql(T)v6<L@kvIH?<aY&ncgqIlE>!?t@Lh<J3wg_e*oEK2a2pL_E9FE6>bi0J
zFY5Xy3;iGMmj8e1ssH3U{+s6bx4ui^oYGsgAE<8qq&SxUB*p#jasJuhW2gTQq$Ve=
zNBr0?g<RjG%x|a>s3)RGm<xI|P+v;t&vcrpL(OU=HkMJhauQ3Yc6f^25y&|DVMr04
z=KAuQ53Sh&lam4GksTX{n=oJ`X}E<`zmB1L37&WK8UfYF8_m92z**KXs+tXoPI|e?
z^&tgKd4-P^rwd%&2pC}038Q2h{XO}ceW4zyJyrpg+%gSKfgzFL+=dz9g=(|wh#ePT
z24nIjg6ccF!omHy!M648K?m20=utr%hil5Fb_V-Yk4Gj8n(aT!we$xg$Ou@hfm&Tz
zOMN(66HpbXk3Oxc=V(n5a2f)qEKiZUx0esqB&O4vtusF&ZZws@sMF!^<7q*+gA*FX
zVpwO}2L5590bGN(<wB1m0fq?6#U$~etj3L_9Kaj8<B(zdVZ*L|;c?+R7Dg;Q?rp4V
z@ZU0Wt3mA)K8xH#_{<ri{A%&>2OG>S((A{#kp0g|M7*`IHl%Kz)XG?1|6eqsb~dh*
zo>3(5xu9TlYLcCosGJ4;n__V-G2ILEsuH|dn;Odv#+TfLiozOwc5XMc7d)v*pz5Nv
zB$cgy-3*2Jr+uX$3!L1lcm(Subp|s!Ut=wu)S@Gh&t_sHi6$B3<6z+fK2iTd2Xj0U
z>rdZdDlTtrN6blH{T0_eYoGs<RM+*FKhNpo9s9~e@vM{mjUkjmTNB;PK-NVn@oh!u
zj(@4We2@FwyL$KY-wXj|45&3Kf96t%pC&T4{|lg*+ZdYtK+QXm=Z6AD2yy+4s6d}B
zB_tL?`*o%8_f#!!GXU<dTMUF;(HMNI&CYiY(W5?9c%cB$DEjsL2F{`*bZG?4iMiW)
z!KRVArLf${U9Q41EO*|0uYpdFV*<xReuW;M(`E6j70=Z$II5LE8t30qZ*|QB+-`~}
zsubwe<MYYNY-28>7?Nwwg*{86WWCbgtmk0VcZ+U*c;*671$AnfWHjG}&Zyj99MM}P
z`IxaAP>wUIzf(`qH0Sq4-WWSj7Jw~dtRhAX)P^?Ym%C5REKr{gAUuuXb}*5X{BQ#9
zH#}NiffR<>l*OyO`h&hXD|y<nkUcUaQ@QERX%%5SMJHXMsBT#G0K4jb+e;|PZAoim
z^tK{Uze?dm4?!}?+vqoPf=fJWYoJgB={46LkL~uwhTR{emV4C1DNSJCq$4FbMY#vF
zt&4k4N?xs&kgU9UrGeCx8LF~Ek0ywnExx`y5G*C@cRmvD2A_&Wb4w?_kgVsmur+yM
ze$lJ`nb>s*gh&~lfx5D_g|=gfMW(wx_0a`<!)h^LQek+|J_~cPFPy*fia*Wt)A_d!
z!cw&%K$sr@VEts9{|f;8w=KD|e7j9QJ<P@@>P7*8e|#kzCkjpmkKwF9<BD1-^)DpU
zW|oiZ;>r~}-K^gc!|jFDbHEwefY{MinhzZComV%#B9eCC?}qY!WkdoE9A)5d!u$({
zC*eZ4V^G?mbPB7)xu}|&eV~{-2oqTID|saP690J03_P_=7+K^rtn`~xf{X|B8eY<>
z_!hvUa`VJeO~{6qv6(yu%~36{`=S^(Dbzt;^P1oo#y6o4XxF8u2+`1V;8PQ#V0|?r
zZgW+NV<WLIs`8qL)LbUb?+)-s56`d{QnF9j*mx8v7y$X$GAXCrqq{>rla7dK<%SfM
z3@%es$DI#oWjSL-6CaODevQk?5PP}cil_ZsDxXSZFrWIl!G=Gnoa#S`FmoFtW4Hg>
zv#%r_yN>^l5+8!Di)XEOmC|~u3)SO-L?&+e;#i-F)ifBeKf&h1GJ2@d;!&YY{2}7a
z*3A}uftt_ToBiYdIxv=5(qaKS*iL|W^&2B#vJy0!C<BoF65NklE#qs~TUHmJ4Pru&
z1!#;`{IK{&T<Ow805!507o-h9UJxu=8{;l5vBT>SRZ*ogEpa6AvIg@&mi0D29TvPx
zYIJFRDggCeSXnhv5!wc<dWBg3si=&S17N$<JlVy{-FUy_;N0IfVH?5LB|E{~H2*IU
z3B70RG}Y;+pt<ZUZ@8&?ZZ8SwQZX7Yax>l=dyq^{?9PKC>llfibLU}u#^_<9pCyzE
z7x1%dkvG>y=er#su%_HWJrCje3np$S!`j>@AP-UdE%{(k1f&eN^&{E^9#Ev0MJoap
zjSB(91|y1beRsmBxEi~*43`&)?XI=w?Q%X!TV0pZk|PTF*6+07L4|44$mEQ`vKwIe
zX95u9#$c6aC}02Vk}JB*7NE<`_}`_A)U#^VZqsB|n=eOb^Wfh11*GC;#0vwH+-rS9
zhP9jaNd%wf$GOOR&~jL(o*yN%g*)7wN8iArs2T4jE$`t+TJAn(yWCyH-Tx{B{~+N1
zSSkE}d(HhndT#z-Rn~3bJ2#z!0RW7SfdCl)6L9@&6ay=L8%yJVSh`+zS{tsj){}p1
zb_dLERTXKZ&~$4?%<mJ+oHw|)*R@~r%1q%#6j`w{mXVaLY%M%D^DzPYf$;kk8If5}
zo4ZIxg3x2YfCcvI(W`ww#WUr!%?{%`E@jCEe&u!Vd$o7fBgtgRxNt%5h2Q)7M)gg&
zJGq_wJ&wnd>Lb5d-<-bi+>R_1cbj!RR?jlAN#F>b8p!_BJJPCoDs>c}8f?FyKiHP5
zy40<0pJjS`!3s%7%T#h-d2VF`!<t=4+~J&!C%E0|%ye8AS@S9R^oED7YQr9!QJs?p
z-R;mYJ|mr7(kzcqJhe~t^o92gRnz~)UYqnbjX|&TPSN3zGt@hbKN)b7I^zBT?cD`e
z^JS>zbtR?<ozzXDfA&Gs<x(=WAA8gOjp+LwioVq%4m$RoR&pQf@5uT6{9$;)onvZq
zBr3oMy|K20OTx4ao|VWf6R&Wygg3wLt2J;t$XrUzXC`Gq{z-e&&n($@i|sjUPqdw0
z;*TsUgE@^%mq)ix?~tfzibSSrKHUn}AW0^3V#_@ZFrs`BnmFT#C_HVS*pm)As+?x*
ze?5`#qIl9Ddx2y(N(&6Yls&Yp@3aeG`bvN%Q8uF-2a8BH{HoGV<?JWPA*gd9wB(+_
zAs*N2N8aZ&d`l*^SA>rrgFL8y0?IQ2$ioim1|eF_e8&=%r(k;)qAD=gj1Pn=aexrU
zPxZ-x|7>h$uSUf|%=dJpDv;D#Fuat{Wbj)S8v{)Msc(mRM5Z&?@6hBSe!`S5D~q$l
zRwwJz>EUX{f7^Du^Ywl7e*buC-j{!`?*3wO-M545^(&O=IFyYp7q6SkIYx&sw5Dcy
zE1UcC_5#++3@2M~6pg>XsBrn)F2>jA{p#gm!To-U!~OB;5Yi9$<vK<uHyb<mDJyY#
zTIcKK<KXd`2b`b1W;=_6PF5#7OQ5NNji(Y#FBzKCR)@VNW}D|7P$xDgr-Pg09enX+
z@8E)E=?SQu%V7(*lZ(s!X@9)Xb!r`NyVKh-qNmn=T2>~vlbh4s`J)3KgTHF(b~{!#
zm!pIayVL8GdkO1pz}*AJ42Q?teFDGx3mm}1=kDrd^%raY%OlJQC`RW6M~Q80ZuU;>
zer_z_XQAu&2?4C1M#=E^v)Bko_|$!&s@OJOE>NuuEI}S!&gaY33#tL6HQ(p$>FMg|
zYOLw-)U)jtH`!edZuk59Xv6+IqMzsMQIgri{;55@1qWBb7$5|~iBnK_?w6Z~U=gRg
zx68-XW~}YB%vQ&hV4yFM0zi(K9E#@+2fyciMjI06{$#r^zFH9|V(0P4LqCI;Z>SNm
z47;FU7LXV>S7L)ebPv9%gk<*e@OC%%>(|R;gQ1jfpq&pV2hWutUUrs22(rqpteD(+
z?1J5aP!EjH8TNW1uak@pyV&%%Pr%6i#msdHS(aFs)3nb{&~?quK=aon-6?YvBgXKm
za~fDbb$Z}H#+2emY^Oliqb=Q^TZ|x|xT%DjvErbd{v(brq>YI^V#!ymC=I?YT+WB4
z1Z~pWNBe{U$nQNjae)1MV+g~A?1)%&0gxJXJE(n*9(|gz=?!Aom^tQ-u$%kaNovR)
zniyg6u^T5$PrPKh;wYFoXkK|fc>YpiVy+|u!p=W06p*|76!{sH2w!mbQCvA-WW2<^
zUI@fcL8-mO?|?;%6k#NiB%H7qTE!A6f>2V`p6uDgF%7t8Bsyqh&DzII;$y5bM&$P$
zl{^ObV{dK1l#?a+;`zF|{v$bHQ;ruialNm%i}%%ugEE}C`oo-JH960E0iA6Th2PxT
zzOYQP->HAe_&eKS3R}byJXr_R&0u(P0x)uhs^O8cqzMvo2Hl1^gheFrw_UnkL&zRB
zsdVvW19G}trq;72*YF}(W5}1Yk)`aLXv=rhCC9QrQUXtIDk)1HSP5-%;elp8dAFTK
z;*;CqWK8{(w~&EKJK=d-!yVClVG49~P&>O^Y6AA=Pids=*aqL%iNUf7+dr|Q>h{j5
z^a!5`e@D_?2SoBy4mp9HX3J4*0cK?33<%zM_^`ksJ+4!nb<UOGw~f$7KHqvV#zz*7
z3=dk`C6dtE^01(mrIqkT@0;(4wyI&EfW~fjU~py*wsY4vMNIob+tln2;Bl@GHZR|w
zGK04g`GR{BKHL>)hYzfTJF*G+H<CSq#8J16KwmUer)CE7h($3dbZ5`kbglKk$2Cmy
zHBN%&ttOq@BfQE|yF)3+E$uBP<j#jN-fyR5Asv#lb!j$?4IH$dCKmGx7>sFkXxvf#
zEg`&!#E`T~BEK-oVOaY!eOZtgn=sI+3|*>Q^do)pyP&PgC(bdUpwe%VZ?sk4Lur>1
zuPAGJ<5bDN+(*vAWb3e@4B8;9{?OI|H$SKyQ*Pe1Q43Af(S6AxwM+apcbHE*M3JQZ
zOMD6^>KGkepulLkTl_V)#$>fBOZ^l7cmk`?h|V{8tRoCn_&}9qS-j|wi=m&%oXEOg
zRp?i7;uzk#i91Ck1jVqhsH#We-9bUkr0=Nt6?+<37mV;X@o@~DUUH>_`l+U7&Xyge
zLj8Ge(MC<6B}v5{?V%^r7s-v%X`ZhI74o&no{j+NSA}*?k~-n1)wrTPt1ODkOxMpg
zmq6diz!621ewWumEg-a}tzsDMcZIR{2@(Rij^7+p{L%7fDtzP|0;7o)%6uan$j01b
zH44>ul7x3+6+s{NN5B9q4Nu}@G!OR9QNOxWk_5E#w7<xc$w!$hgx@J9lD-tS)+00s
zEIr3Ao;D`6L`2?rM^I2tQMQ{=_43N*87Erz)(R4JhVIL*qXZmD^8xnZ8^5}*nWDAL
zk|iejMDy1A@FBf2GD6{8l3qZH<*VM$L+0uTlg*Pf!ozqm?;ALD#&he#x07_y93|3c
zi0>jETmh+7ctN{VD0g#l6cVI<kd|d(%&#cqse&<ilunr-=gphpw^3vtFevk9eg}vg
zw@!F?P$@KJyxu5=w{;%Dt^?pmbai42usxE)j)2w)2AFtk<_4p6fm5Zv{A8vTYFEr@
zw=%WD=e7S-T<Jubv52D5c$wCIHx(#)mizeVmD<mYvND7rJh4$O{`=k>ZOU#(TI=OU
zcweFq`q-acz_JjFgCTCl^cQxl6IT6}f@l-cY^?`QBJKmJJ77?Tj4fiBY8DLcpFDfl
zzB%Dz;%2C1KG9oeVPu?9s;)7oKQDvs+h6BH?@f$|FA)%L=U_*_I&8U8ZO&R0<?cT;
zF{0@M)Q0#?xTa_Y8!*ve4sK<KRPLmTgnsmKUUZcGCgl~vgLp9_v*s-BlrO-^$Kzry
zpfLx6^Vd2>=INZm*|PiF$6@MS%of-L_XvN#`Bj*_B>;o$q5=@<>$Z-9{t6mp&ql*Y
z(gRl0(!y7g4@BPGyX58H797@rtbIVjA4kvvu1%tJm>r2mDhIqczW+73j%4oW8OZ-J
z_X$#{$D6rFE9~b&1R4DoMAa-B$okgD*P`Q=v02S6&?NYJD#=@K9sB9&S#l>QkTM-H
z;sPB?9pnD~MAs345P#K}Ko?#bp;T@Iz)pr`hFEKZJ&za!Em4EK)^^EWEC;-vMaJ$=
zN`-r2p8^*gm8kg1T^}gg>yt<XPvEBEkAWsY#&d;b>)zZ#D@6Sx^T^%W+?fW(C4X3j
zqrh!QTfa94PEU9AycN>c47~xLyah2a>5>3_y{<*(*dpO(ToUY=B#=DL=UYG{r1U-+
zqhfDTJQA7g5xxen^6relY59gZfS^;x5dVW)Mm6;P>l!zd{7yBA8NkJ~O**C65x+>R
zCr*FXRj__ObG*H6*jZS=Q;5v_$7l3;SNE^$9^aegbu~}l{p&v8_ZveXKGGY*uDVm$
zlU7MO-cAs#2PCWc`9f2G=_($Hm9_Oh$Fw}pC#Urwc)9OMwX!?SPud<H4=^W*TzSW6
zol-6*t)X=5@4y~Nwb{}^9StmbsoB~dxI2!i-fJaJxpHfewHeuvp6OP7j;@J1F3k+a
zu55Y7Ai17OKFiw$WJ}#xwLcf2u;f=K3mUr`C?xY)!?K!jL`HsMJ)LiorK1H}#WKWt
z;-+j7GrN>-Iu##9{;2O3Xt{)UIT6ogZ9Z*{owiQt5Td&R<0<R&MrYtySs6+VtOE8R
zoP~E`JrNh?TM@yAQ{#d!4TXDxTY)C@s_hn{Tlm><@^I=mh9_5o-SYlW#EKn7Vca1;
zt^E{EiK{q>n{eJkCdcc2OO`}|PfV)h5zxH}TfVeucN)IfCM@mBzu30m=9*aU+)Qq4
znV6&bu#x|de?f)Vvzh;=l?#^#5yv&Q^bo1At+Mf|OIB8JiU&VP%~9K;dOYJ?;U7n?
zKOV!C+$?LwqV2rKP%Fp+(dz3%ShzfO)`k}AX^qxW)>sWq(PjU9x5m0<FjyvFcs9$>
zXxh>5gS=#TwtS1r^IV2)xt=DvnigHd;C%R^m)LnRlemK`R}CECi7=Ch;0&46E-ky4
zS0|~i4Hl=t`-j!DG8?yXem&1A7W1r*U{_v<XGty=^SExveS!Vwh-m4_oYSdIDPw)F
z=E=P$727ym_~cf}gZr2~{5Dqjb*uL67E~<ux&OMt8T&T;^8x8aIPtSOmX}4~^xBRh
zme&%P?|3m;z+E$9k}UgMP~mh?wye;oDa1Q?`-2e$G0?{?n&+?iL_K%rYHxTZa4cqS
z;Jsi!Hv)VIP^$;<^`uB)gId|q_w|R3!ed?@Z4bhm9lsz!JN{8{@C#6T7%dfKXGeYo
zN;?YlM~9u5Q*l9R{3rOZPhdh@{!(z5#~vaSHDIq;-dD9@Bj9mqjI+c`9uFkAL~Y{x
zAZc*qi<Mrm@b2EBKatZ_ki4!dCD}M0Z5M;XWJowUNww{g(|!rhtS7BPbni))d_5)O
zdhSXC>xE?gcj|pXXW95~fs>csKVJZCux8X^wV(1QD`tvfg)E%ZPU(`Rc&9ebRe)22
zLPE^Ryf6;UdA|Tf+;|}0G&~JD`ZGM|T|QruN^>CYW>cSv<58c4W7WIFyVw*A<W)O}
z*%|COsh8<ySsPgtdK{z^rwiWxP7Ny3tCyO*3VT9=Uw&24gL_ejyVg$tBrCCsg&+RR
zsy>F+Y1QyEmcG$yp~SNq-laU=C4=yDTrQaB7cLLOGB0pbtm1-R?%~=nBAo1ix$gw;
z?g9t99y<<9?E&C<VW2kgdoQl1fIT0(o*rCW1voe^%d=lvk1@ao;M|I_ayysW(BLk;
z9-|jOk~{sD3EesbSP)I;juOnYU(WBT+cXc~sJH$e!<$ZN>g#v~0AKpd;gw;bPqQ6R
z@P~j1RPJyY;+!3EJ<_n;X}?!PYP{N1$lIQv+a4po9@5HRiPjRUCKLmM$fEh9Q@A|v
zCmessBuT5&5G0UA8%EtSbJ{Nk3&~hr`qZ5F<lBblcqB}PECR+*xYZ+M7eT0lGdR-e
z0S2-YA;&{B7LUNDOm4Dv5<}oWdO;B2f8awlXX{A6Qg95%1HVFsms`r+>zJDJ{$NDH
zs(u%wV+RyaGOSZO1o+7Kk&lA%m<epKKM5FfCB0NkufQ<4Za~NN&{ywXO5E=_p+gQz
z_REd1x)Po3a}vknY8F}k?iaOhDsR3HRA7#GUzyRo>uTh<&eJM%!1FM*u@r@23gaJ?
z*kZS&y*iXw1+SDn#fWJIyO<3axxmde{Hahr&zBACneih)-sTnPGo70aQ#xGUW_73n
zXxZFO1m@J@ytGXN1GF!_F~3Ej&UzNTJaF=cX0U}V8Vr?}tXg!+25I7rC;2Fw27f#L
zj^ldsfz2U~!Of@DaS;A?E^1@+!PIsxJ-R?h-XD-2W8|(=11^KnhKYIfp3WNw%odCI
zwX^jMLVo0@PD*<ST=^ZRb>jQ+80fq-1j~Zy!562si&4?I`Wo_2(>&D+P4hhM&CM77
zoa@E7@$`(a_Qk8*#`h=nC#zq~B4au5_xJPg(*kFwNZ{tZ?ciS2r}7XF^nS5+?i^g<
zx~*W7B5BWcXs0fo+StxHW_Id<(gN@ACBWx|Rkcs^wt|4M;JRJSBr-<BlmAKvUmkpg
z%K=#?%V^~#0fG6=kD%VKm4uiVOyt;;`!lc9q8Ht}^(cTP3GTsv)uwts39fRdAn6rb
zVFd0q1y3`0_UZ#oGj!tPkXePKx3HH<ZT$TBe)_a1b*OwMeM+8>)xr|lX-IEDPMNe6
zzF)TTCYVe&!-b}P)0eOwa3`%I)7BnW3QG(mFG`RU`N+9OuLHyBK6{Cz+_&~JnJ>sG
zf-m4OhXBU{Zb*LtimAhNiPww*B4{A=f9?}qds6hlN6@JIOM{qfYNuW?a&GZU(q03~
z_WR7$6XgVwZFhvS!Tz}#Nz=;sRv&2u@ROj&1KiXx7S}=t4mQHg#-AUwT3TTOo6O@!
z`qSH8;L-z!8Z7A188zvR-)`#V=8y)0rBjZ`5K8^p2<ugV34uo02~Ib#VpY5V|4X=<
z8yD=C%)PQ%K-NGM$Ma`QrdPqN>|IV2TH`M^!mKz=5E&}5KwKu%la(l}Ac-DAtFmEF
zC8nnC%s`z;Q#8$)VZ!vyPv97@;WmKOOJBfHiz13TxyGL96*-6hg|{LgfNCF@scs(D
zArFpUc|<{m@+Pcri>jne-&z3y@NL4~XcK&i9|=Cj<tbw?+;huR*K#>+HEkF`&=Q?x
zsH>wNxB4O-N@wsS2xl}gaFp`mF-aL=K+ImX8yeU&6uo4SUpHKM3R{EM-_J)UtP^X%
z{K#iqubg0I0=k@WY_>uukP<eGon0Zq^c2>PEqw?0LuddJE9^gPc7!;|Ey^@)*hJhn
zx1D?`kt8K`&cNsq6%~;j&eM!m&pr!1J89~4A8x~2h{Yy~sQMNq!7D#%s#FjhWRpk8
z9A-3*RpAwTb07BVoqIzRQ9B6ok>94)Po`P#KAtSC5$03duTxsn-Q^u=ffKt-DXsa}
zEr2g+>d$@;UoA!_*!#nPQ4@A3--F<sSG~wkEzJ{2?dtFfF*^a0)KeK7*}?*(B_++U
zK0_nb>a^WrhUOI9$G7yK8l2otDIaLAl_o3j^^{9J%|(~mPH7JtaaIQ1=J3n>E`}Au
zrNmBvb~j%`DU(`QsZ~7s%$1!U3;qg*>^es9Oe6fCM5Xy4NLaE}I>e8+Q^d=z7v=0%
zSXf&dZ48a|#HA?!r==Cvm*~;AS;81)zYz#LiqK53x`iPbGaA6MMIsRu9%LA@;8sua
zYuoNGEcX%~E-Zq6xZx06NcHhgw0c$<*+HKKN5_4~gEhlG2~(l0Zn3f1@wB!2r^vN)
z#6Tjv2+;u^LXEgJ`4b(&n^$XY2#ZC%Crdl|^eEUhs+iYgQXA9|?Qi+NgV$}AJ#jJ~
zT*iA_pob=!bo?Z!(ny}HTN}q3t7Jnuc2WJ)0UbG*w)ct3;*66t0=Tl&%oDq|8EL1B
zU>FndBAZrX4M)k%rE04(BBC`o&sC0EwX>(8gwE<d2)6iWyLNbsAji|wS>$tUS+%}{
zok-1NA9xpz5M4j$W%1fkoj48TwcB8_Ul(RM0ep!Tiny@hkf)g$+P0Q=J4>Aj=pIQ^
z$Y@0Pd@r#!1{al7**nAcBNM2Yn;$?<n%9wgZp45M!?O=)+EXJW<IY0@Au%y0Fqthn
zM@7BKk-V2YWEbGx0R4i%MOVZlHreDOAlv}G8{XQc5utK!&T_F)x*n%8B_~iE>9S<I
zPGefD1?;VY@LFuJ4j(zgP7&TRG(9GRG6>QJP=vc~0)oAmP(3K^J7^7L6Sf`G5XtW@
zZ4|`D*&V{N>^I|~>bEE7h1`)@0pA!Tvmp{>0GyYF^Yi<zra~o`l}9t8?(tkcmCA!e
z*&(=mK^y7Bx61Guq^iW&K@?)S4(P9<jK5E_Y%=jmt#fU?^uPlqL!FDq7_K4$ka1=!
z_$$#`zv%2SoY$<=L5PT8`ySkP0Ndt|cSRt)9nA6hJq>GH8#^1?n|)`l=6l!JkjGvR
zW>#zcKM7jQ!H^CJW{yuz8;*zRG6Kn-*GW;8{7^nRm$wJzY1MbKrnKnD7e&mIjH-Ve
z`*K|JLVZ6Q-9j5rhlc!5_Z8ntok}xy)AJW*L+X^a+no|k>+rCRvtgG8u++w^*|)t4
zjYRNYveBf6i>?wP+664A%*(ON()`INI$M5$Piz0o%#OJ^;1Aq=$4Af#3A%Axpffty
z-SkccoN8fvnp2Y8gbqWp&I95agj^=%bC$oqc`b-K@0NwVMU<Y$bK%y&7F>$=gW)(6
z8Zc-FhZ)N=rp;lizs1hieb2l<w<d7-$C@PdL3a)rIzHOT!_37T*1k>s^z~D`UjRWz
zi<@li3olItBrea^M2p&bAGt^YjR*2UIJmf}==+4?&#SUEqB`Gz<JjoZLjT_6y3F{u
zO{h|*UKnjcCjUnIU`F`P@C}L3!O*Im_sIb!b1S)&)~B_BZ>$ku?xyrDdVvp_R!4X>
z#@J0}@Z`(|4S!JHgH=j7_@#M_gO)MT=QZe`T^u$To2U1R86nW_7MA3YcpJ3_ViK+Z
zC53}0KtSOu+b3&d@`h{b^iiF~h}SQrOG-5qMd{lG8)*J(h<T)oA0A*cJWO=V5g>nB
zlns{+U!R)y;23W0=#~*7pMFdzh|CPtfI1<Tnk3f3bSID(`h_5s7}L7^fdbzdWN0@C
zI_E>E$os}n{j<P~&`sF7Xz8!ACNi@~AWV7l6DW%QB{c4ZrQD~B^<(L+Wi7*x92um)
zc`ol@evNnEJiB!5TG`+k<}{(@45R`i-HCZNvlD(JAZB}`8GYB%?z|xXF&O7zvA0pw
z3P^INhSH0;e75q6`828W#j;Ag80(zbgsf$X#)N?ebD3wYJl_r>f<wGmQWXgKD2-N%
zy<Ey+qVhqRqsYBGssp~jk9r){n-f?hl`G~K7Gql(f<em^n%G=%Ynp^Igb8RQ1}v~D
z6T&+^fsqj_dv>r-Tt@_v8KZgSaLFgc(J>t}1-|{OJMBzJ`JWvTb2<~~$T!6t!X}C&
z^eMbIsBc5|eQ_Lbj~iOgDGcC^8yFrah(TRqi*ffc$8e=Tzb6#Mr2vt4Jx1Iwl1#DA
z0A}1@Ilr<TeB$sSBqSeC4x{N+RQaMLS`p&RwT%PJtg|SHfKpO*dJrT6?^rUbNI#m}
zB+@5YHmcGhQT#hamq@ejcAC&`D9tGDGB)l>2hd4OVUx3zO>eLi%8|@~8IMr%n|dTh
zCoV~-aG7?zyUq`HIo>pW$K=fOy1(ANycednoisPMqCDE%&fdLS#7*&Ut2l&-|5>>k
zlUt_BU#b^pN?)z4bDadYV0j|ZnBixV9QNR}g9x2ED)paGI&Ohl=+<r%j9xmz{N@i-
zR6Mre(rup3STi!x02O7Turc;2qe{&JtjfDqK}$SjDOi*61m3(pW0m7(dn0J!2<dLf
zV=B}GZp%P@id*(5vXS3GsqYy_WRo8^HGcJhoH^k#UH>(P4R5J)LP~iNB$bRwFzMug
zCPlkI^C$ag9Z{mjDRsHnP4i^Bc}fpGNWxrEs43{V;l<bshZrNba{iL_0;Mi<w)zT#
zf+~_>akwhabi-v;fSATb^P;cM#at=j)W$Cd`He^GvF9X?WurVir0FJV$o@W}rvrhh
zp}s(}lP;Qa->d*Nl93z_(x*XwOVq^@Crj|CZaAzM2D7p=s@T<ho~@X5-=h7Od&Qa&
z8biw&m=l%*1(sbXs3%6RfMS)FRe)4*<^IhTpo%)DJzlyCLtEt77}$k6S1Pl~{9xOn
zhAGK9tI4LtlXYL8ttER)c`K?%!;did)Kp`}ZyHVXTFDM;Wp&<~Gy)|Vc309SvgvpL
z&S)T{Lsq6Va*-rrmwa%KWIbw*jWGuSTgf-dFn6dv9z%4Us9PNbiaRA;#Fp0HEKWPU
zy7MH>FtpkH!eQ5|<U4PN5)5$K2T#!|(I8D`(0f{QJ|RV~YivcfHou6e!3EKNsp6K!
zqhc!#Y7rovFZdOo`licgaFk%JfoW-$w=f<^n3_%$?;`$9UoA}Qh?i>?qrS(CdUVmq
z!$XJ?Fr#naxv7=09~qXpdeW+LTX|>8tFfmO9*P4W3%Qoag@nGU(smx{z+WenQ91gG
z-?hcQD=N>3Ioe=bVj5c7gZN)OZHWE7VfpiVG`aLy>a$s25q|>VG1g;RTw#4bE4#K>
z=4Y_%-3554LWMfJk12@BBxQ>g#Jn%R#Qz2;<_@RNpSt2;@KQ_RV^LHyr4QMF!L+kR
z-d^FM`LrHu8Ti>dj7A6aq!Q$NQrGcFc8nTL{?=HrQOSf&j=4x2JeD8Lba3Q=%@?pW
zf7`omIo<;66+@s4FY^BbmESxTw3P$_D_D`Ge;!CV(iA;sal-9>cQC{Fl4GY^C;jLw
z*^wb783av=hpB4VTIJ$t#B`XJiYd*dYv9MqTD94LnV<RKeg9=U1dNHNM5Em_F+UzR
z5(%wimUI8Y@YU$NlfUL4Y5|_&Nq(JOMMuQHE@%4=&v4EC)+v8Aix=zw4IND<&4EGc
z3p2)}Lh<~<cFci5`;F{&b<@1lx=nYeXR-QMnua|So0GZQkMgpzsuu+K9y&qs?h_1x
zzr9iDcwOkYCUlA|bn55T7l-q_*xhV?4LEMY=i}gJ_H3=$_w#7^TO-vq0PI6fIQgsg
z_3#ngsAlml<2JTHaD)iN6Da$2y}~j!*XzC_d}Roi(scWy!4_Avv%et(QpXf$_mU`3
zv?=K6HFQ|^CCvTdy9*1K^%v_m*OFpeuz7bkiH+C7MPx+2c;|4fkrk4qaSVt}9P`@B
zAvim%Dfl51w>Jk2?iaEvIa)LOP71K*@VrWJ<njPM|L_mJM<nnSp7PwXuhh&kp%IJ~
zb2;a8OB9nfMCTqqrk$oCCVi5D$1iGU7KGa!P|#^Ve|7G@ib^=Np<yzhv*R`*OQ(Dd
zzfB&x>C<$D<4{@w`?-s0-MBT3cp2~E@OKJpa*tZ66Q@PE{aU4RJsl=t1p^q>umQ^a
z#APjRz2y}%MwP`!PqzRV-Ql;}4JqB8j2f4H>T|J?`C3EDE)&$Iy*H9E4uJ`HyS8V(
z$kD^#(c_V0yS@({$5<J7%{RY6@vpsZqTajYVe(6X6q5%&G1{1o&j^1kBHi%ytM9PF
z_6dJ_amcFi%53&i?Ec82n|D7r&fp7~&aT5KVZ~|>1e>`Hn}s8m6lUomlvHYI&E=5>
zcfel?b+l6~b`1rZ;IF=@$v`5?ygET9(4H6(8Y;=0%TZ_U`%g4cA`Me&dZe0WUpAbY
zG$U+3{K}^HV^YYL*Fu|%{*_rG!LS2b&8j&J*xf(at~F_}q0Zt`=aG%=!KT~0opI)Z
zrQT8r#kj^m^b_Zv$H1%WzEiXA?#b-$3Ti>>&`JCxlL?zS$1j%H2L5`Ox_&GkQ(Vx4
zPfcvF69(83ySHS$1&w%4Zmd?2W^q~xT@4Z<BwNGPkR&J~Bve}iim^@et5XS`9B5*7
z*_AYQt+*0vj0IBg`@4LGNK^Ow{+?JgjxNfWf%VSzRr$N$T)(S(Mt-mC36#z<Dr7Cj
zF_#gv%EGEAV%EPe&^IsiDA-b-)jTeuf8W(<IBbT}R_YKOiJUL_W?{I0MGR^uS9G?G
zD(pMdELvx1pD&*_;xOCv0qwun_7sW3CcZD+l!?Q#VacAK)Bm|oBkIRA>^De3_o<!2
z?wJk<`)lXjO+agAGLN(`Ne27HA{N_YaV4}GvAECLD~eO_y4QWTU>%)5T&-Q_7>RUw
zCQC~jn=S0-Q(&*lJEQjC&sw$M9A@`qfW>){;Z*M%x!zDi2kb(_EOlyyW(yQc`WBtT
zbi$FzV_MM!aY<`nI93NKDUW1XoVXw`DY;ccbUn-Ctaq)FB6~<!bTo20m)M({a1D+7
zy9Pen{(F8qf^`ky_#M}z`8@5gBc-~Q7A4(Avc1aM@M6nY)g`j>FsU)do&tPQq1(}r
z_Vcw$)p@KfS{Kz+t@iOiXpIToP!#x*RPmYcvd%>iF6#beOqzF&l&xyM=uvY>o#X~K
zvgL<^%~x>Ck&MVE6H_VIHD|dYB^R{ipB8dFRy4!21IbG#M7@v!ruZupUNDqW_k_B}
zqv8$=HW*knLtp>WpekmW*`E2gYrEAIgz$Za%FWMSqd7c(loYin*`n9Y85bI_vTwGh
za~!Y98s$Lb7oyAMs7X0(&B8PmYc;FRgzdt*ioka%z@pZas#1+dJkGY;JjV&we9xo2
z&_Jn+`d)~l0=oSQI+u*r!*0)5f)6L&k9%aEn5~w+rX#Ddx(K5JQ_qKt0VFfD2|;er
z@M2$}^)f`y{b2thbCVo%47nV>axqWcRHZ!nJ<IjG`(Q$<!DQ5(3inZ!AM3p=Y&2ok
zOvg-U@N?(6)4|YCLKf>~xydrJslZ?>K#P}M(3p+3Fx6y&CM@@<Xz2<H+im$-B6Z43
zG-h^QSrS(`fR7r*P81Zisv}Gr#j<+3gsX3rLW(TLVOL`QoK@JG)b@L+TB6(xyurEt
zeDtcw!91z^qT)q##BW64iD>6fSq$zajO{S|G0IAjM(bL`<&j^nFO!iqhuRY|@oaqD
z0!2Fp>bynOZ?kuqGHOR+PgF8axQr_5r%Dx44%Wug9mW-7wc{-1u1RJ`pTx@f?JCQ2
ziZS(%pr@@5XBv2n^E-c-wI1>X<rU2R&3FTyMp9$F4MrS!&J21_L}W6nMBpsRjEiLp
z>w`ud&Fcy#D^^958j}ux>>dpBO|X5P=mer^W}VPVs2}Kc2e3vZt^6M~UIc6_f>?X#
zs0`HbyjT!5D|cWQCMoh*RIcnwWvWQ8^}OU0g?-O1S((dMPJL8`V?}|C2|*Hm6wD7L
ziA=Gj_K3-2UK`4U&ePNpycSZFoOwXb1Yn4q9z@J4CwYTqpjaqp!bp@deEfNLXq4M`
zsJn+RhM-M;i$<3wAdIE`-F0>7>^UD~%<ggGOXrMig`}B0A+6-y3PmhTGJ4i}<Z<P^
zJa83#&{Hl!>yn_$t5h)NgEUc$LeOZc|7g75x~|quGM(+<$Uc{p6Mx~>zzL2<Kv&UC
zQ(S8-uc<Z|X%Nu8;zm<~^i4GZCB#=XehoHr>O|tiO9rUowDytJ@W`iWUJ<bmh*lFP
zZDZq2bD-=fRyCsB8JvGrRtkWnx(`5C&F(GbWYkl3Of@gnPqr}A?N4FIdjd08WTCRj
zVUEyu0{Z|TP$*nUO=TAG@8Zgow&h|se#r7FW!9L*M-FI_+ThJk$-vN&xt=~cH6}B|
zoJ(qMW1XwiUh&g=*6N6+C%v^zIaiX-e@IegV_uSqgq)eCLUY&3`Snn~&sO3hJzsAX
z?>tgWX$;e<*BRl_q0|V|7qEzid86PgF^FFAY<on-pT@ChHw*$Scz(gTEX>seWUy?3
zWozdy>L}#^m~S|MKQ7l^ND{EgYQdzdKBBfx-L6r}DHih@ddwTSXzF{YZ%4k6YB*MY
z8jOK<7C}ttQxd7^x9D}+;^2dKHVX17=}|7#2DfTm9%Lkr$#B65gEwCQb&RfM7j1R%
zL2h~+z+9^L8@8Ccn9^Y^IVk_r?^Y0H&tL3X78g-<-p+WM(TUPZhJ;X^7E~ii>aaLW
zinc&GPUR+10%T0LpKy@UVPQmy>=tU|S2|2+fT}3`47rS~Vqk{LSpf}lr==NMjYVC^
zE>uD_DI6VPn*>3QKRr-iI;OMmDkm&vVJrHC!(!^ZPyDWp`nx4oL2=lP8b$0~(W-*T
zSo2env*(=drFg|t5sN1h*g;*f{>U#+4Us*zr=stAvQLi{)`|l+Npv&ol3ry9Okb;A
ze_UNNs(e<**;fjH!R*jAV!lc7w4!uOi`5-oW=fiOW^uEO(PH)HF<gCC&alW5=D>cS
z*>^;sM9Z+R&zl+))TLeEHSS=O1GSChx|WiKT$0<88E^vf*K$94_g_-=cpD>p!GHI;
zi@iqclBxm`V6f<4S`mDI8V`@QO0npVsB3^OnhG4W@!`Ne1$;AC)v^-FCvM6)XONwt
zf91I5ODW_aZG(SkD4pavt_DrB;63<}d+vnkyw0$Ko$Qu%Hp#!T*ug80AnK1R)Tgs*
zrI(YaH{8GG;S+6c>GR6y+s4Sm=y-DELd$;z3Qj?(vQI%T_=;dHn2R%erG3}qF%$k-
zwcm>J6@aY^vD_kMk2Gnfdr>7W_gpjtsxdN=4v^L7KDNxyVT$?GTpcPWW@3YXAy6+N
z;KSrQbwjJUNg6m|uuZ0=hk$ihN=h+U6KM*%eH{w*InV*se(z(^^+TMQ1G=CI=(S#|
zHvc0dlDQyCyU<@S+9U(_NpOi@s$1rM8uzK3*y74ZoMX8g7dI#5@g$L&n?~6RLHI`!
zw)J{9f|Z!PkGs|8IKv~2Ay1Ef28@g49MqlG2gkGp#}m>)BViD3Em<HgF_6=PDboTd
z87_M%k^fdPKpf0Fk=QxY!W8cMirIe^ia$hAZN~ugzOuVC{g2uZwUMv_EG!Iwd-K+K
z7XQ>m!4PEwps6N2L>#C=&0p?b+Mc5(h#Pk9(0ZFr5cJg~4mG*j_gJ%}C<~<o5m^00
zNn0xz9XK|UglvNXOwMialR-fkcL~1t!~XEMj52RTBWrbe%#36D4$USgfpxECb5&xO
z_03{~Gy4<-@-$#0fFYr?-f}<Bqt&yIK$5Frv6=DED3eCOJE%b2@S{^({(A|UHkHh#
zOgpScb0LEHnSzxxO|*kFk81TCN8&4S=?%l3JPkgs1c_2tCZn$_()^!pwy{PVwCn!0
zt+(vi<nvf7Fn2X5HZ3B%0NC!95ys8Ag8AVN?y@9x0<()t&;pOMy^0QXlSQeEl!`Ty
z=J1cmFab-pMYoehm)LCI)KhfJ+?4>|jK8Vn%CAu@#4syu9b~+Iyn#@PvGgY#s<fD-
zv%1ug?p~nwmD9CJ-&&1HY#3_7*+*McWh^6>1;6orYwN$!hgA8y%t}ZE_-$ii0=n4?
zfTJSM!xTZm6_K^iD4`U>v#%@C?Jxe}*cMdyZq00+no$E-{1MleyTWh3gG}nUTLlm`
z8g)LJlit=6E5N_c_xCZ4nrY0Q^2a_-^Iyf6OjF&wSEc5<BW0nrl}AB|6>UOs=gpNC
zf>%KYYNEj~AsB(k7K4wTia+k1W*1<0ZlQLA&+mD?X&z|J)9ppBw8R4f*0a>xzj6rG
z9X+NJJ6jg&E8lfX#n@1?8YCX&&vL-h7id7uWVo5CT+oE|Pd4dp2c7hhf?AOh6mblh
zyT)AKrX76x;tfA$$|BoJYaabQqe$uwwqQLJXOyPPDM7@Ln8snG780P1?5swTp@`T7
z5~ARCNZS0r0AE0$zfJ))H5)N0TSYr+_x;!mCTU3qpT9<qGR@SNsyjBBorG*+nw`Xc
zEWm(b**5h@w@ML7x=q_(;Zvk+d$+U8FkNW>qWK~M?U&NlQmsy3gQ?(pGqxNp#k#Hz
z$66s~AfxIA)L?&5v7s1DDs-KuS?6zTgf!qOxhE}*r1hx5LJ0BM<h*S=lw#SYs{{DC
z8lYi`Q3tV84Y4#S)WO4J+8|)W+o2V_N>4dzLZz`;UyRCvK$-hCX;XI%w`<pMzqW4T
zI1+BRr3r(3w;MM~)!9$hB)a96Hx9gsH8$DTG_L_{)#n>RO=Gq$r}Y@;b!<_EW&d>?
zJ&UhqbLi1(^S)t+sC0f?Iv=^X_rPzqxgn8&xdJEz5X9}9h-)WdMST^ORcL$X%W8Wc
zYPCHBNrLM|_0fEOjDl+usukU-)TZ6Ui(8GtTx9kY(Ur({?#AE7Em@fb8j4}W_*??>
zK~P$fR8^c?LtJw+jxf^KGqg6;lN;%&DkVg8=R0%n4Xp}#**?Xo(pM&vbLFj5>4nm<
zuH(vFVB`j*fsGw>wm_)n910icowvYdlwF@#tW~;`k)>T+G*rdOk4e?2YP(o&56$wX
zVe7wUYYpxWOE=db&X>BK%epRZGMay%gScYY{>k8fGPt6}Z#i${G@FDswRRttt%mo-
z6k0p^l><#I=g?Z~4_>s}u%;5jVs%v+Lu+d|Owbj<bRJr-h!e6u=&`?>6~>)9=T(!>
z9hI?eOElXTc=^LA@4!k^kcfg^a>HGwW*+kesy>N|6;`*>4r3jf%CP)#=EKsqYFLWn
z3W{y7XIcl&nU|1xSV9FrGTjl+ZW^o}YunC`5n5P<k=QuSC`+AnwWm)s_Z>Wi;n93-
zsLF(4kPLN34C8qFY>ZoBFeu4_rbMohVQg;qw|ngG&hK<=5}$QzO_cw`#-_A{Uw&+&
zhOtsHDK?o01Y4?Hsl5F^<?WGqIoW_bD!)E}<T4L~uRyO{q4k4lfLBc9^vP2`#i4Kd
z&Z0W}&!wS3un3%(VV;vLPZg*v=-tuKDS#?#vIk`C^hWYtne29)SMzBWGIxaVQ&2tY
zsd*bJnFiT!St5O_8qJlrzb?y$Ps0b|!zqY#o0Ln!i%Tnm-diKtb&h;LtnVI?t6|63
zd(+xOCDHo_=@WZX@7+0j&eJfv4q*v<dKpf#>K>vj4ZFwGo7Rqb{8;IkCr`B3Cx4i(
zGBta-PAd9n-+32IUF-&TTHQfKzM5X@<;R|AxqK2CPJQtd7N{x<`mV@X9HEjv=aH0+
z`wAt_v9p5O^~&4hLp71Vc65wk!c$d&kapNh8bTOB6C&>(TEbW7uM!~}Fqhs>rLJ!#
zDh{0Ef6YOm&uSKzB3DB}VdhyYe;lej@JM|<EF~ZQVY=2#h<i);!G^<{l1uu^-s72$
zUO#Wxf2QuX_TD#*PNYA42SLTlcZ{ip_vjWQy?=i5t|7h69b~2WfBjYz|F3&c+}y^8
zrum{I*ZRmx@?U=|lK*;tl51_ezw{Xh>GLwa00p*2f#I2&OCMub+QrX9${&tvQvvkN
z{X6Hu`o>7~#>2tfN%rCJ>u*N%U+*&_%+0+2h}d+V#SyL&6n)<8-IM2ARG;rr*c`fn
zFSF?6#%?z|wtUy92OBRO?289=$5S*QUsD=g=&IpbmEF>rwI#UG*g<8k$|y*Knd6F9
z4yE4)J0b=$zzbX|&%529JGZ2B?KSoqBL?^1Ns@WgG6GCoDguNVc1|sUfqqvTAA<b-
z!Ee2LWcKuj#yspEj){G~ym{sejhbx-V|lri(!8nR%p&AWa=Ewc;`Wr^&00nJB1jCz
zqhWwcH(D&`8ZEn6_a4B<*%p@ySzl_#qTbk2|KBy@gv~yvyVKbFXtbW<%!D<*4AZQ{
z0#o?N4h)y4vnzEHZ$xH^ODxCXjJIGJ>&~rsa%d-=;8GxUsbKZh8ja9E%CMfx;a0lL
zV*aYdANEg){A2uDd+?fa<<wC7b9DcsgM?ZR)))Yan9F`zaI?SZh+q^>4#`9YW5|l;
zzWNJ>D)}9|><dCX54@?HkOi)zAF)Mh6k&o)q|*X_MPZg7Lz1IbVFyVwydINUo4P~4
zaR@ZSjx3;AihiclTpW8x#WQOgrV?V~L;d6kZ(bvvyzKvc*l01aP#ueKkKW(<H5eGQ
zO%DWu$PDSZEK8A$FtJrG_a#R0<I)XfLIhT`tU)B#OtbaUSM8cR%j`2+R1AwY<U*<>
ze*B_!sr`ru<W!`rTuL9XdVk2}%28%V_u;CNMkV7lRNi`}Xcj|<nq`;sG;*)pTMY00
z-!ypt8zZ>?_cX}<TjY5f<4wIuKm<!dB(XcC2xU>60WZt(q&>pKxec;Bq<9(x&SjR(
zhU@Fs;m5Eacvo)fCE+aV$H~RIAAg+pXP2|@LjUm6O|IhTc1Vbb@>tP=<pF!M5hTrC
z23ehaZp1EBa7k{_%l^JN2A`FR!IpD;HOp?RwF1gw9+F}<7%iyOs30p*+?M>qYw*nT
z+2u!rb8YwRLIW1|IGgypvh_O{#y_oU^~uEETC_3AM!#NRF|rHKaMJG9o`*%qOGSey
z8}KCbM^(;#s4_It67n`0Yp6V=As1E8i!Y{(PAq-TjDFNDD~lTZBx7IxvyyjqofABQ
zohbvyXtjGD|AZ5`oslTUEN7>9>Yqe8WIG@EvC{EsvD^+E%AizxZK!0|97*IT!)6XL
z0cnam=`&w)7%UW!eIee{`?6Wc;DRw5DYG@~!We}y&F_Zfzi$St@7SttwaJyDyBl@u
zi#RbYBbwR(9$devR@6-z&!P)`XtAA*acw80-keSs^vI~(W9H*p4(H2N&an(a*#e-A
zgGrn;7zK;T57Sgvo?vO!RCb7)V)#4LGEv`E(=I?UE!u4iHmU`#jXt>*SV3QAoIYEB
zk{M%QbNn+~mn}wPv7JEo3Wk{_Mk_LfSu~llEB2sjbGG$B=@MN~jo1QYZ%))^yKPmw
zZrFhCed626yKlgRCy_P8-5-f9R&2(0hE%<sU0J`?9_VdQfz{MBGP8$$Hn%t1yy(;`
zw1mmYrEuda@BY||#e!VXEV7+EZT5`fhFL~!ZVzQmrRbZXm}|>+$+9+6yE$8RQwPcc
zOEcKsF-`U>hJ9l;|2NXC1J}E(zEFd$*7hi#BP{;1Fq#L|YyM|ESA_=7ufKA~!L(N8
z5S6yI>p9-cvhXVWH@mv~Du$8DZ_5H5<!b2U<wou0FU=~C-x7D%-2JJ_`RO#caHoPm
z)jkQ$c)dhygQo$KnccY3FpOi9<Ng0TsIkZa@+P4<1<PA^<xD)+C`vQy3W9$cWPETn
z@uE>X<;Un_6kkU#v9toD!30!ko1|;vSnChjkf%rzwH&lK_beo4YdD5;3;n4SkozPc
zX>Y1pIzGiL4<s6?x<%z8+dq3yq1Y+U`LIwEA5X7C(0RH`hz6q7L&yb{=wDSt{x74=
zp91p>3(TeXX+d6ENP<@JPh;_UK;n~ERw+N(#hSGOR74J_m7%Q8ayV5%Q4z-YDd^6N
zdbM!!GL)^ioC_2{K%-?N@SX9k<2vcg^#a<Ib|WV&JZ8gGz8khyj5}@fmG;FL0$L`S
zQq);>1|PbX2(fe7zpmP1VB+tR0itmvYpv(a(ZY)072?-Y(ZQOE_+}!u7V`q@1*V`1
z<3;WLUE19P);LGUZ(iJw4HlPs^%AF&oD~dU5<G(qk~|<bFRSIwPmsedbyyg?(siVT
zx7>0Laj#;ZDmKdweUAz<HZaaJRF~SMsyF^L*eH_es9k){V*zqvF1A;sbZ1)MpKPXl
z=B9ypgV27kr-{R}DH;%6l-kHgfZH9lJ${p!UAL9EX(_OMy%F<nrTTQy65iY8jheju
z<s^pn137$~yeYn@vv<K8i@1DOjF5se@8h1)XoHbeRpHPWq5~Yxe(0Wq{glF=sXGVU
zm{FHO=!tuPU&M2~9mgi3Qp(*xNXZp1C92Hc@YDj`ceVQ5f%W?N+5;;pZOfCs+{U3w
z>ar$<h!5GH2I_&-HIl`jeJGpz^Ni|=M!8Fi-Mg=Trh~CtKE5TfT^`^pZ=Z=gzG||a
z=8>Cc+q|=_n|OGm;5onjS`fS2<mit^*YYt^t^L^NOti4(bt^)qNS!J1zylogsO09R
zoNVM`<21fS(>Rg8dKy2&EOr4VbU?dEqB=^;zb3lBjX7Qi*Hb8ZG=T*=p=a)}Y90Ea
zbY+!3_fwU(S*O6-vwHsr$NMv4)$&!7+TGYC{iSkxFh~`{Mr!G*mSPcP?g?=<ZiS6W
zJrFb4Zhj($fZyj(43Se{RkaYXT!B(${4RP*yYmf^9<o0sJzPGP)=1GfOKvOtHxW?J
zxpX5R$RI8u1(nR5hW`$dS`!X%r2Whr$Ffp4=WM6<k3dK|$D;6dw_zYqYRUArk!~Tk
zTE*W|RgR?OR<uEu!W>j%!4*^U-Xt#=!pkbKa%XGYgN@;50@aj@xtsWb{{wH$u(Zm$
z%u~d#o|$mN;%Buu+aYo02jlt01<<=vrakAmsty`ROC6TE{eW`3gg{l>Y8<L-jHgw1
z6qe7clWjNfpOy_DwyU7;anjNX)*kPkEjg4+;Pfo0kKlgSu<|}T{h-On0ONBFjM88(
zigxO%H=Q3Dtr!%`;bJ;=6Y^TZoj0Z}+o-IejkYmrB2w-PQVq)BfntJ|kJD;shOuvi
z7T3WkontV8K@Zz%II35$5r(*=aoFgF#tLUw1}~h{KvItRm>}>ij%p~StsN62ZbGPr
zRI+QBATiCq8j!xcFv0=#qXtS+Cpgf%xf+Jy^r;CDJE%|%stFsCF}VheY7u{6S=8Vx
z9G}NG9ol?_Nl2deWSQ2fi9*xO-LT2@+0^f0scq(_!EIF4>|G$akoTN6wYV)qtMmj=
zkvPvweK6V|q$$1DtjZ#`+bb9?<C5@_AyDs>U=E+d)+kad8d%JJN9QWH93hyU=V+Lw
zXi~=GA^c4Va#FrWG?kNk>Z@36@m+I2On{@qPXR8!k~AyUvf56~)PI?CwCdce*@fvv
z-b1go(KfOxHrn7c?r17^Qa3h8s-sD!V53MgD$V&mf&9&Yy^=1)1S%RNMvJ{Iz)pCz
zH2MtS5&FD)7q`OZMbVx-4L#moPUFOlE`sxo59m0+nTdZJd~nvBfuVU4K-z>!QHUU~
zwauq_$iQNfRsx{Lu=OV0+~}gS`T|#mFK`-$w%oO<8eDA7*0yS?Lvc%3-3biy)_@qg
z`PP7t+oPpU4K&+qC<y{7uSGtn$YF@EyXvzF+5w}IN!*gIVWpjT_-e7M7M3dVmZn<x
z0k$<45m|S2`wOL>l(=xT(8-Zz+Z{DMTs0{@M9eFdcFm4@n$}{acuqZTl4XCy<jv2&
zvnjlgVkNP5#l%_>d6kJb4vo6PdhS!KD5YMncJ=g|8Px3_GR#d)v!=_IhI<8v6!d;w
z>8fcvnz}GvjU_nmBgjyJu=T#)FfIIsptd0S^wsc_t6Si(+CmrE3qIARg2qz1k><GI
zj!-=#--~fn1*ocLYJ2D{Hmb}%_KoU=*14i@dd}Bw()0POag(I6@~EN0c&~12Jg)BD
zdk-K49v*4CP%z;Ah1l$YyI>)1GYghtL(#pm2_Lkg6kEq1Dpx+$XNoP_o*6$OmV52x
zPaLb-1*!S?V`OwAwb?L6mi_gbK`YtMZ0e8E@lma$9(t}_Gy|V6Usc*Hq;?uK#QHFh
zjNkZ9e%dpcXbpR<w$s81c_89uyta88L?Y(3;i_-h^i_4z*sKuOM`|ZklaOkr{8}~W
z`>Dl7C8o2CZ@%AL^QhK3mY%vELXBR~G_n+)3(58+RO^SFSsw=1>KXO!PsRIB#rsdi
z`%lIDPsRIB#rsdi`(YJt+sz|?biEt*oVOhq?H7Qn(O*#AgsAr!9DN0sGIjyL(2#;5
z0c-ukN&&j%3csvRmDM#y@nEt!Tr_dqt31D3TgzR=d9knHY4E2jz@M%Ff4TyE4Of6h
z!|M;dEv?BswQz;;iBE>*<4f%OsH|UTt_3_}=~^>IvEa2>57_9^cE#YrCZxHHSTV2T
z0S6XU1O#2)#*{AEh=RZe28yHUEpS4>Zr6xsM1(9xg^89BE4lCpDC7u<au6aejo7|M
zJ=gc2u}s7QJ%`<Xha2$;IzL7*q^7Ya)74F(o=iHMop4Tx=2zn&Y4@Bq2kBhR)6BVa
zK~PY<RA&~aVafc47l{NOof$=(uiabv>*D!<DW5F>|I~A%2uFB4$#~;M^JGvR;AS_v
z?Gnk-kKt?vG|R3*>N)-#rw=MQ4Q}YBU^jB7w`rL6We{hV^R(w&Gm0Z=5e!laOS__0
z95xaXP+tO=yHgktk^>`vW5-{7C(P8?FTqWgxP8$EaUAH0vtim;S2LfR%YwB2P{{5l
ztZz)CmN8+Yb&FCDjb76LA>L8G6CVv7!)1zuAn4Ksi)mUl@Y@g{1wvi(&_|XK+^dg#
zj&sjJr$zvlvoxJ$dL~lw;3t1k&i-6+>Dg|N)MIMT@+3`yNRXC2e9io^<d8rHCuXT0
zQ`eSYtge0-Sq!+^fmusjGu|crfKET#%?F6ske;te5cI4$y?8pmiZG@tQe%zEP*5Y}
zV6(-*5-r(8b5ll1%(b!A?OwqkoG%12119iBRuh-U&g`|{Cv92+mqR$ckJ?psmep0t
zyohmeb+w?YofM3QhfW1}GiRG@V?>T8hZP3mg?d0#yn5)!4qsoM$#U74Q)m$mYrr_H
z0vp#@b;<@rxwE+q$&$#vkJNm4*RVB(7rQ@eYb}PF09vK7^K%n8Hg;NeBvrPd;V@fZ
z1XZ0PDGphlu~m5c<mJob?~h)#y9?U!E&SJLviN;9sA2EREd6aI&zfdkTV5IJdL>j<
z*z#ZfbUua^NM|FLB9iLX9aRFW);^XRj7^2^;=;Ffrmrk{SB<hPlgYQ&Hk((?<jp3;
zYBs!UF0rebro@6Iam{L5J^MkUE4!0OG_2|G#rk^je!g2|7ET*TTt>D-XS0c_Xf{PH
zA?TV8pD#|%QKib%SZ*{`l&gkT<z{ldOn!jQ)?}r<w|`GV1%7Wn%y9XGXdjLCT9xhk
zpDx2JIK?=-Hf`28=P59nX~ovLQ{v$zmw;B#cPoo2t2Mf)mG(6!x=ogrNr-nu@)7ki
z_AKXJ(3+Dax01}rEs$Caze$`xXTaBukrO(P9iu^OgtRJM8ICnTLCqo-YSU#guiMTp
z6QF+CawS=>SQhpEH^aCq40L4MGS2W^-J=YMJwc|oD(iUxSu?`waG4-uP~mrV{7c!I
z$KPy+!(<v4daT71529@f@`9vAd9RVLmeCZ)_Y|r5+~h1DKKmHXa<iUtHq6B8CJ}BG
z+x4Ql+0=U{oAyfwtQgr`|C1YeO4vi2wor{$JxX_@CAXG2H=e6of%-O}Hnga}D)$m~
z0NQ-P=tEhIHsxZB66Wa3bzU^-gLSwXjLnk4nQ_~SK?P8)&9cQ=8xMT*M%ux%41ssS
z1;(JzccbEz4}b*IdjgP+^NZc7IQ?BSJ~bz2d^F1g0gi8GUz_*W*PXZVjJ9Qj|B#S1
z*Owto+hGb2J_gfUTtDG`_U-k<wqaL>^QL`IMjh%b`?;y?T4^Cy4A6Y*9aRSGV>PNf
zDH27XthUY4Cwan%r6I;_E`L6>>LlujjAxzhlD^8-1Dg%%HZaG0>L!JMR@=CDL|oOM
zvdw$*9ukcxrgt^iL(<1FRWPbhcu4#-P<J?wv4%HObrddXpy+TG)72cohrbIYN8;)S
zRB;&81r!{a|0-hB$#fNN88*cRH0CVeZX_J0glWA?;!6_~bNVlE$uPs?oqPS|QPIcS
z^>C5-zF9-W$a>`_AMvb!HomUtGe5$Rr?9U%mz{HSgl@Uz*?yZzQuFJ?tE9j7l+4@D
zX55_aowB2Dm=-Pr#&slR;j?!iQ9$24%d%9-%g`4<W&B4~D7&-S^!EECp3fA_qu3AZ
zo)K1=gvI(72<=_2>=tb%)|E-{;a;MusO)8hVX4-r#5g0TCFLi|*Y9>}h1h4avBnI{
z!mJk51WPP{Siu=hZAhc$>`uJ%U~H3oC61Z?$t+)$S@<N$c*Z<IL6><SNeES(XJr6b
zP``TnMLwOGC%;k6iN6N%70stiikYB{jU;R-=AuDKW{tDb$b1$1mnM}?6*Yc$6kNkf
z=Q~EL*TJ=d*HCzjhEU6`g_7J|i=P+jOPAnu+UM<VMKq~%^VuSfXM<bQUIjR<+Rm;>
zM!eZP3t;%+=7u?sxSq)zbdh_#(uuL5IA+0sG882L)r$QFGk2M|OfXm@8}*l?m*L>e
z(gb@QN528hDlAh=4b~&{H-3g^2LES|TIsD*Ifgs;9m7b>T8@M~K~TkPZE?#-+UCta
z5+A<e*!)wr{VCgi=dz6%>zEd!>-#9iFy;ui)k)F<SEl8o)LG0<nQ<H$I5MA}^NSdd
z(9!<`iK_DtAeiI;3*6QhMviUWK?=WmUb_=gJnNA5YTCtGwXJ^ziE6aq3QHlvE?Efk
zWeCe8t|mqUF+0J*5~vo|Lb4vSuVDmBgUG{d%%X2IAV*NIu+J^%1j~!cok(C7GC^y+
zV%eR!PTbiUPK40G;^1e8??UngnhvR0Nh-%hm8?n~Vfr+TV2(1bJY^J-5%dt}FXIb5
zmr{&)=n6B@Or=@HMd8YmkU7Gi!ZggR*h*WsfpSxz;%p+fxjzLh!|G~W)W-5Paf2vV
zk%SkQjp|?-O_dmHvDyQa;fsjNHYFG?MP*V#x6ZSOkJ%Ey?~I>ur)Vgp2!n*(n~Pch
zjJSz9^zUc}9Lh<;&S9@bwUtQ6dTIk%a0w&>s6TROr{EF<dHB{f<Y$XL$iio6PBd`Y
zOFNJX9z$T?89p*IkiufQacEH<lj=~vl0{l!FmC6m>47>=J;_$a`lvD|8Lr^5s6VBJ
zcL}-XoV#d)4E@odd1VqW+}hd+*c7P1zS*EJD-lD(jAHYGSlEyz(_0UtBJ?{7LzgeK
zx^)Vzeb%7O`(@>sq8HOt+<3}DKGLdQfF18qv8w3Q&&ACkOWM)MdJTx}Bsi{870nE}
zO;-9eKPlC}t+WBpyjcovM4zYPO$!sDW-CsnTJJ>@I}q3AdX+urg4x--=Idz8T5J>7
zqQI3HWv9Y`5)B~DC@#j8_IYG0ZZ<&)DCX1!f#vqBYN&a(ksb-i)JW5YfT5tZc@_4z
z#$e=zHL>Su;z}L}0KvEzk~pF#@x#c<4oAKpVqk%CUzSs>{dfe)7ZHvY0~kY^70}Z#
zyAGku>*r-arnEXhZ{Atq$Vqizey)J?b2C7tD^jgl&4I$I!-!ddN%yA;2+}8eF~xF}
zmsGx16pnlf6QL}Ga~OuiDo}dhC<&0BWCe5luem!7v)eK{<rF)Ra^d<yFXBW*)ikuh
zoLb8nCP?L^S}^4Xl~e4Zn^`)HBh{2v2go$S3`tfn{D$}tbxD&nv!z=BDmxegit^E3
zv@pF28(|KhoMZ*VY@0d+^=reze+w+-A;AjbZJcJ4@TN?KQi2_XzTcCB&=V>^h{!(j
zYgKk?Sbn8jQBL`81@JDIx;EiuO0xpWW4)E`^s^Va3@3&uRQqf%PO<!+xrMARzE}(W
z7#Tb0$EaENR7kf)L|ZxZustZTrp(yY7+FK=RO&okgAQj=YOFvF*-c<ADvk}TDSHK2
zO^nt+m2+1B{dqB{Ki7ig%8(Tfrke^{RU;cDa{&`*RZ+6RlX4k>=xUP{j*`&~%B)1$
zAsX^q02@@Q3b1-^6HudqWrJDHYy{Z|R3!+j@?~WgV}UA8YzViUy9#Kdrk68!7g^6L
zU@Nj3ftqzc8>Xi06<`|*8$)gr&<efK2H94`1YXw?Z7`L5MnFcL(F(4d+XS?vLE7M{
z8S6nYeX<!e$ZG;<(k^WPOL>g|4Z5Zkpq|$ZP-vcZFqFemSl2@<peR{Q;4E6H4Wuc%
z39PK6+F<2*i~vd+s}+oz(+Et~U#)QROePRzZPo@y%V`3(*yPc0<}hlybugu?)2+r}
z;SM4ni+WVOi=Z5I1~m9Dla^i_3gzZ;_M++H1t|F}xn^mXA<5@$>mp*$qhg1^+Hl2=
zkF77R4APGgDHi`y>Ba5-x*6ZF53rOazu97^a(&Z$c~i5ZX}+MTS;I75!c?zXnlD;v
z)+rUs6n$l~$ik#{EmFG_F|R(FEIzF3jRlq)bt{a<3ykVDMbjlk<tn0X5n)_6EV68<
zT`4qPC{(Wvnl240R|Ac9#q9fni>xJTcl4IpA#1)**nEjnvnpx4D5+kDEVc}3u<~fI
z@UX2l8ZR}fR~Jnd7uFR(!{tQP3ZkLDU!~$VT!U0CJ1Q3m<#j=`WkJPCp!q_eM)$8#
z{Y~0_BW2&N-`A=4MvcCaLT}gM8>{fuT6<Hay;4tarl!lfaHX<ZDAtP3UZGj*71U|h
zDY?y`#pE83w>{}z_&gvA-Ezg_UX*T40{O+Rol*VfN7i5(74b6|IObfAReG0ha+Gz#
zstYGrnTm@hI$rDtJ$~&%YPoI#!y&L!1WIry_6e{NX@+h^@NCt^=t*Y)9#O5bGd_b*
za=P-EqnoITikTODEMy%mpkzlYc2XaytHiZuNB!}<1S_Wm#`(?}I77XJh)XAb&ih}6
zA%)kUPbO3e`s68Lzp|j@De2<eeG-|D2u<B_Fg*?M(6n}JIgEs0d`g#g7>>(?(FrcJ
zvf>ghJ)KD#!wp?(U=i)+O{t4H?=)Lm3&&%vu<Ttpj^k<I;*bYcQPNH8aOQTZgUdYz
zjlfFrR`MmR5wq(`ysoX6&xkxCB#R70hQZR!C()FUF6Xsp^R=2idEsxW+Ox-8FU87R
zxb}=+YE;#7mcw3ufMGnVYuDzJ>U&3&dx1o#sv5siyh0_pWj7z;^(kH)eFCinf4Y2{
z=sRcpZmWwp_8m8c;RKmyZgyz`hf+VD`p(HQkK=_1Bq$C2ltW~qi*C({6aLKviieX*
z**!V{fNs|+%J747eRJSXvlzC8Zjfaxi>mWx(rM-f3z)(Z(Zg$SJXB8jy)`(8xgNA2
zbv}hIpwF(IF=M+--zj*jQ@UsK;jLveZgwlm;?XkAE@kx6sJN+08*Y#4n`Vh&YPeRE
zRW6TZwYG-idJ#)%fuI(1%#L0z=Hz-7LX8WH2B?WTbMYbrXchpa-Zm*$#BV;84+Y9e
z_G6=t=hA(Yf$>UGN17Aw06HvkraCL;W@5vfr_Ji+L#md0y-sf<&jH2Z64=}O=w1Z<
zU(z^Y!#22?#YvX-K}PZwN_)`X=x?{VN+Hr|V2A-S%0WL5f*DAd*{uqV9SOww*?b;@
z&c(V{pvxjlq<WMsiC6d$S!Rc>S!M`WN*Ow2VOB#)okukA$SgzIGz;<bjoPtUEN47-
zKv<lM>wsBd_S*DnPNn6OBnbXp*K#E<0Z6N3h++=TCY>%iSl{7u{aX<1S3@TaGAF%0
z+;*}Q9`KS~AMS5}p8f4Q<`g7d|Mt;}^DXM4?j)GP1l4u^6WW<NKLBHgzI*GeJFia8
zoR^^o!Xd!CmsvJThwJMXz>V`U%CvR5l>+#39Zy}XabPP{Rn9$~B>2}nOoHB3?9Zn`
z_wx!ZcsNh;#7;X%XJ|KRcl(@8F&CRs{}$Xztnm@wKpGU>3AqGOvCv1BUFb2yDf~M!
z3+2W<EY9D@e3O{d7n4RScMJh2eC*OC3q^G|Y0sJDvGcIkZ_+-`*cDKUPo0U_jmt5S
zmZ3LAB*$=dRpyOJ#IEDU>TWQ8Bb`ORN%JesaMTgBl%`pLNq_s|U7^uUuJ&>S?dR8d
zt>(k)M41)Vm3=NU6zZgjN2}ZtkqVtPtr!s#6l0jD7y_(BE<W#ch)^Q~$Pb~*;CNZc
zBCQKCKc)1U!crvp!8FK%avH0X6%^Iw^B$~Yr2;V0^4jRLScnyO323;>i}o(BgfGM4
zMVz3(o<>cVi}8Zaa)#UxQc%FVoJSv1hE+eEffn0ox4XTvbz!KUzf%nxeFmogOB_a6
zUXJSpYAr^OssWIj7P`U=G|JJIj0g0sn0c<<=|^^^wTJE2R!~qg$nzh9DTwt{$<<Tw
z?y6B$X;>Drg&i{MN$8_cFw7<>L5R~>CGBp0AL5FBQqj8%r{Z|)Ig~Sm^5x^SLs^Z}
zkwBGl$oN&B0G3bnc~U^&oW<-%N0HnekDae<epN%aN{^H7??8%3sNs7v^wfUl)L`AM
zceA-gMG3q9C#6gx`P?B)nlSKs#ef&wq?!IuFc!faWRx9^H#xSFaC}sp{M49=5?Dbt
z_KOQADJfrbnYA^JBOksLh_$m~KBZ0(3Z>V<hdg69ANZpc*=Us?IG@ja)bX_Ar2MN*
zI5Wd%@JXBkXW2(pBNemPjZ_AP1|3oiN@xR6?rH^3N5+7$h8BLLD!b-0!ZLLfa}(=^
zbA{$)W!CJ}LP=0E;?+(}X;3<;q&P?wkqKMAo+=l;fbKPj-T1mMRKP<=oz+Lc_qh(&
z{Vd`G)9f>JxVpxawY$+>?=vrk##1CPlj~1m>6DUfmh%OxR9`s~<Dgv!S%qa86>8#9
z<iCpjaDpmMr-1pLqqSg|Ym+VhsYUv+p^P&W>z!_YJawawK_;(wpuPFzghuJ~EI#sm
z=?LU`PSIAe3zY9*wTj8H^%U<+DN^8*l=v);vM`zlQo59C*ddZ3zoQ<pfj+}kt2HsX
zRg#oMgI_>P%W^W&iYuu<VKg;0gOvI_E~m@2$4N!fiPByvjTzT1i9f-LrAVUhe50u7
z+^5*N0kgk;xrRPOQ|+z!=RY|wvsYZ(M`8o!m787mC(}4iI`k97haX>cy59~qHa5DV
zz^5Q_FM^Y35|hT=6I%|4%9MfwCrF00-%=pv`tA%rt6!NRM$hZb(=5Ic46dh6W7jX2
z2`{2J2~NEvoMm+BRB4|jxCv7jPZ#f)82HcAp_aj&qZ&$~F|?E{yb9tud>`y@=v6+8
zleAP|3<UHpg-9qRvuXLqcP~pRelVV2=!n4*5IFHoG`-bRvLMag;mzRaZ!(73H2R`x
zF^<YjMPqY9u_>Ox92)4!OxC}3Gw7U%QMxp<7h<!R*SW|QGE=tz7F?3^qI0Mf>PIoi
zy$Pryc@RiGc}hj(DOcn!78spwSvk)u>{=sd<yoo}R*|=qRa)}=^CHNe!RTV!n|8d`
z*TV=2>`tAlAiIoxEfptwnAj!(YIUKDyz7jE>^cade77JqVOI=oBYwe6Mv+`{yd)Dz
zQTsTCQFILp*hvy!@tqM5_+7~+=+OTs1KP=D48k;1r&PTUOx$BbLZJ}$8~?0fm#aY-
zToBDR=4=dvgYeHW=LdO{g_$@c=9RJ`<F*8TEd$Gx+FcapEnzREHOC#QjHV@)RC|7B
zC%u*+Sh@4gL~i26PasR}d`Pym8IG&GSzNMrTB;~+88%KJYu9{%Oc@$Uw-&BuJ$R3&
z7*pn=(|Y>y==I-@&(?mV4JlS7i$sC%pTs=S!U?B4y0Z;nS&?gTsnS}-mJP9e4TiN0
z!O3C#^Z)RMv;a`+pa18VR7`~}BZu?mN(6@$Mvpe?y4I~wv>p)Kv6XHkrsEa$K9-KM
z-0AV8r2Be|0$C#jhitG-SQuC?aL8|7vn-`evyen9;EYLl0c%ZYWJzGcT;+X~%7J*g
zbkj>GLk8(-ne$GSa<i@0iQ|59!zmW(mxe+Zy})?CxW9^+^uuU2&+t>vV0yssc#)VP
zJANM3;O}@i{jSsw9BsaCk@G_;78Wt`V);uS#{LN?f}IwJ_s;^%KVgg|!CGszXhQd)
zhA}E6Z0lUq#vI&eBB2JuFzQJa8-_IYe&?ReX~eh`h?2yuu#*?V43=(aQsH;gFwh1o
zQc*z2ECO{3>^D0+Hw5%U*1Q4{;-r_s*fls5<SfX3^Z}14-cGvyU+@3&{!#zi^`6se
z88Bh&E3x~bqb-toD|(;tCM$As;=9lEa@Ug@;}&b$j-9OPIHoGg^dM45Kzb6zyQ^~X
zQ9~BYHRzU!ZA(b4f?$0gt*`$_p?V+6%#u^Mh5J~;_4QWINZ`AN86hV!Zm<SwFd&we
z3thV{cwxLx-A|^0jm|jDhBYmI)KQ%-G^%@Yw>Ih^k|Y(Sj5CvABo7t;(SNcPUR4f7
zdPozTLDS9WUGBq}kN5ZQ*Drdl_wcXPExxwd$F}^f^FDbW{fhrjy6YELkPeEg*wVpk
zgGZI^<PFG?M5c`Nky=(885L-6zRXPOB3K_zh2YH{Sf#p{Nx9YT0qUlbuyRV!3ejqn
z(>&65Wt4IyxD;!V!9npLDNC(Y24b~U_HB~WaMuyYT-J#NSxhr(ULm3iswHK8;YEi9
z?R(Rn*Gsyeoz|$LJnalTLVxJWd;;C`$%j6x?75q{=hF}8-UssDlA2`8^Xsp;VSbNV
z*lv2#9XWTEZDI!X<=Zo8(4N7)+cRj~9<d2DGBC>BB8+(6Zmo(jx!P)%o$fxjY@BTa
zfvU;U+-n0W5z7ewZZRDB2G${dmxTqUm4Tx{CCoy18vZ+A9*k_=ldd#X*Py;6D-8W^
zZ){&9kz#ccWsqyI(RH2_AIA7WYj?Ns_z=)TnD&;T@i|P0P;|BR;c&x1;qF2`T2R9<
zqctLjL=u-><oCoG(+|V+++7?bzwZx$vY$q<O{trkFCn=<Auaom90G~FUHk60Wq>vr
z3B1FICeUl;v0LiIWyhRWlW_=|8+G?(Fc7b-=cw^cW27FSx<2Z$!N2BggS@r+pQmqL
z_nC=>Rzoba$kJVHeMQvVDOrDMv)GJTo}&`6MV&6xPB+`ZAct9D9OF@QK=5QDX^Z3!
zQ8sOr_s{y|%=2c_$uF8f!MQf*niu9{UhEjRZn(jg?|V!ADk9jU2k)pJ&e1dnlGE3;
z?Cg|_!Qx8)#(Y%Ba!04|i@i6SD@_Rka|Y<NPz<b=QrWcE0S>rBmA=`Uv|}Wljz0JD
zyI%`95PKtdh6USEu`GK^Lri18o<)SCt;L%sY4|B{@P^=mZSatWU;s!hEhG4yv?BDm
zbOokq$uTWw6|>b!^ZC|rxw+VgW_SA9Z}Ww}J(KT$FwEC-hO&YhLw!_XJIV#}0W;JF
zP+z_jU5KC(nHZCxji@E9d|Im&w+^&As)X&eR+&KUp>jN>zf70}sl;Se5WC;;B2sG$
z?i}*OqG=*+RCbNxT+iEOSz}9vG}#L>XV}u#n{Zk2;~<UNnUlF6L7%10B<Ff9dm1~}
z=;`iF=YBxvc?4+O8gm_Q8mIF_FNN$coW`+8exqOP<gVKHSXgVfHkhUeZ8+o;i*T<q
z-%C((xUtPCDDEWxI7!UC#G{;nUoYqi?8tEcJeZ`Kuo+cfwURq98r^jOLo1(lN~jYU
z)hk5Ie5P!&he)?VuND4;%`^+8b^MM9RqS<ZE-2wcrebkpkhq{Ot*)X5v?{qZcDh}=
zrdGMiBQa~J#^%*(+q4y9=>&!<4O9^4A8{~xZsc6T2%F-#rF%l?lui`mePGo2R%q-%
zQ50M|<i^rzom~d9F*|XB$cyLr3nZxp`VbUK=|lv-OQW&+nC~9e8})JqD45R}k*C$I
z8)DMjUOUL{tao@wayK8dja3Eb6-rtZmX05M3Z^mn=d!*9YSVg6_^Tj&Kycndau50k
z)}L4Se&vK29zeZLVh~Mbw{Ee+Y}ssUCN&tv{o-S4y+BXTSY9Ygsa4+Jh@F(RANqZo
zVhB%0lUBFp;-M06pJ+P?bn>s~+{SYpLU@EWCp%73ZB|b^_X)rW&S^QT#f-P=zzh!0
z=A+v#=<XWt0BPN3bdr>&BloJh!&sJbSJC&nPNGbI_6;A>O-3{wf#xn9Ir>fd+2q}8
zo7AajP(+Lo>`;87ySN$_XZLo+`MS=SEUsQ%0w&`hyBgi<=N)OQwO~P$x@cp^`?6uF
zAMeYCcTKzq?!jl`R@dJdzdfp9xJM7iasMOv#H5j=sC+)-72EysWJl}1zSj<1AiU8=
z_EH$#CN<sz*h=RiER|bBXQRBlZ{Z@^mNs+K)LL*BMCkKlNu9Xi6o!VaFwqs#us5IM
z;-K4Dy*rucJJ$v~<fAfe4C+^jqy7P`b2U#hx>MZ|ys30zr_17z^jl553gYMt=qp^z
ztGtyLb<9Ax4#=G-W0yMyeoJ@1z!Nlmg=o4(qf8|-s-&>;s>{c_U(Q)-_wzWCnLdj%
zciJPS^1GiGL^YgrSV@u_1j^8(CPaye^%hyAx}m(_<PwC26k1!eQ0Nu8+}H5NQhmq<
zd}Y_9THib{OTsi5JPbebTVZoKq3?Outgxs~c0#2iLvQ9PNTQ^EMQmB<^3&ty<7OAr
zcnmCjZkhqbp3)01YNGN|8*}8uahz6{o!rONURBe}hXIYp9`3qC{9<XMov$FD@~QtO
zKOv;kZM2eq;oi)wU_8$#08?>L2VK9?p>VBg=3Gr-NP_FXyVFBk{E-@m>-BYt2$5pG
zb>=;N<<68WMf*Bs4{TODH2k9+C3Gpj?DcgPttn1S7FH`31}<J-huI6bp`sa_l%~dr
zL$jKDw-)4t<?ZwHURqNMYY(2{!k*Rho1!R6VA<iX#!z|o(h=7l=W1jyyr+^}Fw4$w
zD7d=DsP4IvNP2nRbuAla7PeO0gG<bT)!(xMX6iIp(hS^D3k$soy`WQ@PZ;F$YI}p~
zE@0(eVrTj0X-E@5)~ZD`$iqBFB(EsFjIUq0(cGQB<mU%X)sT@Z_DJ7G8O+0>KfOKi
za|cyc{(0!abXSu0x;4FE;`Mbeo`vE(6?Zcp1B|}=DGP2WV$SBqU~_$Au)evw?j>=W
zu8rALvF5>Vj4Zcy75naVZ5-dMt3gl+CtMsn_QOw(Hw884u+0%>sJ;Q2KXq^0PqcLd
zFN*E}-$dhdHhR1cAS!ZMYxp~?{3z!1WCCKQy$pz_@l9p9@e_8o^YQxliSv~6!Y`?2
z5+~X@aS~pH5pfu)B3KaP{7q$Zx`=?s10_s|i5#a2h2#nTCjt#l!;iuA7M2Ke)JDg*
zC1}n#z)F&U&hdGW361m^AFMOa1Mty4?fSYy0e8H3+U++$;WWO&s-|-`$BGTW$F6e;
zwH>xOkGbi``51^ZCl(`OVE*;N?#AZ!&ia*$YRlS19A8X>H4hd+SHT*aW!ESi>KY=q
z#-^Y(WM2A^uE9e8%8fA6i33_I43@(-8=mbav<AVpJtJ^zdjjLYKqotsse6$=UU#4L
z5LK<Hgt`_@DhaM`Vfsow1%8;cpCt1r!WvwMz9oXH3^4RGBd+W4Aw)QU)If5BlzsN*
z-6_WAfVtme<m;Te6E_LF{c6Iutf2!@0O8RW$o!~MW*eZsNqQ8$5P2cE0m_E7;-B(-
zz>z;)1{4PF3T8>a=cM7)4A~9@@<;S*z=A-Rz{_F)0}6TOhKxS2bS<$Y8bz)#Bq(Wu
zf!{ZH7ReY2j{3#@<fe4QdT5i9?^{^K2_Aw%pLIeIRK@la7P^-SPwb?cD(M&%9nCy!
zBg8iUjaSNtY?EvKX01S|O(893SyhhfVEi%63NnR0gH71BVXaSL?$J-gyTtezhi&a_
z@)b=W*wL&Vq)w9;VcKoO%KLT-W$<eHafo+73@=0952Dd5PH8`E=#FW)2BR#V4cB%y
zMri-SAMN!gm5#Fd=uc;EB<h<$Vm1U}cbSdQ(*?xiET)siqc$$^s0$8l{na+iYVB^H
zVE6qHrhNDIupNOW(jGl|HjUHZ@jBLCC*3)6-ZXHN;W*AN+fQmI7D~@^DH9w_fH=GL
zmD%E_1o|2Zf7VT5kQo7T^oQhHFtTLIJ7*H!1imfTzt>2q8E$WEYz&y!w=rMeH0N3o
zY*zPm=x3M1!N$g4Z8<Ij?ET6t7#!dtfl1O|gZTw`1Q4|oC7!t+GH`!q<XEz-U8QS0
zd_x<<Q-=QV`Oha;u&jioaFpVHX#Z7+Q*k`W`bX2*rQ3PKz#i^wblX<I9H>hr;-ZAL
zz;b<~YAfYK2aEL)4(KgA_3OJ(Zp3EeMu5I#$DCEVy|FX98P&Efq3anw1vdPyV4e=6
z;RZ#?Xv}1wZe>=GGuKD`9moO*+91XWD(i#U4Qe`}?=ZGi>4O5ok1@(`F6CH=P%h{?
zEs{pEjTW-QG9?O<AI@IA#KXI3DkpL%moT08QN~36GmH`jYlEw<UUB%TqGCu@strH&
zLtirDD~ky=AL+;ZY;nsZ_q6<SbC^^$v<Q7<`z-v}(*VY3(1D^oHJL2h)Lzk6zJ}7L
zKW)jJY6h4r=0|GTiLN4;Bn289$w6S~1R2lI3{?zZp9zCXuYTdPj1JR<k5|ha(Th%<
zvCXHK;^Kgbv~pY<81tS){>|ZrF-aU7*2D6v#~jZ^51#VMiGZyST3a-j<P**#IyM8R
zm}L}nCwaF?;ov%Cpfw!q!`v8uieJR?iCBA{pqtqlY3zOZP7A%HAnLh9z7OWC%!ooi
z`%FK3$0gBQ7kcNLZ>&iaU8e1PXU#BVDN*ShzD(tFfy4)n1#h*n1hzxB{7Zd}$z*y^
zILx5^*BpUWJGJL%M+0Q^O-^0;XcpdJ&{rrBI?c@7Ai$Unt=xrnW3e=vg(Il~$G~Dq
zz?l)v`NiT%$C731#}PJx_t8sDyh-`+&ry1YhkhsOaeet#mbw;lftTA8B}s>u37Bny
zGr^Vir5|fIGf1$8|NQFZ53tyM$3B)DPoMiSOhKLY_s3`L9#zw0aic7`Q#7Y*Y09~N
z7AC7B^21P`p(`{}&1R@8ipi0C+|1R4K3i*5O~sT!o)p;^?&g4d&^Ot7v21IVGeQQe
z04guiI?5b|p0S1%Px|!s%)P)lwbRDAz1=<E_|R2mcvgqX2A6Jn#KV_KaY}f^ttum>
z*oEQ7?N*oAqqvABH-h3OjS>TeZP5HvBQWhi-OE0?zK#Zg394v4hZbirahe%L6-K2C
zbnaI4eLBLnFJ^N+c#b-Ga=S0&D~BB7G0R$b2T<XFO<#Y(?K@U-C~DvzB(-dP-Fe0W
ztxV7v_tO0oIBs++tQ}n8$S&PX;F0n^kZ<<@D6nh|61<bs`33y|f}1dNE)v%ZCO``5
zdJM(MKqdpQ;Un1(*N~^nH4jrr;Uz+^@K!jlW8TbbXtELvqhH#JEgP-PcSx0RFLowt
z<R0JrtOQ}(`Qg=<X;JKLvP}~6MxJ4Fs0x%#Y_h0S?|447BYSp$|Kwj3z@?3z`nK7E
zkyVxaQb<A{yP*0BTIliGEeL9*9soJhMI4g*P88?CC>_q0ikpr)y^TSbkckrg7T(Qq
zEhPzLOg%;=xJRb#V@+$OGu9%DMu7Z#M=Dy`5-!(Z!lleF!xR)!pjZnTxFuoG)0Kd`
zlJdf$kFYKD%DL-H3FVSnh`|Xvu|gz@gn{2nSA2+9nCjk&<>Q+P6nB(yDnbFirb{Xg
zrBc$x9+cRLRiBZ(RN2|ua6*9A`$6j2s(2nS^#Rx~?m33D3%nF#$Na_-YI~30n}YC_
zQrby6p=4kgo5);v-gw6DJI9G*hE9>J8L2W;6xyBQ&oR%!Dc)d40Nz4jrX{Ab0=m9l
z#)z%#ft^|QuC{t+UzPn_-A$4+ai=_*j8WIPn$K?jvn}BkTdr5@OZQp5YtwL{{Tdh*
z=g}SvyPGQPcsF5~CR*}-I5fK{P1z>AdJUmrnP)xYiB<x}0*A6O#efV}b%ds#+$9i1
zujO2fB}uvW25-z@G&(PkSRH)O<IpzoqLKitnq!g`Ih-elj>@l9n5tT|9Rm>&s?;Jq
zAY(6==9Y<IOol%D<VN>|lx{_#KcK(Lb}hQHghms0y7(n6g0~wJRjm-_4h%EL;&JMk
z^=f#l#BD73yL596-6Z0a5EQQ68fy9HYNU8JRURoxx~eW6Vl8VCtZ1P?sDW%P9+zds
zRhq~<a`RV=qnPf4nKD-wU$*zv9t0Ic;79nx^)>kisB>7LR(9X%*iIRatcWu4e5mwl
z<q4;}W%lC%_nHllaEVNdCngQ?d|${tt10BRlTg>@Q&4$HWo+lz7$&V0!@FfV`&<$~
z<8F1!_0`+BdLd!^=Z!nc@T)keWnDRly6vHDt51d&7At7=s8L}B=S~x(S8AJ7kM=^f
z+H1ViFBUQVOM~o;g{AM%0O~n|t;J8#nF|m=<CUUad$1`3jjZ%g<|onyhEj9?HFu}s
z<d((9&*LS`lW93r0{3yEd*)C&Po}W=Q2m^?_cr#oHrGK@NBwrqjn;%4#u|WR9!>6=
z*#BIMqhKuzcGto*otJ}xxOU5C+ih#qar@{tgIB>M(~)V<ie)HYfqus>?&}DjYIw6Q
zzROla$pza>)6?6GHe_0V;ULzo+%R%J^9|k2+0CffwjKWE`1p9l_HO^OwY4=W{5M9E
zILg*0?o~Lw9kzc6rk?`bKX+aSFn7L0|AThVDZb<9wen}m4qrglh2tdbIeALYIZ8rz
z+H+DjO4rgL2`3|m>P*9b2gAW0AbRJhjc`$b=eVL>c+C&Im|wJwPAgDEFEhMEIys;9
z>=fdj!n@o#`4t9&OdBJyTaCNv5>?m+^&0%n;;W%kY*hc{1^r{d)|mGp$2JN4(H(wG
z=j2tFw_@jb@A<|CFM>1BXSRn=d+zM3H~q{Ue$aJD#uT@JlT;wQMxI4GxU=qX=L7a4
zc?&Us(HO7op|-6h+>OLUYRn6>WGs+%{&M_uu(!J{e2yI9bVPl2%{)?^aXj@)9phln
zu-chh+Gj_M-L;z`XuPnP962Rtf}Erd_X?1y{p>0JZ{&!qTf6wbk;D7X*@S*`HYIvE
z`x}29$w(jtKa<14S~_zvWa}&m6s~u!;wYvxwcrzS0(jz}U(}Fx&)4WuvCoDk93SET
zM&k8g8~-;Fo=Tu-AP257k0rr!&W1yMLUe?IbAjQ0C>F$sw`GfUnS@jS3ItdgfxiU1
z-j=tgWJR>O8TKbPL9ao<j~l>@B@nj(dWDW`Al`g*Z!61Z=pMwcD!Y@eEaHRV9SexI
zD;*TXtr}VG;=6K(Oz>J<WFwX0cl|2+LMlwWwwX42rO$5qR5{P1UM-r-SYf+Q<Ex<1
z$AhWnouIBx)xzhPTMig!U#H%6)n*kt^UT=}9U0}(+J0j2uy&xkvJfT%Jr!h%!{rSm
z>E6TB;0C1er*H~dvgD4-fv%UFe<ipmF4|8DH*IwL<QL+l+}W>$NRqanh|`r$=daz`
ze1X4yhUfpB(<@LmxcA^{r`(a>>3-*CFi&}`Ob%(-YIRpFE{!AM)5!CxJb4ye!I);z
z{Y>5Q`7>Ig<|%!?yQ}UMa`-ILqH+7l=g$S_-`(}OTc*iZS47s%;){!^2xre6b=OoV
z?^|5~`0ft7tBU-eKhJ^$<q&k$-JSE->b&ei8cyrGyY<hX>DVUr8dk--%~_z|pnf_7
zDtfE{T72Pv@#2n_BRW#}{c4SuS(nMR+^1K_XHqG!W|l7CH)D@tJYV4bTEuR3OhP%=
zs8J0V1~E(G>oXkX3U2=c`VNodH>I<B*`ksCLtnpaGGKbVJY{G*?4hq%sXM%c>MYH+
z!)O98T~}%;;Bf!ymC6O6wJ@uzyoxAp{$0>1qme^~>WpEcv2?3%9;ZIvCv@7-p~g~d
z8>C&?ePX3W{)$HTjlAszpUZ0{#?d`~bi8~eD!&E~)s{|&=U(TTzXfe<gRaKwuH!?!
z^^{hLgwdIM0A@g$zoFc`iuCM3H^LGpOLXq5^k1c*c6R4g09PaiQ-jB<j9`vXkb3Sc
zIEg-iO6mW6HGOvJCTT~*O_-sxM7ovWoAryH)B47}nvGg&tcD`fW0q%{*|WTV!tz{H
z<!P}z|C+~Dx!N3~S)7hqUGt@@A(u`sVpL!QpWK&v<2asb`=D1CQVn<-Qb2-jfB+hd
zOfCsnUO&6*{Q9f9Ev;om^M6I2bFBMA&4FMMTM_qY%>HeZUceLEXixG(kp-_Z{qr<q
zrgl7!s!2~ue<u#jPtz0hQ}5vo<M`H#$$!3w%NCeOb4>XOY{+&f`Qp-mjMHoq-bkN|
z5aoo1gss$Y28<mPk+mU=(9$V&tpx6T10(kLN?(-F&_Hi3!^Q{P>TVZ{nl|u3TUjQx
zX;M-SENV?*fG}(Ui;Rx-=#)|$XBm`uJv$w~-RPOYvoNq-Hcc8%=;YVab2yby<bra?
zq?h4D^HFTncMs8j%-3OwF1bgye4VbjSNAmNBFRH-n%eI(_zblV^XA%H+jVH*5Aku=
z{B}a=vUf8g3!@>C(~40U1HD=<jz|GFc8+qzVr3g1ija3DCoDsC4^FO<{l1bi0>?W^
z-s5RV9yJ?bpXakhzGaPv;Dyj#kxF_jNQeL+iDr3@z^_seE)X*1K`W1idBjG;c@8%Z
z>f95bWTy*bS*+BUn+;hz!9`AuuB4Bn3hy+Ngre#mZc;BJ{}vHo5`~$pS!2^X2`|E0
z3#NiyT*&;q!&e7t1UQu)R+Y(D?omk)FAP9I*m<n8pj@DkrJ{X#Rk~kVLJnnSC1`cf
zD~M+!9iwTvMy5SkO9{>%8MTB2qj4nONTZO$Qt;=fig={~y1My6FCY#?tyM^f=B%|S
zb&TgWWECP8NGqz(Lnez6!~G7-e;}(9BMY~!vI!Q^0(clD%YErw!lhTVxB|zeq|!aq
zvZ7T&v}i64&1B01NS6nZFU5rc72?HlOb3F}&1N#j(v8%;HVI=ZV-hf$h}qO-j4Wj~
zOJZgTL1Ps)Mt6ed!(cH&b<N6`Mc^!pPffi{onRpCYL=|^!GEh<N9#GdMklTC!}LdC
zNx%zX8=R%(1_{hy+mw>cUE;`(y1zAADGmZ>?o<v(np=;hc%aP2_GUu9WZcv&C9CFQ
zDM2wBOW&_3pduOB^I*9t2&T_>h8(=U`i!EY8bC@m#rn3s&i&o+5^6HhtP$DP7?7EZ
z@!2Bh+D*|n{ZokkdwAXbEYDJeu2s)0amy9tc*}v9yv>vx!ctZ$`YyN#Q1S0*5Wk}X
z7La;;GwUcx=oUz}En#~Fq&xX};4orL!UW-G!`>~r*=jnno24(}<b`~mm^_zN7s{NM
z)ZJejOO<nZ%-VOZ!3{^+0csX|QV!ULO$-s>$O&OWkTK?0RB*|L>8pnW!)XG(?k|@-
z4?h@!TbeB`x;;^{DJqcdTg|Fn)#8F(3GqBMcv^Q$fJ{DZ`~sy^CxixE!~&4SnbF@(
zfTQ^a5AB<rDH+}CY?~WBsJP2!!HQcl%DrNAaWvGqL3QD{QR-^!e%N#kYWD-QfL;`^
z4pv;C^^BCrR;z4}>d1Xf9c=RDH4b5za0lg<6@tK=o}+_%W|v`BItO44`&vfTcp#;O
zi0SA+2@~|wX>cS#e@Cfx4pPNoSKi9Itn7v?s$jLH`3|&kqn3){W;oYrR#B5^m3FC%
zD%k|yS16pnjPz`_J~MqEX%R!DDOQiSp=tnfYQ1zS2`0Jc#7y-I!2IR01%i;|zpSnr
zq9fPH#$P^EA|NC25s>)!*bYeG@v($QV_eQZ)}vF>tjxUJv_8B<TC37_ML-=KdET>t
zXoS(=fiN0;u<v=~mQ;mx&7{0rPz2nW4aWLlRIA2esD2q42f3VI`JkS%hwg9LRM?iH
z!}jE2bkmbq6<`22uGms67#EMMgB}TgSyb%ltuoNddTQ6Ore?WbOTlHX+|0W)m4+TH
zX<D5}oEpYeME}xFrBk1sqB7%olqyi?McEHd9<#Q(bZN0t4MaOe*ccnLj9&&NtL$$;
zb-{S|rnvxg4~jPfQA=+lnDRhd9;J#wez&5X_(o?;XhY#8(=l~buV4i|{#iWFFjD8C
z;`5k$X0(JeVXH?Oy7i}b<g&7pTC2yfT@Zxky9Rie8n_71_4l9OOOAu@@7~{`_et?(
zK@25dx|U4nC7=|}a{`k1vMAv-@4Qw|W2pt<34h5}k2Kf*FL4-kT8<Lb0R#Z&$H%fW
zxOs2JDHxCaP->I?B%#WdIDw(We=s@OEeMpO*)ncd$e!A(0-|D_Lt_v*dO09AVL|97
zw}s=)gn}3cBBnH(48^P|B3twX9BJCb+>*ISD^Z*cqMDB`E|TB^elYK6)kW?!qtOCm
zg#NO=7oVOcJ!zU%j-uwe{987DO9DnfJk9jjd_-iiI8tCJOo5)Id8eX>sMHx+q#^DP
zD_OHhEdT(l$w+7ReMt8|NqOMI_Y&D#PS>zrN#6*bDZBN`{8KpQ0`rI$i$hyU^eLpU
z7cvSvc(s>Mg%9hJl?9}N;DwqR^fK(-UPvEo5?{y@kT%5R{ut?I*F}|8jQ_-X);yrx
zX&haoA-{528J;W6lvU)sj&PiKRj^$cRcdLbNKuQZt7>gs<00}whvvY<XtZgLD$oz3
zI*7nD7NBKavIM&h_|wD)IaijJK-L0MSHtR2HHqDhLepM}PCd18y%KIcjfLuN^<iik
zQPFKZy(+U#&$w#rnHQfu+8~fTx22JrTc6NHXc|-Oemu#<jkmc&b*D{R#qAy);OgZE
zTshSBb(ZrKGj-_1mwM8R=WBA$2c4u+0_Zg?QTS#bs*#|ICi88<&8^<ruJBe?t&dWR
zfiTcs)))y!?&T~u{D<sn%G=#$Bt=*GJLRe->3nb$T=Tns4n>@giZj*j`sTsT_Wr@{
z$|50t)wn@Qkl&o3Y7ihLj|hOGMFd)N1|Rw$SCeo&&ur>wIaW@PcB^7bKzbjqdwiW=
z?IX<?cmYdY@PdM%e7l0I=mhic>a|JD!vWNw6$PI#+FN71+$amb7H&l_y2j`w#mV;j
zBj;3NmxtwSPCHiOE8xZ=crSojeg)8%#w=q|Cl)}Bm-q^}sY+d4a2N?iedGK~BPzIj
zEst(kb31o(TOWSJFp5O<L^T|l+`76bB_7#LgND&&tf6+A#e6Z`>Pvf%MI=WKxbHZx
zFeK|Za9oFF5dpICjxB7f!*8-~-9P%vml#Fms6WlelV0{KFf5CI`geX=@&d@J1-}BO
zbiY&`g5;Tk8FBN}X|2jgt+t%js5Sr-mCmoaYdPUX6ej_(tpk$hiL*B7E;M8r02b(o
zfjOkWWXnbovLTAWMA&6aOQBg5|1#(?GCYfu^gd*y@?Qo)^}g5TkR0nVCcXrs%;x&z
zyO+!1SQP&<=+Vru9BQoSmq81b7hx2<0bPGN+@$hf20;;ucRBR(()UNsJbd#=<IgbG
z=#pbt19CrHEuqhZAwttw3N(bFQF3xf^2nBU2a1vk6x@VqR$Ns2pQkN$mPc8?f9uf2
z@=^^<q3>b!Q4pXX=(p<yLKP934Y=fynx%_s?)W9n#ygzNmot|lwSlO;0_E%9!BdcA
z>C{axl{nMdS#s-n^7puZ)?Sz6r%88|)6P9t&5y*2-*jCs*Zb}MIl{Y^j#o2%v2F39
z;aLmLKIfs>Z9X3B>lvEUa0A9g>xDJkB|*m9TX0u|*TT#}1JQ!~GNLZsxtn!bJ)0KG
z>6rtqi%4WFtp(;a61*U@mfOSwRBzrYXh*j~3143q2ikcJInkG^i3HB5a?qRoIGs|b
zudmniIyna4lzMWr=t(!tPB=K^@UA@$Dy%`%5+oa()j<WMgu8D`&f39E58+pH5tXCm
zh3U%ZGQmpp`b!PDcs(pg{JF;c-4D#-$5MNB7*y7<6e|h&VdJ2?m1@4B$qy7e6gA8)
zYCmnAx4r3bU23Qjyar)B^&XX5!WgK&B~@%w3JEJq;>wt`S|tq_<jypQaH<`Da;NtD
zi}0T*>MUh5PEF;o_d{!}WyN0Z)ZB@;oZ(z486ai>Zv);m&qM9gbqC7D^U^sUX56$!
z>+kAe6*|1kBNo}j(1Gjgd~1~F452e|+V44<Y2CO9hsJ8+aU)iRDcdwXY80rYVXcN*
zx{WYxXx0+Ps+4^VdH13WIcf-6)~O=RD3T^#3vbYCBr|wvvVim$I$fJbtnHr|-BPb<
zvDWcIq{Y$6;dL8^f4=L=H%AN_7yz5yjn|Z={xuJh+f&LMCwRvJkFa%K@cf6;T|;+<
z>mJ07CR)WnwAs>ZsL{WOw%lpl+4Y>f5Z^4v_D$G-v=FpAybrFiY23y;6dr_+po*~m
zrJGP%=k3<2)a~3!uH9>62+H<{RwchE_eD^7<BY{G-H@iK2$pz^t$N<LH-lAK5~Ckg
ztYg3a?YC-cz9ndmAK=b&5P4yc>KXoH<|giy^SP+x&Y8IE`gJ<in1pc>X1C5X_!LZS
zrM>YTyWu{Lf;{NHmU+GECX%B1j$x_{)BK_YZEP@Vo`|~*YT2QvvR9i|t16tl!Jx*n
ztGwM(lJ{6WM&rsXUBe;6M;+s>G13hrhDoKAhiypurkx*}*t5)~S-tLRiluIFc;zM^
z`A`_PR;9~aT0LB#Gt^+3@?p{S2|c=qrXr@H^)`pF;*yIyvlr3zWe`1&BPIAC_hWv*
z_R=9)Y!zCQVX6&bJ>%P(Ase*F;kL<fpnITq<g-f`k<icIysEw~!+cXIQOvTaH-2Rd
zX6dQAdy-gTUbzvxokH^jq-())W|YkXw}=(#aUY-0D-Fd57us~cVdaST^pMy0kz<0p
zo8?-mkV4Hmwwab@8>YsUq1@H#rAWxyJ^h{)TE*r542IiWgm(n0x?30keMQk9^GiFb
z<Q_?3qkt9L-@s(KgteSP)wj~w6$C;^h`{Zo+jxz{zw7aKsTnmCFM`a>e-hSZP64H3
z#i|f?KQG!4m1)e&_I$3jsX_IcPs{-1Xjrt8--!Z5w!mBkl6D_tjw`a4Sjuv9n@Y0=
zW78XVq>f~}++kD@@zM>We#OE_>O)mElR6TajQ7s7ac_Zc{g&&{spIA}X14@W#18x{
z5S@l;hLc$u1T2sTkFXpH-J-u@?8h9hyP^gtuQL;X83*{o*Q91WKan0|XQ~BQN@b`e
zuOmi!l1`GF_>6ZCJ9W}<DGiV*L(`y8`G!tw74H!m-K{jcDp8WNhinhB8a=K)NEehn
zpq8iKOJ-H0V3<|f?Q=G??q!7-{imJgoOvD4CM58@b@R*p6eKC~(=}SUh_{d#E%~eD
z-hF6<bZ3KrPW@U*l#`%Rh#9Q@W;-x4iyRWjDX!m>@35+$SMuOMu&U;3YR63iv19>Z
zNp;oBe$3@-x0je$Tx)TDCM7)F7=@1+7!h<Jv<4k8Yb&hudHA75S1|{)wse3oV3pz?
zAoYTz77xqnbr0tX&_CiSjs?>(a;xdtY<6B>hk?Snknum>G(|w58|h}Cm4~u$ON+Py
zgmw$N&3@a+0*kaM46kKXyxf&U#(e2AdKf`YOWW%ZL?5H(SiQ}Dm<x1kBbiGDOa`Q!
zVzUeiP$3)}6Ng)*A85h?*um9|u3#?O=fsl+4J`6^EVE5Cn`dkcR4)JWd}u!$;!3tW
z7<)zhIH?<Ki;ya}<)z4Epv@{fy~mG#PUh2TLjwcrU}<YmZIa#kYo1@1W4vlB2KT;B
zl7&q&C3n(VCu}CXFjf%oNEppw(g{BX+{XuMsV&@wd5Wr~bs5u$X|a~}YRbZxa$=B}
z$#n>$@S3#Jb_U%VWi=&1)9~V}*)+%kn)>5}BrjVdUg0HlATerSU<f8nWnY+C9V54%
zL6ZXFP9UqgZbd9nMG@n>#@WuR60G;<z8bFzt5Jb1;qX*}D!4%Pz;phnZzJ<Ad@pG;
zmxaYeuVYmj5&zD0m|db}r)UU#?w0!MZsDnK!O3XFs$~9riANa`J6!WsdmBg@d;G8`
z6z@4<5A~vp6W^*){QT<W4_P)tk43!hSW_!Z=W3+7K#@_)8$zsHhG{>?NW1$vzbPHq
zOaj}%F{07Q(fvw}JiNs9XQuQnj<-_0j5aC9QpCqC7TD1l*iITTGNV%${YWXQqh+G3
zFexJ?6x2ElUd6Z?193lEW*RoDI2{byaM$1}`lWhHVCdX6Fy?rP8xU}1v7}L?Bzz15
z0!=6Bd^U?yTCCE&qSvs_45$$~aOF^tga@}^YSyIOJkmoM&VIxZRBRY?6TC9&Bsv96
z1RHT^TGS{)ivQ&WEW2eQ!me>Kr$Ml=tyt4J;bVd(t?8T!=SHY1kG^VSUThE0DfhL5
zGPPdc`K{2FW}E|%4;B2a()qC3Kb)~>Q@yKdy~+0WmAWlmc5|7O_mlHMWYQm@1WZ{$
z)M<ZzeAezc#Cm*oFt}A6VJLQD@FetsJJMO;vD0rMsc@6<!Z<xL&b3GzO6=U=EI~7!
zfjDNoqXZA6VVI7<yL2Pvwl$D6pE6sGMbsA>U85C?!RUDmnkeX#H?wKzh1vAhfol9|
zAT&%E;4tW&6z1=#Z`1kK*FS}6i09Bgg|5&AM3@f@y8#pZ7^F-ZBz-HZV|%H!6rzHB
zO}49!nzGgbJ+L5q8C5Ft9bV#zvvqKQd+q%Fv9r6e(RJ3pHN^W>+^|HA=!x6JhbwYF
zg%>V}&;A@*esqB@Oj-Ogz7CRSZW?sD`Ot1p!X%i)H*G$^t3ZFd?$n*Y1ul*pj5pwH
z-`t??z5{=#L;KDtEG1ywAr$9o^*kVV`eJSX=5<z`w)4Z;*;`J&AzeAhe%I*G0Iko)
zFFb3rk{GMea!s+OtRj&ySUSTS2+o3=>><==gAQg}n-iPjp${oshXSkmNHCqx>{C>2
zU|sQ({O~pgxGSoD+3YIbB-;8F&+&1ea(2_i=c;1_^N2PZrZJN8mi#+lMkkvJTYOED
z_(}}$`t>`=lIvG)G<TULH?b}HYkQYzF2Q{#pu7CsjxC-CKRr}j$Z0ws<a}2?7t|Le
zhuk?|d>HAl=?u}5(0@rw@PA2*h%ArFTu_{*YgzcDe7Xwl94i)M53JMjKnXbpWSo{J
z9yLLk$Y_OklgW|K*i7kI+{jDoJ&lJfTj<7}^1R2Zy+fAq45{@BF(Op*TLA$qhRWx9
zFO(a+o};kc$T2-DBwhnFpqHDWVdD;aKQAhZP4crRYetDt7qjqB*R+%-*^+4Ulx#1#
zQzHdAr|u^fwCv{}-jNcN8wq~Fm<qJV1oCW>K&!9g<YUSVfu~^v7+;fqm4a*?$2U%x
zv3c3F{iCkT5O;Rq5dVmihPoh=mh%7i$0)RUrme5@O_tcXasjn;o&=JBf|Z_NEK~(y
z{X<4Yx)FvNj%QUIoGzqzi1~({w!qb|Rps)F(Cafj8~wfKff|`Qmx56YRG5I$n$bPT
zgd@e!Qk|6Uq|>I46yU&i&*&FACueay%|iJ&&iXpAEeJH+ex*<!&{AkxaZL!G*uQeK
z&{JY5udn0uNZVDUu3sV-eWJThaKCYk8lRu%W(bV~kj95LlasN*bgK0kN2Q}Or3M{6
z5encFH=IJRriMG3t(C>m8FXxlzGj^={}(l}K}}H%iV7V+$e_;DX;{^(0!U?L$ZPkk
z>P&#Bt?0Qz!)59r;_-4UtXogKv2bo?6!KL(jW$9Sp}nIqrfo|BU;7~<I4lO8b|(v0
zg@?RpG;&vT*{0cm&4Z>to2Qo=0wFqri1E=<tDd^!U<%2{5ydO9<l@6n&gU1I`z-}m
zC4M<a6YzVBjyQNCpN~^ejm!JLBH9M1KYAxhW3tklaItY&LRuZ5ou&hH(Lri5@|Q+y
zr=GPJAF=kD^PzjcdX2-ky4L3ksh6#Ek+E#T#|XN~2yZsZ)sf!hAi$$e6a61&-$zwL
zscI)w5;&dik}I~VyBsay8;r}C@=C;}u<F}~fA(C{o-;IzOT{5s9PB+SR^wc){r>?_
zO9KQH00ICA06?zR2rLBZ*70%x02N6A05t#r0B&z&WnXP?WOZz1b1!INZEa<8YI84i
zWpi|MFLiEdbT46Zb7gdMFKTghWpa5gZE0>UYIDuKdzahBu`l}n{uDz*n+C)l4k<gi
zJD@SVwq(UlB-^p%*a?UB!iywk_!^R<8F|Qj_FKQI?nVOyCFh)b);e)C#G}#A>gsye
z#naZ=_22LE&HJ-=&$|6?|7?Her@`5?Uhj{J{`NmJuV1e2mRY<jR!epE%`)v$!RuSR
z>8>`@i+Pde%WZ!4^y0r-le=Y#a(=9m;L%$p*Lk}0qG<Piov$Wmi&b_v&)e-2FS_}|
zdbQbYht=CC?q;j>Zjmo{!-Q&X^@6Z$D0nO;eyc1J>}H$Q{n;|VKl^I4S#5kzk7ASG
z-W8jCdlsMF7t4&w+!wnU-I*`FV6e$|cbnxIwGtdc{_A@*_Iy$-^UQ0R?#lN=`3ZNk
zVymhne;04g(r7eRS(J9Sm?4$ZRk~WH@lH+Xa(%a*sVQAh9r?p|6E%w-52}b}-QDWV
zZc{9$>Y8q5@%Fp><@cM_I^XQxs~Z%WI}@T7k;jYYsby5{gB}YeV%eQ6si9)WZw_h|
zUHme-+Fsqg{OaY)tA{Uo<IcWz|Kwt-)>Q0#u|2;~x6#G9Kf21|^WVn7#k5eH=Ef50
z{f}$v>+^V<`@vy=mZN2Ny;<#6n7rswASYZXnvCskbC>Q`n{cVN`8?-K&r|b!Io-{|
zp4zRx*lgnW<!al8vThpB=RT&M#xu=#6^JlHznjlnQ9SHj#zT}G#U1=~rT%d!&&FZ3
zGOWy-U7X%js>F&WG?GQWndV%y>kPmTR9r$24L5)H9fNqpz>%QrE`N|)bEA@j%Hwnv
zHm_S3@3<u;tG0;OO{3&0ZKr+eV!ZaNFqx>-7LR4H^azy(R4>D4!yMNt&bsk>J%6uz
zw3#yeZBfCb*lc&FD#&mB9+jELA1rd-r!x6%!<0KKrqZYrcYG{o687wT*ZP@WM!j}B
zxlD&6Uf^^*4o72DzsydK(k|G3f3&s$BMlefL~RKrg|w;ZM{U<Ub#%uU2Stnau%mV&
z-f{ZcX%j=D#iY5<RIVn30PIALdgJ|`cK0mm6B@9O&Csu-R(~)7I!jioc^)rI<T-7(
z{p)C2scfbz>vRHjgl(t$J)wi`OVh7uu;2SrLM;Kc9z_M!Hx<C0ou3DT;&L`XMTBQ%
zNBME3r654RlCy$<D@dd1C;{G!@iT2jQHJid+xS7N-_PS>DRb>-XgH7Xm^V5-2!f%X
z)BkC>z?1EE`7#ZLDONJH&)vHCEe#pXM`rH*Yno)LG<>%zva_D<4Hu!O27spJ!ugMM
z=){E9Lw#&`9e>ez9q(q{4IVH2An0!L^*l~<|KjQeVM)&mRI&XbkF)n-tEX}tIu$ss
zA4qhnsO4(4c7c&lzg>@pP41aTw1_k~tRq*WrzYgTW}@inPjWJy#)<8AOf|(_Il@rU
zx3r#{B5nAlRW3ms(1+*ic(cu4&Q~#=Cjsp?eC{koQ~xyxww&JY_i=Z*%JR2#D*!3I
zrdPvOKaAZy*lxG31#eXzm*<M|s0-%iyNSnDw76$qE!MmD4LxJ@GH^gwkG8MD0$-!H
zQ?p3ZH;g-;7ar}ec)xcS%sd^=Mui?kK-<%N7Mk}2yYp2N&%b&X&yRab$S<cCgBUZo
zDHilX(K7mdUPnzu5Vb;-7)?(>71K^iqIoyn<nb>5YMx`i`rbC(6l;1(hZ3Jiv6^>h
z1iZlRv;m&aih1TIL6;Vp%704>MDV^?z01v;AWW%k0=_g}<Z~SKO*0hRU9wgl(GXs_
zZEn?ucR-eZOEol~egYbJPXK4HiMn{Tx;NAX4LqqnX*f@D@?ri6-$p&cD6v7P(`ZZG
z9S~AWnS`7MkAQ{2<T4-Rg6%S@U(UREl#i(<LTeErrXZmyy*cD_nrnQM3;g`fFHW~5
zuz?SAg`eNo-iN<3IF6tTQ1c;RCQ$YP(B(?4fZRZM+~hSv%%O6V{eCna)X|H-^)+H9
zSQ#3+DOKK<iCcGDfCP&PtIJ4IqND<q(#~BTx9QL^((7b+-VdjSq>1T0br((5x{7I&
z?sgIb0T}^AZUJJDUS@-g7K7%n(-}v}D6^w7Wg?nk+NCr-N4+u)0M3Z+pHSV?64+)@
zD;-QPCxZz!kVP$GEk+Y6MQcSUan^3<Ou+C{do1O3lFx<aqXq!YL^#k=5M0doNOoE@
z4FV)(jp!gOq|q!GSkRgXXnphp(?t#KG~xnu_+62OeMMOLp%GR<^XN~H;2<HGNrh@i
z2r0!88g{9a7?eSzX?06~sAmDq#W7hI>z*Y-(5YNAUw*xUfGOB6x=z#S{NPN&Z>K}+
zqzMS1t^4o=;Zwp%_iB5$28SBn9MD&$*S#-=JUgTFG|4w-!pohRQJgVMpP`1cAM)u}
z59>48CPEu{Oi2=!J|hHOoxs`18_9`r=5>;eH}=Ly=r0(UZ_c(Q1s#{<vpswV4Rl4?
za0<)mVvcDdtB0*#=*1X>{-g&qOsCnB$6Hy?<PwDVd7okGfX?iqhI7r(!fK`pb**mH
zTrJd6t<+l4QK7bKr|u$eTm1IhJoh^1AfzyV>Yd96-_w40pnvb9X+qrCZ}Rhn{CwHW
zt%3vs*v+F>FHp3&&m)K1S1+Re=bwMtS6>ljTxY~zVw3+Rdf8pC*6M5gf}j7!T>O<T
zgzf(uUFpMlzjp_35Jp0sPF*gC5K%Hn<Wyh=hKN;Kgurl@dg;#l2lXoQ(pjF~<k?>M
zXS#^D@0aO5zT2%PG&ftmB5eMC53X~wns4_sz<jgMifx?C>4RC3W%+VnYzf)y=R}w8
z7kBerv7YC98tigUr%1M1&fo8~0EOC0=><*D>&P2jT|GSOU0v<2t~OU!%d4x&*i+v|
zo<9t)=zrZk6}Uei??=B-!Cvp2{>Hs=(DBrF(YN-T@$Nn4-T#4L{`<(gx*B<%*B$Sv
z?{&WIcmY+V??+F6d9rW)dpwK+{bU$^;+IYRg5OWZ!PDTA{gqdLapmF7mA9vQzoUAC
zy{_fziu(Nbh)zG-;MJAy`~P{>!M^^+4`>3$<Gt7Uo@#y??7LL%3QemYB0#br0pI(D
z`_kbGe$gL~15+D)Des@qL``X)-ZXstRLKv$e%tigA6<6-jjqs5V2l1(DH@rg)PeCQ
zG_I#Zcb2&Af4E=#Jy1W@8>88MLgjvr9=~}JR^I(VPcglH{_2Z2Z>n!;pym6wU;L%|
z7O!d$L;aV+U%Y+$Ls;v@_XJIEzWVXScl8(4<>z02^QzXh&}SfLS;ijHiv4mo!@qOf
z1m}JV`ggyYoCCpWAknjxzoUJ!$}(ELQHP*C@UO12r@?Yx!l{0t@9A}ifWS^I1B6$A
zDyQS4Hg3TGD;nn$U1XW(+4i}}kiv#_mSqmhUgfv@DUC@+R1UB@2D+i$nFT}cy3;X#
z7>$0RzCY1jJg9$07wA>7T;J_9;@P7!#4*JC<ZicHErTZ)h58qjn_XqNd;*E%FOTES
z)#KIn>D6c%?}~T%+134p`c-QCgFgbMplR{1?&&YVf_^}CsW^!)Ml`GomCzOK!7Jjt
z)1(4<yx(ZMW%2oB{Mc82I`Alldl@3_Jstr-I7^~NvMTa=4|KYo|LKo^{Pa(T$N`B)
z)IbWM(`7c46TLgxtQOB_@#Z<5jegeQFM_b~<>h6+xBufGpZ)nys^5F|X*=8h@lT&V
z>jj6wZu9=}8%?RajQ%R5$-6Ft8d$GwpsIH-NAA6mWZDDzKokxUAvv9K-$ajGZ}?J|
z8dlH1uMMN3bhE_S9U2Mz*ddq)_tZEM5TjJn$n+BoEPb5PsdPA4B4m>A?9%xzbxr7q
zmjiyq2m8Hx0JZ8T!=$^qU*?+^`Z(Y3lki;tX+gWapq>#)NHoThdXRzJP%W_7nu4@a
zd3!`=sI*UC`!_@)nYjtt?LX7A8(m5W<#oH=%9;P0M89_Phn#s^y1kAjqyCuR{5ir`
zxSCOQ(|o6S=`Y`Zllj+yYR&fh*34m;EB%;t3-Dvt_My<wGXg@(57tIcBneuoJUece
z#<L@yXGXstYlFu(dNwxi4ajB69nbd5_iy7V_-xF9;@<N-d^)B!(rU@)gh95#pC>2Y
ze6%%N5~HE6f*0@JZoxgaZfQ<$ySseL3?$F~HrhmYMCc_%=<%Ag+p+4)g(F}}PKXPF
z$5k{1ljLt?8Nb*O01>*P)1=6V9vD&s_JBzeMF{0d+Y7>^yR8>iv=z5R{m`_3;&rwi
z@00PFr{>Yh&~UO%=I7_ZYBV25+s<v`<0=^3M{#1t)o!m6T6_m`2=HlitM2uxSo(ym
z0!+$706cLtoA+H-rM%IalP_owKkz&X5_lgx9*B~qtxexjy;_V@8#QfLU2)-;GMgWi
z_oR>0i1%)}p+QZH5F3o9eVh>2o;$1;Ltokf7jp@Ii-^=$JTL8bM!hB8CmF@v?W~yW
z{DAnq5tkiDx#>$%HaSaNsnY0fOvE~I;r4xzxaygjuq!LxdBLEZy;dtGY@#Q~$`V?A
zJ5lap0J2X?!3ZOPEq0LIby7u|nv>hpG&)iS0gRjgBkRVr6ko^7Y@UzOQ9dSoTGn<`
zsVxDhXApbW8M1y9IXI4X&c6v<S9hB<{{~#ge*c0<mw(6gXV}|W1y7}cbS;h2?vf7k
zH$^fh^a@;<qK&|?9abnZ?1zNzZI9>fLY1l~JA@P4(r}_oO)yW1d1qZAjntXn#s60Q
zzS97m9YUq>U2vkkrQ04sq1&VZ)2KrT*m*^~tn?>`s1ah3)Eu4!GSg^M1%oMp0j)ft
z*y(r-`3FHk)bca@;F?Zk{Aatgs_X^A|N7u-MB;=BpA*;|(r7{;A(9HHk0-b<wm-jq
zb<B*j<SwqC#c^QyY~6}gbq>9+-@blTMY|#GC$->K^PQ=sf$`5FKtF0Ld`I(?cZo@j
zi4FZnk>6Wklh6Y|{ka42dA)N(e;MU!6&<}$>!>yHb6SXY8=9#pLCPBXpl+OHUlFyu
zdsS?AIrV3F{0N2s^Hof^-w`$~Aaic@gK&z?On8nzq1xSB-&-wDd<#h@qXEXq+o*70
z$(5z2=A?{>0w?OHc6`~_gwIi96F8i#+m-w08i77vEd+tmv8bCnCKA9tYIr_w)t>Fq
z6FKejQ&d8`eX3{0lI9)o6?vZ%CO_k0MxVr=Tz-B*_m`E2XN7s}skqBr4v(oech4Aq
zo*+ZO-qc0}V(Y}zttwMTn}n!=JJqTU6crOK)9}>4YiexhXVm*;*8S#1O=<;ske030
zs6pB4>k<{#h{e)2Aq62<9%{o;3g!6WpwQ@imv5@gmLfz$8KguKB(}Q7WjiLVaDE&P
zLFnt#-;VJAhh}BSE+({%V}u$D9zB<iRi@=#Jip6zSC#JK+b{kSHSeckqe!t~fvOmJ
zc#`5aBIZWHc?Nl-Xs}LJfK#0IBnt~4&0#)aZAJhxA$5?Z<`7al1DPScCI>Time53}
z>Hhy<0_;~BQimrwfpQ+y24lX(A7KkhOj4(N!3+7dO<F}CBBeN6Y>CQS-KX<n9eqOh
zVzm}wxfY)CvkQ4h7xI|#$q}XPjhwoEp%2Fvb+p^JGP@oGmgA_DRYG=n#R99w8cjFK
zs`h(RRVfu6h772C5el8CE7Wq~hMLM(1m?9#lWmvR$!H;+f<c`V!eSGXA`)coNll4d
zExyDFrMwrX#*g<=)-;j)r3kmI4EWT@^Cio*n?`P4DK9kQ?-R8=RpA4@GGD6h)6nDN
znm};@?jhfr@&+uo#J1^I`~9kWpC>oP?sc^+UMyC>H9TE4mE6`I2FHhG+NF`CD*|;u
z4wsL%TE(S=|54@rXxjp)^4K<dY^}&se+MkwMz?n29l6@AW=8j*1vbPYH<a19WfC(Z
zt8Thl;IJ{|-S?|)fsO}i2YHTDY`Kez<u({L$)EmQVR?peovaJN8YNY3ZQ!VQGCF?!
z7X5`tD06I1T7GJq9+sEH7_s$9W7mn}`cwPlTQ*>-V{iy~G;@_i6>cAI9NkW<H?Rz;
z`Z7v}NA<)GCw2z4mFf*daM?Q9r}I{F>Xk+Q!;H@6sEP8Y2K{5<TrfO61xXP0Rlki{
z7c;pRIY{9=!wQ}Hh#Sg=7+(&<ph|=E@EwF*?^GN>-=9dS<Wwo@UO&7U{!PIChQ2zt
z*VMaS_*pwcJ^iMoIyJ>9+Y7*eq+CGaRNVDcvuG5Lp@dIZxY(M|983cT6m#2s>fwZK
z7e3t80ZS%{RWY?_xxgTe;z7x<J1{lt-YrG4lA=`7T&i$ONr~AggQBsZpCIdWO4y(#
z@lNrZP#1fL&KKsoAJTc92jP;~%fw*8W~D33gdsYSKQL@9Ke0IVXjz(I)5wQomJeH6
z@kixFpFHW~L{_x%j}SI3%6h-wwA&lOKS@AG1kM_L7qGZZwv|PliHJ=0`v!yyfX%Gz
zwhuH@J}BkSmeSHf`rz?U&Pk${G9d&(=H$BU@!S}^)Ht6XnHOX6P1S(StX1*hj~VP?
zapB0RY8D4DbRkOcE14y?q^gw+hB@m3T5Ch#8341UnUmopbh%-y)3C-)(4O!oQ3E-j
z;B1_9x9dDDCPkhNCqmDMETzNv*)TKukYT3x<~_~y!x@)UXLrj@p01|L;<r3I%OBR8
ze7l8t=9$-tWlHas1(6PKAXqsTZ#X17Z)3tG1Utn3q`Mb)uoor@YpZS|jV0ggK#zb`
zVZ#Bx2f_p|{4WDFHv~QLM574^dOkNs6G)A)M0}J_g20h4#@Z^G#Yu{Aoxvb1xP&27
z4jB#2<XhMQHW?gxo<({FiWwpCjs#0V2=34F)8|`$acttnmWHgcT<$D7bRV)AW*oVE
z`yd|Rfh&qkI}w|`8nwx%()4HCa>a1)A6R-RSI!&js<@7llT3-*5lNNchHdodh^xat
z_LPvq-*5A~Y!%KD#mFT5S(Ts;t79-s_}%1l)@+84-lZ2lX2mA-O0?@~Q+b${dS?yq
z>2b$C-sJC!)!kN)zVhwAPZc6go*unqo;rMFwRjVcKI)Gn{HgKRDjt10CNhBj5-J#d
z#()0^TUEy>P#5+79WkppdIlKe4?XM*x?sV-vVg2UqunAJ_Yd}^f-jV}+|8r`dSz<*
zG#KjMnGH?1y)ioe**NO>_!*+hxcn0p>j&Ypr@jYOxK#EjTi#}wxeM^^ALZNsXH4Dy
zpQ8dHeh9hLT09u@f~K9*Li4nlX?6^#{oLg_(7GSgF~mj;c|b#yjH*)}rtS7Wq&S4s
z1jAE5h4+)(q@~es;8{8Ic@mtP>wp)ghkASE9P%<#W2y7RU9C@vf(1Ye2*C{F<ARxH
zk-o?xhDXMEt%{K2KeqX$-ih(ZalhV=V%8*C`SgD8SB(VxU#tNP6&1?>m^NTip$u>6
zmsZy`ptZCVhB!C-eWNt0NfM<+w_d<o>_GdZwq+|OulBJ~GDP}V_cO=+NDO21As9PM
zSC|a_yaQbB$%7$;Txn?D579Ha{YBpr)b&`zZon%ILhot$(tUABM4<P?eJ4;<f}k|@
zZ(Rh2jh&qFL%o*0+qwNdxA17H>h!s?j(6^b5V;c+9itWFTchm_BE}+2kCos}RJ#ZJ
z7x(%3XYhUTv~>^n#LOoSwoK2-u)#Z`<#GfLV5296^rK?b7)_vh7<$gh<~3mZ+bV0Z
zftBzn9hcfht)ks-&2T#3iaCR!7}mk#+;Rc)Xg*qx!FSGv^V3^w!*-wZI_cW#4_48d
zW@$NR>(7{)T(#SkksRz6r$$!MXga)g4)yT1i<#%^G1M^I;PEE99o-Sa^YOz@NY~K~
zQNe8Jv5c;Pz@q5B-M*%iKrJc{o{iNU<m#<s6f;_m?Pxn4dO4^6)2OM1MYN210Yoe7
z)!Jt}kLp0%?M`Pw#hC|uL@%PzJuTZ}JP;dvOM7hD>B>)}>xu4q0O}nblP(76ZGSv)
z2$A2@r~hzqbf>vX{#-gVcRGY2Ea=3NQB~an7Uxk;bIL-J#ec(yq({X6MFy{)L&FK@
zm~w;aWU6S(i<LpxCxiz*sIdvodF>J7DauHqs-*&<sI8ihx;|t|KR0|(e@Oi6C|0o|
zEC%l~r>&Z0t{>O=4p%=Ly9V^kketxUX3^ga=Lh91j?4_I*%Uwg<PbESVW_hQF9hm6
zXfc_f@Nv1?g|jAED^$edC_Fp1zbK{in3L*2fL^Rw)ilZsSDmZT7`UuvaR5&~;+&@N
z*JH9^hT$amnFQ6rz#6+e{Fr`F85mSl&kg~^vM{hhQ9{#SA6bKr-evw1hrfm9OS8AX
zyB0rjSqI30SkezJhRzLeg7$2Qakik5dAyvSXy7MJk?|3H3Q+lb22&M(g!)lOwh4o5
zb;f2C(0g!Ab^D`-#XQ6dbfErDo*VuKa-3>&u+E6Z4!<M`V;qx)8?1{R>sBK{DR!i(
z+QplSKecNIxJqLYf|l3Vf3u1nO-|Il_-7RvF-5CYqklFeVk;swVW)oT{jwXUV5qdL
z7p7s{<V!Yg-<Q`uD7aP&`=5ooad)=Ki97r^J%|%Fd|@A8mijl7pGGIZ?o-4V>f4VO
zCYDSqRT^pK-)Z=gp#MZiYKwm2Le|DLL%%W#qJuJ5&3$uinA|&C0Z)f2E7XI?;VK!{
zy%avmmqTi5f$8%<H91mBADWy??J3gb*4eEU{)qXeX>9+}o7K)KoM175O@;s2P*@Cq
z{x_G&F&{GE<~&LcicPbRolWaioobU>Kn-R6@SSF|9)gS-eqe$%00&{dsf*r>hyK#R
ze`b;hy)$~Oy>=vwqvX7gGWl)2M9G?rdY9=i?IdB!C5hWUuB~*z>kX32bdYwUXF*)o
zL&x+zao->My#JBU=ewqkS_i$z_H}T64nk*Os>v$VOn-MZolf?7(p(E$Ru}*$UL<nB
z{nk1kKW^fzSiyUoH-EBvz%{YpIeyo~A>OYx8Lo>(JjKI9P*PvXIGQJrY1!(wcgdoF
zs7P&cqLhxyFQmM&D_g^?^RP~wI330?V_WvPLUu7zy-q+q0o-nKh)JUpK7XZeSM;0V
z&<SbWSf8e0FTAmG&jArH?8!)sK-RV5EJMfykA5rVxB+j(V0#v@L?mak>6xx3hsZ<o
zp!@wSP}+BKLiNJx3h@P~inq23c0bIGQL36q@kbFNr{W3Dl{z%q8SBu?MlIJXYcYl6
zo0-U<Ma}(8l%s8NzrUti!tC?{SALFXAMeFfX@v%nm?v6?@+sAB!*-5m`h7SXma?oM
z{EZf?2<+@1O0c+1jvdt;X8_N$u4-9_JvT+<UYeBHnl?$*%_5=WbAymLgy|gdC-@K|
z%pXeaQz9qNu)<YON@+N}bPXGqII3N%ZHe_4HO71@Jz=N>e>7o$oE}%)P&1vWx(=(i
zt%{mYcM6<&5!IMRMPSRiwRU@EdD|JpqK;e}ylymuI1yEV3%OSO?6@zE4ePdIFj}%x
zmASCeqy{5pj;%Dx$GTv{(H=s$Shl!J8ZafTwDGzg<l4<zSOMr2Q%4$a>$yu@VUDQ_
zoDSiI8C6-7pm-gLhjL;=l|V<NIUV4N)SqxY0ULX2U5UD8lL2v*aAJYjF1&NP;BZ74
z?O5<*R96;J8JZQ9!;M6q<#>kjLB%py<G_kMC}IHz{aHm*GnO?p8Z?P;seS6HS!wq`
z;|XWX+}%d-e`!tNj=K(Nrq*gfyfLa*n<yO;sQHs&9Il8f4~C<0I1O*v#G9ydL|>4S
zwCvXreY{aiy78|SCKfMlqU$Ok+<<qS6OOv!8QqMQbOrYDR$t8n_EQk`4`^?>Km%0i
zjkOu6*0+)Ru4N5w>5eKI<V@*^@z*uH%0KeCe;wsUe?C$3AY9-%v3>MvGP*`Lr}#l1
zWt(nz)KIDqH%3RcQl^n0+|YUsbvLFoTSX8Wr;8~<S2zaQ_f-t3__T9lOk`c75gM@&
z9ta%pJB7f+zQTb>01aD!9;U0=9#%-p88iTDexlIdY$ycge06DpG*<+IrPuoxv4f!0
zZozwqzy^ASpoF;_T|AuYi{LOGOfHK-A^yo}b%2E)U_cF0{|Ngm=%@`u0QRWM%W>$G
z)^jUbNj%lZ8+}S!N~SlDI-Q~tFT-s&H|<trTeJ_0O9BJw24CVtvy$NAydRjT0Q!Wb
zg<!Q$asEuI9MUEXJ@4Q|{V~2VwAPnJyM13)SpdZ->ZCli!e#rE57gkWFjT8Ko4JQ2
zR6SIEKdiLG@guqHxls=cfpsI_K-3IDbB{2E*Ygmpt=*>Ww8fs<(ZO*CB*Rvq#>f?h
zqx89Y7u|OvVKsIHjg`Ph`+c{s9-=$58?i1o5_?LF2ByK_maZP!Z5=0S9^H*@$Mlre
zj4?vHJr5oi){SsQQ@wyz7P4X=yKM$nFPR>~1wz1}jr-_ba7bCe8A0Yer=7n(KUWi2
zap>ZVgVvqsR#8E8WL<45k+xPoTo2Jysmoqp_Oyl8Eg_c;b$Y+w@?Rf6(O+a+6?9H)
zfjzdt!Jvc!zF^cvpyRDw9qOG8Gy=e@7z<E6Rv9m2qa$obxcguaLKgM~;lz}iMH4Ze
zqCQ3+Fc9X@BVRZ)c8dlmTCgd5^_B2s41;LElZfCo8Krc#Odx5r_5@*Wt_D;swfBIt
z4JY2js?4L<F&!>SWqQ@amQPT0)d}$sHAP8+r_(CJY*L4#rELbM3I>$J^oxcG;>x(&
z@fu!7D^O1>N7qSbyjg>1L}`BW0=wJ4VHHB48Eb2JFP<f?FVz}5#G;vN)=@K>VUxb7
zG}QNR49;>H1g$8Cc@dr3^hUL;VOc&{vJ$r<ms2ImxHc?+kkn?Jha&p9>-v8iPeNj#
zYKL|~>xzD2v;{=wb|CZUrh+a(<t`!_3|tg(a7K#{j>)(%UYj$m*_BZ{ZeE*HworWx
za#Gs&ChR~P*Ih*cEh;xU7Y$$jk{CGxrd2@n9h(v%;?aklDXEr&at&+<eQC!$FEHjc
z+IW@y6z<fqkxtZV5xhdwTCrz5;TF>WfO%-MgJOdrcB2nWd<Kzb^vNG!r5;~;%KL+e
zh#YU1s%!}5!J`tZnTVul&r;D@UQB1Z{e6+`W}Z5sZcc|{nibY<u#{(&q*X~1ofyx=
z1F5v)`hD&_EE2n@yY5uY$9X4s9B<G2$hf7b9k~AT)HsRM7Li=*v`DU;3*(u_CPt?g
zPRG=$b*nTw*FAfs8p99_j#fZ|z_fb9+Kj_&_mnkU=2*jJt~DHC@8kdjza{VaXvg6X
z*PCcp+Ck|@BcgsJoZ@<8<v>e)mQnfgP@|_3;nY}^arCC2U%#SFKo9wn9$90?oxNl`
z!#mRmBb^G4BckNum(MvW1Y$>A3@`m*`1#evRsV92*bw*hx;y$M{KM7gs;kCNpInq8
zj0ZEX2wv$%lS-^cW!XhQuZro1Lm;<IfHegh3s_1V_!vr#>^d9jsnYJ{$H&31xP$lB
z0@YS2#Ig=;Hh_n7`NR?tA8L8(Fa%Lgx^OVHoCtyeou8x8p<~z!mn*_nFqwhJi3m0f
z5@!R6l4lU0svF(1iOP`J{gC+4Y7uBIWdupn2&x{>9I@7kuIfLs>0OfzmK!-%lSg>u
zF2Hf@h<Y?#`1R>2cVy=*X(iIq3Ds1Bwx1)28AlT?g)&+s=zb)#0DUV*Of8kY(NRR(
z{?P0>I45KQi()nT#f8n?uyWU7i#+&8Sc9&Q2M~VH5q>4mMxW=qS%3Gz4|@T}Cv8&s
zv~<a1i>h|}&Qdh^BDB3Qo{|SKOMb6@ldv&_5&X|bSNB&xjXRgY=$Fg!)4dKQ^OPgU
zd=c5`*Uf}8Q^}R}Z``6H(@5#85*D#HCW`V>t_@dq-XF7SR7lR~)8R;%T2`Hp!{1DR
z5e1=CD;=S@AqiUvRKF4(dkFE*`#{4-5FUjjPV76D>zGI-L{FX(0Pf;tiY_mQ*vVm{
z+_2Sj!|_{j@bZ@`F@{CFeH$XN%y~7{J8g@I){f)vCK3iXh0Hq%D!5jMVGf4+LRbwM
z6`QZ6il4Xvoey?1%<JB)DI%GujGY)AMW^rV_o&bN5Bvaa7B}d2G*^`^62;1G&hazy
zE1#L_q<FQNAgl)}Yzi9xzKcj|?}z%Aq1#{532qJGW7{h;nzEPnvO1dBTp<9VjnnDJ
z8vPswUpP7)Yy|Z_T7tC(@P8>=NG5T+hY1?p{<z!~^F4c2Ua05MBU@Hc306;u&BYei
z&;YY~iavveX;7kMm?k$LEsTZjfKy|j5VQI~N9ZZnzzETuCt8fac)8g6sj+9$ENgiv
zLP;+A>64*AN8<)%c0IsG++vk)YU(d#)g1KEIf!5h(-1P=EQZT^y9l)Tbdew{I4r1(
zM<<L#m4~sJbHWg#Ghc0UH_m!>z&hfodoDs9rlyg_x=mq~hFnh>7@ff_?3I#yY<t-t
z*?0gUGp1}%_c%guA8RDghj?~6oQlDUwgIg>DW9MuI6^E9%j$kBdal}`G%1xH_6UVw
zh3y8Y=|%&JVMCN!O-L=-t45GPU?R`Txo40!&W2E9Z9XRSh3j{(SDx4xV)3zq;B{&a
zIfPYFah5fQMm~!7uSZqMO+YA<_*MCkBb-uoU)FOPxE0cS-vk1#g~ShQ_Xc7i%5+1H
zzL0L#w{*X{rAy_wj+pw`U>jmgGL9WO6YXH-o><z)N8_=^5XaCr!U5J%HU{<!#&{>=
z3^#nrVTPA=8xQ>frlDdI8yo~jo+?{6{nd37M0{{44NZLPlM^ldzVW;5@dTi@-#K-4
z<7RxWvGa-b(r@ASS57=~8Uzm44<1O_^XY^2xWWQ_WDc_Ca4Yh*q=C%dB4io6@%Z2<
zQQ4z75MXlK5D_SHGIJ!Q($nK9tk|OeF<{+d%0$i)D#}>NXc<A)Yq~@U#LfP5w#l`)
zArI7-rJM}0tls4twhdA>bdm>##QrL}xO&sMn5vi2qhl2CmvVo;#7G~l&|2^3SP-`V
z70W$U)%F&29!$*wmC*iwPRKK%R<{-JGh#Q7(eFzh5E>856ZfFBmtrM~FpjhW4$&(j
zgIV!$UDiK0%o}wxU#vFo+wD25K@d%w;H#%S_GTsH*y;_4$(>wI2U9tRXE5RrIprKu
z-8l$iwi#saz1?d4-STBT-x9HsAZv#lPZ=yuW{6WUEG+AM?H5MS8-&RaT@P=JX(3x~
z-9(R-lR)AS8r_iT=Ac!EX!98ic`1@w3K*fmbP#BQz)JY%Y#3{BX}51+R!JrH`<Xdq
zL$>WS9WSW__(n{j%L)!oP;HeB%Sj9q2H8|ybC5}w%2yIqtsyT90t{$?va!A!_%}mA
zBDS@T7>}TcG+K}p!OV!BQ;43ibtadvI+>iGt0`Z>+WR2e;GpUxoFxd#%40QSVx{Hl
zxQ|9OU$>qtM`8lPOB;H18w(auqN(F*;fBODt=U1%SMG^!>nThfM6@~3q^rb7jTIJb
zCz$_K?3z;&VZ1b9t%B7_9QI!&Fw0K_aSipaPoO*|0ML58BnWxkb@OPVq0cv6({??<
zkn>$ruUkZj8w_;gCUSX!FxQ(#libnB+vMBT{2j!}*=k8Y4l+W#t~5Ur^Z;SAE}MB{
zg%3H<r1B;)q3w@+cg@zd{M~Z3D<<zf9EPhYT#0Mnn$N~?2=EX^g-^;XdL({+*ED4*
zp}+Zk{C?Z;4zbUcxw9bvQb4W0yXdZeG^@LrdvKcAj<#5d+Rbb_vF@7Dj8^kaqbg4<
zv><*4`3Rv^$No{XQx2Tglw@iUi@>3*4{YtCARIfimwq6FPP=-+^q_H%g#e)~Q_q|T
zmV>Ywb*4A&cz`@_%<VEROv_p&!P`{wRM;*dGM|bi2xL$e23f?HA4*7OffSPFFgw5%
zyF5pUl`Yr;6N{sc=Qu9s7(rd>z(a`EK_=50ap*dnG<@OCGMyI(;u`zE#AEu-AO?E!
zjPHRM0+sWGj2lua<c(9653{g&$5zWzzswHj@LFcZa!zBTvy$aR%s^vzKg*kJv|)gF
zl)r&9>sfXdya6nbPQyzc;;d(P^<f-3kPTbPk9l6=Ob6A&BTjKu&(uYX=1~{JoV_#(
zVj>0Z7|)@B@cewT-%kz1+UEoktSD!V_hp}X?1F7><rK={C0Dt<soWBCE<)y%c3f>P
z@Ti;)_s;Af^x+0asBEC=@diQ(SZDD7Y*@DXNKl8GI-5h2mS1yTK#_w*jbuB&s&^|k
zkX0gin|Q0Q_>-UFViyvfwVG%0qC!{>b;T&v>4f^uZy`b5=BPM_f@$@J=jYC6Eb8N`
zVJ>BFI4Erk#oO&l`O6*^`?@kKb2VCywd{zfsOdD<fdnA-1BF_9>U&%pBERG1YBI4;
zf*K3{4ei#sj#OKVUisp?*V<$1)hf;q1nV2f)m7YFT*6gK5i?Iv990%3YH;!T8sm*B
z+scDF9D)Blc3k8t-r!IhZu8ySVv(=zcD}AU2>p3O?9J1?KQ8NZov4nlEfgiJIjTVx
z!{cAs%_t?nj*eZ4!Bl8#;U=?FNHL)=ut~s5`Z{>b!98H_&L9>~1JexGPDJWx22BaK
zU_DDKsp?QcH4RQC$@*Z{cg-?1ztm8gsKhjh*HNO9Q|Rp4k!7VE)=W$9tpRPq9)d6|
zCiHIb8J^6Pc@>mKvpFHs>!ImK5EjVO3f3rv3DZDEz23cucX9Ml4WEP*aqn9lNB>s>
z``-xIwM0sU?bZiWB$Y7IK)~CcdaO9KnRXu!2Tk~Qb<#i4LF1~L^6&7sF7g8P)!+0;
zwvjs~dh8@Py~*DnrKh#uL1?B&En%e+^bmQE+<uI;0Y9DC+;XSGF|3nnp~$!e98}XZ
z6s%db(XO-L==)STga{R^h){X@h+8LUtK752dI}G;-N{62`~l4a;A;{&pXcKf>hB2*
z9MXZ=1AurZZyzGt*sfNpLtG}Cyebpj(*)M>Zu+iCJwt41T<KKibb4HkO(f9`LY$OD
za`OfbKWMj6ezxBy4I&(RW{adlUn_hevt^Iu5(8-3O21lmZOT0kQxzH|(N6cG{4%Bf
zCc!a#?J7RmR@q&usXHCw5mAmLsJsKY%0|6qZpb7UaymLOs7+Yd<@6Zch1kj+g5u1J
zgkqvmqVh3}S#sofkf$&f$ST4lwqMMS?H6@e+36@lw$}sm@z|KBl3BW-<qWH~2|0yo
zz&v;wZ>oG`t*DJ_|AE?wO~u5&Vmj?_>b3s;R_n1JMT!0N>af2Wnd>n$*xyAL{^*PI
ze<Aa7iT%E>LY});M`7Y6RiKyAl$?8=GE&-i$~%WG^N~k!&2WhhmLnLZmVuLqSKV#y
z_+(ExH`oM{FMZn&Jsd}J$H8toX~&b>P8xn|g4+zWPWrEJzWbI%O-_ik*A9Hk8JR}a
z0AlH(qJulJ@Mo{P`X#HmUO9KP#MN&qhvjSc%uel|dQtx*czmr%DZcx!gZlMD)xN4%
z`|HViU%B-jsU5T959%8nNAVO!;1kC%uL3f1PB~I!rafLW;+crS&&1KpwO+{^<>^@j
ztZYG#5<pCkH|Ui1CCjvN(M2>@)nlt68^TCnQv}~GlE}17>5sJczZW+ixJnW2@rnVX
z-UXN{9Bcx`YW7)2oGe=tjI~1+2&f4&i;xI^t*6m0jji1-iV?=d!Rd*%718rYwK<sC
zdh!n{WwH;Hk%7zW#$vKD8V4okoV3Ej$%271&<qF8x#;NZV(>zg&9vL@%y8Q9gO1*)
zj@e&%qj{<Zh_2=SK3W3}>vkCg;0?6j-sN}shfm)ad2iW)YVv>tVf+asX|Kv77G`a&
zOcEa2?9wRVY)aRlf~eil#>@^BXCW#hRcHBew;=r2eUSK}1T$PpI*^q@3&=05!zY#c
zm5Y77THS1IgpzWCmR;SNV1ofnSB*pw;usON+X^$<eQ;0n(UC}-GMLz(?zdD_j<5-<
zFpw})xQZ$JvbBgCVFbcbZWiT0*yZ%KIXSGJelFn+EbfzqNEs2^DNog-$k0y<RqG-x
z2Q`ioyVU7e5@*y=Wz#B2KcCgolC~U^G+*+OVgePA*%8ctPKTRbTZ3(F7;~l_@ihFv
z?sUKA4K}Dkf!+&BuOaoxT{&z~wlgR}que|Vu=(K)*jPzA&*RPCKUj~3Nr8B{DK<$$
zU4NCn%Bx}mIjam6Y7^T!eLFwT5E;xBrc4x4=F&Dey>JF^#*yxwn|(zi1%&ibaRpcz
zNu&brIF>pcrSBLB9iPz|bv}2+3|h?fcjT-)9}hv^WlyiV``{|;(9J0SYRoU_b{|~m
z+&t=sXym<Jtv%)a0PB4E{c^S2trm3gDxd7Uv3heVk0~J<Xy~EIU;#wR`w8~uNd1YZ
zGA+k?s225=wdik!3^nlw_8gG_S^P@XqLtH|oZ_Z}mz#LX?hKGWRAa!;n;jmA#GIcB
zGM_dFndc69?1NDapr@nRD|>ZZMhBjktmkg`h-JEwfGf}EG<jfO@XI#zbb{6HZ0Ir*
zqeUeZCkB%P@$%vG3w!NR3(FN(|6IO`*r@zO%@ywgEuQ+(O-nnt>2koFV)^A=lFaih
z;<4!`9un>HC;y=3B(Cm4{UqzUSlw;&{d!d_cll<ojksvu?}B|w^wrIU`dJF<nk08D
z|6SeflKI^RoCqg=9R1QAKjqw!UB8Pgmae`1zuX{?_URMfO|@m7{^|=0VPb7pBmHO=
zfUwK~^gTp;(c^T!O5!;Jt=7$>Dq;U>xrB8lVRQa7xwb**{FxQIPNI}xa$=q!G_JL{
z<m4=z5ZafE$RvgilwU*}>D(4_x$;gN`=@j-Rf^Qk+%*YKHQrhhI{%S%->Aokg7b`R
zo_1njFR!q>*;&FQa&#09nlizLWJ-umPKS~9JlI6k909Kh9nPYEij8tIx*m)D#wxmv
z5R5>rBOmbxq%!S8)iq93fm(4QWz#qIJc;L{6*JLPiJuSWT~HWP+Vfx{!g)6#f|J?P
z{eGoRetQ#@2RO&SSg93F3fFNfoLi>!x`nCaAeVJgW(C8%nlzPd3r~2P=o}+NIS|sI
z2~P8HtsTU=Fqk54$X`SS^)BG(eYk>xe_==We04{#+Ea62p}TdvtuIPPlC_$`m88{2
zn5wz}8_KXFq4tVE8uDz#!f{MBeoc)xKx29e45(HgL^2}?RWMu_n}}MM>457|RiSoI
zzG1SPS46fQ1`4viQL6O&_Fu_!x7(H72)meaCxLeUPr#N_bN;VGE+S-}2Hfl;fGZ%t
zEzUSXM<p``0?s0Vv)3_Dge=Fyu=^BAq66?JKCTdg7KDDZs19#J!@G$VMC7PeE^f^?
zT?7AYk0C3|&t>Unhy*HNeABg1OnrsPJePCK%)O^iJ;`s|DxWiC8z`B;a>o6p1~%vC
z%BY+G>T*>=W-ypie-@=!VNP9(HyM#2C~mIJ2Ww?9rrse-S3w2$&$5JJS$H=dtQ>d+
z`C$>5CAA#FssrF)NF_KP)FpuhOCO|0(}Z#u3{Rlb<M_xLFIS_=9PNM`?TJ64`JE$~
z(Y0~M(qX%Xg44r<wnzESE*clGcMj}^lD>8t%_7c;J6E4plAE;K|5Lkf{VX7H+c`Q~
zFz(xu`={zJ5eC%XM7K_p)ccKPD>r)cK=15)8hXL!J!E5DdYxM&Wf)nF${2RKv@e!j
zS;$*;B$k0A3MjN<`&POZ<-=#;r^=avXj9^1_xZ0I5O4N&*ti2XAKihWNHxG=5D{k0
zsJapp5q3}d5^g1_(f<uc34GcdX@P>di&`CFm0Q6o&}psA{3G<MzO<=bQvrT)pT@qY
z;>(o~d~^fI{fQ=hb&u#Xk769Ks$i-8{#NM~FFLnEeN0_@{K0fkd$Jb1KZPB{bTEUf
zd{%b`;<yVsXpWnskqrg8D(M%z^$!ype1RHYOWp$NJr)=`s(8u)B;V{-M3EB%80a*d
zlgs|F2v-)%VknEqm-Av;ZbKH&kL07VIZvjL2V&<Ed@O*gOyHIjVNh<`?dj-d?7RUb
zP-^mM@L(Iw`d7ZTPsP$RVT*WJ3Ck?_B|oUgajQ5<O|jJ_zL)YCD%Sj0J$>zVd9B-9
zOL$cS2F$%VorDVbre@TUA<#x0G&mw!h5-Zd;zHEJ>Iel;XHkRS^h)mnTg5CWC*#2C
z5hg>c`VkBIlj6a5taK|jy2rLW*Jho?L9n{i5(`m|+MA=jW#2v?Bt{l{YsKZRkd4a~
z(^*HW_d@p^R+7%G>(in4;p5CUr>Ux~TS{Gn(6+!nAu=G*z#g9h_Q$xJ-fggBbjK!L
z>gYnH?xwK}$(9qYn+m^KEb^>CT8gHceJbN3Mi80qy<ml@LmF^IVBHiQhS3z$24($}
ze~26M{rYrIEfpeqGW|JBfOMY&4b6IBg(JDnxk0_3a$`KrR$A3PrNp4x8K)nVCd9OC
ztL@IL8_bs7`^q}1xP(|Ur>C_hCd^n;C3V>PLk<8=?cQz|Zt7*4cZmW@lqPf4V%5*_
zF|>IFJrEDmsHpfgu!k6+*2a}(W1@zN7~5wOH@Y{NaU{%6Fo|GUUtwF}{Hv@G5=mfq
z1LtFCavX+dxb$=JP}9y>1&)91qpe@*)I^0%O+=&@S7;-}3^GgM=?H6&SoN?dXFEIC
zg`0hzG#BT_>=(wMcm`X`DGL<W+t7>WyT9e{&k~V;oTYGgonz9@(%oi`SCyT0#vt`Q
z@g9&P?_w0-U?_Q}3ouoK$FjC(yJC^Q*~N?X**iMh5Z5oAd4?21ZWBUkBJ&1+n!nfA
zx_jvifJA?u)6$;NYy87?t%{mIwj<Cp(IdEF-WPmj!rXOD<-_ul=1RAM)FcPR0-tKX
z1UAp)ho)^_(6s!lfB$*5noNjI{aOG1^NcoJ{xkpm=h-&h<oWVv{rk_e-AYSoK0YK@
z7n$h&F{q7`n=(<OARFVJaYRnD-;M|o)}YiAJVW!5tg`n?*I8E9@!4UR2C$mXAx`B0
zSb60^FF2P{@{Lo<eZYyCcv@`j|E$#hcD1fl&iA#t%QDV=kMpqbQt$V6=T3-rGXT(U
zPY`2;{(c&MMt`4$Jy~u7$hy%{?9kpe8m8+lqcI8s))}F@fomA*OpWD_^Dvr5KN$gu
z=ujOv`$zRnxi4Vv8?hPadTX2u>C%{r=r=)FzJg)3!z)a1yw>bK5|-X)2%QkaENMc2
z24!w3L$I66h^U@VC7!atlY_Ty8T--=$~4uUR>P@vd{mPlj1Nj5h2bMC4iV#D2y{--
zBtgv|kJ!YD(uA=3uZZ?6(~K{)*ZD*unsaLLQpxDZAUq@SJtzogKh{v>HiQp!JGlIK
zGpoCu2OSU{L?39#Gr9w)Ah>o3uq7rj_!uOsiLRpwJT3G$&h{u(>yIIgo89|tb!O?5
z7kl8(lbp`UT+*%+26V`Rs$F^MdoSbxq;DW>ie)_4$=v<gldiPRB6|B>fOHw#VsSUG
zIBRIhSm^?&C7BL%L+!~jfLImVH@XH6_FQR|w$Xu3*<p=7rvqB&Q4Ejd!djdFlln$3
zguU8p1lK`qWUavE$b_`fUKq31WJZj^(_*5|<Ju|^T8UdBg@-;n2JFgU43!Bnp%|Fg
z(x{9d91k_JQJd@|2f-e{l;M<%4DxjNukeXRQPLvfW>kz4p{kenhJ1)*0Ol65tR*pK
zLI{hlxWv(rtp*hliKK4Scdm))@d(2ws)^6w#~<Jp=zSFcj(vfSCw_2hmj5N59Mu|+
zpTKUQM%4c&%^r`!G+e8+;gM;&X-fW+K73$G-Oe->`_Mb>qu0>ugYg4;<O3J;y$L<O
zrcJl;gx;Iy@w?nSCcLV&!cQ01ck+S0(Vv)CjOptx%{4xI96eSJi9{Jm4P6TDe&o9Y
zg+K2R!I%#5&GB+A>#0w0zlCtwVgv7Lu1yf<SWAj559%uKnqA10{szWBZ1`Q*qhfc;
z6wBFdk61Zj-J`I{g2WxMoidHh5q`^@PgS`H+er=TQ=HHgv&yIrliE_aMhokSwU#s)
zTSX(n@R1$~MmBIAaLX!$Z0-de;Ata{|6gzTyg$f?mFjauscSqQ%HC)pJ1PhcM|L}v
zgdIn^rmFiz8LsKbBqU*uBHi!d8lkO1%0T_GSU6J?Q*I)LNl0D|N(9q%k@*U@0uyaw
z#u07I))?v+P_7&qexo!r&8DorbvguEnPpB{^u*f3x3WrnD#vdkXXSN<ET#?gkuUB-
zFvD-&6-ZCP`oW3O8%}B}ZsQ?wWF{ma3sV>^1j}gB#5QoXY$AbNYawSL0d~~MQ_cif
z-4n-(#TquXvWrR({iG)RliA1|JwawMNXP4X9p_b8zH*|i(WQ}YDH|%R0rog%wF_0$
zZVq!vVxpSjTyY+FNO~JW;wF-t!hsR?CS-|O8a?^Q0#(c@?Ft=H@kbG6PSt1VPOK73
zjhyPV!`ewt3pcLdu&F{u2Zr?5R#b5kU3~5jTd=0tCoo=_@AE}MB;0JXFBa21^AP)a
zvAo$syt60fEnWmZg2092j>Lout}ZSwriDtlGX3U4rMTU<|1i9|?+h+fCQXIJw-@W(
ze!F`=&$;5@qEI=#)OJ4zIyVeQzeMAGMAya~sEc9~D)!5h{nZ7PxQ^e&`#fF5fz(K^
zr+5vEc`DF-N?n-Y0afyO3nn$A=P$l^`^D90Pu%Su55`wxTwhX&Cl^yyB+;X!g$hS~
z<$W%2c}B;~u2|3W=o54G3BtpEej)EKJ;Wo-i4)?FI1sM9*Oy~Ovl@<`*_WTw{glXo
zwG^{=&KJ8)<%1pMF1k{_bc<5MpVo_hzT4>Ho6Cl8EZ;ZkA?u&#jSqt&>C)i2Cy`v!
zM9`dc`D;AdO;)QNE=-U4I_84>9<#t-%=k7dO_#2dstnHIEtSXJ@`4HndmM)-abweX
zyNwq}{&Fpz+J5=|Z9L^~J?^oGsL*T!;@G6stn=z-a{5CEAZ*ufs%bu$&hbT>b}C&|
z$Gh-4nrm`unkS{V^)%7(3Ptd2wOd0&NsapB(C~dnEx5HVlA{z*Dl5~CWLk(V7X6Us
zC{IjIzIqqWJ%!MSq7_Q&?*b=m{xWHh<BK86;3yjli^!@5DRhpO#>g<nkp3W~0V2qh
z#wo_#$k+%>OPjBOMf}$~E*eI9jSK~~!MX=1!lR=Mf*>AVS35O}UOSyCA~*WYEKsj?
z9}Cb;b}Ckt3<AwCcnUNn^9aFLm&2Kvuxnq;=fmSiw)ALx!uhSTj}o~0=uk>AyN5a{
zU)Hs>2Pg8emFd%n2zzT%yfKKfJX~xnZ63YQcRtWb(r}dUy=Z$~o6D#g;5l%7i`ZoI
z6q%ycnsL>zlh^A5cDL;3>DLWJ_xozhG#&EHb%`xwE5oCdL2Vk*s?T6Xjnxlyu)j$?
z?+(o}93<5gZZsUpm_ze%6%z=X<?AU@lt_gqDq2=5VoH^F;H=E0!#z@-9DcBGa`Gb(
zPM9iWEoNA?Wdem56?cRPja6|2C28<THMLlB+AMj_7J4*}Rf%<0my5wdB0A;BLotTB
zp0hj$jsDy@d{6~;=PGyd^5o+%4=kykCPoZS{lt9URIqz;!XSDY`H9B2x!Ahl$O|~<
zK*c!^=N54$`#l|B=8PojzO+Mz$y+D4K7MgRXY7+c9j#BEU3x(W7HWjfkZH=XpqpTQ
zjS=#o9OuN1c1ECe<DPI6HxFy%d18Sz*I|G3KoJU@w*yVc;HLJ4D)V#X(cI<&Vb`4V
zKF__0yToZH*i6ukv|QU!xd#90oacc9g9U@$1jZG}PgFKP8C|3KiCI6B*wG7Y^v}H1
zJd01n^2oQz%>^V%uNretE8QDdu`@JW$R^CO#Ux0%W9Y&7DUZ_8D=Q^rU!H`HCgTCE
zb1Wq0cq$#C?GxId!x}rlNqwr8b?9$mEb9hk1J<{-e00!HUK_9Q(QDVwwa&ipPDDzq
z``49kO4;mC!pi#+XID5A&J!9OaVUJkbBPj9_8Xr4x&A0H;dWi%j7u-K_{if20W}%G
zPUu^@*=q4RUKZ=d;AOmE|I3}#)ESYh+O%O%^=XLVf5Ooj|1atwZPt9V`;wJ1z~hx@
zjOecDYyKB|D~dxW7If`Fy?M*G#*^Jio!S41Mk|qq52yU|-GIIEa9OGy%T0hVg#(>s
zDP`l1fHPwyLOY}tQo&*>pHL&*7t?CsY^KsIPEBh#6-bCMCO&nKX}1oIM~qKRRlso^
z7th8wW}_)R3K6%%Zj$2`)x$9RwPD0!4j<PJlv>lrB%9+jWy0OI`eCdCr@&b+4n?rR
z0St~oV<{9~)fslSTg-nahLg>qr6Ft$Dm;SY^j7uEKFZc@tqkp%-yE<Wc?zBEI4z<Z
zER7L=h{hPhelI>nL2xJ%wq`P{j2=!Z!|B(uDAiXkk(F~@r+^}&p5yd?Nc46xxLyz(
z`|6)Y$-2YU0ER~~?HnQ0N4I%`nW*h+RU3~)S{J2{?tv!t44%O|-_V_Gjc1n9@eI`m
zGka_zztBlXOKXqLF4m^^H6V|pTnl^=vQ`9XIN&Y44F8mhqvb;MGplHR-dAf*aG-9h
zLHyRtFWm0;bHtcE0=PB7nCnf~Zs!{O)<JMuv}og!F1q<GqLSWXwqU)vb}aZ(NM31|
z!TgUd%SGcIh<?pk9J=gQm<NqC5q-Og)ml1qKbsLbG_AxSFNxmLZy|-vw=uV#=xDxG
ztf+3pTifj8`Q`P1h{|Aw*r$Y+SIo~F41(N@tp1n+{|d!DQB{_SH;SDFcrVP<bs)KF
z#q4`Bnv~fmYJ-$MPSiYs1fw^Y+WsIjrZS}N%q4YORt7SwN?Iz1L_usG2GiYcAj$nT
zry@UY<|t#X<t3=hvKBN|;%kdxW(l%7)k4FH+dnJhWcR;ag`Qk_hPuHced#IpybV1e
zD9qC@_@MXry!Q;EK)7trK^opiqdCXb!<n-gEQMXp?J6KWElqVKk+jli#;Hcjoi3}7
zg<twPveeR{2T#;VY5p(q+bf5e6Qen^9>%wc+9Z|m%-h7TgkqxoRpU65z@XE&D__jz
z0#?FOn_9W@e6?8L?egpm1mGN!<K$aTv>gP)tgD@kL-9VwW5)q`P{t)?>;`x5YSLhH
zG9nuD1~C=~WqK~!ds`6>X(wliN`W`GNkspM%JIF=i^(Ql<Y)XhS#7d>6MfSA<czbN
z@s*@K!{r4XWX?1sbxT4RoZTXON<9`hZO8jfu>&X0PP{r`j_KZQVh0!~9tOgArw2}P
z1xf#cPMKnPq248t>!b3E?{)s(@dAI?T0aD%`24s39(SJ5`CJfIxlf|TFy&P_vEz+_
z#j387q@Zz=dp{(nBv`EWu(J=L8K=4Bm>JWEVberfV;Px`42LOuyr77O)tNHgd0Ozr
z{wPanN|F@NjA+AjLM(TQNrlDGH|z2m5;)Jgi(>f`-ypv9B7TsY^11WWd>2g>`hBlU
z%CpS<CRff^2zOx_^yzTg@x0JU3;n*LCuj~WcNUwBac*2F6t(FYq9iz>l06*iF83@<
zh~^FEuFd}SG&jvJI8cquIudB`MHg{4perE;a$c+>Pec4UO!*)Hs(7k5e*!0WjuF8J
zKZ9Jg9*!T>^sUPEV?r7b6-A!x+^{#`b)sL{wREvtt?BPPpX|c(Khyu#4+Ggw=Xlen
z+qF)#7{<wVH7D@*R9<0@Cr+@;sb9{4ZT<W{Pi_kC^!c{<4e4W~LwGVcU#xyR@v8Z$
zL5c~2>sEUE-vj-l$IIQ1GemvnYZ?7#&4Y5~eKh%5P24q*=)mzY9+(IoAadL5|2J>c
zE`q(Jkw-0Im8N=|WEGw+4-UtbIp%LS>Tz8><a3kgvSCL|fia2CUp>6xS^6QL7boJN
zTN4X>lY*|7qOW=SI5<XlyhEbN?}<EN@mg)+e-9uy0DS}r?z<C@n_z+9*}}V7{hp^x
z?-u2VBlAqq7xFq!s!s@NjzNLWu@=WxdpTdlP?Q{jL@FTRwiO&LKP?^N>9Bv;_C8)m
zCoEjqbw;bfCK8Tuig1DYRDm0Fc^M^$G6<V}6Tv{@D!E@frBRWkBP5vKZ#YtYkOX_y
z(9-dFo{sW(9CV@H|Kh|U+kG0Cv-Qh*5d>xlB3)7!dQLQ!-GyGc4c`^pA}Qv@?tSRZ
ziY&{Qo-(WK@iG%h`GP*CGk^%sH|sdX0`uAtVEiPA&HJp^qjFy*(a8IWfsUH}j{dz~
z{YHNmTW?$<t(W@rfyh_vON=-`N10-xWw-i~pg^<p9pgrW3<yy|r^Z(`ANpK;=o5M|
z%Ez5l)vLBSwaPRgRq`SFLJJm>GL7MoW2n-x>i1MO>W|O;lzkjJekR`d1g}Auly!cc
zxYk{U(4IsoyP^*D$>4?NWbuOGXQ3xaY&p(SpF?~12A^F{29r+oEbs)VwX)Ekc5G~%
zwDSY|)b}`jN;dRurKaq88AnI&Ot12dsk?PtUU!s>BmOyO*_F?N(CtN2&E><^QLjH(
zvsJs5Gx|+!l~6KrXDsfDyARhCn!B$VFcqf-XXeH$kF-jFA&bpDFw_&KFM5{<z%Dpk
z=WB~Jv5D9jy-VjUt2fLR2Lbu6)SlT)*%=Z8_&437qXT}lIm-#l3i8OocF?5tY&5`*
zfiDoBP0$4SNYDXTmNWR*<VYsVS{+WC)?<2EZ>5>e5R<V+2R37xdqQj}9eXBI-fEs%
zu85<V3J%xLR5Il9v^y-LL*1>Fifj(#+KYDkjkx{lHmwz=+pHpXE3?}5AdtwcZ#c@Q
z2_Z#rm&52{d(>%_4^z$KWe$TE=me)zc1k=k6NrUthIQ0)ui<IK(37E_A6hxCE2yRv
zGs^nyR(l_<fOQE&KOV;bX6?7OH((I;bYaV|>R_c_-wR<id{9*Hw|9$#4(!L2PJzXe
z9Yf)*F)8Nr?{r(Zo#zjK*{tr(^_$tISl;kmiTdeoUM%yk?cJ)ZK*$2VSkK}m=Uk+n
zySnGA-@f7Ob+}rs7VL6FUHhIr{T{suz#pK!-SSTGVD|og-ei?2=9Qn;3=aOMb{`w2
z!BM-{gZUP9-Z2qG!JQh-#vCu-xsT{9gB%G6hF^%6S;C2{?Cor<oLI?(2|QXy1iG3!
zAu0)er#hw};h`)*mWKjS8T^TjSL=kZMJQDI<V$^KrGZ#j`Z-kR{orX%=TpbQBL?4r
zO`SyEk^unm_*r!UNrXN$%&Qi=?eS*<Ei(MH6Y-&U%q;<)Wv}<xsLV#xD7ht%15Cj-
zoJK#(Hw9Z%Kn`1*kBHUEQyn)Ki)_D4Eo&PHEQcSU<BnGNKUh}{3BPA`t4r#xWKWg-
zwV^HbQG!rLwEs7Yc&@`<GR^WrQcb-`_%QIa(N9W9wR$dy1#M3ZX=sUPI#Xf}hqP+F
zFb~4q5kHPR;XsKNlaq6NBqnr*7uE5MYx|rIf71utag08KLGea%PUN9b+f?qklK{q6
z_l=p0LlD|)>p8b==!dwWW$iYf>}Elkn4|YYeL`mH_Z|4~EDOS(vDi1WP+?o%!y2Q3
zgHw%KxuhKNqot&aC6MH~A*de`HHr=SC7}|>PQ)|oC?gCOvB!q7qD#$eY0BwvdLiQu
zmQsuwLRVK|2m!H*dOQFj9L2^SrjB292+!2dwAEBjHUBWm#;6{K8T&o`J%7f(J%_zH
zsJo<0%Iep8hP@sA1)7hlrA2*5pH@WHM1L3vj&2=$-$Zmb(FTML%*)tYxjy12BN!u%
zEr8%oP;eQ1zhcwDvFRPbpJEMxL9YjBR2yOn!)<FuXX)`4_^Y-uU}YHbVEO4Xuv1@6
zr}L&5rUck4DD~VJ(K<>r8rDgmx@f>$*UeAfNFzhZcO97T%&mNSsOD?=TZQ8>;t#}y
zPfCA3&Ry=5BP!?ZeV#9)za`2o7d<*D!b5tA@4}{pCfaxb5f_XXCETu~)VLCC37kR2
zd)s^7>*B+}R@B=lF-~gnW@k)4?se(_b|;ofmRXd^<sIi<H&Cn(#B@9a35Vm5PNKWb
zvBp-$wic+joh+TaL6s1$6+2dKAmn~iM%A(J4{CGQkXVXNgO4;OPgXSe$eoLBcDG>{
zJ=j<Atc{!*92={Tdg-UJ>ZyM7yC5{CA~dPKnacBW%7dp#r@X6HvfbrttvPoel^R3|
z#bW9=iK$`WMi^z7+A!azX41ZwOiTxL1gH)?y6==*U-W3L`)jAAUXXf#2=sas%aTBW
zj(fvZ=%i}SGgA_Az%_1>am#b)8sWU_#do_EsIFv~&><F9o2j3ltPOnN>9qA9J>jJ8
zmEQRc-E*iV{auwP(hq|YPgc4Qy8OPw$vSuSUNg~tf3ORq*Utu`h#DRvtOffURwFn`
zk6jjkA5<)dni@CGs*FP(adO9-#-y4w!}rzn?B-qfkLN5qN>{XWPx<ouZ-R?wT=V21
zIs!UnR|3LEPP37y*NOTzk*KzU_xC`_dmv&?t5KKy4MQ#b+XqHaD2ljJTKGNHSB8kD
zO8%Ziqkkl0^+OUpdQZJ@bUMk5Si=Hwml5CvU*^$wR(eK9F$^b0pN?zzGA{8YjD@SO
zM3~lM#-;-SfT>WxKh^L9>*}aajM_6k>5*@d8p3DVRvEX{ot#5#O`{G>(FfV;Y!=O^
ziS8dgHNA*t%D|<mS4}&UK+6(mV8>==Y!{i%06s%rw4zMSpmm9Ih;*j=J=!9IUmq3-
zwM_>I7_#BCQ(?@)4*o(hFm}|LZ<6x7ce0APq2i7E91%^gfEd^nzm)X6t-6m0d8c(x
zu}HKNkuhpwE_!yJ1Zf0nPURyb4(z03>UJsEquba?UJjFG;qfCQxCdobcH>7Yva^&X
z;&1(sFzYlL2PSL^Jt2r22b@~Av_BY3S@_wJoG%cZ3-(VzSXrr>Bgy?ovm)5UZxyqk
zMa02S4O_Ra2nXJPIJ~v#6}-s<HX4WW=FLKoJUhy3z{weuAov-rI={@=ro`NEy0w{;
zaX`5@ZeaNGoBh53m8HrjoeqNLa-vih9Gae$ADy48GF=0A)tYb3swogSecF+=qG1`K
z!=Rlbd?PC~AZh5r1%EQ91Aer!*Q&hy*}48Fto4t%MRgNdVcqr6PQ5E#-0xvmQ40FP
zYo%E!d~{=EaV~o&awGI{RmvJG>=#>pn!a&4I~J<~X_{K6T=_k0M4VB(Z~E?=f4Xm;
zjSpJZsPlcXgc<q12;CbG3YKeW-8;Wx^ybMqzybpW$+5p4qSrYgRsmW5POc@9XzSLA
z6mkn!7l@0C<y}5lBa!(6$;NKm?OW#MO2#JB@o2A2vZ98pW{V(j7Q}bfv%YZE6}c8~
zlgHbknR1#3Sk0}Y+patb!do|)iP@40v6v<t?p4Y~t#zQ*L!7;aVVO&^P1p4oZw>#V
zj^7K(=0?i37=W=RmT3{VOy2_HnS-;6i(ncN=35Ujk71A4lsTP{cykLQA58L86TE92
z9eg^NC;Hb>Y!DhSJCL*a64I{t$NkjgD#*P_Mf1hT)0KXu%>D`_v4>*GCQn3-f$Y2b
zWdvTHHi}N-7^C|W6Ra2oYC^G0q+lX#U_ltp<Ei$kfU}DIHXE1SoCMNagt;;yuoPS*
zqg+EDIvhEN%g@KSo)3?|CuP13Hz!BKMm8ar`RG4D>RZiCZ|sv>{eks`iCz&B#0gD|
zmZKEBmUY8f-MO|5(7Dh?7v&QW29v0Np0UcMh_1UkkWr<%v=&B~=cDPkOMD)TJxsho
zH}7t&M%T37ScU#2ZH8i)hIHz<Sw&D}97yP*YdV5VZVw4k80$cUt}7;Wnm8`!S*xcW
zwad>}Oba7`6XM94fHGy8#xSuDzZ0%4OqHFQ&`zG2k1(}Uqh!P(!a<e<W+f`M(fw(u
z0gde%%;A>B0dm=`bd(7V{X)oiJCAne*&Pb@uo6!vJj#*9Htor<wp1bG!Mqa8f<0!D
zC)Jpf+ht5;8T*dw@$oV#!X)8LXDF^bRmP0;h9HJljN78Uf73Ybph`OZJ+ZXYHIcaH
zo05bolcU4R_D21fAP#KBV%jvre0#g?-kN~t{0T8Hh!VB&E%+45z*@X47Ibt=79U*$
z-+=JAE>kk=SLR;lOx90vZ3b<!@#^f(`YEpMe%H_B4g#kys1pourT_8IiF)LPItutu
z&Ac59bsioeS3|fKl)}-0Yfszb@IW;`Q+UW_;IM$$_%CxOd}T9PCF1ea7=bbw5_&TQ
zi9x432H#jGh$0}!v#3!t%Bhx)v&Xp`pDKJbGa9BuFr@8vB6<a94v2j&w{NUuTZK|I
z(P5ikmV1bvJL%xfhY<tHYBCx2LZfN2y()_h%geC5#7QAsGKRYyI@hDJ6yliM=cRwC
zj(U?BdR||!4uwrL^}P`FS(nIA1b5ccqRPu^CNnpFHNFWDAaga(N_iD3<EoFcTj}R;
zfjCr!;FFlh@YP2G&}g5kHvyBrR`08Nh7JOSfdh~MpD@4C%q9mVx|D;`?>-RiuS)O5
zlHZLdSMmkaa=Xc4`Lh;jSD_5n6@G34AxQMZNwF-pGgciX95jqmnOi%MuDp+?@NAxx
zOV)SNA5OJ2TV_@lLOSXiUa#zmV}B-zX*MuqilmT(v)SQ8iPa>ijhmy3_5!C-?`tXM
zQC2Z^GL2dy)-77zM)g#(dGX9Mj@@!(2P+bm18K^RuK3GcCph${;#6mnN^nqz>2bmD
zt;I_DksN8I$Nc&EAei72pmZGqT8v=0r~Hch3avY0FyR59OBOX{E51JL{UjwvuKL6R
zA@)Km4Nl~JleKRYytPcYZIck~L$j(<ceX&8jm*q?kQJ4;GSTDeOlQNaJo}k)HBiZk
z%`18Du)GpCmuFUf9UmaLOeE#BCNiywOsjT7#cU>H3+pl4!X)l&q82-o3D2a+cHp#;
zu=63J%F=4$JLzoY#=%Yo;LV_Hwo1_(Yj#r!L#c$-95;rKV^@=8JkY=Haa7R_i9no|
ztwCXxHXD@71~-W8EqmZ0Y_KSk9F6IAPW^j<=x<a=GsKD?{<!8x+<*P(t*FxQSPzq?
zl`!u&%hKdV>NxQ8@9uWa3$96C=!(jBy1K*1y>X7wx*26+kTefZpb<7(n$${f>S&jJ
zQIXO^7iO3!#e{?8^VGr}K}Z~>9C_H+t`D+tQwvt-=LA@T)C!HXe44X5l!8cy@~g!U
zluj5r1??DRLyWX5VOauI>WVmo<GXks^*>c*X?LWr31#@NlW3dozR`t!J0;ah0#hq`
z?bgATEB5Qx#Q3}x=UG#pX@`iQX>}j|sYk3^yxoP*=)x*}KI`@LnN9mAet#;fA*!p;
zDG+qW?5wLZt19P^a111zqsoy5L;i{Ef=%NwWwbZ?$&`onY=zX7qgN7hi>>>T51XWm
zjt&-VI;2t=L)qjd{B9X}68--jd~N74eIx;Ra%d2?`cfq}a{w?a7kgnJr1quyz*uw}
zk+<_qv`n3Lk?P}%f0*}??U6}R_|HWBD^X99NM}|<qG^c-H>gl&c>X~fg(ZJ_+7O_O
zH}xOnG%Y_mm00+wUsWkdDcv2E7IPCZl%t<#tVF41@~cMPq8a-UdCrLsHFggiVqqeQ
zTx>8OBpE`cze>;-aPK^!)`rTjB(TF_U_7RV|4PDtCa&RBI?PHNtITLjVKkT7jL5K<
z^FgvA>jSqXS}JX+E6z-88l}IMO1HLB*A_3cwr9HHxSEiYM&E%FHq~Z3mG$A?{MU(f
zt_bZSh=q_e$|i}^iMXrc_(10&kBF>7gcnREmf>abz|3T-PRu2TUt!^0t1k&es*%o+
zwcV~tC_%hydQ@#?+H&^~O`Gg0Nyl6bG^h7s8M=!%SsB>ADL1OlXKl7`%HA4mll8A8
zI_i*<gI<D84r|k&LaAJ7CspjkXoC<R&zGdI)$4F^b>F#|290#ilSG>US~wf<qbmPh
znju;)7-X@0t>lB;68owCW?0)clFdt34<(!Sn*CL4g(YyLV9>pZ3$~XO6`cCEg17)O
zA3<EAp8qi7`o3DthY^?KJvb_XmXE=49f9e$u>M`atR3F+FX>8o={(+UVGWF50GcPM
zR6Z2TtQp}=1>sEv;Y|&~n?!x_`D|5C8EYC6XSZSH6HfbF+S;(ye`y+)mq;adkxCZj
z6{M1dF&nfZm#0B(d5PLkyhLqMSO#r2Yn+G$^^pOJ-D<OV>u$9;VWV8=)qXXmd8Lj9
zRw=VhK0$CqQ}ucOpd(E?XEvj5#{|P1<;{jLoE*g%TsUgvq+*BR-q{+t4~)O7Jc;fd
zQYz<h_T6&+9!^H_!z+eVfJ;7~YgZ+G_q|qT(<iHYdbPy!)m&fQZS&VL(pIzM^_SvS
zp^RI_S6Ly!GsmiOA{&^Hz)O|zBh1K|=&xyXF}m7aZLXGAlkvs0MoeVca{zUdNmm&G
zGHQyA603sFkL!Bem73h{192<Bk!agK(+vWMl3Uega(2@NI!?tb5O$NL8r1}+<H7Z1
zF(^a=twZJ(W8_MY+?YPBLbmk|AxG^v50LmND5JNeij7e52U?{v;8`LW`Lfd3oa&LU
zk;Ku@I+5HBpsb=9TtMRQG$fe7?F*rVN(={$^M217vF&pWZNdQY|Ln>+{rkUq@lLFr
z+%~P?Wz-8GgEckTH%hN4M^=+Hg<<r6wyeUU*O%3?c+!hCIAvX%xbb5M?I$9VEH_f%
zM#ZT<(<De$$KaZ1o5gi{Sy|k)wzwdmlHd?l6`5}T48V$tLf6k+K?MMGW+E7NV|8*I
zA<{gN<#}Z=Nf74ca1+tj`tVBlu_D}&7^T(zBG={C3W0z9)xP-kSFaAYwfm@gOQ)8Q
zfSwn+g5_$R0mC}Sxzgil4tW>>$YKVv<Cs=PyXQofg9693nW3-E;}7o#3-1ZTxk)%b
zusP=S;gQhcakZ%*8bl?Z!bLVpIlD#GBTU&S^EKd8r=uF>gQJjnY%Guss{m<079thI
zcD8&MaogUpvWK2`@S-$A(7u$Si_Dv1Dw=R-^ck&@2kjwfGiuQ>de$j4>yMj5@s8Pw
zR#R(<L#-txc;?Duu7tgpxGrH*EJiKknYo?G8+wv|up86kZa}}lKwWksfUZ9!;!vb1
zjh-6@*pd{M!l6m>OY@c*PZtN2td}9{+fGn%Rkqr6#<g;8u@$mL$vWm`%$cTzo;$9&
z5@{4}Lt;9>D%2_s2oDv0aIOuEVjb|QcbP*0HADwOPIx&X!0LxaWRHXPG9S)DdW=9E
z?)jGCaBKOkQUuj*7h*HzSENtFQut(L2ep{w=Di0`wMt+?^QOWkyCvYVDG}j46A2YD
zkMvGblhTJ>=b23GQ8qntk*Ww6${CelUnaS8;zoPYD1Ul>9>CagI#zyG()4BY+Drr7
zgb^02zL0|432{_gwCKE#5J`s$?XHD!rIfHnQ&%?aIBJkZSd)d)$7g6mWjp<4lP{S<
z#<4ahLn)VJMyA>#$F(_$dX7TT>uoSZy71756N7TV9un`Iao(LXos8$qWZ^kOVz;wR
zzAb*s&%}=XOtQV5aTd9=ESbv%XG20x8@ak$%P)@NGn+u^%;ZcuEAuOzl{uA=&T~1X
zh9up>_AXfzJEZmGdg*r!lM7r>_4#JAA|R6Ns&s(dRg+{M>ols;k5W8yBt_^AP4bk)
zgh5PAPBNWEBMFYe@6Is54`li%M~p=;2Mzrq0xp8@JtaXZletJ1It7{7-SX&@+6Tx<
zWAfIODF;8EGsdcQsErd}*>Cy{48_oC-g}C;_4WZ(jZpSaJq$t94{2)jKPm$$F}xs3
zg8fMU`sTZDn;;#}rG$?|mUSq6`}6BpQ3KJz0pR13&nea8fwOlw<Yvn53NOBU{XOd2
z(BYj*)h{=z#T)*dGgZ*CUpy@4)V9Raq*=5ICzD+ZRwpMCQ*f0VhGA>;%sOU%<a^&N
zX`fPMG@uaV9)yiNS$V1^shZL}{h|Bx$%UHHl|LG`$HA}B=$H2R>4hp%2;RC+he0?x
zyV{MP`lDaK*~7!)V!BY*sR-ucgm&USUa#@*e7jq1;%UC`cFq~3w=fBu5Zc|-rrX~a
z88Z8X)Z&f){4Za<-GBYn7cb!DF~_s3i>r$ZwcyvIt9z<w+zA7uSGnLkE!2yP;UC6N
z|KEM!%XLUyq8Fimm34wW{db|3DcivF-*p;!PcJ-UijNEk5*9U$=Btz~X;>Phm*5uG
z{OPgcB?dl7xg^3kQ4xK2$kS+%iZL@is*pRvYFLxbP3nMORReY+0Tyg7xW~r1fW_$5
zMyh;Gox4s0!+9E+y4PVtTOys2;VQEMXE-~A5+QobCerX=FveIZLQmA*@gbeM#=6_I
zZdk)!x8Ph>sT<B~ChrUDMGI$iHZ$PkBxYarQAPi*Ke>)(+92nYxyto^KiTi|(e-#Z
z8Mgc)x;8GyA)*JyyBM_n)(-8Os093h32C4TOLMq|VI;iYw{kX&L$oWbiW3zvt&=3n
zZhRd-yvcVv>f5$Ena4YAFv?l)tzmEyl%zOuQ?%-S4u{J)g!nO|`3nMA)8S<qug8h!
zMUw^-b~lI1U3xO(g$Vk#900-&PE$rSBwD8eLoK>8HI8N~)4?Sd#X?7`X0-G}zFpIx
z@~`taqf^P#@j}nvO70rKV-{GWoEZqx8QbOHuZU(5sI{=Gkq3i>w%!dAxS=ofRT@mV
zTVhIYD@#RRQ|QDzG&VXs>1ZVO1FUEVFUF9?<hsTwhce7*-PnQ3Ec9gPPg*i?WQjK&
zLEeGUq;yxe)B7%MjKIL5dXZ$@om#!Scph#>{c%v{uyZ;bT#u%8!D?kdQ^F$Ajad}E
zUK30vC$;4jcv<B0Y)d@`<`^|RA0we6(s*#vRCMtrTh_7U-+jP25X}$*wi{PY^PF>o
zVP%4avFSAE8KzNqiwQ5zG`b!YyciQ0D%0-aOVyeNPWBzZ1at-^<%Pr;I`&6d1@d5&
zweTH5&Xg@1hf~hn6XFkSrh1$s2xW*0HY<u+0|&gOTrv>%x_IR6W}DUh)*A;&G(`*z
z9vIFFxz{Je+{TmK?m*L2j$y?=;dD3;y>C}%vV=GV&n9&A11M=IyA@`E_=Rdc+dK9F
z@f4;$Ob$+noR}c*9r1Mvi9cSivSLyYi$=hf?_yZ1D;L>>k9V7SNC!M?IXyaJJymR9
z(P1|auTyOTmtroIg!@Hkn)POd#yLp_P|EiGGR1|)7?NTdHcN$^nHLY|_xJbbw2F&!
zYA#=<#NlNFP~RIwJoxeL%k%&7lw`<2oSUa!xTY>4zl0Dz#JMA5C&y!#C%E*~1MVv=
zE#~UX(n{)j%aPrj0(hcJAdQ<2$b2w;r`Ay?zP^y=xTOoJiNC&p_}kqs@`-025(VYy
zzMDq~J!m>(o`Iy4cJ;=^xVd9qC}f`yeP=vUOt0Lc7D$LJy{eyMykSX|(otF-BeKe7
zg&q)+=wRXC?u7a?8PZ9`hgJ1_0_zy=;DhQuh3N&?_`NmPCK6_u2K?~tCSKC8H#<CB
z>4&vuj}5W~*|=t;Fc8w7z_nChgi39P?$+9MV@`-j4|%`8QH%1Hs-8Q^6z1J)PJx9m
z4|AJxTdgWyGipt@&*S+V!Fym_yiAGJB#v_f$Gux1J=&ai+vij*hs@sq#Up)~+7U5!
z7kMc%VM8FI-bIg4)4hMg+qtKXPR9o4dBQ!<Aa#_ZjD34)E{t%xNUf6`qIVnx|0k;8
z+4uk<c3gXNsIc>ih>em1`t-$oUhUSlAr1$3YM6&&EVji+Xfn6Eqk*`o%c{x03_l2g
zNd!r8BzXs71vltOXW%9>o%YJ6$nw{kuxQk{v!u$99#L$*Ef=SGZrMBR+2t;<&TVmU
z3nqSa%Qk`ZN2rRkcgCM09=+3RUd#Teh}GFN>V5b7J1ZVSd<HHE;S)Tk%s3C|&&s+d
zy$ec1`!%!+ikg)JAbKZ0An$~aqgyz9;2hh`BOmH4z9cF)4ZyfsDd?1?p!Rm2Dn|1i
z@8W_3SxG9u?jqmKRvG9w5iQ=>CsKq;TKdIk6U#@EMD8>T;(22&5vPs0S<#WQS`eb=
zaQcQ%;{MlIB~>XNwfq(wc!dt&VSr?OrthAC$eD@fy*JzK)*;9dlpcEj)AK^_v(G*y
z>JzS-RJvA-Ypayw)-k|#`=;xhgr(-oG8d+to{@;Lb8IFElMKlp00efKY72a+Zirlb
z7bw~3CdSU7pc#?_7@4km?A$8{eW$|&ekJFs$A}PCqUBo3Pc?)ny@TpUr&(#;=mTGh
z!aR*9zfy`fmmZdW---MzHRSowYtvK>y`ZB<scl{4j#m!3rA(q*0n}Ofd8yi*5rjVJ
z{~CFn6bhy=>ohjw*%GL{m>7zOGnBX_5V4}|_PcH!Kl$D_lXFw%{7pd^+EYhgvhb4V
zrw>)~Ep0>uxJYMSS(<v~m+(@~Bkmk}sU>NG6Zcur+){;WQk7Z))%3v^OjmjCR%Q0(
zM&~5kj;e3Q!;^11nsBc^9(sz1)OFhN24}ZXuiNW;P;G~0HS8kBjO;ZKD@}x)CP71g
zua$ibZ%yWgx{~(c4H38!Gt}OSx^1rBshdFOT9&P2_l`!f!GI26zVvKI9yJyX`<fQ-
zE9>*sKLqcned5G)C(>vO+C^_rLg?M{1V{9Zc6(9VfSkT!L_He=G?`4stnb7q8QBtv
zV`+|RVS4T9!Vo#yF9VTE?Wk3#X^80Gs0YJx+zWZYCt1K;%Gv$k!9VXSgmB^Wi|@d4
zShCD>f>%9AOjj#IQ5&^Ycj{g}M9Bd5VIZD%(KGlqSB$Kufz5!9kp9pvtI8zBm%ZU<
zA#6P2%jj8;#{X%rcS&c|r@hZ0)n&u7yXcOPKCLI>_1{JBaC1ku*MYho`n4T?PX}Iu
zVBr;QUc0A}X`u-jMECTf`FreL`<dRzRGhG~bd-h$K_tgpU|czTK-dNoaW>TBk*B+b
z=}725M0ZRu<U||Z34Ywt1p^;VOKS_s**1DmIJsL7&?r$Inq8!+V(*?F&LBg0(5#tD
z4sZ_X{sWGBnyppEt9GtN1Saa;I0#p+U+o+q`k=PsvQiL9{w-))y_^-`z8(sAYZf%*
zyRW2=fOcwm6Qa5`2h(sG8FQXSzqU`F>n&&Z%K5oD+@L6KJla-kH?hn+CRV`=ozfaC
zjoF~0Q-xWmfWLXe{NE{UntY?@ASu)LRJ3={P%Ce}+U|}cNY-^gRi~e-?3ES$aKeN$
zmfcB#=DvJp;bP&_6J^kEn2Q7;RR)!1HD{%g6j0^dsoKQ5OITT4RbsO7M|E6HdL7*v
zlRc<Wjd(mj5k%NQnu#}}hQ1X>5FXQ#81S?~&1Lj{6R(jC=yV{mnz_-3t;%$DRf{qh
zJV^QvK2%vxeIh$mfJ|7uz{wP3idC&XD;WlL5#*(*Wv&w!7IwB5CNP$aS6UAtSs3A#
zee|@9tZY-T>2zm0oE}E{&2pK4#24eFwN`D?xT>RRJ4*IoEwEtVVFWUM>2Ebm%OwcH
z#L1MMLzgB@kVeb4?JmA$yUSLWZQHhO+qP}nwry*^+0JfOc~1U-JQ)#B+)Gf}xn)+M
zaDK2C2t9cLo2@kM9w495p{asfITKZ7EJUI>x+E}FPj<|mfQMZvlG!Mk8ImmFfw<wg
zj#W{`zOm|VDcHkuib5SY<3sRFH0dnVzgQ^L%_i%^FpFDZ$=VWmZt6efjideb+PE{U
z#QV3Ls{@C>UH*1m$<nR4XtdXyH>Yg9S>UHf?Ju-Aq;ikpH6h?>8S^|;`rY>7b<qo3
z3+>PRgR%CE588tg=}-hW_Wr?tfV(AOBYYGF;wM^*OE=QmLqh1{2Yrx@mcwY?<j92$
z2^5(i|DQZ#RB6RcY{RLHMf?9`8xA!H5;#So)0CpoY=DHEDhycS3K1ME@*YNeNxcJM
zijlFj-zd`fzMr>2b`D@DOyYb3_;9T95OxW>GNT&lrsrOoZ%|l`dHwdRYE(rElR%I7
z=JPwKU7;pR-t%du;TrI$tJE75w(R2S^lUeZ9>i(03XT{=j8?d2yKd?fzWS)*zQdd|
zzZg}12B=$%`>wZYM(^m8oj>BGRFsDSs>aXrR9AChgU!Ebdcj&Ww^Bk(YfmX5k{dcH
zNC5~gb8ch|SITwU2{O`}5bJ1~yRcHQ)h?f~-SE^Y{$qG=ni?j!tZot%O}5>vwSIZj
zhK|{J+B9PpaC1sU(SL%9`sJhW7a<Hs#iIO?_=P|~1=LQMz2#_NDnZF-2SN(W9Tg-d
zDBPMs1`!*hFXdrUCZUi2w*=C?b+Mf8v^b#=O;8*OnboKM45)_bDd^>WNxJ6ue4*0z
za*?NBJZobmL@3l{*#B(2g4$4J*vWt4tq*umQXJ4mh|htbUr^vV(bI{8v1(DMd`{qy
zz0E;LI?c?AdyXM;g7ut8rQ-N!!C#P*mqyTa4E3GJlDO2pTX>;z1#=J*yD4d5p?WD{
z1Qm<4Pr*H_IIh;BarlKKU@%osqPAwVHScpU99TK!;@P|L*FIWO`0^h$I1M6nsOSu6
z2Y!;rnTzK_b!1#-&igTi*&;T{)<Ade>~qEGIwwWi5gCxoENLwaITu5WiiBKDFribC
zU0L|ZlHbe%D757`PW6Y=6fl|!9Elh4f*#xOf*_)aIE5${ibY96u1OXTLR4-BN0$+j
z$&c#!7>^*}vBY3>r6sYZ@(t%g_&zxlvYM(i17{g-3^Gz2*hD%kQ8|X@-uX2j<>3A>
zK1xyZDol&4Mtn<Hffku7s?DfmF*vNq$b|!C`%#PHFOm(wLu}D#Ic1>8?AxeZOUV@d
z`!M{}y~E7w$4;lGyo}1(vd&R3+Y=4;XkSF8dhA0$TV!p_kF#70Ib~1YK&W!&krws8
z*N!c>dCYlTSDCEqKuZ(-68F`y&eh+#P?#&)y6!kYQO?}h)ad}dY7oHY27T*Tew`5G
z&8JH!CDUw{vyU_>k~7)8VY3j2JTDMOhnr(@FQu`b5I%hsb%tWqv~F|S(^xIc@T7jr
zEc)$0<BvhST_ue4*P%8K_#uxN<Oq9kxVMPtrzZql2Tcq9TYqVXANoaAh*96k4}~Pg
z`K(w&lWO9$SwV*Y()d@3nwUauZ(tu<75`QhxvEnMtjS*fogD;fL+|@(qY})ztdvlq
zLu+iP@?B#Q6Plb4%i{^tpW9OW&%EGMiY{_OWN(Ud(nr}cFlBawz>35ibog$<PQcl}
zkbcftngSaRb7z`Fb<*xi`u#2~_q{;-Y956~eUM1DuX?nJ)v7Ndk1Y)L#^fa>I+K+s
zK4DBui=4*wloA0C&v5vD4vVpqvCCPE{JO}F*jCfY<r_G?p@1bSnSKG~QZf{GoYAqV
ze2QrrRyirlZO{cQ0+E~~#I(=-ePs&vY8eb5^pc=D)(pugaPHTzHO~7|0ByQxA`@K`
z`c^w-7VRI7WfN_ax6de7-0s~bd~!QNT$-t29A*!S3F(;@e|d*O`*b<mq$N1<cx8I5
zP`rw!jF+qyLPs_fx$z?g-36<pv#}#QLSm6rQh_<E4|bHKGT0@yI#n6RIke5o%%!P*
zc8UQMcr9B;A4o&N(Zu>KlT_r-LY!{<D)_xPt*}Dq2kqEI_~ms?-dPP%9CG;kFEZn}
z*Kb$b9T11=`tE&Y8j#T~WVQ(Nc(y7Si~qpg`HF%p%9HDtjl?mTRc@h;qLIaTP@uj;
zHG+2&L2%<2kKO^n)RQde5dZN3zIW=U3?*q47!NKj0z)!5L`TIZGDNBr2LL_rd&e*r
zR$2smT;V?zr;<P?wG69cR$LbrH3k%?5*p^UYd^w=+S@`ED51VF7w)53O)H_r7?Sm-
zldfLx`B)G!{jn0QWr=Pc4Db4@ykKmEZbbhgl|qNv#w$BYoQ|v?+~I6sRf6WVUI$X`
zd^#*vSjq~#{CI|+j<_Bsqw>vw;v*v<2NK%$wY;+jc+=vNNZNRAg(8ECW=k-qP>i!`
zFp*W{c@rc$+^fmQT-9X!)%ND+TlB`I4Fuy#8XSjUt0(JM^E}k6k8iv}db7>d!K@vz
zwaz@Lg9-8e5b!vcTt$nO;_RlCV1&^}Lu-g<K#3JKRMeW@5mQVh<QS=Yxd{^0rdC+)
z4-aJs-4qF&^OXjlLcPzbm!O-b-}KM$9Ofm}xaGJnELht+B&BXjc+c2Nc;OZ%x~0*_
zPeqp;y?5m`@FP(dpni(o!&v(u3Z<}o;G!f^-RR7~g1p9>|HxslayHB#2DX9`ZoO-*
z2uXfx(FA7^LKbl<UWO!1v+xzlF!awWS)5W<PRBE*x5`&1%C>D<r-d!*F765HN);GY
z_pBP&C%4JHcTs~L=Me_@g0`5&S~Cj64PT{2kNx>`jVTj7ofcuh!w-MVz-cVNd)k2B
zcH_wXcl`YhBZ5h39JQb|P)V0QqM{w}uc__uJ9fxVtg(6bmzA{xA0xGcIM^s-?P^S~
z9U^E9hNxARMoIWM)FSV1CObsP1V#ss@#EB(BYdV!4l4zVW-%1cc5EQw2?c7}pM+6K
zl<eQ>X>KdVK_d=)S+R2tu;DSVY&k?LIy^$YHQC$2@QIK_1{YW5zFkpNw|<2{XCt!o
zMoVJCd=}%a-+dPUEX>*j7Hw88;1VKzvUB}(0?YxqvCoM{|B9ojW_^u?nwf}mxI(tX
z{G-oh;Kx`{+6gf>TLOyASFZYa>Y(rd)sKi679N)#Q;e8YM#q$RPV4bwtz1F*0oguK
zDM1G_Em`kMR94Bl{d|c=l#H)#m+e^MA%zFLL|l3AtRfZBoIDAftu*t5p#`#mwPnVh
zXp3B@{3=6;h&;GmQuZiEQ<yOoX7CDE<3oRS8CgT3O$^Y?ffuz0D)F-bs=za&G<ElM
zaM?pd7}fPNu#9=9EHtu`9~r(}sCPMryFYJKvtH-_)i5DG62ci@E{7r}HQ~di%kY9P
zY)92v7mcszlp~kDg+(6GmlVf>w5qeJlh6t;F=F*XK`yyK(Tw#kWFFa)M|#?+-i5Zh
z^Owg0*be*&hbujz@KQ-o5Wmm=*P$tde@i=52L$Bb4hqEa|8Qtp*&69Pn$a2BTHEP6
z{io5q{x&z<6iuP@^LefH+lH0MEFj~SrBM0L_hN6dm3Tco^W;ftDIFF>HiXtkF1~p&
z^xE3nsJvV*2n^QDA*=f;4L~aM=KO5%{(Ol(a(VDIc_*W(fXnTrZS9e*Ts*otOPse^
z@a?KdIaYsIrp}dt9LFr3JpSr`d8x`0OrI~}+5ADFnLmXbPur!?G-le!Ia&UPo>e+I
zPrr;M#ZPy78u@kPl)kmS-rWiQyCs#AYcjriOmF-k(@tG-&O{Hpxrw$zxcOgz*`B1k
zM43${Z*O*(MN=u!AzlD;{O0WEtfsoFVb`a;?4nhUkpKN>J&}Ge{>p2H^xd;%Y-T1=
zZ27#hO1zR7&a#1PGUE79y*-26oKYqRqqfl^J-5$I$8=n7y-N#_pLkR|o@m|!z(jBP
zK6B2PT_{vfnL|pr&Eb<X$~L^D%(YY7WPkY>tuzQ|yhcpWwcQd=xZZ3{%(d?@PcD*3
zCNLc*;SR~iNCa@wVUA;Ya?V6ramhZAq|-MXjW>QusC3O>8v7sC)*X|%XVal*y3AU7
zs*^u9Wc@ieh|f`FS$;T6wE|IAedDFq%Mjtp%<e2HyNXq_<mcqT8_@hBRBf!a+|Du*
zX%SCtV|(XUReyN0WbN?!z;eOu2<YJUQDy}(`$J#y4yNg^;oe@6aBQxVb(YfhxBbn3
z1oZm*qlV8|ZS2eXfjW?CaQ4YLT}Vv1d7|P-riVvngkE<B^SHt5-9g$Cg#TpSAbrr4
z!^_adQ&=SB^wH|-Bb3eeXyrALTjYiO9Y@TQ;{5q#Kt_82yzIf(csz5lN_^s-iGT7}
z1d@Oagbj6uB&(R}`Wc{|Wn_|SW%~4j+~XB;eMRBhNqBt>@SfyN9)0q(YK<#pcgZX*
z0cpOAX89hMwZ<-8M@hxfR2#VVb3eLs%^7%aiY{~gl*pZ#cxmyFvh^5`JdSMT*6rr-
zxqq3TiCngK@!FEQ*<u(rwX@5Q99GvU@>;K3h&&iR7{0if*`7VyoppxiFiLdD_~WJ`
zJ2C9;aOqp22_0KFadIx$+PLxk#C+!b+L#Texv`$_>w3Q1`E<+s@rwHK%J=<A_5I2I
zk@~Uwp7kSR4j6sA^?rLLXj%!hfoLA)mP$=rB;(GcpG~xA_fv#h4B{+lgt28Fn8kDT
zg%&Y!3#o8uo}=j;%h5YFReIe7WE-G<j=w~ba&(PHa(}v=w8%|;KSlVa%9S=oNxc@o
z0Zk0<hTzO%0&NySmc@6U#oF+DF}}fjYW85k<()(ZaIr8Cs|=j;xxbWW&aq_nhl?>x
zh=2>uG&=B2ikcqxKCA=&0R8y-0_*8WPY&PTyQp|~uxb~LPR^e{SiO`|XIiB@Zyq=|
z^_HtQYb`r2vdVtV()(N!e%(f5-Xhq(67sp-8<6osv_jJFw3~x5s~J(OZ@N41NC98q
z(E}+A1W#br>0)2aELk02I)(HJKmWil_r>gP{XDu1Y6qN>@D6g*kM-Gt==dP!)+hgZ
zD{Qj`BcOD^O#XMjW5piziP1mr9=_O%z6rWLuc(Ug`Efx1`5lP49BCTrN`Ub5V0^eS
zb%a#G9b31ryZ+z8if0hkRh1XKvy!QUQ?CB|g#zO@A$1R;_{-7wrhD&eFQi?)b0&~9
zqV4V0IsX>nxBFb>F5quPCAiM_yMsuk0v!@A>6K;f%j>Z#3nI^f@6WElB6<0AdeSh{
zH0%|b%!prPMZMrc#rf%7cr7l5hy7BMOeIOB-rk*s1I%9wL7}BRA~5ud*jyRyp8B<I
zV9@bmh(vlFJW&^h>WZ%-KWu{1%5^5}!>NYW$@)F#XkhEqe<xyZL5bXYc9L&p?9v{(
zzz<^!AcV-!2fGxJBJF*lwnotR*cjhvzdpTO+!JRshpPmj1q6g(UbCo!rKxXn9a<%c
zixjo~3;nsMXV&*T{F4*t-!qlAdX{a6T_1ekJ1kIpy#vfKgcVli6@8;z>j7za3Mad{
zG8pe(>3Dcv@QptIs%8)n6APEaHKQ+BvQumu%<J&##Oq8e#}g=gGF14xsC<r=c~0}c
z&CbFIWA1|i&+m&co&MGk)O~Q?>OPvX3+g8-2I?KA0bFz9PUNQNm4G2~{@*9-WFzzB
z!SBBp7BEujgftqnNwM*!f)L;1Q9!Xi!J(yG;1_NU3r7@4)XRt1cuZ#bu0*C6^9Mm=
zR~L1rb_mGi@d0-$=v)DT$~2^<)5#eJb%X!hkhJ6BVhyX|@c*eo*?Lw-arV}z36!>~
z#344*jMQ2VyHRN~iZVAFc%f@ChCnnMbP<MjZ(!Hq0>CNMnE6E`()ZRMSb{r$9az$n
z!R4EmEn=c#dLG_@5y_s@l?8Pvnh_yg))Dfj82u^$8dC&t0E~Bw7*MYm<yJ9bjco$|
zkPVC3g6Cxu)~37{s*QjRqAvtLqDqA`bNzHYtxt0ouvBZ1$yfmJO@vj-Hkjf8<U4|A
z-<$xF-7PSETOVBB;cxtjlv}4^UKo;N2~n3frZFBIWdI#bfNx&}(&hWZF|wV8UFJWd
z_@yx`Ms7+VztQ*ci2gMGhW{#vUr=BsH`OW=X7^{4czWmY5yruiQj>ABsvv58@sJP2
zL)Kh75}P46^8Cyk;0`C4?|HoBN#p-eANZ${7SKpCy+TigzNCZat;{r&?R5LZ$h~D+
zqQA!rwFo?)z9q_!DA4eMQA#OCqao5FHi~M4>Ka*9|Mpms38B>-E{7*S@c7CVUCG>b
zb_IpV`Ym~$A5w7dcJFE7DjtWSbu@@YFX7T*7QoO50=v?tRM274x#AVS_MusePd*O7
z>Da#}NjsK1pMid{abnPVF-+KX_KG}UKNDvH{#d4w52}9U>H6B}`0hmJJSr)qGZ=2Q
zC91oF0g(lvM>Yr(i|bx*0o%}8z2dg@A7>68)%qrn3OsDuQp%TG`Rc;<caEtY2o6*;
z{^c2hxggN@r})C)ihTN`T*mA^GMf3oL+z(N3Ul$9A&`~4xD0?Dxx?>{LiDGZgL;dH
z=!@0){i43g>C@-bozANqJziH=|N6#;bB5l6AfU#cE$d<X>aUK$p>R6!Nv|0H`RQrR
z`*$HxYP@gAV6yV$nT9?gw*ThaOu4JH4r0gqfI*2PumZOS-uIVB!H|ct-{J?7u>8!z
zfxju^D{Kv)NK#ih$oAq?T(&Gd2Q7fKbmC3`ZUPR%;roc8lYZ@-TPLoX=993>KSeJu
z>w|JQ800CQxO<|(LJh2Mg<<FF8gbMx0T%>Q-;6wf(~op<*!>@{E)(ap@RUC#wCgF=
z3LeE2ArLBbs~?PA`7g8XQ7y1~x-QV<OoDDWlFz6T6MR%I5SSeyY46*$E8KoLCI5N>
zM_(QX=z;6FKmN|o4DoWY`bCF)pOTJIp9v_sLFF$QeM(Eg9)^Ma{@cB{9e#_;C@D=b
zBUYfwCsnOwE;+{$_23Y~R2CHSy9uSu^=7SGnG3|YN`ocTF<H9t@HmRQr%prYmn&H<
zA(U=nULNp`!tV^e%?oU~8P}1JtTSTS5HY?APA*L#7!MstthL-uPv`zm@~vj)1=QpU
zKlOo_Ob|Sf=AD&{-}7`;T@KW1;};<JuEX(hi-76n++mnQhj6{nkt&qZu8Vo3oc3B`
z9N89R1fLvRPor7Y8Zrqw#FdGQhsz@i&|iB($<w<gVa;R3^u@T0&yKjmZN|dpxNtT)
zw<}@bk4$?-0rGmrY)d(7mHQiWrpqbhCfv5sLmGQ0|1h;jn_zd-Hm09Pj!-s5j5mkR
zk?h4cm0y3ov(;*ZDyaS`TSmUx0Jk%z-N87oGPYz^Rx%#SGzTe}ZBN1W+|vpXgo^;l
zLGlCNjA$%j6wyM19S8TAZw_5?v3Ywto?3_Jq7Cuy*}vR^U)W~JDS~BD;)jc7>wKV)
zj|wxgDkBvfn(kR$+jr&Alr3A<`p}61CuTdg@}fzX+scGD9_Enrm`Lr3Naw7}9dg>P
z*oo<_!%V()-QAMI{$xt~X{lXg4}oAc7GJit*0<2efCv^15FaIj_+Rj%SW&7PyjH%N
z6D#V(=J4w1%UIEng>@UnlI5<Zh8j2xjtEE1WqzvPQ74MlmgZnxf-4ihI8n8VD=Bfh
zT6$s~aOjwlc%Vi_wvua3SB=<WTu9Q_iT;cl-wuL+HIJanyQy;Zudh{Xa+Hbj*97Wr
zk5jLIbnd0l*q6d#^_p7cZ?LyB--v!9Bgh_qUSkAI9khkoh)w=Top+FRB{2YVeqIe5
zBOo(qJ&SlXO(ii37~CAK!*DQ3Wnup>cMcOaVYJx2q!?}Tf_*7%pL*EK;Kgt_)Ea(k
zobJLrDf6ZemvjtEoFs*~Xf!$OQO4tv_6+Hl9ooB|cvCf{02?xO6%BZZA<`H`axmN?
zQ9;mnA=t&3*Ha&mYB#i>--J2k9-l8&G?7>p5S>3FMaZ1<HRJYn<L!=!#!taY1Dvb(
zq-J~xt3rEswpU{Bw0IE*xz4_v8`wxunIGs>L=;#G>M=hyUfOw*Gyq5_MXXO|>Xexj
zmJJ@om{UTP@@hI&h|xOT2)0NhQKBcUYG!W%EfLNJF-s=!?EWpkCV>Jzb%q5hG*tjM
z>+1-cp|<R`n!w677YMSMi)1lP_h0?6!U)f1pXY3g>#ffNyZJbact^973idRi5U*#n
zy~po2c4o_*;Nw&J=D>#u90OR8dSPM%53mc~DC4fr_c|MHh?N|3+WnP2-}bMUm{4&N
zw8b7<jA+W%tNy~F2t*z5DEhxagXj48aL|bCAmt&=3Tr;D#t;D0E<Xp4)gdDKQrff+
zGty|_jz=C8O&wYM+8emO9{AObRR&sL!r;7sWj+=lKOL3YsDx^y&6>5r90Y62G@&7*
z7Lxm7CHGkIvxmOgioz8Vx-Ot%4WRs7jCB_t8j*0o7c}MX9mj{i4Yb>3qpg4wq#DQV
z^r!6?3!Y?jyh4&C+h%Ma(P}(%nUGTOD^D!hBQ%BNV&CR`SKRk(7h#U_IqF*W$u0ip
zZ89u28Bq8-YzWmwFV3EhDE{RV{8G^|>WcVsamA8qO$?Kw0$G=yr^aEftFe`xWpMoC
z_y_cUjG93F+96}(LuX|Qlq5A~vJT~rG3ipV6qqqs(2A&*m-7`Eou{gH*Vjl&kh<%3
z<VwUR0hm~l43H$$*_yx#2Ve^Z0V*6{D>t6M8Ujz@1Tyg)Dj{JGag=oa=qIbr-Zayh
z`6S!rGfU5z$4TFbx*klHoBOLJvhSQ$&>r!Fmwla+S=7#ryo_#fbO*Dd12d1&V>)+m
zt}osQt~zIqCJ_mWL;)~S=GIA6fj;UUh9&4})F8U01#YaX%&-~rnV%4bz($7i&XCbj
z_6MVq>G|331XBiug2~|n-g|l%83sYU%5xbER#i0sWM!fciHsTuYp{%CednlBzP@r&
z5;?kknSE-+o7b7wlHBv>R@b9bn%GjTXEhO=j+=krd^DO6l=L@RxogOZyo6<qr`d0D
zv=4u}M26K^q|cfFy};JTC(6c?=l@ftBxGuO8G8~hfT)yH8dIXQXsY?oC!hTIZ+AD>
zZ%`^e=#MfsV<DV+SR{sfG^i<Vf+lcv^WF@JCaEr#iu+R>MKn1LuH1_Bs%DQ*KCL5u
zj#AxBfn+f0YE5V#aW@gnkF%-Eu*Cs`p6)7L#9#Ir<izlBEm;MOHl8O%Mc59;pE780
z^C2XL4w+{~y?jqa97~7yX}{_3nyB&YFSaYH0X%jU@QTgXe}hh2(&|Yi+g>3xU|p#>
zYJ&$!jCVp~kWA6d8G|7}a=jWT&$3{MOdmotH{v6GA5!++kGrXpSHR3#Fk4uv{ub%Q
ziV5^kx8Z{%l9QCfP$@GH7E~P!uqx|eTN^gA<E8@~e*jT@gLPPz^d)sHz1T34(8J;-
z$36#pc4_bx3>xeegK`!k7RLJHWn@3k6Twc=C8u!-d!4$ySS$>Mz=c1dYi*q5JS1pJ
z52$~m`*SD|MTb2Zt&;$Atr*^Evw=+xmTOBXxbrjeR0Bb&dU>X^-!V{E!CSjgxOElm
z`bTYt+~M&rRi<z?GTKvJJ#%3P1gtKeFj?Sz(2&l<A#5d1W%8fw@r0(7)#_h%SzSq(
zD~<c6eYKo8Cv1L(=lX=nr=bpCm);eM7FM|5ff|{Ta0#^$rNf3c-Spj*Fh>g0vnABC
zbLQtcw@pJ}!zk{og7{{|eJPScY_aU{C8J}1@v9%!9U{|MEiE*GliZWl8%)Hr@W)y0
zJcUay?(NqII^^Qf8Q;;Bp(tbLxJk7iO8V=nis#m0u-x&~n?BR*s48z_g-4Q8H+?-i
zJGli%Sx*j)rCzQV2f<{3CAM^*?Qcaxz6djzgeaM2DQeFi=a@$c;Px!`E!$Pi7#?`J
zYs>YyXh`b44l;kl;|f_g3U+V)YoJ$C6WMCT*RDJEd5z}Ykgl&*)IM!`vyI9nGt_Dk
zH({%S-<5v8bqma#F!$PlSJ|df_0ekqw=^n)zXj9i$y~_*`|QKy)k||Ie9l<Iq+$Yt
ztJ5qP#0Iyi;IbqXl#IL{A4GK>w1v2cdI|-!TR3~cy&0xu{a10VGI;y*rbMR}TH%n<
zw@qltam?<PMzWWlPdQ!9Kq~)Ial6F$OmM+dDBMX@P7AOLwyYYxBTUa#v{AJgqX~*f
z1pBzw;E{SL#;^}2!;Xp{nSo;x88W%X=N?&kS8lWGL63+)?_FWt)zwF%aF4AgX_;*A
z^hCWX%;=aJK#^kfKtfu<d!;3f=48gH;U>*`{YyA8QqLEsKS%=M;Af>l$dhXM+uSt<
z21L1v<CMM#*<t&Ey_Sqm+wcwm=Q8@#bNZYa{QZ8cz5NK>MbN=ZARI?J7We(Jq*vK#
zddAHT5B&AEcXJE1h_c}aqXuhh;cxu$m52Pt6yKNl_st(5R>;!zNb2QM`q$I1tb4vT
znbKWl;kwA>Ec8Q#$MsV$FP2-*g<C5+(W-olBM-wPYftH;ncgAd`_+hbzt<u9Q<k)U
z{*J#xlEjuZH5m)~nf1U3g$3`wnNyZ?mIBSSPDMbO;>45qTQp5Qb;aVBTY2PI<(Pda
z-JMgB!Krpojl&2Mez<nCL60Zv>!e`(Y#uUD;W-#M0RV&XLeEebR4HX~Wd57t5~SL}
zh+6!%^DAZh1yZ;(8vKhKP#u-~(O0nlyV)?ap%-AV!S@iU0<Tu+n6Kr#XQOgBJkV)Q
z#wnbrK8>HCL5XWnonHJat>3%>XBG6IEQQqd+i$n}mRV8^+g7~SDn}y}3U>WpAphOr
zry3^-<r!n0SQ=mLkW_{K!~3IK6~QMo_y_iT)N(Mfl}VlDU6ph&R-bvd*cKj(OKNwe
z=Op+$19N|sa5z~8e%Y-xSi~0uqmzf(n)Xcf$Oo9n3*5;Tr`R$c&jm_)(CF<g*?G$#
zHBY$rS=-(1^dgwYl^~z`vbaeTF+Ss&B<D3Ac<<SuCouL(y<2UMV(7@|zXNVatwjfL
z2W=sIg_7c@rG$ivZd`xNW6~s6f?9YcrH%pB8qHm>j{42DhIX6SI<}Ll$LjO!jW^s}
zcv4Ze6KWf^NzyBB0Q!s&^7=<@`ea@!PxX{g?Q(@%ZzpvR%?VGw>37dfG!x}Ejx1uI
zQamVr-mOPu<tPL;Vk=nJ#u^^PYZSv%2eg2P-wA^%Oyc8;3<{K7%$Xz2L$F5yR<hjd
zz&Oao+FRT342P7`!%;gJRP)C!Y>?p18v^zU23Lr;*auO@4I~mbTDw*w<LEwQ#$)I}
z4_R!mMn*P~J<_QL{9WaA2v|7oS?xFsSUOM;R9bf3nfC~gi(xjDfqP#DjY#I^EB-yL
zpef77UW7L=6Fa$H<t0>dM1ZKt%K%@f$Qeg>sL%9MJO%s3O@I0XX{Pwq`B$`g;x7J-
z--C$iArAiI>^5sxZ3I0!JV*}@($O8@D4Zf5G-q|kvQH@%c2rUXoS8g^tD3Vj-Jn>)
z*)%yz@s4sP!f|CcJx!mI@3^=I(u_-2m8N*oMcWV+;Uj~Yu1S+%z3;TnOqe@&yzu4C
zl9?`+M|BskQ3BbtE0mwA@!IG<K6%li7eKeIYp=|ue>1M8|DTT0z`kaq;ig>3%j7+Y
z=h3Zn9Z;-N`d(kR@OFt+22E$jBebrQzX3LOPnJCg9XFcGAe{K+qp=40jnn7nnSfX$
z(paW;WTa4Y!lQ_Slqtq>a2`cC{~^>w{)8KoZ-bzdRBMJKKD)o$=rrTIvygjLHT9c(
ze|Qi?=*BKd>W`Od+HTXB6r5iAUT_c^j2*|babA!V`!l2RP<QZs8fmx*RuRLkYgD2d
z)7CGy+~6{<GCJA_aG17AG!U)4(Pq+lI7%(;qo8a5Kw0C<7;ZS)jEx=HQekbSHi~A1
zL;G!J_g4O*DGgBv1jyO?J?Fg)cSjIlu64V9*6SQK5DzcC57f_o$`ka=G_-GFx^(!P
zwp8X*sP#MYEqndBr{{JmXFj_j=kv*Yc*r#UZ>0C1s?E*`VqDqR{U%$`Wvjn789qnP
zXQJRVd2aga(6W8a{W&OIV_QcA*yrexU)2FS=ud*FI^YLfI*w=TeUPFEqFbeU4nM~?
ztN-F0QyTrT5eseZah5GDT?DaZJYAhG=S%%3<u)Z@=DwJCL~I}Z#NlmDP8G*|4Ayfn
z&He>BcFRoZUs`0m%yo;oaj3<rM%ui;i&)5D4)5^!e7rFlDreKPAs0EUaDB#bGZwB(
z?xbuqUVInu$gr9|U=KxSP$2^$J=!->6&u%C9JX@6mUKv64s2B2!XLmHqvgc32bC=g
z+r0z@4}Afr`N>bF=w|Lq?Xc3#96=k{d7Y{Pikk(2ea=k{&AMQg#?wH%1XmXoQrWEX
z!Y1O|rALRhExlsH@4n8zhEMJqI?ijDb|z_KOHp#z)N)V~*M)cA?lk1p%!O-Uhb%R^
z<FY{Tma^3!TQYi-eU0b2{mb;;WDJmSB0Bm;=+hJMxiwMqyWL8|2?4F$H}&E;nU*50
zIhP{b_lwr`wfxgkO9Zo383h+#T2ogcv9s;7R|?%+Vmz-oan1>mfB}_v-k$!#FdkPB
zf@o5{*H#*yZ<TVhv?SZ0j#jVWASyKz`&S)$mjyKmc%Txil+>oKJC)v;hhFyuLgnR0
z-j>W`Bp)UN@(mG!I%jvG6Q}eZN~KqW+)=3pA2(2};B1-&-VTMie&bt(99z}NxES1$
zO6(52Oc(D8z^mXD6D-f+q((dFt99`r78~E1A;e8~>=J(CNw2#Qno7Tqv)yG5bNw!I
z#Yg_R(ZBHF7$z{)){<<6uC@l8xE(zeK<!zaeFO3lk5z>HoW={af@fuXptrB#sqt|b
zl@)Pm+P6+C48S}~j-dUgNQa|H%q{(Tu<Be80}Yuouj`(z(AUwK>W1QJx$tbcuzAia
z4&?Q!R^re9)!>M_IO&d}ue($6Qz0U`w#M0N$hH+BCZ84%fV`$)1qLZ`-B^w}0eGpZ
z@~4&vUXu3$ys{HbUE$PRt;%Am=_SbtkxUqQCMWC+-0Oq?(az!1!D@o~B-b?>{gbid
z#e`OVpl9T1r(N#Ns#(OhkTI6sT-z$ML`}!HAkZJh5w)L{aq-gwOVHA4vha-E_^dYF
zu{@*Vv?Z+Z4fIMD{C;y2b)$QlRQ>Fae=Q!l_8N_saTlNo<GHwBz>jh`!#e4|gyH!C
z?5I-QhvN}%l`ov<MtJDZUXs-GezwJt8<W6C7^(jN;FZPX<k=-u_r0RgVZa+eWkk=T
z!CI7j$hXG;w|h4l;AINERf9~eZ1quIwkTgd3hS<ajsQe;8oi3<A{-xir+e{r^d?%h
z2exs4IEAi*cQ4eW_uTW>=|M5(Ms6r$^qb~U`ME$wluV@949a^1``n=>87UvZ>g!Yb
zMU4e1z#gSM+|98X$8&2o#May@smZv1miKWF3!t|@eZZ^i^QJGSo3QDieIQ|{yvg;5
z@Z5$01NiwmN9jVDol=kRd1+$hCwzwT-5A_B%H7l~-Vh_a6#wMrW12W?-$9<fu*yJ&
zqg1xDbO>P$$<3a3AVW{sONn7^wb!n1Kf4aqAO{l3eORoXohM#qkw-k!VAA(%*dxJS
zaKc(eD6LH?-E`F^D^d{uw>Uc<TWVepnEm+y0OhPUArxG>HRa6>ii>S+wZ_}vm{#TC
zRC=X#(^pmzf4F<&8$7yKM0L}W)9s>F^yXhM$h)S1`@GC8s&m1Aia`Hl!p*4i<9Fi}
zSLbWiy3gm%OWSSR+Q90!O{<2NbvL_?>0)abu7DdtaWHvJM=rwgqIbPLUASmdTtgIo
zrf8d+vq5r)9u+^jd^@A;0wpxmi%ad)x&7B9p>W$=!!V1Sa+}t#SF6A;y}6kSK14%%
zN6rw-HN<L(vM<LI{HN8=$iayjsG9Qi3<;C9c;}{fr=t(i0L~}-h`srqAErG(F_01V
z9*1o7pAj*%M#fJhzC1n)SY(T$)WAljDr}$)N{G23l;D=KOA^qG-_ZbcR9<i1XF5Nu
zS6rK!O9CbREaH+tSHetGf`X8r3eJbylIj8Z@8Qvs%b(|p(CGVRSYcv4mGR^B`M(Ge
znG59L5&3Tjt$D96^HV?o_NAGP8L>)ynPQiB(&62FyTd!wK0(cjskro0%7S=R1!tzx
z!g`T%vL%%Y?6)w9&A4jsPG!LS4w`m^dH;UPVRtX-7t9aA-UJhw8X`=VoFV3j(q6hR
z=Q#m{K5d*AvU(c_GSUxq^l!f7lXgl4Yhx67oNk2{fp=+WrKaX?!yIv3d9;>y<E`U}
zqJ)f4R6PQ@%+x_`j`q0hLyR{mB;#WLiVf*~#7F1EUcaPgPlMM?+zT;=f$yK4*O3Gu
z1$A&jQ=?lzl88<kxwTe8u8Ms5?@?(j1gR1P8byA-f22tcZE6yvXqU(Wwz{TeAtZYa
z4Vqeb*hJJ}I`#-(>0NpDcb|!8)PD)4p-7xi#Xn!CkGDPBD6YTGqjY$G-G0>0Rk(e4
zZ3to}UNC*v9~^n$I;H&#c<$|(@pw=uR@qd}{lq-|``Kz;bkxMkEV0@qx_}K|8!Ve*
zHHY8e4>Tf^!+C#)y0jhM;C?O!+3St}%s6fOJu(ZXlt4sOS!Hz-WltN6Rnix>uCai@
z`CHrOv8$;#E)`IWc5enC*WezCbG=S1n!!Jo_gHP7?nq(LzTOILy&CGgXc3Z;-k5R|
z;Sz2u^k}p4i4F^vzPQ_Ysj@v|jVS7vIHX-;>tKS3Y?qa*&Xyw&<lSn}0u^Gl9r_nD
zf-mslJC{_1Xytm7WF^9_;HCe)1^w(`cS`vb&~GY|2Y=N;GkbPhY~q8udeKD__%`NT
zUAE>BIh5sl2!JAEL7w`0D!7y8m+>9BP~?1^hzsy3R^Mc<z(eVM<<Q2$g-K;UA@JsQ
zr;H>-?Ot;!5+9=fr1zlr00lhBy8hBFh%}xuydp~@f!==Nf=>5P?)`Em6|UloZOtXB
z1SG#jv8(y$5KzGxWi?!fS1otAXXtq{AZc~+KDG>gnS*PwNcj#MYTicbXJQt3B+o|M
z=7b$?r5tihFDKo*oUc-WZ+t!{K~}7KU;Dpp+TJAoYpiQDSqwwT1P_lk77=K3iC2PG
zd4INf*@oE%-dn8C-D+TJ(M&sop%?fRWMQvK0sb%ePA9D35V_LVBSL&$4eaVc8pN4p
z46@m;d$qsN1b&=(P!5ZyhhR7!0uMh9GNmH#<ZiX24Z0c7t=Uo@`l0~I=%(P-*N;%@
zVmp=05{;Ku5DJz23exG^JfR;1(g;#g*5Ouxq0#m{{sg+lj5rfAD$}~*68OH0n+gA~
z#+%#B8xuIBK15u7`VtDPV$i-<6k{&Ca4otGo!N&G9>Kj9qV*~I&DUBeqpqIbE2i1@
zz8=_({gt;@&XY7rBv?dGQo*{Gghdtm>;_nEp<98)ZdT<#AuX3`d|r*qna|mAyT=^V
zFyTdz4kAcm02fq!4^cj3>?4f*+9DmBrjdMD$q~9=d~bg)w`&I5!rx@fZlK?f9+p~!
z<^FncT-S2nMq3rkY$*3Mau9>WbTv0ch@EF<ncb%wJvViRnkkuH{sEbVCU<l^0_KL3
z$4aPV8#0MDV0^kDA$8}Y;d(?p7kr6!SM3_U(!dAETZI={4C>na=-25ZRtiSqQIzl}
zni<ifp#W^OtZPjTX&FZ&vbaIt71T}|T}t9O=@$k9tS`NvIT67NlmrOcvM)w9wd?(<
z-T>K;63tyJX`be3G5RX2gfRM$GkNR$P95SVra+XAK8hKYDR?lk&D8-_xG<~a<1R!j
z18rYh7(z#1C)=m-vmQ(X4fqvTuR$};BRL!eQ#oe-_a@eJj8Y`jjY->?k@tW0$kdf?
z`pX0%n1;W9EM%Rdf2w^v*+P+zTS?xp5AeLJFv^_g8&ES9P`ptjT#HMq1@KW&Nuw;H
z=U-&SeXZao4FozE%ZN|pk^iH@HV=J?JKc?pE4XCz%v2}aULtJcZsTu1zl09JP$2{&
z2wRsn%~K?Y;dmaD<3LshTpvoDj-k8Vtb4`*$XQ_!?))*`|EfqgvmPBolwoWBO}!Si
z+Wgqs0%B-j`T83RXn7+4sNdzaGSgfw;qoi2J=%DV<+zUQKKJC?DxQ^jnZ1_(mtdgr
z9S2A8ZtU#9bXWxxUi#ZUjqGhiVu+(SwCliJXpSS&=>8<2lYhCump)HOJ`0qh*CPkC
zaMzOG5Lg3AUJnKd(`X0#`6pBYPB|vJ4R5s&0xFhqoxGO7p6o#+VqQ5lGKpulggn(<
zPlUksfX3oLK{+`wOCD8b00OBnggh$;qyI0u0AXw3+R0j<Qt?ojVbrMF)SBDlf0o@7
zc$hKB$HZRU_xF71^10XzoyPFoQ-fJZlqm?Q{mjcpkh3yEXE|dKs)Y8za&`2dLQ5%s
zz|qG?puzq&B7o(Yj4;COHT-(5%4Q{@kc%s`e7b`qp-7)P<C=)e+nD_p6n(h=3<xfw
z$5m3ELpD)yjq}u|#xsLRsZIcjAV}A$E(lV92lFKoS?cx&zmZPg8~tDYO3Q)whNi8B
z7C4z35+eJ5n3y*~c$t9@g%`HWwBg;zB?9$bp2NPqovY!HO*fT6Jg)j_@6&7zAXF!d
z=F=!&v-=r{B@A!_lUs}_ZAPhXN;mPQG%GD13re1@oqiIE@pI;`@3K-;yF3K6Z?=8T
zdwbnrDnc;uUI*}A7+8<)4l{%$Go+Dx*0?|@n6jMkowy-~)$-+2<YhzNp#zdK&|%L<
zc|ri`f1eG~__mDZY{U$G61kE0zmyX{wYSnHb=_QDgDhGov+C<}3L=b$#?IHdcYd+m
zLZIFuocbGH^&Ds(@J#c^W8IPQpQ#7i5ZY6!lOuE|XaSQ>z`YvC0xxW)jwKf?BHS>y
zMvV>?F4hIA>}pms?80knlXapLVN8EDuISBlm+2WQtBKsC#U<PD-=%mtIPc@XG`%F>
zBja*rUZC&^C@MvgduL2eWsk*a3%9BU+H^UY2*i)`nvoIHr$nd?ZI{?hk*PqV<bh7(
zgb?AT*v!8Vd>?6?PRjAEP%Vb$v1$f1m<DTlayO)bNqdFRZL>80#g+a%S8gar45M!*
z*_@oA%)^zZa4P*woV4I90$1=Y&s(t1@pJEno(kYdHe@@eOK<XmMYr`63P+h4xl9I^
zDKS?Zd(?xa8cyv6o#&Z-L<VN9aNn&R`4?I>j@0%6p4MR7*jn=QZ7&G6^0w}9501;r
zJCx8AFk+}H@<YWbneLH*gH=wf%&qV+oF!uGMr0QByEHN!>(_<c@bEl`rhSUmdN2sr
zXbk5+hHb*4J5ai*Mle^K+%Av93jDVOTTp%Ei=s4v$Y<u!RWde)1X2Yxt~2XULxES-
z|B0iaY_6?{)vE+;9)ApdYK*KN0kg4p)Z=G{VYyw6j&0amqB!Nkl|?J!omM1h5;5X&
zLnCdobciDodU6Y=8m5^+gTp(@PiCn%aL4ENlcZ3nrFho@>zkf~#9<Dv&?XD}<7KZK
zW`pPF_@acPUV=6>NXFI=3HdbEeig}wh6)h~hg=31DzUVqUq%p}A4@%+98Y$Ch-=-8
z5~yCbRH?=y(kPX(m#Zr2jE(`6=lBk)E@u>gPc<-cHEoSc++LK2)X2BZjs=TPr&*cr
zPeA}_XojuGH<oi?4H}{sScJ0nLJ30CFMw@r@Pi|n_B6?h6o>fqpam%C%#jNGVUoe8
zKTclm79brhdY1bldcC6}<T+v{R~Dj4#@Qv|J#cR9OZSSWvLrpopT@d{{~`@8^|=g4
zXLos}e=@FIy5U80<RRe)l5hFSh^L@PONI-aY5-HvB7obMub11E%~f}vRaQCUOwHa^
zhL8OETt_N4whZ|ypGQi*@F{yH^=#tcSe@Kd{C}+@21S2~oJ6-1Lz(G>DH(Q}?g=eE
zxKOhW1C^GXMH|T5Mns&P#oiwP)jH=OotZR`PEXBsN8QgB{Mtm?M`%79K0UWh0e~UF
zI&pBfBOn7O@1Gyt^>)>x8r>ttkh4b^FBGafbY!TGCDRVH&^IIb79DH#Rn~E7f(=&v
z<XIi|=ObtHC#6yw?)io2)gi(lh5u+)@ofkeZ#-6<LmkciE7VQIj*azxL3J%s*dn17
zvYdA<KP|aeJ}{Y|zPH=a6S|j}*M7u`yWA9r)`5si;qSe#5LL0b4x)TAAf$^7Y81q9
zsT?hyJg%ItKP<;Dm5E{lNhR60dDhnz4BMUaeReHW(z}r{EIWsv%Fz|_xe4831?Q#E
zI4DzOsjKj(AeULT4XtQg&O%*74cheA1XdUwQfwBe?NZs5wbppk=AHjin`rW%`p&FW
zVDm8hZFM)5nIyW~B4YOq+*^j?q87xmjL0zzb`=jl(-TRdyS=jRXpK{M*q3{@PQ4ac
zRHa2t;p6KUy?byLZtp~eL!I_0)Kd{GsD%;<)Q*EwMDBq9#;wfif_zX0-qVv?m!x`g
zRA?^1A_;pTV8=FNj|X@?Q484vEf_6IlhfqC^oqL_IDChtb@H`^B)=pQL0ozUCupON
zv(wd~=!gFiVLTq9nk$*g(q5u2c>kF+)37GZsb3gO6KlhAz`}ElHzd%p5zz{v{mL+|
zZB+MMRO<DdOxUUmOE*%UCSgQVTb$qB)t4VRO;{*5K<R?;cR>po4{Iown-%-J%C5E0
zN81_qB)*7C?qX!`w$i#wCA0^$Sfh*OGu$^*Y*XQ?%pGj?^lv$%|8_HLl;B!~4$~({
zj6^WIP;RM*cusrVCB1M_-L;s-v%#A9-fTtKwwcwd+}fFRnR@b*C8ED5*LIriGB`4=
zFkLh%-T$op((hl&&rFY{cI<2p40j#9R)5DzCfa`-NN!hz>A#55&*XpF9+5lESI-CR
zzG3tlBhT<aXISqnL9v+MLvVGlU5aaT`qT&`yEgg=pV<7a<cs~HjTrw7Ak$n@-p*}2
zWNOsjuVr4ZDtWp;BWAhammFs3XB~jOQNY>7Os5Y=0A@s6><^u~!u7Sfe-w&*R-+CD
z1r!)MeQWe6Owq<lQtWwR{^UHQlL{2B=udL7ZB7B_G4u7in4c5<LqlveW~wEoMS*A>
zjLO0u*^1|I<!afVe-p%T_dj|Rgm7oKbzvBXMdPjl3D6%SFY9m2`=G2d(jbA)j=H^y
zN?cv0#J24R1we0TnYO_b?~XZK;~Vt4CSC_E(Y@KRgq=GGOHn(@b<dT%G3R>j#y0hf
zFf=L)<i`LpWhoFOlt7pGQ7F^1f0n;tc_0KFy&Rx(!$hv%<BJYIXYAST#4<{9jF5MR
zLCemnJh@@y@^r3NR+;|hLVZGv>{~{^@<Xrq6;Zbdh@FTTeL3KeFe4$A8=U7+S9Qz}
z8!_WAxo{9<K99BXD9~1jSLbvHJ(rWLT#2}0Z(9pl?u@OloO*<CUsAj9qE@rz%V6YB
zzvMLup!u6kynD&(PVS|FAxU$9*d5N^od9yDAE<>|1$x_dsYAdvk2z|AKvKxfTy^?*
zCrcObTxEz{qRjCQ@&@R}@VR1KW6*||P0BC&keg-h#-0}Dgb4SMpP26`>q70G?w=LP
zdWMkXvxx~p`A=zr!$*YNLPdjkdIdQ8%bKk+iEB1hDkiu`jr~P!dwx5)3+2Re;S3@v
z<I4bjRb(s5DfA$XO1Ow2##zdf9*aSLz=ZG)a3eSNBs0<MJ$vHy^vJ_0vzT!E)Mf|$
z?iC4-BD;PG**pcO-WcHzw?3r@6g;mB>s<N{)@P8{CLGa{J)NS<!KTVFJHLU?rM6cK
z_be$a%KAyiajYu3SnY76&zdGMGu@Hof*~#0>TV;0y{UPqzBzDM);8G1Cx=G=4s4VB
zkpu-F@DtocD9mrC0x6WhC}}KRg?l564|e7aaY3Rb6*2Gd3ZT93O70#M+5y_$;Ca~K
zS+K4k1#hI+vRbnL)=3bloW$KPt}rDHK?<37S=h3T_zaMHWw<_Mda~R1zi;&^LMQwR
zFgZd0oxu2|2K+4N?P%{#@{g6{&gt`cc^(Zu$si=OP}fke1sXZ<r5`5-arXs*hH%$g
z2HT;6`!^;!08e^}wgw0K#Gm_A13Q&umN+&E2<4;2IZ)TIHIbM1p#&|sioJ$Ncz`u4
zuE~QjP8rAk{tULEcL@#mN5|ZN;Aew(bih=(qM6yFhH*m|&C5J(gQCc!th6Rw6~}>>
zA`SWD#eyPykROj7A-{XG+*rxfL=P>N`M)U?TDKABT3`4XbktYTUI^xiJL*(S1QiR-
z3yjn=tP9M-AX0{VhQL%i+4~gIkyX3<j4co>^R2O-poku$5(%4LP`{OvM<{_#MTK6W
z=#%9&B^GF<<xQhSVbf(9j$R&c;7OikA4EnT1_=DA;OS#S;0@1H{~3Ez-dz&vcEq*s
zuSpI45cy|y?YDCHC{P7Sq~$l{*{u3`cO$xKORHmrLsUI_Jc5b6*(rPC?(aj(Lwh0`
zuGubeLFsdRHEqSjwJ|knm@Md7m08kMDufV_rYf9u2uN&n@DFX!n3-|@w^0iIFEBqF
zr%8i3)be4FGom!1*s_~i?d>Qkal4)Hoh`18-}UAySjG)DIo~v#Fy8^K@xabB&)<oB
z7L`T!DFzBh%F00y$7nl{<7$sb#eR>N?pmxb`12`Oik(pXul0ujZaSNl(ez%kInCmm
ziUSeE#2aK0j)a3>_ZGe*2v7>^!u`SzRcV^hshQTIHW+tPvxwj8q>-iToI|U|5->!0
z@}m!Y@qH(M7!4AIn71$8(@3<~n0<s$y7FK2i98<L91U8=8=o7VO&n^gvVcBiy&pax
zwA=ac9iu3%Lt#SX2j5Unv%?Bp-~DHwdlg`6h=V>Ai3Z(cNz)9+bHrnjJqfXrJfoST
zU5_gRELVq=lmZXAaG2Q^BfdXVmVsUl{7)Py;ZVC(OxYXs@Qi9(z+*b6#}yzOi8dok
z57bJ%Fxl{SBE8y&Kv&`b)ehM!q<lvJM!w*6C5-UI=J~e=scZoBbM57|c2XWv{eu0r
z;Otn5FnqUarkHdyDp#B5KE_lz{!oFzv$dRTJF@E6&=_|kOa2Fi<l?f)LRFqC?c#pr
z^JkrjF3~vAz70Meg2geRp1Ze!WwVd>YCsiU<OmJti?*A!$L5TcX104|XFMez9m-AK
z$ozbD2O9sXwIiO^6M`Bf{|=q73ksvICFg5q_D6@0W3Narwtv~St*a}m#imF^b!@<{
z4}pxBs<mW=_{CYYIeJL~CH#36naI>i*HnH^nQKP^-N@c0+!`Jp)z|c_is^V)6*X70
z&Rd2@^AoMA)NYGPV+e3bK_k*3dYpYL5*WWiJ0F}~*!FT)mOX^49qWWhE^ln{2+*R@
z{@>Q3sT&b|Gpcm2O7sFI{w9^NRfFI)qu{G_n13Wq7>y_m-dLpo?9m~9rF{@5ik^`#
z`SkFx8Xmii|2#D`Q~97m>jjSu&Rt^-&7uMPgLIUz0yvGJ{=I?8j#H9x;n0R(o{Lea
zR9#XTf~sk1_PhPY<gmjW|Lqtrks|`sI@5+(UW#OtR<J}T`*;e^Xc%k}l&Fu_y_(6q
zv$Xv}S<%RL98q+B{DGJKZy{~RqvM9!({V2qvgUz*4B32W){oVSOt9DmJx0@X4Xg8M
zMPF8FCt#vYyT89!?QDbdk(3Q^ZDIg+$|u_cL3*p@M}g6}ex9Qu5-5gX!qwN2;lKou
zng$hWdQ1Qw&i*8Wukm+z1nmm@)NJU~hN_102OI$fBCVqT0ZTx%ze3XBk@CiQCzHN$
zu__4rk|a$svDv@_wnJy_xS*74DyRVg(32eVv5hgW5V~60NsvD!Hbo;rf>JBCZ@Z3o
z=o<ztaqyfwX3+ybhW?YCoG#6Bmy31&mkeGW+46nvwua0tWA1I9rE-mXYm=4TubvC9
z+$)>v+mD0MuQfYN?hR_df{&{5$E|x7=8Xo)7M-~IF;n9XP%?y+uECl&i1=l}@`{kK
zCX#J-rf%>&j+i2QArd5Lk+*A6L28qebk`AwjWmyU(Bk42M4H+V$_&M9lxUw}lI3Jb
z3|!$N=g0tg@w$8kk2-|vZI*>0_?cr%=`4(1g123ad@(oQ94I96oG?keH@xJ(nanoi
z)aX%dFht4YNXcq-DyT++-#BTqpEf^Z%0_MnDa^`PQ3GVM&3NU{fTB9m(CauzxJJ!9
zuyuC<@0#$@_T^po^1rfk_x=-pkK3T$ex~0h?4meu9em24W!YV|dw0DL<WM_ql7K2-
zVxYDQ=enoD$ROdK&9h=^Gt$|<fTDj*S(-(d5%Xqm>eG7qwseeULYMBhL+Bko?QOw!
zY}_AqTaVPayraJt#K6V^q4PJ??)i0R>CoFaU?@HqPx`$2QCtDM!F(DmL$mV=qTjY}
zX=et``Za67Qwz?6#LOGo1GIhS<TX)>(u@xqR7*apV>LUh{pA1deyUgwHAg?DLe!Gh
z>z1di`nEf~W&qlwy|#dnpbgQXM8Xu|SX#ps+43qLj13YK8hTJ%!Lcbejzu5hzygs7
zIJ&cgyNB^ONARK61{QAef>*IC8XCM8Y4F}*lR+Y8As#EwbCOV?{hCr|=!iSoqo321
zw#C#*bSMq+^@sgz84G1B_j@L5VH^_T6@atwzF)15s_dUDvc4lyz@-gP(q47tV$pws
zf!dG@pS6t7^u|CHI>3RQ!w2|yqaol!xJI8et<n8M;>uO%uwVp&U5t0qEIW3x%qr+!
zu9V-E3Syy8pbnVCC-UHM;6d;~w-GJq0<ReoU2A__tAdhVheNv;4DDVxv{>*BKLr3O
z4T#jKU0&Rc-z>D=3+Yx5xyi^lP)6;tD?`U)bYPmNKz)+3+asu021L!G>alMl+@L8t
z+AiDQ@ZxU+2~bMM_dz|@M-cHr+BFeCE{28=2kXdloBY#?AUDq^IU0?OTK<3ubcy63
zjSJOY3CG>91~o#*(A%ayOHB@w$CAX>v&W+}lQtzBC0`KgZK2Y)w@7(SC!Ao%MdB9|
zDBm_^Y@@SrVpoxXU`Cuap|9x!g%O8gT2nYjWI4qySd?KIlbfl8@^yi5^GXo~i;I1h
z0^GuKD1Z@11(UPQ+uAy3)ZG5EoV$I%h|H@ca3$GsDVBz=^`k{vz*==^6Bn=EXom%^
zwZz$d>TRXRcq!M7Zw<+8FGnZ3`KhEe?R&nH6q2iEHDywuBG~csO(C||zqLWEP5COb
zk2S_OVc&nrs}#P)6%OAm=~d4rR`Ncg`4WCLmoHvQQV`bdhDGBmz<}}(rz$DAOG10Y
znw6oy{~|F4Ek;(fvu6&8ic(}mIb2Go{ZcJqB(2;?F#~b3nuF0+dbTHRw$l<aDcFgV
zD!M=>OD$B`{@;WD9Uk7<=2-p|CFo%1P%oNf`(0`o#Bqw|{O3CK8oz-SEeoQi)~km}
z9jbh6LzSp)7#J-MRVFZMO7vjm;s>)S&LLxH%x_FQ0t|hGfNrSskky)0?x903+uKn4
zbq#gixuJD@>^au07s^4QAKsZelG_YlgxQDtdT$0;6cdX{qk%m-H6Mixfh3l<!|lN(
zHbASAHd}e`(ABpg(9mCS{oO*v2@T3Wj-hWkpZ!=zES{XE=(&M$vEl81KL769ghK5q
ztGjiyhd~HuDY}EQRvn(uT+1|0Xn{KKn8KP1s}>r-K9~E?<=G6=EBC46no#}}K0l#?
z)d7__Y+9-RF!~E12VwOW6mb8R=*Dh29F#m|5(ooH@W-(cCFWMyVJ#Y`OcR<C3yt2W
zjC>ig6YiV5qA34T&go*1Z+5!XS~B+Ljaq|aBNL3Tw$?g((j}|FaAv)tvyi3-M1dPk
z>_e?1R_fkOG-xhduh>%M6t;&9D7vpqdoC&LWAh*pZ3F5QD<ZGHr&?jeTLb*Us5>@t
zHnPTxj4N}rVXZ=~FXA&i?tvtfX#jLxV<q3FOX-eSU2u<{zrff_7fr%pw-YXws#L8f
zvR488&|ZP<r3~Q4Yyn7MJ#hGlS-D_grvOG4`5e=*8vT@KB;~g%ZS=G_tT$ARnDySP
zE%+msk|1KJ<Cz?e*^fiTr8YZ4Lo+Qh?`2fN5;-1VJsm{Tl6LfDzd;o(#MCk^wp3=9
zgu<qWfUYufXCgLGXOba*>~yJMmx@LmCL0(7%dpIfD&H(%&ehyl@3ziy{VlEA;i^`r
z`PtK$rKpCEp@VH;-D2&Y3!6DYM{=n-1`n-+v*_=2sF0f~I#(p;ShDZ=J)>>58dzVl
zfw2*scWMI9*a1u7sC?iVI|v)~yogoevRZVnrg|L{o~?;r^7KjaMe?~&Wa#B;&#*eU
z!c;3k01`q5-4oXk@`A2`bMH3xDqo(kM5U{D5$p(5kd@eV8r`S|`-i5#O{-<VVLdHs
z*><$zImUCfdP<p_fbIo*>z$MbdvQ%QDFYh!rAW@oY6(++oiECQ^?nVjn2UR}U3uOw
zy(RIDwOfeU*Vb;FYp?4Lwr||Jof*Wkd%^qANH-(_q87<0_H4<PWfMTH;T2Xzgj?|V
z0|vN;eYj$7!F1n|Uogeja}1_r2cF?)DcZm_Tx&+^IDK10@Ih_iD<ml<_UBoK3T&XW
zU)on_xq5=KiXXI>!FwQwW8;tG+2sFZZ&M_Zg4ubAmu$B1kr(E|1<i(=)88E?ciA#Z
znt*G)|0PMrg0}r;4y58?Sd#|YM7f7ZEj(9O5j#^yo@hey4%Y%WP@s2BZY)lkkQTkA
zM2Lt+CIR^1Crb6Qw?yJnsdW*hay+BQH7!!o1`vB>2$l7iq%pw$Y4yZH^oHX8!nWCA
zHQZ&-V0?q?OQGk!@uXhA@1+)__A9!_Xs;OD;kGO2-(IZTcyraAcO0bD!i;CcI6sx&
zxV;Sr^}XL^6Jsj8%$stUI%I(GmvG>xE6(le46tB}O@qvHdc;_r);Z@$dTVKb_{nYd
zM%D=lDM51w=L|KC_~?}I0JyjRLQCcSP=920x`)85_rUI`VdHwJhr#y;hwk07oZ~BI
z!@{_XFdTk`K^Hyh*foIKAZ$S!!IR8vz`}4FSs-TQY33c8C${bwS=$xYM@hV|J#7Lr
ztmN(g3L98tu(SXfddoK@Jl(~o(?y1F?>P$FfQkdEAf;{5!=!KfFBcfgOKf{iRxsaU
znV}uaWKqIR)$GimcJf~FsgqQbbOs-~<M_Z!mg=!=Vt^yU2KgF6p$CUCBQwiBW~^Ue
z`AenXlu_#W3Hf}+-0|h4ryz4O8)DSJxPZksBaIBzOxu)c@ThQ0<rh>y5Dv_$Vv~eG
zO^XWMh0%hflhg6gg;}8(N)lg1?-7<W0O1E|W<RMxhE_}e5IEdYR{i$Tt$su9LFXvs
zS*^5t0^Az9k;2`<&ZU<+7IJ0rU_wz+RfS+lJH_;k0@?=tiKG#;`Qt)}x537d%@60n
zm2g+EEGfFPc$;NjcG$2mHUr+>X|PdFp{Z2MmM9sL8q<|Ase4RN_MM=>EmOcoCy<?>
zu03+#VR9E^^EqqJy%)tT-Iw*Xa2<Z3+BP~?JveKq!)(EUt$DatFN<bnrhFv4u(4%<
z&uA{$>vC{z)x4YK(A0dXgRe<&$lNhyYYN;=I7e1lyupd$%innS`Blqd(zw2TjeK<$
zE5IY51<gKcH`dX)5mN7G2?^domHQw-i_cHVt&1r6FULyq0_e;LQYZ=f`Po^vT%ga2
zYn-B0V>Md5ZR=MsEs<?pU|{rxXmB~sE{_FE8~p*|eKc-70~Q0ztcqDyktFB5hf#!5
z=QNH4O0rDJpFBnJ%|BNq3f$5q(8@<>XXLwVOUS{q6hL8G9i0~$nkZ%4fTgo)J3Twf
zPgdos+5&0;CPVpF`gjBv$*n3o%eNNUjGgCJY(sFXj=YsVSs#hN;(_=pw7chS#TWDr
z_T9bul3tzYSGVXDPRzZ$)w_i+|8(#3z53w}x4uO#7Y^JCweWgT?Y^4NAkqm->ijNn
zGwDsdqeaH;O;O4Q9sQJ@Jb63s_sATCC^By-gV8T#Ui5pv^~m^RfCSfxj%d5cOxdu-
z1Fyv=etX>9p)?m|maP4lu_i&fl*Pjhx)+L&G4zx%HiwUdHAc-zUM;f%9ii&v;80BD
zDAkQl(2Q3OL4#?}_-E!t;GfA}n6{qD;YxOm)@L90h+Vm+o(~t1vJRQ;C7wIoZ=s9Y
zC^2+KMIKNXaMx-dtzjPrhCjm3=o+7+O}UHp5C{b>#vc+>@EcRU);r7%RLouNPqmTd
zYbOqFiw+Q^_wE=bU;`H;)6uwz=Lx50r7vz`<2oN}{1@wdYy{D`dvL7+>_<ehH3<wP
z356G<t6vR_FPDl!X7K=X7s)f{ryyaVI3gYH@f*~|I1Z7iMwU93&I`icR<2H}q13xf
z*0n5O+HiMb)jE|R7AP~(ViNAlrMcVig38T&Q`+{__2jAlw~kUnKL%GOJ4|OeMn*?1
z{PZ%seTV3A+ESh8a##-`S6w!S9B)TU8k@`BRx<~!gle08lX!v$iUJChXCNJLyg-)k
z-7tZ7XdhXg1785|E2K+$bxB27br`P}^sIR%02{umXy1%$*pMCjc1;zT)_K+=WMu4M
z-MIA-tPQc6#ZkH_fDW|jqHo)QT77iKIkzm8bke?94#M(s)ZuFb+c^vv1xv^@lt<!!
zw8-YObdvRZdp&I}(hHchg!w7OPJWr(Q!)h0;(cpkf80F`<vG9lOeJxC98JYaCn917
zYI$qRYkT)_81}fe1@G<->cdvCHN4T^Z5{n?r_rmC*M@mm8%pn;OF%bh5WhMuG#0SM
zD>DokRgB#dyy_sq73av(>WK(7jq~d3ESr<AMU*f=3ol)aI7U%GU|HmWPU_f{XHkmG
zmBnTjT^*e(=XoC!DigB}5Tf*K@!(TWn_!pH08*Vh2x}tjH9cTBs+luqGX}OC6?vpX
zUu}wLahVN<HT3V`{VCFMg<2zE;f9;|SH?5Sgg}p0-Zaabtn@V@$J>Dqk2(?SFd{)A
z$5ZYn2M*&z!FPH>68ujAV@68~en?EoPj)PLPYz=!sj}fMUyf+xeK#J5P^8qs&LK%T
zT@msfS!Zd$*f*O;I~lUyw8DPbyh}fErRZ7y7Fc10w|mqdtV9jx(}!V`*7LR&#!~`C
z=1zmynA{54=!xj}L1ORto@?sepq(;cSm@SgT2AP?j*iOdxmz5*4wKV-HpM<GKj5ob
znw<uxF>2Xn^2A%$8m$K{H97U;n{x4rK@~ugTaPVsR^1XXRoQTR?9s^CiN=Hr#;Q3K
zp()-@g}xv$rGfoi&Rn@0wV;t)j)F!C9O<zJ#=H)brCCjboo_Vq5I3OX3VhASHfqhM
zasoY$Ev*dJwI3R<chhaO#6fhp)B(#7p|0iitoUUU4A+X<^l9ym;Tln!Y3{NZ?)!3?
zJ%C=EZwfpC6;xqxSlo+gQWg@SR<grPWle21nUUotE%x*BFOjL_?b}7Uye+p?Ce|nv
zh*=ydAzNU!j%(+o3*x+}9DUx{u;UnH*KjY%$~#C#<gnngEHhH%H*emI-rO6Ni<9l=
zKW(Fg@&0yR94}J49wU7DryL`L7wK%vt<#q5^_E+y_eEd)QRxIX?mrB%;3IK_a#3pG
zGANv)rsdfir)nT9K1+|X8IBncW7SjB>EX454<bCaShfR_rSW55twg{kBmhT%iBSM`
ztj{MFM~{dBhe1EOTVJX<geg2~sJsbP;eg*OqO#6AWO^wE<&}%wD4`aWvy731A}X_(
zz=2SgUCl#oZIW07kA@?(E;}rVHBk22Erjd@Yeqt}BD5flsVENIWEc?XJS3%&-pG_f
z(Oj!c55q-uljYfC`0O;DXMOL=;E5Q$Rhhl)%X9DLyQVfD=ZncKXq5V4TS07U(AWxB
zcK%j;;b~+0+=%@|qBWhb?t#>9qSE=}KCKg%bfh_dQ|>`QfkyVIUXzBo&YCj_2GLiu
za_6DJan)UDS1t6qP>1TFoGBacQFriQjqmF9s78okz&QO{4DILRLG651&R%l>6i1$p
zk{>WCiiIZHEvCv~cIkAQOVmdzG#2whN={@e7{Zn^p1F|R*KXYW9(5603ha>m&SCN>
z!W3eR{0v!!ali@YZuH6cRdz1SU1>>G!vLn0RZ(4+{-L`F{^jWR7s4xjMK>{gMA#ZK
zJ7ml9as>BaN+wb0i;9^q1RXCuZ+#41;#)_PN1)ZyQ=K_LhOF{gLb9^=61q{41Ebzw
z0>gD2-WB3hJ!@AFqmy{R64xHCzV&i6pRFdZZUNhNKC8=K>5{5Q8h%1GGdd<bWQ?)F
z6){4ieOPbMc}|8^lQZjKiJ+SdBE-p+SJx&*^P#01u$)e3LQ(fgcwhF-RhBL$r;R*V
zsO#Ur48Z~rXO0j%FXbXm3tBL}ViO<RoJ6`w)e(X=nl_G{3DJU^vdLUIcgXAVn?+MT
zuyc2jGhLZ;V%$&^cH5MT)NGc3s0RSH9Qz0W>u6R^UIEY(8$FMqWN=7T6esCb!sG4N
znP*2p1XNT_>g*1aNJotf9YeAI%FaDmvWrN5x`?rH@OlK@C11c0Bg~lqZHo~uW&f_)
zWL)S@Ry`3(`?TC5MFwluvZY%&-J5o6x1-i4?RlIWH4PcW*}|4On$*yq7Yze%J&%8Q
zQ`nw6dWCz2-jSjW9^}enxkD!F!QN(x6C3e1hS3hOw)OHyv!EbOg4mRLVs{hwZayz7
zv>~Fy{ShO7#K<2p@*fW)*OBXbgdD-*>oGESv<4w#n2zf~%2v@NBOR;YJ{mUKa=dio
z%VXo%oPO0p^H%hD349#uxEUu0bU*|xoA!P;)Xci~KR$kb>LFZ|Y_UqRJx-MNJ{|gM
z*GA)b3sJk+*lLxeZ))3Q1h3ceI!)i-qa;iT)Bi{Y@u7&zh{%2qL3|)4ADzJp>PQxE
zhsk-YqdWV_+j>v%_I$4mZBV=*6sc3c?J<LHQ+BzcDrebfR-W`#tfmOgfD%>Gdy6tR
z6ujZR=;35~SLNAEWAEgMFpPWIDce~NW9<9EZ6MQQ7r*zx8C<)k{KtFyhq<?m(Xa9H
z(skAM_ifLo`{)Lao3DBUIphZ4ks6w(Ia^)0XxR+8TF4nqnoxa?azR+v&-eIl;3Xxs
zspz<tpVz(JZoQQZ6MyPiBon+xW>L2XGiTwhUmQ9rP5Hcg8A<$1@9*N4bKFRG8mj|U
z)j&?^oXi_jRSo1+%y+3HRTUwp969)rs`>z+Gr<*<B?6zfgKD~eWebXovP&@)I9Lkb
z28^zP4ovp?!zsNy*xTXG1dvHjS4g$M+%7}5Y($q(xPgy^$sg?KGjjaB&cC#+FTqX?
z@zcR-xi5{Vzb1-Uhx;W_$}1I*Cz^<y3WiBzuLob7>>|>s!OeSdgsu{c1cH`pMB&ap
zopaVV#kHdQKAXi6yp@#H#4JO)1ICoZiRbN3`-Z$5KneB`7T<;sCj8g>DYo2cW47LZ
zSr7gNYftvV1zD#cfH8j`@fUWY!H4o}o?>J;ek?0|I~t7+8?Kt|H5BW4=4dW_*G3dI
zCx!dQx803N11;4(=q&jg;fd`J)(5#Ht1xm}%XNrl(tiN0SFveRnoRQro&<-$-O;rt
zTv^P(DX2wuKL6cA)&)_G5&U2cR`wkG%Djt(+oXI+k@eav-sa2EX-aYMQi+0hBr)(N
z9RH5q3_4p_Vq-cucxYEGEB0`0RPp42ADwo+opc!Akb~I3?;z)VObPk^j|+~iqxqiE
z%GwEajUgamd|-3Q98DYKRT+>OQ_rL?Vvi^4F{wUOIyTclV2$Sj9&^_*SQgJJe<8YI
z7}I9_`p%LQ9rDkIv_Y73Ui`TgQE(W<V84RwG;+&*=axT0+-`s5n?jzv`iiSlvd@je
zX`6~|0eJT%(=Z0db#GXqs{&Vci`Lr^f*0o>52xL6>!+}Ff2bYD0dKz1U!ws%%0BU-
zJ35hymkG1nuyHtzOKqIWv+{@9KQ->nx6$}@H8@?b-_F1>tZ7FX5TcjYbMi|uX?r){
zsO)Txvdc#jolPRK4HJqUTK6X<p{4bA5Tt_y=ne}vy>dml#&?S1y-l-)^Pajz<GFPW
zCng#uEOLgLxvTD{h$eA?(}UHz<xi+r`}JMNObuMT*W2h=Qk_VOCQDUt!c-M&xhY41
zZwjIlkxmfYe2)ykeiST4$sHXZ-qJM`vRO43hJyD#sXUPl@tR#uh=)ngs`>CBmY1oP
zB}&&-*`ySVjt06<Le_Ltp=dvz#_6W7;d$p9w1&BKA`Q4yge=S1yO?3ikJ$qHJaZuh
zkl$bA6(%#zmTxjl3G}8kJVzu?_BnzGtIYW4Du<%vEK;)Kh5Xew3__=zG<iJPCeaAg
z95{H8iW_vnhy=cF$Z_v}a63;kL;=OF2c@O~I^`vb$&-(mVWW@%Ys+uyJkP6qeeUyX
z0J$7VJRI)WZ3fMo{KF(h-JWN#S<cT}O9k$V=n4;2x*~^vu2LsCz>0%zVRqh>izz9o
zd#BlKMiTpzvYZ~BXT3vj{B#KZ;Y#PxqV+LR2SZi8EodI&n*Ug2*^*LE_a8o>Vf}WR
z5B|KJ4|S-WBuPy{?2QpgKOJzEPx{13KGQ)^?<i95s9x`==F;ncr*sWSh8siYe)AIf
zA$i&E+1~{t(;DJBb#>Q&>eaa-PyM@t!6xJ;(Up_5ph#<FwwRF7_7DKiF(wAd5=MG0
z@m54nX+3Du%A|@N1D2#lOokTEIRN=wz(*EhGYDY07m;g*^d0FqCRufVbOJzlbu`M$
z?LWQUy+7I=-5uTk193FGu$vR3yq5i~-JRWzgr(Hz?e6q8tKo<3YKLd0lir3Eo))wa
z=Nm~;q;8xUGg*)PLYNE7eEB~8z7M-wW#7!o)bMnJ4f*KCJi;F`6WyM+x%Jo?6!3Br
zX!uQg!l~xW&uz)w${89)yv`PsU>B*1$ES-DVGh8IXX!D}C^sU?qwTlb1D(OmeCU$E
ztvy9`ldJ{{5hHQ2jB1?Tvp89y=LDJgzz}}$W$68EbTYCr+^sTBg>zqICqQLm=3NwH
zeNS+_zcVm-V#uzKF)G~M@!$`YeDNX)7x6GlwxQ0fxs>mchb>ZVcO%#qPrD2iX~jHR
z*c_54kH35LjB<51ofp?i0|Ncb58=o8o73dKKTD2QC$-v>ati0JEKe|(V0pGZ-+uks
zc3xFLo^J!YnC7#G`E>v8-OqRZ`+iepbB-h#p>Kzq0pc+L^YKOL6092`N}Ow;4M(Jy
zO%kUOgH@Ep7Rk`^iDg&U6DgnkfiMQG?&kLk5iI=I@tR<11)H#9hnif^?#l*!HP&gp
zmsqoYDQSUN{XbviXE~iLxt1lS%aF|=n>ap-8B+UfYldMmTwDD)i)N^@%||Nto&$4W
z>?gXK*<yjQ0Z9;1A?`cHl+#Aan-|H`Cj<ZP!3=nP9YMrnySbm-p{LF69jd;@f25;K
z1HQmnhH6ngU(*T0@)tZ}D@Q&wY6fvA8<MJR%o`uzyiziMSECJ@efEdqw#<|+vj22z
zJ{x@kFYa$b{QCE89qDVt%2%b~<@PS4Ds&bqE;1=Cs|hr!;;MbfN5MM=94qxAgyVI%
z^WXvd5l19cpY^io%0=tS8!M=E<zLaW=0UPU&NcA2gVc+Y4XZ{l0q9A#w0SsTyEzHy
zQ?Jy6Mt+Mk&AMaXaI}?*hO$;iQgw&vI<4lX#@a;#KU0iStO8Rox-9vvwOud}nk)sD
z{+`Inz7!(_+gAnrg|Wq`T=31*at=ez3XMM4Av_d^6j>GS3sxl7*+3T>*d`v-cc`x&
zmm-P!8qf@InyVS+8GSonWL5P?la17ezd5pyEN<JVDcIfwS4hP*<^_#BQ`>DJ0l@rH
zHX|&8{X^|04|($)G_nxV^=z_(Qn4ep=iyx)w)d6g7ue)TG?PC9QSU~*`BwjI>h_7H
z+Sz2cRo!kI?lMVrw+t3fM3G#uIdG*SYdX{5ldK@WrK$2WT&xOmEo7y9L(+8Ly<%ar
zs2Y{hrLxk5F)6IjGUi12F*en|S!}9Ku5=fSP-Tg1-@)#}5vpu^2$eph2vwoykc!{U
zcg*(<VACJ^N!MPTMRA+fZir2w@hqKFKE`JMig$_c4G8ehs^3;;(8#^Ls9`=fc264n
zR2us{n#->-T$T-eRSVYZqBS)}y)sqI%b|+8*cb<4!>~?n^}L`?*iW;o0!8m~L)~ri
zPjHQI6yZtS3oaMt=~5vW#UBA35mb(zSfvZvwfzLgdr{FXOaRTDWNYG)FT=Rl{c12I
zC>!Sgjzt&;L|2br-jdVRgYw-|yEf-^RiVv0XR@PZ3Ehbz@z)WN%hI?t>t>0EU6_PG
zzl#;#RpyrcBPWbC8=*Gv!%P{AK#F}|eK_xcC&0r4Z4VZU>ppBKASQe6>tSpDnDk_`
zaYXa)B!1|?E`0;mz`NO}g&5K>BDlgI%DRL=?I`jvigk}mxRxQlUFA#au$RtZ`+A2O
zyS~m&vSlh*>!5d(Wy@as5|irmo7R4g(gOakwWCS8Sd?vDnH9wu4PB=l5&$D>NMsk9
zCO%Bk(WEQ@5}?6hC+ompBWp%3h%%}8q9HLvb2@B9{WPDLXCg{HIZrHu!Kgw0UC#>t
zrZqH(gjkGt{yWiVL(V{z9)j#j%ufo!5TuN7EqPf4TapLX69iIH+`EUAAy8B&dJ1;h
zSZ)+Iy~oyOjTwh$E!l=WFU(FkhG(_>!ZR<ouo;@mC_HP-COm7&Bpl0m=ndg8Ch9hc
z=l7Ee{TKS~Bq8Z9&ZqiR#eHD`qfTBuVp%ueph4~PSKjAMJYI2ezf*U>p!doqEp~J(
zk3{}{HK_Z%&N66?2f<|(u^E2*DkMZZhs2P~t1fG!5w&D*C$rVm#IULb7tq-HM?XLW
z2ADe1RZ>*<Pjesw(X7B_TfyWxl~{&B-?daY)ZB({8aBFCtu;M4AV8KjK9`rUCqg`;
zq~lx#?;5>#Nz?TZf*v*3EdBsuP=ZkNpM%31ednkC!o|hCRXJOJ=cq%zyb^&t8Nc8m
zh@a?2xdYbew=?#Qd~}@P+pO*NIRcxs_N~-Fd}sl7r}15!r&pNK-kqCmSj)sMI8ZSI
zHVVxmp%0>gSJboV2ch@Z`LSeXrzmHDUGVKUvlLEBp^*+JEhMp}Bpvj|9>+fGVl;I^
zGV22?grW=;VIdNFhVgk6EngtSc84vB$zFuy>mFe{oTD-i^XI4cdb5BM7D*xlKh0s|
zE6&GeBO_V3(yMT&TYTv#N~H^@Gs;HE_yEVbEAcjwz{1~m<@epg!}0GPRi{awi_%;>
z;b4;M;UyJApk~9HP~re9QmjLxg9FDa-uo0+$^gPob`B4(BKV*MXgs*zBajM{ZgRJ;
zA*KqyM%bxt5QkW~<Xvbc7{eez|7IlPJfFP!NHJa&#n>sG3+{Fpe6FO87&aaiQ{J{F
zvHceA(1fSu{ZXIc6~U=&NPuFM7?JpLRb`8OYF_R3h!Ukz7a&D9>SbN9ZGkZGdW7P^
zN6Y@sfGEG0S3s1~NZ%t-+C<oCB62;s*gzD960hW;hf0zMXs3DAv?4A61-vVwbXg~2
z(j&J%K*I7vqAMR2Njd`%Cq6!i1Ds%Tsp1zefugB65QZ~=DOtg8y?)ZkWOcThVN_(B
zg`C}m#Kl7nJsfb~+UD3KD7S_fQ8lEoxJlLJBJ4!1*e$iHdy7NMB^pP-_w(dzg~&*7
zXKcjH_|eX@8BHDoQu3o*xDJL%3$E-I6aA`#p>Gmw=tGGBtyYwqU?pCn-unUet_+vn
z_H}o*L!%?^qPna83CsbBj$e-KowBCrz*h{D`$M$#_}eh~Y?yow0D9+80T`2SoQ+5v
zUL!LS@?uaH^$2b7!(WoSUg0pZE6F6N#V?Y3s{Xr1jEDn<vE99Y7@6Z)I-h6LV2W*_
zM`N>#p>7QejonNe(r!1O36QrNY8``nw>XN<Ne4z)li8`jI0JV=A5d{js>kky+CC2O
zYI)+P8cq}a3YU}{YOSD0%KOB}_(U&|%{^6x8swp3lcp#v9}dSUaQbtxz;6nVtuf!=
zl8E>d)eo;35GOd6Cx{0gh{?^M5j_*#5l7G_0iV@JMc}tzeQ!MuR*iJ9W@Q0KNS-%Y
zq&n-AFr57dC%uWr@$MR~`?a;O!@%1NNS1F(0VTwqGB}BWDsuC=QgO{|ZB_OMk=KOs
z7@?juExwUNX6wrS2dlgGLZFSNG44HHlxKllhsK|AWFB1Op<EnGv?)dTD0#}IFDC0z
zIXR@)%Urp~c3j<JJ-T@?_2Yi7qsB&~QJ)nszww`g!`}kg$N)$rIUmm{wl*&lQATe4
zl+Rv?CuEUlud`+`h;2p7J%W{6XTw`R1Cw%rro<)FZfsrX?3}HLE$pTVzNE|k0T2vC
zEfA>y|B#pgEqIcH9Rebs97a+F*y365Fy5?@SU9^QW4a1W?<j)?*Q%*v3&z0^H1GDM
zyOm2jhzi68?GghExBAA!1PBOuJfOe37)qO>y}5xtOm+cJUl7zGDPcSqR|W6z^zmuB
z5I06~EmHk?1c$pYdQ23Ha;X9`SrAB&btAy)TD>@Mjkq7B;<R9cnV{nx8qMYfvczs)
zY<`V*dLr=?@}(95>j02LQ3}BhjY(ELM&SCCEsPLDW+x;Y7*dX+iW5|)mA-A|@o|+c
z9Z=2+OSP!=y=cynyg=KJ?Dqtm!1yiUC}+!vKNgA9!wL*u0hZde+}}|U)uke*MZ17Y
z7Y}D_pdkfFLn+0kUR}TxEK?xhoHI1u?=F!WqBSF+EbdHgYp*k3Sm#$5X;OPDWSb<l
zur0WwF_euTCUz&g5PS5Ne4(N4Q~uG9gH3e|AL{Gkq^wcMC?1Q($G{8@;jsJhMY02p
zvTX0W^lg8~7^fw7^n4!ZAHV%({qG%13P894n%V)$l-I4@m#|V1>%GRX!O_0@F&OVJ
zpBYYM2oE}rH9A<|z7F|Kua)M=XuO&Ri+s5sJ5YY`Cl|n2<vE~H4z9<xAgUT7H%jL(
zX@R_Qof28DmE9r}ZU9q2ImVqP1s-d9j;5>#ZE93f;b2`p9)xD{Gf{ow=Qn^cc-GE+
z;=MR$(!TyiqFr?;Ke}mt$ZneNkAnE<zj<*V84HcllamEfqgm(7NE5i&%dgJ+2cL}Y
z4U<ntyZFy1hmFpd-=)jb(ebP-7xW?Sl=+EBpFZV0kC*P0;@)_j4rw5l>DnZuL<yM{
zj~%)Um65jZi74%U#GjJmdsEvsN9rTl4H$M!ejhV|?8j1pnF>_$p%(GqxdVvW7x^2)
zG?oM2Pd~>{BW?;K01=_k?b}e|_H74^oDq-ar>-X@@<)X6hd~(3h^Ed(^CJrRa8XDL
z>r5F{%|V){6(SYSW{x;|=SH^~FP*`z0qA8}+3t`Od>9@KrFUJp;+h-3@}6AhycjJh
z40RIot~|V?*FH~nt;c?ZQ`a5I`Pi%@&yRG2fRWOY;?}yFXz8Rtmy8C`fu-(bvR{)F
zY-)?evE%F%Z#r{#CA~DBVxsZX0}i>?AUkp=BdiWAbgb`~!ZtdS#umCLZQGgVr_pTf
zoTgpR##!lTMV1CcHkVJM@$M#8yK$%gfOq{!gZxoxkSd$m@Z=xKkUv}`qPiB7j#48j
z(#4_-&|1OvWXCz0a@LK>4qJl{{RKG5eGIx9F`c+eZG3uoRg?<qKxZY|nfD~`b9dUs
zt4n!su8f$Gh4ZKx(^qXxS~M1sAs$|i`iYFJmHau_c=?<1)Jw+~pq8AC+P@2}WW(F~
zy4|?>dI#zwYUIsUm^zf~d!?hUdFbzp%0d{*vHy(*LWijONMn7ZvDVU9n81^)Mq%gv
zfm8TMZhiRVR$!Y?#t>ot>w3uEHo9sP0_Rc`PAmNouUn7Dh-0XA+(;iGVNpyyvcjT^
z$>}2IF$b?lm?-HB7-uI>xo+ggWyzyp7Qd<hmEqXdE#O9j>qJ!sgKMNIHzO&V2sZ4k
z8@cw8F6&6#xN!0tQe=)G-uqyvw3q{7Jgq|$?be$7yiUD6SN?<WG|OLQ=w65?l|njY
z^QB~ZGQMshrKb!)Qs0h*>`)dMEDcf7EIVF)Gz9pF&zqGqc<8=OtEHBX)a4>ItfvGd
zyUkedUNcChJ~!r~FUvq%A7z9$6jJcwK<6SLry1bH!Ogpi#W3#59*RS-u!j?!994(f
zFx=1kv=8g%_iIPEf%`A#D|;kK?>GbFEd}Uq321i7Pq`!jTE?~GTKo!3B`?rz%HW*+
zIbg+1qCN5%Kgxh{%aJ#Pi-(T#<HY{>;f?bj5$_u^DL+>5D)j%|n1$23`g=n8tMq%m
zv@klHp4E?Q&!}~PRAtQ?34G~?!e#U{Eoa$iR-RZhs?jfHUi5pz8tn^(c)yHEC*CYG
z@ZRq5?(kl(4$Y<K_1=JW(RXZgn~Z7coFA{!q0mgJBd*X;Sp__mazP3elillsP&#j>
zXC|v>0&v%+aIUX%gRIh3+S`!g<-Pqdh+YRFi7@yGCf^g7WHRh(VP*Y5_~7#%fY04t
zE5NB!hifQQT7Gmv*YMzit}PaRC_=Y8RD0;kK8VGVZY7R82r&etnaI=KK$(P%Hl8-u
z2+Zn!GY!GL{RpPyfUX9$x6TQ@7IETo{+CJo1l9d7^&)hVorJ`-*Qts-Wg=O*Am4C)
z%=2DLFbFenGDxoX*TJZ0Jqo#QZye82^eVh@v|ST<e;PK7>sLAMG*b66Y{Q0O2)2(7
zIsblow~u1DkN!AKQn(WUH*<E4xqGGlIN0E!IK~{<b|W4#n~q>Z=bVn?*ie&X2Yo@e
z9<Sb^`1l-{>JeWb>F|B|`qVsq4uEW~*_1@xey$l?E(5Tl@TKo#6v3KKnJn-=^kJQ)
z%1q@Ww)|+N@)2ErM3=r13PG^Y{A8Lh&{P1~eTqF)PEpwT`QJio5h+LV0ab8!XQ$OP
zgg^mc8;+tytwit&_5NVZa7^b9)(t0usr_MCw8MDD+)2sqjgTD~(8thZpJF@1!=O2*
z>bg-+FE!$*S&fXF>4~P{4rM~`Vb~7Y%djtu>>Fbg#}M{YLQ0iRYl-)sVl|BU#rN=g
zoRIcQA>*9!LM#kf+{Y%C-`Ai-?r4-enojej$)n-rPP=UZjs-#hY@&@|%p^T><cU@8
z^JUneseg<iB`JrS02x8!!?hFtgCPymlv^ZfisAjSJ_-~~5?2RcxC8PUp_s*M7X*(+
zBMKFaVEmDd;pbXcT_Sa~vHM1cv$d8N;`052gZtzy`ZtU+caMa|yN5`lSHK3;y$?{X
zd|yf%5%XbV+q-ws&fz|KfC!|tQC(Ty2K_|(=<OodxQqYXqv&_Q+Yr}4oXuf_%YbyM
zC3J4bqp|5~+4Jsp$eNc|c(BkblVzXkRC(F`t}@yZi-{Y96hT|A0Wb6O1_6QujEVy7
zki#6&R3GX&K41uY;9dc*gjqAs4JnU{d(o`Wv8bC8VHN<i7qmTqPi~UV*uGJ?xEb@J
z8vJNt|8HSpFT3=SrTL@#F~$&~I;}Pn!+Lahmd<r3!4`)_jQSq&e7i?s^FKd~wtNvo
zk?vhy&Jg4e8UFzn)w6AnX7^F)(|9xuqyx3KfeJcG82mm+{&FUo-L=r|hBdVav>O@O
z>|K$IVXFeRPTxcm;cTW)ZKq~_lF-z`Zl-VZGq}taDf=;=p4OzjaEr6EIbCWSJQwjE
zaH?BRi{rci<Us762{^c6t~VW#mmsGE_AP2+=h8~Cg#bW|gI|Cs;{-cP6PVUIC&IAO
z;uQ|++M-u|B)2}wia!!oSL5N}L8mU{(%b&QCqyoNh7lS<%=_5~MO^TBTigu;FT=g{
zIrzLl(U&G>-mVX2)oB1Vy5{XBbPcKsC<!Q#HU_~&NflGjQXw!zN`+b_Z^{Lw2IX{Q
zG7x8q3Y6B^CLX6XaxK6y%mMo49Q)k>ead?g0K4_63dwp;%=X-)O1v3n1c+t?!VqeE
zEs2Co9;FY)z<DE&L@xNHY-@L?z0J}aHY`@eNKbX~FyZW&kNs`O|2?>n&*;^-Khh;x
zEf#nz>-1wAVJqiG>V9c&P`K*q3QFO<&3ENWs8zWAS4FLUBvwBXs~?HgkHqTL5vv+F
zbs$#rqLo;^`=Jr5d2waLYHW~~C0B#tts__4h7c00*z|=6){pe+|0DG37a!@>_fD^V
z@!`{}icWQT04)k6(_1h6c8zen0KtGaIx#5x_aq}s3wFMteT)47EfIv@Skty)!qndz
zh0-K1uOTAGHEarI0H|OuatJY3eHFMhVPbkdkY4(Eow2)?iau%r9${}HRt>|1Xfm!^
zttK#_3h1yJFJRT7<o3BTd5d(MA$MT1*Lk_BlnNE7N}J5o%UdtnMrWv2i-B0TWEZN_
zG^n!rC5XoJbQW~Nq+SR1%<^F&mv&sP79Mxjm|J<RDMx2RgX3~GonfoLd?4lqSLy1k
z*6$GLFWxop6sZ!|%@XLl)rl>@s||O6A{Q^{7Dx5}6{do3h|Yu6?|3=yYn1q>?fL1Y
z<LgdN9}k>$8=L?2(uwP34so)5edhY2q%t~HtkINzVW)86H0|#(WE}P(lkuq}KWDun
zbB!)K=5gGKd=6TUCXIiu8u&Hzs6Sp=EN`VB+BGyuCIvJPykZX;CfhiS^~9!XXT$Is
zd;vbB=o*N279Y{ghlXxuc|`%rF`M@;+BFNZLD|%Oo1U4=9z)v-MR1r5Y(QPQbeJ3|
zc~FWuXkoMaN9@aSP|p_55&1d(91Wrkq_>6U_`Tu!RYsUw2bDU(q>Uj`qlI)QKm=!g
zJ};|$Nr!)IBK40s0Ghxk9Wu&`PG>m-%~zyLKRn&E1lV=^HjwtWZ(9w5jaB|pf$>p+
z@lk<sE$LW}(|mT}bS&j`S_$63#k$IDEW6aq{eSmtEV6JLXJgqc-^m3djz<R9IU&mi
z>0)a10QY*m;l2F`t@Q*j8zFU*#k{-F+pJxiq&Y=9fho}GR<Z>M1Za2vZ6)&N%So57
z2bxy|IBM{Xjm!ba6%5{7esc$#8Y*u&zw-n1IG7$Lk2>qt>~;5aYz?Zl3PptDq62&-
zu_o^ckGWqB!d&p{^~O?FhiqP_I*wLC$HIv3MiccdE$E{U|4&OB1mJW#>w?wQ9S$18
zvZ>mlo{7d~yON-5USDlN*R<BMuo}4Eeha4`iD>3ITO6Rc;wL%*{heWCQMQuZ0S11t
z@%+LOcsZr2)79~@w<ii-Q3@g}A}UfOA->B2yYf@|7DrGFhJMk@J4VW&gaHLiz;`E2
zfKaP&L4?%&Ca(aoZ2kYR0n?t;9VO4QEIC~+=MT2Gvtslnf0fU(X`YVC#mP4Q+SavS
znra^mH1o%^j^MH@RtL;2P(b#+PD#bs>s|86y2pHW(*>`erVrM?Xfr2bx-_VH*-!in
zC~{0Mm4ojxB)_rtVXYLs4YkM{`WF93wq(Rm<^QsLqbGqo^1_<eR+c$D4mqy1O!Q`p
zu$qZv4&{~}7A@ZZcM3lx@}%MiUEuNR!(sUfVud2t%FqdssI+#KU_u=x-r?fGKJl&V
zf_Aa+dN<3a)CoaDHbGBV{%;L88Y?wj=Zyl=dI!4GWeo$WdSO!|m;^b=3K48H8(k_g
z9+s});k<o2EzWP>_JVlU1xO>Gy|>L(Nmasc_zSE$W~9I_FyW|;>#0-Pk<1B|$y(^Z
z@~dK*FS1&PF<r3LQg;tW_R*F9kLt<~XY-@{>%*6S9hK!QOACcK_!Q-MSkEnNY0O0I
z<U+Ai(}F|FGr%FpM3BOxcTP#ys5Y==U-76yAdf@)Hy3izx^xn8MHXX2nN_W?wk&zH
zL=8xm+Iio(j6Srab2yN`vuxhT(SC4kNh~%r1TfOM$V8e`JazELzj<?WHrgPuVS*vA
z5T+uzGRXw6Q9upg4E#_dHuhUXNTN<*&aI}-v<BcF(CQhINPz#4UdAB}#iRg6Xu$m(
zMv^TA-Ij~|B*z$XSeOT_W2OIdl{&lEj{%TcsiwNQD-N?-JI-40DT9>dNWuA`6XFl-
zqn`4;(P`Y=M{4aVw3TwEElBA=ge{gBK74I>C5pFR<waApb&{GZx!MJ~pa7_<i+DKo
zrj9P2n0bRV%uPjWt={e4>b)zDy<}Is?g%!7A}o=PM0T`uxceyuc9enM+o50f>pk!5
zCp(7`wJ8n&2Mw_G46t%O_ryybhI_!vCF4G99C#8PdBa#`CiRimh*=)bWus0JO$u)<
zZ7Pinet*$1QmQv;Tn+AO7tjvB>nxUT4F^S*5)7aBBaxv_vL$1Pz9Kp;2jG*k5=>j%
z%u{w0QIlwh9L-TQ(O!Gc%WzyHx09q_?*azMdomat>}(jz>P9efbFS#`Uij5`=hY<d
zH-e+(DYpXU7#{XMx{9TX?2#d@?U-8fT*dZDawgSu1SXf#zBhD#|87P$Z~=%6SQ=i>
zV5y_)CKcp_aE*((ustpdAXY>z;i)3fg-FQJ4~D>+@Mybf-;rXF3fa`3NE4yp!hNfI
z@^Z8+d21}+F&J^+-d!RQ`c5rZ!#73&9|ysv;TVY6K)t>nSFg+XH&vSZPNfk|xo30A
z3lY=W->B!1kEr+SNAgF<f=;t+p75>BD^@4h+1&8dTAsm5;T=vM8$O~TWV+{|=@=8>
zU~`xNytRCC+!^tY=(=f4XE-z5bC=w;?sJK4u~`(*JeRaFv>YGvciq);ml1@{vt>n@
ze@@H!{2Vj?Y#<4>m5)-O_~xq$1-U&yB&A9r6mtb72I^uKa~)@K*sV`n(F}S+W4-nj
zs5`E*Q|P{&8SA^cb!Gp9zSauZIHxyUYzYP=M|qK*!F7;$JMvBh3d3ZK^7^qo8{-{(
zck34ZYt41WlDpvh^!qU-26ug224Oz(wENzje<w4-5%Uw_L;#PI<;J&>_r%)ntmmPn
zqdxhL42>HCYPWlo<~3rhON?+F^_kXaJR2FG@C+UbMqk4>92{CYv4d<|2ZNyIYjGfK
z6o^=8*Lub-PmFyjYpd+-WVRyF2_7>!ug<rgr8{gHBCIrG2IuliLfCvst`iESqC|I;
zjgs;H{{HxV9$OeQI*G>;S4gD;p5&pcSE*q9n2Us#B)k5TKh2Mip+YeUO|X#BW^bn5
zox=ue^(NX+H5%LjIUuOz_&O*wq_^M9(&aKMblwP*tD1jz2ZK%1bHg#Oc@Jve9lkPh
z+{m-u31XQPqgtdqtzybkH0W7o=`_fZ3jI{s?D(T~!-p&*-}Gu%S-O~<el%3Lpy)d^
zaI4=x(wE8E7|J$p?T)XSaK4lYL8}cxysoi$voz-}j-l3Z3!#m0>?tl)Tkx`4NCJss
z1{A^Fo#r?ScQ0px5Fc7AAFy*dA$h#VMk|ZmIGS>;2m-oXW`ZW-?TWGqbfEFPwDp?E
zvl@R!$5C^EKtkC-+HLJ#0RKK^Pm^nR;s1zRKjPMpxb*|Yt!?OW9cpdG%j<CK8rwbw
zQQxN3^5W?A%j8}QdfmM|dW{e7x>0Pr*G4pZw;9d4mb#(Z4oLM1acWFC7Qv;W0~^Zd
zTCu6Gsk;C=wGK5wu(yT0K*v}w?1WKh`H{a>5N-?6Y&8i=ag?3pY-ndfz0jhg+|R@l
zM;C)x>Eh_6RouaW+#9-@!P&8OcOEcn{t@$kus#E)SvrNwmcGg^PZIodl`YQKQUr|o
z>V(01dO+Q(Wusp<uW|#$V4GV{Idq^HY-_(~{BIB77}svvk`68bRM}aItwV*i3Ndf)
zxKUcIVqlY2L)I99;|mqH?_H;kHm81k$^+kIuvF!FMv1#C3~SZvKnMlY&v27w6iL)R
znj-C8o#`6y$R$F1gkz1)_>wU`ICgDpu)oIp8(cR3A@|gc?m-X!or_5qnxdc^GqS(_
z)q9Uxz-Ir7y(_XPYZP1P;dB>O6nE})2&PyllPzDp<pn*cZGa9FrdJz{z#_2>8i_iS
z`I<HyqZ2d-Ef5(_qf$fEA*|=Atg#R5G+6;vWTQC&>H=^KSv8#}(`*hca_0KHdUi^o
z_{WM4BpPj~2t7hlWidO)R*tzx>?y%(1)Dd^0PS?4E4BTKM@nKT<9t^4)_`t-cCqAw
zi~tjwUuVLYkA&pEp9o2gPK`pc4w47<M(nejV)6(poiLrpYGri*IoP;&4L*veuF&g2
z0h=y1jDWR8J&dH<!Cll*--G`SJ~@Q{HCbt(o_cSimRQ@|+#VO(yCUPQo!`lLYg6h@
z7R;mXsOvgm#Irz(u0Em$BFXCg32WMG+Db7&cfYJo@NQZ#UnhoaQ$!63B<P8WsQVJq
zLndELjFiv`O`^T5%RFOCbLtr}l6c6Z$phDzqF!wK5+$`Y6HR133?tcozL6GfFmUw^
zGyDx2tQBA};Rjg6<%eSyvz%~NlL?1eB|Jz84_H#I5(3>8i=S?$J|=&jr9ILaK*H&{
z_*N-9R{)_DjmF`<F>0AaU&W|#g@(AtX+@Tyd65EI@--E|qizI%GE)!M(9adtfn-BO
z_?wMLXQ#Wr!(g3vOSOVpH(VH6BaL3fpB7ffTb2X^k{CC(0IYXcR-C2F$*HkpqW(K*
zDqga?#Sh2ImZ?Rsu)A4x#n+e?K51=%>vB8NLJY4oh|Nt)a^Zw{wfp5;(+d=`Uz_aa
zH<GO<y1k_DetePaAh6QRjMToP2lznM2YzcO7WFPNAD<WHgXHNBLMuegv)PbW`{Gpt
z1LdY3D7H2N-=3~n?p82|c8f<VmZr~AUtCYW+okn2UZG7|pB2-(oL=k&r!-*aQEr^-
zjrjgTa(mlcdGVk>AK9&cM|SIS;`#mED-zHfW7&US34M)uA`#O@f_X{&)GV5B5VP0n
zMJ4o|>U9y&16FPm&|jr=esi&UR64)8kpK6Q&YKOnxO~3r;$4x1J~rTABMWqC0ln$y
zk0hcG?F+6*Oi#^kZC$r?zMckD%i|v=yDH-cek%4ZC26-&iMxp0V^NG&MGm;m_-9aj
zAaT*8a6u6lm5cDLSB|-r!wHSe^EYXYL>eL-FEDbtiGxXA;LT+lPK^wVa|ws=MrY#P
zc9c}Rw5nbIh5`{vsNhiFQhfO|YQT$MzIAulPp6{`PEue=D=$ER7c7D~2>x!^39kge
z_{w}SF#+&te_yj8x<-{{h1X%-<;zX%3pJHy*DsmhfvtBKiNXL~i7Ob~KDw4%OWp>F
z$DpOSf0$V_{_0I1APk3TlFRue04`{VBLzIeAi{tBtDg*4;2E^ncXNJ7y{pNf-!?4T
zpv6m#&j^ddsP@ibZ6B}RN3UGLfqk%<!yc_3i6C(mVVryFbIg~|+sQsxf5_F%iKHKf
ziAG_gyvJ2DuLsED*EiYRA9u|3R!etqU}yuHPJ~Q-Ys<D+OMC3kI(ASmHpSqmw9J;n
z>KDtrKwfc09=`h9yBqQ6O`IiVA>3m628fYW_%;mA!9rj79u2x7F*LY9o7P%|=-}Q|
z>~Hmrw)J9B!7m^b(SitH0Ea+$zhv80C=wbkiu9u<D!7pGqLF?$#{Q!a<f9PeqmAPG
zu~F3UWK$DGtlKOGxwoc#O#Go^0W{aUy!a#5&qoPJX9<WAEYQZp#URb11QRmE4E>Tq
zj@lTal8qLrOv@718*1R8Xb>Nz9`8%)aiuniF4NK_j1!xrBo|WZ6HM-+)4xdg4l-v{
zx_M}^$WCbZ6u3FBJo6{fbCt)(Rkmauc0eXJXOH_xj{O^Yk#1}$5wVca5N>O?*<9j1
z+B?irD^clY^YF>$O+@S-cAN3Z)2?O<8m_OiMA*c{A@5|bz@-9n1t&hXuT4qJXg7fJ
zH4_3Kg@hi2ahrr|@xT9xf__!LNLnP;769^9<>l6}*aN~Y|IqIqO6jbe=Evu;NJ_U&
z6s1EQ<&0P%T!-~C?T-9{78cg8$DX1t0fn1W@86jTEMPgyMziun;vq%k+)eo^U9(Xk
zw~Le1AgkMH6LrU=+}#Pg4MosR**lbIIxg(%oVlaRZ3Dh_jwH|sv7ohP<lBq!rS>A3
zMYguqWbwFBC)74kFEJFWl0GG!hbxK#rftmhCM3=PZ}bT;*mPyJjn5b^-(opVR&zZ2
zXoExvz6ujjZ44xjP)|}4V{<@5h}8>xS<c7K0_k7bqTG_LUZlkdkv@iwSQS(;wZp>d
z*_@h0);~Yav+31C2aAbm0>(~}ei-aYLv2LiNcBDUslWCL2RJQbo??jwSk#3T#Y{8v
zqkFVaUeJz~?o_y6kGi|#fKNjm_<X<37QUexG<<g_R&|HcZSG>n_ggA&eFFdO#%jZb
zPqv`<t+pXU?VTuGRG_ieYpp_4ift-RM`nn}V3^<zJHWt)X+OEc4`{5oXFp|g_#)H?
z|MG&f)2jynp6CIp?)pL6@zm|t*;;zd9XsG+#<3Gp86;hR`^JKJfq&zqDxsYd;QJ)r
z&g0Yc)gmSF^nZVrq_4|-3JhQQCR-pTHF5i~HOWeQUapp_(NVVj|9$k&r}O{#`LqA|
zpI3ic?(hEX?C$-ld*~yNw3=l3tWVS4;t36s?WFHkXE109gKyLKc2|^zxlW^NdS{<D
z>Oz6UHDwhfAvZvrSfpmlN=;Sa<}4z5bqU(KQ8FRj=0|JH|HnDs23q-}gW6T3<*D7y
z3$YC*xAmSbmc2#?-+jbt)QKTV8*=QRn&2<VUBoFnI*ZRn+y<u5K5VH-V~Xh?KEdHP
zAX#tp*Aq)`osq@0huG^DM!6y1UOZk<v&FzByh@!@xlnLsijhAjK7=K>)(&$_D`q16
zorG==VVEN8&AmyqB4yqc@qn<{Zf)2i&mE%K58|UGz()k!6vk)@ePI}*eD={#;{PQ-
z35){J;v~_)cxUTO1Ugi@eEgz&A8zoXE3yu_e&YbzmEYMopf-l4&_vg4A3)<+PtRR}
zg1=^7kgQMkyjDK_hYeoT#XZ6oxtP3!UHl}P(^LJ784f~sZh-aE436PhUN9D}&Jh1p
z%g_cOWm>{|KAe`T*%VPmUR0Unex`UTjI_0fIJ#1BE@<RqQz!@jac5A<hJ>aPn%Jvb
zibio(_BNZWmQ1Nw!MT_wAORN!E)ry6QqVwE>@r_)4(LT%yfVRwVxGHQVic8yBMuF1
z_>mg?w-U$HoNHPw5i)#&u0D!yt~~s;1yJV7*CCUg6+x)Zw4#npaDd7ajOBA5bJTva
zvq_GH4&;f~6`=XIn4uVx87K1Np8jzkejM6gl=K)M*Nq7=@ieD&po;wLy#c`cy!@WA
z`2%cq`38>MISm0ChK*X#FA8OJT(0;R#U?t=kLkyKl_L4wUi(U#=3Udap+nb!BA9W2
zF^U=IGSZ_zz#oU*6JcD}z$j04+rWl2_KuN4nnGl(kFrhSggm<IG(TyfttcdsQzB(=
zQ9P9|XXh|6N#>M{4LoAteUvRRa!y{%a+1{mUjHVC(&gK_$j&}K>`t!jl7o+Qxp%`i
zDe&cRHLViP{|lOONROW7sGXw%ccj3VUpnJ#_IC0JK&Wwujzrv(muQri8JoOgET<&H
zsH`@8Y9QQf45$nEsSYhwHEhkM_V4Se3Zp+lqu9>Qs<3_+^ipM!dUHxNZaJC=?Pu7u
z{@UDU9UPXE=?d>7{Me!iZyloy@-=XfIVYG+TTQ>L#CDU=S`2%JE|`|3uT@N~yn05(
zB%~H<vTaDMbOxsaNaC{=THca!4Rm^^@S<`#ima+s@KT}gryoO&{=Y2j<)d+ZnIFCQ
zqjVMO;YX3q#g2Iy)Y0ZE_K`8TDw%K;N_Mo$!h>S)1FKPY*Jg)})OL~K*2EfZYNPjv
z1bg_;V+tjT|9pl2OnO?BJR|B$X^;8EXjy)XRzZ&e>+}bE5lN!gLCZ|;j_&g^j2Khi
z8{I!_R9zF<dps-41%22<I`_Mj%zf&!r-lzN$2IXVg$>$O4ANcoyi2@Nggt7g*o@)-
zsiI>FUc7?nr7S0l1TVE8E+4zp_0b`8DHU#vTuNWPz@^;y1>=@pPK5ief!u1`r@;lY
z7Kax1e+1)tP8Ph8as7MCON``Ixmqe%yJHORkrLlg<`153u9*TiEpC#L*vQQ-J-)j^
z+#t?#$dah){Ol~l!=Q2_H!x*(ZJq&I5;M)LfCYJ#&$DTsj>^T!HvZavW*U9z8vTQC
zW?hfLTR;^J>{wm<=`&!_M(zt2cTXNovg;TI`b61C1!oCc+|ZuM4=c23=5`gXM#A^x
zEunklhzFs2Vmc{o+uBj_gQskJ=yRy*hHzoa+f2#=&QU*pjkxS!F!0)bpdBUF8Z6;#
z4h}aFhMWK^I9KLFLmhhhSY*N&<R#5@=A$6{cfft{x#y;;3~Ems+TxGh8biLaDwDb^
z>IMwVzw-ITZ}cO3n`<0QM*tr#_WG+01MWM`xtJi(o!mkBIX<!UgE^(z4YhT#JeI^7
z&XfVA&s?+N4rBkJOI2{mY-}nZ0Ux^8baKr-yin|@v-EAB4G!dn^tecGFle-L)b{b>
z(YS*m*~=Tudn3tJwBrqJ2h}AMei4bBvNCpff-{g|dzGD6EKgyjOf?=QKQbP)R|fDk
z%7;w)jpdsXkS8oUO0&{gV#Z6P)4>6>xGQq+T|5c!`>y=Hdw4i@I%I0d+&t97`s0x|
zlX8JvX~{gM9ppvtC$GnbBpVJ&QEV_Od^2h&%>-Mue{gu{R|;{hz0oW<@DOykZyva!
z@hJW(Sfs8v9WI_krfR$X;eG#A?2AOpBo$b>)p)_B9~`)xg=!<TO*4MT%f7}4`PX-z
z*UwF%nSpb1HX}C;g2n~`atwSlPZjnpmaF*~uOkwmRT*=XItb^lKmpW2K)@wxl~uTQ
zDA?2h%;%81KiECIm=*HYmHiLSLbI6Mo)DtY#W<u&#`u0bWXUca`#{p9j=sYMCY*%G
zKuz02PN<b0Q`(4(({!QSjZC4J0LQA!km^SG*XS%+5Daj3pwuH1IcD}}D<Fi9GBYke
z374z}@-N1Ercna<j@tBvj4Gc}1oF6=T3t^*l2S=6WfxbADt*m&rw0TKFq;_yl`30e
zezd9=P1Q3+NRM6@v`2kv!MH;^0hXt|)gBVPudzPVf*x)v(NWzY<K+kz_DMQ9<vvv7
zD1Y%fNUQT=@(fD#QOOQp(Pj_+pj@xSsW0&jjr`r9S&a?js}g^JLph2ltKh{VLAz;n
z8V8}gGzAaYH~0fsW_GbpUwr}8qI^U9`5Z?7WU(k04HQLvp{4z;tpWhuZZuQ^RvM-A
z`Ru%pH+1N(V=T<!dcBzk5C8z2W=2Xr6n&3@4o2-`V1sE(3!^=C(R`83vtn9NYQA(j
z&6iBQjIqX8!4bGH%TvI)wNQujAro~}cqgtDcC5M2IN}RQ=V|4d#7rqxe598FKoS%|
zmlFh_u*<oIJsn_3e5u;N2hDfi9mbPImLcef*>0F`$(^JJ|96L_+NdbmYcz0?_Fs;0
zS?Ib9YlhQgqjQ=oP=e+9;oXKJ36+oESk*yI;B3Pa)YzN5Hyp#ynCu@5Sb4bn+|=&h
zBC@c%gCR+4T~9Y0YaeaJl=o{j-OsObyf^G`WSoYCK9xIRv{K6|n;iqjeVr}dEOOc$
ziuUw2rv#a%L2hc4e8(<Kxcbn3N@*```~q|h!m|sPZ$(^&Mf3~&lzId^4C+iZM%uHY
z^xly_k`wU(`1O#m({idd$2_sIRj|>CzLq<0cmP?-=WbQy#uF4vt13S!6dW?UvMgiw
z+NvVC*!Qpwhq`HReU_!YV%XoXaVxx9<wCKO-X5&ybIkH~fef$n>`h<}H%pJQ8D86I
zIjMTeg`rm#kKvNMLazsf)_k&If+b*X7IIK?s0(W`kHdv|G@JEtG!7vA^8Z1<qJHmB
zG?2jvy5r^n+hfU*j3-VWn1S#t80palua--8z>^ZqfCh)eYw2@USg2|iq_o<)h`$J#
zb(zj8)5`{;78=6^rLD|JQ42L@h(}^LCLheHZ#8HqGiV@#`0LeBDiltPZv+|=s6l!0
z0$M4P|H{r|#7Ueg(fEpu2%alXQPxdJz=ScMWuOnv6G|V5u-eDh8X`EWLJM$^WiwzA
z&>%-Wq=+nK(OV|x*^=RYOpS7uPfpX-+tDQ5Mgn6p%c|{J`mggX)Ats&M=P;4#{;@3
z-Z#{Bn+IT_1nwmUV-0}CgNl{$uL&f_NbW<Xwq&Y4RP~+6)CZ!sG)RpSXPb~`Neir1
z)F2;KxCwHvhh{7nqSGvTr?y7a(nUzl^VFXezPs6LCp}|>gLZIuH(TgPJ#|m;a}h%F
z73Lh@{k)Zq6d2h^Mp7I1THtDD&}sCtEa;>QUsK0gfMic2nJ=*wqO+!g0xKh1k%jTh
z?EHR@ON4rkO8Ev2;P|Et&1i&tbpUaE+#igG$@ql+kktGX9&xDC)r6SS{z)HR4F-;=
zdEyOI$#Fs+R`Y6ZO|oldHUS_xm~wz!9lFBC^9qKs5iDvPdK)-`6EZ^*^}BQ)z$D{C
zN$!*dfa7`AYlj@=;w<&9HC|EgO4FU)*PR~VE8imPkdhwxFw1xWV`20SeYEWF44~T2
zcr~~hzykWrS8R6>n0d7hy#|nYE^uCA5UKZ{xd0+tY#kuNPTpiQ*di9Y$zCzw8%jHF
zkW#d7H=zc@Xb3;bzBIux)5{tHbz>587RlHV6N^<6sQEBZythcm8fE5DS=qW+kn85t
zI-|tqQu5{!%HFC$MBuN{gic+vi9AjmODB_TjvRPFwy0-l%<T!_MK;H@A&|t@zFTay
zMU@yx`el6NlmhJ-g9g||<kF=~V48QE#imD?mdPNBAr8t$^a|j8Z0rnY9gT|)ucT!R
zy3~dNqS8YnGB@E#T6nSxJ8vl=d(F|Z%Vkonj*s(69x?ZRAM!&C41V4mbCD*uuZDdX
zoAYMq0D8<f#0I7gfhZht-(I_Pm>dC;Zd3`R00NKTze$@mK-vfB+`l{M*CH!_+Eg6r
zq|J&);x>QU03_`^hrHen2JrIR_=ob-3xLS)Fajb!0qRn_7$yvg2?js$Njm<Q2eK($
zN37vAo00vU@%$F*PHxSrSmrZUZCGcOH)*~cCudMOXTu%Qk3d6nq$hwVn`AD^J!;d)
z0G=dN1Z3>l5;F#pR?eB4aT2w_$e#zK{ZScUm4(jXJj+s}f5f1$%SD>c@OL&nu~eqa
z00&mCmZRj^>Zr=l-DOGgfl4KD#^Tcq*|v$g8#Sj9(QHfmoUqA&o!Kk|Am5kE>;Z+D
zmC=fIhZ*eHE(Xd&#rwnRRG6Lj9TQ3(Ms&6^P1dpI@-99tmpsZWF2P`mep}+EPFD*<
zaR-a|JHSXYfkrTiBMel#-l?TFW@#PH8j-_+?1Knoy%XBvw;}~cvb)B8<r$%#bA8VW
z@61Matr-QFPR`P||A2Y&5aCCDwmRcG=d{u!Jz_!BQO0w&N^H2Ay-JQ#hdG%ewog`M
z&2wryiW}jj`Y~OHnE-rqG}lR4p}Q^2ZL*rBym?H(VdHNAz5rQSVfw@zK~r)(TfNoj
z4aHsGrWp2>Fq|1l-!z!<M~wBmQ<F4v^DJlv@BqE^hN{IuBm|GpT*<h~is^T-eq$$T
zCiyajKO}zqIA0(!B|{?f`34|n1>Zp0FOSN%f$UpN%k+v?f;&TBjL#?3M8#2G%s!jw
zMa{?@CkX66LbM}H;P7pE;+ae^gkjD5uCf<(2f&*bSu&KX#RNGdJSb0aZJyDaes8;4
z0@6EEj1ZR{rPC=D{5G$azz!|?y|b*U(v!?z3o}9>4ekePAr}sPU3PYMlovY9-*y;~
z4Yp;*;s~0C2BOr1)oZ2%`g_jz=IOL<P30v(UBY$na;S=vhkg}n%4{O~iFn){AhO47
z@e;Vc%OV&@l~`j)2*F|TExj&j2=Rvd^y2y8yMY&m8hbLp8Xa%QX)Is^4a_xzjEvrQ
z!Ett7c_pTDX8Uy8uH66&xGvn<*|S96=Q85I{xwk<nZ1KzfIUxl5FNF<k-E``NeIA`
z2e#H;B<HI^68p`Zv}4Bhd1JO<;N=@Ax5Y<s;M>%>@?Y$SIYjZhKIpYHr?83(`RW(k
zYsfB27K@cVz50mnHQX*Nrk_<6_!&tXWjqPEmvGG9?V*M7^Cehw$iPI0+_FegP|x9d
z(+v=9B-@tE$|IbI8!`)Ba<kR~Z6)5qRN2yOg&dQiI}CBFB6YH0%wM-3E^_IMPs=+8
z%g7;kcjHQSmWE(%3S73nxwJR;`LG8fs`kC!Y^OKe=e4{1u4O~oq-CL`%nK8LHm^_A
z4FR9(&`Fltt}8-1H&0mQn*u8bL2_mbG4};3*Bx`DrgUMTFs_~LVXy6c)1rGv2J4#f
zwB2l4j5a8w;iQ?#76$ppMch)24Tix5R`AOQo@#yCVbD6bTDvCQ0IfgCbqliT1<-9<
ztlN4Af=MU<<)BR*M#Zj&zog{Q8}E48v~cZ^$<4{T<!=mpu~>c+08Bt>uVF6gb_94=
zV@OR0ZMJ94E7uv2tpQ^-Nx3$PZxNJ#osmI>@TW$0!JM&jM@K0av00Rmky$7_$iQ=*
zrWJ3l;*TFW6A&j{H=-GB_hF<q$i{Kz#Xto1eg!7S%`VJ!YX=^wua`x2XvctZxbZ-O
zP1ifQ(72rFc$vLjhNfWjj$$D6s5BZ2cmi9t)3V=$kJOq3E&6HV(abom)_hy3ogz-s
zfy`IkZO<@H-9k&Rn0tupvfC*BePUEOv7^uH6p`tUqKDiIPxE1)^_XC9Q^}x{YkiQ{
z21eNR+MuigT_<5(7rnTVBY#sj$8*cA-4)Zh;lSV5jk$YOH%4L1?m81Vt7ZN#Yr<m0
z{-SUrp+3AVXRouxSjp4dqQm<UgD2@kjMOmRQ?)Fu#9h0b-zLM*sgbriBorDQ%6OIZ
zH2LZrAzexeT%}uOXK&Ne`i4vzVUs`D4t%8ZW7J)v)|u4QN37eECFjnlRW@RgL5%6c
z*ac;h1!`>ceZnNtlA-z>j_Q16&r+MS*nv4r6#dH5D{^w=W5e=yk*@O)C{f}jE+F|4
zpoPgKC%L#x!(F~28j(NwBDssfZ_rlR)bAIREEY{;yjOSIw8F0F=K~*(-TNfwyOu7~
zz*b3|W9#AgdngE&Ah1!}rg+eJuC?1@DhcD`lvDm?=3Vnli?U_IqOx(64c7{@B4emS
zf@Lp9CV-h+IcTccBB<L$R8u1w>PQNY#5Bv<dR?GfsTt`vKsI_YhUU~St{&xBDA6MI
z<a@U7E-$_CId`^+H{*muZyp;Q@!(28l^+*?qcG314w#@gec5^7M}Bxy{3rm9(;e{`
z$neyQrb_S0oZSnh+IR2k{GA?H%>>_{wYYM7!!so=U}UQNSt)#yXu}wTpmt~k@M{j$
zSrepe-veUHSI+wuriA54E8l>hg49HfmY;zW^Y4LB-lx~FWVS+WDZ;0c6rr>RkLDaB
z5E^pV-4*Yzc?p1F>^_W@<yozHJ_T_YQ5xl%uT5K|MO|rjr8=o~&bcsxsAH}#!0;p-
zX;G8MG)ZH8e_mT07L{Zcn&*S%$WwsIXeH-6x3gQ{NxC=!Knx7TY?e*zO^`*dNn|#Y
z!(7~f*mt?HR!HKAG4^O*^3pLhYs?1+chYyg@f{v1hG-7FU`pvVtP4)|7EKe8dY_gs
zzT3Bpa(Vl9l47K`2$1+afPwFsa_)H~y+;?9TJ4RXOrxvEFbN2tn(qpkfIG^Inmc6*
zRmNn@r+tr<)4b2*--h19rcoc}v{>%#e!5wZJna~kOVZ-8os2z`Y#kT54ylV!fy3C~
zVthQk7dySeR##tVln2}H)ld1!>9UVR{o*8JI}<KAh#CG{(*=)bG0>ZwX@U6n{J!$D
zdAV2$gYwHi;qRYYm=QfpW5j@?T4Js%*vMxR3#2wWV?$uZ65JOWRznpTVT~Jj31fXZ
ztPMJT*LWQ}U$}dBjeYEeVpB#jm7x-cOlFc%<-~ZZ2f|gAgY&G!KzeB4L>UNy6*!Lz
zUE3^T9U0ZpFm|m)tn#DpVi;?H1yV)J<t(&_byoU+Xv5gZ?EYAWv1S675r3ODoCG`y
ziLcmFc8yW#CWf*ffaz-eAayofMciIh6y!Zw%>l5Q(`7v{*^srGEPz^9aXVfU&2Rce
z9Atj=sh#XcX@FD$tyZhtc5mp~Yc*P3WH9IFa5;*#W~-P78GUSmOT=LDKAgn@8Nkqj
zb(9wvdY@w7*Q{9WEZs23j&&zAWo<TCZ8F`oO|LcG^o<JNmr-PB?pU*sal^W#Nu#v`
zj++*mf)A3K&EwS?C>mqhAA*ke!;Zs(&h!#@v8j}|S!M)2xe+zz4cggQw<I)qWs|Q7
zx_!e`jZ)fHs78n@ZsK~|8olq@LI*)%4?M@07?%)^gk@;vZK&kY(z)MJh!#&Gh=XoX
zyqGyXkIi}$B(Mqpz)S;n2h2iNO;U_zcdTIp0Ap73*1e3sn14w=#u&qZ3jt^R#WuWc
z(WT7$y>AF4|0AEBrNiW}$&XDg#L&K96s^2Waq6cbmOM^Ja{S0juA$zg6m!fHTYvB&
zgugV~E%);>r}gJ0z!e?Js{OPYAtT0xX+Bw3d>mcuky`k*y+CJ$VlZ}8FJKXhW#13s
zb6d*v2ZW(?1Rs0A5HB|QrAwonFD^VhQOT>0F0ocP`J;&qp;Btulvb7#!+1X?ULkAx
zor9HCIGZL(Kc+!k*Mw83^-tsZrh+~T9S5hin@9pF2b)oyQo1C<!0+WS63QCJ&AYH`
zK=z<>_?x`StRaKx;_^vj+pYxp)CWnL?B#&r1La6QqizE)5`8hYkZn%bCy(Kfi0hqW
zrIhGOr%4m<_D;7|ox_d%u{TIxFFMzIpRUbNuax3#3FHxKtAtjQRkZ|QRnIt7ISVE~
zJB>zu{+AjOY|a#P+j<!+Cm6?J`+xhRI}ZmhU-l19W{1lG{2KgudxUgKKg<NKu<1>%
z|B%sXq&pR3DTwOkMOdO{4(=Y38~Di*UBD&A7=PJ4JWRfnQuhv_)!NrD>{lI=sXc@)
zC6MX6)4;p^^5x0$-e=LwP0eNy4G95)yh2_OO;SnG&G5M+bc=W1@mNJWY_X0>rEsUx
zI>}N5yrU7+<8DI<c?g(1o<`uIgA9SqN7m+=qU2A!Q?XGQh|b(x%+LT!R1$xjOKE12
z%?GGVkTM|^)d;EXb#_@dm1x?y_*AF|6ORg(dKXQ!Q_fW-A=rg2Og)AW`on~j$vhPe
z`J_BMqhxs%$xCd0ONFCYl_&WLbW0Zf2@;}e@HRiok<n);e<KpqICl5!0v{#&I{M&V
zUH!`QJR&EQl+5mT$kAsv*`{v^J{%3Sk^4H$Z+$Q<6p)ZIdbx)U?h(wNcMCT|vV*>@
zi+AB^^#s#rnc#|igd{?Uq?)U}lmN4oHZ}CCID)(NYMryhhKgWD)`A=z!W#b-qjr6P
z|9px6+%nO-dSjFmj5&;-;fZsV8%*a__|NCxeVY)GkY6rnd?PVp!U^(ULjCfHHY>!l
zMNqt{rO9zFJeBI}?R~j?cZRK*TWjFdqyrvLjm(x=8W8<3>Gc3#J)^g#&S;U%XDMYo
z`niz#{pa!w&KLi{=f|+;ophcHwN@?0srmAH`LIWYkmiwXy{!V}`aI!f`6_47XTiz^
zI49dioO4p#QGF{OO{Y~X_A-&U#`WHhF+I&NhIGopbYJ%WR7GmeJ<i%hD>Vw7bZR%2
z#8%6aP;Odbn6ufn>~)YH7Ig;nu+Lc(4|VL(mN|w>5m_S@u~g_D8@CVUdR;0N0Ihiu
zs5*c)px|D9#6(_jlmk*7RP3%h#VSAUJYTX!R{%C{hmfNs5T6uS7mBY25zq3sd4cI4
z+%VuSxgR>)1Mn1XtPKVq-$Y`NzBGk({lSQ?PQP0V9mYu^?rHgrUcwuDbPR2MhX%AX
z027~-&t-!Sg9Z`NV7Tz)<dwlk8;B<tcbeY~eBFi=M9S)>ig0jKHD`ifg@$uZr%_9E
znkXX)?jdGJH(8bon+jEgi^_@F1P}3Gs*PH0E2_W^-V#J6zM)>mEOlqC46dA<5~Vwd
zHR(Zt7zZM2<0S|ekI-+}+D~bvu&~=#lc7Z|hhos(+mH|zD?-EJs&Mya6ZOk5TjMvL
z)rZ;Mkwp+egHfTNcg7#FGdjiwe)*E#ynGotU`wVcSB^!~(^yFp{gLI>o`-gl%vaT^
zSZz{#muME2T9Qd+>uK(8LtF^ncerI{YIR3%o7RdBqx3<^k>!+`%#*d6iOxyA7kqqo
zBP=R|r=WtcMW)@oXhFC3=tC`oZ*w(ou%1=ynTm7JNN4_(IVPm{vgd4LE!~m5&dXIL
z`;Ux>i(2U-t@{?}V+I)GD^X|FiIp|d{l?zgNKvjslDDD+*6bKi@Uq{e3D-sJDM7wH
zdkY(hcY8MdT7k^kv58Qb(C8MDmP}Dy&&pkv6feqh?vdeP#E|urI5pwrGcU@-%^Myt
zsIRDC>&x^XnH<(8iyai>H$-9lxyaup*}R-sg=~K}`FmQdQdq3r&;PcQ?Cd<C|4)8?
z{&?`dmfi#r!R39^*MwT&4<0(TN(C2Xs3ECW%W~z&vXrk#Bf^Xe`;GfKoC0Gq-ccMn
z^iK%#dkWLk=bvB0BH+jfOXDkv?HOPp;|>SV5o-V`dBXmyW(iDimL{1AtA-dZ<pnFK
z&@$#klGmN;1U-v%n!oj!FnU8g*w~)pF*?bQcg6tQ%y;x@-Q5{mC(l(e%c@HIiy9*Z
z;^t0apQq62Svo^2ev{-E1%g4FpV~I#)_+<8K(<hoN&`+|`ZzdN^5oe)g3C{y-6!+s
zDtlTiZPtz)PaPsyj{7(AGK5$6M<@C6bagb!%k4isxmGz*M43y2ZPqK%YBASGkJjCj
z?4JNLEtOkSy}4HJay)kCumnPlCb5%Q+J0}Rt~~gxb~j9M8>a0?Qy<R6GOOn4gz_+8
zV@TS6hCZQQL9JU6y8&7U4|;x+0~RhZEzR9sItD)=EX6E%_a$!t%@+@eyAA%Kpz|0U
z92Ys>8+u-eoJ-^=4`uP3xa(UsJbH%Hs~#28|H&35>Ro!MD$=viq1$3t-I^YRY6+Ju
zlP{MRk6}*Uv2%1wt=64jg)cL>mQ!w$tB~5;C5K?iKHD!Wa-g}c%~qj<>NBR$9ClWc
zHmW|w0^<8rV)a|?4>uRl&z+@nPdO*GYl=BF4jTJmt);45EWbMM)Yv*5@Vb?1Pz2i9
z#*&`2XhytTPM(gYi<QO#ZhU!Wu=`QAe1k#e$7gvV7UO3r;F~^>K(iHE(GJL7gABdP
zA`27KB0_Rm=W4C)aGMVIN&yjA`d06N*4RvAR+7;!VLK!X&k@H;aD5&q;#?Xhir%Pv
z<!-L2zcnubUI$&;z5te2OMpC*@lPQ8wcK=zo?z_zI}&a<FDTsbysWAmxu*c7)T*X$
z_jmnB#cQfMxu#i=Fq*PUOpwMGtpjEZ4%B*_$i*@G=>71bDQe7|pdC6t_nTU&H!-Wq
zi?kzJys))~v(&NG-O*i`<>>CF%|bnHcyu=oIi!6!Lqj|bL))G&k1WdXNTPLy|FR@d
z%U<Af`j!Lhna`d8(li>AA{uo*aR=0TPtIG9X?SSbmxj33u!a{$lm@xm9`20?i}B>7
zS01$OwYjtO?OtTkzKig?i2RXPFE$zK+YQ({_|rV@oUt^?3#r@Cgtrh}eJ2oRhE?w1
zAKm=B*p5K~Z0;|~E<Hk(zxX+h#lL%MNzI@5NDXRE$`VgEFYvel_1ULtw<$Iv@R9tI
zNWpKg_kM3T+d^a7J{P<LWSp^+z<4F_KRUBb846Jq|C4{bTO?5w8lv(;6<FGdDLc3>
zHW4SG7kcaI(JbTR0t^{nrIttrRwswkbeUZ&g0b`w?PJ7Tk-|1;#HW;e1gR;vM4_2Y
zJ5p8kIxtpix>i7(^Oz#7J3&j^)~*v44>&A1?Z$33ru>_nW?4nV*<`Ugn`cWun`*UO
z9Ulj|R3qkSy#jdQ4F12@DZw8g0XhyYsh<p^rhBr3TH6ATwAO$fSOc=~Tk(iZ(z8TO
zZ;bFhY6&DuqSPFgxl`r)mVfi_dQ6gemQNPtmUz+P1rsrb2<Om33q2Q)^5p_WZ_{js
zMovVv16N;Vi`VWDJ7$^9V93m6g6Ry{lA=ofxhj!S#LJx*A{!`YY`a=cvj*SFLgZbq
zG4>7-zelTlHXWj8x$*xUCo8;D80C!hGC%+HZN=8ZX_dQ7Fw^X4b#j85TP<CA^XARy
zba^(rzbGfKDokCrofX^56-F`xfUqrn!$ktDS8a0-z!Fv4e_EE4E&jb)%!2WMW8ygG
z1*bm~k3Cp9%v;6|J7xwj@GN^^J^XoKEbFELv2p4aO}*;a(c{wvren+AF5#Twy9)N@
zsC*mm%+7K&p?cIUKs6wBw`~(Jdu{{9{saygt=o07=_sftux1vD-ZYvZQ0Oc&dcX&P
zOGX+sFXt<6;&e?j8(A{^l$|_zJ6DDbeBQb4E&g%K-JK5g@%F+vO$+j~t&MQt#(VuR
zd8E^-^II0eF7=|ORWd6l>CCE?s`bNE7g$EB-n0$YCJ?uGmFwG|)`eAuhv{DE#-Nsf
zvtl&1X(n)3I|f!`Mp+b_#X7%*rf;e1UFEJrwz^El*uz-5uowym1!BC1LP{?^*_Q|T
z{BzjoWV^D7LmO6E8M3SKnicc}Pv+ykilET%oo2IHnSAk=eWoD(@})v~rb@rAbgIW7
zp>|@)as6r3E`~ElWTVKOW5xyan=;0CWB=ml%P;=2CD`*XUw*ND^kt9aL-Ynm`$aWb
z<n!g1u@OV<zs{C>T;i`M%RQ>!KKS~b#NnS{f)?BYoPejb%qvQt@x@=z+Fi^MfTN<s
zu(gPJFoRi6Gm@?NVw-;B*l}a_B5Qy>(3H7VnDc=(ju-LSVQlWuFc#w;;6E-)KU<gJ
z$+J(@+*9)Iq2NNI?63xQ6uG16)W$ZG573`~<;lP64P&AI8V}ywHyDkMoyJ1mQFFNI
zOBGxg&RlG7<A?4q303dk;+}6wNFUmxoBpt62O3As-)}aKIyK%Y7Gk%J&4fb<C~~z0
zFsAKaf9)T<s9rofyz_AI?%noD3sD_z&aY;3-UahKTVV+D)2w->ro_$G9U2S%GVwDM
z@?z)uhRgNKKS$Z`bhW5NJ**86H+grJcW-PlrCy&(<cs#KIDBff#+O0|#_%3yW?RNR
z-#!8wd$Mi9TaA9HmfrST<blvUTm)dSSx{}vbB~i-x}{rWxxl06R9S#S(<2l`qa1=?
z%+n&98KU7$c4T<va?!eqh9J<3C<(t(;!?JdlFdZmUi5^L6t}|*;n<v36c=J7%X(9<
zYb|6_Y#m3Q{h(b)bJA&*L+7%WFX05ge2LZzJ&Zo_k~Ke!ZWU*ZMegiVATgFEK}9Ip
zS3@2QLW_DRGYIlSTV@p+Y&3_Bo$0YBv&f4XMwzZHHS>07S&Cxx<JC-u)yE1f*(Ke3
zh5;xNNtsp=XPQc$1Yl|>E|_#Rdb0p{`VDmS?7W!t(N}2nOPLq_$(t$0d#aXjAbSIN
zeBm$d-=954Nc%#IFK%Jtj$03C71asAx6jelT{aPy?S=M|vp;%`!97e{NI4E^V<LvJ
zuo5=j_TS6X0&h!x0)+H<3Dw7eVp+LmiNV1yP-j#wPPUI`<;nIh>FboqqpeV6u<h#N
z+J2j^7HRTz`3f#y`8tITr{!~4H@}Apx)6H?<T3#zP0MX4sHEtX!(qY(huF=CH;6^t
zH+~)T>$l%fkFDL!I7rP|UeSS@a@fUUg5Ci{%8wD1rZDK|R-_<ll|=}6Bedc*G0FPB
zzO(B;w8I{F8KeX)G}JQ8nyYQzcuscm?!U5g>xkD<?7xXvhJs8r+oJxsswYhBV7x-z
z1}x6oFoT{VAC$eWehbUK$i6SXL-$WF&7Uz`zGdLcExk8#y+!zVlD#FbT=r*0Y#x$}
zVsiSmrGTJi=1%*z)4tD)dqdNg?>D%hHzG4^D$@5>fy`2$sy7%o`AKEY5WvRuo%Tbv
zzj>^G7OEft7<8h}H}R0pvg2zdrgK)#v?;=1{WqI;sJY0S%#Pi>kU`1M^7t6esHc(&
z+91RE+ROd0<skH{?2@vHU^oA?z$-|afyrz&W$Y_{T{F6}CcmaTW^le}LD)Hij<Owi
z%-xFthgll_B`#ljh*DD#-mIpmihPcOWKT(_mf2U4xiQ{?L-3*iOx#DtK~;cXw+8qP
zZ%I5~k+&;hek6CLBRP_E|9dYA>RLC3o$ukW>^*JBm=x@A`z$RTf&JAE2hO*FsAyaS
z0Z_cH&;lKA(Rlg$hEV12&w#KyLCOGSkyANGkESIjgqf};q)7VbDqm!kQqU7&LQRi#
zlX3vjp<yv)&YxS602(a$PR2aCaoi)An%z@&-#6krq#-4&yrNnKL0M}tj#g8rUDE|e
z20?QW5l~Du^qpqn*~J{Y5}6q>VL7*knv-%aZdW(7+CoHY`?ZLh8V{VNfR=1YQ^I$@
zQDp+<h^dEu?7fIrOpmT(A1N+d8lWb$0;dRlwj9M(yn|N}|9Xr-U99H3CP(MA(epV)
z);pUo&t>DQ8$r)~@6tUqGD-()o?vZ;EMj(N4DG}d$Id2R>AQS7MRvCL=iT1Avd<*|
z7?s}hsi5NpQt&i8Nk3xA%A<069?r`~GH6^>hsE^X$`#fX2rY!IP&EDl9CB#SHFaw(
z!*a_*$ZGAqR034(7pV4Vu}III-whG<d;ajLUu7bOVjUD02poiVIBkIn$cp<1$LN-q
zrvPtk&%V*KGN;eJ=s6Av&SOt+)6Zmt?6dEz$Wj`t8qI#SYAltm8i%ltw`Th`{I~rl
z_j;e0M04d`X{5hJd$n!IcIohds+gA)=^|U)xkC)(VQ;|K^Y*q|kLBXLmc~~ccB~#$
zk;X&2u-=`wV;j^HEO`{OvycGl10ZzY14EWBtb6fs+`}wpAmXv)p+}G>7SX^+4E%gy
zgN-d>G@S^h&<tX{ET2ih0aoH7dFL9dR&$&rw2&3A^F>+6DHg#{o%>E%?@_$Yikv)$
zj*T>h5D_xw2<#%Pxr!`H>Pl=AV}suCyr>%1G2$$>CO@2w7&0z6hHW*}CUzJv5U#($
zU)*q|!Uz+GVH<Jj(@1}0-vh3-@wIGBEw({nn-wn!2j(I(pkgm!8gy{2Mvg@g(uo#A
zCneEK)e=R}PS^|4%U&fE37YxjSbn(<;i|@_`Ef-5MqpZL-QqiEx6HK_%X!xl@*KE=
zpGu4kO|m&$r~bX6in(tL35Ut<F!^*)vrC4;pAM5x>bA|cEibPW5PByWV2^6~Y@PuM
zDPrzF9ISd=D>_E7l4a&x&r_CP;8Dlr+`+gbyC&|)-7zi_3O*?eZ`bjWqbPRDLmSe7
zqZXc>M%f^>qP~l^Kv)SH;`Pax561Onvb8J8x2(|}XLVu9e`|LbOZ`fR2q$9D$Hc|z
zio{;3jYj9Ulvp-*?r@)9B!v&evC9MchW@*zDY@+phIZ|M?Kvr@UITAQlJK!1c*Zn5
zW1Tb6&Q)Ig80+ao!Bg;XpkkB$p2%M`!r3z?=C6Oc_xau?(P|un{{BPNtcs0-)tKVl
z!_}A?CSc81q>c#!(KH0DF=f{Ttg&5OO~{%jI$(`ydu_;?{}3h+G5o5?{|PMk)34bU
za!wh&#-4uxF6Ps(U9=OGnIpemADsgpP7pkiU%FvM6P3nKgqdrHqku)9PWwFy@-<n$
zj93uLm))IDdd&^gs_pLFZ#*1QhiB+pmFK8S0#Gy+k~tul<cP@H1n0-JcL!SeeWKD@
zS8p2tG+mOkqV6F|1XT7GQ)uPOAlDJe9f%#Lpf8uQ!hI}lT_pIjJ!Z!4N*^;5d^t21
zyP7DN8-&4J?>5$!5i;sFb`FQ{B&#^%BkhKA<r-)OnDO+YhW#(-O=d}u$>~DnNP=Ii
zWkl%!03qbz@EtUQRFl^XMcC^5?;3*K$UL#d-G<A@lL?|u8FO6p?el`NNWnc_&I=5o
z<*r>~S3Na(#7H`daaYU5SlPjg>v9?mE+)=ih40wqB7D(Np05^|c$Ud&FHaL3?_0}s
zPG*6(;Ii@;O8`)y4o}v}uKz9=K$VnY&wG|lb5vm%Vx4V$b;t>7?)}|c%S4y{(zdWb
zs#q;i2{U_F5?AeI{{Z-lyTjxjG866?kCys+5DSDCBxNBM#$@nr0#E})FRF{sa0`%e
zf$nx2{34ew=($<}Wwh>I2B*Kv`F=tGyRv}22GJ#zNgR0Er6ky(q|ck4l_sBu>xJ1@
zAGsK=6($0*t2qfK`ci{s11Xy`+qSq52fcRflEJA0&UJ7-n&-eRh4`W2@ctSZS|n^g
z#%SZ7?YZ^iCB;E=Tf7(R#LNCjR?6llijpu(zR!$*Y)#cmp4=E^D{O;^);a^8LkwIe
zlw+Mv9o`+@>$NWRb6Yv&V~jCI5QA#aEYU+_oMqK@E$Pz_$8AfQ&hoU<s<%r3hK{~a
z-pa}l>tNUvX<gd?Hnqc*4VU!#>G^F^4XP-RF0q8aJYq`Y0S2+%Nsl?-0{z|dzEo9y
zf<hmD@V_CQnJ&F|C{09J4*aRT=KyK)RQvj06r@_7ysst(or*o@TyN$nxwgqu?JJU0
z{IxV8@$6Sl0zseoG58LQ+*jxHnV$TwY|FndM*Wd*Dhj>-!Y{j8ET|9s>wPiFf5<9{
zAA|2~s-&!z!tb=F^f&l2OV8;G{Pn-sz&QBX{_x6hFnA0mM-TqDS-M<i6oQbS{I6_S
zk6-yI_LWjHx+3&5EcdkF0#A$j7gb+=gk^qsBh}#{@=Y~he)*;BO;aHoy%Hyjay6%u
zBTwE}l0VW{c?!N#;%fRzPr+A2-x-6V{Y3u^%2ED`eU?@(!*4(%^EY_#zP)nBYu<Zc
z3CU@E9=^3^Z1y=Q@m4#Vo41_N-Q~OwzAjGq8~pXZ7{7h*ZFxrdxA2euo=<TZp5J+z
z6H!QigD(qNdwGg|HOE8$^vmUR=kbsK9%Jv|2mI@QF-pCCtKaj#uLy9?R{_*qqy?=M
z{q?_O;_=H5!MC&WHC3aB;9JGDD!)#3x;j24>kfJHzmh0{bcKr$PA=)>EQ6C{lR@s=
zWO)AfoI|40U;j%<Dg^w-PySa}ii((D%CyGMUWrw~SBL(FU;fD-{^`Ac?OSSk-zYZ%
zCV#`f{uf~Z_6;-Oe_hbB;2-b(TZ*Cjw)COuzj7=L|AudWFpk~!dCwyXh{h86t;K4T
zi#>9ir*QOQd!IFf?5qpCCg;>?oPsc+x|<+r8JVCyc$v&4f{K=DK8sC9q|A|xUKMJg
z8)&Q2h)SKk3Y(sBKxF<l*!!Kxy;aeb;G4`)2M%Nh{@ts6k$ltkIV7AguSUg$6FvGH
z&c>qqiFRKw-zX#JK4<0($O<|n$06Z}FP@50(LUEoF!6XCAs+GFw`sMM&-fVquKTdR
zqa|Hm^2;lAn&QI1zdq8HxcP{7<*`l_0DmMz!4Jp&*UBX&$1suhSFIF-MtKUpe#Jpy
z=({`zCB9~omLGy|PuL%UKFf1hf^6{UJ3fV9F^>p;#i!uwH%RSp-~1SUH~g0lBOR3a
zKK)*TXnr4lVFbz#wQppT!C&z)_-<jWc?`b)ID-qI3aQ^gNw$HfLi`wfe<sSs#5@My
ze>NsjRODwrVyu*!nUhOrN&N~4skcH(y$y&d7mydl>h?!ah7bk*3Esb<*Kb0y$%Jn-
zk0B9*fwJ}`d{aP<kkKweaeRn;GuTJ{3JDrEJkW}L^KDf;Ego~QVJxA3`dEf()hZ-Z
ztMZHuq|WN(P-bD4`sL#%<AktpZL<PwWZ|fJjNq}SQ^92TxEA@RbPejTH!aR%6Pad9
zgI*&*`5!|2)IXN9=`6l!_-WCyUE)U2gjw>!lC|8lLcNj5xXwh9ELmN&dEn~=Ro4>1
z#iPxW>2rwqb%6MoeSIW=d~-x`XJVl2?cVhVLy7YLK1m8VYh(gk9xF>dLs_6Qt2>>+
zny`J=h}9sKfGGd=kmL@JBR#A=)64W#7VY2^!x-8RH!imIq)HIEjo7!lVwB{o$K&kj
zz-FC~N?SRVa-bL{C#!TZt*0gHoOr-X0Z<eC4inpjmuJ8vFSOlYa<f8b)$3C&%D~b0
z7Rm*sD}t<hgMl};hcY(r<%5V$mx~QuMuNsnYVWS~y7=~BRd$vFJvT{E%}0URy^xO^
zs8A^@QKfYd+xk5J_miKVJ^cYmoZj8hC!^h-e>H9ynfWcBUs39_8?hs2rK?&$vllOF
zv=OefQ86@BFbaBKYTj0u=$5d!p68fI+i^z@h-#u?Aw~2!=%H@`>e1%q9RF0O`SG%M
zxF*|($~8i2-k-ALSYna3%iNSeWP>{#OX5+#$2tv2XwYst^4u^w+%wOGBA%6Ru*oJ-
zuDZ8*wbXdUX@b;tVV08~xeSmJowf|<Dg3)Ce)rAmyb&!~PcF28xM%I>9LT3hO6x>!
zmh>>Er{8hC)ad;a*Kr|-!TlJtEh0IT(+sv|`70Z#@o04-j-kB7f1*<)L7wFeE!6mi
z^`%IjK1sevJ|C(W@w+?2<ok5-<`mNtVBMeKESG<OcEjbVVvmjyx5f;i3IL!FxrRmE
zH)`!x`QQVXN@~}qV2FU>{uI2p$mVWHk919g6oYzV1``E!DlL&qM7y8tgh_~|*$lWF
z9>&4WVLT<NJ+gf}FCcl$N`_?2W{|WFOEnqeYvN@TE`1oizk1>ZJ-y$O%JkcE3-j*W
zknkh{d)((0N53WHfggSMwYU<YtJxXw$%`tXOSc&P0_?<THsQ=Dm@6e`7e3Suq7t8q
zk<A?CSb$rEfe%$6WtMXIB%~rP`SU0}n^F<Up^OFG7qj;;-Y4Gl41IJmE05Bd0TCG*
zyAnr}7Bsh6nWAYO8C_=;g_|i%gOriPG?!Ogc51Q{|HMAae}9(1?LNc#ALnA}4s}(G
zOL1=grJ|r7({fU6r}Lcr1^>jgwy*_04Q0v6kzP7*C#xiJzKXIqKf`2GXXSJ?!{9wb
z(zC2iPC3W&SxRoRLkxX4ff^EYp4{j~=Q}mVjJGJlPc<nq3p6))gKrRa*>BEB^U^_O
zzErqe_AHF?q)`YdHa-}0d*tmPX<mXeg@}>n=c?Mcel{fb@gmEf@MlUU2tU80F{?uW
zJ$#P=P2p@}oT317^Ax2GH>tjBY9#&R77WZzILIMAFm|9GPV=Hnwq%cQ*bv^PX*K4s
zwRbnXvfMPR%%Xf#p*@^5UON|9^Bw!dB7{XRssBGvO9KQH00ICA06?zR2sOYtt87C6
z0BP<305AXm0B&z&WnXP?WOZz1b1!INZEa<8YI84iWpi|MFLiEdbT46Zb7gdMFL8Bl
zX>=}XbM1ZGcH2gl=(G40WpuBIj3`oalIet!>~?(Vc26!owllNVk=1RGghbd7zyP3R
zjibLf>paa5obNb)GGB7`t*UkbAZa_v^vhXUu?V29yLRo`wXfsP@AS;)=70Q@r?oj8
z9ez1Fz~@C>FDK*i&ntNSrW(zP%Q3vhFAt05O_^RSYIFDC@C)<if2@-7#ylxj`8=-E
zA~$h9H$}ZjN;50+x=g35x+p8G`aH>!xJu>*%ED(TW4?d-(q!o@$*V+l`{rkCbX1fV
zWB(DqKZ@&Qf*pUke{i_}#o^1tf0=xF@IT?xxYz5SukslVp>M9!d|q6efqCESUBx9&
zZ`j+3t12n+2Mp~zy?`G@{<tiQ@=5-zOs?R$POAFp+?<#LcsNh9<cIh&fyaJTtjbyP
zq%1C9)bZ?XUB<JdZw{c3Uw$!BWCo)$S!Vch+@HLf?+x}|4epPJ@JW3c?Y$cFJM5}>
z0pQ6mp!FZ8Z<1L(T9!p!)HlmyWWPbNMO^)Oop%-DFVD(i36r{kqT{jo*Cbh**kr{l
z&P<t{CuNe)5>pohJJbKmU-$2R{l%cSLyso{sS!Rw165MLOfQpSRr^o=9l{M(uxu64
zZ=ujUIZyKhf%v|+vokMdtIH&>Ck6*yoZCwFy}5I8Vj@Hdsue*4Y8=g4YJ{EjstOR`
z1z=o!0hr=ZVnAcrL1cIb1B(c=_i?rND}r=%gx_nxWh&Tc3j2LpCzpNmZU_wwj=IW}
z$z^esNHJTcOzKsco4Q;j^y1dc;(E5|o5aYNY?1RgtE3G4bK4)lD&69$e*SrH2aq2Y
z`YN3#6)bOFl$UXq{s#a#LG(2|haqgavIHbStcr7!R@Ew@y4PvFFi#(wKbb!6&t;hw
z<-lCSE=>$=fDYV)>Qpx`YN&unmfe{2a+xK#Y{?uyQh{%2Q^VGm?VD6zjV_?W)szUw
zAKo2)H99;TeL4ElRr&KWF5^q{o_qR*hH%Ss;qL+yDIlNBB>)^CjYY=29eU^Xkl+1W
zmZ6Iap2HR%+Pa7)jhgi2rroE7OV5oo#BWE{YRW){O+N%U4$KMS-)TX+GO~-AGr8a<
z>EXV5P@R~GiD=r4crrRy)jr=3pBoKuT^cL(_1R~3noZ=Q&wD0<O7KSt2|^}-cg8o;
zQL|NWO)nko2H*9J3CUF%DWYJG#csnr@O}K2Hoz<^^27jH04(PfFslkzv&aESACzT$
zV*m%3WSY1#Q^3(7HG%j)E0!s=1G|-vp#lhOk^?y^<7t)%w%1T()WTS9@)mmyG1Y$f
zA-T3gqFqNLvYq&rO&>Pus;tthB)b`m1f{v+zs1=KN@$#h4+3l;@_#8;KsOIYUyR<t
zv=JZxg$&PBm=IDVgv^_2kwU3@5!XN-(kwG@UdY=q|M|lg-`pKxlb=iBJh`65%L$Vr
z8W3%ux5>@WT*cXtNoa;cqa$^cR(%u22<~VoW4v!p&j2^y-{SI}!y@#tzDaX62S!;w
zzeaFUWi-Jd6&yIEf}Wrw_;3pE&yMW7iXPz$eLt}WV;>%|cMU>*H^Gt~=Xws;urYWK
zBklD7tj`Oebj%5HBO`qKn%=yI38Zx@L>E9>7fXb41*nwtxDuXsbO_^&kRDcbT-I3X
zvY4*`ukg6Rqj(7nK>}z<+YO$vIDP|q%Oxjj<(Ycn=g0X~S{6ASnhYamV@7~SaLm`=
zb1x@u%XWQ!*=Xpb*|e(2gQ-rjJp{NMVz42RmAc7i*q9zGHuVFIH+i=N04DPx0b>dr
zlMI<wJ}xil?5{>yl3&0k!DYN_7v9x4am~=`*$15AD$AHWz(0(N*!SiU3~2&%Fw+$3
zj~M;X(1g{gf~AL+<o~t4L|l!It0nBkSq6;e$u4mh_;vRl65XVNy#?@pr-ljb0Z~34
zW3_ugl-<LYD9W-0(6VjYw(Z(w+qP}nwr$(CZQJ%c-P?Sv{DB;ah!}IB`{4s9B;~Xh
z%GS(MGJsWQ3}>SK1i#le#B?3ZvvCL-8X*LH4j_=#@&K*@Sstp1&p98aLFp}F$+%a9
zVksi`#XE0K(p_Z+P|dGX@0?(VlzXZu<?XnEsfz^<_t(AR5{O)Umk8_20cXgA#$ykh
zn5R7Bq5=1K01`;deIy4cSwn#XBH)I>dS3ye)WxrBSML)5|I!{59q@!o&1QGqoQ2Tg
z06RgD!zywE?DkJbd85xJ(&z}SG^*>+?BD;_XJ9)-qiWgXZupodaspUN7&NdrFV9j?
zSDIsn?ZGYV^E7WVJTWKlkC|Y@5$33~NIV8i=##ueO#3S6w>o<|K2y;o^Yb$JgcLH?
zrwf=$C&zrm`fwBFv9oTW>WEH@0?H46a$!g9YL#v+oe<4zyQN&eniACngohKM?r8@Q
z%ZbYoHH^cn%@gbsZqinP=CjQQRX3(d)h6_ri!|g+76z*w?nUYidMK8E;GwP3v}Jkq
zT)|6(N%v~VKUVrk{hQ1KTWrm5@FQwDIQ4cPCP3RR1V-j7$pADT`nX-_2(-96qN`mE
z{J`58)4~qplAw2_Nz9cZ2T-?$$@h%7i+aLJ#qUp561VE&c-3iE+rYv32pJ*u0Lrpb
z8O)8tbJTN<s70^8(wCeh$=$oxdfz<DtO>0PaNw>l0q?gUbisE`O6vk%(gh9d2j1?a
zXeUfI$!@1o6sY<h9cObiUIf&LSJmq_`OUI7x%xbRcz_uC=d!*gOW<Li);Ked|G_a6
zxuMm8-C6YlXTQ(fUh>RK5AYItdLJd2G;3{HT7)X+9C^Z(xfD3A>qOnmZBkkl5HC@C
z<Jezf_e10Zu#QD9H(eTH0z<p|iishN+(S}|HaQ2o9Dc3od>uPfq?;7Y@$NP~CD;-M
z!$ol4NAA8wxOrNP8b0#WEEF*YCAq;;QI`;36@|9vk2XS;WkkIMA~#xC7_^{mJc2^c
zLV^~+4doliY$mWa?5Us}Q47yfx#l0?!z6c)8TvIGrFhK>NoHsVG5*X`U@;_r&t{ct
zpRogFAU|L^XNhu-vVG?Qq=gi_|FNCuvge7mCP^t1=X`?vbX*<=L=wDpM${_$KG|am
z#5?2y{~JarjLnIlsUDYUT)$^fg(Z?nVGywP?er7_K_90bJL2!0OB(8qP9wU8n~lVP
z@!xI18xU2*z!LoH2*<%msL;0?yMu+iiK%#i1?iS}bb~7^tX^%^>qhJrv?XDyCjUqj
z;G5<yQyYH_MQkLbfCmi;aO+RgB$};95{$#o%c^DpW0$zGW${qk)+BK@fwYm_v7K@A
zo<PqLr>4P60tZFst!B|sX)H2mr}DZVf~7_w3VzL}XR^Lj-JV^_3B4>CiSUEk$+V5G
z7VC~f5k{R<7`){NfXEB7Z<@f{93NbxJ9Ht;P^D^-vu^+aZV%MfSv{(wMC{aE+F+@Q
z=B`J39f+(*G~bDJyeNXSMwiz0n>nR2A|B6B_X8*!yIwo?TnKd#y){@Hx^pq!^7$fj
zA<teck05C`22uZCsh`0z--n}RjbnW+{HFopza;yskVXKq+R5lPRDHU5Dl}^VG7%3#
z<B;G*ZVeupeO+YU;RGy{h;LE9+9;x`CDKV?2cF>C@lTyHAarBR`{>g>51qjtU|IY^
z(#Tm<o|QEkN<SMD3^0dGx5iK**2ws7IBej$DeOeKFycQzG;GUCdTj6*iaBT~=Wd~4
zQOO*;z_&MvVvi@|&d&CJv_!Wi;|Vu-^|rD&hbc8s+Qn3hXIGjF_k{RiPzQ-&bYg0i
z3VABhk;cF-XEh5VK>?z0d^5%7APO4(g6{9Zh@SnZ5HH_jXh*e9fW8LNYlGKiL^)Fd
z)<ndQ19X3*Ir)2a);U}h!D8X5wu8+4*)WLErKxuIew}Xc<=CkWppsExJ`q#UT3V_O
zvIIhD0!;FMZ`L!2YFH}eVOLqg%or+DG@z<PpD?kWm#VeSq102T@O|wKM~MDQrf8v4
zIY9L8WZF<tkV=O62XhSvZ2ND!xkkppg1indN=~O>PKF<Fl%q9y0Jbxc9*;{;W$;l`
zq}2kk((!bIZT5wv&itN1C=_IZB#Io}=7q9L*=7$T^CU%4h*O7RQJ+j*cWj>XFN7|*
zJiB{5iNZi5!&VUx@^HRo2kCP-YTdoVkoj1K$TUZxp`kH^&7f~tp7Sm(?x-90V6Q?J
zZ(kB@R8@Ky1M$5LY*1``b{NSo*BS+JE9<cUS_!-gGZWMnFArVrszW0<717x;MBXzl
z%xS91mstmD>(Pgze*0JCLQmyu>Zm&YEHlAkaZgaT-rguKXfl%8a!gJ=;{Soh|LL)J
z<yKqHsJJ%UQaY^WW}xiAdl<Tw7T{_VN+ARGeuG&#XX_TUxy9%ZP{${Lj%yQiQ%R0|
zG)Pmx13##2>M6<PF#(hVgvJl#HNC{5twa*3jt!qN5ot!QNpAL0d2gb7a#l=9$eWhm
z7RHh9hXU_gmBxk|_lO`<uqDefu>odX@vp~JFw@MrbP^(D<@nj7_Stw03NPY=p-e<T
z>FK;YD+;)K<d>aInzIK7oS1w#csMxoQggu2?7@w5Dmvl)QJl0M;0S9Y?rrmw{&A5{
zrPMv!tNHZwMa_%1P-EF=l919iiiFJLwD&V)p!xNhyiEUEC-Oia&JB_cvHg5Le%wxj
z&83~YIf5_AyQ-7*0P^yZZ5*6}d{70S4iTU?U2iL0-K)Fa@~3rFOmlTBggEGjCyKYl
zQ%$jyKq;DPRrVLAz|k3^RfqhO47yO!C>y;L2>NP()Ni2a<+Q@YaeU9*6#WNwZT<Ja
z?ayjKZlCiH=qiosaN}!Bc=%%^APK-2W}ui*$Zdzp5D~!qr{V4ABN&H=L^Ef64(cQH
z!)+~XGtBybRwj(t*!?f)h{-n!XBR!p#|Z`IMFSzv?_dyEw^_tBp4uSimxp8B%*8RD
zD+AuMD>lqoxN=jEyz)+#EIm*xED$PDlc4UhQx6YNjaqOr^4=T6M6~IK+>OUoV4?Xx
zAHEPRd%d{h@c6y{bM1rD;_zkav9y!o-)3n*LmJlV&F;IY8|az-{L{wW$EItZUF&m=
zbYh$%r72_d!K~rq4U*AL7}|H?AoJ*xJQb!-h=9;ftav)sJAq;^x`+u3$14`y+9{tB
z=RUCK;g|83{53^TC?`EWYjqQ}B?z0klT*lO8csmujv3X#$FS$iz~1$S&mvUDlh%Xj
zqMhNTs|0?)@x%T}(t3g=xGMnD7lf~j9DM|-RO5}Nr8{5VV4iHGL+<4UpGp<%Yx+54
zfsp~f$!M=GW{4J$q-P%9+VHmme{P#&?tO?kP^RkyUW7YDs7(O($>Dz;_4OesrKzd-
zJ%8-4Y~YW13q<5cZ3zIQd^>o$kGeXD#8+OS@IOBHAR#j_8TJxox&zunVZVm)J+qom
zMjD(u;8{d8<RP^<9&epQ*mr%OY7yM|?|h<eM4Y3$-(H@bO^h75N&TEgR98o@Yq~Y;
zEW3@kDDnk6`b<H()Oik>j?W6|;)jSq!6DKV62g}%Oe0b2d#gE=rmPjDz*S)hw`6b=
zn7a{Q38HbCFB`o0-@?faL)&m2u;3-i0?D1rk`4<bc#1HX8+KIIj0Vn|<}N$@OC{+Z
z-J#Mrn5+P+2-gAyYN<!Kh&Yw2wpbyl2iP(&m!Vlc*U_qyZo?WhFv%}*M}jx#cXgZH
z32X6&P7fi|q`5;5JjK4KM~RP{eqT=vaOt0g14e4gYH4<a#>N}}7gISlHGD1eV(!v`
zgNVJ?Mq0BQ4%pa(m)6u`tnbCqgayj>7JJ2%o_hnHUg+s?*8u$TfPoix_0e-=lEJWK
zHYS@i)+TQn`<HA;OeluLqu31WqCztPF^UWqT=l?^3*FlcP8j0`Zy*J4ADrj(6}PXZ
zb_F9xv!?c?@`+P@m%^&u9V4%_)bW85UR)d!Y2B$%6i|bFXvkB7{@mrXgEH72+a@jQ
z#$`JEV1~?ay4R3>Tc9EZWHK2UWo};Qo*I2$jNLr2#dJTS!kCHdbQVj56f1V`etdg$
zQA6R#y3w*cjKtdKi7#i}QtPhoi+a)175e)7%d)n|s73NtG;W^ELA<aRrrT<f(%QXP
z^?o%Go_n%-b5kdF(7V%Y^XKJuV}tB#1lzyo(&zcS*{q>vQp#Qd(To`@+i7FM@p|{Q
zWuUZe3nr}gA(1f<IbGacQT^iXoJWqI-U;^Os^0bZRyt5+i;<soY?HvKwoV+u4vpv9
z8L5HEiN=2fl_#o0Ru3x^fL<pU^MLVCq+zH4KwDU=<#Oan=z3~Nrs@WeHu58E=RHxM
zH;x6MtpJ#E80XIC=Pi2b`ikD?9bPU&e}UdLIxh8P70xb;#B=ZULSTvCoGKJ^xH8Yc
z4a^}K_8f#2eh#D#p<1;^b@GvS26+vdPWng<FG<5#X2o3i?xH=b;N}OpBv)pUy2@VN
zNLo14NZLRsvF>Z7fMSOmYxrfMiyr8I_duLq)VWmlp(5ByU?H<+qYR{lXgR+;?%@c!
z3ZPphscMiWg+YKtJ*)&UgCz{yD1M&`Mv+mrijOM0B>tH=SuGKzM{YkSt+DH?yN^yY
z_80`E3eH9J#ns&2N4JC(QzN1`p}fFdps{4tOaO7*;i<SgYG@u)+h=9|TuH15G}uXc
zfeIyrU~cYAIvU<6!4Md&GNPOE??!|46ysb?^b$|gQF%C3QjDU%6j0YfeGuQg(i%Z9
zKS0?Z#gw<fRZ1RZIxVQ+{AGcpY7`qM^R28t&b9{1(P!v=r%g(8@(tgfxEnR*^fNTU
zvdcAP_K8=kW)CcK{$-|J$iOHL1i*T`7Z;{?_OuocbRWXG!FPY)>gA@waE6Ru|Gl@!
z=IFH~AG?%$npd-m&I}NEIw2`Gkrn0=WxbO{2q>A<g-8*UQ$rMRe|miXTNN#z9JWLI
z?PI3>O7{M(&D*_BsR%$AM^EE3xm(JV+R#LDq2JP~N<?2}7-41IE;Q5{HnjW`lqE*#
zy=@#Jl_c5h4LRRPL+A+gg(*v~zt4OsScZ`%Phv<`HE!f-g%sOb?Qo~#=p`DpV*8uh
zwqJ8tT+nV{izthmntVoPTnZ?;{J%yT60{^EG|k$eKn30wTNv+hlb1pnc8toMU;rI$
zr|MS&w@g#O((`pWVOgUuYl6EN))`MmM-_1H>MHSgW<-Az!{@Z2y;|8jUdW5ttd#_1
z%1s-w4K#nJ&>gOb8$Xf98f&e+ML4aD)3JQYYU#8)%a=^58W=;pWwy@dGI`h5)WN!}
zYt6?(?aA1uW%JuXu2^5^){)R~&P`%Hh2xDDXi*>@8yT72q79RsY7`9RSZ5b<7A|X;
z*I2W&d%X`-F<&)(I*ty@J*%5|8}uh-8<dH|d_(#ltWop5d32KAQB8!n*EGoan^<+6
zme8tNQDuT3L*AW)iGG{3R`rmJoKaCv3<Iyn(DO0uJhIyO21@q>8)y#o81ZH&sO(;L
zhYmqnW-YA07k{~v-sJ7`i}gb>c0L(V;uFwY)K3WZ=&Iru7~ZW7zAo@^buh%V3C;8(
z4?u-LxevT^$UcN}{vU{buZ5sJF2tUDyARR6(6|rMxk!MMRbBCBr%ntyn9~@%LI$r7
zj=knh=faTdRXTNMa+1aQMD0(D*PLEEfAz^|vfY||8{?bjTt&=}WG)vyIivpa;K;oc
zF$T!0>v{1zPHI*0t~|MMl(XcNI><^DkdI$--P*jgu#1KCqd$$Hfk<@cGv(d~crEFO
zwo8&5-RSngZO@&kL`N<d_({lQs13`!(b~NxoBz7~(jah~7ydgkd#9T<UO(+pAVdD3
z4o?O+dxPl!6f0m8W*PS|pJj=E4K{=*gF;Z*{1R-H_joe*t5?(Bsc)Z7+cVVLh0w#M
z!*x~<w5xW<ymx<(sSoznRYxI=^&3t)!m+(sN4P@celI?!aO;}4(FRi~-4$-DiDD7t
zwe|2c83QF}>`bBbtVa)S*S4Qs^+Bqzyw?__u7?)y%jPx}TlETMjjH#Yh~=Q;%_fr(
z<%&TZin?;e#TM2q=o71)m6SO5?6p&k3xdOUq3OvYaf5U?O%z^*-KKlE-p$cVj%bJK
z?Yf)VvUzGrQ(HfU3utl$eVRACP}Q*Q7M<Im<lA7cmx~G7Iu&SKJ>Mu-ricx+&N*(G
z5Eh}%oG32S(URIn)u)OFTj&=V8i_T7Y8<93>`X;wtr2r-rTBlj;k<J|f0#Gm7_u7;
z99KZs&FG{V&?E*B<3$|!O#pCNg%8%|OJ8uB2k-eOHfKBD5+F;wCi*H^#O?3?lpji+
z0hr{w7&vW`2{v0q*!6cth%f^L+%72ejLISF4-;(05C`?=61!|neEaOzI#dM2C41qp
z@Ro3Rp}S4?(T9g^ZC9aO&QXJ!{Ds6A9l;G9IFs`&Qr$0sZggb*uB@s|=i~%yHf_~K
zF8xLf4A+~DRWJ7u@;R6b0Glg;3n1Gi9IE_)aK+=N|5cVPTSWFoA^ZNedD7<&m=foj
zimR(#31-eNRJg=hO$K+sPeX`Kj%sbV%{3^V71CnVx$qi%3Y-=jTXNOMup9r#^j;Kj
z)6lCc_RlJ_ArVj%YClVXVdUi^Rrhwgqv;VEz8ooFI?vnM$EcZlpL?mKXH7WB56=C8
zSj5NZ28b384RO9A0!#0kcGlihmWUlHzu3udh3pJ_O)Z-0QY&So7C!@W6Ls$SK~<+C
z8SC9oek10Qu)W`Q8VltBsqUsT&=G#A7+h?ZVrwqsKwPvs&xq8`cU_S)ihO9E)z>T(
zYn^W+a(c(EyK2@pB1=JJT(fAqaI}z@gPih9JKSo!;YXDxWj?kJb&A4hF<d<RcR^Jt
zQl@o^3*qW0)*^&~{>TJ?2Y?Q0*=l?2AyV~jvrYx%D{&O=speSZuu6>Kj2B|6K`Vfg
z+^)Up#EnKwHoLj{?v7`<iOih|OTpZS7EW0&rCPHG)s2H{SjAn2m;{S~?22Rdcp@iM
z1eqmg|3oy+J3pGR{rXwBM$lI7&nKifMM#Z#+A_&iHDD#eL~#;gw>vx@<-akp3e)P%
zaWa>4y?XLd?>HgL!|OIwo(M-Gf?yHr7`#K@6if0ANL~qi(2?vKL&lQOK8>>c3LZ=~
z(biJ#Ji}9@)G~-`6>eb0P5-3=7wK}~l+-sZKuSiX@<d&Y%o|H!`NmJ7-mWE{H>CVF
z8o2)lFLwy0%KL3BclMF>iU65;Gq9%nX|oDIC<WL!!znXXaEMSo7(ET5Py>Q(uw^S{
zOG0xB#OA&*A4ufkm=8tu1<F&x0(Z55is68U?$lXysxSu^z%O@@B})M_peQ5W>0<E>
z%!q`MN3H86zsqcU374^IBU>CDb&Z;1-Ni&vus-n5)I2U&iQ$frrl{SYg|k%&vo$lF
z+bvRSLBq6``2&x5>NHXcp(a9M!x2IVt=4#}PCC>D+_J(V4}opW#Uwu_$sddIxffYX
zKd+0~o>K&-5`Se~CdT^dsF)>$HrOjr?(xckWVJg)S!{@b*B_XIHxdrT(~!wFV;AIw
zb6_@>vFm8aE|;A)Q}Z5xTJ<o_4#0(Y8zhlu<LIQXXUTt-?Im=8Sf;Al51u_m;ug0n
zn@>#;Z=~263J;8|$1CZr`WJ_V=C{MN+B#7gP_J?km(Qs$Zusk1tO2BzxC5INv5P`!
zJCF?Kv=s9CoZYqoL>;PfMitm3Ha-^hZFMTCa!=Jf{X(nvgEslp7;TEa&j$o;OGe*i
z`lb?97EwR@{ha-kLhpzw0MPth@&Bc*56qC>hq)8#uftZ)urgZ0M@0pce0qc+R!|NC
zcPtaI9+lI$_mexdPEAI6`>EvJ`SrllSU|!wMv~A1BU@jCT~)2@@Z<hM2PFIYQgRnB
zgd@59{3Js=&M-5}hBfzkcE}XR@kiE(80cUZ5&(c`vn)EHZUi^bYePY9A%WRjP9|$6
z3G2QHK*|R=ceCYXtX-&LS}LJ0AUHa6L>7IVOE%$jUpo=jDTccFd-o^*x#Q)Z`jX^2
z^4+h2G2&vju@OTOoH~qSBB4ucW4;T&uY2^i=QBeHU~^>e_RtvP#I*ec6>!!|ZTTS0
zXqm|$g+q>q@@nz$Ld!+_OF(X9t4Fb`rtKvDR6sM({90Y_%(SLr;KcL%qvSyC&<C>k
z^1g<@b=8-|<|4^6sp3?yB-er$rg7hHI&{9-JGCkC7WH^V{SfUs{Ggh`Q6TwKuDAqJ
zUXsEmX}QoMUp2$&r0Uw}lkmSykSq;<{|8g+hP$T>11KsiPIm|$&Fs$j7@eq&HI8f)
zoqcRoiSv?)W1Mu~D#TQ7?|%KBp2TmcCzBfqzeOw1a%5U9Y<J>N#r0;j$nM5cuCRHG
zFARV@<YST1B+yf}A=<ju$Yh}NFUTJe_Kr}sA2$u&QZ`3`@cT~W)zNVbEw!Ejjj^N@
zUg*f;Ua5iewD8yq>J6sZbT%niIs;uamL1kY)3XudJR&s<EEW=W<;A<W@$OZ;TU56U
z1Hf)JamlcQhKk@jHmdiC>LH|s3c$T2Wl$9-?^;rm>};f~z@wcaN-CE7^$5v+<C&3S
zaYjG<cgi6nlP}S(-Ol9lm$ToMQ#UJl@KX*SA8#Hmzm_UA(3yJSn39inX9a0rmC_Q)
z76XGQ^uCVl=z*u>A5$|a0LTaY{*mG2Xu|PP--y~nltu>K)q_)(uHiI#rJp^)t)(=3
z6(c99haw1i4pZ(57ZP2kR$g9_1DBwdZ{B)Z0oQNu2av4OuQ8`t=GZ(Ua}t*+%>k#P
z_-{SQ{HMuEh&Dxm8buLzi_v<J?gEDbcwd@j@5U(AD+vI@q)><XdV7lt&R>q|QQVQT
zZJ6@w^Zqn-NbxHXZyh$@2pxMw&r_$5>*Rpew*x)H5py2aHOJ-1UAUM)LCW)NJuj#i
z@R10BP%o^I`y&O(e{Ne%341eW2nrkB!E05$4xFXT9qNU^YNb)mc-}?X+1^LXVGI+?
z9GZhJdYYftKpndOl>`byvYp}SL(GnXRGLdrPaDr@I2CX!F`#eA;vkd{ZR3+qo<~T!
zi5t(tECM<>x?#%Fb@Z;X9}YB8FtHx`V(K=cyK*iWOa{FKbp#oPewWqqKRA6reWwQJ
zS-X|n_7%^nO&&@aHL=3!?1SNV6mnMpY)XHa!Ov};(=Q-To=1@y|7;_*Ze+i4Z5~mc
zjD=h4ZT>u36^?WX7^QnQ9YP+W*ohAtz;lXPBL2EaE`yMRZgrWTEMJB~%l&ZQl9t=9
zg@>LwiHqA83Re^yqyc^@_kbOST7l;ce7N5CQweZ3cU0D>{q#Vhu^A+d_aEJ-FVXj(
zrqj1~MNw9R+2x~289rc=@q@($wS`AXuwqg%<3D=mfie(|O9Y}KZOEJ7%+~wEVKd@8
zM|d==ZFj7_AcPuD!;w$Z>jcG3ff^cq!5gsAV$$PO!5M=#TAs71xVND(-hE{<jOW(2
zp@ZBV8cZ~y&s90rXCQ?Jp8&Te({DPiWX@43G*QBHH@MwvZ0cP8+j2hh;FeRy$%!R9
zNLH0-eIRNvc{HpWI8Zi*WrmHtwrae99;?es9b{?3>y?tkktAB>@<VFG7qG@D((QNE
zLZZPYreOi}Mfz|VirYMjX8Dd0E*a07M<VB&;s1WL^{%M*5biTo48w6NO<B&m4=JuK
zBz|25uo`gNCnfv^V}5FFR<8anWn$~ZvTd?X38qsY+aLkf<FQd~U?dl{c^h1Oza;q?
zB22iQ(2LqVluV=s&OSuLFN^z4c91E7C};&5G1?~GwUcY+dS#tJ_53XkN@qw<m}@Me
zOS`_T@gk_bl7>9;(A@TEG4`Ie>7bV~TInaDn5&=l1$>8GR%09HO{}WDb__42)&>Hw
z9Hfa(9?qk<bjG%k3Umi7#H=tp(kah*WS25NqNYEl<;002j=b2;okWuN)ognkj!fyU
zoap7@M&>1vUVf9MCwD3kK!=SF=OF{Qnq9TY=Cb`&TsUt~@YQ&^R;u(zWjB<7o{>n=
zECq1k{m$bd+pfd!Unti6pL_+_Jb@oLO=Mzxg{w<rdP5uSgVbBkq28<sM2m$R(q6lu
zs{<#pd0$BE0%`<8nV3sf;!QxNex8%4bDd9090}sqQ!W}iBfW@w`b))h^7JF(kuyye
zE%N5HWFT$9IiE(PlKb=dN_}ku>9#W-c#Z+OY0);Yq^)ZnwHQL*42>tf!h6#^5XX?#
zmVDxSw?C98ZOA{gjyE|fU$sdE=1$-<Ul1z9>`!B}*<!|5hFKwkadCYPI`54FXpz|@
zMz&<VE?ZEf85Eq6u7eH|H$C_XYDj_O?iaECld5cWm*D^=1|0d}#EG;)=fS~5gv%nK
zB-R_QSS{(EUG^d|z61SU5WKqgmu(skkq6qWYuVvwyW<Z<ZnpK=nDLMUUkEPq`9A9a
zo&x07$AD25d?C5{UU@Q37J|ZAQ|9}08wpd%BzpVd>-;d3iLl=Dw-FQlnF$i>i(+r&
zrF-r!dCS=5=lt;n&8L-xl+EA+U_vcTqPLk0dJW}(wGo)k^W&gF^Bwu2<5(Xl0c>sl
z6S@^hlDY@C`ZI^2*6AS|W(Nn207TGX)Tdxl^b5B@Zcx_H(S;Bo?&q_^JOj|c*&`b=
zb&#{jSLKmCO2Rlft6)*U`<wL1?F#UY-*0LwyY%;e_!B(bmfLmmYiolQF_zqR(JwbM
zOCO<ftp`P;M0F0zX0MCzLM0rKO5G81D5e)z?e_(K3{DjE)fCHNYxRWWfXS*o(L|UL
zSOH}Q%=TU-V!I`61=}ITK-h-oVO07C-qqo`Y*-ebiWZ}p|0MKL`L2UTSruL{#;C@?
zq-JLCXKJ0zrcJ*RN}Q%mS-M=Sx&MXD*Qzp6_9@6aT7vEN9|Km7L-20FuG!x#=C$`8
z#qv6dAY);nqvcw4V7iF8z410RBe=n{<C}9V7NIdOkR(=LB@&c3uBWC553I}k1g+ku
zKye$Fls$7njQ6y?C8F@BSBH5%$7R1o=$$Xq->r$nixCj2MUbh`jp?)uI2Gg4xOFZ}
zqtJ03<Ic4`^i%kgogzPK+y%N<ISF=GjIFz(u@4@R)sqr`1nSBZD46b7FN1Wn8(bS-
zh|L8oyXKS>VBR^;e69Dv7Xdp_?2Y@9fD>XVGtbs<ch+P+UU=KZg-r^E2xt8%lZR~<
z%=gg-_rIj1xO-=;a#=&3Q69`+&@ho032tvvl(l+@LL;9Uua6&`C}Pj#g1qjCsr7vy
zK1~CPW@^APmFZl`DZpITf&g=YlJ?3K5oW=M(0nrpCbD=XEnDM8g<YB;B~^tOHxtL`
zM0gZ&lt7A|5k4Vy#+D|>-F1pcFb!F3C67CkglZHwfojDAxHm>Kvy(vdarhHFl}hBf
z?s&V3w~qLs!=+jPXHVD@5ZXmI#E+v7gh=NqTA$}zV1j@N3o%G1Q09l;fuspyUlKzR
zj<u3nok(0+eOTR%WlY<!XMPbhb?BLKwCy<0Vhd9{7z1AzTWw~;a>pdMEaN2ZtJeP%
z?V`0ibmxKXW7t+o*;V;$#Tt<p5f|={Yo<G?#gb6}vq1{c;zZy7)X+YQu}f|hhcC@o
zbldl8%>V@s>Mv?pP36;6N^2+~UtoJJVl9U!Bre`ENy!y_fN{GVK1n&f%Nyz|zbw!;
zy4EH^AnA;M=Zq;QL04N?msenxnm#zczdiRiDss#GVM7<#PHtamKpv8O@M~VHvcg=G
zNxXKlkBy<o|Hnna^eg~T>D(oYV$;O<F<x+E5Y3UxgB()}wCbC?kv)4IubT6=<wEdJ
zpbq#t*}1nr)#e`y08CB=)>OAB0+p!EGm|sbAVACx)QE6Sgt5e_b`7!HPbg`Zhos^o
zp$D3^##F^WG5=Z?K;$8@de_97;qmEnMybmr8E&~q!;LqRu*eOmfv8)XUxWAK=nOuj
zkif~gHFZ2U*d}U8>+pcTWWpAOS2dP4xFh_M=nIkkUxDzQ_8@iK0ld$&n+S#xB&T*E
zzrk4h4v%qNKuLzmYj>DqN2Z`Ibn+Yk7(K&SKse)#Qbpb?z>!XoywR|XA#7vi8oD~f
z)sl+c>uHe7Hk-GLHs3qjAs5_(YA=H>WTx+bJbgM+sy85hpckr%?rj0STeF*4g~&B}
z|DO7=Y28x!Wpqf!l6DTHSMx%t4MHUwp+_9P5I$o>uyg?GAFfpfFBxt=Ss3Xgz;#Ri
zlduwNio6p}u8Pdd*}GP|zLo}Ju48dEtfr5dR%F!qjL~c#oN0VniF1RfS44Y=+S42c
z>*6vOBQh6r^caEL#Z4ixF!y;kSPe!xJPyUe)=*O%p8X%o#+aMSnEn!yLo!{?4%JHu
zaW8Gv`-Nv2C{72|Q&mL>)FtN5#SDfNZsT40zIVxx3k{O9!WB*;<fq2W>~I~+7iY9~
zLb-C7Dh-Xs!-%wyGla;ddajH9Nh<O+50_YpA!D$9%74}@DD6wZ>3swcm6lGAx3E5X
z@UJ_GKl+N)W}1Tgu!;hI<<z*CArhv$glBY{wymTpT@VcxbXV4lgI+h`YsSjYz{f=O
zSk0fg2;`87E!D#bl8iM@rrP4q+}tu0ymF~#UeXR252KpM=_x0O+_b?}5Vn0;Jecrx
zXNfIm<mM`$(;c<=V!)|!We$9x(^JPG!kyQZX^D39#oVV;d_OF6Ehdn3Z}zOc)n(h^
zg61Sz(=B-kt4w|T4u}(l)J~rknfQkU({cFRI18tfF{*in4ZBr7^?vMwqYZ#Io(rC#
zR9YXj!o42{npW+sX(}EKtz-?fnpO{Ur_Xz5x&+fPdTR3BgW2W`i|w}G`N>v)NSIN;
z73?5|1N#fbA{Gckgzc2Pqn>j#_FOMN&G9jXFF)<WOOH9A%n-nhuX*?P(=2Y{v5y8q
ztiTo2#dN^3mG<3tj|RD3ttKwL2NC(}Z=^y2>52V1S-ou_<FoITh)^F1NNer<y{Aiw
z!iy1_b)gU*@?YR6`Ybb2V34>3n;{)86{!FiRI2{`D!DKZcx5`il?{q1FE)QBse`7j
zv}6RYB7Sb+CSxz*blAV<(L}<2?`O&0S%qKqTDZ5nr7i95CIPU91txHrkzV*@=aw_;
z90QUiiSQdl9S{|grs+&fW4j)M&UCj?E*bYx*F|$$kS`>4x8YW5u=~wbIw1+0obU4J
zhDWwT+!bQZyF&Wdfu#@AvAT?KvX`=l9{Z5kY|KNu2`{euBG8$7kzx&wsWc!3#np_l
zKjf#*=zd`7cg08>xWYK+BE~8#^U?iB{TzkeXll4!O%AL1pE5S3ddGZ9tUfl)kz_vX
zrV{w#j~%^iPFHG0_GjyQDF{Rq40AuQ;o?M|vfd5X9N6O3!<Z!)OR;DSv)5nXtTu$`
z|0}RRf4r(&tWO8!Qaq)8t_~@(4s3awDczPWLX1t0w3#{&HbJBm8FxmS%pNxnd=|pU
zi``WzrBOwP4jkhnNM$80CGsN!E<L2>Z%^iWPVSCc@Q3JCWSjaggcjce`nt})%Tto_
z3=&HqK6`whT38VLy_gJC;h~lK=+wmJLGof(U!qSVmE9!JhIv!rv>9pz{rwJ{q!eZH
zO>TBpL#Ld@f#usqaxW0Yu^CP9vyHWak=;y=#mz-KC~hJzoOnI{?=h&cp#?blE7_W^
z+C4puRwC;hmxP}Rb!*JT@M<z^yz1<!J|rvshAVkv%;n&bp`nd0BL`+<6*o0oxNjsw
zMtykeM<c_~qj`<s3&p`#<d27(znDQeg$#cAnG8x0^wXTk5tBIWH(N<;X67qMizD0M
zMgHCmotU^&&g~~mf(kA=-C0#RVJLk+WocG<0r^rfDcNSiD<_xp1M}}G)0r0Rr9<RE
z_c(KV-r1=IL*GMz|27oU*^K`;H>mH48Z6HG^mC!B4xiaO4KeM<l~U8p<Z18lRAIt3
zh={J`R>9~${$z3fC94OX&t@doCcBO9elF)TXV3HYiDZMp;qAr9^oN^%r6`7Y6_n3q
zzK=700pF-KfU5j1kLy$b_}R*QEsE9%HtPHGVE3c_Kx`OJHQ_c5<>;!5G{_*YbQ|q!
z;k4D|MIz@>l^k~HYPoi*JBFRqtC8z;{57PIZ8a90dO^Ci1nK=>Ly=go!}4xTL-bW-
z-#Ks&H!9lzF+-5H)kH~5j5L3O;3v+h0bS$F(Y?HtDNt(FmrGy*!U7xXETuGS$X~>S
zZHveayT_x)ShuU{V;fhkmlr9fv#Pwl)zJ?dypVV~3Ba|+Y2>L2?isVTC>{PY4YMU`
zW11di|3bQ)vZjmg63wZ+VA^s-s#cT08It<~4&NPh?xs}#K=16Cti<?Bp*>fv9AsvI
zlZW7XC7NBmDM|DyK7Zn<D}?x9{yElIrUJ`1=ZpMiR10Jdmlpc-Fn1}kSi?l43*4!?
zVG5lE@rsL4`t`qQhjRgMq);=RsI?nh`>pz<%ORT{8PSf6_*7RBbyyfcZCBT8Eca)8
zD173O+SP6&8)H9uBMXyn7q(KpIJo<zzCr{4zV4`S(2{f$h2^Y8AU_dVExVv53z5BY
z#DWDNP7LBrD9ND)_cq;$(W#>K`LFWmrN~9W5FoxD>FnsP2XZ7q8Z|wDc*-+7t9>_k
zxVy|>51v0m*YsiF)USWZ+FUp__i1QmQ<d@i>U6qD-2c_n9P$}pv~HvJz*U_SzMR!1
zUu5dJ-oa*D>iYQJAG6*G{87CuSp-@vs!^@n`D}`nKaxf-)bC##V<+^Ya*`TAPG?8U
zFZsqX9!Q9h^lSec=#21a^`B|hCOh@ervJVBV;q}8@+I->Z6C(Lt3SAXL3xWJ1Pg+E
zt1e;@w|VNwu8As)O0Wk+|JjbB6r+ltW|=wrSF1=NCv;=deiR6r?VL>$5(i=$1j<sR
zc6B%jD35asE<?X0hEk&ntDIxP{`0E8r4h2q>R=4u?OD}a<kE;q306`FdcVy+mNT97
z$atcMKKG_s=sBB&2_;x2=@WyY+9Q*8<o>VsYEg(3FGcd=>E#m5T&^k3yrFts$}%;z
zNkyz-o|6b2|Fb&qb!Pmj?Gb2Ko5bBHR8<ZptOa|6Jv@Oww@6zB)F>>)u>g<lo!5O_
zC}e^ES1{`d|1Y1|eBB=7=Iay{KGG}1BfcQRQDVM;l}khrBiF6?ttrKTxbjLi^0#`4
zuu{{;IP+x?v#NVuS_0=d6`WxB^NQvDQn@r7HH6_}1!#?B_5f=XW~{G=q07Uur)tkY
zyp~EItXh9sg5)l7VPw1`3lFd3?fo()*v>G;_fKB=b2bJw#At~Q8egS9?cO`m`*biB
zF}oRXI`Bq9)l3*tw>1W|(R#?tu6kQTY%`y*e5zCr?MhYa2jOqO<<VPiq|&_w^2&0!
zVP&h>(ozzcRlq=kLv1YX%&?L1WiEy<Wa*E!XLBlW>4LKm<c<_Sz&j#`A`grdzLV&d
zvOLh&@51Af$y-1Ma&CzAL~!j|PrDSD87oE`w%4WbByw4iUVFw}BmseeE-(3Uu2Np5
ztf`INb^94XC~?_ALR2GZGB>L*uxu;9ttHN>EllQb3_lOn8(2C38vS+|you<CSUinz
zZ$Z>MWgHEhD|aY-zbPsxTx~t;>OB;F16L!dwFC_pS^9LrD)-{2;`_xED$MMlHWiB^
z#=x@%1nV+ulNomSNO}C~VOEs)5aq>vwEr#4u@```m45^Qxq#)xx5a_Z%?&t<nG%q#
z+)LRbpbIf`bXr(xBOnXW4>w{nf#sp0@vH@RKaD$>E+#+AJ96|4$M=<I^c;SRdr(H@
zaN^2HhpV^K<&rGr1*gPG^<Bp5?r2W$V_#xnwfL3gB#?uKcidH*a?8o=(sEti^(8+P
zWduNpB#K1JfRf!N?Q0b+`!diw%&p`g|5-()PjObfB@o}eytC1NWC!)8xrd{|Cm)oc
z?bhhv%T5cQYjqp*q5}VwKC084!MyPfv)fm?!KpMcauv41OW?m?5Y}|99Kp_}j@i*n
zNZs$%GnqDnJ8nG4d8!#<G)d&p78ZkZ_D$jm@Zf-J1Byq&4~^8t)M(OgiA;C86omQ*
zT?K3;wqz8X5oUv9d%uX(b($h^6&j`xqHiQaTTBj7Iw7$*NO5wfwxLzhk(L-MD`pN1
zeApmd{c|A%v*UfO_enuk!d;RA$wfsu6BK>zK06xm-8k@oy>Ku7lefYCuLBtCcVMPn
z8#Fss<T@KNf$N#^%lw%)RM>xzv;fD?P_rD`{r^!vjO58ja_6S)2;zS_C>wcJXjx=L
z2x;a<2KzW%vUE_3^C8RGM10?VK)(hc*%HD*SXbj)*cDAg#9VJ*<cPPi0U$%>`Jdp(
zreWL9aG)?%+C*J?<i@yxfVy6^D2nWuGH9Si3#6k6D$^8t-_C88Hq<TD_{d;tk!~*`
zl(MS!;Q$l>rclOWz@1d{1*in;p6H)G^DTY+`xN7~HKF0LrvM~fv3q2E5}C+S8b1V+
z4);9!4B4uSM={pj)sRt|X!jU1Ie{2b!7=M*Kw0SHlDZ|152jiskd|f1rNVs(+kAGx
zv%{7=nBBztKF5vamQG65_P(?)VdNw2FM;F+S4XK+wI!E|`kk!;Q5&%tE4Dp(aG6j0
zu>Qyfi)jkiP%Ij&gJ(!OFbc0qHOMs~Ov4-qgt<(A4y*RJ1)?fZgS@Zs;ziyF`opw!
zOk}&q_+b>ZFbu1P5a7Lp+41)kVM73-uM3cF`owK7-r>Gmiwbh~>c!7?mEu)XB_8TD
zc9ST`WUpqx$?$$Qc*z!t8RQy@2QDylX=mR}_-nvOd#`7ryZ~&Y-+{0ObdeM8G$Hdo
z--ViJ6g#~vdjk?q&us%Ev@>n=cm^@O${oGEcmuOjAAE8Z)J(PVF=Z>>dU#?}BaQ;L
zNytwt@Ap-Vu}GT-;YlU|>h}~C5(qK-z6^arY!-BAW-f_I+*ui8F4m_E7ErSwQ*n=0
zwQPm0=jvf#5;}r*hKZ(O2nF!=bADF4cIjNOj^6hx?=m4ew@TH6Sw5dS*>^*%UVkxn
zcuoF0RJ5TqvPx99BOxdUcuMRnik<rV9?fDkjEM2(?BG<JJ|YXydOe<~lD;2mY=ga4
znsmJ+AFDFxY~Q_f(-rusq#<p<s-7C{(mcjhP)hq9(Ul-UL96LL0^8;ay@q{;?Of3Y
zT*oAs*}C-KuH_a+k`Ku@rD0}p24+eMFpv=U{OqWsHXT7D!j4eL{(~IvV!I<sx!CMY
zV@|~hP8P(RW0iuybd2D4MUPyt5h)>u>LcR9kA9u^bB?b`37sy4=41RLfJp2^tJhM~
zy<$HHQw56&l7Da@%G+Kr<2<0YWr(og^2gI>@<%u&hwd!DU1@H8ox9l44kI|7ns<<g
zU7Q^w*|TvlL5*7?^1@!3=}*tN2=l+zDk~!={#FJMDx3X@{+)|(1n$rc0lKW(K6L26
z&|`BIu=dkXG3e8k$&x37Mk%NT8Q}U671a(1?w$!r0F;QI^B4W=+}Xph$wN_B5n*_4
zfxlX8p2V<g9|c|pJ+zzBD~4?j8PlpF(Vr+01895jOhfZvcp|iKJa`657soip6`%`8
zMSR0L-PES7)Y5;)hjK93PV+X+bvN_jc(EtK%kkYNqdphY(t)HHlCpca3a!`oL@e<H
z&o#kFlafgM>_vj@E=CqU`D*iw;?_I02*kA!sm_fiS&4<XZ4&K}fkCd+j~+(IB$;|^
z06yF5J2iiuWZD5T0EFT;+dXRic6*S4@m?3SsZIg5*i74EjLt|t7YK&P`5VH`M)ozP
zy%zv+(WY82Y@z*WuB2|@6GvPl-G}W%)Yvp}bDA6M(RnOgN{Hmhyc|!}w9Q7q{|$l(
zlbp-PHy&unLD)&cuK1IZHCzL^>8<tMMH=qISi|Nr2CaxpE|5E#ttF!F!KT{KulCnN
z6@m(+2D=66Oo`M>GF{7`!sq-~MrTL}EtjIiP&7F&4}#%j8gL$QAi=$a)e7n!%QigY
z%ga5!^x6{{TUyl5uZKMAMPf4T^G%hjIzjYdO}I?G?%Q|mmkoh5^^FG!EOyGNSzjcY
zS)j!nk^Tx-es{}VSDPj!)GD4JV&6KTyfT~TG7nq|a^`||BXfj@M|Y^;o!`OnfkLhX
z`lAwiQjy6nWlWD&>0y7~95kJ8_?L@#*lV4M$IZ`?MX8A9q&t5l0LTupP+qLoNxI)#
zpCGJKgE&yxb?7TDnjbxPzP{Mv6e&*_rZpdb!c;$;!EGaa?A{UIucuc(HN!m%r;ZwH
zrK!TV1ET{%=8cchc*WXqhded5Bn9$cP!P{WNY9wQDzei#_p5^*bD>mf&j7;@=#?tv
z?>Z?q9OtaA{ys))W9E2uhW`*6$B)~m%P3{Gj<4SLqlE94UGoGg&qYT_`*q3K8m?@b
zIV}8zD)W7$@ORVX-f8pb!iC)T(yM99+jpC=NgZD3)k`5=P{5A(^hy=-y3}G$2~0Kf
zHm3%;RBKnVjtJB#k{!UG*gL3aJN#dL3cbAT>4f-1m+>n99Qg24F03qkPGbP`eff0|
z44<Q)6XRPP5NpiOHhY3i2)X0r8;}ogOB$SX$-(JIes@00S$}$OoOF7CRvmty-WnOp
zg{F6S8Don(Hsw|rZtvR&J2GFyNDm?u@huoVF}ZU@;G6gDrD%6_+KktTYfU2PJf=xf
zC5H^p<|P~_N++`M1d3X&)#xK1dNFF&KPYO9XiW~9%}L;s)tKJKd&iuAsgceh%Jq=N
z4FI67ZHb4}OtWDI<@WE5!2w$`;czTp5WlF9z~D(&RFVXaT~olljBWXqk1lq)x_ezy
zR?rFvv_Mcg(@FMSi7f(?Q)Ejb3(3ro$+tTPu@j&7=KQYMUSdR}E+_QG-@IzQu?rq(
z;*DgMlkzqi`|I{BUSO7-J4QN55xA@eOE_R%c~kExs_KGhNEDI%L^I=mGBAkR`HdJh
zz+WWzOl3y>BDisXBc~uW6cwHLD2Gj0NAZU~M)T~kmEd98sk4eG$oh-0E2mSSLMap^
zU(tgL&uk0oL#0RHyGU$8Q)3h}=#m+$3l#GxItedv4d|F^l@$cfEKKQ*u<`DVh$Y1A
z3UaTSTzT>PNRJdNJJ8aM<Q2>hIAZih-Sqp*czmAsj{{N0r?fZe^IFo5ZiV#s66Srs
zjXpT-LY^{qUNKd?ryHm&(W8jO#NX6LYFjcn4kYw-4DH>if5k6!Pnfz-4Z{K@A;%G}
zqvew#NOGw%;B^0nZdL`fLy{Cld!I6!TLWTE0(YWCWsW!(rs;}MhfQ=5#-4so<;J;g
zM!Q^{3VHa2@#Jhn&CepMS@6t$?0%cmU^U6<V?q+(NWWB5ErR1S%OQ<Bv|Ix*4#JhU
z22pFq?rSCf>EvJV5`Jg8eTRoAwRgCV;32KV$eP`+HEOy0iSg*}alxRB98jgu*nH=b
zdOXu%utp^Zsy($Ugoe-(s&ywxxmWC$G(x1j0eZzEIxheW=L01!#}1b$(fD)fk3P(A
zV`r+_!>CA2TgLngSL57Eeqc$5$Z4Eez>S)*V04V=+aPS*->@iDU2Bg|nRyWPREjl?
zI3@P3IN5e)eC9c}Vmi?Y_mCDr+R3pugw<}|4X?;t#4K1Hx{{hMdj8(#8K?6ntwc`-
zo%QxI`c<WIgyG88<-nDD1lvupG!rQ4H3OEx+8r8!+Vp>ktt4$u5-D8v$kq3UFJl$@
z{`|d=GFlN-y!2ujb<fO0N49KV$ukeFY*=f$Hi{koS%>qYq5T;iKpch#TB7)G*xaEo
zHL)^0!d{!dPElW@^jOthw;Py2j|fYjie$UJH~dHafjzPL-i^{8Ci;rk_S`+XuL7zk
zMeO6nAye(Gz2u1T_Y^GU5h83&71sqT9@z0a`m8J}v~Nj*T%-S^QUyIYGC4rJ5g+9{
z%iKEZWV-8JCJk(c{6Da*g_DY|JD3SvHCZ>O<D889+?nM;Om$>9W1%TASF)mxa}a8B
zw%>A0>xhQWJ{$Dk(2xV#yjFupw#OTX&y3Aca7?b+mC^>$^P=gh1Y~3=EH&XFArpTM
zWl6OQ-Kw&~nYM3brf5Qb<`Z1#P(Va$BnKVZ2tdd$*;pP<(1^u*OVNXCLjHrd&5;2?
zTZ?(*zh^cm0=gKAxI<ieteJ<x;EJM?rHJ3*qWn3$Hi*HpgEdtXuNSwPqc&CAvuhj_
z=S2A~gh!KgB?8483h!+Tw*~WB6@j))w#+MkXW-#<%{K`v<~9LOKjvaa1v}vGudV*B
zJy2awOd&TvTIaX5{}x{7w>CkyKG>Zf+jC2C^!yOeB~uKryc4d!OvN0Jz*t$O5VQ?L
z$Dx9xmE&e>E50xD&2s!ZM&!^%DpOUcNAgtSU{>&Sod*<FI8crHWglyMp8kX2y{G-I
z11tN7z;sHSds5NPvO4r{#y0$?`yzNG{i-l7!L@VBh8;6i(c2d&Z6OKfRLo!vfyY_b
zr<$8ntxeGP7{~wKki`eD8=#`xbM%^s{~ejuz`IoC6uBH;KnTCMj7ErJrH@80z(9>y
zw-j5*@Kk4lCozHxv&Fej^;{?`OrfkpGb{E_tM)BNYUJjREeawY|13C4U(Mr38jB_{
z^*tbXs0vUqHR(eZ01Tq6VZS<?g4ig?ozYi-ct9$#E9Cd&!Wdm19|T(6l%Y|I00)0U
z<O6KEgv*&&15HT=%D3r8Pa!weoGwixDFkk%IU|C`X_9f<Dsxw*r8=*<b^aM&_0E}u
zW^KP)+(}XxQkj~#vjI}Y-WWJ|XdL@_6*TFn*cMZa^i?ok=rIVS?9>(HoX`{3(pBpm
z<=}zD9@0z7Byc9raCGoDiDOFvh0@?4_vhc#%!K-E+3kWSha!Js<S$SI9R30RuiQb&
zEERnK2ml}t`u~$VT%0Yeo&J+MMwA9(mlzOw&Zxx>_nVE6{%to_HbYkr@5ZZxKseYR
zSs2=9?{la?Z~2Y6ZjaV<Y7!D22=nH6Fh7|-b{k-U5gWrxz32GzI`h4;PY;+YsFW9=
z%a9|wZvoiKX9$0n8fCK1*Y@Ulpja`qm-h*mwAnbFL7~*+DO-qCDQ0DReA7I;nHgz(
z$fly&O%*hl>RK9u`S||(7ByWPLxG<QK{6F-Pt3UC4&H;X)H>CE#$`6)4fJsoxNahO
z7+t?Bzy+cr;ziptt)CLG$40ga_{5hJh_;g1C)G|rp_vk1@EN|(yMUS*TKIA?JQYtG
zEaXFX4Tk=u56QV2=ATg)VdLQ&JPhCRi&9t6#9n#<E!jp&v<c&~+td^Km)h1@SYFHL
zoA1iV`x8v<`SqJC8#OzXSpnsd@5gp&anC<px&WgYV@)>E{zXt3l_{7puy--qH}$O@
zDi=YIl;|zCo7A}n>0}iXUh2~ihogXG1)-}>CkU%Js^A8<AbFwc?S_=|;psM~^ypOI
z*sB>;ql25c(Y&5CaFs9<Le9MU4-!4=eIhuxo1Hu2BQk}bY6mWI3+fn@D6uS`HL}t*
zdZKEia4YfrDR$_%`bz$Ry(OLpwnO14KL7zDOXhWL0{?%v3yC8G75RT#1qu-Wfbstg
zy%;$;<*04h9<d?##P$X5_*ei>m3qgR<O{4eG=Odvc4hTG$0V9(LDE`^S|+iK_ql~8
zTI(FKh|!^OW=~}d30t~<D8*?f())=IBDn3#f}!NSjSlbHzw?G1aPvYe8$b+kG$}qP
z5xIH^i!I|Ob<tDG<&KM$D2zwTBmQ4y=K>c~`o{5TvWSvGl&-Q_swsDWSv4wMbWvj4
z#5hgUG?_Uw%_Ws?lVmI87D*J1d!^k9OW|L3yP$3Tmk7BfOG3G(W&h8qCUZ_RIgZaU
z#^-as&+mPn=Y8JiJ$&8}AJ-i>UnLEiGA-rhl04l_i_QyccDI<REzcZ0zN3nN$|*I$
zC2LnjQ>@Ej^^9l9huyNzBgt#WMLt;Epnvw%^UHhc<5z{<Xw|Z@F-x!BqGdO<Gk8>|
z#ivJ&b#W!7bCOr*bxn+K6b;^OXcDXEe9)!D)7MbA(f2C*@KL{4&CylnOJ=sr%}Ad2
zj&^d(hT_tw$mU8mEnZ+wUHGYa@}%?TF(w}lh8sp?RbDq-xXfdiy-ut!`^olJC)=Bo
zvYZ>G!51TLu0874x%slCqk)0rzLWwd^^L}V4zYN&t<0~8JN3SX0ZXg1cINCC&oAuR
z_Wcptj2KIqny=d1Av>QrHS3&tw&J3drgKTLwzGQ<uUhE-qweXq!S<OQ>iaw6cbV)g
zZ*tC+xzFop4?F1}=zXF5kHoGOiMQ9J{wI36vA166ip1ZXZC2ShUo<nA)p#j8WSMqn
zeUfkBljDOr!gcjh{niE>*f%n=e(<@Hg)}AG8%%1Jx<9jc?JApaZXT=5pkUc-^i~-E
zL>%S8ruzlMd^Z&iAG_yDizHR2CWaR7_MO;D-<IKYGKg{P-npxrbkFG}Z@;@y?eBvZ
zG~De+ojx0Go)+#?A^tw6-n%V!`H2QwsXzB%^vmj%NoMJ_()8dM>y=G^@1*2;|M2`x
z$dBqXTC<yqN3OH5%lYWhHSu44k9afl(0QNEEFE1dTeCQHcQvx^wSI2M%*H~8y1Ne!
zy{cw-wBAqFxOrpCY2RU5M>8kY?Dgkt)p2tQNGfYe@GzWW>oGD}Q?u*iQ0Ijq4E?+j
z#@Fd3+a_31-rM^OsUKtPs53Gy;osw_OLs5a><}hfP|aOl@)tGRch$xi?@^mRreyp?
zxxH-lb(zDZkk-Zw8_)RC75-VF&m7%3tG)b-bcQrFUvN%y$lE|~QG59yCA>&`QfE^6
zn4BrccQv{TZq?0dpE5+9Srb$?D4U;#oGW?MOiL>@o_x-_^~vUALEE}+ntZD};_3=9
zb+B#K|NQhG-aF`cD4?uSH{kofJRc@CXdl{8ZhQOBsl#&(GuIgFCjV@b>(_P1Jg(wq
z`8svabi|^BH+SLeJnvTB@l~&CvI<u+nb&4=%SSZqx$-nxvf}y@*#pZsdepQh(&gq`
zilekl=LcH1d2~JAz2is5`Kb5Hs0r?m^&X$O8+iVk$uX55eqA(HjM&V4v*L&C^h<B+
zuJ|-m{Ig~L;RL;fJJ21){LqF(*_Gd@zItixVNV-dau#XS>6UG)-#+(5NJ3+NO}f>>
z$A^<X{2f-BTv(cPPQTzu^z~5Jmgod+uZs?~X9CmN)6Zni9`74*fx5jy>(^Te_P@`w
z&3KzL!AdV9j(uudVC5M~Bx*Tx!`9KU7ytJz#$;>eqxmhGG2SK(txsa+^0#J(td3t_
zzb`n!vuNxzD>wfBmfWP@Bqi(hXSL3@twdX{+hux|(ucRcb4rVA6-StdbsXAncBgK7
ztvEl<QFvln>eb@`)G@vi<lR4W7gwFKifPZ^`sDT8fb#`AKW$DORUYo$)^w`8_|%zQ
zJLgR?iY_egy!>kUrr4CR=@#qFi~Z_mnN$R9)~$&dy4zsK;<f+S(I_4TRQ9dh881y2
z6jyE9YHz}*=#cJeieJ1)jcTtx8Y(QM`+%+PKlJ{lrSPSVj(x!$w>8kCdbmd|iI4W3
z)Fo%g&-Z$i@y5fDN}<?6>7Ss$kVzRT83Kg48ey}bN8qDG-mtBcOGDww6u3>{mR~aI
zS+If|PM;<kD&TS0C|}4T(uU3*LHz*Fod9(vauj^Zr0^rmRM32#=}w-`G+r<f)^);l
zK_S3$2NQ>y34fzp8Z#6@*(@%f4TB}}?pLSz9)+XP98A>+;*vE~@p{Ir1UCBP>jirZ
zDHJ0g3dI~ZQm*G0U_1`01n7PGWfB$yGiU)#aX{BFRlp$r8kSILSZBqsj(LL1{lQb;
z;%M5dRnZ*1z5IOL7A*C1^KwxVj>w(o&<;RWYf>l{IAjj03h5%0pyCh?mqlapLqb^n
z@`YAZ8MqNbym%0C(AR{jm>zD9&R$EDB}^5|-Etf#Gl1I|uTY|jM(g&WkV#CITC0v5
zfuQUIIM4{kdZn5bCSr>Eqq3w@p&K9~;GT#>rADff#pLq@e3XS^NAmTbv^3p<v3WpB
zfn32)voTSshyV)ZpyK}W&{}pg0<bu^&2aMGsD_D!NCZbji{f#Kj;pvmr??Fo(vPte
z$|M{vBU+WV-dWZ&F=#wQK!m0au6(o7hC(S?Lv&$PJ_)D-5mSVnlc=DqJ747A+vx1u
zs)!I<8=|tOE{3%yAy1YLA=ZJM0XeKl0bhib<R0L#Zu^+9_ctsOo#7jHPm!yFPnmS*
z-GPMl`cNQbg>WL3aH&P_OHF};-FU9~JrZ1zBt((>`M}BPcI@;#m?UgiBEJK+{E|u2
z?hV8h^CeKMnPLuKSv7p&AU<mkiwJK7(XHag15s7h>veHMlS-k?{{h7sKM7wy8wkil
zP*^&#B1???d;TsS1BelT!zX&{+kuEe7L(6LInhd?d)d0_ZIBE;AajD;mGCK(rc=~Z
zta(^k%3lHyMPBx6oZ|)s`<NAxS2lbg9tRaju-YT%VN!_GMsX2nqdSiqi1&HWqJC4T
zW5TulVK9ZVA&aKr#+*W$iHOBQPLM?Wc}9KC(9!PR<}JW~43i$*(09qCj^oK{79h&9
z)TrvloO-Cir(s#7^>MLiiHu2;IVdw!!PD|a&-i%x$aYX&4uu8JPB$gZ7P3Uxt08$5
z<?J~>ZwLti-A92BRkiPuNiUm|WefRYM5(*E$E02M01kq1;)Tb5OBOC#!x1P8<;ahS
zj{%g0rBD{|p&a%dS+*DvD7XY0J2A0M`y4`{w9!%PfymtxrC&<_;(y#k1AOpy5V0uc
zlc4eV5{0GVb0XJH&5eHusdfjd4nAyMHec2#;KTCI60#zCx(Z@WtV%sJ_5ese*e`6B
zGrkNLaZomw)m_sSoGZ___CnXC$3VCdR5tt?p+Eb}Y*kd#nvD@pf%+7v)(Rn$Nj2<9
zQdN2SQA*<QiBK+%!=g3;hn{b*3hn4h_i}Oe@K)@du}6v71)GMxtBroZMHR2-jAnV5
zut$g_^F9uir?<aAf|X2yaQjkK8Bnn=Xrmjs4lJz~*n5DqT&O(eZuf6GilD|^gPfYK
zAXFx0eHB+Ej>5JNqJBl}NK0m=Ef|;t2Ik=mOm-(F9P6=R#b9*j7o)co2^IHmX@}&+
zobCcEB``JciB`Obl%<~4R2f>`WBqGC$l(&G^4LoN`6ZKfdXYk7TU}+~^EUr={T0Bs
zAd9hcz~vXTk-ntBJPB9K5rFHJ(eo!GTPi{F71({?Yy942r06IdK+XzQ%D(M{@(Q7D
z{xX~x*Zh^F*dh*SN5p)gHJi_ess!D?NU0^wKM&BZfh9|LkAuBJmtQhz3G?eLDaB8Z
zF!px@d;<&wKLc)rlEN#t$jYL?Y>3UA0Xg{zsuVs7TplR{u!Vz?fD@1TfLLeD<c@*Q
zHu^J|)yiMKD4Z%!tOjomp{0JXa4*s!O0^V|z+q&DsvdW-QCC?6_&Iz$g+f=5DwAG{
zBFpa188L#gVCiM_HmfSOCcy;~hlwz=l136&;oLZ~=2$2a1XHVjXO@*gt=EB4gRR2&
zC0-|yG#p#um9>2{#N0uhp!_W43qIfZNo3({h=c^%N+sG$G<F9>gYFlA$7?_J6Ir~<
z{hM9X!?sdz%vqRBb8tb9OD78#vce@CA&U`$aJVoAB}4EWWmBOGR<1#ZH4A4YWgA&5
z^1{i0MpK!aE@Yr<1P}!-<c}lH#)}<fZS<5+MsG0W2@6|FWd^H%u^x997RqLre|9*7
z7c$8j6bShOgpFWRf)OMMQl7kbR&~g<!FyCl0=)O$XOT4&7A|24qZk6NgpGSmis>fS
zC49TGd@l(b^7QR%gXHas)4n6^dZ4`toHP^Xq`a@<c2_FpyG5@ctAKon!%(PIvvDRg
zbH7G<j|mmq#v}f}t7(Ff@h}#=5v>DXZA8^JtZw^MP8}Fwg0t{l3z|p52nP*jMSgMB
zQQRoB(bpd&0anq9qT1zmB<m@Z;Kx+L3x-QyK@H*}=xUbYOA&eQSPgo5y&c|Hk8x8Y
z<jxjL>X+BbUe!IBPgDM{1CB;7tS=T(C{pO@@a6BXedJAW`N4=N6yC-21c<VM5Px`#
zJV|BJ=ich12O|GbGQ=K$_#a$8(~oQ?Pgm6i5dS~KXL>^hd3ulb?%l>WP{rUy9Q=9*
MjfLkPDA|<%15$2ylmGw#

literal 0
HcmV?d00001


From 5b5f3a1b5bf1d7f2f337a967fa90ca2873007b95 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Tue, 2 Jun 2026 12:12:32 -0300
Subject: [PATCH 683/707] chore: configurable I-D submit timeout for k8s
 (#10971)

---
 k8s/settings_local.py | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 402f89787b..20c5252ff0 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -248,8 +248,19 @@ def _multiline_to_list(s):
 
 EMAIL_COPY_TO = ""
 
-# Until we teach the datatracker to look beyond cloudflare for this check
-IDSUBMIT_MAX_DAILY_SAME_SUBMITTER = 5000
+# I-D Submission settings
+
+# Until we teach the datatracker to look beyond cloudflare for this check, it needs
+# to be very large. 5000 has been working without complaint.
+IDSUBMIT_MAX_DAILY_SAME_SUBMITTER = int(
+    os.environ.get("DATATRACKER_IDSUBMIT_MAX_DAILY_SAME_SUBMITTER", "5000")
+)
+
+# Default is 20 minutes. Allow override via environment.
+if "DATATRACKER_IDSUBMIT_MAX_VALIDATION_TIME" in os.environ:
+    IDSUBMIT_MAX_VALIDATION_TIME = datetime.timedelta(
+        minutes=int(os.environ.get("DATATRACKER_IDSUBMIT_MAX_VALIDATION_TIME"))
+    )
 
 # Leave DATATRACKER_MATOMO_SITE_ID unset to disable Matomo reporting
 if "DATATRACKER_MATOMO_SITE_ID" in os.environ:

From ce4345f32ac9f31db4d61034529f69c2bba61282 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 2 Jun 2026 12:18:25 -0500
Subject: [PATCH 684/707] feat: update rfc json (#10951)

* feat: update rfc json

* fix: resilience around fetch of publication status

* fix: guards against malformed RFC document objects

* chore: fix log msg typos

* test: mock more async calls
---
 ietf/api/tests_views_rpc.py      |  74 ++++++
 ietf/api/views_rpc.py            |  11 +-
 ietf/doc/tests_utils_rfc_json.py | 432 +++++++++++++++++++++++++++++++
 ietf/doc/utils_rfc_json.py       | 233 +++++++++++++++++
 ietf/sync/errata.py              |   7 +-
 ietf/sync/tasks.py               |  21 +-
 ietf/sync/tests.py               |  18 +-
 ietf/sync/tests_tasks.py         |  62 +++++
 8 files changed, 850 insertions(+), 8 deletions(-)
 create mode 100644 ietf/doc/tests_utils_rfc_json.py
 create mode 100644 ietf/doc/utils_rfc_json.py

diff --git a/ietf/api/tests_views_rpc.py b/ietf/api/tests_views_rpc.py
index 6d147c00b0..72e0d19785 100644
--- a/ietf/api/tests_views_rpc.py
+++ b/ietf/api/tests_views_rpc.py
@@ -565,3 +565,77 @@ def test_process_rpc_queue(self, mock_task_delay):
         )
         self.assertEqual(response.status_code, 202)
         mock_task_delay.assert_called_once_with(queue_entries)
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    @mock.patch("ietf.api.serializers_rpc.update_rfc_searchindex_task.delay")
+    @mock.patch("ietf.api.serializers_rpc.trigger_red_precomputer_task.delay")
+    @mock.patch("ietf.api.views_rpc.update_rfc_json_task.delay")
+    def test_rfc_patch_triggers_json_update(
+        self, mock_delay, mock_precompute_delay, mock_searchindex_delay
+    ):
+        """PATCHing RFC metadata dispatches update_rfc_json_task for that RFC."""
+        rfc = WgRfcFactory()
+        url = urlreverse(
+            "ietf.api.purple_api.rfc-detail", kwargs={"rfc_number": rfc.rfc_number}
+        )
+        patch_data = {"title": "Updated Title"}
+        with self.captureOnCommitCallbacks(execute=True):
+            r = self.client.patch(
+                url,
+                data=patch_data,
+                format="json",
+                headers={"X-Api-Key": "valid-token"},
+            )
+        self.assertEqual(r.status_code, 200)
+        mock_delay.assert_called_once_with([rfc.rfc_number])
+
+    @override_settings(APP_API_TOKENS={"ietf.api.views_rpc": ["valid-token"]})
+    @mock.patch("ietf.doc.tasks.signal_update_rfc_metadata_task.delay")
+    @mock.patch("ietf.api.views_rpc.update_rfc_json_task.delay")
+    def test_rfc_publish_triggers_related_json_update(
+        self, mock_json_delay, mock_signal_delay
+    ):
+        """Publishing an RFC that obsoletes/updates existing RFCs triggers JSON update for related RFCs only."""
+        url = urlreverse("ietf.api.purple_api.notify_rfc_published")
+        area = GroupFactory(type_id="area")
+        rfc_group = GroupFactory(type_id="wg")
+        draft = WgDraftFactory(group__parent=area, stream_id="ietf")
+        obsoletes = RfcFactory.create_batch(2)
+        updates = RfcFactory.create_batch(1)
+        unused_rfc_number = (
+            Document.objects.filter(rfc_number__isnull=False).aggregate(
+                unused_rfc_number=Max("rfc_number") + 1
+            )["unused_rfc_number"]
+            or 20000
+        )
+        post_data = {
+            "published": "2025-06-01T00:00:00Z",
+            "draft_name": draft.name,
+            "draft_rev": draft.rev,
+            "rfc_number": unused_rfc_number,
+            "title": "New RFC",
+            "authors": [],
+            "group": rfc_group.acronym,
+            "stream": "ietf",
+            "abstract": "Abstract.",
+            "pages": 10,
+            "std_level": "ps",
+            "obsoletes": [o.rfc_number for o in obsoletes],
+            "updates": [u.rfc_number for u in updates],
+            "subseries": [],
+        }
+        with self.captureOnCommitCallbacks(execute=True):
+            r = self.client.post(
+                url,
+                data=post_data,
+                format="json",
+                headers={"X-Api-Key": "valid-token"},
+            )
+        self.assertEqual(r.status_code, 200)
+
+        # JSON update fired only for related RFCs, not for the new RFC itself
+        expected_related = sorted(
+            {o.rfc_number for o in obsoletes} | {u.rfc_number for u in updates}
+        )
+        mock_json_delay.assert_called_once_with(expected_related)
+        self.assertNotIn(unused_rfc_number, mock_json_delay.call_args[0][0])
diff --git a/ietf/api/views_rpc.py b/ietf/api/views_rpc.py
index 83d0abefb1..0c9e98e2dc 100644
--- a/ietf/api/views_rpc.py
+++ b/ietf/api/views_rpc.py
@@ -5,7 +5,7 @@
 from tempfile import TemporaryDirectory
 
 from django.conf import settings
-from django.db import IntegrityError
+from django.db import IntegrityError, transaction
 from drf_spectacular.utils import OpenApiParameter
 from rest_framework import mixins, parsers, serializers, viewsets, status
 from rest_framework.decorators import action
@@ -48,7 +48,7 @@
 )
 from ietf.person.models import Email, Person
 from ietf.sync.rfcindex import mark_rfcindex_as_dirty
-from ietf.sync.tasks import process_rpc_queue_task
+from ietf.sync.tasks import process_rpc_queue_task, update_rfc_json_task
 
 
 class Conflict(APIException):
@@ -297,6 +297,8 @@ def perform_update(self, serializer):
             desc="Metadata update from RFC Editor",
         )
         super().perform_update(serializer)
+        rfc_number = serializer.instance.rfc_number
+        transaction.on_commit(lambda: update_rfc_json_task.delay([rfc_number]))
 
     @action(detail=False, serializer_class=OriginalStreamSerializer)
     def rfc_original_stream(self, request):
@@ -457,6 +459,11 @@ def post(self, request):
         )
         rfc_number_list = sorted(set(rfc_number_list))
         signal_update_rfc_metadata_task.delay(rfc_number_list=rfc_number_list)
+        related_numbers = sorted(
+            {d.rfc_number for d in rfc.related_that_doc(("updates", "obs"))}
+        )
+        if related_numbers:
+            transaction.on_commit(lambda: update_rfc_json_task.delay(related_numbers))
         return Response(NotificationAckSerializer().data)
 
 
diff --git a/ietf/doc/tests_utils_rfc_json.py b/ietf/doc/tests_utils_rfc_json.py
new file mode 100644
index 0000000000..b94fc2cbea
--- /dev/null
+++ b/ietf/doc/tests_utils_rfc_json.py
@@ -0,0 +1,432 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import datetime
+import json
+from unittest import mock
+
+from django.core.files.base import ContentFile
+from django.core.files.storage import storages
+from django.test.utils import override_settings
+from django.utils import timezone
+
+from ietf.doc.factories import (
+    PublishedRfcDocEventFactory,
+    RfcAuthorFactory,
+    RfcFactory,
+    WgRfcFactory,
+)
+from ietf.doc.models import RelatedDocument
+from ietf.doc.utils_rfc_json import generate_rfc_json
+from ietf.group.factories import GroupFactory
+from ietf.name.models import StdLevelName
+from ietf.utils.test_utils import TestCase
+
+
+def _put_pub_levels(rfc_number, slug, path="input/"):
+    """Write a minimal publication-std-levels.json to the red bucket."""
+    red_bucket = storages["red_bucket"]
+    red_bucket.save(
+        f"{path}publication-std-levels.json",
+        ContentFile(
+            json.dumps([{"number": rfc_number, "publication_std_level": slug}])
+        ),
+    )
+
+
+def _put_errata(rfc_number, path="other/errata.json"):
+    """Write an errata.json with one entry for the given RFC."""
+    red_bucket = storages["red_bucket"]
+    red_bucket.save(
+        path,
+        ContentFile(
+            json.dumps(
+                [{"doc-id": f"RFC{rfc_number}", "errata_status_code": "Reported"}]
+            )
+        ),
+    )
+
+
+def _put_empty_errata(path="other/errata.json"):
+    red_bucket = storages["red_bucket"]
+    red_bucket.save(path, ContentFile(json.dumps([])))
+
+
+def _put_april_first(rfc_number, path="input/"):
+    red_bucket = storages["red_bucket"]
+    red_bucket.save(
+        f"{path}april-first-rfc-numbers.json",
+        ContentFile(json.dumps([rfc_number])),
+    )
+
+
+def _read_json(rfc_number):
+    from ietf.blobdb.models import Blob
+
+    blob = Blob.objects.get(bucket="rfc", name=f"json/rfc{rfc_number}.json")
+    return json.loads(bytes(blob.content))
+
+
+@override_settings(
+    RFCINDEX_INPUT_PATH="input/",
+    ERRATA_JSON_BLOB_NAME="other/errata.json",
+    RFC_EDITOR_ERRATA_BASE_URL="https://www.rfc-editor.org/errata/",
+)
+class GenerateRfcJsonTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        # Minimal red_bucket blobs required by all tests
+        red_bucket = storages["red_bucket"]
+        red_bucket.save(
+            "input/april-first-rfc-numbers.json", ContentFile(json.dumps([]))
+        )
+
+    def tearDown(self):
+        red_bucket = storages["red_bucket"]
+        for name in [
+            "input/publication-std-levels.json",
+            "input/april-first-rfc-numbers.json",
+            "other/errata.json",
+        ]:
+            try:
+                red_bucket.delete(name)
+            except Exception:
+                pass
+        super().tearDown()
+
+    def test_missing_rfc_logs_and_returns(self):
+        """Calling for a nonexistent RFC number logs and returns without raising."""
+        # Should not raise; no blob should be written
+        generate_rfc_json(999999, pub_levels={})
+        from ietf.blobdb.models import Blob
+
+        self.assertFalse(
+            Blob.objects.filter(bucket="rfc", name="json/rfc999999.json").exists()
+        )
+
+    def test_all_fields(self):
+        """All 17 JSON fields are populated correctly from a fully-populated RFC."""
+        area = GroupFactory(type_id="area")
+        wg = GroupFactory(type_id="wg", parent=area)
+        rfc = PublishedRfcDocEventFactory(
+            time="2021-05-01T00:00:00Z",
+            doc=WgRfcFactory(
+                group=wg,
+                stream_id="ietf",
+                std_level_id="ps",
+                pages=42,
+                abstract="Test abstract.",
+                keywords=["foo", "bar"],
+            ),
+        ).doc
+        author = RfcAuthorFactory(document=rfc, is_editor=False)
+        editor = RfcAuthorFactory(document=rfc, is_editor=True)
+
+        obsoletes_rfc = RfcFactory()
+        updated_rfc = RfcFactory()
+        RelatedDocument.objects.create(
+            source=rfc, target=obsoletes_rfc, relationship_id="obs"
+        )
+        RelatedDocument.objects.create(
+            source=rfc, target=updated_rfc, relationship_id="updates"
+        )
+        obsoleted_by_rfc = RfcFactory()
+        updated_by_rfc = RfcFactory()
+        RelatedDocument.objects.create(
+            source=obsoleted_by_rfc, target=rfc, relationship_id="obs"
+        )
+        RelatedDocument.objects.create(
+            source=updated_by_rfc, target=rfc, relationship_id="updates"
+        )
+
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["doc_id"], f"RFC{rfc.rfc_number}")
+        self.assertEqual(data["title"], rfc.title)
+        self.assertEqual(data["abstract"], "Test abstract.")
+        self.assertEqual(data["page_count"], "42")
+        self.assertEqual(data["pub_status"], "PROPOSED STANDARD")
+        self.assertEqual(data["status"], "PROPOSED STANDARD")
+        self.assertEqual(data["pub_date"], "May 2021")
+        self.assertEqual(data["keywords"], ["foo", "bar"])
+        self.assertEqual(data["see_also"], [])
+        self.assertEqual(data["doi"], f"10.17487/RFC{rfc.rfc_number}")
+        self.assertIsNone(data["errata_url"])
+        self.assertIsNone(data["draft"])
+
+        # authors — non-editor first (lower order), then editor
+        self.assertEqual(
+            data["authors"],
+            [author.titlepage_name, f"{editor.titlepage_name}, Ed."],
+        )
+
+        # relationships
+        self.assertIn(f"RFC{obsoletes_rfc.rfc_number}", data["obsoletes"])
+        self.assertIn(f"RFC{updated_rfc.rfc_number}", data["updates"])
+        self.assertIn(f"RFC{obsoleted_by_rfc.rfc_number}", data["obsoleted_by"])
+        self.assertIn(f"RFC{updated_by_rfc.rfc_number}", data["updated_by"])
+
+    def test_pub_status_differs_from_status(self):
+        """pub_status reflects publication-std-levels.json; status reflects current std_level."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=WgRfcFactory(std_level_id="hist"),
+        ).doc
+        # Record was published as "ps" but is now "hist"
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["pub_status"], "PROPOSED STANDARD")
+        self.assertEqual(data["status"], "HISTORIC")
+
+    def test_errata_url_set_when_errata_exist(self):
+        """errata_url is populated when errata.json has any entry for the RFC."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_errata(rfc.rfc_number)
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(
+            data["errata_url"],
+            f"https://www.rfc-editor.org/errata/rfc{rfc.rfc_number}",
+        )
+
+    def test_errata_url_none_when_no_errata(self):
+        """errata_url is None when errata.json has no entries for the RFC."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertIsNone(data["errata_url"])
+
+    def test_errata_failure_yields_null_url(self):
+        """If reading errata.json fails, errata_url is null and no exception is raised."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        # Deliberately do not put errata blob — FileNotFoundError expected
+
+        generate_rfc_json(rfc.rfc_number)  # must not raise
+        data = _read_json(rfc.rfc_number)
+        self.assertIsNone(data["errata_url"])
+
+    def test_second_call_overwrites(self):
+        """Calling generate_rfc_json twice does not raise AlreadyExistsError."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        generate_rfc_json(rfc.rfc_number)  # must not raise
+
+    def test_april_first_date_format(self):
+        """April Fools RFCs get '1 April YYYY' date format."""
+        rfc = PublishedRfcDocEventFactory(
+            time="2020-04-01T12:00:00Z",
+            doc=WgRfcFactory(),
+        ).doc
+        red_bucket = storages["red_bucket"]
+        red_bucket.delete("input/april-first-rfc-numbers.json")
+        _put_april_first(rfc.rfc_number)
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["pub_date"], "1 April 2020")
+
+    def test_non_april_first_april_date(self):
+        """An April publication that is NOT in the April Fools list gets 'April YYYY'."""
+        rfc = PublishedRfcDocEventFactory(
+            time="2020-04-15T12:00:00Z",
+            doc=WgRfcFactory(),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["pub_date"], "April 2020")
+
+    def test_source_ietf_wg(self):
+        """IETF-stream WG RFC: source is 'acronym (area)'."""
+        area = GroupFactory(type_id="area")
+        wg = GroupFactory(type_id="wg", parent=area)
+        rfc = PublishedRfcDocEventFactory(
+            doc=WgRfcFactory(group=wg, stream_id="ietf"),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], f"{wg.acronym} ({area.acronym})")
+
+    def test_source_ietf_no_wg(self):
+        """IETF-stream individual RFC (group acronym 'none'): source is 'IETF - NON WORKING GROUP'."""
+        area = GroupFactory(type_id="area")
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(
+                group=GroupFactory(acronym="none"),
+                stream_id="ietf",
+            ),
+        ).doc
+        rfc.group.parent = area
+        rfc.group.save()
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], "IETF - NON WORKING GROUP")
+
+    def test_source_iab(self):
+        """IAB-stream RFC: source is 'IAB'."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(stream_id="iab", group=GroupFactory(acronym="iab")),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], "IAB")
+
+    def test_source_ise(self):
+        """ISE-stream RFC: source is 'INDEPENDENT'."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(stream_id="ise", group=GroupFactory(acronym="none")),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], "INDEPENDENT")
+
+    def test_pub_levels_passed_in(self):
+        """When pub_levels is passed in, get_publication_std_levels() is not called."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_empty_errata()
+
+        ps_level = StdLevelName.objects.get(slug="ps")
+        pub_levels = {rfc.rfc_number: ps_level}
+
+        with mock.patch(
+            "ietf.doc.utils_rfc_json.get_publication_std_levels"
+        ) as mock_get:
+            generate_rfc_json(rfc.rfc_number, pub_levels=pub_levels)
+            mock_get.assert_not_called()
+
+        data = _read_json(rfc.rfc_number)
+        self.assertEqual(data["pub_status"], "PROPOSED STANDARD")
+
+    def test_pub_levels_fetch_failure_returns_without_writing(self):
+        """If get_publication_std_levels() raises, function logs and returns without writing a blob."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        _put_empty_errata()
+
+        with mock.patch(
+            "ietf.doc.utils_rfc_json.get_publication_std_levels",
+            side_effect=FileNotFoundError("not found"),
+        ):
+            generate_rfc_json(rfc.rfc_number)  # must not raise
+
+        from ietf.blobdb.models import Blob
+
+        self.assertFalse(
+            Blob.objects.filter(
+                bucket="rfc", name=f"json/rfc{rfc.rfc_number}.json"
+            ).exists()
+        )
+
+    def test_pub_status_fallback_to_status_for_recent_rfc(self):
+        """RFC missing from pub_levels but published within 2 days: pub_status falls back to current std_level."""
+        now = timezone.now()
+        rfc = PublishedRfcDocEventFactory(
+            time=now - datetime.timedelta(hours=1),
+            doc=WgRfcFactory(std_level_id="ps"),
+        ).doc
+        _put_empty_errata()
+
+        with mock.patch("ietf.doc.utils_rfc_json.timezone") as mock_tz:
+            mock_tz.now.return_value = now
+            generate_rfc_json(rfc.rfc_number, pub_levels={})
+
+        data = _read_json(rfc.rfc_number)
+        self.assertEqual(data["pub_status"], "PROPOSED STANDARD")
+
+    def test_pub_status_unknown_for_old_rfc_missing_from_levels(self):
+        """RFC missing from pub_levels and published more than 2 days ago: pub_status is UNKNOWN."""
+        rfc = PublishedRfcDocEventFactory(
+            time="2020-01-01T00:00:00Z",
+            doc=WgRfcFactory(std_level_id="ps"),
+        ).doc
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number, pub_levels={})
+
+        data = _read_json(rfc.rfc_number)
+        self.assertEqual(data["pub_status"], "UNKNOWN")
+
+    def _assert_no_blob_written(self, rfc):
+        from ietf.blobdb.models import Blob
+
+        self.assertFalse(
+            Blob.objects.filter(
+                bucket="rfc", name=f"json/rfc{rfc.rfc_number}.json"
+            ).exists()
+        )
+
+    def test_source_malformed_no_stream(self):
+        """RFC with stream=None triggers assertion (logged to admins in production) and no blob is written."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        rfc.stream = None
+        rfc.save()
+        ps_level = StdLevelName.objects.get(slug="ps")
+
+        with self.assertRaises(AssertionError):
+            generate_rfc_json(rfc.rfc_number, pub_levels={rfc.rfc_number: ps_level})
+
+        self._assert_no_blob_written(rfc)
+
+    def test_source_malformed_no_group(self):
+        """RFC with group=None triggers assertion (logged to admins in production) and no blob is written."""
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        rfc.group = None
+        rfc.save()
+        ps_level = StdLevelName.objects.get(slug="ps")
+
+        with self.assertRaises(AssertionError):
+            generate_rfc_json(rfc.rfc_number, pub_levels={rfc.rfc_number: ps_level})
+
+        self._assert_no_blob_written(rfc)
+
+    def test_source_ietf_malformed_no_area(self):
+        """IETF-stream RFC whose group has no parent triggers assertion (logged to admins in production) and no blob is written."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(stream_id="ietf", group=GroupFactory()),
+        ).doc
+        rfc.group.parent = None
+        rfc.group.save()
+        ps_level = StdLevelName.objects.get(slug="ps")
+
+        with self.assertRaises(AssertionError):
+            generate_rfc_json(rfc.rfc_number, pub_levels={rfc.rfc_number: ps_level})
+
+        self._assert_no_blob_written(rfc)
diff --git a/ietf/doc/utils_rfc_json.py b/ietf/doc/utils_rfc_json.py
new file mode 100644
index 0000000000..6030a7064c
--- /dev/null
+++ b/ietf/doc/utils_rfc_json.py
@@ -0,0 +1,233 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import datetime
+import json
+from pathlib import Path
+
+from django.conf import settings
+from django.utils import timezone
+
+from ietf.doc.models import Document, RelatedDocument
+from ietf.name.models import StdLevelName
+from ietf.doc.storage_utils import exists_in_storage, store_bytes
+from ietf.sync.errata import errata_map_from_json, get_errata_data
+from ietf.sync.rfcindex import get_april1_rfc_numbers, get_publication_std_levels
+from ietf.utils.log import assertion, log
+
+
+_FORMAT_CHECKS = [
+    ("xml", "XML"),
+    ("txt", "TEXT"),
+    ("html", "HTML"),
+    ("pdf", "PDF"),
+]
+
+
+def generate_rfc_json(rfc_number: int, *, pub_levels=None) -> None:
+    """Generate and store the JSON metadata file for a published RFC.
+
+    Reads RFC metadata from the DB and errata data from the red bucket, combines
+    them, and writes json/rfc{N}.json to the "rfc" blob bucket (overwriting any
+    existing file).
+
+    pub_levels, if provided, should be the defaultdict returned by
+    get_publication_std_levels(). Pass it when generating JSON for multiple RFCs
+    to avoid a redundant blob read per call.
+    """
+    try:
+        rfc = (
+            Document.objects.select_related("std_level", "stream", "group__parent")
+            .prefetch_related("rfcauthor_set")
+            .get(type_id="rfc", rfc_number=rfc_number)
+        )
+    except Document.DoesNotExist:
+        log(f"generate_rfc_json: no RFC found for rfc_number={rfc_number}")
+        return
+
+    if pub_levels is None:
+        try:
+            pub_levels = get_publication_std_levels()
+        except Exception as e:
+            log(f"generate_rfc_json: failed to get publication std levels: {e}")
+            return
+
+    doc_id = f"RFC{rfc_number}"
+
+    # draft name
+    draft_doc = rfc.came_from_draft()
+    draft = draft_doc.name if draft_doc else None
+
+    # authors: ordered list of display strings
+    authors = []
+    for author in rfc.rfcauthor_set.order_by("order"):
+        name = author.titlepage_name
+        if author.is_editor:
+            name = f"{name}, Ed."
+        authors.append(name)
+
+    # format: check which file blobs are present
+    formats = [
+        label
+        for ext, label in _FORMAT_CHECKS
+        if exists_in_storage(kind="rfc", name=f"{ext}/rfc{rfc_number}.{ext}")
+    ]
+
+    # page_count
+    page_count = str(rfc.pages) if rfc.pages is not None else ""
+
+    # status: current std_level
+    status = rfc.std_level.name.upper() if rfc.std_level else ""
+
+    # pub_status from publication-std-levels.json in the red bucket
+    # but guard against recent publication not having updated the bucket yet
+    pub_event = rfc.latest_event(type="published_rfc")
+    if rfc_number in pub_levels:
+        pub_status = pub_levels[rfc_number].name.upper()
+    else:
+        if (
+            pub_event is not None
+            and timezone.now() - pub_event.time < datetime.timedelta(days=2)
+        ):
+            pub_status = status
+        else:
+            log(f"Assuming an unknown publication status for rfc{rfc_number}")
+            pub_status = StdLevelName.objects.get(slug="unkn").name.upper()
+
+    # source: adapted from errata system's display_source() logic
+    if rfc.stream is None or rfc.group is None:
+        # Basic expectations (should be constraints) on RFC Document objects
+        # have been violated.
+        assertion("rfc.stream is not None and rfc.group is not None")
+        log(
+            f"Malformed document object encountered for rfc{rfc_number}. Aborting update of rfc{rfc_number}.json"
+        )
+        return
+    stream_slug = rfc.stream.slug
+    group_acronym = rfc.group.acronym
+
+    area_acronym = None
+    if stream_slug == "ietf":
+        if rfc.group.parent is None:
+            assertion("rfc.group.parent is not None")
+            log(
+                f"Malformed document object encountered for rfc{rfc_number}. Aborting update of rfc{rfc_number}.json"
+            )
+            return
+        else:
+            area_acronym = rfc.group.parent.acronym
+
+    if stream_slug == "ise":
+        source = "INDEPENDENT"
+    elif stream_slug == "iab":
+        source = "IAB"
+    elif stream_slug == "ietf" and (
+        group_acronym in ("none", "gen") or not area_acronym
+    ):
+        source = "IETF - NON WORKING GROUP"
+    elif group_acronym not in ("none", ""):
+        source = group_acronym
+        if stream_slug == "ietf" and area_acronym:
+            source += f" ({area_acronym})"
+        elif stream_slug:
+            source += f" ({stream_slug})"
+    elif stream_slug:
+        source = "Legacy" if stream_slug == "legacy" else stream_slug.upper()
+    else:
+        source = ""
+
+    # pub_date: month/year of publication, with April 1st special-casing
+    pub_date = None
+    if pub_event:
+        dt = pub_event.time
+        try:
+            april_first_numbers = get_april1_rfc_numbers()
+        except Exception:
+            april_first_numbers = []
+        if dt.month == 4 and rfc_number in april_first_numbers:
+            pub_date = dt.strftime("1 %B %Y")
+        else:
+            pub_date = dt.strftime("%B %Y")
+
+    # relationship lists — sorted by RFC number
+    def _rfc_list(qs, attr):
+        numbers = [
+            getattr(rd, attr).rfc_number
+            for rd in qs
+            if getattr(rd, attr).rfc_number is not None
+        ]
+        return [f"RFC{n}" for n in sorted(numbers)]
+
+    obsoletes = _rfc_list(
+        RelatedDocument.objects.filter(
+            source=rfc, relationship_id="obs"
+        ).select_related("target"),
+        "target",
+    )
+    obsoleted_by = _rfc_list(
+        RelatedDocument.objects.filter(
+            target=rfc, relationship_id="obs"
+        ).select_related("source"),
+        "source",
+    )
+    updates = _rfc_list(
+        RelatedDocument.objects.filter(
+            source=rfc, relationship_id="updates"
+        ).select_related("target"),
+        "target",
+    )
+    updated_by = _rfc_list(
+        RelatedDocument.objects.filter(
+            target=rfc, relationship_id="updates"
+        ).select_related("source"),
+        "source",
+    )
+
+    # errata_url: non-None if any errata entry exists for this RFC (any status)
+    try:
+        errata_data = get_errata_data()
+        errata_map = errata_map_from_json(errata_data)
+        errata_url = (
+            settings.RFC_EDITOR_ERRATA_BASE_URL + f"rfc{rfc_number}"
+            if rfc_number in errata_map
+            else None
+        )
+    except Exception:
+        log(f"generate_rfc_json: could not load errata data for RFC {rfc_number}")
+        errata_url = None
+
+    data = {
+        "draft": draft,
+        "doc_id": doc_id,
+        "title": rfc.title,
+        "authors": authors,
+        "format": formats,
+        "page_count": page_count,
+        "pub_status": pub_status,
+        "status": status,
+        "source": source,
+        "abstract": rfc.abstract,
+        "pub_date": pub_date,
+        "keywords": rfc.keywords,
+        "obsoletes": obsoletes,
+        "obsoleted_by": obsoleted_by,
+        "updates": updates,
+        "updated_by": updated_by,
+        "see_also": [],
+        "doi": f"10.17487/{doc_id}",
+        "errata_url": errata_url,
+    }
+
+    content = json.dumps(data, indent=2).encode("utf-8")
+    store_bytes(
+        kind="rfc",
+        name=f"json/rfc{rfc_number}.json",
+        content=content,
+        allow_overwrite=True,
+        doc_name=f"rfc{rfc_number}",
+        doc_rev=None,
+        mtime=timezone.now(),
+    )
+    fs_path = Path(settings.RFC_PATH) / f"rfc{rfc_number}.json"
+    if settings.SERVER_MODE != "production" and not fs_path.parent.exists():
+        fs_path.parent.mkdir()
+    fs_path.write_bytes(content)
diff --git a/ietf/sync/errata.py b/ietf/sync/errata.py
index 113d987291..bc1a1cbd28 100644
--- a/ietf/sync/errata.py
+++ b/ietf/sync/errata.py
@@ -20,6 +20,7 @@
 
 type ErrataJsonEntry = dict[str, str]
 
+
 def get_errata_last_updated() -> datetime.datetime:
     """Get timestamp of the last errata.json update
 
@@ -123,10 +124,12 @@ def update_errata_tags(errata_data: list[ErrataJsonEntry]):
                 desc=summary,
             )
 
+    return {rfc.rfc_number for rfc in changes}
+
 
-def update_errata_from_rfceditor():
+def update_errata_from_rfceditor() -> set[int]:
     errata_data = get_errata_data()
-    update_errata_tags(errata_data)
+    return update_errata_tags(errata_data)
 
 
 ## DirtyBits management for the errata tags
diff --git a/ietf/sync/tasks.py b/ietf/sync/tasks.py
index 3808fb1db5..4ccd5db4bb 100644
--- a/ietf/sync/tasks.py
+++ b/ietf/sync/tasks.py
@@ -302,9 +302,28 @@ def update_errata_from_rfceditor_task():
         # new_processed_time is the *start* of processing so that any changes after
         # this point will trigger another refresh
         new_processed_time = timezone.now()
-        update_errata_from_rfceditor()
+        changed_numbers = update_errata_from_rfceditor()
         mark_errata_as_processed(new_processed_time)
         mark_rfcindex_as_dirty()  # ensure any changes are reflected in the indexes
+        if changed_numbers:
+            update_rfc_json_task.delay(list(changed_numbers))
+
+
+@shared_task
+def update_rfc_json_task(rfc_numbers: list[int]) -> None:
+    from ietf.doc.utils_rfc_json import generate_rfc_json
+    from ietf.sync.rfcindex import get_publication_std_levels
+
+    try:
+        pub_levels = get_publication_std_levels()
+    except Exception as e:
+        log.log(f"update_rfc_json_task: failed to get publication std levels: {e}")
+        return
+    for rfc_number in rfc_numbers:
+        try:
+            generate_rfc_json(rfc_number, pub_levels=pub_levels)
+        except Exception as e:
+            log.log(f"update_rfc_json_task: failed for RFC {rfc_number}: {e}")
 
 
 @shared_task
diff --git a/ietf/sync/tests.py b/ietf/sync/tests.py
index 207c78cf6a..99ca7b0008 100644
--- a/ietf/sync/tests.py
+++ b/ietf/sync/tests.py
@@ -922,11 +922,14 @@ def test_errata_map_from_json(self):
     @mock.patch("ietf.sync.errata.get_errata_data")
     def test_update_errata_from_rfceditor(self, mock_get_data, mock_update):
         fake_data = object()
+        fake_changed = {1234, 5678}
         mock_get_data.return_value = fake_data
-        update_errata_from_rfceditor()
+        mock_update.return_value = fake_changed
+        result = update_errata_from_rfceditor()
         self.assertTrue(mock_get_data.called)
         self.assertTrue(mock_update.called)
         self.assertEqual(mock_update.call_args, mock.call(fake_data))
+        self.assertEqual(result, fake_changed)
 
     def test_update_errata_tags(self):
         tag_has_errata = DocTagName.objects.get(slug="errata")
@@ -964,7 +967,7 @@ def test_update_errata_tags(self):
             {"doc-id": rfcs[8].name, "errata_status_code": "Rejected"},
             # rfcs[9] had none and it should stay that way (no entry at all)
         ]
-        update_errata_tags(errata_data)
+        changed = update_errata_tags(errata_data)
 
         self.assertCountEqual(rfcs[0].tags.all(), [tag_has_errata])
         self.assertIsNone(rfcs[0].docevent_set.first())  # no change
@@ -1018,6 +1021,14 @@ def test_update_errata_tags(self):
         self.assertCountEqual(rfcs[9].tags.all(), [])
         self.assertIsNone(rfcs[9].docevent_set.first())  # no change
 
+        # return value: only RFCs whose tags actually changed
+        # rfcs[0], rfcs[1], rfcs[8], rfcs[9] had no tag changes
+        for unchanged_rfc in (rfcs[0], rfcs[1], rfcs[8], rfcs[9]):
+            self.assertNotIn(unchanged_rfc.rfc_number, changed)
+        # rfcs[2..7] had tag changes
+        for changed_rfc in rfcs[2:8]:
+            self.assertIn(changed_rfc.rfc_number, changed)
+
     @override_settings(ERRATA_JSON_BLOB_NAME="myblob.json")
     @mock.patch("ietf.sync.errata.get_errata_last_updated")
     def test_update_errata_dirty_time(self, mock_last_updated):
@@ -1395,7 +1406,7 @@ def test_load_rfcs_into_blobdb_task(
         self.assertEqual(mock_args, ([3261, 3262, 3263],))
         self.assertEqual(mock_kwargs, {})
 
-
+    @mock.patch("ietf.sync.tasks.update_rfc_json_task.delay")
     @mock.patch("ietf.sync.tasks.update_errata_from_rfceditor")
     @mock.patch("ietf.sync.tasks.mark_rfcindex_as_dirty")
     @mock.patch("ietf.sync.tasks.mark_errata_as_processed")
@@ -1406,6 +1417,7 @@ def test_update_errata_from_rfceditor_task(
         mock_mark_errata_processed,
         mock_mark_rfcindex_dirty,
         mock_update,
+        mock_rfc_json_delay,
     ):
         mock_errata_are_dirty.return_value = False
         update_errata_from_rfceditor_task()
diff --git a/ietf/sync/tests_tasks.py b/ietf/sync/tests_tasks.py
index 6657dd617a..edfd080079 100644
--- a/ietf/sync/tests_tasks.py
+++ b/ietf/sync/tests_tasks.py
@@ -1,5 +1,6 @@
 # Copyright The IETF Trust 2026, All Rights Reserved
 
+import mock
 from django.test.utils import override_settings
 
 from ietf.doc.factories import WgDraftFactory
@@ -474,3 +475,64 @@ def test_docs_in_queue_retain_rfceditor_state(self):
 
         draft = Document.objects.get(pk=draft.pk)
         self.assertIsNotNone(draft.get_state("draft-rfceditor"))
+
+
+class UpdateErrataFromRfcEditorTaskTests(TestCase):
+    @mock.patch("ietf.sync.tasks.update_rfc_json_task.delay")
+    @mock.patch("ietf.sync.tasks.update_errata_from_rfceditor")
+    @mock.patch("ietf.sync.tasks.mark_rfcindex_as_dirty")
+    @mock.patch("ietf.sync.tasks.mark_errata_as_processed")
+    @mock.patch("ietf.sync.tasks.errata_are_dirty")
+    def test_no_update_when_not_dirty(
+        self,
+        mock_dirty,
+        mock_mark_processed,
+        mock_mark_index,
+        mock_update,
+        mock_json_delay,
+    ):
+        """When errata are not dirty nothing runs."""
+        mock_dirty.return_value = False
+        tasks.update_errata_from_rfceditor_task()
+        mock_update.assert_not_called()
+        mock_json_delay.assert_not_called()
+
+    @mock.patch("ietf.sync.tasks.update_rfc_json_task.delay")
+    @mock.patch("ietf.sync.tasks.update_errata_from_rfceditor")
+    @mock.patch("ietf.sync.tasks.mark_rfcindex_as_dirty")
+    @mock.patch("ietf.sync.tasks.mark_errata_as_processed")
+    @mock.patch("ietf.sync.tasks.errata_are_dirty")
+    def test_json_task_called_for_changed_rfcs(
+        self,
+        mock_dirty,
+        mock_mark_processed,
+        mock_mark_index,
+        mock_update,
+        mock_json_delay,
+    ):
+        """update_rfc_json_task is dispatched with the changed RFC numbers."""
+        mock_dirty.return_value = True
+        mock_update.return_value = {3261, 9000}
+        tasks.update_errata_from_rfceditor_task()
+        mock_json_delay.assert_called_once()
+        called_numbers = mock_json_delay.call_args[0][0]
+        self.assertCountEqual(called_numbers, [3261, 9000])
+
+    @mock.patch("ietf.sync.tasks.update_rfc_json_task.delay")
+    @mock.patch("ietf.sync.tasks.update_errata_from_rfceditor")
+    @mock.patch("ietf.sync.tasks.mark_rfcindex_as_dirty")
+    @mock.patch("ietf.sync.tasks.mark_errata_as_processed")
+    @mock.patch("ietf.sync.tasks.errata_are_dirty")
+    def test_json_task_not_called_when_no_changes(
+        self,
+        mock_dirty,
+        mock_mark_processed,
+        mock_mark_index,
+        mock_update,
+        mock_json_delay,
+    ):
+        """update_rfc_json_task is not dispatched when no errata tags changed."""
+        mock_dirty.return_value = True
+        mock_update.return_value = set()
+        tasks.update_errata_from_rfceditor_task()
+        mock_json_delay.assert_not_called()

From cb482f03296b6ec3bd91f0d9ec0354a9eae5033e Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 3 Jun 2026 13:37:42 -0300
Subject: [PATCH 685/707] chore: nginx -> 1.30 (#10978)

---
 docker/configs/nginx-proxy.conf | 1 +
 k8s/datatracker.yaml            | 2 +-
 k8s/nginx-auth.conf             | 1 +
 k8s/nginx-datatracker.conf      | 1 +
 4 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/docker/configs/nginx-proxy.conf b/docker/configs/nginx-proxy.conf
index e1f739970b..a02ab2ff06 100644
--- a/docker/configs/nginx-proxy.conf
+++ b/docker/configs/nginx-proxy.conf
@@ -1,5 +1,6 @@
 upstream datatracker_backend {
     server 127.0.0.1:8001;
+    keepalive 0; # default = 32 since nginx 1.29.7
 }
 
 server {
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index ff89fb3722..98a782f95c 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -69,7 +69,7 @@ spec:
         # Nginx Container
         # -----------------------------------------------------
         - name: nginx
-          image: "ghcr.io/nginxinc/nginx-unprivileged:1.27"
+          image: "ghcr.io/nginxinc/nginx-unprivileged:1.30"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080
diff --git a/k8s/nginx-auth.conf b/k8s/nginx-auth.conf
index 1dc2f4fae0..cdb5c665e2 100644
--- a/k8s/nginx-auth.conf
+++ b/k8s/nginx-auth.conf
@@ -1,5 +1,6 @@
 upstream datatracker_backend {
     server 127.0.0.1:8000;
+    keepalive 0; # default = 32 since nginx 1.29.7
 }
 
 server {
diff --git a/k8s/nginx-datatracker.conf b/k8s/nginx-datatracker.conf
index a7d5936a19..77ce902b17 100644
--- a/k8s/nginx-datatracker.conf
+++ b/k8s/nginx-datatracker.conf
@@ -1,5 +1,6 @@
 upstream datatracker_backend {
     server 127.0.0.1:8000;
+    keepalive 0; # default = 32 since nginx 1.29.7
 }
 
 server {

From aa66fa1eb30e99b716171dc9c2058c3c32af42ae Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 3 Jun 2026 19:57:56 -0300
Subject: [PATCH 686/707] chore: "nginxinc" GH org is now "nginx" (#10981)

---
 k8s/auth.yaml        | 2 +-
 k8s/datatracker.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 992c90557a..6e63001e02 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -69,7 +69,7 @@ spec:
         # Nginx Container
         # -----------------------------------------------------
         - name: nginx
-          image: "ghcr.io/nginxinc/nginx-unprivileged:1.27"
+          image: "ghcr.io/nginx/nginx-unprivileged:1.30"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index 98a782f95c..af2bb6295c 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -69,7 +69,7 @@ spec:
         # Nginx Container
         # -----------------------------------------------------
         - name: nginx
-          image: "ghcr.io/nginxinc/nginx-unprivileged:1.30"
+          image: "ghcr.io/nginx/nginx-unprivileged:1.30"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080

From 60c9f28dd01281ba0cad2354e8e16ddf490838e0 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 4 Jun 2026 11:54:19 -0300
Subject: [PATCH 687/707] chore: use redis for django caches (#10975)

* chore: drop memcache, add redis (WIP) (#10940)

* chore(dev): use redis for dev sessions

Adds a redis container with a persistent volume and uses this for sessions instead of the database. Results in the same general behavior as before - logins should be persistent until the docker compose stack is torn down.

* chore(deps): install redis/hiredis python pkgs

* chore: remove memcached (mostly)

Still keeps some config references and a custom cache backend

* chore: switch to django-redis for sentinel support

* chore: production redis cache config

Uses sentinel. Untested.

* chore: telemetry: add redis, drop memcache

* chore: remove now-unused cache.py

* chore: adjust imports in gunicorn.conf.py

* chore: adjust redis sentinel settings

* feat: size limit on redis values

* style: ruff ruff

* chore(dev): SizeLimitingRedisClient for dev

Does not make a functional difference in most cases, but
might as well exercise the class.

* test: use db-backed sessions for tests

* chore: typing nit

* ci: remove DEPLOY_STRATEGY

"strategery"

* ci: remove strategy from dt manifests altogether
---
 dev/build/gunicorn.conf.py |  18 ++--
 docker-compose.yml         |   7 ++
 docker/base.Dockerfile     |   2 -
 ietf/settings.py           | 203 ++++++++++++++-----------------------
 ietf/settings_test.py      |   3 +
 ietf/utils/cache.py        |  75 +++++++++++---
 k8s/auth.yaml              |   2 -
 k8s/datatracker.yaml       |   2 -
 k8s/kustomization.yaml     |   1 -
 k8s/memcached.yaml         |  88 ----------------
 k8s/settings_local.py      |  46 +++++----
 requirements.txt           |   6 +-
 12 files changed, 187 insertions(+), 266 deletions(-)
 delete mode 100644 k8s/memcached.yaml

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index 03e81eac5e..a1c572a096 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -7,10 +7,6 @@
 from opentelemetry.sdk.resources import Resource
 from opentelemetry.sdk.trace import TracerProvider
 from opentelemetry.sdk.trace.export import BatchSpanProcessor
-from opentelemetry.instrumentation.django import DjangoInstrumentor
-from opentelemetry.instrumentation.psycopg2 import Psycopg2Instrumentor
-from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
-from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
 # Bind all ipv4 interfaces (nginx uses loopback, but k8s health checks don't)
 _BIND_PORT = os.environ.get("DATATRACKER_GUNICORN_BIND_PORT", "8000")
@@ -171,11 +167,15 @@ def post_fork(server, worker):
         trace.get_tracer_provider().add_span_processor(BatchSpanProcessor(otlp_exporter))
     
         # Instrumentations
-        if "all" in enabled_telemetry or "django" in enabled_telemetry: 
+        if "all" in enabled_telemetry or "django" in enabled_telemetry:
+            from opentelemetry.instrumentation.django import DjangoInstrumentor
             DjangoInstrumentor().instrument()
-        if "all" in enabled_telemetry or "psycopg2" in enabled_telemetry: 
+        if "all" in enabled_telemetry or "psycopg2" in enabled_telemetry:
+            from opentelemetry.instrumentation.psycopg2 import Psycopg2Instrumentor
             Psycopg2Instrumentor().instrument()
-        if "all" in enabled_telemetry or "pymemcache" in enabled_telemetry: 
-            PymemcacheInstrumentor().instrument()
-        if "all" in enabled_telemetry or "requests" in enabled_telemetry: 
+        if "all" in enabled_telemetry or "redis" in enabled_telemetry:
+            from opentelemetry.instrumentation.redis import RedisInstrumentor
+            RedisInstrumentor().instrument()
+        if "all" in enabled_telemetry or "requests" in enabled_telemetry:
+            from opentelemetry.instrumentation.requests import RequestsInstrumentor
             RequestsInstrumentor().instrument()
diff --git a/docker-compose.yml b/docker-compose.yml
index 073d04b896..f171fb261b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -90,6 +90,12 @@ services:
             - .:/workspace
             - app-assets:/assets
 
+    redis:
+        image: redis:8
+        command: ['redis-server', '--save', '10', '1', '--loglevel', 'warning']
+        volumes:
+            - redis:/data
+
     replicator:
         build:
             context: .
@@ -169,3 +175,4 @@ volumes:
     app-assets:
     minio-data:
     blobdb-data:
+    redis:
diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 2501636049..7bf4263b38 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -59,12 +59,10 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libxtst6 \
 	libmagic-dev \
 	libmariadb-dev \
-	libmemcached-tools \
 	libyang2-tools \
 	locales \
 	make \
 	mariadb-client \
-	memcached \
 	nano \
 	netcat-traditional \
 	nodejs \
diff --git a/ietf/settings.py b/ietf/settings.py
index 95f2ffefd7..6cfc9103ff 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1364,137 +1364,87 @@ def skip_unreadable_post(record):
 
 if "CACHES" not in locals():
     if SERVER_MODE == "production":
-        MEMCACHED_HOST = os.environ.get("MEMCACHED_SERVICE_HOST", "127.0.0.1")
-        MEMCACHED_PORT = os.environ.get("MEMCACHED_SERVICE_PORT", "11211")
-        CACHES = {
-            "default": {
-                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
-                "VERSION": __version__,
-                "KEY_PREFIX": "ietf:dt",
-                # Key function is default except with sha384-encoded key
-                "KEY_FUNCTION": lambda key, key_prefix, version: (
-                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-                ),
-            },
-            "agenda": {
-                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
-                # No release-specific VERSION setting.
-                "KEY_PREFIX": "ietf:dt:agenda",
-                # Key function is default except with sha384-encoded key
-                "KEY_FUNCTION": lambda key, key_prefix, version: (
-                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-                ),
-            },
-            "proceedings": {
-                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
-                # No release-specific VERSION setting.
-                "KEY_PREFIX": "ietf:dt:proceedings",
-                # Key function is default except with sha384-encoded key
-                "KEY_FUNCTION": lambda key, key_prefix, version: (
-                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-                ),
-            },
-            "sessions": {
-                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
-                # No release-specific VERSION setting.
-                "KEY_PREFIX": "ietf:dt",
-            },
-            "htmlized": {
-                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
-                "LOCATION": "/a/cache/datatracker/htmlized",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 100000,  # 100,000
-                },
-            },
-            "pdfized": {
-                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
-                "LOCATION": "/a/cache/datatracker/pdfized",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 100000,  # 100,000
-                },
-            },
-            "slowpages": {
-                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
-                "LOCATION": "/a/cache/datatracker/slowpages",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 5000,
-                },
-            },
-            "celery-results": {
-                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
-                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
-                "KEY_PREFIX": "ietf:celery",
-            },
-        }
-    else:
-        CACHES = {
-            "default": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                #'BACKEND': 'ietf.utils.cache.LenientMemcacheCache',
-                #'LOCATION': '127.0.0.1:11211',
-                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-                "VERSION": __version__,
-                "KEY_PREFIX": "ietf:dt",
-            },
-            "agenda": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                # "LOCATION": "127.0.0.1:11211",
-                # No release-specific VERSION setting.
-                "KEY_PREFIX": "ietf:dt:agenda",
-                # Key function is default except with sha384-encoded key
-                "KEY_FUNCTION": lambda key, key_prefix, version: (
-                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-                ),
-            },
-            "proceedings": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-                # "LOCATION": "127.0.0.1:11211",
-                # No release-specific VERSION setting.
-                "KEY_PREFIX": "ietf:dt:proceedings",
-                # Key function is default except with sha384-encoded key
-                "KEY_FUNCTION": lambda key, key_prefix, version: (
-                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-                ),
-            },
-            "sessions": {
-                "BACKEND": "django.core.cache.backends.locmem.LocMemCache",
+        raise RuntimeError("Must set CACHES in settings_local for production mode")
+    CACHES = {
+        "default": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            # "BACKEND": "django_redis.cache.RedisCache",
+            # "LOCATION": "redis://redis:6379/0",
+            # "OPTIONS": {
+            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
+            # },
+            # "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
+            "VERSION": __version__,
+            "KEY_PREFIX": "ietf:dt",
+        },
+        "agenda": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            # "BACKEND": "django_redis.cache.RedisCache",
+            # "LOCATION": "redis://redis:6379/0",
+            # "OPTIONS": {
+            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
+            # },
+            # No release-specific VERSION setting.
+            "KEY_PREFIX": "ietf:dt:agenda",
+            # Key function is default except with sha384-encoded key
+            "KEY_FUNCTION": lambda key, key_prefix, version: (
+                f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+            ),
+        },
+        "proceedings": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            # "BACKEND": "django_redis.cache.RedisCache",
+            # "LOCATION": "redis://redis:6379/0",
+            # "OPTIONS": {
+            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
+            # },
+            # No release-specific VERSION setting.
+            "KEY_PREFIX": "ietf:dt:proceedings",
+            # Key function is default except with sha384-encoded key
+            "KEY_FUNCTION": lambda key, key_prefix, version: (
+                f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+            ),
+        },
+        "sessions": {
+            "BACKEND": "django_redis.cache.RedisCache",
+            "LOCATION": "redis://redis:6379/0",
+            "OPTIONS": {
+                "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
             },
-            "htmlized": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-                "LOCATION": "/var/cache/datatracker/htmlized",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 1000,
-                },
+        },
+        "htmlized": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+            "LOCATION": "/var/cache/datatracker/htmlized",
+            "OPTIONS": {
+                "MAX_ENTRIES": 1000,
             },
-            "pdfized": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-                "LOCATION": "/var/cache/datatracker/pdfized",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 1000,
-                },
+        },
+        "pdfized": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+            "LOCATION": "/var/cache/datatracker/pdfized",
+            "OPTIONS": {
+                "MAX_ENTRIES": 1000,
             },
-            "slowpages": {
-                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-                "LOCATION": "/var/cache/datatracker/",
-                "OPTIONS": {
-                    "MAX_ENTRIES": 5000,
-                },
+        },
+        "slowpages": {
+            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+            "LOCATION": "/var/cache/datatracker/",
+            "OPTIONS": {
+                "MAX_ENTRIES": 5000,
             },
-            "celery-results": {
-                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
-                "LOCATION": "app:11211",
-                "KEY_PREFIX": "ietf:celery",
+        },
+        "celery-results": {
+            "BACKEND": "django_redis.cache.RedisCache",
+            "LOCATION": "redis://redis:6379/0",
+            "OPTIONS": {
+                "CLIENT_CLASS": "django_redis.client.DefaultClient",
             },
-        }
+            "KEY_PREFIX": "ietf:celery",
+        },
+    }
 
 PUBLISH_IPR_STATES = ['posted', 'removed', 'removed_objfalse']
 
@@ -1509,7 +1459,6 @@ def skip_unreadable_post(record):
     loaders = TEMPLATES[0]['OPTIONS']['loaders']
     loaders = tuple(l for e in loaders for l in (e[1] if isinstance(e, tuple) and "cached.Loader" in e[0] else (e,)))
     TEMPLATES[0]['OPTIONS']['loaders'] = loaders
-    SESSION_ENGINE = "django.contrib.sessions.backends.db"
 
     if 'SECRET_KEY' not in locals():
         SECRET_KEY = 'PDwXboUq!=hPjnrtG2=ge#N$Dwy+wn@uivrugwpic8mxyPfHka'
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index e7ebc13eb2..883a582a28 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -69,6 +69,9 @@ def tempdir_with_cleanup(**kwargs):
 PHOTOS_DIR = os.path.join(MEDIA_ROOT, PHOTOS_DIRNAME)
 os.mkdir(PHOTOS_DIR)
 
+# Use database-backed sessions for tests
+SESSION_ENGINE = "django.contrib.sessions.backends.db"
+
 # Undo any developer-dependent middleware when running the tests
 MIDDLEWARE = [ c for c in MIDDLEWARE if not c in DEV_MIDDLEWARE ] # pyflakes:ignore
 
diff --git a/ietf/utils/cache.py b/ietf/utils/cache.py
index 0baa56da2d..60dd2c3ae3 100644
--- a/ietf/utils/cache.py
+++ b/ietf/utils/cache.py
@@ -1,20 +1,67 @@
-# Copyright The IETF Trust 2023, All Rights Reserved
-# -*- coding: utf-8 -*-
+# Copyright The IETF Trust 2026, All Rights Reserved
+from typing import Optional, Union, Any
 
+from django.core.cache import BaseCache
 from django.core.cache.backends.base import DEFAULT_TIMEOUT
-from django.core.cache.backends.memcached import PyMemcacheCache
-from pymemcache.exceptions import MemcacheServerError
+from django_redis.client import DefaultClient, SentinelClient
+from redis import Redis
+from redis.typing import KeyT, EncodableT
 
-from .log import log
+from ietf.utils.log import log
 
 
-class LenientMemcacheCache(PyMemcacheCache):
-    """PyMemcacheCache backend that tolerates failed inserts due to object size"""
-    def set(self, key, value, timeout=DEFAULT_TIMEOUT, version=None):
+class EncodedValueTooBig(ValueError):
+    def __init__(self, *args, value_len):
+        super().__init__(*args)
+        self.value_len = value_len
+
+
+class SizeLimitingRedisClient(DefaultClient):
+    """Redis DefaultClient that refuses to cache large objects
+    
+    Size applies to the literal cached value, which is _after_ serialization and
+    compression.
+    
+    Set size limit with MAX_ENCODED_VALUE_LEN in the OPTIONS dict. Defaults to
+    1 MB.
+    """
+    def __init__(self, server, params: dict[str, Any], backend: BaseCache) -> None:
+        super().__init__(server, params, backend)
+        self.max_encoded_value_len = self._options.get("MAX_ENCODED_VALUE_LEN", 1 << 20)
+
+    def encode(self, value: EncodableT) -> Union[bytes, int]:
+        encoded = super().encode(value)
+        if isinstance(encoded, bytes) and len(encoded) > self.max_encoded_value_len:
+            raise EncodedValueTooBig(value_len=len(encoded))
+        return encoded
+
+    def set(
+        self,
+        key: KeyT,
+        value: EncodableT,
+        timeout: Optional[float] = DEFAULT_TIMEOUT,
+        version: Optional[int] = None,
+        client: Optional[Redis] = None,
+        nx: bool = False,
+        xx: bool = False,
+    ) -> bool:
         try:
-            super().set(key, value, timeout, version)
-        except MemcacheServerError as err:
-            if "object too large for cache" in str(err):
-                log(f"Memcache failed to cache large object for {key}")
-            else:
-                raise
+            return super().set(key, value, timeout, version, client, nx, xx)
+        except EncodedValueTooBig as err:
+            log(
+                f"Refused to cache large object for {key!r} "
+                f"({err.value_len} > {self.max_encoded_value_len} bytes)"
+            )
+            return False
+
+
+class SizeLimitingSentinelClient(SizeLimitingRedisClient, SentinelClient):
+    """Redis SentinelClient that refuses to cache large objects
+    
+    Size applies to the literal cached value, which is _after_ serialization and
+    compression.
+        
+    Set size limit with MAX_ENCODED_VALUE_LEN in the OPTIONS dict. Defaults to
+    1 MB.
+    """
+    pass
diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 6e63001e02..ef8c259933 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -8,8 +8,6 @@ spec:
   selector:
     matchLabels:
       app: auth
-  strategy:
-    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index af2bb6295c..5183893bc8 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -8,8 +8,6 @@ spec:
   selector:
     matchLabels:
       app: datatracker
-  strategy:
-    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index 769cb03517..b1e278a914 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -12,6 +12,5 @@ resources:
   - beat.yaml
   - celery.yaml
   - datatracker.yaml
-  - memcached.yaml
   - rabbitmq.yaml
   - replicator.yaml
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
deleted file mode 100644
index 68b732d745..0000000000
--- a/k8s/memcached.yaml
+++ /dev/null
@@ -1,88 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: memcached
-spec:
-  replicas: 1
-  revisionHistoryLimit: 2
-  selector:
-    matchLabels:
-      app: memcached
-  template:
-    metadata:
-      labels:
-        app: memcached
-    spec:
-      securityContext:
-        runAsNonRoot: true
-      containers:
-        # -----------------------------------------------------
-        # Memcached
-        # -----------------------------------------------------
-        - image: "memcached:1.6-alpine"
-          imagePullPolicy: IfNotPresent
-          args: ["-m", "1024"]
-          name: memcached
-          ports:
-            - name: memcached
-              containerPort: 11211
-              protocol: TCP
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            # memcached image sets up uid/gid 11211
-            runAsUser: 11211
-            runAsGroup: 11211
-          resources:
-            requests:
-              cpu: 100m
-              memory: 100Mi
-        # -----------------------------------------------------
-        # Memcached Exporter for Prometheus
-        # -----------------------------------------------------
-        - image: "quay.io/prometheus/memcached-exporter:v0.14.3"
-          imagePullPolicy: IfNotPresent
-          name: memcached-exporter
-          ports:
-            - name: metrics
-              containerPort: 9150
-              protocol: TCP
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            readOnlyRootFilesystem: true
-            runAsUser: 65534  # nobody
-            runAsGroup: 65534  # nobody
-          resources:
-            requests:
-              cpu: 10m
-              memory: 20Mi
-      dnsPolicy: ClusterFirst
-      restartPolicy: Always
-      terminationGracePeriodSeconds: 30
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: memcached
-  annotations:
-    k8s.grafana.com/scrape: "true"  # this is not a bool
-    k8s.grafana.com/metrics.portName: "metrics"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 11211
-      targetPort: memcached
-      protocol: TCP
-      name: memcached
-    - port: 9150
-      targetPort: metrics
-      protocol: TCP
-      name: metrics
-  selector:
-    app: memcached
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 20c5252ff0..560648c07f 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -315,15 +315,29 @@ def _multiline_to_list(s):
 DE_GFM_BINARY = "/usr/local/bin/de-gfm"
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
 
-# Duplicating production cache from settings.py and using it whether we're in production mode or not
-MEMCACHED_HOST = os.environ.get("DT_MEMCACHED_SERVICE_HOST", "127.0.0.1")
-MEMCACHED_PORT = os.environ.get("DT_MEMCACHED_SERVICE_PORT", "11211")
 from ietf import __version__
 
+# Common config for redis caches
+REDIS_SENTINEL_SERVICE = os.environ.get("DATATRACKER_REDIS_SENTINEL_HOST")
+REDIS_SENTINEL_PORT = os.environ.get("DATATRACKER_REDIS_SENTINEL_PORT", "26379")
+DJANGO_REDIS_CONNECTION_FACTORY = "django_redis.pool.SentinelConnectionFactory"
+REDIS_CACHE_CONFIG_COMMON = {
+    "BACKEND": "django_redis.cache.RedisCache",
+    "LOCATION": "redis://dt-master/0",
+    "OPTIONS": {
+        "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingSentinelClient",
+        "MAX_ENCODED_VALUE_LEN": int(
+            os.environ.get("DATATRACKER_REDIS_MAX_ENCODED_VALUE_LEN", 1 << 20)
+        ),
+        "SENTINELS": [(REDIS_SENTINEL_SERVICE, REDIS_SENTINEL_PORT)],
+        "SENTINEL_KWARGS": {},
+        "CONNECTION_POOL_CLASS": "redis.sentinel.SentinelConnectionPool",
+    },
+}
+
 CACHES = {
-    "default": {
-        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+    "default": REDIS_CACHE_CONFIG_COMMON
+    | {
         "VERSION": __version__,
         "KEY_PREFIX": "ietf:dt",
         # Key function is default except with sha384-encoded key
@@ -331,9 +345,8 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "agenda": {
-        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+    "agenda": REDIS_CACHE_CONFIG_COMMON
+    | {
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt:agenda",
         # Key function is default except with sha384-encoded key
@@ -341,9 +354,8 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "proceedings": {
-        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+    "proceedings": REDIS_CACHE_CONFIG_COMMON
+    | {
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt:proceedings",
         # Key function is default except with sha384-encoded key
@@ -351,9 +363,8 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "sessions": {
-        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
-        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+    "sessions": REDIS_CACHE_CONFIG_COMMON
+    | {
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt",
     },
@@ -378,9 +389,8 @@ def _multiline_to_list(s):
             "MAX_ENTRIES": 5000,
         },
     },
-    "celery-results": {
-        "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
-        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+    "celery-results": REDIS_CACHE_CONFIG_COMMON
+    | {
         "KEY_PREFIX": "ietf:celery",
     },
 }
diff --git a/requirements.txt b/requirements.txt
index 31e8ea69d1..bf7d1d26e0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -25,6 +25,7 @@ django-debug-toolbar>=6.0.0
 django-filter>=24.3
 django-markup>=1.10    # Limited use - need to reconcile against direct use of markdown
 django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
+django-redis>=6.0.0
 django-simple-history>=3.10.1
 django-storages>=1.14.6
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
@@ -58,8 +59,8 @@ oic>=1.7.0  # Used only by tests
 opentelemetry-sdk>=1.38.0
 opentelemetry-instrumentation-django>=0.59b0
 opentelemetry-instrumentation-psycopg2>=0.59b0
-opentelemetry-instrumentation-pymemcache>=0.59b0
 opentelemetry-instrumentation-requests>=0.59b0
+opentelemetry-instrumentation-redis>=0.63b1
 opentelemetry-exporter-otlp-proto-http>=1.38.0
 pillow>=11.3.0
 psycopg2>=2.9.10
@@ -72,11 +73,9 @@ python-dateutil>=2.9.0
 types-python-dateutil>=2.9.0
 python-json-logger>=3.3.0
 python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
-pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=2.0.0  # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
 types-pytz==2025.2.0.20251108  # match pytz version
-typesense>=2.0.0
 requests>=2.32.4
 types-requests>=2.32.4
 requests-mock>=1.12.1
@@ -86,6 +85,7 @@ selenium>=4.34.2
 tblib>=3.1.0  # So that the django test runner provides tracebacks
 tlds>=2022042700  # Used to teach bleach about which TLDs currently exist
 tqdm>=4.67.1
+typesense>=2.0.0
 unidecode>=1.4.0
 urllib3>=2.5.0
 weasyprint>=66.0

From 0860d3d1e86df04e1a3704c2472a82abecc18549 Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Thu, 4 Jun 2026 15:08:10 +0000
Subject: [PATCH 688/707] ci: update base image target version to 20260604T1454

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 1e44f47761..4aca4c0e1e 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260527T1529
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260604T1454
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index 0284151019..b64be08c8c 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260527T1529
+20260604T1454

From c06ee411de7c819b5b29a21af2739267a10e8f92 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Thu, 4 Jun 2026 13:34:58 -0300
Subject: [PATCH 689/707] ci: remove guard against missing CACHES in prod
 (#10986)

---
 ietf/settings.py | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 6cfc9103ff..6d9dc00e0e 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1363,8 +1363,13 @@ def skip_unreadable_post(record):
     TEMPLATES[0]['OPTIONS']['context_processors'] += DEV_TEMPLATE_CONTEXT_PROCESSORS
 
 if "CACHES" not in locals():
-    if SERVER_MODE == "production":
-        raise RuntimeError("Must set CACHES in settings_local for production mode")
+    # Would like to refuse to start when in prod mode, but this currently blocks
+    # the collectstatics call in the release GHA. We should probably arrange for that
+    # to have its own caches config, but in the meantime just let this fall back to
+    # the dev cache configuration.
+    #
+    # if SERVER_MODE == "production":
+    #     raise RuntimeError("Must set CACHES in settings_local for production mode")
     CACHES = {
         "default": {
             "BACKEND": "django.core.cache.backends.dummy.DummyCache",

From 9ee33fab5947b03d06f9a2e6bdad2ee2dc694595 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Fri, 5 Jun 2026 20:14:07 -0300
Subject: [PATCH 690/707] chore: revert switch to redis (#10991)

---
 dev/build/gunicorn.conf.py |  18 ++--
 docker-compose.yml         |   7 --
 docker/base.Dockerfile     |   2 +
 ietf/settings.py           | 210 ++++++++++++++++++++++---------------
 ietf/settings_test.py      |   3 -
 ietf/utils/cache.py        |  75 +++----------
 k8s/auth.yaml              |   2 +
 k8s/datatracker.yaml       |   2 +
 k8s/kustomization.yaml     |   1 +
 k8s/memcached.yaml         |  88 ++++++++++++++++
 k8s/settings_local.py      |  46 ++++----
 requirements.txt           |   6 +-
 12 files changed, 267 insertions(+), 193 deletions(-)
 create mode 100644 k8s/memcached.yaml

diff --git a/dev/build/gunicorn.conf.py b/dev/build/gunicorn.conf.py
index a1c572a096..03e81eac5e 100644
--- a/dev/build/gunicorn.conf.py
+++ b/dev/build/gunicorn.conf.py
@@ -7,6 +7,10 @@
 from opentelemetry.sdk.resources import Resource
 from opentelemetry.sdk.trace import TracerProvider
 from opentelemetry.sdk.trace.export import BatchSpanProcessor
+from opentelemetry.instrumentation.django import DjangoInstrumentor
+from opentelemetry.instrumentation.psycopg2 import Psycopg2Instrumentor
+from opentelemetry.instrumentation.pymemcache import PymemcacheInstrumentor
+from opentelemetry.instrumentation.requests import RequestsInstrumentor
 
 # Bind all ipv4 interfaces (nginx uses loopback, but k8s health checks don't)
 _BIND_PORT = os.environ.get("DATATRACKER_GUNICORN_BIND_PORT", "8000")
@@ -167,15 +171,11 @@ def post_fork(server, worker):
         trace.get_tracer_provider().add_span_processor(BatchSpanProcessor(otlp_exporter))
     
         # Instrumentations
-        if "all" in enabled_telemetry or "django" in enabled_telemetry:
-            from opentelemetry.instrumentation.django import DjangoInstrumentor
+        if "all" in enabled_telemetry or "django" in enabled_telemetry: 
             DjangoInstrumentor().instrument()
-        if "all" in enabled_telemetry or "psycopg2" in enabled_telemetry:
-            from opentelemetry.instrumentation.psycopg2 import Psycopg2Instrumentor
+        if "all" in enabled_telemetry or "psycopg2" in enabled_telemetry: 
             Psycopg2Instrumentor().instrument()
-        if "all" in enabled_telemetry or "redis" in enabled_telemetry:
-            from opentelemetry.instrumentation.redis import RedisInstrumentor
-            RedisInstrumentor().instrument()
-        if "all" in enabled_telemetry or "requests" in enabled_telemetry:
-            from opentelemetry.instrumentation.requests import RequestsInstrumentor
+        if "all" in enabled_telemetry or "pymemcache" in enabled_telemetry: 
+            PymemcacheInstrumentor().instrument()
+        if "all" in enabled_telemetry or "requests" in enabled_telemetry: 
             RequestsInstrumentor().instrument()
diff --git a/docker-compose.yml b/docker-compose.yml
index f171fb261b..073d04b896 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -90,12 +90,6 @@ services:
             - .:/workspace
             - app-assets:/assets
 
-    redis:
-        image: redis:8
-        command: ['redis-server', '--save', '10', '1', '--loglevel', 'warning']
-        volumes:
-            - redis:/data
-
     replicator:
         build:
             context: .
@@ -175,4 +169,3 @@ volumes:
     app-assets:
     minio-data:
     blobdb-data:
-    redis:
diff --git a/docker/base.Dockerfile b/docker/base.Dockerfile
index 7bf4263b38..2501636049 100644
--- a/docker/base.Dockerfile
+++ b/docker/base.Dockerfile
@@ -59,10 +59,12 @@ RUN apt-get update --fix-missing && apt-get install -qy --no-install-recommends
 	libxtst6 \
 	libmagic-dev \
 	libmariadb-dev \
+	libmemcached-tools \
 	libyang2-tools \
 	locales \
 	make \
 	mariadb-client \
+	memcached \
 	nano \
 	netcat-traditional \
 	nodejs \
diff --git a/ietf/settings.py b/ietf/settings.py
index 6d9dc00e0e..95f2ffefd7 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -1363,93 +1363,138 @@ def skip_unreadable_post(record):
     TEMPLATES[0]['OPTIONS']['context_processors'] += DEV_TEMPLATE_CONTEXT_PROCESSORS
 
 if "CACHES" not in locals():
-    # Would like to refuse to start when in prod mode, but this currently blocks
-    # the collectstatics call in the release GHA. We should probably arrange for that
-    # to have its own caches config, but in the meantime just let this fall back to
-    # the dev cache configuration.
-    #
-    # if SERVER_MODE == "production":
-    #     raise RuntimeError("Must set CACHES in settings_local for production mode")
-    CACHES = {
-        "default": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            # "BACKEND": "django_redis.cache.RedisCache",
-            # "LOCATION": "redis://redis:6379/0",
-            # "OPTIONS": {
-            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
-            # },
-            # "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
-            "VERSION": __version__,
-            "KEY_PREFIX": "ietf:dt",
-        },
-        "agenda": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            # "BACKEND": "django_redis.cache.RedisCache",
-            # "LOCATION": "redis://redis:6379/0",
-            # "OPTIONS": {
-            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
-            # },
-            # No release-specific VERSION setting.
-            "KEY_PREFIX": "ietf:dt:agenda",
-            # Key function is default except with sha384-encoded key
-            "KEY_FUNCTION": lambda key, key_prefix, version: (
-                f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-            ),
-        },
-        "proceedings": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            # "BACKEND": "django_redis.cache.RedisCache",
-            # "LOCATION": "redis://redis:6379/0",
-            # "OPTIONS": {
-            #     "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
-            # },
-            # No release-specific VERSION setting.
-            "KEY_PREFIX": "ietf:dt:proceedings",
-            # Key function is default except with sha384-encoded key
-            "KEY_FUNCTION": lambda key, key_prefix, version: (
-                f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
-            ),
-        },
-        "sessions": {
-            "BACKEND": "django_redis.cache.RedisCache",
-            "LOCATION": "redis://redis:6379/0",
-            "OPTIONS": {
-                "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingRedisClient",
+    if SERVER_MODE == "production":
+        MEMCACHED_HOST = os.environ.get("MEMCACHED_SERVICE_HOST", "127.0.0.1")
+        MEMCACHED_PORT = os.environ.get("MEMCACHED_SERVICE_PORT", "11211")
+        CACHES = {
+            "default": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                "VERSION": __version__,
+                "KEY_PREFIX": "ietf:dt",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
             },
-        },
-        "htmlized": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-            "LOCATION": "/var/cache/datatracker/htmlized",
-            "OPTIONS": {
-                "MAX_ENTRIES": 1000,
+            "agenda": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:agenda",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
             },
-        },
-        "pdfized": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-            "LOCATION": "/var/cache/datatracker/pdfized",
-            "OPTIONS": {
-                "MAX_ENTRIES": 1000,
+            "proceedings": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:proceedings",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
             },
-        },
-        "slowpages": {
-            "BACKEND": "django.core.cache.backends.dummy.DummyCache",
-            #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
-            "LOCATION": "/var/cache/datatracker/",
-            "OPTIONS": {
-                "MAX_ENTRIES": 5000,
+            "sessions": {
+                "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt",
             },
-        },
-        "celery-results": {
-            "BACKEND": "django_redis.cache.RedisCache",
-            "LOCATION": "redis://redis:6379/0",
-            "OPTIONS": {
-                "CLIENT_CLASS": "django_redis.client.DefaultClient",
+            "htmlized": {
+                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
+                "LOCATION": "/a/cache/datatracker/htmlized",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 100000,  # 100,000
+                },
             },
-            "KEY_PREFIX": "ietf:celery",
-        },
-    }
+            "pdfized": {
+                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
+                "LOCATION": "/a/cache/datatracker/pdfized",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 100000,  # 100,000
+                },
+            },
+            "slowpages": {
+                "BACKEND": "django.core.cache.backends.filebased.FileBasedCache",
+                "LOCATION": "/a/cache/datatracker/slowpages",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 5000,
+                },
+            },
+            "celery-results": {
+                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+                "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
+                "KEY_PREFIX": "ietf:celery",
+            },
+        }
+    else:
+        CACHES = {
+            "default": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                #'BACKEND': 'ietf.utils.cache.LenientMemcacheCache',
+                #'LOCATION': '127.0.0.1:11211',
+                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+                "VERSION": __version__,
+                "KEY_PREFIX": "ietf:dt",
+            },
+            "agenda": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                # "LOCATION": "127.0.0.1:11211",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:agenda",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
+            "proceedings": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                # "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+                # "LOCATION": "127.0.0.1:11211",
+                # No release-specific VERSION setting.
+                "KEY_PREFIX": "ietf:dt:proceedings",
+                # Key function is default except with sha384-encoded key
+                "KEY_FUNCTION": lambda key, key_prefix, version: (
+                    f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
+                ),
+            },
+            "sessions": {
+                "BACKEND": "django.core.cache.backends.locmem.LocMemCache",
+            },
+            "htmlized": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+                "LOCATION": "/var/cache/datatracker/htmlized",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 1000,
+                },
+            },
+            "pdfized": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+                "LOCATION": "/var/cache/datatracker/pdfized",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 1000,
+                },
+            },
+            "slowpages": {
+                "BACKEND": "django.core.cache.backends.dummy.DummyCache",
+                #'BACKEND': 'django.core.cache.backends.filebased.FileBasedCache',
+                "LOCATION": "/var/cache/datatracker/",
+                "OPTIONS": {
+                    "MAX_ENTRIES": 5000,
+                },
+            },
+            "celery-results": {
+                "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+                "LOCATION": "app:11211",
+                "KEY_PREFIX": "ietf:celery",
+            },
+        }
 
 PUBLISH_IPR_STATES = ['posted', 'removed', 'removed_objfalse']
 
@@ -1464,6 +1509,7 @@ def skip_unreadable_post(record):
     loaders = TEMPLATES[0]['OPTIONS']['loaders']
     loaders = tuple(l for e in loaders for l in (e[1] if isinstance(e, tuple) and "cached.Loader" in e[0] else (e,)))
     TEMPLATES[0]['OPTIONS']['loaders'] = loaders
+    SESSION_ENGINE = "django.contrib.sessions.backends.db"
 
     if 'SECRET_KEY' not in locals():
         SECRET_KEY = 'PDwXboUq!=hPjnrtG2=ge#N$Dwy+wn@uivrugwpic8mxyPfHka'
diff --git a/ietf/settings_test.py b/ietf/settings_test.py
index 883a582a28..e7ebc13eb2 100755
--- a/ietf/settings_test.py
+++ b/ietf/settings_test.py
@@ -69,9 +69,6 @@ def tempdir_with_cleanup(**kwargs):
 PHOTOS_DIR = os.path.join(MEDIA_ROOT, PHOTOS_DIRNAME)
 os.mkdir(PHOTOS_DIR)
 
-# Use database-backed sessions for tests
-SESSION_ENGINE = "django.contrib.sessions.backends.db"
-
 # Undo any developer-dependent middleware when running the tests
 MIDDLEWARE = [ c for c in MIDDLEWARE if not c in DEV_MIDDLEWARE ] # pyflakes:ignore
 
diff --git a/ietf/utils/cache.py b/ietf/utils/cache.py
index 60dd2c3ae3..0baa56da2d 100644
--- a/ietf/utils/cache.py
+++ b/ietf/utils/cache.py
@@ -1,67 +1,20 @@
-# Copyright The IETF Trust 2026, All Rights Reserved
-from typing import Optional, Union, Any
+# Copyright The IETF Trust 2023, All Rights Reserved
+# -*- coding: utf-8 -*-
 
-from django.core.cache import BaseCache
 from django.core.cache.backends.base import DEFAULT_TIMEOUT
-from django_redis.client import DefaultClient, SentinelClient
-from redis import Redis
-from redis.typing import KeyT, EncodableT
+from django.core.cache.backends.memcached import PyMemcacheCache
+from pymemcache.exceptions import MemcacheServerError
 
-from ietf.utils.log import log
+from .log import log
 
 
-class EncodedValueTooBig(ValueError):
-    def __init__(self, *args, value_len):
-        super().__init__(*args)
-        self.value_len = value_len
-
-
-class SizeLimitingRedisClient(DefaultClient):
-    """Redis DefaultClient that refuses to cache large objects
-    
-    Size applies to the literal cached value, which is _after_ serialization and
-    compression.
-    
-    Set size limit with MAX_ENCODED_VALUE_LEN in the OPTIONS dict. Defaults to
-    1 MB.
-    """
-    def __init__(self, server, params: dict[str, Any], backend: BaseCache) -> None:
-        super().__init__(server, params, backend)
-        self.max_encoded_value_len = self._options.get("MAX_ENCODED_VALUE_LEN", 1 << 20)
-
-    def encode(self, value: EncodableT) -> Union[bytes, int]:
-        encoded = super().encode(value)
-        if isinstance(encoded, bytes) and len(encoded) > self.max_encoded_value_len:
-            raise EncodedValueTooBig(value_len=len(encoded))
-        return encoded
-
-    def set(
-        self,
-        key: KeyT,
-        value: EncodableT,
-        timeout: Optional[float] = DEFAULT_TIMEOUT,
-        version: Optional[int] = None,
-        client: Optional[Redis] = None,
-        nx: bool = False,
-        xx: bool = False,
-    ) -> bool:
+class LenientMemcacheCache(PyMemcacheCache):
+    """PyMemcacheCache backend that tolerates failed inserts due to object size"""
+    def set(self, key, value, timeout=DEFAULT_TIMEOUT, version=None):
         try:
-            return super().set(key, value, timeout, version, client, nx, xx)
-        except EncodedValueTooBig as err:
-            log(
-                f"Refused to cache large object for {key!r} "
-                f"({err.value_len} > {self.max_encoded_value_len} bytes)"
-            )
-            return False
-
-
-class SizeLimitingSentinelClient(SizeLimitingRedisClient, SentinelClient):
-    """Redis SentinelClient that refuses to cache large objects
-    
-    Size applies to the literal cached value, which is _after_ serialization and
-    compression.
-        
-    Set size limit with MAX_ENCODED_VALUE_LEN in the OPTIONS dict. Defaults to
-    1 MB.
-    """
-    pass
+            super().set(key, value, timeout, version)
+        except MemcacheServerError as err:
+            if "object too large for cache" in str(err):
+                log(f"Memcache failed to cache large object for {key}")
+            else:
+                raise
diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index ef8c259933..6e63001e02 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -8,6 +8,8 @@ spec:
   selector:
     matchLabels:
       app: auth
+  strategy:
+    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index 5183893bc8..af2bb6295c 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -8,6 +8,8 @@ spec:
   selector:
     matchLabels:
       app: datatracker
+  strategy:
+    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
index b1e278a914..769cb03517 100644
--- a/k8s/kustomization.yaml
+++ b/k8s/kustomization.yaml
@@ -12,5 +12,6 @@ resources:
   - beat.yaml
   - celery.yaml
   - datatracker.yaml
+  - memcached.yaml
   - rabbitmq.yaml
   - replicator.yaml
diff --git a/k8s/memcached.yaml b/k8s/memcached.yaml
new file mode 100644
index 0000000000..68b732d745
--- /dev/null
+++ b/k8s/memcached.yaml
@@ -0,0 +1,88 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: memcached
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: memcached
+  template:
+    metadata:
+      labels:
+        app: memcached
+    spec:
+      securityContext:
+        runAsNonRoot: true
+      containers:
+        # -----------------------------------------------------
+        # Memcached
+        # -----------------------------------------------------
+        - image: "memcached:1.6-alpine"
+          imagePullPolicy: IfNotPresent
+          args: ["-m", "1024"]
+          name: memcached
+          ports:
+            - name: memcached
+              containerPort: 11211
+              protocol: TCP
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            # memcached image sets up uid/gid 11211
+            runAsUser: 11211
+            runAsGroup: 11211
+          resources:
+            requests:
+              cpu: 100m
+              memory: 100Mi
+        # -----------------------------------------------------
+        # Memcached Exporter for Prometheus
+        # -----------------------------------------------------
+        - image: "quay.io/prometheus/memcached-exporter:v0.14.3"
+          imagePullPolicy: IfNotPresent
+          name: memcached-exporter
+          ports:
+            - name: metrics
+              containerPort: 9150
+              protocol: TCP
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsUser: 65534  # nobody
+            runAsGroup: 65534  # nobody
+          resources:
+            requests:
+              cpu: 10m
+              memory: 20Mi
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 30
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: memcached
+  annotations:
+    k8s.grafana.com/scrape: "true"  # this is not a bool
+    k8s.grafana.com/metrics.portName: "metrics"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 11211
+      targetPort: memcached
+      protocol: TCP
+      name: memcached
+    - port: 9150
+      targetPort: metrics
+      protocol: TCP
+      name: metrics
+  selector:
+    app: memcached
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 560648c07f..20c5252ff0 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -315,29 +315,15 @@ def _multiline_to_list(s):
 DE_GFM_BINARY = "/usr/local/bin/de-gfm"
 IDSUBMIT_IDNITS_BINARY = "/usr/local/bin/idnits"
 
+# Duplicating production cache from settings.py and using it whether we're in production mode or not
+MEMCACHED_HOST = os.environ.get("DT_MEMCACHED_SERVICE_HOST", "127.0.0.1")
+MEMCACHED_PORT = os.environ.get("DT_MEMCACHED_SERVICE_PORT", "11211")
 from ietf import __version__
 
-# Common config for redis caches
-REDIS_SENTINEL_SERVICE = os.environ.get("DATATRACKER_REDIS_SENTINEL_HOST")
-REDIS_SENTINEL_PORT = os.environ.get("DATATRACKER_REDIS_SENTINEL_PORT", "26379")
-DJANGO_REDIS_CONNECTION_FACTORY = "django_redis.pool.SentinelConnectionFactory"
-REDIS_CACHE_CONFIG_COMMON = {
-    "BACKEND": "django_redis.cache.RedisCache",
-    "LOCATION": "redis://dt-master/0",
-    "OPTIONS": {
-        "CLIENT_CLASS": "ietf.utils.cache.SizeLimitingSentinelClient",
-        "MAX_ENCODED_VALUE_LEN": int(
-            os.environ.get("DATATRACKER_REDIS_MAX_ENCODED_VALUE_LEN", 1 << 20)
-        ),
-        "SENTINELS": [(REDIS_SENTINEL_SERVICE, REDIS_SENTINEL_PORT)],
-        "SENTINEL_KWARGS": {},
-        "CONNECTION_POOL_CLASS": "redis.sentinel.SentinelConnectionPool",
-    },
-}
-
 CACHES = {
-    "default": REDIS_CACHE_CONFIG_COMMON
-    | {
+    "default": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         "VERSION": __version__,
         "KEY_PREFIX": "ietf:dt",
         # Key function is default except with sha384-encoded key
@@ -345,8 +331,9 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "agenda": REDIS_CACHE_CONFIG_COMMON
-    | {
+    "agenda": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt:agenda",
         # Key function is default except with sha384-encoded key
@@ -354,8 +341,9 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "proceedings": REDIS_CACHE_CONFIG_COMMON
-    | {
+    "proceedings": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt:proceedings",
         # Key function is default except with sha384-encoded key
@@ -363,8 +351,9 @@ def _multiline_to_list(s):
             f"{key_prefix}:{version}:{sha384(str(key).encode('utf8')).hexdigest()}"
         ),
     },
-    "sessions": REDIS_CACHE_CONFIG_COMMON
-    | {
+    "sessions": {
+        "BACKEND": "ietf.utils.cache.LenientMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         # No release-specific VERSION setting.
         "KEY_PREFIX": "ietf:dt",
     },
@@ -389,8 +378,9 @@ def _multiline_to_list(s):
             "MAX_ENTRIES": 5000,
         },
     },
-    "celery-results": REDIS_CACHE_CONFIG_COMMON
-    | {
+    "celery-results": {
+        "BACKEND": "django.core.cache.backends.memcached.PyMemcacheCache",
+        "LOCATION": f"{MEMCACHED_HOST}:{MEMCACHED_PORT}",
         "KEY_PREFIX": "ietf:celery",
     },
 }
diff --git a/requirements.txt b/requirements.txt
index bf7d1d26e0..31e8ea69d1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -25,7 +25,6 @@ django-debug-toolbar>=6.0.0
 django-filter>=24.3
 django-markup>=1.10    # Limited use - need to reconcile against direct use of markdown
 django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
-django-redis>=6.0.0
 django-simple-history>=3.10.1
 django-storages>=1.14.6
 django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
@@ -59,8 +58,8 @@ oic>=1.7.0  # Used only by tests
 opentelemetry-sdk>=1.38.0
 opentelemetry-instrumentation-django>=0.59b0
 opentelemetry-instrumentation-psycopg2>=0.59b0
+opentelemetry-instrumentation-pymemcache>=0.59b0
 opentelemetry-instrumentation-requests>=0.59b0
-opentelemetry-instrumentation-redis>=0.63b1
 opentelemetry-exporter-otlp-proto-http>=1.38.0
 pillow>=11.3.0
 psycopg2>=2.9.10
@@ -73,9 +72,11 @@ python-dateutil>=2.9.0
 types-python-dateutil>=2.9.0
 python-json-logger>=3.3.0
 python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
+pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
 python-mimeparse>=2.0.0  # from TastyPie
 pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
 types-pytz==2025.2.0.20251108  # match pytz version
+typesense>=2.0.0
 requests>=2.32.4
 types-requests>=2.32.4
 requests-mock>=1.12.1
@@ -85,7 +86,6 @@ selenium>=4.34.2
 tblib>=3.1.0  # So that the django test runner provides tracebacks
 tlds>=2022042700  # Used to teach bleach about which TLDs currently exist
 tqdm>=4.67.1
-typesense>=2.0.0
 unidecode>=1.4.0
 urllib3>=2.5.0
 weasyprint>=66.0

From 586a5fa9221a83ad9db9bea95cf9b5cf163f875a Mon Sep 17 00:00:00 2001
From: jennifer-richards <19472766+jennifer-richards@users.noreply.github.com>
Date: Fri, 5 Jun 2026 23:27:44 +0000
Subject: [PATCH 691/707] ci: update base image target version to 20260605T2314

---
 dev/build/Dockerfile  | 2 +-
 dev/build/TARGET_BASE | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/build/Dockerfile b/dev/build/Dockerfile
index 4aca4c0e1e..72bdb7a7ae 100644
--- a/dev/build/Dockerfile
+++ b/dev/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/ietf-tools/datatracker-app-base:20260604T1454
+FROM ghcr.io/ietf-tools/datatracker-app-base:20260605T2314
 LABEL maintainer="IETF Tools Team <tools-discuss@ietf.org>"
 
 ENV DEBIAN_FRONTEND=noninteractive
diff --git a/dev/build/TARGET_BASE b/dev/build/TARGET_BASE
index b64be08c8c..7ca47fd197 100644
--- a/dev/build/TARGET_BASE
+++ b/dev/build/TARGET_BASE
@@ -1 +1 @@
-20260604T1454
+20260605T2314

From 042255b2ac184f96defd4a69d96bdb97c9d3189a Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 8 Jun 2026 15:05:00 -0300
Subject: [PATCH 692/707] feat: add group type to search index (#11001)

---
 ietf/utils/searchindex.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ietf/utils/searchindex.py b/ietf/utils/searchindex.py
index 6a8f4529a8..4e1ee27895 100644
--- a/ietf/utils/searchindex.py
+++ b/ietf/utils/searchindex.py
@@ -171,6 +171,7 @@ def typesense_doc_from_rfc(rfc: Document) -> DocumentSchema:
             "acronym": rfc.group.acronym,
             "name": rfc.group.name,
             "full": f"{rfc.group.acronym} - {rfc.group.name}",
+            "type": rfc.group.type.slug,
         }
     if (
         rfc.group.parent is not None

From d3d1f220013742dcfe7273d4abbe1a2991818080 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Mon, 8 Jun 2026 13:17:28 -0500
Subject: [PATCH 693/707] feat: self-serve queries for inputs to reporting and
 survey purposes (#10976)

* feat: utilities to count I-D submitters and authors by year

* chore: fix comment typo

* fix: return querysets and sets rather than lists. Improve docstrings.

* refactor: don't flatten sets to lists

* fix: filter to posted submissions and produce report

* chore: black

* chore: boilerplate

* fix: re-re-re fix the ^M problem in the issue template

* feat: self-serve queries for inputs to reporting and survey purposes

* Update ietf/utils/tests_reports.py

Co-authored-by: Jennifer Richards <jeni@borkbork.org>

---------

Co-authored-by: Jennifer Richards <jeni@borkbork.org>
---
 ietf/ietfauth/utils.py                        |   3 +-
 ietf/stats/tests.py                           | 146 +++++++++++++-
 ietf/stats/urls.py                            |   3 +-
 ietf/stats/views.py                           |  50 ++++-
 ietf/submit/factories.py                      |   4 +
 ietf/templates/base/menu.html                 |  10 +-
 .../templates/stats/annual_report_inputs.html |  55 +++++
 ietf/utils/reports.py                         |  49 +++++
 ietf/utils/tests_reports.py                   | 189 ++++++++++++++++++
 9 files changed, 500 insertions(+), 9 deletions(-)
 create mode 100644 ietf/templates/stats/annual_report_inputs.html
 create mode 100755 ietf/utils/reports.py
 create mode 100755 ietf/utils/tests_reports.py

diff --git a/ietf/ietfauth/utils.py b/ietf/ietfauth/utils.py
index 0df667fbd2..30d51cddd0 100644
--- a/ietf/ietfauth/utils.py
+++ b/ietf/ietfauth/utils.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2013-2022, All Rights Reserved
+# Copyright The IETF Trust 2013-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -163,6 +163,7 @@ def has_role(user, role_names, *args, **kwargs):
                 | Q(name="atlarge", group__acronym="irsg")
             ),
             "RSAB Member": Q(name="member", group__acronym="rsab"),
+            "LLC Staff": Q(name="member", group__acronym="llc-staff"),
             "Robot": Q(name="robot", group__acronym="secretariat"),
         }
 
diff --git a/ietf/stats/tests.py b/ietf/stats/tests.py
index dc5b5d6ae8..d8e8741702 100644
--- a/ietf/stats/tests.py
+++ b/ietf/stats/tests.py
@@ -1,8 +1,10 @@
 # Copyright The IETF Trust 2016-2026, All Rights Reserved
 
 import calendar
-import json
+import csv
 import datetime
+import io
+import json
 
 from django.http import Http404
 from pyquery import PyQuery
@@ -18,10 +20,12 @@
 import ietf.stats.views
 
 
-from ietf.group.factories import RoleFactory
-from ietf.person.factories import PersonFactory
+from ietf.doc.factories import NewRevisionDocEventFactory
+from ietf.group.factories import GroupFactory, RoleFactory
+from ietf.person.factories import EmailFactory, PersonFactory
 from ietf.review.factories import ReviewRequestFactory, ReviewerSettingsFactory, ReviewAssignmentFactory
 from ietf.meeting.tests_models import MeetingFactory, RegistrationFactory
+from ietf.submit.factories import SubmissionFactory
 from ietf.utils.timezone import date_today
 
 
@@ -183,3 +187,139 @@ def test_review_stats(self):
         self.assertEqual(r.status_code, 200)
         q = PyQuery(r.content)
         self.assertTrue(q('.review-stats td:contains("1")'))
+
+
+class AnnualReportInputsTests(TestCase):
+    def setUp(self):
+        super().setUp()
+        llc_staff = GroupFactory(acronym="llc-staff", type_id="team")
+        self.member = PersonFactory()
+        RoleFactory(group=llc_staff, name_id="member", person=self.member)
+        self.non_member = PersonFactory()
+
+    def _member_login(self):
+        self.client.login(
+            username=self.member.user.username,
+            password=f"{self.member.user.username}+password",
+        )
+
+    def test_access_unauthenticated(self):
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": "2024"})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 302)
+        self.assertIn("/accounts/login", r["Location"])
+
+    def test_access_non_member_forbidden(self):
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": "2024"})
+        self.client.login(
+            username=self.non_member.user.username,
+            password=f"{self.non_member.user.username}+password",
+        )
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 403)
+
+    def test_access_member_allowed(self):
+        self._member_login()
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": "2024"})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+
+    def test_default_year(self):
+        self._member_login()
+        url = urlreverse(ietf.stats.views.annual_report_inputs)
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.context["year"], datetime.date.today().year - 1)
+
+    def test_year_param_redirects_to_year_url(self):
+        self._member_login()
+        url = urlreverse(ietf.stats.views.annual_report_inputs)
+        r = self.client.get(url, {"year": "2022"})
+        self.assertRedirects(
+            r,
+            urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": "2022"}),
+        )
+
+    def test_summary_counts(self):
+        self._member_login()
+        year = 2021
+        # author1 has a matching Person record; author2 does not
+        EmailFactory(address="author1@example.com")
+        sub = SubmissionFactory(
+            state_id="posted",
+            submission_date=datetime.date(year, 6, 1),
+            submitter_email="submitter@example.com",
+        )
+        sub.authors = [
+            {"name": "Author One", "email": "author1@example.com", "affiliation": "", "country": "", "errors": []},
+            {"name": "Author Two", "email": "author2@example.com", "affiliation": "", "country": "", "errors": []},
+        ]
+        sub.save()
+        NewRevisionDocEventFactory(
+            time=datetime.datetime(year, 6, 1, tzinfo=datetime.timezone.utc),
+            doc__type_id="draft",
+        )
+        NewRevisionDocEventFactory(
+            time=datetime.datetime(year, 6, 1, tzinfo=datetime.timezone.utc),
+            doc__type_id="draft",
+        )
+        # Same draft, second revision — should count once
+        extra = NewRevisionDocEventFactory(
+            time=datetime.datetime(year, 9, 1, tzinfo=datetime.timezone.utc),
+            doc__type_id="draft",
+        )
+        NewRevisionDocEventFactory(
+            time=datetime.datetime(year, 9, 15, tzinfo=datetime.timezone.utc),
+            doc=extra.doc,
+        )
+
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": str(year)})
+        r = self.client.get(url)
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r.context["year"], year)
+        self.assertEqual(r.context["author_count"], 2)
+        self.assertEqual(r.context["author_person_count"], 1)
+        self.assertEqual(r.context["author_noperson_count"], 1)
+        self.assertEqual(r.context["submitter_count"], 1)
+        self.assertEqual(r.context["submitter_person_count"], 0)
+        self.assertEqual(r.context["submitter_noperson_count"], 1)
+        self.assertEqual(r.context["draft_count"], 3)
+
+    def test_download_authors_csv(self):
+        self._member_login()
+        year = 2020
+        sub = SubmissionFactory(
+            state_id="posted",
+            submission_date=datetime.date(year, 4, 1),
+        )
+        sub.authors = [
+            {"name": "Author", "email": "csvauthor@example.com", "affiliation": "", "country": "", "errors": []},
+        ]
+        sub.save()
+
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": str(year)})
+        r = self.client.get(url, {"download": "authors"})
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r["Content-Type"], "text/csv")
+        self.assertIn(f"authors-{year}.csv", r["Content-Disposition"])
+        rows = list(csv.reader(io.StringIO(r.content.decode())))
+        self.assertEqual(len(rows), 1)
+        self.assertIn("csvauthor@example.com", rows[0])
+
+    def test_download_submitters_csv(self):
+        self._member_login()
+        year = 2020
+        SubmissionFactory(
+            state_id="posted",
+            submission_date=datetime.date(year, 4, 1),
+            submitter_email="csvsubmitter@example.com",
+        )
+
+        url = urlreverse(ietf.stats.views.annual_report_inputs, kwargs={"year": str(year)})
+        r = self.client.get(url, {"download": "submitters"})
+        self.assertEqual(r.status_code, 200)
+        self.assertEqual(r["Content-Type"], "text/csv")
+        self.assertIn(f"submitters-{year}.csv", r["Content-Disposition"])
+        rows = list(csv.reader(io.StringIO(r.content.decode())))
+        self.assertEqual(len(rows), 1)
+        self.assertIn("csvsubmitter@example.com", rows[0])
diff --git a/ietf/stats/urls.py b/ietf/stats/urls.py
index 01b8758c84..3bb107813a 100644
--- a/ietf/stats/urls.py
+++ b/ietf/stats/urls.py
@@ -1,4 +1,4 @@
-# Copyright The IETF Trust 2016-2020, All Rights Reserved
+# Copyright The IETF Trust 2016-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
@@ -15,4 +15,5 @@
     url(r"^meeting/(?P<meeting_number>\d+)/(?P<stats_type>affiliation|country)/$", views.meeting_stats),
     url(r"^meeting/(?:(?P<stats_type>affiliation|country|total)/)?$", views.meetings_timeline),
     url(r"^review/(?:(?P<stats_type>completion|results|states|time)/)?(?:%(acronym)s/)?$" % settings.URL_REGEXPS, views.review_stats),
+    url(r"^annual_report_inputs/(?:(?P<year>\d{4})/)?$", views.annual_report_inputs),
 ]
diff --git a/ietf/stats/views.py b/ietf/stats/views.py
index d61c9cab64..fe2fa82f55 100644
--- a/ietf/stats/views.py
+++ b/ietf/stats/views.py
@@ -1,8 +1,9 @@
-# Copyright The IETF Trust 2016-2020, All Rights Reserved
+# Copyright The IETF Trust 2016-2026, All Rights Reserved
 # -*- coding: utf-8 -*-
 
 
 import calendar
+import csv
 import datetime
 import itertools
 import json
@@ -12,7 +13,7 @@
 from django.conf import settings
 from django.contrib.auth.decorators import login_required
 from django.core.cache import cache
-from django.http import HttpResponseRedirect
+from django.http import HttpResponse, HttpResponseRedirect
 from django.shortcuts import render, get_object_or_404
 from django.urls import reverse as urlreverse
 from django.db.models import Count
@@ -28,7 +29,7 @@
 from ietf.person.models import Person
 from ietf.name.models import ReviewResultName, CountryName, ReviewAssignmentStateName
 from ietf.meeting.models import Registration, Meeting
-from ietf.ietfauth.utils import has_role
+from ietf.ietfauth.utils import has_role, role_required
 from ietf.utils.response import permission_denied
 from ietf.utils.timezone import date_today, DEADLINE_TZINFO
 from ietf.meeting.helpers import get_current_ietf_meeting_num
@@ -957,3 +958,46 @@ def time_key_fn(t):
         "possible_states": possible_states,
         "selected_state": selected_state,
     })
+
+
+@role_required("LLC Staff")
+def annual_report_inputs(request, year=None):
+    if year is None and "year" in request.GET:
+        return HttpResponseRedirect(
+            urlreverse("ietf.stats.views.annual_report_inputs", kwargs={"year": request.GET["year"]})
+        )
+    year = int(year) if year else datetime.date.today().year - 1
+
+    from ietf.doc.models import NewRevisionDocEvent
+    from ietf.utils.reports import authors_by_year, submitters_by_year, unique_people
+
+    download = request.GET.get("download")
+    if download in ("authors", "submitters"):
+        addresses = authors_by_year(year) if download == "authors" else submitters_by_year(year)
+        response = HttpResponse(content_type="text/csv")
+        response["Content-Disposition"] = f'attachment; filename="{download}-{year}.csv"'
+        writer = csv.writer(response)
+        writer.writerow(sorted(addresses))
+        return response
+
+    authors = authors_by_year(year)
+    submitters = submitters_by_year(year)
+    author_persons, author_nopersons = unique_people(authors)
+    submitter_persons, submitter_nopersons = unique_people(submitters)
+
+    draft_count = len(set(
+        NewRevisionDocEvent.objects.filter(
+            doc__type_id="draft", time__year=year
+        ).values_list("doc__name", flat=True)
+    ))
+
+    return render(request, "stats/annual_report_inputs.html", {
+        "year": year,
+        "author_count": len(authors),
+        "submitter_count": len(submitters),
+        "author_person_count": author_persons.count(),
+        "author_noperson_count": len(author_nopersons),
+        "submitter_person_count": submitter_persons.count(),
+        "submitter_noperson_count": len(submitter_nopersons),
+        "draft_count": draft_count,
+    })
diff --git a/ietf/submit/factories.py b/ietf/submit/factories.py
index 1076434b82..69888a055d 100644
--- a/ietf/submit/factories.py
+++ b/ietf/submit/factories.py
@@ -21,6 +21,9 @@ class Meta:
 
 class SubmissionFactory(factory.django.DjangoModelFactory):
     state_id = 'uploaded'
+    submitter_name = factory.Faker("name")
+    submitter_email = factory.Faker("email") 
+    submitter = factory.LazyAttribute(lambda o: f"{o.submitter_name} <{o.submitter_email}>")
 
     @factory.lazy_attribute_sequence
     def name(self, n):
@@ -32,3 +35,4 @@ def auth_key(self):
 
     class Meta:
         model = Submission
+        exclude = ("submitter_name", "submitter_email")
diff --git a/ietf/templates/base/menu.html b/ietf/templates/base/menu.html
index 43ca025e28..b6b744ec21 100644
--- a/ietf/templates/base/menu.html
+++ b/ietf/templates/base/menu.html
@@ -1,4 +1,4 @@
-{# Copyright The IETF Trust 2015-2025, All Rights Reserved #}
+{# Copyright The IETF Trust 2015-2026, All Rights Reserved #}
 {% load origin %}
 {% origin %}
 {% load ietf_filters managed_groups wg_menu active_groups_menu group_filters cache meetings_filters %}
@@ -453,6 +453,14 @@
                     </a>
                 </li>
             {% endif %}
+            {% if user|has_role:"LLC Staff" %}
+                <li>
+                    <a class="dropdown-item{% if flavor != 'top' %} text-wrap{% endif %}"
+                       href="{% url "ietf.stats.views.annual_report_inputs" %}">
+                        Annual report inputs
+                    </a>
+                </li>
+            {% endif %}
         </ul>
     </li>
     <li>
diff --git a/ietf/templates/stats/annual_report_inputs.html b/ietf/templates/stats/annual_report_inputs.html
new file mode 100644
index 0000000000..15add7ece3
--- /dev/null
+++ b/ietf/templates/stats/annual_report_inputs.html
@@ -0,0 +1,55 @@
+{# Copyright The IETF Trust 2026, All Rights Reserved #}
+{% extends "base.html" %}
+{% load origin %}
+{% load ietf_filters static %}
+{% block content %}
+    {% origin %}
+    <h1>{% block title %}Annual Report Inputs for {{ year }}{% endblock %}</h1>
+    <form method="get" action="{% url "ietf.stats.views.annual_report_inputs" %}" class="mb-3">
+        <div class="input-group w-auto d-inline-flex">
+            <label class="input-group-text" for="year-select">Year</label>
+            <input id="year-select" class="form-control" type="number" name="year" value="{{ year }}" min="1990">
+            <button class="btn btn-primary" type="submit">Go</button>
+        </div>
+    </form>
+    <h2>Summary</h2>
+    <table class="table table-sm table-bordered w-auto">
+        <thead>
+            <tr>
+                <th scope="col" class="px-3"></th>
+                <th scope="col" class="text-end px-3">Email addresses</th>
+                <th scope="col" class="text-end px-3">Unique persons found</th>
+                <th scope="col" class="text-end px-3">Addresses with no person record</th>
+                <th scope="col" class="text-end px-3">Approximate unique people</th>
+            </tr>
+        </thead>
+        <tbody>
+            <tr>
+                <th scope="row" class="px-3">Authors</th>
+                <td class="text-end px-3">{{ author_count }}</td>
+                <td class="text-end px-3">{{ author_person_count }}</td>
+                <td class="text-end px-3">{{ author_noperson_count }}</td>
+                <td class="text-end px-3">{{ author_person_count|add:author_noperson_count }}</td>
+            </tr>
+            <tr>
+                <th scope="row" class="px-3">Submitters</th>
+                <td class="text-end px-3">{{ submitter_count }}</td>
+                <td class="text-end px-3">{{ submitter_person_count }}</td>
+                <td class="text-end px-3">{{ submitter_noperson_count }}</td>
+                <td class="text-end px-3">{{ submitter_person_count|add:submitter_noperson_count }}</td>
+            </tr>
+        </tbody>
+    </table>
+    <p>Drafts submitted in {{ year }}: {{ draft_count }}</p>
+    <h2>Downloads</h2>
+    <ul>
+        <li>
+            <a href="{% url "ietf.stats.views.annual_report_inputs" year %}?download=authors">authors-{{ year }}.csv</a>
+            &mdash; email addresses for I-D authors with submissions posted in {{ year }}
+        </li>
+        <li>
+            <a href="{% url "ietf.stats.views.annual_report_inputs" year %}?download=submitters">submitters-{{ year }}.csv</a>
+            &mdash; email addresses for I-D submitters with submissions posted in {{ year }}
+        </li>
+    </ul>
+{% endblock %}
diff --git a/ietf/utils/reports.py b/ietf/utils/reports.py
new file mode 100755
index 0000000000..9a969a5217
--- /dev/null
+++ b/ietf/utils/reports.py
@@ -0,0 +1,49 @@
+# Copyright The IETF Trust 2023-2026, All Rights Reserved
+
+from typing import List, Set, Tuple
+from django.db.models import QuerySet
+
+from email.utils import parseaddr
+
+from ietf.person.models import Person
+from ietf.submit.models import Submission
+
+
+def authors_by_year(year: int) -> Set[str]:
+    """Email addresses provided by I-D authors for drafts that were submitted in the given year."""
+    addresses = set()
+    for submission in Submission.objects.filter(
+        submission_date__year=year, state="posted"
+    ):
+        addresses.update([a["email"] for a in submission.authors])
+    return addresses
+
+
+def submitters_by_year(year: int) -> Set[str]:
+    """Email addresses provided by I-D submitters for drafts that were submitted in the given year."""
+    return set(
+        [
+            parseaddr(a)[1]
+            for a in Submission.objects.filter(
+                submitter__contains="@", submission_date__year=year, state="posted"
+            ).values_list("submitter", flat=True)
+        ]
+    )
+
+
+def unique_people(addresses: List[str]) -> Tuple["QuerySet[Person]", Set]:
+    """Identify Person records matching email addresses and email addresses with no Person record.
+
+    Given a list of email addresses, return
+    (
+        a list of unique Person records with a matching email address,
+        a list of unique email addresses with no matching Person record
+    )
+    The sum of the lengths of these lists is a best-approximation for how
+    many unique people the list of addresses belong to.
+    """
+    persons = Person.objects.filter(email__address__in=addresses).distinct()
+    known_email = set(persons.values_list("email__address", flat=True))
+    return (persons, set(addresses) - set(known_email))
+
+
diff --git a/ietf/utils/tests_reports.py b/ietf/utils/tests_reports.py
new file mode 100755
index 0000000000..83daa15cc1
--- /dev/null
+++ b/ietf/utils/tests_reports.py
@@ -0,0 +1,189 @@
+# Copyright The IETF Trust 2026, All Rights Reserved
+
+import datetime
+
+import debug  # pyflakes:ignore
+
+from ietf.doc.factories import IndividualDraftFactory
+from ietf.person.factories import EmailFactory
+from ietf.person.models import Person, Email
+from ietf.submit.factories import SubmissionFactory
+from ietf.utils.reports import authors_by_year, submitters_by_year, unique_people
+from ietf.utils.test_utils import TestCase
+
+
+class ReportTests(TestCase):
+    def setUp(self):
+        super().setUp()
+
+        # Build 5 drafts submitted across two years, with 6 unique authors,
+        # one of which has more than one email address (author0@example.com and
+        # author0@example.net). The drafts are submitted by two of the six authors,
+        # again using multiple addresses for author0, and two identities that are not authors.
+        # Then build a draft where the submission's submitter info doesn't contain an email
+        # address (we have those in the production database) to make sure that submitter isn't
+        # counted.
+
+        self.make_draft_submission(
+            year=2020,
+            month=1,
+            day=1,
+            submitter_name="Author 0",
+            submitter_email="author0@example.net",
+            author_nameaddrs=[
+                ("Author 0", "author0@example.net"),
+                ("Author 1", "author1@example.net"),
+            ],
+        )
+
+        self.make_draft_submission(
+            year=2020,
+            month=3,
+            day=3,
+            submitter_name="NotanAuthor 0",
+            submitter_email="notanauthor0@example.net",
+            author_nameaddrs=[
+                ("Author 0", "author0@example.com"),  # Note alternate email
+                ("Author 3", "author3@example.net"),
+            ],
+        )
+
+        self.make_draft_submission(
+            year=2020,
+            month=12,
+            day=31,
+            submitter_name="Author 3",
+            submitter_email="author3@example.net",
+            author_nameaddrs=[("Author 3", "author3@example.net")],
+        )
+
+        self.make_draft_submission(
+            year=2021,
+            month=1,
+            day=1,
+            submitter_name="Author 0",
+            submitter_email="author0@example.com",  # Note alternate email
+            author_nameaddrs=[
+                ("Author 0", "author0@example.com"),  # Again, alternate email
+                ("Author 4", "author4@example.net"),
+            ],
+        )
+
+        self.make_draft_submission(
+            year=2021,
+            month=12,
+            day=31,
+            submitter_name="NoatanAuthor 2",
+            submitter_email="notanauthor2@example.net",
+            author_nameaddrs=[
+                ("Author 0", "author0@example.net"),
+                ("Author 3", "author3@example.net"),
+                ("Author 5", "author5@example.net"),
+            ],
+        )
+
+        self.make_draft_submission(
+            year=2021,
+            month=12,
+            day=31,
+            submitter_name="Trouble Maker",
+            submitter_email="",
+            author_nameaddrs=[
+                ("Author 0", "author0@example.net"),
+                ("Author 2", "author2@example.net"),
+            ],
+        )
+
+    def make_draft_submission(
+        self, year, month, day, submitter_name, submitter_email, author_nameaddrs
+    ):
+
+        authors = []
+        for name, addr in author_nameaddrs:
+            person = Person.objects.filter(name=name).first()
+            if not person:
+                person = EmailFactory(person__name=name, address=addr).person
+            elif not Email.objects.filter(address=addr).exists():
+                EmailFactory(person=person, address=addr)
+            authors.append(person)
+
+        submission = SubmissionFactory(
+            submission_date=datetime.date(year, month, day),
+            submitter_name=submitter_name,
+            submitter_email=submitter_email,
+            state_id="posted",
+        )
+        submission.authors = [
+            {
+                "name": f"{name}",
+                "email": f"{addr}",
+                "affiliation": "",
+                "country": "",
+                "errors": [],
+            }
+            for name, addr in author_nameaddrs
+        ]
+
+        submission.save()
+        IndividualDraftFactory(submission=submission, authors=authors)
+
+    def test_authors_by_year(self):
+        authors2020 = authors_by_year(2020)
+        self.assertEqual(
+            authors2020,
+            set(
+                [
+                    "author0@example.net",
+                    "author0@example.com",
+                    "author1@example.net",
+                    "author3@example.net",
+                ]
+            ),
+        )
+        authors2021 = authors_by_year(2021)
+        self.assertEqual(
+            authors2021,
+            set(
+                [
+                    "author0@example.net",
+                    "author0@example.com",
+                    "author2@example.net",
+                    "author3@example.net",
+                    "author4@example.net",
+                    "author5@example.net",
+                ]
+            ),
+        )
+
+    def test_submitters_by_year(self):
+        sub2020 = submitters_by_year(2020)
+        self.assertEqual(
+            sub2020,
+            set(
+                [
+                    "author0@example.net",
+                    "author3@example.net",
+                    "notanauthor0@example.net",
+                ]
+            ),
+        )
+        sub2021 = submitters_by_year(2021)
+        self.assertEqual(
+            sub2021, set(["author0@example.com", "notanauthor2@example.net"])
+        )
+
+    def test_unique_people(self):
+        persons, addrs = unique_people(
+            [
+                "notanauthor0@example.com",
+                "author0@example.net",
+                "author0@example.com",
+                "author1@example.net",
+                "notanauthor0@example.com",
+            ]
+        )
+        self.assertEqual(addrs, set(["notanauthor0@example.com"]))
+        self.assertEqual(
+            set(persons), set(Person.objects.filter(name__in=("Author 0", "Author 1")))
+        )
+        self.assertEqual(len(persons) + len(addrs), 3)

From 7dff4a7af8844a22a302a579ace59c8372a5348b Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Mon, 8 Jun 2026 16:22:23 -0300
Subject: [PATCH 694/707] ci: remove strategy from dt manifests (#11004)

---
 k8s/auth.yaml        | 2 --
 k8s/datatracker.yaml | 2 --
 2 files changed, 4 deletions(-)

diff --git a/k8s/auth.yaml b/k8s/auth.yaml
index 6e63001e02..ef8c259933 100644
--- a/k8s/auth.yaml
+++ b/k8s/auth.yaml
@@ -8,8 +8,6 @@ spec:
   selector:
     matchLabels:
       app: auth
-  strategy:
-    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:
diff --git a/k8s/datatracker.yaml b/k8s/datatracker.yaml
index af2bb6295c..5183893bc8 100644
--- a/k8s/datatracker.yaml
+++ b/k8s/datatracker.yaml
@@ -8,8 +8,6 @@ spec:
   selector:
     matchLabels:
       app: datatracker
-  strategy:
-    type: DEPLOY_STRATEGY
   template:
     metadata:
       labels:

From 7e3e3cb503aa9ec2f757cabab85c944771ade8f9 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 9 Jun 2026 18:51:19 -0500
Subject: [PATCH 695/707] fix: tweak logging settings to avoid spurious
 keyerrors (#11009)

---
 ietf/settings.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 95f2ffefd7..1286e70e75 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -329,7 +329,8 @@ def skip_unreadable_post(record):
     "formatters": {
         "django.server": {
             "()": "django.utils.log.ServerFormatter",
-            "format": "[%(server_time)s] %(message)s",
+            "format": "[{server_time}] {message}",
+            "style": "{",
         },
         "plain": {
             "style": "{",

From c342bef7938e2ba56b23984c17b3af740c52ac8e Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 9 Jun 2026 19:08:23 -0500
Subject: [PATCH 696/707] fix: improved source and keywords for rfc json
 (#11008)

---
 ietf/doc/tests_utils_rfc_json.py | 58 ++++++++++++++++++++++++++++++--
 ietf/doc/utils_rfc_json.py       | 20 +++++------
 2 files changed, 65 insertions(+), 13 deletions(-)

diff --git a/ietf/doc/tests_utils_rfc_json.py b/ietf/doc/tests_utils_rfc_json.py
index b94fc2cbea..075b50a24f 100644
--- a/ietf/doc/tests_utils_rfc_json.py
+++ b/ietf/doc/tests_utils_rfc_json.py
@@ -13,6 +13,7 @@
     PublishedRfcDocEventFactory,
     RfcAuthorFactory,
     RfcFactory,
+    RgRfcFactory,
     WgRfcFactory,
 )
 from ietf.doc.models import RelatedDocument
@@ -245,6 +246,19 @@ def test_april_first_date_format(self):
 
         self.assertEqual(data["pub_date"], "1 April 2020")
 
+    def test_empty_keywords_filtered(self):
+        """Empty-string keywords are stripped from the keywords list."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=WgRfcFactory(keywords=["foo", "", "bar"]),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["keywords"], ["foo", "bar"])
+
     def test_non_april_first_april_date(self):
         """An April publication that is NOT in the April Fools list gets 'April YYYY'."""
         rfc = PublishedRfcDocEventFactory(
@@ -260,7 +274,7 @@ def test_non_april_first_april_date(self):
         self.assertEqual(data["pub_date"], "April 2020")
 
     def test_source_ietf_wg(self):
-        """IETF-stream WG RFC: source is 'acronym (area)'."""
+        """IETF-stream WG RFC: source is the group's full name."""
         area = GroupFactory(type_id="area")
         wg = GroupFactory(type_id="wg", parent=area)
         rfc = PublishedRfcDocEventFactory(
@@ -272,7 +286,7 @@ def test_source_ietf_wg(self):
         generate_rfc_json(rfc.rfc_number)
         data = _read_json(rfc.rfc_number)
 
-        self.assertEqual(data["source"], f"{wg.acronym} ({area.acronym})")
+        self.assertEqual(data["source"], wg.name)
 
     def test_source_ietf_no_wg(self):
         """IETF-stream individual RFC (group acronym 'none'): source is 'IETF - NON WORKING GROUP'."""
@@ -293,6 +307,22 @@ def test_source_ietf_no_wg(self):
 
         self.assertEqual(data["source"], "IETF - NON WORKING GROUP")
 
+    def test_source_ietf_area(self):
+        """IETF-stream RFC with area-type group: source is 'IETF - NON WORKING GROUP'."""
+        area = GroupFactory(type_id="area")
+        area.parent = GroupFactory()
+        area.save()
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(group=area, stream_id="ietf"),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], "IETF - NON WORKING GROUP")
+
     def test_source_iab(self):
         """IAB-stream RFC: source is 'IAB'."""
         rfc = PublishedRfcDocEventFactory(
@@ -319,6 +349,30 @@ def test_source_ise(self):
 
         self.assertEqual(data["source"], "INDEPENDENT")
 
+    def test_source_irtf_rg(self):
+        """IRTF-stream RG RFC: source is the group's full name."""
+        rfc = PublishedRfcDocEventFactory(doc=RgRfcFactory()).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], rfc.group.name)
+
+    def test_source_irtf_no_rg(self):
+        """IRTF-stream RFC with no specific RG (group acronym 'none'): source is 'IRTF'."""
+        rfc = PublishedRfcDocEventFactory(
+            doc=RfcFactory(stream_id="irtf", group=GroupFactory(acronym="none")),
+        ).doc
+        _put_pub_levels(rfc.rfc_number, "inf")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["source"], "IRTF")
+
     def test_pub_levels_passed_in(self):
         """When pub_levels is passed in, get_publication_std_levels() is not called."""
         rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
diff --git a/ietf/doc/utils_rfc_json.py b/ietf/doc/utils_rfc_json.py
index 6030a7064c..af916e0d7f 100644
--- a/ietf/doc/utils_rfc_json.py
+++ b/ietf/doc/utils_rfc_json.py
@@ -105,7 +105,6 @@ def generate_rfc_json(rfc_number: int, *, pub_levels=None) -> None:
     stream_slug = rfc.stream.slug
     group_acronym = rfc.group.acronym
 
-    area_acronym = None
     if stream_slug == "ietf":
         if rfc.group.parent is None:
             assertion("rfc.group.parent is not None")
@@ -113,23 +112,22 @@ def generate_rfc_json(rfc_number: int, *, pub_levels=None) -> None:
                 f"Malformed document object encountered for rfc{rfc_number}. Aborting update of rfc{rfc_number}.json"
             )
             return
-        else:
-            area_acronym = rfc.group.parent.acronym
 
     if stream_slug == "ise":
         source = "INDEPENDENT"
     elif stream_slug == "iab":
         source = "IAB"
     elif stream_slug == "ietf" and (
-        group_acronym in ("none", "gen") or not area_acronym
+        group_acronym == "none" or rfc.group.type_id == "area"
     ):
         source = "IETF - NON WORKING GROUP"
-    elif group_acronym not in ("none", ""):
-        source = group_acronym
-        if stream_slug == "ietf" and area_acronym:
-            source += f" ({area_acronym})"
-        elif stream_slug:
-            source += f" ({stream_slug})"
+    elif stream_slug == "irtf":
+        if group_acronym == "none":
+            source = "IRTF"
+        else:
+            source = rfc.group.name
+    elif group_acronym not in ("none", "") and stream_slug in ["ietf", "editorial"]:
+        source = rfc.group.name
     elif stream_slug:
         source = "Legacy" if stream_slug == "legacy" else stream_slug.upper()
     else:
@@ -207,7 +205,7 @@ def _rfc_list(qs, attr):
         "source": source,
         "abstract": rfc.abstract,
         "pub_date": pub_date,
-        "keywords": rfc.keywords,
+        "keywords": [kw for kw in rfc.keywords if kw],
         "obsoletes": obsoletes,
         "obsoleted_by": obsoleted_by,
         "updates": updates,

From 1cccb088947cab50a5b8c837ed584f2396de2cdd Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Tue, 9 Jun 2026 19:09:36 -0500
Subject: [PATCH 697/707] test: make check for April 1 resilient across
 line-breaks (#11006)

* test: make check for April 1 resilient across line-breaks

* test: be resilient against faker creating a 63 character long title
---
 ietf/sync/tests_rfcindex.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index 2b70924db3..1a45d5d9cf 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -139,7 +139,10 @@ def test_create_rfc_txt_index(self, mock_save_blob, mock_save_file):
             f"{self.april_fools_rfc.rfc_number} {self.april_fools_rfc.title}",
             stripped_contents,
         )
-        self.assertIn("1 April 2020", contents)  # from the April 1 RFC
+        # "1 April 2020" may be split across a line wrap (e.g. "1 April\n     2020")
+        # when the randomly-generated title is long enough to push the date off the line.
+        # assertRegex handles both wrapped and non-wrapped cases explicitly.
+        self.assertRegex(contents, r"1\s+April\s+2020")  # from the April 1 RFC
         self.assertIn(
             f"{self.rfc.rfc_number} {self.rfc.title}",
             stripped_contents,

From 28a5e967725b8569bde7ca09821b182a5bcbe9b5 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 10 Jun 2026 12:08:45 -0300
Subject: [PATCH 698/707] chore(dev): fix nginx config (#11014)

keepalive 0 is not supported by the version of nginx
in the dev container
---
 docker/configs/nginx-proxy.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docker/configs/nginx-proxy.conf b/docker/configs/nginx-proxy.conf
index a02ab2ff06..0a9dde04eb 100644
--- a/docker/configs/nginx-proxy.conf
+++ b/docker/configs/nginx-proxy.conf
@@ -1,6 +1,7 @@
 upstream datatracker_backend {
     server 127.0.0.1:8001;
-    keepalive 0; # default = 32 since nginx 1.29.7
+# Uncomment when changing to nginx 1.29.7 or later. 
+#     keepalive 0; # default = 32 since nginx 1.29.7
 }
 
 server {

From 6b185be2961952e25a3ec226310593a4544a4a10 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 10 Jun 2026 18:39:32 -0500
Subject: [PATCH 699/707] fix: sort the search results document column
 correctly (#11015)

* fix: sort the group document's document column correcty

* test: confirm column sort information is present
---
 ietf/group/tests_info.py                         | 9 ++++++++-
 ietf/templates/doc/search/search_result_row.html | 2 +-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/ietf/group/tests_info.py b/ietf/group/tests_info.py
index 3f24e2e3d6..97ec7ebdb1 100644
--- a/ietf/group/tests_info.py
+++ b/ietf/group/tests_info.py
@@ -27,7 +27,7 @@
 
 from ietf.community.models import CommunityList
 from ietf.community.utils import reset_name_contains_index_for_rule
-from ietf.doc.factories import WgDraftFactory, RgDraftFactory, IndividualDraftFactory, CharterFactory, BallotDocEventFactory
+from ietf.doc.factories import WgDraftFactory, WgRfcFactory, RgDraftFactory, IndividualDraftFactory, CharterFactory, BallotDocEventFactory
 from ietf.doc.models import Document, DocEvent, State
 from ietf.doc.storage_utils import retrieve_str
 from ietf.doc.utils_charter import charter_name_for_group
@@ -396,6 +396,7 @@ def test_group_documents(self):
         draft7 = WgDraftFactory(group=group)
         draft7.set_state(State.objects.get(type='draft', slug='expired'))
         draft7.set_state(State.objects.get(type='draft-stream-%s' % draft7.stream_id, slug='dead')) # Expired WG draft, marked as dead
+        rfc = WgRfcFactory(group=group)
 
         clist = CommunityList.objects.get(group=group)
         related_docs_rule = clist.searchrule_set.get(rule_type='name_contains')
@@ -426,6 +427,12 @@ def test_group_documents(self):
         q = PyQuery(r.content)
         self.assertTrue(any([draft2.name in x.attrib['href'] for x in q('table td a.track-untrack-doc')]))
 
+        # RFC rows must use the RFC number as the sort key so that numeric sort
+        # is not disrupted by the page-count text that precedes the name in the cell.
+        # Draft rows must use the document name.
+        self.assertTrue(q(f'td.doc[data-sort-number="{rfc.rfc_number}"]'))
+        self.assertTrue(q(f'td.doc[data-sort-number="{draft.name}"]'))
+
         # Let's also check the IRTF stream
         rg = GroupFactory(type_id='rg')
         setup_default_community_list_for_group(rg)
diff --git a/ietf/templates/doc/search/search_result_row.html b/ietf/templates/doc/search/search_result_row.html
index 476c81f598..cb50a1b214 100644
--- a/ietf/templates/doc/search/search_result_row.html
+++ b/ietf/templates/doc/search/search_result_row.html
@@ -45,7 +45,7 @@
             </a>
         {% endfor %}
     </td>
-    <td class="doc bg-transparent">
+    <td class="doc bg-transparent" data-sort-number="{% if doc.type_id == "rfc" %}{{ doc.rfc_number }}{% else %}{{ doc.name }}{% endif %}">
         {% if doc.pages %}<small class="float-end text-body-secondary d-none d-sm-block">{{ doc.pages }} page{{ doc.pages|pluralize }}</small>{% endif %}
         <div>
             <a href="{{ doc.get_absolute_url }}">

From f77514e98f76d9cc263c829f616bc6822864b01b Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Wed, 10 Jun 2026 18:41:03 -0500
Subject: [PATCH 700/707] fix: correct sorting in nomcom feedback tables
 (#11016)

---
 ietf/nomcom/tests.py                     | 14 ++++++++++++++
 ietf/templates/nomcom/view_feedback.html |  4 ++--
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/ietf/nomcom/tests.py b/ietf/nomcom/tests.py
index 210788ce07..28152ef79b 100644
--- a/ietf/nomcom/tests.py
+++ b/ietf/nomcom/tests.py
@@ -1640,6 +1640,20 @@ def test_feedback_topic_badges(self):
         q = PyQuery(response.content)
         self.assertEqual( len(q('.text-bg-success')), 0 )
 
+    def test_feedback_index_sort_keys(self):
+        url = reverse('ietf.nomcom.views.view_feedback', kwargs={'year': self.nc.year()})
+        login_testing_unauthorized(self, self.member.user.username, url)
+        provide_private_key_to_test_client(self)
+        response = self.client.get(url)
+        self.assertEqual(response.status_code, 200)
+        q = PyQuery(response.content)
+        # Feedback count cells must carry a numeric data-sort-number so that
+        # a "New" badge appearing before the count doesn't corrupt the sort key.
+        sort_cells = q('td[data-sort-number]')
+        self.assertTrue(len(sort_cells) > 0)
+        for cell in sort_cells.items():
+            self.assertRegex(cell.attr('data-sort-number'), r'^\d+$')
+
 class NewActiveNomComTests(TestCase):
 
     def setUp(self):
diff --git a/ietf/templates/nomcom/view_feedback.html b/ietf/templates/nomcom/view_feedback.html
index 93d61b7f42..0758329d60 100644
--- a/ietf/templates/nomcom/view_feedback.html
+++ b/ietf/templates/nomcom/view_feedback.html
@@ -43,7 +43,7 @@ <h3 class="mt-5" id="declined">Declined each nominated position</h3>
                             </a>
                         </td>
                         {% for fbtype_name, fbtype_count, fbtype_newflag in fb_dict.feedback %}
-                            <td>
+                            <td data-sort-number="{{ fbtype_count }}">
                                 {% if fbtype_newflag %}<span class="badge rounded-pill text-bg-success">New</span>{% endif %}
                                 {{ fbtype_count }}
                             </td>
@@ -82,7 +82,7 @@ <h2 class="mt-5" id="topics">Feedback related to topics</h2>
                         </a>
                     </td>
                     {% for fbtype_name, fbtype_count, fbtype_newflag in fb_dict.feedback %}
-                        <td>
+                        <td data-sort-number="{{ fbtype_count }}">
                             {% if fbtype_newflag %}<span class="badge rounded-pill text-bg-success">New</span>{% endif %}
                             {{ fbtype_count }}
                         </td>

From 65dcdc942956d5a9dc21bf7029664b04d49c8d00 Mon Sep 17 00:00:00 2001
From: Jennifer Richards <jennifer@staff.ietf.org>
Date: Wed, 10 Jun 2026 20:42:58 -0300
Subject: [PATCH 701/707] refactor: use correct red bucket paths by default
 (#11007)

* refactor: RFCINDEX_INPUT_PATH dflt -> prod value

* refactor: RFCINDEX_OUTPUT_PATH dflt -> prod value

* ci: only change RFCINDEX_* paths if set

* refactor: clearer settings

* test: update / fix / add tests
---
 ietf/settings.py            |  4 +++
 ietf/sync/rfcindex.py       | 19 ++++++++------
 ietf/sync/tests_rfcindex.py | 50 +++++++++++++++++++++++++++++--------
 k8s/settings_local.py       |  6 +++--
 4 files changed, 60 insertions(+), 19 deletions(-)

diff --git a/ietf/settings.py b/ietf/settings.py
index 1286e70e75..d509a877c6 100644
--- a/ietf/settings.py
+++ b/ietf/settings.py
@@ -977,6 +977,10 @@ def skip_unreadable_post(record):
 )
 RFC_FILE_TYPES = IDSUBMIT_FILE_TYPES
 
+# Paths in the red bucket
+RFCINDEX_INPUT_PATH = "other/"
+RFCINDEX_OUTPUT_PATH = "other/"
+
 IDSUBMIT_MAX_DRAFT_SIZE =  {
     'txt':  2*1024*1024,  # Max size of txt draft file in bytes
     'xml':  3*1024*1024,  # Max size of xml draft file in bytes
diff --git a/ietf/sync/rfcindex.py b/ietf/sync/rfcindex.py
index be55a6866e..f47974f900 100644
--- a/ietf/sync/rfcindex.py
+++ b/ietf/sync/rfcindex.py
@@ -48,9 +48,17 @@ def errata_url(rfc: Document):
     return urljoin(settings.RFC_EDITOR_ERRATA_BASE_URL + "/", f"rfc{rfc.rfc_number}")
 
 
+def red_bucket_input_path(filename: str) -> str:
+    return str(Path(settings.RFCINDEX_INPUT_PATH) / filename)
+
+
+def red_bucket_output_path(filename: str) -> str:
+    return str(Path(settings.RFCINDEX_OUTPUT_PATH) / filename)
+
+
 def save_to_red_bucket(filename: str, content: str | bytes):
     red_bucket = storages["red_bucket"]
-    bucket_path = str(Path(getattr(settings, "RFCINDEX_OUTPUT_PATH", "")) / filename)
+    bucket_path = red_bucket_output_path(filename)
     if getattr(settings, "RFCINDEX_DELETE_THEN_WRITE", True):
         # Django 4.2's FileSystemStorage does not support allow_overwrite.
         red_bucket.delete(bucket_path)
@@ -87,8 +95,7 @@ class UnusableRfcNumber:
 
 
 def get_unusable_rfc_numbers() -> list[UnusableRfcNumber]:
-    FILENAME = "unusable-rfc-numbers.json"
-    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    bucket_path = red_bucket_input_path("unusable-rfc-numbers.json") 
     try:
         with storages["red_bucket"].open(bucket_path) as urn_file:
             records = json.load(urn_file)
@@ -115,8 +122,7 @@ def get_unusable_rfc_numbers() -> list[UnusableRfcNumber]:
 
 
 def get_april1_rfc_numbers() -> Container[int]:
-    FILENAME = "april-first-rfc-numbers.json"
-    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    bucket_path = red_bucket_input_path("april-first-rfc-numbers.json")
     try:
         with storages["red_bucket"].open(bucket_path) as urn_file:
             records = json.load(urn_file)
@@ -139,8 +145,7 @@ def get_april1_rfc_numbers() -> Container[int]:
 
 
 def get_publication_std_levels() -> dict[int, StdLevelName]:
-    FILENAME = "publication-std-levels.json"
-    bucket_path = str(Path(getattr(settings, "RFCINDEX_INPUT_PATH", "")) / FILENAME)
+    bucket_path = red_bucket_input_path("publication-std-levels.json")
     values: dict[int, StdLevelName] = {}
     try:
         with storages["red_bucket"].open(bucket_path) as urn_file:
diff --git a/ietf/sync/tests_rfcindex.py b/ietf/sync/tests_rfcindex.py
index 1a45d5d9cf..226b41af94 100644
--- a/ietf/sync/tests_rfcindex.py
+++ b/ietf/sync/tests_rfcindex.py
@@ -28,9 +28,11 @@
     get_april1_rfc_numbers,
     get_publication_std_levels,
     get_unusable_rfc_numbers,
+    red_bucket_input_path,
+    red_bucket_output_path,
+    save_to_filesystem,
     save_to_red_bucket,
     subseries_text_line,
-    save_to_filesystem,
 )
 from ietf.utils.test_utils import TestCase
 
@@ -401,25 +403,47 @@ def test_create_fyi_txt_index(self, mock_save_blob, mock_save_file):
         )
 
 
+@override_settings(RFCINDEX_INPUT_PATH="input/", RFCINDEX_OUTPUT_PATH="output/")
 class HelperTests(TestCase):
+    INPUT_PATH = "input"
+    OUTPUT_PATH = "output"
+
     def test_format_rfc_number(self):
         self.assertEqual(format_rfc_number(10), "10")
         with override_settings(RFCINDEX_MATCH_LEGACY_XML=True):
             self.assertEqual(format_rfc_number(10), "0010")
 
+    def test_red_bucket_input_path(self):
+        with override_settings(RFCINDEX_INPUT_PATH="bar"):
+            self.assertEqual(red_bucket_input_path("foo"), "bar/foo")
+        with override_settings(RFCINDEX_INPUT_PATH="bar/"):
+            self.assertEqual(red_bucket_input_path("foo"), "bar/foo")
+
+    def test_red_bucket_output_path(self):
+        self.assertEqual(red_bucket_input_path("foo"), f"{self.INPUT_PATH}/foo")
+        with override_settings(RFCINDEX_OUTPUT_PATH="bar"):
+            self.assertEqual(red_bucket_output_path("foo"), "bar/foo")
+        with override_settings(RFCINDEX_OUTPUT_PATH="bar/"):
+            self.assertEqual(red_bucket_output_path("foo"), "bar/foo")
+
     def test_save_to_red_bucket(self):
         red_bucket = storages["red_bucket"]
         with override_settings(RFCINDEX_DELETE_THEN_WRITE=False):
             save_to_red_bucket("test", "contents \U0001f600")
         # Read as binary and explicitly decode to confirm encoding
-        with red_bucket.open("test", "rb") as f:
+        with red_bucket.open(f"{self.OUTPUT_PATH}/test", "rb") as f:
             self.assertEqual(f.read().decode("utf-8"), "contents \U0001f600")
         with override_settings(RFCINDEX_DELETE_THEN_WRITE=True):
             save_to_red_bucket("test", "new contents \U0001fae0".encode("utf-8"))
         # Read as binary and explicitly decode to confirm encoding
-        with red_bucket.open("test", "rb") as f:
+        with red_bucket.open(f"{self.OUTPUT_PATH}/test", "rb") as f:
             self.assertEqual(f.read().decode("utf-8"), "new contents \U0001fae0")
-        red_bucket.delete("test")  # clean up like a good child
+        red_bucket.delete(f"{self.OUTPUT_PATH}/test")  # clean up like a good child
+        # check that we can override the path
+        with override_settings(RFCINDEX_OUTPUT_PATH="fruit"):
+            save_to_red_bucket("test", "content")
+        self.assertTrue(red_bucket.exists("fruit/test"))
+        red_bucket.delete("fruit/test")  # clean up like a good child
 
     def test_save_to_filesystem(self):
         rfc_path = Path(settings.RFC_PATH)
@@ -445,30 +469,36 @@ def test_get_unusable_rfc_numbers_raises(self):
         with self.assertRaises(FileNotFoundError):
             get_unusable_rfc_numbers()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("unusable-rfc-numbers.json", ContentFile("not json"))
+        red_bucket.save(
+            f"{self.INPUT_PATH}/unusable-rfc-numbers.json", ContentFile("not json")
+        )
         with self.assertRaises(json.JSONDecodeError):
             get_unusable_rfc_numbers()
-        red_bucket.delete("unusable-rfc-numbers.json")
+        red_bucket.delete(f"{self.INPUT_PATH}/unusable-rfc-numbers.json")
 
     def test_get_april1_rfc_numbers_raises(self):
         """get_april1_rfc_numbers should bail on errors"""
         with self.assertRaises(FileNotFoundError):
             get_april1_rfc_numbers()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("april-first-rfc-numbers.json", ContentFile("not json"))
+        red_bucket.save(
+            f"{self.INPUT_PATH}/april-first-rfc-numbers.json", ContentFile("not json")
+        )
         with self.assertRaises(json.JSONDecodeError):
             get_april1_rfc_numbers()
-        red_bucket.delete("april-first-rfc-numbers.json")
+        red_bucket.delete(f"{self.INPUT_PATH}/april-first-rfc-numbers.json")
 
     def test_get_publication_std_levels_raises(self):
         """get_publication_std_levels should bail on errors"""
         with self.assertRaises(FileNotFoundError):
             get_publication_std_levels()
         red_bucket = storages["red_bucket"]
-        red_bucket.save("publication-std-levels.json", ContentFile("not json"))
+        red_bucket.save(
+            f"{self.INPUT_PATH}/publication-std-levels.json", ContentFile("not json")
+        )
         with self.assertRaises(json.JSONDecodeError):
             get_publication_std_levels()
-        red_bucket.delete("publication-std-levels.json")
+        red_bucket.delete(f"{self.INPUT_PATH}/publication-std-levels.json")
 
     def test_subseries_text_line(self):
         text = "foobar"
diff --git a/k8s/settings_local.py b/k8s/settings_local.py
index 20c5252ff0..5dc31bac0e 100644
--- a/k8s/settings_local.py
+++ b/k8s/settings_local.py
@@ -472,8 +472,10 @@ def _multiline_to_list(s):
     ),
 }
 RFCINDEX_DELETE_THEN_WRITE = False  # S3Storage allows file_overwrite by default
-RFCINDEX_OUTPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_OUTPUT_PATH", "other/")
-RFCINDEX_INPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_INPUT_PATH", "")
+if "DATATRACKER_RFCINDEX_OUTPUT_PATH" in os.environ:
+    RFCINDEX_OUTPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_OUTPUT_PATH")
+if "DATATRACKER_RFCINDEX_INPUT_PATH" in os.environ:
+    RFCINDEX_INPUT_PATH = os.environ.get("DATATRACKER_RFCINDEX_INPUT_PATH")
 
 # Configure the blobdb app for artifact storage
 _blobdb_replication_enabled = (

From e79b0575cd36273837a2e6f2d82847889cf34541 Mon Sep 17 00:00:00 2001
From: Robert Sparks <rjsparks@nostrum.com>
Date: Thu, 11 Jun 2026 12:27:41 -0500
Subject: [PATCH 702/707] fix: include draft revision in rfc json (#11024)

---
 ietf/doc/tests_utils_rfc_json.py | 14 ++++++++++++++
 ietf/doc/utils_rfc_json.py       |  2 +-
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/ietf/doc/tests_utils_rfc_json.py b/ietf/doc/tests_utils_rfc_json.py
index 075b50a24f..ec3cd85893 100644
--- a/ietf/doc/tests_utils_rfc_json.py
+++ b/ietf/doc/tests_utils_rfc_json.py
@@ -14,6 +14,7 @@
     RfcAuthorFactory,
     RfcFactory,
     RgRfcFactory,
+    WgDraftFactory,
     WgRfcFactory,
 )
 from ietf.doc.models import RelatedDocument
@@ -199,6 +200,19 @@ def test_errata_url_set_when_errata_exist(self):
             f"https://www.rfc-editor.org/errata/rfc{rfc.rfc_number}",
         )
 
+    def test_draft_field_includes_revision(self):
+        """draft field is '<name>-<rev>' when the RFC originated from a draft."""
+        draft = WgDraftFactory(rev="07")
+        rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
+        draft.relateddocument_set.create(relationship_id="became_rfc", target=rfc)
+        _put_pub_levels(rfc.rfc_number, "ps")
+        _put_empty_errata()
+
+        generate_rfc_json(rfc.rfc_number)
+        data = _read_json(rfc.rfc_number)
+
+        self.assertEqual(data["draft"], f"{draft.name}-07")
+
     def test_errata_url_none_when_no_errata(self):
         """errata_url is None when errata.json has no entries for the RFC."""
         rfc = PublishedRfcDocEventFactory(doc=WgRfcFactory()).doc
diff --git a/ietf/doc/utils_rfc_json.py b/ietf/doc/utils_rfc_json.py
index af916e0d7f..1f13455686 100644
--- a/ietf/doc/utils_rfc_json.py
+++ b/ietf/doc/utils_rfc_json.py
@@ -55,7 +55,7 @@ def generate_rfc_json(rfc_number: int, *, pub_levels=None) -> None:
 
     # draft name
     draft_doc = rfc.came_from_draft()
-    draft = draft_doc.name if draft_doc else None
+    draft = f"{draft_doc.name}-{draft_doc.rev}" if draft_doc else None
 
     # authors: ordered list of display strings
     authors = []

From 7666ae23c88671eb8f72b13ac72156c7046d5039 Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Thu, 11 Jun 2026 18:19:52 -0400
Subject: [PATCH 703/707] ci: fix lock-threads workflow

---
 .github/workflows/lock-threads.yml |   2 +-
 .github/workflows/tests-az.yml     | 109 -----------------------------
 2 files changed, 1 insertion(+), 110 deletions(-)
 delete mode 100644 .github/workflows/tests-az.yml

diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
index 22652dab88..ab2c1a7cf6 100644
--- a/.github/workflows/lock-threads.yml
+++ b/.github/workflows/lock-threads.yml
@@ -16,7 +16,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     steps:
-      - uses: ietf-tools/lock-threads@v3.1.1
+      - uses: dessant/lock-threads@v6
         with:
           github-token: ${{ github.token }}
           issue-inactive-days: 7
diff --git a/.github/workflows/tests-az.yml b/.github/workflows/tests-az.yml
deleted file mode 100644
index 833ca89bef..0000000000
--- a/.github/workflows/tests-az.yml
+++ /dev/null
@@ -1,109 +0,0 @@
-name: Tests (Azure Test)
-
-on:
-  workflow_dispatch:
-
-jobs:
-  main:
-    name: Run Tests on Azure temp VM
-    runs-on: ubuntu-latest
-    
-    permissions:
-      contents: read
-      
-    steps:
-    - name: Launch VM on Azure
-      id: azlaunch
-      run: |
-        echo "Authenticating to Azure..."
-        az login --service-principal -u ${{ secrets.AZ_TESTS_APP_ID }} -p ${{ secrets.AZ_TESTS_PWD }} --tenant ${{ secrets.AZ_TESTS_TENANT_ID }}
-        echo "Creating VM..."
-        vminfo=$(az vm create \
-          --resource-group ghaDatatrackerTests \
-          --name tmpGhaVM2 \
-          --image Ubuntu2204 \
-          --admin-username azureuser \
-          --generate-ssh-keys \
-          --priority Spot \
-          --size Standard_D4as_v5 \
-          --max-price -1 \
-          --os-disk-size-gb 30 \
-          --eviction-policy Delete \
-          --nic-delete-option Delete \
-          --output tsv \
-          --query "publicIpAddress")
-        echo "ipaddr=$vminfo" >> "$GITHUB_OUTPUT"
-        echo "VM Public IP: $vminfo"
-        cat ~/.ssh/id_rsa > ${{ github.workspace }}/prvkey.key
-        ssh-keyscan -t rsa $vminfo >> ~/.ssh/known_hosts
-
-    - name: Remote SSH into VM
-      uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      with:
-        host: ${{ steps.azlaunch.outputs.ipaddr }}
-        port: 22
-        username: azureuser
-        command_timeout: 60m
-        key_path: ${{ github.workspace }}/prvkey.key
-        envs: GITHUB_TOKEN
-        script_stop: true
-        script: |
-          export DEBIAN_FRONTEND=noninteractive
-          lsb_release -a
-          sudo apt-get update
-          sudo apt-get upgrade -y
-          
-          echo "Installing Docker..."
-          curl -fsSL https://get.docker.com -o get-docker.sh
-          sudo sh get-docker.sh
-          
-          echo "Starting Containers..."
-          sudo docker network create dtnet
-          sudo docker run -d --name db --network=dtnet ghcr.io/ietf-tools/datatracker-db:latest &
-          sudo docker run -d --name app --network=dtnet ghcr.io/ietf-tools/datatracker-app-base:latest sleep infinity &
-          wait
-
-          echo "Cloning datatracker repo..."
-          sudo docker exec app git clone --depth=1 https://github.com/ietf-tools/datatracker.git .
-          echo "Prepare tests..."
-          sudo docker exec app chmod +x ./dev/tests/prepare.sh
-          sudo docker exec app sh ./dev/tests/prepare.sh
-          echo "Running checks..."
-          sudo docker exec app ietf/manage.py check
-          sudo docker exec app ietf/manage.py migrate --fake-initial
-          echo "Running tests..."
-          sudo docker exec app ietf/manage.py test -v2 --validate-html-harder --settings=settings_test
-
-    - name: Destroy VM + resources
-      if: always()
-      shell: pwsh
-      run: |
-        echo "Destroying VM..."        
-        az vm delete -g ghaDatatrackerTests -n tmpGhaVM2 --yes --force-deletion true
-
-        $resourceOrderRemovalOrder = [ordered]@{
-            "Microsoft.Compute/virtualMachines" = 0
-            "Microsoft.Compute/disks" = 1
-            "Microsoft.Network/networkInterfaces" = 2
-            "Microsoft.Network/publicIpAddresses" = 3
-            "Microsoft.Network/networkSecurityGroups" = 4
-            "Microsoft.Network/virtualNetworks" = 5
-        }
-        echo "Fetching remaining resources..."
-        $resources = az resource list --resource-group ghaDatatrackerTests | ConvertFrom-Json
-
-        $orderedResources = $resources 
-            | Sort-Object @{
-                Expression = {$resourceOrderRemovalOrder[$_.type]}
-                Descending = $False
-            }
-
-        echo "Deleting remaining resources..."
-        $orderedResources | ForEach-Object {
-            az resource delete --resource-group ghaDatatrackerTests --ids $_.id --verbose
-        }
-
-        echo "Logout from Azure..."
-        az logout

From 65e7d51cd4ada4c6c817b9348f5671f45633f899 Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Thu, 11 Jun 2026 18:22:12 -0400
Subject: [PATCH 704/707] ci: fix lock-threads workflow

---
 .github/workflows/lock-threads.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml
index ab2c1a7cf6..b90300c09b 100644
--- a/.github/workflows/lock-threads.yml
+++ b/.github/workflows/lock-threads.yml
@@ -19,6 +19,7 @@ jobs:
       - uses: dessant/lock-threads@v6
         with:
           github-token: ${{ github.token }}
+          process-only: 'issues, prs'
           issue-inactive-days: 7
           pr-inactive-days: 3
           log-output: true

From ecebc399dda88494a04ccb59fd8ec24fa4473a4d Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Thu, 11 Jun 2026 22:23:03 -0400
Subject: [PATCH 705/707] ci: refactor build + deploy workflows

---
 .github/workflows/build.yml                   | 349 +++---------------
 .github/workflows/ci-run-tests.yml            |   2 +-
 .github/workflows/release.yml                 | 209 +++++++++++
 .github/workflows/reusable-build.yml          | 226 ++++++++++++
 .../{tests.yml => reusable-tests.yml}         |   0
 5 files changed, 489 insertions(+), 297 deletions(-)
 create mode 100644 .github/workflows/release.yml
 create mode 100644 .github/workflows/reusable-build.yml
 rename .github/workflows/{tests.yml => reusable-tests.yml} (100%)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a89bac46e7..2c449b53ce 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,10 +1,7 @@
-name: Build and Release
-run-name: ${{ github.ref_name == 'release' && '[Prod]' || '[Dev]' }} Build ${{ github.run_number }} of branch ${{ github.ref_name }} by @${{ github.actor }}
+name: Build Dev and Deploy
+run-name: Dev Build ${{ github.run_number }} of branch ${{ github.ref_name }} by @${{ github.actor }}
 
 on:
-  push:
-    branches: [release]
-    
   workflow_dispatch:
     inputs:
       deploy:
@@ -14,24 +11,28 @@ on:
         type: choice
         options:
           - Skip
-          - Staging Only
-          - Staging + Prod
-      dev:
-        description: 'Deploy to Dev'
-        default: true
+          - Dev
+          - Staging
+      deployStrategy:
+        description: 'Deploy Strategy'
+        default: 'Recreate'
         required: true
-        type: boolean
+        type: choice
+        options:
+          - Recreate
+          - RollingUpdate
+          - Current
       devNoDbRefresh:
         description: 'Dev Disable Daily DB Refresh'
         default: false
         required: true
         type: boolean
-      skiptests:
+      skipTests:
         description: 'Skip Tests'
         default: false
         required: true
         type: boolean
-      skiparm:
+      skipArmBuild:
         description: 'Skip ARM64 Build'
         default: false
         required: true
@@ -56,14 +57,12 @@ jobs:
   # PREPARE
   # -----------------------------------------------------------------
   prepare:
-    name: Prepare Release
+    name: Prepare
     runs-on: ubuntu-latest
     outputs:
-      should_deploy: ${{ steps.buildvars.outputs.should_deploy }}
-      pkg_version: ${{ steps.buildvars.outputs.pkg_version }}
-      from_tag: ${{ steps.semver.outputs.nextStrict }}
-      to_tag: ${{ steps.semver.outputs.current }}
-      base_image_version: ${{ steps.baseimgversion.outputs.base_image_version }}
+      buildVersion: ${{ steps.buildvars.outputs.buildVersion }}
+      previousVersion: ${{ steps.semver.outputs.current }}
+      baseImageVersion: ${{ steps.baseimgversion.outputs.baseImageVersion }}
 
     steps:   
     - uses: actions/checkout@v6
@@ -71,19 +70,8 @@ jobs:
         fetch-depth: 1
         fetch-tags: false
 
-    - name: Get Next Version (Prod)
-      if: ${{ github.ref_name == 'release' }}
-      id: semver
-      uses: ietf-tools/semver-action@v1
-      with:
-        token: ${{ github.token }}
-        branch: release
-        skipInvalidTags: true
-        patchList: fix, bugfix, perf, refactor, test, tests, chore
-
     - name: Get Dev Version
-      if: ${{ github.ref_name != 'release' }}
-      id: semverdev
+      id: semver
       uses: ietf-tools/semver-action@v1
       with:
         token: ${{ github.token }}
@@ -91,260 +79,53 @@ jobs:
         skipInvalidTags: true
         noVersionBumpBehavior: 'current'
         noNewCommitBehavior: 'current'
-      
-    - name: Set Release Flag
-      if: ${{ github.ref_name == 'release' }}
-      run: |
-        echo "IS_RELEASE=true" >> $GITHUB_ENV
-        
-    - name: Create Draft Release
-      uses: ncipollo/release-action@v1.21.0
-      if: ${{ github.ref_name == 'release' }}
-      with:
-        prerelease: true
-        draft: false
-        commit: ${{ github.sha }}
-        tag: ${{ steps.semver.outputs.nextStrict }}
-        name: ${{ steps.semver.outputs.nextStrict }}
-        body: '*pending*'
-        token: ${{ secrets.GITHUB_TOKEN }}
     
     - name: Set Build Variables
       id: buildvars
       run: |
-        if [[ $IS_RELEASE ]]; then
-          echo "Using AUTO SEMVER mode: ${{ steps.semver.outputs.nextStrict }}"
-          echo "should_deploy=true" >> $GITHUB_OUTPUT
-          echo "pkg_version=${{ steps.semver.outputs.nextStrict }}" >> $GITHUB_OUTPUT
-          echo "::notice::Release ${{ steps.semver.outputs.nextStrict }} created using branch $GITHUB_REF_NAME"
-        else
-          echo "Using TEST mode: ${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER"
-          echo "should_deploy=false" >> $GITHUB_OUTPUT
-          echo "pkg_version=${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER" >> $GITHUB_OUTPUT
-          echo "::notice::Non-production build ${{ steps.semverdev.outputs.nextMajorStrict }}.0.0-dev.$GITHUB_RUN_NUMBER created using branch $GITHUB_REF_NAME"
-        fi
+        SHORT_SHA="${GITHUB_SHA:0:7}"
+        echo "Will set build version to: ${{ steps.semver.outputs.nextMajorStrict }}.0.0-dev.$SHORT_SHA"
+        echo "buildVersion=${{ steps.semver.outputs.nextMajorStrict }}.0.0-dev.$SHORT_SHA" >> $GITHUB_OUTPUT
+        echo "::notice::Non-production build ${{ steps.semver.outputs.nextMajorStrict }}.0.0-dev.$SHORT_SHA created using branch $GITHUB_REF_NAME"
 
     - name: Get Base Image Target Version
       id: baseimgversion
       run: |
-        echo "base_image_version=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
+        echo "baseImageVersion=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
 
   # -----------------------------------------------------------------
   # TESTS
   # -----------------------------------------------------------------
-  
   tests:
     name: Run Tests
-    uses: ./.github/workflows/tests.yml
-    if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
+    uses: ./.github/workflows/reusable-tests.yml
+    if: ${{ inputs.skipTests == 'false' }}
     needs: [prepare]
     secrets: inherit
     with:
-      ignoreLowerCoverage: ${{ github.event.inputs.ignoreLowerCoverage == 'true' }}
+      ignoreLowerCoverage: ${{ inputs.ignoreLowerCoverage == 'true' }}
       skipSelenium: true
-      targetBaseVersion: ${{ needs.prepare.outputs.base_image_version }}
+      targetBaseVersion: ${{ needs.prepare.outputs.baseImageVersion }}
 
   # -----------------------------------------------------------------
-  # RELEASE
+  # BUILD IMAGE
   # -----------------------------------------------------------------
-  release:
-    name: Make Release
+  build:
+    name: Build Image
+    uses: ./.github/workflows/reusable-build.yml
     if: ${{ !failure() && !cancelled() }}
     needs: [tests, prepare]
-    runs-on:
-      group: hperf-8c32r
     permissions:
       contents: write
       packages: write
-    env:
-      SHOULD_DEPLOY: ${{needs.prepare.outputs.should_deploy}}
-      PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
-      FROM_TAG: ${{needs.prepare.outputs.from_tag}}
-      TO_TAG: ${{needs.prepare.outputs.to_tag}}
-      TARGET_BASE: ${{needs.prepare.outputs.base_image_version}}
-
-    steps:
-    - uses: actions/checkout@v6
-      with:
-        fetch-depth: 1
-        fetch-tags: false
-
-    - name: Setup Node.js environment
-      uses: actions/setup-node@v6
-      with:
-        node-version: 18.x
-
-    - name: Setup Python
-      uses: actions/setup-python@v6
-      with:
-        python-version: "3.x"
-
-    - name: Setup AWS CLI
-      uses: unfor19/install-aws-cli-action@v1
-      with:
-        version: 2.22.35
-
-    - name: Download a Coverage Results
-      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v8.0.1
-      with:
-        name: coverage
-
-    - name: Make Release Build
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        BROWSERSLIST_IGNORE_OLD_DATA: 1
-      run: |
-        echo "PKG_VERSION: $PKG_VERSION"
-        echo "GITHUB_SHA: $GITHUB_SHA"
-        echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
-        echo "Running frontend build script..."
-        echo "Compiling native node packages..."
-        yarn rebuild
-        echo "Packaging static assets..."
-        yarn build --base=https://static.ietf.org/dt/$PKG_VERSION/
-        yarn legacy:build
-        echo "Setting version $PKG_VERSION..."
-        sed -i -r -e "s|^__version__ += '.*'$|__version__ = '$PKG_VERSION'|" ietf/__init__.py
-        sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
-        sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
-
-    - name: Set Production Flags
-      if: ${{ env.SHOULD_DEPLOY == 'true' }}
-      run: |
-        echo "Setting production flags in settings.py..."
-        sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
-        
-    - name: Make Release Tarball
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        echo "Build release tarball..."
-        mkdir -p /home/runner/work/release
-        tar -czf /home/runner/work/release/release.tar.gz -X dev/build/exclude-patterns.txt .
-
-    - name: Collect + Push Statics
-      env:
-        DEBIAN_FRONTEND: noninteractive
-        AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
-        AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
-        AWS_DEFAULT_REGION: auto
-        AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
-      run: |
-        echo "Collecting statics..."
-        echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }}"
-        docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ env.TARGET_BASE }} sh dev/build/collectstatics.sh
-        echo "Pushing statics..."
-        cd static
-        aws s3 sync . s3://static/dt/$PKG_VERSION --only-show-errors
-
-    - name: Augment dockerignore for docker image build
-      env:
-        DEBIAN_FRONTEND: noninteractive
-      run: |
-        cat >> .dockerignore <<EOL
-        .devcontainer
-        .github
-        .vscode
-        k8s
-        playwright
-        svn-history
-        docker-compose.yml
-        EOL
-
-    - name: Setup Docker Buildx
-      uses: docker/setup-buildx-action@v4
-
-    - name: Login to GitHub Container Registry
-      uses: docker/login-action@v4
-      with:
-        registry: ghcr.io
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Add feature-latest tag
-      if: ${{ startsWith(github.ref_name, 'feat/') }}
-      run: echo "FEATURE_LATEST_TAG=$(echo $GITHUB_REF_NAME | tr / -)" >> $GITHUB_ENV
-
-    - name: Build Images
-      uses: docker/build-push-action@v7
-      env:
-        DOCKER_BUILD_SUMMARY: false
-      with:
-        context: .
-        file: dev/build/Dockerfile
-        platforms: ${{ github.event.inputs.skiparm == 'true' && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
-        push: true
-        tags: |
-          ghcr.io/ietf-tools/datatracker:${{ env.PKG_VERSION }}
-          ${{ env.FEATURE_LATEST_TAG && format('ghcr.io/ietf-tools/datatracker:{0}-latest', env.FEATURE_LATEST_TAG) || null }}
-
-    - name: Update CHANGELOG
-      id: changelog
-      uses: Requarks/changelog-action@v1
-      if: ${{ env.SHOULD_DEPLOY == 'true' }}
-      with:
-        token: ${{ github.token }}
-        fromTag: ${{ env.FROM_TAG }}
-        toTag: ${{ env.TO_TAG }}
-        writeToFile: false
-
-    - name: Download Coverage Results
-      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      uses: actions/download-artifact@v8.0.1
-      with:
-        name: coverage
-
-    - name: Prepare Coverage Action
-      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      working-directory: ./dev/coverage-action
-      run: npm install
-        
-    - name: Process Coverage Stats + Chart
-      id: covprocess
-      uses: ./dev/coverage-action/
-      if: ${{ github.event.inputs.skiptests == 'false' || github.ref_name == 'release' }}
-      with:
-        token: ${{ github.token }}
-        tokenCommon: ${{ secrets.GH_COMMON_TOKEN }}
-        repoCommon: common
-        version: ${{needs.prepare.outputs.pkg_version}}
-        changelog: ${{ steps.changelog.outputs.changes }}
-        summary: ''
-        coverageResultsPath: coverage.json
-        histCoveragePath: historical-coverage.json
-        
-    - name: Create Release
-      uses: ncipollo/release-action@v1.21.0
-      if: ${{ env.SHOULD_DEPLOY == 'true' }}
-      with:
-        allowUpdates: true
-        makeLatest: true
-        draft: false
-        tag: ${{ env.PKG_VERSION }}
-        name: ${{ env.PKG_VERSION }}
-        body: ${{ steps.covprocess.outputs.changelog }}
-        artifacts: "/home/runner/work/release/release.tar.gz,coverage.json,historical-coverage.json"
-        token: ${{ secrets.GITHUB_TOKEN }}
-
-    - name: Update Baseline Coverage
-      uses: ncipollo/release-action@v1.21.0
-      if: ${{ github.event.inputs.updateCoverage == 'true' || github.ref_name == 'release' }}
-      with:
-        allowUpdates: true
-        tag: baseline
-        omitBodyDuringUpdate: true
-        omitNameDuringUpdate: true
-        omitPrereleaseDuringUpdate: true
-        replacesArtifacts: true
-        artifacts: "coverage.json"
-        token: ${{ secrets.GITHUB_TOKEN }}
-        
-    - name: Upload Build Artifacts
-      uses: actions/upload-artifact@v7
-      with:
-        name: release-${{ env.PKG_VERSION }}
-        path: /home/runner/work/release/release.tar.gz
+    with:
+      buildVersion: ${{ needs.prepare.outputs.buildVersion }}
+      isReleaseBuild: false
+      previousVersion: ${{ needs.prepare.outputs.previousVersion }}
+      handleCoverageResults: ${{ inputs.skipTests == 'false' }}
+      updateCoverageBaseline: ${{ inputs.updateCoverage }}
+      baseImageVersion: ${{ needs.prepare.outputs.baseImageVersion }}
+      skipArmBuild: ${{ inputs.skipArmBuild }}
         
   # -----------------------------------------------------------------
   # NOTIFY
@@ -352,10 +133,10 @@ jobs:
   notify:
     name: Notify
     if: ${{ always() }}
-    needs: [prepare, tests, release]
+    needs: [prepare, tests, build]
     runs-on: ubuntu-latest
     env:
-      PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
+      BUILD_VERSION: ${{ needs.prepare.outputs.buildVersion }}
         
     steps:      
     - name: Notify on Slack (Success)
@@ -366,7 +147,7 @@ jobs:
         method: chat.postMessage
         payload: |
           channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
-          text: "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }}"
+          text: "Datatracker Dev Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.BUILD_VERSION }}> by ${{ github.triggering_actor }}"
           attachments:
             - color: "28a745"
               fields:
@@ -381,26 +162,26 @@ jobs:
         method: chat.postMessage
         payload: |
           channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
-          text: "Datatracker Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.PKG_VERSION }}> by ${{ github.triggering_actor }}"
+          text: "Datatracker Dev Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.BUILD_VERSION }}> by ${{ github.triggering_actor }}"
           attachments:
             - color: "a82929"
               fields:
                 - title: "Status"
                   short: true
-                  value: "Failed"
+                  value: "Failed 😱"
         
   # -----------------------------------------------------------------
   # DEV
   # -----------------------------------------------------------------
   dev:
     name: Deploy to Dev
-    if: ${{ !failure() && !cancelled() && github.event.inputs.dev == 'true' }}
-    needs: [prepare, release]
+    if: ${{ !failure() && !cancelled() && inputs.deploy == 'Dev' }}
+    needs: [prepare, build]
     runs-on: ubuntu-latest
     environment:
       name: dev
     env:
-      PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
+      BUILD_VERSION: ${{ needs.prepare.outputs.buildVersion }}
       
     steps:
       - uses: actions/checkout@v6
@@ -424,7 +205,7 @@ jobs:
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }} }'
+          inputs: '{ "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }}, "deployStrategy":"${{ inputs.deployStrategy }}" }'
           waitForCompletionTimeout: 60m
 
   # -----------------------------------------------------------------
@@ -432,13 +213,13 @@ jobs:
   # -----------------------------------------------------------------
   staging:
     name: Deploy to Staging
-    if: ${{ !failure() && !cancelled() && (github.event.inputs.deploy == 'Staging Only' || github.event.inputs.deploy == 'Staging + Prod' || github.ref_name == 'release') }}
-    needs: [prepare, release]
+    if: ${{ !failure() && !cancelled() && inputs.deploy == 'Staging' }}
+    needs: [prepare, build]
     runs-on: ubuntu-latest
     environment:
       name: staging
     env:
-      PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
+      BUILD_VERSION: ${{ needs.prepare.outputs.buildVersion }}
       
     steps:
       - name: Refresh Staging DB
@@ -458,29 +239,5 @@ jobs:
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
-          waitForCompletionTimeout: 30m
-
-  # -----------------------------------------------------------------
-  # PROD
-  # -----------------------------------------------------------------
-  prod:
-    name: Deploy to Production
-    if: ${{ !failure() && !cancelled() && (github.event.inputs.deploy == 'Staging + Prod' || github.ref_name == 'release') }}
-    needs: [prepare, staging]
-    runs-on: ubuntu-latest
-    environment:
-      name: production
-    env:
-      PKG_VERSION: ${{needs.prepare.outputs.pkg_version}}
-
-    steps:
-      - name: Deploy to production
-        uses: ietf-tools/workflow-dispatch-action@v1
-        with:
-          workflow: deploy.yml
-          repo: ietf-tools/infra-k8s
-          ref: main
-          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.PKG_VERSION }}", "remoteRef":"${{ github.sha }}" }'
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "deployStrategy":"${{ inputs.deployStrategy }}" }'
           waitForCompletionTimeout: 30m
diff --git a/.github/workflows/ci-run-tests.yml b/.github/workflows/ci-run-tests.yml
index 5349f1ac7a..4d4e034ed6 100644
--- a/.github/workflows/ci-run-tests.yml
+++ b/.github/workflows/ci-run-tests.yml
@@ -38,7 +38,7 @@ jobs:
   # -----------------------------------------------------------------
   tests:
     name: Run Tests
-    uses: ./.github/workflows/tests.yml
+    uses: ./.github/workflows/reusable-tests.yml
     needs: [prepare]
     with:
       ignoreLowerCoverage: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000000..437ed1baac
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,209 @@
+name: Make Release and Deploy
+run-name: RELEASE ${{ github.run_number }} by @${{ github.actor }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      deployStrategy:
+        description: 'Deploy Strategy'
+        default: 'Recreate'
+        required: true
+        type: choice
+        options:
+          - Recreate
+          - RollingUpdate
+          - Current
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: true
+
+jobs:
+  # -----------------------------------------------------------------
+  # PREPARE
+  # -----------------------------------------------------------------
+  prepare:
+    name: Prepare Release
+    runs-on: ubuntu-latest
+    outputs:
+      buildVersion: ${{ steps.buildvars.outputs.buildVersion }}
+      previousVersion: ${{ steps.semver.outputs.current }}
+      baseImageVersion: ${{ steps.baseimgversion.outputs.baseImageVersion }}
+
+    steps:
+      - name: Ensure release branch
+        if: github.ref != 'refs/heads/release'
+        run: |
+          echo "This workflow can only run on the 'release' branch (current: ${{ github.ref_name }})"
+          exit 1
+
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+          fetch-tags: false
+
+      - name: Get Next Version
+        id: semver
+        uses: ietf-tools/semver-action@v1
+        with:
+          token: ${{ github.token }}
+          branch: release
+          skipInvalidTags: true
+          patchList: fix, bugfix, perf, refactor, test, tests, chore
+          
+      - name: Create Draft Release
+        uses: ncipollo/release-action@v1.21.0
+        with:
+          prerelease: true
+          draft: false
+          commit: ${{ github.sha }}
+          tag: ${{ steps.semver.outputs.nextStrict }}
+          name: ${{ steps.semver.outputs.nextStrict }}
+          body: '*pending*'
+          token: ${{ secrets.GITHUB_TOKEN }}
+      
+      - name: Set Build Variables
+        id: buildvars
+        run: |
+          echo "Will set build version to: ${{ steps.semver.outputs.nextStrict }}"
+          echo "buildVersion=${{ steps.semver.outputs.nextStrict }}" >> $GITHUB_OUTPUT
+          echo "::notice::Release ${{ steps.semver.outputs.nextStrict }} created using branch $GITHUB_REF_NAME"
+
+      - name: Get Base Image Target Version
+        id: baseimgversion
+        run: |
+          echo "baseImageVersion=$(sed -n '1p' dev/build/TARGET_BASE)" >> $GITHUB_OUTPUT
+
+  # -----------------------------------------------------------------
+  # TESTS
+  # -----------------------------------------------------------------
+  tests:
+    name: Run Tests
+    uses: ./.github/workflows/reusable-tests.yml
+    needs: [prepare]
+    secrets: inherit
+    with:
+      ignoreLowerCoverage: false
+      skipSelenium: true
+      targetBaseVersion: ${{ needs.prepare.outputs.baseImageVersion }}
+
+  # -----------------------------------------------------------------
+  # BUILD RELEASE
+  # -----------------------------------------------------------------
+  build:
+    name: Build Release Image
+    uses: ./.github/workflows/reusable-build.yml
+    if: ${{ !failure() && !cancelled() }}
+    needs: [tests, prepare]
+    permissions:
+      contents: write
+      packages: write
+    secrets: inherit
+    with:
+      buildVersion: ${{needs.prepare.outputs.buildVersion}}
+      isReleaseBuild: true
+      previousVersion: ${{needs.prepare.outputs.previousVersion}}
+      handleCoverageResults: true
+      updateCoverageBaseline: true
+      baseImageVersion: ${{ needs.prepare.outputs.baseImageVersion }}
+
+  # -----------------------------------------------------------------
+  # NOTIFY
+  # -----------------------------------------------------------------
+  notify:
+    name: Notify
+    if: ${{ always() }}
+    needs: [prepare, tests, build]
+    runs-on: ubuntu-latest
+    env:
+      BUILD_VERSION: ${{needs.prepare.outputs.buildVersion}}
+        
+    steps:      
+    - name: Notify on Slack (Success)
+      if: ${{ !contains(join(needs.*.result, ','), 'failure') }}
+      uses: slackapi/slack-github-action@v3
+      with:
+        token: ${{ secrets.SLACK_GH_BOT }}
+        method: chat.postMessage
+        payload: |
+          channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+          text: "Datatracker Release Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.BUILD_VERSION }}> by ${{ github.triggering_actor }}"
+          attachments:
+            - color: "28a745"
+              fields:
+                - title: "Status"
+                  short: true
+                  value: "Completed"
+    - name: Notify on Slack (Failure)
+      if: ${{ contains(join(needs.*.result, ','), 'failure') }}
+      uses: slackapi/slack-github-action@v3
+      with:
+        token: ${{ secrets.SLACK_GH_BOT }}
+        method: chat.postMessage
+        payload: |
+          channel: ${{ secrets.SLACK_GH_BUILDS_CHANNEL_ID }}
+          text: "Datatracker Release Build <https://github.com/ietf-tools/datatracker/actions/runs/${{ github.run_id }}|${{ env.BUILD_VERSION }}> by ${{ github.triggering_actor }}"
+          attachments:
+            - color: "a82929"
+              fields:
+                - title: "Status"
+                  short: true
+                  value: "Failed 😱"
+
+  # -----------------------------------------------------------------
+  # STAGING
+  # -----------------------------------------------------------------
+  staging:
+    name: Deploy to Staging
+    if: ${{ !failure() && !cancelled() }}
+    needs: [prepare, build]
+    runs-on: ubuntu-latest
+    environment:
+      name: staging
+    env:
+      BUILD_VERSION: ${{needs.prepare.outputs.buildVersion}}
+      
+    steps:
+      - name: Refresh Staging DB
+        uses: ietf-tools/workflow-dispatch-action@v1
+        with:
+          workflow: deploy-db.yml
+          repo: ietf-tools/infra-k8s
+          ref: main
+          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "manifest":"postgres", "forceRecreate":true, "restoreToLastFullSnapshot":true, "waitClusterReady":true }'
+          waitForCompletionTimeout: 120m
+
+      - name: Deploy to staging
+        uses: ietf-tools/workflow-dispatch-action@v1
+        with:
+          workflow: deploy.yml
+          repo: ietf-tools/infra-k8s
+          ref: main
+          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "deployStrategy":"${{ inputs.deployStrategy }}" }'
+          waitForCompletionTimeout: 30m
+
+  # -----------------------------------------------------------------
+  # PROD
+  # -----------------------------------------------------------------
+  prod:
+    name: Deploy to Production
+    if: ${{ !failure() && !cancelled() }}
+    needs: [prepare, staging]
+    runs-on: ubuntu-latest
+    environment:
+      name: production
+    env:
+      BUILD_VERSION: ${{needs.prepare.outputs.buildVersion}}
+
+    steps:
+      - name: Deploy to production
+        uses: ietf-tools/workflow-dispatch-action@v1
+        with:
+          workflow: deploy.yml
+          repo: ietf-tools/infra-k8s
+          ref: main
+          token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
+          inputs: '{ "environment":"${{ secrets.GHA_K8S_CLUSTER }}", "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "deployStrategy":"${{ inputs.deployStrategy }}" }'
+          waitForCompletionTimeout: 30m
diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml
new file mode 100644
index 0000000000..93867d3400
--- /dev/null
+++ b/.github/workflows/reusable-build.yml
@@ -0,0 +1,226 @@
+name: Reusable Build Workflow
+
+on:
+  workflow_call:
+    inputs:
+      buildVersion:
+        required: true
+        type: string
+      isReleaseBuild:
+        default: false
+        required: false
+        type: boolean
+      previousVersion:
+        required: false
+        type: string
+      handleCoverageResults:
+        default: true
+        required: false
+        type: boolean
+      updateCoverageBaseline:
+        default: false
+        required: false
+        type: boolean
+      baseImageVersion:
+        default: latest
+        required: false
+        type: string
+      skipArmBuild:
+        default: false
+        required: false
+        type: boolean
+
+jobs:
+  # -----------------------------------------------------------------
+  # BUILD IMAGE
+  # -----------------------------------------------------------------
+  build:
+    name: Build Image
+    runs-on:
+      group: hperf-8c32r
+    permissions:
+      contents: write
+      packages: write
+
+    steps:
+    - uses: actions/checkout@v6
+      with:
+        fetch-depth: 1
+        fetch-tags: false
+
+    - name: Setup Node.js environment
+      uses: actions/setup-node@v6
+      with:
+        node-version: 18.x
+
+    - name: Setup Python
+      uses: actions/setup-python@v6
+      with:
+        python-version: "3.x"
+
+    - name: Setup AWS CLI
+      uses: unfor19/install-aws-cli-action@v1
+      with:
+        version: 2.22.35
+
+    - name: Download a Coverage Results
+      if: ${{ inputs.handleCoverageResults }}
+      uses: actions/download-artifact@v8.0.1
+      with:
+        name: coverage
+
+    - name: Make Build
+      env:
+        DEBIAN_FRONTEND: noninteractive
+        BROWSERSLIST_IGNORE_OLD_DATA: 1
+      run: |
+        echo "BUILD_VERSION: ${{ inputs.buildVersion }}"
+        echo "GITHUB_SHA: $GITHUB_SHA"
+        echo "GITHUB_REF_NAME: $GITHUB_REF_NAME"
+        echo "Running frontend build script..."
+        echo "Compiling native node packages..."
+        yarn rebuild
+        echo "Packaging static assets..."
+        yarn build --base=https://static.ietf.org/dt/${{ inputs.buildVersion }}/
+        yarn legacy:build
+        echo "Setting version ${{ inputs.buildVersion }}..."
+        sed -i -r -e "s|^__version__ += '.*'$|__version__ = '${{ inputs.buildVersion }}'|" ietf/__init__.py
+        sed -i -r -e "s|^__release_hash__ += '.*'$|__release_hash__ = '$GITHUB_SHA'|" ietf/__init__.py
+        sed -i -r -e "s|^__release_branch__ += '.*'$|__release_branch__ = '$GITHUB_REF_NAME'|" ietf/__init__.py
+
+    - name: Set Production Flags
+      if: ${{ inputs.isReleaseBuild }}
+      run: |
+        echo "Setting production flags in settings.py..."
+        sed -i -r -e 's/^DEBUG *= *.*$/DEBUG = False/' -e "s/^SERVER_MODE *= *.*\$/SERVER_MODE = 'production'/" ietf/settings.py
+        
+    - name: Make Tarball
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      run: |
+        echo "Build release tarball..."
+        mkdir -p /home/runner/work/release
+        tar -czf /home/runner/work/release/release.tar.gz -X dev/build/exclude-patterns.txt .
+
+    - name: Collect + Push Statics
+      env:
+        DEBIAN_FRONTEND: noninteractive
+        AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_STATIC_KEY_ID }}
+        AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_STATIC_KEY_SECRET }}
+        AWS_DEFAULT_REGION: auto
+        AWS_ENDPOINT_URL: ${{ secrets.CF_R2_ENDPOINT }}
+      run: |
+        echo "Collecting statics..."
+        echo "Using ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.baseImageVersion }}"
+        docker run --rm --name collectstatics -v $(pwd):/workspace ghcr.io/ietf-tools/datatracker-app-base:${{ inputs.baseImageVersion }} sh dev/build/collectstatics.sh
+        echo "Pushing statics..."
+        cd static
+        aws s3 sync . s3://static/dt/${{ inputs.buildVersion }} --only-show-errors
+
+    - name: Augment dockerignore for docker image build
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      run: |
+        cat >> .dockerignore <<EOL
+        .devcontainer
+        .github
+        .vscode
+        k8s
+        playwright
+        svn-history
+        docker-compose.yml
+        EOL
+
+    - name: Setup Docker Buildx
+      uses: docker/setup-buildx-action@v4
+
+    - name: Login to GitHub Container Registry
+      uses: docker/login-action@v4
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Add feature-latest tag
+      if: ${{ startsWith(github.ref_name, 'feat/') }}
+      run: echo "FEATURE_LATEST_TAG=$(echo $GITHUB_REF_NAME | tr / -)" >> $GITHUB_ENV
+
+    - name: Build Images
+      uses: docker/build-push-action@v7
+      env:
+        DOCKER_BUILD_SUMMARY: false
+      with:
+        context: .
+        file: dev/build/Dockerfile
+        platforms: ${{ inputs.skipArmBuild && 'linux/amd64' || 'linux/amd64,linux/arm64' }}
+        push: true
+        tags: |
+          ghcr.io/ietf-tools/datatracker:${{ inputs.buildVersion }}
+          ${{ env.FEATURE_LATEST_TAG && format('ghcr.io/ietf-tools/datatracker:{0}-latest', env.FEATURE_LATEST_TAG) || null }}
+
+    - name: Update CHANGELOG
+      id: changelog
+      uses: Requarks/changelog-action@v1
+      if: ${{ inputs.isReleaseBuild }}
+      with:
+        token: ${{ github.token }}
+        fromTag: ${{ inputs.buildVersion }}
+        toTag: ${{ inputs.previousVersion }}
+        writeToFile: false
+
+    - name: Download Coverage Results
+      if: ${{ inputs.handleCoverageResults }}
+      uses: actions/download-artifact@v8.0.1
+      with:
+        name: coverage
+
+    - name: Prepare Coverage Action
+      if: ${{ inputs.handleCoverageResults }}
+      working-directory: ./dev/coverage-action
+      run: npm install
+        
+    - name: Process Coverage Stats + Chart
+      id: covprocess
+      uses: ./dev/coverage-action/
+      if: ${{ inputs.handleCoverageResults }}
+      with:
+        token: ${{ github.token }}
+        tokenCommon: ${{ secrets.GH_COMMON_TOKEN }}
+        repoCommon: common
+        version: ${{ inputs.buildVersion }}
+        changelog: ${{ steps.changelog.outputs.changes }}
+        summary: ''
+        coverageResultsPath: coverage.json
+        histCoveragePath: historical-coverage.json
+        
+    - name: Create Release
+      uses: ncipollo/release-action@v1.21.0
+      if: ${{ inputs.isReleaseBuild }}
+      with:
+        allowUpdates: true
+        makeLatest: true
+        draft: false
+        tag: ${{ inputs.buildVersion }}
+        name: ${{ inputs.buildVersion }}
+        body: ${{ steps.covprocess.outputs.changelog }}
+        artifacts: "/home/runner/work/release/release.tar.gz,coverage.json,historical-coverage.json"
+        token: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Update Baseline Coverage
+      uses: ncipollo/release-action@v1.21.0
+      if: ${{ inputs.updateCoverageBaseline }}
+      with:
+        allowUpdates: true
+        tag: baseline
+        omitBodyDuringUpdate: true
+        omitNameDuringUpdate: true
+        omitPrereleaseDuringUpdate: true
+        replacesArtifacts: true
+        artifacts: "coverage.json"
+        token: ${{ secrets.GITHUB_TOKEN }}
+        
+    - name: Upload Build Artifacts
+      uses: actions/upload-artifact@v7
+      with:
+        name: release-${{ inputs.buildVersion }}
+        path: /home/runner/work/release/release.tar.gz
diff --git a/.github/workflows/tests.yml b/.github/workflows/reusable-tests.yml
similarity index 100%
rename from .github/workflows/tests.yml
rename to .github/workflows/reusable-tests.yml

From 5dd0fc6ecbc2d9337ebd7e8cf5957dd8a0907b90 Mon Sep 17 00:00:00 2001
From: NGPixel <github@ngpixel.com>
Date: Thu, 11 Jun 2026 22:33:52 -0400
Subject: [PATCH 706/707] ci: fix build workflow

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2c449b53ce..4b2bd03f68 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -118,6 +118,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+    secrets: inherit
     with:
       buildVersion: ${{ needs.prepare.outputs.buildVersion }}
       isReleaseBuild: false

From 70ed39f7c00f58f67d69243cbd16280eeca0cf06 Mon Sep 17 00:00:00 2001
From: Nicolas Giard <github@ngpixel.com>
Date: Fri, 12 Jun 2026 17:03:45 -0400
Subject: [PATCH 707/707] ci: fix build workflow

---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4b2bd03f68..bfc77b2910 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,7 +14,7 @@ on:
           - Dev
           - Staging
       deployStrategy:
-        description: 'Deploy Strategy'
+        description: 'Deploy Strategy (Staging Only)'
         default: 'Recreate'
         required: true
         type: choice
@@ -23,7 +23,7 @@ on:
           - RollingUpdate
           - Current
       devNoDbRefresh:
-        description: 'Dev Disable Daily DB Refresh'
+        description: 'Disable Daily DB Refresh (Dev Only)'
         default: false
         required: true
         type: boolean
@@ -206,7 +206,7 @@ jobs:
           repo: ietf-tools/infra-k8s
           ref: main
           token: ${{ secrets.GH_INFRA_K8S_TOKEN }}
-          inputs: '{ "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }}, "deployStrategy":"${{ inputs.deployStrategy }}" }'
+          inputs: '{ "app":"datatracker", "appVersion":"${{ env.BUILD_VERSION }}", "remoteRef":"${{ github.sha }}", "namespace":"${{ env.DEPLOY_NAMESPACE }}", "disableDailyDbRefresh":${{ inputs.devNoDbRefresh }} }'
           waitForCompletionTimeout: 60m
 
   # -----------------------------------------------------------------